<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="46023">
<package pkgid="57a3b9ba4dee8c0570b294188680b4d8733c26017c0d012e992ed2472f5d202896b7b841200b519feaa76c72b82d187099612e6324e102b73e5b6f7aeaa483ef" name="0ad" arch="x86_64">
  <version epoch="0" ver="0.27.0" rel="bp160.1.2"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709899200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1714046400">- Add fix-boost-1.85-build.patch to fix build with boost 1.85.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1732276800">- Add 0ad-link-icu-76.patch: Fix build against ICU 76.x.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1734696000">- Replace wxWidgets-3_0-nostl-devel with wxWidgets-devel
  BuildRequires.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1739361600">- Update to 0.27.0
  * Vulkan Renderer
  * Multiplayer Savegames
  * Tips &amp; Tricks Page
  * Naval Overhaul
  * Observer Flares
  * New random maps: Foothills, Migration, Coast Range
  * New skirmish map: Isthmus of Corint
  * Updated skirmish maps: Watering Holes, Sporades Islands
  * New and updated art
- Remove obsolete patches:
  * 0ad-link-icu-76.patch
  * avoid_duplicate_global_symbol_from_asm.patch
  * no-version-check.patch
  * PrepareZoneForGC.patch
  * premake-no-automatic-rpath.patch
  * fix-gcc13-build.patch
  * fix-fmt10-build.patch
  * fix-boost-1.85-build.patch
- Add patch (as source as it is appliad via premake build script)
  * premake-disable-rpath.patch (replaces
    premake-no-automatic-rpath.patch)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1739880000">- Mention 0ad-rpmlintrc as source in specfile to make factory-auto happy</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1739880001">- Cleanup spec file.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740398400">- Add 0001-Enable-building-on-arbitrary-architectures.patch
  to make package succeed for openSUSE:Factory:RISCV/zSystems/PowerPC
- Build premake &amp; fcollada with smp_mflags as well</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1745668800">- Remove several evidently unused dependencies: libjpeg-devel,
  pkgconfig(IL), pkgconfig(gnutls), pkgconfig(libidn), and m4.
  Some of them seem to be added by the build system, so we have to
  remove them the hard way.
- Don't build on s390x: not relevant and doesn't build.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1746705600">- Only build on architectures supported by bundled premake, and add
  check to ensure we revisit that list when more architectures
  get supported (boo#1242266).</changelog>
</package>
<package pkgid="80dbe3939b335adf8400277d38018d8ced5a09d5b69ba805a578cbca46fd4c12962b151235bc77404c653fca68bb2c269cc77e0be8992d28c6afe721e9ba1887" name="0ad-data" arch="noarch">
  <version epoch="0" ver="0.27.0" rel="bp160.1.2"/>
  <changelog author="adam@mizerski.pl" date="1510056000">- Fixed license string.</changelog>
  <changelog author="mvetter@suse.com" date="1526644800">- Update to 0.0.23:
  + Sync with the game engine.</changelog>
  <changelog author="mvetter@suse.com" date="1526644801">- Use upstream site to download because sourceforge tarball is
  broken.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1545739200">- Update to 0.0.23b:
  See https://play0ad.com/re-release-of-0-a-d-alpha-23-ken-wood/</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1613908800">- Update to 0.0.24b:
  See https://play0ad.com/new-release-0-a-d-alpha-24-xsayarsa/</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1629115200">- Update to 0.0.25:
  See https://play0ad.com/new-release-0-a-d-alpha-25-yauna/</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1630238400">- Update to 0.0.25b:
  + Ranked matches did not longer grant points in the lobby.
  + Mod installation no longer require restart.
  + Mod installation no longer prints errors when installing mods by double-clicking
  + Mod installation now overwrites the existing mods to allow for easier updates.
  + Fishes are now easier to spot on lowest settings with the addition of seagulls.
  See https://wildfiregames.com/forum/topic/53714-re-release-of-0-ad-alpha-25-yauna/
- Increase disk size in _constraints to fix build error
  "No space left on device" in Leap and Tumbleweed.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1630584000">- Increase disk size again to fix build error for Leap 15.3.</changelog>
  <changelog author="C J &lt;c.j@tuta.io&gt;" date="1664193600">- Update to 0.0.26</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1738497600">- Update to 0.27.0
  See https://play0ad.com/new-release-0-a-d-alpha-27-agni/</changelog>
</package>
<package pkgid="13ad9fe76189b1fd64ee5c5c585edc4354aab0b335d3e1af6c5401f80c72dee23630b191dd86a3038986bd8b1e108594427cfb7f3bfbff506f562fa55b21e01e" name="2048-cli" arch="x86_64">
  <version epoch="0" ver="0.9.1+git.20181118" rel="bp160.1.15"/>
  <changelog author="mardnh@gmx.de" date="1547467200">- Initial package, version 0.9.1+git.20181118</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Generalize description, and adjust summary grammar.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709899200">- Use %autosetup macro. Allows us to eliminate the use of
  deprecated %patchN.</changelog>
</package>
<package pkgid="3faacadcad0327f8f830a3aca2356b3012422759661e2c80d14733e59ff7f8262425c40c2280a4af0652c2bf965f409c9d17299e36c711c9f838905efad7014b" name="2ping" arch="noarch">
  <version epoch="0" ver="4.5.1" rel="bp160.1.11"/>
  <changelog author="sean@suspend.net" date="1539000000">- Update to version 4.2
  * Added SIGHUP handling of listener processes
  * Added an example bash_completion script
  * Better cleanup handling of peer information</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549195200">- Update to version 4.3
  * Add --srv-service
  * Change --adaptive behavior to better match ping -A
  * Fix typos in manpage
- Ran spec-cleaner
- Fix rpmlint duplicate error with fdupes</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1593691200">- Update to version 4.5
  * Added PyCryptodome support (recommended over PyCrypto, though the latter is still detected/supported).
  * Replaced best_poller module with Python native selectors module.
  * Changed --flood output: dots/backspaces are no longer printed, and loss results / errors display full details.
  * --audible tones will only occur if stdout is a TTY.
  * Improved hostname/IP display edge cases.
  * Added an AF_UNIX --loopback test mode.
  * Listener sockets are added and removed as needed, instead of being re-created on each rescan.
  * Listener sockets are automatically rescanned periodically.
  * Multiple systemd sockets are now allowed.
  * A run can be both a listener and a client at the same time (mainly useful for smoke testing).
  * Other socket handling refactoring.
  * Other code refactoring.
  * Listener statistics are displayer per-bind.
  * Many, many testing/CI improvements.
- Remove groups in spec
- Package systemd service unit
- Add missing optional build requirements to enable all available options
- Some other clean up in spec</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594296000">- Change optional requirements to recommends since they just enhance the tool
- Use correct package names for the recommends</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1611576000">- use one python, not singlespec</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616414400">- Update to version 4.5.1
  * 2ping.bash_completion: Make more resilient to failure / missing
    features.
  * Minimum Python version changed from 3.5 to 3.6.
  * Minor no-op code and distribution updates.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1623672000">- python symbol is not provided by python 3, use proper python3</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628596800">- Added hardening to systemd service(s). Added patch(es):
  * harden_2ping.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696420800">- Remove dependency on /usr/bin/python3 using %python3_fix_shebang
  macro, bsc#1212476</changelog>
</package>
<package pkgid="92583370fb30808f3ff48df6530ce2eb29aaa23a7041163fb27e7437007be47f467c75774e7368635df0f498d245667ec1cd254aeb1fee8fc40edc6a8d3c6136" name="389-ds" arch="x86_64">
  <version epoch="0" ver="3.0.6~git249.6688af9b2" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1772107200">- bsc#1258727 - CVE-2025-14905 - heap buffer overflow due to improper size calculation in schema_attr_enum_callback
- Update to version 3.0.6~git249.6688af9b2:
  * Security fix for CVE-2025-14905
  * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278)
  * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)
  * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)
  * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs
  * Issue 7271 - plugins that create threads need to update  active thread count
  * Issue 5853 - Update concread to 0.5.10
  * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)
  * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)
  * Issue 7066/7052 - allow password history to be set to zero and remove history
  * Issue 7223 - Use lexicographical order for ancestorid (#7256)
  * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)
  * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)
  * Issue - CLI - dsctl db2index needs some hardening with MBD
  * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option
  * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)
  * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)
  * Issue 6947 - Fix health_system_indexes_test.py
  * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)
  * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)
  * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205)
  * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)
  * Issue 7223 - Add dsctl index-check command for offline index repair
  * Issue 7223 - Detect and log index ordering mismatch during backend startup
  * Issue 7223 - Add upgrade function to remove ancestorid index config entry
  * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid
  * Issue 7223 - Revert index scan limits for system indexes
  * Issue 6542 - RPM build errors on Fedora 42
  * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)
  * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
  * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
  * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
  * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
  * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
  * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
  * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
  * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
  * Issue 7172 - Index ordering mismatch after upgrade (#7173)
  * Issue - Revise paged result search locking
  * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
  * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)"
  * Issue 7160 - Add lib389 version sync check to configure (#7165)
  * Issue 7049 - RetroCL plugin generates invalid LDIF
  * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
  * Restore definition for slapi_entry_attr_get_valuearray
  * Issue 1793 - RFE - Dynamic lists - UI and CLI updates
  * Issue 7119 - Fix DNA shared config replication test (#7143)
  * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)
  * Issue 1793 - RFE - Implement dynamic lists
  * Issue 6753 - Port ticket tests
  * Issue 6753 - Port and fix ticket 47823 tests
  * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin
  * Issue 6753 - Port ticket test 48026
  * Issue 7128 - memory corruption in alias entry plugin (#7131)
  * Issue 7091 - Duplicate local password policy entries listed (#7092)
  * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)
  * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)
  * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)
  * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)
  * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)
  * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes
  * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)
  * Issue 7084 - UI - schema - sorting attributes breaks expanded row
  * Issue 7007 - Improve paged result search locking
  * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)
  * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)
  * Issue 6901 - Update changelog trimming logging - fix tests
  * Issue 6901 - Update changelog trimming logging
  * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)
  * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)
  * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)
  * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)
  * Issue 7078 - audit json logging does not encode binary values
  * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)
  * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)
  * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)
  * Issue 7071 - search filter (&amp;(cn:dn:=groups)) no longer returns results
  * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)
  * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters
  * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list
  * Issue 7059 - UI - unable to upload pem file
  * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)
  * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)
  * Issue 7044 - RFE - index sudoHost by default (#7046)
  * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)
  * Issue 7035 - RFE - memberOf - adding scoping for specific groups
  * Issue - CLI/UI - Add option to delete all replication conflict entries
  * Issue 7033 - lib389 -  basic plugin status not in JSON
  * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
  * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
  * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
  * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)
  * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)
  * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)
  * Issue 6954 - do not delete referrals on chain_on_update backend
  * Issue 7018 - BUG - prevent stack depth being hit (#7019)
  * Issue 6928 - The parentId attribute is indexed with improper matching rule
  * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935)
  * Issue 6904 - Fix config_test.py::test_lmdb_config
  * Issue 7014 - memberOf - ignored deferred updates with LMDB
  * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)
  * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)
  * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)
  * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)
  * Issue 6985 - Some logconv CI tests fail with BDB (#6986)
  * Issue 6891 - JSON logging - add wrapper function that checks for NULL
  * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)
  * Issue 6956 - More UI fixes
  * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks
  * Issue 6805 - RFE - Multiple backend entry cache tuning
  * Issue 6843 - Add CI tests for logconv.py (#6856)
  * Issue  - UI - update Radio handlers and LDAP entries last modified time
  * Issue 6660 - UI - Fix minor typo (#6955)
  * Issue 6910 - Fix latest coverity issues
  * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten… (#6920)
  * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)
  * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)
  * Issue 6936 - Make user/subtree policy creation idempotent (#6937)
  * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  * Issue 6848 - AddressSanitizer: leak in do_search
  * Issue 6850 - AddressSanitizer: memory leak in mdb_init
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry
  * Issue 6181 - RFE - Allow system to manage uid/gid at startup
  * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)
  * Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  * Issue 6468 - CLI - Fix default error log level
  * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
  * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)
  * Issue 6884 - Mask password hashes in audit logs (#6885)
  * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)
  * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)
  * Issue 6895 - Crash if repl keep alive entry can not be created
  * Issue 6893 - Log user that is updated during password modify extended operation
  * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773)
  * Issue 6888 - Missing access JSON logging for TLS/Client auth
  * Issue 6680 - instance read-only mode is broken (#6681)
  * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)
  * Issue 6872 - compressed log rotation creates files with world readable permission
  * Issue 6859 - str2filter is not fully applying matching rules
  * Issue 6868 - UI - schema attribute table expansion break after moving to a new page
  * Issue 6854 - Refactor for improved data management (#6855)
  * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)
  * Issue 6857 - uiduniq: allow specifying match rules in the filter
  * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
  * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)
  * Issue 6782 - Improve paged result locking
  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)
  * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy
  * Issue 6553 - Update concread to 0.5.6 (#6824)
  * Issue 1081 - Add a CI test (#6063)
  * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN
  * Issue 6791 - crash in liblmdb during instance shutdown (#6793)
  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)
  * Issue 6776 - Enabling audit log makes slapd coredump
  * Issue 6534 - CI fails with Fedora 41 and DNF5
  * Issue 6787 - Improve error message when bulk import connection is closed
  * Issue 6727 - RFE - database compaction interval should be persistent
  * Issue 6438 - Add basic dsidm organizational unit tests
  * Issue 6439 - Fix dsidm service get_dn option
  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)</changelog>
</package>
<package pkgid="03204c05b7f309b58b5cba3fca678055d6bd16b20610c8c4d5633758fcef1e6c184c68d30ba817d27236f8c4ce1a7f381641deca45e38c18c63ce5925d5810b8" name="389-ds" arch="x86_64">
  <version epoch="0" ver="3.0.6~git249.6688af9b2" rel="160000.2.1"/>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1772107200">- bsc#1258727 - CVE-2025-14905 - heap buffer overflow due to improper size calculation in schema_attr_enum_callback
- Update to version 3.0.6~git249.6688af9b2:
  * Security fix for CVE-2025-14905
  * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278)
  * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)
  * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)
  * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs
  * Issue 7271 - plugins that create threads need to update  active thread count
  * Issue 5853 - Update concread to 0.5.10
  * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)
  * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)
  * Issue 7066/7052 - allow password history to be set to zero and remove history
  * Issue 7223 - Use lexicographical order for ancestorid (#7256)
  * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)
  * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)
  * Issue - CLI - dsctl db2index needs some hardening with MBD
  * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option
  * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)
  * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)
  * Issue 6947 - Fix health_system_indexes_test.py
  * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)
  * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)
  * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205)
  * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)
  * Issue 7223 - Add dsctl index-check command for offline index repair
  * Issue 7223 - Detect and log index ordering mismatch during backend startup
  * Issue 7223 - Add upgrade function to remove ancestorid index config entry
  * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid
  * Issue 7223 - Revert index scan limits for system indexes
  * Issue 6542 - RPM build errors on Fedora 42
  * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)
  * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
  * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
  * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
  * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
  * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
  * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
  * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
  * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
  * Issue 7172 - Index ordering mismatch after upgrade (#7173)
  * Issue - Revise paged result search locking
  * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
  * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)"
  * Issue 7160 - Add lib389 version sync check to configure (#7165)
  * Issue 7049 - RetroCL plugin generates invalid LDIF
  * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
  * Restore definition for slapi_entry_attr_get_valuearray
  * Issue 1793 - RFE - Dynamic lists - UI and CLI updates
  * Issue 7119 - Fix DNA shared config replication test (#7143)
  * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)
  * Issue 1793 - RFE - Implement dynamic lists
  * Issue 6753 - Port ticket tests
  * Issue 6753 - Port and fix ticket 47823 tests
  * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin
  * Issue 6753 - Port ticket test 48026
  * Issue 7128 - memory corruption in alias entry plugin (#7131)
  * Issue 7091 - Duplicate local password policy entries listed (#7092)
  * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)
  * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)
  * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)
  * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)
  * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)
  * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes
  * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)
  * Issue 7084 - UI - schema - sorting attributes breaks expanded row
  * Issue 7007 - Improve paged result search locking
  * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)
  * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)
  * Issue 6901 - Update changelog trimming logging - fix tests
  * Issue 6901 - Update changelog trimming logging
  * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)
  * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)
  * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)
  * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)
  * Issue 7078 - audit json logging does not encode binary values
  * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)
  * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)
  * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)
  * Issue 7071 - search filter (&amp;(cn:dn:=groups)) no longer returns results
  * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)
  * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters
  * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list
  * Issue 7059 - UI - unable to upload pem file
  * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)
  * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)
  * Issue 7044 - RFE - index sudoHost by default (#7046)
  * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)
  * Issue 7035 - RFE - memberOf - adding scoping for specific groups
  * Issue - CLI/UI - Add option to delete all replication conflict entries
  * Issue 7033 - lib389 -  basic plugin status not in JSON
  * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
  * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
  * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
  * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)
  * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)
  * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)
  * Issue 6954 - do not delete referrals on chain_on_update backend
  * Issue 7018 - BUG - prevent stack depth being hit (#7019)
  * Issue 6928 - The parentId attribute is indexed with improper matching rule
  * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935)
  * Issue 6904 - Fix config_test.py::test_lmdb_config
  * Issue 7014 - memberOf - ignored deferred updates with LMDB
  * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)
  * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)
  * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)
  * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)
  * Issue 6985 - Some logconv CI tests fail with BDB (#6986)
  * Issue 6891 - JSON logging - add wrapper function that checks for NULL
  * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)
  * Issue 6956 - More UI fixes
  * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks
  * Issue 6805 - RFE - Multiple backend entry cache tuning
  * Issue 6843 - Add CI tests for logconv.py (#6856)
  * Issue  - UI - update Radio handlers and LDAP entries last modified time
  * Issue 6660 - UI - Fix minor typo (#6955)
  * Issue 6910 - Fix latest coverity issues
  * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten… (#6920)
  * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)
  * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)
  * Issue 6936 - Make user/subtree policy creation idempotent (#6937)
  * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  * Issue 6848 - AddressSanitizer: leak in do_search
  * Issue 6850 - AddressSanitizer: memory leak in mdb_init
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry
  * Issue 6181 - RFE - Allow system to manage uid/gid at startup
  * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)
  * Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  * Issue 6468 - CLI - Fix default error log level
  * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
  * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)
  * Issue 6884 - Mask password hashes in audit logs (#6885)
  * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)
  * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)
  * Issue 6895 - Crash if repl keep alive entry can not be created
  * Issue 6893 - Log user that is updated during password modify extended operation
  * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773)
  * Issue 6888 - Missing access JSON logging for TLS/Client auth
  * Issue 6680 - instance read-only mode is broken (#6681)
  * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)
  * Issue 6872 - compressed log rotation creates files with world readable permission
  * Issue 6859 - str2filter is not fully applying matching rules
  * Issue 6868 - UI - schema attribute table expansion break after moving to a new page
  * Issue 6854 - Refactor for improved data management (#6855)
  * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)
  * Issue 6857 - uiduniq: allow specifying match rules in the filter
  * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
  * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)
  * Issue 6782 - Improve paged result locking
  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)
  * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy
  * Issue 6553 - Update concread to 0.5.6 (#6824)
  * Issue 1081 - Add a CI test (#6063)
  * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN
  * Issue 6791 - crash in liblmdb during instance shutdown (#6793)
  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)
  * Issue 6776 - Enabling audit log makes slapd coredump
  * Issue 6534 - CI fails with Fedora 41 and DNF5
  * Issue 6787 - Improve error message when bulk import connection is closed
  * Issue 6727 - RFE - database compaction interval should be persistent
  * Issue 6438 - Add basic dsidm organizational unit tests
  * Issue 6439 - Fix dsidm service get_dn option
  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)</changelog>
</package>
<package pkgid="86d18bf884fb43f2b8024845d6b05b53893d5acf7f70d204af0b9238ce2eb97fa7c368e3b8eabf126531b8b6b2d0921ad3918b1efbea13e64e27a0b5ae2b50b7" name="389-ds" arch="x86_64">
  <version epoch="0" ver="3.0.6~git86.dce421a0d" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
</package>
<package pkgid="2fc02b4d3df801463fae5e31af47663299feec7bc86dd99329f50c0b3fa6e77b9dcf3b2ffb697ece637023fdf701521c1bb6de30191b736c2bcdf38b4f21ee47" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="3.0.6~git249.6688af9b2" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1772107200">- bsc#1258727 - CVE-2025-14905 - heap buffer overflow due to improper size calculation in schema_attr_enum_callback
- Update to version 3.0.6~git249.6688af9b2:
  * Security fix for CVE-2025-14905
  * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278)
  * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)
  * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)
  * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs
  * Issue 7271 - plugins that create threads need to update  active thread count
  * Issue 5853 - Update concread to 0.5.10
  * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)
  * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)
  * Issue 7066/7052 - allow password history to be set to zero and remove history
  * Issue 7223 - Use lexicographical order for ancestorid (#7256)
  * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)
  * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)
  * Issue - CLI - dsctl db2index needs some hardening with MBD
  * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option
  * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)
  * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)
  * Issue 6947 - Fix health_system_indexes_test.py
  * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)
  * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)
  * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205)
  * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)
  * Issue 7223 - Add dsctl index-check command for offline index repair
  * Issue 7223 - Detect and log index ordering mismatch during backend startup
  * Issue 7223 - Add upgrade function to remove ancestorid index config entry
  * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid
  * Issue 7223 - Revert index scan limits for system indexes
  * Issue 6542 - RPM build errors on Fedora 42
  * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)
  * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
  * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
  * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
  * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
  * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
  * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
  * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
  * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
  * Issue 7172 - Index ordering mismatch after upgrade (#7173)
  * Issue - Revise paged result search locking
  * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
  * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)"
  * Issue 7160 - Add lib389 version sync check to configure (#7165)
  * Issue 7049 - RetroCL plugin generates invalid LDIF
  * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
  * Restore definition for slapi_entry_attr_get_valuearray
  * Issue 1793 - RFE - Dynamic lists - UI and CLI updates
  * Issue 7119 - Fix DNA shared config replication test (#7143)
  * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)
  * Issue 1793 - RFE - Implement dynamic lists
  * Issue 6753 - Port ticket tests
  * Issue 6753 - Port and fix ticket 47823 tests
  * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin
  * Issue 6753 - Port ticket test 48026
  * Issue 7128 - memory corruption in alias entry plugin (#7131)
  * Issue 7091 - Duplicate local password policy entries listed (#7092)
  * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)
  * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)
  * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)
  * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)
  * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)
  * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes
  * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)
  * Issue 7084 - UI - schema - sorting attributes breaks expanded row
  * Issue 7007 - Improve paged result search locking
  * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)
  * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)
  * Issue 6901 - Update changelog trimming logging - fix tests
  * Issue 6901 - Update changelog trimming logging
  * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)
  * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)
  * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)
  * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)
  * Issue 7078 - audit json logging does not encode binary values
  * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)
  * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)
  * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)
  * Issue 7071 - search filter (&amp;(cn:dn:=groups)) no longer returns results
  * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)
  * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters
  * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list
  * Issue 7059 - UI - unable to upload pem file
  * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)
  * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)
  * Issue 7044 - RFE - index sudoHost by default (#7046)
  * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)
  * Issue 7035 - RFE - memberOf - adding scoping for specific groups
  * Issue - CLI/UI - Add option to delete all replication conflict entries
  * Issue 7033 - lib389 -  basic plugin status not in JSON
  * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
  * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
  * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
  * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)
  * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)
  * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)
  * Issue 6954 - do not delete referrals on chain_on_update backend
  * Issue 7018 - BUG - prevent stack depth being hit (#7019)
  * Issue 6928 - The parentId attribute is indexed with improper matching rule
  * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935)
  * Issue 6904 - Fix config_test.py::test_lmdb_config
  * Issue 7014 - memberOf - ignored deferred updates with LMDB
  * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)
  * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)
  * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)
  * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)
  * Issue 6985 - Some logconv CI tests fail with BDB (#6986)
  * Issue 6891 - JSON logging - add wrapper function that checks for NULL
  * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)
  * Issue 6956 - More UI fixes
  * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks
  * Issue 6805 - RFE - Multiple backend entry cache tuning
  * Issue 6843 - Add CI tests for logconv.py (#6856)
  * Issue  - UI - update Radio handlers and LDAP entries last modified time
  * Issue 6660 - UI - Fix minor typo (#6955)
  * Issue 6910 - Fix latest coverity issues
  * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten… (#6920)
  * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)
  * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)
  * Issue 6936 - Make user/subtree policy creation idempotent (#6937)
  * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  * Issue 6848 - AddressSanitizer: leak in do_search
  * Issue 6850 - AddressSanitizer: memory leak in mdb_init
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry
  * Issue 6181 - RFE - Allow system to manage uid/gid at startup
  * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)
  * Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  * Issue 6468 - CLI - Fix default error log level
  * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
  * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)
  * Issue 6884 - Mask password hashes in audit logs (#6885)
  * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)
  * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)
  * Issue 6895 - Crash if repl keep alive entry can not be created
  * Issue 6893 - Log user that is updated during password modify extended operation
  * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773)
  * Issue 6888 - Missing access JSON logging for TLS/Client auth
  * Issue 6680 - instance read-only mode is broken (#6681)
  * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)
  * Issue 6872 - compressed log rotation creates files with world readable permission
  * Issue 6859 - str2filter is not fully applying matching rules
  * Issue 6868 - UI - schema attribute table expansion break after moving to a new page
  * Issue 6854 - Refactor for improved data management (#6855)
  * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)
  * Issue 6857 - uiduniq: allow specifying match rules in the filter
  * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
  * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)
  * Issue 6782 - Improve paged result locking
  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)
  * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy
  * Issue 6553 - Update concread to 0.5.6 (#6824)
  * Issue 1081 - Add a CI test (#6063)
  * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN
  * Issue 6791 - crash in liblmdb during instance shutdown (#6793)
  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)
  * Issue 6776 - Enabling audit log makes slapd coredump
  * Issue 6534 - CI fails with Fedora 41 and DNF5
  * Issue 6787 - Improve error message when bulk import connection is closed
  * Issue 6727 - RFE - database compaction interval should be persistent
  * Issue 6438 - Add basic dsidm organizational unit tests
  * Issue 6439 - Fix dsidm service get_dn option
  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)</changelog>
</package>
<package pkgid="d8d92f176db35f0e56037f9a92e0ac6ff4931e0941e4fad1b50549069846cd158c98fa481e56bb5a4a38157a107ca5cb969dba7bcfc9e1bba6b081ac1fcffea3" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="3.0.6~git249.6688af9b2" rel="160000.2.1"/>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1772107200">- bsc#1258727 - CVE-2025-14905 - heap buffer overflow due to improper size calculation in schema_attr_enum_callback
- Update to version 3.0.6~git249.6688af9b2:
  * Security fix for CVE-2025-14905
  * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278)
  * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)
  * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)
  * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs
  * Issue 7271 - plugins that create threads need to update  active thread count
  * Issue 5853 - Update concread to 0.5.10
  * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)
  * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)
  * Issue 7066/7052 - allow password history to be set to zero and remove history
  * Issue 7223 - Use lexicographical order for ancestorid (#7256)
  * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)
  * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)
  * Issue - CLI - dsctl db2index needs some hardening with MBD
  * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option
  * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)
  * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)
  * Issue 6947 - Fix health_system_indexes_test.py
  * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)
  * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)
  * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205)
  * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)
  * Issue 7223 - Add dsctl index-check command for offline index repair
  * Issue 7223 - Detect and log index ordering mismatch during backend startup
  * Issue 7223 - Add upgrade function to remove ancestorid index config entry
  * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid
  * Issue 7223 - Revert index scan limits for system indexes
  * Issue 6542 - RPM build errors on Fedora 42
  * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)
  * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
  * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
  * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
  * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
  * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
  * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
  * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
  * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
  * Issue 7172 - Index ordering mismatch after upgrade (#7173)
  * Issue - Revise paged result search locking
  * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
  * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)"
  * Issue 7160 - Add lib389 version sync check to configure (#7165)
  * Issue 7049 - RetroCL plugin generates invalid LDIF
  * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
  * Restore definition for slapi_entry_attr_get_valuearray
  * Issue 1793 - RFE - Dynamic lists - UI and CLI updates
  * Issue 7119 - Fix DNA shared config replication test (#7143)
  * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)
  * Issue 1793 - RFE - Implement dynamic lists
  * Issue 6753 - Port ticket tests
  * Issue 6753 - Port and fix ticket 47823 tests
  * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin
  * Issue 6753 - Port ticket test 48026
  * Issue 7128 - memory corruption in alias entry plugin (#7131)
  * Issue 7091 - Duplicate local password policy entries listed (#7092)
  * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)
  * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)
  * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)
  * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)
  * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)
  * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes
  * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)
  * Issue 7084 - UI - schema - sorting attributes breaks expanded row
  * Issue 7007 - Improve paged result search locking
  * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)
  * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)
  * Issue 6901 - Update changelog trimming logging - fix tests
  * Issue 6901 - Update changelog trimming logging
  * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)
  * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)
  * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)
  * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)
  * Issue 7078 - audit json logging does not encode binary values
  * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)
  * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)
  * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)
  * Issue 7071 - search filter (&amp;(cn:dn:=groups)) no longer returns results
  * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)
  * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters
  * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list
  * Issue 7059 - UI - unable to upload pem file
  * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)
  * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)
  * Issue 7044 - RFE - index sudoHost by default (#7046)
  * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)
  * Issue 7035 - RFE - memberOf - adding scoping for specific groups
  * Issue - CLI/UI - Add option to delete all replication conflict entries
  * Issue 7033 - lib389 -  basic plugin status not in JSON
  * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
  * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
  * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
  * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)
  * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)
  * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)
  * Issue 6954 - do not delete referrals on chain_on_update backend
  * Issue 7018 - BUG - prevent stack depth being hit (#7019)
  * Issue 6928 - The parentId attribute is indexed with improper matching rule
  * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935)
  * Issue 6904 - Fix config_test.py::test_lmdb_config
  * Issue 7014 - memberOf - ignored deferred updates with LMDB
  * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)
  * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)
  * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)
  * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)
  * Issue 6985 - Some logconv CI tests fail with BDB (#6986)
  * Issue 6891 - JSON logging - add wrapper function that checks for NULL
  * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)
  * Issue 6956 - More UI fixes
  * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks
  * Issue 6805 - RFE - Multiple backend entry cache tuning
  * Issue 6843 - Add CI tests for logconv.py (#6856)
  * Issue  - UI - update Radio handlers and LDAP entries last modified time
  * Issue 6660 - UI - Fix minor typo (#6955)
  * Issue 6910 - Fix latest coverity issues
  * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten… (#6920)
  * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)
  * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)
  * Issue 6936 - Make user/subtree policy creation idempotent (#6937)
  * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  * Issue 6848 - AddressSanitizer: leak in do_search
  * Issue 6850 - AddressSanitizer: memory leak in mdb_init
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry
  * Issue 6181 - RFE - Allow system to manage uid/gid at startup
  * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)
  * Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  * Issue 6468 - CLI - Fix default error log level
  * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
  * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)
  * Issue 6884 - Mask password hashes in audit logs (#6885)
  * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)
  * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)
  * Issue 6895 - Crash if repl keep alive entry can not be created
  * Issue 6893 - Log user that is updated during password modify extended operation
  * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773)
  * Issue 6888 - Missing access JSON logging for TLS/Client auth
  * Issue 6680 - instance read-only mode is broken (#6681)
  * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)
  * Issue 6872 - compressed log rotation creates files with world readable permission
  * Issue 6859 - str2filter is not fully applying matching rules
  * Issue 6868 - UI - schema attribute table expansion break after moving to a new page
  * Issue 6854 - Refactor for improved data management (#6855)
  * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)
  * Issue 6857 - uiduniq: allow specifying match rules in the filter
  * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
  * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)
  * Issue 6782 - Improve paged result locking
  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)
  * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy
  * Issue 6553 - Update concread to 0.5.6 (#6824)
  * Issue 1081 - Add a CI test (#6063)
  * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN
  * Issue 6791 - crash in liblmdb during instance shutdown (#6793)
  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)
  * Issue 6776 - Enabling audit log makes slapd coredump
  * Issue 6534 - CI fails with Fedora 41 and DNF5
  * Issue 6787 - Improve error message when bulk import connection is closed
  * Issue 6727 - RFE - database compaction interval should be persistent
  * Issue 6438 - Add basic dsidm organizational unit tests
  * Issue 6439 - Fix dsidm service get_dn option
  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)</changelog>
</package>
<package pkgid="15d1fb92f51c4b6e778e8a4ffafc9821a27324f2a2c6c08695a5157d1d0ad0d4ad8557b11a9fb3a0b474cdcdfc7efd13996f2a6ff9a49ff9b40693073c728bf5" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="3.0.6~git86.dce421a0d" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
</package>
<package pkgid="b7a9f68f7f12bb5ae92db903e79d69c633a14e12f0c2dbee139961192f57e0e97bfc31e62612248f7a328bbbc3c8e3419a7cabc0121fd774002c09d4d56cb4d4" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="3.0.6~git249.6688af9b2" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1772107200">- bsc#1258727 - CVE-2025-14905 - heap buffer overflow due to improper size calculation in schema_attr_enum_callback
- Update to version 3.0.6~git249.6688af9b2:
  * Security fix for CVE-2025-14905
  * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278)
  * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)
  * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)
  * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs
  * Issue 7271 - plugins that create threads need to update  active thread count
  * Issue 5853 - Update concread to 0.5.10
  * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)
  * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)
  * Issue 7066/7052 - allow password history to be set to zero and remove history
  * Issue 7223 - Use lexicographical order for ancestorid (#7256)
  * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)
  * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)
  * Issue - CLI - dsctl db2index needs some hardening with MBD
  * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option
  * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)
  * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)
  * Issue 6947 - Fix health_system_indexes_test.py
  * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)
  * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)
  * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205)
  * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)
  * Issue 7223 - Add dsctl index-check command for offline index repair
  * Issue 7223 - Detect and log index ordering mismatch during backend startup
  * Issue 7223 - Add upgrade function to remove ancestorid index config entry
  * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid
  * Issue 7223 - Revert index scan limits for system indexes
  * Issue 6542 - RPM build errors on Fedora 42
  * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)
  * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
  * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
  * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
  * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
  * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
  * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
  * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
  * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
  * Issue 7172 - Index ordering mismatch after upgrade (#7173)
  * Issue - Revise paged result search locking
  * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
  * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)"
  * Issue 7160 - Add lib389 version sync check to configure (#7165)
  * Issue 7049 - RetroCL plugin generates invalid LDIF
  * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
  * Restore definition for slapi_entry_attr_get_valuearray
  * Issue 1793 - RFE - Dynamic lists - UI and CLI updates
  * Issue 7119 - Fix DNA shared config replication test (#7143)
  * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)
  * Issue 1793 - RFE - Implement dynamic lists
  * Issue 6753 - Port ticket tests
  * Issue 6753 - Port and fix ticket 47823 tests
  * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin
  * Issue 6753 - Port ticket test 48026
  * Issue 7128 - memory corruption in alias entry plugin (#7131)
  * Issue 7091 - Duplicate local password policy entries listed (#7092)
  * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)
  * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)
  * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)
  * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)
  * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)
  * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes
  * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)
  * Issue 7084 - UI - schema - sorting attributes breaks expanded row
  * Issue 7007 - Improve paged result search locking
  * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)
  * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)
  * Issue 6901 - Update changelog trimming logging - fix tests
  * Issue 6901 - Update changelog trimming logging
  * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)
  * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)
  * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)
  * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)
  * Issue 7078 - audit json logging does not encode binary values
  * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)
  * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)
  * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)
  * Issue 7071 - search filter (&amp;(cn:dn:=groups)) no longer returns results
  * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)
  * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters
  * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list
  * Issue 7059 - UI - unable to upload pem file
  * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)
  * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)
  * Issue 7044 - RFE - index sudoHost by default (#7046)
  * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)
  * Issue 7035 - RFE - memberOf - adding scoping for specific groups
  * Issue - CLI/UI - Add option to delete all replication conflict entries
  * Issue 7033 - lib389 -  basic plugin status not in JSON
  * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
  * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
  * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
  * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)
  * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)
  * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)
  * Issue 6954 - do not delete referrals on chain_on_update backend
  * Issue 7018 - BUG - prevent stack depth being hit (#7019)
  * Issue 6928 - The parentId attribute is indexed with improper matching rule
  * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935)
  * Issue 6904 - Fix config_test.py::test_lmdb_config
  * Issue 7014 - memberOf - ignored deferred updates with LMDB
  * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)
  * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)
  * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)
  * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)
  * Issue 6985 - Some logconv CI tests fail with BDB (#6986)
  * Issue 6891 - JSON logging - add wrapper function that checks for NULL
  * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)
  * Issue 6956 - More UI fixes
  * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks
  * Issue 6805 - RFE - Multiple backend entry cache tuning
  * Issue 6843 - Add CI tests for logconv.py (#6856)
  * Issue  - UI - update Radio handlers and LDAP entries last modified time
  * Issue 6660 - UI - Fix minor typo (#6955)
  * Issue 6910 - Fix latest coverity issues
  * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten… (#6920)
  * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)
  * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)
  * Issue 6936 - Make user/subtree policy creation idempotent (#6937)
  * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  * Issue 6848 - AddressSanitizer: leak in do_search
  * Issue 6850 - AddressSanitizer: memory leak in mdb_init
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry
  * Issue 6181 - RFE - Allow system to manage uid/gid at startup
  * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)
  * Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  * Issue 6468 - CLI - Fix default error log level
  * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
  * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)
  * Issue 6884 - Mask password hashes in audit logs (#6885)
  * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)
  * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)
  * Issue 6895 - Crash if repl keep alive entry can not be created
  * Issue 6893 - Log user that is updated during password modify extended operation
  * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773)
  * Issue 6888 - Missing access JSON logging for TLS/Client auth
  * Issue 6680 - instance read-only mode is broken (#6681)
  * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)
  * Issue 6872 - compressed log rotation creates files with world readable permission
  * Issue 6859 - str2filter is not fully applying matching rules
  * Issue 6868 - UI - schema attribute table expansion break after moving to a new page
  * Issue 6854 - Refactor for improved data management (#6855)
  * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)
  * Issue 6857 - uiduniq: allow specifying match rules in the filter
  * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
  * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)
  * Issue 6782 - Improve paged result locking
  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)
  * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy
  * Issue 6553 - Update concread to 0.5.6 (#6824)
  * Issue 1081 - Add a CI test (#6063)
  * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN
  * Issue 6791 - crash in liblmdb during instance shutdown (#6793)
  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)
  * Issue 6776 - Enabling audit log makes slapd coredump
  * Issue 6534 - CI fails with Fedora 41 and DNF5
  * Issue 6787 - Improve error message when bulk import connection is closed
  * Issue 6727 - RFE - database compaction interval should be persistent
  * Issue 6438 - Add basic dsidm organizational unit tests
  * Issue 6439 - Fix dsidm service get_dn option
  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)</changelog>
</package>
<package pkgid="b71c76386f2cb9cc669590d86a5693ddd5fbe04c12af25204d50c23fc859cfd9ccd2ecc3382a5ea232932b5d5d94aeeb58a814bd081a7292ff9242dd7185286c" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="3.0.6~git249.6688af9b2" rel="160000.2.1"/>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1772107200">- bsc#1258727 - CVE-2025-14905 - heap buffer overflow due to improper size calculation in schema_attr_enum_callback
- Update to version 3.0.6~git249.6688af9b2:
  * Security fix for CVE-2025-14905
  * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278)
  * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)
  * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)
  * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs
  * Issue 7271 - plugins that create threads need to update  active thread count
  * Issue 5853 - Update concread to 0.5.10
  * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)
  * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)
  * Issue 7066/7052 - allow password history to be set to zero and remove history
  * Issue 7223 - Use lexicographical order for ancestorid (#7256)
  * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)
  * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)
  * Issue - CLI - dsctl db2index needs some hardening with MBD
  * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option
  * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)
  * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)
  * Issue 6947 - Fix health_system_indexes_test.py
  * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)
  * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)
  * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205)
  * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)
  * Issue 7223 - Add dsctl index-check command for offline index repair
  * Issue 7223 - Detect and log index ordering mismatch during backend startup
  * Issue 7223 - Add upgrade function to remove ancestorid index config entry
  * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid
  * Issue 7223 - Revert index scan limits for system indexes
  * Issue 6542 - RPM build errors on Fedora 42
  * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)
  * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)
  * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)
  * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)
  * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated
  * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202)
  * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits
  * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)
  * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)
  * Issue 7172 - Index ordering mismatch after upgrade (#7173)
  * Issue - Revise paged result search locking
  * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145)
  * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)"
  * Issue 7160 - Add lib389 version sync check to configure (#7165)
  * Issue 7049 - RetroCL plugin generates invalid LDIF
  * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)
  * Restore definition for slapi_entry_attr_get_valuearray
  * Issue 1793 - RFE - Dynamic lists - UI and CLI updates
  * Issue 7119 - Fix DNA shared config replication test (#7143)
  * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)
  * Issue 1793 - RFE - Implement dynamic lists
  * Issue 6753 - Port ticket tests
  * Issue 6753 - Port and fix ticket 47823 tests
  * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin
  * Issue 6753 - Port ticket test 48026
  * Issue 7128 - memory corruption in alias entry plugin (#7131)
  * Issue 7091 - Duplicate local password policy entries listed (#7092)
  * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)
  * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)
  * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)
  * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)
  * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)
  * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes
  * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)
  * Issue 7084 - UI - schema - sorting attributes breaks expanded row
  * Issue 7007 - Improve paged result search locking
  * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)
  * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)
  * Issue 6901 - Update changelog trimming logging - fix tests
  * Issue 6901 - Update changelog trimming logging
  * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)
  * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)
  * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)
  * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)
  * Issue 7078 - audit json logging does not encode binary values
  * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)
  * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)
  * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)
  * Issue 7071 - search filter (&amp;(cn:dn:=groups)) no longer returns results
  * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)
  * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters
  * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list
  * Issue 7059 - UI - unable to upload pem file
  * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)
  * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)
  * Issue 7044 - RFE - index sudoHost by default (#7046)
  * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)
  * Issue 7035 - RFE - memberOf - adding scoping for specific groups
  * Issue - CLI/UI - Add option to delete all replication conflict entries
  * Issue 7033 - lib389 -  basic plugin status not in JSON
  * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI
  * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)
  * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)
  * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)
  * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)
  * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)
  * Issue 6954 - do not delete referrals on chain_on_update backend
  * Issue 7018 - BUG - prevent stack depth being hit (#7019)
  * Issue 6928 - The parentId attribute is indexed with improper matching rule
  * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935)
  * Issue 6904 - Fix config_test.py::test_lmdb_config
  * Issue 7014 - memberOf - ignored deferred updates with LMDB
  * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)
  * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)
  * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)
  * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)
  * Issue 6985 - Some logconv CI tests fail with BDB (#6986)
  * Issue 6891 - JSON logging - add wrapper function that checks for NULL
  * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)
  * Issue 6956 - More UI fixes
  * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks
  * Issue 6805 - RFE - Multiple backend entry cache tuning
  * Issue 6843 - Add CI tests for logconv.py (#6856)
  * Issue  - UI - update Radio handlers and LDAP entries last modified time
  * Issue 6660 - UI - Fix minor typo (#6955)
  * Issue 6910 - Fix latest coverity issues
  * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten… (#6920)
  * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)
  * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)
  * Issue 6936 - Make user/subtree policy creation idempotent (#6937)
  * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  * Issue 6848 - AddressSanitizer: leak in do_search
  * Issue 6850 - AddressSanitizer: memory leak in mdb_init
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2
  * Issue 6778 - Memory leak in roles_cache_create_object_from_entry
  * Issue 6181 - RFE - Allow system to manage uid/gid at startup
  * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)
  * Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  * Issue 6468 - CLI - Fix default error log level
  * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)
  * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)
  * Issue 6884 - Mask password hashes in audit logs (#6885)
  * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)
  * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)
  * Issue 6895 - Crash if repl keep alive entry can not be created
  * Issue 6893 - Log user that is updated during password modify extended operation
  * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773)
  * Issue 6888 - Missing access JSON logging for TLS/Client auth
  * Issue 6680 - instance read-only mode is broken (#6681)
  * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)
  * Issue 6872 - compressed log rotation creates files with world readable permission
  * Issue 6859 - str2filter is not fully applying matching rules
  * Issue 6868 - UI - schema attribute table expansion break after moving to a new page
  * Issue 6854 - Refactor for improved data management (#6855)
  * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)
  * Issue 6857 - uiduniq: allow specifying match rules in the filter
  * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9
  * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)
  * Issue 6782 - Improve paged result locking
  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)
  * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)
  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy
  * Issue 6553 - Update concread to 0.5.6 (#6824)
  * Issue 1081 - Add a CI test (#6063)
  * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN
  * Issue 6791 - crash in liblmdb during instance shutdown (#6793)
  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)
  * Issue 6776 - Enabling audit log makes slapd coredump
  * Issue 6534 - CI fails with Fedora 41 and DNF5
  * Issue 6787 - Improve error message when bulk import connection is closed
  * Issue 6727 - RFE - database compaction interval should be persistent
  * Issue 6438 - Add basic dsidm organizational unit tests
  * Issue 6439 - Fix dsidm service get_dn option
  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)</changelog>
</package>
<package pkgid="c2b35da568f8b46c3a4fc91db35eab68ea2d67d2439120b48678b46bf4293ee1d74dd5b060f6716975f8d4766fb7ca84e90a3862f3d5c492c238623697fc174e" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="3.0.6~git86.dce421a0d" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1701259200">- bsc#1217581 - Replica ID cannot be specified for consumer and hub roles
- Update to version 2.2.8~git51.3688d68:
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-connta…  …blesize (#5963)
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5956 - After an upgrade the server won't start - nsslapd-conntablesize (#5957)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5853 - Revert MSRV check (#5908)
  * Issue 5722 - improve testcase (#5904)
  * Bug Description:
  * Issue 5858 - WebUI monitoring test fails to run</changelog>
  <changelog author="william.brown@suse.com" date="1707825600">- bsc#1219836 - CVE-2024-1062 - #5647 - resolve possible denial of service when audit
  logging is enabled
- Update to version 2.2.8~git65.347aae6:
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1723464000">- bsc#1225512 - VUL-0: CVE-2024-3657: 389-ds: potential denial of
  service via specially crafted kerberos AS-REQ request
- bsc#1226277 - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword
  hashes may cause a denial of service
- bsc#1228912 - 389ds crash when user does change password using
  iso-8859-1 encoding
- Update to version 2.2.10~git2.345056d3:
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime
  * Bump version to 2.2.10
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199 (bsc#1225507)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 5487 - Fix various isses with logconv.pl (#6085)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Issue 6034 - Change replica_id from str to int
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Issue 5954 - Disable Transparent Huge Pages</changelog>
  <changelog author="william.brown@suse.com" date="1742558400">- Update to version 3.0.6~git44.6c2cef0d:
  * Issue 6663 - CLI - add error log JSON settings to dsconf
  * Issue 6663 - RFE - Add option to write error log in JSON
  * Issue 6665 - UI - Need to refresh log settings after saving
  * Issue 6639 - Fix crash in upgrade when removing subtree name attribute
  * Issue 6568 - Fix failing webUI tests
  * Issue 6656 - UI - Enhance Monitor Log Viewer with Patternfly LogViewer component (#6657)
  * Issue 6655 - fix replication release replica decoding error
  * Issue  6653 - Cleanup error messages
  * Issue 6639 - remove all the code related to entryrdn_get_switch
  * Issue 6429 - UI - clicking on a database suffix under the Monitor tab crashes UI (#6610)
  * Issue 6632 - Replication init fails with ASAN build
  * Issue 6625 - UI - various fixes part 3
  * Issue 6625 - UI - fix next round of bugs
  * Issue 6625 - UI - fix various issues with LDAP browser, etc
  * Issue 6553 - Update concread to 0.5.4 and refactor statistics tracking (#6607)
  * Bump esbuild from 0.24.0 to 0.25.0 in /src/cockpit/389-console (#6602)
  * Issue 6599 - Access JSON logging - lib389/CI/minor fixes
  * Issue 6615 - test_custom_path CI test fails (#6616)
  * Issue 6619 - test_dblib_migration fails on RHEL10 (#6620)
  * Issue 6617 - test_vlv_as_freeipa_backup_restore fails (#6618)
  * Issue 6207 - Random crash in test_long_rdn CI test (#6215)
  * Issue 6623 - UI - Generic updates (#6624)
  * Issue 6611 - db_home_test.py CI tests should be skipped on lmdb (#6612)
  * Issue 6561 - TLS 1.2 stickiness in FIPS mode
  * Issue 6599 - Implement option to write access log in jSON
  * Issue 6367 - RFE support of Session Tracking Control internet draft (#6403)
  * Issue 6596 - BUG - Compilation Regresion (#6597)
  * Issue 6554 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) (#6582)
  * Issue 6229 - After an initial failure, subsequent online backups fail (#6230)
  * Issue 6574 - Move pblock access from switch to func table
  * Bump openssl from 0.10.66 to 0.10.70 in /src
  * Issue 6258 - Mitigate race condition in paged_results_test.py (#6433)
  * Issue 6566 - RI plugin failure to handle a modrdn for rename of member of multiple groups (#6567)
  * Issue 6436 - MOD on a large group slow if substring index is present (#6437)
  * Issue 6489 - After log rotation refresh the FD pointer
  * Issue 6465 - Create optional meta-package for replication reporting dependencies (#6560)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6374 - nsslapd-mdb-max-dbs autotuning doesn't work properly (#6400)
  * Issue 6476 - Fix build failure with GCC 15
  * Issue 6468 - Fix building for older versions of Python
  * Issue 4815 - RFE - Add Replication Log Analysis Tool with CLI Support (#6466)
  * Issue 6544 - logconv.py: python3-magic conflicts with python3-file-magic
  * Issue 6446 - Fix test_acct_policy_consumer test to wait enough for lastLoginHistory update (#6530)
  * Bump version to 3.0.6
  * Issue 3342 - RFE logconv.pl should have a replacement in CLI tools (#6444)
  * Issue 6516 - Allow to configure the password scheme not updated on bind (#6517)
  * Issue 6509 - Race condition with Paged Result searches
  * Issue 6191 - Node.js 16 actions are deprecated
  * Issue 6453 - (cont) Fix memory leaks in entryrdn (#6504)
  * Issue 6481 - UI - When ports that are in use are used to update a DS instance the error message is not helpful (#6482)
  * Issue 6497 - lib389 - Configure replication for multiple suffixes (#6498)
  * Issue 6453 - Fix memory leaks in entryrdn
  * Issue 6470 - Some replication status data are reset upon a restart (#6471)
  * Issue 6386 - backup/restore broken after db log rotation (#6406)
  * Issue 6490 - Add a new macro function and print rounds on startup (#6496)
  * Issue 6494 - Various errors when using extended matching rule on vlv sort filter (#6495)
  * Issue 6417 - (3rd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6480)
  * Issue 6490 - Remove the rust error log message for pbkdf2 rounds
  * Issue 6485 - Fix double free in USN cleanup task
  * Issue 6483 - CI - fix filter_test - test_match_large_valueset
  * Issue 6269 - RFE - Add nsslapd-pwdPBKDF2Rounds configuration to PBKDF2-* plugins (#6447)
  * Issue 6375 - UI - Update cockpit.js code to the latest version (#6376)
  * Issue 6372 - Deadlock while doing online backup (#6475)
  * Issue 6468 - CLI - Remove security log settings that don't exist
  * Issue 6468 - RFE - CLI - Add logging settings to dsconf
  * Issue 6472 - CLI - Improve error message format
  * Issue 6417 - (2nd) If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6460)
  * Issue 6368 - Fix crash when testing access json logging
  * Issue 6442 - Fix latest covscan memory leaks (part 2)
  * Issue 6442 - Fix latest covscan memory leaks
  * Bump version to 3.0.5
  * Issue 3555 - UI - Fix issues reported by npm audit
  * Issue 6368 - fix basic test suite
  * Issue 6446 - on replica consumer, account policy plugin fails to manage the last login history (#6448)
  * Issue 6432 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set
  * Issue 5798 - Fix dsconf config multi-valued attr operations (#6426)
  * Issue 6302 - Allow to run replication status without a prompt (#6410)
  * Issue  6268 - write access log format infrastructure (part 1)
  * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264)
  * Issue 6238 - RFE - add option to write audit log in JSON format
  * Issue 6427 - fix various memory leaks
  * Issue 6417 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex (#6418)
  * Issue 6340 - RFE - extract keys once (#6413)
  * Issue 6415 - BUG - Incorrect icu linking (#6416)
  * Issue 6258 - Resolve race condition for two tests in health_config.py
  * Issue 6404 - UI - Add npm pretter package
  * Issue 5842 - Add log buffering for error log
  * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user
  * Issue 6397 - Remove deprecated setting for HR time stamps in logs
  * Issue 6390 - Adjust cleanAllRUV max per txn and interval limits
  * Issue 6349 - RFE - extract keys once (#6363) (#6394)
  * Issue 6381 - CleanAllRUV - move changelog purging to the very end of the task
  * Issue 6199 - unprotected search query during certificate based authentication (#6205)
  * Issue 5920 - pamModuleIsThreadSafe is missing in the schema
  * Issue 6377 - syntax error in setup.py (#6378)
  * Issue 6328 - vlv control may not be logged (#6354)
  * Issue 6349 - RFE - Use previously extracted key path (#6363)
  * Issue 6067 - Update dsidm to prioritize basedn from .dsrc over interactive input (#6362)
  * Issue 6356 - On LMDB, after an update the impact VLV index, the vlv recno cache is not systematically cleared (#6357)
  * Issue 6347 - better fix for desyncronized vlv cache (#6358)
  * Issue 6243 - dsctl bdb2mdb should cleanly fail if bundled libdb is not available (#6351)
  * Issue 6331 - UI - Instance fails to load when DB backup directory doesn't exist (#6332)
  * Issue 6056 - WebUI supports only instances with BDB (#6299)
  * Issue 6064 - bdb2mdb shows errors (#6341)
  * Issue 6090 - Fix dbscan options and man pages (#6315)
  * Issue 6343 - Improve online import robustness when the server is under load
  * Issue 6345 - Ensure all slapi_log_err calls end format strings with newline character \n (#6346)
  * Issue 6336 - Fix failing CI tests (roles) due to slow import (#6337)
  * Issue 6304 - RFE when memberof is enabled, defer updates of members from the update of the group (#6305)
  * Issue 6324 - Provide more information in the error message during setup_ol_tls_conn() (#6325)
  * Issue 5965 - UI, CLI - Fix Account Policy Plugin functionality issues (#6323)
  * Issue 6316 - lmdb reindex is broken if index type is specified (#6318)
  * Issue 6307 - Wrong set of entries returned for some search filters (#6308)
  * Issue 2472 - Add a CI test (#6314)
  * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279)
  * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300)
  * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310)
  * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309)
  * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303)
  * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281)
  * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme
  * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027)
  * Issue 6192 - Test failure: test_match_large_valueset
  * Issue 2324 - Add a CI test (#6289)
  * Issue 6284 - BUG - freelist ordering causes high wtime (#6285)
  * Bump version to 3.0.4
  * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257)
  * Issue 6256 - nsslapd-numlisteners limit is not enforced
  * Issue 5327 - Fix test metadata
  * Security fix for CVE-2024-6237
  * Security fix for CVE-2024-5953
  * Security fix for CVE-2024-3657
  * Security fix for CVE-2024-2199
  * Issue 6265 - lmdb - missing entries in range searches (#6266)
  * Issue 5853 - Update Cargo.lock
  * Issue 5962 - Rearrange includes for 32-bit support logic
  * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console
  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)
  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)
  * Issue 6227 - dsconf schema does not show inChain matching rule (#6228)
  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)
  * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv
  * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219)
  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)
  * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201)
  * Issue 6170 - audit log buffering doesn't handle large updates
  * Issue 6193 - Test failure: test_tls_command_returns_error_text
  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`
  * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131)
  * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124)
  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)
  * Bump version to 3.0.3
  * Issue 6142 - Fix CI tests (#6161)
  * Bump version to 3.0.2
  * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145)
  * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143)
  * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144)
  * Issue 6136 - failure in freeipa tests (#6137)
  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)
  * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130)
  * Issue 6082 - Remove explicit dependencies toward libdb (#6083)
  * Issue i6057 - Fix3 - Fix covscan issues (#6127)
  * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121)
  * Issue 6057 - vlv search may result wrong result with lmdb (#6091)
  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)
  * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h
  * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126)
  * Issue 6110 - Typo in Account Policy plugin message
  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)
  * Issue 6117 - Fix the UTC offset print (#6118)
  * Issue 5305 - OpenLDAP version autodetection doesn't work
  * Issue 6112 - RFE - add new operation note for MFA authentications
  * Issue 5842 - Add log buffering to audit log
  * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107)
  * Issue 6103 - New connection timeout error breaks errormap (#6104)
  * Issue 6096 - Improve connection timeout error logging (#6097)
  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)
  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)
  * Issue 6061 - Certificate lifetime displayed as NaN
  * Bump version to 3.0.1
  * Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)
  * Issue 3555 - Remove audit-ci from dependencies (#6056)
  * Issue 6052 - Paged results test sets hostname to `localhost` on test collection
  * Issue 6051 - Drop unused pytest markers
  * Issue 6049 - lmdb - changelog is wrongly recreated by reindex task (#6050)
  * Issue 6047 - Add a check for tagged commits
  * Issue 6041 - dscreate ds-root - accepts relative path (#6042)
  * Switch default backend to lmdb and bump version to 3.0 (#6013)
  * Issue 6032 - Replication broken after backup restore (#6035)
  * Issue 6037 - Server crash at startup in vlvIndex_delete (#6038)
  * Issue 6034 - Change replica_id from str to int
  * Issue 6028 - vlv index keys inconsistencies (#6031)
  * Issue 5989 - RFE support of inChain Matching Rule (#5990)
  * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026)
  * Issue 6015 - Fix typo remeber (#6014)
  * Issue 6016 - Pin upload/download artifacts action to v3
  * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)
  * Issue 4673 - Update Rust crates
  * Issue 6004 - idletimeout may be ignored (#6005)
  * Issue 5954 - Disable Transparent Huge Pages
  * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999)
  * Issue 5993 - Fix several race condition around CI tests (#5996)
  * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)
  * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995)
  * Issue 5980 - Improve instance startup failure handling (#5991)
  * Issue 5976 - Fix freeipa install regression with lmdb (#5977)
  * Issue 5984 - Crash when paged result search are abandoned - fix2 (#5987)
  * Issue 5984 - Crash when paged result search are abandoned (#5985)
  * Issue 5947 - CI test_vlv_recreation_reindex fails on LMDB (#5979)
  * Bump version to 2.5.0
  * Issue 5971 - CLI - Fix password prompt for repl status (#5972)
  * Issue 5973 - Fix fedora cop RawHide builds (#5974)
  * Revert "Issue 5761 - Worker thread dynamic management (#5796)" (#5970)
  * Issue 5966 - CLI - Custom schema object is removed on a failed edit (#5967)
  * Issue 5786 - Update permissions for Release workflow
  * Issue 5960 - Subpackages should have more strict interdependencies
  * Issue 3555 - UI - Fix audit issue with npm - babel/traverse (#5959)
  * Issue 4843 - Fix dscreate create-template issue (#5950)
  * bugfix for --passwd-file not working on latest version (#5934)
  * Issue 5843 - dsconf / dscreate should be able to handle lmdb parameters (#5943)
  * Bump postcss from 8.4.24 to 8.4.31 in /src/cockpit/389-console (#5945)
  * Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)
  * issue 5924 - ASAN server build crash when looping opening/closing connections (#5926)
  * Issue 1925 - Add a CI test (#5936)
  * Issue 5732 - Localizing Cockpit's 389ds Plugin using CockpitPoPlugin (#5764)
  * Issue 1870 - Add a CI test (#5929)
  * Issue 843 - Add a warning to slapi_valueset_add_value_ext (#5925)
  * Issue 5761 - Worker thread dynamic management (#5796)
  * Issue 1802 - Improve ldclt man page (#5928)
  * Issue 1456 - Add a CI test that verifies there is no issue (#5927)
  * Issue 1317 - Add a CI test (#5923)
  * Issue 1081 - CI - Add more tests for overwriting x-origin issue (#5815)
  * Issue 1115 - Add a CI test (#5913)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5848 - Fix condition and add a CI test (#5916)
  * Issue 5914 - UI - server settings page validation improvements and db index fixes
  * Issue 5909 - Multi listener hang with 20k connections (#5917)
  * Issue 5902 - Fix previous commit regression (#5919)
  * pass instance correctly to ds_is_older (#5903)
  * Issue 5909 - Multi listener hang with 20k connections (#5910)
  * Issue 5722 - improve testcase (#5904)
  * Issue 5203 - outdated version in provided metadata for lib389
  * Bug Description:
  * issue 5890 part 2 - Need a tester for testing multiple listening thread feature (#5897)
  * Issue i5846 - Crash when lmdb import is aborted (#5881)
  * Issue 5894 - lmdb import error fails with Could not store the entry (#5895)
  * Issue 5890 - Need a tester for testing multiple listening thread feature (#5891)
  * Issue 5082 - slugify: ModuleNotFoundError when running test cases
  * Issue 4551 - Part 2 - Fix build warning of previous PR (#5888)
  * Issue 5834 - AccountPolicyPlugin erroring for some users (#5866)
  * Issue 5872 - part 2 - fix is_dbi regression (#5887)
  * Issue 4758 - Add tests for WebUI
  * Issue 5848 - dsconf should prevent setting the replicaID for hub and consumer roles (#5849)
  * Issue 5883 - Remove connection mutex contention risk on autobind (#5886)
  * Issue 5872 - `dbscan()` in lib389 can return bytes
  * Bump version to 2.4.3
  * Issue 5729 - Memory leak in factory_create_extension (#5814)
  * Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)
  * Issue 5876 - CI Test random failure - Import (#5879)
  * Issue 5877 - test_basic_ldapagent breaks test_setup_ds_as_non_root* tests
  * Issue 5867 - lib389 should use filter for tarfile as recommended by PEP 706 (#5868)
  * Issue 5853 - Update Cargo.lock and fix minor warning (#5854)
  * Issue 5785 - CLI - arg completion is broken
  * Issue 5864 - Server fails to start after reboot because it's unable to access nsslapd-rundir
  * Issue 5856 - SyntaxWarning: invalid escape sequence '\,'
  * Issue 5859 - dbscan fails with AttributeError: 'list' object has no attribute 'extends'
  * Issue 3527 - UI - Add nsslapd-haproxy-trusted-ip to server setting (#5839)
  * Issue 4551 - Paged search impacts performance (#5838)
  * Issue 4758 - Add tests for WebUI
  * Issue 4169 - UI - Fix retrochangelog and schema Typeaheads (#5837)
  * issue 5833 - dsconf monitor backend fails on lmdb (#5835)
  * Issue 3555 - UI - Fix audit issue with npm - stylelint (#5836)
  * Bump version to 2.4.2
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 4719 - CI - Add dsconf add a PTA URL test
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5793 - UI - Fix minor crashes (#5827)
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5701 - CI - Add more tests for referral mode fix (#5810)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Bump openssl from 0.10.52 to 0.10.55 in /src
  * Issue 5793 - UI - movce from webpack to esbuild bundler
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 3527 - Fix HAProxy x390x compatibility and compiler warnings (#5801)
  * Issue 5798 - CLI - Add multi-valued support to dsconf config (#5799)
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5785 - move bash completion to post section of specfile
  * Issue 5156 - (cont) RFE slapi_memberof reusing memberof values (#5744)
  * Issue 4758 - Add tests for WebUI
  * Issue 3527 - Add PROXY protocol support (#5762)
  * Issue 5789 - Improve ds-replcheck error handling
  * Issue 5786 - CLI - registers tools for bash completion
  * Issue 5786 - Set minimal permissions on GitHub Workflows (#5787)
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Bump version to 2.4.1
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5722 - fix compilation warnings (#5771)
  * Issue 5765 - Improve installer selinux handling
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5156 - build warnings (#5758)
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Issue   - Copy config files into backup directory
  * Issue 5156 - fix build breakage from slapi-memberof commit
  * Issue 4758 - Add tests for WebUI
  * Bump version to 2.4.0
  * Issue 5156 - RFE that implement slapi_memberof (#5694)
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 4758 - Add tests for WebUI
  * Issue 5718 - Memory leak in connection table (#5719)
  * Issue 5705 - Add config parameter to close client conns on failed bind (#5712)
  * Issue 4758 - Add tests for WebUI
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5701 - CLI - Fix referral mode setting (#5708)
  * Bump openssl from 0.10.45 to 0.10.48 in /src (#5709)
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 5697 - Obsolete nsslapd-ldapimaprootdn attribute (#5698)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5706)
  * Issue 4812 - Listener thread does not scale with a high num of established connections (#5681)
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 5661 - LMDB hangs while Rebuilding the replication changelog RUV (#5676)
  * Issue 5554 - Add more tests to security_basic_test suite
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 4758 - Add tests for WebUI
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Issue 5640 - Update logconv for new logging format
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5647 - Fix unused variable warning from previous commit (#5670)
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * issue 5647 - covscan: memory leak in audit log when adding entries (#5650)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5628 - Handle graceful timeout in CI tests (#5657)
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5517 - Replication conflict CI test sometime fails (#5518)
  * Issue 5634 - Deprecated warning related to github action workflow code (#5635)
  * Issue 5637 - Covscan - fix Buffer Overflows (#5638)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Bump tokio from 1.24.1 to 1.25.0 in /src (#5629)
  * Issue 4577 - Add LMDB pytest github action (#5627)
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Remove stale libevent(-devel) dependency
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.3.2
  * Issue 5547 - automember plugin improvements
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue #5610 - Build failure on Debian
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5425 - CLI - add confirmation arg when deleting backend
  * Issue 5558 - non-root instance fails to start on creation (#5559)
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Update specfile and rust crates
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5554 - Add more tests to security_basic_test suite (#5555)
  * Issue 5561 - Nightly tests are failing
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.3.1
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 5469 - Increase the default value of nsslapd-conntablesize (#5472)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5476 - RFE - add memberUid read aci by default (#5477)
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 5465 - Fix dbscan linking (#5466)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5413 - Allow only one MemberOf fixup task at a time
  * Issue 4592: dscreate error with custom dir_path (#5434)
  * Issue 5158: entryuuid fixup tasks fails in replicated topology (#5439)
  * Bump version to 2.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1742904000">- Update to version 3.0.6~git47.0299ce5f:
  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)
  * Issue 6671 - tombstone_fixup_test sometime fails on bdb
  * Issue 6401 - Remove logging macros</changelog>
  <changelog author="william.brown@suse.com" date="1743076800">- bsc#1239722 - CVE-2025-2487 - 389-ds: null pointer dereference leads to denial of service
- Update to version 3.0.6~git50.40e75292:
  * Issue 6500 - Fix covscan and ASAN issue
  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Add missing dependency on python3-psutil</changelog>
  <changelog author="william.brown@suse.com" date="1744891200">- bsc#1241016 - enable memory accounting as SUSE disables it by default
- Update to version 3.0.6~git81.890c8568:
  * Issue 6734 - BUG - format strings may not contain backslash (#6749)
  * Issue 6505- CI - backport changes for check_value_in_log
  * Issue 6501 - CLI - dsidm role rename was not working
  * Issue 6744 - BUG - memory accounting is not always enabled (#6745)
  * Issue 6492/6493 - CLI - dsdim can not create nested/filtered roles
  * Issue #6740 Certificate verify fails in FIPS mode
  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests
  * Issue 6603 - Release tarballs ship a different Cargo.lock
  * Issue 6743 - CLI - dsidm add option to list DN's
  * Issue 6669 - logconv.py updates (#6673)
  * Issue 6735 - CLI - dsidm provide option to set decription when creating an entry
  * Bump tokio from 1.43.0 to 1.44.2 in /src (#6732)
  * Issue 6728 - CLI - Issue with user rename operation (#6729)
  * Issue 6515 - CLI - dsidm get_dn does not return JSON format
  * Bump openssl from 0.10.70 to 0.10.72 in /src (#6730)
  * Issue 6660 - UI - Replication Monitoring Lag Report Feature (#6661)
  * Issue 6713 - ns-slapd crash during mdb offline import (#6714)
  * Issue 6720 - Remove BDB attribute from MDB DB Monitor (#6721)
  * Issue 6715 - dsconf backend replication monitor fails if replica id starts with 0 (#6716)
  * Issue 6562 - Fix issues around slapi_filter_sprintf (#6725)
  * Issue 6481 - When ports that are in use are used to update a DS instance the error message is not helpful (#6723)
  * Issue 6626 - Ignore replica busy condition in healthcheck (#6630)
  * Issue 6693 - Fix error messages inconsistencies (#6694)
  * Issue 6464 - UI - Fixed spelling in cockpit messages
  * Issue 6700 - CLI/UI - include superior objectclasses' allowed and requires attrs
  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)
  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)
  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)
  * Issue 6704 - UI - Add error log buffering config
  * Issue 6698 - NPE after configuring invalid filtered role (#6699)
  * Issue 6695 - UI - fix more minor issues</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- Update to version 3.0.6~git86.dce421a0d:
  * Issue 6764 - statistics about index lookup report a wrong duration (#6765)
  * Issue 4989 - Confusing error message from dsconf plugin set --enabled (#6750)
  * Issue 6614 - CLI - Error when trying to display global DB stats with LMDB (#6622)
  * Issue 6321 - lib389 get_db_lib function may returns the wrong db type (#6322)
  * Issue 6276 - UI - schema editing and memberof shared config not working correctly</changelog>
  <changelog author="william.brown@suse.com" date="1746619201">- bsc#1242666 - CVE-2025-3416 - openssl use after free</changelog>
</package>
<package pkgid="a0dd033be5053c35d1cfb28942ae31dcb58b128898a8ecc74751383cc5fb9c9f64c3c0554e45a5fb0abcfd6895b5b1860f2449e6263d399ef8129d73b5b1ca8f" name="3omns" arch="x86_64">
  <version epoch="0" ver="0.2" rel="bp160.1.13"/>
  <changelog author="nemysis@gmx.ch" date="1416830400">- Move hicolor-icon-theme to %if 0%{?suse_version}</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  3omns has not been ported to LUA 5.3 yet.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1443182400">- Recreate tarball, new GitHub commit
  Please look 'git log'</changelog>
  <changelog author="rpm@fthiessen.de" date="1451649600">- Fixed lua dependencies so it will also build on openSUSE &lt;= 13.2</changelog>
  <changelog author="nemysis@openSUSE.org" date="1453550400">- Recreate tarball, new GitHub commit
  Please look 'git log' and announce message:
  * Add bot.lua to dist
  * Fixed some bot AI bugs
  * Revamped networking code to add reliability
  * Added the -R command line option to print resources path
- license update: GPL-3.0+ No indication that this is GPL-3.0 (only)
- Add BuildRequires for bitstream-vera-fonts
- Add Requires for bitstream-vera-fonts, thanks dstoecker
- Replace bundled font with a symlink to an identical system font
- Remove COPYING.font from Documentation</changelog>
  <changelog author="nemysis@openSUSE.org" date="1466337600">- Remove check %if 0%{?suse_version}, because is only for openSUSE</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.2
- Add appdata.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1505131200">- lua53.patch : add support for Lua 5.3 (upstream commit 1524b7c)
- change requirement to lua53</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618660800">- Fixed spec file
  * Updated URL and SourceURL
  * Minor cleanup</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709899200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="273221e1694f80cba0b881b034b7faa7c4add2d442137ba92a01a495e09766abbc35df33194313ceeb4e23133663251a688febef797d0a06e6ab40223a13ae0b" name="3proxy" arch="x86_64">
  <version epoch="0" ver="0.9.5" rel="bp160.1.14"/>
  <changelog author="dmacvicar@suse.de" date="1422014400">- initial package for 0.7.1.1</changelog>
  <changelog author="dmacvicar@suse.de" date="1537444800">- update to 0.8.12</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1575460800">- Add system-pcre.patch to use system pcre static lib
- Expand list of permissible licenses
- Tidy spec
- Update to v0.8.13
  * Fixed out-of-bound write and few minor bugs on configuration
    saving in admin
  * $ is not correctly handled in the beginning of quoted line on
    configuration parsing</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1724932800">- Added files: 3proxy.service, 3proxy-socks.firewalld and 3proxy.cfg.
- Added user and group proxy for secure work via systemd service.
- Added /var/log/3proxy directory with correct permissions.
- Removed file system-pcre.patch.
- Updated to 0.9.4+git20240718
  * Added socket options, interface binding.
  * Added connection limiting / connection rate limiting.
  * Added RADIUS support.
  * Added zero copy (splice) support for Linux.
  * Added possibility to limit user to single IP (via authentication cache).
  * Fixed socket may be closed before all data received/sent.
  * Fixed bandlimin non-working.
  * Fixed few race conditions.
  * Added deb/rpm build, systemd support.
  * Fixed bandwidth limiters (once again).
  * Fixed data filtering plugins (PCREPlugin, SSLPlugin).
    SSLPlugin use on Linux requires to disable splice (-s0).
  * FIxed standalone proxies do not react on HUP (Ctrl+C) in Linux/Unix.
  * Added arm support.
  * Added openssl 1.1 support for SSLPlugin.
  * Fixed systemd description file (proxy may fail to start after reboot).
  * Fixed countall/nocounall do not work in some configurations.
  * Fixed counters do not work if counter file is not specified.
  * Fixed counters without rotation (type N) are incorrectly shown in web admin interface.
  * Fixed %n may be incomplete or missed in long log records.
  * Fixed connect back functionality does not work.
  * Added docker builds.
  * Fixed invalid handling of '-' character in ACL hostname.
  * Added parentretry command (defaults to 2) to retry connections to parent proxies.
  * Removed icqpr related code (OSCAR proxy).
  * Fixed build with gcc14.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1741608000">- Added plugins.
- Changed 3proxy.service file.
- Updated to 0.9.5
  * Fixed potentially crash due to overlapping regions in strcpy().
  * Added proxy service type: tlspr - SNI proxy, may also be used as parent tls type.
  * Added new proxy service type: auto - autodetect proxy type between proxy and socks.</changelog>
</package>
<package pkgid="5c819bfea7f3ce08bfa48ecca632f8b1c2368f630685d41947f23cb02b8cf3d429a8178bdab580158ae2cb6fc8b8ab960a6155c3318151340a746dfbee768c6a" name="4pane" arch="x86_64">
  <version epoch="0" ver="8.0" rel="bp160.1.13"/>
  <changelog author="aloisio@gmx.com" date="1496232000">- Added LICENCE file</changelog>
  <changelog author="bwiedemann@suse.com" date="1498737600">- Use convert -strip to not embed timestamps in .png files</changelog>
  <changelog author="p.drouand@gmail.com" date="1514203200">- Update to version 5.0
  + There is a simpler 'Find' dialog for everyday use.
    Just as the QuickGrep dialog is good enough for most greps, a
    simple one-page QuickFind that sets just the path, pattern and
    search-type will be sufficient for most searches.
  + When large files are being moved or pasted, their progress is now
    displayed in the statusbar.
  + It is now possible to make a particular fileview order its files
    in a decimal-aware way. This is helpful in the case of files with
    names like foo1.txt, foo2.txt, foo11.txt, foo12.txt, which normally
    sort as 1, 11, 12, 2.
  + A fileview's contextmenu now has an entry that makes it sort such
    files more intelligently. Note that this only affects files with
    names that _end_ in digits, not those with digits elsewhere in the name.
  + Building 4Pane now uses Automake.
- Split out language files into their own sub-package</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1585396800">- Update to version 6.0
  * 4Pane no longer builds with wxWidgets 2.8; it now requires
    3.0 or higher.
  * There's a faster way to reach the File OpenWith menu.
    Ctrl-Alt-doubleclick will now directly show the menu.
  * When moving or pasting files, optionally retain their
    previous modification date.
  * Support extracting/verifying 'rar' archives, if 'unrar' is
    installed, but not 'rar' creation. 'unrar' is freely
    available (though with a licence restriction) but the 'rar'
    licence is too restricted.
  * Previewing images now supports svg files too.
  * Add support for the LXQt DE by recognising its default
    editor, terminal and image viewer.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1602072000">- Fix Factory build</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1602072001">- Add 4pane-fix_for_wx3.1.4.patch</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1607342400">- Update to version 7.0
  * Added support for GIO mounts
    + Recent distro versions use GIO to mount some usb devices
    inside /run/user/&lt;id&gt;/gvfs/
    4Pane now looks there for automounted DVDs, cameras and
    smart devices e.g. android phones, and adds a toolbar
    button for each, just as would happen for a usb flash
    drive.
  * Improvements to the QuickFind dialog
  * Compilation fix for &gt;=wxWidgets 3.1.4
- Drop 4pane-fix_for_wx3.1.4.patch (merged upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1661428800">- Added 0001-Compilation-fixes-for-wxWidgets-3.1.6.patch,
  0001-Compilation-fix-for-wxWidgets-3.1.5.patch,
  0001-Fix-a-wx-assert-complaining-that-a-panel-was-being-a.patch,
  0001-Fix-a-wxAssert-when-showing-the-Command-line-termina.patch,
  and
  0001-Prevent-a-wx-build-warning-about-wxPATH_NORM_ALL-bei.patch
  to fix build with wxWidgets 3.2</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1668859200">- Update to version 8.0
  * Compilation fixes when built against wxWidgets 3.2
  * When trying to extract an archive, recognise the 'xpi'
    extension: it's actually a zip
  * Provide a better context menu for the Terminal Emulator and
    CommandLine
    + There are now Copy and Paste entries where appropriate.
  * Fix Terminal Emulator display glitches
  * Fix moving/pasting symlinks when Retain Relative Symlinks is
    true
- Drop 0001-Compilation-fixes-for-wxWidgets-3.1.6.patch,
  0001-Compilation-fix-for-wxWidgets-3.1.5.patch,
  0001-Fix-a-wx-assert-complaining-that-a-panel-was-being-a.patch,
  0001-Fix-a-wxAssert-when-showing-the-Command-line-termina.patch
  and
  0001-Prevent-a-wx-build-warning-about-wxPATH_NORM_ALL-bei.patch
  (merged upstream)</changelog>
</package>
<package pkgid="da54a4a082b815373d5653f630bfba5817953ef9a530524ba5ae08c40e51aec770e1445f4faa4634e0e3646acaffa3a74e4a2c71c68da5343a5c10c94b004a6a" name="4pane-lang" arch="noarch">
  <version epoch="0" ver="8.0" rel="bp160.1.13"/>
  <changelog author="aloisio@gmx.com" date="1496232000">- Added LICENCE file</changelog>
  <changelog author="bwiedemann@suse.com" date="1498737600">- Use convert -strip to not embed timestamps in .png files</changelog>
  <changelog author="p.drouand@gmail.com" date="1514203200">- Update to version 5.0
  + There is a simpler 'Find' dialog for everyday use.
    Just as the QuickGrep dialog is good enough for most greps, a
    simple one-page QuickFind that sets just the path, pattern and
    search-type will be sufficient for most searches.
  + When large files are being moved or pasted, their progress is now
    displayed in the statusbar.
  + It is now possible to make a particular fileview order its files
    in a decimal-aware way. This is helpful in the case of files with
    names like foo1.txt, foo2.txt, foo11.txt, foo12.txt, which normally
    sort as 1, 11, 12, 2.
  + A fileview's contextmenu now has an entry that makes it sort such
    files more intelligently. Note that this only affects files with
    names that _end_ in digits, not those with digits elsewhere in the name.
  + Building 4Pane now uses Automake.
- Split out language files into their own sub-package</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1585396800">- Update to version 6.0
  * 4Pane no longer builds with wxWidgets 2.8; it now requires
    3.0 or higher.
  * There's a faster way to reach the File OpenWith menu.
    Ctrl-Alt-doubleclick will now directly show the menu.
  * When moving or pasting files, optionally retain their
    previous modification date.
  * Support extracting/verifying 'rar' archives, if 'unrar' is
    installed, but not 'rar' creation. 'unrar' is freely
    available (though with a licence restriction) but the 'rar'
    licence is too restricted.
  * Previewing images now supports svg files too.
  * Add support for the LXQt DE by recognising its default
    editor, terminal and image viewer.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1602072000">- Fix Factory build</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1602072001">- Add 4pane-fix_for_wx3.1.4.patch</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1607342400">- Update to version 7.0
  * Added support for GIO mounts
    + Recent distro versions use GIO to mount some usb devices
    inside /run/user/&lt;id&gt;/gvfs/
    4Pane now looks there for automounted DVDs, cameras and
    smart devices e.g. android phones, and adds a toolbar
    button for each, just as would happen for a usb flash
    drive.
  * Improvements to the QuickFind dialog
  * Compilation fix for &gt;=wxWidgets 3.1.4
- Drop 4pane-fix_for_wx3.1.4.patch (merged upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1661428800">- Added 0001-Compilation-fixes-for-wxWidgets-3.1.6.patch,
  0001-Compilation-fix-for-wxWidgets-3.1.5.patch,
  0001-Fix-a-wx-assert-complaining-that-a-panel-was-being-a.patch,
  0001-Fix-a-wxAssert-when-showing-the-Command-line-termina.patch,
  and
  0001-Prevent-a-wx-build-warning-about-wxPATH_NORM_ALL-bei.patch
  to fix build with wxWidgets 3.2</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1668859200">- Update to version 8.0
  * Compilation fixes when built against wxWidgets 3.2
  * When trying to extract an archive, recognise the 'xpi'
    extension: it's actually a zip
  * Provide a better context menu for the Terminal Emulator and
    CommandLine
    + There are now Copy and Paste entries where appropriate.
  * Fix Terminal Emulator display glitches
  * Fix moving/pasting symlinks when Retain Relative Symlinks is
    true
- Drop 0001-Compilation-fixes-for-wxWidgets-3.1.6.patch,
  0001-Compilation-fix-for-wxWidgets-3.1.5.patch,
  0001-Fix-a-wx-assert-complaining-that-a-panel-was-being-a.patch,
  0001-Fix-a-wxAssert-when-showing-the-Command-line-termina.patch
  and
  0001-Prevent-a-wx-build-warning-about-wxPATH_NORM_ALL-bei.patch
  (merged upstream)</changelog>
</package>
<package pkgid="5debc6df54a51b170f209d57d436d01f6557717dbbe82bd6335a990bf0b4355e6721f06b28a83d8e533d4e999b2b0858a3a414695d119f855575a4609557e6f2" name="4ti2" arch="x86_64">
  <version epoch="0" ver="1.6.10" rel="bp160.1.14"/>
  <changelog author="jengelh@inai.de" date="1391515200">- Update to new upstream release 1.6
  * Restore the functionality of "hilbert" to accept "rel" files
  * When the cone is not pointed, "hilbert" now outputs a "zfree" file,
  containing a lattice basis, in addition to the "hil" file.
- Remove 4ti2-gcc.diff, 4ti2-nonvoid-return.diff, 4ti2-libtool.diff
  (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1397822400">- Update to new upstream release 1.6.2
  * Support for newer libglpk API "glp_"
  (which replaced the "lpx_" API)</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 1.6.6
  * Fix segfault in graver when a matrix with trivial kernel is input
    (testcase graver/trivial-kernel).
- Changes from version 1.6.5
  * Fix build failure with gcc 4.9.2.
- Changes from version 1.6.4
  * Improved error checking while reading zsolve input files.
  * The PDF manual has been updated to include a reference to commands
    and their options and a reference to the API.  The command
    reference on www.4ti2.de has also been updated.
  * Better option handling.  Make long options available in non-GNU
    platforms such as Mac OS X.  All commands now support the
    standard --help and --version options.
  * Minor fix to the test suite.
- Changes from version 1.6.3
  * The manual has been updated.
  * Minor build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1457697600">- Update to new upstream release 1.6.7
  * Add tests for "walk -p arb" to testsuite
  * Fix division-by-zero in "walk -p arb" for testcase 344</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Update to new upstream release 1.6.9
  * Fix out of bounds vector access in circuits.
- Remove 4ti2-missing-libs.diff (not needed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Modernize specfile.</changelog>
  <changelog author="Alois Wohlschlager &lt;alois1@gmx-topmail.de&gt;" date="1625140800">- Add patch 4ti2-handle-prefix.patch to handle the downstream
  4ti2_ executable prefix in wrapper scripts.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625140801">- Run fdupes to eliminate script copies.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1679918400">- Add 0001-build-resolve-missing-includes-showing-on-gcc-13.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Update to release 1.6.10
  * Fix memory leak in permuteListVector
- Delete 0001-build-resolve-missing-includes-showing-on-gcc-13.patch,
  4ti2-docdir.diff</changelog>
</package>
<package pkgid="d99a7aba6e721780d3a7948326eccbd35bc1d1f51485ad7165a3a594498e9f546676529e5fb00f30f740917b439c038af20b119d56869a5f34e993066d9f0e77" name="4ti2-devel" arch="x86_64">
  <version epoch="0" ver="1.6.10" rel="bp160.1.14"/>
  <changelog author="jengelh@inai.de" date="1391515200">- Update to new upstream release 1.6
  * Restore the functionality of "hilbert" to accept "rel" files
  * When the cone is not pointed, "hilbert" now outputs a "zfree" file,
  containing a lattice basis, in addition to the "hil" file.
- Remove 4ti2-gcc.diff, 4ti2-nonvoid-return.diff, 4ti2-libtool.diff
  (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1397822400">- Update to new upstream release 1.6.2
  * Support for newer libglpk API "glp_"
  (which replaced the "lpx_" API)</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 1.6.6
  * Fix segfault in graver when a matrix with trivial kernel is input
    (testcase graver/trivial-kernel).
- Changes from version 1.6.5
  * Fix build failure with gcc 4.9.2.
- Changes from version 1.6.4
  * Improved error checking while reading zsolve input files.
  * The PDF manual has been updated to include a reference to commands
    and their options and a reference to the API.  The command
    reference on www.4ti2.de has also been updated.
  * Better option handling.  Make long options available in non-GNU
    platforms such as Mac OS X.  All commands now support the
    standard --help and --version options.
  * Minor fix to the test suite.
- Changes from version 1.6.3
  * The manual has been updated.
  * Minor build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1457697600">- Update to new upstream release 1.6.7
  * Add tests for "walk -p arb" to testsuite
  * Fix division-by-zero in "walk -p arb" for testcase 344</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539950400">- Update to new upstream release 1.6.9
  * Fix out of bounds vector access in circuits.
- Remove 4ti2-missing-libs.diff (not needed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Modernize specfile.</changelog>
  <changelog author="Alois Wohlschlager &lt;alois1@gmx-topmail.de&gt;" date="1625140800">- Add patch 4ti2-handle-prefix.patch to handle the downstream
  4ti2_ executable prefix in wrapper scripts.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625140801">- Run fdupes to eliminate script copies.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1679918400">- Add 0001-build-resolve-missing-includes-showing-on-gcc-13.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Update to release 1.6.10
  * Fix memory leak in permuteListVector
- Delete 0001-build-resolve-missing-includes-showing-on-gcc-13.patch,
  4ti2-docdir.diff</changelog>
</package>
<package pkgid="3aa56868a08ea9b097ac10d29afd8918447fccf0f2059c0fc07eae9d1cff3794ffa9ccb66c926bf749c57e6761e968306457d9007f11c5ce99f6172ac54603fe" name="6tunnel" arch="x86_64">
  <version epoch="0" ver="0.13" rel="bp160.1.13"/>
  <changelog author="mardnh@gmx.de" date="1543665600">- Initial package for 6tunnel, version 0.12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Generalize description.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1571659200">- Update to version 0.13
  * Updated help message.
  * Avoid segfault in "-f" mode.
  * Support automake's "make check" target.
- Run testsuite</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660651200">- add 9e4119f03f57eec67b97dddbf09d363b638791dc.patch to be
  able to switch to python3</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709899200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="f3690b36f1f55662c5ba0feb00e54acd0796c1ea987aca916141db8f5fd8a72dc1d2b673060bcb250b4c1a9cf6fcd2624e716c34760832e1d722b992908894f2" name="7zip" arch="x86_64">
  <version epoch="0" ver="24.09" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1687348800">- Update to version 23.01:
  * 7-Zip now can use new ARM64 filter for compression to 7z and xz archives.
    ARM64 filter can increase compression ratio for data containing executable files
    compiled for ARM64 (AArch64) architecture.
  * Default section size for BCJ2 filter was changed from 64 MiB to 240 MiB. It
    can increase compression ratio for executable files larger than 64 MiB.
  * UDF: support was improved.
  * cpio: support for hard links.
  * Some changes and optimizations in WIM creation code.
  * When new 7-Zip creates multivolume archive, 7-Zip keeps in open state only
    volumes that still can be changed. Previous versions kept all volumes in open
    state until the end of the archive creation.
  * 7-Zip now can reduce the number of simultaneously open files, when
    7-Zip opens, extracts or creates multivolume archive. It allows to avoid the
    failures for cases with big number of volumes, bacause there is a limitation for
    number of open files allowed for a single program in Linux.
  * The bugs were fixed:
  * ZIP archives: if multithreaded zip compression was performed with
    more than one file to stdout stream (-so switch), 7-zip didn't write "data
    descriptor" for some files.
  * ext4 archives: 7-Zip couldn't correctly extract symbolic link to directory from ext4 archives.
  * HFS and APFS archives: 7-Zip incorrectly decoded uncompressed blocks (64 KiB) in compressed forks.
  * Some another bugs were fixed.
- Refresh fix-compatib-with-p7zip.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1689681600">- Enable ARM64 ASM introduced in 23.01</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704196800">- Add missing man pages for 7z / 7za / 7zr / 7zz.
  This solves bsc#1204856.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706011200">- Fix build on SLE-15-SP6
  * fix-avx-sle.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726400">- Use autosetup -c instead of manually extracting the tarball and
  applying patches: allows us to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716724800">- update to 24.05:
  * New switch -myv=.. to set decoder compatibility version for
    7z archive creating
  * New switches -myfa and -myfd to allow or disallow the specified
    filter method for 7z archive creating
  * can use new RISCV filter for compression to 7z and xz archives
  * can ask user permission to unpack RAR archives that require
    large amount of memory
  * new switch -smemx{size}g : to set allowed memory usage limit
    for RAR archive unpacking.
  * -y switch disables user requests and messages.
  * -slmu switch : to show timestamps as UTC instead of LOCAL TIME
  * support .sha256 files that use backslash path separator '\'
  * can unpack ZSTD archives (.zst filename extension).
  * can unpack ZIP, SquashFS and RPM archives that use ZSTD
    compression method.
  * support fast hash algorithm XXH64 that is used in ZSTD.
  * can unpack RAR archives (that use larger than 4 GB dictionary)
    created by new WinRAR 7.00.
  * can unpack DMG archives that use XZ (ULMO/LZMA) compression method
  * can unpack NTFS images with cluster size larger than 64 KB.
  * can unpack MBR and GDP images with 4 KB sectors.
  * Speed optimizations for archive unpacking: rar, cab, wim, zip, gz.
  * Speed optimizations for hash caclulation: CRC-32, CRC-64, BLAKE2sp.
  * Fix multivolume creation in some cases
  * bug fixs
- drop fix-avx-sle.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1717675200">- Update to 24.06:
  * The bug was fixed: 7-Zip could not unpack some ZSTD archives.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update to 24.07:
  * The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- update to 24.08:
  * No longer write extra zero bytes after the end of the archive,
    if a file included to archive cannot be compressed to a size
    smaller than original
  * Some optimizations for displaying file icons in 7-Zip File
    Manager and in "Confirm File Replace" window.
  * Some bugs were fixed</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733054400">- Update to 24.09:
  * The default dictionary size values for LZMA/LZMA2 compression methods
    were increased
  * 7-Zip now can calculate the following hash checksums: SHA-512, SHA-384, SHA3-256 and MD5.
  * APM and HFS support was improved.
  * If an archive update operation uses a temporary archive folder and
    the archive is moved to the destination folder, 7-Zip shows the progress of moving
    the archive file, as this operation can take a long time if the archive is large.
  * The bug was fixed: 7-Zip File Manager didn't propagate Zone.Identifier stream
    for extracted files from nested archives (if there is open archive inside another open
    archive).
  * Some bugs were fixed.</changelog>
</package>
<package pkgid="027c7cd1cbb79a633437c0a746f4c47ad5f34ce869a088224e0ed9118054a90a05559234da7a4485cb2ed1804de5aa0068a22f7a1c223cb396fa15269107ea3a" name="7zip" arch="x86_64">
  <version epoch="0" ver="25.01" rel="160000.1.1"/>
  <changelog author="linnaea@lavia.moe" date="1689681600">- Enable ARM64 ASM introduced in 23.01</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704196800">- Add missing man pages for 7z / 7za / 7zr / 7zz.
  This solves bsc#1204856.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706011200">- Fix build on SLE-15-SP6
  * fix-avx-sle.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726400">- Use autosetup -c instead of manually extracting the tarball and
  applying patches: allows us to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716724800">- update to 24.05:
  * New switch -myv=.. to set decoder compatibility version for
    7z archive creating
  * New switches -myfa and -myfd to allow or disallow the specified
    filter method for 7z archive creating
  * can use new RISCV filter for compression to 7z and xz archives
  * can ask user permission to unpack RAR archives that require
    large amount of memory
  * new switch -smemx{size}g : to set allowed memory usage limit
    for RAR archive unpacking.
  * -y switch disables user requests and messages.
  * -slmu switch : to show timestamps as UTC instead of LOCAL TIME
  * support .sha256 files that use backslash path separator '\'
  * can unpack ZSTD archives (.zst filename extension).
  * can unpack ZIP, SquashFS and RPM archives that use ZSTD
    compression method.
  * support fast hash algorithm XXH64 that is used in ZSTD.
  * can unpack RAR archives (that use larger than 4 GB dictionary)
    created by new WinRAR 7.00.
  * can unpack DMG archives that use XZ (ULMO/LZMA) compression method
  * can unpack NTFS images with cluster size larger than 64 KB.
  * can unpack MBR and GDP images with 4 KB sectors.
  * Speed optimizations for archive unpacking: rar, cab, wim, zip, gz.
  * Speed optimizations for hash caclulation: CRC-32, CRC-64, BLAKE2sp.
  * Fix multivolume creation in some cases
  * bug fixs
- drop fix-avx-sle.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1717675200">- Update to 24.06:
  * The bug was fixed: 7-Zip could not unpack some ZSTD archives.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update to 24.07:
  * The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- update to 24.08:
  * No longer write extra zero bytes after the end of the archive,
    if a file included to archive cannot be compressed to a size
    smaller than original
  * Some optimizations for displaying file icons in 7-Zip File
    Manager and in "Confirm File Replace" window.
  * Some bugs were fixed</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733054400">- Update to 24.09:
  * The default dictionary size values for LZMA/LZMA2 compression methods
    were increased
  * 7-Zip now can calculate the following hash checksums: SHA-512, SHA-384, SHA3-256 and MD5.
  * APM and HFS support was improved.
  * If an archive update operation uses a temporary archive folder and
    the archive is moved to the destination folder, 7-Zip shows the progress of moving
    the archive file, as this operation can take a long time if the archive is large.
  * The bug was fixed: 7-Zip File Manager didn't propagate Zone.Identifier stream
    for extracted files from nested archives (if there is open archive inside another open
    archive).
  * Some bugs were fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1756987200">- Update to 25.01 (boo#1249130)
  * The code for handling symbolic links has been changed to
    provide greater security when extracting files from archives
  * Command line switch -snld20 can be used to bypass default
    security checks when creating symbolic links.
- includes changes from 25.00:
  * bzip2 compression speed was increased by 15-40%.
  * deflate (zip/gz) compression speed was increased by 1-3%.
  * improved support for zip, cpio and fat archives.
  * CVE-2025-53816 : 7-Zip could work incorrectly for some
    incorrect RAR archives (boo#1246706)
  * CVE-2025-53817 : 7-Zip could crash for some incorrect COM
    (Compound File) archives (boo#1246707)</changelog>
</package>
<package pkgid="660151cc4c1a729d90d80014c9bc338d3a5d3de18d0bd11160cb3165d29f7e9e3b37f0711bc4e69e1fe3f3b1de515e7b38bb65c08ed27a0bd7c95fad65a99dbe" name="7zip" arch="x86_64">
  <version epoch="0" ver="26.01" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1709726400">- Use autosetup -c instead of manually extracting the tarball and
  applying patches: allows us to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716724800">- update to 24.05:
  * New switch -myv=.. to set decoder compatibility version for
    7z archive creating
  * New switches -myfa and -myfd to allow or disallow the specified
    filter method for 7z archive creating
  * can use new RISCV filter for compression to 7z and xz archives
  * can ask user permission to unpack RAR archives that require
    large amount of memory
  * new switch -smemx{size}g : to set allowed memory usage limit
    for RAR archive unpacking.
  * -y switch disables user requests and messages.
  * -slmu switch : to show timestamps as UTC instead of LOCAL TIME
  * support .sha256 files that use backslash path separator '\'
  * can unpack ZSTD archives (.zst filename extension).
  * can unpack ZIP, SquashFS and RPM archives that use ZSTD
    compression method.
  * support fast hash algorithm XXH64 that is used in ZSTD.
  * can unpack RAR archives (that use larger than 4 GB dictionary)
    created by new WinRAR 7.00.
  * can unpack DMG archives that use XZ (ULMO/LZMA) compression method
  * can unpack NTFS images with cluster size larger than 64 KB.
  * can unpack MBR and GDP images with 4 KB sectors.
  * Speed optimizations for archive unpacking: rar, cab, wim, zip, gz.
  * Speed optimizations for hash caclulation: CRC-32, CRC-64, BLAKE2sp.
  * Fix multivolume creation in some cases
  * bug fixs
- drop fix-avx-sle.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1717675200">- Update to 24.06:
  * The bug was fixed: 7-Zip could not unpack some ZSTD archives.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update to 24.07:
  * The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- update to 24.08:
  * No longer write extra zero bytes after the end of the archive,
    if a file included to archive cannot be compressed to a size
    smaller than original
  * Some optimizations for displaying file icons in 7-Zip File
    Manager and in "Confirm File Replace" window.
  * Some bugs were fixed</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733054400">- Update to 24.09:
  * The default dictionary size values for LZMA/LZMA2 compression methods
    were increased
  * 7-Zip now can calculate the following hash checksums: SHA-512, SHA-384, SHA3-256 and MD5.
  * APM and HFS support was improved.
  * If an archive update operation uses a temporary archive folder and
    the archive is moved to the destination folder, 7-Zip shows the progress of moving
    the archive file, as this operation can take a long time if the archive is large.
  * The bug was fixed: 7-Zip File Manager didn't propagate Zone.Identifier stream
    for extracted files from nested archives (if there is open archive inside another open
    archive).
  * Some bugs were fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1756987200">- Update to 25.01 (boo#1249130)
  * The code for handling symbolic links has been changed to
    provide greater security when extracting files from archives
  * Command line switch -snld20 can be used to bypass default
    security checks when creating symbolic links.
- includes changes from 25.00:
  * bzip2 compression speed was increased by 15-40%.
  * deflate (zip/gz) compression speed was increased by 1-3%.
  * improved support for zip, cpio and fat archives.
  * CVE-2025-53816 : 7-Zip could work incorrectly for some
    incorrect RAR archives (boo#1246706)
  * CVE-2025-53817 : 7-Zip could crash for some incorrect COM
    (Compound File) archives (boo#1246707)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Do not use asm code on aarch64 until PAC/BTI/GCS fixed upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1772366400">- Update to 26.00:
  * improved code for ZIP, CPIO, RAR, UFD, QCOW, Compound.
  * 7-Zip File Manager: improved sorting order of the file list.
    It uses file name as secondary sorting key.:
  * 7-Zip File Manager: improved Benchmark to support systems with more than
    64 CPU threads.
  * bug fixed: 7-Zip could not correctly extract TAR archives containing sparse
    files
  * some bugs were fixed.</changelog>
  <changelog author="munix9@googlemail.com" date="1780315200">- Update to 26.01:
  * linux version of 7-Zip can use huge pages (2 MB pages). It can
    increase compression speed for 10% for 7z/xz/LZMA/LZMA2 compression.
  * new -spo[d|c|r] switch specifies the path generation mode for
    the output directory for archive extraction. The output directory
    path is generated from the path specified in the -o{dir_path}
    switch and the name of the archive being unpacked.
  - spod : for Linux/Posix/macOS: -o{dir_path} specifies the direct
    path to the output directory. The asterisk (*) character
    in {dir_path} will not be replaced by the archive name.
  - spoc : 7-Zip will concatenate the path specified in -o{dir_path}
    with the archive name to form the final path to the output
    directory.
  - spor : 7-Zip will replace asterisk (*) character in the path
    specified in the -o{dir_path} with the archive name.
    This is the default option.
  * some bugs were fixed.
  * Security fixes:
    bsc#1267858 (CVE-2026-48092)
    bsc#1267862 (CVE-2026-48104)
    bsc#1267861 (CVE-2026-48103)
    bsc#1267860 (CVE-2026-48102)
    bsc#1267859 (CVE-2026-48101)
    bsc#1267864 (CVE-2026-48112)
    bsc#1267863 (CVE-2026-48111)
    bsc#1267421 (CVE-2026-48095)</changelog>
</package>
<package pkgid="2b7a477f0c957a07f26545d2b48214d4b9db81ffb7518e6eb8e5e9cf74db486c87700cf3ad1075eadcfc3768f4492882c3e00b376d1600ff672c76ff19efa0b1" name="AMF-devel" arch="noarch">
  <version epoch="0" ver="1.4.35" rel="bp160.1.10"/>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1648036800">- initial package</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1659009600">- Update to version 1.4.26:
  * New perceptual (PAQ) and temporal (TAQ) adaptive quantization modes
    for PreAnalysis
  * New high motion quality boost mode for PreAnalysis
  * New sharpness option for HQScaler
  * New low latency decoding option
  * New temporal SVC encoding options</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1678276800">- Update to version 1.4.29:
  * Added Smart Access Video for decoder and AVC / HEVC / AV1 encoders
  * New options for VQEnhancer and AV1 encoder components
  * Switched to Markdown based API docs which enable easier open source
    developer contributions
  * Added AV1 encoding support
  * Added 12-bit AV1 decoding
  * New VQEnhancer component
  * New AVC / HEVC encoder rate control methods</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1678449600">- Exclude pdf and images</changelog>
  <changelog author="ecsos@opensuse.org" date="1699876800">- Update to version 1.4.30:
  * AMF v1.4.30 release
  * Fix missing enum value in AMF_Video_Encode_HEVC_API docs
  * Fix VulkanAMF.h compile when using C (#388)
  * Fix typo in profile level string (#371)
  * Encode API doc corrections
  * Add SmartAccess Video documentation
  * Update Linux distro prereqs for AMF v1.4.29</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1706011200">- Update to version 1.4.33:
  * Added native DX12 support for encoding and PreAnalysis
  * Vulkan encoder became independent from Vulkan driver
  * Switched to public Vulkan Khronos extensions for decoder
  * AMF on Linux can now be used with AMD Pro Vulkan, and experimentally with RADV drivers
  * Improvements to sample presenters
  * Added new FRC component and API doc
  * Added new VQEnhancer API doc
  * Improvements and cleanup to sample presenters
  * Updated FFmpeg to 6.0</changelog>
  <changelog author="andrea.manzini@suse.com" date="1728216000">- Update to version 1.4.35:
  * Define AMFPRI(d|ud|x)64 using the standard C++ format for C+11 and up
  * Define LPRI(d|ud|x)64 as Unicode (wide) versions of AMFPRI(d|ud|x)64
  * Move AMF_UNICODE into Platform.h
  * Add version to the directory and resulting file
  * Include root directory that matches file name
  * Create publish header action
  * Update VQ Enhancer API doc
  * Update HEVC API doc pdf
  * fix doc
  * Clarify PA LAB depth suggestion
  * Differentiate the AMF_NO_VTABLE based on the compiler
  * Fix const on return by value Variant values
  * Fix const on return by value AMF_DECLARE_IID()
  * Fix AMF string format sizes for 64-bit Linux
  * Don't cast amf_int64 when using a format string
  * Fix warning when _MSC_VER is not defined
  * Update PA Engine Type Documentation
  * Fix missing include (#276)</changelog>
</package>
<package pkgid="d8edd96c68912c560f168f9e600c9c677b8fbb0798e90bf5b00da9977f16e7c8377d0a413f426b3fab4549f6e1bda2c801881981e1d0a559ddbf31a5cbc53501" name="AMF-docs" arch="noarch">
  <version epoch="0" ver="1.4.35" rel="bp160.1.10"/>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1648036800">- initial package</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1659009600">- Update to version 1.4.26:
  * New perceptual (PAQ) and temporal (TAQ) adaptive quantization modes
    for PreAnalysis
  * New high motion quality boost mode for PreAnalysis
  * New sharpness option for HQScaler
  * New low latency decoding option
  * New temporal SVC encoding options</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1678276800">- Update to version 1.4.29:
  * Added Smart Access Video for decoder and AVC / HEVC / AV1 encoders
  * New options for VQEnhancer and AV1 encoder components
  * Switched to Markdown based API docs which enable easier open source
    developer contributions
  * Added AV1 encoding support
  * Added 12-bit AV1 decoding
  * New VQEnhancer component
  * New AVC / HEVC encoder rate control methods</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1678449600">- Exclude pdf and images</changelog>
  <changelog author="ecsos@opensuse.org" date="1699876800">- Update to version 1.4.30:
  * AMF v1.4.30 release
  * Fix missing enum value in AMF_Video_Encode_HEVC_API docs
  * Fix VulkanAMF.h compile when using C (#388)
  * Fix typo in profile level string (#371)
  * Encode API doc corrections
  * Add SmartAccess Video documentation
  * Update Linux distro prereqs for AMF v1.4.29</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1706011200">- Update to version 1.4.33:
  * Added native DX12 support for encoding and PreAnalysis
  * Vulkan encoder became independent from Vulkan driver
  * Switched to public Vulkan Khronos extensions for decoder
  * AMF on Linux can now be used with AMD Pro Vulkan, and experimentally with RADV drivers
  * Improvements to sample presenters
  * Added new FRC component and API doc
  * Added new VQEnhancer API doc
  * Improvements and cleanup to sample presenters
  * Updated FFmpeg to 6.0</changelog>
  <changelog author="andrea.manzini@suse.com" date="1728216000">- Update to version 1.4.35:
  * Define AMFPRI(d|ud|x)64 using the standard C++ format for C+11 and up
  * Define LPRI(d|ud|x)64 as Unicode (wide) versions of AMFPRI(d|ud|x)64
  * Move AMF_UNICODE into Platform.h
  * Add version to the directory and resulting file
  * Include root directory that matches file name
  * Create publish header action
  * Update VQ Enhancer API doc
  * Update HEVC API doc pdf
  * fix doc
  * Clarify PA LAB depth suggestion
  * Differentiate the AMF_NO_VTABLE based on the compiler
  * Fix const on return by value Variant values
  * Fix const on return by value AMF_DECLARE_IID()
  * Fix AMF string format sizes for 64-bit Linux
  * Don't cast amf_int64 when using a format string
  * Fix warning when _MSC_VER is not defined
  * Update PA Engine Type Documentation
  * Fix missing include (#276)</changelog>
</package>
<package pkgid="86dcbed9428f1c69d46b9727316756aaf48110d3bc28abf0c2f4e29947cba8dec9494bcbcc718323ee49119131ff493f0f4033f32bba2f5d31e8420f74926fc4" name="ART" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="bp160.1.4"/>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1701950400">- Update to 1.21:
  * sigmoid.ctl: added white point control
  * updated wb presets
  * CTL: fixed glitch in parameter parsing
  * updated Dutch translation
  * updated French translation
  * improved error reporting for invalid CTL scripts
  * main-cli: fixed bugs in --check-lut
  * ART-cli: added option --check-lut to aid debugging luts
    (esp. CTL scripts)
  * slightly reduce 3d lut size of fast preview of CTL scripts
  * added generic LUT3D class
  * small tweak to bundled profiles
  * added option to speed up CTL script application in preview
  * added reset button for clut parameters
  * moved CTL scripts to a separate repo
  * improved wb correction formula in wbchmix.ctl
  * fix focus distance for Nikon Z cameras
  * minor gui tweaks
  * sigmoid: added support for base primaries
  * added translation strings to plugins and builtin luts
  * fixed glitches in color correction UI with plugins
  * added some bundled luts and CTL scripts
  * some more tweaks to the support for CTL scripts
  * colorcorrection: fixed glitches
  * clutstore: code cleanup, get rid of need for LUTs for
    parametric CTL scripts
  * colorcorrection: reorder pixel-level applications to make
    parametric luts faster
  * CTL LUT: use tabulation to avoid massive slowdown in
    apply_single with complex uniform parameters
  * parametric CTL LUTs: improved comment
  * parametric CTL LUTs: fixed glitches and improved logging
  * added support for parametric CTL luts
  * renamed HaldCLUT to CLUT
  * improved cache invalidation for LUTs
  * Added support for building ART with the ACES CTL interpreter
  * neutral tone curve: always use rec2020 for calculating the base
    hues for the final shifts
  * neutral tone curve: further tweaks to hue shifts
  * logenc: improved implementation of "highlights precompression"
  * neutral tone curve: alternative criterion for hue shifts and
    desaturation
  * neutral tone curve: added some hue shifts to (try to) consider
    perceptual effects
  * tuned threshold for hot pixel detection for xtrans
  * procparams: fix missing auto-computed settings when comparing
    ProcParams instances
  * procparams: properly consider auto-computed settings when
    comparing ProcParams instances
  * basic hot/dead pixel filter for xtrans cfa
  * spot removal: properly take film negative into account
  * added option to specify the currently-active snapshot in the
    output file name pattern</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1706097600">- Update to 1.21.1:
  * updated translations
  * slightly increased precision for CTL luts in low-quality mode
    (used for thumbnails)
  * fixed metadata display on thumbnails for png files
  * updated camera matrices
  * updated WB presets
  * local editing: make "copy region" insert after the current
    selection
  * ctl luts: fixed setting gui group for PT_CHOICE params
  * added fast export support to "send to external editor"
  * rawimage: put global black level for xtrans files where the
    code expects to find it
  * texture boost: increased range of detail threshold slider
  * exifpanel: improved metadata validators
  * profiles: tweaked "Simple Film Curve"
  * logenc: use 2 digits for black ev
  * improved support for translation of CTL scripts
  * added support for user-specific translation files
  * color wheel: edit by hue/saturation instead of x/y with right
    click
  * CTL lut params: allow to specify also a tooltip (markup) string
    as last parameter (after group name)
  * improved LUT precision for fast CTL rendering on the preview
  * local editing: add new region after the current selected one
    instead of always appending at the end
  * tone curve: added base curve control for seamless tone mapping
  * cli: accept relative filenames in --check-lut
  * tweaks to handling quality settings for CTL scripts
  * continued removing dead code
  * dynamic profiles: changed how "image type" filter works now it
    allows to distinguish between raw and non-raw images. For HDR
    and/ or PS, custom exif tags can be used
  * removed some dead code
  * further improvement in loading of lut params
  * improved robustness of CTL scripts support
  * Moving FileBrowserEntry static variable initialization to a
    dedicated method. Fixes a crash introduced a previous commit.
  * CTL interpreter: add ART ctlscripts to the module search path</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1710936000">- Update to 1.21.2:
  * added DCP profiles for some Nikon Z cameras
  * camconst: added raw crop for the Sony A9mkIII
  * lens corrections from metadata for Olympus cameras ported from
    darktable
  * added DCP profile for FUJI GFX 100
  * camconst: added PDAF pattern for the Fuji GFX 100 cameras
  * CTL luts: use the current working space by default if none is
    specified
  * tweaked verbosity messages of PDAF lines filter
  * updated camconst with more pdaf patterns for sony cameras
    (backported from RT)
  * added higher resolution image of the logo
  * filebrowser: fixed segfault when exiting the search box when
    all thumbnails are filtered out
  * fixed lensfun version detection for deprecated API removal
  * fixed compilation errors with lensfun master
  * stdimagesource: detect special ART ICC profiles for unbounded
    conversion
  * fixed detection of embedded profiles for non-raw thumbnails
  * masks: added global opacity slider
  * denoise: do not apply extra gamma for non-raw images
  * tone curve: avoid artifacts in highlights when using negative
    contrast with "Neutral" mode
  * cmakelists: sanitize PROC_LABEL to avoid shell syntax errors</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1712836800">- Update to 1.21.3:
  * updated camera matrices
  * color correction: properly refresh the curves displayed when
    changing the active region
  * camconst: updated raw_crop for Sony ILCE-7CR and ILCE-7RM5
  * camconst: fixed bug in overriding raw_crop entries from the
    user camconst.json</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1716811200">- Update to 1.22:
  * brush mask: added ctrl-z / ctrl-shift-z for undo/undo all
    during brush editing
  * cmake: do not link against mimalloc when using ASAN
  * colortemp.h: added missing "#include &lt;array&gt;"
  * CTL: take into account the CTL_MODULE_PATH env var when loading
    modules
  * file browser: show the number of selected files when &gt;1
  * metadata: explicitly handle the case of exiftool not found
  * procparams: disable histmatching when loading arp files with an
    already-computed tone curve
  * rawimage: properly extract the raw optical black for bayer
    sensors when using libraw
  * rawimage: simple workaround for libraw issue with some xtrans
    DNG files produced by dnglab
  * smoothing: added simple halation
  * spot removal: fixed bad preview when denoise is enabled
  * subprocess: fixed freeze happening when fork/exec failed in
    subprocess::popen
  * updated camera matrices
  * updated translations
  * updated WB presets
  * white balance: improved robustness in "extreme" situations
    (e.g. UV)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1716984000">- Add dependency to CTL on Tumbleweed.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1718798400">- Update to 1.22.1:
  * updated camera color matrices for OM Systems OM-1mkII and OM-5
  * reset adjusters with double click
  * exifpanel: improved tooltips for tags
  * lensexif: avoid division by 0 when computing Olympus ca coeffs</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1722945600">- Update to 1.23:
  * updated translations: Deutsch, Francais, Maygar, Catala
  * updated camera matrices:
    FUJIFILM GFX 100S II, FUJIFILM X-T50, GOOGLE PIXEL 8A FRONT
    CAMERA, GOOGLE PIXEL 8A ULTRAWIDE CAMERA, GOOGLE PIXEL 8A WIDE
    CAMERA, IPAD14,10 BACK CAMERA, IPAD14,11 BACK CAMERA, IPAD14,8
    BACK CAMERA, IPAD14,9 BACK CAMERA, IPAD16,3 BACK CAMERA,
    IPAD16,4 BACK CAMERA, IPAD16,5 BACK CAMERA, IPAD16,6 BACK
    CAMERA, PANASONIC DC-GH7, PANASONIC DC-S9, SONY XPERIA 1 VI
    FRONT CAMERA, SONY XPERIA 1 VI ULTRAWIDE CAMERA, SONY XPERIA 1
    VI WIDE CAMERA, SONY XPERIA 1 VI ZOOM CAMERA, SONY XPERIA 5 V
    FRONT CAMERA, SONY XPERIA 5 V ULTRAWIDE CAMERA, SONY XPERIA 5 V
    WIDE CAMERA
  * more fine tuning to curve support in CTL scripts
  * CTL scripts: started adding support for curve type parameters
  * CTL scripts: improved GUI customizability for curve parameters
  * metadata panel: added word wrapping for processing notes
  * added support to saving notes in the arp sidecars
  * adjuster: reverted "double click to reset" behaviour for spin
    buttons as it was buggy
  * adjuster: exclude the spin buttons from the "double-click to
    reset" effect</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1728561600">- Update to 1.24:
  * colorcorrection: allow user-defined order of CTL plugins
  * improved bundle scripts to allow including the ART-imageio plugins
  * imgiomanager: only print error messages when settings-&gt;verbose &gt; 0
  * better keyboard navigation for emptying the trash
  * file browser: improved keyboard navigation when applying filters
  * added preliminary support for Canon R5markII and R1
  * fixed raw crop for ILCE-7CR and ILCE-7RM5 in 16-shot pixel shift mode
  * added linear rec 709 icc profile
- Add fix-missing-lm.patch.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1728734400">- Update to 1.24.1:
  * file browser: improved keyboard navigation for session
    management</changelog>
</package>
<package pkgid="48a5eea6f0e69688ce1d2649fb91e66726b534fcace7da3a070f2be91a57e76e9d15baabf02375c81c2a547b8181f2c33ed7104b47ca90e6976b8b04e0f732e4" name="AdwSteamGtk" arch="noarch">
  <version epoch="0" ver="0.7.2" rel="bp160.1.10"/>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1706616000">- initial packaging</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706702400">- Use %lang_package in place of manually coding it</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@disroot.org&gt;" date="1715947200">- update to 0.6.11:
  * Update Gnome Runtime Info
  * translate=no properties
  * Update to new Theme Format
  * Use notify::selected on color theme connect
  * Custom CSS: Update to new Theme Format
- update to 0.6.10:
  * Fix update_contact to pass validation
  * Add vcs-browser and translate links
  * Update modules and runtime ver</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1729598400">- add missing requirement for XdpGtk4</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1731326400">- update to 0.7.0:
  * Update modules and runtime ver
  * Upstream Support: Implement windowcontrols changes
  * Grab Button Layout from Desktop Portal
  * Remove Auto from Window Controls
  * Clarify Window Controls
  * Update POT
- remove %suse_update_desktop_file, as it's deprecated</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1731758400">- update to 0.7.1:
  * Fix Color Theme Selection
  * Remove auto from win_controls options
  * update portuguese translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732363200">- update to 0.7.2:
  * Improved error handling when retrieving window control settings through portal
- switch to _datadir/icons, so Leap16 builds</changelog>
</package>
<package pkgid="44404ac502c276734e64d9e139630428673e3f5700347bdff0e1bea277a1992474f24012674612322e6ff8abfd0630b7ff12f70419f0cb86a7ce58a2380c8fa8" name="AdwSteamGtk-lang" arch="noarch">
  <version epoch="0" ver="0.7.2" rel="bp160.1.10"/>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1706616000">- initial packaging</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706702400">- Use %lang_package in place of manually coding it</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@disroot.org&gt;" date="1715947200">- update to 0.6.11:
  * Update Gnome Runtime Info
  * translate=no properties
  * Update to new Theme Format
  * Use notify::selected on color theme connect
  * Custom CSS: Update to new Theme Format
- update to 0.6.10:
  * Fix update_contact to pass validation
  * Add vcs-browser and translate links
  * Update modules and runtime ver</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1729598400">- add missing requirement for XdpGtk4</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1731326400">- update to 0.7.0:
  * Update modules and runtime ver
  * Upstream Support: Implement windowcontrols changes
  * Grab Button Layout from Desktop Portal
  * Remove Auto from Window Controls
  * Clarify Window Controls
  * Update POT
- remove %suse_update_desktop_file, as it's deprecated</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1731758400">- update to 0.7.1:
  * Fix Color Theme Selection
  * Remove auto from win_controls options
  * update portuguese translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732363200">- update to 0.7.2:
  * Improved error handling when retrieving window control settings through portal
- switch to _datadir/icons, so Leap16 builds</changelog>
</package>
<package pkgid="70c2c7c52c16a8d1b858877cd292ff81148a8d2167bb9350911b59e5c12a2c4fda2f4448a21ef48fa406f74f832bfe5d2cffab7a1d5a4bc857ada30665de0606" name="AppStream" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="c9c41bf13010bcd43f8bce26a412de16c7a6a3f73d632b535e76e13f7a6805b69b3b40cf0e19e46fb9e70e1b6e748462a62b2d417fa14691757d211fe1fc555f" name="AppStream" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="127829907f2104b58cfbbd67af722ea56161e6b6a3ee08585f45102ab076d4aab5d434853f14aa4d42eea715fcb5e1a77b043dbe64a54ac70dbb9119e04c7c60" name="AppStream-compose" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="b5f9225407220f25cd9f2f8a7c25d64f78fb22ff8636685623b67a4f7c4c60edfcb811ca41ad5d7d71ce36ad59b28465dadb06df2940ff324e6d36c846fe8009" name="AppStream-compose" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="19041a2d8025429166698c051769fbc987deec0edfe5c84eafa77ed0eecbea3ebddbab40f53de8a346837ab75aa12261b43147f1642ef3346d3922337f2d76ff" name="AppStream-compose-devel" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="20b2514f85097ba8ce159ec13ed454f8509e05c0804dc79f2bdda27d49382e9a39f99688f461fe4ab1c02b3b79e311eb81b7cb342a1a6811ba77f1aa2e2fb131" name="AppStream-compose-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="75d2585b01ef0513a1d6a82b94326100af3e7b59bb9a34037016ddc7266158463037b776fdd8119eb524e5b8e173ffd600771efe1bb935e790e72c2a0741d805" name="AppStream-devel" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="45dfade6ac59da21e91dde0ce4f02678de4778d15d455551fec9a3e8e80e11e2853d65bab3b2edc3fea31c1ee722a7f5911d77e912ed6eb54af0ca3c661a13e9" name="AppStream-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="dcbd505f50f0f70197525f587caf1af800056daf873947d3e99c5de65b2fe26de0b0d7f8cb42f206a3badd4f25a98177cab8e7f055f7d2809293b4c90e5f1b3f" name="AppStream-doc" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="1e765052f12152441287c624c86776e6fcb014e2dbfebd40c92b4b4a508bc96ea9f54f1d0fe9f7407d82e4df4d925bfe97bbdbbf2105c58235b4f33f0beabd6e" name="AppStream-doc" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="1c47bb3d312413b5aec61bf7863360aeb01cb60839abfd04cdac201400fd1efe6d4fda3b769f8f25e6c0669fa6598fbafafbe442fac4a11676d90f9854472140" name="AppStream-lang" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="77d1b1d9d620fe5b75adc3dd38bf71fc705381e94309f6aea15d1aa914627ca402c93329559383a757cbe9902df64251eee7b8afd8c09c70999ca87c5ffad6c3" name="AppStream-lang" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="b8324d2d67beec9d8cdc2610e7978575e112f61049f5b7dee10f80ee7c2d5c5f083d0fce27d0a60089bcaaf44eade362f299d0c413ae21d24ef4d6f49993b0b0" name="AusweisApp" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="bp160.1.3"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712836800">- New upstream release
  + Version 2.1.1
  - Visual adjustments and optimization of the graphical user interface.
  - Fixed rarely occurring problems in connection with the browser used.
  - Textual adjustments.
  - Fixed READER messages in the SDK when using unknown cards or when
    the connection to the card is unstable.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720180800">- New upstream release
  + Version 2.2.0
  - Visual adjustments and optimization of the graphical user interface.
  - Display of the old and new device name when using "Smartphone as card
    reader" if the name of a device has changed.
  - An information page has been added at the end of an authentication before
    forwarding to the service provider.
  - Increased the time allowed to respond to card commands on Android to support
    badges that have switched to a safe slow mode after too many incorrect CAN entries.
  - Improved accessibility options.
  - Support for Android 8 has been discontinued.
  - The "Smartphone as card reader" function now requires at least version 2.1.0.
  - Support for ChromeOS has been added.
  - Support for key lengths smaller than 3000 bits has been discontinued.
  - Changelog added to the documentation for the SDK.
  - Functional extension of the SDK (see changelog).
  - Update of Qt to version 6.7.2.
  - Update of OpenSSL to version 3.3.1.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720785600">- Cherry-pick upstream patch to fix QML error with Qt 6.6
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Add missing libQt6Svg6 runtime dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726056000">- New upstream release
  + Version 2.2.1
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard usability.
  - Prevention of the display of external content in
    the graphical user interface.
  - Support for smartphones with Android 15 where
    optimized memory management has been activated.
  - Support for 16 KB page sizes on Android.
  - Stabilization of the iOS SDK during fast restarts.
  - Correction of the behavior when using Qt 6.6.3.
  - Avoidance of a log file within the container in the container SDK.
  - Update of the Android NDK to r27b (27.1.12297006).
  - Update of the Android SDK Platform to Android 15 (API level 35).
  - Update of OpenSSL to version 3.3.2.
- Drop patches for issues fixed upstream
  + 0001-fix-qml-error-with-qt6.6.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1729684800">- New upstream release
  + Version 2.2.2
  - Visual adjustments and optimization of the graphical user interface.
  - Optimization of accessibility and keyboard operability.
  - Addition of the Android ABIs armeabi-v7a and x86_64 in addition to
    arm64-v8a in the SDK.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1730462400">- Add patch from Fedora to enforce use of legacy OpenSSL API
  + 0001-use-legacy-openssl-api.patch (bsc#1231686)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1741262400">- New upstream release
  + Version 2.3.0
  - Introduction of onboarding.
  - Visual adjustments and optimization of the graphical user interface.
  - macOS Monterey 12 is no longer supported.
  - iOS 14 and 15 are no longer supported.
  - The integrated simulator now performs the terminal authentication
    completely instead of accepting every input.
  - Update from Android NDK to r27c (27.2.12479018).
  - Update of Qt to version 6.8.1.
  - Update of OpenSSL to version 3.4.1.
- Refresh 0001-use-legacy-openssl-api.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1742299200">- New upstream release
  + Version 2.3.1
  - Fixed compatibility of AusweisApp with Windows Server 2016.
  - Visual adjustments and optimization of the graphical user interface.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1750939200">- New upstream release
  + Version 2.3.2
  - Improvements with regards to accessibility.
  - Visual adjustments and optimization of the graphical interface.
  - Temporarily removing an ID card on an Android smartphone as a card
    reader before typing in the password no longer results in an error.
  - On Windows, smartphones that can only be reached via IPv6 are now
    also recognized as card readers.
  - Added support for smartphones as card readers on Windows Server.
  - Relative URL redirects during authentication are now correctly
    taken into account.</changelog>
</package>
<package pkgid="5d3b8c256ad5a6a99eafada020104434d927eb470e64ae377eb69aa96b6d6110cae9edeb47bd747ed77a99f29f59ce9eb65222dd8490c6b9338589dc98ea5c23" name="Bear" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="bp160.1.15"/>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1632225600">- New upstream release 3.0.15
- Removed fix-python3-tests.patch (replaced with a sed call)
- Removed fix-libexec-tests.patch (merged upstream)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1642593600">- Update to version 3.0.18
  * Fix compile errors with g++ 11.02 (#434, @shrkamat)
  * Added CMAKE_EXE_LINKER_FLAGS to external projects. (#437, @XaverKlemenschits)
  * Fixed Libtool test failure. (#435, @gyakovlev)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1666008000">- Update to version 3.0.20:
  * Set errno to zero after libexec's on_load (#470, @Absolucy)
  * Add C compiler argument for dependencies (#462, @arturo-salinas)
  * Update dependency versions.
  * Fix build failure with fmt-9.0.0 (#471)
  * Temp workaround note for old 2.4 release (#440 @ZuseZ4)
  * Build: local dependencies get first in the search path (#453 @ton)
  * Fix cannot execute binary file (#439 @marxin)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1686657600">- Update to version 3.1.2:
  * fix incorrect parsing arguments with same prefixes (#519, @MashaK5)
  * Avoid implicit function declarations in tests, for C99
    compatibility (#521, @fweimer-rh)
- From skipped 3.1.1:
  * intercept: file open with O_TRUNC to avoid corrupt output if
    the file is already exists. (#511 , @asierllano)
  * intercept: file writing needs to loop on content until it gets
    empty (#512 , @asierllano)
  * citnames: output writing is an atomic operation (#513 , @asierllano)
  * documentation: run pandoc against man page sources
- From skipped 3.1.0:
  * Bear internal running processes are no longer released as
    executable.
    This was requested to avoid collision with the interception-tool package.
    (Special thanks to @samu698 for the patches.)
  * missing preprocessor guard for confstr (#475 @mahmood601)
  * documentation fixes
- From skipped 3.0.21:
  * Fix libexec.so linking problem (#477, @neverpanic )
  * Fix various CMake flag problems (#480, #484, @leleliu008 , @adfernandes )
  * Fix repology link in README file (#482, @dmitris )
  * Process execution close stdin file descriptor in wrapper.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1701518400">- Update to version 3.1.3
  * citnames: include filter works with trailing separator
  * dependency: fmt to work with all recent versions
  * cmake: Avoid warning about DOWNLOAD_EXTRACT_TIMESTAMP ( #531, @Spongman )
  * language: Add missing include for std::find ( #530, @thesamesam )</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Disable tests as they timeout in OBS</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1711454400">- Build with GCC13 on Leap 15</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1716033600">- Update to version 3.1.4
  * citnames: Allow for include flag glued to the parameter
  * intercept: gRPC dependency usage fix</changelog>
  <changelog author="Laszlo &lt;helaslo@helaslo.net&gt;" date="1723032000">- Added not-yet tagged patch 0001-Fix-FMT11-Build.patch from
  upstream to fix build on FMT11</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1728216000">- update to version 3.1.5
  * dependency: fix fmt library usage in the project
  * add gfortran as recognised compiler
- Drop patch 0001-Fix-FMT11-Build.patch, now part of the release</changelog>
</package>
<package pkgid="1c8882501c5cfbd95bbf877ef27042eb619a4af8c7856414641b1dba885fdf20eb9b918bce2627f720e19b07c6692b17a0b91727d9c99fa966d4992c89a85d75" name="Botan" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="jsikes@suse.com" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="meissner@suse.com" date="1700222400">- remove botan binary (moves to Botan3)</changelog>
  <changelog author="angel.yankov@suse.com" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722340800">- Botan 3.5.0, the latest stable release of the Botan 3 series
  * TLS 1.3 supported
  * large header cleanup compared to v2
  * start support of Post Quantum Crypto
  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
    CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
  EOL at the end of 2024.</changelog>
  <changelog author="angel.yankov@suse.com" date="1729857600">- Botan 3.6.0, the latest stable release of the Botan 3 series
  * Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
  * Add support for AVX2-VAES instructions
  * Add support for new ECC curves
  * Fix: CVE-2024-50382
  For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21</changelog>
  <changelog author="Sauerlandlinux@gmx.de" date="1730808000">- Botan 3.6.1, the latest stable release of the Botan 3 series
  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
  * In speed command line utility, also iterate keygen several times. (GH #4381)</changelog>
  <changelog author="angel.yankov@suse.com" date="1741780800">- Botan 3.7.1, latest stable release
  * Revert a change that prevented build.h from being usable from C applications.
  * Add post-quantum scheme Classic McEliece
  * In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
  * Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
  * In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
  * Add new EC key constructors
  * Internal EC optimizations and improvements
  * Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
  * Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
  * TPM 2.0 improvements
  * Fix a build issue when compiling with MSVC on ARM
  * Find full changelog at: https://botan.randombit.net/news.html</changelog>
</package>
<package pkgid="322523a3b699b6eca18efc422b17f74846a2dbf3eaa8db02dd1a1420f2eab7b2e03af4510a2e5970bd50d2597969834345169720958426b4007016a27f288b49" name="Botan" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="160000.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="jsikes@suse.com" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="meissner@suse.com" date="1700222400">- remove botan binary (moves to Botan3)</changelog>
  <changelog author="angel.yankov@suse.com" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722340800">- Botan 3.5.0, the latest stable release of the Botan 3 series
  * TLS 1.3 supported
  * large header cleanup compared to v2
  * start support of Post Quantum Crypto
  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
    CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
  EOL at the end of 2024.</changelog>
  <changelog author="angel.yankov@suse.com" date="1729857600">- Botan 3.6.0, the latest stable release of the Botan 3 series
  * Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
  * Add support for AVX2-VAES instructions
  * Add support for new ECC curves
  * Fix: CVE-2024-50382
  For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21</changelog>
  <changelog author="Sauerlandlinux@gmx.de" date="1730808000">- Botan 3.6.1, the latest stable release of the Botan 3 series
  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
  * In speed command line utility, also iterate keygen several times. (GH #4381)</changelog>
  <changelog author="angel.yankov@suse.com" date="1741780800">- Botan 3.7.1, latest stable release
  * Revert a change that prevented build.h from being usable from C applications.
  * Add post-quantum scheme Classic McEliece
  * In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
  * Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
  * In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
  * Add new EC key constructors
  * Internal EC optimizations and improvements
  * Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
  * Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
  * TPM 2.0 improvements
  * Fix a build issue when compiling with MSVC on ARM
  * Find full changelog at: https://botan.randombit.net/news.html</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775995200">- Security fix:
  * CVE-2026-34582: client authentication bypass in TLS 1.3 implementation
    (bsc#1261880)
  * Add patch Botan-CVE-2026-34582.patch</changelog>
</package>
<package pkgid="f60c87ae3fd9f51a96621d37ffea45c7523ddd2e3ca0c5c006165dd2efd1857753021cdc1cd8219cedcd2b1b1eda2527beb0647bd6eeda165d48fcf9888b0198" name="Botan" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="160000.4.1"/>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="jsikes@suse.com" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="meissner@suse.com" date="1700222400">- remove botan binary (moves to Botan3)</changelog>
  <changelog author="angel.yankov@suse.com" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722340800">- Botan 3.5.0, the latest stable release of the Botan 3 series
  * TLS 1.3 supported
  * large header cleanup compared to v2
  * start support of Post Quantum Crypto
  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
    CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
  EOL at the end of 2024.</changelog>
  <changelog author="angel.yankov@suse.com" date="1729857600">- Botan 3.6.0, the latest stable release of the Botan 3 series
  * Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
  * Add support for AVX2-VAES instructions
  * Add support for new ECC curves
  * Fix: CVE-2024-50382
  For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21</changelog>
  <changelog author="Sauerlandlinux@gmx.de" date="1730808000">- Botan 3.6.1, the latest stable release of the Botan 3 series
  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
  * In speed command line utility, also iterate keygen several times. (GH #4381)</changelog>
  <changelog author="angel.yankov@suse.com" date="1741780800">- Botan 3.7.1, latest stable release
  * Revert a change that prevented build.h from being usable from C applications.
  * Add post-quantum scheme Classic McEliece
  * In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
  * Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
  * In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
  * Add new EC key constructors
  * Internal EC optimizations and improvements
  * Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
  * Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
  * TPM 2.0 improvements
  * Fix a build issue when compiling with MSVC on ARM
  * Find full changelog at: https://botan.randombit.net/news.html</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775995200">- Security fix:
  * CVE-2026-34582: client authentication bypass in TLS 1.3 implementation
    (bsc#1261880)
  * Add patch Botan-CVE-2026-34582.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1776168000">- Security fix:
  * CVE-2026-32884: Certificate validation bypass due to mixed-case Common Name in X.509 certificates ( bsc#1261993 )
  * Added Botan-CVE-2026-32884.patch</changelog>
</package>
<package pkgid="9a6e83c25b59c87edc9c9f46e65808a9c747a9752495f7e3e10c2c297022bca033bf442baf310fac24e0b9e3e821f846e98d88fabfc23d75a61e33fc50fcdbe6" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="3.7.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1637755200">- update to 2.18.2:
  * Avoid using short exponents when encrypting in ElGamal, as some PGP
    implementations generate keys with parameters that are weak when
    short exponents are used CVE-2021-40529 boo#1190244
  * Fix a low risk OAEP decryption side channel
  * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
    and XCode 13
  * Remove support in OpenSSL provider for algorithms which are
    disabled by default in OpenSSL 3.0
  * Add CI based on GitHub actions to replace Travis CI
  * Fix the online OCSP test, as the certificate involved had expired.
  * Fix some test failures induced by the expiration of the trust root
    "DST Root CA X3"</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="jsikes@suse.com" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="meissner@suse.com" date="1700222400">- remove botan binary (moves to Botan3)</changelog>
  <changelog author="angel.yankov@suse.com" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722340800">- Botan 3.5.0, the latest stable release of the Botan 3 series
  * TLS 1.3 supported
  * large header cleanup compared to v2
  * start support of Post Quantum Crypto
  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
    CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
  EOL at the end of 2024.</changelog>
  <changelog author="angel.yankov@suse.com" date="1729857600">- Botan 3.6.0, the latest stable release of the Botan 3 series
  * Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
  * Add support for AVX2-VAES instructions
  * Add support for new ECC curves
  * Fix: CVE-2024-50382
  For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21</changelog>
  <changelog author="Sauerlandlinux@gmx.de" date="1730808000">- Botan 3.6.1, the latest stable release of the Botan 3 series
  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
  * In speed command line utility, also iterate keygen several times. (GH #4381)</changelog>
  <changelog author="angel.yankov@suse.com" date="1741780800">- Botan 3.7.1, latest stable release
  * Revert a change that prevented build.h from being usable from C applications.
  * Add post-quantum scheme Classic McEliece
  * In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
  * Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
  * In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
  * Add new EC key constructors
  * Internal EC optimizations and improvements
  * Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
  * Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
  * TPM 2.0 improvements
  * Fix a build issue when compiling with MSVC on ARM
  * Find full changelog at: https://botan.randombit.net/news.html</changelog>
</package>
<package pkgid="0c902193e0dae824cde8c53c53361705eda5b0d9302cac4580c8a3ebf89a78586a73588f92ed6092b9c63c3063eb9e3c460fe6ddadfee3af8ac4a6f5f4b8c09d" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="3.7.1" rel="160000.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1642939200">- update to 2.19.1:
  * Add a forward error correction code compatible with the zfec
    library</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="jsikes@suse.com" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="meissner@suse.com" date="1700222400">- remove botan binary (moves to Botan3)</changelog>
  <changelog author="angel.yankov@suse.com" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722340800">- Botan 3.5.0, the latest stable release of the Botan 3 series
  * TLS 1.3 supported
  * large header cleanup compared to v2
  * start support of Post Quantum Crypto
  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
    CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
  EOL at the end of 2024.</changelog>
  <changelog author="angel.yankov@suse.com" date="1729857600">- Botan 3.6.0, the latest stable release of the Botan 3 series
  * Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
  * Add support for AVX2-VAES instructions
  * Add support for new ECC curves
  * Fix: CVE-2024-50382
  For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21</changelog>
  <changelog author="Sauerlandlinux@gmx.de" date="1730808000">- Botan 3.6.1, the latest stable release of the Botan 3 series
  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
  * In speed command line utility, also iterate keygen several times. (GH #4381)</changelog>
  <changelog author="angel.yankov@suse.com" date="1741780800">- Botan 3.7.1, latest stable release
  * Revert a change that prevented build.h from being usable from C applications.
  * Add post-quantum scheme Classic McEliece
  * In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
  * Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
  * In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
  * Add new EC key constructors
  * Internal EC optimizations and improvements
  * Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
  * Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
  * TPM 2.0 improvements
  * Fix a build issue when compiling with MSVC on ARM
  * Find full changelog at: https://botan.randombit.net/news.html</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775995200">- Security fix:
  * CVE-2026-34582: client authentication bypass in TLS 1.3 implementation
    (bsc#1261880)
  * Add patch Botan-CVE-2026-34582.patch</changelog>
</package>
<package pkgid="36199f5b32dfc256633374423d7701c40f12b9d7da65ff4684fc109f46137f4828131ad6cce08cf4c92d21e806b576e14c71d0c2f983282728d61ba68901c383" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="3.7.1" rel="160000.4.1"/>
  <changelog author="dmueller@suse.com" date="1654689600">- update to 2.19.2:
  * Add support for parallel computation in Argon2
  * Add SSSE3 implementation of Argon2
  * The OpenSSL provider was incompatible with OpenSSL 3.0.
    It has been removed
  * Avoid using reserve in secure_vector appending, which caused
    a performance problem
  * Fix TLS::Text_Policy behavior when X25519 is disabled
    at build time
  * Fix several warnings from Clang</changelog>
  <changelog author="jsikes@suse.com" date="1668686400">- Update to 2.19.3:
  * validate that an embedded certificate was issued by the end-entity
    issuing certificate authority when checking OCSP responses.
  * CVE-2022-43705
  * bsc#1205509</changelog>
  <changelog author="meissner@suse.com" date="1700222400">- remove botan binary (moves to Botan3)</changelog>
  <changelog author="angel.yankov@suse.com" date="1721044800">- Update to 2.19.5:
  * Fix multiple Denial of service attacks due to X.509 cert processing:
  * CVE-2024-34702 - bsc#1227238
  * CVE-2024-34703 - bsc#1227607
  * CVE-2024-39312 - bsc#1227608
  * Fix a crash in OCB
  * Fix a test failure in compression with certain versions of zlib
  * Fix some iterator debugging errors in TLS CBC decryption.
  * Avoid a miscompilation in ARIA when using XCode 14</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1722340800">- Botan 3.5.0, the latest stable release of the Botan 3 series
  * TLS 1.3 supported
  * large header cleanup compared to v2
  * start support of Post Quantum Crypto
  * removed: CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES,
    CBC-MAC, Tiger, CECPQ1, and NewHope
- The legacy Botan 2 series moved to Botan2 source package. It is
  EOL at the end of 2024.</changelog>
  <changelog author="angel.yankov@suse.com" date="1729857600">- Botan 3.6.0, the latest stable release of the Botan 3 series
  * Fully integrate and further optimize the new ECC library first introduced in 3.5.0. For common curves, operations are 2 to 3 times faster. This also introduces a new API for low level EC operations, such a point multiplication, using EC_Scalar and EC_AffinePoint types
  * Add support for AVX2-VAES instructions
  * Add support for new ECC curves
  * Fix: CVE-2024-50382
  For full changelog, see: https://botan.randombit.net/news.html#version-3-6-0-2024-10-21</changelog>
  <changelog author="Sauerlandlinux@gmx.de" date="1730808000">- Botan 3.6.1, the latest stable release of the Botan 3 series
  * Notice: Botan 3.7.0 will remove support for the currently supported experimental Kyber r3 TLS ciphersuites, leaving only the standardized ML-KEM suites. (GH #4407 #4403)
  * Fix a bug in x86 CPUID detection introduced in 3.6.0 which would cause crashes on systems which have BMI1 but not BMI2. (GH #4402 #4401)
  * Fix a bug in SLH-DSA signing, which did not default to the FIPS required randomized variant. (GH #4398)
  * Modify how elliptic curve blinding is performed, reducing the number of self-additions that may occur during multiplication. (GH #4408)
  * In speed command line utility, also iterate keygen several times. (GH #4381)</changelog>
  <changelog author="angel.yankov@suse.com" date="1741780800">- Botan 3.7.1, latest stable release
  * Revert a change that prevented build.h from being usable from C applications.
  * Add post-quantum scheme Classic McEliece
  * In TLS enable the hybrid x25519/ML-KEM-768 post quantum secure key exchange by default for clients and servers.
  * Support for the pre-standard Kyber-r3 key exchange has been removed from TLS
  * In TLS add support for “pure” ML-KEM key exchange, in addition to the existing hybrid ML-KEM + EC suites.
  * Add new EC key constructors
  * Internal EC optimizations and improvements
  * Fix a regression introduced in 3.6.0 which would cause many P-521 secret keys to be rejected as invalid due to not having the expected length.
  * Fix a bug preventing parsing of OCSP responses containing more than one pinned certificate
  * TPM 2.0 improvements
  * Fix a build issue when compiling with MSVC on ARM
  * Find full changelog at: https://botan.randombit.net/news.html</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775995200">- Security fix:
  * CVE-2026-34582: client authentication bypass in TLS 1.3 implementation
    (bsc#1261880)
  * Add patch Botan-CVE-2026-34582.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1776168000">- Security fix:
  * CVE-2026-32884: Certificate validation bypass due to mixed-case Common Name in X.509 certificates ( bsc#1261993 )
  * Added Botan-CVE-2026-32884.patch</changelog>
</package>
<package pkgid="6bf60199c2f7b82119ead92833f36c419575c3706620255ff993c66827af34c824d91100432156e5d4779f73a921068aea83acad7ce07e39a64ef69924c8e1b7" name="Cadence" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="bp160.1.14"/>
  <changelog author="edogawa@aon.at" date="1410782400">- New package, initial build (version 0.8.1)</changelog>
  <changelog author="sflees@suse.de" date="1531137600">- Run spec cleaner for a cleaner starting point
- Update to 0.9.0</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1575547200">- Update to 0.9.1
- Fix DBus casting issues triggered in Python 3.8
- Fix ALSA capture device list on Linux
- Add RPM-based distribution support to Claudia-Launcher
- Don't set SSE flags in the Makefile
- Simplify UI regarding ALSA-MIDI bridge
- Other small miscellanerous fixes</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1664539200">- Update to 0.9.2
  - Change systray tooltip from HTML to plaintext
  - Fallback to GLib DBus if Qt DBus is not available
  - Fix build with Qt 5.15+
  - Fix compatibility with Python 3.10
- Drop Fix-build-with-Qt-5-15.patch because now in upstream.
- Switch URL tag from http://kxstudio.sourceforge.net/cadence to
  https://kx.studio/Applications:Cadence and insert new source url.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1694001600">- Fix security bugs related to use of Fixed Temporary Files.
  (bsc#1213330, bsc#1213983, bsc#1213985)
  * 0001-cadence_aloop_daemon-place-lockfile-into-non-public-.patch
  * 0001-cadence.py-wine-ASIO-settings-use-safe-tempfile.patch</changelog>
</package>
<package pkgid="084a2f870ad4369a16c0a32b4adb40d9acfe45fb34322b3fededaace7309816f126575536ff26090dea39d82f040c53674f79c30da97725ae637d2ed5c3b2b97" name="CastXML-devel" arch="x86_64">
  <version epoch="0" ver="0.6.8" rel="bp160.1.15"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 0.5.1:
  * Bug fix: tests fail on 32-bit architectures
    (gh#CastXML/CastXML#232).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1680350400">- Update to version 0.6.1:
  * test: Restore support for CMake &lt;= 3.25 in test suite
- Changes from version 0.6.0:
  * Output:
  - Generate functions with rvalue-references in signatures.
  - Generate RValueReferenceType elements in castxml output
    format.
  - Add AutoType element for "auto" types that have not been
    deduced.
  - Add ElaboratedType elements with "qualifier=" attribute.
  - Add a "keyword=" attribute to ElaboratedType elements.
  - Forward complete output requests through ElaboratedType.
  - Explicitly guard empty struct name.
  - Avoid generating "init=" attribute for float128
    compatibility type.
  - Factor out helper to check for float128 compatibility decl.
  * RunClang: Detect -std=c++20 from --castxml-cc-{gnu,msvc} test:
  - Add case with Elaborated type due to qualified name.
  - Update assume_aligned case to suppress -Wundefined-inline
    warning.
  - Tolerate '-internal-*' flags after '-isystem' flags.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 0.6.2:
  * Support LLVM/Clang 17.0.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1705665600">- Update to version 0.6.3:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1705924800">- Update to version 0.6.4:
  * Improve simulated _Float## types to support glibc headers
    (gh#CastXML/CastXML#251).</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1711022400">- Add upstream change:
  * 0001-Port-to-LLVM-Clang-Git-release-18.x-as-of-2024-02-05.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713096000">- Update to version 0.6.5:
  * LLVM 18 compatibility.
- Drop upstream incorporated patch:
  0001-Port-to-LLVM-Clang-Git-release-18.x-as-of-2024-02-05.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1715688000">- Update to version 0.6.6:
  * RunClang: Tolerate GNU __attribute__((__assume__(...)))
  * Remove GCC builtin definitions for features Clang does not
    implement</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1720440000">- Update to version 0.6.7:
  * Add support for GNU builtin __float80 type.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721649600">- Update to version 0.6.8:
  * test: Fix expected cc-gnu predefined macro ordering</changelog>
</package>
<package pkgid="d43427e60ef5b8a3f491a47c382c1a7b075cf4326e21ab32833a90c7dce31b41f2ccb7860c8c1c45524b3b11b2ece023eae8aae37a423e40e200712df4c84dca" name="Catch2-2-devel" arch="x86_64">
  <version epoch="0" ver="2.13.10" rel="160000.2.2"/>
  <changelog author="badshah400@gmail.com" date="1665230400">- Initial package:
  * Branch off from obs://devel:libraries:c_c++/Catch2 at version
    2.13.9 and rename src package to Catch2-2.
  * Catch2-2-devel: Add 'Provides: Catch2-devel = %{version}'
    and 'Conflicts: Catch2-devel &gt;= 3'.
  * Drop CMAKE_RELEASE_TYPE=Release to use default
  'RelWithDebInfo' value from %cmake macro.</changelog>
  <changelog author="badshah400@gmail.com" date="1674043200">- Update to version 2.13.10:
  * Fixed issue with catch_discover_tests when there is multiple of
    256 tests (gh#catchorg/Catch2#2401, gh#catchorg/Catch2#2503).
  * Catch2-provided main and wmain are explicitly marked as __cdecl
    when compiled with MSVC (gh#catchorg/Catch2#2486,
    gh#catchorg/Catch2#2487).
  * Replaced deprecated std::aligned_storage
    (gh#catchorg/Catch2#2419, gh#catchorg/Catch2#2420).
- Minor rebase of fix-pragmas-old-gcc.patch to apply cleanly.</changelog>
</package>
<package pkgid="bbd81b1d7526552812dbb9f16e179eb6491a85d683bb62e548383e8fd229b261145eae7bef0f617754cbcb17a0bbb0d9006534785dea4d40796d6f673d073723" name="Catch2-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="160000.2.2"/>
  <changelog author="aloisio@gmx.com" date="1618315200">- Update to version 2.13.5
  Improvements:
  * Added workaround for bug in XLC 16.1.0.1
  * Add detection for LCC when it is masquerading as GCC
  * Modified posix signal handling so it supports newer libcs
    + `MINSIGSTKSZ` was no longer usable in constexpr context.
  Fixes:
  * Fixed compilation of benchmarking when `min` and `max`
    macros are defined
    + Including `windows.h` without `NOMINMAX` remains a really
    bad idea, don't do it
  Miscellaneous:
  * `Catch2WithMain` target (static library) is no longer built
    by default
    + Building it by default was at best unnecessary overhead
    for people not using it, and at worst it caused trouble
    with install paths
    + To have it built, set CMake option
    `CATCH_BUILD_STATIC_LIBRARY` to `ON`
  * The check whether Catch2 is being built as a subproject is
    now more reliable
    + The problem was that if the variable name used internally
    was defined the project including Catch2 as subproject, it
    would not be properly overwritten for Catch2's CMake.
  version 2.13.4
  Improvements:
  * Improved the hashing algorithm used for shuffling test cases
    + `TEST_CASE`s that differ only in the last character should
    be properly shuffled
    + Note that this means that v2.13.4 gives you a different
    order of test cases than 2.13.3, even given the same seed.
  Miscellaneous:
  * Deprecated `ParseAndAddCatchTests` CMake integration
    + It is impossible to implement it properly for all the
    different test case variants Catch2 provides, and there
    are better options provided.
    + Use `catch_discover_tests` instead, which uses runtime
    information about available tests.
  * Fixed bug in `catch_discover_tests` that would cause it to
    fail when used in specific project structures
  * Added Bazel build file
  * Added an experimental static library target to CMake</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 2.13.6
  * Disabling all signal handlers no longer breaks compilation
  * catch_discover_tests should handle escaped semicolon (;) better</changelog>
  <changelog author="aloisio@gmx.com" date="1628164800">- Update to version 2.13.7
  Fixes:
  * Added missing `&lt;iterator&gt;` include in benchmarking.
  * Fixed noexcept build with benchmarking enabled.
  * Fixed build for compilers with C++17 support but without
    C++17 library support.
  * JUnit only uses 3 decimal places when reporting durations.
  * `!mayfail` tagged tests are now marked as `skipped` in JUnit
    reporter output.</changelog>
  <changelog author="rpm@fthiessen.de" date="1650974400">- Update to 2.13.9
  * Fixed issue with -# (filename-as-tag) flag when __FILE__ expands
    into filename without directories
  * Fixed CAPTURE macro not being variadic when disabled through
    CATCH_CONFIG_DISABLE
- Update to 2.13.8
  * Fix: Made Approx::operator() const
  * Improved pkg-config files
  * The macro-generated names for things like TEST_CASE no longer
    create reserved identifiers
  * Clang-tidy should no longer warn about missing virtual dispatch
    in FilterGenerator's constructor
- Added fix-pragmas-old-gcc.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1664020800">- Update to 3.1.0
  * Added type constraints onto random generator
  * Added All/Any/NoneTrue range matchers
  * The JUnit reporter now normalizes classnames from C++ namespaces
    to Java-like namespaces
  * The Bazel support now understands BAZEL_TEST environment variable
  * catch_discover_tests now has a new options for setting library
    load path(s) when running the Catch2 binary
  * Fixed crash when listing listeners without any registered listeners
- Update to 3.0.1
  * Breaking changes:
  * Catch2 is now split into multiple headers
  * C++14 is the minimum required C++ version
  * CATCH_CONFIG_DISABLE_MATCHERS no longer exists.
  * CATCH_CONFIG_ENABLE_CHRONO_STRINGMAKER no longer exists.
  * ANON_TEST_CASE has been removed
  * Multiple commandline flags have changed their behavior
  * See migration guide
    https://github.com/catchorg/Catch2/blob/v3.0.1/docs/migrate-v2-to-v3.md#top
  * Matchers have been extended with the ability to use different
    signatures of match
  * templated match member function
  * Provided generic matchers like IsEmpty, SizeIs, Contains,
    AllMatch, AnyMatch, NoneMatch
  * Significant compilation time improvements
  * Some runtime performance optimizations
  * Many other changes and bugfixes
    https://github.com/catchorg/Catch2/releases/tag/v3.0.1
- Removed upstream merged fix-pragmas-old-gcc.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1674043200">- Update to version 3.2.1:
  * Fix the reworked decomposer to work with older (pre 9) GCC
    versions (gh#catchorg/Catch2#2571).
- Changes from version 3.2.0:
  * Added `CATCH_CONFIG_GETENV` compile-time toggle
  * (gh#catchorg/Catch2#2562).
  * Added support for more Bazel test environment variables.
  * Bunch of small tweaks and improvements in reporters.
  * Added support for asserting on types that can only be compared
  * with literal 0 (gh#catchorg/Catch2#2555).
  * Simplified internals of matcher related macros.
  * Cleaned out some warnings and static analysis issues.
  * Fixed serialization of test filters so the output roundtrips.
  * Catch2's build no longer leaks `-ffile-prefix-map` setting  to
  * dependees (gh#catchorg/Catch2#2533).</changelog>
  <changelog author="badshah400@gmail.com" date="1674475200">- Update to version 3.3.0:
  * Added MessageMatches exception matcher
    (gh#catchorg/Catch2#2570).
  * Added RangeEquals and UnorderedRangeEquals generic range
    matchers (gh#catchorg/Catch2#2377).
  * Added SKIP macro for skipping tests from within the test body
    (gh#catchorg/Catch2#2360).
  * Restored support for PPC Macs in the break-into-debugger
    functionality (gh#catchorg/Catch2#2619).
  * Made our warning suppression compatible with CUDA toolkit pre
    11.5 (gh#catchorg/Catch2#2626).
  * Cleaned out some static analysis complaints.
  * Fixed macro redefinition warning when NVCC was reporting as
    MSVC (gh#catchorg/Catch2#2603).
  * Fixed throws in generator constructor causing the whole binary
    to abort (gh#catchorg/Catch2#2615).
  * Fixed missing transitive include with libstdc++13
    (gh#catchorg/Catch2#2611).
  * Improved support for dynamic library build with non-MSVC
    compilers on Windows (gh#catchorg/Catch2#2630).
  * When used as a subproject, Catch2 keeps its generated header
    in a separate directory from the main project
    (gh#catchorg/Catch2#2604).</changelog>
  <changelog author="badshah400@gmail.com" date="1676376000">- Update to version 3.3.1:
  * Reduced allocations and improved performance, mainly from
    smarter handling of `SECTION`s, especially sibling `SECTION`s.</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 3.3.2:
  * Further reduced allocations
  * The compact, console, TAP and XML reporters perform less
    allocations in various cases
  * Removed 1 allocation per entered `SECTION`/`TEST_CASE`.
  * Removed 2 allocations per test case exit, if stdout/stderr is
    captured
  * Improved performance
  * Section tracking is 10%-25% faster than in v3.3.0
  * Assertion handling is 5%-10% faster than in v3.3.0
  * Test case registration is 1%-2% faster than in v3.3.0
  * Tiny speedup for registering listeners
  * Tiny speedup for `CAPTURE`, `TEST_CASE_METHOD`,
    `METHOD_AS_TEST_CASE`, and `TEMPLATE_LIST_TEST_*` macros.
  * `Contains`, `RangeEquals` and `UnorderedRangeEquals` matchers
    now support ranges with iterator + sentinel pair
  * Added `IsNaN` matcher
  * Unlike `REQUIRE(isnan(x))`, `REQUIRE_THAT(x, IsNaN())` shows
    you the value of `x`.
  * Suppressed `declared_but_not_referenced` warning for NVHPC
    (#2637)
  * Fixed performance regression in section tracking introduced
    in v3.3.1
  * Extreme cases would cause the tracking to run about 4x slower
    than in 3.3.0</changelog>
  <changelog author="badshah400@gmail.com" date="1690459200">- Update to version 3.4.0:
  * VectorEquals supports elements that provide only == and not !=
    (gh#catchorg/Catch2#2648).
  * Catch2 supports compiling with IAR compiler
    (gh#catchorg/Catch2#2651).
  * Various small internal performance improvements.
  * Various small internal compilation time improvements.
  * XMLReporter now reports location info for INFO and WARN
    (gh#catchorg/Catch2#1251).
  * Documented that SKIP in generator constructor can be used to
    handle empty generator (gh#catchorg/Catch2#1593).
  * Added experimental static analysis support to TEST_CASE and
    SECTION macros (gh#catchorg/Catch2#2681).
  * *_THROWS, *_THROWS_AS, etc now suppress warning coming from
    __attribute__((warn_unused_result)) on GCC
  (gh#catchorg/Catch2#2691).
  * Fixed assertionStarting events being sent after the expr is
    evaluated (gh#catchorg/Catch2#2678).
  * Errors in TEST_CASE tags are now reported nicely
    (gh#catchorg/Catch2#2650).
  * Bunch of improvements to catch_discover_tests.
  * meson build can disable building tests
    (gh#catchorg/Catch2#2693).
  * meson build properly sets meson version 0.54.1 as the minimal
    supported version (gh#catchorg/Catch2#2688).
- Use ninja for build.</changelog>
</package>
<package pkgid="aa4af70f144223133ddbbe651472981daeb51b2b850448ba115cd78edcde7d344accf293cd73939fd13d10767703b6894ccab925ab14410ec6ee9afd14fdec57" name="CharLS-devel" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.13"/>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix the SLES build (%make_install is not expanded)</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499342400">- Update to version 2.0.0:
  Bug fixes
  * #10 - Fixed the problem that "output buffer to small" was not
    detected when writting encoded bytes to a fixed output buffer.
    This could cause memory corruption problems.
  * #11 - Update charlstest to return EXIT_SUCCESS/FAILURE
  * Fixed the issue that DecodeToPnm would set
    params.colorTransform = ColorTransformation::BigEndian but the
    library didn’t support this option during decoding.
  Misc
  * Updated the source code to C++ v14.
  * Refactored several API's to make usage of the library easier.
- Removed unzip build requirement (not needed anymore).
- Require gcc &gt;= 5.0 (for C++ v14).
- Removed the following patches (not needed anymore):
  charls_add_cmake_install_target.patch
  charls_add_sharedlib_soname.patch
  charls_fix_tests.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Fix RPM group.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Build with gcc6, fix build failure for Leap</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1596974400">- Update to version 2.1.0.
  * Added
  * Two new C++ classes (jpegls_encoder \ jpegls_decoder) have
    been added to make it much easier to use CharLS from C++
  * A new C API (charls_xxx functions) was added to provide a
    more stable ABI for future updates. The old API calls are
    internally forwarded to the new API.
  * CharLS can now read and write JPEG-LS standard SPIFF headers
  * Support has been added to detect the unsupported JPEG-LS
    extension (ISO/IEC 14495-2) SOF_57 marker and IDs in LSE
    marker
  * Support has been added to encode\decode 4 component images
    in all interleave modes
  * Deprecated
  * The legacy 1.x\2.0 C API has been marked as deprecated. This
    legacy API will be maintained until the next major upgrade.
  * Future 2.x updates will start to mark the legacy types and
    functions with the C++ [[deprecated]] attribute.
  * Changed
  * charls_error has been replaced by a C++11 compatible
    jpegls_errc error code enum design
  * The included C and C++ sample have been updated to use the
    new C\C++ API
  * Improved the validation of the JPEG-LS stream during
    decoding
  * The referenced NuGet packages of the .NET wrapper assembly
    are updated to their latest versions
  * Removed
  * Support to write JFIF headers during encoding has been
    removed. JFIF headers were already skipped when present
    during decoding.
  * SPIFF headers should be used when creating standalone .jls
    files
  * Support for .NET Code Contracts has been removed as this
    technology is being phased out by Microsoft
  * Fixed
  * Fixed #7, How to compile CharLS with Xcode has been
    documented in the Wiki
  * Fixed #44, Only the API functions should be exported from a
    Linux shared library
  * Fixes #35, Encoding will fail if the bit per sample is
    greater than 8, and a custom RESET value is used
  * Fixes #51, The default threshold values are not corrected
    computed for 6 bit images or less
  * Fixed the ASSERT in the ModuloRange function, which would
    trigger false assertions in debug builds</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1614600000">- Update to version 2.2.0:
  * Added
  - Added pkg-config charls.pc file to help in detect the CharLS
    library (see #76)
  - Added standard CMake variable BUILD_SHARED_LIBS as an option
    to make it visible in the CMake GUI (see #66)
  - The PowerPC Little Endian (ppc64le) platform has been added
    as supported architecture
  * Fixed
  - Fixed #21, Building with UBSAN, will report runtime error:
    left shift of 4031 by 63 places cannot be represented in type
    'long int'
  - Fixed #25, CharLS fails to read LSE marker segment after
    first SOS segment
  - Fixed #26, CharLS should only use the valid bits from the
    passed input buffer
  - Fixed #36, CharLS should remain stable from bad input
    (several issues found by fuzzy testing)
  - Fixed #60, Visual Studio 2015 C++ compiler cannot compile
    certain constexpr constructions
  - Fixed #62, Missing includes in jpegls_error.cpp when using
    libc++ (and not libstdc++)
  - Fixed #70, The C and C++ sample don't swap the pixels from a
    .bmp file horizontal
  - Fixed #79, Wrong JPEG-LS encoding when stride is non-default
    (stride != 0), component count &gt; 1 and interleave_mode is none
  * Changed
  - The API has been extended with additional annotations to
    assist the static analyzer in the MSVC and GCC/clang
    compilers
  - The size check for a Start Of Scan (SOS) segment is now exact
    for improved compatibility with fuzzy testing
  - The minimum support version of CMake is now 3.13 (was 3.9),
    3.13 is needed for add_link_options
  - The Windows static library and DLL are now compiled with the
    Control Flow Guard (/guard:cf) option enabled for enhanced
    security
  - The .NET adapter has been upgraded to .NET 5 and moved to its
    own repository This has been done to make it possible to have
    different release cycles.
  * Removed
  - The legacy methods JpegLsEncodeStream, JpegLsDecodeStream and
    JpegLsReadHeaderStream have been removed as exported methods.
    These methods were not part of the public API and only used
    by by the charlstest application
- Added pkgconfig build requires.</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1643803200">- Update to version 2.3.2:
  * Fixed
  - [#160](https://github.com/team-charls/charls/issues/160),
    warning: cast from ‘unsigned char*’ to ‘uint16_t*’ increases
    required alignment of target type
  - [#161](https://github.com/team-charls/charls/issues/161),
    warning: useless cast to type ‘size_t’ {aka ‘unsigned int’}
    [-Wuseless-cast]
  * Changed
  - Updates to the CMakeLists.txt for Unix builds (except macOS)
    to hide more symbols from the shared library.
  - C++14 is now the minimum version instead of explicitly
    required. This allows consuming applications more
    flexibility. Typically CMake will select the latest C++
    standard version that used C++ compiler supports.
  From version 2.3.1:
  * Fixed
  - [#155](https://github.com/team-charls/charls/issues/155),
    charls::jpegls_decoder::decode: 2 overloads have similar
    conversions in v2.3.0
  From version 2.3.0:
  * Added
  - The encoder API has been extended with a rewind method that
    can be used to re-use a configured encoder to encode multiple
    images in a loop.
  - Added support to decode JPEG-LS images that use restart
    markers
    [#92](https://github.com/team-charls/charls/issues/92).
  - Added support to write and read comment (COM) segments
    [#113](https://github.com/team-charls/charls/issues/113).
  - Added support to encode/decode oversized images (width or
    height larger then 65535).
  - Extended the validation of the encoded JPEG-LS byte stream
    during decoding.
  - Added support to encode JPEG-LS images with:
  * The option to ensure the output stream has an even size.
  * The option to write the CharLS version number as a comment
    (COM segment) to the output stream.
  * The option to write the coding parameters to the output
    stream if the bits per pixel are larger then 12 (enabled by
    default).
  - Usage of compiler specific attributes on the public API as
    replacement for ``[[nodiscard]]`` (which is a C++17 feature).
  * Fixed
  - [#84](https://github.com/team-charls/charls/issues/84),
    Default preset coding parameters not computed for unset
    values.
  - [#102](https://github.com/team-charls/charls/issues/102),
    CMake find_package(charls 2.2.0 REQUIRED) not working.
  * Changed
  - CMakeSettings.json has been replaced with CMakePresets.json.
  - Non default coding parameters are explicitly stored in the
    output stream during encoding.
  - GCC shared library release builds are now using LTO (Link
    Time Optimization).
  - Some functions use compiler intrinsics for slightly better
    performance.
- Removed support for openSUSE &lt;= 13.2/Leap 42.</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1648555200">- Update to version 2.3.4:
  * Changed
  - Replaced legacy test images
  From version 2.3.3:
  * Fixed
  - [#167](https://github.com/team-charls/charls/issues/167),
    Decoding\Encoding fails on IBM s390x CPU
    (Big Endian architecture)
  * Changed
  - CTest is now used in the CI build pipeline to test the output
    of the Linux and macOS builds.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 2.4.1:
  Fixed
  * Fixed #221, jpegls_errc::destination_buffer_too_small incorrectly thrown
    for 8 bit 2*2 image with stride = 4 during decoding.
- update to 2.4.0:
  Added
  * Support for Windows on ARM64 in the MSBuild projects and CMake files.
  * Support to read and write application data markers. #180
  * Added method charls_validate_spiff_header to validate SPIFF headers.
  Changed
  * Improved compatibility of public headers with C++20.
  * Switch order of APP8 and SOF55 markers during encoding to allign with
    user application data markers.
  Fixed
  * Fixed #167, Multi component image with interleave mode none is not
    correctly decoded when a custom stride argument is used.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 2.4.2:
  * Fixed #269, Decoding doesn't work when compiled with mingw64.</changelog>
</package>
<package pkgid="154fb6da1d65cbe7b692eae67bfd2e2a1b05b007f3097a831d5c26f0573bc3695593dc28976d4ff456faf437414369f4e551791448c691eb44fef71553bfc7fa" name="Clipper2-devel" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752408000">- initial package
- add no-static.patch
- track series file for easier quilt usage</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752494400">- prepare running the testsuite</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752580800">- compile with gcc 14 (c++17) on older distributions</changelog>
</package>
<package pkgid="fe13008acd563ef8fd893471cbedf79aa37ec8ec20d6fe64c65139e26c217ab4c02f4f9851729190db8fe45f0ceb61b920b459449c5fc24e7c1d06e82c255453" name="ClusterTools2" arch="noarch">
  <version epoch="0" ver="3.1.3" rel="160000.2.2"/>
  <changelog author="lars.pinne@suse.com" date="1378468800">- added cs_show_wwpn, cs_check_lsbinit first alpha</changelog>
  <changelog author="lars.pinne@suse.com" date="1467288000">- version 3.0.0, adaptation of the scripts for the SLE12 platform
- fate#319611</changelog>
  <changelog author="imanyugin@suse.com" date="1473249600">- Obsolete the -doc subpackage, bsc#993014</changelog>
  <changelog author="imanyugin@suse.com" date="1521115200">- added /etc/ClusterTools2/cs_make_sbd_devices, bsc#1084925
- version 3.0.1</changelog>
  <changelog author="kstreitova@suse.com" date="1550750400">- The /etc/cron.d/ClusterTools2 does not contain any active cronjob
  so we can move it to /usr/share/ClusterTools2/samples/ and
  remove "Requires: cron" as it's no longer needed.
  [bsc#1115405] [fate#323635]
- Remove the Vendor line that is now forbidden</changelog>
  <changelog author="abriel@suse.com" date="1576497600">- change version from 3.0.1 to 3.1.0
- Update package to the latest upstream version
  add missing man pages, config files and scripts:
  add new man page man8/cs_show_hana_info.8, man8/cs_dmesg.8,
  man8/cs_show_wwpn.8 , man8/cs_show_hana_autofailover_patterns.8,
  man8/cs_show_cluster_transition.8
  add new kernel modules (ibmvnic.ko, ibmvfc.ko, lin_tape.ko,
  deadman.ko) to search for
  add new config files etc/ClusterTools2/cs_show_memory,
  etc/ClusterTools2/cs_show_cluster_transition
  add new scripts sbin/cs_show_hana_info, sbin/cs_show_wwpn,
  sbin/cs_show_hana_autofailover_patterns, sbin/cs_dmesg,
  sbin/cs_show_cluster_transition, sbin/cs_show_xfs_patterns,
  add new examples for helper scripts (samples/pacemakill)
  enhance the scripts:
  add check for multi-queue scheduler
  change initrd check to support new SLES12/15 format
  adapt the changed sar filename syntax
  add 'systemctl get-default' for SLES12/15 instead of using
  /etc/inittab
  add checks for additional SAP Notes 2655238, 2205917 and 2686011
  remove crontab in favour for systemd timer
  use /etc/os-release instead of old /etc/SuSE-release
  add check for powerVM
  adapt the corosync checks to the new values in the best practice
  documentation
  add additional rpms to look for (e.g. saptune, rear, glibc2,
  kernel-default, kernel-ppc64=4.12.14 ...)
  add additional files (e.g. /boot/grub2/grub.cfg,
  /var/log/mcelog, memory.txt (from supportconfig),
  /etc/systemd/system.conf, /usr/sap/sapservices, /etc/sudoers ...)
  to search for or to search in
  add additional services to check (e.g. sbd.service,
  tuned.service ...)
  add additional error and info pattern to search for in log files
  (e.g. "systemd.*start-limit" and similar search strings)
  enhance the list of cluster related SUSE TIDs
  7022678, 7023149, 7022921, 7021158, 7022255, 7022984, 7023127,
  7021376, 7018571, 7021211, 7018408, 7023236, 7022001, 7019001,
  7017985, 7023007, 7016640, 7018194, 7022644, 7017617, 7018594,
  7022764, 7020256, 7022316, 7022840, 7021065, 7022467, 7022565,
  7022152, 7018352, 7017651, 7023166, 7010249, 3044267, 7004659,
  7018181, 7023324, 7016918, 7023526, 7022310, 7022681, 7023021,
  7023732, 7018233, 7018329, 7018361, 7011860, 7023344, 7021064,
  7022268, 7018744, 7023714, 7023713, 3684654, 3054866, 7022975,
  7022293, 7017750, 7023805, 7021182
  (bsc#1097134, jsc#SLE-9199)
- cleanup the package and the man pages, remove unavailable
  references, adjust Copyright string, adjust feedback address
- script refinement and first steps for an adaption to SLE15 code
  stream
  using 'shellcheck' to find and correct syntax problems,
  spelling errors and other problems</changelog>
  <changelog author="abriel@suse.com" date="1626436800">- change version from 3.1.0 to 3.1.1
- As some of the supportconfig plugins of ClusterTools2 takes very
  log time to process, we will disable these plugins by default in
  /etc/ClusterTools2/supportconfig_plugins.
  That means that after an initial installation of ClusterTools2
  NO supportconfig plugin will be active. To change this behaviour
  manually uncomment the entres of interesst in the file
  /etc/ClusterTools2/supportconfig_plugins.
  During a package update nothing will change. If an active plugin
  is disturbing the creation of a supportconfig archive, please
  comment out the related entry manually in the file
  /etc/ClusterTools2/supportconfig_plugins.
  Please refer to manual page supportconfig_plugins(5) for further
  details.
  (bsc#1186119)
- Add file samples/00_bootstrap_sle15.crm.tmpl to support SLE15
  (bsc#1166943)</changelog>
  <changelog author="abriel@suse.com" date="1648468800">- change version from 3.1.1 to 3.1.2
- As newer versions of pacemaker display the output from command
  'crmadmin --quiet' on stdout instead on stderr, the command
  'cs_clusterstate' was enhanced to adapt these change.
  (bsc#1188652)
- Adapt 'cs_show_scores' to support newer versions of pacemaker
  and crmsh
  (bsc#1188456)
- man page updates</changelog>
  <changelog author="abriel@suse.com" date="1708516800">- change version from 3.1.2 to 3.1.3
  * adapt 'cs_show_scores' to support newer versions of crmsh
    (bsc#1219806)
  * change SBP URL in man page ha_related_sap_notes.7 to point to
    the new location
    (bsc#1194285)
  * additional man page updates
  * new script /usr/sbin/cs_list_sap_instances</changelog>
  <changelog author="abriel@suse.com" date="1723118400">- remove dependency to perl-TermReadLine-Gnu for SLE16</changelog>
</package>
<package pkgid="e38177b23c4f92b040212399cb699449425c0d75cb5e4c3d38c920fa2da12febd8b411f25f35dfdd46b6610285f632c8581452a8a91a5d92fd0d90bd8c91e594" name="Coin4-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="bp160.1.13"/>
  <changelog author="adrian@suse.de" date="1469880000">- fix file conflict with qwt-devel-doc (deprecated man page)</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1469880001">- Do not use freetype2 patch on Leap 42.2</changelog>
  <changelog author="adrian@suse.de" date="1471262400">- install data files into versioned directory</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Redo description from in-tarball README
- Run fdupes over entire package</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="lnussel@suse.de" date="1492171200">- Remove obsolete 13.2 patch fix-freetype2-includes.patch, fixes
  build for 42.3</changelog>
  <changelog author="olaf@aepfle.de" date="1500811200">- Fix invalid C++ with Coin.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1608033600">- Explicitly request system libexpat. The bundled expat 2.0.1 has
  known vulnerabilities, and also causes crashes in e.g. FreeCADs
  SVG import due to using incompatible expat versions in use at
  the same time (https://tracker.freecadweb.org/view.php?id=3307).
  * 0001-Actually-link-to-system-expat.patch
- Cleanup spec file:
  * Update Homepage URL
  * Remove Source URL, bitbucket download is no longer functional
  * Use %license, %make_build, %make_install macros</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645444800">- Update to version 4.0.0:
  * For details, see
    https://github.com/coin3d/coin/blob/Coin-4.0.0/NEWS
- Update License tag, relicensed as BSD-3-Clause
- Drop obsolete patches:
  * 0012-memhandler-initialization.patch
  * Coin.patch
- Replace Coin60.patch with Coin4-versioned.patch
- Split API documentation from devel package
- Add 0001-Add-missing-libdl-link-library-for-dlopen.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 4.0.2:
  * Restore ABI compatibility to version 4.0.0
- Update to version 4.0.1:
  * For details, see
    https://github.com/coin3d/coin/blob/Coin-4.0.0/NEWS
- Drop upstream patches:
  * Coin4-versioned.patch
  * 0001-Add-missing-libdl-link-library-for-dlopen.patch</changelog>
</package>
<package pkgid="2311f7abe6cceaba05dc46b22f6edfc450ca3ecf092a0a8e51ac13a614943df4b7dd2f623e7f972447d6ef2db1d7c8f3d4cc61f3d420cfae06253f0f88738fef" name="ColPack-devel" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="160000.2.2"/>
  <changelog author="kkhere.geo@gmail.com" date="1332417600">- Create new package for ColPack with version 1.0.6</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1332763200">- correct source URL</changelog>
  <changelog author="p.drouand@gmail.com" date="1347624000">- Update to 1.0.8:</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1350561600">- Update to 1.0.9: no changelog released upstream</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 1.0.10. For changes, see:
  https://github.com/CSCsw/ColPack/compare/6fed3fdf83c36a19364c358e75575cb51f6200db...v1.0.10
- Use new homepage and Github repo
- Remove colpack-return-in-non-void.patch, fixed in commit:
  5ebede191a2f005f9630b3f5989db248f6626d2f
- Remove gcc6-fix-errors.patch, merged:
  https://github.com/CSCsw/ColPack/pull/11
- Clean with spec-cleaner</changelog>
</package>
<package pkgid="25ca9d80a7984e863db3e9db3560fb6959d64a77343bbdadf778712ad5771e2d20e4a48015bf3fbc23d5b7a3e20c676e524052de97f85c437aaaf23090f2abbc" name="ColPack-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="160000.2.2"/>
  <changelog author="kkhere.geo@gmail.com" date="1332417600">- Create new package for ColPack with version 1.0.6</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1332763200">- correct source URL</changelog>
  <changelog author="p.drouand@gmail.com" date="1347624000">- Update to 1.0.8:</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1350561600">- Update to 1.0.9: no changelog released upstream</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 1.0.10. For changes, see:
  https://github.com/CSCsw/ColPack/compare/6fed3fdf83c36a19364c358e75575cb51f6200db...v1.0.10
- Use new homepage and Github repo
- Remove colpack-return-in-non-void.patch, fixed in commit:
  5ebede191a2f005f9630b3f5989db248f6626d2f
- Remove gcc6-fix-errors.patch, merged:
  https://github.com/CSCsw/ColPack/pull/11
- Clean with spec-cleaner</changelog>
</package>
<package pkgid="b1f9423fe4bae6fcb2d91809ffcffcd792b3ea11828c29d2ea1d9320f548147a1fb1bffe7f392480b3c1b3d9d3357c3fe0d663dd7d0732e8f30880f796eb5b16" name="ColorFull-devel" arch="x86_64">
  <version epoch="0" ver="1.1" rel="bp160.1.13"/>
  <changelog author="badshah400@gmail.com" date="1477656000">- Initial package.
- Add patches to fix syntactical errors and get the package
  building:
  * ColorFull-monomial-conjugate-assignment.patch: Fix an
    incorrect assignment syntax.
  * ColorFull-monomial-illegal-or-usage.patch: Fix the usage of
    "or" by using appropriate parenthesis around the operands.
  * ColorFull-install-pkgconfig-file.patch: Add a pkgconfig file
    and modify the autotool files to install it to an
    appropriate location
- Add rpmlintrc file to suppress false warning about spelling
  errors in description tag coming from the package name
  (ColorFull, not colorful).</changelog>
  <changelog author="badshah400@gmail.com" date="1477828800">- Fix Libs and Cflags in the pkgconfig file.</changelog>
  <changelog author="jengelh@inai.de" date="1477915200">- Update descriptions and RPM groups</changelog>
  <changelog author="badshah400@gmail.com" date="1501675200">- Update to version 1.1:
  * Added functions split_gluon, default_parton_numbers,
    rename_partons in Col_functions. These functions are used for
    g -&gt; qqbar splitting.
  * Removed Matchbox interface to Herwig, since ColorFull along
    with the interface, is shipped with Herwig from version 7.0.
  * Included various minor updates from Herwig version.
- Changes from version 1.0:
  * Fixed Monomial.h to build using --std=c++11 and --std=c++14.
  * Fixed all warnings appearing with -Wextra for g++ and clang
    using --std=c++11 and c++14. This required removing some
    arguments in private functions.
- Move shared libs to standard libdir from libdir/name; this
  makes the package compliant with openSUSE shared lib packaging
  policy, and no longer requires the installation of a conf file.
- Drop patches incorporated or otherwise fixed upstream:
  * ColorFull-monomial-conjugate-assignment.patch
  * ColorFull-monomial-illegal-or-usage.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="ed1851f90a68baca6df3ed18c731307aa003374498a59ecd15b1e31286063ab6b42c1f7541262d6d30b19ec17f45aecd928a2eaa5cc17218a7035048ac19d811" name="ComputeLibrary" arch="x86_64">
  <version epoch="0" ver="24.09" rel="bp160.1.11"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1679918400">- Apply fix-gcc13-fallout.patch to fix the gcc 13 fallout
- Use python3 as the python script interpreter</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1680696000">- Update fix-gcc13-fallout.patch with upstream version</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1681214400">- More fixes to use python3 as the python script interpreter</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1686571200">-  Update to 23.05:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.05
- Drop upstream patch:
  * fix-gcc13-fallout.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1693915200">-  Update to 23.08:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.08</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1701950400">- Update to 23.11:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.11</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1712145600">- Update to 24.02.1:
  * Drop libarm_compute_core.so
  * Public patch release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.02.1
- Skipped 24.02:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.02</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1718712000">- Update to 24.05:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.05</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1725364800">- Update to 24.08:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.08</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1729166400">-  Update to 24.09:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.09</changelog>
</package>
<package pkgid="72ffb03a8506c6a9f199473f3202b6d38922ec3a12873357b1c00d48d2850fb87301108b617850d334866e1ed5d2cf0531966dc5481546aba4f19d6bd4a4fe6d" name="ComputeLibrary-devel" arch="x86_64">
  <version epoch="0" ver="24.09" rel="bp160.1.11"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1679918400">- Apply fix-gcc13-fallout.patch to fix the gcc 13 fallout
- Use python3 as the python script interpreter</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1680696000">- Update fix-gcc13-fallout.patch with upstream version</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1681214400">- More fixes to use python3 as the python script interpreter</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1686571200">-  Update to 23.05:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.05
- Drop upstream patch:
  * fix-gcc13-fallout.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1693915200">-  Update to 23.08:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.08</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1701950400">- Update to 23.11:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.11</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1712145600">- Update to 24.02.1:
  * Drop libarm_compute_core.so
  * Public patch release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.02.1
- Skipped 24.02:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.02</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1718712000">- Update to 24.05:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.05</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1725364800">- Update to 24.08:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.08</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1729166400">-  Update to 24.09:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.09</changelog>
</package>
<package pkgid="4a98e7df414368bd0dd51172b9b8a560bc35db72b26c9a228f82023dd0fedb10473f4d8c893c48bf6e63906efdd9ed5a7e0ab7105db9655918b3084dca57b4fe" name="ComputeLibrary-sample-data" arch="x86_64">
  <version epoch="0" ver="24.09" rel="bp160.1.11"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1679918400">- Apply fix-gcc13-fallout.patch to fix the gcc 13 fallout
- Use python3 as the python script interpreter</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1680696000">- Update fix-gcc13-fallout.patch with upstream version</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1681214400">- More fixes to use python3 as the python script interpreter</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1686571200">-  Update to 23.05:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.05
- Drop upstream patch:
  * fix-gcc13-fallout.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1693915200">-  Update to 23.08:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.08</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1701950400">- Update to 23.11:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v23.11</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1712145600">- Update to 24.02.1:
  * Drop libarm_compute_core.so
  * Public patch release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.02.1
- Skipped 24.02:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.02</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1718712000">- Update to 24.05:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.05</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1725364800">- Update to 24.08:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.08</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1729166400">-  Update to 24.09:
  * Public major release
  * Documentation (API, changelogs, build guide,
    contribution guide, errata, etc.) available here:
    https://arm-software.github.io/ComputeLibrary/v24.09</changelog>
</package>
<package pkgid="e857466d544d6d5333460bc4241a2722c3e6dcdc352cb8e6d52fca985919c8caadf111630b3836154c4b67867a53a30ca357ff7804b97d421972d90cd99e0f49" name="CoreFreq" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp160.3.1"/>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1731758400">- Update to 1.98.6
  * [AMD]
  - [V2000 Series] Adding the Ryzen Embedded V2A46
  - [Family 1Ah][All Families] Refactoring topology for CCD cluster
    Confirmed 7950X, 3950X
  * [Intel]
  - ODCM is confirmed working on Raptor Lake architecture
    Confirmed i9-14900K
  * [UI]
  - Increased max ratio in HWP condition to avoid a zero frequency
    Confirmed i9-14900K
  * [Build]
  - Print other variables from Makefile recipe info
    CORE_COUNT
    TASK_ORDER
    MAX_FREQ_HZ
    HWM_CHIPSET
  * [CI]
  - [AArch64] Commenting out the debian-testing and alpine-latest
  * [Doc]
  - Mention the AMD family 1Ah support in README</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1732276800">- Update to 1.98.7
  * [AMD]
  - [Family 1Ah][Granite Ridge]
  - P-State programming fix
  - Merge PCI identifier lists
  - Reserve the BTC-NOBR aggregation to Zen2 architecture
  * [AArch64]
  - Query and JSON export Hypervisor Configuration Register HCR_EL2
  - Experimental mode required</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1734868800">- Update to 1.98.8
  * [Build]
  - [x86_64] AlmaLinux 9.5 (Teal Serval) compilation fix
  - [UI] Fix System Registers window for a 3 digits CPU id number
  * [Doc]
  - SSH how to run the UI
  * [AArch64]
  - Checking specification of Memory Model Feature Registers
  - Aggregate and display ISA features of ID_AA64ISAR3_EL1
  - Instruction Set Attribute Register 3 ID_AA64ISAR3_EL1
  - Processor Feature Register 2 AA64PFR2_EL1
  - Display FP and SIMD bits from MVFR
  - Added remaining CLRBHB and PCDPHINT of ISAR2
  - Display the Streaming Vector Control Register SVCR
  - Query and export the Media and VFP Feature Registers MVFR
  - Display, export Floating-point Control Register FPCR
  - Architectural Feature Access Control Register CPACR
  - Display the Hypervisor Configuration Register HCR_EL2 based on CurrentEL
  * [AMD]
  - [VERMEER] Adding Ryzen 5 5600XT and 5600T processors
  - [Zen 5c] Fixed EPYC Turin-Dense series</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1739707200">- Update to 2.0.1
  * [Build]
  - Implement amd_pci_dev_to_node_id from Kernel 6.14
  - [CI] Pin build environment to ubuntu-22.04 (thanks @jlacvdr)
  - Allow changing WARNING variable from command line (thanks @s-stepien)
  * [AMD]
  - [Strix Point] Attempt to decode UMC and IOMMU controllers
  - [Raphael] Adding Ryzen 5 7400F
  - [Granite Ridge] Adding Ryzen 5 9600</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1747224000">- Update to 2.0.3
  * [UI]
  - Increased length of L3 cache digits in header
  - [MC] Renamed Disabled to Undefined channels
  - [CLI][aarch64][riscv64][ppc64] Compute the SMBIOS DIMM part number
  - Display N/A when Intel processor is not HDC capable
  * [Code Review]
  - Refactored variable names for inclusivity
  - [Kernel] VT-d: request memory region before use
  - uBench: Code clean-up
  * [Doc]
  - README for Rocky Linux and Clear Linux
  * [Build]
  - Prevent module loading if detected CPU count &gt; CORE_COUNT (case of EPYC with 384 CPUs)
  - Make static the PCI list to comply with kernel frame size
  - Kernel 6.15 is switching to use hrtimer_setup()
  - [CI] Bump to uraimo version 3
  - of_root defined since Kernel 3.19
  - Replaced inline C functions with static or macro
  - Kernel 6.14 node_to_amd_nb() workaround
  - Added CONFIG_ACPI_CPPC_LIB to conditionally build EPP
  - Changed some inline function prototypes
  * [AMD]
  - [Zen]
  - Count DIMM ranks from the enabled chip select
  - Now conducts Datafabric calls through Kernel PCI
  - [HSMP] Provides its own lock rather than SMN' lock
  - [HSMP] arguments index fix in CONFIG_AMD_NB build mode
  - [HSMP] Check mailbox protocol is correctly functioning using the arithmetic addition 2 + 1 = 3
  - Replaced package thermal with a pointer function
  - Specifications of some Zen registers
  - Adding "Strix Halo" and "Krackan Point" architectures
  - Adding "Fire Range" series
  - Adding Ryzen Z2 series
  - [Genoa]
  - Probe up to four memory controllers
  - Improved EPYC Genoa support:
  - CCD and CCX topology fixed to compute the right thermal SMU address
  - Increase BIT_IO_RETRIES_COUNT to parallelize HSMP_RD_DIMM_PWR calls
  - Added specifics for an "Eng Sample" of Genoa architecture
  - Accumulate the power consumed by RAM
  - Attempt to monitor DIMM power consumption from HSMP
  - Use generic voltage &amp; power
  - [Hawk Point]
  - Set AddrCfg &amp; DimmCfg addresses for Phoenix UMC
  - [Family 1Ah]
  - Added the HSMP for EPYC Turin
  * [Intel]
  - [MTL][ARL]
  - Improving MC Bus and DDR speed to follow OC SOC
  - Refactored IMC decoder to query DDR clock
  - Merged the P-core and E-core monitoring loops
  - Get/Set L1_NPP_Prefetch from MSR_MISC_FEATURE_CONTROL
  - Provide monitoring functions to Arrow Lake
    Also applying to Lunar Lake
  - Grant ODCM and PWR MGMT accesses to MTL, ARL, Lunar Lake
  - New features for Core Ultra 7 265K
  - [x86_64]
  - Order SMBIOS DIMM list by channel
  - [IMC] Can display Twelve Channel memory controller
  - SMBIOS dump resized to 12 channels multiplied 4 DIMM slots
  - Compute the SMBIOS DIMM part number (rev 2)
  - Check HCF capability for MPERF/APERF MSR access in VM
  * [AArch64] [RISC-V] [PowerPC]
  - [riscv64] Fill with the Machine Architecture ID Register marchid
  - [ppc64] Added source comment
  - [riscv64][ppc64] Improving Hybrid processor detection
  - [ppc64] Fix the Carry flag asm code
  - [ppc64] The processor version register (PVR) is a 32-bit register
  - [ppc64] Use MFXER to get the XER
    Raise the Carry Flag
  - [ppc64][riscv64] ASM instructions for uBench macros
  - [aarch64] Checking CSSELR and CCSIDR registers in ARMv9
  - [aarch64] If FEAT_CCIDX implemented read NumSets from upper reg
  - [aarch64] Safely access the PMU registers
    Detect the Android AVF hypervisor
    Comment PMC in uBench macros
  - [ppc64] Detect the IBM POWER10 Functional Simulator
  - [aarch64][riscv64][ppc64] Improving DT integration to detect VM
  - [AArch64] Improving virtualization detection from Device Tree
  - [ppc64][riscv64] Device Tree fetching based on kernel version
  - [PowerPC] Preliminary port to the ppc64le architecture
  - [riscv64] Adding vendor Microchip
  - [riscv64] Attempt to read the Hart ID from device tree
  - [riscv64] Restore PMU counter delta calculation
  - [riscv64] mvendorid &amp; marchid based architecture qualification
  - [riscv64] Specification of SSTATUS and SCOUNTEREN registers
  - [riscv64] Normalize counters to work with unaccurate QEMU cycles
  - [riscv64] Attempt to enable the Cycle and Instruction counters
  - [riscv64] Read the performance cycles using rdcycle
  - [riscv64] Read the retired instructions counter using rdinstret
  - [riscv64] Get the TSC from rdtime instruction
  - [riscv64] Comment out any reading of cycles
  - [RISC-V] Code clean-up to debug start-up
  - [RISC-V] Preliminary port of the riscv64 architecture</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1748088000">- Update to 2.0.5
  * [Code Review]
  - Restrict module parameters to load-time only
  * [AMD]
  - [Genoa]
  - Attempt SOC voltage reading
  - Apply monitoring interval to RAM consumption calculation
  - [Kernel]
  - Use CONFIG_AMD_NB to call SMU if kernel version ≥ 6.0
  * [Intel]
  - [Core Ultra]
  - Updated register names and addresses
  - [Alder Lake/N]
  - Added "Twin Lake" and "Amston Lake" codenames
  * [x86_64]
  - Added lock prefix to bit operations for cross-package atomicity
  * [AArch64] [RISC-V] [PowerPC]
  - Improved CPU topology detection to identify the BSP (Boot Strap Processor)</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1749038400">- Update to 2.0.6
  * [Kernel]
  - Fix missing cpufreq_get_policy and asm/amd/nb.h in kernel 6.15
  - Use VM_DONTEXPAND in mmap() for stability and isolation
  * [AMD]
  - Decodes voltages of Phoenix families using Rembrandt SVI
  - Attempt to read the SoC voltage in Raphael architecture
  - Don't probe the HSMP on Raphael' Desktop/Mobile/Embedded
  * [Intel]
  - Added the Bartlett Lake/S entry
  - Clearwater Forest architecture name fix
  * [AArch64] [RISC-V] [PowerPC]
  - Use exclusive load/store for selected shared variables
  * [Doc]
  - Obfuscate support email format in README and CLI usage
  - Added command line usage instructions to the README</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1749124800">- Update to 2.0.7
  * [Kernel]
  - Defer the cpufreq get_policy and asm/amd/nb.h changes to v6.16</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1754136000">- Update to 2.0.8
  * [Intel]
  - [Emerald Rapids] Align MSR entries with Sapphire Rapids
  - [Sapphire Rapids] Xeon Scalable 4th gen. startup fix (#560)
  * [AMD]
  - [Zen5] Introduced a UMC capabilities decoder for STX families
  - [Zen5][STX/KRK/STXH] Avoid undefined COF and Power registers
  - Switch Zen5/Strix families to the Raphael voltage decoder
  - [Zen5/Strix Halo] Probe Memory Controller from DID 0x12b8
  - [Zen5][Strix Halo] Adding the RYZEN AI MAX 385
  - Add fallback TjMax for legacy CPU families
  - Add missing DCU and XPROC_LEAK bitmasks on legacy processors
  - [Excavator] Fix setting the scope of temperature to Package
  * [aarch64]
  - Temperature compilation based on CONFIG_THERMAL
  - Getting temperature from the Generic Thermal Management
  - Provide the state of WFI/WFE Low Power Methods
  - Set the UI comment for PMULL instruction
  - Registers requiring a safe access guard (TID3)
  - Drop Experimental guard to safely read ID_AA64MMFR3_EL1
  - Display detected Interconnect Technology in UI
  - Query Cache Coherent Network|Interconnect via DT
  - Added multiple Processors and Architectures:
    Cortex-A320, Cortex-A520, Cortex-A720AE, Cortex-A725,
    Cortex-R82AE, Cortex-X925, Neoverse N3, Neoverse V3,
    Neoverse V3AE * ARMv8.1-A, ARMv8.8-A, ARMv9.1-A, ARMv9.2-A,
    ARMv9.3-A
  - Assign DSU-RTL version according to detected ARM arch.
  - Improve detection of Mesh interconnect via DT/ACPI
  - Query CMN either from DeviceTree either from ACPI
  - JSON export DSU, CMN, CCI, CCN
  - Display the presence of the DynamIQ Shared Unit (DSU)
  - Added SMT and big.LITTLE labels in the UI footer
  * [UI]
  - Rephrased string for the CPUID.80000001.ECX[27] feature
  - Optimize POWERED() macro with branchless 3-state array lookup
  - [aarch64][riscv64][ppc64] Optimize POWERED() macro with branchless 3-state
  - [CR] In _F4() cast complement mask to the type of bit argument
  * [Build]
  - [CI] Comment out the unreachable debian-10-buster
  - Enforce targets are not built more than necessary
  - Clarify Makefile help, info, and version targets
  - Support building CoreFreq binaries individually or together</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1754481600">- added fix-leap16-compilation.patch to fix compilation on x86_64 Leap 16.0</changelog>
</package>
<package pkgid="47333e14900aab36660e0ae8900176f980408e34e3d3e07809cf9f3e1727c5798c5afef4ce3ec53952ba9408dd2794664ea3c1259058c946c3e8f1d33229450b" name="CoreFreq-kmp-default" arch="x86_64">
  <version epoch="0" ver="2.0.8_k6.12.0_160000.5" rel="lp160.3.1"/>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1731758400">- Update to 1.98.6
  * [AMD]
  - [V2000 Series] Adding the Ryzen Embedded V2A46
  - [Family 1Ah][All Families] Refactoring topology for CCD cluster
    Confirmed 7950X, 3950X
  * [Intel]
  - ODCM is confirmed working on Raptor Lake architecture
    Confirmed i9-14900K
  * [UI]
  - Increased max ratio in HWP condition to avoid a zero frequency
    Confirmed i9-14900K
  * [Build]
  - Print other variables from Makefile recipe info
    CORE_COUNT
    TASK_ORDER
    MAX_FREQ_HZ
    HWM_CHIPSET
  * [CI]
  - [AArch64] Commenting out the debian-testing and alpine-latest
  * [Doc]
  - Mention the AMD family 1Ah support in README</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1732276800">- Update to 1.98.7
  * [AMD]
  - [Family 1Ah][Granite Ridge]
  - P-State programming fix
  - Merge PCI identifier lists
  - Reserve the BTC-NOBR aggregation to Zen2 architecture
  * [AArch64]
  - Query and JSON export Hypervisor Configuration Register HCR_EL2
  - Experimental mode required</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1734868800">- Update to 1.98.8
  * [Build]
  - [x86_64] AlmaLinux 9.5 (Teal Serval) compilation fix
  - [UI] Fix System Registers window for a 3 digits CPU id number
  * [Doc]
  - SSH how to run the UI
  * [AArch64]
  - Checking specification of Memory Model Feature Registers
  - Aggregate and display ISA features of ID_AA64ISAR3_EL1
  - Instruction Set Attribute Register 3 ID_AA64ISAR3_EL1
  - Processor Feature Register 2 AA64PFR2_EL1
  - Display FP and SIMD bits from MVFR
  - Added remaining CLRBHB and PCDPHINT of ISAR2
  - Display the Streaming Vector Control Register SVCR
  - Query and export the Media and VFP Feature Registers MVFR
  - Display, export Floating-point Control Register FPCR
  - Architectural Feature Access Control Register CPACR
  - Display the Hypervisor Configuration Register HCR_EL2 based on CurrentEL
  * [AMD]
  - [VERMEER] Adding Ryzen 5 5600XT and 5600T processors
  - [Zen 5c] Fixed EPYC Turin-Dense series</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1739707200">- Update to 2.0.1
  * [Build]
  - Implement amd_pci_dev_to_node_id from Kernel 6.14
  - [CI] Pin build environment to ubuntu-22.04 (thanks @jlacvdr)
  - Allow changing WARNING variable from command line (thanks @s-stepien)
  * [AMD]
  - [Strix Point] Attempt to decode UMC and IOMMU controllers
  - [Raphael] Adding Ryzen 5 7400F
  - [Granite Ridge] Adding Ryzen 5 9600</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1747224000">- Update to 2.0.3
  * [UI]
  - Increased length of L3 cache digits in header
  - [MC] Renamed Disabled to Undefined channels
  - [CLI][aarch64][riscv64][ppc64] Compute the SMBIOS DIMM part number
  - Display N/A when Intel processor is not HDC capable
  * [Code Review]
  - Refactored variable names for inclusivity
  - [Kernel] VT-d: request memory region before use
  - uBench: Code clean-up
  * [Doc]
  - README for Rocky Linux and Clear Linux
  * [Build]
  - Prevent module loading if detected CPU count &gt; CORE_COUNT (case of EPYC with 384 CPUs)
  - Make static the PCI list to comply with kernel frame size
  - Kernel 6.15 is switching to use hrtimer_setup()
  - [CI] Bump to uraimo version 3
  - of_root defined since Kernel 3.19
  - Replaced inline C functions with static or macro
  - Kernel 6.14 node_to_amd_nb() workaround
  - Added CONFIG_ACPI_CPPC_LIB to conditionally build EPP
  - Changed some inline function prototypes
  * [AMD]
  - [Zen]
  - Count DIMM ranks from the enabled chip select
  - Now conducts Datafabric calls through Kernel PCI
  - [HSMP] Provides its own lock rather than SMN' lock
  - [HSMP] arguments index fix in CONFIG_AMD_NB build mode
  - [HSMP] Check mailbox protocol is correctly functioning using the arithmetic addition 2 + 1 = 3
  - Replaced package thermal with a pointer function
  - Specifications of some Zen registers
  - Adding "Strix Halo" and "Krackan Point" architectures
  - Adding "Fire Range" series
  - Adding Ryzen Z2 series
  - [Genoa]
  - Probe up to four memory controllers
  - Improved EPYC Genoa support:
  - CCD and CCX topology fixed to compute the right thermal SMU address
  - Increase BIT_IO_RETRIES_COUNT to parallelize HSMP_RD_DIMM_PWR calls
  - Added specifics for an "Eng Sample" of Genoa architecture
  - Accumulate the power consumed by RAM
  - Attempt to monitor DIMM power consumption from HSMP
  - Use generic voltage &amp; power
  - [Hawk Point]
  - Set AddrCfg &amp; DimmCfg addresses for Phoenix UMC
  - [Family 1Ah]
  - Added the HSMP for EPYC Turin
  * [Intel]
  - [MTL][ARL]
  - Improving MC Bus and DDR speed to follow OC SOC
  - Refactored IMC decoder to query DDR clock
  - Merged the P-core and E-core monitoring loops
  - Get/Set L1_NPP_Prefetch from MSR_MISC_FEATURE_CONTROL
  - Provide monitoring functions to Arrow Lake
    Also applying to Lunar Lake
  - Grant ODCM and PWR MGMT accesses to MTL, ARL, Lunar Lake
  - New features for Core Ultra 7 265K
  - [x86_64]
  - Order SMBIOS DIMM list by channel
  - [IMC] Can display Twelve Channel memory controller
  - SMBIOS dump resized to 12 channels multiplied 4 DIMM slots
  - Compute the SMBIOS DIMM part number (rev 2)
  - Check HCF capability for MPERF/APERF MSR access in VM
  * [AArch64] [RISC-V] [PowerPC]
  - [riscv64] Fill with the Machine Architecture ID Register marchid
  - [ppc64] Added source comment
  - [riscv64][ppc64] Improving Hybrid processor detection
  - [ppc64] Fix the Carry flag asm code
  - [ppc64] The processor version register (PVR) is a 32-bit register
  - [ppc64] Use MFXER to get the XER
    Raise the Carry Flag
  - [ppc64][riscv64] ASM instructions for uBench macros
  - [aarch64] Checking CSSELR and CCSIDR registers in ARMv9
  - [aarch64] If FEAT_CCIDX implemented read NumSets from upper reg
  - [aarch64] Safely access the PMU registers
    Detect the Android AVF hypervisor
    Comment PMC in uBench macros
  - [ppc64] Detect the IBM POWER10 Functional Simulator
  - [aarch64][riscv64][ppc64] Improving DT integration to detect VM
  - [AArch64] Improving virtualization detection from Device Tree
  - [ppc64][riscv64] Device Tree fetching based on kernel version
  - [PowerPC] Preliminary port to the ppc64le architecture
  - [riscv64] Adding vendor Microchip
  - [riscv64] Attempt to read the Hart ID from device tree
  - [riscv64] Restore PMU counter delta calculation
  - [riscv64] mvendorid &amp; marchid based architecture qualification
  - [riscv64] Specification of SSTATUS and SCOUNTEREN registers
  - [riscv64] Normalize counters to work with unaccurate QEMU cycles
  - [riscv64] Attempt to enable the Cycle and Instruction counters
  - [riscv64] Read the performance cycles using rdcycle
  - [riscv64] Read the retired instructions counter using rdinstret
  - [riscv64] Get the TSC from rdtime instruction
  - [riscv64] Comment out any reading of cycles
  - [RISC-V] Code clean-up to debug start-up
  - [RISC-V] Preliminary port of the riscv64 architecture</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1748088000">- Update to 2.0.5
  * [Code Review]
  - Restrict module parameters to load-time only
  * [AMD]
  - [Genoa]
  - Attempt SOC voltage reading
  - Apply monitoring interval to RAM consumption calculation
  - [Kernel]
  - Use CONFIG_AMD_NB to call SMU if kernel version ≥ 6.0
  * [Intel]
  - [Core Ultra]
  - Updated register names and addresses
  - [Alder Lake/N]
  - Added "Twin Lake" and "Amston Lake" codenames
  * [x86_64]
  - Added lock prefix to bit operations for cross-package atomicity
  * [AArch64] [RISC-V] [PowerPC]
  - Improved CPU topology detection to identify the BSP (Boot Strap Processor)</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1749038400">- Update to 2.0.6
  * [Kernel]
  - Fix missing cpufreq_get_policy and asm/amd/nb.h in kernel 6.15
  - Use VM_DONTEXPAND in mmap() for stability and isolation
  * [AMD]
  - Decodes voltages of Phoenix families using Rembrandt SVI
  - Attempt to read the SoC voltage in Raphael architecture
  - Don't probe the HSMP on Raphael' Desktop/Mobile/Embedded
  * [Intel]
  - Added the Bartlett Lake/S entry
  - Clearwater Forest architecture name fix
  * [AArch64] [RISC-V] [PowerPC]
  - Use exclusive load/store for selected shared variables
  * [Doc]
  - Obfuscate support email format in README and CLI usage
  - Added command line usage instructions to the README</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1749124800">- Update to 2.0.7
  * [Kernel]
  - Defer the cpufreq get_policy and asm/amd/nb.h changes to v6.16</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1754136000">- Update to 2.0.8
  * [Intel]
  - [Emerald Rapids] Align MSR entries with Sapphire Rapids
  - [Sapphire Rapids] Xeon Scalable 4th gen. startup fix (#560)
  * [AMD]
  - [Zen5] Introduced a UMC capabilities decoder for STX families
  - [Zen5][STX/KRK/STXH] Avoid undefined COF and Power registers
  - Switch Zen5/Strix families to the Raphael voltage decoder
  - [Zen5/Strix Halo] Probe Memory Controller from DID 0x12b8
  - [Zen5][Strix Halo] Adding the RYZEN AI MAX 385
  - Add fallback TjMax for legacy CPU families
  - Add missing DCU and XPROC_LEAK bitmasks on legacy processors
  - [Excavator] Fix setting the scope of temperature to Package
  * [aarch64]
  - Temperature compilation based on CONFIG_THERMAL
  - Getting temperature from the Generic Thermal Management
  - Provide the state of WFI/WFE Low Power Methods
  - Set the UI comment for PMULL instruction
  - Registers requiring a safe access guard (TID3)
  - Drop Experimental guard to safely read ID_AA64MMFR3_EL1
  - Display detected Interconnect Technology in UI
  - Query Cache Coherent Network|Interconnect via DT
  - Added multiple Processors and Architectures:
    Cortex-A320, Cortex-A520, Cortex-A720AE, Cortex-A725,
    Cortex-R82AE, Cortex-X925, Neoverse N3, Neoverse V3,
    Neoverse V3AE * ARMv8.1-A, ARMv8.8-A, ARMv9.1-A, ARMv9.2-A,
    ARMv9.3-A
  - Assign DSU-RTL version according to detected ARM arch.
  - Improve detection of Mesh interconnect via DT/ACPI
  - Query CMN either from DeviceTree either from ACPI
  - JSON export DSU, CMN, CCI, CCN
  - Display the presence of the DynamIQ Shared Unit (DSU)
  - Added SMT and big.LITTLE labels in the UI footer
  * [UI]
  - Rephrased string for the CPUID.80000001.ECX[27] feature
  - Optimize POWERED() macro with branchless 3-state array lookup
  - [aarch64][riscv64][ppc64] Optimize POWERED() macro with branchless 3-state
  - [CR] In _F4() cast complement mask to the type of bit argument
  * [Build]
  - [CI] Comment out the unreachable debian-10-buster
  - Enforce targets are not built more than necessary
  - Clarify Makefile help, info, and version targets
  - Support building CoreFreq binaries individually or together</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1754481600">- added fix-leap16-compilation.patch to fix compilation on x86_64 Leap 16.0</changelog>
</package>
<package pkgid="dff257569de2415f3984e68d1f110cc1d15f787224c3a1aa6f890a2767dd01f762d596ebebe8a44a24fb250c4be2d5cc0375ae763b15b57539da6f553915cef4" name="CorsixTH" arch="x86_64">
  <version epoch="0" ver="0.67" rel="bp160.1.13"/>
  <changelog author="mailaender@opensuse.org" date="1514635200">- Disable movies to workaround a segfault on startup
  https://github.com/CorsixTH/CorsixTH/issues/1315</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1551528000">- Update to version 0.62
- Enable movies again</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1558699200">- Update to version 0.63
  * Game music now supports ogg, flac, wav, aiff, voc, and mod in
    addition to mp3 and mid/xmi tracks.
  * No more hunting for that machine that's always breaking down.
    Save your camera position with ALT+number, and restore with
    CTRL+number.
  * Announcements are now queued to play one after another instead
    of overlapping.
  * New man page for unix like operating systems.
  * Fax message improvements.
  * All hotkeys in the game are now configurable from within a
    new option in the settings menu.
  * Configure the scroll and zoom speed in game.
  * Improved mouse 'release' behaviour. Release mouse (CTRL+F10 by
    default) now always releases the mouse, so the game will not
    scroll when moving out of the window. Clicking in the game
    window causes the game to recognize the mouse again.
- Run spec-cleaner.
- Installation of Icon- and desktop files are now properly handled
  by the upstream buildsystem.</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1594987200">- Update to version 0.64
  * ISO images may be used as a Theme Hospital data source.
  * Confirm dialogs are now sized properly in all languages
  * Many circumstances causing rooms to become stuck have been fixed
  * Level 6 map issues causing errors have been corrected
  * Epidemic patients couldn't be treated while they were seeking a room
  * CJK text layout issues have been corrected
  * French Level 5 description was replaced so that formatting characters no longer show up in it.
  * Some undefined behavior and potential memory leaks have been corrected.
  * Earthquake cheat now breaks your hospital instead of the game.
  * Updated translations for Chinese, French, Brazilian Portuguese.
  * Spelling and grammar fixes for English.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1625054400">- Update to version 0.65:
  * Hospital policies will now carry over to your next level in
    the campaign
  * You can now remove destroyed rooms for a fee (config option)
  * The information dialogs that appear when a room is first built
    can be disabled in the configuration file
  * Fire extinguishers in rooms now have a chance to save a smoking
    machine from exploding
  * Advisor has more advice
  * Additional trophy of the original game is implemented
  * Roujin's challenge cheat is back
  * Experimental direct_zoom config option, for more efficient zoom.
  * Fix: Emergencies with unknown diseases will no longer occur
  * The VIP system has been overhauled to provide more balanced ratings
  * Overpriced/Underpriced treatments now scale with difficulty
  * Placing a receptionist on a desk will now call her to the desk
  * Boiler breakdowns now depend on handymen
  * Faxes can no longer be opened while paused
  * Improvements to receptionist announcement frequency and behaviour
  * Games compiled without movie/audio can no longer access these settings
  * Greek language added!
  * Updates to Brazilian-Portuguese and English language
  * Fixes to Chinese unicode encoding
  * Fix: Issues scheduling emergencies have been resolved
  * Fix: Games will no longer crash on load if the jukebox was open
  * Fix: Games will no longer crash because of an empty music folder
  * Fix: Fixed a scenario where editing a room caused staff to get stuck
  * Fix: Games that scrolled while saving stop scrolling on load
  * Fix: Psychiatrists in the Operating Theatre are now properly counted
  * Fix: Losing a game now gives the reason if the movie is skipped
  * Fix: Exiting the game will no longer hang when using the
    Wayland backend
  * Fix: The mouse will now be freed on game crash</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625918400">- Fix lua-lpeg requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625918401">- Use default lua otherwise the Requires will be incorrect
- Remove unnecessary luajit build dep</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1627214400">- Update to version 0.65.1
  * Fixes a bug where the game would crash if you got the All Cured
    trophy at the end of year awards, when loading a save from 0.64
    or earlier.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Update to version 0.66:
  * New Features/Enhancements:
  - Direct Zoom has been improved and is now enabled by default
  - Nurses can now leave the ward without disturbing her patients
  - Patients with Serious Radiation now glow a beautiful shade of
    green
  - Patients with Jellyitis now wobble wobble wobble
  - The Hotkeys menu has been overhauled to make it easier to use
  - You can now reset your zoom level by pressing '0'
  - A new fax code cheat has been added!
  - The replace machine prompt will now tell you the new strength
    before purchase (can be disabled in configuration settings)
  - A machine's dynamic info will tell you the strength a machine
    can be upgraded to if you replaced it (can be disabled in
    configuration settings)
  - Support ffmpeg v5.
  * Changes:
  - Improved pee and vomit conditions
  - Patients will no longer queue for reception until nearby
  - The Adviser will no longer queue repetitive messages
  - Dropdown menus will now close when clicked outside of
  - Non-visual diseases can now be delayed in the level config of
    a custom game
  - Gamelog.txt will now contain system information instead of
    within the window title
  - Patients no longer become fed up and leave the hospital if
    already in their treatment room
  * Bug Fixes:
  - Checking for updates should now work moving forward (promise)
  - All cured trophy bugfix now properly applied from 0.65.1
  - Firing staff from a multi-use object now ensures they leave
    the hospital
  - Missing config and hotkey values will now use default values
  - Fixed an instance where an emergency fax could show the wrong
    cure
  - Sound effect boundary is now properly applied on window
    resize
  - The cheats menu is now immediately usable after typing the
    cheat code on a fax
  - User action while paused setting no longer uses configuration
    default
  - Quick Save and Quick Load behaviour has been improved
  - The cheats menu dialog will no longer slide off the screen
  - You can now purchase plots while wall transparency is on
  - Playback of movie audio on surround sound systems is improved
  - Resolved formatting issues with numbers after loading a save
  * Updated translations.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1692964800">- Update to version 0.67:
  * New Features/Enhancements
  - The original demo gameplay video now plays when the
    CorsixTH main menu is idle (this can be disabled in the
    configuration file)
  - File browser menus now have an OK button
  - Selecting an existing file in the Save Game/Map browsers
    will now update the text input box to that file name
  * Changes
  - Handymen now always stay in their assigned plots, except
    when going to rest
  - Staff members now have a maximum salary, which can be
    configured in custom levels
  - The game will now always use the GP's choice of next
    diagnosis room for the patient, if available
  - Queueing patients are now shown when hovering a door
  - Epidemics can no longer fail because an infected patient
    left before the epidemic was revealed
  - Balance changes to drug improvement research
  - Check for updates can now be disabled in Settings
  - Check for updates timeout duration significantly reduced
  - "Pause" now shows up when the "Build while paused" setting
    is on and the game is paused.
  - The gamelog file now includes a timestamp
  - Support for detecting Theme Hospital game files from an
    EA Store install
  - Many, many, refactors of the code to make it better to
    understand for future developers
  - Contact methods to reach the CorsixTH Team have been updated
  * Bug Fixes
  - Fixed an instance where objects could disappear from the map
  - Fixed a bug where the empty action queue message was
    prevented from happening
  - Fixed a bug where dying patients became undead and would
    have a habit of ruining everything
  - Fixed broken dynamic info during epidemics
  - Handymen will no longer try to repair machinery while
    a patient is using it
  - Psychiatrist couch has less chance of causing blocked paths
  - Roujin's challenge is now properly applied (read: harder)
  - Serious Radiation is no longer contagious
  - Room blueprints can no longer go beyond external walls
  - Fixed incorrect button sounds in the Staff Management window
  - Fixed back button behaviour in Font Picker
  - Fixed a bug where word-wrapping text on dialogs could crash
    the game
  - Fixed a rare case where the next VIP date may be scheduled
    in the past
  - Fixed a rare case where awarded research points could
    be negative
  - Fixed a rare case of the balance sheet being victim of
    a green highlighter
  * Updated Translations</changelog>
</package>
<package pkgid="1f03a420c308d38c945e73b2a0e21e852eb127437c534ec0d8fd764bcc22a2211f8e754ce12585598afc838a4d2e4144087766783cc98c75f96856d5d8d09584" name="DSView" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="bp160.1.13"/>
  <changelog author="Dmitry Roshchin &lt;dmitry_r@opensuse.org&gt;" date="1570363200">- Initial package, version 1.01</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1613822400">- update to 1.1.2:
  * fix issue of saving/loading file with special characters
  * fix issue #226, double-click open dsl file on Windows
  * improve range settings in decoders
  * add QSPI and MIPI DSI decoders
  * merge enhancement of LPC decoder
  * fix issue #300, time precision for csv export of decoder results
  * fix out-of-order issue of multiple annotation rows in one decoder
  * fix issue #306, VCD file export uses the wrong identifier codes
  * improve the icons with svg format for better high DPI display
  * fix out of screen issue when DPI scale &gt;= 1.5 @ 1080P
  * fix type-c orientation issue for U3Pro16/U3Pro32
  * fix decoder issues (enhance detection of i2s stop and dmx512 break)
  * improve the auto gain control during auto calibration for U2B100/U3P100
  * fix issue of first trigger be ignored
  * add support for DSCope U3P100 device (100M bandwidth/1G samplerate/USB3.0 oscilloscope)
  * add support for DSLogic U3Pro32 device (32 channels/1G samplerate/USB3.0 logic analyzer)
  * add support for DSCope U2B100 device (100M bandwidth/1G samplerate/USB2.0 oscilloscope)
  * add support for DSLogic U3Pro16 device (16 channels/1G samplerate/USB3.0 logic analyzer)
  * add display of device type (USB 2.0 / USB 3.0 / Demo / File)
  * add version check for FPGA firmware
  * improve the default file name when saving/exporting files
  * fix other display and language issue
  * extend channel support for trigger up to 32 channels
  * fix issue of ps/2 decoder (#239)
  * fix issue of cec decoder (#235)
  * fix ID issue when export results of decoder (#237)
  * fix "not" logic don't work in advance trigger
  * fix other display issues
  * improve wave shake issue when trig high freqency signals
  * fix sampling point selection issue of downsampling
  * add 20M bandwidth limitation for DSCope U2B100 / DSCope U3P100 devices
  * improve synchronism between data acquisition and wave dispaly
  * fix wave display and measurement issue when change vdiv and offset after stop
  * fix capture restart issue when change offset in roll mode
  * fix issue of timebase of math channel can't be changed when waiting trigger
  * fix issue of offset can't be changed when waiting trigger
  * fix clear and flicker issue of auto measurements
  * fix cursor and mouse measurements issue after change samplerate when waiting trigger
  * fix trigger issue when toggle between different trigger source
  * fix hardware offset setting issue
  * fix mipmap issue of long time data at some case
  * add cursor and mouse measurements
- add qt5-includefixes.patch
- merge build of libsigrokdecode4DSL and libsigrok4DSL into main package</changelog>
  <changelog author="Wojciech Kazubski &lt;wk@ire.pw.edu.pl&gt;" date="1641988800">- added a patch DSView-remove-unnecessary-extern-C.patch, taken
  from upstream, to fix build on Tumbleweed and Leap 15.4</changelog>
  <changelog author="Dmitry Roshchin &lt;dmitry_r@opensuse.org&gt;" date="1669377600">- Update to version 1.2.1
- Drop deparate library packages
- Drop DSView-remove-unnecessary-extern-C.patch
- Drop qt5-includefixes.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1678968000">- Update to 1.2.2:
  common:
  * Add shortcut key recognition of ctrl/shift/alt
  * Fix multiple clicks crash during file saving
  * Fix screenshot crash under macOS
  * Improve accuracy of CSV file
  for logic analyzer:
  * Support new hardware and firmware versions
  * Clean up 0: UART protocol outputs statement
  * Add CAN decoder support for CANFD
  * Fix wait error for some decoders
  * Fix QI decoder bugs
  * Fix SPDIF decoder error for incomplete frames
  * Add message type support for USB PD decoder
  for oscilloscope:
  * Fix measure error of DSL files with different channel number
- Remove various unnecessary BuildRequires</changelog>
  <changelog author="Mikhail Paulyshka &lt;me@mixaill.net&gt;" date="1729166400">- Added 0000-added-missing-includes.patch to fix build
- Remove various unnecessary BuildRequires
- Update to v1.3.2
  common
  * Fix crashes when dragging windows between screens
  * Add drag-and-drop and window arrangement support for native Windows windows
  * Improve adaptive window and font display at different DPI settings
  * Fix the issue of missing firmware on macOS
  * Modify the color allocation of the cursor to improve clarity.
  * Fix log file creation issue on Windows
  * Fix display area coverage and font rendering problems
  for logic analyzer
  * Add region waveform save and export feature
  * Fix crashes from cursor placement beyond waveform area during decoding
  * Fix crashes with specific sampling parameters in loop mode
  * Fix crashes from multi-byte search in decoding results
  * Improve distance measurement edge selection
  * Add reminder for channel settings when adding a decoder
  * Implement auto-scroll to latest waveform in loop mode
  * Fix protocol decoding issues (CAN/QSPI/DMX512/LIN/...)
  for oscilloscope
  * Improve pulse count measurement accuracy
  * Fix file export issue with single channel enabled
  * Resolve crashes from FFT parameter modification during data acquisition
  * Fix waveform and vertical resolution calculation issues in math operations
  * Fix waveform anomalies from channel offset exceeding boundaries
  * Improve accuracy of mouse measurements
- Update to v1.3.1
  common
  * Fix the erroneous bin files released for Linux/macOS systems
  for logic analyzer
  * Add support for new hardware (USB2.0 interface/1G sampling rate)
  * Fix the external clock issue with the U3Pro series
  * Fix the issue with trigger position display in repeat mode
  * Fix the problem with the mouse measurements in repeat mode
  * Improve the accuracy of threshold voltage
  * Fix the issue with the Timing decoder
  * Expand the number of bytes decoded per frame for the DMX512 decoder
  for oscilloscope
  * Fix the incorrect measurements on first trigger for U3P100
  * Fix the error in measurements when the window size changes
  * Fix the issue with saving measurements into DSL files
  * Fix the loading error of duty cycle in DSL files
  for data acquisiton
  * Fix the issue with incorrect values when export CSV file
  * Fix the problem with waveform display when the window size changes
  * Fix the issues with waveform when different channel are enabled
- Update to v1.3.0
  common
  * Improve device management, decouple it from wave acquisition and display
  * Add support for dynamically switching font sizes
  * Modify the multilingual framework to support language extensions
  * Modify the format of session files
  * Modify the loading and display of data files
  * Optimize the switching between multiple devices
  * Add a mandatory prompt to save data when switching
  * Update demo device
  * Added the ability to view and clear logs
  for logic analyzer
  * Add real-time display support for stream mode
  * Add scrolling (loop) mode to continuously collect and display in real-time
  * Update repeat mode to maintain previous waveform before switching
  * Update the display and search of waveform edges
  * Add and fix decoders (e.g., can-fd, mipi-rffe, UFCS, etc.)
  * Support ordering of decoders and waveform channels, and remember the order
  * Support exporting multiple column decoding results to the same CSV file
  * Support mapping and saving of decoder names and decoding channel names
  * Add Chinese translation for decoder options
  for oscilloscope
  * Update the data storage method for oscilloscope channels
  * Fix an issue with file saving when using single channel</changelog>
</package>
<package pkgid="c18f24a82779822b3b4a1039ff74c52a6dff33a00f56b8d83330f5621c238c3acf1810b0d9c6081d64f93db6f3c15b30b24d9e987e0fd3d6b443f81da0a7e75e" name="DVDStyler" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="bp160.1.15"/>
  <changelog author="bjorn.lie@gmail.com" date="1526644800">- Drop pkgconfig(libgnomeui-2.0) BuildRequires, using libgnomeui is
  not mandatory.
- Drop conditional wxWidgets-3_0-devel BuildRequires, no current
  openSUSE release provides it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550059200">- Add DVDStyler-fix-build-ffmpeg4.patch: Fix build with ffmpeg v4.
  Following this, no longer enforce ffmpeg3 versions of
  pkgconfig(libav*).</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1554638400">- Require specific version of wxsvg that DVDStyler was built
  against as first stage for fixing boo#1131765</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581681600">- Update to version 3.1.2
  * unix: changed to use configuration file .dvdstyler/dvdstyler
  version 3.1.1:
  * updated some translation
  version 3.1:
  * added some new buttons (movie, settings, etc.)
  * added possibility to create a new button from SVG file
  * added possibility to edit buttons
  * added frame-text button and template (thanks to ecodrv)
  * fixed functionality of command "call last menu;" if
    specified for a chapter
  * added support of HD videos (experimental, can be activated
    in settings)
  * fixed some bugs
- Dropped DVDStyler-fix-build-ffmpeg4.patch (merged upstream)
- Dropped group tag</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1582027200">- Add reproducible.patch to normalize zip timestamps
  to make package build reproducible</changelog>
  <changelog author="aloisio@gmx.com" date="1586347200">- Updated wxsvg version requirement</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1659355200">- Update to 3.2.1 and build with wxGTK3-3_2-devel.
- Fix build with patch from upstream - fix.patch
- Upstream changes:
  * added support of font attribute 'underline' and "line-through"
  * video properties: added possiblity to add video filters before
    pad/scale filters
  * some improvements of PCM support (experemental)
  * added initial support of transparent highlighted colors
  * disabled format selection for mjpeg streams (preview images)
  * disabled "Copy" option for MP3 and PCM (because PCM need to be
    repacked to big endian)
  * ignore mjpeg streams (preview images)
  * fixed creation of dvd with more than 100 hours
  * fixed generation of DVD if some video streams are omitted
  * fixed setting shadow if multiple objects are selected
  * fixed slow loading of project files
  * added some new buttons (thanks to ecodrv)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1667649600">- Add upstream changes to allow building DVDStyler with FFmpeg5:
  * 0001-fixed-encoding-of-silent-audio-file.patch
  * dvdstyler-ffmpeg5.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1724241600">- Fix build by requiring the same libavcodec as wxsvg
- Exclude i586 build due to missing libMagickCore-7.Q16HDRI.so.9</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728561600">- Add DVDStyler-ffmpeg7.patch: Support building against FFmpeg 7.
  + Allow building against FFmpeg 7 again, which is also what wxsvg
    is using by now.</changelog>
</package>
<package pkgid="33777099d489b2c2d222c51be4b6a8ecac20c05f315fd08afab55287ee651a2b479b2025df557a4aea7c871448b9a8ffbc774d63571ff10b4ee51e1bf2872787" name="DVDStyler-lang" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="bp160.1.15"/>
  <changelog author="bjorn.lie@gmail.com" date="1526644800">- Drop pkgconfig(libgnomeui-2.0) BuildRequires, using libgnomeui is
  not mandatory.
- Drop conditional wxWidgets-3_0-devel BuildRequires, no current
  openSUSE release provides it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550059200">- Add DVDStyler-fix-build-ffmpeg4.patch: Fix build with ffmpeg v4.
  Following this, no longer enforce ffmpeg3 versions of
  pkgconfig(libav*).</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1554638400">- Require specific version of wxsvg that DVDStyler was built
  against as first stage for fixing boo#1131765</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1581681600">- Update to version 3.1.2
  * unix: changed to use configuration file .dvdstyler/dvdstyler
  version 3.1.1:
  * updated some translation
  version 3.1:
  * added some new buttons (movie, settings, etc.)
  * added possibility to create a new button from SVG file
  * added possibility to edit buttons
  * added frame-text button and template (thanks to ecodrv)
  * fixed functionality of command "call last menu;" if
    specified for a chapter
  * added support of HD videos (experimental, can be activated
    in settings)
  * fixed some bugs
- Dropped DVDStyler-fix-build-ffmpeg4.patch (merged upstream)
- Dropped group tag</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1582027200">- Add reproducible.patch to normalize zip timestamps
  to make package build reproducible</changelog>
  <changelog author="aloisio@gmx.com" date="1586347200">- Updated wxsvg version requirement</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1659355200">- Update to 3.2.1 and build with wxGTK3-3_2-devel.
- Fix build with patch from upstream - fix.patch
- Upstream changes:
  * added support of font attribute 'underline' and "line-through"
  * video properties: added possiblity to add video filters before
    pad/scale filters
  * some improvements of PCM support (experemental)
  * added initial support of transparent highlighted colors
  * disabled format selection for mjpeg streams (preview images)
  * disabled "Copy" option for MP3 and PCM (because PCM need to be
    repacked to big endian)
  * ignore mjpeg streams (preview images)
  * fixed creation of dvd with more than 100 hours
  * fixed generation of DVD if some video streams are omitted
  * fixed setting shadow if multiple objects are selected
  * fixed slow loading of project files
  * added some new buttons (thanks to ecodrv)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1667649600">- Add upstream changes to allow building DVDStyler with FFmpeg5:
  * 0001-fixed-encoding-of-silent-audio-file.patch
  * dvdstyler-ffmpeg5.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1724241600">- Fix build by requiring the same libavcodec as wxsvg
- Exclude i586 build due to missing libMagickCore-7.Q16HDRI.so.9</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728561600">- Add DVDStyler-ffmpeg7.patch: Support building against FFmpeg 7.
  + Allow building against FFmpeg 7 again, which is also what wxsvg
    is using by now.</changelog>
</package>
<package pkgid="e039d5352571768b076affcf6d1fecd9d89f3efc0c76c0f735c13c85479783b9856af6f7103d3b73e3df2f8b71c53f6ae375ed0f27a85ab777a032dfe161de02" name="DevIL-devel" arch="x86_64">
  <version epoch="0" ver="1.7.8" rel="bp160.1.3"/>
  <changelog author="tchvatal@suse.com" date="1378555200">- Kill the mandriva code as they are not using it anyway.
- Add missing deps to build all features possible
- Move the ilur binary to separate tools package as it is GPL-3.0+
  licensed.</changelog>
  <changelog author="lnussel@suse.de" date="1380715200">- make sure to not use il_wdp.c</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435320000">- Fix compilation with GCC 5: add DevIL-1.7.8-gcc5.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496059200">- Drop lcms-devel BuildRequires and pass --disable-lcms to
  configure: lcms upstream explicitly recommends no longer to use
  this outdated version of the library (DevIL 1.8.0 seems to gain
  lcms2 support).</changelog>
  <changelog author="wbauer@tmo.at" date="1523102400">- Add jp2-remove-use-of-uchar-define.patch to fix build with newer
  jasPer</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1526126400">- Fix %install_info_delete usage:
  * It has to be performed in %preun, not %postun.
  * See https://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#.25install_info_delete.</changelog>
  <changelog author="mvetter@suse.com" date="1566388800">- bsc#1144245: Remove JPEG2000 support due to dropping dependency
  on libjasper
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388801">- Remove bias and marketing wording from descriptions.</changelog>
  <changelog author="pgajdos@suse.com" date="1618401600">-
- added patches
  fix build with openexr3
  + libdevil-openexr3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN</changelog>
</package>
<package pkgid="c21245ed193fb1ed8406b0a02212e90a3ea6f201860234be6c41d066c01427ac083a1e076fdbaf9c71825263c3bf3b9d517ac1ec76932025f72db8dae56cd7f4" name="DirectX-Headers" arch="x86_64">
  <version epoch="0" ver="1.614.1" rel="160000.2.2"/>
  <changelog author="scott.bradnick@suse.com" date="1661860800">- Update to 1.606.4:
  * Update D3DX12.H to support new ABI for MinGW (#73)
  * dxguids: Add new GUIDs from the last several releases</changelog>
  <changelog author="scott.bradnick@suse.com" date="1669032000">- Update to 1.608.0:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.608.0 NuGet package.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1680177600">- Update to 1.608.2:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.608.2 NuGet package.
  - https://devblogs.microsoft.com/directx/directx12agility/
  - https://www.nuget.org/packages/Microsoft.Direct3D.D3D12/1.608.2</changelog>
  <changelog author="scott.bradnick@suse.com" date="1681387200">- Update to 1.610.0:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.610.0 NuGet package.
  - https://devblogs.microsoft.com/directx/directx12agility/
  - https://www.nuget.org/packages/Microsoft.Direct3D.D3D12/1.610.0</changelog>
  <changelog author="mpluskal@suse.com" date="1686916800">- Install license
- Use -ffat-lto-objects for static libraries</changelog>
  <changelog author="scott.bradnick@suse.com" date="1701777600">- Update to 1.611.0:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.611.0 NuGet package.
  - https://devblogs.microsoft.com/directx/directx12agility/
  - https://www.nuget.org/packages/Microsoft.Direct3D.D3D12/1.611.0</changelog>
  <changelog author="scott.bradnick@suse.com" date="1710158400">- Update to 1.613.0:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.613.0 NuGet package.
  - https://devblogs.microsoft.com/directx/directx12agility/
  - https://www.nuget.org/packages/Microsoft.Direct3D.D3D12/1.613.0</changelog>
  <changelog author="scott.bradnick@suse.com" date="1710849600">- Update to 1.613.1:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.613.1 NuGet package.
  - https://devblogs.microsoft.com/directx/directx12agility/
  - https://www.nuget.org/packages/Microsoft.Direct3D.D3D12/1.613.1</changelog>
  <changelog author="scott.bradnick@suse.com" date="1715947200">- Adding version-fixup.diff to account for leftover 1.613.1 references
- Update to 1.614.0:
  * This release matches the content provided in the DirectX12
    Agility SDK and the 1.614.0 NuGet package.
  - https://devblogs.microsoft.com/directx/directx12agility/
  - https://www.nuget.org/packages/Microsoft.Direct3D.D3D12/1.614.0</changelog>
  <changelog author="scott.bradnick@suse.com" date="1725883200">- Removing version-fixup.diff as it was fixed upstream
- Update to 1.614.1:
  * Several warning fixes and a DML update on top of v1.614.0. Importantly,
    the CMake/meson build systems actually report a v1.614 version number.
    That change was missed from the previous release. No new D3D APIs are
    present relative to v1.614.0.</changelog>
</package>
<package pkgid="0fc0fbc722e82b126c6648fe7c8bc8f1d17542a2b517849d7c3a2decd4c81aad7a6064dc332baa89c59b479807d05bf62ad847092340b5ac2f7a669ddbdf93c8" name="FAudio-devel" arch="x86_64">
  <version epoch="0" ver="24.06" rel="bp160.1.13"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672747200">- update to 23.01:
  * Remove PlatformToolset lines from visualc-gdk project</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1679054400">- update to 23.03:
  * CMake: Add feature macros for usleep for tests
  * GDK:
  - GDK now builds dynamic libraries, rather than static
  - Look for "SDL" rather than "SDL2", to match the
    upstream Git repository name</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689940800">- update to 23.07:
  * FACT: When parsing SoundBanks, explicitly update the read
    offset for each data region
  * XNA_Song: Fix possible truncation of total seconds when
    opening QOA files
  * Xbox GDK support is now considered Ready to Ship
  * UWP support is now deprecated and will be removed in FAudio
    24.01
  * XNA_Song now supports QOA input files
  * FACT: Add support for `WAVEBANKSTREAMING_INVALIDCONTENT`
    notifications
  * Added FilterWetDryMixEXT extension</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1697630400">- update to 23.10:
  * Minor static analysis fix for F3DAudio
  * FACT now supports all publicly known WaveBank format versions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- update to 23.11:
  * The mixer thread no longer crashes when attempting to read
    voices using WMAUDIO3 buffer data
  * SDL2: Fix regression that prevented devices with &gt;8 channels
    from opening</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701432000">- update to 23.12:
  * Removed an unused variable from the QOA decoder. 23.12 is
    functionally identical to 23.11.</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710763200">- Update to 24.03:
  * New Features:
    Update to FNA3D 24.03
    Update to FAudio 24.03
  * Fixes:
    DDSFromStreamEXT: Fixed some logic errors in the DDS header parser
    NativeAOT: Improve failure message when missing types in rd.xml
    Separated obj folder paths for NetFramework/NetStandard projects,
    fixes weird compiler conflicts
  update to 24.02:
  * New Features:
    Update to FNA3D 24.02
    Update to FAudio 24.02
  * Modified Features:
    DDSFromStreamEXT now supports RGBA DDS textures, in addition to BGRA
  * Fixes:
    SDL2_FNAPlatform:
    Display orientation events are now ignored on non-mobile platforms
    Worked around a display hotplugging timing issue in SDL
    Improved error reporting when FNA3D fails to decode images
  update to 24.01:
  * New Features:
    Update to FNA3D 24.01
    Update to FAudio 24.01
    Added support for detecting PlayStation gamepads hidden behind
    Steam Virtual Gamepads
    This feature requires SDL 2.30 or newer
  * Removed Features:
    UWP support has been removed, Xbox developers should migrate to GDK
  * Fixes:
    Removed the x64 Platform from modern C# project files, this attribute
    is now inherited from the Solution instead
    GraphicsDeviceManager now warns when calling ApplyChanges too early in
    the Game lifecycle
    Fixed FNADllMap support on iOS/tvOS
  update to 23.12.07:
  * Fixes:
    Update to FNA3D 23.12.07
    Fixed GraphicsResource finalization to use atomics, rather than managed
    queues</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1712577600">- update to 24.04:
  * pkgconfig files now explicitly include the SDL2 dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715947200">-update to 24.05:
  * New Features:
  * Initial work to support SDL 3.0
  * FACT: Fix a crash for XACT Cues which may have variation set
    with no variation data</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1717761600">- update to 24.06:
  * Fix a possible deadlock in voice callbacks when the
    application has aggressive mutex locking
  * Minor fixes for implicit conversion warnings on MSVC
  * Wine/Win32:
  * Fix a crash when GetDefaultAudioEndpoint fails
  * Exit cleanly when opened audio devices disconnect
  * Properly list all audio devices, rather than just the default</changelog>
</package>
<package pkgid="03ce4f53f3d2ae61e36e951fc556c6ee76b9441f32905842639be3e190514c16a804cc6e53b83560b93ac292621ad8ff2b7193b789c6fb3a374f8f8003e547f5" name="FastCGI" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="160000.2.2"/>
  <changelog author="boris@steki.net" date="1363780800">- re-enable SLE support as %perl_requires is too new</changelog>
  <changelog author="fcrozat@suse.com" date="1409572800">- Update license tag to spdx 1.2.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Split out the system library, following the shared library
  conventions
- Make devel subpackage depends on shared library package</changelog>
  <changelog author="jengelh@inai.de" date="1419076800">- "libfcgi++-0" package name is wrong (should be "libfcgi++0");
  change to libfcgi0 (due to libfcgi.so.0 being present, which is
  the main one).
- Remove pointless --with-pic (it is enabled by default anyway)</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add FastCGI-perl526.patch as perl 5.26 no longer has . in @INC</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Fix url for website and source, upstream is dead for a while.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.
- Rebase FastCGI-perl526.patch to apply with -p0, like all the
  other patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718280000">- Rename perl-FastCGI subpackage to perl-FCGI: adjust the package
  name to the actual perl module name.</changelog>
  <changelog author="mrueckert@suse.de" date="1728388800">- add the normalized provides for perl(FCGI) until auto provides is
  fixed</changelog>
  <changelog author="mrueckert@suse.de" date="1749816000">- Update to 2.4.6 (boo#1243325 CVE-2025-23016)
  switch to https://github.com/FastCGI-Archives/fcgi2
  lots of small bugs fixes and incorporation of patches that
  distros carried in the past
- drop patches which are included upstream
  FastCGI-clientdata_pointer.patch
  FastCGI-gcc44.patch
  FastCGI-makefile.am_cppflags.patch
  FastCGI-supervise_cgi-fcgi.patch
  fastcgi-2.4.0_missing_call_to_fclose.patch
- drop patches obsoleted by changes to the perl building
  FastCGI-fix_deprecated_api.patch
  FastCGI-perl514.patch
  FastCGI-perl526.patch</changelog>
</package>
<package pkgid="16f6d1635fd949ac675001e661857b7723759f22fe8e179ac922bcf3dc2d349bfecc30c6a7cfd86c071404e8b1cabd57d8a3363f0aa588256f9a3566299c25e2" name="FastCGI-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="160000.2.2"/>
  <changelog author="boris@steki.net" date="1363780800">- re-enable SLE support as %perl_requires is too new</changelog>
  <changelog author="fcrozat@suse.com" date="1409572800">- Update license tag to spdx 1.2.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Split out the system library, following the shared library
  conventions
- Make devel subpackage depends on shared library package</changelog>
  <changelog author="jengelh@inai.de" date="1419076800">- "libfcgi++-0" package name is wrong (should be "libfcgi++0");
  change to libfcgi0 (due to libfcgi.so.0 being present, which is
  the main one).
- Remove pointless --with-pic (it is enabled by default anyway)</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add FastCGI-perl526.patch as perl 5.26 no longer has . in @INC</changelog>
  <changelog author="fcrozat@suse.com" date="1683806400">- Fix url for website and source, upstream is dead for a while.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.
- Rebase FastCGI-perl526.patch to apply with -p0, like all the
  other patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718280000">- Rename perl-FastCGI subpackage to perl-FCGI: adjust the package
  name to the actual perl module name.</changelog>
  <changelog author="mrueckert@suse.de" date="1728388800">- add the normalized provides for perl(FCGI) until auto provides is
  fixed</changelog>
  <changelog author="mrueckert@suse.de" date="1749816000">- Update to 2.4.6 (boo#1243325 CVE-2025-23016)
  switch to https://github.com/FastCGI-Archives/fcgi2
  lots of small bugs fixes and incorporation of patches that
  distros carried in the past
- drop patches which are included upstream
  FastCGI-clientdata_pointer.patch
  FastCGI-gcc44.patch
  FastCGI-makefile.am_cppflags.patch
  FastCGI-supervise_cgi-fcgi.patch
  fastcgi-2.4.0_missing_call_to_fclose.patch
- drop patches obsoleted by changes to the perl building
  FastCGI-fix_deprecated_api.patch
  FastCGI-perl514.patch
  FastCGI-perl526.patch</changelog>
</package>
<package pkgid="76c82d4682ee2934b80721ca4273d986ab2d635349918c4fb249d026e3c27268debe2297014eb9b3b81f38674ea0ecc7f2a6fccb39514a04f783be97a871598d" name="FlightGear" arch="x86_64">
  <version epoch="0" ver="2020.3.19" rel="bp160.1.6"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1610366400">- Update to 2020.3.5
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.5</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1611835200">- Update to 2020.3.6
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.6</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1617624000">- Update to 2020.3.8
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1623326400">- Update to 2020.3.9
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1629979200">- Update to 2020.3.11
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.11</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643976000">- Update to 2020.3.12
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.12</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1649764800">- Update to 2020.3.13
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.13</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669204800">- Update to 2020.3.17
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.17</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1680091200">- Update to 2020.3.18
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.18</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1699876800">- Update to 2020.3.19
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.19</changelog>
</package>
<package pkgid="91a314e5a308e2bb3b3731a642935472fa801f35b77f41f8bb14a9aada3d9109d75662cb64d032a6d50b3dc3634996ecc96b1aa737f41062a3871ba359f4fb58" name="FlightGear-data" arch="noarch">
  <version epoch="0" ver="2020.3.18" rel="bp160.1.4"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1607601600">- Update to 2020.3.4
  * No changelog available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1610366400">- Update to 2020.3.5
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.5</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1611835200">- Update to 2020.3.6
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.6</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1617624000">- Update to 2020.3.8
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1623326400">- Update to 2020.3.9
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1629979200">- Update to 2020.3.11
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.11</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643976000">- Update to 2020.3.12
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.12</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1649764800">- Update to 2020.3.13
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.13</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669204800">- Update to 2020.3.17
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.17</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1680091200">- Update to 2020.3.18
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.18</changelog>
</package>
<package pkgid="0ba9fa4e0962d5db3fe991e8bb25c580952b8475c78bca5ff15263bb4c099766ada5df1ef872b6bdf0128872e5dbeb6e3498ec55afac6d60e3cdbd6d5c24e769" name="FlightGear-docs" arch="noarch">
  <version epoch="0" ver="2020.3.18" rel="bp160.1.4"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1607601600">- Update to 2020.3.4
  * No changelog available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1610366400">- Update to 2020.3.5
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.5</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1611835200">- Update to 2020.3.6
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.6</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1617624000">- Update to 2020.3.8
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1623326400">- Update to 2020.3.9
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1629979200">- Update to 2020.3.11
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.11</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643976000">- Update to 2020.3.12
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.12</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1649764800">- Update to 2020.3.13
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.13</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669204800">- Update to 2020.3.17
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.17</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1680091200">- Update to 2020.3.18
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.18</changelog>
</package>
<package pkgid="57f8a394473036def11f205454f1ba718379b679cbc89dfb573483048efe99a0980dc63e6ae771302022008f3d42325c85d1633794b77b0f26389685f2c71855" name="Font-Downloader" arch="noarch">
  <version epoch="0" ver="10.0.0" rel="bp160.1.11"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673697600">- Initial package (version 10.0.0).</changelog>
</package>
<package pkgid="f561b4c4180a002a0805aac6a6098f5211bf52152d4dcff751c43d1bb830fdd612385adba97420ff06275813b759a85ab57a8de77c3ea767ee7963d8bc1728d3" name="Font-Downloader-lang" arch="noarch">
  <version epoch="0" ver="10.0.0" rel="bp160.1.11"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673697600">- Initial package (version 10.0.0).</changelog>
</package>
<package pkgid="e2fb265b964e90904c67b075bbfd86b574f2036f6bc3ffbfdb7c4b53662d29cbf5d83a24d33ec45cfbb32e37ffd27de0b3034c31da19fa9fc2e766e7471b144c" name="Fragments" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="bp160.1.49"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1655726400">- Automatic update of vendored dependencies</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1672228800">- Update to version 2.1:
  + Allow changing the location of a single torrent
  + New menu option to resume all torrents
  + Torrent errors are now displayed instead of ignoring them
    silently
  + Display message when the configured download/incomplete
    directory is not available
  + Transmission daemon is only started when necessary, and no
    longer runs continuously in the background
  + Application window can now be closed with CTRL+W
  + Fixed issue that already added magnet links were not recognised
  + Fixed a crash related to the "Automatically Start Torrents"
    setting
  + User interface improvements by using new Libadwaita widgets.
  + Updated translations.
- Replace rust-packaging with cargo-packaging BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Automatic update of vendored dependencies</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1681300800">- Drop %rustflags macro definition and use %__rustflags from
  cargo-packaging package instead.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681300801">- Use rustflags in check section also + run cargo_test macro.
- Add constraints, we need a bigger hdd than some of the builders
  provide.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1686830400">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  %1.2.0+3.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1687521600">- Update to version 2.1.1:
  + New F10 shortcut to open main menu.
  + Updated translations.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1718280000">- Remove obsoleted cargo_config -- Now part of vendor source
- Update to version 3.0.1:
  * Update to Transmission 4.0.6
  * New sandboxed backend for storing remote passwords
  * Fixed layout issues with empty state view
  * Updated translations
- Updates from version 3.0.0:
  New features:
  * Added torrents can now be searched
  * In addition to magnet links, "*.torrent" links in the
    clipboard are now also recognized
  * Prevent system from going to sleep when torrents are
    active
  * New torrents can be added via drag and drop
  * Automatic trashing of "*.torrent" files after adding
    them
  * Stop downloads when a metered network gets detected
  Improvements:
  * When controlling remote sessions, the local
    Transmission daemon no longer gets started
  * Torrents are automatically restarted if an incorrect
    location has been corrected
  * Torrents can now also be added via CLI
  * Clipboard toast notification is no longer displayed
    multiple times
  * Reduced CPU/resource consumption through adaptive
    polling interval
  * Improved accessibility of the user interface
  * Modernized user interface through the use of new
    Adwaita widgets
  * Update from Transmission 3.0.5 to 4.0.5</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1724068800">- Disable LTO, fails to build with GCC 14.
- Drop obsolete audit from _service, it is automatic now.</changelog>
</package>
<package pkgid="b9c3a5afd16234b7bc0e683b0ab16ad4e6cb8118e04a479614baac6b60c5cdb37777860266777c6cff17e2a1c13d26d9c86050feff44a6f5b23272fb3e7b5795" name="Fragments-lang" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="bp160.1.49"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1655726400">- Automatic update of vendored dependencies</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1672228800">- Update to version 2.1:
  + Allow changing the location of a single torrent
  + New menu option to resume all torrents
  + Torrent errors are now displayed instead of ignoring them
    silently
  + Display message when the configured download/incomplete
    directory is not available
  + Transmission daemon is only started when necessary, and no
    longer runs continuously in the background
  + Application window can now be closed with CTRL+W
  + Fixed issue that already added magnet links were not recognised
  + Fixed a crash related to the "Automatically Start Torrents"
    setting
  + User interface improvements by using new Libadwaita widgets.
  + Updated translations.
- Replace rust-packaging with cargo-packaging BuildRequires.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678968000">- Automatic update of vendored dependencies</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1681300800">- Drop %rustflags macro definition and use %__rustflags from
  cargo-packaging package instead.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681300801">- Use rustflags in check section also + run cargo_test macro.
- Add constraints, we need a bigger hdd than some of the builders
  provide.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1686830400">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  %1.2.0+3.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1687521600">- Update to version 2.1.1:
  + New F10 shortcut to open main menu.
  + Updated translations.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1718280000">- Remove obsoleted cargo_config -- Now part of vendor source
- Update to version 3.0.1:
  * Update to Transmission 4.0.6
  * New sandboxed backend for storing remote passwords
  * Fixed layout issues with empty state view
  * Updated translations
- Updates from version 3.0.0:
  New features:
  * Added torrents can now be searched
  * In addition to magnet links, "*.torrent" links in the
    clipboard are now also recognized
  * Prevent system from going to sleep when torrents are
    active
  * New torrents can be added via drag and drop
  * Automatic trashing of "*.torrent" files after adding
    them
  * Stop downloads when a metered network gets detected
  Improvements:
  * When controlling remote sessions, the local
    Transmission daemon no longer gets started
  * Torrents are automatically restarted if an incorrect
    location has been corrected
  * Torrents can now also be added via CLI
  * Clipboard toast notification is no longer displayed
    multiple times
  * Reduced CPU/resource consumption through adaptive
    polling interval
  * Improved accessibility of the user interface
  * Modernized user interface through the use of new
    Adwaita widgets
  * Update from Transmission 3.0.5 to 4.0.5</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1724068800">- Disable LTO, fails to build with GCC 14.
- Drop obsolete audit from _service, it is automatic now.</changelog>
</package>
<package pkgid="b580fcb9b024160fd3f0e18b584b589e722f1f556421e26a2c7bf6c34b3ee7b340978fda0a864c8f3af677e1ffd6ae4b3ca26a337b5458e2d326def0fee68751" name="FreeFileSync" arch="x86_64">
  <version epoch="0" ver="13.7" rel="bp160.1.16"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 12.5:
  * Merge logs of individual steps (comparison, manual operation, sync)
  * Show total percentage in progress dialog header
  * Log and report errors during cleanup or exception handling
  * Skip folder traversal if existence check fails for other side of the pair
  * Automatically adapt batch options to prevent hanging a non-interactive process (Windows)
  * Support path lists for external applications: %item_paths%, %local_paths%, %item_names%, %parent_paths%
  * Create directory lock files with hidden attribute
  * Don't clear other side when right-clicking file selection
  * Fixed passive FTP when using different IP than control connection
  * Work around FTP servers silently renaming unsupported characters of temporary file</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1695297600">- Update to 13.0:
  * Rename (multiple) files manually (F2 key)
  * Configure individual directions for DB-based sync
  * Detect moved files with "Update" sync variant (requires sync.ffs_db files)
  * Update variant: Do not restore files that were deleted on target
  * Distinguish file renames from file moves and simplify grid display
  * Fixed ERROR_NOT_SUPPORTED when copying files with NTFS extended attributes
  * Fixed error during process initialization while connecting with quick launch
  * Avoid redundant file reopen when setting file times during copy
  * Set working directory to match FFS configuration file when double-clicking (Linux)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1699272000">- Update to 13.1:
  * Keep comparison results when only changing cloud connection settings
  * Sync button: indicate if database will be used
  * Remove leading/trailing space during manual file rename
  * Set environment variable "DISPLAY=:0" if missing (Linux)
  * Support dropping ffs_gui/ffs_real config on RealTimeSync directory input field
- Add FreeFileSync-remove_ifdef_exceptions.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701172800">- Update to 13.2:
  * Prevent files from being moved to versioning recursively
  * Return first FTP parsing error when trying multiple variants
  * Allow file times from the future for Linux-style FTP listing</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1706702400">- Update to 13.3:
  * Completed CASA security assessment for Google Drive
  * Use system temp folder for auto-updating
  * Ignore errors when setting directory attributes is unsupported
  * Save GUI sync log file even when cancelled
  * Fixed Business Edition install over existing installation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709208000">- Update to 13.4:
  * Ignore leading/trailing space when matching file names
  * Work around wxWidgets system logger clearing error code
  * Avoid modal dialog hang on KDE when compiling with GTK3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712145600">- Update to 13.5:
  * Wrap file grid folder paths instead of truncate
  * Fixed sync operation arrows for RTL layout
  * Fixed FTP hang during connection (libcurl regression)
  * Consider user-defined file time tolerance for DB comparisons
  * Don't log folder pair paths if nothing to sync</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1715774400">- Update to 13.6:
  * Compact parent path display for medium/large row sizes
  * Fixed crash when mouse inputs are queued due to system lag
  * Don't steal focus from other app when sync progress dialog is shown
  * Fix crackling sound at the beginning of WAV playback (Linux)
  * Prevent middle grid tooltip from covering sync direction
  * Disable Nagle algorithm for SFTP connections</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1720008000">- Update to 13.7
  * Support copying symlinks between SFTP devices
  * Fixed input focus not being restored after comparison/sync
  * Fixed log file pruning not considering selected configuration
  * Show startup error details when running outside terminal (Linux)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1725364800">- disable build for s390x - base/db_file.cpp asserts little endian
  byteorder, but s390x uses big endian</changelog>
</package>
<package pkgid="7e2f0eba0b83ee8afc64d4aedd45ac37625bc85fdc02dc6ee389e6438b59d068bfc38488a3465d8ea0f0ae762c421f6967f754638c578a5de36de4deaaff927c" name="GeoLite2-ASN" arch="noarch">
  <version epoch="0" ver="2024.10.25" rel="bp160.1.10"/>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1733572800">- Initialized 2024.12.07</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1736078400">- Downgraded to 2024.10.25
  * Returned Russian and Crimean IPs deleted in later versions.</changelog>
</package>
<package pkgid="1fe026efd4bcfbf622f0bc2a1f08529c8c3c67e75e7ac7e15164175252397b036f58e35e998ad45653b7c8e834e0dfb955ea0ccf506303ec4ea00e6d281c9708" name="GeoLite2-City" arch="noarch">
  <version epoch="0" ver="2024.10.25" rel="bp160.1.10"/>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1733572800">- Initialized 2024.12.07</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1736078400">- Downgraded to 2024.10.25
  * Returned Russian and Crimean IPs deleted in later versions.</changelog>
</package>
<package pkgid="4c9f2802e9a9041c4273fb64d7b2078a8d58248ca41a2d8d9d3a00816b422f38567aba2cebfe0d74787b22e82a8cf84c13fd0801f59f816b2129ab9f74bd02a4" name="GeoLite2-Country" arch="noarch">
  <version epoch="0" ver="2024.10.25" rel="bp160.1.10"/>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1733572800">- Initialized 2024.12.07</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1736078400">- Downgraded to 2024.10.25
  * Returned Russian and Crimean IPs deleted in later versions.</changelog>
</package>
<package pkgid="e3338bfbd5f513d62d0358f1f4f8091a07afb635c760760d9b49000351d1bc5e0d0ff47066953a3dce4c09408cf2bbc3b60e20ff9b4735df33154b55596160e7" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1692878400">- version update to 1.3.41
  Bug fixes:
  * Blob: Immediately reject attempts to write blobs to formats which
    can not support blobs.
  * TranslateTextEx(): An empty string argument should return an empty
    string rather than a NULL string.
  * SetImageAttribute(): Fix bounds issue when concatenating string.
  * JPEG: Do not set image resolution if the values provided are outside
    of the valid range.
  * Fixes for NaN when reading formats based on floating point.
  * HEIF: Fix reading images with rotation/transformation.
  * BMP: Do not decode primaries or gamma unless colorspace is
    LCS_CALIBRATED_RGB.  Add/correct bmp_info.size "biSize" logic which
    decides if header chunks are present (or invalid).
  * MNG: Fixes for resizing using X_method 5.
  * GM command (convert, montage, mogrify): Many command-line parser
    fixes/checks for invalid command line syntax which causes unexpected
    behavior, or core dumps.
  * TopoL: Given that a writer is now provided, issues found in the
    reader (and writer) due to continual fuzz-testing have been fixed,
    as encountered.
  * GetImageClippingPathAttribute(): Check for and use clipping path
    name (ID=2999) to get the real attribute name.
  * ReadIPTCProfile(): Fix malformed IPTC data parsing.
  New Features:
  * TopoL: Now provides a writer.
  * WPG: Now provides a writer.
  * gm batch: Implement simple Test Anything Protocol (TAP) test
    counting and "ok N"/"not ok N" messaging.
  * TIFF: Support '-define tiff:photometric=minisblack' and '-define
    tiff:photometric=miniswhite' to be able to adjust the sense used
    when writing bilevel TIFF images.
  * TIFF: Require that TIFFTAG_EXTRASAMPLES be used appropriately to
    indicate the intention of extra channels.
  * utilities/tests/gen-tiff-images/genimages: Script for writing (and
    then reading) thousands (5568 permutations) of TIFF format variants.
  * EXIF and PNG: Retrieve image orientation from EXIF (if present) and
    store in image.
  * HEIF: Retrieve image orientation from EXIF and store in image.
  Behavior Changes:
  * The ability to extend existing image attribute text by calling
    SetImageAttribute() multiple times with the same key is now
    deprecated, and will soon be removed.  In the mean time, the
    annoying message "SetImageAttribute: Extending attribute value text
    is deprecated!"  is printed to the standard error output to help
    expose code which is using this feature.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693224000">- fix regression in 1.3.41
  https://sourceforge.net/p/graphicsmagick/bugs/722/
- added patches
  fix 17179:91afa18a6161
  + GraphicsMagick-fix-regression-NULL-instead-of-empty-string.patch
  fix 17180:bb42cd90ce6f
  + GraphicsMagick-name-key-return-input-file-base-name.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- revert to 1.3.40 [bsc#1214831]
  https://sourceforge.net/p/graphicsmagick/news/2023/08/because-1341-is-discarded-i-has-been-published-2-builds-for-win32-architecture/
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - GraphicsMagick-fix-regression-NULL-instead-of-empty-string.patch (not needed)
  - GraphicsMagick-name-key-return-input-file-base-name.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.3.42
  Bug fixes:
  * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2).
  * BMP: Many fixes for reading esoteric BMP sub-formats.
  * TranslateTextEx(): Revert change so now a NULL pointer is returned
    when given an empty string.  Some algorithms (e.g. montage) were
    depending on this!.
  * PAM: Fix reading comments.
  * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so
    it is again possible to request these subformats directly.
  * TIFF: For common formats with the required number of channels, but
    one is an 'unspecified' channel, promote unspecified alpha to
    unassociated alpha so that the alpha channel is not ignored.
  * "Magick" command line emulation: Eliminate duplicate utility name
    output in error messages
  New Features:
  * BMP: Added the ability to read and write BMP using JPEG compression.
  Use '-define bmp:allow-jpeg' to allow use of JPEG compression.
  * BMP: Added support for BI_ALPHABITFIELDS compression
  * BMP: Added support for reading BMP with PNG compression.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1698321600">- Have libGraphicsMagick3-config require ghostscript-fonts-std
  (boo#1216604).</changelog>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
</package>
<package pkgid="884e48758ce08f73ede9c3846214013e9253b6b1de5dd888376174dc47707e1f9ce987f612584b4d6132d30ed6dd1147d6ef6672b466aeb6e17c6fc50beaa270" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.3.1"/>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.3.42
  Bug fixes:
  * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2).
  * BMP: Many fixes for reading esoteric BMP sub-formats.
  * TranslateTextEx(): Revert change so now a NULL pointer is returned
    when given an empty string.  Some algorithms (e.g. montage) were
    depending on this!.
  * PAM: Fix reading comments.
  * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so
    it is again possible to request these subformats directly.
  * TIFF: For common formats with the required number of channels, but
    one is an 'unspecified' channel, promote unspecified alpha to
    unassociated alpha so that the alpha channel is not ignored.
  * "Magick" command line emulation: Eliminate duplicate utility name
    output in error messages
  New Features:
  * BMP: Added the ability to read and write BMP using JPEG compression.
  Use '-define bmp:allow-jpeg' to allow use of JPEG compression.
  * BMP: Added support for BI_ALPHABITFIELDS compression
  * BMP: Added support for reading BMP with PNG compression.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1698321600">- Have libGraphicsMagick3-config require ghostscript-fonts-std
  (boo#1216604).</changelog>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
</package>
<package pkgid="a77266ac34518d3c0ace6e7bf8e69c2a454fce0b67092e2b1b61e67eca5370a8c6030d7ef4b99180c4ebbd70a6d12fb9a3f788aa7945655c2c30abacf2c2dc2b" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1698321600">- Have libGraphicsMagick3-config require ghostscript-fonts-std
  (boo#1216604).</changelog>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
</package>
<package pkgid="041ad425c03c613daf131ca3d8d29149fdd8be8bb8d3a4173c5b8e0e33c17fb6632ca172e3323a017515b4d668e87552b8cd8f4a9b30bf2e2f112ff78b1ae52c" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
</package>
<package pkgid="383a54eb39194c4923daa9e32138f03f59ea2456619f358e6cbb9a54bebc1575d1e3348c95ff7b9707419249d73f40e57460e5fa48ceeaccfc473da3c4912521" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779105600">- added patches
  CVE-2026-42050: Stack buffer overflow in XTileImage [bsc#1265048]
  * GraphicsMagick-CVE-2026-42050.patch</changelog>
</package>
<package pkgid="b8d0a7478357eaf575d8e54af2f8525ddf2cb05506fd8ac832eb7949d72830e73988f349a80302e9575125b1db596e576c83dff387177bde97d7b21b1fa6ba5a" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779105600">- added patches
  CVE-2026-42050: Stack buffer overflow in XTileImage [bsc#1265048]
  * GraphicsMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781265600">- fixed off by one [bsc#1265048]
- modified patches
  * GraphicsMagick-CVE-2026-42050.patch (refreshed)</changelog>
</package>
<package pkgid="583096dd776b920983c7f976c6a423ff4c683eaef3018c90cc61c75b07d21d5376f035607ce1c510220af186dfc856405f2a8111efbbbc8c5cf56887882cad68" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779105600">- added patches
  CVE-2026-42050: Stack buffer overflow in XTileImage [bsc#1265048]
  * GraphicsMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781265600">- fixed off by one [bsc#1265048]
- modified patches
  * GraphicsMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1782302400">- added patches
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * GraphicsMagick-CVE-2026-46523.patch
- modified patches
  * GraphicsMagick-disable-insecure-coders.patch (disable MSL
    to align with ImageMagick)</changelog>
</package>
<package pkgid="ba895604c30461e5e60bbc7bee04949a0acf8fc988c38ed0897dedd8d50f03459ce3febfad43b269c805c97787673583002522f2da5fe37dadb48d526268551e" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1692878400">- version update to 1.3.41
  Bug fixes:
  * Blob: Immediately reject attempts to write blobs to formats which
    can not support blobs.
  * TranslateTextEx(): An empty string argument should return an empty
    string rather than a NULL string.
  * SetImageAttribute(): Fix bounds issue when concatenating string.
  * JPEG: Do not set image resolution if the values provided are outside
    of the valid range.
  * Fixes for NaN when reading formats based on floating point.
  * HEIF: Fix reading images with rotation/transformation.
  * BMP: Do not decode primaries or gamma unless colorspace is
    LCS_CALIBRATED_RGB.  Add/correct bmp_info.size "biSize" logic which
    decides if header chunks are present (or invalid).
  * MNG: Fixes for resizing using X_method 5.
  * GM command (convert, montage, mogrify): Many command-line parser
    fixes/checks for invalid command line syntax which causes unexpected
    behavior, or core dumps.
  * TopoL: Given that a writer is now provided, issues found in the
    reader (and writer) due to continual fuzz-testing have been fixed,
    as encountered.
  * GetImageClippingPathAttribute(): Check for and use clipping path
    name (ID=2999) to get the real attribute name.
  * ReadIPTCProfile(): Fix malformed IPTC data parsing.
  New Features:
  * TopoL: Now provides a writer.
  * WPG: Now provides a writer.
  * gm batch: Implement simple Test Anything Protocol (TAP) test
    counting and "ok N"/"not ok N" messaging.
  * TIFF: Support '-define tiff:photometric=minisblack' and '-define
    tiff:photometric=miniswhite' to be able to adjust the sense used
    when writing bilevel TIFF images.
  * TIFF: Require that TIFFTAG_EXTRASAMPLES be used appropriately to
    indicate the intention of extra channels.
  * utilities/tests/gen-tiff-images/genimages: Script for writing (and
    then reading) thousands (5568 permutations) of TIFF format variants.
  * EXIF and PNG: Retrieve image orientation from EXIF (if present) and
    store in image.
  * HEIF: Retrieve image orientation from EXIF and store in image.
  Behavior Changes:
  * The ability to extend existing image attribute text by calling
    SetImageAttribute() multiple times with the same key is now
    deprecated, and will soon be removed.  In the mean time, the
    annoying message "SetImageAttribute: Extending attribute value text
    is deprecated!"  is printed to the standard error output to help
    expose code which is using this feature.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1693224000">- fix regression in 1.3.41
  https://sourceforge.net/p/graphicsmagick/bugs/722/
- added patches
  fix 17179:91afa18a6161
  + GraphicsMagick-fix-regression-NULL-instead-of-empty-string.patch
  fix 17180:bb42cd90ce6f
  + GraphicsMagick-name-key-return-input-file-base-name.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1693569600">- revert to 1.3.40 [bsc#1214831]
  https://sourceforge.net/p/graphicsmagick/news/2023/08/because-1341-is-discarded-i-has-been-published-2-builds-for-win32-architecture/
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - GraphicsMagick-fix-regression-NULL-instead-of-empty-string.patch (not needed)
  - GraphicsMagick-name-key-return-input-file-base-name.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.3.42
  Bug fixes:
  * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2).
  * BMP: Many fixes for reading esoteric BMP sub-formats.
  * TranslateTextEx(): Revert change so now a NULL pointer is returned
    when given an empty string.  Some algorithms (e.g. montage) were
    depending on this!.
  * PAM: Fix reading comments.
  * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so
    it is again possible to request these subformats directly.
  * TIFF: For common formats with the required number of channels, but
    one is an 'unspecified' channel, promote unspecified alpha to
    unassociated alpha so that the alpha channel is not ignored.
  * "Magick" command line emulation: Eliminate duplicate utility name
    output in error messages
  New Features:
  * BMP: Added the ability to read and write BMP using JPEG compression.
  Use '-define bmp:allow-jpeg' to allow use of JPEG compression.
  * BMP: Added support for BI_ALPHABITFIELDS compression
  * BMP: Added support for reading BMP with PNG compression.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1698321600">- Have libGraphicsMagick3-config require ghostscript-fonts-std
  (boo#1216604).</changelog>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
</package>
<package pkgid="a284b329dfe803e3ce5ee3208c0039dbb80cfe125cc0754169b99c0d8df625a13d8d274b93f5d246844460a05e2ce4f4e92c453e94413515b0ec7ae4a1de3630" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.3.1"/>
  <changelog author="pgajdos@suse.com" date="1696248000">- version update to 1.3.42
  Bug fixes:
  * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2).
  * BMP: Many fixes for reading esoteric BMP sub-formats.
  * TranslateTextEx(): Revert change so now a NULL pointer is returned
    when given an empty string.  Some algorithms (e.g. montage) were
    depending on this!.
  * PAM: Fix reading comments.
  * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so
    it is again possible to request these subformats directly.
  * TIFF: For common formats with the required number of channels, but
    one is an 'unspecified' channel, promote unspecified alpha to
    unassociated alpha so that the alpha channel is not ignored.
  * "Magick" command line emulation: Eliminate duplicate utility name
    output in error messages
  New Features:
  * BMP: Added the ability to read and write BMP using JPEG compression.
  Use '-define bmp:allow-jpeg' to allow use of JPEG compression.
  * BMP: Added support for BI_ALPHABITFIELDS compression
  * BMP: Added support for reading BMP with PNG compression.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1698321600">- Have libGraphicsMagick3-config require ghostscript-fonts-std
  (boo#1216604).</changelog>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
</package>
<package pkgid="912571daab9b194a2ebccbc3c07db1146c93e2b5009c2ee267ede93fa927909b360a1f3a076cee8b00e116794d44309d44fb83a4dea313a7ec6cdc19f9345b8d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1698321600">- Have libGraphicsMagick3-config require ghostscript-fonts-std
  (boo#1216604).</changelog>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
</package>
<package pkgid="fe1cbf5d0645a1cbd92bc08f313584e511014e90c75ee002d67ed2300b57cb4ca7f4baa1c9fba6b83d7a1e7f3a5208193958fe128403c6c3b3ba06a5e6ad05cb" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1706529600">- ghostscript-fonts-std: relax to recommends [bsc#1216604]</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
</package>
<package pkgid="5658ceb07ebd438ba9ad93e23d58b6b90fbd4ced43c9cb8c916e45fa64bebeba94af20fba7a264d12a720a876d3594897d62d0661e7f8467a945f108f11bd2ff" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 1.3.43
  Bug fixes:
  * JBIG: Add support for 'width', 'height', and 'pixels', resource
    limits.  Your mileage may vary.
  * WPG: Many fixes based on oss-fuzz testing.
  * Ghostscript: When invoking Ghostscript, re-direct Ghostscript stdout
    to stderr to avoid output corruption when GM stdout is redirected to
    a file.
  New Features:
  * File write limit: Add support for a per-file write limit (-limit
    write or MAGICK_LIMIT_WRITE).  This imposes a limit on the number of
    uncompressed bytes written.  The behavior when the limit is hit is
    similar to an unexpected write error, as if the disk is full.
  * Resource limit highwater: Resource highwater values are maintained
    for successful resource requests and final values are traced
    via -debug resource' at the end of program execution.  These values
    may be used to understand the most restrictive resource limits which
    may be applied while still achieving successful operation.
  * BMP: Support BI_PNG compression (PNG inside BMP).
  * BMP: Support reading 64 bits-per-pixel.
  * BMP: Support reading 48 bits-per-pixel.
  * HEIF: Call heif_init() and heif_deinit() if they are
    available. Support setting image width limit.
  * HRZ: Added support for Slow scan TV format.
  * JPEG: Added support for reading and writing lossy or lossless 12
    bits, and lossless 16-bits using libjpeg-turbo-3.0
  * JXL: Improve JXL reader/writer exception information.
  * TIFF: Remove miniswhite/minisblack prohibitions when using Group3
    and Group4 compression in order to allow using inverted photometric
    from the standard.
  * TIFF: Store EXIF IFD and GPS IFD tag information natively in TIFF
    sub-IFDs, the same as it would be produced in a camera supporting
    TIFF.  This allows an EXIF profile from HEIF, JPEG, JXL, PNG, WebP,
    or from the META coder to be preserved in TIFF.
  API Updates:
  * ExpandFilenames(): Fix memory leak of existing allocations if
    realloc() fails.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779105600">- added patches
  CVE-2026-42050: Stack buffer overflow in XTileImage [bsc#1265048]
  * GraphicsMagick-CVE-2026-42050.patch</changelog>
</package>
<package pkgid="ee7930afc4590a2c394dc6e61a3f3e9fc9664e50da8e3a6855b174dfcd7cf13b19a2c8e294eeebe34f3cefce03e8ebcfc679afb4be7dbd072ab77b8bbea041f3" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1741608000">- version update to 1.3.45
  Security Fixes:
  * TIFF: Fixed multiple heap and stack buffer overflows (directed by
    the source EXIF profile) while writing EXIF into the native TIFF
    IFD.
  * FITS: Fix problem that the FITS reader could return invalid image
    frames with rows or columns set to zero. Other code in the library
    crashes, or even asserts, if invalid image frames with rows or
    columns set to zero are returned.
  * Coverity fixes: Various fixes for Coverity issues raised after the
    update to version 2023.12.2.
  * Clang Analyzer (scan-build) fixes: Various fixes for new issues
    discovered by Clang Analyzer.
  Bug fixes:
  * configure.ac: Fix a shell syntax error.
  * GCC 14: Eliminate some new warnings which appeared while in -Wall
    mode.
  * JPEG: FormatJPEGSamplingFactors() now properly handles the number of
    samples for each colorspace.
  * JXL: Additional validations of color channel and alpha channel
    depth.
  * TGA: Fix issues discovered by Coverity.
  * TGA: Fix writing TGA with opacity values in palette.
  * TGA: Default orientation is (again) TopLeftOrientation.
  * TIFF: Verify that TIFFTAG_BITSPERSAMPLE is within a rational range.
  * TXT: Eliminate use of an uninitialized-value in GetColorTuple().
  * XML: Improve detection of if the deprecated HTTP and FTP protocols
    are supported by libxml2.
  New Features:
  * Add support for reading the pre-rendered image from the Open Raster
    ("ORA") format. Actual rendering of Open Raster is not supported.
  * Add support for Dune HD AAI Image (aka Auburn Animation Image) image
    format ("AAI").
  * Add support for a --version option, which produces GNU style summary
    version output.
  * Identify output now indicates if the image is opaque.
  * WebP: Add support for '-define webp:exact=true' to preserve exact
    RGB values under transparent areas while writing WebP format.
    Enable this automatically when lossless is enabled.  If lossless is
    enabled, this option may be used to disable exact mode.
  * PerlMagick: Add AccessDefinition(), AddDefinition(),
    AddDefinitions(), and RemoveDefinitions() methods to supporting
    adding, updating, removing definitions.
  API Updates:
  * Magick++/STL.h: The deprecated std::unary_function is no longer used
    given C++'11 or later. Continued use of it caused too many issues
    due to an abundance of warnings.
  * Wand API PixelSetQuantumColor(): The color argument is now a const
    pointer.
  Behavior Changes:
  * The graphical progress indication in the X11 sub-apps 'animate' and
    'display' is disabled due to discovering a tremendous performance
    impact while rendering text under Ubuntu 22.04 LTS.  The underlying
    cause of the performance impact is not yet known.  A text-based
    progress output to the program's console is available via
    `-monitor`.
  * MagickMaxFileSystemBlockSize: Place an arbitrary limit (4,194,304
    bytes) on maximum filesystem block size.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779105600">- added patches
  CVE-2026-42050: Stack buffer overflow in XTileImage [bsc#1265048]
  * GraphicsMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781265600">- fixed off by one [bsc#1265048]
- modified patches
  * GraphicsMagick-CVE-2026-42050.patch (refreshed)</changelog>
</package>
<package pkgid="fab82d8cffa2464658582e0596bee75c16c0c108d90488762b4108a46ff3b6612200d9681a083e8dfb444b5d5490667e5a644c11eb975b24519f43aec0b9e600" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.45" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1743508800">- security update
- added patches
  fix CVE-2025-27795 [bsc#1239044], JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
  + GraphicsMagick-CVE-2025-27795.patch
  fix CVE-2025-27796 [bsc#1239043], WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.
  + GraphicsMagick-CVE-2025-27796.patch
  use return value of realloc function
  + GraphicsMagick-return-value.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744718400">- security update
- added patches
  fix CVE-2025-32460 [bsc#1241150], heap-based buffer over-read in ReadJXLImage
  + GraphicsMagick-CVE-2025-32460.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773057600">- security update
- added patches
  CVE-2026-25799 [bsc#1258786], Division-by-Zero in YUV sampling factor validation leads to crash
  * GraphicsMagick-CVE-2026-25799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773835200">- added patches
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * GraphicsMagick-CVE-2026-30883.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * GraphicsMagick-CVE-2026-28690.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776081600">- added patches
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. [bsc#1258765]
  * GraphicsMagick-CVE-2026-26284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction [bsc#1260874]
  * GraphicsMagick-CVE-2026-33535.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1779105600">- added patches
  CVE-2026-42050: Stack buffer overflow in XTileImage [bsc#1265048]
  * GraphicsMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781265600">- fixed off by one [bsc#1265048]
- modified patches
  * GraphicsMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1782302400">- added patches
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * GraphicsMagick-CVE-2026-46523.patch
- modified patches
  * GraphicsMagick-disable-insecure-coders.patch (disable MSL
    to align with ImageMagick)</changelog>
</package>
<package pkgid="68243379b00f2a217411510e71fc17bcefaacc886e5c89f376f594eb2243c56122b55353e6e26ea4e2e3e819f9394d095292b7265ee8a53c1964189f534de7c6" name="HepMC-devel" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608206400">- Update to version 3.2.3:
  * Documentation and copyright years were updated.
  * Python bindings were regenerated with binder 1.1.0 and the
    pybind11 copy updated to 2.6.0.
  * The #ifdefs around the functions that had to be excluded from
    bindings but binder 1.0.0 was not doing that were removed.
  * A python test with attributes was added.
  * ReaderLHEF was fixed for to treat correctly more comaplicated
    input.
  * Included updates to many python scripts.
  * Included updates to CMake scripts.
- Run tests; need to pass CMAKE_SKIP_RPATH=OFF to cmake to fix
  rpath handling in Leap 15.2 (and doesn't hurt generally).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1615723200">- Move doc to HepMC3 named dir to avoid clash with HepMC2.
- Provide HepMC3-* where appropriate.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1636804800">- Update to version 3.2.4:
  * Minor fixes to the CMake configuration of examples.
  * Minor fixes in Pythia6 interface.
  * Bugfix for HI output in WiterAsciiHepMC2.
  * Speed optimizations for ReaderAsciiHepMC2.
  * Deprecate Pythia8, MC-TESTER, Taoulapp and Photospp
    interfaces, as these were picked-up by the upstream.
  * Bugfix: avoid cretion of empty attributes in
    ReaderAsciiHepMC2. Thanks to Pavel Demin for a hint.
  * Removal of trailing empty lines by Mattias Ellert.
  * Multiple fixes to style and printf by Mattias Ellert.
  * Fix WriterAscii* to avoid problems with memory tests on
    aarch64. Thanks to Mattias Ellert for reporting.
  * Fix buffer overflow in WritterAscii/WriterAsciiHepMC2. Thanks
    for Fabian Klimpel for help with debug.
  * Enable reading of multiple run info objects from ASCII files.
  * Fixes to the tests.
  * Drop cmake2 support
  * Update cmake so the c++ standard is deduced from the ROOT
    configuration if ROOT is used. Otherwise c++11 is used.
  * Fix a bug in GenCrossSection: acces to non-existing vector
    element in to_string() function. Happened for incomplete
    objects.
  * Fixed formating.
  * Added compiler flags to reduce the amount of warnings.
  * Fixed a bug in Tauola test, which was not reading proper
    config.
  * Streamlined cmake for PGI.
  * Fixed some tests to make them return non 0 in case of
    problems.
  * Updated CI.
  * Reduce debug-printout verbosity in ReaderFactory format
    autodetection.
  * Added uproot-based reader to examples.
  * Fixed cmake configuration to allow multiple Python versions.
  * Fixes of compilation warnings by Mattias Ellert.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638878400">- Temporarily disable tests for i586 until tolerance issues are
  sorted out.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1645444800">- Update to version 3.2.5:
  * Added implementation for Relatives class that works in
    Windows.
  * (Implemented earlier) Improved MSYS2 support.
  * New interfaces for HEPEVT and update of python interface.
  * (Implemented earlier) More functions in GenEvent to deal with
    attributes.
  * (Implemented earlier) Implemented Complessed I/O with zip,
    lzma and bz2 via bxzst library.
  * Fixes to documentation of some examples.
  * Removal of unused codes and comments.
  * Fixes to Pythia8ToHepMC3.py.
  * Added Reader/Write interfaces with smart pointers.
  * Fixed #ifdefs for non-Linux system to allow the usage of
    Reader/Writer plugins.
  * Added MT reader.
  * Remove outdated interfaces to MCEGs.
- Add HepMC-disable-doxygen-html-timestamp.patch: Disable
  timestamps in doxygen generated HTML footers to make builds
  reproducible.
- Split libraries into separate shared lib packages.
- Build for all supported python flavours.
- Fix shalred lib versioning and obsolete libHepMC3-1 from
  libHepMC3-3 since previous lib was incorrectly named.
- Delete bundled pybind11 and use system package; add
  BuildRequires: python-pybind11-devel &gt;= 2.6.0.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1646222400">- Also Obsolete libHepMC3-1 from libHepMC3search.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667649600">- Disable pythia interface, pythia now includes HepMC interface by
  default; this avoids a build cycle (boo#1204987,
  https://gitlab.cern.ch/hepmc/HepMC3/-/commit/9827d5fb95ece04bafbc6e09cfd792afd51f74d3).
- Add _constraints file to ensure builds do not OOM on some
  workers.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1688990400">- Update to version 3.2.6:
  * Deprecated the set_cross_section function with double in
    favour of those with vector of doubles.
  * Better Doxygen documentation for code
  * Improvements in ReaderFactory that should help detect the file
    type more successfully.
  * Multiple optimizations inspired by clang-tidy
  * The Attributes are now set to be parsed after calls to
    from_string or set_value
  * API breaking changes in the search module: pass by const
    reference
  * Update python bindings
  * Modernisation of cmake
  * Fix output value of ReaderLHEF::read_event
  * Better documentation for standalone examples
  * Adds a protobuf-based HepMC3::Reader/Writer
  * Update pybind11 headers to fix python 3.11.
  * License update.
  * Make the R/W plugins transparent - the set/get functions call
    the handled object
- Adapt shared lib name to SO version bump (4-&gt;5) for
  libHepMC3search.
- License update: bundled bxzstr is MPL-2.0.
- Re-enable testing for i586.
- Make doc package noarch.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1694520000">- Update license
  HepMC3-3.2.6/LICENSE says
  Version 3 of the GNU Lesser General Public Licence
  or any later version.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697198400">- Update to version 3.2.7:
  * Patch release to fix the problem with vertex attributes
    removal.</changelog>
</package>
<package pkgid="eb96c0e6a20181a5282f68c2e80266301de3d061def6c20e3ebfdb74bdac8ad854ea3f81b11f77b50897481bd0c36a4d5dc79afea62f6c2a0299180ce58c6ce8" name="HepMC-doc" arch="noarch">
  <version epoch="0" ver="3.2.7" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608206400">- Update to version 3.2.3:
  * Documentation and copyright years were updated.
  * Python bindings were regenerated with binder 1.1.0 and the
    pybind11 copy updated to 2.6.0.
  * The #ifdefs around the functions that had to be excluded from
    bindings but binder 1.0.0 was not doing that were removed.
  * A python test with attributes was added.
  * ReaderLHEF was fixed for to treat correctly more comaplicated
    input.
  * Included updates to many python scripts.
  * Included updates to CMake scripts.
- Run tests; need to pass CMAKE_SKIP_RPATH=OFF to cmake to fix
  rpath handling in Leap 15.2 (and doesn't hurt generally).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1615723200">- Move doc to HepMC3 named dir to avoid clash with HepMC2.
- Provide HepMC3-* where appropriate.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1636804800">- Update to version 3.2.4:
  * Minor fixes to the CMake configuration of examples.
  * Minor fixes in Pythia6 interface.
  * Bugfix for HI output in WiterAsciiHepMC2.
  * Speed optimizations for ReaderAsciiHepMC2.
  * Deprecate Pythia8, MC-TESTER, Taoulapp and Photospp
    interfaces, as these were picked-up by the upstream.
  * Bugfix: avoid cretion of empty attributes in
    ReaderAsciiHepMC2. Thanks to Pavel Demin for a hint.
  * Removal of trailing empty lines by Mattias Ellert.
  * Multiple fixes to style and printf by Mattias Ellert.
  * Fix WriterAscii* to avoid problems with memory tests on
    aarch64. Thanks to Mattias Ellert for reporting.
  * Fix buffer overflow in WritterAscii/WriterAsciiHepMC2. Thanks
    for Fabian Klimpel for help with debug.
  * Enable reading of multiple run info objects from ASCII files.
  * Fixes to the tests.
  * Drop cmake2 support
  * Update cmake so the c++ standard is deduced from the ROOT
    configuration if ROOT is used. Otherwise c++11 is used.
  * Fix a bug in GenCrossSection: acces to non-existing vector
    element in to_string() function. Happened for incomplete
    objects.
  * Fixed formating.
  * Added compiler flags to reduce the amount of warnings.
  * Fixed a bug in Tauola test, which was not reading proper
    config.
  * Streamlined cmake for PGI.
  * Fixed some tests to make them return non 0 in case of
    problems.
  * Updated CI.
  * Reduce debug-printout verbosity in ReaderFactory format
    autodetection.
  * Added uproot-based reader to examples.
  * Fixed cmake configuration to allow multiple Python versions.
  * Fixes of compilation warnings by Mattias Ellert.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638878400">- Temporarily disable tests for i586 until tolerance issues are
  sorted out.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1645444800">- Update to version 3.2.5:
  * Added implementation for Relatives class that works in
    Windows.
  * (Implemented earlier) Improved MSYS2 support.
  * New interfaces for HEPEVT and update of python interface.
  * (Implemented earlier) More functions in GenEvent to deal with
    attributes.
  * (Implemented earlier) Implemented Complessed I/O with zip,
    lzma and bz2 via bxzst library.
  * Fixes to documentation of some examples.
  * Removal of unused codes and comments.
  * Fixes to Pythia8ToHepMC3.py.
  * Added Reader/Write interfaces with smart pointers.
  * Fixed #ifdefs for non-Linux system to allow the usage of
    Reader/Writer plugins.
  * Added MT reader.
  * Remove outdated interfaces to MCEGs.
- Add HepMC-disable-doxygen-html-timestamp.patch: Disable
  timestamps in doxygen generated HTML footers to make builds
  reproducible.
- Split libraries into separate shared lib packages.
- Build for all supported python flavours.
- Fix shalred lib versioning and obsolete libHepMC3-1 from
  libHepMC3-3 since previous lib was incorrectly named.
- Delete bundled pybind11 and use system package; add
  BuildRequires: python-pybind11-devel &gt;= 2.6.0.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1646222400">- Also Obsolete libHepMC3-1 from libHepMC3search.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667649600">- Disable pythia interface, pythia now includes HepMC interface by
  default; this avoids a build cycle (boo#1204987,
  https://gitlab.cern.ch/hepmc/HepMC3/-/commit/9827d5fb95ece04bafbc6e09cfd792afd51f74d3).
- Add _constraints file to ensure builds do not OOM on some
  workers.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1688990400">- Update to version 3.2.6:
  * Deprecated the set_cross_section function with double in
    favour of those with vector of doubles.
  * Better Doxygen documentation for code
  * Improvements in ReaderFactory that should help detect the file
    type more successfully.
  * Multiple optimizations inspired by clang-tidy
  * The Attributes are now set to be parsed after calls to
    from_string or set_value
  * API breaking changes in the search module: pass by const
    reference
  * Update python bindings
  * Modernisation of cmake
  * Fix output value of ReaderLHEF::read_event
  * Better documentation for standalone examples
  * Adds a protobuf-based HepMC3::Reader/Writer
  * Update pybind11 headers to fix python 3.11.
  * License update.
  * Make the R/W plugins transparent - the set/get functions call
    the handled object
- Adapt shared lib name to SO version bump (4-&gt;5) for
  libHepMC3search.
- License update: bundled bxzstr is MPL-2.0.
- Re-enable testing for i586.
- Make doc package noarch.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1694520000">- Update license
  HepMC3-3.2.6/LICENSE says
  Version 3 of the GNU Lesser General Public Licence
  or any later version.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697198400">- Update to version 3.2.7:
  * Patch release to fix the problem with vertex attributes
    removal.</changelog>
</package>
<package pkgid="86904826d85000ff847f904937943378a7b113883625c9b686aab62a04b5607cf4250e98d4de2382be47b349c2300cf0618658d7a9d3dde65ef9716feb5e6362" name="Herwig-devel" arch="x86_64">
  <version epoch="0" ver="7.3.0" rel="bp160.1.14"/>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 7.1.2:
  * Reduction of the default pt cut for QED radiation off leptons.
  * Inputfile changes due to new read mode in ThePEG.  ThePEG
    remains in current repo dir when reading input-file/snippet.
  * Fix for shower scale variations in qtilde shower.
  * All standard input files now use the tuned intrinsic pt.
  * Remove obsolete input files for various tunes.
  * Fix for Madgraph interface for NLO corrections with recent
    version.
  * Run file size reduction for processes using madgraph/openloops.
  * Fix in jacobian for massive dipole kinematics.
  * General improvements for UFO model handling.
- Fix env based hashbangs (/usr/bin/env python -&gt; /usr/bin/python,
  etc.).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139200">- Build Herwig only on x86_64 since other archs are not supported</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 7.1.3:
  * Dipole Shower
  - Changed default phase space limits
  - g -&gt; gg splitting function asymmetrized
  - Initial retune supplied, given the visible changes
    to LEP observables
  * Added new Baryonic colour reconnection model (arXiv
    1710:10906)
  * Added Schuler-Sjostrand Photon PDFs
  * Handling of massless taus from external sources
  * various minor fixes
  * use std::array&lt;&gt; where possible</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556798400">- Update to version 7.1.5:
  * Add option of producing partons on physically mass shell after
    the parton shower to allow the string model to be used to
    hadronize events
  * Fixes for template issues and compiler warnings for gcc8,9,
    icc and clang
  * Fixes to the calculation of W, Z and h widths if decay modes
    removed
  * Fix typo in FI g to gg dipole.
  * Fix to allow 1 parameter to specify the mass of more than one
    particle in the UFO converter
  * Fix to partial width calculation of VSS decays
  * Fix the PDF assignment for DIS processes with Matchbox
  * Fix for undecayed W bosons in internal POWHEG gauge boson pair
    code
  * Update boost detection in configure script
- Changes from version 7.1.4:
  * More matrix elements and better handling of BSM physics
  * Fix for spin correlations in angular-ordered shower, effects
    top decays
  * Allow fixed target collisions
  * various minor fixes</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1563364800">- Disable LTO to prevent resulting build failure.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578139200">- Update to vesion 7.2.0:
  * Improvements to the simulation of multiple-parton
    interactions, including diffractive processes.
  * A new model for baryonic colour reconnection.
  * Spin correlations in both the dipole and angular-ordered
    parton showers.
  * Improvements to strangeness production.
  * An improved choice of evolution variable in the
    angular-ordered parton shower.
  * Support for generic Lorentz structures in BSM models.
- Changes from Herwig 7.1.6 release:
  * Fix if no W in top in external events.
  * Vertex position fix for dip[ole shower events.
  * Update boost m4.
  * Add max,min, re, im to functions for ufo conversion.
  * Comparision operators should be const, issues with C++17.
- Update required verion of ThePEG-devel: version 2.2.0 now
  required.
- Fix an env-based hashbang.
- Use fdupes also on %{_datadir} to link a pair of duplicated
  files.
- Remove a spurious backup file that gets installed otherwise.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578657600">- Switch to python3.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Update to version 7.2.1:
  * Vertex position fix for taus in dipole shower events.
- Add Herwig-type-mismatch-fix.patch to fix data of incorrect type
  sent to functions, flagged by GCC 10.
- Use autosetup instead of individual patch commands.
- Use %make_build which automatically uses parallel threads and
  makes the compilation more verbose.
- Remove a spurious .orig file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616155200">- Update to version 7.2.2:
  * support for python 3 and gcc 10.
  * ufo2herwig script is updated to be compatible with python 2
    and 3, using --convert option.
- Rebase Herwig-disable-repo-install.patch for update.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 7.3.0:
  * electroweak radiations added to the default parton shower
  * HQET spin hadronization and decay have been implemented to
    improve the predictions of excited heavy mesons and heavy
    baryons
  * dot-preserving treatment of the default parton shower
    evolution scale has been implemented
  * infrastructure for dynamic hadronization model and dark
    hadronization added
  * kinematic treatment of cluster splitting in cluster
    fissioner improved
  * new global tune implemented
  * several bugs fixed
- Update to version 7.2.3:
  * improved ufo2herwig tool
  * improved remnant handling for photon collisions
  * improved high-energy behaviour of default parton shower</changelog>
</package>
<package pkgid="04fb5ccd549c12dec4e49b044e06ad7281efe7f7c0c57527d466d9bfdf9c835d47f4dc8597669ae8896f7f6cb1d2c6d96c27cf473d676ab11564265427c793a5" name="Herwig-libs" arch="x86_64">
  <version epoch="0" ver="7.3.0" rel="bp160.1.14"/>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 7.1.2:
  * Reduction of the default pt cut for QED radiation off leptons.
  * Inputfile changes due to new read mode in ThePEG.  ThePEG
    remains in current repo dir when reading input-file/snippet.
  * Fix for shower scale variations in qtilde shower.
  * All standard input files now use the tuned intrinsic pt.
  * Remove obsolete input files for various tunes.
  * Fix for Madgraph interface for NLO corrections with recent
    version.
  * Run file size reduction for processes using madgraph/openloops.
  * Fix in jacobian for massive dipole kinematics.
  * General improvements for UFO model handling.
- Fix env based hashbangs (/usr/bin/env python -&gt; /usr/bin/python,
  etc.).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139200">- Build Herwig only on x86_64 since other archs are not supported</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 7.1.3:
  * Dipole Shower
  - Changed default phase space limits
  - g -&gt; gg splitting function asymmetrized
  - Initial retune supplied, given the visible changes
    to LEP observables
  * Added new Baryonic colour reconnection model (arXiv
    1710:10906)
  * Added Schuler-Sjostrand Photon PDFs
  * Handling of massless taus from external sources
  * various minor fixes
  * use std::array&lt;&gt; where possible</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556798400">- Update to version 7.1.5:
  * Add option of producing partons on physically mass shell after
    the parton shower to allow the string model to be used to
    hadronize events
  * Fixes for template issues and compiler warnings for gcc8,9,
    icc and clang
  * Fixes to the calculation of W, Z and h widths if decay modes
    removed
  * Fix typo in FI g to gg dipole.
  * Fix to allow 1 parameter to specify the mass of more than one
    particle in the UFO converter
  * Fix to partial width calculation of VSS decays
  * Fix the PDF assignment for DIS processes with Matchbox
  * Fix for undecayed W bosons in internal POWHEG gauge boson pair
    code
  * Update boost detection in configure script
- Changes from version 7.1.4:
  * More matrix elements and better handling of BSM physics
  * Fix for spin correlations in angular-ordered shower, effects
    top decays
  * Allow fixed target collisions
  * various minor fixes</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1563364800">- Disable LTO to prevent resulting build failure.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578139200">- Update to vesion 7.2.0:
  * Improvements to the simulation of multiple-parton
    interactions, including diffractive processes.
  * A new model for baryonic colour reconnection.
  * Spin correlations in both the dipole and angular-ordered
    parton showers.
  * Improvements to strangeness production.
  * An improved choice of evolution variable in the
    angular-ordered parton shower.
  * Support for generic Lorentz structures in BSM models.
- Changes from Herwig 7.1.6 release:
  * Fix if no W in top in external events.
  * Vertex position fix for dip[ole shower events.
  * Update boost m4.
  * Add max,min, re, im to functions for ufo conversion.
  * Comparision operators should be const, issues with C++17.
- Update required verion of ThePEG-devel: version 2.2.0 now
  required.
- Fix an env-based hashbang.
- Use fdupes also on %{_datadir} to link a pair of duplicated
  files.
- Remove a spurious backup file that gets installed otherwise.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578657600">- Switch to python3.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Update to version 7.2.1:
  * Vertex position fix for taus in dipole shower events.
- Add Herwig-type-mismatch-fix.patch to fix data of incorrect type
  sent to functions, flagged by GCC 10.
- Use autosetup instead of individual patch commands.
- Use %make_build which automatically uses parallel threads and
  makes the compilation more verbose.
- Remove a spurious .orig file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616155200">- Update to version 7.2.2:
  * support for python 3 and gcc 10.
  * ufo2herwig script is updated to be compatible with python 2
    and 3, using --convert option.
- Rebase Herwig-disable-repo-install.patch for update.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 7.3.0:
  * electroweak radiations added to the default parton shower
  * HQET spin hadronization and decay have been implemented to
    improve the predictions of excited heavy mesons and heavy
    baryons
  * dot-preserving treatment of the default parton shower
    evolution scale has been implemented
  * infrastructure for dynamic hadronization model and dark
    hadronization added
  * kinematic treatment of cluster splitting in cluster
    fissioner improved
  * new global tune implemented
  * several bugs fixed
- Update to version 7.2.3:
  * improved ufo2herwig tool
  * improved remnant handling for photon collisions
  * improved high-energy behaviour of default parton shower</changelog>
</package>
<package pkgid="08ba34bf033af5b8d8dcec48aa529cf34c2cde280b034252784f42297c29c5cee27da5d01c5965e4ba9dbf43b3ce149c9ae6a6b99c327661f4378a52d62cf676" name="IPAddress" arch="noarch">
  <version epoch="0" ver="5.5.1" rel="bp160.1.42"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646654400">- Initial packaging of IPAddress 5.3.3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694606400">- Reproducible builds: produce reproducible manifest with bnd</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1730980800">- Upgrade to version 5.5.1
  * Fixes of 5.3.4:
    + a fix to avoid ClassCastException when converting IPv4-mapped
    address to java.net.Inet6Address (#73)
    + fixed the creation of HostName from an unresolved
    compressed-IPv6 socket address (#74)
    + added IPAddressString.isIPv4Mapped for issue #75
    + fixed a class-loading issue with string parsing (#79)
    + removed AddressDivision.getDivisionValueCount() and
    AddressDivision.getDivisionPrefixCount(int) because of
    potential overflow with divisions 63 or 64 bits long. If you
    have a segment, use getValueCount(), or with IPAddressSegment
    use getPrefixValueCount(int), which both return int.
    Otherwise, use getPrefixCount(int) or getCount() which return
    BigInteger
    + fixed issues with comparing non-standard division groupings
    with address comparators
    + added verification when host-masking multiple-valued segments
    + added verification when splitting IPv6AddressSegment
    + fixed check when reversing per-byte multiple-valued division
    + fixed trie-printing method option withNonAddedKeys
    + fixed an issue with serialization of parsed hosts with
    qualifiers
    + added control over parsing empty zones (a zone specifier
    followed by no zone)
    + added a small fix to host name parsing some unusual host names
    + a fix to IPv4AddressSection.toMaxHost
    + fixed a rare synchronization issue when generating division
    strings in AddressDivisionBase
  * Fixes of 5.4.0:
    + added PrefixBlockAllocator for automatic CIDR prefix block
    allocation
    + added AddedTree and AssociativeAddedTree classes for expanded
    constructAddedNodesTree methods
    + added getBlockSize and getBitsForCount in AddressItem
    + added matchUnordered and matchOrdered in Address
    + eliminated invalid AddressValueException when joining a range
    with the IPv4 max value to an IPv6 range (#86)
    + fix to generation of strings from parsed address data (#87)
    + fix to IPv4 address primitive int upper value generation (#96)
  * Fix of 5.4.1:
    + fix to invalid radix argument infinite loop
    (#118, CVE-2023-50570)
  * Fixes of 5.4.2:
    + removed unnecessary SDK dependency incompatible with Java 8
    that was introduced with version 5.4.1 (#121)
  * Fixes of 5.5.0:
    + added collection types for dual IPv4/v6 tries and for dual
    IPv4/v6 associative tries, issue #103
    + trie performance improvements for all trie operations
    + added shortestPrefixMatch trie methods
    + added enumerate methods, the inverse of the increment methods,
    to find the position of an address in a subnet, or to find
    the distance between two addresses
    + added an increment method accepting a BigInteger argument to
    IPv6Address and IPv6AddressSection
    + added the ability to construct an IPv6Address from two longs
    + added replace methods with address section parameter to
    address classes
    + added overlaps methods to check for overlapping subnets, and
    for checking sequential range overlap with a subnet
    + added floor/lower/ceiling/higher methods to the address trie
    types, these methods previously accessible only from trie sets
    + added the extraneous digits IPv4 parsing option
    allow_inet_aton_extraneous_digits (#105)
  * Fixes of 5.5.1:
    + added new merge functions mergeToDualPrefixBlocks and
    mergeToDualSequentialBlocks for combined IPv4/IPv6 merging
    + added public constructors accepting message strings to
    AddressValueException and IncompatibleAddressException (#127)
    + removed caching functionality from containingFirstIterator,
    use all-node containingFirstAllNodeIterator instead</changelog>
</package>
<package pkgid="1e3a99f4213e61a81ff34aa662aa2134413fd8856f2daca4c0794a2201d82178bee530a152fa5d80b7c57150a6f2eeee120fdb7249241192f3241b4ffe115cd4" name="IPAddress-javadoc" arch="noarch">
  <version epoch="0" ver="5.5.1" rel="bp160.1.42"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646654400">- Initial packaging of IPAddress 5.3.3</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694606400">- Reproducible builds: produce reproducible manifest with bnd</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1730980800">- Upgrade to version 5.5.1
  * Fixes of 5.3.4:
    + a fix to avoid ClassCastException when converting IPv4-mapped
    address to java.net.Inet6Address (#73)
    + fixed the creation of HostName from an unresolved
    compressed-IPv6 socket address (#74)
    + added IPAddressString.isIPv4Mapped for issue #75
    + fixed a class-loading issue with string parsing (#79)
    + removed AddressDivision.getDivisionValueCount() and
    AddressDivision.getDivisionPrefixCount(int) because of
    potential overflow with divisions 63 or 64 bits long. If you
    have a segment, use getValueCount(), or with IPAddressSegment
    use getPrefixValueCount(int), which both return int.
    Otherwise, use getPrefixCount(int) or getCount() which return
    BigInteger
    + fixed issues with comparing non-standard division groupings
    with address comparators
    + added verification when host-masking multiple-valued segments
    + added verification when splitting IPv6AddressSegment
    + fixed check when reversing per-byte multiple-valued division
    + fixed trie-printing method option withNonAddedKeys
    + fixed an issue with serialization of parsed hosts with
    qualifiers
    + added control over parsing empty zones (a zone specifier
    followed by no zone)
    + added a small fix to host name parsing some unusual host names
    + a fix to IPv4AddressSection.toMaxHost
    + fixed a rare synchronization issue when generating division
    strings in AddressDivisionBase
  * Fixes of 5.4.0:
    + added PrefixBlockAllocator for automatic CIDR prefix block
    allocation
    + added AddedTree and AssociativeAddedTree classes for expanded
    constructAddedNodesTree methods
    + added getBlockSize and getBitsForCount in AddressItem
    + added matchUnordered and matchOrdered in Address
    + eliminated invalid AddressValueException when joining a range
    with the IPv4 max value to an IPv6 range (#86)
    + fix to generation of strings from parsed address data (#87)
    + fix to IPv4 address primitive int upper value generation (#96)
  * Fix of 5.4.1:
    + fix to invalid radix argument infinite loop
    (#118, CVE-2023-50570)
  * Fixes of 5.4.2:
    + removed unnecessary SDK dependency incompatible with Java 8
    that was introduced with version 5.4.1 (#121)
  * Fixes of 5.5.0:
    + added collection types for dual IPv4/v6 tries and for dual
    IPv4/v6 associative tries, issue #103
    + trie performance improvements for all trie operations
    + added shortestPrefixMatch trie methods
    + added enumerate methods, the inverse of the increment methods,
    to find the position of an address in a subnet, or to find
    the distance between two addresses
    + added an increment method accepting a BigInteger argument to
    IPv6Address and IPv6AddressSection
    + added the ability to construct an IPv6Address from two longs
    + added replace methods with address section parameter to
    address classes
    + added overlaps methods to check for overlapping subnets, and
    for checking sequential range overlap with a subnet
    + added floor/lower/ceiling/higher methods to the address trie
    types, these methods previously accessible only from trie sets
    + added the extraneous digits IPv4 parsing option
    allow_inet_aton_extraneous_digits (#105)
  * Fixes of 5.5.1:
    + added new merge functions mergeToDualPrefixBlocks and
    mergeToDualSequentialBlocks for combined IPv4/IPv6 merging
    + added public constructors accepting message strings to
    AddressValueException and IncompatibleAddressException (#127)
    + removed caching functionality from containingFirstIterator,
    use all-node containingFirstAllNodeIterator instead</changelog>
</package>
<package pkgid="7a2a23f052fe229e075c5eec5cb3989a1b8d0b165296e7064d63c9f1c789a9c0cab8a1be874d6135fe2e3f8a3f3019c42d18087f43f87d02f73ca83cc578abc0" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="8ce869423258fb6778cf1e104503926342e4f9ef7c770b26caefaa98014771682a937ad3602ca188e64eaffe01a731af111f769f3093d2eb930668ff70b9c690" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="c08d267b7af838773eb41fa631a69d05c28fb2209fc83251500f39ec1b69149873e023c100d6498c783d8f99d4e89afd0559c1a7a4042a1bf55c4786a1a10875" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="b6e5848620aaead769bada9491074eda6de827ec8f9ffa474f82f361ce1361f9fa1d923b04d2fe22cb16d059d8c245f226746d2609e3937e8266469c63f700ea" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="5e95c76436042f5769582366e67a237e92fa01485b372d888e94dd3f3dadd553a79d35dab78a4ee64b0495a90d2ed527dccb632cbcd763e9f34bf1737d7d9056" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="c12fb99a204f92ce16f16611c1ca2be9ea55512fcf19d05bb191f663dcf2fc77393fa4e84edb9a750e3cc660dbca915fa53a489a93053fe227e0c658d6e42325" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="761e6b5a46859af55ffd8bd8c0df245a079bb0df25437f0c7dab52d7a77b404c7d71a8843f68cac3dbec17c525c36cc890e9138604f9b2aa3dd647d60061c65c" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="3bfb0e8448621a6756c17705ad28d0e96447fb05cad87d00a9607d76169779dd473de748a8dc40ae24d6ee37d1ad649ed3470c7800fde0aae3cc9c1e9d96025c" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="bedf0f154e6f8b76c8e07604824852c641b018e3568fa3de13bfedeabd03574bd1815f07db62bafc80632ea323ed3d57ccafa1cab8f328f36d82d2e52b6a85d6" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="1a26b8212664d7faf59c08600812cb6f90278432caa9952456afe26a4d706e6f9cb5f76310b4c57cd404680c652ef4adcc1682bf8d4dbc8557caa578ff8f7cc3" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="1987c6afe98b5057e7fd2f22f4c300393a9979acf622c824006f3d4edf79d9224c36b98fec1aee5328f209002d147ca1d38335bdfe244b20049cb83e2e309ac6" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="4ca080292e142d10e0652d8c965422b4678c96b540bdad3c84b861f7595429ac133e931e4af57305cf46b47038cbb304cf47d77574a156c08eb671cb05f8a103" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="bba61ff8827b5b2b5d90d4745dd84c1f8d2d1a9fc570d218ddee5ff9580aef870e075d93a7378b96af9241559ee69e9faa65087166f3329e61669679d32a3057" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="f5034806e0dc6f8b04ff1bef54f65b9be82f5346c600fc6934d34c2c4a863d6eca03ded7a86569f3f679baf9b12247cb036a3efc7012709b43e4048b9324b987" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="9c67cc9d4814e77a4d275a67b26febf3d40125024ce59a779fcc491af8eb683dcf9b14bce769588e691ee67525abdacbbc4656181f9b9ee769bc899809633e8c" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="068b084240fa0c3c212877f33c69190abfab984d14dbba0e8758be7f568ffe0e0bd5cf429e61f5110512c5f17437a3a335a0c3fad0ed68ddd78788c0db6e1151" name="ImageMagick-config-7-SUSE" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="9eb5a2bac597dad70ed7dfb5168b5ccf487d924127303e6cd6f9bc3b1aeeefdc34a83ea93cb77a13a6adad120b14d8c4f79ab0cec1fd6a9fd8593b06a23817d5" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="e588e6c77e93d9e7be662ab136d6cfb8d7e924ff8f14b45934949acef9f6c0e6ccb5ced6a2d44e606e1b9c4ae524c9ebcac630e01f23938761d06b19ab7c5d05" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="e6deb1e276e5a8e8dc4dbdfd9acd5947888fceb87b061700f158936ca0b29339db8fe2fa7047d2b214386084033722a8f3288c1cb8217ef85d26f8b964e4bd31" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="f518eee64f8ddf76a3d4adf83918c622437020f07dbb45d5946dc6b12344caa36f06552efb289a01cc444400d90747ecb0058ce7df03750d497276b26b8f4888" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="eb9ac3db7686db72e97b25c1c07c4c83fbd32b018a5b8494e7d82c32477d49446ead603972903c515e6aa238c4a9b881b875f7fc424b2cdcf4b6008ed82169df" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="b8be730fcf7fe180b6dd6464dc1c22da2ce9847b2599257e27e7f383d2dd991bee7cac258a0abb435191159c84abd0b449aa21df5042fd0133b6643e3480f050" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="62cfad4aa8f51564a2f24fffc266eb30667e27351f35c758eda98af55e2e936c661e4186bc109532f8da415f0ff80e889415f0707328407ea0235e46d38d87e6" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="3242905945757cbc167def11a9a4d76ea1148b9d370a55616d9e6aae97612bfbc16df4bb0d33bddd76a0c0ba08674f86e3d37e657683d946a9e822d61f26122f" name="ImageMagick-config-7-upstream-limited" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="988039b94d379529ee7d191480c860a47e90888934b31081d837b30c08120e187cbfcac5d2a3fd5b3f1c85c9c52c968215eb5053d7616c4811b7da9f0fe2b95d" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="e86e8d5c1e0e14f78e5896e3ffa9ff89604403408ed8cd55671b79bfba950d3650bf4f5ce3ee8a386f5b2eafbcca753c1ec0b6775b7dbfd2417eaac171f22341" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="c816ad1b32eac959b7e77e6633c2901da89326e3ce8245bfa11cf6f942089740726b713b8a84621c4771e55d869ca162d4b5a78b77bd5337fb0abf9613387552" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="c92d7c4f5bee4d7b8fab2c08ce020d1bbde3113693076ad630153550e9b21f56b5b15d86902a0f9f2c78e554315d8a21635af849c84e880bc00473e2866d6879" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="56ebf25749476f2e8ce52b17b54f4431c6f7d421c94cbd2fd7167013c0440f92d30aecae8a885dbbbd14d6b75f79aa1bd8e24750c9789c47d0a13996c8eb7198" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="e7f3f2d6695662d88fcece4e35c9f1a1baa1575418318f8a859c676a4c87cef6e0de90df75eaab41498b553692516b65e9b3768e0f5dc62ab8338fb08feaddd5" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="aef4373d35d531a9961b4a182ad2c292b155364c31eac7343d276c8a5670abae84b80480b13310275757dc8f29b8a08d434d5be4ad726ca1b1ad795cbcbe6b53" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="a6dd74e45d06ad98926603a7b386505de8bd1e3b35b3a74cf94d6be7346c4556e587fe4aff98bbbdd82c416e2692753474dce2c01c4c605216b8d765f07c5698" name="ImageMagick-config-7-upstream-open" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="318b62889133a32984405a1e8bffabf069857e73cb8a8a6d11561e05579dad52de7069db88cbef5a3408b9b77846add8ee6b8959ea25656dfbd132e4b0a4feb2" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="1965371a932e146cdb88c2f65490215ba94dea47a20603db90ee65491c99b5be0c660b4aba87c65945df9dec403fcb5d4370ff1ca2e4fad842824bd0be1a7850" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="46716b37c603fbc581d7af62a8edf21a529a88c1d69cffa9c6505828f9065eb4234124d9c6bb4281ba159dcd388a9c7b444d12134638011a6383ad2707956db1" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="56d952fda62d9611a0f02c2295b2df451c66ff2b69e3b93fb848fa1e294975c617b08fded69ec04c8a5182a35c32fa175bbe15a8ef01848382550878bf7cbcc8" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="95f24fd344476fb9ae6232912f933a94d14737530ff3fe7b28c34becf08091f95cb0fbc72e12ee87404400bdfdfaf79d94f859e1265cff931986ade73b36de9d" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="f66393af300a35ddf998e7c7c71edd092c745694de4a5bc11ec8faf36197d02fb1cbf14b08419f53e023e1aebe38fe4e97ae1bdf0677d9f9263ea2854a043282" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="02f4d329c2ed0d405649a4e2f7d9857d5b700475d82beba4b6f9dfda554bf1022a59cee228f29bab088034c026a7fb47e850912fdea19ace982c5a6c2359e34e" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="ae89938cc8a45ff3b41f069126258ba6767306ccf0bd403b0c58f3313a56f0308b3dc0c6aad32f7bf1362bebc44b5030ed3ff142146d761993064cae74752c6a" name="ImageMagick-config-7-upstream-secure" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="1c9671d963d13b080679d78ddceaf7d51165f50a39bfd7156a3352aad883e5fe07c96598a48adac07bfcec23cd771fc278bf653a5427ccb77a0a99f67b0fe7eb" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="c41fe8310dbf1f1472fc72eae69461cd52448caaf384dc932b77af4dd4a155fbf871acce746f49869e5900b9d555fa76ec33d3421fc0ae5adae7540cab825ceb" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="2194274397b929ae104ddedb49f7a2d90fe59beab2f6eaa1a7077a13873b5957bcbf83d4235f40c3a1f32e043caff93d4d47dd264b68fda714ce095342a9b2fa" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="eefba4d6b49d58aceb99286451ae5b0642e0b702592f254cf82a61543d28e792b84f1be1c7e9c7187d3b3583df7351131695491b70d0a6df147c9083408ea36d" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="0af117c2a8d5c40da3b7ffa9a4216e3fa0d97ab2d50dc83649a9a5791d8878596ae146104658bb4869fc470b8407c9aae4f991cc1e1132405c6d3d18e491fb70" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="1e3879ec4705f3958136b7d4281be4ffc731cdf7fcd99d7022a0e054dea100c6e0314580ad7fa4bbc5df2be985e23a4cf1723036165e2da8cf95c89891aa335b" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="cd7472b65087735b8d7470d97cb4ca0d6950df4967eba33e85cfc6923d468d3f37b2ed4548aae50630f8a90101ba365d312591e781e5de2acf6afcb6d548c147" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="a5706c250c5d8e438e353b71cbeb54a50998737e8af0181e0388c4d0ed93885b632e87f522662147397f6449067a8ffbefdfe767e79a3a6f22e585970af55847" name="ImageMagick-config-7-upstream-websafe" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="7226d07da2d89a1a72c5f3deb0faa09d6120ec593af8367daaa28b1ed8b7521cb341c131d153bb804302c0e5d3b9d7e9810e6497c7e7b926b15dd2c554b32b74" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="954c717ad85d7b67e449cff1ef6e7bb58bc4b33af203b6223b5504bc72bef26f536ab980e797e8ccb653cb0733851ace719218c9a86f3336c5e074dba8339621" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="1170ac11efcad017be95735f974be3c4a713d8cc813e1f9e9a56997055a3156cddf5c58550149129cfded23364f825de42fb13e096bc4132e0ae043911df6913" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="2d6bd2719733f4c58e7264ddeb50dbebe973ca80dcaec4077ff93a460977cf014462609f13d1af7c777eeb1e2a65669b73dd5e92aa493e2d57ed65ad0ac36957" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="c6ea537cc3cd0b8f86dd437e767b24bdd5a87feb28b013f9fc63d160dcf09d15f3bbbb6fdf10966fa4e8939cabce2eb0295f9dc2d8cc2b91e3bf8c0bb6e936c9" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="9599fc12f4631a18b97ebfe30fabaf9b5ec4c3b76b3dac024e8f91bec6f39ae5f81b229056d5f4950ff7bee838d985d1d8da9d0fed7a3bdf0691c6203941d732" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="3a10e412a4358b938d856fcecc9a4fd65262b5be6b22446dfbf9b437828c75981ba520b4cbe727600c88068b946646891d82e2c7b08255f9e6939480948e4eb0" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="589a15058dca328adc9bbb7428442d87e371100b97e59877165721abe2fc3fa712456ec840d740725fcfffdbe88e6d547f35f67b9653c37fb532d67095736d6c" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="2fdc3437f82644ccaf32afe5c58d709b7c8898c10a8b62244871d7924e1ac32e7602fbd61deefced4f85af8ca3c1ba1acbc2e52863ad11d4eb6ba88be47f57bd" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="cf9fd5b1c48cd2906a5e2df21c32fa88ffec3cf3ff5a4b350378e903aecb2857ccb93339402ad7186437fc2f56018e66590e2644be1f6053a9f1d6e48e573c78" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="fd036892e4cdb98161c89f03cf6703c492d8af1b5775bef9d525f22d082c984ed1c3fbc11751e83d317e772a95b14317876a8271a780a2df5d95c2f031055836" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="efebdaf6aa0b30773bf954a0108d87c2b75c1f3c843986636fca5ab7cf79a366e4f18272296f1e09fc5c9c9dc9191baea58b7acac6a6169e118c42de297c32ea" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="731efb1f427dc5772c6c9f16cff4d57e86b40c6cc76b6dadbb84fb6781ecc6e1d64b5e18f187a2daeafbe58677825fbee6def4672242faeb3ebdc9b818fd4af9" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="9a9601fa1fa84232743e30f232e71bbeb5b731dc843f2c013a86231d2677310457792be0e8d2b6c85ca5469a84f00bfa0d90caf3c79597b61d2b311481ef748c" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="43da48a0f0da772aa134ed170063e797ea00222cf45714e001f0f07a4a4bf29d4453e616ffac2469ddc67259687d3f55b1086c2071b75e29bd52c69679b584c6" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="bac4f54d1a56dba1e9cb6f5812ed96294575269e7ebdfe5b7728d966555fbd088d24a9c883cd91f125ccace1b4e231d05cf60adf845dc1a6ca04d46cf1eaf333" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="f2ad28b801f52b8b44fa61d617d5c4d8535aad2992353730de1beb299fea82b8192a3137d5675b70b5905448c61e8fe46825d151c8fd4c9bcd6c0b93366a074c" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.10.1"/>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778760000">- added patches
  CVE-2026-42050: VUL-0: CVE-2026-42050: ImageMagick: Stack buffer overflow in XTileImage [bsc#1265048]
  + ImageMagick-CVE-2026-42050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- in default security policy, allow reading from symbolic links
  [bsc#1265373]
- modified sources
  * ImageMagick-SUSE-security-policy.xml</changelog>
  <changelog author="pgajdos@suse.com" date="1781092800">- amend CVE-2026-40169 and CVE-2026-42050 fixes [bsc#1265048]
- modified patches
  * ImageMagick-CVE-2026-40169.patch (refreshed)
  * ImageMagick-CVE-2026-42050.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1781524800">- added patches
  CVE-2026-42326: Information disclosure via malicious IPTC input file [bsc#1268092]
  * ImageMagick-CVE-2026-42326.patch
  CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder [bsc#1268094]
  * ImageMagick-CVE-2026-45031.patch
  CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value [bsc#1268095]
  * ImageMagick-CVE-2026-45359.patch
  CVE-2026-45624: Data exposure due to image processing vulnerability [bsc#1268096]
  * ImageMagick-CVE-2026-45624.patch
  CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images [bsc#1268112]
  * ImageMagick-CVE-2026-46520.patch
  CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder [bsc#1268126]
  * ImageMagick-CVE-2026-46522.patch
  CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-cache service [bsc#1268120]
  * ImageMagick-CVE-2026-46692.patch
  CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering [bsc#1268116]
  * ImageMagick-CVE-2026-48724.patch
  CVE-2026-48733: Infinite Loop in subimage-search with crafted image [bsc#1268119]
  * ImageMagick-CVE-2026-48733.patch
  CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems [bsc#1268111]
  * ImageMagick-CVE-2026-48994.patch
  CVE-2026-49218: denial of service due to a missing check in the DCM decoder [bsc#1268110]
  * ImageMagick-CVE-2026-49218.patch
  CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory [bsc#1268108]
  * ImageMagick-CVE-2026-53460.patch
  CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder [bsc#1268107]
  * ImageMagick-CVE-2026-53461.patch
  CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser [bsc#1268103]
  * ImageMagick-CVE-2026-53464.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611200">- added patches
  CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder [bsc#1268102]
  * ImageMagick-CVE-2026-45358.patch
  CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder [bsc#1268124]
  * ImageMagick-CVE-2026-46521.patch
  CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
  * ImageMagick-CVE-2026-46523.patch
  CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check [bsc#1268123]
  * ImageMagick-CVE-2026-46557.patch
  CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 [bsc#1268121]
  * ImageMagick-CVE-2026-46559.patch
  CVE-2026-48734: Stack Overflow in MVG decoder [bsc#1268122]
  * ImageMagick-CVE-2026-48734.patch
  CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation [bsc#1268105]
  * ImageMagick-CVE-2026-53463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781611201">- added patches
  CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge–response authentication model [bsc#1268114]
  * ImageMagick-CVE-2026-47165.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1781697600">- disable DPC support at build time
  CVE-2026-47166 [bsc#1268113], CVE-2026-46693 [bsc#1268117]</changelog>
  <changelog author="pgajdos@suse.com" date="1781870400">- added patches
  CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder [bsc#1268101]
  * ImageMagick-CVE-2026-45664.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read. [bsc#1268645]
  * ImageMagick-CVE-2026-56367.patch
  CVE-2026-56368: memory leak in multiple coders that write raw pixel data [bsc#1269064]
  * ImageMagick-CVE-2026-56368.patch
  CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts with invalid indices [bsc#1269063]
  * ImageMagick-CVE-2026-56370.patch
  CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes [bsc#1268879]
  * ImageMagick-CVE-2026-56371.patch
  CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files [bsc#1268880]
  * ImageMagick-CVE-2026-56376.patch
  GHSA-3j4x-rwrx-xxj9: ImageMagick has a possible use-after-free write in its PDB decoder
  * ImageMagick-GHSA-3j4x-rwrx-xxj9.patch</changelog>
</package>
<package pkgid="40c9d9a2e2788eb2c5ba2a45071cff497889301f7e64825a5a836c81963dffa85d7e1fa9a2e2abad131ec5d1091b4231810b83318e798e3a3e94cc294b4518b0" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.3.2"/>
  <changelog author="suse+build@de-korte.org" date="1731844800">- version update to 7.1.1.41
  * Fix compiler identification with Clang on Darwin in #7773
  * revert map changes breaking ABI in #7768</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- version update to 7.1.1.43
  * no upstream changelog found</changelog>
  <changelog author="pgajdos@suse.com" date="1737374400">- fix [bsc#1235113]:
  https://github.com/ImageMagick/Usage/issues/8
  https://github.com/ImageMagick/Usage/issues/9
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/be3b73da674520ad3eab52ade2a3cda62af66d15
  + ImageMagick-0-1-are-special-cases-for-pow.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/1afa38ae2fa87cf4eb48040e47d410aa729ce21e
  + ImageMagick-check-for-pow-zero.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/056ccdbeac41c9b24b625e0139cd25a4cdffb22a
  + ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1740312000">- version update to 7.1.1.44
  * Bump azure/trusted-signing-action from 0.5.0 to 0.5.1 in #7895
  * Enable any dither method such as Floyd-Steinberg for Magick::Image::map()
    in #7937
  * Magick++ Documentation Verification in #7906
  * fix type casting in statistic.c in #7982
- removed patched (upstreamed)
  - ImageMagick-0-1-are-special-cases-for-pow.patch
  - ImageMagick-check-for-pow-zero.patch
  - ImageMagick-gamma-should-call-GammaImage.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1743508800">- version update to 7.1.1.47
  * try pngalpha if png16malpha not available by @remicollet in #8034
  * Fix statistic.c GetImageRange initializer by @mtasaka in #8010
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
</package>
<package pkgid="74c4246a3f720bbe14c5d8db3c141849b0b4558395074f231891082cb58aa733df6b6d5daf5f1e2426130af39c53533285a9247df48d3b1d35f09f5699c90c86" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.4.1"/>
  <changelog author="pgajdos@suse.com" date="1747310400">- drop update-alternatives usage, configuration alternative packages
  now conflict
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)
- added sources
  + _multibuild
- remove ImageMagick-filter.t-disable-Contrast.patch needed for i586
  testing</changelog>
  <changelog author="pgajdos@suse.com" date="1748260800">- fix config policies [bsc#1243622]
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1752580800">- version update to 7.1.2.0
  * magick-config.h: Remove redundant block by @ferdnyc in #8076
  * Remove generated 'magick.sh' from repo by @ferdnyc in #8075
  * JXL: Preserve ICC profile for lossless encoding by @ferdnyc in #8074
  * Support ICN file extension for old Windows icons by @bitplane in #8107
  * fix build when libjpeg is not in its default location by @mmomtchev in #8172
  * Change 'Mac OS X' to 'macOS' in descriptions and comments by @gy-mate in #8224
  * Fix NULL pointer dereference in XWarning by @moon044 in #8230
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)
- fixes: CVE-2025-53101 [bsc#1246529]
    CVE-2025-53014 [bsc#1246530]
    CVE-2025-53015 [bsc#1246531]
    CVE-2025-53019 [bsc#1246534]</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
</package>
<package pkgid="2aeb6c3ff21b2e5723f274e2db4c819c2c76f6863fcb607404963a0ce62582784a22cc3208a844506b9d1fffae241823792a81312abec4f6aa11367e8554fe61" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1754395200">- added patches
  bsc#1247475 (https://github.com/ImageMagick/ImageMagick/issues/8261)
  + ImageMagick-filename-placeholder-regression-1.patch
  + ImageMagick-filename-placeholder-regression-2.patch
  + ImageMagick-filename-placeholder-regression-3.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1755691200">- security update
- added patches
  CVE-2025-55004 [bsc#1248076], heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels
  + ImageMagick-CVE-2025-55004.patch
  CVE-2025-55005 [bsc#1248077], heap buffer overflow when transforming from Log to sRGB colorspaces
  + ImageMagick-CVE-2025-55005.patch
  CVE-2025-55154 [bsc#1248078], integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write
  + ImageMagick-CVE-2025-55154.patch
  CVE-2025-55160 [bsc#1248079], undefined behavior due to function-type-mismatch in CloneSplayTree
  + ImageMagick-CVE-2025-55160.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1756468800">- security update
- added patches
  CVE-2025-55298 [bsc#1248780], format string bug vulnerability can lead to heap overflow
  + ImageMagick-CVE-2025-55298.patch
  CVE-2025-57803 [bsc#1248784], 32-bit integer overflow can lead to heap out-of-bounds (OOB) write
  + ImageMagick-CVE-2025-57803.patch
  CVE-2025-55212 [bsc#1248767], division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry`
  + ImageMagick-CVE-2025-55212.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1757592000">- security update
- added patches
  CVE-2025-57807 [bsc#1249362], BlobStream Forward-Seek Under-Allocation
  + ImageMagick-CVE-2025-57807.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760961600">- security update
- added patches
  CVE-2025-62171 [bsc#1252282], incomplete fix for integer overflow in BMP Decoder
  * ImageMagick-CVE-2025-62171.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1761825600">- security update
- added patches
  CVE-2025-62594 [bsc#1252749], unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash
  * ImageMagick-CVE-2025-62594.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1762430400">- fix policy to allow own configuration file reads (ImageMagick_policy_etc.patch)
  adapt ImageMagick-configuration-SUSE.patch and reorder patch handling</changelog>
  <changelog author="pgajdos@suse.com" date="1765454400">- security update
- added patches
  CVE-2025-65955 [bsc#1254435], ImageMagick use-after-free/double-free
  * ImageMagick-CVE-2025-65955.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765540800">- security update
- added patches
  CVE-2025-66628 [bsc#1254820], ImageMagick Integer Overflow leading to out of bounds read (32-bit only)
  * ImageMagick-CVE-2025-66628.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
</package>
<package pkgid="0486fd10f16ea2fd17282d93124725ccabd4023f487c62d9898db427f981315ee17b20e1e3f745ecf5a74681d4f255b01f40db29a5304444e222fe10c350624b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.6.1"/>
  <changelog author="pgajdos@suse.com" date="1767700800">- security update
- added patches
  CVE-2025-68618 [bsc#1255821], read a malicious SVG file may result in a DoS attack
  * ImageMagick-CVE-2025-68618.patch
  CVE-2025-68950 [bsc#1255822], check for circular references in mvg files may lead to stack overflow
  * ImageMagick-CVE-2025-68950.patch
  CVE-2025-69204 [bsc#1255823], an integer overflow can lead to a DoS attack
  * ImageMagick-CVE-2025-69204.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769774400">- security update
- added patches
  CVE-2026-22770 [bsc#1256969], improper pointer initialization can cause denial of service
  * ImageMagick-CVE-2026-22770.patch
  CVE-2026-23874 [bsc#1256976], manipulation of digital images can lead to stack overflow
  * ImageMagick-CVE-2026-23874.patch
  CVE-2026-23876 [bsc#1256962], maliciously crafted image can lead to heap buffer overflow
  * ImageMagick-CVE-2026-23876.patch
  CVE-2026-23952 [bsc#1257076], processing comment tag can cause null pointer dereference
  * ImageMagick-CVE-2026-23952.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
</package>
<package pkgid="eba917c6613ac17f85e19ed0644bff3a6307c0f691b8c6f9a6e3adbb2d4e4d8e003c0054deaf94b5ee2200b6c5017ad2bc69dcc4e72c5aa73da63284a1cb8249" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.7.1"/>
  <changelog author="pgajdos@suse.com" date="1771934400">- added patches
  CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743)
  * ImageMagick-CVE-2026-24481.patch
  CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748)
  * ImageMagick-CVE-2026-25576.patch
  CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759)
  * ImageMagick-CVE-2026-25637.patch
  CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions (bsc#1258749)
  * ImageMagick-CVE-2026-25794.patch
  CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757)
  * ImageMagick-CVE-2026-25796.patch
  CVE-2026-26283: Possible infinite loop in JPEG encoder when using `jpeg:extent` (bsc#1258767)
  * ImageMagick-CVE-2026-26283.patch
  CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read. (bsc#1258765)
  * ImageMagick-CVE-2026-26284.patch
  CVE-2026-26983: Invalid MSL map can result in a use after free (bsc#1258763)
  * ImageMagick-CVE-2026-26983.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020800">- added patches
  CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793)
  * ImageMagick-CVE-2026-25638.patch
  CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792)
  * ImageMagick-CVE-2026-25795.patch
  CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787)
  * ImageMagick-CVE-2026-25798.patch
  CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786)
  * ImageMagick-CVE-2026-25799.patch
  CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807)
  * ImageMagick-CVE-2026-25898.patch
  CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779)
  * ImageMagick-CVE-2026-25967.patch
  CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776)
  * ImageMagick-CVE-2026-25968.patch
  CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772)
  * ImageMagick-CVE-2026-25982.patch
  CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771)
  * ImageMagick-CVE-2026-25989.patch
  CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769)
  * ImageMagick-CVE-2026-26066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772020801">- added patches
  CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791)
  * ImageMagick-CVE-2026-24485.patch
  CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785)
  * ImageMagick-CVE-2026-25965.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="a1dafe99f8bb9d7b8f4de4d9df90942a4990cfeac67dc4d5b03f3eaf72c4ecbe66882077f7c4af978adc71d9a1e9a88786a3a3db3ffe060a8bbf5314074598ac" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.8.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790)
  * ImageMagick-CVE-2026-24484.patch
  CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799)
  * ImageMagick-CVE-2026-25897.patch
  CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775)
  * ImageMagick-CVE-2026-25969.patch
  CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder. (bsc#1258802)
  * ImageMagick-CVE-2026-25970.patch
  CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805)
  * ImageMagick-CVE-2026-25983.patch
  CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812)
  * ImageMagick-CVE-2026-25985.patch
  CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818)
  * ImageMagick-CVE-2026-25986.patch
  CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821)
  * ImageMagick-CVE-2026-25987.patch
  CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810)
  * ImageMagick-CVE-2026-25988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772107201">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
</package>
<package pkgid="b30ea8dc5f819bef998d5ffd3e98c32b772099bad5282d014791a50af665a0ca43d692c3f47685525d4dc903e5e33accfc4da5a2c0d94bf31b84eb298f07ff10" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.2.0" rel="160000.9.1"/>
  <changelog author="pgajdos@suse.com" date="1772107200">- added patches
  CVE-2026-25797: Code injection in various encoders (bsc#1258770)
  * ImageMagick-CVE-2026-25797.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772193600">- added patches
  CVE-2026-25971: Stack overflow in ProcessMSLScript (bsc#1258774)
  * ImageMagick-CVE-2026-25971.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1772452800">- fix CVE-2026-25966 (bsc#1258780), forbid to use fd handler
- package SUSE security policy staticaly instead of patching
  the upstream one (it is static anyway)
- deleted patches
  * ImageMagick-configuration-SUSE.patch (not needed)
- added sources
  * ImageMagick-SUSE-security-policy.xml
- apply ImageMagick_policy_etc.patch in all flavors,
  as intended</changelog>
  <changelog author="pgajdos@suse.com" date="1772539200">- added patches
  CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018)
  * ImageMagick-CVE-2026-27798.patch
  CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017)
  * ImageMagick-CVE-2026-27799.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1773144000">- modified patches [bsc#1258790]
  * ImageMagick-CVE-2026-24484.patch
  (improved by f13732ed5655376010ee0a6cf2af11d1b2a62f49)</changelog>
  <changelog author="pgajdos@suse.com" date="1773403200">- modified sources
  * ImageMagick-SUSE-security-policy.xml
- added patches
  CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446)
  * ImageMagick-CVE-2026-28493.patch
  CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447)
  * ImageMagick-CVE-2026-28494.patch
  CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448)
  * ImageMagick-CVE-2026-28686.patch
  CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450)
  * ImageMagick-CVE-2026-28687.patch
  CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451)
  * ImageMagick-CVE-2026-28688.patch
  CVE-2026-28689: `domain=path` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452)
  * ImageMagick-CVE-2026-28689.patch
  CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456)
  * ImageMagick-CVE-2026-28690.patch
  CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455)
  * ImageMagick-CVE-2026-28691.patch
  CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457)
  * ImageMagick-CVE-2026-28692.patch
  CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466)
  * ImageMagick-CVE-2026-28693.patch
  CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467)
  * ImageMagick-CVE-2026-30883.patch
  CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468)
  * ImageMagick-CVE-2026-30929.patch
  CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469)
  * ImageMagick-CVE-2026-30931.patch
  CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497)
  * ImageMagick-CVE-2026-30935.patch
  CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464)
  * ImageMagick-CVE-2026-30936.patch
  CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463)
  * ImageMagick-CVE-2026-30937.patch
  CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528)
  * ImageMagick-CVE-2026-31853.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612)
  * ImageMagick-CVE-2026-32259.patch
  CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872)
  * ImageMagick-CVE-2026-32636.patch
  CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874)
  * ImageMagick-CVE-2026-33535.patch
  CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879)
  * ImageMagick-CVE-2026-33536.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776254400">- added patches
  CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation [bsc#1262097]
  * ImageMagick-CVE-2026-33905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776686400">- added patches
  CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing [bsc#1262154]
  * ImageMagick-CVE-2026-33899.patch
  CVE-2026-33900: Denial of Service via integer truncation in viff encoder [bsc#1262156]
  * ImageMagick-CVE-2026-33900.patch
  CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder [bsc#1262155]
  * ImageMagick-CVE-2026-33901.patch
  CVE-2026-33902: Denial of Service via deeply nested expression in FX parser [bsc#1262153]
  * ImageMagick-CVE-2026-33902.patch
  CVE-2026-33908: Denial of Service via deeply nested XML file processing [bsc#1262152]
  * ImageMagick-CVE-2026-33908.patch
  CVE-2026-34238: Denial of Service via integer overflow in despeckle operation [bsc#1262147]
  * ImageMagick-CVE-2026-34238.patch
  CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds write [bsc#1262150]
  * ImageMagick-CVE-2026-40169.patch
  CVE-2026-40183: Denial of Service via heap write overflow in JXL encoder [bsc#1262145]
  * ImageMagick-CVE-2026-40183.patch
  CVE-2026-40310: Denial of service via heap out-of-bounds write in JP2 encoder [bsc#1262148]
  * ImageMagick-CVE-2026-40310.patch
  CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing [bsc#1262146]
  * ImageMagick-CVE-2026-40311.patch
  CVE-2026-40312: Denial of Service via malicious MSL file processing [bsc#1262149]
  * ImageMagick-CVE-2026-40312.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778500800">- fix overflow check (CVE-2026-31853 [bsc#1259528])
- modified patches
  * ImageMagick-CVE-2026-31853.patch</changelog>
</package>
<package pkgid="70b33a56fe7a16870b3228a884cce52abc42802e0e826dfbe791d32d1fb3981b78d0c20d9001c632558466a3b940317341d58da0090da59cabbf52ab6e94d4a0" name="Imath-devel" arch="x86_64">
  <version epoch="0" ver="3.1.12" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Trim conjecture from description.</changelog>
  <changelog author="pgajdos@suse.com" date="1629115200">- do not obsolete/provide ilmbase, Imath provides just part of
  functionality of former ilmbase</changelog>
  <changelog author="pgajdos@suse.com" date="1629201600">- be more precise in %files section
  (https://build.opensuse.org/request/show/911960#comment-1503939)</changelog>
  <changelog author="pgajdos@suse.com" date="1629374400">- Imath-devel obsoletes ilbase-devel
  (https://build.opensuse.org/request/show/912661#comment-1504935)</changelog>
  <changelog author="pgajdos@suse.com" date="1639396800">- version update to 3.1.3
  * Patch release with miscellaneous fixes
  * Fix undefined access of a vector when empty
  * Require sphinx 4.0.3
  * Build sphinx/doxygen docs with CMake
  * Use PYIMATH_OVERRIDE_PYTHON_INSTALL_DIR to specify destination python modules
  * Guard `__has_attribute` for compilers that don't support it
  * Cuda safety fixes
  * Replace stray Imath:: with IMATH_INTERNAL_NAMESPACE::</changelog>
  <changelog author="dmueller@suse.com" date="1655812800">- update to 3.1.5:
  * Update CI workflow matrix for VFX-CY2022
  * Use _WIN32 instead of _MSC_VER to fix mingw build
  * Fix 32-bit x86 build failure with 16c instructions
  * Move numeric_limits specializations into half.h
  * Change references to "master" branch to "main"
  * Remove some simple typos in the code
  * Added missing check _M_IX86 or _M_X64 when using __lzcnt.
  * SolveNormalizedCubic fix to return proper real root
  * Add docs target only if not a subproject
  * Fix docs race condition and make installation optional
  * Remove dead PyImath code and references to ilmbase
  * Use equalWithAbsError instead of equal operator for float
  * Fix sphinx warnings and man page filenames
  * Adding missing stdexcept header
  * for better SIMD auto-vectorization
  * Remove extra project layer for the pyimath code
  * Successor/predecessor functions use isnan() and isinf()
  * Fix python imath export
  * Cuda safety fixes
  * Sort Imath source files
  * Fix formatting in release notes</changelog>
  <changelog author="dmueller@suse.com" date="1670328000">- update to 3.1.6:
  * Patch release with miscellaneous bug/doc/build fixes.
  * [#269] fix memory leak in V3fArrayFromBuffer
  * [#268] Add &lt;cstdint&gt; for int64_t
  * [#263] Initialize x in testRoots.cpp:solve() to suppress compiler
    warning
  * [#262] Fix gcc compiler warning in testFun.cpp
  * [#261] Test return value of extractSHRT to avoid uninitialized reference
  * [#260] Fix example code so it compiles as is
  * [#259] Cuda safety in several headers
  * [#256] Fix markdown and typos in README.md
  * [#255] Do not warn if half.h has already being included
  * [#250] Fix compiler warnings on windows
  * [#249] Remove irrelevant cvs ignore files
  * [#248] Update sphinx version</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- update to 3.1.9:
  * Fix Heap-buffer-overflow in internal_huf_decompress
  * Support for DWA compression in OpenEXRCore
  * Fix for threadpool deadlocks during shutdown on Windows
  * Stack-buffer-overflow in DwaCompressor_readChannelRules</changelog>
  <changelog author="dmueller@suse.com" date="1719835200">- update to 3.1.11:
  * Fix a problem where downstream projects using Imath would build
    python bindings even if they weren't requested.
  * Fix for missing `std::bit_cast`
  * Fix missing/necessary use of IMATH_HOSTDEVICE
  * IMATH_INSTALL_PKG_CONFIG is now on by default, even on Windows
  * Fix calling default constructor by uniform init in TypeTraits
  * Fix redundant PYIMATH_EXPORTS causing compile issues on
    Windows Clang
  * Update to SO versioning policy:
  * succ()/pred() now use std::nextafter().
  * Expand epsilon bounds for m44x pyImath test.
  * Rename "docs" to "website".
  * Add missing copyright/license identifiers.</changelog>
  <changelog author="mli@suse.com" date="1737115200">- update to 3.1.12:
  * Support for compiling half.h with hip-runtime-amd
  * Also, the v3.1.11 release had improper versioning in its cmake
    and pkgconf configuration files. This is now fixed.</changelog>
</package>
<package pkgid="c9c0df7f1c02c0a499fddd01659f69eb0d0f1f83d7f255b19f3ff7c1e10293fa565d4af94ebb23f445aa4a3e90f364049615b1a730a70bac4894f25116c57216" name="Ipopt-devel" arch="x86_64">
  <version epoch="0" ver="3.14.16" rel="bp160.1.14"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 3.14.6:
  * Fixed mapping of meta data for inequalities, e.g., constraint
    names, from TNLP to Ipopts internal NLP
    [gh#coin-or/Ipopt#570].
  * Fixed that MC68 ordering time was not accounted in symbolic
    factorization time of HSL MA86 [gh#coin-or/Ipopt#571].
  * Include more header files in IpIpoptCalculatedQuantities.hpp
    for setups where forward declarations are not sufficient
    [gh#coin-or/Ipopt#572].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1656936000">- Update to version 3.14.7:
  * Fixed that ComputeSensitivityMatrix() of sIpopt assumed that
    there are no more than two parameters [gh#coin-or/Ipopt#578].
  * For completeness_approximation to enable approximation of
    gradient of objective function by finite differences. Do not
    use. [gh#coin-or/Ipopt#573].
  * Added function IPSETPROBLEMSCALING to Fortran interface to set
    problem scaling [gh#coin-or/Ipopt#577].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657800000">- Update to version 3.14.8:
  * Added options ma27_print_level, ma57_print_level, and
    mumps_print_level to enable output from these linear solvers.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1660132800">- Update to version 3.14.9:
  * Fixed mapping of meta data for variable bounds, e.g., variable
    names, from TNLP to Ipopts internal NLP [gh#coin-or/Ipopt#590]</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 3.14.10:
  * Added option grad_f_constant to specify that objective
    function is linear. If set, the gradient of the objective will
    be requested by Ipopt only once [gh#coin-or/Ipopt#597].
  * Added OrigIpoptNLP::orig_d_L() and OrigIpoptNLP::orig_d_U() to
    get original constraint sides.
  * TNLP::get_curr_violations() now returns the constraint
    violation and complementarity with respect to the original
    (non-relaxed) constraint sides [gh#coin-or/Ipopt#603].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 3.14.12:
  * Fix that a source file was installed and install more header
    files [gh#coin-or/Ipopt#641, gh#coin-or/Ipopt#642].
  * Fixed crash of GetIpoptCurrentIterate() and
    GetIpoptCurrentViolations() in C interface when called before
    or after IpoptSolve() [gh#coin-or/Ipopt#644,
    gh#coin-or/Ipopt#645].
  * Updated HSL_MA97 header file to the one from HSL MA97 2.8.0
    [gh#coin-or/Ipopt#646].
  * Fixed crash when trying to solve problem without variables and
    constraints [gh#coin-or/Ipopt#648].
  * Added optional argument to AlgorithmBuilder constructor to
    provide name of custom solver [gh#coin-or/Ipopt#618].
  * Changed handling of dual solution for square problems.
  * Updated HSL_MC86 header file to the one from HSL MC68 3.3.3
    [gh#coin-or/Ipopt#653].
- Make java package noarch (rpmlint recommends).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 3.14.13:
  * Reduced priority for making Spral the default value for option
    linear_solver [gh#coin-or/Ipopt#677].
  * Adapted to change of integer types in Spral interface. Minimal
    required Spral version is now v2023.03.29.
  * Fixed that return code from TNLP::eval_jac_g() was ignored at
    first call [gh#coin-or/Ipopt#697].
  * Print additional messages when reallocation of MA27 working
    space failed [gh#coin-or/Ipopt#671].
  * Added option file_append to specify whether to append to
    output_file instead of truncating it.
  * Added default argument file_append to
    Journalist::AddFileJournal(), added default argument fappend
    to FileJournal::Open(), and added default argument file_append
    to IpoptApplication::OpenOutputFile() [gh#coin-or/Ipopt#720].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1705752000">- Update to version 3.14.14:
  * Fixed build of MA57 interface when FUNNY_MA57_FINT is defined
    (MA57 with long integers).
  * Fixed that initial dual values for fixed variables (z_L, z_U)
    were ignored when doing a warm start with
    fixed_variable_treatment = make_constraint
    [gh#coin-or/Ipopt#728].
  * Fixed that the last argument when calling MA27C[D] in MA27
    interface was wrong [gh#coin-or/Ipopt#738].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712750400">- Update to version 3.14.15:
  * Fixed include guard of IpGenAugSystemSolver.hpp
    [gh#coin-or/Ipopt#756].
  * Improved finding dependencies of linear solver libraries
    loaded at runtime on Windows [gh#coin-or/Ipopt#755].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 3.14.16:
  * No Linux specific changes.</changelog>
</package>
<package pkgid="1238b923b5ee4f2bfe1427fd8421b107b15632e378d71f86d2e912e9023f49b4ae6ff9feea3bd34490e1abd423e667fde2fdcf0f1322735c7401fdec238f99f0" name="Ipopt-java" arch="noarch">
  <version epoch="0" ver="3.14.16" rel="bp160.1.14"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651838400">- Update to version 3.14.6:
  * Fixed mapping of meta data for inequalities, e.g., constraint
    names, from TNLP to Ipopts internal NLP
    [gh#coin-or/Ipopt#570].
  * Fixed that MC68 ordering time was not accounted in symbolic
    factorization time of HSL MA86 [gh#coin-or/Ipopt#571].
  * Include more header files in IpIpoptCalculatedQuantities.hpp
    for setups where forward declarations are not sufficient
    [gh#coin-or/Ipopt#572].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1656936000">- Update to version 3.14.7:
  * Fixed that ComputeSensitivityMatrix() of sIpopt assumed that
    there are no more than two parameters [gh#coin-or/Ipopt#578].
  * For completeness_approximation to enable approximation of
    gradient of objective function by finite differences. Do not
    use. [gh#coin-or/Ipopt#573].
  * Added function IPSETPROBLEMSCALING to Fortran interface to set
    problem scaling [gh#coin-or/Ipopt#577].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657800000">- Update to version 3.14.8:
  * Added options ma27_print_level, ma57_print_level, and
    mumps_print_level to enable output from these linear solvers.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1660132800">- Update to version 3.14.9:
  * Fixed mapping of meta data for variable bounds, e.g., variable
    names, from TNLP to Ipopts internal NLP [gh#coin-or/Ipopt#590]</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 3.14.10:
  * Added option grad_f_constant to specify that objective
    function is linear. If set, the gradient of the objective will
    be requested by Ipopt only once [gh#coin-or/Ipopt#597].
  * Added OrigIpoptNLP::orig_d_L() and OrigIpoptNLP::orig_d_U() to
    get original constraint sides.
  * TNLP::get_curr_violations() now returns the constraint
    violation and complementarity with respect to the original
    (non-relaxed) constraint sides [gh#coin-or/Ipopt#603].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 3.14.12:
  * Fix that a source file was installed and install more header
    files [gh#coin-or/Ipopt#641, gh#coin-or/Ipopt#642].
  * Fixed crash of GetIpoptCurrentIterate() and
    GetIpoptCurrentViolations() in C interface when called before
    or after IpoptSolve() [gh#coin-or/Ipopt#644,
    gh#coin-or/Ipopt#645].
  * Updated HSL_MA97 header file to the one from HSL MA97 2.8.0
    [gh#coin-or/Ipopt#646].
  * Fixed crash when trying to solve problem without variables and
    constraints [gh#coin-or/Ipopt#648].
  * Added optional argument to AlgorithmBuilder constructor to
    provide name of custom solver [gh#coin-or/Ipopt#618].
  * Changed handling of dual solution for square problems.
  * Updated HSL_MC86 header file to the one from HSL MC68 3.3.3
    [gh#coin-or/Ipopt#653].
- Make java package noarch (rpmlint recommends).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 3.14.13:
  * Reduced priority for making Spral the default value for option
    linear_solver [gh#coin-or/Ipopt#677].
  * Adapted to change of integer types in Spral interface. Minimal
    required Spral version is now v2023.03.29.
  * Fixed that return code from TNLP::eval_jac_g() was ignored at
    first call [gh#coin-or/Ipopt#697].
  * Print additional messages when reallocation of MA27 working
    space failed [gh#coin-or/Ipopt#671].
  * Added option file_append to specify whether to append to
    output_file instead of truncating it.
  * Added default argument file_append to
    Journalist::AddFileJournal(), added default argument fappend
    to FileJournal::Open(), and added default argument file_append
    to IpoptApplication::OpenOutputFile() [gh#coin-or/Ipopt#720].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1705752000">- Update to version 3.14.14:
  * Fixed build of MA57 interface when FUNNY_MA57_FINT is defined
    (MA57 with long integers).
  * Fixed that initial dual values for fixed variables (z_L, z_U)
    were ignored when doing a warm start with
    fixed_variable_treatment = make_constraint
    [gh#coin-or/Ipopt#728].
  * Fixed that the last argument when calling MA27C[D] in MA27
    interface was wrong [gh#coin-or/Ipopt#738].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712750400">- Update to version 3.14.15:
  * Fixed include guard of IpGenAugSystemSolver.hpp
    [gh#coin-or/Ipopt#756].
  * Improved finding dependencies of linear solver libraries
    loaded at runtime on Windows [gh#coin-or/Ipopt#755].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 3.14.16:
  * No Linux specific changes.</changelog>
</package>
<package pkgid="e6ee7e5ed9bbf2f60ab4eac63e65a86ea64552d879739c771fc450b6c615b04d80b3e09305309f9350d49611c250372acf7fe2fa055e915154511d1489ea3fbf" name="Jamulus" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="bp160.1.13"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1616500800">- Update to 3.7.0
  * Server lists have been reorganized to make room for more
    servers (#875):
  - Default has been renamed to Any Genre 1.
  - Any Genre has been renamed to Any Genre 2.
  - Any Genre 3 has been added.
  - Choral/Barbershop has been added.
  - Classical/Folk/Choral has been renamed to Classical/Folk.
  * Central server addresses have been moved to the jamulus.io
    domain (#919).
    The fischvolk.de addresses are deprecated.
  * GUI: If a name is provided using --clientname, that name is
    shown first in the window title, to avoid clipping in the
    Windows task bar (#789).
  * GUI: Translations have been updated:
  - Dutch, by @jerogee (#1110)
  - French, by @trebmuh &amp; @jujudusud (#1199 &amp; #1113)
  - German, by @rolamos (#1097)
  - Italian, by @dzpex (#1112)
  - Polish, by @SeeLook (#1099)
  - Portugese, by @melcon &amp; @Snayler (#1141 &amp; #1168)
  - Slovak, by @jose1711 (#1104)
  - Spanish, by @ignotus666 (#1152)
  - Swedish, by @genesisproject2020 (#1182 &amp; #1106)
  * Active recording state is now highlighted in the mixerboard
    title (#968).
  * Client window makes it more obvious when not connected to
    a server by graying out input levels and showing a message
    (#847, #983).
  * Screensaver and screen blanking are now prevented on Macs
  (#834).
  * Windows installer has been improved (#792, #841).
    Note: If you are using ASIO4ALL, we strongly suggest that
    you take a screenshot of your ASIO4ALL settings before upgrading.
    The installer will try its best to migrate your settings, but
    it may fail to do so when using custom installation paths.
  * Windows installer interface now supports English, Dutch, French,
    German, Italian, Polish, Portuguese, Spanish and Swedish.
  * Windows ASIO Setup button placement has been improved to be below
    the driver selection (#977).
  * Chat dialog has gained support for auto-linking http addresses
    (#879).
  * Chat messages no longer allow HTML-formatted chat messages due to
    security reasons (#939). HTML formatting in Welcome messages will
    continue to work.
  * Mixerboard background image quality in the Fancy skin has been
    improved (#970).
  * MIDI controller logic has been improved to support fader, pan,
    mute and solo buttons in --ctrlmidich syntax (#945).
    Mute &amp; solo buttons are only for toggle-type controllers and do
    not support headless operation yet.
  * Servers connected to central servers behind the same NAT can
    now be made accessible to public clients via the newly added
  - -serverpublicip option (#954).
  * External IP detection no longer generates traffic to Cloudflare
  (#633, #1092).
  * Version update detection has been improved (#1155):
  - The check now uses two servers instead of one
    (updatecheck1.jamulus.io and updatecheck2.jamulus.io).
  - The server version is now ignored if it is not a release, due
    to a suffix such as dev, beta or rc.
  * Official Ubuntu/Debian packages are now built and published as
    part of the release (#1100).
    The packages are compatible with Ubuntu 18.04 or later.
  * Experimental .apk installation packages for Android are now
    provided (#880).
  * Bug fix: A suspected memory leak has been solved by removing
    usage of ConsoleWriterFactory (#926).
  * Bug fix: Changing ASIO driver properties like switching
    input/outputs in ASIO4ALL now resets input/output channel
    mapping in Jamulus again (#796).
    This was done to solve a bug with ASIO4ALL introduced in the
    last version.
  * Bug fix: Fader levels, mute and solo state are now restored
    properly when reconnecting to a restarted server (#955, #1010).
    This is a server-side fix.
  * Bug fix: Multiple memory leaks in the server's recording feature
    have been fixed (#1073).
  * Bug fix: Menu accelerator keys have been fixed in multiple
    translations (#1165).
  * Bug fix: Windows sound driver lacked driverInfo initialisation
    (#1194).
  * Internal build and release process have been re-designed,
    automated and moved to Github.
  * Internal development builds now contain a detailed version
    number (#475).
- Change to new projekt- and source-url.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620216000">- Fixes for %_libexecdir changing to /usr/libexec(bsc#1174075)</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1620216001">- remove %config for firewalld's jamulus.xml</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622721600">- Update to 3.8.0
  * The term "Central server" has been replaced with "Directory
  server" (#1407, #1715, #1629).
  Note that the program will still accept the --centralserver
  option for backward
  compatibility with existing system startup scripts, but its usage
  is deprecated.
  (contributed by @pljones, @softins)
  * Mac: Generate build with Qt 5.15.2 for better compatibility with
  Big Sur (#1687, #1768).
  We still build a legacy version with Qt 5.9.9 to support older
  versions of macOS:
  * Users of 10.13 (High sierra) or newer should use the standard
    build with Qt 5.15.2
  * Users of Yosemite, El Capitan or Sierra should use the legacy
    build with Qt 5.9.9
    (contributed by @softins)
  * GUI: Settings window has been reorganized into tabs (#1415,
  [#1554], #1542, #1588):
  * User Profile window has been integrated into the settings
    window.
  * Input Pan has been moved to the newly created Advanced tab
    and removed from main window.
    (contributed by @dcorson-ticino-com, @pljones)
  * GUI: Moved the Ping and Delay stats from the Settings window to
  the main window (#1762):
  This was partly to work around a Mac issue with updates to the
  settings window (#1643)
  and is actually an improvement anyway, as the settings window
  does not need to remain open.
  (contributed by @dcorson-ticino-com and @softins)
  * GUI: Added "About Qt" to the help menu to display version of Qt
  (#1685, #1692).
  (contributed by @softins)
  * GUI: Corrected the operation of What's This in the settings
  dialog (#1622, #1635).
  (contributed by @dcorson-ticino-com)
  * GUI: Improved the muted speaker icon display (#1691).
  (contributed by @henkdegroot)
  * Added new icons for Linux desktop use (#1672).
  (contributed by @jujudusud)
  * GUI: Corrected handling of custom directory server in the server,
  to prevent
  unintended registration with a directory server (#1624, #1627).
  (contributed by @softins)
  * GUI: Corrected alignment of Mute icon above fader (#811, #1312,
  [#1640]).
  (contributed by @vimpostor)
  * GUI: Support for more than two mixer rows has been added (#1549,
  [#1560]).
  (contributed by @pljones)
  * GUI: --clientname also works in dialog titles now (#1352, 1370).
  (contributed by @dcorson-ticino-com)
  * GUI: Translations have been updated
    Dutch, by @henkdegroot (#1562, #1623, #1714, #1557)
    French, by @jujudusud (#1648, #1708)
    German, by @rolamos (#1677, #1810)
    Italian, by @dzpex (#1620)
    Polish, by @SeeLook (#1619)
    Portuguese Brazilian, by @melcon (#1671, #1807)
    Portuguese European, by @Snayler (#1689)
    Slovak, by @jose1711 (#1647)
    Spanish, by @ignotus666 (#1621, #1730, #1808)
    Swedish, by @genesisproject2020 (#1664, #1696)
  * Network: Support for DSCP Quality of Service flags has been added
  (#1310).
  This is supposed to lead to improved network performance.
  It is enabled by default.
  On Windows, this requires additional configuration in order to
  work.
  Please see the Tips &amp; Tricks page on the website for a setup
  guide for Windows.
  (contributed by @DavidSavinkoff)
  * Client: Automatic channel fader adjustment simplifies mixer setup
  by using the channel level meters (#1071).
  (contributed by @JohannesBrx)
  * Client: Basic audio feedback detection has been added (#1179).
  (contributed by @JohannesBrx)
  * Client: Support for input gain boost has been added (#1222, #1030)
  (contributed by @hoffie)
  * Client: Grouping support has been extended to allow for up to
  eight groups (#1551).
  (contributed by @pljones)
  * Client: A hint regarding non-default Jack support has been added
  (#1397, #1438).
  (contributed by @djfun)
  * Server: Support for Delay Panning has been added (#332, #567,
  [#1151], #1417, #1744):
  This feature can be enabled on servers using the new --delaypan
  option.
  Enabling this feature will slightly increase server CPU usage.
  It can create a much more realistic spatial sound impression for
  clients
  that are set to Stereo or Mono-in/Stereo-out mode.
  (contributed by @DetlefHennings, @Hk1020, @softins, @henkdegroot)
  * Server: Multi-threading performance has been improved (#960).
  (contributed by @menzels, @softins)
  * Server: Half-connected clients will no longer receive audio
  (#1243, #1589):
  Note: This breaks compatibility with client versions before 3.3.0
  (Feb 2013).
  If you update your server, ensure that all clients use 3.3.0 or
  later as well.
  (contributed by @softins)
  * Server: HTML status file is now emptied on exit (#1423, #1427).
  (contributed by @hoffie, @drummer1154)
  * Server: An explicit bind address can now be specified (#141,
  [#1561]).
  This can be done by the new --serverbindip option.
  (contributed by @buv)
  * Recorder: Compatibility with third-party tools such as Audacity
  has been improved (#1384, #1424, #1437).
  Non-ASCII characters are now stripped out when creating filenames.
  (contributed by @softins, @gilgongo, @reinhardwh)
  * Recorder: Failures to start recording no longer result in crashes
  (#1163, #1289, #1463).
  (contributed by @hoffie, @softins, @pljones)
  * Recorder: Logging has been improved (#1284, #1463).
  (contributed by @hoffie, @drummer1154)
  * Bug fix: The mute indicator is now also shown in mono mode (#1074).
  (contributed by @npostavs)
  * Bug fix: Channel mapping on Windows now only resets if the sound
  card or the numbers of channels changed (#1347).
  (contributed by @ann0see)
  * Bug fix: Jamulus client should now close itself correctly if a
  non-working device was selected (#872).
  (contributed by @npostavs)
  * Bug fix: Server no longer crashes while changing the recording
  directory (#1501, #1573).
  (contributed by @henkdegroot, @hoffie, @softins)
  * Bug fix: Example systemd unit has been fixed to avoid crashing
  when sending signals (#1515, #1518).
  (contributed by @softins, @helgeerbe, @gilgongo)
  * Bug fix: The Windows installer now correctly compiles in a path
  with spaces (#864, #1319).
  (contributed by @henkdegroot)
  * Performance: Opus encoding/decoding now uses machine-specific
  optimizations (#1105).
  (contributed by @npostavs)
  * Performance: Timer configuration for Windows servers has been
  improved (#1536).
  (contributed by @npostavs)
  * iOS support is being worked on (#1450).
  (contributed by @jeroenvv)
  * Github autobuild for Mac now uses Xcode 11.7 and SDK 10.15 for
  compatibility with Qt5 (#1655).
  (contributed by @softins)
  * Build: Creation of debug builds has been simplified (#1516).
  (contributed by @hoffie)
  * Internal: Constants for JACK usage have been renamed (#1429).
  (contributed by @djfun)
  * Internal: Legacy IP address variables have been cleaned up (#1400).
  (contributed by @wferi)
  * Internal: Added automatic code formatting with clang-format
  (#901, #1127, #1751).
  (contributed by @passing)
  * Internal: New pull requests will now be checked for coding style
  automatically (#1735).
  (contributed by @passing)
  * Internal: Windows deploy script has been aligned to autobuilds
  (#1720).
  (contributed by @henkdegroot)</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622721601">- change central server to directory term</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1635768000">- Update to 3.8.1
  * Client: JACK support on Windows has been improved (#1718).
  (contributed by @jujudusud, @henkdegroot)
  * Client: Rewrote multiple error messages to improve UX (#1568, #1732).
  (contributed by @ann0see)
  * Client: Add custom directory servers to Connect Dialog (#1869, #1894).
  (contributed by @jp8)
  * Client: Rearrange existing UI menu bar items (#1915, #1926).
  (contributed by @jp8)
  * Bug Fix: Mute myself has been made more consistent (#1838).
  (contributed by @ngocdh)
  * Bug Fix: Fix ampersand not being shown correctly on mixer (#1886, #1893).
  (contributed by @HughePaul, @ann0see)
  * Bug Fix: A crash fix related to the way iOS handles sockets in
  idle mode (#1875).
  (contributed by @ngocdh)
  * Server: A single click on the server application in the
  systemtray now opens the Jamulus Server main window (#1722, #1731).
  (contributed by @henkdegroot)
  * Server: Jam Recorder's internal locking and initialization code
  has been made more robust (#1826).
  (contributed by @cdmahoney)
  * Server: The list of servers registered on a directory can now
  be saved during directory restart. Use the new
  - -directoryfile CLI option to use this feature (#1867).
  (contributed by @pljones)
  * Server: Add link to website if a new version is available (#1980).
  (contributed by: @ann0see)
  * Bug Fix: Remove incorrect version of headless .service file (#2009).
  (contributed by @ann0see)
  * Client/Server: Add IPv6 support for direct connections (#1017, #1938).
  (contributed by @jardous, @softins)
  * CLI: Re-order and refactor help for client/server validation (#1896).
  (contributed by @pljones)
  * CLI: Jamulus now shows a link to the Website for translated
  content (#1759).
  (contributed by @henkdegroot)
  * Android: Add close button on Android to enhance UX (#1763, #1876).
  (contributed by @ngocdh)
  * iOS: Sound support, feature to allow switch between external device
  and the internal mic (#1875).
  (contributed by @ngocdh)
  * MacOS: Keyboard shortcuts now also work on macOS (#1726, #1873).
  (contributed by @henkdegroot)
  * Installer: Add zh_CN translation + for nsis win installer (#1922, #1954).
  (contributed by @BLumia)
  * Documentation: Move Demos, description of inputs options to
  Knowledge Base (#603, #551).
  (contributed by: @pcar75, @gilgongo)
  * Documentation: Add user experience section to CONTRIBUTING.md (#1885).
  (contributed by: @ann0see)
  * Documentation: Create Server Admin Manual (#527).
  (contributed by: @gilgongo)
  * Documentation: Update typo on links in compiling.md file (#1824).
  (contributed by @jujudusud)
  * Documentation: Number range command line error messages
  reworded accurately (#1978).
  (contributed by @DavidSavinkoff)
  * Website: switch to .po file format to make updating
  translations easier (various PRs)
  (contributed by: @ignotus666)
  * Website: Removed edit button from wiki layout file (#576).
  (contributed by: @DevRish)
  * Internal: Enable signing of macOS binaries (via build script
  and automatically via CI) (#1856, #1937).
  (contributed by @emlynmac)
  * Internal: Added Apple Appstore licence waiver (#1874)
  (contributed by @ann0see, @pljones, @gilgongo)
  * Internal: Add autobuild for Windows with JACK (#1829).
  (contributed by @henkdegroot)
  * Internal: Document release process on contribute page (#1594, #592).
  (contributed by: @hoffie, @ann0see)</changelog>
  <changelog author="Giordano Boschetti &lt;geekosdaw@gmail.com&gt;" date="1645531200">- Update to 3.8.2
  * Client: Added selection option for level meter style (#1688, #2352, #2356).
  (contributed by @henkdegroot, @hoffie, @pgScorpio, @pljones)
  * Client: On Windows, if no driver found while installing, the "Run Jamulus"
  option will not be checked (#2103).
  (contributed by @henkdegroot)
  * Client: on macOS, corrected minimum OS version number for Legacy installer from 10.13 to 10.10.
  Legacy installer will now install correctly on macOS Yosemite or newer (#2223).
  (contributed by @softins)
  * Client: Added Vibraphone to list of instruments (#2043, #2080, #2158).
  (contributed by @DavidSavinkoff, @softins, photo by @vibraphon)
  * Client: Added Conductor to list of instruments (#2140).
  (contributed by @henkdegroot)
  * Client: Fix wrong display of Unicode characters at line wrap and settings screen (#1994, #2274).
  (contributed by @djfun, @pljones, @hoffie)
  * Client: Fixed incorrect operation of feedback detection on first connect in run (#2120).
  (contributed by @softins)
  * Client: Added option always to show one's own fader first (#1809).
  (contributed by @ngocdh)
  * Client: Improved regex to highlight URLs in the chat window, avoiding terminating punctuation.
  Also migrated from deprecated QRegExp to QRegularExpression, for future compatibility with
  Qt6 (#2124, #2272, #2273).
  (contributed by @softins, @corrados, @hoffie)
  * Client: Improved keyboard control of the list of Custom Directories (#2129).
  (contributed by @pljones)
  * Client: Added the connected server name to the heading in the mixer panel (#2173).
  (contributed by @pljones)
  * Client: Enhanced the ASIO driver detection during installation on Windows (#2149).
  (contributed by @henkdegroot)
  * Client: On Windows, hide the ASIO button in the version that uses JACK instead (#2215).
  (contributed by @henkdegroot)
  * Client: Improved the "What's this?" text displayed for Buffer Delay (#2232).
  (contributed by @henkdegroot)
  * Client: Accelerator key clash between Settings button and Settings menu corrected (#2248).
  (contributed by @henkdegroot)
  * Client: Added option code 'o' in --ctrlmidich for "Mute Myself" (#2334).
  (contributed by @henkdegroot)
  * Client/Server: Output from --help and --version is now sent to StdOut instead of StdErr (#2244).
  (contributed by @henkdegroot)
  * Client/Server: Improved the version output on the command line to give more detail and Qt version (#2187).
  (contributed by @henkdegroot)
  * Client/Server: Added version and Jamulus URL to the Windows uninstall information registered when installing (#2201).
  (contributed by @henkdegroot)
  * Client/Server: Some improvements to text related to localisation (#2085).
  (Contributed by @BLumia)
  * GUI: Improved Connect Dialog help texts (#2121).
  (contributed by @pljones)
  * GUI: Translations have been updated:
  Dutch, by @henkdegroot and @jerogee (#2371, #2314)
  French, by @jujudusud (#2329, #2320, #2381)
  German, by @ann0see, @rolamos and @hoffie (#2349, #2387)
  Italian, by @dzpex (#2327)
  Polish, by @SeeLook (#2375, #2331)
  Portuguese Brazilian, by @melcon (#2369, #2358)
  Portuguese European, by @melcon (#2368)
  Simplified Chinese, by @BLumia (#2313, #2391)
  Slovak, by @jose1711 (#2348)
  Spanish, by @ignotus666 (#2378, #2326)
  Swedish, by @softins (#2364)
  Server: Fixed incorrect German translation (#2137).
  (contributed by @rolamos)
  * Server: Improved management and allocation of free channels, so that a new client always gets the
  lowest available channel number. Improves operation of clients with MIDI faders (#2151).
  (contributed by @softins)
  * Server: Improved the icon that is displayed in the Windows system tray for a server (#2231).
  (contributed by @henkdegroot)
  * Bugfix: IPv6 address formatting and obfuscation has been improved (#2343).
  (contributed by @rdica, @hoffie, @softins)
  * Windows Installer: Updated NSIS to v3.08 (#2208).
  (contributed by @ann0see)
  * Android: Some internal improvements to the experimental Android port buffer handling (#1528, #2237).
  (contributed by @j-santander, @softins)
  * Documentation: Enhanced the iOS compilation guide and signing instructions (#2139, #2315).
  (contributed by @ann0see, @RobyDati)
  * Documentation: Added a man page for Jamulus, from the Debian project (#2180).
  (contributed by @mirabilos)
  * Build: Raspijamulus build script has been improved to work with the latest Raspberry Pi OS releases and to include a newer JACK version (#2267).
  (contributed by @corrados, @softins)
  * Internal: Improved accelerator key detection (#2061).
  (contributed by @softins)
  * Internal: A hypothetical CodeQL-detected multiplication overflow in sound buffer handling has been fixed (#2292, #2297).
  (contributed by @softins)
  * Internal: Changed "Central" to "Directory" in names of variables and functions (#2079).
  (contributed by @pljones)
  * Internal: Corrected "Protcol" to "Protocol" in names of variables and functions (#2146).
  (contributed by @atsampson)
  * Internal: Some code reordering, particularly of the settings initialisation (#2174, #2177).
  (contributed by @pljones)
  * Internal: Removed unneeded submodules from tools directory, and replaced with a RELATED-PROJECTS document (#2196).
  (contributed by @softins)
  * Internal: Improved generation of the changelog for the Debian package, using dch (#2138).
  (contributed by @npostavs)
  * Internal: Improved powershell redirect handling when building for Windows in Github (#2225).
  (contributed by @henkdegroot)
  * Internal: Prepared autobuild logic for upcoming Qt6 compatibility (#2328).
  (contributed by @hoffie, @softins)
  * Internal: Release build process has been refactored and uses pinned dependencies for better reproducibility now (#2345, #2336).
  (contributed by @hoffie, @softins)
  * Internal: Moved documentation files into docs/ folder to clean up root folder (#2283).
  (contributed by @ann0see)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1661688000">- Update to 3.9.0
  * Feature: Added EXPERIMENTAL new JSON-RPC interface to control client and server (see docs/JSON-RPC.md for details) (#1975, #2505).
  (contributed by @dtinth, @Rob-NY)
  * GUI: Translations have been updated:
  Chinese, by @BLumia (#2719)
  Dutch, by @henkdegroot (#2708)
  French, by @jujudusud (#2704, #2729)
  German, by @ann0see (#2748)
  Italian, by @dzpex (#2739)
  Korean, by @bagjunggyu (assisted by @hoffie) (#2685, #2741)
  Polish, by @SeeLook (#2735)
  Portuguese Brazilian, by @melcon (#2728)
  Portuguese European, by @melcon (#2747)
  Slovak, by @jose1711 (#2732)
  Spanish, by @ignotus666 (#2706)
  * GUI: Client: Added instructions for setting buffers when using Pipewire (#2645).
  (contributed by @gilgongo)
  * GUI: Client: Fix a bug where a blank line is shown after some client’s name in the mixer board in some conditions (#2542).
  (contributed by @dtinth)
  * GUI: Client: Include ASIO references in Windows ASIO version (#2605).
  (contributed by @henkdegroot)
  * GUI: Client: Removed wrongly mentioned "URL" from help texts (#2608).
  (contributed by @ann0see)
  * GUI: Client: Rephrase mute options in help text (#2673).
  (contributed by @pljones)
  * GUI: Client: Simplify device driver error message on Windows by removing unneeded HTML (#2496).
  (contributed by @ann0see)
  * GUI: Client: What's This Text and Tooltip updated for LEDs and Connection Status (#2644).
  (contributed by @henkdegroot)
  * GUI: Server: Amend server registration, added server list persistence (#2199).
  (contributed by @pljones)
  * GUI: Server: Adjust Server Language combo box length to fit into layout properly (#2424).
  (contributed by @pljones)
  * GUI: Server: Re-order Recorder widgets for better use of space (plus Qt6 compliance) (#2427).
  (contributed by @pljones)
  * GUI: Fix (hopefully) all remaining references to "directory server" in displayed messages to say "directory" (#2710).
  (contributed by @pljones)
  * GUI: Improved Country selection handling to work with Qt6 and cover 53 previously unsupported territories (#2409).
  (contributed by @hoffie)
  * GUI: Improved translator experience by using substitutions instead of concatenations (#2646).
  (contributed by @ann0see)
  * GUI: Removed occurrences of plain name "Jamulus" in translatable texts (#2609).
  (contributed by @ann0see)
  * Accessibility: Sound Alert for new person and new chat message (#2640).
  (contributed by @chigkim)
  * Accessibility: Combine all the client info, so screen reader users don't have to track down multiple places (#2638).
  (contributed by @chigkim)
  * Accessibility: Added name and instrument to accessibility labels for mute, solo, group (#2639).
  (contributed by @chigkim)
  * Client: Avoid losing gain changes (#2737).
  (contributed by @hoffie)
  * Client: Fix potential long delay in sending fader changes to the server (#2535).
  (contributed by @softins)
  * Client: Refactored JACK- and ASIO-related logic (#2443).
  (contributed by @hoffie)
  * Client: Removed the translation for the CLI version text output (#2602).
  (contributed by @henkdegroot)
  * Server: Fix loading of persistent server list entries (#2631).
  (contributed by @pljones)
  * Server: Headless Server now unregisters correctly (#2633).
  (contributed by @pljones)
  * Server: Clarify code for handling of requests for the server list (#2643).
  (contributed by @pljones)
  * Server: Improvements to the start up logging for the server list filter (#2647).
  (contributed by @pljones)
  * Server: Set default directory to "None" when not set in ini file or command line (#2442).
  (contributed by @softins)
  * Bug Fix: Build: .deb dependency fix to allow Jamulus being installed on Ubuntu 18.04 (#2423).
  (contributed by @hoffie)
  * Bug Fix: Client/Server: corrected operation of message ack timer (#2517).
  (contributed by @softins)
  * Linux: Added the Jamulus Server desktop icon to the Debian/Ubuntu build and fixed SVG icon installation location (#2460).
  (contributed by @hoffie)
  * Linux: Removed unused linux/deploy_linux.sh script (#2512).
  (contributed by @ann0see)
  * Linux: Ubuntu: Added new runtime dependency. You will need to added the "universe" apt repository (on Ubuntu only) (#2721).
  (contributed by @pljones)
  * Linux: Updated package author information (#2652).
  (contributed by @hoffie)
  * Documentation: Updated the link to "Running a server" web page (#2419).
  (contributed by @jujudusud)
  * Documentation: Document compile time options to COMPILING.md (#2707).
  (contributed by @ann0see)
  * Documentation: Added high-level technical documentation for the Jamulus protocol (#2337).
  (contributed by @emlynmac)
  * Documentation: Made man page and help output more consistent. (#2448).
  (contributed by @gilgongo)
  * Documentation: Rewrite some parts of COMPILING.md and CONTRIBUTING.md to stay up to date and enable clearer contribution guidelines (#2561).
  (contributed by @ann0see)
  * Build: Added nojsonrpc qmake CONFIG option to remove JSON-RPC support (#2660).
  (contributed by @pljones)
  * Build: Make serveronly more comprehensive (#2551).
  (contributed by @pljones)
  * Build: Rename existing define to JACK_ON_WINDOWS (#2525).
  (contributed by @pljones)
  * Build: Moved CodeQL from Mac to Mac Legacy to work around signing incompatibility (#2564).
  (contributed by @softins)
  * Build: Provide unsigned iOS builds for easy install on iOS devices (#2355).
  (contributed by @ann0see)
  * Build: Added macOS M1 (arm64) support (#2682).
  (contributed by @hoffie)
  * Build: macOS will now be built with Qt 6.3.1 for better support of modern versions of macOS. Users of macOS 10.14 or earlier must from now use the legacy build or compile from source (#2672).
  (contributed by @ann0see)
  * Build: Improved grep usage in scripts #2421 (#2397).
  (contributed by @ann0see)
  * Build: Removed broken QMAKE_APPLICATION_BUNDLE_NAME. logic (#2477).
  (contributed by @hoffie)
  * Build: Initial support for building with Qt6 has been implemented (@dcorson-ticino-com, @softins) (#2299).
  (contributed by @hoffie)
  * Build: Updated aqt to v2.1.0 due to reliability reasons (#2597).
  (contributed by @ann0see)
  * Autobuild: Major overhaul, incorporating improvements in performance
  * Coding style and static checks for shell scripts are now enforced (#2635).
  * Build workflow download and cache optimisations (#2284, #2498, #2499, #2642).
  * Parallelisation of build processes (#2444, #2445)
  * Build script refactoring (#2284, #2451, #2470, #2473, #2476, #2489, #2501, #2502, #2509, #2514, #2527, #2540, #2584, #2642).
  (contributed by @hoffie)
  * Autobuild: Added experimental support for armhf (Raspberry-compatible) Linux .deb packages (#2526).
  (contributed by @hoffie)
  * Autobuild: Fix iOS artifact name (#2619).
  (contributed by @hoffie)
  * Autobuild: Build macOS .dmg files by create-dmg for building compatibility with further versions of macOS #2420 (#2207).
  (contributed by @ann0see)
  * Autobuild: Stop the build if the audio SDK is missing (#2536).
  (contributed by @pljones)
  * Autobuild: Stop running Autobuild if only documentation is updated to avoid wasting computation time (#2532).
  (contributed by @ann0see)
  * Autobuild: Build Windows version on latest build environment. This upgrades the Windows build process (#2649).
  (contributed by @ann0see)
  * Autobuild: Make Qt downloads on Windows more reliable by re-trying downloads (#2333).
  (contributed by @ann0see)
  * Autobuild: Backport Oboe's fixes CodeQl overflow warnings (#2548).
  (contributed by @ann0see)
  * Code: code restructuring to reduce cross-dependencies (CHighPrecisionTimer) (#2637).
  (contributed by @pljones)
  * Internal: Improved analyze_git_references.py script (#2471).
  (contributed by @hoffie)
  * Internal: Improved and reorganized git/Changelog scripts (#2656).
  (contributed by @hoffie)
  * Internal: Added .editorconfig for cross-language standardized indentation and line endings (#2585).
  (contributed by @hoffie)
  * Internal: Applied a consistent coding style to scripts (#2547, #2582).
  (contributed by @hoffie)
  * Internal: Added make clang_format helper command to simplify code formatting for contributors (#2258).
  (contributed by @hoffie)
  * Internal: Added debian/ folder to .gitignore file to ensure build files are not added to git (#2464).
  (contributed by @ann0see)
  * Internal: Check coding style on macOS/iOS code files (.mm extension) (#1871).
  (contributed by @ngocdh)
  * Internal: Use TODO and TEST comments instead of un-indenting with clang-format off/on (#2600).
  (contributed by @pgScorpio)
  * Internal: Removed unneeded white-space in all files and streamline line endings (#2402).
  (contributed by @ann0see)
  * Internal: Applied standard style to .md files (#2549).
  (contributed by @ann0see)
  * Internal: Move sound API files into src/sound folder. Contributors will now find the sound.cpp/sound.h/sound.mm in the src/sound folder for consistency (#2575).
  (contributed by @ann0see)
  * Internal: Move translation files one level up to make finding them easier for translators (#2576).
  (contributed by @ann0see)
  * Internal: Moved entitlements file to mac/ folder to clean up the repo root (#2529).
  (contributed by @ann0see)
  * Internal: Rename LED resources (#2621).
  (contributed by @henkdegroot)
  * Internal: Improved release contributor tooling (#2411).
  (contributed by @hoffie)
  * Internal: Improved Changelog release tooling (#2485, #2661).
  (contributed by @hoffie)
  * Internal: Moved outdated VST code on feature branch since there hasn't been any active development for a long time (#2461).
  (contributed by @ann0see)
  * Internal: Removed outdated qt-installer-windows.qs since we no longer use Travis CI (#2516).
  (contributed by @ann0see)
- Added pkgconfig(Qt5Multimedia) BuildRequires, as upstream depends on it.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1667736000">- Update to 3.9.1
  * Client: Improved performance of GUI when someone joins or leaves a server (#2738).
    (contributed by @ann0see)
  * Client: Bugfix: Removed channel number from saved fader tag when --ctrlmidich is in use. In this release --cleanuplegacyfadersettings can be used on any saved fader settings that have been corrupted to attempt recovery (#2839).
    (contributed by @pljones)
  * Bugfix: Correct new channel not being shown to others if it connects with null channel info (#2754, #2774).
    (contributed by @softins)
  * Server: Fixed --serverinfo country code misinterpretation introduced in Jamulus 3.9.0 on Qt6-based builds such as Mac (#2829).
    (contributed by @hoffie)
  * Server: Added support for ISO country codes (de, gb, nl, ...) in --serverinfo (#2841).
    (contributed by @hoffie)
  * Directory: Bug: Correct default "self" address for directory, enabling use as a server (#2812).
    (contributed by @pljones)
  * Directory: Bug: Use configured Directory Public IP for Client when hole-punching (#2819).
    (contributed by @pljones)
  * CLI: Rephrased recording options help text on the --help output for clearer description of their functionality (#2832).
    (contributed by @ann0see)
  * Windows: Upgraded JACK build to use JACK 1.9.21 (#2665).
    (contributed by @ann0see)
  * Translations have been updated (#2835, #2852, #2856, #2915):
    (mainly translated on @weblate by multiple translators)
    Chinese, by @BLumia
    Dutch, by @henkdegroot
    French, by @trebmuh, @jujudusud, J. Lavoie
    German, by @ann0see, Hans Spoerer
    Korean, by @MarongHappy
    Norwegian Bokmål, by @comradekingu
    Polish, by @SeeLook
    Portuguese European, by @mansil
    Slovak, by @jose1711
    Spanish, by @ignotus666
    Swedish, by @tygyh, @comradekingu
  * Translation: Added nb_NO App translation (#2849, #2852).
    (contributed by @comradekingu, @ann0see)
  * Refactoring: Moved around files to clean up the repository (#2822, #2824, #2834, #2838).
    (contributed by @ann0see)
  * Build: Android: Export NDK root (#2764).
    (contributed by @pljones)
  * Build: Debian/Ubuntu: Fixed .deb Changelog generation (#2793).
    (contributed by @hoffie)
  * Build: Debian/Ubuntu: Fixed displayed version for non-release builds to removed incorrect -dirty suffixes (#2802).
    (contributed by @hoffie)
  * Build: Debian/Ubuntu: Renamed headless .deb file to jamulus-headless_[version]_ubuntu_[arch].deb for consistency with binary. This might need changes to scripts downloading this .deb file (#2821).
    (contributed by @ann0see)
  * Build: Debian/Ubuntu: Added .deb aarch64 (Raspberry) 64bit builds (#2895).
    (contributed by @hoffie)
  * Build: Mac: Combined Intel &amp; M1 builds into a single Universal binary and improved M1 -dev build user-friendliness by introducing ad-hoc signing support (#2808, #2825).
    (contributed by @hoffie)
  * Build: Bump versions: actions/upload-artifact from 2 to 3 (#2796), actions/cache from 2 to 3 (#2798), DoozyX/clang-format-lint-action from 0.12 to 0.14 (#2797), actions/checkout from 2 to 3 (#2799).
    (contributed by @dependabot)
  * Build: Updated bundled Qt6 to version 6.3.2 (#2846).
    (contributed by @github-actions)
  * Internal: Enabled automated dependency updates via dependabot and custom automation (#2777, #2778, #2801, #2803).
    (contributed by @hoffie)
  * Internal: Hardened build scripts and tooling against silent failures (#2794).
    (contributed by @hoffie)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1697025600">- Update to 3.10.0
  * Build: Mac: Keep the signing-related keychain unlocked (#2927).
    (contributed by @hoffie)
  * Build: Updated bundled Qt6 to version 6.5.1 (#3070).
    (contributed by @github-actions)
  * Docs: Added JSON-RPC server connection tips (#3101).
    (contributed by @mcfnord)
  * Translation: Added trebmuh to create-translation-issues.sh (#3147).
    (contributed by @jujudusud)
  * GUI: Fix some accelerator key conflicts, and fix ellipses in Norwegian (#3156).
    (contributed by @softins)
  * Client: (Refactor) Prevent multiplication result converting to larger type (#3164).
    (contributed by @softins)
  * Client: Added SRV-based virtual hosting support (#2930).
    (contributed by @hoffie)
  * Server: Improved --serverinfo argument validation (#2951).
    (contributed by @hoffie, @pljones)
  * Server: ISO country codes can now be supplied in upper or lower case (#2934).
    (contributed by @Rob-NY)
  * Server: Use native file selection dialog for recording directory and
    persistence file to allow read and write access outside of the macOS sandbox (#3009).
    (contributed by @ann0see)
  * Server: Rename --directoryserver to --directoryaddress (and internal changes) (#3017).
    (contributed by @pljones)
  * Server: Save the HTML formatting in Server Welcome Message. (Applies to the GUI Server.)
    (#3058). (contributed by @pljones)
  * Windows: Windows 64bit releases use Qt 6.5.2 now.
    Jamulus will from now on only support Windows 10 and above (#2300).
    (contributed by @hoffie)
  * Linux: Debian users can now use the official PPA to get automatic updates.
    See the Linux install page on jamulus.io for more information (#3013).
    (contributed by @ann0see)
  * Mac: The legacy build now uses the macOS 13.1 SDK which is unsupported by Qt 5.9.9.
    We still provide the legacy build, but from now on consider it as deprecated.
    You are advised to upgrade your OS (#3066).
    (contributed by @ann0see)
  * Mac: Enable dark-mode support on non legacy builds (#2833, #3008).
    (contributed by @ann0see)
  * Mac: Fixed building Jamulus via Xcode (#3076).
    (contributed by @ann0see)
  * Android: Updated Oboe to version 1.7.0 (#3000).
    (contributed by @ann0see)
  * Android: Fixed a crash on session startup that occurs on many devices (#2905).
    (contributed by @danryu)
  * iOS: Build App with higher SDK version (#3073).
    (contributed by @ann0see)
  * GUI: Make checkboxes self-labelling (#2996).
    (contributed by @pljones)
  * RPC: Added new command line switch (--jsonrpcbindip) to specify the bind address
    for the RPC server (#2917). (contributed by @Rob-NY)
  * RPC: jamulusserver/getClients method expanded to include all elements
    of a user profile as well as the number of active client connections (#2918).
    (contributed by @Rob-NY)
  * RPC: Rename directoryServer to directory in jamulusserver/getServerProfile response (#3048).
    (contributed by @pljones)
  * Translations have been updated (#3158, #3155, #3119, #3150, #3113, #3059, #2921, #2923, #2998):
    (mainly translated on @weblate by multiple translators)
    Chinese, by @yangyangdaji, @cup113, @BLumia, @SoulGI, @MarongHappy, Kingo Bingo
    Dutch, by @henkdegroot, @jerone
    French, by @trebmuh, @jujudusud, @cosas
    German, by @ann0see, Ettore Atalan, Iva Hristova, Katja Flinzner
    Italian, by @dzpex, Gico2006, Massimo Pissarello
    Korean, by @MarongHappy
    Norwegian Bokmål, by @comradekingu, Wdt@.+_-
    Polish, by @gnu-ewm, @C10udburst
    Portuguese Brazilian, by @melcon, @gbonaspetti, @adoniasalmeida, Zer0-Zer0, @fnogcps
    Portuguese European, by @melcon
    Spanish, by @ignotus666, gallegonovato
    Swedish, by @Skarvinius
  * Translation: Document translation process shift to Weblate.
    Translators can from now one use Weblate for translations (#2880).
    (contributed by @ann0see)
  * Docs: Removed docs/RELATED-PROJECTS.md from repository.
    The up to date version is now on jamulus.io (#3091).
    (contributed by @mcfnord)
  * Updated Opus to v1.4 (#3099)
    (contributed by @ann0see)
  * Build: Updated bundled Qt6 to version 6.5.2 (#3110).
    (contributed by @app/github-actions)
  * Build: Updated Windows Installer base (NSIS) to version 3.09 (#3097).
    (contributed by @app/github-actions)
  * Build: Updated build dependencies: maxim-lobanov/setup-xcode to 1.5.1 (#2936),
    DoozyX/clang-format-lint-action to 0.16 (#3053), dev-drprasad/delete-tag-and-release
    to 0885ecc4123e071dd1a8be04d3a0578f5390581c (#3027).
    (contributed by @app/dependabot)
  * Build: Enabled signing of macOS binary if a self signed certificate is given (#2944).
    (contributed by @ann0see)
  * Build: macOS now uses the 13.1 SDK for better compatibility with modern macOS versions (#3106)
    (contributed by @ann0see)
  * Build: Updated clang version to Ubuntu LTS version (#3020).
    (contributed by @pljones)
  * Build: Updated bundled JACK (Windows-only) to version 1.9.22 (#3031).
    (contributed by @ann0see)
  * Autobuild: Hardened detection of QT 5 builds for macOS and iOS (#3057).
    (contributed by @ann0see)
  * Autobuild: Modernised/fixed some Python and added linting to CI (#3052).
    (contributed by @declension)
  * Refactor: use size_t for vector and array indexes that must not be negative (#2893).
    (contributed by @pljones)
  * Internal: Moved main branch from master to main. If you compile Jamulus from source,
    you will need to update your local repository.
    See discussion #2984 for more information. (#2840)
    (contributed by @pljones, @ann0see)
  * Internal: Clarified licensing terms for Autobuild scripts (#3077).
    (contributed by @ann0see)
  * Internal: Use native gh command for release management and uploading artefacts (#3075).
    (contributed by @ann0see)
  * Internal: Include HTML in strDirectoryTypeWT to make translation easier (#2894).
    (contributed by @pljones)
  * Internal: Renamed English translation file of windows installer to en_GB (#2929).
    (contributed by @ann0see)
  * Internal: Fix C++ build warnings regarding copy constructor and assignment functions (#2946).
    (contributed by @hoffie)
  * Internal: Reduced permissions in Autobuild for security hardening (#2953).
    (contributed by @ann0see)
  * Internal: The JACK build will now install directly from the
    JACK GitHub repository (#3003, #3014).
    (contributed by @ann0see)
  * Internal: Improved Qt Creator 5 compliance of Jamulus.pro (#3010).
    (contributed by @pljones)
  * Internal: Improved maintainability of Jamulus.pro by using global definitions (#3046).
    (contributed by @ann0see)</changelog>
</package>
<package pkgid="796d2a61a4a7edfe98230a7f779ca1d20842c9829f0290a8f68e52df7330588425eb6bb64369ebc31424f3f05b5d2d6398a97e14c35d205e2927504ec923dd4b" name="KEALib-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="bp160.1.14"/>
  <changelog author="guillaume@opensuse.org" date="1526472000">- Initial version 1.4.6
- Add patch to be able to build GDAL plugin:
  * fix_build_with_gdal.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526472001">- Update to 1.4.7
- Backport upstream patch to fix bin/* installation
  * Fixed_out_of_tree_builds.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526472002">- Disable GDAL plugin by default</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531483200">- Move kea-config to devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Polish spec file with spec-cleaner
- Use more of cmake macros
- Run test(s)
- Fix dependencies of devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update to version 1.4.10:
  * Remove requirement to build in C++98 mode. Fixes linking
    against HDF5 built in C++11 mode.
  * Fix C++17 compilation
  * Fix NZTM problem in Imagine driver
- Changes for version 1.4.9:
  * Fix output from "kea-config --hdflibs" so it works with libtool
  * Tidy directory structure by removing "trunk" subdirectory.
- Changes for version 1.4.8:
  * Improvements to Arc and Imagine Drivers
  * Installer for ArcGIS, ArcPro and Imagine.
  * Improvements to cmake scripts by Hiroshi Miura. Among other
    things, out of tree builds now work.
  * Fix building against recent HDF5 on Windows
- Drop upstreamed patches:
  * Fixed_out_of_tree_builds.patch
  * fix_build_with_gdal.patch</changelog>
  <changelog author="jengelh@inai.de" date="1534334400">- Update descriptions. Drop empty kealib BRPM.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1673870400">- Update to version 1.5.0:
  * Note: this release breaks the ABI - you will need to re-compile.
    Also, the GDAL plugin will longer work with GDAL &lt; 3; but will now work with GDAL 3.6.x.
  * Implement Dataset.DeleteLayer()
  * Support for 64 bit int images and nodata in the GDAL driver for GDAL &gt;= 3.5
  * Print error on file open failure in GDAL driver
  * Set the attribute chunksize as passed in, not zero
  * Add support for ArcGIS 10.9 and ArcPro 2.7 and 2.8
  * New kealib Python bindings using libawkward for accessing neighbours
  * Support for GetSpatialRef() etc and other various GDAL 3.x changes in driver.
  * Make driver more robust when dealing with corrupted files esp. when the RAT cannot be read.
  * Protect driver internal data structures with mutexes - should be totally threadsafe now.
- Added patch 0001-fix-shebang-interpreter.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1679054400">- Modernise spec file
- Fix building for Leap</changelog>
</package>
<package pkgid="1b89c77c4d5977e1acefa88770b43c662d5dfe70848667eb5b5d54278b9242e21e9750380dd7fc07541479c6a5aff96bd3049113e60aded2e3c43b1ee617a5eb" name="Komikku" arch="noarch">
  <version epoch="0" ver="1.75.0" rel="bp160.1.4"/>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1736856000">- update to 1.67.0:
  * [Reader] Paused pages animations when obscured
  * [Servers] Anteiku Scans (FR): Update
  * [Servers] Asura Scans For Free (EN): Update
  * [Servers] ED Scanlation (FR): Update
  * [Servers] EZmanga (EN): Update
  * [Servers] Kewn Scans (EN): Update
  * [Servers] MonkeyUser (EN): Update
  * [Servers] Pepper&amp;Carrot: Update
  * [Servers] Starbound Scans (FR): Update
  * [Servers] Terco Scans (ES): Update
  * [Servers] Webtoon Hatti (TR): Update
  * [Servers] Rukav Inari (ES): Disabled
  * [Servers] MangaWeebs (EN): Disabled
  * [Servers] LSComic (EN): Disabled
  * [Servers] Hunlight Scans (EN): Disabled
  * [Servers] Mode Scanlator (pt_BR): Disabled
  * [Servers] Best Manga (RU): Disabled
  * [Servers] Atikrost (TR): Disabled
  * [Servers] Perf Scan (FR): Disabled
  * [L10n] Updated Bulgarian, German and Polish translations
- update to 1.66.0:
  * [Servers] Added Asura Scans For Free (EN)
  * [Servers] Asura Scans (EN): Update
  * [Servers] MangaDex: Ignored externals and empty chapters
  * [Servers] MangaDex: Added Genres filter
  * [Servers] MangaHub: Avoided exceeding API rate limiting
  * [Servers] MangaLib (RU): Update
  * [Servers] Mangareader (to): Fixed decoding of scrumbled images
  * [L10n] Updated Finnish, Portuguese (Brazil), Russian, Spanish, Swedish and Ukrainian translations
- fix build by escaping quotes, adding fix-quotes.patch (fixes boo#1234719)
- add rudimentary tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1736856001">- missed a second syntax error</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1737115200">- Fix build without %check (boo#1227364)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1737979200">- update to 1.68.0:
  * [Reader] Webtoon pager: Fixed pages jumping on initialization
  * [Servers] Added Poseidon Scans (FR)
  * [Servers] Mangago (EN): Update
  * [L10n] Added Tamil translation
  * [L10n] Updated Chinese (Simplified) and Finnish translations</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1739448000">- update to 1.70.0:
  * [Card] Chapters list: Added Scanlators filter
  * [Servers] Desu (RU): Update
  * [Servers] Lector manga: Re-enabled
  * [Servers] Read Comic Online (EN): Update
  * [L10n] Updated Dutch, French, Swedish and Tamil translations
- update to 1.69.0:
  * [Servers] EZmanga (EN): Update
  * [Servers] Manga Demon (EN): Update
  * [Servers] MangaHub (EN): Update
  * [Servers] MangaWorld (IT): Update
  * [Servers] Neko Scans (ES): Update
  * [Servers] Sinensistoon (pt_BR): Renamed SCtoon (fusion with Cerise Scan)
  * [Servers] Cerise Scan (pt_BR): Disabled
  * [Servers] MangaLife (EN): Disabled
  * [Servers] MangaSee (EN): Disabled
  * [L10n] Added Czech translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741003200">- update to 1.71.0:
  * [Explorer] Global search: Added ability to cancel search
  * [Servers] Comic Fans (EN): Disabled
  * [Servers] Perf Scan (FR): Re-enabled
  * [Servers] MangaCrab (ES): Update
  * [Servers] TCB Scans (EN): Update
  * [Servers] Terco Scans (EN): Update
  * [Servers] Usagi (RU): Update
  * [Servers] Webtoon: Fixed covers
  * [L10n] Added Persian translation
  * [L10n] Updated French and Russian translations
- adjust license, as appdata.xml has a different license
- update runtime dependencies, according to requirements.txt</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741608000">- update to 1.72.0:
  * [Servers] Added Nix of Nothing (EN)
  * [Servers] Added Three Panel Soul (EN)
  * [Servers] Added Wild Life (EN)
  * [Servers] Cartel De Manhwas (ES): Update
  * [Servers] MangaNato (EN): Update
  * [Servers] Terco Scans (EN): Update
  * [Servers] Tres Daos (ES): Update
  * [Servers] Crunchyroll (EN): Disabled
  * [Servers] Iris Scanlator (pt_BR): Disabled
  * [Servers] ReaperScans (FR,ID,TR): Disabled</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1742558400">- update to 1.73.0:
  * [Library] Added ability to update with &lt;Ctrl+r&gt; shortcut
  * [Card] Info: Improved display of Genres using badges
  * [Servers] Added MangaBin (EN)
  * [Servers] Added Vortex Scans For Free (EN)
  * [Servers] Flame Comics (EN): Update
  * [Servers] Manhuaus (EN): Update
  * [Servers] Perf Scan (FR): Update
  * [Servers] Remanga (RU): Update
  * [L10n] Added Hungarian translation
- remove patch fix-quotes.patch, as the patch is not needed for
  python313</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1743163200">- update to 1.74.0:
  * [Library] Fixed inconsistent background color introduced in previous version
  * [Servers] Aurora Scan (pt_BR): Disabled
  * [Servers] Noromax (ID): Update
  * [Servers] Tecno Scans (EN): Update
  * [Servers] Wicked Witch Scan (pt_BR): Disabled
  * [Servers] Up-to-date modules feature: an app restart is now required for a change to take effect (modules update or setting activation/deactivation)
  * [L10n] Updated Bulgarian, Czech, French, Russian and Ukrainian translations</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1743768000">- update to 1.75.0:
  * [Servers] ريبر العربي (AR): Disabled
  * [Servers] 3asq (AR): Disabled
  * [Servers] Dango Scan (pt_BR): Update
  * [Servers] DB New Hope (EN/ES/FR): Update
  * [Servers] Dynasty Reader (EN): Update
  * [Servers] EZmanga (EN): Ignored chapters with price
  * [Servers] Mangago (EN): Update
  * [Servers] Mangaowl (EN): Update
  * [Servers] MangaReader (EN): Update
  * [Servers] MangaWorld (IT): Update
  * [Servers] Manhwa Hentai (EN): Disabled
  * [Servers] Mint Manga (RU): Disabled
  * [Servers] Nazarick Scan (pt_BR): Update
  * [Servers] PhenixScans (FR): Update
  * [Servers] Reaper Scans (EN): Update
  * [Servers] Terco Scans (EN): Update
  * [Servers] Tres Daos (ES): Update
  * [Servers] View Comics (EN): Update
  * [Servers] Xoxocomics (EN): Update
  * [L10n] Updated French and Russian translations</changelog>
</package>
<package pkgid="b29844837db70c78f977fd582e62aa83cbdd848c89e98292c93c37f8a4ba9908b02622ddb8fd9ccff4fda4fd67096e3674c950d4227697bd84db29f95444d020" name="Komikku-lang" arch="noarch">
  <version epoch="0" ver="1.75.0" rel="bp160.1.4"/>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1736856000">- update to 1.67.0:
  * [Reader] Paused pages animations when obscured
  * [Servers] Anteiku Scans (FR): Update
  * [Servers] Asura Scans For Free (EN): Update
  * [Servers] ED Scanlation (FR): Update
  * [Servers] EZmanga (EN): Update
  * [Servers] Kewn Scans (EN): Update
  * [Servers] MonkeyUser (EN): Update
  * [Servers] Pepper&amp;Carrot: Update
  * [Servers] Starbound Scans (FR): Update
  * [Servers] Terco Scans (ES): Update
  * [Servers] Webtoon Hatti (TR): Update
  * [Servers] Rukav Inari (ES): Disabled
  * [Servers] MangaWeebs (EN): Disabled
  * [Servers] LSComic (EN): Disabled
  * [Servers] Hunlight Scans (EN): Disabled
  * [Servers] Mode Scanlator (pt_BR): Disabled
  * [Servers] Best Manga (RU): Disabled
  * [Servers] Atikrost (TR): Disabled
  * [Servers] Perf Scan (FR): Disabled
  * [L10n] Updated Bulgarian, German and Polish translations
- update to 1.66.0:
  * [Servers] Added Asura Scans For Free (EN)
  * [Servers] Asura Scans (EN): Update
  * [Servers] MangaDex: Ignored externals and empty chapters
  * [Servers] MangaDex: Added Genres filter
  * [Servers] MangaHub: Avoided exceeding API rate limiting
  * [Servers] MangaLib (RU): Update
  * [Servers] Mangareader (to): Fixed decoding of scrumbled images
  * [L10n] Updated Finnish, Portuguese (Brazil), Russian, Spanish, Swedish and Ukrainian translations
- fix build by escaping quotes, adding fix-quotes.patch (fixes boo#1234719)
- add rudimentary tests</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1736856001">- missed a second syntax error</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1737115200">- Fix build without %check (boo#1227364)</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1737979200">- update to 1.68.0:
  * [Reader] Webtoon pager: Fixed pages jumping on initialization
  * [Servers] Added Poseidon Scans (FR)
  * [Servers] Mangago (EN): Update
  * [L10n] Added Tamil translation
  * [L10n] Updated Chinese (Simplified) and Finnish translations</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1739448000">- update to 1.70.0:
  * [Card] Chapters list: Added Scanlators filter
  * [Servers] Desu (RU): Update
  * [Servers] Lector manga: Re-enabled
  * [Servers] Read Comic Online (EN): Update
  * [L10n] Updated Dutch, French, Swedish and Tamil translations
- update to 1.69.0:
  * [Servers] EZmanga (EN): Update
  * [Servers] Manga Demon (EN): Update
  * [Servers] MangaHub (EN): Update
  * [Servers] MangaWorld (IT): Update
  * [Servers] Neko Scans (ES): Update
  * [Servers] Sinensistoon (pt_BR): Renamed SCtoon (fusion with Cerise Scan)
  * [Servers] Cerise Scan (pt_BR): Disabled
  * [Servers] MangaLife (EN): Disabled
  * [Servers] MangaSee (EN): Disabled
  * [L10n] Added Czech translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741003200">- update to 1.71.0:
  * [Explorer] Global search: Added ability to cancel search
  * [Servers] Comic Fans (EN): Disabled
  * [Servers] Perf Scan (FR): Re-enabled
  * [Servers] MangaCrab (ES): Update
  * [Servers] TCB Scans (EN): Update
  * [Servers] Terco Scans (EN): Update
  * [Servers] Usagi (RU): Update
  * [Servers] Webtoon: Fixed covers
  * [L10n] Added Persian translation
  * [L10n] Updated French and Russian translations
- adjust license, as appdata.xml has a different license
- update runtime dependencies, according to requirements.txt</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1741608000">- update to 1.72.0:
  * [Servers] Added Nix of Nothing (EN)
  * [Servers] Added Three Panel Soul (EN)
  * [Servers] Added Wild Life (EN)
  * [Servers] Cartel De Manhwas (ES): Update
  * [Servers] MangaNato (EN): Update
  * [Servers] Terco Scans (EN): Update
  * [Servers] Tres Daos (ES): Update
  * [Servers] Crunchyroll (EN): Disabled
  * [Servers] Iris Scanlator (pt_BR): Disabled
  * [Servers] ReaperScans (FR,ID,TR): Disabled</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1742558400">- update to 1.73.0:
  * [Library] Added ability to update with &lt;Ctrl+r&gt; shortcut
  * [Card] Info: Improved display of Genres using badges
  * [Servers] Added MangaBin (EN)
  * [Servers] Added Vortex Scans For Free (EN)
  * [Servers] Flame Comics (EN): Update
  * [Servers] Manhuaus (EN): Update
  * [Servers] Perf Scan (FR): Update
  * [Servers] Remanga (RU): Update
  * [L10n] Added Hungarian translation
- remove patch fix-quotes.patch, as the patch is not needed for
  python313</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1743163200">- update to 1.74.0:
  * [Library] Fixed inconsistent background color introduced in previous version
  * [Servers] Aurora Scan (pt_BR): Disabled
  * [Servers] Noromax (ID): Update
  * [Servers] Tecno Scans (EN): Update
  * [Servers] Wicked Witch Scan (pt_BR): Disabled
  * [Servers] Up-to-date modules feature: an app restart is now required for a change to take effect (modules update or setting activation/deactivation)
  * [L10n] Updated Bulgarian, Czech, French, Russian and Ukrainian translations</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1743768000">- update to 1.75.0:
  * [Servers] ريبر العربي (AR): Disabled
  * [Servers] 3asq (AR): Disabled
  * [Servers] Dango Scan (pt_BR): Update
  * [Servers] DB New Hope (EN/ES/FR): Update
  * [Servers] Dynasty Reader (EN): Update
  * [Servers] EZmanga (EN): Ignored chapters with price
  * [Servers] Mangago (EN): Update
  * [Servers] Mangaowl (EN): Update
  * [Servers] MangaReader (EN): Update
  * [Servers] MangaWorld (IT): Update
  * [Servers] Manhwa Hentai (EN): Disabled
  * [Servers] Mint Manga (RU): Disabled
  * [Servers] Nazarick Scan (pt_BR): Update
  * [Servers] PhenixScans (FR): Update
  * [Servers] Reaper Scans (EN): Update
  * [Servers] Terco Scans (EN): Update
  * [Servers] Tres Daos (ES): Update
  * [Servers] View Comics (EN): Update
  * [Servers] Xoxocomics (EN): Update
  * [L10n] Updated French and Russian translations</changelog>
</package>
<package pkgid="3316ca91ca4808f91c1a8754a89511f417260b5d65bab778ee8b0f135a1a70cf64ae4a279932beb419d600f5656774681e1265250c55cbf8e2662faf0d4de6fc" name="LHAPDF-devel" arch="x86_64">
  <version epoch="0" ver="6.5.4" rel="bp160.1.14"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566302400">- Update to version 6.2.3:
  * Add a couple of extra trim() calls to path strings given to
    the Fortran API.
  * Apply lhapdf script improvement from Ivan Razumov / Genser.
- Changes from version 6.2.2:
  * Don't pop the final path entry off in the pathsPrepend and
    pathsAppend functions: the compile-time fallback may have been
    disabled.
  * Add a 'show' option to the lhapdf script.
  * Adapt MPI file-reading patch from Stefan Hoeche. Enable with
  - -enable-mpi to configure.
  * Rewrite the lhapdf data-manager script to use argparse, for
    compatibility with Python 3.
  * Apply compiler optimisation bypass "volatile" hack to default
    data path insertion. Thanks to Zahari Kassabov.
  * Add legend PDF name aliasing to plotpdfs
  * Explicitly catch x &gt; xMax error in ContinuationExtrapolator.
  * Don't require the presence of Content-Length in HTTP header.
  * Utils.h: Fix separator bug in join() function.
  * Remove 'const's from return-by-value types in KnotArray.h, to
    keep icpc happy.
  * Add lhapdf_lambda4/5 functions in the Fortran interface.
  * Remove unwanted pid argument from the Fortran xfx*_stdpartons
    functions.
  * Move Config::get() static function from header to .cc, since a
    singleton needs to only 'live' in one compilation unit.
- Drop LHAPDF-pdfset-download-url-update.patch: incorporated
  upstream.
- Replace env-based hashbang with one explicitly referring to the
  correct binary.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588075200">- Use python-rpm-macros to allow building python mod for all
  supported versions of python; copy source into a different
  directory for each python version and configure, build, and
  install them correctly.
- Move python dependent binary to python subpackage (python3
  only).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594987200">- Update to version 6.3.0:
  * Provide setter methods on PDF for the flavour list and
    setPositive behaviour.
  * Convert the AlphaS raw pointer on PDF to a std::unique_ptr.
  * Update the cache strategy for 'replays', and make cache size
    and search/update strategy configurable at runtime.
  * Extend caches to multi-level, searching through the N previous
    calls for x and Q2 independently.
  * Make the caches fully thread-safe rather than just
    initialization-safe, by use of maps on thread IDs.
  * Extend to cross-flavour, subgrid-specific x and Q2 caches.
  * Use the x and Q2 knot hashes in cache-flushing tests.
  * Add a hash function computation and comparator to the
    KnotArray1F.
  * Convert caching struct acquisition to use a Meyers Singleton
    pattern, which guarantees thread-locality.
  * Separate caching of x and Q2 variables in the
    LogBicubicInterpolator: evidence suggests that these may be
    updated at very different rates.
  * Add simple caching to the LogBicubicInterpolator -- will cache
    contiguous calls of the same (x,Q).
- Rebase sover.diff for update.
- Build API documentation and package them as part of a new doc
  package.
- Add BuildRequires: python-setuptools to allow proper
  postprocessing of the python-LHAPDF package when building.
- Drop obsolete conditionals and Group tags.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613390400">- Fix building for multiple python flavours.
- Copy doc files (built only for default python3 flavour) to
  buildroot during %install.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1633003200">- Update to version 6.4.0:
  * Restructure internal memory storage to increase performance
    and simplify caching common computations for different
    particles. Most notably replace KnotArray1F and KnotArrayNF
    with single class KnotArray.
  * Precompute coefficients for polynomial interpolators at init
    time.
  * Add specialised method to interpolators, to evaluate pdf's for
    all common particles (-6,...-6,21) and allow for the caching
    of common computations withoutthe need of a complicated cache.
  * Update the fast ASCII NumParser to always use the C locale.
  * Enable out-of-source builds, avoiding sensitivity to
    pre-installed versions during the build, and converting the
    Cython syntax to Py3-style.  -atch.
  * Bugfix to Python wrapper object parentage handling.
  * Add a PIDs::PIDCode enum (and PIDs enum with equivalent
    signature in Python) for more semantic access to particle ID
    codes.
  * Update embedded yaml-cpp code to version 0.6.3.
  * PDFSet::uncertainties() now allows alternative=True for
    non-replica sets (in which case it does nothing).
  * lhapdf script bugfixes and improvements, including only
    complaining about failed URLs after *all* attempts have
    failed.
  * Add matching by ID code to the lhapdf list and show commands.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642248000">- Delete cython generated cpp file so it can be regenerated by the
  right flavour of Cython.
- Add BuildRequires: python-Cython, needed for above.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 6.5.1:
  * Add uncertainty testing to release process.
  * Fix typo in PDFSet.cc use of default uncertainty CL in
    percent.
- Changes from version 6.5.0:
  * Remove distutils dependency from configure, fall back to using
    setuptools if possible in Python extension build, and update
    Python version detection macros.
  * Apply thread locality fixes to caches, active-set management
    in LHAGlue, and non-MPI file-IO objects.
  * Add PDFSet::uncertainties() methods to compute multiple
    observable uncertainties at once.
  * Chain the in-place and return by value PDFSet::uncertainty()
    methods in the more efficient order.
  * Lazily cache the PDFSet error-info struct.
  * Add a parser for the extended error-type string format, and
    start implementation of the extended uncertainty computation
    using it.
  * Use the PDFSet::lhapdfID() function by preference to return a
    PDF::lhapdfID(), thereby avoiding the index-file lookup if
    possible.
  * Assemble the PDF-set index from _all_ pdfsets.index files
    found in the search paths, with earlier appearances taking
    precedence: allows use of partial indices in overload
    directories.
- Delete some generated example binaries from the doc pkg.
- Run fdupes to link some documentation files (BuildRequires:
  fdupes).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Update to version 6.5.2:
  * Fix range of member iteration when computing correlations with
    the next extended-errorset scheme
  * Update internal yaml-cpp version to fix compiler warnings.
  * Complete distutils removal on main.
  * Fix bug in lepton PDF lookup.
  * Fail with an actually helpful exception message if lhapdf.conf
    can't be found.
- Add LHAPDF-python-platlib.patch -- Correct system platlib
  determination in configure.ac.
- Add LHAPDF-python-build-fix.patch -- Fix python builds due to
  an unset env variable; patch taken from upstream git commit and
  re-based for current version.
- Move /usr/bin/lhapdf binary to -devel pkg; this does not have
  anything to do with the LHAPDF python bindings but rather is a
  general utility script using standard python libs.
- Disable timestamps in doxygen generated docs.
- Run spec-cleaner for minor cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1662033600">- Update to version 6.5.3:
  * Fix linker arguments in Python-extension build.
- Drop LHAPDF-python-build-fix.patch: incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 6.5.4:
  * Add __repr__ methods to Python wrappers.
  * Add keys() and keys_local() methods to Info classes.
  * Fix PDFUncertainty and PDFErrInfo object lifetimes in the
    Python interface.
  * Add setname_nmem variants of methods for making PDFInfo and
    AlphaS objects.
  * Introduce MemType and MemDesc flags, used by preference to
    PdfType and PdfDesc.
  * Convert MPI interface to use MPI v3.
  * Avoid silent compilation failures during the python extension
    build.
  * Replace deprecated egrep with grep -E in lhapdf-config and
    other places.
  * Change nmem type in mk function signatures from int to size_t,
    and fix several other signed/unsigned warnings.
  * Add CXXFLAGS and LDFLAGS propagation to the Python-extension
    build script.
  * Fix bug in in precomputed grid-differences that would lead to
    lookups outside array bounds.
- Drop LHAPDF-python-platlib.patch: fixed upstream.</changelog>
</package>
<package pkgid="d0c377e85961c026480ea36b5fb7ba89c9a61dc07ebb9228b13f2422ce764b5bf86d704745790f76413ed5b30003b26baaa7d592906ab80428828af6ea6e9058" name="LHAPDF-doc" arch="noarch">
  <version epoch="0" ver="6.5.4" rel="bp160.1.14"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566302400">- Update to version 6.2.3:
  * Add a couple of extra trim() calls to path strings given to
    the Fortran API.
  * Apply lhapdf script improvement from Ivan Razumov / Genser.
- Changes from version 6.2.2:
  * Don't pop the final path entry off in the pathsPrepend and
    pathsAppend functions: the compile-time fallback may have been
    disabled.
  * Add a 'show' option to the lhapdf script.
  * Adapt MPI file-reading patch from Stefan Hoeche. Enable with
  - -enable-mpi to configure.
  * Rewrite the lhapdf data-manager script to use argparse, for
    compatibility with Python 3.
  * Apply compiler optimisation bypass "volatile" hack to default
    data path insertion. Thanks to Zahari Kassabov.
  * Add legend PDF name aliasing to plotpdfs
  * Explicitly catch x &gt; xMax error in ContinuationExtrapolator.
  * Don't require the presence of Content-Length in HTTP header.
  * Utils.h: Fix separator bug in join() function.
  * Remove 'const's from return-by-value types in KnotArray.h, to
    keep icpc happy.
  * Add lhapdf_lambda4/5 functions in the Fortran interface.
  * Remove unwanted pid argument from the Fortran xfx*_stdpartons
    functions.
  * Move Config::get() static function from header to .cc, since a
    singleton needs to only 'live' in one compilation unit.
- Drop LHAPDF-pdfset-download-url-update.patch: incorporated
  upstream.
- Replace env-based hashbang with one explicitly referring to the
  correct binary.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588075200">- Use python-rpm-macros to allow building python mod for all
  supported versions of python; copy source into a different
  directory for each python version and configure, build, and
  install them correctly.
- Move python dependent binary to python subpackage (python3
  only).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594987200">- Update to version 6.3.0:
  * Provide setter methods on PDF for the flavour list and
    setPositive behaviour.
  * Convert the AlphaS raw pointer on PDF to a std::unique_ptr.
  * Update the cache strategy for 'replays', and make cache size
    and search/update strategy configurable at runtime.
  * Extend caches to multi-level, searching through the N previous
    calls for x and Q2 independently.
  * Make the caches fully thread-safe rather than just
    initialization-safe, by use of maps on thread IDs.
  * Extend to cross-flavour, subgrid-specific x and Q2 caches.
  * Use the x and Q2 knot hashes in cache-flushing tests.
  * Add a hash function computation and comparator to the
    KnotArray1F.
  * Convert caching struct acquisition to use a Meyers Singleton
    pattern, which guarantees thread-locality.
  * Separate caching of x and Q2 variables in the
    LogBicubicInterpolator: evidence suggests that these may be
    updated at very different rates.
  * Add simple caching to the LogBicubicInterpolator -- will cache
    contiguous calls of the same (x,Q).
- Rebase sover.diff for update.
- Build API documentation and package them as part of a new doc
  package.
- Add BuildRequires: python-setuptools to allow proper
  postprocessing of the python-LHAPDF package when building.
- Drop obsolete conditionals and Group tags.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613390400">- Fix building for multiple python flavours.
- Copy doc files (built only for default python3 flavour) to
  buildroot during %install.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1633003200">- Update to version 6.4.0:
  * Restructure internal memory storage to increase performance
    and simplify caching common computations for different
    particles. Most notably replace KnotArray1F and KnotArrayNF
    with single class KnotArray.
  * Precompute coefficients for polynomial interpolators at init
    time.
  * Add specialised method to interpolators, to evaluate pdf's for
    all common particles (-6,...-6,21) and allow for the caching
    of common computations withoutthe need of a complicated cache.
  * Update the fast ASCII NumParser to always use the C locale.
  * Enable out-of-source builds, avoiding sensitivity to
    pre-installed versions during the build, and converting the
    Cython syntax to Py3-style.  -atch.
  * Bugfix to Python wrapper object parentage handling.
  * Add a PIDs::PIDCode enum (and PIDs enum with equivalent
    signature in Python) for more semantic access to particle ID
    codes.
  * Update embedded yaml-cpp code to version 0.6.3.
  * PDFSet::uncertainties() now allows alternative=True for
    non-replica sets (in which case it does nothing).
  * lhapdf script bugfixes and improvements, including only
    complaining about failed URLs after *all* attempts have
    failed.
  * Add matching by ID code to the lhapdf list and show commands.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642248000">- Delete cython generated cpp file so it can be regenerated by the
  right flavour of Cython.
- Add BuildRequires: python-Cython, needed for above.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 6.5.1:
  * Add uncertainty testing to release process.
  * Fix typo in PDFSet.cc use of default uncertainty CL in
    percent.
- Changes from version 6.5.0:
  * Remove distutils dependency from configure, fall back to using
    setuptools if possible in Python extension build, and update
    Python version detection macros.
  * Apply thread locality fixes to caches, active-set management
    in LHAGlue, and non-MPI file-IO objects.
  * Add PDFSet::uncertainties() methods to compute multiple
    observable uncertainties at once.
  * Chain the in-place and return by value PDFSet::uncertainty()
    methods in the more efficient order.
  * Lazily cache the PDFSet error-info struct.
  * Add a parser for the extended error-type string format, and
    start implementation of the extended uncertainty computation
    using it.
  * Use the PDFSet::lhapdfID() function by preference to return a
    PDF::lhapdfID(), thereby avoiding the index-file lookup if
    possible.
  * Assemble the PDF-set index from _all_ pdfsets.index files
    found in the search paths, with earlier appearances taking
    precedence: allows use of partial indices in overload
    directories.
- Delete some generated example binaries from the doc pkg.
- Run fdupes to link some documentation files (BuildRequires:
  fdupes).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Update to version 6.5.2:
  * Fix range of member iteration when computing correlations with
    the next extended-errorset scheme
  * Update internal yaml-cpp version to fix compiler warnings.
  * Complete distutils removal on main.
  * Fix bug in lepton PDF lookup.
  * Fail with an actually helpful exception message if lhapdf.conf
    can't be found.
- Add LHAPDF-python-platlib.patch -- Correct system platlib
  determination in configure.ac.
- Add LHAPDF-python-build-fix.patch -- Fix python builds due to
  an unset env variable; patch taken from upstream git commit and
  re-based for current version.
- Move /usr/bin/lhapdf binary to -devel pkg; this does not have
  anything to do with the LHAPDF python bindings but rather is a
  general utility script using standard python libs.
- Disable timestamps in doxygen generated docs.
- Run spec-cleaner for minor cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1662033600">- Update to version 6.5.3:
  * Fix linker arguments in Python-extension build.
- Drop LHAPDF-python-build-fix.patch: incorporated upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 6.5.4:
  * Add __repr__ methods to Python wrappers.
  * Add keys() and keys_local() methods to Info classes.
  * Fix PDFUncertainty and PDFErrInfo object lifetimes in the
    Python interface.
  * Add setname_nmem variants of methods for making PDFInfo and
    AlphaS objects.
  * Introduce MemType and MemDesc flags, used by preference to
    PdfType and PdfDesc.
  * Convert MPI interface to use MPI v3.
  * Avoid silent compilation failures during the python extension
    build.
  * Replace deprecated egrep with grep -E in lhapdf-config and
    other places.
  * Change nmem type in mk function signatures from int to size_t,
    and fix several other signed/unsigned warnings.
  * Add CXXFLAGS and LDFLAGS propagation to the Python-extension
    build script.
  * Fix bug in in precomputed grid-differences that would lead to
    lookups outside array bounds.
- Drop LHAPDF-python-platlib.patch: fixed upstream.</changelog>
</package>
<package pkgid="7cb4701589ec647015e853f5959e34546d7288fa69f0f5c5cfdcb5a6f8a02b5b0acc4baa1b7f5b6f699a9a531ecb87815cf1f161361c8ab134e96641c08a028d" name="LaTeXML" arch="noarch">
  <version epoch="0" ver="0.8.8" rel="bp160.1.11"/>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544356800">- Add requires for the perl package</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1561809600">- Update to version 0.8.4:
  * Various fidelity and robustness improvements, along with more test cases
  * Improved source locators for debugging and other purposes.
  * More flexible backmatter, allowing multiple bibliographies, indices, etc.
  * Improvements to math lexer
  * Support for Chocolatey package manager
  * More generalized support for lists of (contents, tables, figures, etc)
  * New bindings: aipcheck.tex, aipproc.cls, bibunits.sty, blindtext.sty,
    calrsfs.sty, chapterbib.sty, chngcntr.sty, csquotes.def, csquotes.sty,
    fancyheadings.sty, footnote.sty, mathdots.sty, nopageno.sty, PoS.cls,
    quantumarticle.cls, remreset.sty, sidecap.sty, subfiles.(cls|sty),
    tcilatex.tex, thm-restate.sty, twoopt.sty, underscore.sty, undertilde.sty,
    varioref.sty, varwidth. styvmargin.sty
  1de821d0df8c88041ee10820188f33feac77d5618de4c0798a296a425f4e2637-------------------------------------------------------------------</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1605441600">- Add dependency on Pod::Find</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1607860800">- Update to version 0.8.5:
  * Acknowledging his many contributions to LaTeXML,
    Deyan Ginev is recognized as a co-developer.
  * A large variety of robustness, fidelity and portability patches:
    reduced errors &amp; warnings, more consistent ids, formatting,
  * Improved TeX fidelity, including l3kernel simulation,
    while maintaining backwards compatibility (latex2, 2e).
  * Enhanced declaration &amp; preservation of math semantics,
    improved tools for parallel markup
    Enhanced semantics of siunitx, physics
  * improved support for lists (enumitem), theorems, cleveref, listings, nicefrac,
    multiple bibliographies, tikz/pgf, multiple bibliographies, JATS,
    multi-document site generation; including supporting more options.
  * "Raw" style files now processed by default when in source document's directory
  * new bindings: aastex63.cls, aipproc.sty, physics.sty,
    pgfmathcalc.code.tex, pgfutil-common.tex
  * Experimental features:
  * math lexemes: exports math as non-semantic tokens for data mining experiments;
    simplfied format avoid introducing inferred semantics
  * accessibility annotations</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1634817600">- Update to version 0.8.6:
  * This release addresses a large variety of usability, fidelity, robustness,
    portability and output-quality issues.
  * The Error handling system now produces both a log file (with details) and
    a brief term-styled output on STDERR.
  * Even when Fatal errors are encountered, the document "so far" is returned.
  * Many improvesments were made to mimicing more closely TeX's commands
    and LaTeX internals, along with more testcases to detect regressions.
  * Major revision of Alignments (\halign, tabular, etc) to be more TeX-like,
    with respect to the timing of expansion.
  * Many Errors and Fatals are now fixed or avoided.
    The Windows platform is much better supported.
  * Ouput to HTML, CSS, JATS, TEI have been updated, modernized and validated.
    tikz/pgf and picture environment output is improved.
  * new bindings: actuarialangle.sty, adjustbox.sty, diagbox.sty, elsart_support_core.sty,
    espcrc.sty, fancybox.sty, filehook.sty, hepunits.sty, hypcap.sty, ifplatform.sty,
    mathabx.sty, minimal.cls, pgfplotstable.sty, prettyref.sty, proof.sty, proofwiki.sty,
    psfrag.sty, SIunits.sty, slashbox.sty, standalone.cls, standalone.sty, xfrac.sty</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1655467200">- Remove the _service file
- Simplify call to sed</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1657627200">- Add depndency on perl(UUID::Tiny)
- Recommend instead of requiring ImageMagick and texlive</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1672056000">- Update to version 0.8.7:
  * This release addresses a large variety of usability, fidelity, robustness,
    portability and output-quality issues.
  * MathML (mostly) conforms to MathML Core, with more consistent spacing
  * More TeX-like dimensions &amp; computation; font metrics used for (approximate)
    sizing
  * Improvements to HTML5, ePub, JATS, CSS, frontmatter
  * Improvements to graphics and SVG
  * support for \includegraphics alt key
  * updated schema to SVG 1.1 2nd ed (roughly)
  * xy now supported, generating SVG
  * Windows &amp; MacOS related improvements
  * Support for attributes in foreign namespaces; conversion to data-XXX
    attributes in html
  * Default to lang="en" unless told otherwise
  * title attributes now use UnicodeMath; also --unicodemath math format option
  * Enhancements to latexml.sty (see the code for details)
  * Package keywords
  - breakuntex, nobreakuntex: control linebreaks in tex attribute
  - dpi=number, magnify=number, upsample=number, zoomout=number: image
    conversion controls
  - tokenlimit=number, iflimit=number, absorblimit=number,
    pushbacklimit=number: limit execution
  * \LaTeXMLversion, \LaTeXMLrevision, \LaTeXMLfullversion: show the LaTeXML
    version
  * \lxRegisterNamespace{prefix}{uri} : register a namespace w/ prefix
  * \lxAddAnnotation{keyvals} : add annotation attributes to current node
  * \lxWithAnnotation{keyvals}{thing} : Typeset thing with annotation attributes
  * New bindings: amsaddr, atveryend, auxhook, babel, bbding, bezier,
    bigintcalc, bitset, bookmark, doi, ed, expl3, fancyvrb, feynmf, fixme,
    gettitlestring, ifetex, ifsym, iftex, ijcai, infwarerr, intcalc,
    kvdefinekeys, kvoptions, kvsetkeys, l3keys2e, ltxcmds, nomencl, overpic,
    pdftexcmds, refcount, subeqn, subeqnarray, tcolorbox, tikzbricks, upquote,
    xurl, xy, xypic  and beamer.cls
  * Improvements to bindings: algorithm2e, amsmath, amsthm, babel, csquotes,
    deluxetable, enumitem, glossaries, hyperref, longtable, lstings, mathtools,
    physics, revtex, svmult, thmtools.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1708948800">- Update to version 0.8.8:
  * This release addresses a large variety of usability, fidelity, robustness,
    portability and output-quality issues.
  * breaking change: ltx:inline-para has been renamed
    ltx:inline-logical-block
  * Improved CSS, html, accessibility affecting
  * framing, position &amp; rotation, color
  * figure/subfigure grouping
  * MathML (closer to MathML Core)
  * avoid gratuitous math mode (simple sub/superscripts); mathvariant
  * option to avoid InvisibleTimes, when not certain (--noinvisibletimes)
  * Improved emulation of TeX internals
  * affecting registers, \chardef, accents, intarray, tracing
  * More TeX-like "scanning" of tokens affecting
  * expansion, input,
  * alignments (\halign,tabular)
  * improved block mode processing
  * affecting \parbox, {minipage}, \centering, \raggedright/left
  * More consistent set of block elements:
  * ltx:block, ltx:logical-block, ltx:sectional-block,
  * along with their inline variants:
  * ltx:inline-block, ltx:inline-logical-block, ltx:inline-sectional-block
  * breaking change: ltx:inline-para has been renamed
    ltx:inline-logical-block
  * Improvements to processing alignments (\halign, tabular),
  * more TeX-like (processing templates, spacing)
  * Improved processing of images, graphics, svg generation
  * image post-processing
  * pgf, tikz, pgfplots, tikz-cd
  * initial support for Vietnamese, t5enc
  * improved Windows portability
  * improved schema documentation
  * Improvements to test cases.
  * New bindings: boxedminipage, cmap, ifdraft, marginnote, tikz-cd.
  * Improvements to bindings: aa, aas, algorithm2e, amsmath, amsthm,
    cleverref, comment, csquotes, elsarticle, enumitem, expl3, framed,
    hyperref, hyperxmp, IEEEtran, lineno, listing, longtable, mn2e, nicefrac,
    ntheorem, pdfpages, pgfmath, pgfplots, rotating, srcltx, sidecap,
    subcaption, subfiles, thmtools, tikz, url, xfrac, xypic.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1753444800">- Add fix_overaccent_tests.patch</changelog>
</package>
<package pkgid="48cced33acf18d3a78023502e230f67d154ca1d04f22a12bde5c5b7a96aa18c7245713ab381cc5876558910e654da7a859989dd5ffde1942cb9c520fa8056e60" name="Leap-release" arch="x86_64">
  <version epoch="0" ver="16.0+leap" rel="lp160.263.1"/>
  <changelog author="openSUSE &lt;packaging@lists.opensuse.org&gt;" date="1756728000">- automatically generated by openSUSE-release-tools/pkglistgen</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1763121600">- Tweak macros.leap bsc#1238724
  * Drop %sle_version macro definition from the macros.leap
  * Add %is_opensuse macro definition from the macros.leap
- Add a particular hook to the version number hence the new one
  will be selected over than other competitor</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1764676800">- Fix the previous change which changed the version number in
  os-release and Leap.prod bsc#1238724</changelog>
</package>
<package pkgid="cf5563327fde680c2f0959a5b552b9858d03d9a9d9f4623d2ae1253408df9b98c5a43c7155f439dc196203f2d10abea75d6dc6eef76aad06c17924e22a700762" name="Leap-release" arch="x86_64">
  <version epoch="0" ver="16.0" rel="lp160.281.1"/>
  <changelog author="openSUSE &lt;packaging@lists.opensuse.org&gt;" date="1758888000">- automatically generated by openSUSE-release-tools/pkglistgen</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1779796800">- Removed %sle_version from the macros.lep (bsc#1238724)
- Added %is_opensuse to the macros.lep</changelog>
</package>
<package pkgid="f4a94c2749903c86a35d9c0a760a2334c2a4202f18b4e8b5ac592641c8288895c65b17d848e462dc905dfdfc205a8537901b05ad752e83d2613274cb438fc499" name="Leap-release-ftp" arch="x86_64">
  <version epoch="0" ver="16.0+leap" rel="lp160.263.1"/>
  <changelog author="openSUSE &lt;packaging@lists.opensuse.org&gt;" date="1756728000">- automatically generated by openSUSE-release-tools/pkglistgen</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1763121600">- Tweak macros.leap bsc#1238724
  * Drop %sle_version macro definition from the macros.leap
  * Add %is_opensuse macro definition from the macros.leap
- Add a particular hook to the version number hence the new one
  will be selected over than other competitor</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1764676800">- Fix the previous change which changed the version number in
  os-release and Leap.prod bsc#1238724</changelog>
</package>
<package pkgid="ca4dc6364722828de809d51dbf21243b9ce6ca4f23979013273b7bf0f5599ced8800160240c38469155a075149ba460ac8f28804dd49b70e8bbd36fc15542008" name="Leap-release-ftp" arch="x86_64">
  <version epoch="0" ver="16.0" rel="lp160.281.1"/>
  <changelog author="openSUSE &lt;packaging@lists.opensuse.org&gt;" date="1758888000">- automatically generated by openSUSE-release-tools/pkglistgen</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1779796800">- Removed %sle_version from the macros.lep (bsc#1238724)
- Added %is_opensuse to the macros.lep</changelog>
</package>
<package pkgid="f436f4abd4beb66403f43dd0f21afc6f8ff796a13476e026b3f47d3d24fe441e76e8bbc0ce4011b0fd475eeb96942d9080a1b98d3d0ccc92d3cee1362baa1a49" name="LiE" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="bp160.1.48"/>
  <changelog author="badshah400@gmail.com" date="1386849600">- Initial version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398859200">- add LiE-2.2.2-date-time.patch to fix file-contains-date-and-time
  warning and prevent unneccessary rebuilds</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Explicitly package files copied into _docdir: rpm 4.13 no longer
  implicitly packages those files.</changelog>
  <changelog author="bwiedemann@suse.com" date="1506945600">- Add LiE-2.2.2-memory-init.patch to make build more reproducible
  (boo#1061220)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="18f1dcfc25cbecc30b97b73465e339aa7d4400021b75e46b0a13e85e964d644ffe100d48c4a3784423e808e3bb024093d320b3fce5786c7b1de44b5087560b7f" name="LiE-doc" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="bp160.1.48"/>
  <changelog author="badshah400@gmail.com" date="1386849600">- Initial version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398859200">- add LiE-2.2.2-date-time.patch to fix file-contains-date-and-time
  warning and prevent unneccessary rebuilds</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Explicitly package files copied into _docdir: rpm 4.13 no longer
  implicitly packages those files.</changelog>
  <changelog author="bwiedemann@suse.com" date="1506945600">- Add LiE-2.2.2-memory-init.patch to make build more reproducible
  (boo#1061220)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="a6c278a321f033c6b7e3eea0931a52f852844726d0febdb9ca00f1e486ef9ba3baa9980dbbcfcb255500ac0d701c435221758e8d85100536885fd9cbcd59f242" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.14" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1572868801">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- version update to 0.9.14
  [#]# Overall changes:
  * Added more documentation (build system integration, repeater setup) and a legal FAQ.
  * Added [contribution guidelines](CONTRIBUTING.md).
  * Ported the TravisCI continous integration machinery to GitHub workflows.
  [#]# LibVNCServer/LibVNCClient:
  * Added [qemu extended key event].
  * Fixed several potential multiplication overflows.
  [#]# LibVNCClient:
  * Fixes of several memory leaks and buffer overflows.
  * Added UltraVNC's MSLogonII authentication scheme.
  * Fixed TLS interoperability with GnuTLS servers.
  * Fixed detection of newer UltraVNC and TightVNC servers.
  * Added support for [SetDesktopSize].
  * Added SSH tunneling example using libssh2.
  * Added some extensions to VeNCrypt in order to be compatible with a wider range of servers.
  [#]# LibVNCServer:
  * Fixes to the multi-threaded server implementation which should be a lot more sound now.
  * Fixed TightVNC-filetransfer file upload for 64-bit systems.
  * Fixes of crashes in the zlib compression.
  * Added support for [UTF8 clipboard data].
  * Fixed visual artifacts in framebuffer on ARM platforms.
  * Fixed several WebSockets bugs.
  * Fixed the UltraVNC-style repeater example.
  * Added support for larger framebuffers (two 4k screens possible now).
  * Added support for timeouts for outbound connections (to repeaters for instance).
  * Fixed out-of-bounds memory access in Tight encoding.
- modified patches
  % 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch (refreshed)
  % 0002-libvncserver-Add-channel-security-handlers.patch (refreshed)
- deleted patches
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch (upstreamed)
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch (upstreamed)
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch (upstreamed)
  - LibVNCServer-CVE-2020-29260.patch (upstreamed)</changelog>
</package>
<package pkgid="5a335cb15e8fa2cdd65525b313a21dda456bbc38381bbbca92f062e103b6909cc940ca4038896c11b8274298631b5563ed51fce1ea2cb1251e3a8001415778e7" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.14" rel="160000.3.1"/>
  <changelog author="pgajdos@suse.com" date="1572868800">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- version update to 0.9.14
  [#]# Overall changes:
  * Added more documentation (build system integration, repeater setup) and a legal FAQ.
  * Added [contribution guidelines](CONTRIBUTING.md).
  * Ported the TravisCI continous integration machinery to GitHub workflows.
  [#]# LibVNCServer/LibVNCClient:
  * Added [qemu extended key event].
  * Fixed several potential multiplication overflows.
  [#]# LibVNCClient:
  * Fixes of several memory leaks and buffer overflows.
  * Added UltraVNC's MSLogonII authentication scheme.
  * Fixed TLS interoperability with GnuTLS servers.
  * Fixed detection of newer UltraVNC and TightVNC servers.
  * Added support for [SetDesktopSize].
  * Added SSH tunneling example using libssh2.
  * Added some extensions to VeNCrypt in order to be compatible with a wider range of servers.
  [#]# LibVNCServer:
  * Fixes to the multi-threaded server implementation which should be a lot more sound now.
  * Fixed TightVNC-filetransfer file upload for 64-bit systems.
  * Fixes of crashes in the zlib compression.
  * Added support for [UTF8 clipboard data].
  * Fixed visual artifacts in framebuffer on ARM platforms.
  * Fixed several WebSockets bugs.
  * Fixed the UltraVNC-style repeater example.
  * Added support for larger framebuffers (two 4k screens possible now).
  * Added support for timeouts for outbound connections (to repeaters for instance).
  * Fixed out-of-bounds memory access in Tight encoding.
- modified patches
  % 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch (refreshed)
  % 0002-libvncserver-Add-channel-security-handlers.patch (refreshed)
- deleted patches
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch (upstreamed)
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch (upstreamed)
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch (upstreamed)
  - LibVNCServer-CVE-2020-29260.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- fix devel package dependencies (by Christophe Marin) [bsc#1247887]</changelog>
</package>
<package pkgid="6b581cfe31c2d77a975bb2510fb9451d122560309e1e14011174b24e8539d60d774368fe6e86bb0fec84e4bf9b9b66b004afa4fd50fd2f4dda7bdff61f0a0ff1" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.14" rel="160000.4.1"/>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- version update to 0.9.14
  [#]# Overall changes:
  * Added more documentation (build system integration, repeater setup) and a legal FAQ.
  * Added [contribution guidelines](CONTRIBUTING.md).
  * Ported the TravisCI continous integration machinery to GitHub workflows.
  [#]# LibVNCServer/LibVNCClient:
  * Added [qemu extended key event].
  * Fixed several potential multiplication overflows.
  [#]# LibVNCClient:
  * Fixes of several memory leaks and buffer overflows.
  * Added UltraVNC's MSLogonII authentication scheme.
  * Fixed TLS interoperability with GnuTLS servers.
  * Fixed detection of newer UltraVNC and TightVNC servers.
  * Added support for [SetDesktopSize].
  * Added SSH tunneling example using libssh2.
  * Added some extensions to VeNCrypt in order to be compatible with a wider range of servers.
  [#]# LibVNCServer:
  * Fixes to the multi-threaded server implementation which should be a lot more sound now.
  * Fixed TightVNC-filetransfer file upload for 64-bit systems.
  * Fixes of crashes in the zlib compression.
  * Added support for [UTF8 clipboard data].
  * Fixed visual artifacts in framebuffer on ARM platforms.
  * Fixed several WebSockets bugs.
  * Fixed the UltraVNC-style repeater example.
  * Added support for larger framebuffers (two 4k screens possible now).
  * Added support for timeouts for outbound connections (to repeaters for instance).
  * Fixed out-of-bounds memory access in Tight encoding.
- modified patches
  % 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch (refreshed)
  % 0002-libvncserver-Add-channel-security-handlers.patch (refreshed)
- deleted patches
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch (upstreamed)
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch (upstreamed)
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch (upstreamed)
  - LibVNCServer-CVE-2020-29260.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- fix devel package dependencies (by Christophe Marin) [bsc#1247887]</changelog>
  <changelog author="pgajdos@suse.com" date="1774526400">- added patches
  CVE-2026-32854 [bsc#1260429], crafted HTTP requests can cause a denial of service
  * LibVNCServer-CVE-2026-32853.patch
  CVE-2026-32853 [bsc#1260431], crafted FramebufferUpdate message can lead to information disclosure or denial of service
  * LibVNCServer-CVE-2026-32854.patch</changelog>
</package>
<package pkgid="8deac7965766194f55f9a79617894bbd18e0118b51d84b98c726cfb1025342ebdc9da05298e2cb947b4181e718ab4f5079bb5593f9ce3f1edd2f7305342c1b6a" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.14" rel="160000.5.1"/>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1687521600">- version update to 0.9.14
  [#]# Overall changes:
  * Added more documentation (build system integration, repeater setup) and a legal FAQ.
  * Added [contribution guidelines](CONTRIBUTING.md).
  * Ported the TravisCI continous integration machinery to GitHub workflows.
  [#]# LibVNCServer/LibVNCClient:
  * Added [qemu extended key event].
  * Fixed several potential multiplication overflows.
  [#]# LibVNCClient:
  * Fixes of several memory leaks and buffer overflows.
  * Added UltraVNC's MSLogonII authentication scheme.
  * Fixed TLS interoperability with GnuTLS servers.
  * Fixed detection of newer UltraVNC and TightVNC servers.
  * Added support for [SetDesktopSize].
  * Added SSH tunneling example using libssh2.
  * Added some extensions to VeNCrypt in order to be compatible with a wider range of servers.
  [#]# LibVNCServer:
  * Fixes to the multi-threaded server implementation which should be a lot more sound now.
  * Fixed TightVNC-filetransfer file upload for 64-bit systems.
  * Fixes of crashes in the zlib compression.
  * Added support for [UTF8 clipboard data].
  * Fixed visual artifacts in framebuffer on ARM platforms.
  * Fixed several WebSockets bugs.
  * Fixed the UltraVNC-style repeater example.
  * Added support for larger framebuffers (two 4k screens possible now).
  * Added support for timeouts for outbound connections (to repeaters for instance).
  * Fixed out-of-bounds memory access in Tight encoding.
- modified patches
  % 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch (refreshed)
  % 0002-libvncserver-Add-channel-security-handlers.patch (refreshed)
- deleted patches
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch (upstreamed)
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch (upstreamed)
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch (upstreamed)
  - LibVNCServer-CVE-2020-29260.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1755604800">- fix devel package dependencies (by Christophe Marin) [bsc#1247887]</changelog>
  <changelog author="pgajdos@suse.com" date="1774526400">- added patches
  CVE-2026-32854 [bsc#1260429], crafted HTTP requests can cause a denial of service
  * LibVNCServer-CVE-2026-32853.patch
  CVE-2026-32853 [bsc#1260431], crafted FramebufferUpdate message can lead to information disclosure or denial of service
  * LibVNCServer-CVE-2026-32854.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780056000">- added patches
  CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of-bounds write [bsc#1266459]
  * LibVNCServer-CVE-2026-44988.patch</changelog>
</package>
<package pkgid="5022665d3ec8d0ac72f570c9497eb706dab952991b9be566b394f243f5cde46a2fe41443265147e382f5534d68abc36d34d03a4a03a3a99fc081212262203bd7" name="LuminanceHDR" arch="x86_64">
  <version epoch="0" ver="2.6.0+git304.6107989" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1713787200">- First OBS release.</changelog>
  <changelog author="info@paolostivanin.com" date="1713787201">- Update to version 2.6.0+git304.6107989:
  * Drop height restriction of advanced editing tools window
  * Fix build with &gt;=exiv2-0.28.0, raise minimum to 0.27.0
  * Fix various typos
  * call enableBMFF() to support reading CR3 EXIF files. Does not harm loading non-CR3 files.
  * replacing space with "_" in LHDR_VERSION_STR_SUFFIX for build to work correctly.
  * Fix mac build for packages installed via brew on mac.
- Add use-system-rtprocess.patch.
- Add fix-boost1_85.patch.
- Add fix-version.patch.</changelog>
</package>
<package pkgid="7f8255311193bf68aef23eb9cae6906ee29e308ffaa22b875cbf8c079c8f1567a7fe04c236a00027a255845cebc24ddb3024edfff6833d5a87d71c03389da1fc" name="LuminanceHDR-doc" arch="noarch">
  <version epoch="0" ver="2.6.0+git304.6107989" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1713787200">- First OBS release.</changelog>
  <changelog author="info@paolostivanin.com" date="1713787201">- Update to version 2.6.0+git304.6107989:
  * Drop height restriction of advanced editing tools window
  * Fix build with &gt;=exiv2-0.28.0, raise minimum to 0.27.0
  * Fix various typos
  * call enableBMFF() to support reading CR3 EXIF files. Does not harm loading non-CR3 files.
  * replacing space with "_" in LHDR_VERSION_STR_SUFFIX for build to work correctly.
  * Fix mac build for packages installed via brew on mac.
- Add use-system-rtprocess.patch.
- Add fix-boost1_85.patch.
- Add fix-version.patch.</changelog>
</package>
<package pkgid="67632012606f861cad698f105b9d09ed4dcce64223c6bd887f0fee6b0dbbab3dab190ad78d19f0d5236f59db0baea64254d58501226c38fe1b2986364de2a4ef" name="Mesa" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="ec8d13d25289386fce89591eb0803bb3ae4e8fd5b99fa8e8a369a511b09afe7fbb3cfe1369bac427c075850002d39591eef7048a0de3bd08389227f7ba7f654d" name="Mesa" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="47708de01c1ef8b54afed990c990f57e09c115de9fa03625ba853fec0bf69c7d6f9f22f7844c7483c0abe82d96a7966b726af0a179cdcabc7f19b27c623031c0" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="1e61ecfcfa08ab857b83c3d6968c219791e31a1367d280e4b6c8d2f92ab07d57ec623a04e2b5365cd919725ebada7023c755d106dee7d83f6f7d66ef10a667a1" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="d60b16d54bbfbb09809b02822e0a852cef99244806bcbd5ef3072e282dae65a163f574abb50f8a59a5235f05b5b3e31d07065fe6c85d1fd2f64e438c4a2253b4" name="Mesa-demo" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.2"/>
  <changelog author="brunopitrus@hotmail.com" date="1676030400">- Add Mesa-demo-{egl,es,x}-32bit. This is useful as the 64- and 32-bit
  OpenGL environments are separate and need separate diagnostic programs.</changelog>
  <changelog author="sndirsch@suse.com" date="1676289600">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1679659200">- switched to meson build
- needs n_install-more-egl-binaries.patch, so all binaries are
  installed we had before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1679659201">- readded -32bit packages</changelog>
  <changelog author="sndirsch@suse.com" date="1679745600">- don't package "line" sample (conflict with /usr/bin/line of
  util-linux)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 9.0.0
- supersedes n_install-more-egl-binaries.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680177601">- enabled vulkan support (first Vulkan demo: vkgears!)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177602">- enabled osmesa and libdrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1694347200">- don't package "bitmap" sample (conflict with /usr/bin/bitmap of
  package bitmap) {boo#1215185)</changelog>
  <changelog author="jengelh@inai.de" date="1703160000">- Remove old rpm constructs that are long defaulted.
- Remove legalese from descriptions as per our wiki guidelines.</changelog>
</package>
<package pkgid="02ed7b61ce67f12b65bee236460faffdf9a6ee971c952c9a4000aad7f3393c273cf83e8575ab2b01daad5974e86c7cc3ed7649448b3e25e5dcbe77feeafa4ba9" name="Mesa-demo-egl" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.2"/>
  <changelog author="brunopitrus@hotmail.com" date="1676030400">- Add Mesa-demo-{egl,es,x}-32bit. This is useful as the 64- and 32-bit
  OpenGL environments are separate and need separate diagnostic programs.</changelog>
  <changelog author="sndirsch@suse.com" date="1676289600">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1679659200">- switched to meson build
- needs n_install-more-egl-binaries.patch, so all binaries are
  installed we had before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1679659201">- readded -32bit packages</changelog>
  <changelog author="sndirsch@suse.com" date="1679745600">- don't package "line" sample (conflict with /usr/bin/line of
  util-linux)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 9.0.0
- supersedes n_install-more-egl-binaries.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680177601">- enabled vulkan support (first Vulkan demo: vkgears!)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177602">- enabled osmesa and libdrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1694347200">- don't package "bitmap" sample (conflict with /usr/bin/bitmap of
  package bitmap) {boo#1215185)</changelog>
  <changelog author="jengelh@inai.de" date="1703160000">- Remove old rpm constructs that are long defaulted.
- Remove legalese from descriptions as per our wiki guidelines.</changelog>
</package>
<package pkgid="05626aa57384292e99cbd152f8b31659622774383c94597dabe28188922b911d33874d42beb676383a3774e8cf2b1f4f030f6e7cbec4522a22f55354ab85f1f7" name="Mesa-demo-es" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.2"/>
  <changelog author="brunopitrus@hotmail.com" date="1676030400">- Add Mesa-demo-{egl,es,x}-32bit. This is useful as the 64- and 32-bit
  OpenGL environments are separate and need separate diagnostic programs.</changelog>
  <changelog author="sndirsch@suse.com" date="1676289600">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1679659200">- switched to meson build
- needs n_install-more-egl-binaries.patch, so all binaries are
  installed we had before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1679659201">- readded -32bit packages</changelog>
  <changelog author="sndirsch@suse.com" date="1679745600">- don't package "line" sample (conflict with /usr/bin/line of
  util-linux)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 9.0.0
- supersedes n_install-more-egl-binaries.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680177601">- enabled vulkan support (first Vulkan demo: vkgears!)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177602">- enabled osmesa and libdrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1694347200">- don't package "bitmap" sample (conflict with /usr/bin/bitmap of
  package bitmap) {boo#1215185)</changelog>
  <changelog author="jengelh@inai.de" date="1703160000">- Remove old rpm constructs that are long defaulted.
- Remove legalese from descriptions as per our wiki guidelines.</changelog>
</package>
<package pkgid="fa9cf5b198b4a854d1ea41e515dad4f0707611158d59f9f77cb1f906602ad9367ec55d86d6a17d0fc0429b6894398eae6d589572976b1bdd8ce78cede76152e7" name="Mesa-demo-x" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.2"/>
  <changelog author="brunopitrus@hotmail.com" date="1676030400">- Add Mesa-demo-{egl,es,x}-32bit. This is useful as the 64- and 32-bit
  OpenGL environments are separate and need separate diagnostic programs.</changelog>
  <changelog author="sndirsch@suse.com" date="1676289600">- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1679659200">- switched to meson build
- needs n_install-more-egl-binaries.patch, so all binaries are
  installed we had before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1679659201">- readded -32bit packages</changelog>
  <changelog author="sndirsch@suse.com" date="1679745600">- don't package "line" sample (conflict with /usr/bin/line of
  util-linux)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 9.0.0
- supersedes n_install-more-egl-binaries.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680177601">- enabled vulkan support (first Vulkan demo: vkgears!)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177602">- enabled osmesa and libdrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1694347200">- don't package "bitmap" sample (conflict with /usr/bin/bitmap of
  package bitmap) {boo#1215185)</changelog>
  <changelog author="jengelh@inai.de" date="1703160000">- Remove old rpm constructs that are long defaulted.
- Remove legalese from descriptions as per our wiki guidelines.</changelog>
</package>
<package pkgid="3f6d6059cffed9c01bfcfc243b505bb6ba53370ffa72bf39ec6458734a29c05351e1e539b5c4e10c71adaa3e2b64c70b1f3c763e6cf1512101652467aef15d82" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="f73687a433024c1fb18b8b743379a45bb93023e9a8d2a4bdb598d5f343427d06c1da05b99973b617a1d19d036ec03943639cf3d63ed81b33f80f9af68bf3dca4" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="a3a271b143daa6230728780a1088b7f0f587951c6af8f8b73ca9d6574a8a46864d6f211b76ae4c7248e155a8f65f5c94276cbf7df934bf31697fff45d1d8ead5" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="aa896cb91284282a932aae017df4e065bc77ddf809dbc089c748ac4ae91e91f9fb09268bea4d2b2aa5bd5a40d0d78fd9c07d71e88a726d7610ee0f3d00135532" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="c13bb3d847e93df30acbdb6da070ba1e9fde9712c61b6ad9ca7cbf86379ef849e00226f4dc92f8cdc89bda8ba0d5a157eb208168b1ce70da07c17fef2637740d" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="7c3fa895bad58f7af282d9005e727810a9ef5d70fd2e86047732302b8f27fe39b39a99d8769a7f05ead0f5c5d5cd821a2cf5ece7689923640b91c12a2ac0a2d8" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="e7d007a5e80f9ddf65b3cacfac4534d3df840b004d8bb1a657ed7d3c7d3c87eec98e0047728e5b9d13baa840948fdfe0dd4bd62e47e27018caf47ebcb3d893c8" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="d7fb1e03b2745c8e53e6b0bc5a27e623bfdf3f102c4a4098414cb2dd2181044d3e37df53dca983f4f56e3c7436610975e0c0bdd0dca5f4f85f7a31a556ac60d1" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="f71996e577dedc7f3d9ab5e18e763eb784d26ef38c0ef2d5972acc2fbd6fb10544efd038a882c8c9d82d5f60b8aca31caae072e99f1c76a7cc5fcea1184cf2d2" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="6df9ad3f6c5b90a9bac29bd6bb486b76c91076035f84bcf908a9389557a588f1aadef156519f775b7666d3a69b48867ea07fa06e2ebb2294441ecb611b73ec12" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="cad8c9df7b91acb487a445a64f5d34d80d52575812f5e0ae1ff7dfe89180bb64e46979f363151d50a4d3298f84562c551f0298b6f212219c8d0fd38a218c32db" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="10598c588a1cd11abcd527e39a3284524fb85ee3ad871a85b906824e682a6cf8dfc0b87973185be53ce001ad218f945f254d0d6be3ad46a8f5d410524ea49971" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="04ccfe6b771fdec85182279ac6fd4d6d2e695603abed83e4ac2db50cb8cbde740e99be7613dea25593eccd28c1082457c6fc4a23ea4849778ac28a69075ff938" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="17f4d5984595503f834ba1b3bbb96e06fe156a1fb8d1f71f9255d43df54208f10b419ff34054cae2d4b8eaff43f9c84e2acc0a7fca0c31fe26bd01a300d06865" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="6e7f9e008bf1f77c215d83860bad028c9a647439d5328a5c9e2f1fb3a3d66b5e9fa5ef0e44530049089020f45fbdd90c6ebb9bd1b70e98e1177d0b1790167806" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="e8d3afcc3ccd1444edd3e92f38dccac160d6d43091c2e88974eadb2c58faeac7d5d1979ad3885cebf4e3b627804f7d91397a6b37db6fbce46ef9db099558d7f2" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="bed44efc1c2277ce58aeb94cea83714f4ac9a27fb9cc22d06e013d08a7d68371326a4f86e638157519c6b55ef5c6a531886a3433beb8f55b018add2068a5a958" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="f48047453d45f1d0810b57c568d9bb3bbdbdfd1e94f42d2a047bfcb83d75bb0ee7a7825c6b5f5d1285f6a18fb5572e9044eae86b012efec9c0db0f7d34476466" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="695de2cd934ff725d025250f9f4978f98bbbbbeef0d5f494daf21baae8523e70295f8ca2199cac812d353e1ac5a03c51c403d8e7ef3f3a3928af4df26f931e3a" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="c120d5b8e4ed432ef60fb7c127477c2a9c7501d0637fe9a4aeac419857367c50b143a4c3536cd4314901ae83f472735cf18b20699ac54593f62aceaa6bd309a3" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="45a8c4e65d7588da87e417c846bc15ae4e0b0ddc649d510c1347f6c281dd35840540c554b1a584c3245d3daa2b2e130068ecc6f8a8a1ee45f8658e303df610b3" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="1d035ecdbda08c1a4e504c4afbd466b113aefb1821393c2d756c5f41877db41beaf0d6efb3726ef0f05bc1fac4c33a60ad71aa4ddea3d2120f466834cfcd1878" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="57e29839f9c2fa9fab3de7b9d03c5d2c0f16e0b6322b29e9d997c325bcf98be3090bbd83ad93f90bcfacbb7107eeab02e3e1dcea28235dd8c6cdd145015d00ae" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="4c7d17c77ef8f07452d34e8492f9442a2578f2aa19c31a1f9432fe1f9a7ecaed6a7af64936bdd830f75ad13231d36806b85cea45744520c605b1407f30eb599e" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="6ba566b201d7378ed53c8c1c58bf0e6309f463b6aafc7c821d756a155b7897e4093b40700d3425bb170010b4bb9511fd6d53b792b5c88cb3d62a53fe6f4bca66" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="ac9353fecb1f365f48721dcc26f18499eed64bf242f7d14fdcf91f333e449d7e9ea32dd281a0530dce83ea451a87fd90b7ed1d2d1c0dbcfed5f12d699f4cfb7c" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="21e2ef0a54871114145b09fdb260a72895485f05c2e494eba1be415d03db50025156f20d280290ad49e771f56aa8d543e6f1e731c436580245408a6167555c9c" name="Mesa-libRusticlOpenCL" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="7e5a0fcb7d1f2e558574e29449f63079b47a75c0addd4c78523c4537f7cbd2cf2826387fa581989ea8951a68ca6624a9e301995a18307e3e657bcd2c33611987" name="Mesa-libRusticlOpenCL" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="ebe8d5131a54c470bb908f99d1da18cc2d64be7ca15626bde662811fe0748733f683e5938f5b7409708fcfd0e542c544d595920df210542d2999c6d6c217f198" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="e45914b7549c78d71326f86b3f455318c84556e39df68a97e2aa8f59488e366c31d646c9956d23ddea6c421a92690adbdbf0483748bb357f1399c30f8625dda8" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="0d2fc8797387ee42aba1d7b8f69e73a040a7cffd3a8f15195617981b4f8cca0991d8137bb96731c89353b3919926250e3776430a53f4e17215cd8dbc41117d2b" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="84fa08c1f017a2b09cfe9a5b59393f19a4b98713ae20fc8f00602510164157d4b76fc73d1e3235cdb82931ec6e01aa73d2769e34b16319ec165b535bb5f135fe" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="751907d19d72ce42769aa2c8d556687dfba0f4ef3b8c05ff3e251400bcf19a73bb6d2f4c18eaf777d8097f121e3e17ccbce5190f0bced061b3a384dfd6c65f01" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="9dad66caa86d6fc5b68d76ea45698cd5d6841245e5d9a3eb2fe325ecab0e8a0de07a27e11e735adc7dcfe209fe0e3da9519ff224a0eccf7aefb3e4187046ab36" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="f8a769816a561a4790868efeabc17b7ace86125d571cdbe7218a73ba2d92b3843236965ea953a1243fd5fa83c5958b379a56e9f68e786340fd191db73c8e9499" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="c6d2b243b24982596b14b18226c08f2fffb8d5686e9f324bff1e2cfba67653ce387850ae9d6d7fb95fcb85aa0ac714aa1cb0b49f9fe80f34914d329092e1c6c7" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="944ef0b0e61d818ea8041e05ecfdf18f62a8b18779f0df4330c596f715543d5c9f642e2121672f67bf5f192d52ee0fb8c184d2cc62bb29d945c7c60dcfcabc07" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="e6adac9dedc376ee3a1ec5c89118a59dad3bbe3b66e9dc3f82a41dd8d749bef786882a435226e1c7bbe5665e3f60a279bd6616cd06ad95b20ce3290ede31da72" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="0ba5c467f0fe3345930b13b25bb99bfb796ff69823e0b43b8dcebba56e78a19eb16f8a8d4768aa091dbc2b359c73f59cb09bca871a7e3292c09ee7795d5a5238" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="23a299d8a3d8085b243b7d7329c5bf2e15be3b89fa68e9d042937db0c7c143f6d2e23af62e860aaf87335a6f9ca79d21bccde257a614bad06bfb85f5ed83905c" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="dc29a0c6f085d7a5116fe30804f98716bdc0dbb529696558b6f647d9c686575b8d931b0e2e32c1b0dcfc69529822a3010488b0a018a1463ce81fe4fe185457bd" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
</package>
<package pkgid="2e0e9fc7333bdb7b266dcaf5f361b376bea7d2f66068e30c597b49d7186ec088ccca2d28c1f73b0666651a1106741c3668074c32965df0c7d76cc5c8b34ad8f3" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="160000.3.1"/>
  <changelog author="sndirsch@suse.com" date="1741262400">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1742472000">- fixed build on SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1747396800">- aarch64: enable panfrost vulkan driver on Leap 16.0</changelog>
  <changelog author="sndirsch@suse.com" date="1748088000">- U_gbm-fix-get_back_bo-failure-with-gbm_surface-and-imp.patch
  * should fix hangup on "Started GNOME Display Manager" in a VM
    on VMware Fusion Pro (bsc#1241370)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="alarrosa@suse.com" date="1753358400">- U_loader_wayland-Fix-missing-timespec.h-include.patch
  * fixes build with wayland-protocols 1.45</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- switch to gcc 15 to fix build error (bsc#1261911)
  /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found
  Unable to generate bindings: clang diagnosed error: /usr/include/llvm/ADT/DenseMapInfo.h:17:10: fatal error: 'cassert' file not found</changelog>
  <changelog author="sndirsch@suse.com" date="1776168001">- use gcc15 now for real in order to fix build</changelog>
</package>
<package pkgid="bf31665f5fb58dd0e463f143b29b6554501eb95244329ba0d62b0cebacef8c4a941be05f8948dac192c14621f553eb7596f9196f63304db460ff6dde69bfe87f" name="ModemManager" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696593600">- Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for
  tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.22.0:
  + A new "MSG" (message) log verbosity level is introduced, which
    is also the new default one if none explicitly defined. This
    level takes the place of the old "INFO" level, as a level
    including the most important messages that should be logged
    without needing to be warnings or errors. The new "INFO" level
    is more verbose than "MSG" but less verbose than "DBG", and may
    be useful as default in systems where active debugging of WWAN
    related issues is required. E.g. all user operations triggered
    via DBus method calls are logged in "INFO" level.
  + Introduced the concept of "personal information" which should
    by default not be included in log messages. Enabling personal
    information in logs requires to run the daemon with the
    '--log-personal-info' option. This feature is mostly
    implemented for QMI and MBIM specific logs, but hasn't yet been
    included in generic daemon logs or when using the AT protocol.
    Changes and fixes related to this feature will be cherry-picked
    and included in the future stable branch updates.
- Update URL and Source adresses.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="24691f701c860fd1ae7ac0ebfdcf561ea03130889ad260866b72b47dda644ea6ffb84bba4c55cfd241a5aa7d8866f5ddcb80cf430288f4696ddcc55034ce94f3" name="ModemManager-bash-completion" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696593600">- Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for
  tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.22.0:
  + A new "MSG" (message) log verbosity level is introduced, which
    is also the new default one if none explicitly defined. This
    level takes the place of the old "INFO" level, as a level
    including the most important messages that should be logged
    without needing to be warnings or errors. The new "INFO" level
    is more verbose than "MSG" but less verbose than "DBG", and may
    be useful as default in systems where active debugging of WWAN
    related issues is required. E.g. all user operations triggered
    via DBus method calls are logged in "INFO" level.
  + Introduced the concept of "personal information" which should
    by default not be included in log messages. Enabling personal
    information in logs requires to run the daemon with the
    '--log-personal-info' option. This feature is mostly
    implemented for QMI and MBIM specific logs, but hasn't yet been
    included in generic daemon logs or when using the AT protocol.
    Changes and fixes related to this feature will be cherry-picked
    and included in the future stable branch updates.
- Update URL and Source adresses.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="284a235e2dca0dae889b20a436a26602a1251cdb79faa1ba42b65eaa26421bc193d350f77d5587d1a9cd23cded181bfd314cee9d9101ac918b22d8fd7d205551" name="ModemManager-devel" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696593600">- Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for
  tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.22.0:
  + A new "MSG" (message) log verbosity level is introduced, which
    is also the new default one if none explicitly defined. This
    level takes the place of the old "INFO" level, as a level
    including the most important messages that should be logged
    without needing to be warnings or errors. The new "INFO" level
    is more verbose than "MSG" but less verbose than "DBG", and may
    be useful as default in systems where active debugging of WWAN
    related issues is required. E.g. all user operations triggered
    via DBus method calls are logged in "INFO" level.
  + Introduced the concept of "personal information" which should
    by default not be included in log messages. Enabling personal
    information in logs requires to run the daemon with the
    '--log-personal-info' option. This feature is mostly
    implemented for QMI and MBIM specific logs, but hasn't yet been
    included in generic daemon logs or when using the AT protocol.
    Changes and fixes related to this feature will be cherry-picked
    and included in the future stable branch updates.
- Update URL and Source adresses.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="14f77d02303208dcfc50a74691e48240f7c6594e034702e70074306288f3d4038c08c22fbe02ccb36ac78cd921da86ae2b675f714ad7abd9c4bac8277f7c5391" name="ModemManager-lang" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1628942400">- Switch bash completion subpackage to noarch.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Update to version 1.18.6:
  + The ModemManager.service file for systemd integration provided
    in the sources is updated as follows:
    ++ 'CAP_NET_ADMIN' is now required in the
    'CapabilityBoundingSet' field.
    ++ 'AF_NETLINK' and 'AF_QIPCRTR' are now required in the
    'RestrictAddressFamilies' field.
  + The LEGACY and PARANOID filter types that were allowed
    options in the '--filter-policy' option in the ModemManager
    daemon were deprecated in version 1.16.0 and have now been
    completely removed, along with the vid:pid blacklist of
    devices and the vid:pid greylist of RS232&lt;-&gt;USB adapters.
  + The ModemManager daemon can run now in a 'quick suspend/resume'
    mode, in which no explicit data disconnection is triggered on
    suspend, and no explicit device re-probing from scratch is
    launched on resume. Instead, the daemon will try to refresh
    the state of all interfaces upon suspend, e.g. to see if the
    module keeps registered to the same operator, to see if it is
    still connected, and so on.
  + core: added support for the new 'WWAN' subsystem in Linux kernel
    5.13, enabling PCIe-only modules.
  + core: The charset conversion methods rework, including the
    avoiding of the iconv()
  + qmi: the logic managing allowed/preferred modes was fixed for
    multimode devices like the MC7304, making sure the acquisition
    order preference always had the same items.
  + serial: when modem is connected with AT+PPP, ignore forced
    disconnections, so that we don't take ownership of the PPP
    port before pppd has released it.
  + foxconn: added support for the T99W175 (SDX55) module,
    including built-in FCC unlock procedure.
  + foxconn: added new MBIM QDU firmware update method.
- Move the dbus-1 system.d file to /usr (bsc#1196170)
- Use source verification
- Update Supplements to new format
- Add BRs needed for new tests:
  * python3-gobject-Gdk
  * python3-dbus-python</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Enable QRTR support
  * Add BR pkgconfig(qrtr-glib)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659787200">- Update to version 1.18.10:
  + Build: Require libqmi 1.30.8.
  + FCC unlock: Updated SDX55 unlock script to handle the new
    method introduced in the latest firmware releases.
  + Modem interface:
  - Set signal quality to 0% on shutdown.
  - Set signal quality as recent on init.
  + MBIM:
  - Fix task completion when peeking device fails.
  - Fix several GError double-frees.
  + mmcli: Don't print signal quality until modem is enabled.
  + Plugins: foxconn: remove carrier mapping table for T99W175.
  + Several other minor improvements and fixes.
- Changes from version 1.18.8:
  + A new connection status dispatcher setup is provided, where
    users can provide custom scripts that will be called on bearer
    connect/disconnect events. This dispatcher will make the netifd
    integration in openwrt work much better, as we'll be able to
    report network-initiated disconnections cleanly to netifd.
    There are no default connection status dispatcher scripts
    installed, but it's suggested distributions make sure the
    following directories exist:
  - ${sysconfdir}/ModemManager/connection.d/
  - ${libdir}/ModemManager/connection.d/
  + API: Add missing Simple interface definitions in
    ModemManager-names.h.
  + Build:
  - meson:
    . fix daemon enums dependencies.
    . fix port enums includes.
    . fix 'export_packages' in GIR setup.
    . fix simtech plugin module name.
  - systemd: don't run ModemManager in containers.
  + Core:
  - serial: ensure the port object is valid after BUFFER_FULL
    handling.
  - netlink:
    . use unaligned netlink attribute length.
    . only change IFF_UP flag.
  - bearer: match unknown auth to chap in loose comparisons.
  - charsets: return error if UTF-8 validation fails.
  - fcc-unlock: make scripts POSIX shell compatible.
  - modem-helpers:
    . consider minimum ID when choosing best profile.
    . fix reading &lt;Act&gt; given in COPS=? responses.
  - sms: prevent crash if date is out of range.
  - profile-manager: fix copy-paste error on tags for quarks.
  + QMI:
  - Ignore slot status indications until initial status is known.
  - Return error when loading capabilities if none is found.
  + MBIM:
  - Default initial EPS bearer's auth to chap when unknown.
  - Update default error when network error is out of range.
  + mmcli: Fix key length when printing list of items.
  + Plugins:
  - linktop: new port type hints.
  - cinterion: add support for PLSx3w modems.
  - huawei: disable +CPOL based features in Huawei E226.
  + Several other minor improvements and fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661601600">- Disable make_check call, tests currently fails due to our switch
  to glib 2.73.2.
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/870
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/601
  https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/621</changelog>
  <changelog author="luc14n0@opensuse.org" date="1665230400">- Update to version 1.18.12:
  + This release fixes a few very critical issues that happpen when
    using a glib2 newer or equal than 2.73.2, plus numerous fixes
    for the Core, MBIM, QMI, 3GPP profile manager interface, SMS,
    libmm-glib, and mmcli.
  + Plugins:
  - sierra: disable +CPOL in the GL7600.
  - telit: add LE910Cx MBIM composition port hints.
  - telit: add port type hints for LN920 0x1060, 0x1061
    compositions.
  - icera: fix double free on %%IPSYS=? response processing
  - mtk: fix task completion when loading supported modes.
- Add new pkgconfig modules build requirements: gio-2.0, glib-2.0,
  gmodule-2.0, and gobject-2.0.
- Update ModemManager.keyring to the new upstream key:
  A814D09B9C5BC01945A64308AECE0239C6606AD5. Found at
  www.freedesktop.org/software/ModemManager/0xAECE0239C6606AD5.asc.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680955200">- Update to version 1.20.6:
  + build: New build option to allow disabling the installation of
    examples.
  + core:
  - Fix crash when uninhibiting partially removed device.
  - Fix crash when attempting to load an invalid shared utils
    library.
  + mmcli:
  - Allow JSON and key/value output when creating SMS messages.
  - Improved JSON output in network scan results.
  + libmm-glib:
  - Avoid using g_time_zone_new_offset() unless glib &gt;= 2.58.
  - Fix flags to string conversion utils to allow multiple flags.
  + MBIM:
  - Reset cached SIM info when SIM is unlocked.
  - Fix synchronizing the state of the SIM hot swap configured
    flag.
  - Fix bug cleaning up the LTE attach info unsolicited message
    handler.
  - Fallback from QMI UIM service only if unsupported.
  - Add missing support for 'emergency' APN type.
  + QMI:
  - Fix processing and exposing PCOs.
  - Fix power up on modems that don't support power state change
    indications.
  + plugins:
  - telit:
    . add additional support for 5G modems.
    . added port type hints for FN990 0x1070, 0x1071
    compositions.
    . increase allowed initial delay in AT ports.
    . fallback to AT commands if loading revision via MBIM fails.
  - quectel: add support for EC21-EUX usb modules.
  - xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
  + build:
  - Don't hardcode building shared libraries, so that meson's
    default_library option can be used properly,
  - po: Added missing Georgian translation in LINGUAS.
  + QMI:
  - Fixed loading NR5G signal info.
  - Fixed memory leaks when processing signal info.
  - Correctly scaled the SNR value reported in NR5G.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  + MBIM:
  - Fixed processing MbimSmsStatusFlag as flags, not as an enum.
  - Fixed invalid use-after-free actions due to improper handling
    of proxy removal events.
  - Chained up device notifications through the MMPortMbim
    object.
  + Messaging: Allowed Delete operation during enabling/disabling.
  + Core: Don't assume port tables always exist so that
    long-standing operations holding an object reference can finish
    cleanly even after the initial object disposal has already been
    run.
  + plugins:
  - quectel: added new firehose/sahara support udev tags in new
    models.
  - broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
  - cinterion:
    . added a delay to the ^SWWAN? command.
    . added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
  + build:
  - Fixed building without MBIM support.
  - Fixed building without tests support.
  - Disabled test interface in base manager if building without
    tests.
  - Updated intel plugin dependencies to require XMM shared
    utils.
  - Fixed templates to make build reproducible.
  + FCC unlock: Updated shell scripts to avoid requiring bash.
  + MBIM:
  - Ignored SIM related indications during a SIM slot switch
    operation.
  - Updated capabilities loading to use Microsoft Extensions if
    available.
  - Updated supported modes loading to use the CustomDataClass
    field contents.
  + SIM: Fixed length when reading GID1/GID2 using AT commands.
  + Several other minor improvements and fixes.
- Changes from version 1.20.0:
  + API:
  - New 'Modem.Sar' interface to allow the host to manage the SAR
    power level.
  - New 'Modem.GetCellInfo()' method, that allows querying
    information about the current serving and neighboring cells.
    Currently including 'cell-type' and 'serving' fields for all
    cell types, plus additional type-specific fields:
    . CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
    'pilot-strength'.
    . GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
    'base-station-id' and 'rx-level'.
    . UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
    'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
    'rscp', 'ecio' and 'path-loss'.
    . TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
    'cell-parameter-id', 'timing-advance', 'rscp' and
    'path-loss'.
    . LTE: 'operator-id', 'tac', 'ci', 'physical-ci', 'earfcn',
    'rsrp', 'rsrq' and 'timing-advance'.
    . 5GNR: 'operator-id', 'tac', 'ci', 'physical-ci', 'nrarfcn',
    'rsrp', 'rsrq', 'sinr' and 'timing-advance'.
  - New 'access-type-preference', 'roaming-allowance',
    'profile-name', 'profile-enabled' and 'profile-source'
    fields in the 'Bearer.Properties' property, that can also be
    used in both 'Modem.Simple.Connect()' and
    'Modem.CreateBearer()'.
  - New 'Modem.Modem3gpp.SetPacketServiceState()' method and
    'Modem.Modem3gpp.PacketServiceState' property, which allow
    management the explicit attach or detach to packet service on
    the current registered network.
  - New 'Modem.Modem3gpp.SetNr5gRegistrationSettings()' method
    and 'Modem.Modem3gpp.Nr5gRegistrationSettings' property, to
    allow management of 5G specific settings like 'mico-mode' or
    'drx-cycle'.
  - New 'start-date', 'uplink-speed' and 'downlnk-speed' fields
    in the 'Bearer.Stats' property.
  - New 'Bearer.ReloadStatsSupported' property to indicate
    whether reloading ongoing stats is supported or not.
  - New 'Modem.Modem3gppProfileManager.IndexField' property, to
    indicate which field is to be used as unique index in the
    profile management operations.
  - New 'Sim.SimType', 'Sim.EsimStatus' and 'Sim.Removability'
    properties to improve the management of eSIM related
    operations.
  - New 'Sim.Gid1' and 'Sim.Gid2' properties, which allow
    identifying SIM cards that should have different settings
    applied.
  - New 'Modem.Signal.SetupThresholds() method,
    'Modem.Signal.RssiThreshold' and
    'Modem.Signal.ErrorRateThreshold' to allow configuring
    thresholds so that the modem emits indications whenever the
    signal quality values change based on those thresholds. For
    RSSI a delta amount of dBm can be given, and for error rate
    just a boolean to enable or disable the corresponding event.
  - New 'error-rate' fields in the 'Modem.Signal.Cdma',
    'Modem.Signal.Evdo', 'Modem.Signal.Gsm', 'Modem.Signal.Umts',
    'Modem.Signal.Lte' and 'Modem.Signal.Nr5g' properties.
  + Core:
  - Detecting an eSIM without an active profile in the current
    SIM slot will lead to the modem being in Failed state, in the
    same way as if the slot was for a physical SIM and no SIM was
    inserted.
  - Default amount of AT probing attempts is updated to 6, to
    cope with modems that are slower to boot.
  - New '--test-mbimex-profile-management' option in the daemon,
    to enable support for profile management operations using the
    Microsoft extensions. This is an optional feature because it
    requires using the 'apn-type' field as unique index, which
    not all users of the profile management API may expect.
  - Implemented some initial support to automatically hide
    personal details (e.g. phone numbers, SMS contents...) from
    logs, right now only applicable to QMI and MBIM logs. Updated
    support for this feature will keep on being integrated in
    future 1.20.x updates. The new '--log-personal-info' option
    in the daemon allows to disable this feature completely.
  - Added new filter match option for subsystem vendor id,
    required in several PCI based Qualcomm modules.
  - QCDM port probing will no longer automatically run for all
    plugins, only in those that explicitly require it.
  - Implemented support for suspend/resume detection based on
    ChromeOS' powerd daemon.
  - Added Cat-M and NB-IoT LPWA access technologies.
  + Modem interface: On 3GPP+3GPP2 multimode devices, a missing SIM
    card will now force the modem into Failed state, as if it was a
    3GPP-only device.
  + Simple interface: Explicitly wait for PS domain to be attached
    during a connection attempt.
  + 3GPP interface: Updated to report domain registration changes
    altogether whenever possible (e.g. when using the QMI or MBIM
    protocols).
  + MBIM:
  - Implemented support to use the Microsoft-defined MBIM
    extensions v2 and v3 whenever supported by the device. The
    ModemManager daemon will negotiate which version to use with
    the modem, so that the highest version supported is enabled.
    This negotiation applies to the whole device, so any other
    user of the MBIM device will automatically start using the
    newly agreed version.
  - Implemented current modes switching using MBIMEx v2.0
    extensions.
  - Trigger explicit disconnection if a connection attempt fails.
  - Modem will be flagged as unusable if 10 consecutive MBIM
    requests timeout.
  - Enabled multiplex support for devices in the WWAN subsystem.
  + QMI:
  - Updated logic to by default prefer 'Signal Info' over the
    deprecated 'Signal Strength' operations.
  - Updated logic to by default prefer 'System Info' over the
    deprecated 'Serving System' operations.
  - Updated power state transition logic to ensure the new state
    is reached before returning success to the user.
  - Implemented support for the 'Modem3gppProfileManager.Updated'
    signal using PDC refresh notifications.
  - Modem will be flagged as unusable if 10 consecutive QMI
    requests timeout.
  - Implemented DTMF support.
  - Implemented support for automatic SIM IMSI switch detection
    under certain roaming scenarios.
  - Updated the logic to move the PS domain state to 'registered'
    based on the DSD System Status indications.
  - Updated endpoint type detection logic to be based on the net
    driver.
  - Updated endpoint number selection to be based on the data
    port.
  - Updated connection logic to allocate separate WDS clients per
    endpoint.
  - Added support for PCO reporting.
  + plugins:
  - quectel: Added FCC unlock support for the EM05-G.
  - telit:
    . Band management updated to prefer using QMI whenever
    available, as well as to detect the #BND command format
    automatically.
    . Added support for LPWA modems.
  - fibocom:
    . Implemented optional support to power down and up the modem
    during the update of the initial EPS bearer settings.
    . Implemented initial EPS bearer settings management in the
    MA510.
  - intel: New generic plugin for Intel PCI devices with vid
    0x8086.
  - xmm: Prefer GNSS control ports explicitly tagged via udev
    tags.
  - foxconn: Use the new FOX QMI service to load firmware
    version.
  - cinterion: Added support for PCIe based devices.
- Use ldconfig_scriptlets macro.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add xsltproc and pkgconfig(bash-completion) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696593600">- Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for
  tests.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727092800">- Update to version 1.22.0:
  + A new "MSG" (message) log verbosity level is introduced, which
    is also the new default one if none explicitly defined. This
    level takes the place of the old "INFO" level, as a level
    including the most important messages that should be logged
    without needing to be warnings or errors. The new "INFO" level
    is more verbose than "MSG" but less verbose than "DBG", and may
    be useful as default in systems where active debugging of WWAN
    related issues is required. E.g. all user operations triggered
    via DBus method calls are logged in "INFO" level.
  + Introduced the concept of "personal information" which should
    by default not be included in log messages. Enabling personal
    information in logs requires to run the daemon with the
    '--log-personal-info' option. This feature is mostly
    implemented for QMI and MBIM specific logs, but hasn't yet been
    included in generic daemon logs or when using the AT protocol.
    Changes and fixes related to this feature will be cherry-picked
    and included in the future stable branch updates.
- Update URL and Source adresses.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="ac6fa7eae7fbeb0cc92219c9932213d6f84f89dc902e1cc5070cfe15e1afa6948b320498196c83fdb0379bb36edee0462ea684fd8720be051cca4a3b60ae760c" name="Modules" arch="x86_64">
  <version epoch="0" ver="4.8.0" rel="160000.2.2"/>
  <changelog author="boris@steki.net" date="1523880000">- too many changes to put into changelog please read Changelog in
  /usr/share/doc/packages/Modules-doc/ChangeLog (installed from
  Modules-doc package)
- removed return.patch
- removed share.patch
- reworked return.patch and renamed to modules-4.1.2-return.patch
- reworked fixing-bashisms patch for current version
  renamed modules-3.2.10-fix-bashisms.patch to modules-4.1.2-fix-bashisms.patch</changelog>
  <changelog author="boris@steki.net" date="1523966400">- rolled back change from /usr/share/Modules (package name) to old
  expected behavior /usr/share/modules
- fixed redhat/fedora builds</changelog>
  <changelog author="eich@suse.com" date="1589544000">- Update to version 4.5.0
  Check https://github.com/cea-hpc/modules/releases/tag/v4.5.0
  for details.
- Install profile script to set aliases (boo#1100410)
- Add: Remove-empty-unused-static-function.patch
    replaces: modules-4.1.2-return.patch
- Remove: modules-4.1.2-fix-bashisms.patch
  BOGUS: applied to a csh context.
- Install .vim files to /usr/share/vim/site.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1613822400">- Update to version 4.7.0
  Check https://github.com/cea-hpc/modules/releases/tag/v4.7.0
  for details.
- Mark sh and csh module initialization scripts installed into
  /etc/profile.d as managed by this package by moving the symlinking
  to the %install section.
- Support fish (shell completion and functionality).
- Use a source service instead of manually adding the source tarball.
- Clean up spec file to remove unused code (e.g. CFLAGS which aren't
  used in the source code any more, since it's all TCL now).
- Update description to match the current description on the homepage.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1616414400">- Mark the download service as disabled to meet factory submission
  guidelines.
- Add a runtime dependency on Python for createmodule.py script.
- Set /usr/bin/python3 as interpreter for all Python scripts (instead
  of relying on /usr/bin/env, which is used by default).
- Add fdupes back to solve rpmlint warning.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1620302400">- Update to upstream version 4.7.1
  * Doc: clarify the license terms used by the project. (fix issue #389)
  * Align all files from the Modules project under the GPLv2+ license.
    Scripts and libraries that were previously licensed with GPLv3+ have
    been moved to GPLv2+ with the consent of their respective copyright
    holders. (fix issue #389)
  * Revert "Install: have configure script assume the . dot directory
    when invoked without the prepended ./" as consent was not obtained
    from author to relicense the contribution to GPLv2+.
  * Doc: fixes few typos in module(1) and modulefile(4).
  * Update the sh-to-mod mechanism to support version 3.2 of the fish
    shell. Fish 3.2 introduces the . builtin command that should be
    regexp-escaped when determining the shell functions or aliases
    defined by the script analyzed by sh-to-mod.
  * Vim: update addon files to highlight modulefile variables ModuleTool,
    ModuleToolVersion and ModulesCurrentModulefile.
  * Doc: update the description and default value of the
  - -with-dark-background-colors and --with-light-background-colors
    installation options.
  * Doc: add description of changes that occurred on versions 4.6 and 4.7
    for the --with-dark-background-colors and --with-light-background-colors
    installation options and for the MODULES_COLORS environment variable.
  * Doc: correct the default value of the --with-tag-abbrev installation
    option.
  * Doc: add Sticky modules cookbook recipe.
- Correct package license to GPLv2+, matching upstream.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1627732800">- Update to upstream version 4.8.0
  See https://modules.readthedocs.io/en/latest/NEWS.html#modules-4-8-0-2021-07-14
  for a list of changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716292800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="pgajdos@suse.com" date="1724760000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1738584000">- Make use of %configure macro to build with distro flags</changelog>
</package>
<package pkgid="5a76de54213c364022697fb677c91bf2d425d44268ce8079777a5704687f52e297d6decd182c0e936588463475a26b9ee1520d515d3d749e3c5486c27d27e1df" name="Modules-doc" arch="noarch">
  <version epoch="0" ver="4.8.0" rel="160000.2.2"/>
  <changelog author="boris@steki.net" date="1523880000">- too many changes to put into changelog please read Changelog in
  /usr/share/doc/packages/Modules-doc/ChangeLog (installed from
  Modules-doc package)
- removed return.patch
- removed share.patch
- reworked return.patch and renamed to modules-4.1.2-return.patch
- reworked fixing-bashisms patch for current version
  renamed modules-3.2.10-fix-bashisms.patch to modules-4.1.2-fix-bashisms.patch</changelog>
  <changelog author="boris@steki.net" date="1523966400">- rolled back change from /usr/share/Modules (package name) to old
  expected behavior /usr/share/modules
- fixed redhat/fedora builds</changelog>
  <changelog author="eich@suse.com" date="1589544000">- Update to version 4.5.0
  Check https://github.com/cea-hpc/modules/releases/tag/v4.5.0
  for details.
- Install profile script to set aliases (boo#1100410)
- Add: Remove-empty-unused-static-function.patch
    replaces: modules-4.1.2-return.patch
- Remove: modules-4.1.2-fix-bashisms.patch
  BOGUS: applied to a csh context.
- Install .vim files to /usr/share/vim/site.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1613822400">- Update to version 4.7.0
  Check https://github.com/cea-hpc/modules/releases/tag/v4.7.0
  for details.
- Mark sh and csh module initialization scripts installed into
  /etc/profile.d as managed by this package by moving the symlinking
  to the %install section.
- Support fish (shell completion and functionality).
- Use a source service instead of manually adding the source tarball.
- Clean up spec file to remove unused code (e.g. CFLAGS which aren't
  used in the source code any more, since it's all TCL now).
- Update description to match the current description on the homepage.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1616414400">- Mark the download service as disabled to meet factory submission
  guidelines.
- Add a runtime dependency on Python for createmodule.py script.
- Set /usr/bin/python3 as interpreter for all Python scripts (instead
  of relying on /usr/bin/env, which is used by default).
- Add fdupes back to solve rpmlint warning.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1620302400">- Update to upstream version 4.7.1
  * Doc: clarify the license terms used by the project. (fix issue #389)
  * Align all files from the Modules project under the GPLv2+ license.
    Scripts and libraries that were previously licensed with GPLv3+ have
    been moved to GPLv2+ with the consent of their respective copyright
    holders. (fix issue #389)
  * Revert "Install: have configure script assume the . dot directory
    when invoked without the prepended ./" as consent was not obtained
    from author to relicense the contribution to GPLv2+.
  * Doc: fixes few typos in module(1) and modulefile(4).
  * Update the sh-to-mod mechanism to support version 3.2 of the fish
    shell. Fish 3.2 introduces the . builtin command that should be
    regexp-escaped when determining the shell functions or aliases
    defined by the script analyzed by sh-to-mod.
  * Vim: update addon files to highlight modulefile variables ModuleTool,
    ModuleToolVersion and ModulesCurrentModulefile.
  * Doc: update the description and default value of the
  - -with-dark-background-colors and --with-light-background-colors
    installation options.
  * Doc: add description of changes that occurred on versions 4.6 and 4.7
    for the --with-dark-background-colors and --with-light-background-colors
    installation options and for the MODULES_COLORS environment variable.
  * Doc: correct the default value of the --with-tag-abbrev installation
    option.
  * Doc: add Sticky modules cookbook recipe.
- Correct package license to GPLv2+, matching upstream.</changelog>
  <changelog author="mail@philipp-wagner.com" date="1627732800">- Update to upstream version 4.8.0
  See https://modules.readthedocs.io/en/latest/NEWS.html#modules-4-8-0-2021-07-14
  for a list of changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716292800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="pgajdos@suse.com" date="1724760000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1738584000">- Make use of %configure macro to build with distro flags</changelog>
</package>
<package pkgid="f11c9bfad5ae550970003e3dbca8a753cac2435178222f6a0087ebf2d59360129e9b849967d911f2ff836c191c86ebe4c7de9b32fc72cf77bda9ea0c8ffccbe4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
</package>
<package pkgid="5dbec078703e7529b8fca6ef57f67e4ab38e63e76696c5e37423e570dcecc3f24cf2f39b52974559afb362f20daa59344009a44609b02bbfd189521c8541af0a" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.10.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
</package>
<package pkgid="886a6ff7338630b2278382c2bf9aa15d5f999aa187a9321f5f636a36dac1367ba2619055024e609d84c2001d1543f8d65ca5d5a4c13537633c454407ce61a87a" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.10.2" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
</package>
<package pkgid="8dc7acf683325165e87f2a082f60f4ed7be58cdc44ca63289bd594d7fb94bd00169726c5179f640daa7b77ce2111642e8ee980277dc9670281801319ae277be4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.11.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
</package>
<package pkgid="3a90ce6507b707ac99d1f33c8e7b0700893815c4c6ce8704817588a16c8dc1845499cb3d6eb52bb89e173cd13bb34d456c31f48352ee88cddfe11b5a60e5b5c1" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
  <changelog author="cgrobertson@suse.com" date="1781179200">- Firefox Extended Support Release 140.12.0 ESR
  Placeholder changelog-entry (bsc#1268071)</changelog>
</package>
<package pkgid="c7e7513a51435346bf5e3f5861d4bb4afc5db2fd66c85252f2b890c61114ff89444bd930bf1c261f9477382cfd21a8028b69a5ec6f9a2b47050df0ccebe283dd" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.2.0" rel="160000.1.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1747656000">- Firefox Extended Support Release 128.10.1 ESR
  * Fixed: Security Fixes.
  MFSA 2025-37 (bsc#1243303)
  * CVE-2025-4918 (bmo#1966612)
    Out-of-bounds access when resolving Promise objects
  * CVE-2025-4919 (bmo#1966614)
    Out-of-bounds access when optimizing linear sums</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747742400">- Firefox Extended Support Release 128.11.0 ESR
  MFSA 2025-44 (bsc#1243353)
  * CVE-2025-5283 (bmo#1962421)
    Double-free in libvpx encoder
  * CVE-2025-5263 (bmo#1960745)
    Error handling for script execution was incorrectly isolated
    from web content
  * CVE-2025-5264 (bmo#1950001)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5265 (bmo#1962301)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5266 (bmo#1965628)
    Script element events leaked cross-origin resource status
  * CVE-2025-5267 (bmo#1954137)
    Clickjacking vulnerability could have led to leaking saved
    payment card details
  * CVE-2025-5268 (bmo#1950136, bmo#1958121, bmo#1960499,
    bmo#1962634)
    Memory safety bugs fixed in Firefox 139, Thunderbird 139,
    Firefox ESR 128.11, and Thunderbird 128.11
  * CVE-2025-5269 (bmo#1924108)
    Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird
    128.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161600">- Firefox Extended Support Release 128.12.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-53 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161601">- removed patches firefox-kde.patch, mozilla-kde.patch,
  fix-sle12-build-errors.patch, mozilla-rust-disable-future-incompat.patch
- added patches mozilla-bmo1746799.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1750939200">- Firefox Extended Support Release 140.0esr ESR
  * General
  - Reader View now has an enhanced Text and Layout menu with
    new options for character spacing, word spacing, and text
    alignment. These changes offer a more accessible reading
    experience.
  - Reader View now has a Theme menu with additional Contrast
    and Gray options. You can also select custom colors for text,
    background, and links from the Custom tab.
  - Firefox will now offer to temporarily remember when users
    grant permissions to sites (e.g. geolocation). Temporary
    permissions will be removed either after one hour or when the
    tab is closed.
  - Firefox now includes safeguards to prevent sites from
    abusing the history API by generating excessive history
    entries, which can make navigating with the back and forward
    buttons difficult by cluttering the history. This
    intervention ensures that such entries, unless interacted
    with by the user, are skipped when using the back and forward
    buttons.
  - Firefox now identifies all links in PDFs and turns them
    into hyperlinks.
  - You can now copy links from background tabs using the
    tabstrip context menu on macOS and Linux.
  - Users on macOS and Linux are now given the option to close
    only the current tab if the Quit keyboard shortcut is used
    while multiple tabs are open in the window. (bmo#None)
  * Sidebar and Tabs
  - You can now enable the updated Firefox sidebar in Settings
    &gt; General &gt; Browser Layout to quickly access multiple tools
    in one click, without leaving your main view. Sidebar tools
    include an AI chatbot of your choice, bookmarks, history, and
    tabs from devices you sync with your Mozilla account.
  - Keep a lot of tabs open? Try our new vertical tabs layout
    to quickly scan your list of tabs. With vertical tabs, your
    open and pinned tabs appear in the sidebar instead of along
    the top of the browser. To turn on vertical tabs, right-click
    on the toolbar near the top of the browser and select Turn on
    Vertical Tabs. If you’ve enabled the updated sidebar, you can
    also go to Customize sidebar and check Vertical tabs. Early
    testers report feeling more organized after using vertical
    tabs for a few days.
  - Stay productive and organized with less effort by grouping
    related tabs together. One simple way to create a group is to
    drag a tab onto another, pause until you see a highlight,
    then drop to create the group. Tab groups can be named,
    color-coded, and are always saved. You can close a group and
    reopen it later.
  - A tab preview is now displayed when hovering the mouse over
    background tabs, making it easier to locate the desired tab
    without needing to switch tabs.
  - The sidebar to view tabs from other devices can now be
    opened via the Tab overview menu.
  * Security &amp; Privacy
  - HTTPS is replacing HTTP as the default protocol in the
    address bar on non-local sites. If a site is not available
    via HTTPS, Firefox will fall back to HTTP.
  - Firefox now blocks third-party cookie access when Enhanced
    Tracking Protection's Strict mode is enabled.
  - Firefox now has a new anti-tracking feature, Bounce
    Tracking Protection, which is now available in Enhanced
    Tracking Protection's "Strict" mode. This feature detects
    bounce trackers based on their redirect behavior and
    periodically purges their cookies and site data to block
    tracking.
  - Firefox now enforces certificate transparency, requiring
    web servers to provide sufficient proof that their
    certificates were publicly disclosed before they will be
    trusted. This only affects servers using certificates issued
    by a certificate authority in Mozilla's Root CA Program.
  - Smartblock Embeds allows users to selectively unblock
    certain social media embeds that are blocked in ETP Strict
    and Private Browsing modes. Currently, support is limited to
    a few embed types, with more to be added in future updates.
  - Firefox now upgrades page loads to HTTPS by default and
    gracefully falls back to HTTP if the secure connection fails.
    This behavior is known as HTTPS-First.
  - The "Copy Without Site Tracking" menu item was renamed to
    "Copy Clean Link" to help clarify expectations around what
    the feature does. "Copy Clean Link" is a list based approach
    to remove - known tracking parameters from links. This option
    can also now be used on plain text links.
  - The Clear browsing data and cookies dialog now allows
    clearing saved form info separately from browsing history.
  * Translations
  - Firefox now allows translating selected text portions to
    different languages after a full-page translation.
  - Full-Page Translations are now available within Firefox
    extension pages that start with the moz-extension:// URL
    scheme.
  - When suggesting a default translation language, Firefox
    will now take into consideration languages you have
    previously used for translations.
  - Added support for many new languages in Firefox
    translation.
  * Windows
  - Canvas2D switched from Direct2D to a platform independent
    acceleration backend on Windows.
  - Hardware-accelerated playback of HEVC video content is now
    supported on Windows.
  - Firefox on Windows 11 now uses acrylic-style menus for
    popup windows, which better match the operating system’s
    aesthetic.
  * macOS
  - Added support for multiple languages in the same document
    spoken in macOS VoiceOver.
  - The macOS session resume feature has been enhanced. Firefox
    will now automatically relaunch if it was open before a
    system restart, like after an OS update.
  - The macOS DMG installer packages now use LZMA for
    compression, reducing download size and installation time.
  - Due to recent changes in macOS Sequoia, the shortcut for
    completing search strings to .com addresses has been changed
    from Ctrl+Enter to Cmd+Enter.
  * Linux
  - Firefox now supports touchpad hold gestures on Linux. This
    means that kinetic (momentum) scrolling can now be
    interrupted by placing two fingers on the touchpad.
  * Developer: - Firefox now supports text fragments, which
    allows users to link directly to a specific portion of text
    in a web document via a special URL fragment.
  - Debugger log-point values are now automatically converted
    into profiler markers, making it easy to add information to
    the marker timeline directly from the Debugger.
  - The Debugger's directory root is now scoped to the specific
    domain where it was set, which aligns with typical usage and
    avoids applying it across unrelated domains. This builds on
    previous improvements such as a redesigned UI and easier
    removal of the root setting. Setting a directory root updates
    the Source List to show only the selected directory and its
    children. (Learn more)
  - The Network Blocking feature in the Network panel now
    blocks HTTP requests in addition to blocking responses.
  - The Network panel displays information about Early Hints,
    including a dedicated indicator for the 103 HTTP status code
    in the user interface.
  - The Network panel now allows overriding network request
    responses with local files.
  - The filter setting in the Network panel is now preserved
    across DevTools Toolbox sessions.
  - A new column has been added to the Network panel to display
    the full path of the request URL. This enhancement makes
    helps developers quickly view and analyze complete request
    paths.
  - Introduced a new console command `$$$` that allows
    searching the page, including within shadow roots.
  - Improved support for debugging web extensions, such as
    automatically reloading the web extension's source code in
    the Debugger when the extension is reloaded. Workers are now
    available in the Console panel’s context selector and
    breakpoints function correctly in content scripts.
  - In the Inspector Fonts panel, we now display fonts
    metadata, like the font version, designer, vendor, license,
    etc.
  - Added support for the import map integrity field, allowing
    you to ensure the integrity of dynamically or statically
    imported modules.
  - Implemented support for `Error.isError`, enabling brand
    checks to determine whether an object is an instance of
    Error. (Learn more)
  - Added support for the `error.captureStackTrace` extension
    to improve compatibility with other browsers. (Learn more:
    http://github.com/tc39/proposal-error-capturestacktrace)
  * Enterprise: - The UserMessaging policy has been updated with
    a new option to allow disabling Firefox Labs in preferences.
  - The Preferences policy has been updated to allow setting
    the preference security.pki.certificate_transparency.mode.
  - HTTPS-First is now on by default. You can manage this
    behavior using the HttpsOnlyMode and HttpAllowlist policies.
  - An internal change has been made to Firefox that removes
    `XPCOMUtils.defineLazyGetter`. For most people, this
    shouldn't matter, but if you encounter problems with
    AutoConfig or third party software like PolicyPak, this might
    be the cause. You'll need to reach out to your provider.
  - Firefox now supports the Content Analysis SDK for
    integrating DLP software. For more information, see this
    post.
  - The SearchEngines policy is now available on all versions
    of Firefox (not just the ESR).
  * Fixed: Various security fixes.
  MFSA 2025-51 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6428 (bmo#1970151)
    Firefox for Android opened URLs specified in a link
    querystring parameter
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6431 (bmo#1942716)
    The prompt in Firefox for Android that asks before opening a
    link in an external application could be bypassed
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1950056, bmo#1961777)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377, bmo#1960948, bmo#1966187,
    bmo#1966505, bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
</package>
<package pkgid="86502e9aab54f3c4a30f89715a1f7d16e83ac2a96ccb70468f4f16657fc54bb6167425e05206d71c12ac7fa681c856b1fa4b8285fa2d90513ce95607ef54cff0" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
</package>
<package pkgid="bb115cdaceab18a0edb4f787e9b37119974d6e20fa9c7343c7a50e3f5b4ecbaf7e22de062290ffeb7ae9be4af18b77eed0d46f2c2e61c2c8b9a55660c17eb811" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="8864de9988812de99e8bc067f43777e636647d434dfe6775b88987e1d1fe97e751ff578d355413ae3d4e35aa749f0bf0a5f7e6d31dbb7eba2491a23399369353" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.7.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
</package>
<package pkgid="a36429b00cac87bcf4ae83f2c1d5d32f458583e69c3ff6e8f057bacc2d5605ea8d9dc8bc84d75eadba2e90a9fdfc505f02321c25f80aa192a03ea121a8f8abbf" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.7.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
</package>
<package pkgid="e3f6e68928e6749d6359cd6d81ab8ff58a7e234055aae811122dade4022023cd25030a627b6904d1e63fb316787275a4271b137a9cd4bc9afeef504ab028de3b" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.8.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
</package>
<package pkgid="1ac718459479f570e2f99f4fc521e4f5555d5eb5c40d97d9d4be48f4a709aae31ec230d0938aed2ae59341a6edbb5c1cc251439acadb7c59e0fcc810820a0d00" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.9.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
</package>
<package pkgid="dd0ab3fc75131e6b28a4a5cfca57740a12bfd78d016c8cf5f006f58f143f1b7491fd3e96e911c7b25c5c11b1278f208d795186bfdf2d4292dc347158aad5ef74" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="140.9.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
</package>
<package pkgid="5989afc508d999ca4d5b52a8e20065c300e67369032a7b3cda56d9dbd5c558b4ce782d497df6016ebbffc6f40ff703fe5ebaf349397762064921b7da424d9865" name="MozillaFirefox-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="68" rel="lp160.3.1"/>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563364800">- recognize Leap 15.2 via sle_version</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1568030400">- layout.word_select.stop_at_punctuation -&gt; true (boo#1133163)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1570190400">- removed extensions preferences (moved to core package)
- use multibuild to provide branding package for
  MozillaFirefox and firefox-esr</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1584619200">- Update the default homepage and the bookmark icons</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1632484800">- use HTTPS for software search plugin</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1639742400">- add sle_version 150300 and 150400 check</changelog>
  <changelog author="Rischio Cinico &lt;rischiocinico@gmail.com&gt;" date="1645876800">- add some useful links about openSUSE in the about:newtab page</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1660046400">- add sle_version 150500 check</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1730721600">- add properties to use xdg-desktop-portal (boo#1226112)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1731240000">- do not use XDG for mime-handler as it does not handle the default
  browser check correctly</changelog>
</package>
<package pkgid="4bb252d6942ae80f0abf7708ec48c10796baa7a411141863a60b5f3c43edf4233ec93b0a6f49821f73dd73cb626902f9289e91ab996b5c4be7ba64b426a4b08b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
</package>
<package pkgid="56a08e35d0ff42de8b073f6b64c35a9d1c30b33f64e1c770764917788400b18f3f333a2784f440a451790c34886f19fb542501fee02f1aa29a1d4ff22bdafa2b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.10.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
</package>
<package pkgid="03cb89eda75a46e7828f04f4a251ccc23659df208c6236f728758ceb229f7de25649a18a67d575a9954506a10f6e16fa2269083dd2e9d2f1d8734a46796055d3" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.10.2" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
</package>
<package pkgid="ce47b8391eb766773e864106f68c606637d96a671ea4ff7bae8edb0fa90fb9fd9c03961bd226d00ffd0f4ccda9eb05856b01a09b400a3311daf16ebbaefffc27" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.11.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
</package>
<package pkgid="54a4381c528d61e12b13559250acfad96352fb1dec506f5c8743d6d9c0c94a12055166a49568d562b37db5ae7c0ec460acd3edaeda0607c943359e400d824f73" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
  <changelog author="cgrobertson@suse.com" date="1781179200">- Firefox Extended Support Release 140.12.0 ESR
  Placeholder changelog-entry (bsc#1268071)</changelog>
</package>
<package pkgid="15ca5a8224545635f5406a82a903884d2361f46b64e1136772d11efa20e2f002fabe606ad24840f0b38ba98417f9eee0fa3723352e4cc817a8fcb8c3eb685521" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.2.0" rel="160000.1.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1747656000">- Firefox Extended Support Release 128.10.1 ESR
  * Fixed: Security Fixes.
  MFSA 2025-37 (bsc#1243303)
  * CVE-2025-4918 (bmo#1966612)
    Out-of-bounds access when resolving Promise objects
  * CVE-2025-4919 (bmo#1966614)
    Out-of-bounds access when optimizing linear sums</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747742400">- Firefox Extended Support Release 128.11.0 ESR
  MFSA 2025-44 (bsc#1243353)
  * CVE-2025-5283 (bmo#1962421)
    Double-free in libvpx encoder
  * CVE-2025-5263 (bmo#1960745)
    Error handling for script execution was incorrectly isolated
    from web content
  * CVE-2025-5264 (bmo#1950001)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5265 (bmo#1962301)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5266 (bmo#1965628)
    Script element events leaked cross-origin resource status
  * CVE-2025-5267 (bmo#1954137)
    Clickjacking vulnerability could have led to leaking saved
    payment card details
  * CVE-2025-5268 (bmo#1950136, bmo#1958121, bmo#1960499,
    bmo#1962634)
    Memory safety bugs fixed in Firefox 139, Thunderbird 139,
    Firefox ESR 128.11, and Thunderbird 128.11
  * CVE-2025-5269 (bmo#1924108)
    Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird
    128.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161600">- Firefox Extended Support Release 128.12.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-53 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161601">- removed patches firefox-kde.patch, mozilla-kde.patch,
  fix-sle12-build-errors.patch, mozilla-rust-disable-future-incompat.patch
- added patches mozilla-bmo1746799.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1750939200">- Firefox Extended Support Release 140.0esr ESR
  * General
  - Reader View now has an enhanced Text and Layout menu with
    new options for character spacing, word spacing, and text
    alignment. These changes offer a more accessible reading
    experience.
  - Reader View now has a Theme menu with additional Contrast
    and Gray options. You can also select custom colors for text,
    background, and links from the Custom tab.
  - Firefox will now offer to temporarily remember when users
    grant permissions to sites (e.g. geolocation). Temporary
    permissions will be removed either after one hour or when the
    tab is closed.
  - Firefox now includes safeguards to prevent sites from
    abusing the history API by generating excessive history
    entries, which can make navigating with the back and forward
    buttons difficult by cluttering the history. This
    intervention ensures that such entries, unless interacted
    with by the user, are skipped when using the back and forward
    buttons.
  - Firefox now identifies all links in PDFs and turns them
    into hyperlinks.
  - You can now copy links from background tabs using the
    tabstrip context menu on macOS and Linux.
  - Users on macOS and Linux are now given the option to close
    only the current tab if the Quit keyboard shortcut is used
    while multiple tabs are open in the window. (bmo#None)
  * Sidebar and Tabs
  - You can now enable the updated Firefox sidebar in Settings
    &gt; General &gt; Browser Layout to quickly access multiple tools
    in one click, without leaving your main view. Sidebar tools
    include an AI chatbot of your choice, bookmarks, history, and
    tabs from devices you sync with your Mozilla account.
  - Keep a lot of tabs open? Try our new vertical tabs layout
    to quickly scan your list of tabs. With vertical tabs, your
    open and pinned tabs appear in the sidebar instead of along
    the top of the browser. To turn on vertical tabs, right-click
    on the toolbar near the top of the browser and select Turn on
    Vertical Tabs. If you’ve enabled the updated sidebar, you can
    also go to Customize sidebar and check Vertical tabs. Early
    testers report feeling more organized after using vertical
    tabs for a few days.
  - Stay productive and organized with less effort by grouping
    related tabs together. One simple way to create a group is to
    drag a tab onto another, pause until you see a highlight,
    then drop to create the group. Tab groups can be named,
    color-coded, and are always saved. You can close a group and
    reopen it later.
  - A tab preview is now displayed when hovering the mouse over
    background tabs, making it easier to locate the desired tab
    without needing to switch tabs.
  - The sidebar to view tabs from other devices can now be
    opened via the Tab overview menu.
  * Security &amp; Privacy
  - HTTPS is replacing HTTP as the default protocol in the
    address bar on non-local sites. If a site is not available
    via HTTPS, Firefox will fall back to HTTP.
  - Firefox now blocks third-party cookie access when Enhanced
    Tracking Protection's Strict mode is enabled.
  - Firefox now has a new anti-tracking feature, Bounce
    Tracking Protection, which is now available in Enhanced
    Tracking Protection's "Strict" mode. This feature detects
    bounce trackers based on their redirect behavior and
    periodically purges their cookies and site data to block
    tracking.
  - Firefox now enforces certificate transparency, requiring
    web servers to provide sufficient proof that their
    certificates were publicly disclosed before they will be
    trusted. This only affects servers using certificates issued
    by a certificate authority in Mozilla's Root CA Program.
  - Smartblock Embeds allows users to selectively unblock
    certain social media embeds that are blocked in ETP Strict
    and Private Browsing modes. Currently, support is limited to
    a few embed types, with more to be added in future updates.
  - Firefox now upgrades page loads to HTTPS by default and
    gracefully falls back to HTTP if the secure connection fails.
    This behavior is known as HTTPS-First.
  - The "Copy Without Site Tracking" menu item was renamed to
    "Copy Clean Link" to help clarify expectations around what
    the feature does. "Copy Clean Link" is a list based approach
    to remove - known tracking parameters from links. This option
    can also now be used on plain text links.
  - The Clear browsing data and cookies dialog now allows
    clearing saved form info separately from browsing history.
  * Translations
  - Firefox now allows translating selected text portions to
    different languages after a full-page translation.
  - Full-Page Translations are now available within Firefox
    extension pages that start with the moz-extension:// URL
    scheme.
  - When suggesting a default translation language, Firefox
    will now take into consideration languages you have
    previously used for translations.
  - Added support for many new languages in Firefox
    translation.
  * Windows
  - Canvas2D switched from Direct2D to a platform independent
    acceleration backend on Windows.
  - Hardware-accelerated playback of HEVC video content is now
    supported on Windows.
  - Firefox on Windows 11 now uses acrylic-style menus for
    popup windows, which better match the operating system’s
    aesthetic.
  * macOS
  - Added support for multiple languages in the same document
    spoken in macOS VoiceOver.
  - The macOS session resume feature has been enhanced. Firefox
    will now automatically relaunch if it was open before a
    system restart, like after an OS update.
  - The macOS DMG installer packages now use LZMA for
    compression, reducing download size and installation time.
  - Due to recent changes in macOS Sequoia, the shortcut for
    completing search strings to .com addresses has been changed
    from Ctrl+Enter to Cmd+Enter.
  * Linux
  - Firefox now supports touchpad hold gestures on Linux. This
    means that kinetic (momentum) scrolling can now be
    interrupted by placing two fingers on the touchpad.
  * Developer: - Firefox now supports text fragments, which
    allows users to link directly to a specific portion of text
    in a web document via a special URL fragment.
  - Debugger log-point values are now automatically converted
    into profiler markers, making it easy to add information to
    the marker timeline directly from the Debugger.
  - The Debugger's directory root is now scoped to the specific
    domain where it was set, which aligns with typical usage and
    avoids applying it across unrelated domains. This builds on
    previous improvements such as a redesigned UI and easier
    removal of the root setting. Setting a directory root updates
    the Source List to show only the selected directory and its
    children. (Learn more)
  - The Network Blocking feature in the Network panel now
    blocks HTTP requests in addition to blocking responses.
  - The Network panel displays information about Early Hints,
    including a dedicated indicator for the 103 HTTP status code
    in the user interface.
  - The Network panel now allows overriding network request
    responses with local files.
  - The filter setting in the Network panel is now preserved
    across DevTools Toolbox sessions.
  - A new column has been added to the Network panel to display
    the full path of the request URL. This enhancement makes
    helps developers quickly view and analyze complete request
    paths.
  - Introduced a new console command `$$$` that allows
    searching the page, including within shadow roots.
  - Improved support for debugging web extensions, such as
    automatically reloading the web extension's source code in
    the Debugger when the extension is reloaded. Workers are now
    available in the Console panel’s context selector and
    breakpoints function correctly in content scripts.
  - In the Inspector Fonts panel, we now display fonts
    metadata, like the font version, designer, vendor, license,
    etc.
  - Added support for the import map integrity field, allowing
    you to ensure the integrity of dynamically or statically
    imported modules.
  - Implemented support for `Error.isError`, enabling brand
    checks to determine whether an object is an instance of
    Error. (Learn more)
  - Added support for the `error.captureStackTrace` extension
    to improve compatibility with other browsers. (Learn more:
    http://github.com/tc39/proposal-error-capturestacktrace)
  * Enterprise: - The UserMessaging policy has been updated with
    a new option to allow disabling Firefox Labs in preferences.
  - The Preferences policy has been updated to allow setting
    the preference security.pki.certificate_transparency.mode.
  - HTTPS-First is now on by default. You can manage this
    behavior using the HttpsOnlyMode and HttpAllowlist policies.
  - An internal change has been made to Firefox that removes
    `XPCOMUtils.defineLazyGetter`. For most people, this
    shouldn't matter, but if you encounter problems with
    AutoConfig or third party software like PolicyPak, this might
    be the cause. You'll need to reach out to your provider.
  - Firefox now supports the Content Analysis SDK for
    integrating DLP software. For more information, see this
    post.
  - The SearchEngines policy is now available on all versions
    of Firefox (not just the ESR).
  * Fixed: Various security fixes.
  MFSA 2025-51 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6428 (bmo#1970151)
    Firefox for Android opened URLs specified in a link
    querystring parameter
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6431 (bmo#1942716)
    The prompt in Firefox for Android that asks before opening a
    link in an external application could be bypassed
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1950056, bmo#1961777)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377, bmo#1960948, bmo#1966187,
    bmo#1966505, bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
</package>
<package pkgid="62238daf73b3d1a31583498d8452bd276b1edccdc886f4bbd01d4bc3a0344dc1fe2398f9a67255fbb6ef4361374c5be9d02e071c4e083cd4e7c8a6b7ae9fa0f5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
</package>
<package pkgid="a8091b75572ec2c5d7edcc649ec155deb6874748f3ec4033bbc22367363a3cbdd039d9de879d05aa76a1e3fefcd4a072c0da04466af246068874e9494a40aa8b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="a5fe2086224b03811a510a2e49e8bef68bbe50ddc395e32734e552122959cfab34a41cd01910c57b9fd0dee7e6ca4eb38e5d249dcd4b799ac391e9371432baa9" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.7.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
</package>
<package pkgid="e6d6df2acfead1de57a5bc0b80c136cf60febdc101e63fd4dde90897ebd5d328b3ede87f3913a8e7c1a9485ef88d9f393d42b35a7b58ad2b19fdc802f411d20c" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.7.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
</package>
<package pkgid="b4a3cd83a937864cb7874eacb983acad98a81073497d33023eda6d78946f0e1ba4c0514d8e9f67d132cdd77e1ca2fd7658deab60e82a35988e7e1174d8768842" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.8.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
</package>
<package pkgid="649a227a839f89c33c844ef9ad104862aaaa650fd7e7730afe6196ce0ad2d25c1f1aae6518d42762b6490ec2330267cbe79257a0b712419f3f6babc33d72dcba" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.9.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
</package>
<package pkgid="d92bba37c470918e459cd4eecb82c01c8bcb4925a70effc061ff3c87422c2a381f2dec32e65ec1fe2f0abd9122d0cd2a46996f39a09b1a537e9bff0f298b3c87" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="140.9.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
</package>
<package pkgid="d2b683f298b2671631ec9c2690962e9b4ebb376dbadff6f6098b2fdd4c23b515e30022ebcf21110944e5837bb117bcabc75b6cbc2bcaab6dd6da9cbbe81aa9d6" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.10.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
</package>
<package pkgid="74e12843403358c198605f13ed507582e8a4d5742b8238be55aff5d556f2874debc978abb1047fd10c92ff1fcae90a12ad716188ca278fd7bc69498830888aff" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.10.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
</package>
<package pkgid="dd28bf8e1458d6982a0f5bd4c136a6dae438dddb5d643ea55ac6cd71421f215cb8eb00284f904287cfc4c6a46f0df3e6306b912bd068ef2732b7e0d8f3b1e89f" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.10.1" rel="160000.1.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
</package>
<package pkgid="0934efe28728a4c63cc583e31cfb8640301ac9651e0338b77f9b3a819aeb0c16f5a1d735e9e5c6566079f144302539fc31f618d194a0e4de5dd9d1557c47627f" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.10.2" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
</package>
<package pkgid="a7a2717d35615bacc44d2d111ff1fc295c1b1c8a8c81eb953bf426303b9fedef41f3eadcc2588518f16c1103b5a6b0510cd28a4a7d88731dad92aadebc1e0fad" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.10.2" rel="160000.1.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
</package>
<package pkgid="05aac1c88dc6c1655afc957adbce4fd5dfcd3553ace2440c7615e6596c4ff33ce59c1f08ebfd0220bda0fd0dd39d4957da067bd1094ef3eb75f5d6b6c22f7d78" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.11.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
</package>
<package pkgid="d55cc431cad7f0434dbda0ddc32938f905c41c6a88c147b48e2b7e1d3ab44d068e6f08a3aee7b528bd6c45ab53aec256ce5d02c0dd301e24c51252c0c7ecdb24" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.12.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
  <changelog author="cgrobertson@suse.com" date="1781179200">- Firefox Extended Support Release 140.12.0 ESR
  Placeholder changelog-entry (bsc#1268071)</changelog>
</package>
<package pkgid="0b589746b8a025c362bb01c8f2d127b48074449ae510642951a69f66414a0549968f1d7cb47a2f2693ecaf63e61ae83c0db6ef958c67f42d85cbcdb1fcd659d9" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.2.0" rel="160000.1.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1747656000">- Firefox Extended Support Release 128.10.1 ESR
  * Fixed: Security Fixes.
  MFSA 2025-37 (bsc#1243303)
  * CVE-2025-4918 (bmo#1966612)
    Out-of-bounds access when resolving Promise objects
  * CVE-2025-4919 (bmo#1966614)
    Out-of-bounds access when optimizing linear sums</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747742400">- Firefox Extended Support Release 128.11.0 ESR
  MFSA 2025-44 (bsc#1243353)
  * CVE-2025-5283 (bmo#1962421)
    Double-free in libvpx encoder
  * CVE-2025-5263 (bmo#1960745)
    Error handling for script execution was incorrectly isolated
    from web content
  * CVE-2025-5264 (bmo#1950001)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5265 (bmo#1962301)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5266 (bmo#1965628)
    Script element events leaked cross-origin resource status
  * CVE-2025-5267 (bmo#1954137)
    Clickjacking vulnerability could have led to leaking saved
    payment card details
  * CVE-2025-5268 (bmo#1950136, bmo#1958121, bmo#1960499,
    bmo#1962634)
    Memory safety bugs fixed in Firefox 139, Thunderbird 139,
    Firefox ESR 128.11, and Thunderbird 128.11
  * CVE-2025-5269 (bmo#1924108)
    Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird
    128.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161600">- Firefox Extended Support Release 128.12.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-53 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161601">- removed patches firefox-kde.patch, mozilla-kde.patch,
  fix-sle12-build-errors.patch, mozilla-rust-disable-future-incompat.patch
- added patches mozilla-bmo1746799.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1750939200">- Firefox Extended Support Release 140.0esr ESR
  * General
  - Reader View now has an enhanced Text and Layout menu with
    new options for character spacing, word spacing, and text
    alignment. These changes offer a more accessible reading
    experience.
  - Reader View now has a Theme menu with additional Contrast
    and Gray options. You can also select custom colors for text,
    background, and links from the Custom tab.
  - Firefox will now offer to temporarily remember when users
    grant permissions to sites (e.g. geolocation). Temporary
    permissions will be removed either after one hour or when the
    tab is closed.
  - Firefox now includes safeguards to prevent sites from
    abusing the history API by generating excessive history
    entries, which can make navigating with the back and forward
    buttons difficult by cluttering the history. This
    intervention ensures that such entries, unless interacted
    with by the user, are skipped when using the back and forward
    buttons.
  - Firefox now identifies all links in PDFs and turns them
    into hyperlinks.
  - You can now copy links from background tabs using the
    tabstrip context menu on macOS and Linux.
  - Users on macOS and Linux are now given the option to close
    only the current tab if the Quit keyboard shortcut is used
    while multiple tabs are open in the window. (bmo#None)
  * Sidebar and Tabs
  - You can now enable the updated Firefox sidebar in Settings
    &gt; General &gt; Browser Layout to quickly access multiple tools
    in one click, without leaving your main view. Sidebar tools
    include an AI chatbot of your choice, bookmarks, history, and
    tabs from devices you sync with your Mozilla account.
  - Keep a lot of tabs open? Try our new vertical tabs layout
    to quickly scan your list of tabs. With vertical tabs, your
    open and pinned tabs appear in the sidebar instead of along
    the top of the browser. To turn on vertical tabs, right-click
    on the toolbar near the top of the browser and select Turn on
    Vertical Tabs. If you’ve enabled the updated sidebar, you can
    also go to Customize sidebar and check Vertical tabs. Early
    testers report feeling more organized after using vertical
    tabs for a few days.
  - Stay productive and organized with less effort by grouping
    related tabs together. One simple way to create a group is to
    drag a tab onto another, pause until you see a highlight,
    then drop to create the group. Tab groups can be named,
    color-coded, and are always saved. You can close a group and
    reopen it later.
  - A tab preview is now displayed when hovering the mouse over
    background tabs, making it easier to locate the desired tab
    without needing to switch tabs.
  - The sidebar to view tabs from other devices can now be
    opened via the Tab overview menu.
  * Security &amp; Privacy
  - HTTPS is replacing HTTP as the default protocol in the
    address bar on non-local sites. If a site is not available
    via HTTPS, Firefox will fall back to HTTP.
  - Firefox now blocks third-party cookie access when Enhanced
    Tracking Protection's Strict mode is enabled.
  - Firefox now has a new anti-tracking feature, Bounce
    Tracking Protection, which is now available in Enhanced
    Tracking Protection's "Strict" mode. This feature detects
    bounce trackers based on their redirect behavior and
    periodically purges their cookies and site data to block
    tracking.
  - Firefox now enforces certificate transparency, requiring
    web servers to provide sufficient proof that their
    certificates were publicly disclosed before they will be
    trusted. This only affects servers using certificates issued
    by a certificate authority in Mozilla's Root CA Program.
  - Smartblock Embeds allows users to selectively unblock
    certain social media embeds that are blocked in ETP Strict
    and Private Browsing modes. Currently, support is limited to
    a few embed types, with more to be added in future updates.
  - Firefox now upgrades page loads to HTTPS by default and
    gracefully falls back to HTTP if the secure connection fails.
    This behavior is known as HTTPS-First.
  - The "Copy Without Site Tracking" menu item was renamed to
    "Copy Clean Link" to help clarify expectations around what
    the feature does. "Copy Clean Link" is a list based approach
    to remove - known tracking parameters from links. This option
    can also now be used on plain text links.
  - The Clear browsing data and cookies dialog now allows
    clearing saved form info separately from browsing history.
  * Translations
  - Firefox now allows translating selected text portions to
    different languages after a full-page translation.
  - Full-Page Translations are now available within Firefox
    extension pages that start with the moz-extension:// URL
    scheme.
  - When suggesting a default translation language, Firefox
    will now take into consideration languages you have
    previously used for translations.
  - Added support for many new languages in Firefox
    translation.
  * Windows
  - Canvas2D switched from Direct2D to a platform independent
    acceleration backend on Windows.
  - Hardware-accelerated playback of HEVC video content is now
    supported on Windows.
  - Firefox on Windows 11 now uses acrylic-style menus for
    popup windows, which better match the operating system’s
    aesthetic.
  * macOS
  - Added support for multiple languages in the same document
    spoken in macOS VoiceOver.
  - The macOS session resume feature has been enhanced. Firefox
    will now automatically relaunch if it was open before a
    system restart, like after an OS update.
  - The macOS DMG installer packages now use LZMA for
    compression, reducing download size and installation time.
  - Due to recent changes in macOS Sequoia, the shortcut for
    completing search strings to .com addresses has been changed
    from Ctrl+Enter to Cmd+Enter.
  * Linux
  - Firefox now supports touchpad hold gestures on Linux. This
    means that kinetic (momentum) scrolling can now be
    interrupted by placing two fingers on the touchpad.
  * Developer: - Firefox now supports text fragments, which
    allows users to link directly to a specific portion of text
    in a web document via a special URL fragment.
  - Debugger log-point values are now automatically converted
    into profiler markers, making it easy to add information to
    the marker timeline directly from the Debugger.
  - The Debugger's directory root is now scoped to the specific
    domain where it was set, which aligns with typical usage and
    avoids applying it across unrelated domains. This builds on
    previous improvements such as a redesigned UI and easier
    removal of the root setting. Setting a directory root updates
    the Source List to show only the selected directory and its
    children. (Learn more)
  - The Network Blocking feature in the Network panel now
    blocks HTTP requests in addition to blocking responses.
  - The Network panel displays information about Early Hints,
    including a dedicated indicator for the 103 HTTP status code
    in the user interface.
  - The Network panel now allows overriding network request
    responses with local files.
  - The filter setting in the Network panel is now preserved
    across DevTools Toolbox sessions.
  - A new column has been added to the Network panel to display
    the full path of the request URL. This enhancement makes
    helps developers quickly view and analyze complete request
    paths.
  - Introduced a new console command `$$$` that allows
    searching the page, including within shadow roots.
  - Improved support for debugging web extensions, such as
    automatically reloading the web extension's source code in
    the Debugger when the extension is reloaded. Workers are now
    available in the Console panel’s context selector and
    breakpoints function correctly in content scripts.
  - In the Inspector Fonts panel, we now display fonts
    metadata, like the font version, designer, vendor, license,
    etc.
  - Added support for the import map integrity field, allowing
    you to ensure the integrity of dynamically or statically
    imported modules.
  - Implemented support for `Error.isError`, enabling brand
    checks to determine whether an object is an instance of
    Error. (Learn more)
  - Added support for the `error.captureStackTrace` extension
    to improve compatibility with other browsers. (Learn more:
    http://github.com/tc39/proposal-error-capturestacktrace)
  * Enterprise: - The UserMessaging policy has been updated with
    a new option to allow disabling Firefox Labs in preferences.
  - The Preferences policy has been updated to allow setting
    the preference security.pki.certificate_transparency.mode.
  - HTTPS-First is now on by default. You can manage this
    behavior using the HttpsOnlyMode and HttpAllowlist policies.
  - An internal change has been made to Firefox that removes
    `XPCOMUtils.defineLazyGetter`. For most people, this
    shouldn't matter, but if you encounter problems with
    AutoConfig or third party software like PolicyPak, this might
    be the cause. You'll need to reach out to your provider.
  - Firefox now supports the Content Analysis SDK for
    integrating DLP software. For more information, see this
    post.
  - The SearchEngines policy is now available on all versions
    of Firefox (not just the ESR).
  * Fixed: Various security fixes.
  MFSA 2025-51 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6428 (bmo#1970151)
    Firefox for Android opened URLs specified in a link
    querystring parameter
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6431 (bmo#1942716)
    The prompt in Firefox for Android that asks before opening a
    link in an external application could be bypassed
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1950056, bmo#1961777)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377, bmo#1960948, bmo#1966187,
    bmo#1966505, bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
</package>
<package pkgid="fc56ed5e96523af825d90a023201f24fc9a6f30deecb749e104bcb371aa0bd70b3a2476ac06da2ef322676ae2990550d5783308a54456193087f241d6825da82" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.5.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
</package>
<package pkgid="f1dca6c8b9d8b3f913b22bf0dfd402575a7bceb098f0e2cff82f1eb7118da79bce9f131c331d69ac39bffc4d8a813452d6cf2cb44464d780903bcc62e42d68f1" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.6.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="cac00786dca840460d173281c281c0499d6050712b654ea753790ba569c191faee09623d9f2d92d5a422c956547654b0f7c98bff12bb0579252ba360875b68d7" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.7.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
</package>
<package pkgid="7d620d2e9ddef6e6e8feceba7822539b3baf8582df44616b218fb65667327abfe1dd29907e5d137dd769a2b683296d98c5b1f11634b51864f9eec22078596b5d" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.7.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
</package>
<package pkgid="9806324a22c686ff0016fcb81c81f6259dfb8ae46806a6e414d4d1a97bb9b8995e8afd94433798d68f32ebdd14fd334ce8df0b37df7afc6cc9241ee22705d045" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.8.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
</package>
<package pkgid="e7cdd85cf9b8d177bc8cb3a6bb9a10dc1e08bd086a663d3a8c9a378f27a4860545913734e3fdbbd25872484410ffedf07b06a29f3d69e22d03bdf1b387820a8c" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.9.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
</package>
<package pkgid="6f2a4c0a9526211922b19189658f532ea2400c807c3f9f253f14449399b40d2bc39f919c5a78f0fb115411bc84fcb92961e08a237943e6232f3fe90aa985dc65" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="140.9.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
</package>
<package pkgid="03f97670e643488dfd2132d0fe468cb5ab001d17b5d1d23c49c6553eb9587baebdb56bc51f8662001fa32b8b3a8b90e3e5f35ab082c7b8bb305293f3b5309bfd" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
</package>
<package pkgid="42e9f9c9be478f40f1f64125085d79b39144491fb215b703d13639e56b872daf8cc1f4bb86e2d3b4aae99bc37bb60af225faa48909864bd75083e41b0e211eb0" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.10.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
</package>
<package pkgid="025a77b71c4a5fdf29efa4b8669fbc94d982f27526f67a23806abc57d874e6383093b02d69d49f00624e716dbce3bbfeec7cfbd6696c509aaebe4d9752e6004c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.10.2" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
</package>
<package pkgid="9f5389f6cee8a960c1a9c143ac59e6f17fd70b5cbd1776620333943913bb8d187075570b8cb6bcbec27e91ef1bcb80023f66e92672e3e2f6cd03fd9dd6270743" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.11.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
</package>
<package pkgid="c738d4aa7e06b81967bc14128eafef7120fe37ec12e8df8cb0f5da94789dfac131ce37b760b9866e6217ee83a3933aa9c141f1ba4eae379b8607fbd329bf9197" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
  <changelog author="cgrobertson@suse.com" date="1781179200">- Firefox Extended Support Release 140.12.0 ESR
  Placeholder changelog-entry (bsc#1268071)</changelog>
</package>
<package pkgid="1fd4d0bfb7fb4f9b8e10a75f3dde85a25b3d3711d141107a22d3decc5f6edd1218250d2c13e04c8a335c3f4271170041fb2ad06b4e179e7aa278bcbfd2fc6224" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.2.0" rel="160000.1.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1747656000">- Firefox Extended Support Release 128.10.1 ESR
  * Fixed: Security Fixes.
  MFSA 2025-37 (bsc#1243303)
  * CVE-2025-4918 (bmo#1966612)
    Out-of-bounds access when resolving Promise objects
  * CVE-2025-4919 (bmo#1966614)
    Out-of-bounds access when optimizing linear sums</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747742400">- Firefox Extended Support Release 128.11.0 ESR
  MFSA 2025-44 (bsc#1243353)
  * CVE-2025-5283 (bmo#1962421)
    Double-free in libvpx encoder
  * CVE-2025-5263 (bmo#1960745)
    Error handling for script execution was incorrectly isolated
    from web content
  * CVE-2025-5264 (bmo#1950001)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5265 (bmo#1962301)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5266 (bmo#1965628)
    Script element events leaked cross-origin resource status
  * CVE-2025-5267 (bmo#1954137)
    Clickjacking vulnerability could have led to leaking saved
    payment card details
  * CVE-2025-5268 (bmo#1950136, bmo#1958121, bmo#1960499,
    bmo#1962634)
    Memory safety bugs fixed in Firefox 139, Thunderbird 139,
    Firefox ESR 128.11, and Thunderbird 128.11
  * CVE-2025-5269 (bmo#1924108)
    Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird
    128.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161600">- Firefox Extended Support Release 128.12.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-53 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161601">- removed patches firefox-kde.patch, mozilla-kde.patch,
  fix-sle12-build-errors.patch, mozilla-rust-disable-future-incompat.patch
- added patches mozilla-bmo1746799.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1750939200">- Firefox Extended Support Release 140.0esr ESR
  * General
  - Reader View now has an enhanced Text and Layout menu with
    new options for character spacing, word spacing, and text
    alignment. These changes offer a more accessible reading
    experience.
  - Reader View now has a Theme menu with additional Contrast
    and Gray options. You can also select custom colors for text,
    background, and links from the Custom tab.
  - Firefox will now offer to temporarily remember when users
    grant permissions to sites (e.g. geolocation). Temporary
    permissions will be removed either after one hour or when the
    tab is closed.
  - Firefox now includes safeguards to prevent sites from
    abusing the history API by generating excessive history
    entries, which can make navigating with the back and forward
    buttons difficult by cluttering the history. This
    intervention ensures that such entries, unless interacted
    with by the user, are skipped when using the back and forward
    buttons.
  - Firefox now identifies all links in PDFs and turns them
    into hyperlinks.
  - You can now copy links from background tabs using the
    tabstrip context menu on macOS and Linux.
  - Users on macOS and Linux are now given the option to close
    only the current tab if the Quit keyboard shortcut is used
    while multiple tabs are open in the window. (bmo#None)
  * Sidebar and Tabs
  - You can now enable the updated Firefox sidebar in Settings
    &gt; General &gt; Browser Layout to quickly access multiple tools
    in one click, without leaving your main view. Sidebar tools
    include an AI chatbot of your choice, bookmarks, history, and
    tabs from devices you sync with your Mozilla account.
  - Keep a lot of tabs open? Try our new vertical tabs layout
    to quickly scan your list of tabs. With vertical tabs, your
    open and pinned tabs appear in the sidebar instead of along
    the top of the browser. To turn on vertical tabs, right-click
    on the toolbar near the top of the browser and select Turn on
    Vertical Tabs. If you’ve enabled the updated sidebar, you can
    also go to Customize sidebar and check Vertical tabs. Early
    testers report feeling more organized after using vertical
    tabs for a few days.
  - Stay productive and organized with less effort by grouping
    related tabs together. One simple way to create a group is to
    drag a tab onto another, pause until you see a highlight,
    then drop to create the group. Tab groups can be named,
    color-coded, and are always saved. You can close a group and
    reopen it later.
  - A tab preview is now displayed when hovering the mouse over
    background tabs, making it easier to locate the desired tab
    without needing to switch tabs.
  - The sidebar to view tabs from other devices can now be
    opened via the Tab overview menu.
  * Security &amp; Privacy
  - HTTPS is replacing HTTP as the default protocol in the
    address bar on non-local sites. If a site is not available
    via HTTPS, Firefox will fall back to HTTP.
  - Firefox now blocks third-party cookie access when Enhanced
    Tracking Protection's Strict mode is enabled.
  - Firefox now has a new anti-tracking feature, Bounce
    Tracking Protection, which is now available in Enhanced
    Tracking Protection's "Strict" mode. This feature detects
    bounce trackers based on their redirect behavior and
    periodically purges their cookies and site data to block
    tracking.
  - Firefox now enforces certificate transparency, requiring
    web servers to provide sufficient proof that their
    certificates were publicly disclosed before they will be
    trusted. This only affects servers using certificates issued
    by a certificate authority in Mozilla's Root CA Program.
  - Smartblock Embeds allows users to selectively unblock
    certain social media embeds that are blocked in ETP Strict
    and Private Browsing modes. Currently, support is limited to
    a few embed types, with more to be added in future updates.
  - Firefox now upgrades page loads to HTTPS by default and
    gracefully falls back to HTTP if the secure connection fails.
    This behavior is known as HTTPS-First.
  - The "Copy Without Site Tracking" menu item was renamed to
    "Copy Clean Link" to help clarify expectations around what
    the feature does. "Copy Clean Link" is a list based approach
    to remove - known tracking parameters from links. This option
    can also now be used on plain text links.
  - The Clear browsing data and cookies dialog now allows
    clearing saved form info separately from browsing history.
  * Translations
  - Firefox now allows translating selected text portions to
    different languages after a full-page translation.
  - Full-Page Translations are now available within Firefox
    extension pages that start with the moz-extension:// URL
    scheme.
  - When suggesting a default translation language, Firefox
    will now take into consideration languages you have
    previously used for translations.
  - Added support for many new languages in Firefox
    translation.
  * Windows
  - Canvas2D switched from Direct2D to a platform independent
    acceleration backend on Windows.
  - Hardware-accelerated playback of HEVC video content is now
    supported on Windows.
  - Firefox on Windows 11 now uses acrylic-style menus for
    popup windows, which better match the operating system’s
    aesthetic.
  * macOS
  - Added support for multiple languages in the same document
    spoken in macOS VoiceOver.
  - The macOS session resume feature has been enhanced. Firefox
    will now automatically relaunch if it was open before a
    system restart, like after an OS update.
  - The macOS DMG installer packages now use LZMA for
    compression, reducing download size and installation time.
  - Due to recent changes in macOS Sequoia, the shortcut for
    completing search strings to .com addresses has been changed
    from Ctrl+Enter to Cmd+Enter.
  * Linux
  - Firefox now supports touchpad hold gestures on Linux. This
    means that kinetic (momentum) scrolling can now be
    interrupted by placing two fingers on the touchpad.
  * Developer: - Firefox now supports text fragments, which
    allows users to link directly to a specific portion of text
    in a web document via a special URL fragment.
  - Debugger log-point values are now automatically converted
    into profiler markers, making it easy to add information to
    the marker timeline directly from the Debugger.
  - The Debugger's directory root is now scoped to the specific
    domain where it was set, which aligns with typical usage and
    avoids applying it across unrelated domains. This builds on
    previous improvements such as a redesigned UI and easier
    removal of the root setting. Setting a directory root updates
    the Source List to show only the selected directory and its
    children. (Learn more)
  - The Network Blocking feature in the Network panel now
    blocks HTTP requests in addition to blocking responses.
  - The Network panel displays information about Early Hints,
    including a dedicated indicator for the 103 HTTP status code
    in the user interface.
  - The Network panel now allows overriding network request
    responses with local files.
  - The filter setting in the Network panel is now preserved
    across DevTools Toolbox sessions.
  - A new column has been added to the Network panel to display
    the full path of the request URL. This enhancement makes
    helps developers quickly view and analyze complete request
    paths.
  - Introduced a new console command `$$$` that allows
    searching the page, including within shadow roots.
  - Improved support for debugging web extensions, such as
    automatically reloading the web extension's source code in
    the Debugger when the extension is reloaded. Workers are now
    available in the Console panel’s context selector and
    breakpoints function correctly in content scripts.
  - In the Inspector Fonts panel, we now display fonts
    metadata, like the font version, designer, vendor, license,
    etc.
  - Added support for the import map integrity field, allowing
    you to ensure the integrity of dynamically or statically
    imported modules.
  - Implemented support for `Error.isError`, enabling brand
    checks to determine whether an object is an instance of
    Error. (Learn more)
  - Added support for the `error.captureStackTrace` extension
    to improve compatibility with other browsers. (Learn more:
    http://github.com/tc39/proposal-error-capturestacktrace)
  * Enterprise: - The UserMessaging policy has been updated with
    a new option to allow disabling Firefox Labs in preferences.
  - The Preferences policy has been updated to allow setting
    the preference security.pki.certificate_transparency.mode.
  - HTTPS-First is now on by default. You can manage this
    behavior using the HttpsOnlyMode and HttpAllowlist policies.
  - An internal change has been made to Firefox that removes
    `XPCOMUtils.defineLazyGetter`. For most people, this
    shouldn't matter, but if you encounter problems with
    AutoConfig or third party software like PolicyPak, this might
    be the cause. You'll need to reach out to your provider.
  - Firefox now supports the Content Analysis SDK for
    integrating DLP software. For more information, see this
    post.
  - The SearchEngines policy is now available on all versions
    of Firefox (not just the ESR).
  * Fixed: Various security fixes.
  MFSA 2025-51 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6428 (bmo#1970151)
    Firefox for Android opened URLs specified in a link
    querystring parameter
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6431 (bmo#1942716)
    The prompt in Firefox for Android that asks before opening a
    link in an external application could be bypassed
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1950056, bmo#1961777)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377, bmo#1960948, bmo#1966187,
    bmo#1966505, bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
</package>
<package pkgid="0192fd6d9d9ec7e0f8eeb38ad4b252eb2970d3d70f862b9b985d0c110044857534304f72278352fd603c49d7a3cf80c3fe56c81c5fe2b5182dacb87a0b384e0a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
</package>
<package pkgid="357de8213d3afb693c473a95d0a0689eef4d174cf4dd72706adc1b98e1598db0009d2b7033d029d6986f2381e9df1b90d002defafc968451d9b525523de0dd18" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="62b321c39254d3ee74372b9b456c024eb36e56238097d6246b7b0ac2e63686225e62d8819158046ca04bde068a2588d157856f255e0193d64a5414f508591ecd" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.7.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
</package>
<package pkgid="a55d6ff08626b4248fccc9097d9cb2e23e6bd3f2015660bede3464dbf2c8696a0edc9adc5a9dc0a26e0c303e5b1712fa07dbe5eee9cae4f91e2692efac69ff2c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.7.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
</package>
<package pkgid="0fc25d7495f31a4e1dc1bb1a124a33f66c71e60389121233042ed3b27e906de306da3ae9d7b0afd5f9c88430f8486c9961958fa3d8132656dcd58a1612e1d44a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.8.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
</package>
<package pkgid="2fae2ffccab6504803a614c2ab16323f7410658fdf84760412ee380105c72aa02d2563746139de00bc1108383a7e43e64492cf657ecf24595bdde43e5c4a340f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.9.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
</package>
<package pkgid="f48e134edb104c520c7f5dfda5a6624d945d5158d98c1f8b6eec578564fb847c96d7ac155666fdb3cdd1269489bfaf9a7b97ee75bf574c478eb9bab5477b14f8" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="140.9.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
</package>
<package pkgid="d1ec71416509cda09cda28b263cc1544e9de491db80aa552628e9953cf20b0d93c6c3b4d9294c57eabb3756338c087a8c66652cbb5d7a11f0c604197deb7a9d1" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
</package>
<package pkgid="46b96636d594ceabe5a926b3412a70a4779ecdd5e8a484510baf13c868bff32513a69fe2c885c77efc4a93deefaa81048a449c87a61b4d7c1cd0f7e9b6a5c0cb" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.10.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
</package>
<package pkgid="299d6df8e7744e6175afd0d9dd2cc5a76faf6bf2f27f22835b59ea93c7b7e997355cbfa89bb23ad67f3130b18ea434f7884ec78faa6e84dc51684e0b18481468" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.10.2" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
</package>
<package pkgid="76cbd292ecb2bb69eb39736d44a9bc37e182176594267ca1432c0dd48c4a638d69e9c681b60a43bc6e8407f4af4723b048281f082ef29a7ea4c2d12cdd317299" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.11.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
</package>
<package pkgid="68ea9d39e55fce19d35bd88fd61253bbcc3e0a32165acc88e60751fdc3326177dac20bc5f562e5a70b85ef5aa3503f27797e4ece09f63f519410340ed2966451" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776340800">- Firefox Extended Support Release 140.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-32 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in
    NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952,
    bmo#2021909, bmo#2022026, bmo#2022041, bmo#2022088,
    bmo#2022276, bmo#2022335, bmo#2022338, bmo#2022373,
    bmo#2022597, bmo#2022874, bmo#2023276, bmo#2023544,
    bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242,
    bmo#2024250, bmo#2024251, bmo#2024343, bmo#2024422,
    bmo#2024425, bmo#2024440, bmo#2024442, bmo#2024446,
    bmo#2024458, bmo#2024463, bmo#2024478, bmo#2024650,
    bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919,
    bmo#2025278, bmo#2025349, bmo#2025350, bmo#2025354,
    bmo#2025360, bmo#2025363, bmo#2025370, bmo#2025379,
    bmo#2025381, bmo#2025399, bmo#2025400, bmo#2025403,
    bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489,
    bmo#2025493, bmo#2025497, bmo#2025502, bmo#2025515,
    bmo#2025517, bmo#2025526, bmo#2025609, bmo#2025948,
    bmo#2025949, bmo#2025951, bmo#2025953, bmo#2025955,
    bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280,
    bmo#2026285, bmo#2026293, bmo#2026296, bmo#2026310,
    bmo#2027237, bmo#2027260, bmo#2027268, bmo#2027277,
    bmo#2027284, bmo#2027291, bmo#2027293, bmo#2027298,
    bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959,
    bmo#2027962, bmo#2027964, bmo#2027971, bmo#2027974,
    bmo#2027979, bmo#2027982, bmo#2027995, bmo#2028001,
    bmo#2028267, bmo#2028268, bmo#2028275, bmo#2028288,
    bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061,
    bmo#2029071, bmo#2029283, bmo#2029296, bmo#2029314,
    bmo#2029323, bmo#2029411, bmo#2029423, bmo#2029424,
    bmo#2029425, bmo#2029427, bmo#2029436, bmo#2029440,
    bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707,
    bmo#2029708, bmo#2029728, bmo#2029802, bmo#2029896,
    bmo#2029906, bmo#2030106, bmo#2030118, bmo#2030123,
    bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird
    150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224,
    bmo#2019547, bmo#2020378, bmo#2022381, bmo#2022608,
    bmo#2022785, bmo#2023120, bmo#2023128, bmo#2023140,
    bmo#2023279, bmo#2023836, bmo#2023882, bmo#2023925,
    bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346,
    bmo#2024357, bmo#2024416, bmo#2024420, bmo#2024429,
    bmo#2024432, bmo#2024455, bmo#2024466, bmo#2024468,
    bmo#2024476, bmo#2024664, bmo#2024666, bmo#2024669,
    bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384,
    bmo#2025395, bmo#2025458, bmo#2025461, bmo#2025463,
    bmo#2025481, bmo#2025483, bmo#2025485, bmo#2025494,
    bmo#2025506, bmo#2025511, bmo#2025513, bmo#2025520,
    bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152,
    bmo#2027161, bmo#2027238, bmo#2027261, bmo#2027269,
    bmo#2027274, bmo#2027280, bmo#2027281, bmo#2027300,
    bmo#2027302, bmo#2027331, bmo#2027339, bmo#2027340,
    bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887,
    bmo#2028888, bmo#2028896, bmo#2029063, bmo#2029064,
    bmo#2029290, bmo#2029291, bmo#2029294, bmo#2029300,
    bmo#2029304, bmo#2029316, bmo#2029317, bmo#2029401,
    bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754,
    bmo#2029776, bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1777377600">- Firefox Extended Support Release 140.10.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-36 (bsc#1263110)
  * CVE-2026-7320 (bmo#2027433)
    Information disclosure due to incorrect boundary conditions
    in the Audio/Video component
  * CVE-2026-7321 (bmo#2029461)
    Sandbox escape due to incorrect boundary conditions in the
    WebRTC: Networking component
  * CVE-2026-7322 (bmo#2021904, bmo#2022731, bmo#2027158,
    bmo#2027733, bmo#2027973, bmo#2027976, bmo#2028231,
    bmo#2028731, bmo#2028886, bmo#2029067, bmo#2029700,
    bmo#2029724, bmo#2029806, bmo#2029814, bmo#2030108,
    bmo#2030111, bmo#2031524, bmo#2031921, bmo#2032040)
    Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR
    140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
    Thunderbird 150.0.1
  * CVE-2026-7323 (bmo#2028537, bmo#2029911, bmo#2031121,
    bmo#2033602)
    Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird
    ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778155200">- Firefox Extended Support Release 140.10.2 ESR
  * Fixed: Various security fixes.
  MFSA 2026-41 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8091 (bmo#2029301)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576,
    bmo#2022722, bmo#2024439, bmo#2027883, bmo#2029463,
    bmo#2030323, bmo#2032042, bmo#2032043, bmo#2033270,
    bmo#2033637, bmo#2034422, bmo#2034496, bmo#2035879,
    bmo#2036516)
    Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR
    140.10.2 and Firefox 150.0.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1778673600">- Firefox Extended Support Release 140.11.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-48 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677,
    bmo#2022390, bmo#2023116, bmo#2023657, bmo#2024255,
    bmo#2024418, bmo#2024441, bmo#2024447, bmo#2024966,
    bmo#2025412, bmo#2025467, bmo#2025940, bmo#2025950,
    bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332,
    bmo#2027333, bmo#2028266, bmo#2028292, bmo#2028319,
    bmo#2028526, bmo#2028870, bmo#2028876, bmo#2028882,
    bmo#2029062, bmo#2029309, bmo#2029414, bmo#2029422,
    bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028,
    bmo#2031457, bmo#2032039, bmo#2033610, bmo#2033854,
    bmo#2034498, bmo#2034628, bmo#2034978, bmo#2035966,
    bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Firefox ESR 140.11 and Firefox
    151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429,
    bmo#2029910, bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR
    140.11 and Firefox 151</changelog>
  <changelog author="cgrobertson@suse.com" date="1781179200">- Firefox Extended Support Release 140.12.0 ESR
  Placeholder changelog-entry (bsc#1268071)</changelog>
</package>
<package pkgid="073741800cdc3be6881e58a9edda9de85787177acf3e9f093a60981095cf21d10b5f5a9c9394993035a18b3a0dd7cb38e4eec6aea3b7aab0f14ce9a22c0f59f7" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.2.0" rel="160000.1.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1747656000">- Firefox Extended Support Release 128.10.1 ESR
  * Fixed: Security Fixes.
  MFSA 2025-37 (bsc#1243303)
  * CVE-2025-4918 (bmo#1966612)
    Out-of-bounds access when resolving Promise objects
  * CVE-2025-4919 (bmo#1966614)
    Out-of-bounds access when optimizing linear sums</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747742400">- Firefox Extended Support Release 128.11.0 ESR
  MFSA 2025-44 (bsc#1243353)
  * CVE-2025-5283 (bmo#1962421)
    Double-free in libvpx encoder
  * CVE-2025-5263 (bmo#1960745)
    Error handling for script execution was incorrectly isolated
    from web content
  * CVE-2025-5264 (bmo#1950001)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5265 (bmo#1962301)
    Potential local code execution in “Copy as cURL” command
  * CVE-2025-5266 (bmo#1965628)
    Script element events leaked cross-origin resource status
  * CVE-2025-5267 (bmo#1954137)
    Clickjacking vulnerability could have led to leaking saved
    payment card details
  * CVE-2025-5268 (bmo#1950136, bmo#1958121, bmo#1960499,
    bmo#1962634)
    Memory safety bugs fixed in Firefox 139, Thunderbird 139,
    Firefox ESR 128.11, and Thunderbird 128.11
  * CVE-2025-5269 (bmo#1924108)
    Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird
    128.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161600">- Firefox Extended Support Release 128.12.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-53 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1750161601">- removed patches firefox-kde.patch, mozilla-kde.patch,
  fix-sle12-build-errors.patch, mozilla-rust-disable-future-incompat.patch
- added patches mozilla-bmo1746799.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1750939200">- Firefox Extended Support Release 140.0esr ESR
  * General
  - Reader View now has an enhanced Text and Layout menu with
    new options for character spacing, word spacing, and text
    alignment. These changes offer a more accessible reading
    experience.
  - Reader View now has a Theme menu with additional Contrast
    and Gray options. You can also select custom colors for text,
    background, and links from the Custom tab.
  - Firefox will now offer to temporarily remember when users
    grant permissions to sites (e.g. geolocation). Temporary
    permissions will be removed either after one hour or when the
    tab is closed.
  - Firefox now includes safeguards to prevent sites from
    abusing the history API by generating excessive history
    entries, which can make navigating with the back and forward
    buttons difficult by cluttering the history. This
    intervention ensures that such entries, unless interacted
    with by the user, are skipped when using the back and forward
    buttons.
  - Firefox now identifies all links in PDFs and turns them
    into hyperlinks.
  - You can now copy links from background tabs using the
    tabstrip context menu on macOS and Linux.
  - Users on macOS and Linux are now given the option to close
    only the current tab if the Quit keyboard shortcut is used
    while multiple tabs are open in the window. (bmo#None)
  * Sidebar and Tabs
  - You can now enable the updated Firefox sidebar in Settings
    &gt; General &gt; Browser Layout to quickly access multiple tools
    in one click, without leaving your main view. Sidebar tools
    include an AI chatbot of your choice, bookmarks, history, and
    tabs from devices you sync with your Mozilla account.
  - Keep a lot of tabs open? Try our new vertical tabs layout
    to quickly scan your list of tabs. With vertical tabs, your
    open and pinned tabs appear in the sidebar instead of along
    the top of the browser. To turn on vertical tabs, right-click
    on the toolbar near the top of the browser and select Turn on
    Vertical Tabs. If you’ve enabled the updated sidebar, you can
    also go to Customize sidebar and check Vertical tabs. Early
    testers report feeling more organized after using vertical
    tabs for a few days.
  - Stay productive and organized with less effort by grouping
    related tabs together. One simple way to create a group is to
    drag a tab onto another, pause until you see a highlight,
    then drop to create the group. Tab groups can be named,
    color-coded, and are always saved. You can close a group and
    reopen it later.
  - A tab preview is now displayed when hovering the mouse over
    background tabs, making it easier to locate the desired tab
    without needing to switch tabs.
  - The sidebar to view tabs from other devices can now be
    opened via the Tab overview menu.
  * Security &amp; Privacy
  - HTTPS is replacing HTTP as the default protocol in the
    address bar on non-local sites. If a site is not available
    via HTTPS, Firefox will fall back to HTTP.
  - Firefox now blocks third-party cookie access when Enhanced
    Tracking Protection's Strict mode is enabled.
  - Firefox now has a new anti-tracking feature, Bounce
    Tracking Protection, which is now available in Enhanced
    Tracking Protection's "Strict" mode. This feature detects
    bounce trackers based on their redirect behavior and
    periodically purges their cookies and site data to block
    tracking.
  - Firefox now enforces certificate transparency, requiring
    web servers to provide sufficient proof that their
    certificates were publicly disclosed before they will be
    trusted. This only affects servers using certificates issued
    by a certificate authority in Mozilla's Root CA Program.
  - Smartblock Embeds allows users to selectively unblock
    certain social media embeds that are blocked in ETP Strict
    and Private Browsing modes. Currently, support is limited to
    a few embed types, with more to be added in future updates.
  - Firefox now upgrades page loads to HTTPS by default and
    gracefully falls back to HTTP if the secure connection fails.
    This behavior is known as HTTPS-First.
  - The "Copy Without Site Tracking" menu item was renamed to
    "Copy Clean Link" to help clarify expectations around what
    the feature does. "Copy Clean Link" is a list based approach
    to remove - known tracking parameters from links. This option
    can also now be used on plain text links.
  - The Clear browsing data and cookies dialog now allows
    clearing saved form info separately from browsing history.
  * Translations
  - Firefox now allows translating selected text portions to
    different languages after a full-page translation.
  - Full-Page Translations are now available within Firefox
    extension pages that start with the moz-extension:// URL
    scheme.
  - When suggesting a default translation language, Firefox
    will now take into consideration languages you have
    previously used for translations.
  - Added support for many new languages in Firefox
    translation.
  * Windows
  - Canvas2D switched from Direct2D to a platform independent
    acceleration backend on Windows.
  - Hardware-accelerated playback of HEVC video content is now
    supported on Windows.
  - Firefox on Windows 11 now uses acrylic-style menus for
    popup windows, which better match the operating system’s
    aesthetic.
  * macOS
  - Added support for multiple languages in the same document
    spoken in macOS VoiceOver.
  - The macOS session resume feature has been enhanced. Firefox
    will now automatically relaunch if it was open before a
    system restart, like after an OS update.
  - The macOS DMG installer packages now use LZMA for
    compression, reducing download size and installation time.
  - Due to recent changes in macOS Sequoia, the shortcut for
    completing search strings to .com addresses has been changed
    from Ctrl+Enter to Cmd+Enter.
  * Linux
  - Firefox now supports touchpad hold gestures on Linux. This
    means that kinetic (momentum) scrolling can now be
    interrupted by placing two fingers on the touchpad.
  * Developer: - Firefox now supports text fragments, which
    allows users to link directly to a specific portion of text
    in a web document via a special URL fragment.
  - Debugger log-point values are now automatically converted
    into profiler markers, making it easy to add information to
    the marker timeline directly from the Debugger.
  - The Debugger's directory root is now scoped to the specific
    domain where it was set, which aligns with typical usage and
    avoids applying it across unrelated domains. This builds on
    previous improvements such as a redesigned UI and easier
    removal of the root setting. Setting a directory root updates
    the Source List to show only the selected directory and its
    children. (Learn more)
  - The Network Blocking feature in the Network panel now
    blocks HTTP requests in addition to blocking responses.
  - The Network panel displays information about Early Hints,
    including a dedicated indicator for the 103 HTTP status code
    in the user interface.
  - The Network panel now allows overriding network request
    responses with local files.
  - The filter setting in the Network panel is now preserved
    across DevTools Toolbox sessions.
  - A new column has been added to the Network panel to display
    the full path of the request URL. This enhancement makes
    helps developers quickly view and analyze complete request
    paths.
  - Introduced a new console command `$$$` that allows
    searching the page, including within shadow roots.
  - Improved support for debugging web extensions, such as
    automatically reloading the web extension's source code in
    the Debugger when the extension is reloaded. Workers are now
    available in the Console panel’s context selector and
    breakpoints function correctly in content scripts.
  - In the Inspector Fonts panel, we now display fonts
    metadata, like the font version, designer, vendor, license,
    etc.
  - Added support for the import map integrity field, allowing
    you to ensure the integrity of dynamically or statically
    imported modules.
  - Implemented support for `Error.isError`, enabling brand
    checks to determine whether an object is an instance of
    Error. (Learn more)
  - Added support for the `error.captureStackTrace` extension
    to improve compatibility with other browsers. (Learn more:
    http://github.com/tc39/proposal-error-capturestacktrace)
  * Enterprise: - The UserMessaging policy has been updated with
    a new option to allow disabling Firefox Labs in preferences.
  - The Preferences policy has been updated to allow setting
    the preference security.pki.certificate_transparency.mode.
  - HTTPS-First is now on by default. You can manage this
    behavior using the HttpsOnlyMode and HttpAllowlist policies.
  - An internal change has been made to Firefox that removes
    `XPCOMUtils.defineLazyGetter`. For most people, this
    shouldn't matter, but if you encounter problems with
    AutoConfig or third party software like PolicyPak, this might
    be the cause. You'll need to reach out to your provider.
  - Firefox now supports the Content Analysis SDK for
    integrating DLP software. For more information, see this
    post.
  - The SearchEngines policy is now available on all versions
    of Firefox (not just the ESR).
  * Fixed: Various security fixes.
  MFSA 2025-51 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped with Firefox exposed a
    persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6428 (bmo#1970151)
    Firefox for Android opened URLs specified in a link
    querystring parameter
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6431 (bmo#1942716)
    The prompt in Firefox for Android that asks before opening a
    link in an external application could be bypassed
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1950056, bmo#1961777)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377, bmo#1960948, bmo#1966187,
    bmo#1966505, bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
</package>
<package pkgid="3e4537404250979814317ba3e8d3d49303b3c3f915ef59e0d5f68f3c13a77a56ae25ca5921132493b168295fc99cc0929cd24f1f94dca778d54a2bf82164197c" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1751889600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
</package>
<package pkgid="c8928f8ddc842418b1d3092b77cec20ebe13b2aa9b19ae9ad09fd364eb6531d25b9e2a2161a5c398c9a3eca79da57d902437f2aaa15e48f5561a676af721bd8b" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1752753600">- Firefox Extended Support Release 140.1.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-59 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422,
    bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998,
    bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="5380d70f3497d5b8d272b5549371fde588707c20f8b95a3483018ad542754a05ef84233bdefd632d951c7fda50136a0ccbdcd90e5a25b800b1b9c17ec2389d51" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.7.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1753963200">- Add patch mozilla-kde-force-xdg-portal.patch to switch to using
  xdg-desktop-portal file-picker on KDE on SLE-15 (bsc#1226112)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
</package>
<package pkgid="95a0576e53b58417fe122364c646b3d2cb872669e8dea5d42393eade618ab559c1c67f8866b3e9ff61d941e2b92ba1a318a03c748a9e3e4306f0f27ce5daa2fc" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.7.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755000000">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
</package>
<package pkgid="0c2bf86d556fd396a6663130eb715fc1ba08d7119e7cce9004c456559af8e5f8d1fc13fb68cb55ff5c03308c3b5e1f946fb5fbdd462cdf9b94f90df9a52c6c90" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.8.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1755518400">- Firefox Extended Support Release 140.2.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-67 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9183 (bmo#1976102)
    Spoofing issue in the Address Bar component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
</package>
<package pkgid="bfb6349c8944d4b1f448bf11da0d7e6660eecc00fb40e9889509c091219aa8f539180029298bc32a175a707fbf973da876aa802d9c0e1c6600a4dacf62f9caa8" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.9.0" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1757505600">- Firefox Extended Support Release 140.3.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-75 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Replace mozilla-bmo998749.patch with upstreams version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1758628801">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
</package>
<package pkgid="ce0d5eb5593f2dcc4492485759f95dbb87db5e8f8546b51e813efc96e69e25c290e6c332617f79b01bece148f18b141c0d8efa0cdf07b57dfd824ed221e19bb5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="140.9.1" rel="160000.1.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1758628800">- Firefox Extended Support Release 140.3.1 ESR (bsc#1250452)
  * Fixed: Improved reliability when HTTP/3 connections fail:
    Firefox no longer forces HTTP/2 during fallback, allowing the
    server to choose the protocol and preventing stalls on some
    sites. (bmo#1980812)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759924800">- Firefox Extended Support Release 140.4.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-83 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762776000">- Firefox Extended Support Release 140.5.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-88 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Firefox</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1765195200">- Firefox Extended Support Release 140.6.0 ESR
  * Fixed: Various security fixes.
  MFSA 2025-94 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1767873600">- Firefox Extended Support Release 140.7.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-03 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771329600">- Firefox Extended Support Release 140.7.1 ESR
  * Fixed: Security fix.
  MFSA 2026-10 (bsc#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- Firefox Extended Support Release 140.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-15 (bsc#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1774267200">- Firefox Extended Support Release 140.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2026-22 (bsc#1260083)
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender
    component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591,
    bmo#2016661, bmo#2016664, bmo#2017303, bmo#2017894,
    bmo#2018090, bmo#2018196, bmo#2018379, bmo#2019112,
    bmo#2022090, bmo#2022243, bmo#2022351, bmo#2022478,
    bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="federico@suse.com" date="1774958400">- Update suse_version macro for 1610 (jsc#PED-15778)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1775649600">- Firefox Extended Support Release 140.9.1 ESR
  * Fixed: Various security fixes.
  MFSA 2026-27 (bsc#1261663)
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252,
    bmo#2022294, bmo#2023007, bmo#2023130, bmo#2023191,
    bmo#2023364, bmo#2023829, bmo#2024074, bmo#2024417,
    bmo#2024433, bmo#2024436, bmo#2024437, bmo#2024453,
    bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402,
    bmo#2025472, bmo#2026287, bmo#2026299, bmo#2026305,
    bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545,
    bmo#2023555, bmo#2023958, bmo#2025422, bmo#2025468,
    bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
</package>
<package pkgid="f36a8d04cdba59f4bc36b3a2c216fb105dd9df768363af1007bc11232f54c17f2a1a16fa66baf4b59db001ae742e4e695929f580140796ec01e054d6e3e2d64a" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1774267200">- Mozilla Thunderbird 140.9.0 ESR
  MFSA 2026-24 (bsc#1260083)
  * CVE-2026-3889 (bmo#2020723)
    Spoofing issue in Thunderbird
  * CVE-2026-4371 (bmo#2023493)
    Out of bounds read in IMAP parsing
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329, bmo#2016342)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591, bmo#2016661,
    bmo#2016664, bmo#2017303, bmo#2017894, bmo#2018090, bmo#2018196,
    bmo#2018379, bmo#2019112, bmo#2022090, bmo#2022243, bmo#2022351,
    bmo#2022478, bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1775390400">- Mozilla Thunderbird 140.9.1 ESR
  MFSA 2026-29
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252, bmo#2022294,
    bmo#2023007, bmo#2023130, bmo#2023191, bmo#2023364, bmo#2023829,
    bmo#2024074, bmo#2024417, bmo#2024433, bmo#2024436, bmo#2024437,
    bmo#2024453, bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402, bmo#2025472,
    bmo#2026287, bmo#2026299, bmo#2026305, bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545, bmo#2023555,
    bmo#2023958, bmo#2025422, bmo#2025468, bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1776772800">- Mozilla Thunderbird 140.10.0 ESR
  * Newly translated strings were not available in Thunderbird
  MFSA 2026-34 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952, bmo#2021909,
    bmo#2022026, bmo#2022041, bmo#2022088, bmo#2022276, bmo#2022335,
    bmo#2022338, bmo#2022373, bmo#2022597, bmo#2022874, bmo#2023276,
    bmo#2023544, bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242, bmo#2024250,
    bmo#2024251, bmo#2024343, bmo#2024422, bmo#2024425, bmo#2024440,
    bmo#2024442, bmo#2024446, bmo#2024458, bmo#2024463, bmo#2024478,
    bmo#2024650, bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919, bmo#2025278,
    bmo#2025349, bmo#2025350, bmo#2025354, bmo#2025360, bmo#2025363,
    bmo#2025370, bmo#2025379, bmo#2025381, bmo#2025399, bmo#2025400,
    bmo#2025403, bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489, bmo#2025493,
    bmo#2025497, bmo#2025502, bmo#2025515, bmo#2025517, bmo#2025526,
    bmo#2025609, bmo#2025948, bmo#2025949, bmo#2025951, bmo#2025953,
    bmo#2025955, bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280, bmo#2026285,
    bmo#2026293, bmo#2026296, bmo#2026310, bmo#2027237, bmo#2027260,
    bmo#2027268, bmo#2027277, bmo#2027284, bmo#2027291, bmo#2027293,
    bmo#2027298, bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959, bmo#2027962,
    bmo#2027964, bmo#2027971, bmo#2027974, bmo#2027979, bmo#2027982,
    bmo#2027995, bmo#2028001, bmo#2028267, bmo#2028268, bmo#2028275,
    bmo#2028288, bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061, bmo#2029071,
    bmo#2029283, bmo#2029296, bmo#2029314, bmo#2029323, bmo#2029411,
    bmo#2029423, bmo#2029424, bmo#2029425, bmo#2029427, bmo#2029436,
    bmo#2029440, bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707, bmo#2029708,
    bmo#2029728, bmo#2029802, bmo#2029896, bmo#2029906, bmo#2030106,
    bmo#2030118, bmo#2030123, bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224, bmo#2019547,
    bmo#2020378, bmo#2022381, bmo#2022608, bmo#2022785, bmo#2023120,
    bmo#2023128, bmo#2023140, bmo#2023279, bmo#2023836, bmo#2023882,
    bmo#2023925, bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346, bmo#2024357,
    bmo#2024416, bmo#2024420, bmo#2024429, bmo#2024432, bmo#2024455,
    bmo#2024466, bmo#2024468, bmo#2024476, bmo#2024664, bmo#2024666,
    bmo#2024669, bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384, bmo#2025395,
    bmo#2025458, bmo#2025461, bmo#2025463, bmo#2025481, bmo#2025483,
    bmo#2025485, bmo#2025494, bmo#2025506, bmo#2025511, bmo#2025513,
    bmo#2025520, bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152, bmo#2027161,
    bmo#2027238, bmo#2027261, bmo#2027269, bmo#2027274, bmo#2027280,
    bmo#2027281, bmo#2027300, bmo#2027302, bmo#2027331, bmo#2027339,
    bmo#2027340, bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887, bmo#2028888,
    bmo#2028896, bmo#2029063, bmo#2029064, bmo#2029290, bmo#2029291,
    bmo#2029294, bmo#2029300, bmo#2029304, bmo#2029316, bmo#2029317,
    bmo#2029401, bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754, bmo#2029776,
    bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1777032000">- Fix suse_version check since SLE 16 SP1 will use a value of 1610</changelog>
</package>
<package pkgid="92d3a7ed5e44e6b89fd5c780ac40ef6e51056731eb195cd7d267f6472b42c187fbba517ba875075eea37dec09435f39fe7c6a3487163990b5c47fdd97f08e490" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="bp160.1.1"/>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777464000">- Further tests have shown that the rule which llvm version should
  be used, can be simplified: only on TW, Slowroll and Factory we
  need to explicitly BuildRequire the llvm21 based packages, while
  on all other (i.e. Leap) distribution versions we can stick with
  the distro's default release of llvm.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777982400">- Add thunderbird-glibc-2.43.patch as source22 and apply it only
  if glibc newer than 2.42 is installed in the build environment.
  It serves to remove conflicting definitions and adapt the syscall
  in accordance with glibc-2.43.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982401">- Migrate from deprecated %suse_update_desktop_file to
  %translate_suse_desktop. (boo#1158957)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778241600">- Mozilla Thunderbird 140.10.2
  MFSA 2026-44 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576, bmo#2022722,
    bmo#2024439, bmo#2027883, bmo#2029463, bmo#2030323, bmo#2032042,
    bmo#2032043, bmo#2033270, bmo#2033637, bmo#2034422, bmo#2034496,
    bmo#2035879, bmo#2036516)
    Memory safety bugs fixed in Thunderbird ESR 140.10.2 and
    Thunderbird 150.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1778932800">- Mozilla Thunderbird 140.11.0 ESR
  MFSA 2026-51 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677, bmo#2022390,
    bmo#2023116, bmo#2023657, bmo#2024255, bmo#2024418, bmo#2024441,
    bmo#2024447, bmo#2024966, bmo#2025412, bmo#2025467, bmo#2025940,
    bmo#2025950, bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332, bmo#2027333,
    bmo#2028266, bmo#2028292, bmo#2028319, bmo#2028526, bmo#2028870,
    bmo#2028876, bmo#2028882, bmo#2029062, bmo#2029309, bmo#2029414,
    bmo#2029422, bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028, bmo#2031457,
    bmo#2032039, bmo#2033610, bmo#2033854, bmo#2034498, bmo#2034628,
    bmo#2034978, bmo#2035966, bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429, bmo#2029910,
    bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
- removed obsolete patches
  * thunderbird-bmo2006630.patch
  * mozilla-bmo2031958.patch</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1779192000">- Use BuildRequires: libclang13 to instead of llvm21-libclang13 on
  Leap 16.1
  * Built llvm21 coming from SLFO does not name a llvm versioned
    libclang13</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1779537600">- Refresh thunderbird-glibc-2.43.patch and re-enable its application
  on systems with glibc &gt;= 2.43</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1779796800">- Mozilla Thunderbird 140.11.1 ESR
  * There are no Thunderbird changes requiring release notes in
    this release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1781352000">- Mozilla Thunderbird 140.12.0 ESR
  MFSA 2026-61 (bsc#1268071)
  * CVE-2026-12289 (bmo#2023443)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-12290 (bmo#2024852)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12291 (bmo#2036929)
    Use-after-free in the Networking: HTTP component
  * CVE-2026-12292 (bmo#2038465)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-12294 (bmo#2039873)
    Sandbox escape in the DOM: Workers component
  * CVE-2026-12295 (bmo#2040160)
    Sandbox escape in the DOM: Navigation component
  * CVE-2026-12298 (bmo#2041981)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12296 (bmo#2040515)
    Sandbox escape in the Security: Process Sandboxing component
  * CVE-2026-12297 (bmo#2041610)
    Sandbox escape due to incorrect boundary conditions in the
    Networking component
  * CVE-2026-12299 (bmo#2043139)
    JIT miscompilation in the DOM: Core &amp; HTML component
  * CVE-2026-12329 (bmo#2044738)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12302 (bmo#2034489)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12304 (bmo#2034944)
    Same-origin policy bypass in the Networking: Cookies component
  * CVE-2026-12305 (bmo#2037290)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12306 (bmo#2037323)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12307 (bmo#2038133)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12308 (bmo#2038302)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12309 (bmo#2038476)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12310 (bmo#2039707)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12311 (bmo#2040177)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12312 (bmo#2040383)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12313 (bmo#2040477)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12314 (bmo#2041856)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12315 (bmo#2042058)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12330 (bmo#2029326)
    Incorrect boundary conditions in the Internationalization
    component
  * CVE-2026-12324 (bmo#2038444)
    Incorrect boundary conditions in the Graphics: CanvasWebGL
    component
  * CVE-2026-12325 (bmo#2039443)
    Denial-of-service in the Graphics: ImageLib component
  * CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312,
    bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995,
    bmo#2038551, bmo#2040717, bmo#2042724)
    Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird
    ESR 140.12, Firefox 152 and Thunderbird 152
  * CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373,
    bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929,
    bmo#2042965, bmo#2043213)
    Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR
    140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1781697600">- Enable clang_build to allow building with the latest versions of
  llvm/clang due to them dropping support for update-alternatives.</changelog>
</package>
<package pkgid="19192d356aed23a45227130c3e23e9452617e9ad84fcd045d5c732b5107e259ce3052487d7ffb42b75916fe8e82a343cb7309a3b937ac9777a45af30e8b17a5b" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.2.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1749470400">- Mozilla Thunderbird ESR 128.11.1
  MFSA 2025-49
  * CVE-2025-5986 (bmo#1958580, bmo#1968012)
    Unsolicited File Download, Disk Space Exhaustion, and Credential
    Leakage via mailbox:/// Links</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1750161600">- Use these tools/versions unconditionally, package won't build on
  Tumbleweed with new gcc15 otherwise:
  gcc14, gcc14-c++, cargo1.84, rust1.84</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
</package>
<package pkgid="d581e55707a9138239c5877f220dd8bd698348647b612d4be54c85f0e276e9c73701a5706a939e01859fbac8d05d150e7571723a729c0dcc9827d31348ecb4d6" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.3.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
</package>
<package pkgid="dddb7001108498e5b91ba577f2b37b13aa98d7078d2a0ca4be954dc83b12905dbba289b8e5e3876fe4a6a9de15440936d99c1af56cc10a92a59f982d21860324" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.4.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257600">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257601">- Mozilla Thunderbird 140.4
  * changed: Account Hub is now disabled by default for second
    email account (bmo#1992027)
  * changed: Flatpak runtime has been updated to Freedesktop SDK
    24.08 (bmo#1952100)
  * fixed: Users could not read mail signed with OpenPGP v6 and
    PQC keys (bmo#1986845)
  * fixed: Image preview in Insert Image dialog failed with CSP
    error for web resources (bmo#1989392)
  * fixed: Emptying trash on exit did not work with some
    providers (bmo#1975147)
  * fixed: Thunderbird could crash when applying filters
    (bmo#1987880)
  * fixed: Users were unable to override expired mail server
    certificate (bmo#1979323)
  * fixed: Opening Website header link in RSS feed incorrectly
    re-encoded URL parameters (bmo#1971035)
  * fixed: Security fixes
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144
- Replace mozilla-bmo998749.patch with upstreams version</changelog>
</package>
<package pkgid="a4c9ed7e1d875ec84965b48ccaadefcc718e91c23d4e4063a47e107ab877f59abb5b68f06cde3478c26c4c8f88a837d681649cc7eca0efe53560c6ca348be64e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
</package>
<package pkgid="d65b396751ddb7ee02e6323469c4facb0eb8f1735dd0c0f1bb0839839fc416b6179b70ca333102763f5fda095d3da0453f7ef4d44cb98bbdcfe39d36e2ce85f2" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="bp160.1.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="1bd331928fead71546ed0de6ed49752f8546e1785151ab23ea4e294b1a3b2fd77d151d303b10e13735da4c9fdf5a50ac6c4bf9ccf2c1873691bfa48c27cf98c0" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="140.8.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
</package>
<package pkgid="1133ba1eb70fbb29f0b1b4b24f4ab4a9dbf2b22baf170bf538e998c437e43257d0a94da46db9235906b570b59ca91bcf08fa4fa6a560f96b3a9362e81fa53d54" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1774267200">- Mozilla Thunderbird 140.9.0 ESR
  MFSA 2026-24 (bsc#1260083)
  * CVE-2026-3889 (bmo#2020723)
    Spoofing issue in Thunderbird
  * CVE-2026-4371 (bmo#2023493)
    Out of bounds read in IMAP parsing
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329, bmo#2016342)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591, bmo#2016661,
    bmo#2016664, bmo#2017303, bmo#2017894, bmo#2018090, bmo#2018196,
    bmo#2018379, bmo#2019112, bmo#2022090, bmo#2022243, bmo#2022351,
    bmo#2022478, bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1775390400">- Mozilla Thunderbird 140.9.1 ESR
  MFSA 2026-29
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252, bmo#2022294,
    bmo#2023007, bmo#2023130, bmo#2023191, bmo#2023364, bmo#2023829,
    bmo#2024074, bmo#2024417, bmo#2024433, bmo#2024436, bmo#2024437,
    bmo#2024453, bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402, bmo#2025472,
    bmo#2026287, bmo#2026299, bmo#2026305, bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545, bmo#2023555,
    bmo#2023958, bmo#2025422, bmo#2025468, bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1776772800">- Mozilla Thunderbird 140.10.0 ESR
  * Newly translated strings were not available in Thunderbird
  MFSA 2026-34 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952, bmo#2021909,
    bmo#2022026, bmo#2022041, bmo#2022088, bmo#2022276, bmo#2022335,
    bmo#2022338, bmo#2022373, bmo#2022597, bmo#2022874, bmo#2023276,
    bmo#2023544, bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242, bmo#2024250,
    bmo#2024251, bmo#2024343, bmo#2024422, bmo#2024425, bmo#2024440,
    bmo#2024442, bmo#2024446, bmo#2024458, bmo#2024463, bmo#2024478,
    bmo#2024650, bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919, bmo#2025278,
    bmo#2025349, bmo#2025350, bmo#2025354, bmo#2025360, bmo#2025363,
    bmo#2025370, bmo#2025379, bmo#2025381, bmo#2025399, bmo#2025400,
    bmo#2025403, bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489, bmo#2025493,
    bmo#2025497, bmo#2025502, bmo#2025515, bmo#2025517, bmo#2025526,
    bmo#2025609, bmo#2025948, bmo#2025949, bmo#2025951, bmo#2025953,
    bmo#2025955, bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280, bmo#2026285,
    bmo#2026293, bmo#2026296, bmo#2026310, bmo#2027237, bmo#2027260,
    bmo#2027268, bmo#2027277, bmo#2027284, bmo#2027291, bmo#2027293,
    bmo#2027298, bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959, bmo#2027962,
    bmo#2027964, bmo#2027971, bmo#2027974, bmo#2027979, bmo#2027982,
    bmo#2027995, bmo#2028001, bmo#2028267, bmo#2028268, bmo#2028275,
    bmo#2028288, bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061, bmo#2029071,
    bmo#2029283, bmo#2029296, bmo#2029314, bmo#2029323, bmo#2029411,
    bmo#2029423, bmo#2029424, bmo#2029425, bmo#2029427, bmo#2029436,
    bmo#2029440, bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707, bmo#2029708,
    bmo#2029728, bmo#2029802, bmo#2029896, bmo#2029906, bmo#2030106,
    bmo#2030118, bmo#2030123, bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224, bmo#2019547,
    bmo#2020378, bmo#2022381, bmo#2022608, bmo#2022785, bmo#2023120,
    bmo#2023128, bmo#2023140, bmo#2023279, bmo#2023836, bmo#2023882,
    bmo#2023925, bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346, bmo#2024357,
    bmo#2024416, bmo#2024420, bmo#2024429, bmo#2024432, bmo#2024455,
    bmo#2024466, bmo#2024468, bmo#2024476, bmo#2024664, bmo#2024666,
    bmo#2024669, bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384, bmo#2025395,
    bmo#2025458, bmo#2025461, bmo#2025463, bmo#2025481, bmo#2025483,
    bmo#2025485, bmo#2025494, bmo#2025506, bmo#2025511, bmo#2025513,
    bmo#2025520, bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152, bmo#2027161,
    bmo#2027238, bmo#2027261, bmo#2027269, bmo#2027274, bmo#2027280,
    bmo#2027281, bmo#2027300, bmo#2027302, bmo#2027331, bmo#2027339,
    bmo#2027340, bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887, bmo#2028888,
    bmo#2028896, bmo#2029063, bmo#2029064, bmo#2029290, bmo#2029291,
    bmo#2029294, bmo#2029300, bmo#2029304, bmo#2029316, bmo#2029317,
    bmo#2029401, bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754, bmo#2029776,
    bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1777032000">- Fix suse_version check since SLE 16 SP1 will use a value of 1610</changelog>
</package>
<package pkgid="8d66c68261a0c3defdd5e5533232b6778c9f5e8a64c488add303ce47df4c2c6c038d2a72b34881b0aa332bf5809ec68c3e870efd40367094067227500a269feb" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="bp160.1.1"/>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777464000">- Further tests have shown that the rule which llvm version should
  be used, can be simplified: only on TW, Slowroll and Factory we
  need to explicitly BuildRequire the llvm21 based packages, while
  on all other (i.e. Leap) distribution versions we can stick with
  the distro's default release of llvm.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777982400">- Add thunderbird-glibc-2.43.patch as source22 and apply it only
  if glibc newer than 2.42 is installed in the build environment.
  It serves to remove conflicting definitions and adapt the syscall
  in accordance with glibc-2.43.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982401">- Migrate from deprecated %suse_update_desktop_file to
  %translate_suse_desktop. (boo#1158957)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778241600">- Mozilla Thunderbird 140.10.2
  MFSA 2026-44 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576, bmo#2022722,
    bmo#2024439, bmo#2027883, bmo#2029463, bmo#2030323, bmo#2032042,
    bmo#2032043, bmo#2033270, bmo#2033637, bmo#2034422, bmo#2034496,
    bmo#2035879, bmo#2036516)
    Memory safety bugs fixed in Thunderbird ESR 140.10.2 and
    Thunderbird 150.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1778932800">- Mozilla Thunderbird 140.11.0 ESR
  MFSA 2026-51 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677, bmo#2022390,
    bmo#2023116, bmo#2023657, bmo#2024255, bmo#2024418, bmo#2024441,
    bmo#2024447, bmo#2024966, bmo#2025412, bmo#2025467, bmo#2025940,
    bmo#2025950, bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332, bmo#2027333,
    bmo#2028266, bmo#2028292, bmo#2028319, bmo#2028526, bmo#2028870,
    bmo#2028876, bmo#2028882, bmo#2029062, bmo#2029309, bmo#2029414,
    bmo#2029422, bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028, bmo#2031457,
    bmo#2032039, bmo#2033610, bmo#2033854, bmo#2034498, bmo#2034628,
    bmo#2034978, bmo#2035966, bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429, bmo#2029910,
    bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
- removed obsolete patches
  * thunderbird-bmo2006630.patch
  * mozilla-bmo2031958.patch</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1779192000">- Use BuildRequires: libclang13 to instead of llvm21-libclang13 on
  Leap 16.1
  * Built llvm21 coming from SLFO does not name a llvm versioned
    libclang13</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1779537600">- Refresh thunderbird-glibc-2.43.patch and re-enable its application
  on systems with glibc &gt;= 2.43</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1779796800">- Mozilla Thunderbird 140.11.1 ESR
  * There are no Thunderbird changes requiring release notes in
    this release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1781352000">- Mozilla Thunderbird 140.12.0 ESR
  MFSA 2026-61 (bsc#1268071)
  * CVE-2026-12289 (bmo#2023443)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-12290 (bmo#2024852)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12291 (bmo#2036929)
    Use-after-free in the Networking: HTTP component
  * CVE-2026-12292 (bmo#2038465)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-12294 (bmo#2039873)
    Sandbox escape in the DOM: Workers component
  * CVE-2026-12295 (bmo#2040160)
    Sandbox escape in the DOM: Navigation component
  * CVE-2026-12298 (bmo#2041981)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12296 (bmo#2040515)
    Sandbox escape in the Security: Process Sandboxing component
  * CVE-2026-12297 (bmo#2041610)
    Sandbox escape due to incorrect boundary conditions in the
    Networking component
  * CVE-2026-12299 (bmo#2043139)
    JIT miscompilation in the DOM: Core &amp; HTML component
  * CVE-2026-12329 (bmo#2044738)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12302 (bmo#2034489)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12304 (bmo#2034944)
    Same-origin policy bypass in the Networking: Cookies component
  * CVE-2026-12305 (bmo#2037290)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12306 (bmo#2037323)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12307 (bmo#2038133)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12308 (bmo#2038302)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12309 (bmo#2038476)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12310 (bmo#2039707)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12311 (bmo#2040177)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12312 (bmo#2040383)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12313 (bmo#2040477)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12314 (bmo#2041856)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12315 (bmo#2042058)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12330 (bmo#2029326)
    Incorrect boundary conditions in the Internationalization
    component
  * CVE-2026-12324 (bmo#2038444)
    Incorrect boundary conditions in the Graphics: CanvasWebGL
    component
  * CVE-2026-12325 (bmo#2039443)
    Denial-of-service in the Graphics: ImageLib component
  * CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312,
    bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995,
    bmo#2038551, bmo#2040717, bmo#2042724)
    Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird
    ESR 140.12, Firefox 152 and Thunderbird 152
  * CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373,
    bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929,
    bmo#2042965, bmo#2043213)
    Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR
    140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1781697600">- Enable clang_build to allow building with the latest versions of
  llvm/clang due to them dropping support for update-alternatives.</changelog>
</package>
<package pkgid="37478c68d3e8b5bbbb6b0eccf4f6d29f4ec9e70161e6f93edd7023eb6528020a4da1182a12bd8cec4e6389f21cdce691d6b3dc5e71d305f8649067e123bcb798" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.2.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1749470400">- Mozilla Thunderbird ESR 128.11.1
  MFSA 2025-49
  * CVE-2025-5986 (bmo#1958580, bmo#1968012)
    Unsolicited File Download, Disk Space Exhaustion, and Credential
    Leakage via mailbox:/// Links</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1750161600">- Use these tools/versions unconditionally, package won't build on
  Tumbleweed with new gcc15 otherwise:
  gcc14, gcc14-c++, cargo1.84, rust1.84</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
</package>
<package pkgid="912cb4fef8d18186240e31cd5f58de2f826a75e2907a595f9ca7efe73910983ebbf8c96bf3005d081784e54fcaf91233f4b743ff79c9f7019ce9d3e13afc351b" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.3.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
</package>
<package pkgid="bc093a262143f5120288de15fa2574216038faeed461662cb2e34c07b9bfc612428b7f1e35aaa57df2ba841eacc9a9f69b3666bb8c81c23be5ca7da0a8eb5b5e" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.4.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257600">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257601">- Mozilla Thunderbird 140.4
  * changed: Account Hub is now disabled by default for second
    email account (bmo#1992027)
  * changed: Flatpak runtime has been updated to Freedesktop SDK
    24.08 (bmo#1952100)
  * fixed: Users could not read mail signed with OpenPGP v6 and
    PQC keys (bmo#1986845)
  * fixed: Image preview in Insert Image dialog failed with CSP
    error for web resources (bmo#1989392)
  * fixed: Emptying trash on exit did not work with some
    providers (bmo#1975147)
  * fixed: Thunderbird could crash when applying filters
    (bmo#1987880)
  * fixed: Users were unable to override expired mail server
    certificate (bmo#1979323)
  * fixed: Opening Website header link in RSS feed incorrectly
    re-encoded URL parameters (bmo#1971035)
  * fixed: Security fixes
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144
- Replace mozilla-bmo998749.patch with upstreams version</changelog>
</package>
<package pkgid="8cf6371f8cb64d9ca0265aec2f79e4488b88fa032feae452a959421cf0002f2798cd8009bedccdc5ad2dd3a8e9edc41f1851430b59fd2002d45ec61a08768596" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
</package>
<package pkgid="b5617570e82790619f1c1dd53de099cb75669c33b3541665c5f188a9436b2b7a16c02f5cc40094516ad9593fd084832a3bb37ca13f97b439bfc3aab2490b52ad" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="bp160.1.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="e3bd8cf95c02c8f798c1828232b93644aa26f99d7c76b6b2830438b524dc02f4fa8a91a42c6b8def49d6453fb31708ff1f66bd7dada49be0eb8f91b6cf92f93f" name="MozillaThunderbird-openpgp-librnp" arch="x86_64">
  <version epoch="0" ver="140.8.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
</package>
<package pkgid="7585e66ab60fa2e79ec6cf6426f9c432deda1508ed070f18860c438d1f5aaed545ad048c1529b07f2591de93f88f7ae5b3b35bc0c96b2963195508f9eedba89d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1774267200">- Mozilla Thunderbird 140.9.0 ESR
  MFSA 2026-24 (bsc#1260083)
  * CVE-2026-3889 (bmo#2020723)
    Spoofing issue in Thunderbird
  * CVE-2026-4371 (bmo#2023493)
    Out of bounds read in IMAP parsing
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329, bmo#2016342)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591, bmo#2016661,
    bmo#2016664, bmo#2017303, bmo#2017894, bmo#2018090, bmo#2018196,
    bmo#2018379, bmo#2019112, bmo#2022090, bmo#2022243, bmo#2022351,
    bmo#2022478, bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1775390400">- Mozilla Thunderbird 140.9.1 ESR
  MFSA 2026-29
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252, bmo#2022294,
    bmo#2023007, bmo#2023130, bmo#2023191, bmo#2023364, bmo#2023829,
    bmo#2024074, bmo#2024417, bmo#2024433, bmo#2024436, bmo#2024437,
    bmo#2024453, bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402, bmo#2025472,
    bmo#2026287, bmo#2026299, bmo#2026305, bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545, bmo#2023555,
    bmo#2023958, bmo#2025422, bmo#2025468, bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1776772800">- Mozilla Thunderbird 140.10.0 ESR
  * Newly translated strings were not available in Thunderbird
  MFSA 2026-34 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952, bmo#2021909,
    bmo#2022026, bmo#2022041, bmo#2022088, bmo#2022276, bmo#2022335,
    bmo#2022338, bmo#2022373, bmo#2022597, bmo#2022874, bmo#2023276,
    bmo#2023544, bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242, bmo#2024250,
    bmo#2024251, bmo#2024343, bmo#2024422, bmo#2024425, bmo#2024440,
    bmo#2024442, bmo#2024446, bmo#2024458, bmo#2024463, bmo#2024478,
    bmo#2024650, bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919, bmo#2025278,
    bmo#2025349, bmo#2025350, bmo#2025354, bmo#2025360, bmo#2025363,
    bmo#2025370, bmo#2025379, bmo#2025381, bmo#2025399, bmo#2025400,
    bmo#2025403, bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489, bmo#2025493,
    bmo#2025497, bmo#2025502, bmo#2025515, bmo#2025517, bmo#2025526,
    bmo#2025609, bmo#2025948, bmo#2025949, bmo#2025951, bmo#2025953,
    bmo#2025955, bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280, bmo#2026285,
    bmo#2026293, bmo#2026296, bmo#2026310, bmo#2027237, bmo#2027260,
    bmo#2027268, bmo#2027277, bmo#2027284, bmo#2027291, bmo#2027293,
    bmo#2027298, bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959, bmo#2027962,
    bmo#2027964, bmo#2027971, bmo#2027974, bmo#2027979, bmo#2027982,
    bmo#2027995, bmo#2028001, bmo#2028267, bmo#2028268, bmo#2028275,
    bmo#2028288, bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061, bmo#2029071,
    bmo#2029283, bmo#2029296, bmo#2029314, bmo#2029323, bmo#2029411,
    bmo#2029423, bmo#2029424, bmo#2029425, bmo#2029427, bmo#2029436,
    bmo#2029440, bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707, bmo#2029708,
    bmo#2029728, bmo#2029802, bmo#2029896, bmo#2029906, bmo#2030106,
    bmo#2030118, bmo#2030123, bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224, bmo#2019547,
    bmo#2020378, bmo#2022381, bmo#2022608, bmo#2022785, bmo#2023120,
    bmo#2023128, bmo#2023140, bmo#2023279, bmo#2023836, bmo#2023882,
    bmo#2023925, bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346, bmo#2024357,
    bmo#2024416, bmo#2024420, bmo#2024429, bmo#2024432, bmo#2024455,
    bmo#2024466, bmo#2024468, bmo#2024476, bmo#2024664, bmo#2024666,
    bmo#2024669, bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384, bmo#2025395,
    bmo#2025458, bmo#2025461, bmo#2025463, bmo#2025481, bmo#2025483,
    bmo#2025485, bmo#2025494, bmo#2025506, bmo#2025511, bmo#2025513,
    bmo#2025520, bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152, bmo#2027161,
    bmo#2027238, bmo#2027261, bmo#2027269, bmo#2027274, bmo#2027280,
    bmo#2027281, bmo#2027300, bmo#2027302, bmo#2027331, bmo#2027339,
    bmo#2027340, bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887, bmo#2028888,
    bmo#2028896, bmo#2029063, bmo#2029064, bmo#2029290, bmo#2029291,
    bmo#2029294, bmo#2029300, bmo#2029304, bmo#2029316, bmo#2029317,
    bmo#2029401, bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754, bmo#2029776,
    bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1777032000">- Fix suse_version check since SLE 16 SP1 will use a value of 1610</changelog>
</package>
<package pkgid="75c8ef69d8da4a44d164ea89d560b869404d5fcdbee391ab9b7f1d256cc73e4018427045cc4bebd6b11d6fcf97e72153df110175daf531c120aa876499a42ab7" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="bp160.1.1"/>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777464000">- Further tests have shown that the rule which llvm version should
  be used, can be simplified: only on TW, Slowroll and Factory we
  need to explicitly BuildRequire the llvm21 based packages, while
  on all other (i.e. Leap) distribution versions we can stick with
  the distro's default release of llvm.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777982400">- Add thunderbird-glibc-2.43.patch as source22 and apply it only
  if glibc newer than 2.42 is installed in the build environment.
  It serves to remove conflicting definitions and adapt the syscall
  in accordance with glibc-2.43.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982401">- Migrate from deprecated %suse_update_desktop_file to
  %translate_suse_desktop. (boo#1158957)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778241600">- Mozilla Thunderbird 140.10.2
  MFSA 2026-44 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576, bmo#2022722,
    bmo#2024439, bmo#2027883, bmo#2029463, bmo#2030323, bmo#2032042,
    bmo#2032043, bmo#2033270, bmo#2033637, bmo#2034422, bmo#2034496,
    bmo#2035879, bmo#2036516)
    Memory safety bugs fixed in Thunderbird ESR 140.10.2 and
    Thunderbird 150.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1778932800">- Mozilla Thunderbird 140.11.0 ESR
  MFSA 2026-51 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677, bmo#2022390,
    bmo#2023116, bmo#2023657, bmo#2024255, bmo#2024418, bmo#2024441,
    bmo#2024447, bmo#2024966, bmo#2025412, bmo#2025467, bmo#2025940,
    bmo#2025950, bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332, bmo#2027333,
    bmo#2028266, bmo#2028292, bmo#2028319, bmo#2028526, bmo#2028870,
    bmo#2028876, bmo#2028882, bmo#2029062, bmo#2029309, bmo#2029414,
    bmo#2029422, bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028, bmo#2031457,
    bmo#2032039, bmo#2033610, bmo#2033854, bmo#2034498, bmo#2034628,
    bmo#2034978, bmo#2035966, bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429, bmo#2029910,
    bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
- removed obsolete patches
  * thunderbird-bmo2006630.patch
  * mozilla-bmo2031958.patch</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1779192000">- Use BuildRequires: libclang13 to instead of llvm21-libclang13 on
  Leap 16.1
  * Built llvm21 coming from SLFO does not name a llvm versioned
    libclang13</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1779537600">- Refresh thunderbird-glibc-2.43.patch and re-enable its application
  on systems with glibc &gt;= 2.43</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1779796800">- Mozilla Thunderbird 140.11.1 ESR
  * There are no Thunderbird changes requiring release notes in
    this release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1781352000">- Mozilla Thunderbird 140.12.0 ESR
  MFSA 2026-61 (bsc#1268071)
  * CVE-2026-12289 (bmo#2023443)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-12290 (bmo#2024852)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12291 (bmo#2036929)
    Use-after-free in the Networking: HTTP component
  * CVE-2026-12292 (bmo#2038465)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-12294 (bmo#2039873)
    Sandbox escape in the DOM: Workers component
  * CVE-2026-12295 (bmo#2040160)
    Sandbox escape in the DOM: Navigation component
  * CVE-2026-12298 (bmo#2041981)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12296 (bmo#2040515)
    Sandbox escape in the Security: Process Sandboxing component
  * CVE-2026-12297 (bmo#2041610)
    Sandbox escape due to incorrect boundary conditions in the
    Networking component
  * CVE-2026-12299 (bmo#2043139)
    JIT miscompilation in the DOM: Core &amp; HTML component
  * CVE-2026-12329 (bmo#2044738)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12302 (bmo#2034489)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12304 (bmo#2034944)
    Same-origin policy bypass in the Networking: Cookies component
  * CVE-2026-12305 (bmo#2037290)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12306 (bmo#2037323)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12307 (bmo#2038133)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12308 (bmo#2038302)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12309 (bmo#2038476)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12310 (bmo#2039707)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12311 (bmo#2040177)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12312 (bmo#2040383)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12313 (bmo#2040477)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12314 (bmo#2041856)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12315 (bmo#2042058)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12330 (bmo#2029326)
    Incorrect boundary conditions in the Internationalization
    component
  * CVE-2026-12324 (bmo#2038444)
    Incorrect boundary conditions in the Graphics: CanvasWebGL
    component
  * CVE-2026-12325 (bmo#2039443)
    Denial-of-service in the Graphics: ImageLib component
  * CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312,
    bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995,
    bmo#2038551, bmo#2040717, bmo#2042724)
    Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird
    ESR 140.12, Firefox 152 and Thunderbird 152
  * CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373,
    bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929,
    bmo#2042965, bmo#2043213)
    Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR
    140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1781697600">- Enable clang_build to allow building with the latest versions of
  llvm/clang due to them dropping support for update-alternatives.</changelog>
</package>
<package pkgid="b5023627950f62cea801a094d1ab0dca217e262ab3e6047730e73458f9bee3021da455fdc34ed2880b84c9b4d530a496e8aaec21c41b0c679ab67cf65ff17aa8" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.2.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1749470400">- Mozilla Thunderbird ESR 128.11.1
  MFSA 2025-49
  * CVE-2025-5986 (bmo#1958580, bmo#1968012)
    Unsolicited File Download, Disk Space Exhaustion, and Credential
    Leakage via mailbox:/// Links</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1750161600">- Use these tools/versions unconditionally, package won't build on
  Tumbleweed with new gcc15 otherwise:
  gcc14, gcc14-c++, cargo1.84, rust1.84</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
</package>
<package pkgid="06c9836e444c9734c88506dda1c7b50151ea5532eb4c3442133102d6e93ea39aaef1c54a8add32633b3e51eedfc4a3f200193e6565bd2e37861d9470a2d3f747" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.3.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
</package>
<package pkgid="2b1f257a2cdf2e597c3cbdd9fdfe17154aa9d33daedb2a98e2bcba8e4c841f14def8b487f88af1fd54099bfc177596e8ca77ec8408a2828851d41835fa7cfbbb" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.4.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257600">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257601">- Mozilla Thunderbird 140.4
  * changed: Account Hub is now disabled by default for second
    email account (bmo#1992027)
  * changed: Flatpak runtime has been updated to Freedesktop SDK
    24.08 (bmo#1952100)
  * fixed: Users could not read mail signed with OpenPGP v6 and
    PQC keys (bmo#1986845)
  * fixed: Image preview in Insert Image dialog failed with CSP
    error for web resources (bmo#1989392)
  * fixed: Emptying trash on exit did not work with some
    providers (bmo#1975147)
  * fixed: Thunderbird could crash when applying filters
    (bmo#1987880)
  * fixed: Users were unable to override expired mail server
    certificate (bmo#1979323)
  * fixed: Opening Website header link in RSS feed incorrectly
    re-encoded URL parameters (bmo#1971035)
  * fixed: Security fixes
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144
- Replace mozilla-bmo998749.patch with upstreams version</changelog>
</package>
<package pkgid="345fbe33c91a54822f410ae60e7ec2515b110253f07afa7bc4424cd50fc9282ccd4e9d39f15d3f5fd39da8c3f3d0886ffdab80116aea86d7ee566088839ef65d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
</package>
<package pkgid="561ca2e8d382d80af2d49044f487405bf750039f6b121fec78d1ea0fe1624ee5d9c8f65d0e2bd1f61f5c20f45b9104cfaa1671db469598b3115d3b2c2a5016c7" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="bp160.1.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="ace3f5455585dc9b733940913f14411c20ed9e818a2bc71cf50e23eb007f049aa5c52d944e904261b6413116ba53037ba681b1cfc81f3951f84134c667c56641" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="140.8.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
</package>
<package pkgid="4a2729d02ad1be70725989e5baec85656516cfc09a008599f217cb0708c5877cadd0e41fff7977ff156f0acb92a099eacc16c11614275457e1025e866a83f61e" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.10.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1774267200">- Mozilla Thunderbird 140.9.0 ESR
  MFSA 2026-24 (bsc#1260083)
  * CVE-2026-3889 (bmo#2020723)
    Spoofing issue in Thunderbird
  * CVE-2026-4371 (bmo#2023493)
    Out of bounds read in IMAP parsing
  * CVE-2026-4684 (bmo#2011129)
    Race condition, use-after-free in the Graphics: WebRender component
  * CVE-2026-4685 (bmo#2016349)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4686 (bmo#2016351)
    Incorrect boundary conditions in the Graphics: Canvas2D component
  * CVE-2026-4687 (bmo#2016368)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component
  * CVE-2026-4688 (bmo#2016373)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-4689 (bmo#2016374)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4690 (bmo#2016375)
    Sandbox escape due to incorrect boundary conditions, integer
    overflow in the XPCOM component
  * CVE-2026-4691 (bmo#2017512)
    Use-after-free in the CSS Parsing and Computation component
  * CVE-2026-4692 (bmo#2017643)
    Sandbox escape in the Responsive Design Mode component
  * CVE-2026-4693 (bmo#2018102)
    Incorrect boundary conditions in the Audio/Video: Playback
    component
  * CVE-2026-4694 (bmo#2018430)
    Incorrect boundary conditions, integer overflow in the
    Graphics component
  * CVE-2026-4695 (bmo#2020030)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4696 (bmo#2020190)
    Use-after-free in the Layout: Text and Fonts component
  * CVE-2026-4697 (bmo#2020422)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-4698 (bmo#2020906)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2026-4699 (bmo#2021863)
    Incorrect boundary conditions in the Layout: Text and Fonts
    component
  * CVE-2026-4700 (bmo#2003766)
    Mitigation bypass in the Networking: HTTP component
  * CVE-2026-4701 (bmo#2009303)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-4702 (bmo#2013560)
    JIT miscompilation in the JavaScript Engine component
  * CVE-2026-4704 (bmo#2014868)
    Denial-of-service in the WebRTC: Signaling component
  * CVE-2026-4705 (bmo#2014873)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4706 (bmo#2015091)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4707 (bmo#2015267)
    Incorrect boundary conditions in the Graphics: Canvas2D
    component
  * CVE-2026-4708 (bmo#2015268)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4709 (bmo#2016329, bmo#2016342)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-4710 (bmo#2016370)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4711 (bmo#2017002)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-4712 (bmo#2017666)
    Information disclosure in the Widget: Cocoa component
  * CVE-2026-4713 (bmo#2018113)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-4714 (bmo#2018126)
    Incorrect boundary conditions in the Audio/Video component
  * CVE-2026-4715 (bmo#2018405)
    Uninitialized memory in the Graphics: Canvas2D component
  * CVE-2026-4716 (bmo#2018592)
    Incorrect boundary conditions, uninitialized memory in the
    JavaScript Engine component
  * CVE-2026-4717 (bmo#2021695)
    Privilege escalation in the Netmonitor component
  * CVE-2025-59375 (bmo#1988467)
    Denial-of-service in the XML component
  * CVE-2026-4718 (bmo#2014864)
    Undefined behavior in the WebRTC: Signaling component
  * CVE-2026-4719 (bmo#2016367)
    Incorrect boundary conditions in the Graphics: Text component
  * CVE-2026-4720 (bmo#2004652, bmo#2019372, bmo#2021922,
    bmo#2022567, bmo#2022733)
    Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird
    ESR 140.9, Firefox 149 and Thunderbird 149
  * CVE-2026-4721 (bmo#2013762, bmo#2015291, bmo#2016591, bmo#2016661,
    bmo#2016664, bmo#2017303, bmo#2017894, bmo#2018090, bmo#2018196,
    bmo#2018379, bmo#2019112, bmo#2022090, bmo#2022243, bmo#2022351,
    bmo#2022478, bmo#2022676)
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR
    140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1775390400">- Mozilla Thunderbird 140.9.1 ESR
  MFSA 2026-29
  * CVE-2026-5732 (bmo#2017867)
    Incorrect boundary conditions, integer overflow in the
    Graphics: Text component
  * CVE-2026-5731 (bmo#2021894, bmo#2022225, bmo#2022252, bmo#2022294,
    bmo#2023007, bmo#2023130, bmo#2023191, bmo#2023364, bmo#2023829,
    bmo#2024074, bmo#2024417, bmo#2024433, bmo#2024436, bmo#2024437,
    bmo#2024453, bmo#2024461, bmo#2024462, bmo#2024472, bmo#2024474,
    bmo#2024477, bmo#2025364, bmo#2025401, bmo#2025402, bmo#2025472,
    bmo#2026287, bmo#2026299, bmo#2026305, bmo#2026426)
    Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR
    140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
    Thunderbird 149.0.2
  * CVE-2026-5734 (bmo#2022369, bmo#2023026, bmo#2023545, bmo#2023555,
    bmo#2023958, bmo#2025422, bmo#2025468, bmo#2025492, bmo#2025505)
    Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird
    ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1776772800">- Mozilla Thunderbird 140.10.0 ESR
  * Newly translated strings were not available in Thunderbird
  MFSA 2026-34 (bsc#1262230)
  * CVE-2026-6746 (bmo#2014596)
    Use-after-free in the DOM: Core &amp; HTML component
  * CVE-2026-6747 (bmo#2021769)
    Use-after-free in the WebRTC component
  * CVE-2026-6748 (bmo#2022604)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6749 (bmo#2022610)
    Information disclosure due to uninitialized memory in the
    Graphics: Canvas2D component
  * CVE-2026-6750 (bmo#2023407)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-6751 (bmo#2025883)
    Uninitialized memory in the Audio/Video: Web Codecs component
  * CVE-2026-6752 (bmo#2027499)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6753 (bmo#2027501)
    Incorrect boundary conditions in the WebRTC component
  * CVE-2026-6754 (bmo#2027541)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-6757 (bmo#2013588)
    Invalid pointer in the JavaScript: WebAssembly component
  * CVE-2026-6759 (bmo#2016164)
    Use-after-free in the Widget: Cocoa component
  * CVE-2026-6761 (bmo#2017857)
    Privilege escalation in the Networking component
  * CVE-2026-6762 (bmo#2021080)
    Spoofing issue in the DOM: Core &amp; HTML component
  * CVE-2026-6763 (bmo#2021666)
    Mitigation bypass in the File Handling component
  * CVE-2026-6764 (bmo#2022162)
    Incorrect boundary conditions in the DOM: Device Interfaces
    component
  * CVE-2026-6765 (bmo#2022419)
    Information disclosure in the Form Autofill component
  * CVE-2026-6766 (bmo#2023207)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6767 (bmo#2023209)
    Other issue in the Libraries component in NSS
  * CVE-2026-6769 (bmo#2023753)
    Privilege escalation in the Debugger component
  * CVE-2026-6770 (bmo#2024220)
    Other issue in the Storage: IndexedDB component
  * CVE-2026-6771 (bmo#2025067)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-6772 (bmo#2026089)
    Incorrect boundary conditions in the Libraries component in NSS
  * CVE-2026-6776 (bmo#2021770)
    Incorrect boundary conditions in the WebRTC: Networking
    component
  * CVE-2026-6785 (bmo#1935995, bmo#1999158, bmo#2015952, bmo#2021909,
    bmo#2022026, bmo#2022041, bmo#2022088, bmo#2022276, bmo#2022335,
    bmo#2022338, bmo#2022373, bmo#2022597, bmo#2022874, bmo#2023276,
    bmo#2023544, bmo#2023551, bmo#2023599, bmo#2023608, bmo#2023814,
    bmo#2024233, bmo#2024239, bmo#2024241, bmo#2024242, bmo#2024250,
    bmo#2024251, bmo#2024343, bmo#2024422, bmo#2024425, bmo#2024440,
    bmo#2024442, bmo#2024446, bmo#2024458, bmo#2024463, bmo#2024478,
    bmo#2024650, bmo#2024653, bmo#2024654, bmo#2024655, bmo#2024656,
    bmo#2024661, bmo#2024662, bmo#2024668, bmo#2024919, bmo#2025278,
    bmo#2025349, bmo#2025350, bmo#2025354, bmo#2025360, bmo#2025363,
    bmo#2025370, bmo#2025379, bmo#2025381, bmo#2025399, bmo#2025400,
    bmo#2025403, bmo#2025407, bmo#2025415, bmo#2025420, bmo#2025427,
    bmo#2025429, bmo#2025430, bmo#2025479, bmo#2025489, bmo#2025493,
    bmo#2025497, bmo#2025502, bmo#2025515, bmo#2025517, bmo#2025526,
    bmo#2025609, bmo#2025948, bmo#2025949, bmo#2025951, bmo#2025953,
    bmo#2025955, bmo#2025962, bmo#2025969, bmo#2025970, bmo#2025971,
    bmo#2025973, bmo#2025976, bmo#2025977, bmo#2026280, bmo#2026285,
    bmo#2026293, bmo#2026296, bmo#2026310, bmo#2027237, bmo#2027260,
    bmo#2027268, bmo#2027277, bmo#2027284, bmo#2027291, bmo#2027293,
    bmo#2027298, bmo#2027330, bmo#2027342, bmo#2027345, bmo#2027359,
    bmo#2027365, bmo#2027378, bmo#2027754, bmo#2027959, bmo#2027962,
    bmo#2027964, bmo#2027971, bmo#2027974, bmo#2027979, bmo#2027982,
    bmo#2027995, bmo#2028001, bmo#2028267, bmo#2028268, bmo#2028275,
    bmo#2028288, bmo#2028290, bmo#2028291, bmo#2028528, bmo#2028551,
    bmo#2028627, bmo#2028879, bmo#2028889, bmo#2029061, bmo#2029071,
    bmo#2029283, bmo#2029296, bmo#2029314, bmo#2029323, bmo#2029411,
    bmo#2029423, bmo#2029424, bmo#2029425, bmo#2029427, bmo#2029436,
    bmo#2029440, bmo#2029449, bmo#2029450, bmo#2029458, bmo#2029462,
    bmo#2029468, bmo#2029472, bmo#2029690, bmo#2029707, bmo#2029708,
    bmo#2029728, bmo#2029802, bmo#2029896, bmo#2029906, bmo#2030106,
    bmo#2030118, bmo#2030123, bmo#2030135, bmo#2030230, bmo#2030320)
    Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR
    140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
  * CVE-2026-6786 (bmo#2010727, bmo#2019004, bmo#2019224, bmo#2019547,
    bmo#2020378, bmo#2022381, bmo#2022608, bmo#2022785, bmo#2023120,
    bmo#2023128, bmo#2023140, bmo#2023279, bmo#2023836, bmo#2023882,
    bmo#2023925, bmo#2023950, bmo#2023959, bmo#2023965, bmo#2024243,
    bmo#2024245, bmo#2024247, bmo#2024253, bmo#2024346, bmo#2024357,
    bmo#2024416, bmo#2024420, bmo#2024429, bmo#2024432, bmo#2024455,
    bmo#2024466, bmo#2024468, bmo#2024476, bmo#2024664, bmo#2024666,
    bmo#2024669, bmo#2024670, bmo#2024671, bmo#2024761, bmo#2024918,
    bmo#2025292, bmo#2025332, bmo#2025348, bmo#2025384, bmo#2025395,
    bmo#2025458, bmo#2025461, bmo#2025463, bmo#2025481, bmo#2025483,
    bmo#2025485, bmo#2025494, bmo#2025506, bmo#2025511, bmo#2025513,
    bmo#2025520, bmo#2026277, bmo#2026282, bmo#2026288, bmo#2026289,
    bmo#2026311, bmo#2026312, bmo#2026869, bmo#2027152, bmo#2027161,
    bmo#2027238, bmo#2027261, bmo#2027269, bmo#2027274, bmo#2027280,
    bmo#2027281, bmo#2027300, bmo#2027302, bmo#2027331, bmo#2027339,
    bmo#2027340, bmo#2027738, bmo#2027975, bmo#2028000, bmo#2028011,
    bmo#2028289, bmo#2028525, bmo#2028728, bmo#2028887, bmo#2028888,
    bmo#2028896, bmo#2029063, bmo#2029064, bmo#2029290, bmo#2029291,
    bmo#2029294, bmo#2029300, bmo#2029304, bmo#2029316, bmo#2029317,
    bmo#2029401, bmo#2029415, bmo#2029430, bmo#2029457, bmo#2029727,
    bmo#2029735, bmo#2029743, bmo#2029752, bmo#2029754, bmo#2029776,
    bmo#2029809, bmo#2030324, bmo#2030370)
    Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird
    ESR 140.10, Firefox 150 and Thunderbird 150</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1777032000">- Fix suse_version check since SLE 16 SP1 will use a value of 1610</changelog>
</package>
<package pkgid="d876ba483a92617cb4eb0d37554e326b45ac4415bb085d258740d1e8b43aed1d55e0d3fa6079d8d8d77da5e8b2100655b673d88bf452eca572323d095eb38221" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="bp160.1.1"/>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777464000">- Further tests have shown that the rule which llvm version should
  be used, can be simplified: only on TW, Slowroll and Factory we
  need to explicitly BuildRequire the llvm21 based packages, while
  on all other (i.e. Leap) distribution versions we can stick with
  the distro's default release of llvm.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1777982400">- Add thunderbird-glibc-2.43.patch as source22 and apply it only
  if glibc newer than 2.42 is installed in the build environment.
  It serves to remove conflicting definitions and adapt the syscall
  in accordance with glibc-2.43.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1777982401">- Migrate from deprecated %suse_update_desktop_file to
  %translate_suse_desktop. (boo#1158957)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778241600">- Mozilla Thunderbird 140.10.2
  MFSA 2026-44 (bsc#1264378)
  * CVE-2026-8090 (bmo#2034352)
    Use-after-free in the DOM: Networking component
  * CVE-2026-8094 (bmo#2035939)
    Other issue in the WebRTC component
  * CVE-2026-8092 (bmo#1806249, bmo#2021977, bmo#2022576, bmo#2022722,
    bmo#2024439, bmo#2027883, bmo#2029463, bmo#2030323, bmo#2032042,
    bmo#2032043, bmo#2033270, bmo#2033637, bmo#2034422, bmo#2034496,
    bmo#2035879, bmo#2036516)
    Memory safety bugs fixed in Thunderbird ESR 140.10.2 and
    Thunderbird 150.0.2</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1778932800">- Mozilla Thunderbird 140.11.0 ESR
  MFSA 2026-51 (bsc#1265212)
  * CVE-2026-8946 (bmo#2029070)
    Incorrect boundary conditions in the Audio/Video: Web Codecs
    component
  * CVE-2026-8388 (bmo#2036978)
    Incorrect boundary conditions in the JavaScript Engine: JIT
    component
  * CVE-2026-8947 (bmo#2038439)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-8391 (bmo#2038575)
    Other issue in the JavaScript Engine component
  * CVE-2026-8401 (bmo#2038679)
    Sandbox escape in the Profile Backup component
  * CVE-2026-8949 (bmo#1355639)
    Integer overflow in the Widget: Win32 component
  * CVE-2026-8950 (bmo#1965430)
    Same-origin policy bypass in the Networking: HTTP component
  * CVE-2026-8953 (bmo#2029511)
    Sandbox escape due to use-after-free in the Disability Access
    APIs component
  * CVE-2026-8954 (bmo#2030747)
    Incorrect boundary conditions, integer overflow in the
    Audio/Video component
  * CVE-2026-8955 (bmo#2031064)
    Privilege escalation in the DOM: Workers component
  * CVE-2026-8956 (bmo#2032427)
    Integer overflow in the Networking: JAR component
  * CVE-2026-8957 (bmo#2033850)
    Privilege escalation in the Enterprise Policies component
  * CVE-2026-8958 (bmo#2034713)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-8959 (bmo#2034754)
    Sandbox escape due to incorrect boundary conditions in the
    Widget: Win32 component
  * CVE-2026-8961 (bmo#1962625)
    Spoofing issue in the Form Autofill component
  * CVE-2026-8962 (bmo#2004804)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-8968 (bmo#2030467)
    Denial-of-service due to invalid pointer in the Audio/Video:
    Web Codecs component
  * CVE-2026-8970 (bmo#2032174)
    Privilege escalation in the Security component
  * CVE-2026-8974 (bmo#1784128, bmo#1883230, bmo#1983677, bmo#2022390,
    bmo#2023116, bmo#2023657, bmo#2024255, bmo#2024418, bmo#2024441,
    bmo#2024447, bmo#2024966, bmo#2025412, bmo#2025467, bmo#2025940,
    bmo#2025950, bmo#2025956, bmo#2026284, bmo#2027247, bmo#2027255,
    bmo#2027288, bmo#2027306, bmo#2027322, bmo#2027332, bmo#2027333,
    bmo#2028266, bmo#2028292, bmo#2028319, bmo#2028526, bmo#2028870,
    bmo#2028876, bmo#2028882, bmo#2029062, bmo#2029309, bmo#2029414,
    bmo#2029422, bmo#2029428, bmo#2029447, bmo#2029732, bmo#2029785,
    bmo#2029793, bmo#2029813, bmo#2029899, bmo#2031028, bmo#2031457,
    bmo#2032039, bmo#2033610, bmo#2033854, bmo#2034498, bmo#2034628,
    bmo#2034978, bmo#2035966, bmo#2036668, bmo#2036905, bmo#2036930)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
  * CVE-2026-8975 (bmo#1860195, bmo#2029325, bmo#2029429, bmo#2029910,
    bmo#2035915, bmo#2038669, bmo#2038678)
    Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
- removed obsolete patches
  * thunderbird-bmo2006630.patch
  * mozilla-bmo2031958.patch</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1779192000">- Use BuildRequires: libclang13 to instead of llvm21-libclang13 on
  Leap 16.1
  * Built llvm21 coming from SLFO does not name a llvm versioned
    libclang13</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1779537600">- Refresh thunderbird-glibc-2.43.patch and re-enable its application
  on systems with glibc &gt;= 2.43</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1779796800">- Mozilla Thunderbird 140.11.1 ESR
  * There are no Thunderbird changes requiring release notes in
    this release</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1781352000">- Mozilla Thunderbird 140.12.0 ESR
  MFSA 2026-61 (bsc#1268071)
  * CVE-2026-12289 (bmo#2023443)
    Privilege escalation in the Graphics: WebRender component
  * CVE-2026-12290 (bmo#2024852)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12291 (bmo#2036929)
    Use-after-free in the Networking: HTTP component
  * CVE-2026-12292 (bmo#2038465)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-12294 (bmo#2039873)
    Sandbox escape in the DOM: Workers component
  * CVE-2026-12295 (bmo#2040160)
    Sandbox escape in the DOM: Navigation component
  * CVE-2026-12298 (bmo#2041981)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12296 (bmo#2040515)
    Sandbox escape in the Security: Process Sandboxing component
  * CVE-2026-12297 (bmo#2041610)
    Sandbox escape due to incorrect boundary conditions in the
    Networking component
  * CVE-2026-12299 (bmo#2043139)
    JIT miscompilation in the DOM: Core &amp; HTML component
  * CVE-2026-12329 (bmo#2044738)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12302 (bmo#2034489)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12304 (bmo#2034944)
    Same-origin policy bypass in the Networking: Cookies component
  * CVE-2026-12305 (bmo#2037290)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12306 (bmo#2037323)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12307 (bmo#2038133)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12308 (bmo#2038302)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12309 (bmo#2038476)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12310 (bmo#2039707)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12311 (bmo#2040177)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12312 (bmo#2040383)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12313 (bmo#2040477)
    Information disclosure, sandbox escape in the Security:
    Process Sandboxing component
  * CVE-2026-12314 (bmo#2041856)
    Memory safety bug fixed in Thunderbird ESR 140.12
  * CVE-2026-12315 (bmo#2042058)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-12330 (bmo#2029326)
    Incorrect boundary conditions in the Internationalization
    component
  * CVE-2026-12324 (bmo#2038444)
    Incorrect boundary conditions in the Graphics: CanvasWebGL
    component
  * CVE-2026-12325 (bmo#2039443)
    Denial-of-service in the Graphics: ImageLib component
  * CVE-2026-12327 (bmo#2011842, bmo#2023902, bmo#2025512, bmo#2027312,
    bmo#2029444, bmo#2036571, bmo#2036900, bmo#2036936, bmo#2037995,
    bmo#2038551, bmo#2040717, bmo#2042724)
    Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird
    ESR 140.12, Firefox 152 and Thunderbird 152
  * CVE-2026-12328 (bmo#2029402, bmo#2038477, bmo#2039726, bmo#2041373,
    bmo#2042268, bmo#2042451, bmo#2042782, bmo#2042858, bmo#2042929,
    bmo#2042965, bmo#2043213)
    Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR
    140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1781697600">- Enable clang_build to allow building with the latest versions of
  llvm/clang due to them dropping support for update-alternatives.</changelog>
</package>
<package pkgid="d30befb1cefbb12a1aaae98d1c7c4e9a64abe5e28c72c9daf1386669983a2b2800ed5450b356c667a5781475db3f3cd9d8c44fe14928dd8e5a3df514891d4350" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.2.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1749470400">- Mozilla Thunderbird ESR 128.11.1
  MFSA 2025-49
  * CVE-2025-5986 (bmo#1958580, bmo#1968012)
    Unsolicited File Download, Disk Space Exhaustion, and Credential
    Leakage via mailbox:/// Links</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1750161600">- Use these tools/versions unconditionally, package won't build on
  Tumbleweed with new gcc15 otherwise:
  gcc14, gcc14-c++, cargo1.84, rust1.84</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
</package>
<package pkgid="5daf813f63a103ba49f86a1b63c2dab2e8e0826b4cb4b6fbcb703e36b7a2f23280566223d95821ef4f4a00cba4dadf3abea69c39a5fc1affb8329e6315bbb5e9" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.3.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1751198400">- Mozilla Thunderbird ESR 128.12.0
  MFSA 2025-55 (bsc#1244670)
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1752580800">- Mozilla Thunderbird ESR 140.0.1
  MFSA 2025-54
  * CVE-2025-6424 (bmo#1966423)
    Use-after-free in FontFaceSet
  * CVE-2025-6425 (bmo#1717672)
    The WebCompat WebExtension shipped exposed a persistent UUID
  * CVE-2025-6426 (bmo#1964385)
    No warning when opening executable terminal files on macOS
  * CVE-2025-6427 (bmo#1966927)
    connect-src Content Security Policy restriction could be
    bypassed
  * CVE-2025-6429 (bmo#1970658)
    Incorrect parsing of URLs could have allowed embedding of
    youtube.com
  * CVE-2025-6430 (bmo#1971140)
    Content-Disposition header ignored when a file is included in
    an embed or object tag
  * CVE-2025-6432 (bmo#1943804)
    DNS Requests leaked outside of a configured SOCKS proxy
  * CVE-2025-6433 (bmo#1954033)
    WebAuthn would allow a user to sign a challenge on a webpage
    with an invalid TLS certificate
  * CVE-2025-6434 (bmo#1955182)
    HTTPS-Only exception screen lacked anti-clickjacking delay
  * CVE-2025-6435 (bmo#1961777 bmo#1950056)
    Save as in Devtools could download files without sanitizing
    the extension
  * CVE-2025-6436 (bmo#1941377 bmo#1960948 bmo#1966187 bmo#1966505
    bmo#1970764)
    Memory safety bugs fixed in Firefox 140 and Thunderbird 140
- adapt mozilla-ntlm-full-path.patch for Thunderbird 140.0.1
- adapt mozilla-silence-no-return-type.patch for Thunderbird
  140.0.1</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
</package>
<package pkgid="30aefa5fe550dd6a4d5d737a9139bc3e92ebd008a0093cbfdef276bc2027f5abddf700468024bb4cff89060cee79ddde5b936fc88d89b3366385074d8449e084" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.4.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1752926400">- Mozilla Thunderbird ESR 140.1.0
  * New folders were not added alphabetically if folders manually
    reordered beforehand
  * Message archive folder creation could silently stop during async
    folder creation
  MFSA 2025-63 (bsc#1246664)
  * CVE-2025-8027 (bmo#1968423)
    JavaScript engine only wrote partial return value to stack
  * CVE-2025-8028 (bmo#1971581)
    Large branch table could lead to truncated instruction
  * CVE-2025-8029 (bmo#1928021)
    javascript: URLs executed on object and embed tags
  * CVE-2025-8036 (bmo#1960834)
    DNS rebinding circumvents CORS
  * CVE-2025-8037 (bmo#1964767)
    Nameless cookies shadow secure cookies
  * CVE-2025-8030 (bmo#1968414)
    Potential user-assisted code execution in “Copy as cURL” command
  * CVE-2025-8031 (bmo#1971719)
    Incorrect URL stripping in CSP reports
  * CVE-2025-8032 (bmo#1974407)
    XSLT documents could bypass CSP
  * CVE-2025-8038 (bmo#1808979)
    CSP frame-src was not correctly enforced for paths
  * CVE-2025-8039 (bmo#1970997)
    Search terms persisted in URL bar
  * CVE-2025-8033 (bmo#1973990)
    Incorrect JavaScript state machine for generators
  * CVE-2025-8034 (bmo#1970422, bmo#1970422, bmo#1970422, bmo#1970422)
    Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR
    128.13, Thunderbird ESR 128.13, Firefox ESR 140.1,
    Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8040 (bmo#1975058, bmo#1975058, bmo#1975998, bmo#1975998)
    Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird
    ESR 140.1, Firefox 141 and Thunderbird 141
  * CVE-2025-8035 (bmo#1975961, bmo#1975961, bmo#1975961)
    Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird
    ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox
    141 and Thunderbird 141</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753531200">- Update memory constraints</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257600">- Add build_limit for s390x on SLE16 (bsc#1247774)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1762257601">- Mozilla Thunderbird 140.4
  * changed: Account Hub is now disabled by default for second
    email account (bmo#1992027)
  * changed: Flatpak runtime has been updated to Freedesktop SDK
    24.08 (bmo#1952100)
  * fixed: Users could not read mail signed with OpenPGP v6 and
    PQC keys (bmo#1986845)
  * fixed: Image preview in Insert Image dialog failed with CSP
    error for web resources (bmo#1989392)
  * fixed: Emptying trash on exit did not work with some
    providers (bmo#1975147)
  * fixed: Thunderbird could crash when applying filters
    (bmo#1987880)
  * fixed: Users were unable to override expired mail server
    certificate (bmo#1979323)
  * fixed: Opening Website header link in RSS feed incorrectly
    re-encoded URL parameters (bmo#1971035)
  * fixed: Security fixes
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144
- Replace mozilla-bmo998749.patch with upstreams version</changelog>
</package>
<package pkgid="69536de5bce2bbfacd755329c800a075d7c2e2bff489f0d6cd5f373dae944eea9b17dbdb75ac91e2ab44ffe70554f075ecc8f5df5a2faea164b8ee3247e98539" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.5.0" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1754395200">- Mozilla Thunderbird ESR 140.1.1
  Fixed
  * Users with attachments open in tabs saw an error on Thunderbird restart
  * Sending from unified or local folder failed if no default account was set
  * Delete button could remove attachment instead of message
  * Message list scrolled back when returning to mail tab after opening a message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
</package>
<package pkgid="9a904c256e6d1698f31f0eb3b16343de3497f34d2d3bc0283679e5863515d9c0d609deb7838b3ed95b23ee4b1e32505e0572bff566939227d3b4c947a3f7edc1" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.6.0" rel="bp160.1.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1755691200">- Mozilla Thunderbird 140.2
  * fixed: Users were unable to use Fastmail calendars due to
    missing OAuth settings (bmo#1978192)
  * fixed: Account setup error handling was broken for Account
    hub (bmo#1971303)
  * fixed: Menu bar was hidden after updating from 128esr to
    140esr (bmo#1979002)
  * fixed: Security fixes
  MFSA 2025-72 (bsc#1248162)
  * CVE-2025-9179 (bmo#1979527)
    Sandbox escape due to invalid pointer in the Audio/Video: GMP
    component
  * CVE-2025-9180 (bmo#1979782)
    Same-origin policy bypass in the Graphics: Canvas2D component
  * CVE-2025-9181 (bmo#1977130)
    Uninitialized memory in the JavaScript Engine component
  * CVE-2025-9182 (bmo#1975837)
    Denial-of-service due to out-of-memory in the Graphics:
    WebRender component
  * CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163,
    bmo#1979955)
    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird
    ESR 140.2, Firefox 142 and Thunderbird 142
  * CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166)
    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
    128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
    Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757160000">- Mozilla Thunderbird 140.2.1
  * Users could no longer send using smtp-relay.gmail.com
  * Folder compaction could fail to complete due to folder write errors
  * Creating an event or task from mail failed if the mail was
    opened in a tab</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1757332800">- Build for Leap 16 using gcc13 (gcc14 is unavailable on Leap 16)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1757419200">- Fix suse_version check for 16.0</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1757851200">- Mozilla Thunderbird 140.3.0 ESR
  * Right-clicking 'List-ID' -&gt; 'Unsubscribe' created double encoded
    draft subject
  * Thunderbird could crash on startup
  * Thunderbird could crash when importing mail
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-78 (bsc#1249391)
  * CVE-2025-10527 (bmo#1984825)
    Sandbox escape due to use-after-free in the Graphics:
    Canvas2D component
  * CVE-2025-10528 (bmo#1986185)
    Sandbox escape due to undefined behavior, invalid pointer in
    the Graphics: Canvas2D component
  * CVE-2025-10529 (bmo#1970490)
    Same-origin policy bypass in the Layout component
  * CVE-2025-10532 (bmo#1979502)
    Incorrect boundary conditions in the JavaScript: GC component
  * CVE-2025-10533 (bmo#1980788)
    Integer overflow in the SVG component
  * CVE-2025-10536 (bmo#1981502)
    Information disclosure in the Networking: Cache component
  * CVE-2025-10537 (bmo#1938220, bmo#1980730, bmo#1981280,
    bmo#1981283, bmo#1984505, bmo#1985067)
    Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird
    ESR 140.3, Firefox 143 and Thunderbird 143</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1759233600">- Mozilla Thunderbird 140.3.1 ESR
  * several bugfixes listed here
    https://www.thunderbird.net/en-US/thunderbird/140.3.1esr/releasenotes</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
</package>
<package pkgid="ed7019606e0bb012ec7f94acf22b4e9b0c82091bc0dd52af03c87239445ed57eba1623a6e530421741d9e1887ebf46cd3a4286f3c75f526a0b1dc86f2e82b03b" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="140.8.1" rel="bp160.1.1"/>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1760788800">- Mozilla Thunderbird 140.4.0 ESR
  * Account Hub is now disabled by default for second email account
  * Users could not read mail signed with OpenPGP v6 and PQC keys
  * Image preview in Insert Image dialog failed with CSP error for web resources
  * Emptying trash on exit did not work with some providers
  * Thunderbird could crash when applying filters
  * Users were unable to override expired mail server certificate
  * Opening Website header link in RSS feed incorrectly re-encoded
    URL parameters
  MFSA 2025-85 (bsc#1251263)
  * CVE-2025-11708 (bmo#1988931)
    Use-after-free in MediaTrackGraphImpl::GetInstance()
  * CVE-2025-11709 (bmo#1989127)
    Out of bounds read/write in a privileged process triggered by
    WebGL textures
  * CVE-2025-11710 (bmo#1989899)
    Cross-process information leaked due to malicious IPC
    messages
  * CVE-2025-11711 (bmo#1989978)
    Some non-writable Object properties could be modified
  * CVE-2025-11712 (bmo#1979536)
    An OBJECT tag type attribute overrode browser behavior on web
    resources without a content-type
  * CVE-2025-11713 (bmo#1986142)
    Potential user-assisted code execution in “Copy as cURL”
    command
  * CVE-2025-11714 (bmo#1973699, bmo#1989945, bmo#1990970,
    bmo#1991040, bmo#1992113)
    Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR
    140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144
  * CVE-2025-11715 (bmo#1983838, bmo#1987624, bmo#1988244,
    bmo#1988912, bmo#1989734, bmo#1990085, bmo#1991899)
    Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird
    ESR 140.4, Firefox 144 and Thunderbird 144</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1762689600">- Mozilla Thunderbird 140.5.0 ESR
  MFSA 2025-91 (bsc#1253188)
  * CVE-2025-13012 (bmo#1991458)
    Race condition in the Graphics component
  * CVE-2025-13016 (bmo#1992130)
    Incorrect boundary conditions in the JavaScript: WebAssembly
    component
  * CVE-2025-13017 (bmo#1980904)
    Same-origin policy bypass in the DOM: Notifications component
  * CVE-2025-13018 (bmo#1984940)
    Mitigation bypass in the DOM: Security component
  * CVE-2025-13019 (bmo#1988412)
    Same-origin policy bypass in the DOM: Workers component
  * CVE-2025-13013 (bmo#1991945)
    Mitigation bypass in the DOM: Core &amp; HTML component
  * CVE-2025-13020 (bmo#1995686)
    Use-after-free in the WebRTC: Audio/Video component
  * CVE-2025-13014 (bmo#1994241)
    Use-after-free in the Audio/Video component
  * CVE-2025-13015 (bmo#1994164)
    Spoofing issue in Thunderbird
  * fixed: Could not drag and drop ICS file to Today Pane
    (bmo#1992935)
  * fixed: With Thunderbird closed, clicking a 'mailto:' link to
    send signed message failed (bmo#1972857)
  * fixed: Upgrade from 128.x-&gt;140.x broke authentication for
    @att.net using Yahoo backend (bmo#1978361)</changelog>
  <changelog author="Yoshio Sato &lt;vasua.ukraine@gmail.com&gt;" date="1763380800">- Add build_limit for s390x on SLE16 (bsc#1247774)
  * by Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1765368000">- Mozilla Thunderbird 140.6.0 ESR
  MFSA 2025-96 (bsc#1254551)
  * CVE-2025-14321 (bmo#1992760)
    Use-after-free in the WebRTC: Signaling component
  * CVE-2025-14322 (bmo#1996473)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2025-14323 (bmo#1996555)
    Privilege escalation in the DOM: Notifications component
  * CVE-2025-14324 (bmo#1996840)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14325 (bmo#1998050)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14328 (bmo#1996761)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14329 (bmo#1997018)
    Privilege escalation in the Netmonitor component
  * CVE-2025-14330 (bmo#1997503)
    JIT miscompilation in the JavaScript Engine: JIT component
  * CVE-2025-14331 (bmo#2000218)
    Same-origin policy bypass in the Request Handling component
  * CVE-2025-14333 (bmo#1966501, bmo#1997639)
    Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird
    ESR 140.6, Firefox 146 and Thunderbird 146</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1768392000">- Mozilla Thunderbird 140.7.0 ESR
  MFSA 2026-05 (bsc#1256340)
  * CVE-2026-0877 (bmo#1999257)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-0878 (bmo#2003989)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: CanvasWebGL component
  * CVE-2026-0879 (bmo#2004602)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics component
  * CVE-2026-0880 (bmo#2005014)
    Sandbox escape due to integer overflow in the Graphics
    component
  * CVE-2026-0882 (bmo#1924125)
    Use-after-free in the IPC component
  * CVE-2025-14327 (bmo#1970743)
    Spoofing issue in the Downloads Panel component
  * CVE-2026-0883 (bmo#1989340)
    Information disclosure in the Networking component
  * CVE-2026-0884 (bmo#2003588)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-0885 (bmo#2003607)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-0886 (bmo#2005658)
    Incorrect boundary conditions in the Graphics component
  * CVE-2026-0887 (bmo#2006500)
    Clickjacking issue, information disclosure in the PDF Viewer
    component
  * CVE-2026-0890 (bmo#2005081)
    Spoofing issue in the DOM: Copy &amp; Paste and Drag &amp; Drop
    component
  * CVE-2026-0891 (bmo#1964722, bmo#2000981, bmo#2003100,
    bmo#2003278)
    Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird
    ESR 140.7, Firefox 147 and Thunderbird 147</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768478400">- Support using system GnuPG with gpgme 2, boo#1253718 bmo1967121
  add mozilla-bmo1967121.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769774400">- Mozilla Thunderbird 140.7.1 ESR
  MFSA 2026-08 (bsc#1257397)
  * CVE-2026-0818 (bmo#1881530)
    CSS-based exfiltration of the content from partially
    encrypted emails when allowing remote content</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771329600">- Mozilla Thunderbird 140.7.2 ESR
  MFSA 2026-11 (boo#1258231)
  * CVE-2026-2447 (bmo#2014390)
    Heap buffer overflow in libvpx</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1771761600">- Mozilla Thunderbird 140.8.0 ESR
  MFSA 2026-17 (boo#1258568)
  * CVE-2026-2757 (bmo#2001637)
    Incorrect boundary conditions in the WebRTC: Audio/Video
    component
  * CVE-2026-2758 (bmo#2009608)
    Use-after-free in the JavaScript: GC component
  * CVE-2026-2759 (bmo#2010933)
    Incorrect boundary conditions in the Graphics: ImageLib
    component
  * CVE-2026-2760 (bmo#2011062)
    Sandbox escape due to incorrect boundary conditions in the
    Graphics: WebRender component
  * CVE-2026-2761 (bmo#2011063)
    Sandbox escape in the Graphics: WebRender component
  * CVE-2026-2762 (bmo#2011649)
    Integer overflow in the JavaScript: Standard Library
    component
  * CVE-2026-2763 (bmo#2012018)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2764 (bmo#2012608)
    JIT miscompilation, use-after-free in the JavaScript Engine:
    JIT component
  * CVE-2026-2765 (bmo#2013562)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2766 (bmo#2013583)
    Use-after-free in the JavaScript Engine: JIT component
  * CVE-2026-2767 (bmo#2013741)
    Use-after-free in the JavaScript: WebAssembly component
  * CVE-2026-2768 (bmo#2014101)
    Sandbox escape in the Storage: IndexedDB component
  * CVE-2026-2769 (bmo#2014550)
    Use-after-free in the Storage: IndexedDB component
  * CVE-2026-2770 (bmo#2014585)
    Use-after-free in the DOM: Bindings (WebIDL) component
  * CVE-2026-2771 (bmo#2014593)
    Undefined behavior in the DOM: Core &amp; HTML component
  * CVE-2026-2772 (bmo#2014827)
    Use-after-free in the Audio/Video: Playback component
  * CVE-2026-2773 (bmo#2014832)
    Incorrect boundary conditions in the Web Audio component
  * CVE-2026-2774 (bmo#2014883)
    Integer overflow in the Audio/Video component
  * CVE-2026-2775 (bmo#2015199)
    Mitigation bypass in the DOM: HTML Parser component
  * CVE-2026-2776 (bmo#2015266)
    Sandbox escape due to incorrect boundary conditions in the
    Telemetry component in External Software
  * CVE-2026-2777 (bmo#2015305)
    Privilege escalation in the Messaging System component
  * CVE-2026-2778 (bmo#2016358)
    Sandbox escape due to incorrect boundary conditions in the
    DOM: Core &amp; HTML component
  * CVE-2026-2779 (bmo#1164141)
    Incorrect boundary conditions in the Networking: JAR
    component
  * CVE-2026-2780 (bmo#2007829)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2781 (bmo#2009552)
    Integer overflow in the Libraries component in NSS
  * CVE-2026-2782 (bmo#2010743)
    Privilege escalation in the Netmonitor component
  * CVE-2026-2783 (bmo#2010943)
    Information disclosure due to JIT miscompilation in the
    JavaScript Engine: JIT component
  * CVE-2026-2784 (bmo#2012984)
    Mitigation bypass in the DOM: Security component
  * CVE-2026-2785 (bmo#2013549)
    Invalid pointer in the JavaScript Engine component
  * CVE-2026-2786 (bmo#2013612)
    Use-after-free in the JavaScript Engine component
  * CVE-2026-2787 (bmo#2014560)
    Use-after-free in the DOM: Window and Location component
  * CVE-2026-2788 (bmo#2014824)
    Incorrect boundary conditions in the Audio/Video: GMP
    component
  * CVE-2026-2789 (bmo#2015179)
    Use-after-free in the Graphics: ImageLib component
  * CVE-2026-2790 (bmo#2008426)
    Same-origin policy bypass in the Networking: JAR component
  * CVE-2026-2791 (bmo#2015220)
    Mitigation bypass in the Networking: Cache component
  * CVE-2026-2792 (bmo#2008912, bmo#2010050, bmo#2010275,
    bmo#2012331)
    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird
    ESR 140.8, Firefox 148 and Thunderbird 148
  * CVE-2026-2793 (bmo#2015196, bmo#2016423, bmo#2016498)
    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR
    140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- add thunderbird-bmo2006630.patch (bmo#2006630)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1772884800">- Mozilla Thunderbird 140.8.1 ESR
  * Add mail.openpgp.load_untested_gpgme_version to load untested
    GPGME version
- drop mozilla-bmo1967121.patch because of the upstream change</changelog>
</package>
<package pkgid="b2b9e403a8ff54d338bef016b0b86cd6d97030cb543b059d2ca64ae772b044073758d9986b18dcef3f895df1a58bda25994bb8f01bb72a4d88e55b4a49d8efd2" name="MultiMarkdown-6" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="bp160.1.13"/>
  <changelog author="mpluskal@suse.com" date="1512648000">- Update to version 6.2.3:
  * version bump
  * FIXED: Fix potential NULL pointer dereference
  * FIXED: Fix bug with multiple footnotes in single paragraph when exporting to LaTeX
  * CHANGED: Update superscript/subscript algorithm to allow leading instances
  * UPDATED: Refactor file utilities into file.c/h
  * FIXED: Prevent pointer overflow
  * UPDATED: Silence Xcode static analyzer false positives
  * FIXED: Fix potential bug
  * FIXED: Fix potential bug
  * UPDATED: Fix issue with AStyle indent settings</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 6.3.0:
  * version bump
  * UPDATED: Apply astyle to source
  * UPDATED: Remove deprecated fodt.c and fodt.h
  * FIXED: Fix issue with list bullets in fenced code blocks
  * FIXED: Fix typo in QuickStart.txt (fixes #111)
  * Fix encoding of some markup inside LaTeX texttt environment (fixes #110 and #108)
  * UPDATED: Update dates
  * UPDATED: Add test suite to d_string
  * FIXED: Fix edge case with superscripts and punctuation</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551873600">- Update to version 6.4.0:
  * version bump
  * FIXED: Fix token length in OPML
  * UPDATED: Allow '\' to preserve line break in metadata.  (Addresses #86)
  * FIXED: Prevent potential null dereference
  * Avoid potential error with stack_free
  * FIXED: Use Setext headers when necessary to convert from OPML to text (fixes #138)
  * UPDATED: Apply astyle
  * ADDED: Add opml option to read for MultiMarkdown OPML files
  * UPDATED: Adjust metadata for test files
  * FIXED: Trim single remaining whitespace when exporting headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572955200">- Use modern macro for cmake</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580990400">- Update to version 6.5.1:
  * FIXED: Fix README version
  * version bump
  * FIXED: Fix error when pruning tokens
  * FIXED: Fix array overflow with wide tables
  * FIXED: Fix tests
  * FIXED: Fix null dereference
  * FIXED: Fix memory leak
  * FIXED: Fix null dereference
  * FIXED: Fix edge case in fenced code blocks
  * FIXED: Use more definitive edge case fix
  * FIXED: Fix metadata edge case
  * FIXED: Fix typos
  * FIXED: Ensure use of bash for creating AllTests.c
  * FIXED: Fix edge case in block parsing
  * FIXED: Fix edge case error in definition lists
  * UPDATED: Shorten hash function for compiling speed since we are hashing shorter strings
  * FIXED: Fix name mismatch of mmd6-default-metadata (Addresses #173)
  * UPDATED: Update notes source text
  * version bump; copyright bump
  * FIXED: Fix test suite for new captions
  * ADDED: Add title as short caption for figures and tables to be used in list of figures and list of tables.  Addresses #177 -- thanks, 	MArpogaus
  * FIXED: Fix memory leak (#172) -- thanks Alfons
  * UPDATED: Update cmake for xcode 11
  * UPDATED: Tweak smart quote rules to avoid false positive matches when using double quote as inches mark
  * FIXED: Fix two small potential errors
  * UPDATED: Make astyle
  * FIXED: Fix edge case with single item loose lists (fixes #174)
  * FIXED: Update README template
  * Fixes to README
  * Revert "remove build folder"
  * remove build folder
  * update README with instructions for Xcode
  * FIXED: Fix regression
  * ADDED: Add ASCII case detection
  * UPDATED: Refactor header file inclusion
  * UPDATED: Tidy code
  * FIXED: Fix potential errors related to checking for metadata
  * FIXED: Improve efficiency when checking for existence of metadata
  * FIXED: Fix potential memory address error
  * FIXED: Allow building libMMD has a child project for testing
  * FIXED: Fix length of metadata if no trailing line ending
  * UPDATED: Tidy code
  * UPDATED: Tidy code
  * FIXED: Improve BOM stripping
  * UPDATED: reduce false-positive rate of metadata where first line contains colon but metadata is not intended
  * UPDATED: Automatically disable libCurl on iOS
  * UPDATED: remove reliance on version.h when testing
  * UPDATED: Remove debug statement
  * UPDATED: Add UTF-8 validity check function
  * UPDATED: Fix main() when token pools disabled
  * UPDATED: Update char.c
  * UPDATED: Remove some old debugging statements that aren't necessary anymore
  * FIXED: Fix filename
  * UPDATED: Additional README comments about Xcode
  * add how to build Xcode framework to README
  * FIXED: Fix trim trailing whitespace
  * UPDATED: Update astyle
  * UPDATED: Add MARKUP token type
  * UPDATED: Update astyle settings
  * FIXED: Fix potential issue in d_string
  * FIXED: Fix potential issue in d_string
  * UPDATED: Remove i386 build architecture from default configuration
  * ADDED: Add {{TOC:1}} and {{TOC:1-2}} options
  * UPDATED: Silence warnings
  * UPDATED: Apply astyle
  * FIXED: Fix potential bug when reading OPML/ITMZ
  * FIXED: Update Quick Start PDF
  * FIXED: Clean up Quick Start guide
  * FIXED: Update Quick Start PDF
  * FIXED: Fix prior bad edits to quick start guide
  * FIXED: Fix warning
  * FIXED: Fix handling of hebrew language option
  * UPDATED: Fix doxygen template
  * UPDATED: Update advanced headers test suite
  * ADDED: Add support for random header labels when not manually specified (Addresses #157)
  * FIXED: Prevent line breaks in HTML/ODF attributes
  * UPDATED: table id attribute should be on table not caption
  * FIXED: Fix whitespace issues with headers with manual labels
  * FIXED: Include .html for EPUB and .fodt for ODT when transcluding with wildcard extension
  * UPDATED: Silence some Xcode warnings
  * FIXED: Fix pointer dereference (fixes #152)
  * UPDATED: Change convenience scripts for better POSIX compliance (implements #150) (Thanks, Ryan)
  * UPDATED: Apply astyle
  * FIXED: Ensure newline at end of header contents when importing from OPML/ITMZ
  * FIXED: Fix CMake config for MacPorts (fixes #146)
  * FIXED: Fix letterhead reference to memoir-footer. (Fixes #143)
  * FIXED: Use C11 (had old C99 as well, but I suspect that wasn't actually used
  * FIXED: Fix PATH in convenience scripts
  * FIXED: Fix bugs in new zip extraction code
  * Update mmd6-letterhead-leader.tex
  * FIXED: Add byte for null terminator when extracting from zip archive
  * FIXED: Update re2c scanners and prevent crash on certain documents with unexpected encoding
  * ADDED: Add conversion from ITMZ routines
  * UPDATED: Refactor XML parsing; improve OPML reading; add ITMZ (iThoughts) reading/writing (experimental feature); a few other small tweaks
  * UPDATED: Update macOS deployment version to 10.6 for Mojave
  * UPDATED: Don't require opening &lt;?xml&gt; in OPML
  * UPDATED: Apply astyle
  * UPDATED: Add OPML routines to libMultiMarkdown.h
  * UPDATED: Update d_string</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611662400">- Update to version 6.6.0:
  * UPDATED: Update CMakeLists.txt for Universal Binary
  * CHANGED: Reformat comment
  * UPDATED: Apply astyle to all files
  * FIXED: Fix style issue with ODT output format
  * FIXED: Improve README install path
  * FIXED: Re-enable token object pools in default configuration
  * version bump
  * UPDATED: Restructure source code organization; Restructure Cmake configuration file; restructure Makefile
  * version bump
  * ADDED: Add additional blockquote tests
  * FIXED: Fix issue when parsing blockquote that contains raw HTML
  * FIXED: Don't free NULL link
  * FIXED: Fix regression
  * FIXED: Improve blockquote parser
  * FIXED: Add latex footer to beamer output format (fixes #185)
  * FIXED: Fix test suite
  * FIXED: Prevent iOS Safari from bastardizing left arrow unicode character with an ugly emoji
  * FIXED: Allow hyphen in image/link unquoted attributes
  * ADDED: Add format to create HTML with storing of assets
  * FIXED: Fix issue with tight list where last item has multiple paragraphs not being recognized as a loose list
  * FIXED: Fix CMake issue
  * FIXED: tweak CriticMarkup highlight handling
  * version bump
  * FIXED: Update cpack generator for macOS
  * Fix fsf address in files licenses.
  * FIXED: Fix memory leak in ITMZ reader
  * UPDATED: Adjust cmake to only make library when included from a parent project
  * FIXED: Don't use undefined version string</changelog>
  <changelog author="mpluskal@suse.com" date="1643112000">- Update to version 6.6.0:
  *</changelog>
  <changelog author="mpluskal@suse.com" date="1679659200">- Update to version 6.6.0:
  * Revert "FIXED: Fix PATH in convenience scripts"
  * FIXED: Fix PATH in convenience scripts</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1703678400">- Update to version 6.7.0:
  * version bump
  * FIXED: Fix error detecting tables when indented in list items -- Thanks, @wnm3!
  * Avoid space to be eaten aways after a slash in latex export
  * UPDATED: Update github CI for multiple platforms
  * UPDATED: Update github CI for multiple platforms
  * UPDATED: Update github CI for multiple platforms
  * UPDATED: Update github CI for multiple platforms
  * UPDATED: Update github CI for multiple platforms
  * ci: added github CI
  * FIXED: Fix issue with reference links with leading space instead of tab
  * FIXED: Fix edge case where table separator without leading pipe is treated as a list item
  * FIXED: Fix architecture issue when running multimarkdown from Xcode
  * FIXED: bibtex metadata should be raw
  * FIXED: Fix typos in error messages
  * UPDATED: standardize common source files
  * ADDED: Add more token types
  * FIXED: Don't output empty figure captions
  * FIXED: Fix issue with certain nested lists
  * use unsigned short in implementation, too
  * specify unsigned short for functions in token.h
  * FIXED: Use MultiMarkdown instead of libMultiMarkdown as title in version.h
  * FIXED: Improve markup handling around definition lists and colons
  * FIXED: Fix flow control error
  * FIXED: Improve edge cases around fenced code blocks and setext headers
  * FIXED: Fix trailing whitespace issues in headers/TOC
  * FIXED: Improve token mapping in header blocks
  * FIXED: Use UTC for timestamp
  * ADDED: Add compiler flag (DISABLE_OBJECT_POOL) to disable token pools
  * UPDATED: Update lexers with newer version of re2c
  * FIXED: Fix typo in xml.c
  * ADDED: Add OBJECT_REPLACEMENT_CHARACTER token (fixes #216)
  * FIXED: Fix regression from pull request that breaks build
  * UPDATED: Include definition list colons as markup token
  * UPDATED: Project clean up
  * Add Swift support
  * FIXED: Reset stack sizes before freeing temporary engine
  * FIXED: Left out file
  * FIXED: Centralize html fix
  * FIXED: Fix issue with escaping in URLs
  * FIXED: Updated argtable3 now needs to link to math
  * UPDATED: Update to latest argtable3 code
  * UPDATED: Update astyle config
  * FIXED: Fix Glossaries test
  * FIXED: Fix ambidextrous tokens inside of footnotes and other definitions
  * CHANGED: Astyle
  * FIXED: Restore prior label_counter after {{TOC}}
  * CHANGED: Add additional TOC tests
  * UPDATED: Update CMakeLists.txt for Universal Binary
  * CHANGED: Reformat comment
  * UPDATED: Apply astyle to all files
  * FIXED: Fix style issue with ODT output format
  * FIXED: Improve README install path
  * FIXED: Re-enable token object pools in default configuration</changelog>
</package>
<package pkgid="c41804a67316a86a8c5a812a0065f3042be7020ae328ee80baf4f1518f5fffade172d14f788c77313ef519db85fc1a85f7d5626c68dc4bbbe020005d62db1bf4" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="dc8f330e9c255e7435d12e8a7004648fb2369cdacf8d2c7989a7944e9aba638d87ad491b34e383c210b755b4d77ce6cba991e441ab4c3351af6101fa2187b169" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="40b94b6c41304c3ac22120e67b8ebee02db9f9882fdf42c3c4f822b20264f6b91bbcd592e0d46d2879c872f1a1e3629e17e17a46301c8ddebd62c8bfb1558fa1" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="6913b60ecfe36eb9e85af13f6ee222cdc30607f879225a76f28d2e3823cc06ee85a5264d0b7000e83937c4ff3fced7672ce073a54dd07993a7906b000850f805" name="NetworkManager-applet" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="bp160.1.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1654689600">- Update to version 1.28.0:
  + Use correct font size for headings in order to make lives of
    HiDPI a little less miserable.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Update to version 1.30.0:
  + wifi: change description for wpa-psk to include also WPA3.
  + editor: remove unused fields from wifi page.
  + applet: replace libnotify with GNotification.
  + gschema: bring back org.gnome.nm-applet schema.
  + Updated translations.
- Drop pkgconfig(libnotify) BuildRequires: no longer needed.
- Rebase feature-app-indicator-desktop-file.patch.
- Conflict with libnma0 &lt; 1.10.4: the glib schema was upstream
  wrongly moved to libnma, even though only a part of it was
  supposed to be there. libnm 1.10.4 fixes this situation.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1670328000">- Add meson-0.61-build-fix.patch to fix the build on meson &gt;= 0.61
  (jsc#PED-2644, glgo#GNOME/network-manager-applet!107)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681646400">- Update to version 1.32.0:
  + Allow using MTU larger than 10000 octets.
  + Prefer using AppIndicator outside X11.
  + Added support for importing WireGuard profiles from wg-quick
    files.
  + Updated translations.
- Drop meson-0.61-build-fix.patch: fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696420800">- Update to version 1.34.0:
  + Fix crash when importing WireGuard connections.
  + Fix ineffective "Don't show message again" button in
    notifications.
  + Drop build dependency on gudev.
  + Add setting to suppress broadband unlock prompt.
  + Replace occurrences of "master", "slave" and "blacklist".
  + Updated translations.
- Drop long disabled polkit-devel BuildRequires, patch it was
  needed for is dropped.
- Drop pkgconfig(gudev-1.0) BuildRequires: No longer needed
  following upstream changes.
- Rebase feature-app-indicator-desktop-file.patch with quilt.
- Pass sysconfdir=%{_distconfdir} to meson setup, move to UsrEtc.
- Pass b_lto=true to meson setup, use link time optimization.
- Add fdupes BuildRequires and macro, remove duplicate files.
- Move translations to NetworkManager-connection-editor-lang,
  replace the NetworkManager-connection-editor Recommends with a
  hard Requires. Also add Obsoletes and Provides to ease updates.
  The reason for moving the translations are as follows: One can
  install NetworkManager-connection-editor without needing
  NetworkManager-applet, so in order to make the translations for
  NetworkManager-connection-editor installable without pulling the
  dependencies of NetworkManager-applet.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1697630400">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705665600">- Update to version 1.36.0:
  + Support WiFi's cloned-mac "stable-ssid".
  + Update translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715947200">- Swicth to ayatana-appindicator: Replace
  pkgconfig(appindicator3-0.1) BuildRequires with
  pkgconfig(ayatana-appindicator3-0.1). The legacy appindicator has
  been unmaintained for a while already.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1732104000">- Make pkgconfig(ayatana-appindicator3-0.1) BuildRequires
  conditional for ppc64le, as it is not available there.</changelog>
</package>
<package pkgid="f6fd76bf59ad1216072192f4c350cdb4c8a8004e0c26a2d346b937eef6204a69f2008b0a01d26f1a089698145f48af0a8bc770494c43d00c78680f313446cd48" name="NetworkManager-applet-fortisslvpn" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553342400">- Write style: do summaries without em dashes, and do descriptions
  without double prepositions ("with X with Y").</changelog>
  <changelog author="cges30901@gmail.com" date="1572177600">- Add openfortivpn to Requires</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585224000">- Add NetworkManager-fortisslvpn-fix-incompat-openfortivpn.patch:
  Fix incompatibility with openfortivpn &gt;= 1.11.0 (boo#1167694,
  glgo#GNOME/NetworkManager-fortisslvpn!13).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597320000">- Require the same version ppp at runtime as we had during build
  time. We got away with the missing Requires as NM itself requires
  ppp, so 'a version' was always installed at least. But we need to
  guarantee the version at runtime matches the one we built against
  (boo#1175106).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.4.0:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Add support for interactive connect (e.g. OTP via SMS).
  + Drop privileges in pppd if "nm-fortisslvpn" user exists.
  + Allow more than 100 routes.
  + Updated translations.
- Drop NetworkManager-fortisslvpn-fix-incompat-openfortivpn.patch:
  fixed upstream.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207585)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-fortisslvpn
  to more accurately reflect its usage
- Add missing requires: NetworkManager
- Add missing supplements:
  - NM and openfortivpn
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1703246400">- Add 084ef529.patch: Add support for compiling against pppd-2.5.0.
- Add libtool BuildRequires and call autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="51ea9794c930a887929a711276e14059cac35700891a6b2d8bc5084116e8d255bdf33167054c7840719be5af5b04758e4a58fbf5400f76ebd9baf5f7e83eb82b" name="NetworkManager-applet-iodine" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.0:
  + Add appdata file.
  + build: don't include the full path to a plugin by default.
- Changes from version 1.1.0:
  + Port to libnm.
  + Updated translations.
- Add pkgconfig(libnm), pkgconfig(libnma), pkgconfig(libnm-util),
  pkgconfig(libnm-glib) and pkgconfig(libnm-glib-vpn)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523707200">- Following changes in NetworkManager: pass without-libnm-glib to
  configure, no longer build deprecated libnm-glib support.
- Following the above changes: Drop no longer needed
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn), pkgconfig(libnm-gtk) and
  pkgconfig(libnm-util) BuildRequires.
- Drop unnneeded NetworkManager-gnome Requires from gnome
  sub-package, it is not longer of use for us.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1645272000">- Create nm-iodine user (by systemd-sysusers)
- Update Supplements to new format</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1672228800">- Move dbus-1 system.d conf file to /usr (bsc#1206756)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1701432000">- Rename gnome subpackage to NetworkManager-applet-iodine
  to more accurately reflect its usage
- Change supplements:
  - NMA subpackage: only supplement if main package is installed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707998400">- Add NetworkManager-iodine-pkgconf-2.1.0.patch: Fix
  build/installation when using pkgconf 2.1 as pkg-config
  implementation: configure wrongly called
  "pkg-config pkg-config --parameters", which now leads nowhere.
- Add libtool BuildRequires and call autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="8d29fe5ec02b81913170f1d5e54e8839e69abf233a7f17a7f761ab22baeed2ef94baf1b3d7236a2eaf795c902fd12ecc83e3e82eec7654649c41dea6af8cdc77" name="NetworkManager-applet-l2tp" arch="x86_64">
  <version epoch="0" ver="1.20.10" rel="bp160.1.54"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="doug@uq.edu.au" date="1613217600">- Update to version 1.8.6:
  + Fix for make check warning that prevented RPMs from being
    built.
- Changes from version 1.8.2:
  + Update strings for new dialog design in gnome-shell.
    e.g use "Password" instead of "Password:".
  + Use /usr/share/metainfo for AppData files.
  + Move D-Bus policy file to /usr/share/dbus-1/system.d/.
  + Add --with-nm-ipsec-nss-dir configure switch for Libreswan NSS
    database location with default value of /var/lib/ipsec/nss.
  + Do not add broken route to VPN gateway IP address.
  + Add back import/export capability.
  + Fix for user certificate password flags for connection editor.
  + Fixes for user certificate support.
  + Provide --enable-libreswan-dh2 configure switch for older
    versions of Libreswan or those built with USE_DH2.
  + KDE plasma-nm compatibility for "Gateway ID".
  + Updated translations.
- Update default PPPD_PLUGIN_DIR to %{_libdir}/pppd/2.4.8.
- Use --enable-libreswan-dh2 configure switch.
- D-Bus policy file location is now /usr/share/dbus-1/system.d.
- AppData file location is now /usr/share/metainfo.</changelog>
  <changelog author="doug@uq.edu.au" date="1634126400">- Update to version 1.20.0:
  + Support for kl2tpd from Katalix's go-l2tp project added.
  + Support for Multilink PPP added.
  + L2TP ephemeral source port checkbox added.
  + Honors $CHARONDEBUG and $PLUTODEBUG even without --debug
  + intltool for i18n builds no longer required.
  + deprecated libnm-glib/libnm-util code removed.
  + Updated translations.
- Update dependencies for NetworkManager &gt;= 1.20.0
- Remove redundant intltool build dependency.
- Replace recommends strongswan with (strongswan or libreswan)</changelog>
  <changelog author="doug@uq.edu.au" date="1650888000">- Update to version 1.20.2:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="doug@uq.edu.au" date="1668340800">- Update to version 1.20.6:
  + Fix for Libreswan 4.9 and later detection.
  + Fix for ipsec-psk-flags setting not being saved.
  + Add getenv NM_L2TP_XL2TPD_MAX_RETRIES to allow setting the
    xl2tpd max retries value.
  + Increase IPsec and L2TP daemon wait timeouts for potentially
    better debugging.
  + Updated translations.
- Changes from version 1.20.4:
  + Security fix - properly detect that strongswan CHILD_SA
    connection has been established.
  + Fix for libreswan "cannot route template policy" error.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672833600">- Update to version 1.20.8:
  + Fix padding of PPP Options dialog.
  + Undo PTP peer &amp; ext GW routing prevention workaround first
    introduced with NetworkManager-l2tp 1.8.4 as workaround no
    longer works with NetworkManager 1.36. The actual fix should
    be done in NetworkManager.
  + Add support for Manual IPv4 configuration options: Address,
    Netmask and Gateway.
  + Remove deprecated OpenSSL 3 related code.
  + Load L2TP kernel modules if NM_L2TP_MODPROBE env variable set.</changelog>
  <changelog author="Bj&#xF8;rn &lt;bjorn.lie@gmail.com&gt;" date="1697025600">- Update to version 1.20.10:
  + Fix missing ppp user option.
  + Add support for compiling against pppd-2.5.0, including
    pkgconfig support to pickup the pppd plugin directory.
  + Add error output for missing TLS filenames.
  + Remove bashisms in configure script.
  + Spell checked code with CSpell.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-l2tp
  to more accurately reflect its usage
- Add missing supplements:
  - NM and xl2tpd
  - NMA subpackage: Main package and NMA
- Configure runstatedir to %_rundir</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="ef1782ff8af011837c3887729026c6ae5478424f1873b5678751d7b6eac1000e2dd80c9c8fafb4ecb697369d4e0e663b7b1ba39aaccdf08ebf9764022630ef33" name="NetworkManager-applet-libreswan" arch="x86_64">
  <version epoch="0" ver="1.2.24" rel="bp160.1.7"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610452800">- Update to version 1.2.14:
  + Support Libreswan 4, which changed the name of some
    configuration parameters. Now the plugin can detect the
    Libreswan version and use the appropriate parameter names.
  + The auth helper in external UI mode can now be run without a
    display server. Future nmcli version will utilize this for
    handling the secrets without a graphical desktop.
  + Update strings for new dialog design in gnome-shell.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.16:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1672228800">- Move dbus-1 system.d conf file to /usr (bsc#1206757)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-libreswan
  to more accurately reflect its usage
- Add missing requires: NetworkManager
- Add missing supplements:
  - NM and /usr/sbin/ipsec
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1713441600">- Update to version 1.2.20:
  + Support setting "leftmodecfgclient" to "no"
  + Support for the "type", "hostaddrfamily" and
    "clientaddrfamily", "leftsubnet" and "rightcert" parameters.
- Changes from version 1.2.18:
  + Drop libnm-glib compatibility (NetworkManager &lt; 1.0).
  + Add support for the "authby", "dpdaction", "dpddelay",
    "dpdtimeout", "ipsec-interface" parameters.
  * Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716379200">- Update to version 1.2.22:
  + Add IPv6 support.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1729598400">- Update to version 1.2.24:
  + Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050).
  + Added support for "require-id-on-certificate" setting.
  + Updated translations.</changelog>
</package>
<package pkgid="8532a3667006628ccbae880fba53f59c476d18f006c4fa5676cf1365f200d58b768359db93e93b1255a1d14c702b992ed4a03ac96c5d269840966aaac773acb0" name="NetworkManager-applet-openconnect" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="bp160.1.16"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.8:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Fix SNI and authgroup problems.
  + Handle IPv6 nameservers.
  + Allow IP prefixes of 0 for routing rules.
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Add dbus-location.patch: move dbus system.d conf file to /usr
  (bsc#1204795)
- Due to patching: add BRs autoconf, automake and libtool</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1684324800">- Update to version 1.2.10:
  + Improved cancellation handling.
  + Support SAML/SSO authentication for some VPN protocols.
  + Allow useragent override.
  + Support webkit2gtk-4.1.
  + Allow choosing certificates/keys from PKCS#11 tokens.
  + Allow custom interface name.
  + Allow UDP connectivity to be disabled.
  + Support multi-certificate authentication for AnyConnect.
  + Fix hangs with external browsers which spam stdout.
  + Updated translations.
- Drop dbus-location.patch: Fixed upstream.
- Add pkgconfig(webkit2gtk-4.1) BuildRequires: New dependency.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-openconnect
  to more accurately reflect its usage
- Add missing supplements:
  - NM and openconnect
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="ca464a5d02d4ef4cf559782b4a64403765bbf76fe51ce9a68c1a5eddd6c4af6e2325fab49cc824abf8d2e4f75006becae924817f962e05b3b2122d6f69b6a7cd" name="NetworkManager-applet-openvpn" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632916800">- Update to version 1.8.16:
  + Fix detection of OpenVPN 2.5.0
  + Allow the connection to persist across network failures when
    the VPN profile has 'vpn.persistent=yes'
  + Fix parsing of incomplete IPv6 configurations pushed by server
  + Improve logging message about deprecated tls-remote option
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 1.8.18:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Drop nm-openvpn-bsc#1186091.patch: Fixed upstream.
- Rebase patch with quilt.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661774400">- Update to version 1.10.0:
  + Add support for "allow-compression" parameter.
  + Fix a regression in preserving the "tls-auth" settings.
  + Add support for "tls-min" and "tls-cipher" parameters.
  + Include the new gnome-control-center name in the AppData file.
  + Drop libnm-glib support, nobody is likely using it anymore.
  + Fix importing profiles with a PKCS#12 CA.
  + Make sure the plugin object links with glib.
  + Dropped dependency on intltool.
  + Updated translations.
- Drop intltool BuildRequires following upstream changes.
- Rebase patch with quilt.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668772800">- Update to version 1.10.2:
  + IP condfiguration is no longer required in TAP mode.
  + Fix initialization of secret flags.
  + Add support for DOMAIN-SEARCH option.
  + Set data-ciphers option with chosen cipher.
  + Update translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1694174400">- Add nm-openvpn-fix-importing-pkcs12-ca.patch: import: fix
  importing profiles with PKCS#12 CA
  (glgo#GNOME/NetworkManager-openvpn!50, bsc#1214415).
- Drop nm-openvpn-fix-importing-pkcs12-ca.patch: fixed upstream.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-openvpn
  to more accurately reflect its usage
- Add missing supplements:
  - NM and openvpn
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="songchuan.kang@suse.com" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="dimstar@opensuse.org" date="1719230400">- Update to version 1.12.0:
  + Adapt to the new way of handling the 2FA secret by the daemon,
    needed by it to fix a bug with certain clients.
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1741089600">- Add nm-openvpn-fix-crash.patch: service: fix a crash when empty
  password is provided (glgo#GNOME/NetworkManager-openvpn!92,
  bsc#1237570).</changelog>
</package>
<package pkgid="f13ad03ab3b382805733f31a7a10a5ddb9314ce50db934128dc4d99949a7ccc4bbc8e27fc9bef1f2830d341ace8be253a4830f60d10b18ec45ace59cef71ab9d" name="NetworkManager-applet-pptp" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.2.6:
  + Fix passing "user" and set "remotename" (bgo#794695)
  + Use gresources for UI file
  + Updated translations.
- Update URL tag to https://wiki.gnome.org/Projects/NetworkManager:
  currently the Network Manager project's web page.
- Drop icon_theme_cache_* post/postun scriptlets: its fucntionality
  has been moved to RPM file triggers (4.13, suse_version 1330).
- Add gio-2.0, gio-unix-2.0 and glib-2.0 pkgconfig modules
  BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523707200">- Following changes in NetworkManager: pass without-libnm-glib to
  configure, no longer build deprecated libnm-glib support.
- Following the above changes: Drop no longer needed
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn), pkgconfig(libnm-gtk) and
  pkgconfig(libnm-util) BuildRequires.
- Package missing COPYING file.
- Package m-pptp-service.conf as config, silence rpmlint.
- Drop unnneeded NetworkManager-gnome Requires from gnome
  sub-package, it is not longer of use for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538654400">- Update to version 1.2.8:
  + Fix build without GTK/Gnome.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.10:
  + libnm-glib compatibility (NetworkManager &lt; 1.0) is disabled by
    default.
  + It can be enabled by passing --with-libnm-glib to configure
    script. Nobody should need it by now. Users that still use this
    are encourage to let us know before the libnm-glib support is
    removed for good.
  + The auth helper in external UI mode can now be run without a
    display server. This is useful when activating connections with
    "nmcli --ask".
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678363200">- Update to version 1.2.12:
  + Dropped the libnm-glib support (obsolete since 2014).
  + Add support for building with upcoming pppd version (2.5.0).
  + Improvement to the build &amp; test system.
  + Updated translations.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-pptp
  to more accurately reflect its usage
- Add missing supplements:
  - NM and pptp
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="f36ab08c9eb26c079f921b3d91b1a7afc40f8e50bba26382d68992b104965e4b9e1a603132a6baefda613695997754c954b28b22568d0648c4e4c5f30f24c5ba" name="NetworkManager-applet-strongswan" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp160.1.13"/>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added NetworkManager-strongswan.keyring, which contains the key
  from the author.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528718400">- Fix packaging error in previous sub, README was moved from
  source1 tag to source3, move to tag source99 to avoid similar
  error in the future.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Update to version 1.4.5:
  + Enables the IPv6 tab in the connection dialog.
- Use modern macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).
- Pass --with-nm-libexecdir=%{_libexecdir} to configure to behave
  the same as all the other NM-VPN plugins. This results in
  nm-strongswan-auth-dialog moving from
  %{_libexecdir}/NetworkManager to %{_libexecdir}, but considering
  all the other auth-dialog helpers are there as well it is
  perfectly welcome.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1588593600">- Update to version 1.5.0:
  + EAP-TLS authentication
  + Certificate source (file, agent, smartcard) is selectable
    independently
  + Add support to configure local and remote identities
  + Support configuring a custom server port
  + Show hint regarding password storage policy
  + Replaced the term "gateway" with "server"
  + Fixes build issues due to use of deprecated GLib
    macros/functions
  + Updated Glade file to GTK 3.2</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1623067200">- Update to version 1.5.2
  + Reduce height of config dialog by moving options/proposals to tabs
  + Migrated appdata to metainfo (renamed and moved the file)
- Update to version 1.5.1
  + Fixes password entry for private keys</changelog>
  <changelog author="Jens K. &lt;karatekhd@opensuse.org&gt;" date="1694088000">- Update to version 1.6.0
  + Support for GTK4
  + Removed libnm-glib compatibility
- Add pkgconfig(gtk4) because the new version requires this
- Add pkgconfig(libnma-gtk4) because the new version requires this</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-strongswan
  to more accurately reflect its usage
- Add missing supplements:
  - NM and strongswan-nm
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="7bdf11de63270613bf3618bc729a889e0c72a60b160e5a39f94b05d2fce24d443aec2202f277643e242ae4b38518884d9f040f0d2f30100b2fc18688022d3097" name="NetworkManager-applet-vpnc" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Updatet to version 1.2.6:
  + Fix for a local authenticated privileged escalation bug
    (CVE-2018-10900). All users are advised to upgrade.
  + The CA file is now hidden from the configuration dialog if
    hybrid auth is disabled.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139200">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647000000">- Update to version 1.2.8:
  + libnm-glib compatibility (NetworkManager &lt; 1.0) is disabled by
    default. It can be enabled by passing --with-libnm-glib to
    configure script. Nobody should need it by now. Users that
    still use this are encourage to let us know before the
    libnm-glib support is removed for good.
  + The auth helper in external UI mode can now be run without a
    display server. This is useful when activating connections with
    "nmcli --ask".
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1691064000">- Add nm-vpnc-editor-interface-name.patch: properties: Don't set
  interface name as empty string by default
  (glgo#GNOME/NetworkManager-vpnc/commit/f4df2db6c, bsc#1213769).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-vpnc
  to more accurately reflect its usage
- Add missing supplements:
  - NM and vpnc
  - NMA subpackage: main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1731672000">- Update to version 1.4.0:
  + Added support for configuring MTU.
  + Added support for more secure DH groups.
  + Added options to relax security for old insecure gateways.
  + Added support for Fortigate vendor-specific compatibility
    quirks.
  + Removed obsolete libm-glib support.
  + Updated translations.
- Drop nm-vpnc-editor-interface-name.patch: Fixed upstream.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1739016000">- Add nm-vpnc-undefined-symbol.patch: export nm_vpn_editor_factory_vpnc
  (glgo#GNOME/NetworkManager-vpnc!18, bsc#1233685).</changelog>
</package>
<package pkgid="525fb76b38faf20135f627a13c6847a64c93e75ba557b296fcea3ef27af657528e52d372a6aee79a9af72f6d3b037448cd6e1d550113f2b2619eaf7d824d4a2d" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="488ccf2583ea42df51c4cdbcd415e18e76eb428dde78923635976258a3d0c2b19cfa8ef639c68471eef2f83ada6afe573a9ecc0e6cb6605fb6eef98b06b596df" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="3a35155e8f2f8f6076aa2a9db9f9b0795412ccf0ac1ab2b0a39d7f083b586b2393badc27c700c8e43f6ac7127fb11bf6b847c769ec5341398a3a28617f626f62" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="e509340fb236dc07c1ce32cfe20f421b5381bd689498584974a70d55be67d9bb9212d5e3177bede11ad1fa0f3dcfafd906c05e8462f621240794bb364c45a716" name="NetworkManager-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp160.5.1"/>
  <changelog author="fezhang@suse.com" date="1504699200">- Add a SLE flavor.
- Clean up specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Apply %{branding_name} also to summary and description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec file by running spec-cleaner</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574769600">- Switch package to _multibuild.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593086400">- Fix summary variable expansion: use %rpm style instead of $shell
  style (boo#1172773).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593345600">- Also fix variable expansion in %description (boo#1172773).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1659009600">- Move conncheck config file out of /etc. No longer
  import main config file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1660305600">- Expliciltly BuildRequire NetworkManager-branding-upstream:
  branding-upstream is produced by NetworkManager and is guaranteed
  to be the same version. Breaks a self-cycle.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701432000">- Fix most rpmlint warnings:
  + suse-zypp-packageand: use current Supplements: (A and B) syntax
    over packagand(A:B)
  + summary-ended-with-dot: Remove dot at the end of Summary:
  + no-%build-section: Add empty %build section
  + branding-supplements-missing: Fixes as part of
    suse-zypp-packageand.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710417600">- Ensure flavor has a value, at least %nil.
- ExclusiveArch: %nil is invalid: give it a value (do-not-build).</changelog>
</package>
<package pkgid="f999b3e58be0abc7237e4be7ad2d568d1d696347443a511861c41c81e05dfc96d363fb3e07b69dcb70de23d820db959fec9bed9df6dd0690e17665bae82daa33" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="8793ec38d6cedc3156e0ca28a8953084bd6ef5a424c4a1adc319d5c2281c4c5eb21d7090d8dc9172298d789c4cb5f0f4098ee6eb907874848398b80bdaf328b9" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="77639a9af19b9fe690faaea120587760c36e04752f7ea2ecacd127e9b85632958f3176f7b22f5f2159a0c457c428c7d50c6721ad3fdd964d2fedbe113bd8950c" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="9bfb7dcb2b33712c67e7c4fb96ae74f1951f537e18dd79fda84f34ded76f89f30bb3016acddbef273bff3c277227c8d038502cfd7ba03c1d560ea6691a2be701" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="8af50f776d0048540ef9cfdd3cc0ed2370be95d0c2530862719efb92b984c52c30fb07f3d3a542d9c335d0c774918734c8223b96d89f298d8f629bfae46af88c" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="e8d59da4600db5f07451549fcd3e538f5435c7e7606b3db9abe76c199356e46f7577bbbfabad6514cbebe19bc61da5e03708e0cae44460e743ff8d28d3532151" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="01ecfce1962086f8059c7a9a1e43e846ded1bd2f60922b1d9f2dc953c421f5181a39e2d7569fe05760b2e00619b7c47f4fe300b243558dfbdafce3f379f07d35" name="NetworkManager-config-server" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="9acf51f3ecfe9e4c3f5d1a6aaa29ffcbc36f53384adc7e1fe0cc6c07717dff1ab82e464ac2750f7053b245fb05d484c426e92c7e3d0fd368f6806bb32441c1c7" name="NetworkManager-config-server" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="607754e17f1a9b544df0c49928b65a05031fe952bb6fb9ec40cf09a01ae7aa3964f077ce27ad4659e61652494720554ff3ee69f2be8073cf00f01ee999b4b98e" name="NetworkManager-config-server" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="52af63e5cb7f4d4ee7ecd13ae3cfaa48cb7c9d16f51943dcf2de0a7a748765f39d3d22a1782e22d4ac5b6f39077ee7ccaee2d065ef4d08afd1fd8afdd96e9152" name="NetworkManager-connection-editor" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="bp160.1.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1654689600">- Update to version 1.28.0:
  + Use correct font size for headings in order to make lives of
    HiDPI a little less miserable.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Update to version 1.30.0:
  + wifi: change description for wpa-psk to include also WPA3.
  + editor: remove unused fields from wifi page.
  + applet: replace libnotify with GNotification.
  + gschema: bring back org.gnome.nm-applet schema.
  + Updated translations.
- Drop pkgconfig(libnotify) BuildRequires: no longer needed.
- Rebase feature-app-indicator-desktop-file.patch.
- Conflict with libnma0 &lt; 1.10.4: the glib schema was upstream
  wrongly moved to libnma, even though only a part of it was
  supposed to be there. libnm 1.10.4 fixes this situation.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1670328000">- Add meson-0.61-build-fix.patch to fix the build on meson &gt;= 0.61
  (jsc#PED-2644, glgo#GNOME/network-manager-applet!107)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681646400">- Update to version 1.32.0:
  + Allow using MTU larger than 10000 octets.
  + Prefer using AppIndicator outside X11.
  + Added support for importing WireGuard profiles from wg-quick
    files.
  + Updated translations.
- Drop meson-0.61-build-fix.patch: fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696420800">- Update to version 1.34.0:
  + Fix crash when importing WireGuard connections.
  + Fix ineffective "Don't show message again" button in
    notifications.
  + Drop build dependency on gudev.
  + Add setting to suppress broadband unlock prompt.
  + Replace occurrences of "master", "slave" and "blacklist".
  + Updated translations.
- Drop long disabled polkit-devel BuildRequires, patch it was
  needed for is dropped.
- Drop pkgconfig(gudev-1.0) BuildRequires: No longer needed
  following upstream changes.
- Rebase feature-app-indicator-desktop-file.patch with quilt.
- Pass sysconfdir=%{_distconfdir} to meson setup, move to UsrEtc.
- Pass b_lto=true to meson setup, use link time optimization.
- Add fdupes BuildRequires and macro, remove duplicate files.
- Move translations to NetworkManager-connection-editor-lang,
  replace the NetworkManager-connection-editor Recommends with a
  hard Requires. Also add Obsoletes and Provides to ease updates.
  The reason for moving the translations are as follows: One can
  install NetworkManager-connection-editor without needing
  NetworkManager-applet, so in order to make the translations for
  NetworkManager-connection-editor installable without pulling the
  dependencies of NetworkManager-applet.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1697630400">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705665600">- Update to version 1.36.0:
  + Support WiFi's cloned-mac "stable-ssid".
  + Update translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715947200">- Swicth to ayatana-appindicator: Replace
  pkgconfig(appindicator3-0.1) BuildRequires with
  pkgconfig(ayatana-appindicator3-0.1). The legacy appindicator has
  been unmaintained for a while already.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1732104000">- Make pkgconfig(ayatana-appindicator3-0.1) BuildRequires
  conditional for ppc64le, as it is not available there.</changelog>
</package>
<package pkgid="56c2295b7e6d5036e896cdcbcbfdf0b85cc95d259ed8a7b8b76fb6df70716bf2c44b370abc1d8e52a66e0a06c5f71542fb72be568a3f82d5fe9a415a62f0c3f7" name="NetworkManager-connection-editor-lang" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="bp160.1.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1654689600">- Update to version 1.28.0:
  + Use correct font size for headings in order to make lives of
    HiDPI a little less miserable.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1667908800">- Update to version 1.30.0:
  + wifi: change description for wpa-psk to include also WPA3.
  + editor: remove unused fields from wifi page.
  + applet: replace libnotify with GNotification.
  + gschema: bring back org.gnome.nm-applet schema.
  + Updated translations.
- Drop pkgconfig(libnotify) BuildRequires: no longer needed.
- Rebase feature-app-indicator-desktop-file.patch.
- Conflict with libnma0 &lt; 1.10.4: the glib schema was upstream
  wrongly moved to libnma, even though only a part of it was
  supposed to be there. libnm 1.10.4 fixes this situation.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1670328000">- Add meson-0.61-build-fix.patch to fix the build on meson &gt;= 0.61
  (jsc#PED-2644, glgo#GNOME/network-manager-applet!107)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681646400">- Update to version 1.32.0:
  + Allow using MTU larger than 10000 octets.
  + Prefer using AppIndicator outside X11.
  + Added support for importing WireGuard profiles from wg-quick
    files.
  + Updated translations.
- Drop meson-0.61-build-fix.patch: fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696420800">- Update to version 1.34.0:
  + Fix crash when importing WireGuard connections.
  + Fix ineffective "Don't show message again" button in
    notifications.
  + Drop build dependency on gudev.
  + Add setting to suppress broadband unlock prompt.
  + Replace occurrences of "master", "slave" and "blacklist".
  + Updated translations.
- Drop long disabled polkit-devel BuildRequires, patch it was
  needed for is dropped.
- Drop pkgconfig(gudev-1.0) BuildRequires: No longer needed
  following upstream changes.
- Rebase feature-app-indicator-desktop-file.patch with quilt.
- Pass sysconfdir=%{_distconfdir} to meson setup, move to UsrEtc.
- Pass b_lto=true to meson setup, use link time optimization.
- Add fdupes BuildRequires and macro, remove duplicate files.
- Move translations to NetworkManager-connection-editor-lang,
  replace the NetworkManager-connection-editor Recommends with a
  hard Requires. Also add Obsoletes and Provides to ease updates.
  The reason for moving the translations are as follows: One can
  install NetworkManager-connection-editor without needing
  NetworkManager-applet, so in order to make the translations for
  NetworkManager-connection-editor installable without pulling the
  dependencies of NetworkManager-applet.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1697630400">- Support build environments like SLE 15 SP5 and Leap 15.5 which
  had %{_distconfdir) not defined yet.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705665600">- Update to version 1.36.0:
  + Support WiFi's cloned-mac "stable-ssid".
  + Update translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715947200">- Swicth to ayatana-appindicator: Replace
  pkgconfig(appindicator3-0.1) BuildRequires with
  pkgconfig(ayatana-appindicator3-0.1). The legacy appindicator has
  been unmaintained for a while already.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1732104000">- Make pkgconfig(ayatana-appindicator3-0.1) BuildRequires
  conditional for ppc64le, as it is not available there.</changelog>
</package>
<package pkgid="37a236e4bdb79f735afd0cfab6a8f2f40c361edf873f538fdf2f4ceccdd55785b3dd2331542af4d9b8171cf26c2955ead1bf1424032953f8a35a38358e07a7ad" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="89774e94106e3a2a6b1490ccda828640ca46cdb45442028c35c345969566b23b149df659cfa5fda42bc84fce6355d9b82f0d01af7ee2bff18970978824b4dc25" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="cd490eea39b05ca61f9198cd36e6cc5834c3a75d446203b69bd0e9471aa443932475bd68f35d52fcf75c16fca53055c7be4d64e8f16128d1e81946b5f37b2fc8" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="bc8efe4a6027a859586f6106c3d0c7c4d1c1f4fed30e465b0dc8d3d0abe1db113eb156280b1a49267a4cd6736c9360711205fd1c5da87d0b59552080189ba96e" name="NetworkManager-dns-bind" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.10"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1664971200">- Initial: NetworkManager dispatcher script for DNS bind configuration</changelog>
</package>
<package pkgid="5717592b37e6dd1fe84369dbb3020f707407fc3a393a625495169b6c016290594959b44aed6913e2ffd93b1527b966bce75e3ce5e54c220ff551980e435809b3" name="NetworkManager-dns-dnsmasq" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.7"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1664971200">- Initial: NetworkManager dispatcher script for DNS dnsmasq configuration.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1737460800">- Require dnsmasq and sysconfig: the script explicitly targets
  integration between NetworkManager and dnsmasq, so it makes sense
  to require both components. Additionally, sysconfig is used to
  detect if the configuration is done properly for this
  (boo#1236047).</changelog>
</package>
<package pkgid="da7f4902e172b515d18cc68d9f869f59a7459d9abed985f497ff695f12e8e347c786c16baf0ca1c45bb6c176512cb8b7e202cf9509ec4ae642cac990e0a4b370" name="NetworkManager-fortisslvpn" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553342400">- Write style: do summaries without em dashes, and do descriptions
  without double prepositions ("with X with Y").</changelog>
  <changelog author="cges30901@gmail.com" date="1572177600">- Add openfortivpn to Requires</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585224000">- Add NetworkManager-fortisslvpn-fix-incompat-openfortivpn.patch:
  Fix incompatibility with openfortivpn &gt;= 1.11.0 (boo#1167694,
  glgo#GNOME/NetworkManager-fortisslvpn!13).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597320000">- Require the same version ppp at runtime as we had during build
  time. We got away with the missing Requires as NM itself requires
  ppp, so 'a version' was always installed at least. But we need to
  guarantee the version at runtime matches the one we built against
  (boo#1175106).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.4.0:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Add support for interactive connect (e.g. OTP via SMS).
  + Drop privileges in pppd if "nm-fortisslvpn" user exists.
  + Allow more than 100 routes.
  + Updated translations.
- Drop NetworkManager-fortisslvpn-fix-incompat-openfortivpn.patch:
  fixed upstream.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207585)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-fortisslvpn
  to more accurately reflect its usage
- Add missing requires: NetworkManager
- Add missing supplements:
  - NM and openfortivpn
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1703246400">- Add 084ef529.patch: Add support for compiling against pppd-2.5.0.
- Add libtool BuildRequires and call autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="0a89d71da8fcfee73512832dfdfa99eedbded7f50336f036b659636afce27f48f4be74230cbb638adb5cf7c969bd6642512a822308b9d7404c5df580d8ab560c" name="NetworkManager-fortisslvpn-lang" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553342400">- Write style: do summaries without em dashes, and do descriptions
  without double prepositions ("with X with Y").</changelog>
  <changelog author="cges30901@gmail.com" date="1572177600">- Add openfortivpn to Requires</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585224000">- Add NetworkManager-fortisslvpn-fix-incompat-openfortivpn.patch:
  Fix incompatibility with openfortivpn &gt;= 1.11.0 (boo#1167694,
  glgo#GNOME/NetworkManager-fortisslvpn!13).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597320000">- Require the same version ppp at runtime as we had during build
  time. We got away with the missing Requires as NM itself requires
  ppp, so 'a version' was always installed at least. But we need to
  guarantee the version at runtime matches the one we built against
  (boo#1175106).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.4.0:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Add support for interactive connect (e.g. OTP via SMS).
  + Drop privileges in pppd if "nm-fortisslvpn" user exists.
  + Allow more than 100 routes.
  + Updated translations.
- Drop NetworkManager-fortisslvpn-fix-incompat-openfortivpn.patch:
  fixed upstream.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1674734400">- Move dbus-1 system.d file to /usr (bsc#1207585)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-fortisslvpn
  to more accurately reflect its usage
- Add missing requires: NetworkManager
- Add missing supplements:
  - NM and openfortivpn
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1703246400">- Add 084ef529.patch: Add support for compiling against pppd-2.5.0.
- Add libtool BuildRequires and call autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="98445f2e9cb669bef543ea78405e58a80a4e1989df2319666ba145d6384ba040e57e4696f6043e8409551a7915dd2f53b7b68a58b7880f0f379f25b8c2e77123" name="NetworkManager-iodine" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.0:
  + Add appdata file.
  + build: don't include the full path to a plugin by default.
- Changes from version 1.1.0:
  + Port to libnm.
  + Updated translations.
- Add pkgconfig(libnm), pkgconfig(libnma), pkgconfig(libnm-util),
  pkgconfig(libnm-glib) and pkgconfig(libnm-glib-vpn)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523707200">- Following changes in NetworkManager: pass without-libnm-glib to
  configure, no longer build deprecated libnm-glib support.
- Following the above changes: Drop no longer needed
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn), pkgconfig(libnm-gtk) and
  pkgconfig(libnm-util) BuildRequires.
- Drop unnneeded NetworkManager-gnome Requires from gnome
  sub-package, it is not longer of use for us.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1645272000">- Create nm-iodine user (by systemd-sysusers)
- Update Supplements to new format</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1672228800">- Move dbus-1 system.d conf file to /usr (bsc#1206756)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1701432000">- Rename gnome subpackage to NetworkManager-applet-iodine
  to more accurately reflect its usage
- Change supplements:
  - NMA subpackage: only supplement if main package is installed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707998400">- Add NetworkManager-iodine-pkgconf-2.1.0.patch: Fix
  build/installation when using pkgconf 2.1 as pkg-config
  implementation: configure wrongly called
  "pkg-config pkg-config --parameters", which now leads nowhere.
- Add libtool BuildRequires and call autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="ffba07cb28f4f3e01e9cdd4665508c4510cbcd73f7f0c26044872afa29597f9a1f7079bb0912f4dd1325b898e5e47f9408d90a307a36d75454d9a6221fe83b0f" name="NetworkManager-iodine-lang" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.0:
  + Add appdata file.
  + build: don't include the full path to a plugin by default.
- Changes from version 1.1.0:
  + Port to libnm.
  + Updated translations.
- Add pkgconfig(libnm), pkgconfig(libnma), pkgconfig(libnm-util),
  pkgconfig(libnm-glib) and pkgconfig(libnm-glib-vpn)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523707200">- Following changes in NetworkManager: pass without-libnm-glib to
  configure, no longer build deprecated libnm-glib support.
- Following the above changes: Drop no longer needed
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn), pkgconfig(libnm-gtk) and
  pkgconfig(libnm-util) BuildRequires.
- Drop unnneeded NetworkManager-gnome Requires from gnome
  sub-package, it is not longer of use for us.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1645272000">- Create nm-iodine user (by systemd-sysusers)
- Update Supplements to new format</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1672228800">- Move dbus-1 system.d conf file to /usr (bsc#1206756)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1701432000">- Rename gnome subpackage to NetworkManager-applet-iodine
  to more accurately reflect its usage
- Change supplements:
  - NMA subpackage: only supplement if main package is installed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707998400">- Add NetworkManager-iodine-pkgconf-2.1.0.patch: Fix
  build/installation when using pkgconf 2.1 as pkg-config
  implementation: configure wrongly called
  "pkg-config pkg-config --parameters", which now leads nowhere.
- Add libtool BuildRequires and call autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="082dd50b4d5d775ac86caebf5035e902db1bb84f788f3f28fe46326b67b415ac179896631e8b14165082afa2de900b3406a752f6d21a00c726163181faac8054" name="NetworkManager-l2tp" arch="x86_64">
  <version epoch="0" ver="1.20.10" rel="bp160.1.54"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="doug@uq.edu.au" date="1613217600">- Update to version 1.8.6:
  + Fix for make check warning that prevented RPMs from being
    built.
- Changes from version 1.8.2:
  + Update strings for new dialog design in gnome-shell.
    e.g use "Password" instead of "Password:".
  + Use /usr/share/metainfo for AppData files.
  + Move D-Bus policy file to /usr/share/dbus-1/system.d/.
  + Add --with-nm-ipsec-nss-dir configure switch for Libreswan NSS
    database location with default value of /var/lib/ipsec/nss.
  + Do not add broken route to VPN gateway IP address.
  + Add back import/export capability.
  + Fix for user certificate password flags for connection editor.
  + Fixes for user certificate support.
  + Provide --enable-libreswan-dh2 configure switch for older
    versions of Libreswan or those built with USE_DH2.
  + KDE plasma-nm compatibility for "Gateway ID".
  + Updated translations.
- Update default PPPD_PLUGIN_DIR to %{_libdir}/pppd/2.4.8.
- Use --enable-libreswan-dh2 configure switch.
- D-Bus policy file location is now /usr/share/dbus-1/system.d.
- AppData file location is now /usr/share/metainfo.</changelog>
  <changelog author="doug@uq.edu.au" date="1634126400">- Update to version 1.20.0:
  + Support for kl2tpd from Katalix's go-l2tp project added.
  + Support for Multilink PPP added.
  + L2TP ephemeral source port checkbox added.
  + Honors $CHARONDEBUG and $PLUTODEBUG even without --debug
  + intltool for i18n builds no longer required.
  + deprecated libnm-glib/libnm-util code removed.
  + Updated translations.
- Update dependencies for NetworkManager &gt;= 1.20.0
- Remove redundant intltool build dependency.
- Replace recommends strongswan with (strongswan or libreswan)</changelog>
  <changelog author="doug@uq.edu.au" date="1650888000">- Update to version 1.20.2:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="doug@uq.edu.au" date="1668340800">- Update to version 1.20.6:
  + Fix for Libreswan 4.9 and later detection.
  + Fix for ipsec-psk-flags setting not being saved.
  + Add getenv NM_L2TP_XL2TPD_MAX_RETRIES to allow setting the
    xl2tpd max retries value.
  + Increase IPsec and L2TP daemon wait timeouts for potentially
    better debugging.
  + Updated translations.
- Changes from version 1.20.4:
  + Security fix - properly detect that strongswan CHILD_SA
    connection has been established.
  + Fix for libreswan "cannot route template policy" error.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672833600">- Update to version 1.20.8:
  + Fix padding of PPP Options dialog.
  + Undo PTP peer &amp; ext GW routing prevention workaround first
    introduced with NetworkManager-l2tp 1.8.4 as workaround no
    longer works with NetworkManager 1.36. The actual fix should
    be done in NetworkManager.
  + Add support for Manual IPv4 configuration options: Address,
    Netmask and Gateway.
  + Remove deprecated OpenSSL 3 related code.
  + Load L2TP kernel modules if NM_L2TP_MODPROBE env variable set.</changelog>
  <changelog author="Bj&#xF8;rn &lt;bjorn.lie@gmail.com&gt;" date="1697025600">- Update to version 1.20.10:
  + Fix missing ppp user option.
  + Add support for compiling against pppd-2.5.0, including
    pkgconfig support to pickup the pppd plugin directory.
  + Add error output for missing TLS filenames.
  + Remove bashisms in configure script.
  + Spell checked code with CSpell.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-l2tp
  to more accurately reflect its usage
- Add missing supplements:
  - NM and xl2tpd
  - NMA subpackage: Main package and NMA
- Configure runstatedir to %_rundir</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="88f2ef8089fedee32ada12dc5cdc198c0ae5aa418d25969abeb48ced69b175157167a19a95e9a6bed0eac2274156c19c5a962467b8732d0f58f92943569c75b7" name="NetworkManager-l2tp-lang" arch="noarch">
  <version epoch="0" ver="1.20.10" rel="bp160.1.54"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="doug@uq.edu.au" date="1613217600">- Update to version 1.8.6:
  + Fix for make check warning that prevented RPMs from being
    built.
- Changes from version 1.8.2:
  + Update strings for new dialog design in gnome-shell.
    e.g use "Password" instead of "Password:".
  + Use /usr/share/metainfo for AppData files.
  + Move D-Bus policy file to /usr/share/dbus-1/system.d/.
  + Add --with-nm-ipsec-nss-dir configure switch for Libreswan NSS
    database location with default value of /var/lib/ipsec/nss.
  + Do not add broken route to VPN gateway IP address.
  + Add back import/export capability.
  + Fix for user certificate password flags for connection editor.
  + Fixes for user certificate support.
  + Provide --enable-libreswan-dh2 configure switch for older
    versions of Libreswan or those built with USE_DH2.
  + KDE plasma-nm compatibility for "Gateway ID".
  + Updated translations.
- Update default PPPD_PLUGIN_DIR to %{_libdir}/pppd/2.4.8.
- Use --enable-libreswan-dh2 configure switch.
- D-Bus policy file location is now /usr/share/dbus-1/system.d.
- AppData file location is now /usr/share/metainfo.</changelog>
  <changelog author="doug@uq.edu.au" date="1634126400">- Update to version 1.20.0:
  + Support for kl2tpd from Katalix's go-l2tp project added.
  + Support for Multilink PPP added.
  + L2TP ephemeral source port checkbox added.
  + Honors $CHARONDEBUG and $PLUTODEBUG even without --debug
  + intltool for i18n builds no longer required.
  + deprecated libnm-glib/libnm-util code removed.
  + Updated translations.
- Update dependencies for NetworkManager &gt;= 1.20.0
- Remove redundant intltool build dependency.
- Replace recommends strongswan with (strongswan or libreswan)</changelog>
  <changelog author="doug@uq.edu.au" date="1650888000">- Update to version 1.20.2:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="doug@uq.edu.au" date="1668340800">- Update to version 1.20.6:
  + Fix for Libreswan 4.9 and later detection.
  + Fix for ipsec-psk-flags setting not being saved.
  + Add getenv NM_L2TP_XL2TPD_MAX_RETRIES to allow setting the
    xl2tpd max retries value.
  + Increase IPsec and L2TP daemon wait timeouts for potentially
    better debugging.
  + Updated translations.
- Changes from version 1.20.4:
  + Security fix - properly detect that strongswan CHILD_SA
    connection has been established.
  + Fix for libreswan "cannot route template policy" error.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672833600">- Update to version 1.20.8:
  + Fix padding of PPP Options dialog.
  + Undo PTP peer &amp; ext GW routing prevention workaround first
    introduced with NetworkManager-l2tp 1.8.4 as workaround no
    longer works with NetworkManager 1.36. The actual fix should
    be done in NetworkManager.
  + Add support for Manual IPv4 configuration options: Address,
    Netmask and Gateway.
  + Remove deprecated OpenSSL 3 related code.
  + Load L2TP kernel modules if NM_L2TP_MODPROBE env variable set.</changelog>
  <changelog author="Bj&#xF8;rn &lt;bjorn.lie@gmail.com&gt;" date="1697025600">- Update to version 1.20.10:
  + Fix missing ppp user option.
  + Add support for compiling against pppd-2.5.0, including
    pkgconfig support to pickup the pppd plugin directory.
  + Add error output for missing TLS filenames.
  + Remove bashisms in configure script.
  + Spell checked code with CSpell.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-l2tp
  to more accurately reflect its usage
- Add missing supplements:
  - NM and xl2tpd
  - NMA subpackage: Main package and NMA
- Configure runstatedir to %_rundir</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="39a27d15e1130382a9b4961d6db28394bf64871d6e27a15b6ed4944594b2d34d792708f71978137b4c3307e61733f4f55132a9090cc79d1a80a82c781b7bcfc5" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="74afc5468a5a4b92382c311650af434f69e54935b09e6f437dd92ba9a1296f06b93847f6654b36a4f1e7bf982f456b223f017006f751d9d14b4b640b77980a90" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="7afe6ce627f2007c27d203dc886678b7caefb8938eeb9e63e3d50a8ce952a0bd323fec91c30a7690e72b903b6f1491e267b8b7991c12c4b22663917123e678d1" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="06a84dce977b9b94bd5dbc890dc9bbfc28e256e60f060aaf7d1c82cd43b92c95759722c59e76dc14349a04d695543adde20ae28f733d92b03ba33ed97aaa63f6" name="NetworkManager-libreswan" arch="x86_64">
  <version epoch="0" ver="1.2.24" rel="bp160.1.7"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610452800">- Update to version 1.2.14:
  + Support Libreswan 4, which changed the name of some
    configuration parameters. Now the plugin can detect the
    Libreswan version and use the appropriate parameter names.
  + The auth helper in external UI mode can now be run without a
    display server. Future nmcli version will utilize this for
    handling the secrets without a graphical desktop.
  + Update strings for new dialog design in gnome-shell.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.16:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1672228800">- Move dbus-1 system.d conf file to /usr (bsc#1206757)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-libreswan
  to more accurately reflect its usage
- Add missing requires: NetworkManager
- Add missing supplements:
  - NM and /usr/sbin/ipsec
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1713441600">- Update to version 1.2.20:
  + Support setting "leftmodecfgclient" to "no"
  + Support for the "type", "hostaddrfamily" and
    "clientaddrfamily", "leftsubnet" and "rightcert" parameters.
- Changes from version 1.2.18:
  + Drop libnm-glib compatibility (NetworkManager &lt; 1.0).
  + Add support for the "authby", "dpdaction", "dpddelay",
    "dpdtimeout", "ipsec-interface" parameters.
  * Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716379200">- Update to version 1.2.22:
  + Add IPv6 support.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1729598400">- Update to version 1.2.24:
  + Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050).
  + Added support for "require-id-on-certificate" setting.
  + Updated translations.</changelog>
</package>
<package pkgid="ab9f6edc548e6ceacdde4b7512ac4d5b9f6236b801c033558454cff8ce0462dd0a1881276c9155b38af24da66fed9a0dbc642d816e15169bcbb972cb99084abb" name="NetworkManager-libreswan-lang" arch="noarch">
  <version epoch="0" ver="1.2.24" rel="bp160.1.7"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610452800">- Update to version 1.2.14:
  + Support Libreswan 4, which changed the name of some
    configuration parameters. Now the plugin can detect the
    Libreswan version and use the appropriate parameter names.
  + The auth helper in external UI mode can now be run without a
    display server. Future nmcli version will utilize this for
    handling the secrets without a graphical desktop.
  + Update strings for new dialog design in gnome-shell.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.16:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1672228800">- Move dbus-1 system.d conf file to /usr (bsc#1206757)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-libreswan
  to more accurately reflect its usage
- Add missing requires: NetworkManager
- Add missing supplements:
  - NM and /usr/sbin/ipsec
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1713441600">- Update to version 1.2.20:
  + Support setting "leftmodecfgclient" to "no"
  + Support for the "type", "hostaddrfamily" and
    "clientaddrfamily", "leftsubnet" and "rightcert" parameters.
- Changes from version 1.2.18:
  + Drop libnm-glib compatibility (NetworkManager &lt; 1.0).
  + Add support for the "authby", "dpdaction", "dpddelay",
    "dpdtimeout", "ipsec-interface" parameters.
  * Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716379200">- Update to version 1.2.22:
  + Add IPv6 support.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1729598400">- Update to version 1.2.24:
  + Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050).
  + Added support for "require-id-on-certificate" setting.
  + Updated translations.</changelog>
</package>
<package pkgid="0c2f3ec68d35019dc5a89a4b01214848882886b09a7ed2a7636305aed5baabd9aa42ee338335c4d47176d54e5350cb08e47fcf5b23ce2ee4c122716815823b6d" name="NetworkManager-openconnect" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="bp160.1.16"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.8:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Fix SNI and authgroup problems.
  + Handle IPv6 nameservers.
  + Allow IP prefixes of 0 for routing rules.
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Add dbus-location.patch: move dbus system.d conf file to /usr
  (bsc#1204795)
- Due to patching: add BRs autoconf, automake and libtool</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1684324800">- Update to version 1.2.10:
  + Improved cancellation handling.
  + Support SAML/SSO authentication for some VPN protocols.
  + Allow useragent override.
  + Support webkit2gtk-4.1.
  + Allow choosing certificates/keys from PKCS#11 tokens.
  + Allow custom interface name.
  + Allow UDP connectivity to be disabled.
  + Support multi-certificate authentication for AnyConnect.
  + Fix hangs with external browsers which spam stdout.
  + Updated translations.
- Drop dbus-location.patch: Fixed upstream.
- Add pkgconfig(webkit2gtk-4.1) BuildRequires: New dependency.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-openconnect
  to more accurately reflect its usage
- Add missing supplements:
  - NM and openconnect
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="4116024d665c13a2c45e1e31c2cf65f8c483f2cc508541ffe817f62d0fe00628775c328884c845ea4feee9cf3a5174c1f20c70d2682241736bb9b97256ebbff2" name="NetworkManager-openconnect-lang" arch="noarch">
  <version epoch="0" ver="1.2.10" rel="bp160.1.16"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.8:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Fix SNI and authgroup problems.
  + Handle IPv6 nameservers.
  + Allow IP prefixes of 0 for routing rules.
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Add dbus-location.patch: move dbus system.d conf file to /usr
  (bsc#1204795)
- Due to patching: add BRs autoconf, automake and libtool</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1684324800">- Update to version 1.2.10:
  + Improved cancellation handling.
  + Support SAML/SSO authentication for some VPN protocols.
  + Allow useragent override.
  + Support webkit2gtk-4.1.
  + Allow choosing certificates/keys from PKCS#11 tokens.
  + Allow custom interface name.
  + Allow UDP connectivity to be disabled.
  + Support multi-certificate authentication for AnyConnect.
  + Fix hangs with external browsers which spam stdout.
  + Updated translations.
- Drop dbus-location.patch: Fixed upstream.
- Add pkgconfig(webkit2gtk-4.1) BuildRequires: New dependency.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-openconnect
  to more accurately reflect its usage
- Add missing supplements:
  - NM and openconnect
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="9bec559dd6ff4f8426d130d1c4070886cda70a38defe76976ac43c9f11c85ead32d0c178ac2495d2a6a86b29df787d03afacff9db2d2ea2295eec7b1439b79c2" name="NetworkManager-openvpn" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632916800">- Update to version 1.8.16:
  + Fix detection of OpenVPN 2.5.0
  + Allow the connection to persist across network failures when
    the VPN profile has 'vpn.persistent=yes'
  + Fix parsing of incomplete IPv6 configurations pushed by server
  + Improve logging message about deprecated tls-remote option
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 1.8.18:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Drop nm-openvpn-bsc#1186091.patch: Fixed upstream.
- Rebase patch with quilt.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661774400">- Update to version 1.10.0:
  + Add support for "allow-compression" parameter.
  + Fix a regression in preserving the "tls-auth" settings.
  + Add support for "tls-min" and "tls-cipher" parameters.
  + Include the new gnome-control-center name in the AppData file.
  + Drop libnm-glib support, nobody is likely using it anymore.
  + Fix importing profiles with a PKCS#12 CA.
  + Make sure the plugin object links with glib.
  + Dropped dependency on intltool.
  + Updated translations.
- Drop intltool BuildRequires following upstream changes.
- Rebase patch with quilt.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668772800">- Update to version 1.10.2:
  + IP condfiguration is no longer required in TAP mode.
  + Fix initialization of secret flags.
  + Add support for DOMAIN-SEARCH option.
  + Set data-ciphers option with chosen cipher.
  + Update translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1694174400">- Add nm-openvpn-fix-importing-pkcs12-ca.patch: import: fix
  importing profiles with PKCS#12 CA
  (glgo#GNOME/NetworkManager-openvpn!50, bsc#1214415).
- Drop nm-openvpn-fix-importing-pkcs12-ca.patch: fixed upstream.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-openvpn
  to more accurately reflect its usage
- Add missing supplements:
  - NM and openvpn
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="songchuan.kang@suse.com" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="dimstar@opensuse.org" date="1719230400">- Update to version 1.12.0:
  + Adapt to the new way of handling the 2FA secret by the daemon,
    needed by it to fix a bug with certain clients.
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1741089600">- Add nm-openvpn-fix-crash.patch: service: fix a crash when empty
  password is provided (glgo#GNOME/NetworkManager-openvpn!92,
  bsc#1237570).</changelog>
</package>
<package pkgid="842dffa8dce60153e17197b50f31a6729ffd373c2459973ec134a783c698922bfc8b5ba8ede0aae69320e690eb7345af13ce495ef176ef936891d94cbaf2b296" name="NetworkManager-openvpn-lang" arch="noarch">
  <version epoch="0" ver="1.12.0" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632916800">- Update to version 1.8.16:
  + Fix detection of OpenVPN 2.5.0
  + Allow the connection to persist across network failures when
    the VPN profile has 'vpn.persistent=yes'
  + Fix parsing of incomplete IPv6 configurations pushed by server
  + Improve logging message about deprecated tls-remote option
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 1.8.18:
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Drop nm-openvpn-bsc#1186091.patch: Fixed upstream.
- Rebase patch with quilt.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Pass --enable-lto=yes to configure, build using LTO support.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661774400">- Update to version 1.10.0:
  + Add support for "allow-compression" parameter.
  + Fix a regression in preserving the "tls-auth" settings.
  + Add support for "tls-min" and "tls-cipher" parameters.
  + Include the new gnome-control-center name in the AppData file.
  + Drop libnm-glib support, nobody is likely using it anymore.
  + Fix importing profiles with a PKCS#12 CA.
  + Make sure the plugin object links with glib.
  + Dropped dependency on intltool.
  + Updated translations.
- Drop intltool BuildRequires following upstream changes.
- Rebase patch with quilt.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668772800">- Update to version 1.10.2:
  + IP condfiguration is no longer required in TAP mode.
  + Fix initialization of secret flags.
  + Add support for DOMAIN-SEARCH option.
  + Set data-ciphers option with chosen cipher.
  + Update translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1694174400">- Add nm-openvpn-fix-importing-pkcs12-ca.patch: import: fix
  importing profiles with PKCS#12 CA
  (glgo#GNOME/NetworkManager-openvpn!50, bsc#1214415).
- Drop nm-openvpn-fix-importing-pkcs12-ca.patch: fixed upstream.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-openvpn
  to more accurately reflect its usage
- Add missing supplements:
  - NM and openvpn
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="songchuan.kang@suse.com" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="dimstar@opensuse.org" date="1719230400">- Update to version 1.12.0:
  + Adapt to the new way of handling the 2FA secret by the daemon,
    needed by it to fix a bug with certain clients.
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1741089600">- Add nm-openvpn-fix-crash.patch: service: fix a crash when empty
  password is provided (glgo#GNOME/NetworkManager-openvpn!92,
  bsc#1237570).</changelog>
</package>
<package pkgid="5725e45dde8c081ea9d1a30f9ba1d780286531c767f291b3bb3a2282c23964c785443a6411bed57ff768945160ade08cd781d6e176f0781aedfcb266d911e17f" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="0f4d6a8bdf65f7418b7da368bd37931ddc4a2931d5fd7a377e0934a25a97a35fe829be12c2801494825e7fe77702f19616ba722e1bb0f2a114f30971e2a9c862" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="80e9ffd789772ead081c4817954ff3d324c444e9f7dba269ddbf6a41b6a2f0f0426d370bcac99f896254e4abe16556e967552c6e382f50f2b20b2bb421a2c128" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="79ad8ba21e5016ed7da8de738e772eefff468df206165cf06443a0c5d6f3608b6e06e9d4435f691fcf16244d7076b3d5edad01e1902799ec6cbc8cc5f1c9404c" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="892ff6a6315b915c7fe9b0ed6f6c0c0686ef40715f6480868c55af2fb5ff41824fc99ee35ecf04ac0190f0e162a277df19ef5bb8c8b60d40b2698c2566d20d28" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="2cc113a875637425dff4af52693751a8264bc133bb2ce7226e1c3e1bb8ec1a3573f2b4518b3a55e5ca6741071c56a8d3e25ed2d5e58e15c0d6e9955417c3941f" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="219f186d9b748839de3ab75298ea3ecb691a9669401f36023945e689dffc3b82197083a861c5b60ad5f154100334eb355da2b5f9432d1ac8bd474d977ffebf42" name="NetworkManager-pptp" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.2.6:
  + Fix passing "user" and set "remotename" (bgo#794695)
  + Use gresources for UI file
  + Updated translations.
- Update URL tag to https://wiki.gnome.org/Projects/NetworkManager:
  currently the Network Manager project's web page.
- Drop icon_theme_cache_* post/postun scriptlets: its fucntionality
  has been moved to RPM file triggers (4.13, suse_version 1330).
- Add gio-2.0, gio-unix-2.0 and glib-2.0 pkgconfig modules
  BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523707200">- Following changes in NetworkManager: pass without-libnm-glib to
  configure, no longer build deprecated libnm-glib support.
- Following the above changes: Drop no longer needed
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn), pkgconfig(libnm-gtk) and
  pkgconfig(libnm-util) BuildRequires.
- Package missing COPYING file.
- Package m-pptp-service.conf as config, silence rpmlint.
- Drop unnneeded NetworkManager-gnome Requires from gnome
  sub-package, it is not longer of use for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538654400">- Update to version 1.2.8:
  + Fix build without GTK/Gnome.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.10:
  + libnm-glib compatibility (NetworkManager &lt; 1.0) is disabled by
    default.
  + It can be enabled by passing --with-libnm-glib to configure
    script. Nobody should need it by now. Users that still use this
    are encourage to let us know before the libnm-glib support is
    removed for good.
  + The auth helper in external UI mode can now be run without a
    display server. This is useful when activating connections with
    "nmcli --ask".
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678363200">- Update to version 1.2.12:
  + Dropped the libnm-glib support (obsolete since 2014).
  + Add support for building with upcoming pppd version (2.5.0).
  + Improvement to the build &amp; test system.
  + Updated translations.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-pptp
  to more accurately reflect its usage
- Add missing supplements:
  - NM and pptp
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="a6a7987d0902d99afc67b934cb7fbbc920833b02beddb57198cc7dcb5a7ed1703a108d0957dc1d204049ffe2812d0c97e7f045f540898901a3a6845d96019bc5" name="NetworkManager-pptp-lang" arch="noarch">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.2.6:
  + Fix passing "user" and set "remotename" (bgo#794695)
  + Use gresources for UI file
  + Updated translations.
- Update URL tag to https://wiki.gnome.org/Projects/NetworkManager:
  currently the Network Manager project's web page.
- Drop icon_theme_cache_* post/postun scriptlets: its fucntionality
  has been moved to RPM file triggers (4.13, suse_version 1330).
- Add gio-2.0, gio-unix-2.0 and glib-2.0 pkgconfig modules
  BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523707200">- Following changes in NetworkManager: pass without-libnm-glib to
  configure, no longer build deprecated libnm-glib support.
- Following the above changes: Drop no longer needed
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn), pkgconfig(libnm-gtk) and
  pkgconfig(libnm-util) BuildRequires.
- Package missing COPYING file.
- Package m-pptp-service.conf as config, silence rpmlint.
- Drop unnneeded NetworkManager-gnome Requires from gnome
  sub-package, it is not longer of use for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538654400">- Update to version 1.2.8:
  + Fix build without GTK/Gnome.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.2.10:
  + libnm-glib compatibility (NetworkManager &lt; 1.0) is disabled by
    default.
  + It can be enabled by passing --with-libnm-glib to configure
    script. Nobody should need it by now. Users that still use this
    are encourage to let us know before the libnm-glib support is
    removed for good.
  + The auth helper in external UI mode can now be run without a
    display server. This is useful when activating connections with
    "nmcli --ask".
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678363200">- Update to version 1.2.12:
  + Dropped the libnm-glib support (obsolete since 2014).
  + Add support for building with upcoming pppd version (2.5.0).
  + Improvement to the build &amp; test system.
  + Updated translations.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-pptp
  to more accurately reflect its usage
- Add missing supplements:
  - NM and pptp
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="ee36ba10abffc133404f22e37671a1d5f4a55fd65df8d2d4d9645fa6458749bcd1401312659b2a18aca2a0736be647067365d066d62d8e76b95d226b44cfd409" name="NetworkManager-strongswan" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp160.1.13"/>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added NetworkManager-strongswan.keyring, which contains the key
  from the author.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528718400">- Fix packaging error in previous sub, README was moved from
  source1 tag to source3, move to tag source99 to avoid similar
  error in the future.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Update to version 1.4.5:
  + Enables the IPv6 tab in the connection dialog.
- Use modern macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).
- Pass --with-nm-libexecdir=%{_libexecdir} to configure to behave
  the same as all the other NM-VPN plugins. This results in
  nm-strongswan-auth-dialog moving from
  %{_libexecdir}/NetworkManager to %{_libexecdir}, but considering
  all the other auth-dialog helpers are there as well it is
  perfectly welcome.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1588593600">- Update to version 1.5.0:
  + EAP-TLS authentication
  + Certificate source (file, agent, smartcard) is selectable
    independently
  + Add support to configure local and remote identities
  + Support configuring a custom server port
  + Show hint regarding password storage policy
  + Replaced the term "gateway" with "server"
  + Fixes build issues due to use of deprecated GLib
    macros/functions
  + Updated Glade file to GTK 3.2</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1623067200">- Update to version 1.5.2
  + Reduce height of config dialog by moving options/proposals to tabs
  + Migrated appdata to metainfo (renamed and moved the file)
- Update to version 1.5.1
  + Fixes password entry for private keys</changelog>
  <changelog author="Jens K. &lt;karatekhd@opensuse.org&gt;" date="1694088000">- Update to version 1.6.0
  + Support for GTK4
  + Removed libnm-glib compatibility
- Add pkgconfig(gtk4) because the new version requires this
- Add pkgconfig(libnma-gtk4) because the new version requires this</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-strongswan
  to more accurately reflect its usage
- Add missing supplements:
  - NM and strongswan-nm
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="d1ab39af3212ca1fbc52f3a00c999e2860e219621afba459412844f318de6f0017e4877bfe04246895037af3c55dd0f4c89f0c373c1c2b8ebb9ebd49e671c333" name="NetworkManager-strongswan-lang" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="bp160.1.13"/>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added NetworkManager-strongswan.keyring, which contains the key
  from the author.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528718400">- Fix packaging error in previous sub, README was moved from
  source1 tag to source3, move to tag source99 to avoid similar
  error in the future.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Update to version 1.4.5:
  + Enables the IPv6 tab in the connection dialog.
- Use modern macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).
- Pass --with-nm-libexecdir=%{_libexecdir} to configure to behave
  the same as all the other NM-VPN plugins. This results in
  nm-strongswan-auth-dialog moving from
  %{_libexecdir}/NetworkManager to %{_libexecdir}, but considering
  all the other auth-dialog helpers are there as well it is
  perfectly welcome.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1588593600">- Update to version 1.5.0:
  + EAP-TLS authentication
  + Certificate source (file, agent, smartcard) is selectable
    independently
  + Add support to configure local and remote identities
  + Support configuring a custom server port
  + Show hint regarding password storage policy
  + Replaced the term "gateway" with "server"
  + Fixes build issues due to use of deprecated GLib
    macros/functions
  + Updated Glade file to GTK 3.2</changelog>
  <changelog author="Predrag Ivanovi&#x107; &lt;predivan@mts.rs&gt;" date="1623067200">- Update to version 1.5.2
  + Reduce height of config dialog by moving options/proposals to tabs
  + Migrated appdata to metainfo (renamed and moved the file)
- Update to version 1.5.1
  + Fixes password entry for private keys</changelog>
  <changelog author="Jens K. &lt;karatekhd@opensuse.org&gt;" date="1694088000">- Update to version 1.6.0
  + Support for GTK4
  + Removed libnm-glib compatibility
- Add pkgconfig(gtk4) because the new version requires this
- Add pkgconfig(libnma-gtk4) because the new version requires this</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-strongswan
  to more accurately reflect its usage
- Add missing supplements:
  - NM and strongswan-nm
  - NMA subpackage: Main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
</package>
<package pkgid="9d1d037b613172d381de7f44f1aee591fdd57d060333111172237a1be5f1c022d0d61d6b97ca1b21572e27cc825d37663ab7c5bd5a31fa2b64395ae9f6829d31" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="242fe0809bd9b29789d3d5009cd13c0c136d7f1a0faa1055fb578d4413f4d2376469dff1aed2385188c432d40ae2a1fdbb3619adc43e382f3288bd32f54e8767" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="7f6b9de50647dcd64c62199ebf314463eb7e9bda08578ee25b582e84380e08b116aba9e3475ccc8771965380a29cee05b549c539c693e0cd36c42d180c1b73bd" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="024e3cb83dd0a4e4e4a407b6bb88631ec0e1ac2a4d492072584a31bfe53b290f14fed109d9244a64e69293266dc4ee13c4f76ab98e17924ecb0130ce83f860e3" name="NetworkManager-vpnc" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Updatet to version 1.2.6:
  + Fix for a local authenticated privileged escalation bug
    (CVE-2018-10900). All users are advised to upgrade.
  + The CA file is now hidden from the configuration dialog if
    hybrid auth is disabled.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139200">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647000000">- Update to version 1.2.8:
  + libnm-glib compatibility (NetworkManager &lt; 1.0) is disabled by
    default. It can be enabled by passing --with-libnm-glib to
    configure script. Nobody should need it by now. Users that
    still use this are encourage to let us know before the
    libnm-glib support is removed for good.
  + The auth helper in external UI mode can now be run without a
    display server. This is useful when activating connections with
    "nmcli --ask".
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1691064000">- Add nm-vpnc-editor-interface-name.patch: properties: Don't set
  interface name as empty string by default
  (glgo#GNOME/NetworkManager-vpnc/commit/f4df2db6c, bsc#1213769).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-vpnc
  to more accurately reflect its usage
- Add missing supplements:
  - NM and vpnc
  - NMA subpackage: main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1731672000">- Update to version 1.4.0:
  + Added support for configuring MTU.
  + Added support for more secure DH groups.
  + Added options to relax security for old insecure gateways.
  + Added support for Fortigate vendor-specific compatibility
    quirks.
  + Removed obsolete libm-glib support.
  + Updated translations.
- Drop nm-vpnc-editor-interface-name.patch: Fixed upstream.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1739016000">- Add nm-vpnc-undefined-symbol.patch: export nm_vpn_editor_factory_vpnc
  (glgo#GNOME/NetworkManager-vpnc!18, bsc#1233685).</changelog>
</package>
<package pkgid="dd772ae27e10f8e7004ef53243fea1b0525bde95dd7d97e4256a4dd9ea643dbab5df860e60525a617949f03135e29766c699ccff5daa0b46b3767d7aaabc284c" name="NetworkManager-vpnc-lang" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="bp160.1.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Updatet to version 1.2.6:
  + Fix for a local authenticated privileged escalation bug
    (CVE-2018-10900). All users are advised to upgrade.
  + The CA file is now hidden from the configuration dialog if
    hybrid auth is disabled.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588334400">- Set the path for the VPN service name file correctly to
  %_vpnservicedir (provided by macros.NetworkManager).</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1632139200">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647000000">- Update to version 1.2.8:
  + libnm-glib compatibility (NetworkManager &lt; 1.0) is disabled by
    default. It can be enabled by passing --with-libnm-glib to
    configure script. Nobody should need it by now. Users that
    still use this are encourage to let us know before the
    libnm-glib support is removed for good.
  + The auth helper in external UI mode can now be run without a
    display server. This is useful when activating connections with
    "nmcli --ask".
  + Gtk4 version of the editor plugin is now available (for use
    with Control Center of GNOME 42 or later).
  + Updated translations.
- Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and
  pass --with-gtk4=yes to configure, build the gtk4 version.
- Stop passing --without-libnm-glib to configure, no longer
  needed, nor recognized.
- Add optional libxml2-tools BuildRequires, build runs
  xml-stripblanks preprocessing if available.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1691064000">- Add nm-vpnc-editor-interface-name.patch: properties: Don't set
  interface name as empty string by default
  (glgo#GNOME/NetworkManager-vpnc/commit/f4df2db6c, bsc#1213769).</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1698926400">- Rename gnome subpackage to NetworkManager-applet-vpnc
  to more accurately reflect its usage
- Add missing supplements:
  - NM and vpnc
  - NMA subpackage: main package and NMA</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1711627200">- Add missing supplements(bsc#1220391):
  + NMA subpackage: Main package and gnome-control-center</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1731672000">- Update to version 1.4.0:
  + Added support for configuring MTU.
  + Added support for more secure DH groups.
  + Added options to relax security for old insecure gateways.
  + Added support for Fortigate vendor-specific compatibility
    quirks.
  + Removed obsolete libm-glib support.
  + Updated translations.
- Drop nm-vpnc-editor-interface-name.patch: Fixed upstream.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1739016000">- Add nm-vpnc-undefined-symbol.patch: export nm_vpn_editor_factory_vpnc
  (glgo#GNOME/NetworkManager-vpnc!18, bsc#1233685).</changelog>
</package>
<package pkgid="d3dbfa5f84b093045db28f04af79327d781b2734e5a4c444dee6652c73e877210ebf08d09a4577dabe3ad1f8fb3b66b9201e86531e8a52373b0007576a8c6b02" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1723204800">- Update to version 1.48.8:
  + ovs: fix triggering stage3 activation without DHCP client
    initialized
  + config: parse autoconnect-ports value on config
  + ndisc: preserve router preferences</changelog>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
</package>
<package pkgid="3c9eeb1b0756049ddfe4ec4afb6b7805f27e1d517d167eab030a7f2d8b5d50c6e0bcfc6791e0bed1c18b682b74d558ff1e3d45cc21eee946ca0750b552ce4ec1" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1724328000">- Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  device: don't enforce IP cleanup on deactivating state
  (bsc#1228154, glfd#NetworkManager/NetworkManager!2016).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1724673600">- Update to version 1.48.10:
  + nmcli/edit: fix memory leak in extract_setting_and_property
  + autotools: fix another filename that was renamed
  + gitlab: fix helper scripts to support DNF5
  + CI: update the imported templates_sha
  + autotools: fix filename that was renamed
  + format: run nm-code-format
  + policy: retry hostname resolution when it fails
  + platform: add small backoff time before resync
  + bridge: reapply port VLANs only when necessary
  + platform: add nmp_utils_bridge_normalized_vlans_equal()
  + platform: support reading bridge VLANs
  + device: support reapplying bridge-port VLANs
  + bridge: change the signature for
    nm_platform_link_set_bridge_vlans()
  + platform: add define for IFLA_BOND_SLAVE_PRIO
  + lldp: fix multiple access to argument in logging macro
  + lldp: fix crash dereferencing NULL pointer during debug logging
  + policy: unblock the autoconnect for children when parent is
    available</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
</package>
<package pkgid="3be669935ecfffad3d2b7520f0f445964a28c3b08a3080a8cd10a509c3fd8dbae537650cb2fe5fe2244b2cf420074989fd454328d17ae1bfa9d0df81e65d3262" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.52.0" rel="160000.4.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1727956800">- Update to version 1.50.0:
  + The support for "dhclient" has been deprecated, not built
    unless explicitely enabled, and will be removed in a future
    release. The internal DHCP client should be used instead and
    has been the default since version 1.20 (1.12 when built with
    meson).
  + Support matching a OVS system interface by MAC address.
  + Add a timeout option to connectivity checking.
  + Support configuring veth interfaces in nmtui.
  + When looking up the system hostname from the reverse DNS lookup
    of addresses configured on interfaces, NetworkManager now takes
    into account the content of /etc/hosts.
  + Revert to using sysctl ipv6.conf.default for ip6-privacy.
  + Allow specifying a system OVS interface by MAC address.
  + ndisc: Support multiple gateways for a single network.
  + wifi: Support configuring channel-width in AP mode.
  + keyfile: Stop writing offensive terms into keyfiles.
  + Support reapplying the VLANs on bridge ports.
  + Fix crash caused by malformed LLDP package if debug log is
    enabled.
  + Retry hostname resolution when it fails.
- Drop NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch:
  Fixed upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1737633600">- Add config-server subpackage (bsc#1224868).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 1.50.3:
  + Wait configuring MPTCP endpoints until DAD has completed.
  + Properly autoconnect OVS ports at boot.
  + Allow configuring "shared" IPv6 method in nmtui.
- Changes from version 1.50.2:
  + Fix potential crash when the property "ipv4.dhcp-send-release"
    is enabled.
  + Support routing rules for VPN connections.
  + Place the route to the VPN gateway into the table defined by
    the "ipv{4,6}.route-table" properties-
  + Fix error handling rp_filter when kernel don't support MPTCP.
  + Fix configuration of VLAN QoS mappings.
- Changes from version 1.50.1:
  + nmcli: fix handling of connection.down-on-poweroff property
  + sriov: only validate sriov capacity when enabled
  + wwan: fix crash with IPv4 and method=auto
  + dns: fix deleting internal global DNS configuration
  + wifi: fix list corruption when scanning with explicit SSID
  + bonding: steer IGMP queries to the active bond balance-slb
    primary port
  + Remove routes added by NM on reapply
  + Never retry ACD on NOARP interfaces
  + Support IPv6 EUI64 link-local address for ipv6 tunnels</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744001">- Update to version 1.52.0:
  + Store interactive history in `$XDG_CACHE_HOME/nmcli-history`
    instead of `~/.nmcli-history`
  + Add new ipv4.link-local=fallback to set an IPv4 link-local
    address when no other IPv4 is set.
  + Remove support for building with Autotools
  + Add IPVLAN interface support
  + Allow to manually configure the authentication of LTE's initial
    EPS Bearer.
  + Add support for the "IPv6-only preferred" DHCPv4 option (RFC
    8925), used to indicate that a host supports an IPv6-only mode
    and is willing to forgo obtaining an IPv4 address if the
    network provides IPv6 connectivity.
  + Support automatically adding routes to DNS servers via the
    ipv4.routed-dns and ipv6.routed-dns properties; when enabled,
    each name server is reached only via the device that specifies
    it.
  + Support OCI in nm-cloud-setup
  + Added support for ethtool FEC mode
  + Add new ipv4.shared-dhcp-range and ipv4.shared-dhcp-lease-time,
    which allows you to customize the DHCP range and lease time
    offered by DHCP server in `shared` connection method.
  + DNS servers can now be specified with a URI-like syntax which
    supports DNS over TLS name servers.
  + The initrd-generator understands the "rd.net.dns" option to
    configure global name servers.
  + Drop support for the "dhcpcanon" DHCP client.
  + global-dns configuration section now has 2 additional keys:
    "resolve-mode" and "certification-authority".
  + Dnsconfd plugin can now be used for configuration of
    system-wide DNS caching resolver. If dnsconfd plugin is enabled
    and ipvX.routed-dns is set to -1 then adding routes is by
    default enabled.
  + Add "shared" method to the IPv6 configuration options in nmtui.
  + Fix a bug that prevented the activation of bond and bridge's
    ports in some cases.
  + Fix a bug that prevented the activation of OVS interfaces in
    some cases.
  + Fix MTPCP endpoint creation for IPv4 with DAD and IPv6
    tentative addresses.
  + Fix some VPN routes not being added to the table specified in
    ipv4/6.routing-table. This fix allow to use policy routing to
    mitigate Tunnelvision attacks.
- Stop passing dhcpcanon=no to meson setup, no longer recognized,
  nor needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1741694400">- Add 2069.patch: Fix build against girepository-2.0 (pygobject
  3.52).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1744200000">- Remove '-Dhostname_persist=suse' compile option, as it's not
  needed anymore. The behaviours of this option are mainly:
  1. stores hostname in /etc/HOSTNAME instead of /etc/hostname.
  2. checks DHCLIENT_SET_HOSTNAME value in /etc/sysconfig/netowrk/dhcp
    to know whether the hostname is valid.
  These are not desired haviours anymore.</changelog>
  <changelog author="thomas.blume@suse.com" date="1749643200">- document static ip setup on boot (bsc#1244072)
  add 0001-man-document-static-ip-setup-differences-to-dracut-n.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1749729600">- Add NetworkManager-accept-localhost-if-static.patch:
  policy: accept localhost hostnames if static
  (bsc#1257366, glfd#NetworkManager/NetworkManager/commit/152d71a1).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758542400">- Move dispatcher.d/pre-up.d/90-nm-cloud-setup.sh to cloud-setup
  subpackage(bsc#1250086).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="3288af6e0089b8eb2e3fab2ade9bcaa6342a653480360a8adaccb46cc39236c4b05c36b12ec6941d423ee59c6eed03ca00f4587800020e281d162264335150ee" name="NsCDE" arch="x86_64">
  <version epoch="0" ver="2.3" rel="bp160.1.5"/>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660046400">- Update to 2.2
  * Add kcalc colors tom match dtcalc (colormgr.local)
  * Fix rofi and dunst themes to work with new versions of programs
  * NsCDE .desktop files renamed to conform to standards
  * Front Panel on top of the screen possibility implemented. This
  can be achieved with "InfoStoreAdd frontpanel.on.top 1"
  in ~/.NsCDE/NsCDE.conf.
  * Icon theme updates
  * CSS: support firefox 100+
  * Consolidate GTK2 and GTK3 engine css files, add some fixes
  and match colors more correctly
  * Added Common User Access (CUA) key bindings. This is now
  default key binding set in NsCDE. Old key bindings scheme
  now called "nscde1x" can be used in ~/.NsCDE/NsCDE.conf
  with the "InfoStoreAdd kbd_bind_set nscde1x" - this can also
  be configured now with Keyboard Style Manager
  * Keyboard Style Manager addons, Mouse Style Manager fixes
  * Building: add --with-python-shebang="STRING" in configure
  to allow user to override strange alternatives managers on
  some systems
  * Reorganize f_PolkitAgent to be more portable and stable
  * Kvantum: Reshape in more Motif style Qt5 Combo Box
  * More Firefox CSS updates
  * Documentation updates for all of the above</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660132800">- Alignment with openSUSE packaging guidelines
  * Use %find_lang
  had to use --all-name otherwise translations were not matched
  and package ended up with installed but unpackaged files
  * Get rid of empty post/postun sections</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1660132801">- Add a minimalistic text editor (leafpad) and a filemanager (pcmanfm)
  as soft dependencies. These are the bare minimum to have a usable system.
- Trimmed description in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1660219200">- Add leafpad.patch to ensure first time config wizard recognizes
  leafpad as text editor.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660219201">- Add xscreensaver as NsCDE treats it as a default screensaver.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676030400">- Remove doc files because contain scripts etc that cause OBS to fail
- Fix duplicate filews causing OBS to fail
- Fix .desktop file to use X-NsCDE instead of NsCDE
- Fix Python scripts shebangs</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1730894400">- update to 2.3:
  * Font and Color Style Manager: reload new themes without FVWM restart
  * Qt6 integration support
  * Optional Picom X Compositor internal support
  * Thunderbird 102+ CSS theme integration support
  * Firefox up to 113+ CSS theme integration support
  * Font and Color Style Manager reshape, add integrations as separate dialog
  * (De)Iconify X11 freeze glitch fvwm workaround
  * Front Panel initial placement fix instead of workaround
  * Fix GWM FvwmScript segfault on exit
  * More missing icons in XDG icon theme
  * Handle gsettings org.gnome.desktop.interface color-scheme
  * Xscreensaver 6.X support
  * Add detailed X resources for xcalc and some old Athena based apps
  * Tuning X resources for more old apps
  * Font and Color Style Manager: remember widget integration options
  * GTK3 theme fixes: treat nasty header bar as toolbar
  * Initial setup: add detailed integration questions, Qt6 support
  * Front Panel clock: triangle hour and minute hands to match original
  * GWMPager as popup on workspace change in no-page mode
  * Fixed some easy-to-make keyboard shortcuts accidental calls
  * Firefox and Thunderbird user.js additions for nice initial look &amp; feel
  * Thunderbird HTML compose window toolbar fix
  * Docs update, many portability fixes, misc fixes, some typo fixes
  * Portability and test phase fixes
- attach url to the source tarball
- use pkgconfig for devel packages
- fixed docs, so we can package it. (seperate package)</changelog>
</package>
<package pkgid="3f1f97a7cde0396b2e355c992a186509c6363d1b45e8aa2cd4476a723db84c431998291cc9c6c6dd26417a6e06fb38632790a955f4dff179352ae53bd5113824" name="NsCDE-doc" arch="noarch">
  <version epoch="0" ver="2.3" rel="bp160.1.5"/>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660046400">- Update to 2.2
  * Add kcalc colors tom match dtcalc (colormgr.local)
  * Fix rofi and dunst themes to work with new versions of programs
  * NsCDE .desktop files renamed to conform to standards
  * Front Panel on top of the screen possibility implemented. This
  can be achieved with "InfoStoreAdd frontpanel.on.top 1"
  in ~/.NsCDE/NsCDE.conf.
  * Icon theme updates
  * CSS: support firefox 100+
  * Consolidate GTK2 and GTK3 engine css files, add some fixes
  and match colors more correctly
  * Added Common User Access (CUA) key bindings. This is now
  default key binding set in NsCDE. Old key bindings scheme
  now called "nscde1x" can be used in ~/.NsCDE/NsCDE.conf
  with the "InfoStoreAdd kbd_bind_set nscde1x" - this can also
  be configured now with Keyboard Style Manager
  * Keyboard Style Manager addons, Mouse Style Manager fixes
  * Building: add --with-python-shebang="STRING" in configure
  to allow user to override strange alternatives managers on
  some systems
  * Reorganize f_PolkitAgent to be more portable and stable
  * Kvantum: Reshape in more Motif style Qt5 Combo Box
  * More Firefox CSS updates
  * Documentation updates for all of the above</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660132800">- Alignment with openSUSE packaging guidelines
  * Use %find_lang
  had to use --all-name otherwise translations were not matched
  and package ended up with installed but unpackaged files
  * Get rid of empty post/postun sections</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1660132801">- Add a minimalistic text editor (leafpad) and a filemanager (pcmanfm)
  as soft dependencies. These are the bare minimum to have a usable system.
- Trimmed description in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1660219200">- Add leafpad.patch to ensure first time config wizard recognizes
  leafpad as text editor.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660219201">- Add xscreensaver as NsCDE treats it as a default screensaver.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676030400">- Remove doc files because contain scripts etc that cause OBS to fail
- Fix duplicate filews causing OBS to fail
- Fix .desktop file to use X-NsCDE instead of NsCDE
- Fix Python scripts shebangs</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1730894400">- update to 2.3:
  * Font and Color Style Manager: reload new themes without FVWM restart
  * Qt6 integration support
  * Optional Picom X Compositor internal support
  * Thunderbird 102+ CSS theme integration support
  * Firefox up to 113+ CSS theme integration support
  * Font and Color Style Manager reshape, add integrations as separate dialog
  * (De)Iconify X11 freeze glitch fvwm workaround
  * Front Panel initial placement fix instead of workaround
  * Fix GWM FvwmScript segfault on exit
  * More missing icons in XDG icon theme
  * Handle gsettings org.gnome.desktop.interface color-scheme
  * Xscreensaver 6.X support
  * Add detailed X resources for xcalc and some old Athena based apps
  * Tuning X resources for more old apps
  * Font and Color Style Manager: remember widget integration options
  * GTK3 theme fixes: treat nasty header bar as toolbar
  * Initial setup: add detailed integration questions, Qt6 support
  * Front Panel clock: triangle hour and minute hands to match original
  * GWMPager as popup on workspace change in no-page mode
  * Fixed some easy-to-make keyboard shortcuts accidental calls
  * Firefox and Thunderbird user.js additions for nice initial look &amp; feel
  * Thunderbird HTML compose window toolbar fix
  * Docs update, many portability fixes, misc fixes, some typo fixes
  * Portability and test phase fixes
- attach url to the source tarball
- use pkgconfig for devel packages
- fixed docs, so we can package it. (seperate package)</changelog>
</package>
<package pkgid="184c4897a8c90712f6e34c56242ba2e197cd68ddc4f03d1508ea9173c4f52ad66413fae117a8c1bd9c12a4168aff60df96c8b9f4ee3bbd472539c02f24c18547" name="NsCDE-lang" arch="noarch">
  <version epoch="0" ver="2.3" rel="bp160.1.5"/>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660046400">- Update to 2.2
  * Add kcalc colors tom match dtcalc (colormgr.local)
  * Fix rofi and dunst themes to work with new versions of programs
  * NsCDE .desktop files renamed to conform to standards
  * Front Panel on top of the screen possibility implemented. This
  can be achieved with "InfoStoreAdd frontpanel.on.top 1"
  in ~/.NsCDE/NsCDE.conf.
  * Icon theme updates
  * CSS: support firefox 100+
  * Consolidate GTK2 and GTK3 engine css files, add some fixes
  and match colors more correctly
  * Added Common User Access (CUA) key bindings. This is now
  default key binding set in NsCDE. Old key bindings scheme
  now called "nscde1x" can be used in ~/.NsCDE/NsCDE.conf
  with the "InfoStoreAdd kbd_bind_set nscde1x" - this can also
  be configured now with Keyboard Style Manager
  * Keyboard Style Manager addons, Mouse Style Manager fixes
  * Building: add --with-python-shebang="STRING" in configure
  to allow user to override strange alternatives managers on
  some systems
  * Reorganize f_PolkitAgent to be more portable and stable
  * Kvantum: Reshape in more Motif style Qt5 Combo Box
  * More Firefox CSS updates
  * Documentation updates for all of the above</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660132800">- Alignment with openSUSE packaging guidelines
  * Use %find_lang
  had to use --all-name otherwise translations were not matched
  and package ended up with installed but unpackaged files
  * Get rid of empty post/postun sections</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1660132801">- Add a minimalistic text editor (leafpad) and a filemanager (pcmanfm)
  as soft dependencies. These are the bare minimum to have a usable system.
- Trimmed description in spec file</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1660219200">- Add leafpad.patch to ensure first time config wizard recognizes
  leafpad as text editor.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1660219201">- Add xscreensaver as NsCDE treats it as a default screensaver.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676030400">- Remove doc files because contain scripts etc that cause OBS to fail
- Fix duplicate filews causing OBS to fail
- Fix .desktop file to use X-NsCDE instead of NsCDE
- Fix Python scripts shebangs</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1730894400">- update to 2.3:
  * Font and Color Style Manager: reload new themes without FVWM restart
  * Qt6 integration support
  * Optional Picom X Compositor internal support
  * Thunderbird 102+ CSS theme integration support
  * Firefox up to 113+ CSS theme integration support
  * Font and Color Style Manager reshape, add integrations as separate dialog
  * (De)Iconify X11 freeze glitch fvwm workaround
  * Front Panel initial placement fix instead of workaround
  * Fix GWM FvwmScript segfault on exit
  * More missing icons in XDG icon theme
  * Handle gsettings org.gnome.desktop.interface color-scheme
  * Xscreensaver 6.X support
  * Add detailed X resources for xcalc and some old Athena based apps
  * Tuning X resources for more old apps
  * Font and Color Style Manager: remember widget integration options
  * GTK3 theme fixes: treat nasty header bar as toolbar
  * Initial setup: add detailed integration questions, Qt6 support
  * Front Panel clock: triangle hour and minute hands to match original
  * GWMPager as popup on workspace change in no-page mode
  * Fixed some easy-to-make keyboard shortcuts accidental calls
  * Firefox and Thunderbird user.js additions for nice initial look &amp; feel
  * Thunderbird HTML compose window toolbar fix
  * Docs update, many portability fixes, misc fixes, some typo fixes
  * Portability and test phase fixes
- attach url to the source tarball
- use pkgconfig for devel packages
- fixed docs, so we can package it. (seperate package)</changelog>
</package>
<package pkgid="0946d56140d29040df0918cbba078c1d092022c4e3da053e9697eb174afefe54665e04d51f4d9e3c74bc5b2cb02ca5162ebf7010869786035a98b2f9d9e612ba" name="NumCpp-devel" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="bp160.1.10"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696766400">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697716800">- Update to version 2.12.1:
  * updated TRUE/FALSE enum fields to YES/NO to deconflict with
    other library's terrible macro practice of #defining
    TRUE/FALSE</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1734350400">- Add NumCpp-disable-pytest.patch: Temporarily disable pytests
  that are incorrectly configured for pybind11; fixes build
  failures.</changelog>
</package>
<package pkgid="258c243a6629dd701aff189c1ae208be210c5280730124e77c3ef0d603ec5244730e88543186255ad41b236d9963f22bc851878d4fd6a5410ccd2f629bd12705" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="bp160.1.15"/>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1669723200">- update to version 1.7.0~git20221129.9de37af
- feat: user configurable shortcuts
  * replace 0460-shortcut-configuration.patch by updated
    0686-shortcut-configuration.patch
  * add 9686-cmake-add-shortcut-manager.patch
    add new files to CMakeLists.txt
- fix: background drawing when switching page size
  * update 0551-common-background-drawing.patch
- fix: mirror pixmap size
  * update 0569-scale-mirror-pixmap.patch
- remove upstreamed patches
  * remove upstreamed 0604-qt-5.12-compatibility.patch
  * remove upstreamed 0629-bug-ruler.patch
  * remove upstreamed 0633-improve-displaymanager.patch
  * remove upstreamed 0637-fix-pdf-background-export.patch
  * remove upstreamed 0641-fix-font-handling.patch
  * remove upstreamed 0649-fix-pdf-export-scaling.patch
- chore: replace qmake by cmake build system
  * remove 0651-chore-reorganize-linux-build.patch
  * add 0698-add-cmake-build-system.patch
- fix: page size for PDF export
  * add 0677-pdf-export-page-size.patch
- disable software update from openboard web page
  * add 9117-disable-software-update.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674648000">- BuildRequire pkgconfig(libavdevice) instead of ffmpeg-devel: let
  OBS figure out the right packages that do not conlfict.</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
</package>
<package pkgid="ac0636830f1c0bbbdfa510941760d421aaa64fd69116afb034aea4e9080e4dbf034bfebce177cc78a7b9b44f65bface071a82f7304017ab42aac1b92a3ae364d" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="bp160.1.1"/>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1687089600">- update to version 1.7.0~git20230614.2ff8f29
  * feature freeze before release
- remove upstreamed patches
  * remove upstreamed 0551-common-background-drawing.patch
  * remove upstreamed 0677-pdf-export-page-size.patch
- update patches to match updated sources
  * update 0686-shortcut-configuration.patch
  * update 0698-add-cmake-build-system.patch
  * update 9117-disable-software-update.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1702123200">- update to release version 1.7.0
- update patches to match updated sources
  * update 0569-scale-mirror-pixmap.patch
  * update 0686-shortcut-configuration.patch
- replace build system patch
  * remove 0698-add-cmake-build-system.patch
  * add 0830-cmake-community-builds.patch
- switch from pgkconfig to cmake for some BuildRequires</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1766059200">- add patch 1387-fix-poppler-25-11.patch
  * compatibility with poppler 25.11
  * already merged upstream for next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1769342400">- update to release version 1.7.4
- remove upstreamed patch 1387-fix-poppler-25-11.patch</changelog>
</package>
<package pkgid="62c315a953afd84f88edf33fae306e68c2e435c30fba24f2577b70bbe74adbdfefe8f9107b6dac5195e4f035b2f708b73caff465990f69df895e1584591a440a" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="bp160.1.1"/>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1715169600">- update to release version 1.7.1
- remove upstreamed patches
  * remove 0830-cmake-community-builds.patch
  * remove 9686-cmake-add-shortcut-manager.patch
- update patch to match updated sources
  * replace 0686-shortcut-configuration.patch by 0955-shortcut-configuration.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1717934400">- fix a problem with latest plasma5 security patches
  * add 1010-fix-qapp-cast.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1766059200">- add patch 1387-fix-poppler-25-11.patch
  * compatibility with poppler 25.11
  * already merged upstream for next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1769342400">- update to release version 1.7.4
- remove upstreamed patch 1387-fix-poppler-25-11.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1770120000">- update to release version 1.7.5</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1770120001">- add AppData in metainfo.xml
- add patch 1347-chore-appdata.patch
  * add metainfo.xml and adjust cmake</changelog>
</package>
<package pkgid="0e7e3dd8a25d603890e0eadf7f1470bff24a278319660639d4e2c6464a61d4bd649818ba8898418d881318e92a5d76ebd191e91994dc14c1dc38b1d3dababa95" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.6" rel="bp160.1.1"/>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1720094400">- compatibility with poppler &gt;= 24.05
  * poppler &gt;= 24.05 requires c++20
  * add 0961-use-cpp20.patch
  * add 0962-fix-cpp20-compatibility.patch
  * both patches are already merged upstream
    and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1766059200">- add patch 1387-fix-poppler-25-11.patch
  * compatibility with poppler 25.11
  * already merged upstream for next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1769342400">- update to release version 1.7.4
- remove upstreamed patch 1387-fix-poppler-25-11.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1770120000">- update to release version 1.7.5</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1770120001">- add AppData in metainfo.xml
- add patch 1347-chore-appdata.patch
  * add metainfo.xml and adjust cmake</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1772020800">- add patch 1434-build-poppler-26-02.patch
  * compatibility with poppler 26.02</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1772020801">- update to release version 1.7.6
  * fix: crash when using the "add to document" button in Documents Mode
  * fix: standard PDF export method would constantly fail
  * fix: rearrange board thumbnails after duplicating scene</changelog>
</package>
<package pkgid="27984ebd0f50a2a67600c7175771b241c57eed7aefa3173b29c7ed38edf06f7ef36301bc35161e3a1ca040af1c9dcf9dba9070e42abf89f96a6b05633fe90c6c" name="OpenBoard" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="bp160.1.1"/>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1723550400">- compatibility with ffmpeg-7
  * add 1017-ffmpeg7.patch
  * patch is already merged and will be part of the next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1731931200">- update to release version 1.7.2
- remove upstreamed patches
  * remove 0569-scale-mirror-pixmap.patch
  * remove 0961-use-cpp20.patch
  * remove 0962-fix-cpp20-compatibility.patch
  * remove 1010-fix-qapp-cast.patch
  * remove 1017-ffmpeg7.patch
- adjust patches to new version
  * adjust 0955-shortcut-configuration.patch
  * adjust 9117-disable-software-update.patch
- add patch to circumvent some problems on wayland
  * add 1165-fix-some-wayland-problems.patch
- switch from Qt5 to Qt6</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1734955200">- update to release version 1.7.3
- remove patch 1165-fix-some-wayland-problems.patch
  * users reported problems with this patch
  * will not be merged upstream</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1766059200">- add patch 1387-fix-poppler-25-11.patch
  * compatibility with poppler 25.11
  * already merged upstream for next release</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1769342400">- update to release version 1.7.4
- remove upstreamed patch 1387-fix-poppler-25-11.patch</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1770120000">- update to release version 1.7.5</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1770120001">- add AppData in metainfo.xml
- add patch 1347-chore-appdata.patch
  * add metainfo.xml and adjust cmake</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1772020800">- add patch 1434-build-poppler-26-02.patch
  * compatibility with poppler 26.02</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1772020801">- update to release version 1.7.6
  * fix: crash when using the "add to document" button in Documents Mode
  * fix: standard PDF export method would constantly fail
  * fix: rearrange board thumbnails after duplicating scene</changelog>
  <changelog author="Martin Winter &lt;me@letsfindaway.de&gt;" date="1775217600">- update to release version 1.7.7
  * fix: transparent background for widgets
  * fix: enable Cookie storage
  * feat: display warning for broken documents
  * feat: add document converter in preparation for document format
    change with an upcoming version 1.8.0
- remove upstreamed patch 1434-build-poppler-26-02.patch
- replace obsolete patch 1347-chore-appdata.patch for metainfo
  by 1446-chore-add-appdata-metainfo.patch</changelog>
</package>
<package pkgid="6bd746fb3b7a6424222fb86b2754d66ae75596097e524ddc7a7f17bc0c5534af58f2848063f18d15baa148349410172b570a4c3e61bb23c4f0490bd8ec29ae0c" name="OpenCSD" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1623931200">- Update to 1.1.0:
  - __Update__: ETM v4.6 support.
  - __Update__: C-API - add API functions to get last error and convert error code to string.
  - __Bugfix__: ETMv4/ETE - fix loop problem in commit elements.
  - __Bugfix__: ETMv4/ETE - make error handling consistent.
  - __Bugfix__: Add Pull request #36 from github (Ross Burton)
  - __Bugfix__: Add Pull request #37 from github (Ian Rogers)</changelog>
  <changelog author="jslaby@suse.cz" date="1635940800">- Update to 1.2.0
  - __Bugfix__: Fix include and install for ETE decoder headers.
  - __Update__: Add API for counting packet decode statistics, and Frame debmux statistics.
  - __Update__: Update test scripts to allow additional command line options to be passed.
  - __Bugfix__: Fix various build warnings.
  - __Bugfix__: Remove unused variable (github issue #38 from Yi Kong)
  - __Bugfix__: Remove noisy printf (James Clark)
  - __Bugfix__: Fix documentation issues (github issues #39 &amp; #40 from rbresalier)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1649160000">- Update to 1.3.0:
  - Now supports ETE v1.2 instruction trace - packet processing
    and packet decode
  - Admin: Dev versions now have patch versions at least +100
    from root public version
  - Update: Add support for conditional branch (BC.cond)
    introduced for v8.8 / v9.3 architecture.
  - Update: ETE: Add support for NSE bit - security state bit
    defining Root / Realm states in FEAT_RME.
- Changes from 1.2.1:
  - Bugfix: ETM4x / ETE - output of context elements to client
    can in some circumstances be delayed until after subsequent
    atoms have been processed leading to incorrect memory decode
    access via the client callbacks. Fixed to flush context
    elements immediately they are committed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1659528000">- Update to 1.3.1:
  - Bugfix: Add header file in snapshot parser - fix build for
    certain libc++ libs (github issue #43 from manojgupta)
  - Bugfix: Fix typo in comment (github issue #42 from nothatDinger)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1662984000">- Update to 1.3.2:
  - Bugfix: ETM4x / ETE - 64 bit timestamp value - MS bit
    incorrectly masked to 1b0 during extraction from packet.</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 1.3.3:
  * Update: Add test program for Coresight Frame Demux code
  * Bugfix: PTM: Fix incorrect extraction of Waypoint Address packet
  * Bugfix: Frame Demux: Fix HSYNC, FSYNC and 4xFSYNC handling that
    was causing out-of-bounds reads on invalid data input.
  * Fixed error handling for incorrect number of FSYNC packets in 4xFSYNC
    frame reset code that was not triggering an error and allowing fun
    with mis-aligned input data.
  * Bugfix: Fix silent failure if incorrect config flags set when setting up
    frame demux modes.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679486400">- update to 1.4.0:
  * Update: ETE: Add support for Arch v9.4 FEAT_ITE. ETE v1p3,
    sw trace instrumentation. Adds in new generic output packet
    type: OCSD_GEN_TRC_ELEM_INSTRUMENTATION.
  * Bugfix: Fix memory leak in mispredict handling (github issue
    [#52] from yabinc)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1694520000">- update to 1.4.1:
  * Test: Update test program trc_pkt_lister with option to have
    no logging output - final stats only.
  * Bugfix: ETM4x: ETE: Fix memory leak / use after free
    (github issues #53, #58 from yabinc)
  * Bugfix: C-API: Fix memory leak with output sink object.
    (github issue #55)</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.4.2:
  * Decoder memory access - add debug features and cacheing to
    improve performance of decode.
    Caching controllable by API or environment variables.
  * Decode debug options to control potential runaway debug when
    incorrect memory images input to decoder.
    a) aarch64 instruction check for invalid instruction opcode.
    (any opcode with 0x0000 as top 16 bits).
    b) optional instruction range maximum run limit.
  * Memory spaces: ensure that decoder memory requests are
    correctly labelled with Realm and root characteristics when
    appropriate.
  * M class tail chained interrupts now correctly handled.
  * STM: - fix master and channel ID initialisation
  * Test: update README.md and perf-test-script.base for new paths
    (github issue #60 from yuxy-c)
  * build: Fix GCC version dir handling for versions of GCC &gt; 9.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1709640000">- Update 1.5.1:
  * Update: ETE: Add support for Arch 9.5 FEAT_PAUTH_LR.
  Add new instructions to disassembler to recognise RETASPPC
  variants as indirect branches. Adds new test snapshots.</changelog>
</package>
<package pkgid="e2c23a504dbf71137587ca19b99ae419e6a3eabb0c85fe28c54b622c635ffc1e1791956376dd3269dede1d7eab8f9f11e0dd9202a8be4dde08f729710b762e3d" name="OpenCSD-devel" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1623931200">- Update to 1.1.0:
  - __Update__: ETM v4.6 support.
  - __Update__: C-API - add API functions to get last error and convert error code to string.
  - __Bugfix__: ETMv4/ETE - fix loop problem in commit elements.
  - __Bugfix__: ETMv4/ETE - make error handling consistent.
  - __Bugfix__: Add Pull request #36 from github (Ross Burton)
  - __Bugfix__: Add Pull request #37 from github (Ian Rogers)</changelog>
  <changelog author="jslaby@suse.cz" date="1635940800">- Update to 1.2.0
  - __Bugfix__: Fix include and install for ETE decoder headers.
  - __Update__: Add API for counting packet decode statistics, and Frame debmux statistics.
  - __Update__: Update test scripts to allow additional command line options to be passed.
  - __Bugfix__: Fix various build warnings.
  - __Bugfix__: Remove unused variable (github issue #38 from Yi Kong)
  - __Bugfix__: Remove noisy printf (James Clark)
  - __Bugfix__: Fix documentation issues (github issues #39 &amp; #40 from rbresalier)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1649160000">- Update to 1.3.0:
  - Now supports ETE v1.2 instruction trace - packet processing
    and packet decode
  - Admin: Dev versions now have patch versions at least +100
    from root public version
  - Update: Add support for conditional branch (BC.cond)
    introduced for v8.8 / v9.3 architecture.
  - Update: ETE: Add support for NSE bit - security state bit
    defining Root / Realm states in FEAT_RME.
- Changes from 1.2.1:
  - Bugfix: ETM4x / ETE - output of context elements to client
    can in some circumstances be delayed until after subsequent
    atoms have been processed leading to incorrect memory decode
    access via the client callbacks. Fixed to flush context
    elements immediately they are committed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1659528000">- Update to 1.3.1:
  - Bugfix: Add header file in snapshot parser - fix build for
    certain libc++ libs (github issue #43 from manojgupta)
  - Bugfix: Fix typo in comment (github issue #42 from nothatDinger)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1662984000">- Update to 1.3.2:
  - Bugfix: ETM4x / ETE - 64 bit timestamp value - MS bit
    incorrectly masked to 1b0 during extraction from packet.</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 1.3.3:
  * Update: Add test program for Coresight Frame Demux code
  * Bugfix: PTM: Fix incorrect extraction of Waypoint Address packet
  * Bugfix: Frame Demux: Fix HSYNC, FSYNC and 4xFSYNC handling that
    was causing out-of-bounds reads on invalid data input.
  * Fixed error handling for incorrect number of FSYNC packets in 4xFSYNC
    frame reset code that was not triggering an error and allowing fun
    with mis-aligned input data.
  * Bugfix: Fix silent failure if incorrect config flags set when setting up
    frame demux modes.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679486400">- update to 1.4.0:
  * Update: ETE: Add support for Arch v9.4 FEAT_ITE. ETE v1p3,
    sw trace instrumentation. Adds in new generic output packet
    type: OCSD_GEN_TRC_ELEM_INSTRUMENTATION.
  * Bugfix: Fix memory leak in mispredict handling (github issue
    [#52] from yabinc)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1694520000">- update to 1.4.1:
  * Test: Update test program trc_pkt_lister with option to have
    no logging output - final stats only.
  * Bugfix: ETM4x: ETE: Fix memory leak / use after free
    (github issues #53, #58 from yabinc)
  * Bugfix: C-API: Fix memory leak with output sink object.
    (github issue #55)</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.4.2:
  * Decoder memory access - add debug features and cacheing to
    improve performance of decode.
    Caching controllable by API or environment variables.
  * Decode debug options to control potential runaway debug when
    incorrect memory images input to decoder.
    a) aarch64 instruction check for invalid instruction opcode.
    (any opcode with 0x0000 as top 16 bits).
    b) optional instruction range maximum run limit.
  * Memory spaces: ensure that decoder memory requests are
    correctly labelled with Realm and root characteristics when
    appropriate.
  * M class tail chained interrupts now correctly handled.
  * STM: - fix master and channel ID initialisation
  * Test: update README.md and perf-test-script.base for new paths
    (github issue #60 from yuxy-c)
  * build: Fix GCC version dir handling for versions of GCC &gt; 9.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1709640000">- Update 1.5.1:
  * Update: ETE: Add support for Arch 9.5 FEAT_PAUTH_LR.
  Add new instructions to disassembler to recognise RETASPPC
  variants as indirect branches. Adds new test snapshots.</changelog>
</package>
<package pkgid="f024fb74959bbdcc6cc053bb42f85857c04d6223ea3290dd2943bedaf1ef5ce14abcbbd62ae28e116c02b79844e4fb83bc6d06dce8a3a20ad43fe512277dcaa6" name="OpenCSD-doc" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1623931200">- Update to 1.1.0:
  - __Update__: ETM v4.6 support.
  - __Update__: C-API - add API functions to get last error and convert error code to string.
  - __Bugfix__: ETMv4/ETE - fix loop problem in commit elements.
  - __Bugfix__: ETMv4/ETE - make error handling consistent.
  - __Bugfix__: Add Pull request #36 from github (Ross Burton)
  - __Bugfix__: Add Pull request #37 from github (Ian Rogers)</changelog>
  <changelog author="jslaby@suse.cz" date="1635940800">- Update to 1.2.0
  - __Bugfix__: Fix include and install for ETE decoder headers.
  - __Update__: Add API for counting packet decode statistics, and Frame debmux statistics.
  - __Update__: Update test scripts to allow additional command line options to be passed.
  - __Bugfix__: Fix various build warnings.
  - __Bugfix__: Remove unused variable (github issue #38 from Yi Kong)
  - __Bugfix__: Remove noisy printf (James Clark)
  - __Bugfix__: Fix documentation issues (github issues #39 &amp; #40 from rbresalier)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1649160000">- Update to 1.3.0:
  - Now supports ETE v1.2 instruction trace - packet processing
    and packet decode
  - Admin: Dev versions now have patch versions at least +100
    from root public version
  - Update: Add support for conditional branch (BC.cond)
    introduced for v8.8 / v9.3 architecture.
  - Update: ETE: Add support for NSE bit - security state bit
    defining Root / Realm states in FEAT_RME.
- Changes from 1.2.1:
  - Bugfix: ETM4x / ETE - output of context elements to client
    can in some circumstances be delayed until after subsequent
    atoms have been processed leading to incorrect memory decode
    access via the client callbacks. Fixed to flush context
    elements immediately they are committed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1659528000">- Update to 1.3.1:
  - Bugfix: Add header file in snapshot parser - fix build for
    certain libc++ libs (github issue #43 from manojgupta)
  - Bugfix: Fix typo in comment (github issue #42 from nothatDinger)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1662984000">- Update to 1.3.2:
  - Bugfix: ETM4x / ETE - 64 bit timestamp value - MS bit
    incorrectly masked to 1b0 during extraction from packet.</changelog>
  <changelog author="dmueller@suse.com" date="1674907200">- update to 1.3.3:
  * Update: Add test program for Coresight Frame Demux code
  * Bugfix: PTM: Fix incorrect extraction of Waypoint Address packet
  * Bugfix: Frame Demux: Fix HSYNC, FSYNC and 4xFSYNC handling that
    was causing out-of-bounds reads on invalid data input.
  * Fixed error handling for incorrect number of FSYNC packets in 4xFSYNC
    frame reset code that was not triggering an error and allowing fun
    with mis-aligned input data.
  * Bugfix: Fix silent failure if incorrect config flags set when setting up
    frame demux modes.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679486400">- update to 1.4.0:
  * Update: ETE: Add support for Arch v9.4 FEAT_ITE. ETE v1p3,
    sw trace instrumentation. Adds in new generic output packet
    type: OCSD_GEN_TRC_ELEM_INSTRUMENTATION.
  * Bugfix: Fix memory leak in mispredict handling (github issue
    [#52] from yabinc)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1694520000">- update to 1.4.1:
  * Test: Update test program trc_pkt_lister with option to have
    no logging output - final stats only.
  * Bugfix: ETM4x: ETE: Fix memory leak / use after free
    (github issues #53, #58 from yabinc)
  * Bugfix: C-API: Fix memory leak with output sink object.
    (github issue #55)</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.4.2:
  * Decoder memory access - add debug features and cacheing to
    improve performance of decode.
    Caching controllable by API or environment variables.
  * Decode debug options to control potential runaway debug when
    incorrect memory images input to decoder.
    a) aarch64 instruction check for invalid instruction opcode.
    (any opcode with 0x0000 as top 16 bits).
    b) optional instruction range maximum run limit.
  * Memory spaces: ensure that decoder memory requests are
    correctly labelled with Realm and root characteristics when
    appropriate.
  * M class tail chained interrupts now correctly handled.
  * STM: - fix master and channel ID initialisation
  * Test: update README.md and perf-test-script.base for new paths
    (github issue #60 from yuxy-c)
  * build: Fix GCC version dir handling for versions of GCC &gt; 9.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1709640000">- Update 1.5.1:
  * Update: ETE: Add support for Arch 9.5 FEAT_PAUTH_LR.
  Add new instructions to disassembler to recognise RETASPPC
  variants as indirect branches. Adds new test snapshots.</changelog>
</package>
<package pkgid="772abcc3ebc0959fa3a6210c59653b8b447f15ed68a59839e62aab22512fcc6a9e1a7f9e5ccbdc6bd692e5cdf364db97c11386a33a2253b9edd55e674aa575de" name="OpenColorIO-devel" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.2"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1705665600">- Upstreamed patches 0001-Fix-detection-of-yaml-cpp-0.8.patch
  and gcc12_fix.patch removed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1706097600">- Add patch to fix build on aarch64:
  * a95febc7.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1716552000">- Update to 2.3.2
  This is an ABI-compatible update for the 2.3.x series that
  includes all fixes since the 2.3.1 release.
  In particular, this release fixes two crashes:
  Certain older (generally 7-12 year old) CPUs including Intel
  x86-64 (Sandy Bridge and Ivy Bridge) and Intel Atom
  (Goldmont/Apollo Lake) microarchitectures that support SSE 4.2
  SIMD instructions but do not support the initial AVX set and
  XSAVE, or other CPUs where the OS has disabled AVX and XSAVE
  support, will crash when trying to evaluate a Lut1D or Lut3D in
  OCIO libraries compiled with SSE enabled (which is the default).
  More recent CPUs (e.g., those supporting AVX2 or higher) should
  not be affected.
  Users of the Linux Python bindings via PyPI will crash when
  trying to use OCIO from within another application that has been
  compiled with the new libstdc++ ABI, per the requirements of the
  VFX Platform for CY2023 and CY2024.
  Bug fixes and minor enhancements:
  - PR #1935, Prevent trying to use AVX instructions on certain
    CPUs that don't support them
  - PR #1933, Add manylinux_2_28 Python wheels for compliance with
    the current VFX Platform libstdc++ ABI
  - PR #1929, Fix ssse3 detection typo
  - PR #1921, Fix build break with custom PyString installs by
    always using system include pystring.h
  - PR #1924, Fix narrowing conversion error in unit test on
    riscv64
  - PR #1925, Enhance the ociochecklut command-line tool to print
    the output after each step
- drop a95febc7.patch: fixed in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727784000">- Update to 2.4.0
  This is the main new feature release for this year and is the
  base version for the CY2025 VFX Reference Platform (which
  specifies 2.4.x).
  The headline feature this year is a Preview Release of ACES 2
  Output Transform support. This is a work-in-progress and we
  anticipate that both the processing results and the API will
  likely change somewhat before it is finalized. Our goal is to do
  that by the end of the year in a 2.4.x release.
  Ideally, application developers will introduce 2.4.0 into their
  testing programs now and then update to the latest 2.4.x release
  available before shipping next year.
  This documentation page explains the new features in this
  release.
  - Major new features:
  - PR #1983, ACES 2 Output Transforms
  - PR #2039, Add updated CG and Studio configs for ACES 1.3
  - PR #1941, Builtin Transform for Apple Log
  - PR #1914, OCIOView: Chromaticities inspector
  - PR #1932, Add AVX512 accelerated LUT1D and LUT3D
  - PR #2029, Add new FixedFunction and Builtin Transforms
  - Bug fixes and minor enhancements:
  - PR #1988, Add NamedTransform support for ocioconvert
  - PR #2051, Add DCDM displays and improve HLG OOTF
    implementation
  - PR #2052, Add Wheels for Python 3.13
  - PR #2006, OCIOView: App mode, tests, color space menus, bug
    fixes
  - PR #1966, OCIOView: Updates &amp; fixes
  - PR #1985, OCIOView: Fix color_space_to_rgb_colourspace
    function usage
  - PR #1962, Add function to check if an extension is supported
    by FileTransform
  - PR #2059, Add hasAlias method to ColorSpace and
    NamedTransform
  - PR #2038, Add bit-depth flag to ocioconvert
  - PR #1981, Modify half-domain LUT1D GPU shader to improve zero
    handling
  - PR #1976, Allow read and write of file rules without color
    space validation
  - PR #2026, Update supported apps info for Photoshop and After
    Effects
  - PR #2022, Add Photoshop Beta support section to documentation
  - PR #2025, Remove legacy Photoshop and After Effects plug-ins
  - PR #2062, Add Python usage example for viewing pipeline on
    CPU
  - PR #2037, Add TouchDesigner to supported apps list
  - PR #2024, Fix typo in documentation
  - PR #1989, Improve GradingPrimary documentation
  - PR #2020, Allow building with gcc-15
  - PR #2019, Harden test temp folder handling
  - PR #1987, Use the correct locale include for Darwin
  - PR #1977, TSC &amp; Committer update, add Mark &amp; Cuneyt, create
    an emeritus section
  - PR #1961, Replaced deprecated Carbon framework with ColorSync
    and CoreGraphics
  - PR #1960, Add ociocpuinfo utility
  - PR #1950, Fix CPU unit test failures on recent macOS ARM
    platforms
  - PR #2060, Update documentation for 2.4 release
  - Build process enhancements:
  - PR #2053, Add Docker images for VFX Platform 2024 to CI
  - PR #2058, Fix Platform Latest CI
  - PR #2028, Add config file to fix ReadTheDocs builds
  - PR #1990, Fix for GitHub Actions node.js glibc issue
  - PR #1986, Improve minizip-ng installer CMake
  - PR #1945, Various CI workflow fixes
  - PR #1980, Improve Windows batch files to find installed
    Visual Studio location</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734004800">- Update to 2.4.1
  This is an ABI-compatible update for the 2.4.x series that
  includes all fixes since the 2.4.0 release.
  The ACES 2 implementation is still considered a Preview Release.
  OCIO contributors are working closely with the ACES 2 Output
  Transforms working group and a 2.4.2 release is planned for early
  March to finalize the ACES 2 algorithm implementation. A preview
  of the ACES 2 config files (compatible with OCIO 2.4.1) is
  available here.
  - Bug fixes and minor enhancements:
  - PR #2068, Fix views/display sub-menus in OCIO Display app for
    ACES 2 compatibility
  - PR #2095, Add "DISPLAY - CIE-XYZ-D65_to_DisplayP3-HDR"
    built-in transform
  - PR #2104, Optimizer detects pair inverses before combining
    multiple op pairs
  - PR #2074, Text format (e.g., Iridas cube) parsing
    optimizations
  - PR #2106, Fix Python wheel macOS workflow and make
    OCIO_PYTHON_LOAD_DLLS_FROM_PATH opt-in
  - PR #2090, Fix bit-depth attribute for inverse LUTs when
    writing CTFs
  - PR #2078, Added more accurate DX11 HLSL shading language enum
    name
  - PR #2077, Match ACES 2.0 shader resource suffix format to
    regular LUTs
  - PR #2096, Fixed range function error in nuke colorlookup
    examples
  - Build, documentation, and website enhancements:
  - PR #2072, Enable parallel source file compilation on MSVC
  - PR #2085, Update doc building instructions
  - PR #2084, Photoshop now supports OCIO
  - PR #2088, Add Disguise to list of supported applications
  - PR #2069, Move GPU LUT files into the tests dir
  - PR #2102, Fix broken Linux and Mac CI workflow</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734091200">- apparently the 2.4.0 tarball for a moment had the version set to
  2.5.0 when i grabbed it. now it was fixed down to 2.4.x again.
  so the soversion is downgraded again to 2.4
  https://github.com/AcademySoftwareFoundation/OpenColorIO/issues/2073</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Lock OpenImageIO to &lt; 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739620800">- bump openexr to &gt;= 3 match the rest of the stack
- Have an explicite BR for pkgconfig(Imath) and do not rely on it
  being pulled via openexr</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- Update to 2.4.2
  This is an ABI-compatible update for the 2.4.x series that
  includes all fixes and enhancements since the 2.4.1 release.
  With the 2.4.2 release, the "Preview" label is now removed from
  the ACES 2 implementation. After extensive collaboration with the
  ACES Output Transform working group, and our own testing, ACES 2
  support in OCIO is now officially released. We will continue to
  closely monitor your feedback on this new tech.
  A large part of the work since the 2.4.1 release was an attempt
  to optimize the ACES 2 algorithms. ACES 2 is still substantially
  slower than ACES 1 on CPU and somewhat slower on GPU. But the
  optimization efforts did yield a roughly 25% speedup over the
  2.4.1 release, along with a simplification of the code. Special
  thanks to Kevin Wheatley and Remi Achard for leading this work.
  In conjunction with the 2.4.2 release, the OCIO ACES configs
  working group has released the ACES 2.0 configs for OCIO. Special
  thanks to Thomas Mansencal for leading this work. The configs are
  not yet built into the library itself and may be downloaded from
  this link.
  Bug fixes and enhancements:
  - PR #2127, ACES 2.0 Output Transform performance optimization
  - PR #2112, Absolute paths not working through ConfigIOProxy
  - PR #2128, Add missing setConfigIOProxy call to the Python API
  - PR #2117, Fix metal backend's generated shaders with
    float/int/constant array performance
  - PR #2121, Integrate matrix multiplication fix from OSL
  - PR #2120, Change recommended Imath version to 3.1.12
  - PR #2109, Fix issue with ocio_depts handling spaces in file
    paths
  - PR #2132, NaN fix for the ACES 2 inverse output transforms</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Allow newer OpenImageIO in ocio_tools</changelog>
</package>
<package pkgid="73f78a4672d646d7cdf60bdd9ca9815543e0b93ce72bdbe84e554decf76cdf27deee6b0a3a095451c187a85707863ac1c342a68137d9fa9d4032677fe66aa4bb" name="OpenColorIO-doc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.2"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1705665600">- Upstreamed patches 0001-Fix-detection-of-yaml-cpp-0.8.patch
  and gcc12_fix.patch removed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1706097600">- Add patch to fix build on aarch64:
  * a95febc7.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1716552000">- Update to 2.3.2
  This is an ABI-compatible update for the 2.3.x series that
  includes all fixes since the 2.3.1 release.
  In particular, this release fixes two crashes:
  Certain older (generally 7-12 year old) CPUs including Intel
  x86-64 (Sandy Bridge and Ivy Bridge) and Intel Atom
  (Goldmont/Apollo Lake) microarchitectures that support SSE 4.2
  SIMD instructions but do not support the initial AVX set and
  XSAVE, or other CPUs where the OS has disabled AVX and XSAVE
  support, will crash when trying to evaluate a Lut1D or Lut3D in
  OCIO libraries compiled with SSE enabled (which is the default).
  More recent CPUs (e.g., those supporting AVX2 or higher) should
  not be affected.
  Users of the Linux Python bindings via PyPI will crash when
  trying to use OCIO from within another application that has been
  compiled with the new libstdc++ ABI, per the requirements of the
  VFX Platform for CY2023 and CY2024.
  Bug fixes and minor enhancements:
  - PR #1935, Prevent trying to use AVX instructions on certain
    CPUs that don't support them
  - PR #1933, Add manylinux_2_28 Python wheels for compliance with
    the current VFX Platform libstdc++ ABI
  - PR #1929, Fix ssse3 detection typo
  - PR #1921, Fix build break with custom PyString installs by
    always using system include pystring.h
  - PR #1924, Fix narrowing conversion error in unit test on
    riscv64
  - PR #1925, Enhance the ociochecklut command-line tool to print
    the output after each step
- drop a95febc7.patch: fixed in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727784000">- Update to 2.4.0
  This is the main new feature release for this year and is the
  base version for the CY2025 VFX Reference Platform (which
  specifies 2.4.x).
  The headline feature this year is a Preview Release of ACES 2
  Output Transform support. This is a work-in-progress and we
  anticipate that both the processing results and the API will
  likely change somewhat before it is finalized. Our goal is to do
  that by the end of the year in a 2.4.x release.
  Ideally, application developers will introduce 2.4.0 into their
  testing programs now and then update to the latest 2.4.x release
  available before shipping next year.
  This documentation page explains the new features in this
  release.
  - Major new features:
  - PR #1983, ACES 2 Output Transforms
  - PR #2039, Add updated CG and Studio configs for ACES 1.3
  - PR #1941, Builtin Transform for Apple Log
  - PR #1914, OCIOView: Chromaticities inspector
  - PR #1932, Add AVX512 accelerated LUT1D and LUT3D
  - PR #2029, Add new FixedFunction and Builtin Transforms
  - Bug fixes and minor enhancements:
  - PR #1988, Add NamedTransform support for ocioconvert
  - PR #2051, Add DCDM displays and improve HLG OOTF
    implementation
  - PR #2052, Add Wheels for Python 3.13
  - PR #2006, OCIOView: App mode, tests, color space menus, bug
    fixes
  - PR #1966, OCIOView: Updates &amp; fixes
  - PR #1985, OCIOView: Fix color_space_to_rgb_colourspace
    function usage
  - PR #1962, Add function to check if an extension is supported
    by FileTransform
  - PR #2059, Add hasAlias method to ColorSpace and
    NamedTransform
  - PR #2038, Add bit-depth flag to ocioconvert
  - PR #1981, Modify half-domain LUT1D GPU shader to improve zero
    handling
  - PR #1976, Allow read and write of file rules without color
    space validation
  - PR #2026, Update supported apps info for Photoshop and After
    Effects
  - PR #2022, Add Photoshop Beta support section to documentation
  - PR #2025, Remove legacy Photoshop and After Effects plug-ins
  - PR #2062, Add Python usage example for viewing pipeline on
    CPU
  - PR #2037, Add TouchDesigner to supported apps list
  - PR #2024, Fix typo in documentation
  - PR #1989, Improve GradingPrimary documentation
  - PR #2020, Allow building with gcc-15
  - PR #2019, Harden test temp folder handling
  - PR #1987, Use the correct locale include for Darwin
  - PR #1977, TSC &amp; Committer update, add Mark &amp; Cuneyt, create
    an emeritus section
  - PR #1961, Replaced deprecated Carbon framework with ColorSync
    and CoreGraphics
  - PR #1960, Add ociocpuinfo utility
  - PR #1950, Fix CPU unit test failures on recent macOS ARM
    platforms
  - PR #2060, Update documentation for 2.4 release
  - Build process enhancements:
  - PR #2053, Add Docker images for VFX Platform 2024 to CI
  - PR #2058, Fix Platform Latest CI
  - PR #2028, Add config file to fix ReadTheDocs builds
  - PR #1990, Fix for GitHub Actions node.js glibc issue
  - PR #1986, Improve minizip-ng installer CMake
  - PR #1945, Various CI workflow fixes
  - PR #1980, Improve Windows batch files to find installed
    Visual Studio location</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734004800">- Update to 2.4.1
  This is an ABI-compatible update for the 2.4.x series that
  includes all fixes since the 2.4.0 release.
  The ACES 2 implementation is still considered a Preview Release.
  OCIO contributors are working closely with the ACES 2 Output
  Transforms working group and a 2.4.2 release is planned for early
  March to finalize the ACES 2 algorithm implementation. A preview
  of the ACES 2 config files (compatible with OCIO 2.4.1) is
  available here.
  - Bug fixes and minor enhancements:
  - PR #2068, Fix views/display sub-menus in OCIO Display app for
    ACES 2 compatibility
  - PR #2095, Add "DISPLAY - CIE-XYZ-D65_to_DisplayP3-HDR"
    built-in transform
  - PR #2104, Optimizer detects pair inverses before combining
    multiple op pairs
  - PR #2074, Text format (e.g., Iridas cube) parsing
    optimizations
  - PR #2106, Fix Python wheel macOS workflow and make
    OCIO_PYTHON_LOAD_DLLS_FROM_PATH opt-in
  - PR #2090, Fix bit-depth attribute for inverse LUTs when
    writing CTFs
  - PR #2078, Added more accurate DX11 HLSL shading language enum
    name
  - PR #2077, Match ACES 2.0 shader resource suffix format to
    regular LUTs
  - PR #2096, Fixed range function error in nuke colorlookup
    examples
  - Build, documentation, and website enhancements:
  - PR #2072, Enable parallel source file compilation on MSVC
  - PR #2085, Update doc building instructions
  - PR #2084, Photoshop now supports OCIO
  - PR #2088, Add Disguise to list of supported applications
  - PR #2069, Move GPU LUT files into the tests dir
  - PR #2102, Fix broken Linux and Mac CI workflow</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734091200">- apparently the 2.4.0 tarball for a moment had the version set to
  2.5.0 when i grabbed it. now it was fixed down to 2.4.x again.
  so the soversion is downgraded again to 2.4
  https://github.com/AcademySoftwareFoundation/OpenColorIO/issues/2073</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Lock OpenImageIO to &lt; 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739620800">- bump openexr to &gt;= 3 match the rest of the stack
- Have an explicite BR for pkgconfig(Imath) and do not rely on it
  being pulled via openexr</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- Update to 2.4.2
  This is an ABI-compatible update for the 2.4.x series that
  includes all fixes and enhancements since the 2.4.1 release.
  With the 2.4.2 release, the "Preview" label is now removed from
  the ACES 2 implementation. After extensive collaboration with the
  ACES Output Transform working group, and our own testing, ACES 2
  support in OCIO is now officially released. We will continue to
  closely monitor your feedback on this new tech.
  A large part of the work since the 2.4.1 release was an attempt
  to optimize the ACES 2 algorithms. ACES 2 is still substantially
  slower than ACES 1 on CPU and somewhat slower on GPU. But the
  optimization efforts did yield a roughly 25% speedup over the
  2.4.1 release, along with a simplification of the code. Special
  thanks to Kevin Wheatley and Remi Achard for leading this work.
  In conjunction with the 2.4.2 release, the OCIO ACES configs
  working group has released the ACES 2.0 configs for OCIO. Special
  thanks to Thomas Mansencal for leading this work. The configs are
  not yet built into the library itself and may be downloaded from
  this link.
  Bug fixes and enhancements:
  - PR #2127, ACES 2.0 Output Transform performance optimization
  - PR #2112, Absolute paths not working through ConfigIOProxy
  - PR #2128, Add missing setConfigIOProxy call to the Python API
  - PR #2117, Fix metal backend's generated shaders with
    float/int/constant array performance
  - PR #2121, Integrate matrix multiplication fix from OSL
  - PR #2120, Change recommended Imath version to 3.1.12
  - PR #2109, Fix issue with ocio_depts handling spaces in file
    paths
  - PR #2132, NaN fix for the ACES 2 inverse output transforms</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Allow newer OpenImageIO in ocio_tools</changelog>
</package>
<package pkgid="21010205a050c2c38922e2caf15fbedeebcf270ecb4d89310ddccb4217fbc3f1546d72c8cee4a8075c5b6265e154ae59831d0686077950dd43957f8480a7bf8d" name="OpenColorIO-tools" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.2"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1705665600">- Upstreamed patches 0001-Fix-detection-of-yaml-cpp-0.8.patch
  and gcc12_fix.patch removed</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1706097600">- Add patch to fix build on aarch64:
  * a95febc7.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1716552000">- Update to 2.3.2
  This is an ABI-compatible update for the 2.3.x series that
  includes all fixes since the 2.3.1 release.
  In particular, this release fixes two crashes:
  Certain older (generally 7-12 year old) CPUs including Intel
  x86-64 (Sandy Bridge and Ivy Bridge) and Intel Atom
  (Goldmont/Apollo Lake) microarchitectures that support SSE 4.2
  SIMD instructions but do not support the initial AVX set and
  XSAVE, or other CPUs where the OS has disabled AVX and XSAVE
  support, will crash when trying to evaluate a Lut1D or Lut3D in
  OCIO libraries compiled with SSE enabled (which is the default).
  More recent CPUs (e.g., those supporting AVX2 or higher) should
  not be affected.
  Users of the Linux Python bindings via PyPI will crash when
  trying to use OCIO from within another application that has been
  compiled with the new libstdc++ ABI, per the requirements of the
  VFX Platform for CY2023 and CY2024.
  Bug fixes and minor enhancements:
  - PR #1935, Prevent trying to use AVX instructions on certain
    CPUs that don't support them
  - PR #1933, Add manylinux_2_28 Python wheels for compliance with
    the current VFX Platform libstdc++ ABI
  - PR #1929, Fix ssse3 detection typo
  - PR #1921, Fix build break with custom PyString installs by
    always using system include pystring.h
  - PR #1924, Fix narrowing conversion error in unit test on
    riscv64
  - PR #1925, Enhance the ociochecklut command-line tool to print
    the output after each step
- drop a95febc7.patch: fixed in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1727784000">- Update to 2.4.0
  This is the main new feature release for this year and is the
  base version for the CY2025 VFX Reference Platform (which
  specifies 2.4.x).
  The headline feature this year is a Preview Release of ACES 2
  Output Transform support. This is a work-in-progress and we
  anticipate that both the processing results and the API will
  likely change somewhat before it is finalized. Our goal is to do
  that by the end of the year in a 2.4.x release.
  Ideally, application developers will introduce 2.4.0 into their
  testing programs now and then update to the latest 2.4.x release
  available before shipping next year.
  This documentation page explains the new features in this
  release.
  - Major new features:
  - PR #1983, ACES 2 Output Transforms
  - PR #2039, Add updated CG and Studio configs for ACES 1.3
  - PR #1941, Builtin Transform for Apple Log
  - PR #1914, OCIOView: Chromaticities inspector
  - PR #1932, Add AVX512 accelerated LUT1D and LUT3D
  - PR #2029, Add new FixedFunction and Builtin Transforms
  - Bug fixes and minor enhancements:
  - PR #1988, Add NamedTransform support for ocioconvert
  - PR #2051, Add DCDM displays and improve HLG OOTF
    implementation
  - PR #2052, Add Wheels for Python 3.13
  - PR #2006, OCIOView: App mode, tests, color space menus, bug
    fixes
  - PR #1966, OCIOView: Updates &amp; fixes
  - PR #1985, OCIOView: Fix color_space_to_rgb_colourspace
    function usage
  - PR #1962, Add function to check if an extension is supported
    by FileTransform
  - PR #2059, Add hasAlias method to ColorSpace and
    NamedTransform
  - PR #2038, Add bit-depth flag to ocioconvert
  - PR #1981, Modify half-domain LUT1D GPU shader to improve zero
    handling
  - PR #1976, Allow read and write of file rules without color
    space validation
  - PR #2026, Update supported apps info for Photoshop and After
    Effects
  - PR #2022, Add Photoshop Beta support section to documentation
  - PR #2025, Remove legacy Photoshop and After Effects plug-ins
  - PR #2062, Add Python usage example for viewing pipeline on
    CPU
  - PR #2037, Add TouchDesigner to supported apps list
  - PR #2024, Fix typo in documentation
  - PR #1989, Improve GradingPrimary documentation
  - PR #2020, Allow building with gcc-15
  - PR #2019, Harden test temp folder handling
  - PR #1987, Use the correct locale include for Darwin
  - PR #1977, TSC &amp; Committer update, add Mark &amp; Cuneyt, create
    an emeritus section
  - PR #1961, Replaced deprecated Carbon framework with ColorSync
    and CoreGraphics
  - PR #1960, Add ociocpuinfo utility
  - PR #1950, Fix CPU unit test failures on recent macOS ARM
    platforms
  - PR #2060, Update documentation for 2.4 release
  - Build process enhancements:
  - PR #2053, Add Docker images for VFX Platform 2024 to CI
  - PR #2058, Fix Platform Latest CI
  - PR #2028, Add config file to fix ReadTheDocs builds
  - PR #1990, Fix for GitHub Actions node.js glibc issue
  - PR #1986, Improve minizip-ng installer CMake
  - PR #1945, Various CI workflow fixes
  - PR #1980, Improve Windows batch files to find installed
    Visual Studio location</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734004800">- Update to 2.4.1
  This is an ABI-compatible update for the 2.4.x series that
  includes all fixes since the 2.4.0 release.
  The ACES 2 implementation is still considered a Preview Release.
  OCIO contributors are working closely with the ACES 2 Output
  Transforms working group and a 2.4.2 release is planned for early
  March to finalize the ACES 2 algorithm implementation. A preview
  of the ACES 2 config files (compatible with OCIO 2.4.1) is
  available here.
  - Bug fixes and minor enhancements:
  - PR #2068, Fix views/display sub-menus in OCIO Display app for
    ACES 2 compatibility
  - PR #2095, Add "DISPLAY - CIE-XYZ-D65_to_DisplayP3-HDR"
    built-in transform
  - PR #2104, Optimizer detects pair inverses before combining
    multiple op pairs
  - PR #2074, Text format (e.g., Iridas cube) parsing
    optimizations
  - PR #2106, Fix Python wheel macOS workflow and make
    OCIO_PYTHON_LOAD_DLLS_FROM_PATH opt-in
  - PR #2090, Fix bit-depth attribute for inverse LUTs when
    writing CTFs
  - PR #2078, Added more accurate DX11 HLSL shading language enum
    name
  - PR #2077, Match ACES 2.0 shader resource suffix format to
    regular LUTs
  - PR #2096, Fixed range function error in nuke colorlookup
    examples
  - Build, documentation, and website enhancements:
  - PR #2072, Enable parallel source file compilation on MSVC
  - PR #2085, Update doc building instructions
  - PR #2084, Photoshop now supports OCIO
  - PR #2088, Add Disguise to list of supported applications
  - PR #2069, Move GPU LUT files into the tests dir
  - PR #2102, Fix broken Linux and Mac CI workflow</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1734091200">- apparently the 2.4.0 tarball for a moment had the version set to
  2.5.0 when i grabbed it. now it was fixed down to 2.4.x again.
  so the soversion is downgraded again to 2.4
  https://github.com/AcademySoftwareFoundation/OpenColorIO/issues/2073</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Lock OpenImageIO to &lt; 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739620800">- bump openexr to &gt;= 3 match the rest of the stack
- Have an explicite BR for pkgconfig(Imath) and do not rely on it
  being pulled via openexr</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- Update to 2.4.2
  This is an ABI-compatible update for the 2.4.x series that
  includes all fixes and enhancements since the 2.4.1 release.
  With the 2.4.2 release, the "Preview" label is now removed from
  the ACES 2 implementation. After extensive collaboration with the
  ACES Output Transform working group, and our own testing, ACES 2
  support in OCIO is now officially released. We will continue to
  closely monitor your feedback on this new tech.
  A large part of the work since the 2.4.1 release was an attempt
  to optimize the ACES 2 algorithms. ACES 2 is still substantially
  slower than ACES 1 on CPU and somewhat slower on GPU. But the
  optimization efforts did yield a roughly 25% speedup over the
  2.4.1 release, along with a simplification of the code. Special
  thanks to Kevin Wheatley and Remi Achard for leading this work.
  In conjunction with the 2.4.2 release, the OCIO ACES configs
  working group has released the ACES 2.0 configs for OCIO. Special
  thanks to Thomas Mansencal for leading this work. The configs are
  not yet built into the library itself and may be downloaded from
  this link.
  Bug fixes and enhancements:
  - PR #2127, ACES 2.0 Output Transform performance optimization
  - PR #2112, Absolute paths not working through ConfigIOProxy
  - PR #2128, Add missing setConfigIOProxy call to the Python API
  - PR #2117, Fix metal backend's generated shaders with
    float/int/constant array performance
  - PR #2121, Integrate matrix multiplication fix from OSL
  - PR #2120, Change recommended Imath version to 3.1.12
  - PR #2109, Fix issue with ocio_depts handling spaces in file
    paths
  - PR #2132, NaN fix for the ACES 2 inverse output transforms</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Allow newer OpenImageIO in ocio_tools</changelog>
</package>
<package pkgid="daba23b9a27cf490388133ed69c3f5a9ac0858151a033fb6c0c56f4cb3a0d6f7321bde759db5c2c6a0081cd296e1c3eb1251f8af70dfbd56f594121798adae3b" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.36.56+git.0a3a991" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
  <changelog author="trenn@suse.de" date="1634040000">- Fix file conflict with old python2 version (bsc#1190999):
  found conflict of OpenIPMI-python-2.0.25-7.3.1.x86_64 with OpenIPMI-python3-2.0.31-1.1.x86_64
  /usr/bin/openipmigui
  /usr/share/man/man1/openipmigui.1.gz</changelog>
  <changelog author="jengelh@inai.de" date="1651147200">- Resolve rpmlint report "libOpenIPMI0.x86_64: E:
  shlib-policy-name-error SONAME: libOpenIPMIui.so.1, expected
  package suffix: 1"
- Trim manual library Provides. Prospective users (packages) ought
  to let rpm find the dependencies (and their name is usually
  "libIPMIlanserv.so.0()(64bit)" not "libIPMIlanserv".</changelog>
  <changelog author="code@bnavigator.de" date="1652097600">- Add OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  which updates m4/ax_python_devel.m4 to serial25, retaining
  upstreams PYTHON_VERSION addition, before the bootstrap runs
  automake, because the new serial 25 can deal with
  Python 3.10 version strings and deprecation of distutils.</changelog>
  <changelog author="trenn@suse.de" date="1652184000">- Update to version 2.0.32.3+git.05faa36e:
  * entity: Handle NULL entity in internal_fru_fetch_done()
  * entity: Keep the entity around duringa FRU fetch
  * Move to version 2.0.32
  * Fix readline and python support
  * sol: Fix multiple flush queuing issue
- Patches that are mainline:
  D    fix-conversions.patch
  D    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch
  D    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  D    OpenIPMI-no-return-in-nonvoid-function.patch
- Refreshed patches not yet mainline:
  M    openipmi-tinfo.patch
  M    fix_dia_version_detection.patch</changelog>
  <changelog author="mjambor@suse.com" date="1718712000">- Add OpenIPMI-c99.patch in order to make the package buildable with
  GCC 14.  Patch comes from upstream
  https://sourceforge.net/p/openipmi/patches/38/ [[boo#1225871]]</changelog>
  <changelog author="trenn@suse.de" date="1727265600">- Fix bsc#1229910 CVE-2024-42934 by below 2 patches:
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Check some bounds on incoming messages
- Remove mainlined patches:
  D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  D OpenIPMI-c99.patch
- Update to version 2.0.36.4+git.c114912:
  * strings: Fix an incorrect string in sensor type 0x1f
  * lanserv: Check that message and negotiated authtypes are the same
  * Update some strings for newer IPMI standards
  * Fix error report in startup_set_sel_time
  * Move to version 2.0.36
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Fix an issue logging an error on a message
  * include: Add a doc for the lifetime of ipmi_entity_get_fru()
  * Move to version 2.0.35
  * lanserv: Check some bounds on incoming messages
  * Create SECURITY.md
  * swig: Cast some values to get proper passing of values
  * sample: Fix an snprintf overflow issue
  * ui: Fix an snprintf overflow issue
  * Add github actions
  * cmdlang: Remove yet more dead code
  * swig: Remove a double free
  * ui: More print issues
  * sensor: Remove more dead code
  * swig: Fix more resource leaks
  * Finish up error updates
  * ui: Fix a ton of formatting errors
  * cmdlang: Remove some dead code
  * cmdlang: Remove some dead code
  * cmdlang: Remove an unneeded if
  * cmdlang: Remove an unnecessary loop
  * cmdlang: Remove some dead code
  * lanserv: Fix an invalid overlapping copy
  * lanserv: Add a missing break for watchdog handling
  * lanserv: Add a check for the picmg address controller not found
  * lanserv: Add a missing NULL pointer check
  * lanserv: Fix an error report
  * lanserv: Fix an unsigned compare issue
  * lanserv: Remove some dead code
  * lanserv: Fix reading persistance data
  * domain: Fix some various bugs
  * entity: Fix a ordering check issue
  * fru: Remove unnecessary check
  * smi: Remove some dead code
  * utils: Fix address comparison
  * fru: Fix record with possible NULL data
  * mc: Fix sel re-fetch
  * atca: Fix some various issues
  * oem_motorola_mxp: Fix some minor issues
  * control,sensor: Fix some string handling
  * sel: Add a missing NULL check
  * sample: Remove some dead code
  * sensor: Fix some wrong sizes
  * tcl: Fix an infinite loop
  * swig: Fix a wrong malloc size
  * lanserv: Fix a memory leak in sdrcomp
  * unix: Add missing unlock on an error handler
  * unix: Cast a variable to int from time()
  * swig: Fix issues with memory handling
  * Don't run perl tests in parallel
  * C type errors in the SWIG-generated Perl bindings
  * Move to version 2.0.34
  * swig:perl: Fix the tests
  * swig:perl: Add a way to print the test environment
  * lanserv: Allow zero to be specified for the port
  * lanserv: Return an error if sensor data is requested before ready
  * unix: Handle EAGAIN along with EINTR
  * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading
  * fix coredump when use ipmi_ui
  * Fix the name of global event support for sensors
  * Update configure.ac
  * Move to version 2.0.33
  * exec: fix race in symlink install
  * Make lan.conf and simulator startup file 600 permissions
  * Update the python m4 file
  * Avoid searching host library path</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.36.56+git.0a3a991:
  * lanserv: Mark serial channels special
  * sol: Refcount sol instance in ipmid_changed
  * lanserv: Set the channel info accurately for system interface
  * lanserv: Allow serial IPMI connections on channels besides 15
  * lanserv: Add limits to the receive queue
  * lanserv: Add timing for messages
  * lanserv: Fix a bug in response handling for LAN messages
  * lanserv: Yet another message dup bug
  * lanserv: Fix a bug in message duplication
  * lanserv: Remove one more unnecessary memset
  * lanserv: Remove unnecessary memsets
  * lanserv: Add the cmd to the things check for response matching
  * lanserv: Add a function to allocate and free message
  * lanserv: Fix a memory leak
  * lanserv: Don't allocate a new message for SMI handling
  * lanserv: Rework naming and message handling a bit
  * lanserv: More malloc/free cleanups
  * lanserv: Clean up memory handling
  * lanserv: Remove functions from channel and use sysinfo
  * lanserv: Create and use a message queue type
  * lanserv: Separate out the receive queue
  * lanserv: Reduce the size of the sim_addr_t passed around
  * lanserv: Get lun 2 commands working
  * lanserv: Rework receive queue to not have a dummy first byte
  * lanserv: More message routing work
  * lanserv: More work on the message routing
  * lanserv: More rework
  * lanserv: More work on restructure
  * lanserv: Rework address names
  * lanserv: More restructuring on message handling
  * lanserv: Move check_msg_length() to serv.c
  * lanserv: Round-robin sessions
  * lanserv: Rework the send message handling
  * lan: Don't set reponse LUN to 2 in bridged messages
  * lanserv: Allow RMCP authtype for no session messages
  * github: Add readline to the dependencies
  * Remove support for UCD SNMP
  * ipmish: Fix snmp trap handling
  * lanserv: Use ssize_t for the return value of read()
  * lanserv: Get rid of the rmcpplus session member
  * lanserv: Preserve handle when clearing session data
  * lanserv: Don't allow user 0 to be configured
  * utils:md5: Handle data for md5 cannot be NULL
  * lanserv: Validate message ordering at authentication
  * lanserv: Don't assign session privilege until after auth is done
  * lanserv: Clear out session data on a close
  * utils: Check for NULL before freeing MD5 data
  * lib:lan: Reject a zero sid
  * sample: Fix data parsing in ipmicmd
  * ui: Pass in a sockaddr_in to SNMP trap handler
  * Fix gen_random()
  * lanserv: Check that authdata is initialized before cleanup</changelog>
</package>
<package pkgid="9a91b14b3b65ca2767a6e9f8c5a67b25659c39a4ccb60709155ed47059964c2e3ecdc0c2de48f04b080a97ee351856cc49bba78ac6f64852f62960c2b207e803" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.36.56+git.0a3a991" rel="160000.3.1"/>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
  <changelog author="trenn@suse.de" date="1634040000">- Fix file conflict with old python2 version (bsc#1190999):
  found conflict of OpenIPMI-python-2.0.25-7.3.1.x86_64 with OpenIPMI-python3-2.0.31-1.1.x86_64
  /usr/bin/openipmigui
  /usr/share/man/man1/openipmigui.1.gz</changelog>
  <changelog author="jengelh@inai.de" date="1651147200">- Resolve rpmlint report "libOpenIPMI0.x86_64: E:
  shlib-policy-name-error SONAME: libOpenIPMIui.so.1, expected
  package suffix: 1"
- Trim manual library Provides. Prospective users (packages) ought
  to let rpm find the dependencies (and their name is usually
  "libIPMIlanserv.so.0()(64bit)" not "libIPMIlanserv".</changelog>
  <changelog author="code@bnavigator.de" date="1652097600">- Add OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  which updates m4/ax_python_devel.m4 to serial25, retaining
  upstreams PYTHON_VERSION addition, before the bootstrap runs
  automake, because the new serial 25 can deal with
  Python 3.10 version strings and deprecation of distutils.</changelog>
  <changelog author="trenn@suse.de" date="1652184000">- Update to version 2.0.32.3+git.05faa36e:
  * entity: Handle NULL entity in internal_fru_fetch_done()
  * entity: Keep the entity around duringa FRU fetch
  * Move to version 2.0.32
  * Fix readline and python support
  * sol: Fix multiple flush queuing issue
- Patches that are mainline:
  D    fix-conversions.patch
  D    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch
  D    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  D    OpenIPMI-no-return-in-nonvoid-function.patch
- Refreshed patches not yet mainline:
  M    openipmi-tinfo.patch
  M    fix_dia_version_detection.patch</changelog>
  <changelog author="mjambor@suse.com" date="1718712000">- Add OpenIPMI-c99.patch in order to make the package buildable with
  GCC 14.  Patch comes from upstream
  https://sourceforge.net/p/openipmi/patches/38/ [[boo#1225871]]</changelog>
  <changelog author="trenn@suse.de" date="1727265600">- Fix bsc#1229910 CVE-2024-42934 by below 2 patches:
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Check some bounds on incoming messages
- Remove mainlined patches:
  D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  D OpenIPMI-c99.patch
- Update to version 2.0.36.4+git.c114912:
  * strings: Fix an incorrect string in sensor type 0x1f
  * lanserv: Check that message and negotiated authtypes are the same
  * Update some strings for newer IPMI standards
  * Fix error report in startup_set_sel_time
  * Move to version 2.0.36
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Fix an issue logging an error on a message
  * include: Add a doc for the lifetime of ipmi_entity_get_fru()
  * Move to version 2.0.35
  * lanserv: Check some bounds on incoming messages
  * Create SECURITY.md
  * swig: Cast some values to get proper passing of values
  * sample: Fix an snprintf overflow issue
  * ui: Fix an snprintf overflow issue
  * Add github actions
  * cmdlang: Remove yet more dead code
  * swig: Remove a double free
  * ui: More print issues
  * sensor: Remove more dead code
  * swig: Fix more resource leaks
  * Finish up error updates
  * ui: Fix a ton of formatting errors
  * cmdlang: Remove some dead code
  * cmdlang: Remove some dead code
  * cmdlang: Remove an unneeded if
  * cmdlang: Remove an unnecessary loop
  * cmdlang: Remove some dead code
  * lanserv: Fix an invalid overlapping copy
  * lanserv: Add a missing break for watchdog handling
  * lanserv: Add a check for the picmg address controller not found
  * lanserv: Add a missing NULL pointer check
  * lanserv: Fix an error report
  * lanserv: Fix an unsigned compare issue
  * lanserv: Remove some dead code
  * lanserv: Fix reading persistance data
  * domain: Fix some various bugs
  * entity: Fix a ordering check issue
  * fru: Remove unnecessary check
  * smi: Remove some dead code
  * utils: Fix address comparison
  * fru: Fix record with possible NULL data
  * mc: Fix sel re-fetch
  * atca: Fix some various issues
  * oem_motorola_mxp: Fix some minor issues
  * control,sensor: Fix some string handling
  * sel: Add a missing NULL check
  * sample: Remove some dead code
  * sensor: Fix some wrong sizes
  * tcl: Fix an infinite loop
  * swig: Fix a wrong malloc size
  * lanserv: Fix a memory leak in sdrcomp
  * unix: Add missing unlock on an error handler
  * unix: Cast a variable to int from time()
  * swig: Fix issues with memory handling
  * Don't run perl tests in parallel
  * C type errors in the SWIG-generated Perl bindings
  * Move to version 2.0.34
  * swig:perl: Fix the tests
  * swig:perl: Add a way to print the test environment
  * lanserv: Allow zero to be specified for the port
  * lanserv: Return an error if sensor data is requested before ready
  * unix: Handle EAGAIN along with EINTR
  * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading
  * fix coredump when use ipmi_ui
  * Fix the name of global event support for sensors
  * Update configure.ac
  * Move to version 2.0.33
  * exec: fix race in symlink install
  * Make lan.conf and simulator startup file 600 permissions
  * Update the python m4 file
  * Avoid searching host library path</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.36.56+git.0a3a991:
  * lanserv: Mark serial channels special
  * sol: Refcount sol instance in ipmid_changed
  * lanserv: Set the channel info accurately for system interface
  * lanserv: Allow serial IPMI connections on channels besides 15
  * lanserv: Add limits to the receive queue
  * lanserv: Add timing for messages
  * lanserv: Fix a bug in response handling for LAN messages
  * lanserv: Yet another message dup bug
  * lanserv: Fix a bug in message duplication
  * lanserv: Remove one more unnecessary memset
  * lanserv: Remove unnecessary memsets
  * lanserv: Add the cmd to the things check for response matching
  * lanserv: Add a function to allocate and free message
  * lanserv: Fix a memory leak
  * lanserv: Don't allocate a new message for SMI handling
  * lanserv: Rework naming and message handling a bit
  * lanserv: More malloc/free cleanups
  * lanserv: Clean up memory handling
  * lanserv: Remove functions from channel and use sysinfo
  * lanserv: Create and use a message queue type
  * lanserv: Separate out the receive queue
  * lanserv: Reduce the size of the sim_addr_t passed around
  * lanserv: Get lun 2 commands working
  * lanserv: Rework receive queue to not have a dummy first byte
  * lanserv: More message routing work
  * lanserv: More work on the message routing
  * lanserv: More rework
  * lanserv: More work on restructure
  * lanserv: Rework address names
  * lanserv: More restructuring on message handling
  * lanserv: Move check_msg_length() to serv.c
  * lanserv: Round-robin sessions
  * lanserv: Rework the send message handling
  * lan: Don't set reponse LUN to 2 in bridged messages
  * lanserv: Allow RMCP authtype for no session messages
  * github: Add readline to the dependencies
  * Remove support for UCD SNMP
  * ipmish: Fix snmp trap handling
  * lanserv: Use ssize_t for the return value of read()
  * lanserv: Get rid of the rmcpplus session member
  * lanserv: Preserve handle when clearing session data
  * lanserv: Don't allow user 0 to be configured
  * utils:md5: Handle data for md5 cannot be NULL
  * lanserv: Validate message ordering at authentication
  * lanserv: Don't assign session privilege until after auth is done
  * lanserv: Clear out session data on a close
  * utils: Check for NULL before freeing MD5 data
  * lib:lan: Reject a zero sid
  * sample: Fix data parsing in ipmicmd
  * ui: Pass in a sockaddr_in to SNMP trap handler
  * Fix gen_random()
  * lanserv: Check that authdata is initialized before cleanup</changelog>
  <changelog author="trenn@suse.com" date="1777204800">- Adopt path to executable in systemd service file (bsc#1252941)</changelog>
</package>
<package pkgid="24d26c0a57bf301ead2814c0ff94f54c23e2e195047f4ce1a0614c2b451d0be4e516d6bcc31bf0a30681976077c4f25346fd3df70f9197cf5269e7b24126e73b" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.36.56+git.0a3a991" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
  <changelog author="trenn@suse.de" date="1634040000">- Fix file conflict with old python2 version (bsc#1190999):
  found conflict of OpenIPMI-python-2.0.25-7.3.1.x86_64 with OpenIPMI-python3-2.0.31-1.1.x86_64
  /usr/bin/openipmigui
  /usr/share/man/man1/openipmigui.1.gz</changelog>
  <changelog author="jengelh@inai.de" date="1651147200">- Resolve rpmlint report "libOpenIPMI0.x86_64: E:
  shlib-policy-name-error SONAME: libOpenIPMIui.so.1, expected
  package suffix: 1"
- Trim manual library Provides. Prospective users (packages) ought
  to let rpm find the dependencies (and their name is usually
  "libIPMIlanserv.so.0()(64bit)" not "libIPMIlanserv".</changelog>
  <changelog author="code@bnavigator.de" date="1652097600">- Add OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  which updates m4/ax_python_devel.m4 to serial25, retaining
  upstreams PYTHON_VERSION addition, before the bootstrap runs
  automake, because the new serial 25 can deal with
  Python 3.10 version strings and deprecation of distutils.</changelog>
  <changelog author="trenn@suse.de" date="1652184000">- Update to version 2.0.32.3+git.05faa36e:
  * entity: Handle NULL entity in internal_fru_fetch_done()
  * entity: Keep the entity around duringa FRU fetch
  * Move to version 2.0.32
  * Fix readline and python support
  * sol: Fix multiple flush queuing issue
- Patches that are mainline:
  D    fix-conversions.patch
  D    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch
  D    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  D    OpenIPMI-no-return-in-nonvoid-function.patch
- Refreshed patches not yet mainline:
  M    openipmi-tinfo.patch
  M    fix_dia_version_detection.patch</changelog>
  <changelog author="mjambor@suse.com" date="1718712000">- Add OpenIPMI-c99.patch in order to make the package buildable with
  GCC 14.  Patch comes from upstream
  https://sourceforge.net/p/openipmi/patches/38/ [[boo#1225871]]</changelog>
  <changelog author="trenn@suse.de" date="1727265600">- Fix bsc#1229910 CVE-2024-42934 by below 2 patches:
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Check some bounds on incoming messages
- Remove mainlined patches:
  D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  D OpenIPMI-c99.patch
- Update to version 2.0.36.4+git.c114912:
  * strings: Fix an incorrect string in sensor type 0x1f
  * lanserv: Check that message and negotiated authtypes are the same
  * Update some strings for newer IPMI standards
  * Fix error report in startup_set_sel_time
  * Move to version 2.0.36
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Fix an issue logging an error on a message
  * include: Add a doc for the lifetime of ipmi_entity_get_fru()
  * Move to version 2.0.35
  * lanserv: Check some bounds on incoming messages
  * Create SECURITY.md
  * swig: Cast some values to get proper passing of values
  * sample: Fix an snprintf overflow issue
  * ui: Fix an snprintf overflow issue
  * Add github actions
  * cmdlang: Remove yet more dead code
  * swig: Remove a double free
  * ui: More print issues
  * sensor: Remove more dead code
  * swig: Fix more resource leaks
  * Finish up error updates
  * ui: Fix a ton of formatting errors
  * cmdlang: Remove some dead code
  * cmdlang: Remove some dead code
  * cmdlang: Remove an unneeded if
  * cmdlang: Remove an unnecessary loop
  * cmdlang: Remove some dead code
  * lanserv: Fix an invalid overlapping copy
  * lanserv: Add a missing break for watchdog handling
  * lanserv: Add a check for the picmg address controller not found
  * lanserv: Add a missing NULL pointer check
  * lanserv: Fix an error report
  * lanserv: Fix an unsigned compare issue
  * lanserv: Remove some dead code
  * lanserv: Fix reading persistance data
  * domain: Fix some various bugs
  * entity: Fix a ordering check issue
  * fru: Remove unnecessary check
  * smi: Remove some dead code
  * utils: Fix address comparison
  * fru: Fix record with possible NULL data
  * mc: Fix sel re-fetch
  * atca: Fix some various issues
  * oem_motorola_mxp: Fix some minor issues
  * control,sensor: Fix some string handling
  * sel: Add a missing NULL check
  * sample: Remove some dead code
  * sensor: Fix some wrong sizes
  * tcl: Fix an infinite loop
  * swig: Fix a wrong malloc size
  * lanserv: Fix a memory leak in sdrcomp
  * unix: Add missing unlock on an error handler
  * unix: Cast a variable to int from time()
  * swig: Fix issues with memory handling
  * Don't run perl tests in parallel
  * C type errors in the SWIG-generated Perl bindings
  * Move to version 2.0.34
  * swig:perl: Fix the tests
  * swig:perl: Add a way to print the test environment
  * lanserv: Allow zero to be specified for the port
  * lanserv: Return an error if sensor data is requested before ready
  * unix: Handle EAGAIN along with EINTR
  * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading
  * fix coredump when use ipmi_ui
  * Fix the name of global event support for sensors
  * Update configure.ac
  * Move to version 2.0.33
  * exec: fix race in symlink install
  * Make lan.conf and simulator startup file 600 permissions
  * Update the python m4 file
  * Avoid searching host library path</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.36.56+git.0a3a991:
  * lanserv: Mark serial channels special
  * sol: Refcount sol instance in ipmid_changed
  * lanserv: Set the channel info accurately for system interface
  * lanserv: Allow serial IPMI connections on channels besides 15
  * lanserv: Add limits to the receive queue
  * lanserv: Add timing for messages
  * lanserv: Fix a bug in response handling for LAN messages
  * lanserv: Yet another message dup bug
  * lanserv: Fix a bug in message duplication
  * lanserv: Remove one more unnecessary memset
  * lanserv: Remove unnecessary memsets
  * lanserv: Add the cmd to the things check for response matching
  * lanserv: Add a function to allocate and free message
  * lanserv: Fix a memory leak
  * lanserv: Don't allocate a new message for SMI handling
  * lanserv: Rework naming and message handling a bit
  * lanserv: More malloc/free cleanups
  * lanserv: Clean up memory handling
  * lanserv: Remove functions from channel and use sysinfo
  * lanserv: Create and use a message queue type
  * lanserv: Separate out the receive queue
  * lanserv: Reduce the size of the sim_addr_t passed around
  * lanserv: Get lun 2 commands working
  * lanserv: Rework receive queue to not have a dummy first byte
  * lanserv: More message routing work
  * lanserv: More work on the message routing
  * lanserv: More rework
  * lanserv: More work on restructure
  * lanserv: Rework address names
  * lanserv: More restructuring on message handling
  * lanserv: Move check_msg_length() to serv.c
  * lanserv: Round-robin sessions
  * lanserv: Rework the send message handling
  * lan: Don't set reponse LUN to 2 in bridged messages
  * lanserv: Allow RMCP authtype for no session messages
  * github: Add readline to the dependencies
  * Remove support for UCD SNMP
  * ipmish: Fix snmp trap handling
  * lanserv: Use ssize_t for the return value of read()
  * lanserv: Get rid of the rmcpplus session member
  * lanserv: Preserve handle when clearing session data
  * lanserv: Don't allow user 0 to be configured
  * utils:md5: Handle data for md5 cannot be NULL
  * lanserv: Validate message ordering at authentication
  * lanserv: Don't assign session privilege until after auth is done
  * lanserv: Clear out session data on a close
  * utils: Check for NULL before freeing MD5 data
  * lib:lan: Reject a zero sid
  * sample: Fix data parsing in ipmicmd
  * ui: Pass in a sockaddr_in to SNMP trap handler
  * Fix gen_random()
  * lanserv: Check that authdata is initialized before cleanup</changelog>
</package>
<package pkgid="15b9f8855e099f5217d05856dcc4cf4e9f08201568bf032c6f05fa4ec1fc6132060fee2a5887193ca1e6287b2f8942805072dbec860492b63f1ef06870d44a58" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.36.56+git.0a3a991" rel="160000.3.1"/>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
  <changelog author="trenn@suse.de" date="1634040000">- Fix file conflict with old python2 version (bsc#1190999):
  found conflict of OpenIPMI-python-2.0.25-7.3.1.x86_64 with OpenIPMI-python3-2.0.31-1.1.x86_64
  /usr/bin/openipmigui
  /usr/share/man/man1/openipmigui.1.gz</changelog>
  <changelog author="jengelh@inai.de" date="1651147200">- Resolve rpmlint report "libOpenIPMI0.x86_64: E:
  shlib-policy-name-error SONAME: libOpenIPMIui.so.1, expected
  package suffix: 1"
- Trim manual library Provides. Prospective users (packages) ought
  to let rpm find the dependencies (and their name is usually
  "libIPMIlanserv.so.0()(64bit)" not "libIPMIlanserv".</changelog>
  <changelog author="code@bnavigator.de" date="1652097600">- Add OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  which updates m4/ax_python_devel.m4 to serial25, retaining
  upstreams PYTHON_VERSION addition, before the bootstrap runs
  automake, because the new serial 25 can deal with
  Python 3.10 version strings and deprecation of distutils.</changelog>
  <changelog author="trenn@suse.de" date="1652184000">- Update to version 2.0.32.3+git.05faa36e:
  * entity: Handle NULL entity in internal_fru_fetch_done()
  * entity: Keep the entity around duringa FRU fetch
  * Move to version 2.0.32
  * Fix readline and python support
  * sol: Fix multiple flush queuing issue
- Patches that are mainline:
  D    fix-conversions.patch
  D    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch
  D    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  D    OpenIPMI-no-return-in-nonvoid-function.patch
- Refreshed patches not yet mainline:
  M    openipmi-tinfo.patch
  M    fix_dia_version_detection.patch</changelog>
  <changelog author="mjambor@suse.com" date="1718712000">- Add OpenIPMI-c99.patch in order to make the package buildable with
  GCC 14.  Patch comes from upstream
  https://sourceforge.net/p/openipmi/patches/38/ [[boo#1225871]]</changelog>
  <changelog author="trenn@suse.de" date="1727265600">- Fix bsc#1229910 CVE-2024-42934 by below 2 patches:
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Check some bounds on incoming messages
- Remove mainlined patches:
  D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  D OpenIPMI-c99.patch
- Update to version 2.0.36.4+git.c114912:
  * strings: Fix an incorrect string in sensor type 0x1f
  * lanserv: Check that message and negotiated authtypes are the same
  * Update some strings for newer IPMI standards
  * Fix error report in startup_set_sel_time
  * Move to version 2.0.36
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Fix an issue logging an error on a message
  * include: Add a doc for the lifetime of ipmi_entity_get_fru()
  * Move to version 2.0.35
  * lanserv: Check some bounds on incoming messages
  * Create SECURITY.md
  * swig: Cast some values to get proper passing of values
  * sample: Fix an snprintf overflow issue
  * ui: Fix an snprintf overflow issue
  * Add github actions
  * cmdlang: Remove yet more dead code
  * swig: Remove a double free
  * ui: More print issues
  * sensor: Remove more dead code
  * swig: Fix more resource leaks
  * Finish up error updates
  * ui: Fix a ton of formatting errors
  * cmdlang: Remove some dead code
  * cmdlang: Remove some dead code
  * cmdlang: Remove an unneeded if
  * cmdlang: Remove an unnecessary loop
  * cmdlang: Remove some dead code
  * lanserv: Fix an invalid overlapping copy
  * lanserv: Add a missing break for watchdog handling
  * lanserv: Add a check for the picmg address controller not found
  * lanserv: Add a missing NULL pointer check
  * lanserv: Fix an error report
  * lanserv: Fix an unsigned compare issue
  * lanserv: Remove some dead code
  * lanserv: Fix reading persistance data
  * domain: Fix some various bugs
  * entity: Fix a ordering check issue
  * fru: Remove unnecessary check
  * smi: Remove some dead code
  * utils: Fix address comparison
  * fru: Fix record with possible NULL data
  * mc: Fix sel re-fetch
  * atca: Fix some various issues
  * oem_motorola_mxp: Fix some minor issues
  * control,sensor: Fix some string handling
  * sel: Add a missing NULL check
  * sample: Remove some dead code
  * sensor: Fix some wrong sizes
  * tcl: Fix an infinite loop
  * swig: Fix a wrong malloc size
  * lanserv: Fix a memory leak in sdrcomp
  * unix: Add missing unlock on an error handler
  * unix: Cast a variable to int from time()
  * swig: Fix issues with memory handling
  * Don't run perl tests in parallel
  * C type errors in the SWIG-generated Perl bindings
  * Move to version 2.0.34
  * swig:perl: Fix the tests
  * swig:perl: Add a way to print the test environment
  * lanserv: Allow zero to be specified for the port
  * lanserv: Return an error if sensor data is requested before ready
  * unix: Handle EAGAIN along with EINTR
  * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading
  * fix coredump when use ipmi_ui
  * Fix the name of global event support for sensors
  * Update configure.ac
  * Move to version 2.0.33
  * exec: fix race in symlink install
  * Make lan.conf and simulator startup file 600 permissions
  * Update the python m4 file
  * Avoid searching host library path</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.36.56+git.0a3a991:
  * lanserv: Mark serial channels special
  * sol: Refcount sol instance in ipmid_changed
  * lanserv: Set the channel info accurately for system interface
  * lanserv: Allow serial IPMI connections on channels besides 15
  * lanserv: Add limits to the receive queue
  * lanserv: Add timing for messages
  * lanserv: Fix a bug in response handling for LAN messages
  * lanserv: Yet another message dup bug
  * lanserv: Fix a bug in message duplication
  * lanserv: Remove one more unnecessary memset
  * lanserv: Remove unnecessary memsets
  * lanserv: Add the cmd to the things check for response matching
  * lanserv: Add a function to allocate and free message
  * lanserv: Fix a memory leak
  * lanserv: Don't allocate a new message for SMI handling
  * lanserv: Rework naming and message handling a bit
  * lanserv: More malloc/free cleanups
  * lanserv: Clean up memory handling
  * lanserv: Remove functions from channel and use sysinfo
  * lanserv: Create and use a message queue type
  * lanserv: Separate out the receive queue
  * lanserv: Reduce the size of the sim_addr_t passed around
  * lanserv: Get lun 2 commands working
  * lanserv: Rework receive queue to not have a dummy first byte
  * lanserv: More message routing work
  * lanserv: More work on the message routing
  * lanserv: More rework
  * lanserv: More work on restructure
  * lanserv: Rework address names
  * lanserv: More restructuring on message handling
  * lanserv: Move check_msg_length() to serv.c
  * lanserv: Round-robin sessions
  * lanserv: Rework the send message handling
  * lan: Don't set reponse LUN to 2 in bridged messages
  * lanserv: Allow RMCP authtype for no session messages
  * github: Add readline to the dependencies
  * Remove support for UCD SNMP
  * ipmish: Fix snmp trap handling
  * lanserv: Use ssize_t for the return value of read()
  * lanserv: Get rid of the rmcpplus session member
  * lanserv: Preserve handle when clearing session data
  * lanserv: Don't allow user 0 to be configured
  * utils:md5: Handle data for md5 cannot be NULL
  * lanserv: Validate message ordering at authentication
  * lanserv: Don't assign session privilege until after auth is done
  * lanserv: Clear out session data on a close
  * utils: Check for NULL before freeing MD5 data
  * lib:lan: Reject a zero sid
  * sample: Fix data parsing in ipmicmd
  * ui: Pass in a sockaddr_in to SNMP trap handler
  * Fix gen_random()
  * lanserv: Check that authdata is initialized before cleanup</changelog>
  <changelog author="trenn@suse.com" date="1777204800">- Adopt path to executable in systemd service file (bsc#1252941)</changelog>
</package>
<package pkgid="31e9cbf98951db0de67e639720d4ff324c5a66163b0729bcc9742af504070f85c2a9db58d630eebb450ee3d16fca5f6ecafaf6280d89d04c1129ee763f215d48" name="OpenIPMI-python3" arch="x86_64">
  <version epoch="0" ver="2.0.36.56+git.0a3a991" rel="160000.2.2"/>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
  <changelog author="trenn@suse.de" date="1634040000">- Fix file conflict with old python2 version (bsc#1190999):
  found conflict of OpenIPMI-python-2.0.25-7.3.1.x86_64 with OpenIPMI-python3-2.0.31-1.1.x86_64
  /usr/bin/openipmigui
  /usr/share/man/man1/openipmigui.1.gz</changelog>
  <changelog author="jengelh@inai.de" date="1651147200">- Resolve rpmlint report "libOpenIPMI0.x86_64: E:
  shlib-policy-name-error SONAME: libOpenIPMIui.so.1, expected
  package suffix: 1"
- Trim manual library Provides. Prospective users (packages) ought
  to let rpm find the dependencies (and their name is usually
  "libIPMIlanserv.so.0()(64bit)" not "libIPMIlanserv".</changelog>
  <changelog author="code@bnavigator.de" date="1652097600">- Add OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  which updates m4/ax_python_devel.m4 to serial25, retaining
  upstreams PYTHON_VERSION addition, before the bootstrap runs
  automake, because the new serial 25 can deal with
  Python 3.10 version strings and deprecation of distutils.</changelog>
  <changelog author="trenn@suse.de" date="1652184000">- Update to version 2.0.32.3+git.05faa36e:
  * entity: Handle NULL entity in internal_fru_fetch_done()
  * entity: Keep the entity around duringa FRU fetch
  * Move to version 2.0.32
  * Fix readline and python support
  * sol: Fix multiple flush queuing issue
- Patches that are mainline:
  D    fix-conversions.patch
  D    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch
  D    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  D    OpenIPMI-no-return-in-nonvoid-function.patch
- Refreshed patches not yet mainline:
  M    openipmi-tinfo.patch
  M    fix_dia_version_detection.patch</changelog>
  <changelog author="mjambor@suse.com" date="1718712000">- Add OpenIPMI-c99.patch in order to make the package buildable with
  GCC 14.  Patch comes from upstream
  https://sourceforge.net/p/openipmi/patches/38/ [[boo#1225871]]</changelog>
  <changelog author="trenn@suse.de" date="1727265600">- Fix bsc#1229910 CVE-2024-42934 by below 2 patches:
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Check some bounds on incoming messages
- Remove mainlined patches:
  D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  D OpenIPMI-c99.patch
- Update to version 2.0.36.4+git.c114912:
  * strings: Fix an incorrect string in sensor type 0x1f
  * lanserv: Check that message and negotiated authtypes are the same
  * Update some strings for newer IPMI standards
  * Fix error report in startup_set_sel_time
  * Move to version 2.0.36
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Fix an issue logging an error on a message
  * include: Add a doc for the lifetime of ipmi_entity_get_fru()
  * Move to version 2.0.35
  * lanserv: Check some bounds on incoming messages
  * Create SECURITY.md
  * swig: Cast some values to get proper passing of values
  * sample: Fix an snprintf overflow issue
  * ui: Fix an snprintf overflow issue
  * Add github actions
  * cmdlang: Remove yet more dead code
  * swig: Remove a double free
  * ui: More print issues
  * sensor: Remove more dead code
  * swig: Fix more resource leaks
  * Finish up error updates
  * ui: Fix a ton of formatting errors
  * cmdlang: Remove some dead code
  * cmdlang: Remove some dead code
  * cmdlang: Remove an unneeded if
  * cmdlang: Remove an unnecessary loop
  * cmdlang: Remove some dead code
  * lanserv: Fix an invalid overlapping copy
  * lanserv: Add a missing break for watchdog handling
  * lanserv: Add a check for the picmg address controller not found
  * lanserv: Add a missing NULL pointer check
  * lanserv: Fix an error report
  * lanserv: Fix an unsigned compare issue
  * lanserv: Remove some dead code
  * lanserv: Fix reading persistance data
  * domain: Fix some various bugs
  * entity: Fix a ordering check issue
  * fru: Remove unnecessary check
  * smi: Remove some dead code
  * utils: Fix address comparison
  * fru: Fix record with possible NULL data
  * mc: Fix sel re-fetch
  * atca: Fix some various issues
  * oem_motorola_mxp: Fix some minor issues
  * control,sensor: Fix some string handling
  * sel: Add a missing NULL check
  * sample: Remove some dead code
  * sensor: Fix some wrong sizes
  * tcl: Fix an infinite loop
  * swig: Fix a wrong malloc size
  * lanserv: Fix a memory leak in sdrcomp
  * unix: Add missing unlock on an error handler
  * unix: Cast a variable to int from time()
  * swig: Fix issues with memory handling
  * Don't run perl tests in parallel
  * C type errors in the SWIG-generated Perl bindings
  * Move to version 2.0.34
  * swig:perl: Fix the tests
  * swig:perl: Add a way to print the test environment
  * lanserv: Allow zero to be specified for the port
  * lanserv: Return an error if sensor data is requested before ready
  * unix: Handle EAGAIN along with EINTR
  * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading
  * fix coredump when use ipmi_ui
  * Fix the name of global event support for sensors
  * Update configure.ac
  * Move to version 2.0.33
  * exec: fix race in symlink install
  * Make lan.conf and simulator startup file 600 permissions
  * Update the python m4 file
  * Avoid searching host library path</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.36.56+git.0a3a991:
  * lanserv: Mark serial channels special
  * sol: Refcount sol instance in ipmid_changed
  * lanserv: Set the channel info accurately for system interface
  * lanserv: Allow serial IPMI connections on channels besides 15
  * lanserv: Add limits to the receive queue
  * lanserv: Add timing for messages
  * lanserv: Fix a bug in response handling for LAN messages
  * lanserv: Yet another message dup bug
  * lanserv: Fix a bug in message duplication
  * lanserv: Remove one more unnecessary memset
  * lanserv: Remove unnecessary memsets
  * lanserv: Add the cmd to the things check for response matching
  * lanserv: Add a function to allocate and free message
  * lanserv: Fix a memory leak
  * lanserv: Don't allocate a new message for SMI handling
  * lanserv: Rework naming and message handling a bit
  * lanserv: More malloc/free cleanups
  * lanserv: Clean up memory handling
  * lanserv: Remove functions from channel and use sysinfo
  * lanserv: Create and use a message queue type
  * lanserv: Separate out the receive queue
  * lanserv: Reduce the size of the sim_addr_t passed around
  * lanserv: Get lun 2 commands working
  * lanserv: Rework receive queue to not have a dummy first byte
  * lanserv: More message routing work
  * lanserv: More work on the message routing
  * lanserv: More rework
  * lanserv: More work on restructure
  * lanserv: Rework address names
  * lanserv: More restructuring on message handling
  * lanserv: Move check_msg_length() to serv.c
  * lanserv: Round-robin sessions
  * lanserv: Rework the send message handling
  * lan: Don't set reponse LUN to 2 in bridged messages
  * lanserv: Allow RMCP authtype for no session messages
  * github: Add readline to the dependencies
  * Remove support for UCD SNMP
  * ipmish: Fix snmp trap handling
  * lanserv: Use ssize_t for the return value of read()
  * lanserv: Get rid of the rmcpplus session member
  * lanserv: Preserve handle when clearing session data
  * lanserv: Don't allow user 0 to be configured
  * utils:md5: Handle data for md5 cannot be NULL
  * lanserv: Validate message ordering at authentication
  * lanserv: Don't assign session privilege until after auth is done
  * lanserv: Clear out session data on a close
  * utils: Check for NULL before freeing MD5 data
  * lib:lan: Reject a zero sid
  * sample: Fix data parsing in ipmicmd
  * ui: Pass in a sockaddr_in to SNMP trap handler
  * Fix gen_random()
  * lanserv: Check that authdata is initialized before cleanup</changelog>
</package>
<package pkgid="18e60b6ff8447471c64f607b569a0b88dbf15899781357bcf2b7a695e1706c305a0bf887f78105debf2868c1f832e19c839ff93b8a68a5241c5d58b6b0341bd0" name="OpenIPMI-python3" arch="x86_64">
  <version epoch="0" ver="2.0.36.56+git.0a3a991" rel="160000.3.1"/>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
  <changelog author="trenn@suse.de" date="1634040000">- Fix file conflict with old python2 version (bsc#1190999):
  found conflict of OpenIPMI-python-2.0.25-7.3.1.x86_64 with OpenIPMI-python3-2.0.31-1.1.x86_64
  /usr/bin/openipmigui
  /usr/share/man/man1/openipmigui.1.gz</changelog>
  <changelog author="jengelh@inai.de" date="1651147200">- Resolve rpmlint report "libOpenIPMI0.x86_64: E:
  shlib-policy-name-error SONAME: libOpenIPMIui.so.1, expected
  package suffix: 1"
- Trim manual library Provides. Prospective users (packages) ought
  to let rpm find the dependencies (and their name is usually
  "libIPMIlanserv.so.0()(64bit)" not "libIPMIlanserv".</changelog>
  <changelog author="code@bnavigator.de" date="1652097600">- Add OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  which updates m4/ax_python_devel.m4 to serial25, retaining
  upstreams PYTHON_VERSION addition, before the bootstrap runs
  automake, because the new serial 25 can deal with
  Python 3.10 version strings and deprecation of distutils.</changelog>
  <changelog author="trenn@suse.de" date="1652184000">- Update to version 2.0.32.3+git.05faa36e:
  * entity: Handle NULL entity in internal_fru_fetch_done()
  * entity: Keep the entity around duringa FRU fetch
  * Move to version 2.0.32
  * Fix readline and python support
  * sol: Fix multiple flush queuing issue
- Patches that are mainline:
  D    fix-conversions.patch
  D    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch
  D    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  D    OpenIPMI-no-return-in-nonvoid-function.patch
- Refreshed patches not yet mainline:
  M    openipmi-tinfo.patch
  M    fix_dia_version_detection.patch</changelog>
  <changelog author="mjambor@suse.com" date="1718712000">- Add OpenIPMI-c99.patch in order to make the package buildable with
  GCC 14.  Patch comes from upstream
  https://sourceforge.net/p/openipmi/patches/38/ [[boo#1225871]]</changelog>
  <changelog author="trenn@suse.de" date="1727265600">- Fix bsc#1229910 CVE-2024-42934 by below 2 patches:
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Check some bounds on incoming messages
- Remove mainlined patches:
  D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch
  D OpenIPMI-c99.patch
- Update to version 2.0.36.4+git.c114912:
  * strings: Fix an incorrect string in sensor type 0x1f
  * lanserv: Check that message and negotiated authtypes are the same
  * Update some strings for newer IPMI standards
  * Fix error report in startup_set_sel_time
  * Move to version 2.0.36
  * lanserv: Fix an issue with authorization range checking
  * lanserv: Fix an issue logging an error on a message
  * include: Add a doc for the lifetime of ipmi_entity_get_fru()
  * Move to version 2.0.35
  * lanserv: Check some bounds on incoming messages
  * Create SECURITY.md
  * swig: Cast some values to get proper passing of values
  * sample: Fix an snprintf overflow issue
  * ui: Fix an snprintf overflow issue
  * Add github actions
  * cmdlang: Remove yet more dead code
  * swig: Remove a double free
  * ui: More print issues
  * sensor: Remove more dead code
  * swig: Fix more resource leaks
  * Finish up error updates
  * ui: Fix a ton of formatting errors
  * cmdlang: Remove some dead code
  * cmdlang: Remove some dead code
  * cmdlang: Remove an unneeded if
  * cmdlang: Remove an unnecessary loop
  * cmdlang: Remove some dead code
  * lanserv: Fix an invalid overlapping copy
  * lanserv: Add a missing break for watchdog handling
  * lanserv: Add a check for the picmg address controller not found
  * lanserv: Add a missing NULL pointer check
  * lanserv: Fix an error report
  * lanserv: Fix an unsigned compare issue
  * lanserv: Remove some dead code
  * lanserv: Fix reading persistance data
  * domain: Fix some various bugs
  * entity: Fix a ordering check issue
  * fru: Remove unnecessary check
  * smi: Remove some dead code
  * utils: Fix address comparison
  * fru: Fix record with possible NULL data
  * mc: Fix sel re-fetch
  * atca: Fix some various issues
  * oem_motorola_mxp: Fix some minor issues
  * control,sensor: Fix some string handling
  * sel: Add a missing NULL check
  * sample: Remove some dead code
  * sensor: Fix some wrong sizes
  * tcl: Fix an infinite loop
  * swig: Fix a wrong malloc size
  * lanserv: Fix a memory leak in sdrcomp
  * unix: Add missing unlock on an error handler
  * unix: Cast a variable to int from time()
  * swig: Fix issues with memory handling
  * Don't run perl tests in parallel
  * C type errors in the SWIG-generated Perl bindings
  * Move to version 2.0.34
  * swig:perl: Fix the tests
  * swig:perl: Add a way to print the test environment
  * lanserv: Allow zero to be specified for the port
  * lanserv: Return an error if sensor data is requested before ready
  * unix: Handle EAGAIN along with EINTR
  * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading
  * fix coredump when use ipmi_ui
  * Fix the name of global event support for sensors
  * Update configure.ac
  * Move to version 2.0.33
  * exec: fix race in symlink install
  * Make lan.conf and simulator startup file 600 permissions
  * Update the python m4 file
  * Avoid searching host library path</changelog>
  <changelog author="trenn@suse.de" date="1744372800">- Update to version 2.0.36.56+git.0a3a991:
  * lanserv: Mark serial channels special
  * sol: Refcount sol instance in ipmid_changed
  * lanserv: Set the channel info accurately for system interface
  * lanserv: Allow serial IPMI connections on channels besides 15
  * lanserv: Add limits to the receive queue
  * lanserv: Add timing for messages
  * lanserv: Fix a bug in response handling for LAN messages
  * lanserv: Yet another message dup bug
  * lanserv: Fix a bug in message duplication
  * lanserv: Remove one more unnecessary memset
  * lanserv: Remove unnecessary memsets
  * lanserv: Add the cmd to the things check for response matching
  * lanserv: Add a function to allocate and free message
  * lanserv: Fix a memory leak
  * lanserv: Don't allocate a new message for SMI handling
  * lanserv: Rework naming and message handling a bit
  * lanserv: More malloc/free cleanups
  * lanserv: Clean up memory handling
  * lanserv: Remove functions from channel and use sysinfo
  * lanserv: Create and use a message queue type
  * lanserv: Separate out the receive queue
  * lanserv: Reduce the size of the sim_addr_t passed around
  * lanserv: Get lun 2 commands working
  * lanserv: Rework receive queue to not have a dummy first byte
  * lanserv: More message routing work
  * lanserv: More work on the message routing
  * lanserv: More rework
  * lanserv: More work on restructure
  * lanserv: Rework address names
  * lanserv: More restructuring on message handling
  * lanserv: Move check_msg_length() to serv.c
  * lanserv: Round-robin sessions
  * lanserv: Rework the send message handling
  * lan: Don't set reponse LUN to 2 in bridged messages
  * lanserv: Allow RMCP authtype for no session messages
  * github: Add readline to the dependencies
  * Remove support for UCD SNMP
  * ipmish: Fix snmp trap handling
  * lanserv: Use ssize_t for the return value of read()
  * lanserv: Get rid of the rmcpplus session member
  * lanserv: Preserve handle when clearing session data
  * lanserv: Don't allow user 0 to be configured
  * utils:md5: Handle data for md5 cannot be NULL
  * lanserv: Validate message ordering at authentication
  * lanserv: Don't assign session privilege until after auth is done
  * lanserv: Clear out session data on a close
  * utils: Check for NULL before freeing MD5 data
  * lib:lan: Reject a zero sid
  * sample: Fix data parsing in ipmicmd
  * ui: Pass in a sockaddr_in to SNMP trap handler
  * Fix gen_random()
  * lanserv: Check that authdata is initialized before cleanup</changelog>
  <changelog author="trenn@suse.com" date="1777204800">- Adopt path to executable in systemd service file (bsc#1252941)</changelog>
</package>
<package pkgid="086af418bfa3b6625bcafcc4c320e30294923acd40f95f54ad713924c69ee86fa6cc263d479992061f8c10d78197cc4e9f1eb52db55a85e61d3d4998d59fa371" name="OpenImageDenoise" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="bp160.1.2"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1632657600">- Update to 1.4.1:
  + Fixed crash when in-place denoising images with certain unusual
    resolutions
  + Fixed compile error when building for Apple Silicon using some
    unofficial builds of ISPC
- Update to 1.4.0:
  + Improved fine detail preservation
  + Added the cleanAux filter parameter for further improving
    quality when the auxiliary feature (albedo, normal) images are
    noise-free
  + Added support for denoising auxiliary feature images, which can
    be used together with the new cleanAux parameter for improving
    quality when the auxiliary images are noisy (recommended for
    final frame denoising)
  + Normals are expected to be in the [-1, 1] range (but still do
    not have to be normalized)
  + Added the oidnUpdateFilterData function which must be called
    when the contents of an opaque data parameter bound to a filter
    (e.g. weights) has been changed after committing the filter
  + Added the oidnRemoveFilterImage and oidnRemoveFilterData
    functions for removing previously set image and opaque data
    parameters of filters
  + Reduced the overhead of oidnCommitFilter to zero in some cases
    (e.g. when changing already set image buffers/pointers or the
    inputScale parameter)
  + Reduced filter memory consumption by about 35%
  + Reduced total memory consumption significantly when using
    multiple filters that belong to the same device
  + Reduced the default maximum memory consumption to 3000 MB
  + Added the OIDN_FILTER_RT and OIDN_FILTER_RTLIGHTMAP CMake
    options for excluding the trained filter weights from the build
    to significantly decrease its size
  + Fixed detection of static TBB builds on Windows
  + Fixed compile error when using future glibc versions
  + Added oidnBenchmark option for setting custom resolutions
  + Upgraded to oneTBB 2021.2.0 in the official binaries
- Update to 1.3.0:
  + Improved denoising quality
  + Improved sharpness of fine details / less blurriness
  + Fewer noisy artifacts
  + Slightly improved performance and lowered memory consumption
  + Added directional (e.g. spherical harmonics) lightmap denoising
    to the RTLightmap filter
  + Added inputScale filter parameter which generalizes the
    existing (and thus now deprecated) hdrScale parameter for non-
    HDR images
  + Added native support for Apple Silicon and the BNNS library on
    macOS (currently requires rebuilding from source)
  + Added OIDN_NEURAL_RUNTIME CMake option for setting the neural
    network runtime library
  + Reduced the size of the library binary
  + Fixed compile error on some older macOS versions
  + Upgraded release builds to use oneTBB 2021.1.1
  + Removed tbbmalloc dependency
  + Appended the library version to the name of the directory
    containing the installed CMake files
  + Training:
  + Faster training performance
  + Added mixed precision training (enabled by default)
  + Added efficient data-parallel training on multiple GPUs
  + Enabled preprocessing datasets multiple times with possibly
    different options
  + Minor bugfixes
- Update to 1.2.4:
  + Added OIDN_API_NAMESPACE CMake option that allows to put all
    API functions inside a user-defined namespace
  + Fixed bug when TBB_USE_GLIBCXX_VERSION is defined
  + Fixed compile error when using an old compiler which does not
    support OpenMP SIMD
  + Added compatibility with oneTBB 2021
  + Export only necessary symbols on Linux and macOS
- Update to 1.2.3:
  + Fixed incorrect detection of AVX-512 on macOS (sometimes
    causing a crash)
  + Fixed inconsistent performance and costly initialization for
    AVX-512
  + Fixed JIT'ed AVX-512 kernels not showing up correctly in VTune
- Eliminate version from installed cmake directory</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.4.3:
  + Disabled VTune profiling support of oneDNN kernels
- Update to 1.4.2:
  + Added support for 16-bit half-precision floating-point images
  + Added oidnGetBufferData and oidnGetBufferSize functions
  + Fixed performance issue on x86 hybrid architecture CPUs
  + Fixed build error when using OpenImageIO 2.3 or later</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714392000">- Update to 2.2.2:
  Fully fixed GPU memory leak when releasing SYCL, CUDA and HIP device objects
  Fixed CUDA context error in some cases when using the CUDA driver API
  Fixed crash on systems with an unsupported AMD Vega integrated GPU and old driver
  Fixed memory leak when releasing SYCL, CUDA and HIP device objects
  Fixed memory leak when initializing Metal filters
  Improved denoising quality (better fine detail reconstruction)
  Added Intel Meteor Lake GPU support (in Intel® Core™ Ultra Processors)
  Added Metal device for Apple silicon GPUs (requires macOS Ventura or newer)
  Added ARM64 (AArch64) CPU support on Windows and Linux (in addition to macOS)
  Improved CPU performance
  Significantly reduced overhead of committing filter changes
  Switched to the CUDA driver API by default, added the OIDN_DEVICE_CUDA_API
  CMake option for manually selecting between the driver and runtime APIs
  Fixed crash when releasing a buffer after releasing the device
  Added support for denoising 1-channel (e.g. alpha) and 2-channel images
  Added support for arbitrary combinations of input image data types
  (e.g. OIDN_FORMAT_FLOAT3 for color but OIDN_FORMAT_HALF3 for albedo)
  Improved performance for most dedicated GPU architectures
  Re-added OIDN_STATIC_LIB CMake option which enables building as a static
  (CPU support only) or a hybrid static/shared (GPU support as well) library
  Added release() method to C++ API objects (DeviceRef, BufferRef,
  FilterRef)
  Fixed possible crash when releasing GPU devices, buffers or filters
  Fixed possible crash at process exit for some SYCL runtime versions
  Fixed image quality inconsistency on Intel integrated GPUs, but at the cost
  of some performance loss
  Fixed future Windows driver compatibility for Intel integrated GPUs
  Fixed rare output corruption on AMD RDNA2 GPUs
  Fixed device detection on Windows when the path to the library has non-ANSI
  characters
  Added support for Intel® oneAPI DPC++/C++ Compiler 2024.0 and compatible
  open source compiler versions
  Upgraded to oneTBB 2021.10.0 in the official binaries
  Improved detection of old oneTBB versions
  Fixed performance issue for Intel integrated GPUs using recent Linux drivers
  Fixed crash on systems with both dedicated and integrated AMD GPUs
  Fixed importing D3D12_RESOURCE, D3D11_RESOURCE, D3D11_RESOURCE_KMT,
  D3D11_TEXTURE and D3D11_TEXTURE_KMT external memory types on CUDA and
  HIP devices
  Fixed the macOS deployment target of the official x86 binaries (lowered from
  11.0 to 10.11)
  Minor improvements to verbose output
  Added SYCL device for Intel Xe architecture GPUs (Xe-LP, Xe-HPG and Xe-HPC)
  Added CUDA device for NVIDIA Volta, Turing, Ampere, Ada Lovelace and Hopper
  architecture GPUs
  Added HIP device for AMD RDNA2 (Navi 21 only) and RDNA3 (Navi 3x)
  architecture GPUs
  Added new buffer API functions for specifying the storage type (host, device
  or managed), copying data to/from the host, and importing external buffers from
  graphics APIs (e.g. Vulkan, Direct3D 12)
  Removed the oidnMapBuffer and oidnUnmapBuffer functions
  Added support for asynchronous execution (e.g. oidnExecuteFilterAsync,
  oidnSyncDevice functions)
  Added physical device API for querying the supported devices in the system
  Added functions for creating a device from a physical device ID, UUID, LUID
  or PCI address (e.g. oidnNewDeviceByID)
  Added SYCL, CUDA and HIP interoperability API functions (e.g. oidnNewSYCLDevice,
  oidnExecuteSYCLFilterAsync)
  Added type device parameter for querying the device type
  Added systemMemorySupported and managedMemorySupported device parameters
  for querying memory allocations supported by the device
  Added externalMemoryTypes device parameter for querying the supported
  external memory handle types
  Added quality filter parameter for setting the filtering quality mode (high
  or balanced quality)
  Minor API changes with backward compatibility:
  Added oidn(Get|Set)(Device|Filter)(Bool|Int|Float) functions and
  deprecated oidn(Get|Set)(Device|Filter)(1b|1i|1f) functions
  Added oidnUnsetFilter(Image|Data) functions and deprecated
  oidnRemoveFilter(Image|Data) functions
  Renamed alignment and overlap filter parameters to tileAlignment
  and tileOverlap but the old names remain supported
  Removed OIDN_STATIC_LIB and OIDN_STATIC_RUNTIME CMake options due to
  technical limitations
  Fixed over-conservative buffer bounds checking for images with custom strides
  Upgraded to oneTBB 2021.9.0 in the official binaries</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714392001">- the cmake dir is versioned now</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714478400">- split out the sub shared libraries to have a proper package
  suffix</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854400">- Update to 2.3.0:
  - Significantly improved image quality of the RT filter in high
    quality mode for HDR denoising with prefiltering, i.e., the
    following combinations of input features and parameters:
  - HDR color + albedo + normal + cleanAux
  - albedo
  - normal
    In these cases a much more complex filter is used, which
    results in lower performance than before (about 2x). To revert
    to the previous performance behavior, please switch to the
    balanced quality mode.
  - Added fast quality mode (OIDN_QUALITY_FAST) for even higher
    performance (about 1.5-2x) interactive/real-time previews and
    lower default memory usage at the cost of somewhat lower image
    quality. Currently this is implemented for the RT filter except
    prefiltering (albedo, normal). In other cases denoising
    implicitly falls back to balanced mode.
  - Added Intel Arrow Lake, Lunar Lake, and Battlemage GPU support
  - Execute Async functions asynchronously on CPU devices as well
  - Load/initialize device modules lazily (improves stability)
  - Added oidnIsCPUDeviceSupported, oidnIsSYCLDeviceSupported,
    oidnIsCUDADeviceSupported, oidnIsHIPDeviceSupported, and
    oidnIsMetalDeviceSupported API functions for checking whether a
    physical device of a particular type is supported
  - Release the CUDA primary context when destroying the device
    object if using the CUDA driver API
  - Added OIDN_LIBRARY_NAME CMake option for setting the base name
    of the Open Image Denoise library files
  - Fixed device creation error with oidnNewDevice when the default
    device of the specified type (e.g. CUDA) is not supported but
    there are other supported non-default devices of that type in
    the system
  - Fixed CMake error when building with Metal support using
    non-Apple Clang
  - Fixed iOS build errors
  - Added support for building with ROCm 6.x oidnNewCUDADevice and
    oidnNewHIPDevice no longer accept negative device IDs. If the
    goal is to use the current device, its actual ID needs to be
    passed.
  - Upgraded to oneTBB 2021.12.0 in the official binaries
  - Training:
  - Improved training performance on CUDA and MPS devices, added
  - -compile option
  - Added --quality option (high, balanced, fast) for selecting
    the size of the model to train, changed the default from
    balanced to high
  - Added new models to the --model option (unet_small,
    unet_large, unet_xl)
  - Added support for training with prefiltered auxiliary
    features by passing --aux_results to preprocess.py and
    train.py
  - Added experimental support for depth (z)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854401">- Update to 2.3.1:
  - Fixed corrupted output when in-place denoising high-resolution
    (&gt; 1080p) images where the input and output are stored in
    different shared buffer objects (created with
    oidnNewSharedBuffer*) that overlap in memory
  - Fixed issues with cancellation through progress monitor
    callbacks:
  - Fixed cancellation requests not being fulfilled on CPU
    devices since v2.3.0
  - Fixed not calling the callback anymore after requesting
    cancellation, while the operation is still being executed
  - Added support for creating shared buffers on Metal devices
  - Enabled accessing system allocated memory for CUDA devices
    which support this feature (see systemMemorySupported device
    parameter)
  - Added LUID support for HIP devices. Importing DX12 and Vulkan
    buffers is now functional when using recent AMD GPU drivers on
    Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854402">- Update to 2.3.2:
  - Improved performance for Intel Lunar Lake and Battlemage GPUs
  - Added Intel Panther Lake GPU support
  - Fixed compile error when building with OpenImageIO 3.x</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854403">- Update to 2.3.3:
  - Added NVIDIA Blackwell GPU support
  - Added AMD RDNA4 GPU support
  - Improved performance for AMD RDNA3 GPUs
  - Added OIDN_DEPENDENTLOADFLAG CMake option for setting the
    DEPENDENTLOADFLAG linker flag on Windows
  - Added OIDN_LIBRARY_VERSIONED CMake option for toggling
    versioning in the Open Image Denoise library files
  - Known issue: performance regression for AMD RDNA2 GPUs</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1746532800">- Enable build on aarch64</changelog>
</package>
<package pkgid="fc7aca0fc4debad628f4bd64167d2e643774a6c590c900cf256833fd5fdb2a40f5ff36d3c1edc64f04f7126aa95cecb9cbaf20827cda6bd6c699c32db01637ef" name="OpenImageDenoise-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="bp160.1.2"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1632657600">- Update to 1.4.1:
  + Fixed crash when in-place denoising images with certain unusual
    resolutions
  + Fixed compile error when building for Apple Silicon using some
    unofficial builds of ISPC
- Update to 1.4.0:
  + Improved fine detail preservation
  + Added the cleanAux filter parameter for further improving
    quality when the auxiliary feature (albedo, normal) images are
    noise-free
  + Added support for denoising auxiliary feature images, which can
    be used together with the new cleanAux parameter for improving
    quality when the auxiliary images are noisy (recommended for
    final frame denoising)
  + Normals are expected to be in the [-1, 1] range (but still do
    not have to be normalized)
  + Added the oidnUpdateFilterData function which must be called
    when the contents of an opaque data parameter bound to a filter
    (e.g. weights) has been changed after committing the filter
  + Added the oidnRemoveFilterImage and oidnRemoveFilterData
    functions for removing previously set image and opaque data
    parameters of filters
  + Reduced the overhead of oidnCommitFilter to zero in some cases
    (e.g. when changing already set image buffers/pointers or the
    inputScale parameter)
  + Reduced filter memory consumption by about 35%
  + Reduced total memory consumption significantly when using
    multiple filters that belong to the same device
  + Reduced the default maximum memory consumption to 3000 MB
  + Added the OIDN_FILTER_RT and OIDN_FILTER_RTLIGHTMAP CMake
    options for excluding the trained filter weights from the build
    to significantly decrease its size
  + Fixed detection of static TBB builds on Windows
  + Fixed compile error when using future glibc versions
  + Added oidnBenchmark option for setting custom resolutions
  + Upgraded to oneTBB 2021.2.0 in the official binaries
- Update to 1.3.0:
  + Improved denoising quality
  + Improved sharpness of fine details / less blurriness
  + Fewer noisy artifacts
  + Slightly improved performance and lowered memory consumption
  + Added directional (e.g. spherical harmonics) lightmap denoising
    to the RTLightmap filter
  + Added inputScale filter parameter which generalizes the
    existing (and thus now deprecated) hdrScale parameter for non-
    HDR images
  + Added native support for Apple Silicon and the BNNS library on
    macOS (currently requires rebuilding from source)
  + Added OIDN_NEURAL_RUNTIME CMake option for setting the neural
    network runtime library
  + Reduced the size of the library binary
  + Fixed compile error on some older macOS versions
  + Upgraded release builds to use oneTBB 2021.1.1
  + Removed tbbmalloc dependency
  + Appended the library version to the name of the directory
    containing the installed CMake files
  + Training:
  + Faster training performance
  + Added mixed precision training (enabled by default)
  + Added efficient data-parallel training on multiple GPUs
  + Enabled preprocessing datasets multiple times with possibly
    different options
  + Minor bugfixes
- Update to 1.2.4:
  + Added OIDN_API_NAMESPACE CMake option that allows to put all
    API functions inside a user-defined namespace
  + Fixed bug when TBB_USE_GLIBCXX_VERSION is defined
  + Fixed compile error when using an old compiler which does not
    support OpenMP SIMD
  + Added compatibility with oneTBB 2021
  + Export only necessary symbols on Linux and macOS
- Update to 1.2.3:
  + Fixed incorrect detection of AVX-512 on macOS (sometimes
    causing a crash)
  + Fixed inconsistent performance and costly initialization for
    AVX-512
  + Fixed JIT'ed AVX-512 kernels not showing up correctly in VTune
- Eliminate version from installed cmake directory</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to 1.4.3:
  + Disabled VTune profiling support of oneDNN kernels
- Update to 1.4.2:
  + Added support for 16-bit half-precision floating-point images
  + Added oidnGetBufferData and oidnGetBufferSize functions
  + Fixed performance issue on x86 hybrid architecture CPUs
  + Fixed build error when using OpenImageIO 2.3 or later</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714392000">- Update to 2.2.2:
  Fully fixed GPU memory leak when releasing SYCL, CUDA and HIP device objects
  Fixed CUDA context error in some cases when using the CUDA driver API
  Fixed crash on systems with an unsupported AMD Vega integrated GPU and old driver
  Fixed memory leak when releasing SYCL, CUDA and HIP device objects
  Fixed memory leak when initializing Metal filters
  Improved denoising quality (better fine detail reconstruction)
  Added Intel Meteor Lake GPU support (in Intel® Core™ Ultra Processors)
  Added Metal device for Apple silicon GPUs (requires macOS Ventura or newer)
  Added ARM64 (AArch64) CPU support on Windows and Linux (in addition to macOS)
  Improved CPU performance
  Significantly reduced overhead of committing filter changes
  Switched to the CUDA driver API by default, added the OIDN_DEVICE_CUDA_API
  CMake option for manually selecting between the driver and runtime APIs
  Fixed crash when releasing a buffer after releasing the device
  Added support for denoising 1-channel (e.g. alpha) and 2-channel images
  Added support for arbitrary combinations of input image data types
  (e.g. OIDN_FORMAT_FLOAT3 for color but OIDN_FORMAT_HALF3 for albedo)
  Improved performance for most dedicated GPU architectures
  Re-added OIDN_STATIC_LIB CMake option which enables building as a static
  (CPU support only) or a hybrid static/shared (GPU support as well) library
  Added release() method to C++ API objects (DeviceRef, BufferRef,
  FilterRef)
  Fixed possible crash when releasing GPU devices, buffers or filters
  Fixed possible crash at process exit for some SYCL runtime versions
  Fixed image quality inconsistency on Intel integrated GPUs, but at the cost
  of some performance loss
  Fixed future Windows driver compatibility for Intel integrated GPUs
  Fixed rare output corruption on AMD RDNA2 GPUs
  Fixed device detection on Windows when the path to the library has non-ANSI
  characters
  Added support for Intel® oneAPI DPC++/C++ Compiler 2024.0 and compatible
  open source compiler versions
  Upgraded to oneTBB 2021.10.0 in the official binaries
  Improved detection of old oneTBB versions
  Fixed performance issue for Intel integrated GPUs using recent Linux drivers
  Fixed crash on systems with both dedicated and integrated AMD GPUs
  Fixed importing D3D12_RESOURCE, D3D11_RESOURCE, D3D11_RESOURCE_KMT,
  D3D11_TEXTURE and D3D11_TEXTURE_KMT external memory types on CUDA and
  HIP devices
  Fixed the macOS deployment target of the official x86 binaries (lowered from
  11.0 to 10.11)
  Minor improvements to verbose output
  Added SYCL device for Intel Xe architecture GPUs (Xe-LP, Xe-HPG and Xe-HPC)
  Added CUDA device for NVIDIA Volta, Turing, Ampere, Ada Lovelace and Hopper
  architecture GPUs
  Added HIP device for AMD RDNA2 (Navi 21 only) and RDNA3 (Navi 3x)
  architecture GPUs
  Added new buffer API functions for specifying the storage type (host, device
  or managed), copying data to/from the host, and importing external buffers from
  graphics APIs (e.g. Vulkan, Direct3D 12)
  Removed the oidnMapBuffer and oidnUnmapBuffer functions
  Added support for asynchronous execution (e.g. oidnExecuteFilterAsync,
  oidnSyncDevice functions)
  Added physical device API for querying the supported devices in the system
  Added functions for creating a device from a physical device ID, UUID, LUID
  or PCI address (e.g. oidnNewDeviceByID)
  Added SYCL, CUDA and HIP interoperability API functions (e.g. oidnNewSYCLDevice,
  oidnExecuteSYCLFilterAsync)
  Added type device parameter for querying the device type
  Added systemMemorySupported and managedMemorySupported device parameters
  for querying memory allocations supported by the device
  Added externalMemoryTypes device parameter for querying the supported
  external memory handle types
  Added quality filter parameter for setting the filtering quality mode (high
  or balanced quality)
  Minor API changes with backward compatibility:
  Added oidn(Get|Set)(Device|Filter)(Bool|Int|Float) functions and
  deprecated oidn(Get|Set)(Device|Filter)(1b|1i|1f) functions
  Added oidnUnsetFilter(Image|Data) functions and deprecated
  oidnRemoveFilter(Image|Data) functions
  Renamed alignment and overlap filter parameters to tileAlignment
  and tileOverlap but the old names remain supported
  Removed OIDN_STATIC_LIB and OIDN_STATIC_RUNTIME CMake options due to
  technical limitations
  Fixed over-conservative buffer bounds checking for images with custom strides
  Upgraded to oneTBB 2021.9.0 in the official binaries</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714392001">- the cmake dir is versioned now</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1714478400">- split out the sub shared libraries to have a proper package
  suffix</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854400">- Update to 2.3.0:
  - Significantly improved image quality of the RT filter in high
    quality mode for HDR denoising with prefiltering, i.e., the
    following combinations of input features and parameters:
  - HDR color + albedo + normal + cleanAux
  - albedo
  - normal
    In these cases a much more complex filter is used, which
    results in lower performance than before (about 2x). To revert
    to the previous performance behavior, please switch to the
    balanced quality mode.
  - Added fast quality mode (OIDN_QUALITY_FAST) for even higher
    performance (about 1.5-2x) interactive/real-time previews and
    lower default memory usage at the cost of somewhat lower image
    quality. Currently this is implemented for the RT filter except
    prefiltering (albedo, normal). In other cases denoising
    implicitly falls back to balanced mode.
  - Added Intel Arrow Lake, Lunar Lake, and Battlemage GPU support
  - Execute Async functions asynchronously on CPU devices as well
  - Load/initialize device modules lazily (improves stability)
  - Added oidnIsCPUDeviceSupported, oidnIsSYCLDeviceSupported,
    oidnIsCUDADeviceSupported, oidnIsHIPDeviceSupported, and
    oidnIsMetalDeviceSupported API functions for checking whether a
    physical device of a particular type is supported
  - Release the CUDA primary context when destroying the device
    object if using the CUDA driver API
  - Added OIDN_LIBRARY_NAME CMake option for setting the base name
    of the Open Image Denoise library files
  - Fixed device creation error with oidnNewDevice when the default
    device of the specified type (e.g. CUDA) is not supported but
    there are other supported non-default devices of that type in
    the system
  - Fixed CMake error when building with Metal support using
    non-Apple Clang
  - Fixed iOS build errors
  - Added support for building with ROCm 6.x oidnNewCUDADevice and
    oidnNewHIPDevice no longer accept negative device IDs. If the
    goal is to use the current device, its actual ID needs to be
    passed.
  - Upgraded to oneTBB 2021.12.0 in the official binaries
  - Training:
  - Improved training performance on CUDA and MPS devices, added
  - -compile option
  - Added --quality option (high, balanced, fast) for selecting
    the size of the model to train, changed the default from
    balanced to high
  - Added new models to the --model option (unet_small,
    unet_large, unet_xl)
  - Added support for training with prefiltered auxiliary
    features by passing --aux_results to preprocess.py and
    train.py
  - Added experimental support for depth (z)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854401">- Update to 2.3.1:
  - Fixed corrupted output when in-place denoising high-resolution
    (&gt; 1080p) images where the input and output are stored in
    different shared buffer objects (created with
    oidnNewSharedBuffer*) that overlap in memory
  - Fixed issues with cancellation through progress monitor
    callbacks:
  - Fixed cancellation requests not being fulfilled on CPU
    devices since v2.3.0
  - Fixed not calling the callback anymore after requesting
    cancellation, while the operation is still being executed
  - Added support for creating shared buffers on Metal devices
  - Enabled accessing system allocated memory for CUDA devices
    which support this feature (see systemMemorySupported device
    parameter)
  - Added LUID support for HIP devices. Importing DX12 and Vulkan
    buffers is now functional when using recent AMD GPU drivers on
    Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854402">- Update to 2.3.2:
  - Improved performance for Intel Lunar Lake and Battlemage GPUs
  - Added Intel Panther Lake GPU support
  - Fixed compile error when building with OpenImageIO 3.x</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854403">- Update to 2.3.3:
  - Added NVIDIA Blackwell GPU support
  - Added AMD RDNA4 GPU support
  - Improved performance for AMD RDNA3 GPUs
  - Added OIDN_DEPENDENTLOADFLAG CMake option for setting the
    DEPENDENTLOADFLAG linker flag on Windows
  - Added OIDN_LIBRARY_VERSIONED CMake option for toggling
    versioning in the Open Image Denoise library files
  - Known issue: performance regression for AMD RDNA2 GPUs</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1746532800">- Enable build on aarch64</changelog>
</package>
<package pkgid="70ddd30cd9252876c1d8a414d1f7337238aec46c4f7d8bc2db74a0e65c1593f5d769430be7b11c8d2e4b0774cac2843cd18a8911ab5271a5e8066c962aa3e733" name="OpenImageIO" arch="x86_64">
  <version epoch="0" ver="3.0.9.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- on Leap use a newer libboost for getting blender to work</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- disable python and imageviewer on leap</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1741003200">- Fix build on aarch64 (where imageviewer is disabled)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742299200">- partially revert the previous change:
  so why are man pages behind the python bindings? because the
  CMakeLists.txt only renders man pages when python is enabled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751803200">- Fix build with libheif 1.20
  https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/4822
  Adds 06860e2d5b71d614e8878d738ea27d671be2994e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751803201">- update to 2.5.19.0
  - build: Fixes to build against libheif 1.20 #4822 (by Rui Chen)
- drop 06860e2d5b71d614e8878d738ea27d671be2994e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 3.0.8.1
  - build(heif): Fixes to build against libheif 1.20 #4822 (by Rui
    Chen)
- Update to 3.0.8.0
  - oiiotool: New expression pseudo-metadata term: SUBIMAGES #4804
  - oiiotool: Fixes to --missingfile behavior #4803
  - iv: Area probe #4767 (by Danielle Imogu)
  - python: Python ImageBuf.init_spec did not return correct value
    [#4805]
  - fix: ImageOutput::check_open logic was flawed #4779
  - int(iv): Add raw string syntax modifier for VSCode and Cursor
    to understand its glsl #4796 (by Aleksandr Motsjonov)
  - int(iv): Use R"()" syntax for glsl shader strings for better
    readability #4795 (by Aleksandr Motsjonov)
  - exr: Not honoring 'missingcolor' for scanline files #4757
  - build: Add arm_neon.h include on Windows ARM64 with clang-cl
    [#4691] (by Anthony Roberts)
  - build: Adjust pystring finding #4816
  - build(jxl): Use correct cmake variables for the include
    directories #4810 #4813 (by Jesse Yurkovich)
  - tests: Remove old test reference output we no longer need #4817
  - ci: Remove tests on Windows-2019 GitHub runner #4793
  - ci: Various ccache save/restore improvements for CI runs #4797
  - ci: Simplify gh-win-installdeps, no more vcpkg #4809
  - admin: Remove stale intake documents #4815
- Update to 3.0.7.0
  - oiiotool: --eraseattrib new modifier :fromfile=1 reads from a
    file
  - to get a list of patterns to specify the attributes to erase.
    [#4763] (by Lydia Zheng)
  - oiiotool: Added --create-dir flag to create directories needed
    by -o
  - if they doesn't already exist #4762 (by Dharshan Vishwanatha)
  - oiiotool: --eraseattrib:fromfile=1 #4763 (by Lydia Zheng)
  - oiiotool: Added create-dir cmd arg to create dir if it doesn't
    exist #4762 (by Dharshan Vishwanatha)
  - oiiotool: -i:native=1, fix --native behavior, fix convert
    datatype #4708
  - iv: Fix crash on .DS_Store; fix uppercase extensions #4764 (by
    Anton Dukhovnikov)
  - iv: Do not resize on open and other zoom fixes #4766 (by
    Aleksandr Motsjonov)
  - iv: Bug fix for iv window losing focus on mac on startup #4773
    (by Aleksandr Motsjonov)
  - iv: Implement files drag and drop into an iv window #4774 (by
    Aleksandr Motsjonov)
  - iv: Use screen pixel ratio to render sharp text in pixel view
    tool #4768 (by Aleksandr Motsjonov)
  - python: Add python stub files #4692 #4754 (by Chad Dombrova)
  - python: ImageBuf _repr_png_ method added, which allows use of
  - ImageBuf in Jupyter Notebooks as a displayable object. #4753
    (by Oktay Comu)
  - exr: Did not properly allocate 'missingcolor' vector #4751
  - exr: Add htj2k as a compression option for OpenEXR. Only works
    with OpenEXR 3.4 or higher (or in-progress OpenEXR main). #4785
    (by Li Ji)
  - iff: Improved IFF support reading and writing z buffers #4673
    (by Mikael Sundell)
  - webp: Respect the oiio:UnassociatedAlpha attribute #4770 (by
    Jesse Yurkovich)
  - webp: Allow finer grained control over WEBP compression
    settings #4772 (by Jesse Yurkovich)
  - flx/python: IBA.demosaic had GIL release in wrong spot #4777
  - fix: ImageInput/ImageOutput did not set per-file threads
    correctly #4750
  - fix: Address safety warnings in pvt::append_tiff_dir_entry
    [#4737]
  - build: Fix fmt throwing behavior warnings #4730
  - build: Detect libultrahdr version and enforce minimum of 1.3
    [#4729]
  - build: Fix failed test with old fmt #4758
  - ci: Save time by not checking out entire project history #4731
  - ci: New testing variants for VFX Platform 2025, Windows 2025
    [#4744], Linux ARM #4749
  - ci: Update ref output to compensate for GitHub windows drive
    changes #4761
  - ci: Pkg config libdir fix #4775 (by Scott Wilson)
  - ci: For docs workflow, lock down versions and speed up #4646
  - ci: Improved clang-format CI task #4647
  - ci: Add facility for benchmarking as part of CI #4745
  - ci: Update ref image for slightly changed freetype accents
    [#4765]
  - docs: Online docs improvements, mostly formatting (#4736,
    [#4743])
  - docs: Update Windows build instructions to rely on deps
    auto-build #4769
- Update to 3.0.6.1
  - fix: Restore OIIO_AVX512ER_ENABLED preprocessor symbol. Its
    absence could break backwards source compatibility if anyone
    was using it, even though it was useless and broken. Where
    compatibility goes, better safe than sorry. #4735
- Update to 3.0.6.0
  - oiiotool: Add --text modifiers measure= and render= #4681
  - python: Fix handle leak #4685
  - bmp: Correct the type for BMP x/y density #4695 (by Campbell
    Barton)
  - dpx: Specify the units for DPX scanned size #4694 (by Campbell
    Barton)
  - sgi: Fix valid_file to properly swap bytes on little-endian
    platforms #4697 (by Jesse Yurkovich)
  - build: Fix new dcmtk 3.6.9 vs C++ warning #4698
  - build: Address Robin-map vs CMake 4.0 compatibility #4701
  - build: Fix broken OIIO_SITE customization #4709
  - build: Address compiler warnings in simd.h #4724
- Update to 3.0.5.0
  - ImageBuf: ImageBuf::merge_metadata() merges one IB's metadata
    into another's without deleting the metadata already present.
    It can also filter which metadata are copied using a regex.
    [#4672]
  - oiiotool: --pastemeta now takes additional modifiers that
    allows options for merging rather than rewriting, and is able
    to copy only a subset of the metadata specified by a regex.
    [#4672] #4674 #4676
  - oiiotool: Fix invalid loop bound when appending mipmap textures
    using oiiotool #4671 (by Basile Fraboni)
  - png: Increase allowed width/height limit #4655 (by Jesse
    Yurkovich)
  - psd: Improved tag recognition in psd files #4663 (by Lydia
    Zheng)
  - tiff: The default value for bitspersample should be 1 #4670 (by
    vernalchen)
  - int: Switch to spans for some exif manipulation, fixing
    warnings #4689
  - span.h: OIIO::span improvements #4667
  - build: Better disabling of work when USE_PYTHON=0 #4657
  - build: Improve OpenJpeg version detection. #4665 (by
    jreichel-nvidia)
  - build: Bump auto-build libdeflate to 1.23 to avoid AVX512 not
    available errors #4679 (by LI JI)
  - build: Cmake 4.0 compatibility #4686 #4688
  - ci: Fix wheel building on Mac #4668 #4675
  - ci: Update libPNG address and version for ci &amp; autobuild #4659
- Update to 3.0.4.0
  - oiiotool: New expression eval tokens IS_CONSTANT, IS_BLACK
    [#4610] (by Lydia Zheng)
  - oiiotool: Better handling of wildcards that match no files
    [#4627]
  - ImageBuf: IB::pixeltype() did not always return the right value
    [#4614]
  - ImageBuf: Fix bug in ImageBuf construction from ptr + neg
    strides #4630
  - ICC: ICC profile recognition and robustness improvements,
    especially for PSD #4644
  - exr: Fill in OpenEXR lineOrder attribute when reading #4628 (by
    vernalchen)
  - ico: More robust to corrupted ICO files #4625
  - rla: More robust to corrupted RLA files that could overrun
    buffers #4624
  - span.h: Eliminate needless definitions of std::size(span) that
    were triggering strange behavior on recent MSVS compiler
    versions. #4652
  - build: Fix recently broken rpath setting #4618
  - build/python wheels: Ensure python-based builds use
    maj.min.patch SO versioning #4634 (by zachlewis)
  - build/python wheels: Fix recently broken rpath to restore
    python wheel building #4633
  - ci: Run wheel workflow on certain pushes #4617
  - docs: Argparse documentation/comments typos #4612
  - admin: Document Python Wheel completed in roadmap #4620 (by
    Todica Ionut)
  - admin: Add ".vs" to .gitignore #4645
  - admin: Set up .gitattributes file and ensure it properly
    categorizes certain files for GitHub's language analysis
    statistics. #4648
- Update to 3.0.3.1
  The release is identical to v3.0.3.0, but some build issues were
  fixed to allow proper build and upload of the Python wheels to
  PyPI for the Linux ARM variants.
- Update to 3.0.3.0
  - separate images #4591 (by Loïc Vital)
  - IBA: IBA:demosaic() adds the ability for X-Trans demosaicing
    [#4579] (by Anton Dukhovnikov)
  - IBA: fix demosaic handling of roi channels #4602 (by Anton
    Dukhovnikov)
  - png: Alpha premultiplication adjustment and attribute #4585
  - psd: Perform endian byteswap on correct buffer area for PSD RLE
    [#4600] (by Jesse Yurkovich)
  - raw: Add black level and BPS metadata #4601 (by Anton
    Dukhovnikov)
  - python: Disable loading Python DLLs from PATH by default on
    Windows #4590 (by zachlewis)
  - dev (span.h): Span_memcpy is a safer memcpy when you know the
    span boundaries #4597
  - dev (filesystem.h): Filesystem::getline() #4569
  - dev (paramlist.h): ParamValue as_span, as_cspan #4582
  - build: Recent change broke when using non-Apple clang on Apple
    [#4596]
  - build: Fix build_cmake.bash script for aarch64, bump its
    default version #4581
  - build: Fix libraw definitions (again) #4588
  - ci: Upgrade to newer actions #4570
  - ci: Test and document support for WebP 1.5 and fmt 11.1 #4574
  - ci: Only pass build-steps the secrets it needs #4576
  - ci: Fix Windows 2019 CI -- make python version match the runner
    [#4592]
  - ci: Raise 'latest' tests to use new fmt 11.1.2 #4593
  - ci: Adjust some pugixml versions #4594
  - ci: Allow special branch names to prune CI jobs #4604
  - tests: Improve Ptex testing #4573
  - tests: Better testing coverage of null image reader/writer
    [#4578]
  - tests: At long last, set up a softimage reading test. #4583
  - tests: Additional ref output for jpeg-corrupt test #4595
  - docs: Fix typo in oiiotool's gradient fill example #4589 (by
    Loïc Vital)
- update test images to 20250119T083517
- Update to 3.0.2.0
  - api: Add global attribute imageinput:strict #4560
  - various formats: Detect invalid ICC profile tags #4557 #4565
  - various formats: IPTC fields have length limits, protect
    against attributes passed that are too long to fit in them.
    [#4568]
  - pnm: Handle broken pnm files with invalid resolution #4561
  - pnm: Handle broken pgm having memory access error #4559
  - int: Some LoggedTimer instances lacked a variable name #4571
  - build: Use target_compile_options (fixes a LibRaw build issue)
    [#4556] (by Don Olmstead)
  - ci: Refactor using a single steps workflow #4545
  - ci: Fixups of analysis workflow #4572
  - docs: Minor fixes and typos #4564
  - admin: Sign release artifacts #4580
- Update to 3.0.1.0
  - IBA: New IBA::scale() #4541 (by Anton Dukhovnikov) (3.0.1.0)
  - IBA: IBA:demosaic() add white balancing #4499 (by Anton
    Dukhovnikov) (3.0.1.0)
  - jpeg: Support reading Ultra HDR images #4484 (by Loïc Vital)
    (3.0.1.0)
  - jpeg: Support encoding/decoding arbitrary metadata as comments
    [#4430] (by Lukas Stockner) (3.0.1.0)
  - api: OIIO::getattribute() queries for available font families
    and styles #4523 (by peterhorvath111) (3.0.1.0)
  - perf: IBA::unsharp_mask() speed and memory optimization #4513
    (by Vlad (Kuzmin) Erium) (3.0.1.0)
  - perf: oiiotool --line, --text, --point, and --box speedups
    [#4518] (3.0.1.0)
  - perf: Jpeg2000 valid_file implementation, much faster than
    trying to open #4548 (by Aras Pranckevičius) (3.0.1.0)
  - perf: Faster utf8&lt;-&gt;utf16 conversion on Windows #4549 (by Aras
    Pranckevičius) (3.0.1.0)
  - fix(exr): Allow an empty "name" metadata to be read #4528 #4536
    (3.0.1.0)
  - fix(exr): Avoid integer overflow for large deep exr slice
    strides #4542 (3.0.1.0)
  - fix(raw): Fix channel layout #4516 (by Anton Dukhovnikov)
    (3.0.1.0)
  - build: Support static OCIO self-builds #4517 (by zachlewis)
    (3.0.1.0)
  - build: Add build recipe for PNG #4423 (by zachlewis) (3.0.1.0)
  - build: Add hardening options #4538 (3.0.1.0)
  - ci: Increased the macos timeout slightly to fix spurious
    failures #4526 (3.0.1.0)
  - ci: Don't rebuild docs in CI when only CMakeLists.txt changes
    [#4539] (3.0.1.0)
  - ci: Fix broken CI for ASWF 2021 and 2022 containers #4543
    (3.0.1.0)
  - docs: Update some old links to our new vanity URLs #4533
    (3.0.1.0)
  - docs: Quickstart guide #4531 (3.0.1.0)
  - docs: First stab at an architecture overview #4530 (3.0.1.0)
  - docs/admin: Code review guidelines and tips #4532 (3.0.1.0)
  - docs/admin: Document how to make signed release tags #4529
    (3.0.1.0)
- we can drop the buildrequires on google-droid-fonts again and use
  the fonts from the tarball for the testsuite:
  https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4615#issuecomment-2629490500
- cleanup the %check section after the the discussion in
  https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4615
  - symlink all fonts to ~abuild/fonts
  - minimize disabled tests list and document why they are filtered
    out
- Add back the LD_LIBRARY_PATH to fix some python tests
- simplify test section</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Fix build on leap
  - force newer GCC
  - disable python support
  - disabled python supports also disables man pages</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1753099200">- Relicense code under Apache 2.0 (#3926)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754049600">- Update to 3.0.9.0
  - maketx: Add flags to increase feature parity with txmake #4841
    (by Scott Milner)
  - perf: Speed up maketx --envlatl when multithreaded by over 10x.
    [#4825]
  - perf: Speed up OpenEXR non-core header read time #4832
  - oiiotool: Allow thread control for --parallel-frames #4818
  - ImageInput: Incorrect IOProxy logic related to valid_file #4839
  - python: Got strides wrong passing 2D numpy pixel array #4843
  - ffmpeg: Replace deprecated and soon removed avcodec_close with
    avcodec_free_context #4837 (by Vlad Erium)
  - build/python: For python stub generation, lock pybind11 to
    pre-3.0 #4831
  - build: Fix typo related to finding ccache #4833
  - build: PNG auto-build improvements #4835
  - build: Propagate CMAKE_MSVC_RUNTIME_LIBRARY #4842
  - build: Update jpeg2000input.cpp to include cstdarg #4836 (by
    Peter Kovář)
  - ci: Bump 'latest releases' tests to use pybind11 3.0.0 #4828
  - (docs): Correct docs and type of "resident_memory_used_MB"
    attribute #4824
  - (admin): Update SECURITY to reflect that 2.5 only gets critical
    fixes now #4829</changelog>
</package>
<package pkgid="0f5bb1c9db4da603db496910b8a21934348432e87acfbd1c6c5bb0b0a86e857eeede4b1e4d76efc92c77653886976ef34b0c22b19536468d24bbe6124b7d3bcd" name="OpenImageIO-devel" arch="x86_64">
  <version epoch="0" ver="3.0.9.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- on Leap use a newer libboost for getting blender to work</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- disable python and imageviewer on leap</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1741003200">- Fix build on aarch64 (where imageviewer is disabled)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742299200">- partially revert the previous change:
  so why are man pages behind the python bindings? because the
  CMakeLists.txt only renders man pages when python is enabled</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751803200">- Fix build with libheif 1.20
  https://github.com/AcademySoftwareFoundation/OpenImageIO/pull/4822
  Adds 06860e2d5b71d614e8878d738ea27d671be2994e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751803201">- update to 2.5.19.0
  - build: Fixes to build against libheif 1.20 #4822 (by Rui Chen)
- drop 06860e2d5b71d614e8878d738ea27d671be2994e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 3.0.8.1
  - build(heif): Fixes to build against libheif 1.20 #4822 (by Rui
    Chen)
- Update to 3.0.8.0
  - oiiotool: New expression pseudo-metadata term: SUBIMAGES #4804
  - oiiotool: Fixes to --missingfile behavior #4803
  - iv: Area probe #4767 (by Danielle Imogu)
  - python: Python ImageBuf.init_spec did not return correct value
    [#4805]
  - fix: ImageOutput::check_open logic was flawed #4779
  - int(iv): Add raw string syntax modifier for VSCode and Cursor
    to understand its glsl #4796 (by Aleksandr Motsjonov)
  - int(iv): Use R"()" syntax for glsl shader strings for better
    readability #4795 (by Aleksandr Motsjonov)
  - exr: Not honoring 'missingcolor' for scanline files #4757
  - build: Add arm_neon.h include on Windows ARM64 with clang-cl
    [#4691] (by Anthony Roberts)
  - build: Adjust pystring finding #4816
  - build(jxl): Use correct cmake variables for the include
    directories #4810 #4813 (by Jesse Yurkovich)
  - tests: Remove old test reference output we no longer need #4817
  - ci: Remove tests on Windows-2019 GitHub runner #4793
  - ci: Various ccache save/restore improvements for CI runs #4797
  - ci: Simplify gh-win-installdeps, no more vcpkg #4809
  - admin: Remove stale intake documents #4815
- Update to 3.0.7.0
  - oiiotool: --eraseattrib new modifier :fromfile=1 reads from a
    file
  - to get a list of patterns to specify the attributes to erase.
    [#4763] (by Lydia Zheng)
  - oiiotool: Added --create-dir flag to create directories needed
    by -o
  - if they doesn't already exist #4762 (by Dharshan Vishwanatha)
  - oiiotool: --eraseattrib:fromfile=1 #4763 (by Lydia Zheng)
  - oiiotool: Added create-dir cmd arg to create dir if it doesn't
    exist #4762 (by Dharshan Vishwanatha)
  - oiiotool: -i:native=1, fix --native behavior, fix convert
    datatype #4708
  - iv: Fix crash on .DS_Store; fix uppercase extensions #4764 (by
    Anton Dukhovnikov)
  - iv: Do not resize on open and other zoom fixes #4766 (by
    Aleksandr Motsjonov)
  - iv: Bug fix for iv window losing focus on mac on startup #4773
    (by Aleksandr Motsjonov)
  - iv: Implement files drag and drop into an iv window #4774 (by
    Aleksandr Motsjonov)
  - iv: Use screen pixel ratio to render sharp text in pixel view
    tool #4768 (by Aleksandr Motsjonov)
  - python: Add python stub files #4692 #4754 (by Chad Dombrova)
  - python: ImageBuf _repr_png_ method added, which allows use of
  - ImageBuf in Jupyter Notebooks as a displayable object. #4753
    (by Oktay Comu)
  - exr: Did not properly allocate 'missingcolor' vector #4751
  - exr: Add htj2k as a compression option for OpenEXR. Only works
    with OpenEXR 3.4 or higher (or in-progress OpenEXR main). #4785
    (by Li Ji)
  - iff: Improved IFF support reading and writing z buffers #4673
    (by Mikael Sundell)
  - webp: Respect the oiio:UnassociatedAlpha attribute #4770 (by
    Jesse Yurkovich)
  - webp: Allow finer grained control over WEBP compression
    settings #4772 (by Jesse Yurkovich)
  - flx/python: IBA.demosaic had GIL release in wrong spot #4777
  - fix: ImageInput/ImageOutput did not set per-file threads
    correctly #4750
  - fix: Address safety warnings in pvt::append_tiff_dir_entry
    [#4737]
  - build: Fix fmt throwing behavior warnings #4730
  - build: Detect libultrahdr version and enforce minimum of 1.3
    [#4729]
  - build: Fix failed test with old fmt #4758
  - ci: Save time by not checking out entire project history #4731
  - ci: New testing variants for VFX Platform 2025, Windows 2025
    [#4744], Linux ARM #4749
  - ci: Update ref output to compensate for GitHub windows drive
    changes #4761
  - ci: Pkg config libdir fix #4775 (by Scott Wilson)
  - ci: For docs workflow, lock down versions and speed up #4646
  - ci: Improved clang-format CI task #4647
  - ci: Add facility for benchmarking as part of CI #4745
  - ci: Update ref image for slightly changed freetype accents
    [#4765]
  - docs: Online docs improvements, mostly formatting (#4736,
    [#4743])
  - docs: Update Windows build instructions to rely on deps
    auto-build #4769
- Update to 3.0.6.1
  - fix: Restore OIIO_AVX512ER_ENABLED preprocessor symbol. Its
    absence could break backwards source compatibility if anyone
    was using it, even though it was useless and broken. Where
    compatibility goes, better safe than sorry. #4735
- Update to 3.0.6.0
  - oiiotool: Add --text modifiers measure= and render= #4681
  - python: Fix handle leak #4685
  - bmp: Correct the type for BMP x/y density #4695 (by Campbell
    Barton)
  - dpx: Specify the units for DPX scanned size #4694 (by Campbell
    Barton)
  - sgi: Fix valid_file to properly swap bytes on little-endian
    platforms #4697 (by Jesse Yurkovich)
  - build: Fix new dcmtk 3.6.9 vs C++ warning #4698
  - build: Address Robin-map vs CMake 4.0 compatibility #4701
  - build: Fix broken OIIO_SITE customization #4709
  - build: Address compiler warnings in simd.h #4724
- Update to 3.0.5.0
  - ImageBuf: ImageBuf::merge_metadata() merges one IB's metadata
    into another's without deleting the metadata already present.
    It can also filter which metadata are copied using a regex.
    [#4672]
  - oiiotool: --pastemeta now takes additional modifiers that
    allows options for merging rather than rewriting, and is able
    to copy only a subset of the metadata specified by a regex.
    [#4672] #4674 #4676
  - oiiotool: Fix invalid loop bound when appending mipmap textures
    using oiiotool #4671 (by Basile Fraboni)
  - png: Increase allowed width/height limit #4655 (by Jesse
    Yurkovich)
  - psd: Improved tag recognition in psd files #4663 (by Lydia
    Zheng)
  - tiff: The default value for bitspersample should be 1 #4670 (by
    vernalchen)
  - int: Switch to spans for some exif manipulation, fixing
    warnings #4689
  - span.h: OIIO::span improvements #4667
  - build: Better disabling of work when USE_PYTHON=0 #4657
  - build: Improve OpenJpeg version detection. #4665 (by
    jreichel-nvidia)
  - build: Bump auto-build libdeflate to 1.23 to avoid AVX512 not
    available errors #4679 (by LI JI)
  - build: Cmake 4.0 compatibility #4686 #4688
  - ci: Fix wheel building on Mac #4668 #4675
  - ci: Update libPNG address and version for ci &amp; autobuild #4659
- Update to 3.0.4.0
  - oiiotool: New expression eval tokens IS_CONSTANT, IS_BLACK
    [#4610] (by Lydia Zheng)
  - oiiotool: Better handling of wildcards that match no files
    [#4627]
  - ImageBuf: IB::pixeltype() did not always return the right value
    [#4614]
  - ImageBuf: Fix bug in ImageBuf construction from ptr + neg
    strides #4630
  - ICC: ICC profile recognition and robustness improvements,
    especially for PSD #4644
  - exr: Fill in OpenEXR lineOrder attribute when reading #4628 (by
    vernalchen)
  - ico: More robust to corrupted ICO files #4625
  - rla: More robust to corrupted RLA files that could overrun
    buffers #4624
  - span.h: Eliminate needless definitions of std::size(span) that
    were triggering strange behavior on recent MSVS compiler
    versions. #4652
  - build: Fix recently broken rpath setting #4618
  - build/python wheels: Ensure python-based builds use
    maj.min.patch SO versioning #4634 (by zachlewis)
  - build/python wheels: Fix recently broken rpath to restore
    python wheel building #4633
  - ci: Run wheel workflow on certain pushes #4617
  - docs: Argparse documentation/comments typos #4612
  - admin: Document Python Wheel completed in roadmap #4620 (by
    Todica Ionut)
  - admin: Add ".vs" to .gitignore #4645
  - admin: Set up .gitattributes file and ensure it properly
    categorizes certain files for GitHub's language analysis
    statistics. #4648
- Update to 3.0.3.1
  The release is identical to v3.0.3.0, but some build issues were
  fixed to allow proper build and upload of the Python wheels to
  PyPI for the Linux ARM variants.
- Update to 3.0.3.0
  - separate images #4591 (by Loïc Vital)
  - IBA: IBA:demosaic() adds the ability for X-Trans demosaicing
    [#4579] (by Anton Dukhovnikov)
  - IBA: fix demosaic handling of roi channels #4602 (by Anton
    Dukhovnikov)
  - png: Alpha premultiplication adjustment and attribute #4585
  - psd: Perform endian byteswap on correct buffer area for PSD RLE
    [#4600] (by Jesse Yurkovich)
  - raw: Add black level and BPS metadata #4601 (by Anton
    Dukhovnikov)
  - python: Disable loading Python DLLs from PATH by default on
    Windows #4590 (by zachlewis)
  - dev (span.h): Span_memcpy is a safer memcpy when you know the
    span boundaries #4597
  - dev (filesystem.h): Filesystem::getline() #4569
  - dev (paramlist.h): ParamValue as_span, as_cspan #4582
  - build: Recent change broke when using non-Apple clang on Apple
    [#4596]
  - build: Fix build_cmake.bash script for aarch64, bump its
    default version #4581
  - build: Fix libraw definitions (again) #4588
  - ci: Upgrade to newer actions #4570
  - ci: Test and document support for WebP 1.5 and fmt 11.1 #4574
  - ci: Only pass build-steps the secrets it needs #4576
  - ci: Fix Windows 2019 CI -- make python version match the runner
    [#4592]
  - ci: Raise 'latest' tests to use new fmt 11.1.2 #4593
  - ci: Adjust some pugixml versions #4594
  - ci: Allow special branch names to prune CI jobs #4604
  - tests: Improve Ptex testing #4573
  - tests: Better testing coverage of null image reader/writer
    [#4578]
  - tests: At long last, set up a softimage reading test. #4583
  - tests: Additional ref output for jpeg-corrupt test #4595
  - docs: Fix typo in oiiotool's gradient fill example #4589 (by
    Loïc Vital)
- update test images to 20250119T083517
- Update to 3.0.2.0
  - api: Add global attribute imageinput:strict #4560
  - various formats: Detect invalid ICC profile tags #4557 #4565
  - various formats: IPTC fields have length limits, protect
    against attributes passed that are too long to fit in them.
    [#4568]
  - pnm: Handle broken pnm files with invalid resolution #4561
  - pnm: Handle broken pgm having memory access error #4559
  - int: Some LoggedTimer instances lacked a variable name #4571
  - build: Use target_compile_options (fixes a LibRaw build issue)
    [#4556] (by Don Olmstead)
  - ci: Refactor using a single steps workflow #4545
  - ci: Fixups of analysis workflow #4572
  - docs: Minor fixes and typos #4564
  - admin: Sign release artifacts #4580
- Update to 3.0.1.0
  - IBA: New IBA::scale() #4541 (by Anton Dukhovnikov) (3.0.1.0)
  - IBA: IBA:demosaic() add white balancing #4499 (by Anton
    Dukhovnikov) (3.0.1.0)
  - jpeg: Support reading Ultra HDR images #4484 (by Loïc Vital)
    (3.0.1.0)
  - jpeg: Support encoding/decoding arbitrary metadata as comments
    [#4430] (by Lukas Stockner) (3.0.1.0)
  - api: OIIO::getattribute() queries for available font families
    and styles #4523 (by peterhorvath111) (3.0.1.0)
  - perf: IBA::unsharp_mask() speed and memory optimization #4513
    (by Vlad (Kuzmin) Erium) (3.0.1.0)
  - perf: oiiotool --line, --text, --point, and --box speedups
    [#4518] (3.0.1.0)
  - perf: Jpeg2000 valid_file implementation, much faster than
    trying to open #4548 (by Aras Pranckevičius) (3.0.1.0)
  - perf: Faster utf8&lt;-&gt;utf16 conversion on Windows #4549 (by Aras
    Pranckevičius) (3.0.1.0)
  - fix(exr): Allow an empty "name" metadata to be read #4528 #4536
    (3.0.1.0)
  - fix(exr): Avoid integer overflow for large deep exr slice
    strides #4542 (3.0.1.0)
  - fix(raw): Fix channel layout #4516 (by Anton Dukhovnikov)
    (3.0.1.0)
  - build: Support static OCIO self-builds #4517 (by zachlewis)
    (3.0.1.0)
  - build: Add build recipe for PNG #4423 (by zachlewis) (3.0.1.0)
  - build: Add hardening options #4538 (3.0.1.0)
  - ci: Increased the macos timeout slightly to fix spurious
    failures #4526 (3.0.1.0)
  - ci: Don't rebuild docs in CI when only CMakeLists.txt changes
    [#4539] (3.0.1.0)
  - ci: Fix broken CI for ASWF 2021 and 2022 containers #4543
    (3.0.1.0)
  - docs: Update some old links to our new vanity URLs #4533
    (3.0.1.0)
  - docs: Quickstart guide #4531 (3.0.1.0)
  - docs: First stab at an architecture overview #4530 (3.0.1.0)
  - docs/admin: Code review guidelines and tips #4532 (3.0.1.0)
  - docs/admin: Document how to make signed release tags #4529
    (3.0.1.0)
- we can drop the buildrequires on google-droid-fonts again and use
  the fonts from the tarball for the testsuite:
  https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4615#issuecomment-2629490500
- cleanup the %check section after the the discussion in
  https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4615
  - symlink all fonts to ~abuild/fonts
  - minimize disabled tests list and document why they are filtered
    out
- Add back the LD_LIBRARY_PATH to fix some python tests
- simplify test section</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Fix build on leap
  - force newer GCC
  - disable python support
  - disabled python supports also disables man pages</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1753099200">- Relicense code under Apache 2.0 (#3926)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754049600">- Update to 3.0.9.0
  - maketx: Add flags to increase feature parity with txmake #4841
    (by Scott Milner)
  - perf: Speed up maketx --envlatl when multithreaded by over 10x.
    [#4825]
  - perf: Speed up OpenEXR non-core header read time #4832
  - oiiotool: Allow thread control for --parallel-frames #4818
  - ImageInput: Incorrect IOProxy logic related to valid_file #4839
  - python: Got strides wrong passing 2D numpy pixel array #4843
  - ffmpeg: Replace deprecated and soon removed avcodec_close with
    avcodec_free_context #4837 (by Vlad Erium)
  - build/python: For python stub generation, lock pybind11 to
    pre-3.0 #4831
  - build: Fix typo related to finding ccache #4833
  - build: PNG auto-build improvements #4835
  - build: Propagate CMAKE_MSVC_RUNTIME_LIBRARY #4842
  - build: Update jpeg2000input.cpp to include cstdarg #4836 (by
    Peter Kovář)
  - ci: Bump 'latest releases' tests to use pybind11 3.0.0 #4828
  - (docs): Correct docs and type of "resident_memory_used_MB"
    attribute #4824
  - (admin): Update SECURITY to reflect that 2.5 only gets critical
    fixes now #4829</changelog>
</package>
<package pkgid="7b6eb93df4fa16c900ee5bb7831e3fa39c7372db9d07715c686503dbdd23f0deae8f09a19dd3cd4f9604e9da3880d60bae7ec33eb2195d4415eb4a695998eca2" name="OpenImageIO-plugin-osl" arch="x86_64">
  <version epoch="0" ver="1.14.6.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585600">- update to 1.13.11.0:
  - fix/batched: Assume BatchedRendererServices texture derivatives
    are in st space. #1828 (by sfriedmapixar) (1.13.10.0)
  - fix: Make backfacing shadeop indicate backfacing shader-global
    is needed #1827 (by sfriedmapixar) (1.13.10.0)
  - deps: Handle various OpenImageIO deprecations and changes in
    the run-up to OIIO 3.0 #1834 #1806 #1838 #1842 #1850
    (1.13.10.0)
  - deps: Adjust to OIIO change to IC/TS API #1848 (1.13.10.0)
  - deps: Llvm 18 compat issue - include libclangAPINotes #1812
    (1.13.10.0)
  - deps: Make finding bison work better on Apple Silicon Macs +
    homebrew #1822 (1.13.10.0)
  - ci: Mods to CI to deal with OIIO master raising dependency mins
    [#1833] (1.13.10.0)
  - ci: Deal with CentOS 7 EOL and disappearance of yum mirrors
    [#1839] (1.13.10.0)
  - ci: Fix GHA CI after they upgraded nodejs #1837 (1.13.10.0)
  - admin: Change release notice icon to use the icon vs the normal
    logo so it shows up better #1777 (by John Mertic) (1.13.10.0)
- changes from 1.13.10.0
  - testrender: Implement new Oren-Nayar model from OpenPBR #1817
    (by Christopher Kulla)
  - docs: Fix outdated or wrong repo URLs #1811
- changes from 1.13.9.0
  - deps: Support for LLVM-18 #1773 (by مهدي شينون (Mehdi Chinoune)
    [#1803] (by Larry Gritz)
  - fix: Make isconnected() work with downstream renderer
    "connections." #1782 (by sfriedmapixar)
  - cleanup: Change OSL_CONSTEXPR14 to constexpr #1805
  - internals build: Fix ifdef typo #1804
  - build: Propagate cpp version #1797
  - build: Print commit hash of locally built dependencies #1798
  - ci: Lock down to OIIO 2.5 for icc tests #1799
  - ci: Suppress leak sanitizer warnings about internals of
    robin_hash #1807
  - docs: More detail about supported platforms in INSTALL.md #1796
- changes from 1.13.8.0
  - fix(batched): Codegen bug for compref with varying index for
    batched shading #1776 (by Alex Wells)
  - fix: Calculatenormal needs fliphandedness #1783 (by
    sfriedmapixar)
  - fix: Print closure missing error message at compile time
    instead of run time. #1781 (by sfriedmapixar)
  - int: Change long-deprecated OIIO macro to new one #1788
  - ci: Fix broken Macos-13 CI #1780
- changes from 1.13.7.0
  - fix: Mute partio error prints #1774 (by olegul)
  - ci: Test with Mac ARM runner #1770
  - docs: Fix links to RTD docs from github landing page #1768
  - admin: Switch release announcement workflow to jmertic's
    awesome action #1766
- changes from 1.13.6.1
  - New minimum dependencies and compatibility changes:
  - For GPU/OptiX mode, OptiX 6.0 support has been removed. For
    GPU rendering with OptiX, a minimum of OptiX 7.0 is required,
    and the Cuda minimum has been raised to 9.0 #1737
  - The minimum version OpenImageIO has been raised from 2.2 to
    2.4. #1591 #1722
  - The minimum CMake dependency has been raised from 3.12 to
    3.15 #1724 (1.13.5.0)
  - The minimum Imath/OpenEXR has been raised from 2.3 to 2.4.
    (Note: OSL 1.13 is probably the last major release family
    that will support Imath/OpenEXR 2.x.)
  - OSL Language and oslc compiler:
  - There have been no substantive changes to the OSL language in
    this release.
  - ⛰️ API changes, new options, new ShadingSystem features (for
    renderer writers):
  - A new shadingStateUniform pointer field was added to
    ShaderGlobals for planned future expansion and improved GPU
    support. #1585 (1.13.1.0)
  - Adding relaxed type-equivalency to ReParameter() #1639 (by
    cmstein) (1.13.2.1)
  - Expose llvm groupdata size as a shadergroup attribute #1642
    (by Chris Hellmuth) (1.13.4.0)
  - RendererServices API for letting get_texture_handle consider
    colorspace #1641 (1.13.4.0)
  - Make "compile_report" attribute an int instead of just 0/1.
    Passing 1 makes a brief report, values &gt;1 are more verbose.
    (Zero still prints no report.) #1654 (1.13.4.0)
  - Switch lockgeom to interpolated and interactive. The
    lockgeom=0 was confusing. Now we use interpolated=1 to mean
    "don't optimize it away because it might be interpolated
    across the geometry and thus won't have the same value at all
    points being shaded," and the subtly different interactive=1
    to mean "don't optimize it away because although it will
    always take on the same value at all points at the same time,
    the user might want to interactively adjust the value and we
    don't want to have to recompile the shader group if that
    happens." #1662 (1.13.4.0)
  - Add type information for needed attributes. #1650 (by Curtis
    Black) (1.13.4.0)
  - Add API for building attribute getter free functions. #1704
    (by Curtis Black) (1.13.5.0)
  - Rs fmt specification - Journaling Algorithm for error,
    warning, fprintf #1702 (by Steena Monteiro) #1711 #1715
    (1.13.5.0)
  - 🚀 SIMD batched shading mode
  - Fix some array overruns (asymptomatic, but still potentially
    buggy) in common_ancestor_between. #1577 (1.13.0.2)
  - Fix issue with closure keyword parameters. #1620
    (1.13.2.0/1.12.8.0)
  - Fix crash when adding a default initialized closure. #1624
    (1.13.2.0/1.12.8.0)
  - Fix support for closures with array types. #1630
    (1.13.2.0/1.12.8.0)
  - Fix bug with masked wide llvm_gen_closure() #1637 (by
    danieldresser-ie) (1.13.2.1)
  - Fix Force LLVM Boolean #1717 (by Alex Wells)
  - Batched pointcloud if "index" is not passed #1753 (by Alex
    Wells)
  - 🚀 OptiX GPU rendering
  - OptiX 6.0 support has been removed. For GPU rendering with
    OptiX, a minimum of OptiX 7.0 is required.
  - Big overhaul/simplification of how strings are represented on
    the GPU: the extra level of indirection to global variables
    is removed, and strings are simply represented in ordinary
    variables as the hash of their characters. #1531 (1.13.0.0)
    [#1553] (1.13.0.1)
  - Better PTX cache hit rate by eliminating several sources of
    not being strictly deterministic in the PTX text we were
    generating. #1566 #1570 (1.13.0.1)
  - Fix PTX symbol visibility issues. #1609 (1.13.2.0)
  - Hide more code that is only used for OptiX mode, when OptiX
    is disabled. #1608 (1.13.2.0)
  - Remove dependency on OptiX SDK for building core OSL with
    OptiX support. You can now build OSL with OptiX support
    enabled even if you don't have the OptiX SDK headers present
    at build time. But you will still need them to build your
    OptiX-based application that uses OSL for GPU rendering.
    [#1627] (1.13.2.0/1.12.8.0)
  - GPU/OptiX support of ReParameter #1686 (1.13.4.0)
  - Fix userdata derivatives for interpolated params on GPU #1685
    (by Pascal Lecocq) (1.13.4.0)
  - Enable userdata derivatives for interpolated params on GPU
    [#1657] (by Chris Hellmuth) (1.13.4.0)
  - Move qualifying GroupData params onto stack for higher
    performance. #1710 (by Chris Hellmuth) (1.13.5.0)
  - Handle mixed string casting that plagues optix codegen #1718
    (1.13.5.0)
  - Add missing members to ShaderGlobals in rend_lib.h #1721 (by
    Tim Grant) (1.13.5.0)
  - OptiX direct callable API that owns groupdata buffer #1683
    (by Chris Hellmuth) (1.13.5.0)
  - OptiX PTX pipeline overhaul #1680 (by Tim Grant) (1.13.5.0)
  - Perf: Don't insert redundant run layer calls inside a basic
    block #1665 #1669 #1672 (by Chris Hellmuth) (1.13.4.0)
  - Fix NVPTX TargetMachine leak, etc. #1763 (by Tim Grant)
  - 🐛/🔧 Internals: fixes, improvements, and developer concerns
  - Fix memory leak in oslc ASTvariable_declaration. #1576
    (1.13.0.2)
  - Fix memory leaks in LPE code in error conditions. #1593 #1594
    (1.13.0.3)
  - Fix mismatched strides when calling OCIO for transformc with
    derivs #1646 (1.13.4.0)
  - Set up ray types for testrender #1648 (1.13.4.0)
  - Fix userdata binding corner case #1673 (by Alejandro Conty)
    (1.13.4.0)
  - Fix constant float values being converted to ints #1674 (by
    Declan Russell) (1.13.4.0)
  - Don't try to ReParameter symbols not in the group #1693 (by
    Alejandro Conty) (1.13.5.0)
  - Have ReParameter only copy data when it changes #1698
    (1.13.5.0)
  - Avoid deprecated OSLQuery ctr in test example #1699
    (1.13.5.0)
  - Zero derivs for interactive params when needed #1700 (by
    Alejandro Conty) (1.13.5.0)
  - oslc bug fix: shader params whose default values involve
    "init ops" could be incorrectly initialized if their values
    came from instance parameters set to zero. #1578 (1.13.0.2)
  - oslc: Add missing fmod() variants #1643 (1.13.4.0)
  - Simple constant folding of binary expressions now happen on
    the oslc side #1653 (1.13.4.0)
  - platform.h:
  - New OSL_ALLOCA macro to allocate on the stack. #1589
    (1.13.0.3)
  - Define OSL::bitcast utility. #1610 (1.13.2.0)
  - Make sure that std::hash is defined for ustring and
    ustringhash. #1599 (1.13.1.1)
  - Deprecate LLVMUtil::internalize_module_functions. #1606
    (1.13.1.0)
  - Work toward always representing strings in shaders as
    ustringhash rather than ustring: phase 1 #1603 phase2 #1612
    (1.13.2.0) #1726 (1.13.5.0)
  - Remove unnecessary setting of locale::global #1636 (by
    danieldresser-ie) (1.13.2.1)
  - Fully define bitcast template #1635 (1.13.2.1)
  - Fix for ReParameter corner case #1670 (by cmstein) (1.13.4.0)
  - Switch deprecated oiio simd names to modern #1679 (1.13.4.0)
  - Give ShadingSystemImpl a handy use_optix() method #1682
    (1.13.4.0)
  - Fix default fmt logic changing in latest openimageio release
    [#1725] (1.13.5.0)
  - The recently added SS::find_symloc can have const args #1723
    (1.13.5.0)
  - SymOverrideInfo bitfields should be the same type #1745
  - Fix wrong offset of MxSheen param #1751 (by Rasmus Bonnedal)
  - Make get_texture_info robust to empty shaderglobals param
    [#1731]
  - Documentation
  - First stab at ReadTheDocs -- new Experimental OSL
    Documentation on ReadTheDocs is still a little rough, but
    eventually will be our primary documentation. #1736
  - doc/RELEASING.md documents our release process and versioning
    policies. #1572 (1.13.0.2)
  - Improve documentation of trace function #1671 (by AidanWelch)
    (1.13.4.0)
  - Update CONTRIBUTING #1689 (1.13.5.0)
  - Update logos #1705, Move logos and add an icon-only logo
    [#1707] (1.13.5.0)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585601">- Added fix-install-paths.patch:
  implement suggestions from
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/issues/1771
- use ldconfig scriptlets macros</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731931200">- Allow newer LLVM. it is no longer restricted to &lt; 15.9
  New upper limit is 18.9.
- for llvm &gt;= 16 it wants CXX standard 17</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Also lock the cmake(OpenImageIO) to the version smaller than 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- disable Qt on leap</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- Force newer boost on leap for blender</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- Update to 1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.0
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.4.0-beta1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.13.12.0
- refreshed fix-install-paths.patch
- add add-missing-cstdint.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 1.14.6.0
  - fix: Check for errors in ShadingSystem::ReParameter() #1998 (by
    cmstein)
  - fix: Pass the real number of channels to rs_texture and
    rs_texture3d on gpu #2004
  - build: Link batched libraries with liboslexec #1987 (by John
    Haddon)
  - build: Update include directives for OpenImageIO_ROOT #1997 (by
    cmstein)
  - build(optix): Simplify FindOptiX.cmake a bit now that OptiX 7
    is the minimum #1988
  - build(optix): Get OptiX headers from new improved location
    [#1989]
  - build: Add compatibility with LLVM 20.1 #1993 (by Sven-Hendrik
    Haase)
  - ci: Remove Windows-2019 job #1990
  - ci: GPU/OptiX full build and test #1992
  - ci: Improve CI caching scheme #1994
  - ci: Add vp2025 test #1995
- drop add-missing-cstdint.patch
- Allow OIIO 3 now</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752494400">- Place shader headers in /usr/share/OSL
- flag devel and doc packages noarch
- Improve wildcard patterns for packaged items</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Lock the python and gcc versions to the same versions as blender</changelog>
</package>
<package pkgid="35c3279c5dd64ea014a6d611c545e55f9e7520d00f855eef4e70f5109d86cc4a508e7e80a85d2a72ae1e448f818af9cd3310a39fc68f308c4c8b032b00706e8c" name="OpenLP" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="bp160.1.4"/>
  <changelog author="schrott3000@yahoo.de" date="1487592000">- Updated from version 2.4.4 to version 2.4.5
  * Spinners in Theme Wizard segfault on OS X (lp#1645867)
  * Formatting tags gets included in searchable lyric text (lp#1655988)
  * VideoPsalm import fails due to unexpected format (lp#1652851)
  * OSZL is ignored on save (inconsistent gui) (lp#1660473)
  * Initial "extract song usage data" produces a traceback (lp#1661416)
  * Importing photos does not give focus to OpenLP (lp#1487788)
  * Loop tooltip gets stuck to "Stop playing..." (lp#1512040)
  * Importing Songbeamer songs using latin1 encoding doesn't get decoded correctly (lp#1530597)
  * Typos in songusageplugin.py (lp#1532193)
  * Web remote does not work with newer versions of jQuery (lp#1605009)
  * Missing DB in unmounted disk results in Traceback (lp#1624661)
  * EasySlide importer gets the verse order wrong (lp#1655985)</changelog>
  <changelog author="schrott3000@yahoo.de" date="1491739200">- Updated from version 2.4.5 to version 2.4.6
  * Fixed a bug where the author type upgrade was being ignored because it was looking at the wrong table
  * Fixed a bug where the songs_songbooks table was not being created because the if expression was the wrong way round
  * Changed the songs_songbooks migration SQL slightly to take into account a bug that has (hopefully) been fixed
  * Sometimes the timer goes off as OpenLP is shutting down, and the application has already been deleted
  * Fixed opening the data folder (KDE thought the old way was an SMB share)
  * Fixed a problem with the new QMediaPlayer not controlling the playlist anymore
  * Added importing of author types to the OpenLP 2 song importer
  * Fixed a problem with loading Qt's translation files (lp#1676163)
  * Disabled the controls in the shortcut dialog unless a shortcut is actually selected</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1608206400">- nose dependency was actually not needed at all</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1679140800">- Update to 3.0.2:
  The difference is huge and the list of changes is long. Please,
  if you care study whole story on https://openlp.org/blog.
  This particular minor release changed:
  - Only show hash if song book number exists
  - FIX: Missing looping for theme background videos
  - Fix Songs' Topics media manager icon to be the same from the
    Song Maintenance dialog
  - Add ability to return transposed item with service_item
    format to avoid duplicate calls on remote
  - Fix OpenLyrics whitespaces being 'eaten' (again)
  - Fixg service manager's list exception when pressing 'Left'
    keyboard key without any item selected
  - Force the use of SqlAlchemy 1.4 for now
  - Removing login requirement from transpose endpoint
  - Handle verse ranges in BibleServer
  - Fix up loading 2.9.x services
  - Attempt to fix #1287 by checking for both str and bytes, and
    decoding bytes to unicode
  - Add debugging for VLC and fix strange state.
  - Display the closing progress dialog during plugin shutdown
  - Fix an issue with the Worship Center Pro importer
  - Fix white preview display when previewing presentations
  - Fix an issue where the websockets server would try to shut
    down even when -w is supplied
  - Use a simpler approach when creating a tmp file when saving
    service files</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1709035200">- Add dependency on setuptools</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1709380800">- Update to 3.1.0: See all the details at
  https://openlp.org/blog/2024/02/29/openlp-310-superb-seth-released
- Update and fix dependencies</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1735300800">- Update to 3.1.5: there has been a number of releases, details
  can be found at:
  https://openlp.org/blog/
- Add fix-version.patch to set the version at 3.1.5 instead of
  3.1.4</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1745496000">- Update licenses to match latest legal review</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1746273600">- Update to 3.1.6:
  * Fix media autostart behavior regarding video slide items
  * Attempt to prevent false antivirus warnings in Windows
  * Fix an incorrect version number in some builds
- Update to 3.1.7:
  * PDF presentations that were disabled in release 3.1.6 by accident are available again.
  * Fix issue 1733 by forcing VLC version 3.0.18.
- Drop no longer necessary fix-version.patch</changelog>
</package>
<package pkgid="7233b863de1f413c2636c10d87e8830c424248628c7efc919c01f22b47ab743f4d6288b4c8958866bc5ab4dc82ff25db8081fe621a9a5658de3189a337be63df" name="OpenSMTPD" arch="x86_64">
  <version epoch="0" ver="7.8.0p0" rel="bp160.1.1"/>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1751457600">- Updated the package to upstream version 7.7.0p0 (2025-05-12) that brings
  the following significant change:
  * updated to use imsg APIs</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1754568000">- Updated the spec file according to feedback:
  * included upstream source URL and uploaded the result of 'download_files'
    service manual run directly to OBS
  * switched to pkgconfig for library build dependency resolution
  * normalized to OpenSSL for all targets due to compilation issues with
    LibreSSL for Tumbleweed on armv7l
  * applied 'format_spec_file' service edits
  * switched to using macros for 'make' 'build' and 'install'
  * switched to using a macro for lowercase variant of the package name
    instead of hardcoding it, where applicable
  * removed 'strip' invocations because it breaks debuginfo packages; it
    is assumed OBS will strip binaries for release configuration
  * started depending on 'netcfg' package to provide /etc/aliases
  * removed '%attr' specification on '%files' where 'make install' does it
    well by default
  * removed rc symlink fix for rpmlint 'suse-missing-rclink' warning (no
    longer needed)
  * removed permissions.d specification; the package has only one permission
    configuration set</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1754568001">- Removed the rpmlintrc file. 'permissions-file-setuid-bit' requires
  review from the security team. Without the rpmlint allowlisting the
  package build is broken.</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1754568002">- Updated the spec file according to feedback:
  * added the Provides and Conflicts sections
  * changed the 'sed' expression to appear more traditional</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1756382400">- Updated the spec file so that default configuration works out of
  the box. The workaround is related to the issue as described in
  https://github.com/OpenSMTPD/OpenSMTPD/issues/853</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1756468800">- Further hardened the systemd service configuration.</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1757592000">- Updated the spec file according to feedback from boo#1247781:
  * the package takes ownership of /var/spool/mail like other
    packages that provide smtp_daemon (see discussion in
    https://github.com/rpm-software-management/rpmlint/pull/1392)
  * set_permissions/verify_permissions have been configured. At
    this moment (before package allowlisting), this causes rpmlint
    errors which is by design</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1760356800">- Added patches according to feedback from boo#1247781:
  * OpenSMTPD-reduced-permissions-on-SMTPD_SOCKET.patch: control socket
    permissions have been removed for world
  * OpenSMTPD-simplified-world-writable-spoolers-handling.patch: simplified
    world-writable spool handling. Changes from upstream have been imported
    before the next upstream version is released. Once it is released, this
    patch can be removed
  * permissions on /var/spool/mail were set to 755 which means server
    operator is expected to add relevant users to a group and adjust
    the mentioned directory's ownership and permissions appropriately</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1760702400">- Renamed the 'forward' man page to resolve conflict with an existing
  Factory package (vacation)</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1762171200">- Updated to version 7.8.0p0: (CVE-2025-62875 boo#1250838)
  - Don't reject single character AUTH PLAIN passwords.
  - Fix address family typo (PF_INET-&gt;PF_INET6).
  - Various documentation improvements.
  - Removed support for world-writable mail spools.
  - Updated contrib mail.local and lockspool.
  - Don't die if garbage is being sent on the local socket.
- removed patch included in update
  OpenSMTPD-simplified-world-writable-spoolers-handling.patch</changelog>
</package>
<package pkgid="39536e15d519552834101aa6d3d1d0e36c71b494082e00bd91d860f3a006cfacdffca25aaa03149ad25c3eef8f2c07cf4f0cf4e4630e180afaf12d6c9b884451" name="OpenSMTPD" arch="x86_64">
  <version epoch="0" ver="7.8.0p1" rel="bp160.1.1"/>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1754568000">- Updated the spec file according to feedback:
  * included upstream source URL and uploaded the result of 'download_files'
    service manual run directly to OBS
  * switched to pkgconfig for library build dependency resolution
  * normalized to OpenSSL for all targets due to compilation issues with
    LibreSSL for Tumbleweed on armv7l
  * applied 'format_spec_file' service edits
  * switched to using macros for 'make' 'build' and 'install'
  * switched to using a macro for lowercase variant of the package name
    instead of hardcoding it, where applicable
  * removed 'strip' invocations because it breaks debuginfo packages; it
    is assumed OBS will strip binaries for release configuration
  * started depending on 'netcfg' package to provide /etc/aliases
  * removed '%attr' specification on '%files' where 'make install' does it
    well by default
  * removed rc symlink fix for rpmlint 'suse-missing-rclink' warning (no
    longer needed)
  * removed permissions.d specification; the package has only one permission
    configuration set</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1754568001">- Removed the rpmlintrc file. 'permissions-file-setuid-bit' requires
  review from the security team. Without the rpmlint allowlisting the
  package build is broken.</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1754568002">- Updated the spec file according to feedback:
  * added the Provides and Conflicts sections
  * changed the 'sed' expression to appear more traditional</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1756382400">- Updated the spec file so that default configuration works out of
  the box. The workaround is related to the issue as described in
  https://github.com/OpenSMTPD/OpenSMTPD/issues/853</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1756468800">- Further hardened the systemd service configuration.</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1757592000">- Updated the spec file according to feedback from boo#1247781:
  * the package takes ownership of /var/spool/mail like other
    packages that provide smtp_daemon (see discussion in
    https://github.com/rpm-software-management/rpmlint/pull/1392)
  * set_permissions/verify_permissions have been configured. At
    this moment (before package allowlisting), this causes rpmlint
    errors which is by design</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1760356800">- Added patches according to feedback from boo#1247781:
  * OpenSMTPD-reduced-permissions-on-SMTPD_SOCKET.patch: control socket
    permissions have been removed for world
  * OpenSMTPD-simplified-world-writable-spoolers-handling.patch: simplified
    world-writable spool handling. Changes from upstream have been imported
    before the next upstream version is released. Once it is released, this
    patch can be removed
  * permissions on /var/spool/mail were set to 755 which means server
    operator is expected to add relevant users to a group and adjust
    the mentioned directory's ownership and permissions appropriately</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1760702400">- Renamed the 'forward' man page to resolve conflict with an existing
  Factory package (vacation)</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1762171200">- Updated to version 7.8.0p0: (CVE-2025-62875 boo#1250838)
  - Don't reject single character AUTH PLAIN passwords.
  - Fix address family typo (PF_INET-&gt;PF_INET6).
  - Various documentation improvements.
  - Removed support for world-writable mail spools.
  - Updated contrib mail.local and lockspool.
  - Don't die if garbage is being sent on the local socket.
- removed patch included in update
  OpenSMTPD-simplified-world-writable-spoolers-handling.patch</changelog>
  <changelog author="Mislav Bozicevic &lt;mislav.bozicevic@suse.com&gt;" date="1778760000">- Updated to version 7.8.0p1: (boo#1263040)
  - table_proc: ensure the request does not contain newlines
- Removed OpenSMTPD-reduced-permissions-on-SMTPD_SOCKET.patch to
  support use case described in boo#1263040
- Further hardened the systemd service configuration by switching
  RestrictAddressFamilies from blocklist to allowlist</changelog>
</package>
<package pkgid="730fb2be3a3f0ceb5b771ac0a29f423305d5f2a1c61f5640ab4082b996649465d0cfa014804c343880036258088660d0019a0cd6ec8503d297f6a8eeaaafd66d" name="OpenSceneGraph" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="26d1d8f9363824843ffc0154904894f7372612314cc224a5ff41632f6d4b7f5ea4217a7a6da3de332054a1c5497f80345c70e0ce11a776046c34e9ab3716bd23" name="OpenSceneGraph-examples" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="e6dd1da54cf91208bb3051bb912a50dc3594c2fafe50fe74b692577ac3b9479780b86a0c64776b6caec61bb502eb5e0f42bbc83cdbf0214d5ad715653e2d1318" name="OpenSceneGraph-plugin-collada" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="b7f07470c095393738572431c029314ded5eb7fb70cd8ff1c1ae32dce19ad85f692b831c63f27bd198580080ccefdc1dc2c829fee6ccd60fb56a07ffcc98f493" name="OpenSceneGraph-plugin-gdal" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="8b4efab119263af965d378b03ec5cc498924237693f736a05e78cc163ce053655698a8f3aa7f4a9d69935f250164ba98c84c3a28b812e41e002f540d1cd44ee7" name="OpenSceneGraph-plugin-gstreamer" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="a1b613bf26905c2e5ab697d89ee01b21ba1d1fadc3c6bc03aa64394bf2b6e35687f93573f555a215d05479f20ff8a14d7f8b703f0d9be893df07b58e0fd936d3" name="OpenSceneGraph-plugin-opencascade" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="cba917e2f207f2d1c766d0d85670df92e0d9b2b7f99afd07caf95472fc30b8a664f12458bebd8356b53aab768a3057a65e88f3f1d9879687eea756b8a2943701" name="OpenSceneGraph-plugin-pdf" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="da032a903c9db7f22c2211762586de68dafdf73bb8d7b1e5538c15f83a160426ed6196cd8c7b0935f47c167af871a1115286e1a224307e890947d2f0f7e953c4" name="OpenSceneGraph-plugins" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.7"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585310400">- Update to 3.6.5. Check the ChangeLog file for the list of changes.
- Drop fix_deprecated_FIND_PACKAGE_wxWidgets_usage.patch. Merged
  upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1585915200">- Add more optional build dependencies.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1596196800">- Put back PowerPC specific constraints (from 6 to 7GB disk space)
  as failing on some builders.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1624104000">- Fix build on TW with asio 1.18.x, add
  0001-Replace-boost-bind-usage-with-std-bind.patch and
  0002-Replace-obsoleted-asio-basic_stream_socket-get_io_se.patch
- Disable GTK2 example on TW
- Disable wxWidgets example
- Do not package huge ChangeLog (commit log)</changelog>
  <changelog author="pgajdos@suse.com" date="1628596800">- fix build with openexr3: remove redundant BuildRequires (pkgconfig(IlmBase))</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651147200">- Resolve rpmlint report "libOpenSceneGraph158.x86_64: E:
  shlib-policy-name-error SONAME: libosg.so.161, expected package
  suffix: 161"</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1656936000">- Fix build with OpenCASCADE 7.6, add
  0001-Use-non-deprecated-methods-to-access-OpenCascade-Tri.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669896000">- Split several plugins with significant dependencies from main
  plugins package.
- Disable FFmpeg plugin on TW until compatibility issues are
  resolved.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1712232000">- added support for COLLADA plugin (.dae files)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1734091200">- Fix build with OpenCASCADE 7.8, add
  0001-OpenCASCADE-7.8-compatibility-replace-homegrown-Find.patch</changelog>
</package>
<package pkgid="c099fe4ca29bc7c0e952853a200df2ad6dd812720fdf9606236878d209b46cb748b07a12a22b92a55886a6c74452896d461ef95ceffeb36d55f6c117676c5b08" name="OpenShadingLanguage" arch="x86_64">
  <version epoch="0" ver="1.14.6.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585600">- update to 1.13.11.0:
  - fix/batched: Assume BatchedRendererServices texture derivatives
    are in st space. #1828 (by sfriedmapixar) (1.13.10.0)
  - fix: Make backfacing shadeop indicate backfacing shader-global
    is needed #1827 (by sfriedmapixar) (1.13.10.0)
  - deps: Handle various OpenImageIO deprecations and changes in
    the run-up to OIIO 3.0 #1834 #1806 #1838 #1842 #1850
    (1.13.10.0)
  - deps: Adjust to OIIO change to IC/TS API #1848 (1.13.10.0)
  - deps: Llvm 18 compat issue - include libclangAPINotes #1812
    (1.13.10.0)
  - deps: Make finding bison work better on Apple Silicon Macs +
    homebrew #1822 (1.13.10.0)
  - ci: Mods to CI to deal with OIIO master raising dependency mins
    [#1833] (1.13.10.0)
  - ci: Deal with CentOS 7 EOL and disappearance of yum mirrors
    [#1839] (1.13.10.0)
  - ci: Fix GHA CI after they upgraded nodejs #1837 (1.13.10.0)
  - admin: Change release notice icon to use the icon vs the normal
    logo so it shows up better #1777 (by John Mertic) (1.13.10.0)
- changes from 1.13.10.0
  - testrender: Implement new Oren-Nayar model from OpenPBR #1817
    (by Christopher Kulla)
  - docs: Fix outdated or wrong repo URLs #1811
- changes from 1.13.9.0
  - deps: Support for LLVM-18 #1773 (by مهدي شينون (Mehdi Chinoune)
    [#1803] (by Larry Gritz)
  - fix: Make isconnected() work with downstream renderer
    "connections." #1782 (by sfriedmapixar)
  - cleanup: Change OSL_CONSTEXPR14 to constexpr #1805
  - internals build: Fix ifdef typo #1804
  - build: Propagate cpp version #1797
  - build: Print commit hash of locally built dependencies #1798
  - ci: Lock down to OIIO 2.5 for icc tests #1799
  - ci: Suppress leak sanitizer warnings about internals of
    robin_hash #1807
  - docs: More detail about supported platforms in INSTALL.md #1796
- changes from 1.13.8.0
  - fix(batched): Codegen bug for compref with varying index for
    batched shading #1776 (by Alex Wells)
  - fix: Calculatenormal needs fliphandedness #1783 (by
    sfriedmapixar)
  - fix: Print closure missing error message at compile time
    instead of run time. #1781 (by sfriedmapixar)
  - int: Change long-deprecated OIIO macro to new one #1788
  - ci: Fix broken Macos-13 CI #1780
- changes from 1.13.7.0
  - fix: Mute partio error prints #1774 (by olegul)
  - ci: Test with Mac ARM runner #1770
  - docs: Fix links to RTD docs from github landing page #1768
  - admin: Switch release announcement workflow to jmertic's
    awesome action #1766
- changes from 1.13.6.1
  - New minimum dependencies and compatibility changes:
  - For GPU/OptiX mode, OptiX 6.0 support has been removed. For
    GPU rendering with OptiX, a minimum of OptiX 7.0 is required,
    and the Cuda minimum has been raised to 9.0 #1737
  - The minimum version OpenImageIO has been raised from 2.2 to
    2.4. #1591 #1722
  - The minimum CMake dependency has been raised from 3.12 to
    3.15 #1724 (1.13.5.0)
  - The minimum Imath/OpenEXR has been raised from 2.3 to 2.4.
    (Note: OSL 1.13 is probably the last major release family
    that will support Imath/OpenEXR 2.x.)
  - OSL Language and oslc compiler:
  - There have been no substantive changes to the OSL language in
    this release.
  - ⛰️ API changes, new options, new ShadingSystem features (for
    renderer writers):
  - A new shadingStateUniform pointer field was added to
    ShaderGlobals for planned future expansion and improved GPU
    support. #1585 (1.13.1.0)
  - Adding relaxed type-equivalency to ReParameter() #1639 (by
    cmstein) (1.13.2.1)
  - Expose llvm groupdata size as a shadergroup attribute #1642
    (by Chris Hellmuth) (1.13.4.0)
  - RendererServices API for letting get_texture_handle consider
    colorspace #1641 (1.13.4.0)
  - Make "compile_report" attribute an int instead of just 0/1.
    Passing 1 makes a brief report, values &gt;1 are more verbose.
    (Zero still prints no report.) #1654 (1.13.4.0)
  - Switch lockgeom to interpolated and interactive. The
    lockgeom=0 was confusing. Now we use interpolated=1 to mean
    "don't optimize it away because it might be interpolated
    across the geometry and thus won't have the same value at all
    points being shaded," and the subtly different interactive=1
    to mean "don't optimize it away because although it will
    always take on the same value at all points at the same time,
    the user might want to interactively adjust the value and we
    don't want to have to recompile the shader group if that
    happens." #1662 (1.13.4.0)
  - Add type information for needed attributes. #1650 (by Curtis
    Black) (1.13.4.0)
  - Add API for building attribute getter free functions. #1704
    (by Curtis Black) (1.13.5.0)
  - Rs fmt specification - Journaling Algorithm for error,
    warning, fprintf #1702 (by Steena Monteiro) #1711 #1715
    (1.13.5.0)
  - 🚀 SIMD batched shading mode
  - Fix some array overruns (asymptomatic, but still potentially
    buggy) in common_ancestor_between. #1577 (1.13.0.2)
  - Fix issue with closure keyword parameters. #1620
    (1.13.2.0/1.12.8.0)
  - Fix crash when adding a default initialized closure. #1624
    (1.13.2.0/1.12.8.0)
  - Fix support for closures with array types. #1630
    (1.13.2.0/1.12.8.0)
  - Fix bug with masked wide llvm_gen_closure() #1637 (by
    danieldresser-ie) (1.13.2.1)
  - Fix Force LLVM Boolean #1717 (by Alex Wells)
  - Batched pointcloud if "index" is not passed #1753 (by Alex
    Wells)
  - 🚀 OptiX GPU rendering
  - OptiX 6.0 support has been removed. For GPU rendering with
    OptiX, a minimum of OptiX 7.0 is required.
  - Big overhaul/simplification of how strings are represented on
    the GPU: the extra level of indirection to global variables
    is removed, and strings are simply represented in ordinary
    variables as the hash of their characters. #1531 (1.13.0.0)
    [#1553] (1.13.0.1)
  - Better PTX cache hit rate by eliminating several sources of
    not being strictly deterministic in the PTX text we were
    generating. #1566 #1570 (1.13.0.1)
  - Fix PTX symbol visibility issues. #1609 (1.13.2.0)
  - Hide more code that is only used for OptiX mode, when OptiX
    is disabled. #1608 (1.13.2.0)
  - Remove dependency on OptiX SDK for building core OSL with
    OptiX support. You can now build OSL with OptiX support
    enabled even if you don't have the OptiX SDK headers present
    at build time. But you will still need them to build your
    OptiX-based application that uses OSL for GPU rendering.
    [#1627] (1.13.2.0/1.12.8.0)
  - GPU/OptiX support of ReParameter #1686 (1.13.4.0)
  - Fix userdata derivatives for interpolated params on GPU #1685
    (by Pascal Lecocq) (1.13.4.0)
  - Enable userdata derivatives for interpolated params on GPU
    [#1657] (by Chris Hellmuth) (1.13.4.0)
  - Move qualifying GroupData params onto stack for higher
    performance. #1710 (by Chris Hellmuth) (1.13.5.0)
  - Handle mixed string casting that plagues optix codegen #1718
    (1.13.5.0)
  - Add missing members to ShaderGlobals in rend_lib.h #1721 (by
    Tim Grant) (1.13.5.0)
  - OptiX direct callable API that owns groupdata buffer #1683
    (by Chris Hellmuth) (1.13.5.0)
  - OptiX PTX pipeline overhaul #1680 (by Tim Grant) (1.13.5.0)
  - Perf: Don't insert redundant run layer calls inside a basic
    block #1665 #1669 #1672 (by Chris Hellmuth) (1.13.4.0)
  - Fix NVPTX TargetMachine leak, etc. #1763 (by Tim Grant)
  - 🐛/🔧 Internals: fixes, improvements, and developer concerns
  - Fix memory leak in oslc ASTvariable_declaration. #1576
    (1.13.0.2)
  - Fix memory leaks in LPE code in error conditions. #1593 #1594
    (1.13.0.3)
  - Fix mismatched strides when calling OCIO for transformc with
    derivs #1646 (1.13.4.0)
  - Set up ray types for testrender #1648 (1.13.4.0)
  - Fix userdata binding corner case #1673 (by Alejandro Conty)
    (1.13.4.0)
  - Fix constant float values being converted to ints #1674 (by
    Declan Russell) (1.13.4.0)
  - Don't try to ReParameter symbols not in the group #1693 (by
    Alejandro Conty) (1.13.5.0)
  - Have ReParameter only copy data when it changes #1698
    (1.13.5.0)
  - Avoid deprecated OSLQuery ctr in test example #1699
    (1.13.5.0)
  - Zero derivs for interactive params when needed #1700 (by
    Alejandro Conty) (1.13.5.0)
  - oslc bug fix: shader params whose default values involve
    "init ops" could be incorrectly initialized if their values
    came from instance parameters set to zero. #1578 (1.13.0.2)
  - oslc: Add missing fmod() variants #1643 (1.13.4.0)
  - Simple constant folding of binary expressions now happen on
    the oslc side #1653 (1.13.4.0)
  - platform.h:
  - New OSL_ALLOCA macro to allocate on the stack. #1589
    (1.13.0.3)
  - Define OSL::bitcast utility. #1610 (1.13.2.0)
  - Make sure that std::hash is defined for ustring and
    ustringhash. #1599 (1.13.1.1)
  - Deprecate LLVMUtil::internalize_module_functions. #1606
    (1.13.1.0)
  - Work toward always representing strings in shaders as
    ustringhash rather than ustring: phase 1 #1603 phase2 #1612
    (1.13.2.0) #1726 (1.13.5.0)
  - Remove unnecessary setting of locale::global #1636 (by
    danieldresser-ie) (1.13.2.1)
  - Fully define bitcast template #1635 (1.13.2.1)
  - Fix for ReParameter corner case #1670 (by cmstein) (1.13.4.0)
  - Switch deprecated oiio simd names to modern #1679 (1.13.4.0)
  - Give ShadingSystemImpl a handy use_optix() method #1682
    (1.13.4.0)
  - Fix default fmt logic changing in latest openimageio release
    [#1725] (1.13.5.0)
  - The recently added SS::find_symloc can have const args #1723
    (1.13.5.0)
  - SymOverrideInfo bitfields should be the same type #1745
  - Fix wrong offset of MxSheen param #1751 (by Rasmus Bonnedal)
  - Make get_texture_info robust to empty shaderglobals param
    [#1731]
  - Documentation
  - First stab at ReadTheDocs -- new Experimental OSL
    Documentation on ReadTheDocs is still a little rough, but
    eventually will be our primary documentation. #1736
  - doc/RELEASING.md documents our release process and versioning
    policies. #1572 (1.13.0.2)
  - Improve documentation of trace function #1671 (by AidanWelch)
    (1.13.4.0)
  - Update CONTRIBUTING #1689 (1.13.5.0)
  - Update logos #1705, Move logos and add an icon-only logo
    [#1707] (1.13.5.0)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585601">- Added fix-install-paths.patch:
  implement suggestions from
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/issues/1771
- use ldconfig scriptlets macros</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731931200">- Allow newer LLVM. it is no longer restricted to &lt; 15.9
  New upper limit is 18.9.
- for llvm &gt;= 16 it wants CXX standard 17</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Also lock the cmake(OpenImageIO) to the version smaller than 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- disable Qt on leap</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- Force newer boost on leap for blender</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- Update to 1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.0
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.4.0-beta1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.13.12.0
- refreshed fix-install-paths.patch
- add add-missing-cstdint.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 1.14.6.0
  - fix: Check for errors in ShadingSystem::ReParameter() #1998 (by
    cmstein)
  - fix: Pass the real number of channels to rs_texture and
    rs_texture3d on gpu #2004
  - build: Link batched libraries with liboslexec #1987 (by John
    Haddon)
  - build: Update include directives for OpenImageIO_ROOT #1997 (by
    cmstein)
  - build(optix): Simplify FindOptiX.cmake a bit now that OptiX 7
    is the minimum #1988
  - build(optix): Get OptiX headers from new improved location
    [#1989]
  - build: Add compatibility with LLVM 20.1 #1993 (by Sven-Hendrik
    Haase)
  - ci: Remove Windows-2019 job #1990
  - ci: GPU/OptiX full build and test #1992
  - ci: Improve CI caching scheme #1994
  - ci: Add vp2025 test #1995
- drop add-missing-cstdint.patch
- Allow OIIO 3 now</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752494400">- Place shader headers in /usr/share/OSL
- flag devel and doc packages noarch
- Improve wildcard patterns for packaged items</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Lock the python and gcc versions to the same versions as blender</changelog>
</package>
<package pkgid="10e94c4d8d1f035b03b2b017fdf7c7c7b4bab0a7f69932e38c9ce764765ec7573bcd1a7c62d761cac65f42d2f54290b57a856eb6ec57cd60339d1f92885456f9" name="OpenShadingLanguage-common-headers" arch="noarch">
  <version epoch="0" ver="1.14.6.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585600">- update to 1.13.11.0:
  - fix/batched: Assume BatchedRendererServices texture derivatives
    are in st space. #1828 (by sfriedmapixar) (1.13.10.0)
  - fix: Make backfacing shadeop indicate backfacing shader-global
    is needed #1827 (by sfriedmapixar) (1.13.10.0)
  - deps: Handle various OpenImageIO deprecations and changes in
    the run-up to OIIO 3.0 #1834 #1806 #1838 #1842 #1850
    (1.13.10.0)
  - deps: Adjust to OIIO change to IC/TS API #1848 (1.13.10.0)
  - deps: Llvm 18 compat issue - include libclangAPINotes #1812
    (1.13.10.0)
  - deps: Make finding bison work better on Apple Silicon Macs +
    homebrew #1822 (1.13.10.0)
  - ci: Mods to CI to deal with OIIO master raising dependency mins
    [#1833] (1.13.10.0)
  - ci: Deal with CentOS 7 EOL and disappearance of yum mirrors
    [#1839] (1.13.10.0)
  - ci: Fix GHA CI after they upgraded nodejs #1837 (1.13.10.0)
  - admin: Change release notice icon to use the icon vs the normal
    logo so it shows up better #1777 (by John Mertic) (1.13.10.0)
- changes from 1.13.10.0
  - testrender: Implement new Oren-Nayar model from OpenPBR #1817
    (by Christopher Kulla)
  - docs: Fix outdated or wrong repo URLs #1811
- changes from 1.13.9.0
  - deps: Support for LLVM-18 #1773 (by مهدي شينون (Mehdi Chinoune)
    [#1803] (by Larry Gritz)
  - fix: Make isconnected() work with downstream renderer
    "connections." #1782 (by sfriedmapixar)
  - cleanup: Change OSL_CONSTEXPR14 to constexpr #1805
  - internals build: Fix ifdef typo #1804
  - build: Propagate cpp version #1797
  - build: Print commit hash of locally built dependencies #1798
  - ci: Lock down to OIIO 2.5 for icc tests #1799
  - ci: Suppress leak sanitizer warnings about internals of
    robin_hash #1807
  - docs: More detail about supported platforms in INSTALL.md #1796
- changes from 1.13.8.0
  - fix(batched): Codegen bug for compref with varying index for
    batched shading #1776 (by Alex Wells)
  - fix: Calculatenormal needs fliphandedness #1783 (by
    sfriedmapixar)
  - fix: Print closure missing error message at compile time
    instead of run time. #1781 (by sfriedmapixar)
  - int: Change long-deprecated OIIO macro to new one #1788
  - ci: Fix broken Macos-13 CI #1780
- changes from 1.13.7.0
  - fix: Mute partio error prints #1774 (by olegul)
  - ci: Test with Mac ARM runner #1770
  - docs: Fix links to RTD docs from github landing page #1768
  - admin: Switch release announcement workflow to jmertic's
    awesome action #1766
- changes from 1.13.6.1
  - New minimum dependencies and compatibility changes:
  - For GPU/OptiX mode, OptiX 6.0 support has been removed. For
    GPU rendering with OptiX, a minimum of OptiX 7.0 is required,
    and the Cuda minimum has been raised to 9.0 #1737
  - The minimum version OpenImageIO has been raised from 2.2 to
    2.4. #1591 #1722
  - The minimum CMake dependency has been raised from 3.12 to
    3.15 #1724 (1.13.5.0)
  - The minimum Imath/OpenEXR has been raised from 2.3 to 2.4.
    (Note: OSL 1.13 is probably the last major release family
    that will support Imath/OpenEXR 2.x.)
  - OSL Language and oslc compiler:
  - There have been no substantive changes to the OSL language in
    this release.
  - ⛰️ API changes, new options, new ShadingSystem features (for
    renderer writers):
  - A new shadingStateUniform pointer field was added to
    ShaderGlobals for planned future expansion and improved GPU
    support. #1585 (1.13.1.0)
  - Adding relaxed type-equivalency to ReParameter() #1639 (by
    cmstein) (1.13.2.1)
  - Expose llvm groupdata size as a shadergroup attribute #1642
    (by Chris Hellmuth) (1.13.4.0)
  - RendererServices API for letting get_texture_handle consider
    colorspace #1641 (1.13.4.0)
  - Make "compile_report" attribute an int instead of just 0/1.
    Passing 1 makes a brief report, values &gt;1 are more verbose.
    (Zero still prints no report.) #1654 (1.13.4.0)
  - Switch lockgeom to interpolated and interactive. The
    lockgeom=0 was confusing. Now we use interpolated=1 to mean
    "don't optimize it away because it might be interpolated
    across the geometry and thus won't have the same value at all
    points being shaded," and the subtly different interactive=1
    to mean "don't optimize it away because although it will
    always take on the same value at all points at the same time,
    the user might want to interactively adjust the value and we
    don't want to have to recompile the shader group if that
    happens." #1662 (1.13.4.0)
  - Add type information for needed attributes. #1650 (by Curtis
    Black) (1.13.4.0)
  - Add API for building attribute getter free functions. #1704
    (by Curtis Black) (1.13.5.0)
  - Rs fmt specification - Journaling Algorithm for error,
    warning, fprintf #1702 (by Steena Monteiro) #1711 #1715
    (1.13.5.0)
  - 🚀 SIMD batched shading mode
  - Fix some array overruns (asymptomatic, but still potentially
    buggy) in common_ancestor_between. #1577 (1.13.0.2)
  - Fix issue with closure keyword parameters. #1620
    (1.13.2.0/1.12.8.0)
  - Fix crash when adding a default initialized closure. #1624
    (1.13.2.0/1.12.8.0)
  - Fix support for closures with array types. #1630
    (1.13.2.0/1.12.8.0)
  - Fix bug with masked wide llvm_gen_closure() #1637 (by
    danieldresser-ie) (1.13.2.1)
  - Fix Force LLVM Boolean #1717 (by Alex Wells)
  - Batched pointcloud if "index" is not passed #1753 (by Alex
    Wells)
  - 🚀 OptiX GPU rendering
  - OptiX 6.0 support has been removed. For GPU rendering with
    OptiX, a minimum of OptiX 7.0 is required.
  - Big overhaul/simplification of how strings are represented on
    the GPU: the extra level of indirection to global variables
    is removed, and strings are simply represented in ordinary
    variables as the hash of their characters. #1531 (1.13.0.0)
    [#1553] (1.13.0.1)
  - Better PTX cache hit rate by eliminating several sources of
    not being strictly deterministic in the PTX text we were
    generating. #1566 #1570 (1.13.0.1)
  - Fix PTX symbol visibility issues. #1609 (1.13.2.0)
  - Hide more code that is only used for OptiX mode, when OptiX
    is disabled. #1608 (1.13.2.0)
  - Remove dependency on OptiX SDK for building core OSL with
    OptiX support. You can now build OSL with OptiX support
    enabled even if you don't have the OptiX SDK headers present
    at build time. But you will still need them to build your
    OptiX-based application that uses OSL for GPU rendering.
    [#1627] (1.13.2.0/1.12.8.0)
  - GPU/OptiX support of ReParameter #1686 (1.13.4.0)
  - Fix userdata derivatives for interpolated params on GPU #1685
    (by Pascal Lecocq) (1.13.4.0)
  - Enable userdata derivatives for interpolated params on GPU
    [#1657] (by Chris Hellmuth) (1.13.4.0)
  - Move qualifying GroupData params onto stack for higher
    performance. #1710 (by Chris Hellmuth) (1.13.5.0)
  - Handle mixed string casting that plagues optix codegen #1718
    (1.13.5.0)
  - Add missing members to ShaderGlobals in rend_lib.h #1721 (by
    Tim Grant) (1.13.5.0)
  - OptiX direct callable API that owns groupdata buffer #1683
    (by Chris Hellmuth) (1.13.5.0)
  - OptiX PTX pipeline overhaul #1680 (by Tim Grant) (1.13.5.0)
  - Perf: Don't insert redundant run layer calls inside a basic
    block #1665 #1669 #1672 (by Chris Hellmuth) (1.13.4.0)
  - Fix NVPTX TargetMachine leak, etc. #1763 (by Tim Grant)
  - 🐛/🔧 Internals: fixes, improvements, and developer concerns
  - Fix memory leak in oslc ASTvariable_declaration. #1576
    (1.13.0.2)
  - Fix memory leaks in LPE code in error conditions. #1593 #1594
    (1.13.0.3)
  - Fix mismatched strides when calling OCIO for transformc with
    derivs #1646 (1.13.4.0)
  - Set up ray types for testrender #1648 (1.13.4.0)
  - Fix userdata binding corner case #1673 (by Alejandro Conty)
    (1.13.4.0)
  - Fix constant float values being converted to ints #1674 (by
    Declan Russell) (1.13.4.0)
  - Don't try to ReParameter symbols not in the group #1693 (by
    Alejandro Conty) (1.13.5.0)
  - Have ReParameter only copy data when it changes #1698
    (1.13.5.0)
  - Avoid deprecated OSLQuery ctr in test example #1699
    (1.13.5.0)
  - Zero derivs for interactive params when needed #1700 (by
    Alejandro Conty) (1.13.5.0)
  - oslc bug fix: shader params whose default values involve
    "init ops" could be incorrectly initialized if their values
    came from instance parameters set to zero. #1578 (1.13.0.2)
  - oslc: Add missing fmod() variants #1643 (1.13.4.0)
  - Simple constant folding of binary expressions now happen on
    the oslc side #1653 (1.13.4.0)
  - platform.h:
  - New OSL_ALLOCA macro to allocate on the stack. #1589
    (1.13.0.3)
  - Define OSL::bitcast utility. #1610 (1.13.2.0)
  - Make sure that std::hash is defined for ustring and
    ustringhash. #1599 (1.13.1.1)
  - Deprecate LLVMUtil::internalize_module_functions. #1606
    (1.13.1.0)
  - Work toward always representing strings in shaders as
    ustringhash rather than ustring: phase 1 #1603 phase2 #1612
    (1.13.2.0) #1726 (1.13.5.0)
  - Remove unnecessary setting of locale::global #1636 (by
    danieldresser-ie) (1.13.2.1)
  - Fully define bitcast template #1635 (1.13.2.1)
  - Fix for ReParameter corner case #1670 (by cmstein) (1.13.4.0)
  - Switch deprecated oiio simd names to modern #1679 (1.13.4.0)
  - Give ShadingSystemImpl a handy use_optix() method #1682
    (1.13.4.0)
  - Fix default fmt logic changing in latest openimageio release
    [#1725] (1.13.5.0)
  - The recently added SS::find_symloc can have const args #1723
    (1.13.5.0)
  - SymOverrideInfo bitfields should be the same type #1745
  - Fix wrong offset of MxSheen param #1751 (by Rasmus Bonnedal)
  - Make get_texture_info robust to empty shaderglobals param
    [#1731]
  - Documentation
  - First stab at ReadTheDocs -- new Experimental OSL
    Documentation on ReadTheDocs is still a little rough, but
    eventually will be our primary documentation. #1736
  - doc/RELEASING.md documents our release process and versioning
    policies. #1572 (1.13.0.2)
  - Improve documentation of trace function #1671 (by AidanWelch)
    (1.13.4.0)
  - Update CONTRIBUTING #1689 (1.13.5.0)
  - Update logos #1705, Move logos and add an icon-only logo
    [#1707] (1.13.5.0)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585601">- Added fix-install-paths.patch:
  implement suggestions from
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/issues/1771
- use ldconfig scriptlets macros</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731931200">- Allow newer LLVM. it is no longer restricted to &lt; 15.9
  New upper limit is 18.9.
- for llvm &gt;= 16 it wants CXX standard 17</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Also lock the cmake(OpenImageIO) to the version smaller than 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- disable Qt on leap</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- Force newer boost on leap for blender</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- Update to 1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.0
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.4.0-beta1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.13.12.0
- refreshed fix-install-paths.patch
- add add-missing-cstdint.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 1.14.6.0
  - fix: Check for errors in ShadingSystem::ReParameter() #1998 (by
    cmstein)
  - fix: Pass the real number of channels to rs_texture and
    rs_texture3d on gpu #2004
  - build: Link batched libraries with liboslexec #1987 (by John
    Haddon)
  - build: Update include directives for OpenImageIO_ROOT #1997 (by
    cmstein)
  - build(optix): Simplify FindOptiX.cmake a bit now that OptiX 7
    is the minimum #1988
  - build(optix): Get OptiX headers from new improved location
    [#1989]
  - build: Add compatibility with LLVM 20.1 #1993 (by Sven-Hendrik
    Haase)
  - ci: Remove Windows-2019 job #1990
  - ci: GPU/OptiX full build and test #1992
  - ci: Improve CI caching scheme #1994
  - ci: Add vp2025 test #1995
- drop add-missing-cstdint.patch
- Allow OIIO 3 now</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752494400">- Place shader headers in /usr/share/OSL
- flag devel and doc packages noarch
- Improve wildcard patterns for packaged items</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Lock the python and gcc versions to the same versions as blender</changelog>
</package>
<package pkgid="237c9954ddc2aa797250692f082d26bf1d91084d2f3a8dfe14f2b1fb623fab082b1d416c154c5b73eb9ccf486dfb01f81a2b4014d45efc47e44d59247aa60766" name="OpenShadingLanguage-devel" arch="x86_64">
  <version epoch="0" ver="1.14.6.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585600">- update to 1.13.11.0:
  - fix/batched: Assume BatchedRendererServices texture derivatives
    are in st space. #1828 (by sfriedmapixar) (1.13.10.0)
  - fix: Make backfacing shadeop indicate backfacing shader-global
    is needed #1827 (by sfriedmapixar) (1.13.10.0)
  - deps: Handle various OpenImageIO deprecations and changes in
    the run-up to OIIO 3.0 #1834 #1806 #1838 #1842 #1850
    (1.13.10.0)
  - deps: Adjust to OIIO change to IC/TS API #1848 (1.13.10.0)
  - deps: Llvm 18 compat issue - include libclangAPINotes #1812
    (1.13.10.0)
  - deps: Make finding bison work better on Apple Silicon Macs +
    homebrew #1822 (1.13.10.0)
  - ci: Mods to CI to deal with OIIO master raising dependency mins
    [#1833] (1.13.10.0)
  - ci: Deal with CentOS 7 EOL and disappearance of yum mirrors
    [#1839] (1.13.10.0)
  - ci: Fix GHA CI after they upgraded nodejs #1837 (1.13.10.0)
  - admin: Change release notice icon to use the icon vs the normal
    logo so it shows up better #1777 (by John Mertic) (1.13.10.0)
- changes from 1.13.10.0
  - testrender: Implement new Oren-Nayar model from OpenPBR #1817
    (by Christopher Kulla)
  - docs: Fix outdated or wrong repo URLs #1811
- changes from 1.13.9.0
  - deps: Support for LLVM-18 #1773 (by مهدي شينون (Mehdi Chinoune)
    [#1803] (by Larry Gritz)
  - fix: Make isconnected() work with downstream renderer
    "connections." #1782 (by sfriedmapixar)
  - cleanup: Change OSL_CONSTEXPR14 to constexpr #1805
  - internals build: Fix ifdef typo #1804
  - build: Propagate cpp version #1797
  - build: Print commit hash of locally built dependencies #1798
  - ci: Lock down to OIIO 2.5 for icc tests #1799
  - ci: Suppress leak sanitizer warnings about internals of
    robin_hash #1807
  - docs: More detail about supported platforms in INSTALL.md #1796
- changes from 1.13.8.0
  - fix(batched): Codegen bug for compref with varying index for
    batched shading #1776 (by Alex Wells)
  - fix: Calculatenormal needs fliphandedness #1783 (by
    sfriedmapixar)
  - fix: Print closure missing error message at compile time
    instead of run time. #1781 (by sfriedmapixar)
  - int: Change long-deprecated OIIO macro to new one #1788
  - ci: Fix broken Macos-13 CI #1780
- changes from 1.13.7.0
  - fix: Mute partio error prints #1774 (by olegul)
  - ci: Test with Mac ARM runner #1770
  - docs: Fix links to RTD docs from github landing page #1768
  - admin: Switch release announcement workflow to jmertic's
    awesome action #1766
- changes from 1.13.6.1
  - New minimum dependencies and compatibility changes:
  - For GPU/OptiX mode, OptiX 6.0 support has been removed. For
    GPU rendering with OptiX, a minimum of OptiX 7.0 is required,
    and the Cuda minimum has been raised to 9.0 #1737
  - The minimum version OpenImageIO has been raised from 2.2 to
    2.4. #1591 #1722
  - The minimum CMake dependency has been raised from 3.12 to
    3.15 #1724 (1.13.5.0)
  - The minimum Imath/OpenEXR has been raised from 2.3 to 2.4.
    (Note: OSL 1.13 is probably the last major release family
    that will support Imath/OpenEXR 2.x.)
  - OSL Language and oslc compiler:
  - There have been no substantive changes to the OSL language in
    this release.
  - ⛰️ API changes, new options, new ShadingSystem features (for
    renderer writers):
  - A new shadingStateUniform pointer field was added to
    ShaderGlobals for planned future expansion and improved GPU
    support. #1585 (1.13.1.0)
  - Adding relaxed type-equivalency to ReParameter() #1639 (by
    cmstein) (1.13.2.1)
  - Expose llvm groupdata size as a shadergroup attribute #1642
    (by Chris Hellmuth) (1.13.4.0)
  - RendererServices API for letting get_texture_handle consider
    colorspace #1641 (1.13.4.0)
  - Make "compile_report" attribute an int instead of just 0/1.
    Passing 1 makes a brief report, values &gt;1 are more verbose.
    (Zero still prints no report.) #1654 (1.13.4.0)
  - Switch lockgeom to interpolated and interactive. The
    lockgeom=0 was confusing. Now we use interpolated=1 to mean
    "don't optimize it away because it might be interpolated
    across the geometry and thus won't have the same value at all
    points being shaded," and the subtly different interactive=1
    to mean "don't optimize it away because although it will
    always take on the same value at all points at the same time,
    the user might want to interactively adjust the value and we
    don't want to have to recompile the shader group if that
    happens." #1662 (1.13.4.0)
  - Add type information for needed attributes. #1650 (by Curtis
    Black) (1.13.4.0)
  - Add API for building attribute getter free functions. #1704
    (by Curtis Black) (1.13.5.0)
  - Rs fmt specification - Journaling Algorithm for error,
    warning, fprintf #1702 (by Steena Monteiro) #1711 #1715
    (1.13.5.0)
  - 🚀 SIMD batched shading mode
  - Fix some array overruns (asymptomatic, but still potentially
    buggy) in common_ancestor_between. #1577 (1.13.0.2)
  - Fix issue with closure keyword parameters. #1620
    (1.13.2.0/1.12.8.0)
  - Fix crash when adding a default initialized closure. #1624
    (1.13.2.0/1.12.8.0)
  - Fix support for closures with array types. #1630
    (1.13.2.0/1.12.8.0)
  - Fix bug with masked wide llvm_gen_closure() #1637 (by
    danieldresser-ie) (1.13.2.1)
  - Fix Force LLVM Boolean #1717 (by Alex Wells)
  - Batched pointcloud if "index" is not passed #1753 (by Alex
    Wells)
  - 🚀 OptiX GPU rendering
  - OptiX 6.0 support has been removed. For GPU rendering with
    OptiX, a minimum of OptiX 7.0 is required.
  - Big overhaul/simplification of how strings are represented on
    the GPU: the extra level of indirection to global variables
    is removed, and strings are simply represented in ordinary
    variables as the hash of their characters. #1531 (1.13.0.0)
    [#1553] (1.13.0.1)
  - Better PTX cache hit rate by eliminating several sources of
    not being strictly deterministic in the PTX text we were
    generating. #1566 #1570 (1.13.0.1)
  - Fix PTX symbol visibility issues. #1609 (1.13.2.0)
  - Hide more code that is only used for OptiX mode, when OptiX
    is disabled. #1608 (1.13.2.0)
  - Remove dependency on OptiX SDK for building core OSL with
    OptiX support. You can now build OSL with OptiX support
    enabled even if you don't have the OptiX SDK headers present
    at build time. But you will still need them to build your
    OptiX-based application that uses OSL for GPU rendering.
    [#1627] (1.13.2.0/1.12.8.0)
  - GPU/OptiX support of ReParameter #1686 (1.13.4.0)
  - Fix userdata derivatives for interpolated params on GPU #1685
    (by Pascal Lecocq) (1.13.4.0)
  - Enable userdata derivatives for interpolated params on GPU
    [#1657] (by Chris Hellmuth) (1.13.4.0)
  - Move qualifying GroupData params onto stack for higher
    performance. #1710 (by Chris Hellmuth) (1.13.5.0)
  - Handle mixed string casting that plagues optix codegen #1718
    (1.13.5.0)
  - Add missing members to ShaderGlobals in rend_lib.h #1721 (by
    Tim Grant) (1.13.5.0)
  - OptiX direct callable API that owns groupdata buffer #1683
    (by Chris Hellmuth) (1.13.5.0)
  - OptiX PTX pipeline overhaul #1680 (by Tim Grant) (1.13.5.0)
  - Perf: Don't insert redundant run layer calls inside a basic
    block #1665 #1669 #1672 (by Chris Hellmuth) (1.13.4.0)
  - Fix NVPTX TargetMachine leak, etc. #1763 (by Tim Grant)
  - 🐛/🔧 Internals: fixes, improvements, and developer concerns
  - Fix memory leak in oslc ASTvariable_declaration. #1576
    (1.13.0.2)
  - Fix memory leaks in LPE code in error conditions. #1593 #1594
    (1.13.0.3)
  - Fix mismatched strides when calling OCIO for transformc with
    derivs #1646 (1.13.4.0)
  - Set up ray types for testrender #1648 (1.13.4.0)
  - Fix userdata binding corner case #1673 (by Alejandro Conty)
    (1.13.4.0)
  - Fix constant float values being converted to ints #1674 (by
    Declan Russell) (1.13.4.0)
  - Don't try to ReParameter symbols not in the group #1693 (by
    Alejandro Conty) (1.13.5.0)
  - Have ReParameter only copy data when it changes #1698
    (1.13.5.0)
  - Avoid deprecated OSLQuery ctr in test example #1699
    (1.13.5.0)
  - Zero derivs for interactive params when needed #1700 (by
    Alejandro Conty) (1.13.5.0)
  - oslc bug fix: shader params whose default values involve
    "init ops" could be incorrectly initialized if their values
    came from instance parameters set to zero. #1578 (1.13.0.2)
  - oslc: Add missing fmod() variants #1643 (1.13.4.0)
  - Simple constant folding of binary expressions now happen on
    the oslc side #1653 (1.13.4.0)
  - platform.h:
  - New OSL_ALLOCA macro to allocate on the stack. #1589
    (1.13.0.3)
  - Define OSL::bitcast utility. #1610 (1.13.2.0)
  - Make sure that std::hash is defined for ustring and
    ustringhash. #1599 (1.13.1.1)
  - Deprecate LLVMUtil::internalize_module_functions. #1606
    (1.13.1.0)
  - Work toward always representing strings in shaders as
    ustringhash rather than ustring: phase 1 #1603 phase2 #1612
    (1.13.2.0) #1726 (1.13.5.0)
  - Remove unnecessary setting of locale::global #1636 (by
    danieldresser-ie) (1.13.2.1)
  - Fully define bitcast template #1635 (1.13.2.1)
  - Fix for ReParameter corner case #1670 (by cmstein) (1.13.4.0)
  - Switch deprecated oiio simd names to modern #1679 (1.13.4.0)
  - Give ShadingSystemImpl a handy use_optix() method #1682
    (1.13.4.0)
  - Fix default fmt logic changing in latest openimageio release
    [#1725] (1.13.5.0)
  - The recently added SS::find_symloc can have const args #1723
    (1.13.5.0)
  - SymOverrideInfo bitfields should be the same type #1745
  - Fix wrong offset of MxSheen param #1751 (by Rasmus Bonnedal)
  - Make get_texture_info robust to empty shaderglobals param
    [#1731]
  - Documentation
  - First stab at ReadTheDocs -- new Experimental OSL
    Documentation on ReadTheDocs is still a little rough, but
    eventually will be our primary documentation. #1736
  - doc/RELEASING.md documents our release process and versioning
    policies. #1572 (1.13.0.2)
  - Improve documentation of trace function #1671 (by AidanWelch)
    (1.13.4.0)
  - Update CONTRIBUTING #1689 (1.13.5.0)
  - Update logos #1705, Move logos and add an icon-only logo
    [#1707] (1.13.5.0)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585601">- Added fix-install-paths.patch:
  implement suggestions from
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/issues/1771
- use ldconfig scriptlets macros</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731931200">- Allow newer LLVM. it is no longer restricted to &lt; 15.9
  New upper limit is 18.9.
- for llvm &gt;= 16 it wants CXX standard 17</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Also lock the cmake(OpenImageIO) to the version smaller than 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- disable Qt on leap</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- Force newer boost on leap for blender</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- Update to 1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.0
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.4.0-beta1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.13.12.0
- refreshed fix-install-paths.patch
- add add-missing-cstdint.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 1.14.6.0
  - fix: Check for errors in ShadingSystem::ReParameter() #1998 (by
    cmstein)
  - fix: Pass the real number of channels to rs_texture and
    rs_texture3d on gpu #2004
  - build: Link batched libraries with liboslexec #1987 (by John
    Haddon)
  - build: Update include directives for OpenImageIO_ROOT #1997 (by
    cmstein)
  - build(optix): Simplify FindOptiX.cmake a bit now that OptiX 7
    is the minimum #1988
  - build(optix): Get OptiX headers from new improved location
    [#1989]
  - build: Add compatibility with LLVM 20.1 #1993 (by Sven-Hendrik
    Haase)
  - ci: Remove Windows-2019 job #1990
  - ci: GPU/OptiX full build and test #1992
  - ci: Improve CI caching scheme #1994
  - ci: Add vp2025 test #1995
- drop add-missing-cstdint.patch
- Allow OIIO 3 now</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752494400">- Place shader headers in /usr/share/OSL
- flag devel and doc packages noarch
- Improve wildcard patterns for packaged items</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Lock the python and gcc versions to the same versions as blender</changelog>
</package>
<package pkgid="d18d6a8ec44cc2a003cf43abaaa405f889bb1f94557a4c9f0238554c699c99ade3163a7e8cd6a80c27c23977de66ffa8b11dfd6173dc2d9d40f04059b2ac6833" name="OpenShadingLanguage-doc" arch="noarch">
  <version epoch="0" ver="1.14.6.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585600">- update to 1.13.11.0:
  - fix/batched: Assume BatchedRendererServices texture derivatives
    are in st space. #1828 (by sfriedmapixar) (1.13.10.0)
  - fix: Make backfacing shadeop indicate backfacing shader-global
    is needed #1827 (by sfriedmapixar) (1.13.10.0)
  - deps: Handle various OpenImageIO deprecations and changes in
    the run-up to OIIO 3.0 #1834 #1806 #1838 #1842 #1850
    (1.13.10.0)
  - deps: Adjust to OIIO change to IC/TS API #1848 (1.13.10.0)
  - deps: Llvm 18 compat issue - include libclangAPINotes #1812
    (1.13.10.0)
  - deps: Make finding bison work better on Apple Silicon Macs +
    homebrew #1822 (1.13.10.0)
  - ci: Mods to CI to deal with OIIO master raising dependency mins
    [#1833] (1.13.10.0)
  - ci: Deal with CentOS 7 EOL and disappearance of yum mirrors
    [#1839] (1.13.10.0)
  - ci: Fix GHA CI after they upgraded nodejs #1837 (1.13.10.0)
  - admin: Change release notice icon to use the icon vs the normal
    logo so it shows up better #1777 (by John Mertic) (1.13.10.0)
- changes from 1.13.10.0
  - testrender: Implement new Oren-Nayar model from OpenPBR #1817
    (by Christopher Kulla)
  - docs: Fix outdated or wrong repo URLs #1811
- changes from 1.13.9.0
  - deps: Support for LLVM-18 #1773 (by مهدي شينون (Mehdi Chinoune)
    [#1803] (by Larry Gritz)
  - fix: Make isconnected() work with downstream renderer
    "connections." #1782 (by sfriedmapixar)
  - cleanup: Change OSL_CONSTEXPR14 to constexpr #1805
  - internals build: Fix ifdef typo #1804
  - build: Propagate cpp version #1797
  - build: Print commit hash of locally built dependencies #1798
  - ci: Lock down to OIIO 2.5 for icc tests #1799
  - ci: Suppress leak sanitizer warnings about internals of
    robin_hash #1807
  - docs: More detail about supported platforms in INSTALL.md #1796
- changes from 1.13.8.0
  - fix(batched): Codegen bug for compref with varying index for
    batched shading #1776 (by Alex Wells)
  - fix: Calculatenormal needs fliphandedness #1783 (by
    sfriedmapixar)
  - fix: Print closure missing error message at compile time
    instead of run time. #1781 (by sfriedmapixar)
  - int: Change long-deprecated OIIO macro to new one #1788
  - ci: Fix broken Macos-13 CI #1780
- changes from 1.13.7.0
  - fix: Mute partio error prints #1774 (by olegul)
  - ci: Test with Mac ARM runner #1770
  - docs: Fix links to RTD docs from github landing page #1768
  - admin: Switch release announcement workflow to jmertic's
    awesome action #1766
- changes from 1.13.6.1
  - New minimum dependencies and compatibility changes:
  - For GPU/OptiX mode, OptiX 6.0 support has been removed. For
    GPU rendering with OptiX, a minimum of OptiX 7.0 is required,
    and the Cuda minimum has been raised to 9.0 #1737
  - The minimum version OpenImageIO has been raised from 2.2 to
    2.4. #1591 #1722
  - The minimum CMake dependency has been raised from 3.12 to
    3.15 #1724 (1.13.5.0)
  - The minimum Imath/OpenEXR has been raised from 2.3 to 2.4.
    (Note: OSL 1.13 is probably the last major release family
    that will support Imath/OpenEXR 2.x.)
  - OSL Language and oslc compiler:
  - There have been no substantive changes to the OSL language in
    this release.
  - ⛰️ API changes, new options, new ShadingSystem features (for
    renderer writers):
  - A new shadingStateUniform pointer field was added to
    ShaderGlobals for planned future expansion and improved GPU
    support. #1585 (1.13.1.0)
  - Adding relaxed type-equivalency to ReParameter() #1639 (by
    cmstein) (1.13.2.1)
  - Expose llvm groupdata size as a shadergroup attribute #1642
    (by Chris Hellmuth) (1.13.4.0)
  - RendererServices API for letting get_texture_handle consider
    colorspace #1641 (1.13.4.0)
  - Make "compile_report" attribute an int instead of just 0/1.
    Passing 1 makes a brief report, values &gt;1 are more verbose.
    (Zero still prints no report.) #1654 (1.13.4.0)
  - Switch lockgeom to interpolated and interactive. The
    lockgeom=0 was confusing. Now we use interpolated=1 to mean
    "don't optimize it away because it might be interpolated
    across the geometry and thus won't have the same value at all
    points being shaded," and the subtly different interactive=1
    to mean "don't optimize it away because although it will
    always take on the same value at all points at the same time,
    the user might want to interactively adjust the value and we
    don't want to have to recompile the shader group if that
    happens." #1662 (1.13.4.0)
  - Add type information for needed attributes. #1650 (by Curtis
    Black) (1.13.4.0)
  - Add API for building attribute getter free functions. #1704
    (by Curtis Black) (1.13.5.0)
  - Rs fmt specification - Journaling Algorithm for error,
    warning, fprintf #1702 (by Steena Monteiro) #1711 #1715
    (1.13.5.0)
  - 🚀 SIMD batched shading mode
  - Fix some array overruns (asymptomatic, but still potentially
    buggy) in common_ancestor_between. #1577 (1.13.0.2)
  - Fix issue with closure keyword parameters. #1620
    (1.13.2.0/1.12.8.0)
  - Fix crash when adding a default initialized closure. #1624
    (1.13.2.0/1.12.8.0)
  - Fix support for closures with array types. #1630
    (1.13.2.0/1.12.8.0)
  - Fix bug with masked wide llvm_gen_closure() #1637 (by
    danieldresser-ie) (1.13.2.1)
  - Fix Force LLVM Boolean #1717 (by Alex Wells)
  - Batched pointcloud if "index" is not passed #1753 (by Alex
    Wells)
  - 🚀 OptiX GPU rendering
  - OptiX 6.0 support has been removed. For GPU rendering with
    OptiX, a minimum of OptiX 7.0 is required.
  - Big overhaul/simplification of how strings are represented on
    the GPU: the extra level of indirection to global variables
    is removed, and strings are simply represented in ordinary
    variables as the hash of their characters. #1531 (1.13.0.0)
    [#1553] (1.13.0.1)
  - Better PTX cache hit rate by eliminating several sources of
    not being strictly deterministic in the PTX text we were
    generating. #1566 #1570 (1.13.0.1)
  - Fix PTX symbol visibility issues. #1609 (1.13.2.0)
  - Hide more code that is only used for OptiX mode, when OptiX
    is disabled. #1608 (1.13.2.0)
  - Remove dependency on OptiX SDK for building core OSL with
    OptiX support. You can now build OSL with OptiX support
    enabled even if you don't have the OptiX SDK headers present
    at build time. But you will still need them to build your
    OptiX-based application that uses OSL for GPU rendering.
    [#1627] (1.13.2.0/1.12.8.0)
  - GPU/OptiX support of ReParameter #1686 (1.13.4.0)
  - Fix userdata derivatives for interpolated params on GPU #1685
    (by Pascal Lecocq) (1.13.4.0)
  - Enable userdata derivatives for interpolated params on GPU
    [#1657] (by Chris Hellmuth) (1.13.4.0)
  - Move qualifying GroupData params onto stack for higher
    performance. #1710 (by Chris Hellmuth) (1.13.5.0)
  - Handle mixed string casting that plagues optix codegen #1718
    (1.13.5.0)
  - Add missing members to ShaderGlobals in rend_lib.h #1721 (by
    Tim Grant) (1.13.5.0)
  - OptiX direct callable API that owns groupdata buffer #1683
    (by Chris Hellmuth) (1.13.5.0)
  - OptiX PTX pipeline overhaul #1680 (by Tim Grant) (1.13.5.0)
  - Perf: Don't insert redundant run layer calls inside a basic
    block #1665 #1669 #1672 (by Chris Hellmuth) (1.13.4.0)
  - Fix NVPTX TargetMachine leak, etc. #1763 (by Tim Grant)
  - 🐛/🔧 Internals: fixes, improvements, and developer concerns
  - Fix memory leak in oslc ASTvariable_declaration. #1576
    (1.13.0.2)
  - Fix memory leaks in LPE code in error conditions. #1593 #1594
    (1.13.0.3)
  - Fix mismatched strides when calling OCIO for transformc with
    derivs #1646 (1.13.4.0)
  - Set up ray types for testrender #1648 (1.13.4.0)
  - Fix userdata binding corner case #1673 (by Alejandro Conty)
    (1.13.4.0)
  - Fix constant float values being converted to ints #1674 (by
    Declan Russell) (1.13.4.0)
  - Don't try to ReParameter symbols not in the group #1693 (by
    Alejandro Conty) (1.13.5.0)
  - Have ReParameter only copy data when it changes #1698
    (1.13.5.0)
  - Avoid deprecated OSLQuery ctr in test example #1699
    (1.13.5.0)
  - Zero derivs for interactive params when needed #1700 (by
    Alejandro Conty) (1.13.5.0)
  - oslc bug fix: shader params whose default values involve
    "init ops" could be incorrectly initialized if their values
    came from instance parameters set to zero. #1578 (1.13.0.2)
  - oslc: Add missing fmod() variants #1643 (1.13.4.0)
  - Simple constant folding of binary expressions now happen on
    the oslc side #1653 (1.13.4.0)
  - platform.h:
  - New OSL_ALLOCA macro to allocate on the stack. #1589
    (1.13.0.3)
  - Define OSL::bitcast utility. #1610 (1.13.2.0)
  - Make sure that std::hash is defined for ustring and
    ustringhash. #1599 (1.13.1.1)
  - Deprecate LLVMUtil::internalize_module_functions. #1606
    (1.13.1.0)
  - Work toward always representing strings in shaders as
    ustringhash rather than ustring: phase 1 #1603 phase2 #1612
    (1.13.2.0) #1726 (1.13.5.0)
  - Remove unnecessary setting of locale::global #1636 (by
    danieldresser-ie) (1.13.2.1)
  - Fully define bitcast template #1635 (1.13.2.1)
  - Fix for ReParameter corner case #1670 (by cmstein) (1.13.4.0)
  - Switch deprecated oiio simd names to modern #1679 (1.13.4.0)
  - Give ShadingSystemImpl a handy use_optix() method #1682
    (1.13.4.0)
  - Fix default fmt logic changing in latest openimageio release
    [#1725] (1.13.5.0)
  - The recently added SS::find_symloc can have const args #1723
    (1.13.5.0)
  - SymOverrideInfo bitfields should be the same type #1745
  - Fix wrong offset of MxSheen param #1751 (by Rasmus Bonnedal)
  - Make get_texture_info robust to empty shaderglobals param
    [#1731]
  - Documentation
  - First stab at ReadTheDocs -- new Experimental OSL
    Documentation on ReadTheDocs is still a little rough, but
    eventually will be our primary documentation. #1736
  - doc/RELEASING.md documents our release process and versioning
    policies. #1572 (1.13.0.2)
  - Improve documentation of trace function #1671 (by AidanWelch)
    (1.13.4.0)
  - Update CONTRIBUTING #1689 (1.13.5.0)
  - Update logos #1705, Move logos and add an icon-only logo
    [#1707] (1.13.5.0)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585601">- Added fix-install-paths.patch:
  implement suggestions from
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/issues/1771
- use ldconfig scriptlets macros</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731931200">- Allow newer LLVM. it is no longer restricted to &lt; 15.9
  New upper limit is 18.9.
- for llvm &gt;= 16 it wants CXX standard 17</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Also lock the cmake(OpenImageIO) to the version smaller than 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- disable Qt on leap</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- Force newer boost on leap for blender</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- Update to 1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.0
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.4.0-beta1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.13.12.0
- refreshed fix-install-paths.patch
- add add-missing-cstdint.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 1.14.6.0
  - fix: Check for errors in ShadingSystem::ReParameter() #1998 (by
    cmstein)
  - fix: Pass the real number of channels to rs_texture and
    rs_texture3d on gpu #2004
  - build: Link batched libraries with liboslexec #1987 (by John
    Haddon)
  - build: Update include directives for OpenImageIO_ROOT #1997 (by
    cmstein)
  - build(optix): Simplify FindOptiX.cmake a bit now that OptiX 7
    is the minimum #1988
  - build(optix): Get OptiX headers from new improved location
    [#1989]
  - build: Add compatibility with LLVM 20.1 #1993 (by Sven-Hendrik
    Haase)
  - ci: Remove Windows-2019 job #1990
  - ci: GPU/OptiX full build and test #1992
  - ci: Improve CI caching scheme #1994
  - ci: Add vp2025 test #1995
- drop add-missing-cstdint.patch
- Allow OIIO 3 now</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752494400">- Place shader headers in /usr/share/OSL
- flag devel and doc packages noarch
- Improve wildcard patterns for packaged items</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Lock the python and gcc versions to the same versions as blender</changelog>
</package>
<package pkgid="6ff4debbd48b98e130eb5dd0754f4e6d6d7aef732e25eef9421b856ae55c30263f2fe99b55b9a5e0329f0d58d7fb0f0c5e0adab92f3541569226767098b319cf" name="OpenShadingLanguage-example-shaders-source" arch="noarch">
  <version epoch="0" ver="1.14.6.0" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585600">- update to 1.13.11.0:
  - fix/batched: Assume BatchedRendererServices texture derivatives
    are in st space. #1828 (by sfriedmapixar) (1.13.10.0)
  - fix: Make backfacing shadeop indicate backfacing shader-global
    is needed #1827 (by sfriedmapixar) (1.13.10.0)
  - deps: Handle various OpenImageIO deprecations and changes in
    the run-up to OIIO 3.0 #1834 #1806 #1838 #1842 #1850
    (1.13.10.0)
  - deps: Adjust to OIIO change to IC/TS API #1848 (1.13.10.0)
  - deps: Llvm 18 compat issue - include libclangAPINotes #1812
    (1.13.10.0)
  - deps: Make finding bison work better on Apple Silicon Macs +
    homebrew #1822 (1.13.10.0)
  - ci: Mods to CI to deal with OIIO master raising dependency mins
    [#1833] (1.13.10.0)
  - ci: Deal with CentOS 7 EOL and disappearance of yum mirrors
    [#1839] (1.13.10.0)
  - ci: Fix GHA CI after they upgraded nodejs #1837 (1.13.10.0)
  - admin: Change release notice icon to use the icon vs the normal
    logo so it shows up better #1777 (by John Mertic) (1.13.10.0)
- changes from 1.13.10.0
  - testrender: Implement new Oren-Nayar model from OpenPBR #1817
    (by Christopher Kulla)
  - docs: Fix outdated or wrong repo URLs #1811
- changes from 1.13.9.0
  - deps: Support for LLVM-18 #1773 (by مهدي شينون (Mehdi Chinoune)
    [#1803] (by Larry Gritz)
  - fix: Make isconnected() work with downstream renderer
    "connections." #1782 (by sfriedmapixar)
  - cleanup: Change OSL_CONSTEXPR14 to constexpr #1805
  - internals build: Fix ifdef typo #1804
  - build: Propagate cpp version #1797
  - build: Print commit hash of locally built dependencies #1798
  - ci: Lock down to OIIO 2.5 for icc tests #1799
  - ci: Suppress leak sanitizer warnings about internals of
    robin_hash #1807
  - docs: More detail about supported platforms in INSTALL.md #1796
- changes from 1.13.8.0
  - fix(batched): Codegen bug for compref with varying index for
    batched shading #1776 (by Alex Wells)
  - fix: Calculatenormal needs fliphandedness #1783 (by
    sfriedmapixar)
  - fix: Print closure missing error message at compile time
    instead of run time. #1781 (by sfriedmapixar)
  - int: Change long-deprecated OIIO macro to new one #1788
  - ci: Fix broken Macos-13 CI #1780
- changes from 1.13.7.0
  - fix: Mute partio error prints #1774 (by olegul)
  - ci: Test with Mac ARM runner #1770
  - docs: Fix links to RTD docs from github landing page #1768
  - admin: Switch release announcement workflow to jmertic's
    awesome action #1766
- changes from 1.13.6.1
  - New minimum dependencies and compatibility changes:
  - For GPU/OptiX mode, OptiX 6.0 support has been removed. For
    GPU rendering with OptiX, a minimum of OptiX 7.0 is required,
    and the Cuda minimum has been raised to 9.0 #1737
  - The minimum version OpenImageIO has been raised from 2.2 to
    2.4. #1591 #1722
  - The minimum CMake dependency has been raised from 3.12 to
    3.15 #1724 (1.13.5.0)
  - The minimum Imath/OpenEXR has been raised from 2.3 to 2.4.
    (Note: OSL 1.13 is probably the last major release family
    that will support Imath/OpenEXR 2.x.)
  - OSL Language and oslc compiler:
  - There have been no substantive changes to the OSL language in
    this release.
  - ⛰️ API changes, new options, new ShadingSystem features (for
    renderer writers):
  - A new shadingStateUniform pointer field was added to
    ShaderGlobals for planned future expansion and improved GPU
    support. #1585 (1.13.1.0)
  - Adding relaxed type-equivalency to ReParameter() #1639 (by
    cmstein) (1.13.2.1)
  - Expose llvm groupdata size as a shadergroup attribute #1642
    (by Chris Hellmuth) (1.13.4.0)
  - RendererServices API for letting get_texture_handle consider
    colorspace #1641 (1.13.4.0)
  - Make "compile_report" attribute an int instead of just 0/1.
    Passing 1 makes a brief report, values &gt;1 are more verbose.
    (Zero still prints no report.) #1654 (1.13.4.0)
  - Switch lockgeom to interpolated and interactive. The
    lockgeom=0 was confusing. Now we use interpolated=1 to mean
    "don't optimize it away because it might be interpolated
    across the geometry and thus won't have the same value at all
    points being shaded," and the subtly different interactive=1
    to mean "don't optimize it away because although it will
    always take on the same value at all points at the same time,
    the user might want to interactively adjust the value and we
    don't want to have to recompile the shader group if that
    happens." #1662 (1.13.4.0)
  - Add type information for needed attributes. #1650 (by Curtis
    Black) (1.13.4.0)
  - Add API for building attribute getter free functions. #1704
    (by Curtis Black) (1.13.5.0)
  - Rs fmt specification - Journaling Algorithm for error,
    warning, fprintf #1702 (by Steena Monteiro) #1711 #1715
    (1.13.5.0)
  - 🚀 SIMD batched shading mode
  - Fix some array overruns (asymptomatic, but still potentially
    buggy) in common_ancestor_between. #1577 (1.13.0.2)
  - Fix issue with closure keyword parameters. #1620
    (1.13.2.0/1.12.8.0)
  - Fix crash when adding a default initialized closure. #1624
    (1.13.2.0/1.12.8.0)
  - Fix support for closures with array types. #1630
    (1.13.2.0/1.12.8.0)
  - Fix bug with masked wide llvm_gen_closure() #1637 (by
    danieldresser-ie) (1.13.2.1)
  - Fix Force LLVM Boolean #1717 (by Alex Wells)
  - Batched pointcloud if "index" is not passed #1753 (by Alex
    Wells)
  - 🚀 OptiX GPU rendering
  - OptiX 6.0 support has been removed. For GPU rendering with
    OptiX, a minimum of OptiX 7.0 is required.
  - Big overhaul/simplification of how strings are represented on
    the GPU: the extra level of indirection to global variables
    is removed, and strings are simply represented in ordinary
    variables as the hash of their characters. #1531 (1.13.0.0)
    [#1553] (1.13.0.1)
  - Better PTX cache hit rate by eliminating several sources of
    not being strictly deterministic in the PTX text we were
    generating. #1566 #1570 (1.13.0.1)
  - Fix PTX symbol visibility issues. #1609 (1.13.2.0)
  - Hide more code that is only used for OptiX mode, when OptiX
    is disabled. #1608 (1.13.2.0)
  - Remove dependency on OptiX SDK for building core OSL with
    OptiX support. You can now build OSL with OptiX support
    enabled even if you don't have the OptiX SDK headers present
    at build time. But you will still need them to build your
    OptiX-based application that uses OSL for GPU rendering.
    [#1627] (1.13.2.0/1.12.8.0)
  - GPU/OptiX support of ReParameter #1686 (1.13.4.0)
  - Fix userdata derivatives for interpolated params on GPU #1685
    (by Pascal Lecocq) (1.13.4.0)
  - Enable userdata derivatives for interpolated params on GPU
    [#1657] (by Chris Hellmuth) (1.13.4.0)
  - Move qualifying GroupData params onto stack for higher
    performance. #1710 (by Chris Hellmuth) (1.13.5.0)
  - Handle mixed string casting that plagues optix codegen #1718
    (1.13.5.0)
  - Add missing members to ShaderGlobals in rend_lib.h #1721 (by
    Tim Grant) (1.13.5.0)
  - OptiX direct callable API that owns groupdata buffer #1683
    (by Chris Hellmuth) (1.13.5.0)
  - OptiX PTX pipeline overhaul #1680 (by Tim Grant) (1.13.5.0)
  - Perf: Don't insert redundant run layer calls inside a basic
    block #1665 #1669 #1672 (by Chris Hellmuth) (1.13.4.0)
  - Fix NVPTX TargetMachine leak, etc. #1763 (by Tim Grant)
  - 🐛/🔧 Internals: fixes, improvements, and developer concerns
  - Fix memory leak in oslc ASTvariable_declaration. #1576
    (1.13.0.2)
  - Fix memory leaks in LPE code in error conditions. #1593 #1594
    (1.13.0.3)
  - Fix mismatched strides when calling OCIO for transformc with
    derivs #1646 (1.13.4.0)
  - Set up ray types for testrender #1648 (1.13.4.0)
  - Fix userdata binding corner case #1673 (by Alejandro Conty)
    (1.13.4.0)
  - Fix constant float values being converted to ints #1674 (by
    Declan Russell) (1.13.4.0)
  - Don't try to ReParameter symbols not in the group #1693 (by
    Alejandro Conty) (1.13.5.0)
  - Have ReParameter only copy data when it changes #1698
    (1.13.5.0)
  - Avoid deprecated OSLQuery ctr in test example #1699
    (1.13.5.0)
  - Zero derivs for interactive params when needed #1700 (by
    Alejandro Conty) (1.13.5.0)
  - oslc bug fix: shader params whose default values involve
    "init ops" could be incorrectly initialized if their values
    came from instance parameters set to zero. #1578 (1.13.0.2)
  - oslc: Add missing fmod() variants #1643 (1.13.4.0)
  - Simple constant folding of binary expressions now happen on
    the oslc side #1653 (1.13.4.0)
  - platform.h:
  - New OSL_ALLOCA macro to allocate on the stack. #1589
    (1.13.0.3)
  - Define OSL::bitcast utility. #1610 (1.13.2.0)
  - Make sure that std::hash is defined for ustring and
    ustringhash. #1599 (1.13.1.1)
  - Deprecate LLVMUtil::internalize_module_functions. #1606
    (1.13.1.0)
  - Work toward always representing strings in shaders as
    ustringhash rather than ustring: phase 1 #1603 phase2 #1612
    (1.13.2.0) #1726 (1.13.5.0)
  - Remove unnecessary setting of locale::global #1636 (by
    danieldresser-ie) (1.13.2.1)
  - Fully define bitcast template #1635 (1.13.2.1)
  - Fix for ReParameter corner case #1670 (by cmstein) (1.13.4.0)
  - Switch deprecated oiio simd names to modern #1679 (1.13.4.0)
  - Give ShadingSystemImpl a handy use_optix() method #1682
    (1.13.4.0)
  - Fix default fmt logic changing in latest openimageio release
    [#1725] (1.13.5.0)
  - The recently added SS::find_symloc can have const args #1723
    (1.13.5.0)
  - SymOverrideInfo bitfields should be the same type #1745
  - Fix wrong offset of MxSheen param #1751 (by Rasmus Bonnedal)
  - Make get_texture_info robust to empty shaderglobals param
    [#1731]
  - Documentation
  - First stab at ReadTheDocs -- new Experimental OSL
    Documentation on ReadTheDocs is still a little rough, but
    eventually will be our primary documentation. #1736
  - doc/RELEASING.md documents our release process and versioning
    policies. #1572 (1.13.0.2)
  - Improve documentation of trace function #1671 (by AidanWelch)
    (1.13.4.0)
  - Update CONTRIBUTING #1689 (1.13.5.0)
  - Update logos #1705, Move logos and add an icon-only logo
    [#1707] (1.13.5.0)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731585601">- Added fix-install-paths.patch:
  implement suggestions from
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/issues/1771
- use ldconfig scriptlets macros</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1731931200">- Allow newer LLVM. it is no longer restricted to &lt; 15.9
  New upper limit is 18.9.
- for llvm &gt;= 16 it wants CXX standard 17</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1738411200">- Also lock the cmake(OpenImageIO) to the version smaller than 3</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448000">- disable Qt on leap</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1739448001">- Force newer boost on leap for blender</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- Update to 1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.5.0
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.14.4.0-beta1
  https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.13.12.0
- refreshed fix-install-paths.patch
- add add-missing-cstdint.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752148800">- Update to 1.14.6.0
  - fix: Check for errors in ShadingSystem::ReParameter() #1998 (by
    cmstein)
  - fix: Pass the real number of channels to rs_texture and
    rs_texture3d on gpu #2004
  - build: Link batched libraries with liboslexec #1987 (by John
    Haddon)
  - build: Update include directives for OpenImageIO_ROOT #1997 (by
    cmstein)
  - build(optix): Simplify FindOptiX.cmake a bit now that OptiX 7
    is the minimum #1988
  - build(optix): Get OptiX headers from new improved location
    [#1989]
  - build: Add compatibility with LLVM 20.1 #1993 (by Sven-Hendrik
    Haase)
  - ci: Remove Windows-2019 job #1990
  - ci: GPU/OptiX full build and test #1992
  - ci: Improve CI caching scheme #1994
  - ci: Add vp2025 test #1995
- drop add-missing-cstdint.patch
- Allow OIIO 3 now</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752494400">- Place shader headers in /usr/share/OSL
- flag devel and doc packages noarch
- Improve wildcard patterns for packaged items</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580800">- Lock the python and gcc versions to the same versions as blender</changelog>
</package>
<package pkgid="209af80eefd91c3e1ad1ef0c86dcd2a1a1ee4e1f50b789ff679c38d15801fa77348f0260cb78ee5b276f21aafcf3113bb1566a02e4f667d15c112dc2d6fdf413" name="OpenSubdiv-devel" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp160.1.2"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Avoid forcing SSE/SSE2 on %ix86, it is not guaranteed to exist.
- Trim bias and redundancies from descriptions.
- RPM group/category fixes.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1569153600">- Use tbb-devel BuildRequires instead of cmake(TBB), the latter is not
  available in Leap 15.x</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1587729600">- Update to version 3.4.3 (April 2020):
  + Changes
  * GLEW is no longer required by default (GitHub #1183 #1184)
  * Removed false Ptex link dependency from libosdCPU (GitHub
    [#1174])
  * Removed false GLFW link dependency from DX11 and Metal
    examples (GitHub #1178)
  * Removed link dependency on unused TBB libraries (GitHub
    [#1064])
  * Added option to disable building of dynamic shared libraries
    (GitHub #1169)
  * Added new tutorial for Far::LimitStencilTable (GitHub #1176)
  * Updated use of EXT_direct_state_access to
    ARB_direct_state_access (GitHub #1184)
  * Fixed C++ strict aliasing warnings (GitHub #1182)
  * Fixed MSVC warnings in example code (GitHub #1158 #1172)
  * Fixed compatibility with Visual Studio 2019 (GitHub #1173
    [#1189])
  * Fixed CMake CMP0054 warnings (GitHub #1180)
  * Added prefix to OpenSubdiv CMake macros (GitHub #1157)
  * Moved utilities in examples/common to regression/common
    (GitHub #1167)
  * Minor fixes to Far tutorials (GitHub #1175 #1177)
  * Switched to Azure Pipelines for continuous integration
    testing instead of Travis-CI and AppVeyor (GitHub #1168
    [#1190])
  + Bug Fixes
  * Fixed selective boundary interpolation for case
    Sdc::Options::VTX_BOUNDARY_NONE (GitHub #1170 #1171)
  * Fixed static library linking to address missing symbols
    (GitHub #1192)
  * Additional fixes for dynamic and static linking (GitHub
    [#1193])
- Add workaround to fix linking libosdGPU, which is missing -ldl</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1594036800">- Add patch remove-rpath-fiddling.diff in order to avoid build
  issues with TW.</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1637668800">- Update to version 3.4.4 (Feb 2021)
  + Release 3.4.4 is a minor release including bug fixes and
    configuration improvements
  + Changes
  * The "master" branch on GitHub has been renamed "release"
    (GitHub #1218 #1219)
  * The CMake configuration has been updated to allow use as a
    sub-project (GitHub #1206)
  * Removed obsolete references to hbr from examples/farViewer
    (GitHub #1217)
  + Bug Fixes
  * Fixed bug with sparse PatchTables and irregular face-varying
    seams (GitHub #1203)
  * Fixed loss of precision when using double precision stencil
    tables (GitHub #1207)
  * Fixed reset of Far::TopologyRefiner::GetMaxLevel() after call
    to Unrefine() (GitHub #1208)
  * Fixed linking with -ldl on unix systems (GitHub #1196)
  * Fixed naming and installation of macOS frameworks (GitHub
    [#1194] #1201)
  * Fixed GL version and extension processing and dynamic loading
    on macOS (GitHub #1216)
  * Fixed FindDocutils.cmake to be more robust (GitHub #1213
    [#1220])
  * Fixed errors using build_scripts/build_osd.py with Python3
    (GitHub #1206)
- Add OpenSubdiv-pr1234-tbb2021.patch -- support oneTBB 2021
  * gh#PixarAnimationStudios/OpenSubdiv#1234
  * boo#1192994</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708603201">- Update to 3.6.0:
  See:
  * https://graphics.pixar.com/opensubdiv/docs/release_35.html
  * https://graphics.pixar.com/opensubdiv/docs/release_36.html
- Drop OpenSubdiv-pr1234-tbb2021.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744718400">- Drop BuildRequires: pkgconfig(glew) as it is not used for build.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754136000">- Update to 3.6.1:
  - Changes
  - Updated CMake minimum version to 3.14 (GitHub #1349)
  - Updated documentation regarding external dependencies (GitHub
    [#1346] #1360)
  - Updated API and example documentation (GitHub #1351 #1362)
  - Updated build_osd.py visual studio discovery and dependent
    package versions (GitHub #1333 #1354 #1361)
  - Updated azure pipelines agents (GitHub #1337 #1342 #1355
    [#1361])
  - Updated use of OpenCL in example viewers (GitHub #1357)
  - Addressed Clang 16 compiler warnings (GitHub #1356)
  - Addressed some address sanitizer build warnings (GitHub
    [#1343])
  - Added configuration options to build Osd patch shader source
    independent of other Osd dependencies (GitHub #1359 #1363)
  - Bug Fixes
  - Fixed evaluation of surface patches at valence-2 darts
    (GitHub #1336)
  - Fixed sharpening of vertices on potential non-manifold
    creases (GitHub #1338)
  - Fixed sharing of Bfr::Surface topology with valence-2
    interior vertices (GitHub #1353)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754136001">- convert patch to apply with -p1 remove-rpath-fiddling.diff
- add no-static.patch:
  disable all static libraries</changelog>
</package>
<package pkgid="e61bbfc2f0708824328d453b10b97cf96fea356813083fb9bd9dcb03e385eda227a86da29c810752e4553b7784225a874c85a87cb585ec40a1961e0fee20a192" name="PDAL" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="bp160.1.15"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1629028800">- Update to 2.3.0 version
  complete description https://github.com/PDAL/PDAL/releases/tag/2.3.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1640779200">- Review licenses of subpart: The code is licensed BSD except for:
  + filters/private/csf/* and plugins/i3s/lepcc/* are Apache-2.0
  + vendor/arbiter/*, plugins/nitf/io/nitflib.h and plugins/oci/io/OciWrapper.* are Expat/MIT
  + plugins/e57/io/{src,include}/* is BSD-3-Clause
  + plugins/e57/libE57Format/{src,include}/* is Boost 1-0
- Create a patch PDAL_unbundle.patch to sort out eigen3 and boost
  + Eigen3 system now used fixing boo#1194109
- Fixing boo#1194109 ppc64le build by disabling lto until upstream
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=102059 is fixed
- Add Provides for
  + bundled(arbiter)
  + bundled(PoissonRecon)
  + bundled(nanoflann)
  + bundled(nlohmann)
- Add %check section following what's Fedora is doing
  + Add upstream patch for testing 32bits d11e0e20.patch</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1641556800">- Add `Provides:` so that PDAL-devel can find libPDAL.</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641556801">- Fix the -devel dangling symlink by moving to libPDAL
  libpdal_*.so.%{soname} symlinks to libpdal_*.%{sovers}
  rpmlint not more complain.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1696334400">- Update to 2.5.6, complete description:
  * https://github.com/PDAL/PDAL/releases/tag/2.5.6
  * https://github.com/PDAL/PDAL/releases/tag/2.5.5
  * https://github.com/PDAL/PDAL/releases/tag/2.5.4
  * https://github.com/PDAL/PDAL/releases/tag/2.5.3
  * https://github.com/PDAL/PDAL/releases/tag/2.5.2
  * https://github.com/PDAL/PDAL/releases/tag/2.5.1
  * https://github.com/PDAL/PDAL/releases/tag/2.5.0
  * https://github.com/PDAL/PDAL/releases/tag/2.4.3
  * https://github.com/PDAL/PDAL/releases/tag/2.4.2
  * https://github.com/PDAL/PDAL/releases/tag/2.4.1
  * https://github.com/PDAL/PDAL/releases/tag/2.4.0
- Drop upstream patch:
  * d11e0e20.patch
- Refresh PDAL_unbundle.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709294400">- BuildRequire proj-devel instead of the long deprecated name
  libproj-devel.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709294401">- Fix building on Leap</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1720785600">- Update to 2.7.2
  * https://github.com/PDAL/PDAL/compare/2.5.6...2.7.2</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1725969600">- Update to 2.8.0 and use sha256 instead of md5
  * See PDAL changelog at https://github.com/PDAL/PDAL/releases/tag/2.8.0
  * For detailed changes betwwen 2.7.2 and 2.8.0, see
    https://github.com/PDAL/PDAL/compare/2.7.2...2.8.0</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1729598400">- Remove laszip as a build requirement, since PDAL uses a bundled version of
  the lazperf library for this functionality since 2022-02-03 (see commit
  6bdd2e2c281fe0313f8acd8b8b9e4ccf9b2a13c3 upstream)</changelog>
</package>
<package pkgid="f96a7f75d1a0e3ba973579e1a5952c3f3c93b5cd41a80a7e442352dc587d4b22f5d3634b4d20d5c84c1e9bb88b938ffbd031c2416e0f64dcd4d49c8ba175fecd" name="PDAL-bash-completion" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="bp160.1.15"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1629028800">- Update to 2.3.0 version
  complete description https://github.com/PDAL/PDAL/releases/tag/2.3.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1640779200">- Review licenses of subpart: The code is licensed BSD except for:
  + filters/private/csf/* and plugins/i3s/lepcc/* are Apache-2.0
  + vendor/arbiter/*, plugins/nitf/io/nitflib.h and plugins/oci/io/OciWrapper.* are Expat/MIT
  + plugins/e57/io/{src,include}/* is BSD-3-Clause
  + plugins/e57/libE57Format/{src,include}/* is Boost 1-0
- Create a patch PDAL_unbundle.patch to sort out eigen3 and boost
  + Eigen3 system now used fixing boo#1194109
- Fixing boo#1194109 ppc64le build by disabling lto until upstream
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=102059 is fixed
- Add Provides for
  + bundled(arbiter)
  + bundled(PoissonRecon)
  + bundled(nanoflann)
  + bundled(nlohmann)
- Add %check section following what's Fedora is doing
  + Add upstream patch for testing 32bits d11e0e20.patch</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1641556800">- Add `Provides:` so that PDAL-devel can find libPDAL.</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641556801">- Fix the -devel dangling symlink by moving to libPDAL
  libpdal_*.so.%{soname} symlinks to libpdal_*.%{sovers}
  rpmlint not more complain.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1696334400">- Update to 2.5.6, complete description:
  * https://github.com/PDAL/PDAL/releases/tag/2.5.6
  * https://github.com/PDAL/PDAL/releases/tag/2.5.5
  * https://github.com/PDAL/PDAL/releases/tag/2.5.4
  * https://github.com/PDAL/PDAL/releases/tag/2.5.3
  * https://github.com/PDAL/PDAL/releases/tag/2.5.2
  * https://github.com/PDAL/PDAL/releases/tag/2.5.1
  * https://github.com/PDAL/PDAL/releases/tag/2.5.0
  * https://github.com/PDAL/PDAL/releases/tag/2.4.3
  * https://github.com/PDAL/PDAL/releases/tag/2.4.2
  * https://github.com/PDAL/PDAL/releases/tag/2.4.1
  * https://github.com/PDAL/PDAL/releases/tag/2.4.0
- Drop upstream patch:
  * d11e0e20.patch
- Refresh PDAL_unbundle.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709294400">- BuildRequire proj-devel instead of the long deprecated name
  libproj-devel.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709294401">- Fix building on Leap</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1720785600">- Update to 2.7.2
  * https://github.com/PDAL/PDAL/compare/2.5.6...2.7.2</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1725969600">- Update to 2.8.0 and use sha256 instead of md5
  * See PDAL changelog at https://github.com/PDAL/PDAL/releases/tag/2.8.0
  * For detailed changes betwwen 2.7.2 and 2.8.0, see
    https://github.com/PDAL/PDAL/compare/2.7.2...2.8.0</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1729598400">- Remove laszip as a build requirement, since PDAL uses a bundled version of
  the lazperf library for this functionality since 2022-02-03 (see commit
  6bdd2e2c281fe0313f8acd8b8b9e4ccf9b2a13c3 upstream)</changelog>
</package>
<package pkgid="42bb7d01351f32aa58a3d7f0d1bc1554b5c84dd1536ee3416a8d0e4407f7d01b87fdf71584ecd988bd49fa6174cd8c2bb402ea854059046f080b843998ecf6b3" name="PDAL-devel" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="bp160.1.15"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1629028800">- Update to 2.3.0 version
  complete description https://github.com/PDAL/PDAL/releases/tag/2.3.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1640779200">- Review licenses of subpart: The code is licensed BSD except for:
  + filters/private/csf/* and plugins/i3s/lepcc/* are Apache-2.0
  + vendor/arbiter/*, plugins/nitf/io/nitflib.h and plugins/oci/io/OciWrapper.* are Expat/MIT
  + plugins/e57/io/{src,include}/* is BSD-3-Clause
  + plugins/e57/libE57Format/{src,include}/* is Boost 1-0
- Create a patch PDAL_unbundle.patch to sort out eigen3 and boost
  + Eigen3 system now used fixing boo#1194109
- Fixing boo#1194109 ppc64le build by disabling lto until upstream
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=102059 is fixed
- Add Provides for
  + bundled(arbiter)
  + bundled(PoissonRecon)
  + bundled(nanoflann)
  + bundled(nlohmann)
- Add %check section following what's Fedora is doing
  + Add upstream patch for testing 32bits d11e0e20.patch</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1641556800">- Add `Provides:` so that PDAL-devel can find libPDAL.</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641556801">- Fix the -devel dangling symlink by moving to libPDAL
  libpdal_*.so.%{soname} symlinks to libpdal_*.%{sovers}
  rpmlint not more complain.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1696334400">- Update to 2.5.6, complete description:
  * https://github.com/PDAL/PDAL/releases/tag/2.5.6
  * https://github.com/PDAL/PDAL/releases/tag/2.5.5
  * https://github.com/PDAL/PDAL/releases/tag/2.5.4
  * https://github.com/PDAL/PDAL/releases/tag/2.5.3
  * https://github.com/PDAL/PDAL/releases/tag/2.5.2
  * https://github.com/PDAL/PDAL/releases/tag/2.5.1
  * https://github.com/PDAL/PDAL/releases/tag/2.5.0
  * https://github.com/PDAL/PDAL/releases/tag/2.4.3
  * https://github.com/PDAL/PDAL/releases/tag/2.4.2
  * https://github.com/PDAL/PDAL/releases/tag/2.4.1
  * https://github.com/PDAL/PDAL/releases/tag/2.4.0
- Drop upstream patch:
  * d11e0e20.patch
- Refresh PDAL_unbundle.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709294400">- BuildRequire proj-devel instead of the long deprecated name
  libproj-devel.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709294401">- Fix building on Leap</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1720785600">- Update to 2.7.2
  * https://github.com/PDAL/PDAL/compare/2.5.6...2.7.2</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1725969600">- Update to 2.8.0 and use sha256 instead of md5
  * See PDAL changelog at https://github.com/PDAL/PDAL/releases/tag/2.8.0
  * For detailed changes betwwen 2.7.2 and 2.8.0, see
    https://github.com/PDAL/PDAL/compare/2.7.2...2.8.0</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1729598400">- Remove laszip as a build requirement, since PDAL uses a bundled version of
  the lazperf library for this functionality since 2022-02-03 (see commit
  6bdd2e2c281fe0313f8acd8b8b9e4ccf9b2a13c3 upstream)</changelog>
</package>
<package pkgid="ba8e05895fc079a2ea16ef8d6005fcb00d0b86b8e6e56fa00d9b576012615c4d6d8e94cfe51f5379cc0167bb33751c648d11d372450dedb2e2b89ff06aa371fe" name="PDAL-doc" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="bp160.1.15"/>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1629028800">- Update to 2.3.0 version
  complete description https://github.com/PDAL/PDAL/releases/tag/2.3.0</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1640779200">- Review licenses of subpart: The code is licensed BSD except for:
  + filters/private/csf/* and plugins/i3s/lepcc/* are Apache-2.0
  + vendor/arbiter/*, plugins/nitf/io/nitflib.h and plugins/oci/io/OciWrapper.* are Expat/MIT
  + plugins/e57/io/{src,include}/* is BSD-3-Clause
  + plugins/e57/libE57Format/{src,include}/* is Boost 1-0
- Create a patch PDAL_unbundle.patch to sort out eigen3 and boost
  + Eigen3 system now used fixing boo#1194109
- Fixing boo#1194109 ppc64le build by disabling lto until upstream
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=102059 is fixed
- Add Provides for
  + bundled(arbiter)
  + bundled(PoissonRecon)
  + bundled(nanoflann)
  + bundled(nlohmann)
- Add %check section following what's Fedora is doing
  + Add upstream patch for testing 32bits d11e0e20.patch</changelog>
  <changelog author="D. Berge &lt;opensuse@navlost.eu&gt;" date="1641556800">- Add `Provides:` so that PDAL-devel can find libPDAL.</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1641556801">- Fix the -devel dangling symlink by moving to libPDAL
  libpdal_*.so.%{soname} symlinks to libpdal_*.%{sovers}
  rpmlint not more complain.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1696334400">- Update to 2.5.6, complete description:
  * https://github.com/PDAL/PDAL/releases/tag/2.5.6
  * https://github.com/PDAL/PDAL/releases/tag/2.5.5
  * https://github.com/PDAL/PDAL/releases/tag/2.5.4
  * https://github.com/PDAL/PDAL/releases/tag/2.5.3
  * https://github.com/PDAL/PDAL/releases/tag/2.5.2
  * https://github.com/PDAL/PDAL/releases/tag/2.5.1
  * https://github.com/PDAL/PDAL/releases/tag/2.5.0
  * https://github.com/PDAL/PDAL/releases/tag/2.4.3
  * https://github.com/PDAL/PDAL/releases/tag/2.4.2
  * https://github.com/PDAL/PDAL/releases/tag/2.4.1
  * https://github.com/PDAL/PDAL/releases/tag/2.4.0
- Drop upstream patch:
  * d11e0e20.patch
- Refresh PDAL_unbundle.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709294400">- BuildRequire proj-devel instead of the long deprecated name
  libproj-devel.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709294401">- Fix building on Leap</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1720785600">- Update to 2.7.2
  * https://github.com/PDAL/PDAL/compare/2.5.6...2.7.2</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1725969600">- Update to 2.8.0 and use sha256 instead of md5
  * See PDAL changelog at https://github.com/PDAL/PDAL/releases/tag/2.8.0
  * For detailed changes betwwen 2.7.2 and 2.8.0, see
    https://github.com/PDAL/PDAL/compare/2.7.2...2.8.0</changelog>
  <changelog author="Enno Tensing &lt;tenno+suse@suij.in&gt;" date="1729598400">- Remove laszip as a build requirement, since PDAL uses a bundled version of
  the lazperf library for this functionality since 2022-02-03 (see commit
  6bdd2e2c281fe0313f8acd8b8b9e4ccf9b2a13c3 upstream)</changelog>
</package>
<package pkgid="3b7ef43f20e64d4f8e6bf972f865ab450635b13afb5bd15fee63a487d2dc7f5aaeb8ba760bdc7a6095a0bbae02f1963594e897f7f28a490231c24739f4de8ef3" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="cb8f5e91f2c2b41d2ec2893aa04edb13553bab5201405ac7ab0823d64d711b215942188f15712aa134e6473b4492bef36c68ddc481afd566a750689ef2026f0c" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="e32ddeb39cabdbe4a268c587c204aae7f59822acd89ab0fe6c14e05b417c8a8bd809929359c52a68c1dcef649bbc203ca9b7637a6463e33648ad4424c7138ce9" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="3498a58271da75d00925d4350fb059efef043d727ba97fc9e0a8ed1d34da86b4b7a2c162d7d35f4f2d4480f3f5317c15fa7340493c76c3d964b2a1b347f01dd8" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="b4830ebc8173521b336ca23dacd804ed882a9319b836ca2d7fe549951c0d7cb7615f43db1c3ed660a32fc8dc198b1cd62f52257e51e37a1c44d164b0afa3005b" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="abc835948e0819a14765a770d61e09ac8c370073fd039cf109e838a42bc9ba3567162809ba237d01406e27cf7b6d71b46da03d960afe9372480b53f03f3358a2" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="920fc355a25935236b8101dced74e5d5a0cdacf73bd04efe2e54fa367ff821ce7d81175df5328a3d7a862af9eb85e8f893cffa692426902de350b2e13ef1ae8b" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="54019dcc233bf353d4b514b8599b95d9798bfe3cd8ab66e672f0029435d05c6b4682a8594923129d53664794e96c9b806b3aedb53fb060cfe3b8c2c1363a5bbe" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="8767f87b5fbd09c91db65a58ded25d3b1e4c52632eee8e7ff1e067a54992b62e0b1fc387bd22f257578c638ff01f898ddc8ffe5edbff1c7b650a8b9da5616f14" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="7682645407a6233663215ebd513cfe14154c38c95995e40ee26bbeb2fce91b7deead52d664271658094da0c8c1f2db888f628516831deacce634f2bbadfe6f5d" name="PackageKit-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp160.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380888000">- Do not package %{_sysconfdir}/PackageKit/CommandNotFound.conf, as
  it unbranded and CNF is currently disabled in PackageKit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1387800000">- Rebase PackageKit-branding-vendor.patch and
  PackageKit-branding-default-config.patch for PackageKit 0.8.14.</changelog>
  <changelog author="zaitor@opensuse.org" date="1397563200">- Bump version to 13.2 for next version of openSUSE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1410350400">- Rebase PackageKit-branding-default-config.patch for
  PackageKit 0.9.6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413892800">- Rebase PackageKit-branding-default-config.patch for
  PackageKit 1.0.1.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Bump version to 42.1 for next version of openSUSE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519300800">- Drop pre-checkin.sh and *.{spec,changes}.in: there is only one
  flavor and thus no need for this complexity.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699531200">- Rebase PackageKit-branding-vendor.patch to apply against
  PackageKit 1.2.7 and later.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="12fa42f3ad6d64de0fd376297a9911167409ab62812b3220814130f7df43d0418786a50398de017cd42afa7c856edb84459a6246f0322cb5de235232f7956c71" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="b8a292120cfa0c000225b4fb104c3a47d08e1237465462835e27d02f3a60ea892faa751ea3c16fb8b242830b657553c28e34c2b904b7139bf7010189e67c1cbc" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="d1e6fcd41fac91a884107fff3d5d40fb60572c5bba697b8230ef3f94aee86f3926b10d7fc776cda8214dded66ef8390f0fa0bca253e51e1952c123bfc3df78bc" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="b25d49af626cfc3c67733be66678b20985248ab602e6fe8427e28d2c198907479a2e7fde47297a62936720b97de769276950f37c3fc3740293f822c95d50353b" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="59b716013752e4a09be11ab81cbf881f98f440a0d517e26e9fc49f89932985e81b040944edae4a11e9a44b91e2d621a6737be820d3596d88917cee3beb2493f5" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="58ab5ddd4a9d905e920a36346069f5f523bdb94856f07e7465d287a8988a998495dae736dab4f830555d979782d2e8ee5f6c1482cc89043f7651ecd34e7149dc" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="50a87eea27724e968975de8957b27bbc47d97d0eeaeec031de0635baa2892e17e9cb65cc2b6f4edb47d4f2b2f743321e001d04e4c1787a1fb2d0ceb66501e699" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="e48c030515034590c4869b1d9af37b68994f93adbfac5ea314761197c2900ee44cedc1355cc504cbb1fb342ff95971e1013cfbd705a8237b2f173fa6c2ffbf68" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="819c2539fbed69c20b84b322d51344000790763f0bd08bfae75dfc7b793b26847aab764659c6b07fb67cbf58b0601bae603841e21c29a8c57ecbf08844fd4342" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="7e4e6cd9c4fa8a4c33507f45f62ca932e3893858b489b3eedf5e7d516897c13e836c3b48be96c53337b9e597518beb358df541dca6ad341feccf4102dbebea8f" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="5a7ab22ccd6d7d0303ef5947b14e3c219e4a0aba9b1e96947dacef8973c7140e43fad1bce9189fe8fdbd5f7dec5084df86c2bcf2fbfbb46ef7dd756300e6d201" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="29a72d0cbd2244b94fffbfcf1acd539b609aaeaf40e874685b85075b0a2c807bf82e56ca027eb3d0575aedad279d8c228bd252a02986caba631c6735b1f7d1ed" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="5b3378f8855826b6d23bc6169019fea146cbeb70eb137ed290f4e0eca6f43799bc96de1d0430197b708c0d30878757e8273c68d1c62eb4ebe680b313df4f709e" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="160000.2.2"/>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
</package>
<package pkgid="ba44c2a173e20f22443fc2fe3faa891d74d19abbc58f620056b4debf0b4542d73ead71183b00bd546c51738a87d2063fb011739aa85a22787c42a2d027863690" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="160000.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1673006400">- Add PackageKit-zypp-fix-ambiguous-filesystem-reference.patch:
  zypp: Fix ambiguous reference to 'filesystem' class
  (gh#PackageKit/PackageKit/commit/bb1409a71, bsc#1206687).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
</package>
<package pkgid="234b95e886f4d5fc8aeab609d5648b06b144140ffbfa678e87aad54dff93df98e9c5c1c92d50b2a67adacc587705b3803170efde6a7af61a9b20550bac42c4d8" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.2.8" rel="160000.4.1"/>
  <changelog author="songchuan.kang@suse.com" date="1678708800">- Add PackageKit-fix-pkcon-permission.patch: trivial: Drop
  unnecessary x permission
  (gh#PackageKit/PackageKit/commit/47b7f97bc, bsc#1209138)</changelog>
  <changelog author="dimstar@opensuse.org" date="1689595200">- Add PackageKit-dynamic-export.patch: fix loading of modules when
  built using glib 2.70 (boo#1213309).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699531200">- Update to version 1.2.8:
  + Libraries:
  - offline-updates:
    . Make package update list deduplication more efficient.
    . Add only one entry per package to 'offline-update-competed'
    file.
  - PkClient: Replace the GSimpleAsyncResult with the GTask API.
  - pk-client:
    . Fix use-before-set of PkProgress on cancellation.
    . Move cancellable disconnect to dispose.
    . Rework refcounting for PkClientState.
  + Backends: Changes to apt, dnf, PiSi and BSD backends.
- Changes from version 1.2.7:
  + New Features:
  - pkclient: Add an option to count download size with
    dependencies.
  - pk-transaction: Add support for getting the RemainingTime
    property.
  + Backends:
  - zypp: Fix ambiguous reference to 'filesystem' class.
  - Changes to dnf, apt, alpm backends.
- Changes from version 1.2.6:
  + New Features:
  - Expose transaction sender as read-only property on the bus.
  - pkmon: Display transaction sender binary name in log.
  - pk-transaction: Add Packages signal.
  - pk-transaction: Combine some D-Bus PropertiesChanged signal
    emissions.
  - pk-transaction: Add UpdateDetails signal.
  + Backends:
  - zypp:
    . implement upgrade-system method.
    . Clean up trailing whitespaces.
    . Avoid statuReset() on locked packages.
    . restore pool status after simulating an update.
    . Disable upgrade-system support in SLE.
    . build the pool before calling is_tumbleweed().
    . update libzypp dependency version.
    . Don't refresh repos before searching.
    . Check if packages are locked before removing.
    . add repository data in package id.
    . Remove trailing whitespace.
    + Changes to alpm, aptcc, apt, and nix backends.
- Rebase patches:
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
  + PackageKit-dynamic-export.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
- Drop upstream fixed patches:
  + PackageKit-zypp-add-repo-in-packageid.patch
  + PackageKit-zypp-add-upgrade-system.patch
  + PackageKit-zypp-avoid-statuReset.patch
  + PackageKit-zypp-dont-refresh-before-searching.patch
  + PackageKit-zypp-dont-remove-locked-packages.patch
  + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch
  + PackageKit-zypp-fix-is-tumbleweed-check.patch
  + PackageKit-zypp-restore-pool-status-after-simulating-update.patch
  + PackageKit-zypp-update-libzypp-dependency-version.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1704196800">- Add PackageKit-find-python-3-6.patch: Specify the Python version
  we need to build this package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1723550400">- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
  user uninstallable for most desktops (bsc#1226269).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1726142400">- Add PackageKit-zypp-dont-install-updateCandidateObj.patch:
  zypp: Mark the correct packages to-be-installed (bsc#1227389,
  gh#PackageKit/PackageKit/commit/209aa6295).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266)
- Drop usage of update-alternatives, but simplify installation of
  /usr/libexec/gst-install-plugins-helper as a direct symlink to
  pk-gstreamer-install.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1755777600">- Add PackageKit-zypp-parallel-package-downloads.patch:
  zypp: Implement parallel downloading
  (gh#PackageKit/PackageKit/commit/dd39d2982, bsc#1244920).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1776859200">- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch:
  Do not allow re-invoking methods on non-new transactions
  (bsc#1262220, CVE-2026-41651).</changelog>
</package>
<package pkgid="a2622dc5d3ca6c80a3ff6bc0ad21a353f679b8c5ab0db1663c593ae218433297a2b759b7eb43bc1fd578eee4fadd5845be365bf8c2f276565102bccd46ae6450" name="PgTcl" arch="x86_64">
  <version epoch="0" ver="1.7" rel="bp160.1.2"/>
  <changelog author="max@suse.de" date="1122552000">- New version: 1.5.
- Move script library to /usr/share/tcl .</changelog>
  <changelog author="max@suse.de" date="1134475200">- Fixed a typo in tcl.m4 that broke configure with bash 3.1.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="max@suse.com" date="1326283200">- Update to version 1.7 to fix an issue with Tcl 8.5 (bnc#739978).</changelog>
  <changelog author="max@suse.com" date="1375272000">- Set -DUSE_INTERP_ERRORLINE to fix build with Tcl 8.6.</changelog>
  <changelog author="max@suse.com" date="1380715200">- Avoid an unneeded explicit dependency on a certain version of
  libtcl (pgtcl-stubs.patch).</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="ff0985a6bfacd4acdfad267d68d107918fb78c75b80e6c61b1a2c95c30b6b1a1d038cbc3286dfa58fb8e43f5e14e6274391d4e0cd1a3ac2e3c51317b2b27540c" name="Photini" arch="noarch">
  <version epoch="0" ver="2022.3.2" rel="bp160.1.11"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1631793600">- Update to version 2021.9.0
  * New option to set file timestamps to photo's taken date/time.
  * Improved GPX importer.
  * Add option to use python-exiv2 for metadata access.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1635940800">- Update to version 2021.11.0
  * Can use PySide6 instead of PySide2 or PyQt5.
  * New config option to enlarge user interface on high
    resolution screens.
  * Other minor improvements and bug fixes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1637150400">- Update to version 2021.11.1
  * Fix problems regenerating thumbnails if Pillow &amp; FFmpeg are
    not available.
  * Improved reading of Exif.Photo.UserComment values.
  * Minimum version of python-exiv2 is now 0.8.1
  * Other minor improvements and bug fixes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1638878400">- Update to version 2021.12.0
  * Installing with pip should install dependencies if needed.
  * Other minor improvements and bug fixes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1641297600">- Update to version 2022.1.0
  * Improved spell check language menu.
  * Add option to read BMFF files.
  * Other minor improvements and bug fixes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1645012800">- Update to version 2022.2.0
  * Add uploader tab for "Ipernity" photo sharing club.
  * Substantial rewrite of uploader tabs.
  * Main window "maximised" state is saved.
  * Other minor improvements and bug fixes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1647518400">- Update to version 2022.3.0
  * Removed OpenStreetMap tab.
  * Added licence related stuf to ownership tab.
  * Removed --user option from post install script.
  * Better caching of geocoder results.
  * Other minor improvements and bug fixes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1647950400">- Update to version 2022.3.1
  * Fix bug when removing marker from Bing map.
  * Fix bug in comparing version numbers.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1648641600">- Update to version 2022.3.2
  * Fix urllib import error porblem on some systems.
  * / Fix non-existing cache directory error.</changelog>
  <changelog author="pgajdos@suse.com" date="1666094400">- python-six is not required
  https://trello.com/c/MO53MocR/143-remove-python3-six</changelog>
</package>
<package pkgid="20ebf89711a3385b117ef341f85d47c24808f7738acec113b208ed92eb7970ddba955d8f7540bb846e22820873d87efbef0cbdcaf640ca69db39556cd158eede" name="PlayOnLinux" arch="noarch">
  <version epoch="0" ver="4.4.0" rel="bp160.1.2"/>
  <changelog author="ecsos@opensuse.org" date="1497441600">- add patch PlayOnLinux-BrokenMiscButtons.patch
  fix issue 5522</changelog>
  <changelog author="ecsos@opensuse.org" date="1499774400">- update to 4.2.12
  * no changelog from upstream
- remove patch PlayOnLinux-BrokenMiscButtons.patch because now in
  upstream</changelog>
  <changelog author="ecsos@opensuse.org" date="1507032000">- add patch PlayOnLinux-https.patch to fix boo#1051248</changelog>
  <changelog author="kstreitova@suse.com" date="1530273600">- require p7zip-full for TW as 7z binary needed by PlayOnLinux was
  moved to this package (see bsc#899627 for more details about
  this change)</changelog>
  <changelog author="ecsos@opensuse.org" date="1543320000">- Update to 4.3.3
  * Linux: Fix HDPI support
  * Compatibility with OSX &lt; Mojave
- Changes from 4.3
  * Various fix on OSX
  * Phoenicis (POL 5) winebuild compatibility. POL 4 winebuilds
    will be deprecated.
    (See https://github.com/PhoenicisOrg/phoenicis-winebuild)</changelog>
  <changelog author="ecsos@opensuse.org" date="1545825600">- Update to 4.3.4
  * Fixed some bugs in the wineversion process
  * Begining of code cleaning and refactoring
  * Begining of using wx box sizers instead of absolute
    positioning. Most of the windows are now resizable.
    This should solve display issues on many cases: HDPI and
    alternative windows manager:
    (see https://www.playonlinux.com/en/topic-16188-Visual_error_with_KDE.html)
  * macOS: Remove XQuartz installation
  * macOS: Bundle an up-to-date wine version
  * macOS: Use native terminal instead of xterm
  * macOS: Fix localization
- Add PlayOnLinux-fix_media_dir.patch to fix variable MEDIA_DIR to
  correct location.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599480000">- Update to 4.4.0
  - Update Variables.py
- Switch source from playonlinux.com to github.
- Run spec-cleaner.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599480001">- PlayOnLinux requires now python3 and pyton3-wxPython.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1654689600">- Remove required python2 package dbus-1-python from spec.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1708948800">- Adjustments patch macro for rpm 4.20.</changelog>
</package>
<package pkgid="c30420c59cfad9d69f895dc7f449a6986a4823d989fbc6e69898a148e04b231735f3d6f6d1c6a54a31708bc4da29c9a9935fc3550ae12d8e2e5ddbb21feefc89" name="ProtonPlus" arch="x86_64">
  <version epoch="0" ver="0.4.20" rel="bp160.1.16"/>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1693915200">- update to version 0.4.6:
  * Add Installed filter
  * Add couple extra Wine/DXVK versions for download</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1700740800">- Update to version 0.4.7-2:
  * Modified the appdata file to include the changelog of v0.4.7
- Update to version 0.4.7-1:
  * Fix missing icon sizes.
- Update to version 0.4.7:
  * modernised UI
  * updated localization</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1701259200">- update to version 0.4.8:
  * Fix Bottle Icon</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1702209600">- fix a bug which didn't show installed wine/proton versions</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1706011200">- change services to manual
- add a minimum meson version</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@disroot.org&gt;" date="1715342400">- update to 0.4.10:
  * Update GNOME runtime to version 46
  * Add rtsp variant of ge proton</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1721304000">- update to 0.4.15:
  * fix mistake
- update to 0.4.11:
  * update translations
  * Remove extra space in bottles.vala</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726228800">- update to 0.4.16:
  * Added support for Steam Tinker Launch
  * Made Ctrl-Q quit the application
  * The window now remembers the last-used size
  * Improved UI polish and consistency
  * Made it easier to translate the application
  * Added developer scripts
  * Add swedish translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726574400">- update to 0.4.17:
  * Updated German translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1728129600">- update to 0.4.20:
  * Generate PNG icons for desktop environments with bad SVG support
  * Use PNG app icons instead of SVG
- update to 0.4.19:
  * Fix Proton-Sarek
  * Update description to include Sarek
  * Add keywords to metainfo
- update to 0.4.18:
  * Refresh application logo with more shading and modern border
  * Add Sarek
  * Update Swedish translation</changelog>
</package>
<package pkgid="d3a752d499675d808f9c9054055c90e71d4b3507fb2103bf8b8587a733d834e88cd216223f3beafe1f348d253c926fd30ce2ab1e22601c994363aa7c41789872" name="ProtonPlus-lang" arch="noarch">
  <version epoch="0" ver="0.4.20" rel="bp160.1.16"/>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1693915200">- update to version 0.4.6:
  * Add Installed filter
  * Add couple extra Wine/DXVK versions for download</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1700740800">- Update to version 0.4.7-2:
  * Modified the appdata file to include the changelog of v0.4.7
- Update to version 0.4.7-1:
  * Fix missing icon sizes.
- Update to version 0.4.7:
  * modernised UI
  * updated localization</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1701259200">- update to version 0.4.8:
  * Fix Bottle Icon</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1702209600">- fix a bug which didn't show installed wine/proton versions</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1706011200">- change services to manual
- add a minimum meson version</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@disroot.org&gt;" date="1715342400">- update to 0.4.10:
  * Update GNOME runtime to version 46
  * Add rtsp variant of ge proton</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1721304000">- update to 0.4.15:
  * fix mistake
- update to 0.4.11:
  * update translations
  * Remove extra space in bottles.vala</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726228800">- update to 0.4.16:
  * Added support for Steam Tinker Launch
  * Made Ctrl-Q quit the application
  * The window now remembers the last-used size
  * Improved UI polish and consistency
  * Made it easier to translate the application
  * Added developer scripts
  * Add swedish translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1726574400">- update to 0.4.17:
  * Updated German translation</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1728129600">- update to 0.4.20:
  * Generate PNG icons for desktop environments with bad SVG support
  * Use PNG app icons instead of SVG
- update to 0.4.19:
  * Fix Proton-Sarek
  * Update description to include Sarek
  * Add keywords to metainfo
- update to 0.4.18:
  * Refresh application logo with more shading and modern border
  * Add Sarek
  * Update Swedish translation</changelog>
</package>
<package pkgid="4299279c00c81f753a33ebf86172c0b04f16d7880756ad4b124bff7d8a3bc90fc7047950ac1e755f11f28ee1e44431924fac0d83d13bc3ce6e23fa262dcd93a4" name="PrusaSlicer" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="bp160.1.38"/>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1710331200">- Update to 2.7.2
  [#]# Improvements with respect to 2.7.1
  * Multi-material segmentation improvements
  * Color change (M600) improvements
  * Ramping travel improvements
  * SLA overrides
  * Windows specific: The cut tool sometimes produces non-manifold
    meshes. This situation is now detected and the user is advised
    to use Windows repair algorithm on the resulting objects.
  [#]# Bugs fixes with respect to 2.7.1
  * Fixed incorrect partial arrange in certain cases.
  * Fixing arrange issues with aligning to unprintable objects when
    doing Shift+A.
  * Fixed arrange which sometimes put the wipe tower slightly out of
    bed
  * Fixed UI glitch when setting object dimensions to extremely high
    values.
  * Fixed a bug in generation of brim and skirt preview in the
    preliminary G-code preview (#11821, thanks to @supermerill)
  * Fixed an issue Ctrl+Shift+Tab shortcut, which incorrectly
    collapsed sidebar.
  * Fixed wiggling of Rotate gizmo when moving an object in certain
    cases.
  * Fixed missing updated when moving through dropdown items using
    keyboard arrows.
  * Improve filtering of special characters on Klipper
    EXCLUDE_OBJECT labels (#11802, PR#11813 by @jschuh - thank
    you).
  * Fixed layer change color dialog opening off screen.
  * Fixed occasional crash during thumbnail generation for SLA
    printers.
  * Fixed slicing issues such as missing infills and similar on
    multi part models when sliced with object-specific settings.
  * In SLA mode, it was not possible to use custom file extension
    (configured in Output Settings).
  * Fixed incorrect calculation of wipe length in certain cases,
    leading to shorter wipes than configured.
  * Fixed various issues and UI glitches in text/SVG embossing.
  * Fixed missing update when a new printer was added while a
    physical printer preset was selected.
  * Scrolling of the window was incorrectly performed when using
    mouse wheel over a dropdown.
  * Windows specific: Drop down menus appeared outside of
    PrusaSlicer and could not be opened again.
  * When loading an object from a 3MF, the suggestion to rescale
    the model is not shown, because 3MFs store the information
    about the correct unit (unlike STL files).
  * Fixed an incorrect check of supported OpenGL version, which led
    to a hard crash when OpenGL 3.2 was not available.
  * When loading a 3MF for MM printer, PrusaSlicer offers to load
    individual models as parts of a single object. This dialog did
    not show up for specific geometries.
  * PrusaSlicer did not start on some Windows Server installations
    due to a missing DLL (wlanapi.dll). The library is now loaded
    in runtime and the respective features.
  * Travels with standard lifts (non-ramping) were incorrectly
    generated.
  * With option "Retract on layer change" disabled, there was a
    retraction missing before the first travel on each layer.
  * Variable layer height limits were not applied correctly when
    using multi-extruder printer with different values of min and
    max layer height.
  * When z travel speed was set to zero, it was incorrectly
    exported into the G-code, effectively stopping the print.
    Instead, regular travel speed should have been used for the z
    travel.
  * When Print / Filament / Printer profiles contained different
    values for the same key (which should normally not happen,
    providing the profiles are correct), the misplaced keys could
    have been used instead of the correct ones.
  * Fixed incorrectly applied retraction in vase mode when ramping
    travels were enabled.
  * When using the "No sparse layers" wipe tower, the print head
    sometimes lowered before travelling to the wipe tower, digging
    into an object and destroying the print.
  * Fixed a crash when loading certain AMF files.
  * When specific extruder was set for the wipe tower and z
    position has changed in custom toolchange G-code, the z
    position was not correctly accounted for.</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1714046400">- Update to 2.7.4
  * Objects from 3MFs generated by BambuStudio now retain
    multimaterial painting when loaded. BambuStudio saves the data
    under a changed name, but because both the location and meaning
    are the same, PrusaSlicer now tries to load the data under the
    new name when it fails to find the attribute that PrusaSlicer
    has always used. #12502
  * Fix: Downloading files from Printables did not work correctly
    (#12521).
- Fixes in 2.7.3
  [#]# Bug fixes with respect to 2.7.3-beta1
  * Removed negligible deretractions sometimes emitted into the
    G-code after the recently introduced spiral vase mode
    improvements. While they did not present actual issues with the
    print, they were confusingly shown in the G-code preview.
  [#]# Bug fixes with respect to 2.7.3-alpha1
  * The z offset configuration option was not correctly accounted
    for when doing the last filament unload above the wipe tower.
  * Fixed crash when importing a specific config bundle while in
    SLA mode.
  * Linux specific: When changing active profile using the dropdown
    in the right panel, the dropdown would stay open when Unsaved
    Changes dialog was shown.
  * The improvements of spiral vase mode handling introduced in the
    previous alpha did not work correctly with absolute extruder
    addressing (#2841 (comment)). They are now only applied with
    relative extruder addressing, otherwise it falls back to the
    old behaviour.
  * After performing a toolchange on the wipe tower, a G-code to
    set layer z is now always emitted. This is to make sure that
    the layer z is correct and that it was not changed in custom
    toolchange G-code. While the user is expected to pass such
    information in the custom G-code, the "z-ensuring" G-code was
    present in previous versions and removing it in 2.7.2 was
    therefore a needless breaking change (#12361).
  * Fixed blobs on the first layer when using ramping travels with
    absolute extruder addressing enabled.
  * Fixed issues with 'avoid crossing perimeters' function
    (#12432). This problem was actually fixed in 2.7.3-alpha1
    already.
  [#]# Major improvements first seen in 2.7.3-alpha1
  * See
    https://github.com/prusa3d/PrusaSlicer/releases/tag/version_2.7.3-alpha1
    for the full description
  * Improvements of multi-material printing
  * Purging volumes
  * Spiral vase mode improvements
  [#]# Other improvements with respect to 2.7.2
  * PrusaSlicer is now able to open 3MF files generated by
    BambuStudio and load geometry from them. (#10718, PR #10808,
    thanks to @cmguo). Please note that BambuStudio allows to save
    a 3MF containing G-code only, which is not supported by
    PrusaSlicer and loading of such 3MFs will fail.
  * Metadata of binary G-code have a new item named objects_info,
    which lists all the objects in the print and their boundary
    polygons. The same info was added into the comments at the end
    of ASCII G-codes.
  [#]# Bugfixes with respect to 2.7.2
  * Pressure equalizer limits were not respected when Dynamic speed
    on overhangs was used (#9485). This is now fixed. Pressure
    equalizer is also not applied after long travels. Many thanks
    to @MGunlogson for providing a fix in his pull request #9622.
  * Fixed a bug resulting in inadequate anchoring of bridging
    extrusions. This bug was introduced in PrusaSlicer 2.6.0.
    [#10231], #11500, #11633, #11173, #11117, #9999, #10313, #11150,
    [#10493]
  * When using Cancel object feature, the marks denoting where one
    object ends and another starts were placed incorrectly. As a
    result, there was a missing deretraction after all travels to
    objects which would normally be printed following the cancelled
    object. The issue was even worse with sequential printing,
    where the uncompensated retractions on the cancelled object
    summed up and could result in filament being unloaded past the
    driving gears.
  * When arcs (G2 and G3 G-codes) were enabled, PrusaSlicer
    generated toolpaths outside the print area in certain cases
    (#12381).
- Increase memory and disk space for building constraints</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1714132800">- Don't include stray filesystem/convenience.hpp removed in
  boost 1.85</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1724932800">- Update to 2.8.0
  * Prusa Connect integration
  * seam improvements
  * updated UI
  * new G-code Viewer
  * improved profile updating system
  * many more improvements and bugfixes
- Must move to wxGTK3: we have no wxWebView in wxWidgets. Unfortunately
  this disables wayland support:
  https://github.com/prusa3d/PrusaSlicer/blob/version_2.8.0/src/PrusaSlicer.cpp#L88-L93
- Add PrusaSlicer-2.8.0-slic3r-includes.patch
  * gh#prusa3d/PrusaSlicer#13080</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1725364800">- Do not require libquadmath-devel on aarch64 since it does not
  exist on this arch</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1726228800">- Remove quadmath workaround for gcc14 with boost error:
  fixed by boost 1.86 (see boo#1225861)</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1733659200">- Update to version 2.8.1
  https://github.com/prusa3d/PrusaSlicer/releases/tag/version_2.8.1
- Removed PrusaSlicer-2.8.0-slic3r-includes.patch
- Added PrusaSlicer-2.8.1-fix-build.patch
- Updated up-occt-version.patch</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1733659201">- Changelog for 2.8.1
  * When using the wipe tower with "No sparse layers" option
    enabled, there would still be travels to the wipe tower
    location even for the skipped layers. This is a regression
    introduced in 2.8.1-rc1 (#13384).
  * A warning about inconsistent color profiles in PNGs used as
    Prusa Account avatar is now silently ignored (#12920).
  [#]# Improvements with respect to 2.8.0
  * Based on the feedback received after 2.8.0 release, the menu
    bar was reinstated and the menu no longer hides under a button.
    Thanks everyone for the feedback, it was very helpful and it
    will be taken into consideration during possible UI-related
    decisions in the future. #12943
  * When logging-in with the PrusaAccount using third party
    authorization (Google, Apple, Facebook), an external browser
    window is opened so the user is not forced to enter their
    credentials into windows created by PrusaSlicer.
  * The built-in web engine no longer remembers the user after
    logout.
  * There are two new parameters: Filaments-&gt;Advanced-&gt;Abrasive
    material and Printers-&gt;Extruder-&gt;High flow nozzle. Both flags
    will be used to check whether a sliced G-code is compatible
    with the given printer (abrasive material requires hardened
    nozzle) and also to ensure that "Set as current" function in
    PrusaSlicer-embedded Prusa Connect will select the suitable
    profile for the given configuration.
  * Note that this feature is supported since MINI/MK4/XL firmware
    version 6.2.0-alpha1, and that the implementation in Prusa
    Connect is not completely finished yet, meaning that the dialog
    where printer is selected does not use this information - it
    will later start working without the need to download a new
    slicer version.
  * Automatic orientation of bridges has been improved. Issues with
    unanchored bridges caused by inconvenient choice of their angle
    should now occur less frequently, although there is still a
    large class of scenarios where the solution is suboptimal.
  * The output of --query-printer-models command line option was
    extended to contain bed shape and dimensions. Note that custom
    bed shapes are currently not supported.
  * The 'new version available' notification can now be used to
    direct the user to our website, instead of just downloading the
    executable. As of now, we release two different Linux
    AppImages, so the user needs to be able to choose which one
    they want to download.
  * A new infill type called Zig-zag was created. It behaves the
    same as Rectilinear, except that the pattern is aligned between
    layers (Rectilinear is optimized for short travels, which leads
    to inconsistencies). The new infill may thus take slightly
    longer to print because of that, although the effect will be
    negligible in most prints. It is possible that Rectilinear and
    Zig-zag will be merged into a single infill type in one of the
    upcoming releases. #12613
  [#]# Bugs fixed with respect to 2.8.0
  * General improvement of Prusa Connect / PrusaAccount session
    stability. There were scenarios which led to uncommanded
    logouts from PrusaAccount, some resulting in partially blank
    Prusa Connect screen and requiring application restart to fix.
    The problems occurred after being logged on for a long time,
    after waking the PC up from sleep, or when internet connection
    was unstable.
  * Fixed missing G-code preview on setups using older GPUs
    (#12908).
  * Some settings were not applied when overridden per object
    (#12916).
  * Fixed adding SVGs as parts/modifiers. This was broken in 2.8.0
    (#12915).
  * Fixed UI glitch resulting in disappearing text in edit boxes
    after editing (#12932).
  * Fixed incorrect capture of keyboard input, which led to some
    keys being ignored (#13043).
  * Physical printer configured to use username/password
    authentication no longer asks the user for the credentials when
    opening the Physical Printer page (#12921, #12933).
  * Notification informing about the user having logged in into
    PrusaAccount occasionally showed even when the user was in fact
    logged in for a long time already (#12963, #13166).
  * Object shells incorrectly stayed visible after switching from
    FFF to SLA and back.
  * Fixed rotation slider in SVG tool when "Use surface" option was
    active (it incorrectly reverted to original position when
    released).
  * Changing Dynamic overhang speeds settings did not trigger
    G-code regeneration as is should have.
  * Fixed loading of specific OBJ files (#12157).
  * Fixed a crash when scaling to fit in specific cases (circular
    bed and objects with parts).
  * Fixed an infinite loop during infill generation stage occurring
    in rare cases (#11426).
  * 'Export Plate as STL/OBJ Including Supports' no longer exports
    non-printable objects.
  * Fixed zero velocity G-code commands when the pressure equalizer
    was combined with spiral vase mode. This bugfix was ported from
    OrcaSlicer. Thanks to @Noisyfox, @SoftFever and everyone
    involved.
  * Fixed incorrect Color Changes placement after reslicing in
    certain cases (#13008).
  * Reduced number of emitted M106 G-codes when dynamic fan speed
    on overhangs is enabled. Too many commands were generated even
    when the fan speed barely changed or did not change at all.
    [#11981], #11856
  * Fixed missing update when adding Color Change with supports
    enabled.
  * Fixed crash when loading specific 3MFs containing Color Changes
    (#13038).
  * Adaptive layer height feature did not work when Z shrinkage
    compensation was used.
  * Fixed unexpected autoselection of SLA printer in Configuration
    Wizard in certain cases (#13058).
  * Fixed couple of usability issues with the vertical slider in
    preview (hovered ticks selection and reaction to mouse wheel)
    (#12944).
  * Fixed unexpected deceleration on overhangs with dynamic
    overhangs speed enabled.
  * Line infill did not generate at all when maximum anchor length
    was set to zero.
  * When seam position was set to Random, the algorithm would
    occasionally place the seam on a bridging perimeter.
  * Fixed erratic placement of seams occassionally happening with
    specific object geometry.
  * Fixed a problem in STEP file loading, which resulted in errors
    in the geometry of the loaded model (#12271, #12122).
  * Using certain fonts for the text embossing led to project files
    which PrusaSlicer was not able to open anymore (#13123).
  * Custom G-codes are not allowed to contain certain keywords
    which PrusaSlicer uses for internal purposes. The check that
    these keywords are not present was not working in the previous
    version. It is now fixed.
  * Fixed artifacts sometimes appearing in the "Actual speed"
    preview. The artifacts were a result of long-existing bug in
    the G-code processor, the "Actual speed" preview just made them
    visible. The bug could have led to incorrect time estimates for
    specific G-codes.
  * Fixed three distinct crashes in Configuration Wizard occurring
    after a specific sequence of steps.
  * Fixed a long-existing bug in the cooling logic, which resulted
    in zero or possibly negative extrusion commands in very rare
    cases.
  * Downloading from Printables did not work when the download
    folder contained non-ASCII characters.
  * Fixed selection of print host type in Physical Printer dialog.
    PrusaLink was missing in the list for several printers which
    actually support it. This also caused several other glitches
    (#13286).
  * The Connect status dots in the Printer Settings dropdown did
    not show for SLA printers.
  * Custom printer profile created in Config Wizard could be saved
    under a name clashing with a system profile name.
  * "Rename preset" button was inadvertently not shown in the UI
    when physical printer profile was selected.
  * Number of toolchanges did not show in the "Sliced info" box
    when wipe tower was disabled (#6832).
- Replace PrusaSlicer-2.8.1-fix-build.patch with
  PrusaSlicer-2.8.1-pr13609-fix-build.patch and remove unstable
  (because not merged yet) URL from Source tag.
  gh#prusa3d/PrusaSlicer#13609
- Remove update-desktop-files</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1734264000">- Fixed loading STEP files
- Added PrusaSlicer-2.8.1-pr13761-fix-occtwrapper.patch
- Removed up-occt-version.patch</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1734696000">- Update to version 2.9.0
  * This release introduces multiple beds, scarf seams, Printables integration,
    improved support for multiple nozzle diameters, paint-on fuzzy skin and
    many more improvements and bugfixes.
  * See https://github.com/prusa3d/PrusaSlicer/releases/tag/version_2.9.0
- Added PrusaSlicer-2.9.0-pr13896-static-libs.patch
  gh#prusa3d/PrusaSlicer#13896
- Added PrusaSlicer-2.9.0-pr13885-printconfig-segfault.patch
  gh#prusa3d/PrusaSlicer#13885
- Removed PrusaSlicer-2.8.1-pr13609-fix-build.patch</changelog>
</package>
<package pkgid="d6f24031217f36c973a3d26fa65770f78c572bd16bf9861ef9b2352404c4ef92a9d0a403f61be3945109051f4ff5499a567a0adb65447bc2f4b5f222d427565e" name="QR-Code-generator-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0+git17.856ba8a" rel="bp160.1.14"/>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1575374400">- Initial commit, needed by libreoffice 6.4</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1575374401">- Add patches to make the stuff actually installable:
  * 0001-Do-not-append-to-C-XX-FLAGS-but-just-set-them-if-not.patch
  * 0002-Make-use-of-fPIC-parameter-when-building.patch
  * 0003-Generate-both-shared-and-static-libraries.patch
  * 0004-Create-install-targets-for-C-and-CPP.patch
  * 0005-Rename-cpp-library-to-qrcodegencpp-to-avoid-conflict.patch
  * cflags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579608000">- Drop not really needed patch:
  * 0001-Do-not-append-to-C-XX-FLAGS-but-just-set-them-if-not.patch
- Fix build on SLE12</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to 1.6.0:
  * https://github.com/nayuki/QR-Code-generator/compare/v1.5.0...v1.6.0
- drop cflags.patch (upstream)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1699790400">- Update to 1.8.0
  * https://github.com/nayuki/QR-Code-generator/compare/v1.6.0...v1.8.0
- Rebase 0003-Generate-both-shared-and-static-libraries.patch
- Rebase 0004-Create-install-targets-for-C-and-CPP.patch
- Drop 0005-Rename-cpp-library-to-qrcodegencpp-to-avoid-conflict.patch
- Add %{?sle15_python_module_pythons}</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1728475200">- Update to 1.8.0+git17.856ba8a
  https://github.com/nayuki/QR-Code-generator/compare/v1.8.0...856ba8a
- switch build to cmake files from
  https://github.com/EasyCoding/qrcodegen-cmake.git
  - This build also adds the pkgconfig and cmake files for easier
    integration with other projects ( like the upcoming obs-studio
    31.0.0)
  - drop patches:
    0002-Make-use-of-fPIC-parameter-when-building.patch
    0003-Generate-both-shared-and-static-libraries.patch
    0004-Create-install-targets-for-C-and-CPP.patch
- use %ldconfig_scriptlets
- add BR for pkgconfig to ensure we get the pkgconfig provides</changelog>
</package>
<package pkgid="06c9f06943fa22a85de771d94ac5687f6e9026c538e60fdad6b1f52a1d843768259a1704a4a2f44c1ce1c33d8097dd296e4c4d26f31b46c7b3d264927fb09053" name="QSVEnc" arch="x86_64">
  <version epoch="0" ver="7.71+0" rel="bp160.1.12"/>
  <changelog author="malcolmlewis@opensuse.org" date="1730289600">- Initial build at version 7.71+0.
- Add QSVEnc-remove-git.patch: Remove git call for ENCODER_REV.
- Add QSVEnc-enable-vulkan.patch: Enable Vulkan and Placebo.</changelog>
</package>
<package pkgid="3bf461f5e9d5f52198d9d9c345cf4813d78e9833147aa56377271f34736d8fda8c0056b8f1cc73b88c2e013f78bc1e79cbb22fcff9a236633e2c0a00ebe0f25f" name="QTalarm" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="bp160.1.14"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1578312000">- Package cleanup</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1601294400">- Update to version 2.0.2
  * Ui fixes: click tray icon to toggle reactive windows
  * Add license file
- Drop compatibility ifdef's for old distributions</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1604750400">- Update to version 2.1.0
  * auto saving all alarm data</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1606824000">- Update to version 2.1.1
  * Added manual monochrome tray icon option</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1634472000">- Update to version 2.2.0
  * Added “Solve to Snooze” feature. This forces a user to solve
    a random math problem to stop the current alarm. This is
    intended for those who tend to hit snooze in their sleep.
  * Fix URL</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1642852800">- Update to version 2.3.0
  * Added clone button
  * Refactored main controller a bit</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1669636800">- Update to version 2.3.2
  * Fixed crash and added default behavior for showing window on
    load.
- Update to version 2.3.1
  * Refactored some code. No feature changes.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1671796800">- Update to version 2.4.0
  * Added ability to detect if another instance of the application
    is running and self terminate if so.
  * Added more verbose debug logging.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1694433600">- Update to version 2.5.0
  * Added One-time alarm type.
  * Added new flag for waybar toggling.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1696766400">- Update to version 2.5.1
  * Fixed a race condition in the math based snooze alarm.</changelog>
</package>
<package pkgid="d6e8aa693d91f85a09e1cb03dc095ce4c7b426e7553b324d2ba89874d8598c2f544c7bd13773407bb7da82fc0da443f5f20e25b21842ae9b3275fd95f67787af" name="QtDMM" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="bp160.1.14"/>
  <changelog author="trenn@suse.de" date="1175256000">- updated to version 0.8.8
  changelog copied from the project site:
- gcc 4.1 compatibility
- Added Digitech QM1538, MASTECH MAS-345, M-345pro, Voltcraft M-4650CR
- Context menu for graph
- Improved import</changelog>
  <changelog author="ckornacker@suse.de" date="1183377600">- added VC940 support</changelog>
  <changelog author="hmacht@suse.de" date="1193140800">- add QtDMM-fix-includes.patch to fix errors due to gcc4.3</changelog>
  <changelog author="hmacht@suse.de" date="1216382400">- remove QtDMM-vc940.patch and QtDMM-fix-includes.patch
- update to 0.8.12:
  Version 0.8.12
  - Added PeakTech 4015A (Jochen Puchalla)
  - Added Tenma 72-7745 (Laurent Perez)
  - Bugfix McVoice M-980T (Erik Hobel)
  - Added Digitech QM1462 (Peter Halasz)
  - Added Digitek INO2513
  - Added Raio Shack 22-812 (Bruce Lilly)
  - Corrected typo in dmmgraph (Erik Hobel)
  Version 0.8.11
  - Mac OS X port
  Version 0.8.10
  - Added Sinometer MAS-343
  - Adedd PeakTech 3330
  - Bugfix in VC820 protocoll
  - Added Voltrcaft VC940
  - Added Digitech QM1537
  - Added Uni-Trend UT30A and UT30E
  - Added Digitek DT-9062
  - Confirmation Voltcraft M-3860
  - Added PeakTech 4360
  Version 0.8.9
  - Added Voltcraft M-3610D
  - Added Iso-Tech IDM 73</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1406980800">- Update to version 0.9.0
  * QtDMM was ported to Qt4.x
  * QtDMM was relicensed from GPL 2.0 to GPL 3
  * Added TekPower TP4000ZC / digitek DT4000ZC
  * Added PeakTech 3430</changelog>
  <changelog author="aloisio@gmx.com" date="1518177600">- Update to version 0.9.8
  * Use gold linker.
  * Added HoldPeak HP-90EPC (tstenner).
  * Use pkgconfig for spec file.
  version 0.9.7
  * Added Voltcraft VC870 (Florian Evers)
  * Added VA symbols to display apparent power
  * Added cosphi symbols to display the power factor
  version 0.9.6
  * Code clean up
  * fix translation loading
  * Fix message handler
  * Fix file export (leading zero of the time stamp)
  * Fix console logging on Windows
  * Remove 1/10s sample rate -&gt; don't work with most devices
  * Use infinity sign to set endless recoder
  * Fix hang of M-4660A
  version 0.9.5
  * Port to Qt5
  * Use C++14
  * Add translation support
- Switch to fork of the original project that supports Qt5
- Added QtDMM-0.9.2-newmodels.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1563364800">- Fix the lrelease executable name.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1672142400">- No gold on riscv64</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1681992000">- Drop using binutils-gold as it is unmaintained and
  will be dropped (boo#1210687).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="6eca40598871c18c551020265384f9441675acfd26c6c7115ddad4d75f65723e62161669c3a4d02e2e26153bbc54cd0df3aeec33e805a02e8f624764a3678f05" name="QtPass" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.13"/>
  <changelog author="ecsos@opensuse.org" date="1528200000">- update to 1.2.3
  - Add support for OTP code generation on Linux as requested in
    [#327] #394 (Noettore)
  - Revert scroll bar changes #393 (destanyol)
  - Fix High Dpi Support. Works now under Windows and KDE/Plasma.
    [#392] (hgraeber)
  - Duplicate prefix in installation of tests directory in v1.2.2.
    [#389]
  - Compilation error on FreeBSD member access into incomplete type
    [#388]
- remove patch qtpass-highdpi.patch because now in upstream</changelog>
  <changelog author="herbert@graeber-clan.de" date="1531137600">- Make RCC calls reproducible</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1539432000">- For reprodicibilty QT_HASH_SEED has to be set to 0</changelog>
  <changelog author="ecsos@opensuse.org" date="1566648000">- Update to 1.3.0
  Some of the many changes, please resort to the CHANGELOG for
  a more complete listing.
  - Add otp (two factor authentication) support #327
  - Use key fingerprint as ID instead of “long” ID. #452
  - Typo: dialouge to dialogue. #444
  - Scripts and logic specific to Windows Store releases #439
  - For config check, check that the selected binary is available.
    [#438]
  - Fix character encoding issues for non-UTF-8 locales. #435
  - Fixes and improvments for config dialog #432
  - Support for using WSL binaries on Windows #431
  - Bugfixes and Windows compatibility improvements #430
  - Semi-automatic code cleanup #425
  - Update to prevent the installer requesting admin #424
  - Display passwords as QR codes #421
  - Tested working on Mac Os HS with pinentry-mac #419
  - Bugfixes #413
  - pwgen: fix inverted "Generate ... less secure passwords"
    checkbox #409
  - Continuing refactoring #407
  - #390 make box cheched when opening a folder users panel #403
  - Windows sigsev issues #326
  - Access to the / (root) directory form within the application
    window on MacOS #302
  - Context menu on transparent fields is transparent too . . #227
  - Various issues with Info.plist file on macOS #457
  - Problem with GNUpg not found on MacOS #362
  - Unable to see main application window (applicationn runs
    minimized to tray only) #286</changelog>
  <changelog author="ecsos@opensuse.org" date="1570017600">- Update to 1.3.1
  - Renaming password #463 #469
  - Edit main title field #446
  - Add missing finishedShow() signal connection in PasswordDialog
    constructor (fixes the "Edit password" function) #473
  - Build dependency fixes #467 #479
  - Additional lines (notes) shown again #474
  - Running but no GUI #451
  - Correct font color with Dark themes #340 #476
  - Add missing overrides #478
  - Sorted profiles dropdown as in #404 #472
  - Fix missing app ID and icon on Wayland. #468</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570276800">- Remove superfluous entry for password-store from Recommends as
  it's already stated in Requires
- Add hicolor-icon-theme to BuildRequires</changelog>
  <changelog author="ecsos@opensuse.org" date="1570363200">- Rename all to package_naming_guidelines.</changelog>
  <changelog author="ecsos@opensuse.org" date="1570622400">- Update to 1.3.2
  - Don't call QtPass::setup() from QtPass class constructor #482
    fixes first run issues #485, #481, #466, #423 and #308
  - Password window padding #484
  - Buttons width on RHEL 8 #483
  - Start minimized works again #471</changelog>
  <changelog author="ecsos@opensuse.org" date="1586692800">- Add qtpass.appdata.xml.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1695124800">- Update to 1.4.0
  * What's Changed
  - Don't use a deprecated method in #491
  - Issue #402: 'deselect()' on clearing filter in #490
  - Don't base pass-otp availability decision on hardcoded /usr/lib in #499
  - Use new stable version of install-qt-action.  in #502
  - Enable out-of-source build in #503
  - Enable ubuntu, windows and macOS based builds for CI in #508
  - Spelling: Git pull, Git push in #516
  - Fix blurry icons when fractional scaling is enabled in #526
  - Update minimum Qt version in #527
  - #514 Show password with a monospace font in #528
  - Clear search on profile change in #529
  - Move MainWindow to the screen the cursor is on in #547
  - Fix issues with renaming passwords and moving folders in #532
  - Explicitly only remove ".gpg" when renaming files in #558
  - Keep suffices when moving (to) a directory while imitiating pass in #559
  - Fix keys created/expires dates in the users dialog window (fix: 571) in #572
  - Fix installation instructions in README.md in #565
  - Delete context menu after exec in #578
  - Add more options for the password displaying in #587
  - Fix accidental deletion of entire passwordstore in #604
  - Install QT in codeql workflow in #608
  - Super Linter added and fixing findings in #610
  - Removed travis (no longer free) and lgtm (migrated to Github) in #612
  - fix the unintended "running" of the entropy window in the keygen dial… in #640
  - Restore licensing info for QProgressIndicator in #642
  - Add pass store signing key feature in #634
  - Fix taborder and add buddies in keygen dialog in #643
  - Clazy cleanup and other minor fixes in #641
  - fix bug =&gt; clipboard was not cleared when using primary selection in #615
  - super-linter ENV variables in shared location for local and automated in #616
  - clang-format -i src/.cpp src/.h in #645
  - Version bump and cleanup in #646
  * Wording and localisation
  - Spelling: Git, GPG, PWGen, etc. in #492
  - Spelling: Keylist missing, Could not fetch, GPG in #493
  - Spelling: Search for users, , in #495
  - Translations update from Weblate in #530
  - Translations update from Weblate in #531
  - Translations update from Weblate in #535
  - Translations update from Weblate in #541
  - Translations update from Weblate in #548
  - Translations update from Weblate in #552
  - Translations update from Weblate in #553
  - Translations update from Weblate in #554
  - Translations update from Weblate in #560
  - Translations update from Weblate in #562
  - Translations update from Weblate in #563
  - Correct a typo in pass.cpp in #570
  - Translations update from Weblate in #573
  - Translations update from Hosted Weblate in #576
  - Translations updated in #605
  - Translation cleanup in #606
  - Translations update from Hosted Weblate in #607
  - New Transifex integration yml in #609
  - Translations update from Hosted Weblate in #611
  - Translations update from Hosted Weblate in #613
  - Translations update from Hosted Weblate in #614
  - Translations update from Hosted Weblate in #617
  - Translations update from Hosted Weblate in #618
  - Document "Using profiles" in #619
  - markdownlint --fix &amp;&amp; textlint --fix in #621
  - Translations update from Hosted Weblate in #622
  - Translations update from Hosted Weblate in #626
  - Translations update from Hosted Weblate in #627
  - Translations update from Hosted Weblate in #628
  - Translations update from Hosted Weblate in #629
  - Translations update from Hosted Weblate in #632
  - Translations update from Hosted Weblate in #633
  - Translations update from Hosted Weblate in #636
  - Translations update from Hosted Weblate in #644
  - Translations update from Hosted Weblate in #647
  - Translations update from Hosted Weblate in #648
  - Added Serbian and Estonian to project file in #649
  - Translations update from Hosted Weblate in #650
  - Natural language fixes in #654
  - Initial Korean from Weblate in #655</changelog>
</package>
<package pkgid="33d1ec05f1942cd0eef82d87591c936420425982591865546826f2b2e1066a478b8e7a31d4164b536ded4d8d3c91880adcce3810ac5341c6322a7c01bf7d4a52" name="R-KernSmooth" arch="x86_64">
  <version epoch="0" ver="2.23.24" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="5c34f0780a224c30374ef7abfe4de61bcdcea4acdc349abb5f8003d50243df3ebd308ece5c659b0519ac63ad4829060e1c1c3303bc69afe622893e6dcd684ca1" name="R-MASS" arch="x86_64">
  <version epoch="0" ver="7.3.60.2" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="e83f0bb3aa04fb8804800798d93d606bb9207d22712882e5e834320bd9b36fffabe131a27958539401be7478e28fba170db14e5d22d279078dec1c5d6c22587e" name="R-Matrix" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="b2e10e30bd48770fe49326dac817d009c1f2d461933a829c9f9a75a66f87ecc2d69962d8805b08c5c183e899c9bcd578938ddb418b29076190cae32cb0f9d13c" name="R-base" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="311a7eb121cf8a8b8b41aae207a7495e083504da2af7753ccd41fbdeeaac4a27b19828736a2fa2a43b4a60394c809175e0ae3b13c03972ef6fec391b386539ed" name="R-base-devel" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="f2f9160de077b948032a56e86c15df3c224c53ad2f3208ef3429f1009f07aa31107ce25a62e0aaf583125b1cd8508460ee1047a71b58fa3bb992fc5b1e3f2cec" name="R-boot" arch="x86_64">
  <version epoch="0" ver="1.3.30" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="84554586acd4b2a88f676413980dbbf2ab0aa4e48011dd920d44b811f80a67dcd9bb23e327faa1b02a86c9ead1e724905971fb185b591de0b02e4b3318fef07c" name="R-class" arch="x86_64">
  <version epoch="0" ver="7.3.22" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="5e5f2de9d1dbaf73f9c1b2745892b8da153756e0666cd259197eea7b2a1efb149a8ef13fcfa860bf776dc0fdf40d000e297685bbe9bccca4c4b405eaec0f5b93" name="R-cluster" arch="x86_64">
  <version epoch="0" ver="2.1.6" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="6fcdd5ef79716221f6f5ce5bbcab5dc7a2fdfe9d11ce74b59c469eb3ffb4f24b632d43a411c04ccb206b01cc8645577a4c5b87947a47e02dfb51d89f168d90b2" name="R-codetools" arch="x86_64">
  <version epoch="0" ver="0.2.20" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="c23ebd1feba717bd679b52b285db6bb6d5e9444e6b4059399c381bb50a6982aa97c415b666bfe6c15bbe96c5b5b615dc3a94510e5e6ef6ff08a2babc4c01a1bc" name="R-compiler" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="f842d6ccbbbb397b71bee71149fdeb9a49765bd61cca51aae88f01da1cb086c1b7ffa9b02a1efe6a1f8afaea0799384148625bf635b4f37bde66801d557cf3f0" name="R-core" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="a2500cde63acff90d024f5a92fcb22aa1c92e945c545cb04b5bb01d5f87ed54a43abe9585d9f68bad2885cefdbf94fbf67d84481cc2303b3b47b9280c7af1c34" name="R-core-devel" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="40ebff126fc4a244252152e53c498457ac19d8f537b893f1b2eb632fecd7cceba1787a95b3aafa0033241703870b96624b25da04a7b70c169170aa4c757555e1" name="R-core-doc" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="bcf8273352ffaa20212d62ff53acf914062eb9aa7dc006e28f8a1f39c3ae971e8f0b5985126ffda01ce4f0476bfa9c23d252c89d22e1fc28689f7947be61d7b1" name="R-core-libs" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="f366787af29748f06e1f446a2e36af3f5f8e0e69fe5aa2aa72e3da7b32fa0d58b2411bc5803f7f4a6a7fe8873ce97149c44434124ca356db2727174435ba3c9c" name="R-core-packages" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="23ab7013af0228b753e965d37e030a48f9ae92b0a5d946e961a3663cedd269e032b4c3bf76fb296722abd4e12db54c3005b6b25b6db0e075104054232ea22418" name="R-datasets" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="0c20030d724fc2f06bae2d6bdb8185b6fc92a93523d7dcc67d8c558bb766c4f60afd0aa63acdf9b8bfb71dce3b5b1bbd822309b4168d13246c655d01ac76ed01" name="R-foreign" arch="x86_64">
  <version epoch="0" ver="0.8.86" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="2cf7c615b726ce71afa9a815514f1d3da468d47c2a4ac0798bfa3e5f4145008d92da1ecdaded64ba5d1cd4530b62231519b12ad1b28ad4da1b54fa0f71b232e8" name="R-grDevices" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="500435c6d4cad9bd8338d3353d5d43b29db3798d8751ef2330582038d24bfbab4ab1bfd67a75a01b0ad2a5f9b9d405d17373416e969e1efb25eaf289c646d08f" name="R-graphics" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="20cd2c0e373d93cf87c63c718ab036820a38821057b3d0ec7a1223218c874f8a998e960690a51be33bdeb73c963b41ec0e34b81d1d9eccb35278809319633448" name="R-grid" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="7e147b4a2fd4d6e45faef092343a4a59b36ed05440143bbf4c869b2ac1e2edb8fe73730be90c2625dee0fab058d9b8a34d26e26f13e6e23aba049ac3c6e119ba" name="R-lattice" arch="x86_64">
  <version epoch="0" ver="0.22.6" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="9f464251c06b980a4cfe3a4fd68a24a07179e3d3054be27897caebdfe97d38526428d779844cb926b37b0f29cd4e379089c218b59ac6a524e1e14c9245c35efd" name="R-methods" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="df002bb98dfdc6a954d959c37e2850a0fc1c1b366d9359d19cfd0c99300ae75fbf5c204ff92e05f15d947fc531ee7f93658db1a072ee7c44057a7fcbae30fc42" name="R-mgcv" arch="x86_64">
  <version epoch="0" ver="1.9.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="95015d846ec1af7e26c92914d8f27128cc69560c103b55d27cf25ccf1f43cc3aa7cc37f3026a036575b93f8b343290de455a0240ade7912ff3979ba54b3c9d66" name="R-nlme" arch="x86_64">
  <version epoch="0" ver="3.1.164" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="e7a9180ec81582d6130d11e2eb110360ed77263c01ce7c21e80ddd3d95b7b04e64b7ec6a152e971263fe9ea4fcb4405fd857c26e99440034969024db254a6d04" name="R-nnet" arch="x86_64">
  <version epoch="0" ver="7.3.19" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="64ed82b13803faa099e98b6b562f82e7d8135e890fd111dd619234a99f85e763f65a6278d733575a47f9773785b47e40d94b18239617b77a4ffe75a332ae42c2" name="R-parallel" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="ed33721deb9d4fd703b54492853bb52c21886522d69637a8b0c5deb8d616baedcbee502f35d8b45cd20fa3cd4bf13c8d3bc0c0977c5e14984c3ab6db9e9f7ca4" name="R-recommended-packages" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="f7b3da8a2bdc66b3229f8bc6f04e9ca62cdda71084418d3a938a3429c8fe9ceea8f506315862d56176be054af95490446d3e434c6ad53aa2a02285254defd83b" name="R-rpart" arch="x86_64">
  <version epoch="0" ver="4.1.23" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="8e98a3733df7eaa7690cfec9e4c5ca5a8afe47de8f8e9a4ce81113c612d54db23cad475e2b4e062d973b934244d974640b0eb53bedf97d6e789ddc0b588867ce" name="R-spatial" arch="x86_64">
  <version epoch="0" ver="7.3.17" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="17e65131d2f2a104aecd36783d3b58674aa83cfea753395a17c515aff78d93c504ec3ed831ce7df1a6bcf011c71df870158f4a6e79804fa4f495e2a537dcfae3" name="R-splines" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="f5d36ff6048c3edf820c08d0b7a4fe3b6b4b69cdfbf18176a24b00e9dc1be327923de8cf661f33b6cc8b220266ab3df5d3f6872e11b8fc29e41c3c02457a7fc6" name="R-stats" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="212480e94cd0b681e9bffa57b054914b39f8383b1670ac0af07e7fc850bdbda7710e2c86f37208451fd56a6e230e096677144dab2c9611ace5282b6511e91e91" name="R-stats4" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="7b3f458892f794ada9d41cc73b5435ca12aad26e41428b05e9a46be5ba5374d5b31583c60930ecb0266bb8f6f7c7d36171bea946ceb0cce6d24580ec3020c5b1" name="R-survival" arch="x86_64">
  <version epoch="0" ver="3.6.4" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="8e3ebd368741da5d3d1552857fb22c725da4d1ec9367dd75fc365fedaff230a7a6a159da0e12c2a39a29e5859b9f72908002714f752e0a1c5bd71bb1a16f5e47" name="R-tcltk" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="4f0eee7eff78f0c1c76a44cfacd7e838128aaafa1fee8222b25f00539d00de4d5f026a712dcc9b2ed9e2c0c27c0c3cb8f3ea4adfc38b82ebc0f73066ba924955" name="R-tools" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="78e3b29d49d8c965926dee6e9e0ca8a36b5ba28fb7ff4c997f2168677e3f1391ea17619e0c79cd08c8175d6cb0008270d61abf3036e3df50ffcad7824f5f17ef" name="R-utils" arch="x86_64">
  <version epoch="0" ver="4.4.1" rel="bp160.1.63"/>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1655985600">- CHANGES IN R 4.2.1:
  NEW FEATURES:
  * New function utils::findCRANmirror() to find out if a CRAN mirror
    has been selected, otherwise fallback to the main site.  This
    behaves in the same way as tools::CRAN_package_db() and is
    intended for packages wishing to access CRAN for purposes other
    than installing packages.
    The need for this was shown by a day when the main CRAN website
    was offline and a dozen or so packages which had its URL
    hardcoded failed their checks.
  INSTALLATION on a UNIX-ALIKE:
  * The libraries searched for by --with-blas (without a value) now
    include BLIS (after OpenBLAS but before ATLAS).  And on macOS,
    the Accelerate framework (after ATLAS).  (This is patterned after
    the AX_BLAS macro from the Autoconf Archive.)
  * The included LAPACK sources have been updated to 3.10.1.
  UTILITIES:
  * The (full path to) the command tidy to be used for HTML
    validation can be set by environment variable R_TIDYCMD.
  * Setting environment variable _R_CHECK_RD_VALIDATE_RD2HTML_ to a
    false value will override R CMD check --as-cran and turn off HTML
    validation.  This provides a way to circumvent a problematic
    tidy.
    The 2006 version that ships with macOS is always skipped.
  C-LEVEL FACILITIES:
  * The undocumented legacy declarations of Sint, Sfloat, SINT_MAX
    and SINT_MIN in header R.h are deprecated.
  BUG FIXES:
  * fisher.test(d) no longer segfaults for "large" d; fixing PR#18336
    by preventing/detecting an integer overflow reliably.
  * tar(., files=*) now produces correctly the warning about invalid
    uid or gid of files, fixing PR#18344, reported by Martin Morgan.
  * tk_choose.files() with multi = FALSE misbehaved on paths
    containing spaces (PR#18334) (regression introduced in R 4.0.0).
  * sort(x, partial = ind, *) now works correctly notably for the
    non-default na.last = FALSE or TRUE, fixing PR#18335 reported by
    James Edwards.
  * Environment variable _R_CHECK_XREFS_REPOSITORIES_ is only used
    for checking .Rd cross-references in R CMD check (as documented)
    and not for other uses looking for a CRAN mirror.
  * The search for a CRAN mirror when checking packages now uses
    getOption("repos") if that specifies a CRAN mirror, even when it
    does not also specify all three Bioconductor repositories (as was
    previously required).
  * The HTML code generated by tools::Rd2HTML() has been improved to
    pass tidy 5.8.0.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1667217600">- CHANGES IN R 4.2.2:
  NEW FEATURES:
  * tools::Rdiff(useDiff = TRUE) checks for the presence of an
    external diff command and switches to useDiff = FALSE if none is
    found.  This allows R CMD Rdiff to always work.
  * On Windows, environment variable R_LIBCURL_SSL_REVOKE_BEST_EFFORT
    can be used to switch to only 'best-effort' SSL certificate
    revocation checks with the default "libcurl" download method.
    This reduces security, but may be needed for downloads to work
    with MITM proxies (PR#18379).
  * (macOS) The run-time check for libraries from XQuartz for X11 and
    Tcl/Tk no longer uses otool from the Apple Developer Tools
    (PR#18400).
  * The LaTeX style for producing the PDF manuals, Rd.sty, now loads
    the standard amsmath, amsfonts and amssymb packages for greater
    coverage of math commands in the Rd \eqn and \deqn macros.  The
    \mathscr LaTeX command is also provided (via the mathrsfs
    package, if available, or the amsfonts bundle otherwise),
    fulfilling the wish of PR#18398.
  * (Windows) The default format of readClipboard() and
    writeClipboard() has been changed to 13 (CF_UNICODETEXT).
  INSTALLATION on a UNIX-ALIKE:
  * The PDF manuals (if built) can be compacted by the new target
    make compact-pdf (at the top level or in directory doc/manual).
  * There is now configure support for LLVM clang 15 on Linux, which
    defaults to position-independent (PIE) executables whereas
    gfortran does not.
  * Many small changes to ease compilation (and suppress warnings)
    with LLVM clang 15.
  BUG FIXES:
  * Rscript -e would fail if stdin were closed (Reported by Henrik
    Bengtsson.)
  * qt(*, log.p=TRUE) in outer tails no longer produces NaN in its
    final steps, thus fixing PR#18360.
  * tools::Rd2latex() now escapes hashes and ampersands when writing
    URLs, fixing LaTeX errors with such URLs in \tabular.
  * When isGeneric(f, fdef=*) is used with mismatching names, the
    warning is better understandable; reported (with fix) in PR#18370
    by Gabe Becker.
  * poly(x, n) now works again (and is now documented) when x is a
    "Date" or "POSIXct" object, or of another class while fulfilling
    mode(x) == "numeric".  This also enables poly(x, *, raw=TRUE) for
    such variables.  Reported by Michael Chirico to R-devel.
  * write.table(), write.csv() and write.csv2() restore their
    numerical precision (internal equivalent of digits = 15) after an
    interrupt (PR#18384).
  * One can now read also byte FF from a clipboard connection
    (PR#18385).
  * source("") and source(character()) now give more helpful error
    messages.
  * R CMD check --as-cran set _R_CHECK_TIMINGS_ too late to have the
    intended effect.
  * as.POSIXlt(x) now also works with very large dates x, fixing
    PR#18401 reported by Hannes M"uhleisen.
  * Files can now be extracted even from very large zip archives
    (PR#18390, thanks to Martin Jakt).
  * Non-finite objects of class "POSIXlt" are now correctly coerced
    to classes "Date" and "POSIXct"; following up on the extension to
    format() them correctly.
  * Added methods for is.finite(), is.infinite() and is.nan() for
    "POSIXlt" date-time objects.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1678881600">- CHANGES IN R 4.2.3:
  C-LEVEL FACILITIES:
  * The definition of DL_FUNC in R_ext/Rdynload.h has been changed to
    be fully C-compliant.  This means that functions loaded _via_ for
    example R_GetCCallable need to be cast to an appropriate type if
    they have any arguments.
  * .Machine has a new element sizeof.time_t to identify old systems
    with a 32-bit type and hence a limited range of date-times (and
    limited support for dates millions of years from present).
  PACKAGE INSTALLATION:
  * (Windows) The default C++ standard had accidentally been left at
    C++11 when it was changed to C++14 on Unix.
  BUG FIXES:
  * As "POSIXlt" objects may be "partially filled" and their list
    components meant to be recycled, length() now is the length of
    the longest component.
  * as.POSIXlt.Date() could underflow for dates in the far past (more
    than half a million years BCE).
  * as.Date.POSIXlt(x) would return "1970-01-01" instead of NA in R
    4.2.2, e.g., for
    x &lt;- as.POSIXlt(c("2019-01-30","2001-1-1"))
    x$mon &lt;- c(0L, NA); as.Date(x)
  * R CMD check failed to apply enabled _R_CHECK_SUGGESTS_ONLY_ to
    examples and vignettes (regression in R 4.2.0).
  * R CMD check did not re-build vignettes in separate processes by
    default (regression in R 4.2.0).
  * Running examples from HTML documentation now restores previous
    knitr settings and options (PR#18420).
  * Quartz: fonts are now located using Core Graphics API instead of
    deprecated ATS which is no longer supported in the macOS 13 SDK
    (PR#18426).  This also addresses an issue where the currently
    used font in the Quartz device context was not correctly
    retained.
  * (Windows) Math symbols in text drawing functions are again
    rendered correctly (PR#18440).  This fixes a regression in R
    4.2.1 caused by a fix in PR#18382 which uncovered an issue in
    GraphApp due to which the symbol charset was not used with TT
    Symbol font face.
  * (Windows) Installing a package with a src/Makefile.{win,ucrt}
    file includes ~/.R/Makevars.win64 in the search for user
    makevars, as documented in "R Installation and Administration"
    and done for packages with a src/Makevars.{win,ucrt} file.
  * format(&lt;POSIXlt_w/_unbalanced_sec&gt;, "....%OS&lt;n&gt;") with n &gt; 0 no
    longer accidentally uses the unbalanced seconds, thanks to
    Suharto Anggono's report (including patch) in PR#18448.
  * solve.default(a, b) works around issues with some versions of
    LAPACK when a contains NA or NaN values.
  * When UseMethod() cannot dispatch, it no longer segfaults
    producing the error message in case of a long class(), thanks to
    Joris Vankerschaver's report (including patch) in PR#18447.
  * When example(foo, ..) produces graphics on an interactive device
    it needs to open itself, it now leaves devAskNewPage() unchanged
    even when it was FALSE, thus fixing a 14 years old '&lt;FIXME&gt;'.
  * packageDescription() again catches errors from encoding
    conversions. This also fixes broken packageVersion() in C locale
    on systems where iconv does not support transliteration.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1681128000">- add patch to build with libcurl &gt;= 8</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1682078400">- CHANGES IN R 4.3.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Calling &amp;&amp; or || with LHS or (if evaluated) RHS of length greater
    than one is now always an error, with a report of the form
    'length = 4' in coercion to 'logical(1)'
    Environment variable _R_CHECK_LENGTH_1_LOGIC2_ no longer has any
    effect.
  NEW FEATURES:
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.10.1.  (This caused some platform-dependent
    changes to package check output.)  And then to the sources from
    LAPACK version 3.11.0 (with changes only to double complex
    subroutines).
  * The included LAPACK sources have been updated to include the four
    Fortran 90 routines rather than their Fortran 77 predecessors.
    This may give some different signs in SVDs or
    eigendecompositions..  (This completes the transition to LAPACK
    3.10.x begun in R 4.2.0.)
  * The LAPACK sources have been updated to version 3.11.0.  (No new
    subroutines have been added, so this almost entirely bug fixes:
    Those fixes do affect some computations with NaNs, including R's
    NA.)
  * The parser now signals _classed_ errors, notably in case of the
    pipe operator |&gt;.  The error object and message now give line and
    column numbers, mostly as proposed and provided by Duncan Murdoch
    in PR#18328.
  * toeplitz() is now generalized for asymmetric cases, with a
    toeplitz2() variant.
  * xy.coords() and xyz.coords() and consequently, e.g., plot(x,y,
    log = "y") now signal a _classed_ warning about negative values
    of y (where log(.) is NA).  Such a warning can be specifically
    suppressed or caught otherwise.
  * Regular expression functions now check more thoroughly whether
    their inputs are valid strings (in their encoding, e.g. in
    UTF-8).
  * The performance of grep(), sub(), gsub() and strsplit() has been
    improved, particularly with perl = TRUE and fixed = TRUE.  Use of
    useBytes = TRUE for performance reasons should no longer be
    needed and is discouraged: it may lead to incorrect results.
  * apropos() gains an argument dot_internals which is used by the
    completion (help(rcompgen)) engine to also see base internals
    such as .POSIXct().
  * Support in tools::Rdiff() for comparing uncompressed PDF files is
    further reduced - see its help page.
  * qqplot(x, y, ...) gains conf.level and conf.args arguments for
    computing and plotting a confidence band for the treatment
    function transforming the distribution of x into the distribution
    of y (Switzer, 1976, _Biometrika_). Contributed by Torsten
    Hothorn.
  * Performance of package_dependencies() has been improved for cases
    when the number of dependencies is large.
  * Strings newly created by gsub(), sub() and strsplit(), when any
    of the inputs is marked as "bytes", are also marked as "bytes".
    This reduces the risk of creating invalid strings and accidental
    substitution of bytes deemed invalid.
  * Support for readLines(encoding = "bytes") has been added to allow
    processing special text files byte-by-byte, without creating
    invalid strings.
  * iconv(from = "") now takes into account any declared encoding of
    the input elements and uses it in preference to the native
    encoding.  This reduces the risk of accidental creation of
    invalid strings, particularly when different elements of the
    input have different encoding (including "bytes").
  * Package repositories in getOption("repos") are now initialized
    from the repositories file when utils is loaded (if not already
    set, e.g., in .Rprofile).  (From a report and patch proposal by
    Gabriel Becker in PR#18405.)
  * compactPDF() gets a verbose option.
  * type.convert() and hence read.table() get new option tryLogical =
    TRUE with back compatible default.  When set to false, converts
    "F" or "T" columns to character.
  * Added new unit prefixes "R" and "Q" for abbreviating
    (unrealistically large) sizes beyond 10^{27} in standard = "SI",
    thanks to Henrik Bengtsson's PR#18435.
  * as.data.frame()'s default method now also works fine with atomic
    objects inheriting from classes such as "roman", "octmode" and
    "hexmode", such fulfilling the wish of PR#18421, by Benjamin
    Feakins.
  * The as.data.frame.vector() utility now errors for wrong-length
    row.names.  It warned for almost six years, with "Will be an
    error!".
  * sessionInfo() now also contains La_version() and reports codepage
    and timezone when relevant, in both print() and toLatex() methods
    which also get new option tzone for displaying timezone
    information when locale = FALSE.
  * New function R_compiled_by() reports the C and Fortran compilers
    used to build R, if known.
  * predict(&lt;lm&gt;, newdata = *) no longer unnecessarily creates an
    offset of all 0s.
  * solve() for complex inputs now uses argument tol and by default
    checks for 'computational singularity' (as it long has done for
    numeric inputs).
  * predict(&lt;rank-deficient lm&gt;, newdata=*) now obeys a new argument
    rankdeficient, with new default "warnif", warning only if there
    are non-estimable cases in newdata.  Other options include
    rankdeficient = "NA", predicting NA for non-estimable newdata
    cases.  This addresses PR#15072 by Russ Lenth and is based on his
    original proposal and discussions in PR#16158 also by David Firth
    and Elin Waring.  Still somewhat experimental.
  * Rgui console implementation now works better with the NVDA screen
    reader when the full blinking cursor is selected.  The underlying
    improvements in cursor handling may help also other screen
    readers on Windows.
  * The drop-field control in GraphApp can now be left with the TAB
    key and all controls can be navigated in the reverse order using
    the Shift+TAB key, improving accessibility of the Rgui
    configuration editor.
  * qnorm(&lt;very large negative&gt;, log.p=TRUE) is now fully accurate
    (instead of to "only" minimally five digits).
  * demo(error.catching) now also shows off withWarnings() and
    tryCatchWEMs().
  * As an experimental feature the placeholder _ can now also be used
    in the rhs of a forward pipe |&gt; expression as the first argument
    in an extraction call, such as _$coef. More generally, it can be
    used as the head of a chain of extractions, such as _$coef[[2]].
  * Spaces in the environment variable used to choose the R session's
    temporary directory (TMPDIR, TMP and TEMP are tried in turn) are
    now fatal.  (On Windows the 'short path' version of the path is
    tried and used if that does not contain a space.)
  * all.equal.numeric() gets a new optional switch giveErr to return
    the numeric error as attribute.  Relatedly,
    stopifnot(all.equal&lt;some&gt;(a, b, ..)) is as "smart" now, as
    stopifnot(all.equal(....)) has been already, thus allowing
    customized all.equal&lt;Some&gt;() wrappers.
  * R on Windows is now able to work with path names longer than 260
    characters when these are enabled in the system (requires at
    least Windows 10 version 1607).  Packages should be updated to
    work with long paths as well, instead of assuming PATH_MAX to be
    the maximum length.  Custom front-ends and applications embedding
    R need to update their manifests if they wish to allow this
    feature.  See
    &lt;https://blog.r-project.org/2023/03/07/path-length-limit-on-windows&gt;
    for more information.
  * 'Object not found' and 'Missing argument' errors now give a more
    accurate error context. Patch provided by Lionel Henry in
    PR#18241.
  * The @ operator is now an S3 generic. Based on contributions by
    Tomasz Kalinowski in PR#18482.
  * New generic chooseOpsMethod() provides a mechanism for objects to
    resolve cases where two suitable methods are found for an Ops
    Group Generic. This supports experimenting with alternative
    object systems. Based on contributions by Tomasz Kalinowski in
    PR#18484.
  * inherits(x, what) now accepts values other than a simple
    character vector for argument what. A new generic, nameOfClass(),
    is called to resolve the class name from what. This supports
    experimenting with alternative object systems. Based on
    contributions by Tomasz Kalinowski in PR#18485.
  * Detection of BLAS/LAPACK in use (sessionInfo()) with FlexiBLAS
    now reports the current backend.
  * The "data.frame" method for subset() now warns about extraneous
    arguments, typically catching the use of = instead of == in the
    subset expression.
  * Calling a:b when numeric a or b is longer than one may now be
    made into an error by setting environment variable
    _R_CHECK_LENGTH_COLON_ to a true value, along the proposal in
    PR#18419 by Henrik Bengtsson.
  * density(x, weights = *) now warns if automatic bandwidth
    selection happens without using weights; new optional warnWbw may
    suppress the warning.  Prompted by Christoph Dalitz' PR#18490 and
    its discussants.
  * rm(list = *) is faster and more readable thanks to Kevin Ushey's
    PR#18492.
  * The plot.lm() function no longer produces a normal Q-Q plot for
    GLMs. Instead it plots a half-normal Q-Q plot of the absolute
    value of the standardized deviance residuals.
  * The print() method for class "summary.glm" no longer shows
    summary statistics for the deviance residuals by default.  Its
    optional argument show.residuals can be used to show them if
    required.
  * The tapply() function now accepts a data frame as its X argument,
    and allows INDEX to be a formula in that case. by.data.frame()
    similarly allows INDICES to be a formula.
  * The performance of df[j] &lt;- value (including for missing j) and
    write.table(df) has been improved for data frames df with a large
    number of columns.  (Thanks to Gabriel Becker's PR#18500,
    PR#18503 and discussants, prompted by a report from Toby Dylan
    Hocking on the R-devel mailing list.)
  * The matrix multiply operator %*% is now an S3 generic, belonging
    to new group generic matrixOps.  From Tomasz Kalinowski's
    contribution in PR#18483.
  * New function array2DF() to convert arrays to data frames,
    particularly useful for the list arrays created by tapply().
  DATES and TIMES:
  * On platforms where (non-UTC) datetimes before 1902 (or before
    1900 as with system functions on recent macOS) are guessed by
    extrapolating time zones from 1902-2037, there is a warning at
    the first use of extrapolation in a session.  (As all time zones
    post 2037 are extrapolation, we do not warn on those.)
  * (Platforms using --with-internal-tzone, including Windows and by
    default macOS). How years are printed in dates or date-times can
    be controlled by environment variable R_PAD_YEARS_BY_ZERO.  The
    default remains to pad to 4 digits by zeroes, but setting value
    no gives no padding (as used by default by glibc).
  * strftime() tries harder to determine the offset for the "%z"
    format, and succeeds on the mainstream R platforms.
  * strftime() has a limit of 2048 bytes on the string produced -
    attempting to exceed this is an error.  (Previously it silently
    truncated at 255 bytes.)
  * sessionInfo() records (and by default prints) the system time
    zone as part of the locale information.  Also, the source
    (system/internal) of the date-time conversion and printing
    functions.
  * Objects of class "POSIXlt" created in this version of R always
    have 11 components: component zone is always set, and component
    gmtoff is set for times in UTC and usually set on the (almost
    all) platforms which have C-level support, otherwise is NA.
  * There are comprehensive validity checks on the structure of
    objects of class "POSIXlt" when converting (including formatting
    and printing).  (This avoids mis-conversions of hand-crafted
    objects.)
  * There is some support for using the native date-time routines on
    macOS: this is only viable on recent versions (e.g. 12.6 and 13)
    and does get wrong some historical changes (before 1900, during
    WWII).  Use of --with-internal-tzone remains the default.
  * as.POSIXct(&lt;numeric&gt;) and as.POSIXlt(.) (without specifying
    origin) now work.  So does as.Date(&lt;numeric&gt;).
  * as.Date.POSIXct(., tz) now treats several tz values, notably
    "GMT" as equivalent to "UTC", proposed and improved by Michael
    Chirico and Joshua Ulrich in PR#17674.
  * Experimental balancePOSIXlt() utility allows using "ragged" and
    or out-of-range "POSIXlt" objects more correctly, e.g., in
    subsetting and subassignments.  Such objects are now documented.
    More experimentally, a "POSIXlt" object may have an attribute
    "balanced" indicating if it is known to be filled or fully
    balanced.
  * Functions axis.Date() and axis.POSIXct() are rewritten to gain
    better default tick locations and better default formats by using
    prettyDate(). Thanks to Swetlana Herbrandt.
  * The mapping of Windows' names for time zones to IANA's 'Olson'
    names has been updated.  When ICU is available (it is by
    default), it is used to get a mapping for the current region set
    in Windows.  This can be overridden by setting environment
    variable TZ to the desired Olson name - see OlsonNames() for
    those currently available.
  GRAPHICS:
  * The graphics engine version, R_GE_version, has been bumped to 16
    and so packages that provide graphics devices should be
    reinstalled.
  * The grDevices and grid packages have new functions for rendering
    typeset glyphs, primarily: grDevices::glyphInfo() and
    grid::grid.glyph().
    Rendering of typeset glyphs is only supported so far on the
    Cairo-based graphics devices and on the pdf() and quartz()
    devices.
  * The defined behaviour for "clear" and "source" compositing
    operators (via grid::grid.group()) has been changed (to align
    better with simple interpretation of original Porter-Duff
    definitions).
  * Support for gradients, patterns, clipping paths, masks, groups,
    compositing operators, and affine transformations has been added
    to the quartz() device.
  INSTALLATION on a UNIX-ALIKE:
  * A system installation of generic LAPACK 3.10.0 or later will be
    preferred to the version in the R sources.
    configure option --with-lapack=no (equivalently --without-lapack)
    forces compilation of the internal LAPACK sources.
    If --with-lapack is not specified, a system liblapack is looked
    for and used if it reports version 3.10.0 or later and does not
    contain BLAS routines.
    Packages using LAPACK will need to be reinstalled if this changes
    to using an external library.
  * On aarch64 Linux platforms using GCC, configure now defaults to
  - fPIC (instead of -fpic), as desired in PR#18326.
  * configure now checks conversion of datetimes between POSIXlt and
    POSIXct around year 2020.  Failure (which has been seen on
    platforms missing tzdata) is fatal.
  * If configure option --with-valgrind-instrumentation is given
    value 1 or 2, option --with-system-valgrind-headers is now the
    default and ignored (with a warning).  It is highly recommended
    that the system headers are installed alongside valgrind: they
    are part of its packaging on some Linux distributions and
    packaged separately (e.g. in the valgrind-devel RPM) on others.
    configure will give a warning if they are not found.
    The system headers will be required in a future release of R to
    build with valgrind instrumentation.
  * libcurl 8.x is now accepted by configure: despite a change in
    major version number it changes neither API nor ABI.
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools43, an update of the Rtools42 toolchain.  It is
    based on gcc 12 and newer versions of MinGW-W64, binutils and
    libraries.  At this time R-devel can still be built using
    Rtools42 without changes, but when R-devel is installed via the
    installer, it will by default look for Rtools43.
  * Old make targets rsync-extsoft and 32-bit ones that are no longer
    needed have been removed.
  * Default builds (including for packages) no longer select C99.
    Thus the C standard used is the default for the compiler, which
    for the toolchain in Rtools43 is C17.  (This is consistent with
    Unix builds.)
  PACKAGE INSTALLATION:
  * The default C++ standard has been changed to C++17 where
    available (which it is on all currently checked platforms): if
    not C++14 or C++11 is used if available otherwise C++ is not
    supported.
  * USE_FC_LEN_T is the default: this uses the correct
    (compiler-dependent) prototypes for Fortran BLAS/LAPACK routines
    called from C/C++, and requires adjustment of many such calls -
    see 'Writing R Extensions' SS6.6.1.
  * There is initial support for C++23 as several compilers are now
    supporting -std=c++23 or -std=c++2b or similar.  As for C++20,
    there no additional configure checks for C++23 features beyond a
    check that the compiler reports a __cplusplus value greater than
    that in the C++20 standard.  C++ feature tests should be used.
  * There is support for a package to indicate the version of the C
    standard which should be used to compile it, and for the
    installing user to specify this.  In most cases R defaults to the
    C compiler's default standard which is C17 (a `bug-fix' of C11) -
    earlier versions of R or compilers may have defaulted to C99.
    Current options are:
    USE_C17 Use a standard that is at most C17.  The intention is to
    allow legacy packages to still be installed when later C
    standards become the default, including packages using new
    keywords as identifiers or with K&amp;R-style function
    declarations.  This will use C17 if available, falling back
    to C11.
    USE_C90 Use the C90 (aka C89) standard.  (As that standard did
    not require compilers to identify that version, all we can
    verify is that the compiler does not claim to be using a
    later standard.  It may accept C99 features - for example
    clang accepts // to make comments.)
    USE_C99 Use the C99 standard. This should be rarely needed - it
    avoids the few new features of C11/C17 which can be useful if
    a package assumes them if C17 is specified and they are not
    implemented.
    USE_C23 Use C23 (or in future, later).  Compiler/library support
    for C23 is still being implemented, but LLVM clang from
    15.0.0 and the upcoming GCC 13 have quite extensive support.
    These can be specified as part of the SystemRequirements field in
    the package's DESCRIPTION file or _via_ options --use-C17 and so
    on of R CMD INSTALL and R CMD SHLIB.
    For further details see "Writing R Extensions" SS1.2.5.
  * (Windows) A src/Makefile.ucrt or src/Makefile.win file is now
    included after R_HOME/etcR_ARCH/Makeconf and so no longer needs
    to include that file itself.  Installation of a package with such
    a file now uses a site Makevars file in the same way as a package
    with a src/Makevars.win file would.
  * configure is now passed crucial variables such as CC and CFLAGS
    in its environment, as many packages were not setting them (as
    documented in 'Writing R Extensions' SS1.2).
    This has most effect where configure is used to compile parts of
    the package - most often by cmake or libtool which obfuscate the
    actual compile commands used.
    Also used for configure.win and configure.ucrt on Windows.
  FORTRAN FLAGS:
  * The flag -fno-optimize-sibling-calls is no longer forced for
    gfortran 7 and later.  It should no longer be needed now using
    'hidden' character-length arguments when calling BLAS/LAPACK
    routines from C/C++ is the default even for packages.  (Unless
    perhaps packages call Fortran code from C/C++ without using R's
    headers and without allowing for these arguments.)
  C-LEVEL FACILITIES:
  * The deprecated S-compatibility macros DOUBLE_* in
    R_ext/Constants.h (included by R.h) have been removed.
  * The deprecated legacy typedefs of Sint and Sfloat in header R.h
    are no longer defined, and that header no longer includes header
    limits.h from C nor climits from C++.
  * New macro CAD5R() is provided in Rinternals.h and used in a few
    places in the R sources.
  * ALTREP now supports VECSXP vectors. Contributed by Gabor Csardi
    in PR#17620.
  * The Rcomplex definition (in header R_ext/Complex.h) has been
    extended to prevent possible mis-compilation when interfacing
    with Fortran (PR#18430).  The new definition causes compiler
    warnings with static initializers such as {1, 2}, which can be
    changed to {.r=1, .i=2}.
    Using the new definition from C++ depends on compiler extensions
    supporting C features that have not been incorporated into the
    C++ standards but are available in g++ and clang++: this may
    result in C++ compiler warnings but these have been worked around
    for recent versions of common compilers (GCC, Apple/LLVM clang,
    Intel).
    It is intended to change the inclusion of header R_ext/Complex.h
    by other R headers, so C/C++ code files which make use of
    Rcomplex should include that header explicitly.
  UTILITIES:
  * R CMD check does more checking of package .Rd files, warning
    about invalid email addresses and (some) invalid URIs and noting
    empty \item labels in description lists.
  * R CMD check now also reports problems when reading package news
    in md (file NEWS.md) and (optionally) plain text (file NEWS)
    formats.
  * _R_CHECK_TIMINGS_ defaults to a value from the environment even
    for R CMD check --as-cran; this allows for exceptionally fast or
    slow platforms.
    It now applies to checking PDF and HTML versions of the manuals,
    and 'checking CRAN incoming feasibility'.
  * R CMD check can optionally (but included in --as-cran) check
    whether HTML math rendering _via_ KaTeX works for the package .Rd
    files.
  * Non-interactive debugger invocations can be trapped by setting
    the environment variable _R_CHECK_BROWSER_NONINTERACTIVE_ to a
    true value.  This is enabled by R CMD check --as-cran to detect
    the use of leftover browser() statements in the package.
  * The use of sprintf and vsprintf from C/C++ has been deprecated in
    macOS 13 and is a known security risk.  R CMD check now reports
    (on all platforms) if their use is found in compiled code:
    replace by snprintf or vsnprintf respectively. [*NB:* whether
    such calls get compiled into the package is platform-dependent.]
  * Where recorded at installation, R CMD check reports the C and
    Fortran compilers used to build R.
    It reports the OS in use (if known, as given by osVersion) as
    well as that R was built for.
    It notes if a C++ standard was specified which is older than the
    current default: many packages have used C++11 to mean 'not
    C++98' - as C++11 is the minimum supported since R 4.0.0, that
    specification can probably be removed.
  * R CMD INSTALL reports the compilers (and on macOS, the SDK) used,
    and this is copied to the output of R CMD check.
    Where a C++ standard is specified, it is reported.
  * R CMD check's 'checking compilation flags in Makevars' has been
    relaxed to accept the use of flags such as -std=f2008 in
    PKG_FFLAGS.
  * tools::buildVignettes() has a new argument skip, which is used by
    R CMD check to skip (and note) vignettes with unavailable
    \VignetteDepends (PR#18318).
  * New generic .AtNames() added to enable class-specific completions
    after @. The formerly internal function findMatches() is now
    exported, mainly for use in methods for .DollarNames() and
    .AtNames().
  DEPRECATED AND DEFUNCT:
  * default.stringsAsFactors() is defunct.
  * Calling as.data.frame.&lt;class&gt;() directly (for 12 atomic classes)
    is going to be formally deprecated, currently activated by
    setting the environment variable
    _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ to non-empty, which also
    happens in R CMD check --as-cran.
  BUG FIXES:
  * Hashed environments with sizes less than 5 can now grow.
    (Reported to R-devel by Duncan Garmonsway.)
  * as.character(&lt;Rd&gt;, deparse = TRUE) failed to re-escape curly
    braces in LaTeX-like text.  (Reported by Hadley Wickham in
    PR#18324.)
  * library() now passes its lib.loc argument when requiring Depends
    packages; reported (with fix) in PR#18331 by Mikael Jagan.
  * R CMD Stangle: improved message about 'Output' files.
  * head(x, n) and tail(x, n) now signal an error if n is not
    numeric, instead of incidentally "working" sometimes returning
    all of x.  Reported and discussed by Colin Fay, in PR#18357.
  * The "lm" method for summary() now gives the correct F-statistic
    when the model contains an offset.  Reported in PR#18008.
  * C() and `contrasts&lt;-`() now preserve factor level names when
    given a function object (as opposed a function name which did
    preserve names). Reported in PR#17616.
  * c(a = 1, 2)[[]] no longer matches 2 but rather signals a
    _classed_ error.  Reported and analysed by Davis Vaughan in
    PR#18367, a duplicate of PR#18004, by Jan Meis et al.  For
    consistency, NULL[[]] is also erroneous now.  x[[]] &lt;- v gives an
    error of the same class "MissingSubscriptError".
  * The relist() function of utils now supports NULL elements in the
    skeleton (PR#15854).
  * ordered(levels = *) (missing x) now works analogously to factor(,
    ordered=TRUE); reported (with fix) by Achim Zeileis in PR#18389.
  * User-defined Rd macro definitions can now span multiple lines,
    thanks to a patch from Duncan Murdoch. Previously, the Rd parser
    silently ignored everything after the first line.
  * Plain-text help (tools::Rd2txt()) now preserves an initial blank
    line for text following description list items.
  * tools::Rd2HTML() and tools::Rd2latex() no longer split \arguments
    and \value lists at Rd comments.
  * tools::Rd2latex() now correctly handles optional text outside
    \items of argument lists as well as bracketed text at the
    beginning of sections, e.g., \value{[NULL]}.
  * as.character(&lt;POSIXt&gt;) now behaves more in line with the methods
    for atomic vectors such as numbers, and is no longer influenced
    by options().  Ditto for as.character(&lt;Date&gt;).  The
    as.character() method gets arguments digits and OutDec with
    defaults _not_ depending on options().  Use of as.character(*,
    format = .) now warns.
  * Similarly, the as.character.hexmode() and *.octmode() methods
    also behave as good citizen methods and back compatibility option
    keepStr = TRUE.
  * The as.POSIXlt(&lt;POSIXlt&gt;) and as.POSIXct(&lt;POSIXct&gt;) default
    methods now do obey their tz argument, also in this case.
  * as.POSIXlt(&lt;Date&gt;) now does apply a tz (time zone) argument, as
    does as.POSIXct(); partly suggested by Roland Fuss on the R-devel
    mailing list.
  * as.Date.POSIXlt(x) now also works when the list components are of
    unequal length, aka "partially filled" or "ragged".
  * expand.model.frame() looked up variables in the wrong environment
    when applied to models fitted without data.  Reported in
    PR#18414.
  * time() now (also) uses the ts.eps = getOption("ts.eps") argument
    and thus by default rounds values very close to the start (or
    end) of a year.  Based on a proposal by Andre"i V. Kostyrka on
    R-help.
  * Printing of a factanal() result with just one factor and sort =
    TRUE now works regularly, fixing PR#17863 by Timothy Bates,
    thanks to the 'R Contributors' working group.
  * Printing 0-length objects of class "factor", "roman", "hexmode",
    "octmode", "person", "bibentry", or "citation" now prints
    something better, one of which fixes PR#18422, reported by
    Benjamin Feakins.
  * Sys.timezone() queries timedatectl only if systemd is loaded;
    addressing a report by Jan Gorecki in PR#17421.
  * The formula method of cor.test() had scoping problems when
    environment(formula) was not the calling environment; reported
    with a patch proposal by Mao Kobayashi in PR#18439.
  * attach() of an environment with active bindings now preserves the
    active bindings.  Reported by Kevin Ushey in PR#18425.
  * BLAS detection now works also with system-provided libraries not
    available as regular files.  This fixes detection of the
    Accelerate framework on macOS since Big Sur.  Reported by David
    Novgorodsky.
  * download.file() gives a helpful error message in case of an
    invalid download.file.method option, thanks to Colin Fay's report
    in PR#18455.
  * Sporadic crashes of Rterm when using completion have been fixed.
  * Rprof() is now more reliable.  A livelock in thread
    initialization with too short sampling interval has been fixed on
    macOS.  A deadlock in using the C runtime has been fixed on
    Windows.  A potential deadlock has been prevented on Unix.
  * Cursor placement in Rgui now works even after a fixed-width font
    is selected.
  * Mandatory options (options()) are now set on startup so that
    saving and restoring them always works (PR#18372).
  * Package installation, R CMD INSTALL or install.packages(*), now
    parses each of the &lt;pkg&gt;/R/*.R files individually instead of
    first concatenating and then parse()ing the large resulting file.
    This allows parser or syntax errors to be diagnosed with correct
    file names and line numbers, thanks to Simon Dedman's report and
    Bill Dunlap's patch in PR#17859.
    This _does_ require syntactically self contained R source files
    now, fixing another inadvertent bug.
  * predict.lm(&lt;model with offset&gt;) now finds the offset in the
    correct environment, thanks to Andr'e Gillibert's report and patch
    in PR#18456.
  * getInitial(&lt;formula&gt;) now finds the selfStart model in the
    correct environment.  (Reported by Ivan Krylov in PR#18368.)
  * Fix for possible segfault when using recently-added graphics
    features, such as gradients, clipping paths, masks, and groups
    with pdf(file=NULL).
  * class(m) &lt;- class(m) no longer changes a matrix m by adding a
    class _attribute_.
  * packageDate(pkg) now only warns once if there is no pkg.
  * When ts() creates a multivariate time series, "mts", it also
    inherits from "array" now, and is.mts() is documented _and_
    stricter.
  * Rd2txt() now preserves line breaks of \verb Rd content and from
    duplicated \cr.  The former also fixes the rendering of verbatim
    output from Rd \Sexpr in plain-text help.
  * uniroot(f, interval) should no longer wrongly converge _outside_
    the interval in some cases where abs(f(x)) == Inf for an x at the
    interval boundary, thanks to posts by Ben Bolker and Serguei
    Sokol on R-devel.
  * Vectorized alpha handling in palette functions such as in gray(),
    rainbow(), or hcl.colors() works correctly now, thanks to Achim
    Zeileis' report and patch in PR#18476.
  * Formatting and print()ing of bibentry objects has dropped the
    deprecated citation.bibtex.max argument, such that the bibtex
    argument's default for print.bibentry() depends directly on the
    citation.bibtex.max option, whereas in format.bibentry() the
    option no longer applies.
  * Attempting to use a character string naming a foreign function
    entry point in a foreign function call in a package will now
    signal an error if the packages has called R_forceSymbols to
    specify that symbols must be used.
  * An error in table() could permanently set options(warn=2)
    promoting all subsequent warnings to errors.
  * The sigma() function gave misleading results for binary GLMs.  A
    new method for objects of class "glm" returns the square root of
    the estimate of the dispersion parameter using the same
    calculation as summary.glm().
  * bs() and ns() in the (typical) case of automatic knot
    construction, when some of the supposedly inner knots coincide
    with boundary knots, now moves them inside (with a warning),
    building on PR#18442 by Ben Bolker.
  * R CMD on Windows now skips the site profile with --no-site-file
    and --vanilla even when R_PROFILE is set (PR#18512, from Kevin
    Ushey).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1686916800">- CHANGES IN R 4.3.1:
  C-LEVEL FACILITIES:
  * The C-level API version of R's integrate(), Rdqags() in Applic.h,
    now returns the correct number of integrand evaluations neval,
    fixing PR#18515 reported and diagnosed by Stephen Wade.
  * The C prototypes for LAPACK calls dspgv and dtptrs in
    R_exts/Lapack.h had one too many and one too few character length
    arguments - but this has not caused any known issues. To get the
    corrected prototypes, include
    [#]include &lt;Rconfig.h&gt; // for PR18534fixed
    [#]ifdef PR18534fixed
    [#] define usePR18534fix 1
    [#]endif
    [#]include &lt;R_exts/Lapack.h&gt;
    in your C/C++ code (PR#18534).
  INSTALLATION:
  * Many of the checks of esoteric Internet operations and those
    using unreliable external sites have been moved to a new target
    that is not run by default and primarily intended for the core
    developers.  To run them use
    cd tests; make test-Internet-dev
  BUG FIXES:
  * .S3methods(), typically called from methods(), again marks
    methods from package base as visible.
    Also, the visibility of non-base methods is again determined by
    the method's presence in search().
  * tools::Rdiff() is now more robust against invalid strings, fixing
    installation tests on Windows without Rtools installed
    (PR#18530).
  * Fix (new) bug in hcl.colors(2, *), by Achim Zeileis (PR#18523).
  * head(., &lt;illegal&gt;) and tail(..) now produce more useful "Error in
    ...." error messages, fixing PR#18362.
  * Package code syntax on Windows is checked in UTF-8 when UTF-8 is
    the native encoding.
  * na.contiguous(x) now also returns the first run, when it is at
    the beginning and there is a later one of the same length;
    reported to R-devel, including a fix, by Georgi Boshnakov.
    Further, by default, it modifies only an existing attr(*,"tsp")
    but otherwise no longer sets one.
  * chol(&lt;not pos.def&gt;, pivot = &lt;T|F&gt;) now gives a correct error or
    warning message (depending on pivot), thanks to Mikael Jagan's
    (PR#18541).</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1699012800">- CHANGES IN R 4.3.2:
  NEW FEATURES:
  * The default initialization of the "repos" option from the
    repositories file at startup can be skipped by setting
    environment variable R_REPOSITORIES to NULL such that
    getOption("repos") is empty if not set elsewhere.
  * qr.X() is now an implicit S4 generic in methods.
  * iconv(to = "ASCII//TRANSLIT") is emulated using substitution on
    platforms which do not support it (notably Alpine Linux).  This
    should give a human-readable conversion in ASCII on all platforms
    (rather than NA_character_).
  * trans3d() gains options continuous and verbose addressing the
    problem of possible "wrap around" when projecting too long
    curves, as reported by Achim Zeileis in PR#18537.
  * tools::showNonASCII() has been rewritten to work better on macOS
    14 (which has a changed implementation of iconv()).
  * tiff(type = "quartz") (the default on macOS) now warns if
    compression is specified: it continues to be ignored.
  INSTALLATION on a UNIX-ALIKE:
  * There is some support for building with Intel's LLVM-based
    compilers on x86_64 Linux, such as (C) icx, (C++) ipcx and
    (Fortran) ifx from oneAPI 2023.x.y.
  * There is support for using LLVM's flang-new as the Fortran
    compiler from LLVM 16.0.x (preferably 17.0.0 or later).
  UTILITIES:
  * R CMD check reports the use of the Fortran 90 random number
    generator RANDOM_NUMBER() and the subroutines to initialize it.
    'Writing R Extensions' has example code to use R's RNGs from
    Fortran.
  BUG FIXES:
  * substr(x, n, L) &lt;- cc now works (more) correctly for multibyte
    UTF-8 strings x when L &gt; nchar(x), thanks to a report and patch
    by 'Architect 95'.
  * contrib.url(character()) now returns 0-length character() as
    documented, which also avoids spurious warnings from
    available.packages() et al. in the edge case of an empty vector
    of repository URLs.
  * readChar(., 4e8) no longer fails, thanks to Kodi Arfer's report
    (PR#18557).
  * lapply(&lt;list&gt;, as.data.frame) no longer warns falsely for some
    base vector components.
  * Communication between parent and child processes in the multicore
    part of parallel could fail on platforms that do not support an
    arbitrarily large payload in system functions read()/write() on
    pipes (seen on macOS where a restriction to INT_MAX bytes is
    documented, without doing a partial read unlike Linux). The
    payload is now split into 1Gb chunks to avoid that problem.
    (PR#18571)
  * qqplot(x,y, conf.level=.) gives better confidence bounds when
    length(x) != length(y), thanks to Alexander Ploner's report and
    patch proposal (PR#18557).
  * norm(&lt;0-length&gt;, "2") now gives zero instead of an error, as all
    the other norm types, thanks to Mikael Jagan's PR#18542.
  * Build-stage Rd macros \packageAuthor and \packageMaintainer now
    process Authors@R, fixing NA results when the package DESCRIPTION
    omits Author and Maintainer fields.
  * Formatting and printing complex numbers could give things like
    0.1683-0i because of rounding error: -0i is now replaced by +0i.
  * postscript() refused to accept a title comment containing the
    letter "W" (PR#18599).
  * isoreg(c(1,Inf)) signals an error instead of segfaulting, fixing
    PR#18603.
  * tiff(type = "Xlib") was only outputting the last page of
    multi-page plots.
  * tools::latexToUtf8() again knows about \~{n} and other letters
    with tilde, fixing a regression in R 4.3.0, and about \^{i} as an
    alternative to \^{\i} (similarly with other accents).
    Furthermore, LaTeX codes for accented I letters are now correctly
    converted, also fixing related mistakes in
    tools::encoded_text_to_latex().
  * tar(*, tar = "internal") no longer creates out-of-spec tar files
    in the very rare case of user or group names longer than 32
    bytes, fixing PR#17871 with thanks to Ivan Krylov.
  * When using the "internal" timezone datetime code, adding a
    fraction of a second no longer adds one second, fixing PR#16856
    from a patch by Ivan Krylov.
  * tools::checkRd() no longer produces spurious notes about
    "unnecessary braces" from multi-line Rd results of \Sexpr macros.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1709208000">- CHANGES IN R 4.3.3:
  NEW FEATURES:
  * iconv() now fixes up variant encoding names such as "utf8"
    case-insensitively.
  DEPRECATED AND DEFUNCT:
  * The legacy encoding = "MacRoman" is deprecated in pdf() and
    postscript(): support was incomplete in earlier versions of R.
  BUG FIXES:
  * Arguments are now properly forwarded to methods on S4 generics
    with ... in the middle of their formal arguments. This was broken
    for the case when a method introduced an argument but did not
    include ... in its own formals. Thanks to Herv'e Pag`es for the
    report PR#18538.
  * Some invalid file arguments to pictex(), postscript() and xfig()
    opened a file called NA rather than throw an error.  These
    included postscript(NULL) (which some people expected to work
    like pdf(NULL)).
  * Passing filename = NA to svg(), cairo_pdf(), cairo_ps() or the
    Cairo-based bitmap devices opened a file called NA: it now throws
    an error.
  * quartz(file = NA) opened a file called NA, including when used as
    a Quartz-based bitmap device.  It now gives an error.
  * rank(&lt;long vector&gt;) now works, fixing PR#18617, thanks to Ilia
    Kats.
  * seq.int() did not adequately check its length.out argument.
  * match(&lt;POSIXct&gt;, .) is correct again for differing time zones,
    ditto for "POSIXlt", fixing PR#18618 reported by Bastian Klein.
  * drop.terms(*, dropx = &lt;0-length&gt;) now works, fixing PR#18563 as
    proposed by Mikael Jagan.
  * drop.terms(*) keeps + offset(.) terms when it should, PR#18565,
    and drop.terms() no longer makes up a response, PR#18566, fixing
    both bugs thanks to Mikael Jagan.
  * getS3method("t", "test") no longer finds the t.test() function,
    fixing PR#18627.
  * pdf() and postscript() support for the documented Adobe encodings
    "Greek" and "Cyrilllic" was missing (although the corresponding
    Windows' codepages could be used).
  * Computations of glyph metric information for pdf() and
    postscript() did not take into account that transliteration could
    replace one character by two or more (only seen on macOS 14) and
    typically warned that the information was not known.
  * rank(x) no longer overflows during integer addition, when
    computing rank average for largish but not-yet long vector x,
    fixing PR#18630, thanks to Ilia Kats.
  * list.files() on Windows now returns also files with names longer
    that 260 bytes (the Windows limit is 260 characters).
    Previously, some file names particularly with 'East Asian'
    characters were omitted.
  * cov2cor(&lt;0 x 0&gt;) now works, fixing PR#18423 thanks to Mikael
    Jagan and Elin Waring.
  * cov2cor(&lt;negative diagonal&gt;) and similar now give one warning
    instead of two, with better wording, fixing PR#18424 thanks to
    Mikael Jagan.
  * tools:: startDynamicHelp() now ensures port is in proper range,
    fixing PR#18645.
  * pbeta(x, a,b) is correct now for x=0 or 1 in the boundary cases
    where a or b or both are 0, fixing PR#18672 thanks to Michael
    Fay.
  * pmatch(x, table) for large table, also called for data frame row
    selection, dfrm[nm, ], is now interruptible, fixing PR#18656.
  * predict(&lt;rank-deficient lm&gt;, newdata=*) fix computing of nbasis,
    see Russ Lenth's comment 29 in PR#16158.
  * Added a work-around for a bug in macOS 14.3.1 and higher which
    prevents R plots in the Quartz Cocoa device from updating on
    screen.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1713960000">- CHANGES IN R 4.4.0:
  SIGNIFICANT USER-VISIBLE CHANGES:
  * Startup banners, R --version, sessionInfo() and R CMD check no
    longer report (64-bit) as part of the platform as this is almost
    universal - the increasingly rare 32-bit platforms will still
    report (32-bit).
    On Windows, ditto for window titles.
  * is.atomic(NULL) now returns FALSE, as NULL is not an atomic
    vector.  Strict back-compatibility would replace is.atomic(foo)
    by (is.null(foo) || is.atomic(foo)) but should happen only
    sparingly.
  NEW FEATURES:
  * The confint() methods for "glm" and "nls" objects have been
    copied to the stats package.  Previously, they were stubs which
    called versions in package MASS. The MASS namespace is no longer
    loaded if you invoke (say) confint(glmfit).  Further, the "glm"
    method for profile() and the plot() and pairs() methods for class
    "profile" have been copied from MASS to stats.  (profile.nls()
    and plot.profile.nls() were already in stats.)
  * The confint() and profile methods for "glm" objects have gained a
    possibility to do profiling based on the Rao Score statistic in
    addition to the default Likelihood Ratio. This is controlled by a
    new test = argument.
  * The pairs() method for "profile" objects has been extended with a
    which = argument to allow plotting only a subset of the
    parameters.
  * The "glm" method for anova() computes test statistics and
    p-values by default, using a chi-squared test or an F test
    depending on whether the dispersion is fixed or free.  Test
    statistics can be suppressed by giving argument test a false
    logical value.
  * In setRepositories() the repositories can be set using their
    names via name = instead of index ind =.
  * methods() and .S3methods() gain a all.names option for the (rare)
    case where functions starting with a . should be included.
  * Serializations can now be interrupted (e.g., by Ctrl-C on a
    Unix-alike) if they take too long, e.g., from save.image(),
    thanks to suggestions by Ivan Krylov and others on R-devel.
  * New startup option --max-connections to set the maximum number of
    simultaneous connections for the session.  Defaults to 128 as
    before: allowed values up to 4096 (but resource limits may in
    practice restrict to smaller values).
  * R on Windows (since Windows 10 2004) now uses the new Segment
    Heap allocator. This may improve performance of some
    memory-intensive applications.
  * When R packages are built, typically by R CMD build &lt;pkg&gt;, the
    new --user=&lt;build_user&gt; option overrides the (internally
    determined) user name, currently Sys.info()["user"] or LOGNAME.
    This is a (modified) fulfillment of Will Landau's suggestion in
    PR#17530.
  * tools::testInstalledBasic() gets new optional arguments outDir
    and testSrcdir, e.g., allowing to use it in a &lt;builddir&gt; !=
    &lt;srcdir&gt; setup, and in standard "binary" Windows installation
  * if* a source tests/ folder is present.
  * range(&lt;DT_with_Inf&gt;, finite = TRUE) now work for objects of class
    "Date", "POSIXct", and "POSIXlt" with infinite entries,
    analogously to range.default(), as proposed by Davis Vaughan on
    R-devel.  Other range()-methods can make use of new function
    .rangeNum().
  * New .internalGenerics object complementing .S3PrimitiveGenerics,
    for documentation and low-level book-keeping.
  * grid() now invisibly returns the x- and y- coordinates at which
    the grid-lines were drawn.
  * norm(., type) now also works for complex matrices.
  * kappa(., exact = TRUE, norm = *) now works for all norms and also
    for complex matrices.  In symmetric / triangular cases, the new
    argument uplo = "U" | "L" allows the upper or lower triangular
    part to be specified.
  * memDecompress(type = "unknown") recognizes compression in the
    default 'zlib' format as used by memCompress(type = "gzip").
  * memCompress() and memDecompress() will use the libdeflate library
    (&lt;https://github.com/ebiggers/libdeflate&gt;) if installed.  This
    uses the same type of compression for type = "gzip" but is 1.5-2x
    faster than the system libz library on some common platforms: the
    speed-up may depend on the library version.
  * diff() for objects of class "Date", "POSIXct", and "POSIXlt"
    accepts a units argument passed via ....
  * Dynamic help now does a much better job of rendering package
    DESCRIPTION metadata.
  * Rprof() gains an event argument and support for elapsed (real)
    time profiling on Unix (PR#18076).
  * filled.contour() gains a key.border argument.
  * tools::update_pkg_po() gets arguments pot_make and mo_make for
    _not_ re-making the corresponding files, and additionally a
    verbose argument.
  * Hexadecimal string colour specifications are now accepted in
    short form, so, for example, we can use "#123", which is
    equivalent to "#112233".
    Thanks to MikeFC for the original idea and Ella Kaye, Malcolm
    Barrett, George Stagg, and Hanne Oberman for the patch.
  * Plain-text help shows \var markup by angle brackets.
  * The new experimental primitive function declare() is intended to
    eventually allow information about R code to be communicated to
    the interpreter, compiler, and code analysis tools. The syntax
    for declarations is still being developed.
  * Functions psmirnov(), qsmirnov() and rsmirnov() in package stats
    have had argument two.sided renamed to alternative, to take into
    account that the permutation distributions of the one-sided
    statistics can be different in the case of ties.  Consequence of
    PR#18582.
  * sort() is now an implicit S4 generic in methods.
  * Formatting and printing, format(z), print(z), of complex vectors
    z no longer zap relatively small real or imaginary parts to zero,
    fixing PR#16752.  This is an API change, as it was documented
    previously to round real and imaginary parts together on purpose,
    producing nicer looking output.  As mentioned, e.g. in the PR,
    this change is compatible with many other "R-like" programming
    environments.
    We have simplified the internal code and now basically format the
    real and imaginary parts independently of each other.
  * New experimental functions Tailcall() and Exec() to support
    writing stack-space-efficient recursive functions.
  * Where characters are attempted to be plotted by pdf(),
    postscript() and xfig() which are not in the selected 8-bit
    character set (most often Latin-1) and the R session is using a
    UTF-8 locale, the warning messages will show the UTF-8 character
    rather than its bytes and one dot will be substituted per
    character rather than per byte.  (Platforms whose iconv() does
    transliteration silently plot the transliteration.)
    In a UTF-8 locale some transliterations are now done with a
    warning (e.g., dashes and Unicode minus to hyphen, ligatures are
    expanded, permille (‰) is replaced by o/oo), although the OS may
    have got there first.  These are warnings as they will continue
    to be replaced by dots in earlier versions of R.
  * The matrix multiplication functions crossprod() and tcrossprod()
    are now also primitive and S3 generic, as %*% had become in R
    4.3.0.
  * source() and example() have a new optional argument catch.aborts
    which allows continued evaluation of the R code after an error.
  * The non-Quartz tiff() devices allow additional types of
    compression if supported by the platform's libtiff library.
  * The list of base and recommended package names is now provided by
    tools::standard_package_names().
  * cairo_pdf() and cairo_ps() default to onefile = TRUE to closer
    match pdf() and postscript().
  * New option catch.script.errors provides a documented way to catch
    errors and then continue in non-interactive use.
  * L %||% R newly in base is an expressive idiom for the phrases
    if(!is.null(L)) L else R or if(is.null(L)) R else L.
  * The return value from warnings() now always inherits from
    "warnings" as documented, now also in the case of no warnings
    where it previously returned NULL.
  * as.complex("1i") now returns 0 + 1i instead of NA with a warning.
  * z &lt;- c(NA, 1i) now keeps the imaginary part Im(z[1]) == 0, no
    longer coercing to NA_complex_.  Similarly, cumsum(z) correctly
    sums real and imaginary parts separately, i.e., without
    "crosstalk" in case of NAs.
  * On Alpine Linux iconv() now maps "latin2", "latin-2", "latin9"
    and "latin-9" to encoding names the OS knows about
    (case-insensitively).
  * iconv(sub = "Unicode") now always zero-pads to four (hex) digits,
    rather than to 4 or 8.  (This seems to have become the convention
    once Unicode restricted the number of Unicode points to 2^21 - 1
    and so will never need more than 6 digits.)
  * NCOL(NULL) now returns 0 instead of 1, for consistency with
    cbind().
  * The information for the Euro glyph missing from the Adobe .afm
    files for the Courier, Helvetica and Times families has been
    copied from their URW equivalents - this will improve vertical
    centring in the pdf() and postscript() devices.
  * The included BLAS sources have been updated to those shipped with
    LAPACK version 3.12.0.  The changes are almost entirely cosmetic.
  * The included LAPACK sources have been updated to version 3.12.0
    and some further double-complex routines added.
  * There are new font families for the 2014--5 URW 2.0 fonts (see
    ?pdf) which are included in recent versions of Ghostscript.
    These have font widths for most Greek glyphs and a few others
    which were missing from the original versions (whose font
    families remain available for reproducibility, although
    Ghostscript-based viewers will render using the 2.0 versions).
  * Improve the large-n efficiency of as.matrix(&lt;dist&gt;), thanks an R
    contributors effort, notably by Tim Taylor and Heather Turner,
    see PR#18660.
  * The default and numeric methods of all.equal() get a check.class
    option.
  * zapsmall() gets new optional arguments, function mFUN and min.d,
    for extra flexibility; fulfills a wish in PR#18199.  Also, it is
    now an implicit S4 generic in package methods.
  * The Rd filter for aspell() gains an ignore argument.
  * New generic function sort_by(), primarily useful for the
    data.frame method which can be used to sort rows of a data frame
    by one or more columns.
  * The icence headers for the RPC code in src/extra/xdr have been
    updated to use the GPL-compatible licence published by Oracle
    America in 2010.
  * New function pkg2HTML() in tools to create single-page HTML
    reference manuals for R packages.
  * The byte code evaluator now uses less C stack space for recursive
    calls to byte-compiled functions. It also makes more of an effort
    to avoid allocations for scalar return values.
  * New completion option backtick (disabled by default) allows
    non-syntactic completions to be wrapped in backquotes. This is
    currently only useful for Jupyter notebooks via the IRkernel
    package, and may cause problems for other backends.
  INSTALLATION:
  * The parser has been updated to work with bison 3.8.2, which is
    now used for the pre-generated parsers in gram.c, file.c, and
    gramRd.c. A few parser error messages have changed, which may
    affect code that relies on exact messages.
  INSTALLATION on a UNIX-ALIKE:
  * System valgrind headers are now required to use configure option
  - -with-valgrind-instrumentation with value 1 or 2.
  * configure will warn if it encounters a 32-bit build, as that is
    nowadays almost untested.
  * Environment variable R_SYSTEM_ABI is no longer used and so no
    longer recorded in etc/Renviron (it was not on Windows and was
    only ever used when preparing package tools).
  * If the libdeflate library and headers are available, libdeflate
    rather than libz is used to (de)compress R objects in lazy-load
    databases.  Typically tasks spend up to 5% of their time on such
    operations, although creating lazy-data databases is one of the
    exceptions.
    This can be suppressed if the library is available by the
    configure option --without-libdeflate-compression.
  * configure option --enable-lto=check has not worked reliably since
    2019 and has been removed.
  * The minimum autoconf requirement for a maintainer build has been
    increased to autoconf 2.71.
    It is intended to increase this to 2.72 for R 4.5.0: the
    distributed configure file was generated using 2.72.
  * The minimum version requirement for an external LAPACK has been
    reduced to 3.9.0.
  * No default C++ compiler is set if no C++17 compiler is detected:
    there is no longer an automatic fallback to C++14 or C++11.
    Compilers from the last five years should have sufficient
    support: for others macros CXX and CXXSTD can be set in file
    config.site to provide a fallback if needed.
    The Objective-C++ compiler now by default uses the standard
    selected by R for C++ (currently C++17) rather than the default
    standard for the C++ compiler (which on macOS is still C++98).
  INSTALLATION on macOS:
  * A new configure option --with-newAccelerate makes use of Apple's
    'new' BLAS / LAPACK interfaces in their Accelerate framework.
    Those interfaces are only available in macOS 13.3 or later, and
    building requires SDK 13.3 or later (from the Command Line Tools
    or Xcode 14.3 or later).
    By default the option uses new Accelerate for BLAS calls: to also
    use it for LAPACK use option --with-newAccelerate=lapack.  The
    later interfaces provide LAPACK 3.9.1 rather than 3.2.1: 3.9.1 is
    from 2021-04 and does not include the improved algorithms
    introduced in LAPACK 3.10.0 (including for BLAS calls).
  INSTALLATION on WINDOWS:
  * The makefiles and installer scripts for Windows have been
    tailored to Rtools44, an update of the Rtools43 toolchain.  It is
    based on GCC 13 and newer versions of MinGW-W64, binutils and
    libraries (targeting 64-bit Intel CPUs).  R-devel can no longer
    be built using Rtools43 without changes.
  * Rtools44 has experimental support for 64-bit ARM (aarch64) CPUs
    _via_ the LLVM 17 toolchain using lld, clang/flang-new and
    libc++.
  UTILITIES:
  * R CMD check notes when S4-style exports are used without
    declaring a strong dependence on package methods.
  * tools::checkRd() (used by R CMD check) detects more problems with
    \Sexpr-based dynamic content, including bad nesting of \Sexprs
    and invalid arguments.
  * tools::checkRd() now reports Rd titles and section names ending
    in a period; this is ignored by R CMD check unless environment
    variable _R_CHECK_RD_CHECKRD_MINLEVEL_ is set to -5 or smaller.
  * R CMD check now notes Rd files without an \alias, as long
    documented in 'Writing R Extensions' §1.3.1.  The check for a
    missing \description has been moved from tools::checkRd() to
    tools::checkRdContents().
  * R CMD check now visits inst/NEWS.Rd and OS-specific man
    subdirectories when checking Rd files.
  * tools::checkDocFiles() and tools::checkRdContents() now also
    check internal Rd files by default, but "specially" (ignoring
    missing documentation of arguments).
  * R CMD Rdiff gets option --useEx.
  * R CMD check now warns on non-portable uses of Fortran KIND such
    as INTEGER(KIND=4) and REAL(KIND=8).
    To see the failing lines set environment variable
    _R_CHECK_FORTRAN_KIND_DETAILS_ to a true value.
  * When checking Rd files, R CMD check now notes some of the "lost
    braces" that tools::checkRd() finds.  Typical problems are Rd
    macros missing the initial backslash (e.g., code{...}), in-text
    set notation (e.g., {1, 2}, where the braces need escaping), and
    \itemize lists with \describe-style entries of the form
    \item{label}{description}.
  * R CMD INSTALL (and hence check) will compile C++ code with
  - DR_NO_REMAP if environment variable _R_CXX_USE_NO_REMAP_ is set
    to a true value.  It is planned that this will in future become
    the default for compiling C++.
  * The new built-in Rd macro \dontdiff{} can be used to mark example
    code whose output should be ignored when comparing check output
    to reference output (tests/Examples/&lt;pkg&gt;-Ex.Rout.save).  The
    \dontdiff tag, like \donttest, is _not_ shown on the rendered
    help page, so provides a clean alternative to ##
    IGNORE_RDIFF_(BEGIN|END) comments.
  * R CMD build when there is no NAMESPACE, now uses the recommended
    exportPattern("^[^.]"), instead of exporting everything.
  * R CMD check now warns about non-ASCII characters in the NAMESPACE
    file (in addition to R files). Such packages are not portable and
    may fail to install on some platforms.
  C-LEVEL FACILITIES:
  * Headers R_ext/Applic.h and R-ext/Linpack.h used to include
    R_ext/BLAS.h although this was undocumented and unneeded by their
    documented entry points.  They no longer do so.
  * New function R_missing(), factored out from do_missing(), used to
    fix PR#18579.
  * SEXP type S4SXP has been renamed to OBJSXP to support
    experimenting with alternative object systems.  The S4SXP value
    can still be used in C code but is now deprecated.  Based on
    contributions from the R Consortium's Object-Oriented Programming
    Working Group.
  * New function pow1p(x,y) for accurate (1+x)^y.
  * mkCharLenCE was incorrectly documented to take a size_t length
    but was implemented with int (and character strings in R are
    limited to 2^31 - 1 bytes).
  DEPRECATED AND DEFUNCT:
  * data() no longer handles zipped data from long-defunct (since R
    2.13.0) --use-zip-data installations.
  * The legacy graphics devices pictex() and xfig() are now
    deprecated.  They do not support recent graphics enhancements and
    their font handling is rudimentary. The intention is to retain
    them for historical interest as long as they remain somewhat
    functional.
  * Support for encoding = "MacRoman" has been removed from the pdf()
    and postscript() devices - this was a legacy encoding supporting
    classic macOS up to 2001 and no longer has universal libiconv
    support.
  * is.R() is deprecated as no other S dialect is known to be in use
    (and this could only identify historical dialects, not future
    ones).
    Further information on calls can be obtained by setting the
    environment variable _R_DEPRECATED_IS_R_ to error which turns the
    deprecation warning into an error and so by default gives a
    traceback.  (This is done by R CMD check --as-cran.)
  * UseMethod() no longer forwards local variables assigned in the
    generic function into method call environments before evaluating
    the method body. This makes method calls behave more like
    standard function calls and makes method code easier to analyze
    correctly.
  * The twelve as.data.frame.&lt;class&gt;() methods which were deprecated
    only via _R_CHECK_AS_DATA_FRAME_EXPLICIT_METHOD_ and in R CMD
    check --as-cran are formally deprecated now in favour of calling
    as.data.frame() or as.data.frame.vector().  The deprecation
    "check" now works also when as.data.frame() is S4 generic thanks
    to Ivan Krylov.
  * The default method for the directional comparison operators &lt;, &gt;,
    &lt;=, and &gt;= now signals an error when one of the operands is a
    language object, i.e. a symbol or a call.
  * For terms.formula(), deprecate abb and neg.out arguments
    _formally_ in addition to just documenting it.
  BUG FIXES:
  * The methods package is more robust to not being attached to the
    search path.  More work needs to be done.
  * pairwise.t.test() misbehaved when subgroups had 0 DF for
    variance, even with pool.sd = TRUE.  (PR#18594 by Jack Berry).
  * Probability distribution functions [dpq]&lt;distrib&gt;(x, *), but also
    bessel[IKJY](x, .) now consistently preserve attributes(x) when
    length(x) == 0, e.g., for a 2 x 0 matrix, thanks to Karolis
    Koncevičius' report PR#18509.
  * Group "Summary" computations such as sum(1:3, 4, na.rm = 5, NA,
    7, na.rm = LL) now give an error instead of either 17 or NN for
    LL true or false, as proposed by Ivan Krylov on the R-devel
    mailing list.  (This also means it is now an error to specify
    na.rm more than once.)
  * as.complex(x) now returns complex(real = x, imaginary = 0) for
    _all_ numerical and logical x, notably also for NA or
    NA_integer_.
  * Directories are now omitted by file.copy(, recursive = FALSE) and
    in file.append() (PR#17337).
  * gsub() and sub() are now more robust to integer overflow when
    reporting errors caused by too large input strings (PR#18346).
  * Top-level handlers are now more robust to attempts to remove a
    handler whilst handlers are running (PR#18508).
  * The handling of Alt+F4 in dialogs created on Windows using
    GraphApp has been fixed (PR#13870).
  * density() more consistently computes grid values for the
    FFT-based convolution, following Robert Schlicht's analysis and
    proposal in PR#18337, correcting density values typically by a
    factor of about 0.999.  Argument old.coords = TRUE provides back
    compatibility.
  * palette.colors() gains a name argument that defaults to FALSE
    controlling whether the vector of colours that is returned has
    names (where possible).  PR#18529.
  * tools::xgettext() no longer extracts the (non-translatable) class
    names from warningCondition and errorCondition calls.
  * S3method(&lt;gen&gt;, &lt;class&gt;, &lt;func&gt;) in the NAMESPACE file now works
    (again) when &lt;func&gt; is visible from the namespace, e.g.,
    imported, or in base.
  * getParseData(f) now also works for a function defined in the
    first of several &lt;pkg&gt;/R/*.R source files, thanks to Kirill
    Müller's report and Duncan Murdoch's patch in PR#16756.
  * Rd \Sexpr macros with nested #ifdef conditionals were not
    processed.
  * A non-blocking connection with non-default encoding (such as a
    socket) now correctly returns from readLines() after new data has
    arrived also when its EOF had been reached previously.  Thanks to
    Peter Meilstrup's report on R-devel and Ivan Krylov's report and
    patch proposal in PR#18555.
  * tools::checkRdContents() failed to detect empty argument
    descriptions when they spanned multiple lines, including those
    generated by prompt().  These cases are now noted by R CMD check.
  * Plain-text help no longer outputs spurious colons in the
    arguments list (for multi-line \item labels in the Rd source).
  * kappa() and rcond() work correctly in more cases; kappa(., norm =
    "2") now warns that it computes the 1-norm with (default) exact =
    FALSE; prompted by Mikael Jagan's quite comprehensive PR#18543.
  * Rd skeletons generated by prompt() or promptData() now use a
    dummy title (so R CMD build works).  tools::checkRdContents() has
    been updated to detect such template leftovers, including from
    promptPackage().
  * When S4 method dispatch fails because no method was found, the
    error message now includes the signature argument names; thanks
    to Michael Chirico's proposal on the R-devel list.
  * withAutoprint({ .. }) now preserves srcrefs previously lost,
    thanks to Andrew Simmons' report plus fix in PR#18572.
  * transform.data.frame() no longer adjusts names; in particular,
    untransformed variables are kept as-is, including those with
    syntactically invalid names (PR#17890).
  * The keep.source option for Rd \Sexpr blocks is no longer ignored.
  * The formula methods for t.test() and wilcox.test() now catch when
    paired is passed, addressing PR#14359; use Pair(x1, x2) ~ 1 for a
    paired test.
  * The level reported in the browser prompt was often too large. It
    now shows the number of browser contexts on the stack.
  * For cbind() and rbind(), the optional deparse.level argument is
    now properly passed to methods, thanks to Mikael Jagan's PR#18579
    and comments there.
  * Some error and warning messages for large ('long vector')
    matrix(v, nr, nc) and dim(m) &lt;- d are now correct about sizes,
    using long long formatting, fixing PR#18612 (and more) reported
    by Mikael Jagan.
  * readChar(useBytes = TRUE) now terminates strings even when the
    underlying connection uses extra spaces in the input buffer.
    This fixes problems with extra garbage seen with gzip
    connections, PR#18605.
  * Named capture in PCRE regular expressions now works also with
    more than 127 named groups (PR#18588).
  * Datetime functions are now robust against long jumps when dealing
    with internal time zone changes.  This avoids confusing warnings
    about an invalid time zone, previously triggered by turning
    warnings into errors or handling them via tryCatch (PR#17966,
    PR#17780).
  * Datetime functions now restore even an empty TZ environment
    variable after internal time zone changes (PR#17724).  This makes
    results of datetime functions with this (typically unintentional)
    setting more predictable.
  * drop.terms(*) now drops response as by default, keep.response =
    FALSE, fixing PR#18564 thanks to Mikael Jagan.
  * dummy.coef(.) now also works for lm()-models with character
    categorical predictor variables rather than factor ones, fixing
    PR#18635 reported by Jinsong Zhao.
  * formals(f) &lt;- formals(f) now also works for a function w/o
    arguments and atomic _constant_ body(f).
  * Correct as.function(&lt;invalid list&gt;, .)'s error message.
  * removeSource() is yet more thorough in finding and removing
    "srcref" and the other source references from parsed R language
    chunks, fixing PR#18638 thanks to Andrew Simmons.
  * dgeom() is more accurate now, notably when its result is very
    small, fixing PR#18642 thanks to the proposal of Morten Welinder,
    also improving other instances where C level binom_raw(x, n, ..)
    has x == 0 or x== n.
  * warning() with options(warn = 1) has improved output for
    multi-line messages.
  * axis.Date() and axis.POSIXct() now respect the par("lab") setting
    for the number of pretty() intervals.
  * Comparisons for language objects (which are based on deparsing)
    are now more careful about using accurate deparsed results
    (PR#18676).
  * Plain-text help (Rd2txt) now correctly preserves blank lines
    following single-line \dontrun code.
  * &lt;POSIXlt&gt;[*] no longer sets wrong "balanced" attribute, fixing
    PR#18681 thanks to Mikael Jagan.
  * str(&lt;classed-call&gt;) now deparses the call as expected, fixing
    PR#18684, reported by Dave Slager.
  * In Rd examples, code following the closing brace of a \dontrun,
    \dontshow or \donttest tag on the same line is no longer skipped
    when R CMD check runs the examples.
  * as.data.frame(matrix(*, ncol=0)) now gets valid names() and
    colnames(); reported by Davis Vaughan on the R-devel list.
  * Internal Mathlib function stirlerr(n) is now almost fully
    (52-bit) accurate for all n &gt;= ~5.9 and more accurate also in the
    range 1 -- 5.9.  This entails small ("after 12th decimal")
    changes in density functions, e.g., dgamma() in _some_ regions of
    their support.  The fix was partly prompted by Morten Welinder's
    PR#18640.
  * Numbers like 9876543.2 are now considered non-integer by Mathlib
    internal R_nonint(), amending original fix of PR#15734.
  * Rd comment lines no longer cause broken paragraphs in the
    rendered PDF and plain-text help. In code blocks, pure comment
    lines (starting with %) no longer produce an empty line.
  * xtabs(Freq ~ .) now consistently defaults to na.action = na.pass,
    using na.rm = FALSE (added as an argument) when summing over Freq
    (PR#17770).
  * tools::testInstalledPackage() is no longer silent about failures
    from running examples or tests and its return code no longer
    ignores failures from checking vignettes.</changelog>
  <changelog author="Detlef Steuer &lt;detlef.steuer@gmx.de&gt;" date="1718366400">- CHANGES IN R 4.4.1:
  C-LEVEL FACILITIES:
  * Functions R_atof and R_strtod declared in header R_ext/Utils.h
    are now documented in 'Writing R Extensions' and so formally part
    of the API.
  * The non-API entry points Rf_setSVector, Rf_StringFalse,
    Rf_StringTrue and Rf_isBlankString have been added to those
    reported by R CMD check.
  * The new function Rf_allocLang is now available. This provides an
    alternative to the idiom of calling Rf_allocList followed by
    SET_TYPEOF.
  UTILITIES:
  * R CMD check now reports as warnings what gfortran calls 'Fortran
    2018 deleted features', all of which have long been marked as
    'obsolescent' and some of which were deleted in Fortran 2008 or
    earlier.  Fortran compilers are no longer required to support
    these.
  BUG FIXES:
  * as.numeric(), scan(), type.convert() and other places which use
    the internal C function R_strtod now require a _non-empty_ digit
    sequence in a decimal or binary exponent.  This aligns with the
    C/POSIX standard for strtod and with ?NumericConstants.
  * as.data.frame(m, make.names=NA) now works correctly for a matrix
    m with NA's in row names.
  * The error message from &lt;POSIXlt&gt;[["hour"]] and similar now
    mentions *[[, "hour"]], as wished for in PR#17409 and proposed by
    Michael Chirico.
  * qbinom() and potentially qpois(), qnbinom(), no longer sometimes
    fail accurate inversion (of pbinom(), etc), thanks to Christopher
    Chang's report and patch in PR#18711.
  * The internal help server on Windows can again serve requests sent
    in quick succession, fixing a regression in R 4.4.0.
  * debugcall(&lt;S3Generic&gt;()) now also works when a corresponding
    S4-generic version is in the methods cache (PR#18143).
  * Package tools' toTitleCase(ch0) now returns character(0) when ch0
    is of zero length; fixing PR#18724, reported by David Hugh Jones.
  * R CMD check is no longer broken (without a check result and no
    explanation in 00check.log) for a package which declares an
    invalid VignetteBuilder in DESCRIPTION but has no vignettes.</changelog>
</package>
<package pkgid="f5728fbe6842ab8defc26cc04a0cdf8659ed3db51c076655cfb5d7edfc39e69957352a463a16a0760657fb6ac85d380b37ecd56a9112eaab869cf31db9535120" name="Radicale" arch="noarch">
  <version epoch="0" ver="3.2.3" rel="bp160.1.5"/>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1650888000">- Update to 3.1.7
  * Fix random href fallback</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655121600">- Trim filler wording from descriptions.</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1655899200">- Add python passlib as a recommendation as it is needed for
  htpasswd authentication</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1657800000">- Update to 3.1.8
  * Fix setuptools requirement if installing wheel
  * Tests: Switch from python setup.py test to tox
  * Small changes to build system configuration and tests</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1673784000">- Security fortifications (provided by systemd)</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1710763200">- Update to 3.1.9
  * Add: support for Python 3.11 + 3.12
  * Drop: support for Python 3.6
  * Fix: MOVE in case listen on non-standard ports or behind reverse proxy
  * Fix: stricter requirements of Python 3.11
  * Fix: HTML pages
  * Fix: Main Component is missing when only recurrence id exists
  * Fix: passlib don't support bcrypt&gt;=4.1
  * Fix: web login now proper encodes passwords containing %XX (hexdigits)
  * Enhancement: user-selectable log formats
  * Enhancement: autodetect logging to systemd journal
  * Enhancement: test code
  * Enhancement: option for global permit to delete collection
  * Enhancement: auth type 'htpasswd' supports now 'htpasswd_encryption' sha256/sha512 and "autodetect" for smooth transition
  * Improve: Dockerfiles
  * Improve: server socket listen code + address format in log
  * Update: documentations + examples
  * Dependency: limit typegard version &lt; 3
  * General: code cosmetics</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1714910400">- Update to 3.2.0
  * Enhancement: add hook support for event changes+deletion hooks (initial support: "rabbitmq")
  * Dependency: pika &gt;= 1.1.0
  * Enhancement: add support for webcal subscriptions
  * Enhancement: major update of WebUI (design+features)
  * Adjust: change default loglevel to "info"
  * Enhancement: support "expand-property" on REPORT request
  * Drop: support for Python 3.7 (EOSL, can't be tested anymore)
  * Fix: allow quoted-printable encoding for vObjects</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1717761600">- Filtered out false positive rpmlint error message
- Update to 3.2.1
  * Enhancement: add option for logging bad PUT request content
  * Enhancement: extend logging with step where bad PUT request failed
  * Fix: support for recurrence "full day"
  * Fix: list of web_files related to HTML pages
  * Test: update/adjustments for workflows (pytest&gt;=7, typeguard&lt;4.3)</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1718712000">- Update to 3.2.2
  * Enhancement: add support for auth.type=denyall (will be default for security reasons in upcoming releases)
  * Enhancement: display warning in case only default config is active
  * Enhancement: display warning in case no user authentication is active
  * Enhancement: add option to skip broken item to avoid triggering exception (default: enabled)
  * Enhancement: add support for predefined collections for new users
  * Enhancement: add options to enable several parts in debug log like backtrace, request_header, request_content, response_content (default: disabled)
  * Enhancement: rights/from_file: display resulting permission of a match in debug log
  * Enhancement: add Apache config file example (see contrib directory)
  * Fix: "verify-collection" skips non-collection directories, logging improved</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1725019200">- Cleaned up unnecessary BuildRequires
- Update to 3.2.3
  * Add: support for Python 3.13
  * Fix: Using icalendar's tzinfo on created datetime to fix issue with icalendar
  * Fix: typos in code
  * Enhancement: Added free-busy report
  * Enhancement: Added 'max_freebusy_occurrences` setting to avoid potential DOS on reports
  * Enhancement: remove unexpected control codes from uploaded items
  * Enhancement: add 'strip_domain' setting for username handling
  * Enhancement: add option to toggle debug log of rights rule with doesn't match
  * Drop: remove unused requirement "typeguard"
  * Improve: Refactored some date parsing code</changelog>
</package>
<package pkgid="d1e04b0ec9895a8bb49038786eea9163d31c58b67a2c6678f792d564df04f85869c2e7abacfd48735b9697bc48d7b37c2dfca6aa4250e986113235ffa25fb99d" name="RealtimeSync" arch="x86_64">
  <version epoch="0" ver="13.7" rel="bp160.1.16"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1690977600">- Update to 12.5:
  * Merge logs of individual steps (comparison, manual operation, sync)
  * Show total percentage in progress dialog header
  * Log and report errors during cleanup or exception handling
  * Skip folder traversal if existence check fails for other side of the pair
  * Automatically adapt batch options to prevent hanging a non-interactive process (Windows)
  * Support path lists for external applications: %item_paths%, %local_paths%, %item_names%, %parent_paths%
  * Create directory lock files with hidden attribute
  * Don't clear other side when right-clicking file selection
  * Fixed passive FTP when using different IP than control connection
  * Work around FTP servers silently renaming unsupported characters of temporary file</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1695297600">- Update to 13.0:
  * Rename (multiple) files manually (F2 key)
  * Configure individual directions for DB-based sync
  * Detect moved files with "Update" sync variant (requires sync.ffs_db files)
  * Update variant: Do not restore files that were deleted on target
  * Distinguish file renames from file moves and simplify grid display
  * Fixed ERROR_NOT_SUPPORTED when copying files with NTFS extended attributes
  * Fixed error during process initialization while connecting with quick launch
  * Avoid redundant file reopen when setting file times during copy
  * Set working directory to match FFS configuration file when double-clicking (Linux)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1699272000">- Update to 13.1:
  * Keep comparison results when only changing cloud connection settings
  * Sync button: indicate if database will be used
  * Remove leading/trailing space during manual file rename
  * Set environment variable "DISPLAY=:0" if missing (Linux)
  * Support dropping ffs_gui/ffs_real config on RealTimeSync directory input field
- Add FreeFileSync-remove_ifdef_exceptions.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1701172800">- Update to 13.2:
  * Prevent files from being moved to versioning recursively
  * Return first FTP parsing error when trying multiple variants
  * Allow file times from the future for Linux-style FTP listing</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1706702400">- Update to 13.3:
  * Completed CASA security assessment for Google Drive
  * Use system temp folder for auto-updating
  * Ignore errors when setting directory attributes is unsupported
  * Save GUI sync log file even when cancelled
  * Fixed Business Edition install over existing installation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709208000">- Update to 13.4:
  * Ignore leading/trailing space when matching file names
  * Work around wxWidgets system logger clearing error code
  * Avoid modal dialog hang on KDE when compiling with GTK3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1712145600">- Update to 13.5:
  * Wrap file grid folder paths instead of truncate
  * Fixed sync operation arrows for RTL layout
  * Fixed FTP hang during connection (libcurl regression)
  * Consider user-defined file time tolerance for DB comparisons
  * Don't log folder pair paths if nothing to sync</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1715774400">- Update to 13.6:
  * Compact parent path display for medium/large row sizes
  * Fixed crash when mouse inputs are queued due to system lag
  * Don't steal focus from other app when sync progress dialog is shown
  * Fix crackling sound at the beginning of WAV playback (Linux)
  * Prevent middle grid tooltip from covering sync direction
  * Disable Nagle algorithm for SFTP connections</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1720008000">- Update to 13.7
  * Support copying symlinks between SFTP devices
  * Fixed input focus not being restored after comparison/sync
  * Fixed log file pruning not considering selected configuration
  * Show startup error details when running outside terminal (Linux)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1725364800">- disable build for s390x - base/db_file.cpp asserts little endian
  byteorder, but s390x uses big endian</changelog>
</package>
<package pkgid="bd52b1ccbfb1f3c361df9a1e4b406d02d85845636cbe16881e582fc6cea5ca61894668dd48a964f75a531d861c7923fe212ce586cf9af6c93b3f2979a98e822c" name="RemoteBox" arch="noarch">
  <version epoch="0" ver="3.3" rel="bp160.1.10"/>
  <changelog author="chri@gallochri.com" date="1552737600">- Update to 2.6 version
- Removed old version of env-script-interpreter.patch
- Added RemoteBox-2.6_fix-env-script-interpreter.patch
- RemoteBox now requires VirtualBox 6.0.x
- Added additional screen modes for video capture and video hinting
- Added option to select between Video and Audio, Video Only or
  Audio Only when screen capturing
- Added support for VirtualBox VGA card with VMware SVGA II
  extensions
- Added support for having no graphics card in the guest. Note
  however, you cannot connect to the guest with RDP/VNC without a
  virtual graphics card.
- Added support for setting the emulated serial UART type
- The Audio Input and Audio Output options can now also be set
  while the guest is running
- Added support to the VMM (Virtual Media Manager) for compaction
  of hard disk images to reduce their physical size
- Added support to the VMM (Virtual Media Manager) for resizing
  hard disk images
- Added ability to save a guest log to a local text file
- Added refresh button to reload the guest logs in the log viewer
- Added cancel button to the VirtualBox Preferences dialog
- Removed Host-Only-Network and NAT Network configuration from
  the VirtualBox preferences dialog and created the Host Network
  Manager dialog accessible from the file menu
- Significantly updated the RemoteBox icon set and added
  additional decals
- To work around a VirtualBox bug, when changing a shared folder
  the guest settings are now explicitly saved. This includes
  adding, editing and deleting
- Optimised a lot of the settings retrieval code which should
  improve latency especially for those on slower systems and
  networks.
- Fixed the Edit Shared Folder dialog not correctly showing a
  share's Permanent Status, when editing the shared folder.
- Various code cleanups</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="ecsos@opensuse.org" date="1576670400">- Update to 2.7 version
  - RemoteBox now requires VirtualBox 6.1.x
  - VirtualBox now requires hardware virtualization and no longer
    supports software virtualization. Removed associated options
    from RemoteBox.
  - Removed option of setting the video side-channel quality for an
    RDP connection. This option is largely unsupported by RDP
    clients and not particularly useful.
  - Added support for the Virtio-SCSI controller
  - Added support for the AMD PCNet-ISA/NE2100 network card
  - Added support for nested hardware virtualization (VT-x/AMD-V)
    for supported processors
  - Added toolbar buttons in the VMM to create new hard disk
    images, new floppy disk images (from 360K to 2.88MB) and move
    media to new locations
  - Newly created floppy disk images can be optionally
    pre-formatted with FAT12
  - Added a menu option when attached storage for creating a new
    floppy disk image and automatically attaching it
  - Added option to specify MAC address policy when importing an
    appliance
  - Added options to specify MAC address policy and include ISO
    files when exporting an appliance
  - Added options to Keep disk UUIDs, specify MAC policy and keep
    disk names when cloning a guest
  - Added OS icon for Windows 2019 64bit
  - Rewrote the copy and disk conversion code, should be cleaner
    and faster
  - Creating a new guest, now uses the ApplyDefaults API call which
    was broken in previous versions of VirtualBox. This allows
    a lot of code cleanups and faster guest creation
  - Fixed incorrect URL on About window
  - Various code cleanups</changelog>
  <changelog author="chri@gallochri.com" date="1582113600">- RemoteBox-2.6_fix-env-script-interpreter.patch remamed for to
  RemoteBox-2.7_fix-env-script-interpreter.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1640260800">- Update to 3.0
  - RemoteBox has been ported to Gtk3.
    Review the requirements before updating to ensure your
    operating system is compatible.
- Changes from 2.8
  The changes don't really justify a release however this is likely
  to be the last release of RemoteBox based on Gtk2 as RemoteBox is
  being ported to Gtk3.
  - Removed hearbeat option as it's no longer required
  - Server memory bar updates changed to 58 seconds
  - Added option to bind the RDP/VNC server for a guest to a
    specific IP or hostname.
  - Fixed copy and clone of disks. Regression caused by passsing
    incorrect datatype to the API
  - Added OS icon for Windows 11</changelog>
  <changelog author="gallochri &lt;chri@gallochri.com&gt;" date="1641556800">- Update RemoteBox.spec file
  - Renamed patch RemoteBox-2.7_fix-env-script-interpreter.patch
    to RemoteBox-3.0_fix-env-script-interpreter.patch
  - Added Requires typelib-1_0-GdkPixdata-2_0</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1648641600">- Update to 3.1
  - Changed the RemoteBox logo
  - Various minor GUI tweaks
  - Added button to save the message log to a text file. Might be
    useful for debugging purposes.
  - Fixed: Regression introduced in 3.0 caused Connection Profiles
    dialog to essentially stop working correctly, potentially
    losing existing profiles in the process.
  - Fixed: Regression introduced in 3.0 meant that NAT rules were
    not shown for IPv4 and IPv6 networks
  - Fixed column sorting in the VMM (Virtual Media Manager)
  - Fixed various list selection bugs. The get_selected() method
    under GTK3 returns both the model and the iterator, not just
    the iterator as with GTK2
  - RemoteBox is no longer bundled with a PDF manual. Documentation
    is now exclusively maintained on the RemoteBox web site.</changelog>
  <changelog author="gallochri &lt;chri@gallochri.com&gt;" date="1674302400">- Update to 3.2
  - RemoteBox now requires VirtualBox 7.0.x
  - Started the process of moving away from Glade and implementing
    GUI code natively. This is significant effort and involves a
    large amount of code churn which will span many releases.
  - Added option to attach an ISO when creating a new guest
  - Added support for setting the TPM (Trusted Platform Module) types
    TPM v1.2
    TPM v2.0
  - Added support for setting Secure Boot (where supported)
  - Added support for the following network cards:
    Novell NE2000
    Novell NE1000
    WD/SMC EtherCard Plus 16
    WD/SMC EtherCard Plus
    3Com EtherLink II
    3Com EtherLink
  - Added support for the Windows Audio System (WAS)
  - Added support for USB Multi-Touch screen and pad
  - Added ability to edit an IPv4 Port Forwarding rule
  - Added ability to edit an IPv6 Port Forwarding rule
  - Added 'Devices' menu with items orignally in the 'Machine' menu
  - Added 'Actions' menu with items orignally in the 'Machine' menu
  - Added 'New Floppy Disk Image' to the 'Change Floppy' menu
  - Added 'Add Floppy Disk Image' to the 'Change Floppy' menu
  - Added 'Add Floppy Disk Image' to the menus when editing storage
    menu when attaching storage in
  - Added 'Add Optical Disc Image' to the 'Change Optical Disc' menu
  - Added 'Add Optical Disc Image' to the menus when editing storage
  - The 'Devices' menu now pops up instead of the 'Machine' menu on
    an RMB event on the guest list
  - The 'Change Floppy' and 'Change Optical Disc' menus are now
    usable with guests that are powered off
  - Updated many operating system icons
  - Added several new dialog motifs
  - Various minor GUI tweaks</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="Christian Galeffi &lt;chri@gallochri.com&gt;" date="1727697600">-Update to 3.3
  * RemoteBox now requires VirtualBox 7.1.x.
  * Updated OS icons.
  * Added support for VirtioSound Audio Controller.
  * Implemented refresh function for guest logs, the button was
  available but actually did nothing.
  * Changed the default freerdp client preset. VirtualBox now issues
  self-signed certs on RDP connections, the new default ignores
  certificate verification as RemoteBox cannot prompt you.
  * Added Remmina as a VNC/RDP client preset.
  * Significant work on removing dependence on Glade and GTKBuilder.
  * VirtualBox now uses self-signed certs on RDP connections.
  You will need to reset your RDP settings in the RemoteBox
  Preferences -&gt; Guest Display Tab, by selecting a preset.
  * RemoteBox 3.3 requires the Perl module Time-HiRes to be installed
  if not already.
  * RemoteBox 3.3 should run on ARM based Macs fine, but using ARM
  based Macs as the server is NOT supported.
-RemoteBox-3.0_fix-env-script-interpreter.patch update to
  RemoteBox-3.3_fix-env-script-interpreter.patch</changelog>
</package>
<package pkgid="897d1ed36944cc4db5fba202ee9c32fee4db161f78ac86e17fa9f0e4a2baf91c4b8d9da182147c3a9d6748bae9b8a128ff913248cfc465a1c9071c3f2456678b" name="RigelEngine" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1629720000">- Update to version 0.8.1
  * Fixed laser turrets beings destructible with Duke's regular
    weapon after loading a quick save.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1632657600">- Add patches:
  * 749.patch  (Fix threads not found on Tumbleweed)
  * fix-find-boost-program_options.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1637496000">- Update to version 0.8.2
  New features
  * Added a smooth scrolling and movement mode. When this is
    enabled, the game is taking full advantage of the display
    framerate (60 FPS or higher) by interpolating object and
    camera movement during rendering (internal game logic is
    still running at 15 FPS). This is currently still work in
    progress, see known issues.
  * The engine has a built-in screenshot function now. Press F12
    to take a screenshot. It will be saved as PNG in either your
    Duke Nukem II game files directory, or in the user profile
    directory if the former is not writable.
  * It's now possible to skip the bonus screen after finishing a
    level by pressing Enter or Esc (or controller button A or B).
  * Added an option to the Enhancements tab to skip the intro
    when RigelEngine starts (same as the -s command line option).
  * Added information about currently active gamepads to the
    options menu
  Improvements
  * In widescreen mode, out of bounds areas are now drawn in
    black instead of showing the background.
  * Replacement backgrounds (mods) can now be wider than the
    original art they are replacing, and will be displayed
    correctly (without distortion)
  * For auto-scrolling backgrounds, the scroll position is now
    saved/restored when quick saving/loading.
  * The game will now run even if the intro movie files
    (NUKEM2.F1, .F2 etc.) are missing. The movies will be
    skipped instead of exiting the game.
  * Game physics are more correct now w.r.t. the original code
    when it comes to items falling down.
  Bug fixes
  * Fixed the "wall dance" glitch. This glitch allows Duke to move
    through walls using a specific sequence of moves.
  * Fixed spiders sometimes not latching on to Duke when touching
    him.
  * Fixed items getting stuck in the ceiling when the box was shot
    while hidden behind a rock that would later fall down (e.g. in
    N2).
  * Fixed missing animation for the Computer merchandise pickup.
  * Fixed a glitch when starting a level while having high
    resolution mods enabled, where the graphics would briefly show
    as low resolution.
  * Fixed in-game messages not being affected by screen shake when
    in widescreen mode.
- Remove patches:
  * 749.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1641038400">- Update to version 0.8.3
  New features
  * Added the Nuked OPL3 AdLib emulator as an alternative to DBOPL
    (selectable in the Sound options). Nuked OPL3 is more
    accurate but also uses more CPU. The difference in CPU load has
    little impact on most systems, but it does matter on low-end
    devices like Raspberry Pi Zero.
  * Added a "sound test" button to the Sound options (play a chosen
    sound effect)
  Improvements
  * Improved sound effect quality for certain digital sounds
    (SB_nn.MNI files in VOC format) by using a more accurate ADPCM
    decoding algorithm (same as DosBox's SoundBlaster emulation).
  * Slightly improved sound effect quality for AdLib sounds by
    running the emulator at the native OPL2 frequency (49716 Hz).
  * In widescreen mode, the camera now tries to avoid showing
    out-of-bounds parts of the map if possible, by restricting
    downward scrolling unless it's necessary to keep the player on
    screen.
  * Added 75 to the list of pre-defined FPS limits for the FPS
    limiter.
  Bug fixes
  * Fixed a soft-lock that could occur when killing a ceiling
    sucker at exactly the same time as it sucked up Duke.
  * When dying due to shooting an airlock and then respawning at a
    checkpoint, Duke would remain in the spinning animation. This
    is now fixed.
  * Fixed a small visual glitch appearing during the fade-out of
    the intro movie.
  * The credits screen shown during the attract mode loop didn't
    react to any key press aside from ESC, this is now fixed.
  * Under certain circumstances, the main menu would respond to a
    keypress that happened during the intro or another menu. This
    is now fixed.
  * Fixed visual glitches (bright lines between tiles) that could
    occur at certain resolutions/window sizes when using high-res
    replacement graphics.
  * Fixed an issue that made high-resolution backdrop replacements
    appear as low resolution under certain circumstances.
  * Fixed right side of the HUD being partially cut off at certain
    window sizes/resolutions.
- Drop not longer needed patches:
  * fix-find-boost-program_options.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1648814400">- Update to version 0.8.4
  Smooth motion mode improvements
  * Moving parts of the level (falling rocks, doors, ...) are now
    moving smoothly as well.
  * Fixed glitches (jittering top part) with the smash hammer and
    grabber claw.
  Modding support improvements
  * It's now possible to replace STATUS.MNI with a PNG image that
    can be original or higher resolution. This allows changing
    various fonts and UI elements, including parts of the HUD.
  * Replacements for actors used by the HUD can now be high
    resolution.
  Other improvements
  * Improved performance on Raspberry Pi, especially when under
    water areas are visible.
  * Blocked off the area to the left of the HUD in widescreen
    mode to avoid potentially showing out-of-bounds parts of the
    map.
  * Further improved digitized sound effect quality by replacing
    the ADPCM decoding code with the exact same algorithm as
    implemented in the SoundBlaster firmware, based on disassembly
    of the latter
  * Improved the sound test UI
  Bug fixes
  * Fixed camera moving too far down when falling into a
    bottomless pit in widescreen mode
  * Fixed important parts at the bottom of the level (like lava
    pools) being hidden in certain cases in widescreen mode (e.g.
    in E3L1)
  * Fixed visual glitches on GL ES devices like Raspberry Pi and
    Odroid Go (overly pixelated backdrop during scrolling, white
    lines visible next to certain enemies during the damage
    flash effect)
  * Fixed missing fade-in effect when using the teleporter
  * Fixed incorrect rendering of high-res replacement backdrops
    when vertical auto-scrolling is used
  * Fixed position of dialog boxes (quit confirm, game paused
    etc.) in widescreen mode
  * Fixed visual glitch when entering a menu while smooth motion
    is enabled</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1653825600">- Update to version 0.8.5
  New features
  * Implemented a mod manager. Mods can now be organized into
    directories, and each mod can be enabled/disabled in the
    options menu. See Modding Support for more details.
  * Added additional "remixed" HUD styles in widescreen mode.
  * Added additional upscaling filters: Sharp bilinear, pixel
    perfect (integer scaling). Note that using mods with high-res
    replacement graphics currently forces nearest neighbor
    filtering.
  * The game now writes a log file into the user directory.
  * Gamepad controls are now explained in the options menu.
  * The top-level in-game menu (reachable via gamepad) now shows
    the current episode, level and difficulty in the title.
  Improvements
  * Improved the look of the classic HUD in widescreen mode, by
    extending the left side to cover the length of the screen.
  * Reworked quick saving/loading gamepad controls, to make
    loading quick saves possible without needing to open the menu.
    The select/back button now acts as a modifier. When pressed
    together with shoot, a quick save is made. Pressing the
    button together with jump loads the last quick save.
  Bug fixes
  * Fixed destructible level geometry remaining visible after
    being destroyed in certain cases
  * Fixed brief camera movement after turning wide-screen mode
    on/off or changing the window size
  * Fixed slime blob containers sometimes not animating.
  * Fixed sprites flickering in and out of existence in certain
    circumstances
  * The episode 2 boss would keep flying when killed in mid-flight
    This is now fixed.
- Add patch:
  * fix-build.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1670673600">- Update to version 0.9.1
  Bug fixes
  * Fixed a crash that could occur in level 1 of episode 2, in
    theory also in other levels but it was so far only observed in
    E2L1.
  * Fixed being able to shoot destructible walls through 4-tile
    wide walls using the regular shot.
- Update to version 0.9.0
  New features
  * Added a "Classic" gameplay style/mode. It doesn't support
    widescreen mode or smooth motion, but is 100% accurate to the
    original. Quick-saving and high-resolution mods are still
    supported. See Classic Mode vs. Enhanced Mode for more details.
  * Implemented the gameplay demo (plays during the attract mode
    loop at the beginning of the game or after waiting for
    30 seconds in the main menu).
  * Implemented the original game's cloak effect, replacing the
    previously used alpha transparency.
  * Implemented the original game's slide-in animation when
    showing message boxes.
  * Added an option to disable the radar overlay when using the
    "Remixed 1" HUD style.
  * Added an option to disable aspect ratio correction when using
    pixel-perfect upscaling (aka integer scaling). This is to
    allow running RigelEngine on a 4:3 CRT at original (or close
    to) resolution.
  * It's now possible to confirm quitting by pressing enter instead
    of Y (but the latter also still works).
  * Pressing ESC while in-game now brings up the in-game menu (this
    was previously only accessible by using a gamepad). Pressing Q
    now does what ESC used to do, i.e. bringing up the "Quit"
    dialog without going through the menu.
  Parity improvements
  * Fixed (very) minor discrepancies in the color palette.
  * Added missing horizontal parallax for vertically autoscrolling
    backdrops.
  * Fixed oversight in player movement: In the original, Duke cannot
    move left/right when hanging from a pipe as long as the fire
    button is held down.
  * It was possible for an enemy to get hit by multiple player shots
    per frame, but this isn't possible in the original. Now Rigel
    doesn't allow that anymore either.
  * Hint machine messages cannot be interrupted by other messages
    in the original game, but this was possible in Rigel-now fixed.
  * Handling of shootable walls now matches the original.
  * The watchbot (jumpy robot with a big eye) was jumping too
    frequently, it now matches the original.
  * Fixed discrepancies in behavior for the wall walker enemy.
  * Fixed discrepancies in behavior for the green cat/dog creature.
  * Fixed discrepancies in behavior for the spiked dragon/lizard
    creature.
  * Fixed discrepancy in the cooldown period for manual scrolling
    after firing a shot.
  * Fixed player starting location being off by one in levels where
    the player starts out facing left.
  * Fixed incorrect animation speeds for Rigelatin space ship
    engine fire, shallow water, and rotating floor spikes.
  * After being released from their box, certain items have a brief
    period during which they can't be picked up yet. This was
    missing in RigelEngine.
  Bug fixes
  * Fixed graphical glitches (bright lines appearing next to certain
    sprites) that could occur on some systems when high-res graphic
    replacements were used.
  * Fixed being able to walk through walls under specific
    circumstances.
  * In widescreen mode, when using one of the remixed HUD options,
    the classic HUD will be shown as fallback in case the current
    screen resolution's aspect ratio is not wide enough for the
    selected HUD style. In that case, it was possible to walk
    behind the right side of the HUD (i.e., the gameplay area
    extended beyond the HUD). This is now fixed.
  * Framerate drops could cause the game to advance a few frames
    into the future without respecting player input. This is now
    improved.
- Drop patch
  * fix-build.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1680868800">- Add patch:
  * RigelEngine-fix-build-with-gcc13.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1724587200">- Add patch:
  * RigelEngine-fix-build-with-gcc14.patch</changelog>
</package>
<package pkgid="ae8246fb96d858c12cfbaabbe3e40a03d6c8dc5258b9e2cebe0ab6a1ee81017953dbc92a0d49075f6fa92a245f0c6d823fbd6d6749e3031669a5b0fe4b9ca01e" name="Rivet-data" arch="noarch">
  <version epoch="0" ver="3.1.11" rel="bp160.1.17"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641556800">- Fix sed script for rpath removal from rivet-config.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 3.1.6:
  * Allow the rivet script's -p option to be given multiple times,
    or to contain a comma-separated list of files to load cf. the
  - a argument. readData() is called for each specified preload
    file, in order.
  * Add a pseudojets() method and automatic conversion operator to
    Particles.  It sets the user index so the constituents will
    match the indices of the particle or jet vector used as input.
  * Move the Jets and Particles definitions into the .hh headers.
  * Submission of CMS_2017_I1497519: Z boson in association with
    jets at 8 TeV.
  * Fall back to old calculation of y in DISKinematics if Q2 is
    zero.
  * Add MissingMom typedef for MissingMomentum.
  * Add vectorEt/PtMiss() and scalarEt/PtMiss() methods to
    MissingMomentum.
  * Use ThreeMomentum in MissingMomentum for the vectorPt() etc.
  * Add ThreeMomentum/P3 type with momentum-oriented method names,
    cf. FourVector-&gt;FourMomentum.
  * Add a pseudojets() method to the Jets container type.
  * Add BESIII_2022_I2047667 e+e- &gt; eta omega and omega pi0.
  * Add finalize-scaling protection in ATLAS_2020_1790256.
  * Add BESIII_2022_I2039027 e+e- &gt; pi+pi-eta.
  * Add BESIII_2022_I2033007 e+e-&gt; K+K-pi0.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 3.1.7:
  * Add HEPTopTagger interface (since made optional, with no-build
    example analysis).
  * Add EXAMPLE_NTUPLE_ROOT example analysis showing how to open
    and write to a ROOT ntuple file.
  * Add CMS_2021_I1866118: Z boson plus jets (DPS) at 13 TeV
  * Add EXAMPLE_NTUPLE_CSV example analysis showing how to open
    and write to a CSV ntuple file.
  * Add Analysis::analysisDataPath() and the RivetLWTNN.hh include
    with convenience functions for loading of LWTNN DNNs.
  * Add EXAMPLE_LWTNN example analysis, demonstrating use of a
    preserved LWTNN neural network in Rivet.
  * Install more generically named files from the analysis
    plugin/data dirs rather than limiting to the .plot, .info,
    .yoda* set.
  * Move EXAMPLE_* analyses, which demonstrate functionality to
    analysis writers rather than being directly useful in compiled
    form, into an uncompiled analyses/examples/ directory.
  * Hide the bundled eigen3 in a mangled RivetEigen namespace, to
    avoid clashes.
  * Submission of CMS_2022_I2079374: Z pT over a wide mass range
    at 13 TeV
  * Upgrade eigen3 and yaml-cpp bundling to remove compiler
    warnings.
- Add Rivet-correct-python-platlib.patch: Ensure consistent python
  platlib across different python versions.
- Split out data files common to C++ and Python bindings into
  separate package (Rivet-data) and have it required from both
  %{name}-devel and python3-%{name} packages.
- Run tests as part of %check section.
- Move sed fixes to hashbangs to %setup section, running them over
  scripts in source rather than on buildroot installed dirs to
  allow tests in %check to succeed.
- Drop fixes to pkgconfig script made during %setup as these are
  no longer needed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1689076800">- Update to version 3.1.8:
  * Append extra newlines to plugin sources in batched rivet-build.
  * Add ability to control the specific plugin library paths for
    analyses to be loaded from, via new programmatic set and get
    methods on AnalysisLoader and a new RIVET_ANALYSIS_PLUGINS
    environment variable.
  * Remove support for custom ASCII event-file formats.
  * Use an immediate call to HepMC3::deduce_reader() in the file
    and stream opening; drop local attempts to deduce the file
    format.
  * Require HepMC3 &gt;= 3.2.0
  * Add variations on the discard/select utility functions to
    (particularly) discard single elements by equality rather than
    needing to provide a function.
  * Fixes in MC_TAU_Decay plot file, courtesy of George Marsden
  * Provide an implicit cast for FourVector and derived classes to
    PseudoJet, to avoid the incorrect conversion by PJ's template
    constructor.
  * Fix unit for Zjj inclusive runs in ATLAS_2017_I1627873
  * ATLAS_2019_I1746286: fix generator ctau description in the
    info file.
  * Fix memory leaks in binreloc.c and the merging-related method
    in AnalysisHandler.
  * Fix CMS_2015_I1346843 to allow FSR photons from muon decays
  * Add example analysis demonstrating use of an ONNX neural net.
  * Change/correct DressedLeptons behaviour to accept photons from
    prompt muons and taus. (Return to 2.x behaviour, accidentally
    reverted.)
  * Update ParticleIdUtils content to match latest MCUtils.
    Includes a serious speed-up (6x!) in PID digit decoding!
  * Allow linspace() and aspace() to make reversed edge-sets with
    start &gt; end.
  * Add powspace() and powdbnspace() uniform-spacing functions for
    power laws, and a generic _fnspace() function for any
    transform/inverse function-pair.
  * Fix couting of raw vs tmp histos when checking
    self-consistency of output file.
  * Replace regex_match with reg_search to pick up substring
    matches, too.
  * Fix bug in DELPHI_2011_I890503 and OPAL_2003_I599181, where
    the wrong decay chain was checked for weak decays.
  * Change configure script to use the --rpath=no option to
    fastjet-config, removing fragile path-hacking.
    build script.
  * Add reentrant marker to MC_DILEPTON.info
  * Make logger thread safe(r) by making ColorMap and LevelMap
  * thread_local.
  * Extend RivetLWTNN.hh to allow use of lwt::LightweightGraph
  * Enable Cython autoconversion from C++ strings to the
    appropriate str type for Python v2 and v3, eliminating many
    noisy and fragile explicit encode()/decode() calls.
  * Analyses of new experiments (long list, see
    /usr/share/doc/packages/Rivet-devel/ChangeLog).
- Drop Rivet-correct-python-platlib.patch: fixed upstream.
- ExcludeArch %ix86: i586 error due to conversion from
  `long long` to `size_t`.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- License correction based on the legaldb scan</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1693569600">- License: Change LPPL-1.3 to LPPL-1.3a according to spdx list.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 3.1.9:
  * Streamline definitions of a "temp" histogram
  * Account for 2pi boundaries when checking for zero angle
    in DISKinematics
  * Improvements to rivet-mkhtml output.
  * Add STAR_2014_I1253360 p + p -&gt; pi0 + X
  * Add missing analysis-object methods on Analysis: booking of
    Scatter1Ds, efficiency and asymmetry calculations for Counters
    and Histo2Ds.
  * Fix projection comparison for InvisibleFinalState
  * Add icon links to Inspire and HepData, escape HTML content in
    titles as Inspire has started recording MathML for maths.
  * Add a Matrix3::mkRotation(from, to) static factory function,
    for one-liner convenience.
  * Fix unit conversion in HepMC3 readEvent method
  * Fix CMS_2021_I1920187 to use size_t or unsigned int types in
    place of non-standard uint.
  * Remove logic that parses info file from AnalysisInfo constructor
    and only parse when an analysis is being specifically asked for.
  * Fix binary relocation in binrelo.c
  * Make rivet-mkhtml write HTML file before processing images.
  * Fix rivet-mkhtml-mpl autocomplete.
  * Explicitly import YODA and Projection base-class operator= into
    derived classes to silence new GCC13 warnings.
  * Turn parameters (cuts, jet radius, clustering algorithms etc)
    into Rivet options in several common MC analyses.
  * Bypass projection comparison during registration if
    RIVET_CACHE_PROJECTIONS is false.
  * Patch projection comparison for SmearedJets
  * Prevent bookeeping histos from acquiring analysis option
    on the fly as part of merging
- Add fix_HepMC_327_compat.patch
- Remove unused API doc build dependencies (doxygen, texlive etc.)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708344000">- Update to version 3.1.10:
  * Add CMS_2023_I2703254: ttbb in lepton+jets at 13 TeV
- Drop fix_HepMC_327_compat.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1742731200">- Update to version 3.1.11:
  * Streamline parsing of version codes for dependencies
  * Change Python build to use PY_LDFLAGS rather than
    LINKFORSHARED variable.
  * Update Logging to remove non-const static map of color codes,
    and add support for the CRITICAL level.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744200000">- Add Rivet-fix-hepmc-tests.patch -- Use deduce_reader in API
  tests for HepMC 3.3.x compatibility; part of upstream commit
  ca0d57ca to release-4-0-x development branch.
- Add Rivet-disable-testCmdLine.patch -- Disable an outdated and
  failing test</changelog>
</package>
<package pkgid="b0673690a227f1409142c59fac4c779e80f93a2847a8a42acd15f5607dc0bc2d3bd2af31c49c46629510faeb44db07c6f4994943103af7ff12817b075fac8161" name="Rivet-devel" arch="x86_64">
  <version epoch="0" ver="3.1.11" rel="bp160.1.17"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641556800">- Fix sed script for rpath removal from rivet-config.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 3.1.6:
  * Allow the rivet script's -p option to be given multiple times,
    or to contain a comma-separated list of files to load cf. the
  - a argument. readData() is called for each specified preload
    file, in order.
  * Add a pseudojets() method and automatic conversion operator to
    Particles.  It sets the user index so the constituents will
    match the indices of the particle or jet vector used as input.
  * Move the Jets and Particles definitions into the .hh headers.
  * Submission of CMS_2017_I1497519: Z boson in association with
    jets at 8 TeV.
  * Fall back to old calculation of y in DISKinematics if Q2 is
    zero.
  * Add MissingMom typedef for MissingMomentum.
  * Add vectorEt/PtMiss() and scalarEt/PtMiss() methods to
    MissingMomentum.
  * Use ThreeMomentum in MissingMomentum for the vectorPt() etc.
  * Add ThreeMomentum/P3 type with momentum-oriented method names,
    cf. FourVector-&gt;FourMomentum.
  * Add a pseudojets() method to the Jets container type.
  * Add BESIII_2022_I2047667 e+e- &gt; eta omega and omega pi0.
  * Add finalize-scaling protection in ATLAS_2020_1790256.
  * Add BESIII_2022_I2039027 e+e- &gt; pi+pi-eta.
  * Add BESIII_2022_I2033007 e+e-&gt; K+K-pi0.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 3.1.7:
  * Add HEPTopTagger interface (since made optional, with no-build
    example analysis).
  * Add EXAMPLE_NTUPLE_ROOT example analysis showing how to open
    and write to a ROOT ntuple file.
  * Add CMS_2021_I1866118: Z boson plus jets (DPS) at 13 TeV
  * Add EXAMPLE_NTUPLE_CSV example analysis showing how to open
    and write to a CSV ntuple file.
  * Add Analysis::analysisDataPath() and the RivetLWTNN.hh include
    with convenience functions for loading of LWTNN DNNs.
  * Add EXAMPLE_LWTNN example analysis, demonstrating use of a
    preserved LWTNN neural network in Rivet.
  * Install more generically named files from the analysis
    plugin/data dirs rather than limiting to the .plot, .info,
    .yoda* set.
  * Move EXAMPLE_* analyses, which demonstrate functionality to
    analysis writers rather than being directly useful in compiled
    form, into an uncompiled analyses/examples/ directory.
  * Hide the bundled eigen3 in a mangled RivetEigen namespace, to
    avoid clashes.
  * Submission of CMS_2022_I2079374: Z pT over a wide mass range
    at 13 TeV
  * Upgrade eigen3 and yaml-cpp bundling to remove compiler
    warnings.
- Add Rivet-correct-python-platlib.patch: Ensure consistent python
  platlib across different python versions.
- Split out data files common to C++ and Python bindings into
  separate package (Rivet-data) and have it required from both
  %{name}-devel and python3-%{name} packages.
- Run tests as part of %check section.
- Move sed fixes to hashbangs to %setup section, running them over
  scripts in source rather than on buildroot installed dirs to
  allow tests in %check to succeed.
- Drop fixes to pkgconfig script made during %setup as these are
  no longer needed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1689076800">- Update to version 3.1.8:
  * Append extra newlines to plugin sources in batched rivet-build.
  * Add ability to control the specific plugin library paths for
    analyses to be loaded from, via new programmatic set and get
    methods on AnalysisLoader and a new RIVET_ANALYSIS_PLUGINS
    environment variable.
  * Remove support for custom ASCII event-file formats.
  * Use an immediate call to HepMC3::deduce_reader() in the file
    and stream opening; drop local attempts to deduce the file
    format.
  * Require HepMC3 &gt;= 3.2.0
  * Add variations on the discard/select utility functions to
    (particularly) discard single elements by equality rather than
    needing to provide a function.
  * Fixes in MC_TAU_Decay plot file, courtesy of George Marsden
  * Provide an implicit cast for FourVector and derived classes to
    PseudoJet, to avoid the incorrect conversion by PJ's template
    constructor.
  * Fix unit for Zjj inclusive runs in ATLAS_2017_I1627873
  * ATLAS_2019_I1746286: fix generator ctau description in the
    info file.
  * Fix memory leaks in binreloc.c and the merging-related method
    in AnalysisHandler.
  * Fix CMS_2015_I1346843 to allow FSR photons from muon decays
  * Add example analysis demonstrating use of an ONNX neural net.
  * Change/correct DressedLeptons behaviour to accept photons from
    prompt muons and taus. (Return to 2.x behaviour, accidentally
    reverted.)
  * Update ParticleIdUtils content to match latest MCUtils.
    Includes a serious speed-up (6x!) in PID digit decoding!
  * Allow linspace() and aspace() to make reversed edge-sets with
    start &gt; end.
  * Add powspace() and powdbnspace() uniform-spacing functions for
    power laws, and a generic _fnspace() function for any
    transform/inverse function-pair.
  * Fix couting of raw vs tmp histos when checking
    self-consistency of output file.
  * Replace regex_match with reg_search to pick up substring
    matches, too.
  * Fix bug in DELPHI_2011_I890503 and OPAL_2003_I599181, where
    the wrong decay chain was checked for weak decays.
  * Change configure script to use the --rpath=no option to
    fastjet-config, removing fragile path-hacking.
    build script.
  * Add reentrant marker to MC_DILEPTON.info
  * Make logger thread safe(r) by making ColorMap and LevelMap
  * thread_local.
  * Extend RivetLWTNN.hh to allow use of lwt::LightweightGraph
  * Enable Cython autoconversion from C++ strings to the
    appropriate str type for Python v2 and v3, eliminating many
    noisy and fragile explicit encode()/decode() calls.
  * Analyses of new experiments (long list, see
    /usr/share/doc/packages/Rivet-devel/ChangeLog).
- Drop Rivet-correct-python-platlib.patch: fixed upstream.
- ExcludeArch %ix86: i586 error due to conversion from
  `long long` to `size_t`.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- License correction based on the legaldb scan</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1693569600">- License: Change LPPL-1.3 to LPPL-1.3a according to spdx list.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 3.1.9:
  * Streamline definitions of a "temp" histogram
  * Account for 2pi boundaries when checking for zero angle
    in DISKinematics
  * Improvements to rivet-mkhtml output.
  * Add STAR_2014_I1253360 p + p -&gt; pi0 + X
  * Add missing analysis-object methods on Analysis: booking of
    Scatter1Ds, efficiency and asymmetry calculations for Counters
    and Histo2Ds.
  * Fix projection comparison for InvisibleFinalState
  * Add icon links to Inspire and HepData, escape HTML content in
    titles as Inspire has started recording MathML for maths.
  * Add a Matrix3::mkRotation(from, to) static factory function,
    for one-liner convenience.
  * Fix unit conversion in HepMC3 readEvent method
  * Fix CMS_2021_I1920187 to use size_t or unsigned int types in
    place of non-standard uint.
  * Remove logic that parses info file from AnalysisInfo constructor
    and only parse when an analysis is being specifically asked for.
  * Fix binary relocation in binrelo.c
  * Make rivet-mkhtml write HTML file before processing images.
  * Fix rivet-mkhtml-mpl autocomplete.
  * Explicitly import YODA and Projection base-class operator= into
    derived classes to silence new GCC13 warnings.
  * Turn parameters (cuts, jet radius, clustering algorithms etc)
    into Rivet options in several common MC analyses.
  * Bypass projection comparison during registration if
    RIVET_CACHE_PROJECTIONS is false.
  * Patch projection comparison for SmearedJets
  * Prevent bookeeping histos from acquiring analysis option
    on the fly as part of merging
- Add fix_HepMC_327_compat.patch
- Remove unused API doc build dependencies (doxygen, texlive etc.)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708344000">- Update to version 3.1.10:
  * Add CMS_2023_I2703254: ttbb in lepton+jets at 13 TeV
- Drop fix_HepMC_327_compat.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1742731200">- Update to version 3.1.11:
  * Streamline parsing of version codes for dependencies
  * Change Python build to use PY_LDFLAGS rather than
    LINKFORSHARED variable.
  * Update Logging to remove non-const static map of color codes,
    and add support for the CRITICAL level.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744200000">- Add Rivet-fix-hepmc-tests.patch -- Use deduce_reader in API
  tests for HepMC 3.3.x compatibility; part of upstream commit
  ca0d57ca to release-4-0-x development branch.
- Add Rivet-disable-testCmdLine.patch -- Disable an outdated and
  failing test</changelog>
</package>
<package pkgid="fe3c5628866a3dcefdc77fb97c903836af4cba66430bbad07193981c79217f820d8e562597648703fe55ed316cf5b96d60cc5966b2cb65d8f145a01b7a66191b" name="Rivet-plugins" arch="x86_64">
  <version epoch="0" ver="3.1.11" rel="bp160.1.17"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641556800">- Fix sed script for rpath removal from rivet-config.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 3.1.6:
  * Allow the rivet script's -p option to be given multiple times,
    or to contain a comma-separated list of files to load cf. the
  - a argument. readData() is called for each specified preload
    file, in order.
  * Add a pseudojets() method and automatic conversion operator to
    Particles.  It sets the user index so the constituents will
    match the indices of the particle or jet vector used as input.
  * Move the Jets and Particles definitions into the .hh headers.
  * Submission of CMS_2017_I1497519: Z boson in association with
    jets at 8 TeV.
  * Fall back to old calculation of y in DISKinematics if Q2 is
    zero.
  * Add MissingMom typedef for MissingMomentum.
  * Add vectorEt/PtMiss() and scalarEt/PtMiss() methods to
    MissingMomentum.
  * Use ThreeMomentum in MissingMomentum for the vectorPt() etc.
  * Add ThreeMomentum/P3 type with momentum-oriented method names,
    cf. FourVector-&gt;FourMomentum.
  * Add a pseudojets() method to the Jets container type.
  * Add BESIII_2022_I2047667 e+e- &gt; eta omega and omega pi0.
  * Add finalize-scaling protection in ATLAS_2020_1790256.
  * Add BESIII_2022_I2039027 e+e- &gt; pi+pi-eta.
  * Add BESIII_2022_I2033007 e+e-&gt; K+K-pi0.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 3.1.7:
  * Add HEPTopTagger interface (since made optional, with no-build
    example analysis).
  * Add EXAMPLE_NTUPLE_ROOT example analysis showing how to open
    and write to a ROOT ntuple file.
  * Add CMS_2021_I1866118: Z boson plus jets (DPS) at 13 TeV
  * Add EXAMPLE_NTUPLE_CSV example analysis showing how to open
    and write to a CSV ntuple file.
  * Add Analysis::analysisDataPath() and the RivetLWTNN.hh include
    with convenience functions for loading of LWTNN DNNs.
  * Add EXAMPLE_LWTNN example analysis, demonstrating use of a
    preserved LWTNN neural network in Rivet.
  * Install more generically named files from the analysis
    plugin/data dirs rather than limiting to the .plot, .info,
    .yoda* set.
  * Move EXAMPLE_* analyses, which demonstrate functionality to
    analysis writers rather than being directly useful in compiled
    form, into an uncompiled analyses/examples/ directory.
  * Hide the bundled eigen3 in a mangled RivetEigen namespace, to
    avoid clashes.
  * Submission of CMS_2022_I2079374: Z pT over a wide mass range
    at 13 TeV
  * Upgrade eigen3 and yaml-cpp bundling to remove compiler
    warnings.
- Add Rivet-correct-python-platlib.patch: Ensure consistent python
  platlib across different python versions.
- Split out data files common to C++ and Python bindings into
  separate package (Rivet-data) and have it required from both
  %{name}-devel and python3-%{name} packages.
- Run tests as part of %check section.
- Move sed fixes to hashbangs to %setup section, running them over
  scripts in source rather than on buildroot installed dirs to
  allow tests in %check to succeed.
- Drop fixes to pkgconfig script made during %setup as these are
  no longer needed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1689076800">- Update to version 3.1.8:
  * Append extra newlines to plugin sources in batched rivet-build.
  * Add ability to control the specific plugin library paths for
    analyses to be loaded from, via new programmatic set and get
    methods on AnalysisLoader and a new RIVET_ANALYSIS_PLUGINS
    environment variable.
  * Remove support for custom ASCII event-file formats.
  * Use an immediate call to HepMC3::deduce_reader() in the file
    and stream opening; drop local attempts to deduce the file
    format.
  * Require HepMC3 &gt;= 3.2.0
  * Add variations on the discard/select utility functions to
    (particularly) discard single elements by equality rather than
    needing to provide a function.
  * Fixes in MC_TAU_Decay plot file, courtesy of George Marsden
  * Provide an implicit cast for FourVector and derived classes to
    PseudoJet, to avoid the incorrect conversion by PJ's template
    constructor.
  * Fix unit for Zjj inclusive runs in ATLAS_2017_I1627873
  * ATLAS_2019_I1746286: fix generator ctau description in the
    info file.
  * Fix memory leaks in binreloc.c and the merging-related method
    in AnalysisHandler.
  * Fix CMS_2015_I1346843 to allow FSR photons from muon decays
  * Add example analysis demonstrating use of an ONNX neural net.
  * Change/correct DressedLeptons behaviour to accept photons from
    prompt muons and taus. (Return to 2.x behaviour, accidentally
    reverted.)
  * Update ParticleIdUtils content to match latest MCUtils.
    Includes a serious speed-up (6x!) in PID digit decoding!
  * Allow linspace() and aspace() to make reversed edge-sets with
    start &gt; end.
  * Add powspace() and powdbnspace() uniform-spacing functions for
    power laws, and a generic _fnspace() function for any
    transform/inverse function-pair.
  * Fix couting of raw vs tmp histos when checking
    self-consistency of output file.
  * Replace regex_match with reg_search to pick up substring
    matches, too.
  * Fix bug in DELPHI_2011_I890503 and OPAL_2003_I599181, where
    the wrong decay chain was checked for weak decays.
  * Change configure script to use the --rpath=no option to
    fastjet-config, removing fragile path-hacking.
    build script.
  * Add reentrant marker to MC_DILEPTON.info
  * Make logger thread safe(r) by making ColorMap and LevelMap
  * thread_local.
  * Extend RivetLWTNN.hh to allow use of lwt::LightweightGraph
  * Enable Cython autoconversion from C++ strings to the
    appropriate str type for Python v2 and v3, eliminating many
    noisy and fragile explicit encode()/decode() calls.
  * Analyses of new experiments (long list, see
    /usr/share/doc/packages/Rivet-devel/ChangeLog).
- Drop Rivet-correct-python-platlib.patch: fixed upstream.
- ExcludeArch %ix86: i586 error due to conversion from
  `long long` to `size_t`.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- License correction based on the legaldb scan</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1693569600">- License: Change LPPL-1.3 to LPPL-1.3a according to spdx list.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 3.1.9:
  * Streamline definitions of a "temp" histogram
  * Account for 2pi boundaries when checking for zero angle
    in DISKinematics
  * Improvements to rivet-mkhtml output.
  * Add STAR_2014_I1253360 p + p -&gt; pi0 + X
  * Add missing analysis-object methods on Analysis: booking of
    Scatter1Ds, efficiency and asymmetry calculations for Counters
    and Histo2Ds.
  * Fix projection comparison for InvisibleFinalState
  * Add icon links to Inspire and HepData, escape HTML content in
    titles as Inspire has started recording MathML for maths.
  * Add a Matrix3::mkRotation(from, to) static factory function,
    for one-liner convenience.
  * Fix unit conversion in HepMC3 readEvent method
  * Fix CMS_2021_I1920187 to use size_t or unsigned int types in
    place of non-standard uint.
  * Remove logic that parses info file from AnalysisInfo constructor
    and only parse when an analysis is being specifically asked for.
  * Fix binary relocation in binrelo.c
  * Make rivet-mkhtml write HTML file before processing images.
  * Fix rivet-mkhtml-mpl autocomplete.
  * Explicitly import YODA and Projection base-class operator= into
    derived classes to silence new GCC13 warnings.
  * Turn parameters (cuts, jet radius, clustering algorithms etc)
    into Rivet options in several common MC analyses.
  * Bypass projection comparison during registration if
    RIVET_CACHE_PROJECTIONS is false.
  * Patch projection comparison for SmearedJets
  * Prevent bookeeping histos from acquiring analysis option
    on the fly as part of merging
- Add fix_HepMC_327_compat.patch
- Remove unused API doc build dependencies (doxygen, texlive etc.)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708344000">- Update to version 3.1.10:
  * Add CMS_2023_I2703254: ttbb in lepton+jets at 13 TeV
- Drop fix_HepMC_327_compat.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1742731200">- Update to version 3.1.11:
  * Streamline parsing of version codes for dependencies
  * Change Python build to use PY_LDFLAGS rather than
    LINKFORSHARED variable.
  * Update Logging to remove non-const static map of color codes,
    and add support for the CRITICAL level.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744200000">- Add Rivet-fix-hepmc-tests.patch -- Use deduce_reader in API
  tests for HepMC 3.3.x compatibility; part of upstream commit
  ca0d57ca to release-4-0-x development branch.
- Add Rivet-disable-testCmdLine.patch -- Disable an outdated and
  failing test</changelog>
</package>
<package pkgid="af8e9f3f7d10bf4ddfa5bd674461395337ac83014093b8a6f0e0cb770b70c29a561194a512676bf72a2e460a6b58fc6ee949f3478db993cbe76c7e6533060082" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.2.10" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
    (jsc#PED-6403)
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
    (jsc#SAPSOL-133)
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
  <changelog author="abriel@suse.com" date="1730894400">- Version bump to 1.2.9
  * add SAPHanaSR-alert-fencing, an alert agent for cluster fencing
    alerts.
  * enhance SAPHanaController with the feature ON_FAIL_ACTION=fence
    This is part of the 'FAST-STOP' feature of the resource agents.
    (jsc#SAPSOL-196)
  * Improve handling of timeout return values for the resource
    agents
  * SAPHanaSR-showAttr - adding new option 'sitelist' and new
    output format 'csv' and 'cache'
  * new man page:
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-alert-fencing.8
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    SAPHanaTopology.7
    SAPHanaFilesystem.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susChkSrv.py.7
    susCostOpt.py.7
    SAPHanaSR-showAttr.8
- add additional requires for SLE16
  /usr/bin/sudo and /usr/bin/logger</changelog>
  <changelog author="abriel@suse.com" date="1741348800">- Version bump to 1.2.10
  * enhance virtual hostname detection.
    If the saphostagent fails to answer the ListInstances query
    additional use the &lt;sid&gt;adm user environment to get the virtual
    hostname.
    (bsc#1237473)
  * support hostnames containing dashes
    (bsc#1233972)
  * remove use of deprecated command crm_master, use crm_attribute
    with option '--promotion' instead
    With that change use '-INFINITY' instead of the short '-inf'
    for the score
  * try to recover lost transient cluster attributes
  * decline promote/takeover, if remote node is still member of the
    cluster but lost his score value.
    Membership check against pacemaker and not against corosync.
  * SAPHanaSR-hookHelper - on action fence, kill hana first to
    avoid call of the srConnectionStatusChanged event which would
    result on SFAIL in some cases
  * remove legacy tools added accidentally
    These tools were designed to work with our classic resource
    agents implementation and will fail on the new implementation
    using different attributes and logic.
  * new man page:
    SAPHanaSR-showAttr_properties.5
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR_upgrade_to_angi.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-hookHelper.8
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susTkOver.py.7
    susChkSrv.py.7
    SAPHanaSR-showAttr.8</changelog>
</package>
<package pkgid="1e5151f29e1f8839507e2f4e1881bbe0d41563b7a0b5658c67e89bc31688ff050ed7e347fff40419abf99f9eaa57b6e9f4dfd8aa4d2771a59c8f8ec0e996f74a" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.2.12" rel="160000.1.1"/>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
    (jsc#PED-6403)
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
    (jsc#SAPSOL-133)
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
  <changelog author="abriel@suse.com" date="1730894400">- Version bump to 1.2.9
  * add SAPHanaSR-alert-fencing, an alert agent for cluster fencing
    alerts.
  * enhance SAPHanaController with the feature ON_FAIL_ACTION=fence
    This is part of the 'FAST-STOP' feature of the resource agents.
    (jsc#SAPSOL-196)
  * Improve handling of timeout return values for the resource
    agents
  * SAPHanaSR-showAttr - adding new option 'sitelist' and new
    output format 'csv' and 'cache'
  * new man page:
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-alert-fencing.8
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    SAPHanaTopology.7
    SAPHanaFilesystem.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susChkSrv.py.7
    susCostOpt.py.7
    SAPHanaSR-showAttr.8
- add additional requires for SLE16
  /usr/bin/sudo and /usr/bin/logger</changelog>
  <changelog author="abriel@suse.com" date="1741348800">- Version bump to 1.2.10
  * enhance virtual hostname detection.
    If the saphostagent fails to answer the ListInstances query
    additional use the &lt;sid&gt;adm user environment to get the virtual
    hostname.
    (bsc#1237473)
  * support hostnames containing dashes
    (bsc#1233972)
  * remove use of deprecated command crm_master, use crm_attribute
    with option '--promotion' instead
    With that change use '-INFINITY' instead of the short '-inf'
    for the score
  * try to recover lost transient cluster attributes
  * decline promote/takeover, if remote node is still member of the
    cluster but lost his score value.
    Membership check against pacemaker and not against corosync.
  * SAPHanaSR-hookHelper - on action fence, kill hana first to
    avoid call of the srConnectionStatusChanged event which would
    result on SFAIL in some cases
  * remove legacy tools added accidentally
    These tools were designed to work with our classic resource
    agents implementation and will fail on the new implementation
    using different attributes and logic.
  * new man page:
    SAPHanaSR-showAttr_properties.5
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR_upgrade_to_angi.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-hookHelper.8
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susTkOver.py.7
    susChkSrv.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1763467200">- Version bump to 1.2.12
  * saphana_monitor needs to send OCF_NOT_RUNNING for PROBES,
    if the workload is down AND clone-flag is "DEMOTED".
    This allows crm_mon to show the proper (stopped) status.
    The monitor still needs to return OCF_SUCESS, if the workload
    is down AND the clone-flag is "DEMOTED" to tell the cluster to
    stop (formally) these clone instances.
    (bsc#1245661)
  * Enhance fencing behavior in case of FAST-STOP
    Trigger fencing when running into timeouts or getting lss==0
    In case of Scale-Out score the nameserver slave higher than a
    possible secondary takeover candidate to delay the takeover
    till the current primary is completely down
    (bsc#1250160)
  * SAPHanaSR-showAttr - support hostnames containing dashes
    (bsc#1236893)
  * Improvements of the tools for a better support of life and
    post mortem analysis.
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    susChkSrv.py.7
    susTkOver.py.7
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-manageProvider.8
    SAPHanaSR-replay-archive.8
    SAPHanaSR-showAttr.8
- Hint: Version 1.2.11 was used for a POC with some customers for
  some new changes. All changes of this 'internal' version are now
  integrated in this common released version 1.2.12</changelog>
</package>
<package pkgid="12ee2f27a3c9a3ac88be76b635e8f523b86aa9aaf1d43f8f7940b3ecefddd2d91c9b3b6e85358044bf35e53680e663fb4ac28675f562a7279770ef596eac50ff" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="160000.1.1"/>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
    (jsc#PED-6403)
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
    (jsc#SAPSOL-133)
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
  <changelog author="abriel@suse.com" date="1730894400">- Version bump to 1.2.9
  * add SAPHanaSR-alert-fencing, an alert agent for cluster fencing
    alerts.
  * enhance SAPHanaController with the feature ON_FAIL_ACTION=fence
    This is part of the 'FAST-STOP' feature of the resource agents.
    (jsc#SAPSOL-196)
  * Improve handling of timeout return values for the resource
    agents
  * SAPHanaSR-showAttr - adding new option 'sitelist' and new
    output format 'csv' and 'cache'
  * new man page:
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-alert-fencing.8
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    SAPHanaTopology.7
    SAPHanaFilesystem.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susChkSrv.py.7
    susCostOpt.py.7
    SAPHanaSR-showAttr.8
- add additional requires for SLE16
  /usr/bin/sudo and /usr/bin/logger</changelog>
  <changelog author="abriel@suse.com" date="1741348800">- Version bump to 1.2.10
  * enhance virtual hostname detection.
    If the saphostagent fails to answer the ListInstances query
    additional use the &lt;sid&gt;adm user environment to get the virtual
    hostname.
    (bsc#1237473)
  * support hostnames containing dashes
    (bsc#1233972)
  * remove use of deprecated command crm_master, use crm_attribute
    with option '--promotion' instead
    With that change use '-INFINITY' instead of the short '-inf'
    for the score
  * try to recover lost transient cluster attributes
  * decline promote/takeover, if remote node is still member of the
    cluster but lost his score value.
    Membership check against pacemaker and not against corosync.
  * SAPHanaSR-hookHelper - on action fence, kill hana first to
    avoid call of the srConnectionStatusChanged event which would
    result on SFAIL in some cases
  * remove legacy tools added accidentally
    These tools were designed to work with our classic resource
    agents implementation and will fail on the new implementation
    using different attributes and logic.
  * new man page:
    SAPHanaSR-showAttr_properties.5
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR_upgrade_to_angi.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-hookHelper.8
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susTkOver.py.7
    susChkSrv.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1763467200">- Version bump to 1.2.12
  * saphana_monitor needs to send OCF_NOT_RUNNING for PROBES,
    if the workload is down AND clone-flag is "DEMOTED".
    This allows crm_mon to show the proper (stopped) status.
    The monitor still needs to return OCF_SUCESS, if the workload
    is down AND the clone-flag is "DEMOTED" to tell the cluster to
    stop (formally) these clone instances.
    (bsc#1245661)
  * Enhance fencing behavior in case of FAST-STOP
    Trigger fencing when running into timeouts or getting lss==0
    In case of Scale-Out score the nameserver slave higher than a
    possible secondary takeover candidate to delay the takeover
    till the current primary is completely down
    (bsc#1250160)
  * SAPHanaSR-showAttr - support hostnames containing dashes
    (bsc#1236893)
  * Improvements of the tools for a better support of life and
    post mortem analysis.
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    susChkSrv.py.7
    susTkOver.py.7
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-manageProvider.8
    SAPHanaSR-replay-archive.8
    SAPHanaSR-showAttr.8
- Hint: Version 1.2.11 was used for a POC with some customers for
  some new changes. All changes of this 'internal' version are now
  integrated in this common released version 1.2.12</changelog>
  <changelog author="abriel@suse.com" date="1770033600">- Version bump to 1.3.0
  * Technology preview - Support for XSA standalone node
    in Mx-setup (one master, one XSA worker)
  * improve logging to SAP HANA trace file
    (gh#SUSE/SAPHanaSR#240; bsc#1257746)
  * improve HANA 'stop' logging
    (bsc#1257747)
  * improve srHook attribute logging
    (bsc#1257744)
  * stop lost slave workers, if master nameserver node crashed
    before promoting the secondary (score 101)
  * fix stop status for lost slave worker
    (bsc#1257747)
  * SAPHanaSR-alert-fencing could now restart a node without using
    cluster infrastructure (sysrq-trigger)
    So it's now crmsh agnostic
    (gh#SUSE/SAPHanaSR#291, but alternative implementation)
  * new man page
    SAPHanaSR-ScaleOut-XSA.7
  * update man pages:
    ocf_suse_SAPHanaFilesystem.7
    SAPHanaController-scale-out.7
    SAPHanaController-scale-up.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-angi.7
    SAPHanaSR-hookHelper.8
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR-showAttr.8
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    susHanaSR.py.7
  * update man pages - copyright date only:
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-replay-archive.8
    SAPHanaSR-show-hadr-runtimes.8
    SAPHanaSR-showAttr_properties.5
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.7
    susChkSrv.py.7
    susCostOpt.py.7
    susHanaSrMultiTarget.py.7
    susTkOver.py.7
- change required crmsh version from 4.4.0 to 4.4.2+20250526.46896f4</changelog>
</package>
<package pkgid="3f8f8c71c258f4d76013734ef38cd0d08de2e29f77bb0487226f664b1ef187c11cbfb1009230e21633a5bf208a814cfd0f1e5d0e519dc348e27f6f02ee17986a" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="160000.1.1"/>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-6402)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
  <changelog author="fabian.herschel@suse.com" date="1691496000">- Version bump to 1.2.0
  * SAPHanaFilesystem RA added (poc status)</changelog>
  <changelog author="abriel@suse.com" date="1702641600">- Version bump to 1.2.3
  * package is still in status 'technical preview'
  * SAPHanaFilesystem RA has still POC status
  * add parameter 'ON_FAIL_ACTION' to SAPHanaFilesystem RA (POC)
  * improve the usage of SAP virtual hostnames
  * if the susHanaSR.py hook has successfully reported a SR event
    to the cluster a still existing fall-back state file will be
    removed to prevent an override of an already reported
    SR state.
    (bsc#1215693)
  * improve supportability by providing the current process ID of
    the RA, which is logged in the RA outputs, to HANA tracefiles
    too.
    This allows a mapping of the SAP related command invocations
    from the RA and the HANA executions which might have a delay
    in between.
    (bsc#1214613)
  * avoid explicid and implicid usage of /tmp filesystem to keep
    the SAPHanaSR resource agents working even in situations with
    /tmp filesystem full.
    (bsc#1210728)
  * SAPHanaController: change default stop timeout from 3600 to 600
  * SAPHanaController: change default promote timeout from 3600 to
    900
  * try to make set_ and get_hana_attribute function more reliable
    by monitoring the result of the crm_attribute calls
  * fix typo in example srHook/global.ini_susHanaSR
  * fix missing trace section in example srHook/global.ini_susChkSrv
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susTkOver.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1715083200">- Version bump to 1.2.7
  * package SAPHanaSR-angi and SAPHanaFilesystem RA are now
    in state 'supported'
    (jsc#PED-6403)
  * add feature HANA 'FAST-STOP' and parameter 'ON_FAIL_ACTION'
    (jsc#SAPSOL-133)
  * new demo script SAPHanaSR-upgrade-to-angi-demo
  * added crm config examples
  * susHanaSR.py adapt syntax
  * Fix the hexdump log for empty node states
  * catch monitor calls for non-cloned resources and report them as
    unsupported instead of 'command not found'
    (bsc#1218333)
  * susChkSrv.py - relocate function logTimestamp()
  * susHanaSR.py - catch possible I/O error
  * security improvements
    (bsc#1218696, bsc#1218698 and bsc#1218699)
  * remove instance parameter "REMOVE_SAP_SOCKETS", no longer
    supported
  * add detailed timing log messages for runtime information
  * add cache/live value optimization
  * new man page:
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaFilesystem.7
    susChkSrv.py.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
    SAPHanaSR-replay-archive.8</changelog>
  <changelog author="abriel@suse.com" date="1730894400">- Version bump to 1.2.9
  * add SAPHanaSR-alert-fencing, an alert agent for cluster fencing
    alerts.
  * enhance SAPHanaController with the feature ON_FAIL_ACTION=fence
    This is part of the 'FAST-STOP' feature of the resource agents.
    (jsc#SAPSOL-196)
  * Improve handling of timeout return values for the resource
    agents
  * SAPHanaSR-showAttr - adding new option 'sitelist' and new
    output format 'csv' and 'cache'
  * new man page:
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-alert-fencing.8
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    SAPHanaTopology.7
    SAPHanaFilesystem.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    SAPHanaSR-upgrade-to-angi-demo.8
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    ocf_suse_SAPHanaFilesystem.7
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susChkSrv.py.7
    susCostOpt.py.7
    SAPHanaSR-showAttr.8
- add additional requires for SLE16
  /usr/bin/sudo and /usr/bin/logger</changelog>
  <changelog author="abriel@suse.com" date="1741348800">- Version bump to 1.2.10
  * enhance virtual hostname detection.
    If the saphostagent fails to answer the ListInstances query
    additional use the &lt;sid&gt;adm user environment to get the virtual
    hostname.
    (bsc#1237473)
  * support hostnames containing dashes
    (bsc#1233972)
  * remove use of deprecated command crm_master, use crm_attribute
    with option '--promotion' instead
    With that change use '-INFINITY' instead of the short '-inf'
    for the score
  * try to recover lost transient cluster attributes
  * decline promote/takeover, if remote node is still member of the
    cluster but lost his score value.
    Membership check against pacemaker and not against corosync.
  * SAPHanaSR-hookHelper - on action fence, kill hana first to
    avoid call of the srConnectionStatusChanged event which would
    result on SFAIL in some cases
  * remove legacy tools added accidentally
    These tools were designed to work with our classic resource
    agents implementation and will fail on the new implementation
    using different attributes and logic.
  * new man page:
    SAPHanaSR-showAttr_properties.5
  * update man pages:
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR_upgrade_to_angi.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-hookHelper.8
    susHanaSR.py.7
    susHanaSrMultiTarget.py.7
    susTkOver.py.7
    susChkSrv.py.7
    SAPHanaSR-showAttr.8</changelog>
  <changelog author="abriel@suse.com" date="1763467200">- Version bump to 1.2.12
  * saphana_monitor needs to send OCF_NOT_RUNNING for PROBES,
    if the workload is down AND clone-flag is "DEMOTED".
    This allows crm_mon to show the proper (stopped) status.
    The monitor still needs to return OCF_SUCESS, if the workload
    is down AND the clone-flag is "DEMOTED" to tell the cluster to
    stop (formally) these clone instances.
    (bsc#1245661)
  * Enhance fencing behavior in case of FAST-STOP
    Trigger fencing when running into timeouts or getting lss==0
    In case of Scale-Out score the nameserver slave higher than a
    possible secondary takeover candidate to delay the takeover
    till the current primary is completely down
    (bsc#1250160)
  * SAPHanaSR-showAttr - support hostnames containing dashes
    (bsc#1236893)
  * Improvements of the tools for a better support of life and
    post mortem analysis.
  * update man pages:
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaController-scale-up.7
    SAPHanaController-scale-out.7
    ocf_suse_SAPHana.7
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    susChkSrv.py.7
    susTkOver.py.7
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-manageProvider.8
    SAPHanaSR-replay-archive.8
    SAPHanaSR-showAttr.8
- Hint: Version 1.2.11 was used for a POC with some customers for
  some new changes. All changes of this 'internal' version are now
  integrated in this common released version 1.2.12</changelog>
  <changelog author="abriel@suse.com" date="1770033600">- Version bump to 1.3.0
  * Technology preview - Support for XSA standalone node
    in Mx-setup (one master, one XSA worker)
  * improve logging to SAP HANA trace file
    (gh#SUSE/SAPHanaSR#240; bsc#1257746)
  * improve HANA 'stop' logging
    (bsc#1257747)
  * improve srHook attribute logging
    (bsc#1257744)
  * stop lost slave workers, if master nameserver node crashed
    before promoting the secondary (score 101)
  * fix stop status for lost slave worker
    (bsc#1257747)
  * SAPHanaSR-alert-fencing could now restart a node without using
    cluster infrastructure (sysrq-trigger)
    So it's now crmsh agnostic
    (gh#SUSE/SAPHanaSR#291, but alternative implementation)
  * new man page
    SAPHanaSR-ScaleOut-XSA.7
  * update man pages:
    ocf_suse_SAPHanaFilesystem.7
    SAPHanaController-scale-out.7
    SAPHanaController-scale-up.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-angi.7
    SAPHanaSR-hookHelper.8
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR-showAttr.8
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    SAPHanaSR_upgrade_to_angi.7
    susHanaSR.py.7
  * update man pages - copyright date only:
    ocf_suse_SAPHanaController.7
    ocf_suse_SAPHanaTopology.7
    SAPHanaSR-manageProvider.8
    SAPHanaSR-replay-archive.8
    SAPHanaSR-show-hadr-runtimes.8
    SAPHanaSR-showAttr_properties.5
    SAPHanaSR-upgrade-to-angi-demo.8
    SAPHanaSR.7
    susChkSrv.py.7
    susCostOpt.py.7
    susHanaSrMultiTarget.py.7
    susTkOver.py.7
- change required crmsh version from 4.4.0 to 4.4.2+20250526.46896f4</changelog>
  <changelog author="abriel@suse.com" date="1781092800">- Version bump to 1.3.4
  * Technology preview - Support for DR passive cluster in scale-up
    performance-optimised setup
  * XSA standalone node in Mx-setup (one master, one XSA worker)
    is now in state 'supported'
  * new tool: SAPHanaSR-showStatus
    see man page SAPHanaSR-showStatus.8 for information
  * new man page:
    SAPHanaSR_multi-target.7
    SAPHanaSR_with_DR_HA.7
    SAPHanaSR_with_DR_HA_setup.7
    SAPHanaSR-showStatus.8
    SAPHanaSR-ScaleUp-CostOpt.7
    SAPHanaSR-ScaleUp-PerfOpt.7
  * update man pages:
    SAPHanaController-scale-out.7
    SAPHanaController-scale-up.7
    SAPHanaSR-ScaleOut-XSA.7
    SAPHanaSR-ScaleOut.7
    SAPHanaSR-ScaleOut_basic_cluster.7
    SAPHanaSR-angi-scenarios.7
    SAPHanaSR-angi.7
    SAPHanaSR.7
    SAPHanaSR_basic_cluster.7
    SAPHanaSR_maintenance_examples.7
    ocf_suse_SAPHanaTopology.7
    susCostOpt.py.7
    susHanaSR.py.7
    SAPHanaSR-alert-fencing.8
    SAPHanaSR-manageProvider.8
    SAPHanaSR-showAttr.8
- Hint: Versions 1.3.1, 1.3.2 and 1.3.3 were used for POCs with
  partners and a few customers for some new features.
  All changes of this 'internal' versions are now integrated in
  this common released version 1.3.4</changelog>
</package>
<package pkgid="c70b5a953d6e5181c6e4a04156855e0a1023ddf499214d6642c63a7bd3077d24645ae0d6819595b50351cc23259eae49235b3b4eed846bc7d862970d71282b82" name="SDL2-devel" arch="x86_64">
  <version epoch="0" ver="2.30.7" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1696680000">- Enable direct PipeWire support</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Update to release 2.28.5
  * Added support for the HP HyperX Clutch Gladiate controller
  * Fixed a crash if a controller is disconnected while SDL is
    opening it
  * Fixed a crash on Linux if XInput2 isn't available at runtime</changelog>
  <changelog author="jengelh@inai.de" date="1706875200">- Update to release 2.30
  * Added support for 2 bits-per-pixel indexed surface formats.
  * Added the function SDL_GameControllerGetSteamHandle() to get
    the Steam API handle for a controller, if available.
  * Added the event SDL_CONTROLLERSTEAMHANDLEUPDATED which is sent
    when the Steam API handle for a controller changes. This could
    also change the name, VID, and PID of the controller.
  * Added the environment variable SDL_LOGGING to control default
    log output.</changelog>
  <changelog author="jengelh@inai.de" date="1709726400">- Update to release 2.30.1
  * Fixed a regression causing SDL_WaitEvent() to return spurious
    failures
  * Wayland windows automatically have OpenGL enabled again
  * Fixed memory corruption when converting signed 16-bit audio
    to float
  * Fixed audio artifacts when converting signed 8-bit audio to
    float
  * Fixed the clip rectangle not being updated when the viewport
    changes in the SDL renderer</changelog>
  <changelog author="jengelh@inai.de" date="1712059200">- Update to release 2.30.2
  * Fixed performance regression initialing controllers on Linux
  * Added support for the 6-button SEGA Mega Drive Control Pad
    for Nintendo Online
  * Add support for MadCatz Saitek Side Panel Control Deck
  * Added support for the Hori Fighting Stick EX2
  * Added support for the Yawman Arrow flightstick
  * Added a gamepad mapping for the Defender Joystick Cobra R4
  * Fixed the gamepad mapping for the Sanwa Supply JY-P76USV
    controller
  * Allow using SDL_RWFromFile() with named pipes</changelog>
  <changelog author="jengelh@inai.de" date="1714564800">- Update to release 2.30.3
  * Fixed a pointer warping issue on XWayland
  * Reduced startup time when scanning for game controllers on Linux</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Update to release 2.30.4
  * Added support for the Saitek Cyborg V.3 Rumble Pad in PS3 mode
  * Added support for the Razer Kitsune in PS5 mode
  * Added Linux bindings for the Qanba Drone 2 Arcade Joystick
  * Leave Nintendo Online controllers in simple report mode so
    they work with DirectInput games
  * Enable using libusb for GameCube controllers when available</changelog>
  <changelog author="jengelh@inai.de" date="1723809600">- Update to release 2.30.6
  * Improved detection of Nintendo Switch Pro controller report mode
  * Fixed a rare crash when a controller is disconnected</changelog>
  <changelog author="alarrosa@suse.com" date="1724932800">- Don't build with fcitx support. fcitx support was just added
  because of a bug (boo#1025413) that could be fixed by building
  with fcitx support but upstream SDL2 developers fixed it
  in 2.0.5 when building without fcitx support too. Also fcitx
  support has always been disabled in SLE/Leap and in Factory
  it's built against fcitx 4.2.9.9, not the newer fcitx5 so
  let's disable it in order to reduce dependencies.</changelog>
  <changelog author="jengelh@inai.de" date="1725364800">- Update to release 2.30.7
  * Added support for the Retro-bit Controller in PS3 mode
  * Fixed the cursor becoming visible when using relative mode
    under XWayland
  * Fixed Direct Rendering Manager initialization failure on some
    Linux systems
  * Fixed a crash when the current mouse capture window is
    destroyed</changelog>
</package>
<package pkgid="76035da691aabaa113e3305358d9ea05044e76e222fe2808bacaf835bcdc58eed3b8cdef4793fa114f3364ecde5f33356efc403d239d05149b37ac08b5a63096" name="SDL2_Pango-devel" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="bp160.1.11"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674043200">- Initial package.</changelog>
</package>
<package pkgid="a7ad82cb0ea489faf8f5ededd36c57d834790fd3a6b2c2a8c2d69714e00c4efb10792a0e023982d71212aeca81844b16c291611d74fd4eae3b1d6d98b80b979d" name="SDL2_image-devel" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="bp160.1.14"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657281600">- Update to release 2.6.0
  * Added stb_image as the default backend for JPG and PNG images loading.
    To use libpng and libjpg instead, configure using --disable-stb-image
  * Added IMG_LoadSizedSVG_RW()
  * Added support for AVIF images (https://github.com/AOMediaCodec/libavif [github.com])
  * Added IMG_ReadXPMFromArrayToRGB888()
  * Added support for JXL images (https://jpegxl.info/ [jpegxl.info])
  * Added support for QOI images (https://qoiformat.org/ [qoiformat.org])
  * Fixed XCF regression introduced in 2.0.5
  * Added support for loading animated GIFs
  * LoadBMP() now loads files using SDL2
  * Allow using libwebpdecoder instead libwebp
- Remove CVE-2019-13616.patch (merged)
- Rename -devel subpackage based on SRPM name
- Drop baselibs.conf (no SDL2_ttf-dependent Tumbleweed packages
  themselves have baselibs).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1659355200">- Update to release 2.6.1
  * Fixing grayscale image loading using the built-in stb_image
    (openSUSE uses libjpg/libpng, not stb)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660996800">- Update to release 2.6.2
  * Build updates for non-Linux platforms
- Enable AVIF, JXL</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1662379200">- Add back Provides: SDL2_image = %version-%release to the library
  package: the python deps somewhat depend on that to not have to
  know about all soversion changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update to release 2.6.3
  * Fixed loading of 4-bit .ico files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1701777600">- Update to release 2.8.0
  * Updated image decoding libraries
  * Added support for loading WEBP animations
  * PNG images with a palette are loaded as SDL surfaces with a
    palette</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1702468800">- Update to release 2.8.1
  * Indexed PNG images with alpha have blending automatically enabled
  * Fixed a crash in the 32-bit webp DLLs on Windows</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1704110400">- Update to release 2.8.2
  * Fixed crash loading LBM images
  * Automatically set the colorkey for indexed PNG images with
    transparency</changelog>
</package>
<package pkgid="6d1c82a3ac53b6dddcf304246ae9f46a0edb4acafbaf744e81e2924b83a95441117cf95f9085acd155c5bc12a6480d014148029f5cdf34ce78af9979b3346697" name="SDL2_mixer-devel" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551787200">- Update to version 2.0.4
  * Removed smpeg support for mp3 music, now that it's replaced
    by libmpg123.
  * Fixed mp3 mad decoder to skip tags, which otherwise would lead
    to crashes.
  * Added support for Opus music playback using opusfile library.
- Update to version 2.0.3
  * Fixed regression where Mix_Init() would return 0 for available
    music formats.
- Remove patch:
  * SDL2_mixer-only-load-required-interfaces.patch (fixed by upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Demote Recommends to Suggests.</changelog>
  <changelog author="Tom Mbrt &lt;tom.mbrt@googlemail.com&gt;" date="1611230400">- Add 0001-use-after-free-fluidsynth.patch to prevent
  fluidsynth &gt;= 2.1.6 from crashing:
  https://hg.libsdl.org/SDL_mixer/rev/b0afe341a91d</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657368000">- Update to release 2.6.0
  * Added Mix_MasterVolume() for additional volume control over
    all channels
  * Update Mix_Init() return value to match documentation,
    including MIXER_INIT_* flags for already-initialized modules
  * Added Mix_HasMusicDecoder()
  * Memory leak fixes and F32 format support to fluidsynth player
  * Fixed distorted MIDI playback with FluidSynth if sample rate
    is out of library's limits
  * Added Mix_ModMusicJumpToOrder() for mod music formats
  * Fixes to ogg playback on big-endian devices
  * Added functions to get metadata information and loop point
    information (Mix_GetMusic*)
  * Extended support for WAV files
  * Allow rmid files be opened by native midi
  * Prevent clipping due to volume settings in modplug music
  * Added looping support for Opus, FLAC files
  * Improved OGG looping support
- Switch from libmodplug to libxmp as backend for tracker files
- Rename -devel subpackage based on SRPM name
- Drop 0001-use-after-free-fluidsynth.patch (merged)
- Drop baselibs.conf (no SDL2_mixer-dependent Tumbleweed packages
  themselves have baselibs).</changelog>
  <changelog author="munix9@googlemail.com" date="1658145600">- Update to release 2.6.1
  * This is a minor bug-fix release, fixing a packaging issue
    on Linux.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660996800">- Update to release 2.6.2
  * Build updates for non-Linux platforms</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update to release 2.6.3
  * Fixed tags memory leak in Opus music handling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1705838400">- Update to release 2.8
  * Added support for loading wavpack sound files, added support for
  loading classic console sound files using Game_Music_Emu
  * Added support for FLAC audio in Ogg containers
  * Added Mix_PauseAudio() to pause and resume all audio playback
  * Added Mix_GetNumTracks() and Mix_StartTrack() for managing
  tracks in GME files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706875200">- Link to libmpg123 again</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1722168000">- Reintroduce baselibs.conf [boo#1227467]</changelog>
</package>
<package pkgid="f9f81efa7d408e391c0ef6661c16268cd0d67327fa05866044db6e7604ca5b47c7b11cb9bf848cd502b371e7a715c20ca4d9777ef71f537dd33301800227c793" name="SDL2_net-devel" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="bp160.1.11"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_net package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533816000">- Update to 2.0.1
  * Use of SDL provided function rather then depending
    on system provided functions</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660910400">- Update to release 2.2.0
  * Build procedure updates only
- Rename devel package to just %name-devel, which is what most
  our packages do.
- Trim baselibs.conf, stop producing SDL2_net-devel</changelog>
</package>
<package pkgid="ff3227cc76b5cb0ec2132c416e51b056d2b551536dfc18255c30540e756f5017ad3f140d0342c402e204dab76e5051769cd66b4bd1e62c9470853d234cf4742f" name="SDL2_sound-devel" arch="x86_64">
  <version epoch="0" ver="2.0.2" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648296000">- New package SDL2_sound for build.opensuse.org. In comparison to
  SDL_sound (1.x):
  * Removed support for QuickTime, Speex and MikMod
  * SDL_sound 2's public API has not changed at all from 1.x
  * SDL_sound.h requires SDL2 now (can't mix SDL2_sound with SDL1)
  * The library name changed to -lSDL2_sound
- Drop SDL_sound-1.0.3-nompglib.patch, no longer applies
- Drop baselibs.conf</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Move to 2.0.1.g17 (df3fc77)
  * Resolve build failures on Leap 15.3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687694400">- Update to snapshot 2.0.1+g60 (53f66a30)
  * Avoid division by zero with certain uncompressed WAV files
  * A pkgconfig file was added</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Update to release 2.0.2
  * No further changes from the last snapshot 2.0.1+g60</changelog>
</package>
<package pkgid="9db53a2e00cbc09bda89c278b462c6c372ea06b783ecc447f090685073a7c0960f47b18647954fe4220510c08ea87246b0ce32f117aec8b585cb462fc828e48c" name="SDL2_ttf-devel" arch="x86_64">
  <version epoch="0" ver="2.24.0" rel="160000.2.2"/>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.13
  * Fixed bug rendering text starting with a glyph with negative starting offset
  * Fixed regression loading non-scalable fonts
  * TTF_GetFontKerningSize() gets kerning between two characters, not two glyph indices</changelog>
  <changelog author="aloisio@gmx.com" date="1477137600">- Update to version 2.0.14
  * Deprecated TTF_GetFontKerningSize() which takes font glyph
    indices and added TTF_GetFontKerningSizeGlyphs() which
    takes characters</changelog>
  <changelog author="jengelh@inai.de" date="1566561600">- Update to new upstream release 2.0.15
  * Text rendering functions now use the alpha component of the
    text colors.
  * Added support for characters greater than 0xFFFF (e.g. emoji)
    in the UTF-8 APIs.</changelog>
  <changelog author="jengelh@inai.de" date="1641988800">- Update to release 2.0.18
  * Added TTF_GetFreeTypeVersion() and TTF_GetHarfBuzzVersion()
  * Added support for Signed Distance Field rendering with
    TTF_SetFontSDF() and TTF_GetFontSDF()
  * Added optional DPI-scaling of fonts, with new functions.
  * Added 32-bit character support.
  * Added functions to set direction and script when using Harfbuzz.
  * Added extended API for text measurement.
  * Added TTF_SetFontSize() to set font size dynamically.
  * Added 'Shaded' and 'Solid' text wrapped functions.
  * Added TTF_HINTING_LIGHT_SUBPIXEL for better results at small
    text sizes at a performance cost</changelog>
  <changelog author="jengelh@inai.de" date="1657195200">- Update to release 2.20.0
  * Added TTF_GetFontWrappedAlign() and TTF_SetFontWrappedAlign()
    to set alignment on wrapped text
  * Added functions to render using FreeType LCD algorithm:
    TTF_RenderText_LCD(), TTF_RenderUTF8_LCD(),
    TTF_RenderUNICODE_LCD(), TTF_RenderText_LCD_Wrapped(),
    TTF_RenderUTF8_LCD_Wrapped(),
    TTF_RenderUNICODE_LCD_Wrapped(), TTF_RenderGlyph_LCD(),
    TTF_RenderGlyph32_LCD().
  * Added TTF_SetFontDirection() and TTF_SetFontScriptName() for
    additional control over fonts using HarfBuzz
  * Fix memory corruption loading malformed TTF files
    [CVE-2022-27470]
- Drop baselibs.conf (no SDL2_ttf-dependent Tumbleweed packages
  themselves have baselibs).</changelog>
  <changelog author="jengelh@inai.de" date="1660996800">- Update to release 2.20.1
  * Build updates for non-Linux platforms
- Rename devel package to just %name-devel, which is what most
  our packages do.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662379200">- Add back Provides: SDL2_ttf = %version to library package: the
  python bindings somewhat rely on the name to find the right
  library.</changelog>
  <changelog author="jengelh@inai.de" date="1675771200">- Update to release 2.20.2
  * Build system changes only</changelog>
  <changelog author="jengelh@inai.de" date="1705838400">- Update to relesae 2.22
  * Unspecified bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1735819200">- Update to release 2.24
  * Added function ``TTF_SetFontLineSkip()``</changelog>
</package>
<package pkgid="42a608a86bb4feb19d87c0bf0e50b6d7011bfdafa2bb5548704bacfffd860afefe7d750c30a7c3622b8da04c491ecd163af70d9c2e9d6f527159de2230e883fe" name="SDL3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.18" rel="bp160.1.3"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1738929600">- Update to release 3.2.4
  * Fixed decoding 4-bit RLE encoded BMP files
  * Fixed setting the position of X11 windows before they are shown
  * Fixed D-Pad not working when using SDL2 controller mappings
  * Fixed SDL_OpenHapticFromJoystick() not returning a valid
    haptic handle
  * Added SDL_StretchSurface() as a replacement for SDL2
    SDL_SoftStretch() and SDL_SoftStretchLinear()
  * Fixed several memory leaks</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740484800">- Add 0001-pipewire-Ensure-that-the-correct-struct-is-used-for-.patch
  for pipewire-1.3.x</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740916800">- Update to release 3.2.6
  * Added support for Motion JPEG camera capture
  * Allow 2D render targets to use logical presentation
  * Fixed audio glitch when resampling between large frequency
    differences
  * Fixed pen generated mouse events not having SDL_PEN_MOUSEID
  * Added support for the 8BitDo Micro gamepad
  * Added SDL_HINT_JOYSTICK_HAPTIC_AXES to specify how many haptic
    axes a device has
  * Fixed SDL_GetRelativeMouseState() returning no motion when not
    in relative mouse mode
  * Added SDL_PROP_SURFACE_HOTSPOT_X_NUMBER and
    SDL_PROP_SURFACE_HOTSPOT_Y_NUMBER to allow storing cursor
    hotspot positions directly in an SDL_Surface
  * Added support for high DPI icons on Wayland
  * Added color management protocol support on Wayland
  * Fixed flushing audio forever in some cases when recording
    PulseAudio on Linux
  * Fixed a rare deadlock when opening an audio device using
    PipeWire on Linux
- Delete 0001-pipewire-Ensure-that-the-correct-struct-is-used-for-.patch
  (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1741176000">- Update to release 3.2.8
  * Fixed a bug restoring the desktop mode on X11
  * Fixed being unable to get message box fonts on some Linux systems
  * Fixed a potential crash unplugging a HIDAPI controller
  * Fixed the 2D clip rect when logical presentation is enabled</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1741953600">- Trim extraneous X11 dependencies from SDL3-devel [boo#1239635]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1743508800">- Update to release 3.2.10
  * Added support for SDL_PIXELFORMAT_MJPG to SDL_DuplicateSurface()
  * Added SIMD blitters for 8888 to 8888 swizzled format conversion
  * Added mappings for the Nintendo Switch Online N64/SEGA/SNES
    controllers on Linux
  * Added SDL_HINT_VIDEO_X11_EXTERNAL_WINDOW_INPUT to control
    whether XSelectInput() should be called on external windows</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1746446400">- Update to release 3.2.12
  * Fixed crash if SDL_BlitSurfaceScaled() is used with a surface
    that has no pixels
  * Allow rendering a zero sized source rectangle in the SDL render
    API
  * Added support for the share button on the GameSir-K1 FLUX
    controller
  * Added support for the PowerA Battle Dragon Advanced Wireless
    Controller
  * Added support for the HORI Taiko No Tatsujin Drum Controller
  * Fixed the Keychron K1 Pro System Control keyboard being
    detected as a joystick
  * Fixed right mouse button emulation when using a Wacom tablet in
    Windows Ink mode
  * Fixed missing simulated mouse events using a Wacom tablet when
    Windows Ink mode is disabled
  * Key events are now sent for dead keys on X11
  * Improved handling of window management edge conditions on X11
  * Fixed message box location on multi-monitor configurations on
    X11
  * Fixed XInput2 mouse tracking outside the window on X11</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1747224000">- Update to release 3.2.14
  * Fixed crash querying the name of logical audio devices.
  * Fixed thread-local storage related black screen issue when
    pulseaudio audio output is active.
  * Reverted dead key reporting on X11, which introduced bugs with
    IME handling.
  * Fixed incorrect destination usage mode for storage buffer
    read/write bindings on Vulkan.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1748952000">- Update to release 3.2.16
  * Fixed a rare crash in SDL_WaitEvent()
  * Fixed entering fullscreen mode on some X11 window managers
  * Fixed hang processing mouse input on Wayland
  * Fixed occasionally corrupt text input on Wayland
  * Respect the application text input area on Wayland</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1752494400">- Update to release 3.2.18
  * Added SDL_PROP_WINDOW_CREATE_CONSTRAIN_POPUP_BOOLEAN to support
    non-constrained and non-grabbing popups
  * Fixed a crash in SDL_GetAudioDeviceChannelMap()
  * Fixed duplicate mouse events when using a pen under X11
  * Improved thumbstick range for Nintendo Switch Pro Controllers
  * Fixed loading user calibration for Nintendo Switch Pro
    Controllers
  * Added support for the ZEROPLUS P4 Wired Gamepad
  * Fixed input from the MayFlash GameCube adapter with version 7
    firmware</changelog>
</package>
<package pkgid="0a23e9b7295ae461803a84ffc5d9d6c02877869fdca2ff0ae095ed843cf2ebfc7d69b67c3e99cf9cd649eda1a42a7ce19d630d48d0316bbb7ec66611eeadcf2d" name="SDL3-devel-doc" arch="noarch">
  <version epoch="0" ver="3.2.18" rel="bp160.1.3"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1738929600">- Update to release 3.2.4
  * Fixed decoding 4-bit RLE encoded BMP files
  * Fixed setting the position of X11 windows before they are shown
  * Fixed D-Pad not working when using SDL2 controller mappings
  * Fixed SDL_OpenHapticFromJoystick() not returning a valid
    haptic handle
  * Added SDL_StretchSurface() as a replacement for SDL2
    SDL_SoftStretch() and SDL_SoftStretchLinear()
  * Fixed several memory leaks</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740484800">- Add 0001-pipewire-Ensure-that-the-correct-struct-is-used-for-.patch
  for pipewire-1.3.x</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740916800">- Update to release 3.2.6
  * Added support for Motion JPEG camera capture
  * Allow 2D render targets to use logical presentation
  * Fixed audio glitch when resampling between large frequency
    differences
  * Fixed pen generated mouse events not having SDL_PEN_MOUSEID
  * Added support for the 8BitDo Micro gamepad
  * Added SDL_HINT_JOYSTICK_HAPTIC_AXES to specify how many haptic
    axes a device has
  * Fixed SDL_GetRelativeMouseState() returning no motion when not
    in relative mouse mode
  * Added SDL_PROP_SURFACE_HOTSPOT_X_NUMBER and
    SDL_PROP_SURFACE_HOTSPOT_Y_NUMBER to allow storing cursor
    hotspot positions directly in an SDL_Surface
  * Added support for high DPI icons on Wayland
  * Added color management protocol support on Wayland
  * Fixed flushing audio forever in some cases when recording
    PulseAudio on Linux
  * Fixed a rare deadlock when opening an audio device using
    PipeWire on Linux
- Delete 0001-pipewire-Ensure-that-the-correct-struct-is-used-for-.patch
  (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1741176000">- Update to release 3.2.8
  * Fixed a bug restoring the desktop mode on X11
  * Fixed being unable to get message box fonts on some Linux systems
  * Fixed a potential crash unplugging a HIDAPI controller
  * Fixed the 2D clip rect when logical presentation is enabled</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1741953600">- Trim extraneous X11 dependencies from SDL3-devel [boo#1239635]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1743508800">- Update to release 3.2.10
  * Added support for SDL_PIXELFORMAT_MJPG to SDL_DuplicateSurface()
  * Added SIMD blitters for 8888 to 8888 swizzled format conversion
  * Added mappings for the Nintendo Switch Online N64/SEGA/SNES
    controllers on Linux
  * Added SDL_HINT_VIDEO_X11_EXTERNAL_WINDOW_INPUT to control
    whether XSelectInput() should be called on external windows</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1746446400">- Update to release 3.2.12
  * Fixed crash if SDL_BlitSurfaceScaled() is used with a surface
    that has no pixels
  * Allow rendering a zero sized source rectangle in the SDL render
    API
  * Added support for the share button on the GameSir-K1 FLUX
    controller
  * Added support for the PowerA Battle Dragon Advanced Wireless
    Controller
  * Added support for the HORI Taiko No Tatsujin Drum Controller
  * Fixed the Keychron K1 Pro System Control keyboard being
    detected as a joystick
  * Fixed right mouse button emulation when using a Wacom tablet in
    Windows Ink mode
  * Fixed missing simulated mouse events using a Wacom tablet when
    Windows Ink mode is disabled
  * Key events are now sent for dead keys on X11
  * Improved handling of window management edge conditions on X11
  * Fixed message box location on multi-monitor configurations on
    X11
  * Fixed XInput2 mouse tracking outside the window on X11</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1747224000">- Update to release 3.2.14
  * Fixed crash querying the name of logical audio devices.
  * Fixed thread-local storage related black screen issue when
    pulseaudio audio output is active.
  * Reverted dead key reporting on X11, which introduced bugs with
    IME handling.
  * Fixed incorrect destination usage mode for storage buffer
    read/write bindings on Vulkan.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1748952000">- Update to release 3.2.16
  * Fixed a rare crash in SDL_WaitEvent()
  * Fixed entering fullscreen mode on some X11 window managers
  * Fixed hang processing mouse input on Wayland
  * Fixed occasionally corrupt text input on Wayland
  * Respect the application text input area on Wayland</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1752494400">- Update to release 3.2.18
  * Added SDL_PROP_WINDOW_CREATE_CONSTRAIN_POPUP_BOOLEAN to support
    non-constrained and non-grabbing popups
  * Fixed a crash in SDL_GetAudioDeviceChannelMap()
  * Fixed duplicate mouse events when using a pen under X11
  * Improved thumbstick range for Nintendo Switch Pro Controllers
  * Fixed loading user calibration for Nintendo Switch Pro
    Controllers
  * Added support for the ZEROPLUS P4 Wired Gamepad
  * Fixed input from the MayFlash GameCube adapter with version 7
    firmware</changelog>
</package>
<package pkgid="8ef23cef95c75c9392f78603f9aeaf3a194efb9f0cb573cd2785ee6f7292b920e3870e5afa904a0c9f9b5e6f52e0c4ac57bf9f656a4f0683fa1d7284aa1a8749" name="SDL3_image-devel" arch="x86_64">
  <version epoch="0" ver="3.2.4" rel="bp160.1.3"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1738411200">- Initial package (version 3.2.0) for build.opensuse.org
  * This is the SDL image loading library as before, but updated
    for SDL 3.0. The API is largely the same, with IMG_Init() and
    IMG_Quit() no longer necessary and *_RW() functions renamed
  * _IO().</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740916800">- Update to release 3.2.2
  * Fixed partial alpha in ICO and CUR images
  * Set the cursor hotspot properties when loading CUR images so
    they can be directly passed to SDL_CreateColorCursor()
  * Fixed reading beyond the end of the PNG image when using
    stb_image</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1741003200">- Update to release 3.2.4
  * Fixed alpha in less-than-32-bit ICO and CUR images</changelog>
</package>
<package pkgid="209f5b4435d0be397c5b7e4bc4d36eeef3fa278c15fd5e811d69f59bd083e7e685ae31ff0fbb6550815d478d58dde344bcd4805121018e46a85a728b0b1a76c0" name="SDL3_ttf-devel" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="bp160.1.3"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1738411200">- Initial package (version 3.1.0) for build.opensuse.org
  * SDL_ttf, but updated for a SDL 3.0 base
  * Added the concept of a text object and text engine, which is
    able to efficiently render text for a variety of output
    methods
  * Added TTF_CreateSurfaceTextEngine() and TTF_DrawSurfaceText()
    for drawing text to SDL_Surface output
  * Added TTF_CreateRendererTextEngine() and
    TTF_DrawRendererText() for drawing text to SDL_Renderer
    output
  * Added TTF_CreateGPUTextEngine() and TTF_GetGPUTextDrawData()
    for drawing text to SDL_GPU output
  * Made the text engine API public in
    &lt;SDL3_ttf/SDL_textengine.h&gt; so you can integrate text objects
    into custom font display solutions
  * Added TTF_CopyFont() to allow you to easily make fonts of
    different sizes
  * Added TTF_AddFallbackFont() to allow combining fonts with
    distinct glyph support
  * Added support for OT-SVG fonts, which are useful as fallback
    fonts for color emoji support
  * Updated SDF font support and added an example of using it
    with the SDL GPU API</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1740139200">- Update to release 3.1.2
  * No changelog was provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1743422400">- Update to release 3.2.2
  * Added TTF_GetFontWeight()</changelog>
</package>
<package pkgid="7a1f7cce1f36bbdea8c23aa8fba771894e17cee8d1f3fb1dbd30f8c3ab166fa5a145c660b2867c7cabf8996467b1241e6bfc0e9a9843665d057f5376db685bc5" name="SDL_Pango-devel" arch="x86_64">
  <version epoch="0" ver="0.1.2" rel="bp160.1.11"/>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libSDL_Pango-devel to baselibs
- Remove reundant tags/ssections</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Remove fontconfig-devel freetype2-devel which are not
  really BuildRequired.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366200000">- Add libtool BuildRequires and call to autoreconf: even though we
  don't have any patches, we need to bootstrap, as the ancient
  ./libtool in the tarball (version 1.5) fails to work on recent
  Builders, resulting in linker errors.</changelog>
  <changelog author="jengelh@inai.de" date="1384171200">- Set RPM groups to the same values as on the main SDL packages</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Use pkgconfig() symbols for pulling in BuildRequires</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1557576000">- Add cairo as dependency for pango (fixes Factory build)
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1557576001">- Remove --with-pic (ineffective with --disable-static)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652875200">- Remove baselibs.conf, nothing appears to be using it.
- Change -devel subpackage to be based on SRPM/project name.
- Use pkgconfig(sdl) to build with sdl12_compat.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1724241600">- Add gcc14.patch</changelog>
</package>
<package pkgid="7747dedcd2302b150f584ede95ce9e209b5d2ba24979ef815c76f648c5e0c8ee9b57aeabb1fe5b3fc8674e79b5a1d63f2b093e578bf4748f96e446d1b8386351" name="SDL_mixer-devel" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_mixer-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Do not use dlopened libraries _ever_.</changelog>
  <changelog author="mailaender@opensuse.org" date="1361707200">- Update to 1.2.12
  * SDL_mixer is now under the zlib license
  * Fixed seek offset with SMPEG (was relative, should be absolute)
  * Added Mix_LoadMUSType_RW() so you can tell SDL_mixer what type the music is
  * Added /usr/local/share/timidity to the timidity data path
  * Fixed timidity loading of some MIDI files
  * Fixed dropping audio in the FLAC audio decoding
  * Fixed memory leak in SDL_LoadMUS()
  * Removed GPL native MIDI code for new licensing
  * Fixed drums playing on MIDI channel 16 with timidity
  * The music-finished hook can start a track immediately
  * Added support for FluidSynth
  * Added support for libmodplug (disabled by default)</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list</changelog>
  <changelog author="bwiedemann@suse.com" date="1385208000">- import patches from https://projects.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/sdl_mixer
  to fix mixer / mikmod free corruption (bnc#851996)
  Add double-free-crash.patch, mikmod1.patch and mikmod2.patch</changelog>
  <changelog author="jengelh@inai.de" date="1420545600">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.
- Enable modplug support</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660996800">- Specfile modernization
- Rename devel package to just %name-devel, which is what most
  our packages do.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1724241600">- Add gcc14.patch</changelog>
</package>
<package pkgid="a0f56f7ae9aa387d554dd11d150d6f49414edd12cc66e2464be9a5ff7b77b360f83f62504cf662e6c6efd63cd0dfa74dfb82e2c54b899ca6f36ed00e14d8b389" name="SDL_net-devel" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="bp160.1.11"/>
  <changelog author="prusnak@suse.cz" date="1242820800">- follow Shared Library Policy</changelog>
  <changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
  <changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_net-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="prusnak@opensuse.org" date="1376395200">- updated to 1.2.8
  * Added the definition for INADDR_LOOPBACK
  * Added an Xcode project for iOS
  * SDL_net is now under the zlib license
  * Added SDLNet_UDP_SetPacketLoss() to simulate random packet loss
  * Added SDLNet_GetLocalAddresses() to query local interfaces
  * Removed obsolete OpenTransport code
  * Added Android.mk to build on the Android platform
  * Fixed to compile cleanly with g++
  * Fixed the code to use socklen_t where appropriate
  * Added pkg-config support
  * Fixed C++ compilation with -Wold-style-cast
  * Enable multicast receiving on 224.0.0.1 on Windows (already worked on UNIX)</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1724241600">- Rename devel package to just %name-devel, which is what most
  openSUSE's packages do.</changelog>
</package>
<package pkgid="d1a80b4070edcfb3f279b31f864e54d6d1d4466fb44c44d325435fa966b832774eb111648fc5e8d611599d9280f88481894875371a9e78c72f64812cf8e04d4d" name="SDL_sound-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="bp160.1.13"/>
  <changelog author="jengelh@medozas.de" date="1264593600">- package baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_sound-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- BuildRequire pkgconfig(libmodplug)</changelog>
  <changelog author="jengelh@inai.de" date="1384171200">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Deactivate physfs support. SDL_sound only supports physfs &lt; 3.x,
  and the distro moved on.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648641600">- Drop baselibs.conf, nothing really needs SDL_sound anymore.
- Rename devel package to just %name-devel, which is what most
  our packages do (as does Fedora).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1652875200">- Switch to pkgconfig(sdl) to build with sdl12_compat.</changelog>
</package>
<package pkgid="f8df60ba492f839a80cf91afe6a79334e33cfdd5bccf86357efdc39a0abeac90dbd85c97bc56d6ebbdfa17dca8742ec3ad082ce9fcf189bc50fd22f5d89cd2e2" name="SHERPA-MC-devel" arch="x86_64">
  <version epoch="0" ver="2.2.15" rel="bp160.1.3"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Update source URL.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 2.2.10:
  * Further improvements for Rivet3 and HepMC3 compatibility
    [!321, !314].
  * Bugfix for crashes with new heavy-flavour shower evolution
    schemes [!313].
  * Bugfix for crash in ReweightWithoutSubevents [!318].
  * Bugfix for documentation signal blob with pre-NLO+PS
    kinematics [!320].
  * Bugfix for crash in setups with neutron beams [!312].
  * More robust discovery of HZTool and HepMC3 ROOT IO libraries
    [!317, !322, !323].
- Changes from version 2.2.9: See
  https://gitlab.com/sherpa-team/sherpa/-/tags/v2.2.9.
- Build with Rivet support (BuildRequires: Rivet-devel).
- Fix some incorrect Provides and Obsoletes in subpackages.
- Execute hashbang cleanup on source files instead of acting on
  installed files in %{buildroot}.
- Run spec-cleaner for minor formatting cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591185600">- Drop post(un) install-info scripts for devel pkg, these are
  handled by rpm file triggers; also drop the appropriate
  dependencies.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1606305600">- Add SHERPA-MC-build-with-recent-glibc.patch to fix builds
  against recent glibc; patch taken from upstream git.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613390400">- Update to version 2.2.11:
  * Improvements in ME+PS merging for unordered scale
    configurations !381
  * New NLO_SUBTRACTION_SCHEME option for improved behavior of the
    parton shower in processes with large higher-order
    contributions from t-channel gluon exchange !382
  * Additional power corrections to better match soft limit !394
  * Implement csin2_thetaW for SMEFTsim !319
  * Exponentiation version of EWvirt corrections !348
  * Phase space enhancing with function for unweighted event
    generation (Enhance_Function) !357 !379
  * Rivet interface improvements: zipped YODA files (!374) and
    split pos/neg weights (!376)
  * Runtime issues
  - Bugfix in Comix for models with vertices with negative
    coupling orders !327
  - Bugfixes for crashes with new SPECIAL_TAU_SPIN_CORRELATIONS
    option !335 !362
  - Bugfix for crash with spin correlations in ttll setups !388
  - Bugfixes for non-standard KFACTOR treatments !352
  * Compilation issues
  - Fix build problem with very new glibc !328
  - Updated swig requirement for python interface to 2.0.12 !342
  - Improvements in HepMC3 linking !380
  - MCFM interface fixes !389
- Drop SHERPA-MC-build-with-recent-glibc.patch: incorporated
  upstream.
- Add BuildRequires: libtool needed for building swig-based
  bindings for updated version.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638878400">- Update to version 2.2.12:
  * Significant speed-up of (partially) unweighted event
    generation with on-the-fly variations enabled, e.g. for many
    PDF variations or implicitly when EWvirt associated
    contributions are evaluated !410
  * New option to perform (significantly faster) uncorrelated
    mc@nlo matching after unweighting, enabled by flag
    NLO_CSS_PSMODE: 2 !410
  * Further performance improvements !410
  * New MCFM interface (bd3e25ad, TODO: @shoeche to provide more
    info) !409
  * CSS improvements (efcffda4, TODO: @shoeche to provide more
    info) !410
  * New output options steered through BATCH_MODE !410 (see Manual
    for additional information):
  - 8 prints the current process name,
  - 16 prints the time elapsed/left in unformatted seconds
  * Runtime issues: Fix compatibility issue when using binary
    relocation after installation !453
  * Improve compatibility with autoconf 2.70 or later (in
    particular when building process libraries without scons) !396
  * Fix MadLoop 5 interface add-on installation
  * Fix Recola interface add-on compilation !410</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1655899200">- Add SHERPA-MC-ignore-distutils-deprecation-warning.patch:
  Disable deprecation warning when importing distutils from
  python3.10, so that autotools checks can still work.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1656590400">- Add Git-Clone URL</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1711886400">- Update to version 2.2.15:
  * Fix for fixed-order NLO results (enabled using QCD_NLO_Mode:
    Fixed_Order).
- Changes from version 2.2.14:
  * Fix: Reinstate clustering in OneHEvent to fix physics issue.
- Changes from version 2.2.13:
  * New:
  - Expand pilot technology to scale setting (using the new
    PILOT scale setter) and to loop generators (using the
    process Pilot_Loop_Generator setting) !564 !461
  - Allow to not read in partonic decay data, e.g. if one wants
    to select a single B or D decay !537
  * Technical/performance improvements:
  - Make sure that HepMC3 output only correctly reports two beam
    particles !572
  - Use consistent order of weight names in HepMC3 output as in
    HepMC2 output !459
  - Resurrect HepMC3_Short output format !512
  - Adapt pilot run strategy to be compatible with (adapted)
    external RNG !497
  - Fix memory leak in fusing hooks !403
  * Fixes of runtime issues:
  - Fix for missing tau spin correlations !574
  - Fix crash when using a neutron-neutron beam setup !553
  - Fix PDF book-keeping issues in the event output when using
    the pilot run !508 !532
  - Fix potential unit (e.g. MeV vs. GeV) inconsistency for
    correlated subevents !512
  - Throw exception instead of silently reweighting AlphaS input
    scales where it is not appropriate !455
  - Fix crash when using weighted event generation without any
    on-the-fly variations !473
  - Reset non-perturbative event phases after Retry_Event,
    removing the occurence of spurious tau decays !526
- Add SHERPA-MC-swig-noruntime.patch: Drop `-noruntime` from swig
  command line as it has been deprecated since version 4.0 and
  dropped from 4.2.x.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1742817600">- Add BuildRequires on python3-setuptools, required for Python 3.12+.</changelog>
</package>
<package pkgid="1c83ed2178512510ed4daaacc1dcf66d60b457243160543c25ad81578caad39310c52c8b561b6f634084233d12fa4efdac7b772875c08550dd3c13baf84c653d" name="SQLiteCpp-devel" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="bp160.1.14"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704542400">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714046400">- Use c++14 standard to build, to avoid build failures against
  gtest &gt;= 1.14</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1723896000">- Update to version 3.3.2:
  * Explicitly =delete; Statement::bindNoCopy(..., std::string&amp;&amp;)
    (gh#SRombauts/SQLiteCpp#469).
  * Update SQLite from 3.43.0 to 3.45.3 (2024-04-15)
    (gh#SRombauts/SQLiteCpp#461).
  * Update SQLite from 3.45.3 to 3.46.1 (2024-08-13)
    (gh#SRombauts/SQLiteCpp#477).
  * Update SQLiteCpp meson wrap file to latest release 3.3.1
    (gh#SRombauts/SQLiteCpp#447).
  * [Meson] update meson dependencies
    (gh#SRombauts/SQLiteCpp#448).
  * Update meson dependencies [Meson only]
    (gh#SRombauts/SQLiteCpp#475).</changelog>
</package>
<package pkgid="4d711c6c2e0f59ddd985e1652188f9afed599c626030b1a3f3e07d608e739f6516e84efa9be93e40dda966a3c05f7d83385608ab012a7acfd22d3227f5acc924" name="SVT-AV1" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1699012800">- Update to release 1.7.0
  * Encoder:
  * Improve the tradeoffs for the random access mode across
    presets MR-M13
  * Quality improvements across all presets and metrics ranging
    from 0.3% to 4.5% in BD-rate
  * Added an experimental tune SSIM mode yielding ~3-4%
    additional SSIM BD-rate gains</changelog>
  <changelog author="jengelh@inai.de" date="1702382400">- Update to release 1.8.0
  * Improve the tradeoffs for the random access mode across presets:
  * Speedup CRF presets M6 to M0 by 17-53% while maintaining
    similar quality levels
  * Re-adjust CRF presets M7 to M13 for better quality with BD-rate
    gains ranging from 1-4%
  * Improve the quality and speed of the 1-pass VBR mode
  * Add API allowing to update bitrate / CRF and Key_frame
    placement during the encoding session for CBR lowdelay mode and
    CRF Random Access mode
  * ARM Neon SIMD optimizations for most critical kernels allowing
    for a 4.5-8x fps speedup vs the c implementation</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 2.0
  * Changed the API signaling the End Of Stream (EOS) with the
    last frame vs with an empty frame
  * Removed the 3-pass VBR mode which changed the calling
    mechanism of multi-pass VBR
  * Improve the tradeoffs for the random access mode across
    presets:
  * Improved the compression efficiency of presets M9-M13 by 1-4%
  * Replaced the 3-pass VBR with a 2-pass VBR
  * Memory savings of 20-35% for LP 8 mode in preset M6 and below
    and 1-5% in other modes/presets</changelog>
  <changelog author="jengelh@inai.de" date="1716206400">- Update to release 2.1
  * Presets 6 and 12 are now pointing to presets 7 and 13
    respectively due to the lack of spacing between the presets.
  * Added variance boost support to improve visual quality for
    the tune vq mode.
  * Speedup of 12–40% presets M0, M3, M5 and M6 while maintaining
    similar quality levels.
  * Improved the compression efficiency of presets M11-M13 by 1-2%.</changelog>
  <changelog author="jengelh@inai.de" date="1719316800">- Update to release 2.1.1
  * Removed the SVT-AV1 Decoder portion of the project.
  * Improved documentation.</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- update to 2.1.2:
  * Cleanup, bug fixes:
  * Fixed profile-guided-optimization build by removing the
    remaining decoder path</changelog>
  <changelog author="jengelh@inai.de" date="1724068800">- Update to release 2.2.0
  * Improve the tradeoffs for the random access mode across presets:
  * Speedup of ~15% across presets M0 - M8 while maintaining
    similar quality levels
  * Improve the tradeoffs for the low-delay mode across presets
  * Increased temporal resolution setting to 6L for 4k
    resolutions by default
  * Added ARM optimizations for functions with c_only equivalent
    yielding an average speedup of ~13% for 4k10bit</changelog>
  <changelog author="jengelh@inai.de" date="1724414400">- Update to release 2.2.1
  * Bug fixes for ARM-based macOS only</changelog>
  <changelog author="jengelh@inai.de" date="1730203200">- Update to release 2.3.0
  * Improved fast-decode level 1 option to increase its AV1 software
    cycle reduction by ~10% while maintaining the same quality
    levels.
  * New fast-decode level 2 to allow for an average AV1 software
    cycle reduction of 25-50% vs fast-decode 0 with a 1-3% BD-Rate
    loss across the presets.
  * Improved --lp settings for high resolutions, with CRF gaining a
    ~4% improvement in speed and VBR gaining ~15%.
  * Further ARM-based optimizations improving the efficiency of
    previously written NEON implementations by an average of 30%.</changelog>
  <changelog author="solomoncyj@gmail.com" date="1737115200">- Added optimzation flags to Cmake
- Santitized thired party folder
  * Deleted bechmarking folders
  * Renamed conflicting license files
  * Switced to system libcpuinfo</changelog>
</package>
<package pkgid="d22c7af88efa89a222e9ba68034d628bf1eaadee0dab6c4b0c2f4e689661a93aacb7a0b2284380bf6d315fa26abe5e189c03f811590ae638aca7dcc00ca55088" name="SVT-AV1-devel" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1699012800">- Update to release 1.7.0
  * Encoder:
  * Improve the tradeoffs for the random access mode across
    presets MR-M13
  * Quality improvements across all presets and metrics ranging
    from 0.3% to 4.5% in BD-rate
  * Added an experimental tune SSIM mode yielding ~3-4%
    additional SSIM BD-rate gains</changelog>
  <changelog author="jengelh@inai.de" date="1702382400">- Update to release 1.8.0
  * Improve the tradeoffs for the random access mode across presets:
  * Speedup CRF presets M6 to M0 by 17-53% while maintaining
    similar quality levels
  * Re-adjust CRF presets M7 to M13 for better quality with BD-rate
    gains ranging from 1-4%
  * Improve the quality and speed of the 1-pass VBR mode
  * Add API allowing to update bitrate / CRF and Key_frame
    placement during the encoding session for CBR lowdelay mode and
    CRF Random Access mode
  * ARM Neon SIMD optimizations for most critical kernels allowing
    for a 4.5-8x fps speedup vs the c implementation</changelog>
  <changelog author="jengelh@inai.de" date="1710331200">- Update to release 2.0
  * Changed the API signaling the End Of Stream (EOS) with the
    last frame vs with an empty frame
  * Removed the 3-pass VBR mode which changed the calling
    mechanism of multi-pass VBR
  * Improve the tradeoffs for the random access mode across
    presets:
  * Improved the compression efficiency of presets M9-M13 by 1-4%
  * Replaced the 3-pass VBR with a 2-pass VBR
  * Memory savings of 20-35% for LP 8 mode in preset M6 and below
    and 1-5% in other modes/presets</changelog>
  <changelog author="jengelh@inai.de" date="1716206400">- Update to release 2.1
  * Presets 6 and 12 are now pointing to presets 7 and 13
    respectively due to the lack of spacing between the presets.
  * Added variance boost support to improve visual quality for
    the tune vq mode.
  * Speedup of 12–40% presets M0, M3, M5 and M6 while maintaining
    similar quality levels.
  * Improved the compression efficiency of presets M11-M13 by 1-2%.</changelog>
  <changelog author="jengelh@inai.de" date="1719316800">- Update to release 2.1.1
  * Removed the SVT-AV1 Decoder portion of the project.
  * Improved documentation.</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- update to 2.1.2:
  * Cleanup, bug fixes:
  * Fixed profile-guided-optimization build by removing the
    remaining decoder path</changelog>
  <changelog author="jengelh@inai.de" date="1724068800">- Update to release 2.2.0
  * Improve the tradeoffs for the random access mode across presets:
  * Speedup of ~15% across presets M0 - M8 while maintaining
    similar quality levels
  * Improve the tradeoffs for the low-delay mode across presets
  * Increased temporal resolution setting to 6L for 4k
    resolutions by default
  * Added ARM optimizations for functions with c_only equivalent
    yielding an average speedup of ~13% for 4k10bit</changelog>
  <changelog author="jengelh@inai.de" date="1724414400">- Update to release 2.2.1
  * Bug fixes for ARM-based macOS only</changelog>
  <changelog author="jengelh@inai.de" date="1730203200">- Update to release 2.3.0
  * Improved fast-decode level 1 option to increase its AV1 software
    cycle reduction by ~10% while maintaining the same quality
    levels.
  * New fast-decode level 2 to allow for an average AV1 software
    cycle reduction of 25-50% vs fast-decode 0 with a 1-3% BD-Rate
    loss across the presets.
  * Improved --lp settings for high resolutions, with CRF gaining a
    ~4% improvement in speed and VBR gaining ~15%.
  * Further ARM-based optimizations improving the efficiency of
    previously written NEON implementations by an average of 30%.</changelog>
  <changelog author="solomoncyj@gmail.com" date="1737115200">- Added optimzation flags to Cmake
- Santitized thired party folder
  * Deleted bechmarking folders
  * Renamed conflicting license files
  * Switced to system libcpuinfo</changelog>
</package>
<package pkgid="526e492ea81080704ebceac214ea50a1d380e9c4c2e57e10e17d4a16e6bffcd8cff07062dceed7635495bee030a5f1e76537d489c34222b1d7d4c5fd91578a5b" name="SampleICC" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="bp160.1.13"/>
  <changelog author="ku.b@gmx.de&gt;" date="1282651200">- initial specfile'ification</changelog>
  <changelog author="ku.b@gmx.de" date="1326974400">- update to 1.6.6
- add changes file</changelog>
  <changelog author="ku.b@gmx.de" date="1333454400">- add copyright to spec file</changelog>
  <changelog author="ku.b@gmx.de" date="1333454401">- minor spec tweaks</changelog>
  <changelog author="ku.b@gmx.de" date="1336564800">- more spec tweaks</changelog>
  <changelog author="p.drouand@gmail.com" date="1351771200">- Remove unused files</changelog>
  <changelog author="ku.b@gmx.de" date="1409745600">- update to 1.6.8</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568894400">- Trim metadata redundancies from description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651060800">- Resolve rpmlint report "libSampleICC1.x86_64: E:
  shlib-policy-name-error SONAME: libICC_utils.so.2, expected
  package suffix: 2"</changelog>
</package>
<package pkgid="1db8c498694c25ccffd40f725a80fbff8bda1d9cb765096d982fe0ae878c6ac81a9f37e33b3a59cf72d2658e9c2af6a0394fe9e550a20e2b1143a751bb4b147f" name="SecLists" arch="x86_64">
  <version epoch="0" ver="2022.4" rel="bp160.1.9"/>
  <changelog author="Paolo Perego &lt;paolo.perego@suse.com&gt;" date="1624449600">- First import</changelog>
  <changelog author="Paolo Perego &lt;paolo.perego@suse.com&gt;" date="1624536000">- Removed Payloads/Zip-Bombs/*.gz and Payloads/Zip-Bombs/*.zip causing rpmlint
  to hang</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 2022.4:
  * includes multiple updates from the community</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670328000">- fix last change</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- skip zipbombs as they break the testing and legal checks</changelog>
</package>
<package pkgid="6098941458b9828f0eeb8d7bbe428f8b0c471437242d46cc9109d9c4229d799227bb882121b898a9d3bcf1063a07eaf042b652ed35e485ae17815b59e37bd099" name="ServiceReport" arch="noarch">
  <version epoch="0" ver="2.2.4+git4.cdcbdfa" rel="160000.1.2"/>
  <changelog author="msuchanek@suse.com" date="1626350400">- Update to version 2.2.3 (jsc#SLE-18193):
  * ServiceReport v2.2.3 release
  * [Daemon] check active status along with enabled
  * Run-on supported architectures only
  * Take crashkernel recommendation from kdump-lib.sh scripts</changelog>
  <changelog author="jsegitz@suse.com" date="1627387200">- Added hardening to systemd service(s). Added harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Update to version 2.2.3+git1.55a13db1c256:
  * [fadump] Update crashkernel recommendation (tid#7023277).</changelog>
  <changelog author="msuchanek@suse.com" date="1639483200">- Fix build on SLE 15: python-rpm-macros required for build (bsc#1193718).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="msuchanek@suse.com" date="1709035200">- Update to version 2.2.4 (bsc#1220410 ltc#204408)
  * ServiceReport v2.2.4 release
  * [kdump] update /etc/sysconfig/kdump config processing
  * [kdump] customize initrd dump component check for SLES
  * [fadump] update initrd validation check
  * [kdump] restrict lsinitrd command to fetch only modules</changelog>
  <changelog author="msuchanek@suse.de" date="1729684800">- Update to version 2.2.4+git2.f1e4503:
  * [Service] Make the servicereport service dependent on the kdump service
  * [utils] Use --update-bls-cmdline Option for GRUB Update
- Refresh harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1744977600">- Update to version 2.2.4+git5.e48c02c:
  * Added hardening to systemd service
- Drop upstreamed patch harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1750420800">- Update to version 2.2.4+git4.cdcbdfa:
  * [utils] update logic to parse /etc/os-release (bsc#1244547 ltc#213710)
  * Added hardening to systemd service</changelog>
  <changelog author="mcepl@cepl.eu" date="1753790400">- Fix packaging to use proper Python related macros (bsc#1244547 ltc#213710)
- Add fix_setup.patch to modernize upstream packaging
  (gh#linux-ras/ServiceReport!32).</changelog>
</package>
<package pkgid="021f3f209ed048d30da9bbcffc05a8dea723e6cdf5d2927bf3868b312f8dcb6813d2dd004d9cda81d523a732909b892dd7f77520fdc3d175edbf8dd52fe1b8f1" name="Setzer" arch="noarch">
  <version epoch="0" ver="66" rel="bp160.1.10"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1688817600">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694088000">- Update to version 57:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694952000">- Update to version 59:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 60:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1698148800">- Update to version 61:
  * Show app's name in system monitor.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 62:
  * Custom popovers.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to versoion 63:
  * Navigate popovers with keyboard.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702641600">- Update to version 65:
  * Fix brackets autoclosing, add brackets to selected text
    (instead of replacing it).
- Changes from version 64:
  * Autocompletion preferences.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1727611200">- Update to version 66:
  * Fix bug in autoclosing brackets.
  * Close context menu with F12.
  * Fix escape sequences in some strings.
  * Minor bug fixes.</changelog>
</package>
<package pkgid="b8d8e46045a61d8abf69eca897b1b054c38edc66076aa1d90abcd17e277763589793b4787f48158f0340b55d76f1cd57c76580443e141c738f095eb159452b3b" name="Setzer-lang" arch="noarch">
  <version epoch="0" ver="66" rel="bp160.1.10"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1688817600">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694088000">- Update to version 57:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694952000">- Update to version 59:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 60:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1698148800">- Update to version 61:
  * Show app's name in system monitor.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 62:
  * Custom popovers.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to versoion 63:
  * Navigate popovers with keyboard.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702641600">- Update to version 65:
  * Fix brackets autoclosing, add brackets to selected text
    (instead of replacing it).
- Changes from version 64:
  * Autocompletion preferences.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1727611200">- Update to version 66:
  * Fix bug in autoclosing brackets.
  * Close context menu with F12.
  * Fix escape sequences in some strings.
  * Minor bug fixes.</changelog>
</package>
<package pkgid="9e26a9968a0370b6e4cf25bd97fa8291af4f04ee2d15f4f0f30dc4c2360d19e968bc7ba895ae8e977b04754501925b07e63528c01049187d2cdec20fb726011f" name="ShellCheck" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="bp160.1.17"/>
  <changelog author="psimons@suse.com" date="1619092800">- Update ShellCheck to version 0.7.2.
  Upstream does not provide a change log file.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1619179200">- add haddock.patch to fix build with haddock</changelog>
  <changelog author="psimons@suse.com" date="1636286400">- Update ShellCheck to version 0.8.0.
- drop haddock.patch
  Upstream added a new change log file in this release. With no
  previous version to compare against, the automatic updater cannot
  reliable determine the relevante entries for this release.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1652961600">- Update ShellCheck to version 0.8.0 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1670932800">- Update ShellCheck to version 0.9.0.
  [#]# v0.9.0 - 2022-12-12
  [#]## Added
  - SC2316: Warn about 'local readonly foo' and similar (thanks, patrickxia!)
  - SC2317: Warn about unreachable commands
  - SC2318: Warn about backreferences in 'declare x=1 y=$x'
  - SC2319/SC2320: Warn when $? refers to echo/printf/[ ]/[[ ]]/test
  - SC2321: Suggest removing $((..)) in array[$((idx))]=val
  - SC2322: Suggest collapsing double parentheses in arithmetic contexts
  - SC2323: Suggest removing wrapping parentheses in a[(x+1)]=val
  [#]## Fixed
  - SC2086: Now uses DFA to make more accurate predictions about values
  - SC2086: No longer warns about values declared as integer with declare -i
  [#]## Changed
  - ShellCheck now has a Data Flow Analysis engine to make smarter decisions
    based on control flow rather than just syntax. Existing checks will
    gradually start using it, which may cause them to trigger differently
    (but more accurately).
  - Values in directives/shellcheckrc can now be quoted with '' or ""</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1675512000">- Update ShellCheck to version 0.9.0 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177600">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1700136000">- Relax over-specified constraints to fix the build with ghc-9.6.x.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1701864000">- Update ShellCheck to version 0.9.0 revision 2.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1709899200">- Update ShellCheck to version 0.10.0.
  [#]# v0.10.0 - 2024-03-07
  [#]## Added
  - Precompiled binaries for macOS ARM64 (darwin.aarch64)
  - Added support for busybox sh
  - Added flag --rcfile to specify an rc file by name.
  - Added `extended-analysis=true` directive to enable/disable dataflow analysis
    (with a corresponding --extended-analysis flag).
  - SC2324: Warn when x+=1 appends instead of increments
  - SC2325: Warn about multiple `!`s in dash/sh.
  - SC2326: Warn about `foo | ! bar` in bash/dash/sh.
  - SC3012: Warn about lexicographic-compare bashism in test like in [ ]
  - SC3013: Warn bashism `test _ -op/-nt/-ef _` like in [ ]
  - SC3014: Warn bashism `test _ == _` like in [ ]
  - SC3015: Warn bashism `test _ =~ _` like in [ ]
  - SC3016: Warn bashism `test -v _` like in [ ]
  - SC3017: Warn bashism `test -a _` like in [ ]
  [#]## Fixed
  - source statements with here docs now work correctly
  - "(Array.!): undefined array element" error should no longer occur</changelog>
</package>
<package pkgid="833e9c539643588a6175c22308f44004100ecf535e92cffcdbf6e93677020473266bd8a9924a08b9b2bdf949c17bc625dc9534626955838d9f451bc82fd925a3" name="SimGear-devel" arch="x86_64">
  <version epoch="0" ver="2020.3.19" rel="bp160.1.6"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1611835200">- Update to 2020.3.6
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.6
- Drop upstream boost-1.75-fix.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1617624000">- Update to 2020.3.8
  * http://wiki.flightgear.org/Changelog_2020.3#2020.3.7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1623326400">- Update to 2020.3.9
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1629979200">- Update to 2020.3.11
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.11</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643976000">- Update to 2020.3.12
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.12</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1649764800">- Update to 2020.3.13
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.13</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1669204800">- Update to 2020.3.17
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.17</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1677931200">- Add simgear-boost-1.81.patch, fix building with boost &gt;= 1.81</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1680091200">- Update to 2020.3.18
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.18</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1699876800">- Update to 2020.3.19
  * https://wiki.flightgear.org/Changelog_2020.3#2020.3.19</changelog>
</package>
<package pkgid="363b8d8bed7bdccffd850c84bfbe279d9bde859e351bffb8aed299fb8484683cfa59e78b09a4de7df2a2d499ed5c24bd16a0184e6da7ae4dd74c4a83aa481f8a" name="SoQt-devel" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="bp160.1.13"/>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- update to 1.6.2:
  * bugfixes:
    + Fixed numerous typos found with codespell
- update to 1.6.1:
  * new:
    + Home of Coin3d organization has been changed to
    https://github.com/coin3d
    + Added support for Qt6
  * bugfixes:
    + Fixed numerous documentation issues
    + Added SOQT_BUILD_TESTS option to control building of test
    code (default: ON)
    + Fix hidpi black screen issue
    + Fix broken SoQt.pc.cmake.in. Added -lSoQt
    + Fix wrong glwidget geometry size for Qt4
    + Add handling for background color RGBA</changelog>
</package>
<package pkgid="a3fc41fd9e0e4c0f388dce1612dba37ade0d339465780d8705f05ec3d26bde9bf071183b21da7adf08a7bc7c9670c72820cfec9c30461e83c79ddb4dffbcbe38" name="SoQt-doc" arch="noarch">
  <version epoch="0" ver="1.6.2" rel="bp160.1.13"/>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- update to 1.6.2:
  * bugfixes:
    + Fixed numerous typos found with codespell
- update to 1.6.1:
  * new:
    + Home of Coin3d organization has been changed to
    https://github.com/coin3d
    + Added support for Qt6
  * bugfixes:
    + Fixed numerous documentation issues
    + Added SOQT_BUILD_TESTS option to control building of test
    code (default: ON)
    + Fix hidpi black screen issue
    + Fix broken SoQt.pc.cmake.in. Added -lSoQt
    + Fix wrong glwidget geometry size for Qt4
    + Add handling for background color RGBA</changelog>
</package>
<package pkgid="dfd2a53b67138ea7c53b95038be36d32aaa3355ca745afc691e19e71c8d79e4059c5791192f95016ce26cd0614bd57cd962ed8826c995acb8b4985d729320dd2" name="SpeedTest++" arch="x86_64">
  <version epoch="0" ver="1.11+git20210829.0f63cfb" rel="bp160.1.21"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1656590400">- Initial package (v1.11+git20210829.0f63cfb)</changelog>
</package>
<package pkgid="8a7191b2ad80845bfabdb9129fe0b47fc3826024346e9bee2716ee3df9925496caa3e9c1aae50476344b134c23ebfd4b2dd36f81ab05bddd435992de297b1ed4" name="StyLua" arch="x86_64">
  <version epoch="0" ver="0.20.0" rel="bp160.1.13"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1679400000">- Disable tests. Failing for editorconfig.</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1686312000">- Update to version 0.17.1
  * Bumped internal parser dependency which should fix parsing problems for comments with Chinese characters, and multiline string escapes
  * Fixed comments in punctuated lists for return statements or assignments being incorrectly formatted leading to syntax errors
  * Fixed line endings not being correctly formatted in multiline string literals and comments</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1687089600">- Update to version 0.18.0:
  * Multiline ignores (-- stylua: ignore start / -- stylua: ignore end) will now work within table fields
  * Added option "Input" to call_parentheses setting, where call parentheses are retained based on their presence in the original input code.
  * Improved heuristics around Luau type excess parentheses removal, so unnecessary parentheses around types are removed in more locations
  * Function calls are now formatted onto multiple lines if the opening brace { of a multiline table forces one of the lines over width
  * Fixed missing option --sort-requires to enable sort requires on the command line
  * Fixed parentheses removed around Luau optional type (B?) causing syntax errors when present in an intersection A &amp; (B?)
  * Fixed comments lost when parentheses removed around Luau types
  * Fixed race condition where if a file is passed more than once as an argument to format, then it could potentially be wiped completely
    (for example, if an ancestor directory is passed and recursively searched, as well as the file itself)</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1691928000">- Replace obsoleted `disabled` option with `manual`</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1693051200">- Update to version 0.18.1:
  * Fixed parentheses around a single Luau type pack in a generic being removed causing syntax errors.</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1696852800">- Update to version 0.18.2:
  * Fixed LuaJIT suffixes LL/ULL causing a panic when running in --verify mode
  * Fixed incorrect formatting of conditionals when collapse_simple_statement is enabled and the block begins with an empty line
  * Fixed formatting of dot function call chains with comment between dot and names</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1699790400">- Update to version 0.19.0:
  [#]## Added
  - Added flag `--respect-ignores`. By default, files explicitly passed
  to stylua (e.g. `stylua foo.lua`) will always be formatted, regardless of
  whether the file is ignored. Enabling this flag will consider `.styluaignore`
  or glob matches before formatting the file.
  - Note: for backwards compatibility reasons, formatting via stdin always
    respects ignores. This behaviour will change in the next major release
  [#]## Changed
  - Updated parser crate with following changes:
  - Support Luau floor division (`//`)
  - Fix Luau string interpolation parsing
  - Fix Luau `\z` escape parsing
  - Simplified access and modification patterns for StyLua configuration. You
  can now access the properties directly
  - **Deprecated:** the old access patterns of `.property()` and
    `.with_property()` are now deprecated
  - **Breaking Change (WASM):** due to JS/TS lack of differentiation
    between `.property` / `.property()` implementation, the `.property()`
    functions were removed from WASM output.
  - Multiline comments before commas will now remain in place and not move
  to after the comma. This is to support type-assertions-via-comments that
  is commonly used by some language servers.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1709467200">- Update to version 0.20.0:
  [#]## Changed
  - Files excluded by git (via .gitignore or global git configuration), as well as in an .ignore file
    (used by ripgrep and The Silver Searcher) will now also be ignored by StyLua
    (as if they were all .styluaignore files).
  [#]## Fixed
  * General
  - The CLI tool will now only write files if the contents differ, and not modify the file if there
    is no change after formatting
  - Fixed function body parentheses being placed on multiple lines unnecessarily when there are no parameters
  - Fixed directory paths w/o globs in .styluaignore not matching when using --respect-ignores
  * Luau
  - Fixed handling of floor division (//) syntax when only Luau command line flag is enabled
  - Fixed missing space when table is inside of Luau interpolated string expression ({{ is invalid syntax)
  - Fixed parentheses around a Luau compound type inside of a type table indexer being removed causing a syntax error</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1709726400">- Reenable cargo tests.</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1709726401">- BuildRequires should be cargo and not rust+cargo
  * a known issue is causing some broken builds e.g. providing a lower version</changelog>
</package>
<package pkgid="9adb58d2cf8985fb51bfb667c5fa362dd1193801d81daf1af5cfd349a856f8b8ae13956648b9596681e04f72a1b674061e07d69539a5bd667f424ce1e4b361b7" name="SwayNotificationCenter" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="bp160.1.4"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1663243200">- Upgrade to 0.7.1:
  - Fixed building on Fedora
- Upgrade to 0.7.0:
  - Fix gschema not being compiled on install by @ErikReider in
    [#138]
  - Fixed click to close Control Center not working on some WMs
    by @ErikReider in #139
  - Add missing build dependency and installed files in rpmbuild
    spec file by @fantognazza in #140
  - Issue #141: Waybar subscription missed opportunity by
    @carlosV2 in #142
  - Customize and reorder widgets in Control Center by
    @ErikReider in #150
  - Mpris widget by @ErikReider in #157
  - All notification urgency timeouts can now be 0 to disable
    expiration by @ErikReider in #158
  - Fix typo by @asas1asas200 in #160</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Update to version 0.7.1:
  * Bumped application version to 0.7.1
  * Updated rpkg spec
  * Bumped version to 0.7.1
  * Fixed fedora build issue
  * Updated sha256 for pkgbuild
  * Bumped version to 0.7.0
  * Fix typo (#160)
  * Removed all unnecessary GLib namespace prefixes
  * Removed all unnecessary GLib namespace prefixes
  * All notification urgencies can now use 0 as timeout to not expire (#158)
  * Mpris Media Player widget (#157)
  * Updated README with info about supported WMs
  * Fixes #152
  * Fixed Control Center sometimes dismissing when clicking inside of CC
  * Customize and reorder widgets in Control Center (#150)
  * Separate arch and ubuntu GH Actions into their own files. Fixes #151
  * Updated Ubuntu docker file to use 22.04 LTS
  * Fixed Config and Style not handling custom home-relative paths
  * Fixed typo in README
  * Updated the COPR link to the new official repo
  * CI: Add Fedora builds (#144) (#148)
  * Fixed styling notification summary not working correctly. Fixes #143
  * Issue #141: Waybar subscription missed opportunity (#142)
  * Add missing build dependency and installed files in rpmbuild spec file (#140)
  * Fixed click to close Control Center not working on some WMs (#139)
  * Fix gschema not being compiled on install (#138)
  * Removed depends versions from PKGBUILD
  * Updated Git PKGBUILD with correct pkgver format
  * Updated PKGBUILD checksums for v0.6.3</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664193600">- Update to version 0.7.2:
  * Bumped version to v0.7.2
  * Removed all references to `RegexCompileFlags.JAVASCRIPT_COMPAT` due to deprecation
  * Fixed GLib2.74.0 causing a segfault. Fixes: #164
  * Fix typo (#166)
  * Adding instructions for installation on Fedora Silverblue and other rpm-ostree Fedora variants. (#161)
  * Bumped PKGBUILD-git pkgver
  * Bumped PKGBUILD sha256 sums</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1664193601">- Remove full source URL since it's downloaded by _service</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669636800">- Update to version 0.7.3:
  * Fixed segfault when reloading config
  * Adds MPRIS widget arrows when multiple players are detected
  * Fix not being able to interact with CC without first click
  * Fix MPRIS image scaling when display is scaled
  * Add cssPriority to config
  * Add option to configure control center layer
  * feat: transient notification visibility
  * Add client flags to turn dnd on/off
  * Add /usr/local/etc/xdg/swaync/ as default fallback path for config and CSS files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1677240000">- Update to version 0.8.0:
  * a bunch of typo fixes
  * Action scripts
  * Add Override urgency to config
  * Bump minimal meson version to 0.59.0, replace 'get_pkgconfig_variable'
  * Add ControllsWidget
  * Audio slider
  * Add Notification placeholder in Control Center
  * Add ControlCenter positioning config option
  * Add Notification Action to copy body security codes to clipboard
  * Add "desktop-entry" as option to scripts
  * Add Brightness slider widget
  * [Feature] Add ability to inhibit notifications through DBus
- Add new dependencies: libgee, libpulse
- Remove changesgenerate service as upstream publishes a better changelog</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1685361600">- Update to version 0.9.0:
  * Menu animation
  * Hide visible notifications when activating dnd
  * Use rounding to prevent incorrect backlight percentage calculation
  * Per app volume control
  * Fix backlight &amp; KB brightness sliders
  * Fixed mpDris2 mpris issues
  * Preserve config object item order
  * Add positonY center for notifications and CC
  * Added ability to toggle parsing of notification 2fa codes
  * Added ability to choose wether layer-shell should be used or not
  * Added control-center layer config option
  * Add inline replies to notifications</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1707739200">- Update to version 0.10.0:
  * Allow empty name for actions
  * Update i3status-rs Example format syntax for 0.31.0
  * corrected misspellings of the word "notification"
  * Added "relative-timestamps" config to switch between "25 minutes ago" and "2023-06-25T20:05:27-07"
  * Add meson_option to build without PulseAudio Widget
  * Add show-per-app-label for volume
  * Fixed CC list navigation skipping a notification
  * Simplified script and base_widget command execution
  * Test parsing markup without any hacks before using said hacks
  * Remove notification replace flicker
  * Added config option to set cc exclusive zone
  * allow 8 digits in 2fa code regex
  * flush stdout after subscription events
  * Add toggle button
  * Fix togglebutton in menu dropdown
  * Add notification hint to bypass dnd/inhibition
  * Grouped notifications
  * [New Dependency: sassc] Move to SCSS from regular CSS
  * Add border-radius property to notification images
  * Add MPRIS player background blur
  * Bumped version requirements for libhandy and gtk-layer-shell
  * Fix text color on light theme
  * Add control center visibility class
  - Style changes
    A few style changes were made that might break some existing configs.
    The project also moved to use SCSS.
  - New dependencies:
  * gvfs
  * granite
  * sassc
  * gtk-layer-shell (added explicitly)
  - Split out bash, zsh and fish shell completions into dedicated packages</changelog>
  <changelog author="Dawid Respondek &lt;nyslay@gmail.com&gt;" date="1717156800">- Update to version 0.10.1:
  * Fix brightness slider choppiness
  * Fixed BOTTOM aligned notifications in CC not compensating for fade properly
  * Fix default mpris icon size</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1744113600">- Update to version 0.11.0:
  - Updated meson build instructions
  - Fixed sources annotation
  - block signal handlers in toggle button when updating state
  - Fix invalid data types in configSchema.json
  - Add MPRIS background blur for app icons
  - Close notification with middle mouse button
  - Mpris blacklist support
  - Add a way to change No Notifications text
  - Implemented xdg-activation logic
  - Fix json parsing error in config.json
  - Fixed image-path not being considered as theme icon
  - Fixed swaync-client --close-all not closing the actual noti layer window
  - Vertically center the summary/title when the notification body is empty
  - Always unescape image and app icon paths
  - Run script commands with "/bin/sh -c ..."
  - Added layer-shell-cover-screen option to fix animations in Hyprland
  - Pass hints as environment to scripts
  - Invoke action from swaync-client (implements #437)
  - fix: no convert upper case for the first character
  - Removed MPRIS widget side fade
  - Body img markup: fixed img URIs and single quotes not supported</changelog>
</package>
<package pkgid="56513f2589e096881fc2c0127aca2dcabfc6e766837f40875b7cafd93116f37edb79012ca21623b1996d190b810fb0a10c1f3cf534d2dca3a7d0f5259cafbacc" name="SwayNotificationCenter-bash-completion" arch="noarch">
  <version epoch="0" ver="0.11.0" rel="bp160.1.4"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1663243200">- Upgrade to 0.7.1:
  - Fixed building on Fedora
- Upgrade to 0.7.0:
  - Fix gschema not being compiled on install by @ErikReider in
    [#138]
  - Fixed click to close Control Center not working on some WMs
    by @ErikReider in #139
  - Add missing build dependency and installed files in rpmbuild
    spec file by @fantognazza in #140
  - Issue #141: Waybar subscription missed opportunity by
    @carlosV2 in #142
  - Customize and reorder widgets in Control Center by
    @ErikReider in #150
  - Mpris widget by @ErikReider in #157
  - All notification urgency timeouts can now be 0 to disable
    expiration by @ErikReider in #158
  - Fix typo by @asas1asas200 in #160</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Update to version 0.7.1:
  * Bumped application version to 0.7.1
  * Updated rpkg spec
  * Bumped version to 0.7.1
  * Fixed fedora build issue
  * Updated sha256 for pkgbuild
  * Bumped version to 0.7.0
  * Fix typo (#160)
  * Removed all unnecessary GLib namespace prefixes
  * Removed all unnecessary GLib namespace prefixes
  * All notification urgencies can now use 0 as timeout to not expire (#158)
  * Mpris Media Player widget (#157)
  * Updated README with info about supported WMs
  * Fixes #152
  * Fixed Control Center sometimes dismissing when clicking inside of CC
  * Customize and reorder widgets in Control Center (#150)
  * Separate arch and ubuntu GH Actions into their own files. Fixes #151
  * Updated Ubuntu docker file to use 22.04 LTS
  * Fixed Config and Style not handling custom home-relative paths
  * Fixed typo in README
  * Updated the COPR link to the new official repo
  * CI: Add Fedora builds (#144) (#148)
  * Fixed styling notification summary not working correctly. Fixes #143
  * Issue #141: Waybar subscription missed opportunity (#142)
  * Add missing build dependency and installed files in rpmbuild spec file (#140)
  * Fixed click to close Control Center not working on some WMs (#139)
  * Fix gschema not being compiled on install (#138)
  * Removed depends versions from PKGBUILD
  * Updated Git PKGBUILD with correct pkgver format
  * Updated PKGBUILD checksums for v0.6.3</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664193600">- Update to version 0.7.2:
  * Bumped version to v0.7.2
  * Removed all references to `RegexCompileFlags.JAVASCRIPT_COMPAT` due to deprecation
  * Fixed GLib2.74.0 causing a segfault. Fixes: #164
  * Fix typo (#166)
  * Adding instructions for installation on Fedora Silverblue and other rpm-ostree Fedora variants. (#161)
  * Bumped PKGBUILD-git pkgver
  * Bumped PKGBUILD sha256 sums</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1664193601">- Remove full source URL since it's downloaded by _service</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669636800">- Update to version 0.7.3:
  * Fixed segfault when reloading config
  * Adds MPRIS widget arrows when multiple players are detected
  * Fix not being able to interact with CC without first click
  * Fix MPRIS image scaling when display is scaled
  * Add cssPriority to config
  * Add option to configure control center layer
  * feat: transient notification visibility
  * Add client flags to turn dnd on/off
  * Add /usr/local/etc/xdg/swaync/ as default fallback path for config and CSS files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1677240000">- Update to version 0.8.0:
  * a bunch of typo fixes
  * Action scripts
  * Add Override urgency to config
  * Bump minimal meson version to 0.59.0, replace 'get_pkgconfig_variable'
  * Add ControllsWidget
  * Audio slider
  * Add Notification placeholder in Control Center
  * Add ControlCenter positioning config option
  * Add Notification Action to copy body security codes to clipboard
  * Add "desktop-entry" as option to scripts
  * Add Brightness slider widget
  * [Feature] Add ability to inhibit notifications through DBus
- Add new dependencies: libgee, libpulse
- Remove changesgenerate service as upstream publishes a better changelog</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1685361600">- Update to version 0.9.0:
  * Menu animation
  * Hide visible notifications when activating dnd
  * Use rounding to prevent incorrect backlight percentage calculation
  * Per app volume control
  * Fix backlight &amp; KB brightness sliders
  * Fixed mpDris2 mpris issues
  * Preserve config object item order
  * Add positonY center for notifications and CC
  * Added ability to toggle parsing of notification 2fa codes
  * Added ability to choose wether layer-shell should be used or not
  * Added control-center layer config option
  * Add inline replies to notifications</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1707739200">- Update to version 0.10.0:
  * Allow empty name for actions
  * Update i3status-rs Example format syntax for 0.31.0
  * corrected misspellings of the word "notification"
  * Added "relative-timestamps" config to switch between "25 minutes ago" and "2023-06-25T20:05:27-07"
  * Add meson_option to build without PulseAudio Widget
  * Add show-per-app-label for volume
  * Fixed CC list navigation skipping a notification
  * Simplified script and base_widget command execution
  * Test parsing markup without any hacks before using said hacks
  * Remove notification replace flicker
  * Added config option to set cc exclusive zone
  * allow 8 digits in 2fa code regex
  * flush stdout after subscription events
  * Add toggle button
  * Fix togglebutton in menu dropdown
  * Add notification hint to bypass dnd/inhibition
  * Grouped notifications
  * [New Dependency: sassc] Move to SCSS from regular CSS
  * Add border-radius property to notification images
  * Add MPRIS player background blur
  * Bumped version requirements for libhandy and gtk-layer-shell
  * Fix text color on light theme
  * Add control center visibility class
  - Style changes
    A few style changes were made that might break some existing configs.
    The project also moved to use SCSS.
  - New dependencies:
  * gvfs
  * granite
  * sassc
  * gtk-layer-shell (added explicitly)
  - Split out bash, zsh and fish shell completions into dedicated packages</changelog>
  <changelog author="Dawid Respondek &lt;nyslay@gmail.com&gt;" date="1717156800">- Update to version 0.10.1:
  * Fix brightness slider choppiness
  * Fixed BOTTOM aligned notifications in CC not compensating for fade properly
  * Fix default mpris icon size</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1744113600">- Update to version 0.11.0:
  - Updated meson build instructions
  - Fixed sources annotation
  - block signal handlers in toggle button when updating state
  - Fix invalid data types in configSchema.json
  - Add MPRIS background blur for app icons
  - Close notification with middle mouse button
  - Mpris blacklist support
  - Add a way to change No Notifications text
  - Implemented xdg-activation logic
  - Fix json parsing error in config.json
  - Fixed image-path not being considered as theme icon
  - Fixed swaync-client --close-all not closing the actual noti layer window
  - Vertically center the summary/title when the notification body is empty
  - Always unescape image and app icon paths
  - Run script commands with "/bin/sh -c ..."
  - Added layer-shell-cover-screen option to fix animations in Hyprland
  - Pass hints as environment to scripts
  - Invoke action from swaync-client (implements #437)
  - fix: no convert upper case for the first character
  - Removed MPRIS widget side fade
  - Body img markup: fixed img URIs and single quotes not supported</changelog>
</package>
<package pkgid="ece46a17888e3ce47786b8a8f4d77b093032fb668a93ca8592a56d81ce1243944a0d162075fbd69e6a46409a19710bc366832daba64d222be60b553bef326abf" name="SwayNotificationCenter-fish-completion" arch="noarch">
  <version epoch="0" ver="0.11.0" rel="bp160.1.4"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1663243200">- Upgrade to 0.7.1:
  - Fixed building on Fedora
- Upgrade to 0.7.0:
  - Fix gschema not being compiled on install by @ErikReider in
    [#138]
  - Fixed click to close Control Center not working on some WMs
    by @ErikReider in #139
  - Add missing build dependency and installed files in rpmbuild
    spec file by @fantognazza in #140
  - Issue #141: Waybar subscription missed opportunity by
    @carlosV2 in #142
  - Customize and reorder widgets in Control Center by
    @ErikReider in #150
  - Mpris widget by @ErikReider in #157
  - All notification urgency timeouts can now be 0 to disable
    expiration by @ErikReider in #158
  - Fix typo by @asas1asas200 in #160</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Update to version 0.7.1:
  * Bumped application version to 0.7.1
  * Updated rpkg spec
  * Bumped version to 0.7.1
  * Fixed fedora build issue
  * Updated sha256 for pkgbuild
  * Bumped version to 0.7.0
  * Fix typo (#160)
  * Removed all unnecessary GLib namespace prefixes
  * Removed all unnecessary GLib namespace prefixes
  * All notification urgencies can now use 0 as timeout to not expire (#158)
  * Mpris Media Player widget (#157)
  * Updated README with info about supported WMs
  * Fixes #152
  * Fixed Control Center sometimes dismissing when clicking inside of CC
  * Customize and reorder widgets in Control Center (#150)
  * Separate arch and ubuntu GH Actions into their own files. Fixes #151
  * Updated Ubuntu docker file to use 22.04 LTS
  * Fixed Config and Style not handling custom home-relative paths
  * Fixed typo in README
  * Updated the COPR link to the new official repo
  * CI: Add Fedora builds (#144) (#148)
  * Fixed styling notification summary not working correctly. Fixes #143
  * Issue #141: Waybar subscription missed opportunity (#142)
  * Add missing build dependency and installed files in rpmbuild spec file (#140)
  * Fixed click to close Control Center not working on some WMs (#139)
  * Fix gschema not being compiled on install (#138)
  * Removed depends versions from PKGBUILD
  * Updated Git PKGBUILD with correct pkgver format
  * Updated PKGBUILD checksums for v0.6.3</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664193600">- Update to version 0.7.2:
  * Bumped version to v0.7.2
  * Removed all references to `RegexCompileFlags.JAVASCRIPT_COMPAT` due to deprecation
  * Fixed GLib2.74.0 causing a segfault. Fixes: #164
  * Fix typo (#166)
  * Adding instructions for installation on Fedora Silverblue and other rpm-ostree Fedora variants. (#161)
  * Bumped PKGBUILD-git pkgver
  * Bumped PKGBUILD sha256 sums</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1664193601">- Remove full source URL since it's downloaded by _service</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669636800">- Update to version 0.7.3:
  * Fixed segfault when reloading config
  * Adds MPRIS widget arrows when multiple players are detected
  * Fix not being able to interact with CC without first click
  * Fix MPRIS image scaling when display is scaled
  * Add cssPriority to config
  * Add option to configure control center layer
  * feat: transient notification visibility
  * Add client flags to turn dnd on/off
  * Add /usr/local/etc/xdg/swaync/ as default fallback path for config and CSS files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1677240000">- Update to version 0.8.0:
  * a bunch of typo fixes
  * Action scripts
  * Add Override urgency to config
  * Bump minimal meson version to 0.59.0, replace 'get_pkgconfig_variable'
  * Add ControllsWidget
  * Audio slider
  * Add Notification placeholder in Control Center
  * Add ControlCenter positioning config option
  * Add Notification Action to copy body security codes to clipboard
  * Add "desktop-entry" as option to scripts
  * Add Brightness slider widget
  * [Feature] Add ability to inhibit notifications through DBus
- Add new dependencies: libgee, libpulse
- Remove changesgenerate service as upstream publishes a better changelog</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1685361600">- Update to version 0.9.0:
  * Menu animation
  * Hide visible notifications when activating dnd
  * Use rounding to prevent incorrect backlight percentage calculation
  * Per app volume control
  * Fix backlight &amp; KB brightness sliders
  * Fixed mpDris2 mpris issues
  * Preserve config object item order
  * Add positonY center for notifications and CC
  * Added ability to toggle parsing of notification 2fa codes
  * Added ability to choose wether layer-shell should be used or not
  * Added control-center layer config option
  * Add inline replies to notifications</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1707739200">- Update to version 0.10.0:
  * Allow empty name for actions
  * Update i3status-rs Example format syntax for 0.31.0
  * corrected misspellings of the word "notification"
  * Added "relative-timestamps" config to switch between "25 minutes ago" and "2023-06-25T20:05:27-07"
  * Add meson_option to build without PulseAudio Widget
  * Add show-per-app-label for volume
  * Fixed CC list navigation skipping a notification
  * Simplified script and base_widget command execution
  * Test parsing markup without any hacks before using said hacks
  * Remove notification replace flicker
  * Added config option to set cc exclusive zone
  * allow 8 digits in 2fa code regex
  * flush stdout after subscription events
  * Add toggle button
  * Fix togglebutton in menu dropdown
  * Add notification hint to bypass dnd/inhibition
  * Grouped notifications
  * [New Dependency: sassc] Move to SCSS from regular CSS
  * Add border-radius property to notification images
  * Add MPRIS player background blur
  * Bumped version requirements for libhandy and gtk-layer-shell
  * Fix text color on light theme
  * Add control center visibility class
  - Style changes
    A few style changes were made that might break some existing configs.
    The project also moved to use SCSS.
  - New dependencies:
  * gvfs
  * granite
  * sassc
  * gtk-layer-shell (added explicitly)
  - Split out bash, zsh and fish shell completions into dedicated packages</changelog>
  <changelog author="Dawid Respondek &lt;nyslay@gmail.com&gt;" date="1717156800">- Update to version 0.10.1:
  * Fix brightness slider choppiness
  * Fixed BOTTOM aligned notifications in CC not compensating for fade properly
  * Fix default mpris icon size</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1744113600">- Update to version 0.11.0:
  - Updated meson build instructions
  - Fixed sources annotation
  - block signal handlers in toggle button when updating state
  - Fix invalid data types in configSchema.json
  - Add MPRIS background blur for app icons
  - Close notification with middle mouse button
  - Mpris blacklist support
  - Add a way to change No Notifications text
  - Implemented xdg-activation logic
  - Fix json parsing error in config.json
  - Fixed image-path not being considered as theme icon
  - Fixed swaync-client --close-all not closing the actual noti layer window
  - Vertically center the summary/title when the notification body is empty
  - Always unescape image and app icon paths
  - Run script commands with "/bin/sh -c ..."
  - Added layer-shell-cover-screen option to fix animations in Hyprland
  - Pass hints as environment to scripts
  - Invoke action from swaync-client (implements #437)
  - fix: no convert upper case for the first character
  - Removed MPRIS widget side fade
  - Body img markup: fixed img URIs and single quotes not supported</changelog>
</package>
<package pkgid="cac515e09b3e06c27ac14d2abc21ca23cbfe6f9400d02af74bb7588688c61b68335d9a2cc9c78c4fcf74c193ca3340a93e61ff3f427ee744b00fc0fa53969aa7" name="SwayNotificationCenter-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.11.0" rel="bp160.1.4"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1663243200">- Upgrade to 0.7.1:
  - Fixed building on Fedora
- Upgrade to 0.7.0:
  - Fix gschema not being compiled on install by @ErikReider in
    [#138]
  - Fixed click to close Control Center not working on some WMs
    by @ErikReider in #139
  - Add missing build dependency and installed files in rpmbuild
    spec file by @fantognazza in #140
  - Issue #141: Waybar subscription missed opportunity by
    @carlosV2 in #142
  - Customize and reorder widgets in Control Center by
    @ErikReider in #150
  - Mpris widget by @ErikReider in #157
  - All notification urgency timeouts can now be 0 to disable
    expiration by @ErikReider in #158
  - Fix typo by @asas1asas200 in #160</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Update to version 0.7.1:
  * Bumped application version to 0.7.1
  * Updated rpkg spec
  * Bumped version to 0.7.1
  * Fixed fedora build issue
  * Updated sha256 for pkgbuild
  * Bumped version to 0.7.0
  * Fix typo (#160)
  * Removed all unnecessary GLib namespace prefixes
  * Removed all unnecessary GLib namespace prefixes
  * All notification urgencies can now use 0 as timeout to not expire (#158)
  * Mpris Media Player widget (#157)
  * Updated README with info about supported WMs
  * Fixes #152
  * Fixed Control Center sometimes dismissing when clicking inside of CC
  * Customize and reorder widgets in Control Center (#150)
  * Separate arch and ubuntu GH Actions into their own files. Fixes #151
  * Updated Ubuntu docker file to use 22.04 LTS
  * Fixed Config and Style not handling custom home-relative paths
  * Fixed typo in README
  * Updated the COPR link to the new official repo
  * CI: Add Fedora builds (#144) (#148)
  * Fixed styling notification summary not working correctly. Fixes #143
  * Issue #141: Waybar subscription missed opportunity (#142)
  * Add missing build dependency and installed files in rpmbuild spec file (#140)
  * Fixed click to close Control Center not working on some WMs (#139)
  * Fix gschema not being compiled on install (#138)
  * Removed depends versions from PKGBUILD
  * Updated Git PKGBUILD with correct pkgver format
  * Updated PKGBUILD checksums for v0.6.3</changelog>
  <changelog author="filippo.bonazzi@suse.com" date="1664193600">- Update to version 0.7.2:
  * Bumped version to v0.7.2
  * Removed all references to `RegexCompileFlags.JAVASCRIPT_COMPAT` due to deprecation
  * Fixed GLib2.74.0 causing a segfault. Fixes: #164
  * Fix typo (#166)
  * Adding instructions for installation on Fedora Silverblue and other rpm-ostree Fedora variants. (#161)
  * Bumped PKGBUILD-git pkgver
  * Bumped PKGBUILD sha256 sums</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1664193601">- Remove full source URL since it's downloaded by _service</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669636800">- Update to version 0.7.3:
  * Fixed segfault when reloading config
  * Adds MPRIS widget arrows when multiple players are detected
  * Fix not being able to interact with CC without first click
  * Fix MPRIS image scaling when display is scaled
  * Add cssPriority to config
  * Add option to configure control center layer
  * feat: transient notification visibility
  * Add client flags to turn dnd on/off
  * Add /usr/local/etc/xdg/swaync/ as default fallback path for config and CSS files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1677240000">- Update to version 0.8.0:
  * a bunch of typo fixes
  * Action scripts
  * Add Override urgency to config
  * Bump minimal meson version to 0.59.0, replace 'get_pkgconfig_variable'
  * Add ControllsWidget
  * Audio slider
  * Add Notification placeholder in Control Center
  * Add ControlCenter positioning config option
  * Add Notification Action to copy body security codes to clipboard
  * Add "desktop-entry" as option to scripts
  * Add Brightness slider widget
  * [Feature] Add ability to inhibit notifications through DBus
- Add new dependencies: libgee, libpulse
- Remove changesgenerate service as upstream publishes a better changelog</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1685361600">- Update to version 0.9.0:
  * Menu animation
  * Hide visible notifications when activating dnd
  * Use rounding to prevent incorrect backlight percentage calculation
  * Per app volume control
  * Fix backlight &amp; KB brightness sliders
  * Fixed mpDris2 mpris issues
  * Preserve config object item order
  * Add positonY center for notifications and CC
  * Added ability to toggle parsing of notification 2fa codes
  * Added ability to choose wether layer-shell should be used or not
  * Added control-center layer config option
  * Add inline replies to notifications</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1707739200">- Update to version 0.10.0:
  * Allow empty name for actions
  * Update i3status-rs Example format syntax for 0.31.0
  * corrected misspellings of the word "notification"
  * Added "relative-timestamps" config to switch between "25 minutes ago" and "2023-06-25T20:05:27-07"
  * Add meson_option to build without PulseAudio Widget
  * Add show-per-app-label for volume
  * Fixed CC list navigation skipping a notification
  * Simplified script and base_widget command execution
  * Test parsing markup without any hacks before using said hacks
  * Remove notification replace flicker
  * Added config option to set cc exclusive zone
  * allow 8 digits in 2fa code regex
  * flush stdout after subscription events
  * Add toggle button
  * Fix togglebutton in menu dropdown
  * Add notification hint to bypass dnd/inhibition
  * Grouped notifications
  * [New Dependency: sassc] Move to SCSS from regular CSS
  * Add border-radius property to notification images
  * Add MPRIS player background blur
  * Bumped version requirements for libhandy and gtk-layer-shell
  * Fix text color on light theme
  * Add control center visibility class
  - Style changes
    A few style changes were made that might break some existing configs.
    The project also moved to use SCSS.
  - New dependencies:
  * gvfs
  * granite
  * sassc
  * gtk-layer-shell (added explicitly)
  - Split out bash, zsh and fish shell completions into dedicated packages</changelog>
  <changelog author="Dawid Respondek &lt;nyslay@gmail.com&gt;" date="1717156800">- Update to version 0.10.1:
  * Fix brightness slider choppiness
  * Fixed BOTTOM aligned notifications in CC not compensating for fade properly
  * Fix default mpris icon size</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1744113600">- Update to version 0.11.0:
  - Updated meson build instructions
  - Fixed sources annotation
  - block signal handlers in toggle button when updating state
  - Fix invalid data types in configSchema.json
  - Add MPRIS background blur for app icons
  - Close notification with middle mouse button
  - Mpris blacklist support
  - Add a way to change No Notifications text
  - Implemented xdg-activation logic
  - Fix json parsing error in config.json
  - Fixed image-path not being considered as theme icon
  - Fixed swaync-client --close-all not closing the actual noti layer window
  - Vertically center the summary/title when the notification body is empty
  - Always unescape image and app icon paths
  - Run script commands with "/bin/sh -c ..."
  - Added layer-shell-cover-screen option to fix animations in Hyprland
  - Pass hints as environment to scripts
  - Invoke action from swaync-client (implements #437)
  - fix: no convert upper case for the first character
  - Removed MPRIS widget side fade
  - Body img markup: fixed img URIs and single quotes not supported</changelog>
</package>
<package pkgid="b1283edaa13757e68065b9d04a015942fd3f30bcea812b78c2cc52e0719d9b3d3184c940b9f8fdc370db0815cd971b807b1d8272fdcce69ecbee9566fc354d08" name="TeXmacs" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="bp160.1.9"/>
  <changelog author="mrdocs@opensuse.org" date="1357560000">- fix build for &lt; 12.2</changelog>
  <changelog author="huntj@gmx.us" date="1361016000">- fix build for 12.1</changelog>
  <changelog author="huntj@gmx.us" date="1393070400">- updated to 1.0.7.21
  o Complete reorganization of document styles and package
    (1.0.7.21).
  o Major improvements for upcoming native Pdf renderer (1.0.7.21).
  o New focus preferences menu (1.0.7.21).
  o New widgets for editing macros (1.0.7.21).
  o Improved CJK typesetting and support for Fandol fonts (1.0.7.21).
  o Stretchable space between letters (1.0.7.21).
  o Implementation of protrusion for the standard ecrm font
    (1.0.7.21).
  o Improved ornaments and typesetting adjustments (1.0.7.21).
  o Improved presentation mode (1.0.7.20).
  o Various improvements for LaTeX import and export (1.0.7.20).
  o Rewritten Scilab plug-in (1.0.7.20).
  o Better portability of various plug-ins (1.0.7.20).
  o Various graphical font effects; experimental, not yet in
    interface (1.0.7.20).
  o Profound reorganization of the font system with experimental
    option for testing (1.0.7.19).
  o LaTeX import and export of metadata for various standard styles
    (1.0.7.19).
  o Running plug-ins over remote SSH connections; experimental
    (1.0.7.19).
  o Started implementation of remote TeXmacs file system (1.0.7.19).
  o Improved portability of plug-in detection (1.0.7.19).
  o Implementation of arbitrary zoom factors and “fit to paragraph
    width” (1.0.7.18).
  o New widget for user preferences (1.0.7.18).
  o More implicit user preferences (1.0.7.18).
  o Add developer tools, still experimental (1.0.7.18).
  o Start implementation of basic infrastructure for support of
    system fonts (1.0.7.18).
  o Started reorganization of titles and other meta-data for
    documents (1.0.7.18).
  o Automated generation of documentation about the Scheme files
    (1.0.7.17).
  o Various improvements for LaTeX conversion and character
    encodings (1.0.7.17).
- need to force guile1 explicitly =&gt; TeXmacs-fix_impose_guile1.patch
- updated TeXmacs-fix_arg_enable.patch
- updated TeXmacs-fix_function_returns.patch
- removed TeXmacs-fix_tm_r.patch (seems fixed upstream)
- removed TeXmacs-makefile.patch (unnecessary now)
- removed TeXmacs-library_order.patch (unnecessary now)</changelog>
  <changelog author="edera@gmx.fr" date="1517313600">- updated to 1.99.6
  o changelog: http://www.texmacs.org/tmweb/about/changes.en.html
- use normalized license notation: GPL-2.0+ instead of GPLv2+
- added feature-maxima-inline-plots_18125aa.patch
  inline plots for maxima
  (adapted from http://lists.gnu.org/archive/html/texmacs-dev/
  /2017-09/msg00002.html)
- removed TeXmacs-fix_function_returns.patch
- removed TeXmacs-fix_arg_enable.patch
- removed TeXmacs-fix_impose_guile1.patch</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1703160000">- updated to 2.1.2
  o changelog: http://www.texmacs.org/tmweb/about/changes.en.html
  o Creation of various interface themes for TeXmacs, such as dark
    and bright (2.1.1).
  o Improved high resolution support under Linux and Windows
    (2.1.1).
  o Progress on (not yet default) Qt5 version of TeXmacs (2.1.1).
  o Updated font database for recent pre-installed Linux/Mac/Window
    fonts (2.1.1).
  o Minor bug fixes (2.1).
  o Various minor bug fixes (1.99.21).
  o Updated plug-in for Giac (1.99.21).
  o Better support for the most common LaTeX style files (1.99.20).
  o Many corrections for the LaTeX export when using common LaTeX
    styles (1.99.20).
  o Various bug fixes (1.99.20).
  o Added Slovak language support with the help of Peter Rapčan
    (1.99.20).
  o Many bug fixes (1.99.19).
  o Improved Octave plugin with tab completion and multi-line input
    (1.99.19).
  o Enhanced structured search &amp; replace: added preferences and
    wildcards (1.99.19).
  o Minor bug fixes (1.99.18).
  o Minor progress on the remote editing tools (1.99.18).
  o Continued bug fixes (1.99.17).
  o Improved remote editing tools (1.99.17).
  o New style package “comment” for various kinds of comments
    (1.99.17).
  o Lightweight facility for managing user-defined keyboard
    shortcuts (1.99.17).
  o Improved customizability of item lists and enumerations
    (1.99.17).
  o Further improvements for preview and help balloons (1.99.16).
  o Possibility to find labels from their numeric value (1.99.16).
  o Incorporation of a smart-ref package for smart references
    (1.99.16).
  o Fix spell checking under Windows (1.99.16).
  o Add ⌃&amp; keyboard shortcut to toggle between equations and
    equation arrays (1.99.16).
  o Rudimentary support for Wacom-style pen tablets, Qt5 only
    (1.99.16).
  o Continued bug fixes (1.99.16).
  o Improved help balloons and preview facility for references
    and citations (1.99.15).
  o Improved navigation and search tools for labels, references,
    and citations (1.99.15).
  o Indicate the current cursor position by shaking the mouse
    (1.99.15).
  o Various bug fixes (1.99.15).
  o Release of “The Jolly Writer”—Your Guide to GNU TeXmacs
    (1.99.14).
  o Many bug fixes (1.99.14).
  o Improved Html export with better CSS stylability (1.99.14).
  o Improved support for Qt5 (1.99.14).
  o Improved Octave plugin (1.99.14).
  o Continued bug fixes (1.99.13).
  o Switch to Python 3 for plug-ins programmed in Python (1.99.13).
  o A Parser Framework for programming languages (1.99.13).
  o Improved Graphviz plugin with documentation in Chinese and
    syntax highlight (1.99.13).
  o Improved Maxima plugin with documentation in Chinese and bug
    fixes (1.99.13).
  o Improved Octave plugin on Windows for Octave 5.x (1.99.13).
  o Many bug fixes (1.99.12).
  o Make it easier to cite work on TeXmacs (1.99.12).
  o Improved Html import/export filters and support for MathJax
    (1.99.12).
  o Faster native (Qt-based) image export of formulas to Html
    (1.99.12).
  o Improved large bracket sizes and script positioning (1.99.12).
  o Various artwork related improvements (1.99.12).
  o Interface for SymPy (1.99.12).
  o Re-implement Asymptote, DraTex, Gnuplot, Graphviz, Xypic
    using Python for full platform support (1.99.12).
  o Documentation on how to write plugins using Python (1.99.12).
  o Updates of the dictionaries for French and Dutch (1.99.12).
  o (run-all-tests) aggregates and runs all the tests in Scheme
    (1.99.12).
  o Support for Java language (1.99.12).
  o Several bug fixes (1.99.11).
  o Repositories for Debian and Ubuntu (1.99.11).
  o Many bug fixes (1.99.10).
  o Redesigned web site (1.99.10).
  o Extended Css stylability when exporting to Html (1.99.10).
  o New TeXmacs videos on web site (1.99.10).
  o Drag and drop for images (1.99.10).
  o Unification of beamer and poster styles, work in progress
    (1.99.10).
  o Automatic retrieval of artwork from texmacs.org (1.99.10).
  o New background patterns and pictures (1.99.10).
  o Experimental pattern effects (1.99.10).
  o Experimental Sparkle support under MacOS (1.99.10).
  o Experimental and partial support for Git as a versioning tool
    (1.99.10).
  o Experimantal Graph plug-in for graphs drawn by various external
    tools (1.99.10).
  o User interface for new features in educational styles (1.99.10).
  o Many bug fixes (1.99.9).
  o Similar spell checking widgets as for search and replace
    (1.99.9).
  o Improved educational styles (1.99.9).
  o Multiple choice lists (1.99.9).
  o A unified Graph plugin for Graphviz, Asymptote (1.99.9).
  o Import improvements from the FriCAS project (1.99.9).
  o Fixes and documentation for the Sage plugin (1.99.9).
  o Several bug fixes (1.99.8).
  o Support of binary packages for various GNU/Linux distributions,
    constructed using Suse OpenBuild services (1.99.8).
  o Several new algorithms for micro typography: roots, mathematical
    accents, etc. (1.99.7).
  o New style for posters (1.99.7).
  o Support for new ACM styles (1.99.7).
  o Various bug fixes (1.99.7).
- removed feature-maxima-inline-plots_18125aa.patch because it's no
  longer needed
- License changed to GPL-3.0-or-later</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1703505600">- Cleanup and modernise spec file
- Honor optflags</changelog>
  <changelog author="RN  &lt;R_Nik_C@proton.me&gt;" date="1718193600">- Update to 2.1.4
  * Headless option for running TeXmacs as a window-less script
    (2.1.4).
  * Improved subtables (2.1.4).
  * Progress towards side tools, experimental (2.1.4).
  * Progress towards markup driven graphical user interface,
    experimental (2.1.4).
  * Support for basic gestures (2.1.3).
  * Improved quality of hand-drawn graphics (2.1.3).
  * Repulsive margin facility for simpler arrows between graphical
    text (2.1.3).
  * Stylable interface colors (2.1.3).
  * Stylable colors for syntax highlighting for Mathemagix and
    Scheme (2.1.3).
  * Various bug fixes (2.1.3).
  * Experimental interface for OS-supported speech recognition
    engines (2.1.3).</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1737806400">- Cleanup .spec file
- Added some unnecessary dependencies</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1737979200">- Added native pdf export dependency (boo#1235794)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1737979201">- Added reproducibility Reproducibility.patch
  (gh#texmacs/texmacs#77)</changelog>
</package>
<package pkgid="2494f96b8535c5d48749d74772582310e75ecdf957e0dcd15a3d39bbb5a6822a4922d00645b392b070fd9f4e3143c86979377b2d65ec1fd5afe14550c9763a12" name="ThePEG-devel" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="bp160.1.13"/>
  <changelog author="badshah400@gmail.com" date="1504353600">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="badshah400@gmail.com" date="1506168000">- Disable java bindings and binary until ThePEG becomes
  compatible with openjdk &gt;= 1.9; fixes build failures in Factory.</changelog>
  <changelog author="badshah400@gmail.com" date="1509624000">- Update to version 2.1.2:
  * Allow LHAPDF6 interface to return photon pdf.
  * Sign fix in GeneralVVSVertex
  * Fix multiple weight reading from LHE files
  * Preparations for Rivet 3</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 2.1.3:
  * Use std::array&lt;&gt; where suitable</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556798400">- Update to version 2.1.5
  * Improvements to template instantation of templates with gcc9
    and icc T23
  * Change in assignment operator definition, add delete, to avoid
    warnings with gcc9
  * Minor changes for compilation with gcc8,9, icc and clang
- Changes from version 2.1.4:
  * Improvements to helicity libraries to support more BSM models
  * Added FixedTargetLuminosity for fixed target collisions</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578139200">- Update to version 2.2.0:
  * Improvements to the unit templates, building with gcc 4.8 is
    no longer possible
  * Several smaller bug fixes and additions, to allow new features
    in Herwig 7.2
- Changes from version 2.1.6:
  * Update boost.m4 to allow compliation with new boost versions
  * Increase the eps parameter for boosts of wavefunctions
  * Fixes for gcc4.8 and C++17
  * Added inelasticity cut in SimpleDISCut
- Use %license to package COPYING file.
- Disable i586 arch: not supported by upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 2.2.1:
  * New release solely to keep Herwig and ThePEG version numbers
    in sync.
- Pass `with-hepmcversion=3` and `with-rivet=%{_prefix}` to
  configure fix ThePEG not compiling with HepMC and Rivet support.
- Drop conditionals for old openSUSE versions.
- Fix an env based hashbang.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1616068800">- Update to version 2.2.2:
  * Add meta mechanism to event record.
  * Add option of preloading yoda files and remove support for
    rivet-1 and aida.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651492800">- Update to version 2.2.3:
  * Support for spin 3 particles added.
  * hepmc3 compatiblity added.
  * Various bug fixes and improvements.
  * Fix for c++11 compatiblity added.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704283200">- Update to version 2.3.0:
  * gcc-12/c++17/c++20 compatibility added
  * hepmc3 compatibility added
  * rivet interface improved
  * infrastructure for dark interaction added
- Remove no longer required ThePEG_gcc6_failed.patch
- Run test suite.
- Add 32-bit ARM to ExcludeArch.
- Follow shared lib packaging policy by renaming ThePEG-libs to
  libThePEG* and using a versioned ld.so.conf file.</changelog>
</package>
<package pkgid="1e099e44453212631486375cd6080fb2c49581ba175814dc127207b0e5b272b8bcc2cc5f16db86498cf25f236d1264c7d0ec0e1797aba17f964a33e8ce24d08d" name="TreeMaker" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="bp160.1.16"/>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1681128000">- Initial release based on version 5.0.1.
- Add patches to fix build:
  * Allow-building-with-system-wxWidgets.patch
  * Use-explicit-this-for-dependent-base-members.patch
  * Fix-missing-declaration-of-wxPageSetupData-in-tmwxAp.patch
  * Replace-call-to-protected-wxWindow-ProcessEvent-by-H.patch
  * Stop-using-wxT-with-non-literals.patch
  * Explicitly-cast-argument-to-wxConfigBase-Write.patch
  * Let-tmwxTextCtrl-constructor-take-a-wxString.patch
  * Replace-tmwxDoc-GetPrintableName-call-by-GetDocument.patch
  * Inline-private-wxDocChildFrameAny-OnActivate.patch
  * Fix-flag-arguments-to-wxFileDialog-constructor.patch
  * Try-to-resolve-missing-members-in-tmwxHtmlHelpFrame.patch
  * Don-t-set-private-wxDialog-m_modalShowing.patch
  * Resolve-ambiguous-call-to-tmOnAssert.patch
  * Let-tmwxHtmlHelpController-CreateHelpWindow-match-wi.patch
  * Link-with-GTK-libraries.patch
  * Internalize-g_openDialogs-in-tmwxOptimizerDialog_gtk.patch
- Add patches to fix some bugs:
  * Fix-annoying-warning-about-suspiciuos-cast.patch
  * Fix-popups-about-ignored-flags-at-startup.patch
  * Fix-crash-on-opening-help.patch
  * Make-some-build-options-configurable.patch</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1699444800">- Fix "launchable" and add screenshot in AppStream metadata.
- Warn at build time if hhp2cached source version doesn't match
  the wxWidgets we build with.
- Run spec-cleaner.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1714564800">- Add patches:
  * Don-t-run-pkg-config-wx-config-for-every-compile-job.patch
  * Correctly-detect-64-bit-platforms.patch to fix GCC 14 build.</changelog>
</package>
<package pkgid="5f0b58a5ae5fa2ae0fb00611839bffeababaf79346beb7309f01ca7db0e4e21614ca459730a1c5796b15c7decea6ec3bfa1805afdc47f1cd0dedca080bbfe406" name="VFlib3" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="bp160.1.13"/>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- 12.2 has split freetype-devel</changelog>
  <changelog author="i@marguerite.su" date="1341230400">- fix openSUSE builds
- fix rpmlint warnings.</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- don't build with t1lib, no longer in Factory</changelog>
  <changelog author="i@marguerite.su" date="1458993600">- clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Switch to configure macro, uncomment japanese descriptions
- Take patches from debian:
  * VFlib3-compare-always-false.patch
  * VFlib3-freetype2.patch
  * VFlib3-gnu_source-declaration.patch
- Remove patches obsoleted by the above:
  * VFlib3-ppc64.patch
  * comparison-is-always-false-due-to-limited-range-of-data-type.patch
- Link against freetype2
- Split library to proper subpackage
- Reduce dependencies to contain only those really needed for build</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups and description typography.</changelog>
  <changelog author="tiwai@suse.de" date="1612440000">- Update to version 3.7.2:
  * Relased under dual-license (GPL v3 and FreeType).
- Dropped obsoleted patches:
  VFlib3-compare-always-false.patch
  VFlib3-freetype2.patch
  VFlib3-gnu_source-declaration.patch
  VFlib3-include.patch
  VFlib3-info-dir.patch
- Fix the build with the recent gcc due to the duplicated symbols:
  VFlib3-add-external.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprectated
  %patchN syntax.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1724414400">- Fix the build with gcc14:
  VFlib3-freetype2-fix.patch
  VFlib3-gcc14-fixes.patch</changelog>
</package>
<package pkgid="f668154943086ae88aec09919d0543d1ef16b683102cb842f4646e3a7183a5df2cd18167b87cd8bd57fde6ec23ef1b9d58bae00d95f257742efb559435be25c3" name="VFlib3-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="bp160.1.13"/>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- 12.2 has split freetype-devel</changelog>
  <changelog author="i@marguerite.su" date="1341230400">- fix openSUSE builds
- fix rpmlint warnings.</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- don't build with t1lib, no longer in Factory</changelog>
  <changelog author="i@marguerite.su" date="1458993600">- clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Switch to configure macro, uncomment japanese descriptions
- Take patches from debian:
  * VFlib3-compare-always-false.patch
  * VFlib3-freetype2.patch
  * VFlib3-gnu_source-declaration.patch
- Remove patches obsoleted by the above:
  * VFlib3-ppc64.patch
  * comparison-is-always-false-due-to-limited-range-of-data-type.patch
- Link against freetype2
- Split library to proper subpackage
- Reduce dependencies to contain only those really needed for build</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups and description typography.</changelog>
  <changelog author="tiwai@suse.de" date="1612440000">- Update to version 3.7.2:
  * Relased under dual-license (GPL v3 and FreeType).
- Dropped obsoleted patches:
  VFlib3-compare-always-false.patch
  VFlib3-freetype2.patch
  VFlib3-gnu_source-declaration.patch
  VFlib3-include.patch
  VFlib3-info-dir.patch
- Fix the build with the recent gcc due to the duplicated symbols:
  VFlib3-add-external.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprectated
  %patchN syntax.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1724414400">- Fix the build with gcc14:
  VFlib3-freetype2-fix.patch
  VFlib3-gcc14-fixes.patch</changelog>
</package>
<package pkgid="0a8172dfce5765aec143a37e48a05eb55199c989402e2d5a5375e67759a3c66e2ba6da499a5f5279253131d7f323316913395d986d5ff2837ad08029f4469b5a" name="Vc-devel" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp160.1.13"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1540900800">- Add handle-missing-libmvec.patch to fix build issues on archs for
  which libmvec is not available.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1541505600">- Add 0001-Fix-i686-build.patch to fix build failures on i686 targets.</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1562932800">- Use FAT lto objects as the package ships a static library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 1.4.1:
  * No upstream changelog available
- Drop upstreamed patches:
  * 0001-Fix-i686-build.patch
  * handle-missing-libmvec.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Add GCC 11 compatibility fix:
  * 0001-Add-missing-include-to-simdarray.h-275.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640347200">- Fix Vc-devel dependencies.
  VcTargets.cmake defines the Vc::Vc target which points to
  libVc.a. Vc-devel needs an explicit dependency on the package
  containing the static library.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 1.4.2:
  * Added a missing include for GCC11.
  * Fixed a corner case in the unit tests
  * Fixed a warning in the unit tests.
  * Removed the deprecated Vector&lt;T, VectorAbi::Scalar&gt;::reinterpretCast
    to fix a warning with GCC10
  * Avoid potentially pessimizing std::move in return statements.
  * Avoid redefinition of bit_scan{forward,reverse} macros.
  * Improved performance of simized random access containers
- drop 0001-Add-missing-include-to-simdarray.h-275.patch (upstream)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1657022400">- Update to version 1.4.3:
  * See https://github.com/VcDevel/Vc/releases/tag/1.4.3 for
    changelog.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1698062400">- Update to version 1.4.4
  * Add missing vectorcall to isImplementationSupported
  * Adapt to cpp17: std::iterator is deprecated
  * Rename None to NoTransformation in enum class Category to avoid
    a clash with X11 library
  * Fix horizontal min/max for uchar</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1719144000">- Update to version 1.4.5:
  * Small CMake improvements (gh#VcDevel/Vc#360).
  * Replace uses exec_program with execute_process
    (gh#VcDevel/Vc#364).</changelog>
</package>
<package pkgid="503abd0ed5bded4aa0ac739973f4e59818506484c3a3dd9b91f5347a707eb311736d6c60c3b56c01a6e7f90cea51d570a40d79893432396fdd2ebddcb6f059d5" name="Vc-devel-doc" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="bp160.1.13"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1540900800">- Add handle-missing-libmvec.patch to fix build issues on archs for
  which libmvec is not available.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1541505600">- Add 0001-Fix-i686-build.patch to fix build failures on i686 targets.</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1562932800">- Use FAT lto objects as the package ships a static library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 1.4.1:
  * No upstream changelog available
- Drop upstreamed patches:
  * 0001-Fix-i686-build.patch
  * handle-missing-libmvec.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Add GCC 11 compatibility fix:
  * 0001-Add-missing-include-to-simdarray.h-275.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640347200">- Fix Vc-devel dependencies.
  VcTargets.cmake defines the Vc::Vc target which points to
  libVc.a. Vc-devel needs an explicit dependency on the package
  containing the static library.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 1.4.2:
  * Added a missing include for GCC11.
  * Fixed a corner case in the unit tests
  * Fixed a warning in the unit tests.
  * Removed the deprecated Vector&lt;T, VectorAbi::Scalar&gt;::reinterpretCast
    to fix a warning with GCC10
  * Avoid potentially pessimizing std::move in return statements.
  * Avoid redefinition of bit_scan{forward,reverse} macros.
  * Improved performance of simized random access containers
- drop 0001-Add-missing-include-to-simdarray.h-275.patch (upstream)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1657022400">- Update to version 1.4.3:
  * See https://github.com/VcDevel/Vc/releases/tag/1.4.3 for
    changelog.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1698062400">- Update to version 1.4.4
  * Add missing vectorcall to isImplementationSupported
  * Adapt to cpp17: std::iterator is deprecated
  * Rename None to NoTransformation in enum class Category to avoid
    a clash with X11 library
  * Fix horizontal min/max for uchar</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1719144000">- Update to version 1.4.5:
  * Small CMake improvements (gh#VcDevel/Vc#360).
  * Replace uses exec_program with execute_process
    (gh#VcDevel/Vc#364).</changelog>
</package>
<package pkgid="984164b89419de85e30a96281fce8833976c4a55c5a664ceae80a0d837bb4795813bf2846ad4b8e08549ca5ef2c844779ed0a27d6656036e4e522e523b70072b" name="Vc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp160.1.13"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1540900800">- Add handle-missing-libmvec.patch to fix build issues on archs for
  which libmvec is not available.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1541505600">- Add 0001-Fix-i686-build.patch to fix build failures on i686 targets.</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1562932800">- Use FAT lto objects as the package ships a static library</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 1.4.1:
  * No upstream changelog available
- Drop upstreamed patches:
  * 0001-Fix-i686-build.patch
  * handle-missing-libmvec.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622894400">- Add GCC 11 compatibility fix:
  * 0001-Add-missing-include-to-simdarray.h-275.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1640347200">- Fix Vc-devel dependencies.
  VcTargets.cmake defines the Vc::Vc target which points to
  libVc.a. Vc-devel needs an explicit dependency on the package
  containing the static library.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 1.4.2:
  * Added a missing include for GCC11.
  * Fixed a corner case in the unit tests
  * Fixed a warning in the unit tests.
  * Removed the deprecated Vector&lt;T, VectorAbi::Scalar&gt;::reinterpretCast
    to fix a warning with GCC10
  * Avoid potentially pessimizing std::move in return statements.
  * Avoid redefinition of bit_scan{forward,reverse} macros.
  * Improved performance of simized random access containers
- drop 0001-Add-missing-include-to-simdarray.h-275.patch (upstream)</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1657022400">- Update to version 1.4.3:
  * See https://github.com/VcDevel/Vc/releases/tag/1.4.3 for
    changelog.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1698062400">- Update to version 1.4.4
  * Add missing vectorcall to isImplementationSupported
  * Adapt to cpp17: std::iterator is deprecated
  * Rename None to NoTransformation in enum class Category to avoid
    a clash with X11 library
  * Fix horizontal min/max for uchar</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1719144000">- Update to version 1.4.5:
  * Small CMake improvements (gh#VcDevel/Vc#360).
  * Replace uses exec_program with execute_process
    (gh#VcDevel/Vc#364).</changelog>
</package>
<package pkgid="4e6ca8e643a15deee0e2236d11a9ff7625e8cbcd95a5c9bb110fbee0d9249e1d3a4f5ed5d0b75fa65a83032eebebd42ccb54169d79b2c692951377f3163d4507" name="VecCore-devel" arch="x86_64">
  <version epoch="0" ver="0.8.1" rel="bp160.1.9"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1613995200">- Initial package.
- Add VecCore-support-external-ctest.patch: Support using external
  gtest instead of building it in-source; patch sent upstream.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to version 0.8.0:
  * New backend based on GCC 11's implementation of
    std::experimental::simd, which is part of the experimental
    support for data parallel types in C++20.
  * This backend offers the best of both Vc and UME::SIMD,
    as it performs well in most cases, from SSE2 up to AVX512.
- Drop upstream fixed VecCore-support-external-ctest.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1687867200">- update to 0.8.1:
  * Mark all `Mask{Empty,Full}` as `VECCORE_ATT_HOST_DEVICE`
  * Avoid including SIMD headers when compiling with nvcc</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714046400">- Pass CMAKE_CXX_STANDARD=14 to cmake to allow building tests
  against gtest &gt;= 1.14.0.</changelog>
</package>
<package pkgid="3a8533acc89955605d400a0ec69ddd8d0c107c246e6b59472368e95a59a01a25ade2aaf208ed84f328c86cc59743960245a009488405a333bc1e880629ca9e22" name="VirtualGL" arch="x86_64">
  <version epoch="0" ver="3.1" rel="bp160.1.13"/>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1572868800">- Add riscv64 to the list of 64-bit architectures</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1581249600">- update to 2.6.3
  * Changelog in packaged ChangeLog.md or at
    https://github.com/VirtualGL/virtualgl/blob/2.6.3/ChangeLog.md
- Refreshed patch VirtualGL-link-libs.patch
- Removed patch virtualgl-nodl.patch - resolved upstream
- Added patch glx.patch</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1591012800">- Remove conditional of applying glx.patch because we have newer Mesa
  in Leap 15.2
- Use upstream patch fix-Mesa-19.3.0-build.patch to replace glx.patch
  * Add fix-Mesa-19.3.0-build.patch
  * Remove glx.patch</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1594036800">- update to 2.6.4
  * Changelog in packaged ChangeLog.md or at
    https://github.com/VirtualGL/virtualgl/blob/2.6.4/ChangeLog.md
- Refreshed patch VirtualGL-link-libs.patch
- Removed patch fix-Mesa-19.3.0-build.patch - resolved upstream</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608379200">- update to 2.6.5:
  1. Fixed a race condition that sometimes caused various fatal errors in the
  interposed `glXMakeContextCurrent()` function if both GLX drawable IDs passed
  to that function were the same window handle and the corresponding X window was
  simultaneously resized in another thread.
  2. Fixed an oversight whereby the addresses of the interposed
  `glDrawBuffers()`, `glGetString()`, and `glGetStringi()` functions introduced
  in 2.6.3[2] and 2.6.4[1] were not returned from the interposed
  `glXGetProcAddress()` and `glXGetProcAddressARB()` functions.
  3. VirtualGL now works properly with 3D applications that use the
  `glNamedFramebufferDrawBuffer()` and `glNamedFramebufferDrawBuffers()`
  functions (OpenGL 4.5) or the `glFramebufferDrawBufferEXT()` and
  `glFramebufferDrawBuffersEXT()` functions (`GL_EXT_direct_state_access`) and
  render to the front buffer.
  4. Fixed a BadRequest X11 error that occurred when attempting to use the X11
  Transport with a remote X connection.
  5. Worked around an issue with certain GLX implementations that list
  10-bit-per-component FB configs ahead of 8-bit-per-component FB configs and
  incorrectly set `GLX_DRAWABLE_TYPE|=GLX_PIXMAP_BIT` for those 10-bpc FB
  configs, even though they have no X visuals attached.  This caused VirtualGL's
  interposed `glXChooseVisual()` function to choose one of the 10-bpc FB configs
  behind the scenes, which made it impossible to use the VGL Transport.
  6. Fixed an issue whereby, when using the X11 Transport, a vertically flipped
  image of a previously-rendered frame was sometimes displayed if the 3D
  application called `glFlush()` while the front buffer was the active drawing
  buffer and the render mode was `GL_FEEDBACK` or `GL_SELECT`.
  7. `vglserver_config` now works properly if invoked with a relative path
  (for example, `cd /opt/VirtualGL/bin; sudo ./vglserver_config`.)
  8. Worked around a limitation in the AMDGPU drivers that prevented recent
  versions of Google Chrome from enabling GPU acceleration when used with
  VirtualGL.</changelog>
  <changelog author="Anonymous Checkouts &lt;anoncvs@mailinator.com&gt;" date="1670760000">- update to 3.0.2
  * Now supports use of EGL as well as GLX</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671624000">- update to 3.0.2:
  1. Support for transparent overlay visuals has been retired in this version of
  VirtualGL.  That feature will continue to be maintained in the 2.6.x branch on
  a break/fix basis only.  Most applications that once used transparent overlay
  visuals used them with color index rendering, which was removed in OpenGL 3.1
  in 2009.  Thus, almost all applications that render overlays now do so using
  other mechanisms.  Furthermore, the need for VirtualGL to hand off the
  rendering of transparent overlay visuals to the 2D X server has always limited
  the usefulness of the feature, and the discontinuation of the VirtualGL Client
  for Exceed relegated the feature to Un*x clients (with workstation-class GPUs)
  and the VGL Transport only.  Given that nVidia's implementation of transparent
  overlay visuals requires disabling the X Composite extension, which cannot be
  done in many modern Linux distributions, that further limited the feature to
  the point of uselessness.
  2. The VirtualGL Faker now assigns various permutations of common OpenGL
  rendering attributes to the available 2D X server visuals.  This maximizes the
  chances that "visual hunting" 3D applications (applications that use X11
  functions to obtain a list of 2D X server visuals, then iterate through the
  list with `glXGetConfig()` until they find a visual with a desired set of
  OpenGL rendering attributes) will find a suitable visual.
  `VGL_DEFAULTFBCONFIG` can still be used to assign a specified set of OpenGL
  rendering attributes to all 2D X server visuals, although the usefulness of
  that feature is now very limited.
  3. The VirtualGL Faker now includes an EGL back end that optionally emulates
  the GLX API using a combination of the EGL API (with the
  `EGL_EXT_platform_device` extension) and OpenGL renderbuffer objects (RBOs.)
  On supported platforms, the EGL back end allows the VirtualGL Faker to be used
  without a 3D X server.  The EGL back end can be activated by setting the
  `VGL_DISPLAY` environment variable to the path of a DRI device, such as
  * */dev/dri/card0**, or by passing that device path to `vglrun` using the `-d`
  argument.  Some obsolete OpenGL and GLX features are not supported by the EGL</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1701864000">- Update to 3.1:
  1. Fixed an issue in the EGL back end whereby textures and other OpenGL objects
  were not automatically destroyed along with the context and drawable in which
  the objects were created.
  2. Added an environment variable (`VGL_EXITFUNCTION`) that, when set to
  `_exit` or `abort`, causes the VirtualGL Faker to call the specified function
  rather than `exit()` when a non-recoverable error occurs.
  3. Fixed an issue whereby the interposed `eglCreatePlatformWindowSurface()`
  and `eglCreatePlatformWindowSurfaceEXT()` functions incorrectly treated the
  native window argument as an X window handle rather than a pointer to an X
  window handle.  This caused a segfault in VLC when using the OpenGL video
  output module.
  4. `vglserver_config` now works properly with SUSE Linux Enterprise/openSUSE
  Leap 15.
  5. If the GLX back end is in use, then the interposed `eglGetDisplay()` and
  `eglGetPlatformDisplay()` functions now return `EGL_NO_DISPLAY` rather than
  throwing a fatal error.  This allows applications such as Firefox to fail
  gracefully or to fall back and use the GLX API if EGL/X11 is unavailable.
  6. Fixed an issue whereby the VirtualGL Configuration dialog did not pop up if
  the X keyboard extension was enabled on the 2D X server.
  7. The VirtualGL Faker no longer probes the 2D X server for stereo visuals
  unless the VGL Transport or a transport plugin will be used.  Even if the 2D X
  server has stereo visuals, they will never be used with the X11 and XV
  Transports.  Probing the 2D X server for stereo visuals causes problems with
  certain OpenGL implementations and with applications, such as Tecplot 360, that
  include static builds of Mesa.  An undocumented environment variable
  (`VGL_PROBEGLX`) can be used to override the default behavior.
  8. When using the EGL back end, interposed `XQueryExtension(..., "GLX", ...)`
  and `glXQueryExtension()` function calls now return `False`, rather than
  throwing a fatal error, if the 2D X server does not have a GLX extension.  (The
  EGL back end uses the 2D X server's GLX extension for GLX error handling.)
  This allows applications, such as Chrome/Chromium, to fail gracefully or use a
  different API (such as EGL/X11) if the VirtualGL Faker is unable to emulate
  GLX.
  9. The VirtualGL Client now runs on Macs with Apple silicon CPUs (without
  requiring Rosetta 2.)
- update to 3.0.90 (3.1 beta1)
  1. The `vglconnect -x` and `vglconnect -k` options have been retired in this
  version of VirtualGL and will continue to be maintained in the 3.0.x branch on
  a break/fix basis only.  Those options, which had been undocumented since
  VirtualGL 2.6.1, were a throwback to the early days of VirtualGL when SSH was
  not universally available and SSH X11 forwarding sometimes introduced a
  performance penalty.  `vglconnect -x` did not work with most modern operating
  systems, since most modern operating systems disable X11 TCP connections by
  default.
  2. SSL encryption of the VGL Transport has been retired in this version of
  VirtualGL and will continue to be maintained in the 3.0.x branch on a break/fix
  basis only.  That feature, which had not been included in official VirtualGL
  packages since VirtualGL 2.1.x, was not widely used.  Furthermore, SSL
  encryption of the VGL Transport had no performance advantages over SSH
  tunneling on modern systems, and it had some security disadvantages due to its
  reliance on the RSA key exchange algorithm (which made it incompatible with TLS
  v1.3.)
  3. When using the EGL back end, VirtualGL now supports 3D applications
  (including recent versions of Google Chrome/Chromium and Mozilla Firefox) that
  use the EGL/X11 API instead of the GLX API.  As of this writing, VirtualGL does
  not support EGL pixmap surfaces or front buffer/single buffer rendering with
  EGL window surfaces.
  4. On Un*x and Mac clients, `vglconnect` now uses the OpenSSH `ControlMaster`
  option to avoid the need to authenticate with the server multiple times when
  tunneling the VGL Transport through SSH.
  5. `vglconnect` now accepts a new command-line argument (`-v`) that, when
  combined with `-s`, causes VirtualGL to be preloaded into all processes
  launched in the remote shell, thus eliminating the need to invoke `vglrun`.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="fee48c912b6d958b1d6d38851e5d1085af701a2eb006dfa6583f565c32cdfa6911591a46def788dcc2e8256a7de8e7dfa02705663f817b3dd5e66262048f3ed4" name="VirtualGL-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="bp160.1.13"/>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1572868800">- Add riscv64 to the list of 64-bit architectures</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1581249600">- update to 2.6.3
  * Changelog in packaged ChangeLog.md or at
    https://github.com/VirtualGL/virtualgl/blob/2.6.3/ChangeLog.md
- Refreshed patch VirtualGL-link-libs.patch
- Removed patch virtualgl-nodl.patch - resolved upstream
- Added patch glx.patch</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1591012800">- Remove conditional of applying glx.patch because we have newer Mesa
  in Leap 15.2
- Use upstream patch fix-Mesa-19.3.0-build.patch to replace glx.patch
  * Add fix-Mesa-19.3.0-build.patch
  * Remove glx.patch</changelog>
  <changelog author="&#xC1;kos Sz&#x151;ts &lt;szotsaki@gmail.com&gt;" date="1594036800">- update to 2.6.4
  * Changelog in packaged ChangeLog.md or at
    https://github.com/VirtualGL/virtualgl/blob/2.6.4/ChangeLog.md
- Refreshed patch VirtualGL-link-libs.patch
- Removed patch fix-Mesa-19.3.0-build.patch - resolved upstream</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608379200">- update to 2.6.5:
  1. Fixed a race condition that sometimes caused various fatal errors in the
  interposed `glXMakeContextCurrent()` function if both GLX drawable IDs passed
  to that function were the same window handle and the corresponding X window was
  simultaneously resized in another thread.
  2. Fixed an oversight whereby the addresses of the interposed
  `glDrawBuffers()`, `glGetString()`, and `glGetStringi()` functions introduced
  in 2.6.3[2] and 2.6.4[1] were not returned from the interposed
  `glXGetProcAddress()` and `glXGetProcAddressARB()` functions.
  3. VirtualGL now works properly with 3D applications that use the
  `glNamedFramebufferDrawBuffer()` and `glNamedFramebufferDrawBuffers()`
  functions (OpenGL 4.5) or the `glFramebufferDrawBufferEXT()` and
  `glFramebufferDrawBuffersEXT()` functions (`GL_EXT_direct_state_access`) and
  render to the front buffer.
  4. Fixed a BadRequest X11 error that occurred when attempting to use the X11
  Transport with a remote X connection.
  5. Worked around an issue with certain GLX implementations that list
  10-bit-per-component FB configs ahead of 8-bit-per-component FB configs and
  incorrectly set `GLX_DRAWABLE_TYPE|=GLX_PIXMAP_BIT` for those 10-bpc FB
  configs, even though they have no X visuals attached.  This caused VirtualGL's
  interposed `glXChooseVisual()` function to choose one of the 10-bpc FB configs
  behind the scenes, which made it impossible to use the VGL Transport.
  6. Fixed an issue whereby, when using the X11 Transport, a vertically flipped
  image of a previously-rendered frame was sometimes displayed if the 3D
  application called `glFlush()` while the front buffer was the active drawing
  buffer and the render mode was `GL_FEEDBACK` or `GL_SELECT`.
  7. `vglserver_config` now works properly if invoked with a relative path
  (for example, `cd /opt/VirtualGL/bin; sudo ./vglserver_config`.)
  8. Worked around a limitation in the AMDGPU drivers that prevented recent
  versions of Google Chrome from enabling GPU acceleration when used with
  VirtualGL.</changelog>
  <changelog author="Anonymous Checkouts &lt;anoncvs@mailinator.com&gt;" date="1670760000">- update to 3.0.2
  * Now supports use of EGL as well as GLX</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671624000">- update to 3.0.2:
  1. Support for transparent overlay visuals has been retired in this version of
  VirtualGL.  That feature will continue to be maintained in the 2.6.x branch on
  a break/fix basis only.  Most applications that once used transparent overlay
  visuals used them with color index rendering, which was removed in OpenGL 3.1
  in 2009.  Thus, almost all applications that render overlays now do so using
  other mechanisms.  Furthermore, the need for VirtualGL to hand off the
  rendering of transparent overlay visuals to the 2D X server has always limited
  the usefulness of the feature, and the discontinuation of the VirtualGL Client
  for Exceed relegated the feature to Un*x clients (with workstation-class GPUs)
  and the VGL Transport only.  Given that nVidia's implementation of transparent
  overlay visuals requires disabling the X Composite extension, which cannot be
  done in many modern Linux distributions, that further limited the feature to
  the point of uselessness.
  2. The VirtualGL Faker now assigns various permutations of common OpenGL
  rendering attributes to the available 2D X server visuals.  This maximizes the
  chances that "visual hunting" 3D applications (applications that use X11
  functions to obtain a list of 2D X server visuals, then iterate through the
  list with `glXGetConfig()` until they find a visual with a desired set of
  OpenGL rendering attributes) will find a suitable visual.
  `VGL_DEFAULTFBCONFIG` can still be used to assign a specified set of OpenGL
  rendering attributes to all 2D X server visuals, although the usefulness of
  that feature is now very limited.
  3. The VirtualGL Faker now includes an EGL back end that optionally emulates
  the GLX API using a combination of the EGL API (with the
  `EGL_EXT_platform_device` extension) and OpenGL renderbuffer objects (RBOs.)
  On supported platforms, the EGL back end allows the VirtualGL Faker to be used
  without a 3D X server.  The EGL back end can be activated by setting the
  `VGL_DISPLAY` environment variable to the path of a DRI device, such as
  * */dev/dri/card0**, or by passing that device path to `vglrun` using the `-d`
  argument.  Some obsolete OpenGL and GLX features are not supported by the EGL</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1701864000">- Update to 3.1:
  1. Fixed an issue in the EGL back end whereby textures and other OpenGL objects
  were not automatically destroyed along with the context and drawable in which
  the objects were created.
  2. Added an environment variable (`VGL_EXITFUNCTION`) that, when set to
  `_exit` or `abort`, causes the VirtualGL Faker to call the specified function
  rather than `exit()` when a non-recoverable error occurs.
  3. Fixed an issue whereby the interposed `eglCreatePlatformWindowSurface()`
  and `eglCreatePlatformWindowSurfaceEXT()` functions incorrectly treated the
  native window argument as an X window handle rather than a pointer to an X
  window handle.  This caused a segfault in VLC when using the OpenGL video
  output module.
  4. `vglserver_config` now works properly with SUSE Linux Enterprise/openSUSE
  Leap 15.
  5. If the GLX back end is in use, then the interposed `eglGetDisplay()` and
  `eglGetPlatformDisplay()` functions now return `EGL_NO_DISPLAY` rather than
  throwing a fatal error.  This allows applications such as Firefox to fail
  gracefully or to fall back and use the GLX API if EGL/X11 is unavailable.
  6. Fixed an issue whereby the VirtualGL Configuration dialog did not pop up if
  the X keyboard extension was enabled on the 2D X server.
  7. The VirtualGL Faker no longer probes the 2D X server for stereo visuals
  unless the VGL Transport or a transport plugin will be used.  Even if the 2D X
  server has stereo visuals, they will never be used with the X11 and XV
  Transports.  Probing the 2D X server for stereo visuals causes problems with
  certain OpenGL implementations and with applications, such as Tecplot 360, that
  include static builds of Mesa.  An undocumented environment variable
  (`VGL_PROBEGLX`) can be used to override the default behavior.
  8. When using the EGL back end, interposed `XQueryExtension(..., "GLX", ...)`
  and `glXQueryExtension()` function calls now return `False`, rather than
  throwing a fatal error, if the 2D X server does not have a GLX extension.  (The
  EGL back end uses the 2D X server's GLX extension for GLX error handling.)
  This allows applications, such as Chrome/Chromium, to fail gracefully or use a
  different API (such as EGL/X11) if the VirtualGL Faker is unable to emulate
  GLX.
  9. The VirtualGL Client now runs on Macs with Apple silicon CPUs (without
  requiring Rosetta 2.)
- update to 3.0.90 (3.1 beta1)
  1. The `vglconnect -x` and `vglconnect -k` options have been retired in this
  version of VirtualGL and will continue to be maintained in the 3.0.x branch on
  a break/fix basis only.  Those options, which had been undocumented since
  VirtualGL 2.6.1, were a throwback to the early days of VirtualGL when SSH was
  not universally available and SSH X11 forwarding sometimes introduced a
  performance penalty.  `vglconnect -x` did not work with most modern operating
  systems, since most modern operating systems disable X11 TCP connections by
  default.
  2. SSL encryption of the VGL Transport has been retired in this version of
  VirtualGL and will continue to be maintained in the 3.0.x branch on a break/fix
  basis only.  That feature, which had not been included in official VirtualGL
  packages since VirtualGL 2.1.x, was not widely used.  Furthermore, SSL
  encryption of the VGL Transport had no performance advantages over SSH
  tunneling on modern systems, and it had some security disadvantages due to its
  reliance on the RSA key exchange algorithm (which made it incompatible with TLS
  v1.3.)
  3. When using the EGL back end, VirtualGL now supports 3D applications
  (including recent versions of Google Chrome/Chromium and Mozilla Firefox) that
  use the EGL/X11 API instead of the GLX API.  As of this writing, VirtualGL does
  not support EGL pixmap surfaces or front buffer/single buffer rendering with
  EGL window surfaces.
  4. On Un*x and Mac clients, `vglconnect` now uses the OpenSSH `ControlMaster`
  option to avoid the need to authenticate with the server multiple times when
  tunneling the VGL Transport through SSH.
  5. `vglconnect` now accepts a new command-line argument (`-v`) that, when
  combined with `-s`, causes VirtualGL to be preloaded into all processes
  launched in the remote shell, thus eliminating the need to invoke `vglrun`.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="0aa51c341f387a983150671722d76fcbd598d5b4351b85189077f6dfe0b1b05d3830c34a0815fc186aa94c1718a98293ca169c0a0ab028d0c91d3174f059b88a" name="WPEWebDriver" arch="x86_64">
  <version epoch="0" ver="2.46.6" rel="bp160.1.10"/>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1688126400">- Init repo.</changelog>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1695729600">- Update to version 2.42.0:
  * GBM is no longer required for WebGL implementation.
  * Add API to configure experimental features at runtime.
  * Add API to set the percentage of volume space that can be used for data storage.
  * Fix several crashes and rendering issues.</changelog>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1700654400">- Update to version 2.42.2:
  * Bump Safari version in user agent header.
  * Fix CSP regression that broke Unity WebGL applications.
  * Fix the build with GBM disabled.
  * Fix several crashes and rendering issues.
- Temporaly disable LTO which is currently failing to link
  (will be solved in a next release).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1714737600">- Update to version 2.44.1:
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build with ENABLE_VIDEO=OFF.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
  + For all changes between 2.42.2 and 2.44.1, please see packaged
    NEWS file.
- Add libbacktrace-devel BuildRequires: new dependency.
- Drop fix-include-dirs.patch and fix-load-backend-fdo-lib.patch:
  no longer needed.</changelog>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1716465600">- Update to version 2.44.2:
  * Fix CVE-2024-27834 bsc#1225071
  * Decrease input notifications for gamepad inputs.
  * Disable the gst-libav AAC decoder.
  * Make gamepads visible on axis movements, and not only on button presses.
  * Make user scripts and style sheets visible in the Web Inspector.
  * Use the geolocation portal where available, with the existing Geoclue as fallback if the portal is not usable.
  * Use optimized assembler BoringSSL modules with USE_LIBWEBRTC enabled.
  * Fix mouse location in WebDriver when output device scaling is in effect.
  * Fix touch input event propagation.
  * Fix the build on 32-bit ARM with USE_LIBWEBRTC enabled.
  * Fix the build with ENABLE_WEBAUDIO disabled.
  * Fix several crashes and rendering issues.</changelog>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1717502400">- Stop passing -DENABLE_SAMPLING_PROFILER=OFF and -DENABLE_C_LOOP=ON
  on arch64, it's no longer needed to avoid build failure.
- Set wayland and xkbcommon includes through CFLAGS and CXXFLAGS,
  it looks like the compiler can't automatically find them.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1727524800">- Update to version 2.46.0:
  + Fix rendering of images in PDF documents.
  + Make process launching fast again.
  + Fix webkit_web_resource_get_data() regression that caused we
    were always retuning empty data.
  + Fix the build with touch events disabled.
  + Fix the build with GLib &lt; 2.68.
  + Fix several crashes and rendering issues.
  + For all changes between 2.44.2 and 2.45.90, please see packaged
    NEWS file.
- Add libinput to BuildRequires: new dependency.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Only disable LTO on x86 and ppc64le.
- Package libWPEPlatform (new WPE platform API).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1732104000">- Add fix-icu-build.patch: Support ICU 76.1 build</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1739966400">- Update to version 2.46.6:
  + Support building against ICU 76.1
  + Fix lost initial audio samples played using WebAudio on 32-bit
    Raspberry Pi devices when using the OpenMAX GStreamer elements.
  + Fix rendering on GPUs with maximum texture size smaller than
    2000x2000 pixels by querying the maximum size supported at
    runtime.
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
- Drop fix-icu-build.patch: Fixed upstream.
- Drop libWPEPlatform sub-package, no longer built.</changelog>
</package>
<package pkgid="4f5a9ee321dcfb3f58dfcaef8c07bdacaa206f35595b644a6eed139331efc1e21f4429ac36135990c57ffe0e2289b6128fb10fca3f127f7de80c8962df5c7125" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.48.5" rel="160000.1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1741953600">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Add flite-devel BuildRequires: New dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1741953601">- Use spiel for speech synthesis, rather than flite. Spiel supports
  multiple back ends and might become the upstream default once it
  is more widely available in Linux distributions.
- Up some version requirements to match the cmake checks in 2.48.0.
- Drop dependency on atk. It is no longer used.</changelog>
  <changelog author="dimstar@opensuse.org" date="1742212800">- Drop baselibs.conf: no longer build bi-arch flavors of
  libjavascriptcoregtk-4_0-18 and libwebkit2gtk-4_0-37: in
  openSUSE:Factory, the gtk3-soup2 flavor is not built at all,
  which means outside of 3rd-party projects, this change has no
  impact.</changelog>
  <changelog author="mgorse@suse.com" date="1743854400">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1744200000">- Remove conditionals related to SLE 15. It is unlikely that we
  will sync to SLE 15 again, and this simplifies the spec.</changelog>
  <changelog author="mgorse@suse.com" date="1747569600">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748433600">- Update to version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.</changelog>
  <changelog author="bwiedemann@suse.com" date="1749384000">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="mgorse@suse.com" date="1753876800">- Update to version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.</changelog>
</package>
<package pkgid="3e48d8a034fe692f5c59ab1ae3976788101aca3c861215daf2ed4a5f68a108a2440081c349d7068d9bb85a852504912113f56f4e39228da793d93caeee5ef2a2" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.50.4" rel="160000.1.1"/>
  <changelog author="mgorse@suse.com" date="1757332800">- Disable skia on ppc64le for now. It currently makes the build
  fail.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1758110400">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.</changelog>
  <changelog author="mgorse@suse.com" date="1758196800">- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  i586. Needed to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Remove _constraints override for armv6l and armv7l. They were
  less restrictive than the default and look to be unneeded now.</changelog>
  <changelog author="mgorse@suse.com" date="1758542400">- Also pass ggc-min-expand=30 and disable LTO on arm.
- Update webkit2gtk3-i586-build-fix.patch to correspond to what was
  committed to the upstream branch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760097600">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="bc883090d38690152011d95b3e4c95653ec496f90cdf6410c57cd9bfc3a01fea72dfaa812692195f78ae07f8ca28253067b6928e7bad210aba3ebc3c76f32031" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.52.1" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1760097600">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.
- Disable LTO; it currently makes the link fail.</changelog>
  <changelog author="mgorse@suse.com" date="1774008000">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.</changelog>
  <changelog author="mgorse@suse.com" date="1774353600">- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
  <changelog author="mgorse@suse.com" date="1775822400">- Fix webkit2gtk3-libsoup2.patch. It was removing some includes
  that we shouldn't remove. Also tweak to hopefully avoid needing
  to constantly rebase when the API minor version changes.</changelog>
</package>
<package pkgid="0ae9c16e1afec9eeb89ab31b4b9ebc8f5635060fe8277571f55d3e70246bc5c8c44f9a1bae6c4cd9d141c209242cebfa402cf1f51c9d9f0f8e539e229ce55fa1" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.52.4" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.
- Disable LTO; it currently makes the link fail.</changelog>
  <changelog author="mgorse@suse.com" date="1774008000">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.</changelog>
  <changelog author="mgorse@suse.com" date="1774353600">- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
  <changelog author="mgorse@suse.com" date="1775822400">- Fix webkit2gtk3-libsoup2.patch. It was removing some includes
  that we shouldn't remove. Also tweak to hopefully avoid needing
  to constantly rebase when the API minor version changes.</changelog>
  <changelog author="mgorse@suse.com" date="1780488000">- Update to version 2.52.4 (bsc#1267506 bsc#1267507 bsc#1267508
  bsc#1267509 bsc#1267510 bsc#1267511 bsc#1267512 bsc#1267513
  bsc#1267514 bsc#1267515 bsc#1267516 bsc#1267517 bsc#1267518
  bsc#1267519 bsc#1267520 bsc#1267521):
  + Add support for half-width fonts.
  + Improve content filter compilation by avoiding file copies.
  + Improve handling of out of disk space conditions when the
    NetworkProcess tried to write data in caches.
  + Improve how the CMake build system checks whether libatomic is
    required.
  + Fix painting scrollbars when their width changes.
  + Fix playback of certain YouTube videos with low frame rates.
  + Fix webkit://gpu not working in systems where neither
    libGL.so.1 nor libOpenGL.so.0 are available.
  + Fix the build with librice 0.4 or newer when the GStreamer
    WebRTC backend is enabled at build configuration time.
  + Fix the build with USE_GSTREAMER_WEBRTC=OFF.
  + Fix the build with USE_GBM=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,
    CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,
    CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,
    CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,
    CVE-2026-43658, CVe-2026-43660.
  + Changes in version .52.3;
  + Add support for the "scrollbar-color" CSS property.
  + Fix some emoji glyphs being rendered as missing glyph boxes.
  + Fix JavaScriptCore crashes on architectures other than x86_64.
  + Fix the build on s390x.
  + Changes in version 2.52.2:
  + Improve handling of real-time threads.
  + Fix scrollbar rendering glitches visible in some GPU
    configurations.
  + Fix V4L2 hardware accelerated media codecs now working due to
    overly restrictive sandbox device access rules.
  + Fix leak of bitmap images in
    webkit_favicon_database_get_favicon_finish().
  + Fix the build with USE_GTK4=OFF.
- Drop webkit2gtk3-aarch64-build-fix.patch and
  webkitgtk-gtk3-build-fix.patch: fixed upstream.
- Add webkitgtk-ppc64le-build-fix.patch: fix the build when system
  malloc is enabled.</changelog>
</package>
<package pkgid="1cac4b1d14da9b0aa90229ca285c6e136e2feecc7a3b5e8211844e1f10064179d4041d4d95d27a16c377367e4d3cb35f299fa39ad838cae4e6e1b887e8503e41" name="WebKitGTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.48.5" rel="160000.1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1741953600">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Add flite-devel BuildRequires: New dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1741953601">- Use spiel for speech synthesis, rather than flite. Spiel supports
  multiple back ends and might become the upstream default once it
  is more widely available in Linux distributions.
- Up some version requirements to match the cmake checks in 2.48.0.
- Drop dependency on atk. It is no longer used.</changelog>
  <changelog author="dimstar@opensuse.org" date="1742212800">- Drop baselibs.conf: no longer build bi-arch flavors of
  libjavascriptcoregtk-4_0-18 and libwebkit2gtk-4_0-37: in
  openSUSE:Factory, the gtk3-soup2 flavor is not built at all,
  which means outside of 3rd-party projects, this change has no
  impact.</changelog>
  <changelog author="mgorse@suse.com" date="1743854400">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1744200000">- Remove conditionals related to SLE 15. It is unlikely that we
  will sync to SLE 15 again, and this simplifies the spec.</changelog>
  <changelog author="mgorse@suse.com" date="1747569600">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748433600">- Update to version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.</changelog>
  <changelog author="bwiedemann@suse.com" date="1749384000">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="mgorse@suse.com" date="1753876800">- Update to version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.</changelog>
</package>
<package pkgid="5003e965c45e53137b8a8d6861a48e858c1c759a338d0758bd558aa3931d84f998c8a9d8d1433e3114317ba68b24d69caf5666adb75ec208bae1beab57f3581e" name="WebKitGTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.50.4" rel="160000.1.1"/>
  <changelog author="mgorse@suse.com" date="1757332800">- Disable skia on ppc64le for now. It currently makes the build
  fail.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1758110400">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.</changelog>
  <changelog author="mgorse@suse.com" date="1758196800">- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  i586. Needed to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Remove _constraints override for armv6l and armv7l. They were
  less restrictive than the default and look to be unneeded now.</changelog>
  <changelog author="mgorse@suse.com" date="1758542400">- Also pass ggc-min-expand=30 and disable LTO on arm.
- Update webkit2gtk3-i586-build-fix.patch to correspond to what was
  committed to the upstream branch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760097600">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="70085514a3ea561e1599e80fead3839c03dfa192c8da1de444fc3e0b5e42dac5aa371df15490eb63b9a211da7e7823652574db97725ae579805684b16dc6a7ca" name="WebKitGTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.52.1" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1760097600">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.
- Disable LTO; it currently makes the link fail.</changelog>
  <changelog author="mgorse@suse.com" date="1774008000">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.</changelog>
  <changelog author="mgorse@suse.com" date="1774353600">- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
  <changelog author="mgorse@suse.com" date="1775822400">- Fix webkit2gtk3-libsoup2.patch. It was removing some includes
  that we shouldn't remove. Also tweak to hopefully avoid needing
  to constantly rebase when the API minor version changes.</changelog>
</package>
<package pkgid="2bbc782931557493f4c01ec9609b5548fd0cf1c52169be98d4176c4d421f82ebc83c636fb61435a6a83b3045d745629644c4057c30a07724f133404e01ee611a" name="WebKitGTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.52.4" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.
- Disable LTO; it currently makes the link fail.</changelog>
  <changelog author="mgorse@suse.com" date="1774008000">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.</changelog>
  <changelog author="mgorse@suse.com" date="1774353600">- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
  <changelog author="mgorse@suse.com" date="1775822400">- Fix webkit2gtk3-libsoup2.patch. It was removing some includes
  that we shouldn't remove. Also tweak to hopefully avoid needing
  to constantly rebase when the API minor version changes.</changelog>
  <changelog author="mgorse@suse.com" date="1780488000">- Update to version 2.52.4 (bsc#1267506 bsc#1267507 bsc#1267508
  bsc#1267509 bsc#1267510 bsc#1267511 bsc#1267512 bsc#1267513
  bsc#1267514 bsc#1267515 bsc#1267516 bsc#1267517 bsc#1267518
  bsc#1267519 bsc#1267520 bsc#1267521):
  + Add support for half-width fonts.
  + Improve content filter compilation by avoiding file copies.
  + Improve handling of out of disk space conditions when the
    NetworkProcess tried to write data in caches.
  + Improve how the CMake build system checks whether libatomic is
    required.
  + Fix painting scrollbars when their width changes.
  + Fix playback of certain YouTube videos with low frame rates.
  + Fix webkit://gpu not working in systems where neither
    libGL.so.1 nor libOpenGL.so.0 are available.
  + Fix the build with librice 0.4 or newer when the GStreamer
    WebRTC backend is enabled at build configuration time.
  + Fix the build with USE_GSTREAMER_WEBRTC=OFF.
  + Fix the build with USE_GBM=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,
    CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,
    CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,
    CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,
    CVE-2026-43658, CVe-2026-43660.
  + Changes in version .52.3;
  + Add support for the "scrollbar-color" CSS property.
  + Fix some emoji glyphs being rendered as missing glyph boxes.
  + Fix JavaScriptCore crashes on architectures other than x86_64.
  + Fix the build on s390x.
  + Changes in version 2.52.2:
  + Improve handling of real-time threads.
  + Fix scrollbar rendering glitches visible in some GPU
    configurations.
  + Fix V4L2 hardware accelerated media codecs now working due to
    overly restrictive sandbox device access rules.
  + Fix leak of bitmap images in
    webkit_favicon_database_get_favicon_finish().
  + Fix the build with USE_GTK4=OFF.
- Drop webkit2gtk3-aarch64-build-fix.patch and
  webkitgtk-gtk3-build-fix.patch: fixed upstream.
- Add webkitgtk-ppc64le-build-fix.patch: fix the build when system
  malloc is enabled.</changelog>
</package>
<package pkgid="5cec3a84ab0b280c6817383060565b9d8d4c3d42103d435b97710ecbef00cefa851ed15e51550a927e51b5f1dc0414b6a0bbba7fc7d43a6f779fe40576bdbd17" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.48.5" rel="160000.1.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1741953600">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Add flite-devel BuildRequires: New dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1741953601">- Use spiel for speech synthesis, rather than flite. Spiel supports
  multiple back ends and might become the upstream default once it
  is more widely available in Linux distributions.
- Up some version requirements to match the cmake checks in 2.48.0.
- Drop dependency on atk. It is no longer used.</changelog>
  <changelog author="dimstar@opensuse.org" date="1742212800">- Drop baselibs.conf: no longer build bi-arch flavors of
  libjavascriptcoregtk-4_0-18 and libwebkit2gtk-4_0-37: in
  openSUSE:Factory, the gtk3-soup2 flavor is not built at all,
  which means outside of 3rd-party projects, this change has no
  impact.</changelog>
  <changelog author="mgorse@suse.com" date="1743854400">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1744200000">- Remove conditionals related to SLE 15. It is unlikely that we
  will sync to SLE 15 again, and this simplifies the spec.</changelog>
  <changelog author="mgorse@suse.com" date="1747569600">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748433600">- Update to version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.</changelog>
  <changelog author="bwiedemann@suse.com" date="1749384000">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="mgorse@suse.com" date="1753876800">- Update to version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.</changelog>
</package>
<package pkgid="94c1ede71031a618f6b464befc2e1436e7ed5c76c0ea03f695371c37e0f95e633362a6275b3274f5b2f9a01f7db90385577c0d241168a475732a489a454fc13e" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.50.4" rel="160000.1.1"/>
  <changelog author="mgorse@suse.com" date="1757332800">- Disable skia on ppc64le for now. It currently makes the build
  fail.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1758110400">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.</changelog>
  <changelog author="mgorse@suse.com" date="1758196800">- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  i586. Needed to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Remove _constraints override for armv6l and armv7l. They were
  less restrictive than the default and look to be unneeded now.</changelog>
  <changelog author="mgorse@suse.com" date="1758542400">- Also pass ggc-min-expand=30 and disable LTO on arm.
- Update webkit2gtk3-i586-build-fix.patch to correspond to what was
  committed to the upstream branch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1760097600">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="0bb902cb9b6065b23d2e38d4bb6efad3b434e34b2bf08d12d0df28780227867dd858a4f80bfafcb7fe529005aacb399c8f510fbd82776521726039cc06aabcb6" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.52.1" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1760097600">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Also pass ggc-min-expand=30 on s390x. Memory has been an issue
  there, at least on SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.
- Disable LTO; it currently makes the link fail.</changelog>
  <changelog author="mgorse@suse.com" date="1774008000">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.</changelog>
  <changelog author="mgorse@suse.com" date="1774353600">- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
  <changelog author="mgorse@suse.com" date="1775822400">- Fix webkit2gtk3-libsoup2.patch. It was removing some includes
  that we shouldn't remove. Also tweak to hopefully avoid needing
  to constantly rebase when the API minor version changes.</changelog>
</package>
<package pkgid="6fd7c8e2f1917a1f1f67574745fc64c7eff30ed7f88a76281f871b70db8bae35104316ec2d3713c89037e7304ca05064e9d68ee33ed71814c325db7aa728324a" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.52.4" rel="160000.1.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1763640000">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1764849600">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.
- Disable LTO; it currently makes the link fail.</changelog>
  <changelog author="mgorse@suse.com" date="1774008000">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.</changelog>
  <changelog author="mgorse@suse.com" date="1774353600">- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
  <changelog author="mgorse@suse.com" date="1775822400">- Fix webkit2gtk3-libsoup2.patch. It was removing some includes
  that we shouldn't remove. Also tweak to hopefully avoid needing
  to constantly rebase when the API minor version changes.</changelog>
  <changelog author="mgorse@suse.com" date="1780488000">- Update to version 2.52.4 (bsc#1267506 bsc#1267507 bsc#1267508
  bsc#1267509 bsc#1267510 bsc#1267511 bsc#1267512 bsc#1267513
  bsc#1267514 bsc#1267515 bsc#1267516 bsc#1267517 bsc#1267518
  bsc#1267519 bsc#1267520 bsc#1267521):
  + Add support for half-width fonts.
  + Improve content filter compilation by avoiding file copies.
  + Improve handling of out of disk space conditions when the
    NetworkProcess tried to write data in caches.
  + Improve how the CMake build system checks whether libatomic is
    required.
  + Fix painting scrollbars when their width changes.
  + Fix playback of certain YouTube videos with low frame rates.
  + Fix webkit://gpu not working in systems where neither
    libGL.so.1 nor libOpenGL.so.0 are available.
  + Fix the build with librice 0.4 or newer when the GStreamer
    WebRTC backend is enabled at build configuration time.
  + Fix the build with USE_GSTREAMER_WEBRTC=OFF.
  + Fix the build with USE_GBM=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2026-28847, CVE-2026-28883, CVE-2026-28901,
    CVE-2026-28902, CVE-2026-28903, CVE-2026-28904,
    CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946,
    CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958,
    CVE-2026-43658, CVe-2026-43660.
  + Changes in version .52.3;
  + Add support for the "scrollbar-color" CSS property.
  + Fix some emoji glyphs being rendered as missing glyph boxes.
  + Fix JavaScriptCore crashes on architectures other than x86_64.
  + Fix the build on s390x.
  + Changes in version 2.52.2:
  + Improve handling of real-time threads.
  + Fix scrollbar rendering glitches visible in some GPU
    configurations.
  + Fix V4L2 hardware accelerated media codecs now working due to
    overly restrictive sandbox device access rules.
  + Fix leak of bitmap images in
    webkit_favicon_database_get_favicon_finish().
  + Fix the build with USE_GTK4=OFF.
- Drop webkit2gtk3-aarch64-build-fix.patch and
  webkitgtk-gtk3-build-fix.patch: fixed upstream.
- Add webkitgtk-ppc64le-build-fix.patch: fix the build when system
  malloc is enabled.</changelog>
</package>
<package pkgid="b8e0b2b7da9329356f9c7158731b21dfc64abadf64c1df900ae49175ed34e675dc68bc5faa59f7389cff9c7fea743cb8e9454986f32dacb7498e5ba7e5ed90fd" name="XSStrike" arch="noarch">
  <version epoch="0" ver="3.1.5" rel="bp160.1.11"/>
  <changelog author="Paolo Perego &lt;paolo.perego@suse.com&gt;" date="1625054400">- First import from upstream. XSStrike is a tool designed to discover XSS in
  web applications.</changelog>
  <changelog author="Paolo Perego &lt;paolo.perego@suse.com&gt;" date="1625140800">- Create a link to xsstrike.py into /usr/bin (with removal support in
  uninstallation)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715774400">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="d87891768517e8a98117ba30d206516110c606061f4e263e52d102e80d90caec4b3242267eb2f0c2f6755d6e26980cd696b42dd0539656f40d101c5057d7614c" name="XyGrib" arch="x86_64">
  <version epoch="0" ver="1.2.6.1" rel="bp160.1.13"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563105600">- Version 1.2.6
- Macbook touchpad zooming of map issue fixed
- Belgium NMC opendata gribs can now be read by XyGrib
- GFS reflectivity added
- ECMWF ERA5 reanalysis data can now be read
- NOADD GFS Ensemble model can now be read
- Improvements in wave display
- utf-8 characters in file paths should be readable
- new icon
- Many behind the scenes improvements and bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563278400">- Categories fixed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563537600">- version 1.2.6.1
  Installation path fixed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593864000">- QPainter.patch applied for build error in TW (gcc10)
  github.com/opengribs/XyGrib/pull/255</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1610712000">- Use %cmake_build rather then %make_jobs</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614686400">- libjpeg24.diff added to fix build error with openjpeg 2.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1637236800">- proj8.diff and projection.diff added to fix build failure with proj 8</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1654603200">- adapted libjpeg24.diff to cope with openjpeg 2.5</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1669291200">- proj version 9 breaks TW build
  proj9.diff added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1707134400">- proj8.diff removed (Leap 15.4 is deprecated)
  switch to %autosetup for rpm 4.19 compatibility</changelog>
</package>
<package pkgid="d425612c9b79b538cdea9b46357edf4a95fe099a1249f78fffbb9c19d40f66b4dbc078933484c312349baf328c2dcaac3489257f3563bed3b0d9526bd8a0f984" name="YODA-devel" arch="x86_64">
  <version epoch="0" ver="1.9.11" rel="bp160.1.8"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 1.9.5:
  * Add per-AO double-precision writing if the
    WriterDoublePrecision annotation is set.
  * Ensure that default variation +- errors are both positive, for
    all Scatter types.  Original patch by Jon Butterworth.
  * Protect against NaNs arising from the YAML parser in
    error-breakdown calcs.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657195200">- Add patch to fix build with python 3.10:
  * 0001-fix-cython-rebuild-after-configure.patch
- Spec cleanup</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657886400">- Update to version 1.9.6:
  * Pass ignoreOffDiagonalTerms correctly when retrieving
    covariance matrix from a Scatter2D.
  * Add a covariance/off-diag test to test-s2d.py
  * Force Cython rebuilds on all .pyx files, if possible (helps
    with Python ABI compat).
- Drop 0001-fix-cython-rebuild-after-configure.patch: incorporated
  upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Set PYTHONPATH to buildroot's python3_sitearch before testing to
  allow importing of yoda module.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 1.9.7
  * Add Stat and Uncor to labels flagged as uncorrelated.
  * Update yaml-cpp version for C++17 compatibility.
  * Replace distutils with sysconfig and manual calls to the
    compiler.
- Add YODA-correct-python-platlib.patch: Use correct python
  platlib ($prefix/lib64) consistently across different python
  versions; although we do not build for multiple python versions,
  we would not want to adapt the file list everytime upstream
  python vacillates between lib (e.g. python 3.8/3.10) vs lib64
  (e.g. python 3.9) for platlib.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1689076800">- Update to version 1.9.8:
  * Fix Cython matching of optional Booleans in ROOT conversion
    functions.
  * Introducing matplotlib based plotting: standalone Python
    scripts are generated that contain the logic to produce a
    plot. These script do not depend on YODA and should hence be
    sharable with people that have no YODA.  Python3 and
    matplotlib are required. The numerical data	associated with
    individual curves is outsourced to a {name}__data.py script to
    aide legibility.
  * Fix bug in yodamerge to handle files with inconsistent AOs
  * Add CXXFLAGS and LDFLAGS propagation to the Python-extension
  build script.
  * Enable Cython auto-conversion of all C++ strings to Python
  native str for v2 and v3, removing extensive encode()/decode()
  calls.
  * Add binreloc-based libPath() and dataPath() functions,
    including in Python.
- Drop YODA-correct-python-platlib.patch: fixed upstream.
- Split out new package, YODA-matplotlib-style, that installs a
  style file to produce YODA styled plots using matplotlib.
- autoconf &gt;= 2.71 now required (update BuildRequires).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694174400">- Use Cython &lt; 3 to avoid an issue with `setYErr` when using
  Cython &gt;= 3.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.9.9:
  * Limit autotools requirement to 2.69
  * Ignore unknown sections in FLAT files (allows reading files
    generated by rivet-cmphistos)
  * Fix binary relocation in binreloc.c
  * Explicitly import base-class virtual operator= in AO classes
    to silence new GCC13 compiler warnings.
  * Fix error propagation to always return a positive uncertainty
    size in object divisions (which can produce a negative ratio
    value)
  * Fix a bug with HistoBin2D.yMean() returning value of xMean
  * Fix missing function calls in HistoBin2D.xy*() methods
  * Add workaround for Ubuntu 23.04 putting 'local' in the Python
    platbase path.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708344000">- Update to version 1.9.10:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1742731200">- Update to version 1.9.11:
  * Change Python build to use PY_LDFLAGS rather than
    LINKFORSHARED variable.
  * Patch BinEstimator to ensure the log version is used for log
    axes</changelog>
</package>
<package pkgid="9b67e35056371d531d1a16d3ac662b00b361c2e8ba005459205eaa1283d0ab27276d3743bf3b6439709e037b2a1a66bcf80ea266d413172ec3680a965e48ce99" name="YODA-matplotlib-style" arch="noarch">
  <version epoch="0" ver="1.9.11" rel="bp160.1.8"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1653825600">- Update to version 1.9.5:
  * Add per-AO double-precision writing if the
    WriterDoublePrecision annotation is set.
  * Ensure that default variation +- errors are both positive, for
    all Scatter types.  Original patch by Jon Butterworth.
  * Protect against NaNs arising from the YAML parser in
    error-breakdown calcs.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657195200">- Add patch to fix build with python 3.10:
  * 0001-fix-cython-rebuild-after-configure.patch
- Spec cleanup</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657886400">- Update to version 1.9.6:
  * Pass ignoreOffDiagonalTerms correctly when retrieving
    covariance matrix from a Scatter2D.
  * Add a covariance/off-diag test to test-s2d.py
  * Force Cython rebuilds on all .pyx files, if possible (helps
    with Python ABI compat).
- Drop 0001-fix-cython-rebuild-after-configure.patch: incorporated
  upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1661342400">- Set PYTHONPATH to buildroot's python3_sitearch before testing to
  allow importing of yoda module.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666526400">- Update to version 1.9.7
  * Add Stat and Uncor to labels flagged as uncorrelated.
  * Update yaml-cpp version for C++17 compatibility.
  * Replace distutils with sysconfig and manual calls to the
    compiler.
- Add YODA-correct-python-platlib.patch: Use correct python
  platlib ($prefix/lib64) consistently across different python
  versions; although we do not build for multiple python versions,
  we would not want to adapt the file list everytime upstream
  python vacillates between lib (e.g. python 3.8/3.10) vs lib64
  (e.g. python 3.9) for platlib.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1689076800">- Update to version 1.9.8:
  * Fix Cython matching of optional Booleans in ROOT conversion
    functions.
  * Introducing matplotlib based plotting: standalone Python
    scripts are generated that contain the logic to produce a
    plot. These script do not depend on YODA and should hence be
    sharable with people that have no YODA.  Python3 and
    matplotlib are required. The numerical data	associated with
    individual curves is outsourced to a {name}__data.py script to
    aide legibility.
  * Fix bug in yodamerge to handle files with inconsistent AOs
  * Add CXXFLAGS and LDFLAGS propagation to the Python-extension
  build script.
  * Enable Cython auto-conversion of all C++ strings to Python
  native str for v2 and v3, removing extensive encode()/decode()
  calls.
  * Add binreloc-based libPath() and dataPath() functions,
    including in Python.
- Drop YODA-correct-python-platlib.patch: fixed upstream.
- Split out new package, YODA-matplotlib-style, that installs a
  style file to produce YODA styled plots using matplotlib.
- autoconf &gt;= 2.71 now required (update BuildRequires).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1694174400">- Use Cython &lt; 3 to avoid an issue with `setYErr` when using
  Cython &gt;= 3.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.9.9:
  * Limit autotools requirement to 2.69
  * Ignore unknown sections in FLAT files (allows reading files
    generated by rivet-cmphistos)
  * Fix binary relocation in binreloc.c
  * Explicitly import base-class virtual operator= in AO classes
    to silence new GCC13 compiler warnings.
  * Fix error propagation to always return a positive uncertainty
    size in object divisions (which can produce a negative ratio
    value)
  * Fix a bug with HistoBin2D.yMean() returning value of xMean
  * Fix missing function calls in HistoBin2D.xy*() methods
  * Add workaround for Ubuntu 23.04 putting 'local' in the Python
    platbase path.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708344000">- Update to version 1.9.10:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1742731200">- Update to version 1.9.11:
  * Change Python build to use PY_LDFLAGS rather than
    LINKFORSHARED variable.
  * Patch BinEstimator to ensure the log version is used for log
    axes</changelog>
</package>
<package pkgid="bc6ecddd252f8742bf0f9880f0e82b07cd7971bdf825da786a3e7c0cd1bca0903a96de8808ee75b9b49d95ad360e69e46b42e46b1859746844a8bc2ac95e30e1" name="ZArchive" arch="x86_64">
  <version epoch="0" ver="0.1.2+git20220908.d2c7177" rel="bp160.1.13"/>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1651492800">- Package 0.1.1 version</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1657540800">- Add 0001-Include-the-algorithm-header.patch: include missing header</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1657800000">- Use last version from git
- Drop 0001-Fix-cmake-install-targets.patch and 0001-Include-the-algorithm-header.patch: merged upstream</changelog>
  <changelog author="Jonatas Gon&#xE7;alves &lt;jonatas.sgoncalves@gmail.com&gt;" date="1681992000">- Change to latest git version 0.1.2
  * Add fix-findzstd-error to correctly call opensuse lib name:libzstd-devel-static</changelog>
  <changelog author="Jonatas Gon&#xE7;alves &lt;jonatas.sgoncalves@gmail.com&gt;" date="1682596800">- Removed dependencies xz and zlib as they are not needed.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1682683200">- Cleanup dependencies
- Drop fix-findzstd-error.diff
- Create subpackage for the library</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1682769600">- Specify the correct MIT No Attribution license variant</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682856000">- Cleanup _service and rename package to match upstream name</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Build also for Leap</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1684152000">- Add use_pkgconfig_for_zstd.patch</changelog>
</package>
<package pkgid="60f7a3229598157abf33d785847e3fda5214b3751923ad17e84631d4d087b337435d94c12a4c3229a5705ec0361afca9af74027ec9ccb8c37f69a432516f2dc3" name="ZArchive-devel" arch="x86_64">
  <version epoch="0" ver="0.1.2+git20220908.d2c7177" rel="bp160.1.13"/>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1651492800">- Package 0.1.1 version</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1657540800">- Add 0001-Include-the-algorithm-header.patch: include missing header</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1657800000">- Use last version from git
- Drop 0001-Fix-cmake-install-targets.patch and 0001-Include-the-algorithm-header.patch: merged upstream</changelog>
  <changelog author="Jonatas Gon&#xE7;alves &lt;jonatas.sgoncalves@gmail.com&gt;" date="1681992000">- Change to latest git version 0.1.2
  * Add fix-findzstd-error to correctly call opensuse lib name:libzstd-devel-static</changelog>
  <changelog author="Jonatas Gon&#xE7;alves &lt;jonatas.sgoncalves@gmail.com&gt;" date="1682596800">- Removed dependencies xz and zlib as they are not needed.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1682683200">- Cleanup dependencies
- Drop fix-findzstd-error.diff
- Create subpackage for the library</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1682769600">- Specify the correct MIT No Attribution license variant</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1682856000">- Cleanup _service and rename package to match upstream name</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Build also for Leap</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1684152000">- Add use_pkgconfig_for_zstd.patch</changelog>
</package>
<package pkgid="1bb3dc101961872dd27997d308f3864cb6f38a4ce3e06d76532fbda0733f728b1c4a2f5c8df8c8dab77d66e067520c6e2c94b2e8d27b2395c0d525702d623853" name="a2jmidid" arch="x86_64">
  <version epoch="0" ver="9" rel="bp160.1.13"/>
  <changelog author="krysanto@gmail.com" date="1505217600">- Initial Version
  - Checkout from master branch to avoid carrying patches</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1603800000">- Update to version 9
  * Switch to meson
- Run spec cleaner</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1606392000">- Don't need to export cflags</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1606996800">- Fix source to use full URL
- Fix use of env</changelog>
  <changelog author="olaf@aepfle.de" date="1610020800">- Meson 0.50.0 is required</changelog>
</package>
<package pkgid="b13d4d01510309d68d918abdd36af352e51d49bf382e353337472c79f87fd87bb09dfbec20c5a17d072e23b454219104fad1b73f24fe1996f3f7b0f90b621d1f" name="a2ps" arch="x86_64">
  <version epoch="0" ver="4.15.6" rel="bp160.1.14"/>
  <changelog author="werner@suse.de" date="1539691200">- Make LFS support work on 32bit architectures (bsc#1112014)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Implement shared library packaging policy.
- Remove --with-pic which is useless with --disable-static.
- Use noun phrase in summary.
- Resolve PreReq FIXMEs.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1573128000">- Add patch a2ps-4.14-texinfo-6.7.patch to let it build with
  texinfo-6.7 as well</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589371200">- Discard rm of nonexistent %{_infodir}/dir to fix build</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1679054400">- Updated to 4.15
  * Noteworthy changes in release 4.15 (2023-03-07) [stable]
  * Features:
  - Replace the 'psmandup' utility with simpler 'lp2' to directly print
    documents to a simplex printer.
  - Remove the outdated 'psset' and 'fixnt', and simplify 'fixps' to
    always process its input with Ghostscript.
  - Use libpaper's paper sizes. This includes user-defined paper sizes
    when using libpaper 2. It is still possible to define custom margins
    using "Medium:" specifications in the configuration file, and the
    one size defined by a2ps that libpaper does not know about, Quarto, is
    retained for backwards compatiblity, and as an example.
  * Documentation
  - Remove some obsolete explanations.
  - Reformat --help output consistently to 80 columns.
  - Some English fixes.
  * Bug fixes:
  - Avoid a crash when a medium is not specified; instead, use the default
    libpaper size (configured by the user or sysadmin, or the locale
    default).
  - Fix some other potential crashes and compiler warnings.
  - Fixes for security bugs CVE-2001-1593, CVE-2015-8107 and CVE-2014-0466.
  - Minor bugs fixed.
  * Predefined delegations:
  - Remove support for defunct Netscape and proprietary Acrobat Reader.
  - Add lpr wrapper for automatic detection of different printing systems,
    including CUPS support.
  * Encodings:
  - Use libre fonts for KOI-8.
  - Composite fonts support.
  * Build
  - Update build system to more recent autotools and gettext versions.
  - Build man pages in a simpler and more robust way.
  - Document runtime dependencies.
  - Minor code quality improvements.
  - Minor tidy up and removal of obsolete code.
  - Require libpaper.
  - Remove OS/2 support.
  * Build
  - Build man pages in a simpler and more robust way, using x-to-1 from
    gnulib.
  - Don't install useless liba2ps.h.
  - Other minor build system improvements, including updating to more recent
    autoconf and gettext.
  - Don't require help2man or gperf to build from source.
  - Document runtime dependencies.
  - Minor code quality improvements.
  * Build:
  - Re-add a2ps to the Translation Project, and remove po files from git.
  * Bug fixes:
  - Remove reference to @COM_distill@ variable in a2ps_cfg.in.
  * Documentation:
  - Format --help output consistently to 80 columns.
  - Fix a couple of message typos.
  * Features:
  - Replace the 'psmandup' utility with simpler 'lp2' to directly print
    documents to a simplex printer.
  - Remove the outdated 'psset' and 'fixnt', and simplify 'fixps' to
    always process its input with Ghostscript.
  * Documentation
  - Remove some obsolete explanations.
  * Build
  - Minor tidy up and removal of obsolete code.
  * Features:
  - Use libpaper's paper sizes. This includes user-defined paper sizes
    when using libpaper 2. It is still possible to define custom margins
    using "Medium:" specifications in the configuration file, and the
    one size defined by a2ps that libpaper does not know about, Quarto, is
    retained for backwards compatiblity, and as an example.
  * Bug fixes:
  - Avoid a crash when a medium is not specified; instead, use the default
    libpaper size (configured by the user or sysadmin, or the locale
    default).
  - Fix some other potential crashes and compiler warnings.
  * Documentation:
  - Reformat --help output consistently to 80 columns.
  * Build:
  - Require autoconf 2.71.
  - Require libpaper.
  * Documentation:
  - Undo reformatting of --help output from 4.14.91, so as not to annoy
    translators (thanks, Benno Schulenberg!).
  - Use gnulib function to emit bug reporting information.  This also
    fixes a problem with the translated strings introduced in 4.14.91
    (thanks, Benno Schulenberg!).
  * Build:
  - Re-add a2ps to the Translation Project, and remove po files from git.
  * Bug fixes:
  - Remove reference to @COM_distill@ variable in a2ps_cfg.in.
  * Documentation:
  - Format --help output consistently to 80 columns.
  - Fix a couple of message typos.
  * This is an alpha release, owing to the considerable changes since the
  last version.
  * New maintainer, Reuben Thomas.
  * Build:
  - Updated and fixed the build system, using gnulib and modern Autotools.
  - Remove OS/2 support.
  - Require libpaper.
  * Predefined delegations:
  - Remove support for defunct Netscape and proprietary Acrobat Reader.
  - Add lpr wrapper for automatic detection of different printing systems,
    including CUPS support.
  * Encodings:
  - Use libre fonts for KOI-8.
  - Composite fonts support.
  * Documentation:
  - Some English fixes.
  - Man page for fixnt.
  * Bug fixes:
  - Fixes for security bugs CVE-2001-1593, CVE-2015-8107 and CVE-2014-0466.
  - Minor bugs fixed.
- Reintroduce shared library
- Avoid configure (endless) loop during make
- New a2ps-lang package
- Remove obsolete patches
  * CVE-2014-0466.diff
  * a2ps-4.13-psgen.patch
  * a2ps-4.13-security.patch
  * a2ps-4.14-acroread.patch
  * a2ps-4.14-automake.patch
  * a2ps-4.14-bnc955194.patch
  * a2ps-4.14-gperf.patch
  * a2ps-4.14-iswprint.patch
  * a2ps-4.14-texinfo-6.7.patch
  * reproducible.patch
- Port patches
  * a2ps-4.13-base.patch
  * a2ps-4.13-include.patch
  * a2ps-4.13-types.patch
  * a2ps-4.13-utf8.patch
  * a2ps-4.14-linker.patch
  * a2ps-4.14-manuals.diff
  * a2ps-4.14-ogonkify.patch
  * a2ps-4.14-tempfile.patch
  * a2ps-4.14.diff
  * a2ps-buildcompare.patch</changelog>
  <changelog author="jun wang &lt;junguo.wang@suse.com&gt;" date="1695038400">- Updated to 4.15.5
  * Noteworthy changes in release 4.15.5 (2023-06-22) [stable]
  * Bug fixes:
  - Fix psnup delegation. It was incorrectly changed in 4.14.90.
  - Fix to read configured paper size correctly with libpaper 1.x.
  - Fix fixps to use GhostScript’s ps2write device instead of defunct
    pswrite.
  - Fix old crash when using --stdin="".
  - Use “grep -F” rather than obsolete fgrep.
  - Fix broken a2ps-lpr-wrapper script, and translate to sh for
    portability.
  * Build:
  - Fix a problem building PDF version of manual.
  - Make configure stop if libpaper is not found.
  - Enable building the manual for gnu.org.
  * Build system:
  - Fix tests when building with libpaper 1.x.
  - Require gperf for bootstrapping, and use it correctly in build system.
  - Require a new-enough version of texinfo.
  * Documentation:
  - Various minor documentation improvements.
  - Minor tweaks.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1716292800">- Updated to 4.15.6 (boo#1224770)
  * Noteworthy changes in release 4.15.6 (2024-03-13) [stable]
  * Bug fixes:
  - Fix a2ps-lpr-wrapper to work with no arguments, as a2ps requires.
  - Minor fixes &amp; improvements to sheets.map for image types and PDF.
  * Build system:
  - Minor fixes and improvements.
- Port patches
  * a2ps-4.14.diff
  * a2ps-buildcompare.patch</changelog>
</package>
<package pkgid="c1f9e229d51a24b16339605ec4a371e25cba25f0d85ca500b8f351eaa6737c8779d360367b69f9efd9bbdf033f273f956e694ca623e37472c499513869072fd5" name="a2ps-devel" arch="x86_64">
  <version epoch="0" ver="4.15.6" rel="bp160.1.14"/>
  <changelog author="werner@suse.de" date="1539691200">- Make LFS support work on 32bit architectures (bsc#1112014)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Implement shared library packaging policy.
- Remove --with-pic which is useless with --disable-static.
- Use noun phrase in summary.
- Resolve PreReq FIXMEs.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1573128000">- Add patch a2ps-4.14-texinfo-6.7.patch to let it build with
  texinfo-6.7 as well</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589371200">- Discard rm of nonexistent %{_infodir}/dir to fix build</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1679054400">- Updated to 4.15
  * Noteworthy changes in release 4.15 (2023-03-07) [stable]
  * Features:
  - Replace the 'psmandup' utility with simpler 'lp2' to directly print
    documents to a simplex printer.
  - Remove the outdated 'psset' and 'fixnt', and simplify 'fixps' to
    always process its input with Ghostscript.
  - Use libpaper's paper sizes. This includes user-defined paper sizes
    when using libpaper 2. It is still possible to define custom margins
    using "Medium:" specifications in the configuration file, and the
    one size defined by a2ps that libpaper does not know about, Quarto, is
    retained for backwards compatiblity, and as an example.
  * Documentation
  - Remove some obsolete explanations.
  - Reformat --help output consistently to 80 columns.
  - Some English fixes.
  * Bug fixes:
  - Avoid a crash when a medium is not specified; instead, use the default
    libpaper size (configured by the user or sysadmin, or the locale
    default).
  - Fix some other potential crashes and compiler warnings.
  - Fixes for security bugs CVE-2001-1593, CVE-2015-8107 and CVE-2014-0466.
  - Minor bugs fixed.
  * Predefined delegations:
  - Remove support for defunct Netscape and proprietary Acrobat Reader.
  - Add lpr wrapper for automatic detection of different printing systems,
    including CUPS support.
  * Encodings:
  - Use libre fonts for KOI-8.
  - Composite fonts support.
  * Build
  - Update build system to more recent autotools and gettext versions.
  - Build man pages in a simpler and more robust way.
  - Document runtime dependencies.
  - Minor code quality improvements.
  - Minor tidy up and removal of obsolete code.
  - Require libpaper.
  - Remove OS/2 support.
  * Build
  - Build man pages in a simpler and more robust way, using x-to-1 from
    gnulib.
  - Don't install useless liba2ps.h.
  - Other minor build system improvements, including updating to more recent
    autoconf and gettext.
  - Don't require help2man or gperf to build from source.
  - Document runtime dependencies.
  - Minor code quality improvements.
  * Build:
  - Re-add a2ps to the Translation Project, and remove po files from git.
  * Bug fixes:
  - Remove reference to @COM_distill@ variable in a2ps_cfg.in.
  * Documentation:
  - Format --help output consistently to 80 columns.
  - Fix a couple of message typos.
  * Features:
  - Replace the 'psmandup' utility with simpler 'lp2' to directly print
    documents to a simplex printer.
  - Remove the outdated 'psset' and 'fixnt', and simplify 'fixps' to
    always process its input with Ghostscript.
  * Documentation
  - Remove some obsolete explanations.
  * Build
  - Minor tidy up and removal of obsolete code.
  * Features:
  - Use libpaper's paper sizes. This includes user-defined paper sizes
    when using libpaper 2. It is still possible to define custom margins
    using "Medium:" specifications in the configuration file, and the
    one size defined by a2ps that libpaper does not know about, Quarto, is
    retained for backwards compatiblity, and as an example.
  * Bug fixes:
  - Avoid a crash when a medium is not specified; instead, use the default
    libpaper size (configured by the user or sysadmin, or the locale
    default).
  - Fix some other potential crashes and compiler warnings.
  * Documentation:
  - Reformat --help output consistently to 80 columns.
  * Build:
  - Require autoconf 2.71.
  - Require libpaper.
  * Documentation:
  - Undo reformatting of --help output from 4.14.91, so as not to annoy
    translators (thanks, Benno Schulenberg!).
  - Use gnulib function to emit bug reporting information.  This also
    fixes a problem with the translated strings introduced in 4.14.91
    (thanks, Benno Schulenberg!).
  * Build:
  - Re-add a2ps to the Translation Project, and remove po files from git.
  * Bug fixes:
  - Remove reference to @COM_distill@ variable in a2ps_cfg.in.
  * Documentation:
  - Format --help output consistently to 80 columns.
  - Fix a couple of message typos.
  * This is an alpha release, owing to the considerable changes since the
  last version.
  * New maintainer, Reuben Thomas.
  * Build:
  - Updated and fixed the build system, using gnulib and modern Autotools.
  - Remove OS/2 support.
  - Require libpaper.
  * Predefined delegations:
  - Remove support for defunct Netscape and proprietary Acrobat Reader.
  - Add lpr wrapper for automatic detection of different printing systems,
    including CUPS support.
  * Encodings:
  - Use libre fonts for KOI-8.
  - Composite fonts support.
  * Documentation:
  - Some English fixes.
  - Man page for fixnt.
  * Bug fixes:
  - Fixes for security bugs CVE-2001-1593, CVE-2015-8107 and CVE-2014-0466.
  - Minor bugs fixed.
- Reintroduce shared library
- Avoid configure (endless) loop during make
- New a2ps-lang package
- Remove obsolete patches
  * CVE-2014-0466.diff
  * a2ps-4.13-psgen.patch
  * a2ps-4.13-security.patch
  * a2ps-4.14-acroread.patch
  * a2ps-4.14-automake.patch
  * a2ps-4.14-bnc955194.patch
  * a2ps-4.14-gperf.patch
  * a2ps-4.14-iswprint.patch
  * a2ps-4.14-texinfo-6.7.patch
  * reproducible.patch
- Port patches
  * a2ps-4.13-base.patch
  * a2ps-4.13-include.patch
  * a2ps-4.13-types.patch
  * a2ps-4.13-utf8.patch
  * a2ps-4.14-linker.patch
  * a2ps-4.14-manuals.diff
  * a2ps-4.14-ogonkify.patch
  * a2ps-4.14-tempfile.patch
  * a2ps-4.14.diff
  * a2ps-buildcompare.patch</changelog>
  <changelog author="jun wang &lt;junguo.wang@suse.com&gt;" date="1695038400">- Updated to 4.15.5
  * Noteworthy changes in release 4.15.5 (2023-06-22) [stable]
  * Bug fixes:
  - Fix psnup delegation. It was incorrectly changed in 4.14.90.
  - Fix to read configured paper size correctly with libpaper 1.x.
  - Fix fixps to use GhostScript’s ps2write device instead of defunct
    pswrite.
  - Fix old crash when using --stdin="".
  - Use “grep -F” rather than obsolete fgrep.
  - Fix broken a2ps-lpr-wrapper script, and translate to sh for
    portability.
  * Build:
  - Fix a problem building PDF version of manual.
  - Make configure stop if libpaper is not found.
  - Enable building the manual for gnu.org.
  * Build system:
  - Fix tests when building with libpaper 1.x.
  - Require gperf for bootstrapping, and use it correctly in build system.
  - Require a new-enough version of texinfo.
  * Documentation:
  - Various minor documentation improvements.
  - Minor tweaks.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1716292800">- Updated to 4.15.6 (boo#1224770)
  * Noteworthy changes in release 4.15.6 (2024-03-13) [stable]
  * Bug fixes:
  - Fix a2ps-lpr-wrapper to work with no arguments, as a2ps requires.
  - Minor fixes &amp; improvements to sheets.map for image types and PDF.
  * Build system:
  - Minor fixes and improvements.
- Port patches
  * a2ps-4.14.diff
  * a2ps-buildcompare.patch</changelog>
</package>
<package pkgid="2e5e5dbe4dd94685c737bce6c5cb65171e72174c88d43a845f26d42088feccc164d4e94f47f8cb2bfd4840518896653afca95181371720300fe2d98b4d4c1b8b" name="a2ps-lang" arch="noarch">
  <version epoch="0" ver="4.15.6" rel="bp160.1.14"/>
  <changelog author="werner@suse.de" date="1539691200">- Make LFS support work on 32bit architectures (bsc#1112014)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Implement shared library packaging policy.
- Remove --with-pic which is useless with --disable-static.
- Use noun phrase in summary.
- Resolve PreReq FIXMEs.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1573128000">- Add patch a2ps-4.14-texinfo-6.7.patch to let it build with
  texinfo-6.7 as well</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589371200">- Discard rm of nonexistent %{_infodir}/dir to fix build</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1679054400">- Updated to 4.15
  * Noteworthy changes in release 4.15 (2023-03-07) [stable]
  * Features:
  - Replace the 'psmandup' utility with simpler 'lp2' to directly print
    documents to a simplex printer.
  - Remove the outdated 'psset' and 'fixnt', and simplify 'fixps' to
    always process its input with Ghostscript.
  - Use libpaper's paper sizes. This includes user-defined paper sizes
    when using libpaper 2. It is still possible to define custom margins
    using "Medium:" specifications in the configuration file, and the
    one size defined by a2ps that libpaper does not know about, Quarto, is
    retained for backwards compatiblity, and as an example.
  * Documentation
  - Remove some obsolete explanations.
  - Reformat --help output consistently to 80 columns.
  - Some English fixes.
  * Bug fixes:
  - Avoid a crash when a medium is not specified; instead, use the default
    libpaper size (configured by the user or sysadmin, or the locale
    default).
  - Fix some other potential crashes and compiler warnings.
  - Fixes for security bugs CVE-2001-1593, CVE-2015-8107 and CVE-2014-0466.
  - Minor bugs fixed.
  * Predefined delegations:
  - Remove support for defunct Netscape and proprietary Acrobat Reader.
  - Add lpr wrapper for automatic detection of different printing systems,
    including CUPS support.
  * Encodings:
  - Use libre fonts for KOI-8.
  - Composite fonts support.
  * Build
  - Update build system to more recent autotools and gettext versions.
  - Build man pages in a simpler and more robust way.
  - Document runtime dependencies.
  - Minor code quality improvements.
  - Minor tidy up and removal of obsolete code.
  - Require libpaper.
  - Remove OS/2 support.
  * Build
  - Build man pages in a simpler and more robust way, using x-to-1 from
    gnulib.
  - Don't install useless liba2ps.h.
  - Other minor build system improvements, including updating to more recent
    autoconf and gettext.
  - Don't require help2man or gperf to build from source.
  - Document runtime dependencies.
  - Minor code quality improvements.
  * Build:
  - Re-add a2ps to the Translation Project, and remove po files from git.
  * Bug fixes:
  - Remove reference to @COM_distill@ variable in a2ps_cfg.in.
  * Documentation:
  - Format --help output consistently to 80 columns.
  - Fix a couple of message typos.
  * Features:
  - Replace the 'psmandup' utility with simpler 'lp2' to directly print
    documents to a simplex printer.
  - Remove the outdated 'psset' and 'fixnt', and simplify 'fixps' to
    always process its input with Ghostscript.
  * Documentation
  - Remove some obsolete explanations.
  * Build
  - Minor tidy up and removal of obsolete code.
  * Features:
  - Use libpaper's paper sizes. This includes user-defined paper sizes
    when using libpaper 2. It is still possible to define custom margins
    using "Medium:" specifications in the configuration file, and the
    one size defined by a2ps that libpaper does not know about, Quarto, is
    retained for backwards compatiblity, and as an example.
  * Bug fixes:
  - Avoid a crash when a medium is not specified; instead, use the default
    libpaper size (configured by the user or sysadmin, or the locale
    default).
  - Fix some other potential crashes and compiler warnings.
  * Documentation:
  - Reformat --help output consistently to 80 columns.
  * Build:
  - Require autoconf 2.71.
  - Require libpaper.
  * Documentation:
  - Undo reformatting of --help output from 4.14.91, so as not to annoy
    translators (thanks, Benno Schulenberg!).
  - Use gnulib function to emit bug reporting information.  This also
    fixes a problem with the translated strings introduced in 4.14.91
    (thanks, Benno Schulenberg!).
  * Build:
  - Re-add a2ps to the Translation Project, and remove po files from git.
  * Bug fixes:
  - Remove reference to @COM_distill@ variable in a2ps_cfg.in.
  * Documentation:
  - Format --help output consistently to 80 columns.
  - Fix a couple of message typos.
  * This is an alpha release, owing to the considerable changes since the
  last version.
  * New maintainer, Reuben Thomas.
  * Build:
  - Updated and fixed the build system, using gnulib and modern Autotools.
  - Remove OS/2 support.
  - Require libpaper.
  * Predefined delegations:
  - Remove support for defunct Netscape and proprietary Acrobat Reader.
  - Add lpr wrapper for automatic detection of different printing systems,
    including CUPS support.
  * Encodings:
  - Use libre fonts for KOI-8.
  - Composite fonts support.
  * Documentation:
  - Some English fixes.
  - Man page for fixnt.
  * Bug fixes:
  - Fixes for security bugs CVE-2001-1593, CVE-2015-8107 and CVE-2014-0466.
  - Minor bugs fixed.
- Reintroduce shared library
- Avoid configure (endless) loop during make
- New a2ps-lang package
- Remove obsolete patches
  * CVE-2014-0466.diff
  * a2ps-4.13-psgen.patch
  * a2ps-4.13-security.patch
  * a2ps-4.14-acroread.patch
  * a2ps-4.14-automake.patch
  * a2ps-4.14-bnc955194.patch
  * a2ps-4.14-gperf.patch
  * a2ps-4.14-iswprint.patch
  * a2ps-4.14-texinfo-6.7.patch
  * reproducible.patch
- Port patches
  * a2ps-4.13-base.patch
  * a2ps-4.13-include.patch
  * a2ps-4.13-types.patch
  * a2ps-4.13-utf8.patch
  * a2ps-4.14-linker.patch
  * a2ps-4.14-manuals.diff
  * a2ps-4.14-ogonkify.patch
  * a2ps-4.14-tempfile.patch
  * a2ps-4.14.diff
  * a2ps-buildcompare.patch</changelog>
  <changelog author="jun wang &lt;junguo.wang@suse.com&gt;" date="1695038400">- Updated to 4.15.5
  * Noteworthy changes in release 4.15.5 (2023-06-22) [stable]
  * Bug fixes:
  - Fix psnup delegation. It was incorrectly changed in 4.14.90.
  - Fix to read configured paper size correctly with libpaper 1.x.
  - Fix fixps to use GhostScript’s ps2write device instead of defunct
    pswrite.
  - Fix old crash when using --stdin="".
  - Use “grep -F” rather than obsolete fgrep.
  - Fix broken a2ps-lpr-wrapper script, and translate to sh for
    portability.
  * Build:
  - Fix a problem building PDF version of manual.
  - Make configure stop if libpaper is not found.
  - Enable building the manual for gnu.org.
  * Build system:
  - Fix tests when building with libpaper 1.x.
  - Require gperf for bootstrapping, and use it correctly in build system.
  - Require a new-enough version of texinfo.
  * Documentation:
  - Various minor documentation improvements.
  - Minor tweaks.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1716292800">- Updated to 4.15.6 (boo#1224770)
  * Noteworthy changes in release 4.15.6 (2024-03-13) [stable]
  * Bug fixes:
  - Fix a2ps-lpr-wrapper to work with no arguments, as a2ps requires.
  - Minor fixes &amp; improvements to sheets.map for image types and PDF.
  * Build system:
  - Minor fixes and improvements.
- Port patches
  * a2ps-4.14.diff
  * a2ps-buildcompare.patch</changelog>
</package>
<package pkgid="0332cae6f7a0183e1ec8a7bcb024b892b5e4d9967315360f04a11e4b8f3131d84bb59d90a3ec7c1969e81845cf7e18b70bb6283b518347c7e06be303ede29408" name="a52dec" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="160000.2.2"/>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
  <changelog author="schwab@suse.de" date="1550664000">- altivec.patch: always use the GNU version of the altivec insns</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="jengelh@inai.de" date="1670328000">- Update to release 0.8.0
  * Build system modernization
- Drop altivec.patch (inapplicable)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683288000">- Minor spec cleaning, use ldconfig_scriptlets macro, be more
  explicit in listing of files (use less globs).</changelog>
</package>
<package pkgid="6846733ddf8a02006ee551915d1b51e9fadd446810fa4d658a2e51ec88e94a0689954e75075c6d544137554614d4df5a1e00c92d185c10eabe845483d4731e70" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20250429.1cad3bc" rel="160000.2.2"/>
  <changelog author="ro@suse.com" date="1722859200">- Update to version 84.87+git20240805.7513b28:
  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1723204800">- Update to version 84.87+git20240809.5d13eb4:
  * cleanup aaa_base.post and fold back into specfile</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Update to version 84.87+git20240821.fbabe1d:
  * Add helper service for soft-reboot</changelog>
  <changelog author="dmueller@suse.com" date="1725624000">- Update to version 84.87+git20240906.742565b:
  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)</changelog>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
</package>
<package pkgid="6c524db4f7570ec5961591814cc4e26afea8a015fe69f5b716f6caea717ce28edd95b7283a5dd62b779c8eb79082b98db12dd27d329f6272282cbd0a8385e942" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20260210.ecce285" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
</package>
<package pkgid="d94dced954fdadaa1773210bf2a44b9c130f7dfde663a3025d9147ccee0fc4db95b46493720dd599931c30c5194491114bc6170c880230279a24289822aa8e3a" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20260529.c4391e5" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
</package>
<package pkgid="87182705b4201759733e4dbb2b7940f8c042771d0e1174e4db28dc2bad7b0c5a45b6a79ab0ab1e1280ab2e149ff29e38905ca71f3f22206657b44661246257ea" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20260602.e901e17e" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
</package>
<package pkgid="d1433a4117dfdd801b1b234f9e1c7b5b2af3dcd409bc9cd67d26cb2c020f237d91804a24e430f4e10e2988c61b0646a356fe3eaf8fe890d7c73c99f32ae09140" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20260610.3b5a868c" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
  <changelog author="ro@suse.com" date="1781092800">- Update to version 84.87+git20260610.3b5a868c:
  * Add missing "=" in alljava.csh (boo#1267423)</changelog>
</package>
<package pkgid="50b3030a480dfcb5dcb873d8bc37ed6ce040ea474e6aa019dbc9745d20ef79518697ebcd02b952b673de5276f158213c21357f240df49f9433ade8b5e609513c" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20250429.1cad3bc" rel="160000.2.2"/>
  <changelog author="ro@suse.com" date="1722859200">- Update to version 84.87+git20240805.7513b28:
  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1723204800">- Update to version 84.87+git20240809.5d13eb4:
  * cleanup aaa_base.post and fold back into specfile</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Update to version 84.87+git20240821.fbabe1d:
  * Add helper service for soft-reboot</changelog>
  <changelog author="dmueller@suse.com" date="1725624000">- Update to version 84.87+git20240906.742565b:
  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)</changelog>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
</package>
<package pkgid="5a5d9290310d4a5fbcc8ae5b6399236b3242760b30c62e271bbf6e1f2954b60826086a6ee2efd3db27e57626437e8afd2326452e44443518d2273e35488183e4" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20260210.ecce285" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
</package>
<package pkgid="d85025d0c4c6fbafd7df94b2488edd41849d8260085bc47f708d676fa6dbf136cb64d5ddc2054f678c8f44f345a48af90243a16562f51d9105eaca98e9308db3" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20260529.c4391e5" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
</package>
<package pkgid="8100ed5aef9eec5bbdd17db0b3a99f92b8e1cf3b010a372b78139ca1901d25e21b0014583894e06ad36e042b456611a5f3312299f7a2967a42f32ccfc1488c58" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20260602.e901e17e" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
</package>
<package pkgid="79bfa4aa581733792dc4f975252484e9ae2e4fdf84c85a997e4bac73c1c27052a0cbd9c4878df9ef110625c6163aa4d1e7104d4b199febf3ec684494f105add2" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20260610.3b5a868c" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
  <changelog author="ro@suse.com" date="1781092800">- Update to version 84.87+git20260610.3b5a868c:
  * Add missing "=" in alljava.csh (boo#1267423)</changelog>
</package>
<package pkgid="b65d9c404f35f9162c46602cd6ba8a6255a5c098dd16ece657b0db75caf71ce5fa4d60f7e6d897879e5e30b7d48df14727685625b474c653f572c8aef04a89d9" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20250429.1cad3bc" rel="160000.2.2"/>
  <changelog author="ro@suse.com" date="1722859200">- Update to version 84.87+git20240805.7513b28:
  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1723204800">- Update to version 84.87+git20240809.5d13eb4:
  * cleanup aaa_base.post and fold back into specfile</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Update to version 84.87+git20240821.fbabe1d:
  * Add helper service for soft-reboot</changelog>
  <changelog author="dmueller@suse.com" date="1725624000">- Update to version 84.87+git20240906.742565b:
  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)</changelog>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
</package>
<package pkgid="1a8e890affdfdfd2be80dfb7914f660d490bcbb20f874782c510d4a794de7ae8f97bb2bcd1f3c0665ca721419e2b2c4c78df4b8add10e3f6a56e9a246dbedcd1" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20260210.ecce285" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
</package>
<package pkgid="cb3d283c4a711de67c53f061b7708eb7eeaf7d090c915ae392f530a8d47665f8095ab739dbb0c2b76b70f6e5c8f54daba68c8aa35a498bc36fdadc05a3ef826c" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20260529.c4391e5" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
</package>
<package pkgid="76a71dd5e7787c7663c15b0afd054b5a96104218d44f89b5b6705cc016e7397c2a4233301eabbd3f460f7a4bf82f2b4d51c749442d66f8629c835e3f4f58d5d4" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20260602.e901e17e" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
</package>
<package pkgid="8e4322349ea74a6073af2c62f824f759dd13fcc8d35dd9b7d4282cbbc366cf228917b7181123cbb4d241a02035dd1dbb81febc0ac1eb7a614ee32b09b0a1d187" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20260610.3b5a868c" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
  <changelog author="ro@suse.com" date="1781092800">- Update to version 84.87+git20260610.3b5a868c:
  * Add missing "=" in alljava.csh (boo#1267423)</changelog>
</package>
<package pkgid="9c023c6e6a421510709a89ce314d871f1928cedd3e46bd792747902e89b7f75c614bfbcfc8ca4056a7ceb04398b06fb49d626282d67a56e01e2c6e014b1d5cde" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20250429.1cad3bc" rel="160000.2.2"/>
  <changelog author="ro@suse.com" date="1722859200">- Update to version 84.87+git20240805.7513b28:
  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1723204800">- Update to version 84.87+git20240809.5d13eb4:
  * cleanup aaa_base.post and fold back into specfile</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Update to version 84.87+git20240821.fbabe1d:
  * Add helper service for soft-reboot</changelog>
  <changelog author="dmueller@suse.com" date="1725624000">- Update to version 84.87+git20240906.742565b:
  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)</changelog>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
</package>
<package pkgid="a93ecf0e1aa9622d0c62e660228bdae31a4680da9b0f85538dc50d9916b458c6586acd022b3e6ea7900cd0750a7f4a9b12051d6e5241db2ed9f1bdc7f6a39f6f" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20260210.ecce285" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
</package>
<package pkgid="956d5fe64029b084ac54520dd0002e9f8ce44931be265725e38728cdd800e1a451c4bc96bf31e2cdf8808e3cc92f18995701fd925f81be833a8ef212489072b0" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20260529.c4391e5" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
</package>
<package pkgid="c39e0d2429f32f41ebbeca0c576ea50bd2224984b34ac9cbcb099de2cd7875bbc2e008dee7847bef7e53be13c1ee4fc962803e84489bcd929b47b477f1f947c0" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20260602.e901e17e" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
</package>
<package pkgid="5c265da034bff7892f205af8313b9acea76a0835ed2c87cff10c17129fbc1bc9206ce8fca2f0b1d122861d218feaf85d19e10d5af300b0d91f5570381f584d45" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20260610.3b5a868c" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
  <changelog author="ro@suse.com" date="1781092800">- Update to version 84.87+git20260610.3b5a868c:
  * Add missing "=" in alljava.csh (boo#1267423)</changelog>
</package>
<package pkgid="7a01b47a2a96548fec3a0f48ac5fcd3b3025181319a41160041e2cd629a0d79c2504dcb9b9fe5769b8c3a09b66a5707ffdb890f063fb60cc918ad374175951bd" name="aaa_base-yama-enable-ptrace" arch="x86_64">
  <version epoch="0" ver="84.87+git20250429.1cad3bc" rel="160000.2.2"/>
  <changelog author="ro@suse.com" date="1722859200">- Update to version 84.87+git20240805.7513b28:
  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1723204800">- Update to version 84.87+git20240809.5d13eb4:
  * cleanup aaa_base.post and fold back into specfile</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Update to version 84.87+git20240821.fbabe1d:
  * Add helper service for soft-reboot</changelog>
  <changelog author="dmueller@suse.com" date="1725624000">- Update to version 84.87+git20240906.742565b:
  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)</changelog>
  <changelog author="dmueller@suse.com" date="1735819200">- Update to version 84.87+git20250102.c08e614:
  * Load distrobox_profile.sh</changelog>
  <changelog author="ro@suse.com" date="1741867200">- Update to version 84.87+git20250313.e71c2f4:
  * Respect PROFILEREAD/CSHRCREAD at shell switch
  * Modernize specfile
  * Add safety quotes and proper escaping
  * Avoid bashisms in build recipe
  * Add setup-systemd-proxy-env
  * profile.{sh,csh}: Drop useless proxy variables cleanup</changelog>
  <changelog author="ro@suse.com" date="1741867201">- Update to version 84.87+git20250313.4dd1cfd:
  * DIR_COLORS: add backup and temporary file extensions
  * DIR_COLORS: sort audio formats
  * DIR_COLORS: use cyan for audio formats instead of green
  * DIR_COLORS: add 'avif' to image formats
  * DIR_COLORS: add updated and sorted list of archive formats
  * DIR_COLORS: don't colour DOS/Windows executables
  * DIR_COLORS: update existing colours and add missing ones
  * DIR_COLORS: add COLORTERM and 'st' terminal
  * DIR_COLORS: update file description
  * DIR_COLORS: sort TERM entries
  * DIR_COLORS: remove COLOR, OPTIONS and EIGHTBIT</changelog>
  <changelog author="ro@suse.com" date="1744286400">- Update to version 84.87+git20250410.71df276:
  * Modern s390x uses TERM=linux for ttysclp&lt;X&gt;</changelog>
  <changelog author="dimstar@opensuse.org" date="1745582400">- Update to version 84.87+git20250425.1664836:
  * Fix bug boo#1241205 by adding missed endif
  * alias.bash: future-proof egrep/fgrep color aliases</changelog>
  <changelog author="ro@suse.com" date="1745928000">- Update to version 84.87+git20250429.1cad3bc:
  * Remove alias "you" (boo#1242011)</changelog>
</package>
<package pkgid="2fa0f29f69b6734adb9a531d80311732977c3a24243d3aed533e1253dfb74c9b68d91786838dc9ab2e293f6c8f1a2c798c82ddb0ae6e6eaa995dab81409feafe" name="aaa_base-yama-enable-ptrace" arch="x86_64">
  <version epoch="0" ver="84.87+git20260210.ecce285" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1754049600">- Update to version 84.87+git20250801.f305627:
  * Remove sysconfig.language [bsc#1247286]</changelog>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
</package>
<package pkgid="4edfcb8769eb6e1f20f42e2d963826db50b4b94dcc14cfd73cb7d8f7b52ded246517773434e1df76828d1cc01ad9c088e407078c5fdfa071e4f0457eb1a813ea" name="aaa_base-yama-enable-ptrace" arch="x86_64">
  <version epoch="0" ver="84.87+git20260529.c4391e5" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1754395200">- Update to version 84.87+git20250805.3069494:
  * Remove initviocons for tcsh as well and
  * Update csh.login
  * Add missing quoting and remove unneeded uses of eval</changelog>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
</package>
<package pkgid="2b5924397b62cea2847dd74a4e0fa70c54e41bd0385782838179f4120d180cb141ed5e6656cdf59a4c4b6938b78684a845b5466b1fd75d7f2f7699f7572785a0" name="aaa_base-yama-enable-ptrace" arch="x86_64">
  <version epoch="0" ver="84.87+git20260602.e901e17e" rel="160000.1.1"/>
  <changelog author="ro@suse.com" date="1756900800">- Update to version 84.87+git20250903.33e5ba4:
  * Correct fix for boo#1247495 (boo#1248158)</changelog>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
</package>
<package pkgid="76e155f6867270c1f8a75c83231182d476926921dea9eca4bd830d53453ff5d65aeff408923a4e481728ba005c2810b854b69f9bfa8cf98a9dcb24264f3f6cd8" name="aaa_base-yama-enable-ptrace" arch="x86_64">
  <version epoch="0" ver="84.87+git20260610.3b5a868c" rel="160000.1.1"/>
  <changelog author="kukuk@suse.com" date="1761825600">- Update to version 84.87+git20251030.441f926:
  * Add systemd to /etc/nsswitch.conf [bsc#1250513]
  * Add group-directories-first option
  * prevent normal users from accessing dmesg (bsc#1249686)
  * Use explicit defaults for XDG environment variables</changelog>
  <changelog author="ro@suse.com" date="1762776000">- Update to version 84.87+git20251110.af063e6:
  * Avoid escape sequences on dump terminal of s390
  * Set erase character from kbs entry of terminfo</changelog>
  <changelog author="dimstar@opensuse.org" date="1762862400">- Update to version 84.87+git20251111.16d9d43:
  * Set XDG environment variables consistently without trailing slash</changelog>
  <changelog author="ro@suse.com" date="1762862401">- Update to version 84.87+git20251111.509a363:
  * Avoid escape sequences on dump terminal of s390</changelog>
  <changelog author="ro@suse.com" date="1766923200">- Update to version 84.87+git20251217.34fd7bc:
  * add tmpfiles template adm-backup.conf (jsc#PED-14803)
  * Revert ec7f00fa60f11d28b427f2e224822a7b81825806
  * Fix old script to support copy mode as well
  * Support for XDG environment variables for the su,
  * adapted sugggestions
  * Patching nsswitch.conf only if it has not been generated by nsswitch-config (JIRA-#PED-13807).
  * Avoid nasty exceptions running tput</changelog>
  <changelog author="ro@suse.com" date="1768219200">- Update to version 84.87+git20260112.8f614f3:
  * add ghost entries for the removed dirs
  * Revert list directories above all normal files.</changelog>
  <changelog author="ro@suse.com" date="1770724800">- Update to version 84.87+git20260210.ecce285:
  * For boo#1257875 get intrinsic DEFAULT_WM back
  * DIR_COLORS: add vt220 and .jxl</changelog>
  <changelog author="ro@suse.com" date="1780056000">- Update to version 84.87+git20260529.c4391e5:
  * $status -&gt; $?
  * Simplifying the sh part too
  * Addressing review comments and simplifying a bit
  * Handle javas managed by libalternatives and by update-alternatives alike</changelog>
  <changelog author="ro@suse.com" date="1780401600">- Update to version 84.87+git20260602.e901e17e:
  * Fix a typo + follow symlinks in alljava</changelog>
  <changelog author="ro@suse.com" date="1781092800">- Update to version 84.87+git20260610.3b5a868c:
  * Add missing "=" in alljava.csh (boo#1267423)</changelog>
</package>
<package pkgid="27abe3feb3e7292b2c4cb36d80f9254ebfb585da25b4644955b7bfeb847800b97b795c351b8bb74279547acd74ee38349a0f1183efcc139209e1eb1354b9a593" name="aalib" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.14"/>
  <changelog author="meissner@suse.com" date="1431864000">- info deinstall needs to be in preun section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441800000">- Add aalib-ncurses-6.0-accessors.patch: Fix build with
  NCurses 6.0 with WINDOW_OPAQUE set to 1.</changelog>
  <changelog author="meissner@suse.com" date="1445083200">- aavga.dif: add -fno-stack-protector to shared aavga.so object build</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Run fdupes, and trim old rpm constructs.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662897600">- avoid ffast-math (ggo#55522)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668513600">- Homepage link http://aa-project.sourceforge.net/ is a permanent
  redirect to its HTTPS counterpart https://aa-project.sourceforge.net/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1714996800">- Add -fpermissive to optflags (boo#1223910).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1715256000">- Remove conditionals for SUSE 11.3</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1720094400">- Add -fpermissive to the remaining uses of optflags. [boo#1223910]</changelog>
</package>
<package pkgid="93ccf7f42d59f324bd2d4b7ad62f1ec5934cd328e9db43ac89a4203d52abb35d0a9f2b934c0e559fca54ef9a9c9dcc50efe4fedd6308c0575c692e06bcb5a505" name="aalib-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.14"/>
  <changelog author="meissner@suse.com" date="1431864000">- info deinstall needs to be in preun section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1441800000">- Add aalib-ncurses-6.0-accessors.patch: Fix build with
  NCurses 6.0 with WINDOW_OPAQUE set to 1.</changelog>
  <changelog author="meissner@suse.com" date="1445083200">- aavga.dif: add -fno-stack-protector to shared aavga.so object build</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623067200">- Drop --with-pic (no effect with --disable-static).
- Run fdupes, and trim old rpm constructs.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1662897600">- avoid ffast-math (ggo#55522)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668513600">- Homepage link http://aa-project.sourceforge.net/ is a permanent
  redirect to its HTTPS counterpart https://aa-project.sourceforge.net/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1714996800">- Add -fpermissive to optflags (boo#1223910).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1715256000">- Remove conditionals for SUSE 11.3</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1720094400">- Add -fpermissive to the remaining uses of optflags. [boo#1223910]</changelog>
</package>
<package pkgid="a249493726865c18522b2c69357756b49d4ca4f912f7ccb63cf6180a26de55183fef3f5d4499048425f721520850617e7d614311c5b742600475c0460faba617" name="aardvark-dns" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="160000.2.2"/>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1721995200">- rust &gt;= 1.70 is required to build more recent versions of this
  package. Also, BuildRequire cargo+rust to prevent conflicts with
  `cargo-packaging`.</changelog>
  <changelog author="danish.prakash@suse.com" date="1723032000">- Update to version 1.12.1:
  * Release v1.12.1
  * Updated release notes for 1.12.1
  * Change av cargo categories
  * Bump to 1.13.0-dev
  * Release 1.12.0
  * Release notes for 1.12
  * config: ignore enoent errors while reading configs
  * run cargo update
  * update upsteam resolvers on each refresh
  * fix(deps): update rust crate syslog to v7
  * fix(deps): update rust crate tokio to 1.39.2
  * add tcp support for forwarding (bsc#1234660)
  * add tcp listening support
  * test: add new test to check for startup error
  * return bind error to caller on first start
  * add our own error type and use it over anyhow
  * server: use anyhow to wrap parse_configs error
  * server: split out main loop into new function
  * main: remove aardvark-dns error prefix
  * coredns: remove unnecessary try_join! call
  * coredns: drop pointless name var
  * serve: read nameservers once
  * replace signal-hook with tokio::signal
  * serve: fix broken error logging
  * server: improve parent &lt;-&gt; child error handling
  * add some basic perf check script
  * fix(deps): update rust crate tokio to 1.39.0
  * coredns: create reply_ip() function
  * coredns: match dns type explicitly
  * server: use only one tokio runtime
  * coredns: improve indentation for process_message()
  * coredns: move upstream resolvers detection later
  * coredns: do not clone sender
  * read AARDVARK_NO_PROXY once
  * coredns: move main code out of select!
  * coredns: fix "name" naming
  * coredns: remove unused forward_addr/port
  * coredns: fix handling of dns search domain
  * coredns: rework PTR lookup flow
  * fix(deps): update rust crate tokio to 1.38.1
  * [skip-ci] TMT: Reorg upstream tests for downstream reusability
  * [skip-ci] Packit: use `packages: [aardvark-dns-fedora]` for podman-next builds
  * Be sure to have at least Epoch 2 to preserve upgrade path in c10s.
  * fix(deps): update rust crate log to 0.4.22
  * [CI:BUILD] rpm: Update Rust macro usage
  * fix(deps): update rust crate tokio to 1.38.0
  * Bump to 1.12.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1725451200">- Update to version 1.12.2:
  * Release v1.12.2
  * Update release notes for 1.12.2
  * coredns: work on tcp requests concurrently
  * tcp: add timeout to connection (fixes bsc#1230153 / CVE-2024-8418)
  * cirrus: update branch names</changelog>
  <changelog author="danish.prakash@suse.com" date="1730289600">- Update to version 1.13.0:
  * Release v1.13.0
  * Update release notes for 1.13.0
  * test: use dnsmasq over slirp4netns
  * coredns: forward names with no ndots as well
  * run cargo update
  * fix(deps): update rust crate tokio to 1.41.0
  * fix(deps): update rust crate flume to 0.11.1
  * fix(deps): update rust crate libc to 0.2.161
  * fix(deps): update rust crate libc to 0.2.160
  * fix(deps): update rust crate clap to ~4.5.20
  * cirrus: check for msrv build
  * define a MSRV policy
  * chore(deps): update dependency containers/automation_images to v20241010
  * [skip-ci] Packit: constrain koji job to the fedora package
  * dns: limit to 3 resolvers and use better timeout for them
  * OWNERS file audit and update
  * fix new lint error with rust 1.81
  * test: make them pass on RHEL/Centos Stream 9
  * Packit: disable F39 and separate out ELN
  * serve: parse resolv.conf ourselves
  * fix(deps): update rust crate libc to 0.2.159
  * coredns: allow host lookup of names
  * backend: return simple Vector in lookup()
  * coredns: use a TTL of 0 for our names
  * coredns: do not clonse the Record
  * netavark_cache_groom.sh: fix wrong branch
  * Packit: add sidetag to release with netavark
  * coredns: work on tcp requests concurrently
  * tcp: add timeout to connection
  * fix(deps): update rust crate tokio to 1.40.0
  * fix(deps): update rust crate libc to 0.2.158
  * chore(deps): update dependency containers/automation_images to v20240821
  * fix(deps): update rust crate tokio to 1.39.3
  * fix(deps): update rust crate libc to 0.2.156
  * Bump main version back to v1.13.0-dev</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1731412800">- Update to version 1.13.1:
  * Release v1.13.1
  * release notes for 1.13.1
  * test: make jq query work on centos stream 9
  * [skip-ci] Packit/TMT: idiomatic repo addition
  * [skip-ci] Packit: Remove epel jobs
  * tmt: install dnsmasq dependency
  * [skip-ci] Packit: disable osh-diff-scan
  * [skip-ci] Packit: enable c9s downstream updates
  * [skip-ci] TMT: install builddeps downstream
  * [skip-ci] RPM: cleanup changelog conditionals
  * support ipv6 link local addresses in resolv.conf
  * cirrus: update DEST_BRANCH</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1739275200">- Update to version 1.14.0:
  * Release v1.14.0
  * release notes for v1.14.0
  * update release notes from v1.13.1
  * run cargo update
  * fix lint issues with rust 1.84
  * chore(deps): update dependency containers/automation_images to v20250131
  * fix(deps): update rust crate clap to ~4.5.28
  * fix(deps): update rust crate log to 0.4.25
  * fix(deps): update rust crate tokio to 1.43.0
  * chore(deps): update dependency containers/automation_images to v20250107
  * fix(deps): update rust crate clap to ~4.5.23
  * fix(deps): update rust crate libc to 0.2.169
  * fix(deps): update hickory-dns monorepo to 0.24.2
  * Cargo.lock: bump some versions
  * run cargo update
  * cargo: set rust-version
  * fix(deps): update rust crate clap to ~4.5.21
  * fix(deps): update rust crate libc to 0.2.167
  * OWNERS: remove edsantiago
  * fix(deps): update rust crate libc to 0.2.165
  * fix(deps): update rust crate libc to 0.2.164
  * chore(deps): update dependency containers/automation_images to v20241107
  * fix(deps): update rust crate tokio to 1.41.1
  * fix(deps): update rust crate libc to 0.2.162
  * test: make jq query work on centos stream 9
  * [skip-ci] Packit: disable osh-diff-scan
  * support ipv6 link local addresses in resolv.conf
  * [skip-ci] Packit: enable c9s downstream updates
  * [skip-ci] TMT: install builddeps downstream
  * [skip-ci] RPM: cleanup changelog conditionals
  * [skip-ci] Packit/TMT: idiomatic repo addition
  * [skip-ci] Packit: Remove epel jobs
  * tmt: install dnsmasq dependency
  * Bump to 1.14.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1747310400">- spec: require cargo instead of rust+cargo; drop redundant comment</changelog>
</package>
<package pkgid="cf59501f472bbd1ed8c49260bef99454182305b48e806c8263050d76ac2fc33f1e5a6e833e6d62b65f883604565ad90933b7e62593e032b846d945b933a3211e" name="abcde" arch="noarch">
  <version epoch="0" ver="2.9.3" rel="bp160.1.10"/>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goliński on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604491200">- Fix dependency on perl(WebService::MusicBrainz) to work with
  1.0.5 (boo#1178312)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1723636800">- Fix arithmetic on non-octal track numbers (boo#1219527)
  * add abcde.bug.204.patch</changelog>
</package>
<package pkgid="d50c84468b38117514dc6a250c6bba1f397cebe7855513e2ad421f964294f7d49616cbec9ad3946de9291c5c6ff2953e777e0745b2aaf77bfa186dcfad59f7bf" name="abcm2ps" arch="x86_64">
  <version epoch="0" ver="8.14.15" rel="bp160.1.14"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1582113600">- Update to 8.14.7:
  * crash when %%score with no common voices and next notes with beams
  * crash when new staff system with only new voices
  * crash when slash found before a bar and not a (deprecated) measure repeat
  * crash when %%staves at end of tune and lack of music in the last voice
  * bad parsing of the note durations
  * clash of some ties with dots
  * bad check of the number of measures in Z (multi-rest)
  * new improved coda sign
  * Make pkg-config substitutable for cross-compilations
  * add option tieheight factor to tie height like in slurheight
  * add some decorations from v2.2 standard</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592827200">- Update to 8.14.8:
  * fix: no respect the width in %%staffbreak
  * fix: don't draw a staff when only %%staffbreak inside
  * fix: bad repeat bracket when continued on next line, line starting by a bar
  * fix: bad tuplet bracket again when at end of a voice overlay sequence
  * fix: bad tuplet bracket when at end of a voice overlay sequence
  * handle '%%MIDI temperamentequal '
  * accept '^1' and '_1' as microtone accidentals</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1592827201">- Update to 8.14.9:
  * fix: bad natural accidental when %%MIDI temperamentequal</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1606132800">- Update to 8.14.10:
  * fix: bad glyph when defined by SVG containing 'v' in
  * fix: bad check of note length since commit 191fa55
  * fix: memory corruption when error in %%staves/%%score
  * fix: crash when too big note duration
  * fix: crash when staff width too small</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1607342400">- Update to 8.14.11:
  * fix: error "'staffwidth' too small" when generating sample3.abc</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1626350400">- Update to 8.14.12:
  Fixes:
  * crash when "%%break 1" and no measure bar in the tune
  * crash when duplicated voice ending on %%staves with repeat variant
  * crash when voice duplication with symbols without width
  * crash or bad output when null value in %%scale
  * problem when only bars in 2 voices followed %%staves of the second voice only
  * crash when tuplet error in grace note sequence
  * crash when grace note with empty tuplet
  * crash when many broken rhythms after a single grace note
  * access outside the deco array when error in U:
  * crash when !xstem! with no note in the previous voice
  * crash on tuplet without any note/rest
  * crash when grace notes at end of line and voice overlay
  * crash when !trem2! at start of a grace note sequence
  * crash when wrong duration in 2 voice overlays and bad ties
  * crash when accidental without a note at start of line after K: (CVE-2021-32435)
  * array overflow when wrong duration in voice overlay (CVE-2021-32434, CVE-2021-32436)
  * loss of left margin after first page since previous commit
  * no respect of %%leftmargin with -E or -g
  * bad placement of chord symbols when in a music line with only invisible rests
  Syntax:
  * Accept and remove one or two '%'s at start of all %%beginxxx lines
  Generation:
  * Move the CSS from XHTML to SVG
  Build:
  * configure: respect environment variable
- Refresh compiler_flags.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1643716800">- Update to 8.14.13:
  * fix: don't start/stop slurs above/below decorations
  * fix: crash when too many notes in a grace note sequence (#102)
  * fix: crash when too big value in M: (#103)
  * fix: loop or crash when too big width of y (space) (#104)
  * fix: bad font definition with SVG output when spaces in font name
  * fix: bad check of note length again (#106)
  * fix: handle %%staffscale at the global level (#108)
  * fix: bad vertical offset of lyrics when mysic line starts with
    empty staves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1671451200">- Update to 8.14.14:
  * move the single bars 1 point to the left (#109)
  * fix: lack of error when decoration type 2, 5, 6 or 7 on a note head
  * fix: remove lines starting with one '%' instead of removing the
    character
  * fix: loss of !tremn! in grace notes since some version 8.xx.xx
  * fix: remove warnings dealing with accesses to dynamically allocated
    arrays (#110)
  * fix: lack of color on multi-rests
  * fix: %%repeat not working
  * add %%header2 and %%footer2 for even pages</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704715200">- Update to 8.14.15:
  * fix: bad vertical position of !trill(!-like decorations
  * fix: don't combine notes in tuplets that start by a rest when
    %%voice combine 0
  * fix: dashed bars broken in PostScript output since commit e3282f8
  * fix: bad PS page definition when %%gutter negative
  * fix: bad measure numbers when many voices after %%setbarnb</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="4b0d0fb0df605bfb50fb7bca63d594abf312b29b5fe4337d7b7fb1c1c12e9406ed835eed15b9f0ff1c29a56ce9d190e2738f0688681051836410aae8f2cec113" name="abi-compliance-checker" arch="noarch">
  <version epoch="0" ver="2.3" rel="bp160.1.10"/>
  <changelog author="astieger@suse.com" date="1473854400">- update to 1.99.23:
  * Fixed lists of affected symbols in the XML-format report
  * Added -disable-quick-empty-report option
  * Improved generation of quick empty reports
  * Improved SysCheck.pm module for analysis of operating systems</changelog>
  <changelog author="davejplater@gmail.com" date="1475755200">- Update to 1.99.24
- Upstream changes:
  Improvements
  * Support for Clang
  * Improved a module to compare operating systems
  * Improved support for C++ keywords in C code
  New Options
  * -skip-typedef-uncover: do not report a problem if type is
    covered or uncovered by typedef (useful for broken debug info)
  * -skip-unidentified: skip header files in 'headers' and
    'include_preamble' sections of the XML descriptor that cannot
    be found
  * -disable-constants-check: do not check for changes in
    constants
  * -skip-added-constants: do not detect added constants
  * -skip-removed-constants: do not detect removed constants
  Bug Fixes
  * Do not show GCC version in the source compatibility report
  * Renamed CPU Type column to Arch in the report
  * Support for ABI dumps v3.3
  * The -cpp-compatible option is now enabled by default</changelog>
  <changelog author="astieger@suse.com" date="1484308800">- update to 1.99.25:
  * test-abi-dumper: compare ABI dumps created by the ABI Dumper
    tool
  * Do not list a symbol as removed in the source-compatibility
    report if it is presented in the dynsym table</changelog>
  <changelog author="astieger@suse.com" date="1490443200">- update to 2.0:
  * faster on big libraries
  * Add a module to create ABI dump from AST tree
  * Add a module to create AST dump
  * Add a module to parse GCC AST
  * Add a module to find system files and automatically generate include paths
  * Add a module to mangle C++ symbols
  * Add a module to read ELF binaries
  * Add a module to handle type attributes
  * Add a module to handle XML descriptors
  * Add a module to filter symbols
  * Add a module to handle input data
  * Add a module for logging
  * Partial support for GCC 6
  * Compare versioned data types
  * Add -filter option: a path to XML descriptor with skip_* rules
    to filter analyzed symbols in the report
  * Added -keep-cxx option to check ZS, ZNS and _ZNKS* symbols
  * Fix automatic generation of include paths
  * Fix report for removed virtual symbols
  * Fix XML-format ABI dumps
  * Fix source-compatibility reports
  * Fix counter of checked data types
  * Fix lists of affected symbols
  * Fix analysis of standard C++ libraries
  * Fix analysis of added and removed virtual methods
  * Fix style of the report
  * Fix analysis of alias symbols
  * Uncover changed typedefs properly
  * Fix Parameter_From_Register and Parameter_To_Register rules
  * Fix analysis of data types derived from template instances
  * Enable -headers-only option automatically if header file is
    used as input library descriptor
  * Fix analysis of template instances
  * Fix analysis of static data
  * Fix error message if modules are not installed
  * Fix analysis of versioned symbols
  * Fix -ext option
  * Fix -use-dumps option
  * Fix -debug option
  * Fix console output</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- update to 2.1:
  * Show added v-table symbols for public classes
  * Fixed analysis of static methods
  * Fixed analysis of typedefs
  * Fixed analysis of zero-size structs
  * Fixed logs
  * Fixed analysis of static libraries on Windows
  * Fixed search for files on Windows
  * Documented -skip-internal-types option in -help
  * Add noindex meta tag to report if no changes detected</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 2.2:
  * Improve support for Fortran
  * Fix analysis of inline functions
  * Fix analysis of calling conventions
  * Fix handling of C++ keywords in C code
  * Fix -lang option
  * Fix handling of errors when compressing ABI dumps
  * Fix style of the report</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529150400">- Update to 2.3:
  * Improvements:
    + Support for GCC 8
    + Use -fdump-lang-class instead of -fdump-class-hierarchy
    + Use -fdump-lang-raw instead of -fdump-translation-unit
    + Enable internal mangling of C++ funcs for all future GCC
    versions
    + Added -keep-reserved option to report changes in reserved
    fields
    + Fixed license to LGPL 2.1
  * Bug Fixes:
    + Fix detection of GCC 7 compiled with
  - -with-gcc-major-version-only
    + Fixed internal mangling
    + Escape braces in regex for compatibility with future Perl 5
    versions
    + Redirect stderr of objdump -f to null
- Add %check section.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532088000">- Add '-fPIC' option for AArch64 to avoid the following errors:
  * relocation XXX which may bind externally can not be used when
  making a shared object; recompile with -fPIC
  * dangerous relocation: unsupported relocation</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723464000">- Add -fpermissive to compiler flags invoked byt the testsuite because
  the generated files there do not have proper includes and so cause
  compiler errors with GCC 14.</changelog>
</package>
<package pkgid="4fb90d09a2246e1ec3c37ff7ce9af5d7e143a97c3d00d9faa3673136f7bba077657b54aa123f3d44c46bcfc12fe1ef3b5c71e74e26b7f2c9388ccf74e92c0cee" name="abi-dumper" arch="noarch">
  <version epoch="0" ver="1.2" rel="bp160.1.10"/>
  <changelog author="lnussel@suse.de" date="1426593600">- initial package version 0.99.8</changelog>
  <changelog author="lnussel@suse.de" date="1431345600">- new version 0.99.8.1</changelog>
  <changelog author="davejplater@gmail.com" date="1475755200">- Update to version 0.99.18
- Upstream changes since 0.99.17
  Improved support for incomplete debug-info.
- For previous version changes see:
  https://github.com/lvc/abi-dumper</changelog>
  <changelog author="astieger@suse.com" date="1494504000">- update to 0.99.19:
  * Improved support for incomplete debug-info</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- update to 1.0:
  * Up to 4 times less RAM usage
  * Reduce RAM usage on large compressed debug info
  * Minimal support for lambda expressions
  * Improve search for header files
  * Carefully handle lexical blocks
  * Detection of symbols in header files missed by Ctags
  * Detection of public typedefs
  * Support for unspecified_type
  * More debug messages
  * Print errors of the vtable-dumper
  * Add -ld-library-path option to specify paths to add to
    LD_LIBRARY_PATH variable before executing vtable-dumper
  * Add -lambda option to enable support for lambda and checking of
    lexical blocks
  * Add -ctags-def option to add '-D DEF' option to the ctags call
  * Add -all-units option to extract ABI info after reading of all
    compilation units
  * Add -include-defines option to add defines when creating TU
    dumps
  * Fix detection of a function header file
  * Fix analysis of inline functions
  * Fix analysis of template unions
  * Fix analysis of parameters
  * Fix analysis of typedefs
  * Fix analysis of zero-size structs
  * Fix -public-headers option
  * Fix analysis of global data
  * Fix analysis of templates
  * Fix analysis of anon data types
  * Fix analysis of symbol versions
  * Removed duplicates from ABI dump
  * Fix 'Copied' attribute of a class
  * Fix parameter offsets in the ABI dump
  * Fix analysis of standard C++ libraries
  * Fix analysis of MethodPtr types</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 1.1:
  * Support for compressing of ABI dumps before writing to drive
    from RAM
  * Fix analysis of inline functions (WARNING: old dumps should be
    regenerated before comparing by ABICC)
  * Deny analysis of static libraries
  * Bumped ABI dump version</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1562155200">- Add 0001-Fixed-license-to-LGPL-2.1.patch
  Add 0002-Fixed-license-file.patch
  Add 0003-Support-for-new-elfutils-Fedora-30.patch
  fixes incorrect debuginfo extraction with new elfutils</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1609848000">- update to 1.2:
  * Support for Fedora 30
  * Misc fixes
- drop patches fixed in release:
  * 0001-Fixed-license-to-LGPL-2.1.patch
  * 0002-Fixed-license-file.patch
  * 0003-Support-for-new-elfutils-Fedora-30.patch</changelog>
</package>
<package pkgid="aec36febc63b23477a94b6c9ace42ab6f31a906b6c271cc0a9097efebbd74cacb1cfa753bf58504e06c55e1428bd4aabc03b99580a3ad65305b579e71e5b91a0" name="abseil-cpp-devel" arch="x86_64">
  <version epoch="0" ver="20240722.1" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="fstrba@suse.com" date="1709553600">- Fix broken link to sources
- Fix build for distributions that lack the ldconfig_scriptlets
  macro
- Make the gcc version condition a bit more generic</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- split abseil libraries so that libzypp / protobuf doesn't
  require all to be installed (jsc#PED-8153)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1712836800">- update to 20240116.2
  * Added absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Added configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. (from C++17)
  * Breaking change: AbslHashValue() no longer accepts C-style
    arrays as a parameter.
  * Breaking change: absl::weak_equality and absl::strong_equality
    have been removed</changelog>
  <changelog author="foss@grueninger.de" date="1720180800">- Add upstream patch abseil-cmake-gtest-testonly.patch to fix
  issue with GTest and CMake 3.30</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1731758400">- update to 20240722.0:
  * Add GoogleTest matchers for absl::Status. These matchers make
    it easier to write unit tests for code that uses absl::Status.
  * absl::AlphaNum no longer allows brace-initialization
  * The deprecated symbol absl::kuint128max has been removed and
    should be replaced with absl::Uint128Max().
  * absl::aligned_storage_t, which was a polyfill consistent with
    std::aligned_storage_t, has been removed.
    std::aligned_storage_t is deprecated in C++23
  * absl::StrJoin now has a absl::string_view overload. This
    allows for passing a collection of string-like objects without
    having to convert everything to the same type first. However,
    this may be a breaking change for users passing an explicit
    template argument to absl::StrJoin. In this case, simply remove
    the explicit template parameter.
  * vlog_is_on.h is now a public header and is no longer included
    from log.h. To use VLOG_IS_ON(), absl/log/vlog_is_on.h must be
    included.
- drop abseil-cmake-gtest-testonly.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Extend options-cxx17.patch and options-old.patch
  to avoid race-condition (boo#1235867)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1737892800">- update to 20240722.1 (boo#1236438)
  * potential integer overflow in hash container create/resize</changelog>
</package>
<package pkgid="2546b958cbf981b04bd8001d44c0cc919e1ca45adde8d9662c44b4b3308ede4555daa0cc435a745fe5943553b5a8fa0f8a3e0024846cb83b7eedc4958b54f2e1" name="abxtest" arch="x86_64">
  <version epoch="0" ver="0.15.2b" rel="bp160.1.12"/>
  <changelog author="pascal.bleser@opensuse.org" date="1321099200">- initial version (0.15.2b)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1361793600">- buildrequire zlib-devel to fix build on 12.3+</changelog>
  <changelog author="mpluskal@suse.com" date="1487764800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1563624000">- Added madplay-switch-to-new-alsa-api.patch to fix Factory build
- Spec cleanup</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="8314bd2efea059ac890ee2c566f4ace432cb6317696172904a6f5c7e49e8a3731c619395282731646c1b7dd557237a877881499d003f256f083f7598e2549f0c" name="acars2-examples" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1551268800">- Update to version 1.2.0
  * Added support for decoding Media Independent Aircraft Messaging
    (MIAM - ACARS label MA) version 1 and 2. All types of MIAM
    frames are decoded, provided that they fit in a single ACARS
    message. In case of multi-fragment MIAM messages only the first
    fragment is decoded (partially) due to lack of message
    reassembly support in libacars. This will be addressed in a
    future release.
    MIAM uses DEFLATE compression, hence libacars now optionally
    depends on zlib.  If zlib is not available at the build stage,
    MIAM decompression code will be disabled and many messages
    will be left undecoded.
  * `decode_acars_apps` is a new example application. It decodes
    all ACARS applications supported by libacars. This makes
    `decode_arinc` application obsolete
  * Minor bugfixes in the build system.
- Remove patch:
  * libacars-libsuffix.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579435200">- Update to version 2.0.0
  New major release 2.
  * API and ABI are not backwards compatible with version 1
  * New feature: generic engine for reassembly of fragmented
    messages. Supports automatic tracking of fragments' sequence
    numbers (with possible wraparounds), handles reassembly
    timeouts and fragment deduplication. Messages can be keyed
    with arbitrary data (eg. custom header fields).
  * New feature: automatic reassembly of ACARS messages.
  * New feature: automatic reassembly of MIAM file transfers.
  * New feature: pretty-printing of XML text in ACARS and MIAM CORE
    payloads.
  * New feature: simple hash table implementation.
  * Incompatible change: new library configuration API. la_config
    structure with static fields has been removed. Configuration
    variables are now stored in a hash table, read with
    la_config_get_* and set with la_config_set_* functions. Refer
    to doc/API_REFERENCE.md for details.
    Refer to libacars/config_defaults.h for the most current list of
    configuration options and their default values.
  * Incompatible change: ACARS parser now strips sublabel and MFI
    (Message Function Identifier) fields from the message text, if
    present. Their values are stored in la_acars_msg structure in
    sublabel and mfi fields. In text and JSON output they are
    printed as separate fields.
  * Incompatible change: MIAM parser and ARINC-622 ATS message
    parser now expect sublabel and MFI fields to be stripped by the
    caller, otherwise the parser will ignore the message. This
    operation can be performed with minimal fuss using
    la_acars_extract_sublabel_and_mfi function.
  * Incompatible change: la_miam_parse function prototype has
    changed. All parameters except txt (message text) have been
    removed.
  * Incompatible change: no field of la_acars_msg structure has
    been removed.
  * Incompatible change: Media Advisory message timestamp and
    version are now stored as numbers, not characters. Type of
    hour, minute, second and version fields in
    la_media_adv_msg structure has been changed from char[] to
    uint8_t. Relevant JSON keys have changed types as well.
  * Incompatible change: state and current_link fields in
    la_media_adv_msg structure changed from char[2] to char, hence
    their values are no longer NULL-terminated.
  * examples: media_advisory app has been removed.
    Use decode_acars_apps instead.
  * Bugfixes, code cleanups.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1586260800">- Rename acars-examples to acars2-examples, conflicting with
  acars-examples: this package was duplicate generated between
  libacars and libacars2, with a random one being published in the
  repositories.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1598270400">- Update to version 2.0.1
  * Fixed a bug causing FANS1/A ErrorInformation message elements
    to be decoded incorrectly.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1604750400">- Update to version 2.1.0
  * ADS-C: fixed incorrect computation of vertical speed threshold
    in contract request messages.
  * JSON: fixed a bug where an ASN.1 string containing a
    \0 character caused truncation of JSON output. NULLs in strings
    are now replaced with \u0000 sequence.
  * JSON: ASN.1 SEQUENCEs are now printed as JSON objects rather
    than arrays of objects. It produces a simpler and more readable
    JSON structure. The change applies to all ASN.1 types formatted
    with la_asn1_format_SEQUENCE_cpdlc_as_json function. Refer to
    asn1-format-cpdlc-json.c file for a full list.
  * JSON: added json_append_octet_string_as_string function which
    prints the contents of the given byte buffer as a JSON string
    rather than as a list of numeric values.
  * JSON: added a bunch of new functions for formatting basic
    ASN.1 types. Now we have them all in libacars. Before that
    they were scattered between libacars and dumpvdl2.
  * JSON: deprecate la_json_append_long function. A more portable
    version named la_json_append_int64 shall be used instead.
  * Small bugfixes, code cleanups.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1606046400">- Update to version 2.1.1
  * Media Advisory: fixed a bug where a message with 10 or more
    available link indicators could overflow the static buffer
    and produce garbled result.
  * Media Advisory: fixed a bug where a message with an
    exceptionally long text field could cause buffer overrun and
    crash the program.
  * Media Advisory: replaced message parsing routine with a
    simpler and more robust one.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607083200">- Update to version 2.1.2
  * Fixed a build failure when compiling without libxml2 support.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1615032000">- Update to version 2.1.3
  * Fixed incorrect calculation of reporting interval in ADS-C
    Periodic Contract Requests.</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1685361600">- update to 2.1.4:
  * portability fixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1693137600">- Update to version 2.2.0
  * Support for decoding OHMA messages. These are diagnostic data
    exchanged with Boeing 737MAX aircraft.
    Decoding requires libacars to be built with ZLIB support.
    The data is encoded in JSON which libacars might optionally
    pretty-print, when serializing the message as text.
    Pretty-printing feature requires Jansson library.</changelog>
</package>
<package pkgid="f9dff5094185f0d0014a35e1b535a54649373fa988cb7f4952d18eeb77efc6d4153ba7b9e6d86eb8821f314ee4b7f077926091d7210aa88947e5f5a6caec204e" name="accel-config" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to version 4.1:
  * add missing libssl-dev dependency
  * Skip configuring ats_disable if the attribute is not present
  * Add config-user-default command
  * Add option "-c &lt;config_file&gt;" to load default configurations from
    the file
  * Disable default configured WQs and devices
  * Add "-n &lt;wq_name&gt;" to specify WQ name for disabling WQs
  * Add user_default_profile.conf
  * Add doumentation for new command "config-user-default"</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705579200">- Update to versione 4.1.4:
  * Fix a bug while reading json objects
  * Do not save traffic class attributes
  * Handle cmd_status initialization failure without exiting
  * Remove SET_ERR macro which is error prone
  * Skip check for ats_disable if attribute absent
  * Add parameter for specifying dev and wq
  * Fix bug about checking result of decompression
- Update to version 4.1.3:
  * be less greedy in _cleanup greps
- Update to version 4.1.2:
  * Fix a memory leak bug
- Update to version 4.1.1:
  * update Standards-Version to 4.6.2 in control file
  * Use asm volatile for compilers that don't support
    __builtin_ia32_mfence
  * Fixes for pedantic compiler warnings
  * Update copyright years in man pages
  * Fix some syntax errors and cleanup in man pages
  * Fix --help and other options
  * Fix a bug with empty wq driver name
  * Fix bug about finding a mismatched wq
  * Add op mask to check if an op is available
  * Decide whether to do the operation or not
  * Fix batch event log core check output issues
  * Provide --skip-config to run dsa tests without device reset</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 4.1.5:
  + Free driver_name in case of error adding wq.
  + change op config default value because of kernel change.
  + set read buffer allowed from 0 to 8.
  + disable enabled devices before unloading iaa_crypto.</changelog>
  <changelog author="dmueller@suse.com" date="1710763200">- update to 4.1.6:
  * Free driver_name when freeing wq
  * Disable all WQs and rmmod iaa_crypto
  * Remove the script about vfio passthrough device
  * Use madvise(MADV_DONTNEED) to ummap address</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723118400">- Update to 4.1.8:
  * Check for error return from iaa_do_crypto
  * Clean up resource leak in accfg_wq_get_occupancy
  * Update dsa_config_test_runner.sh
- 4.1.7 changelog:
  * Typo fixes
  * Make verbose logging optional
  * Clean up typo
  * Don't attempt to disable non-existent devices
  * Don't list attributes not present
  * add required SECURITY.md file for OSSF Scorecard compliance</changelog>
</package>
<package pkgid="0b32400414266a050f2dd649480971aae6a84a4b2a71b0b5be1a7e5cb1975a806dfc1f6733cff43edc472f5e4485d6d7dffe355470fcd73af6d453bda9f602ed" name="accel-config-devel" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="danilo.spinella@suse.com" date="1693396800">- Update to version 4.1:
  * add missing libssl-dev dependency
  * Skip configuring ats_disable if the attribute is not present
  * Add config-user-default command
  * Add option "-c &lt;config_file&gt;" to load default configurations from
    the file
  * Disable default configured WQs and devices
  * Add "-n &lt;wq_name&gt;" to specify WQ name for disabling WQs
  * Add user_default_profile.conf
  * Add doumentation for new command "config-user-default"</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705579200">- Update to versione 4.1.4:
  * Fix a bug while reading json objects
  * Do not save traffic class attributes
  * Handle cmd_status initialization failure without exiting
  * Remove SET_ERR macro which is error prone
  * Skip check for ats_disable if attribute absent
  * Add parameter for specifying dev and wq
  * Fix bug about checking result of decompression
- Update to version 4.1.3:
  * be less greedy in _cleanup greps
- Update to version 4.1.2:
  * Fix a memory leak bug
- Update to version 4.1.1:
  * update Standards-Version to 4.6.2 in control file
  * Use asm volatile for compilers that don't support
    __builtin_ia32_mfence
  * Fixes for pedantic compiler warnings
  * Update copyright years in man pages
  * Fix some syntax errors and cleanup in man pages
  * Fix --help and other options
  * Fix a bug with empty wq driver name
  * Fix bug about finding a mismatched wq
  * Add op mask to check if an op is available
  * Decide whether to do the operation or not
  * Fix batch event log core check output issues
  * Provide --skip-config to run dsa tests without device reset</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 4.1.5:
  + Free driver_name in case of error adding wq.
  + change op config default value because of kernel change.
  + set read buffer allowed from 0 to 8.
  + disable enabled devices before unloading iaa_crypto.</changelog>
  <changelog author="dmueller@suse.com" date="1710763200">- update to 4.1.6:
  * Free driver_name when freeing wq
  * Disable all WQs and rmmod iaa_crypto
  * Remove the script about vfio passthrough device
  * Use madvise(MADV_DONTNEED) to ummap address</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723118400">- Update to 4.1.8:
  * Check for error return from iaa_do_crypto
  * Clean up resource leak in accfg_wq_get_occupancy
  * Update dsa_config_test_runner.sh
- 4.1.7 changelog:
  * Typo fixes
  * Make verbose logging optional
  * Clean up typo
  * Don't attempt to disable non-existent devices
  * Don't list attributes not present
  * add required SECURITY.md file for OSSF Scorecard compliance</changelog>
</package>
<package pkgid="a940a87a255a00547694e8133ea9bbdd0149cdf30edf8eb40169ca685bcd1f0834105ecda40afa9035c215a0c822a6afa7469531513994c1ef7c35565f8de44f" name="accessibility-inspector" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Remove unimplemented methods
  * Port to REUSE.toml
  * Switch to runtime-version 6.8</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="ba2590acde63fc4134efe4b4cbcf9868fc1b15943c3cb587040da841bcb7d504d51e503394c4a6b25f2ae7a85b15487279e1e07efd5abda612309789f1a9ae58" name="accessibility-inspector-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Remove unimplemented methods
  * Port to REUSE.toml
  * Switch to runtime-version 6.8</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="9ff2d556f764a180f4be608bf2dc9407d2cf50bf04171ce0a208246939c5cc8ec0686607d2c4b3c950fd92391562c41c48cf634d8f6743118cebbebac8c19a0d" name="accounts-qml-module" arch="x86_64">
  <version epoch="0" ver="0.7git.20231028T182937~05e79eb" rel="bp160.1.15"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1575979200">- Initial package
- Add Fix-compilation-with-Qt-5.13.patch to make it build with Qt
  5.13
- Add Build-add-qmltypes-file-to-repository.patch to fix a problem
  with generating plugin.qmltypes on OBS</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1600084800">- Compile without "-Werror" to fix a build failure with Qt 5.15.1
  due to deprecation warnings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709035200">- Use a GIT snapshot to build accounts-qml-module with Qt 6
- Update to 0.7git.20231028T182937~05e79eb
- Drop patches, now included in the archive:
  * Build-add-qmltypes-file-to-repository.patch
  * Fix-compilation-with-Qt-5.13.patch</changelog>
</package>
<package pkgid="78af63dee4027a89225fb67b63f1e0dd61ad8e04fbbe0af4a085a8129b6d685f3e742d82f16971f562ad8eb4881a9dd87dd8e11756264e833d977f30a51f076d" name="accounts-qml-module-doc" arch="noarch">
  <version epoch="0" ver="0.7git.20231028T182937~05e79eb" rel="bp160.1.15"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1575979200">- Initial package
- Add Fix-compilation-with-Qt-5.13.patch to make it build with Qt
  5.13
- Add Build-add-qmltypes-file-to-repository.patch to fix a problem
  with generating plugin.qmltypes on OBS</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1600084800">- Compile without "-Werror" to fix a build failure with Qt 5.15.1
  due to deprecation warnings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709035200">- Use a GIT snapshot to build accounts-qml-module with Qt 6
- Update to 0.7git.20231028T182937~05e79eb
- Drop patches, now included in the archive:
  * Build-add-qmltypes-file-to-repository.patch
  * Fix-compilation-with-Qt-5.13.patch</changelog>
</package>
<package pkgid="a386ef4f9880ac894e680a34cab092d1f9f9d934f44560e0e336457b1e79a56fe277afa758e35779dece6d2c4a7da82e4e40b8d508ee0de253371cccd8b2fa13" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1687608000">- Add accountsservice-assume-gdm.patch: assume gdm when not being
  able to detect the used display manager. This is basically the
  same as was in place before we gained support for multiple DMs
  (boo#1212675).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1688558400">- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
  of accountsservice-sysconfig.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1691582400">- Rebase as-fate318433-prevent-same-account-multi-logins.patch:
  (bsc#1213884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707912000">- First part to fix build with GCC 14:
  + Inject patched mocklibc-1.0.tar.gz: only some header
    modifications to address implicit declaration of print_indent.
  + Add accountsservice-mocklib-gcc14.patch: patch meson'
    subproject definition to validate the injected tarball.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1709035200">- Rebase accountsservice-sysconfig.patch: to fix build with GCC 14
  (bsc#1219909).</changelog>
  <changelog author="dimstar@opensuse.org" date="1715083200">- Keep en and en_GB 'translations' in the main package: do not
  force -lang packages onto all users.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1718798400">- Update accountsservice-sysconfig.patch: work with SELinux policy
  (bsc#1222978).</changelog>
  <changelog author="mgorse@suse.com" date="1723464000">- Drop as-fate318433-prevent-same-account-multi-logins.patch.
  Gnome-shell now has similar functionality upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752494400">- Update accountsservice-sysconfig.patch: Check whether sysconfig
  is used and fallback to display manager settings if sysconfig is
  not used (bsc#1246127).</changelog>
</package>
<package pkgid="624ba4822d0abb8ea77e23cf4a14a83e716a5e4ca0c8b2a777a181a3238f81e7a639b08242d52c2070066a087a932d560d496bf598387f31b4b4c0383c4d4bef" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1687608000">- Add accountsservice-assume-gdm.patch: assume gdm when not being
  able to detect the used display manager. This is basically the
  same as was in place before we gained support for multiple DMs
  (boo#1212675).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1688558400">- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
  of accountsservice-sysconfig.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1691582400">- Rebase as-fate318433-prevent-same-account-multi-logins.patch:
  (bsc#1213884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707912000">- First part to fix build with GCC 14:
  + Inject patched mocklibc-1.0.tar.gz: only some header
    modifications to address implicit declaration of print_indent.
  + Add accountsservice-mocklib-gcc14.patch: patch meson'
    subproject definition to validate the injected tarball.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1709035200">- Rebase accountsservice-sysconfig.patch: to fix build with GCC 14
  (bsc#1219909).</changelog>
  <changelog author="dimstar@opensuse.org" date="1715083200">- Keep en and en_GB 'translations' in the main package: do not
  force -lang packages onto all users.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1718798400">- Update accountsservice-sysconfig.patch: work with SELinux policy
  (bsc#1222978).</changelog>
  <changelog author="mgorse@suse.com" date="1723464000">- Drop as-fate318433-prevent-same-account-multi-logins.patch.
  Gnome-shell now has similar functionality upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752494400">- Update accountsservice-sysconfig.patch: Check whether sysconfig
  is used and fallback to display manager settings if sysconfig is
  not used (bsc#1246127).</changelog>
</package>
<package pkgid="e27ae1dec9aefdcfb0407136eb309feb85865cf149da8366727dd6ef4d5e48f52edb1ead9d468faf8b4fa5d66f8bd9ad2a3fad288f7c7868f6ea385f442c2822" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="23.13.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1687608000">- Add accountsservice-assume-gdm.patch: assume gdm when not being
  able to detect the used display manager. This is basically the
  same as was in place before we gained support for multiple DMs
  (boo#1212675).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1688558400">- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
  of accountsservice-sysconfig.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1691582400">- Rebase as-fate318433-prevent-same-account-multi-logins.patch:
  (bsc#1213884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707912000">- First part to fix build with GCC 14:
  + Inject patched mocklibc-1.0.tar.gz: only some header
    modifications to address implicit declaration of print_indent.
  + Add accountsservice-mocklib-gcc14.patch: patch meson'
    subproject definition to validate the injected tarball.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1709035200">- Rebase accountsservice-sysconfig.patch: to fix build with GCC 14
  (bsc#1219909).</changelog>
  <changelog author="dimstar@opensuse.org" date="1715083200">- Keep en and en_GB 'translations' in the main package: do not
  force -lang packages onto all users.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1718798400">- Update accountsservice-sysconfig.patch: work with SELinux policy
  (bsc#1222978).</changelog>
  <changelog author="mgorse@suse.com" date="1723464000">- Drop as-fate318433-prevent-same-account-multi-logins.patch.
  Gnome-shell now has similar functionality upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752494400">- Update accountsservice-sysconfig.patch: Check whether sysconfig
  is used and fallback to display manager settings if sysconfig is
  not used (bsc#1246127).</changelog>
</package>
<package pkgid="a5acb7411b70d67f396279ef4f5b7184bc8ab3c4b49dfa080024092ca8e273193c52991e6a3f978ca5459f22b95695bf577e79c9703a151cf1ff5efbaf676a60" name="accountsservice-vala" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1687608000">- Add accountsservice-assume-gdm.patch: assume gdm when not being
  able to detect the used display manager. This is basically the
  same as was in place before we gained support for multiple DMs
  (boo#1212675).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1688558400">- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
  of accountsservice-sysconfig.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1691582400">- Rebase as-fate318433-prevent-same-account-multi-logins.patch:
  (bsc#1213884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1707912000">- First part to fix build with GCC 14:
  + Inject patched mocklibc-1.0.tar.gz: only some header
    modifications to address implicit declaration of print_indent.
  + Add accountsservice-mocklib-gcc14.patch: patch meson'
    subproject definition to validate the injected tarball.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1709035200">- Rebase accountsservice-sysconfig.patch: to fix build with GCC 14
  (bsc#1219909).</changelog>
  <changelog author="dimstar@opensuse.org" date="1715083200">- Keep en and en_GB 'translations' in the main package: do not
  force -lang packages onto all users.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1718798400">- Update accountsservice-sysconfig.patch: work with SELinux policy
  (bsc#1222978).</changelog>
  <changelog author="mgorse@suse.com" date="1723464000">- Drop as-fate318433-prevent-same-account-multi-logins.patch.
  Gnome-shell now has similar functionality upstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752494400">- Update accountsservice-sysconfig.patch: Check whether sysconfig
  is used and fallback to display manager settings if sysconfig is
  not used (bsc#1246127).</changelog>
</package>
<package pkgid="3ceb5105b115d634b97709628f0b625cd288ef40d916c386a008b9b245466b4a62a219f2fffbcbdc4be2d3f1846649dbcdd01f6dcd292f075eee0fbf9ee90c82" name="acct" arch="x86_64">
  <version epoch="0" ver="6.6.4" rel="bp160.1.13"/>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from info file
  acct-timestamp.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1468411200">- remove syslog.target from acct.service file [bsc#983938]</changelog>
  <changelog author="kstreitova@suse.com" date="1490788800">- cleanup with spec-cleaner
- get rid of %{name} and %{version} macros from the patch names</changelog>
  <changelog author="mpluskal@suse.com" date="1491480000">- Update to version 6.6.3:
  * Fixed manuals.
- Refresh patches:
  * acct-6.6.2-hz.patch
  * acct-info.patch
- Drop no longer needed:
  * acct-ac.patch
  * acct-timestamp.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1492084800">- remove acct-info.patch that is no longer needed (fixed upstream
  in version 6.6.3)
- note: acct-6.6.2-hz.patch was not accepted upstream as it might
  break support for the HP alpha platform</changelog>
  <changelog author="astieger@suse.com" date="1499688000">- update to 6.6.4:
  * Added --pid to 'lastcomm'.</changelog>
  <changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Reduce %systemd_requires to %systemd_ordering: %service_*
  can handle the absence.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627387200">- Added hardening to systemd service(s). Modified:
  * acct.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="18a355a8c0224ff141190887632ce960c520ea3702d4c4fc1c64e2e71de4dde07b767a662803586f42a024bc52e87eb242bd08f0f18297b1baf6be31c814209b" name="ack" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="bp160.1.12"/>
  <changelog author="Christopher Childress &lt;christopher.childress@dciinc.org&gt;" date="1566388800">- ack 3.0.3:
  * Made smartcase's check for lowercase patterns smarter.
  * Updated many URLs, especially in the config. (GH #223)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1566388801">- Rebase patches:
  * ack-add_spec.patch
  * ack-ignore-osc.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1569499200">- ack 3.1.1:
  * Improve the speed up the -l, -L and -c options
- includes changes from 3.1.0:
  * Added the --range-start and --range-end options to allow
    searching only ranges of</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1574510400">- ack 3.2.0:
  * Add "-t X" as a short alias for --type=X
  * Add "-T X" as a short alias for --type=noX
  * The feature of using the name of the type as an option is
    deprecated will be removed in a future release
  * Remove support for Parrot (--parrot)</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1579694400">- ack 3.3.1:
  * Fix some regexes that would be shown as invalid when used with
    the -Q option. Since the -Q tells ack to treat the regex as a
    literal, this shouldn't be possible (GH #294)
- includes changes from 3.3.0:
  * Improve error message when the regex passed is invalid
  * Add new file and directory exclusions
  * Reorganize --help menu
  * Output message when using --show-types without -f or -g if it
    will have no effect
  * Improve error message when ack gets passed two options that
    can't be used together
  * Fix the behavior of --break and --heading
  * Warn when option pairs don't make sense to use together
  * Fix required minimum version of Getopt::Long module (GH #287)
  * Line number and filename separators in --passthru mode now work
    the same as in context (-A/-B/-C) mode (GH #291)
- Rebase patches:
  * ack-add_spec.patch
  * ack-ignore-osc.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594036800">- ack 3.4.0:
  * tweaks to coloring in output
  * Add --toml for the TOML filetype</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1615982400">- Fix doc symlink issue
- ack 3.5.0:
  * Reworked the option parsing to run correctly with Getopt::Long
    2.38.
  * Added support for the Elm language. (GH#316)
  * Added support for the Purescript language. (GH#317)
  * Added support for the Bazel build tool. (GH#327)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663416000">- ack 3.6.0:
  * Add default ignores for Python's pickle serialization format
  * Add default ignore for Visual Studio's user &amp; workspace settings
  * Add support for the Crystal language
  * Add .sbt as a Scala extension</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677672000">- ack 3.7.0
  * Add a repeatable --not option to let user supply patterns that
    should NOT match
  * Add .Rmd to the list of extensions understood to be R
  * Add file type for for Powershell (.ps1 and .psm1 files)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="bd2a7f620799276761185262321ba0497acfd49227a66031a4a5e4f22570f2944f9a0fdcd44c19e4481c9c9e03829bf25107c4b8c50ab5f2d95fd392ac05d483" name="acl" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="160000.2.2"/>
  <changelog author="jeffm@suse.com" date="1539259200">- Update to v2.2.53.
- Removed patches:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0001-Use-OS-byteswapping-macros.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
  * acl-2.2.52-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1541678400">- libacl-devel used to require libattr-devel, but that is no longer
  the case, packages that relied on this indirect dependency to
  be present were fixed years ago.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Update boilerplate descriptions for libacl-devel.
- Remove out-of-date comments for libattr.
- Remove old BuildRoot and %defattr tags.
- Move library into the standard library directory.</changelog>
  <changelog author="dmueller@suse.com" date="1598961600">- update url</changelog>
  <changelog author="dimstar@opensuse.org" date="1611662400">- Replace system-user-{bin,daemon} with user({bin,daemon}): be
  resilient to package name changes.</changelog>
  <changelog author="rpm@fthiessen.de" date="1620820800">- Update to version 2.3.1
  * Update German translation
  * getfacl: fix indent in --help output
  * getfacl: Add --one-file-system option, with this option getfacl
    will not cross mount points
  * Fix segfault on allocation failure
  * Avoid SIGSEGV with link-time optimisation enabled
- Use SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- modernize spec-file (move license to licensedir)</changelog>
  <changelog author="mliska@suse.cz" date="1649419200">- Disable -D_FORTIFY_SOURCE=3 for now
  as explained here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104964</changelog>
  <changelog author="dimstar@opensuse.org" date="1707998400">- Update to version 2.3.2:
  + libobj: declare s_str directly in string_obj_tag.
  + Use thread-safe getpwnam_r and getgrnam_r.
  + setfacl: preserve the failed status when processing multiple
    files.
  + man: Document pitfall with negative permissions and user
    namespaces.
  + tools: mark long_options static &amp; const.</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- BuildRequire gettext-devel instead of gettext-tools-mini: let
  OBS sort out if the -mini package is the right one to be used or
  not.</changelog>
</package>
<package pkgid="400b4ea1b996a643e3de7a93a7c866ef02470e24a17d9896d2cf0ff8d0bbb605c04a453153ee0c57f6ee7c62fbe675ffa616b6a007836b4f8a36e9375381d0ac" name="acpica" arch="x86_64">
  <version epoch="0" ver="20240927" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1650456000">- update to 20220331:
  For the ASL Sleep() operator, issue a warning if the sleep value is
  greater than 10 Milliseconds. Quick boottime is important, so warn about
  sleeps greater than 10 ms. Distribution Linux kernels reach initrd in 350
  ms, so excessive delays should be called out. 10 ms is chosen randomly,
  but three of such delays would already make up ten percent of the
  boottime.
  Namespace: Avoid attempting to walk the Namespace if the Namespace does
  not exist.
  AML interpreter/iASL compiler: Add new Acpi 6.4 semantics for the
  LoadTable and Load operators. DDB_HANDLE is gone, now loadtable returns a
  pass/fail integer. Now load returns a pass/fail integer, as well as
  storing the return value in an optional 2nd argument.
  Headers: Use uintptr_t and offsetof() in Linux kernel builds. To avoid
  "performing pointer subtraction with a null pointer has undefined
  behavior" compiler warnings, use uintptr_t and offsetof() that are always
  available during Linux kernel builds to define ACPI_UINTPTR_T and the
  ACPI_TO_INTEGER() and ACPI_OFFSET() macros when building the ACPICA code
  in the Linux kernel.
  Added support for the Windows 11 _OSI string ("Windows 2021"). Submitted
  by superm1.
  executer/exsystem: Inform users about ACPI spec violation for the Stall()
  operator. Values greater than 100 microseconds violate the ACPI
  specification, so warn users about it. From the ACPI Specification
  version 6.2 Errata A, 19.6.128 *Stall (Stall for a Short Time)*:
  The implementation of Stall is OS-specific, but must not relinquish
  control of the processor. Because of this, delays longer than 100
  microseconds must use Sleep instead of Stall.
  Data Table Compiler/Disassembler: Add support for the APMT table - ARM
  Performance Monitoring Unit table. Submitted by @bwicaksononv.
  Data Table Compiler/Disassembler: For MADT, add support for the OEM-
  defined subtables (Types 0x80-0x7F).
  Data Table Compiler: Fixed a problem with support for the SDEV table,
  where a subtable Length was not computed correctly.
  Data Table Compiler/Disassembler: Add/fix the CFMWS subtable to the CEDT
  Acpi table support.
  Data Table Compiler/Disassembler: Fix a compile issue with the CEDT and
  add template. Submitted by MasterDrogo.
  Data Table Compiler/Disassembler: NHLT Changes provided by Piotr Maziarz:
  iASL/NHLT: Rename linux specific structures to DeviceInfo to improve
  readability of the code.
  iASL/NHLT: Fix parsing undocumented bytes at the end of Endpoint.
  Undocumented bytes at the end of Endpoint Descriptor can be present
  independently of Linux-specific structures. Their size can also vary.
  iASL/NHLT: Treat TableTerminator as SpecificConfig. SpecificConfig has 4
  bytes of size and then an amount of bytes specified by size. All of the
  terminators that I've seen had a size equal to 4, but theoretically it
  can vary.
  iASL/AcpiExec: Use _exit instead of exit in signal handers (ctrl-C).
  iASL: Remove a remark due to excessive output. Removed a remark for
  duplicate Offset() operators, due to a user complaint.</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update bundled wmidump to latest upstream 2021-10-11:
  * Add support for '//' comments
  * Print object_id or notify_id based on ACPI_WMI_EVENT flag
    object_id and notify_id member are in one union. It depends on
    ACPI_WMI_EVENT flag which member is stored in this union.
    So print only one member based on ACPI_WMI_EVENT flag.
- Add comment about origin of the wmidump sources</changelog>
  <changelog author="trenn@suse.de" date="1665748800">- This version includes CEDT table support as requested in feature
  (SLE 15 SP5):
  jsc#PED-201</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 20221020:
  * Added support for FFH (Fixed Function Hardware) Operation Region
    special context data.
  * Reverted commit "executer/exsystem: Warn about sleeps greater than 10 ms."
    Due to user complaints about valid sleeps greater than 10ms seen
    in some existing machines -- generating lots of warnings.
  * Do not touch VGA memory when EBDA &lt; 1KiB.
  * Check that EBDA pointer is in valid memory.
  * Completed the existing partial support for the CDAT "table".
  * Updated support for the IORT table - update to version E.e
  * Added CXL 3.0 structures (CXIMS &amp; RDPAS) to the CEDT table
  * iASL: Added CCEL table to both compiler/disassembler.
  * iASL: NHLT table: Fixed compilation of optional undocumented fields
  * iASL: Fix iASL compile error due to ACPI_TDEL_OFFSET.</changelog>
  <changelog author="rpm@fthiessen.de" date="1687348800">- Update to version 20230331
  * Add C Flexible Array support.
  * Add support for 64 bit LoongArch compilation.
  * Add first batch of RISC-V related definitions.
  * hwvalid: Drop port I/O validation.
  * iASL: Added full macro support in the preprocessor.
  * Add support for AMD Secure Processor Table (ASPT) version 1.
  * Add support for Arm's MPAM ACPI table version 2.
  * ACPI 6.5: MADT: add support for trace buffer extension in GICC.
  * Headers: Delete bogus NodeArray array of pointers from AEST table.</changelog>
  <changelog author="trenn@suse.de" date="1707739200">- Update to version 20230628
  * IASL/RHCT: Enable dumping and compiling newly added nodes
  * RHCT: Add flags, CMO and MMU nodes
  * MADT: Add dump and compile support for RISC-V APICs
  * MADT: Add RISC-V external interrupt controllers
  * Add AML_NO_OPERAND_RESOLVE flag to Timer
  * Add a define for size of acpi_srat_generic_affinity DeviceHandle
  * Slightly simplify an error message in acpi_ds_result_push()
  * Add port definitions for CDAT SSLBIS
  * Fix misspelled CDAT DSMAS define
  * Add interrupt command to acpiexec
  * Detect GED device and keep track of _EVT
  * ACPICA: Modify ACPI_STATE_COMMON
  * Manually revert after resolving conflicts PR #757 commit 32d875705c8ee8f99fd8b78dbed48633486a7640
  * fix for conflict macro definition on zephyr interface
  * Fix ACPI_FUNCTION_ENTRY()
  * Revert "Fixes for ACPI_FLEX_ARRAY, to eliminate warnings on MSVC"
  * Revert "Events: Use spaces instead of tabs to fix indentation"
  * Add support for _DSC as per ACPI 6.5
  * exserial.c: replace ternary operator with ACPI_MIN()
  * ACPICA: Modify ACPI_STATE_COMMON
  * Fix GCC 12 dangling-pointer warning
  * build: added module name for zephyr build system
  * Revert "Move ACPI_FUNCTION_ENTRY to function entry"
  * Move ACPI_FUNCTION_ENTRY to function entry
  * iASL/MADT: Add dump and compile support for LoongArch APICs
  * iasl: check Offset before Subtable dereference</changelog>
  <changelog author="trenn@suse.de" date="1711108800">- Use local source, there currently is no fixed tarball URL
- Use AslGbl_Deterministic by default FALSE to not compile in Date/Time
  into ACPI table compilings
- Update to version 20240321
  * Get rid of MSVC warnings that arise actually due to GCC's new dangling pointer warning and also tGCC's blindspot to work with nested named structs/unions resulting in breaking of ACPI event-handling
  * events/evgpeinit: don't forget to increment registered GPE count
  * events/evxfgpe: correctly clear GPE_AUTO_ENABLED in AcpiSetupGpeForWake
  * Fix Capabilities[1024] mess
  * Update actbl2.h to get rid of the MSVC error C2233
  * Fix CXL 3.0 structure (RDPAS) in the CEDT table
  * ACPICA: debugger: check status of AcpiEvaluateObject in AcpiDbWalkForFields
  * SRAT: Add dump and compiler support for RINTC affinity structure
  * SRAT: Add RISC-V RINTC affinity structure
  * Modify ACPI_OBJECT_COMMON_HEADER
  * Fix spelling and typos: Clean up the fix for Issue #900
  * Clean up the fix for Issue #900
  * tests/common: use CopyObject instead of Store for NRMT
  * acgcc: Fix C++ issue with ACPI_FLEX_ARRAY
  * MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling
  * MADT: Add GICC online capable bit handling
  * Fix various spelling mistakes in text files and code comments
  * acpisrc: Add identifiers for the NHLT table
  * NHLT: Reintroduce types the table consists of
  * AdDisassemblerHeader: omit timestamp for deterministic output
  * Fix build indeterminism for asm compiler header.
  * os_specific: zephyr: update AcpiOsGetTimer with arch specific timer
  * osal: zephyr: Fix write access for mapped memory
  * osal: zephyr: Fix AcpiOsPrintf implementation
  * Fix issue #896
  * Attempt 1 to fix issue #900
  * ACPI 6.5: RAS2: Add support for RAS2 table
  * Add port definitions for CDAT SSLBIS
  * dmtbdump2: remove redundant failure check on Status
  * dmtbdump: remove duplicated code for both paths of an if statement
  * NHLT: Drop preliminary support
  * Revert "NHLT: Declare device configuration types"
  * os_specific: zephyr: add generic platform support
  * Fix segfault when error-checking mixed table types
  * actbl1.h: Add EINJ CXL error types
  * Get rid of // style comments
  * NHLT: Declare device configuration types
  * dmtbinfo2.c: RISC-V: Remove redundant Flags print</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1725364800">- Update to version 20240827
  * Fix the PHAT table working: ensure that the PHAT firmware health
    record offset works correctly, fix various sub-table offsets,
    prevent segmentation faults when encountering invalid device paths.
  * Fix the optional table 4-byte signature.
  * Correct the dumping of SLIC and DBG2 tables.
  * Add support for QWordPCC and DWordPCC
  * Fix the integer to hex string conversions
  * Detecting FACS in reduced HW mode and allowing setting waking
    vector thereby waking up from S3 state
  * Fixing issues with crossing page boundaries when mapping operation regions
  * Update the support for IORT, HMAT, MPAM, AEST, CEDT, SPCR etc. tables
  * Fix multiple issues with table parsing, compilation and disassembly
  * Allow for more flexibility in _DSM usage.</changelog>
  <changelog author="bwiedemann@suse.com" date="1726833600">- Fix acpica-no-compiletime.patch to omit build date from xen .h files
  (boo#1230856, boo#1047218)</changelog>
  <changelog author="trenn@suse.de" date="1728907200">- Update to 20240927
  * Fix the acpixf.h file which caused issues for the last release
    (before this) 20240827
  * Fix the pointer offset for the SLIC table</changelog>
</package>
<package pkgid="2f342dbc46a4be67db1a739c29654ed6446f9d3bc8732d5ac8300730a50733df4435176dd2fe9700a9e61253ef935f529441ad47cd9a12d4b5552b2a7f795d02" name="acpid" arch="x86_64">
  <version epoch="0" ver="2.0.34" rel="bp160.1.1"/>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1551873600">- Update to version 2.0.31
  * Add events for keyboard illumination up/down
  * kacpimon: Bump connection limit to 100
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Reduce %systemd_requires to %systemd_ordering:
  %service_* can deal with its absence.
- Reduce boasting wording in description.</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1566388800">- Update to version 2.0.32
  * Remove filename argument from --nosocket option
  * Fix race during startup</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1609761600">- spec-cleaner run</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627387200">- Added hardening to systemd service(s). Modified:
  * acpid.service</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1629720000">- allow DeviceAllow=char-input to make character input work again
  (was blocked by ProtectClock=true check added)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 2.0.33:
  - Detect newer GNOME power manager.
  - openrc-shutdown: Set shutdown time to 'now'.
  - Attempt to open input layer devices whose permissions have changed.
  - Comments added.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668513600">- Update to version 2.0.34:
  - Add MSG_CMSG_CLOEXEC for systems that are missing it.
  - Fix a bug with input layer event table not working on 32-bit
    builds with 64-bit time types.
  - Use binary search to find input layer events in the table.
  - Use AC_PROG_CC instead of the obsolete AC_PROG_CC_STDC.
  - Add support for more input layer events.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1681041600">- do not ship thinkpad_handler script or config, it's broken since
  libexecdir changed and nobody noticed, most likely it's not doing
  anything on recent thinkpads, put it into the examples instead
- fix file timestamps to not change with every rebuild</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="88aebd2b7fae999e08aba26929350ecfb7dad0ed19a0107501da2f571321eb06ec8a3524b6af987db76112a9d47188f15d01cfd3ddaa49454bdf4033cb2886a1" name="act" arch="x86_64">
  <version epoch="0" ver="0.2.64" rel="bp160.1.15"/>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.31" date="1670673600">- Update to version 0.2.31:
  * fix: CI is unstable due to new linting rules (#1292)
  * help output: use consistent terminology between -j &amp; -l (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673601">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673602">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673603">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="ila.embsys@gmail.com" date="1709380800">- Update to version 0.2.60:
  * chore: bump VERSION to 0.2.60
  * build(deps): bump go.etcd.io/bbolt from 1.3.8 to 1.3.9 (#2229)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.26 to 1.6.27 (#2228)
  * fix: logo and demo asset urls (#2226)
  * feat: Test writing remote Actions locally (#2155)
  * build(deps): bump github.com/opencontainers/image-spec (#2223)
  * refactor: simpilfy go-git cache (#2208)
  * feat: offline mode for new action cache (#2173)
  * build(deps): bump github.com/opencontainers/image-spec (#2214)
  * build(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 (#2213)
  * fix: Rootless error concerning `/var/run/docker.sock` (#2181)
  * Shrink Readme (#2198)
  * chore: bump VERSION to 0.2.59
  * feat: correctly use the xdg library, which has the side effect to fix the config survey (#2195)
  * chore: bump VERSION to 0.2.58
  * build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.12 (#2187)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.12.5 (#2188)
  * build(deps): bump github.com/containerd/containerd from 1.6.19 to 1.6.26 (#2189)
  * build(deps): bump github.com/opencontainers/image-spec (#2167)
  * build(deps): bump github.com/moby/buildkit from 0.12.4 to 0.12.5 (#2186)
  * fix: use correct path to toolcache (#1494)
  * refactor: filecollector into new package (#2174)
  * build(deps): bump codecov/codecov-action from 3.1.4 to 3.1.5 (#2175)
  * fix: improve warning about remote not found (#2169)
  * fix: improve new-action-cache fetch failure error (#2172)
  * fix: subpath actions via new artifact cache (#2170)
  * fix: improve action not found error (#2171)
  * refactor(cmd/root): simplify `parseEnvs` (#2162)
  * Add containerd's normalized architectures to archMapper (#2168)
  * build(deps): bump megalinter/megalinter from 7.7.0 to 7.8.0 (#2164)
  * fix: write default config in XDG config dir to avoid cluttering the HOME directory by default (#2140)
  * WorkflowDispatchConfig supports multiple yaml node kinds (#2123)
  * fix: match cache `restore-keys` in creation reverse order (#2153)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#2133)
  * feat: support offline mode (#2128)
  * feat: cli option to enable the new action cache (#1954)
  * ci: automatic merge PRs created by a maintainer and approved by 1 other maintainer (#2156)
  * Add support for NetBSD (#2023)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#2149)
  * build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 (#2148)
  * chore: bump VERSION to 0.2.57
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#2134)
  * build(deps): bump github.com/containerd/containerd from 1.7.2 to 1.7.11 (#2136)
  * chore: bump VERSION to 0.2.56
  * build(deps): bump actions/stale from 8 to 9 (#2120)
  * feat: support config env expansion (#2063)
  * build(deps): bump actions/checkout from 3 to 4 (#1998)
  * build(deps): bump github.com/creack/pty from 1.1.20 to 1.1.21 (#2099)
  * Fix noisy `runs-on` error logging (#2102)
  * fix: IsHost is defined as false on windows (#2093)
  * build(deps): bump actions/setup-go from 4 to 5 (#2118)
  * build(deps): bump megalinter/megalinter from 7.6.0 to 7.7.0 (#2119)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 (#2117)
  * build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 (#2112)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 (#2114)
  * build(deps): bump github.com/moby/buildkit from 0.12.3 to 0.12.4 (#2113)
  * chore: bump VERSION to 0.2.55
  * build(deps): bump megalinter/megalinter from 7.5.0 to 7.6.0 (#2098)
  * build(deps): bump actions/github-script from 6 to 7 (#2097)
  * chore: bump VERSION to 0.2.54
  * build(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 (#2091)
  * Evaluate if condition when calling a reusable workflow (#2087)
  * feat: support runs-on labels and group (#2062)
  * Evaluate all service values (#2054)
  * fix: (#2075)
  * Don't set GITHUB_TOKEN (#2089)
  * Support array expressions in runs-on (#2088)
  * Use unique name for reusable workflow (#2015)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#2079)
  * fix: panic (#2071)
  * chore: bump VERSION to 0.2.53
  * build(deps): bump github.com/docker/docker (#2067)
  * build(deps): bump github.com/creack/pty from 1.1.18 to 1.1.20 (#2068)
  * build(deps): bump megalinter/megalinter from 7.4.0 to 7.5.0 (#2070)
  * build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8 (#2065)
  * build(deps): bump github.com/docker/cli (#2069)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (#2066)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20 (#2059)
  * build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 (#2060)
  * Add support for service containers (#1949)
  * Fix float formatting (#2018)
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#2045)
  * build(deps): bump github.com/docker/distribution (#2037)
  * build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0 (#2036)
  * fix action_ref (composite action) (#2020)
  * fix: use actions/runner hashfiles in container (#1940)
  * Fix image survey for large images (#2022)
  * [ Variables ] - Add missing documentation for repository variables (#2032)
  * chore: bump VERSION to 0.2.52
  * build(deps): bump github.com/rhysd/actionlint from 1.6.25 to 1.6.26 (#2026)
  * build(deps): bump megalinter/megalinter from 7.3.0 to 7.4.0 (#2025)
  * chore: bump VERSION to 0.2.51
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 (#2011)
  * build(deps): bump github.com/opencontainers/image-spec (#2010)
  * build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 (#2009)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0 (#2012)
  * build(deps): bump docker/setup-qemu-action from 2 to 3 (#2007)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#2008)
  * feat: support node20 runtime (#1988)
  * feat: support interpolation in `&lt;job&gt;.container.options` (#1958)
  * build(deps): bump github.com/docker/docker (#2000)
  * build(deps): bump github.com/docker/cli (#1999)
  * build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#1992)
  * chore: bump VERSION to 0.2.50
  * build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 (#1986)
  * build(deps): bump github.com/moby/patternmatcher from 0.5.0 to 0.6.0 (#1985)
  * fix: fail if no stages were found (#1970)
  * build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 (#1978)
  * Mention act user guide in act (#1973)
  * build(deps): bump megalinter/megalinter from 7.2.1 to 7.3.0 (#1965)
  * ci: change winget job runner to `ubuntu-latest` (#1959)
  * change podman socket path (#1961)
  * Fix "Unknown server OS" for Docker container `--device` option (#1957)
  * refactor: remove unnecessary nil check in RunContext (#1955)
  * feat: Add new Action Cache (#1913)
  * feat: cmd support for windows (#1941)
  * feat: Add CopyTarStream to Container Interface (#1912)
  * refactor: docker build BuildContext field (#1914)
  * Shorten or/and in expressions (#1939)
  * prefer pwsh on windows if found (#1942)
  * build(deps): bump megalinter/megalinter from 7.1.0 to 7.2.1 (#1931)
  * build(deps): bump golang.org/x/term from 0.10.0 to 0.11.0 (#1948)
  * build(deps): bump github.com/moby/buildkit from 0.12.0 to 0.12.1 (#1947)
  * chore: bump VERSION to 0.2.49
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 (#1934)
  * build(deps): bump github.com/docker/cli (#1932)
  * build(deps): bump github.com/docker/docker (#1933)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 (#1925)
  * local runner doc (#1911)
  * Add new CLI flag to log just the job id and not the entire job name (#1920)
  * build(deps): bump github.com/moby/buildkit from 0.11.6 to 0.12.0 (#1917)
  * build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 (#1906)
  * Bump dockercli (#1905)
  * throw when invalid `uses` key is provided (#1804)
  * fix: handle zero size (#1888)
  * chore: upgrade golangci-lint and address findings (#1904)
  * build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#1868)
  * build(deps): bump gotest.tools/v3 from 3.4.0 to 3.5.0 (#1892)
  * Normalize path outputs emitted by the artifact server download endpoint (#1898)
  * chore: bump VERSION to 0.2.48
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1884)
  * build(deps): bump github.com/opencontainers/image-spec (#1893)
  * Remove `archives.replacements` in `goreleaser.yaml` (#1895)
  * refactor: open boltdb only while using it (#1879)
  * chore: bump VERSION to 0.2.47
  * Allow inputs for workflow_calls (#1845)
  * build(deps): bump github.com/opencontainers/image-spec (#1883)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1882)
  * build(deps): bump github.com/opencontainers/image-spec (#1881)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1880)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.24 to 1.6.25 (#1870)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.6 to 2.3.7 (#1872)
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 (#1869)
  * build(deps): bump github.com/opencontainers/image-spec (#1871)
  * Allow to override location of action cache dir (#1863)
  * Drop disappeared `wei/curl@v1` (#1864)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1858)
  * build(deps): bump megalinter/megalinter from 7.0.4 to 7.1.0 (#1857)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.18 to 0.0.19 (#1859)
  * fix: spelling mistake in readme (#1854)
  * feature: Add support for github action variables (#1833)
  * Fix bug in processing jobs on platforms without Docker (#1834)
  * build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 (#1842)
  * build(deps): bump megalinter/megalinter from 7.0.2 to 7.0.4 (#1838)
  * build(deps): bump github.com/docker/cli (#1843)
  * build(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 (#1840)
  * build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#1841)
  * build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#1839)
  * chore: bump VERSION to 0.2.46
  * build(deps): bump github.com/opencontainers/image-spec (#1829)
  * build(deps): bump github.com/docker/cli (#1816)
  * add instruction for using `gh auth token` (#1831)
  * build(deps): bump github.com/go-git/go-git/v5 (#1830)
  * build(deps): bump megalinter/megalinter from 6.22.2 to 7.0.2 (#1827)
  * fix: Update ARCH environment variable used in runners/actions (#1818)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1817)
  * build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#1814)
  * build(deps): bump codecov/codecov-action from 3.1.3 to 3.1.4 (#1813)
  * build(deps): bump github.com/opencontainers/image-spec (#1807)
  * build(deps): bump github.com/docker/docker (#1806)
  * build(deps): bump github.com/docker/cli (#1805)
  * build(deps): bump github.com/docker/distribution (#1801)
  * build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#1800)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1791)
  * Replace backslash in GetActPath() for Windows (#1777)
  * feat: implement steps.timeout-minutes (#1776)
  * fix: don't allow `-self-hosted` mode as container image (#1783)
  * Refactor evaluate yaml node do not alter nested nodes (#1761)
  * fix: fallback to unauthenticated pull (#1774)
  * fix: remove hardcoded reference to github.com when using reusable remote workflows and remote actions (#1784)
  * build(deps): bump github.com/docker/cli (#1780)
  * build(deps): bump github.com/opencontainers/image-spec (#1781)
  * build(deps): bump github.com/docker/docker (#1779)</changelog>
  <changelog author="kskarthik@disroot.org" date="1715256000">- Update to version 0.2.62:
  * chore: bump VERSION to 0.2.62
  * build(deps): bump megalinter/megalinter from 7.10.0 to 7.11.1 (#2309)
  * build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 (#2310)
  * build(deps): bump github.com/docker/cli (#2307)
  * build(deps): bump github.com/docker/docker (#2306)
  * build(deps): bump github.com/moby/buildkit from 0.13.1 to 0.13.2 (#2308)
  * build(deps): bump github.com/docker/cli (#2302)
  * Add codespell support (config, workflow to detect/not fix) and make it fix few typos (#2296)
  * build(deps): bump github.com/docker/docker (#2299)
  * build(deps): bump github.com/docker/docker (#2295)
  * build(deps): bump megalinter/megalinter from 7.9.0 to 7.10.0 (#2294)
  * build(deps): bump megalinter/megalinter from 7.8.0 to 7.9.0 (#2216)
  * build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (#2215)
  * build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 (#2278)
  * build(deps): bump github.com/docker/cli (#2291)
  * Update action.yml (#2293)
  * build(deps): bump github.com/moby/buildkit from 0.12.5 to 0.13.1 (#2253)
  * Bump docker to v26 (#2289)
  * fix: skipped jobs have no result (#2276)
  * fix: favor command-line over files (#2274)
  * chore: fix some comments (#2279)
  * build(deps): bump actions/cache from 3 to 4 (#2163)
  * Remove local action cache if remote has changed (#2284)
  * chore: fix codecov (#2288)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 (#2269)
  * chore: bump VERSION to 0.2.61
  * fix: cache adjust restore order of exact key matches (#2267)
  * Trivial: reduce log spam. (#2256)
  * chore: remove repetitive words (#2259)
  * Support overwriting caches (#2265)
  * test: use ping to improve network test (#2266)
  * build(deps): bump github.com/docker/docker (#2252)
  * build(deps): bump golang.org/x/term from 0.17.0 to 0.18.0 (#2244)
  * fix: rootless permission bits (new actions cache) (#2242)
  * fix function name in comment (#2240)
  * fix: docker buildx cache restore not working (#2236)
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#2235)</changelog>
  <changelog author="kskarthik@disroot.org" date="1717329600">- Update to version 0.2.63:
  * chore: bump VERSION to 0.2.63
  * Meta-copy-symlinks-new-actions-cache (#2337)
  * build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 (#2340)
  * build(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 (#2341)
  * Actions Artifacts v4 backend (#2224)
  * build(deps): bump github.com/docker/docker (#2333)
  * build(deps): bump github.com/docker/cli (#2332)
  * Add documentation for `dryrun` parameter (#2311)
  * Fix for issue 2232: Many lines of "Could not find any stages to run" on run (#2272)
  * build(deps): bump github.com/docker/cli (#2325)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.27 to 1.7.0 (#2326)
  * build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10 (#2327)
  * build(deps): bump github.com/docker/docker (#2324)
  * build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#2323)
  * build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 (#2319)
  * build(deps): bump github.com/docker/cli (#2318)
  * build(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 (#2316)
  * build(deps): bump github.com/docker/docker (#2317)</changelog>
  <changelog author="kskarthik@disroot.org" date="1719921600">- Update to version 0.2.64:
  * chore: bump VERSION to 0.2.64
  * build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#2366)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#2365)
  * build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 (#2360)
  * build(deps): bump github.com/docker/cli (#2358)
  * fix: skip service container for empty image (#2281)
  * fix: composite action input pollution (#2348)
  * fix: update reusable workflow input handling (#2349)
  * Add riscv64 binary release (#2350)
  * build(deps): bump github.com/rhysd/actionlint from 1.7.0 to 1.7.1 (#2346)</changelog>
</package>
<package pkgid="7ae458c2bdf13b5434f31ab883c9237f5fac88a4adca048ce3d8ee58cf1e946794ea1fb19b820a7572ca6c20775e00e6fcfbe2de7af0f3c34cd6cfa899129ece" name="act" arch="x86_64">
  <version epoch="0" ver="0.2.64" rel="bp160.2.1"/>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.32" date="1670673600">- Update to version 0.2.32:
  * feat: pass current matrix information to job logger (#1364)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.33" date="1670673601">- Update to version 0.2.33:
  * fix: ci is failing since 2022-10-17 (#1397)
  * fix: re-evaluate env for remote composite actions (#1385)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping workflow_dispatch inputs into the Expression inputs context (#1363)
  * test: add test for networking setup in act (#1375)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * Fix composite input handling (#1345)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1670673602">- Update to version 0.2.34:
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * feat: parse types of reusable workflows (#1414)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * fix: keep path to event json file in composite actions (#1428)
  * fix: nil pointer access ( workflow_dispatch )
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * Remove dead code (#1425)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt; - 0.2.34" date="1673438400">- Spec file:
  Fix bsc#1207021 to report the correct version when calling "act --version"
  Wrong version is fixed with sed in act-0.2.34/main.go
  Reported upstream as GH://nektos/act#1555</changelog>
  <changelog author="sebix@sebix.at" date="1683720000">- Update to version 0.2.45:
  * chore: bump VERSION to 0.2.45
  * Support cache (#1770)
  * chore: run act from cli on linux (#1758)
  * Revert breaking docker socket changes (#1763)
  * avoid using log.Fatal (#1759)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1755)
  * build(deps): bump github.com/docker/docker (#1754)
  * build(deps): bump github.com/docker/cli (#1753)
  * build(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#1752)
  * ci: deduplicate running workflows (#1751)
  * fix: try finding a socket, otherwise fail, respect user choice (#1745)
  * Improve watchAndRun (#1743)
  * Remove the comment-out code. (#1691)
  * typo: fix expression of warning message on macOS (#1693)
  * fix: environment handling windows (host mode) (#1732)
  * fix: ensure networkmode "host" unless explicitly specified (#1739)
  * Avoid using `log.Fatal` in `pkg/*` (#1705)
  * feat: support yaml env/secrets/inputs file (#1733)
  * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1735)
  * fix: ghc assignment typo (#1729)
  * fix: reusable workflow panic (#1728)
  * fix: add `server_url` attribute to github context (#1727)
  * build(deps): update go-git to ce62f3e9ff86270538a514a68d3bd5563a733e3b (#1725)
  * build(deps): bump github.com/docker/docker (#1719)
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1724)
  * build(deps): bump github.com/docker/cli (#1722)
  * build(deps): bump megalinter/megalinter from 6.22.1 to 6.22.2 (#1720)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.23 to 1.6.24 (#1721)
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1723)
  * build(deps): bump github.com/docker/cli (#1712)
  * build(deps): bump github.com/docker/docker (#1711)
  * build(deps): bump megalinter/megalinter from 6.21.0 to 6.22.1 (#1710)
  * chore: bump VERSION to 0.2.44
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#1708)
  * feat: improve GetOutboundIP (#1707)
  * fix: use os.UserHomeDir (#1706)
  * Make sure working directory is respected when configured from matrix (#1686)
  * build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#1703)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 (#1702)
  * build(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#1701)
  * build(deps): bump actions/stale from 7 to 8 (#1700)
  * build(deps): bump megalinter/megalinter from 6.20.1 to 6.21.0 (#1699)
  * full path required for extension install (#1670)
  * build(deps): bump actions/setup-go from 3 to 4 (#1689)
  * build(deps): bump github.com/imdario/mergo from 0.3.13 to 0.3.14 (#1688)
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#1650)
  * build(deps): bump megalinter/megalinter from 6.20.0 to 6.20.1 (#1679)
  * build(deps): bump fregante/setup-git-user from 1 to 2 (#1664)
  * Add example command for collecting artifacts (#1671)
  * feat: specify matrix on command line (#1675)
  * Support for docker steps in host environment (#1674)
  * fix: correct ref and ref_name (#1672)
  * fix: return err in walk (#1667)
  * test: Enshure ForcePull config doesn't break docker actions (1661)
  * fix: crash if the id tool fails to run in the container (1660)
  * build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4 (#1669)
  * build(deps): bump megalinter/megalinter from 6.19.0 to 6.20.0 (#1665)
  * build(deps): bump golang.org/x/term from 0.5.0 to 0.6.0 (#1666)
  * Improve XDG Spec supporting (#1656)
  * fix: safe file name (#1651)
  * fix: compare properties of Invalid types (#1645)
  * chore: bump VERSION to 0.2.43
  * fix: github.job property is empty, GITHUB_JOB should be job id (#1646)
  * build(deps): bump github.com/opencontainers/image-spec (#1649)
  * fix: update output handling for reusable workflows (#1521)
  * fix: crash malformed composite action (#1616)
  * docs: remove help section (#1648)
  * feat: workflowpattern package (#1618)
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 (#1637)
  * fix: add GITHUB_STEP_SUMMARY (#1607)
  * build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 (#1636)
  * build(deps): bump github.com/moby/buildkit from 0.11.2 to 0.11.3 (#1635)
  * fix: tolerate workflow that needs a missing job (#1595) (#1619)
  * chore: Remove obsolete Container.UpdateFromPath (#1631)
  * chore: use new style octal (#1630)
  * fix: don't override env (#1629)
  * ci: add Winget Releaser workflow (#1623)
  * build(deps): bump github.com/opencontainers/selinux (#1625)
  * build(deps): bump github.com/docker/docker (#1624)
  * build(deps): bump github.com/docker/cli (#1626)
  * chore: add Winget installation instructions (#1622)
  * Pass dockerfile to build executor (#1606)
  * build(deps): bump github.com/docker/cli from 23.0.0-rc.1+incompatible to 23.0.0+incompatible (#1611)
  * build(deps): bump github.com/docker/docker (#1613)
  * build(deps): bump megalinter/megalinter from 6.18.0 to 6.19.0 (#1610)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.0 to 5.4.1 (#1612)
  * build(deps): bump github.com/joho/godotenv from 1.4.0 to 1.5.1 (#1614)
  * refactor: GITHUB_ENV command / remove env.PATH (#1503)
  * Update max container name length (#1597)
  * feat: allow overriding of `GITHUB_` env variables (#1582)
  * Docker build fixes (#1596)
  * fix: Apply forcePull only for prebuild docker actions (#1599)
  * chore: bump VERSION to 0.2.42
  * feat: cache notices to reduce frequency of upgrade notifications (#1592)
  * chore: fix release script to trigger gh-act
  * chore: bump VERSION to 0.2.41
  * build(deps): bump github.com/moby/buildkit from 0.11.1 to 0.11.2 (#1589)
  * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1590)
  * cI: make stalebot less annoying (#1587)
  * test: Do not leak step env in composite (#1585)
  * feat: step summary of test results (#1580)
  * build(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.1 (#1576)
  * build(deps): bump golang.org/x/term from 0.3.0 to 0.4.0 (#1577)
  * build(deps): bump github.com/docker/docker (#1573)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.22 to 1.6.23 (#1574)
  * build(deps): bump actions/github-script from 5 to 6 (#1572)
  * chore: update docs for installing act as GH CLI extension
  * feat: release extension
  * feat: release extension
  * feat: release extension
  * refactor: pull and rebuild docker by default (#1569)
  * feat: add remote reusable workflows (#1525)
  * Fixed auto-generated platform configuration with Micro size image (#1566)
  * Feature/allow worktrees (#1530)
  * chore: bump VERSION to 0.2.40
  * fix: update artifact server to address GHSL-2023-004 (#1565)
  * chore: bump VERSION to 0.2.39
  * chore: fix promote script
  * chore: bump version
  * chore: makefile update
  * chore: bump version
  * build(deps): bump github.com/moby/buildkit from 0.10.6 to 0.11.0 (#1563)
  * chore: push new version
  * Readme: Fix shell installation (#1547)
  * fix: allow override of artifact server bind address (#1560)
  * feat: add check for newer versions (#1562)
  * Input (#1524)
  * refactor: remove docker image list reference filter (#1501)
  * fix: add-matcher fails github workflow (#1532)
  * feat: add support for building docker actions with private registries (#1557)
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#1554)
  * feat: Allow building without docker support (#1507)
  * fix: extra path lost in composite actions (#1531)
  * test: make sure workflow_call is not a github event calling our workflow (#1520)
  * fix: preserve job result state in case of failure (#1519)
  * build(deps): bump megalinter/megalinter from 6.17.0 to 6.18.0 (#1550)
  * build(deps): bump megalinter/megalinter from 6.16.0 to 6.17.0 (#1540)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#1539)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.4.0 (#1541)
  * build(deps): bump megalinter/megalinter from 6.15.0 to 6.16.0 (#1534)
  * build(deps): bump actions/stale from 6 to 7 (#1535)
  * revert: deprecation of containerArchitecture (#1514)
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4 (#1515)
  * build(deps): bump github.com/docker/cli (#1516)
  * build(deps): bump github.com/docker/docker (#1517)
  * fix: align runner.os / runner.arch to known values (#1510)
  * feat: Support "result" on "needs" context. (#1497)
  * fix: tail (not absolute) as entrypoint of job container (#1506)
  * refactor: fix savestate in pre steps (#1466)
  * feat: allow to spawn and run a local reusable workflow (#1423)
  * refactor: fix add-path / GITHUB_PATH commands (#1472)
  * feat: JobLoggerFactory (#1496)
  * fix: handle env-vars case sensitive (#1493)
  * fix: step env is unavailable in with property expr (#1458)
  * refactor: share UpdateFromEnv logic (#1457)
  * feat: `--container-options` (#1462)
  * refactor: move autoremove into the jobexecutor (#1463)
  * docs: clarifying skipping steps / jobs (#1480)
  * Pass `LANG=C.UTF-8` to environment (#1476)
  * build(deps): bump megalinter/megalinter from 6.14.0 to 6.15.0 (#1475)
  * act -j -W example (#1471)
  * Fix shellcommand error on sh shell (#1464)
  * fix typo (#1456)
  * build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 (#1447)
  * fix: handle subdirectors and exclusions (#1012) (#1446)
  * Remove dead code (#1425)
  * feat: interpolate the step names (#1422)
  * feat: GITHUB_STATE and GITHUB_OUTPUT file commands (#1391)
  * feat: Host environment (#1293)
  * build(deps): bump github.com/moby/buildkit from 0.10.5 to 0.10.6 (#1437)
  * fix: keep path to event json file in composite actions (#1428)
  * build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#1436)
  * fix: nil pointer access ( workflow_dispatch )
  * Update number of approvers required from 3 to 2
  * build(deps): bump megalinter/megalinter from 6.13.0 to 6.14.0 (#1426)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.21 to 1.6.22 (#1427)
  * feat: parse types of reusable workflows (#1414)
  * build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1420)
  * build(deps): bump github.com/docker/docker (#1418)
  * build(deps): bump github.com/docker/cli (#1419)
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1404)
  * refactor: move from io/ioutil to io and os packages (#1417)
  * Add user level Docker socket to common paths (#1416)
  * build(deps): bump megalinter/megalinter from 6.12.0 to 6.13.0 (#1407)
  * build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#1408)
  * build(deps): bump github.com/docker/docker (#1403)
  * build(deps): bump github.com/docker/cli (#1405)
  * build(deps): bump github.com/moby/buildkit from 0.10.4 to 0.10.5 (#1406)
  * Fixes #1387 (#1388)
  * build(deps): bump megalinter/megalinter from 6.11.1 to 6.12.0 (#1395)
  * build(deps): bump github.com/docker/cli (#1393)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#1394)
  * build(deps): bump github.com/docker/docker (#1392)
  * Mapping `workflow_dispatch` inputs into the Expression `inputs` context (#1363)
  * fix: ci is failing since 2022-10-17 (#1397)
  * test: add test for networking setup in act (#1375)
  * fix: re-evaluate env for remote composite actions (#1385)
  * build(deps): bump megalinter/megalinter from 6.11.0 to 6.11.1 (#1381)
  * build(deps): bump gotest.tools/v3 from 3.0.3 to 3.4.0 (#1379)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.20 to 1.6.21 (#1380)
  * build(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#1378)
  * fix: interpolate action input defaults (#1376)
  * fix: support docker create arguments from container.options (#1022) (#1351)
  * Fix composite input handling (#1345)
  * fix: handle go closure iteration (#1374)
  * build(deps): bump megalinter/megalinter from 5 to 6.11.0 (#1370)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.19 to 1.6.20 (#1371)
  * build(deps): bump github.com/opencontainers/selinux (#1372)
  * fix: show workflow info even if on.push is not defined (#1329) (#1335)
  * fix: restore the job logger setup after job cancelation (#1365)
  * feat: pass current matrix information to job logger (#1364)
  * fix: align github.ref to GitHub Action (#1362)
  * fix: crash on invalid docker credentials (#1348)
  * fix: missing defaults in nodejs pre (#1349)
  * build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#1359)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.18 to 1.6.19 (#1360)
  * build(deps): bump actions/stale from 5 to 6 (#1357)
  * Arch best practice is to not run partial upgrades (#1355)
  * Improve hint for inserting secrets securely (#1354)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.17 to 1.6.18 (#1352)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.5 to 2.3.6 (#1341)
  * build(deps): bump github.com/docker/cli (#1340)
  * build(deps): bump github.com/docker/docker (#1339)
  * fix: support expression for step's continue-on-error field (#900) (#1331)
  * fix: show workflow name when get error on yml parsing (#1133) (#1328)
  * help output: use consistent terminology between `-j` &amp; `-l` (#1326)
  * support runner.arch (#1290)
  * build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.10.4 (#1322)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.16 to 1.6.17 (#1321)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 (#1312)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 (#1311)
  * build(deps): bump github.com/go-ini/ini from 1.66.6 to 1.67.0 (#1305)
  * refactor: ignore already closed error (#1285)
  * fix: CI is unstable due to new linting rules (#1292)</changelog>
  <changelog author="ila.embsys@gmail.com" date="1709380800">- Update to version 0.2.60:
  * chore: bump VERSION to 0.2.60
  * build(deps): bump go.etcd.io/bbolt from 1.3.8 to 1.3.9 (#2229)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.26 to 1.6.27 (#2228)
  * fix: logo and demo asset urls (#2226)
  * feat: Test writing remote Actions locally (#2155)
  * build(deps): bump github.com/opencontainers/image-spec (#2223)
  * refactor: simpilfy go-git cache (#2208)
  * feat: offline mode for new action cache (#2173)
  * build(deps): bump github.com/opencontainers/image-spec (#2214)
  * build(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 (#2213)
  * fix: Rootless error concerning `/var/run/docker.sock` (#2181)
  * Shrink Readme (#2198)
  * chore: bump VERSION to 0.2.59
  * feat: correctly use the xdg library, which has the side effect to fix the config survey (#2195)
  * chore: bump VERSION to 0.2.58
  * build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.12 (#2187)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.12.5 (#2188)
  * build(deps): bump github.com/containerd/containerd from 1.6.19 to 1.6.26 (#2189)
  * build(deps): bump github.com/opencontainers/image-spec (#2167)
  * build(deps): bump github.com/moby/buildkit from 0.12.4 to 0.12.5 (#2186)
  * fix: use correct path to toolcache (#1494)
  * refactor: filecollector into new package (#2174)
  * build(deps): bump codecov/codecov-action from 3.1.4 to 3.1.5 (#2175)
  * fix: improve warning about remote not found (#2169)
  * fix: improve new-action-cache fetch failure error (#2172)
  * fix: subpath actions via new artifact cache (#2170)
  * fix: improve action not found error (#2171)
  * refactor(cmd/root): simplify `parseEnvs` (#2162)
  * Add containerd's normalized architectures to archMapper (#2168)
  * build(deps): bump megalinter/megalinter from 7.7.0 to 7.8.0 (#2164)
  * fix: write default config in XDG config dir to avoid cluttering the HOME directory by default (#2140)
  * WorkflowDispatchConfig supports multiple yaml node kinds (#2123)
  * fix: match cache `restore-keys` in creation reverse order (#2153)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#2133)
  * feat: support offline mode (#2128)
  * feat: cli option to enable the new action cache (#1954)
  * ci: automatic merge PRs created by a maintainer and approved by 1 other maintainer (#2156)
  * Add support for NetBSD (#2023)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#2149)
  * build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 (#2148)
  * chore: bump VERSION to 0.2.57
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#2134)
  * build(deps): bump github.com/containerd/containerd from 1.7.2 to 1.7.11 (#2136)
  * chore: bump VERSION to 0.2.56
  * build(deps): bump actions/stale from 8 to 9 (#2120)
  * feat: support config env expansion (#2063)
  * build(deps): bump actions/checkout from 3 to 4 (#1998)
  * build(deps): bump github.com/creack/pty from 1.1.20 to 1.1.21 (#2099)
  * Fix noisy `runs-on` error logging (#2102)
  * fix: IsHost is defined as false on windows (#2093)
  * build(deps): bump actions/setup-go from 4 to 5 (#2118)
  * build(deps): bump megalinter/megalinter from 7.6.0 to 7.7.0 (#2119)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 (#2117)
  * build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 (#2112)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 (#2114)
  * build(deps): bump github.com/moby/buildkit from 0.12.3 to 0.12.4 (#2113)
  * chore: bump VERSION to 0.2.55
  * build(deps): bump megalinter/megalinter from 7.5.0 to 7.6.0 (#2098)
  * build(deps): bump actions/github-script from 6 to 7 (#2097)
  * chore: bump VERSION to 0.2.54
  * build(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 (#2091)
  * Evaluate if condition when calling a reusable workflow (#2087)
  * feat: support runs-on labels and group (#2062)
  * Evaluate all service values (#2054)
  * fix: (#2075)
  * Don't set GITHUB_TOKEN (#2089)
  * Support array expressions in runs-on (#2088)
  * Use unique name for reusable workflow (#2015)
  * build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#2079)
  * fix: panic (#2071)
  * chore: bump VERSION to 0.2.53
  * build(deps): bump github.com/docker/docker (#2067)
  * build(deps): bump github.com/creack/pty from 1.1.18 to 1.1.20 (#2068)
  * build(deps): bump megalinter/megalinter from 7.4.0 to 7.5.0 (#2070)
  * build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8 (#2065)
  * build(deps): bump github.com/docker/cli (#2069)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (#2066)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20 (#2059)
  * build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 (#2060)
  * Add support for service containers (#1949)
  * Fix float formatting (#2018)
  * build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#2045)
  * build(deps): bump github.com/docker/distribution (#2037)
  * build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0 (#2036)
  * fix action_ref (composite action) (#2020)
  * fix: use actions/runner hashfiles in container (#1940)
  * Fix image survey for large images (#2022)
  * [ Variables ] - Add missing documentation for repository variables (#2032)
  * chore: bump VERSION to 0.2.52
  * build(deps): bump github.com/rhysd/actionlint from 1.6.25 to 1.6.26 (#2026)
  * build(deps): bump megalinter/megalinter from 7.3.0 to 7.4.0 (#2025)
  * chore: bump VERSION to 0.2.51
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 (#2011)
  * build(deps): bump github.com/opencontainers/image-spec (#2010)
  * build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 (#2009)
  * build(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0 (#2012)
  * build(deps): bump docker/setup-qemu-action from 2 to 3 (#2007)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#2008)
  * feat: support node20 runtime (#1988)
  * feat: support interpolation in `&lt;job&gt;.container.options` (#1958)
  * build(deps): bump github.com/docker/docker (#2000)
  * build(deps): bump github.com/docker/cli (#1999)
  * build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#1992)
  * chore: bump VERSION to 0.2.50
  * build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 (#1986)
  * build(deps): bump github.com/moby/patternmatcher from 0.5.0 to 0.6.0 (#1985)
  * fix: fail if no stages were found (#1970)
  * build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 (#1978)
  * Mention act user guide in act (#1973)
  * build(deps): bump megalinter/megalinter from 7.2.1 to 7.3.0 (#1965)
  * ci: change winget job runner to `ubuntu-latest` (#1959)
  * change podman socket path (#1961)
  * Fix "Unknown server OS" for Docker container `--device` option (#1957)
  * refactor: remove unnecessary nil check in RunContext (#1955)
  * feat: Add new Action Cache (#1913)
  * feat: cmd support for windows (#1941)
  * feat: Add CopyTarStream to Container Interface (#1912)
  * refactor: docker build BuildContext field (#1914)
  * Shorten or/and in expressions (#1939)
  * prefer pwsh on windows if found (#1942)
  * build(deps): bump megalinter/megalinter from 7.1.0 to 7.2.1 (#1931)
  * build(deps): bump golang.org/x/term from 0.10.0 to 0.11.0 (#1948)
  * build(deps): bump github.com/moby/buildkit from 0.12.0 to 0.12.1 (#1947)
  * chore: bump VERSION to 0.2.49
  * build(deps): bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 (#1934)
  * build(deps): bump github.com/docker/cli (#1932)
  * build(deps): bump github.com/docker/docker (#1933)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 (#1925)
  * local runner doc (#1911)
  * Add new CLI flag to log just the job id and not the entire job name (#1920)
  * build(deps): bump github.com/moby/buildkit from 0.11.6 to 0.12.0 (#1917)
  * build(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 (#1906)
  * Bump dockercli (#1905)
  * throw when invalid `uses` key is provided (#1804)
  * fix: handle zero size (#1888)
  * chore: upgrade golangci-lint and address findings (#1904)
  * build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#1868)
  * build(deps): bump gotest.tools/v3 from 3.4.0 to 3.5.0 (#1892)
  * Normalize path outputs emitted by the artifact server download endpoint (#1898)
  * chore: bump VERSION to 0.2.48
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1884)
  * build(deps): bump github.com/opencontainers/image-spec (#1893)
  * Remove `archives.replacements` in `goreleaser.yaml` (#1895)
  * refactor: open boltdb only while using it (#1879)
  * chore: bump VERSION to 0.2.47
  * Allow inputs for workflow_calls (#1845)
  * build(deps): bump github.com/opencontainers/image-spec (#1883)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1882)
  * build(deps): bump github.com/opencontainers/image-spec (#1881)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1880)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.24 to 1.6.25 (#1870)
  * build(deps): bump github.com/AlecAivazis/survey/v2 from 2.3.6 to 2.3.7 (#1872)
  * build(deps): bump golang.org/x/term from 0.8.0 to 0.9.0 (#1869)
  * build(deps): bump github.com/opencontainers/image-spec (#1871)
  * Allow to override location of action cache dir (#1863)
  * Drop disappeared `wei/curl@v1` (#1864)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1858)
  * build(deps): bump megalinter/megalinter from 7.0.4 to 7.1.0 (#1857)
  * build(deps): bump github.com/mattn/go-isatty from 0.0.18 to 0.0.19 (#1859)
  * fix: spelling mistake in readme (#1854)
  * feature: Add support for github action variables (#1833)
  * Fix bug in processing jobs on platforms without Docker (#1834)
  * build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 (#1842)
  * build(deps): bump megalinter/megalinter from 7.0.2 to 7.0.4 (#1838)
  * build(deps): bump github.com/docker/cli (#1843)
  * build(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 (#1840)
  * build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#1841)
  * build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#1839)
  * chore: bump VERSION to 0.2.46
  * build(deps): bump github.com/opencontainers/image-spec (#1829)
  * build(deps): bump github.com/docker/cli (#1816)
  * add instruction for using `gh auth token` (#1831)
  * build(deps): bump github.com/go-git/go-git/v5 (#1830)
  * build(deps): bump megalinter/megalinter from 6.22.2 to 7.0.2 (#1827)
  * fix: Update ARCH environment variable used in runners/actions (#1818)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1817)
  * build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#1814)
  * build(deps): bump codecov/codecov-action from 3.1.3 to 3.1.4 (#1813)
  * build(deps): bump github.com/opencontainers/image-spec (#1807)
  * build(deps): bump github.com/docker/docker (#1806)
  * build(deps): bump github.com/docker/cli (#1805)
  * build(deps): bump github.com/docker/distribution (#1801)
  * build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#1800)
  * build(deps): bump github.com/moby/buildkit from 0.11.5 to 0.11.6 (#1791)
  * Replace backslash in GetActPath() for Windows (#1777)
  * feat: implement steps.timeout-minutes (#1776)
  * fix: don't allow `-self-hosted` mode as container image (#1783)
  * Refactor evaluate yaml node do not alter nested nodes (#1761)
  * fix: fallback to unauthenticated pull (#1774)
  * fix: remove hardcoded reference to github.com when using reusable remote workflows and remote actions (#1784)
  * build(deps): bump github.com/docker/cli (#1780)
  * build(deps): bump github.com/opencontainers/image-spec (#1781)
  * build(deps): bump github.com/docker/docker (#1779)</changelog>
  <changelog author="kskarthik@disroot.org" date="1715256000">- Update to version 0.2.62:
  * chore: bump VERSION to 0.2.62
  * build(deps): bump megalinter/megalinter from 7.10.0 to 7.11.1 (#2309)
  * build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 (#2310)
  * build(deps): bump github.com/docker/cli (#2307)
  * build(deps): bump github.com/docker/docker (#2306)
  * build(deps): bump github.com/moby/buildkit from 0.13.1 to 0.13.2 (#2308)
  * build(deps): bump github.com/docker/cli (#2302)
  * Add codespell support (config, workflow to detect/not fix) and make it fix few typos (#2296)
  * build(deps): bump github.com/docker/docker (#2299)
  * build(deps): bump github.com/docker/docker (#2295)
  * build(deps): bump megalinter/megalinter from 7.9.0 to 7.10.0 (#2294)
  * build(deps): bump megalinter/megalinter from 7.8.0 to 7.9.0 (#2216)
  * build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (#2215)
  * build(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 (#2278)
  * build(deps): bump github.com/docker/cli (#2291)
  * Update action.yml (#2293)
  * build(deps): bump github.com/moby/buildkit from 0.12.5 to 0.13.1 (#2253)
  * Bump docker to v26 (#2289)
  * fix: skipped jobs have no result (#2276)
  * fix: favor command-line over files (#2274)
  * chore: fix some comments (#2279)
  * build(deps): bump actions/cache from 3 to 4 (#2163)
  * Remove local action cache if remote has changed (#2284)
  * chore: fix codecov (#2288)
  * build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 (#2269)
  * chore: bump VERSION to 0.2.61
  * fix: cache adjust restore order of exact key matches (#2267)
  * Trivial: reduce log spam. (#2256)
  * chore: remove repetitive words (#2259)
  * Support overwriting caches (#2265)
  * test: use ping to improve network test (#2266)
  * build(deps): bump github.com/docker/docker (#2252)
  * build(deps): bump golang.org/x/term from 0.17.0 to 0.18.0 (#2244)
  * fix: rootless permission bits (new actions cache) (#2242)
  * fix function name in comment (#2240)
  * fix: docker buildx cache restore not working (#2236)
  * build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#2235)</changelog>
  <changelog author="kskarthik@disroot.org" date="1717329600">- Update to version 0.2.63:
  * chore: bump VERSION to 0.2.63
  * Meta-copy-symlinks-new-actions-cache (#2337)
  * build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 (#2340)
  * build(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 (#2341)
  * Actions Artifacts v4 backend (#2224)
  * build(deps): bump github.com/docker/docker (#2333)
  * build(deps): bump github.com/docker/cli (#2332)
  * Add documentation for `dryrun` parameter (#2311)
  * Fix for issue 2232: Many lines of "Could not find any stages to run" on run (#2272)
  * build(deps): bump github.com/docker/cli (#2325)
  * build(deps): bump github.com/rhysd/actionlint from 1.6.27 to 1.7.0 (#2326)
  * build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10 (#2327)
  * build(deps): bump github.com/docker/docker (#2324)
  * build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#2323)
  * build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 (#2319)
  * build(deps): bump github.com/docker/cli (#2318)
  * build(deps): bump golang.org/x/term from 0.19.0 to 0.20.0 (#2316)
  * build(deps): bump github.com/docker/docker (#2317)</changelog>
  <changelog author="kskarthik@disroot.org" date="1719921600">- Update to version 0.2.64:
  * chore: bump VERSION to 0.2.64
  * build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#2366)
  * build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#2365)
  * build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 (#2360)
  * build(deps): bump github.com/docker/cli (#2358)
  * fix: skip service container for empty image (#2281)
  * fix: composite action input pollution (#2348)
  * fix: update reusable workflow input handling (#2349)
  * Add riscv64 binary release (#2350)
  * build(deps): bump github.com/rhysd/actionlint from 1.7.0 to 1.7.1 (#2346)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1764417600">- Update vendored golang.org/x/crypto to v0.43.0 to fix
  CVE-2025-47913 (bsc#1253608, GO-2025-4116):
  SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed
  response will panic and cause early termination of the client
  process.</changelog>
</package>
<package pkgid="adfaa43dbcfd580b9e4aff1077643182dfb1bed1d37bc1a9e9eb26869c742c4810c99662f15dc5cf8af3c5ec6e66c98a79b84e6ace586fd9b7679314c8299e39" name="actkbd" arch="x86_64">
  <version epoch="0" ver="0.2.8" rel="bp160.1.13"/>
  <changelog author="tchvatal@suse.com" date="1407844800">- Nice and simple daemon to convert key events into action.</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Fix path to binary in service bnc#903584.</changelog>
  <changelog author="tchvatal@suse.com" date="1423742400">- Remove wants/requires setkeykodes.service as we don't have that
  in SUSE</changelog>
  <changelog author="tchvatal@suse.com" date="1424088000">- Update license, it is only GPL2.0</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Reduce strong requirement on systemd.
- Move fillup requires to (post).</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627387200">- Added hardening to systemd service(s). Modified:
  * actkbd.service</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1675252800">- Spec file cleanup to fix build errors.</changelog>
</package>
<package pkgid="7267bd044a989e8a2e169878ce9e7aa57515cd76a2634ede5dd7901455ee636b934e9da4068a6d5868584b99d5a7da5c02e3dbb3b173759401a1bb4380fd48c7" name="actuated-cli" arch="x86_64">
  <version epoch="0" ver="0.2.7" rel="bp160.1.14"/>
  <changelog author="Johannes Kastl &lt;johannes.kastl@ars.de&gt;" date="1727352000">- new package actuated-cli: CLI for the actuated self-hosted runner
  project</changelog>
</package>
<package pkgid="78b3ffc484ed5726bd887fec6309ff41f7da0c6a01012344d17fb188179db602649f66237ff59a88660880b6fa97404d90e158c5d3d1c5f6a6aed997dd25b8f9" name="adaptec-firmware" arch="noarch">
  <version epoch="0" ver="1.35" rel="160000.2.2"/>
  <changelog author="hare@suse.de" date="1170763200">- Added LICENSE</changelog>
  <changelog author="ro@suse.de" date="1170763201">- fix typo in specfile</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="hare@suse.de" date="1196164800">- Update firmware to v32 (FATE 302809,#341872)</changelog>
  <changelog author="hare@suse.de" date="1204718400">- Update package version to reflect the firmware release
  (#362527)</changelog>
  <changelog author="hare@suse.de" date="1227528000">- Update firmware to v35 (bnc#445280)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- Use %_firmwaredir</changelog>
  <changelog author="msuchanek@suse.com" date="1616328000">- Fix build on Leap which does not have %_firmwaredir</changelog>
</package>
<package pkgid="4d61bcb543b5736ae05eedd01bed6c2f350aa64d37b762a0b056f0a9280d0e94f613e686227619a9b6c7d93a75953c5e41ec53452e16589d7048f59f47bfddd6" name="adaptec-firmware" arch="noarch">
  <version epoch="0" ver="1.35" rel="160000.3.1"/>
  <changelog author="ro@suse.de" date="1170763200">- fix typo in specfile</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="hare@suse.de" date="1196164800">- Update firmware to v32 (FATE 302809,#341872)</changelog>
  <changelog author="hare@suse.de" date="1204718400">- Update package version to reflect the firmware release
  (#362527)</changelog>
  <changelog author="hare@suse.de" date="1227528000">- Update firmware to v35 (bnc#445280)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- Use %_firmwaredir</changelog>
  <changelog author="msuchanek@suse.com" date="1616328000">- Fix build on Leap which does not have %_firmwaredir</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252133]</changelog>
</package>
<package pkgid="328056647f9daf445ebb60084820e7a37e13789c363714b1686ba33a9db0a7b97048b7deefe64fd96c12a7637cfa64ad54a36b67d0b20dbabf6bd22309f494f2" name="adaptx" arch="noarch">
  <version epoch="0" ver="0.9.13" rel="bp160.1.12"/>
  <changelog author="tchvatal@suse.com" date="1404734400">- Remove some redundant definitions from spec</changelog>
  <changelog author="tchvatal@suse.com" date="1405080000">- Do not version java docdir.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Drop java-devel dependency; replaced with javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Do not require the builddeps, only the tools we really use</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix building with jdk9 by specifying java source and target 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544097600">- Don't require the removed xerces-j2-xml-apis, build against a
  generic xml-apis provider in order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility log4j12-mini package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="c388833b8cb618bd6a90b65296b3540ec65347a2ac667eec45724c96bbc1eda84bd38710ff313ddeb2b3fc29e3e70b795b3d62b513180648d25b1382ffedff4e" name="adaptx-doc" arch="noarch">
  <version epoch="0" ver="0.9.13" rel="bp160.1.12"/>
  <changelog author="tchvatal@suse.com" date="1404734400">- Remove some redundant definitions from spec</changelog>
  <changelog author="tchvatal@suse.com" date="1405080000">- Do not version java docdir.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Drop java-devel dependency; replaced with javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Do not require the builddeps, only the tools we really use</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix building with jdk9 by specifying java source and target 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544097600">- Don't require the removed xerces-j2-xml-apis, build against a
  generic xml-apis provider in order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility log4j12-mini package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8ec6efc00d6d9f2dda26a8360e04e4e58ec3c97b3e6c40aa41f8120c22ca462a6a483666a537226e40cc2f980a1c3159581c82449f7121d6e4b298edc8242494" name="adaptx-javadoc" arch="noarch">
  <version epoch="0" ver="0.9.13" rel="bp160.1.12"/>
  <changelog author="tchvatal@suse.com" date="1404734400">- Remove some redundant definitions from spec</changelog>
  <changelog author="tchvatal@suse.com" date="1405080000">- Do not version java docdir.</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Drop java-devel dependency; replaced with javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Do not require the builddeps, only the tools we really use</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix building with jdk9 by specifying java source and target 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544097600">- Don't require the removed xerces-j2-xml-apis, build against a
  generic xml-apis provider in order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility log4j12-mini package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3a66789f797ce1df7ee24a46cb4b3ad1be4086ffd6f40716ff996915b73c695b4cf2220e672f8029f1d7782d55d36d2968f38e7a95f6f554fee06d70875ebbfd" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="160000.2.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build.</changelog>
  <changelog author="idonmez@suse.com" date="1538395200">- Run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1538481600">- Make doc noarch and stop requiring packages that are not
  technically needed.</changelog>
  <changelog author="scabrero@suse.de" date="1574251200">- Update to version 0.9.0+git.0.1b15280:
  * Release version 0.9.0
  * doc: add missing samba_data_tool_path.xml(.in) to EXTRA_DIST
  * doc: explain how to force password reset
  * Do not use arcfour-hmac-md5 when discovering the salt
  * Fix for issue found by Coverity
  * adenroll: use only enctypes permitted by Kerberos config
  * adenroll: add adcli_enroll_get_permitted_keytab_enctypes with tests
  * adconn: add adcli_conn_set_krb5_context
  * adenroll: make sure only allowed enctypes are used in FIPS mode
  * tools: computer - remove errx from parse_option</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616414400">- update to 0.9.1:
  * tools: add show-computer command
  * add description option to join and update
  * Use GSS-SPNEGO if available
  * add option use-ldaps
  * tools: disable SSSD's locator plugin
  * doc: explain required AD permissions
  * computer: add create-msa sub-command
  * Add account-disable option
  * fix coredump in discovery (boo#1183870)
- use upstream bootstrapped tarball
- add upstream signing key and validate source signature
- use strict build
- run tests</changelog>
  <changelog author="scabrero@suse.de" date="1628856000">- Fix build with glibc 2.34; (bsc#1189080); Add patch
  0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1672315200">- Update to 0.9.2:
  * adenroll: set password via LDAP instead Kerberos
  * disco: fall back to LDAPS if CLDAP ping was not successful
  * tools: replace getpass()
  * adenroll: write SID before secret to Samba's db
  * doc: add clarification to add-member command on doc/adcli.xml
  * tools: Set umask before calling mkdtemp()
  * Avoid undefined behaviour in short option parsing
  * library: include endian.h for le32toh
  * man: Fix typos and use consistent upper case for some keywords
  * doc: avoid gnu-make specific usage of $&lt;
  * configure: check for ns_get16 and ns_get32 as well
  * Add setattr and delattr options
  * entry: add passwd-user sub-command
  * Add dont-expire-password option
  * build: add --with-vendor-error-message configure option
- Remove patch fixed upstream: 0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch
- Update signing key for source validation</changelog>
</package>
<package pkgid="031dbfb7d8d553c9e2f75eb024f84fb5532d361a0eb2c83d2fc4d2fdc37eeb9e8ce3f481f4db0b4518f2734f2a3bcf770962076e93959c55da97873e2801404d" name="adcli-doc" arch="noarch">
  <version epoch="0" ver="0.9.2" rel="160000.2.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build.</changelog>
  <changelog author="idonmez@suse.com" date="1538395200">- Run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1538481600">- Make doc noarch and stop requiring packages that are not
  technically needed.</changelog>
  <changelog author="scabrero@suse.de" date="1574251200">- Update to version 0.9.0+git.0.1b15280:
  * Release version 0.9.0
  * doc: add missing samba_data_tool_path.xml(.in) to EXTRA_DIST
  * doc: explain how to force password reset
  * Do not use arcfour-hmac-md5 when discovering the salt
  * Fix for issue found by Coverity
  * adenroll: use only enctypes permitted by Kerberos config
  * adenroll: add adcli_enroll_get_permitted_keytab_enctypes with tests
  * adconn: add adcli_conn_set_krb5_context
  * adenroll: make sure only allowed enctypes are used in FIPS mode
  * tools: computer - remove errx from parse_option</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616414400">- update to 0.9.1:
  * tools: add show-computer command
  * add description option to join and update
  * Use GSS-SPNEGO if available
  * add option use-ldaps
  * tools: disable SSSD's locator plugin
  * doc: explain required AD permissions
  * computer: add create-msa sub-command
  * Add account-disable option
  * fix coredump in discovery (boo#1183870)
- use upstream bootstrapped tarball
- add upstream signing key and validate source signature
- use strict build
- run tests</changelog>
  <changelog author="scabrero@suse.de" date="1628856000">- Fix build with glibc 2.34; (bsc#1189080); Add patch
  0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1672315200">- Update to 0.9.2:
  * adenroll: set password via LDAP instead Kerberos
  * disco: fall back to LDAPS if CLDAP ping was not successful
  * tools: replace getpass()
  * adenroll: write SID before secret to Samba's db
  * doc: add clarification to add-member command on doc/adcli.xml
  * tools: Set umask before calling mkdtemp()
  * Avoid undefined behaviour in short option parsing
  * library: include endian.h for le32toh
  * man: Fix typos and use consistent upper case for some keywords
  * doc: avoid gnu-make specific usage of $&lt;
  * configure: check for ns_get16 and ns_get32 as well
  * Add setattr and delattr options
  * entry: add passwd-user sub-command
  * Add dont-expire-password option
  * build: add --with-vendor-error-message configure option
- Remove patch fixed upstream: 0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch
- Update signing key for source validation</changelog>
</package>
<package pkgid="a037e84dd0ddeb0f8e1d67a721e7cde7f292d8aa63189f6165b2a8b07b8845920f338824a31a160d438c5980bcc547a1ba62d6cc90ae8e2df202ca58a9a8f5b5" name="ade-devel" arch="x86_64">
  <version epoch="0" ver="0.1.2d" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1562068800">- Initial package version 0.1.1d</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Remove pointless empty scriptlets</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1568116800">- Update to version 0.1.1f
  * Fixed warning which happens with old compilers
    (which are still supported in OpenCV)
- Update to version 0.1.1e
  * Bugfix: Make size() method to return size_t value
- Drop upstream Silence_redundant-move_warning.patch
- Use -ffat-lto-objects to provide a proper static library.
- Run tests by default</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1641988800">- Don't leave an empty %check section if building without tests</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1663416000">- Update to version 0.1.2a
  * A minor version bump to fix OpenCV warnings on Windows
- Update to version 0.1.2
  * This release incorporates the community PRs for the past three
    years &amp; mainly serves for OpenCV new compilers support as
    requested.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704110400">- Update to version 0.1.2d
  * Fix compilation with CXX standard set in parent project tree
- Update to version 0.1.2c
  * Fixed issues with CMake exported targets/configs as part
    of OpenVINO build
  * Fixed GCC13 support
- Update to version 0.1.2b
  * A minor version bump to fix warnings on Linux.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714046400">- Add ade-use-cxx14-standard.patch: Enforce CMAKE_CXX_STANDARD=14
  to allow building tests with gtest &gt;= 1.14.0 (gh#opencv/ade#44).</changelog>
</package>
<package pkgid="5b6eb431290985c055737d4a1356d0fa8a307d6f9721a14309011889ef26474fbd6ada8b127d482f490dbd2f00bb6a544470058df58f1b2c1847a902be23dedb" name="adios2-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="bp160.1.21"/>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1690804800">- Add libffi-devel as BuildRequires for successful s390x builds</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.0" date="1691150400">- Added ADIOS2 v2.9.1.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.1
  * Many bugfixes are included in this patch release.
  * Several Bugfixes for BP5 components.
  * Kokkos_CUDA option uses kokkos_wrapper.
  * Kokkos_HIP option is working now.
  * Added C API for fetching the version and features of the built adios2.
  * Removed patch 0003-cmake-evpath-namespace-modules-install-dir.patch.
  * Added patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698148800">- Drop support for obsolete openmpi3
- Prepare support for openmpi5</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.2" date="1698926400">- Added ADIOS2 v2.9.2:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.2
  * Many bugfixes are included in this patch release.
- Dropped patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704110400">- Fix homepage URL.
- Remove "-ffat-lto-objects" option, no static libs are shipped.
- Remove unused/ineffective Requires from src package.
- Add MPI flavor Requires to MPI shared libs package.
- Spec file cleanup</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.0" date="1712232000">- Added ADIOS2 v2.10.0:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.0
  * New Python High Level API.
  * Inclusion of campaign manager feature.
  * Many bugfixes are included in this patch release.
- Dropped patch 0001-cmake-set-correct-soname.patch
- Dropped patch 0002-fix-test-post-install.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712318400">- Use full URL for sources.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.1" date="1716984000">- Added ADIOS2 v2.10.1:
  * pugixml: correct target name.
  * Deactivate campaign recording by default. Use .adios-campaign/ as dir.
  * Add API call to reset memory selection.
  * Adding hooks to gather performance.
  * pugixml,cmake: fix linkage when pugixml.
  * Fixes for FreeBSD, including upstream.
  * Kill outdated reference to bindings.Mode.ReadFlattenSteps.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.1</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.2" date="1733486400">- Added ADIOS2 v2.10.2:
  * Support for ROCm 6.X
  * Dill update
  * Multiple fixes and performance improvements.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.2</changelog>
</package>
<package pkgid="cad2a061250c37b2f94eaa1ac3bd5218fde1fd60fda6093b59712ccc7836e075b166720bc728b7e6d155625e6244a635fc3853e9957ce263aa7733dc9765292f" name="adios2-mpich-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="bp160.1.21"/>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1690804800">- Add libffi-devel as BuildRequires for successful s390x builds</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.0" date="1691150400">- Added ADIOS2 v2.9.1.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.1
  * Many bugfixes are included in this patch release.
  * Several Bugfixes for BP5 components.
  * Kokkos_CUDA option uses kokkos_wrapper.
  * Kokkos_HIP option is working now.
  * Added C API for fetching the version and features of the built adios2.
  * Removed patch 0003-cmake-evpath-namespace-modules-install-dir.patch.
  * Added patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698148800">- Drop support for obsolete openmpi3
- Prepare support for openmpi5</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.2" date="1698926400">- Added ADIOS2 v2.9.2:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.2
  * Many bugfixes are included in this patch release.
- Dropped patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704110400">- Fix homepage URL.
- Remove "-ffat-lto-objects" option, no static libs are shipped.
- Remove unused/ineffective Requires from src package.
- Add MPI flavor Requires to MPI shared libs package.
- Spec file cleanup</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.0" date="1712232000">- Added ADIOS2 v2.10.0:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.0
  * New Python High Level API.
  * Inclusion of campaign manager feature.
  * Many bugfixes are included in this patch release.
- Dropped patch 0001-cmake-set-correct-soname.patch
- Dropped patch 0002-fix-test-post-install.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712318400">- Use full URL for sources.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.1" date="1716984000">- Added ADIOS2 v2.10.1:
  * pugixml: correct target name.
  * Deactivate campaign recording by default. Use .adios-campaign/ as dir.
  * Add API call to reset memory selection.
  * Adding hooks to gather performance.
  * pugixml,cmake: fix linkage when pugixml.
  * Fixes for FreeBSD, including upstream.
  * Kill outdated reference to bindings.Mode.ReadFlattenSteps.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.1</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.2" date="1733486400">- Added ADIOS2 v2.10.2:
  * Support for ROCm 6.X
  * Dill update
  * Multiple fixes and performance improvements.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.2</changelog>
</package>
<package pkgid="5276878660d2d03c4e0a2596e109a6c95d006b4575e4a786e42b70e96441a455f1d68d606bcad242043b6e528943e13acdb993bf802fc350a671d5cc7ba77ed7" name="adios2-mvapich2-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="bp160.1.21"/>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1690804800">- Add libffi-devel as BuildRequires for successful s390x builds</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.0" date="1691150400">- Added ADIOS2 v2.9.1.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.1
  * Many bugfixes are included in this patch release.
  * Several Bugfixes for BP5 components.
  * Kokkos_CUDA option uses kokkos_wrapper.
  * Kokkos_HIP option is working now.
  * Added C API for fetching the version and features of the built adios2.
  * Removed patch 0003-cmake-evpath-namespace-modules-install-dir.patch.
  * Added patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698148800">- Drop support for obsolete openmpi3
- Prepare support for openmpi5</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.2" date="1698926400">- Added ADIOS2 v2.9.2:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.2
  * Many bugfixes are included in this patch release.
- Dropped patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704110400">- Fix homepage URL.
- Remove "-ffat-lto-objects" option, no static libs are shipped.
- Remove unused/ineffective Requires from src package.
- Add MPI flavor Requires to MPI shared libs package.
- Spec file cleanup</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.0" date="1712232000">- Added ADIOS2 v2.10.0:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.0
  * New Python High Level API.
  * Inclusion of campaign manager feature.
  * Many bugfixes are included in this patch release.
- Dropped patch 0001-cmake-set-correct-soname.patch
- Dropped patch 0002-fix-test-post-install.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712318400">- Use full URL for sources.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.1" date="1716984000">- Added ADIOS2 v2.10.1:
  * pugixml: correct target name.
  * Deactivate campaign recording by default. Use .adios-campaign/ as dir.
  * Add API call to reset memory selection.
  * Adding hooks to gather performance.
  * pugixml,cmake: fix linkage when pugixml.
  * Fixes for FreeBSD, including upstream.
  * Kill outdated reference to bindings.Mode.ReadFlattenSteps.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.1</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.2" date="1733486400">- Added ADIOS2 v2.10.2:
  * Support for ROCm 6.X
  * Dill update
  * Multiple fixes and performance improvements.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.2</changelog>
</package>
<package pkgid="9658d53f377757bd6ce5570fb38a429c01125366f7c93149d7692b1629c0b0e04f15d0c50f55884dc296ebd9e5c268b7f3a387b9cf364ccf63805ed1289ddb76" name="adios2-openmpi4-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="bp160.1.22"/>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1690804800">- Add libffi-devel as BuildRequires for successful s390x builds</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.0" date="1691150400">- Added ADIOS2 v2.9.1.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.1
  * Many bugfixes are included in this patch release.
  * Several Bugfixes for BP5 components.
  * Kokkos_CUDA option uses kokkos_wrapper.
  * Kokkos_HIP option is working now.
  * Added C API for fetching the version and features of the built adios2.
  * Removed patch 0003-cmake-evpath-namespace-modules-install-dir.patch.
  * Added patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698148800">- Drop support for obsolete openmpi3
- Prepare support for openmpi5</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.9.2" date="1698926400">- Added ADIOS2 v2.9.2:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.9.2
  * Many bugfixes are included in this patch release.
- Dropped patch 0003-fix-adios2_evpath_modules.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704110400">- Fix homepage URL.
- Remove "-ffat-lto-objects" option, no static libs are shipped.
- Remove unused/ineffective Requires from src package.
- Add MPI flavor Requires to MPI shared libs package.
- Spec file cleanup</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.0" date="1712232000">- Added ADIOS2 v2.10.0:
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.0
  * New Python High Level API.
  * Inclusion of campaign manager feature.
  * Many bugfixes are included in this patch release.
- Dropped patch 0001-cmake-set-correct-soname.patch
- Dropped patch 0002-fix-test-post-install.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712318400">- Use full URL for sources.</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.1" date="1716984000">- Added ADIOS2 v2.10.1:
  * pugixml: correct target name.
  * Deactivate campaign recording by default. Use .adios-campaign/ as dir.
  * Add API call to reset memory selection.
  * Adding hooks to gather performance.
  * pugixml,cmake: fix linkage when pugixml.
  * Fixes for FreeBSD, including upstream.
  * Kill outdated reference to bindings.Mode.ReadFlattenSteps.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.1</changelog>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 2.10.2" date="1733486400">- Added ADIOS2 v2.10.2:
  * Support for ROCm 6.X
  * Dill update
  * Multiple fixes and performance improvements.
  * Release notes: https://github.com/ornladios/ADIOS2/releases/tag/v2.10.2</changelog>
</package>
<package pkgid="a4e2d27895f45175d52a2a8932ebb6fe45a6bf38d66696254f5455c2d5c714df10c59f9fa3c29d6b20e7b0d1401f9ecf074810a8f83be1ef9c2f2366b04ffce3" name="adlmidi" arch="x86_64">
  <version epoch="0" ver="1.2.6.2" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1552219200">- Initial package, version 1.2.6.2</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1601985600">- Fix build on Arm and ppc:
  * adlmidi-fix-arm.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="47a988876c13c49a231f30e221245e6ef314c9dd970700bd1be3c85de7aa01c5087d0187e0860719644e0067537f39e9dd1e27979f51c4788a71424a0c50d34c" name="adlmidi-tools" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1552305600">- Initial package, version 1.4.0.1</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591704000">- Fix build on Arm with upstream patch:
  * libadlmidi-fix-arm.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1601294400">- Update to version 1.5.0
  * Drum note length expanding is now supported in real-time mode.
  * Channels manager has been improved.
  * Nuked OPL3 1.8 emulator got some optimizations ported from 1.7
  where they are was applied previously.
  * Reworked rhythm-mode percussions system, WOPL banks with
    rhythm-mode percussions
  * Added Public Domain Opal OPL3 emulator made by Reality (a team
    who originally made the Reality Adlib Tracker).
  * Added LGPL licensed JavaOPL3 emulator made by Robson Cozendey
    in Java and later rewritten into C++ for GZDoom.
  * Fully rewritten an embedded bank database format, embedded
    banks now supports a wider set (more than 127:127 instruments
    in one bank).
  * Improved accuracy of the DMX volume model, include the buggy
    AM interpretation.
  * Improved accuracy of Apogee volume model, include the bug of
    AM instruments.
  * Improved accuracy of the Win9X volume model.
  * Removed C++ extras. C++-bounded instruments tester is useless
    since a real-time MIDI API can completely replace it.
  * Added AIL volume model.
  * Added Generic FM variant of Win9X volume model.
  * Fixed an incorrect work of CC-121.
  * Added HMI volume model.
  * Added frequency models, assigned to every volume model: AIL,
    HMI, DMX, Apogee, 9X, and the Generic formula.
- Drop patch:
  * libadlmidi-fix-arm.patch (not longer needed)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620043200">- Update to version 1.5.0.1.1
  * Fixed an incorrect timer processing when using a real-time
    interface</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1667217600">- Update to version 1.5.1
  * Added an ability to disable the automatical arpeggio.
  * Added an ability to set the count of loops (how many times to
    play the song).
  * Added an ability to disable/enable the playing of selected
    MIDI channels.
  * Fixed memory damages and crashes while playing XMI files.
  * Added bank-specific MT32 defaults (to don't confuse XMI
    playback between different games, works for AIL and IBK only,
    and for WOPL if set at the header).
  * Added the chip channels allocation mode option.
  * Fixed the playback of multi-song XMI files.
  * Added an ability to switch the XMI song on the fly.</changelog>
</package>
<package pkgid="3ed1b171c4e3ff4693202eafb22222a69fb68c97f1fdafd6d8506d5bbccef375a4784d9514568a585a87a75cd769e393c0a657c2b9f2ee00427f546d2777d0eb" name="adms" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="bp160.1.13"/>
  <changelog author="dmitry_r@opensuse.org" date="1403870400">- Initial package, version 2.3.2
- Remove build time from binary
  * adms-no-build-time.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1404388800">- Fix devel package requirements</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1412164800">- Update to version 2.3.4
  * bugfix release, see included ChangeLog file
- Update adms-no-build-time.patch
- Build without shared libraries.</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.3.5
  * Change license to GPLv3.
  * Add new simplified constants.vams and discplines.vams.
    Tested to work with models currently in use by Qucs, Ngspice, Xyce and Gnucap.
    Whenever these headers are used, adms informs the user about the
    availability of the standard headers at:
    http://accellera.org/downloads/standards/v-ams
  * Remove non-GPL constants.vams and disciplines.vams headers.
    These files are copyright of Accellera. With the LRM v2.4.0 updated versions
    of these files are freely accessible. However modification is not allowed.
    Hence, these files are not GPL and should not be included in adms.
  * Autotools, add back support for static and shared libraries build.
    Build shared libraries by default. Tested on Linux, Mac OSX, and MSYS2.
    See the configure --disable-shared flag to change that.
    CMake contiues to builds static libraries only.
  * Fix out-of-tree build for Autotools and CMake.
  * Check scaling factors againd LRM v2.4.0
    Add missing K scaling (uppercase kilo)
    standard scale_factor T|G|M|K|k|m|u|n|p|f|a
    Add testset (va and xml files) to test the scaling factors
  * Handle non-standard scaling factors with warning E|P|D|h|d|c|A
  * Relax Bison requirement, tested with (2.5, 3.0.2)
  * Perl GD module is no longer required at build time.
    The GD module is becoming hard to install, and it is only used to create
    a few images used on the html documentation. If images need to be changed,
    run the mkimage.pl script and update the repository.
- Change license to GPL-3.0, accordingly with upstream changes
- Remove perl-GD build dependency; not needed anymore</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.3.6
  * Fix parser for parameter lists in subdevice instanciation.
  * Remove duplicated constants in provided headers.
  * Fix crash on x64 when printing message about standard headers.
- Moved to github
- Lint spec file</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Clean spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Expand shared library subpacakge description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1609848000">- update to version 2.3.7
  * reproducible build
  * typo fixes
  * include path
  * instructions</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1708948800">- Update URL to point to Github, Sourceforge repository is no
  longer active.</changelog>
</package>
<package pkgid="ef206830102e18cf69897a5067c7def4426acea32ebee8b1fc498a8926d5e834f8a86e84b222ad0d82d848c3c88f60a03d3cc51ed622e5f2b68e05df8bb51cba" name="adms-devel" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="bp160.1.13"/>
  <changelog author="dmitry_r@opensuse.org" date="1403870400">- Initial package, version 2.3.2
- Remove build time from binary
  * adms-no-build-time.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1404388800">- Fix devel package requirements</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1412164800">- Update to version 2.3.4
  * bugfix release, see included ChangeLog file
- Update adms-no-build-time.patch
- Build without shared libraries.</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.3.5
  * Change license to GPLv3.
  * Add new simplified constants.vams and discplines.vams.
    Tested to work with models currently in use by Qucs, Ngspice, Xyce and Gnucap.
    Whenever these headers are used, adms informs the user about the
    availability of the standard headers at:
    http://accellera.org/downloads/standards/v-ams
  * Remove non-GPL constants.vams and disciplines.vams headers.
    These files are copyright of Accellera. With the LRM v2.4.0 updated versions
    of these files are freely accessible. However modification is not allowed.
    Hence, these files are not GPL and should not be included in adms.
  * Autotools, add back support for static and shared libraries build.
    Build shared libraries by default. Tested on Linux, Mac OSX, and MSYS2.
    See the configure --disable-shared flag to change that.
    CMake contiues to builds static libraries only.
  * Fix out-of-tree build for Autotools and CMake.
  * Check scaling factors againd LRM v2.4.0
    Add missing K scaling (uppercase kilo)
    standard scale_factor T|G|M|K|k|m|u|n|p|f|a
    Add testset (va and xml files) to test the scaling factors
  * Handle non-standard scaling factors with warning E|P|D|h|d|c|A
  * Relax Bison requirement, tested with (2.5, 3.0.2)
  * Perl GD module is no longer required at build time.
    The GD module is becoming hard to install, and it is only used to create
    a few images used on the html documentation. If images need to be changed,
    run the mkimage.pl script and update the repository.
- Change license to GPL-3.0, accordingly with upstream changes
- Remove perl-GD build dependency; not needed anymore</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.3.6
  * Fix parser for parameter lists in subdevice instanciation.
  * Remove duplicated constants in provided headers.
  * Fix crash on x64 when printing message about standard headers.
- Moved to github
- Lint spec file</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Clean spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Expand shared library subpacakge description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1609848000">- update to version 2.3.7
  * reproducible build
  * typo fixes
  * include path
  * instructions</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1708948800">- Update URL to point to Github, Sourceforge repository is no
  longer active.</changelog>
</package>
<package pkgid="5b07ec6e1b323e628d827a87c029550687053171581787b76a702d6851a0feed20443b0249d582f0d1003b41d0021cb81e59d7731c84818cc9b96a855fa4f0da" name="adns" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="bp160.1.13"/>
  <changelog author="crrodriguez@opensuse.org" date="1370865600">- Build with large file support in 32 bit archs, autoconf
  stuff is fine, but C files included config.h after C library
  headers, therefore no prototypes for *64 functions found.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370952000">- remove debug statement in the spec file, leftover from
  previous change.</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove obsolete patches
  * adns-ocloexec.patch
  * adns-1.4-ipv6.patch
- Add gpg signature
- Cleanup spec-file with spec-cleaner
- Remove already disabled %check section, tests require working
  network setup
- Update to 1.5.0
  * This release provides full IPv6 support.  Applications can
    request AAAA records (containing IPv6 addresses) as well as,
    or instead of, A records (containing IPv4 addresses).  adns
    1.5 can speak to nameservers over IPv6.
  * converting between addresses and address literals.  These carry
    less baggage than getaddrinfo and getnameinfo.
  * bugfixes and other minor changes (see changelog for details)</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macro in the patch name
- restart patch numbering</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 1.5.1
  * Fix addr queries (including subqueries, ie including deferencing MX
    lookups etc.) not to crash when one of the address queries returns
    tempfail.  Also, do not return a spurious pointer to the application
    when one of the address queries returns a permanent error (although,
    the application almost certainly won't use this pointer because the
    associated count is zero).
  * Portability fix for systems where socklen_t is bigger than int.
  * Fix for malicious optimisation of memcpy in test suite, which
    causes failure with gcc-4.1.9 -O3.
  * Fix TCP async connect handling. The bug is hidden on Linux and on most
    systems where the nameserver is on localhost. If it is not hidden,
    adns's TCP support is broken unless adns_if_noautosys is used.
  * adnsresfilter: Fix addrtextbuf buffer size.  This is not actually a
    problem in real compiled code but should be corrected.
  * Properly include harness.h in adnstest.c in regress/.  Suppresses
    a couple of compiler warnings (implicit declaration of Texit, etc.)
- cleanup with spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1591099200">- add adns-1.5.1-gcc10.patch to fix build with GCC10
- run spec-cleaner</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1592222400">- Update to 1.6.0
- Changes in 1.6.0:
  * Bugfixes
  * adnshost: Support --reverse in -f mode input stream
  * timeout robustness against clock skew: track query start time and
    duration.  Clock instability may now only cause spurious timeouts
    rather than indefinite hangs or even assertion failures.
  * New features:
  * adnshost: Offer ability to set adns checkc flags
  * adnslogres: Honour --checkc-freq (if it comes first)
  * adnsresfilter: Honour --checkc-freq and --checkc-entex
  * time handling: Support use of CLOCK_MONOTONIC via an init flag.
  * adns_str* etc.: Improve robustness; more allowable inputs values.
  * Internal changes:
  * adnshost: adh-opts.c: Whitespace adjustments to option table
  * Build system and tests improvements
- Changes in 1.5.2
  * Important security fixes:
    CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9109:
    Vulnerable applications: all adns callers.
    Exploitable by: the local recursive resolver.
    Likely worst case: Remote code execution.
    CVE-2017-9106:
    Vulnerable applications: those that make SOA queries.
    Exploitable by: upstream DNS data sources.
    Likely worst case: DoS (crash of the adns-using application)
    CVE-2017-9107:
    Vulnerable applications: those that use adns_qf_quoteok_query.
    Exploitable by: sources of query domain names.
    Likely worst case: DoS (crash of the adns-using application)
    CVE-2017-9108:
    Vulnerable applications: adnshost.
    Exploitable by: code responsible for framing the input.
    Likely worst case: DoS (adnshost crashes at EOF).
  * Bugfixes:
  * Do not include spurious external symbol `data' (fixes GCC10 build).
  * If server sends TC flag over TCP, bail rather than retrying.
  * Do not crash on certain strange resolv.conf contents.
  * Fix various crashes if a global system failure occurs, or
    adns_finish is called with outstanding queries.
  * Correct a parsing error message very slightly.
  * DNS packet parsing: Slight fix when packet is truncated.
  * Fix ABI compatibility in string conversion of certain RR types.
  * internal.h: Use `unsigned' for nextid; fixes theoretical C UB.
  * Portability fix:
  * common.make.in: add -Wno-unused-value.  Fixes build with GCC9.
  * Internal changes:
  * Additional comments describing some internal code restrions.
  * Robustness assert() against malfunctioning write() system call.
- It fixes the following CVEs [bsc#1172265]
  CVE-2017-9103, CVE-2017-9104, CVE-2017-9105, CVE-2017-9106,
  CVE-2017-9107, CVE-2017-9108, CVE-2017-9109
- refresh adns-visibility.patch
- drop adns-1.5.1-gcc10.patch that is no longer needed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 1.6.1:
  + Minor bugfix:
  * Suppress warning about `trust-ad` in resolv.conf.
  + Build system:
  * Honour DESTDIR, avoiding need for prefix= workaround.
    (Drop adns-1.4-destdir.patch)
  * regression tests: Add missing dependency on hsyscalls.i.
    GNU #51329.  [Report from Sergei Trofimovich]
  * regression tests: build with 64-bit time_t on 32-bit systems.
  + Documentation:
  * Fix all http: URLs in docs to be https: instead.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716638400">- fix Factory submission and spec file tweaks</changelog>
</package>
<package pkgid="3ad13ca2980d3f5860718cdacc4d6850e566abe0ecf4e5c9356506e8ee44bb8ce18a9d845d96c77de646c81328937ca65f58b014712fc53936fcececcb366e77" name="adobe-sourcecodepro-fonts" arch="noarch">
  <version epoch="0" ver="2.038" rel="160000.2.2"/>
  <changelog author="robert.munteanu@gmail.com" date="1349179200">- Specfile cleanup
  - removed out-of-date comments
  - removed FIXME</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1354881600">- Updated to upstream version 1.013
  - Updates design of asterisk and hyphen to accommodate coders' preferences.
  - Realigns math and punctuation glyphs.
  - Adds a stylistic set (ss01) for typographic alternates.
  - Adds a stylistic set (ss04) for alternate dollar sign.
  - Adds a small number of IPA characters.
  - Adds box drawing characters and block elements.</changelog>
  <changelog author="toms@opensuse.org" date="1358424000">- Updated to version 1.017
  (No version update between 1.013 and 1.017)
  * Updates the design of the asterisk glyphs, bar, and broken bar.
  * Updates the hinting to the default asterisk in all styles.
  * Adds an new Medium weight to the font project.
  * Updates design of the following glyphs to center them within glyph height/width:
    . lighttrpldashhorzbxd
    . heavytrpldashhorzbxd
    . lighttrpldashvertbxd
    . heavytrpldashvertbxd
    . lightquaddashhorzbxd
    . heavyquaddashhorzbxd
    . lightquaddashvertbxd
    . heavyquaddashvertbxd
    . lightdbldashhorzbxd
    . heavydbldashhorzbxd
    . lightdbldashvertbxd
    . heavydbldashvertbxd</changelog>
  <changelog author="fa0sck@gmail.com" date="1370865600">- Install fonts without x-bit</changelog>
  <changelog author="dimstar@opensuse.org" date="1428926400">- Add a metainfo.xml file for presence in AppStream metadata.</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1437739200">- Update to version 2.010 ( roman fonts ) / 1.030 ( italic fonts )
  * Adds italic styles to family. (GitHub issue #6)
  * Adds Powerline symbols. (GitHub issue #43)
  * Adds mathematical operators specifically requested to date.
    (GitHub issue #49)
  * Adds geometric shapes specifically requested to date. (GitHub
    issue #51)
  * Changes vendor ID from ADBE to ADBO. (GitHub issue #80)
  * Updates name table to remove full license text. (GitHub
    issue #83)
  * Increases length of em dash. (GitHub issue #85)
  * Adds character variants features (ccXX).
  * Adds support for some extended Latin (IPA).
  * Adds characters to fully support WGL4 standard.
  * Adds characters that were missing for Arabic and Hebrew
    transliteration schemes.
  * Adds a few emoji characters.
  * Adds SVG colored versions of some characters
  * Nudges the dot accent up to prevent from collapsing in CFF
    fonts.
  * Adjusts design and positioning of cedillas.
  * Updates the design of the following glyphs in intermediate
    weights, thanks to intermediate master: B, M, N, W, e, g,
    m, w, Bstroke, Hbar, Oslash, Tbar, Eth, ae, bstroke, dcroat,
    eogonek, hbar, oslash, oe, eth, zero.0, zero.0o, zero.0c,
    e.sups
  * Updates design of ringhalfleftmod, ringhalfrightmod.
  * [roman fonts only] Adds support for Greek and Cyrillic.
    (GitHub issues #48 &amp; #85)
  * [roman fonts only] Adds alternate lowercase i with foot
    serifs (ss04 – stylistic set 4).</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1498651200">- Update to version 2.030 ( roman fonts ) / 1.050 ( italic fonts )
  * Redesigns box drawing shades (issue #57).
  * Correctly maps forms for phi (U+03C6 and U+03D5) (issue #120)
  * Zeros widths of fraction characters in frac feature (
    issue #121).
  * Adds TrueType hints to box drawing characters (issue #122).
  * Adds alternates for l (lowercase L) and 1. (issue #126)
  * Corrects OpenType feature rules relating to capital figures.
    (issue #127)
  * Fixes final names for fi and fl ligatures to f_i and f_l.
    (issue #128)
  * Updates TT hinting for Block- and Quadrant glyphs
    (U+2080 – U+209F).
  * Adds manual TT hints to specific Box Drawing Characters for
    improved horizontal connection.
  * Updates the design of 1s in all styles for better character
    recognition.
  * Removes colored artwork from default forms of glyphs.
  * Adds IVSes for emoji representation for pictorial glyphs.
  * Removes NULL (U+0000) and CR (U+000D) glyphs from TrueType
    fonts.
  * Gzips SVG table documents.</changelog>
  <changelog author="i@guoyunhe.me" date="1557230400">- Remove TTF files because better OTF files have been installed</changelog>
  <changelog author="i@guoyunhe.me" date="1596456000">- Add GitHub source URL
- Remove README.md because it isn't useful for users
- Change deprecated /usr/share/appdata to /usr/share/metainfo
- Use dos2unix to fix DOS/Windows encoding</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652875200">- Update to version 2.038 ( roman fonts ) / 1.058 ( italic fonts )</changelog>
</package>
<package pkgid="b8ae7dda21b6b8b45a3b946885b5a1f737f4886c3dcec84cf463f116c94690520641a66ec5ac7ee1a1346b375425ee53265d4db20ebac289e43ec017128c9cc3" name="adobe-sourcehanserif-cn-fonts" arch="noarch">
  <version epoch="0" ver="2.002" rel="bp160.1.10"/>
  <changelog author="i@marguerite.su" date="1405512000">- initial version
  * initial public release</changelog>
  <changelog author="mailaender@opensuse.org" date="1430654400">- update to 1.002
- run spec-cleaner
- fix description shorter than summary</changelog>
  <changelog author="jengelh@inai.de" date="1430654401">- Feed through format_spec_file and spec-beautifier. Trim filelist,
  it is not necessary to specify all files one by one.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.001
  * More glyphs were added</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1556539200">- Add all region-specific fonts</changelog>
  <changelog author="Dingzhong Chen &lt;wsxy162@gmail.com&gt;" date="1655553600">- Update to 2.001R
  * The copyright year was changed to “2017–2022.”
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Changes from 2.000R
  * The copyright year was changed to “2017–2021.”
  * Added support for Hong Kong SCS-2016
  * Updated Latin glyphs derived from Source Serif to align with version 4.0
  * All fonts have been built as variable fonts
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Add Hongkong specific subset fonts
- Add variable fonts for all regions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- Update to 2.002R
  * The copyright year was changed to “2017–2023.”
  * Addition of ㋿ Square Era Name Reiwa uni32FF-JP was omitted in
    previous release notes Issue #163.
  * The following glyphs were added to support GB 18030 2022
    Implementation Level 2: uni4DB6-CN, uni4DB7-CN, uni4DB8-CN,
    uni4DBA-CN, uni4DBB-CN, uni4DBC-CN, uni4DBD-CN, uni4DBE-CN,
    uni4DBF-CN, uni5CB8-JP, uni9FEB-CN, uni9FEB-TW, uni9FEC-CN,
    uni9FED-CN, uni9FEE-JP, uni9FEF-JP, uni9FF0-CN, uni9FF1-CN,
    uni9FF2-CN, uni9FF3-CN, uni9FF4-CN, uni9FF5-CN, uni9FF6-CN,
    uni9FF7-CN, uni9FF8-CN, uni9FF9-CN, uni9FFA-CN, uni9FFB-CN,
    uni9FFC-CN, uni9FFD-CN, uni9FFE-CN, and uni9FFF-CN.
  * Fixed aj16-kanji.txt per Issue #125.
  * Fixed position of uni309B-V and uni309C-V per Issue #157.
  * Fixed HK mapping for U+752D 甭 per Issue #159.
  * Fixed CN mapping for U+5141 允 and U+535A 博 per Issue #162.
  * Remapped TW glyph for U+7239 爹 per Issue #167.
  * Restored JP glyph for U+5CB8 岸 per Issue #169.
  * Fixed mapping for U+F9DC 隆 per Issue #165.
  * Fixed interpolation bug in uni2299 ⊙ per Issue #181.
  * Fixed interpolation bugs in uni4B4C-CN 䭌 and uni4B55-CN 䭕 per
    Issue #193.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700568001">- Remove old specfile constructs, update descriptions</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1702468800">- add %reconfigure_fonts_prereq to the subpackages
  * required by the presence of the macro:
    %reconfigure_fonts_scriptlets -n &lt;subpackage-name&gt;</changelog>
</package>
<package pkgid="7e014b0fb97f6601dfb902c38b760adadae8d625ced05c2dbcf53d52fdfa6f793bf1d606e77dd5ce0093b0f45da3431149b2e206d4b27721942b8f68e99ffa36" name="adobe-sourcehanserif-hk-fonts" arch="noarch">
  <version epoch="0" ver="2.002" rel="bp160.1.10"/>
  <changelog author="i@marguerite.su" date="1405512000">- initial version
  * initial public release</changelog>
  <changelog author="mailaender@opensuse.org" date="1430654400">- update to 1.002
- run spec-cleaner
- fix description shorter than summary</changelog>
  <changelog author="jengelh@inai.de" date="1430654401">- Feed through format_spec_file and spec-beautifier. Trim filelist,
  it is not necessary to specify all files one by one.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.001
  * More glyphs were added</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1556539200">- Add all region-specific fonts</changelog>
  <changelog author="Dingzhong Chen &lt;wsxy162@gmail.com&gt;" date="1655553600">- Update to 2.001R
  * The copyright year was changed to “2017–2022.”
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Changes from 2.000R
  * The copyright year was changed to “2017–2021.”
  * Added support for Hong Kong SCS-2016
  * Updated Latin glyphs derived from Source Serif to align with version 4.0
  * All fonts have been built as variable fonts
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Add Hongkong specific subset fonts
- Add variable fonts for all regions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- Update to 2.002R
  * The copyright year was changed to “2017–2023.”
  * Addition of ㋿ Square Era Name Reiwa uni32FF-JP was omitted in
    previous release notes Issue #163.
  * The following glyphs were added to support GB 18030 2022
    Implementation Level 2: uni4DB6-CN, uni4DB7-CN, uni4DB8-CN,
    uni4DBA-CN, uni4DBB-CN, uni4DBC-CN, uni4DBD-CN, uni4DBE-CN,
    uni4DBF-CN, uni5CB8-JP, uni9FEB-CN, uni9FEB-TW, uni9FEC-CN,
    uni9FED-CN, uni9FEE-JP, uni9FEF-JP, uni9FF0-CN, uni9FF1-CN,
    uni9FF2-CN, uni9FF3-CN, uni9FF4-CN, uni9FF5-CN, uni9FF6-CN,
    uni9FF7-CN, uni9FF8-CN, uni9FF9-CN, uni9FFA-CN, uni9FFB-CN,
    uni9FFC-CN, uni9FFD-CN, uni9FFE-CN, and uni9FFF-CN.
  * Fixed aj16-kanji.txt per Issue #125.
  * Fixed position of uni309B-V and uni309C-V per Issue #157.
  * Fixed HK mapping for U+752D 甭 per Issue #159.
  * Fixed CN mapping for U+5141 允 and U+535A 博 per Issue #162.
  * Remapped TW glyph for U+7239 爹 per Issue #167.
  * Restored JP glyph for U+5CB8 岸 per Issue #169.
  * Fixed mapping for U+F9DC 隆 per Issue #165.
  * Fixed interpolation bug in uni2299 ⊙ per Issue #181.
  * Fixed interpolation bugs in uni4B4C-CN 䭌 and uni4B55-CN 䭕 per
    Issue #193.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700568001">- Remove old specfile constructs, update descriptions</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1702468800">- add %reconfigure_fonts_prereq to the subpackages
  * required by the presence of the macro:
    %reconfigure_fonts_scriptlets -n &lt;subpackage-name&gt;</changelog>
</package>
<package pkgid="33b2eba355cf29e3d666e79d5953f1d33d5ad7784d77a68575427571a9ab8a2d683301f53ae9177e9fe0c73d1f40897439435054bd6eead5811ba5e87b36196d" name="adobe-sourcehanserif-jp-fonts" arch="noarch">
  <version epoch="0" ver="2.002" rel="bp160.1.10"/>
  <changelog author="i@marguerite.su" date="1405512000">- initial version
  * initial public release</changelog>
  <changelog author="mailaender@opensuse.org" date="1430654400">- update to 1.002
- run spec-cleaner
- fix description shorter than summary</changelog>
  <changelog author="jengelh@inai.de" date="1430654401">- Feed through format_spec_file and spec-beautifier. Trim filelist,
  it is not necessary to specify all files one by one.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.001
  * More glyphs were added</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1556539200">- Add all region-specific fonts</changelog>
  <changelog author="Dingzhong Chen &lt;wsxy162@gmail.com&gt;" date="1655553600">- Update to 2.001R
  * The copyright year was changed to “2017–2022.”
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Changes from 2.000R
  * The copyright year was changed to “2017–2021.”
  * Added support for Hong Kong SCS-2016
  * Updated Latin glyphs derived from Source Serif to align with version 4.0
  * All fonts have been built as variable fonts
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Add Hongkong specific subset fonts
- Add variable fonts for all regions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- Update to 2.002R
  * The copyright year was changed to “2017–2023.”
  * Addition of ㋿ Square Era Name Reiwa uni32FF-JP was omitted in
    previous release notes Issue #163.
  * The following glyphs were added to support GB 18030 2022
    Implementation Level 2: uni4DB6-CN, uni4DB7-CN, uni4DB8-CN,
    uni4DBA-CN, uni4DBB-CN, uni4DBC-CN, uni4DBD-CN, uni4DBE-CN,
    uni4DBF-CN, uni5CB8-JP, uni9FEB-CN, uni9FEB-TW, uni9FEC-CN,
    uni9FED-CN, uni9FEE-JP, uni9FEF-JP, uni9FF0-CN, uni9FF1-CN,
    uni9FF2-CN, uni9FF3-CN, uni9FF4-CN, uni9FF5-CN, uni9FF6-CN,
    uni9FF7-CN, uni9FF8-CN, uni9FF9-CN, uni9FFA-CN, uni9FFB-CN,
    uni9FFC-CN, uni9FFD-CN, uni9FFE-CN, and uni9FFF-CN.
  * Fixed aj16-kanji.txt per Issue #125.
  * Fixed position of uni309B-V and uni309C-V per Issue #157.
  * Fixed HK mapping for U+752D 甭 per Issue #159.
  * Fixed CN mapping for U+5141 允 and U+535A 博 per Issue #162.
  * Remapped TW glyph for U+7239 爹 per Issue #167.
  * Restored JP glyph for U+5CB8 岸 per Issue #169.
  * Fixed mapping for U+F9DC 隆 per Issue #165.
  * Fixed interpolation bug in uni2299 ⊙ per Issue #181.
  * Fixed interpolation bugs in uni4B4C-CN 䭌 and uni4B55-CN 䭕 per
    Issue #193.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700568001">- Remove old specfile constructs, update descriptions</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1702468800">- add %reconfigure_fonts_prereq to the subpackages
  * required by the presence of the macro:
    %reconfigure_fonts_scriptlets -n &lt;subpackage-name&gt;</changelog>
</package>
<package pkgid="90405eb280e0b6a086d5a25eedbed2bc3835f8201186312af86977cd3e4a90bcdcc354493700a67936f814ee8b8d2dc49b2e1224ec7085f6594d42357b1518c8" name="adobe-sourcehanserif-kr-fonts" arch="noarch">
  <version epoch="0" ver="2.002" rel="bp160.1.10"/>
  <changelog author="i@marguerite.su" date="1405512000">- initial version
  * initial public release</changelog>
  <changelog author="mailaender@opensuse.org" date="1430654400">- update to 1.002
- run spec-cleaner
- fix description shorter than summary</changelog>
  <changelog author="jengelh@inai.de" date="1430654401">- Feed through format_spec_file and spec-beautifier. Trim filelist,
  it is not necessary to specify all files one by one.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.001
  * More glyphs were added</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1556539200">- Add all region-specific fonts</changelog>
  <changelog author="Dingzhong Chen &lt;wsxy162@gmail.com&gt;" date="1655553600">- Update to 2.001R
  * The copyright year was changed to “2017–2022.”
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Changes from 2.000R
  * The copyright year was changed to “2017–2021.”
  * Added support for Hong Kong SCS-2016
  * Updated Latin glyphs derived from Source Serif to align with version 4.0
  * All fonts have been built as variable fonts
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Add Hongkong specific subset fonts
- Add variable fonts for all regions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- Update to 2.002R
  * The copyright year was changed to “2017–2023.”
  * Addition of ㋿ Square Era Name Reiwa uni32FF-JP was omitted in
    previous release notes Issue #163.
  * The following glyphs were added to support GB 18030 2022
    Implementation Level 2: uni4DB6-CN, uni4DB7-CN, uni4DB8-CN,
    uni4DBA-CN, uni4DBB-CN, uni4DBC-CN, uni4DBD-CN, uni4DBE-CN,
    uni4DBF-CN, uni5CB8-JP, uni9FEB-CN, uni9FEB-TW, uni9FEC-CN,
    uni9FED-CN, uni9FEE-JP, uni9FEF-JP, uni9FF0-CN, uni9FF1-CN,
    uni9FF2-CN, uni9FF3-CN, uni9FF4-CN, uni9FF5-CN, uni9FF6-CN,
    uni9FF7-CN, uni9FF8-CN, uni9FF9-CN, uni9FFA-CN, uni9FFB-CN,
    uni9FFC-CN, uni9FFD-CN, uni9FFE-CN, and uni9FFF-CN.
  * Fixed aj16-kanji.txt per Issue #125.
  * Fixed position of uni309B-V and uni309C-V per Issue #157.
  * Fixed HK mapping for U+752D 甭 per Issue #159.
  * Fixed CN mapping for U+5141 允 and U+535A 博 per Issue #162.
  * Remapped TW glyph for U+7239 爹 per Issue #167.
  * Restored JP glyph for U+5CB8 岸 per Issue #169.
  * Fixed mapping for U+F9DC 隆 per Issue #165.
  * Fixed interpolation bug in uni2299 ⊙ per Issue #181.
  * Fixed interpolation bugs in uni4B4C-CN 䭌 and uni4B55-CN 䭕 per
    Issue #193.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700568001">- Remove old specfile constructs, update descriptions</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1702468800">- add %reconfigure_fonts_prereq to the subpackages
  * required by the presence of the macro:
    %reconfigure_fonts_scriptlets -n &lt;subpackage-name&gt;</changelog>
</package>
<package pkgid="5e302e0712d2324fd67b0fb340e393109207e8a8c308476c044ed8e4a38ceb39c67037e0fc3671863f3a5c444e2872b38a3259aa15243101e11e4e09a3ae96c7" name="adobe-sourcehanserif-tw-fonts" arch="noarch">
  <version epoch="0" ver="2.002" rel="bp160.1.10"/>
  <changelog author="i@marguerite.su" date="1405512000">- initial version
  * initial public release</changelog>
  <changelog author="mailaender@opensuse.org" date="1430654400">- update to 1.002
- run spec-cleaner
- fix description shorter than summary</changelog>
  <changelog author="jengelh@inai.de" date="1430654401">- Feed through format_spec_file and spec-beautifier. Trim filelist,
  it is not necessary to specify all files one by one.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.001
  * More glyphs were added</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1556539200">- Add all region-specific fonts</changelog>
  <changelog author="Dingzhong Chen &lt;wsxy162@gmail.com&gt;" date="1655553600">- Update to 2.001R
  * The copyright year was changed to “2017–2022.”
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Changes from 2.000R
  * The copyright year was changed to “2017–2021.”
  * Added support for Hong Kong SCS-2016
  * Updated Latin glyphs derived from Source Serif to align with version 4.0
  * All fonts have been built as variable fonts
  * Many glyphs changes (maps, fixes, additions, adjustments)
- Add Hongkong specific subset fonts
- Add variable fonts for all regions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- Update to 2.002R
  * The copyright year was changed to “2017–2023.”
  * Addition of ㋿ Square Era Name Reiwa uni32FF-JP was omitted in
    previous release notes Issue #163.
  * The following glyphs were added to support GB 18030 2022
    Implementation Level 2: uni4DB6-CN, uni4DB7-CN, uni4DB8-CN,
    uni4DBA-CN, uni4DBB-CN, uni4DBC-CN, uni4DBD-CN, uni4DBE-CN,
    uni4DBF-CN, uni5CB8-JP, uni9FEB-CN, uni9FEB-TW, uni9FEC-CN,
    uni9FED-CN, uni9FEE-JP, uni9FEF-JP, uni9FF0-CN, uni9FF1-CN,
    uni9FF2-CN, uni9FF3-CN, uni9FF4-CN, uni9FF5-CN, uni9FF6-CN,
    uni9FF7-CN, uni9FF8-CN, uni9FF9-CN, uni9FFA-CN, uni9FFB-CN,
    uni9FFC-CN, uni9FFD-CN, uni9FFE-CN, and uni9FFF-CN.
  * Fixed aj16-kanji.txt per Issue #125.
  * Fixed position of uni309B-V and uni309C-V per Issue #157.
  * Fixed HK mapping for U+752D 甭 per Issue #159.
  * Fixed CN mapping for U+5141 允 and U+535A 博 per Issue #162.
  * Remapped TW glyph for U+7239 爹 per Issue #167.
  * Restored JP glyph for U+5CB8 岸 per Issue #169.
  * Fixed mapping for U+F9DC 隆 per Issue #165.
  * Fixed interpolation bug in uni2299 ⊙ per Issue #181.
  * Fixed interpolation bugs in uni4B4C-CN 䭌 and uni4B55-CN 䭕 per
    Issue #193.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700568001">- Remove old specfile constructs, update descriptions</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1702468800">- add %reconfigure_fonts_prereq to the subpackages
  * required by the presence of the macro:
    %reconfigure_fonts_scriptlets -n &lt;subpackage-name&gt;</changelog>
</package>
<package pkgid="6fc7b324a7735be4258a0198f61de57f14e2a751a35443573df1be25801a8e5df6eaefc3de85b7ae7224126d5ccba71004410d9d85dd2f21225c833a105b9631" name="adobe-sourcesans3-fonts" arch="noarch">
  <version epoch="0" ver="3.052" rel="bp160.1.10"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1629115200">- Create new package to Source Sans 3, the successor of Source Sans
  Pro: the changes are too significant to replace the latter
  (boo#1189267)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1680609600">- Update to 3.052:
  * Adds Medium weight requested by user. (GitHub issue #253)
  * Updates the design of several glyphs to arrive at more compact
    vertical metrics</changelog>
</package>
<package pkgid="00269db6072abccc89bf1529fffabb140fa69b8a6377e54c9d68d79e3cfdd9fa1e9f2bf43675ac8931200ae56e6a59afa013e2631e5528737be1fe88b78bc29c" name="adobe-sourcesanspro-fonts" arch="noarch">
  <version epoch="0" ver="2.045" rel="bp160.1.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1367841600">- Update to version 1.050
  * Coordinated the vertical alignment of the tops of the letters
    across all the styles at the various sizes.</changelog>
  <changelog author="fa0sck@gmail.com" date="1370865600">- Install fonts without x-bit</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1404907200">- Update to version 2.010 for Roman styles:
  * Geometric shapes were made larger.
  * Adds narrow no-break space U+202F.
  * Updates kerning of small caps and adds small cap punctuation.
  * Adds Cyrillic and Greek support.
  * Updates size and shape of diacritics.
  * Adjusts superscript height to coordinate baseline of letters and numbers.
- Update to version 1.065 for Italic styles:
  * Geometric shapes were made larger.
  * Updates size and shape of diacritics.
  * Adjusts superscript height to coordinate baseline of letters and numbers.</changelog>
  <changelog author="fcrozat@suse.com" date="1444305600">- Update to version 2.020 for Roman styles:
  * Changed vendor ID to ADBO.
  * Updated x-height measurements in all fonts.
  * Updated name table to remove full license text from binary font
    files.
  * Removed NULL (U+0000) and CR (U+000D) glyphs from TrueType
    fonts.
- Update to version 1.075 for Italic styles:
  * Updated right side bearing of quotedblbase and kerning of
  * baseline quotes.
  * Added narrow no-break space (U+202F).
  * Moved fi and fl ligatures to the end of glyph order.
- Update url to github.com.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1558958400">- Update to version 2.045 (Roman) and 1.095 (Italic):
  * Bugfixes (too many to name here)
- Run through spec cleaner
- Only package the (better) otf fonts (following the Source Code
  Pro package)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1559131200">- Update source url</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1627560000">- Update to version 3.046
  * Roman and Italic now are the same version
  * The "pro" part of the name has been dropped, internally a number
    is now used: Source Sans 3
  * Update URL
  * This is a major release with many changes. See the release page
    for the details:
    https://github.com/adobe-fonts/source-sans/releases</changelog>
  <changelog author="tiwai@suse.de" date="1627560001">- Fixed github URL
- Fixed Source URL again; we take the full source zip instead of
  split release zip</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1628078400">- Add 31-adobe-sourcesanspro.conf so that old name still works</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1629115200">- Revert update to Source Sans 3 and keep the pro versions
  (boo#1189267)</changelog>
</package>
<package pkgid="d6529bc3137d015b0316065f327f0fc9fa132c76ef0a81ab0efa982c140ab7509a842690974d19bc728d8c87e9baea9acebd4e5f48185ad6366ce63dc38df7ab" name="adobe-sourceserif4-fonts" arch="noarch">
  <version epoch="0" ver="4.005" rel="bp160.1.10"/>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1629115200">- Create new package to Source Serif 4, the successor of Source Serif
  Pro: the changes are too significant to replace the latter
  (boo#1189267)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1674216000">- Update to 4.004: Minor fixes:
  * solve contextual kerning for the geminated l
  * fix hmtx issue in TTF VFs
  * fix substitution for io + combining mark</changelog>
</package>
<package pkgid="a0450809476e35cb1a0bc91cfbb02d0abe8623be4f99d419f67af856f38b2cef03a9a673eebe6d65c77cbeb044758b8fc15758c1f3a95775afbde025871a4be2" name="adobe-sourceserifpro-fonts" arch="noarch">
  <version epoch="0" ver="3.000" rel="bp160.1.2"/>
  <changelog author="robert.munteanu@gmail.com" date="1401192000">- Initial version</changelog>
  <changelog author="cornelis@solcon.nl" date="1523275200">- Update to 2.000
  * Changes 1.017:
    + Add ExtraLight, Light and Black weights.
    + Semibold and Bold were made heavier.
    + Lcommaaccent and lcommaaccent were added (missing in first release).
  * Changes 2.000:
    + Increase character set to Adobe Latin 4.
    + Add Greek (AG-1) &amp; Cyrillic (AC-2) writing systems.
    + Add Small Caps for all of the above.
    + Add superiors for Latin capitals.
- Update url to github.com</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1559649600">- Update to 2.010 (Roman) and 1.010 (Italic):
  * Italic variant is added
  * small fixes, mainly bugfixes
- Only package OTF (like the Sans and Code variants of Source Pro)</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1560600000">- Update to 3.000 (Roman and Italic have now the same version):
  Changes to Italic styles:
  * extend Latin character set from AL-3 to AL-4
  * add Cyrillic (covering AC-2)
  * add Greek (covering AG-1)
  Changes to Roman styles:
  * minor updates to spacing of modifer glyphs
  * updates to some Cyrillic characters as suggested by external
    advisors
  * minor updates to Cyrillic kerning
  * updates to some Greek characters as suggested by external
    advisors
  Global changes:
  * overhaul ccmp feature to decompose accented glyphs when
    followed by combining
  * mark, thus allowing double-stacking of accents (addresses
    [#41], #42)
  * add ccmp solution for Ukrainian її clash, also for Latin ïï
    (addresses #48)
  * add Bulgarian Cyrillic alternates both via locl and ss01 feature
    (addresses #20)
  * add Serbian/Macedonian Cyrillic alternates both via locl and
    ss02 feature
  Roman and Italic styles now support the same global character set,
  in both static and variable versions.</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1627560000">- Update to 4.004:
  Major update with the following highlights:
  * Source Serif now has six weights across five optical sizes
  * Shift text master in design space
  * Change the family name from Source Serif Pro to Source Serif 4</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1627560001">- Update description to reflect name change Source Sans</changelog>
  <changelog author="tiwai@suse.de" date="1627560002">- Fix download URL again; we take the full source zip instead of
  each split release zip</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1628078400">- Add 31-adobe-sourceserifpro.conf so that old name still works</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1629115200">- Revert update to Source Serif 4 and keep the pro version
  (boo#1189267)</changelog>
</package>
<package pkgid="db52a38956630b42da2d2a0782bf6edc3652eaccfd3ce6f07844953b0872f1cbe1c6a34853ec3c706a5e27fc2ce68dd8541a635f869a4dcc0a411fb72b27b353" name="adolc-devel" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1429704000">- Use source for url
- Do not pull autotools when they are not used
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1452513600">- update to version 2.6.0
  * Drivers for Lie-Derivatives (by Mirko Franke).
  * New extended interface for external functions, which may be used to
    interface to source transformation tools. Previous interface remains
    intact too.
  * Driver to compute the abs-normal form of piecewise smooth functions.
  * Mechanism to compute sparsity pattern of abs-normal form.
  * Interface to define passive parameters that can be changed before each
    trace interpretation. Major use case is Lagrange Multipliers.
  * Interface to AdjoinableMPI improved and debugged.
  * ADOL-C now uses boost (&gt;= 1.54) for increased execution speed if
    detected during build.
  * ADOL-C and all applications must be compiled using a C++11 compiler.
  * Many, many odd and sundry bugfixes.
  - added BuildRequires: boost-devel</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1465473600">- update to version 2.6.1
  * small assorted bugfixes</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1472990400">- upadte to version 2.6.2
  * fixes for corner case crashes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to version 2.6.3:
  * Fix bug in memory deallocation in taylor.c.
  * Reduced interface directional active gradient.</changelog>
  <changelog author="adam.majer@suse.de" date="1528718400">- Install license using %license
- Install documentation using %doc instead of manually
- Cleanup long description by only having one verbose copy in long
  description
- spec file cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Repair broken description ("the package ADOL-C [end of sentence]")
- Move main description to shared library subpackage since that
  will be installed most of the time (if and when some part of
  adolc is installed at all).</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- update to version 2.7.2
- upstream have changed location to github, change URLs accordingly
- run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- add handle-lib64-for-riscv64.patch</changelog>
</package>
<package pkgid="d529f4ca52d3cc12058a20f3d62cf283184d85667b0e81732ade28d69d3178f8c6f772ddae200c6aead62eeea4e5f374cca6942f6db8109a25511f472cb787c6" name="adolc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1429704000">- Use source for url
- Do not pull autotools when they are not used
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1452513600">- update to version 2.6.0
  * Drivers for Lie-Derivatives (by Mirko Franke).
  * New extended interface for external functions, which may be used to
    interface to source transformation tools. Previous interface remains
    intact too.
  * Driver to compute the abs-normal form of piecewise smooth functions.
  * Mechanism to compute sparsity pattern of abs-normal form.
  * Interface to define passive parameters that can be changed before each
    trace interpretation. Major use case is Lagrange Multipliers.
  * Interface to AdjoinableMPI improved and debugged.
  * ADOL-C now uses boost (&gt;= 1.54) for increased execution speed if
    detected during build.
  * ADOL-C and all applications must be compiled using a C++11 compiler.
  * Many, many odd and sundry bugfixes.
  - added BuildRequires: boost-devel</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1465473600">- update to version 2.6.1
  * small assorted bugfixes</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1472990400">- upadte to version 2.6.2
  * fixes for corner case crashes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to version 2.6.3:
  * Fix bug in memory deallocation in taylor.c.
  * Reduced interface directional active gradient.</changelog>
  <changelog author="adam.majer@suse.de" date="1528718400">- Install license using %license
- Install documentation using %doc instead of manually
- Cleanup long description by only having one verbose copy in long
  description
- spec file cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Repair broken description ("the package ADOL-C [end of sentence]")
- Move main description to shared library subpackage since that
  will be installed most of the time (if and when some part of
  adolc is installed at all).</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- update to version 2.7.2
- upstream have changed location to github, change URLs accordingly
- run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- add handle-lib64-for-riscv64.patch</changelog>
</package>
<package pkgid="ced75ca2068b3ed1d74b8d4eb934285bed52a0eb5ccebdc6839edd2239349ec2d3002e73b77eb764408c0da3584c4748b295aa723bfca6881d832d9dd2f82dc0" name="adolc-doc" arch="noarch">
  <version epoch="0" ver="2.7.2" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1429704000">- Use source for url
- Do not pull autotools when they are not used
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1452513600">- update to version 2.6.0
  * Drivers for Lie-Derivatives (by Mirko Franke).
  * New extended interface for external functions, which may be used to
    interface to source transformation tools. Previous interface remains
    intact too.
  * Driver to compute the abs-normal form of piecewise smooth functions.
  * Mechanism to compute sparsity pattern of abs-normal form.
  * Interface to define passive parameters that can be changed before each
    trace interpretation. Major use case is Lagrange Multipliers.
  * Interface to AdjoinableMPI improved and debugged.
  * ADOL-C now uses boost (&gt;= 1.54) for increased execution speed if
    detected during build.
  * ADOL-C and all applications must be compiled using a C++11 compiler.
  * Many, many odd and sundry bugfixes.
  - added BuildRequires: boost-devel</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1465473600">- update to version 2.6.1
  * small assorted bugfixes</changelog>
  <changelog author="kkhere.geo@gmail.com" date="1472990400">- upadte to version 2.6.2
  * fixes for corner case crashes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to version 2.6.3:
  * Fix bug in memory deallocation in taylor.c.
  * Reduced interface directional active gradient.</changelog>
  <changelog author="adam.majer@suse.de" date="1528718400">- Install license using %license
- Install documentation using %doc instead of manually
- Cleanup long description by only having one verbose copy in long
  description
- spec file cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Repair broken description ("the package ADOL-C [end of sentence]")
- Move main description to shared library subpackage since that
  will be installed most of the time (if and when some part of
  adolc is installed at all).</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- update to version 2.7.2
- upstream have changed location to github, change URLs accordingly
- run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- add handle-lib64-for-riscv64.patch</changelog>
</package>
<package pkgid="e05129c0ee3a22285b3b82aaf5e9b4b25190bfc79e797e09cacb742f468c41c17f0ddf5c6faee9e423d0cea26402d0313d72db09892d14c045e01adcbcbbc11f" name="adplugdb" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="bp160.1.13"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt;" date="1215432000">- new package</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt;" date="1215604800">- added missing Requires in -devel subpackage</changelog>
  <changelog author="Markus Rex &lt;msrex@msrex.de&gt;" date="1539518400">- remove debug-package definition for non-suse distros</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676289600">- Specfile overhaul
- Upstream moved to github: adjust URL, source
- Update to version 2.3.3
  * New RAD player by devinacker
  * Many bug fixes by Alexander Miller
    + CVE-2019-14690 - buffer overflow in .bmf
    + CVE-2019-14691 - buffer overflow in .dtm
    + CVE-2019-14692 - buffer overflow in .mkj
    + CVE-2019-14732 - buffer overflow in .a2m
    + CVE-2019-14733 - buffer overflow in .rad
    + CVE-2019-14734 - buffer overflow in .mtk
    + CVE-2019-15151 - double free and OOB reads in .u6m
    + OOB reads in .xad
    + OOB reads in .rix
- Update to versoin 2.3.2
  * Mostly bug fixes.
- Update to versoin 2.3.1
  * Minor fixes to the build system for performance and
    compatibility.
  * Fix for Linux on more esoteric arches.
- Update to versoin 2.3.0
  * It's been over seven years since the last release, and a lot
    of work has been going on in that time. There are new file
    formats and many bug fixes.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676980800">- Fix runtime requirements for adplugdb</changelog>
</package>
<package pkgid="29ebd4b686bcb660388887c7da2b8778b9754941e7278ba9e924c6e27010828a300bb7f74e20cf0fefa3de114734f2338203a1c8aaf2b4cbfec7263aca63a86d" name="adriconf" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="bp160.1.13"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589025600">- Update to version 1.7:
  * Add IT translation. @albanobattistella
  * Fix incorrect handling of system wide options when multiple
    drivers are defined. @jlhertel
  * Add option to change default config directories. @jlhertel
  * Add code of conduct. @jlhertel</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604491200">- Update to version 2.4:
  * Renamed application from br.com.jeanhertel.adriconf to
    org.freedesktop.adriconf.
  * Handle string and float options.
  * Add Polish translations. @baryluk
  * Make various cosmetic fixes.
- Changes for older versions in 2.* series:
  * Rename application to org.freedesktop.adriconf
  * Make sure themes don't add shadows to button.
  * Add tooltips to add profile screen.
  * Fix Spin Button fields, so that increment/decrement fields are
    correctly visible.
  * Improve Switch buttons with more visible colors.
  * Small fix fox incorrect shadows with default GTK+ theme.
  * User Interface is dark by default
  * Completely removed dialogs and replaced them with screens,
    giving a more natural navigation.
  * Profiles are now saved independently giving the user more
    control on what to save.
  * Mesa-defined profiles are not shown anymore, avoiding previous
    confusion on what the user added and what is defined by mesa
    itself.
  * Better validate when the user adds a new profile.
  * Bug-fix: When switching the GPU on PRIME settings now we keep
    the same application selected.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.4.1
  * No source changes
- Fixed dependencies
  * GTK+ 0.24+ is required for ComboBoxExtra
  * libXML++ is also supported in version 5 (used in Factory)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648468800">- Update to version 2.5.0:
  * No changelog provided</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1670328000">- Update to version 2.5.1:
  * No changelog provided</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678881600">- Update to version 2.6.0:
  * No changelog provided</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1680004800">- Add fix-missing-include.patch: Add missing include exposed by
  gcc13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685102400">- Update to version 2.7.0:
  * Adjusted app to better handle very small screens
  * Dropped dependency on X11
  * Support new executable_regexp and sha1 profile attributes</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1696939200">- Update to version 2.7.1:
  * Fix build with GCC 13
- The fix-missing-include.patch was removed from the package.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1721649600">- Update to version 2.7.11:
  * Updated dependencies</changelog>
</package>
<package pkgid="663ff98ad4373049d74c7fc7d65441a7c4c408ca52ed935a2c3215b66beb65895563f0ff8f037f7de3e9cf7fbe44e152d3b0ee4d3275f82eb844fcfa7c8ba468" name="adriconf-lang" arch="noarch">
  <version epoch="0" ver="2.7.2" rel="bp160.1.13"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589025600">- Update to version 1.7:
  * Add IT translation. @albanobattistella
  * Fix incorrect handling of system wide options when multiple
    drivers are defined. @jlhertel
  * Add option to change default config directories. @jlhertel
  * Add code of conduct. @jlhertel</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604491200">- Update to version 2.4:
  * Renamed application from br.com.jeanhertel.adriconf to
    org.freedesktop.adriconf.
  * Handle string and float options.
  * Add Polish translations. @baryluk
  * Make various cosmetic fixes.
- Changes for older versions in 2.* series:
  * Rename application to org.freedesktop.adriconf
  * Make sure themes don't add shadows to button.
  * Add tooltips to add profile screen.
  * Fix Spin Button fields, so that increment/decrement fields are
    correctly visible.
  * Improve Switch buttons with more visible colors.
  * Small fix fox incorrect shadows with default GTK+ theme.
  * User Interface is dark by default
  * Completely removed dialogs and replaced them with screens,
    giving a more natural navigation.
  * Profiles are now saved independently giving the user more
    control on what to save.
  * Mesa-defined profiles are not shown anymore, avoiding previous
    confusion on what the user added and what is defined by mesa
    itself.
  * Better validate when the user adds a new profile.
  * Bug-fix: When switching the GPU on PRIME settings now we keep
    the same application selected.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.4.1
  * No source changes
- Fixed dependencies
  * GTK+ 0.24+ is required for ComboBoxExtra
  * libXML++ is also supported in version 5 (used in Factory)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648468800">- Update to version 2.5.0:
  * No changelog provided</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1670328000">- Update to version 2.5.1:
  * No changelog provided</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1678881600">- Update to version 2.6.0:
  * No changelog provided</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1680004800">- Add fix-missing-include.patch: Add missing include exposed by
  gcc13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685102400">- Update to version 2.7.0:
  * Adjusted app to better handle very small screens
  * Dropped dependency on X11
  * Support new executable_regexp and sha1 profile attributes</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1696939200">- Update to version 2.7.1:
  * Fix build with GCC 13
- The fix-missing-include.patch was removed from the package.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1721649600">- Update to version 2.7.11:
  * Updated dependencies</changelog>
</package>
<package pkgid="8ae3ab552de092c0fca6270bff32ea7b596352246954216f3d29289947e04ead759b7145a7a248534875828a68138d721a5ee2133cdbbad6edd16b2116aea334" name="adwaita-fonts" arch="noarch">
  <version epoch="0" ver="48.2" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1738152000">- Initial packaging for openSUSE.</changelog>
</package>
<package pkgid="994b4a9e1e8ab684c68efe45d0d375461140388ecce151111766f8eab77015c75aec98e2cddbc6424df6686f58e17e1b10efa49c68ed4fae29db5bffcdb7d04a" name="adwaita-icon-theme" arch="noarch">
  <version epoch="0" ver="48.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1706011200">- Create symlinks for hand2, xterm and left_ptr cursors
  (glgo#GNOME/adwaita-icon-theme#274).</changelog>
  <changelog author="dimstar@opensuse.org" date="1707739200">- Update to version 46.beta:
  + cursors: clean up shapes, sync DND metaphors with macos.
  + symbolic: revert about metaphor.
  + symbolic: shared screen metaphor update.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Update to version 46.beta+6:
  + build: Reinstate symlinks from X11 cursor names to closest CSS
    names.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Update to version 46.rc:
  + cursors: fix windows build.
  + cursors: reinstate some x11 cursor names.
  + symbolic: thunderbolt, phone &amp; export fixes.
  + index.theme: remove duplicate entries .</changelog>
  <changelog author="dimstar@opensuse.org" date="1710849600">- Update to version 46.0:
  + Stable release: no changes since 46.rc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716811200">- Update to version 46.2:
  + inherit from AdwaitaLegacy.
  + symbolic: mic icons -- more opaque and legible in shell's top
    bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1726488000">- Update to version 47.0:
  + cursors: updated spinners to match libadwaita.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1735905600">- Update to version 48.alpha:
  + cursors: adjust asset sizing to feel more linear.
  + Build cleanup.
  + symbolic:
  - power profile metaphors.
  - pan icons.
  - remove emblems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738670400">- Update to version 48.beta:
  + Drop spinner (process-working). Libadwaita provides one.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1741953600">- Update to version 48.0:
  + symbolic: pan-* old design was in place for -rtl
  + cursors: added dnd-ask on gtk request</changelog>
</package>
<package pkgid="b423835ded9858958aaa9e30cc4bf3dfb3c8bb005055548e17e0fea010bd0dabf5b949f577b9841515610e8a74915fb9fd3d312832e865e92296e41535361cbe" name="adwaita-icon-theme-legacy" arch="noarch">
  <version epoch="0" ver="46.2" rel="bp160.1.10"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716811200">- Initial package, version 46.2.</changelog>
</package>
<package pkgid="ec0755c60a46d133f5decb3a76100c3dd2dac185b19752bf836f25ae1e10573d1d09449c670e3ff0bfb7afffcc23c06719a02fb4bf1a4190ba51cdec0d185644" name="adwaita-xfce-icon-theme" arch="noarch">
  <version epoch="0" ver="0.0.4+git0.b33d65a" rel="bp160.1.10"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1653048000">- Initial build</changelog>
  <changelog author="mauriziogalli@opensuse.org" date="1653048001">- Update to version 0.0.1+git0.e151182:
  * Just a release for the initial build</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1656331200">- Add obsolete openSUSE-xfce-icon-theme because upstream project is
  replaced by adwaita-xfce.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1656417600">- Fix Provides/Obsoletes mechanism in spec file</changelog>
  <changelog author="mauriziogalli@opensuse.org" date="1656590400">- Update to version 0.0.2+git0.ee9b710:
  * Added multimedia-player icon
  * Added camera-photo icon</changelog>
  <changelog author="mauriziogalli@opensuse.org" date="1674129600">- Update to version 0.0.3+git0.e0f73b9:
  * Add properly scaled phone icon
  * Fix up entries in index.theme</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676116800">- Dependency adwaita-icon-theme needs to be explicit</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1712577600">- Update to version 0.0.4+git0.b33d65a
  * Remove superfluous /apps directory from index.theme</changelog>
</package>
<package pkgid="b0cd9b89f5d06226aa4c0a1e48bedd68a5003914da1e9ba5aa90b3fbaaa011ea2ce18cb88da666c94f3e73e7438f977ec42012410a01d882d351beb69385d9b1" name="aelfred" arch="noarch">
  <version epoch="0" ver="7.0" rel="bp160.1.12"/>
  <changelog author="tchvatal@suse.com" date="1405080000">- Cleanup with spec-cleaner and do not version javadoc dir.</changelog>
  <changelog author="sfalken@opensuse.org" date="1407499200">- Updated to 7.0
  * Changed the package name to net.sf.saxon.aelfred to prevent any accidental confusion with the original Microstar code or with David Brownell's version.
  * Fixed several bugs: (1) a bug in namespace handling (where an attribute xxx:name precedes the xmlns:xxx declaration) (2) poor diagnostics when end of file occurs prematurely
  * Subsetting the code to include only the XML non-validating parser and SAX driver, with appropriate changes to the setFeature() and getFeature() methods.
  * Some further changes made by David Brownell up to June 2001 have been incorporated.
- Rebased aelfred-icedtea-build.patch for new source
- Added: aelfred7_0.zip
- Deleted: aelfred.zip
- Updated URLs in specfile</changelog>
  <changelog author="sfalken@opensuse.org" date="1407499201">- Uploading proper patch, so things will build</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Specify java source level 1.6 to allow building with jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Generate javadoc without timestamp to make build reproducible
  (boo#1047218)</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647691200">- Added patch:
  * aelfred-javadoc.patch
    + fix build with javadoc 17</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727611200">- Fix build after removal of the default %%{java_home} define
- Refactor the spec file to actually build the jar and not just
  to distribute the prebuilt one</changelog>
</package>
<package pkgid="e986fde488f654da955cdcdec6283d7ab36e16acbfa3bfe3d58b32a46628e6b0cb97ab38e395e45d9be766da0f863920f0992bd7928698a4fc6735439e35c9dc" name="aelfred-javadoc" arch="noarch">
  <version epoch="0" ver="7.0" rel="bp160.1.12"/>
  <changelog author="tchvatal@suse.com" date="1405080000">- Cleanup with spec-cleaner and do not version javadoc dir.</changelog>
  <changelog author="sfalken@opensuse.org" date="1407499200">- Updated to 7.0
  * Changed the package name to net.sf.saxon.aelfred to prevent any accidental confusion with the original Microstar code or with David Brownell's version.
  * Fixed several bugs: (1) a bug in namespace handling (where an attribute xxx:name precedes the xmlns:xxx declaration) (2) poor diagnostics when end of file occurs prematurely
  * Subsetting the code to include only the XML non-validating parser and SAX driver, with appropriate changes to the setFeature() and getFeature() methods.
  * Some further changes made by David Brownell up to June 2001 have been incorporated.
- Rebased aelfred-icedtea-build.patch for new source
- Added: aelfred7_0.zip
- Deleted: aelfred.zip
- Updated URLs in specfile</changelog>
  <changelog author="sfalken@opensuse.org" date="1407499201">- Uploading proper patch, so things will build</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Specify java source level 1.6 to allow building with jdk9</changelog>
  <changelog author="bwiedemann@suse.com" date="1515585600">- Generate javadoc without timestamp to make build reproducible
  (boo#1047218)</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647691200">- Added patch:
  * aelfred-javadoc.patch
    + fix build with javadoc 17</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727611200">- Fix build after removal of the default %%{java_home} define
- Refactor the spec file to actually build the jar and not just
  to distribute the prebuilt one</changelog>
</package>
<package pkgid="751e7a6af3c8cb946e5b801a41fa9718f90cc79a6032c0693f66f2059d65a41c2b4e7997f5e36531acf99f5e2fa6e2643718ff7f5ff2b71efe23d285a1ed415a" name="aerc" arch="x86_64">
  <version epoch="0" ver="0.18.2" rel="bp160.1.16"/>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1691323200">- Add dante and w3m to Recommends due to html filters.</changelog>
  <changelog author="Hannes Braun &lt;apple.hannes@gmail.com&gt; - 0.16.0" date="1695902400">- Update to upstream version 0.16.0
  * JMAP support.
  * The new account wizard now supports all source and outgoing backends.
  * Edit email headers directly in the text editor with "[compose].edit-headers"
    in aerc.conf or with the "-e" flag for all compose related commands (e.g.
    ":compose", ":forward", ":recall", etc.).
  * Use ":save -A" to save all the named parts, not just attachments.
  * The "&lt;Backspace&gt;" key can now be bound.
  * "colorize" can style diff chunk function names with "diff_chunk_func".
  * Warn before sending emails with an empty subject with
    "empty-subject-warning" in aerc.conf.
  * IMAP now uses the delimiter advertised by the server.
  * carddav-query utility to use for "address-book-cmd".
  * Folder name mapping with "folder-map" in accounts.conf.
  * Use ":open -d" to automatically delete temporary files.
  * Remove headers from the compose window with ":header -d &lt;name&gt;".
  * ":attach -r &lt;name&gt; &lt;cmd&gt;" to pipe the attachments from a command.
  * New "msglist_gutter" and `msglist_pill` styles for message list scrollbar.
  * New "%f" placeholder to "file-picker-cmd" which expands to a location of a
    temporary file from which selected files will be read instead of the
    standard output.
  * Save drafts in custom folders with ":postpone -t &lt;folder&gt;".
  * View "thread-context" in notmuch backends with ":toggle-thread-context".
  * ":archive" now works on servers using a different delimiter.
  * ":save -a" now works with multiple attachments with the same filename.
  * ":open" uses the attachment extension for temporary files, if possible.
  * Fixed memory leak when using notmuch with threading.
  * Names formatted like "Last Name, First Name" are better supported in
    templates
  * Composing an email is now aborted if the text editor exits with an error
    (e.g. with "vim", abort an email with ":cq").
  * Aerc builtin filters path (usually "/usr/libexec/aerc/filters") is now
    prepended to the default system "PATH" to avoid conflicts with installed
    distro binaries which have the same name as aerc builtin filters (e.g.
    "/usr/bin/colorize").
  * ":export-mbox" only exports marked messages, if any. Otherwise it exports
    everything, as usual.
  * The local hostname is no longer exposed in outgoing "Message-Id" headers by
    default. Legacy behaviour can be restored by setting "send-with-hostname
    = true" in accounts.conf.
  * Aerc now has a default style for most UI elements. The "default" styleset is
    now empty. Existing stylesets will only override the default attributes if
    they are set explicitly. To reset the default style and preserve existing
    stylesets appearance, these two lines must be inserted at the beginning:
  * .default=true
  * .normal=true
- Update fix-script-interpreter.patch to patch the shebang of carddav-query</changelog>
  <changelog author="Hannes Braun &lt;apple.hannes@gmail.com&gt; - 0.17.0" date="1706788800">- Update to upstream version 0.17.0
  * New flagged criteria for :sort.
  * New :send-keys command to control embedded terminals.
  * Account aliases now support fnmatch-style wild cards.
  * New :suspend command bound to &lt;C-z&gt; by default.
  * Disable parent context bindings by declaring them empty.
  * Toggle folding with ":fold -t".
  * mail-deleted hook that triggers when a message is removed/moved from a
    folder.
  * mail-added hook that triggers when a message is added to a folder.
  * Improved command completion.
  * Customize key to trigger completion with $complete in binds.conf.
  * Setting complete-min-chars=manual in aerc.conf now disables automatic
    completion, leaving only manually triggered completion.
  * .ThreadUnread is now available in templates.
  * Allow binding commands to Alt+&lt;number&gt; keys.
  * AERC_ACCOUNT and AERC_ADDRESS_BOOK_CMD are now defined in the editor's
    environment when composing a message.
  * Reply with a different account than the current one with ":reply -A
    &lt;account&gt;".
  * New [ui].tab-title-viewer setting to configure the message viewer tab title.
  * The {{.Subject}} template is evaluated to the new option
    [ui].empty-subject if the subject is empty.
  * Change to a folder of another account with ":cf -a &lt;account&gt; &lt;folder&gt;".
  * Patch management with :patch.
  * Add file path to messages in templates as {{.Filename}}.
  * New :menu command to invoke other ex-commands based on a shell command
    output.
  * CLI flags to override paths to config files.
  * Automatically attach signing key with pgp-attach-key in accounts.conf.
  * Copy messages across accounts with ":cp -a &lt;account&gt; &lt;folder&gt;".
  * Move messages across accounts with ":mv -a &lt;account&gt; &lt;folder&gt;".
  * Support the draft flag.
  * Thread arrow prefixes are now fully configurable.
  * colorize support for wild cards "?" and "*".
  * Selection of headers in composer after ":compose -e" followed by ":edit -E".
  * Don't lose child messages of non-queried parents in notmuch threads
  * Notmuch folders defined by the query "*" handle search, filter, and unread
    counts correctly.
  * :open commands are now executed with "sh -c".
  * ":pipe" commands are now executed with "sh -c".
  * Message viewer tab titles will now show "(no subject)" if there is no
    subject in the viewed email.
  * Signature placement is now controlled via the {{.Signature}} template
    variable and not hard coded.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712318400">- Use full URL for package source (for tarball verification
  purposes).
- Use _service file to collect vendored sources in separate
  vendor.tar.zstd file.
- Set HOME to working dir to allow cache generation.
- Empty %check section as recommended by rpmlint.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713441600">- Build without date to improve reproducibility
- Enable and run tests</changelog>
  <changelog author="Hannes Braun &lt;apple.hannes@gmail.com&gt;" date="1715342400">- Set locale to UTF-8 when testing filters</changelog>
  <changelog author="Hannes Braun &lt;apple.hannes@gmail.com&gt; - 0.18.0" date="1719921600">- Update to upstream version 0.18.0
  * Add [ui].msglist-scroll-offset option to set a scroll offset for the
    message list.
  * Add new :align command to align the selected message at the top, center, or
    bottom of the message list.
  * Inline image previews when no filter is defined for image/* and the terminal
    supports it.
  * Add :bounce command to reintroduce messages into the transport system.
  * Message counts are available in statusline templates.
  * Execute IPC commands verbatim by providing the command and its args as a
    single argument in the shell.
  * Virtually any key binding can now be configured in binds.conf, including
    Shift+Alt+Control modifier combinations.
  * Configure default message list :split or :vsplit on startup with
    message-list-split in aerc.conf.
  * Create notmuch named queries with the :query command.
  * Specify a ":q" alias for quit.
  * The :detach command now understands globs similar to :attach.
  * Match filters on filename via ".filename,~&lt;regexp&gt; =".
  * Tell aerc how to handle file-based operations on multi-file notmuch messages
    with the account config option multi-file-strategy and the -m flag to
    :archive, :copy, :delete, and :move.
  * Add [ui].dialog-{position,width,height} to set the position, width and
    height of popover dialogs.
  * New pgp-self-encrypt option in accounts.conf.
  * Add --no-ipc flag to run "aerc mailto:...", "aerc mbox:...", and
    "aerc :&lt;command...&gt;" within the current aerc instance and prevent listening
    for IPC calls from other aerc instances.
  * Add config options disable-ipc-mailto and disable-ipc-mbox to make
    mailto:... and mbox:... commands always run in a new aerc instance.
  * Set global options in accounts.conf by placing them at the top of the file.
  * Silently close the terminal tab after piping a message to a command with
    ":pipe -s &lt;cmd&gt;".
  * New tag-modified hook for notmuch and JMAP accounts.
  * New flag-changed hook.
  * Add Notmuch search term completions to :query.
  * Add Notmuch completions for :cf, :filter and :search.
  * Add imaps+insecure to the available protocols, for connections that should
    ignore issues with certificate verification.
  * Add [ui].select-last-message option to position cursor at the bottom of the
    view.
  * Propagate terminal bell from the built-in terminal.
  * Added AERC_FOLDER_ROLE to hooks that have AERC_FOLDER.
  * Added {{.AccountBackend}} to templates.
  * Added AERC_ACCOUNT_BACKEND to hooks with AERC_ACCOUNT.
  * Per folder key bindings can now be defined for the message viewer.
  * Allow using existing directory name with ":query -f".
  * Allow specifying the folder to delete with :rmdir.
  * The address book is now used for :cc, :bcc and :forward.
  * Allow fallback to threading by subject with [ui].threading-by-subject.
  * Calendar responses now ignore case.
  * Allow account- and folder-specific binds to coexist.
  * Fixed crash when running :send with a :preview tab focused.
  * Deadlock when running "aerc mailto:foo@bar.com" without another instance of
    aerc already running.
  * Prevent a freeze for large-scale deletions with IMAP.
  * Mime-Version is no longer inserted in signed text parts headers. MTAs
    normalizing header case will not corrupt signatures anymore.
  * Restore previous behaviour of the new message bell which was broken in the
    last two releases for at least some setups.
  * The default [ui] settings and the "default" styleset have changed
    extensively. A no-color theme can be restored with the "monochrome"
    styleset.
  * The default "colorize" theme has been changed to use the base terminal
    colors.
  * The [viewer] section of stylesets now preserve default values as documented
    in aerc-stylesets(7) unless explicitly overridden.
  * Add Message-ID to the variables of [hooks].mail-received.
  * The TrayInfo template variable now includes a visual mark mode indicator.
  * The disable-ipc option in aerc.conf completely disables IPC.
  * Improved readability of the builtin calendar filter.
  * :open commands now preserve the original filename.
  * Unparsable accounts are skipped, instead of aerc exiting with an error.
  * Built-in descriptions for the default keybinds shown on the review screen
    will be deprecated in a future release. Descriptions can be added to those
    keybinds with inline comments in binds.conf.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1720612800">- Update license to GPL-3.0-or-later -- See mailing list
  https://lists.sr.ht/~sircmpwn/aerc/%3CCKGCI4U5ATJ4.SFCCWY4TB0M7@marty%3E</changelog>
  <changelog author="Hannes Braun &lt;apple.hannes@gmail.com&gt; - 0.18.1" date="1721044800">- Update to upstream version 0.18.1
  * Fixed startup error if "log-file" directory does not exist.
  * Aerc is now less pedantic about invalid headers for the maildir and notmuch
    backends.
  * Error when trying to configure smtp-domain with STARTTLS enabled.
  * smtp-domain is now properly taken into account for TLS connections.</changelog>
  <changelog author="Hannes Braun &lt;apple.hannes@gmail.com&gt; - 0.18.2" date="1722254400">- Update to upstream version 0.18.2
  * Fixed builtin calendar filter error with non-GNU Awk.
  * Fixed detection of unicode width measurements on tmux 3.4.
  * Fixed dropping of events during large pastes.
  * Fixed Home and End key decoding for the st terminal.</changelog>
</package>
<package pkgid="a5219b8583b7c793d863e9d02b894866bee441c0b5b2ffe08271377ead68625330cd30cdd6da5be1388053dc07cfd0550e4c99741157b50b09c31f90e05ea257" name="aespipe" arch="x86_64">
  <version epoch="0" ver="2.4h" rel="bp160.1.13"/>
  <changelog author="mpluskal@suse.com" date="1496664000">- Fix building on Factory (disable pie building)</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 2.4e
  * Added workaround for gpg 2 pinentry-mode bug.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596024000">- Update to 2.4f
  * Fixed configure script mis-detection of "labels need underline
    prefix" on Fedora. Fix from Jiri Hladky.
  * Added configure script autodetection for x86/amd64 -fno-pie compile
    and -no-pie linker flags. These are needed when compiler/linker
    produces position independent executable (PIE) by default.
- Run spec-cleaner
- Add source verification</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1623758400">- Disable LTO for aarch64, %{arm} and ppc64le as a workaround for boo#1187352</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1624881600">- Disable LTO everywhere (bsc#1187352)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634817600">- Re-enable LTO, but disable strict aliasing - boo#1187352</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668513600">- Homepage link http://loop-aes.sourceforge.net/ is a permanent
  redirect to its HTTPS counterpart https://loop-aes.sourceforge.net/</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1706270400">- Update to version 2.4g:
  * Added configure script autodetection for -fno-strict-aliasing compile
    flag. This option is needed with some compilers that miscompile code
    when link-time-optimization is used.</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1725278400">- Update to version 2.4h:
  * Added assembler implementations of AES for 32-bit arm and 64-bit arm64
  0001-Fix-Build.patch: fix the build failure of Leap 15.5 and 15.6 on OBS</changelog>
</package>
<package pkgid="7e44bd6057194980e829e90007671a22e83fb2c4a4325ddae6051cfd96196bc499aa41a838e612e96348fe6efca86040f84f75761b548fadb7b0a2cc8d88a7e2" name="afl" arch="x86_64">
  <version epoch="0" ver="4.33c" rel="bp160.1.2"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1733227200">- updated to 4.30c
  - afl-gcc and afl-clang funcionality is now removed
  - afl-fuzz:
  - fastresume feature added. if you abort fuzzing and resume fuzzing
    with `-i -` or `AFL_AUTORESUME=1` and the target binary has not changed
    then a dump will be loaded and the calibration phase skipped.
    to disable this feature set `AFL_NO_FASTRESUME=1`
    zlib compression is used if zlib is found at compile time
  - improved seed selection algorithm
  - added `AFL_CUSTOM_MUTATOR_LATE_SEND=1` to call the custom send()
    function after the target has been restarted.
  - because of bad math and undefined behaviour fixes we have to change
    the CMPLOG map. **YOU NEED TO RECOMPILE CMPLOG TARGETS**
  - fixed custom_post_process for calibration
  - fixes for AFL_EXIT_ON_TIME and AFL_EXIT_WHEN_DONE, changed behaviour of
    AFL_EXIT_WHEN_DONE to finish when really done :-)
  - frida_mode:
  - AFL_FRIDA_PERSISTENT_ADDR can now be be any reachable address not just
    a function entry
  - AFL_DEBUG is now the same as AFL_FRIDA_VERBOSE
  - AFL_FRIDA_DEBUG_MAPS now works as expected
  - qemu_mode:
  - new hooks supported (optional), see qemu_mode/hooking_bridge - thanks to
    @CowBoy4mH3LL
  - unicorn_mode:
  - fix install and forkserver (thanks aarnav!)
  - pin unicorn version
  - nyx_mode:
  - bugfixes
  - custom mutators:
  - custom_send_tcp custom mutator added, thanks to @dergoegge
  - afl-cc
  - fix to support pointless changes in LLVM 20
  - new runtime (!) variable: `AFL_OLD_FORKSERVER` to use the old vanilla
    AFL type forkserver. Useful for symcc/symqemu/nautilus/etc. with
    AFL_LLVM_INSTRUMENT=CLASSIC
  - new compile time variable: `AFL_OPT_LEVEL` to set a specific optimization
    level, default is `3`
  - correctly explain how to get the correct map size for large targets
  - small fix for weird LLVM defines in redhat
  - code formatting updated to llvm 18
  - improved custom_mutators/aflpp/standalone/aflpp-standalone
  - added custom_mutators/autotokens/standalone/autotokens-standalone
  - AFL++ headers are now installed to $PREFIX/include/afl</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1737460800">- Bump BuildRequires to llvm &gt;= 17
  - This fixes afl-clang-fast and afl-clang-lto on Tumbleweed (boo#1236169)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1739275200">- updated to 4.31c
  - SAND mode added (docs/SAND.md) for more effecient fuzzing with sanitizers
    (thanks to @wtdcode !)
  - afl-fuzz:
  - splicing phase is now DISABLED by default because research showed
    it is counterproductive. New command line parameter `-u` to enable
    it. Splicing is auto-enabled if two cycles without finds happen.
  - Python 3.13+ support
  - loose file and shared memory permissions on Android and iPhone
  - afl-cc:
  - LLVM 20 support (again - please don't change the API all the time ...)
  - -fsanitize=fuzzer now inserts libAFLDriver.a addtionally early to help
    compiling if LLVMFuzzerTestOneOnput is in an .a archive
  - added __sanitizer_weak_hook_* functions (in case that is helpful in
    weird setups)
  - fix bug with large map sizes when multiple libraries are loaded after
    the shared memory was obtained.
- 0001-fix-32-bit-compile.patch: fix 32bit builds</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1745841600">- updated to 4.32c
  - Fixed a bug where after a fast restart of a full fuzzed corpus afl-fuzz
    terminates with "need at least one valid input seed that does not crash"
    Small improvements to afl-*-config
  - afl-fuzz:
  - memory leak fixes by @kcwu - thanks!
  - many more nits and small memory saves thanks to @kcwu
  - remove deprecated files from queue/.state
  - fix bitmap update function if no current trace is present
  - fix for afl_custom_queue_get
  - various small nits
  - afl-cc:
  - fix pass support for LLVM 20 (passes were run too early)
  - dropped plugin support for LLVM 13
  - fix AFL_OLD_FORKSERVER
  - various minor fixes
  - frida_mode:
  - fixes for new MacOS + M4 hardware
- 0001-fix-32-bit-compile.patch: upstream</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1747396800">- require exact gcc it was built with to avoid gcc version mismatches
  (bsc#1243255)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1751284800">- updated to 4.33c
  - afl-fuzz:
  - Use `AFL_PRELOAD_DISCRIMINATE_FORKSERVER_PARENT` if you use AFL_PRELOAD
    to disable fork, see docs (thanks to @alexandredoyen29)
  - Fix for FAST power schedules (introduced in 4.32c) (thanks to @kcwu)
  - Colors for NO_UI output (thanks to @smoelius)
  - Fix potential sync issues when resuming sessions and when instances in a
    campaign are restarted and skip entries that were synced from itself
    (thanks to @kcwu for raising the issues and providing support!)
  - Fix for when fast resuming failed
  - more 64 bit archicture support by @maribu
  - afl-cc:
  - Added instrumenting hidden edges (approx 5% edges were not instrumented,
    LLVM sancov overall misses 8% of edges compared to our implementation)
    Note that is is currently only implemented for our PCGUARD plugin, not
    LTO, CLASSIC, etc.!
  - Fix to make AFL_SAN_NO_INST work with gcc_plugin
  - MacOS aflpp driver compilation fix (-fsanitize=fuzzer implementation)
  - Make AFL_DUMP_MAP_SIZE work even if the target has sanitizer issues
  - qemuafl:
  - Better MIPS persistent mode support
  - `AFL_EXITPOINT` support added
  - `AFL_QEMU_BLOCK_COV` block coverage support added
  - afl-cmin:
  - New afl-cmin.py which is much faster, will be executed by default via
    afl-cmin if it executes successfully (thanks to @kcwu!)
  - Nyx mode now fully works for minimizing (with afl-cmin.py which is
    called by afl-cmin if python is available) - before the map size was
    fixed and so large targets lost coverage.
  - New desocketing library: utils/libaflppdesock
  - Likely works when all other desocketing options fail
  - nyx_mode:
  - Properly determine map size</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1751976000">- Add loongarch64 to the list of 64-bit architectures</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1752062400">- Add loongarch64 to the list of 32-bit architectures</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1753876800">- Fix Leap 16.0 build
  * no dummy gcc-devel in SLFO</changelog>
</package>
<package pkgid="12b48fafa5483862afedad5f9eca27be6b58f92db0dfabb838549be7cd6cfac57e73911fd137b826cd6b28743cee60fcf2a92a7a8cf945eaa424eb40761815dc" name="afl-devel" arch="x86_64">
  <version epoch="0" ver="4.33c" rel="bp160.1.2"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1718020800">- updated to 4.21c
  * afl-fuzz
  - fixed a regression in afl-fuzz that resulted in a 5-10% performace loss
    do a switch from gettimeofday() to clock_gettime() which should be rather
    three times faster. The reason for this is unknown.
  - new queue selection algorithm based on 2 core years of queue data
    analysis. gives a noticable improvement on coverage although the results
    seem counterintuitive :-)
  - added AFL_DISABLE_REDUNDANT for huge queues
  - added `AFL_NO_SYNC` environment variable that does what you think it does
  - fix AFL_PERSISTENT_RECORD
  - run custom_post_process after standard trimming
  - prevent filenames in the queue that have spaces
  - minor fix for FAST schedules
  - more frequent stats update when syncing (todo: check performance impact)
  - now timing of calibration, trimming and syncing is measured seperately,
    thanks to @eqv!
  - -V timing is now accurately the fuzz time (without syncing), before
    long calibration times and syncing could result in now fuzzing being
    made when the time was already run out until then, thanks to @eqv!
  - fix -n uninstrumented mode when ending fuzzing
  - enhanced the ASAN configuration
  - make afl-fuzz use less memory with cmplog and fix a memleak
  * afl-cc:
  - re-enable i386 support that was accidently disabled
  - fixes for LTO and outdated afl-gcc mode for i386
  - fix COMPCOV split compare for old LLVMs
  - disable xml/curl/g_ string transform functions because we do not check
    for null pointers ... TODO
  - ensure shared memory variables are visible in weird build setups
  - compatability to new LLVM 19 changes
  * afl-cmin
  - work with input files that have a space
  * afl-showmap
  - fix memory leak on shmem testcase usage (thanks to @ndrewh)
  - minor fix to collect coverage -C (thanks to @bet4it)
  * Fixed a shmem mmap bug (that rarely came up on MacOS)
  * libtokencap: script generate_libtoken_dict.sh added by @a-shvedov</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1733227200">- updated to 4.30c
  - afl-gcc and afl-clang funcionality is now removed
  - afl-fuzz:
  - fastresume feature added. if you abort fuzzing and resume fuzzing
    with `-i -` or `AFL_AUTORESUME=1` and the target binary has not changed
    then a dump will be loaded and the calibration phase skipped.
    to disable this feature set `AFL_NO_FASTRESUME=1`
    zlib compression is used if zlib is found at compile time
  - improved seed selection algorithm
  - added `AFL_CUSTOM_MUTATOR_LATE_SEND=1` to call the custom send()
    function after the target has been restarted.
  - because of bad math and undefined behaviour fixes we have to change
    the CMPLOG map. **YOU NEED TO RECOMPILE CMPLOG TARGETS**
  - fixed custom_post_process for calibration
  - fixes for AFL_EXIT_ON_TIME and AFL_EXIT_WHEN_DONE, changed behaviour of
    AFL_EXIT_WHEN_DONE to finish when really done :-)
  - frida_mode:
  - AFL_FRIDA_PERSISTENT_ADDR can now be be any reachable address not just
    a function entry
  - AFL_DEBUG is now the same as AFL_FRIDA_VERBOSE
  - AFL_FRIDA_DEBUG_MAPS now works as expected
  - qemu_mode:
  - new hooks supported (optional), see qemu_mode/hooking_bridge - thanks to
    @CowBoy4mH3LL
  - unicorn_mode:
  - fix install and forkserver (thanks aarnav!)
  - pin unicorn version
  - nyx_mode:
  - bugfixes
  - custom mutators:
  - custom_send_tcp custom mutator added, thanks to @dergoegge
  - afl-cc
  - fix to support pointless changes in LLVM 20
  - new runtime (!) variable: `AFL_OLD_FORKSERVER` to use the old vanilla
    AFL type forkserver. Useful for symcc/symqemu/nautilus/etc. with
    AFL_LLVM_INSTRUMENT=CLASSIC
  - new compile time variable: `AFL_OPT_LEVEL` to set a specific optimization
    level, default is `3`
  - correctly explain how to get the correct map size for large targets
  - small fix for weird LLVM defines in redhat
  - code formatting updated to llvm 18
  - improved custom_mutators/aflpp/standalone/aflpp-standalone
  - added custom_mutators/autotokens/standalone/autotokens-standalone
  - AFL++ headers are now installed to $PREFIX/include/afl</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1737460800">- Bump BuildRequires to llvm &gt;= 17
  - This fixes afl-clang-fast and afl-clang-lto on Tumbleweed (boo#1236169)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1739275200">- updated to 4.31c
  - SAND mode added (docs/SAND.md) for more effecient fuzzing with sanitizers
    (thanks to @wtdcode !)
  - afl-fuzz:
  - splicing phase is now DISABLED by default because research showed
    it is counterproductive. New command line parameter `-u` to enable
    it. Splicing is auto-enabled if two cycles without finds happen.
  - Python 3.13+ support
  - loose file and shared memory permissions on Android and iPhone
  - afl-cc:
  - LLVM 20 support (again - please don't change the API all the time ...)
  - -fsanitize=fuzzer now inserts libAFLDriver.a addtionally early to help
    compiling if LLVMFuzzerTestOneOnput is in an .a archive
  - added __sanitizer_weak_hook_* functions (in case that is helpful in
    weird setups)
  - fix bug with large map sizes when multiple libraries are loaded after
    the shared memory was obtained.
- 0001-fix-32-bit-compile.patch: fix 32bit builds</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1745841600">- updated to 4.32c
  - Fixed a bug where after a fast restart of a full fuzzed corpus afl-fuzz
    terminates with "need at least one valid input seed that does not crash"
    Small improvements to afl-*-config
  - afl-fuzz:
  - memory leak fixes by @kcwu - thanks!
  - many more nits and small memory saves thanks to @kcwu
  - remove deprecated files from queue/.state
  - fix bitmap update function if no current trace is present
  - fix for afl_custom_queue_get
  - various small nits
  - afl-cc:
  - fix pass support for LLVM 20 (passes were run too early)
  - dropped plugin support for LLVM 13
  - fix AFL_OLD_FORKSERVER
  - various minor fixes
  - frida_mode:
  - fixes for new MacOS + M4 hardware
- 0001-fix-32-bit-compile.patch: upstream</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1747396800">- require exact gcc it was built with to avoid gcc version mismatches
  (bsc#1243255)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1751284800">- updated to 4.33c
  - afl-fuzz:
  - Use `AFL_PRELOAD_DISCRIMINATE_FORKSERVER_PARENT` if you use AFL_PRELOAD
    to disable fork, see docs (thanks to @alexandredoyen29)
  - Fix for FAST power schedules (introduced in 4.32c) (thanks to @kcwu)
  - Colors for NO_UI output (thanks to @smoelius)
  - Fix potential sync issues when resuming sessions and when instances in a
    campaign are restarted and skip entries that were synced from itself
    (thanks to @kcwu for raising the issues and providing support!)
  - Fix for when fast resuming failed
  - more 64 bit archicture support by @maribu
  - afl-cc:
  - Added instrumenting hidden edges (approx 5% edges were not instrumented,
    LLVM sancov overall misses 8% of edges compared to our implementation)
    Note that is is currently only implemented for our PCGUARD plugin, not
    LTO, CLASSIC, etc.!
  - Fix to make AFL_SAN_NO_INST work with gcc_plugin
  - MacOS aflpp driver compilation fix (-fsanitize=fuzzer implementation)
  - Make AFL_DUMP_MAP_SIZE work even if the target has sanitizer issues
  - qemuafl:
  - Better MIPS persistent mode support
  - `AFL_EXITPOINT` support added
  - `AFL_QEMU_BLOCK_COV` block coverage support added
  - afl-cmin:
  - New afl-cmin.py which is much faster, will be executed by default via
    afl-cmin if it executes successfully (thanks to @kcwu!)
  - Nyx mode now fully works for minimizing (with afl-cmin.py which is
    called by afl-cmin if python is available) - before the map size was
    fixed and so large targets lost coverage.
  - New desocketing library: utils/libaflppdesock
  - Likely works when all other desocketing options fail
  - nyx_mode:
  - Properly determine map size</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1751976000">- Add loongarch64 to the list of 64-bit architectures</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1752062400">- Add loongarch64 to the list of 32-bit architectures</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1753876800">- Fix Leap 16.0 build
  * no dummy gcc-devel in SLFO</changelog>
</package>
<package pkgid="7c16981a86886efb92a9cc98fb43d005c0ac70635bb39b8f28509a15f587fab9bc35b9bce93abb533867c1e209a800d7623ba22147749571b04c5abd92f11826" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="160000.2.2"/>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="rrahl0@proton.me" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
</package>
<package pkgid="c57d19292d193eed492f3b0b30f9f1c241b0ea587550da048a767871e5d24830f4c6d9f10d2733a9aae75096126dd1e5c3bcf6b86a3ea848d5ba695e566dac40" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="160000.1.1"/>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791 AKA bsc#1244199
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416 AKA bsc#1242665
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
    this includes an update of the dependency idna, which
    fixes CVE-2024-12224 AKA bsc#1243850
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1759147200">- Add bugzilla references to past changelog</changelog>
</package>
<package pkgid="3aba98b09d085bb32c3bb958721362854794d28f9ad874e27d4d054dd77335a5a6c78fd2f63a7acfe9cacc6affa68ddc31dab4e1a9a564652dc28a1aed94dcc5" name="afterburn-dracut" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="160000.2.2"/>
  <changelog author="miika.alikirri@suse.com" date="1681992000">- Update to version 5.4.1:
  * cargo: Afterburn release 5.4.1
  * docs/release-notes: update for release
  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * build(deps): bump zbus from 3.7.0 to 3.9.0
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * Sync repo templates ⚙
  * build(deps): bump tokio from 1.24.1 to 1.25.0
  * cargo: add configuration for cargo-vendor-filterer
  * cargo: Afterburn release 5.4.0
  * docs/release-notes: update for release
  * util: support DHCP option lookup from NetworkManager
  * util: factor out retries of DHCP option lookup
  * util: refactor DHCP option query helper into an enum
  * util: move dns_lease_key_lookup() to a separate module
  * cargo: update MSRV to 1.66
  * build(deps): bump reqwest from 0.11.13 to 0.11.14
  * build(deps): bump nix from 0.26.1 to 0.26.2
  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
  * cargo: update all packages to fix build error
  * cargo: continue to support openssh-keys 0.5
  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
  * cargo: drop serde_derive crate in favor of serde derive feature
  * cargo: use consistent declaration syntax for slog dependency
  * cargo: drop unused dependencies
  * Fix clippy 1.65 lints
  * build(deps): bump base64 from 0.13.1 to 0.21.0
  * build(deps): bump tokio from 1.19.2 to 1.24.1
  * workflows: update actions to current major versions
  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump serde from 1.0.151 to 1.0.152
  * build(deps): bump openssl from 0.10.44 to 0.10.45
  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
  * build(deps): bump anyhow from 1.0.66 to 1.0.68
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
  * build(deps): bump serde_json from 1.0.89 to 1.0.91
  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
  * cargo: continue to support base64 0.13
  * cargo: continue to support mailparse 0.13.8
  * build(deps): bump mailparse from 0.13.8 to 0.14.0
  * build(deps): bump mockito from 0.31.0 to 0.31.1
  * build(deps): bump serde from 1.0.148 to 1.0.150
  * build(deps): bump openssl from 0.10.43 to 0.10.44
  * build(deps): bump base64 from 0.13.1 to 0.20.0
  * build(deps): bump nix from 0.25.0 to 0.26.1
  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
  * build(deps): bump serde from 1.0.147 to 1.0.148
  * build(deps): bump serde_json from 1.0.87 to 1.0.89
  * build(deps): bump openssl from 0.10.42 to 0.10.43
  * build(deps): bump reqwest from 0.11.12 to 0.11.13
  * cargo: continue to support clap 3.1
  * cargo: stop enabling LTO in release builds
  * providers/ibmcloud: avoid error if an ssh key not found in metadata
  * build(deps): bump clap from 3.2.5 to 3.2.23
  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
  * build(deps): bump anyhow from 1.0.65 to 1.0.66
  * build(deps): bump base64 from 0.13.0 to 0.13.1
  * build(deps): bump serde from 1.0.145 to 1.0.147
  * build(deps): bump serde_json from 1.0.86 to 1.0.87
  * dependabot: permute the label order to flush Dependabot's config cache
  * ci: migrate to new directory and method names
  * build(deps): bump serde_json from 1.0.85 to 1.0.86
  * workflows: update clippy to 1.64.0
  * build(deps): bump serde from 1.0.144 to 1.0.145
  * build(deps): bump openssl from 0.10.41 to 0.10.42
  * build(deps): bump reqwest from 0.11.11 to 0.11.12
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.64 to 1.0.65
  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
  * docs/release-notes: fixed checkin services ordering
  * systemd: add explicit ordering, after multi-user.target
  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
  * build(deps): bump anyhow from 1.0.62 to 1.0.64
  * workflows: bump clippy to 1.63.0
  * network: fix clippy 1.63.0 lints
  * build(deps): bump serde_json from 1.0.83 to 1.0.85
  * build(deps): bump anyhow from 1.0.61 to 1.0.62
  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
  * build(deps): bump serde from 1.0.143 to 1.0.144
  * build(deps): bump serde from 1.0.142 to 1.0.143
  * build(deps): bump nix from 0.24.2 to 0.25.0
  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
  * build(deps): bump anyhow from 1.0.60 to 1.0.61
  * build(deps): bump anyhow from 1.0.59 to 1.0.60
  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
  * build(deps): bump serde from 1.0.141 to 1.0.142
  * build(deps): bump serde_json from 1.0.82 to 1.0.83
  * Sync repo templates ⚙
  * cargo: allow serde_yaml 0.8
  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
  * Sync repo templates ⚙
  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
  * build(deps): bump anyhow from 1.0.58 to 1.0.59
  * build(deps): bump serde from 1.0.140 to 1.0.141
  * build(deps): bump serde from 1.0.139 to 1.0.140
  * build(deps): bump nix from 0.24.1 to 0.24.2
  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
  * cargo: update version ranges for post-1.x deps
  * providers: Use inline `format!` in a few places
  * *: bump MSRV to 1.58.0
  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
  * build(deps): bump openssl from 0.10.40 to 0.10.41
  * build(deps): bump serde from 1.0.138 to 1.0.139
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.137 to 1.0.138
  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
  * build(deps): bump serde_json from 1.0.81 to 1.0.82
  * docs: add release notes
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump anyhow from 1.0.57 to 1.0.58
  * templates/release-checklist: delete all .a files from vendor dir
  * cargo: update
  * cargo: update clap to 3.2.5
  * build(deps): bump reqwest from 0.11.10 to 0.11.11
  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
  * copr: mark git checkout as safe
  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
  * workflows: update issue link
  * dependabot: switch to weekly cadence
  * ci: mark git checkout as safe
  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
  * github/release-checklist: Fixup path for Windows binaries
  * build(deps): bump serde_json from 1.0.80 to 1.0.81
  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
  * build(deps): bump openssl from 0.10.38 to 0.10.40
  * build(deps): bump serde from 1.0.136 to 1.0.137
  * build(deps): bump serde_json from 1.0.79 to 1.0.80
  * build(deps): bump nix from 0.23.1 to 0.24.1
  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="rrahl0@proton.me" date="1708603200">- make lint happy about dracut package not being noarch
- add afterburn-sshkeys.target to pre/post</changelog>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
</package>
<package pkgid="e04e8dd4aa1c3b96117f1e801dc6b5a5e80a4d2d96ec396fe52e9f00261519506316c507b879f21c9b593148ef7d1d601791d00ce82344f3d39047afe047d7c3" name="afterburn-dracut" arch="noarch">
  <version epoch="0" ver="5.9.0.git21.a73f509" rel="160000.1.1"/>
  <changelog author="rrahl0@opensuse.org" date="1722859200">- enable upstream tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726142400">- enable all arches</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619200">- Update to version 5.7.0:
  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * build(deps): bump zbus from 3.15.2 to 4.4.0
  * build(deps): bump tempfile from 3.10.1 to 3.12.0
  * build(deps): bump serde from 1.0.205 to 1.0.210
  * build(deps): bump serde_json from 1.0.121 to 1.0.127
  * build(deps): bump reqwest from 0.12.5 to 0.12.7
  * build(deps): bump uzers from 0.12.0 to 0.12.1
  * build(deps): bump clap from 4.5.13 to 4.5.16
  * build(deps): bump serde from 1.0.203 to 1.0.205
  * build(deps): bump serde_json from 1.0.119 to 1.0.121
  * build(deps): bump mockito from 1.4.0 to 1.5.0
  * build(deps): bump openssh-keys from 0.6.3 to 0.6.4
  * build(deps): bump clap from 4.5.8 to 4.5.13
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * build(deps): bump zerovec-derive from 0.10.2 to 0.10.3
  * build(deps): bump zerovec from 0.10.2 to 0.10.4
  * build(deps): bump nix from 0.27.1 to 0.29.0
  * build(deps): bump clap from 4.5.7 to 4.5.8
  * build(deps): bump serde_json from 1.0.117 to 1.0.119
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * build(deps): bump pnet_base from 0.34.0 to 0.35.0
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * build(deps): bump libflate from 1.4.0 to 2.1.0
  * build(deps): bump base64 from 0.21.7 to 0.22.1
  * build(deps): bump uzers from 0.11.3 to 0.12.0
  * build(deps): bump pnet_datalink from 0.34.0 to 0.35.0
  * build(deps): bump nix from 0.28.0 to 0.29.0
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.12.2 to 0.12.4
  * build(deps): bump serde from 1.0.197 to 1.0.200
  * build(deps): bump anyhow from 1.0.81 to 1.0.82
  * build(deps): bump mailparse from 0.14.1 to 0.15.0
  * build(deps): bump serde_json from 1.0.115 to 1.0.116
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump anyhow from 1.0.79 to 1.0.81
  * build(deps): bump serde_json from 1.0.113 to 1.0.115
  * build(deps): bump reqwest from 0.11.24 to 0.12.2
  * build(deps): bump serde_yaml from 0.9.32 to 0.9.34+deprecated
  * build(deps): bump mio from 0.8.10 to 0.8.11
  * build(deps): bump mailparse from 0.14.0 to 0.14.1
  * build(deps): bump openssl from 0.10.62 to 0.10.64
  * build(deps): bump nix from 0.27.1 to 0.28.0
  * build(deps): bump mockito from 1.2.0 to 1.4.0
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump serde_yaml from 0.9.31 to 0.9.32
  * build(deps): bump serde from 1.0.195 to 1.0.197
  * build(deps): bump h2 from 0.3.23 to 0.3.24
  * build(deps): bump slog-term from 2.9.0 to 2.9.1
  * build(deps): bump serde_yaml from 0.9.30 to 0.9.31
  * build(deps): bump serde_json from 1.0.111 to 1.0.113
  * build(deps): bump clap from 4.4.16 to 4.4.18
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * build(deps): bump anyhow from 1.0.75 to 1.0.78
  * build(deps): bump serde_yaml from 0.9.27 to 0.9.29
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump serde_json from 1.0.108 to 1.0.109
  * build(deps): bump openssl from 0.10.60 to 0.10.62
  * build(deps): bump tempfile from 3.8.1 to 3.9.0
  * build(deps): bump clap from 4.4.10 to 4.4.12
  * build(deps): bump unsafe-libyaml from 0.2.9 to 0.2.10
  * providers/vmware: add missing public functions for non-amd64
  * build(deps): bump clap from 4.4.8 to 4.4.10
  * cargo: Afterburn release 5.5.0
  * build(deps): bump openssl from 0.10.59 to 0.10.60
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * build(deps): allow building with libsystemd 0.7.0
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * build(deps): bump tempfile from 3.8.0 to 3.8.1
  * build(deps): bump clap from 4.4.6 to 4.4.7
  * build(deps): bump serde_json from 1.0.107 to 1.0.108
  * build(deps): bump serde_yaml from 0.9.25 to 0.9.27
  * build(deps): bump rustix from 0.37.19 to 0.37.25
  * build(deps): bump clap from 4.4.2 to 4.4.6
  * build(deps): bump serde_json from 1.0.105 to 1.0.107
  * build(deps): bump mockito from 1.1.0 to 1.2.0
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
    though not vulnerable as unused but lib had CVE-2025-5791 AKA bsc#1244199
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * build(deps): bump clap from 4.4.1 to 4.4.2
  * cargo: update MSRV to 1.71
  * build(deps): bump clap from 4.3.19 to 4.4.1
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * build(deps): bump nix from 0.26.2 to 0.27.1
  * build(deps): bump slog-async from 2.7.0 to 2.8.0
  * build(deps): bump openssl from 0.10.56 to 0.10.57
  * build(deps): bump reqwest from 0.11.18 to 0.11.20
  * build(deps): bump serde from 1.0.185 to 1.0.188
  * Sync repo templates ⚙
  * build(deps): bump tempfile from 3.7.1 to 3.8.0
  * build(deps): bump serde from 1.0.183 to 1.0.185
  * build(deps): bump anyhow from 1.0.72 to 1.0.75
  * build(deps): bump serde_json from 1.0.104 to 1.0.105
  * build(deps): bump openssl from 0.10.55 to 0.10.56
  * build(deps): bump tempfile from 3.7.0 to 3.7.1
  * build(deps): bump serde from 1.0.180 to 1.0.183
  * Sync repo templates ⚙
  * build(deps): bump serde from 1.0.179 to 1.0.180
  * build(deps): bump serde_json from 1.0.103 to 1.0.104
  * build(deps): bump serde from 1.0.175 to 1.0.179
  * build(deps): bump pnet_datalink from 0.33.0 to 0.34.0
  * build(deps): bump serde from 1.0.171 to 1.0.175
  * build(deps): bump clap from 4.3.14 to 4.3.19
  * build(deps): bump pnet_base from 0.33.0 to 0.34.0
  * build(deps): bump serde_yaml from 0.9.23 to 0.9.25
  * build(deps): bump tempfile from 3.6.0 to 3.7.0
  * build(deps): bump clap from 4.3.11 to 4.3.14
  * build(deps): bump serde_yaml from 0.9.22 to 0.9.23
  * build(deps): bump anyhow from 1.0.71 to 1.0.72
  * build(deps): bump serde_json from 1.0.100 to 1.0.103
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.3.10 to 4.3.11
  * build(deps): bump serde_json from 1.0.99 to 1.0.100
  * build(deps): bump openssh-keys from 0.6.1 to 0.6.2
  * build(deps): bump zbus from 3.13.1 to 3.14.1
  * build(deps): bump clap from 4.3.8 to 4.3.10
  * build(deps): bump serde from 1.0.164 to 1.0.165
  * build(deps): bump serde_json from 1.0.96 to 1.0.99
  * build(deps): bump clap from 4.3.3 to 4.3.8
  * build(deps): bump serde_yaml from 0.9.21 to 0.9.22
  * build(deps): bump openssl from 0.10.54 to 0.10.55
  * build(deps): bump mockito from 1.0.2 to 1.1.0
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * build(deps): bump serde from 1.0.163 to 1.0.164
  * build(deps): bump clap from 4.3.2 to 4.3.3
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * build(deps): bump openssl from 0.10.52 to 0.10.54
  * build(deps): bump openssh-keys from 0.6.0 to 0.6.1
  * build(deps): bump vmw_backdoor from 0.2.3 to 0.2.4
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump reqwest from 0.11.17 to 0.11.18
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * build(deps): bump serde from 1.0.162 to 1.0.163
  * build(deps): bump zbus from 3.12.0 to 3.13.1
  * build(deps): bump serde from 1.0.160 to 1.0.162
  * build(deps): bump anyhow from 1.0.70 to 1.0.71
  * build(deps): bump openssl from 0.10.51 to 0.10.52
  * build(deps): bump reqwest from 0.11.16 to 0.11.17
  * build(deps): bump openssl from 0.10.50 to 0.10.51
  * build(deps): bump enumflags2 from 0.7.5 to 0.7.7
  * build(deps): bump openssl from 0.10.48 to 0.10.50
  * build(deps): bump zbus from 3.11.1 to 3.12.0
  * build(deps): bump serde_json from 1.0.95 to 1.0.96
  * build(deps): bump h2 from 0.3.15 to 0.3.17
  * build(deps): bump openssl from 0.10.47 to 0.10.48
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * build(deps): bump serde from 1.0.159 to 1.0.160
  * build(deps): bump serde_yaml from 0.9.19 to 0.9.21
  * build(deps): bump tempfile from 3.4.0 to 3.5.0
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump mockito from 1.0.1 to 1.0.2
  * Update mockito to 1.0.1
  * build(deps): bump reqwest from 0.11.15 to 0.11.16
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump openssl from 0.10.45 to 0.10.47
  * build(deps): bump reqwest from 0.11.14 to 0.11.15
  * build(deps): bump serde from 1.0.155 to 1.0.158
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * build(deps): bump serde from 1.0.152 to 1.0.155
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * build(deps): bump serde_json from 1.0.93 to 1.0.94
  * build(deps): bump serde_yaml from 0.9.17 to 0.9.19
  * build(deps): bump mockito from 0.32.3 to 0.32.4
  * build(deps): bump tempfile from 3.3.0 to 3.4.0
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * build(deps): bump mockito from 0.31.1 to 0.32.3
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
  * build(deps): bump zbus from 3.9.0 to 3.10.0
  * build(deps): bump serde_json from 1.0.92 to 1.0.93</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619201">- Update to version 5.7.0.git103.bae893c:
  * Sync repo templates ⚙
  * build(deps): bump crossbeam-channel from 0.5.13 to 0.5.15
  * build(deps): bump tokio from 1.40.0 to 1.44.2
  * build(deps): bump openssl from 0.10.71 to 0.10.72
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416 AKA bsc#1242665
  * build(deps): bump zbus from 4.4.0 to 5.5.0
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.6.1 to 1.7.0
  * build(deps): bump serde_json from 1.0.139 to 1.0.140
  * build(deps): bump tempfile from 3.17.1 to 3.19.1
  * build(deps): bump clap from 4.5.31 to 4.5.35
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * build(deps): bump mailparse from 0.15.0 to 0.16.1
  * Sync repo templates ⚙
  * build(deps): bump ring from 0.17.8 to 0.17.13
  * build(deps): bump anyhow from 1.0.95 to 1.0.96
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * build(deps): bump serde from 1.0.217 to 1.0.218
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump tempfile from 3.16.0 to 3.17.1
  * build(deps): bump serde_json from 1.0.138 to 1.0.139
  * build(deps): bump clap from 4.5.27 to 4.5.31
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * build(deps): bump openssl from 0.10.66 to 0.10.70
  * build(deps): bump serde_json from 1.0.137 to 1.0.138
  * build(deps): bump tempfile from 3.14.0 to 3.16.0
  * build(deps): bump openssl from 0.10.66 to 0.10.69
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump serde from 1.0.215 to 1.0.217
  * build(deps): bump serde_json from 1.0.133 to 1.0.137
  * build(deps): bump anyhow from 1.0.93 to 1.0.95
  * build(deps): bump clap from 4.5.21 to 4.5.27
  * build(deps): bump reqwest from 0.12.7 to 0.12.12
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * build(deps): bump mockito from 1.5.0 to 1.6.1
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * Sync repo templates ⚙
  * build(deps): bump clap from 4.5.17 to 4.5.21
  * build(deps): bump tempfile from 3.12.0 to 3.14.0
  * build(deps): bump anyhow from 1.0.89 to 1.0.93
  * build(deps): bump serde from 1.0.210 to 1.0.215
  * Sync repo templates ⚙
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1746619202">- Use autosetup for patches, refresh them and rename
  * fix-authorized-keys-location.patch to 0001-Fix-authorized-keys-location-for-OpenSUSE.patch
  * set-default-user.patch to 0002-Set-the-default-user-to-suse.patch
  * no-network-args.patch to 0003-On-OpenSUSE-do-not-add-to-kernel-command-line.patch</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1747656000">- Update to version 5.8.2:
  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
    this includes an update of the dependency idna, which
    fixes CVE-2024-12224 AKA bsc#1243850
  * packit: add initial support</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1750161600">- Fix Requires in noarch package to not be arch specific (bsc#1244675)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1753358400">- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1758801600">- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one, fixes bsc#1250471
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1759147200">- Add bugzilla references to past changelog</changelog>
</package>
<package pkgid="806c528f16f9ca48d5ef7600220942688ff5cd87bf357c1e295b0e9cf1de25d48869958d364485e981ac4667c63787b1413123cadd41086c98077c95027b4ffa" name="agama" arch="x86_64">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="946d08b6b6b2a83b3ea514d71af4f7157044644e39257eaec93dbe575d3ca52a54546e4617d1f0d166e0f7e85284f9f55b8784c3bdfb65d4ffe96c48e15c0dc9" name="agama" arch="x86_64">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="c931f1e576a8eedf79fa9f384bfbabaa6b6c54e1863b8891aa3a8a963941e496cdf97fd566943730ebd42d7dd811a8b09d50860ebba36dad9bcd78e2dcc9f545" name="agama" arch="x86_64">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="14afb20c59977e2770d60008d24d7f34f6e39078a71ce52b77a268897debcbde1e3746e1d27014820a9198aa733c4dde4770b81382a169ded119e591d6cd27ec" name="agama" arch="x86_64">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="40acd3503033befb58b98fc599520a508fc6c8b8cba99ecef57fa549a3832d2e187847f29f8d1c39d3319305f83492571a2f8bd91d8a71e4e35ca21b92ed515a" name="agama" arch="x86_64">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="145b4bc6105fb050ef8b54cab706cff89848252c3c162c95d5f3931eaae0c24cbcebf88191e1f9e5edf3065b9a2bc4af667e445eec1277bf01942ea4d50ed4e9" name="agama" arch="x86_64">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="93967b3a70074d1de7c5dff5eebe3397912859174a4f96cf9bc8e45c38d4f73144ba6dff0550e57a83bba16f9e5a2c83cb7f6de281fa6e4d1326ae64cac5c322" name="agama" arch="x86_64">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="db22cde623ecea34233985678070d4e514c17839124ddd70b898bb84688dd430f0de3a0c83fd6e3f06ff718a8850f420fe645b9cf85616ebd42cceda59ee325f" name="agama-auto" arch="noarch">
  <version epoch="0" ver="16+0.5a4282727" rel="160000.2.2"/>
  <changelog author="igonzalezsosa@suse.com" date="1720008000">- Add the %changelog section to the spec file
  (gh#openSUSE/agama#1431).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1720008001">- Bring back the service scriptlets but using the right service
  name (gh#openSUSE/agama#1433).</changelog>
  <changelog author="jreidinger@suse.com" date="1723723200">- change agama-auto systemd service depedencies to reflect changes
  in agama CLI communication and ensure that it runs when
  agama-auto runs
  (gh#openSUSE/agama#1539)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1726833600">- Change the license to GPL-2.0-or-later (gh#openSUSE/agama#1621).</changelog>
  <changelog author="kanderssen@suse.com" date="1739448000">- gh#agama-project/agama#1970
  - Adapted agama-auto script to reboot by default once the
    unattended installation is finished.
  - Allow to modify the finish method through the 'agama.finish'
    kernel cmdline argument.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1742558400">- Start the autoinstallation if a profile is found in a predefined
  location (gh#agama-project/agama#2180).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1745323200">- Version 14</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1748260800">- Version 15</changelog>
  <changelog author="lslezak@suse.com" date="1750766400">- Use more consistent "agama config generate" command instead of
  "agama profile import" (gh#agama-project/agama#2347)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1751284800">- Version 16</changelog>
</package>
<package pkgid="794f54a2e58f75f6d3b5c7f9543726461bfa2d2ce2468720938fc8f20f661bb9b3b602968143274c301b83e7723140fcc8caee2199a84b51ad922c394b8eb551" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="8bba2b1f6831ee0639937e0058f3990038a75e0ee852c18d6abf2edef3478f494a07bf9fb1978bd6d76fcf62923c936ee294ebeca729cad161ff23a4686e273b" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="9460e2ba907c6db1c53b4106222000740adee69d54d888e700be7155242afc403750e8b64d261e5d9171aaf20dc1bce1b79fd5660b34a94490ff31664ad36be1" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="96d9ff58fdd99baecd4911bd2044c03f819b6052c8a648d7aa39958e3fea07d6ad419cfb900c8fa2a80aef6a429fb7d7cab756199aa3434acd70a86b174c873d" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="5f0a5112b3d90c4b9f1179c196c346a43d27c1b34b82bc3103e1c9466eac8bf202fe84385e405e0685b9d12ea82319ba91dab84fb6c611adacb8f79b0411e1e9" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="a35741759379819110f4984a806b6d4ac924ffea633af7354bcb275fd153ae2fe435bf34e8899587c9765fc0aff45af982c59217e7310fcc915fa461f6ea5098" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="67f44ae8ec54cab983a93eb25b356b74876f21e5e9eb927a1836dbbe23730cd1ccc1ef64b252f5bd285aa47450849bb81f4f59fe584019f13badb6469d623905" name="agama-autoinstall" arch="x86_64">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="4c423e2ff443c717d723580c82e4699e4d357295c0eab9830fce8f7fdc34299cc3f9e80287adde2ef96e9883715469ae56f1619231949e4ba40d6d69867e22b3" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="1fb8ec32f3509a1261fe214dbfc29b1f1a43153e1d6dde8f1385d61790c22cf8b186f41761bf8a3b06a100d3aabe6a161533ad67b31c51f23963bfb29f99f42a" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="77ec7ef6b93fa8d93cd701953c73a738704e75c195a50d31e813fb304d707ba208162ebc30022c08170cba97c9f6c282706e4a350c84bbbfaf3862005f40ebf2" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="f1f75fa805b62be2a21c78e508ab1e48db99b8282b032d791e33a80d1fa392ae05fd2d228af250f6e3f8384a78fb08fb55fc6e84cceee3eacd42da7463604160" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="f4e1a66971e663a39f7bfb6886d89ea85284c03d1ee872088326faadb07f5519046cdf1eae9d8efb771b03f50384f6d1607990f5c44b4e17a63d2d1a9125970a" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="0bdb6ee274b81fae681becae0648f4315893df07ec58c97991990016650a7f4da35e01459db6c0a70f38276a845dad15c0d63727b608bd740ec99bac7b725e2c" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="1e9a480bfb305c09d6c01c4b273ae988c663825b7fc1f41a5feee3c9d0017b07c426b3a696b7d49eb96cfc4ed9a11f9e22cc5e16b66dff2ed1b5d5b29a4309f8" name="agama-cli" arch="x86_64">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="8922937c7474246a7e475b558688702cde771baf2b45e841618dc71ab1a5cf8ee7306ffcc63f8202acf771581bb7d8e37fb68bcbf37e197afbaed73968b1abbb" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="b6cfb95616f4a83c1f2e71fdc926d88b8b15634b170d9bcfdf3db96b235287cad0f2fbaef85945292d365580c8721d34b09137fe03ed55845c123368ecf5d17d" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="c17499e3015937d3abe469f381749a356b1e1b4fc86e7589d51e60859634d2de94f52bf4467b7c7448699df06c873ebf32f0af6dd1432cabc8151fc6eebbbdb0" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="fd393f1c90c98edd975d4d990d6492d7dd60fa42ab668c7b59fa0c15dd269a7f88f34ced3d3235eeeb071f883859c527cc6f4e70981758c92b710842372f7dd1" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="b5091e52ab9af849787811ad60f5223e5523d1aabd9558e24e0e4d242eb2cd6e6bce700c2bc1060c1dc07a68720454328b5857d8520eac4138d2541582b237dc" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="58ef9ae4a85b2c1325304a5db16b8f466b767151834b82c32ae28c84a65047741732ffa3e3d336aee03ac4eddf31f5448ab73d7fbfc4b86cd63b5af97796eca3" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="472c2a1cdb1339d7ce760a1c960cb8c8ef02fbb864f73a27252323c77aca789603441034811e7d46d88af3e9facac5d38e67b8f07b75705fa0753a43980f34b9" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.2"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="24c860a3ce66e0edf0c6699554cf0bdabed9e013400105de4a51742be209c7167444cc9feb8ebbedd77bb1681e9faf19c48b63c71f482eaa1c261229b5660d46" name="agama-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="7aee2777c12b3abd9a3949af593a3b4e4bd77d7fec104a43b10d6b26958f523335ece73302fc1b677c8f0a79ea582767f4eeaf6d21ba800b48907d6e0bef7a96" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="be0e98bfaa7ff0180c596bfe341e81bca423b1f9f063fba6eea61955d33c0b093636c30cd3fa3863194f432b56502ab93b5ae507cc07d2355275584ac62d1796" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="573b23bd86f0ff80328d9752fa6ca65212a44765d09595b40925ef66c31893c62e9676626ccf34745b5f9f293dfd00c7252af1e7d166e2fc024bb7ecb2c08185" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="170290103f7586cc988118af4bbffa1a4a0757bb76c5905b4a7e11c8400db35cc0db0229580161a41fc9014f093b6e4a7cc2173f29d14174768ff400e7394059" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="0cb94965cf69c05d8dd58d6b92afd3264e8887742f61baf37691cc30ca366af5c7976010cf61caa308bfa8e83d77688a8c6f17badd736e4f839c566c996aafde" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="4777b42aa32f2c4b492c89cf43c9ea20b3642d5b34cc340fc8b92637680d73a16cba21144acd72972fb6cbbade28b40d5f7db4a150e3719d3d209ff74acff043" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="9c466468760f0cf72728cb0b4491bdcb9b20dc26a6c94eb2aa8714018166a4ee102b293d6d5d2dfc8717700d3404aea60c7a1bf3f5ba7c85bad0005640ca6114" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.2"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="6e481cbca9a4477d5049d0aa3c5baaa0ba9ca069259c34855484328813087fc3ebdcb577e228e25ab0ce4fa088613f556a3ee21114c3ec4cc256df307e5f5a36" name="agama-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="9bbafaac6bd8c564559bfe3104ae7cab1af6f5e6b2f25eb1896e67e669e421953de6fe6118b9b1c4a72c606f892101cd28b08563394316fe7dd32d8ba0e6792b" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="5ea6045e41db89caa4123600f411637d5074cd1782474ccb20d88e31dc0f0fca59d2e9afc7ea8b00671d246385a5bb174d5f65f373b1b58ad6e7753c830c1d78" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="473d329f3b69e0c46f149b3f3bd33af7829f56ee72060806b43a3700e1eb36fe65f4eaa9b67ab37a799b2b9108e6a459d38f05d70af7cb5a47626fd3b4c8285b" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="3e4cdce9be4f2238ed3e8d722e56ffd39057510bb8197487d0329c26e4c2dbcf5bfffcbd7513de06dc82d5670cbabe9fb02b9cef4665019763ba64fa585a5e42" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="638b7455d5be48f1c5835ff75c2a014d095707d8129fce6185ceb21bcdd7954117c113cfc87dadc510428f5ab6aa36919bba02f762f618623b6fa598d6606289" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="08edf715057a1469076d662bd4c324b19692d8a973c9cd39433f6fde4acd829b86324171062c7260f4d1d5fbb72bb54c411c36f9cabe8a68d247e81245de9d9a" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="6cbe423920b7fc93756f00d1458100e83210a436e5bb1909834c3eb7db7d07c6057ed8965477cb4318be73bd7f628324220d70ba6e9ad9e7f7ced5c70884c0f2" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.2"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="600bb7c98f17a5db755d5df756621759868fef8393dc96f4b21a63298ce4b99146e3575a76be9ca842d124ede32aa55f0f6037e60ddaa8aea5fa0b73fd283056" name="agama-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="5f8cfeaf8a8b13c44a6a1f0a87fb08609bcbc270247f8b0d7a17462eaedf13c03c123fdd54f029db44201b3acdd974f6c249d65e1b4f2b80c5952b82d55efc13" name="agama-integration-tests" arch="noarch">
  <version epoch="0" ver="9+953" rel="160000.2.2"/>
  <changelog author="lslezak@suse.com" date="1721131200">- Initial version</changelog>
  <changelog author="lslezak@suse.com" date="1721390400">- Downgrade Puppeteer from 22.13.1 to 22.13.0, the latest version
  fails to start with the Firefox browser (gh#openSUSE/agama#1485)</changelog>
  <changelog author="lslezak@suse.com" date="1721822400">- Reduce the node_modules size, delete not needed files
  (gh#openSUSE/agama#1497)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1726833600">- Change the license to GPL-2.0-or-later (gh#openSUSE/agama#1621).</changelog>
</package>
<package pkgid="c78b9bacc837d9c5a7815977399b0586b33f71b10809caeb984867e6d7a9fe76634b15fcc2ce9c5ff35b9293cda6900119f763ada1f759681bbb85f42ed703da" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="6e197c9d9181a79f851f9174591fcc82b396d09f45484f2391f7fbd461e43b90a84239c68a7230ad33ad3d3178dcf44fba6287a61f0e614f13f9bcae8dd2eb97" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="bc97cc2a7b42d16ce5ee0fb7eaa3a18534be4a42dbf044ad05b13efc603d07ed81cdc62934e9a4e8c414a7fd1d805092607ffd38f6db7ac84e078eb8c3fddf54" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="aa6ceb220a7accd82e41760f1b0f099808b611c98b8e8f3def9eb1c4b6dfa6aae7ef81ffbce3cdf4ec734736a54068a72638624f77e70ed05e66d42eb33789a0" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="f4e60bf1168cc4d95ca098faca68a105489f99a20fd5239abc5873a59a6a7cb4fe3ff7d744d382cd79cc3d234b6465a51323d815a5f93cf6cb87fbf3944090f8" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="9190afe69e21112c7fad908d23bd7065d22d65737e1f89b6c6529ffa7b11b8027b7e405077d6bde79d00867700e8a7daac2657c04e6381974ea602ea2add0805" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="7b3f3261763634418c3be652f9a413677a5c72f79a4e5b10915c1d6e2e335379791128667c48557603c4a69328dd45f8dc30074817c2f1ff395367ce6ff3ed6e" name="agama-openapi" arch="x86_64">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="3a9d2877b3d5f26090ae0c68ff2724aefab13650d17279619db731eecb6c62552e68f311ae9cdfadeccf9838a445d210324e5c2ef4c13109a77f43c8065dd34c" name="agama-products-opensuse" arch="noarch">
  <version epoch="0" ver="17+347.8e874fef7" rel="160000.4.1"/>
  <changelog author="lubos.kocman@suse.com" date="1752580800">- Display only Tumblweed based distros in Tumbleweed installer
  and vice versa.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1752580801">- Adapt the products definition to the new way of pre-selecting
  user patterns (gh#agama-project/agama#2560).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
</package>
<package pkgid="d404d8049c153535ad934f89aaa92a67eb028f5f7edd6a6be5c96c283e56deac7bb1ed886dfd422bee143aab1da54595f4ddbe8bf48958712e2e1d3272e5d6b0" name="agama-products-opensuse" arch="noarch">
  <version epoch="0" ver="17+351.33aa1acf5" rel="lp160.12.1"/>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1753099200">- Version 17</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.com&gt;" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.com&gt;" date="1757678401">- Change the openSUSE Leap autoinstallation ID from "Leap_16.0"
  to "openSUSE_Leap" and the openSUSE Leap Micro ID from
  "LeapMicro_6.2" to "openSUSE_Leap_Micro". This allows using the
  same autoinstallation profile in future versions. (bsc#1249399)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1759147200">- Update patterns and packages Leap Micro 6.2
  Fixes install issues of Leap Micro 6.2 (boo#1250435)
- Explicitly add opensuse-migration-tool</changelog>
</package>
<package pkgid="71c9e982aff5e1d8ffced4b8d98b3ca331eb2aa583509f7950a52e1941a2ba746eb515651e4fc75a9830b5d7c33181bf4a17daf75bb191aaac8ff1a82b5e56cf" name="agama-products-opensuse" arch="noarch">
  <version epoch="0" ver="17+427.52990b794" rel="160000.5.1"/>
  <changelog author="lubos.kocman@suse.com" date="1752580800">- Display only Tumblweed based distros in Tumbleweed installer
  and vice versa.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1752580801">- Adapt the products definition to the new way of pre-selecting
  user patterns (gh#agama-project/agama#2560).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
</package>
<package pkgid="a38ac9ffc518a2ed92c5c066afa6eaaed39d67bdb44c562421b02e4f0290cd3773bb0bfc1723e4a028c832a1c79c94a0be6048827482e65c189a1f863b174a50" name="agama-products-opensuse" arch="noarch">
  <version epoch="0" ver="17+487.2fb7ec56e" rel="160000.6.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1752580800">- Adapt the products definition to the new way of pre-selecting
  user patterns (gh#agama-project/agama#2560).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1772452800">- Update translations (gh#agama-project/agama#3228).</changelog>
</package>
<package pkgid="8094b535b7e869a842f1d98b4d04f29bea6e2ac88fec92978037bc4332bf48c63c53c8b956e45bfa4d10dde5c25023df2d59e65b528c7662a9951b6e9e80c231" name="agama-products-opensuse" arch="noarch">
  <version epoch="0" ver="17+574.3296aa7c8" rel="160000.7.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1772452800">- Update translations (gh#agama-project/agama#3228).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773835200">- Always use an empty array for optional_patterns in products
  definitions (gh#agama-project/agama#3295).</changelog>
</package>
<package pkgid="7d3adaa0dac4de4358a831b1d04246cb8d029b8476d114abc170b6eb9e28e0dbcd6533de3eaad56f12473dfec7c42973c82d741a43688fb31134e5ab89b18e26" name="agama-products-sle" arch="noarch">
  <version epoch="0" ver="17+347.8e874fef7" rel="160000.4.1"/>
  <changelog author="lubos.kocman@suse.com" date="1752580800">- Display only Tumblweed based distros in Tumbleweed installer
  and vice versa.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1752580801">- Adapt the products definition to the new way of pre-selecting
  user patterns (gh#agama-project/agama#2560).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
</package>
<package pkgid="18af46d25373140311eaac36323a402458c67691bc1fb7ffab60da474b9a133416c67f2580fea9bc16121d8c7be8975ebbfd7e95694c3f1d5c035d4f9d592dae" name="agama-products-sle" arch="noarch">
  <version epoch="0" ver="17+351.33aa1acf5" rel="lp160.12.1"/>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1753099200">- Version 17</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.com&gt;" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="Ladislav Slez&#xE1;k &lt;lslezak@suse.com&gt;" date="1757678401">- Change the openSUSE Leap autoinstallation ID from "Leap_16.0"
  to "openSUSE_Leap" and the openSUSE Leap Micro ID from
  "LeapMicro_6.2" to "openSUSE_Leap_Micro". This allows using the
  same autoinstallation profile in future versions. (bsc#1249399)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1759147200">- Update patterns and packages Leap Micro 6.2
  Fixes install issues of Leap Micro 6.2 (boo#1250435)
- Explicitly add opensuse-migration-tool</changelog>
</package>
<package pkgid="054e0362eaef7802d69936d78b029708e229a048a077c4dabf35c1c11dd55a9fdf6438b158c1b28bc857091b2075c076df3304eda6d5c817053d5fe3cf2592eb" name="agama-products-sle" arch="noarch">
  <version epoch="0" ver="17+427.52990b794" rel="160000.5.1"/>
  <changelog author="lubos.kocman@suse.com" date="1752580800">- Display only Tumblweed based distros in Tumbleweed installer
  and vice versa.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1752580801">- Adapt the products definition to the new way of pre-selecting
  user patterns (gh#agama-project/agama#2560).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
</package>
<package pkgid="1372eb1390dff83faf01f4c8e96451a74ea4389eb307a0726776cd36de0f29c278154a160c4fbdd3e54920981946ec0db3de16e9b828035bedbd08e46799d1d0" name="agama-products-sle" arch="noarch">
  <version epoch="0" ver="17+487.2fb7ec56e" rel="160000.6.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1752580800">- Adapt the products definition to the new way of pre-selecting
  user patterns (gh#agama-project/agama#2560).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1772452800">- Update translations (gh#agama-project/agama#3228).</changelog>
</package>
<package pkgid="53eabce7ee7afe838ee9bd8d9c0663eea4a7a3f165813e22237aa3dbc0f14f4a335a20834606a3044c4da1b27054ae4edf0fbe23450967aa214296790ab8e893" name="agama-products-sle" arch="noarch">
  <version epoch="0" ver="17+574.3296aa7c8" rel="160000.7.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1753099200">- Version 17</changelog>
  <changelog author="jreidinger@suse.com" date="1753704000">- Set configuration for selinux for SLES4SAP to permissive
  (bsc#1247046)</changelog>
  <changelog author="fcrozat@suse.com" date="1753790400">- Add more patterns to installation UI (bsc#1246947)</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Remove selinux policy from products definition as it is noop
  after changes to agama service (bsc#1247046)</changelog>
  <changelog author="lubos.kocman@suse.com" date="1754481600">- Drop Beta from Leap 16.0.
  We've agreed to not use RC and simply go with Leap 16.0
  just like on boot menu.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1755518400">- products: sles, sle-sap: remove Beta tag, switch to the final EULAs
  (gh#agama-project/agama#2666).</changelog>
  <changelog author="jreidinger@suse.com" date="1756123200">- Fix failure of agama-products build after drop of is_opensuse
  on SLE16 (bsc#1248484)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1772452800">- Update translations (gh#agama-project/agama#3228).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773835200">- Always use an empty array for optional_patterns in products
  definitions (gh#agama-project/agama#3295).</changelog>
</package>
<package pkgid="37441a04b4832e06218b946d0206dea5c256e7e70fec1e1ee4edae7a7e025110836bcbffd6d56c7e5687e05a5c53afe0969729d7859ef8f82e49e9416040f40e" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+359.34bc8cc0b" rel="160000.5.1"/>
  <changelog author="mvidner@suse.com" date="1754049600">- Fixed "agama config edit" when used with a remote --host option
  (gh#agama-project/agama#2628).</changelog>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
</package>
<package pkgid="4b9aa44df79c51bfad2a04a6ca08d5abc458abedc6b953e30f457de0d7dbb5ba93dfef9612cfb4424c60a0b2315336b8761611c4c329612406d8fc9452e92b59" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+427.52990b794" rel="160000.6.1"/>
  <changelog author="kanderssen@suse.com" date="1754308800">- Do not return an Err when a connection is not activated or
  deactivated when adding or updating it but just log the error
  and write the connections profiles (bsc#1245548).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
</package>
<package pkgid="7170022d2c82b2b9fb67fd4f0bfdaea8fadfe815b53138005acbb0e870a580987d3b81a3c2f1186f63dc211c9a05f69e6cbec91f9402083275a1950006e79e8d" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+461.2289ec0b6" rel="160000.7.1"/>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit HTTP event when storage is configured, including the client
  id (gh#agama-project/agama#2640).</changelog>
  <changelog author="lslezak@suse.com" date="1754481601">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
</package>
<package pkgid="372f166c78a1ce208ca081d707dfcfd4f6a3ebe8685842792a4778ac1b0aed721840f571fd3697f16f9a26c7ee2b37cccefecf1cf52160707a5cee629be03918" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+502.a135c718e" rel="160000.8.1"/>
  <changelog author="lslezak@suse.com" date="1754481600">- Automatically retry registration when a network error happens
  during autoinstallation (bsc#1246990)</changelog>
  <changelog author="kanderssen@suse.com" date="1754568000">- Allow to "add" or "remove" patterns from the current or defined
  user selection patterns list (bsc#1247456).</changelog>
  <changelog author="jreidinger@suse.com" date="1755086400">- Allow to specify "bootloader" and "files" section in agama
  profile without specified product (bsc#1247248)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1755604800">- Fix software configuration cache (bsc#1247933).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
</package>
<package pkgid="e1c8a9a533b3905cf72429351fd33cd6d2dcfd3d7b45be7ab87c96cb61657780447dd332e72594644d401cf3ab9216b36629977a04dd714525bac82366e1b484" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+552.696adcca2" rel="160000.9.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Include the output of the "agama config" commands when
  agama-autoinstall fails (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382401">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
</package>
<package pkgid="7c0d9a9ccdefd283042a5cc0179ce9e8a55d34372432dc85d454a0c169fb8373f6bfb2545db72a0603f41f070649a315801bd51e2924fe6de6c95a2c3e35c20a" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+570.fe7244a50" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Update the software cache when the patterns selection changes (bsc#1248826).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
</package>
<package pkgid="402319501ff43ea4c927534e2326d06e9163ef6649ba1a37fd9939cddc1e6ad7adf9ba1b4d13133e209398ce547b0bb07a48a6c16031466ccc1070daf55551a1" name="agama-scripts" arch="x86_64">
  <version epoch="0" ver="17+617.fad444ba8" rel="160000.11.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1757937600">- Do not log the events to prevent leaking passwords (bsc#1249622).
- Set logs permissions to 0o600.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1760443200">- Do not log errors when retrieving NetworkManager secrets to prevent
  leaking them (bsc#1251898).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1769774400">- Do not export DASD settings if they are null (bsc#1257489).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Add error reporting when working with AutoYaST profiles (related
  to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774008000">- Return error code when using "agama config generate",
  "agama config load" or "agama config validate" does not validate
  the given profile (bsc#1256951, gh#agama-project/agama#3304).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Add the zFCP controller internal id to the device when some
  update is notified (bsc#1247445).
- When obtaining the controllers through the HTTP API, do not
  retrieve the controllers LUNs in case of inactive.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Run scripts from /var/lib/agama/scripts (bsc#1261787).</changelog>
  <changelog author="lslezak@suse.com" date="1776168000">- Automatically try loading the autoinstallation profile from the
  root of the installation medium (jsc#PED-16010)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1778068800">- Update "time" crate to prevent CVE-2026-25727 (bsc#1257930).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1780574400">- Consider the old init scripts location for backward compatibility
  (gh#agama-project/agama#3564).</changelog>
</package>
<package pkgid="f13d141494533dcf57d45827b3c6ed008796b4de0226e5b9429f409d81246fd194aa936e09fbac224e4a2bc75c312247f160346b820abf1e196692d8b1a3503c" name="agama-web-ui" arch="noarch">
  <version epoch="0" ver="17+368.8e82ca30b" rel="160000.7.1"/>
  <changelog author="dgonzalez@suse.com" date="1753963200">- Block UI if storage is configured by any other client
  (gh#agama-project/agama#2640).</changelog>
  <changelog author="dgonzalez@suse.com" date="1754395200">- Improve layout and accuracy of wired connection details view
  (bsc#1247430, gh#agama-project/agama#2639).</changelog>
  <changelog author="dgonzalez@suse.com" date="1755000000">- Split progress details into two lines for better readability
  (gh#agama-project/agama#2647).</changelog>
  <changelog author="honyczek@centrum.cz" date="1755086400">- Fix messages about automatic storage sizes
  (gh#agama-project/agama#2657).</changelog>
  <changelog author="ancor@suse.com" date="1755691200">- Enforce ESP partition id for /boot/efi partitions manually
  defined (bsc#1248189).</changelog>
  <changelog author="dgonzalez@suse.com" date="1755691201">- Refactor DASD page to make it more usable and improve its
  performance (related to bsc#1247444, gh#agama-project/agama#2648).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Report the underlying problem for the "load.retry" question
  (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756728000">- The Chinese languages do not include the territory (bsc#1248826).</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="dgonzalez@suse.com" date="1758024000">- Avoid missing translations due to missuse of top-level constants
  (related to bsc#1248817)</changelog>
</package>
<package pkgid="6e96c314da6d36b0811e4b2ff9e525a1afb0a2759fa656c62c8df3a893b057e4bdc8a9e9efc61682448337a59245d0497c843f64abba42dd45ad0144c253ca76" name="agama-web-ui" arch="noarch">
  <version epoch="0" ver="17+430.2f49499cf" rel="160000.8.1"/>
  <changelog author="honyczek@centrum.cz" date="1755086400">- Fix messages about automatic storage sizes
  (gh#agama-project/agama#2657).</changelog>
  <changelog author="ancor@suse.com" date="1755691200">- Enforce ESP partition id for /boot/efi partitions manually
  defined (bsc#1248189).</changelog>
  <changelog author="dgonzalez@suse.com" date="1755691201">- Refactor DASD page to make it more usable and improve its
  performance (related to bsc#1247444, gh#agama-project/agama#2648).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Report the underlying problem for the "load.retry" question
  (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756728000">- The Chinese languages do not include the territory (bsc#1248826).</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="dgonzalez@suse.com" date="1758024000">- Avoid missing translations due to missuse of top-level constants
  (related to bsc#1248817)</changelog>
  <changelog author="ancor@suse.com" date="1760443200">- Fixed the check about which DASDs can be formatted (bsc#1243795).</changelog>
  <changelog author="dgonzalez@suse.com" date="1760702400">- Preserve installer options values after successful submission
  (bsc#1249636).</changelog>
  <changelog author="lslezak@suse.com" date="1761566400">- Use the JavaScript/TypeScript parser to extract strings for
  translation (gh#agama-project/agama#2748).</changelog>
</package>
<package pkgid="30e110a30833bf77519197781fb2c5eb697643c97680d3aace242a7222cb1712f558b3acd3174bb55a1c2cb6ee273a95c6ea3c7514218927a0758276d5d27cb1" name="agama-web-ui" arch="noarch">
  <version epoch="0" ver="17+467.8c5a31dc6" rel="160000.9.1"/>
  <changelog author="ancor@suse.com" date="1755691200">- Enforce ESP partition id for /boot/efi partitions manually
  defined (bsc#1248189).</changelog>
  <changelog author="dgonzalez@suse.com" date="1755691201">- Refactor DASD page to make it more usable and improve its
  performance (related to bsc#1247444, gh#agama-project/agama#2648).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Report the underlying problem for the "load.retry" question
  (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756728000">- The Chinese languages do not include the territory (bsc#1248826).</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="dgonzalez@suse.com" date="1758024000">- Avoid missing translations due to missuse of top-level constants
  (related to bsc#1248817)</changelog>
  <changelog author="ancor@suse.com" date="1760443200">- Fixed the check about which DASDs can be formatted (bsc#1243795).</changelog>
  <changelog author="dgonzalez@suse.com" date="1760702400">- Preserve installer options values after successful submission
  (bsc#1249636).</changelog>
  <changelog author="lslezak@suse.com" date="1761566400">- Use the JavaScript/TypeScript parser to extract strings for
  translation (gh#agama-project/agama#2748).</changelog>
  <changelog author="lslezak@suse.com" date="1763726400">- Fixed missing translations (error cases for software repos, iSCSI, DASD; bsc#1250059)</changelog>
</package>
<package pkgid="eb5bbf9a2e837d395af03d7996dcc97eb8d17be789bb737bc753dd605eb968c6702176a65a9d840c86551617480dba0ca39fbabd6a43e400cb0da84050dfe9d1" name="agama-web-ui" arch="noarch">
  <version epoch="0" ver="17+554.49df42f26" rel="160000.10.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1756382400">- Report the underlying problem for the "load.retry" question
  (related to bsc#1248779).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1756728000">- The Chinese languages do not include the territory (bsc#1248826).</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="dgonzalez@suse.com" date="1758024000">- Avoid missing translations due to missuse of top-level constants
  (related to bsc#1248817)</changelog>
  <changelog author="ancor@suse.com" date="1760443200">- Fixed the check about which DASDs can be formatted (bsc#1243795).</changelog>
  <changelog author="dgonzalez@suse.com" date="1760702400">- Preserve installer options values after successful submission
  (bsc#1249636).</changelog>
  <changelog author="lslezak@suse.com" date="1761566400">- Use the JavaScript/TypeScript parser to extract strings for
  translation (gh#agama-project/agama#2748).</changelog>
  <changelog author="lslezak@suse.com" date="1763726400">- Fixed missing translations (error cases for software repos, iSCSI, DASD; bsc#1250059)</changelog>
  <changelog author="ancor@suse.com" date="1771502400">- Fixed a bug when defining the size of a new logical volume
  (bsc#1258013).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Invalidate zFCP controllers query after some controller change
  is notified (bsc#1247445).</changelog>
</package>
<package pkgid="d74c91693dc8fd0630a2117ffced823dc4de98e613cbd4e9811a5c23b7008d3706a08cc66ae029dc1c6f64a4eb2072b37350c485bce69b2e8e5b2f11ecaa6e5f" name="agama-web-ui" arch="noarch">
  <version epoch="0" ver="17+612.d8bf69336" rel="160000.11.1"/>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="dgonzalez@suse.com" date="1758024000">- Avoid missing translations due to missuse of top-level constants
  (related to bsc#1248817)</changelog>
  <changelog author="ancor@suse.com" date="1760443200">- Fixed the check about which DASDs can be formatted (bsc#1243795).</changelog>
  <changelog author="dgonzalez@suse.com" date="1760702400">- Preserve installer options values after successful submission
  (bsc#1249636).</changelog>
  <changelog author="lslezak@suse.com" date="1761566400">- Use the JavaScript/TypeScript parser to extract strings for
  translation (gh#agama-project/agama#2748).</changelog>
  <changelog author="lslezak@suse.com" date="1763726400">- Fixed missing translations (error cases for software repos, iSCSI, DASD; bsc#1250059)</changelog>
  <changelog author="ancor@suse.com" date="1771502400">- Fixed a bug when defining the size of a new logical volume
  (bsc#1258013).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Invalidate zFCP controllers query after some controller change
  is notified (bsc#1247445).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1779192000">- Update axios dependency to prevent CVE-2026-42041 and CVE-2026-42264
  (bsc#1264160, bsc#1264802).
- Update webpack-dev-server to prevent CVE-2025-7339 (bsc#1246678).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1779710400">- Update shell-quote dependency (CVE-2026-9277, bsc#1266256).
- Update other dependencies reported by "npm audit".</changelog>
</package>
<package pkgid="0ba95bbb891c41aeb7a2f39df5892f2a51e47c5ee5fcb02d5d340ca87e769254d2a475fe6cbdfadac27b57e4e47154577fa052c20901ce4edc005c86687d99de" name="agama-yast" arch="x86_64">
  <version epoch="0" ver="17.devel350.11998276e" rel="160000.1.1"/>
  <changelog author="jlopez@suse.com" date="1753358400">- Make encryption work with whole formatted devices (bsc#1246939).
- Do not export partitions to json if there is no partition
  (bsc#1246940).</changelog>
  <changelog author="jreidinger@suse.com" date="1753963200">- Do not set selinux policy during installation and lets keep
  defaults provided by packages
  (bsc#1247046)</changelog>
  <changelog author="jlopez@suse.com" date="1754395200">- Fix MD RAID config checker to avoid generating a list of issues
  including a false value (bsc#1247557, bsc#1247585).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit D-Bus signal when storage is configured, including the
  client id (gh#agama-project/agama#2640).</changelog>
  <changelog author="jlopez@suse.com" date="1754568000">- Do not use 'retry' as default answer for questions (bsc#1247436).</changelog>
  <changelog author="ancor@suse.com" date="1755691200">- Removed the heuristic that used to consider some software RAID as
  bootable devices under some circumstances (bsc#1248195).
- Ensure that /boot/efi and /boot/zipl partitions created using the
  web UI are never encrypted (bsc#1248189, bsc#1247447).</changelog>
  <changelog author="ancor@suse.com" date="1756123200">- Improved initialization of iBFT (bsc#1247711).</changelog>
  <changelog author="jreidinger@suse.com" date="1756296000">- Fix calling GPG import callbacks for unattended installation for
  addons (bsc#1248782)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="jlopez@suse.com" date="1757937600">- Fix JSON conversion for not configured sizes (bsc#1249591).</changelog>
</package>
<package pkgid="9f57897c9b1cf958164adf451e5db88560a1e93d023fe7d4ec54ad72d0dcbcdd2fc484d5f0ac80a31fa2c391f6ee64a889beeef68d57fabedf67e0e9bb1b5e7d" name="agama-yast" arch="x86_64">
  <version epoch="0" ver="17.devel437.3b5eef886" rel="160000.1.1"/>
  <changelog author="jreidinger@suse.com" date="1753963200">- Do not set selinux policy during installation and lets keep
  defaults provided by packages
  (bsc#1247046)</changelog>
  <changelog author="jlopez@suse.com" date="1754395200">- Fix MD RAID config checker to avoid generating a list of issues
  including a false value (bsc#1247557, bsc#1247585).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit D-Bus signal when storage is configured, including the
  client id (gh#agama-project/agama#2640).</changelog>
  <changelog author="jlopez@suse.com" date="1754568000">- Do not use 'retry' as default answer for questions (bsc#1247436).</changelog>
  <changelog author="ancor@suse.com" date="1755691200">- Removed the heuristic that used to consider some software RAID as
  bootable devices under some circumstances (bsc#1248195).
- Ensure that /boot/efi and /boot/zipl partitions created using the
  web UI are never encrypted (bsc#1248189, bsc#1247447).</changelog>
  <changelog author="ancor@suse.com" date="1756123200">- Improved initialization of iBFT (bsc#1247711).</changelog>
  <changelog author="jreidinger@suse.com" date="1756296000">- Fix calling GPG import callbacks for unattended installation for
  addons (bsc#1248782)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="jlopez@suse.com" date="1757937600">- Fix JSON conversion for not configured sizes (bsc#1249591).</changelog>
  <changelog author="ancor@suse.com" date="1762516800">- Fixed an error in the calculation of partitions when several
  MD RAIDs are created (bsc#1253145).</changelog>
</package>
<package pkgid="1910275879652da4330d265c16336bbf6083f1e3a521dcb4645d45f9f516d4967733fceef751be535a6277801bf8ad29c492abfe3973be5ce07b7ed1d76ce476" name="agama-yast" arch="x86_64">
  <version epoch="0" ver="17.devel479.45626eae4" rel="160000.1.1"/>
  <changelog author="jlopez@suse.com" date="1754395200">- Fix MD RAID config checker to avoid generating a list of issues
  including a false value (bsc#1247557, bsc#1247585).</changelog>
  <changelog author="jlopez@suse.com" date="1754481600">- Emit D-Bus signal when storage is configured, including the
  client id (gh#agama-project/agama#2640).</changelog>
  <changelog author="jlopez@suse.com" date="1754568000">- Do not use 'retry' as default answer for questions (bsc#1247436).</changelog>
  <changelog author="ancor@suse.com" date="1755691200">- Removed the heuristic that used to consider some software RAID as
  bootable devices under some circumstances (bsc#1248195).
- Ensure that /boot/efi and /boot/zipl partitions created using the
  web UI are never encrypted (bsc#1248189, bsc#1247447).</changelog>
  <changelog author="ancor@suse.com" date="1756123200">- Improved initialization of iBFT (bsc#1247711).</changelog>
  <changelog author="jreidinger@suse.com" date="1756296000">- Fix calling GPG import callbacks for unattended installation for
  addons (bsc#1248782)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="jlopez@suse.com" date="1757937600">- Fix JSON conversion for not configured sizes (bsc#1249591).</changelog>
  <changelog author="ancor@suse.com" date="1762516800">- Fixed an error in the calculation of partitions when several
  MD RAIDs are created (bsc#1253145).</changelog>
  <changelog author="lslezak@suse.com" date="1771934400">- Do not log the URL password in the "inst.install_url" boot
  parameter (bsc#1258701)</changelog>
</package>
<package pkgid="5801405cb40987d06a442a274d1fbf7fe52e985a4b249c801ac2bd275c9256318f9146bb154d43af6133e68dce2c8ac5e560d9b5ca2176eefeb30712fc6a371d" name="agama-yast" arch="x86_64">
  <version epoch="0" ver="17.devel548.1005e25eb" rel="160000.1.1"/>
  <changelog author="jreidinger@suse.com" date="1756296000">- Fix calling GPG import callbacks for unattended installation for
  addons (bsc#1248782)</changelog>
  <changelog author="lslezak@suse.com" date="1757678400">- Update translations (bsc#1249378)</changelog>
  <changelog author="jlopez@suse.com" date="1757937600">- Fix JSON conversion for not configured sizes (bsc#1249591).</changelog>
  <changelog author="ancor@suse.com" date="1762516800">- Fixed an error in the calculation of partitions when several
  MD RAIDs are created (bsc#1253145).</changelog>
  <changelog author="lslezak@suse.com" date="1771934400">- Do not log the URL password in the "inst.install_url" boot
  parameter (bsc#1258701)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773144000">- Do not report AutoYaST elements as unsupported if the value is empty
  (bsc#1259458).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Properly handle nil user passwords when importing users from AutoYaST
  (related to bsc#1259434).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230401">- Add errors to the output of agama-autoyast (related to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Increase the Net::HTTP read_timeout to 300 seconds to mitigates
  timeouts during installation tasks (e.g., running scripts or
  writing files) (bsc#1259745) (gh#agama-project/agama#3296).
- Cherry pick test fix for the AutoYaST legacy proposal
  (original PR gh#agama-project/agama#2640).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Use /var/lib/agama/scripts to save the scripts in the target
  system (bsc#1261787).</changelog>
</package>
<package pkgid="303102df25d003795e1ae65305b25494afab823cacf3d21110ff9b605d137005e08a31e9d85d5d4b8ec44f4be02d3c1ab702bbf749e518b860c9925a3a2b787a" name="agama-yast" arch="x86_64">
  <version epoch="0" ver="17.devel614.6fbca49fb" rel="160000.1.1"/>
  <changelog author="jlopez@suse.com" date="1757937600">- Fix JSON conversion for not configured sizes (bsc#1249591).</changelog>
  <changelog author="ancor@suse.com" date="1762516800">- Fixed an error in the calculation of partitions when several
  MD RAIDs are created (bsc#1253145).</changelog>
  <changelog author="lslezak@suse.com" date="1771934400">- Do not log the URL password in the "inst.install_url" boot
  parameter (bsc#1258701)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773144000">- Do not report AutoYaST elements as unsupported if the value is empty
  (bsc#1259458).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Properly handle nil user passwords when importing users from AutoYaST
  (related to bsc#1259434).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230401">- Add errors to the output of agama-autoyast (related to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Increase the Net::HTTP read_timeout to 300 seconds to mitigates
  timeouts during installation tasks (e.g., running scripts or
  writing files) (bsc#1259745) (gh#agama-project/agama#3296).
- Cherry pick test fix for the AutoYaST legacy proposal
  (original PR gh#agama-project/agama#2640).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Use /var/lib/agama/scripts to save the scripts in the target
  system (bsc#1261787).</changelog>
  <changelog author="jreidinger@suse.com" date="1778846400">- Adapt code to new suseconnect-ng version (bsc#1265239)</changelog>
  <changelog author="lslezak@suse.com" date="1780660800">- Fixed using a custom password-protected installation repository
  (bsc#1258701)</changelog>
</package>
<package pkgid="50a6159bee7a83a659fa209e624abfa8cb158dd59426bd1f12e6b54850a87389ff6c170413ee3efed6eced5aff545a7cd45accb03681b131d34a66e5ed943a6d" name="agama-yast" arch="x86_64">
  <version epoch="0" ver="17.devel627.5fefa578c" rel="160000.1.1"/>
  <changelog author="ancor@suse.com" date="1762516800">- Fixed an error in the calculation of partitions when several
  MD RAIDs are created (bsc#1253145).</changelog>
  <changelog author="lslezak@suse.com" date="1771934400">- Do not log the URL password in the "inst.install_url" boot
  parameter (bsc#1258701)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773144000">- Do not report AutoYaST elements as unsupported if the value is empty
  (bsc#1259458).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230400">- Properly handle nil user passwords when importing users from AutoYaST
  (related to bsc#1259434).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1773230401">- Add errors to the output of agama-autoyast (related to bsc#1259434).</changelog>
  <changelog author="kanderssen@suse.com" date="1774353600">- Increase the Net::HTTP read_timeout to 300 seconds to mitigates
  timeouts during installation tasks (e.g., running scripts or
  writing files) (bsc#1259745) (gh#agama-project/agama#3296).
- Cherry pick test fix for the AutoYaST legacy proposal
  (original PR gh#agama-project/agama#2640).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1775822400">- Use /var/lib/agama/scripts to save the scripts in the target
  system (bsc#1261787).</changelog>
  <changelog author="jreidinger@suse.com" date="1778846400">- Adapt code to new suseconnect-ng version (bsc#1265239)</changelog>
  <changelog author="lslezak@suse.com" date="1780660800">- Fixed using a custom password-protected installation repository
  (bsc#1258701)</changelog>
  <changelog author="jreidinger@suse.com" date="1781092800">- always send all params to product activation as new
  suseconnect-ng do not transfer it from announce system (bsc#1268015)</changelog>
</package>
<package pkgid="05fb15c7c301c65f0df59a7491d2fffb82a4381ce6594980d0cc1fb08d35c52e660851dfd29a9dfb110ca4efacac57d6c76f8b62bc611373be1cd0c10ec7c855" name="age" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.14"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1631016000">- Initial package, version 1.0.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634385600">- Remove filler phrases from descriptions.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1672056000">- Update to version 1.1.1
  Plugins support
  * The age CLI now supports plugins, such as age-plugin-yubikey
  Breaking changes
  * If -i is used, passphrase-encrypted files are now rejected.
  * Empty final chunks are now rejected.
  Minor changes
  * PKCS#8-encoded Ed25519 private keys (such as 1Password exports)
    are now supported as SSH identities.
  * If an armored file is pasted into the terminal, age will now
    attempt to wait until the end of the file before prompting for
    a password.
  * Some invalid files are now correctly rejected, in particular
    encrypted files with trailing data.
  * If /dev/tty is present but can't be opened, age will now
    fallback to trying to treat stdin as a terminal as if
    /dev/tty wasn't present.
  * Input prompts now go to the terminal, even if standard error#
    is redirected.
  * Values of the new armor.Error type are now returned wrapped in
    decryption errors when appropriate.
  * Documentation and error messages were improved.</changelog>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1719921600">- Update to version 1.2.0
  * A small release to build the release binaries with a more
    recent Go toolchain, and to fix a couple CLI edge cases.
  * The Go module now exposes a plugin package that provides an age
    plugin client. That is, Recipient and Identity implementations
    that invoke a plugin binary, allowing the use of age plugins
    in Go programs.
  * Finally, Recipients can now return a set of "labels"
    by implementing RecipientWithLabels. This allows replicating
    the special behavior of the scrypt Recipient in third-party
    Recipients, or applying policy useful for authenticated
    or post-quantum Recipients.</changelog>
</package>
<package pkgid="62f3718a55d9b09c80922c7dc8e1934cf0bf984d6a979d4f9da45b410582446191a55dac35438fd3e6a4ec77614b1d5ee43fb2030b244d13e5c7f37db382aea7" name="agrep" arch="x86_64">
  <version epoch="0" ver="0.8.0_git201402282055" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.cz" date="1245326400">- updated to 0.7.6 (see NEWS)</changelog>
  <changelog author="pgajdos@suse.cz" date="1260446400">- updated to 0.8.0:
  - Added tre_ prefix to all functions exported from libtre.  This
    changes the binary interface (ABI).  The old source interface
    (API) is still available in &lt;tre/regex.h&gt;.  New programs should
    use &lt;tre/tre.h&gt;.
  - Visual C++ 6 project files replaced with Visual Studio 2008 files.
  - Bug fixes.
- package renamed to tre, splitted out subpackage libtre5</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags
- Enable pkgconfig provides</changelog>
  <changelog author="cfarrell@suse.com" date="1336478400">- license update: BSD-3-Clause
  Package is predominantly BSD-3-Clause licensed. This spec file license
  update makes the openSUSE package license substantially similar to the
  Fedora package license"</changelog>
  <changelog author="bjones@ece.msstate.edu" date="1396958400">- Added make check tests
- Added python-tre wrapper
- Used updated source from https://github.com/laurikari/tre/
- Added chicken.patch to correct Python build failures</changelog>
  <changelog author="pgajdos@suse.com" date="1398340800">- remove redundant setting of C(XX)FLAGS
- package translations in tre-lang</changelog>
  <changelog author="kbabioch@suse.com" date="1516104000">- CVE-2016-8859.patch: Fix multiple integer overflows which allowed
  attackers to cause memory corruption via a large number of (1) states or
  (2) tags, which triggered an out-of-bounds write (bnc#1005483)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580385600">- remove python2 bindings</changelog>
  <changelog author="dmueller@suse.com" date="1643284800">- require glibc-locale</changelog>
  <changelog author="fvogt@suse.com" date="1665489600">- Add patch to fix testsuite with bash &gt;= 5.2:
  * 0001-Remove-broken-agrep-test-entry.patch</changelog>
</package>
<package pkgid="0786ac33370d449638f2a25586ab1d8d652a010c1cdbb0da601f88585b6d825f3a3cb49e24bc5e7c29c9f543bab18c5d1cf885f2b1aa41d99100e1c10ab1fb4f" name="aha" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="bp160.1.6"/>
  <changelog author="mardnh@gmx.de" date="1470052800">- initial package</changelog>
  <changelog author="mardnh@gmx.de" date="1493985600">- Update to version 0.4.10.6
  * Fixed MANDIR according to the GNU Coding standards, the man file
    is now installed to $(PREFIX)/share/man instead of $(PREFIX)/man
  * Fixed reset of blinking text
  * Fixed reset of bold text
  * Improved handling of some rare, but not supported border cases
    like font changing
  * Removed two unused variables
  * Improved README and added screenshot
  * Fixed bug with "tput sgr0"
  * Fixed inverted colours
  * Changed contact email address in help and manpage</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1552478400">- Update to version 0.5
  * Added support for ansi vt220 character set using utf8 characters, useful for tables
  * Added support for italic text (thanks to suve)
  * Added support for crossed out text (thanks to suve)
  * Added support for 8 bit colours (thanks to  John Poole and suve)
  * Added support for 24 bit colours
  * Added rudimentary support for highlighting
  * Fixed behaviour of ESC[7m "negative image"
  * Fixed charset information in head based on used encoding (thanks to suve)
  * Fixed ESC[27m "revert off" (thanks to suve)
  * Escaping html special characters in title (thanks to suve)
  * Not returning zero at unknown option error (thanks to suve)
  * Refactored used colour scheme from int to enum (thanks to suve)
  * Refactored error report using errstr (thanks to suve)
  * Refactored code to avoid warnings (thanks to suve)
  * Refactored options to an own struct (thanks to suve)
  * Refactored color printing switch to an array (thanks to suve)
  * Refactored application state to an own struct (thanks to suve)
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552564800">- Use %make_install</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1596542400">- Update to version 0.5.1
  * Use doctype HTML5 instead of XHTML optionally.
  * Rewrote man page using mdoc.
  * Removed extra linebreak at end.
  * Use the #hex format for colours.
  * Added optional language attribute
  * Added vbcc support.
  * Fixed handling of SGR 39/49.
  * Added css inline option.
  * Added --style option for inlining css styles like font size.</changelog>
</package>
<package pkgid="7ed30a83a3d566dffaf4087fa5ca4288d702bfaab02752c875b40ef28093404a9dc91d228fc91f5d5f72b80c570504197ba99aa2db90cbd5e91d0c6b5fcf3aaf" name="aho-corasick-double-array-trie" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="bp160.1.10"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1582804800">- Initial packaging of aho-corasick-double-array-trie 1.2.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with maven.compiler.release=8 on any JDK &gt;= 9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726747200">- Specify build timestamp for reproducible builds</changelog>
</package>
<package pkgid="f4bc77119f727a79970f6e137a35193bd8d81579a467f870856c48ec0fcac05db55a162ebe18d443345704a90905f40774d562fafb461e2adf8e1675f1bc154f" name="aho-corasick-double-array-trie-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="bp160.1.10"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1582804800">- Initial packaging of aho-corasick-double-array-trie 1.2.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with maven.compiler.release=8 on any JDK &gt;= 9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695124800">- Do not require maven-javadoc-plugin that we don't use</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726747200">- Specify build timestamp for reproducible builds</changelog>
</package>
<package pkgid="caa9c5f20adf8527920b30c3f2fee38b4f8d6023d5bbe785f2b10207b29110fbd4a00bd3e4c419059eaf529a808eba3c0b5cdcc874032969f4ea695b81150816" name="ahx2play" arch="x86_64">
  <version epoch="0" ver="0~git20230215" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676376000">- Initial package, version 0~git20221101</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676462400">- Update to version 0~git20230215:
  * Added CMakeLists.txt by roox
- Drop not longer needed patch:
  * 0001-Create-CMakeLists.txt.patch</changelog>
</package>
<package pkgid="736f7a01d85d090de64e95187c254d90cd31b6d0643bed565c131346616ccfeb343f7ea1cc3eb5e7f31e556411eb1374527b4d2a9ac0d4c8aef5711cfe5e9c61" name="aide" arch="x86_64">
  <version epoch="0" ver="0.18.8" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1648555200">- Update to 0.17.4:
  * fix CVE-2021-45417: precalculate buffer size in base64 functions (bsc#1194735)</changelog>
  <changelog author="paolo.perego@suse.com" date="1677153600">- Update to 0.18
- Rename aide-0.17.3-as-needed.patch to and rebase aide-0.18-as-needed.patch
- Added autoconf and autoconf-archive as building dependencies due to an error
  when reconfiguring the source
- Rebase aide-xattr-in-libc.patch</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- update to 0.18.1:
  * Fix handling of empty growing files
  * Fix segfault when using --dry-init
  * Update README
- switch to pcre2</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966400">- Update to 0.18.3:
  * Handle readlink() errors
- Update to 0.18.2:
  * Add warning if rules contain not compiled-in attributes
  * Add missing lock for tree operations during file system scan</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966401">- switched service macros from %systemd_* to %service_*
  according to documentation at https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Registering_unit_files_in_install_scripts</changelog>
  <changelog author="info@paolostivanin.com" date="1688126400">- Update to 0.18.4:
  * Fix handling of extended attributes on symlinks
  * Add missing ')' to log message
  * Fix static linking of the aide binary
  * Don't require database_out for --dry-init
  * Remove strerror() calls from thread log messages</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 0.18.5:
  * Fix child directory processing on equal match</changelog>
  <changelog author="info@paolostivanin.com" date="1691064000">- Update to 0.18.6:
  * Fix double free() during report generation
  * Improve handling of ACL errors</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="aj@ajaissle.de" date="1723377600">-  Update to 0.18.8:
  * Fix concurrent reading of extended attributes (xattrs)
  * Raise warning if both input databases are the same
-  Update to 0.18.7:
  * Add missing library CFLAGS
  * Fix typo in aide.conf manual page
  * Fix 64-bit time_t on 32-bit architectures
  * Fix debug logging for returned attributes
  * Fix condition for error message of failing to open gzipped files
- rebased aide-0.18-as-needed.patch</changelog>
</package>
<package pkgid="0fa8c23c7967c9960ba37f4b5c63422d126a6426ef29aa7f94b87244b3989cc151107b6dec6e50ff6fd64b70eb0c0bd6af8b2d6398c70c9e776c69ab5ca4ad71" name="aide-test" arch="noarch">
  <version epoch="0" ver="0.18.8" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1648555200">- Update to 0.17.4:
  * fix CVE-2021-45417: precalculate buffer size in base64 functions (bsc#1194735)</changelog>
  <changelog author="paolo.perego@suse.com" date="1677153600">- Update to 0.18
- Rename aide-0.17.3-as-needed.patch to and rebase aide-0.18-as-needed.patch
- Added autoconf and autoconf-archive as building dependencies due to an error
  when reconfiguring the source
- Rebase aide-xattr-in-libc.patch</changelog>
  <changelog author="dmueller@suse.com" date="1679054400">- update to 0.18.1:
  * Fix handling of empty growing files
  * Fix segfault when using --dry-init
  * Update README
- switch to pcre2</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966400">- Update to 0.18.3:
  * Handle readlink() errors
- Update to 0.18.2:
  * Add warning if rules contain not compiled-in attributes
  * Add missing lock for tree operations during file system scan</changelog>
  <changelog author="andrea.manzini@suse.com" date="1685966401">- switched service macros from %systemd_* to %service_*
  according to documentation at https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Registering_unit_files_in_install_scripts</changelog>
  <changelog author="info@paolostivanin.com" date="1688126400">- Update to 0.18.4:
  * Fix handling of extended attributes on symlinks
  * Add missing ')' to log message
  * Fix static linking of the aide binary
  * Don't require database_out for --dry-init
  * Remove strerror() calls from thread log messages</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 0.18.5:
  * Fix child directory processing on equal match</changelog>
  <changelog author="info@paolostivanin.com" date="1691064000">- Update to 0.18.6:
  * Fix double free() during report generation
  * Improve handling of ACL errors</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="aj@ajaissle.de" date="1723377600">-  Update to 0.18.8:
  * Fix concurrent reading of extended attributes (xattrs)
  * Raise warning if both input databases are the same
-  Update to 0.18.7:
  * Add missing library CFLAGS
  * Fix typo in aide.conf manual page
  * Fix 64-bit time_t on 32-bit architectures
  * Fix debug logging for returned attributes
  * Fix condition for error message of failing to open gzipped files
- rebased aide-0.18-as-needed.patch</changelog>
</package>
<package pkgid="1d35bc65613bd6b519cbae2bc1f9589f2efe1f1a794f91022ef7777822f6b5f3ee1a34203d1b9d4ba849c50f49db131519e4f150bebfb6063bf023dfbb33eec0" name="airspyhf" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="bp160.1.13"/>
  <changelog author="mardnh@gmx.de" date="1500292800">- Initial package, version 0.0.0+git.20170716</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Fix license
- Update to version 0.0.0+git.20170718:
  * Changed the fallback sample rate to 768 ksps
  * Added a license file</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim description</changelog>
  <changelog author="mardnh@gmx.de" date="1508587200">- Update to version 0.0.0+git.20170930:
  * Fixed enum prefix
  * Added API for user application output pins
  * Added APIs for getting library and firmware version
  * Added API for enumerating multiple devices</changelog>
  <changelog author="mardnh@gmx.de" date="1519560000">- Update to version 1.1.0+git.20180217:
  * Updated the version number to 1.1.0
  * Added LNA, ATT, AGC and Threshold settings for the HF tuner.
  * Improved the convergence of the IQ balancer - again.
  * New heuristic for faster convergence in the IQ correction algorithm.
  * Bugfix airspyhf_open_device() with given serial for device identification
  * allow static compilation with definition of 'STATIC_AIRSPYHFPLUS'
  * airspyhf_list_devices accepts NULL as serials pointer to only get the number of devices
  * remove a compile warning under Linux
  * Improved the image rejection algorithm for the Airspy HF+</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Update to version 1.1.5
  * Fixed the Linux build
  * Updated the IQ correction algorithm;
  * Updated the version number and copyright dates
  * Better handling of weak signals in the IQ correction algorithm.</changelog>
  <changelog author="Wojciech Kazubski &lt;wk@ire.pw.edu.pl&gt;" date="1548590400">- fix build for Leap 42.3</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1586433600">- Update to version 1.6.8
  * add airspyhf_* tools
- Update patch
  * libairspyhf/src/CMakeLists.txt</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="5f72d3b9a67695c77942d4c4383a9995eb679206a7567d8ce6620b7241b38a1b77c514bfe3a7f2b32129ff6dab05f2948ae7755bb95678959b2f29124496eefb" name="airspyhf-devel" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="bp160.1.13"/>
  <changelog author="mardnh@gmx.de" date="1500292800">- Initial package, version 0.0.0+git.20170716</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Fix license
- Update to version 0.0.0+git.20170718:
  * Changed the fallback sample rate to 768 ksps
  * Added a license file</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim description</changelog>
  <changelog author="mardnh@gmx.de" date="1508587200">- Update to version 0.0.0+git.20170930:
  * Fixed enum prefix
  * Added API for user application output pins
  * Added APIs for getting library and firmware version
  * Added API for enumerating multiple devices</changelog>
  <changelog author="mardnh@gmx.de" date="1519560000">- Update to version 1.1.0+git.20180217:
  * Updated the version number to 1.1.0
  * Added LNA, ATT, AGC and Threshold settings for the HF tuner.
  * Improved the convergence of the IQ balancer - again.
  * New heuristic for faster convergence in the IQ correction algorithm.
  * Bugfix airspyhf_open_device() with given serial for device identification
  * allow static compilation with definition of 'STATIC_AIRSPYHFPLUS'
  * airspyhf_list_devices accepts NULL as serials pointer to only get the number of devices
  * remove a compile warning under Linux
  * Improved the image rejection algorithm for the Airspy HF+</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Update to version 1.1.5
  * Fixed the Linux build
  * Updated the IQ correction algorithm;
  * Updated the version number and copyright dates
  * Better handling of weak signals in the IQ correction algorithm.</changelog>
  <changelog author="Wojciech Kazubski &lt;wk@ire.pw.edu.pl&gt;" date="1548590400">- fix build for Leap 42.3</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1586433600">- Update to version 1.6.8
  * add airspyhf_* tools
- Update patch
  * libairspyhf/src/CMakeLists.txt</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a9795a9e11d257836155f65f05afc82b703ae644114ab6aec7d5dfd1604222622f6ef7ce7fd17d09ccaa048569b278e0bb99243ff3aea6ba16372b1b654eebb1" name="airspyhf-udev" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="bp160.1.13"/>
  <changelog author="mardnh@gmx.de" date="1500292800">- Initial package, version 0.0.0+git.20170716</changelog>
  <changelog author="mardnh@gmx.de" date="1500379200">- Fix license
- Update to version 0.0.0+git.20170718:
  * Changed the fallback sample rate to 768 ksps
  * Added a license file</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim description</changelog>
  <changelog author="mardnh@gmx.de" date="1508587200">- Update to version 0.0.0+git.20170930:
  * Fixed enum prefix
  * Added API for user application output pins
  * Added APIs for getting library and firmware version
  * Added API for enumerating multiple devices</changelog>
  <changelog author="mardnh@gmx.de" date="1519560000">- Update to version 1.1.0+git.20180217:
  * Updated the version number to 1.1.0
  * Added LNA, ATT, AGC and Threshold settings for the HF tuner.
  * Improved the convergence of the IQ balancer - again.
  * New heuristic for faster convergence in the IQ correction algorithm.
  * Bugfix airspyhf_open_device() with given serial for device identification
  * allow static compilation with definition of 'STATIC_AIRSPYHFPLUS'
  * airspyhf_list_devices accepts NULL as serials pointer to only get the number of devices
  * remove a compile warning under Linux
  * Improved the image rejection algorithm for the Airspy HF+</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Update to version 1.1.5
  * Fixed the Linux build
  * Updated the IQ correction algorithm;
  * Updated the version number and copyright dates
  * Better handling of weak signals in the IQ correction algorithm.</changelog>
  <changelog author="Wojciech Kazubski &lt;wk@ire.pw.edu.pl&gt;" date="1548590400">- fix build for Leap 42.3</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1586433600">- Update to version 1.6.8
  * add airspyhf_* tools
- Update patch
  * libairspyhf/src/CMakeLists.txt</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="200fb9856fcca750f04df043f432588f05e4a006d3876b8c11f68b265b09e42cdb1fdc7c7d4ea80a52f98e86672ac12df30a0e0c2c7c912902f67df5867d089f" name="aisleriot" arch="x86_64">
  <version epoch="0" ver="3.22.35" rel="bp160.1.7"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668427200">- Update to version 3.22.26:
  + metainfo: pass validation.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1670241600">- Update to version 3.22.27:
  + theme: qsvg: Flush surface before drawing to it with qt.
  + game: Provide a clean environment for each game.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683028800">- Update to version 3.22.29:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1695643200">- Update to version 3.22.30:
  + Revert "game: Provide a clean environment for each game"
    (glgo#GNOME/aisleriot#961).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1697112000">- Replace lsb-release with distribution-release BuildRequires:
  aisleriot meson setup uses /etc/os-release to determine
  distribution.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711627200">- Update to version 3.22.31:
  + Cards: Add multiple new card decks.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 3.22.32:
  + Fixes and optimisations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1718107200">- Update to version 3.22.33:
  + README: Update user manual URI.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 3.22.34:
  + help: Grammar fixes
  + games: Add new game Australian Patience
  + eight-off:
  - Change double-click behavior to move to a reserve
  - Shrink distance between foundations and main area
  + cards:
  - Bug fix for neoclassical themes
  - New card theme Pixelangelo Compact
  - Tweak the king of kearts
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738152000">- Update to version 3.22.35:
  + ci: Add CI
  + Updated translations.</changelog>
</package>
<package pkgid="d9fb5ad8e74a30f16067edabbe21aea94ce3acdedc88ec58529359135c2e7b01f1bc36a199b0b2b5e29aa60a08cc1fa948cb4fe10808cf66b3b5f24e2f7e96d1" name="aisleriot-lang" arch="noarch">
  <version epoch="0" ver="3.22.35" rel="bp160.1.7"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668427200">- Update to version 3.22.26:
  + metainfo: pass validation.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1670241600">- Update to version 3.22.27:
  + theme: qsvg: Flush surface before drawing to it with qt.
  + game: Provide a clean environment for each game.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683028800">- Update to version 3.22.29:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1695643200">- Update to version 3.22.30:
  + Revert "game: Provide a clean environment for each game"
    (glgo#GNOME/aisleriot#961).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1697112000">- Replace lsb-release with distribution-release BuildRequires:
  aisleriot meson setup uses /etc/os-release to determine
  distribution.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711627200">- Update to version 3.22.31:
  + Cards: Add multiple new card decks.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 3.22.32:
  + Fixes and optimisations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1718107200">- Update to version 3.22.33:
  + README: Update user manual URI.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 3.22.34:
  + help: Grammar fixes
  + games: Add new game Australian Patience
  + eight-off:
  - Change double-click behavior to move to a reserve
  - Shrink distance between foundations and main area
  + cards:
  - Bug fix for neoclassical themes
  - New card theme Pixelangelo Compact
  - Tweak the king of kearts
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738152000">- Update to version 3.22.35:
  + ci: Add CI
  + Updated translations.</changelog>
</package>
<package pkgid="31be3ad427aebfe192a0da3356aea0cb676b2933f6fb1d6de74e398289b4882cd68b4115f8587b95222dcb3756a891785cd4b718d4aec44efb1702d874038ccc" name="aisleriot-themes" arch="noarch">
  <version epoch="0" ver="3.22.35" rel="bp160.1.7"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1668427200">- Update to version 3.22.26:
  + metainfo: pass validation.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1670241600">- Update to version 3.22.27:
  + theme: qsvg: Flush surface before drawing to it with qt.
  + game: Provide a clean environment for each game.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683028800">- Update to version 3.22.29:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1695643200">- Update to version 3.22.30:
  + Revert "game: Provide a clean environment for each game"
    (glgo#GNOME/aisleriot#961).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1697112000">- Replace lsb-release with distribution-release BuildRequires:
  aisleriot meson setup uses /etc/os-release to determine
  distribution.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711627200">- Update to version 3.22.31:
  + Cards: Add multiple new card decks.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 3.22.32:
  + Fixes and optimisations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1718107200">- Update to version 3.22.33:
  + README: Update user manual URI.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 3.22.34:
  + help: Grammar fixes
  + games: Add new game Australian Patience
  + eight-off:
  - Change double-click behavior to move to a reserve
  - Shrink distance between foundations and main area
  + cards:
  - Bug fix for neoclassical themes
  - New card theme Pixelangelo Compact
  - Tweak the king of kearts
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738152000">- Update to version 3.22.35:
  + ci: Add CI
  + Updated translations.</changelog>
</package>
<package pkgid="486f62d27ce11f93ac6c928c998415b420088dd513a73943ec06a2814f742482f58d94749441c7ae9db6b8bab757becab7856cba4a64492a0d79e2a52715666d" name="akonadi" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.4"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Send entire Tags in ItemsTagsChanged notification
  * Group ItemsTagsChanged notification on tag deletion by collection
  * TagDeleteHandler: perform deletion in DB transaction</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * collectionstatisticsdelegate.cpp - Use ActiveText role for unread count
  * Fix build with Qt 6.10 (dev)
  * changerecorderjournal: Fix loading tags
  * Optimize load tags
  * ItemFetchJob: split up the query to avoid SQL placeholder limit</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * collectioncombobox.cpp - add a connect to deal with the combobox changes (kde#498551)
  * agenttypedialog.cpp - UI improvements (kde#499398)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * src/widgets/agenttypewidget.cpp - reduce iconsize from 64 to 32
  * Add missing include</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * resourcebase.cpp - collectionsRetrieved() - return rather than assert
  * fix batch query operation really completing full set (kde#494807)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="61421ddabef4f611113424154f1eed7c84a68ec7e599b16b58f530b87cb38cae6da2f5c55285c5bd0f0f81b4f270c53c750bd018516e89a59653f060960241a2" name="akonadi-apparmor" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.4"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Send entire Tags in ItemsTagsChanged notification
  * Group ItemsTagsChanged notification on tag deletion by collection
  * TagDeleteHandler: perform deletion in DB transaction</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * collectionstatisticsdelegate.cpp - Use ActiveText role for unread count
  * Fix build with Qt 6.10 (dev)
  * changerecorderjournal: Fix loading tags
  * Optimize load tags
  * ItemFetchJob: split up the query to avoid SQL placeholder limit</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * collectioncombobox.cpp - add a connect to deal with the combobox changes (kde#498551)
  * agenttypedialog.cpp - UI improvements (kde#499398)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * src/widgets/agenttypewidget.cpp - reduce iconsize from 64 to 32
  * Add missing include</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * resourcebase.cpp - collectionsRetrieved() - return rather than assert
  * fix batch query operation really completing full set (kde#494807)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="a19e7e5e7705695052571d9406c17b662c91abe6ca734f2e7ae789f0304872cb74aa3ec1f6ad563ee70a56ebfba93df05a612c5d27323797f536bfb12f91f424" name="akonadi-calendar" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * etmcalendar.cpp - logic improvements in updateItem()
  * calendarbase.h - Akonadi::Item CalendarBase::item() - remove qcDebug()
  * src/calendarbase.cpp - clean old '#if 0' cruft
  * Add xml/yaml linting
  * Fix dependancy
  * Rename Composer to ComposerJob
  * [kalendarac] Use state config to store things
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Adapt to move of KeyResolver to MessageComposer namespace</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * collectioncalendar.cpp - logic improvements in updateItem()
  * todomodel.cpp - improve some logic when testing indexes and items</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="58ec2c430b9c6729d7b48041c908224d3b96e8718d5aa8f8157aa2f29d05271e719cf7c18e12c042a01455213b3ac8258f10c7d8e19035e5a7a9e7c2c9e276b8" name="akonadi-calendar-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * etmcalendar.cpp - logic improvements in updateItem()
  * calendarbase.h - Akonadi::Item CalendarBase::item() - remove qcDebug()
  * src/calendarbase.cpp - clean old '#if 0' cruft
  * Add xml/yaml linting
  * Fix dependancy
  * Rename Composer to ComposerJob
  * [kalendarac] Use state config to store things
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Adapt to move of KeyResolver to MessageComposer namespace</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * collectioncalendar.cpp - logic improvements in updateItem()
  * todomodel.cpp - improve some logic when testing indexes and items</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="13edf46444e422864d3d57c64d14ab20aed1831996f5129fe6ef300c80f4a31eee2315f813d901b74949409ba86b3ce5c9163c6a08733513c133e670aee0b879" name="akonadi-calendar-tools" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Change KDEPIM_DEV_VERSION
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="3608bc4452f290cfa8bce947d89201097f36ce107c6733feb1258da84e80b126808ca83d0213470667e49a0a466798196c03fa24ed4e65ba449a6f79c3869777" name="akonadi-calendar-tools-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Change KDEPIM_DEV_VERSION
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="edfad735342fa36e298460abbca8607db29bc95fe9544f9d89711c5c5c47799d2a6fae6de3e884e2afbe0fdb59a798eb3cb7e393b2b2232ffd9f60fd8599fb0a" name="akonadi-contacts" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * contactstreemodel: Expose addressee as role in model
  * Require test on all system
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="24468dea420d49ac8560e949ef0c9f02a54904e45e986a8592b009036aed932572a38b9e2f6e898fa6fe55c790d5c83997d5dd4a6c6f33321cd1727b6b5b54ed" name="akonadi-contacts-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * contactstreemodel: Expose addressee as role in model
  * Require test on all system
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="fb76a4debeb3f417a3a675d606c0af4870257dd2bb2ac1bbcf4243e19e8677ce10215cb65e46345fc1a4c07e0ea174b5b8e8a3a81eccfea9dc00f0defe6a269d" name="akonadi-contacts-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * contactstreemodel: Expose addressee as role in model
  * Require test on all system
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="cd2c2b508f333037c27523dad3cdff3dc4d39d44025be0fb67a86b26ae409d01ff9b8f17d9cfc224125109a2d74ba1753ae055ec1eed900bc837657b0fa9480a" name="akonadi-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.4"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Send entire Tags in ItemsTagsChanged notification
  * Group ItemsTagsChanged notification on tag deletion by collection
  * TagDeleteHandler: perform deletion in DB transaction</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * collectionstatisticsdelegate.cpp - Use ActiveText role for unread count
  * Fix build with Qt 6.10 (dev)
  * changerecorderjournal: Fix loading tags
  * Optimize load tags
  * ItemFetchJob: split up the query to avoid SQL placeholder limit</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * collectioncombobox.cpp - add a connect to deal with the combobox changes (kde#498551)
  * agenttypedialog.cpp - UI improvements (kde#499398)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * src/widgets/agenttypewidget.cpp - reduce iconsize from 64 to 32
  * Add missing include</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * resourcebase.cpp - collectionsRetrieved() - return rather than assert
  * fix batch query operation really completing full set (kde#494807)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="39002db54b22a06977045e53396d9a7a640ba31ea8e559570e353c755e4ab3d549273ac249c8dde7aa6f928a3d31e361b7992d60b4bb0389cead3e2c615b88bf" name="akonadi-import-wizard" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Set desktop file name
  * Change KDEPIM_DEV_VERSION
  * We depend against kf6.9 now
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Use not deprecated KHelpMenu constructor</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="ee48938c97bf2ce2678d07ecf511c1c153f8b05384622b58b91f21b30f8dbb5175a339daec159fb7903383037abe4e975701d410dcaf5323937565b4cac6f4cc" name="akonadi-import-wizard-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Set desktop file name
  * Change KDEPIM_DEV_VERSION
  * We depend against kf6.9 now
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Use not deprecated KHelpMenu constructor</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="929837e1e1033282a1122bba7230af9b14306e32d04fc9c11c3ea6d7b2fcca0252a4724ed8172a2fcf110a19803924f34664880af971928a308f8967e5400971" name="akonadi-import-wizard-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Set desktop file name
  * Change KDEPIM_DEV_VERSION
  * We depend against kf6.9 now
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Use not deprecated KHelpMenu constructor</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="1293617e6a38ef9dc21b750eb798574976dcd17f2f295d93e4c2d28050d0bade9b24372cab31991e7a8c2e7782255089b441ff892f8704777c62348882feb444" name="akonadi-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.4"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Send entire Tags in ItemsTagsChanged notification
  * Group ItemsTagsChanged notification on tag deletion by collection
  * TagDeleteHandler: perform deletion in DB transaction</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * collectionstatisticsdelegate.cpp - Use ActiveText role for unread count
  * Fix build with Qt 6.10 (dev)
  * changerecorderjournal: Fix loading tags
  * Optimize load tags
  * ItemFetchJob: split up the query to avoid SQL placeholder limit</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * collectioncombobox.cpp - add a connect to deal with the combobox changes (kde#498551)
  * agenttypedialog.cpp - UI improvements (kde#499398)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * src/widgets/agenttypewidget.cpp - reduce iconsize from 64 to 32
  * Add missing include</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * resourcebase.cpp - collectionsRetrieved() - return rather than assert
  * fix batch query operation really completing full set (kde#494807)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="9f0b19165b770a8618f94844f521d0f07e7393c831f7ca59d0fcf8693f6db35f861a59003021c9bc4930b697b76625bf1429d53ebd9cc291eb642aa569f8af85" name="akonadi-mime" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Don't create missing KMime header objects during serialization
  * Prepare for upcoming KMime::Header::SingleMailbox changes
  * Only create MIME headers that actually exists during deserialization
  * Reuse the QString buffer used during QDataStream deserialization
  * Add Spam special mail collection</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="de09d0a2c067d1b898c9497c9e875b04be2f88917a172ae6f891413edbe280bdbd2b376b7c4a552dbdc8497ab4ee9073334663ec9f96b4a5d9fcacb25a7eab23" name="akonadi-mime-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Don't create missing KMime header objects during serialization
  * Prepare for upcoming KMime::Header::SingleMailbox changes
  * Only create MIME headers that actually exists during deserialization
  * Reuse the QString buffer used during QDataStream deserialization
  * Add Spam special mail collection</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="4efe98928460c6d057505260bf0aeed9f7274df5857744b9ae5da9e4f60a8cb1c966a017477bfb0e032a05cceb28b5c97edfd435606fee264c259efc60c2644c" name="akonadi-plugin-calendar" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * etmcalendar.cpp - logic improvements in updateItem()
  * calendarbase.h - Akonadi::Item CalendarBase::item() - remove qcDebug()
  * src/calendarbase.cpp - clean old '#if 0' cruft
  * Add xml/yaml linting
  * Fix dependancy
  * Rename Composer to ComposerJob
  * [kalendarac] Use state config to store things
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Adapt to move of KeyResolver to MessageComposer namespace</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * collectioncalendar.cpp - logic improvements in updateItem()
  * todomodel.cpp - improve some logic when testing indexes and items</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="17df196811a8ca36b27725c2f33e9d2d36f00ebecaf03f69912215ed7f83a14115cd963176b523ba4d4bd371c39d43be099db1afeb133c7f69fed8a303a809dd" name="akonadi-plugin-contacts" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * contactstreemodel: Expose addressee as role in model
  * Require test on all system
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="a1491ee3e1c8bd6b8fa9c960f6d7ab6a050374b1833bf595ad4c699de40679e5352d471049e63b858d9534bb708a071852518580bb579bc37fefee72ab221d08" name="akonadi-plugin-mime" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Don't create missing KMime header objects during serialization
  * Prepare for upcoming KMime::Header::SingleMailbox changes
  * Only create MIME headers that actually exists during deserialization
  * Reuse the QString buffer used during QDataStream deserialization
  * Add Spam special mail collection</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="b00a09042cb15159529f562eea6743da9331e81ef0854e241735fc78dd20e606695d89c00f346ef63fe74651fc5bce2380923a59922a798ae18db85675f9679a" name="akonadi-search" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Add CONFIG
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Const'ify method
  * Use uint8_t
  * Don't export private method
  * Use  uint8_t here
  * Update Rust packages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="28fd86dbde482667ff3400664a21d93a91109e6abfd25c5b35d8b97d6f6f6e55e03e20e2be02a6b7a74757049917b1f580c2588c0fa4dd10c378c7a3f5a6a586" name="akonadi-search-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Add CONFIG
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Const'ify method
  * Use uint8_t
  * Don't export private method
  * Use  uint8_t here
  * Update Rust packages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="02fba715e128725d4d649da5e6135a8587dec55ce019279a0f051ba44bab64d49cf0fa632326ffcc1732237c9b49a547a3d092ed8df4dfe6514742cf925a5bf9" name="akonadi-search-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Add CONFIG
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Const'ify method
  * Use uint8_t
  * Don't export private method
  * Use  uint8_t here
  * Update Rust packages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="709f603575c6f2f24dfa6e1acb910b486f87e77bc59939665d01ddd813a9604bdf866a81452a7b5b91a91ffb4644ddb5eb3ad7e4fb163ef47f20edd4fb418e4f" name="akonadiconsole" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Add back removedTags
  * Make compile without akonadi change</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add back removedTags
  * Change KDEPIM_DEV_VERSION
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Make compile without akonadi change
  * Not necessary to build as single apps now it's in kontact meta package
  * Add 44 and 150 px icons</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * Fix editing and deleting tag</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="77bd6e5958f73518b849c5aa06e0153527ba7085666ea1aba5b19bd5d9e2eb6f5594cbfade95ebc09287a06524ae098e439437f438e2d22da9d0dec5581e0296" name="akonadiconsole-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Add back removedTags
  * Make compile without akonadi change</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add back removedTags
  * Change KDEPIM_DEV_VERSION
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary
  * Make compile without akonadi change
  * Not necessary to build as single apps now it's in kontact meta package
  * Add 44 and 150 px icons</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * Fix editing and deleting tag</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="3ac52b14858b1db4605e211a6d76caafdbacbe6f91fa9977e250c95a6cdf967bc2cd2a1e5f3b0303b7c9fd49088c8a6e3da51e581d3dbe25d7dccdbe92a65902" name="akregator" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Adapt to new api
  * Fix bug 496413:  Whenever leaving telemetry screen in settings, user is asked for changes confirmation (kde#496413)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Use AKREGATOR_RELEASE_VERSION_DATE</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Re-register the MainWindow with the system tray icon if its window handle changes (kde#494071)
  * Fix extra empty line when adding a new feed (kde#407935)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="f747c90351ca5de2a242fa3a4927a08c53ab64928fd53849d5fe74a7ca8794da5273ccf1e8138cc72ceba39b131d9a60f20fc8062107d4ae9308c50bc2ddae50" name="akregator-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Adapt to new api
  * Fix bug 496413:  Whenever leaving telemetry screen in settings, user is asked for changes confirmation (kde#496413)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Use AKREGATOR_RELEASE_VERSION_DATE</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Re-register the MainWindow with the system tray icon if its window handle changes (kde#494071)
  * Fix extra empty line when adding a new feed (kde#407935)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="edf15fb36533d631f7896b6abd6bad2313e6e2d1f7f8f2e35d29b4ac72e8a6f0f104540232a337aaa8950ef22ac40086d1f5b1d4051ef5468cddcc25ca507580" name="alac" arch="x86_64">
  <version epoch="0" ver="0.0+git.20160511" rel="bp160.1.6"/>
  <changelog author="crrodriguez@opensuse.org" date="1388750400">- libalac-makefile.patch update, OPTFLAGS must be used
  at linking time as well.
- alac-endian.patch, fix endian conversion routines
  * They were inneficient, use optimized versions provided by the OS.
  * They were wrong, assumes for example that ARM is not little endian
  and that powerpc is always big endian.
- fix cflags so large file support is enabled, GNU_SOURCE is defined,
  strict aliasing is disabled and C++ inlines get hidden visibility.</changelog>
  <changelog author="mpluskal@suse.com" date="1428840000">- Cleanup spec file with spec-cleaner
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1428926400">- Remove devel-static package as it has no users</changelog>
  <changelog author="mpluskal@suse.com" date="1452859200">- Install both license files</changelog>
  <changelog author="jengelh@inai.de" date="1453204800">- Change the SRPM name to alac (follow apparent upstream project
  name).</changelog>
  <changelog author="mpluskal@suse.com" date="1476878400">- Update project url
- Use _service to fetch sources from git
- Update to version 0.0+git.20160511
- Refresh patches:
  * alac-endian.patch
  * libalac-makefile.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo where we had missing % in provides/obsoletes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430401">- Fix build: use autosetup -p0. autosetup alone does not imply -p0</changelog>
</package>
<package pkgid="855630f69e6aec9ef23ec9ddd0a0c48ef4ed9aa42e77d6b62d905d9099516633971323424a7a452e82796d860005e8ffc79f207682059f4186b8cf167d88a7dd" name="alac-devel" arch="x86_64">
  <version epoch="0" ver="0.0+git.20160511" rel="bp160.1.6"/>
  <changelog author="crrodriguez@opensuse.org" date="1388750400">- libalac-makefile.patch update, OPTFLAGS must be used
  at linking time as well.
- alac-endian.patch, fix endian conversion routines
  * They were inneficient, use optimized versions provided by the OS.
  * They were wrong, assumes for example that ARM is not little endian
  and that powerpc is always big endian.
- fix cflags so large file support is enabled, GNU_SOURCE is defined,
  strict aliasing is disabled and C++ inlines get hidden visibility.</changelog>
  <changelog author="mpluskal@suse.com" date="1428840000">- Cleanup spec file with spec-cleaner
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1428926400">- Remove devel-static package as it has no users</changelog>
  <changelog author="mpluskal@suse.com" date="1452859200">- Install both license files</changelog>
  <changelog author="jengelh@inai.de" date="1453204800">- Change the SRPM name to alac (follow apparent upstream project
  name).</changelog>
  <changelog author="mpluskal@suse.com" date="1476878400">- Update project url
- Use _service to fetch sources from git
- Update to version 0.0+git.20160511
- Refresh patches:
  * alac-endian.patch
  * libalac-makefile.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo where we had missing % in provides/obsoletes</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430401">- Fix build: use autosetup -p0. autosetup alone does not imply -p0</changelog>
</package>
<package pkgid="2c5923a4cef85c2109a852f616c0495022ed88206ecef141318a1ff4c1678adb823662d1fe38bc530c4b7cfcf3f1f4c031f78850c9739eab74e21983feed62ac" name="alacarte" arch="noarch">
  <version epoch="0" ver="3.56.0" rel="bp160.1.2"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1647864000">- Update to version 3.44.0:
  + Resync command line validity on focus gained
    (glgo#GNOME/alacarte#10).
  + Fix icon changing (glgo#GNOME/alacarte#13).
  + Updated translations.
- Drop no longer needed hicolor-icon-theme build requirement. It
  was only being required for the icon_theme_cache_post(un) macros,
  which, by the way, have been replaced by RPM file trigger
  facilities.
- Bump Python minimal build requirement version from 3.2 to 3.3
  aligning with configure build script checks.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1648036800">- Update to version 3.44.1:
  + Updated translations.
- Replace intltool build requirement with gettext to follow
  upstream changes.
- Add a shell construct to check whether the ChangeLog file size is
  zero or not. If it's zero, we don't package the file, but remove
  it.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1655726400">- Update to version 3.44.2:
  + Fix launcher saving.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1689508800">- Update to version 3.44.3:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695556800">- Update to version 3.50.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711022400">- Update to version 3.52.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728907200">- Update to version 3.54.0:
  + Show only images in icon picker.
  + Add AppStream metadata.
  + Updated translations.
- Convert to obs_scm source service for easier updating.
- Add libtool BuildRequires and call autogen.sh: the git checkout
  is not bootstrapped.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1736769600">- Update to version 3.54.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745668800">- Update to version 3.56.0:
  + Ignore missing icon file.
  + Updated translations.
- Drop update-desktop-files BuildRequires and macro, we are
  dropping it from distro.</changelog>
</package>
<package pkgid="9558b964204e78a29a80679b684419a39c510717866d5a5e179078494fb51969943634f5d3a28f45801081d4afde5534bcbd1b0071efa75cc462ab30d8064079" name="alacarte-lang" arch="noarch">
  <version epoch="0" ver="3.56.0" rel="bp160.1.2"/>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1647864000">- Update to version 3.44.0:
  + Resync command line validity on focus gained
    (glgo#GNOME/alacarte#10).
  + Fix icon changing (glgo#GNOME/alacarte#13).
  + Updated translations.
- Drop no longer needed hicolor-icon-theme build requirement. It
  was only being required for the icon_theme_cache_post(un) macros,
  which, by the way, have been replaced by RPM file trigger
  facilities.
- Bump Python minimal build requirement version from 3.2 to 3.3
  aligning with configure build script checks.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1648036800">- Update to version 3.44.1:
  + Updated translations.
- Replace intltool build requirement with gettext to follow
  upstream changes.
- Add a shell construct to check whether the ChangeLog file size is
  zero or not. If it's zero, we don't package the file, but remove
  it.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1655726400">- Update to version 3.44.2:
  + Fix launcher saving.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1689508800">- Update to version 3.44.3:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695556800">- Update to version 3.50.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711022400">- Update to version 3.52.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728907200">- Update to version 3.54.0:
  + Show only images in icon picker.
  + Add AppStream metadata.
  + Updated translations.
- Convert to obs_scm source service for easier updating.
- Add libtool BuildRequires and call autogen.sh: the git checkout
  is not bootstrapped.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1736769600">- Update to version 3.54.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745668800">- Update to version 3.56.0:
  + Ignore missing icon file.
  + Updated translations.
- Drop update-desktop-files BuildRequires and macro, we are
  dropping it from distro.</changelog>
</package>
<package pkgid="3d947f3a4b8f3e6e2170637ca0a2b015a460d1bf173346dce48f075973c8a5ea198ff667c5b255ab0b904d2e04af8929699ea6e9417b821e99f4e5624f4a5316" name="alacritty" arch="x86_64">
  <version epoch="0" ver="0.13.2" rel="bp160.1.14"/>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1687089600">- Make terminfo package a suggested dependency
- Do not install terminfo anymore</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1688472000">- Update to version 0.12.2:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Bump `actions/checkout` to v3</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1696334400">- Update to version 0.12.3:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Update winit to 0.28.7 and sctk to 0.16.1</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1696852800">- Reduced vendored size using cargo-vendor-filterer
  * vendor.tar.xz was 28MB.. now it is 8.2MB
- Update _service file
  * replace mode "disabled" to "manual" since "disabled" is deprecated.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Replace freetype-devel BuildRequires with freetype2: this is
  actually what is needed, but as fontconfig happened to pull it in
  already, things happened to work. Freetype 1 is not needed here.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1704024000">- Enable automatic updates of vendored dependencies
- Remove cargo_config since it's now build by cargo_vendor
- Generate manpages via scdoc
- Update to version 0.13.0:
  * Added
    + Warnings for unused configuration file options
    + Config option persist in hints config section
    + Support for keybindings with dead keys
    + Back/Forward mouse buttons support in bindings
    + Copy global IPC options (-w -1) for new windows
    + Support startup notify protocol to raise initial window on
    Wayland/X11
    + Debug option prefer_egl to prioritize EGL over other display
    APIs
    + Inline vi-mode search using f/F/t/T
    + window.blur config option to request blur for transparent
    windows
    + --option argument for alacritty msg create-window
    + Support for DECRQM/DECRPM escape sequences
    + Support for kitty's keyboard protocol
  * Changed
    + Mode-specific bindings can now be bound in any mode for
    easier macros
    + --help output is more compact now and uses more neutral
    palette
    + Configuration file now uses TOML instead of YAML
    + Deprecated config option draw_bold_text_with_bright_colors,
    use colors.draw_bold_text_with_bright_colors
    + Deprecated config option key_bindings, use keyboard.bindings
    + Deprecated config option mouse_bindings, use mouse.bindings
    + The default colorscheme is now based on base16 classic dark
    + IME popup now tries to not obscure the current cursor line
    + The double click threshold was raised to 400ms
    + OSC 52 paste ability is now disabled by default; use
    terminal.osc52 to adjust it
    + Apply colors.transparent_background_colors for selections,
    hints, and search matches
    + Underline full hint during keyboard selection
    + Synchronized updates now use CSI 2026 instead of legacy DCS
    variant
    + In mouse mode with Shift pressed, mouse bindings without
    Shift are only triggered if no exact binding (i.e. one with
    Shift) is found.
    + Use built-in font for powerline symbols from U+E0B0 to U+E0B3
    + Default bell.animation is now Linear
    + IncreaseFontSize/DecreaseFontSize step is now 1px
    + font.size precision was raised to 6 floating point digits
    + Default font size to 11.25 matching 15px
    + Xft.dpi is now reloaded when xsettingd change its value on
    X11
  * Fixed
    + Unconditional query of xdg-portal settings on Wayland
    + Maximized startup mode not filling the screen properly on
    GNOME Wayland
    + Default Vi key bindings for Last/First actions not working on
    X11/Wayland
    + Cut off wide characters in preedit string
    + Scrolling on touchscreens
    + Double clicking on CSD titlebar not always maximizing a
    window on Wayland
    + Excessive memory usage when using regexes with a large number
    of possible states window.decorations_theme_variant not live
    reloading
    + Copy/Paste being truncated to 64KiB on Wayland
    + X11 clipboard lagging behind sometimes
    + High wakeup count on Wayland due to clipboard polling
    + Blocking paste freezing alacritty on Wayland
    + Crash on exit when using NVIDIA binary drivers on Wayland
    + window.startup_mode applied to window again when creating new
    tab
    + Crash when leaving search after resize
    + Cursor being hidden after reaching cursor blinking timeout
    + Message bar content getting stuck after closing with multiple
    messages on Wayland
    + Vi cursor position not redrawn on PageUp/PageDown without
    scrollback
    + Cursor not updating when blinking and viewport is scrolled
    + Failure to start with recent version of mesa's i915 driver
    + Error when using chars inside the mouse bindings
  * Removed
    + Config option background_opacity, use
    window.background_opacity
    + Config option colors.search.bar, use colors.footer_bar
    instead
    + Config option mouse.url, use the hints config section
    + Config options mouse.double_click and mouse.triple_click</changelog>
  <changelog author="dimstar@opensuse.org" date="1704974400">- Update to version 0.13.1:
  * Fix manpage string escapes
  * Fix serde tests without default features
  * Bump winit to 0.29.9
  * Ignore null values in `alacritty migrate`
  * Add vi search paste bindings
  * Fix replacing optional fields
  * Fix number-based mouse bindings
  * Bump winit to 0.29.8</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1711195200">- Use `filter` option in cargo vendoring.
- Use zstd compression for source tar and vendored tar.
- `filter` + zstd results in better compression and storage savings.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1712491200">- Bump required rust version to build</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Update to version 0.13.2:
  * Added:
    + Default Home/End bindings in Vi mode mapped to First/Last respectively
  * Fixed:
    + CLI env variables clearing configuration file variables
    + Vi inline search/semantic selection expanding across newlines
    + C0 and C1 codes being emitted in associated text when using kitty keyboard
    + Occasional hang on startup with some Wayland compositors
    + Missing key for NumpadDecimal in key bindings
    + Scrolling content upwards moving lines into history when it shouldn't
    + Sticky keys not working sometimes on X11
    + Modifiers occasionally getting desynced on X11
    + Autokey no longer working with alacritty on X11
    + Freeze when moving window between monitors on Xfwm
    + Mouse cursor not changing on Wayland when cursor theme uses legacy cursor icon names
    + Config keys are available under proper names
    + Build failure when compiling with x11 feature on NetBSD
    + Hint Select action selecting the entire line for URL escapes
    + Kitty encoding used for regular keys when they don't carry text
  * Changed:
    + No unused-key warnings will be emitted for OS-specific config keys
    + Use built-in font for sextant symbols from U+1FB00 to U+1FB3B
    + Kitty encoding is not used anymore for uncommon keys unless the protocol enabled</changelog>
</package>
<package pkgid="1ba4026eabf208738cdd6d52f7e3ebca22ef25161bb7e7ddb6a2b80d461ab075b24e919e524615ea4cf3d2ab879b8f1c1b31c6c9e692f03a03840c221e4437b3" name="alacritty-bash-completion" arch="noarch">
  <version epoch="0" ver="0.13.2" rel="bp160.1.14"/>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1687089600">- Make terminfo package a suggested dependency
- Do not install terminfo anymore</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1688472000">- Update to version 0.12.2:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Bump `actions/checkout` to v3</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1696334400">- Update to version 0.12.3:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Update winit to 0.28.7 and sctk to 0.16.1</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1696852800">- Reduced vendored size using cargo-vendor-filterer
  * vendor.tar.xz was 28MB.. now it is 8.2MB
- Update _service file
  * replace mode "disabled" to "manual" since "disabled" is deprecated.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Replace freetype-devel BuildRequires with freetype2: this is
  actually what is needed, but as fontconfig happened to pull it in
  already, things happened to work. Freetype 1 is not needed here.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1704024000">- Enable automatic updates of vendored dependencies
- Remove cargo_config since it's now build by cargo_vendor
- Generate manpages via scdoc
- Update to version 0.13.0:
  * Added
    + Warnings for unused configuration file options
    + Config option persist in hints config section
    + Support for keybindings with dead keys
    + Back/Forward mouse buttons support in bindings
    + Copy global IPC options (-w -1) for new windows
    + Support startup notify protocol to raise initial window on
    Wayland/X11
    + Debug option prefer_egl to prioritize EGL over other display
    APIs
    + Inline vi-mode search using f/F/t/T
    + window.blur config option to request blur for transparent
    windows
    + --option argument for alacritty msg create-window
    + Support for DECRQM/DECRPM escape sequences
    + Support for kitty's keyboard protocol
  * Changed
    + Mode-specific bindings can now be bound in any mode for
    easier macros
    + --help output is more compact now and uses more neutral
    palette
    + Configuration file now uses TOML instead of YAML
    + Deprecated config option draw_bold_text_with_bright_colors,
    use colors.draw_bold_text_with_bright_colors
    + Deprecated config option key_bindings, use keyboard.bindings
    + Deprecated config option mouse_bindings, use mouse.bindings
    + The default colorscheme is now based on base16 classic dark
    + IME popup now tries to not obscure the current cursor line
    + The double click threshold was raised to 400ms
    + OSC 52 paste ability is now disabled by default; use
    terminal.osc52 to adjust it
    + Apply colors.transparent_background_colors for selections,
    hints, and search matches
    + Underline full hint during keyboard selection
    + Synchronized updates now use CSI 2026 instead of legacy DCS
    variant
    + In mouse mode with Shift pressed, mouse bindings without
    Shift are only triggered if no exact binding (i.e. one with
    Shift) is found.
    + Use built-in font for powerline symbols from U+E0B0 to U+E0B3
    + Default bell.animation is now Linear
    + IncreaseFontSize/DecreaseFontSize step is now 1px
    + font.size precision was raised to 6 floating point digits
    + Default font size to 11.25 matching 15px
    + Xft.dpi is now reloaded when xsettingd change its value on
    X11
  * Fixed
    + Unconditional query of xdg-portal settings on Wayland
    + Maximized startup mode not filling the screen properly on
    GNOME Wayland
    + Default Vi key bindings for Last/First actions not working on
    X11/Wayland
    + Cut off wide characters in preedit string
    + Scrolling on touchscreens
    + Double clicking on CSD titlebar not always maximizing a
    window on Wayland
    + Excessive memory usage when using regexes with a large number
    of possible states window.decorations_theme_variant not live
    reloading
    + Copy/Paste being truncated to 64KiB on Wayland
    + X11 clipboard lagging behind sometimes
    + High wakeup count on Wayland due to clipboard polling
    + Blocking paste freezing alacritty on Wayland
    + Crash on exit when using NVIDIA binary drivers on Wayland
    + window.startup_mode applied to window again when creating new
    tab
    + Crash when leaving search after resize
    + Cursor being hidden after reaching cursor blinking timeout
    + Message bar content getting stuck after closing with multiple
    messages on Wayland
    + Vi cursor position not redrawn on PageUp/PageDown without
    scrollback
    + Cursor not updating when blinking and viewport is scrolled
    + Failure to start with recent version of mesa's i915 driver
    + Error when using chars inside the mouse bindings
  * Removed
    + Config option background_opacity, use
    window.background_opacity
    + Config option colors.search.bar, use colors.footer_bar
    instead
    + Config option mouse.url, use the hints config section
    + Config options mouse.double_click and mouse.triple_click</changelog>
  <changelog author="dimstar@opensuse.org" date="1704974400">- Update to version 0.13.1:
  * Fix manpage string escapes
  * Fix serde tests without default features
  * Bump winit to 0.29.9
  * Ignore null values in `alacritty migrate`
  * Add vi search paste bindings
  * Fix replacing optional fields
  * Fix number-based mouse bindings
  * Bump winit to 0.29.8</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1711195200">- Use `filter` option in cargo vendoring.
- Use zstd compression for source tar and vendored tar.
- `filter` + zstd results in better compression and storage savings.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1712491200">- Bump required rust version to build</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Update to version 0.13.2:
  * Added:
    + Default Home/End bindings in Vi mode mapped to First/Last respectively
  * Fixed:
    + CLI env variables clearing configuration file variables
    + Vi inline search/semantic selection expanding across newlines
    + C0 and C1 codes being emitted in associated text when using kitty keyboard
    + Occasional hang on startup with some Wayland compositors
    + Missing key for NumpadDecimal in key bindings
    + Scrolling content upwards moving lines into history when it shouldn't
    + Sticky keys not working sometimes on X11
    + Modifiers occasionally getting desynced on X11
    + Autokey no longer working with alacritty on X11
    + Freeze when moving window between monitors on Xfwm
    + Mouse cursor not changing on Wayland when cursor theme uses legacy cursor icon names
    + Config keys are available under proper names
    + Build failure when compiling with x11 feature on NetBSD
    + Hint Select action selecting the entire line for URL escapes
    + Kitty encoding used for regular keys when they don't carry text
  * Changed:
    + No unused-key warnings will be emitted for OS-specific config keys
    + Use built-in font for sextant symbols from U+1FB00 to U+1FB3B
    + Kitty encoding is not used anymore for uncommon keys unless the protocol enabled</changelog>
</package>
<package pkgid="5252c6f7858963bd3df2dd843906768b68169feabe3340dfdc3a286e69c05bf24684e6cdf8024aa7c884dd1c1775f165ee7e58f37f9d16e3de78763d636d9240" name="alacritty-fish-completion" arch="noarch">
  <version epoch="0" ver="0.13.2" rel="bp160.1.14"/>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1687089600">- Make terminfo package a suggested dependency
- Do not install terminfo anymore</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1688472000">- Update to version 0.12.2:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Bump `actions/checkout` to v3</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1696334400">- Update to version 0.12.3:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Update winit to 0.28.7 and sctk to 0.16.1</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1696852800">- Reduced vendored size using cargo-vendor-filterer
  * vendor.tar.xz was 28MB.. now it is 8.2MB
- Update _service file
  * replace mode "disabled" to "manual" since "disabled" is deprecated.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Replace freetype-devel BuildRequires with freetype2: this is
  actually what is needed, but as fontconfig happened to pull it in
  already, things happened to work. Freetype 1 is not needed here.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1704024000">- Enable automatic updates of vendored dependencies
- Remove cargo_config since it's now build by cargo_vendor
- Generate manpages via scdoc
- Update to version 0.13.0:
  * Added
    + Warnings for unused configuration file options
    + Config option persist in hints config section
    + Support for keybindings with dead keys
    + Back/Forward mouse buttons support in bindings
    + Copy global IPC options (-w -1) for new windows
    + Support startup notify protocol to raise initial window on
    Wayland/X11
    + Debug option prefer_egl to prioritize EGL over other display
    APIs
    + Inline vi-mode search using f/F/t/T
    + window.blur config option to request blur for transparent
    windows
    + --option argument for alacritty msg create-window
    + Support for DECRQM/DECRPM escape sequences
    + Support for kitty's keyboard protocol
  * Changed
    + Mode-specific bindings can now be bound in any mode for
    easier macros
    + --help output is more compact now and uses more neutral
    palette
    + Configuration file now uses TOML instead of YAML
    + Deprecated config option draw_bold_text_with_bright_colors,
    use colors.draw_bold_text_with_bright_colors
    + Deprecated config option key_bindings, use keyboard.bindings
    + Deprecated config option mouse_bindings, use mouse.bindings
    + The default colorscheme is now based on base16 classic dark
    + IME popup now tries to not obscure the current cursor line
    + The double click threshold was raised to 400ms
    + OSC 52 paste ability is now disabled by default; use
    terminal.osc52 to adjust it
    + Apply colors.transparent_background_colors for selections,
    hints, and search matches
    + Underline full hint during keyboard selection
    + Synchronized updates now use CSI 2026 instead of legacy DCS
    variant
    + In mouse mode with Shift pressed, mouse bindings without
    Shift are only triggered if no exact binding (i.e. one with
    Shift) is found.
    + Use built-in font for powerline symbols from U+E0B0 to U+E0B3
    + Default bell.animation is now Linear
    + IncreaseFontSize/DecreaseFontSize step is now 1px
    + font.size precision was raised to 6 floating point digits
    + Default font size to 11.25 matching 15px
    + Xft.dpi is now reloaded when xsettingd change its value on
    X11
  * Fixed
    + Unconditional query of xdg-portal settings on Wayland
    + Maximized startup mode not filling the screen properly on
    GNOME Wayland
    + Default Vi key bindings for Last/First actions not working on
    X11/Wayland
    + Cut off wide characters in preedit string
    + Scrolling on touchscreens
    + Double clicking on CSD titlebar not always maximizing a
    window on Wayland
    + Excessive memory usage when using regexes with a large number
    of possible states window.decorations_theme_variant not live
    reloading
    + Copy/Paste being truncated to 64KiB on Wayland
    + X11 clipboard lagging behind sometimes
    + High wakeup count on Wayland due to clipboard polling
    + Blocking paste freezing alacritty on Wayland
    + Crash on exit when using NVIDIA binary drivers on Wayland
    + window.startup_mode applied to window again when creating new
    tab
    + Crash when leaving search after resize
    + Cursor being hidden after reaching cursor blinking timeout
    + Message bar content getting stuck after closing with multiple
    messages on Wayland
    + Vi cursor position not redrawn on PageUp/PageDown without
    scrollback
    + Cursor not updating when blinking and viewport is scrolled
    + Failure to start with recent version of mesa's i915 driver
    + Error when using chars inside the mouse bindings
  * Removed
    + Config option background_opacity, use
    window.background_opacity
    + Config option colors.search.bar, use colors.footer_bar
    instead
    + Config option mouse.url, use the hints config section
    + Config options mouse.double_click and mouse.triple_click</changelog>
  <changelog author="dimstar@opensuse.org" date="1704974400">- Update to version 0.13.1:
  * Fix manpage string escapes
  * Fix serde tests without default features
  * Bump winit to 0.29.9
  * Ignore null values in `alacritty migrate`
  * Add vi search paste bindings
  * Fix replacing optional fields
  * Fix number-based mouse bindings
  * Bump winit to 0.29.8</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1711195200">- Use `filter` option in cargo vendoring.
- Use zstd compression for source tar and vendored tar.
- `filter` + zstd results in better compression and storage savings.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1712491200">- Bump required rust version to build</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Update to version 0.13.2:
  * Added:
    + Default Home/End bindings in Vi mode mapped to First/Last respectively
  * Fixed:
    + CLI env variables clearing configuration file variables
    + Vi inline search/semantic selection expanding across newlines
    + C0 and C1 codes being emitted in associated text when using kitty keyboard
    + Occasional hang on startup with some Wayland compositors
    + Missing key for NumpadDecimal in key bindings
    + Scrolling content upwards moving lines into history when it shouldn't
    + Sticky keys not working sometimes on X11
    + Modifiers occasionally getting desynced on X11
    + Autokey no longer working with alacritty on X11
    + Freeze when moving window between monitors on Xfwm
    + Mouse cursor not changing on Wayland when cursor theme uses legacy cursor icon names
    + Config keys are available under proper names
    + Build failure when compiling with x11 feature on NetBSD
    + Hint Select action selecting the entire line for URL escapes
    + Kitty encoding used for regular keys when they don't carry text
  * Changed:
    + No unused-key warnings will be emitted for OS-specific config keys
    + Use built-in font for sextant symbols from U+1FB00 to U+1FB3B
    + Kitty encoding is not used anymore for uncommon keys unless the protocol enabled</changelog>
</package>
<package pkgid="f7c5de83acf0380e7ccb81fe5da520c4e8744c8646046c235ca6332e706a9f2c730ddde645c4231c6f3c7b28bbc07f7a21f777ae7b3f2fa56af7c0f799bfd22a" name="alacritty-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.13.2" rel="bp160.1.14"/>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1687089600">- Make terminfo package a suggested dependency
- Do not install terminfo anymore</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1688472000">- Update to version 0.12.2:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Bump `actions/checkout` to v3</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1696334400">- Update to version 0.12.3:
  * Fix the crash when shrinking scrolled terminal
  * Fix freeze with some drivers when using GLX
  * Fix hyperlink preview for 2 lines terminal
  * Update winit to 0.28.7 and sctk to 0.16.1</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1696852800">- Reduced vendored size using cargo-vendor-filterer
  * vendor.tar.xz was 28MB.. now it is 8.2MB
- Update _service file
  * replace mode "disabled" to "manual" since "disabled" is deprecated.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Replace freetype-devel BuildRequires with freetype2: this is
  actually what is needed, but as fontconfig happened to pull it in
  already, things happened to work. Freetype 1 is not needed here.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1704024000">- Enable automatic updates of vendored dependencies
- Remove cargo_config since it's now build by cargo_vendor
- Generate manpages via scdoc
- Update to version 0.13.0:
  * Added
    + Warnings for unused configuration file options
    + Config option persist in hints config section
    + Support for keybindings with dead keys
    + Back/Forward mouse buttons support in bindings
    + Copy global IPC options (-w -1) for new windows
    + Support startup notify protocol to raise initial window on
    Wayland/X11
    + Debug option prefer_egl to prioritize EGL over other display
    APIs
    + Inline vi-mode search using f/F/t/T
    + window.blur config option to request blur for transparent
    windows
    + --option argument for alacritty msg create-window
    + Support for DECRQM/DECRPM escape sequences
    + Support for kitty's keyboard protocol
  * Changed
    + Mode-specific bindings can now be bound in any mode for
    easier macros
    + --help output is more compact now and uses more neutral
    palette
    + Configuration file now uses TOML instead of YAML
    + Deprecated config option draw_bold_text_with_bright_colors,
    use colors.draw_bold_text_with_bright_colors
    + Deprecated config option key_bindings, use keyboard.bindings
    + Deprecated config option mouse_bindings, use mouse.bindings
    + The default colorscheme is now based on base16 classic dark
    + IME popup now tries to not obscure the current cursor line
    + The double click threshold was raised to 400ms
    + OSC 52 paste ability is now disabled by default; use
    terminal.osc52 to adjust it
    + Apply colors.transparent_background_colors for selections,
    hints, and search matches
    + Underline full hint during keyboard selection
    + Synchronized updates now use CSI 2026 instead of legacy DCS
    variant
    + In mouse mode with Shift pressed, mouse bindings without
    Shift are only triggered if no exact binding (i.e. one with
    Shift) is found.
    + Use built-in font for powerline symbols from U+E0B0 to U+E0B3
    + Default bell.animation is now Linear
    + IncreaseFontSize/DecreaseFontSize step is now 1px
    + font.size precision was raised to 6 floating point digits
    + Default font size to 11.25 matching 15px
    + Xft.dpi is now reloaded when xsettingd change its value on
    X11
  * Fixed
    + Unconditional query of xdg-portal settings on Wayland
    + Maximized startup mode not filling the screen properly on
    GNOME Wayland
    + Default Vi key bindings for Last/First actions not working on
    X11/Wayland
    + Cut off wide characters in preedit string
    + Scrolling on touchscreens
    + Double clicking on CSD titlebar not always maximizing a
    window on Wayland
    + Excessive memory usage when using regexes with a large number
    of possible states window.decorations_theme_variant not live
    reloading
    + Copy/Paste being truncated to 64KiB on Wayland
    + X11 clipboard lagging behind sometimes
    + High wakeup count on Wayland due to clipboard polling
    + Blocking paste freezing alacritty on Wayland
    + Crash on exit when using NVIDIA binary drivers on Wayland
    + window.startup_mode applied to window again when creating new
    tab
    + Crash when leaving search after resize
    + Cursor being hidden after reaching cursor blinking timeout
    + Message bar content getting stuck after closing with multiple
    messages on Wayland
    + Vi cursor position not redrawn on PageUp/PageDown without
    scrollback
    + Cursor not updating when blinking and viewport is scrolled
    + Failure to start with recent version of mesa's i915 driver
    + Error when using chars inside the mouse bindings
  * Removed
    + Config option background_opacity, use
    window.background_opacity
    + Config option colors.search.bar, use colors.footer_bar
    instead
    + Config option mouse.url, use the hints config section
    + Config options mouse.double_click and mouse.triple_click</changelog>
  <changelog author="dimstar@opensuse.org" date="1704974400">- Update to version 0.13.1:
  * Fix manpage string escapes
  * Fix serde tests without default features
  * Bump winit to 0.29.9
  * Ignore null values in `alacritty migrate`
  * Add vi search paste bindings
  * Fix replacing optional fields
  * Fix number-based mouse bindings
  * Bump winit to 0.29.8</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1711195200">- Use `filter` option in cargo vendoring.
- Use zstd compression for source tar and vendored tar.
- `filter` + zstd results in better compression and storage savings.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1712491200">- Bump required rust version to build</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Update to version 0.13.2:
  * Added:
    + Default Home/End bindings in Vi mode mapped to First/Last respectively
  * Fixed:
    + CLI env variables clearing configuration file variables
    + Vi inline search/semantic selection expanding across newlines
    + C0 and C1 codes being emitted in associated text when using kitty keyboard
    + Occasional hang on startup with some Wayland compositors
    + Missing key for NumpadDecimal in key bindings
    + Scrolling content upwards moving lines into history when it shouldn't
    + Sticky keys not working sometimes on X11
    + Modifiers occasionally getting desynced on X11
    + Autokey no longer working with alacritty on X11
    + Freeze when moving window between monitors on Xfwm
    + Mouse cursor not changing on Wayland when cursor theme uses legacy cursor icon names
    + Config keys are available under proper names
    + Build failure when compiling with x11 feature on NetBSD
    + Hint Select action selecting the entire line for URL escapes
    + Kitty encoding used for regular keys when they don't carry text
  * Changed:
    + No unused-key warnings will be emitted for OS-specific config keys
    + Use built-in font for sextant symbols from U+1FB00 to U+1FB3B
    + Kitty encoding is not used anymore for uncommon keys unless the protocol enabled</changelog>
</package>
<package pkgid="25a640ba79ecb2a43e2a35de9ee744111b34d1ca0b85de069c15aaa3d19b655b2b01714be6c136dd2b28a39911eaef9d1e79d0b93b18bf21040f398ec9467a24" name="alee-fonts" arch="noarch">
  <version epoch="0" ver="13.3" rel="bp160.1.10"/>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-alee -&gt; alee-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1331899200">- license update: SUSE-Artistic-1.0+
  This package is Artistic-1.0 or later. Use SUSE- proprietary prefix until
  the license is accepted upstream at spdx.org</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1349092800">- remove forgotten redundant definition of %{_ttfontsdir}</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="pgajdos@suse.com" date="1378728000">- update to 13
  * improved glyphs, new glyphs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 13.1:
  * New maintainer, team maintained
  * improved glyphs, new glyphs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to version 13.3:
  * various debian packaging specific updates</changelog>
</package>
<package pkgid="e33d1612fb2dc4a31d287f13c938c23fb98d6348ab272dcbc962d10d94366c4f2580cbdc22d9dcfd6d4056f67e59bcb88569b88510f4078cbf5c51d0b5b15270" name="alembic-devel" arch="x86_64">
  <version epoch="0" ver="1.8.8" rel="bp160.1.2"/>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1609243200">- update to 1.7.16:
  GitHub:
  * Add a Github Action to create a python 2.7 wheel. (PR 310)
  AbcCoreHDF5:
  * Specify char signedness when setting the HDF5 data type as some architectures,
    like ARM, default to unsigned. (PR 316)
  AbcCoreOgawa:
  * Fuzzer issue 25695: Fix leak that can occur when reading meta data, but the file
    is maliciously cut short.  (PR 315)
  * Fuzzer issue 26125:  Add a check and throw an excpetion for an obviously
    recursive group. (PR 321)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619611200">- Update to 1.8.0:
  API:
  * Dropped support for the ancient TR1, expect compilers to support
    at least support C++std11 and currently default to C++std14.
  * Removed ALEMBIC_LIB_USES_TR1 and ALEMBIC_LIB_USES_BOOST and
    instead expect the std versions like shared_ptr.
  Ogawa:
  * Better support emscripten and ARM toolchains by using memcpy
    to avoid dereferencing non-aligned pointers.
  AbcStitcher:
  * Propagate MetaData from the first of our ordered input archives
    over to the stitched output.
  Other:
  * Overhaul to support Imath 3
  * Fix for using Alembic as a 3rd party with Imath 3.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621425600">- Update to 1.8.1:
  * Ogawa: Sanity check that we have a valid group to avoid
    infinite recursion during traversal.
- Enable testsuite
- Add fuzztest.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 1.8.3:
  * Make sure we export the IlmBase requirement in CMake when using OpenEXR 2 to
    fulfill the Imath requirement.
  * Address report from GCC Undefined Behavior Sanitizer by initializing a couple
    of bools in OXform.
  * Fix compile issue when using C++17 with Microsoft Visual Studio and use a
    hopefully much faster find first bit set when using that compiler. (Issue 358)
  * One of the fuzzer tests were was failing with 32 bit builds because of a
    different exception message.
  * Fix a bug with 32 bit memory mapped Windows builds.
  * Look for boost python a little differently, falling back on existing behavior.</changelog>
  <changelog author="Berthold Gunreben &lt;azouhr@opensuse.org&gt;" date="1656244800">- Ogawa only supports little endian. Disable s390x builds.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 1.8.4:
  * Add ALEMBIC_DEBUG_WARNINGS_AS_ERRORS to control the build in debug mode.
  * It is set to ON by default to preserve the current behavior.
  * Use add_compile_options instead of the older add_definitions. (PR371)
  * Fix the include dirs for AbcCoreHDF5 tests. (PR382)
  * Fix issue hinted at in Issue 223: use PROJECT_SOURCE_DIR instead of
  * CMAKE_SOURCE_DIR when embedding Alembic within another CMake project. (PR393)
  * On Windows _BitScanForward64 is only available when _WIN64 is defined.
  * When it is not, fall back on using _BitScanForward. (PR 373)
  * Fuzzer issue 49213 turned up some new malformed MetaData memory problems.
  * Indexed MetaData on the write side only allows 254 (plus the default empty one)
  * small (up to 256 bytes), we now throw if we encounter malformed MetaData.
  * We were also allowing empty property and object names through on the read side
  * even though the writer forbids this.
  * Finally integrate a couple of tests flagged by Taotao Gu's local fuzzer.
  * (PR391 and PR397)
  * Fuzzer issue 52939 showed that with certain malformed MetaData the pair
  * separator should NOT occur before the assign separator. (PR396)
  * N2f and N2d properties were not being correctly bound.(PR390)</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1687521600">- Added Alembic's cmake files to devel package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1704196800">- update to 1.8.6:
  * Introduce CPacke to top level CMake. (PR 425)
  * Fix typo in a comment. (PR 417)
  * Fix bug with OCurves, ONuPatch, OPoints, OPolyMesh, and OSubD
    were not properly incrementing their number of set samples
    when using setFromPrevious. (PR 433)
  * Fix default values for float PODTraits. (PR 422)
  * Introduce -hold argument which will use the previous set
    sample instead of setting an empty sample for missing samples.
- update to 1.8.5:
  * Add test for fuzzer issue 53406.
  * Address Issue 402 by not using deprecated kWrapExisting calls
    when possible.
  * Add missing vertex for cube test in the python bindings per
    Issue 407.
  * Fix several warnings mentioned in Issue 309, 398 and 412.
  * Don't explicitly set MACOSX_RPATH as it is set by default in
    CMake 3+. (PR404)
  * Use install rpath for Imath 3. (PR405)
  * Use STRING instead of PATH for ALEMBIC_LIB_INSTALL_DIR.
  * Add CIFuzz as a GitHub action. (PR403)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1733572800">- update to 1.8.8:
  * Support variable order curves in the python bindings. (Issue 458)
  * Support mingw64 by adding a missing include. (Issue 459)
- update to 1.8.7:
  * Protect from potential buffer overrun because of malformed dimensions. (Issue 453)
  * Fix a typo in the python bindings but leave the misspelled member
    (kkVisibilityVisible) to maintain compatibility. (Issue 440)
  * Add unicode filename support for Windows (PR450)
  * Make some of the extra python scripts including the PyAlembic and Maya
  * unit tests python 3 compatible. (PR438)</changelog>
</package>
<package pkgid="74c15719e2728cc1e9b63ea37766b170debebf3b9c63245aeb91bb84b60d1f9eadeb6ec88a9b87f54be9b64e01b64ea36029f0572a3d2954575ddaa32065b846" name="alevt" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="bp160.1.13"/>
  <changelog author="jw@suse.de" date="1201694400">- updated to 1.6.2
  - adapt to current v4l2 api
  - some minor fixes collected during the past years
- upstreamed patches removed.</changelog>
  <changelog author="meissner@suse.de" date="1259150400">- fixed fuzzy patches</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1325851200">- build also with libpng15
  * libpng15.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518177600">- BuildRequire pkgconfig(x11) not xorg-x11-devel</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618660800">- Update to 1.8.0
  * DVB-T support
  * Increase program table size from 16 to 128
  * Fix crash if no DVB service has Teletext
  * Detect HEVC services for all regions (this fixes HEVC in Germany)
  * Fix 100% cpu use when there is no vbi device
  * Add zvbi support
  * Add support for iso8859-7 (greek)
  * Add support for KOI8-R encoding
  * Support libpng-1.6
- Update to 1.6.3
  * compilation fix for libpng-1.5, this obsoletes alevt-libpng15.patch
- Dropped obsoleted alevt-1.6.0-dvb-demux.patch,
  alevt-happy-abuild.diff and alevt-overflow2.diff
  alevt-libpng15.patch
- Modernized and fixed SPEC file
  * Added working upstream URL
- Add use-pkgconfig.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618833600">- Fix previous changelog entry</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1629720000">- Update to 1.8.1
  * Some SI fixes
  * Use pkg-config to find libraries, obsoletes use-pkgconfig.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1715083200">- alevt-fix-implicit.patch: fixed implicit definitions.</changelog>
</package>
<package pkgid="c4f03cd7ce0f7afb3cab9746eb0f8d5d785829ef00ea5dc91fc98a66258ffb9de373b9d0d078ecc7520174cd3d4b4cc699ff67c5f985f6041543ca1274b4bb9c" name="alex" arch="x86_64">
  <version epoch="0" ver="3.5.1.0" rel="bp160.1.13"/>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1631016000">- make rpmlint happy</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1642939200">- Update alex to version 3.2.7.1.
  [#]# Change in 3.2.7.1
  * Fix bug with repeated numeral characters *outside* of `r{n,m}`
    repetitions. This was a regression introduced in 3.2.7.
  [#]# Changes in 3.2.7
  * Allow arbitrary repetitions in regexps.
    Previously, the `r{n,m}` and related forms were restricted to single
    digit numbers `n` and `m`.
  * DFA minimization used to crash on tokens of the form `c*` which
    produce automata with only accepting states.  Considering the empty
    set of non-accepting states as an equivalence class caused
    minimization to crash with exception.
  * The `small_base` flag is removed.  Extremely old GHCs will no longer
    build.
  * A number of bug fixes and clearer diagnostics.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177600">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680523200">- Update alex to version 3.2.7.2.
  * Fix bug with out-of-bound access to `alex_check` array.
    (Surfaced with GHC's JS backend, fixed by Sylvain Henry in
    PR [#223](https://github.com/haskell/alex/pull/223).)
  * Upstream dropped installable documentation and man pages. The
    documentation can now be found at these locations:
  - Online (HTML): https://haskell-alex.readthedocs.io
  - PDF: https://haskell-alex.readthedocs.io/_/downloads/en/latest/pdf/
  - Downloadable HTML: https://haskell-alex.readthedocs.io/_/downloads/en/latest/htmlzip/
  * Re-enabled the test suite for aarch64. The underlying issue
    https://github.com/simonmar/alex/issues/130 was closed by
    upstream.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1681473600">- Update alex to version 3.2.7.3.
  [#]# Change in 3.2.7.3
  * Amend last change (3.2.7.2)
    so that Alex-generated code does not need `LANGUAGE PatternGuards`.
  * Tested with GHC 7.0 - 9.6.1.
  _Andreas Abel, 2023-04-14_</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1683028800">- Update alex to version 3.2.7.4.
  [#]# Change in 3.2.7.4
  * The user-supplied "epilogue" Haskell code is now put _last_ in the generated file.
    This enables use of Template Haskell in the epilogue.
    (Issue [#125](https://github.com/haskell/alex/issues/125).)
  * Tested with GHC 7.0 - 9.6.1.
  _Andreas Abel, 2023-05-02_</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1690977600">- Drop constraints for riscv64</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1698580800">- Update alex to version 3.4.0.1.
  [#]# Changes in 3.4.0.1
  * Address new `x-partial` warning of GHC 9.8.
  * Alex 3.4.0.1 needs GHC 8.0 or higher to build.
    The code it generates is the same as 3.4.0.0, so it will likely work for older GHCs.
  * Tested with GHC 8.0 - 9.8.1.
  _Andreas Abel, 2023-10-29_
  [#]# Changes in 3.4.0.0
  * New wrappers to lex strict `Text`:
    `strict-text`, `posn-strict-text`, `monad-strict-text` and `monadUserState-strict-text`
    (PR [#240](https://github.com/haskell/alex/pull/240)).
    These complement the existing wrappers for `String` and `ByteString`.
  * Tested with GHC 7.0 - 9.6.2.
  _Andreas Abel, 2023-06-20_
  [#]# Changes in 3.3.0.0
  * Add an `Ord` instance to `AlexPosn` (Issue [#233](https://github.com/haskell/alex/issues/233)).
    This breaks developments that define their own (orphan) `instance Ord AlexPosn`.
    If this is the derived stock instance, the fix is to delete the orphan instance and require
    `build-tool-depends: alex:alex &gt;= 3.3.0.0`.
  * Switch to Haskell PVP versioning with four digits.
  * Tested with GHC 7.0 - 9.6.1.
  _Andreas Abel, 2023-05-25_</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1703937600">- Update alex to version 3.5.0.0.
  [#]# Changes in 3.5.0.0
  * Add option `--numeric-version`.
  * Remove deprecated `-v` as alias for `--version`.
  * Add `-v` as placeholder for a future `--verbose` option.
  * Make `alex{G,S}etUserState` available with the `monadUserState-bytestring` wrapper
    ([Issue #220](https://github.com/haskell/alex/issues/220)).
  * Debugging lexer: print character in addition to its ASCII code
    ([PR #252](https://github.com/haskell/alex/pull/252)).
  * Tested with GHC 8.0 - 9.8.1.
  _Andreas Abel, 2023-12-30_</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1709208000">- Update alex to version 3.5.1.0.
  [#]# Changes in 3.5.1.0
  * Drop generating output for GHC &lt; 6.4.
  * Use qualified imports in generated code (except for `Prelude`)
    ([Issue #258](https://github.com/haskell/alex/issues/258)).
  * Suppress warnings `tabs` and `unused-imports` for generated code
    ([Issue #255](https://github.com/haskell/alex/issues/255)).
  * Tested with GHC 8.0 - 9.8.2.
  _Andreas Abel, 2024-02-29_</changelog>
</package>
<package pkgid="acb6c2f336c113878bc11789c668f071d8e6a38244e37f88a24ae17ada2a1b3177f7f61100eddfe159187edc66f038051257674ca770dadd6b9d0b352a468b28" name="aliftype-amiri-fonts" arch="noarch">
  <version epoch="0" ver="1.000" rel="bp160.1.10"/>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1660046400">initial commit</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1671537600">update: 0.117 -&gt; 1.000
- OTF fonts have been dropped for Frozen Release 1.000, using TTFs now
- Slanted fonts have been renamed Italic since this is less confusing.
- Remove zero-width Kashida hack needed for LibreOffice &lt; 7.5, with this release Kashida justification should be enabled for LibreOffice &gt;= 7.5.
- The font sources are now in Glyphs format, FontForge is no longer used for editing the sources.
- Remove the uyghur-hyphen PUA glyph.
- Drop U+030A and U+0325 that were misused for Quranic symbols, and add U+08D1.
- Localize stylistic set names.
- Make medial hamza work with lam-alef ligature.</changelog>
</package>
<package pkgid="69c21ebe8dff8b8322244f4f4f1b0d5748b3f5def6d7320840cd83c246e3b2d3e4a5524ecbe2a30f4cb3a1cbf0d87bfc5e7e050a592a93631de27ea4b21c462a" name="aliyun-cli" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="160000.1.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1759233600">- Import initial version 3.0.305 (jsc#PED-13767)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760356800">- Update to version 3.0.306
  * {config} Add --config-path into configuration load from aliyun
    configuration by @AllyW in (#1266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1761134400">- Update to version 3.0.308
  * {Sls} Add sls module by @AllyW in (#1268)
- from version 3.0.307
  * No changes to previous version</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1761825600">- Update to version 3.1.0
  * Update Aliyun OpenAPI meta data</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762257600">- Update to version 3.1.1
  * {sls} Add parameter missing check for path/host and
    array response JSON serialization by @AllyW in (#1275)
  * Update Aliyun OpenAPI meta data</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Update to version 3.1.4
  * {otsutil} Add otsutil for tablestore management by @AllyW in (#1274)
  * Update Aliyun OpenAPI meta data
- from version 3.1.3
  * {configure} Add --endpoint-type profile configuration by @AllyW in (#1278)
  * Update Aliyun OpenAPI meta data
- from version 3.1.2
  * Update Aliyun OpenAPI meta data</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763726400">- Update to version 3.1.5
  * Update Aliyun OpenAPI meta data</changelog>
</package>
<package pkgid="f7c2e7439350b4e58e0dae0b851182e05821c4cb357bef5edace335e24d4394a344c6fe4d37d12509624005cbbce3c90ce17c75d6f6b1e245089c4758c0aa61c" name="alkimia" arch="x86_64">
  <version epoch="0" ver="8.2.0" rel="bp160.1.2"/>
  <changelog author="wbauer@tmo.at" date="1523707200">- update to version 7.0.2:
  * fix compiling kmymoney 4.8</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1540468800">- Run spec-cleaner.
- Install the license file.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1553515200">- Drop the KDE4/Qt4 package.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578744000">- Update to 8.0.3.
  * Add option to disable Webkit on KF5 builds
  * Bug and crash fixes
  * Don't hardcode the QML install dir
  * Fix integration of "Finance::Quote" sources into kmymoney
  * Export class AlkWebPage as wrapper for a generic web page
  * Fix installing and finding financequote.pl
  * Add experimental support for financequote.pl</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1612526400">- Update to version 8.0.4
  * Add initial QWebEngine support for KF5 builds
  * Add debug info for running perl script in
    AlkFinanceQuoteProcess::launch()
  * Add file menu with entry 'quit'
  * Add switch language entry to help menu
  * Add option ENABLE_FINANCEQUOTE and set to false by default on Windows
  * Bug and crash fixes
  * Fix fatal error caused by calling i18n in another thread initiated
  * Fix WebEngine/WebKit/Widgets backend choice
  * Fix 'alkimia fails to find mpirxx.h
  * Remove unused toolbar</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612699200">- Add upstream patch:
  * 0001-Use-new-KNS-install-location.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619611200">- Update to version 8.1.0
  * Do not override the global translation domain of the application
  * Add support for skipping date extraction when a quote service
    does not provide a valid date
  * Fix bug not been able to rename local quote source
  * Many other bugfixes
- Update dependencies to build with KF5
- Drop upstream merged 0001-Use-new-KNS-install-location.patch
- Add patch from upstream:
  * 0001-Add-missing-QUrl-include-with-DBUILD_WITH_WEBENGINE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656936000">- Update to 8.1.1. No changelog.
- Drop patch, fixed upstream:
  * 0001-Add-missing-QUrl-include-with-DBUILD_WITH_WEBENGINE.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1698148800">- Update to 8.1.2. No changelog.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1750593600">- Update to 8.2.0. No changelog.</changelog>
</package>
<package pkgid="3e4153ea39568e4514133506476959427569ac5dff4822d89492b22218c6aceea702aea5513c831bd3492e07a2a98e53c480f4585365c19a4b0c830c7386f1a8" name="alkimia-devel" arch="x86_64">
  <version epoch="0" ver="8.2.0" rel="bp160.1.2"/>
  <changelog author="wbauer@tmo.at" date="1523707200">- update to version 7.0.2:
  * fix compiling kmymoney 4.8</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1540468800">- Run spec-cleaner.
- Install the license file.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1553515200">- Drop the KDE4/Qt4 package.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578744000">- Update to 8.0.3.
  * Add option to disable Webkit on KF5 builds
  * Bug and crash fixes
  * Don't hardcode the QML install dir
  * Fix integration of "Finance::Quote" sources into kmymoney
  * Export class AlkWebPage as wrapper for a generic web page
  * Fix installing and finding financequote.pl
  * Add experimental support for financequote.pl</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1612526400">- Update to version 8.0.4
  * Add initial QWebEngine support for KF5 builds
  * Add debug info for running perl script in
    AlkFinanceQuoteProcess::launch()
  * Add file menu with entry 'quit'
  * Add switch language entry to help menu
  * Add option ENABLE_FINANCEQUOTE and set to false by default on Windows
  * Bug and crash fixes
  * Fix fatal error caused by calling i18n in another thread initiated
  * Fix WebEngine/WebKit/Widgets backend choice
  * Fix 'alkimia fails to find mpirxx.h
  * Remove unused toolbar</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612699200">- Add upstream patch:
  * 0001-Use-new-KNS-install-location.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619611200">- Update to version 8.1.0
  * Do not override the global translation domain of the application
  * Add support for skipping date extraction when a quote service
    does not provide a valid date
  * Fix bug not been able to rename local quote source
  * Many other bugfixes
- Update dependencies to build with KF5
- Drop upstream merged 0001-Use-new-KNS-install-location.patch
- Add patch from upstream:
  * 0001-Add-missing-QUrl-include-with-DBUILD_WITH_WEBENGINE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656936000">- Update to 8.1.1. No changelog.
- Drop patch, fixed upstream:
  * 0001-Add-missing-QUrl-include-with-DBUILD_WITH_WEBENGINE.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1698148800">- Update to 8.1.2. No changelog.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1750593600">- Update to 8.2.0. No changelog.</changelog>
</package>
<package pkgid="ccd4173f4cc6a6f5179af412c25fbe4914374e4517bfa4196d2535c060d522ca9b4c4444703d7ce52a98ec5e5e634a2b76a4bc3f8bbaeed0efd1a798a05aa689" name="alkimia-lang" arch="noarch">
  <version epoch="0" ver="8.2.0" rel="bp160.1.2"/>
  <changelog author="wbauer@tmo.at" date="1523707200">- update to version 7.0.2:
  * fix compiling kmymoney 4.8</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1540468800">- Run spec-cleaner.
- Install the license file.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1553515200">- Drop the KDE4/Qt4 package.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578744000">- Update to 8.0.3.
  * Add option to disable Webkit on KF5 builds
  * Bug and crash fixes
  * Don't hardcode the QML install dir
  * Fix integration of "Finance::Quote" sources into kmymoney
  * Export class AlkWebPage as wrapper for a generic web page
  * Fix installing and finding financequote.pl
  * Add experimental support for financequote.pl</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1612526400">- Update to version 8.0.4
  * Add initial QWebEngine support for KF5 builds
  * Add debug info for running perl script in
    AlkFinanceQuoteProcess::launch()
  * Add file menu with entry 'quit'
  * Add switch language entry to help menu
  * Add option ENABLE_FINANCEQUOTE and set to false by default on Windows
  * Bug and crash fixes
  * Fix fatal error caused by calling i18n in another thread initiated
  * Fix WebEngine/WebKit/Widgets backend choice
  * Fix 'alkimia fails to find mpirxx.h
  * Remove unused toolbar</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1612699200">- Add upstream patch:
  * 0001-Use-new-KNS-install-location.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619611200">- Update to version 8.1.0
  * Do not override the global translation domain of the application
  * Add support for skipping date extraction when a quote service
    does not provide a valid date
  * Fix bug not been able to rename local quote source
  * Many other bugfixes
- Update dependencies to build with KF5
- Drop upstream merged 0001-Use-new-KNS-install-location.patch
- Add patch from upstream:
  * 0001-Add-missing-QUrl-include-with-DBUILD_WITH_WEBENGINE.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1656936000">- Update to 8.1.1. No changelog.
- Drop patch, fixed upstream:
  * 0001-Add-missing-QUrl-include-with-DBUILD_WITH_WEBENGINE.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1698148800">- Update to 8.1.2. No changelog.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1750593600">- Update to 8.2.0. No changelog.</changelog>
</package>
<package pkgid="0094bd703e2d2439144035550e9a4f42b83f0ef91a9c42c7eb35a99d7fa607731e4af2244f61d1f298307a63ef0055b114dad5c61f7b2380442c03bff3516661" name="alligator" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * feat: allow to copy text in EntryPage
  * Highlight the button of the selected feed</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Update Android Gradle plugin version to 8.6.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * snapcraft: Sync to master
  * Remove unused string from Android manifest
  * save settings when app suspends</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * add ability to mark feed or all feeds as read (kde#497540)
  * Don't create a binding loop when recalculating image sizes (kde#494778)
  * Add validation to urlField in AddFeedDialog (kde#481813)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * Use full article url as baseUrl for Kirigami.SelectableLabel
  * Fix open link with relativ urls</changelog>
</package>
<package pkgid="8264bdeedea4ae79db19e9795d817e216cf314d9117c9809a7ec624c59541279e9753eb04703a7600db843b7b92432e61f8989353f40a6256a9f17b87e40f6b9" name="alligator-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * feat: allow to copy text in EntryPage
  * Highlight the button of the selected feed</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Update Android Gradle plugin version to 8.6.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * snapcraft: Sync to master
  * Remove unused string from Android manifest
  * save settings when app suspends</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * add ability to mark feed or all feeds as read (kde#497540)
  * Don't create a binding loop when recalculating image sizes (kde#494778)
  * Add validation to urlField in AddFeedDialog (kde#481813)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * Use full article url as baseUrl for Kirigami.SelectableLabel
  * Fix open link with relativ urls</changelog>
</package>
<package pkgid="edd8b3a8a873ea5b6a715fcdb1d5eb2fd5ad09c3ddc077300c886577db3d8b14b29688993aae9bdeebef43f8d5529ab4d1644474a104ab9ecabc4ad3429fc432" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="160000.1.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
</package>
<package pkgid="7e1f14a658b2351758a8623f73bfdfb39881834d8acdf0440401e34b63126fced510fdf96c9f4d561179a6426c5f778b1aac13a60d0c8dc09faa1d94f2ba1370" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="160000.1.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
</package>
<package pkgid="b79d0f601c56e910d9a756cd62191dee09f1475ff6d3c84ce76b1096adc03b2df230dd8c4cacf3579e88f4a36572f57dfaa8611bbe022beae2f11604130beb94" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="160000.1.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  - CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881: Update
    github.com/opencontainers/runc to fix container breakouts by
    bypassing runc's restrictions for writing to arbitrary /proc
    files (bsc#1255074)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1768305600">- update to 1.12.2:
  * Bug Fixes
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
    (5b90a9d) (@dehaansa)
  - database_observability: Fix schema_details collector to fetch
    column definitions with case sensitive table names (#4872)
    (560dff4) (@jharvey10, @fridgepoet)
  - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
  - deps: Update npm dependencies [backport] (#5201) (8e06c26)
    (@jharvey10)
  - Ensure the squid exporter wrapper properly brackets ipv6
    addresses [backport] (#5205) (e329cc6) (@dehaansa)
  - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)
    (@kalleep)
  - Prevent panic in import.git when update fails [backport]
    (#5204) (c82fbae) (@dehaansa, @jharvey10)
  - show correct fallback alloy version instead of v1.13.0
    (#5110) (b72be99) (@dehaansa, @jharvey10)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1768824000">- CVE-2025-68156: Fix potential DoS via unbounded recursion in
  builtin functions (bsc#1255333):
  * Bump github.com/expr-lang/expr to version 1.17.7</changelog>
</package>
<package pkgid="21392b9a8a2d497565cc8c913d9a7412bb7e7c6b03e3cfea2d48347dcaeb6ffc4feb7256098995349243fbec31cd338f943deb0e76d6152d82cfdcbc7dbb7cd6" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="160000.1.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  - CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881: Update
    github.com/opencontainers/runc to fix container breakouts by
    bypassing runc's restrictions for writing to arbitrary /proc
    files (bsc#1255074)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1768305600">- update to 1.12.2:
  * Bug Fixes
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
    (5b90a9d) (@dehaansa)
  - database_observability: Fix schema_details collector to fetch
    column definitions with case sensitive table names (#4872)
    (560dff4) (@jharvey10, @fridgepoet)
  - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
  - deps: Update npm dependencies [backport] (#5201) (8e06c26)
    (@jharvey10)
  - Ensure the squid exporter wrapper properly brackets ipv6
    addresses [backport] (#5205) (e329cc6) (@dehaansa)
  - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)
    (@kalleep)
  - Prevent panic in import.git when update fails [backport]
    (#5204) (c82fbae) (@dehaansa, @jharvey10)
  - show correct fallback alloy version instead of v1.13.0
    (#5110) (b72be99) (@dehaansa, @jharvey10)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1768824000">- CVE-2025-68156: Fix potential DoS via unbounded recursion in
  builtin functions (bsc#1255333):
  * Bump github.com/expr-lang/expr to version 1.17.7</changelog>
  <changelog author="witold.bedyk@suse.com" date="1774526400">- update to 1.15.0:
  * BREAKING CHANGES
  - otelcol: Upgrade to OTel Collector v0.147.0
  - Renamed undocumented metrics that was previously prefixed
    with &lt;component_id&gt;&lt;metric_name&gt; to
    loki_source_awsfirehose&lt;metric_name&gt;
  * Security
    CVE-2026-26958: Update filippo.io/edwards25519 to version 1.1.1
    (bsc#1258609).
  * Features
  - alloy-mixin: Add filters, groupBy, and multi-select dashboard
    variables
  - beyla.ebpf: Add support for Prometheus native histograms
  - beyla.ebpf: Bump Beyla to v3.6
  - converters: Support converting Promtail limits_config
  - database_observability.mysql: Add filtering of query samples
    and wait events by minimum duration
  - database_observability.mysql: Embed prometheus exporter
    within db-o11y component
  - database_observability.postgres: Add configurable limit to
    pg_stat_statements query
  - database_observability.postgres: Embed prometheus exporter
    within db-o11y component
  - database_observability: Promote components to stable
  - Expose Functionality to Handle syslogs with Empty MSG Field
  - loki.process: Support structured metadata as source type of
    stage.labels for loki.process
  - loki.secretfilter: Add sampling for secretfilter entries
  - loki.source.gcplog: Add alloy config for MaxOutstandingBytes
    and MaxOutstandingMessages
  - loki.write: Add loki pipeline latency metric
  - mixin: Update loki dashboard
  - otelcol.receiver.datadog: Expose intake proxy and
    trace_id_cache_size settings
  - prometheus.exporter.cloudwatch: Use aws-sdk-go-v2 by default
  - pyroscope.ebpf: Add comm, pid labels and kernel frame options
- update to 1.14.2:
  * Security
    CVE-2026-33186: Update module google.golang.org/grpc to v1.79.3
    (bsc#1260317).
- update to 1.14.1:
  * Bug Fixes
  - Correctly handle the deprecated topic field in
    otelcol.receiver.kafka configuration
  - loki.process: Protect against json that does not look like
    docker json format
  - loki.source.file: Keep positions for compressed files when
    reading is finished
  - otelcol.receiver.datadog: Expose intake proxy and
    trace_id_cache_size settings
  - prometheus.scrape: Update arguments and targets even if
    scrape_native_histograms and extra_metrics are updated
- update to 1.14.0:
  * BREAKING CHANGES
  - loki.secretfilter: Some config options are removed entirely:
    partial_mask (replaced with redact_percent), allowlist (now
    controlled with custom gitleaks config), enable_entropy,
    include_generic, types (now controlled with custom gitleaks
    config).
  - otelcol.receiver.prometheus: otelcol.receiver.prometheus no
    longer sets start times of OTLP metrics.
  * Security:
    CVE-2026-25934: Update module github.com/go-git/go-git/v5 to
    v5.16.5 (bsc#1258099).
- update to 1.13.2:
  * Bug Fixes
  - Expose missing otelcol.processor.tail_sampling options
  - mixin: Add zipped dashboards as a release artifact
  - profiler: Backport Go 1.26 gopclntab textStart fix
  - prometheus.exporter.postgres: Update version of the exporter
    fork to fix pg_settings
  - pyroscope.ebpf: Backport dotnet nibble map fix
- update to 1.13.1:
  * Bug Fixes
  - timeout before starting new ones
- update to 1.13.0:
  * BREAKING CHANGES
  - otelcol: Upgrade to OTel Collector v0.142.0
  - otelcol.receiver.kafka: The global topic attribute has been
    deleted; use the topics attributes inside the logs, metrics,
    and traces blocks instead.
  - otelcol.exporter &gt; sending_queue &gt; batch &gt; min_size changed
    from 8192 to 2000 and max_size changed from 0 to 3000
  * Features
  - Add a virtual_node_peer_attributes and
    virtual_node_extra_label arguments to
    otelcol.connector.servicegraph
  - Add an otelcol.processor.metric_start_time component
  - Add job level period, length, and add_cloudwatch_timestamp
    options and labels_snake_case to CW exporter
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
  - Add parcas symbols upload to pyroscope.ebpf
  - Add sharding for loki.write
  - Add unexposed otel engine and extension to codebase and
    change build structure
  - beyla.ebpf: Add meta_cache_address to
    beyla.ebpf.attributes.kubernetes
  - beyla.ebpf: Upgrade Beyla to v2.8.5
  - Change the defaults for sending_queue &gt; batch block inside
    otelcol.exporter components
  - cluster: Support DNS discovery mode prefixes in
  - -cluster.join-addresses flag
  - converter: Update promtail converter to use file_match block
    for loki.source.file
  - database_observability: Add health check collector for
    postgres component
  - database_observability: Expose exclude_schemas and
    exclude_databases settings
  - database_observability: Support Azure cloud provider config
    data
  - database_observability.mysql: Support excluding schemas in
    all collectors
  - database_observability.postgres: Support excluding DBs in all
    collectors</changelog>
  <changelog author="witold.bedyk@suse.com" date="1776859200">- update to 1.15.1:
  * Bug Fixes
  - database_observability: Ensure connection_info_monitor
    goroutine exits on Stop
  - prometheus.exporter.postgres: Close DB connections on update</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1777204800">- add script to package webassets inside a podman container, to not
  endanger or pollute the host system with npm</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1777204801">- update to 1.16.0:
  * Features
  - Add clustering for loki.source.kubernetes_events (#6027)
    (3dbf587) (@petewall)
  - Add otelcol.auth.google client auth provider (#5526)
    (da99a66) (@dashpole, @clayton-cornell)
  - beyla.ebpf: Bump to v3.7.0 (#5966) (5126c2e) (@marctc)
  - database_observability: Add support for GCP Cloud SQL
    metadata (#5875) (5d23245) (@cristiangreco, @clayton-cornell)
  - database_observability: Make targets optional (#5924)
    (54664b2) (@matthewnolf)
  - database_observability: Update default excluded schemas and
    users (#6080) (b386fff) (@cristiangreco)
  - faro.receiver: Add sourcemap fetching from remote locations
    (#4614) (b6cb5da) (@Oxel40)
  - helm: Add support for global.image.pullPolicy (#6069)
    (2e2ce72) (@petewall)
  - helm: Allow configuring image pull policy for config reloader
    (#5923) (991539b) (@kalleep)
  - loki.secretfilter: Add label_timed_out option to mark
    timed-out log lines (#5898) (2ad8834) (@kleimkuhler)
  - loki.secretfilter: Add secrets_redacted_by_category_total
    metric combining rule and origin (#5855) (053a2f7)
    (@kleimkuhler)
  - loki.secretfilter: Change secretfilter to use go-re2 regex
    library instead of stdlib (#5909) (c16a660) (@mikefat)
  - loki.secretfilter: Remove redundant
    secrets_redacted_by_rule_total and secrets_redacted_by_origin
    metrics (#5970) (b16decb) (@kleimkuhler)
  - Oracle exporter can scrape more than one DB (#6008) (6fbad38)
    (@ptodev)
  - prometheus.exporter.cloudwatch: Upgrade YACE and drop
    aws-sdk-go v1 support (#5936) (f1c036d) (@x1unix)
  - prometheus.exporter.mysql: Update to mysqld_exporter 0.19.0
    (#5836) (4f49b57) (@cristiangreco)
  - prometheus.remote_write: Sync WAL with upstream Prometheus
    (#5907) (e74a91b) (@x1unix)
  - pyroscope: Add support for extra async-profiler CLI arguments
    (#5472) (9251e33) (@ivanape)
  - pyroscope: Replace Parca gRPC debuginfo upload with Pyroscope
    Connect API (#5891) (e7ea34a) (@korniltsev-grafanista)
  - pyroscope: Update debuginfo client for HTTP/1.1 upload API
    (#6037) (879d8e5) (@korniltsev-grafanista)
  * Bug Fixes
  - Change service stop command from 'sc' to 'net' (#5906)
    (450973d) (@mateuszdrab)
  - database_observability.mysql: Refactor explain plan loop
    batch size (#5894) (f0fcd6b) (@cristiangreco)
  - database_observability.postgres: Cleanup embedded exporter
    collectors on reconnection (#6079) (f30d9ae) (@cristiangreco)
  - database_observability.postgres: Fix EXPLAIN param count when
    placeholders repeat (#6082) (b612b81) (@rgeyer)
  - database_observability: Drop schema_detection from logs
    (#6076) (b0105cb) (@cristiangreco)
  - database_observability: Ensure connection_info_monitor
    goroutine exits on Stop (#5874) (1e3334b) (@cristiangreco)
  - deps: Update module github.com/aws/aws-sdk-go-v2/service/s3
    to v1.97.3 [SECURITY] (#6004) (38f4346)
  - deps: Update module github.com/go-git/go-git/v5 to v5.17.1
    [SECURITY] (#5934) (a5154af)
  - deps: Update module github.com/go-git/go-git/v5 to v5.18.0
    [SECURITY] (#6090) (0e59d64)
  - deps: Update module github.com/nwaples/rardecode/v2 to v2.2.0
    [SECURITY] (b44d51a) (@jharvey10)
  - deps: Update module
    go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
    to v1.43.0 [SECURITY] (#6016) (d92c5c0)
  - deps: Update module
    go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
    to v1.43.0 [SECURITY] (#6017) (e655bbc)
  - deps: Update module go.opentelemetry.io/otel/sdk to v1.43.0
    [SECURITY] (#6018) (94006e8)
  - deps: Update some minor go dep versions (#5896) (4ddd0ed)
    (@jharvey10)
  - go: Update alloy builder image to Go 1.25.9 (#6012) (d2ae8b8)
    (@x1unix)
  - go: Upgrade to Go 1.25.9 (#6019) (d777ed1) (@x1unix,
    @kalleep)
  - Helm: RBAC template handles empty rule arrays (#4860)
    (c9430e9) (@naptalie, @dehaansa, @kalleep)
  - loki.process: Eliminate per-stream goroutines in multiline
    stage (#6036) (c089e2e) (@kgeckhart)
  - loki.process: Prevent stage.structured_metadata from adding
    the same metadata several times (#5965) (0ec8a26) (@kalleep,
    @thampiotr)
  - loki.process: Wrap template in a custom type and move
    validation to syntax.Validator (#5910) (700dd7d) (@kalleep)
  - prometheus.exporter.postgres: Close DB connections on update
    (#6021) (8da97cf) (@kalleep)
  - prometheus.scrape: Update scrape_native_histograms to be
    updated at runtime (#6087) (18b205c) (@kalleep)
  - pyroscope.ebpf: Fix deadlock on LRU eviction in irsymcache
    (#5911) (03ca563) (@luweglarz)
  - pyroscope.ebpf: Move Pyroscope ebpf metrics registration
    after component error handling (#5540) (a3c57c0) (@crbednarz,
    @marcsanmi)
  - pyroscope: Set user agent on debuginfo connect-go client
    (#6022) (38ad1ef) (@korniltsev-grafanista)
  - ui: Large arguments are downloaded as files instead of
    rendered (#5268) (26c67b3) (@ptodev)
  - Update go-m1cpu v0.1.7 -&gt; v0.2.1 to fix M5 chip crash (#6034)
    (7fa0cbc) (@ymotongpoo)
  - windows-installer: Increase service restart on failure delays
    (#5969) (add15b1) (@rknightion)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1777464000">- Use systemd tmpfiles.d to create /var/lib/alloy hierarchy
  (jsc#PED-14815)
- CVE-2026-4427: Fix potential Go vuln in github.com/jackc/pgproto3
  (bsc#1259919)
  * Add 0001-Bump-sql_exporter.patch
- Use latest openSUSE Tumbleweed image for building web UI assets
- Install nvm to set node version specified upstream</changelog>
</package>
<package pkgid="34d7f9d593996d40648a9a6993fa4d67b9df24521591e24efbb1a299e1cd58913c69e7a5bd0057b04fd68706a37aebeef994f2446496ee5f5bed7b33212621e4" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="160000.1.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1768305600">- update to 1.12.2:
  * Bug Fixes
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
    (5b90a9d) (@dehaansa)
  - database_observability: Fix schema_details collector to fetch
    column definitions with case sensitive table names (#4872)
    (560dff4) (@jharvey10, @fridgepoet)
  - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
  - deps: Update npm dependencies [backport] (#5201) (8e06c26)
    (@jharvey10)
  - Ensure the squid exporter wrapper properly brackets ipv6
    addresses [backport] (#5205) (e329cc6) (@dehaansa)
  - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)
    (@kalleep)
  - Prevent panic in import.git when update fails [backport]
    (#5204) (c82fbae) (@dehaansa, @jharvey10)
  - show correct fallback alloy version instead of v1.13.0
    (#5110) (b72be99) (@dehaansa, @jharvey10)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1768824000">- CVE-2025-68156: Fix potential DoS via unbounded recursion in
  builtin functions (bsc#1255333):
  * Bump github.com/expr-lang/expr to version 1.17.7</changelog>
  <changelog author="witold.bedyk@suse.com" date="1774526400">- update to 1.15.0:
  * BREAKING CHANGES
  - otelcol: Upgrade to OTel Collector v0.147.0
  - Renamed undocumented metrics that was previously prefixed
    with &lt;component_id&gt;&lt;metric_name&gt; to
    loki_source_awsfirehose&lt;metric_name&gt;
  * Security
    CVE-2026-26958: Update filippo.io/edwards25519 to version 1.1.1
    (bsc#1258609).
  * Features
  - alloy-mixin: Add filters, groupBy, and multi-select dashboard
    variables
  - beyla.ebpf: Add support for Prometheus native histograms
  - beyla.ebpf: Bump Beyla to v3.6
  - converters: Support converting Promtail limits_config
  - database_observability.mysql: Add filtering of query samples
    and wait events by minimum duration
  - database_observability.mysql: Embed prometheus exporter
    within db-o11y component
  - database_observability.postgres: Add configurable limit to
    pg_stat_statements query
  - database_observability.postgres: Embed prometheus exporter
    within db-o11y component
  - database_observability: Promote components to stable
  - Expose Functionality to Handle syslogs with Empty MSG Field
  - loki.process: Support structured metadata as source type of
    stage.labels for loki.process
  - loki.secretfilter: Add sampling for secretfilter entries
  - loki.source.gcplog: Add alloy config for MaxOutstandingBytes
    and MaxOutstandingMessages
  - loki.write: Add loki pipeline latency metric
  - mixin: Update loki dashboard
  - otelcol.receiver.datadog: Expose intake proxy and
    trace_id_cache_size settings
  - prometheus.exporter.cloudwatch: Use aws-sdk-go-v2 by default
  - pyroscope.ebpf: Add comm, pid labels and kernel frame options
- update to 1.14.2:
  * Security
    CVE-2026-33186: Update module google.golang.org/grpc to v1.79.3
    (bsc#1260317).
- update to 1.14.1:
  * Bug Fixes
  - Correctly handle the deprecated topic field in
    otelcol.receiver.kafka configuration
  - loki.process: Protect against json that does not look like
    docker json format
  - loki.source.file: Keep positions for compressed files when
    reading is finished
  - otelcol.receiver.datadog: Expose intake proxy and
    trace_id_cache_size settings
  - prometheus.scrape: Update arguments and targets even if
    scrape_native_histograms and extra_metrics are updated
- update to 1.14.0:
  * BREAKING CHANGES
  - loki.secretfilter: Some config options are removed entirely:
    partial_mask (replaced with redact_percent), allowlist (now
    controlled with custom gitleaks config), enable_entropy,
    include_generic, types (now controlled with custom gitleaks
    config).
  - otelcol.receiver.prometheus: otelcol.receiver.prometheus no
    longer sets start times of OTLP metrics.
  * Security:
    CVE-2026-25934: Update module github.com/go-git/go-git/v5 to
    v5.16.5 (bsc#1258099).
- update to 1.13.2:
  * Bug Fixes
  - Expose missing otelcol.processor.tail_sampling options
  - mixin: Add zipped dashboards as a release artifact
  - profiler: Backport Go 1.26 gopclntab textStart fix
  - prometheus.exporter.postgres: Update version of the exporter
    fork to fix pg_settings
  - pyroscope.ebpf: Backport dotnet nibble map fix
- update to 1.13.1:
  * Bug Fixes
  - timeout before starting new ones
- update to 1.13.0:
  * BREAKING CHANGES
  - otelcol: Upgrade to OTel Collector v0.142.0
  - otelcol.receiver.kafka: The global topic attribute has been
    deleted; use the topics attributes inside the logs, metrics,
    and traces blocks instead.
  - otelcol.exporter &gt; sending_queue &gt; batch &gt; min_size changed
    from 8192 to 2000 and max_size changed from 0 to 3000
  * Features
  - Add a virtual_node_peer_attributes and
    virtual_node_extra_label arguments to
    otelcol.connector.servicegraph
  - Add an otelcol.processor.metric_start_time component
  - Add job level period, length, and add_cloudwatch_timestamp
    options and labels_snake_case to CW exporter
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
  - Add parcas symbols upload to pyroscope.ebpf
  - Add sharding for loki.write
  - Add unexposed otel engine and extension to codebase and
    change build structure
  - beyla.ebpf: Add meta_cache_address to
    beyla.ebpf.attributes.kubernetes
  - beyla.ebpf: Upgrade Beyla to v2.8.5
  - Change the defaults for sending_queue &gt; batch block inside
    otelcol.exporter components
  - cluster: Support DNS discovery mode prefixes in
  - -cluster.join-addresses flag
  - converter: Update promtail converter to use file_match block
    for loki.source.file
  - database_observability: Add health check collector for
    postgres component
  - database_observability: Expose exclude_schemas and
    exclude_databases settings
  - database_observability: Support Azure cloud provider config
    data
  - database_observability.mysql: Support excluding schemas in
    all collectors
  - database_observability.postgres: Support excluding DBs in all
    collectors</changelog>
  <changelog author="witold.bedyk@suse.com" date="1776859200">- update to 1.15.1:
  * Bug Fixes
  - database_observability: Ensure connection_info_monitor
    goroutine exits on Stop
  - prometheus.exporter.postgres: Close DB connections on update
  * CVE-2026-34986: Fix panic in JWE decryption (bsc#1262955)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1777204800">- add script to package webassets inside a podman container, to not
  endanger or pollute the host system with npm</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1777204801">- update to 1.16.0:
  * Features
  - Add clustering for loki.source.kubernetes_events (#6027)
    (3dbf587) (@petewall)
  - Add otelcol.auth.google client auth provider (#5526)
    (da99a66) (@dashpole, @clayton-cornell)
  - beyla.ebpf: Bump to v3.7.0 (#5966) (5126c2e) (@marctc)
  - database_observability: Add support for GCP Cloud SQL
    metadata (#5875) (5d23245) (@cristiangreco, @clayton-cornell)
  - database_observability: Make targets optional (#5924)
    (54664b2) (@matthewnolf)
  - database_observability: Update default excluded schemas and
    users (#6080) (b386fff) (@cristiangreco)
  - faro.receiver: Add sourcemap fetching from remote locations
    (#4614) (b6cb5da) (@Oxel40)
  - helm: Add support for global.image.pullPolicy (#6069)
    (2e2ce72) (@petewall)
  - helm: Allow configuring image pull policy for config reloader
    (#5923) (991539b) (@kalleep)
  - loki.secretfilter: Add label_timed_out option to mark
    timed-out log lines (#5898) (2ad8834) (@kleimkuhler)
  - loki.secretfilter: Add secrets_redacted_by_category_total
    metric combining rule and origin (#5855) (053a2f7)
    (@kleimkuhler)
  - loki.secretfilter: Change secretfilter to use go-re2 regex
    library instead of stdlib (#5909) (c16a660) (@mikefat)
  - loki.secretfilter: Remove redundant
    secrets_redacted_by_rule_total and secrets_redacted_by_origin
    metrics (#5970) (b16decb) (@kleimkuhler)
  - Oracle exporter can scrape more than one DB (#6008) (6fbad38)
    (@ptodev)
  - prometheus.exporter.cloudwatch: Upgrade YACE and drop
    aws-sdk-go v1 support (#5936) (f1c036d) (@x1unix)
  - prometheus.exporter.mysql: Update to mysqld_exporter 0.19.0
    (#5836) (4f49b57) (@cristiangreco)
  - prometheus.remote_write: Sync WAL with upstream Prometheus
    (#5907) (e74a91b) (@x1unix)
  - pyroscope: Add support for extra async-profiler CLI arguments
    (#5472) (9251e33) (@ivanape)
  - pyroscope: Replace Parca gRPC debuginfo upload with Pyroscope
    Connect API (#5891) (e7ea34a) (@korniltsev-grafanista)
  - pyroscope: Update debuginfo client for HTTP/1.1 upload API
    (#6037) (879d8e5) (@korniltsev-grafanista)
  * Bug Fixes
  - Change service stop command from 'sc' to 'net' (#5906)
    (450973d) (@mateuszdrab)
  - database_observability.mysql: Refactor explain plan loop
    batch size (#5894) (f0fcd6b) (@cristiangreco)
  - database_observability.postgres: Cleanup embedded exporter
    collectors on reconnection (#6079) (f30d9ae) (@cristiangreco)
  - database_observability.postgres: Fix EXPLAIN param count when
    placeholders repeat (#6082) (b612b81) (@rgeyer)
  - database_observability: Drop schema_detection from logs
    (#6076) (b0105cb) (@cristiangreco)
  - database_observability: Ensure connection_info_monitor
    goroutine exits on Stop (#5874) (1e3334b) (@cristiangreco)
  - deps: Update module github.com/aws/aws-sdk-go-v2/service/s3
    to v1.97.3 [SECURITY] (#6004) (38f4346)
  - deps: Update module github.com/go-git/go-git/v5 to v5.17.1
    [SECURITY] (#5934) (a5154af)
  - deps: Update module github.com/go-git/go-git/v5 to v5.18.0
    [SECURITY] (#6090) (0e59d64)
  - deps: Update module github.com/nwaples/rardecode/v2 to v2.2.0
    [SECURITY] (b44d51a) (@jharvey10)
  - deps: Update module
    go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
    to v1.43.0 [SECURITY] (#6016) (d92c5c0)
  - deps: Update module
    go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
    to v1.43.0 [SECURITY] (#6017) (e655bbc)
  - deps: Update module go.opentelemetry.io/otel/sdk to v1.43.0
    [SECURITY] (#6018) (94006e8)
  - deps: Update some minor go dep versions (#5896) (4ddd0ed)
    (@jharvey10)
  - go: Update alloy builder image to Go 1.25.9 (#6012) (d2ae8b8)
    (@x1unix)
  - go: Upgrade to Go 1.25.9 (#6019) (d777ed1) (@x1unix,
    @kalleep)
  - Helm: RBAC template handles empty rule arrays (#4860)
    (c9430e9) (@naptalie, @dehaansa, @kalleep)
  - loki.process: Eliminate per-stream goroutines in multiline
    stage (#6036) (c089e2e) (@kgeckhart)
  - loki.process: Prevent stage.structured_metadata from adding
    the same metadata several times (#5965) (0ec8a26) (@kalleep,
    @thampiotr)
  - loki.process: Wrap template in a custom type and move
    validation to syntax.Validator (#5910) (700dd7d) (@kalleep)
  - prometheus.exporter.postgres: Close DB connections on update
    (#6021) (8da97cf) (@kalleep)
  - prometheus.scrape: Update scrape_native_histograms to be
    updated at runtime (#6087) (18b205c) (@kalleep)
  - pyroscope.ebpf: Fix deadlock on LRU eviction in irsymcache
    (#5911) (03ca563) (@luweglarz)
  - pyroscope.ebpf: Move Pyroscope ebpf metrics registration
    after component error handling (#5540) (a3c57c0) (@crbednarz,
    @marcsanmi)
  - pyroscope: Set user agent on debuginfo connect-go client
    (#6022) (38ad1ef) (@korniltsev-grafanista)
  - ui: Large arguments are downloaded as files instead of
    rendered (#5268) (26c67b3) (@ptodev)
  - Update go-m1cpu v0.1.7 -&gt; v0.2.1 to fix M5 chip crash (#6034)
    (7fa0cbc) (@ymotongpoo)
  - windows-installer: Increase service restart on failure delays
    (#5969) (add15b1) (@rknightion)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1777464000">- Use systemd tmpfiles.d to create /var/lib/alloy hierarchy
  (jsc#PED-14815)
- CVE-2026-4427: Fix potential Go vuln in github.com/jackc/pgproto3
  (bsc#1259919)
  * Add 0001-Bump-sql_exporter.patch
- Use latest openSUSE Tumbleweed image for building web UI assets
- Install nvm to set node version specified upstream</changelog>
  <changelog author="witold.bedyk@suse.com" date="1778068800">- CVE-2026-41602: Fix Integer Overflow or Wraparound vulnerability in Apache
  Thrift (bsc#1263530)
  * Add 0002-Bump-Apache-Thrift.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1778068801">- Update to version 1.16.1
  * Bug Fixes
    logging: Fix startup deadlock when components log before
    logging config is evaluated
    Update to Beyla 3.9.8
    Migrate from Docker to Moby</changelog>
</package>
<package pkgid="d7e33ac93a4ec3ce4f485fe9bb08e49c6de759a57a7b93e296cf34cfef7031bc6b1a36af1f390dd7400bf8148f5194331cc320d2ba7249639d9b8915a8d87760" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="160000.1.1"/>
  <changelog author="witold.bedyk@suse.com" date="1768824000">- CVE-2025-68156: Fix potential DoS via unbounded recursion in
  builtin functions (bsc#1255333):
  * Bump github.com/expr-lang/expr to version 1.17.7</changelog>
  <changelog author="witold.bedyk@suse.com" date="1774526400">- update to 1.15.0:
  * BREAKING CHANGES
  - otelcol: Upgrade to OTel Collector v0.147.0
  - Renamed undocumented metrics that was previously prefixed
    with &lt;component_id&gt;&lt;metric_name&gt; to
    loki_source_awsfirehose&lt;metric_name&gt;
  * Security
    CVE-2026-26958: Update filippo.io/edwards25519 to version 1.1.1
    (bsc#1258609).
  * Features
  - alloy-mixin: Add filters, groupBy, and multi-select dashboard
    variables
  - beyla.ebpf: Add support for Prometheus native histograms
  - beyla.ebpf: Bump Beyla to v3.6
  - converters: Support converting Promtail limits_config
  - database_observability.mysql: Add filtering of query samples
    and wait events by minimum duration
  - database_observability.mysql: Embed prometheus exporter
    within db-o11y component
  - database_observability.postgres: Add configurable limit to
    pg_stat_statements query
  - database_observability.postgres: Embed prometheus exporter
    within db-o11y component
  - database_observability: Promote components to stable
  - Expose Functionality to Handle syslogs with Empty MSG Field
  - loki.process: Support structured metadata as source type of
    stage.labels for loki.process
  - loki.secretfilter: Add sampling for secretfilter entries
  - loki.source.gcplog: Add alloy config for MaxOutstandingBytes
    and MaxOutstandingMessages
  - loki.write: Add loki pipeline latency metric
  - mixin: Update loki dashboard
  - otelcol.receiver.datadog: Expose intake proxy and
    trace_id_cache_size settings
  - prometheus.exporter.cloudwatch: Use aws-sdk-go-v2 by default
  - pyroscope.ebpf: Add comm, pid labels and kernel frame options
- update to 1.14.2:
  * Security
    CVE-2026-33186: Update module google.golang.org/grpc to v1.79.3
    (bsc#1260317).
- update to 1.14.1:
  * Bug Fixes
  - Correctly handle the deprecated topic field in
    otelcol.receiver.kafka configuration
  - loki.process: Protect against json that does not look like
    docker json format
  - loki.source.file: Keep positions for compressed files when
    reading is finished
  - otelcol.receiver.datadog: Expose intake proxy and
    trace_id_cache_size settings
  - prometheus.scrape: Update arguments and targets even if
    scrape_native_histograms and extra_metrics are updated
- update to 1.14.0:
  * BREAKING CHANGES
  - loki.secretfilter: Some config options are removed entirely:
    partial_mask (replaced with redact_percent), allowlist (now
    controlled with custom gitleaks config), enable_entropy,
    include_generic, types (now controlled with custom gitleaks
    config).
  - otelcol.receiver.prometheus: otelcol.receiver.prometheus no
    longer sets start times of OTLP metrics.
  * Security:
    CVE-2026-25934: Update module github.com/go-git/go-git/v5 to
    v5.16.5 (bsc#1258099).
- update to 1.13.2:
  * Bug Fixes
  - Expose missing otelcol.processor.tail_sampling options
  - mixin: Add zipped dashboards as a release artifact
  - profiler: Backport Go 1.26 gopclntab textStart fix
  - prometheus.exporter.postgres: Update version of the exporter
    fork to fix pg_settings
  - pyroscope.ebpf: Backport dotnet nibble map fix
- update to 1.13.1:
  * Bug Fixes
  - timeout before starting new ones
- update to 1.13.0:
  * BREAKING CHANGES
  - otelcol: Upgrade to OTel Collector v0.142.0
  - otelcol.receiver.kafka: The global topic attribute has been
    deleted; use the topics attributes inside the logs, metrics,
    and traces blocks instead.
  - otelcol.exporter &gt; sending_queue &gt; batch &gt; min_size changed
    from 8192 to 2000 and max_size changed from 0 to 3000
  * Features
  - Add a virtual_node_peer_attributes and
    virtual_node_extra_label arguments to
    otelcol.connector.servicegraph
  - Add an otelcol.processor.metric_start_time component
  - Add job level period, length, and add_cloudwatch_timestamp
    options and labels_snake_case to CW exporter
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
  - Add parcas symbols upload to pyroscope.ebpf
  - Add sharding for loki.write
  - Add unexposed otel engine and extension to codebase and
    change build structure
  - beyla.ebpf: Add meta_cache_address to
    beyla.ebpf.attributes.kubernetes
  - beyla.ebpf: Upgrade Beyla to v2.8.5
  - Change the defaults for sending_queue &gt; batch block inside
    otelcol.exporter components
  - cluster: Support DNS discovery mode prefixes in
  - -cluster.join-addresses flag
  - converter: Update promtail converter to use file_match block
    for loki.source.file
  - database_observability: Add health check collector for
    postgres component
  - database_observability: Expose exclude_schemas and
    exclude_databases settings
  - database_observability: Support Azure cloud provider config
    data
  - database_observability.mysql: Support excluding schemas in
    all collectors
  - database_observability.postgres: Support excluding DBs in all
    collectors</changelog>
  <changelog author="witold.bedyk@suse.com" date="1776859200">- update to 1.15.1:
  * Bug Fixes
  - database_observability: Ensure connection_info_monitor
    goroutine exits on Stop
  - prometheus.exporter.postgres: Close DB connections on update
  * CVE-2026-34986: Fix panic in JWE decryption (bsc#1262955)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1777204800">- add script to package webassets inside a podman container, to not
  endanger or pollute the host system with npm</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1777204801">- update to 1.16.0:
  * Features
  - Add clustering for loki.source.kubernetes_events (#6027)
    (3dbf587) (@petewall)
  - Add otelcol.auth.google client auth provider (#5526)
    (da99a66) (@dashpole, @clayton-cornell)
  - beyla.ebpf: Bump to v3.7.0 (#5966) (5126c2e) (@marctc)
  - database_observability: Add support for GCP Cloud SQL
    metadata (#5875) (5d23245) (@cristiangreco, @clayton-cornell)
  - database_observability: Make targets optional (#5924)
    (54664b2) (@matthewnolf)
  - database_observability: Update default excluded schemas and
    users (#6080) (b386fff) (@cristiangreco)
  - faro.receiver: Add sourcemap fetching from remote locations
    (#4614) (b6cb5da) (@Oxel40)
  - helm: Add support for global.image.pullPolicy (#6069)
    (2e2ce72) (@petewall)
  - helm: Allow configuring image pull policy for config reloader
    (#5923) (991539b) (@kalleep)
  - loki.secretfilter: Add label_timed_out option to mark
    timed-out log lines (#5898) (2ad8834) (@kleimkuhler)
  - loki.secretfilter: Add secrets_redacted_by_category_total
    metric combining rule and origin (#5855) (053a2f7)
    (@kleimkuhler)
  - loki.secretfilter: Change secretfilter to use go-re2 regex
    library instead of stdlib (#5909) (c16a660) (@mikefat)
  - loki.secretfilter: Remove redundant
    secrets_redacted_by_rule_total and secrets_redacted_by_origin
    metrics (#5970) (b16decb) (@kleimkuhler)
  - Oracle exporter can scrape more than one DB (#6008) (6fbad38)
    (@ptodev)
  - prometheus.exporter.cloudwatch: Upgrade YACE and drop
    aws-sdk-go v1 support (#5936) (f1c036d) (@x1unix)
  - prometheus.exporter.mysql: Update to mysqld_exporter 0.19.0
    (#5836) (4f49b57) (@cristiangreco)
  - prometheus.remote_write: Sync WAL with upstream Prometheus
    (#5907) (e74a91b) (@x1unix)
  - pyroscope: Add support for extra async-profiler CLI arguments
    (#5472) (9251e33) (@ivanape)
  - pyroscope: Replace Parca gRPC debuginfo upload with Pyroscope
    Connect API (#5891) (e7ea34a) (@korniltsev-grafanista)
  - pyroscope: Update debuginfo client for HTTP/1.1 upload API
    (#6037) (879d8e5) (@korniltsev-grafanista)
  * Bug Fixes
  - Change service stop command from 'sc' to 'net' (#5906)
    (450973d) (@mateuszdrab)
  - database_observability.mysql: Refactor explain plan loop
    batch size (#5894) (f0fcd6b) (@cristiangreco)
  - database_observability.postgres: Cleanup embedded exporter
    collectors on reconnection (#6079) (f30d9ae) (@cristiangreco)
  - database_observability.postgres: Fix EXPLAIN param count when
    placeholders repeat (#6082) (b612b81) (@rgeyer)
  - database_observability: Drop schema_detection from logs
    (#6076) (b0105cb) (@cristiangreco)
  - database_observability: Ensure connection_info_monitor
    goroutine exits on Stop (#5874) (1e3334b) (@cristiangreco)
  - deps: Update module github.com/aws/aws-sdk-go-v2/service/s3
    to v1.97.3 [SECURITY] (#6004) (38f4346)
  - deps: Update module github.com/go-git/go-git/v5 to v5.17.1
    [SECURITY] (#5934) (a5154af)
  - deps: Update module github.com/go-git/go-git/v5 to v5.18.0
    [SECURITY] (#6090) (0e59d64)
  - deps: Update module github.com/nwaples/rardecode/v2 to v2.2.0
    [SECURITY] (b44d51a) (@jharvey10)
  - deps: Update module
    go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
    to v1.43.0 [SECURITY] (#6016) (d92c5c0)
  - deps: Update module
    go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
    to v1.43.0 [SECURITY] (#6017) (e655bbc)
  - deps: Update module go.opentelemetry.io/otel/sdk to v1.43.0
    [SECURITY] (#6018) (94006e8)
  - deps: Update some minor go dep versions (#5896) (4ddd0ed)
    (@jharvey10)
  - go: Update alloy builder image to Go 1.25.9 (#6012) (d2ae8b8)
    (@x1unix)
  - go: Upgrade to Go 1.25.9 (#6019) (d777ed1) (@x1unix,
    @kalleep)
  - Helm: RBAC template handles empty rule arrays (#4860)
    (c9430e9) (@naptalie, @dehaansa, @kalleep)
  - loki.process: Eliminate per-stream goroutines in multiline
    stage (#6036) (c089e2e) (@kgeckhart)
  - loki.process: Prevent stage.structured_metadata from adding
    the same metadata several times (#5965) (0ec8a26) (@kalleep,
    @thampiotr)
  - loki.process: Wrap template in a custom type and move
    validation to syntax.Validator (#5910) (700dd7d) (@kalleep)
  - prometheus.exporter.postgres: Close DB connections on update
    (#6021) (8da97cf) (@kalleep)
  - prometheus.scrape: Update scrape_native_histograms to be
    updated at runtime (#6087) (18b205c) (@kalleep)
  - pyroscope.ebpf: Fix deadlock on LRU eviction in irsymcache
    (#5911) (03ca563) (@luweglarz)
  - pyroscope.ebpf: Move Pyroscope ebpf metrics registration
    after component error handling (#5540) (a3c57c0) (@crbednarz,
    @marcsanmi)
  - pyroscope: Set user agent on debuginfo connect-go client
    (#6022) (38ad1ef) (@korniltsev-grafanista)
  - ui: Large arguments are downloaded as files instead of
    rendered (#5268) (26c67b3) (@ptodev)
  - Update go-m1cpu v0.1.7 -&gt; v0.2.1 to fix M5 chip crash (#6034)
    (7fa0cbc) (@ymotongpoo)
  - windows-installer: Increase service restart on failure delays
    (#5969) (add15b1) (@rknightion)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1777464000">- Use systemd tmpfiles.d to create /var/lib/alloy hierarchy
  (jsc#PED-14815)
- CVE-2026-4427: Fix potential Go vuln in github.com/jackc/pgproto3
  (bsc#1259919)
  * Add 0001-Bump-sql_exporter.patch
- Use latest openSUSE Tumbleweed image for building web UI assets
- Install nvm to set node version specified upstream</changelog>
  <changelog author="witold.bedyk@suse.com" date="1778068800">- CVE-2026-41602: Fix Integer Overflow or Wraparound vulnerability in Apache
  Thrift (bsc#1263530)
  * Add 0002-Bump-Apache-Thrift.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1778068801">- Update to version 1.16.1
  * Bug Fixes
    logging: Fix startup deadlock when components log before
    logging config is evaluated
    Update to Beyla 3.9.8
    Migrate from Docker to Moby</changelog>
  <changelog author="witold.bedyk@suse.com" date="1781006400">- CVE-2026-41889: Fix SQL injection by bumping github.com/jackc/pgx
    to version 5.9.2 (bsc#1265440)
  - add patch 0003-Bump-jackc-pgx.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1781697600">- Update to version 1.17.0:
  * Features
    Add GraphQL server and gql subcommand
    otelcol: Add Nginx receiver
    otelcol.exporter.prometheus: Convert classic histograms to NHCB
    database_observability: Various enhancements for MySQL and Postgres
    faro.receiver: Support gzip-compressed request bodies
    Update to Beyla 3.9.8
  * Bug Fixes
    Address Critical CVE's From Scanner
    security: Update x/crypto, x/net, jackc/pgx/v5, and obi
    cluster: Fix nodes failing to join the cluster with TLS enabled
    loki.process: Fix potential deadlocks and limit stage shutdown
    Update go to v1.26.4
  * CVE-2026-44740: Fix potential DoS via infinite loops, panics or
    resource consumption by bumping
    go-git/go-billy/v5 to 5.9.0 (bsc#1267333)
  * CVE-2026-45678: Fix Postgres BIND parsing by bumping
    go.opentelemetry.io/obi to 0.9.0 (bsc#1267481)
  * CVE-2026-45682: Fix memory leak in OpenTelemetry eBPF
    instrumentation by bumping
    go.opentelemetry.io/obi to 0.9.0 (bsc#1267485)
  * CVE-2026-45686: Fix integer overflow in memcached text protocol
    parser by bumping go.opentelemetry.io/obi to
    version 0.9.0 (bsc#1267489)
  * CVE-2026-45685: Fix DoS in MongoDB TCP parser by bumping
    go.opentelemetry.io/obi to 0.9.0 (bsc#1267488)
- Drop patches:
  * 0001-Bump-sql_exporter.patch
  * 0002-Bump-Apache-Thrift.patch
  * 0003-Bump-jackc-pgx.patch
- Update to version 1.16.3:
  * Bug Fixes
    cluster: Fix nodes failing to join the cluster when TLS is
    enabled
- Update to version 1.16.2:
  * Bug Fixes
    loki.process: No longer mutate rules in stage.truncate causing
    every config update to reload pipeline when this
    stage is used
    loki.process: Potential deadlock on update with stage and
    receiver changes
    otelcol.exporter.awss3: Add missing unique_key_func_name
    attribute
    security: Address Critical CVE's From Scanner
    security: Update x/crypto and x/net for CVEs: CVE-2026-39827,
    CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
    CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597,
    CVE-2026-46598, CVE-2026-46595, CVE-2026-39835
    (bsc#1266196)
    CVE-2026-39821: Fix validation bypass and privilege escalation
    by bumping x/net/idna (bsc#1266654)
    security: Fix multiple issues when parsing HTML files:
    CVE-2026-25680, CVE-2026-42502, CVE-2026-27136,
    CVE-2026-25681, CVE-2026-42506 (bsc#1267185)
    CVE-2026-33532: Remove dependency on vulnerable yaml library
    (bsc#1260981)</changelog>
</package>
<package pkgid="c8997febd2423bff49c9b35590306d6e0b1f50156f25321cbdd39fd791a5d656a453581b0bd2a9b19f71ed40081ae136fd102951c411b6b945d804e3badb7496" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="160000.2.2"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
</package>
<package pkgid="0d26424fb4304e820ddc6884e1178452ee36d1c7b45aca3209abcf6aa3377ed1cdc3a5ddcf4da8a21241429d830f27d7566d758b4537e784441d0beb344cf7b5" name="almanah" arch="x86_64">
  <version epoch="0" ver="0.12.3" rel="bp160.1.19"/>
  <changelog author="dimstar@opensuse.org" date="1348315200">- Update to version 0.10.0:
  + Major changes:
  - Updated EDS events integration to the new 3.5.91 API
  - Second phase of the new UI
  - Now is set the default file name when the user doing "Print
    to File"
  - Updated HACKING doc with general principles and a security
    policy
  + Bugs fixed: bgo#683570, bgo#680845, bgo#676765, bgo#676931,
    bgo#676766
  + Updated translations.
- Drop pkgconfig(gconf-2.0) BuildRequires: no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1363521600">- Update to version 0.10.1:
  + Almanah doesn't encrypt the database when the application close
    (bgo#695117, bnc#809140, CVE-2013-1853).</changelog>
  <changelog author="dimstar@opensuse.org" date="1366286400">- Update to version 0.10.8:
  + Main window redesign.
  + Tagging support.
  + Port to GMenu.
  + Dropped the libedataserverui dependency and embed the
    ECellRendererColor and ESourceSelector widgets.
  + Hide the title bar in maximized windows.
  + Updated GtkSpell 3 support.
  + Updated EDS dependency to 3.5.91.
  + Bugs fixed: bgo#677209, bgo#680845.
  + Updated translations.
- Replace pkgconfig(gtkspell-3.0) BuildRequires with
  pkgconfig(gtkspell3-3.0), following upstream.
- Drop pkgconfig(libedataserverui-3.0) BuildRequires: no longer
  needed.
- Add -UE_CAL_DISABLE_DEPRECATED to CFLAGS, in order to allow
  deprecated E_CAL functions.
- Add almanah-includes.patch: include interface.h to fix build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385812800">- Update to version 0.11.0:
  + Improved the tagging accesibility.
  + Enhanced the diary security.
  + Changed the tagging look (new button with a symbolic link in
    the toolbar and the tag bar shown integrated in the main
    toolbar).
  + Added a new 256x256 icon, that looks better in GNOME Shell.
  + Added an AppData file to show a completed information in
    Software App.
  + Updated translations.
- Drop almanah-includes.patch: fixed upstream.
- Pass install_sh=$(pwd)/install-sh to make_install: for some weird
  reason, the tarball fails to find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.11.1:
  + Improved AppData support for Software App.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 0.12.0:
  + Move encryption support to SQLiteVFS to improve performance and
    reduce the chance of data loss from use of temporary files.
  + Various GTK version and API updates.
  + Migrated from GtkToolbar to GtkHeaderBar.
  + Various AppData file updates.
  + Support undo and redo.
  + Port to Meson.
  + Port to libecal-2.0.
  + Bugs fixed:
  - Meson build claims implicit function declaration warnings.
  - build: Port to meson.
  - docs: Port README to Markdown and update it.
  - event-factories: Fix an incorrect string comparison.
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Replace pkgconfig(libecal-1.2) with pkgconfig(libecal-2.0)
  BuildRequires.
- Add pkgconfig(gtksourceview-3.0) and pkgconfig(gcr-base-3)
  BuildRequires: New dependencies.
- Add explicit pkgconfig(glib-2.0), pkgconfig(gmodule-2.0),
  pkgconfig(gthread-2.0), pkgconfig(gio-2.0) and pkgconfig(sqlite3)
  BuildRequires and drop sqlite3-devel BuildRequires: Align with
  what meson checks for.
- Drop almanah-lang Recommends: No longer needed.
- Drop glib2_gsettings_schema_post(un), icon_theme_cache_post(un)
  desktop_database_post(un) and glib2_gsettings_schema_requires
  macros, no longer needed by any supported versions of openSUSE.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1599220800">- Update to version 0.12.2:
  + Fix version number (no other changes).
- Changes from version 0.12.1:
  + Bump Meson dependency to 0.51 to simplify build system.
  + Bugs fixed: typo in src/vfs.c errors.
  + Updated translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 0.12.3
  * Fixed: Font size is too small in text view
  * Updated Catalan translation</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645531200">- Add Fix-build-meson-060.patch: Fix build with meson 0.60.x and
  newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="b80a94ef4e0276dffe5f9478e6a91b2dff6cec4ba98f4b6325b203bea11ddc9d87ebac451d22e2ba3cae2f1bf7998afdc1ec2b4cff8b743833beedfdef563234" name="almanah-lang" arch="noarch">
  <version epoch="0" ver="0.12.3" rel="bp160.1.19"/>
  <changelog author="dimstar@opensuse.org" date="1348315200">- Update to version 0.10.0:
  + Major changes:
  - Updated EDS events integration to the new 3.5.91 API
  - Second phase of the new UI
  - Now is set the default file name when the user doing "Print
    to File"
  - Updated HACKING doc with general principles and a security
    policy
  + Bugs fixed: bgo#683570, bgo#680845, bgo#676765, bgo#676931,
    bgo#676766
  + Updated translations.
- Drop pkgconfig(gconf-2.0) BuildRequires: no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1363521600">- Update to version 0.10.1:
  + Almanah doesn't encrypt the database when the application close
    (bgo#695117, bnc#809140, CVE-2013-1853).</changelog>
  <changelog author="dimstar@opensuse.org" date="1366286400">- Update to version 0.10.8:
  + Main window redesign.
  + Tagging support.
  + Port to GMenu.
  + Dropped the libedataserverui dependency and embed the
    ECellRendererColor and ESourceSelector widgets.
  + Hide the title bar in maximized windows.
  + Updated GtkSpell 3 support.
  + Updated EDS dependency to 3.5.91.
  + Bugs fixed: bgo#677209, bgo#680845.
  + Updated translations.
- Replace pkgconfig(gtkspell-3.0) BuildRequires with
  pkgconfig(gtkspell3-3.0), following upstream.
- Drop pkgconfig(libedataserverui-3.0) BuildRequires: no longer
  needed.
- Add -UE_CAL_DISABLE_DEPRECATED to CFLAGS, in order to allow
  deprecated E_CAL functions.
- Add almanah-includes.patch: include interface.h to fix build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385812800">- Update to version 0.11.0:
  + Improved the tagging accesibility.
  + Enhanced the diary security.
  + Changed the tagging look (new button with a symbolic link in
    the toolbar and the tag bar shown integrated in the main
    toolbar).
  + Added a new 256x256 icon, that looks better in GNOME Shell.
  + Added an AppData file to show a completed information in
    Software App.
  + Updated translations.
- Drop almanah-includes.patch: fixed upstream.
- Pass install_sh=$(pwd)/install-sh to make_install: for some weird
  reason, the tarball fails to find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.11.1:
  + Improved AppData support for Software App.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 0.12.0:
  + Move encryption support to SQLiteVFS to improve performance and
    reduce the chance of data loss from use of temporary files.
  + Various GTK version and API updates.
  + Migrated from GtkToolbar to GtkHeaderBar.
  + Various AppData file updates.
  + Support undo and redo.
  + Port to Meson.
  + Port to libecal-2.0.
  + Bugs fixed:
  - Meson build claims implicit function declaration warnings.
  - build: Port to meson.
  - docs: Port README to Markdown and update it.
  - event-factories: Fix an incorrect string comparison.
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Replace pkgconfig(libecal-1.2) with pkgconfig(libecal-2.0)
  BuildRequires.
- Add pkgconfig(gtksourceview-3.0) and pkgconfig(gcr-base-3)
  BuildRequires: New dependencies.
- Add explicit pkgconfig(glib-2.0), pkgconfig(gmodule-2.0),
  pkgconfig(gthread-2.0), pkgconfig(gio-2.0) and pkgconfig(sqlite3)
  BuildRequires and drop sqlite3-devel BuildRequires: Align with
  what meson checks for.
- Drop almanah-lang Recommends: No longer needed.
- Drop glib2_gsettings_schema_post(un), icon_theme_cache_post(un)
  desktop_database_post(un) and glib2_gsettings_schema_requires
  macros, no longer needed by any supported versions of openSUSE.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1599220800">- Update to version 0.12.2:
  + Fix version number (no other changes).
- Changes from version 0.12.1:
  + Bump Meson dependency to 0.51 to simplify build system.
  + Bugs fixed: typo in src/vfs.c errors.
  + Updated translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 0.12.3
  * Fixed: Font size is too small in text view
  * Updated Catalan translation</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645531200">- Add Fix-build-meson-060.patch: Fix build with meson 0.60.x and
  newer.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="9e49d1f5d1e97ec7ebdaf1e99ecdc5aa9dc9049e26f616607355935a5bc211fe28df17d0177052b246563099f7add73e64f7afe0a61022c0865b59ca455b4cff" name="alpine" arch="x86_64">
  <version epoch="0" ver="2.26" rel="bp160.1.15"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1610712000">- Update to release 2.24
  * A few crash fixes
  * Implementation of XOAUTH2 for Yahoo! Mail.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1621166400">- Set system mail directory to /var/mail</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621944000">- Add chappa-DelText.patch [boo#1182236]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632052800">- Update to release 2.25
  * New configuration variable VAR_ssl-ciphers that allows users
    to list the ciphers to use when connecting to a SSL
    server.
  * New hidden feature FEAT_enable-delete-before-writing to add
    support for terminals that need lines to be deleted before
    being written.
  * Always follow ‘suppress-asterisks-in-password-prompt’ setting
    in the various password prompts.
  * Fixed a memory corruption when alpine searches for a string
    that is an incomplete utf8 string in a local folder.
  * Fixed: When forwarding a message, replacing an attachment
    might make Alpine re-attach the original attachment.
  * bsc#1189316, CVE-2021-38370: The c-client library parses
    information from an IMAP server during non-authenticated state
    which could lead to denial of service.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1637755200">- Delete chappa-WrtAcc.patch. Under Linux, one can use the Compose
  key feature. (And for Windows, the putty client can provide an
  equivalent Compose key feature.)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1647345600">- Update to release 2.25.1
  * In the past, Alpine did not recognize images embedded in an
    HTML file, so now it does and a link to open them is given.
  * Support for code_verifier and code_challenge when generating
    a refresh token and access token in Gmail and Outlook using
    the S256 method and plain method.
  * Alpine is modified to not to attempt to continue a draft
    message if the draft folder is empty. (Some servers do not
    allow the Drafts folder to be removed, even when it is
    empty.)
  * Improvements to the screen that allows a user to select the
    client-id when a user attempts to login to a server and more
    than one client-id is available for that server.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654862400">- Update to release 2.26
  * Alpine is built with password file support by default. If
    Alpine is built with SMIME support and the password file does
    not exist, then Alpine will create it by default and encrypt
    it.
  * In the past, Alpine did not recognize images embedded in an
    HTML file, so now it does and a link to open them is given.
    Additionally, Alpine did not pass these images to an external
    browser for display using the external command; it does so now.
  * Support for code_verifier and code_challenge when generating
    a refresh token and access token in Gmail and Outlook using
    the S256 method and plain method.
  * Changed the redirect_uri scheme for Gmail, as Google is
    deprecating the use of oob. Changed to http://localhost.
    Users are supposed to enter the URL they see in their browser
    in place of the code.
  * Added support to the LDAP attribute "userCertificate";
  * If new mail has arrived when a user is closing a mailbox,
    Alpine will also announce how many new messages have arrived.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1662638400">- Disable parallel build, fails to produce a result</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1716292800">- boo#1224533: Add alpine-qsort.patch to fix build with gcc 14.</changelog>
</package>
<package pkgid="9b9cc4a8667e355b7176eb64a147ba04b4cb1d4d4f1c0552a27466ff4a5cb7d0258953abb6b795af5169f2e1702e63b90dfdb8d170f5fe60c3facb9fc4921ee2" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
</package>
<package pkgid="edaa7261e487e9f2ad56be88ad58fad2606d4cb2f974d8d37701bf2d2858a3c107e45e4e64ffba9cd402320e1a80840c90c4fe238836c3ccf0368f7e6baaea83" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.3.1"/>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1782388800">- Fix double-free vulnerability in parse_def()
  (CVE-2026-56109, bsc#1268853):
  0001-conf-add-missing-return-value-check-in-parse_def.patch</changelog>
</package>
<package pkgid="180114b62a9c47f558aacfdcdb6e61ca9bc689d9030bff8681ce917c7814db91e5e2df2fe31c0dbcb97e0ad1077620fca3d12667b4e26590461ff62971711466" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
</package>
<package pkgid="bac973f7a5af016767ac66b4dd73857cc7756fc70db2e3869555c95428716fa3eb4e84cb947b330f7a0d6e011fff715aefcc7d20c53dc30f81e22f6db864785e" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.3.1"/>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1782388800">- Fix double-free vulnerability in parse_def()
  (CVE-2026-56109, bsc#1268853):
  0001-conf-add-missing-return-value-check-in-parse_def.patch</changelog>
</package>
<package pkgid="5e9cd9e13e42396066a41d3b46d7cbeb6ecd689450448624756821b4aa5fb3b69af5210a2da9c3613101f118a4cd1c40bb2680ed901083d3fa66674703729956" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.3.1"/>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1782388800">- Fix double-free vulnerability in parse_def()
  (CVE-2026-56109, bsc#1268853):
  0001-conf-add-missing-return-value-check-in-parse_def.patch</changelog>
</package>
<package pkgid="a64051a70d6473c283607583cbe1dce77cc4737fe6e9cc383c5e9945d175e4d9c884a4b2c6363201daa61d6ff383c0926fa9c1e69ec0cda5ed0f94b63c884c4f" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
</package>
<package pkgid="b08aa8402424c11d3f34e37bd921c7966a40ea4de1f365d3657964e608749cc83a0762728b8adbed559d3e4d88df42f1a63870e33c0420dac138c9462b011fe0" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.2.14" rel="160000.3.1"/>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1782388800">- Fix double-free vulnerability in parse_def()
  (CVE-2026-56109, bsc#1268853):
  0001-conf-add-missing-return-value-check-in-parse_def.patch</changelog>
</package>
<package pkgid="54f1eddc831f71cdbb4a0e11681ea98ce741a06e2d7751430f32c1a899254a3ef0ec28e74fdf6d9a453cfc43bd9f89586d2c860d9920be3bf7e80e4d0099fbcf" name="alsa-firmware" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="160000.2.2"/>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
  <changelog author="tiwai@suse.de" date="1573819200">- Update to alsa-firmare 1.2.1:
  * Change FSF address (Franklin Street)
  * Fix up aica firmware licensing
  * Add new firmware for Creative CA0132 HD-Audio Codec</changelog>
  <changelog author="tiwai@suse.de" date="1579003200">- Comment out superfluous buildreq automake
- Run fdupes for reducing the duplications
- Remove conflicting CA0132 files against kernel-firmware
- Add supplements for the automatic installation
- Install license-related files into licensesdir
- Drop the support for old distros (&lt;1200), drop old udev rules</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.de" date="1603281600">- Update to alsa-firmware 1.2.4:
  rework in auto-tools and Makefiles
  See details in
    https://alsa-project.org/wiki/Changes_v1.2.3.2_v1.2.4</changelog>
  <changelog author="tiwai@suse.de" date="1606392000">- Fix build with older distros without %_firmwaredir</changelog>
  <changelog author="dmueller@suse.com" date="1650974400">- refresh spec file
- add gpg validation, use https</changelog>
</package>
<package pkgid="415eff61eb4c43c3cd0251e0a328059909ff53ed4cc74199b244c75d8876fa1df216d97140675dd8a5ac332a588013f06e351e243b51a58e536a1d79bf1c7eac" name="alsa-oss" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="bp160.1.12"/>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-oss 1.0.28:
  All pervious fix patches are obsoleted:
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1522843200">- Update to alsa-oss 1.1.6:
  * Change FSF address (Franklin Street)
- Use %license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1522843201">- Remove old kludges
- Run spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- remove-libio.patch: don't use obsolete &lt;libio.h&gt;</changelog>
  <changelog author="tiwai@suse.de" date="1546948800">- Update to alsa-oss 1.1.8 (bsc#1181571):
  Fix the build with the recent glibc
- Remove obsoleted patch:
  remove-libio.patch:</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Avoid repetition of name in summary. Update description.</changelog>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Use https for URL and SourceURL</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add tarball signature and keyring</changelog>
</package>
<package pkgid="98f58a0eb5c70baf964aaede27b1c110a3d040717b05a841c5253240a0a5b38b3883262fe87c0e322ad5945ba17fc793e4b48db4e9e8a6648ef8b8d3ae3ac75a" name="alsa-oss-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="bp160.1.12"/>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-oss 1.0.28:
  All pervious fix patches are obsoleted:
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1522843200">- Update to alsa-oss 1.1.6:
  * Change FSF address (Franklin Street)
- Use %license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1522843201">- Remove old kludges
- Run spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- remove-libio.patch: don't use obsolete &lt;libio.h&gt;</changelog>
  <changelog author="tiwai@suse.de" date="1546948800">- Update to alsa-oss 1.1.8 (bsc#1181571):
  Fix the build with the recent glibc
- Remove obsoleted patch:
  remove-libio.patch:</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Avoid repetition of name in summary. Update description.</changelog>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Use https for URL and SourceURL</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add tarball signature and keyring</changelog>
</package>
<package pkgid="1847c5b1f54196572dd029f3cc2bb77b2b68a3a19ea2484e1c08d241e77fa01a5fbdb96e4fdb3144394f0fd4d57dcbe395fb945c1141dcaffff500d4de362515" name="alsa-plugins" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="cd9c22bbea11cbbf0b447aa4f3947ed082c77fa2944a5e0bb3921b4fe6814232a7d10746ee19b9d47150b77137d86c374b398eff66bee37fb6b7d3dbaef5c394" name="alsa-plugins-a52" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="e80752b120664d42e806a072193541e000ec2004bf3466576bc9d09b87bb3a3a7928b1c2036326d4af8e681b8ff70736e3849f11fe2fa0e029dad2a027c53c5d" name="alsa-plugins-aaf" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="0a3ffc802aa15a3344f0eb3f6d5f1aefe61bfd1041857a3ce7e80ec1f4cf9667b6f13c575f134f1425c4d1bfcdeeb5e3b285b3bece7bd0d01a60a08744261770" name="alsa-plugins-arcam-av" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="e82dcf092532050d03d406970905b4d8c13815a7110f8731a7026104b3ca107c03a8fe751086d5f54c311f70db6333821a9c295a4c0b919f16c4896473cc16ff" name="alsa-plugins-jack" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="541380b1105990ab88877bf26aa816756262811ac4322f27087381070c01ef746286eb0e4f6c60bd112bc237500203b1cb56f0840f0011f01fe37d7fedb9cee7" name="alsa-plugins-lavrate" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="6fd28697b9f6d1d6d0be1ce2ee01f09e5b303332eebaacd6b82a4a9a8648ce37513f53eeefbe18878852441bf22d67f197474e43f01b71d6fb170586c6059e2c" name="alsa-plugins-maemo" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="286d508a85d4c2617a86331d98a5fa2ece06a7ed686c56c1b17f8c6db3efe02af17da3de9c27bebe8a1a31c3299394417a850eb327506a24f18a974f8f7fcaa0" name="alsa-plugins-oss" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="365f1b3bf39d16ed7afaf670db1de1a75227d72237f89059400622b831d17bec4a970d42f87976f38681e2fe912dd2683ffe05d4f288f0ec5a721cc090576b63" name="alsa-plugins-pulse" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="6287613fb4b60935cb360d2762a70e37996d9626d4ff2c7c8dec02ff362509bc7f448e668841388360b692d85848702170f269e6d960d60c7888bb7396585b8b" name="alsa-plugins-samplerate" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="f93100f2b5625ac928ac6b9fdb4e3d52681604cc2aabb5b13a6db4d63ab64227d7341289f82715554fb26d5280d2db0435455ecf1bee268266479a092a0693a0" name="alsa-plugins-speex" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="fc875fc07395a75d5522cc6b2a7c8dd345544c3fe535abda00591fa024513e2713702e3b411ad446f0be976db633b6cfa358f398ba3cb3a7aed348df0d0b0577" name="alsa-plugins-speexrate" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="1fd78468de0cfc673c2c73eb1890afdc3a7fc8f7a598eb35432f93202125ee35adf95f720790f98d9e37e0d13df75fbf63dfed1204f2b17511b8bf6b8f3590b4" name="alsa-plugins-upmix" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="716b72293fa3f1eb36384312bd31e0a1c2d1cccf9adf2b873189a41248975514753afe200caa711b8670291d025245b350e849d2d8bd7481e65e37c2f54712a6" name="alsa-plugins-usb-stream" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="9ce106c725b3442c81fc9bb37fbf2c901b1286b1f11b192099b56d34e580fed3f94429fc6723e11187ea9f99aa03855ee873fbcbb0b6c462cfac83c5e01d51c2" name="alsa-plugins-vdownmix" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.13"/>
  <changelog author="tiwai@suse.de" date="1584100800">- Update to alsa-plugins 1.2.2:
  * upmix plugin code refactoring, m4 file update</changelog>
  <changelog author="tiwai@suse.de" date="1588766400">- Split plugins in alsa-plugin package to each subpackage
  (boo#1171276):
  now alsa-plugins is a meta package that requires only the
  fundamental speexrate and upmix plugins
- Add documentation for aaf plugin
- Minor spec cleanups</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync: jsc#SLE-11987
  no functional changes at all</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to 1.2.5
  * Support alsa 1.2.5
  * Fixed A52 Output plugin
  * upmix: complete generalizing format
  * jack: add option to allow non-jack-aligned period size
  * oss: fix the config (port -&gt; device)
  * pulse: pcm - handle reading pulse stream hole
  * usb_stream: use snd_config_get_card() to decode the card number</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  Fixes for a52 plugin, jack, rate-lav.  For details, see URL:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-plugins
- Add *.sig file for the source tarball</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1655726400">- Update to version 1.2.7.1:
  jack plugin fix/enhancement</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1658145600">- Fix dependency of pulse plugin; now pulseaudio-daemon is required
  (bsc#1201409)</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add keyring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670673600">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as rate-lav was ported to use the latter.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1718280000">- Update to alsa-plugins 1.2.12:
  * add support for FFMPEG 7.0
  * various compile fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-plugins</changelog>
</package>
<package pkgid="bf69bc354398095a8d6736f8336c43e63d435cc1a9eb5caf418c5a7b2d5eb9079d774a4129b19314e0710c57bae39152d3e3c3b314d60c2cd8363ed91cceacdc" name="alsa-topology-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1694260800">- Upstream fix backport:
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
- Upstream fix for PCM segfault regression (bsc#1215167):
  0003-pcm-Fix-segfault-with-32bit-libs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
</package>
<package pkgid="edeb3eee829f12cb2317f6bc0505312c7127fa5fbdfbf047de341ff1000fcf943e9686d8b6f26deba7e200e192d8f692aeb3616fc003c213efc0a1b0a9261f1d" name="alsa-topology-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.3.1"/>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1782388800">- Fix double-free vulnerability in parse_def()
  (CVE-2026-56109, bsc#1268853):
  0001-conf-add-missing-return-value-check-in-parse_def.patch</changelog>
</package>
<package pkgid="2411245ff878bd2c79e68f05f10962ea0e815420871a835bd4a7242b95ac03634ac19432f17022d58cad2bac9978d0eddf4480219da09caee264d0374ce24ce0" name="alsa-topology-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.3.1"/>
  <changelog author="tiwai@suse.com" date="1695038400">- More upstream fix for incosistent compile conditions:
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch</changelog>
  <changelog author="tiwai@suse.com" date="1696939200">- Fix symbol version:
  0005-seq-Fix-typos-in-symbol-version-definitions.patch</changelog>
  <changelog author="tiwai@suse.com" date="1699358400">- Backport upstream fixes for sequencer and mixer:
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch
- Clean up spec file</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Updated to alsa-lib 1.2.11:
  * auto-tools fixes, versioned symbol fixes
  * support dB TLVs for single controls
  * various PCM updates, including subformat extensions
  * UMP and sequencer API fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-lib
- Dropped obsoleted patches:
  0001-control.h-Fix-ump-header-file-detection.patch
  0002-global.h-move-__STRING-macro-outside-PIC-ifdef-block.patch
  0003-pcm-Fix-segfault-with-32bit-libs.patch
  0004-reshuffle-included-files-to-include-config.h-as-firs.patch
  0005-seq-Fix-typos-in-symbol-version-definitions.patch
  0006-seq-Fix-invalid-sanity-check-in-snd_seq_set_input_bu.patch
  0007-mixer-simple-Support-dB-TLVs-for-CTL_SINGLE-controls.patch
  0008-seq-Clear-UMP-event-flag-for-legacy-apps.patch
  0009-seq-Simplify-snd_seq_extract_output.patch
  0010-seq-Check-protocol-compatibility-with-the-current-ve.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-lib 1.2.12:
  * pcm: plug support for iec958 subframe samples
  * pcm: ladspa - Skip missing ladspa directories
  * topology: correct version script path
  * ucm: define and describe Syntax 7
  * async handler cleanup fix
  * conf updates
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-lib</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-lib 1.2.13:
  * static build fixes
  * documentation update for control remap API
  * PCM dmix fixes
  * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync()
  * ump: Add a function to provide the packet word length of a UMP type
  * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions
  * seq: Add API functions to set different tempo base values
  * seq: Add API helper functions for creating UMP Endpoint and Blocks
  * documentation fixes for UMP and sequencer API
  * test: Add an example programs for UMP
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib
- Conditionally take libtool</changelog>
  <changelog author="tiwai@suse.com" date="1731672000">- Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732449600">- Fix header inclusions for implicit dependnecies (bsc#1233682)
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-lib 1.2.14:
  * Disable and delete alsalisp code
  * include: prefer alsa/asoundlib.h for apps, dependency cleanups
  * seq: Define new events for UMP EP/FB change notifications
  * control: remap improvements
  * pcm: tstamp mode fixes
  * rawmidi: ump fixes and tied device flag extensions
  * seq: fix UMP handling and other minot fixes
  * ucm: add sys-card substitution, etc
  * test/playmidi1: fix compilation caused by conflict between midifile.h and ump_msg.h
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-lib
- Drop obsoleted patches:
  0001-src-Versions.in.in-Update-_tempo_base-name.patch
  0002-configure-Make-sequencer-dependent-on-rawmidi.patch
  0003-seq-include-UMP-headers.patch</changelog>
  <changelog author="tiwai@suse.com" date="1782388800">- Fix double-free vulnerability in parse_def()
  (CVE-2026-56109, bsc#1268853):
  0001-conf-add-missing-return-value-check-in-parse_def.patch</changelog>
</package>
<package pkgid="5e78a27b386a6dcd6831a2621c2cc90a092b285305c303e43e6846ea6899874b52c095423897b32d1c643b7bec425f4c8c934bd7ad838177dbe8871c49f100d5" name="alsa-ucm-conf" arch="noarch">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1:
  updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-ucm-conf
- Drop obsoleted patches:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2:
    updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7.1_v1.2.7.2#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  lots of new profiles for USB-audio, SOF and others:
  https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  various profile updates for USB-audio, SOF and others.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra
    es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL,
    ACP63, sof-hda-dsp, etc
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf
- Upstream regression fix:
  0001-SplitPCM-Device-argument-may-not-be-set.patch</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Update to version 1.2.11:
  * Qualcomm, Mediatek, SOF soundwire, and various USB-audio profiles
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-ucm-conf
- Drop obsoleted patch:
  0001-SplitPCM-Device-argument-may-not-be-set.patch</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to version 1.2.12:
  * Various updates for codecs, soundwire and SOF devices
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to version 1.2.13:
  * Updates for USB-audio, Mediatek, Qualcomm, ACP, SoundWire,
    wsa884x, wcd938x, Intel AVS, SOF HDA, etc
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1731499200">- Backport upstream fixes for sof-hda-dsp:
  0001-UCM2-Intel-sof-hda-dsp-Fix-handling-of-empty-sys_ven.patch
  0002-sof-hda-dsp-Fix-the-case-where-sysfs-dmi-product_nam.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-ucm-conf 1.2.14:
  * Updates for USB-audio, Qualcomm, sof-soundwire, HD-audio,
    MediaTek, Torradex, NXP, sof-hda, etc.
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-ucm-conf
- Dropped obsoleted patches:
  0001-UCM2-Intel-sof-hda-dsp-Fix-handling-of-empty-sys_ven.patch
  0002-sof-hda-dsp-Fix-the-case-where-sysfs-dmi-product_nam.patch</changelog>
</package>
<package pkgid="e03e62efd851843814754095c8db03dbcd99acd5025d65c6eaf8ab504cbb5afbd69917aaf2f56d75caedaf3b980da7d664dd3f62cc2fa6daebb4e8d092689519" name="alsa-utils" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to alsa-utils 1.2.10 (jsc#PED-6566):
  * MIDI 2.0 / UMP support for sequencer programs
  * nhlt: add nhlt-dmic-info utility
  * Build fixes and cleanups
  * speaker-test: allow large buffer and period time setup - up to 100 seconds
  * various topology fixes
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-utils
- Fix the builds with old gcc:
  0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch
  0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch
  0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch</changelog>
  <changelog author="tiwai@suse.com" date="1704715200">- Backport upstream fixes:
  buffer overflow fixes in aplay, segfault in aplaymidi, etc:
  0008-topology-include-locale.h.patch
  0009-nhlt-dmic-info.c-include-sys-types.h.patch
  0010-topology-pre-processor-Add-support-for-enum-controls.patch
  0011-configure.ac-fix-UMP-support-detection.patch
  0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch
  0013-topology-add-include-for-ENABLE_NLS-on-musl.patch
  0014-nhlt-use-stdint.h-types.patch
  0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch
  0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch
  0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch
  0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch
  0019-alsactl-fix-potential-buffer-overwrite.patch
  0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch
  0021-misc-fix-incorrect-usages-of-strerror.patch
  0022-aplay-Add-option-for-specifying-subformat.patch
  0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch
  0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch
  0025-aplay-enable-timestamps-by-default.patch
  0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch
  0027-aplaymidi-Set-event-completely-for-tempo-event.patch</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Update to alsa-utils 1.2.11:
  * alsactl buffer overflow fix
  * alsatplg updates, NHLT ACPI parser updates
  * use smaller periods for speaker-test
  * add bandwidth-limited pink noise for speaker-test
  * aplay updates, including subformat extensions
  * compile warning fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-utils
- Drop obsoleted patches:
  0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch
  0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch
  0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch
  0008-topology-include-locale.h.patch
  0009-nhlt-dmic-info.c-include-sys-types.h.patch
  0010-topology-pre-processor-Add-support-for-enum-controls.patch
  0011-configure.ac-fix-UMP-support-detection.patch
  0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch
  0013-topology-add-include-for-ENABLE_NLS-on-musl.patch
  0014-nhlt-use-stdint.h-types.patch
  0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch
  0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch
  0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch
  0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch
  0019-alsactl-fix-potential-buffer-overwrite.patch
  0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch
  0021-misc-fix-incorrect-usages-of-strerror.patch
  0022-aplay-Add-option-for-specifying-subformat.patch
  0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch
  0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch
  0025-aplay-enable-timestamps-by-default.patch
  0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch
  0027-aplaymidi-Set-event-completely-for-tempo-event.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1717070400">- Require tree which is used by alsa-info.sh (bsc#1225665)</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-utils 1.2.12:
  * alsactl: NULL pointer fix
  * alsa-info.sh: log SoundWire devices reported in ACPI
  * alsamixer: fix calculation in set_normalized_volume (overflow)
  * topology: nhlt fixes
  * aplay: fix S24_LE wav header
  * aseqdump: Add dump for UMP Utility and System messages
  * Addition of aseqsend
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-utils</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-utils 1.2.13:
  * alsactl: add support for AMD ACP digital microphone
  * aplay: Print '=== PAUSE ===' only if it is supported
  * aplaymidi/arecordmidi: Allow to pass 0 to -u option, too
  * new aplaymidi2/arecordmidi2 for MIDI v2.0
  * aseqdump: improved UMP supports
  * various topology updates
  * aseqsend: improvement and UMP supports
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-utils</changelog>
  <changelog author="tiwai@suse.com" date="1731585600">- Fix alsactl restore error (bsc#1233353):
  0001-alsactl-90-alsa-restore.rules-fix-alsa_restore_go-st.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732104000">- Yet another fix for alsactl for AMD acp dmic:
  0002-alsactl-90-alsa-restore.rules-fix-AMD-acp-pdm-mach-l.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-utils 1.2.14:
  * alsactl: info updates
  * Man page fixes
  * alsactl: AMD acp-pdm-mach link
  * alsa-info.sh: Add alsa-ucm package to package filter
  * Topology: NHLT: Intel: Improve error message for DMIC enable conflict
  * Topology: NHLT: Intel: Fix mono DMIC configure for MTL platform
  * Topology: NHLT: Intel: Fix DMA slots config in SSP blob
  * amixer: fix unknown TVL sequence print
  * arecordmidi2: fix unitialization variable error in read_ump_raw()
  * aseqdump: Fix typos in messages
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-utils
- Drop obsoleted patches:
  0001-alsactl-90-alsa-restore.rules-fix-alsa_restore_go-st.patch
  0002-alsactl-90-alsa-restore.rules-fix-AMD-acp-pdm-mach-l.patch</changelog>
</package>
<package pkgid="bf886740d2f4a2bb5af2f9c6e3e4dd8629d39889625abff0a2a4ac697f5a228f66c289ed08aa0f07cc9c9bddf9c875dc90c11de677765fc90dd1175868b16647" name="alsabat" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="160000.2.2"/>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to alsa-utils 1.2.10 (jsc#PED-6566):
  * MIDI 2.0 / UMP support for sequencer programs
  * nhlt: add nhlt-dmic-info utility
  * Build fixes and cleanups
  * speaker-test: allow large buffer and period time setup - up to 100 seconds
  * various topology fixes
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-utils
- Fix the builds with old gcc:
  0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch
  0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch
  0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch</changelog>
  <changelog author="tiwai@suse.com" date="1704715200">- Backport upstream fixes:
  buffer overflow fixes in aplay, segfault in aplaymidi, etc:
  0008-topology-include-locale.h.patch
  0009-nhlt-dmic-info.c-include-sys-types.h.patch
  0010-topology-pre-processor-Add-support-for-enum-controls.patch
  0011-configure.ac-fix-UMP-support-detection.patch
  0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch
  0013-topology-add-include-for-ENABLE_NLS-on-musl.patch
  0014-nhlt-use-stdint.h-types.patch
  0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch
  0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch
  0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch
  0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch
  0019-alsactl-fix-potential-buffer-overwrite.patch
  0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch
  0021-misc-fix-incorrect-usages-of-strerror.patch
  0022-aplay-Add-option-for-specifying-subformat.patch
  0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch
  0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch
  0025-aplay-enable-timestamps-by-default.patch
  0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch
  0027-aplaymidi-Set-event-completely-for-tempo-event.patch</changelog>
  <changelog author="tiwai@suse.com" date="1706875200">- Update to alsa-utils 1.2.11:
  * alsactl buffer overflow fix
  * alsatplg updates, NHLT ACPI parser updates
  * use smaller periods for speaker-test
  * add bandwidth-limited pink noise for speaker-test
  * aplay updates, including subformat extensions
  * compile warning fixes
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-utils
- Drop obsoleted patches:
  0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch
  0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch
  0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch
  0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch
  0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch
  0008-topology-include-locale.h.patch
  0009-nhlt-dmic-info.c-include-sys-types.h.patch
  0010-topology-pre-processor-Add-support-for-enum-controls.patch
  0011-configure.ac-fix-UMP-support-detection.patch
  0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch
  0013-topology-add-include-for-ENABLE_NLS-on-musl.patch
  0014-nhlt-use-stdint.h-types.patch
  0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch
  0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch
  0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch
  0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch
  0019-alsactl-fix-potential-buffer-overwrite.patch
  0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch
  0021-misc-fix-incorrect-usages-of-strerror.patch
  0022-aplay-Add-option-for-specifying-subformat.patch
  0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch
  0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch
  0025-aplay-enable-timestamps-by-default.patch
  0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch
  0027-aplaymidi-Set-event-completely-for-tempo-event.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1717070400">- Require tree which is used by alsa-info.sh (bsc#1225665)</changelog>
  <changelog author="tiwai@suse.com" date="1718280000">- Update to alsa-utils 1.2.12:
  * alsactl: NULL pointer fix
  * alsa-info.sh: log SoundWire devices reported in ACPI
  * alsamixer: fix calculation in set_normalized_volume (overflow)
  * topology: nhlt fixes
  * aplay: fix S24_LE wav header
  * aseqdump: Add dump for UMP Utility and System messages
  * Addition of aseqsend
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.11_v1.2.12#alsa-utils</changelog>
  <changelog author="tiwai@suse.com" date="1731412800">- Update to alsa-utils 1.2.13:
  * alsactl: add support for AMD ACP digital microphone
  * aplay: Print '=== PAUSE ===' only if it is supported
  * aplaymidi/arecordmidi: Allow to pass 0 to -u option, too
  * new aplaymidi2/arecordmidi2 for MIDI v2.0
  * aseqdump: improved UMP supports
  * various topology updates
  * aseqsend: improvement and UMP supports
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-utils</changelog>
  <changelog author="tiwai@suse.com" date="1731585600">- Fix alsactl restore error (bsc#1233353):
  0001-alsactl-90-alsa-restore.rules-fix-alsa_restore_go-st.patch</changelog>
  <changelog author="tiwai@suse.com" date="1732104000">- Yet another fix for alsactl for AMD acp dmic:
  0002-alsactl-90-alsa-restore.rules-fix-AMD-acp-pdm-mach-l.patch</changelog>
  <changelog author="tiwai@suse.com" date="1744718400">- Update to alsa-utils 1.2.14:
  * alsactl: info updates
  * Man page fixes
  * alsactl: AMD acp-pdm-mach link
  * alsa-info.sh: Add alsa-ucm package to package filter
  * Topology: NHLT: Intel: Improve error message for DMIC enable conflict
  * Topology: NHLT: Intel: Fix mono DMIC configure for MTL platform
  * Topology: NHLT: Intel: Fix DMA slots config in SSP blob
  * amixer: fix unknown TVL sequence print
  * arecordmidi2: fix unitialization variable error in read_ump_raw()
  * aseqdump: Fix typos in messages
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.13_v1.2.14#alsa-utils
- Drop obsoleted patches:
  0001-alsactl-90-alsa-restore.rules-fix-alsa_restore_go-st.patch
  0002-alsactl-90-alsa-restore.rules-fix-AMD-acp-pdm-mach-l.patch</changelog>
</package>
<package pkgid="a2f8a7afafb2aa254a12012004593a64b30e89aace542111529bb77a957c590692dfcbdcd0857576ac359afef7195da445654b69c63ada6356aa80fb1e461244" name="alts" arch="x86_64">
  <version epoch="0" ver="1.2+30.a5431e9" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1623240000">- Version v1.0.0:
  * Prefix symbols with libalts_ to avoid symbol clashes
  * Add symbol visibility and versioning
  * Decamelize public symbols and rename</changelog>
  <changelog author="adam.majer@suse.de" date="1624276800">- Update to version v1.1:
  * docs: Add broken manpage
  * tests: unit tests configs
  * tests: fix memory leak during tests
  * list_binaries: initialize pointer that is later used in free
  * libalts_exec_default() sets errno on not found</changelog>
  <changelog author="adam.majer@suse.de" date="1631534400">- Update to version v1.2:
  * Add config option=KeepArgv0 to keep original argument during
    exec() call</changelog>
  <changelog author="jengelh@inai.de" date="1631620800">- Use noun phrase for the summary; fix grammar in description.</changelog>
  <changelog author="adam.majer@suse.de" date="1631620801">- Update to version v1.2+3.b848aad:
  * tests: fix array overrun in unit tests</changelog>
  <changelog author="dmueller@suse.com" date="1668427200">- switch to a manual service rather than a buildtime tar service
  which introduces a bootstrap cycle between python and tar_scm</changelog>
  <changelog author="bogdan.lezhepekov@suse.com" date="1682424000">- Update to version v1.2+30.a5431e9: (bsc#1191692)
  * Change license to less restrictive Apache 2.0
  * doc: fixing a few typos
  * Adds option to display target executable only
  * Makefiles and cmake: rework for reproducible build
  * Improve Makefile
  * libalts_exec_default: fix memory leak on error condition
  * libalts_write_binary_configured_priority_to_file: fix memory leak
  * saveConfigData(): fix file descriptor leak in while loop error case
  * loadConfigData(): use goto exit label to prevent file descriptor leaks
  * libalts_load_available_binaries: use goto err: label to fix leaks
  * loadAlternativeForBinary: goto-assisted error handling to avoid leaks
  * checkGroupConsistencies(): explicitly ignore unused `flags`
  * lib: refactor error handling of findAltConfig()
  * utils: fix possible memory leaks on error conditions
  * docs: fix some typos and grammar
  * Update README.md
  * lib: generally open[at] with O_CLOEXEC
  * Fix logic in options parser
  * Add basic Makefile for buidling without cmake
  * Added description for options=KeepArgv0
  * cmake: Express the dependency on CUnit correctly for building tests
  * cmake: Build and install CMake and PkgConfig files
  * cmake: Fix setup of shared linker flags
  * config.h: Fix the version to match the current latest tag</changelog>
</package>
<package pkgid="dbda10fc16402791ad6c6b6dafbc77468273a4f19c6d99d3e8f262384853091b95473704c94ef98ecfa4582b483e47592796ccc8f2e9d4f5ef055ce9014df938" name="amarok" arch="x86_64">
  <version epoch="0" ver="3.3.0" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1710417600">- Require a phonon-vlc backend that was built with Qt5</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714478400">- Update to 3.0.0
  * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/
- Drop patch, merged upstream:
  * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1717329600">- Update to 3.0.1
  * Added an option to copy image to clipboard in Wikipedia applet,
    and a clickable notification if a non-Wikipedia link was clicked.
  * Added an option to select if track's artist is shown for
    entries under various artists / different album artist in
    context browser (kde#276039, kde#248101)
  * Indicate which search option is active in Wikipedia applet
    (kde#332010)
  * Amarok now depends on KDE Frameworks 5.78.
  * Improve strings in user interface (kde#343896, kde#234854)
  * Reduce CPU usage by minimized/hidden analyzer (kde#390063)
    and other components.
  * Various tag match bias, APG and collection filtering related
    fixes (kde#375565, kde#406751, kde#435810, kde#382456)
  * Ignore any infinite values when reading replaygain tags
    (kde#486084)
  * Avoid volume getting set to 0 when phonon-vlc playback is
    stopped (kde#442319)
  * Playlist duplicate track deletion fixes (kde#313791)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1722859200">- Update to 3.1.0
  https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/
  New features:
  * Last.fm plugin updated to use token-based authentication
    (kde#414826, kde#327547)
  * Reintroducing Last.fm Similar Artists context applet
  * Remember the previous destination provider when saving
    playlist (kde#216528)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1727611200">- Update to 3.1.1
  * Most of the context view QML items ported from QtControls 1
    to QtControls 2
  * Default to no fadeout on pause and stop (kde#491603)
  * Actually show the file browser panel toolbar
  * Fix track editor autocompletions (kde#491520)
  * Ensure home icon is shown in browser breadcrumb
    widgets (kde#491354)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 3.2.2
  * Building an experimental Qt6/KF6 Amarok version is now possible
  * Allow filtering collection by lack of tag / empty tag (kde#325317)
  * Amarok now depends on KDE Frameworks 5.108
  * Show current track context applet by default
  * Probably fix occasional crashes when filtering collection (kde#492406)
  * Probably fix occasional crashes when clearing CompondProgressBars
  * Fix context view applets on Qt6/KF6
  * Fix Ampache login on server version 5.0.0 and later (kde#496581)
  * Fix crash if Ampache login is redirected (kde#396590)
- Rebase disable-web-plugins-by-default.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.2.1
  * Support gpodder and lastfm on Qt6 builds
  * Limit maximum current track font size more when context view
    is narrow
  * Fix displaying settings button for Internet services
  * Enable Wikipedia context applet on Qt6 builds
  * Don't crash when copying multiple files to MTP device (kde#467616)
  * Avoid unnecessarily flooding MTP devices with storage
    capacity queries
  * Compilation fixes for various compiler + Qt6 version
    combinations</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739620800">- Update to 3.2.2
  * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/
  * Try to preserve collection browser order when adding tracks to playlist (kde#180404)
  * Fix DAAP collection connections, browsing and playing (kde#498654)
  * Fix first line of lyrics.ovh lyrics missing (kde#493882)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751976000">- Update to 3.3.0
  https://blogs.kde.org/2025/07/08/amarok-3.3-far-above-the-clouds-released/
  * Amarok now uses Qt 6 and KDE Frameworks 6
  * Audio engine has been reworked to use GStreamer instead of Phonon
  * Update database character set to allow full utf-8 values (kde#462268)
  * Apply default pre-gain when ReplayGain is active and use
    fallback value if no ReplayGain data is available for a track
  * Clear out some of the now-discontinued Last.fm radio
    functionalities and partially replace by opening relevant
    Last.fm pages
  * Remove TagLib extras support (RealMedia and Audible files)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1752062400">- Recommend installing gstreamer-plugins-good for mp3 decoding</changelog>
</package>
<package pkgid="13ea0c718d6b1672ca953e53ed3333bc4f421d090f43c0c72a9f6f9a9ca4f6d2cf658a4cd4c38bea843899e435d165501fbe30eb400a9b349061af24ef7a31e5" name="amarok" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="bp160.1.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714478400">- Update to 3.0.0
  * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/
- Drop patch, merged upstream:
  * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1717329600">- Update to 3.0.1
  * Added an option to copy image to clipboard in Wikipedia applet,
    and a clickable notification if a non-Wikipedia link was clicked.
  * Added an option to select if track's artist is shown for
    entries under various artists / different album artist in
    context browser (kde#276039, kde#248101)
  * Indicate which search option is active in Wikipedia applet
    (kde#332010)
  * Amarok now depends on KDE Frameworks 5.78.
  * Improve strings in user interface (kde#343896, kde#234854)
  * Reduce CPU usage by minimized/hidden analyzer (kde#390063)
    and other components.
  * Various tag match bias, APG and collection filtering related
    fixes (kde#375565, kde#406751, kde#435810, kde#382456)
  * Ignore any infinite values when reading replaygain tags
    (kde#486084)
  * Avoid volume getting set to 0 when phonon-vlc playback is
    stopped (kde#442319)
  * Playlist duplicate track deletion fixes (kde#313791)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1722859200">- Update to 3.1.0
  https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/
  New features:
  * Last.fm plugin updated to use token-based authentication
    (kde#414826, kde#327547)
  * Reintroducing Last.fm Similar Artists context applet
  * Remember the previous destination provider when saving
    playlist (kde#216528)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1727611200">- Update to 3.1.1
  * Most of the context view QML items ported from QtControls 1
    to QtControls 2
  * Default to no fadeout on pause and stop (kde#491603)
  * Actually show the file browser panel toolbar
  * Fix track editor autocompletions (kde#491520)
  * Ensure home icon is shown in browser breadcrumb
    widgets (kde#491354)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 3.2.2
  * Building an experimental Qt6/KF6 Amarok version is now possible
  * Allow filtering collection by lack of tag / empty tag (kde#325317)
  * Amarok now depends on KDE Frameworks 5.108
  * Show current track context applet by default
  * Probably fix occasional crashes when filtering collection (kde#492406)
  * Probably fix occasional crashes when clearing CompondProgressBars
  * Fix context view applets on Qt6/KF6
  * Fix Ampache login on server version 5.0.0 and later (kde#496581)
  * Fix crash if Ampache login is redirected (kde#396590)
- Rebase disable-web-plugins-by-default.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.2.1
  * Support gpodder and lastfm on Qt6 builds
  * Limit maximum current track font size more when context view
    is narrow
  * Fix displaying settings button for Internet services
  * Enable Wikipedia context applet on Qt6 builds
  * Don't crash when copying multiple files to MTP device (kde#467616)
  * Avoid unnecessarily flooding MTP devices with storage
    capacity queries
  * Compilation fixes for various compiler + Qt6 version
    combinations</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739620800">- Update to 3.2.2
  * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/
  * Try to preserve collection browser order when adding tracks to playlist (kde#180404)
  * Fix DAAP collection connections, browsing and playing (kde#498654)
  * Fix first line of lyrics.ovh lyrics missing (kde#493882)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751976000">- Update to 3.3.0
  https://blogs.kde.org/2025/07/08/amarok-3.3-far-above-the-clouds-released/
  * Amarok now uses Qt 6 and KDE Frameworks 6
  * Audio engine has been reworked to use GStreamer instead of Phonon
  * Update database character set to allow full utf-8 values (kde#462268)
  * Apply default pre-gain when ReplayGain is active and use
    fallback value if no ReplayGain data is available for a track
  * Clear out some of the now-discontinued Last.fm radio
    functionalities and partially replace by opening relevant
    Last.fm pages
  * Remove TagLib extras support (RealMedia and Audible files)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1752062400">- Recommend installing gstreamer-plugins-good for mp3 decoding</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1754740800">- Update to 3.3.1
  https://blogs.kde.org/2025/08/09/amarok-3.3.1-released/
  * Enable saving and loading script console items, autocompletion
    in script console, and re-enable some more scripting
    functionality
  * Convert the remaining main UI toolbuttons to use icons from
    theme
  * Clear out remnants of the now-discontinued MusicDNS service
  * Fix example permission grant command in database settings (kde#386004)
  * Fix equalizer gains not updating when selecting some presets (kde#463908)
  * Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
  * Fix MusicBrainz search
  * Properly start CD playback if Amarok is not already running (kde#503310)
  * Also transmit embedded cover art through MPRIS (kde#357620)
  * Don't show transcoding dialog after canceling download (kde#275840)
  * Load network information earlier to avoid crashes on startup (kde#507497)
  * Try to export as-compatible-as-possible playlist files (kde#507329)
  * Fix some random crashes during playback</changelog>
</package>
<package pkgid="c1dff385d7da4f907e5a7949d2834e8f4df66266a2805d5d892f216a347ad79c6dc69542e70ba1ac7da01f701af2a667776c8e2a873a1d4a649656863933d87a" name="amarok-doc" arch="x86_64">
  <version epoch="0" ver="3.3.0" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1710417600">- Require a phonon-vlc backend that was built with Qt5</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714478400">- Update to 3.0.0
  * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/
- Drop patch, merged upstream:
  * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1717329600">- Update to 3.0.1
  * Added an option to copy image to clipboard in Wikipedia applet,
    and a clickable notification if a non-Wikipedia link was clicked.
  * Added an option to select if track's artist is shown for
    entries under various artists / different album artist in
    context browser (kde#276039, kde#248101)
  * Indicate which search option is active in Wikipedia applet
    (kde#332010)
  * Amarok now depends on KDE Frameworks 5.78.
  * Improve strings in user interface (kde#343896, kde#234854)
  * Reduce CPU usage by minimized/hidden analyzer (kde#390063)
    and other components.
  * Various tag match bias, APG and collection filtering related
    fixes (kde#375565, kde#406751, kde#435810, kde#382456)
  * Ignore any infinite values when reading replaygain tags
    (kde#486084)
  * Avoid volume getting set to 0 when phonon-vlc playback is
    stopped (kde#442319)
  * Playlist duplicate track deletion fixes (kde#313791)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1722859200">- Update to 3.1.0
  https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/
  New features:
  * Last.fm plugin updated to use token-based authentication
    (kde#414826, kde#327547)
  * Reintroducing Last.fm Similar Artists context applet
  * Remember the previous destination provider when saving
    playlist (kde#216528)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1727611200">- Update to 3.1.1
  * Most of the context view QML items ported from QtControls 1
    to QtControls 2
  * Default to no fadeout on pause and stop (kde#491603)
  * Actually show the file browser panel toolbar
  * Fix track editor autocompletions (kde#491520)
  * Ensure home icon is shown in browser breadcrumb
    widgets (kde#491354)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 3.2.2
  * Building an experimental Qt6/KF6 Amarok version is now possible
  * Allow filtering collection by lack of tag / empty tag (kde#325317)
  * Amarok now depends on KDE Frameworks 5.108
  * Show current track context applet by default
  * Probably fix occasional crashes when filtering collection (kde#492406)
  * Probably fix occasional crashes when clearing CompondProgressBars
  * Fix context view applets on Qt6/KF6
  * Fix Ampache login on server version 5.0.0 and later (kde#496581)
  * Fix crash if Ampache login is redirected (kde#396590)
- Rebase disable-web-plugins-by-default.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.2.1
  * Support gpodder and lastfm on Qt6 builds
  * Limit maximum current track font size more when context view
    is narrow
  * Fix displaying settings button for Internet services
  * Enable Wikipedia context applet on Qt6 builds
  * Don't crash when copying multiple files to MTP device (kde#467616)
  * Avoid unnecessarily flooding MTP devices with storage
    capacity queries
  * Compilation fixes for various compiler + Qt6 version
    combinations</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739620800">- Update to 3.2.2
  * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/
  * Try to preserve collection browser order when adding tracks to playlist (kde#180404)
  * Fix DAAP collection connections, browsing and playing (kde#498654)
  * Fix first line of lyrics.ovh lyrics missing (kde#493882)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751976000">- Update to 3.3.0
  https://blogs.kde.org/2025/07/08/amarok-3.3-far-above-the-clouds-released/
  * Amarok now uses Qt 6 and KDE Frameworks 6
  * Audio engine has been reworked to use GStreamer instead of Phonon
  * Update database character set to allow full utf-8 values (kde#462268)
  * Apply default pre-gain when ReplayGain is active and use
    fallback value if no ReplayGain data is available for a track
  * Clear out some of the now-discontinued Last.fm radio
    functionalities and partially replace by opening relevant
    Last.fm pages
  * Remove TagLib extras support (RealMedia and Audible files)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1752062400">- Recommend installing gstreamer-plugins-good for mp3 decoding</changelog>
</package>
<package pkgid="956221b9057b72ad487a4ef8fccb38500fdd3ff7817cae05ea25535d38126946330122268e0a995bf8c13acc6d0bc517a6dbf524b4260c057103cfa725d38c83" name="amarok-doc" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="bp160.1.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714478400">- Update to 3.0.0
  * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/
- Drop patch, merged upstream:
  * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1717329600">- Update to 3.0.1
  * Added an option to copy image to clipboard in Wikipedia applet,
    and a clickable notification if a non-Wikipedia link was clicked.
  * Added an option to select if track's artist is shown for
    entries under various artists / different album artist in
    context browser (kde#276039, kde#248101)
  * Indicate which search option is active in Wikipedia applet
    (kde#332010)
  * Amarok now depends on KDE Frameworks 5.78.
  * Improve strings in user interface (kde#343896, kde#234854)
  * Reduce CPU usage by minimized/hidden analyzer (kde#390063)
    and other components.
  * Various tag match bias, APG and collection filtering related
    fixes (kde#375565, kde#406751, kde#435810, kde#382456)
  * Ignore any infinite values when reading replaygain tags
    (kde#486084)
  * Avoid volume getting set to 0 when phonon-vlc playback is
    stopped (kde#442319)
  * Playlist duplicate track deletion fixes (kde#313791)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1722859200">- Update to 3.1.0
  https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/
  New features:
  * Last.fm plugin updated to use token-based authentication
    (kde#414826, kde#327547)
  * Reintroducing Last.fm Similar Artists context applet
  * Remember the previous destination provider when saving
    playlist (kde#216528)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1727611200">- Update to 3.1.1
  * Most of the context view QML items ported from QtControls 1
    to QtControls 2
  * Default to no fadeout on pause and stop (kde#491603)
  * Actually show the file browser panel toolbar
  * Fix track editor autocompletions (kde#491520)
  * Ensure home icon is shown in browser breadcrumb
    widgets (kde#491354)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 3.2.2
  * Building an experimental Qt6/KF6 Amarok version is now possible
  * Allow filtering collection by lack of tag / empty tag (kde#325317)
  * Amarok now depends on KDE Frameworks 5.108
  * Show current track context applet by default
  * Probably fix occasional crashes when filtering collection (kde#492406)
  * Probably fix occasional crashes when clearing CompondProgressBars
  * Fix context view applets on Qt6/KF6
  * Fix Ampache login on server version 5.0.0 and later (kde#496581)
  * Fix crash if Ampache login is redirected (kde#396590)
- Rebase disable-web-plugins-by-default.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.2.1
  * Support gpodder and lastfm on Qt6 builds
  * Limit maximum current track font size more when context view
    is narrow
  * Fix displaying settings button for Internet services
  * Enable Wikipedia context applet on Qt6 builds
  * Don't crash when copying multiple files to MTP device (kde#467616)
  * Avoid unnecessarily flooding MTP devices with storage
    capacity queries
  * Compilation fixes for various compiler + Qt6 version
    combinations</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739620800">- Update to 3.2.2
  * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/
  * Try to preserve collection browser order when adding tracks to playlist (kde#180404)
  * Fix DAAP collection connections, browsing and playing (kde#498654)
  * Fix first line of lyrics.ovh lyrics missing (kde#493882)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751976000">- Update to 3.3.0
  https://blogs.kde.org/2025/07/08/amarok-3.3-far-above-the-clouds-released/
  * Amarok now uses Qt 6 and KDE Frameworks 6
  * Audio engine has been reworked to use GStreamer instead of Phonon
  * Update database character set to allow full utf-8 values (kde#462268)
  * Apply default pre-gain when ReplayGain is active and use
    fallback value if no ReplayGain data is available for a track
  * Clear out some of the now-discontinued Last.fm radio
    functionalities and partially replace by opening relevant
    Last.fm pages
  * Remove TagLib extras support (RealMedia and Audible files)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1752062400">- Recommend installing gstreamer-plugins-good for mp3 decoding</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1754740800">- Update to 3.3.1
  https://blogs.kde.org/2025/08/09/amarok-3.3.1-released/
  * Enable saving and loading script console items, autocompletion
    in script console, and re-enable some more scripting
    functionality
  * Convert the remaining main UI toolbuttons to use icons from
    theme
  * Clear out remnants of the now-discontinued MusicDNS service
  * Fix example permission grant command in database settings (kde#386004)
  * Fix equalizer gains not updating when selecting some presets (kde#463908)
  * Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
  * Fix MusicBrainz search
  * Properly start CD playback if Amarok is not already running (kde#503310)
  * Also transmit embedded cover art through MPRIS (kde#357620)
  * Don't show transcoding dialog after canceling download (kde#275840)
  * Load network information earlier to avoid crashes on startup (kde#507497)
  * Try to export as-compatible-as-possible playlist files (kde#507329)
  * Fix some random crashes during playback</changelog>
</package>
<package pkgid="c5b5b6c35b8584e5e66889e1f378a22f2be8d1e9e481ac9941c3bf952c03d11094877e56b6983b6d828ee5bacb9d3edb582dd217a8b04ac86e4492ffde4b6e39" name="amarok-lang" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1710417600">- Require a phonon-vlc backend that was built with Qt5</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714478400">- Update to 3.0.0
  * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/
- Drop patch, merged upstream:
  * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1717329600">- Update to 3.0.1
  * Added an option to copy image to clipboard in Wikipedia applet,
    and a clickable notification if a non-Wikipedia link was clicked.
  * Added an option to select if track's artist is shown for
    entries under various artists / different album artist in
    context browser (kde#276039, kde#248101)
  * Indicate which search option is active in Wikipedia applet
    (kde#332010)
  * Amarok now depends on KDE Frameworks 5.78.
  * Improve strings in user interface (kde#343896, kde#234854)
  * Reduce CPU usage by minimized/hidden analyzer (kde#390063)
    and other components.
  * Various tag match bias, APG and collection filtering related
    fixes (kde#375565, kde#406751, kde#435810, kde#382456)
  * Ignore any infinite values when reading replaygain tags
    (kde#486084)
  * Avoid volume getting set to 0 when phonon-vlc playback is
    stopped (kde#442319)
  * Playlist duplicate track deletion fixes (kde#313791)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1722859200">- Update to 3.1.0
  https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/
  New features:
  * Last.fm plugin updated to use token-based authentication
    (kde#414826, kde#327547)
  * Reintroducing Last.fm Similar Artists context applet
  * Remember the previous destination provider when saving
    playlist (kde#216528)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1727611200">- Update to 3.1.1
  * Most of the context view QML items ported from QtControls 1
    to QtControls 2
  * Default to no fadeout on pause and stop (kde#491603)
  * Actually show the file browser panel toolbar
  * Fix track editor autocompletions (kde#491520)
  * Ensure home icon is shown in browser breadcrumb
    widgets (kde#491354)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 3.2.2
  * Building an experimental Qt6/KF6 Amarok version is now possible
  * Allow filtering collection by lack of tag / empty tag (kde#325317)
  * Amarok now depends on KDE Frameworks 5.108
  * Show current track context applet by default
  * Probably fix occasional crashes when filtering collection (kde#492406)
  * Probably fix occasional crashes when clearing CompondProgressBars
  * Fix context view applets on Qt6/KF6
  * Fix Ampache login on server version 5.0.0 and later (kde#496581)
  * Fix crash if Ampache login is redirected (kde#396590)
- Rebase disable-web-plugins-by-default.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.2.1
  * Support gpodder and lastfm on Qt6 builds
  * Limit maximum current track font size more when context view
    is narrow
  * Fix displaying settings button for Internet services
  * Enable Wikipedia context applet on Qt6 builds
  * Don't crash when copying multiple files to MTP device (kde#467616)
  * Avoid unnecessarily flooding MTP devices with storage
    capacity queries
  * Compilation fixes for various compiler + Qt6 version
    combinations</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739620800">- Update to 3.2.2
  * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/
  * Try to preserve collection browser order when adding tracks to playlist (kde#180404)
  * Fix DAAP collection connections, browsing and playing (kde#498654)
  * Fix first line of lyrics.ovh lyrics missing (kde#493882)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751976000">- Update to 3.3.0
  https://blogs.kde.org/2025/07/08/amarok-3.3-far-above-the-clouds-released/
  * Amarok now uses Qt 6 and KDE Frameworks 6
  * Audio engine has been reworked to use GStreamer instead of Phonon
  * Update database character set to allow full utf-8 values (kde#462268)
  * Apply default pre-gain when ReplayGain is active and use
    fallback value if no ReplayGain data is available for a track
  * Clear out some of the now-discontinued Last.fm radio
    functionalities and partially replace by opening relevant
    Last.fm pages
  * Remove TagLib extras support (RealMedia and Audible files)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1752062400">- Recommend installing gstreamer-plugins-good for mp3 decoding</changelog>
</package>
<package pkgid="4715f18aae982ebb1ff3ac570a3786883923204c9e070666d0c24e9f7653488baf832c86b6f7b332961bdd76593e54e84b9e75575e43628463b346bb344106a9" name="amarok-lang" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="bp160.1.1"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714478400">- Update to 3.0.0
  * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/
- Drop patch, merged upstream:
  * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1717329600">- Update to 3.0.1
  * Added an option to copy image to clipboard in Wikipedia applet,
    and a clickable notification if a non-Wikipedia link was clicked.
  * Added an option to select if track's artist is shown for
    entries under various artists / different album artist in
    context browser (kde#276039, kde#248101)
  * Indicate which search option is active in Wikipedia applet
    (kde#332010)
  * Amarok now depends on KDE Frameworks 5.78.
  * Improve strings in user interface (kde#343896, kde#234854)
  * Reduce CPU usage by minimized/hidden analyzer (kde#390063)
    and other components.
  * Various tag match bias, APG and collection filtering related
    fixes (kde#375565, kde#406751, kde#435810, kde#382456)
  * Ignore any infinite values when reading replaygain tags
    (kde#486084)
  * Avoid volume getting set to 0 when phonon-vlc playback is
    stopped (kde#442319)
  * Playlist duplicate track deletion fixes (kde#313791)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1722859200">- Update to 3.1.0
  https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/
  New features:
  * Last.fm plugin updated to use token-based authentication
    (kde#414826, kde#327547)
  * Reintroducing Last.fm Similar Artists context applet
  * Remember the previous destination provider when saving
    playlist (kde#216528)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1727611200">- Update to 3.1.1
  * Most of the context view QML items ported from QtControls 1
    to QtControls 2
  * Default to no fadeout on pause and stop (kde#491603)
  * Actually show the file browser panel toolbar
  * Fix track editor autocompletions (kde#491520)
  * Ensure home icon is shown in browser breadcrumb
    widgets (kde#491354)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 3.2.2
  * Building an experimental Qt6/KF6 Amarok version is now possible
  * Allow filtering collection by lack of tag / empty tag (kde#325317)
  * Amarok now depends on KDE Frameworks 5.108
  * Show current track context applet by default
  * Probably fix occasional crashes when filtering collection (kde#492406)
  * Probably fix occasional crashes when clearing CompondProgressBars
  * Fix context view applets on Qt6/KF6
  * Fix Ampache login on server version 5.0.0 and later (kde#496581)
  * Fix crash if Ampache login is redirected (kde#396590)
- Rebase disable-web-plugins-by-default.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.2.1
  * Support gpodder and lastfm on Qt6 builds
  * Limit maximum current track font size more when context view
    is narrow
  * Fix displaying settings button for Internet services
  * Enable Wikipedia context applet on Qt6 builds
  * Don't crash when copying multiple files to MTP device (kde#467616)
  * Avoid unnecessarily flooding MTP devices with storage
    capacity queries
  * Compilation fixes for various compiler + Qt6 version
    combinations</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739620800">- Update to 3.2.2
  * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/
  * Try to preserve collection browser order when adding tracks to playlist (kde#180404)
  * Fix DAAP collection connections, browsing and playing (kde#498654)
  * Fix first line of lyrics.ovh lyrics missing (kde#493882)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751976000">- Update to 3.3.0
  https://blogs.kde.org/2025/07/08/amarok-3.3-far-above-the-clouds-released/
  * Amarok now uses Qt 6 and KDE Frameworks 6
  * Audio engine has been reworked to use GStreamer instead of Phonon
  * Update database character set to allow full utf-8 values (kde#462268)
  * Apply default pre-gain when ReplayGain is active and use
    fallback value if no ReplayGain data is available for a track
  * Clear out some of the now-discontinued Last.fm radio
    functionalities and partially replace by opening relevant
    Last.fm pages
  * Remove TagLib extras support (RealMedia and Audible files)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1752062400">- Recommend installing gstreamer-plugins-good for mp3 decoding</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1754740800">- Update to 3.3.1
  https://blogs.kde.org/2025/08/09/amarok-3.3.1-released/
  * Enable saving and loading script console items, autocompletion
    in script console, and re-enable some more scripting
    functionality
  * Convert the remaining main UI toolbuttons to use icons from
    theme
  * Clear out remnants of the now-discontinued MusicDNS service
  * Fix example permission grant command in database settings (kde#386004)
  * Fix equalizer gains not updating when selecting some presets (kde#463908)
  * Fix continuing playback after timecoded tracks (cue files etc, (kde#270003)
  * Fix MusicBrainz search
  * Properly start CD playback if Amarok is not already running (kde#503310)
  * Also transmit embedded cover art through MPRIS (kde#357620)
  * Don't show transcoding dialog after canceling download (kde#275840)
  * Load network information earlier to avoid crashes on startup (kde#507497)
  * Try to export as-compatible-as-possible playlist files (kde#507329)
  * Fix some random crashes during playback</changelog>
</package>
<package pkgid="cccac0cfca023fbe3366f06a33c069ae8996165ac7fe962fe19f4a9cf89370c046e2f0a522eca2800a560f07a05372f0599dcae763682ee5698e4a43496c058b" name="amavisd-new" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="bp160.1.2"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1614168000">- Package amavisd-milter in a separate package
- Add perl(Convert::BinHex) to required packages
- Disable BerkeleyDB in configuration
  + amavisd-new-no-berkeleydb.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavis.service</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1638964800">- amavisd-new should require packets perl-IO-stringy and perl-Net-LibIDN
  (bsc#1193291)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648641600">- update to 2.12.2:
  * Allow $timestamp_fmt_mysql to be used with the DBD::MariaDB driver.
  * Resolve utf8mb4 problems when using DBD-MariaDB.
  * Set correct originating flag when using milter/AM.PDP without policy banks.
  * Resolve crash on reload with insufficient permissions.
    Amavis now tests whether it is able read and evaluate its
    configuration files with dropped privileges.
    In case it cannot, amavis fails to start and refuses to reload.
  * Resolve SSL client connection hangups with broken pipe</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1651665600">- Starting amavis.service gives Unit var-run.mount not found.
  var-run.mount is not needed
  (bsc#1198783)</changelog>
  <changelog author="Togan Muftuoglu &lt;toganm@opensuse.org&gt;" date="1653566400">- Remove server:mail/amavisd-new/amavis.service since it results Assignment outside of section warning</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1653652800">- amavis fails to start (bsc#1199755)
  Add missed requirement</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1679918400">- update to version 2.13.0
  NEW FEATURES
  o Add support for new decoder Zstandard
  o Switch from Net::LibIDN to Net::LibIDN2.
    As Net::LibIDN (based on GNU libidn) supports only IDNA 2003 (and its
    upstream declares libidn2 as successor), the newer Net::LibIDN2 (based
    on GNU libidn2) supporting IDNA 2008 and TR46 is being used preferred,
    if available.
  o Recognize 7-Zip.org's command line utility 7zz
  o Recognize 'ACE archive' file type.
  o Add file(1) short type mapping for MS Office CDF format.
  o Add attachment file name information to structured report.
  o Introduce option to add an extra header containing the Amavis category.
  o Introduce $ip_repu_score_limit option to define an upper limit
    for the redis ip reputation score feature.
  o Make sanity limit inside macro_tests configurable.
  o Add support for SpamAssassin subjprefix keyword.
    SpamAssassin 3.4.3 introduced a subjprefix keyword and a
    _SUBJPREFIX_ template tag which may be used in SpamAssassin
    rules. The template tag is now also injected into Amavis for
    usage inside subject_tag related confvars.
  o Deprecate $daemon_group confvar by @daemon_groups, which allows
    joining multiple supplementary groups when dropping privileges.
    The first element of @daemon_groups determines the EGID.
    If $daemon_group is defined it will be put ahead implicitly.
    If @daemon_groups are empty, they default to the system-provided
    groups of $daemon_user.
  BUG FIXES
  o Ignore [$@]daemon_group(s) settings during config test
    when amavis is running unprivileged already.
  o Resolve "can't obtain a tainted string" warning.
  o Resolve start_SSL fail to set SSL_verifycn_name.
    Additionally provide an explicit choice of common names
    via %smtp_tls_client_verifycn_name_maps.
  OTHER
  o Add support for Sophos Protection for Linux on @av_scanners_backup.
  o Declare Sanesecurity.Foxhole.Mail_tar infection as false positive.
  o Factor out various Amavis packages into own module files.
  o Introduce tests via Gitlab CI.
  o Convert source to CPAN module file structure.
  o Update example scanners and documentation.
  o Add IKARUS scan.server configuration example.
  o Add contribution guideline.
  o Remove IO::Stringy dependency.
  o Add a docker-compose testing environment.
  o Add support for F-Secure Linux Security 64 on @av_scanners.
- Rebase and rename patch:
    amavisd-new-2.10.1-myhostname.patch -&gt; amavisd-new-2.3.0-myhostname.patch
- Remove patch. ClamAV is in new version already avtivated
    activate_virus_scanner.diff
- Remove deprecated stuff from spec file.
- Use build method provided by amavis</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1681128000">- apply replacement for default install directories correctly
  (boo#1210267)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1691841600">- Package failed to rebuild on Perl version changes due to missing
  %{perl_requires}</changelog>
</package>
<package pkgid="c13c455583b1b87da4625320359459a0473989f3e755c428b147a224c9ffe1803e3d7096b0035d54e7c2cb186bc9f0077a846f7b2df67a417b219fd8184c7ad6" name="amavisd-new-docs" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="bp160.1.2"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1614168000">- Package amavisd-milter in a separate package
- Add perl(Convert::BinHex) to required packages
- Disable BerkeleyDB in configuration
  + amavisd-new-no-berkeleydb.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavis.service</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1638964800">- amavisd-new should require packets perl-IO-stringy and perl-Net-LibIDN
  (bsc#1193291)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648641600">- update to 2.12.2:
  * Allow $timestamp_fmt_mysql to be used with the DBD::MariaDB driver.
  * Resolve utf8mb4 problems when using DBD-MariaDB.
  * Set correct originating flag when using milter/AM.PDP without policy banks.
  * Resolve crash on reload with insufficient permissions.
    Amavis now tests whether it is able read and evaluate its
    configuration files with dropped privileges.
    In case it cannot, amavis fails to start and refuses to reload.
  * Resolve SSL client connection hangups with broken pipe</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1651665600">- Starting amavis.service gives Unit var-run.mount not found.
  var-run.mount is not needed
  (bsc#1198783)</changelog>
  <changelog author="Togan Muftuoglu &lt;toganm@opensuse.org&gt;" date="1653566400">- Remove server:mail/amavisd-new/amavis.service since it results Assignment outside of section warning</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1653652800">- amavis fails to start (bsc#1199755)
  Add missed requirement</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1679918400">- update to version 2.13.0
  NEW FEATURES
  o Add support for new decoder Zstandard
  o Switch from Net::LibIDN to Net::LibIDN2.
    As Net::LibIDN (based on GNU libidn) supports only IDNA 2003 (and its
    upstream declares libidn2 as successor), the newer Net::LibIDN2 (based
    on GNU libidn2) supporting IDNA 2008 and TR46 is being used preferred,
    if available.
  o Recognize 7-Zip.org's command line utility 7zz
  o Recognize 'ACE archive' file type.
  o Add file(1) short type mapping for MS Office CDF format.
  o Add attachment file name information to structured report.
  o Introduce option to add an extra header containing the Amavis category.
  o Introduce $ip_repu_score_limit option to define an upper limit
    for the redis ip reputation score feature.
  o Make sanity limit inside macro_tests configurable.
  o Add support for SpamAssassin subjprefix keyword.
    SpamAssassin 3.4.3 introduced a subjprefix keyword and a
    _SUBJPREFIX_ template tag which may be used in SpamAssassin
    rules. The template tag is now also injected into Amavis for
    usage inside subject_tag related confvars.
  o Deprecate $daemon_group confvar by @daemon_groups, which allows
    joining multiple supplementary groups when dropping privileges.
    The first element of @daemon_groups determines the EGID.
    If $daemon_group is defined it will be put ahead implicitly.
    If @daemon_groups are empty, they default to the system-provided
    groups of $daemon_user.
  BUG FIXES
  o Ignore [$@]daemon_group(s) settings during config test
    when amavis is running unprivileged already.
  o Resolve "can't obtain a tainted string" warning.
  o Resolve start_SSL fail to set SSL_verifycn_name.
    Additionally provide an explicit choice of common names
    via %smtp_tls_client_verifycn_name_maps.
  OTHER
  o Add support for Sophos Protection for Linux on @av_scanners_backup.
  o Declare Sanesecurity.Foxhole.Mail_tar infection as false positive.
  o Factor out various Amavis packages into own module files.
  o Introduce tests via Gitlab CI.
  o Convert source to CPAN module file structure.
  o Update example scanners and documentation.
  o Add IKARUS scan.server configuration example.
  o Add contribution guideline.
  o Remove IO::Stringy dependency.
  o Add a docker-compose testing environment.
  o Add support for F-Secure Linux Security 64 on @av_scanners.
- Rebase and rename patch:
    amavisd-new-2.10.1-myhostname.patch -&gt; amavisd-new-2.3.0-myhostname.patch
- Remove patch. ClamAV is in new version already avtivated
    activate_virus_scanner.diff
- Remove deprecated stuff from spec file.
- Use build method provided by amavis</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1681128000">- apply replacement for default install directories correctly
  (boo#1210267)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1691841600">- Package failed to rebuild on Perl version changes due to missing
  %{perl_requires}</changelog>
</package>
<package pkgid="12f04a190e11be33c6af3d0ea935cf4384d6c2f7f1d536e90121a163d157e2b7bb73eee46fcf86f4f88810b2ae64ef3d16c18b348d79ea9e2de47dde0fdb3d72" name="amazon-dracut-config" arch="noarch">
  <version epoch="0" ver="0.0.4" rel="160000.2.2"/>
  <changelog author="sean.marlow@suse.com" date="1733227200">- Initial release v0.0.1 (PED-11572)</changelog>
  <changelog author="sean.marlow@suse.com" date="1735905600">- Update to 0.0.3
  + Add provides and conflicts on generic name dracut-instance-change-config
- Update to 0.0.2
  + Rename config for nvme for consistency
  + Add dracut build requirement</changelog>
  <changelog author="sean.marlow@suse.com" date="1736337600">- Update to 0.0.4
  + Move dracut config files to usr/lib/ dir</changelog>
</package>
<package pkgid="3f18c44044c6590be9f0b53233327a493a11244c8d7d91b104c547ed9d3736e33eda48a513c7f8adc676af2357060155712b6729b58dc61a2b4727beb18c4f1b" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.102.1" rel="160000.1.1"/>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="badshah400@gmail.com" date="1712318400">- Use full URL for sources.
- Use %license to mark LICENSE file.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 1.64.0-1
  * Cache Agent version 1.64.0
- from version 1.63.1-1
  * Cache Agent version 1.63.1
- from version 1.63.0-1
  * Cache Agent version 1.63.0
- from version 1.62.2-1
  * Cache Agent version 1.62.2
- from version 1.62.1-1
  * Fix bug in cgroup mount for rpm builds
- from version 1.62.0-1
  * Update golang version 1.18.3
- from version 1.61.3-1
  * Cache Agent version 1.61.3
- from version 1.61.2-1
  * Cache Agent version 1.61.2
- from version 1.61.1-1
  * Cache Agent version 1.61.1
  * Install script no longer fails on systems using cgroups v2
  * Add GO111MODULE=on to honnef.co/go/tools/cmd/staticcheck
- from version 1.61.0-1
  * Cache Agent version 1.61.0
  * Check ipv4 routes for default network interface instead
    of defaulting to eth0
- from version 1.60.1-1
  * Cache Agent version 1.60.1
- from version 1.60.0-1
  * Cache Agent version 1.60.0
  * Add volume plugin to rpm/deb package
- from version 1.59.0-1
  * Cache Agent version 1.59.0
  * Log what pre-start is doing
- from version 1.58.0-2
  * Cache Agent version 1.58.0
  * Add exec prerequisites to ecs-anywhere installation script
- from version 1.57.1-1
  * Cache Agent version 1.57.1
  * Enable AL2 support for ECS-A
  * Initialize docker client lazily
- from version 1.57.0-1
  * Cache Agent version 1.57.0
- from version 1.56.0-1
  * Cache Agent version 1.56.0
- from version 1.55.5-1
  * Cache Agent version 1.55.5
- from version 1.55.4-1
  * Cache Agent version 1.55.4
  * GPU updates for ECS Anywhere
  * Introduce new configuration variable ECS\_OFFHOST\_INTROSPECTION\_NAME
    to specify the primary network interface name to block offhost agent
    introspection port access.
- from version 1.55.3-1
  * Cache Agent version 1.55.3
- from version 1.55.2-1
  * Cache Agent version 1.55.2
- from version 1.55.1-1
  * Cache Agent version 1.55.1
- from version 1.55.0-1
  * Cache Agent version 1.55.0
- from version 1.54.1-1
  * Cache Agent version 1.54.1
- from version 1.54.0-1
  * Cache Agent version 1.54.0
- Add -buildmode=pie to go build command line (bsc#1239945)
- Refresh reproducible.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1774958400">- Update to version 1.102.1
  * Enhancement - Improve ENI watcher udev logging (#4887)
  * Enhancement - Update go version to 1.25.7,
    Update unit test coverage logic (#4886)
  * Enhancement - Upgrade prometheus deps (#4883)
  * Enhancement - Use static IP for daemon tasks for Managed Instances,
    also updates amazon-ecs-cni-plugins (#4881)
  * Bugfix - Fix IMDS client rate limiting to prevent
    token refresh failures after 401 responses (#4870)
- For the changes between 1.64.0 and 1.102.0, see CHANGELOG.md
- Fix permissions of systemd service file
- Include CHANGELOG.md in %doc section
- Refresh reproducible.patch
- Refresh use-agent-container-built-in-certs.patch
- Switch upstream source to amazon-ecs-agent
- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14842)</changelog>
</package>
<package pkgid="dce54844851f50d6ca5e4f54ec1191df29c05c486dcb673dce92a74fa806b080a2b5850b28c2609c1d3551b934eb78286c47f8d5f439766f69002c9841038cbe" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.102.1" rel="160000.2.1"/>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="badshah400@gmail.com" date="1712318400">- Use full URL for sources.
- Use %license to mark LICENSE file.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 1.64.0-1
  * Cache Agent version 1.64.0
- from version 1.63.1-1
  * Cache Agent version 1.63.1
- from version 1.63.0-1
  * Cache Agent version 1.63.0
- from version 1.62.2-1
  * Cache Agent version 1.62.2
- from version 1.62.1-1
  * Fix bug in cgroup mount for rpm builds
- from version 1.62.0-1
  * Update golang version 1.18.3
- from version 1.61.3-1
  * Cache Agent version 1.61.3
- from version 1.61.2-1
  * Cache Agent version 1.61.2
- from version 1.61.1-1
  * Cache Agent version 1.61.1
  * Install script no longer fails on systems using cgroups v2
  * Add GO111MODULE=on to honnef.co/go/tools/cmd/staticcheck
- from version 1.61.0-1
  * Cache Agent version 1.61.0
  * Check ipv4 routes for default network interface instead
    of defaulting to eth0
- from version 1.60.1-1
  * Cache Agent version 1.60.1
- from version 1.60.0-1
  * Cache Agent version 1.60.0
  * Add volume plugin to rpm/deb package
- from version 1.59.0-1
  * Cache Agent version 1.59.0
  * Log what pre-start is doing
- from version 1.58.0-2
  * Cache Agent version 1.58.0
  * Add exec prerequisites to ecs-anywhere installation script
- from version 1.57.1-1
  * Cache Agent version 1.57.1
  * Enable AL2 support for ECS-A
  * Initialize docker client lazily
- from version 1.57.0-1
  * Cache Agent version 1.57.0
- from version 1.56.0-1
  * Cache Agent version 1.56.0
- from version 1.55.5-1
  * Cache Agent version 1.55.5
- from version 1.55.4-1
  * Cache Agent version 1.55.4
  * GPU updates for ECS Anywhere
  * Introduce new configuration variable ECS\_OFFHOST\_INTROSPECTION\_NAME
    to specify the primary network interface name to block offhost agent
    introspection port access.
- from version 1.55.3-1
  * Cache Agent version 1.55.3
- from version 1.55.2-1
  * Cache Agent version 1.55.2
- from version 1.55.1-1
  * Cache Agent version 1.55.1
- from version 1.55.0-1
  * Cache Agent version 1.55.0
- from version 1.54.1-1
  * Cache Agent version 1.54.1
- from version 1.54.0-1
  * Cache Agent version 1.54.0
- Add -buildmode=pie to go build command line (bsc#1239945)
- Refresh reproducible.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1774958400">- Update to version 1.102.1
  * Enhancement - Improve ENI watcher udev logging (#4887)
  * Enhancement - Update go version to 1.25.7,
    Update unit test coverage logic (#4886)
  * Enhancement - Upgrade prometheus deps (#4883)
  * Enhancement - Use static IP for daemon tasks for Managed Instances,
    also updates amazon-ecs-cni-plugins (#4881)
  * Bugfix - Fix IMDS client rate limiting to prevent
    token refresh failures after 401 responses (#4870)
- For the changes between 1.64.0 and 1.102.0, see CHANGELOG.md
- Fix permissions of systemd service file
- Include CHANGELOG.md in %doc section
- Refresh reproducible.patch
- Refresh use-agent-container-built-in-certs.patch
- Switch upstream source to amazon-ecs-agent
- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14842)</changelog>
  <changelog author="jgleissner@suse.com" date="1775563200">- Do not use -z now linker flag (module nvml has unresolved symobls
  wich are provided by libnvidia-ml, so lazy linking is required
  otherwise binary fails to load)</changelog>
  <changelog author="jgleissner@suse.com" date="1775822400">- Drop use-agent-container-built-in-certs.patch (patch ineffective
  as it doesn't set //go:build required by newer versions of go)
- Drop 'suse' flag from build script command so generic_rpm target
  gets built (otherwise /etc/ssl gets bind to agent container which
  shadows the built-in certificate files)</changelog>
</package>
<package pkgid="fe55a4592b2083056fb13e0b0c0d354825e36dee7b3e9e8997836734f07248d353c14e5ee9b239dc36672106744fbadca00148c6f97b2be3a6fd15f8fd77205b" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.103.2" rel="160000.1.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="badshah400@gmail.com" date="1712318400">- Use full URL for sources.
- Use %license to mark LICENSE file.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 1.64.0-1
  * Cache Agent version 1.64.0
- from version 1.63.1-1
  * Cache Agent version 1.63.1
- from version 1.63.0-1
  * Cache Agent version 1.63.0
- from version 1.62.2-1
  * Cache Agent version 1.62.2
- from version 1.62.1-1
  * Fix bug in cgroup mount for rpm builds
- from version 1.62.0-1
  * Update golang version 1.18.3
- from version 1.61.3-1
  * Cache Agent version 1.61.3
- from version 1.61.2-1
  * Cache Agent version 1.61.2
- from version 1.61.1-1
  * Cache Agent version 1.61.1
  * Install script no longer fails on systems using cgroups v2
  * Add GO111MODULE=on to honnef.co/go/tools/cmd/staticcheck
- from version 1.61.0-1
  * Cache Agent version 1.61.0
  * Check ipv4 routes for default network interface instead
    of defaulting to eth0
- from version 1.60.1-1
  * Cache Agent version 1.60.1
- from version 1.60.0-1
  * Cache Agent version 1.60.0
  * Add volume plugin to rpm/deb package
- from version 1.59.0-1
  * Cache Agent version 1.59.0
  * Log what pre-start is doing
- from version 1.58.0-2
  * Cache Agent version 1.58.0
  * Add exec prerequisites to ecs-anywhere installation script
- from version 1.57.1-1
  * Cache Agent version 1.57.1
  * Enable AL2 support for ECS-A
  * Initialize docker client lazily
- from version 1.57.0-1
  * Cache Agent version 1.57.0
- from version 1.56.0-1
  * Cache Agent version 1.56.0
- from version 1.55.5-1
  * Cache Agent version 1.55.5
- from version 1.55.4-1
  * Cache Agent version 1.55.4
  * GPU updates for ECS Anywhere
  * Introduce new configuration variable ECS\_OFFHOST\_INTROSPECTION\_NAME
    to specify the primary network interface name to block offhost agent
    introspection port access.
- from version 1.55.3-1
  * Cache Agent version 1.55.3
- from version 1.55.2-1
  * Cache Agent version 1.55.2
- from version 1.55.1-1
  * Cache Agent version 1.55.1
- from version 1.55.0-1
  * Cache Agent version 1.55.0
- from version 1.54.1-1
  * Cache Agent version 1.54.1
- from version 1.54.0-1
  * Cache Agent version 1.54.0
- Add -buildmode=pie to go build command line (bsc#1239945)
- Refresh reproducible.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1774958400">- Update to version 1.102.1
  * Enhancement - Improve ENI watcher udev logging (#4887)
  * Enhancement - Update go version to 1.25.7,
    Update unit test coverage logic (#4886)
  * Enhancement - Upgrade prometheus deps (#4883)
  * Enhancement - Use static IP for daemon tasks for Managed Instances,
    also updates amazon-ecs-cni-plugins (#4881)
  * Bugfix - Fix IMDS client rate limiting to prevent
    token refresh failures after 401 responses (#4870)
- For the changes between 1.64.0 and 1.102.0, see CHANGELOG.md
- Fix permissions of systemd service file
- Include CHANGELOG.md in %doc section
- Refresh reproducible.patch
- Refresh use-agent-container-built-in-certs.patch
- Switch upstream source to amazon-ecs-agent
- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14842)</changelog>
  <changelog author="jgleissner@suse.com" date="1775563200">- Do not use -z now linker flag (module nvml has unresolved symobls
  wich are provided by libnvidia-ml, so lazy linking is required
  otherwise binary fails to load)</changelog>
  <changelog author="jgleissner@suse.com" date="1775822400">- Drop use-agent-container-built-in-certs.patch (patch ineffective
  as it doesn't set //go:build required by newer versions of go)
- Drop 'suse' flag from build script command so generic_rpm target
  gets built (otherwise /etc/ssl gets bind to agent container which
  shadows the built-in certificate files)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777464000">- Update to version 1.103.0
  * Enhancement - Golang bump: 1.25.9 (#4935)
  * Enhancement - Use env variable to read user input when
    mounting FSx volumes (#4934)
  * Enhancement - Enhancement - Replace SSM Dualstack endpoint
    resolution logic with UseDualStackEndpoint (#4931)
  * Enhancement - Emit duration metrics for TACS connect/disconnect (#4928)
  * Enhancement - Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
    from 1.6.10 to 1.7.8 in /agent (#4922)
  * Enhancement - Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
    from 1.6.5 to 1.7.8 in /ecs-init (#4925)
  * Enhancement - Track and emit metric for disconnect time from ACS (#4920)
  * Enhancement - engine: skip execution role checks when task desired status
    is stopped (#4918)
  * Enhancement - Add NeuronDevices type and sysfs-based device discovery (#4919)
  * Bugfix - Fix release workflow branch handling and add GitHub App token (#4929)
  * Bugfix - fix(netlib): Conditionally add IPv6 subnet to IPAM config when IPv6 (#4916)
- from version 1.102.2
  * Enhancement - Update SSM exec agent version to 3.3.4108.0 (#4912)
  * Enhancement - Update Go version to 1.25.8 (#4894)
  * Enhancement - Apply skip-gpg-check to both ecs-init and ssm agent (#4901)
  * Enhancement - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#4906)
- Bump Go version to 1.25.9</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779278400">- Add CVE-2026-33814.patch to fix hanging Transport in http2 code
  due to bad SETTINGS frame (bsc#1265843, CVE-2026-33814)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779969600">- Update to version 1.103.2
  * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/fsx from
    1.53.1 to 1.65.10 in /agent (#4966)
  * Enhancement - Add semgrep security scan for command injection (#4959)
  * Enhancement - Bump golang.org/x/tools from 0.39.0 to 0.45.0 in
    /ecs-agent (#4965), also updates x/net to 0.54.0 (bsc#1266652, CVE-2026-39821)
  * Enhancement - Add integration test for credential refresher (#4961)
  * Enhancement - Bump golang.org/x/tools from 0.42.0 to 0.45.0 in /agent (#4873)
  * Enhancement - Update Go version to 1.25.10 (#4960)
  * Enhancement - Bump go.etcd.io/bbolt from 1.3.9 to 1.4.3 in /ecs-agent (#4872)
  * Enhancement - update credentials-fetcher retry comments/tests (#4954)
  * Enhancement - Enhancement - Add retry mechanism to credentialsfetcher (#4948)
  * Enhancement - Add IMDS credential refresher (#4953)
  * Bugfix - fix flaky tests depending on timers (#4955)
- from version 1.103.1
  * Feature - Implement IMDS scanner for task credential retrieval,
    in the shared library (#4945)
  * Feature - Add config/capability for IMDS-based task credential retrieval
    (disabled for now) (#4938)
  * Feature - Add IMDS credential scanner interface and capability constant
    for IMDS-based task credential retrieval (#4937)
  * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
    from 1.47.3 to 1.65.0 in /agent (#4921)
  * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/s3
    from 1.63.1 to 1.97.3 in /ecs-init (#4923)
  * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/s3
    from 1.79.2 to 1.97.3 in /agent (#4924)
  * Enhancement - Bump go.opentelemetry.io/otel/exporters/otlp/
    otlptrace/ otlptracehttp from 1.32.0 to 1.43.0 in /agent (#4926)
  * Enhancement - Truncate log values to make agent logs less verbose (#4940)
- Drop CVE-2026-33814.patch, merged upstream</changelog>
</package>
<package pkgid="759250d0ea68df7ec0686ffefd4213cfc6e3bf2b3c6672fcffe150d4771109178e5c23f08d544627e877d1616c030bc39fb8e270a4df1e6696aa58d9e88cf202" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="badshah400@gmail.com" date="1712318400">- Use full URL for sources.
- Use %license to mark LICENSE file.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 1.64.0-1
  * Cache Agent version 1.64.0
- from version 1.63.1-1
  * Cache Agent version 1.63.1
- from version 1.63.0-1
  * Cache Agent version 1.63.0
- from version 1.62.2-1
  * Cache Agent version 1.62.2
- from version 1.62.1-1
  * Fix bug in cgroup mount for rpm builds
- from version 1.62.0-1
  * Update golang version 1.18.3
- from version 1.61.3-1
  * Cache Agent version 1.61.3
- from version 1.61.2-1
  * Cache Agent version 1.61.2
- from version 1.61.1-1
  * Cache Agent version 1.61.1
  * Install script no longer fails on systems using cgroups v2
  * Add GO111MODULE=on to honnef.co/go/tools/cmd/staticcheck
- from version 1.61.0-1
  * Cache Agent version 1.61.0
  * Check ipv4 routes for default network interface instead
    of defaulting to eth0
- from version 1.60.1-1
  * Cache Agent version 1.60.1
- from version 1.60.0-1
  * Cache Agent version 1.60.0
  * Add volume plugin to rpm/deb package
- from version 1.59.0-1
  * Cache Agent version 1.59.0
  * Log what pre-start is doing
- from version 1.58.0-2
  * Cache Agent version 1.58.0
  * Add exec prerequisites to ecs-anywhere installation script
- from version 1.57.1-1
  * Cache Agent version 1.57.1
  * Enable AL2 support for ECS-A
  * Initialize docker client lazily
- from version 1.57.0-1
  * Cache Agent version 1.57.0
- from version 1.56.0-1
  * Cache Agent version 1.56.0
- from version 1.55.5-1
  * Cache Agent version 1.55.5
- from version 1.55.4-1
  * Cache Agent version 1.55.4
  * GPU updates for ECS Anywhere
  * Introduce new configuration variable ECS\_OFFHOST\_INTROSPECTION\_NAME
    to specify the primary network interface name to block offhost agent
    introspection port access.
- from version 1.55.3-1
  * Cache Agent version 1.55.3
- from version 1.55.2-1
  * Cache Agent version 1.55.2
- from version 1.55.1-1
  * Cache Agent version 1.55.1
- from version 1.55.0-1
  * Cache Agent version 1.55.0
- from version 1.54.1-1
  * Cache Agent version 1.54.1
- from version 1.54.0-1
  * Cache Agent version 1.54.0
- Add -buildmode=pie to go build command line (bsc#1239945)
- Refresh reproducible.patch</changelog>
</package>
<package pkgid="0e92814f0350620f5c09a394c0de6b4f5ae77df575eb9c1a831dc3c18d1ed7e8fddfac97c605d72e4b45c6f2a56279cf553570e6672c7d62edba164a021131c0" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.3.2299.0" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1702296000">- Update to version 3.2.1798.0
  * Bump golang.org/x/net from 0.15.0 to 0.17.0
  * Upgraded GoLang to version 1.20.10
  * Fixing race condition in session datachannel unit test
- from version 3.2.1705.0
  * Updated MGS Interactor to send 'Failed' status on agentJob parsing error
  * Added error handling for Linux DomainJoin when service account credentials empty
  * Fix for panic scenario in when running aws:configureDocker plugin
  * Upgraded GoLang to version 1.20.8
  * Upgraded golang.org/x/net to v0.15.0
  * Added support for macOS 13 (Ventura)
- from version 3.2.1630.0
  * Fix credential retrieval retry logic in credential refresher
  * Reducing retrieval log level to debug in the credential
    refresher after more than 3 retrieval retries
  * Fix for EC2 credential retrieval errors not being
    propagated to the credential refresher
  * Fixing agent version input format validation
  * Fix downloadPlatformOverride for AlmaLinux
  * Fixed issue where removing seelog.xml file doesn't
    revert minimum log level back to INFO
  * Ignore non-audit files in audit folder
- from version 3.2.1542.0
  * Add aws:updateSSMAgent plugin support for Flatcar Linux
  * Add fix to resolve manifest url during agent update when using stable keyword
  * Fix multiple issues causing tight loops during IPC connection scenarios
  * Sign deb and rpm installer packages for Linux instances using new key
  * Use file based IPC by default for amazon-ssm-agent
    and ssm-agent-worker communication in Darwin</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 3.3.40.0
  * Fix issue to execute aws:updateSSMAgent plugin through aws:rundocument plugin
  * Update Messaging module to switch off ec2messages
    when ssmmessages connected successfully
  * Update SSM Agent Minor version from 3.2 to 3.3
- from version 3.2.2222.0
  * Upgrade minimum go version in go.mod file to go 1.19
  * Upgrade go-git package to v5.11.0
  * Fix for bad default manifest url when updating EC2Config
- from version 3.2.2143.0
  * Fixed plugin path traversal logic
  * Updated aws:application plugin default param
  * Fixed default param in psmodule
  * Upgraded GoLang to version 1.21.5
- from version 3.2.2086.0
  * Added Agent config to configure session logs destination
  * Added data channel acknowledgement functionalities
  * Added redirect handler and timeout for HTTP client
  * Added steps to verify aws-cli installation for domainJoin plugin
  * Added support for Ubuntu 23.04, Debian 11.7 &amp; 12, and SUSE 15.5
  * Adjusted random number generator logic used to get filename in downloadContent plugin
  * Fixed Agent to gather application inventory from both rpm and
    dpkg package managers if present in Unix instances
  * Bump golang.org/x/crypto/ssh from 0.14.0 to 0.17.0
- from version 3.2.2016.0
  * Added telemetry for agent core in-proc executor usage
  * Added retries for Agent installation with snap on Greengrass
  * Added code to update Agent config to use only Onprem Identity in Greengrass
  * Added support for macOS 14 (Sonoma)
  * Added Onprem registration support using ssm-setup-cli
  * Fixed docker installation issues in aws:configureDocker plugin
  * Fix for document worker and session worker not logging when
    custom seelog configuration missing parameters
  * Updated allowed regex pattern in S3 URI
  * Update Agent IoT Greengrass component minor version
  * Updated SUSE version in Seamless Domain Join script
  * Updated Greengrass component workflow to get installed Agent version and update
    Agent only when the installed Agent version doesn't match with Greengrass
    component Agent version
  * Upgraded GoLang version that builds agent binaries with to 1.20.11
- Update Go version requirement to 1.21</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712318400">- Update to version 3.3.217.0
  * Add alternative outputs for agent package generation scripts
  * Add support for Oracle 8.8 &amp; 8.9, Rocky 8.8 &amp; 8.9,
    AlmaLinux 8.8 &amp; 8.9, and RHEL 8.9 &amp; 9.3
  * Fix flaky integration test
  * Fix setup-cli error code for non English systems
  * Set IPR creds expiry to 30 mins for ssm agent worker
  * Switch installer package manager from rpm to yum on OSes that support yum
  * Upgrade GoLang to version 1.21.8
- from version 3.3.131.0
  * Add integration tests for control channel and data channel module
  * Remove data channel and control channel acknowledgement
    functionality in MGS Interactor
- from version 3.2.2303.0
  * Add integration tests for control channel module
  * Revert data channel and control channel acknowledgement
    functionality in MGS Interactor
  * Update Greengrass component minor version to 1.2.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 3.3.551.0
  * Agent updater attempts yum install/uninstall before falling
    back to attempt with rpm
  * Updated golang.org/x/net from v0.19.0 to v0.26.0
  * Upgrade GoLang to version 1.21.11
  * Add IPv6 addresses for NTP and EC2Config to default DenyList
  * Update Distributor to only use Systems Manager APIs to fetch package contents
- from version 3.3.484.0
  * Update SSM-Setup-CLI logs related to checksum validation of latest version
- from version 3.3.418.0
  * Upgrade go-github version from v8 to v61
  * Increase timeouts in SSM-Setup-CLI
  * Fix darwin build issue in SSM-Setup-CLI
  * Fix the command builder bug to handle space char in input value
  * Fix an inaccurate log when validating allowDowngrade parameter during Agent update
  * Signing SSM Agent vended Windows executables
- from version 3.3.380.0
  * Update AWS GO SDK to v1.51.20
- from version 3.3.337.0
  * Remove yum as package manager in linux install/uninstall script
  * Verify TrustedInstaller status before posting WindowsUpdate
    information in aws:softwareInventory plugin</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730289600">- Update to version 3.3.1142.0
  * Fail windows update when installed version does not match
  * Reduced length of IMDS errors to shorter format
  * Increase the RunCommand timeout during the registration process for the on-prem instances
  * Add nil check when calling GetRepository content in aws:downloadContent
  * Worker process to exit if they are not successfully started and became idle
  * Fix bug where unforeseen failures cause time to be incorrectly displayed in RunCommand
  * Update GreenGrass component minor version to 1.3.0
  * Ensure agent thread always exit after the corresponding worker process exits
  * Fix IPC file filtering bug where usernames or session names containing
    tmp causes agent worker to not correctly receive IPC
  * Load directly from appconfig file when calling UpdateInstanceInformation
    during credential refresher
  * Use a single syscall for route table for health check IP
- from version 3.3.987.0
  * Update default session logging destination to none
  * Specify a minimum of TLS v1.2 in http client calls
  * Add web-socket heartbeat to detect connection drops in the web-socket
    for control and data channels sooner
  * Use exponential retry for document worker, increase retry interval
    and attempt count when reading IPC files
  * Add wait for cloud-init in the agent updater
  * Fix timeouts for update without yum endpoint connectivity
  * Change in orchestration directory removal process to reduce disk space usage
  * Fix Inventory detailed information invalid value check
  * Fix parsing issue with DomainJoin Plugin
  * Modify DomainJoin Plugin to use Kerberos REALM in username for RHEL and variants
  * Change the SUSE linux zypper commands to quiet mode for the DomainJoin Plugin
  * Move high volume info logs to debug level
  * Remove deprecated go coverage library (golang.org/x/tools/cmd/cover)
  * Add lock on session orchestration cleanup to prevent quadratic file
    system lookup for large volume session users
  * Upgrade GoLang to version 1.22.7
- from version 3.3.859.0
  * Updated snapcraft.yml specification
- from version 3.3.808.0
  * Agent updater attempts yum install/uninstall before
    falling back to attempt with rpm
  * Updated golang.org/x/net from v0.19.0 to v0.26.0
  * Upgrade GoLang to version 1.21.11
  * Add IPv6 addresses for NTP and EC2Config to default DenyList
  * Update Distributor to only use Systems Manager APIs to
    fetch package contents</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 3.3.1345.0
  * Revert "Update configurePackage to use fixed download method"
  * Revert "Use a single syscall for route table for health check IP"
- from version 3.3.1311.0
  * Add alternative to wmic to support Windows 2025
  * Add armv7 architecture support for greengrass component
  * Add support in ssm-setup-cli for standalone installation
    in on-premises environments
  * Fail ssm-setup-cli install command if agent config is not loadable
  * Implement S3 ownership verification as an optional parameter for plugins
  * Mark Session task as cancelled when MGS indicates that session is over
  * Update configurePackage to use fixed download method
  * Update Docker Engine version and use system environment
    variables in installation path
  * Update GreenGrass component minor version to 1.3.1
- from version 3.3.1230.0
  * Revert compatibility hook for future Windows versions as it
    increased CPU consumption for document execution on Windows.
  * Revert Increase RunCommand timeout during the registration
    process for the on-prem instances</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1737115200">- Update to version 3.3.1611.0 (bsc#1235575, CVE-2025-21613)
  * Update aws-sdk-go from 1.51.20 to 1.55.5
  * Update golang.org/x/crypto from 0.24.0 to 0.32.0
  * Update github.com/go-git/go-git/v5 from 5.12.0 to 5.13.1
  * Update golang.org/x/net from 0.26.0 to 0.34.0
  * Update golang.org/x/oauth2 from 0.0.0-20211005180243-6b3c2da341f1
    to 0.24.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741262400">- Update to version 3.3.1957.0
  * Fix TestDocumentWorkerCrash integration tests
  * Implement caching for platform data and refactor the code
    to use cached data if available
  * Replace Get-CimInstance commands with WMI alternatives for
    retrieving system info
  * Add configuration file and script to run the Argot static
    analyzer to check for dataflow and other security invariants
  * Updater to allow downgrade if current version is inactive
  * Allow Agent Updater to emit intermediate metrics during
    updates and add new Updater metrics
  * Agent setup cli verification to rely only on exit codes
  * Update SSM Agent public key to verify SSM-Setup-CLI binary signature
  * Update GPG keyring to verify SSM-Agent binary signature using SSM-Setup-CLI
  * Fix code branching within setupcli_data_integrity_linux.sh
  * Use powershell for simplified, updated and no prompt unzip in install.bat
  * Update build Golang version to 1.22.11
- from version 3.3.1802.0
  * Fix TestDocumentWorkerCrash integration tests
  * Implement caching for platform data and refactor the code
    to use cached data if available
  * Replace Get-CimInstance commands with WMI alternatives for
    retrieving system info
  * Add configuration file and script to run the Argot static analyzer
    to check for dataflow and other security invariants
  * Updater to allow downgrade if current version is inactive
  * Allow Agent Updater to emit intermediate metrics during updates
    and add new Updater metrics
  * Agent setup cli verification to rely only on exit codes
  * Update SSM Agent public key to verify SSM-Setup-CLI binary signature
  * Update GPG keyring to verify SSM-Agent binary signature using SSM-Setup-CLI
  * Fix code branching within setupcli_data_integrity_linux.sh
  * Use powershell for simplified, updated and no prompt unzip in install.bat
  * Update build Golang version to 1.22.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741348800">- Add patch to fix proxy bypass using IPv6 zone IDs in golang.org/x/net
  * CVE-2025-22870.patch (bsc#1238702, CVE-2025-22870)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744718400">- Update to version 3.3.2299.0
  * Allow custom hibernation max interval configuration
  * Refactor hibernation to fix ping leak and correct interval behavior
  * Remove dependency on s3:GetObject for aws:configurePackage plugin
  * Fix issue where ssm-setup-cli fails to detect whether agent is running
    or stopped in non-English locales
  * Fix comparison operator issue in aws:domainJoin script when executed
    in Ubuntu dash
  * Fix IPV6 address for IMDS in documentation and deny rule
  * Add hasHardenedACL check to avoid costly recursive hardening of the data
    directory on reboot
  * Update golang.org/x/crypto from v0.32.0 to v0.36.0
  * Update golang.org/x/net from v0.34.0 to v0.37.0
  * Update golang.org/x/sys from v0.29.0 to v0.31.0
  * Update golang.org/x/oauth2 from v0.24.0 to v0.28.0
  * Upgrade GoLang version from v1.22 to v1.23
  * Update Argot config and ensure client uses DisableHTTPDowngrade
  * Add unit tests in multiple modules
- Drop CVE-2025-22870.patch, fixed upstream</changelog>
</package>
<package pkgid="4b3a135787f21dab048cc385a97aaff56ee1bd624dc0ebbd42511fd3fc6f783950180f974fa7b74783f5320d03e99c053afc4c0b5e81864eb191774bccfb0f58" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.3.2299.0" rel="160000.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 3.3.40.0
  * Fix issue to execute aws:updateSSMAgent plugin through aws:rundocument plugin
  * Update Messaging module to switch off ec2messages
    when ssmmessages connected successfully
  * Update SSM Agent Minor version from 3.2 to 3.3
- from version 3.2.2222.0
  * Upgrade minimum go version in go.mod file to go 1.19
  * Upgrade go-git package to v5.11.0
  * Fix for bad default manifest url when updating EC2Config
- from version 3.2.2143.0
  * Fixed plugin path traversal logic
  * Updated aws:application plugin default param
  * Fixed default param in psmodule
  * Upgraded GoLang to version 1.21.5
- from version 3.2.2086.0
  * Added Agent config to configure session logs destination
  * Added data channel acknowledgement functionalities
  * Added redirect handler and timeout for HTTP client
  * Added steps to verify aws-cli installation for domainJoin plugin
  * Added support for Ubuntu 23.04, Debian 11.7 &amp; 12, and SUSE 15.5
  * Adjusted random number generator logic used to get filename in downloadContent plugin
  * Fixed Agent to gather application inventory from both rpm and
    dpkg package managers if present in Unix instances
  * Bump golang.org/x/crypto/ssh from 0.14.0 to 0.17.0
- from version 3.2.2016.0
  * Added telemetry for agent core in-proc executor usage
  * Added retries for Agent installation with snap on Greengrass
  * Added code to update Agent config to use only Onprem Identity in Greengrass
  * Added support for macOS 14 (Sonoma)
  * Added Onprem registration support using ssm-setup-cli
  * Fixed docker installation issues in aws:configureDocker plugin
  * Fix for document worker and session worker not logging when
    custom seelog configuration missing parameters
  * Updated allowed regex pattern in S3 URI
  * Update Agent IoT Greengrass component minor version
  * Updated SUSE version in Seamless Domain Join script
  * Updated Greengrass component workflow to get installed Agent version and update
    Agent only when the installed Agent version doesn't match with Greengrass
    component Agent version
  * Upgraded GoLang version that builds agent binaries with to 1.20.11
- Update Go version requirement to 1.21</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712318400">- Update to version 3.3.217.0
  * Add alternative outputs for agent package generation scripts
  * Add support for Oracle 8.8 &amp; 8.9, Rocky 8.8 &amp; 8.9,
    AlmaLinux 8.8 &amp; 8.9, and RHEL 8.9 &amp; 9.3
  * Fix flaky integration test
  * Fix setup-cli error code for non English systems
  * Set IPR creds expiry to 30 mins for ssm agent worker
  * Switch installer package manager from rpm to yum on OSes that support yum
  * Upgrade GoLang to version 1.21.8
- from version 3.3.131.0
  * Add integration tests for control channel and data channel module
  * Remove data channel and control channel acknowledgement
    functionality in MGS Interactor
- from version 3.2.2303.0
  * Add integration tests for control channel module
  * Revert data channel and control channel acknowledgement
    functionality in MGS Interactor
  * Update Greengrass component minor version to 1.2.4</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 3.3.551.0
  * Agent updater attempts yum install/uninstall before falling
    back to attempt with rpm
  * Updated golang.org/x/net from v0.19.0 to v0.26.0
  * Upgrade GoLang to version 1.21.11
  * Add IPv6 addresses for NTP and EC2Config to default DenyList
  * Update Distributor to only use Systems Manager APIs to fetch package contents
- from version 3.3.484.0
  * Update SSM-Setup-CLI logs related to checksum validation of latest version
- from version 3.3.418.0
  * Upgrade go-github version from v8 to v61
  * Increase timeouts in SSM-Setup-CLI
  * Fix darwin build issue in SSM-Setup-CLI
  * Fix the command builder bug to handle space char in input value
  * Fix an inaccurate log when validating allowDowngrade parameter during Agent update
  * Signing SSM Agent vended Windows executables
- from version 3.3.380.0
  * Update AWS GO SDK to v1.51.20
- from version 3.3.337.0
  * Remove yum as package manager in linux install/uninstall script
  * Verify TrustedInstaller status before posting WindowsUpdate
    information in aws:softwareInventory plugin</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730289600">- Update to version 3.3.1142.0
  * Fail windows update when installed version does not match
  * Reduced length of IMDS errors to shorter format
  * Increase the RunCommand timeout during the registration process for the on-prem instances
  * Add nil check when calling GetRepository content in aws:downloadContent
  * Worker process to exit if they are not successfully started and became idle
  * Fix bug where unforeseen failures cause time to be incorrectly displayed in RunCommand
  * Update GreenGrass component minor version to 1.3.0
  * Ensure agent thread always exit after the corresponding worker process exits
  * Fix IPC file filtering bug where usernames or session names containing
    tmp causes agent worker to not correctly receive IPC
  * Load directly from appconfig file when calling UpdateInstanceInformation
    during credential refresher
  * Use a single syscall for route table for health check IP
- from version 3.3.987.0
  * Update default session logging destination to none
  * Specify a minimum of TLS v1.2 in http client calls
  * Add web-socket heartbeat to detect connection drops in the web-socket
    for control and data channels sooner
  * Use exponential retry for document worker, increase retry interval
    and attempt count when reading IPC files
  * Add wait for cloud-init in the agent updater
  * Fix timeouts for update without yum endpoint connectivity
  * Change in orchestration directory removal process to reduce disk space usage
  * Fix Inventory detailed information invalid value check
  * Fix parsing issue with DomainJoin Plugin
  * Modify DomainJoin Plugin to use Kerberos REALM in username for RHEL and variants
  * Change the SUSE linux zypper commands to quiet mode for the DomainJoin Plugin
  * Move high volume info logs to debug level
  * Remove deprecated go coverage library (golang.org/x/tools/cmd/cover)
  * Add lock on session orchestration cleanup to prevent quadratic file
    system lookup for large volume session users
  * Upgrade GoLang to version 1.22.7
- from version 3.3.859.0
  * Updated snapcraft.yml specification
- from version 3.3.808.0
  * Agent updater attempts yum install/uninstall before
    falling back to attempt with rpm
  * Updated golang.org/x/net from v0.19.0 to v0.26.0
  * Upgrade GoLang to version 1.21.11
  * Add IPv6 addresses for NTP and EC2Config to default DenyList
  * Update Distributor to only use Systems Manager APIs to
    fetch package contents</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 3.3.1345.0
  * Revert "Update configurePackage to use fixed download method"
  * Revert "Use a single syscall for route table for health check IP"
- from version 3.3.1311.0
  * Add alternative to wmic to support Windows 2025
  * Add armv7 architecture support for greengrass component
  * Add support in ssm-setup-cli for standalone installation
    in on-premises environments
  * Fail ssm-setup-cli install command if agent config is not loadable
  * Implement S3 ownership verification as an optional parameter for plugins
  * Mark Session task as cancelled when MGS indicates that session is over
  * Update configurePackage to use fixed download method
  * Update Docker Engine version and use system environment
    variables in installation path
  * Update GreenGrass component minor version to 1.3.1
- from version 3.3.1230.0
  * Revert compatibility hook for future Windows versions as it
    increased CPU consumption for document execution on Windows.
  * Revert Increase RunCommand timeout during the registration
    process for the on-prem instances</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1737115200">- Update to version 3.3.1611.0 (bsc#1235575, CVE-2025-21613)
  * Update aws-sdk-go from 1.51.20 to 1.55.5
  * Update golang.org/x/crypto from 0.24.0 to 0.32.0
  * Update github.com/go-git/go-git/v5 from 5.12.0 to 5.13.1
  * Update golang.org/x/net from 0.26.0 to 0.34.0
  * Update golang.org/x/oauth2 from 0.0.0-20211005180243-6b3c2da341f1
    to 0.24.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741262400">- Update to version 3.3.1957.0
  * Fix TestDocumentWorkerCrash integration tests
  * Implement caching for platform data and refactor the code
    to use cached data if available
  * Replace Get-CimInstance commands with WMI alternatives for
    retrieving system info
  * Add configuration file and script to run the Argot static
    analyzer to check for dataflow and other security invariants
  * Updater to allow downgrade if current version is inactive
  * Allow Agent Updater to emit intermediate metrics during
    updates and add new Updater metrics
  * Agent setup cli verification to rely only on exit codes
  * Update SSM Agent public key to verify SSM-Setup-CLI binary signature
  * Update GPG keyring to verify SSM-Agent binary signature using SSM-Setup-CLI
  * Fix code branching within setupcli_data_integrity_linux.sh
  * Use powershell for simplified, updated and no prompt unzip in install.bat
  * Update build Golang version to 1.22.11
- from version 3.3.1802.0
  * Fix TestDocumentWorkerCrash integration tests
  * Implement caching for platform data and refactor the code
    to use cached data if available
  * Replace Get-CimInstance commands with WMI alternatives for
    retrieving system info
  * Add configuration file and script to run the Argot static analyzer
    to check for dataflow and other security invariants
  * Updater to allow downgrade if current version is inactive
  * Allow Agent Updater to emit intermediate metrics during updates
    and add new Updater metrics
  * Agent setup cli verification to rely only on exit codes
  * Update SSM Agent public key to verify SSM-Setup-CLI binary signature
  * Update GPG keyring to verify SSM-Agent binary signature using SSM-Setup-CLI
  * Fix code branching within setupcli_data_integrity_linux.sh
  * Use powershell for simplified, updated and no prompt unzip in install.bat
  * Update build Golang version to 1.22.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741348800">- Add patch to fix proxy bypass using IPv6 zone IDs in golang.org/x/net
  * CVE-2025-22870.patch (bsc#1238702, CVE-2025-22870)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744718400">- Update to version 3.3.2299.0
  * Allow custom hibernation max interval configuration
  * Refactor hibernation to fix ping leak and correct interval behavior
  * Remove dependency on s3:GetObject for aws:configurePackage plugin
  * Fix issue where ssm-setup-cli fails to detect whether agent is running
    or stopped in non-English locales
  * Fix comparison operator issue in aws:domainJoin script when executed
    in Ubuntu dash
  * Fix IPV6 address for IMDS in documentation and deny rule
  * Add hasHardenedACL check to avoid costly recursive hardening of the data
    directory on reboot
  * Update golang.org/x/crypto from v0.32.0 to v0.36.0
  * Update golang.org/x/net from v0.34.0 to v0.37.0
  * Update golang.org/x/sys from v0.29.0 to v0.31.0
  * Update golang.org/x/oauth2 from v0.24.0 to v0.28.0
  * Upgrade GoLang version from v1.22 to v1.23
  * Update Argot config and ensure client uses DisableHTTPDowngrade
  * Add unit tests in multiple modules
- Drop CVE-2025-22870.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Add CVE-2025-47913.patch to fix an SSH client process terminating
  when receiving an unexpected message type in response to a key
  listing or signing request (bsc#1253611, CVE-2025-47913)</changelog>
</package>
<package pkgid="d71c1c07a69c82aaa646ed2eedf09bdc7f188f984345f30c09bcdf33d08525e8917fada67aa6bb5deded7c70e4777d0754ab6354bc81cd36ed9fefb8168ce902" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.3.4624.0" rel="160000.1.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1767614400">- Update to version 3.3.3598.0
  * Allow Patch execution to persist across reboots not registered to SSM Agent
- from version 3.3.3572.0
  * Fix ENV_VAR interpolation to work correctly with parameter store value
  * Implement immediate retries for failed reply messages to MGS for RunCommand documents
  * Improve ssm-cli get-diagnostics command log output
  * Support DomainJoin endpoint for EU sovereign cloud
  * Support dualstack S3 endpoint for distributor packages
  * Upgrade Go version to 1.24.11</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1774526400">- Update to version 3.3.4108.0
  * Disable Go 1.25 container-aware GOMAXPROCS to prevent holding
    cgroup file descriptors open
  * Upgrade Go version to 1.25.8
- from version 3.3.3883.0
  * Document CommandWorkerBufferLimit config
  * Include package update in Dockerfile
  * Reduce CloudWatch event message length threshold
  * Upgrade Go version to 1.25.7
  * Update github.com/go-git/go-git/v5 to 5.16.5 (bsc#1258095, CVE-2026-25934)
  * Update greengrass version
- from version 3.3.3797.0
  * Update Golang version to 1.24.12
  * Updating golang.org/x/crypto from v0.37.0 to v0.47.0, golang.org/x/net
    from v0.39.0 to v0.48.0 and golang.org/x/sys from v0.32.0 to v0.40.0
    (bsc#1253611, CVE-2025-47913)
  * Categorize integration tests by adding new tags to split fast and slow ones
  * Fix bug where IP field being empty string and causing UII API failure
- Drop CVE-2025-47913.patch, merged upstream
- Raise minimum Go version to 1.25.8 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1774958400">- Update to version 3.3.4121.0
  * Add read-only version check prior to install and uninstall
    in case of occupied package manager locks
  * Add ANSI processing for CloudWatch and S3 log
  * Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3
    to fix CVE-2026-1229
- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14843)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776168000">- Update to version 3.3.4177.0
  * Add EnforceWorkspaceRootOwnership configuration to support disable
    hardening of agent workspace
  * Add reboot comment to Windows shutdown command for SSM Agent traceability
  * Update privilege access check to verify ownership and permissions
    of document state files</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776945600">- Update to version 3.3.4268.0
  * Add SSM Distributor support for Bottlerocket OS
  * Implement flush credentials command in ssm-cli
  * Log ec2messages access denied as debug instead of error to reduce log noise
  * Make credential refresher refresh cache quickly in case of credential flush
  * Make Greengrass component registration resilient with retry</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778587200">- Add CVE-2026-41506.patch to fix HTTP authentication credential
  leak when following redirects during smart-HTTP clone and fetch
  operations (bsc#1264952, CVE-2026-41506)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778587201">- Add CVE-2025-22869.patch to fix Denial of Service in the Key
  Exchange of golang.org/x/crypto/ssh (bsc#1239342, CVE-2025-22869)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779364800">- Add CVE-2026-25934.patch to fix improper verification of data integrity
  values for .pack and .idx files that can lead to the consumption of
  corrupted files (bsc#1258095, CVE-2026-25934)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779969600">- Update to version 3.3.4515.0
  * Bump golang.org/x/net from v0.48.0 to v0.53.0 (bsc#1266781, CVE-2026-39821)
  * Quit if sysprep failed and log its current state
  * Remove attached legacy cloudwatch plugin packages
  * Upgrade Go version to 1.25.10
  * Use BuildSafePath wherever it is applicable
- from version 3.3.4364.0
  * Add OOM killer protection to systemd service files
  * Apply more sanitation to file and registry inventory gatherers
  * Bump go-git to v5.17.1
  * Deprecate legacy cloudwatch plugin
  * Preserve network error details in credential refresher SSM API failures
  * Upgrade Go version to 1.25.9</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780488000">- Update to version 3.3.4624.0
  * Bump golang.org/x/crypto from v0.51.0 to v0.52.0 (bsc#1266200, CVE-2026-39827,
    CVE-2026-39828, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833,
    CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597,
    CVE-2026-46598)
  * Bump golang.org/x/net from v0.54.0 to v0.55.0
  * Enforce directory boundary in BuildSafePath
  * Fix visibility issue with Bottlerocket OS in document output
  * Update go-git from v5.17.1 to v5.19.1 (bsc#1264952, CVE-2026-41506), this
    also updates go-billy from v5.8.0 to v5.9.0 (bsc#1267332, CVE-2026-44740)
- Drop CVE-2025-22869.patch, merged upstream
- Drop CVE-2025-22870.patch, merged upstream
- Drop CVE-2025-47913.patch, merged upstream
- Drop CVE-2026-25934.patch, merged upstream
- Drop CVE-2026-41506.patch, merged upstream</changelog>
</package>
<package pkgid="5118fe34e76451f4db860adaf4e2d5a2d9c0bb25b9304fcc6c994cd42aefaa3fb9ecd365c66076cbde1995f968ec82d444d9076bd08ae4e70daa8e5226881d8d" name="amber-cli" arch="x86_64">
  <version epoch="0" ver="0.3.0+git20230728.955f78d" rel="bp160.1.15"/>
  <changelog author="aplanas@suse.com" date="1696334400">- Initial package version 0.3.0+git20230728.955f78d:
  * cassini- 9312 removed docker from TenantCLI (#88) (#89)
  * set MarkFlagRequired for update_tenant_settings (#86)
  * Add compiler flags recommended by SDLE (#85)
  * Add compiler flags recommended by SDLE (#84)
  * Update go mod file (#83)
  * Update policy name error message (#82)
  * added copyright message (#81)
  * Add validations for parameters of each command (#80)
  * Update go version to 1.20.4 (#74)
  * Fix issue with config file unavailability (#76)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696420800">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Update to BuildRequires: golang(API) &gt;= 1.20 matching go.mod</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.de&gt;" date="1699704000">- Override build date with SOURCE_DATE_EPOCH (boo#1047218)</changelog>
</package>
<package pkgid="9561be9ad409f73daa237d04b150c87f17478f5d1dbd98ea7750dd67a871006a7ace054c7547709eefb0e269413645b69b457347d708e892736313aa1a44ffda" name="amdctl" arch="x86_64">
  <version epoch="0" ver="0.11" rel="bp160.1.11"/>
  <changelog author="Felix Niederwanger &lt;felix.niederwanger@suse.com&gt;" date="1693483200">- Version 0.11
  New: NB states are displayed for the AMD family 14h (as documented in AMD's BIOS and Kernel Developer’s Guide).
  Fix: The right VID divider is 12.5 mA (as in BrazosTweaker for Windows).
  Tested on Lenovo x120e with AMD E-350.</changelog>
</package>
<package pkgid="5fd63c33d5c32b8e2c514c152fb0841f628b904ba2564459185ebb0e0caea3bf43cf835c3f799f33532487f41a29e8c8c2ba03772ba87539c6f4562ba86a368a" name="amdgpu_top" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="bp160.1.13"/>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1696593600">- Initial release</changelog>
  <changelog author="zzndb001@gmail.com" date="1697976000">- Update to version 0.2.1:
  * v0.2.1
  * add "-V" and "--version" options
  * update mail address
  * add git commit id to title for debug
  * gui: update dependencies
  * tui: clippy
  * gui: clippy
  * update libdrm_amdgpu_sys to v0.2.1
  * gui: add Power Profiles info to Device Info panel
  * Power Profiles
  * json: update Sensors::json
  * tui, gui: support GpuMetrics::V2_4 (for VanGogh APU &amp; Linux Kernel 6.6-rcX)
  * update to libdrm_amdgpu_sys v0.2.0
  * gui: remove duplicate PCIe Link Speed
  * docs: add sample.json
  * json: add PCIe Link to json_info
  * json: fix JsonApp::run, usage calculation requires previous results
  * lib: if MediaEngine usage in GpuActivity is `None` or `Some(0)`, use sum of fdinfo
  * update README.md
  * update help msg
  * lib, smi, tui, json: use spawn_update_index_thread
  * json: add amdgpu_top_version to output
  * lib, tui, gui, json: cleanup the code for vcn_unified
  * lib: update GpuActivity
  * lib: use ASIC_NAME for gpu_activity
  * json: full update
  * lib: update gpu_activity for GPUs not supporting `average_{gfx,umc,mm}_activity`
  * Revert "json, dump: add power_avg"
  * json: add version to JSON mode
  * json: add info to JSON mode
  * add `--apu, --select-apu` option
  * json: re-add `-s` option for JSON mode
  * json, dump: add power_avg
  * Added Solus install instructions
  * json: use map_or
  * update README.md
  * dump info in JSON format
  * update README.md
  * gui: fix typo ("mw" -&gt; "mv")
  * add Example of using JSON mode to README.md
  * add " (debug build)" to TITLE if debug build
  * lib, smi: cleanup
  * tui: update PerfCounterView and VramUsageView for multi-layers
  * update README.md
  * update README.md for about i18n</changelog>
  <changelog author="Erefd X &lt;zzndb001@gmail.com&gt;" date="1697976001">- Install docs and desktop files</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1721822400">- Update to version 0.9.0:
  * Too many changes to list
  * See https://github.com/Umio-Yasuno/amdgpu_top/compare/v0.2.1...v0.9.0
- Drop %cargo_install usage</changelog>
  <changelog author="Antonio Teixeira &lt;antonio.teixeira@suse.com&gt;" date="1725364800">- Update to version 0.9.1:
  * Rework libamdgpu_top and SMI mode, JSON mode to launch from
    suspended devices without waking them up.
  * Revert "json: update OutputJson for GpuMetrics"
    for output as raw values as possible
  * Do not scroll fdinfo list if proc len is less than 8</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1727006400">- Update to version 0.9.2
  * Support for suspended devices in TUI mode and GUI mode, if
    there are no active AMDGPU devices, amdgpu_top wake up a
    suspended device.
  * Add Activity view
  * Add Activity plot
  * Fix full_fdinfo_list
  * Persist show sidepanel state
  * Persist theme</changelog>
</package>
<package pkgid="7bc49498962d71568da628c593cc6410f1cf2093f71ebb1cbf2d9a2fa55cdc8a0ef2427bfd81fead96bfd5b00071d764f0f9b28866c346a3fd401d4a5adf13db" name="aml-devel" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="bp160.1.11"/>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1596715200">- Initial aml package</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1600257600">- Use %meson_build before calling %meson_install. The RPM macros
  changed in meson 0.55.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to 0.2.0
  * A kqueue backend has been added, run natively without epoll-shim</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1634817600">- Update to 0.2.1
  * epoll: Fix fd deletion</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to v0.2.2:
  * aml: Don't put the same item onto the event queue more than once</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1674475200">- Update to 0.3.0:
  * The time unit has been changed from milliseconds to microseconds
  * The global object registry has been replaced with weak references
  * It is now guaranteed that a callback will not be called after aml_stop().
  * Worker threads now keep references to work objects that are being
    executed. This ensures that they cannot be freed while they
    are being worked</changelog>
</package>
<package pkgid="f37c1367703f18a56efcffd1ec5679a442b72450a37fdfeb4a2827efcb136f7ad94bc12a0c1b1e25546a4ae9ed93d5d11cd399fdd22a4f309574851efafb6f72" name="amsynth" arch="x86_64">
  <version epoch="0" ver="1.13.4" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1606651200">- Update to version 1.12.2:
  * Fixed a regression in 1.12.0 that broke ALSA MIDI
    [gh#amsynth/amsynth#181].</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1631275200">- Do not build man pages on %ix86: pandoc does not exist on
  intel/i586.
- Do not recommend the -lang package: the autogenerated -lang
  package already has appropriate supplements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641643200">- Update to version 1.12.4:
  * Fixed lv2 .ttl syntax error - gh#amsynth/amsynth#199
- Changes from version 1.12.3:
  * Added PatriksBank04 and PatriksBank05 - gh#amsynth/amsynth#197
  * Fixed click when playing a note for the first time -
    gh#amsynth/amsynth#196
  * Stopped vendoring lv2 headers; install lv2-dev (or similar)
    via your package manager.
- New BuildRequries: pkgconfig(lv2) required to build lv2 plugin.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648209600">- skip pandoc for arm 32bit platforms as well</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1658059200">- Update to version 1.13.0
  * Fixed intermittent unexpected MIDI output in response to MIDI CC input.
  * Fixed VST plugin UI updates in response to host parameter changes.
  * Added HiDPI scaling support to VST plugin UI.
  * Added version info to plugin pop-up menu.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674302400">- Update to version 1.13.1:
  * Fixed a crash when parsing XSettings on some systems
    (gh#amsynth/amsynth#221).</changelog>
  <changelog author="munix9@googlemail.com" date="1674820800">- Switch to the full source code archive to get the missing
  data files for amsynth.lv2</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1676376000">- Update to version 1.13.2:
  * Fixed a packaging error that caused preset banks to be omitted.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713182400">- Update to version 1.13.3:
  * Fixed an error when building DSSI GUI with GCC 14 or Clang.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 1.13.4:
  * Fixed "reference to 'filesystem' is ambiguous" build error
    [gh#amsynth/amsynth#233].
- Drop use of %suse_update_desktop_files.
- Run `make check` as part of %check.
- Drop snippets supporting obsolete openSUSE versions.</changelog>
</package>
<package pkgid="13a3d1a713fd3364bee5f1fddc7ff206e201bb3a159b8f2ac35397a188fe31f823a0b11cdffe4945491496af77a69217fecb7af977e9969baa731fc1cfc8ef3c" name="amsynth-lang" arch="noarch">
  <version epoch="0" ver="1.13.4" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1606651200">- Update to version 1.12.2:
  * Fixed a regression in 1.12.0 that broke ALSA MIDI
    [gh#amsynth/amsynth#181].</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1631275200">- Do not build man pages on %ix86: pandoc does not exist on
  intel/i586.
- Do not recommend the -lang package: the autogenerated -lang
  package already has appropriate supplements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641643200">- Update to version 1.12.4:
  * Fixed lv2 .ttl syntax error - gh#amsynth/amsynth#199
- Changes from version 1.12.3:
  * Added PatriksBank04 and PatriksBank05 - gh#amsynth/amsynth#197
  * Fixed click when playing a note for the first time -
    gh#amsynth/amsynth#196
  * Stopped vendoring lv2 headers; install lv2-dev (or similar)
    via your package manager.
- New BuildRequries: pkgconfig(lv2) required to build lv2 plugin.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648209600">- skip pandoc for arm 32bit platforms as well</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1658059200">- Update to version 1.13.0
  * Fixed intermittent unexpected MIDI output in response to MIDI CC input.
  * Fixed VST plugin UI updates in response to host parameter changes.
  * Added HiDPI scaling support to VST plugin UI.
  * Added version info to plugin pop-up menu.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674302400">- Update to version 1.13.1:
  * Fixed a crash when parsing XSettings on some systems
    (gh#amsynth/amsynth#221).</changelog>
  <changelog author="munix9@googlemail.com" date="1674820800">- Switch to the full source code archive to get the missing
  data files for amsynth.lv2</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1676376000">- Update to version 1.13.2:
  * Fixed a packaging error that caused preset banks to be omitted.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713182400">- Update to version 1.13.3:
  * Fixed an error when building DSSI GUI with GCC 14 or Clang.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 1.13.4:
  * Fixed "reference to 'filesystem' is ambiguous" build error
    [gh#amsynth/amsynth#233].
- Drop use of %suse_update_desktop_files.
- Run `make check` as part of %check.
- Drop snippets supporting obsolete openSUSE versions.</changelog>
</package>
<package pkgid="0c081d15992178839c5e3117cc2ec736138e2e1241e0ac640344a38c5338ebe1bcdf8087db515959ff634caa7b8598c59d0757dbfb917d4954ac906017429654" name="amsynth-plugin-dssi" arch="x86_64">
  <version epoch="0" ver="1.13.4" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1606651200">- Update to version 1.12.2:
  * Fixed a regression in 1.12.0 that broke ALSA MIDI
    [gh#amsynth/amsynth#181].</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1631275200">- Do not build man pages on %ix86: pandoc does not exist on
  intel/i586.
- Do not recommend the -lang package: the autogenerated -lang
  package already has appropriate supplements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641643200">- Update to version 1.12.4:
  * Fixed lv2 .ttl syntax error - gh#amsynth/amsynth#199
- Changes from version 1.12.3:
  * Added PatriksBank04 and PatriksBank05 - gh#amsynth/amsynth#197
  * Fixed click when playing a note for the first time -
    gh#amsynth/amsynth#196
  * Stopped vendoring lv2 headers; install lv2-dev (or similar)
    via your package manager.
- New BuildRequries: pkgconfig(lv2) required to build lv2 plugin.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648209600">- skip pandoc for arm 32bit platforms as well</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1658059200">- Update to version 1.13.0
  * Fixed intermittent unexpected MIDI output in response to MIDI CC input.
  * Fixed VST plugin UI updates in response to host parameter changes.
  * Added HiDPI scaling support to VST plugin UI.
  * Added version info to plugin pop-up menu.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674302400">- Update to version 1.13.1:
  * Fixed a crash when parsing XSettings on some systems
    (gh#amsynth/amsynth#221).</changelog>
  <changelog author="munix9@googlemail.com" date="1674820800">- Switch to the full source code archive to get the missing
  data files for amsynth.lv2</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1676376000">- Update to version 1.13.2:
  * Fixed a packaging error that caused preset banks to be omitted.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713182400">- Update to version 1.13.3:
  * Fixed an error when building DSSI GUI with GCC 14 or Clang.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 1.13.4:
  * Fixed "reference to 'filesystem' is ambiguous" build error
    [gh#amsynth/amsynth#233].
- Drop use of %suse_update_desktop_files.
- Run `make check` as part of %check.
- Drop snippets supporting obsolete openSUSE versions.</changelog>
</package>
<package pkgid="62623a9a1df7f7c30faa8212bbefd06686fcb47e309a98f5c2aa47aba76b5f5ac11835c9ce4414ac6b27a45da84917622bcde8eedcec7bb997f84f9651d132c4" name="amsynth-plugin-lv2" arch="x86_64">
  <version epoch="0" ver="1.13.4" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1606651200">- Update to version 1.12.2:
  * Fixed a regression in 1.12.0 that broke ALSA MIDI
    [gh#amsynth/amsynth#181].</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1631275200">- Do not build man pages on %ix86: pandoc does not exist on
  intel/i586.
- Do not recommend the -lang package: the autogenerated -lang
  package already has appropriate supplements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641643200">- Update to version 1.12.4:
  * Fixed lv2 .ttl syntax error - gh#amsynth/amsynth#199
- Changes from version 1.12.3:
  * Added PatriksBank04 and PatriksBank05 - gh#amsynth/amsynth#197
  * Fixed click when playing a note for the first time -
    gh#amsynth/amsynth#196
  * Stopped vendoring lv2 headers; install lv2-dev (or similar)
    via your package manager.
- New BuildRequries: pkgconfig(lv2) required to build lv2 plugin.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648209600">- skip pandoc for arm 32bit platforms as well</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1658059200">- Update to version 1.13.0
  * Fixed intermittent unexpected MIDI output in response to MIDI CC input.
  * Fixed VST plugin UI updates in response to host parameter changes.
  * Added HiDPI scaling support to VST plugin UI.
  * Added version info to plugin pop-up menu.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674302400">- Update to version 1.13.1:
  * Fixed a crash when parsing XSettings on some systems
    (gh#amsynth/amsynth#221).</changelog>
  <changelog author="munix9@googlemail.com" date="1674820800">- Switch to the full source code archive to get the missing
  data files for amsynth.lv2</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1676376000">- Update to version 1.13.2:
  * Fixed a packaging error that caused preset banks to be omitted.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713182400">- Update to version 1.13.3:
  * Fixed an error when building DSSI GUI with GCC 14 or Clang.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 1.13.4:
  * Fixed "reference to 'filesystem' is ambiguous" build error
    [gh#amsynth/amsynth#233].
- Drop use of %suse_update_desktop_files.
- Run `make check` as part of %check.
- Drop snippets supporting obsolete openSUSE versions.</changelog>
</package>
<package pkgid="a15e0a7205c03d9a096b581bf9aa9fa6d400124969f971c31145e485f15c9073ba07028db0560cee3a121409837524d04980ce42efbb77f1db8c519720ca42d3" name="amsynth-plugin-vst" arch="x86_64">
  <version epoch="0" ver="1.13.4" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1606651200">- Update to version 1.12.2:
  * Fixed a regression in 1.12.0 that broke ALSA MIDI
    [gh#amsynth/amsynth#181].</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1631275200">- Do not build man pages on %ix86: pandoc does not exist on
  intel/i586.
- Do not recommend the -lang package: the autogenerated -lang
  package already has appropriate supplements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641643200">- Update to version 1.12.4:
  * Fixed lv2 .ttl syntax error - gh#amsynth/amsynth#199
- Changes from version 1.12.3:
  * Added PatriksBank04 and PatriksBank05 - gh#amsynth/amsynth#197
  * Fixed click when playing a note for the first time -
    gh#amsynth/amsynth#196
  * Stopped vendoring lv2 headers; install lv2-dev (or similar)
    via your package manager.
- New BuildRequries: pkgconfig(lv2) required to build lv2 plugin.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1648209600">- skip pandoc for arm 32bit platforms as well</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1658059200">- Update to version 1.13.0
  * Fixed intermittent unexpected MIDI output in response to MIDI CC input.
  * Fixed VST plugin UI updates in response to host parameter changes.
  * Added HiDPI scaling support to VST plugin UI.
  * Added version info to plugin pop-up menu.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674302400">- Update to version 1.13.1:
  * Fixed a crash when parsing XSettings on some systems
    (gh#amsynth/amsynth#221).</changelog>
  <changelog author="munix9@googlemail.com" date="1674820800">- Switch to the full source code archive to get the missing
  data files for amsynth.lv2</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1676376000">- Update to version 1.13.2:
  * Fixed a packaging error that caused preset banks to be omitted.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713182400">- Update to version 1.13.3:
  * Fixed an error when building DSSI GUI with GCC 14 or Clang.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 1.13.4:
  * Fixed "reference to 'filesystem' is ambiguous" build error
    [gh#amsynth/amsynth#233].
- Drop use of %suse_update_desktop_files.
- Run `make check` as part of %check.
- Drop snippets supporting obsolete openSUSE versions.</changelog>
</package>
<package pkgid="c65994644d0fdd0d6beac200aefe2029da3e98251467b05fc0a48a14f29ab128ea5353b79e6e261d74c91111ffc39e7ddefd8fb0df7e097a444b35054085a730" name="amtterm" arch="x86_64">
  <version epoch="0" ver="1.7" rel="bp160.1.11"/>
  <changelog author="jeffm@suse.com" date="1336651200">- Update to 1.3
  - Patched to use GTK3.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1336737600">- run spec-cleaner on spec file</changelog>
  <changelog author="mrdocs@opensuse.org" date="1336737601">- add vte-devel to fix build on Factory</changelog>
  <changelog author="mrdocs@opensuse.org" date="1336824000">- put the BuildRequires in the right place</changelog>
  <changelog author="sreeves@suse.com" date="1380888000">- Add amtterm-git0ece513.patch. (Upstream git commits)
  * Decode 0x29 message
  * git release - also push tage</changelog>
  <changelog author="kkaempf@suse.com" date="1429272000">- Don't build gamt for openSUSE &gt; 13.1, incompatible vte api.</changelog>
  <changelog author="plinnell@opensuse.org" date="1429444800">- fix license tag</changelog>
  <changelog author="tiwai@suse.de" date="1470139200">- Update to 1.4:
  including the support code 0x29 encountered in redirection
- Deprecate amtterm-git0ece513.patch
- Replace amtterm-gtk3 with the upstream patch amtterm-gtk3.patch
- Backported from the upstream git repo for minor fixes
  amtterm-note-about-amt90.patch
  amtterm-fix-version.patch
  amtterm-fixup-indentation.patch
- Backported from the upstream git repo to add amttool-wsman:
  amtterm-wsman.patch
  amtterm-wsman-password.patch
- Clean up spec file, fix builds with SLE11-SP4 and
  openSUSE-Leap-42.1</changelog>
  <changelog author="mchandras@suse.de" date="1532347200">- Version bump to 1.6. Some of the changes are
  * move wsman stuff
  * switch to vte 2.91
  * fix version
  * Add note about AMT 9.0
  * switch over to use gtk3
- Remove patches which have made it upstream
  * amtterm-fix-version.patch
  * amtterm-fixup-indentation.patch
  * amtterm-git0ece513.patch
  * amtterm-gtk3.patch
  * amtterm-note-about-amt90.patch
  * amtterm-wsman-password.patch
  * amtterm-wsman.patch
- spec-cleaner fixes
- Split graphical UI to a separate subpackage</changelog>
  <changelog author="hare@suse.de" date="1650628800">- Version bump to 1.7 (bsc#1198760). Some changes are
  * Update authentication to support TLS and AMT 11.0.
  * Add amtider tool to support IDE-redirection
  * add note for newer machines to amtterm manpage
  * fix memory leak
  * fix typo in man page</changelog>
</package>
<package pkgid="1ff01107f65ae16343cad45da48a485363f3646bd29e6155338be371c21a3d8e250234671472b50414de07151a19f2a2b48130127de814c24169d028af4b4ade" name="amtterm-gtk" arch="x86_64">
  <version epoch="0" ver="1.7" rel="bp160.1.11"/>
  <changelog author="jeffm@suse.com" date="1336651200">- Update to 1.3
  - Patched to use GTK3.</changelog>
  <changelog author="mrdocs@opensuse.org" date="1336737600">- run spec-cleaner on spec file</changelog>
  <changelog author="mrdocs@opensuse.org" date="1336737601">- add vte-devel to fix build on Factory</changelog>
  <changelog author="mrdocs@opensuse.org" date="1336824000">- put the BuildRequires in the right place</changelog>
  <changelog author="sreeves@suse.com" date="1380888000">- Add amtterm-git0ece513.patch. (Upstream git commits)
  * Decode 0x29 message
  * git release - also push tage</changelog>
  <changelog author="kkaempf@suse.com" date="1429272000">- Don't build gamt for openSUSE &gt; 13.1, incompatible vte api.</changelog>
  <changelog author="plinnell@opensuse.org" date="1429444800">- fix license tag</changelog>
  <changelog author="tiwai@suse.de" date="1470139200">- Update to 1.4:
  including the support code 0x29 encountered in redirection
- Deprecate amtterm-git0ece513.patch
- Replace amtterm-gtk3 with the upstream patch amtterm-gtk3.patch
- Backported from the upstream git repo for minor fixes
  amtterm-note-about-amt90.patch
  amtterm-fix-version.patch
  amtterm-fixup-indentation.patch
- Backported from the upstream git repo to add amttool-wsman:
  amtterm-wsman.patch
  amtterm-wsman-password.patch
- Clean up spec file, fix builds with SLE11-SP4 and
  openSUSE-Leap-42.1</changelog>
  <changelog author="mchandras@suse.de" date="1532347200">- Version bump to 1.6. Some of the changes are
  * move wsman stuff
  * switch to vte 2.91
  * fix version
  * Add note about AMT 9.0
  * switch over to use gtk3
- Remove patches which have made it upstream
  * amtterm-fix-version.patch
  * amtterm-fixup-indentation.patch
  * amtterm-git0ece513.patch
  * amtterm-gtk3.patch
  * amtterm-note-about-amt90.patch
  * amtterm-wsman-password.patch
  * amtterm-wsman.patch
- spec-cleaner fixes
- Split graphical UI to a separate subpackage</changelog>
  <changelog author="hare@suse.de" date="1650628800">- Version bump to 1.7 (bsc#1198760). Some changes are
  * Update authentication to support TLS and AMT 11.0.
  * Add amtider tool to support IDE-redirection
  * add note for newer machines to amtterm manpage
  * fix memory leak
  * fix typo in man page</changelog>
</package>
<package pkgid="ba425fa0f3da80e186c3ff9c895a54d91fe1e2517c3c409fe81a8c302828adf0978fd36b6c7fc445a28ecdaa576adb12077598a0aaf19288d1948e991fbf4110" name="analitza" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * analyzer simplificator: Account for unary roots</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * analyzer simplificator: Account for unary roots
  * declarative: Make AnalitzaWrapper a bit more resilient</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744718400">- Drop BuildRequires: pkgconfig(glew) as it is not used for build
  (glew is only needed for win32).</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="fc3facd4f86d1ec90a6516d71b573efbfbeaf68266f080c702179d59e52175e25756685dfd47a3f36a1c06a6d97afac71e112270b0c1be36538a1480f5b99b9d" name="analitza-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * analyzer simplificator: Account for unary roots</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * analyzer simplificator: Account for unary roots
  * declarative: Make AnalitzaWrapper a bit more resilient</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744718400">- Drop BuildRequires: pkgconfig(glew) as it is not used for build
  (glew is only needed for win32).</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="ff9f4d76381607c0b94677b2eb60274a4d23a2d61a6c337b53847d823507198d422f9428b563e291221407832c62df4e80a8aad28d1b5489eb5be045e0daf893" name="analitza-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * analyzer simplificator: Account for unary roots</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * analyzer simplificator: Account for unary roots
  * declarative: Make AnalitzaWrapper a bit more resilient</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744718400">- Drop BuildRequires: pkgconfig(glew) as it is not used for build
  (glew is only needed for win32).</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="44c50b04d844059802ecf5be01a006231e9cb659197e25316a69c84490ec5c08c8adb451e922aaa5e26aa17e1ea36fba003ab9299915affa1a5f2f170ad2dd01" name="ancient" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676289600">- Initial package, version 2.0.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1689076800">- Update to version 2.1.0
  Added new decompressors:
  * Compact (Unix)
  * Compress (Unix)
  * Freeze (Unix)
  * LOB Compressor a.k.a. multipac. all 6 modes (Atari)
  * Pack (Unix)
  * Quasijarus Strong compression (FreeBSD)
  * PX20 support - fast bypass of passwords (Amiga)
  * DMS improvements for broken files - auto fixup (Amiga)
  * XPK PPMQ (This concludes XPK, yay!) (Amiga)
  * SCO Compress LZH (Unix)
  Other improvements:
  * XPK Unimplemented for detecting missing-formats
  * Test Framework incl. test files
  * Memory safety fixes
  * Improved commandline
  * Zip &amp; Lzh cleanup (they are not part of the build anymore)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699531200">- update to 2.1.1:
  * Small hotfix release:
  * Removing test-files from dist
  * Making builds/prs gated on warnings. Added VS2022 to the gate</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1717934400">- update to 2.2.0:
  * Fixed a potential security issue where a malicious file can lead
    to undefined behavior and double free (fuzzing, thanks Sagamusix)
  * Fixed cases where malicious files could take a long time to fail (fuzzing)
  * Added more sanity checking and operations through index-checked
    containers instead of raw pointers
  * Added support for RNC2 old bitstream
  * Added support for VIC2 and Vice formats (Amiga)
  * Added support for clone-formats (changed ids)
  * Refactored SHR3 and SHRI to be a single implementation</changelog>
</package>
<package pkgid="ada11399682ea51d380dbe82cb030d6db4a2d6527efa6e4ddd92ebcfbedeeb2c5e39f537b671f501e338ea8886363ad31774c6ffd5b3ae08c9022b7085a8a794" name="ancient-devel" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676289600">- Initial package, version 2.0.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1689076800">- Update to version 2.1.0
  Added new decompressors:
  * Compact (Unix)
  * Compress (Unix)
  * Freeze (Unix)
  * LOB Compressor a.k.a. multipac. all 6 modes (Atari)
  * Pack (Unix)
  * Quasijarus Strong compression (FreeBSD)
  * PX20 support - fast bypass of passwords (Amiga)
  * DMS improvements for broken files - auto fixup (Amiga)
  * XPK PPMQ (This concludes XPK, yay!) (Amiga)
  * SCO Compress LZH (Unix)
  Other improvements:
  * XPK Unimplemented for detecting missing-formats
  * Test Framework incl. test files
  * Memory safety fixes
  * Improved commandline
  * Zip &amp; Lzh cleanup (they are not part of the build anymore)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699531200">- update to 2.1.1:
  * Small hotfix release:
  * Removing test-files from dist
  * Making builds/prs gated on warnings. Added VS2022 to the gate</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1717934400">- update to 2.2.0:
  * Fixed a potential security issue where a malicious file can lead
    to undefined behavior and double free (fuzzing, thanks Sagamusix)
  * Fixed cases where malicious files could take a long time to fail (fuzzing)
  * Added more sanity checking and operations through index-checked
    containers instead of raw pointers
  * Added support for RNC2 old bitstream
  * Added support for VIC2 and Vice formats (Amiga)
  * Added support for clone-formats (changed ids)
  * Refactored SHR3 and SHRI to be a single implementation</changelog>
</package>
<package pkgid="539ffffb9f763471aad815b877fa57a75d763317614721a2aea157eec7fcf85e6099bbdcbe029241a824f4047fd82275c775445b55fbc227759cfa9056856c5a" name="android-file-transfer-linux" arch="x86_64">
  <version epoch="0" ver="4.3.0~git.20240730T195303.cf7036c7f7df" rel="bp160.1.15"/>
  <changelog author="llyyr &lt;llyyr.public@gmail.com&gt;" date="1678708800">- Initial package at 4.3.0~git.20221105T214638.9967dec</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1680264000">- Add fix-missing-include.patch: Fix missing include exposed by gcc
  13.
- Switch service to explicit git commit instead of master, and
  switch to obs_scm and manual run, tar_scm and disabledrun
  are deprecated.</changelog>
  <changelog author="llyyr@yukari.in" date="1726660800">- fix-missing-include.patch: remove patch, fixed upstream
- Update to version 4.3.0~git.20240730T195303.cf7036c7f7df:
  * add get-id command to cli
  * check that GetDevicePropValue is supported before calling it
  * drop old ${VERSION} variable, use base version from readme and annotate with git if it's possible.
  * update checkout action to v4
  * use execute_process instead of exec_program
  * update pybind cmake files
  * fix macOS spelling
  * remove long version string
  * remove CFBundleGetInfoString
  * fix GH actions
  * fix empty version used for plist generation
  * brew cask install -&gt; brew install --cask
  * add SetSize and set both st_size and st_blocks
  * Fix non-empty directory removal, return ENOTEMPTY
  * bump version to 4.4
  * check ref_type and build release artefacts
  * bump ubuntu version to 20.04
  * do not proceed if -h/--help passed on the command line
  * provide uid/gid for stat structure
  * fix vendor/product filtering
  * bump minimal cmake version to 3.5
  * fix no MPT device found message box
  * do not compile python wrapper for macosx
  * add help about -D
  * rework option parser a bit
  * rename fuse_ll to fuse
  * Fix build with GCC 13 (#330)</changelog>
</package>
<package pkgid="5df939ca09cd247248886d4ac0ca0f8ac985dc2c50223fb7390d2f07b619b908fef5406fa5b452143e513d0f26b23127e51b2b1eb2c67a786c973408efb2c878" name="android-tools" arch="x86_64">
  <version epoch="0" ver="35.0.2" rel="bp160.1.1"/>
  <changelog author="munix9@googlemail.com" date="1710590400">- Use custom %python3_fix_shebang_path macro for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1711108800">- Update to version 34.0.5
  * adb
  - Previously, adb responded with a successful code when wireless
    pairing fails. Resolved this by returning a failure code (1) and
    user-facing error (error: protocol fault (couldn't read status
    message...)). echo $? now reports 1.
  - adb wait-for-disconnect is now operational for non-USB
    (wireless debugging).
  - Added new DbC interface for future support of ChromeOS over adb.
  * fastboot
  - Fixed flashall on Pixel 3 devices.
- Remove fix-add-make_f2fs-tool-for-fastboot.patch and
  fix-add-sload_f2fs-tool.patch (merged upstream)</changelog>
  <changelog author="munix9@googlemail.com" date="1714305600">- Update to version 35.0.1
  * adb
  - Switch to libusb as the default on Linux issue #270205252.
  - Fix adb startup on hosts without USB.
  - Fix adb hangs caused by USB devices incorrectly reporting
    zero-length descriptors issue #302212871.
  - Fix return code of adb shell when device disconnects
    issue #321787891.
  * fastboot
  - Limit the maximum size of the incoming packet queue.
  - Remove bottlenecks that previously limited download speeds
    to around 120MB/s. Now fastboot can saturate a SuperSpeed+
    bus and achieve speeds up to 980MB/s, depending on the device.</changelog>
  <changelog author="olaf@aepfle.de" date="1719662400">- Use clang15 to fix build in SLE15</changelog>
  <changelog author="munix9@googlemail.com" date="1723896000">- Fix for Factory/TW: Add 'BuildRequires: pkgconfig(zlib)'</changelog>
  <changelog author="munix9@googlemail.com" date="1724932800">- Update to version 35.0.2
  * adb
  - Fix openscreen mDNS backend bug bringing down server on
    truncated query issue #294120933.
  - Make openscreen mDNS backend work on macOS.
  - Make openscreen mDNS backend default on all platforms.
  - Support to detect USB SuperSpeed+ (current and negotiated
    speeds) for diagnostic purposes.
  - Graceful shutdown: Release all USB interfaces on shutdown
    (all OSes).
  * CMake: Add option to link libusb with libudev
  * patches/adb: Combine similar patch to workaround nullability
    specifier
  * CMake: Add option to use bundled libusb library
  * CMake: Add option to use system fmt library
  * vendor: Don't use absolute dir for mkbootimg symlink
  * vendor: mkbootimg: Use builtin ${CMAKE_INSTALL_BINDIR} instead
    of relative bin
  * vendor: Remove unused native submodule
  * vendor: Remove unused incremental_delivery submodule
  * CMake: Remove leftovers after base submodule removal
  * Remove unused patch for libandroidfw
  * Remove libandroidfw: it was never used
  * CMake: Install adb man page
  * boringssl: Workaround compiler error with gcc-14 and _Generic
- Remove man-pages.tar.gz, use upstream man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1724932801">- Fix build on i586.</changelog>
  <changelog author="olaf@aepfle.de" date="1727006400">- remove adb from bash-completion package for SLE15 because it is
  still part of bash-completion itself
- Use specific python versions for all SLE15 variants
- Require protobuf &gt;= 21 until earlier variants are supported again</changelog>
  <changelog author="munix9@googlemail.com" date="1729425600">- Fix build for Leap 16.0
- Add 'Provides: bundled(...)' where appropriate
- Clean up spec file</changelog>
  <changelog author="munix9@googlemail.com" date="1730808000">- Exclude ppc ppc64 and ppc64le: Bundled boringssl doesn't support
  the big endian architectures and dropped ppc64le support
- Simplify python3 requirements
- Simplify fix-install-completion.patch</changelog>
</package>
<package pkgid="749964e8e06aba82f16394274833e83664edb38f66aac7f984ddc1c5c6ff9bc674a472962bd978126ab7eca5e982f597c93014128e7419113e33637fe5ae45fb" name="android-tools-bash-completion" arch="noarch">
  <version epoch="0" ver="35.0.2" rel="bp160.1.1"/>
  <changelog author="munix9@googlemail.com" date="1710590400">- Use custom %python3_fix_shebang_path macro for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1711108800">- Update to version 34.0.5
  * adb
  - Previously, adb responded with a successful code when wireless
    pairing fails. Resolved this by returning a failure code (1) and
    user-facing error (error: protocol fault (couldn't read status
    message...)). echo $? now reports 1.
  - adb wait-for-disconnect is now operational for non-USB
    (wireless debugging).
  - Added new DbC interface for future support of ChromeOS over adb.
  * fastboot
  - Fixed flashall on Pixel 3 devices.
- Remove fix-add-make_f2fs-tool-for-fastboot.patch and
  fix-add-sload_f2fs-tool.patch (merged upstream)</changelog>
  <changelog author="munix9@googlemail.com" date="1714305600">- Update to version 35.0.1
  * adb
  - Switch to libusb as the default on Linux issue #270205252.
  - Fix adb startup on hosts without USB.
  - Fix adb hangs caused by USB devices incorrectly reporting
    zero-length descriptors issue #302212871.
  - Fix return code of adb shell when device disconnects
    issue #321787891.
  * fastboot
  - Limit the maximum size of the incoming packet queue.
  - Remove bottlenecks that previously limited download speeds
    to around 120MB/s. Now fastboot can saturate a SuperSpeed+
    bus and achieve speeds up to 980MB/s, depending on the device.</changelog>
  <changelog author="olaf@aepfle.de" date="1719662400">- Use clang15 to fix build in SLE15</changelog>
  <changelog author="munix9@googlemail.com" date="1723896000">- Fix for Factory/TW: Add 'BuildRequires: pkgconfig(zlib)'</changelog>
  <changelog author="munix9@googlemail.com" date="1724932800">- Update to version 35.0.2
  * adb
  - Fix openscreen mDNS backend bug bringing down server on
    truncated query issue #294120933.
  - Make openscreen mDNS backend work on macOS.
  - Make openscreen mDNS backend default on all platforms.
  - Support to detect USB SuperSpeed+ (current and negotiated
    speeds) for diagnostic purposes.
  - Graceful shutdown: Release all USB interfaces on shutdown
    (all OSes).
  * CMake: Add option to link libusb with libudev
  * patches/adb: Combine similar patch to workaround nullability
    specifier
  * CMake: Add option to use bundled libusb library
  * CMake: Add option to use system fmt library
  * vendor: Don't use absolute dir for mkbootimg symlink
  * vendor: mkbootimg: Use builtin ${CMAKE_INSTALL_BINDIR} instead
    of relative bin
  * vendor: Remove unused native submodule
  * vendor: Remove unused incremental_delivery submodule
  * CMake: Remove leftovers after base submodule removal
  * Remove unused patch for libandroidfw
  * Remove libandroidfw: it was never used
  * CMake: Install adb man page
  * boringssl: Workaround compiler error with gcc-14 and _Generic
- Remove man-pages.tar.gz, use upstream man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1724932801">- Fix build on i586.</changelog>
  <changelog author="olaf@aepfle.de" date="1727006400">- remove adb from bash-completion package for SLE15 because it is
  still part of bash-completion itself
- Use specific python versions for all SLE15 variants
- Require protobuf &gt;= 21 until earlier variants are supported again</changelog>
  <changelog author="munix9@googlemail.com" date="1729425600">- Fix build for Leap 16.0
- Add 'Provides: bundled(...)' where appropriate
- Clean up spec file</changelog>
  <changelog author="munix9@googlemail.com" date="1730808000">- Exclude ppc ppc64 and ppc64le: Bundled boringssl doesn't support
  the big endian architectures and dropped ppc64le support
- Simplify python3 requirements
- Simplify fix-install-completion.patch</changelog>
</package>
<package pkgid="3973ff7682064a86acb7523d877f2955b361dd8099d2a65662df8912a25dd293c71f23b86a86c3a58cbb145c7ee3c38e0f47604b3feae316f491077190b633b6" name="android-tools-mkbootimg" arch="noarch">
  <version epoch="0" ver="35.0.2" rel="bp160.1.1"/>
  <changelog author="munix9@googlemail.com" date="1710590400">- Use custom %python3_fix_shebang_path macro for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1711108800">- Update to version 34.0.5
  * adb
  - Previously, adb responded with a successful code when wireless
    pairing fails. Resolved this by returning a failure code (1) and
    user-facing error (error: protocol fault (couldn't read status
    message...)). echo $? now reports 1.
  - adb wait-for-disconnect is now operational for non-USB
    (wireless debugging).
  - Added new DbC interface for future support of ChromeOS over adb.
  * fastboot
  - Fixed flashall on Pixel 3 devices.
- Remove fix-add-make_f2fs-tool-for-fastboot.patch and
  fix-add-sload_f2fs-tool.patch (merged upstream)</changelog>
  <changelog author="munix9@googlemail.com" date="1714305600">- Update to version 35.0.1
  * adb
  - Switch to libusb as the default on Linux issue #270205252.
  - Fix adb startup on hosts without USB.
  - Fix adb hangs caused by USB devices incorrectly reporting
    zero-length descriptors issue #302212871.
  - Fix return code of adb shell when device disconnects
    issue #321787891.
  * fastboot
  - Limit the maximum size of the incoming packet queue.
  - Remove bottlenecks that previously limited download speeds
    to around 120MB/s. Now fastboot can saturate a SuperSpeed+
    bus and achieve speeds up to 980MB/s, depending on the device.</changelog>
  <changelog author="olaf@aepfle.de" date="1719662400">- Use clang15 to fix build in SLE15</changelog>
  <changelog author="munix9@googlemail.com" date="1723896000">- Fix for Factory/TW: Add 'BuildRequires: pkgconfig(zlib)'</changelog>
  <changelog author="munix9@googlemail.com" date="1724932800">- Update to version 35.0.2
  * adb
  - Fix openscreen mDNS backend bug bringing down server on
    truncated query issue #294120933.
  - Make openscreen mDNS backend work on macOS.
  - Make openscreen mDNS backend default on all platforms.
  - Support to detect USB SuperSpeed+ (current and negotiated
    speeds) for diagnostic purposes.
  - Graceful shutdown: Release all USB interfaces on shutdown
    (all OSes).
  * CMake: Add option to link libusb with libudev
  * patches/adb: Combine similar patch to workaround nullability
    specifier
  * CMake: Add option to use bundled libusb library
  * CMake: Add option to use system fmt library
  * vendor: Don't use absolute dir for mkbootimg symlink
  * vendor: mkbootimg: Use builtin ${CMAKE_INSTALL_BINDIR} instead
    of relative bin
  * vendor: Remove unused native submodule
  * vendor: Remove unused incremental_delivery submodule
  * CMake: Remove leftovers after base submodule removal
  * Remove unused patch for libandroidfw
  * Remove libandroidfw: it was never used
  * CMake: Install adb man page
  * boringssl: Workaround compiler error with gcc-14 and _Generic
- Remove man-pages.tar.gz, use upstream man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1724932801">- Fix build on i586.</changelog>
  <changelog author="olaf@aepfle.de" date="1727006400">- remove adb from bash-completion package for SLE15 because it is
  still part of bash-completion itself
- Use specific python versions for all SLE15 variants
- Require protobuf &gt;= 21 until earlier variants are supported again</changelog>
  <changelog author="munix9@googlemail.com" date="1729425600">- Fix build for Leap 16.0
- Add 'Provides: bundled(...)' where appropriate
- Clean up spec file</changelog>
  <changelog author="munix9@googlemail.com" date="1730808000">- Exclude ppc ppc64 and ppc64le: Bundled boringssl doesn't support
  the big endian architectures and dropped ppc64le support
- Simplify python3 requirements
- Simplify fix-install-completion.patch</changelog>
</package>
<package pkgid="5c514a051a814f23c46ad2965cfc55a18c77a97d3a4ce9dd0475b9f88436454fc9c5690cbfa4c6e4583a8cd0fbe161de3c14cb4cd9abcce48cf3c8e5b2ac3070" name="android-tools-partition" arch="x86_64">
  <version epoch="0" ver="35.0.2" rel="bp160.1.1"/>
  <changelog author="munix9@googlemail.com" date="1710590400">- Use custom %python3_fix_shebang_path macro for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1711108800">- Update to version 34.0.5
  * adb
  - Previously, adb responded with a successful code when wireless
    pairing fails. Resolved this by returning a failure code (1) and
    user-facing error (error: protocol fault (couldn't read status
    message...)). echo $? now reports 1.
  - adb wait-for-disconnect is now operational for non-USB
    (wireless debugging).
  - Added new DbC interface for future support of ChromeOS over adb.
  * fastboot
  - Fixed flashall on Pixel 3 devices.
- Remove fix-add-make_f2fs-tool-for-fastboot.patch and
  fix-add-sload_f2fs-tool.patch (merged upstream)</changelog>
  <changelog author="munix9@googlemail.com" date="1714305600">- Update to version 35.0.1
  * adb
  - Switch to libusb as the default on Linux issue #270205252.
  - Fix adb startup on hosts without USB.
  - Fix adb hangs caused by USB devices incorrectly reporting
    zero-length descriptors issue #302212871.
  - Fix return code of adb shell when device disconnects
    issue #321787891.
  * fastboot
  - Limit the maximum size of the incoming packet queue.
  - Remove bottlenecks that previously limited download speeds
    to around 120MB/s. Now fastboot can saturate a SuperSpeed+
    bus and achieve speeds up to 980MB/s, depending on the device.</changelog>
  <changelog author="olaf@aepfle.de" date="1719662400">- Use clang15 to fix build in SLE15</changelog>
  <changelog author="munix9@googlemail.com" date="1723896000">- Fix for Factory/TW: Add 'BuildRequires: pkgconfig(zlib)'</changelog>
  <changelog author="munix9@googlemail.com" date="1724932800">- Update to version 35.0.2
  * adb
  - Fix openscreen mDNS backend bug bringing down server on
    truncated query issue #294120933.
  - Make openscreen mDNS backend work on macOS.
  - Make openscreen mDNS backend default on all platforms.
  - Support to detect USB SuperSpeed+ (current and negotiated
    speeds) for diagnostic purposes.
  - Graceful shutdown: Release all USB interfaces on shutdown
    (all OSes).
  * CMake: Add option to link libusb with libudev
  * patches/adb: Combine similar patch to workaround nullability
    specifier
  * CMake: Add option to use bundled libusb library
  * CMake: Add option to use system fmt library
  * vendor: Don't use absolute dir for mkbootimg symlink
  * vendor: mkbootimg: Use builtin ${CMAKE_INSTALL_BINDIR} instead
    of relative bin
  * vendor: Remove unused native submodule
  * vendor: Remove unused incremental_delivery submodule
  * CMake: Remove leftovers after base submodule removal
  * Remove unused patch for libandroidfw
  * Remove libandroidfw: it was never used
  * CMake: Install adb man page
  * boringssl: Workaround compiler error with gcc-14 and _Generic
- Remove man-pages.tar.gz, use upstream man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1724932801">- Fix build on i586.</changelog>
  <changelog author="olaf@aepfle.de" date="1727006400">- remove adb from bash-completion package for SLE15 because it is
  still part of bash-completion itself
- Use specific python versions for all SLE15 variants
- Require protobuf &gt;= 21 until earlier variants are supported again</changelog>
  <changelog author="munix9@googlemail.com" date="1729425600">- Fix build for Leap 16.0
- Add 'Provides: bundled(...)' where appropriate
- Clean up spec file</changelog>
  <changelog author="munix9@googlemail.com" date="1730808000">- Exclude ppc ppc64 and ppc64le: Bundled boringssl doesn't support
  the big endian architectures and dropped ppc64le support
- Simplify python3 requirements
- Simplify fix-install-completion.patch</changelog>
</package>
<package pkgid="bfc83c62bee54f9b5fa3bd0ae7d2b26b3a7728e41cd334275907382c0246fbbc40f467cfb95cc3d5ce0e4e3000bd955e9ea49e9aae8f245f26e96cc318f09bd6" name="android-udev-rules" arch="noarch">
  <version epoch="0" ver="20250525" rel="bp160.1.2"/>
  <changelog author="munix9@googlemail.com" date="1702036800">- Update to version 20231207
  Bug Fixes
  * OnePlus 6T: debug mode not detected (#298) (#300)
  Features
  * Add Hisense U8G Smart TV (#301)
  * Add Google Pixel Watch 2 (#302)
  Miscellaneous Tasks
  * Use more specific adb GOTOs for XiaoMi (#299)</changelog>
  <changelog author="munix9@googlemail.com" date="1705233600">- Update to version 20240114
  Bug Fixes
  * Amazon vendor typo in comments
  Features
  * Add support for Fire HD 8 2018 (#303)
  * Add Alcatel 5024L aka Alcatel 1S (#304)
  * Add support for Fire HD 8 2012 (#306)
  * Add ASUS ZenWatch 2 (#307)</changelog>
  <changelog author="munix9@googlemail.com" date="1709294400">- Update to version 20240221
  Features
  * Add Oculus Quest 2 (close #308) (#309)
  * Add Allwinner fastboot rule (#311)
  Miscellaneous Tasks
  * Quest 2 and 3 have the same IDs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709294401">- Update descriptions to point out ADB</changelog>
  <changelog author="munix9@googlemail.com" date="1719403200">- Update to version 20240625
  Features
  * Add fastboot Google Pixel 7
  * Add SHIFT5me
  * Add Quectel vendor and Quectel EC25 (#318)
  * Add Pico 4 VR Headset and vendor (#319)
  * Add UVC for Pixel devices (close #321) (#322)
  * Add Oculus Go and Oculus Quest (#324)
  * Add Nintendo Switch
  Miscellaneous Tasks
  * Update link to google source (#317)</changelog>
  <changelog author="munix9@googlemail.com" date="1724932800">- Update to version 20240829
  Features
  * Add Amazon Fire HD 10 2023 (tungsten)</changelog>
  <changelog author="munix9@googlemail.com" date="1729339200">- Update to version 20241019
  Features
  * Add Lenovo Tab K10 (#329)
  * Add OnePlus 7T. (#330)
  * Add Archos 79 Xenon (#331)
  * Add support for Android Open Accessory device 2d04 (#332)</changelog>
  <changelog author="munix9@googlemail.com" date="1731240000">- Update to version 20241109
  Features
  * Add Nook Glowlight 3 (close #334)</changelog>
  <changelog author="munix9@googlemail.com" date="1741953600">- Update to version 20250314
  Features
  * Add Fibocom vendor and FG180 modem product (#336)
  * Add Zebra TC78
  * Add OnePlus 7T rndis+adb idProduct (#340)
  * Add Sony Xperia Play (#341)
  Bug Fixes
  * Typo for HTC "Tatoo" -&gt; Tattoo (#338)</changelog>
  <changelog author="munix9@googlemail.com" date="1748174400">- Update to version 20250525
  Features
  * Add LG V20 (#348)
  * Add support for KAZAM Tornado 348 (#351)
  * Add Amazon Fire HD 8 10th gen (onyx) (#353)
  Miscellaneous Tasks
  * Remove packaging assets (close #342)
  * Update Huawei watch and add comment about OPPO watch (#346)</changelog>
</package>
<package pkgid="6c2974e1348e0791bb1052a25ce0b0073202e70abeb72cfdbbe9e9f93fe95cb246b97df8d25830b9090debc4c240fbd491e193bc2ca42794eca3d9165dbdec23" name="angelfish" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Don't crash when favicon image provider is not available
  * Fix navigation coloring with breeze style
  * Improve message in download notification banner
  * Disable effects when software renderer is used
  * Appdata: add display size
  * Fix i18n macro
  * Add missing quote
  * Improve i18n
  * Add support for new QtWebEngine permission types
  * Added version checks for corrosion, qcoro and futuresql
  * AdBlock: Add websocket support
  * README.md replace kdesrc-build with kde-builder
  * Fix appdata to align with appstream spec
  * Update Rust packages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * Don't link against Qt::WebEngineQuickPrivate
  * Don't link to Qt::CorePrivate</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * Fix opening the menu on Qt 6.9</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="98a5c37374dffb14a3daa8c4f782f9898ba8eddb920434355cce31447198230cbb55c506d5458235aba5a55cdfd0f7f2721ebe71b809ded3e4cb318f7fbce37b" name="angelfish-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Don't crash when favicon image provider is not available
  * Fix navigation coloring with breeze style
  * Improve message in download notification banner
  * Disable effects when software renderer is used
  * Appdata: add display size
  * Fix i18n macro
  * Add missing quote
  * Improve i18n
  * Add support for new QtWebEngine permission types
  * Added version checks for corrosion, qcoro and futuresql
  * AdBlock: Add websocket support
  * README.md replace kdesrc-build with kde-builder
  * Fix appdata to align with appstream spec
  * Update Rust packages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * Don't link against Qt::WebEngineQuickPrivate
  * Don't link to Qt::CorePrivate</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * Fix opening the menu on Qt 6.9</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="f786ac135376cfdab60debeac5865087fab47ae86e65b02b91294451ef69eecbef73b63ea8af8349617d56a122ae29a5f04dbfb213b7051f0ca9b4b422fba890" name="ansible" arch="noarch">
  <version epoch="0" ver="11.3.0" rel="160000.3.2"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1721217600">- update to 10.2.0:
  Ansible 10.2.0 includes ansible-core 2.17.2 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 10
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/10/CHANGELOG-v10.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1723550400">- update to 10.3.0:
  Ansible 10.3.0 includes ansible-core 2.17.3 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 10
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/10/CHANGELOG-v10.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1726056000">- update to 10.4.0:
  Ansible 10.4.0 includes ansible-core 2.17.4 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 10
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/10/CHANGELOG-v10.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- update to 10.5.0:
  Ansible 10.5.0 includes ansible-core 2.17.5 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 10
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/10/CHANGELOG-v10.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1731585600">- update to 10.6.0:
  Ansible 10.6.0 includes ansible-core 2.17.6 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 10
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/10/CHANGELOG-v10.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- update to 11.0.0
  Ansible 11.0.0 includes ansible-core 2.18.0 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 11
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/11/CHANGELOG-v11.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733227200">- introduce next_ansible_core_version to ease updates of
  ansible-core while making sure we keep to the same minor release
  family (2.16.x, 2.17.x, 2.18.x)
- rename ansible-11-rpmlintrc back to ansible-rpmlintrc</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733313600">- update to 11.1.0
  Ansible 11.1.0 includes ansible-core 2.18.1 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 11
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/11/CHANGELOG-v11.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1738152000">- update to 11.2.0:
  Ansible 11.2.0 includes ansible-core 2.18.2 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 11
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/11/CHANGELOG-v11.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 11.3.0:
  Ansible 11.3.0 includes ansible-core 2.18.3 as well as a curated
  set of Ansible collections that provide a vast number of modules
  and plugins.
  Collections which have opted-in to being a part of the Ansible 11
  unified changelog will have an entry on this page:
  https://github.com/ansible-community/ansible-build-data/blob/main/11/CHANGELOG-v11.rst</changelog>
</package>
<package pkgid="34a8c0c796f528d251bb13a9ede5b8f8ea08614c3af3b1f29e44fc5910b2df5492da6227b9d68ea90ce8898b9df7c6f38a84809996dc5489c6e4ef2364997400" name="ansible-core" arch="noarch">
  <version epoch="0" ver="2.18.3" rel="160000.2.2"/>
  <changelog author="harshvardhan.sharma@suse.com" date="1732190400">- Added necessary test dependencies: pytest-xdist, pytest-mock,
  pytz, passlib, git-core, and openssh to ensure proper test
  execution.
- Introduced the `ansible_python_version` variable and updated the
  test command.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- Backport patch to relax resolvelib dependency:
  771f7ad29ca4d259761eaa88673c2e32f6412bbe.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732968000">- update to 2.18.0:
  * Breaking Changes / Porting Guide
  - Stopped wrapping all commands sent over SSH on a Windows
    target with a powershell.exe executable. This results in one
    less process being started on each command for Windows to
    improve efficiency, simplify the code, and make raw an actual
    raw command run with the default shell configured on the
    Windows sshd settings. This should have no affect on most
    tasks except for raw which now is not guaranteed to always be
    running in a PowerShell shell and from having the console
    output codepage set to UTF-8. To avoid this issue either swap
    to using ansible.windows.win_command,
    ansible.windows.win_shell, ansible.windows.win_powershell or
    manually wrap the raw command with the shell commands needed
    to set the output console encoding.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect.
  * Deprecated Features
  - Deprecate ansible.module_utils.basic.AnsibleModule.safe_eval
    and ansible.module_utils.common.safe_eval as they are no
    longer used.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect, and will be removed
    in a future release.
  - yum_repository - deprecate async option as it has been
    removed in RHEL 8 and will be removed in ansible-core 2.22.
  - yum_repository - the following options are deprecated:
    deltarpm_metadata_percentage, gpgcakey, http_caching,
    keepalive, metadata_expire_filter, mirrorlist_expire,
    protect, ssl_check_cert_permissions, ui_repoid_vars as they
    have no effect for dnf as an underlying package manager. The
    options will be removed in ansible-core 2.22.
  * Removed Features (previously deprecated)
  - Play - removed deprecated ROLE_CACHE property in favor of
    role_cache.
  - Remove deprecated VariableManager._get_delegated_vars method
    (#82950)
  - Removed Python 3.10 as a supported version on the controller.
    Python 3.11 or newer is required.
  - Removed support for setting the vars keyword to lists of
    dictionaries. It is now required to be a single dictionary.
  - loader - remove deprecated non-inclusive words (#82947).
  - paramiko_ssh - removed deprecated ssh_args from the
    paramiko_ssh connection plugin (#82939).
  - paramiko_ssh - removed deprecated ssh_common_args from the
    paramiko_ssh connection plugin (#82940).
  - paramiko_ssh - removed deprecated ssh_extra_args from the
    paramiko_ssh connection plugin (#82941).
  - play_context - remove deprecated PlayContext.verbosity
    property (#82945).
  - utils/listify - remove deprecated 'loader' argument from
    listify_lookup_plugin_terms API (#82949).
  * Security Fixes
  - include_vars action - Ensure that result masking is correctly
    requested when vault-encrypted files are read.
    (CVE-2024-8775)
  - task result processing - Ensure that action-sourced result
    masking (_ansible_no_log=True) is preserved. (CVE-2024-8775)
  - user action won't allow ssh-keygen, chown and chmod to run on
    existing ssh public key file, avoiding traversal on existing
    symlinks (CVE-2024-9902).
  * Known Issues
  - ansible-test - When using ansible-test containers with Podman
    on a Ubuntu 24.04 host, ansible-test must be run as a
    non-root user to avoid permission issues caused by AppArmor.
  - ansible-test - When using the Fedora 40 container with Podman
    on a Ubuntu 24.04 host, the unix-chkpwd AppArmor profile must
    be disabled on the host to allow SSH connections to the
    container.
  * New Plugins
  - timedout - did the task time out
  - vaulted_file - Is this file an encrypted vault
  * New Modules
  - ansible.modules
  - mount_facts - Retrieve mount information.
  * Bugfixes
    Please see the full changelog:
    https://github.com/ansible/ansible/blob/v2.18.0/changelogs/CHANGELOG-v2.18.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733227200">- update to 2.18.1:
  * Minor Changes
  - ansible-test - When detection of the current container
    network fails, a warning is now issued and execution
    continues. This simplifies usage in cases where the current
    container cannot be inspected, such as when running in GitHub
    Codespaces.
  * Security Fixes
  - Templating will not prefer AnsibleUnsafe when a variable is
    referenced via hostvars - CVE-2024-11079
  * Bugfixes
  - Fix returning 'unreachable' for the overall task result. This
    prevents false positives when a looped task has unignored
    unreachable items (#84019).
  - ansible-test - Fix traceback that occurs after an interactive
    command fails.
  - dnf5 - fix installing a package using state=latest when a
    binary of the same name as the package is already installed
    (#84259)
  - dnf5 - matching on a binary can be achieved only by
    specifying a full path (#84334)
  - runas become - Fix up become logic to still get the SYSTEM
    token with the most privileges when running as SYSTEM.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1738065600">- update to 2.18.2:
  * Bugfixes
  - Ansible will now also warn when reserved keywords are set via
    a module (set_fact, include_vars, etc).
  - Ansible.Basic - Fix required_if check when the option value
    to check is unset or set to null.
  - Use consistent multiprocessing context for action write locks
  - ansible-test - Fix up coverage reporting to properly
    translate the temporary path of integration test modules to
    the expected static test module path.
  - ansible-vault will now correctly handle --prompt, previously
    it would issue an error about stdin if no 2nd argument was
    passed
  - copy action now prevents user from setting internal options.
  - gather_facts action now defaults to ansible.legacy.setup if
    smart was set, no network OS was found and no other alias for
    setup was present.
  - gather_facts action will now issues errors and warnings as
    appropriate if a network OS is detected but no facts modules
    are defined for it.
  - ssh - Improve the logic for parsing CLIXML data in stderr
    when working with Windows host. This fixes issues when the
    raw stderr contains invalid UTF-8 byte sequences and improves
    embedded CLIXML sequences.
  - ssh - connection options were incorrectly templated during
    reset_connection tasks (#84238).</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 2.18.3:
  * Minor Changes
  - ansible-test - Automatically retry HTTP GET/PUT/DELETE
    requests on exceptions.
  - ansible-test - Use Python's urllib instead of curl for HTTP
    requests.
  * Bugfixes
  - include_vars - fixed erroneous warning if an unreserved
    variable name contains a single character that matches a
    reserved variable. (#84623)
  - linear strategy - fix executing end_role meta tasks for each
    host, instead of handling these as implicit run_once tasks
    (#84660).</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1741348800">- Add patch unarchive-test-fix.patch for unarchive: Clamp zip
  timestamps on 32-bit time_t. (#84409)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1745323200">- Add patch suse-distribution-fix.patch to fix distribution.py
  to identify the correct distribution for server-sap and micro
  (#PED-12643)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1747742400">- Add missing dependency on python311-rpm required by package_facts
  (#1243193)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1748260800">- Extend suse-distribution-fix.patch:
  * Also detect VARIANT_ID='sles-sap' as SLES_SAP</changelog>
</package>
<package pkgid="cb03dcf6bb14baefe08e311f9362970f27439d244fe5f8678c38acc4341f32e367708818d8927d1cb05efb09b6116135fb25a2308e5186452c3c5ca7be9b0570" name="ansible-core" arch="noarch">
  <version epoch="0" ver="2.18.3" rel="160000.3.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- Backport patch to relax resolvelib dependency:
  771f7ad29ca4d259761eaa88673c2e32f6412bbe.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732968000">- update to 2.18.0:
  * Breaking Changes / Porting Guide
  - Stopped wrapping all commands sent over SSH on a Windows
    target with a powershell.exe executable. This results in one
    less process being started on each command for Windows to
    improve efficiency, simplify the code, and make raw an actual
    raw command run with the default shell configured on the
    Windows sshd settings. This should have no affect on most
    tasks except for raw which now is not guaranteed to always be
    running in a PowerShell shell and from having the console
    output codepage set to UTF-8. To avoid this issue either swap
    to using ansible.windows.win_command,
    ansible.windows.win_shell, ansible.windows.win_powershell or
    manually wrap the raw command with the shell commands needed
    to set the output console encoding.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect.
  * Deprecated Features
  - Deprecate ansible.module_utils.basic.AnsibleModule.safe_eval
    and ansible.module_utils.common.safe_eval as they are no
    longer used.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect, and will be removed
    in a future release.
  - yum_repository - deprecate async option as it has been
    removed in RHEL 8 and will be removed in ansible-core 2.22.
  - yum_repository - the following options are deprecated:
    deltarpm_metadata_percentage, gpgcakey, http_caching,
    keepalive, metadata_expire_filter, mirrorlist_expire,
    protect, ssl_check_cert_permissions, ui_repoid_vars as they
    have no effect for dnf as an underlying package manager. The
    options will be removed in ansible-core 2.22.
  * Removed Features (previously deprecated)
  - Play - removed deprecated ROLE_CACHE property in favor of
    role_cache.
  - Remove deprecated VariableManager._get_delegated_vars method
    (#82950)
  - Removed Python 3.10 as a supported version on the controller.
    Python 3.11 or newer is required.
  - Removed support for setting the vars keyword to lists of
    dictionaries. It is now required to be a single dictionary.
  - loader - remove deprecated non-inclusive words (#82947).
  - paramiko_ssh - removed deprecated ssh_args from the
    paramiko_ssh connection plugin (#82939).
  - paramiko_ssh - removed deprecated ssh_common_args from the
    paramiko_ssh connection plugin (#82940).
  - paramiko_ssh - removed deprecated ssh_extra_args from the
    paramiko_ssh connection plugin (#82941).
  - play_context - remove deprecated PlayContext.verbosity
    property (#82945).
  - utils/listify - remove deprecated 'loader' argument from
    listify_lookup_plugin_terms API (#82949).
  * Security Fixes
  - include_vars action - Ensure that result masking is correctly
    requested when vault-encrypted files are read.
    (CVE-2024-8775)
  - task result processing - Ensure that action-sourced result
    masking (_ansible_no_log=True) is preserved. (CVE-2024-8775)
  - user action won't allow ssh-keygen, chown and chmod to run on
    existing ssh public key file, avoiding traversal on existing
    symlinks (CVE-2024-9902).
  * Known Issues
  - ansible-test - When using ansible-test containers with Podman
    on a Ubuntu 24.04 host, ansible-test must be run as a
    non-root user to avoid permission issues caused by AppArmor.
  - ansible-test - When using the Fedora 40 container with Podman
    on a Ubuntu 24.04 host, the unix-chkpwd AppArmor profile must
    be disabled on the host to allow SSH connections to the
    container.
  * New Plugins
  - timedout - did the task time out
  - vaulted_file - Is this file an encrypted vault
  * New Modules
  - ansible.modules
  - mount_facts - Retrieve mount information.
  * Bugfixes
    Please see the full changelog:
    https://github.com/ansible/ansible/blob/v2.18.0/changelogs/CHANGELOG-v2.18.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733227200">- update to 2.18.1:
  * Minor Changes
  - ansible-test - When detection of the current container
    network fails, a warning is now issued and execution
    continues. This simplifies usage in cases where the current
    container cannot be inspected, such as when running in GitHub
    Codespaces.
  * Security Fixes
  - Templating will not prefer AnsibleUnsafe when a variable is
    referenced via hostvars - CVE-2024-11079
  * Bugfixes
  - Fix returning 'unreachable' for the overall task result. This
    prevents false positives when a looped task has unignored
    unreachable items (#84019).
  - ansible-test - Fix traceback that occurs after an interactive
    command fails.
  - dnf5 - fix installing a package using state=latest when a
    binary of the same name as the package is already installed
    (#84259)
  - dnf5 - matching on a binary can be achieved only by
    specifying a full path (#84334)
  - runas become - Fix up become logic to still get the SYSTEM
    token with the most privileges when running as SYSTEM.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1738065600">- update to 2.18.2:
  * Bugfixes
  - Ansible will now also warn when reserved keywords are set via
    a module (set_fact, include_vars, etc).
  - Ansible.Basic - Fix required_if check when the option value
    to check is unset or set to null.
  - Use consistent multiprocessing context for action write locks
  - ansible-test - Fix up coverage reporting to properly
    translate the temporary path of integration test modules to
    the expected static test module path.
  - ansible-vault will now correctly handle --prompt, previously
    it would issue an error about stdin if no 2nd argument was
    passed
  - copy action now prevents user from setting internal options.
  - gather_facts action now defaults to ansible.legacy.setup if
    smart was set, no network OS was found and no other alias for
    setup was present.
  - gather_facts action will now issues errors and warnings as
    appropriate if a network OS is detected but no facts modules
    are defined for it.
  - ssh - Improve the logic for parsing CLIXML data in stderr
    when working with Windows host. This fixes issues when the
    raw stderr contains invalid UTF-8 byte sequences and improves
    embedded CLIXML sequences.
  - ssh - connection options were incorrectly templated during
    reset_connection tasks (#84238).</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 2.18.3:
  * Minor Changes
  - ansible-test - Automatically retry HTTP GET/PUT/DELETE
    requests on exceptions.
  - ansible-test - Use Python's urllib instead of curl for HTTP
    requests.
  * Bugfixes
  - include_vars - fixed erroneous warning if an unreserved
    variable name contains a single character that matches a
    reserved variable. (#84623)
  - linear strategy - fix executing end_role meta tasks for each
    host, instead of handling these as implicit run_once tasks
    (#84660).</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1741348800">- Add patch unarchive-test-fix.patch for unarchive: Clamp zip
  timestamps on 32-bit time_t. (#84409)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1745323200">- Add patch suse-distribution-fix.patch to fix distribution.py
  to identify the correct distribution for server-sap and micro
  (#PED-12643)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1747742400">- Add missing dependency on python311-rpm required by package_facts
  (#1243193)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1748260800">- Extend suse-distribution-fix.patch:
  * Also detect VARIANT_ID='sles-sap' as SLES_SAP</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1781352000">- Security fix for CVE-2026-11332 (bsc#1267822): argument injection in
  ansible-galaxy role install; pass role requirements as positional
  arguments to 'git clone' (add '--' separator). git-format-patch backport
  of gh#ansible/ansible#87078 (commit 5ae948f, stable-2.21).
  * add ansible-core-CVE-2026-11332.patch</changelog>
</package>
<package pkgid="e106cf2b1b150e145651ee3a9673b90c99da1769d87e9db590d45c9fa52c78151c58fe4feac41c4fab0f8361b0ac274e79640b1b26089365fea612e1a98cb2ae" name="ansible-linux-system-roles" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.2.2"/>
  <changelog author="harshvardhan.sharma@suse.com" date="1738238400">- 1.0.0
  - Initial release.</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1744372800">- Updated spec to require the use of the new Ansible version.
- Upgraded the certificate role to version 1.3.9:
  - Added new variables for SLES_SAP_15 and SLES_SAP_16.
  - Updated Ansible lint version to v25.
  - Updated CI pipeline with new test requirements.</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1749470400">- Fix: Ensure `certificate` role is included on SLE 16
  - Introduced `%sle16` macro for version-based logic
  - Cleaned up and simplified `%prep` section accordingly</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1750852800">- Update roles:
  - suseconnect to 1.0.1: simplify sanitization logic (no jmespath)
  - certificate to 1.3.11: update Python package dependencies for SLE 16
  - ha_cluster to 1.24.0:
  - add SLES 16 support with zypper pattern and crmsh updates
  - export pcsd and OS configuration
  - fix qdevice restart on cert regen and disable proxy for local pcsd socket</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1751025600">- Add selinux role for managing SELinux configuration
- Add podman role for managing containers using Podman</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1752148800">- Add aide role
- Add cockpit role</changelog>
</package>
<package pkgid="29f9cbe130a4f488966a84994096466f09de2f3d11a45493509981ccc07c82922ac83c37009b58c2f18d450bc8d2a523f8d7c7d612ab960a3fb2b1d682b6fb2f" name="ansible-rmt-server" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.1.1"/>
  <changelog author="jesus.bv@suse.com" date="1724241600">- Version 2.19
  * Fix for mirroring products that contain special characters (eg.: '$') in their path
  * Fix for packages with path longer 255 characters (bsc#1229152)
  * rmt-server-pubcloud:
  * Support registration of extensions in BYOS mode on top of a PAYG system (hybrid mode) (jsc#PCT-400)
  * Validate repository and registy access for hybrid systems</changelog>
  <changelog author="parag.jain@suse.com" date="1734955200">- Version 2.20
  * RMT packaging: don't overwrite custom sync/mirror timer config on package update
  * Extend column size for repository and file paths (bsc#1229152)
  * Forward suseconnect client user-agents to SCC
  * rmt-server-pubcloud:
  * Fix LTSS product verification (bsc#1230154)
  * Fix activations check when no product info is available (bsc#1230157)
  * Fix Azure SCC connection (bsc#1233314)
  * Deny access of Azure Basic type images to LTSS
  * Allow SLE Micro system to access SLES repositories (bsc#1230419)
  * Skip system token rotation in read-only APIs
  * Enable RMT to handle the new dl.suse.com CDN domain (bsc#1234641)
  * Clean up RMT metadata after repo update (bsc#1233308)</changelog>
  <changelog author="lcaparroz@suse.com" date="1735905600">- Version 2.21
  * Allow users to configure the SUMA product tree base URL to download
    'product_tree.json' from host other than 'scc.suse.com'. (bsc#1234844)
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Remove obsolete repositories and associations from rmt during SCC sync (bsc#1232808)
  * Do not re-download repomd metadata if already exists and be the latest version
  * rmt-server-pubcloud:
  * Update Micro check due to Micro 6.0 and 6.1 identifier to keep bsc#1230419 in place
  * Update Zypper path allowing check to handle paid extensions (i.e. LTSS) (bsc#1230157)
  * Add data export engine</changelog>
  <changelog author="jesus.bv@suse.com" date="1737460800">- Version 2.22
  * rmt-server-pubcloud:
  * Add pubcloud_reg_code column to systems table (jsc#PCT-473)
  * Add cache directories and their expiration times to the scrubber (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when activating a product (jsc#PCT-473)
  * Add cache checking to reduce queries to SCC when upgrading a product (jsc#PCT-473)
  * Refactor and move verify_instance from ZypperAuth to InstanceVerification
  * Add system_token to regsharing to find the system (bsc#1236600)
  * Add system_token to system without one
  * Add data_export engine for DataWarehouse telemetry (jsc#PCT-476)
  * Fix 500 errors (gh#1316, gh#1302)
  * Fix routing error(gh#1300)
  * Fix SUMA ARM64 (bsc#1236836)
  * Fix Migration from Micro 5.5 to Micro 6.X (bsc#1236816)
  * Add registry optional (bsc#1237373)
  * Update Puma webserver
  * rmt-cli:
  * Disable delta RPM mirroring by default (gh#1288)
  * Add option during 'rmt-cli mirror' to re-validate repodata and packages only when repodata was updated
  * rmt-server:
    Add `activejob` and `resque` gems to vendored gemfile, to enable background
    job support in RMT and all engines.</changelog>
  <changelog author="jesus.bv@suse.com" date="1751889600">- Version 2.23
  * rmt-server-pubcloud:
  * Only update the pubcloud regcode if there is a value (bsc#1244166)
  * Update rack, fixing CVEs CVE-2025-46727, CVE-2025-32441 (bsc#1242898, bsc#1242893)
  * Enable delta RPM mirroring by default (revert behavior introduced on 2.22)</changelog>
  <changelog author="natnael.getahun@suse.com" date="1762862400">- Version 2.24
  * Enable mirroring xz compressed repositories (bsc#1246976)
  * Rack 2.2.20 security update (bsc#1253953, bsc#1251937)
  * Drop some de-published products from RMT
  * rmt-server-pubcloud:
  * Do not decode instance data coming from the system (bsc#1248510)
  * Include Live-Patching for SLES 15.X (jsc#PCT-630)
  * Handle only one data exporter (bsc#1248869)
  * Do not decode instance data from db to access registry (bsc#1248510)
  * Handle instance verification exceptions</changelog>
  <changelog author="jesus.bv@suse.com" date="1768305600">- Version 2.25
  * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147)
  * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826)
  * Support for new redirect_repo_hosts config, to exclude some repo hosts
    from mirroring, and send clients directly there (jsc#SCC-452)
  * rmt-server-pubcloud
  * Clearer error message (bsc#1256883)
  * Handle zypper response when data exporter raises an error (bsc#1257133)
  * Add Valkey + Sidekiq for async processing</changelog>
  <changelog author="fmccarthy@suse.com" date="1772712000">- Version 2.26
  * Add support for processing, storing, and syncing system profiles (jsc#TEL-265)</changelog>
  <changelog author="adnilson.delgado@suse.com" date="1777464000">- Version 3.0.alpha
  * Update Ruby to version 3.4.8 and Rails to version 7.1.6</changelog>
  <changelog author="natnael.getahun@suse.com" date="1779105600">- Version 3.0
  * Set version to 3.0.0
  * Security fix: Remove unused ActionMailer/ActionMailbox components to
    eliminate CVE-2026-42256 (bsc#1265369)
  * Split Rails meta-gem into individual components for better security control</changelog>
</package>
<package pkgid="729d665c40627bcf3df4ab309aaf3fa4bbdec6a7f5bd9a81b77dbd3b769739cabf7dc8ef5dd60de68916e3a32439056fe6e0140b6b4123f85323a4c9d8b30bde" name="ansible-sap-infrastructure" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="marcel.mamula@suse.com" date="1737374400">- 1.1.1
  - Initial release</changelog>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- 1.1.2
  - Bugfixes
  - collection - Bump vmware.vmware_rest to 4.5.0
  - collection - Use amazon.aws.ec2_placement_group
  - collection - implement changelogs/changelog.yaml
  - sap_vm_provision - AWS tag pacemaker for fence agent stonith:external/ec2
  - sap_vm_provision - update azure.azcollection minimum version requirement
  - sap_vm_provision/sap_vm_temp_vip - Add dynamic group handling for provisioning
  - sap_vm_verify - stub code comments and reorder</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.1.3
  - Minor Changes:
  - sap_vm_provision: bastion boolean, to allow Bastion SSH Proxy or direct (e.g. VPN) for all Infrastructure Platforms</changelog>
</package>
<package pkgid="a2f6ee3d32186d3368b6740f50eff7b6b3224f53a9830f022c9a17841238174d16c5134bed74bf268c3c349d594fd0103e9f746e495a4284c0523941a5d3cf1c" name="ansible-sap-infrastructure" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1737374400">- 1.1.1
  - Initial release</changelog>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- 1.1.2
  - Bugfixes:
  - collection - Bump vmware.vmware_rest to 4.5.0
  - collection - Use amazon.aws.ec2_placement_group
  - collection - implement changelogs/changelog.yaml
  - sap_vm_provision - AWS tag pacemaker for fence agent stonith:external/ec2
  - sap_vm_provision - update azure.azcollection minimum version requirement
  - sap_vm_provision/sap_vm_temp_vip - Add dynamic group handling for provisioning
  - sap_vm_verify - stub code comments and reorder</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.1.3
  - Minor Changes:
  - sap_vm_provision: bastion boolean, to allow Bastion SSH Proxy or direct (e.g. VPN) for all Infrastructure Platforms</changelog>
  <changelog author="marcel.mamula@suse.com" date="1768305600">- 1.3.1
  - Minor Changes:
  - collection - Update workflows with dedicated github actions
  - collection - Add contributors list and sanity ignore files for future-proofing
  - collection - Add linting rule to ignore stricter var naming rule in 2.20
  - collection - Add kubernetes.core 5.3.0 to requirements
  - sap_vm_provision - Remove ansible.posix dependency for issue 126
  - sap_vm_provision - Add SLES 16 images, fix sshd_config and add python311 workaround
  - sap_vm_provision/kubevirt_vm - Make usage of hugepages configurable
  - sap_hypervisor_node_preconfigure - Update until conditional for ansible-core 2.19
  - sap_hypervisor_node_preconfigure - Add check for webhook endpoint availability
  - Bugfixes:
  - sap_hypervisor_node_preconfigure/kubevirt_vm - Fix installation of CNV operator
- 1.3.0
  - Minor Changes:
  - collection - Adjustment of the roles for ansible-core 2.19
  - collection - Update ansible-lint actions and configuration
  - collection - Update Documentation
  - sap_vm_provision - Add variable validations
  - sap_vm_provision - Append VMware notes for Issue 82
  - sap_vm_provision - Update SLES images and add SLES 15 SP7
  - Bugfixes:
  - sap_hypervisor_node_preconfigure - Fix ansible-lint errors from issue 101
  - sap_vm_provision - Removed update-ca-certificates for issue 119
- 1.2.0
  - Minor Changes:
  - collection - Readme update to align with project readme update
  - sap_hypervisor_node_preconfigure - Readme update to align with project readme update
  - sap_hypervisor_node_preconfigure - Updated redhat_ocpv
  - sap_vm_provision - Updated kubevirt_vm</changelog>
</package>
<package pkgid="f61eb7381351fc9ed49d63b387cb13fff907a5965adc1b5fe979ad5c7bf22d5ba54b0e1528093d5f14b5efbc76187ad3aa8157e50793b148e0589e81622992e0" name="ansible-sap-infrastructure" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1737374400">- 1.1.1
  - Initial release</changelog>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- 1.1.2
  - Bugfixes:
  - collection - Bump vmware.vmware_rest to 4.5.0
  - collection - Use amazon.aws.ec2_placement_group
  - collection - implement changelogs/changelog.yaml
  - sap_vm_provision - AWS tag pacemaker for fence agent stonith:external/ec2
  - sap_vm_provision - update azure.azcollection minimum version requirement
  - sap_vm_provision/sap_vm_temp_vip - Add dynamic group handling for provisioning
  - sap_vm_verify - stub code comments and reorder</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.1.3
  - Minor Changes:
  - sap_vm_provision: bastion boolean, to allow Bastion SSH Proxy or direct (e.g. VPN) for all Infrastructure Platforms</changelog>
  <changelog author="marcel.mamula@suse.com" date="1768305600">- 1.3.1
  - Minor Changes:
  - collection - Update workflows with dedicated github actions
  - collection - Add contributors list and sanity ignore files for future-proofing
  - collection - Add linting rule to ignore stricter var naming rule in 2.20
  - collection - Add kubernetes.core 5.3.0 to requirements
  - sap_vm_provision - Remove ansible.posix dependency for issue 126
  - sap_vm_provision - Add SLES 16 images, fix sshd_config and add python311 workaround
  - sap_vm_provision/kubevirt_vm - Make usage of hugepages configurable
  - sap_hypervisor_node_preconfigure - Update until conditional for ansible-core 2.19
  - sap_hypervisor_node_preconfigure - Add check for webhook endpoint availability
  - Bugfixes:
  - sap_hypervisor_node_preconfigure/kubevirt_vm - Fix installation of CNV operator
- 1.3.0
  - Minor Changes:
  - collection - Adjustment of the roles for ansible-core 2.19
  - collection - Update ansible-lint actions and configuration
  - collection - Update Documentation
  - sap_vm_provision - Add variable validations
  - sap_vm_provision - Append VMware notes for Issue 82
  - sap_vm_provision - Update SLES images and add SLES 15 SP7
  - Bugfixes:
  - sap_hypervisor_node_preconfigure - Fix ansible-lint errors from issue 101
  - sap_vm_provision - Removed update-ca-certificates for issue 119
- 1.2.0
  - Minor Changes:
  - collection - Readme update to align with project readme update
  - sap_hypervisor_node_preconfigure - Readme update to align with project readme update
  - sap_hypervisor_node_preconfigure - Updated redhat_ocpv
  - sap_vm_provision - Updated kubevirt_vm</changelog>
  <changelog author="marcel.mamula@suse.com" date="1780574400">- 1.4.0
  - Minor Changes:
  - sap_vm_provision - Rework role with best practices to align with project
  - sap_vm_provision - Update ibmcloud PowerVS image dictionaries
  - sap_vm_provision - Add MS Azure disclaimer about reliability of azure collection
  - sap_vm_temp_vip - Refactor variables and improve logic for skipping hosts
  - Bugfixes:
  - sap_vm_provision - Fix deprecated network parameter for amazon.aws.ec2_instance
  - sap_vm_provision - Fix adding /etc/hosts for all in play not just itself
  - sap_vm_temp_vip - Fix NoneType broadcast variable</changelog>
</package>
<package pkgid="8efc9f585d166d80d33dd3758931b197d8d3e2563ba997ae1dfedb7ed7f8658292583a3e5d3d6a1c8b213f582fcc50a72e9d819368fb1fe884ec2bf835cbd939" name="ansible-sap-install" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="160000.2.2"/>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- 1.5.3
  - Initial release
  - Bugfixes:
  - collection - Cleanup the changelog(s)
  - collection - Use the correct ansible-galaxy option in README.md files
  - collection - gh issue templates
  - collection and sap_hostagent - ansible-lint fixes
  - sap*preconfigure - Use correct RHEL versions in task names
  - sap*preconfigure - sysctl checks fail when config file has comments
  - sap_*_preconfigure/SLES - Enhance saptune handling and detection
  - sap_*_preconfigure/Suse - Enhance saptune revert logic
  - sap_*_preconfigure/Suse - Switch saptune from present
  - sap_general_preconfigure - Fix check mode for sysctl
  - sap_general_preconfigure - Remove unused file configure-etc-hosts.yml
  - sap_general_preconfigure - Update the package name of the IBM Power tools for RHEL 10
  - sap_general_preconfigure - fix var role prefix
  - sap_general_preconfigure, sap_maintain_etc_hosts - Ignore comments
  - sap_general_preconfigure/SLES - Add etc hosts setup to configure steps
  - sap_ha_pacemaker_cluster - fix ASCS constraint
  - sap_ha_pacemaker_cluster - fix ASCS/ERS systemd
  - sap_ha_pacemaker_cluster - fix NWAS
  - sap_ha_pacemaker_cluster - fix internal-error
  - sap_ha_pacemaker_cluster - fix package detection on RHEL
  - sap_ha_pacemaker_cluster - fix(check-mode)
  - sap_ha_pacemaker_cluster - several bug fixes
  - sap_ha_pacemaker_cluster - stonith location constraints
  - sap_hana_install - Update fapolicyd conditionals
  - sap_hana_preconfigure - Fix check mode for largesend.conf - ppc64le
  - sap_hana_preconfigure - Update the package name of the RHEL 10 Power tools
  - sap_hana_preconfigure - fix check mode in two tasks
  - sap_hana_preconfigure/SLES - Add package libltdl7 to vars
  - sap_swpm - Fix link in README.md
  - sap_swpm - remove duplicate section credentials_anydb_ibmdb2
  - sap_swpm - removed duplicates from credentials_hana section</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.6.0
  - Minor Changes:
  - New Feature - sap_anydb_install_oracle - Add handling of OS specific vars (#1033)
  - New Feature - sap_ha_pacemaker_cluster - SLES16 support, new vars for ha_cluster for corosync and zypper patterns (#1056)
  - New Feature - sap_storage_setup - Allow /software NFS mount (#1029)
  - sap_*_preconfigure - Add missing RHEL 10.x vars (#1059)
  - sap_general_preconfigure - Modify the kernel command line for SELinux also for RHEL 10 (#1036)
  - sap_general_preconfigure - Use the correct sap.conf file for RHEL 10 (#1022)
  - sap_ha_pacemaker_cluster/SUSE - SAP HANA scaleup post steps updated (#1061)
  - sap_hana_install - Add opt-out for setting sidadm to noexpire (#1016)
  - sap_swpm - Add opt-out for setting sidadm to noexpire (#1018)
  - Bugfixes:
  - Collection - fix documentation link in galaxy.yml (#1009)
  - sap_*_preconfigure - Make SELinux booleans persistent (#1013)
  - sap_*_preconfigure/SUSE - Add retry attempts to zypper pattern installation (#1032)
  - sap_*_preconfigure/SUSE - Update SLES16 pattern names and add packages for hardened images (#1057)
  - sap_ha_pacemaker_cluster/SUSE - Remove python3-rpm dependency in pre_steps_hana (#1028)
  - sap_hana_install - update README.md with Local Secure Store (LSS) installation details and examples (#1008)
  - sap_maintain_etc_hosts - Resolve situation with empty domain, but not undefined (#1044)
  - sap_swpm - Ensure sap_swpm_product_catalog_id is a string (#1035)
  - sap_swpm - Fix TEMP handling (#1019)
  - sap_swpm - Remove selinux role dependency from README.md (#1012)
  - sap_swpm - Require inifile.params only on the managed node when reusing an existing inifile.params. (#1024)
  - sap_swpm - Sanitize hostname length (#1042)</changelog>
</package>
<package pkgid="cad8c5369152438f591aeed7e18c734b7999b460f7f4decbe96169337fcba391a8245df4ac143a1c4cf45079417cda5686be21db19d9bae833c5f2129ecca0c9" name="ansible-sap-install" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- 1.5.3
  - Initial release
  - Bugfixes:
  - collection - Cleanup the changelog(s)
  - collection - Use the correct ansible-galaxy option in README.md files
  - collection - gh issue templates
  - collection and sap_hostagent - ansible-lint fixes
  - sap*preconfigure - Use correct RHEL versions in task names
  - sap*preconfigure - sysctl checks fail when config file has comments
  - sap_*_preconfigure/SLES - Enhance saptune handling and detection
  - sap_*_preconfigure/Suse - Enhance saptune revert logic
  - sap_*_preconfigure/Suse - Switch saptune from present
  - sap_general_preconfigure - Fix check mode for sysctl
  - sap_general_preconfigure - Remove unused file configure-etc-hosts.yml
  - sap_general_preconfigure - Update the package name of the IBM Power tools for RHEL 10
  - sap_general_preconfigure - fix var role prefix
  - sap_general_preconfigure, sap_maintain_etc_hosts - Ignore comments
  - sap_general_preconfigure/SLES - Add etc hosts setup to configure steps
  - sap_ha_pacemaker_cluster - fix ASCS constraint
  - sap_ha_pacemaker_cluster - fix ASCS/ERS systemd
  - sap_ha_pacemaker_cluster - fix NWAS
  - sap_ha_pacemaker_cluster - fix internal-error
  - sap_ha_pacemaker_cluster - fix package detection on RHEL
  - sap_ha_pacemaker_cluster - fix(check-mode)
  - sap_ha_pacemaker_cluster - several bug fixes
  - sap_ha_pacemaker_cluster - stonith location constraints
  - sap_hana_install - Update fapolicyd conditionals
  - sap_hana_preconfigure - Fix check mode for largesend.conf - ppc64le
  - sap_hana_preconfigure - Update the package name of the RHEL 10 Power tools
  - sap_hana_preconfigure - fix check mode in two tasks
  - sap_hana_preconfigure/SLES - Add package libltdl7 to vars
  - sap_swpm - Fix link in README.md
  - sap_swpm - remove duplicate section credentials_anydb_ibmdb2
  - sap_swpm - removed duplicates from credentials_hana section</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.6.0
  - Minor Changes:
  - New Feature - sap_anydb_install_oracle - Add handling of OS specific vars (#1033)
  - New Feature - sap_ha_pacemaker_cluster - SLES16 support, new vars for ha_cluster for corosync and zypper patterns (#1056)
  - New Feature - sap_storage_setup - Allow /software NFS mount (#1029)
  - sap_*_preconfigure - Add missing RHEL 10.x vars (#1059)
  - sap_general_preconfigure - Modify the kernel command line for SELinux also for RHEL 10 (#1036)
  - sap_general_preconfigure - Use the correct sap.conf file for RHEL 10 (#1022)
  - sap_ha_pacemaker_cluster/SUSE - SAP HANA scaleup post steps updated (#1061)
  - sap_hana_install - Add opt-out for setting sidadm to noexpire (#1016)
  - sap_swpm - Add opt-out for setting sidadm to noexpire (#1018)
  - Bugfixes:
  - Collection - fix documentation link in galaxy.yml (#1009)
  - sap_*_preconfigure - Make SELinux booleans persistent (#1013)
  - sap_*_preconfigure/SUSE - Add retry attempts to zypper pattern installation (#1032)
  - sap_*_preconfigure/SUSE - Update SLES16 pattern names and add packages for hardened images (#1057)
  - sap_ha_pacemaker_cluster/SUSE - Remove python3-rpm dependency in pre_steps_hana (#1028)
  - sap_hana_install - update README.md with Local Secure Store (LSS) installation details and examples (#1008)
  - sap_maintain_etc_hosts - Resolve situation with empty domain, but not undefined (#1044)
  - sap_swpm - Ensure sap_swpm_product_catalog_id is a string (#1035)
  - sap_swpm - Fix TEMP handling (#1019)
  - sap_swpm - Remove selinux role dependency from README.md (#1012)
  - sap_swpm - Require inifile.params only on the managed node when reusing an existing inifile.params. (#1024)
  - sap_swpm - Sanitize hostname length (#1042)</changelog>
  <changelog author="marcel.mamula@suse.com" date="1768305600">- 1.8.0
  - Minor Changes:
  - collection - Add Matrix to Sanity tests and ignore files up to 2.25
  - collection - Adjust roles for ansible-core 2.19 part 2
  - collection - Adjust roles for ansible-core 2.19 part 1
  - sap_ha_install_hana_hsr - Rework role with new features, validations and compatibility for 2.20
  - sap_hana_install - Rework tags
  - sap_hana_install - simplified and more flexible SELinux and fapolicyd handling
  - sap_hana_install - Inventory based Scale-Out and idempotency validations
  - sap_hana_install - Enhance variable validation and account for missed variable combinations
  - sap_hana_install - Idempotency Rework
  - sap_hana_preconfigure - Sync with SAP note 3108302
  - sap_hana_preconfigure - Add sap_hana preconfigure vars prefix
  - sap_netweaver_preconfigure - Add sap_netweaver preconfigure vars prefix
  - sap_*_preconfigure/SLES - Improved pattern check, sanitize log output and add loop_vars
  - sap_storage_setup/SUSE - Add btrfs support for SLES 16
  - sap_swpm - Enhance detection of multiple files
  - sap_swpm - extensive variable input validation
  - sap_swpm - Implement a test and a filter for validating hostnames
  - Bugfixes:
  - collection - Fix linting errors in 2.20 with facts and register var names
  - collection - Update linting workflows and configuration to latest version
  - collection - Update sanity github action and add missing ignore files for 2.19 and 2.20
  - sap_ha_install_hana_hsr - Fix linter failures
  - sap_ha_pacemaker_cluster - Fix linting errors
  - sap_hostagent - Fix linting errors
  - sap_install_media_detect - Fix linting errors
- 1.7.1
  - Bugfixes:
  - sap_hana_install - Enhance validation of variables
  - sap_hana_preconfigure - New mechanism for loading rhel minor plus vars without having to use "find" files on localhost.
  - sap_hana_preconfigure/RHEL - Be more flexible with boot command line args
- 1.7.0
  - Minor Changes:
  - sap_hana_preconfigure - Implement SAP note 3108302 v.13
  - sap_ha_install_hana_hsr - Add backup location detection and user variable
  - Bugfixes:
  - collection - Cleanup scripts
  - sap_hana_preconfigure - Replace grub2-mkconfig for RHEL by grubby from RHEL 8 onward
  - sap_hana_install - Enhance SAPCAR detection functionality and handling of multiple files
  - sap_ha_pacemaker_cluster - Enhance handling of cluster properties and improve ASCS ERS post steps
- 1.6.1
  - Bugfixes:
  - sap_ha_pacemaker_cluster - Remove NIC parameter from IPaddr2 resource agents
  - sap_*_preconfigure - Assert the presence of the IBM tools only if necessary
  - sap_*_preconfigure - Define needs-restarting also for RHEL 10, assert mode
  - sap_*_preconfigure - Define needs-restarting also for RHEL 10</changelog>
  <changelog author="marcel.mamula@suse.com" date="1771502400">Release 1.8.1 with various fixes and compatibility with ansible-core 2.19.
- 1.8.1:
  - Minor Changes:
  - collection - Update readme formatting to align with galaxy format
  - sap*preconfigure - Sync with SAP notes for RHEL 10
  - sap_general_preconfigure - Prevent an accidental change to a lower SELinux mode
  - sap_ha_pacemaker_cluster - Add fence_aws for SLES 16 and remove Tech Debt
  - sap_hana_install - Revert wrong conditional from PR#1138
  - sap_swpm - Sanitize conditions for 2.19</changelog>
  <changelog author="marcel.mamula@suse.com" date="1773662400">- 1.9.0:
  - Minor Changes:
  - sap_ha_install_hana_hsr - inventory vs. hostname
  - sap_ha_pacemaker_cluster - Add firewall steps
  - sap_ha_pacemaker_cluster - Split off HANA pre_tasks from include_vars and add new force mode
  - sap_swpm - Update firewall steps
  - Bugfixes:
  - collection - No longer use var debug with more than one variable
  - sap_ha_pacemaker_cluster - (fix) align settings to HANA documentation
  - sap_hana_install - Fix hana versions mismatch and replace injected vars
  - sap_swpm - Only ensure the presence of the 'file' package on Suse
  - sap_swpm - Rename all vars which contain '_swpm_swpm'</changelog>
</package>
<package pkgid="4a9e17b4603ce0bd7f7d188b0237be1fe90f93e3bfd5ed16e7b2679826253ed85bcba540954a26d2b95688a233e74ec709384c7276a67360b655636e87c837dd" name="ansible-sap-install" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- 1.5.3
  - Initial release
  - Bugfixes:
  - collection - Cleanup the changelog(s)
  - collection - Use the correct ansible-galaxy option in README.md files
  - collection - gh issue templates
  - collection and sap_hostagent - ansible-lint fixes
  - sap*preconfigure - Use correct RHEL versions in task names
  - sap*preconfigure - sysctl checks fail when config file has comments
  - sap_*_preconfigure/SLES - Enhance saptune handling and detection
  - sap_*_preconfigure/Suse - Enhance saptune revert logic
  - sap_*_preconfigure/Suse - Switch saptune from present
  - sap_general_preconfigure - Fix check mode for sysctl
  - sap_general_preconfigure - Remove unused file configure-etc-hosts.yml
  - sap_general_preconfigure - Update the package name of the IBM Power tools for RHEL 10
  - sap_general_preconfigure - fix var role prefix
  - sap_general_preconfigure, sap_maintain_etc_hosts - Ignore comments
  - sap_general_preconfigure/SLES - Add etc hosts setup to configure steps
  - sap_ha_pacemaker_cluster - fix ASCS constraint
  - sap_ha_pacemaker_cluster - fix ASCS/ERS systemd
  - sap_ha_pacemaker_cluster - fix NWAS
  - sap_ha_pacemaker_cluster - fix internal-error
  - sap_ha_pacemaker_cluster - fix package detection on RHEL
  - sap_ha_pacemaker_cluster - fix(check-mode)
  - sap_ha_pacemaker_cluster - several bug fixes
  - sap_ha_pacemaker_cluster - stonith location constraints
  - sap_hana_install - Update fapolicyd conditionals
  - sap_hana_preconfigure - Fix check mode for largesend.conf - ppc64le
  - sap_hana_preconfigure - Update the package name of the RHEL 10 Power tools
  - sap_hana_preconfigure - fix check mode in two tasks
  - sap_hana_preconfigure/SLES - Add package libltdl7 to vars
  - sap_swpm - Fix link in README.md
  - sap_swpm - remove duplicate section credentials_anydb_ibmdb2
  - sap_swpm - removed duplicates from credentials_hana section</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.6.0
  - Minor Changes:
  - New Feature - sap_anydb_install_oracle - Add handling of OS specific vars (#1033)
  - New Feature - sap_ha_pacemaker_cluster - SLES16 support, new vars for ha_cluster for corosync and zypper patterns (#1056)
  - New Feature - sap_storage_setup - Allow /software NFS mount (#1029)
  - sap_*_preconfigure - Add missing RHEL 10.x vars (#1059)
  - sap_general_preconfigure - Modify the kernel command line for SELinux also for RHEL 10 (#1036)
  - sap_general_preconfigure - Use the correct sap.conf file for RHEL 10 (#1022)
  - sap_ha_pacemaker_cluster/SUSE - SAP HANA scaleup post steps updated (#1061)
  - sap_hana_install - Add opt-out for setting sidadm to noexpire (#1016)
  - sap_swpm - Add opt-out for setting sidadm to noexpire (#1018)
  - Bugfixes:
  - Collection - fix documentation link in galaxy.yml (#1009)
  - sap_*_preconfigure - Make SELinux booleans persistent (#1013)
  - sap_*_preconfigure/SUSE - Add retry attempts to zypper pattern installation (#1032)
  - sap_*_preconfigure/SUSE - Update SLES16 pattern names and add packages for hardened images (#1057)
  - sap_ha_pacemaker_cluster/SUSE - Remove python3-rpm dependency in pre_steps_hana (#1028)
  - sap_hana_install - update README.md with Local Secure Store (LSS) installation details and examples (#1008)
  - sap_maintain_etc_hosts - Resolve situation with empty domain, but not undefined (#1044)
  - sap_swpm - Ensure sap_swpm_product_catalog_id is a string (#1035)
  - sap_swpm - Fix TEMP handling (#1019)
  - sap_swpm - Remove selinux role dependency from README.md (#1012)
  - sap_swpm - Require inifile.params only on the managed node when reusing an existing inifile.params. (#1024)
  - sap_swpm - Sanitize hostname length (#1042)</changelog>
  <changelog author="marcel.mamula@suse.com" date="1768305600">- 1.8.0
  - Minor Changes:
  - collection - Add Matrix to Sanity tests and ignore files up to 2.25
  - collection - Adjust roles for ansible-core 2.19 part 2
  - collection - Adjust roles for ansible-core 2.19 part 1
  - sap_ha_install_hana_hsr - Rework role with new features, validations and compatibility for 2.20
  - sap_hana_install - Rework tags
  - sap_hana_install - simplified and more flexible SELinux and fapolicyd handling
  - sap_hana_install - Inventory based Scale-Out and idempotency validations
  - sap_hana_install - Enhance variable validation and account for missed variable combinations
  - sap_hana_install - Idempotency Rework
  - sap_hana_preconfigure - Sync with SAP note 3108302
  - sap_hana_preconfigure - Add sap_hana preconfigure vars prefix
  - sap_netweaver_preconfigure - Add sap_netweaver preconfigure vars prefix
  - sap_*_preconfigure/SLES - Improved pattern check, sanitize log output and add loop_vars
  - sap_storage_setup/SUSE - Add btrfs support for SLES 16
  - sap_swpm - Enhance detection of multiple files
  - sap_swpm - extensive variable input validation
  - sap_swpm - Implement a test and a filter for validating hostnames
  - Bugfixes:
  - collection - Fix linting errors in 2.20 with facts and register var names
  - collection - Update linting workflows and configuration to latest version
  - collection - Update sanity github action and add missing ignore files for 2.19 and 2.20
  - sap_ha_install_hana_hsr - Fix linter failures
  - sap_ha_pacemaker_cluster - Fix linting errors
  - sap_hostagent - Fix linting errors
  - sap_install_media_detect - Fix linting errors
- 1.7.1
  - Bugfixes:
  - sap_hana_install - Enhance validation of variables
  - sap_hana_preconfigure - New mechanism for loading rhel minor plus vars without having to use "find" files on localhost.
  - sap_hana_preconfigure/RHEL - Be more flexible with boot command line args
- 1.7.0
  - Minor Changes:
  - sap_hana_preconfigure - Implement SAP note 3108302 v.13
  - sap_ha_install_hana_hsr - Add backup location detection and user variable
  - Bugfixes:
  - collection - Cleanup scripts
  - sap_hana_preconfigure - Replace grub2-mkconfig for RHEL by grubby from RHEL 8 onward
  - sap_hana_install - Enhance SAPCAR detection functionality and handling of multiple files
  - sap_ha_pacemaker_cluster - Enhance handling of cluster properties and improve ASCS ERS post steps
- 1.6.1
  - Bugfixes:
  - sap_ha_pacemaker_cluster - Remove NIC parameter from IPaddr2 resource agents
  - sap_*_preconfigure - Assert the presence of the IBM tools only if necessary
  - sap_*_preconfigure - Define needs-restarting also for RHEL 10, assert mode
  - sap_*_preconfigure - Define needs-restarting also for RHEL 10</changelog>
  <changelog author="marcel.mamula@suse.com" date="1771502400">Release 1.8.1 with various fixes and compatibility with ansible-core 2.19.
- 1.8.1:
  - Minor Changes:
  - collection - Update readme formatting to align with galaxy format
  - sap*preconfigure - Sync with SAP notes for RHEL 10
  - sap_general_preconfigure - Prevent an accidental change to a lower SELinux mode
  - sap_ha_pacemaker_cluster - Add fence_aws for SLES 16 and remove Tech Debt
  - sap_hana_install - Revert wrong conditional from PR#1138
  - sap_swpm - Sanitize conditions for 2.19</changelog>
  <changelog author="marcel.mamula@suse.com" date="1773662400">- 1.9.0:
  - Minor Changes:
  - sap_ha_install_hana_hsr - inventory vs. hostname
  - sap_ha_pacemaker_cluster - Add firewall steps
  - sap_ha_pacemaker_cluster - Split off HANA pre_tasks from include_vars and add new force mode
  - sap_swpm - Update firewall steps
  - Bugfixes:
  - collection - No longer use var debug with more than one variable
  - sap_ha_pacemaker_cluster - (fix) align settings to HANA documentation
  - sap_hana_install - Fix hana versions mismatch and replace injected vars
  - sap_swpm - Only ensure the presence of the 'file' package on Suse
  - sap_swpm - Rename all vars which contain '_swpm_swpm'</changelog>
  <changelog author="marcel.mamula@suse.com" date="1780574400">- 1.9.2:
  - Bugfixes:
  - sap_ha_pacemaker_cluster - Fix issue 1203 sudo dash
  - sap_storage_setup - Add option to mount generic NFS mounts
  - sap_swpm - Remove ansible.posix dependency
- 1.9.1:
  - Bugfixes:
  - sap_general_preconfigure - Ansible 2.24 compatibility
  - sap_ha_pacemaker_cluster - Ansible 2.24 compatibility
  - sap_hana_preconfigure - Ansible 2.24 compatibility
  - sap_hana_preconfigure/RHEL - Correctly set tsx in all cases
  - sap_maintain_etc_hosts, sap_hana_install, sap_install_media_detect - Ansible 2.24 compatibility
  - sap_netweaver_preconfigure - Ansible 2.24 compatibility
  - sap_storage_setup, sap_hostagent, anydb - Ansible 2.24 compatibility</changelog>
</package>
<package pkgid="30d563cd4e318f5018638c5375589fb1cb6278e0a15cb4461f53af77066d3a6864aa76a3552ce4c39a201d9ae4bad68e7f82476d4f44635b452e649119b0cec2" name="ansible-sap-launchpad" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="bp160.1.2"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1751976000">- 1.2.1
  - Bugfixes:
  - software_center_download: Improved logic for skipping existing files and getting valid filename
  - sap_software_download: Add SLES 16 python313 support and update changelog</changelog>
</package>
<package pkgid="b1a5bcedaf02651b68eed94b9c6c996b13bc92034a7524a28c5aca86b6eeaa664ab3220c1e12f1c3c1974d1637abe76e72700962da49d3688f84049dc6448520" name="ansible-sap-launchpad" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="bp160.1.1"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1751976000">- 1.2.1
  - Bugfixes:
  - software_center_download: Improved logic for skipping existing files and getting valid filename
  - sap_software_download: Add SLES 16 python313 support and update changelog</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1768219200">Refactor Ansible Modules and adjust for ansible-core 2.19.
- 1.3.1
  - Bugfixes:
  - collection: Add ansible-test sanity workflow and fix sanity errors
- 1.3.0
  - Changes:
  - collection: Refactor all Ansible Modules
  - sap_software_download: Update for ansible-core 2.19
  - Bugfixes:
  - sap_software_download: Fix for failed checksums not correctly retrying</changelog>
</package>
<package pkgid="5c737de49e17bcd761c82729712b99797228e1dbe068b90508bf7b7e296832cab19f50bf78f1ef4219169393c0a0960822e50fc09356dfe365169c47d950a146" name="ansible-sap-launchpad" arch="noarch">
  <version epoch="0" ver="1.3.2" rel="bp160.1.1"/>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1737374400">- 1.1.1
  - Initial release.</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1744027200">- 1.2.0
  - Changes:
  - sap_software_download: New Ansible Role with enhanced logic for downloading software using Ansible Module software_center_download
  - sap_software_download: Download stack XML option
  - software_center_download: Add option to search for latest packages
  - maintenance_planner modules: Add option to use Display ID instead of name
  - Collection Readme update and preparation for 1.2.0 release
  - Bugfixes:
  - fix: cache gigya sdk build number</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1751976000">- 1.2.1
  - Bugfixes:
  - software_center_download: Improved logic for skipping existing files and getting valid filename
  - sap_software_download: Add SLES 16 python313 support and update changelog</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1768219200">Refactor Ansible Modules and adjust for ansible-core 2.19.
- 1.3.1
  - Bugfixes:
  - collection: Add ansible-test sanity workflow and fix sanity errors
- 1.3.0
  - Changes:
  - collection: Refactor all Ansible Modules
  - sap_software_download: Update for ansible-core 2.19
  - Bugfixes:
  - sap_software_download: Fix for failed checksums not correctly retrying</changelog>
  <changelog author="Marcel Mamula &lt;marcel.mamula@suse.com&gt;" date="1780574400">- 1.3.2
  - Bugfixes:
  - all - Replace inject vars with ansible_facts for 2.20</changelog>
</package>
<package pkgid="732e381fde028ecfbc2ec292a114e57a5b1c53027da335119835c8d231839ad04d800f13e76ff31219d974158a723fb4b234050f09da893817605b53f7a87e7e" name="ansible-sap-operations" arch="noarch">
  <version epoch="0" ver="0.9.1" rel="160000.2.2"/>
  <changelog author="marcel.mamula@suse.com" date="1737374400">- 0.9.1
  - Initial release.</changelog>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- Updated downstream transformation
- Removed python dependencies and macros from spec file</changelog>
  <changelog author="marcel.mamula@suse.com" date="1755000000">- Remove unsupported Ansible Roles
- Add updated README.md</changelog>
</package>
<package pkgid="4ebe0a20df14b873ac107f7de23be6e9c850481c272cfd0f67744c24fe40e0c38801529a3791d88dfafbb63576c36524363963a3fec14d6a195da23b5b6d629f" name="ansible-sap-operations" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1737374400">- 0.9.1
  - Initial release.</changelog>
  <changelog author="marcel.mamula@suse.com" date="1744286400">- Updated downstream transformation
- Removed python dependencies and macros from spec file</changelog>
  <changelog author="marcel.mamula@suse.com" date="1755000000">- Remove unsupported Ansible Roles
- Add updated README.md</changelog>
  <changelog author="marcel.mamula@suse.com" date="1771502400">- Release 2.0.0 which reworked all Ansible Roles in this collection to modern standard and SLES support.</changelog>
</package>
<package pkgid="0106fdd2946e9f87626a7e1040cd440e621cf14562ced79db0c0a82a9a630f01a2ebbf0f0465c0a1578b0c133bf715cd056ff29514d18fc66b4d9f30e19b30af" name="ansible-sap-playbooks" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="160000.2.2"/>
  <changelog author="marcel.mamula@suse.com" date="1750680000">- 1.1.2
  - Initial release to Factory
  - Minor Changes:
  - New scenario sap_s4hana_sandbox_syscopy.
  - Placeholder variable validation, Rsync destination regex and usability improvements.
  - Enable PR linting, noqa for placeholder checks and add sap_infrastructure 1.1.3 bastion variable.
  - action: Add rsync checksum and improve output verbosity.
- 1.1.1
  - Minor Changes:
  - Update existing hosts extravars files, Azure comments and inventory comments.
- 1.1.0
  - Major Changes:
  - Interactive prompts for end-user, across all supported scenarios and target platforms.
  - Simplified variable files, structure and comments.
  - Minor Changes:
  - Add github action for publishing stage to main.
  - all: Add author to publish action and update ansible_requirements
  - all: Default SAP HANA master password and readme update explaining S-user</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.1.3
  - Bugfixes
  - all: Remove executable flag from yml files and fix typos in interactive mode</changelog>
  <changelog author="marcel.mamula@suse.com" date="1752494400">- 1.2.0
  - Minor Changes:
  - Comply with Security regulations
  - Remove all hardcoded passwords
  - Add validation for placeholder and empty passwords to fail playbook at beginning.
  - Update readme with warnings and explanations for password usage.
  - Add recommended steps to use Ansible Vault.
  - Bugfixes
  - Change few variables with `'true'` to `true` where it was required (identified during testing).
  - Fix readme typo with incorrect role name.</changelog>
</package>
<package pkgid="81e608b5eabdfeaf1de72435763f39c420a19d32af6a618b4eee56fc2e0704184ebadb0b22194cae0a921d6c85e7c89d599a7c33ef1262c01717fa99a7a3a5a8" name="ansible-sap-playbooks" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1750680000">- 1.1.2
  - Initial release to Factory
  - Minor Changes:
  - New scenario sap_s4hana_sandbox_syscopy.
  - Placeholder variable validation, Rsync destination regex and usability improvements.
  - Enable PR linting, noqa for placeholder checks and add sap_infrastructure 1.1.3 bastion variable.
  - action: Add rsync checksum and improve output verbosity.
- 1.1.1
  - Minor Changes:
  - Update existing hosts extravars files, Azure comments and inventory comments.
- 1.1.0
  - Major Changes:
  - Interactive prompts for end-user, across all supported scenarios and target platforms.
  - Simplified variable files, structure and comments.
  - Minor Changes:
  - Add github action for publishing stage to main.
  - all: Add author to publish action and update ansible_requirements
  - all: Default SAP HANA master password and readme update explaining S-user</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.1.3
  - Bugfixes
  - all: Remove executable flag from yml files and fix typos in interactive mode</changelog>
  <changelog author="marcel.mamula@suse.com" date="1752494400">- 1.2.0
  - Minor Changes:
  - Comply with Security regulations
  - Remove all hardcoded passwords
  - Add validation for placeholder and empty passwords to fail playbook at beginning.
  - Update readme with warnings and explanations for password usage.
  - Add recommended steps to use Ansible Vault.
  - Bugfixes
  - Change few variables with `'true'` to `true` where it was required (identified during testing).
  - Fix readme typo with incorrect role name.</changelog>
  <changelog author="marcel.mamula@suse.com" date="1768392000">- 1.3.0
  - Minor Changes:
  - collection: Update linting and sanity workflows to align with project
  - collection: Update Contributors list
  - collection: Bump requirements versions to support 2.19
  - all: Update playbooks for ansible-core 2.19
  - all: Update image fragments to align with sap_infrastructure PR#118
  - all: Add sles16 images for AWS, AZ, GCP
  - sap_s4hana_sandbox_syscopy: Update readme entry for S4HANA</changelog>
</package>
<package pkgid="b9309bca94e0dce898c04c977b82a3d097181f13d38a197724b84fc3faec22a5825299b43670015478ca16fe5316e9e98828ddbe31a39204bd18c52858af0ddb" name="ansible-sap-playbooks" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="160000.1.1"/>
  <changelog author="marcel.mamula@suse.com" date="1750680000">- 1.1.2
  - Initial release to Factory
  - Minor Changes:
  - New scenario sap_s4hana_sandbox_syscopy.
  - Placeholder variable validation, Rsync destination regex and usability improvements.
  - Enable PR linting, noqa for placeholder checks and add sap_infrastructure 1.1.3 bastion variable.
  - action: Add rsync checksum and improve output verbosity.
- 1.1.1
  - Minor Changes:
  - Update existing hosts extravars files, Azure comments and inventory comments.
- 1.1.0
  - Major Changes:
  - Interactive prompts for end-user, across all supported scenarios and target platforms.
  - Simplified variable files, structure and comments.
  - Minor Changes:
  - Add github action for publishing stage to main.
  - all: Add author to publish action and update ansible_requirements
  - all: Default SAP HANA master password and readme update explaining S-user</changelog>
  <changelog author="marcel.mamula@suse.com" date="1751976000">- 1.1.3
  - Bugfixes
  - all: Remove executable flag from yml files and fix typos in interactive mode</changelog>
  <changelog author="marcel.mamula@suse.com" date="1752494400">- 1.2.0
  - Minor Changes:
  - Comply with Security regulations
  - Remove all hardcoded passwords
  - Add validation for placeholder and empty passwords to fail playbook at beginning.
  - Update readme with warnings and explanations for password usage.
  - Add recommended steps to use Ansible Vault.
  - Bugfixes
  - Change few variables with `'true'` to `true` where it was required (identified during testing).
  - Fix readme typo with incorrect role name.</changelog>
  <changelog author="marcel.mamula@suse.com" date="1768392000">- 1.3.0
  - Minor Changes:
  - collection: Update linting and sanity workflows to align with project
  - collection: Update Contributors list
  - collection: Bump requirements versions to support 2.19
  - all: Update playbooks for ansible-core 2.19
  - all: Update image fragments to align with sap_infrastructure PR#118
  - all: Add sles16 images for AWS, AZ, GCP
  - sap_s4hana_sandbox_syscopy: Update readme entry for S4HANA</changelog>
  <changelog author="marcel.mamula@suse.com" date="1780574400">- 1.4.0
  - Minor Changes:
  - collection: Add MS Azure disclaimer about reliability of azure collection
  - all: Fix all linting errors and update facts for 2.20
  - all: Refactor product dictionary to reuse same contents when possible
  - all: Update ibmcloud image dictionaries
  - all: Add S4HANA and S4HANA FND 2025 software lists
  - hana: Update SAP HANA versions and add throttle for rsync
  - ibmcloud_powervs: Update variables for better clarity</changelog>
</package>
<package pkgid="29d7637e5a78d1ca9bb39a0599b7c3bc7ecea50a978deb1e09a08c06bb03d4c251257348f9fb709dcd85a1bd23b8ed515b89830ed2fea621af4107658a740c26" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.18.3" rel="160000.2.2"/>
  <changelog author="harshvardhan.sharma@suse.com" date="1732190400">- Added necessary test dependencies: pytest-xdist, pytest-mock,
  pytz, passlib, git-core, and openssh to ensure proper test
  execution.
- Introduced the `ansible_python_version` variable and updated the
  test command.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- Backport patch to relax resolvelib dependency:
  771f7ad29ca4d259761eaa88673c2e32f6412bbe.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732968000">- update to 2.18.0:
  * Breaking Changes / Porting Guide
  - Stopped wrapping all commands sent over SSH on a Windows
    target with a powershell.exe executable. This results in one
    less process being started on each command for Windows to
    improve efficiency, simplify the code, and make raw an actual
    raw command run with the default shell configured on the
    Windows sshd settings. This should have no affect on most
    tasks except for raw which now is not guaranteed to always be
    running in a PowerShell shell and from having the console
    output codepage set to UTF-8. To avoid this issue either swap
    to using ansible.windows.win_command,
    ansible.windows.win_shell, ansible.windows.win_powershell or
    manually wrap the raw command with the shell commands needed
    to set the output console encoding.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect.
  * Deprecated Features
  - Deprecate ansible.module_utils.basic.AnsibleModule.safe_eval
    and ansible.module_utils.common.safe_eval as they are no
    longer used.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect, and will be removed
    in a future release.
  - yum_repository - deprecate async option as it has been
    removed in RHEL 8 and will be removed in ansible-core 2.22.
  - yum_repository - the following options are deprecated:
    deltarpm_metadata_percentage, gpgcakey, http_caching,
    keepalive, metadata_expire_filter, mirrorlist_expire,
    protect, ssl_check_cert_permissions, ui_repoid_vars as they
    have no effect for dnf as an underlying package manager. The
    options will be removed in ansible-core 2.22.
  * Removed Features (previously deprecated)
  - Play - removed deprecated ROLE_CACHE property in favor of
    role_cache.
  - Remove deprecated VariableManager._get_delegated_vars method
    (#82950)
  - Removed Python 3.10 as a supported version on the controller.
    Python 3.11 or newer is required.
  - Removed support for setting the vars keyword to lists of
    dictionaries. It is now required to be a single dictionary.
  - loader - remove deprecated non-inclusive words (#82947).
  - paramiko_ssh - removed deprecated ssh_args from the
    paramiko_ssh connection plugin (#82939).
  - paramiko_ssh - removed deprecated ssh_common_args from the
    paramiko_ssh connection plugin (#82940).
  - paramiko_ssh - removed deprecated ssh_extra_args from the
    paramiko_ssh connection plugin (#82941).
  - play_context - remove deprecated PlayContext.verbosity
    property (#82945).
  - utils/listify - remove deprecated 'loader' argument from
    listify_lookup_plugin_terms API (#82949).
  * Security Fixes
  - include_vars action - Ensure that result masking is correctly
    requested when vault-encrypted files are read.
    (CVE-2024-8775)
  - task result processing - Ensure that action-sourced result
    masking (_ansible_no_log=True) is preserved. (CVE-2024-8775)
  - user action won't allow ssh-keygen, chown and chmod to run on
    existing ssh public key file, avoiding traversal on existing
    symlinks (CVE-2024-9902).
  * Known Issues
  - ansible-test - When using ansible-test containers with Podman
    on a Ubuntu 24.04 host, ansible-test must be run as a
    non-root user to avoid permission issues caused by AppArmor.
  - ansible-test - When using the Fedora 40 container with Podman
    on a Ubuntu 24.04 host, the unix-chkpwd AppArmor profile must
    be disabled on the host to allow SSH connections to the
    container.
  * New Plugins
  - timedout - did the task time out
  - vaulted_file - Is this file an encrypted vault
  * New Modules
  - ansible.modules
  - mount_facts - Retrieve mount information.
  * Bugfixes
    Please see the full changelog:
    https://github.com/ansible/ansible/blob/v2.18.0/changelogs/CHANGELOG-v2.18.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733227200">- update to 2.18.1:
  * Minor Changes
  - ansible-test - When detection of the current container
    network fails, a warning is now issued and execution
    continues. This simplifies usage in cases where the current
    container cannot be inspected, such as when running in GitHub
    Codespaces.
  * Security Fixes
  - Templating will not prefer AnsibleUnsafe when a variable is
    referenced via hostvars - CVE-2024-11079
  * Bugfixes
  - Fix returning 'unreachable' for the overall task result. This
    prevents false positives when a looped task has unignored
    unreachable items (#84019).
  - ansible-test - Fix traceback that occurs after an interactive
    command fails.
  - dnf5 - fix installing a package using state=latest when a
    binary of the same name as the package is already installed
    (#84259)
  - dnf5 - matching on a binary can be achieved only by
    specifying a full path (#84334)
  - runas become - Fix up become logic to still get the SYSTEM
    token with the most privileges when running as SYSTEM.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1738065600">- update to 2.18.2:
  * Bugfixes
  - Ansible will now also warn when reserved keywords are set via
    a module (set_fact, include_vars, etc).
  - Ansible.Basic - Fix required_if check when the option value
    to check is unset or set to null.
  - Use consistent multiprocessing context for action write locks
  - ansible-test - Fix up coverage reporting to properly
    translate the temporary path of integration test modules to
    the expected static test module path.
  - ansible-vault will now correctly handle --prompt, previously
    it would issue an error about stdin if no 2nd argument was
    passed
  - copy action now prevents user from setting internal options.
  - gather_facts action now defaults to ansible.legacy.setup if
    smart was set, no network OS was found and no other alias for
    setup was present.
  - gather_facts action will now issues errors and warnings as
    appropriate if a network OS is detected but no facts modules
    are defined for it.
  - ssh - Improve the logic for parsing CLIXML data in stderr
    when working with Windows host. This fixes issues when the
    raw stderr contains invalid UTF-8 byte sequences and improves
    embedded CLIXML sequences.
  - ssh - connection options were incorrectly templated during
    reset_connection tasks (#84238).</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 2.18.3:
  * Minor Changes
  - ansible-test - Automatically retry HTTP GET/PUT/DELETE
    requests on exceptions.
  - ansible-test - Use Python's urllib instead of curl for HTTP
    requests.
  * Bugfixes
  - include_vars - fixed erroneous warning if an unreserved
    variable name contains a single character that matches a
    reserved variable. (#84623)
  - linear strategy - fix executing end_role meta tasks for each
    host, instead of handling these as implicit run_once tasks
    (#84660).</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1741348800">- Add patch unarchive-test-fix.patch for unarchive: Clamp zip
  timestamps on 32-bit time_t. (#84409)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1745323200">- Add patch suse-distribution-fix.patch to fix distribution.py
  to identify the correct distribution for server-sap and micro
  (#PED-12643)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1747742400">- Add missing dependency on python311-rpm required by package_facts
  (#1243193)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1748260800">- Extend suse-distribution-fix.patch:
  * Also detect VARIANT_ID='sles-sap' as SLES_SAP</changelog>
</package>
<package pkgid="23e90d8a77385d7244eddc0e9bf1f69335eda0cd4b0b438ef63ba58a12b8834e41ee9301e3418f573306dfa8f1f1b8971030b0d13237fae18f9077b8f6e88589" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.18.3" rel="160000.3.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- Backport patch to relax resolvelib dependency:
  771f7ad29ca4d259761eaa88673c2e32f6412bbe.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732968000">- update to 2.18.0:
  * Breaking Changes / Porting Guide
  - Stopped wrapping all commands sent over SSH on a Windows
    target with a powershell.exe executable. This results in one
    less process being started on each command for Windows to
    improve efficiency, simplify the code, and make raw an actual
    raw command run with the default shell configured on the
    Windows sshd settings. This should have no affect on most
    tasks except for raw which now is not guaranteed to always be
    running in a PowerShell shell and from having the console
    output codepage set to UTF-8. To avoid this issue either swap
    to using ansible.windows.win_command,
    ansible.windows.win_shell, ansible.windows.win_powershell or
    manually wrap the raw command with the shell commands needed
    to set the output console encoding.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect.
  * Deprecated Features
  - Deprecate ansible.module_utils.basic.AnsibleModule.safe_eval
    and ansible.module_utils.common.safe_eval as they are no
    longer used.
  - persistent connection plugins - The ANSIBLE_CONNECTION_PATH
    config option no longer has any effect, and will be removed
    in a future release.
  - yum_repository - deprecate async option as it has been
    removed in RHEL 8 and will be removed in ansible-core 2.22.
  - yum_repository - the following options are deprecated:
    deltarpm_metadata_percentage, gpgcakey, http_caching,
    keepalive, metadata_expire_filter, mirrorlist_expire,
    protect, ssl_check_cert_permissions, ui_repoid_vars as they
    have no effect for dnf as an underlying package manager. The
    options will be removed in ansible-core 2.22.
  * Removed Features (previously deprecated)
  - Play - removed deprecated ROLE_CACHE property in favor of
    role_cache.
  - Remove deprecated VariableManager._get_delegated_vars method
    (#82950)
  - Removed Python 3.10 as a supported version on the controller.
    Python 3.11 or newer is required.
  - Removed support for setting the vars keyword to lists of
    dictionaries. It is now required to be a single dictionary.
  - loader - remove deprecated non-inclusive words (#82947).
  - paramiko_ssh - removed deprecated ssh_args from the
    paramiko_ssh connection plugin (#82939).
  - paramiko_ssh - removed deprecated ssh_common_args from the
    paramiko_ssh connection plugin (#82940).
  - paramiko_ssh - removed deprecated ssh_extra_args from the
    paramiko_ssh connection plugin (#82941).
  - play_context - remove deprecated PlayContext.verbosity
    property (#82945).
  - utils/listify - remove deprecated 'loader' argument from
    listify_lookup_plugin_terms API (#82949).
  * Security Fixes
  - include_vars action - Ensure that result masking is correctly
    requested when vault-encrypted files are read.
    (CVE-2024-8775)
  - task result processing - Ensure that action-sourced result
    masking (_ansible_no_log=True) is preserved. (CVE-2024-8775)
  - user action won't allow ssh-keygen, chown and chmod to run on
    existing ssh public key file, avoiding traversal on existing
    symlinks (CVE-2024-9902).
  * Known Issues
  - ansible-test - When using ansible-test containers with Podman
    on a Ubuntu 24.04 host, ansible-test must be run as a
    non-root user to avoid permission issues caused by AppArmor.
  - ansible-test - When using the Fedora 40 container with Podman
    on a Ubuntu 24.04 host, the unix-chkpwd AppArmor profile must
    be disabled on the host to allow SSH connections to the
    container.
  * New Plugins
  - timedout - did the task time out
  - vaulted_file - Is this file an encrypted vault
  * New Modules
  - ansible.modules
  - mount_facts - Retrieve mount information.
  * Bugfixes
    Please see the full changelog:
    https://github.com/ansible/ansible/blob/v2.18.0/changelogs/CHANGELOG-v2.18.rst</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733227200">- update to 2.18.1:
  * Minor Changes
  - ansible-test - When detection of the current container
    network fails, a warning is now issued and execution
    continues. This simplifies usage in cases where the current
    container cannot be inspected, such as when running in GitHub
    Codespaces.
  * Security Fixes
  - Templating will not prefer AnsibleUnsafe when a variable is
    referenced via hostvars - CVE-2024-11079
  * Bugfixes
  - Fix returning 'unreachable' for the overall task result. This
    prevents false positives when a looped task has unignored
    unreachable items (#84019).
  - ansible-test - Fix traceback that occurs after an interactive
    command fails.
  - dnf5 - fix installing a package using state=latest when a
    binary of the same name as the package is already installed
    (#84259)
  - dnf5 - matching on a binary can be achieved only by
    specifying a full path (#84334)
  - runas become - Fix up become logic to still get the SYSTEM
    token with the most privileges when running as SYSTEM.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1738065600">- update to 2.18.2:
  * Bugfixes
  - Ansible will now also warn when reserved keywords are set via
    a module (set_fact, include_vars, etc).
  - Ansible.Basic - Fix required_if check when the option value
    to check is unset or set to null.
  - Use consistent multiprocessing context for action write locks
  - ansible-test - Fix up coverage reporting to properly
    translate the temporary path of integration test modules to
    the expected static test module path.
  - ansible-vault will now correctly handle --prompt, previously
    it would issue an error about stdin if no 2nd argument was
    passed
  - copy action now prevents user from setting internal options.
  - gather_facts action now defaults to ansible.legacy.setup if
    smart was set, no network OS was found and no other alias for
    setup was present.
  - gather_facts action will now issues errors and warnings as
    appropriate if a network OS is detected but no facts modules
    are defined for it.
  - ssh - Improve the logic for parsing CLIXML data in stderr
    when working with Windows host. This fixes issues when the
    raw stderr contains invalid UTF-8 byte sequences and improves
    embedded CLIXML sequences.
  - ssh - connection options were incorrectly templated during
    reset_connection tasks (#84238).</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 2.18.3:
  * Minor Changes
  - ansible-test - Automatically retry HTTP GET/PUT/DELETE
    requests on exceptions.
  - ansible-test - Use Python's urllib instead of curl for HTTP
    requests.
  * Bugfixes
  - include_vars - fixed erroneous warning if an unreserved
    variable name contains a single character that matches a
    reserved variable. (#84623)
  - linear strategy - fix executing end_role meta tasks for each
    host, instead of handling these as implicit run_once tasks
    (#84660).</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1741348800">- Add patch unarchive-test-fix.patch for unarchive: Clamp zip
  timestamps on 32-bit time_t. (#84409)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1745323200">- Add patch suse-distribution-fix.patch to fix distribution.py
  to identify the correct distribution for server-sap and micro
  (#PED-12643)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1747742400">- Add missing dependency on python311-rpm required by package_facts
  (#1243193)</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1748260800">- Extend suse-distribution-fix.patch:
  * Also detect VARIANT_ID='sles-sap' as SLES_SAP</changelog>
  <changelog author="harshvardhan.sharma@suse.com" date="1781352000">- Security fix for CVE-2026-11332 (bsc#1267822): argument injection in
  ansible-galaxy role install; pass role requirements as positional
  arguments to 'git clone' (add '--' separator). git-format-patch backport
  of gh#ansible/ansible#87078 (commit 5ae948f, stable-2.21).
  * add ansible-core-CVE-2026-11332.patch</changelog>
</package>
<package pkgid="497fd824d8019c9a943d4bf85467f8177508d36c4c86e2038cf85179bfc5a51885f57cf73e42291262315bd756523f5ab3c75c532e7e1d88c444e56ccf1e0a86" name="ansible-trento" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.1.1"/>
  <changelog author="trento-developers@suse.com" date="1769774400">- Release 1.0.0
  [#]# What's Changed
  * Initial release (#91) @skrech
  * *Full Changelog**: https://github.com/trento-project/ansible/compare/0.9.9...1.0.0</changelog>
</package>
<package pkgid="22ea7d459a223b71d1ce5f00225423f488c481ec9a33dcf76cbe70894815d9570064c48d7a420aa43504ca3571f36f3b2d25352705ae6a8c9b23d4f7c6fb8be8" name="ansifilter" arch="x86_64">
  <version epoch="0" ver="2.21" rel="bp160.1.13"/>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 2.11:
  * Fixed parsing of "7" and "8" sequences
    (gl#saalen/ansifilter#16).
  * Added --ignore-clear option.
  * Converted README and ChangeLog to AsciiDoc</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 2.13:
  * Line numbers do not trigger default style span in HTML
    (gl#saalen/ansifilter#19).
  * Fixed line numbering in batch mode.
  * CLI: Added --derived-styles option for HTML output
    (gl#saalen/ansifilter#11).
  * CLI: Added "self" argument to --anchors to generate
    self-referencing anchors.
- Changes from version 2.12:
  * Fixed -w char count if line contains escape sequences.
  * GUI: Added stylesheet input filed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1556107200">- Update to version 2.14:
  * Added SVG output option (gl#saalen/ansifilter#20).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573646400">- Update to version 2.15:
  * Added optional argument to --ignore-clear, the default setting
    is now true.
  * CLI: fixed -e argument description.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 2.16:
  * CLI: Added --ignore-csi option to improve UTF-8 input handling.
- Remove obsolete macros.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1601553600">- Update to version 2.17:
  - Improved handling of carriage return (gl#saalen/ansifilter#25).
  - Applied makefile patch to address Portage warnings
    (gl#saalen/ansifilter#24).
  - Fixed section naming of LaTeX files if input path contained
    slashes.
  - CLI: Added `--max-size` option to limit input file size
    (default: 256 MB).
- Update ansifilter.keyring.
- Update list of generated source files cleaned in prep section.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612440000">- Update to version 2.18:
  * Added support for OSC 8 (iterm2) Hyperlinks
    (gl#saalen/ansifilter#27).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1678881600">- Update to version 2.19:
  * Added stdin/stdio default stream hints in `--help`
    (gl#saalen/ansifilter#34).
  * Added shell completion scripts (gl#saalen/ansifilter#36).
- Update ansifilter.keyring.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1687003200">- Update to version 2.20:
  * Fixed invalid array access (gl#saalen/ansifilter#35).
  * CLI: Added `--no-default-fg` option to omit default foreground
    color (gl#saalen/ansifilter#37).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1725883200">- Update to version 2.21:
  * removed `using namespace std;` in header files
  * src/makefile: added `-std=c++17` to enable modern C++ features
  * added cmake build script
  * fix open span tag with CR as opening sequence
    (https://gitlab.com/saalen/ansifilter/-/issues/43)
  * adapted TCL extension for C++17 compilation
    (https://gitlab.com/saalen/ansifilter/-/issues/42)
- Remove the judgment line about GUI from the spec file</changelog>
</package>
<package pkgid="2d19b9b0bccd8b47e5d515b92b6640f9480e347389345794e66b48fdf69c825f1b4b4a8086ac2e14602f00df5fc9138971c834db8bec79cc5552cae047261516" name="ansifilter-bash-completion" arch="noarch">
  <version epoch="0" ver="2.21" rel="bp160.1.13"/>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 2.11:
  * Fixed parsing of "7" and "8" sequences
    (gl#saalen/ansifilter#16).
  * Added --ignore-clear option.
  * Converted README and ChangeLog to AsciiDoc</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 2.13:
  * Line numbers do not trigger default style span in HTML
    (gl#saalen/ansifilter#19).
  * Fixed line numbering in batch mode.
  * CLI: Added --derived-styles option for HTML output
    (gl#saalen/ansifilter#11).
  * CLI: Added "self" argument to --anchors to generate
    self-referencing anchors.
- Changes from version 2.12:
  * Fixed -w char count if line contains escape sequences.
  * GUI: Added stylesheet input filed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1556107200">- Update to version 2.14:
  * Added SVG output option (gl#saalen/ansifilter#20).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573646400">- Update to version 2.15:
  * Added optional argument to --ignore-clear, the default setting
    is now true.
  * CLI: fixed -e argument description.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 2.16:
  * CLI: Added --ignore-csi option to improve UTF-8 input handling.
- Remove obsolete macros.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1601553600">- Update to version 2.17:
  - Improved handling of carriage return (gl#saalen/ansifilter#25).
  - Applied makefile patch to address Portage warnings
    (gl#saalen/ansifilter#24).
  - Fixed section naming of LaTeX files if input path contained
    slashes.
  - CLI: Added `--max-size` option to limit input file size
    (default: 256 MB).
- Update ansifilter.keyring.
- Update list of generated source files cleaned in prep section.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612440000">- Update to version 2.18:
  * Added support for OSC 8 (iterm2) Hyperlinks
    (gl#saalen/ansifilter#27).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1678881600">- Update to version 2.19:
  * Added stdin/stdio default stream hints in `--help`
    (gl#saalen/ansifilter#34).
  * Added shell completion scripts (gl#saalen/ansifilter#36).
- Update ansifilter.keyring.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1687003200">- Update to version 2.20:
  * Fixed invalid array access (gl#saalen/ansifilter#35).
  * CLI: Added `--no-default-fg` option to omit default foreground
    color (gl#saalen/ansifilter#37).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1725883200">- Update to version 2.21:
  * removed `using namespace std;` in header files
  * src/makefile: added `-std=c++17` to enable modern C++ features
  * added cmake build script
  * fix open span tag with CR as opening sequence
    (https://gitlab.com/saalen/ansifilter/-/issues/43)
  * adapted TCL extension for C++17 compilation
    (https://gitlab.com/saalen/ansifilter/-/issues/42)
- Remove the judgment line about GUI from the spec file</changelog>
</package>
<package pkgid="562e7ffb8051fda19609cc43d27e27808325efd8db9883c77391a502d7fb802b7cad96634b45c48274f7b742bd1c5b9a7f2b0b0cf770febe663d14a2b83ffb09" name="ansifilter-fish-completion" arch="noarch">
  <version epoch="0" ver="2.21" rel="bp160.1.13"/>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 2.11:
  * Fixed parsing of "7" and "8" sequences
    (gl#saalen/ansifilter#16).
  * Added --ignore-clear option.
  * Converted README and ChangeLog to AsciiDoc</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 2.13:
  * Line numbers do not trigger default style span in HTML
    (gl#saalen/ansifilter#19).
  * Fixed line numbering in batch mode.
  * CLI: Added --derived-styles option for HTML output
    (gl#saalen/ansifilter#11).
  * CLI: Added "self" argument to --anchors to generate
    self-referencing anchors.
- Changes from version 2.12:
  * Fixed -w char count if line contains escape sequences.
  * GUI: Added stylesheet input filed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1556107200">- Update to version 2.14:
  * Added SVG output option (gl#saalen/ansifilter#20).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573646400">- Update to version 2.15:
  * Added optional argument to --ignore-clear, the default setting
    is now true.
  * CLI: fixed -e argument description.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 2.16:
  * CLI: Added --ignore-csi option to improve UTF-8 input handling.
- Remove obsolete macros.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1601553600">- Update to version 2.17:
  - Improved handling of carriage return (gl#saalen/ansifilter#25).
  - Applied makefile patch to address Portage warnings
    (gl#saalen/ansifilter#24).
  - Fixed section naming of LaTeX files if input path contained
    slashes.
  - CLI: Added `--max-size` option to limit input file size
    (default: 256 MB).
- Update ansifilter.keyring.
- Update list of generated source files cleaned in prep section.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612440000">- Update to version 2.18:
  * Added support for OSC 8 (iterm2) Hyperlinks
    (gl#saalen/ansifilter#27).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1678881600">- Update to version 2.19:
  * Added stdin/stdio default stream hints in `--help`
    (gl#saalen/ansifilter#34).
  * Added shell completion scripts (gl#saalen/ansifilter#36).
- Update ansifilter.keyring.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1687003200">- Update to version 2.20:
  * Fixed invalid array access (gl#saalen/ansifilter#35).
  * CLI: Added `--no-default-fg` option to omit default foreground
    color (gl#saalen/ansifilter#37).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1725883200">- Update to version 2.21:
  * removed `using namespace std;` in header files
  * src/makefile: added `-std=c++17` to enable modern C++ features
  * added cmake build script
  * fix open span tag with CR as opening sequence
    (https://gitlab.com/saalen/ansifilter/-/issues/43)
  * adapted TCL extension for C++17 compilation
    (https://gitlab.com/saalen/ansifilter/-/issues/42)
- Remove the judgment line about GUI from the spec file</changelog>
</package>
<package pkgid="659bae13634800d42f0740031fda6a46e3edccec6039a671ecf721703496f3e4899ef3ba8802798b628a567f55babcc467e547419fc892db2e6959aefc5446c6" name="ansifilter-gui" arch="x86_64">
  <version epoch="0" ver="2.21" rel="bp160.1.13"/>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 2.11:
  * Fixed parsing of "7" and "8" sequences
    (gl#saalen/ansifilter#16).
  * Added --ignore-clear option.
  * Converted README and ChangeLog to AsciiDoc</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 2.13:
  * Line numbers do not trigger default style span in HTML
    (gl#saalen/ansifilter#19).
  * Fixed line numbering in batch mode.
  * CLI: Added --derived-styles option for HTML output
    (gl#saalen/ansifilter#11).
  * CLI: Added "self" argument to --anchors to generate
    self-referencing anchors.
- Changes from version 2.12:
  * Fixed -w char count if line contains escape sequences.
  * GUI: Added stylesheet input filed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1556107200">- Update to version 2.14:
  * Added SVG output option (gl#saalen/ansifilter#20).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573646400">- Update to version 2.15:
  * Added optional argument to --ignore-clear, the default setting
    is now true.
  * CLI: fixed -e argument description.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 2.16:
  * CLI: Added --ignore-csi option to improve UTF-8 input handling.
- Remove obsolete macros.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1601553600">- Update to version 2.17:
  - Improved handling of carriage return (gl#saalen/ansifilter#25).
  - Applied makefile patch to address Portage warnings
    (gl#saalen/ansifilter#24).
  - Fixed section naming of LaTeX files if input path contained
    slashes.
  - CLI: Added `--max-size` option to limit input file size
    (default: 256 MB).
- Update ansifilter.keyring.
- Update list of generated source files cleaned in prep section.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612440000">- Update to version 2.18:
  * Added support for OSC 8 (iterm2) Hyperlinks
    (gl#saalen/ansifilter#27).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1678881600">- Update to version 2.19:
  * Added stdin/stdio default stream hints in `--help`
    (gl#saalen/ansifilter#34).
  * Added shell completion scripts (gl#saalen/ansifilter#36).
- Update ansifilter.keyring.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1687003200">- Update to version 2.20:
  * Fixed invalid array access (gl#saalen/ansifilter#35).
  * CLI: Added `--no-default-fg` option to omit default foreground
    color (gl#saalen/ansifilter#37).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1725883200">- Update to version 2.21:
  * removed `using namespace std;` in header files
  * src/makefile: added `-std=c++17` to enable modern C++ features
  * added cmake build script
  * fix open span tag with CR as opening sequence
    (https://gitlab.com/saalen/ansifilter/-/issues/43)
  * adapted TCL extension for C++17 compilation
    (https://gitlab.com/saalen/ansifilter/-/issues/42)
- Remove the judgment line about GUI from the spec file</changelog>
</package>
<package pkgid="ba6bffc33a1e60abe4983348a0753b30fdc57558c48ba9d3cc411d409107b718be6225b3a0d93fa0eb83ccec0be5b5321909c2dae6454d8e68cd2bb2325c1530" name="ansifilter-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.21" rel="bp160.1.13"/>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 2.11:
  * Fixed parsing of "7" and "8" sequences
    (gl#saalen/ansifilter#16).
  * Added --ignore-clear option.
  * Converted README and ChangeLog to AsciiDoc</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 2.13:
  * Line numbers do not trigger default style span in HTML
    (gl#saalen/ansifilter#19).
  * Fixed line numbering in batch mode.
  * CLI: Added --derived-styles option for HTML output
    (gl#saalen/ansifilter#11).
  * CLI: Added "self" argument to --anchors to generate
    self-referencing anchors.
- Changes from version 2.12:
  * Fixed -w char count if line contains escape sequences.
  * GUI: Added stylesheet input filed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1556107200">- Update to version 2.14:
  * Added SVG output option (gl#saalen/ansifilter#20).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573646400">- Update to version 2.15:
  * Added optional argument to --ignore-clear, the default setting
    is now true.
  * CLI: fixed -e argument description.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 2.16:
  * CLI: Added --ignore-csi option to improve UTF-8 input handling.
- Remove obsolete macros.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1601553600">- Update to version 2.17:
  - Improved handling of carriage return (gl#saalen/ansifilter#25).
  - Applied makefile patch to address Portage warnings
    (gl#saalen/ansifilter#24).
  - Fixed section naming of LaTeX files if input path contained
    slashes.
  - CLI: Added `--max-size` option to limit input file size
    (default: 256 MB).
- Update ansifilter.keyring.
- Update list of generated source files cleaned in prep section.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612440000">- Update to version 2.18:
  * Added support for OSC 8 (iterm2) Hyperlinks
    (gl#saalen/ansifilter#27).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1678881600">- Update to version 2.19:
  * Added stdin/stdio default stream hints in `--help`
    (gl#saalen/ansifilter#34).
  * Added shell completion scripts (gl#saalen/ansifilter#36).
- Update ansifilter.keyring.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1687003200">- Update to version 2.20:
  * Fixed invalid array access (gl#saalen/ansifilter#35).
  * CLI: Added `--no-default-fg` option to omit default foreground
    color (gl#saalen/ansifilter#37).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1725883200">- Update to version 2.21:
  * removed `using namespace std;` in header files
  * src/makefile: added `-std=c++17` to enable modern C++ features
  * added cmake build script
  * fix open span tag with CR as opening sequence
    (https://gitlab.com/saalen/ansifilter/-/issues/43)
  * adapted TCL extension for C++17 compilation
    (https://gitlab.com/saalen/ansifilter/-/issues/42)
- Remove the judgment line about GUI from the spec file</changelog>
</package>
<package pkgid="1b65c2d2749b4dd1669fb5b0ddb439233e1079a6a806e995489e3660bd21d76c626f3687dea18e36e8a52dbb62d3cacd1d02c89e7574520700ddc5a817a9da7b" name="ansilove" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="bp160.1.14"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1579435200">- Update to version 4.0.7
- Use OpenBSD style(9) for function prototypes and declarations
- Replace EXIT_SUCCESS by zero in all SAUCE functions
- Do not use typedef for the sauce struct
- Set icecolors to true if defined in SAUCE record ANSiFlags
- Add test cases for most supported formats
- Sync the description of Retina output capabilities with reality</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1581940800">- Update to version 4.1.0
  * Add a new '-t' flag (type), allowing to specify input file type
    and override file type detection
  * Various documentation tweaks and improvements</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1590408000">- Update to version 4.1.1
  * Various documentation tweaks and improvements
  * Define timespecsub macro in compat.h if it doesn't exists
  * Use CLOCK_REALTIME if CLOCK_MONOTONIC is not available
  * Display processing time on exit.
  * Fix includes and add forward declarations in various source
    files</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1593950400">- Update to version 4.1.2
  * Define _GNU_SOURCE in CMakeLists.txt to avoid cluttering source
    files
  * No need to set HAVE_SECCOMP to 1, defining it is enough
  * Remove some unneeded seccomp related includes
  * Validate architectures for seccomp
  * Add seccomp support on i386, tested on glibc and musl
  * Remove extraneous underscore in #if defined check
  * Use __NR_ instead of SYS_ prefix in #if defined checks</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1600430400">- Update to version 4.1.3
  * Adjust SAUCE flag output to be binary
  * Add -S flag to use SAUCE info for rendering hints. Users must
    now use -S to get iCE color info. This was previously
    automatically pulled without any extra options.
  * Document the new -S flag, allowing to use SAUCE info for
    render options
  * Add support for seccomp on arm
  * Add missing test for __NR_mmap, the mmap syscall doesn't exist
    on arm</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1603368000">- Update to version 4.1.4
  * Move read_status variable declaration to the top of the function
  * Check fread() return values in readComments() and add error
    handling
  * Introduce the READ_RECORD function-like macro, for fread error
    handling
  * Use READ_RECORD in readRecord() to add fread() error handling
  * Only call memset() if the malloc call succeeds
  * Check strdup() return value and error out on failed allocation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1615032000">- Update to version 4.1.5
  * Bugfix release</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1644580800">- Update to version 4.1.6
  * Add a test case for retina output
  * Add a test case for SAUCE output
  * Use CMAKE_C_STANDARD instead of hardcoding compiler flags
  * Stop linking against libm, it's not necessary anymore</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1680868800">- Update to version 4.1.7
  * Always print processing time on stderr
  * Move manual page to the man directory</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1685966400">- Update to version 4.2.0
  * Add support for the Spleen 8x16 font (requires libansilove &gt;= 1.4.0)</changelog>
</package>
<package pkgid="338150014d66e03b8c8d798ecdb60440193d0e87269051ca7675bbc623afbf5f335e08e5f3cab456ff0e476a95f9ae36d9427246dfa772f749591ebaa76838e3" name="ansilove-term" arch="x86_64">
  <version epoch="0" ver="0.0.0+git.20190908" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572177600">- Initial package, version 0.0.0+git.20190908
- Add patch:
  * ansilove-term-use-gcc.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681300800">- Add ansilove-term-gcc13.patch: fix build using GCC 13.</changelog>
</package>
<package pkgid="e69299adfc523d7a6550d36e05dd49667d4b458b60a014dced62effb2f7240ed276fa81cd470d28c0533f8764111d567e05d722fcb9a184ba14371752d9b99b7" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="bd127c6d38b0542133859a3b80a253e1ddd7a88e5d8b86e076b0dac65cbc60b988e4c8997cdc0d1091ef6d3bcfe48e101a89609fcafb86b954f2fcfcd0f158c1" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="5d50c30270e74922bfef99a5ca606fb90bd2839128b6db1abd169ee4820fdc6cc05e7f3f78cfdf7a96edbc90a7268d58725b614ea5e930133488ee510b86d720" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="63476ae7bb242f3162e1711d91e5b7418512790959b75402906dba99f69463bbf5e5af7aaf838c7a15690c4c50dd939df7acda6cb2c635761b8d421a56cca23d" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="e384c6582adcf8b62aa5448a2a0e6544cb7ee4c01b16cd9a9e31ae1196a7f97a6f90f18d0764c27ad61671e525eff0f45a5bd0f77042868afda44c3190dbc231" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="a038da36ce389321ac0f647cda1f2961eeedeac6e2ca20ca7f01d09b073f415da4bd0bf07bfef7a85e63870bc171a3b3a725a9e2075598b340ffc9acb841969e" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="a6cd0646da94b534b2427fd273601adae99626ac40d906ab7067c94cde73c68fd3ec79e744310f1d672036cfb45aea298013be4da7e31698768d7c8105f45b46" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="7a42e6a4def52564cc5f1ae14769c9cb84da5b10ce24dac02a161c6937739d58b5be7d393ab0f090c2a1ffad78e133f7765d6c6659529fb2aac47ae334065224" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="9e484129622ff48c5d2642de9f82c3b86d276c18384f9885950d555d962d7a1ca6b9b06cb279bc44801c3dd0559c6fa1a989959b40da218b29a090e79ec31283" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="6c75d5986eba070e22c9a6dc6215eba4c020ab0f87cab6cdeb4ef1a309e455b72e1eb9405e9c86a7632248eb320d634391d4f7a884a8e14e0e708cc9a37a46a7" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="11fd61fe3db1e5e06c264c99603013071b3e1f23dd5f4621b6fbff8e6ed5a04e8bd8ffa739fe50694a732cf01e063fea39a6dbabb7add273e6e9afb1370a1885" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="d7dca0608d777b3528b3614acdbcc9b734c6d83db3169d59fa0d8b057ad8e636427aa8226f8253002db528c4352a9bf7249ee92090c70dff6a329b8670ad3735" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="d9873392562facdf19d66513425de3ac61333e809b8e2b9972e559f875e03a61fb48d99536e85ffcbbb6aadf7b62c3bfe5730ae8bca25796994bb1d439c04167" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="af7e29d65598652396859d998bf34b0017735d24320f18f691f2b2527deb63e6121717e0154f35dd3097f8ff6ff84053f542cf9a2ffc288102c8e9f03dc40d0d" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="fe86ab167a7180f915fee1496d73cff661972cbcc05d9de87186b6e75ba6bf6b17616a52f6cd45ad5879b066aebb98836eb4bbae26f5aa42cd80b66963de62dc" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="fd6ddb036922e1acf12d5659b6d885f5a5f273725771bc1964a7edd38c9eae0d8e2d29c07bef08871edb8da9295f9fda737792114ebf0e862ab33401eeb73d53" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="c01e52956d67b99793d2a5228bdf99b989f308daaaeff47624bfce3ba2294fb6155b8143c353fb36f9e7fac15c046691f94eafd072e3d58352f14ec601f3e242" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="f205f2b6c27c407347c890f28baf584af39e5673132d439fdc7b0d5720b36b880b0e930d4b41a4e7414b938114641ff7c216e1af5ed883426dcb513e3b0e8157" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="daa63889cf8ddfca2f7a04c69085762f8b5f8c1b4e44c51c60146dbae464451de2dd34e82cf52c573cbb1e1fc1ccf40d795e8afad9ea9ba295b6b194317eb2c4" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="079dcd4e38f8363b9687ebbb7d58fe69efd05661b8b04d58414f94cc2dce44058c077cf9d3114f7fccec475efd937c006b010256abe3b115ed3d73c70722aec8" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="1dba412dbcfca11db5f51e9f1a53a1e31c46f96c62ed96b53a56bf65f48ffd69e01cc3febe46e2ea8e8f76e4e7f02e1480f2f1958035641dad33ffba38f96013" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="9fc3708f6e8b4cacc0dfd9522a82603a6c2305ad9c3a05f7de609da0961e281d6160bbb1148aeb96c3ef1713862f548ca189e520a4be32f75bdad612d1ea3381" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="3dd8d5bdff19bf942cfdd275d2fbbdca04b132e2b2b220f882f5270cf47646d6bdf13a079c0121d387b0107368b2e62cde2b949166c67283e8cfcc86eeee86cd" name="ant-contrib" arch="noarch">
  <version epoch="0" ver="1.0b3" rel="160000.2.2"/>
  <changelog author="mvyskocil@suse.com" date="1384516800">- don't require ant-junit for build, junit is sufficient
  * reducing of cycles</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Clean up a bit with spec-cleaner</changelog>
  <changelog author="archie@dellroad.org" date="1426161600">- Add back patch enabling the &lt;antcontrib:for&gt; task (boo#922324)
  * ant-contrib-1.0b3-enable-for-task.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * ant-contrib-sourcetarget.patch
  - build with java source and target 1.6
  - fixes the build with java 9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on the documentation</changelog>
  <changelog author="fstrba@suse.com" date="1667908800">- Modified patch:
  * local-ivy.patch
    + fix build with apache-ivy 2.5.1</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file a bit
- Removed patch:
  * ant-contrib-pom.patch
    + not needed any more with the javapackages-tools &gt;= 6</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="bcd98afa431abf30d55ad09dc687a21acf28727976885c10c2fa05b50e8c4619c03618863a4f6684032422fda47116d51acbd0ea8f93e343bc2a884b9e5ad5ba" name="ant-contrib-javadoc" arch="noarch">
  <version epoch="0" ver="1.0b3" rel="160000.2.2"/>
  <changelog author="mvyskocil@suse.com" date="1384516800">- don't require ant-junit for build, junit is sufficient
  * reducing of cycles</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Clean up a bit with spec-cleaner</changelog>
  <changelog author="archie@dellroad.org" date="1426161600">- Add back patch enabling the &lt;antcontrib:for&gt; task (boo#922324)
  * ant-contrib-1.0b3-enable-for-task.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * ant-contrib-sourcetarget.patch
  - build with java source and target 1.6
  - fixes the build with java 9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on the documentation</changelog>
  <changelog author="fstrba@suse.com" date="1667908800">- Modified patch:
  * local-ivy.patch
    + fix build with apache-ivy 2.5.1</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file a bit
- Removed patch:
  * ant-contrib-pom.patch
    + not needed any more with the javapackages-tools &gt;= 6</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="1966c0e030495dbca75bc3c565b2faa606242e6e764dfa1d273317e5b1f383ced61e160028048ec18d17666d505f1112ca919c5348ad437c8d963908b1a6f7af" name="ant-contrib-manual" arch="noarch">
  <version epoch="0" ver="1.0b3" rel="160000.2.2"/>
  <changelog author="mvyskocil@suse.com" date="1384516800">- don't require ant-junit for build, junit is sufficient
  * reducing of cycles</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Clean up a bit with spec-cleaner</changelog>
  <changelog author="archie@dellroad.org" date="1426161600">- Add back patch enabling the &lt;antcontrib:for&gt; task (boo#922324)
  * ant-contrib-1.0b3-enable-for-task.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * ant-contrib-sourcetarget.patch
  - build with java source and target 1.6
  - fixes the build with java 9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on the documentation</changelog>
  <changelog author="fstrba@suse.com" date="1667908800">- Modified patch:
  * local-ivy.patch
    + fix build with apache-ivy 2.5.1</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file a bit
- Removed patch:
  * ant-contrib-pom.patch
    + not needed any more with the javapackages-tools &gt;= 6</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="473796be9fc1ce27f3002521e9f364ce858cc4aaea08dd17e701c16263df09c864fb5419fc86cda852fcf0521f65f6455229825818a3e6038db5464810b07d1a" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="279817c56be03115513422a969f4ef1aac5b38bae1138c0bf7cc6e5f8d813fca1ad9711cc61f6e942529cd5c6874b2901012810bf6f28e504bdcf01ea23f56de" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="b19d0f24c0164986f123f5ad1f9fe2320addeb60601af49faf1ab5f93fefaee38c41ee4e513ab2bd097cb5138f0647e83f0d9d9185cb6ad941f93a1bfb030079" name="ant-jakartamail" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="f5919d96491fd277172129c6d2b1479318f7641ce02807a03d057873bd26e3597cd4ee09592ef492f365adae03b93cdc40114885e0c9aa1dae2ffdf7b18ce52f" name="ant-jakartamail" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="af1a29156a1e30c8a63c762ee8100098088dbb65c6f47258d5f12022650ecca6cba0ffa8b3ab55a6956cf70747cad93ff69c13ba481dcbc24f7a15aee0ac0295" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="5ed5c1a2537862cf417560bfd74e0925fa967670d669b9839caa5145b5eeabafeb50a834738d86e21eaf770a24719e8fbc4d45b1b209fd9407ec91a30b3d62e1" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="7373e62ec027f5adb9f59e0b6f450c1cccd7ea63b3f020d79055b03933417254e9d12d75cd3c778fa85ed0f5ab2f181c2e9231086a9b9a60fd2765f79ad9d127" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="ea7e1492e3a729845c346fba97ef79d62563914c1847a25b0f7c081a40e1e5d94de618c7ad5847ce6d418f2c37ce9f5c282ed6a4b6fc733e22cc9e5239fc7bf7" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="4b375296d1a72c1822169f9c02a05766551ddcbe9b6e96dea433686886151d1d84988817efbf0e8e1fecd56a037cc73f2fb085dca9e03f2ebc2883f2b17b120e" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="87a6aa2d01690bb1e9be2cdd47c76b5b0fb41cf6bbd5d634385dd6a87f515ccd1e834c6a1121e2c3232ef9635a7c42eabfce48291267eeef36280fd6344af947" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="0e457ae73eedcb2df603e4ca00462425cca9dbc9ffe35a13788fdcb97dca427940f461e5ee54fc7239e8e78e2c524dddee15737e4c0dec38af6dec523335f810" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="f00e77438492961323d1f71cc52a2e0d870189f71fcce541828aacd2e18dade73fed3e6afe5952a078475880e709ce15533134f8107cba1f94ce7f534b6c532c" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="fd954dce656d0e6d8b30fc7643c492cc510848f5924fac945bab3bc33528c83a88abd5ceb9d5a8a685759aa5e3b17bdb904f44cc57d9cc5dac701f790db31168" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="29266e037c5bf1ea396c72e2cac3d22a1010bcece9654376de167b23f8a05f47160046d5c89cff2876076ffdb5ef46c186c6e0409581dcd9fec668cb5de4cc0e" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="623cb222970748e994ea7ab7f6b031169cc99a383b86fdab8d542dd6b0ba07d6c02861f3c38a0db0dad5d0f04547ee66a8730b1a5cf2e4b4bb2d230cc65cd614" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="0047d724626600128e4aa3ad55696f7854966fb972ce872d27a48d7b6a700408aeb90d5a87e5ff51aa2c7248716704f8eb293057bedc727af0560889cc2949c8" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="8a1494e0f11f1db330b5c98c1433582bd87c0d021b4834bfebcb51bf7353785e3e4ce267c875fcf6ed2bc3d8e83561b910ad554800a347c83795b865219ce4bf" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="7ec4fce418098f7c60916d75081661eae6d6eeb11d1156f06d6de95b91035c678db395d1dcc7659bbdb4b521a6bf9d57f3859e36379460a6111ac708a7186927" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="af66f07984847faa32fab91235e0879639cffb22d0a79f2cc7499cf35bb8df0a40cc837269115b239cc249f19173081d7b72e10d1e86ed4128a4bd49ff8cd2b1" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="4aab2d5f857124d184df2fb56b8a3a7810ab8aeda9d8b5ca116e0b0581011c8fddbd9d3c79b5cfbf5f1235418139d4fe07e004d7664eadc799e179cae1ccecd4" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="2e4b1e162be3cc5b9ac5097c8075331548749fbcd643585301a61304a67e9e140c0616807b3ad34b7c6815667e53687036b895dbeee27a64f59dc32b31845fcf" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="41005e65dca9dca28955cd697d7e6afdf62bf867c63476c0c620ad9a5beaf0a18c4388dae2bda8b46b278f6f0d9b67da97637f187b7ca8ebef64ee8ecee15db8" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="ed2e601dbf2736c7ba74df7655b51eecc07eaff19b8cd0ad96fbdd8f19c3074de587149ef999a77fbeac0b2cdc960f57bee72498c69b568d1362d7c472781a91" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="36ee97c970ce58d58ed467a331b2045d19126aa628b76ecc92950aa23c95872dbdd9cbbd0862a539e97a20c208f4203f9543f6b2c571e31b14d04eef828b04b4" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="69d4b2b30bbe336201165f73b31706d68ee6a3f4e773c69961c66a37fc3c6e599060d36aad9f6478b1b454404dac1063109956efb872ad38c8cbf865fde8d13e" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1694433600">- Added patch:
  * reproducible-propertyfile-task.patch
    + Debian patch to improve propertyfile task in RPM builds by
    using the date specified by the SOURCE_DATE_EPOCH variable
    in the header of the .properties file generated</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
</package>
<package pkgid="f7f135ec9a59703b13cea8a70ffc8a5c333a84f2a9affb857742a4cc07293508dd15135aadd902a103f4950d050b834e06e73d1c96c3b7e7495d0bb082281f4f" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="160000.3.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1706270400">- Add forgotten univocity-parsers to
  %{_sysconfdir}/ant.d/junitlauncher (needed to run unit tests
  annotated with @CsvSource and @CsvFileSource)</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714219200">- Put hamcrest on the classpath of ant-junit module</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1714824000">- Add forgotten open-test-reporting/events to
  %{_sysconfdir}/ant.d/junitlauncher</changelog>
  <changelog author="fstrba@suse.com" date="1721304000">- Added patches:
  * reproducible-jar-mtime.patch
    + make the modification times of files in a jar file
    reproducible
  * reproducible-javadoc.patch
    + make javadoc generation reproducible: don't generate
    timestamps, and normalize locale and encoding</changelog>
  <changelog author="fstrba@suse.com" date="1723550400">- Modified patches:
  * reproducible-jar-mtime.patch
    + attempt more normalization of mtimes in jar files
  * reproducible-javadoc.patch
    + fix the patch to work with custom doclets too</changelog>
  <changelog author="fstrba@suse.com" date="1726574400">- Modified patch:
  * reproducible-jar-mtime.patch
    + try different approach to get bit-reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1730721600">- Upgrade to version 1.10.15
  * Bug fixes:
    + Fixes an regression, introduced in Ant 1.10.13, where
    pathconvert would unintentionally trim the string output.
    Bugzilla Report 67082
    + Fixes a bug in &lt;depend&gt; task which would throw a
    ClassFormatError if it encountered constant pool entry type
    17.  Bugzilla Report 66552
    + Launching ant.bat from within a Java program using
    java.lang.Runtime.exec() could result in an unexpected
    failure. This has now been fixed.  Bugzilla Report 67417
    + Fixes an issue in bootstrap.bat when trying to detect if the
    "javac" command in the JDK supports the "--release" option.
    Github Pull Request #205
    + Fixes a bug in
    org.apache.tools.ant.taskdefs.email.EmailAddress which would
    throw a java.lang.StringIndexOutOfBoundsException if the
    email address passed to its constructor was an empty String.
    Bugzilla Report 68462
    + legacy-xml reporter of junitlauncher task was using a
    non-buffered outputstream when generating the report. This
    introduces severe performance penalties since the writes
    translate to native write system calls. This has been fixed
    to use a BufferedOutputStream.  Github Pull Request #207
  * Other changes:
    + exec task now logs the process' non-zero exit code at INFO
    level instead of the previous ERROR level. The following
    message from exec task is the one who's level has been
    changed:
    Result: 1
    Bugzilla Report 26453
    + Removes direct references to
    com.sun.net.ssl.internal.ssl.Provider class from the mail
    task, since that internal JDK class is no longer available in
    recent versions of Java.  Bugzilla Report 68460
    + &lt;replaceregexp&gt; has a new failOnError attribute which, when
    enabled, makes the task throw a BuildException for certain
    error cases that will only be logged otherwise.  Github Pull
    Request #206
    + &lt;ftp&gt; task now has a new "useSecureDataChannel" attribute
    which can be set to true, when ftps is enabled, to enable
    secure data channel.  Bugzilla Report 68773
- Unify .spec files
  * remove ant-antlr.changes
  * remove ant-antlr.spec
  * remove ant-junit.changes
  * remove ant-junit.spec
  * remove ant-junit5.changes
  * remove ant-junit5.spec</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Remove the stale pre_checkin.sh, a relict from before the
  _multirelease spec</changelog>
</package>
<package pkgid="e14b61221b314f2f2b13e431359b35197d2648d2bef738715822bd21a45ac846b19fc086929702cc9c09606672d76d54816f46ae368c59396597d128b8ab160d" name="anthy" arch="x86_64">
  <version epoch="0" ver="9100h" rel="160000.1.2"/>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Switch to %autosetup (rediff bugzilla-1175274-emacs-27.1.patch
  as p1)</changelog>
  <changelog author="i@marguerite.su" date="1692619200">- add anthy-set-face-underline-p.patch
  * set-face-underline-p is an alias for set-face-underline
    and was dreprecated since emacs 24.3</changelog>
</package>
<package pkgid="ec4fa8a11a01b3b44f2f4ec67f2d7ecebce9945e18fbe74c372f8c70df5b224df435a86ce90d318a53d1fce0362cf841695f38c3f72750bedc5f294eba3ecdd5" name="anthy-devel" arch="x86_64">
  <version epoch="0" ver="9100h" rel="160000.1.2"/>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Switch to %autosetup (rediff bugzilla-1175274-emacs-27.1.patch
  as p1)</changelog>
  <changelog author="i@marguerite.su" date="1692619200">- add anthy-set-face-underline-p.patch
  * set-face-underline-p is an alias for set-face-underline
    and was dreprecated since emacs 24.3</changelog>
</package>
<package pkgid="7efdc0403d714331054c627f6688fa0c3ef1059ff4d7bd61478d42e5f355fd799275f1f1372eef068c9c27009b8b184ef677e4f728572c9adb4be2240c41640b" name="antimicrox" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="bp160.1.13"/>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1645790400">- Update to version 3.2.2
  - Change default working directory of launched executables
  - Fix typo (setting-&gt;settings)
  - Random Crashes during longer sessions
  - File with gamecontroller mappings not found
  - Empty application path in autoprofile
  - Enable checking for updates in Debian builds from GitHub
  - Log improvements and cleanup
  - Daemon mode support removed
  - Remove unused "map" and "display" argument options
  - Remove unused files With icons, resources and pertially
  - implemented importing utility
  - Use colourful antimicrox icon in tray by default
  - Update building docs
- Rebase fix_xcb_linker.patch and remove_datetime_aboutdialog.patch</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1650888000">- Update to version 3.2.3
  - Fixed bug: auto profile not saved when exe path is not defined
  - Added missing license for SDL_GameControllerDB
  - Many updates in translations:
  - Added Finnish translation by heidiwenger
  - Added Norwegian Bokmål translation bu comradekingu
  - Updated German, French, Italian and Polish translations
  - update translation files
  - Always show battery level in joystick status window
    (even when unknown)
  - Multiple refactors and cleanups removing deprecated code
- Add License Zlib: missing license for SDL_GameControllerDB</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1656072000">- Update to version 3.2.4
  - Implement modifier button threshold zone
    This allows mapping the analog range of a stick to walk/run in
    game without dedicated spring button.
  - Fix mouse calculations for multiple mice
  - Fix flickering JoyControlStickEditDialog layout
  - Implement proper offset and gain stick calibration
  - Increase minimum size of ButtonEditDialog
  - Fixes in translation utulities
  - Rename flag TRANS_KEEP_OBSOLETE to TRANS_REMOVE_OBSOLETE to
    improve readability
  - Fix wrong argument for utility deleting obsolete translations
  - Update translations: Russian, Finnish, French, Chinese,
    Portuguese</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1658232000">- Update to version 3.2.5
  - Implement motion sensor support. Motion sensor support is
    enabled, when build with SDL2 &gt;= 2.0.14.
  - Allow storing calibration for multiple controllers in a profile
  - Crash on close after copying set.
  - Remove unused "Game Controller Mapping" button.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1666699200">- Update to version 3.3.1
  - Hotfix release reverting PR #555 which can cause segfaults
- Changes in version 3.3.0
  - Add support for DualSense trigger haptic feedback
  - Selection "None" Preset does not change button labels
  - Multiple problems caused by invalid thread handling
  - Saving PS4 Controller setup stops set toggle from working
  - Saving Breaks Set Switching
  - Saving config breaks turbo
  - Warnings QObject: Cannot create children for a parent that
    is in a different thread
  - Fix some code warnings
  - Remove some unused code
  - Limit number of logged events
  - Some refactors and docs updates
  - Update SDL mappings database
  - Update translations: Korean, Ukrainian, Spanish</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1669118400">- Update to version 3.3.2
  * Use proper theme-based color for tab text
  * Show joystick battery level in tab
  * Fix broken obtaining path of active window by auto profile
  * Fix auto profile dialog does not populate title and
    application fields
  * Fix misspeled __BIG_ENDIAN constant
  * Fix advanced settings dialog freezes when pressing join on Linux
  * Remove disabling Auto-profile title box
  * don't minimize to taskbar by default on Linux</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1675080000">- Update to version 3.3.3
  * Add checkbox enabling numeric keypad in ButtonEditDialog
  * Update translations: Spanish, Korean, Russian
  * Add translations: Rusyn, Portugese(Brazil)
  * Name mismatch in set selector list
  * Shebang ignored in execute bind
  * Mouse spring mode not working in wayland session
  * Some code refactors and docs updates
  * Logs improvements</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1688731200">- Update to version 3.3.4
  * Update translations: Portugese(Brazil), Russian,
    Norwegian Bokmal
  * Add translations: Swedish
  * Fix and refactor adding default autoprofile
  * Fix GUI does not recognize super + action
  * Fix /dev/uinput static device node access pull
  * Fix building for SDL version between 2.0.12 and 2.0.16</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1710763200">- Update to version 3.4.0
  * Fix attaching window to a pinned launcher in Linux
  * Fixing builds with X11=OFF
  * Updated translations
  * New translations: Croatian, Turkish, Persian, Vietnamese
  * Fix a lot of deprecation warnings and other code changes
    required to migrate to QT6</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1723464000">- Update to version 3.4.1
  * Fix issues with accelerometer stability
  * Issue with float value for "Auto Reset Cycle After"
  * Accelerometer triggers when switching sets
  * Refactor outdated pieces of code
  * Update more universal QT libraries detection
  * Allow easy building with QT6 and ensure compatability
  * Bump minimal QT version requirement to 5.10
  * Updated translations: Chinese, Portugese, German, French
    and Finnish
  * Added Catalan language
  * And a lot of minor fixes and cleanups linked with QT6 and
    not only.</changelog>
</package>
<package pkgid="2a9a890b4dcf72fc6f2b833b679cef62aae66ebec7f8982e7c8db236e780fe199b46ec9e2114aea3e001e98d55806c7334155bcda8d2b91a10ef467b70fffa8d" name="antlr" arch="x86_64">
  <version epoch="0" ver="2.7.7" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not use old compat macros for python directories</changelog>
  <changelog author="tchvatal@suse.com" date="1536840000">- Do not create compat symlink for python stuff as it was not working
  before anyway
- Rename python package to python2-antlr (provide old symbol)</changelog>
  <changelog author="fstrba@suse.com" date="1542542400">- Install as maven artifact using the pom file from maven central</changelog>
  <changelog author="mliska@suse.cz" date="1564574400">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Not only provide python-antlr, but also obsolete it</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588852800">- Build antlr-manual package without examples files [bsc#1120360]
- Remove not needed files</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file and use javapackages-local &gt;= 6 features</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="83d63f229aed34a5e9dac9715973c2d2765f77d8fed049b20357ec57edf92927e9ba2101b4d04579c1887270423ac8e38ede24adc21af80786a8761fff300533" name="antlr-bootstrap" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1505908800">- Remove requirements of ecj-bootstrap and fastjar
  * use the gcj.jar that comes with gccN-java
  * use gjar-N instead of fastjar</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Remove requirement of gcc-java all together and build with
  any java version that exists and is able to use source and target
  1.6</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Speed-up build by compiling all *.java files in one javac
  invocation</changelog>
  <changelog author="bwiedemann@suse.com" date="1557403200">- Drop unused BuildRequires: zip+unzip</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file and use javapackages-local &gt;= 6 features</changelog>
  <changelog author="fstrba@suse.com" date="1727784000">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="6c423a42b9886191fb0a1934721e06f48d9dd0c3e0015eda61ff6ab88de6c63fa234c9f376c1d033f8494b6c120e1de0141973fa6dc7185fbc6675c17c92f43c" name="antlr-devel" arch="x86_64">
  <version epoch="0" ver="2.7.7" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not use old compat macros for python directories</changelog>
  <changelog author="tchvatal@suse.com" date="1536840000">- Do not create compat symlink for python stuff as it was not working
  before anyway
- Rename python package to python2-antlr (provide old symbol)</changelog>
  <changelog author="fstrba@suse.com" date="1542542400">- Install as maven artifact using the pom file from maven central</changelog>
  <changelog author="mliska@suse.cz" date="1564574400">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Not only provide python-antlr, but also obsolete it</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588852800">- Build antlr-manual package without examples files [bsc#1120360]
- Remove not needed files</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file and use javapackages-local &gt;= 6 features</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="4202552a405cd9b40fd47016fc6d7bdbf9196dddd2c94519f75ba68a173f00b409f9aa1ed2c1ba3042dc241ca109598324e56f55803972129fc8881ab08413cc" name="antlr-java" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not use old compat macros for python directories</changelog>
  <changelog author="tchvatal@suse.com" date="1536840000">- Do not create compat symlink for python stuff as it was not working
  before anyway
- Rename python package to python2-antlr (provide old symbol)</changelog>
  <changelog author="fstrba@suse.com" date="1542542400">- Install as maven artifact using the pom file from maven central</changelog>
  <changelog author="mliska@suse.cz" date="1564574400">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Not only provide python-antlr, but also obsolete it</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588852800">- Build antlr-manual package without examples files [bsc#1120360]
- Remove not needed files</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file and use javapackages-local &gt;= 6 features</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="4c3c294e07e5e60ebebefba3efa3c390e5313cd72645d312a3da79be6173b9b1b450b1c7caf103efb4e1b8bf49c53410b616a4eb877343263dea4b0e35de31de" name="antlr-manual" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="tchvatal@suse.com" date="1532088000">- Do not use old compat macros for python directories</changelog>
  <changelog author="tchvatal@suse.com" date="1536840000">- Do not create compat symlink for python stuff as it was not working
  before anyway
- Rename python package to python2-antlr (provide old symbol)</changelog>
  <changelog author="fstrba@suse.com" date="1542542400">- Install as maven artifact using the pom file from maven central</changelog>
  <changelog author="mliska@suse.cz" date="1564574400">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Not only provide python-antlr, but also obsolete it</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588852800">- Build antlr-manual package without examples files [bsc#1120360]
- Remove not needed files</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1697544000">- Clean the spec file and use javapackages-local &gt;= 6 features</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="34ef36a85394506690888792c47087bd172207ff195753506d1e23fccc1f859f2528d70b1d6cb7bd7594465ee18b013c5e5657b5ea10722f553c37523573d704" name="antlr3-bootstrap-tool" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568289600">- Initial packaging of antlr3 3.5.2 as multibuild package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668772800">- Update to 3.5.3:
  * change source compatibility to 1.8 and enable github workflows
  * Change Wiki URLs to theantlrguy.atlassian.net in README.txt
  * Bazel support
  * Modify patches:
  - Rebase osgi-manifest.patch and rename to antlr3-osgi-manifest.patch
  - Rename 0001-java8-fix.patch to antlr3-java8-fix.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1679054400">- No need to use enforcer plugin in controlled environment</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1694779200">- Override build date (boo#1047218)"</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694779201">- Added patches:
  * reproducible-order.patch
    + ensure reproducible elements order by sorting
  * reproducible-timestamp.patch
    + support SOURCE_DATE_EPOCH for generatedTimestamp
- Modified patch:
  * antlr3-generated_sources.patch
    + regenerate in cycle with stringtemplate4 to correspond to
    the reproducible build changes</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695643200">- Remove dependency on maven2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726920000">- Modified patch:
  * reproducible-order.patch
    + some more instances where the sorting (sorted containers)
    are needed
  * antlr3-generated_sources.patch
    + regenerate in cycle to correspond to the changes in the
    reproducible-order.patch</changelog>
</package>
<package pkgid="a29290b38e3f3015e7a20470b63300e2959e9dbfd2353c7e42d78416fbe150a6f1e961881c048ece6642c8fc679c96784d68b018d49c39086e213f097bb78221" name="antlr3-java" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568289600">- Initial packaging of antlr3 3.5.2 as multibuild package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668772800">- Update to 3.5.3:
  * change source compatibility to 1.8 and enable github workflows
  * Change Wiki URLs to theantlrguy.atlassian.net in README.txt
  * Bazel support
  * Modify patches:
  - Rebase osgi-manifest.patch and rename to antlr3-osgi-manifest.patch
  - Rename 0001-java8-fix.patch to antlr3-java8-fix.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1679054400">- No need to use enforcer plugin in controlled environment</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1694779200">- Override build date (boo#1047218)"</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694779201">- Added patches:
  * reproducible-order.patch
    + ensure reproducible elements order by sorting
  * reproducible-timestamp.patch
    + support SOURCE_DATE_EPOCH for generatedTimestamp
- Modified patch:
  * antlr3-generated_sources.patch
    + regenerate in cycle with stringtemplate4 to correspond to
    the reproducible build changes</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695643200">- Remove dependency on maven2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726920000">- Modified patch:
  * reproducible-order.patch
    + some more instances where the sorting (sorted containers)
    are needed
  * antlr3-generated_sources.patch
    + regenerate in cycle to correspond to the changes in the
    reproducible-order.patch</changelog>
</package>
<package pkgid="e06d2c41ed6f6c2b0e67197029ec751f1233c250d25797c7d0a32b618009c88042802e3d2a899bf1e347c1f62e1662428a96af846cd597a826437db580010bff" name="antlr3-java-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568289600">- Initial packaging of antlr3 3.5.2 as multibuild package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668772800">- Update to 3.5.3:
  * change source compatibility to 1.8 and enable github workflows
  * Change Wiki URLs to theantlrguy.atlassian.net in README.txt
  * Bazel support
  * Modify patches:
  - Rebase osgi-manifest.patch and rename to antlr3-osgi-manifest.patch
  - Rename 0001-java8-fix.patch to antlr3-java8-fix.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1679054400">- No need to use enforcer plugin in controlled environment</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1694779200">- Override build date (boo#1047218)"</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694779201">- Added patches:
  * reproducible-order.patch
    + ensure reproducible elements order by sorting
  * reproducible-timestamp.patch
    + support SOURCE_DATE_EPOCH for generatedTimestamp
- Modified patch:
  * antlr3-generated_sources.patch
    + regenerate in cycle with stringtemplate4 to correspond to
    the reproducible build changes</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695643200">- Remove dependency on maven2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726920000">- Modified patch:
  * reproducible-order.patch
    + some more instances where the sorting (sorted containers)
    are needed
  * antlr3-generated_sources.patch
    + regenerate in cycle to correspond to the changes in the
    reproducible-order.patch</changelog>
</package>
<package pkgid="4972eadd5af53d81623babc2887062966faeccf06756a2d03b300b30b1fd8e8b7234b7b2a1141a81b35bf0a485548427deb00af8ab1684a830ed7a148652d259" name="antlr3-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568289600">- Initial packaging of antlr3 3.5.2 as multibuild package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668772800">- Update to 3.5.3:
  * change source compatibility to 1.8 and enable github workflows
  * Change Wiki URLs to theantlrguy.atlassian.net in README.txt
  * Bazel support
  * Modify patches:
  - Rebase osgi-manifest.patch and rename to antlr3-osgi-manifest.patch
  - Rename 0001-java8-fix.patch to antlr3-java8-fix.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1679054400">- No need to use enforcer plugin in controlled environment</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1694779200">- Override build date (boo#1047218)"</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694779201">- Added patches:
  * reproducible-order.patch
    + ensure reproducible elements order by sorting
  * reproducible-timestamp.patch
    + support SOURCE_DATE_EPOCH for generatedTimestamp
- Modified patch:
  * antlr3-generated_sources.patch
    + regenerate in cycle with stringtemplate4 to correspond to
    the reproducible build changes</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695643200">- Remove dependency on maven2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726920000">- Modified patch:
  * reproducible-order.patch
    + some more instances where the sorting (sorted containers)
    are needed
  * antlr3-generated_sources.patch
    + regenerate in cycle to correspond to the changes in the
    reproducible-order.patch</changelog>
</package>
<package pkgid="6148862a2c0396d395d4802c3b8d15993422533332c2f77ccd915b81594c4aa3027ee7f332e33f60a3dcb2ed7435956da31ee2dffc8ac2d9ade14d139ecd79a1" name="antlr3-tool" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568289600">- Initial packaging of antlr3 3.5.2 as multibuild package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668772800">- Update to 3.5.3:
  * change source compatibility to 1.8 and enable github workflows
  * Change Wiki URLs to theantlrguy.atlassian.net in README.txt
  * Bazel support
  * Modify patches:
  - Rebase osgi-manifest.patch and rename to antlr3-osgi-manifest.patch
  - Rename 0001-java8-fix.patch to antlr3-java8-fix.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1679054400">- No need to use enforcer plugin in controlled environment</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1694779200">- Override build date (boo#1047218)"</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694779201">- Added patches:
  * reproducible-order.patch
    + ensure reproducible elements order by sorting
  * reproducible-timestamp.patch
    + support SOURCE_DATE_EPOCH for generatedTimestamp
- Modified patch:
  * antlr3-generated_sources.patch
    + regenerate in cycle with stringtemplate4 to correspond to
    the reproducible build changes</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1695643200">- Remove dependency on maven2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726920000">- Modified patch:
  * reproducible-order.patch
    + some more instances where the sorting (sorted containers)
    are needed
  * antlr3-generated_sources.patch
    + regenerate in cycle to correspond to the changes in the
    reproducible-order.patch</changelog>
</package>
<package pkgid="439720acf64f36a6caa989b4d8e120273e9de5b48b9f6d808169ec04b48d73f7c9a3bd589ed076edb89ad9811732ec21b81b226216ef217b4fefd8d77c11ce8f" name="antlr3c-devel" arch="x86_64">
  <version epoch="0" ver="3.4" rel="bp160.1.12"/>
  <changelog author="fisiu@opensuse.org" date="1407931200">- Initial package at version 3.4.</changelog>
  <changelog author="tchvatal@suse.com" date="1410264000">- Cleanup with spec-cleaner for factory inclusion</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Fixup shlib package name (libantlr3c3_4 should be libantlr3c-3_4,
  since the filename *is* libantlr3c-3.4.so)</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Use optflags when building
- Update usage of provides/obsoletes</changelog>
  <changelog author="jslaby@suse.com" date="1466078400">- port patches from home:jirislaby:statica
  * add baselibs.conf to have 32bit libs too
  * add fix-LIST-memory-leak.patch
  * add fix-hash-double-free.patch
- use standard library versioning. We do not obsolete the old
  libraries as they are removed via weakremovers.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="fae0346a242cc4ba286b3daf033ea33e977865061a3d316da4928b8d27e7c8777d8caee811db967368a4f53d7d5adfe63cb8ec057e3d73ad800c8bf444745fc7" name="aom-tools" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="160000.2.2"/>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1683028800">- Revert to BSD-2-Clause licence tag to only use SPDX valid
  license tag.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683720000">- Update to version 3.6.1:
  * aomedia:2871: Guard the support of the 7.x and 8.x levels for
    AV1 under the CONFIG_CWG_C013 config flag, and only output the
    7.x and 8.x levels when explicitly requested.
  * aomedia:3382: Choose sb_size by ppi instead of svc.
  * aomedia:3384: Fix fullpel search limits.
  * aomedia:3388: Replace left shift of xq_active by
    multiplication.
  * aomedia:3389: Fix MV clamping in av1_mv_pred.
  * aomedia:3390: set_ld_layer_depth: cap max_layer_depth to
    MAX_ARF_LAYERS.
  * aomedia:3418: Fix MV clamping in av1_int_pro_motion_estimation.
  * aomedia:3429: Move lpf thread data init to
    lpf_pipeline_mt_init().
  * b:266719111: Fix undefined behavior in Arm Neon code.
  * b:269840681: nonrd_opt: align scan tables.
  * rtc: Fix is_key_frame setting in variance partition.
  * Build: Fix build with clang-cl and Visual Studio.</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693569600">- New upstream release 3.7.0
  - New Features
  * New codec controls:
  * AV1E_SET_QUANTIZER_ONE_PASS: Set quantizer for each frame.
  * AV1E_ENABLE_RATE_GUIDE_DELTAQ: enable the rate distribution guided delta
    quantization in all intra mode. The "enable-rate-guide-deltaq" option is
    added for this control.
  * AV1E_SET_RATE_DISTRIBUTION_INFO: set the input file for rate
    distribution used in all intra mode. The "rate-distribution-info" option
    is added for this control.
  * AV1E_GET_LUMA_CDEF_STRENGTH
  * AV1E_SET_BITRATE_ONE_PASS_CBR
  * AOM_SCALING_MODE is extended to include 2/3 and 1/3 scaling.
  * aom_tune_metric is extended to include AOM_TUNE_VMAF_SALIENCY_MAP.
    The "tune" option is extended to include "vmaf_saliency_map".
  * SVC example encoder svc_encoder_rtc is able to use the rate control
    library.
  * Loopfilter level and CDEF filter level is supported by RTC rate control
    library.
  * New speed (--cpu-used) 11, intended for RTC screen sharing, added for
    faster encoding with ~3% bdrate loss with 16% IC (instruction count)
    speedup compared to speed 10.
  - Compression Efficiency Improvements
  * Improved VoD encoding performance
  * 0.1-0.6% BDrate gains for encoding speeds 2 to 6
  * Rate control accuracy improvement in VBR mode
  * RTC encoding improvements
  * Screen content mode: 10-19% BDrate gains for speeds 6 - 10
  * Temporal layers video mode, for speed 10:
  * 2 temporal layers on low resolutions: 13-15% BDrate gain
  * 3 temporal layers on VGA/HD: 3-4% BDrate gain
  - Perceptual Quality Improvements
  * Fixed multiple block and color artifacts for RTC screen content by
  * Incorporating color into RD cost for IDTX
  * Reducing thresholds for palette mode in non RD mode
  * Allowing more palette mode testing
  * Improved color sensitivity for altref in non-RD mode.
  * Reduced video flickering for temporal layer encoding.
  - Speedup and Memory Optimizations
  * Speed up the VoD encoder
  * 2-5% for encoding speed 2 to 4
  * 9-15% for encoding speed 5 to 6
  * ARM
  * Standard bitdepth
  * speed 5: +31%
  * speed 4: +2%
  * speed 3: +9%
  * speed 2: +157%
  * High bitdepth
  * speed 5: +85%
  * RTC speedups
  * Screen content mode
  * 15% IC speedup for speeds 6-8
  * ARM: 7% for speed 9, 3% for speed 10
  * Temporal layers video mode
  * 7% speedup for 3 temporal layers on VGA/HD, for speed 10
  * Single layer video
  * x86: 2% IC speedup for speeds 7-10
  * ARM: 2-4% speedup across speeds 5-10
  - Bug Fixes
  * aomedia:3261 Assertion failed when encoding av1 with film grain and
    '--monochrome' flag
  * aomedia:3276 ensure all allocations are checked (partial fix)
  * aomedia:3451 The libaom library calls exit()
  * aomedia:3450 enable -Wshadow for C++ sources
  * aomedia:3449 Test Seg Faults After
    b459af3e345be402db052a143fcc5383d4b74cbd
  * aomedia:3416 prune unused symbols / restrict symbol visibility
  * aomedia:3443 Jenkins failure:
    UninstantiatedParameterizedTestSuite&lt;EstimateNoiseTest&gt;
  * aomedia:3434 realtime failures with CONFIG_BITSTREAM_DEBUG=1
  * aomedia:3433 DeltaqModeTest crash w/row_mt=0
  * aomedia:3429 Encoder crash when turn on both ExternalResize and
    g_threads &gt; 2
  * aomedia:3438 Build failure with
    `-DSANITIZE=address -DBUILD_SHARED_LIBS=ON` when using clang.
  * aomedia:3435 Block artifacts when scrolling with AV1 in screen sharing
    scenarios
  * aomedia:3170 vmaf tune presets produce extreme glitches in one scene
  * aomedia:3401 Building shared libaom with MSVC results in a race condition
    with the export library
  * aomedia:3420 Floating point exception in av1_tpl_get_frame_importance()
  * aomedia:3424 heap-buffer-overflow in ScaleFilterCols_16_C() (SIGABRT)
  * aomedia:3417 examples/svc_encoder_rtc.c is using internal macros and
    functions
  * aomedia:3372 SEGV in assign_frame_buffer_p av1_common_int.h
  * aomedia:3130 'cpu-features.h' file not found on Android NDK 22
  * aomedia:3415 Encoder/decoder mismatch for svc_encoder_rtc running
    1 SL 3 TL
  * aomedia:3412 Lossless Mode Fails Loopback Bit Test
  * aomedia:3409 The use of AV1_VAR_OFFS in av1/encoder/var_based_part.c is
    incorrect for high bit depths
  * aomedia:3403 test_libaom fails with error message
    "feenableexcept() failed" on Linux arm
  * aomedia:3370 Random color block at fast motion area
  * aomedia:3393 Assertion failure in av1_convolve_2d_sr_c()
  * aomedia:3392 Strong artifacting for high bit-depth real-time
  * aomedia:3376 aomenc --threads=10 --deltaq-mode=3 crashes after
    "Allintra: multi-threading of calculating differential contrast"
  * aomedia:3380 Crashes and ASan and TSan errors in deltaq-mode=3
    multithreading code
  * chromium:1410766 heap-buffer-overflow in aom_yv12_copy_v_c
  * Cannot set level via AV1E_SET_TARGET_SEQ_LEVEL_IDX
  * Encoding failure due to the use of loop restoration with unintended use of
    lossless mode.
  * Signed integer overflow in scan_past_frames
  * Signed integer overflow in update_a_sep_sym
  * Flickering in AV1 1440p/2160p HDR transcodes
  * Fixed artifacts with screen share at encoder speed 10
  * Fixed prediction setup for IDTX
- Use system libraries instead of vendored ones
  * system-gtest.patch
  * system-yuv.patch
- Enable debuginfo also on modules written in assembly
- Enable building PowerPC-specific optimizations
- Enable Neon optimized code on ARM and fix runtime CPU detection
- Fix missing images in documentation</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693915200">- Split docs to multibuild to avoid dependency cycle</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 3.7.1:
  * Bug Fixes:
  - aomedia:3349: heap overflow when increasing resolution
  - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning
    on aom/av1/encoder/motion_search_facade.c
  - aomedia:3489: Detect encoder and image high bit depth
    mismatch
  - aomedia:3491: heap-buffer-overflow on frame size change
  - b/303023614:  Segfault at encoding time for high bit depth
    images
- Switch buildtime compression to zst.</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1720267200">- Update to version 3.7.2:
  * aomedia:3520: get_cubic_kernel_dbl: Assertion `0 &lt;= x &amp;&amp; x &lt; 1'
    failed.
  * aomedia:3526: alloc_compressor_data() is called during every
    aom_codec_control() call on the encoder. Note that this partially
    reverts the fix for bug aomedia:3349.
  * b/310457427 and b/310766628: Only use rec_sse in CBR mode.</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1724587200">- Exclude third_party from obscpio</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726488000">- Update to version 3.9.1:
  * This release includes new codec interfaces, compression
    efficiency and perceptual improvements, speedup for RTC for both
    video and screen content, and many bug fixes.
- Please see https://aomedia.googlesource.com/aom/+/refs/tags/v3.9.1/CHANGELOG
  for detailed changes since version 3.7.2
- Rebase patches with quilt.</changelog>
  <changelog author="stimut@gmail.com" date="1737547200">- Update to version 3.11.0:
  * This release includes perceptual quality improvements, binary
    size reduction under certain configurations, new codec interfaces,
    speedup and memory optimizations, and many bug fixes.
  * Default encoder configuration changed for the
    AOM_USAGE_REALTIME mode
- See https://aomedia.googlesource.com/aom/+/refs/tags/v3.11.0/CHANGELOG
  for detailed changes since version 3.9.1
- Updated patches</changelog>
</package>
<package pkgid="84d71b2818a7bfa14d2ee632bceb35f14db0a01840279268b87f1af2103ac6f3a17c8655b2748bc3d8ab5508766d50972055b9cdf79c0a3dd4125c677d30a5a5" name="aom-tools" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="160000.3.1"/>
  <changelog author="fcrozat@suse.com" date="1683028800">- Revert to BSD-2-Clause licence tag to only use SPDX valid
  license tag.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683720000">- Update to version 3.6.1:
  * aomedia:2871: Guard the support of the 7.x and 8.x levels for
    AV1 under the CONFIG_CWG_C013 config flag, and only output the
    7.x and 8.x levels when explicitly requested.
  * aomedia:3382: Choose sb_size by ppi instead of svc.
  * aomedia:3384: Fix fullpel search limits.
  * aomedia:3388: Replace left shift of xq_active by
    multiplication.
  * aomedia:3389: Fix MV clamping in av1_mv_pred.
  * aomedia:3390: set_ld_layer_depth: cap max_layer_depth to
    MAX_ARF_LAYERS.
  * aomedia:3418: Fix MV clamping in av1_int_pro_motion_estimation.
  * aomedia:3429: Move lpf thread data init to
    lpf_pipeline_mt_init().
  * b:266719111: Fix undefined behavior in Arm Neon code.
  * b:269840681: nonrd_opt: align scan tables.
  * rtc: Fix is_key_frame setting in variance partition.
  * Build: Fix build with clang-cl and Visual Studio.</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693569600">- New upstream release 3.7.0
  - New Features
  * New codec controls:
  * AV1E_SET_QUANTIZER_ONE_PASS: Set quantizer for each frame.
  * AV1E_ENABLE_RATE_GUIDE_DELTAQ: enable the rate distribution guided delta
    quantization in all intra mode. The "enable-rate-guide-deltaq" option is
    added for this control.
  * AV1E_SET_RATE_DISTRIBUTION_INFO: set the input file for rate
    distribution used in all intra mode. The "rate-distribution-info" option
    is added for this control.
  * AV1E_GET_LUMA_CDEF_STRENGTH
  * AV1E_SET_BITRATE_ONE_PASS_CBR
  * AOM_SCALING_MODE is extended to include 2/3 and 1/3 scaling.
  * aom_tune_metric is extended to include AOM_TUNE_VMAF_SALIENCY_MAP.
    The "tune" option is extended to include "vmaf_saliency_map".
  * SVC example encoder svc_encoder_rtc is able to use the rate control
    library.
  * Loopfilter level and CDEF filter level is supported by RTC rate control
    library.
  * New speed (--cpu-used) 11, intended for RTC screen sharing, added for
    faster encoding with ~3% bdrate loss with 16% IC (instruction count)
    speedup compared to speed 10.
  - Compression Efficiency Improvements
  * Improved VoD encoding performance
  * 0.1-0.6% BDrate gains for encoding speeds 2 to 6
  * Rate control accuracy improvement in VBR mode
  * RTC encoding improvements
  * Screen content mode: 10-19% BDrate gains for speeds 6 - 10
  * Temporal layers video mode, for speed 10:
  * 2 temporal layers on low resolutions: 13-15% BDrate gain
  * 3 temporal layers on VGA/HD: 3-4% BDrate gain
  - Perceptual Quality Improvements
  * Fixed multiple block and color artifacts for RTC screen content by
  * Incorporating color into RD cost for IDTX
  * Reducing thresholds for palette mode in non RD mode
  * Allowing more palette mode testing
  * Improved color sensitivity for altref in non-RD mode.
  * Reduced video flickering for temporal layer encoding.
  - Speedup and Memory Optimizations
  * Speed up the VoD encoder
  * 2-5% for encoding speed 2 to 4
  * 9-15% for encoding speed 5 to 6
  * ARM
  * Standard bitdepth
  * speed 5: +31%
  * speed 4: +2%
  * speed 3: +9%
  * speed 2: +157%
  * High bitdepth
  * speed 5: +85%
  * RTC speedups
  * Screen content mode
  * 15% IC speedup for speeds 6-8
  * ARM: 7% for speed 9, 3% for speed 10
  * Temporal layers video mode
  * 7% speedup for 3 temporal layers on VGA/HD, for speed 10
  * Single layer video
  * x86: 2% IC speedup for speeds 7-10
  * ARM: 2-4% speedup across speeds 5-10
  - Bug Fixes
  * aomedia:3261 Assertion failed when encoding av1 with film grain and
    '--monochrome' flag
  * aomedia:3276 ensure all allocations are checked (partial fix)
  * aomedia:3451 The libaom library calls exit()
  * aomedia:3450 enable -Wshadow for C++ sources
  * aomedia:3449 Test Seg Faults After
    b459af3e345be402db052a143fcc5383d4b74cbd
  * aomedia:3416 prune unused symbols / restrict symbol visibility
  * aomedia:3443 Jenkins failure:
    UninstantiatedParameterizedTestSuite&lt;EstimateNoiseTest&gt;
  * aomedia:3434 realtime failures with CONFIG_BITSTREAM_DEBUG=1
  * aomedia:3433 DeltaqModeTest crash w/row_mt=0
  * aomedia:3429 Encoder crash when turn on both ExternalResize and
    g_threads &gt; 2
  * aomedia:3438 Build failure with
    `-DSANITIZE=address -DBUILD_SHARED_LIBS=ON` when using clang.
  * aomedia:3435 Block artifacts when scrolling with AV1 in screen sharing
    scenarios
  * aomedia:3170 vmaf tune presets produce extreme glitches in one scene
  * aomedia:3401 Building shared libaom with MSVC results in a race condition
    with the export library
  * aomedia:3420 Floating point exception in av1_tpl_get_frame_importance()
  * aomedia:3424 heap-buffer-overflow in ScaleFilterCols_16_C() (SIGABRT)
  * aomedia:3417 examples/svc_encoder_rtc.c is using internal macros and
    functions
  * aomedia:3372 SEGV in assign_frame_buffer_p av1_common_int.h
  * aomedia:3130 'cpu-features.h' file not found on Android NDK 22
  * aomedia:3415 Encoder/decoder mismatch for svc_encoder_rtc running
    1 SL 3 TL
  * aomedia:3412 Lossless Mode Fails Loopback Bit Test
  * aomedia:3409 The use of AV1_VAR_OFFS in av1/encoder/var_based_part.c is
    incorrect for high bit depths
  * aomedia:3403 test_libaom fails with error message
    "feenableexcept() failed" on Linux arm
  * aomedia:3370 Random color block at fast motion area
  * aomedia:3393 Assertion failure in av1_convolve_2d_sr_c()
  * aomedia:3392 Strong artifacting for high bit-depth real-time
  * aomedia:3376 aomenc --threads=10 --deltaq-mode=3 crashes after
    "Allintra: multi-threading of calculating differential contrast"
  * aomedia:3380 Crashes and ASan and TSan errors in deltaq-mode=3
    multithreading code
  * chromium:1410766 heap-buffer-overflow in aom_yv12_copy_v_c
  * Cannot set level via AV1E_SET_TARGET_SEQ_LEVEL_IDX
  * Encoding failure due to the use of loop restoration with unintended use of
    lossless mode.
  * Signed integer overflow in scan_past_frames
  * Signed integer overflow in update_a_sep_sym
  * Flickering in AV1 1440p/2160p HDR transcodes
  * Fixed artifacts with screen share at encoder speed 10
  * Fixed prediction setup for IDTX
- Use system libraries instead of vendored ones
  * system-gtest.patch
  * system-yuv.patch
- Enable debuginfo also on modules written in assembly
- Enable building PowerPC-specific optimizations
- Enable Neon optimized code on ARM and fix runtime CPU detection
- Fix missing images in documentation</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1693915200">- Split docs to multibuild to avoid dependency cycle</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 3.7.1:
  * Bug Fixes:
  - aomedia:3349: heap overflow when increasing resolution
  - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning
    on aom/av1/encoder/motion_search_facade.c
  - aomedia:3489: Detect encoder and image high bit depth
    mismatch
  - aomedia:3491: heap-buffer-overflow on frame size change
  - b/303023614:  Segfault at encoding time for high bit depth
    images
- Switch buildtime compression to zst.</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1720267200">- Update to version 3.7.2:
  * aomedia:3520: get_cubic_kernel_dbl: Assertion `0 &lt;= x &amp;&amp; x &lt; 1'
    failed.
  * aomedia:3526: alloc_compressor_data() is called during every
    aom_codec_control() call on the encoder. Note that this partially
    reverts the fix for bug aomedia:3349.
  * b/310457427 and b/310766628: Only use rec_sse in CBR mode.</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1724587200">- Exclude third_party from obscpio</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726488000">- Update to version 3.9.1:
  * This release includes new codec interfaces, compression
    efficiency and perceptual improvements, speedup for RTC for both
    video and screen content, and many bug fixes.
- Please see https://aomedia.googlesource.com/aom/+/refs/tags/v3.9.1/CHANGELOG
  for detailed changes since version 3.7.2
- Rebase patches with quilt.</changelog>
  <changelog author="stimut@gmail.com" date="1737547200">- Update to version 3.11.0:
  * This release includes perceptual quality improvements, binary
    size reduction under certain configurations, new codec interfaces,
    speedup and memory optimizations, and many bug fixes.
  * Default encoder configuration changed for the
    AOM_USAGE_REALTIME mode
- See https://aomedia.googlesource.com/aom/+/refs/tags/v3.11.0/CHANGELOG
  for detailed changes since version 3.9.1
- Updated patches</changelog>
  <changelog author="pgajdos@suse.com" date="1782302400">- added patches
  CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash [bsc#1268650]
  * libaom-CVE-2026-56208.patch
  CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary memory write [bsc#1268651]
  CVE-2026-56210: missing bounds check on layer_id inputs can lead to an out-of-bounds heap read [bsc#1268653]
  CVE-2026-56211: out-of-range spatial/temporal layer selection can lead to remote code execution [bsc#1268655]
  * libaom-CVE-2026-56209,56210,56211.patch
- added sources
  * .libaom.spec.swp
  * libaom-3.11.0.tar.zst
- remove _service</changelog>
</package>
<package pkgid="d62f4cdaafad1e459ca360837d45ad5df6ce92c7f75aaa1ba0503cc16b7d921903e13d808a78358124f710fc4f676577a05f6f5bda94ee536197b194692fca42" name="aopalliance" arch="noarch">
  <version epoch="0" ver="1.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540555200">- Initial packaging of aopalliance adapted from Fedora package</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Actually say what's included.</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="fcrozat@suse.com" date="1684152000">- Update url to use https</changelog>
  <changelog author="fstrba@suse.com" date="1684238400">- Register artifact by coordinates, since an artifact without
  dependencies does not need a pom
- Added patch:
  * aopalliance-manifest.patch
    + add OSGi manifest during the jar packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b7f02aec8e381f949ba96c87d13acdfa425832b3daaa67fb26a2839d4a60af4dcd98a4fb06e5b858af5f45f522d7da857702040ebde72cb9ce8f9659e662073a" name="aopalliance-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540555200">- Initial packaging of aopalliance adapted from Fedora package</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Actually say what's included.</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="fcrozat@suse.com" date="1684152000">- Update url to use https</changelog>
  <changelog author="fstrba@suse.com" date="1684238400">- Register artifact by coordinates, since an artifact without
  dependencies does not need a pom
- Added patch:
  * aopalliance-manifest.patch
    + add OSGi manifest during the jar packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="507d7f23734947fcc63b38bd9212d34f23ca347e7c53ba3286a2cf92cce2ce7a4db11a5dbca6f68cc5e49dfb43582f9471eb32ad465efba49aaad091723b7f84" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1537531200">- Fix the Source URLs to use mirrors properly</changelog>
  <changelog author="fstrba@suse.com" date="1540296000">- Cleanup the maven pom files installation</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566388800">- Update to 1.9.4
  * BEANUTILS-520: BeanUtils mitigate CVE-2014-0114
- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
- Fix build version in build.xml
  * Added apache-commons-beanutils-fix-build-version.patch</changelog>
  <changelog author="fstrba@suse.com" date="1570104000">- Remove reference to parent pom, since it is not needed when not
  building with maven</changelog>
  <changelog author="fstrba@suse.com" date="1570449600">- Add aliases to account for the ephemeral commons-beanutils-core
  and commons-beanutils-bean-collections split.</changelog>
  <changelog author="fstrba@suse.com" date="1698753600">- Clean and simplify the spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1708603200">- Fix build with SLE12</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.10.1
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector concurrency
    issue (backport to 1.X) #325.
    + Javadoc is missing its Overview page.
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80).
    + Deprecate BeanUtils.BeanUtils().
    + Deprecate ConstructorUtils.ConstructorUtils().
    + Deprecate LocaleBeanUtils.LocaleBeanUtils().
    + Deprecate LocaleConvertUtils.LocaleConvertUtils().
    + Deprecate ConvertUtils.ConvertUtils().
    + Deprecate MethodUtils.MethodUtils().
    + Deprecate PropertyUtils.PropertyUtils().
  * Changes:
    + Bump org.apache.commons:commons-parent from 78 to 81.
- Includes changes from 1.10.0
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector caches
    corrupted writeMethod (1.x backport) #69.
    + Replace internal use of Locale.ENGLISH with Locale.ROOT.
    + Replace Maven CLIRR plugin with JApiCmp.
    + Port to Java 1.4 Throwable APIs (!).
    + Fix Javadoc generation on Java 8, 17, and 21.
    + AbstractArrayConverter.parseElements(String) now returns a
    List&lt;String&gt; instead of a raw List.
  * Changes:
    + Bump org.apache.commons:commons-parent from 47 to 78.
    + Bump Java requirement from Java 6 to 8.
    + Bump junit:junit from 4.12 to 4.13.2.
    + Bump JUnit from 4.x to 5.x "vintage".
    + Bump commons-logging:commons-logging from 1.2 to 1.3.4.
    + Deprecate BeanUtilsBean.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
    + Deprecate BeanUtils.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
- Update apache-commons-beanutils-fix-build-version.patch to
  reflect new version.</changelog>
  <changelog author="fstrba@suse.com" date="1748520000">- Update to 1.11.0
  * Fixed Bugs:
    + BeanComparator.compare(T, T) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    all cases of ReflectiveOperationException.
    + MappedMethodReference.get() now throws IllegalStateException
    instead of RuntimeException to wrap cases of
    NoSuchMethodException.
    + ResultSetIterator.get(String) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.hasNext() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.next() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.set(String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.set(String, String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
  * Changes:
    + Add org.apache.commons.beanutils
    .SuppressPropertiesBeanIntrospector.SUPPRESS_DECLARING_CLASS.
    Fixes bsc#1243793, CVE-2025-48734
    + Bump org.apache.commons:commons-parent from 81 to 84.
    + Bump commons-logging:commons-logging from 1.3.4 to 1.3.5.
- Modified patch:
  * apache-commons-beanutils-fix-build-version.patch
    + make more generic and pass the version from command-line</changelog>
</package>
<package pkgid="eca3bc16d5ac920e654640a1cd412a42bb390fb71579469a7cc35396a413bee7a910880297ceaf98b3a05ef7f166d8263718808fae53af74dbded7d237205515" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="160000.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566388800">- Update to 1.9.4
  * BEANUTILS-520: BeanUtils mitigate CVE-2014-0114
- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
- Fix build version in build.xml
  * Added apache-commons-beanutils-fix-build-version.patch</changelog>
  <changelog author="fstrba@suse.com" date="1570104000">- Remove reference to parent pom, since it is not needed when not
  building with maven</changelog>
  <changelog author="fstrba@suse.com" date="1570449600">- Add aliases to account for the ephemeral commons-beanutils-core
  and commons-beanutils-bean-collections split.</changelog>
  <changelog author="fstrba@suse.com" date="1698753600">- Clean and simplify the spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1708603200">- Fix build with SLE12</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.10.1
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector concurrency
    issue (backport to 1.X) #325.
    + Javadoc is missing its Overview page.
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80).
    + Deprecate BeanUtils.BeanUtils().
    + Deprecate ConstructorUtils.ConstructorUtils().
    + Deprecate LocaleBeanUtils.LocaleBeanUtils().
    + Deprecate LocaleConvertUtils.LocaleConvertUtils().
    + Deprecate ConvertUtils.ConvertUtils().
    + Deprecate MethodUtils.MethodUtils().
    + Deprecate PropertyUtils.PropertyUtils().
  * Changes:
    + Bump org.apache.commons:commons-parent from 78 to 81.
- Includes changes from 1.10.0
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector caches
    corrupted writeMethod (1.x backport) #69.
    + Replace internal use of Locale.ENGLISH with Locale.ROOT.
    + Replace Maven CLIRR plugin with JApiCmp.
    + Port to Java 1.4 Throwable APIs (!).
    + Fix Javadoc generation on Java 8, 17, and 21.
    + AbstractArrayConverter.parseElements(String) now returns a
    List&lt;String&gt; instead of a raw List.
  * Changes:
    + Bump org.apache.commons:commons-parent from 47 to 78.
    + Bump Java requirement from Java 6 to 8.
    + Bump junit:junit from 4.12 to 4.13.2.
    + Bump JUnit from 4.x to 5.x "vintage".
    + Bump commons-logging:commons-logging from 1.2 to 1.3.4.
    + Deprecate BeanUtilsBean.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
    + Deprecate BeanUtils.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
- Update apache-commons-beanutils-fix-build-version.patch to
  reflect new version.</changelog>
  <changelog author="fstrba@suse.com" date="1748520000">- Update to 1.11.0
  * Fixed Bugs:
    + BeanComparator.compare(T, T) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    all cases of ReflectiveOperationException.
    + MappedMethodReference.get() now throws IllegalStateException
    instead of RuntimeException to wrap cases of
    NoSuchMethodException.
    + ResultSetIterator.get(String) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.hasNext() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.next() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.set(String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.set(String, String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
  * Changes:
    + Add org.apache.commons.beanutils
    .SuppressPropertiesBeanIntrospector.SUPPRESS_DECLARING_CLASS.
    Fixes bsc#1243793, CVE-2025-48734
    + Bump org.apache.commons:commons-parent from 81 to 84.
    + Bump commons-logging:commons-logging from 1.3.4 to 1.3.5.
- Modified patch:
  * apache-commons-beanutils-fix-build-version.patch
    + make more generic and pass the version from command-line</changelog>
  <changelog author="fstrba@suse.com" date="1749124800">- Adapt the spec file, so that it can be used for building on
  SLE12SP1 and Factory alike.</changelog>
  <changelog author="fstrba@suse.com" date="1751544000">- Modified patch:
  * jdk9.patch
    + Add Automatic-Module-Name commons.beanutils to be found
    by modular artifacts</changelog>
</package>
<package pkgid="89ab022b40746cfe25ede43494fae5adbe0b048e75912194fe5478971f54ce5aee2cbabb0660d4a71c29e628f2807f043e2629f5c3d72c0caff71f82a2acd5e9" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1537531200">- Fix the Source URLs to use mirrors properly</changelog>
  <changelog author="fstrba@suse.com" date="1540296000">- Cleanup the maven pom files installation</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566388800">- Update to 1.9.4
  * BEANUTILS-520: BeanUtils mitigate CVE-2014-0114
- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
- Fix build version in build.xml
  * Added apache-commons-beanutils-fix-build-version.patch</changelog>
  <changelog author="fstrba@suse.com" date="1570104000">- Remove reference to parent pom, since it is not needed when not
  building with maven</changelog>
  <changelog author="fstrba@suse.com" date="1570449600">- Add aliases to account for the ephemeral commons-beanutils-core
  and commons-beanutils-bean-collections split.</changelog>
  <changelog author="fstrba@suse.com" date="1698753600">- Clean and simplify the spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1708603200">- Fix build with SLE12</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.10.1
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector concurrency
    issue (backport to 1.X) #325.
    + Javadoc is missing its Overview page.
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80).
    + Deprecate BeanUtils.BeanUtils().
    + Deprecate ConstructorUtils.ConstructorUtils().
    + Deprecate LocaleBeanUtils.LocaleBeanUtils().
    + Deprecate LocaleConvertUtils.LocaleConvertUtils().
    + Deprecate ConvertUtils.ConvertUtils().
    + Deprecate MethodUtils.MethodUtils().
    + Deprecate PropertyUtils.PropertyUtils().
  * Changes:
    + Bump org.apache.commons:commons-parent from 78 to 81.
- Includes changes from 1.10.0
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector caches
    corrupted writeMethod (1.x backport) #69.
    + Replace internal use of Locale.ENGLISH with Locale.ROOT.
    + Replace Maven CLIRR plugin with JApiCmp.
    + Port to Java 1.4 Throwable APIs (!).
    + Fix Javadoc generation on Java 8, 17, and 21.
    + AbstractArrayConverter.parseElements(String) now returns a
    List&lt;String&gt; instead of a raw List.
  * Changes:
    + Bump org.apache.commons:commons-parent from 47 to 78.
    + Bump Java requirement from Java 6 to 8.
    + Bump junit:junit from 4.12 to 4.13.2.
    + Bump JUnit from 4.x to 5.x "vintage".
    + Bump commons-logging:commons-logging from 1.2 to 1.3.4.
    + Deprecate BeanUtilsBean.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
    + Deprecate BeanUtils.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
- Update apache-commons-beanutils-fix-build-version.patch to
  reflect new version.</changelog>
  <changelog author="fstrba@suse.com" date="1748520000">- Update to 1.11.0
  * Fixed Bugs:
    + BeanComparator.compare(T, T) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    all cases of ReflectiveOperationException.
    + MappedMethodReference.get() now throws IllegalStateException
    instead of RuntimeException to wrap cases of
    NoSuchMethodException.
    + ResultSetIterator.get(String) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.hasNext() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.next() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.set(String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.set(String, String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
  * Changes:
    + Add org.apache.commons.beanutils
    .SuppressPropertiesBeanIntrospector.SUPPRESS_DECLARING_CLASS.
    Fixes bsc#1243793, CVE-2025-48734
    + Bump org.apache.commons:commons-parent from 81 to 84.
    + Bump commons-logging:commons-logging from 1.3.4 to 1.3.5.
- Modified patch:
  * apache-commons-beanutils-fix-build-version.patch
    + make more generic and pass the version from command-line</changelog>
</package>
<package pkgid="7c2a0312da16ec80d2f5651c6b7d6c37cb83a75b232a77ad7f55bb07a4cc472b5c462d3fb33b82f5fadcce78b7b44bbd7f0933d67ca817610ae90d719b16375a" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="160000.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566388800">- Update to 1.9.4
  * BEANUTILS-520: BeanUtils mitigate CVE-2014-0114
- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
- Fix build version in build.xml
  * Added apache-commons-beanutils-fix-build-version.patch</changelog>
  <changelog author="fstrba@suse.com" date="1570104000">- Remove reference to parent pom, since it is not needed when not
  building with maven</changelog>
  <changelog author="fstrba@suse.com" date="1570449600">- Add aliases to account for the ephemeral commons-beanutils-core
  and commons-beanutils-bean-collections split.</changelog>
  <changelog author="fstrba@suse.com" date="1698753600">- Clean and simplify the spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1708603200">- Fix build with SLE12</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.10.1
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector concurrency
    issue (backport to 1.X) #325.
    + Javadoc is missing its Overview page.
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80).
    + Deprecate BeanUtils.BeanUtils().
    + Deprecate ConstructorUtils.ConstructorUtils().
    + Deprecate LocaleBeanUtils.LocaleBeanUtils().
    + Deprecate LocaleConvertUtils.LocaleConvertUtils().
    + Deprecate ConvertUtils.ConvertUtils().
    + Deprecate MethodUtils.MethodUtils().
    + Deprecate PropertyUtils.PropertyUtils().
  * Changes:
    + Bump org.apache.commons:commons-parent from 78 to 81.
- Includes changes from 1.10.0
  * Fixed Bugs:
    + BEANUTILS-541:  FluentPropertyBeanIntrospector caches
    corrupted writeMethod (1.x backport) #69.
    + Replace internal use of Locale.ENGLISH with Locale.ROOT.
    + Replace Maven CLIRR plugin with JApiCmp.
    + Port to Java 1.4 Throwable APIs (!).
    + Fix Javadoc generation on Java 8, 17, and 21.
    + AbstractArrayConverter.parseElements(String) now returns a
    List&lt;String&gt; instead of a raw List.
  * Changes:
    + Bump org.apache.commons:commons-parent from 47 to 78.
    + Bump Java requirement from Java 6 to 8.
    + Bump junit:junit from 4.12 to 4.13.2.
    + Bump JUnit from 4.x to 5.x "vintage".
    + Bump commons-logging:commons-logging from 1.2 to 1.3.4.
    + Deprecate BeanUtilsBean.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
    + Deprecate BeanUtils.initCause(Throwable, Throwable) for
    removal, use Throwable.initCause(Throwable).
- Update apache-commons-beanutils-fix-build-version.patch to
  reflect new version.</changelog>
  <changelog author="fstrba@suse.com" date="1748520000">- Update to 1.11.0
  * Fixed Bugs:
    + BeanComparator.compare(T, T) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    all cases of ReflectiveOperationException.
    + MappedMethodReference.get() now throws IllegalStateException
    instead of RuntimeException to wrap cases of
    NoSuchMethodException.
    + ResultSetIterator.get(String) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.hasNext() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.next() now throws IllegalStateException
    instead of RuntimeException to wrap cases of SQLException.
    + ResultSetIterator.set(String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
    + ResultSetIterator.set(String, String, Object) now throws
    IllegalArgumentException instead of RuntimeException to wrap
    cases of SQLException.
  * Changes:
    + Add org.apache.commons.beanutils
    .SuppressPropertiesBeanIntrospector.SUPPRESS_DECLARING_CLASS.
    Fixes bsc#1243793, CVE-2025-48734
    + Bump org.apache.commons:commons-parent from 81 to 84.
    + Bump commons-logging:commons-logging from 1.3.4 to 1.3.5.
- Modified patch:
  * apache-commons-beanutils-fix-build-version.patch
    + make more generic and pass the version from command-line</changelog>
  <changelog author="fstrba@suse.com" date="1749124800">- Adapt the spec file, so that it can be used for building on
  SLE12SP1 and Factory alike.</changelog>
  <changelog author="fstrba@suse.com" date="1751544000">- Modified patch:
  * jdk9.patch
    + Add Automatic-Module-Name commons.beanutils to be found
    by modular artifacts</changelog>
</package>
<package pkgid="3f82f9505def3eab915f4065403752168a3f07beeb65febf7fe8c2d1ac6f08eadd77bf9145af2c159626ad1d9754dd4058c1a23aac110c109496b478afb092be" name="apache-commons-chain" arch="noarch">
  <version epoch="0" ver="1.2" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393600">- Initial package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393601">- Build against commons-digester &gt;= 1.8
- Removed patch:
  * commons-chain-1.2-digester.patch
    + not needed when building with commons-digester &gt;= 1.8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Remove parent from the pom file, since it is pointless when not
  building with maven
- Make building with tests optional in order to speed-up rebuild</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="288ca578101961be309ce8acc5094d02a43963d82bf49ef5f38601601ad89f766d2857292e52e2f2727e7348b03dd1f17b2e4efd796ba8e0d78447e351b55736" name="apache-commons-chain-javadoc" arch="noarch">
  <version epoch="0" ver="1.2" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393600">- Initial package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393601">- Build against commons-digester &gt;= 1.8
- Removed patch:
  * commons-chain-1.2-digester.patch
    + not needed when building with commons-digester &gt;= 1.8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Remove parent from the pom file, since it is pointless when not
  building with maven
- Make building with tests optional in order to speed-up rebuild</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6913b6657e86abc4275b513e1cf179ddb3ff25bd24431abf7188e9d81eee10217c4c13d07d985d0185fa1b5ab0e414f37ede38a7bf27fd944a88155335a83275" name="apache-commons-cli" arch="noarch">
  <version epoch="0" ver="1.10.0" rel="160000.1.1"/>
  <changelog author="jengelh@inai.de" date="1549368000">- Trim bias from description; update RPM groups.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613131200">- Add OSGi manifest to the build files.
- Set java source/target levels to 6</changelog>
  <changelog author="david.anes@suse.com" date="1639656000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
  * New features:
  - (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
  - (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
  - (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
  - (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
  - (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
  - Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
  - Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
  * Fixed bugs:
  - Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
  - (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
  - Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
  - Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
  - Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
  - Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
  - (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
  - (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
  * Updates:
  - (CLI-294) Update Java from version 5 to 7.
  - Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
  - Remove deprecated sudo setting. #36. Thanks to dengliming.
  - Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
  - Bump commons-parent from 48 to 52. Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
  - Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
  - Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
  - Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
  - Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
  - Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
  - Bump commons.animal-sniffer.version 1.19 -&gt; 1.20. Thanks to Gary Gregory.
  - Bump maven-bundle-plugin 5.1.1 -&gt; 5.1.2. Thanks to Gary Gregory.
  - Bump biz.aQute.bndlib.version 5.1.2 -&gt; 6.0.0. Thanks to Gary Gregory.
  - Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
  - Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Build with java source/target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated apache-commons-cli-build.xml to new version.
- Update to 1.7:
  * New features:
  - Add and use a Converter interface and implementations without
    using BeanUtils #216. Fixes CLI-321. Thanks to Claude Warren,
    Gary Gregory.
  - Add Maven property project.build.outputTimestamp for build
    reproducibility. Thanks to Gary Gregory.
  - Add '-' as an option char and implemented extensive tests
    [#217]. Fixes CLI-322. Thanks to Claude Warren, Gary Gregory.
  - Make adding OptionGroups and Options to existing Options
    easier #230. Fixes CLI-324. Thanks to Claude Warren, Gary
    Gregory.
  - Added Supplier&lt;T&gt; defaults for getParsedOptionValue #229.
    Fixes CLI-323. Thanks to Claude Warren, Gary Gregory.
  - Make Option.getKey() public #239. Fixes CLI-326. Thanks to
    Claude Warren, Gary Gregory.
  - Add builder factory CommandLine#builder(). Thanks to Claude
    Warren, Gary Gregory.
  * Fixes:
  - Inconsistent behavior in key/value pairs (Java property
    style). Fixes CLI-312. Thanks to Claude Warren, Gary Gregory.
  - Avoid NullPointerException in
    Util.stripLeadingAndTrailingQuotes(String). Thanks to Gary
    Gregory.
  - Awkward behavior of Option.builder() for multiple optional
    args. Fixes CLI-320. Thanks to Paul King, Claude Warren.
  - Properties from multiple arguments with value separator.
    [#237]. Fixes CLI-325. Thanks to Claude Warren.
  - Fix for expected textual date values. #244. Fixes CLI-327.
    Thanks to Claude Warren, Gary Gregory.
  - Option.Builder.option("") should throw
    IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException. Thanks to Gary Gregory.
  - Avoid NullPointerException in
    CommandLine.getOptionValues(Option|String). Thanks to Gary
    Gregory.
  * Updates:
  - Bump commons-parent from 64 to 69 #256. Thanks to Gary
    Gregory.
  - Update the tests to JUnit 5 #238. Thanks to Elric, Gary
    Gregory.
  - Bump tests commons-io:commons-io from 2.16.0 to 2.16.1 #258.
    Thanks to Dependabot, Gary Gregory.
- Includes changes from version 1.6:
  * Fixes:
  - [StepSecurity] ci: Harden GitHub Actions #176. Thanks to
    step-security-bot, Gary Gregory.
  - Inconsistent date format in changes report. Fixes CLI-318.
    Thanks to Alexander Veit, Gary Gregory.
  - Fix NPE in CommandLine.resolveOption(String). Fixes CLI-283.
    Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addOption(Option) should not allow a null Option.
    Fixes CLI-283. Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addArgs(String) should not allow a null String.
    Fixes CLI-283. Thanks to Gary Gregory.
  - Site docs: "Usage Scenarios" refers to deprecated methods.
    Fixes CLI-303. Thanks to Julian Schilling, Gary Gregory.
  - NullPointerException thrown by CommandLineParser.parse().
    Fixes CLI-317. Thanks to Philippe Bastiani, Sruteesh Kumar
    Paramata, Gary Gregory.
  - StringIndexOutOfBoundsException thrown by
    CommandLineParser.parse(). Fixes CLI-313. Thanks to Dominik
    Stadler, HUNG LU, Sruteesh Kumar Paramata.
  * Updates:
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 417-423]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 446-450]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 474-478]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Use EMPTY_STRING_ARRAY constant. #102. Thanks to Ken Dombeck.
  - Fix site links that are broken #155. Thanks to Arturo Bernal.
  - Use Math.max() #111. Delete unused assignment #112. Thanks to
    Arturo Bernal.
  - Add github/codeql-action. Thanks to Dependabot, Gary Gregory.
  - Bump Java from 7 to 8. Thanks to Gary Gregory.
  - Bump actions/cache from 2.1.7 to 3.0.10 #97, #130, #132.
    Thanks to Dependabot, Gary Gregory.
  - Bump actions/checkout from 3 to 3.1.0 #133. Thanks to Gary
    Gregory, Dependabot.
  - Bump actions/setup-java from 2 to 3.6.0 #136. Thanks to Gary
    Gregory.
  - Bump spotbugs from 4.5.3 to 4.7.3 #96, #107, #113, #125,
    [#138]. Thanks to Gary Gregory, Dependabot.
  - Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.3.0 #98, #108,
    [#115], #117, #126, #145. Thanks to Dependabot.
  - Bump commons-parent from 52 to 64 #100, #128, #151, #158.
    Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 3.0.0 to 3.1.0 #103. Thanks to
    Dependabot.
  - Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #105, #120.
    Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #110, #124.
    Thanks to Dependabot.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary
    Gregory.
  - Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #121. Thanks
    to Gary Gregory.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. Thanks to
    Gary Gregory.
  - Update JUnit 4 to 5 vintage. Thanks to Gary Gregory.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.8.0
  * Fix Javadoc pathing #280. Fixes CLI-334.
- Revised CLI-253-workaround.patch for compatibility with 1.8.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1730980800">- Update to 1.9.0
  * New features
    + Add OptionGroup.isSelected().
    + You can now extend HelpFormatter.Builder.
    + Add 'since' attribute to Option to track when an Option was
    introduced #292
  * Fixed bugs
    + CLI-334: Fix Javadoc pathing #280.
    + CLI-335: Updated properties documentation #285.
    + CLI-336: Deprecation not always reported #284.
    + Replace internal StringBuffer with StringBuilder.
  * Updates
    + Bump org.apache.commons:commons-parent from 70 to 72 #283.</changelog>
  <changelog author="fstrba@suse.com" date="1762344000">- Update to 1.10.0
  * New Features
    + CLI-339: Help formatter extension in the new package #314.
    + CommandLine.Builder implements Supplier&lt;CommandLine&gt;.
    + DefaultParser.Builder implements Supplier&lt;DefaultParser&gt;.
    + CLI-340: Add CommandLine.getParsedOptionValues() #334.
    + CLI-333: org.apache.commons.cli.Option.Builder implements
    Supplier&lt;Option&gt;.
  * Fixed Bugs
    + Deprecate CommandLine.Builder() in favor of
    CommandLine.builder().
    + Deprecate DeprecatedAttributes.Builder() in favor of
    DeprecatedAttributes.builder().
    + Refactor default parser test #294.
    + Port to JUnit 5.
    + Generics for Converter should use Exception not Throwable.
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache.
    + Javadoc is missing its Overview page.
    + Get mockito version from parent pom (#351).
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80).
    + Deprecate PatternOptionBuilder.PatternOptionBuilder().
    + CLI-341: HelpFormatter infinite loop with 0 width input.
    + CLI-349: Fail faster with a more precise NullPointerException:
    Option.processValue() throws NullPointerException when passed
    null value with value separator configured.
    + CLI-344: Fail faster with a more precise NullPointerException:
    DefaultParser.parse() throws NullPointerException when options
    parameter is null.
    + CLI-347: Options.addOptionGroup(OptionGroup) does not remove
    required options from requiredOpts list.
    + org.apache.commons.cli.Option.Builder.get() should throw
    IllegalStateException instead of IllegalArgumentException.
    + org.apache.commons.cli.Option.processValue(String) should
    throw IllegalStateException instead of
    IllegalArgumentException.
    + org.apache.commons.cli.OptionBuilder.create() should throw
    IllegalStateException instead of IllegalArgumentException.
  * Updates
    + Bump org.apache.commons:commons-parent from 72 to 85 #302,
    [#304], #310, #315, #320, #327, #371.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.20.0 #309,
    [#337].
    + [test] Bump org.apache.commons:commons-text from 1.12.0 to
    1.14.0 #344.
    + Update site documentation to
    https://maven.apache.org/xsd/xdoc-2.0.xsd.</changelog>
</package>
<package pkgid="3c48f0574f1a84509c8fc9637033a13418b80fcdb1184a1900d80743c4e2d8cb5e8b5a9a43618a02e3c2bcf88b31c652d06b4cc879b79c1d73574e0b4b9bb90e" name="apache-commons-cli" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613131200">- Add OSGi manifest to the build files.
- Set java source/target levels to 6</changelog>
  <changelog author="david.anes@suse.com" date="1639656000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
  * New features:
  - (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
  - (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
  - (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
  - (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
  - (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
  - Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
  - Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
  * Fixed bugs:
  - Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
  - (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
  - Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
  - Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
  - Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
  - Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
  - (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
  - (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
  * Updates:
  - (CLI-294) Update Java from version 5 to 7.
  - Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
  - Remove deprecated sudo setting. #36. Thanks to dengliming.
  - Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
  - Bump commons-parent from 48 to 52. Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
  - Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
  - Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
  - Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
  - Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
  - Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
  - Bump commons.animal-sniffer.version 1.19 -&gt; 1.20. Thanks to Gary Gregory.
  - Bump maven-bundle-plugin 5.1.1 -&gt; 5.1.2. Thanks to Gary Gregory.
  - Bump biz.aQute.bndlib.version 5.1.2 -&gt; 6.0.0. Thanks to Gary Gregory.
  - Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
  - Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Build with java source/target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated apache-commons-cli-build.xml to new version.
- Update to 1.7:
  * New features:
  - Add and use a Converter interface and implementations without
    using BeanUtils #216. Fixes CLI-321. Thanks to Claude Warren,
    Gary Gregory.
  - Add Maven property project.build.outputTimestamp for build
    reproducibility. Thanks to Gary Gregory.
  - Add '-' as an option char and implemented extensive tests
    [#217]. Fixes CLI-322. Thanks to Claude Warren, Gary Gregory.
  - Make adding OptionGroups and Options to existing Options
    easier #230. Fixes CLI-324. Thanks to Claude Warren, Gary
    Gregory.
  - Added Supplier&lt;T&gt; defaults for getParsedOptionValue #229.
    Fixes CLI-323. Thanks to Claude Warren, Gary Gregory.
  - Make Option.getKey() public #239. Fixes CLI-326. Thanks to
    Claude Warren, Gary Gregory.
  - Add builder factory CommandLine#builder(). Thanks to Claude
    Warren, Gary Gregory.
  * Fixes:
  - Inconsistent behavior in key/value pairs (Java property
    style). Fixes CLI-312. Thanks to Claude Warren, Gary Gregory.
  - Avoid NullPointerException in
    Util.stripLeadingAndTrailingQuotes(String). Thanks to Gary
    Gregory.
  - Awkward behavior of Option.builder() for multiple optional
    args. Fixes CLI-320. Thanks to Paul King, Claude Warren.
  - Properties from multiple arguments with value separator.
    [#237]. Fixes CLI-325. Thanks to Claude Warren.
  - Fix for expected textual date values. #244. Fixes CLI-327.
    Thanks to Claude Warren, Gary Gregory.
  - Option.Builder.option("") should throw
    IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException. Thanks to Gary Gregory.
  - Avoid NullPointerException in
    CommandLine.getOptionValues(Option|String). Thanks to Gary
    Gregory.
  * Updates:
  - Bump commons-parent from 64 to 69 #256. Thanks to Gary
    Gregory.
  - Update the tests to JUnit 5 #238. Thanks to Elric, Gary
    Gregory.
  - Bump tests commons-io:commons-io from 2.16.0 to 2.16.1 #258.
    Thanks to Dependabot, Gary Gregory.
- Includes changes from version 1.6:
  * Fixes:
  - [StepSecurity] ci: Harden GitHub Actions #176. Thanks to
    step-security-bot, Gary Gregory.
  - Inconsistent date format in changes report. Fixes CLI-318.
    Thanks to Alexander Veit, Gary Gregory.
  - Fix NPE in CommandLine.resolveOption(String). Fixes CLI-283.
    Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addOption(Option) should not allow a null Option.
    Fixes CLI-283. Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addArgs(String) should not allow a null String.
    Fixes CLI-283. Thanks to Gary Gregory.
  - Site docs: "Usage Scenarios" refers to deprecated methods.
    Fixes CLI-303. Thanks to Julian Schilling, Gary Gregory.
  - NullPointerException thrown by CommandLineParser.parse().
    Fixes CLI-317. Thanks to Philippe Bastiani, Sruteesh Kumar
    Paramata, Gary Gregory.
  - StringIndexOutOfBoundsException thrown by
    CommandLineParser.parse(). Fixes CLI-313. Thanks to Dominik
    Stadler, HUNG LU, Sruteesh Kumar Paramata.
  * Updates:
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 417-423]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 446-450]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 474-478]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Use EMPTY_STRING_ARRAY constant. #102. Thanks to Ken Dombeck.
  - Fix site links that are broken #155. Thanks to Arturo Bernal.
  - Use Math.max() #111. Delete unused assignment #112. Thanks to
    Arturo Bernal.
  - Add github/codeql-action. Thanks to Dependabot, Gary Gregory.
  - Bump Java from 7 to 8. Thanks to Gary Gregory.
  - Bump actions/cache from 2.1.7 to 3.0.10 #97, #130, #132.
    Thanks to Dependabot, Gary Gregory.
  - Bump actions/checkout from 3 to 3.1.0 #133. Thanks to Gary
    Gregory, Dependabot.
  - Bump actions/setup-java from 2 to 3.6.0 #136. Thanks to Gary
    Gregory.
  - Bump spotbugs from 4.5.3 to 4.7.3 #96, #107, #113, #125,
    [#138]. Thanks to Gary Gregory, Dependabot.
  - Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.3.0 #98, #108,
    [#115], #117, #126, #145. Thanks to Dependabot.
  - Bump commons-parent from 52 to 64 #100, #128, #151, #158.
    Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 3.0.0 to 3.1.0 #103. Thanks to
    Dependabot.
  - Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #105, #120.
    Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #110, #124.
    Thanks to Dependabot.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary
    Gregory.
  - Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #121. Thanks
    to Gary Gregory.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. Thanks to
    Gary Gregory.
  - Update JUnit 4 to 5 vintage. Thanks to Gary Gregory.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.8.0
  * Fix Javadoc pathing #280. Fixes CLI-334.
- Revised CLI-253-workaround.patch for compatibility with 1.8.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1730980800">- Update to 1.9.0
  * New features
    + Add OptionGroup.isSelected().
    + You can now extend HelpFormatter.Builder.
    + Add 'since' attribute to Option to track when an Option was
    introduced #292
  * Fixed bugs
    + CLI-334: Fix Javadoc pathing #280.
    + CLI-335: Updated properties documentation #285.
    + CLI-336: Deprecation not always reported #284.
    + Replace internal StringBuffer with StringBuilder.
  * Updates
    + Bump org.apache.commons:commons-parent from 70 to 72 #283.</changelog>
  <changelog author="fstrba@suse.com" date="1762344000">- Update to 1.10.0
  * New Features
    + CLI-339: Help formatter extension in the new package #314.
    + CommandLine.Builder implements Supplier&lt;CommandLine&gt;.
    + DefaultParser.Builder implements Supplier&lt;DefaultParser&gt;.
    + CLI-340: Add CommandLine.getParsedOptionValues() #334.
    + CLI-333: org.apache.commons.cli.Option.Builder implements
    Supplier&lt;Option&gt;.
  * Fixed Bugs
    + Deprecate CommandLine.Builder() in favor of
    CommandLine.builder().
    + Deprecate DeprecatedAttributes.Builder() in favor of
    DeprecatedAttributes.builder().
    + Refactor default parser test #294.
    + Port to JUnit 5.
    + Generics for Converter should use Exception not Throwable.
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache.
    + Javadoc is missing its Overview page.
    + Get mockito version from parent pom (#351).
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80).
    + Deprecate PatternOptionBuilder.PatternOptionBuilder().
    + CLI-341: HelpFormatter infinite loop with 0 width input.
    + CLI-349: Fail faster with a more precise NullPointerException:
    Option.processValue() throws NullPointerException when passed
    null value with value separator configured.
    + CLI-344: Fail faster with a more precise NullPointerException:
    DefaultParser.parse() throws NullPointerException when options
    parameter is null.
    + CLI-347: Options.addOptionGroup(OptionGroup) does not remove
    required options from requiredOpts list.
    + org.apache.commons.cli.Option.Builder.get() should throw
    IllegalStateException instead of IllegalArgumentException.
    + org.apache.commons.cli.Option.processValue(String) should
    throw IllegalStateException instead of
    IllegalArgumentException.
    + org.apache.commons.cli.OptionBuilder.create() should throw
    IllegalStateException instead of IllegalArgumentException.
  * Updates
    + Bump org.apache.commons:commons-parent from 72 to 85 #302,
    [#304], #310, #315, #320, #327, #371.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.20.0 #309,
    [#337].
    + [test] Bump org.apache.commons:commons-text from 1.12.0 to
    1.14.0 #344.
    + Update site documentation to
    https://maven.apache.org/xsd/xdoc-2.0.xsd.</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to 1.11.0
  * New Features
    + Add CommandLine.getOptionCount() to measure option repetition
  * Fixed Bugs
    + CLI-351: Multiple trailing BREAK_CHAR_SET characters cause
    infinite loop in HelpFormatter
    + CLI-351:  Fix issue with groups not being reported in help
    output
  * Updates
    + Bump org.apache.commons:commons-parent from 85 to 91
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
- Modified patch:
  * CLI-253-workaround.patch
    + rediff</changelog>
</package>
<package pkgid="80c4f0ef401552cb1224c580e0c2c9a8eb32be70fb0849ab628a3604137ad0f8be5ed50ecfd9543d47c0578c40f5d74b2daefd174cf477dd76775c67d53bc38b" name="apache-commons-cli" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1549368000">- Clean-up the spec file
- Removed patch:
  * commons-cli-1.4-jdk9.patch
    + not needed since we are not building with maven
- Added patch:
  * CLI-253-workaround.patch
    + [CLI-253] Prevent "Unrecognized option: --null" when handling
  long opts in PosixParser</changelog>
  <changelog author="jengelh@inai.de" date="1549368001">- Trim bias from description; update RPM groups.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613131200">- Add OSGi manifest to the build files.
- Set java source/target levels to 6</changelog>
  <changelog author="david.anes@suse.com" date="1639656000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
  * New features:
  - (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
  - (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
  - (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
  - (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
  - (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
  - Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
  - Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
  * Fixed bugs:
  - Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
  - (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
  - Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
  - Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
  - Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
  - Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
  - (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
  - (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
  * Updates:
  - (CLI-294) Update Java from version 5 to 7.
  - Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
  - Remove deprecated sudo setting. #36. Thanks to dengliming.
  - Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
  - Bump commons-parent from 48 to 52. Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
  - Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
  - Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
  - Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
  - Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
  - Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
  - Bump commons.animal-sniffer.version 1.19 -&gt; 1.20. Thanks to Gary Gregory.
  - Bump maven-bundle-plugin 5.1.1 -&gt; 5.1.2. Thanks to Gary Gregory.
  - Bump biz.aQute.bndlib.version 5.1.2 -&gt; 6.0.0. Thanks to Gary Gregory.
  - Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
  - Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Build with java source/target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated apache-commons-cli-build.xml to new version.
- Update to 1.7:
  * New features:
  - Add and use a Converter interface and implementations without
    using BeanUtils #216. Fixes CLI-321. Thanks to Claude Warren,
    Gary Gregory.
  - Add Maven property project.build.outputTimestamp for build
    reproducibility. Thanks to Gary Gregory.
  - Add '-' as an option char and implemented extensive tests
    [#217]. Fixes CLI-322. Thanks to Claude Warren, Gary Gregory.
  - Make adding OptionGroups and Options to existing Options
    easier #230. Fixes CLI-324. Thanks to Claude Warren, Gary
    Gregory.
  - Added Supplier&lt;T&gt; defaults for getParsedOptionValue #229.
    Fixes CLI-323. Thanks to Claude Warren, Gary Gregory.
  - Make Option.getKey() public #239. Fixes CLI-326. Thanks to
    Claude Warren, Gary Gregory.
  - Add builder factory CommandLine#builder(). Thanks to Claude
    Warren, Gary Gregory.
  * Fixes:
  - Inconsistent behavior in key/value pairs (Java property
    style). Fixes CLI-312. Thanks to Claude Warren, Gary Gregory.
  - Avoid NullPointerException in
    Util.stripLeadingAndTrailingQuotes(String). Thanks to Gary
    Gregory.
  - Awkward behavior of Option.builder() for multiple optional
    args. Fixes CLI-320. Thanks to Paul King, Claude Warren.
  - Properties from multiple arguments with value separator.
    [#237]. Fixes CLI-325. Thanks to Claude Warren.
  - Fix for expected textual date values. #244. Fixes CLI-327.
    Thanks to Claude Warren, Gary Gregory.
  - Option.Builder.option("") should throw
    IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException. Thanks to Gary Gregory.
  - Avoid NullPointerException in
    CommandLine.getOptionValues(Option|String). Thanks to Gary
    Gregory.
  * Updates:
  - Bump commons-parent from 64 to 69 #256. Thanks to Gary
    Gregory.
  - Update the tests to JUnit 5 #238. Thanks to Elric, Gary
    Gregory.
  - Bump tests commons-io:commons-io from 2.16.0 to 2.16.1 #258.
    Thanks to Dependabot, Gary Gregory.
- Includes changes from version 1.6:
  * Fixes:
  - [StepSecurity] ci: Harden GitHub Actions #176. Thanks to
    step-security-bot, Gary Gregory.
  - Inconsistent date format in changes report. Fixes CLI-318.
    Thanks to Alexander Veit, Gary Gregory.
  - Fix NPE in CommandLine.resolveOption(String). Fixes CLI-283.
    Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addOption(Option) should not allow a null Option.
    Fixes CLI-283. Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addArgs(String) should not allow a null String.
    Fixes CLI-283. Thanks to Gary Gregory.
  - Site docs: "Usage Scenarios" refers to deprecated methods.
    Fixes CLI-303. Thanks to Julian Schilling, Gary Gregory.
  - NullPointerException thrown by CommandLineParser.parse().
    Fixes CLI-317. Thanks to Philippe Bastiani, Sruteesh Kumar
    Paramata, Gary Gregory.
  - StringIndexOutOfBoundsException thrown by
    CommandLineParser.parse(). Fixes CLI-313. Thanks to Dominik
    Stadler, HUNG LU, Sruteesh Kumar Paramata.
  * Updates:
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 417-423]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 446-450]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 474-478]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Use EMPTY_STRING_ARRAY constant. #102. Thanks to Ken Dombeck.
  - Fix site links that are broken #155. Thanks to Arturo Bernal.
  - Use Math.max() #111. Delete unused assignment #112. Thanks to
    Arturo Bernal.
  - Add github/codeql-action. Thanks to Dependabot, Gary Gregory.
  - Bump Java from 7 to 8. Thanks to Gary Gregory.
  - Bump actions/cache from 2.1.7 to 3.0.10 #97, #130, #132.
    Thanks to Dependabot, Gary Gregory.
  - Bump actions/checkout from 3 to 3.1.0 #133. Thanks to Gary
    Gregory, Dependabot.
  - Bump actions/setup-java from 2 to 3.6.0 #136. Thanks to Gary
    Gregory.
  - Bump spotbugs from 4.5.3 to 4.7.3 #96, #107, #113, #125,
    [#138]. Thanks to Gary Gregory, Dependabot.
  - Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.3.0 #98, #108,
    [#115], #117, #126, #145. Thanks to Dependabot.
  - Bump commons-parent from 52 to 64 #100, #128, #151, #158.
    Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 3.0.0 to 3.1.0 #103. Thanks to
    Dependabot.
  - Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #105, #120.
    Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #110, #124.
    Thanks to Dependabot.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary
    Gregory.
  - Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #121. Thanks
    to Gary Gregory.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. Thanks to
    Gary Gregory.
  - Update JUnit 4 to 5 vintage. Thanks to Gary Gregory.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.8.0
  * Fix Javadoc pathing #280. Fixes CLI-334.
- Revised CLI-253-workaround.patch for compatibility with 1.8.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1730980800">- Update to 1.9.0
  * New features
    + Add OptionGroup.isSelected().
    + You can now extend HelpFormatter.Builder.
    + Add 'since' attribute to Option to track when an Option was
    introduced #292
  * Fixed bugs
    + CLI-334:  Fix Javadoc pathing #280.
    + CLI-335:  Updated properties documentation #285.
    + CLI-336:  Deprecation not always reported #284.
    + Replace internal StringBuffer with StringBuilder.
  * Updates
    + Bump org.apache.commons:commons-parent from 70 to 72 #283.</changelog>
</package>
<package pkgid="20180fe9b5e39a369c4bf1a9caaaf59487ae42a396309b156896bc395d0260b40589df9554f30898c088cf933abe92fe5395f2600357f5b9b3d839ca4f3cfe9f" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.10.0" rel="160000.1.1"/>
  <changelog author="jengelh@inai.de" date="1549368000">- Trim bias from description; update RPM groups.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613131200">- Add OSGi manifest to the build files.
- Set java source/target levels to 6</changelog>
  <changelog author="david.anes@suse.com" date="1639656000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
  * New features:
  - (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
  - (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
  - (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
  - (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
  - (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
  - Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
  - Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
  * Fixed bugs:
  - Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
  - (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
  - Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
  - Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
  - Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
  - Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
  - (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
  - (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
  * Updates:
  - (CLI-294) Update Java from version 5 to 7.
  - Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
  - Remove deprecated sudo setting. #36. Thanks to dengliming.
  - Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
  - Bump commons-parent from 48 to 52. Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
  - Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
  - Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
  - Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
  - Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
  - Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
  - Bump commons.animal-sniffer.version 1.19 -&gt; 1.20. Thanks to Gary Gregory.
  - Bump maven-bundle-plugin 5.1.1 -&gt; 5.1.2. Thanks to Gary Gregory.
  - Bump biz.aQute.bndlib.version 5.1.2 -&gt; 6.0.0. Thanks to Gary Gregory.
  - Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
  - Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Build with java source/target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated apache-commons-cli-build.xml to new version.
- Update to 1.7:
  * New features:
  - Add and use a Converter interface and implementations without
    using BeanUtils #216. Fixes CLI-321. Thanks to Claude Warren,
    Gary Gregory.
  - Add Maven property project.build.outputTimestamp for build
    reproducibility. Thanks to Gary Gregory.
  - Add '-' as an option char and implemented extensive tests
    [#217]. Fixes CLI-322. Thanks to Claude Warren, Gary Gregory.
  - Make adding OptionGroups and Options to existing Options
    easier #230. Fixes CLI-324. Thanks to Claude Warren, Gary
    Gregory.
  - Added Supplier&lt;T&gt; defaults for getParsedOptionValue #229.
    Fixes CLI-323. Thanks to Claude Warren, Gary Gregory.
  - Make Option.getKey() public #239. Fixes CLI-326. Thanks to
    Claude Warren, Gary Gregory.
  - Add builder factory CommandLine#builder(). Thanks to Claude
    Warren, Gary Gregory.
  * Fixes:
  - Inconsistent behavior in key/value pairs (Java property
    style). Fixes CLI-312. Thanks to Claude Warren, Gary Gregory.
  - Avoid NullPointerException in
    Util.stripLeadingAndTrailingQuotes(String). Thanks to Gary
    Gregory.
  - Awkward behavior of Option.builder() for multiple optional
    args. Fixes CLI-320. Thanks to Paul King, Claude Warren.
  - Properties from multiple arguments with value separator.
    [#237]. Fixes CLI-325. Thanks to Claude Warren.
  - Fix for expected textual date values. #244. Fixes CLI-327.
    Thanks to Claude Warren, Gary Gregory.
  - Option.Builder.option("") should throw
    IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException. Thanks to Gary Gregory.
  - Avoid NullPointerException in
    CommandLine.getOptionValues(Option|String). Thanks to Gary
    Gregory.
  * Updates:
  - Bump commons-parent from 64 to 69 #256. Thanks to Gary
    Gregory.
  - Update the tests to JUnit 5 #238. Thanks to Elric, Gary
    Gregory.
  - Bump tests commons-io:commons-io from 2.16.0 to 2.16.1 #258.
    Thanks to Dependabot, Gary Gregory.
- Includes changes from version 1.6:
  * Fixes:
  - [StepSecurity] ci: Harden GitHub Actions #176. Thanks to
    step-security-bot, Gary Gregory.
  - Inconsistent date format in changes report. Fixes CLI-318.
    Thanks to Alexander Veit, Gary Gregory.
  - Fix NPE in CommandLine.resolveOption(String). Fixes CLI-283.
    Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addOption(Option) should not allow a null Option.
    Fixes CLI-283. Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addArgs(String) should not allow a null String.
    Fixes CLI-283. Thanks to Gary Gregory.
  - Site docs: "Usage Scenarios" refers to deprecated methods.
    Fixes CLI-303. Thanks to Julian Schilling, Gary Gregory.
  - NullPointerException thrown by CommandLineParser.parse().
    Fixes CLI-317. Thanks to Philippe Bastiani, Sruteesh Kumar
    Paramata, Gary Gregory.
  - StringIndexOutOfBoundsException thrown by
    CommandLineParser.parse(). Fixes CLI-313. Thanks to Dominik
    Stadler, HUNG LU, Sruteesh Kumar Paramata.
  * Updates:
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 417-423]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 446-450]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 474-478]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Use EMPTY_STRING_ARRAY constant. #102. Thanks to Ken Dombeck.
  - Fix site links that are broken #155. Thanks to Arturo Bernal.
  - Use Math.max() #111. Delete unused assignment #112. Thanks to
    Arturo Bernal.
  - Add github/codeql-action. Thanks to Dependabot, Gary Gregory.
  - Bump Java from 7 to 8. Thanks to Gary Gregory.
  - Bump actions/cache from 2.1.7 to 3.0.10 #97, #130, #132.
    Thanks to Dependabot, Gary Gregory.
  - Bump actions/checkout from 3 to 3.1.0 #133. Thanks to Gary
    Gregory, Dependabot.
  - Bump actions/setup-java from 2 to 3.6.0 #136. Thanks to Gary
    Gregory.
  - Bump spotbugs from 4.5.3 to 4.7.3 #96, #107, #113, #125,
    [#138]. Thanks to Gary Gregory, Dependabot.
  - Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.3.0 #98, #108,
    [#115], #117, #126, #145. Thanks to Dependabot.
  - Bump commons-parent from 52 to 64 #100, #128, #151, #158.
    Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 3.0.0 to 3.1.0 #103. Thanks to
    Dependabot.
  - Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #105, #120.
    Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #110, #124.
    Thanks to Dependabot.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary
    Gregory.
  - Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #121. Thanks
    to Gary Gregory.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. Thanks to
    Gary Gregory.
  - Update JUnit 4 to 5 vintage. Thanks to Gary Gregory.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.8.0
  * Fix Javadoc pathing #280. Fixes CLI-334.
- Revised CLI-253-workaround.patch for compatibility with 1.8.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1730980800">- Update to 1.9.0
  * New features
    + Add OptionGroup.isSelected().
    + You can now extend HelpFormatter.Builder.
    + Add 'since' attribute to Option to track when an Option was
    introduced #292
  * Fixed bugs
    + CLI-334: Fix Javadoc pathing #280.
    + CLI-335: Updated properties documentation #285.
    + CLI-336: Deprecation not always reported #284.
    + Replace internal StringBuffer with StringBuilder.
  * Updates
    + Bump org.apache.commons:commons-parent from 70 to 72 #283.</changelog>
  <changelog author="fstrba@suse.com" date="1762344000">- Update to 1.10.0
  * New Features
    + CLI-339: Help formatter extension in the new package #314.
    + CommandLine.Builder implements Supplier&lt;CommandLine&gt;.
    + DefaultParser.Builder implements Supplier&lt;DefaultParser&gt;.
    + CLI-340: Add CommandLine.getParsedOptionValues() #334.
    + CLI-333: org.apache.commons.cli.Option.Builder implements
    Supplier&lt;Option&gt;.
  * Fixed Bugs
    + Deprecate CommandLine.Builder() in favor of
    CommandLine.builder().
    + Deprecate DeprecatedAttributes.Builder() in favor of
    DeprecatedAttributes.builder().
    + Refactor default parser test #294.
    + Port to JUnit 5.
    + Generics for Converter should use Exception not Throwable.
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache.
    + Javadoc is missing its Overview page.
    + Get mockito version from parent pom (#351).
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80).
    + Deprecate PatternOptionBuilder.PatternOptionBuilder().
    + CLI-341: HelpFormatter infinite loop with 0 width input.
    + CLI-349: Fail faster with a more precise NullPointerException:
    Option.processValue() throws NullPointerException when passed
    null value with value separator configured.
    + CLI-344: Fail faster with a more precise NullPointerException:
    DefaultParser.parse() throws NullPointerException when options
    parameter is null.
    + CLI-347: Options.addOptionGroup(OptionGroup) does not remove
    required options from requiredOpts list.
    + org.apache.commons.cli.Option.Builder.get() should throw
    IllegalStateException instead of IllegalArgumentException.
    + org.apache.commons.cli.Option.processValue(String) should
    throw IllegalStateException instead of
    IllegalArgumentException.
    + org.apache.commons.cli.OptionBuilder.create() should throw
    IllegalStateException instead of IllegalArgumentException.
  * Updates
    + Bump org.apache.commons:commons-parent from 72 to 85 #302,
    [#304], #310, #315, #320, #327, #371.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.20.0 #309,
    [#337].
    + [test] Bump org.apache.commons:commons-text from 1.12.0 to
    1.14.0 #344.
    + Update site documentation to
    https://maven.apache.org/xsd/xdoc-2.0.xsd.</changelog>
</package>
<package pkgid="dbf11059a317b0b737224fd63499432032b8c062478bdf873b812d7f71cfad5659b2c0d65300e7a5e946a9afe419fbbd0cb9acb586ab64962e02a59d5cd092fb" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613131200">- Add OSGi manifest to the build files.
- Set java source/target levels to 6</changelog>
  <changelog author="david.anes@suse.com" date="1639656000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
  * New features:
  - (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
  - (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
  - (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
  - (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
  - (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
  - Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
  - Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
  * Fixed bugs:
  - Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
  - (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
  - Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
  - Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
  - Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
  - Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
  - (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
  - (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
  * Updates:
  - (CLI-294) Update Java from version 5 to 7.
  - Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
  - Remove deprecated sudo setting. #36. Thanks to dengliming.
  - Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
  - Bump commons-parent from 48 to 52. Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
  - Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
  - Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
  - Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
  - Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
  - Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
  - Bump commons.animal-sniffer.version 1.19 -&gt; 1.20. Thanks to Gary Gregory.
  - Bump maven-bundle-plugin 5.1.1 -&gt; 5.1.2. Thanks to Gary Gregory.
  - Bump biz.aQute.bndlib.version 5.1.2 -&gt; 6.0.0. Thanks to Gary Gregory.
  - Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
  - Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Build with java source/target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated apache-commons-cli-build.xml to new version.
- Update to 1.7:
  * New features:
  - Add and use a Converter interface and implementations without
    using BeanUtils #216. Fixes CLI-321. Thanks to Claude Warren,
    Gary Gregory.
  - Add Maven property project.build.outputTimestamp for build
    reproducibility. Thanks to Gary Gregory.
  - Add '-' as an option char and implemented extensive tests
    [#217]. Fixes CLI-322. Thanks to Claude Warren, Gary Gregory.
  - Make adding OptionGroups and Options to existing Options
    easier #230. Fixes CLI-324. Thanks to Claude Warren, Gary
    Gregory.
  - Added Supplier&lt;T&gt; defaults for getParsedOptionValue #229.
    Fixes CLI-323. Thanks to Claude Warren, Gary Gregory.
  - Make Option.getKey() public #239. Fixes CLI-326. Thanks to
    Claude Warren, Gary Gregory.
  - Add builder factory CommandLine#builder(). Thanks to Claude
    Warren, Gary Gregory.
  * Fixes:
  - Inconsistent behavior in key/value pairs (Java property
    style). Fixes CLI-312. Thanks to Claude Warren, Gary Gregory.
  - Avoid NullPointerException in
    Util.stripLeadingAndTrailingQuotes(String). Thanks to Gary
    Gregory.
  - Awkward behavior of Option.builder() for multiple optional
    args. Fixes CLI-320. Thanks to Paul King, Claude Warren.
  - Properties from multiple arguments with value separator.
    [#237]. Fixes CLI-325. Thanks to Claude Warren.
  - Fix for expected textual date values. #244. Fixes CLI-327.
    Thanks to Claude Warren, Gary Gregory.
  - Option.Builder.option("") should throw
    IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException. Thanks to Gary Gregory.
  - Avoid NullPointerException in
    CommandLine.getOptionValues(Option|String). Thanks to Gary
    Gregory.
  * Updates:
  - Bump commons-parent from 64 to 69 #256. Thanks to Gary
    Gregory.
  - Update the tests to JUnit 5 #238. Thanks to Elric, Gary
    Gregory.
  - Bump tests commons-io:commons-io from 2.16.0 to 2.16.1 #258.
    Thanks to Dependabot, Gary Gregory.
- Includes changes from version 1.6:
  * Fixes:
  - [StepSecurity] ci: Harden GitHub Actions #176. Thanks to
    step-security-bot, Gary Gregory.
  - Inconsistent date format in changes report. Fixes CLI-318.
    Thanks to Alexander Veit, Gary Gregory.
  - Fix NPE in CommandLine.resolveOption(String). Fixes CLI-283.
    Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addOption(Option) should not allow a null Option.
    Fixes CLI-283. Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addArgs(String) should not allow a null String.
    Fixes CLI-283. Thanks to Gary Gregory.
  - Site docs: "Usage Scenarios" refers to deprecated methods.
    Fixes CLI-303. Thanks to Julian Schilling, Gary Gregory.
  - NullPointerException thrown by CommandLineParser.parse().
    Fixes CLI-317. Thanks to Philippe Bastiani, Sruteesh Kumar
    Paramata, Gary Gregory.
  - StringIndexOutOfBoundsException thrown by
    CommandLineParser.parse(). Fixes CLI-313. Thanks to Dominik
    Stadler, HUNG LU, Sruteesh Kumar Paramata.
  * Updates:
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 417-423]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 446-450]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 474-478]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Use EMPTY_STRING_ARRAY constant. #102. Thanks to Ken Dombeck.
  - Fix site links that are broken #155. Thanks to Arturo Bernal.
  - Use Math.max() #111. Delete unused assignment #112. Thanks to
    Arturo Bernal.
  - Add github/codeql-action. Thanks to Dependabot, Gary Gregory.
  - Bump Java from 7 to 8. Thanks to Gary Gregory.
  - Bump actions/cache from 2.1.7 to 3.0.10 #97, #130, #132.
    Thanks to Dependabot, Gary Gregory.
  - Bump actions/checkout from 3 to 3.1.0 #133. Thanks to Gary
    Gregory, Dependabot.
  - Bump actions/setup-java from 2 to 3.6.0 #136. Thanks to Gary
    Gregory.
  - Bump spotbugs from 4.5.3 to 4.7.3 #96, #107, #113, #125,
    [#138]. Thanks to Gary Gregory, Dependabot.
  - Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.3.0 #98, #108,
    [#115], #117, #126, #145. Thanks to Dependabot.
  - Bump commons-parent from 52 to 64 #100, #128, #151, #158.
    Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 3.0.0 to 3.1.0 #103. Thanks to
    Dependabot.
  - Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #105, #120.
    Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #110, #124.
    Thanks to Dependabot.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary
    Gregory.
  - Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #121. Thanks
    to Gary Gregory.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. Thanks to
    Gary Gregory.
  - Update JUnit 4 to 5 vintage. Thanks to Gary Gregory.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.8.0
  * Fix Javadoc pathing #280. Fixes CLI-334.
- Revised CLI-253-workaround.patch for compatibility with 1.8.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1730980800">- Update to 1.9.0
  * New features
    + Add OptionGroup.isSelected().
    + You can now extend HelpFormatter.Builder.
    + Add 'since' attribute to Option to track when an Option was
    introduced #292
  * Fixed bugs
    + CLI-334: Fix Javadoc pathing #280.
    + CLI-335: Updated properties documentation #285.
    + CLI-336: Deprecation not always reported #284.
    + Replace internal StringBuffer with StringBuilder.
  * Updates
    + Bump org.apache.commons:commons-parent from 70 to 72 #283.</changelog>
  <changelog author="fstrba@suse.com" date="1762344000">- Update to 1.10.0
  * New Features
    + CLI-339: Help formatter extension in the new package #314.
    + CommandLine.Builder implements Supplier&lt;CommandLine&gt;.
    + DefaultParser.Builder implements Supplier&lt;DefaultParser&gt;.
    + CLI-340: Add CommandLine.getParsedOptionValues() #334.
    + CLI-333: org.apache.commons.cli.Option.Builder implements
    Supplier&lt;Option&gt;.
  * Fixed Bugs
    + Deprecate CommandLine.Builder() in favor of
    CommandLine.builder().
    + Deprecate DeprecatedAttributes.Builder() in favor of
    DeprecatedAttributes.builder().
    + Refactor default parser test #294.
    + Port to JUnit 5.
    + Generics for Converter should use Exception not Throwable.
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache.
    + Javadoc is missing its Overview page.
    + Get mockito version from parent pom (#351).
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80).
    + Deprecate PatternOptionBuilder.PatternOptionBuilder().
    + CLI-341: HelpFormatter infinite loop with 0 width input.
    + CLI-349: Fail faster with a more precise NullPointerException:
    Option.processValue() throws NullPointerException when passed
    null value with value separator configured.
    + CLI-344: Fail faster with a more precise NullPointerException:
    DefaultParser.parse() throws NullPointerException when options
    parameter is null.
    + CLI-347: Options.addOptionGroup(OptionGroup) does not remove
    required options from requiredOpts list.
    + org.apache.commons.cli.Option.Builder.get() should throw
    IllegalStateException instead of IllegalArgumentException.
    + org.apache.commons.cli.Option.processValue(String) should
    throw IllegalStateException instead of
    IllegalArgumentException.
    + org.apache.commons.cli.OptionBuilder.create() should throw
    IllegalStateException instead of IllegalArgumentException.
  * Updates
    + Bump org.apache.commons:commons-parent from 72 to 85 #302,
    [#304], #310, #315, #320, #327, #371.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.20.0 #309,
    [#337].
    + [test] Bump org.apache.commons:commons-text from 1.12.0 to
    1.14.0 #344.
    + Update site documentation to
    https://maven.apache.org/xsd/xdoc-2.0.xsd.</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to 1.11.0
  * New Features
    + Add CommandLine.getOptionCount() to measure option repetition
  * Fixed Bugs
    + CLI-351: Multiple trailing BREAK_CHAR_SET characters cause
    infinite loop in HelpFormatter
    + CLI-351:  Fix issue with groups not being reported in help
    output
  * Updates
    + Bump org.apache.commons:commons-parent from 85 to 91
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
- Modified patch:
  * CLI-253-workaround.patch
    + rediff</changelog>
</package>
<package pkgid="4a1a7c227a11ff6cd03a8b5589b9432dc9c7a5348aad3dbf6e3e355f8a43792270b8c5508766a0839a885c92c7c6dc45a9ec1a5c530feb2fc09b7f0a5625237e" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1549368000">- Clean-up the spec file
- Removed patch:
  * commons-cli-1.4-jdk9.patch
    + not needed since we are not building with maven
- Added patch:
  * CLI-253-workaround.patch
    + [CLI-253] Prevent "Unrecognized option: --null" when handling
  long opts in PosixParser</changelog>
  <changelog author="jengelh@inai.de" date="1549368001">- Trim bias from description; update RPM groups.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613131200">- Add OSGi manifest to the build files.
- Set java source/target levels to 6</changelog>
  <changelog author="david.anes@suse.com" date="1639656000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
  * New features:
  - (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
  - (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
  - (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
  - (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
  - (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
  - Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
  - Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
  * Fixed bugs:
  - Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
  - (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
  - Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
  - Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
  - Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
  - Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
  - (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
  - (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
  * Updates:
  - (CLI-294) Update Java from version 5 to 7.
  - Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
  - Remove deprecated sudo setting. #36. Thanks to dengliming.
  - Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
  - Bump commons-parent from 48 to 52. Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
  - Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
  - Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
  - Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
  - Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
  - Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
  - Bump commons.animal-sniffer.version 1.19 -&gt; 1.20. Thanks to Gary Gregory.
  - Bump maven-bundle-plugin 5.1.1 -&gt; 5.1.2. Thanks to Gary Gregory.
  - Bump biz.aQute.bndlib.version 5.1.2 -&gt; 6.0.0. Thanks to Gary Gregory.
  - Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
  - Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-</changelog>
  <changelog author="fstrba@suse.com" date="1695297600">- Build with java source/target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Rebased patch CLI-253-workaround.patch to new version.
- Updated apache-commons-cli-build.xml to new version.
- Update to 1.7:
  * New features:
  - Add and use a Converter interface and implementations without
    using BeanUtils #216. Fixes CLI-321. Thanks to Claude Warren,
    Gary Gregory.
  - Add Maven property project.build.outputTimestamp for build
    reproducibility. Thanks to Gary Gregory.
  - Add '-' as an option char and implemented extensive tests
    [#217]. Fixes CLI-322. Thanks to Claude Warren, Gary Gregory.
  - Make adding OptionGroups and Options to existing Options
    easier #230. Fixes CLI-324. Thanks to Claude Warren, Gary
    Gregory.
  - Added Supplier&lt;T&gt; defaults for getParsedOptionValue #229.
    Fixes CLI-323. Thanks to Claude Warren, Gary Gregory.
  - Make Option.getKey() public #239. Fixes CLI-326. Thanks to
    Claude Warren, Gary Gregory.
  - Add builder factory CommandLine#builder(). Thanks to Claude
    Warren, Gary Gregory.
  * Fixes:
  - Inconsistent behavior in key/value pairs (Java property
    style). Fixes CLI-312. Thanks to Claude Warren, Gary Gregory.
  - Avoid NullPointerException in
    Util.stripLeadingAndTrailingQuotes(String). Thanks to Gary
    Gregory.
  - Awkward behavior of Option.builder() for multiple optional
    args. Fixes CLI-320. Thanks to Paul King, Claude Warren.
  - Properties from multiple arguments with value separator.
    [#237]. Fixes CLI-325. Thanks to Claude Warren.
  - Fix for expected textual date values. #244. Fixes CLI-327.
    Thanks to Claude Warren, Gary Gregory.
  - Option.Builder.option("") should throw
    IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException. Thanks to Gary Gregory.
  - Avoid NullPointerException in
    CommandLine.getOptionValues(Option|String). Thanks to Gary
    Gregory.
  * Updates:
  - Bump commons-parent from 64 to 69 #256. Thanks to Gary
    Gregory.
  - Update the tests to JUnit 5 #238. Thanks to Elric, Gary
    Gregory.
  - Bump tests commons-io:commons-io from 2.16.0 to 2.16.1 #258.
    Thanks to Dependabot, Gary Gregory.
- Includes changes from version 1.6:
  * Fixes:
  - [StepSecurity] ci: Harden GitHub Actions #176. Thanks to
    step-security-bot, Gary Gregory.
  - Inconsistent date format in changes report. Fixes CLI-318.
    Thanks to Alexander Veit, Gary Gregory.
  - Fix NPE in CommandLine.resolveOption(String). Fixes CLI-283.
    Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addOption(Option) should not allow a null Option.
    Fixes CLI-283. Thanks to Dilraj Singh, Gary Gregory.
  - CommandLine.addArgs(String) should not allow a null String.
    Fixes CLI-283. Thanks to Gary Gregory.
  - Site docs: "Usage Scenarios" refers to deprecated methods.
    Fixes CLI-303. Thanks to Julian Schilling, Gary Gregory.
  - NullPointerException thrown by CommandLineParser.parse().
    Fixes CLI-317. Thanks to Philippe Bastiani, Sruteesh Kumar
    Paramata, Gary Gregory.
  - StringIndexOutOfBoundsException thrown by
    CommandLineParser.parse(). Fixes CLI-313. Thanks to Dominik
    Stadler, HUNG LU, Sruteesh Kumar Paramata.
  * Updates:
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 417-423]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 446-450]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Fix SpotBugs Error: Medium: Method intentionally throws
    RuntimeException. [org.apache.commons.cli.Option] At
    Option.java:[lines 474-478]
    THROWS_METHOD_THROWS_RUNTIMEEXCEPTION Thanks to Gary Gregory.
  - Use EMPTY_STRING_ARRAY constant. #102. Thanks to Ken Dombeck.
  - Fix site links that are broken #155. Thanks to Arturo Bernal.
  - Use Math.max() #111. Delete unused assignment #112. Thanks to
    Arturo Bernal.
  - Add github/codeql-action. Thanks to Dependabot, Gary Gregory.
  - Bump Java from 7 to 8. Thanks to Gary Gregory.
  - Bump actions/cache from 2.1.7 to 3.0.10 #97, #130, #132.
    Thanks to Dependabot, Gary Gregory.
  - Bump actions/checkout from 3 to 3.1.0 #133. Thanks to Gary
    Gregory, Dependabot.
  - Bump actions/setup-java from 2 to 3.6.0 #136. Thanks to Gary
    Gregory.
  - Bump spotbugs from 4.5.3 to 4.7.3 #96, #107, #113, #125,
    [#138]. Thanks to Gary Gregory, Dependabot.
  - Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.3.0 #98, #108,
    [#115], #117, #126, #145. Thanks to Dependabot.
  - Bump commons-parent from 52 to 64 #100, #128, #151, #158.
    Thanks to Dependabot, Gary Gregory.
  - Bump maven-antrun-plugin from 3.0.0 to 3.1.0 #103. Thanks to
    Dependabot.
  - Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #105, #120.
    Thanks to Dependabot.
  - Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #110, #124.
    Thanks to Dependabot.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary
    Gregory.
  - Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #121. Thanks
    to Gary Gregory.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0. Thanks to
    Gary Gregory.
  - Update JUnit 4 to 5 vintage. Thanks to Gary Gregory.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.8.0
  * Fix Javadoc pathing #280. Fixes CLI-334.
- Revised CLI-253-workaround.patch for compatibility with 1.8.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1730980800">- Update to 1.9.0
  * New features
    + Add OptionGroup.isSelected().
    + You can now extend HelpFormatter.Builder.
    + Add 'since' attribute to Option to track when an Option was
    introduced #292
  * Fixed bugs
    + CLI-334:  Fix Javadoc pathing #280.
    + CLI-335:  Updated properties documentation #285.
    + CLI-336:  Deprecation not always reported #284.
    + Replace internal StringBuffer with StringBuilder.
  * Updates
    + Bump org.apache.commons:commons-parent from 70 to 72 #283.</changelog>
</package>
<package pkgid="9f23d3a269f85df5bf0c96943a45a8ea718138f0ea0a4b0a99e615761823cba8e459708ffb8da78dac7ba826c38bc631ad529d1604f37a5201deb6c9d2cfff7e" name="apache-commons-codec" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1549368000">- Clean-up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1550232000">- Update to version 1.11
  * New features:
    + Add Automatic-Module-Name manifest entry for Java 9.
    Fixes CODEC-242.
    + Add BaseNCodec.encode(byte[], int, int) input with offset and
    length parameters for Base64 and Base32. Fixes CODEC-202.
    + Add convenience API org.apache.commons.codec.binary.Hex.
    .encodeHexString(byte[]|ByteBuffer, boolean).
    Fixes CODEC-224.
    + Add convenience method decodeHex(String). Fixes CODEC-203.
    + Add DigestUtils.getDigest(String, MessageDigest).
    Fixes CODEC-210.
    + Add faster CRC32 implementation. Fixes CODEC-205.
    + Add HmacAlgorithms.HMAC_SHA_224 (Java 8 only).
    Fixes CODEC-217.
    + Add java.io.File APIs to MessageDigestAlgorithm.
    Fixes CODEC-206.
    + Add support for CRC32-C. Fixes CODEC-171.
    + Add support for XXHash32. Fixes CODEC-241.
    + BaseNCodecOutputStream only supports writing EOF on close().
    Fixes CODEC-183.
    + Create a minimal Digest command line utility:
    org.apache.commons.codec.digest.Digest. Fixes CODEC-212.
    + Fluent interface for DigestUtils. Fixes CODEC-220.
    + Fluent interface for HmacUtils. Fixes CODEC-222.
    + Make some DigestUtils APIs public. Fixes CODEC-208.
    + Support java.nio.ByteBuffer in DigestUtils. Fixes CODEC-193.
    + Support java.nio.ByteBuffer in
    org.apache.commons.codec.binary.Hex. Fixes CODEC-194.
    + Support JEP 287: SHA-3 Hash Algorithms. Fixes CODEC-213.
    + Support SHA-224 in DigestUtils on Java 8. Fixes CODEC-195.
  * Removed feature:
    + Drop obsolete Ant build. Fixes CODEC-223.
  * Changes:
    + Base32.decode should support lowercase letters.
  Fixes CODEC-234.
    + HmacUtils.updateHmac calls reset() unnecessarily.
  Fixes CODEC-221.
    + Soundex should support more algorithm variants.
  Fixes CODEC-233.
  * Fixed bugs:
    + Base32.HEX_DECODE_TABLE contains the wrong value 32.
  Fixes CODEC-200.
    + Base64.encodeBase64String could better use newStringUsAscii
  (ditto encodeBase64URLSafeString). Fixes CODEC-145.
    + BaseNCodec: encodeToString and encodeAsString methods are
  identical. Fixes CODEC-144.
    + Bug in HW rule in Soundex. Fixes CODEC-199.
    + Charsets Javadoc breaks build when using Java 8.
  Fixes CODEC-207.
    + Don't deprecate Charsets Charset constants in favor of
  Java 7's java.nio.charset.StandardCharsets. Fixes CODEC-219.
    + Fix minor resource leaks. Fixes CODEC-225.
    + Javadoc for SHA-224 DigestUtils methods should mention
  Java 1.8.0 restriction instead of 1.4.0. Fixes CODEC-209.
    + StringUtils.equals(CharSequence cs1, CharSequence cs2) can
  fail with String Index OBE. Fixes CODEC-231.
    + StringUtils.newStringxxx(null) should return null, not NPE.
  Fixes CODEC-229.
    + URLCodec is neither immutable nor threadsafe.
  Fixes CODEC-232.
    + URLCodec.WWW_FORM_URL should be private. Fixes CODEC-230.
- Generate the Ant build file and use it
- Add an option --with tests and don't run tests by default. This
  diminshes the number of dependencies and speeds-up the build.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591099200">- Update to version 1.14
  * Release 1.14 - 2019-12-30
  - Fix: Hex: Allow encoding read-only ByteBuffer.
  - Fix: Hex: Only use an available ByteBuffer backing array if
    the length equals the remaining byte count.
  - Update: MurmurHash3: Deprecate hash64 methods and hash methods
    accepting a String that use the default encoding.
  - Fix: BaseNCodec to expand buffer using overflow conscious code.
  - Fix: Base32/64: Fixed decoding check that all the final trailing
    bits to discard are zero.
  - Add: Add MurmurHash3.hash128x64 methods to fix sign extension error
    during seeding in hash128 methods.
  - Add: Add MurmurHash3.hash32x86 methods and IncrementalHash32x86 to
    fix sign extension error in hash32 methods.
  - Fix: Allow repeat calls to MurmurHash3.IncrementalHash32.end() to
    generate the same value.
  - Add: Add RandomAccessFile digest methods #31.
  - Add: Add Path APIs to org.apache.commons.codec.digest.DigestUtils
    similar to File APIs.
  - Add: Add SHA-512/224 and SHA-512/256 to DigestUtils for Java 9 and up.
  - Add: Add missing note in javadoc when sign extension error is present #34.
  - Fix: Reliance on default encoding in MurmurHash2 and MurmurHash3.
  - Update: Don't reload standard Charsets in org.apache.commons.codec.Charsets.
  - Update: Deprecate Charset constants in org.apache.commons.codec.Charsets
    in favor of java.nio.charset.StandardCharsets.
  * Release 1.13 - 2019-07-20
  - Fix: ColognePhonetic handles x incorrectly.
  - Fix: ColognePhonetic does not treat the letter H correctly.
  - Fix: Reject any decode request for a value that is impossible to
    encode to for Base32/Base64 rather than blindly decoding.
  - Add: MurmurHash2 for 32-bit or 64-bit value.
  - Add: MurmurHash3 for 32-bit or 128-bit value.
  - Update: Broken direct java.nio.ByteBuffer support in
    org.apache.commons.codec.binary.Hex.
  * Release 1.12 - 2019-02-04
  - Fix: B64 salt generator: Random -&gt; ThreadLocalRandom.
  - Fix: Wrong value calculated by Cologne Phonetic if a special character
    is placed between equal letters.
  - Update: Update from Java 6 to Java 7.
  - Add: Add Percent-Encoding Codec (described in RFC3986 and RFC7578).
  - Fix: ColognePhoneticTest.testIsEncodeEquals missing assertions.
  - Add: Add SHA-3 methods in DigestUtils.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Update to 1.15
  * Fix: MurmurHash3: Ensure hash128 maintains the sign extension bug.
  * Update: Base32/Base64/BCodec: Added strict decoding property to
    control handling of trailing bits. Default lenient mode discards
    them without error. Strict mode raise an exception.
  * Update: Base32/Base64 Input/OutputStream: Added strict decoding
    property to control handling of trailing bits. Default lenient
    mode discards them without error. Strict mode raise an exception.
  * Update: Update tests from JUnit 4.12 to 4.13.
  * Add: Base16Codec and Base16Input/OutputStream.
  * Add: Hex encode/decode with existing arrays.
  * Update: Update actions/checkout from v1 to v2.3.2.
  * Update: Update actions/setup-java from v1.4.0 to v1.4.1.
- Remove timeout.patch</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not alias the artifact to itself</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 1.16.0:
  * Minor improvements #67. Fixes CODEC-295.
  * Remove duplicated words from Javadocs.
  * Simplify assertion #84. Fixes CODEC-301.
  * Simplify assertion #84. Fixes CODEC-300.
  * Use Standard Charset object #82. Fixes CODEC-298.
  * Use String.contains() functions #125.
  * Avoid use toString() or substring() in favor of a simplified expression #126.
  * Fix byte-skipping in Base16 decoding #135. Fixes CODEC-305.
  * Fix several typos, improve writing in some javadocs #139.
  * BaseNCodecOutputStream.eof() should not throw IOException.
  * Javadoc improvements and cleanups.
  * Deprecate BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).
  * Add support for Blake3 family of hashes. Fixes CODEC-296.
  * Add github/codeql-action.
  * Bump actions/cache from v2 to v3.0.10 #75, #99, #119, #138, #149, #152.
  * Bump actions/setup-java from v1.4.1 to 3.5.1 #60, #62, #121.
  * Bump actions/checkout from 2.3.2 to 3.1.0 #65, #98, #114, #153.
  * Bump commons-parent from 52 to 58, #147, #165, #170.
  * Bump junit from 4.13.1 to 5.9.1 #76, #39, #140, #148. Fixes CODEC-285.
  * Bump Java 7 to 8.
  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.
  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).
  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7 #122, #134.
  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.
  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.
  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0, #133, #142, #145.
  * Bump pmd from 6.47.0 to 6.52.0.
  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0 #143.
  * Bump checkstyle from 8.45.1 to 9.3 #97, #100, #101, #103.
  * Bump taglist-maven-plugin from 2.4 to 3.0.0 #102.
  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Update to 1.16.1:
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs:
    + CODEC-295: Test clean ups
    + CODEC-295: Correct error in Base64 Javadoc
    + CODEC-295: Add minimum Java version in changes.xml
    + CODEC-310: Documentation update for the
    org.apache.commons.codec.digest.* package
    + Precompile regular expression in UnixCrypt.crypt(byte[],
    String)
    + CODEC-315: Fix possible IndexOutOfBoundException in
    PhoneticEngine.encode method
    + CODEC-313: Fix possible ArrayIndexOutOfBoundsException in
    QuotedPrintableCodec.encodeQuotedPrintable() method
    + CODEC-312: Fix possible StringIndexOutOfBoundException in
    MatchRatingApproachEncoder.encode() method
    + CODEC-311: Fix possible ArrayIndexOutOfBoundException in
    RefinedSoundex.getMappingCode()
    + CODEC-314: Fix possible IndexOutOfBoundsException in
    PercentCodec.insertAlwaysEncodeChars() method
    + Deprecate UnixCrypt 0-argument constructor
    + Deprecate Md5Crypt 0-argument constructor
    + Deprecate Crypt 0-argument constructor
    + Deprecate StringUtils 0-argument constructor
    + Deprecate Resources 0-argument constructor
    + Deprecate Charsets 0-argument constructor
    + Deprecate CharEncoding 0-argument constructor</changelog>
  <changelog author="gus.kenion@suse.com" date="1714651200">- Update to 1.17.0
  * New features:
    + Add override
    org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size().
    + Add support for Base64 custom alphabets #266.
    + Add Base64.Builder (allows custom alphabets).
    + Add Base32.Builder (allows custom alphabets).
    + Add Base64 support for a custom padding byte (like Base32).
  * Fixes:
    + Wrong output of DoubleMetaphone in 1.16.1. Fixes CODEC-320.
    + Optimize memory allocation in PhoneticEngine.
    + BCodec and QCodec encode() methods throw
    UnsupportedCharsetException instead of EncoderException.
    + Set Javadoc link to latest Java API LTS version.
    + Base32 constructor fails-fast with a NullPointerException if
    the custom alphabet array is null.
    + Base32 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of a custom
    alphabet array.
  * Updates:
    + Bump org.apache.commons:commons-parent from 66 to 69 #250,
    [#261].
    + Bump commons-io:commons-io from 2.15.1 to 2.16.1 #258, #265.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.17.1
  * Bug fixes:
    + Md5Crypt now throws IllegalArgumentException on an invalid
    prefix.
  * Dependency Updates:
    + Bump org.apache.commons:commons-parent from 69 to 71 #286.
    + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23
    to 1.24 #293.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #292.</changelog>
</package>
<package pkgid="aa954bacea685091eeaeaac33fb371059013357bcf8395f08153e5beb397ab5e1620b726c666ac14e26ebc9023234ca3e5702060ef286784a31f17a857e1c4f2" name="apache-commons-codec" arch="noarch">
  <version epoch="0" ver="1.18.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1550232000">- Update to version 1.11
  * New features:
    + Add Automatic-Module-Name manifest entry for Java 9.
    Fixes CODEC-242.
    + Add BaseNCodec.encode(byte[], int, int) input with offset and
    length parameters for Base64 and Base32. Fixes CODEC-202.
    + Add convenience API org.apache.commons.codec.binary.Hex.
    .encodeHexString(byte[]|ByteBuffer, boolean).
    Fixes CODEC-224.
    + Add convenience method decodeHex(String). Fixes CODEC-203.
    + Add DigestUtils.getDigest(String, MessageDigest).
    Fixes CODEC-210.
    + Add faster CRC32 implementation. Fixes CODEC-205.
    + Add HmacAlgorithms.HMAC_SHA_224 (Java 8 only).
    Fixes CODEC-217.
    + Add java.io.File APIs to MessageDigestAlgorithm.
    Fixes CODEC-206.
    + Add support for CRC32-C. Fixes CODEC-171.
    + Add support for XXHash32. Fixes CODEC-241.
    + BaseNCodecOutputStream only supports writing EOF on close().
    Fixes CODEC-183.
    + Create a minimal Digest command line utility:
    org.apache.commons.codec.digest.Digest. Fixes CODEC-212.
    + Fluent interface for DigestUtils. Fixes CODEC-220.
    + Fluent interface for HmacUtils. Fixes CODEC-222.
    + Make some DigestUtils APIs public. Fixes CODEC-208.
    + Support java.nio.ByteBuffer in DigestUtils. Fixes CODEC-193.
    + Support java.nio.ByteBuffer in
    org.apache.commons.codec.binary.Hex. Fixes CODEC-194.
    + Support JEP 287: SHA-3 Hash Algorithms. Fixes CODEC-213.
    + Support SHA-224 in DigestUtils on Java 8. Fixes CODEC-195.
  * Removed feature:
    + Drop obsolete Ant build. Fixes CODEC-223.
  * Changes:
    + Base32.decode should support lowercase letters.
  Fixes CODEC-234.
    + HmacUtils.updateHmac calls reset() unnecessarily.
  Fixes CODEC-221.
    + Soundex should support more algorithm variants.
  Fixes CODEC-233.
  * Fixed bugs:
    + Base32.HEX_DECODE_TABLE contains the wrong value 32.
  Fixes CODEC-200.
    + Base64.encodeBase64String could better use newStringUsAscii
  (ditto encodeBase64URLSafeString). Fixes CODEC-145.
    + BaseNCodec: encodeToString and encodeAsString methods are
  identical. Fixes CODEC-144.
    + Bug in HW rule in Soundex. Fixes CODEC-199.
    + Charsets Javadoc breaks build when using Java 8.
  Fixes CODEC-207.
    + Don't deprecate Charsets Charset constants in favor of
  Java 7's java.nio.charset.StandardCharsets. Fixes CODEC-219.
    + Fix minor resource leaks. Fixes CODEC-225.
    + Javadoc for SHA-224 DigestUtils methods should mention
  Java 1.8.0 restriction instead of 1.4.0. Fixes CODEC-209.
    + StringUtils.equals(CharSequence cs1, CharSequence cs2) can
  fail with String Index OBE. Fixes CODEC-231.
    + StringUtils.newStringxxx(null) should return null, not NPE.
  Fixes CODEC-229.
    + URLCodec is neither immutable nor threadsafe.
  Fixes CODEC-232.
    + URLCodec.WWW_FORM_URL should be private. Fixes CODEC-230.
- Generate the Ant build file and use it
- Add an option --with tests and don't run tests by default. This
  diminshes the number of dependencies and speeds-up the build.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591099200">- Update to version 1.14
  * Release 1.14 - 2019-12-30
  - Fix: Hex: Allow encoding read-only ByteBuffer.
  - Fix: Hex: Only use an available ByteBuffer backing array if
    the length equals the remaining byte count.
  - Update: MurmurHash3: Deprecate hash64 methods and hash methods
    accepting a String that use the default encoding.
  - Fix: BaseNCodec to expand buffer using overflow conscious code.
  - Fix: Base32/64: Fixed decoding check that all the final trailing
    bits to discard are zero.
  - Add: Add MurmurHash3.hash128x64 methods to fix sign extension error
    during seeding in hash128 methods.
  - Add: Add MurmurHash3.hash32x86 methods and IncrementalHash32x86 to
    fix sign extension error in hash32 methods.
  - Fix: Allow repeat calls to MurmurHash3.IncrementalHash32.end() to
    generate the same value.
  - Add: Add RandomAccessFile digest methods #31.
  - Add: Add Path APIs to org.apache.commons.codec.digest.DigestUtils
    similar to File APIs.
  - Add: Add SHA-512/224 and SHA-512/256 to DigestUtils for Java 9 and up.
  - Add: Add missing note in javadoc when sign extension error is present #34.
  - Fix: Reliance on default encoding in MurmurHash2 and MurmurHash3.
  - Update: Don't reload standard Charsets in org.apache.commons.codec.Charsets.
  - Update: Deprecate Charset constants in org.apache.commons.codec.Charsets
    in favor of java.nio.charset.StandardCharsets.
  * Release 1.13 - 2019-07-20
  - Fix: ColognePhonetic handles x incorrectly.
  - Fix: ColognePhonetic does not treat the letter H correctly.
  - Fix: Reject any decode request for a value that is impossible to
    encode to for Base32/Base64 rather than blindly decoding.
  - Add: MurmurHash2 for 32-bit or 64-bit value.
  - Add: MurmurHash3 for 32-bit or 128-bit value.
  - Update: Broken direct java.nio.ByteBuffer support in
    org.apache.commons.codec.binary.Hex.
  * Release 1.12 - 2019-02-04
  - Fix: B64 salt generator: Random -&gt; ThreadLocalRandom.
  - Fix: Wrong value calculated by Cologne Phonetic if a special character
    is placed between equal letters.
  - Update: Update from Java 6 to Java 7.
  - Add: Add Percent-Encoding Codec (described in RFC3986 and RFC7578).
  - Fix: ColognePhoneticTest.testIsEncodeEquals missing assertions.
  - Add: Add SHA-3 methods in DigestUtils.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Update to 1.15
  * Fix: MurmurHash3: Ensure hash128 maintains the sign extension bug.
  * Update: Base32/Base64/BCodec: Added strict decoding property to
    control handling of trailing bits. Default lenient mode discards
    them without error. Strict mode raise an exception.
  * Update: Base32/Base64 Input/OutputStream: Added strict decoding
    property to control handling of trailing bits. Default lenient
    mode discards them without error. Strict mode raise an exception.
  * Update: Update tests from JUnit 4.12 to 4.13.
  * Add: Base16Codec and Base16Input/OutputStream.
  * Add: Hex encode/decode with existing arrays.
  * Update: Update actions/checkout from v1 to v2.3.2.
  * Update: Update actions/setup-java from v1.4.0 to v1.4.1.
- Remove timeout.patch</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not alias the artifact to itself</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 1.16.0:
  * Minor improvements #67. Fixes CODEC-295.
  * Remove duplicated words from Javadocs.
  * Simplify assertion #84. Fixes CODEC-301.
  * Simplify assertion #84. Fixes CODEC-300.
  * Use Standard Charset object #82. Fixes CODEC-298.
  * Use String.contains() functions #125.
  * Avoid use toString() or substring() in favor of a simplified expression #126.
  * Fix byte-skipping in Base16 decoding #135. Fixes CODEC-305.
  * Fix several typos, improve writing in some javadocs #139.
  * BaseNCodecOutputStream.eof() should not throw IOException.
  * Javadoc improvements and cleanups.
  * Deprecate BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).
  * Add support for Blake3 family of hashes. Fixes CODEC-296.
  * Add github/codeql-action.
  * Bump actions/cache from v2 to v3.0.10 #75, #99, #119, #138, #149, #152.
  * Bump actions/setup-java from v1.4.1 to 3.5.1 #60, #62, #121.
  * Bump actions/checkout from 2.3.2 to 3.1.0 #65, #98, #114, #153.
  * Bump commons-parent from 52 to 58, #147, #165, #170.
  * Bump junit from 4.13.1 to 5.9.1 #76, #39, #140, #148. Fixes CODEC-285.
  * Bump Java 7 to 8.
  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.
  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).
  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7 #122, #134.
  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.
  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.
  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0, #133, #142, #145.
  * Bump pmd from 6.47.0 to 6.52.0.
  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0 #143.
  * Bump checkstyle from 8.45.1 to 9.3 #97, #100, #101, #103.
  * Bump taglist-maven-plugin from 2.4 to 3.0.0 #102.
  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Update to 1.16.1:
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs:
    + CODEC-295: Test clean ups
    + CODEC-295: Correct error in Base64 Javadoc
    + CODEC-295: Add minimum Java version in changes.xml
    + CODEC-310: Documentation update for the
    org.apache.commons.codec.digest.* package
    + Precompile regular expression in UnixCrypt.crypt(byte[],
    String)
    + CODEC-315: Fix possible IndexOutOfBoundException in
    PhoneticEngine.encode method
    + CODEC-313: Fix possible ArrayIndexOutOfBoundsException in
    QuotedPrintableCodec.encodeQuotedPrintable() method
    + CODEC-312: Fix possible StringIndexOutOfBoundException in
    MatchRatingApproachEncoder.encode() method
    + CODEC-311: Fix possible ArrayIndexOutOfBoundException in
    RefinedSoundex.getMappingCode()
    + CODEC-314: Fix possible IndexOutOfBoundsException in
    PercentCodec.insertAlwaysEncodeChars() method
    + Deprecate UnixCrypt 0-argument constructor
    + Deprecate Md5Crypt 0-argument constructor
    + Deprecate Crypt 0-argument constructor
    + Deprecate StringUtils 0-argument constructor
    + Deprecate Resources 0-argument constructor
    + Deprecate Charsets 0-argument constructor
    + Deprecate CharEncoding 0-argument constructor</changelog>
  <changelog author="gus.kenion@suse.com" date="1714651200">- Update to 1.17.0
  * New features:
    + Add override
    org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size().
    + Add support for Base64 custom alphabets #266.
    + Add Base64.Builder (allows custom alphabets).
    + Add Base32.Builder (allows custom alphabets).
    + Add Base64 support for a custom padding byte (like Base32).
  * Fixes:
    + Wrong output of DoubleMetaphone in 1.16.1. Fixes CODEC-320.
    + Optimize memory allocation in PhoneticEngine.
    + BCodec and QCodec encode() methods throw
    UnsupportedCharsetException instead of EncoderException.
    + Set Javadoc link to latest Java API LTS version.
    + Base32 constructor fails-fast with a NullPointerException if
    the custom alphabet array is null.
    + Base32 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of a custom
    alphabet array.
  * Updates:
    + Bump org.apache.commons:commons-parent from 66 to 69 #250,
    [#261].
    + Bump commons-io:commons-io from 2.15.1 to 2.16.1 #258, #265.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.17.1
  * Bug fixes:
    + Md5Crypt now throws IllegalArgumentException on an invalid
    prefix.
  * Dependency Updates:
    + Bump org.apache.commons:commons-parent from 69 to 71 #286.
    + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23
    to 1.24 #293.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #292.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.18.0
  * New features
    + Add Base32.Builder.setHexDecodeTable(boolean).
    + Add Base32.Builder.setHexEncodeTable(boolean).
  * Changes
    + Bump org.apache.commons:commons-parent from 78 to 79.
- Includes changes from 1.17.2
  * Fixed Bugs
    + Rewrite DaitchMokotoffSoundex.soundex(String) using
    String.join().
    + CODEC-324:  Use Resource.class to load resources, rather than
    its class loader #353.
    + Deprecate CharSequenceUtils.CharSequenceUtils().
    + Deprecate Sha2Crypt.Sha2Crypt().
  * Changes
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#296], #305, #313.
    + Bump org.apache.commons:commons-parent from 71 to 78 #310,
    [#312], #319, #323, #326, #333.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.18.0 #318,
    [#341].
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to
    3.2.1 #332.</changelog>
</package>
<package pkgid="04609a5c81ca59d6f8ef7f969bb307308b6a80addb7f4e81e77d8fef28dbe1ed986cc83bcb89aabbddaf82c42d53790805aa40418ecec359f9c26eb67daf06c7" name="apache-commons-codec" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 1.16.0:
  * Minor improvements #67. Fixes CODEC-295.
  * Remove duplicated words from Javadocs.
  * Simplify assertion #84. Fixes CODEC-301.
  * Simplify assertion #84. Fixes CODEC-300.
  * Use Standard Charset object #82. Fixes CODEC-298.
  * Use String.contains() functions #125.
  * Avoid use toString() or substring() in favor of a simplified expression #126.
  * Fix byte-skipping in Base16 decoding #135. Fixes CODEC-305.
  * Fix several typos, improve writing in some javadocs #139.
  * BaseNCodecOutputStream.eof() should not throw IOException.
  * Javadoc improvements and cleanups.
  * Deprecate BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).
  * Add support for Blake3 family of hashes. Fixes CODEC-296.
  * Add github/codeql-action.
  * Bump actions/cache from v2 to v3.0.10 #75, #99, #119, #138, #149, #152.
  * Bump actions/setup-java from v1.4.1 to 3.5.1 #60, #62, #121.
  * Bump actions/checkout from 2.3.2 to 3.1.0 #65, #98, #114, #153.
  * Bump commons-parent from 52 to 58, #147, #165, #170.
  * Bump junit from 4.13.1 to 5.9.1 #76, #39, #140, #148. Fixes CODEC-285.
  * Bump Java 7 to 8.
  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.
  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).
  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7 #122, #134.
  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.
  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.
  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0, #133, #142, #145.
  * Bump pmd from 6.47.0 to 6.52.0.
  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0 #143.
  * Bump checkstyle from 8.45.1 to 9.3 #97, #100, #101, #103.
  * Bump taglist-maven-plugin from 2.4 to 3.0.0 #102.
  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Update to 1.16.1:
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs:
    + CODEC-295: Test clean ups
    + CODEC-295: Correct error in Base64 Javadoc
    + CODEC-295: Add minimum Java version in changes.xml
    + CODEC-310: Documentation update for the
    org.apache.commons.codec.digest.* package
    + Precompile regular expression in UnixCrypt.crypt(byte[],
    String)
    + CODEC-315: Fix possible IndexOutOfBoundException in
    PhoneticEngine.encode method
    + CODEC-313: Fix possible ArrayIndexOutOfBoundsException in
    QuotedPrintableCodec.encodeQuotedPrintable() method
    + CODEC-312: Fix possible StringIndexOutOfBoundException in
    MatchRatingApproachEncoder.encode() method
    + CODEC-311: Fix possible ArrayIndexOutOfBoundException in
    RefinedSoundex.getMappingCode()
    + CODEC-314: Fix possible IndexOutOfBoundsException in
    PercentCodec.insertAlwaysEncodeChars() method
    + Deprecate UnixCrypt 0-argument constructor
    + Deprecate Md5Crypt 0-argument constructor
    + Deprecate Crypt 0-argument constructor
    + Deprecate StringUtils 0-argument constructor
    + Deprecate Resources 0-argument constructor
    + Deprecate Charsets 0-argument constructor
    + Deprecate CharEncoding 0-argument constructor</changelog>
  <changelog author="gus.kenion@suse.com" date="1714651200">- Update to 1.17.0
  * New features:
    + Add override
    org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size().
    + Add support for Base64 custom alphabets #266.
    + Add Base64.Builder (allows custom alphabets).
    + Add Base32.Builder (allows custom alphabets).
    + Add Base64 support for a custom padding byte (like Base32).
  * Fixes:
    + Wrong output of DoubleMetaphone in 1.16.1. Fixes CODEC-320.
    + Optimize memory allocation in PhoneticEngine.
    + BCodec and QCodec encode() methods throw
    UnsupportedCharsetException instead of EncoderException.
    + Set Javadoc link to latest Java API LTS version.
    + Base32 constructor fails-fast with a NullPointerException if
    the custom alphabet array is null.
    + Base32 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of a custom
    alphabet array.
  * Updates:
    + Bump org.apache.commons:commons-parent from 66 to 69 #250,
    [#261].
    + Bump commons-io:commons-io from 2.15.1 to 2.16.1 #258, #265.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.17.1
  * Bug fixes:
    + Md5Crypt now throws IllegalArgumentException on an invalid
    prefix.
  * Dependency Updates:
    + Bump org.apache.commons:commons-parent from 69 to 71 #286.
    + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23
    to 1.24 #293.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #292.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.18.0
  * New features
    + Add Base32.Builder.setHexDecodeTable(boolean).
    + Add Base32.Builder.setHexEncodeTable(boolean).
  * Changes
    + Bump org.apache.commons:commons-parent from 78 to 79.
- Includes changes from 1.17.2
  * Fixed Bugs
    + Rewrite DaitchMokotoffSoundex.soundex(String) using
    String.join().
    + CODEC-324:  Use Resource.class to load resources, rather than
    its class loader #353.
    + Deprecate CharSequenceUtils.CharSequenceUtils().
    + Deprecate Sha2Crypt.Sha2Crypt().
  * Changes
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#296], #305, #313.
    + Bump org.apache.commons:commons-parent from 71 to 78 #310,
    [#312], #319, #323, #326, #333.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.18.0 #318,
    [#341].
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to
    3.2.1 #332.</changelog>
  <changelog author="fstrba@suse.com" date="1770897600">- Update to 1.19.0
  * New features
    + Add HmacUtils.hmac(Path)
    + Add HmacUtils.hmacHex(Path)
    + Add PMD check to the default Maven goal
    + Add SpotBugs check to the default Maven goal
  * Fixed Bugs
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Refactor DigestUtils.updateDigest(MessageDigest, File) to use
    NIO
    + CODEC-328:  Clarify Javadoc for
    org.apache.commons.codec.digest.UnixCrypt.crypt(byte[],String)
    + Precompile regular expressions in DaitchMokotoffSoundex.Rule
    + Precompile regular expressions in
    DaitchMokotoffSoundex.parseRules(Scanner, String, Map, Map)
    + Precompile regular expressions in
    Lang.loadFromResource(String, Languages)
    + Precompile regular expressions in
    PhoneticEngine.encode(String, LanguageSet)
    + Precompile regular expressions in
    org.apache.commons.codec.language.bm.Rule.parse*(*)
    + Remove redundant checks for whitespace in
    DaitchMokotoffSoundex.soundex(String, boolean)
    + Javadoc typo in Base16.java #380
    + Deprecate unused constant org.apache.commons.codec.language.bm
    .Rule.ALL
    + CODEC-331: org.apache.commons.codec.language.bm.Rule
    .parsePhonemeExpr(String) adds duplicate empty phoneme when
    input ends with |
    + CODEC-331: org.apache.commons.codec.language
    .DaitchMokotoffSoundex.cleanup(String) does not remove special
    characters like punctuation
    + Fix PMD multiple UnnecessaryFullyQualifiedName in
    org.apache.commons.codec.binary.StringUtils
    + Fix PMD UnusedFormalParameter in private constructor in
    org.apache.commons.codec.binary.Base16
    + Fix PMD multiple UnnecessaryFullyQualifiedName in
    org.apache.commons.codec.digest.Blake3
    + Fix PMD UnnecessaryFullyQualifiedName in
    org.apache.commons.codec.digest.Md5Crypt
    + Fix PMD EmptyControlStatement in
    org.apache.commons.codec.language.Metaphone
    + Fix SpotBugs [ERROR] Medium: org.apache.commons.codec.binary
    .BaseNCodec$AbstractBuilder.setEncodeTable(byte[]) may expose
    internal representation by storing an externally mutable
    object into BaseNCodec$AbstractBuilder.encodeTable [org.apache
    .commons.codec.binary.BaseNCodec$AbstractBuilder] At
    BaseNCodec.java:[line 131] EI_EXPOSE_REP2
    + The method org.apache.commons.codec.binary.BaseNCodec
    .AbstractBuilder.setLineSeparator(byte...) now makes a
    defensive copy
    + Avoid unnecessary String conversion in
    org.apache.commons.codec.language.bm.PhoneticEngine
    .applyFinalRules(PhonemeBuilder, Map)
    + Fix SpotBugs [ERROR] High: Potentially dangerous use of
    non-short-circuit logic in org.apache.commons.codec.language
    .DaitchMokotoffSoundex.cleanup(String)
    [org.apache.commons.codec.language.DaitchMokotoffSoundex] At
    DaitchMokotoffSoundex.java:[line 350]
    NS_DANGEROUS_NON_SHORT_CIRCUIT
  * Changes
    + Bump org.apache.commons:commons-parent from 79 to 85 #375
    + [test] Bump commons-io:commons-io from 2.18.0 to 2.20.0
    + [test] Bump org.apache.commons:commons-lang3 from 3.17.0 to
    3.18.0 #386</changelog>
  <changelog author="fstrba@suse.com" date="1770897601">- Update to 1.20.0
  * New features
    + Add org.apache.commons.codec.digest.Crc16
    + Add builders to org.apache.commons.codec.digest streams and
    deprecate some old constructors
    + Add builder to Base16 streams and deprecate some old
    constructors
    + Add support for SHAKE128-256 and SHAKE256-512 to 'DigestUtils'
    and 'MessageDigestAlgorithms' on Java 25 and up
    + Add BaseNCodec.AbstractBuilder.setDecodeTable(byte[]) and
    refactor subclasses
  * Changes
    + Deprecate all but one Base32 constructor in favor of the
    builder added in version 1.17.0
    + Deprecate all but one Base64 constructor in favor of the
    builder added in version 1.17.0
    + BaseNCodecInputStream subclasses are now type-safe to match
    its matching BaseNCodec
    + BaseNCodecOutputStream subclasses are now type-safe to match
    its matching BaseNCodec
    + Bump org.apache.commons:commons-parent from 85 to 91
    + [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to
    3.19.0</changelog>
  <changelog author="fstrba@suse.com" date="1770897602">- Update to 1.21.0
  * New features
    + CODEC-333: Add distinct Base64 decoding for standard and
    URL-safe formats
  * Fixed Bugs
    + Fix oak leaf icon references in overview.html when running
    'mvn clean javadoc:javadoc'
    + Fix Apache RAT plugin console warnings
    + Fix malformed Javadoc comments
  * Changes
    + Bump org.apache.commons:commons-parent from 91 to 96 #415,
    [#418]
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
    + Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0</changelog>
  <changelog author="fstrba@suse.com" date="1774872000">- Clean up the spec file
- The aspell-mail.txt not needed anymore since the mentioned file
  has now the right Apache-2.0 header</changelog>
  <changelog author="fstrba@suse.com" date="1778068800">- Update to 1.22.0
  * New features
    + CODEC-326: Add Base58 support
    + Add BaseNCodecInputStream.AbstracBuilder.setByteArray(byte[])
    + CODEC-335: Add GitIdentifiers to compute Git blob and tree
    object identifiers
  * Fixed Bugs
    + CODEC-249: Fix Incorrect transform of CH digraph according
    Metaphone basic rules #423
    + CODEC-317: ColognePhonetic can create duplicate consecutive
    codes in some cases
    + Add boundary tests for BinaryCodec.fromAscii partial-bit
    inputs #425
    + CODEC-336: Base64.Builder.setUrlSafe(boolean) Javadoc
    incorrectly states null is accepted for primitive boolean
    parameter
  * Changes
    + Bump org.apache.commons:commons-parent from 96 to 98</changelog>
</package>
<package pkgid="8d70094aa89918c173d8828d3b54e9d8b9ed598891e7a2bd1ba75b531e8c628738e3fefb32a00b60734befb5b8846c2a8951dc204d8e648cbf5cce0e2cbbf16c" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1549368000">- Clean-up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1550232000">- Update to version 1.11
  * New features:
    + Add Automatic-Module-Name manifest entry for Java 9.
    Fixes CODEC-242.
    + Add BaseNCodec.encode(byte[], int, int) input with offset and
    length parameters for Base64 and Base32. Fixes CODEC-202.
    + Add convenience API org.apache.commons.codec.binary.Hex.
    .encodeHexString(byte[]|ByteBuffer, boolean).
    Fixes CODEC-224.
    + Add convenience method decodeHex(String). Fixes CODEC-203.
    + Add DigestUtils.getDigest(String, MessageDigest).
    Fixes CODEC-210.
    + Add faster CRC32 implementation. Fixes CODEC-205.
    + Add HmacAlgorithms.HMAC_SHA_224 (Java 8 only).
    Fixes CODEC-217.
    + Add java.io.File APIs to MessageDigestAlgorithm.
    Fixes CODEC-206.
    + Add support for CRC32-C. Fixes CODEC-171.
    + Add support for XXHash32. Fixes CODEC-241.
    + BaseNCodecOutputStream only supports writing EOF on close().
    Fixes CODEC-183.
    + Create a minimal Digest command line utility:
    org.apache.commons.codec.digest.Digest. Fixes CODEC-212.
    + Fluent interface for DigestUtils. Fixes CODEC-220.
    + Fluent interface for HmacUtils. Fixes CODEC-222.
    + Make some DigestUtils APIs public. Fixes CODEC-208.
    + Support java.nio.ByteBuffer in DigestUtils. Fixes CODEC-193.
    + Support java.nio.ByteBuffer in
    org.apache.commons.codec.binary.Hex. Fixes CODEC-194.
    + Support JEP 287: SHA-3 Hash Algorithms. Fixes CODEC-213.
    + Support SHA-224 in DigestUtils on Java 8. Fixes CODEC-195.
  * Removed feature:
    + Drop obsolete Ant build. Fixes CODEC-223.
  * Changes:
    + Base32.decode should support lowercase letters.
  Fixes CODEC-234.
    + HmacUtils.updateHmac calls reset() unnecessarily.
  Fixes CODEC-221.
    + Soundex should support more algorithm variants.
  Fixes CODEC-233.
  * Fixed bugs:
    + Base32.HEX_DECODE_TABLE contains the wrong value 32.
  Fixes CODEC-200.
    + Base64.encodeBase64String could better use newStringUsAscii
  (ditto encodeBase64URLSafeString). Fixes CODEC-145.
    + BaseNCodec: encodeToString and encodeAsString methods are
  identical. Fixes CODEC-144.
    + Bug in HW rule in Soundex. Fixes CODEC-199.
    + Charsets Javadoc breaks build when using Java 8.
  Fixes CODEC-207.
    + Don't deprecate Charsets Charset constants in favor of
  Java 7's java.nio.charset.StandardCharsets. Fixes CODEC-219.
    + Fix minor resource leaks. Fixes CODEC-225.
    + Javadoc for SHA-224 DigestUtils methods should mention
  Java 1.8.0 restriction instead of 1.4.0. Fixes CODEC-209.
    + StringUtils.equals(CharSequence cs1, CharSequence cs2) can
  fail with String Index OBE. Fixes CODEC-231.
    + StringUtils.newStringxxx(null) should return null, not NPE.
  Fixes CODEC-229.
    + URLCodec is neither immutable nor threadsafe.
  Fixes CODEC-232.
    + URLCodec.WWW_FORM_URL should be private. Fixes CODEC-230.
- Generate the Ant build file and use it
- Add an option --with tests and don't run tests by default. This
  diminshes the number of dependencies and speeds-up the build.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591099200">- Update to version 1.14
  * Release 1.14 - 2019-12-30
  - Fix: Hex: Allow encoding read-only ByteBuffer.
  - Fix: Hex: Only use an available ByteBuffer backing array if
    the length equals the remaining byte count.
  - Update: MurmurHash3: Deprecate hash64 methods and hash methods
    accepting a String that use the default encoding.
  - Fix: BaseNCodec to expand buffer using overflow conscious code.
  - Fix: Base32/64: Fixed decoding check that all the final trailing
    bits to discard are zero.
  - Add: Add MurmurHash3.hash128x64 methods to fix sign extension error
    during seeding in hash128 methods.
  - Add: Add MurmurHash3.hash32x86 methods and IncrementalHash32x86 to
    fix sign extension error in hash32 methods.
  - Fix: Allow repeat calls to MurmurHash3.IncrementalHash32.end() to
    generate the same value.
  - Add: Add RandomAccessFile digest methods #31.
  - Add: Add Path APIs to org.apache.commons.codec.digest.DigestUtils
    similar to File APIs.
  - Add: Add SHA-512/224 and SHA-512/256 to DigestUtils for Java 9 and up.
  - Add: Add missing note in javadoc when sign extension error is present #34.
  - Fix: Reliance on default encoding in MurmurHash2 and MurmurHash3.
  - Update: Don't reload standard Charsets in org.apache.commons.codec.Charsets.
  - Update: Deprecate Charset constants in org.apache.commons.codec.Charsets
    in favor of java.nio.charset.StandardCharsets.
  * Release 1.13 - 2019-07-20
  - Fix: ColognePhonetic handles x incorrectly.
  - Fix: ColognePhonetic does not treat the letter H correctly.
  - Fix: Reject any decode request for a value that is impossible to
    encode to for Base32/Base64 rather than blindly decoding.
  - Add: MurmurHash2 for 32-bit or 64-bit value.
  - Add: MurmurHash3 for 32-bit or 128-bit value.
  - Update: Broken direct java.nio.ByteBuffer support in
    org.apache.commons.codec.binary.Hex.
  * Release 1.12 - 2019-02-04
  - Fix: B64 salt generator: Random -&gt; ThreadLocalRandom.
  - Fix: Wrong value calculated by Cologne Phonetic if a special character
    is placed between equal letters.
  - Update: Update from Java 6 to Java 7.
  - Add: Add Percent-Encoding Codec (described in RFC3986 and RFC7578).
  - Fix: ColognePhoneticTest.testIsEncodeEquals missing assertions.
  - Add: Add SHA-3 methods in DigestUtils.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Update to 1.15
  * Fix: MurmurHash3: Ensure hash128 maintains the sign extension bug.
  * Update: Base32/Base64/BCodec: Added strict decoding property to
    control handling of trailing bits. Default lenient mode discards
    them without error. Strict mode raise an exception.
  * Update: Base32/Base64 Input/OutputStream: Added strict decoding
    property to control handling of trailing bits. Default lenient
    mode discards them without error. Strict mode raise an exception.
  * Update: Update tests from JUnit 4.12 to 4.13.
  * Add: Base16Codec and Base16Input/OutputStream.
  * Add: Hex encode/decode with existing arrays.
  * Update: Update actions/checkout from v1 to v2.3.2.
  * Update: Update actions/setup-java from v1.4.0 to v1.4.1.
- Remove timeout.patch</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not alias the artifact to itself</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 1.16.0:
  * Minor improvements #67. Fixes CODEC-295.
  * Remove duplicated words from Javadocs.
  * Simplify assertion #84. Fixes CODEC-301.
  * Simplify assertion #84. Fixes CODEC-300.
  * Use Standard Charset object #82. Fixes CODEC-298.
  * Use String.contains() functions #125.
  * Avoid use toString() or substring() in favor of a simplified expression #126.
  * Fix byte-skipping in Base16 decoding #135. Fixes CODEC-305.
  * Fix several typos, improve writing in some javadocs #139.
  * BaseNCodecOutputStream.eof() should not throw IOException.
  * Javadoc improvements and cleanups.
  * Deprecate BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).
  * Add support for Blake3 family of hashes. Fixes CODEC-296.
  * Add github/codeql-action.
  * Bump actions/cache from v2 to v3.0.10 #75, #99, #119, #138, #149, #152.
  * Bump actions/setup-java from v1.4.1 to 3.5.1 #60, #62, #121.
  * Bump actions/checkout from 2.3.2 to 3.1.0 #65, #98, #114, #153.
  * Bump commons-parent from 52 to 58, #147, #165, #170.
  * Bump junit from 4.13.1 to 5.9.1 #76, #39, #140, #148. Fixes CODEC-285.
  * Bump Java 7 to 8.
  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.
  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).
  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7 #122, #134.
  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.
  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.
  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0, #133, #142, #145.
  * Bump pmd from 6.47.0 to 6.52.0.
  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0 #143.
  * Bump checkstyle from 8.45.1 to 9.3 #97, #100, #101, #103.
  * Bump taglist-maven-plugin from 2.4 to 3.0.0 #102.
  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Update to 1.16.1:
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs:
    + CODEC-295: Test clean ups
    + CODEC-295: Correct error in Base64 Javadoc
    + CODEC-295: Add minimum Java version in changes.xml
    + CODEC-310: Documentation update for the
    org.apache.commons.codec.digest.* package
    + Precompile regular expression in UnixCrypt.crypt(byte[],
    String)
    + CODEC-315: Fix possible IndexOutOfBoundException in
    PhoneticEngine.encode method
    + CODEC-313: Fix possible ArrayIndexOutOfBoundsException in
    QuotedPrintableCodec.encodeQuotedPrintable() method
    + CODEC-312: Fix possible StringIndexOutOfBoundException in
    MatchRatingApproachEncoder.encode() method
    + CODEC-311: Fix possible ArrayIndexOutOfBoundException in
    RefinedSoundex.getMappingCode()
    + CODEC-314: Fix possible IndexOutOfBoundsException in
    PercentCodec.insertAlwaysEncodeChars() method
    + Deprecate UnixCrypt 0-argument constructor
    + Deprecate Md5Crypt 0-argument constructor
    + Deprecate Crypt 0-argument constructor
    + Deprecate StringUtils 0-argument constructor
    + Deprecate Resources 0-argument constructor
    + Deprecate Charsets 0-argument constructor
    + Deprecate CharEncoding 0-argument constructor</changelog>
  <changelog author="gus.kenion@suse.com" date="1714651200">- Update to 1.17.0
  * New features:
    + Add override
    org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size().
    + Add support for Base64 custom alphabets #266.
    + Add Base64.Builder (allows custom alphabets).
    + Add Base32.Builder (allows custom alphabets).
    + Add Base64 support for a custom padding byte (like Base32).
  * Fixes:
    + Wrong output of DoubleMetaphone in 1.16.1. Fixes CODEC-320.
    + Optimize memory allocation in PhoneticEngine.
    + BCodec and QCodec encode() methods throw
    UnsupportedCharsetException instead of EncoderException.
    + Set Javadoc link to latest Java API LTS version.
    + Base32 constructor fails-fast with a NullPointerException if
    the custom alphabet array is null.
    + Base32 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of a custom
    alphabet array.
  * Updates:
    + Bump org.apache.commons:commons-parent from 66 to 69 #250,
    [#261].
    + Bump commons-io:commons-io from 2.15.1 to 2.16.1 #258, #265.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.17.1
  * Bug fixes:
    + Md5Crypt now throws IllegalArgumentException on an invalid
    prefix.
  * Dependency Updates:
    + Bump org.apache.commons:commons-parent from 69 to 71 #286.
    + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23
    to 1.24 #293.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #292.</changelog>
</package>
<package pkgid="602544a89d255ce613ff5498b633d132a8172d53a46247f6cb53f7816a2f08b868fbc57563addd2dc6babecad462db54af91fe714937d61904d5e3c02bbf907d" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.18.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1550232000">- Update to version 1.11
  * New features:
    + Add Automatic-Module-Name manifest entry for Java 9.
    Fixes CODEC-242.
    + Add BaseNCodec.encode(byte[], int, int) input with offset and
    length parameters for Base64 and Base32. Fixes CODEC-202.
    + Add convenience API org.apache.commons.codec.binary.Hex.
    .encodeHexString(byte[]|ByteBuffer, boolean).
    Fixes CODEC-224.
    + Add convenience method decodeHex(String). Fixes CODEC-203.
    + Add DigestUtils.getDigest(String, MessageDigest).
    Fixes CODEC-210.
    + Add faster CRC32 implementation. Fixes CODEC-205.
    + Add HmacAlgorithms.HMAC_SHA_224 (Java 8 only).
    Fixes CODEC-217.
    + Add java.io.File APIs to MessageDigestAlgorithm.
    Fixes CODEC-206.
    + Add support for CRC32-C. Fixes CODEC-171.
    + Add support for XXHash32. Fixes CODEC-241.
    + BaseNCodecOutputStream only supports writing EOF on close().
    Fixes CODEC-183.
    + Create a minimal Digest command line utility:
    org.apache.commons.codec.digest.Digest. Fixes CODEC-212.
    + Fluent interface for DigestUtils. Fixes CODEC-220.
    + Fluent interface for HmacUtils. Fixes CODEC-222.
    + Make some DigestUtils APIs public. Fixes CODEC-208.
    + Support java.nio.ByteBuffer in DigestUtils. Fixes CODEC-193.
    + Support java.nio.ByteBuffer in
    org.apache.commons.codec.binary.Hex. Fixes CODEC-194.
    + Support JEP 287: SHA-3 Hash Algorithms. Fixes CODEC-213.
    + Support SHA-224 in DigestUtils on Java 8. Fixes CODEC-195.
  * Removed feature:
    + Drop obsolete Ant build. Fixes CODEC-223.
  * Changes:
    + Base32.decode should support lowercase letters.
  Fixes CODEC-234.
    + HmacUtils.updateHmac calls reset() unnecessarily.
  Fixes CODEC-221.
    + Soundex should support more algorithm variants.
  Fixes CODEC-233.
  * Fixed bugs:
    + Base32.HEX_DECODE_TABLE contains the wrong value 32.
  Fixes CODEC-200.
    + Base64.encodeBase64String could better use newStringUsAscii
  (ditto encodeBase64URLSafeString). Fixes CODEC-145.
    + BaseNCodec: encodeToString and encodeAsString methods are
  identical. Fixes CODEC-144.
    + Bug in HW rule in Soundex. Fixes CODEC-199.
    + Charsets Javadoc breaks build when using Java 8.
  Fixes CODEC-207.
    + Don't deprecate Charsets Charset constants in favor of
  Java 7's java.nio.charset.StandardCharsets. Fixes CODEC-219.
    + Fix minor resource leaks. Fixes CODEC-225.
    + Javadoc for SHA-224 DigestUtils methods should mention
  Java 1.8.0 restriction instead of 1.4.0. Fixes CODEC-209.
    + StringUtils.equals(CharSequence cs1, CharSequence cs2) can
  fail with String Index OBE. Fixes CODEC-231.
    + StringUtils.newStringxxx(null) should return null, not NPE.
  Fixes CODEC-229.
    + URLCodec is neither immutable nor threadsafe.
  Fixes CODEC-232.
    + URLCodec.WWW_FORM_URL should be private. Fixes CODEC-230.
- Generate the Ant build file and use it
- Add an option --with tests and don't run tests by default. This
  diminshes the number of dependencies and speeds-up the build.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591099200">- Update to version 1.14
  * Release 1.14 - 2019-12-30
  - Fix: Hex: Allow encoding read-only ByteBuffer.
  - Fix: Hex: Only use an available ByteBuffer backing array if
    the length equals the remaining byte count.
  - Update: MurmurHash3: Deprecate hash64 methods and hash methods
    accepting a String that use the default encoding.
  - Fix: BaseNCodec to expand buffer using overflow conscious code.
  - Fix: Base32/64: Fixed decoding check that all the final trailing
    bits to discard are zero.
  - Add: Add MurmurHash3.hash128x64 methods to fix sign extension error
    during seeding in hash128 methods.
  - Add: Add MurmurHash3.hash32x86 methods and IncrementalHash32x86 to
    fix sign extension error in hash32 methods.
  - Fix: Allow repeat calls to MurmurHash3.IncrementalHash32.end() to
    generate the same value.
  - Add: Add RandomAccessFile digest methods #31.
  - Add: Add Path APIs to org.apache.commons.codec.digest.DigestUtils
    similar to File APIs.
  - Add: Add SHA-512/224 and SHA-512/256 to DigestUtils for Java 9 and up.
  - Add: Add missing note in javadoc when sign extension error is present #34.
  - Fix: Reliance on default encoding in MurmurHash2 and MurmurHash3.
  - Update: Don't reload standard Charsets in org.apache.commons.codec.Charsets.
  - Update: Deprecate Charset constants in org.apache.commons.codec.Charsets
    in favor of java.nio.charset.StandardCharsets.
  * Release 1.13 - 2019-07-20
  - Fix: ColognePhonetic handles x incorrectly.
  - Fix: ColognePhonetic does not treat the letter H correctly.
  - Fix: Reject any decode request for a value that is impossible to
    encode to for Base32/Base64 rather than blindly decoding.
  - Add: MurmurHash2 for 32-bit or 64-bit value.
  - Add: MurmurHash3 for 32-bit or 128-bit value.
  - Update: Broken direct java.nio.ByteBuffer support in
    org.apache.commons.codec.binary.Hex.
  * Release 1.12 - 2019-02-04
  - Fix: B64 salt generator: Random -&gt; ThreadLocalRandom.
  - Fix: Wrong value calculated by Cologne Phonetic if a special character
    is placed between equal letters.
  - Update: Update from Java 6 to Java 7.
  - Add: Add Percent-Encoding Codec (described in RFC3986 and RFC7578).
  - Fix: ColognePhoneticTest.testIsEncodeEquals missing assertions.
  - Add: Add SHA-3 methods in DigestUtils.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Update to 1.15
  * Fix: MurmurHash3: Ensure hash128 maintains the sign extension bug.
  * Update: Base32/Base64/BCodec: Added strict decoding property to
    control handling of trailing bits. Default lenient mode discards
    them without error. Strict mode raise an exception.
  * Update: Base32/Base64 Input/OutputStream: Added strict decoding
    property to control handling of trailing bits. Default lenient
    mode discards them without error. Strict mode raise an exception.
  * Update: Update tests from JUnit 4.12 to 4.13.
  * Add: Base16Codec and Base16Input/OutputStream.
  * Add: Hex encode/decode with existing arrays.
  * Update: Update actions/checkout from v1 to v2.3.2.
  * Update: Update actions/setup-java from v1.4.0 to v1.4.1.
- Remove timeout.patch</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not alias the artifact to itself</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 1.16.0:
  * Minor improvements #67. Fixes CODEC-295.
  * Remove duplicated words from Javadocs.
  * Simplify assertion #84. Fixes CODEC-301.
  * Simplify assertion #84. Fixes CODEC-300.
  * Use Standard Charset object #82. Fixes CODEC-298.
  * Use String.contains() functions #125.
  * Avoid use toString() or substring() in favor of a simplified expression #126.
  * Fix byte-skipping in Base16 decoding #135. Fixes CODEC-305.
  * Fix several typos, improve writing in some javadocs #139.
  * BaseNCodecOutputStream.eof() should not throw IOException.
  * Javadoc improvements and cleanups.
  * Deprecate BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).
  * Add support for Blake3 family of hashes. Fixes CODEC-296.
  * Add github/codeql-action.
  * Bump actions/cache from v2 to v3.0.10 #75, #99, #119, #138, #149, #152.
  * Bump actions/setup-java from v1.4.1 to 3.5.1 #60, #62, #121.
  * Bump actions/checkout from 2.3.2 to 3.1.0 #65, #98, #114, #153.
  * Bump commons-parent from 52 to 58, #147, #165, #170.
  * Bump junit from 4.13.1 to 5.9.1 #76, #39, #140, #148. Fixes CODEC-285.
  * Bump Java 7 to 8.
  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.
  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).
  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7 #122, #134.
  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.
  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.
  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0, #133, #142, #145.
  * Bump pmd from 6.47.0 to 6.52.0.
  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0 #143.
  * Bump checkstyle from 8.45.1 to 9.3 #97, #100, #101, #103.
  * Bump taglist-maven-plugin from 2.4 to 3.0.0 #102.
  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Update to 1.16.1:
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs:
    + CODEC-295: Test clean ups
    + CODEC-295: Correct error in Base64 Javadoc
    + CODEC-295: Add minimum Java version in changes.xml
    + CODEC-310: Documentation update for the
    org.apache.commons.codec.digest.* package
    + Precompile regular expression in UnixCrypt.crypt(byte[],
    String)
    + CODEC-315: Fix possible IndexOutOfBoundException in
    PhoneticEngine.encode method
    + CODEC-313: Fix possible ArrayIndexOutOfBoundsException in
    QuotedPrintableCodec.encodeQuotedPrintable() method
    + CODEC-312: Fix possible StringIndexOutOfBoundException in
    MatchRatingApproachEncoder.encode() method
    + CODEC-311: Fix possible ArrayIndexOutOfBoundException in
    RefinedSoundex.getMappingCode()
    + CODEC-314: Fix possible IndexOutOfBoundsException in
    PercentCodec.insertAlwaysEncodeChars() method
    + Deprecate UnixCrypt 0-argument constructor
    + Deprecate Md5Crypt 0-argument constructor
    + Deprecate Crypt 0-argument constructor
    + Deprecate StringUtils 0-argument constructor
    + Deprecate Resources 0-argument constructor
    + Deprecate Charsets 0-argument constructor
    + Deprecate CharEncoding 0-argument constructor</changelog>
  <changelog author="gus.kenion@suse.com" date="1714651200">- Update to 1.17.0
  * New features:
    + Add override
    org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size().
    + Add support for Base64 custom alphabets #266.
    + Add Base64.Builder (allows custom alphabets).
    + Add Base32.Builder (allows custom alphabets).
    + Add Base64 support for a custom padding byte (like Base32).
  * Fixes:
    + Wrong output of DoubleMetaphone in 1.16.1. Fixes CODEC-320.
    + Optimize memory allocation in PhoneticEngine.
    + BCodec and QCodec encode() methods throw
    UnsupportedCharsetException instead of EncoderException.
    + Set Javadoc link to latest Java API LTS version.
    + Base32 constructor fails-fast with a NullPointerException if
    the custom alphabet array is null.
    + Base32 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of a custom
    alphabet array.
  * Updates:
    + Bump org.apache.commons:commons-parent from 66 to 69 #250,
    [#261].
    + Bump commons-io:commons-io from 2.15.1 to 2.16.1 #258, #265.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.17.1
  * Bug fixes:
    + Md5Crypt now throws IllegalArgumentException on an invalid
    prefix.
  * Dependency Updates:
    + Bump org.apache.commons:commons-parent from 69 to 71 #286.
    + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23
    to 1.24 #293.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #292.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.18.0
  * New features
    + Add Base32.Builder.setHexDecodeTable(boolean).
    + Add Base32.Builder.setHexEncodeTable(boolean).
  * Changes
    + Bump org.apache.commons:commons-parent from 78 to 79.
- Includes changes from 1.17.2
  * Fixed Bugs
    + Rewrite DaitchMokotoffSoundex.soundex(String) using
    String.join().
    + CODEC-324:  Use Resource.class to load resources, rather than
    its class loader #353.
    + Deprecate CharSequenceUtils.CharSequenceUtils().
    + Deprecate Sha2Crypt.Sha2Crypt().
  * Changes
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#296], #305, #313.
    + Bump org.apache.commons:commons-parent from 71 to 78 #310,
    [#312], #319, #323, #326, #333.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.18.0 #318,
    [#341].
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to
    3.2.1 #332.</changelog>
</package>
<package pkgid="c412dced8f810acc8733e6a651c2f83e3b3c38816be1d7c648ef5151ec5f0b44142d1f2a065c3e8648e31bf6bf4c60e837170d6bc63d61cbb0d8280334bc3529" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 1.16.0:
  * Minor improvements #67. Fixes CODEC-295.
  * Remove duplicated words from Javadocs.
  * Simplify assertion #84. Fixes CODEC-301.
  * Simplify assertion #84. Fixes CODEC-300.
  * Use Standard Charset object #82. Fixes CODEC-298.
  * Use String.contains() functions #125.
  * Avoid use toString() or substring() in favor of a simplified expression #126.
  * Fix byte-skipping in Base16 decoding #135. Fixes CODEC-305.
  * Fix several typos, improve writing in some javadocs #139.
  * BaseNCodecOutputStream.eof() should not throw IOException.
  * Javadoc improvements and cleanups.
  * Deprecate BaseNCodec.isWhiteSpace(byte) and use Character.isWhitespace(int).
  * Add support for Blake3 family of hashes. Fixes CODEC-296.
  * Add github/codeql-action.
  * Bump actions/cache from v2 to v3.0.10 #75, #99, #119, #138, #149, #152.
  * Bump actions/setup-java from v1.4.1 to 3.5.1 #60, #62, #121.
  * Bump actions/checkout from 2.3.2 to 3.1.0 #65, #98, #114, #153.
  * Bump commons-parent from 52 to 58, #147, #165, #170.
  * Bump junit from 4.13.1 to 5.9.1 #76, #39, #140, #148. Fixes CODEC-285.
  * Bump Java 7 to 8.
  * Bump japicmp-maven-plugin from 0.14.3 to 0.17.1.
  * Bump jacoco-maven-plugin from 0.8.5 to 0.8.8 (Fixes Java 15 builds).
  * Bump maven-surefire-plugin from 2.22.2 to 3.0.0-M7 #122, #134.
  * Bump maven-javadoc-plugin from 3.2.0 to 3.4.1.
  * Bump animal-sniffer-maven-plugin from 1.19 to 1.22.
  * Bump maven-pmd-plugin from 3.13.0 to 3.19.0, #133, #142, #145.
  * Bump pmd from 6.47.0 to 6.52.0.
  * Bump maven-checkstyle-plugin from 2.17 to 3.2.0 #143.
  * Bump checkstyle from 8.45.1 to 9.3 #97, #100, #101, #103.
  * Bump taglist-maven-plugin from 2.4 to 3.0.0 #102.
  * Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Update to 1.16.1:
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs:
    + CODEC-295: Test clean ups
    + CODEC-295: Correct error in Base64 Javadoc
    + CODEC-295: Add minimum Java version in changes.xml
    + CODEC-310: Documentation update for the
    org.apache.commons.codec.digest.* package
    + Precompile regular expression in UnixCrypt.crypt(byte[],
    String)
    + CODEC-315: Fix possible IndexOutOfBoundException in
    PhoneticEngine.encode method
    + CODEC-313: Fix possible ArrayIndexOutOfBoundsException in
    QuotedPrintableCodec.encodeQuotedPrintable() method
    + CODEC-312: Fix possible StringIndexOutOfBoundException in
    MatchRatingApproachEncoder.encode() method
    + CODEC-311: Fix possible ArrayIndexOutOfBoundException in
    RefinedSoundex.getMappingCode()
    + CODEC-314: Fix possible IndexOutOfBoundsException in
    PercentCodec.insertAlwaysEncodeChars() method
    + Deprecate UnixCrypt 0-argument constructor
    + Deprecate Md5Crypt 0-argument constructor
    + Deprecate Crypt 0-argument constructor
    + Deprecate StringUtils 0-argument constructor
    + Deprecate Resources 0-argument constructor
    + Deprecate Charsets 0-argument constructor
    + Deprecate CharEncoding 0-argument constructor</changelog>
  <changelog author="gus.kenion@suse.com" date="1714651200">- Update to 1.17.0
  * New features:
    + Add override
    org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size().
    + Add support for Base64 custom alphabets #266.
    + Add Base64.Builder (allows custom alphabets).
    + Add Base32.Builder (allows custom alphabets).
    + Add Base64 support for a custom padding byte (like Base32).
  * Fixes:
    + Wrong output of DoubleMetaphone in 1.16.1. Fixes CODEC-320.
    + Optimize memory allocation in PhoneticEngine.
    + BCodec and QCodec encode() methods throw
    UnsupportedCharsetException instead of EncoderException.
    + Set Javadoc link to latest Java API LTS version.
    + Base32 constructor fails-fast with a NullPointerException if
    the custom alphabet array is null.
    + Base32 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of the line
    separator array.
    + Base64 constructor makes a defensive copy of a custom
    alphabet array.
  * Updates:
    + Bump org.apache.commons:commons-parent from 66 to 69 #250,
    [#261].
    + Bump commons-io:commons-io from 2.15.1 to 2.16.1 #258, #265.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Update to 1.17.1
  * Bug fixes:
    + Md5Crypt now throws IllegalArgumentException on an invalid
    prefix.
  * Dependency Updates:
    + Bump org.apache.commons:commons-parent from 69 to 71 #286.
    + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23
    to 1.24 #293.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #292.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743163200">- Update to 1.18.0
  * New features
    + Add Base32.Builder.setHexDecodeTable(boolean).
    + Add Base32.Builder.setHexEncodeTable(boolean).
  * Changes
    + Bump org.apache.commons:commons-parent from 78 to 79.
- Includes changes from 1.17.2
  * Fixed Bugs
    + Rewrite DaitchMokotoffSoundex.soundex(String) using
    String.join().
    + CODEC-324:  Use Resource.class to load resources, rather than
    its class loader #353.
    + Deprecate CharSequenceUtils.CharSequenceUtils().
    + Deprecate Sha2Crypt.Sha2Crypt().
  * Changes
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#296], #305, #313.
    + Bump org.apache.commons:commons-parent from 71 to 78 #310,
    [#312], #319, #323, #326, #333.
    + [test] Bump commons-io:commons-io from 2.16.1 to 2.18.0 #318,
    [#341].
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to
    3.2.1 #332.</changelog>
  <changelog author="fstrba@suse.com" date="1770897600">- Update to 1.19.0
  * New features
    + Add HmacUtils.hmac(Path)
    + Add HmacUtils.hmacHex(Path)
    + Add PMD check to the default Maven goal
    + Add SpotBugs check to the default Maven goal
  * Fixed Bugs
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Refactor DigestUtils.updateDigest(MessageDigest, File) to use
    NIO
    + CODEC-328:  Clarify Javadoc for
    org.apache.commons.codec.digest.UnixCrypt.crypt(byte[],String)
    + Precompile regular expressions in DaitchMokotoffSoundex.Rule
    + Precompile regular expressions in
    DaitchMokotoffSoundex.parseRules(Scanner, String, Map, Map)
    + Precompile regular expressions in
    Lang.loadFromResource(String, Languages)
    + Precompile regular expressions in
    PhoneticEngine.encode(String, LanguageSet)
    + Precompile regular expressions in
    org.apache.commons.codec.language.bm.Rule.parse*(*)
    + Remove redundant checks for whitespace in
    DaitchMokotoffSoundex.soundex(String, boolean)
    + Javadoc typo in Base16.java #380
    + Deprecate unused constant org.apache.commons.codec.language.bm
    .Rule.ALL
    + CODEC-331: org.apache.commons.codec.language.bm.Rule
    .parsePhonemeExpr(String) adds duplicate empty phoneme when
    input ends with |
    + CODEC-331: org.apache.commons.codec.language
    .DaitchMokotoffSoundex.cleanup(String) does not remove special
    characters like punctuation
    + Fix PMD multiple UnnecessaryFullyQualifiedName in
    org.apache.commons.codec.binary.StringUtils
    + Fix PMD UnusedFormalParameter in private constructor in
    org.apache.commons.codec.binary.Base16
    + Fix PMD multiple UnnecessaryFullyQualifiedName in
    org.apache.commons.codec.digest.Blake3
    + Fix PMD UnnecessaryFullyQualifiedName in
    org.apache.commons.codec.digest.Md5Crypt
    + Fix PMD EmptyControlStatement in
    org.apache.commons.codec.language.Metaphone
    + Fix SpotBugs [ERROR] Medium: org.apache.commons.codec.binary
    .BaseNCodec$AbstractBuilder.setEncodeTable(byte[]) may expose
    internal representation by storing an externally mutable
    object into BaseNCodec$AbstractBuilder.encodeTable [org.apache
    .commons.codec.binary.BaseNCodec$AbstractBuilder] At
    BaseNCodec.java:[line 131] EI_EXPOSE_REP2
    + The method org.apache.commons.codec.binary.BaseNCodec
    .AbstractBuilder.setLineSeparator(byte...) now makes a
    defensive copy
    + Avoid unnecessary String conversion in
    org.apache.commons.codec.language.bm.PhoneticEngine
    .applyFinalRules(PhonemeBuilder, Map)
    + Fix SpotBugs [ERROR] High: Potentially dangerous use of
    non-short-circuit logic in org.apache.commons.codec.language
    .DaitchMokotoffSoundex.cleanup(String)
    [org.apache.commons.codec.language.DaitchMokotoffSoundex] At
    DaitchMokotoffSoundex.java:[line 350]
    NS_DANGEROUS_NON_SHORT_CIRCUIT
  * Changes
    + Bump org.apache.commons:commons-parent from 79 to 85 #375
    + [test] Bump commons-io:commons-io from 2.18.0 to 2.20.0
    + [test] Bump org.apache.commons:commons-lang3 from 3.17.0 to
    3.18.0 #386</changelog>
  <changelog author="fstrba@suse.com" date="1770897601">- Update to 1.20.0
  * New features
    + Add org.apache.commons.codec.digest.Crc16
    + Add builders to org.apache.commons.codec.digest streams and
    deprecate some old constructors
    + Add builder to Base16 streams and deprecate some old
    constructors
    + Add support for SHAKE128-256 and SHAKE256-512 to 'DigestUtils'
    and 'MessageDigestAlgorithms' on Java 25 and up
    + Add BaseNCodec.AbstractBuilder.setDecodeTable(byte[]) and
    refactor subclasses
  * Changes
    + Deprecate all but one Base32 constructor in favor of the
    builder added in version 1.17.0
    + Deprecate all but one Base64 constructor in favor of the
    builder added in version 1.17.0
    + BaseNCodecInputStream subclasses are now type-safe to match
    its matching BaseNCodec
    + BaseNCodecOutputStream subclasses are now type-safe to match
    its matching BaseNCodec
    + Bump org.apache.commons:commons-parent from 85 to 91
    + [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to
    3.19.0</changelog>
  <changelog author="fstrba@suse.com" date="1770897602">- Update to 1.21.0
  * New features
    + CODEC-333: Add distinct Base64 decoding for standard and
    URL-safe formats
  * Fixed Bugs
    + Fix oak leaf icon references in overview.html when running
    'mvn clean javadoc:javadoc'
    + Fix Apache RAT plugin console warnings
    + Fix malformed Javadoc comments
  * Changes
    + Bump org.apache.commons:commons-parent from 91 to 96 #415,
    [#418]
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
    + Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0</changelog>
  <changelog author="fstrba@suse.com" date="1774872000">- Clean up the spec file
- The aspell-mail.txt not needed anymore since the mentioned file
  has now the right Apache-2.0 header</changelog>
  <changelog author="fstrba@suse.com" date="1778068800">- Update to 1.22.0
  * New features
    + CODEC-326: Add Base58 support
    + Add BaseNCodecInputStream.AbstracBuilder.setByteArray(byte[])
    + CODEC-335: Add GitIdentifiers to compute Git blob and tree
    object identifiers
  * Fixed Bugs
    + CODEC-249: Fix Incorrect transform of CH digraph according
    Metaphone basic rules #423
    + CODEC-317: ColognePhonetic can create duplicate consecutive
    codes in some cases
    + Add boundary tests for BinaryCodec.fromAscii partial-bit
    inputs #425
    + CODEC-336: Base64.Builder.setUrlSafe(boolean) Javadoc
    incorrectly states null is accepted for primitive boolean
    parameter
  * Changes
    + Bump org.apache.commons:commons-parent from 96 to 98</changelog>
</package>
<package pkgid="9c481f078ec087220c397b3ba01136576189642013c53208b3376669ca6fe5061d6a0e5d99dbbe79d94ebdbad83b1dd6eead5966f3d6c907aa38ab5d68da8aec" name="apache-commons-collections" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1450353600">- Version update to 3.2.2:
  * Various bugfixes
  * Unix formating in the archive
  * Fixes bnc#954102
- Refresh patches for the dos2unix conversion:
  * commons-collections-3.2-build_xml.patch
  * jakarta-commons-collections-javadoc-nonet.patch
- Add patch to add missing MANIFEST.MF file:
  * commons-collections-missing-MF.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying java source and target 1.6
- Added patch:
  * commons-collections-3.2.2-tf.javadoc.patch
  - Fix unresolved symbols when building tf.javadoc</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * commons-collections-jdk11.patch
    + resolve ambiguity with toArray(null)
  + fixes tests with jdk11</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not use a dummy pom that only declares dependencies for the
  testframework artifact
- Clean up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Modified patch:
  * commons-collections-3.2-build_xml.patch
    + In ant Javac task, use "release" with compilers that support
    it. Use source/target for others. Fixes some return value
    incompatibilities with jdk 21</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ed78fd2db0362a46b3af947fa0668028cc132c209add65553daff905ba2d49284d5e055383b268290efb8d63ce07c7e48d4949a5a9ee1dcc5b05ad522c96f822" name="apache-commons-collections-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1450353600">- Version update to 3.2.2:
  * Various bugfixes
  * Unix formating in the archive
  * Fixes bnc#954102
- Refresh patches for the dos2unix conversion:
  * commons-collections-3.2-build_xml.patch
  * jakarta-commons-collections-javadoc-nonet.patch
- Add patch to add missing MANIFEST.MF file:
  * commons-collections-missing-MF.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying java source and target 1.6
- Added patch:
  * commons-collections-3.2.2-tf.javadoc.patch
  - Fix unresolved symbols when building tf.javadoc</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * commons-collections-jdk11.patch
    + resolve ambiguity with toArray(null)
  + fixes tests with jdk11</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not use a dummy pom that only declares dependencies for the
  testframework artifact
- Clean up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Modified patch:
  * commons-collections-3.2-build_xml.patch
    + In ant Javac task, use "release" with compilers that support
    it. Use source/target for others. Fixes some return value
    incompatibilities with jdk 21</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="145594f7a1adb2395c472aa28c6933b5e81cd69926427b47ee84edef612442f488a6275bb5cc5b789b794bbe5623414795d94c62a3df16de8f7fe592aa8d664d" name="apache-commons-collections-testframework" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1450353600">- Version update to 3.2.2:
  * Various bugfixes
  * Unix formating in the archive
  * Fixes bnc#954102
- Refresh patches for the dos2unix conversion:
  * commons-collections-3.2-build_xml.patch
  * jakarta-commons-collections-javadoc-nonet.patch
- Add patch to add missing MANIFEST.MF file:
  * commons-collections-missing-MF.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying java source and target 1.6
- Added patch:
  * commons-collections-3.2.2-tf.javadoc.patch
  - Fix unresolved symbols when building tf.javadoc</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1531224000">- Added patch:
  * commons-collections-jdk11.patch
    + resolve ambiguity with toArray(null)
  + fixes tests with jdk11</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Do not use a dummy pom that only declares dependencies for the
  testframework artifact
- Clean up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Modified patch:
  * commons-collections-3.2-build_xml.patch
    + In ant Javac task, use "release" with compilers that support
    it. Use source/target for others. Fixes some return value
    incompatibilities with jdk 21</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="94e0e500329f5172c3283f39f61eab4bc0755e65d6d103af7afc124b29e4840fd6a43a97a72d1b96d03491f47e732e4f42ee4f9855ef92ec749111bad0d6f995" name="apache-commons-collections4" arch="noarch">
  <version epoch="0" ver="4.4" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Initial packaging of apache-commons-collections4 4.1
- Added patches:
  * commons-collections4-4.1-bundle.patch
    + Add to the manifest OSGi bundle information
  * commons-collections4-4.1-javadoc.patch
    + Do not try to download web-based resources during the build.
  * commons-collections4-4.1-jdk11.patch
    + Resolve type ambiguity in a toArray(null) call</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Update to upstream version 4.4
  * Changes
    + Updates the platform requirement from Java 6 to 8
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility
    + Added a few new APIs.
  * Builds with java 21 out of the box
  * Generated ant build system with maven-ant-plugin in order to
    build with ant like before.
- Removed patches:
  * commons-collections4-4.1-bundle.patch
  * commons-collections4-4.1-javadoc.patch
  * commons-collections4-4.1-jdk11.patch
    + All changes factored into the generated build.xml</changelog>
</package>
<package pkgid="0f28eec9377d4593cfba9ddd0e3b8cdfbc3dc03a7897a11bc06eaa87e7752d13f31744952a983cd7e815588c8e8d051a1f7b4ee11590d0e049dddad981e41b34" name="apache-commons-collections4" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Initial packaging of apache-commons-collections4 4.1
- Added patches:
  * commons-collections4-4.1-bundle.patch
    + Add to the manifest OSGi bundle information
  * commons-collections4-4.1-javadoc.patch
    + Do not try to download web-based resources during the build.
  * commons-collections4-4.1-jdk11.patch
    + Resolve type ambiguity in a toArray(null) call</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Update to upstream version 4.4
  * Changes
    + Updates the platform requirement from Java 6 to 8
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility
    + Added a few new APIs.
  * Builds with java 21 out of the box
  * Generated ant build system with maven-ant-plugin in order to
    build with ant like before.
- Removed patches:
  * commons-collections4-4.1-bundle.patch
  * commons-collections4-4.1-javadoc.patch
  * commons-collections4-4.1-jdk11.patch
    + All changes factored into the generated build.xml</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Upgrade to upstream version 4.5.0
  * New features
    + Add IteratorUtils.toSet(Iterator)
    + Add IteratorUtils.toSet(Iterator, int)
    + Add EnumerationUtils.toSet(Enumeration)
    + COLLECTIONS-693: Please add OWASP Dependency Check to the
    build
  * Fixed Bugs
    + Refactor AbstractPropertiesFactory.load(File) to use NIO
    + Refactor AbstractPropertiesFactory.load(String) to use NIO
  * Changes
    + Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
    + Bump org.apache.commons:commons-parent from 78 to 81
    + Bump commons.jacoco.version from 0.8.13-SNAPSHOT to 0.13.0
    + [test] Bump commons-io:commons-io from 2.18.0 to 2.19.0</changelog>
</package>
<package pkgid="78a49462913c492ca793359d1850cde53e765774151542ec125d86642ed8f11035e0359555b1ddec702405a8aa86d08af74cf5b2467cc452cb4c0d0e111c3614" name="apache-commons-collections4-javadoc" arch="noarch">
  <version epoch="0" ver="4.4" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Initial packaging of apache-commons-collections4 4.1
- Added patches:
  * commons-collections4-4.1-bundle.patch
    + Add to the manifest OSGi bundle information
  * commons-collections4-4.1-javadoc.patch
    + Do not try to download web-based resources during the build.
  * commons-collections4-4.1-jdk11.patch
    + Resolve type ambiguity in a toArray(null) call</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Update to upstream version 4.4
  * Changes
    + Updates the platform requirement from Java 6 to 8
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility
    + Added a few new APIs.
  * Builds with java 21 out of the box
  * Generated ant build system with maven-ant-plugin in order to
    build with ant like before.
- Removed patches:
  * commons-collections4-4.1-bundle.patch
  * commons-collections4-4.1-javadoc.patch
  * commons-collections4-4.1-jdk11.patch
    + All changes factored into the generated build.xml</changelog>
</package>
<package pkgid="8b18cb926cbe9a1b701aae5c7db172a0bbe274b59f1f424a034641acf1069de2bfa0ad1cbc25714da4d42e96462974d5e8ebd60728f0941c0de4d8005075c41b" name="apache-commons-collections4-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Initial packaging of apache-commons-collections4 4.1
- Added patches:
  * commons-collections4-4.1-bundle.patch
    + Add to the manifest OSGi bundle information
  * commons-collections4-4.1-javadoc.patch
    + Do not try to download web-based resources during the build.
  * commons-collections4-4.1-jdk11.patch
    + Resolve type ambiguity in a toArray(null) call</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Update to upstream version 4.4
  * Changes
    + Updates the platform requirement from Java 6 to 8
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility
    + Added a few new APIs.
  * Builds with java 21 out of the box
  * Generated ant build system with maven-ant-plugin in order to
    build with ant like before.
- Removed patches:
  * commons-collections4-4.1-bundle.patch
  * commons-collections4-4.1-javadoc.patch
  * commons-collections4-4.1-jdk11.patch
    + All changes factored into the generated build.xml</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Upgrade to upstream version 4.5.0
  * New features
    + Add IteratorUtils.toSet(Iterator)
    + Add IteratorUtils.toSet(Iterator, int)
    + Add EnumerationUtils.toSet(Enumeration)
    + COLLECTIONS-693: Please add OWASP Dependency Check to the
    build
  * Fixed Bugs
    + Refactor AbstractPropertiesFactory.load(File) to use NIO
    + Refactor AbstractPropertiesFactory.load(String) to use NIO
  * Changes
    + Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
    + Bump org.apache.commons:commons-parent from 78 to 81
    + Bump commons.jacoco.version from 0.8.13-SNAPSHOT to 0.13.0
    + [test] Bump commons-io:commons-io from 2.18.0 to 2.19.0</changelog>
</package>
<package pkgid="41da9b5c19b5b709af75d819efe2f1835d28f7a70b2d24733192afd1bfa4748a9dc0c0de031192a470a05a5a9b41fe3b1c1efc2af331b8b424cd90a1a062f07a" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.26.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * 0003-Remove-Pack200-compressor.patch
    + Remove support for pack200 which depends on old asm3</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 1.26
  * Fixing several vulnerabilities
    + bsc#1220068, CVE-2024-26308
    + bsc#1220070, CVE-2024-25710
  * New Features
    + Add and use ZipFile.builder(), ZipFile.Builder, and deprecate
    constructors
    + Add and use SevenZFile.builder(), SevenZFile.Builder, and
    deprecate constructors
    + Add and use ArchiveInputStream.getCharset()
    + Add and use ArchiveEntry.resolveIn(Path)
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs
    + COMPRESS-632: Check for invalid PAX values in TarArchiveEntry
    + COMPRESS-632: Fix for zero size headers in ArjInputStream
    + COMPRESS-632: Fixes and tests for ArInputStream
    + COMPRESS-632: Fixes for dump file parsing
    + COMPRESS-632: Improve CPIO exception detection and handling
    + Deprecate SkipShieldingInputStream without replacement (no
    longer used)
    + Reuse commons-codec, don't duplicate class PureJavaCrc32C
    (removed package-private class)
    + Reuse commons-codec, don't duplicate class XXHash32
    (deprecated class)
    + Reuse commons-io, don't duplicate class Charsets (deprecated
    class)
    + Reuse commons-io, don't duplicate class IOUtils (deprecated
    methods)
    + Reuse commons-io, don't duplicate class BoundedInputStream
    (deprecated class)
    + Reuse commons-io, don't duplicate class FileTimes (deprecated
    TimeUtils methods)
    + Reuse Arrays.equals(byte[], byte[]) and deprecate
    ArchiveUtils.isEqual(byte[], byte[])
    + Add a null-check for the class loader of OsgiUtils
    + Add a null-check in Pack200.newInstance(String, String)
    + Deprecate ChecksumCalculatingInputStream in favor of
    java.util.zip.CheckedInputStream
    + Deprecate CRC32VerifyingInputStream
    .CRC32VerifyingInputStream(InputStream, long, int)
    + COMPRESS-655: FramedSnappyCompressorOutputStream produces
    incorrect output when writing a large buffer
    + COMPRESS-657: Fix TAR directory entries being misinterpreted
    as files
    + Deprecate unused method FileNameUtils.getBaseName(String)
    + Deprecate unused method FileNameUtils.getExtension(String)
    + ArchiveInputStream.BoundedInputStream.read() incorrectly adds
    1 for EOF to the bytes read count
    + Deprecate IOUtils.read(File, byte[])
    + Deprecate IOUtils.copyRange(InputStream, long, OutputStream,
    int)
    + COMPRESS-653: ZipArchiveOutputStream multi archive updates
    metadata in incorrect file
    + Deprecate ByteUtils.InputStreamByteSupplier
    + Deprecate ByteUtils.fromLittleEndian(InputStream, int)
    + Deprecate ByteUtils.toLittleEndian(DataOutput, long, int)
    + Reduce duplication by having ArchiveInputStream extend
    FilterInputStream
    + Support preamble garbage in ZipArchiveInputStream
    + COMPRESS-658: Fix formatting the lowest expressable DOS time
    + Drop reflection from ExtraFieldUtils static initialization
    + Preserve exception causation in
    ExtraFieldUtils.register(Class)
- Upgrade to 1.25.0
  * New features:
    + Add GzipParameters.getFileName() and deprecate getFilename()
    + Add GzipParameters.setFileName(String) and deprecate
    setFilename(String)
    + Add FileNameUtil.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add FileNameUtil.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add FileNameUtil.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add BZip2Utils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add BZip2Utils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add BZip2Utils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add LZMAUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add LZMAUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add LZMAUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add XYUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add XYUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add XYUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add GzipUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add GzipUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add GzipUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add SevenZOutputFile.putArchiveEntry(SevenZArchiveEntry) and
    deprecate putArchiveEntry(ArchiveEntry)
    + Add generics to ChangeSet and ChangeSetPerformer
    + Add generics to ArchiveStreamProvider and friends
    + Add a generic type parameter to ArchiveOutputStream and avoid
    unchecked/unconfirmed type casts in subclasses
    + Add a generic type parameter to ArchiveInputStream and
    deprecate redundant get methods in subclasses
    + COMPRESS-648: Add ability to restrict autodetection in
    CompressorStreamFactory
  * Fixed Bugs:
    + Precompile regular expression in
    ArArchiveInputStream.isBSDLongName(String)
    + Precompile regular expression in
    ArArchiveInputStream.isGNULongName(String)
    + Precompile regular expression in
    TarArchiveEntry.parseInstantFromDecimalSeconds(String)
    + Precompile regular expression in
    ChangeSet.addDeletion(Change)
    + COMPRESS-649: Improve performance in
    BlockLZ4CompressorOutputStream
    + Null-guard Lister.main(String[]) for programmatic invocation
    + NPE in pack200.NewAttributeBands.Reference
    .addAttributeToBand(NewAttribute, InputStream)
    + Incorrect lazy initialization and update of static field in
    pack200.CodecEncoding.getSpecifier(Codec, Codec)
    + Incorrect string comparison in unpack200.AttributeLayout
    .numBackwardsCallables()
    + Inefficient use of keySet iterator instead of entrySet
    iterator in pack200.PackingOptions
    .addOrUpdateAttributeActions(List, Map, int)
    + Package private class pack200.IcBands.IcTuple should be a
    static inner class
    + Private class ZipFile.BoundedFileChannelInputStream should be
    a static inner class
    + Refactor internal SevenZ AES256SHA256Decoder InputStream into
    a named static inner class
    + Refactor internal SevenZ AES256SHA256Decoder OutputStream into
    a named static inner class
    + Use the root Locale for string conversion of command line
    options in org.apache.commons.compress.archivers.sevenz.CLI
    + Calling PackingUtils.config(PackingOptions) with null now
    closes the internal FileHandler
    + COMPRESS-650: LZ4 compressor throws IndexOutOfBoundsException
    + COMPRESS-632: LZWInputStream.initializeTables(int) should
    throw IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException
    + COMPRESS-647: Throw IOException instead of
    ArrayIndexOutOfBoundsException when reading Zip with data
    descriptor entries
- Update to 1.24.0
  * New features:
    + Make ZipArchiveEntry.getLocalHeaderOffset() public
  * Fixed Bugs:
    + Use try-with-resources in ArchiveStreamFactory
    + Javadoc and code comments: Sanitize grammar issues and typos
    + Remove redundant (null) initializations
    + [StepSecurity] ci: Harden GitHub Actions
- Update to 1.23.0
  * New features:
    + COMPRESS-614: Use FileTime for time fields in
    SevenZipArchiveEntry
    + COMPRESS-621: Fix calculation the offset of the first ZIP
    central directory entry
    + COMPRESS-633:Add encryption support for SevenZ
    + COMPRESS-613: Support for extra time data in Zip archives
    + COMPRESS-621: Add org.apache.commons.compress.archivers.zip
    .DefaultBackingStoreSupplier to write to a custom folder
    instead of the default temporary folder.
    + COMPRESS-600: Add capability to configure Deflater strategy
    in GzipCompressorOutputStream:
    GzipParameters.setDeflateStrategy(int).
  * Fixed Bugs:
    + Implicit narrowing conversion in compound assignment
    + Avoid NPE in FileNameUtils.getBaseName(Path) for paths with
    zero elements like root paths
    + Avoid NPE in FileNameUtils.getExtension(Path) for paths with
    zero elements like root paths
    + LZMA2Decoder.decode() looses original exception
    + Extract conditions and avoid duplicate code.
    + Remove duplicate conditions. Use switch instead.
    + Replace JUnit 3 and 4 with JUnit 5
    + Make 'ZipFile.offsetComparator' static
    + COMPRESS-638: The GzipCompressorOutputStream#writeHeader()
    uses ISO_8859_1 to write the file name and comment. If the
    strings contains non-ISO_8859_1 characters, unknown characters
    are displayed after decompression. Use percent encoding for
    non ISO_8859_1 characters.
    + Port some code from IO to NIO APIs
    + pack200: Fix FileBands misusing InputStream#read(byte[])
    + COMPRESS-641: Add TarArchiveEntry.getLinkFlag()
    + COMPRESS-642: Integer overflow ArithmeticException in
    TarArchiveOutputStream
    + COMPRESS-642: org.apache.commons.compress.archivers.zip
    .ZipFile.finalize() should not write to std err.
  * Removed:
    + Remove BZip2CompressorOutputStream.finalize() which only wrote
    to std err
- Update to 1.22
  * New features:
    + COMPRESS-602: Migrate zip package to use NIO
    + Add APK file extension constants: ArchiveStreamFactory.APK,
    APKM, APKS, XAPK
    + ArchiveStreamFactory.createArchiveInputStream(String,
    InputStream, String) supports the "APK" format (it's a JAR)
    + Expander example now has NIO Path versions of IO File APIs
    + COMPRESS-612: Improve TAR support for file times
    + Add SevenZArchiveEntry.setContentMethods(SevenZMethodConfiguration...)
  * Fixed Bugs:
    + Fix some compiler warnings in pack200 packages
    + Close File input stream after unpacking in
    Pack200UnpackerAdapter.unpack(File, JarOutputStream)
    + Pack200UnpackerAdapter.unpack(InputStream, JarOutputStream)
    should not close its given input stream
    + COMPRESS-596: Fix minor problem in examples.
    + COMPRESS-584: Add a limit to the copy buffer in
    IOUtils.readRange() to avoid reading more from a channel than
    asked for
    + Documentation nits
    + Replace wrapper Collections.sort is with an instance method
    directly
    + Replace manual comparisons with Comparator.comparingInt()
    + Replace manual copy of array contents with System.arraycopy()
    + Fix thread safety issues when encoding 7z password
    + bzip2: calculate median-of-3 on unsigned values
    + Use Math.min and Math.max calculations.
    + COMPRESS-603: Expander should be able to work if an entry's
    name is "./".
    + COMPRESS-604: Ensure compatibility with Java 8
    + Use StringBuilder instead of StringBuffer.
    + Inline variable. Remove redundant local variable.
    + Use compare method
    + Remove Unnecessary interface modifiers
    + Avoid use C-style array declaration.
    + ChecksumVerifyingInputStream.read() does not always validate
    checksum at end-of-stream
    + Fix TarFileTest
    + COMPRESS-625: Update Wikipedia link in TarUtils.java:627.
    + COMPRESS-626: OutOfMemoryError on malformed pack200 input
    (attributes).
    + COMPRESS-628: OutOfMemoryError on malformed pack200 input
    (org.apache.commons.compress.harmony.pack200.NewAttributeBands
    .readNextUnionCase).
    + COMPRESS-628: OutOfMemoryError on malformed unpack200 input
    (org.apache.commons.compress.harmony.unpack200
    .NewAttributeBands.readNextUnionCase).
    + Some input streams are not closed in org.apache.commons
    .compress.harmony.pack200.PackingUtils
    + COMPRESS-627: Pack200 causes a 'archive.3E' error if it's not
    in the system class loader.
- Modified patches:
  * 0001-Remove-Brotli-compressor.patch
  * 0002-Remove-ZSTD-compressor.patch
  * 0003-Remove-Pack200-compressor.patch
    + rediff to changed context
- Removed patch:
  * fix_java_8_compatibility.patch
    + not needed, since we handle the compatibility differently</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Upgrade to 1.26.1
  * Fixed Bugs
    + COMPRESS-659: TarArchiveOutputStream should use Commons IO
    Charsets instead of Commons Codec Charsets.
    + COMPRESS-660: Add org.apache.commons.codec to OSGi imports.
    + COMPRESS-664 Return null value from getNextEntry() for empty
    file.
    + COMPRESS-664: Remove unused variables in tests.
    + COMPRESS-666: Multithreaded access to Tar archive throws
    java.util.zip.ZipException: Corrupt GZIP trailer.
    + COMPRESS-644: ArchiveStreamFactory.detect(InputStream) returns
    TAR for ICO file.
    + COMPRESS-661: ArchiveInputStream markSupported should always
    return false.
    + COMPRESS-662: Remove out of date jar and scripts.</changelog>
</package>
<package pkgid="a1f074eeed9f17973a3ed771d050c36d26af26426a440e4f2c9cd31836a60318ff2137d29584a28c962c44e613c53088f999a77bab8d20c3dfb30b57c8fe38b0" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * 0003-Remove-Pack200-compressor.patch
    + Remove support for pack200 which depends on old asm3</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 1.26
  * Fixing several vulnerabilities
    + bsc#1220068, CVE-2024-26308
    + bsc#1220070, CVE-2024-25710
  * New Features
    + Add and use ZipFile.builder(), ZipFile.Builder, and deprecate
    constructors
    + Add and use SevenZFile.builder(), SevenZFile.Builder, and
    deprecate constructors
    + Add and use ArchiveInputStream.getCharset()
    + Add and use ArchiveEntry.resolveIn(Path)
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs
    + COMPRESS-632: Check for invalid PAX values in TarArchiveEntry
    + COMPRESS-632: Fix for zero size headers in ArjInputStream
    + COMPRESS-632: Fixes and tests for ArInputStream
    + COMPRESS-632: Fixes for dump file parsing
    + COMPRESS-632: Improve CPIO exception detection and handling
    + Deprecate SkipShieldingInputStream without replacement (no
    longer used)
    + Reuse commons-codec, don't duplicate class PureJavaCrc32C
    (removed package-private class)
    + Reuse commons-codec, don't duplicate class XXHash32
    (deprecated class)
    + Reuse commons-io, don't duplicate class Charsets (deprecated
    class)
    + Reuse commons-io, don't duplicate class IOUtils (deprecated
    methods)
    + Reuse commons-io, don't duplicate class BoundedInputStream
    (deprecated class)
    + Reuse commons-io, don't duplicate class FileTimes (deprecated
    TimeUtils methods)
    + Reuse Arrays.equals(byte[], byte[]) and deprecate
    ArchiveUtils.isEqual(byte[], byte[])
    + Add a null-check for the class loader of OsgiUtils
    + Add a null-check in Pack200.newInstance(String, String)
    + Deprecate ChecksumCalculatingInputStream in favor of
    java.util.zip.CheckedInputStream
    + Deprecate CRC32VerifyingInputStream
    .CRC32VerifyingInputStream(InputStream, long, int)
    + COMPRESS-655: FramedSnappyCompressorOutputStream produces
    incorrect output when writing a large buffer
    + COMPRESS-657: Fix TAR directory entries being misinterpreted
    as files
    + Deprecate unused method FileNameUtils.getBaseName(String)
    + Deprecate unused method FileNameUtils.getExtension(String)
    + ArchiveInputStream.BoundedInputStream.read() incorrectly adds
    1 for EOF to the bytes read count
    + Deprecate IOUtils.read(File, byte[])
    + Deprecate IOUtils.copyRange(InputStream, long, OutputStream,
    int)
    + COMPRESS-653: ZipArchiveOutputStream multi archive updates
    metadata in incorrect file
    + Deprecate ByteUtils.InputStreamByteSupplier
    + Deprecate ByteUtils.fromLittleEndian(InputStream, int)
    + Deprecate ByteUtils.toLittleEndian(DataOutput, long, int)
    + Reduce duplication by having ArchiveInputStream extend
    FilterInputStream
    + Support preamble garbage in ZipArchiveInputStream
    + COMPRESS-658: Fix formatting the lowest expressable DOS time
    + Drop reflection from ExtraFieldUtils static initialization
    + Preserve exception causation in
    ExtraFieldUtils.register(Class)
- Upgrade to 1.25.0
  * New features:
    + Add GzipParameters.getFileName() and deprecate getFilename()
    + Add GzipParameters.setFileName(String) and deprecate
    setFilename(String)
    + Add FileNameUtil.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add FileNameUtil.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add FileNameUtil.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add BZip2Utils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add BZip2Utils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add BZip2Utils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add LZMAUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add LZMAUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add LZMAUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add XYUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add XYUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add XYUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add GzipUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add GzipUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add GzipUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add SevenZOutputFile.putArchiveEntry(SevenZArchiveEntry) and
    deprecate putArchiveEntry(ArchiveEntry)
    + Add generics to ChangeSet and ChangeSetPerformer
    + Add generics to ArchiveStreamProvider and friends
    + Add a generic type parameter to ArchiveOutputStream and avoid
    unchecked/unconfirmed type casts in subclasses
    + Add a generic type parameter to ArchiveInputStream and
    deprecate redundant get methods in subclasses
    + COMPRESS-648: Add ability to restrict autodetection in
    CompressorStreamFactory
  * Fixed Bugs:
    + Precompile regular expression in
    ArArchiveInputStream.isBSDLongName(String)
    + Precompile regular expression in
    ArArchiveInputStream.isGNULongName(String)
    + Precompile regular expression in
    TarArchiveEntry.parseInstantFromDecimalSeconds(String)
    + Precompile regular expression in
    ChangeSet.addDeletion(Change)
    + COMPRESS-649: Improve performance in
    BlockLZ4CompressorOutputStream
    + Null-guard Lister.main(String[]) for programmatic invocation
    + NPE in pack200.NewAttributeBands.Reference
    .addAttributeToBand(NewAttribute, InputStream)
    + Incorrect lazy initialization and update of static field in
    pack200.CodecEncoding.getSpecifier(Codec, Codec)
    + Incorrect string comparison in unpack200.AttributeLayout
    .numBackwardsCallables()
    + Inefficient use of keySet iterator instead of entrySet
    iterator in pack200.PackingOptions
    .addOrUpdateAttributeActions(List, Map, int)
    + Package private class pack200.IcBands.IcTuple should be a
    static inner class
    + Private class ZipFile.BoundedFileChannelInputStream should be
    a static inner class
    + Refactor internal SevenZ AES256SHA256Decoder InputStream into
    a named static inner class
    + Refactor internal SevenZ AES256SHA256Decoder OutputStream into
    a named static inner class
    + Use the root Locale for string conversion of command line
    options in org.apache.commons.compress.archivers.sevenz.CLI
    + Calling PackingUtils.config(PackingOptions) with null now
    closes the internal FileHandler
    + COMPRESS-650: LZ4 compressor throws IndexOutOfBoundsException
    + COMPRESS-632: LZWInputStream.initializeTables(int) should
    throw IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException
    + COMPRESS-647: Throw IOException instead of
    ArrayIndexOutOfBoundsException when reading Zip with data
    descriptor entries
- Update to 1.24.0
  * New features:
    + Make ZipArchiveEntry.getLocalHeaderOffset() public
  * Fixed Bugs:
    + Use try-with-resources in ArchiveStreamFactory
    + Javadoc and code comments: Sanitize grammar issues and typos
    + Remove redundant (null) initializations
    + [StepSecurity] ci: Harden GitHub Actions
- Update to 1.23.0
  * New features:
    + COMPRESS-614: Use FileTime for time fields in
    SevenZipArchiveEntry
    + COMPRESS-621: Fix calculation the offset of the first ZIP
    central directory entry
    + COMPRESS-633:Add encryption support for SevenZ
    + COMPRESS-613: Support for extra time data in Zip archives
    + COMPRESS-621: Add org.apache.commons.compress.archivers.zip
    .DefaultBackingStoreSupplier to write to a custom folder
    instead of the default temporary folder.
    + COMPRESS-600: Add capability to configure Deflater strategy
    in GzipCompressorOutputStream:
    GzipParameters.setDeflateStrategy(int).
  * Fixed Bugs:
    + Implicit narrowing conversion in compound assignment
    + Avoid NPE in FileNameUtils.getBaseName(Path) for paths with
    zero elements like root paths
    + Avoid NPE in FileNameUtils.getExtension(Path) for paths with
    zero elements like root paths
    + LZMA2Decoder.decode() looses original exception
    + Extract conditions and avoid duplicate code.
    + Remove duplicate conditions. Use switch instead.
    + Replace JUnit 3 and 4 with JUnit 5
    + Make 'ZipFile.offsetComparator' static
    + COMPRESS-638: The GzipCompressorOutputStream#writeHeader()
    uses ISO_8859_1 to write the file name and comment. If the
    strings contains non-ISO_8859_1 characters, unknown characters
    are displayed after decompression. Use percent encoding for
    non ISO_8859_1 characters.
    + Port some code from IO to NIO APIs
    + pack200: Fix FileBands misusing InputStream#read(byte[])
    + COMPRESS-641: Add TarArchiveEntry.getLinkFlag()
    + COMPRESS-642: Integer overflow ArithmeticException in
    TarArchiveOutputStream
    + COMPRESS-642: org.apache.commons.compress.archivers.zip
    .ZipFile.finalize() should not write to std err.
  * Removed:
    + Remove BZip2CompressorOutputStream.finalize() which only wrote
    to std err
- Update to 1.22
  * New features:
    + COMPRESS-602: Migrate zip package to use NIO
    + Add APK file extension constants: ArchiveStreamFactory.APK,
    APKM, APKS, XAPK
    + ArchiveStreamFactory.createArchiveInputStream(String,
    InputStream, String) supports the "APK" format (it's a JAR)
    + Expander example now has NIO Path versions of IO File APIs
    + COMPRESS-612: Improve TAR support for file times
    + Add SevenZArchiveEntry.setContentMethods(SevenZMethodConfiguration...)
  * Fixed Bugs:
    + Fix some compiler warnings in pack200 packages
    + Close File input stream after unpacking in
    Pack200UnpackerAdapter.unpack(File, JarOutputStream)
    + Pack200UnpackerAdapter.unpack(InputStream, JarOutputStream)
    should not close its given input stream
    + COMPRESS-596: Fix minor problem in examples.
    + COMPRESS-584: Add a limit to the copy buffer in
    IOUtils.readRange() to avoid reading more from a channel than
    asked for
    + Documentation nits
    + Replace wrapper Collections.sort is with an instance method
    directly
    + Replace manual comparisons with Comparator.comparingInt()
    + Replace manual copy of array contents with System.arraycopy()
    + Fix thread safety issues when encoding 7z password
    + bzip2: calculate median-of-3 on unsigned values
    + Use Math.min and Math.max calculations.
    + COMPRESS-603: Expander should be able to work if an entry's
    name is "./".
    + COMPRESS-604: Ensure compatibility with Java 8
    + Use StringBuilder instead of StringBuffer.
    + Inline variable. Remove redundant local variable.
    + Use compare method
    + Remove Unnecessary interface modifiers
    + Avoid use C-style array declaration.
    + ChecksumVerifyingInputStream.read() does not always validate
    checksum at end-of-stream
    + Fix TarFileTest
    + COMPRESS-625: Update Wikipedia link in TarUtils.java:627.
    + COMPRESS-626: OutOfMemoryError on malformed pack200 input
    (attributes).
    + COMPRESS-628: OutOfMemoryError on malformed pack200 input
    (org.apache.commons.compress.harmony.pack200.NewAttributeBands
    .readNextUnionCase).
    + COMPRESS-628: OutOfMemoryError on malformed unpack200 input
    (org.apache.commons.compress.harmony.unpack200
    .NewAttributeBands.readNextUnionCase).
    + Some input streams are not closed in org.apache.commons
    .compress.harmony.pack200.PackingUtils
    + COMPRESS-627: Pack200 causes a 'archive.3E' error if it's not
    in the system class loader.
- Modified patches:
  * 0001-Remove-Brotli-compressor.patch
  * 0002-Remove-ZSTD-compressor.patch
  * 0003-Remove-Pack200-compressor.patch
    + rediff to changed context
- Removed patch:
  * fix_java_8_compatibility.patch
    + not needed, since we handle the compatibility differently</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Upgrade to 1.26.1
  * Fixed Bugs
    + COMPRESS-659: TarArchiveOutputStream should use Commons IO
    Charsets instead of Commons Codec Charsets.
    + COMPRESS-660: Add org.apache.commons.codec to OSGi imports.
    + COMPRESS-664 Return null value from getNextEntry() for empty
    file.
    + COMPRESS-664: Remove unused variables in tests.
    + COMPRESS-666: Multithreaded access to Tar archive throws
    java.util.zip.ZipException: Corrupt GZIP trailer.
    + COMPRESS-644: ArchiveStreamFactory.detect(InputStream) returns
    TAR for ICO file.
    + COMPRESS-661: ArchiveInputStream markSupported should always
    return false.
    + COMPRESS-662: Remove out of date jar and scripts.</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to 1.28.0
  * New Features
    + Add GzipParameters.getModificationInstant()
    + Add GzipParameters.setModificationInstant(Instant)
    + Add GzipParameters.OS, setOS(OS), getOS()
    + Add GzipParameters.toString()
    + COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset)
    and getFileNameCharset() to override the default ISO-8859-1
    Charset
    + Add support for gzip extra subfields, see
    GzipParameters.setExtra(HeaderExtraField)
    + Add CompressFilterOutputStream and refactor to use
    + Add ZipFile.stream()
    + GzipCompressorInputStream reads the modification time (MTIME)
    and stores its value incorrectly multiplied by 1,000
    + GzipCompressorInputStream writes the modification time (MTIME)
    the value incorrectly divided by 1,000
    + Add optional FHCRC to GZIP header
    + Add GzipCompressorInputStream.Builder allowing to customize
    the file name and comment Charsets
    + Add GzipCompressorInputStream.Builder
    .setOnMemberStart(IOConsumer) to monitor member parsing
    + Add GzipCompressorInputStream.Builder
    .setOnMemberEnd(IOConsumer) to monitor member parsing
    + Add PMD check to default Maven goal
    + Add SevenZFile.Builder.setMaxMemoryLimitKiB(int)
    + Add MemoryLimitException.MemoryLimitException(long, int,
    Throwable) and deprecate MemoryLimitException
    .MemoryLimitException(long, int, Exception)
    + COMPRESS-692: Add support for zstd compression in zip archives
    + Add support for XZ compression in ZIP archives
    + COMPRESS-695: Add ZipArchiveInputStream
    .createZstdInputStream(InputStream) to provide a different
    InputStream implementation for Zstandard (Zstd)
    + Add org.apache.commons.compress.harmony.pack200
    .Pack200Exception.Pack200Exception(String, Throwable)
    + COMPRESS-697: Move BitStream.nextBit() method to BitInputStream
    + Add org.apache.commons.compress.compressors.lzma
    .LZMACompressorInputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.lzma
    .LZMACompressorOutputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz
    .XZCompressorInputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz
    .XZCompressorOutputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz
    .ZstdCompressorOutputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz.ZstdConstants
    + Add org.apache.commons.compress.archivers.ArchiveException
    .requireNonNull(T, Supplier&lt;String&gt;)
    + Add org.apache.commons.compress.compressors
    .CompressorException as the root for all custom exceptions
    ArchiveException and CompressorException
    + Add ArchiveException.ArchiveException(String, Throwable)
    + Add ArchiveException.ArchiveException(Throwable)
    + Add org.apache.commons.compress.archivers.sevenz
    .SevenZArchiveEntry.isEmptyStream()
    + Add generics for org.apache.commons.compress.compressors
    .CompressorStreamProvider.createCompressorOutputStream(String, T)
  * Fixed Bugs
    + COMPRESS-686: Better exception messages in
    SeekableInMemoryByteChannel
    + COMPRESS-691: ZipArchiveOutputStream.addRawArchiveEntry()
    should check is2PhaseSource
    + ArchiveException extends IOException
    + CompressorException extends IOException
    + Update outdated descriptions in IOUtils and IOUtilsTest
    + Remove unused local variable in ZipFile
    + Optimize ZipEightByteInteger
    + ZipEightByteInteger.toString() now returns a number string
    without text prefix, like BigInteger
    + Throw an IllegalArgumentException when a file name or comment
    in gzip parameters encodes to a byte array with a 0 byte
    + Update outdated links in ZipMethod Javadoc
    + Deprecate ZipUtil.signedByteToUnsignedInt(byte) in favor of
    Byte.toUnsignedInt(byte)
    + ZipArchiveOutputStream.close() does not close its underlying
    output stream
    + ZipArchiveOutputStream.close() does not close its underlying
    output stream
    + Don't use deprecated code in TarArchiveInputStream
    + Don't use deprecated code in TarFile
    + CpioArchiveInputStream.read(byte[], int, int) now throws an
    IOException on a data pad count mismatch
    + CpioArchiveInputStream.readNewEntry(boolean) now throws an
    IOException on a header pad count mismatch
    + CpioArchiveInputStream.readOldBinaryEntry(boolean) now throws
    an IOException on a header pad count mismatch
    + Fix Javadoc and names in the org.apache.commons.compress
    .archivers.sevenz package to specify kibibyte scale in memory
    limits
    + Fix Javadoc and names in the org.apache.commons.compress
    .compressors.lzw package to specify kibibyte scale in memory
    limits
    + Fix Javadoc and names in the org.apache.commons.compress
    .compressors.z package to specify kibibyte scale in memory
    limits
    + Refactor LZ77Compressor block classes to reduce duplication
    + Package-private and private classes can be final
    + Deprecate ArjArchiveEntry.HostOs.HostOs()
    + Drop coveralls reference (no longer needed)
    + Some ZIP operations won't read all data from a non-blocking
    file channel
    + COMPRESS-696: ZipArchiveInputStream.getCompressedCount()
    throws NullPointerException if called before getNextEntry()
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getConstantPoolEntry(int, long) now
    throws Pack200Exception instead of Error and does better range
    checking of the index argument
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getInitMethodPoolEntry(int, long, String)
    now throws Pack200Exception instead of Error and does better
    range checking of the index argument
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getInitMethodPoolEntry(int, long, String)
    now throws Pack200Exception instead of Error on bad constant
    pool type input
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getClassSpecificPoolEntry(int, long,
    String) now throws Pack200Exception instead of Error on bad
    constant pool type input
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getClassPoolEntry(String) now throws
    Pack200Exception instead of Error on some bad inputs and
    states
    + org.apache.commons.compress.harmony.unpack200.bytecode
    .ByteCode.extractOperands(OperandManager, Segment, int) now
    throws Pack200Exception instead of Error on some bad inputs
    and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .ByteCodeForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode
    .CodeAttribute.CodeAttribute(int, int, byte[], Segment,
    OperandManager, List) now throws Pack200Exception instead of
    Error on some bad inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .IMethodRefForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .MultiANewArrayForm.setByteCodeOperands(ByteCode,
    OperandManager, int) now throws Pack200Exception instead of
    Error on some bad inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .NewClassRefForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .ReferenceForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + Deprecate org.apache.commons.compress.harmony.pack200
    .CanonicalCodecFamilies.CanonicalCodecFamilies()
    + Deprecate FileNameUtils#getBaseName(Path)
    + Deprecate FileNameUtils#getExtension(Path)
    + org.apache.commons.compress.harmony.unpack200.Archive.unpack()
    should not log to system out (the console)
    + [site] Fix minor zip docs type: remove extraneous 'a'
    + Throw a better exception in org.apache.commons.compress
    .archivers.sevenz.SevenZFile.readFilesInfo(ByteBuffer,
    Archive)
    + MemoryLimitException now extends CompressException instead of
    IOException (CompressException extends IOException)
    + DumpArchiveException now extends ArchiveException instead of
    IOException (ArchiveException extends CompressException)
    + PasswordRequiredException now extends CompressException
    instead of IOException (CompressException extends IOException)
    + Pack200Exception now extends CompressException instead of
    IOException (CompressException extends IOException)
    + ArArchiveInputStream.getBSDLongName(String) now throws its
    EOFException with a message
    + ZipEncodingHelper.getZipEncoding(*) can throw
    NullPointerException and IllegalArgumentException on bad input
    instead of returning a value using the default Charset
    + Javadoc improvements throughout
    + COMPRESS-699: ArchiveStreamFactory.detect(inputStream)
    ArchiveException for TAR regression
    + COMPRESS-700: Can't detect file
    flutter_awesome_buttons-0.1.0.tar as a TAR file
    + Deprecate org.apache.commons.compress.utils.TimeUtils
    .toUnixTime(FileTime) in favor of org.apache.commons.io.file
    .attribute.FileTimes.toUnixTime(FileTime)
    + Deprecate org.apache.commons.compress.utils.TimeUtils
    .truncateToHundredNanos(FileTime)
  * Changes
    + Bump org.apache.commons:commons-parent from 72 to 85
    + Bump com.github.luben:zstd-jni from 1.5.6-4 to 1.5.7-4
    + Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.18.0
    + Bump commons-io:commons-io from 2.16.1 to 2.20.0
    + Bump com.github.marschall:memoryfilesystem from 2.8.0 to 2.8.1
    + Bump org.ow2.asm:asm from 9.7 to 9.7.1
    + Bump commons-codec:commons-codec from 1.17.1 to 1.19.0
  * Removed
    + COMPRESS-638: GzipCompressorOutputStream no longer
    percent-endcodes in US-ASCII a file name or comment that the
    Charset in GzipParameters.setFileNameCharset(Charset) cannot
    encode
    + Remove ZstdCompressorOutputStream.toString(), it was
    misleading by returning the delegate's toString()
- Changes of version 1.27.1
  * Fixed Bugs
    + COMPRESS-686: Compression into BZip2 format has unexpected end
    of file when using a BufferedOutputStream
    + Changes
    + Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0
- Changes of version 1.27.0
  * New Features
    + Add ArchiveInputStream.forEach(IOConsumer)
    + Add ArchiveInputStream.iterator()
    + Add ArchiveOutputStream.isFinished()
    + Add ArchiveOutputStream.checkFinished()
  * Fixed Bugs
    + Fix PMD UnnecessaryFullyQualifiedName and others
    + COMPRESS-681: Support reading a 7z file that writing archive
    properties
    + Upgrade commons-io from 2.15.1 to 2.16.1
    + CompressorOutputStream now extends FilterOutputStream
    + ArchiveOutputStream now extends FilterOutputStream
    + COMPRESS-685: Update Javadoc description for
    GzipCompressorInputStream
    + Replace FileNameUtil.getCompressedFileName(String) use of
    Locale.ENGLISH with Locale.ROOT
    + Fix SpotBugs DLS_DEAD_LOCAL_STORE in
    SevenZFile.readPackInfo(ByteBuffer, Archive)
    + Fix SpotBugs NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE in
    ZipFile.openZipChannel(Path, long, OpenOption[])
    + Fix SpotBugs UC_USELESS_OBJECT in
    unpack200.CpBands.parseCpSignature(InputStream)
    + Fix PMD UselessOverridingMethod in
    unpack200.bytecode.InnerClassesAttribute
    + Fix PMD UselessOverridingMethod in
    unpack200.bytecode.LineNumberTableAttribute
    + Fix PMD CheckSkipResult in ZipArchiveInputStream.closeEntry()
  * Changes
    + COMPRESS-684: Replace assert with Exception
    + Bump org.apache.commons:commons-parent from 69 to 72
    + Bump PMD from 6.x to 7.2.0
    + Bump commons-codec:commons-codec from 1.17.0 to 1.17.1
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0
    + Bump com.github.luben:zstd-jni from 1.5.6-3 to 1.5.6-4
    + Bump org.tukaani:xz from 1.9 to 1.10
    + Bump org.hamcrest:hamcrest from 2.2 to 3.0
- Removed patches:
  * 0001-Remove-Brotli-compressor.patch
  * 0002-Remove-ZSTD-compressor.patch
  * 0003-Remove-Pack200-compressor.patch
    + we have now the dependencies for zstd and brotli</changelog>
</package>
<package pkgid="461c4596472ce4155fca4f20bda4c26b99b41cef6655387bd40ceff440edc0d5d96ec66763c4cd82372cc33eee5aab8debdd616581ff2bb24add4c5281012545" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.26.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * 0003-Remove-Pack200-compressor.patch
    + Remove support for pack200 which depends on old asm3</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 1.26
  * Fixing several vulnerabilities
    + bsc#1220068, CVE-2024-26308
    + bsc#1220070, CVE-2024-25710
  * New Features
    + Add and use ZipFile.builder(), ZipFile.Builder, and deprecate
    constructors
    + Add and use SevenZFile.builder(), SevenZFile.Builder, and
    deprecate constructors
    + Add and use ArchiveInputStream.getCharset()
    + Add and use ArchiveEntry.resolveIn(Path)
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs
    + COMPRESS-632: Check for invalid PAX values in TarArchiveEntry
    + COMPRESS-632: Fix for zero size headers in ArjInputStream
    + COMPRESS-632: Fixes and tests for ArInputStream
    + COMPRESS-632: Fixes for dump file parsing
    + COMPRESS-632: Improve CPIO exception detection and handling
    + Deprecate SkipShieldingInputStream without replacement (no
    longer used)
    + Reuse commons-codec, don't duplicate class PureJavaCrc32C
    (removed package-private class)
    + Reuse commons-codec, don't duplicate class XXHash32
    (deprecated class)
    + Reuse commons-io, don't duplicate class Charsets (deprecated
    class)
    + Reuse commons-io, don't duplicate class IOUtils (deprecated
    methods)
    + Reuse commons-io, don't duplicate class BoundedInputStream
    (deprecated class)
    + Reuse commons-io, don't duplicate class FileTimes (deprecated
    TimeUtils methods)
    + Reuse Arrays.equals(byte[], byte[]) and deprecate
    ArchiveUtils.isEqual(byte[], byte[])
    + Add a null-check for the class loader of OsgiUtils
    + Add a null-check in Pack200.newInstance(String, String)
    + Deprecate ChecksumCalculatingInputStream in favor of
    java.util.zip.CheckedInputStream
    + Deprecate CRC32VerifyingInputStream
    .CRC32VerifyingInputStream(InputStream, long, int)
    + COMPRESS-655: FramedSnappyCompressorOutputStream produces
    incorrect output when writing a large buffer
    + COMPRESS-657: Fix TAR directory entries being misinterpreted
    as files
    + Deprecate unused method FileNameUtils.getBaseName(String)
    + Deprecate unused method FileNameUtils.getExtension(String)
    + ArchiveInputStream.BoundedInputStream.read() incorrectly adds
    1 for EOF to the bytes read count
    + Deprecate IOUtils.read(File, byte[])
    + Deprecate IOUtils.copyRange(InputStream, long, OutputStream,
    int)
    + COMPRESS-653: ZipArchiveOutputStream multi archive updates
    metadata in incorrect file
    + Deprecate ByteUtils.InputStreamByteSupplier
    + Deprecate ByteUtils.fromLittleEndian(InputStream, int)
    + Deprecate ByteUtils.toLittleEndian(DataOutput, long, int)
    + Reduce duplication by having ArchiveInputStream extend
    FilterInputStream
    + Support preamble garbage in ZipArchiveInputStream
    + COMPRESS-658: Fix formatting the lowest expressable DOS time
    + Drop reflection from ExtraFieldUtils static initialization
    + Preserve exception causation in
    ExtraFieldUtils.register(Class)
- Upgrade to 1.25.0
  * New features:
    + Add GzipParameters.getFileName() and deprecate getFilename()
    + Add GzipParameters.setFileName(String) and deprecate
    setFilename(String)
    + Add FileNameUtil.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add FileNameUtil.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add FileNameUtil.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add BZip2Utils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add BZip2Utils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add BZip2Utils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add LZMAUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add LZMAUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add LZMAUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add XYUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add XYUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add XYUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add GzipUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add GzipUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add GzipUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add SevenZOutputFile.putArchiveEntry(SevenZArchiveEntry) and
    deprecate putArchiveEntry(ArchiveEntry)
    + Add generics to ChangeSet and ChangeSetPerformer
    + Add generics to ArchiveStreamProvider and friends
    + Add a generic type parameter to ArchiveOutputStream and avoid
    unchecked/unconfirmed type casts in subclasses
    + Add a generic type parameter to ArchiveInputStream and
    deprecate redundant get methods in subclasses
    + COMPRESS-648: Add ability to restrict autodetection in
    CompressorStreamFactory
  * Fixed Bugs:
    + Precompile regular expression in
    ArArchiveInputStream.isBSDLongName(String)
    + Precompile regular expression in
    ArArchiveInputStream.isGNULongName(String)
    + Precompile regular expression in
    TarArchiveEntry.parseInstantFromDecimalSeconds(String)
    + Precompile regular expression in
    ChangeSet.addDeletion(Change)
    + COMPRESS-649: Improve performance in
    BlockLZ4CompressorOutputStream
    + Null-guard Lister.main(String[]) for programmatic invocation
    + NPE in pack200.NewAttributeBands.Reference
    .addAttributeToBand(NewAttribute, InputStream)
    + Incorrect lazy initialization and update of static field in
    pack200.CodecEncoding.getSpecifier(Codec, Codec)
    + Incorrect string comparison in unpack200.AttributeLayout
    .numBackwardsCallables()
    + Inefficient use of keySet iterator instead of entrySet
    iterator in pack200.PackingOptions
    .addOrUpdateAttributeActions(List, Map, int)
    + Package private class pack200.IcBands.IcTuple should be a
    static inner class
    + Private class ZipFile.BoundedFileChannelInputStream should be
    a static inner class
    + Refactor internal SevenZ AES256SHA256Decoder InputStream into
    a named static inner class
    + Refactor internal SevenZ AES256SHA256Decoder OutputStream into
    a named static inner class
    + Use the root Locale for string conversion of command line
    options in org.apache.commons.compress.archivers.sevenz.CLI
    + Calling PackingUtils.config(PackingOptions) with null now
    closes the internal FileHandler
    + COMPRESS-650: LZ4 compressor throws IndexOutOfBoundsException
    + COMPRESS-632: LZWInputStream.initializeTables(int) should
    throw IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException
    + COMPRESS-647: Throw IOException instead of
    ArrayIndexOutOfBoundsException when reading Zip with data
    descriptor entries
- Update to 1.24.0
  * New features:
    + Make ZipArchiveEntry.getLocalHeaderOffset() public
  * Fixed Bugs:
    + Use try-with-resources in ArchiveStreamFactory
    + Javadoc and code comments: Sanitize grammar issues and typos
    + Remove redundant (null) initializations
    + [StepSecurity] ci: Harden GitHub Actions
- Update to 1.23.0
  * New features:
    + COMPRESS-614: Use FileTime for time fields in
    SevenZipArchiveEntry
    + COMPRESS-621: Fix calculation the offset of the first ZIP
    central directory entry
    + COMPRESS-633:Add encryption support for SevenZ
    + COMPRESS-613: Support for extra time data in Zip archives
    + COMPRESS-621: Add org.apache.commons.compress.archivers.zip
    .DefaultBackingStoreSupplier to write to a custom folder
    instead of the default temporary folder.
    + COMPRESS-600: Add capability to configure Deflater strategy
    in GzipCompressorOutputStream:
    GzipParameters.setDeflateStrategy(int).
  * Fixed Bugs:
    + Implicit narrowing conversion in compound assignment
    + Avoid NPE in FileNameUtils.getBaseName(Path) for paths with
    zero elements like root paths
    + Avoid NPE in FileNameUtils.getExtension(Path) for paths with
    zero elements like root paths
    + LZMA2Decoder.decode() looses original exception
    + Extract conditions and avoid duplicate code.
    + Remove duplicate conditions. Use switch instead.
    + Replace JUnit 3 and 4 with JUnit 5
    + Make 'ZipFile.offsetComparator' static
    + COMPRESS-638: The GzipCompressorOutputStream#writeHeader()
    uses ISO_8859_1 to write the file name and comment. If the
    strings contains non-ISO_8859_1 characters, unknown characters
    are displayed after decompression. Use percent encoding for
    non ISO_8859_1 characters.
    + Port some code from IO to NIO APIs
    + pack200: Fix FileBands misusing InputStream#read(byte[])
    + COMPRESS-641: Add TarArchiveEntry.getLinkFlag()
    + COMPRESS-642: Integer overflow ArithmeticException in
    TarArchiveOutputStream
    + COMPRESS-642: org.apache.commons.compress.archivers.zip
    .ZipFile.finalize() should not write to std err.
  * Removed:
    + Remove BZip2CompressorOutputStream.finalize() which only wrote
    to std err
- Update to 1.22
  * New features:
    + COMPRESS-602: Migrate zip package to use NIO
    + Add APK file extension constants: ArchiveStreamFactory.APK,
    APKM, APKS, XAPK
    + ArchiveStreamFactory.createArchiveInputStream(String,
    InputStream, String) supports the "APK" format (it's a JAR)
    + Expander example now has NIO Path versions of IO File APIs
    + COMPRESS-612: Improve TAR support for file times
    + Add SevenZArchiveEntry.setContentMethods(SevenZMethodConfiguration...)
  * Fixed Bugs:
    + Fix some compiler warnings in pack200 packages
    + Close File input stream after unpacking in
    Pack200UnpackerAdapter.unpack(File, JarOutputStream)
    + Pack200UnpackerAdapter.unpack(InputStream, JarOutputStream)
    should not close its given input stream
    + COMPRESS-596: Fix minor problem in examples.
    + COMPRESS-584: Add a limit to the copy buffer in
    IOUtils.readRange() to avoid reading more from a channel than
    asked for
    + Documentation nits
    + Replace wrapper Collections.sort is with an instance method
    directly
    + Replace manual comparisons with Comparator.comparingInt()
    + Replace manual copy of array contents with System.arraycopy()
    + Fix thread safety issues when encoding 7z password
    + bzip2: calculate median-of-3 on unsigned values
    + Use Math.min and Math.max calculations.
    + COMPRESS-603: Expander should be able to work if an entry's
    name is "./".
    + COMPRESS-604: Ensure compatibility with Java 8
    + Use StringBuilder instead of StringBuffer.
    + Inline variable. Remove redundant local variable.
    + Use compare method
    + Remove Unnecessary interface modifiers
    + Avoid use C-style array declaration.
    + ChecksumVerifyingInputStream.read() does not always validate
    checksum at end-of-stream
    + Fix TarFileTest
    + COMPRESS-625: Update Wikipedia link in TarUtils.java:627.
    + COMPRESS-626: OutOfMemoryError on malformed pack200 input
    (attributes).
    + COMPRESS-628: OutOfMemoryError on malformed pack200 input
    (org.apache.commons.compress.harmony.pack200.NewAttributeBands
    .readNextUnionCase).
    + COMPRESS-628: OutOfMemoryError on malformed unpack200 input
    (org.apache.commons.compress.harmony.unpack200
    .NewAttributeBands.readNextUnionCase).
    + Some input streams are not closed in org.apache.commons
    .compress.harmony.pack200.PackingUtils
    + COMPRESS-627: Pack200 causes a 'archive.3E' error if it's not
    in the system class loader.
- Modified patches:
  * 0001-Remove-Brotli-compressor.patch
  * 0002-Remove-ZSTD-compressor.patch
  * 0003-Remove-Pack200-compressor.patch
    + rediff to changed context
- Removed patch:
  * fix_java_8_compatibility.patch
    + not needed, since we handle the compatibility differently</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Upgrade to 1.26.1
  * Fixed Bugs
    + COMPRESS-659: TarArchiveOutputStream should use Commons IO
    Charsets instead of Commons Codec Charsets.
    + COMPRESS-660: Add org.apache.commons.codec to OSGi imports.
    + COMPRESS-664 Return null value from getNextEntry() for empty
    file.
    + COMPRESS-664: Remove unused variables in tests.
    + COMPRESS-666: Multithreaded access to Tar archive throws
    java.util.zip.ZipException: Corrupt GZIP trailer.
    + COMPRESS-644: ArchiveStreamFactory.detect(InputStream) returns
    TAR for ICO file.
    + COMPRESS-661: ArchiveInputStream markSupported should always
    return false.
    + COMPRESS-662: Remove out of date jar and scripts.</changelog>
</package>
<package pkgid="3d2e3c2632aafa8a2acb55d301f0b8f46f0751b8b2efae640e3b311702f1e9e6f381829da072edaf84923e3a2c07b2342a6baa641a6335396a17a00a7971319b" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * 0003-Remove-Pack200-compressor.patch
    + Remove support for pack200 which depends on old asm3</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 1.26
  * Fixing several vulnerabilities
    + bsc#1220068, CVE-2024-26308
    + bsc#1220070, CVE-2024-25710
  * New Features
    + Add and use ZipFile.builder(), ZipFile.Builder, and deprecate
    constructors
    + Add and use SevenZFile.builder(), SevenZFile.Builder, and
    deprecate constructors
    + Add and use ArchiveInputStream.getCharset()
    + Add and use ArchiveEntry.resolveIn(Path)
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
  * Fixed Bugs
    + COMPRESS-632: Check for invalid PAX values in TarArchiveEntry
    + COMPRESS-632: Fix for zero size headers in ArjInputStream
    + COMPRESS-632: Fixes and tests for ArInputStream
    + COMPRESS-632: Fixes for dump file parsing
    + COMPRESS-632: Improve CPIO exception detection and handling
    + Deprecate SkipShieldingInputStream without replacement (no
    longer used)
    + Reuse commons-codec, don't duplicate class PureJavaCrc32C
    (removed package-private class)
    + Reuse commons-codec, don't duplicate class XXHash32
    (deprecated class)
    + Reuse commons-io, don't duplicate class Charsets (deprecated
    class)
    + Reuse commons-io, don't duplicate class IOUtils (deprecated
    methods)
    + Reuse commons-io, don't duplicate class BoundedInputStream
    (deprecated class)
    + Reuse commons-io, don't duplicate class FileTimes (deprecated
    TimeUtils methods)
    + Reuse Arrays.equals(byte[], byte[]) and deprecate
    ArchiveUtils.isEqual(byte[], byte[])
    + Add a null-check for the class loader of OsgiUtils
    + Add a null-check in Pack200.newInstance(String, String)
    + Deprecate ChecksumCalculatingInputStream in favor of
    java.util.zip.CheckedInputStream
    + Deprecate CRC32VerifyingInputStream
    .CRC32VerifyingInputStream(InputStream, long, int)
    + COMPRESS-655: FramedSnappyCompressorOutputStream produces
    incorrect output when writing a large buffer
    + COMPRESS-657: Fix TAR directory entries being misinterpreted
    as files
    + Deprecate unused method FileNameUtils.getBaseName(String)
    + Deprecate unused method FileNameUtils.getExtension(String)
    + ArchiveInputStream.BoundedInputStream.read() incorrectly adds
    1 for EOF to the bytes read count
    + Deprecate IOUtils.read(File, byte[])
    + Deprecate IOUtils.copyRange(InputStream, long, OutputStream,
    int)
    + COMPRESS-653: ZipArchiveOutputStream multi archive updates
    metadata in incorrect file
    + Deprecate ByteUtils.InputStreamByteSupplier
    + Deprecate ByteUtils.fromLittleEndian(InputStream, int)
    + Deprecate ByteUtils.toLittleEndian(DataOutput, long, int)
    + Reduce duplication by having ArchiveInputStream extend
    FilterInputStream
    + Support preamble garbage in ZipArchiveInputStream
    + COMPRESS-658: Fix formatting the lowest expressable DOS time
    + Drop reflection from ExtraFieldUtils static initialization
    + Preserve exception causation in
    ExtraFieldUtils.register(Class)
- Upgrade to 1.25.0
  * New features:
    + Add GzipParameters.getFileName() and deprecate getFilename()
    + Add GzipParameters.setFileName(String) and deprecate
    setFilename(String)
    + Add FileNameUtil.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add FileNameUtil.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add FileNameUtil.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add BZip2Utils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add BZip2Utils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add BZip2Utils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add LZMAUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add LZMAUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add LZMAUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add XYUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add XYUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add XYUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add GzipUtils.getCompressedFileName(String) and deprecate
    getCompressedFilename(String)
    + Add GzipUtils.getUncompressedFileName(String) and deprecate
    getUncompressedFilename(String)
    + Add GzipUtils.isCompressedFileName(String) and deprecate
    isCompressedFilename(String)
    + Add SevenZOutputFile.putArchiveEntry(SevenZArchiveEntry) and
    deprecate putArchiveEntry(ArchiveEntry)
    + Add generics to ChangeSet and ChangeSetPerformer
    + Add generics to ArchiveStreamProvider and friends
    + Add a generic type parameter to ArchiveOutputStream and avoid
    unchecked/unconfirmed type casts in subclasses
    + Add a generic type parameter to ArchiveInputStream and
    deprecate redundant get methods in subclasses
    + COMPRESS-648: Add ability to restrict autodetection in
    CompressorStreamFactory
  * Fixed Bugs:
    + Precompile regular expression in
    ArArchiveInputStream.isBSDLongName(String)
    + Precompile regular expression in
    ArArchiveInputStream.isGNULongName(String)
    + Precompile regular expression in
    TarArchiveEntry.parseInstantFromDecimalSeconds(String)
    + Precompile regular expression in
    ChangeSet.addDeletion(Change)
    + COMPRESS-649: Improve performance in
    BlockLZ4CompressorOutputStream
    + Null-guard Lister.main(String[]) for programmatic invocation
    + NPE in pack200.NewAttributeBands.Reference
    .addAttributeToBand(NewAttribute, InputStream)
    + Incorrect lazy initialization and update of static field in
    pack200.CodecEncoding.getSpecifier(Codec, Codec)
    + Incorrect string comparison in unpack200.AttributeLayout
    .numBackwardsCallables()
    + Inefficient use of keySet iterator instead of entrySet
    iterator in pack200.PackingOptions
    .addOrUpdateAttributeActions(List, Map, int)
    + Package private class pack200.IcBands.IcTuple should be a
    static inner class
    + Private class ZipFile.BoundedFileChannelInputStream should be
    a static inner class
    + Refactor internal SevenZ AES256SHA256Decoder InputStream into
    a named static inner class
    + Refactor internal SevenZ AES256SHA256Decoder OutputStream into
    a named static inner class
    + Use the root Locale for string conversion of command line
    options in org.apache.commons.compress.archivers.sevenz.CLI
    + Calling PackingUtils.config(PackingOptions) with null now
    closes the internal FileHandler
    + COMPRESS-650: LZ4 compressor throws IndexOutOfBoundsException
    + COMPRESS-632: LZWInputStream.initializeTables(int) should
    throw IllegalArgumentException instead of
    ArrayIndexOutOfBoundsException
    + COMPRESS-647: Throw IOException instead of
    ArrayIndexOutOfBoundsException when reading Zip with data
    descriptor entries
- Update to 1.24.0
  * New features:
    + Make ZipArchiveEntry.getLocalHeaderOffset() public
  * Fixed Bugs:
    + Use try-with-resources in ArchiveStreamFactory
    + Javadoc and code comments: Sanitize grammar issues and typos
    + Remove redundant (null) initializations
    + [StepSecurity] ci: Harden GitHub Actions
- Update to 1.23.0
  * New features:
    + COMPRESS-614: Use FileTime for time fields in
    SevenZipArchiveEntry
    + COMPRESS-621: Fix calculation the offset of the first ZIP
    central directory entry
    + COMPRESS-633:Add encryption support for SevenZ
    + COMPRESS-613: Support for extra time data in Zip archives
    + COMPRESS-621: Add org.apache.commons.compress.archivers.zip
    .DefaultBackingStoreSupplier to write to a custom folder
    instead of the default temporary folder.
    + COMPRESS-600: Add capability to configure Deflater strategy
    in GzipCompressorOutputStream:
    GzipParameters.setDeflateStrategy(int).
  * Fixed Bugs:
    + Implicit narrowing conversion in compound assignment
    + Avoid NPE in FileNameUtils.getBaseName(Path) for paths with
    zero elements like root paths
    + Avoid NPE in FileNameUtils.getExtension(Path) for paths with
    zero elements like root paths
    + LZMA2Decoder.decode() looses original exception
    + Extract conditions and avoid duplicate code.
    + Remove duplicate conditions. Use switch instead.
    + Replace JUnit 3 and 4 with JUnit 5
    + Make 'ZipFile.offsetComparator' static
    + COMPRESS-638: The GzipCompressorOutputStream#writeHeader()
    uses ISO_8859_1 to write the file name and comment. If the
    strings contains non-ISO_8859_1 characters, unknown characters
    are displayed after decompression. Use percent encoding for
    non ISO_8859_1 characters.
    + Port some code from IO to NIO APIs
    + pack200: Fix FileBands misusing InputStream#read(byte[])
    + COMPRESS-641: Add TarArchiveEntry.getLinkFlag()
    + COMPRESS-642: Integer overflow ArithmeticException in
    TarArchiveOutputStream
    + COMPRESS-642: org.apache.commons.compress.archivers.zip
    .ZipFile.finalize() should not write to std err.
  * Removed:
    + Remove BZip2CompressorOutputStream.finalize() which only wrote
    to std err
- Update to 1.22
  * New features:
    + COMPRESS-602: Migrate zip package to use NIO
    + Add APK file extension constants: ArchiveStreamFactory.APK,
    APKM, APKS, XAPK
    + ArchiveStreamFactory.createArchiveInputStream(String,
    InputStream, String) supports the "APK" format (it's a JAR)
    + Expander example now has NIO Path versions of IO File APIs
    + COMPRESS-612: Improve TAR support for file times
    + Add SevenZArchiveEntry.setContentMethods(SevenZMethodConfiguration...)
  * Fixed Bugs:
    + Fix some compiler warnings in pack200 packages
    + Close File input stream after unpacking in
    Pack200UnpackerAdapter.unpack(File, JarOutputStream)
    + Pack200UnpackerAdapter.unpack(InputStream, JarOutputStream)
    should not close its given input stream
    + COMPRESS-596: Fix minor problem in examples.
    + COMPRESS-584: Add a limit to the copy buffer in
    IOUtils.readRange() to avoid reading more from a channel than
    asked for
    + Documentation nits
    + Replace wrapper Collections.sort is with an instance method
    directly
    + Replace manual comparisons with Comparator.comparingInt()
    + Replace manual copy of array contents with System.arraycopy()
    + Fix thread safety issues when encoding 7z password
    + bzip2: calculate median-of-3 on unsigned values
    + Use Math.min and Math.max calculations.
    + COMPRESS-603: Expander should be able to work if an entry's
    name is "./".
    + COMPRESS-604: Ensure compatibility with Java 8
    + Use StringBuilder instead of StringBuffer.
    + Inline variable. Remove redundant local variable.
    + Use compare method
    + Remove Unnecessary interface modifiers
    + Avoid use C-style array declaration.
    + ChecksumVerifyingInputStream.read() does not always validate
    checksum at end-of-stream
    + Fix TarFileTest
    + COMPRESS-625: Update Wikipedia link in TarUtils.java:627.
    + COMPRESS-626: OutOfMemoryError on malformed pack200 input
    (attributes).
    + COMPRESS-628: OutOfMemoryError on malformed pack200 input
    (org.apache.commons.compress.harmony.pack200.NewAttributeBands
    .readNextUnionCase).
    + COMPRESS-628: OutOfMemoryError on malformed unpack200 input
    (org.apache.commons.compress.harmony.unpack200
    .NewAttributeBands.readNextUnionCase).
    + Some input streams are not closed in org.apache.commons
    .compress.harmony.pack200.PackingUtils
    + COMPRESS-627: Pack200 causes a 'archive.3E' error if it's not
    in the system class loader.
- Modified patches:
  * 0001-Remove-Brotli-compressor.patch
  * 0002-Remove-ZSTD-compressor.patch
  * 0003-Remove-Pack200-compressor.patch
    + rediff to changed context
- Removed patch:
  * fix_java_8_compatibility.patch
    + not needed, since we handle the compatibility differently</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Upgrade to 1.26.1
  * Fixed Bugs
    + COMPRESS-659: TarArchiveOutputStream should use Commons IO
    Charsets instead of Commons Codec Charsets.
    + COMPRESS-660: Add org.apache.commons.codec to OSGi imports.
    + COMPRESS-664 Return null value from getNextEntry() for empty
    file.
    + COMPRESS-664: Remove unused variables in tests.
    + COMPRESS-666: Multithreaded access to Tar archive throws
    java.util.zip.ZipException: Corrupt GZIP trailer.
    + COMPRESS-644: ArchiveStreamFactory.detect(InputStream) returns
    TAR for ICO file.
    + COMPRESS-661: ArchiveInputStream markSupported should always
    return false.
    + COMPRESS-662: Remove out of date jar and scripts.</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to 1.28.0
  * New Features
    + Add GzipParameters.getModificationInstant()
    + Add GzipParameters.setModificationInstant(Instant)
    + Add GzipParameters.OS, setOS(OS), getOS()
    + Add GzipParameters.toString()
    + COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset)
    and getFileNameCharset() to override the default ISO-8859-1
    Charset
    + Add support for gzip extra subfields, see
    GzipParameters.setExtra(HeaderExtraField)
    + Add CompressFilterOutputStream and refactor to use
    + Add ZipFile.stream()
    + GzipCompressorInputStream reads the modification time (MTIME)
    and stores its value incorrectly multiplied by 1,000
    + GzipCompressorInputStream writes the modification time (MTIME)
    the value incorrectly divided by 1,000
    + Add optional FHCRC to GZIP header
    + Add GzipCompressorInputStream.Builder allowing to customize
    the file name and comment Charsets
    + Add GzipCompressorInputStream.Builder
    .setOnMemberStart(IOConsumer) to monitor member parsing
    + Add GzipCompressorInputStream.Builder
    .setOnMemberEnd(IOConsumer) to monitor member parsing
    + Add PMD check to default Maven goal
    + Add SevenZFile.Builder.setMaxMemoryLimitKiB(int)
    + Add MemoryLimitException.MemoryLimitException(long, int,
    Throwable) and deprecate MemoryLimitException
    .MemoryLimitException(long, int, Exception)
    + COMPRESS-692: Add support for zstd compression in zip archives
    + Add support for XZ compression in ZIP archives
    + COMPRESS-695: Add ZipArchiveInputStream
    .createZstdInputStream(InputStream) to provide a different
    InputStream implementation for Zstandard (Zstd)
    + Add org.apache.commons.compress.harmony.pack200
    .Pack200Exception.Pack200Exception(String, Throwable)
    + COMPRESS-697: Move BitStream.nextBit() method to BitInputStream
    + Add org.apache.commons.compress.compressors.lzma
    .LZMACompressorInputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.lzma
    .LZMACompressorOutputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz
    .XZCompressorInputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz
    .XZCompressorOutputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz
    .ZstdCompressorOutputStream.builder/Builder()
    + Add org.apache.commons.compress.compressors.xz.ZstdConstants
    + Add org.apache.commons.compress.archivers.ArchiveException
    .requireNonNull(T, Supplier&lt;String&gt;)
    + Add org.apache.commons.compress.compressors
    .CompressorException as the root for all custom exceptions
    ArchiveException and CompressorException
    + Add ArchiveException.ArchiveException(String, Throwable)
    + Add ArchiveException.ArchiveException(Throwable)
    + Add org.apache.commons.compress.archivers.sevenz
    .SevenZArchiveEntry.isEmptyStream()
    + Add generics for org.apache.commons.compress.compressors
    .CompressorStreamProvider.createCompressorOutputStream(String, T)
  * Fixed Bugs
    + COMPRESS-686: Better exception messages in
    SeekableInMemoryByteChannel
    + COMPRESS-691: ZipArchiveOutputStream.addRawArchiveEntry()
    should check is2PhaseSource
    + ArchiveException extends IOException
    + CompressorException extends IOException
    + Update outdated descriptions in IOUtils and IOUtilsTest
    + Remove unused local variable in ZipFile
    + Optimize ZipEightByteInteger
    + ZipEightByteInteger.toString() now returns a number string
    without text prefix, like BigInteger
    + Throw an IllegalArgumentException when a file name or comment
    in gzip parameters encodes to a byte array with a 0 byte
    + Update outdated links in ZipMethod Javadoc
    + Deprecate ZipUtil.signedByteToUnsignedInt(byte) in favor of
    Byte.toUnsignedInt(byte)
    + ZipArchiveOutputStream.close() does not close its underlying
    output stream
    + ZipArchiveOutputStream.close() does not close its underlying
    output stream
    + Don't use deprecated code in TarArchiveInputStream
    + Don't use deprecated code in TarFile
    + CpioArchiveInputStream.read(byte[], int, int) now throws an
    IOException on a data pad count mismatch
    + CpioArchiveInputStream.readNewEntry(boolean) now throws an
    IOException on a header pad count mismatch
    + CpioArchiveInputStream.readOldBinaryEntry(boolean) now throws
    an IOException on a header pad count mismatch
    + Fix Javadoc and names in the org.apache.commons.compress
    .archivers.sevenz package to specify kibibyte scale in memory
    limits
    + Fix Javadoc and names in the org.apache.commons.compress
    .compressors.lzw package to specify kibibyte scale in memory
    limits
    + Fix Javadoc and names in the org.apache.commons.compress
    .compressors.z package to specify kibibyte scale in memory
    limits
    + Refactor LZ77Compressor block classes to reduce duplication
    + Package-private and private classes can be final
    + Deprecate ArjArchiveEntry.HostOs.HostOs()
    + Drop coveralls reference (no longer needed)
    + Some ZIP operations won't read all data from a non-blocking
    file channel
    + COMPRESS-696: ZipArchiveInputStream.getCompressedCount()
    throws NullPointerException if called before getNextEntry()
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getConstantPoolEntry(int, long) now
    throws Pack200Exception instead of Error and does better range
    checking of the index argument
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getInitMethodPoolEntry(int, long, String)
    now throws Pack200Exception instead of Error and does better
    range checking of the index argument
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getInitMethodPoolEntry(int, long, String)
    now throws Pack200Exception instead of Error on bad constant
    pool type input
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getClassSpecificPoolEntry(int, long,
    String) now throws Pack200Exception instead of Error on bad
    constant pool type input
    + org.apache.commons.compress.harmony.unpack200
    .SegmentConstantPool.getClassPoolEntry(String) now throws
    Pack200Exception instead of Error on some bad inputs and
    states
    + org.apache.commons.compress.harmony.unpack200.bytecode
    .ByteCode.extractOperands(OperandManager, Segment, int) now
    throws Pack200Exception instead of Error on some bad inputs
    and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .ByteCodeForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode
    .CodeAttribute.CodeAttribute(int, int, byte[], Segment,
    OperandManager, List) now throws Pack200Exception instead of
    Error on some bad inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .IMethodRefForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .MultiANewArrayForm.setByteCodeOperands(ByteCode,
    OperandManager, int) now throws Pack200Exception instead of
    Error on some bad inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .NewClassRefForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + org.apache.commons.compress.harmony.unpack200.bytecode.forms
    .ReferenceForm.setByteCodeOperands(ByteCode, OperandManager,
    int) now throws Pack200Exception instead of Error on some bad
    inputs and states
    + Deprecate org.apache.commons.compress.harmony.pack200
    .CanonicalCodecFamilies.CanonicalCodecFamilies()
    + Deprecate FileNameUtils#getBaseName(Path)
    + Deprecate FileNameUtils#getExtension(Path)
    + org.apache.commons.compress.harmony.unpack200.Archive.unpack()
    should not log to system out (the console)
    + [site] Fix minor zip docs type: remove extraneous 'a'
    + Throw a better exception in org.apache.commons.compress
    .archivers.sevenz.SevenZFile.readFilesInfo(ByteBuffer,
    Archive)
    + MemoryLimitException now extends CompressException instead of
    IOException (CompressException extends IOException)
    + DumpArchiveException now extends ArchiveException instead of
    IOException (ArchiveException extends CompressException)
    + PasswordRequiredException now extends CompressException
    instead of IOException (CompressException extends IOException)
    + Pack200Exception now extends CompressException instead of
    IOException (CompressException extends IOException)
    + ArArchiveInputStream.getBSDLongName(String) now throws its
    EOFException with a message
    + ZipEncodingHelper.getZipEncoding(*) can throw
    NullPointerException and IllegalArgumentException on bad input
    instead of returning a value using the default Charset
    + Javadoc improvements throughout
    + COMPRESS-699: ArchiveStreamFactory.detect(inputStream)
    ArchiveException for TAR regression
    + COMPRESS-700: Can't detect file
    flutter_awesome_buttons-0.1.0.tar as a TAR file
    + Deprecate org.apache.commons.compress.utils.TimeUtils
    .toUnixTime(FileTime) in favor of org.apache.commons.io.file
    .attribute.FileTimes.toUnixTime(FileTime)
    + Deprecate org.apache.commons.compress.utils.TimeUtils
    .truncateToHundredNanos(FileTime)
  * Changes
    + Bump org.apache.commons:commons-parent from 72 to 85
    + Bump com.github.luben:zstd-jni from 1.5.6-4 to 1.5.7-4
    + Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.18.0
    + Bump commons-io:commons-io from 2.16.1 to 2.20.0
    + Bump com.github.marschall:memoryfilesystem from 2.8.0 to 2.8.1
    + Bump org.ow2.asm:asm from 9.7 to 9.7.1
    + Bump commons-codec:commons-codec from 1.17.1 to 1.19.0
  * Removed
    + COMPRESS-638: GzipCompressorOutputStream no longer
    percent-endcodes in US-ASCII a file name or comment that the
    Charset in GzipParameters.setFileNameCharset(Charset) cannot
    encode
    + Remove ZstdCompressorOutputStream.toString(), it was
    misleading by returning the delegate's toString()
- Changes of version 1.27.1
  * Fixed Bugs
    + COMPRESS-686: Compression into BZip2 format has unexpected end
    of file when using a BufferedOutputStream
    + Changes
    + Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0
- Changes of version 1.27.0
  * New Features
    + Add ArchiveInputStream.forEach(IOConsumer)
    + Add ArchiveInputStream.iterator()
    + Add ArchiveOutputStream.isFinished()
    + Add ArchiveOutputStream.checkFinished()
  * Fixed Bugs
    + Fix PMD UnnecessaryFullyQualifiedName and others
    + COMPRESS-681: Support reading a 7z file that writing archive
    properties
    + Upgrade commons-io from 2.15.1 to 2.16.1
    + CompressorOutputStream now extends FilterOutputStream
    + ArchiveOutputStream now extends FilterOutputStream
    + COMPRESS-685: Update Javadoc description for
    GzipCompressorInputStream
    + Replace FileNameUtil.getCompressedFileName(String) use of
    Locale.ENGLISH with Locale.ROOT
    + Fix SpotBugs DLS_DEAD_LOCAL_STORE in
    SevenZFile.readPackInfo(ByteBuffer, Archive)
    + Fix SpotBugs NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE in
    ZipFile.openZipChannel(Path, long, OpenOption[])
    + Fix SpotBugs UC_USELESS_OBJECT in
    unpack200.CpBands.parseCpSignature(InputStream)
    + Fix PMD UselessOverridingMethod in
    unpack200.bytecode.InnerClassesAttribute
    + Fix PMD UselessOverridingMethod in
    unpack200.bytecode.LineNumberTableAttribute
    + Fix PMD CheckSkipResult in ZipArchiveInputStream.closeEntry()
  * Changes
    + COMPRESS-684: Replace assert with Exception
    + Bump org.apache.commons:commons-parent from 69 to 72
    + Bump PMD from 6.x to 7.2.0
    + Bump commons-codec:commons-codec from 1.17.0 to 1.17.1
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0
    + Bump com.github.luben:zstd-jni from 1.5.6-3 to 1.5.6-4
    + Bump org.tukaani:xz from 1.9 to 1.10
    + Bump org.hamcrest:hamcrest from 2.2 to 3.0
- Removed patches:
  * 0001-Remove-Brotli-compressor.patch
  * 0002-Remove-ZSTD-compressor.patch
  * 0003-Remove-Pack200-compressor.patch
    + we have now the dependencies for zstd and brotli</changelog>
</package>
<package pkgid="bce5f7c2eab95613a2b74fc878b4c8934ccdf740232a2b0a3b815345fecd9aa1dde7d702611c4da68dbbabd12399146bdac4d1e0a5dd6c31c70dc5002216db7e" name="apache-commons-configuration2" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of commons-configuration2 2.7</changelog>
  <changelog author="fstrba@suse.com" date="1695470400">- Upgrade to version 2.9
  * New features:
    + Implement Iterable in ImmutableNode.
    + Add PropertiesConfigurationLayout.getBlankLinesBefore() and
    deprecate getBlancLinesBefore().
    + Add PropertiesConfigurationLayout.setBlankLinesBefore() and
    deprecate setBlancLinesBefore().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .getBlankLines() and deprecate getBlancLines().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .setBlankLines() and deprecate setBlancLines().
    + CONFIGURATION-789: Add ImmutableConfiguration.getEnum()
    methods.
    + CONFIGURATION-789: Add ImmutableConfiguration.getDuration()
    methods.
  * Fixed bugs:
    + CONFIGURATION-753: Make interpolation of collections and
    arrays in ConfigurationInterpolator consistent with behavior
    of DefaultConversionHandler. Add ConfigurationInterpolator
    .setStringConverter to allow customized string conversion
    behavior.
    + CONFIGURATION-795: Computation of blank lines after header
    comment.
    + CONFIGURATION-801: Remove redundant initializer.
    + CONFIGURATION-802: Use final.
    + CONFIGURATION-803: Java 8 lambda improvements and more.
    + CONFIGURATION-804: Redundant local variable.
    + CONFIGURATION-805: Use try with resource.
    + CONFIGURATION-805: [Javadoc] Specify that typed getList
    returns null for missing key.
    + Mention EnvironmentConfiguration in the list of
    configuration sources.
    + CONFIGURATION-808: DefaultListDelimiterHandler.escapeList
    working only for List&lt;String&gt;.
    + Use final.
    + Replace test asserts by simpler but equivalent calls.
    + CONFIGURATION-764: Single Variable Interpolation.
    + Implement proper concurrency in ConstantLookup.
    + CONFIGURATION-813: Support new namespace jakarta.mail.*
    used by javamail 2.0+ (first release October 2020).
    + CONFIGURATION-799: CombinedConfiguration#getKeys() can
    throw NoSuchElementException.
    + CONFIGURATION-822: Fix ambiguity on the section determining.
    + Use Java style array decelerations.
    + Add ImmutableNode.stream().
    + Avoid NullPointerException in org.apache.commons
    .configuration2.web.AppletConfiguration.getKeysInternal().
    + Fix JDBC prepared statements leak in org.apache.commons
    .configuration2.DatabaseConfiguration
    .clearPropertyDirect(String).
  * Changes:
    + Unclosed file handle when reading config from JAR file URL.
    Add and use FileBasedBuilderProperties
    .setURL(URL, URLConnectionOptions).
    + Make default interpolation prefix lookups configurable via
    system property. Remove dns, url, and script lookups from
    defaults (bsc#1201279, CVE-2022-33980). If these lookups are
    required for use in AbstractConfiguration subclasses, they
    must be enabled via system property.
    See ConfigurationInterpolator .getDefaultPrefixLookups() for
    details.
- Generate ANT build system from maven as to avoid build cycles
  with maven-doxia-sitetools</changelog>
  <changelog author="gus.kenion@suse.com" date="1711108800">- Upgrade to version 2.10.1
  * Fixed Bugs:
    + java.lang.module.FindException: Module servlet.api not found.
    Fixes CONFIGURATION-839.
    + StackOverflowError adding property in
    AbstractListDelimiterHandler.flattenIterator(). Fixes
    CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
    + StackOverflowError calling
    ListDelimiterHandler.flatten(Object, int) with a cyclical
    object tree. Fixes CONFIGURATION-841. (bsc#1221793,
    CVE-2024-29133)
- Incldes changes from version 2.10.0
  * New features:
    +  [StepSecurity] ci: Harden GitHub Actions #307.
    +  ConfirgurationPropertySource doesn't supply resolved values
    [#309]. Fixes CONFIGURATION-834.
    +  Take prefix delimiter into account when
    SubsetConfiguration.getKeysInternal() is called #300.
    +  Guard ConfigurationMap against null configuration #355.
    +  Properties parser stack overflows on large single-key inputs
    [#369]. Fixes CONFIGURATION-838.
    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
    NullPointerException when no data source is set #368.
  * Fixed Bugs:
    +  Add AbstractConfiguration.getKeysInternal(String, String)
    [#300].
    +  Add ImmutableConfiguration.getKeys(String, String) #300.
    +  Add
    PrefixedKeysIterator.PrefixedKeysIterator(Iterator&lt;String%gt;,
    String, String) #300.
    +  Add Maven property project.build.outputTimestamp for build
    reproducibility.
    +  Guard PatternSubtreeConfigurationWrapper constructor against
    null #365.</changelog>
</package>
<package pkgid="6d475da9f398cc8c0f7d87f9c2103661804dec04bd1950402b2081e289bfcb92198e8dfc4b79bb1d58580de6e16cd7e3a205b99b92e6712b5e749be17ed282b6" name="apache-commons-configuration2" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of commons-configuration2 2.7</changelog>
  <changelog author="fstrba@suse.com" date="1695470400">- Upgrade to version 2.9
  * New features:
    + Implement Iterable in ImmutableNode.
    + Add PropertiesConfigurationLayout.getBlankLinesBefore() and
    deprecate getBlancLinesBefore().
    + Add PropertiesConfigurationLayout.setBlankLinesBefore() and
    deprecate setBlancLinesBefore().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .getBlankLines() and deprecate getBlancLines().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .setBlankLines() and deprecate setBlancLines().
    + CONFIGURATION-789: Add ImmutableConfiguration.getEnum()
    methods.
    + CONFIGURATION-789: Add ImmutableConfiguration.getDuration()
    methods.
  * Fixed bugs:
    + CONFIGURATION-753: Make interpolation of collections and
    arrays in ConfigurationInterpolator consistent with behavior
    of DefaultConversionHandler. Add ConfigurationInterpolator
    .setStringConverter to allow customized string conversion
    behavior.
    + CONFIGURATION-795: Computation of blank lines after header
    comment.
    + CONFIGURATION-801: Remove redundant initializer.
    + CONFIGURATION-802: Use final.
    + CONFIGURATION-803: Java 8 lambda improvements and more.
    + CONFIGURATION-804: Redundant local variable.
    + CONFIGURATION-805: Use try with resource.
    + CONFIGURATION-805: [Javadoc] Specify that typed getList
    returns null for missing key.
    + Mention EnvironmentConfiguration in the list of
    configuration sources.
    + CONFIGURATION-808: DefaultListDelimiterHandler.escapeList
    working only for List&lt;String&gt;.
    + Use final.
    + Replace test asserts by simpler but equivalent calls.
    + CONFIGURATION-764: Single Variable Interpolation.
    + Implement proper concurrency in ConstantLookup.
    + CONFIGURATION-813: Support new namespace jakarta.mail.*
    used by javamail 2.0+ (first release October 2020).
    + CONFIGURATION-799: CombinedConfiguration#getKeys() can
    throw NoSuchElementException.
    + CONFIGURATION-822: Fix ambiguity on the section determining.
    + Use Java style array decelerations.
    + Add ImmutableNode.stream().
    + Avoid NullPointerException in org.apache.commons
    .configuration2.web.AppletConfiguration.getKeysInternal().
    + Fix JDBC prepared statements leak in org.apache.commons
    .configuration2.DatabaseConfiguration
    .clearPropertyDirect(String).
  * Changes:
    + Unclosed file handle when reading config from JAR file URL.
    Add and use FileBasedBuilderProperties
    .setURL(URL, URLConnectionOptions).
    + Make default interpolation prefix lookups configurable via
    system property. Remove dns, url, and script lookups from
    defaults (bsc#1201279, CVE-2022-33980). If these lookups are
    required for use in AbstractConfiguration subclasses, they
    must be enabled via system property.
    See ConfigurationInterpolator .getDefaultPrefixLookups() for
    details.
- Generate ANT build system from maven as to avoid build cycles
  with maven-doxia-sitetools</changelog>
  <changelog author="gus.kenion@suse.com" date="1711108800">- Upgrade to version 2.10.1
  * Fixed Bugs:
    + java.lang.module.FindException: Module servlet.api not found.
    Fixes CONFIGURATION-839.
    + StackOverflowError adding property in
    AbstractListDelimiterHandler.flattenIterator(). Fixes
    CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
    + StackOverflowError calling
    ListDelimiterHandler.flatten(Object, int) with a cyclical
    object tree. Fixes CONFIGURATION-841. (bsc#1221793,
    CVE-2024-29133)
- Incldes changes from version 2.10.0
  * New features:
    +  [StepSecurity] ci: Harden GitHub Actions #307.
    +  ConfirgurationPropertySource doesn't supply resolved values
    [#309]. Fixes CONFIGURATION-834.
    +  Take prefix delimiter into account when
    SubsetConfiguration.getKeysInternal() is called #300.
    +  Guard ConfigurationMap against null configuration #355.
    +  Properties parser stack overflows on large single-key inputs
    [#369]. Fixes CONFIGURATION-838.
    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
    NullPointerException when no data source is set #368.
  * Fixed Bugs:
    +  Add AbstractConfiguration.getKeysInternal(String, String)
    [#300].
    +  Add ImmutableConfiguration.getKeys(String, String) #300.
    +  Add
    PrefixedKeysIterator.PrefixedKeysIterator(Iterator&lt;String%gt;,
    String, String) #300.
    +  Add Maven property project.build.outputTimestamp for build
    reproducibility.
    +  Guard PatternSubtreeConfigurationWrapper constructor against
    null #365.</changelog>
  <changelog author="fstrba@suse.com" date="1778760000">- Upgrade to version 2.11.0
  * New features
    + CONFIGURATION-844: Add support for empty sections
    + Add ImmutableConfiguration.containsValue(Object)
  * Fixed Bugs
    + Fail-fast with a NullPointerException if DataConfiguration
    .DataConfiguration(Configuration) is called with null
    + Fail-fast with a NullPointerException if
    XMLPropertiesConfiguration.XMLPropertiesConfiguration(Element)
    is called with null
    + Fail-fast with a NullPointerException if a SubsetConfiguration
    constructor is called with a null Configuration
    + CONFIGURATION-843: Methods should not be empty
    + Guard MapConfiguration against null maps
    + Fail-fast with a NullPointerException if
    AppletConfiguration(Applet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(ServletConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(ServletContext) is called with null
    + Fail-fast with a NullPointerException if
    ServletFilterConfiguration(FilterConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletRequestConfiguration(ServletRequest) is called with
    null
    + Deprecate DatabaseConfiguration.getDatasource() in favor of
    getDataSource()
    + Fix PMD DynamicCombinedConfiguration in
    AbstractImmutableNodeHandler
    + Fix PMD DynamicCombinedConfiguration in
    AbstractListDelimiterHandler
    + Fix PMD DynamicCombinedConfiguration in
    DefaultPrefixLookupsHolder
    + Fix PMD DynamicCombinedConfiguration in
    DynamicCombinedConfiguration
    + Fix PMD DynamicCombinedConfiguration in
    PropertiesConfiguration
    + CONFIGURATION-846: Restore previous behavior allowing Spring
    to inject multiple values
    + CONFIGURATION-847: Property with an empty string value was not
    processed</changelog>
  <changelog author="fstrba@suse.com" date="1778760001">- Upgrade to version 2.12.0
  * New features:
    + Add PrefixedKeysIterator.toString() to package-private
    PrefixedKeysIterator
    + CONFIGURATION-836: New web configurations using the
    jakarta.servlet namespace are now available
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletContextConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletFilterConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletRequestConfiguration
    + Add org.apache.commons.configuration2
    .AbstractHierarchicalConfiguration.getKeysInternal(String,
    String)
  * Fixed Bugs:
    + PropertyConverter.to(Class, Object, DefaultConversionHandler)
    doesn't convert custom java.lang.Number subclasses
    + DefaultConversionHandler.convertValue(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + DefaultConversionHandler.to(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + CONFIGURATION-848: SubsetConfiguration does not account for
    delimiters as it did in 2.9.0
    + CONFIGURATION-848: CompositeConfiguration does not account for
    delimiters as it did in 2.9.0
    + Describe the security model
    + De-emphasize the 1.x version line on the website
    + CONFIGURATION-851: HomeDirectoryLocationStrategy no longer
    resolves the user HOME directory correctly</changelog>
  <changelog author="fstrba@suse.com" date="1778760002">- Upgrade to version 2.13.0
  * New features
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .entrySet()
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .forEach(BiConsumer&lt;String, Object&gt;)
    + Add VEX entry for CVE-2025-48924
  * Fixed Bugs
    + Shared primitive variable "throwExceptionOnMissing" in one
    thread may not yield the value of the most recent write from
    another thread [org.apache.commons.configuration2
    .AbstractConfiguration] At AbstractConfiguration.java:
    [line 1493] AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Shared primitive variable "forceSingleLine" in one thread may
    not yield the value of the most recent write from another
    thread [org.apache.commons.configuration2
    .PropertiesConfigurationLayout]
    At PropertiesConfigurationLayout.java:[line 821]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + CONFIGURATION-849: Fix undoubling of strings
    + CONFIGURATION-852: Mark the package jakarta.servlet.* import
    as optional in OSGi
    + Fix build [WARNING] Parameter 'forkMode' is unknown for plugin
    'maven-surefire-plugin:3.5.3:test (default-test)'</changelog>
  <changelog author="fstrba@suse.com" date="1778760003">- Upgrade to version 2.14.0
  * New features
    + Add XMLConfiguration.read(Element)
    + Add ConfigurationException.ConfigurationException(String,
    Object...)
    + Add ConfigurationException.ConfigurationException(Throwable,
    String, Object...)
    + Add ConversionException.ConversionException(String, Object...)
    + Add ConversionException.ConversionException(Throwable, String,
    Object...)
    + Add ConfigurationRuntimeException
    .ConfigurationRuntimeException(Throwable, String, Object...)
  * Fixed Bugs
    + Fix Apache RAT plugin console warnings
    + Migrate from deprecated APIs</changelog>
  <changelog author="fstrba@suse.com" date="1778760004">- Upgrade to version 2.15.0
  * Changes
    + Disable include schemes http[s] by default, see
    AbstractFileLocationStrategy
    + Detect and avoid processing cycles in YAML input
    (YAMLConfiguration) (bsc#1265299, CVE-2026-45205)
    + Extend scheme validation to inner schemes of jar: URLs</changelog>
</package>
<package pkgid="12048a7a6d5a5350226b8cff3f7a8d55913ed88f62e020cd219c0b0e9283e85c6d1151dad5ed0347f4c16b1cc400149db14ed86ca34f26d3498cd57c0c4108cf" name="apache-commons-configuration2" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of commons-configuration2 2.7</changelog>
  <changelog author="fstrba@suse.com" date="1695470400">- Upgrade to version 2.9
  * New features:
    + Implement Iterable in ImmutableNode.
    + Add PropertiesConfigurationLayout.getBlankLinesBefore() and
    deprecate getBlancLinesBefore().
    + Add PropertiesConfigurationLayout.setBlankLinesBefore() and
    deprecate setBlancLinesBefore().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .getBlankLines() and deprecate getBlancLines().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .setBlankLines() and deprecate setBlancLines().
    + CONFIGURATION-789: Add ImmutableConfiguration.getEnum()
    methods.
    + CONFIGURATION-789: Add ImmutableConfiguration.getDuration()
    methods.
  * Fixed bugs:
    + CONFIGURATION-753: Make interpolation of collections and
    arrays in ConfigurationInterpolator consistent with behavior
    of DefaultConversionHandler. Add ConfigurationInterpolator
    .setStringConverter to allow customized string conversion
    behavior.
    + CONFIGURATION-795: Computation of blank lines after header
    comment.
    + CONFIGURATION-801: Remove redundant initializer.
    + CONFIGURATION-802: Use final.
    + CONFIGURATION-803: Java 8 lambda improvements and more.
    + CONFIGURATION-804: Redundant local variable.
    + CONFIGURATION-805: Use try with resource.
    + CONFIGURATION-805: [Javadoc] Specify that typed getList
    returns null for missing key.
    + Mention EnvironmentConfiguration in the list of
    configuration sources.
    + CONFIGURATION-808: DefaultListDelimiterHandler.escapeList
    working only for List&lt;String&gt;.
    + Use final.
    + Replace test asserts by simpler but equivalent calls.
    + CONFIGURATION-764: Single Variable Interpolation.
    + Implement proper concurrency in ConstantLookup.
    + CONFIGURATION-813: Support new namespace jakarta.mail.*
    used by javamail 2.0+ (first release October 2020).
    + CONFIGURATION-799: CombinedConfiguration#getKeys() can
    throw NoSuchElementException.
    + CONFIGURATION-822: Fix ambiguity on the section determining.
    + Use Java style array decelerations.
    + Add ImmutableNode.stream().
    + Avoid NullPointerException in org.apache.commons
    .configuration2.web.AppletConfiguration.getKeysInternal().
    + Fix JDBC prepared statements leak in org.apache.commons
    .configuration2.DatabaseConfiguration
    .clearPropertyDirect(String).
  * Changes:
    + Unclosed file handle when reading config from JAR file URL.
    Add and use FileBasedBuilderProperties
    .setURL(URL, URLConnectionOptions).
    + Make default interpolation prefix lookups configurable via
    system property. Remove dns, url, and script lookups from
    defaults (bsc#1201279, CVE-2022-33980). If these lookups are
    required for use in AbstractConfiguration subclasses, they
    must be enabled via system property.
    See ConfigurationInterpolator .getDefaultPrefixLookups() for
    details.
- Generate ANT build system from maven as to avoid build cycles
  with maven-doxia-sitetools</changelog>
  <changelog author="gus.kenion@suse.com" date="1711108800">- Upgrade to version 2.10.1
  * Fixed Bugs:
    + java.lang.module.FindException: Module servlet.api not found.
    Fixes CONFIGURATION-839.
    + StackOverflowError adding property in
    AbstractListDelimiterHandler.flattenIterator(). Fixes
    CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
    + StackOverflowError calling
    ListDelimiterHandler.flatten(Object, int) with a cyclical
    object tree. Fixes CONFIGURATION-841. (bsc#1221793,
    CVE-2024-29133)
- Incldes changes from version 2.10.0
  * New features:
    +  [StepSecurity] ci: Harden GitHub Actions #307.
    +  ConfirgurationPropertySource doesn't supply resolved values
    [#309]. Fixes CONFIGURATION-834.
    +  Take prefix delimiter into account when
    SubsetConfiguration.getKeysInternal() is called #300.
    +  Guard ConfigurationMap against null configuration #355.
    +  Properties parser stack overflows on large single-key inputs
    [#369]. Fixes CONFIGURATION-838.
    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
    NullPointerException when no data source is set #368.
  * Fixed Bugs:
    +  Add AbstractConfiguration.getKeysInternal(String, String)
    [#300].
    +  Add ImmutableConfiguration.getKeys(String, String) #300.
    +  Add
    PrefixedKeysIterator.PrefixedKeysIterator(Iterator&lt;String%gt;,
    String, String) #300.
    +  Add Maven property project.build.outputTimestamp for build
    reproducibility.
    +  Guard PatternSubtreeConfigurationWrapper constructor against
    null #365.</changelog>
  <changelog author="fstrba@suse.com" date="1778760000">- Upgrade to version 2.11.0
  * New features
    + CONFIGURATION-844: Add support for empty sections
    + Add ImmutableConfiguration.containsValue(Object)
  * Fixed Bugs
    + Fail-fast with a NullPointerException if DataConfiguration
    .DataConfiguration(Configuration) is called with null
    + Fail-fast with a NullPointerException if
    XMLPropertiesConfiguration.XMLPropertiesConfiguration(Element)
    is called with null
    + Fail-fast with a NullPointerException if a SubsetConfiguration
    constructor is called with a null Configuration
    + CONFIGURATION-843: Methods should not be empty
    + Guard MapConfiguration against null maps
    + Fail-fast with a NullPointerException if
    AppletConfiguration(Applet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(ServletConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(ServletContext) is called with null
    + Fail-fast with a NullPointerException if
    ServletFilterConfiguration(FilterConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletRequestConfiguration(ServletRequest) is called with
    null
    + Deprecate DatabaseConfiguration.getDatasource() in favor of
    getDataSource()
    + Fix PMD DynamicCombinedConfiguration in
    AbstractImmutableNodeHandler
    + Fix PMD DynamicCombinedConfiguration in
    AbstractListDelimiterHandler
    + Fix PMD DynamicCombinedConfiguration in
    DefaultPrefixLookupsHolder
    + Fix PMD DynamicCombinedConfiguration in
    DynamicCombinedConfiguration
    + Fix PMD DynamicCombinedConfiguration in
    PropertiesConfiguration
    + CONFIGURATION-846: Restore previous behavior allowing Spring
    to inject multiple values
    + CONFIGURATION-847: Property with an empty string value was not
    processed</changelog>
  <changelog author="fstrba@suse.com" date="1778760001">- Upgrade to version 2.12.0
  * New features:
    + Add PrefixedKeysIterator.toString() to package-private
    PrefixedKeysIterator
    + CONFIGURATION-836: New web configurations using the
    jakarta.servlet namespace are now available
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletContextConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletFilterConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletRequestConfiguration
    + Add org.apache.commons.configuration2
    .AbstractHierarchicalConfiguration.getKeysInternal(String,
    String)
  * Fixed Bugs:
    + PropertyConverter.to(Class, Object, DefaultConversionHandler)
    doesn't convert custom java.lang.Number subclasses
    + DefaultConversionHandler.convertValue(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + DefaultConversionHandler.to(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + CONFIGURATION-848: SubsetConfiguration does not account for
    delimiters as it did in 2.9.0
    + CONFIGURATION-848: CompositeConfiguration does not account for
    delimiters as it did in 2.9.0
    + Describe the security model
    + De-emphasize the 1.x version line on the website
    + CONFIGURATION-851: HomeDirectoryLocationStrategy no longer
    resolves the user HOME directory correctly</changelog>
  <changelog author="fstrba@suse.com" date="1778760002">- Upgrade to version 2.13.0
  * New features
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .entrySet()
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .forEach(BiConsumer&lt;String, Object&gt;)
    + Add VEX entry for CVE-2025-48924
  * Fixed Bugs
    + Shared primitive variable "throwExceptionOnMissing" in one
    thread may not yield the value of the most recent write from
    another thread [org.apache.commons.configuration2
    .AbstractConfiguration] At AbstractConfiguration.java:
    [line 1493] AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Shared primitive variable "forceSingleLine" in one thread may
    not yield the value of the most recent write from another
    thread [org.apache.commons.configuration2
    .PropertiesConfigurationLayout]
    At PropertiesConfigurationLayout.java:[line 821]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + CONFIGURATION-849: Fix undoubling of strings
    + CONFIGURATION-852: Mark the package jakarta.servlet.* import
    as optional in OSGi
    + Fix build [WARNING] Parameter 'forkMode' is unknown for plugin
    'maven-surefire-plugin:3.5.3:test (default-test)'</changelog>
  <changelog author="fstrba@suse.com" date="1778760003">- Upgrade to version 2.14.0
  * New features
    + Add XMLConfiguration.read(Element)
    + Add ConfigurationException.ConfigurationException(String,
    Object...)
    + Add ConfigurationException.ConfigurationException(Throwable,
    String, Object...)
    + Add ConversionException.ConversionException(String, Object...)
    + Add ConversionException.ConversionException(Throwable, String,
    Object...)
    + Add ConfigurationRuntimeException
    .ConfigurationRuntimeException(Throwable, String, Object...)
  * Fixed Bugs
    + Fix Apache RAT plugin console warnings
    + Migrate from deprecated APIs</changelog>
  <changelog author="fstrba@suse.com" date="1778760004">- Upgrade to version 2.15.0
  * Changes
    + Disable include schemes http[s] by default, see
    AbstractFileLocationStrategy
    + Detect and avoid processing cycles in YAML input
    (YAMLConfiguration) (bsc#1265299, CVE-2026-45205)
    + Extend scheme validation to inner schemes of jar: URLs</changelog>
  <changelog author="fstrba@suse.com" date="1781870400">- Upgrade to version 2.15.1
  * Fixed Bugs
    + CONFIGURATION-856: The artifact commons-io:commons-io is a
    normal dependency
    + Avoid NPE when combined location strategy sub strategies is
    immutable list (#639)
  * Changes
    + Bump org.apache.commons:commons-parent from 99 to 100</changelog>
</package>
<package pkgid="3ca7cd11e1c3fa75d06c622de4a9a8240ffcb2be444f038199f9d737a2c7dae46cbc65a3c6467879f50a50a6b203b89eaae2b86c9c58d02fb0f809460fe42b46" name="apache-commons-configuration2-javadoc" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of commons-configuration2 2.7</changelog>
  <changelog author="fstrba@suse.com" date="1695470400">- Upgrade to version 2.9
  * New features:
    + Implement Iterable in ImmutableNode.
    + Add PropertiesConfigurationLayout.getBlankLinesBefore() and
    deprecate getBlancLinesBefore().
    + Add PropertiesConfigurationLayout.setBlankLinesBefore() and
    deprecate setBlancLinesBefore().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .getBlankLines() and deprecate getBlancLines().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .setBlankLines() and deprecate setBlancLines().
    + CONFIGURATION-789: Add ImmutableConfiguration.getEnum()
    methods.
    + CONFIGURATION-789: Add ImmutableConfiguration.getDuration()
    methods.
  * Fixed bugs:
    + CONFIGURATION-753: Make interpolation of collections and
    arrays in ConfigurationInterpolator consistent with behavior
    of DefaultConversionHandler. Add ConfigurationInterpolator
    .setStringConverter to allow customized string conversion
    behavior.
    + CONFIGURATION-795: Computation of blank lines after header
    comment.
    + CONFIGURATION-801: Remove redundant initializer.
    + CONFIGURATION-802: Use final.
    + CONFIGURATION-803: Java 8 lambda improvements and more.
    + CONFIGURATION-804: Redundant local variable.
    + CONFIGURATION-805: Use try with resource.
    + CONFIGURATION-805: [Javadoc] Specify that typed getList
    returns null for missing key.
    + Mention EnvironmentConfiguration in the list of
    configuration sources.
    + CONFIGURATION-808: DefaultListDelimiterHandler.escapeList
    working only for List&lt;String&gt;.
    + Use final.
    + Replace test asserts by simpler but equivalent calls.
    + CONFIGURATION-764: Single Variable Interpolation.
    + Implement proper concurrency in ConstantLookup.
    + CONFIGURATION-813: Support new namespace jakarta.mail.*
    used by javamail 2.0+ (first release October 2020).
    + CONFIGURATION-799: CombinedConfiguration#getKeys() can
    throw NoSuchElementException.
    + CONFIGURATION-822: Fix ambiguity on the section determining.
    + Use Java style array decelerations.
    + Add ImmutableNode.stream().
    + Avoid NullPointerException in org.apache.commons
    .configuration2.web.AppletConfiguration.getKeysInternal().
    + Fix JDBC prepared statements leak in org.apache.commons
    .configuration2.DatabaseConfiguration
    .clearPropertyDirect(String).
  * Changes:
    + Unclosed file handle when reading config from JAR file URL.
    Add and use FileBasedBuilderProperties
    .setURL(URL, URLConnectionOptions).
    + Make default interpolation prefix lookups configurable via
    system property. Remove dns, url, and script lookups from
    defaults (bsc#1201279, CVE-2022-33980). If these lookups are
    required for use in AbstractConfiguration subclasses, they
    must be enabled via system property.
    See ConfigurationInterpolator .getDefaultPrefixLookups() for
    details.
- Generate ANT build system from maven as to avoid build cycles
  with maven-doxia-sitetools</changelog>
  <changelog author="gus.kenion@suse.com" date="1711108800">- Upgrade to version 2.10.1
  * Fixed Bugs:
    + java.lang.module.FindException: Module servlet.api not found.
    Fixes CONFIGURATION-839.
    + StackOverflowError adding property in
    AbstractListDelimiterHandler.flattenIterator(). Fixes
    CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
    + StackOverflowError calling
    ListDelimiterHandler.flatten(Object, int) with a cyclical
    object tree. Fixes CONFIGURATION-841. (bsc#1221793,
    CVE-2024-29133)
- Incldes changes from version 2.10.0
  * New features:
    +  [StepSecurity] ci: Harden GitHub Actions #307.
    +  ConfirgurationPropertySource doesn't supply resolved values
    [#309]. Fixes CONFIGURATION-834.
    +  Take prefix delimiter into account when
    SubsetConfiguration.getKeysInternal() is called #300.
    +  Guard ConfigurationMap against null configuration #355.
    +  Properties parser stack overflows on large single-key inputs
    [#369]. Fixes CONFIGURATION-838.
    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
    NullPointerException when no data source is set #368.
  * Fixed Bugs:
    +  Add AbstractConfiguration.getKeysInternal(String, String)
    [#300].
    +  Add ImmutableConfiguration.getKeys(String, String) #300.
    +  Add
    PrefixedKeysIterator.PrefixedKeysIterator(Iterator&lt;String%gt;,
    String, String) #300.
    +  Add Maven property project.build.outputTimestamp for build
    reproducibility.
    +  Guard PatternSubtreeConfigurationWrapper constructor against
    null #365.</changelog>
</package>
<package pkgid="03d194ebfe0fa02f9a73c957a70d735fc894aa7180d3d069052437d7610422db29744735ddbc8050927229b90203b8b86ba0cd9badf18fbb28ce9b8fa4b1570d" name="apache-commons-configuration2-javadoc" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of commons-configuration2 2.7</changelog>
  <changelog author="fstrba@suse.com" date="1695470400">- Upgrade to version 2.9
  * New features:
    + Implement Iterable in ImmutableNode.
    + Add PropertiesConfigurationLayout.getBlankLinesBefore() and
    deprecate getBlancLinesBefore().
    + Add PropertiesConfigurationLayout.setBlankLinesBefore() and
    deprecate setBlancLinesBefore().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .getBlankLines() and deprecate getBlancLines().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .setBlankLines() and deprecate setBlancLines().
    + CONFIGURATION-789: Add ImmutableConfiguration.getEnum()
    methods.
    + CONFIGURATION-789: Add ImmutableConfiguration.getDuration()
    methods.
  * Fixed bugs:
    + CONFIGURATION-753: Make interpolation of collections and
    arrays in ConfigurationInterpolator consistent with behavior
    of DefaultConversionHandler. Add ConfigurationInterpolator
    .setStringConverter to allow customized string conversion
    behavior.
    + CONFIGURATION-795: Computation of blank lines after header
    comment.
    + CONFIGURATION-801: Remove redundant initializer.
    + CONFIGURATION-802: Use final.
    + CONFIGURATION-803: Java 8 lambda improvements and more.
    + CONFIGURATION-804: Redundant local variable.
    + CONFIGURATION-805: Use try with resource.
    + CONFIGURATION-805: [Javadoc] Specify that typed getList
    returns null for missing key.
    + Mention EnvironmentConfiguration in the list of
    configuration sources.
    + CONFIGURATION-808: DefaultListDelimiterHandler.escapeList
    working only for List&lt;String&gt;.
    + Use final.
    + Replace test asserts by simpler but equivalent calls.
    + CONFIGURATION-764: Single Variable Interpolation.
    + Implement proper concurrency in ConstantLookup.
    + CONFIGURATION-813: Support new namespace jakarta.mail.*
    used by javamail 2.0+ (first release October 2020).
    + CONFIGURATION-799: CombinedConfiguration#getKeys() can
    throw NoSuchElementException.
    + CONFIGURATION-822: Fix ambiguity on the section determining.
    + Use Java style array decelerations.
    + Add ImmutableNode.stream().
    + Avoid NullPointerException in org.apache.commons
    .configuration2.web.AppletConfiguration.getKeysInternal().
    + Fix JDBC prepared statements leak in org.apache.commons
    .configuration2.DatabaseConfiguration
    .clearPropertyDirect(String).
  * Changes:
    + Unclosed file handle when reading config from JAR file URL.
    Add and use FileBasedBuilderProperties
    .setURL(URL, URLConnectionOptions).
    + Make default interpolation prefix lookups configurable via
    system property. Remove dns, url, and script lookups from
    defaults (bsc#1201279, CVE-2022-33980). If these lookups are
    required for use in AbstractConfiguration subclasses, they
    must be enabled via system property.
    See ConfigurationInterpolator .getDefaultPrefixLookups() for
    details.
- Generate ANT build system from maven as to avoid build cycles
  with maven-doxia-sitetools</changelog>
  <changelog author="gus.kenion@suse.com" date="1711108800">- Upgrade to version 2.10.1
  * Fixed Bugs:
    + java.lang.module.FindException: Module servlet.api not found.
    Fixes CONFIGURATION-839.
    + StackOverflowError adding property in
    AbstractListDelimiterHandler.flattenIterator(). Fixes
    CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
    + StackOverflowError calling
    ListDelimiterHandler.flatten(Object, int) with a cyclical
    object tree. Fixes CONFIGURATION-841. (bsc#1221793,
    CVE-2024-29133)
- Incldes changes from version 2.10.0
  * New features:
    +  [StepSecurity] ci: Harden GitHub Actions #307.
    +  ConfirgurationPropertySource doesn't supply resolved values
    [#309]. Fixes CONFIGURATION-834.
    +  Take prefix delimiter into account when
    SubsetConfiguration.getKeysInternal() is called #300.
    +  Guard ConfigurationMap against null configuration #355.
    +  Properties parser stack overflows on large single-key inputs
    [#369]. Fixes CONFIGURATION-838.
    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
    NullPointerException when no data source is set #368.
  * Fixed Bugs:
    +  Add AbstractConfiguration.getKeysInternal(String, String)
    [#300].
    +  Add ImmutableConfiguration.getKeys(String, String) #300.
    +  Add
    PrefixedKeysIterator.PrefixedKeysIterator(Iterator&lt;String%gt;,
    String, String) #300.
    +  Add Maven property project.build.outputTimestamp for build
    reproducibility.
    +  Guard PatternSubtreeConfigurationWrapper constructor against
    null #365.</changelog>
  <changelog author="fstrba@suse.com" date="1778760000">- Upgrade to version 2.11.0
  * New features
    + CONFIGURATION-844: Add support for empty sections
    + Add ImmutableConfiguration.containsValue(Object)
  * Fixed Bugs
    + Fail-fast with a NullPointerException if DataConfiguration
    .DataConfiguration(Configuration) is called with null
    + Fail-fast with a NullPointerException if
    XMLPropertiesConfiguration.XMLPropertiesConfiguration(Element)
    is called with null
    + Fail-fast with a NullPointerException if a SubsetConfiguration
    constructor is called with a null Configuration
    + CONFIGURATION-843: Methods should not be empty
    + Guard MapConfiguration against null maps
    + Fail-fast with a NullPointerException if
    AppletConfiguration(Applet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(ServletConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(ServletContext) is called with null
    + Fail-fast with a NullPointerException if
    ServletFilterConfiguration(FilterConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletRequestConfiguration(ServletRequest) is called with
    null
    + Deprecate DatabaseConfiguration.getDatasource() in favor of
    getDataSource()
    + Fix PMD DynamicCombinedConfiguration in
    AbstractImmutableNodeHandler
    + Fix PMD DynamicCombinedConfiguration in
    AbstractListDelimiterHandler
    + Fix PMD DynamicCombinedConfiguration in
    DefaultPrefixLookupsHolder
    + Fix PMD DynamicCombinedConfiguration in
    DynamicCombinedConfiguration
    + Fix PMD DynamicCombinedConfiguration in
    PropertiesConfiguration
    + CONFIGURATION-846: Restore previous behavior allowing Spring
    to inject multiple values
    + CONFIGURATION-847: Property with an empty string value was not
    processed</changelog>
  <changelog author="fstrba@suse.com" date="1778760001">- Upgrade to version 2.12.0
  * New features:
    + Add PrefixedKeysIterator.toString() to package-private
    PrefixedKeysIterator
    + CONFIGURATION-836: New web configurations using the
    jakarta.servlet namespace are now available
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletContextConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletFilterConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletRequestConfiguration
    + Add org.apache.commons.configuration2
    .AbstractHierarchicalConfiguration.getKeysInternal(String,
    String)
  * Fixed Bugs:
    + PropertyConverter.to(Class, Object, DefaultConversionHandler)
    doesn't convert custom java.lang.Number subclasses
    + DefaultConversionHandler.convertValue(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + DefaultConversionHandler.to(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + CONFIGURATION-848: SubsetConfiguration does not account for
    delimiters as it did in 2.9.0
    + CONFIGURATION-848: CompositeConfiguration does not account for
    delimiters as it did in 2.9.0
    + Describe the security model
    + De-emphasize the 1.x version line on the website
    + CONFIGURATION-851: HomeDirectoryLocationStrategy no longer
    resolves the user HOME directory correctly</changelog>
  <changelog author="fstrba@suse.com" date="1778760002">- Upgrade to version 2.13.0
  * New features
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .entrySet()
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .forEach(BiConsumer&lt;String, Object&gt;)
    + Add VEX entry for CVE-2025-48924
  * Fixed Bugs
    + Shared primitive variable "throwExceptionOnMissing" in one
    thread may not yield the value of the most recent write from
    another thread [org.apache.commons.configuration2
    .AbstractConfiguration] At AbstractConfiguration.java:
    [line 1493] AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Shared primitive variable "forceSingleLine" in one thread may
    not yield the value of the most recent write from another
    thread [org.apache.commons.configuration2
    .PropertiesConfigurationLayout]
    At PropertiesConfigurationLayout.java:[line 821]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + CONFIGURATION-849: Fix undoubling of strings
    + CONFIGURATION-852: Mark the package jakarta.servlet.* import
    as optional in OSGi
    + Fix build [WARNING] Parameter 'forkMode' is unknown for plugin
    'maven-surefire-plugin:3.5.3:test (default-test)'</changelog>
  <changelog author="fstrba@suse.com" date="1778760003">- Upgrade to version 2.14.0
  * New features
    + Add XMLConfiguration.read(Element)
    + Add ConfigurationException.ConfigurationException(String,
    Object...)
    + Add ConfigurationException.ConfigurationException(Throwable,
    String, Object...)
    + Add ConversionException.ConversionException(String, Object...)
    + Add ConversionException.ConversionException(Throwable, String,
    Object...)
    + Add ConfigurationRuntimeException
    .ConfigurationRuntimeException(Throwable, String, Object...)
  * Fixed Bugs
    + Fix Apache RAT plugin console warnings
    + Migrate from deprecated APIs</changelog>
  <changelog author="fstrba@suse.com" date="1778760004">- Upgrade to version 2.15.0
  * Changes
    + Disable include schemes http[s] by default, see
    AbstractFileLocationStrategy
    + Detect and avoid processing cycles in YAML input
    (YAMLConfiguration) (bsc#1265299, CVE-2026-45205)
    + Extend scheme validation to inner schemes of jar: URLs</changelog>
</package>
<package pkgid="360719808b39a4f89ee0bec3385654dffe46c72cbf9a6b68c10a33009b9c36072f4c8a59064ed0dfac0d438e315a83afb1d1528812b836b129bc25493f4f0b3c" name="apache-commons-configuration2-javadoc" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1646654400">- Initial packaging of commons-configuration2 2.7</changelog>
  <changelog author="fstrba@suse.com" date="1695470400">- Upgrade to version 2.9
  * New features:
    + Implement Iterable in ImmutableNode.
    + Add PropertiesConfigurationLayout.getBlankLinesBefore() and
    deprecate getBlancLinesBefore().
    + Add PropertiesConfigurationLayout.setBlankLinesBefore() and
    deprecate setBlancLinesBefore().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .getBlankLines() and deprecate getBlancLines().
    + Add PropertiesConfigurationLayout.PropertyLayoutData
    .setBlankLines() and deprecate setBlancLines().
    + CONFIGURATION-789: Add ImmutableConfiguration.getEnum()
    methods.
    + CONFIGURATION-789: Add ImmutableConfiguration.getDuration()
    methods.
  * Fixed bugs:
    + CONFIGURATION-753: Make interpolation of collections and
    arrays in ConfigurationInterpolator consistent with behavior
    of DefaultConversionHandler. Add ConfigurationInterpolator
    .setStringConverter to allow customized string conversion
    behavior.
    + CONFIGURATION-795: Computation of blank lines after header
    comment.
    + CONFIGURATION-801: Remove redundant initializer.
    + CONFIGURATION-802: Use final.
    + CONFIGURATION-803: Java 8 lambda improvements and more.
    + CONFIGURATION-804: Redundant local variable.
    + CONFIGURATION-805: Use try with resource.
    + CONFIGURATION-805: [Javadoc] Specify that typed getList
    returns null for missing key.
    + Mention EnvironmentConfiguration in the list of
    configuration sources.
    + CONFIGURATION-808: DefaultListDelimiterHandler.escapeList
    working only for List&lt;String&gt;.
    + Use final.
    + Replace test asserts by simpler but equivalent calls.
    + CONFIGURATION-764: Single Variable Interpolation.
    + Implement proper concurrency in ConstantLookup.
    + CONFIGURATION-813: Support new namespace jakarta.mail.*
    used by javamail 2.0+ (first release October 2020).
    + CONFIGURATION-799: CombinedConfiguration#getKeys() can
    throw NoSuchElementException.
    + CONFIGURATION-822: Fix ambiguity on the section determining.
    + Use Java style array decelerations.
    + Add ImmutableNode.stream().
    + Avoid NullPointerException in org.apache.commons
    .configuration2.web.AppletConfiguration.getKeysInternal().
    + Fix JDBC prepared statements leak in org.apache.commons
    .configuration2.DatabaseConfiguration
    .clearPropertyDirect(String).
  * Changes:
    + Unclosed file handle when reading config from JAR file URL.
    Add and use FileBasedBuilderProperties
    .setURL(URL, URLConnectionOptions).
    + Make default interpolation prefix lookups configurable via
    system property. Remove dns, url, and script lookups from
    defaults (bsc#1201279, CVE-2022-33980). If these lookups are
    required for use in AbstractConfiguration subclasses, they
    must be enabled via system property.
    See ConfigurationInterpolator .getDefaultPrefixLookups() for
    details.
- Generate ANT build system from maven as to avoid build cycles
  with maven-doxia-sitetools</changelog>
  <changelog author="gus.kenion@suse.com" date="1711108800">- Upgrade to version 2.10.1
  * Fixed Bugs:
    + java.lang.module.FindException: Module servlet.api not found.
    Fixes CONFIGURATION-839.
    + StackOverflowError adding property in
    AbstractListDelimiterHandler.flattenIterator(). Fixes
    CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
    + StackOverflowError calling
    ListDelimiterHandler.flatten(Object, int) with a cyclical
    object tree. Fixes CONFIGURATION-841. (bsc#1221793,
    CVE-2024-29133)
- Incldes changes from version 2.10.0
  * New features:
    +  [StepSecurity] ci: Harden GitHub Actions #307.
    +  ConfirgurationPropertySource doesn't supply resolved values
    [#309]. Fixes CONFIGURATION-834.
    +  Take prefix delimiter into account when
    SubsetConfiguration.getKeysInternal() is called #300.
    +  Guard ConfigurationMap against null configuration #355.
    +  Properties parser stack overflows on large single-key inputs
    [#369]. Fixes CONFIGURATION-838.
    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
    NullPointerException when no data source is set #368.
  * Fixed Bugs:
    +  Add AbstractConfiguration.getKeysInternal(String, String)
    [#300].
    +  Add ImmutableConfiguration.getKeys(String, String) #300.
    +  Add
    PrefixedKeysIterator.PrefixedKeysIterator(Iterator&lt;String%gt;,
    String, String) #300.
    +  Add Maven property project.build.outputTimestamp for build
    reproducibility.
    +  Guard PatternSubtreeConfigurationWrapper constructor against
    null #365.</changelog>
  <changelog author="fstrba@suse.com" date="1778760000">- Upgrade to version 2.11.0
  * New features
    + CONFIGURATION-844: Add support for empty sections
    + Add ImmutableConfiguration.containsValue(Object)
  * Fixed Bugs
    + Fail-fast with a NullPointerException if DataConfiguration
    .DataConfiguration(Configuration) is called with null
    + Fail-fast with a NullPointerException if
    XMLPropertiesConfiguration.XMLPropertiesConfiguration(Element)
    is called with null
    + Fail-fast with a NullPointerException if a SubsetConfiguration
    constructor is called with a null Configuration
    + CONFIGURATION-843: Methods should not be empty
    + Guard MapConfiguration against null maps
    + Fail-fast with a NullPointerException if
    AppletConfiguration(Applet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletConfiguration(ServletConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(Servlet) is called with null
    + Fail-fast with a NullPointerException if
    ServletContextConfiguration(ServletContext) is called with null
    + Fail-fast with a NullPointerException if
    ServletFilterConfiguration(FilterConfig) is called with null
    + Fail-fast with a NullPointerException if
    ServletRequestConfiguration(ServletRequest) is called with
    null
    + Deprecate DatabaseConfiguration.getDatasource() in favor of
    getDataSource()
    + Fix PMD DynamicCombinedConfiguration in
    AbstractImmutableNodeHandler
    + Fix PMD DynamicCombinedConfiguration in
    AbstractListDelimiterHandler
    + Fix PMD DynamicCombinedConfiguration in
    DefaultPrefixLookupsHolder
    + Fix PMD DynamicCombinedConfiguration in
    DynamicCombinedConfiguration
    + Fix PMD DynamicCombinedConfiguration in
    PropertiesConfiguration
    + CONFIGURATION-846: Restore previous behavior allowing Spring
    to inject multiple values
    + CONFIGURATION-847: Property with an empty string value was not
    processed</changelog>
  <changelog author="fstrba@suse.com" date="1778760001">- Upgrade to version 2.12.0
  * New features:
    + Add PrefixedKeysIterator.toString() to package-private
    PrefixedKeysIterator
    + CONFIGURATION-836: New web configurations using the
    jakarta.servlet namespace are now available
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletContextConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletFilterConfiguration
    + CONFIGURATION-836: Add org.apache.commons.configuration2.web
    .JakartaServletRequestConfiguration
    + Add org.apache.commons.configuration2
    .AbstractHierarchicalConfiguration.getKeysInternal(String,
    String)
  * Fixed Bugs:
    + PropertyConverter.to(Class, Object, DefaultConversionHandler)
    doesn't convert custom java.lang.Number subclasses
    + DefaultConversionHandler.convertValue(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + DefaultConversionHandler.to(Object, Class,
    ConfigurationInterpolator) doesn't convert custom java.lang
    .Number subclasses
    + CONFIGURATION-848: SubsetConfiguration does not account for
    delimiters as it did in 2.9.0
    + CONFIGURATION-848: CompositeConfiguration does not account for
    delimiters as it did in 2.9.0
    + Describe the security model
    + De-emphasize the 1.x version line on the website
    + CONFIGURATION-851: HomeDirectoryLocationStrategy no longer
    resolves the user HOME directory correctly</changelog>
  <changelog author="fstrba@suse.com" date="1778760002">- Upgrade to version 2.13.0
  * New features
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .entrySet()
    + Add org.apache.commons.configuration2.ImmutableConfiguration
    .forEach(BiConsumer&lt;String, Object&gt;)
    + Add VEX entry for CVE-2025-48924
  * Fixed Bugs
    + Shared primitive variable "throwExceptionOnMissing" in one
    thread may not yield the value of the most recent write from
    another thread [org.apache.commons.configuration2
    .AbstractConfiguration] At AbstractConfiguration.java:
    [line 1493] AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Shared primitive variable "forceSingleLine" in one thread may
    not yield the value of the most recent write from another
    thread [org.apache.commons.configuration2
    .PropertiesConfigurationLayout]
    At PropertiesConfigurationLayout.java:[line 821]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + CONFIGURATION-849: Fix undoubling of strings
    + CONFIGURATION-852: Mark the package jakarta.servlet.* import
    as optional in OSGi
    + Fix build [WARNING] Parameter 'forkMode' is unknown for plugin
    'maven-surefire-plugin:3.5.3:test (default-test)'</changelog>
  <changelog author="fstrba@suse.com" date="1778760003">- Upgrade to version 2.14.0
  * New features
    + Add XMLConfiguration.read(Element)
    + Add ConfigurationException.ConfigurationException(String,
    Object...)
    + Add ConfigurationException.ConfigurationException(Throwable,
    String, Object...)
    + Add ConversionException.ConversionException(String, Object...)
    + Add ConversionException.ConversionException(Throwable, String,
    Object...)
    + Add ConfigurationRuntimeException
    .ConfigurationRuntimeException(Throwable, String, Object...)
  * Fixed Bugs
    + Fix Apache RAT plugin console warnings
    + Migrate from deprecated APIs</changelog>
  <changelog author="fstrba@suse.com" date="1778760004">- Upgrade to version 2.15.0
  * Changes
    + Disable include schemes http[s] by default, see
    AbstractFileLocationStrategy
    + Detect and avoid processing cycles in YAML input
    (YAMLConfiguration) (bsc#1265299, CVE-2026-45205)
    + Extend scheme validation to inner schemes of jar: URLs</changelog>
  <changelog author="fstrba@suse.com" date="1781870400">- Upgrade to version 2.15.1
  * Fixed Bugs
    + CONFIGURATION-856: The artifact commons-io:commons-io is a
    normal dependency
    + Avoid NPE when combined location strategy sub strategies is
    immutable list (#639)
  * Changes
    + Bump org.apache.commons:commons-parent from 99 to 100</changelog>
</package>
<package pkgid="e28305e9a0e3d7892951dfb139dac0301466447788665f687e2024b19ed5f43b8725893be890e905fe889c76ad7a64e8671549fb6dcfd4cdd00f417d38f8c1b3" name="apache-commons-daemon" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1612353600">- Update to 1.2.4
  * Procrun. Ensure that log messages written to stdout and stderr
    are not lost during start-up.
  * Procrun. Correct a regression introduced in 1.2.3. Enable the
    service to start if the Options value is not present in the
    registry.
  * jsvc. Don't fail if the CAP_DAC_READ_SEARCH capability is not
    available. Fall back to using argv[0] rather than
    /proc/self/exe to determine the path for the current binary.
  * Improved JRE/JDK detection to support increased range of both
    JVM versions and vendors</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Define %%make_build for systems where it is not defined in
  rpm macros</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
</package>
<package pkgid="7c69d355f13f12037befe651f97b502865f6f8731b31901157bf6a5c2a1df59307b04482d553f3b90da05056a9b1451af522067621c1b30af56846cdfbee4669" name="apache-commons-daemon" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1743422400">- Upgrade to 1.4.1
  * Bug Fixes:
    + several issues around Java OS and header files location
    detection.
    + Correct several log messages where an incorrect placeholder
    led to truncation of the inserted values.
  * New Features
    + Add protection to avoid high CPU usage for applications
    running in JVM mode that do not wait for the stop method to
    be called before the start method returns. Fixes DAEMON-460.
    + The minimum Java version has been increased to Java 8
- Remove apache-commons-daemon-JAVA_OS.patch - patched in 1.4.1</changelog>
  <changelog author="fstrba@suse.com" date="1750075200">- Added patch:
  * apache-commons-daemon-gcc15-compat.patch
    + Fix build with GCC 15</changelog>
</package>
<package pkgid="c05354990ba583d6ce5e08fbbf44a05483a4e293d2507b9760ac6422f93d5875b1a9b87d88677241de32f24e1584744fbb402553442ba5c1f12fd7c4f0cc5e2b" name="apache-commons-daemon" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="160000.1.2"/>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1743422400">- Upgrade to 1.4.1
  * Bug Fixes:
    + several issues around Java OS and header files location
    detection.
    + Correct several log messages where an incorrect placeholder
    led to truncation of the inserted values.
  * New Features:
    + Add protection to avoid high CPU usage for applications
    running in JVM mode that do not wait for the stop method to
    be called before the start method returns. Fixes DAEMON-460.
    + The minimum Java version has been increased to Java 8
- Remove apache-commons-daemon-JAVA_OS.patch - patched in 1.4.1</changelog>
  <changelog author="fstrba@suse.com" date="1750075200">- Added patch:
  * apache-commons-daemon-gcc15-compat.patch
    + Fix build with GCC 15</changelog>
  <changelog author="fstrba@suse.com" date="1781870400">- Upgrade to 1.6.1
  * Bug Fixes:
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Document --enable-preview
    + Fix first appearance of --enable-native-access
    + Procrun. Fix redirection issues on some OS versions by using
    recommended method to redirect stdout and stderr.
    Fixes DAEMON-398.
    + Procrun. Fix updating of startup mode to 'Automatic (delayed)'
    being incorrectly processed as an update to 'Manual'.
    Fixes DAEMON-439.
    + Procrun. Fix timeout handling #238. Fixes DAEMON-468.
    + Procrun. Replace RTF version of license header with plain text
    version of full license in about box for monitor application.
    Fixes DAEMON-472.
    + Procrun. Service should be marked as stopped if the service
    worker crashes. Fixes DAEMON-475.
    + jsvc. Fix compilation warnings.
    + jsvc. Fix a regression in 1.5.1 that exposed long standing
    bugs around the locking and unlocking of pid files. Also fix
    the locking/unlocking bugs.
    + Detaches from console when the service stops #307. Fixes
    DAEMON-477.
    + jsvc. Correct a packaging error in the 1.6.0 native source
    tarball for *nix systems. Thanks to Michael Osipov.
  * New Features:
    + Add support for --enable-native-access Java startup option in
    jsvc. Fixes DAEMON-471.
    + Add tests for prunsrv on Windows #260.
    + Add Java API compatibility report to the site (JApiCmp).
    + Procun. Build binaries for Windows using the static hybrid CRT
    strategy by default.
    + jsvc. Use FreeBSD's setproctitle(3) to pass -procname similar
    to daemon(8).
    + procrun. Add ARM64 support for Windows binaries. Fixes
    DAEMON-462.
  * Update dependencies:
    + Bump org.apache.commons:commons-parent from 78 to 91 #253,
    [#255], #287.
    + Update to use new ASF logo
    + Bump org.apache.commons:commons-parent from 93 to 99.
    + jsvc. Consistently use strerror(3) for log output.</changelog>
</package>
<package pkgid="28ad2ab18875688f13fe6d31dc7d5b67a051ceaf80e5edfd8a323d28453dc54e3a9dff3c101fc7d01fc7879c76656d04fda73123f24a61786f0ecbd9b0d15f91" name="apache-commons-daemon-javadoc" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1612353600">- Update to 1.2.4
  * Procrun. Ensure that log messages written to stdout and stderr
    are not lost during start-up.
  * Procrun. Correct a regression introduced in 1.2.3. Enable the
    service to start if the Options value is not present in the
    registry.
  * jsvc. Don't fail if the CAP_DAC_READ_SEARCH capability is not
    available. Fall back to using argv[0] rather than
    /proc/self/exe to determine the path for the current binary.
  * Improved JRE/JDK detection to support increased range of both
    JVM versions and vendors</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Define %%make_build for systems where it is not defined in
  rpm macros</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
</package>
<package pkgid="7678e04dd710b479b3f4eea2186db4d92271dc82b5cc70a27be3f411ff7ad9fd2746962c900890d46de1c55bca29c0214bc61ae51ec5521f156baef47399e516" name="apache-commons-daemon-javadoc" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1743422400">- Upgrade to 1.4.1
  * Bug Fixes:
    + several issues around Java OS and header files location
    detection.
    + Correct several log messages where an incorrect placeholder
    led to truncation of the inserted values.
  * New Features
    + Add protection to avoid high CPU usage for applications
    running in JVM mode that do not wait for the stop method to
    be called before the start method returns. Fixes DAEMON-460.
    + The minimum Java version has been increased to Java 8
- Remove apache-commons-daemon-JAVA_OS.patch - patched in 1.4.1</changelog>
  <changelog author="fstrba@suse.com" date="1750075200">- Added patch:
  * apache-commons-daemon-gcc15-compat.patch
    + Fix build with GCC 15</changelog>
</package>
<package pkgid="0e0ace107c65cae7479963f1670545818d9e0d0093082f0b85df1be6cd0197e1ef943ca3491070c861fd38c787a717a6d8a78c62333176c32af59ef1cb971294" name="apache-commons-daemon-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.1.2"/>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1743422400">- Upgrade to 1.4.1
  * Bug Fixes:
    + several issues around Java OS and header files location
    detection.
    + Correct several log messages where an incorrect placeholder
    led to truncation of the inserted values.
  * New Features:
    + Add protection to avoid high CPU usage for applications
    running in JVM mode that do not wait for the stop method to
    be called before the start method returns. Fixes DAEMON-460.
    + The minimum Java version has been increased to Java 8
- Remove apache-commons-daemon-JAVA_OS.patch - patched in 1.4.1</changelog>
  <changelog author="fstrba@suse.com" date="1750075200">- Added patch:
  * apache-commons-daemon-gcc15-compat.patch
    + Fix build with GCC 15</changelog>
  <changelog author="fstrba@suse.com" date="1781870400">- Upgrade to 1.6.1
  * Bug Fixes:
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Document --enable-preview
    + Fix first appearance of --enable-native-access
    + Procrun. Fix redirection issues on some OS versions by using
    recommended method to redirect stdout and stderr.
    Fixes DAEMON-398.
    + Procrun. Fix updating of startup mode to 'Automatic (delayed)'
    being incorrectly processed as an update to 'Manual'.
    Fixes DAEMON-439.
    + Procrun. Fix timeout handling #238. Fixes DAEMON-468.
    + Procrun. Replace RTF version of license header with plain text
    version of full license in about box for monitor application.
    Fixes DAEMON-472.
    + Procrun. Service should be marked as stopped if the service
    worker crashes. Fixes DAEMON-475.
    + jsvc. Fix compilation warnings.
    + jsvc. Fix a regression in 1.5.1 that exposed long standing
    bugs around the locking and unlocking of pid files. Also fix
    the locking/unlocking bugs.
    + Detaches from console when the service stops #307. Fixes
    DAEMON-477.
    + jsvc. Correct a packaging error in the 1.6.0 native source
    tarball for *nix systems. Thanks to Michael Osipov.
  * New Features:
    + Add support for --enable-native-access Java startup option in
    jsvc. Fixes DAEMON-471.
    + Add tests for prunsrv on Windows #260.
    + Add Java API compatibility report to the site (JApiCmp).
    + Procun. Build binaries for Windows using the static hybrid CRT
    strategy by default.
    + jsvc. Use FreeBSD's setproctitle(3) to pass -procname similar
    to daemon(8).
    + procrun. Add ARM64 support for Windows binaries. Fixes
    DAEMON-462.
  * Update dependencies:
    + Bump org.apache.commons:commons-parent from 78 to 91 #253,
    [#255], #287.
    + Update to use new ASF logo
    + Bump org.apache.commons:commons-parent from 93 to 99.
    + jsvc. Consistently use strerror(3) for log output.</changelog>
</package>
<package pkgid="82dffb7bada29bc9076d7e90ef2fcccbcbfe2f09d1949f490558227b4705da6ad9bc3e64b4c3d10811e91eb7098f1fd94a34e8d3dfd9a9e5a7b9765f1d44036a" name="apache-commons-daemon-jsvc" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1612353600">- Update to 1.2.4
  * Procrun. Ensure that log messages written to stdout and stderr
    are not lost during start-up.
  * Procrun. Correct a regression introduced in 1.2.3. Enable the
    service to start if the Options value is not present in the
    registry.
  * jsvc. Don't fail if the CAP_DAC_READ_SEARCH capability is not
    available. Fall back to using argv[0] rather than
    /proc/self/exe to determine the path for the current binary.
  * Improved JRE/JDK detection to support increased range of both
    JVM versions and vendors</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Define %%make_build for systems where it is not defined in
  rpm macros</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
</package>
<package pkgid="0fb09e9af9b4cf1adae9dd20ba06c638e1ac6c6b18b6a3dd3a7fce732f4966dc4f0af961f36871411eb6660135625f37e182fde895a78143089dc8cd02e44922" name="apache-commons-daemon-jsvc" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8</changelog>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1743422400">- Upgrade to 1.4.1
  * Bug Fixes:
    + several issues around Java OS and header files location
    detection.
    + Correct several log messages where an incorrect placeholder
    led to truncation of the inserted values.
  * New Features
    + Add protection to avoid high CPU usage for applications
    running in JVM mode that do not wait for the stop method to
    be called before the start method returns. Fixes DAEMON-460.
    + The minimum Java version has been increased to Java 8
- Remove apache-commons-daemon-JAVA_OS.patch - patched in 1.4.1</changelog>
  <changelog author="fstrba@suse.com" date="1750075200">- Added patch:
  * apache-commons-daemon-gcc15-compat.patch
    + Fix build with GCC 15</changelog>
</package>
<package pkgid="690e83be81f6d478dbe2ba6dff8789808baac09fd09b01b9f14458fc5541d1ebf19ef870960607a2b647596a3beebfc2b432e02e5cb3a7c62702eca666068e4e" name="apache-commons-daemon-jsvc" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="160000.1.2"/>
  <changelog author="pmonreal@suse.com" date="1666353600">- Update to 1.3.2:
  * Fixes:
  - Procrun. Remove noisy INFO log message that triggered logging
    once per minute while the service was running.
  - Fix typos in Javadoc and comments.
  - Procrun. The DependsOn parameter is no longer ignored when
    updating the service configuration.
  - Fix crash and provide an error level log message when the
    user attempts to start the service without configuring a
    JVM and none is available via the registry.
  * Updates:
  - Bump actions/cache from 3.0.3 to 3.0.8.
  - Bump actions/checkout from 3 to 3.0.2.
  - Bump commons-parent from 53 to 54.
  - Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
  - Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
  - Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
  - Bump JUnit 4 to 5 vintage.
  * Remove apache-commons-daemon-riscv64.patch already upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1683115200">- Update to 1.3.3:
  * Fixes:
  - Procrun. Follow-up to ensure all child processes are cleaned
    up if the service does not stop cleanly.
  - Procrun. Fix creation of duplicate ACL entries on some
    Windows platforms.
  * Updates:
  - Bump actions/cache from 3.0.8 to 3.0.11.
  - Bump actions/checkout from 3.0.2 to 3.1.0.
  - Bump actions/setup-java from 3.5.1 to 3.6.0.
  - Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0.</changelog>
  <changelog author="david.anes@suse.com" date="1697544000">- Update to 1.3.4:
  * Procrun. Configured stack size now applies to the main thread
    when running in JVM mode. Fixes DAEMON-451.
  * Procrun. If the specified log directory does not exist, attempt
    to create any missing parent directories, as well as the
    specified directory, when the service starts. Fixes DAEMON-452.
  * Procrun. Allow Windows service dependencies to be managed by
    Procrun or by 'sc config ...'. Fixes DAEMON-458.
  * jsvc. Fix DaemonController.reload() only working the first time
    it is called. Fixes DAEMON-459. Thanks to Klaus Malorny.
  * jsvc. Remove incorrent definition 'supported_os' which defined
    in psupport.m4 file to fix jsvc build error on riscv64.
  * Bump commons-parent from 54 to 57 #71, #91.</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1714996800">- Add apache-commons-daemon-gcc14-compat.patch for GCC 14
  compatibility.
- Correct offset in apache-commons-daemon-JAVA_OS.patch.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723464000">- Upgrade to 1.4.0
  * Fixes:
    + [StepSecurity] ci: Harden GitHub Actions #95.
    + Procrun. Enable Control Flow Guard for Windows binaries.
    Fixes DAEMON-429.
    + Procrun. Better label for command used to start service shown
    in Prunmgr.exe. Fixes DAEMON-461.
    + jsvc. Fix warnings when running support/buildconf.sh
    + jsvc. Fix compilation issue with newer compilers. Fixes
    + Procrun. Refactor UAC support so that elevation is only
    requested for actions that require administrator privileges.
  * New Features:
    + Procrun. Add support for hybrid CRT builds.
    + jsvc. Add support for LoongArch64 support #92.
  * Update dependencies:
    + Bump commons-parent from 57 to 69 #155.
    + The minimum support Java version has been upgraded from Java
    7 to Java 8.
    + Bump commons-parent from 69 to 70.
- Revise apache-commons-daemon-gcc14-compat.patch for compatibility
  with version 1.4.0</changelog>
  <changelog author="gus.kenion@suse.com" date="1743422400">- Upgrade to 1.4.1
  * Bug Fixes:
    + several issues around Java OS and header files location
    detection.
    + Correct several log messages where an incorrect placeholder
    led to truncation of the inserted values.
  * New Features:
    + Add protection to avoid high CPU usage for applications
    running in JVM mode that do not wait for the stop method to
    be called before the start method returns. Fixes DAEMON-460.
    + The minimum Java version has been increased to Java 8
- Remove apache-commons-daemon-JAVA_OS.patch - patched in 1.4.1</changelog>
  <changelog author="fstrba@suse.com" date="1750075200">- Added patch:
  * apache-commons-daemon-gcc15-compat.patch
    + Fix build with GCC 15</changelog>
  <changelog author="fstrba@suse.com" date="1781870400">- Upgrade to 1.6.1
  * Bug Fixes:
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Document --enable-preview
    + Fix first appearance of --enable-native-access
    + Procrun. Fix redirection issues on some OS versions by using
    recommended method to redirect stdout and stderr.
    Fixes DAEMON-398.
    + Procrun. Fix updating of startup mode to 'Automatic (delayed)'
    being incorrectly processed as an update to 'Manual'.
    Fixes DAEMON-439.
    + Procrun. Fix timeout handling #238. Fixes DAEMON-468.
    + Procrun. Replace RTF version of license header with plain text
    version of full license in about box for monitor application.
    Fixes DAEMON-472.
    + Procrun. Service should be marked as stopped if the service
    worker crashes. Fixes DAEMON-475.
    + jsvc. Fix compilation warnings.
    + jsvc. Fix a regression in 1.5.1 that exposed long standing
    bugs around the locking and unlocking of pid files. Also fix
    the locking/unlocking bugs.
    + Detaches from console when the service stops #307. Fixes
    DAEMON-477.
    + jsvc. Correct a packaging error in the 1.6.0 native source
    tarball for *nix systems. Thanks to Michael Osipov.
  * New Features:
    + Add support for --enable-native-access Java startup option in
    jsvc. Fixes DAEMON-471.
    + Add tests for prunsrv on Windows #260.
    + Add Java API compatibility report to the site (JApiCmp).
    + Procun. Build binaries for Windows using the static hybrid CRT
    strategy by default.
    + jsvc. Use FreeBSD's setproctitle(3) to pass -procname similar
    to daemon(8).
    + procrun. Add ARM64 support for Windows binaries. Fixes
    DAEMON-462.
  * Update dependencies:
    + Bump org.apache.commons:commons-parent from 78 to 91 #253,
    [#255], #287.
    + Update to use new ASF logo
    + Bump org.apache.commons:commons-parent from 93 to 99.
    + jsvc. Consistently use strerror(3) for log output.</changelog>
</package>
<package pkgid="e67c7a876af555c21dcbfb38ef41d495b84724ccf4dab6c80004cdf8493afe10de3c421d254ccc291381419ac06a4bd560a44d93f981e11e0b3bf4c36a2c124d" name="apache-commons-dbcp" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jmatejek@suse.com" date="1475150400">- rename to apache-commons-dbcp
- updating requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1475150401">- Update version to 2.1.1 wrt fate#321029
  * Fixes to actually work with tomcat 8</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Search for jta not jta-api as SLE has issues locating the api while
  the jta is just simple symlink</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Added patches:
  * apache-commons-dbcp-sourcetarget.patch
    + build with java source / target 8 to align with other
  packages
  * apache-commons-dbcp-javadoc.patch
    + do not attempt to load urls while building</changelog>
  <changelog author="fstrba@suse.com" date="1544875200">- Add maven pom file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1555329600">- Build classpath using directly geronimo-jta-1.1-api instead of
  the jta symlink</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify spec: remove old macros and avoid versioned jars</changelog>
</package>
<package pkgid="72333669c7a03ed77b7c971199efc65b9046f58c5a8a9d88a6d07dd3ad086cfdacb43ba05fc0e74877910ac383e503c0fa494944c4cf4e425c27ef1f30ff4383" name="apache-commons-dbcp" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.3.1"/>
  <changelog author="jmatejek@suse.com" date="1475150400">- rename to apache-commons-dbcp
- updating requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1475150401">- Update version to 2.1.1 wrt fate#321029
  * Fixes to actually work with tomcat 8</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Search for jta not jta-api as SLE has issues locating the api while
  the jta is just simple symlink</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Added patches:
  * apache-commons-dbcp-sourcetarget.patch
    + build with java source / target 8 to align with other
  packages
  * apache-commons-dbcp-javadoc.patch
    + do not attempt to load urls while building</changelog>
  <changelog author="fstrba@suse.com" date="1544875200">- Add maven pom file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1555329600">- Build classpath using directly geronimo-jta-1.1-api instead of
  the jta symlink</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify spec: remove old macros and avoid versioned jars</changelog>
  <changelog author="fstrba@suse.com" date="1757073600">- Do not provide the hibernate_jdbc_cache alternative</changelog>
</package>
<package pkgid="67c5845cc5b360afc4c8a5433af77ee9475996f641f615593046ca7dd667b6395c0157448fe1c6a57aa7ee86c788475c67fe0e11111259f1082db00d71413db3" name="apache-commons-dbcp-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jmatejek@suse.com" date="1475150400">- rename to apache-commons-dbcp
- updating requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1475150401">- Update version to 2.1.1 wrt fate#321029
  * Fixes to actually work with tomcat 8</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Search for jta not jta-api as SLE has issues locating the api while
  the jta is just simple symlink</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Added patches:
  * apache-commons-dbcp-sourcetarget.patch
    + build with java source / target 8 to align with other
  packages
  * apache-commons-dbcp-javadoc.patch
    + do not attempt to load urls while building</changelog>
  <changelog author="fstrba@suse.com" date="1544875200">- Add maven pom file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1555329600">- Build classpath using directly geronimo-jta-1.1-api instead of
  the jta symlink</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify spec: remove old macros and avoid versioned jars</changelog>
</package>
<package pkgid="5482df214e7d7cfb6a95cd6f20c32838a01aab2ddd9a5ab04ca977805b00d63094b685010442386270d38dab5b60516d442a0a17a51034bdf0443711c35e99c8" name="apache-commons-dbcp-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.3.1"/>
  <changelog author="jmatejek@suse.com" date="1475150400">- rename to apache-commons-dbcp
- updating requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1475150401">- Update version to 2.1.1 wrt fate#321029
  * Fixes to actually work with tomcat 8</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Search for jta not jta-api as SLE has issues locating the api while
  the jta is just simple symlink</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Added patches:
  * apache-commons-dbcp-sourcetarget.patch
    + build with java source / target 8 to align with other
  packages
  * apache-commons-dbcp-javadoc.patch
    + do not attempt to load urls while building</changelog>
  <changelog author="fstrba@suse.com" date="1544875200">- Add maven pom file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1555329600">- Build classpath using directly geronimo-jta-1.1-api instead of
  the jta symlink</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify spec: remove old macros and avoid versioned jars</changelog>
  <changelog author="fstrba@suse.com" date="1757073600">- Do not provide the hibernate_jdbc_cache alternative</changelog>
</package>
<package pkgid="2ae3daefded26cbeb57f0753e2abae38cc4e3b87396b8e1330693637a51fe386e4e6765677951d960d1858ec716c3652c838cd247f21f77ce341962fb4259db0" name="apache-commons-dbcp1" arch="noarch">
  <version epoch="0" ver="1.4" rel="bp160.1.12"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544875200">- Initial package for apache-commons-dbcp1, providing the
  commons-dbcp API 1.x
- Added patches:
  * apache-commons-dbcp-sourcetarget.patch
    + build with java source and target level 1.7
  * apache-commons-dbcp-javadoc.patch
    + do not load external javadoc links over internet
  * apache-commons-dbcp-jdbc41.patch
    + port to JDBC 4.1 (Java SE 1.7)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555329600">- Build classpath using directly geronimo-jta-1.1-api instead of
  the jta symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698235200">- Modified patch:
  * apache-commons-dbcp-sourcetarget.patch
    + build with source target levels 8
    + use "release" with compilers that support it</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="0b30f3e85ca86ec828fce215bb25841a021c6ee67be63d007792e68f8c812dfc53ddde6187ad8d6ad55f7c5fce1ea5b4fc7fa4cfbefc6372293f51ad681d39bb" name="apache-commons-dbcp1-javadoc" arch="noarch">
  <version epoch="0" ver="1.4" rel="bp160.1.12"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544875200">- Initial package for apache-commons-dbcp1, providing the
  commons-dbcp API 1.x
- Added patches:
  * apache-commons-dbcp-sourcetarget.patch
    + build with java source and target level 1.7
  * apache-commons-dbcp-javadoc.patch
    + do not load external javadoc links over internet
  * apache-commons-dbcp-jdbc41.patch
    + port to JDBC 4.1 (Java SE 1.7)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555329600">- Build classpath using directly geronimo-jta-1.1-api instead of
  the jta symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698235200">- Modified patch:
  * apache-commons-dbcp-sourcetarget.patch
    + build with source target levels 8
    + use "release" with compilers that support it</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="81d6cfd79752c47e38893b10fb4b976f13460fcab93afdb2359af1365e34398ba922659122e27bdfc7eb7c7e11b7760f143dcf77d774e0e2d94e971f3b9fdc4a" name="apache-commons-digester" arch="noarch">
  <version epoch="0" ver="2.1" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec cleaner and fix build again.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Removed patch:
  * jakarta-commons-digester-java14compat.patch
- Added patch:
  * jakarta-commons-digester-java16compat.patch
  - Build with java source and target 1.6
  - Fixes build with jdk9
- Align the spec file to the way the ant build gets its
  dependencies and fix the javadoc build</changelog>
  <changelog author="fstrba@suse.com" date="1545393600">- Renamed package to apache-commons-digester
- Removed patch:
  * jakarta-commons-digester-java16compat.patch
    + no need to patch build.xml to build with source/target 1.6
- Added patch:
  * apache-commons-digester-build.patch
    + add commons-collections to the build classpath</changelog>
  <changelog author="fstrba@suse.com" date="1551096000">- Upgrade to 2.1
  * Breaking changes:
    + The minimum JDK requirement is now JDK 1.5. The provided
    binaries will not work on lower JDKs. The source has been
    updated to leverage Generics and other JDK 1.5 features where
    possible, and requires JDK 1.5 to compile.
    + This release eliminates all dependencies on Commons
    Collections classes. Previously, ArrayStack was used in the
    Digester implementation and was exposed via protected fields
    or inner classes of the following classes:
  - org.apache.commons.digester.Digester,
  - org.apache.commons.digester.CallParamRule, and
  - org.apache.commons.digester.xmlrules.DigesterRuleParser
    These classes now use java.util.Stack instead. Any subclasses
    of the above using protected ArrayStack members will require
    appropriate migration to use java.util.Stack instead before
    they can be used with version 2.0 or later.
  * Important changes:
    + The legacy schema support has been deprecated in favor of
    javax.xml.validation.Schema support.
  * New features:
    + Support for XML Schema validation using
    javax.xml.validation.Schema  has been added to Digester.
    See Digester class Javadoc, and
    Digester#setSchema(javax.xml.validation.Schema) method.
    This allows usage of W3C XML Schema, Relax NG and Schematron
    for validation of XML documents.
    The legacy schema support has been deprecated (details below).
    + The underlying SAXParser factory can now be easily configured
    to be XInclude aware. This allows for general purpose
    inclusion of XML or text documents, for example, and
    facilitates document modularity.
    + Added a new package 'annotations' that provides for Java5
    Annotations  meta-data based definition of rules for Digester.
    This improves maintainability of both Java code and XML
    documents, as  rules are now defined in POJOs and generating
    Digester parsers at  runtime, avoiding manual updates.
  * Bugs from previous release:
    + SetPropertyRule throws java.lang.IllegalArgumentException:
    No name specified when matched element has no attributes.
    [DIGESTER-114]
    + Missing unit tests using Ant and Maven. [DIGESTER-117]
    + Digesting XML content with NodeCreateRule swallows spaces.
    [DIGESTER-120]
    + Potential NullPointerException if debug is enabled in
    Digester#resolveEntity() [DIGESTER-122]
    + Clear inputSources list in method Digester.clear()
    [DIGESTER-125]
    + Potential NullPointerException if debug is enabled in
    FactoryCreateRule#begin() [DIGESTER-126]
  * Improvements from previous release:
    + Null arguments to all Digester#parse() methods now throw an
    IllegalArgumentException. [DIGESTER-111]
    + 'serialVersionUID' fields have been added to Serializable
    classes.
- Generate ant build files that were removed in 2.1 by upstream
- Removed patch:
  * apache-commons-digester-build.patch
    + the generated build is handling the build classpath
    differently</changelog>
  <changelog author="fstrba@suse.com" date="1553688000">- Use global defines for name</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- Fixed SPEC file: Replaced broken URL.</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="eddeb9fd0a2da7fc64daec9909d4b2bdc5e1d65603d6c7928857ff9cf2a645eff2ae4d61e2110f76d49d4d0d5eb8200568c18731aa30c8252f7dc5d4bb89428f" name="apache-commons-digester-javadoc" arch="noarch">
  <version epoch="0" ver="2.1" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec cleaner and fix build again.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Removed patch:
  * jakarta-commons-digester-java14compat.patch
- Added patch:
  * jakarta-commons-digester-java16compat.patch
  - Build with java source and target 1.6
  - Fixes build with jdk9
- Align the spec file to the way the ant build gets its
  dependencies and fix the javadoc build</changelog>
  <changelog author="fstrba@suse.com" date="1545393600">- Renamed package to apache-commons-digester
- Removed patch:
  * jakarta-commons-digester-java16compat.patch
    + no need to patch build.xml to build with source/target 1.6
- Added patch:
  * apache-commons-digester-build.patch
    + add commons-collections to the build classpath</changelog>
  <changelog author="fstrba@suse.com" date="1551096000">- Upgrade to 2.1
  * Breaking changes:
    + The minimum JDK requirement is now JDK 1.5. The provided
    binaries will not work on lower JDKs. The source has been
    updated to leverage Generics and other JDK 1.5 features where
    possible, and requires JDK 1.5 to compile.
    + This release eliminates all dependencies on Commons
    Collections classes. Previously, ArrayStack was used in the
    Digester implementation and was exposed via protected fields
    or inner classes of the following classes:
  - org.apache.commons.digester.Digester,
  - org.apache.commons.digester.CallParamRule, and
  - org.apache.commons.digester.xmlrules.DigesterRuleParser
    These classes now use java.util.Stack instead. Any subclasses
    of the above using protected ArrayStack members will require
    appropriate migration to use java.util.Stack instead before
    they can be used with version 2.0 or later.
  * Important changes:
    + The legacy schema support has been deprecated in favor of
    javax.xml.validation.Schema support.
  * New features:
    + Support for XML Schema validation using
    javax.xml.validation.Schema  has been added to Digester.
    See Digester class Javadoc, and
    Digester#setSchema(javax.xml.validation.Schema) method.
    This allows usage of W3C XML Schema, Relax NG and Schematron
    for validation of XML documents.
    The legacy schema support has been deprecated (details below).
    + The underlying SAXParser factory can now be easily configured
    to be XInclude aware. This allows for general purpose
    inclusion of XML or text documents, for example, and
    facilitates document modularity.
    + Added a new package 'annotations' that provides for Java5
    Annotations  meta-data based definition of rules for Digester.
    This improves maintainability of both Java code and XML
    documents, as  rules are now defined in POJOs and generating
    Digester parsers at  runtime, avoiding manual updates.
  * Bugs from previous release:
    + SetPropertyRule throws java.lang.IllegalArgumentException:
    No name specified when matched element has no attributes.
    [DIGESTER-114]
    + Missing unit tests using Ant and Maven. [DIGESTER-117]
    + Digesting XML content with NodeCreateRule swallows spaces.
    [DIGESTER-120]
    + Potential NullPointerException if debug is enabled in
    Digester#resolveEntity() [DIGESTER-122]
    + Clear inputSources list in method Digester.clear()
    [DIGESTER-125]
    + Potential NullPointerException if debug is enabled in
    FactoryCreateRule#begin() [DIGESTER-126]
  * Improvements from previous release:
    + Null arguments to all Digester#parse() methods now throw an
    IllegalArgumentException. [DIGESTER-111]
    + 'serialVersionUID' fields have been added to Serializable
    classes.
- Generate ant build files that were removed in 2.1 by upstream
- Removed patch:
  * apache-commons-digester-build.patch
    + the generated build is handling the build classpath
    differently</changelog>
  <changelog author="fstrba@suse.com" date="1553688000">- Use global defines for name</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- Fixed SPEC file: Replaced broken URL.</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="6fc65f81a9d089bcba095e5fe527a2e9c1f03bfd7c18d2e72180858ef03d609f96a2531213e1740496213f82dafaa141c83a26b681d68829c9fa8b9084e91b48" name="apache-commons-digester3" arch="noarch">
  <version epoch="0" ver="3.2" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1625832000">- Initial commit with v3.2</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1762948800">- Fix build with maven-jar-plugin 3.5.0</changelog>
  <changelog author="fstrba@suse.com" date="1774958400">- Rewrite the build system for ant in order to avoid build cycles
  through velocity-tools and maven-doxia-sitetools</changelog>
</package>
<package pkgid="958c070f1ab9923ab99fdc98373a80e5babf11bb3ff0e287397d347e5f4a7a1944048527b786c645c3f8dc33f5db1fa6afc31a81a31066adcda490c5e7605e5b" name="apache-commons-digester3-javadoc" arch="noarch">
  <version epoch="0" ver="3.2" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1625832000">- Initial commit with v3.2</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1762948800">- Fix build with maven-jar-plugin 3.5.0</changelog>
  <changelog author="fstrba@suse.com" date="1774958400">- Rewrite the build system for ant in order to avoid build cycles
  through velocity-tools and maven-doxia-sitetools</changelog>
</package>
<package pkgid="68dacb187b1cb40148669fe7bfa114da6a588cd82350c21f619cf1d812ae7241986c1de49cb68b8a8012518b93edbba55994e6c405fe808f1c7c9194872c3b29" name="apache-commons-el" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555070400">- Initial packaging of apache-commons-el 1.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1607515200">- Provide and Obsolete jakarta-commons-el (bsc#1179637)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="f1c79175d4c147f04a9ef3b6e0255b569bfa731e9cd37777d7a52635e04bbdb0ab944836aaff24c73b9122d2aa310273306b4f805f4ae00816ca1fd953f5ec53" name="apache-commons-el-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555070400">- Initial packaging of apache-commons-el 1.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1607515200">- Provide and Obsolete jakarta-commons-el (bsc#1179637)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="5016b187e320ed2b8784b716d423ce135fcaa89c231ea7946ff41bbe732778b39e1db08f961a3b84d9e580a97cda53d8a7a423d458af33d1046ea1faf058597b" name="apache-commons-email" arch="noarch">
  <version epoch="0" ver="1.5" rel="bp160.1.11"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora. Removed maven stuff</changelog>
  <changelog author="dmacvicar@suse.de" date="1325851200">- add BuildRoot so it builds on SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove javapackages-tools requires</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502971200">- Update to version 1.5
  * Security fix [CVE-2017-9801, bsc#1051785]
  - SMTP header injection vulnerabilty
  - Added patch apache-commons-email-CVE-2017-9801.patch
  * Requires Java &gt;= 1.6
  * Added Support for International Domain Names
  * Upgrade to javax.mail-1.5.6
- Full update report in:
  http://commons.apache.org/proper/commons-email/changes-report.html</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * commons-email-1.5-sourcetarget.patch
  - Specify java source and target 1.6 and fix jdk9 build</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * commons-email-1.5-sourcetarget.patch
    + build with java source and target 8 to anticipate removal of
    the java 6 compatibility
- Added patch:
  * commons-email-1.5-javadoc.patch
    + Do not load urls while building
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648641600">- Build against the standalone JavaEE modules inconditionally</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="ae05bcfba7e8a95e764608831f448e175c8e2425d3971c828437b743c35cffb5cb675cf1bf9b23c437bb4f487f440f56adc2d70891741228fdc324b4fa172bfa" name="apache-commons-email-javadoc" arch="noarch">
  <version epoch="0" ver="1.5" rel="bp160.1.11"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora. Removed maven stuff</changelog>
  <changelog author="dmacvicar@suse.de" date="1325851200">- add BuildRoot so it builds on SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove javapackages-tools requires</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502971200">- Update to version 1.5
  * Security fix [CVE-2017-9801, bsc#1051785]
  - SMTP header injection vulnerabilty
  - Added patch apache-commons-email-CVE-2017-9801.patch
  * Requires Java &gt;= 1.6
  * Added Support for International Domain Names
  * Upgrade to javax.mail-1.5.6
- Full update report in:
  http://commons.apache.org/proper/commons-email/changes-report.html</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * commons-email-1.5-sourcetarget.patch
  - Specify java source and target 1.6 and fix jdk9 build</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * commons-email-1.5-sourcetarget.patch
    + build with java source and target 8 to anticipate removal of
    the java 6 compatibility
- Added patch:
  * commons-email-1.5-javadoc.patch
    + Do not load urls while building
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648641600">- Build against the standalone JavaEE modules inconditionally</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="2990b9714baf34d4550df1666b629e320087f15f2c9cd2d68fc3e49434c6c1095dd0a44f0191a9b3abb72f8d33e7ca08a0ca72bd38be5d1d6da1068ea91afbd8" name="apache-commons-exec" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1554379200">- Initial packaging of apache-commons-exec 1.3
- Added patch:
  * commons-exec-1.3-build_xml.patch
    + Adapt the build.xml file to produce javadoc, to be able
    to switch off tests from command-line and add a proper OSGi
    manifest</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="6de0fc24b87f2264d2ec7832a8022695ea01a8a547e58eda58325732d9482b4b12b7af5d38b2aefde683d14d7af91b543601a9dda4481b989c9217cbcb9f95c6" name="apache-commons-exec" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1554379200">- Initial packaging of apache-commons-exec 1.3
- Added patch:
  * commons-exec-1.3-build_xml.patch
    + Adapt the build.xml file to produce javadoc, to be able
    to switch off tests from command-line and add a proper OSGi
    manifest</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Upgrade to version 1.4.0
  * New features:
    + Add ShutdownHookProcessDestroyer.isEmpty()
    + Add DefaultExecuteResultHandler.waitFor(Duration)
    + Add Watchdog.Watchdog(Duration)
    + Add ExecuteWatchdog.ExecuteWatchdog(Duration)
    + Add PumpStreamHandler.setStopTimeout(Duration) and deprecate
    PumpStreamHandler.setStopTimeout(long)
    + Add DefaultExecutor.Builder
    + Add DaemonExecutor.Builder
    + Add ExecuteWatchdog.Builder
    + Add Watchdog.Builder
  * Fixed Bugs:
    + EXEC-105: Fix code snippet in tutorial page
    + EXEC-100: Sync org.apache.commons.exec.OS with the newest Ant
    source file.
    + EXEC-64: DefaultExecutor swallows IOException cause instead
    of propagating it (work-round for Java 1.5)
    + Java-style Array declaration and remove empty finally block
    + Use JUnit 5 assertThrows()
    + [StepSecurity] ci: Harden GitHub Actions
    + Port from JUnit 4 to 5
    + [Javadoc] CommandLine.toCleanExecutable(final String
    dirtyExecutable) IllegalArgumentException #61
    + ExecuteException propagates its cause to its IOException
    superclass
    + Propagate exception in DebugUtils.handleException(String,
    Exception)
    + Deprecate StringUtils.toString(String[], String) in favor of
    String.join(CharSequence, CharSequence...)
    + EXEC-78: No need to use System.class.getMethod("getenv",...)
    any more
    + EXEC-70: Delegate thread creation to
    java.util.concurrent.ThreadFactory
    + Avoid NullPointerException in MapUtils.prefix(Map, String)
  * Changes:
    + Bump github actions #52
    + EXEC-111: Update from Java 5 to 6
    + Update from Java 7 to 8
    + Bump actions/cache from 2 to 3.0.11
    + Bump actions/checkout from 2.3.2 to 3.1.0
    + Bump actions/setup-java from 1.4.0 to 3.8.0
    + Bump junit from 4.13 to 5.9.1 Vintage
    + Bump maven-pmd-plugin from 2.7.1 to 3.19.0
    + Bump maven-checkstyle-plugin from 2.13 to 3.2.0
    + Bump commons-parent from 52 to 65
    + Bump japicmp-maven-plugin from 0.15.6 to 0.16.0
  * Removed:
    + Deprecate DefaultExecuteResultHandler.waitFor(long)
    + Deprecate ExecuteWatchdog.ExecuteWatchdog(long)
    + Deprecate Watchdog.Watchdog(long)
    + Drop obsolete and unmaintained Ant build
    + Drop CLIRR plugin, replaced by JApiCmp</changelog>
  <changelog author="fstrba@suse.com" date="1778500801">- Upgrade to version 1.5.0
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
    + Add CommandLine.CommandLine(Path)
    + Add Executor.getWorkingDirectoryPath()
    + Add DefaultExecutor.Builder.setWorkingDirectory(Path)
    + Add CommandLauncher.exec(CommandLine, Map&lt;String, String&gt;,
    Path)
  * Fixed Bugs:
    + EXEC-122: Document PumpStreamHandler stream thread-safety
    requirements
    + Fix CI only running on Ubuntu and improve OS-specific tests
    + Fix PMD UnnecessaryFullyQualifiedName in DefaultExecutor
    + Fix PMD EmptyCatchBlock by allowing commented blocks
    + Fix PMD EmptyControlStatement by allowing commented blocks
    + Replace OS.OS_* use of Locale.ENGLISH with Locale.ROOT
    + Deprecate DebugUtils.DebugUtils()
    + Deprecate MapUtils.MapUtils()
    + Deprecate StringUtils.StringUtils()
    + Fix Javadoc warnings
    + Fix SpotBugs AT_STALE_THREAD_WRITE_OF_PRIMITIVE: Shared
    primitive variable "shouldDestroy" in one thread may not yield
    the value of the most recent write from another thread
    [org.apache.commons.exec.ShutdownHookProcessDestroyer
    $ProcessDestroyerThread]
    + Fix SpotBugs AT_STALE_THREAD_WRITE_OF_PRIMITIVE: Shared
    primitive variable "added" in one thread may not yield the
    value of the most recent write from another thread
    [org.apache.commons.exec.ShutdownHookProcessDestroyer]
  * Changes:
    + Bump org.apache.commons:commons-parent from 65 to 83
  * Removed:
    + Remove obsolete and unmaintained Ant build file
- Generate Ant build file for our build
- Removed patch:
  * commons-exec-1.3-build_xml.patch
    + not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1778500802">- Upgrade to version 1.6.0
  * New features:
    + TimeoutObserver now extends Consumer&lt;Watchdog&gt;
    + Add org.apache.commons.exec.Watchdog.getTimeout()
  * Fixed Bugs:
    + Watchdog.builder().get() now uses a default timeout of 30
    seconds instead of throwing a NullPointerException
    + ExecuteWatchdog.builder().get() now uses a default timeout of
    30 seconds instead of throwing a NullPointerException
    + Calling org.apache.commons.exec.Watchdog.Builder
    .setTimeout(Duration) with null now resets to the default
    INFINITE_TIMEOUT_DURATION timeout
    + Calling org.apache.commons.exec.ExecuteWatchdog.Builder
    .setTimeout(Duration) with null now resets to the default
    INFINITE_TIMEOUT_DURATION timeout
    + Calling org.apache.commons.exec.Watchdog.Builder
    .setThreadFactory(ThreadFactory) with null now resets to the
    default java.util.concurrent.Executors.defaultThreadFactory()
    + Calling org.apache.commons.exec.ExecuteWatchdog.Builder
    .setThreadFactory(ThreadFactory) with null now resets to the
    default java.util.concurrent.Executors.defaultThreadFactory()
    + Fix Checkstyle issues
    + Fix StringUtils.quoteArgument(String) when input contains
    single and double quotes #309
    + Fix Apache RAT plugin console warnings
  * Changes:
    + Bump org.apache.commons:commons-parent from 83 to 93
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0</changelog>
</package>
<package pkgid="e585d47a27a8c1cfdf0a69332d80ee3bd4add54352d41c07374858c54e76fa2c117b6e0a7a7ae196b120f8633b7474ab47c6a1f00331da034954efba821c7bda" name="apache-commons-exec-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1554379200">- Initial packaging of apache-commons-exec 1.3
- Added patch:
  * commons-exec-1.3-build_xml.patch
    + Adapt the build.xml file to produce javadoc, to be able
    to switch off tests from command-line and add a proper OSGi
    manifest</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="0cc0f73979edc03549e9484c62cf41b9af8ff9d4c6f47680a4dd40696cd66257ad132b7a62e6da487c6b7604a1b0064de590f1034bf36f1945d1066069ac9881" name="apache-commons-exec-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1554379200">- Initial packaging of apache-commons-exec 1.3
- Added patch:
  * commons-exec-1.3-build_xml.patch
    + Adapt the build.xml file to produce javadoc, to be able
    to switch off tests from command-line and add a proper OSGi
    manifest</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Upgrade to version 1.4.0
  * New features:
    + Add ShutdownHookProcessDestroyer.isEmpty()
    + Add DefaultExecuteResultHandler.waitFor(Duration)
    + Add Watchdog.Watchdog(Duration)
    + Add ExecuteWatchdog.ExecuteWatchdog(Duration)
    + Add PumpStreamHandler.setStopTimeout(Duration) and deprecate
    PumpStreamHandler.setStopTimeout(long)
    + Add DefaultExecutor.Builder
    + Add DaemonExecutor.Builder
    + Add ExecuteWatchdog.Builder
    + Add Watchdog.Builder
  * Fixed Bugs:
    + EXEC-105: Fix code snippet in tutorial page
    + EXEC-100: Sync org.apache.commons.exec.OS with the newest Ant
    source file.
    + EXEC-64: DefaultExecutor swallows IOException cause instead
    of propagating it (work-round for Java 1.5)
    + Java-style Array declaration and remove empty finally block
    + Use JUnit 5 assertThrows()
    + [StepSecurity] ci: Harden GitHub Actions
    + Port from JUnit 4 to 5
    + [Javadoc] CommandLine.toCleanExecutable(final String
    dirtyExecutable) IllegalArgumentException #61
    + ExecuteException propagates its cause to its IOException
    superclass
    + Propagate exception in DebugUtils.handleException(String,
    Exception)
    + Deprecate StringUtils.toString(String[], String) in favor of
    String.join(CharSequence, CharSequence...)
    + EXEC-78: No need to use System.class.getMethod("getenv",...)
    any more
    + EXEC-70: Delegate thread creation to
    java.util.concurrent.ThreadFactory
    + Avoid NullPointerException in MapUtils.prefix(Map, String)
  * Changes:
    + Bump github actions #52
    + EXEC-111: Update from Java 5 to 6
    + Update from Java 7 to 8
    + Bump actions/cache from 2 to 3.0.11
    + Bump actions/checkout from 2.3.2 to 3.1.0
    + Bump actions/setup-java from 1.4.0 to 3.8.0
    + Bump junit from 4.13 to 5.9.1 Vintage
    + Bump maven-pmd-plugin from 2.7.1 to 3.19.0
    + Bump maven-checkstyle-plugin from 2.13 to 3.2.0
    + Bump commons-parent from 52 to 65
    + Bump japicmp-maven-plugin from 0.15.6 to 0.16.0
  * Removed:
    + Deprecate DefaultExecuteResultHandler.waitFor(long)
    + Deprecate ExecuteWatchdog.ExecuteWatchdog(long)
    + Deprecate Watchdog.Watchdog(long)
    + Drop obsolete and unmaintained Ant build
    + Drop CLIRR plugin, replaced by JApiCmp</changelog>
  <changelog author="fstrba@suse.com" date="1778500801">- Upgrade to version 1.5.0
  * New features:
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
    + Add CommandLine.CommandLine(Path)
    + Add Executor.getWorkingDirectoryPath()
    + Add DefaultExecutor.Builder.setWorkingDirectory(Path)
    + Add CommandLauncher.exec(CommandLine, Map&lt;String, String&gt;,
    Path)
  * Fixed Bugs:
    + EXEC-122: Document PumpStreamHandler stream thread-safety
    requirements
    + Fix CI only running on Ubuntu and improve OS-specific tests
    + Fix PMD UnnecessaryFullyQualifiedName in DefaultExecutor
    + Fix PMD EmptyCatchBlock by allowing commented blocks
    + Fix PMD EmptyControlStatement by allowing commented blocks
    + Replace OS.OS_* use of Locale.ENGLISH with Locale.ROOT
    + Deprecate DebugUtils.DebugUtils()
    + Deprecate MapUtils.MapUtils()
    + Deprecate StringUtils.StringUtils()
    + Fix Javadoc warnings
    + Fix SpotBugs AT_STALE_THREAD_WRITE_OF_PRIMITIVE: Shared
    primitive variable "shouldDestroy" in one thread may not yield
    the value of the most recent write from another thread
    [org.apache.commons.exec.ShutdownHookProcessDestroyer
    $ProcessDestroyerThread]
    + Fix SpotBugs AT_STALE_THREAD_WRITE_OF_PRIMITIVE: Shared
    primitive variable "added" in one thread may not yield the
    value of the most recent write from another thread
    [org.apache.commons.exec.ShutdownHookProcessDestroyer]
  * Changes:
    + Bump org.apache.commons:commons-parent from 65 to 83
  * Removed:
    + Remove obsolete and unmaintained Ant build file
- Generate Ant build file for our build
- Removed patch:
  * commons-exec-1.3-build_xml.patch
    + not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1778500802">- Upgrade to version 1.6.0
  * New features:
    + TimeoutObserver now extends Consumer&lt;Watchdog&gt;
    + Add org.apache.commons.exec.Watchdog.getTimeout()
  * Fixed Bugs:
    + Watchdog.builder().get() now uses a default timeout of 30
    seconds instead of throwing a NullPointerException
    + ExecuteWatchdog.builder().get() now uses a default timeout of
    30 seconds instead of throwing a NullPointerException
    + Calling org.apache.commons.exec.Watchdog.Builder
    .setTimeout(Duration) with null now resets to the default
    INFINITE_TIMEOUT_DURATION timeout
    + Calling org.apache.commons.exec.ExecuteWatchdog.Builder
    .setTimeout(Duration) with null now resets to the default
    INFINITE_TIMEOUT_DURATION timeout
    + Calling org.apache.commons.exec.Watchdog.Builder
    .setThreadFactory(ThreadFactory) with null now resets to the
    default java.util.concurrent.Executors.defaultThreadFactory()
    + Calling org.apache.commons.exec.ExecuteWatchdog.Builder
    .setThreadFactory(ThreadFactory) with null now resets to the
    default java.util.concurrent.Executors.defaultThreadFactory()
    + Fix Checkstyle issues
    + Fix StringUtils.quoteArgument(String) when input contains
    single and double quotes #309
    + Fix Apache RAT plugin console warnings
  * Changes:
    + Bump org.apache.commons:commons-parent from 83 to 93
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0</changelog>
</package>
<package pkgid="bc0345af4dfaeaf26336618e16340f581bb9cbe1671af4dcdd06123d2e07919aa89a550c422501aac2ac2fb544660f7511f6d6bc1bdc6d41811206401975a9ff" name="apache-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.5" rel="bp160.1.12"/>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="6ebe82fa717c2b7a8c814ab7e265beb2fab33138906eae9bd2b12228413de4b0bf3b219cb9fee58fba8ed91067947843b48dc27b550a69715cd3722410015c02" name="apache-commons-fileupload-javadoc" arch="noarch">
  <version epoch="0" ver="1.5" rel="bp160.1.12"/>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="7bf70f39221868132fb0c444c9a993d08e1c7a57abc3e5d59118fef2c15603fe1f39dcd62eb2fa153f7e0616df57ede65377b4e76992d7700d585b9333605550" name="apache-commons-httpclient" arch="noarch">
  <version epoch="0" ver="3.1" rel="160000.2.2"/>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Clean the spec: remove old macros and change to working urls</changelog>
</package>
<package pkgid="30d064fbf1b12e37630f2be3f0a1309f7bdcdd15a02ca4377d429d1dbd266ad905f7deddbd89bac82d4ac3093c3a422191e5759e9ef7593d1023abdb4a79381a" name="apache-commons-httpclient-demo" arch="noarch">
  <version epoch="0" ver="3.1" rel="160000.2.2"/>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Clean the spec: remove old macros and change to working urls</changelog>
</package>
<package pkgid="8d46e3f47a5d18ec1c85315dc275b25fc7f1aa0648dde6581778fcb34a33a9af49f2339cf48950c7fb694f8017c28eef0ed51d9ca1b375ed0f3297ff38c2b559" name="apache-commons-httpclient-javadoc" arch="noarch">
  <version epoch="0" ver="3.1" rel="160000.2.2"/>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Clean the spec: remove old macros and change to working urls</changelog>
</package>
<package pkgid="218fdec4948a6691ee8db2a454cb7da4935ff43c0b09f0129e88854e5f8f779f23be21e1e6413fd8ace3a0db3f37ef100b074a23f45d2a87d691254a25cd157f" name="apache-commons-httpclient-manual" arch="noarch">
  <version epoch="0" ver="3.1" rel="160000.2.2"/>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Clean the spec: remove old macros and change to working urls</changelog>
</package>
<package pkgid="8a2c43be742303f30110cdff1ea01d00933dfda2a6978663e675f429bbb16650081f7faa792dbf081cb630136d1c20e2d932067b56ec19f4dd7ccfb252e4c21c" name="apache-commons-imaging" arch="noarch">
  <version epoch="0" ver="1.0~alpha2" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594209600">- Initial packaging of apache-commons-imaging 1.0 alpha1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1620043200">- Upgrade to version 1.0-alpha2
  * fixes random build errors</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1651060800">- Fix the URL tag</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1723550400">- Fix build with apache-commons-parent 71</changelog>
</package>
<package pkgid="7f1e4d3456612d89aec080c30816dd36409c58d587e549bd305a95493b3443df79355e3e9bf4a7a0186922994b7810c7b32a52f090ac8d2796bc71b47c5fde6a" name="apache-commons-imaging-javadoc" arch="noarch">
  <version epoch="0" ver="1.0~alpha2" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594209600">- Initial packaging of apache-commons-imaging 1.0 alpha1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1620043200">- Upgrade to version 1.0-alpha2
  * fixes random build errors</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1651060800">- Fix the URL tag</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1723550400">- Fix build with apache-commons-parent 71</changelog>
</package>
<package pkgid="780f1fc7215bfe5bcb1bb49bfde4036674b01b19aa16cfea1cff3fb5ef9cd835066a78ce915024aa2cd0c19d43b8a058f187324a2b1eb745191447079f5c0669" name="apache-commons-io" arch="noarch">
  <version epoch="0" ver="2.18.0" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591185600">- Update to upstream version 2.7 (bsc#1184755, CVE-2021-29425)
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.7
  * Lots of bugfixes, updates and enhancements
  * Java 8 or later is required</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Update to 2.8.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.8.0</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 2.9.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.9.0</changelog>
  <changelog author="david.anes@suse.com" date="1650369600">- Update to 2.11.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.11.0
- Update to 2.10.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.10.0</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 2.14.0:
  * Lots of new features, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0
  * Fixes bsc#1231298, CVE-2024-47554: untrusted input to XmlStreamReader
    can lead to uncontrolled resource consumption</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 2.15.1
  * Fixed Bugs:
    + Fix wrong issue id in change log
    + Add test for FileChannels.contentEquals()
    + Fix FileChannels.contentEquals()
    + Fix some Javadoc issues in LineIterator and IOUtils
    + Simplify FileAlterationObserver internal processing
    + Avoid NullPointerException in RegexFileFilter
    .RegexFileFilter(Pattern)
    + Avoid NullPointerException in RegexFileFilter
    .accept(Path, BasicFileAttributes)
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .RegexFileFilter defines non-transient non-serializable
    instance field pathToString [org.apache.commons.io.filefilter
    .RegexFileFilter] In RegexFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.filefilter
    .DelegateFileFilter] In DelegateFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileNameFilter [org.apache.commons.io
    .filefilter.DelegateFileFilter] In DelegateFileFilter.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.function.IOStream$1
    .next() cannot throw NoSuchElementException [org.apache
    .commons.io.function.IOStream$1] At IOStream.java:[line 98]
    IT_NO_SUCH_ELEMENT
    + Fix SpotBugs error: org.apache.commons.io.monitor
    .FileAlterationMonitor.getObservers() may expose internal
    representation by returning FileAlterationMonitor.observers
    [org.apache.commons.io.monitor.FileAlterationMonitor] At
    FileAlterationMonitor.java:[line 124] EI_EXPOSE_REP
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field listeners [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.FileCleaningTracker
    .getDeleteFailures() may expose internal representation by
    returning FileCleaningTracker.deleteFailures [org.apache
    .commons.io.FileCleaningTracker] At
    FileCleaningTracker.java:[line 218] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList() may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 118]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList(Class) may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 129]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getDirList() may expose internal
    representation by returning AccumulatorPathVisitor.dirList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 179] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getFileList() may expose internal
    representation by returning AccumulatorPathVisitor.fileList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 188] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.input
    .ObservableInputStream.getObservers() may expose internal
    representation by returning ObservableInputStream.observers
    [org.apache.commons.io.input.ObservableInputStream] At
    ObservableInputStream.java:[line 187] EI_EXPOSE_REP
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int) will leave
    the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 202]
    CT_CONSTRUCTOR_THROW
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int, int) will
    leave the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 223]
    CT_CONSTRUCTOR_THROW
- Upgrade to 2.15.0
  * New features:
    + Add org.apache.commons.io.channels.FileChannels
    + Add RandomAccessFiles#contentEquals(RandomAccessFile,
    RandomAccessFile)
    + Add RandomAccessFiles#reset(RandomAccessFile)
    + Add PathUtilsContentEqualsBenchmark
    + Add org.apache.commons.io.StreamIterator
    + Add MessageDigestInputStream and deprecate
    MessageDigestCalculatingInputStream
  * Fixed Bugs:
    + IO-815: XmlStreamReader encoding match RE is too strict
    + IO-810: Javadoc in FileUtils does not reflect code for thrown
    exceptions
    + IO-812: Javadoc should mention closing Streams based on file
    resources
    + IO-811: In tests, Files.walk() direct and indirect callers
    fail to close the returned Stream
    + IO-811: FileUtils.listFiles(File, String[], boolean) fails to
    close its internal Stream
    + IO-811: FileUtils.iterateFiles(File, String[], boolean) fails
    to close its internal Stream
    + IO-811: StreamIterator fails to close its internal Stream
    + IO-814: Don't throw UncheckedIOException
    + IO-414: Don't write a BOM on every (or any) line
    + IO-814: RandomAccessFileMode.create(Path) provides a better
    NullPointerException message
    + Improve performance of PathUtils.fileContentEquals(Path, Path,
    LinkOption[], OpenOption[]) by about 60%, see
    PathUtilsContentEqualsBenchmark
    + Improve performance of PathUtils.fileContentEquals(Path, Path)
    by about 60%, see PathUtilsContentEqualsBenchmark
    + Improve performance of FileUtils.contentEquals(File, File) by
    about 60%, see PathUtilsContentEqualsBenchmark
    + Remove unused test code
    + [Javadoc] IOUtils#contentEquals does not throw
    NullPointerException
    + Fix CodeQL warnings in UnsynchronizedBufferedInputStream:
    Implicit narrowing conversion in compound assignment
    + MessageDigestCalculatingInputStream
    .MessageDigestMaintainingObserver
    .MessageDigestMaintainingObserver(MessageDigest) now throws a
    NullPointerException if the MessageDigest is null
    + MessageDigestCalculatingInputStream
    .MessageDigestCalculatingInputStream(InputStream,
    MessageDigest) now throws a NullPointerException if the
    MessageDigest is null
    + IO-816: UnsynchronizedBufferedInputStream.read(byte[], int,
    int) does not use buffer</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Upgrade to 2.16.1
  * Fixes:
    + Reimplement FileSystemUtils using NIO.
    + FileSystemUtils no longer throws IllegalStateException. Fixes
    IO-851.
    + Avoid possible NullPointerException in
    FileUtils.listAccumulate(File, IOFileFilter, IOFileFilter,
    FileVisitOption...).
    + BoundedInputStream.reset() not updating count. Fixes IO-853.
    + ThresholdingOutputStream: a negative threshold should behave
    like a zero threshold and trigger the event on the first
    write #609. Fixes IO-854.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.12 to 1.14.13 #605.
    + Bump org.apache.commons:commons-parent from 67 to 69 #608.
- Update apache-commons-io-build.xml for new version
- Includes changes from 2.16.0
  * Fixes:
    + Fix and re-enable testSkip_RequiredCharsets #518.
    + SymbolicLineFileFilter documentation fixes. Fixes IO-824.
    + CharSequenceInputStream.reset() only works once #520. Fixes
    IO-795.
    + Finish TODO on CharSequenceInputStream #540. Fixes IO-795.
    + Add byte array size validation for methods in EndianUtils
    [#521]. Fixes IO-825.
    + Add missing test case CircularByteBufferTest. Fixes IO-825.
    + Make CharSequenceInputStream.available() more correct in the
    face of multibyte encodings #525. Fixes IO-781.
    + Remove unreachable code in AbstractIOFileFilterTest #526.
    Fixes IO-781.
    + Rationalize and unify checking for existence of files and
    directories #529. Fixes IO-808.
    + Avoid NullPointerException in IOCase.checkEquals(String,
    String) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(Path, BasicFileAttributes) on
    null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(Path, BasicFileAttributes) on null
    input.
    + Avoid NullPointerException in EmptyFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in EmptyFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in FileFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in FileFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in IOCase.checkIndexOf(String,
    int, String) on null input.
    + Avoid NullPointerException in
    IOCase.checkRegionMatches(String, int, String) on null input.
    + BoundedInputStream.getCount() should not count EOF.
    + Modernize temporary file creation and deletion in
    DeferredFileOutputStreamTest #535.
    + Add PathMatcher to IOFileFilter class Javadoc #536.
    + Fix CharSequenceInputStream coding exception handling #537.
    Fixes IO-781.
    + Deprecate int CountingInputStream#getCount() in favor of long
    CountingInputStream#getByteCount(). Fixes IO-781.
    + Deprecate CountingInputStream.resetCount() in favor of
    resetByteCount(). Fixes IO-828.
    + Deprecate CountingInputStream.getMaxLength() in favor of
    getMaxCount()). Fixes IO-828.
    + NullInputStream breaks InputStream's read method contract.
    Fixes IO-818.
    + Javadoc shouldn't reference 1.x behavior #539.
    + Don't decode and reencode characters in a potentially
    different charset in
    AbstractOrigin.CharSequenceOrigin.getReader(Charset). Fixes
    IO-829.
    + Let subclasses of CountingInputStream.afterRead(int) throw
    IOException.
    + Characterization test for broken symlinks when copying
    directories #547. Fixes IO-807.
    + ClosedInputStream.read(byte[], int, int) does not always
    return -1.
    + ClosedOutputStream.write(byte[], int, int) does not always
    throw IOException.
    + XmlStreamReader can't parse an XML document with a multi-line
    prolog #550.
    + XmlStreamReader can't parse XML an document with an external
    parsed entity prolog.
    + Update FileNameUtils Javadoc #554. Fixes IO-836.
    + Copy symlinks, not the files the symlinks point to #558.
    Fixes IO-807.
    + Pickup apache-rat-plugin version from parent POM.
    + Add test for copying a symlink
    FileUtilsTest#testCopyFile_symLink() #564.
    + Make copyFile copy symbolic links by value rather than
    reference #565.
    + Deprecate CopyUtils 0-argument constructor.
    + Deprecate EndianUtils 0-argument constructor. Fixes IO-843.
    + Deprecate FileSystemUtils 0-argument constructor.
    + Deprecate FilenameUtils 0-argument constructor.
    + Deprecate RandomAccessFiles 0-argument constructor.
    + Clarify and correct EndianUtils and SwappedDataInputStream
    API doc #566.
    + Add characterization test for copying a symlinked directory
    [#570].
    + RandomAccessFileInputStream.builder().get() now throws ISE
    instead of NPE.
    + Test links to targets outside the source directory #571.
    Fixes IO-845.
    + Focus Javadoc on current version rather than past versions
    [#573], #574.
    + "Self-suppression not permitted" while using BrokenOutput and
    BrokenInput streams with try-with-resources. Fixes IO-469.
    + Handle zero and negative thresholds #587. Fixes IO-405.
    + Deprecate CountingInputStream in favor of BoundedInputStream.
    + PathUtils.setPosixPermissions(...) only sets permissions if
    needed.
    + PathUtils.setReadOnly(...) only sets permissions if needed.
    + PathUtils.deleteFile(..., DeleteOption...) only sets
    permissions if needed.
    + CleaningPathVisitor only sets permissions if needed.
    + DeletingPathVisitor only sets permissions if needed.
  * New features:
    + Add and use PathUtils.getFileName(Path, Function&lt;Path, R&gt;).
    + Add and use PathUtils.getFileNameString().
    + Make public Erase.rethrow(Throwable).
    + Add BrokenInputStream.BrokenInputStream(Throwable). Fixes
    IO-826.
    + Add BrokenReader.BrokenReader(Throwable). Fixes IO-826.
    + Add BrokenOutputStream.BrokenOutputStream(Throwable). Fixes
    IO-826.
    + Add BrokenWriter.BrokenWriter(Throwable). Fixes IO-826.
    + Add BoundedInputStream.getRemaining().
    + Add FileTimes.toNtfsTime(long).
    + Add FileTimes.fromUnixTime(long).
    + Add FileTimes.isUnixTime(FileTime).
    + Add FileTimes.isUnixTime(long).
    + Add FileTimes.toUnixTime(FileTime).
    + Add BrokenInputStream.Builder.
    + Add PathUtils.getExtension(Path).
    + Add PathUtils.getBaseName(Path).
    + Add ThrottledInputStream.
    + Add IORunnable.noop().
    + Add ChecksumInputStream and test #548.
    + Add AbstractStreamBuilder.getReader().
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
    + Add ProxyInputStream.unwrap().
    + Add a running count and builder to BoundedInputStream.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.10 to 1.14.12 #534,
    [#592].
    + Bump org.apache.commons:commons-parent from 65 to 67.
    + Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #583.
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0
    [#593].</changelog>
  <changelog author="fstrba@suse.com" date="1728043200">- Upgrade to 2.17.0
  * New features:
    + Add IOIterator.adapt(Iterable)
    + Add getInputStream() for 'https' and 'http' in URIOrigin
    [#630]. Fixes IO-831
    + Add IOSupplier.getUnchecked()
    + Add CloseShieldInputStream.systemIn(InputStream)
    + Add NullInputStream.init()
    + Add AbstractInputStream and refactor duplicate code
    + Add UnsynchronizedReader
    + Add UnsynchronizedBufferedReader
  * Fixes:
    + FileUtilsWaitForTest does not test anything useful.
    Fixes IO-858.
    + Add missing unit tests
    + FileUtils.lastModifiedFileTime(File) calls
    Objects.requireNonNull() on the wrong object
    + PathUtils.deleteOnExit(Path) calls Objects.requireNonNull()
    on the wrong object
    + Deprecate LineIterator.nextLine() in favor of next()
    + Fix PMD UnnecessaryFullyQualifiedName
    + Add test for CircularByteBuffer clear() #620
    + PathUtils.isPosix(Path, LinkOption...) should return false on
    null input
    + AutoCloseInputStream(InputStream) uses
    ClosedInputStream.INSTANCE when its input is null
    + Avoid NullPointerException in ProxyInputStream.available()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.markSupported()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.mark(int) when
    the underlying input stream is null
    + BufferedFileChannelInputStream.available() returns 0 before
    any reads
    + BufferedFileChannelInputStream.available() should return 0
    instead of -1 at the end of the stream
    + BufferedFileChannelInputStream.available() should return 0
    when the stream is closed instead of throwing an exception
    + CharSequenceInputStream.available() should return 0 after the
    stream is closed
    + BoundedInputStream.available() should return 0 when the
    stream is closed
    + CircularInputStream.available() should return 0 when the
    stream is closed
    + InfiniteCircularInputStream.available() should return 0 when
    the stream is closed
    + ChecksumInputStream(InputStream, Checksum, long, long) should
    fail-fast on null Checksum input
    + Deprecate NullInputStream.INSTANCE in favor of constructors
    + NullInputStream.available() should return 0 after the stream
    is closed
    + MemoryMappedFileInputStream.available() should return 0 after
    the stream is closed
    + RandomAccessFileInputStream.available() should return 0 after
    the stream is closed
    + ReaderInputStream.available() should return 0 after the
    stream is closed
    + AutoCloseInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + BoundedInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + NullInputStream.read(*) should throw IOException when it is
    closed
    + NullInputStream.read(byte[]) should return 0 when the input
    byte array in length 0
    + NullInputStream.read(byte[], int, int) should return 0 when
    the input byte array in length 0 or requested length is 0
    + MarkShieldInputStream.read(*) should throw IOException when
    it is closed
    + Replace deprecated constant FileFileFilter.FILE in Javadoc
    [#657]
    + Pick up exec-maven-plugin version from parent POM
  * Updates:
    + Bump tests commons.bytebuddy.version from 1.14.13 to 1.15.1
    [#615], #621, #631, #635, #642, #658, #663, #665
    + Bump tests commons-codec:commons-codec from 1.16.1 to 1.17.1
    [#644]
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.4.1
    [#632], #652, #659
    + Bump org.apache.commons:commons-parent from 69 to 74 #628,
    [#637], #649, #661, #664
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#645], #653, #666</changelog>
  <changelog author="gus.kenion@suse.com" date="1737720000">- Upgrade to 2.18.0
  * New features
    + Add @FunctionalInterface to ClassNameMatcher.
    + Add ValidatingObjectInputStream.Builder and
    ValidatingObjectInputStream.builder().
    + Add a "Safe Deserialization" section to the User Guide for
    the site.
    + Add IORandomAccessFile.
    + Add RandomAccessFileMode.io(String).
    + Add FileAlterationObserver.Builder() and deprecate most
    constructors.
    + Add IOUtils.readLines(CharSequence).
    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
    allow configuration reuse.
    + Add RandomAccessFileMode.accept(Path,
    IOConsumer&lt;RandomAccessFile&gt;).
    + Add RandomAccessFileMode.apply(Path,
    IOFunction&lt;RandomAccessFile&gt;, T).
    + Add IOIntConsumer.
    + Add ProxyInputStream.AbstractBuilder. Supports setting a
    consumer for ProxyInputStream.afterRead(int).
    + Add support to AutoCloseInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to BOMInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    BoundedInputStream.onMaxLength(long, long).
    + Add support to ChecksumInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to ThrottledInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to ObservableInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestCalculatingInputStream for
    setting a consumer for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestInputStream for setting a
    consumer for ProxyInputStream.afterRead(int).
  * Fixed Bugs
    + Clean ups in unit tests.
    + Fix some Javadoc issues.
    + RandomAccessFileMode.toString() is more helpful for debugging
    when it inherits from Enum.
    + Fix implicit narrowing conversion in compound assignment in
    UnsynchronizedBufferedReader.skip(long).
    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
    (superscript digits for COM and LPT).
    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
    can throw NoSuchFileException #697, #699.
    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
    throws IOException rather than FileNotFoundException.
    + Use Unicode escapes for superscript characters. #701.
    + IO-863:  Recent incompatible change to FileUtils.listFiles re
    extensions, see also IO-856.
    + IO-857:  Javadoc: Update details for PathUtils "clean"
    behavior.
  * Changes
    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
    [#676], #679, #688.
    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
    [#673], #685, #686, #694, #696, #698.
    + Update AbstractStreamBuilder getters from protected to
    public.</changelog>
</package>
<package pkgid="c53ec8f2bf852b6f654ec413517fbdecfc9e487d8eb2064484a30f7edf63950ab0c7230ec208e351995a4cd1abd2e4fa1c74df83f2d54f6aa8c51a73fed759a4" name="apache-commons-io" arch="noarch">
  <version epoch="0" ver="2.21.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1650369600">- Update to 2.11.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.11.0
- Update to 2.10.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.10.0</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 2.14.0:
  * Lots of new features, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0
  * Fixes bsc#1231298, CVE-2024-47554: untrusted input to XmlStreamReader
    can lead to uncontrolled resource consumption</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 2.15.1
  * Fixed Bugs:
    + Fix wrong issue id in change log
    + Add test for FileChannels.contentEquals()
    + Fix FileChannels.contentEquals()
    + Fix some Javadoc issues in LineIterator and IOUtils
    + Simplify FileAlterationObserver internal processing
    + Avoid NullPointerException in RegexFileFilter
    .RegexFileFilter(Pattern)
    + Avoid NullPointerException in RegexFileFilter
    .accept(Path, BasicFileAttributes)
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .RegexFileFilter defines non-transient non-serializable
    instance field pathToString [org.apache.commons.io.filefilter
    .RegexFileFilter] In RegexFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.filefilter
    .DelegateFileFilter] In DelegateFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileNameFilter [org.apache.commons.io
    .filefilter.DelegateFileFilter] In DelegateFileFilter.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.function.IOStream$1
    .next() cannot throw NoSuchElementException [org.apache
    .commons.io.function.IOStream$1] At IOStream.java:[line 98]
    IT_NO_SUCH_ELEMENT
    + Fix SpotBugs error: org.apache.commons.io.monitor
    .FileAlterationMonitor.getObservers() may expose internal
    representation by returning FileAlterationMonitor.observers
    [org.apache.commons.io.monitor.FileAlterationMonitor] At
    FileAlterationMonitor.java:[line 124] EI_EXPOSE_REP
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field listeners [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.FileCleaningTracker
    .getDeleteFailures() may expose internal representation by
    returning FileCleaningTracker.deleteFailures [org.apache
    .commons.io.FileCleaningTracker] At
    FileCleaningTracker.java:[line 218] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList() may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 118]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList(Class) may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 129]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getDirList() may expose internal
    representation by returning AccumulatorPathVisitor.dirList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 179] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getFileList() may expose internal
    representation by returning AccumulatorPathVisitor.fileList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 188] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.input
    .ObservableInputStream.getObservers() may expose internal
    representation by returning ObservableInputStream.observers
    [org.apache.commons.io.input.ObservableInputStream] At
    ObservableInputStream.java:[line 187] EI_EXPOSE_REP
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int) will leave
    the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 202]
    CT_CONSTRUCTOR_THROW
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int, int) will
    leave the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 223]
    CT_CONSTRUCTOR_THROW
- Upgrade to 2.15.0
  * New features:
    + Add org.apache.commons.io.channels.FileChannels
    + Add RandomAccessFiles#contentEquals(RandomAccessFile,
    RandomAccessFile)
    + Add RandomAccessFiles#reset(RandomAccessFile)
    + Add PathUtilsContentEqualsBenchmark
    + Add org.apache.commons.io.StreamIterator
    + Add MessageDigestInputStream and deprecate
    MessageDigestCalculatingInputStream
  * Fixed Bugs:
    + IO-815: XmlStreamReader encoding match RE is too strict
    + IO-810: Javadoc in FileUtils does not reflect code for thrown
    exceptions
    + IO-812: Javadoc should mention closing Streams based on file
    resources
    + IO-811: In tests, Files.walk() direct and indirect callers
    fail to close the returned Stream
    + IO-811: FileUtils.listFiles(File, String[], boolean) fails to
    close its internal Stream
    + IO-811: FileUtils.iterateFiles(File, String[], boolean) fails
    to close its internal Stream
    + IO-811: StreamIterator fails to close its internal Stream
    + IO-814: Don't throw UncheckedIOException
    + IO-414: Don't write a BOM on every (or any) line
    + IO-814: RandomAccessFileMode.create(Path) provides a better
    NullPointerException message
    + Improve performance of PathUtils.fileContentEquals(Path, Path,
    LinkOption[], OpenOption[]) by about 60%, see
    PathUtilsContentEqualsBenchmark
    + Improve performance of PathUtils.fileContentEquals(Path, Path)
    by about 60%, see PathUtilsContentEqualsBenchmark
    + Improve performance of FileUtils.contentEquals(File, File) by
    about 60%, see PathUtilsContentEqualsBenchmark
    + Remove unused test code
    + [Javadoc] IOUtils#contentEquals does not throw
    NullPointerException
    + Fix CodeQL warnings in UnsynchronizedBufferedInputStream:
    Implicit narrowing conversion in compound assignment
    + MessageDigestCalculatingInputStream
    .MessageDigestMaintainingObserver
    .MessageDigestMaintainingObserver(MessageDigest) now throws a
    NullPointerException if the MessageDigest is null
    + MessageDigestCalculatingInputStream
    .MessageDigestCalculatingInputStream(InputStream,
    MessageDigest) now throws a NullPointerException if the
    MessageDigest is null
    + IO-816: UnsynchronizedBufferedInputStream.read(byte[], int,
    int) does not use buffer</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Upgrade to 2.16.1
  * Fixes:
    + Reimplement FileSystemUtils using NIO.
    + FileSystemUtils no longer throws IllegalStateException. Fixes
    IO-851.
    + Avoid possible NullPointerException in
    FileUtils.listAccumulate(File, IOFileFilter, IOFileFilter,
    FileVisitOption...).
    + BoundedInputStream.reset() not updating count. Fixes IO-853.
    + ThresholdingOutputStream: a negative threshold should behave
    like a zero threshold and trigger the event on the first
    write #609. Fixes IO-854.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.12 to 1.14.13 #605.
    + Bump org.apache.commons:commons-parent from 67 to 69 #608.
- Update apache-commons-io-build.xml for new version
- Includes changes from 2.16.0
  * Fixes:
    + Fix and re-enable testSkip_RequiredCharsets #518.
    + SymbolicLineFileFilter documentation fixes. Fixes IO-824.
    + CharSequenceInputStream.reset() only works once #520. Fixes
    IO-795.
    + Finish TODO on CharSequenceInputStream #540. Fixes IO-795.
    + Add byte array size validation for methods in EndianUtils
    [#521]. Fixes IO-825.
    + Add missing test case CircularByteBufferTest. Fixes IO-825.
    + Make CharSequenceInputStream.available() more correct in the
    face of multibyte encodings #525. Fixes IO-781.
    + Remove unreachable code in AbstractIOFileFilterTest #526.
    Fixes IO-781.
    + Rationalize and unify checking for existence of files and
    directories #529. Fixes IO-808.
    + Avoid NullPointerException in IOCase.checkEquals(String,
    String) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(Path, BasicFileAttributes) on
    null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(Path, BasicFileAttributes) on null
    input.
    + Avoid NullPointerException in EmptyFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in EmptyFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in FileFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in FileFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in IOCase.checkIndexOf(String,
    int, String) on null input.
    + Avoid NullPointerException in
    IOCase.checkRegionMatches(String, int, String) on null input.
    + BoundedInputStream.getCount() should not count EOF.
    + Modernize temporary file creation and deletion in
    DeferredFileOutputStreamTest #535.
    + Add PathMatcher to IOFileFilter class Javadoc #536.
    + Fix CharSequenceInputStream coding exception handling #537.
    Fixes IO-781.
    + Deprecate int CountingInputStream#getCount() in favor of long
    CountingInputStream#getByteCount(). Fixes IO-781.
    + Deprecate CountingInputStream.resetCount() in favor of
    resetByteCount(). Fixes IO-828.
    + Deprecate CountingInputStream.getMaxLength() in favor of
    getMaxCount()). Fixes IO-828.
    + NullInputStream breaks InputStream's read method contract.
    Fixes IO-818.
    + Javadoc shouldn't reference 1.x behavior #539.
    + Don't decode and reencode characters in a potentially
    different charset in
    AbstractOrigin.CharSequenceOrigin.getReader(Charset). Fixes
    IO-829.
    + Let subclasses of CountingInputStream.afterRead(int) throw
    IOException.
    + Characterization test for broken symlinks when copying
    directories #547. Fixes IO-807.
    + ClosedInputStream.read(byte[], int, int) does not always
    return -1.
    + ClosedOutputStream.write(byte[], int, int) does not always
    throw IOException.
    + XmlStreamReader can't parse an XML document with a multi-line
    prolog #550.
    + XmlStreamReader can't parse XML an document with an external
    parsed entity prolog.
    + Update FileNameUtils Javadoc #554. Fixes IO-836.
    + Copy symlinks, not the files the symlinks point to #558.
    Fixes IO-807.
    + Pickup apache-rat-plugin version from parent POM.
    + Add test for copying a symlink
    FileUtilsTest#testCopyFile_symLink() #564.
    + Make copyFile copy symbolic links by value rather than
    reference #565.
    + Deprecate CopyUtils 0-argument constructor.
    + Deprecate EndianUtils 0-argument constructor. Fixes IO-843.
    + Deprecate FileSystemUtils 0-argument constructor.
    + Deprecate FilenameUtils 0-argument constructor.
    + Deprecate RandomAccessFiles 0-argument constructor.
    + Clarify and correct EndianUtils and SwappedDataInputStream
    API doc #566.
    + Add characterization test for copying a symlinked directory
    [#570].
    + RandomAccessFileInputStream.builder().get() now throws ISE
    instead of NPE.
    + Test links to targets outside the source directory #571.
    Fixes IO-845.
    + Focus Javadoc on current version rather than past versions
    [#573], #574.
    + "Self-suppression not permitted" while using BrokenOutput and
    BrokenInput streams with try-with-resources. Fixes IO-469.
    + Handle zero and negative thresholds #587. Fixes IO-405.
    + Deprecate CountingInputStream in favor of BoundedInputStream.
    + PathUtils.setPosixPermissions(...) only sets permissions if
    needed.
    + PathUtils.setReadOnly(...) only sets permissions if needed.
    + PathUtils.deleteFile(..., DeleteOption...) only sets
    permissions if needed.
    + CleaningPathVisitor only sets permissions if needed.
    + DeletingPathVisitor only sets permissions if needed.
  * New features:
    + Add and use PathUtils.getFileName(Path, Function&lt;Path, R&gt;).
    + Add and use PathUtils.getFileNameString().
    + Make public Erase.rethrow(Throwable).
    + Add BrokenInputStream.BrokenInputStream(Throwable). Fixes
    IO-826.
    + Add BrokenReader.BrokenReader(Throwable). Fixes IO-826.
    + Add BrokenOutputStream.BrokenOutputStream(Throwable). Fixes
    IO-826.
    + Add BrokenWriter.BrokenWriter(Throwable). Fixes IO-826.
    + Add BoundedInputStream.getRemaining().
    + Add FileTimes.toNtfsTime(long).
    + Add FileTimes.fromUnixTime(long).
    + Add FileTimes.isUnixTime(FileTime).
    + Add FileTimes.isUnixTime(long).
    + Add FileTimes.toUnixTime(FileTime).
    + Add BrokenInputStream.Builder.
    + Add PathUtils.getExtension(Path).
    + Add PathUtils.getBaseName(Path).
    + Add ThrottledInputStream.
    + Add IORunnable.noop().
    + Add ChecksumInputStream and test #548.
    + Add AbstractStreamBuilder.getReader().
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
    + Add ProxyInputStream.unwrap().
    + Add a running count and builder to BoundedInputStream.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.10 to 1.14.12 #534,
    [#592].
    + Bump org.apache.commons:commons-parent from 65 to 67.
    + Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #583.
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0
    [#593].</changelog>
  <changelog author="fstrba@suse.com" date="1728043200">- Upgrade to 2.17.0
  * New features:
    + Add IOIterator.adapt(Iterable)
    + Add getInputStream() for 'https' and 'http' in URIOrigin
    [#630]. Fixes IO-831
    + Add IOSupplier.getUnchecked()
    + Add CloseShieldInputStream.systemIn(InputStream)
    + Add NullInputStream.init()
    + Add AbstractInputStream and refactor duplicate code
    + Add UnsynchronizedReader
    + Add UnsynchronizedBufferedReader
  * Fixes:
    + FileUtilsWaitForTest does not test anything useful.
    Fixes IO-858.
    + Add missing unit tests
    + FileUtils.lastModifiedFileTime(File) calls
    Objects.requireNonNull() on the wrong object
    + PathUtils.deleteOnExit(Path) calls Objects.requireNonNull()
    on the wrong object
    + Deprecate LineIterator.nextLine() in favor of next()
    + Fix PMD UnnecessaryFullyQualifiedName
    + Add test for CircularByteBuffer clear() #620
    + PathUtils.isPosix(Path, LinkOption...) should return false on
    null input
    + AutoCloseInputStream(InputStream) uses
    ClosedInputStream.INSTANCE when its input is null
    + Avoid NullPointerException in ProxyInputStream.available()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.markSupported()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.mark(int) when
    the underlying input stream is null
    + BufferedFileChannelInputStream.available() returns 0 before
    any reads
    + BufferedFileChannelInputStream.available() should return 0
    instead of -1 at the end of the stream
    + BufferedFileChannelInputStream.available() should return 0
    when the stream is closed instead of throwing an exception
    + CharSequenceInputStream.available() should return 0 after the
    stream is closed
    + BoundedInputStream.available() should return 0 when the
    stream is closed
    + CircularInputStream.available() should return 0 when the
    stream is closed
    + InfiniteCircularInputStream.available() should return 0 when
    the stream is closed
    + ChecksumInputStream(InputStream, Checksum, long, long) should
    fail-fast on null Checksum input
    + Deprecate NullInputStream.INSTANCE in favor of constructors
    + NullInputStream.available() should return 0 after the stream
    is closed
    + MemoryMappedFileInputStream.available() should return 0 after
    the stream is closed
    + RandomAccessFileInputStream.available() should return 0 after
    the stream is closed
    + ReaderInputStream.available() should return 0 after the
    stream is closed
    + AutoCloseInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + BoundedInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + NullInputStream.read(*) should throw IOException when it is
    closed
    + NullInputStream.read(byte[]) should return 0 when the input
    byte array in length 0
    + NullInputStream.read(byte[], int, int) should return 0 when
    the input byte array in length 0 or requested length is 0
    + MarkShieldInputStream.read(*) should throw IOException when
    it is closed
    + Replace deprecated constant FileFileFilter.FILE in Javadoc
    [#657]
    + Pick up exec-maven-plugin version from parent POM
  * Updates:
    + Bump tests commons.bytebuddy.version from 1.14.13 to 1.15.1
    [#615], #621, #631, #635, #642, #658, #663, #665
    + Bump tests commons-codec:commons-codec from 1.16.1 to 1.17.1
    [#644]
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.4.1
    [#632], #652, #659
    + Bump org.apache.commons:commons-parent from 69 to 74 #628,
    [#637], #649, #661, #664
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#645], #653, #666</changelog>
  <changelog author="gus.kenion@suse.com" date="1737720000">- Upgrade to 2.18.0
  * New features
    + Add @FunctionalInterface to ClassNameMatcher.
    + Add ValidatingObjectInputStream.Builder and
    ValidatingObjectInputStream.builder().
    + Add a "Safe Deserialization" section to the User Guide for
    the site.
    + Add IORandomAccessFile.
    + Add RandomAccessFileMode.io(String).
    + Add FileAlterationObserver.Builder() and deprecate most
    constructors.
    + Add IOUtils.readLines(CharSequence).
    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
    allow configuration reuse.
    + Add RandomAccessFileMode.accept(Path,
    IOConsumer&lt;RandomAccessFile&gt;).
    + Add RandomAccessFileMode.apply(Path,
    IOFunction&lt;RandomAccessFile&gt;, T).
    + Add IOIntConsumer.
    + Add ProxyInputStream.AbstractBuilder. Supports setting a
    consumer for ProxyInputStream.afterRead(int).
    + Add support to AutoCloseInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to BOMInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    BoundedInputStream.onMaxLength(long, long).
    + Add support to ChecksumInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to ThrottledInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to ObservableInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestCalculatingInputStream for
    setting a consumer for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestInputStream for setting a
    consumer for ProxyInputStream.afterRead(int).
  * Fixed Bugs
    + Clean ups in unit tests.
    + Fix some Javadoc issues.
    + RandomAccessFileMode.toString() is more helpful for debugging
    when it inherits from Enum.
    + Fix implicit narrowing conversion in compound assignment in
    UnsynchronizedBufferedReader.skip(long).
    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
    (superscript digits for COM and LPT).
    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
    can throw NoSuchFileException #697, #699.
    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
    throws IOException rather than FileNotFoundException.
    + Use Unicode escapes for superscript characters. #701.
    + IO-863:  Recent incompatible change to FileUtils.listFiles re
    extensions, see also IO-856.
    + IO-857:  Javadoc: Update details for PathUtils "clean"
    behavior.
  * Changes
    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
    [#676], #679, #688.
    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
    [#673], #685, #686, #694, #696, #698.
    + Update AbstractStreamBuilder getters from protected to
    public.</changelog>
  <changelog author="fstrba@suse.com" date="1770379200">- Upgrade to 2.19.0
  * New features
    + Add ThrottledInputStream.Builder.setMaxBytes(long,
    ChronoUnit)
    + Add IOIterable
    + ReversedLinesFileReader implements IOIterable&lt;String&gt;
    + Add AbstractByteArrayOutputStream.write(CharSequence,
    Charset)
    + Add AbstractByteArrayOutputStream.write(byte[])
    + Add RandomAccessFileOutputStream.getRandomAccessFile()
    + Add ProxyInputStream.setReference(InputStream), was
    package-private setIn(InputStream)
    + Add ProxyOutputStream.setReference(OutputStream)
    + Add RandomAccessFileInputStream.copy(long, long,
    OutputStream)
    + Add ProxyOutputStream.Builder
    + Add ByteOrderMark.matches(int[])
    + Add BrokenOutputStream.BrokenOutputStream(Function&lt;String&gt;,
    Throwable&gt;) and deprecate Supplier&lt;String&gt; constructor
    + Add IOBooleanSupplier
    + Add Uncheck.getAsBoolean(IOBooleanSupplier)
    + Add FileChannels.contentEquals(SeekableByteChannel,
    SeekableByteChannel, int)
    + Add FileChannels.contentEquals(ReadableByteChannel,
    ReadableByteChannel, int)
    + Add SimplePathVisitor.AbstractBuilder
    + Add CountingPathVisitor.AbstractBuilder and
    CountingPathVisitor.Builder
    + Add AccumulatorPathVisitor.Builder and builder()
    + Add PathUtils.contentEquals(FileSystem, FileSystem)
  * Fixed Bugs
    + Deprecate constructor Counters.Counters() to be private in
    4.0
    + Deprecate constructor Charsets.Charsets() to be private in
    4.0
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache
    + Javadoc is missing its Overview page
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80)
    + Deprecate DeferredFileOutputStream.getStream() in favor of
    getOutputStream()
    + Improve Javadoc for a BoundedInputStream builder() throwing
    IOException
    + Improve Javadoc for all implementations of
    AbstractOriginSupplier#get()
    + The Consumer to IOUtils.closeQuietly(Closeable, Consumer) now
    accepts Exception, not just IOException
    + The Consumer to IOUtils.close(Closeable, IOConsumer) now
    accepts wrapped Exception, not just IOException
    + Use Uncheck.getAsBoolean(IOBooleanSupplier) to avoid boxing
    and unboxing of boolean values
    + Avoid unnecessary boxing and unboxing of long values in
    FileUtils.sizeOf(File)
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedBufferedReader.read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterInputStream.available() and read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterReader.read()
    + FileChannels.contentEquals(FileChannel, FileChannel, int) can
    return false when comparing a non-blocking channel
    + Deprecate FileChannels.contentEquals(FileChannel, FileChannel,
    int) in favor of FileChannels
    .contentEquals(SeekableByteChannel, SeekableByteChannel, int)
    + Improve performance of IOUtils.contentEquals(InputStream,
    InputStream) by about 13%
    + PathUtils.copyFileToDirectory() across file systems
    + IOUtils.contentEquals is incorrect when InputStream.available
    under-reports
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToFileTime(FileTimes.java:164).
    See also https://issues.apache.org/jira/browse/MDEP-978
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToDate(long)
    + FileTimes.toNtfsTime(*) methods can overflow result values
    + Fix Javadoc for ChunkedOutputStream.Builder
    + General Javadoc improvements
    + Calling QueueInputStream.QueueInputStream(null) maps to the
    same kind of default blocking queue as
    QueueInputStream.Builder.setBlockingQueue(null)
    + CopyDirectoryVisitor creates incorrect file names when
    copying between different file systems that use different file
    system separators ("/" versus "\"); fixes
    PathUtils.copyDirectory(Path, Path, CopyOption...)
    + ThreadUtils.sleep(Duration) should handle the underlying OS
    time changing
  * Changes
    + Bump commons.bytebuddy.version from 1.15.10 to 1.17.5
    + Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
    + Bump org.apache.commons:commons-parent from 78 to 81</changelog>
  <changelog author="fstrba@suse.com" date="1770379201">- Upgrade to 2.20.0
  * New features
    + Add org.apache.commons.io.file.CountingPathVisitor
    .accept(Path, BasicFileAttributes)
    + Add org.apache.commons.io.Charsets.isAlias(Charset, String)
    + Add org.apache.commons.io.Charsets.isUTF8(Charset)
    + Add org.apache.commons.io.Charsets.toCharsetDefault(String,
    Charset)
    + Add Tailer ignoreTouch option
  * Fixed Bugs
    + [javadoc] Rename parameter of ProxyOutputStream.write(int)
    + CopyDirectoryVisitor ignores fileFilter
    + org.apache.commons.io.build.AbstractOrigin.getReader(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getReader(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.getWriter(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin
    .getWriter(Charset) now maps a null Charset to the default
    Charset
    + FileUtils.readLines(File, Charset) now maps a null Charset to
    the default Charset
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream,
    org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 77] Another occurrence
    at WindowsLineEndingInputStream.java:[line 81]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 112]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 113]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 75]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atEos" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 120]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 124]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 125]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "closed" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.ProxyInputStream] At
    ProxyInputStream.java:[line 233]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "propagateClose" in one thread may not yield the value of the
    most recent write from another thread
    [org.apache.commons.io.input.BoundedInputStream] At
    BoundedInputStream.java:[line 555]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + QueueInputStream reads all but the first byte without waiting
    + Javadoc fixes and improvements
    + Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter
    .accept(File)
    + FileUtils.forceDelete can delete a broken symlink again
    + Fix infinite loop in AbstractByteArrayOutputStream
  * Changes
    + Bump commons.bytebuddy.version from 1.17.5 to 1.17.6
    + Bump org.apache.commons:commons-parent from 81 to 85
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0</changelog>
  <changelog author="fstrba@suse.com" date="1770379202">- Upgrade to 2.21.0
  * New features
    + FileUtils#byteCountToDisplaySize() supports Zettabyte,
    Yottabyte, Ronnabyte and Quettabyte
    + Add org.apache.commons.io.FileUtils.ONE_RB
    + Add org.apache.commons.io.FileUtils.ONE_QB
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], int, int, long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(int, long)
    + Add length unit support in FileSystem limits
    + Add IOUtils.toByteArray(InputStream, int, int) for safer
    chunked reading with size validation
    + Add org.apache.commons.io.file.PathUtils.getPath(String,
    String)
    + Add org.apache.commons.io.channels
    .ByteArraySeekableByteChannel
    + Add IOIterable.asIterable()
    + Add NIO channel support to 'AbstractStreamBuilder'
    + Add CloseShieldChannel to close-shielded NIO Channels
    + Added IOUtils.checkFromIndexSize as a Java 8 backport of
    Objects.checkFromIndexSize
  * Fixed Bugs
    + When testing on Java 21 and up, enable
  - XX:+EnableDynamicAgentLoading
    + When testing on Java 24 and up, don't fail
    FileUtilsListFilesTest for a different behavior in the JRE
    + ValidatingObjectInputStream does not validate dynamic proxy
    interfaces
    + BoundedInputStream.getRemaining() now reports Long.MAX_VALUE
    instead of 0 when no limit is set
    + BoundedInputStream.available() correctly accounts for the
    maximum read limit
    + Deprecate IOUtils.readFully(InputStream, int) in favor of
    toByteArray(InputStream, int)
    + IOUtils.toByteArray(InputStream) now throws IOException on
    byte array overflow
    + Javadoc general improvements
    + IOUtils.toByteArray() now throws EOFException when not enough
    data is available
    + Fix IOUtils.skip() usage in concurrent scenarios
    + [javadoc] Fix XmlStreamReader Javadoc to indicate the correct
    class that is built
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 91
    + [test] Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
    + [test] Bump commons.bytebuddy.version from 1.17.6 to 1.17.8
    + [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to
    3.19.0
  * Removed
    + Inline private constant field
    ProxyInputStream.exceptionHandler</changelog>
</package>
<package pkgid="e9dbee450947a91ab2792d40dbc5eec63e813b495f78b38671264f5355f974eb6bd183d4be3e722f70347fc20c27c0c78789335b0aa919b17b1e710e8061a72b" name="apache-commons-io" arch="noarch">
  <version epoch="0" ver="2.22.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 2.14.0:
  * Lots of new features, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0
  * Fixes bsc#1231298, CVE-2024-47554: untrusted input to XmlStreamReader
    can lead to uncontrolled resource consumption</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 2.15.1
  * Fixed Bugs:
    + Fix wrong issue id in change log
    + Add test for FileChannels.contentEquals()
    + Fix FileChannels.contentEquals()
    + Fix some Javadoc issues in LineIterator and IOUtils
    + Simplify FileAlterationObserver internal processing
    + Avoid NullPointerException in RegexFileFilter
    .RegexFileFilter(Pattern)
    + Avoid NullPointerException in RegexFileFilter
    .accept(Path, BasicFileAttributes)
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .RegexFileFilter defines non-transient non-serializable
    instance field pathToString [org.apache.commons.io.filefilter
    .RegexFileFilter] In RegexFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.filefilter
    .DelegateFileFilter] In DelegateFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileNameFilter [org.apache.commons.io
    .filefilter.DelegateFileFilter] In DelegateFileFilter.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.function.IOStream$1
    .next() cannot throw NoSuchElementException [org.apache
    .commons.io.function.IOStream$1] At IOStream.java:[line 98]
    IT_NO_SUCH_ELEMENT
    + Fix SpotBugs error: org.apache.commons.io.monitor
    .FileAlterationMonitor.getObservers() may expose internal
    representation by returning FileAlterationMonitor.observers
    [org.apache.commons.io.monitor.FileAlterationMonitor] At
    FileAlterationMonitor.java:[line 124] EI_EXPOSE_REP
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field listeners [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.FileCleaningTracker
    .getDeleteFailures() may expose internal representation by
    returning FileCleaningTracker.deleteFailures [org.apache
    .commons.io.FileCleaningTracker] At
    FileCleaningTracker.java:[line 218] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList() may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 118]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList(Class) may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 129]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getDirList() may expose internal
    representation by returning AccumulatorPathVisitor.dirList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 179] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getFileList() may expose internal
    representation by returning AccumulatorPathVisitor.fileList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 188] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.input
    .ObservableInputStream.getObservers() may expose internal
    representation by returning ObservableInputStream.observers
    [org.apache.commons.io.input.ObservableInputStream] At
    ObservableInputStream.java:[line 187] EI_EXPOSE_REP
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int) will leave
    the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 202]
    CT_CONSTRUCTOR_THROW
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int, int) will
    leave the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 223]
    CT_CONSTRUCTOR_THROW
- Upgrade to 2.15.0
  * New features:
    + Add org.apache.commons.io.channels.FileChannels
    + Add RandomAccessFiles#contentEquals(RandomAccessFile,
    RandomAccessFile)
    + Add RandomAccessFiles#reset(RandomAccessFile)
    + Add PathUtilsContentEqualsBenchmark
    + Add org.apache.commons.io.StreamIterator
    + Add MessageDigestInputStream and deprecate
    MessageDigestCalculatingInputStream
  * Fixed Bugs:
    + IO-815: XmlStreamReader encoding match RE is too strict
    + IO-810: Javadoc in FileUtils does not reflect code for thrown
    exceptions
    + IO-812: Javadoc should mention closing Streams based on file
    resources
    + IO-811: In tests, Files.walk() direct and indirect callers
    fail to close the returned Stream
    + IO-811: FileUtils.listFiles(File, String[], boolean) fails to
    close its internal Stream
    + IO-811: FileUtils.iterateFiles(File, String[], boolean) fails
    to close its internal Stream
    + IO-811: StreamIterator fails to close its internal Stream
    + IO-814: Don't throw UncheckedIOException
    + IO-414: Don't write a BOM on every (or any) line
    + IO-814: RandomAccessFileMode.create(Path) provides a better
    NullPointerException message
    + Improve performance of PathUtils.fileContentEquals(Path, Path,
    LinkOption[], OpenOption[]) by about 60%, see
    PathUtilsContentEqualsBenchmark
    + Improve performance of PathUtils.fileContentEquals(Path, Path)
    by about 60%, see PathUtilsContentEqualsBenchmark
    + Improve performance of FileUtils.contentEquals(File, File) by
    about 60%, see PathUtilsContentEqualsBenchmark
    + Remove unused test code
    + [Javadoc] IOUtils#contentEquals does not throw
    NullPointerException
    + Fix CodeQL warnings in UnsynchronizedBufferedInputStream:
    Implicit narrowing conversion in compound assignment
    + MessageDigestCalculatingInputStream
    .MessageDigestMaintainingObserver
    .MessageDigestMaintainingObserver(MessageDigest) now throws a
    NullPointerException if the MessageDigest is null
    + MessageDigestCalculatingInputStream
    .MessageDigestCalculatingInputStream(InputStream,
    MessageDigest) now throws a NullPointerException if the
    MessageDigest is null
    + IO-816: UnsynchronizedBufferedInputStream.read(byte[], int,
    int) does not use buffer</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Upgrade to 2.16.1
  * Fixes:
    + Reimplement FileSystemUtils using NIO.
    + FileSystemUtils no longer throws IllegalStateException. Fixes
    IO-851.
    + Avoid possible NullPointerException in
    FileUtils.listAccumulate(File, IOFileFilter, IOFileFilter,
    FileVisitOption...).
    + BoundedInputStream.reset() not updating count. Fixes IO-853.
    + ThresholdingOutputStream: a negative threshold should behave
    like a zero threshold and trigger the event on the first
    write #609. Fixes IO-854.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.12 to 1.14.13 #605.
    + Bump org.apache.commons:commons-parent from 67 to 69 #608.
- Update apache-commons-io-build.xml for new version
- Includes changes from 2.16.0
  * Fixes:
    + Fix and re-enable testSkip_RequiredCharsets #518.
    + SymbolicLineFileFilter documentation fixes. Fixes IO-824.
    + CharSequenceInputStream.reset() only works once #520. Fixes
    IO-795.
    + Finish TODO on CharSequenceInputStream #540. Fixes IO-795.
    + Add byte array size validation for methods in EndianUtils
    [#521]. Fixes IO-825.
    + Add missing test case CircularByteBufferTest. Fixes IO-825.
    + Make CharSequenceInputStream.available() more correct in the
    face of multibyte encodings #525. Fixes IO-781.
    + Remove unreachable code in AbstractIOFileFilterTest #526.
    Fixes IO-781.
    + Rationalize and unify checking for existence of files and
    directories #529. Fixes IO-808.
    + Avoid NullPointerException in IOCase.checkEquals(String,
    String) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(Path, BasicFileAttributes) on
    null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(Path, BasicFileAttributes) on null
    input.
    + Avoid NullPointerException in EmptyFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in EmptyFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in FileFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in FileFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in IOCase.checkIndexOf(String,
    int, String) on null input.
    + Avoid NullPointerException in
    IOCase.checkRegionMatches(String, int, String) on null input.
    + BoundedInputStream.getCount() should not count EOF.
    + Modernize temporary file creation and deletion in
    DeferredFileOutputStreamTest #535.
    + Add PathMatcher to IOFileFilter class Javadoc #536.
    + Fix CharSequenceInputStream coding exception handling #537.
    Fixes IO-781.
    + Deprecate int CountingInputStream#getCount() in favor of long
    CountingInputStream#getByteCount(). Fixes IO-781.
    + Deprecate CountingInputStream.resetCount() in favor of
    resetByteCount(). Fixes IO-828.
    + Deprecate CountingInputStream.getMaxLength() in favor of
    getMaxCount()). Fixes IO-828.
    + NullInputStream breaks InputStream's read method contract.
    Fixes IO-818.
    + Javadoc shouldn't reference 1.x behavior #539.
    + Don't decode and reencode characters in a potentially
    different charset in
    AbstractOrigin.CharSequenceOrigin.getReader(Charset). Fixes
    IO-829.
    + Let subclasses of CountingInputStream.afterRead(int) throw
    IOException.
    + Characterization test for broken symlinks when copying
    directories #547. Fixes IO-807.
    + ClosedInputStream.read(byte[], int, int) does not always
    return -1.
    + ClosedOutputStream.write(byte[], int, int) does not always
    throw IOException.
    + XmlStreamReader can't parse an XML document with a multi-line
    prolog #550.
    + XmlStreamReader can't parse XML an document with an external
    parsed entity prolog.
    + Update FileNameUtils Javadoc #554. Fixes IO-836.
    + Copy symlinks, not the files the symlinks point to #558.
    Fixes IO-807.
    + Pickup apache-rat-plugin version from parent POM.
    + Add test for copying a symlink
    FileUtilsTest#testCopyFile_symLink() #564.
    + Make copyFile copy symbolic links by value rather than
    reference #565.
    + Deprecate CopyUtils 0-argument constructor.
    + Deprecate EndianUtils 0-argument constructor. Fixes IO-843.
    + Deprecate FileSystemUtils 0-argument constructor.
    + Deprecate FilenameUtils 0-argument constructor.
    + Deprecate RandomAccessFiles 0-argument constructor.
    + Clarify and correct EndianUtils and SwappedDataInputStream
    API doc #566.
    + Add characterization test for copying a symlinked directory
    [#570].
    + RandomAccessFileInputStream.builder().get() now throws ISE
    instead of NPE.
    + Test links to targets outside the source directory #571.
    Fixes IO-845.
    + Focus Javadoc on current version rather than past versions
    [#573], #574.
    + "Self-suppression not permitted" while using BrokenOutput and
    BrokenInput streams with try-with-resources. Fixes IO-469.
    + Handle zero and negative thresholds #587. Fixes IO-405.
    + Deprecate CountingInputStream in favor of BoundedInputStream.
    + PathUtils.setPosixPermissions(...) only sets permissions if
    needed.
    + PathUtils.setReadOnly(...) only sets permissions if needed.
    + PathUtils.deleteFile(..., DeleteOption...) only sets
    permissions if needed.
    + CleaningPathVisitor only sets permissions if needed.
    + DeletingPathVisitor only sets permissions if needed.
  * New features:
    + Add and use PathUtils.getFileName(Path, Function&lt;Path, R&gt;).
    + Add and use PathUtils.getFileNameString().
    + Make public Erase.rethrow(Throwable).
    + Add BrokenInputStream.BrokenInputStream(Throwable). Fixes
    IO-826.
    + Add BrokenReader.BrokenReader(Throwable). Fixes IO-826.
    + Add BrokenOutputStream.BrokenOutputStream(Throwable). Fixes
    IO-826.
    + Add BrokenWriter.BrokenWriter(Throwable). Fixes IO-826.
    + Add BoundedInputStream.getRemaining().
    + Add FileTimes.toNtfsTime(long).
    + Add FileTimes.fromUnixTime(long).
    + Add FileTimes.isUnixTime(FileTime).
    + Add FileTimes.isUnixTime(long).
    + Add FileTimes.toUnixTime(FileTime).
    + Add BrokenInputStream.Builder.
    + Add PathUtils.getExtension(Path).
    + Add PathUtils.getBaseName(Path).
    + Add ThrottledInputStream.
    + Add IORunnable.noop().
    + Add ChecksumInputStream and test #548.
    + Add AbstractStreamBuilder.getReader().
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
    + Add ProxyInputStream.unwrap().
    + Add a running count and builder to BoundedInputStream.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.10 to 1.14.12 #534,
    [#592].
    + Bump org.apache.commons:commons-parent from 65 to 67.
    + Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #583.
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0
    [#593].</changelog>
  <changelog author="fstrba@suse.com" date="1728043200">- Upgrade to 2.17.0
  * New features:
    + Add IOIterator.adapt(Iterable)
    + Add getInputStream() for 'https' and 'http' in URIOrigin
    [#630]. Fixes IO-831
    + Add IOSupplier.getUnchecked()
    + Add CloseShieldInputStream.systemIn(InputStream)
    + Add NullInputStream.init()
    + Add AbstractInputStream and refactor duplicate code
    + Add UnsynchronizedReader
    + Add UnsynchronizedBufferedReader
  * Fixes:
    + FileUtilsWaitForTest does not test anything useful.
    Fixes IO-858.
    + Add missing unit tests
    + FileUtils.lastModifiedFileTime(File) calls
    Objects.requireNonNull() on the wrong object
    + PathUtils.deleteOnExit(Path) calls Objects.requireNonNull()
    on the wrong object
    + Deprecate LineIterator.nextLine() in favor of next()
    + Fix PMD UnnecessaryFullyQualifiedName
    + Add test for CircularByteBuffer clear() #620
    + PathUtils.isPosix(Path, LinkOption...) should return false on
    null input
    + AutoCloseInputStream(InputStream) uses
    ClosedInputStream.INSTANCE when its input is null
    + Avoid NullPointerException in ProxyInputStream.available()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.markSupported()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.mark(int) when
    the underlying input stream is null
    + BufferedFileChannelInputStream.available() returns 0 before
    any reads
    + BufferedFileChannelInputStream.available() should return 0
    instead of -1 at the end of the stream
    + BufferedFileChannelInputStream.available() should return 0
    when the stream is closed instead of throwing an exception
    + CharSequenceInputStream.available() should return 0 after the
    stream is closed
    + BoundedInputStream.available() should return 0 when the
    stream is closed
    + CircularInputStream.available() should return 0 when the
    stream is closed
    + InfiniteCircularInputStream.available() should return 0 when
    the stream is closed
    + ChecksumInputStream(InputStream, Checksum, long, long) should
    fail-fast on null Checksum input
    + Deprecate NullInputStream.INSTANCE in favor of constructors
    + NullInputStream.available() should return 0 after the stream
    is closed
    + MemoryMappedFileInputStream.available() should return 0 after
    the stream is closed
    + RandomAccessFileInputStream.available() should return 0 after
    the stream is closed
    + ReaderInputStream.available() should return 0 after the
    stream is closed
    + AutoCloseInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + BoundedInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + NullInputStream.read(*) should throw IOException when it is
    closed
    + NullInputStream.read(byte[]) should return 0 when the input
    byte array in length 0
    + NullInputStream.read(byte[], int, int) should return 0 when
    the input byte array in length 0 or requested length is 0
    + MarkShieldInputStream.read(*) should throw IOException when
    it is closed
    + Replace deprecated constant FileFileFilter.FILE in Javadoc
    [#657]
    + Pick up exec-maven-plugin version from parent POM
  * Updates:
    + Bump tests commons.bytebuddy.version from 1.14.13 to 1.15.1
    [#615], #621, #631, #635, #642, #658, #663, #665
    + Bump tests commons-codec:commons-codec from 1.16.1 to 1.17.1
    [#644]
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.4.1
    [#632], #652, #659
    + Bump org.apache.commons:commons-parent from 69 to 74 #628,
    [#637], #649, #661, #664
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#645], #653, #666</changelog>
  <changelog author="gus.kenion@suse.com" date="1737720000">- Upgrade to 2.18.0
  * New features
    + Add @FunctionalInterface to ClassNameMatcher.
    + Add ValidatingObjectInputStream.Builder and
    ValidatingObjectInputStream.builder().
    + Add a "Safe Deserialization" section to the User Guide for
    the site.
    + Add IORandomAccessFile.
    + Add RandomAccessFileMode.io(String).
    + Add FileAlterationObserver.Builder() and deprecate most
    constructors.
    + Add IOUtils.readLines(CharSequence).
    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
    allow configuration reuse.
    + Add RandomAccessFileMode.accept(Path,
    IOConsumer&lt;RandomAccessFile&gt;).
    + Add RandomAccessFileMode.apply(Path,
    IOFunction&lt;RandomAccessFile&gt;, T).
    + Add IOIntConsumer.
    + Add ProxyInputStream.AbstractBuilder. Supports setting a
    consumer for ProxyInputStream.afterRead(int).
    + Add support to AutoCloseInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to BOMInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    BoundedInputStream.onMaxLength(long, long).
    + Add support to ChecksumInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to ThrottledInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to ObservableInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestCalculatingInputStream for
    setting a consumer for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestInputStream for setting a
    consumer for ProxyInputStream.afterRead(int).
  * Fixed Bugs
    + Clean ups in unit tests.
    + Fix some Javadoc issues.
    + RandomAccessFileMode.toString() is more helpful for debugging
    when it inherits from Enum.
    + Fix implicit narrowing conversion in compound assignment in
    UnsynchronizedBufferedReader.skip(long).
    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
    (superscript digits for COM and LPT).
    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
    can throw NoSuchFileException #697, #699.
    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
    throws IOException rather than FileNotFoundException.
    + Use Unicode escapes for superscript characters. #701.
    + IO-863:  Recent incompatible change to FileUtils.listFiles re
    extensions, see also IO-856.
    + IO-857:  Javadoc: Update details for PathUtils "clean"
    behavior.
  * Changes
    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
    [#676], #679, #688.
    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
    [#673], #685, #686, #694, #696, #698.
    + Update AbstractStreamBuilder getters from protected to
    public.</changelog>
  <changelog author="fstrba@suse.com" date="1770379200">- Upgrade to 2.19.0
  * New features
    + Add ThrottledInputStream.Builder.setMaxBytes(long,
    ChronoUnit)
    + Add IOIterable
    + ReversedLinesFileReader implements IOIterable&lt;String&gt;
    + Add AbstractByteArrayOutputStream.write(CharSequence,
    Charset)
    + Add AbstractByteArrayOutputStream.write(byte[])
    + Add RandomAccessFileOutputStream.getRandomAccessFile()
    + Add ProxyInputStream.setReference(InputStream), was
    package-private setIn(InputStream)
    + Add ProxyOutputStream.setReference(OutputStream)
    + Add RandomAccessFileInputStream.copy(long, long,
    OutputStream)
    + Add ProxyOutputStream.Builder
    + Add ByteOrderMark.matches(int[])
    + Add BrokenOutputStream.BrokenOutputStream(Function&lt;String&gt;,
    Throwable&gt;) and deprecate Supplier&lt;String&gt; constructor
    + Add IOBooleanSupplier
    + Add Uncheck.getAsBoolean(IOBooleanSupplier)
    + Add FileChannels.contentEquals(SeekableByteChannel,
    SeekableByteChannel, int)
    + Add FileChannels.contentEquals(ReadableByteChannel,
    ReadableByteChannel, int)
    + Add SimplePathVisitor.AbstractBuilder
    + Add CountingPathVisitor.AbstractBuilder and
    CountingPathVisitor.Builder
    + Add AccumulatorPathVisitor.Builder and builder()
    + Add PathUtils.contentEquals(FileSystem, FileSystem)
  * Fixed Bugs
    + Deprecate constructor Counters.Counters() to be private in
    4.0
    + Deprecate constructor Charsets.Charsets() to be private in
    4.0
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache
    + Javadoc is missing its Overview page
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80)
    + Deprecate DeferredFileOutputStream.getStream() in favor of
    getOutputStream()
    + Improve Javadoc for a BoundedInputStream builder() throwing
    IOException
    + Improve Javadoc for all implementations of
    AbstractOriginSupplier#get()
    + The Consumer to IOUtils.closeQuietly(Closeable, Consumer) now
    accepts Exception, not just IOException
    + The Consumer to IOUtils.close(Closeable, IOConsumer) now
    accepts wrapped Exception, not just IOException
    + Use Uncheck.getAsBoolean(IOBooleanSupplier) to avoid boxing
    and unboxing of boolean values
    + Avoid unnecessary boxing and unboxing of long values in
    FileUtils.sizeOf(File)
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedBufferedReader.read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterInputStream.available() and read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterReader.read()
    + FileChannels.contentEquals(FileChannel, FileChannel, int) can
    return false when comparing a non-blocking channel
    + Deprecate FileChannels.contentEquals(FileChannel, FileChannel,
    int) in favor of FileChannels
    .contentEquals(SeekableByteChannel, SeekableByteChannel, int)
    + Improve performance of IOUtils.contentEquals(InputStream,
    InputStream) by about 13%
    + PathUtils.copyFileToDirectory() across file systems
    + IOUtils.contentEquals is incorrect when InputStream.available
    under-reports
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToFileTime(FileTimes.java:164).
    See also https://issues.apache.org/jira/browse/MDEP-978
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToDate(long)
    + FileTimes.toNtfsTime(*) methods can overflow result values
    + Fix Javadoc for ChunkedOutputStream.Builder
    + General Javadoc improvements
    + Calling QueueInputStream.QueueInputStream(null) maps to the
    same kind of default blocking queue as
    QueueInputStream.Builder.setBlockingQueue(null)
    + CopyDirectoryVisitor creates incorrect file names when
    copying between different file systems that use different file
    system separators ("/" versus "\"); fixes
    PathUtils.copyDirectory(Path, Path, CopyOption...)
    + ThreadUtils.sleep(Duration) should handle the underlying OS
    time changing
  * Changes
    + Bump commons.bytebuddy.version from 1.15.10 to 1.17.5
    + Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
    + Bump org.apache.commons:commons-parent from 78 to 81</changelog>
  <changelog author="fstrba@suse.com" date="1770379201">- Upgrade to 2.20.0
  * New features
    + Add org.apache.commons.io.file.CountingPathVisitor
    .accept(Path, BasicFileAttributes)
    + Add org.apache.commons.io.Charsets.isAlias(Charset, String)
    + Add org.apache.commons.io.Charsets.isUTF8(Charset)
    + Add org.apache.commons.io.Charsets.toCharsetDefault(String,
    Charset)
    + Add Tailer ignoreTouch option
  * Fixed Bugs
    + [javadoc] Rename parameter of ProxyOutputStream.write(int)
    + CopyDirectoryVisitor ignores fileFilter
    + org.apache.commons.io.build.AbstractOrigin.getReader(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getReader(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.getWriter(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin
    .getWriter(Charset) now maps a null Charset to the default
    Charset
    + FileUtils.readLines(File, Charset) now maps a null Charset to
    the default Charset
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream,
    org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 77] Another occurrence
    at WindowsLineEndingInputStream.java:[line 81]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 112]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 113]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 75]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atEos" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 120]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 124]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 125]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "closed" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.ProxyInputStream] At
    ProxyInputStream.java:[line 233]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "propagateClose" in one thread may not yield the value of the
    most recent write from another thread
    [org.apache.commons.io.input.BoundedInputStream] At
    BoundedInputStream.java:[line 555]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + QueueInputStream reads all but the first byte without waiting
    + Javadoc fixes and improvements
    + Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter
    .accept(File)
    + FileUtils.forceDelete can delete a broken symlink again
    + Fix infinite loop in AbstractByteArrayOutputStream
  * Changes
    + Bump commons.bytebuddy.version from 1.17.5 to 1.17.6
    + Bump org.apache.commons:commons-parent from 81 to 85
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0</changelog>
  <changelog author="fstrba@suse.com" date="1770379202">- Upgrade to 2.21.0
  * New features
    + FileUtils#byteCountToDisplaySize() supports Zettabyte,
    Yottabyte, Ronnabyte and Quettabyte
    + Add org.apache.commons.io.FileUtils.ONE_RB
    + Add org.apache.commons.io.FileUtils.ONE_QB
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], int, int, long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(int, long)
    + Add length unit support in FileSystem limits
    + Add IOUtils.toByteArray(InputStream, int, int) for safer
    chunked reading with size validation
    + Add org.apache.commons.io.file.PathUtils.getPath(String,
    String)
    + Add org.apache.commons.io.channels
    .ByteArraySeekableByteChannel
    + Add IOIterable.asIterable()
    + Add NIO channel support to 'AbstractStreamBuilder'
    + Add CloseShieldChannel to close-shielded NIO Channels
    + Added IOUtils.checkFromIndexSize as a Java 8 backport of
    Objects.checkFromIndexSize
  * Fixed Bugs
    + When testing on Java 21 and up, enable
  - XX:+EnableDynamicAgentLoading
    + When testing on Java 24 and up, don't fail
    FileUtilsListFilesTest for a different behavior in the JRE
    + ValidatingObjectInputStream does not validate dynamic proxy
    interfaces
    + BoundedInputStream.getRemaining() now reports Long.MAX_VALUE
    instead of 0 when no limit is set
    + BoundedInputStream.available() correctly accounts for the
    maximum read limit
    + Deprecate IOUtils.readFully(InputStream, int) in favor of
    toByteArray(InputStream, int)
    + IOUtils.toByteArray(InputStream) now throws IOException on
    byte array overflow
    + Javadoc general improvements
    + IOUtils.toByteArray() now throws EOFException when not enough
    data is available
    + Fix IOUtils.skip() usage in concurrent scenarios
    + [javadoc] Fix XmlStreamReader Javadoc to indicate the correct
    class that is built
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 91
    + [test] Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
    + [test] Bump commons.bytebuddy.version from 1.17.6 to 1.17.8
    + [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to
    3.19.0
  * Removed
    + Inline private constant field
    ProxyInputStream.exceptionHandler</changelog>
  <changelog author="fstrba@suse.com" date="1778068800">- Upgrade to 2.22.0
  * New features
    + Add and use IOUtils.closeQuietlySuppress(Closeable, Throwable)
    + Add ProxyWriter.setReference(Writer)
    + Add ProxyWriter.unwrap()
    + Add ProxyReader.setReference(Reader)
    +Add ProxyReader.unrwap()
    + IO-883: ByteArraySeekableByteChannel should optionally
    configure a read-only channel
    + IO-883: Add ByteArraySeekableByteChannel.Builder and builder()
    + IO-883: Add AbstractStreamBuilder.getByteArray()
    + CloseShieldInputStream now supports a custom close shield as
    a function
    + Add FlushShieldOutputStream to workaround issues in generic
    code that ends up calling third parties like like
    org.tukaani.xz.LZMAOutputStream.flush()
    + Add filter channels
  * Fixed Bugs
    + Fix Apache RAT plugin console warnings
    + ByteArraySeekableByteChannel.position(long) and truncate(long)
    shouldn't throw an IllegalArgumentException for a new positive
    position that's too large
    + Fix malformed Javadoc comments
    + ReadAheadInputStream.close() doesn't always close its filtered
    input stream
    + ReadAheadInputStream now restores the current thread's
    interrupt flag when catching InterruptedException
    + FileAlterationMonitor.stop(long) now restores the current
    thread's interrupt flag when catching InterruptedException
    + FileCleaningTracker now restores the current thread's
    interrupt flag when catching InterruptedException
    + ThreadMonitor.run() now restores the current thread's
    interrupt flag when catching InterruptedException
    + ThrottledInputStream.throttle() now restores the current
    thread's interrupt flag when catching InterruptedException
    + ThrottledInputStream.throttle() doesn't preserve the original
    InterruptedException as the cause of its
    InterruptedIOException
    + All thread names are now prefixed with "commons-io-"
    + IO-639: ReversedLinesFileReader does not read first line if
    its empty
    + IO-886: Fixed incorrect regular expression in
    PathUtils.RelativeSortedPaths.extractKey(String, String)
    + Fix typos in Javadoc of FileUtils and related test classes
    + IO-887: WriterOutputStream from a builder fails on malformed
    or unmappable input bytes
    + BoundedReader now extends ProxyReader
    + AbstractStreamBuilder.setOpenOptions(OpenOption...) now makes
    a defensive copy of its input array
    + IO-885: Path visits follow links
    + BOMInputStream fail-fast and tracks its ByteOrderMark as a final
    + Refactor UnixLineEndingInputStream and
    WindowsLineEndingInputStream for duplication
    + IO-857: [Javadoc] PathUtils.cleanDirectory() methods vs FileUtils
    + Fix JaCoCo report generation (code coverage)
    + AbstractStreamBuilder.setBufferSizeDefault(int) now resets to
    default for input less than or equal to zero
  * Changes
    + Bump org.apache.commons:commons-parent from 91 to 98
    + Bump commons-codec:commons-codec from 1.19.0 to 1.21.0
    + Bump commons.bytebuddy.version from 1.17.8 to 1.18.8
    + Bump commons-lang3 from 3.19.0 to 3.20.0</changelog>
</package>
<package pkgid="f1eba60a17bfab0ab66aa7034ee48461ea51c5911fff11d7d5209274cfb146ab3782b670b081315394db77edfaca19f15e60ed3f4ffab9bbff4bc8c03dbbaf88" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="0" ver="2.18.0" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591185600">- Update to upstream version 2.7 (bsc#1184755, CVE-2021-29425)
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.7
  * Lots of bugfixes, updates and enhancements
  * Java 8 or later is required</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Update to 2.8.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.8.0</changelog>
  <changelog author="pmonreal@suse.com" date="1622721600">- Update to 2.9.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.9.0</changelog>
  <changelog author="david.anes@suse.com" date="1650369600">- Update to 2.11.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.11.0
- Update to 2.10.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.10.0</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 2.14.0:
  * Lots of new features, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0
  * Fixes bsc#1231298, CVE-2024-47554: untrusted input to XmlStreamReader
    can lead to uncontrolled resource consumption</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 2.15.1
  * Fixed Bugs:
    + Fix wrong issue id in change log
    + Add test for FileChannels.contentEquals()
    + Fix FileChannels.contentEquals()
    + Fix some Javadoc issues in LineIterator and IOUtils
    + Simplify FileAlterationObserver internal processing
    + Avoid NullPointerException in RegexFileFilter
    .RegexFileFilter(Pattern)
    + Avoid NullPointerException in RegexFileFilter
    .accept(Path, BasicFileAttributes)
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .RegexFileFilter defines non-transient non-serializable
    instance field pathToString [org.apache.commons.io.filefilter
    .RegexFileFilter] In RegexFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.filefilter
    .DelegateFileFilter] In DelegateFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileNameFilter [org.apache.commons.io
    .filefilter.DelegateFileFilter] In DelegateFileFilter.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.function.IOStream$1
    .next() cannot throw NoSuchElementException [org.apache
    .commons.io.function.IOStream$1] At IOStream.java:[line 98]
    IT_NO_SUCH_ELEMENT
    + Fix SpotBugs error: org.apache.commons.io.monitor
    .FileAlterationMonitor.getObservers() may expose internal
    representation by returning FileAlterationMonitor.observers
    [org.apache.commons.io.monitor.FileAlterationMonitor] At
    FileAlterationMonitor.java:[line 124] EI_EXPOSE_REP
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field listeners [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.FileCleaningTracker
    .getDeleteFailures() may expose internal representation by
    returning FileCleaningTracker.deleteFailures [org.apache
    .commons.io.FileCleaningTracker] At
    FileCleaningTracker.java:[line 218] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList() may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 118]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList(Class) may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 129]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getDirList() may expose internal
    representation by returning AccumulatorPathVisitor.dirList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 179] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getFileList() may expose internal
    representation by returning AccumulatorPathVisitor.fileList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 188] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.input
    .ObservableInputStream.getObservers() may expose internal
    representation by returning ObservableInputStream.observers
    [org.apache.commons.io.input.ObservableInputStream] At
    ObservableInputStream.java:[line 187] EI_EXPOSE_REP
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int) will leave
    the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 202]
    CT_CONSTRUCTOR_THROW
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int, int) will
    leave the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 223]
    CT_CONSTRUCTOR_THROW
- Upgrade to 2.15.0
  * New features:
    + Add org.apache.commons.io.channels.FileChannels
    + Add RandomAccessFiles#contentEquals(RandomAccessFile,
    RandomAccessFile)
    + Add RandomAccessFiles#reset(RandomAccessFile)
    + Add PathUtilsContentEqualsBenchmark
    + Add org.apache.commons.io.StreamIterator
    + Add MessageDigestInputStream and deprecate
    MessageDigestCalculatingInputStream
  * Fixed Bugs:
    + IO-815: XmlStreamReader encoding match RE is too strict
    + IO-810: Javadoc in FileUtils does not reflect code for thrown
    exceptions
    + IO-812: Javadoc should mention closing Streams based on file
    resources
    + IO-811: In tests, Files.walk() direct and indirect callers
    fail to close the returned Stream
    + IO-811: FileUtils.listFiles(File, String[], boolean) fails to
    close its internal Stream
    + IO-811: FileUtils.iterateFiles(File, String[], boolean) fails
    to close its internal Stream
    + IO-811: StreamIterator fails to close its internal Stream
    + IO-814: Don't throw UncheckedIOException
    + IO-414: Don't write a BOM on every (or any) line
    + IO-814: RandomAccessFileMode.create(Path) provides a better
    NullPointerException message
    + Improve performance of PathUtils.fileContentEquals(Path, Path,
    LinkOption[], OpenOption[]) by about 60%, see
    PathUtilsContentEqualsBenchmark
    + Improve performance of PathUtils.fileContentEquals(Path, Path)
    by about 60%, see PathUtilsContentEqualsBenchmark
    + Improve performance of FileUtils.contentEquals(File, File) by
    about 60%, see PathUtilsContentEqualsBenchmark
    + Remove unused test code
    + [Javadoc] IOUtils#contentEquals does not throw
    NullPointerException
    + Fix CodeQL warnings in UnsynchronizedBufferedInputStream:
    Implicit narrowing conversion in compound assignment
    + MessageDigestCalculatingInputStream
    .MessageDigestMaintainingObserver
    .MessageDigestMaintainingObserver(MessageDigest) now throws a
    NullPointerException if the MessageDigest is null
    + MessageDigestCalculatingInputStream
    .MessageDigestCalculatingInputStream(InputStream,
    MessageDigest) now throws a NullPointerException if the
    MessageDigest is null
    + IO-816: UnsynchronizedBufferedInputStream.read(byte[], int,
    int) does not use buffer</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Upgrade to 2.16.1
  * Fixes:
    + Reimplement FileSystemUtils using NIO.
    + FileSystemUtils no longer throws IllegalStateException. Fixes
    IO-851.
    + Avoid possible NullPointerException in
    FileUtils.listAccumulate(File, IOFileFilter, IOFileFilter,
    FileVisitOption...).
    + BoundedInputStream.reset() not updating count. Fixes IO-853.
    + ThresholdingOutputStream: a negative threshold should behave
    like a zero threshold and trigger the event on the first
    write #609. Fixes IO-854.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.12 to 1.14.13 #605.
    + Bump org.apache.commons:commons-parent from 67 to 69 #608.
- Update apache-commons-io-build.xml for new version
- Includes changes from 2.16.0
  * Fixes:
    + Fix and re-enable testSkip_RequiredCharsets #518.
    + SymbolicLineFileFilter documentation fixes. Fixes IO-824.
    + CharSequenceInputStream.reset() only works once #520. Fixes
    IO-795.
    + Finish TODO on CharSequenceInputStream #540. Fixes IO-795.
    + Add byte array size validation for methods in EndianUtils
    [#521]. Fixes IO-825.
    + Add missing test case CircularByteBufferTest. Fixes IO-825.
    + Make CharSequenceInputStream.available() more correct in the
    face of multibyte encodings #525. Fixes IO-781.
    + Remove unreachable code in AbstractIOFileFilterTest #526.
    Fixes IO-781.
    + Rationalize and unify checking for existence of files and
    directories #529. Fixes IO-808.
    + Avoid NullPointerException in IOCase.checkEquals(String,
    String) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(Path, BasicFileAttributes) on
    null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(Path, BasicFileAttributes) on null
    input.
    + Avoid NullPointerException in EmptyFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in EmptyFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in FileFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in FileFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in IOCase.checkIndexOf(String,
    int, String) on null input.
    + Avoid NullPointerException in
    IOCase.checkRegionMatches(String, int, String) on null input.
    + BoundedInputStream.getCount() should not count EOF.
    + Modernize temporary file creation and deletion in
    DeferredFileOutputStreamTest #535.
    + Add PathMatcher to IOFileFilter class Javadoc #536.
    + Fix CharSequenceInputStream coding exception handling #537.
    Fixes IO-781.
    + Deprecate int CountingInputStream#getCount() in favor of long
    CountingInputStream#getByteCount(). Fixes IO-781.
    + Deprecate CountingInputStream.resetCount() in favor of
    resetByteCount(). Fixes IO-828.
    + Deprecate CountingInputStream.getMaxLength() in favor of
    getMaxCount()). Fixes IO-828.
    + NullInputStream breaks InputStream's read method contract.
    Fixes IO-818.
    + Javadoc shouldn't reference 1.x behavior #539.
    + Don't decode and reencode characters in a potentially
    different charset in
    AbstractOrigin.CharSequenceOrigin.getReader(Charset). Fixes
    IO-829.
    + Let subclasses of CountingInputStream.afterRead(int) throw
    IOException.
    + Characterization test for broken symlinks when copying
    directories #547. Fixes IO-807.
    + ClosedInputStream.read(byte[], int, int) does not always
    return -1.
    + ClosedOutputStream.write(byte[], int, int) does not always
    throw IOException.
    + XmlStreamReader can't parse an XML document with a multi-line
    prolog #550.
    + XmlStreamReader can't parse XML an document with an external
    parsed entity prolog.
    + Update FileNameUtils Javadoc #554. Fixes IO-836.
    + Copy symlinks, not the files the symlinks point to #558.
    Fixes IO-807.
    + Pickup apache-rat-plugin version from parent POM.
    + Add test for copying a symlink
    FileUtilsTest#testCopyFile_symLink() #564.
    + Make copyFile copy symbolic links by value rather than
    reference #565.
    + Deprecate CopyUtils 0-argument constructor.
    + Deprecate EndianUtils 0-argument constructor. Fixes IO-843.
    + Deprecate FileSystemUtils 0-argument constructor.
    + Deprecate FilenameUtils 0-argument constructor.
    + Deprecate RandomAccessFiles 0-argument constructor.
    + Clarify and correct EndianUtils and SwappedDataInputStream
    API doc #566.
    + Add characterization test for copying a symlinked directory
    [#570].
    + RandomAccessFileInputStream.builder().get() now throws ISE
    instead of NPE.
    + Test links to targets outside the source directory #571.
    Fixes IO-845.
    + Focus Javadoc on current version rather than past versions
    [#573], #574.
    + "Self-suppression not permitted" while using BrokenOutput and
    BrokenInput streams with try-with-resources. Fixes IO-469.
    + Handle zero and negative thresholds #587. Fixes IO-405.
    + Deprecate CountingInputStream in favor of BoundedInputStream.
    + PathUtils.setPosixPermissions(...) only sets permissions if
    needed.
    + PathUtils.setReadOnly(...) only sets permissions if needed.
    + PathUtils.deleteFile(..., DeleteOption...) only sets
    permissions if needed.
    + CleaningPathVisitor only sets permissions if needed.
    + DeletingPathVisitor only sets permissions if needed.
  * New features:
    + Add and use PathUtils.getFileName(Path, Function&lt;Path, R&gt;).
    + Add and use PathUtils.getFileNameString().
    + Make public Erase.rethrow(Throwable).
    + Add BrokenInputStream.BrokenInputStream(Throwable). Fixes
    IO-826.
    + Add BrokenReader.BrokenReader(Throwable). Fixes IO-826.
    + Add BrokenOutputStream.BrokenOutputStream(Throwable). Fixes
    IO-826.
    + Add BrokenWriter.BrokenWriter(Throwable). Fixes IO-826.
    + Add BoundedInputStream.getRemaining().
    + Add FileTimes.toNtfsTime(long).
    + Add FileTimes.fromUnixTime(long).
    + Add FileTimes.isUnixTime(FileTime).
    + Add FileTimes.isUnixTime(long).
    + Add FileTimes.toUnixTime(FileTime).
    + Add BrokenInputStream.Builder.
    + Add PathUtils.getExtension(Path).
    + Add PathUtils.getBaseName(Path).
    + Add ThrottledInputStream.
    + Add IORunnable.noop().
    + Add ChecksumInputStream and test #548.
    + Add AbstractStreamBuilder.getReader().
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
    + Add ProxyInputStream.unwrap().
    + Add a running count and builder to BoundedInputStream.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.10 to 1.14.12 #534,
    [#592].
    + Bump org.apache.commons:commons-parent from 65 to 67.
    + Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #583.
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0
    [#593].</changelog>
  <changelog author="fstrba@suse.com" date="1728043200">- Upgrade to 2.17.0
  * New features:
    + Add IOIterator.adapt(Iterable)
    + Add getInputStream() for 'https' and 'http' in URIOrigin
    [#630]. Fixes IO-831
    + Add IOSupplier.getUnchecked()
    + Add CloseShieldInputStream.systemIn(InputStream)
    + Add NullInputStream.init()
    + Add AbstractInputStream and refactor duplicate code
    + Add UnsynchronizedReader
    + Add UnsynchronizedBufferedReader
  * Fixes:
    + FileUtilsWaitForTest does not test anything useful.
    Fixes IO-858.
    + Add missing unit tests
    + FileUtils.lastModifiedFileTime(File) calls
    Objects.requireNonNull() on the wrong object
    + PathUtils.deleteOnExit(Path) calls Objects.requireNonNull()
    on the wrong object
    + Deprecate LineIterator.nextLine() in favor of next()
    + Fix PMD UnnecessaryFullyQualifiedName
    + Add test for CircularByteBuffer clear() #620
    + PathUtils.isPosix(Path, LinkOption...) should return false on
    null input
    + AutoCloseInputStream(InputStream) uses
    ClosedInputStream.INSTANCE when its input is null
    + Avoid NullPointerException in ProxyInputStream.available()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.markSupported()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.mark(int) when
    the underlying input stream is null
    + BufferedFileChannelInputStream.available() returns 0 before
    any reads
    + BufferedFileChannelInputStream.available() should return 0
    instead of -1 at the end of the stream
    + BufferedFileChannelInputStream.available() should return 0
    when the stream is closed instead of throwing an exception
    + CharSequenceInputStream.available() should return 0 after the
    stream is closed
    + BoundedInputStream.available() should return 0 when the
    stream is closed
    + CircularInputStream.available() should return 0 when the
    stream is closed
    + InfiniteCircularInputStream.available() should return 0 when
    the stream is closed
    + ChecksumInputStream(InputStream, Checksum, long, long) should
    fail-fast on null Checksum input
    + Deprecate NullInputStream.INSTANCE in favor of constructors
    + NullInputStream.available() should return 0 after the stream
    is closed
    + MemoryMappedFileInputStream.available() should return 0 after
    the stream is closed
    + RandomAccessFileInputStream.available() should return 0 after
    the stream is closed
    + ReaderInputStream.available() should return 0 after the
    stream is closed
    + AutoCloseInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + BoundedInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + NullInputStream.read(*) should throw IOException when it is
    closed
    + NullInputStream.read(byte[]) should return 0 when the input
    byte array in length 0
    + NullInputStream.read(byte[], int, int) should return 0 when
    the input byte array in length 0 or requested length is 0
    + MarkShieldInputStream.read(*) should throw IOException when
    it is closed
    + Replace deprecated constant FileFileFilter.FILE in Javadoc
    [#657]
    + Pick up exec-maven-plugin version from parent POM
  * Updates:
    + Bump tests commons.bytebuddy.version from 1.14.13 to 1.15.1
    [#615], #621, #631, #635, #642, #658, #663, #665
    + Bump tests commons-codec:commons-codec from 1.16.1 to 1.17.1
    [#644]
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.4.1
    [#632], #652, #659
    + Bump org.apache.commons:commons-parent from 69 to 74 #628,
    [#637], #649, #661, #664
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#645], #653, #666</changelog>
  <changelog author="gus.kenion@suse.com" date="1737720000">- Upgrade to 2.18.0
  * New features
    + Add @FunctionalInterface to ClassNameMatcher.
    + Add ValidatingObjectInputStream.Builder and
    ValidatingObjectInputStream.builder().
    + Add a "Safe Deserialization" section to the User Guide for
    the site.
    + Add IORandomAccessFile.
    + Add RandomAccessFileMode.io(String).
    + Add FileAlterationObserver.Builder() and deprecate most
    constructors.
    + Add IOUtils.readLines(CharSequence).
    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
    allow configuration reuse.
    + Add RandomAccessFileMode.accept(Path,
    IOConsumer&lt;RandomAccessFile&gt;).
    + Add RandomAccessFileMode.apply(Path,
    IOFunction&lt;RandomAccessFile&gt;, T).
    + Add IOIntConsumer.
    + Add ProxyInputStream.AbstractBuilder. Supports setting a
    consumer for ProxyInputStream.afterRead(int).
    + Add support to AutoCloseInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to BOMInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    BoundedInputStream.onMaxLength(long, long).
    + Add support to ChecksumInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to ThrottledInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to ObservableInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestCalculatingInputStream for
    setting a consumer for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestInputStream for setting a
    consumer for ProxyInputStream.afterRead(int).
  * Fixed Bugs
    + Clean ups in unit tests.
    + Fix some Javadoc issues.
    + RandomAccessFileMode.toString() is more helpful for debugging
    when it inherits from Enum.
    + Fix implicit narrowing conversion in compound assignment in
    UnsynchronizedBufferedReader.skip(long).
    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
    (superscript digits for COM and LPT).
    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
    can throw NoSuchFileException #697, #699.
    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
    throws IOException rather than FileNotFoundException.
    + Use Unicode escapes for superscript characters. #701.
    + IO-863:  Recent incompatible change to FileUtils.listFiles re
    extensions, see also IO-856.
    + IO-857:  Javadoc: Update details for PathUtils "clean"
    behavior.
  * Changes
    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
    [#676], #679, #688.
    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
    [#673], #685, #686, #694, #696, #698.
    + Update AbstractStreamBuilder getters from protected to
    public.</changelog>
</package>
<package pkgid="50fbb172f60b80c2001fe9cd97ac0a8a9f90293b5d1639ecc37786e4104a7dade5e94e89c6943e24089245017b92bb5ce69c6a3e49bc136c5ce68973a0144c2d" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="0" ver="2.21.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1650369600">- Update to 2.11.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.11.0
- Update to 2.10.0
  * Lots of added functions, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.10.0</changelog>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 2.14.0:
  * Lots of new features, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0
  * Fixes bsc#1231298, CVE-2024-47554: untrusted input to XmlStreamReader
    can lead to uncontrolled resource consumption</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 2.15.1
  * Fixed Bugs:
    + Fix wrong issue id in change log
    + Add test for FileChannels.contentEquals()
    + Fix FileChannels.contentEquals()
    + Fix some Javadoc issues in LineIterator and IOUtils
    + Simplify FileAlterationObserver internal processing
    + Avoid NullPointerException in RegexFileFilter
    .RegexFileFilter(Pattern)
    + Avoid NullPointerException in RegexFileFilter
    .accept(Path, BasicFileAttributes)
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .RegexFileFilter defines non-transient non-serializable
    instance field pathToString [org.apache.commons.io.filefilter
    .RegexFileFilter] In RegexFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.filefilter
    .DelegateFileFilter] In DelegateFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileNameFilter [org.apache.commons.io
    .filefilter.DelegateFileFilter] In DelegateFileFilter.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.function.IOStream$1
    .next() cannot throw NoSuchElementException [org.apache
    .commons.io.function.IOStream$1] At IOStream.java:[line 98]
    IT_NO_SUCH_ELEMENT
    + Fix SpotBugs error: org.apache.commons.io.monitor
    .FileAlterationMonitor.getObservers() may expose internal
    representation by returning FileAlterationMonitor.observers
    [org.apache.commons.io.monitor.FileAlterationMonitor] At
    FileAlterationMonitor.java:[line 124] EI_EXPOSE_REP
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field listeners [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.FileCleaningTracker
    .getDeleteFailures() may expose internal representation by
    returning FileCleaningTracker.deleteFailures [org.apache
    .commons.io.FileCleaningTracker] At
    FileCleaningTracker.java:[line 218] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList() may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 118]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList(Class) may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 129]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getDirList() may expose internal
    representation by returning AccumulatorPathVisitor.dirList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 179] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getFileList() may expose internal
    representation by returning AccumulatorPathVisitor.fileList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 188] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.input
    .ObservableInputStream.getObservers() may expose internal
    representation by returning ObservableInputStream.observers
    [org.apache.commons.io.input.ObservableInputStream] At
    ObservableInputStream.java:[line 187] EI_EXPOSE_REP
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int) will leave
    the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 202]
    CT_CONSTRUCTOR_THROW
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int, int) will
    leave the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 223]
    CT_CONSTRUCTOR_THROW
- Upgrade to 2.15.0
  * New features:
    + Add org.apache.commons.io.channels.FileChannels
    + Add RandomAccessFiles#contentEquals(RandomAccessFile,
    RandomAccessFile)
    + Add RandomAccessFiles#reset(RandomAccessFile)
    + Add PathUtilsContentEqualsBenchmark
    + Add org.apache.commons.io.StreamIterator
    + Add MessageDigestInputStream and deprecate
    MessageDigestCalculatingInputStream
  * Fixed Bugs:
    + IO-815: XmlStreamReader encoding match RE is too strict
    + IO-810: Javadoc in FileUtils does not reflect code for thrown
    exceptions
    + IO-812: Javadoc should mention closing Streams based on file
    resources
    + IO-811: In tests, Files.walk() direct and indirect callers
    fail to close the returned Stream
    + IO-811: FileUtils.listFiles(File, String[], boolean) fails to
    close its internal Stream
    + IO-811: FileUtils.iterateFiles(File, String[], boolean) fails
    to close its internal Stream
    + IO-811: StreamIterator fails to close its internal Stream
    + IO-814: Don't throw UncheckedIOException
    + IO-414: Don't write a BOM on every (or any) line
    + IO-814: RandomAccessFileMode.create(Path) provides a better
    NullPointerException message
    + Improve performance of PathUtils.fileContentEquals(Path, Path,
    LinkOption[], OpenOption[]) by about 60%, see
    PathUtilsContentEqualsBenchmark
    + Improve performance of PathUtils.fileContentEquals(Path, Path)
    by about 60%, see PathUtilsContentEqualsBenchmark
    + Improve performance of FileUtils.contentEquals(File, File) by
    about 60%, see PathUtilsContentEqualsBenchmark
    + Remove unused test code
    + [Javadoc] IOUtils#contentEquals does not throw
    NullPointerException
    + Fix CodeQL warnings in UnsynchronizedBufferedInputStream:
    Implicit narrowing conversion in compound assignment
    + MessageDigestCalculatingInputStream
    .MessageDigestMaintainingObserver
    .MessageDigestMaintainingObserver(MessageDigest) now throws a
    NullPointerException if the MessageDigest is null
    + MessageDigestCalculatingInputStream
    .MessageDigestCalculatingInputStream(InputStream,
    MessageDigest) now throws a NullPointerException if the
    MessageDigest is null
    + IO-816: UnsynchronizedBufferedInputStream.read(byte[], int,
    int) does not use buffer</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Upgrade to 2.16.1
  * Fixes:
    + Reimplement FileSystemUtils using NIO.
    + FileSystemUtils no longer throws IllegalStateException. Fixes
    IO-851.
    + Avoid possible NullPointerException in
    FileUtils.listAccumulate(File, IOFileFilter, IOFileFilter,
    FileVisitOption...).
    + BoundedInputStream.reset() not updating count. Fixes IO-853.
    + ThresholdingOutputStream: a negative threshold should behave
    like a zero threshold and trigger the event on the first
    write #609. Fixes IO-854.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.12 to 1.14.13 #605.
    + Bump org.apache.commons:commons-parent from 67 to 69 #608.
- Update apache-commons-io-build.xml for new version
- Includes changes from 2.16.0
  * Fixes:
    + Fix and re-enable testSkip_RequiredCharsets #518.
    + SymbolicLineFileFilter documentation fixes. Fixes IO-824.
    + CharSequenceInputStream.reset() only works once #520. Fixes
    IO-795.
    + Finish TODO on CharSequenceInputStream #540. Fixes IO-795.
    + Add byte array size validation for methods in EndianUtils
    [#521]. Fixes IO-825.
    + Add missing test case CircularByteBufferTest. Fixes IO-825.
    + Make CharSequenceInputStream.available() more correct in the
    face of multibyte encodings #525. Fixes IO-781.
    + Remove unreachable code in AbstractIOFileFilterTest #526.
    Fixes IO-781.
    + Rationalize and unify checking for existence of files and
    directories #529. Fixes IO-808.
    + Avoid NullPointerException in IOCase.checkEquals(String,
    String) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(Path, BasicFileAttributes) on
    null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(Path, BasicFileAttributes) on null
    input.
    + Avoid NullPointerException in EmptyFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in EmptyFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in FileFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in FileFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in IOCase.checkIndexOf(String,
    int, String) on null input.
    + Avoid NullPointerException in
    IOCase.checkRegionMatches(String, int, String) on null input.
    + BoundedInputStream.getCount() should not count EOF.
    + Modernize temporary file creation and deletion in
    DeferredFileOutputStreamTest #535.
    + Add PathMatcher to IOFileFilter class Javadoc #536.
    + Fix CharSequenceInputStream coding exception handling #537.
    Fixes IO-781.
    + Deprecate int CountingInputStream#getCount() in favor of long
    CountingInputStream#getByteCount(). Fixes IO-781.
    + Deprecate CountingInputStream.resetCount() in favor of
    resetByteCount(). Fixes IO-828.
    + Deprecate CountingInputStream.getMaxLength() in favor of
    getMaxCount()). Fixes IO-828.
    + NullInputStream breaks InputStream's read method contract.
    Fixes IO-818.
    + Javadoc shouldn't reference 1.x behavior #539.
    + Don't decode and reencode characters in a potentially
    different charset in
    AbstractOrigin.CharSequenceOrigin.getReader(Charset). Fixes
    IO-829.
    + Let subclasses of CountingInputStream.afterRead(int) throw
    IOException.
    + Characterization test for broken symlinks when copying
    directories #547. Fixes IO-807.
    + ClosedInputStream.read(byte[], int, int) does not always
    return -1.
    + ClosedOutputStream.write(byte[], int, int) does not always
    throw IOException.
    + XmlStreamReader can't parse an XML document with a multi-line
    prolog #550.
    + XmlStreamReader can't parse XML an document with an external
    parsed entity prolog.
    + Update FileNameUtils Javadoc #554. Fixes IO-836.
    + Copy symlinks, not the files the symlinks point to #558.
    Fixes IO-807.
    + Pickup apache-rat-plugin version from parent POM.
    + Add test for copying a symlink
    FileUtilsTest#testCopyFile_symLink() #564.
    + Make copyFile copy symbolic links by value rather than
    reference #565.
    + Deprecate CopyUtils 0-argument constructor.
    + Deprecate EndianUtils 0-argument constructor. Fixes IO-843.
    + Deprecate FileSystemUtils 0-argument constructor.
    + Deprecate FilenameUtils 0-argument constructor.
    + Deprecate RandomAccessFiles 0-argument constructor.
    + Clarify and correct EndianUtils and SwappedDataInputStream
    API doc #566.
    + Add characterization test for copying a symlinked directory
    [#570].
    + RandomAccessFileInputStream.builder().get() now throws ISE
    instead of NPE.
    + Test links to targets outside the source directory #571.
    Fixes IO-845.
    + Focus Javadoc on current version rather than past versions
    [#573], #574.
    + "Self-suppression not permitted" while using BrokenOutput and
    BrokenInput streams with try-with-resources. Fixes IO-469.
    + Handle zero and negative thresholds #587. Fixes IO-405.
    + Deprecate CountingInputStream in favor of BoundedInputStream.
    + PathUtils.setPosixPermissions(...) only sets permissions if
    needed.
    + PathUtils.setReadOnly(...) only sets permissions if needed.
    + PathUtils.deleteFile(..., DeleteOption...) only sets
    permissions if needed.
    + CleaningPathVisitor only sets permissions if needed.
    + DeletingPathVisitor only sets permissions if needed.
  * New features:
    + Add and use PathUtils.getFileName(Path, Function&lt;Path, R&gt;).
    + Add and use PathUtils.getFileNameString().
    + Make public Erase.rethrow(Throwable).
    + Add BrokenInputStream.BrokenInputStream(Throwable). Fixes
    IO-826.
    + Add BrokenReader.BrokenReader(Throwable). Fixes IO-826.
    + Add BrokenOutputStream.BrokenOutputStream(Throwable). Fixes
    IO-826.
    + Add BrokenWriter.BrokenWriter(Throwable). Fixes IO-826.
    + Add BoundedInputStream.getRemaining().
    + Add FileTimes.toNtfsTime(long).
    + Add FileTimes.fromUnixTime(long).
    + Add FileTimes.isUnixTime(FileTime).
    + Add FileTimes.isUnixTime(long).
    + Add FileTimes.toUnixTime(FileTime).
    + Add BrokenInputStream.Builder.
    + Add PathUtils.getExtension(Path).
    + Add PathUtils.getBaseName(Path).
    + Add ThrottledInputStream.
    + Add IORunnable.noop().
    + Add ChecksumInputStream and test #548.
    + Add AbstractStreamBuilder.getReader().
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
    + Add ProxyInputStream.unwrap().
    + Add a running count and builder to BoundedInputStream.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.10 to 1.14.12 #534,
    [#592].
    + Bump org.apache.commons:commons-parent from 65 to 67.
    + Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #583.
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0
    [#593].</changelog>
  <changelog author="fstrba@suse.com" date="1728043200">- Upgrade to 2.17.0
  * New features:
    + Add IOIterator.adapt(Iterable)
    + Add getInputStream() for 'https' and 'http' in URIOrigin
    [#630]. Fixes IO-831
    + Add IOSupplier.getUnchecked()
    + Add CloseShieldInputStream.systemIn(InputStream)
    + Add NullInputStream.init()
    + Add AbstractInputStream and refactor duplicate code
    + Add UnsynchronizedReader
    + Add UnsynchronizedBufferedReader
  * Fixes:
    + FileUtilsWaitForTest does not test anything useful.
    Fixes IO-858.
    + Add missing unit tests
    + FileUtils.lastModifiedFileTime(File) calls
    Objects.requireNonNull() on the wrong object
    + PathUtils.deleteOnExit(Path) calls Objects.requireNonNull()
    on the wrong object
    + Deprecate LineIterator.nextLine() in favor of next()
    + Fix PMD UnnecessaryFullyQualifiedName
    + Add test for CircularByteBuffer clear() #620
    + PathUtils.isPosix(Path, LinkOption...) should return false on
    null input
    + AutoCloseInputStream(InputStream) uses
    ClosedInputStream.INSTANCE when its input is null
    + Avoid NullPointerException in ProxyInputStream.available()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.markSupported()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.mark(int) when
    the underlying input stream is null
    + BufferedFileChannelInputStream.available() returns 0 before
    any reads
    + BufferedFileChannelInputStream.available() should return 0
    instead of -1 at the end of the stream
    + BufferedFileChannelInputStream.available() should return 0
    when the stream is closed instead of throwing an exception
    + CharSequenceInputStream.available() should return 0 after the
    stream is closed
    + BoundedInputStream.available() should return 0 when the
    stream is closed
    + CircularInputStream.available() should return 0 when the
    stream is closed
    + InfiniteCircularInputStream.available() should return 0 when
    the stream is closed
    + ChecksumInputStream(InputStream, Checksum, long, long) should
    fail-fast on null Checksum input
    + Deprecate NullInputStream.INSTANCE in favor of constructors
    + NullInputStream.available() should return 0 after the stream
    is closed
    + MemoryMappedFileInputStream.available() should return 0 after
    the stream is closed
    + RandomAccessFileInputStream.available() should return 0 after
    the stream is closed
    + ReaderInputStream.available() should return 0 after the
    stream is closed
    + AutoCloseInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + BoundedInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + NullInputStream.read(*) should throw IOException when it is
    closed
    + NullInputStream.read(byte[]) should return 0 when the input
    byte array in length 0
    + NullInputStream.read(byte[], int, int) should return 0 when
    the input byte array in length 0 or requested length is 0
    + MarkShieldInputStream.read(*) should throw IOException when
    it is closed
    + Replace deprecated constant FileFileFilter.FILE in Javadoc
    [#657]
    + Pick up exec-maven-plugin version from parent POM
  * Updates:
    + Bump tests commons.bytebuddy.version from 1.14.13 to 1.15.1
    [#615], #621, #631, #635, #642, #658, #663, #665
    + Bump tests commons-codec:commons-codec from 1.16.1 to 1.17.1
    [#644]
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.4.1
    [#632], #652, #659
    + Bump org.apache.commons:commons-parent from 69 to 74 #628,
    [#637], #649, #661, #664
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#645], #653, #666</changelog>
  <changelog author="gus.kenion@suse.com" date="1737720000">- Upgrade to 2.18.0
  * New features
    + Add @FunctionalInterface to ClassNameMatcher.
    + Add ValidatingObjectInputStream.Builder and
    ValidatingObjectInputStream.builder().
    + Add a "Safe Deserialization" section to the User Guide for
    the site.
    + Add IORandomAccessFile.
    + Add RandomAccessFileMode.io(String).
    + Add FileAlterationObserver.Builder() and deprecate most
    constructors.
    + Add IOUtils.readLines(CharSequence).
    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
    allow configuration reuse.
    + Add RandomAccessFileMode.accept(Path,
    IOConsumer&lt;RandomAccessFile&gt;).
    + Add RandomAccessFileMode.apply(Path,
    IOFunction&lt;RandomAccessFile&gt;, T).
    + Add IOIntConsumer.
    + Add ProxyInputStream.AbstractBuilder. Supports setting a
    consumer for ProxyInputStream.afterRead(int).
    + Add support to AutoCloseInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to BOMInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    BoundedInputStream.onMaxLength(long, long).
    + Add support to ChecksumInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to ThrottledInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to ObservableInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestCalculatingInputStream for
    setting a consumer for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestInputStream for setting a
    consumer for ProxyInputStream.afterRead(int).
  * Fixed Bugs
    + Clean ups in unit tests.
    + Fix some Javadoc issues.
    + RandomAccessFileMode.toString() is more helpful for debugging
    when it inherits from Enum.
    + Fix implicit narrowing conversion in compound assignment in
    UnsynchronizedBufferedReader.skip(long).
    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
    (superscript digits for COM and LPT).
    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
    can throw NoSuchFileException #697, #699.
    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
    throws IOException rather than FileNotFoundException.
    + Use Unicode escapes for superscript characters. #701.
    + IO-863:  Recent incompatible change to FileUtils.listFiles re
    extensions, see also IO-856.
    + IO-857:  Javadoc: Update details for PathUtils "clean"
    behavior.
  * Changes
    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
    [#676], #679, #688.
    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
    [#673], #685, #686, #694, #696, #698.
    + Update AbstractStreamBuilder getters from protected to
    public.</changelog>
  <changelog author="fstrba@suse.com" date="1770379200">- Upgrade to 2.19.0
  * New features
    + Add ThrottledInputStream.Builder.setMaxBytes(long,
    ChronoUnit)
    + Add IOIterable
    + ReversedLinesFileReader implements IOIterable&lt;String&gt;
    + Add AbstractByteArrayOutputStream.write(CharSequence,
    Charset)
    + Add AbstractByteArrayOutputStream.write(byte[])
    + Add RandomAccessFileOutputStream.getRandomAccessFile()
    + Add ProxyInputStream.setReference(InputStream), was
    package-private setIn(InputStream)
    + Add ProxyOutputStream.setReference(OutputStream)
    + Add RandomAccessFileInputStream.copy(long, long,
    OutputStream)
    + Add ProxyOutputStream.Builder
    + Add ByteOrderMark.matches(int[])
    + Add BrokenOutputStream.BrokenOutputStream(Function&lt;String&gt;,
    Throwable&gt;) and deprecate Supplier&lt;String&gt; constructor
    + Add IOBooleanSupplier
    + Add Uncheck.getAsBoolean(IOBooleanSupplier)
    + Add FileChannels.contentEquals(SeekableByteChannel,
    SeekableByteChannel, int)
    + Add FileChannels.contentEquals(ReadableByteChannel,
    ReadableByteChannel, int)
    + Add SimplePathVisitor.AbstractBuilder
    + Add CountingPathVisitor.AbstractBuilder and
    CountingPathVisitor.Builder
    + Add AccumulatorPathVisitor.Builder and builder()
    + Add PathUtils.contentEquals(FileSystem, FileSystem)
  * Fixed Bugs
    + Deprecate constructor Counters.Counters() to be private in
    4.0
    + Deprecate constructor Charsets.Charsets() to be private in
    4.0
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache
    + Javadoc is missing its Overview page
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80)
    + Deprecate DeferredFileOutputStream.getStream() in favor of
    getOutputStream()
    + Improve Javadoc for a BoundedInputStream builder() throwing
    IOException
    + Improve Javadoc for all implementations of
    AbstractOriginSupplier#get()
    + The Consumer to IOUtils.closeQuietly(Closeable, Consumer) now
    accepts Exception, not just IOException
    + The Consumer to IOUtils.close(Closeable, IOConsumer) now
    accepts wrapped Exception, not just IOException
    + Use Uncheck.getAsBoolean(IOBooleanSupplier) to avoid boxing
    and unboxing of boolean values
    + Avoid unnecessary boxing and unboxing of long values in
    FileUtils.sizeOf(File)
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedBufferedReader.read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterInputStream.available() and read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterReader.read()
    + FileChannels.contentEquals(FileChannel, FileChannel, int) can
    return false when comparing a non-blocking channel
    + Deprecate FileChannels.contentEquals(FileChannel, FileChannel,
    int) in favor of FileChannels
    .contentEquals(SeekableByteChannel, SeekableByteChannel, int)
    + Improve performance of IOUtils.contentEquals(InputStream,
    InputStream) by about 13%
    + PathUtils.copyFileToDirectory() across file systems
    + IOUtils.contentEquals is incorrect when InputStream.available
    under-reports
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToFileTime(FileTimes.java:164).
    See also https://issues.apache.org/jira/browse/MDEP-978
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToDate(long)
    + FileTimes.toNtfsTime(*) methods can overflow result values
    + Fix Javadoc for ChunkedOutputStream.Builder
    + General Javadoc improvements
    + Calling QueueInputStream.QueueInputStream(null) maps to the
    same kind of default blocking queue as
    QueueInputStream.Builder.setBlockingQueue(null)
    + CopyDirectoryVisitor creates incorrect file names when
    copying between different file systems that use different file
    system separators ("/" versus "\"); fixes
    PathUtils.copyDirectory(Path, Path, CopyOption...)
    + ThreadUtils.sleep(Duration) should handle the underlying OS
    time changing
  * Changes
    + Bump commons.bytebuddy.version from 1.15.10 to 1.17.5
    + Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
    + Bump org.apache.commons:commons-parent from 78 to 81</changelog>
  <changelog author="fstrba@suse.com" date="1770379201">- Upgrade to 2.20.0
  * New features
    + Add org.apache.commons.io.file.CountingPathVisitor
    .accept(Path, BasicFileAttributes)
    + Add org.apache.commons.io.Charsets.isAlias(Charset, String)
    + Add org.apache.commons.io.Charsets.isUTF8(Charset)
    + Add org.apache.commons.io.Charsets.toCharsetDefault(String,
    Charset)
    + Add Tailer ignoreTouch option
  * Fixed Bugs
    + [javadoc] Rename parameter of ProxyOutputStream.write(int)
    + CopyDirectoryVisitor ignores fileFilter
    + org.apache.commons.io.build.AbstractOrigin.getReader(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getReader(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.getWriter(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin
    .getWriter(Charset) now maps a null Charset to the default
    Charset
    + FileUtils.readLines(File, Charset) now maps a null Charset to
    the default Charset
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream,
    org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 77] Another occurrence
    at WindowsLineEndingInputStream.java:[line 81]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 112]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 113]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 75]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atEos" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 120]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 124]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 125]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "closed" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.ProxyInputStream] At
    ProxyInputStream.java:[line 233]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "propagateClose" in one thread may not yield the value of the
    most recent write from another thread
    [org.apache.commons.io.input.BoundedInputStream] At
    BoundedInputStream.java:[line 555]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + QueueInputStream reads all but the first byte without waiting
    + Javadoc fixes and improvements
    + Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter
    .accept(File)
    + FileUtils.forceDelete can delete a broken symlink again
    + Fix infinite loop in AbstractByteArrayOutputStream
  * Changes
    + Bump commons.bytebuddy.version from 1.17.5 to 1.17.6
    + Bump org.apache.commons:commons-parent from 81 to 85
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0</changelog>
  <changelog author="fstrba@suse.com" date="1770379202">- Upgrade to 2.21.0
  * New features
    + FileUtils#byteCountToDisplaySize() supports Zettabyte,
    Yottabyte, Ronnabyte and Quettabyte
    + Add org.apache.commons.io.FileUtils.ONE_RB
    + Add org.apache.commons.io.FileUtils.ONE_QB
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], int, int, long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(int, long)
    + Add length unit support in FileSystem limits
    + Add IOUtils.toByteArray(InputStream, int, int) for safer
    chunked reading with size validation
    + Add org.apache.commons.io.file.PathUtils.getPath(String,
    String)
    + Add org.apache.commons.io.channels
    .ByteArraySeekableByteChannel
    + Add IOIterable.asIterable()
    + Add NIO channel support to 'AbstractStreamBuilder'
    + Add CloseShieldChannel to close-shielded NIO Channels
    + Added IOUtils.checkFromIndexSize as a Java 8 backport of
    Objects.checkFromIndexSize
  * Fixed Bugs
    + When testing on Java 21 and up, enable
  - XX:+EnableDynamicAgentLoading
    + When testing on Java 24 and up, don't fail
    FileUtilsListFilesTest for a different behavior in the JRE
    + ValidatingObjectInputStream does not validate dynamic proxy
    interfaces
    + BoundedInputStream.getRemaining() now reports Long.MAX_VALUE
    instead of 0 when no limit is set
    + BoundedInputStream.available() correctly accounts for the
    maximum read limit
    + Deprecate IOUtils.readFully(InputStream, int) in favor of
    toByteArray(InputStream, int)
    + IOUtils.toByteArray(InputStream) now throws IOException on
    byte array overflow
    + Javadoc general improvements
    + IOUtils.toByteArray() now throws EOFException when not enough
    data is available
    + Fix IOUtils.skip() usage in concurrent scenarios
    + [javadoc] Fix XmlStreamReader Javadoc to indicate the correct
    class that is built
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 91
    + [test] Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
    + [test] Bump commons.bytebuddy.version from 1.17.6 to 1.17.8
    + [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to
    3.19.0
  * Removed
    + Inline private constant field
    ProxyInputStream.exceptionHandler</changelog>
</package>
<package pkgid="5fef2411f7b91d32be9d56325755ae07b61303e298f9b805e1cfe80ab13be2e037595fa10aca82e3d8dab252d82844128447eaa0f794d63c3418442a5ea27f96" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="0" ver="2.22.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1697630400">- Update to 2.14.0:
  * Lots of new features, fixes and updates.
  * https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0
  * Fixes bsc#1231298, CVE-2024-47554: untrusted input to XmlStreamReader
    can lead to uncontrolled resource consumption</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708344000">- Upgrade to 2.15.1
  * Fixed Bugs:
    + Fix wrong issue id in change log
    + Add test for FileChannels.contentEquals()
    + Fix FileChannels.contentEquals()
    + Fix some Javadoc issues in LineIterator and IOUtils
    + Simplify FileAlterationObserver internal processing
    + Avoid NullPointerException in RegexFileFilter
    .RegexFileFilter(Pattern)
    + Avoid NullPointerException in RegexFileFilter
    .accept(Path, BasicFileAttributes)
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .RegexFileFilter defines non-transient non-serializable
    instance field pathToString [org.apache.commons.io.filefilter
    .RegexFileFilter] In RegexFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.filefilter
    .DelegateFileFilter] In DelegateFileFilter.java SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.filefilter
    .DelegateFileFilter defines non-transient non-serializable
    instance field fileNameFilter [org.apache.commons.io
    .filefilter.DelegateFileFilter] In DelegateFileFilter.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.function.IOStream$1
    .next() cannot throw NoSuchElementException [org.apache
    .commons.io.function.IOStream$1] At IOStream.java:[line 98]
    IT_NO_SUCH_ELEMENT
    + Fix SpotBugs error: org.apache.commons.io.monitor
    .FileAlterationMonitor.getObservers() may expose internal
    representation by returning FileAlterationMonitor.observers
    [org.apache.commons.io.monitor.FileAlterationMonitor] At
    FileAlterationMonitor.java:[line 124] EI_EXPOSE_REP
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field fileFilter [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: Class org.apache.commons.io.monitor
    .FileAlterationObserver defines non-transient non-serializable
    instance field listeners [org.apache.commons.io.monitor
    .FileAlterationObserver] In FileAlterationObserver.java
    SE_BAD_FIELD
    + Fix SpotBugs error: org.apache.commons.io.FileCleaningTracker
    .getDeleteFailures() may expose internal representation by
    returning FileCleaningTracker.deleteFailures [org.apache
    .commons.io.FileCleaningTracker] At
    FileCleaningTracker.java:[line 218] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList() may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 118]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.IOExceptionList
    .getCauseList(Class) may expose internal representation by
    returning IOExceptionList.causeList [org.apache.commons.io
    .IOExceptionList] At IOExceptionList.java:[line 129]
    EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getDirList() may expose internal
    representation by returning AccumulatorPathVisitor.dirList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 179] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.file
    .AccumulatorPathVisitor.getFileList() may expose internal
    representation by returning AccumulatorPathVisitor.fileList
    [org.apache.commons.io.file.AccumulatorPathVisitor] At
    AccumulatorPathVisitor.java:[line 188] EI_EXPOSE_REP
    + Fix SpotBugs error: org.apache.commons.io.input
    .ObservableInputStream.getObservers() may expose internal
    representation by returning ObservableInputStream.observers
    [org.apache.commons.io.input.ObservableInputStream] At
    ObservableInputStream.java:[line 187] EI_EXPOSE_REP
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int) will leave
    the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 202]
    CT_CONSTRUCTOR_THROW
    + Fix SpotBugs error: Exception thrown in class org.apache
    .commons.io.input.UnsynchronizedByteArrayInputStream at new
    org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream(byte[], int, int) will
    leave the constructor. The object under construction remains
    partially initialized and may be vulnerable to Finalizer
    attacks. [org.apache.commons.io.input
    .UnsynchronizedByteArrayInputStream, org.apache.commons.io
    .input.UnsynchronizedByteArrayInputStream] At
    UnsynchronizedByteArrayInputStream.java:[line 223]
    CT_CONSTRUCTOR_THROW
- Upgrade to 2.15.0
  * New features:
    + Add org.apache.commons.io.channels.FileChannels
    + Add RandomAccessFiles#contentEquals(RandomAccessFile,
    RandomAccessFile)
    + Add RandomAccessFiles#reset(RandomAccessFile)
    + Add PathUtilsContentEqualsBenchmark
    + Add org.apache.commons.io.StreamIterator
    + Add MessageDigestInputStream and deprecate
    MessageDigestCalculatingInputStream
  * Fixed Bugs:
    + IO-815: XmlStreamReader encoding match RE is too strict
    + IO-810: Javadoc in FileUtils does not reflect code for thrown
    exceptions
    + IO-812: Javadoc should mention closing Streams based on file
    resources
    + IO-811: In tests, Files.walk() direct and indirect callers
    fail to close the returned Stream
    + IO-811: FileUtils.listFiles(File, String[], boolean) fails to
    close its internal Stream
    + IO-811: FileUtils.iterateFiles(File, String[], boolean) fails
    to close its internal Stream
    + IO-811: StreamIterator fails to close its internal Stream
    + IO-814: Don't throw UncheckedIOException
    + IO-414: Don't write a BOM on every (or any) line
    + IO-814: RandomAccessFileMode.create(Path) provides a better
    NullPointerException message
    + Improve performance of PathUtils.fileContentEquals(Path, Path,
    LinkOption[], OpenOption[]) by about 60%, see
    PathUtilsContentEqualsBenchmark
    + Improve performance of PathUtils.fileContentEquals(Path, Path)
    by about 60%, see PathUtilsContentEqualsBenchmark
    + Improve performance of FileUtils.contentEquals(File, File) by
    about 60%, see PathUtilsContentEqualsBenchmark
    + Remove unused test code
    + [Javadoc] IOUtils#contentEquals does not throw
    NullPointerException
    + Fix CodeQL warnings in UnsynchronizedBufferedInputStream:
    Implicit narrowing conversion in compound assignment
    + MessageDigestCalculatingInputStream
    .MessageDigestMaintainingObserver
    .MessageDigestMaintainingObserver(MessageDigest) now throws a
    NullPointerException if the MessageDigest is null
    + MessageDigestCalculatingInputStream
    .MessageDigestCalculatingInputStream(InputStream,
    MessageDigest) now throws a NullPointerException if the
    MessageDigest is null
    + IO-816: UnsynchronizedBufferedInputStream.read(byte[], int,
    int) does not use buffer</changelog>
  <changelog author="gus.kenion@suse.com" date="1714392000">- Upgrade to 2.16.1
  * Fixes:
    + Reimplement FileSystemUtils using NIO.
    + FileSystemUtils no longer throws IllegalStateException. Fixes
    IO-851.
    + Avoid possible NullPointerException in
    FileUtils.listAccumulate(File, IOFileFilter, IOFileFilter,
    FileVisitOption...).
    + BoundedInputStream.reset() not updating count. Fixes IO-853.
    + ThresholdingOutputStream: a negative threshold should behave
    like a zero threshold and trigger the event on the first
    write #609. Fixes IO-854.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.12 to 1.14.13 #605.
    + Bump org.apache.commons:commons-parent from 67 to 69 #608.
- Update apache-commons-io-build.xml for new version
- Includes changes from 2.16.0
  * Fixes:
    + Fix and re-enable testSkip_RequiredCharsets #518.
    + SymbolicLineFileFilter documentation fixes. Fixes IO-824.
    + CharSequenceInputStream.reset() only works once #520. Fixes
    IO-795.
    + Finish TODO on CharSequenceInputStream #540. Fixes IO-795.
    + Add byte array size validation for methods in EndianUtils
    [#521]. Fixes IO-825.
    + Add missing test case CircularByteBufferTest. Fixes IO-825.
    + Make CharSequenceInputStream.available() more correct in the
    face of multibyte encodings #525. Fixes IO-781.
    + Remove unreachable code in AbstractIOFileFilterTest #526.
    Fixes IO-781.
    + Rationalize and unify checking for existence of files and
    directories #529. Fixes IO-808.
    + Avoid NullPointerException in IOCase.checkEquals(String,
    String) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    CanExecuteFileFilter.accept(Path, BasicFileAttributes) on
    null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanReadFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in CanWriteFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(File) on null input.
    + Avoid NullPointerException in
    DirectoryFileFilter.accept(Path, BasicFileAttributes) on null
    input.
    + Avoid NullPointerException in EmptyFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in EmptyFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in FileFileFilter.accept(File) on
    null input.
    + Avoid NullPointerException in FileFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(File)
    on null input.
    + Avoid NullPointerException in HiddenFileFilter.accept(Path,
    BasicFileAttributes) on null input.
    + Avoid NullPointerException in IOCase.checkIndexOf(String,
    int, String) on null input.
    + Avoid NullPointerException in
    IOCase.checkRegionMatches(String, int, String) on null input.
    + BoundedInputStream.getCount() should not count EOF.
    + Modernize temporary file creation and deletion in
    DeferredFileOutputStreamTest #535.
    + Add PathMatcher to IOFileFilter class Javadoc #536.
    + Fix CharSequenceInputStream coding exception handling #537.
    Fixes IO-781.
    + Deprecate int CountingInputStream#getCount() in favor of long
    CountingInputStream#getByteCount(). Fixes IO-781.
    + Deprecate CountingInputStream.resetCount() in favor of
    resetByteCount(). Fixes IO-828.
    + Deprecate CountingInputStream.getMaxLength() in favor of
    getMaxCount()). Fixes IO-828.
    + NullInputStream breaks InputStream's read method contract.
    Fixes IO-818.
    + Javadoc shouldn't reference 1.x behavior #539.
    + Don't decode and reencode characters in a potentially
    different charset in
    AbstractOrigin.CharSequenceOrigin.getReader(Charset). Fixes
    IO-829.
    + Let subclasses of CountingInputStream.afterRead(int) throw
    IOException.
    + Characterization test for broken symlinks when copying
    directories #547. Fixes IO-807.
    + ClosedInputStream.read(byte[], int, int) does not always
    return -1.
    + ClosedOutputStream.write(byte[], int, int) does not always
    throw IOException.
    + XmlStreamReader can't parse an XML document with a multi-line
    prolog #550.
    + XmlStreamReader can't parse XML an document with an external
    parsed entity prolog.
    + Update FileNameUtils Javadoc #554. Fixes IO-836.
    + Copy symlinks, not the files the symlinks point to #558.
    Fixes IO-807.
    + Pickup apache-rat-plugin version from parent POM.
    + Add test for copying a symlink
    FileUtilsTest#testCopyFile_symLink() #564.
    + Make copyFile copy symbolic links by value rather than
    reference #565.
    + Deprecate CopyUtils 0-argument constructor.
    + Deprecate EndianUtils 0-argument constructor. Fixes IO-843.
    + Deprecate FileSystemUtils 0-argument constructor.
    + Deprecate FilenameUtils 0-argument constructor.
    + Deprecate RandomAccessFiles 0-argument constructor.
    + Clarify and correct EndianUtils and SwappedDataInputStream
    API doc #566.
    + Add characterization test for copying a symlinked directory
    [#570].
    + RandomAccessFileInputStream.builder().get() now throws ISE
    instead of NPE.
    + Test links to targets outside the source directory #571.
    Fixes IO-845.
    + Focus Javadoc on current version rather than past versions
    [#573], #574.
    + "Self-suppression not permitted" while using BrokenOutput and
    BrokenInput streams with try-with-resources. Fixes IO-469.
    + Handle zero and negative thresholds #587. Fixes IO-405.
    + Deprecate CountingInputStream in favor of BoundedInputStream.
    + PathUtils.setPosixPermissions(...) only sets permissions if
    needed.
    + PathUtils.setReadOnly(...) only sets permissions if needed.
    + PathUtils.deleteFile(..., DeleteOption...) only sets
    permissions if needed.
    + CleaningPathVisitor only sets permissions if needed.
    + DeletingPathVisitor only sets permissions if needed.
  * New features:
    + Add and use PathUtils.getFileName(Path, Function&lt;Path, R&gt;).
    + Add and use PathUtils.getFileNameString().
    + Make public Erase.rethrow(Throwable).
    + Add BrokenInputStream.BrokenInputStream(Throwable). Fixes
    IO-826.
    + Add BrokenReader.BrokenReader(Throwable). Fixes IO-826.
    + Add BrokenOutputStream.BrokenOutputStream(Throwable). Fixes
    IO-826.
    + Add BrokenWriter.BrokenWriter(Throwable). Fixes IO-826.
    + Add BoundedInputStream.getRemaining().
    + Add FileTimes.toNtfsTime(long).
    + Add FileTimes.fromUnixTime(long).
    + Add FileTimes.isUnixTime(FileTime).
    + Add FileTimes.isUnixTime(long).
    + Add FileTimes.toUnixTime(FileTime).
    + Add BrokenInputStream.Builder.
    + Add PathUtils.getExtension(Path).
    + Add PathUtils.getBaseName(Path).
    + Add ThrottledInputStream.
    + Add IORunnable.noop().
    + Add ChecksumInputStream and test #548.
    + Add AbstractStreamBuilder.getReader().
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
    + Add ProxyInputStream.unwrap().
    + Add a running count and builder to BoundedInputStream.
  * Updates:
    + Bump commons.bytebuddy.version from 1.14.10 to 1.14.12 #534,
    [#592].
    + Bump org.apache.commons:commons-parent from 65 to 67.
    + Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 #583.
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0
    [#593].</changelog>
  <changelog author="fstrba@suse.com" date="1728043200">- Upgrade to 2.17.0
  * New features:
    + Add IOIterator.adapt(Iterable)
    + Add getInputStream() for 'https' and 'http' in URIOrigin
    [#630]. Fixes IO-831
    + Add IOSupplier.getUnchecked()
    + Add CloseShieldInputStream.systemIn(InputStream)
    + Add NullInputStream.init()
    + Add AbstractInputStream and refactor duplicate code
    + Add UnsynchronizedReader
    + Add UnsynchronizedBufferedReader
  * Fixes:
    + FileUtilsWaitForTest does not test anything useful.
    Fixes IO-858.
    + Add missing unit tests
    + FileUtils.lastModifiedFileTime(File) calls
    Objects.requireNonNull() on the wrong object
    + PathUtils.deleteOnExit(Path) calls Objects.requireNonNull()
    on the wrong object
    + Deprecate LineIterator.nextLine() in favor of next()
    + Fix PMD UnnecessaryFullyQualifiedName
    + Add test for CircularByteBuffer clear() #620
    + PathUtils.isPosix(Path, LinkOption...) should return false on
    null input
    + AutoCloseInputStream(InputStream) uses
    ClosedInputStream.INSTANCE when its input is null
    + Avoid NullPointerException in ProxyInputStream.available()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.markSupported()
    when the underlying input stream is null
    + Avoid NullPointerException in ProxyInputStream.mark(int) when
    the underlying input stream is null
    + BufferedFileChannelInputStream.available() returns 0 before
    any reads
    + BufferedFileChannelInputStream.available() should return 0
    instead of -1 at the end of the stream
    + BufferedFileChannelInputStream.available() should return 0
    when the stream is closed instead of throwing an exception
    + CharSequenceInputStream.available() should return 0 after the
    stream is closed
    + BoundedInputStream.available() should return 0 when the
    stream is closed
    + CircularInputStream.available() should return 0 when the
    stream is closed
    + InfiniteCircularInputStream.available() should return 0 when
    the stream is closed
    + ChecksumInputStream(InputStream, Checksum, long, long) should
    fail-fast on null Checksum input
    + Deprecate NullInputStream.INSTANCE in favor of constructors
    + NullInputStream.available() should return 0 after the stream
    is closed
    + MemoryMappedFileInputStream.available() should return 0 after
    the stream is closed
    + RandomAccessFileInputStream.available() should return 0 after
    the stream is closed
    + ReaderInputStream.available() should return 0 after the
    stream is closed
    + AutoCloseInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + BoundedInputStream does not call handleIOException() on
    close() when the proxied stream throws an IOException
    + NullInputStream.read(*) should throw IOException when it is
    closed
    + NullInputStream.read(byte[]) should return 0 when the input
    byte array in length 0
    + NullInputStream.read(byte[], int, int) should return 0 when
    the input byte array in length 0 or requested length is 0
    + MarkShieldInputStream.read(*) should throw IOException when
    it is closed
    + Replace deprecated constant FileFileFilter.FILE in Javadoc
    [#657]
    + Pick up exec-maven-plugin version from parent POM
  * Updates:
    + Bump tests commons.bytebuddy.version from 1.14.13 to 1.15.1
    [#615], #621, #631, #635, #642, #658, #663, #665
    + Bump tests commons-codec:commons-codec from 1.16.1 to 1.17.1
    [#644]
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.4.1
    [#632], #652, #659
    + Bump org.apache.commons:commons-parent from 69 to 74 #628,
    [#637], #649, #661, #664
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
    [#645], #653, #666</changelog>
  <changelog author="gus.kenion@suse.com" date="1737720000">- Upgrade to 2.18.0
  * New features
    + Add @FunctionalInterface to ClassNameMatcher.
    + Add ValidatingObjectInputStream.Builder and
    ValidatingObjectInputStream.builder().
    + Add a "Safe Deserialization" section to the User Guide for
    the site.
    + Add IORandomAccessFile.
    + Add RandomAccessFileMode.io(String).
    + Add FileAlterationObserver.Builder() and deprecate most
    constructors.
    + Add IOUtils.readLines(CharSequence).
    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
    allow configuration reuse.
    + Add RandomAccessFileMode.accept(Path,
    IOConsumer&lt;RandomAccessFile&gt;).
    + Add RandomAccessFileMode.apply(Path,
    IOFunction&lt;RandomAccessFile&gt;, T).
    + Add IOIntConsumer.
    + Add ProxyInputStream.AbstractBuilder. Supports setting a
    consumer for ProxyInputStream.afterRead(int).
    + Add support to AutoCloseInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to BOMInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to BoundedInputStream for setting a consumer for
    BoundedInputStream.onMaxLength(long, long).
    + Add support to ChecksumInputStream for setting a consumer for
    ProxyInputStream.afterRead(int).
    + Add support to ThrottledInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to ObservableInputStream for setting a consumer
    for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestCalculatingInputStream for
    setting a consumer for ProxyInputStream.afterRead(int).
    + Add support to MessageDigestInputStream for setting a
    consumer for ProxyInputStream.afterRead(int).
  * Fixed Bugs
    + Clean ups in unit tests.
    + Fix some Javadoc issues.
    + RandomAccessFileMode.toString() is more helpful for debugging
    when it inherits from Enum.
    + Fix implicit narrowing conversion in compound assignment in
    UnsynchronizedBufferedReader.skip(long).
    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
    (superscript digits for COM and LPT).
    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
    can throw NoSuchFileException #697, #699.
    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
    throws IOException rather than FileNotFoundException.
    + Use Unicode escapes for superscript characters. #701.
    + IO-863:  Recent incompatible change to FileUtils.listFiles re
    extensions, see also IO-856.
    + IO-857:  Javadoc: Update details for PathUtils "clean"
    behavior.
  * Changes
    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
    [#676], #679, #688.
    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
    [#673], #685, #686, #694, #696, #698.
    + Update AbstractStreamBuilder getters from protected to
    public.</changelog>
  <changelog author="fstrba@suse.com" date="1770379200">- Upgrade to 2.19.0
  * New features
    + Add ThrottledInputStream.Builder.setMaxBytes(long,
    ChronoUnit)
    + Add IOIterable
    + ReversedLinesFileReader implements IOIterable&lt;String&gt;
    + Add AbstractByteArrayOutputStream.write(CharSequence,
    Charset)
    + Add AbstractByteArrayOutputStream.write(byte[])
    + Add RandomAccessFileOutputStream.getRandomAccessFile()
    + Add ProxyInputStream.setReference(InputStream), was
    package-private setIn(InputStream)
    + Add ProxyOutputStream.setReference(OutputStream)
    + Add RandomAccessFileInputStream.copy(long, long,
    OutputStream)
    + Add ProxyOutputStream.Builder
    + Add ByteOrderMark.matches(int[])
    + Add BrokenOutputStream.BrokenOutputStream(Function&lt;String&gt;,
    Throwable&gt;) and deprecate Supplier&lt;String&gt; constructor
    + Add IOBooleanSupplier
    + Add Uncheck.getAsBoolean(IOBooleanSupplier)
    + Add FileChannels.contentEquals(SeekableByteChannel,
    SeekableByteChannel, int)
    + Add FileChannels.contentEquals(ReadableByteChannel,
    ReadableByteChannel, int)
    + Add SimplePathVisitor.AbstractBuilder
    + Add CountingPathVisitor.AbstractBuilder and
    CountingPathVisitor.Builder
    + Add AccumulatorPathVisitor.Builder and builder()
    + Add PathUtils.contentEquals(FileSystem, FileSystem)
  * Fixed Bugs
    + Deprecate constructor Counters.Counters() to be private in
    4.0
    + Deprecate constructor Charsets.Charsets() to be private in
    4.0
    + Pick up maven-antrun-plugin version from parent POM
    org.apache:apache
    + Javadoc is missing its Overview page
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80)
    + Deprecate DeferredFileOutputStream.getStream() in favor of
    getOutputStream()
    + Improve Javadoc for a BoundedInputStream builder() throwing
    IOException
    + Improve Javadoc for all implementations of
    AbstractOriginSupplier#get()
    + The Consumer to IOUtils.closeQuietly(Closeable, Consumer) now
    accepts Exception, not just IOException
    + The Consumer to IOUtils.close(Closeable, IOConsumer) now
    accepts wrapped Exception, not just IOException
    + Use Uncheck.getAsBoolean(IOBooleanSupplier) to avoid boxing
    and unboxing of boolean values
    + Avoid unnecessary boxing and unboxing of long values in
    FileUtils.sizeOf(File)
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedBufferedReader.read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterInputStream.available() and read()
    + Avoid unnecessary boxing and unboxing of int values in
    UncheckedFilterReader.read()
    + FileChannels.contentEquals(FileChannel, FileChannel, int) can
    return false when comparing a non-blocking channel
    + Deprecate FileChannels.contentEquals(FileChannel, FileChannel,
    int) in favor of FileChannels
    .contentEquals(SeekableByteChannel, SeekableByteChannel, int)
    + Improve performance of IOUtils.contentEquals(InputStream,
    InputStream) by about 13%
    + PathUtils.copyFileToDirectory() across file systems
    + IOUtils.contentEquals is incorrect when InputStream.available
    under-reports
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToFileTime(FileTimes.java:164).
    See also https://issues.apache.org/jira/browse/MDEP-978
    + java.lang.ArithmeticException: long overflow java.lang.Math
    .addExact(Math.java:932) at org.apache.commons.io.file
    .attribute.FileTimes.ntfsTimeToDate(long)
    + FileTimes.toNtfsTime(*) methods can overflow result values
    + Fix Javadoc for ChunkedOutputStream.Builder
    + General Javadoc improvements
    + Calling QueueInputStream.QueueInputStream(null) maps to the
    same kind of default blocking queue as
    QueueInputStream.Builder.setBlockingQueue(null)
    + CopyDirectoryVisitor creates incorrect file names when
    copying between different file systems that use different file
    system separators ("/" versus "\"); fixes
    PathUtils.copyDirectory(Path, Path, CopyOption...)
    + ThreadUtils.sleep(Duration) should handle the underlying OS
    time changing
  * Changes
    + Bump commons.bytebuddy.version from 1.15.10 to 1.17.5
    + Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
    + Bump org.apache.commons:commons-parent from 78 to 81</changelog>
  <changelog author="fstrba@suse.com" date="1770379201">- Upgrade to 2.20.0
  * New features
    + Add org.apache.commons.io.file.CountingPathVisitor
    .accept(Path, BasicFileAttributes)
    + Add org.apache.commons.io.Charsets.isAlias(Charset, String)
    + Add org.apache.commons.io.Charsets.isUTF8(Charset)
    + Add org.apache.commons.io.Charsets.toCharsetDefault(String,
    Charset)
    + Add Tailer ignoreTouch option
  * Fixed Bugs
    + [javadoc] Rename parameter of ProxyOutputStream.write(int)
    + CopyDirectoryVisitor ignores fileFilter
    + org.apache.commons.io.build.AbstractOrigin.getReader(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getReader(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin
    .getReader(Charset) now maps a null Charset to the default
    Charset
    + org.apache.commons.io.build.AbstractOrigin.getWriter(Charset)
    now maps a null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin
    .AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a
    null Charset to the default Charset
    + org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin
    .getWriter(Charset) now maps a null Charset to the default
    Charset
    + FileUtils.readLines(File, Charset) now maps a null Charset to
    the default Charset
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream,
    org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 77] Another occurrence
    at WindowsLineEndingInputStream.java:[line 81]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 112]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.WindowsLineEndingInputStream] At
    WindowsLineEndingInputStream.java:[line 113]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 75]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atEos" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 120]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashCr" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 124]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "atSlashLf" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.UnixLineEndingInputStream] At
    UnixLineEndingInputStream.java:[line 125]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "closed" in one thread may not yield the value of the most
    recent write from another thread
    [org.apache.commons.io.input.ProxyInputStream] At
    ProxyInputStream.java:[line 233]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + Fix SpotBugs [ERROR] Medium: Shared primitive variable
    "propagateClose" in one thread may not yield the value of the
    most recent write from another thread
    [org.apache.commons.io.input.BoundedInputStream] At
    BoundedInputStream.java:[line 555]
    AT_STALE_THREAD_WRITE_OF_PRIMITIVE
    + QueueInputStream reads all but the first byte without waiting
    + Javadoc fixes and improvements
    + Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter
    .accept(File)
    + FileUtils.forceDelete can delete a broken symlink again
    + Fix infinite loop in AbstractByteArrayOutputStream
  * Changes
    + Bump commons.bytebuddy.version from 1.17.5 to 1.17.6
    + Bump org.apache.commons:commons-parent from 81 to 85
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0</changelog>
  <changelog author="fstrba@suse.com" date="1770379202">- Upgrade to 2.21.0
  * New features
    + FileUtils#byteCountToDisplaySize() supports Zettabyte,
    Yottabyte, Ronnabyte and Quettabyte
    + Add org.apache.commons.io.FileUtils.ONE_RB
    + Add org.apache.commons.io.FileUtils.ONE_QB
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], int, int, long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(byte[], long)
    + Add org.apache.commons.io.output.ProxyOutputStream
    .writeRepeat(int, long)
    + Add length unit support in FileSystem limits
    + Add IOUtils.toByteArray(InputStream, int, int) for safer
    chunked reading with size validation
    + Add org.apache.commons.io.file.PathUtils.getPath(String,
    String)
    + Add org.apache.commons.io.channels
    .ByteArraySeekableByteChannel
    + Add IOIterable.asIterable()
    + Add NIO channel support to 'AbstractStreamBuilder'
    + Add CloseShieldChannel to close-shielded NIO Channels
    + Added IOUtils.checkFromIndexSize as a Java 8 backport of
    Objects.checkFromIndexSize
  * Fixed Bugs
    + When testing on Java 21 and up, enable
  - XX:+EnableDynamicAgentLoading
    + When testing on Java 24 and up, don't fail
    FileUtilsListFilesTest for a different behavior in the JRE
    + ValidatingObjectInputStream does not validate dynamic proxy
    interfaces
    + BoundedInputStream.getRemaining() now reports Long.MAX_VALUE
    instead of 0 when no limit is set
    + BoundedInputStream.available() correctly accounts for the
    maximum read limit
    + Deprecate IOUtils.readFully(InputStream, int) in favor of
    toByteArray(InputStream, int)
    + IOUtils.toByteArray(InputStream) now throws IOException on
    byte array overflow
    + Javadoc general improvements
    + IOUtils.toByteArray() now throws EOFException when not enough
    data is available
    + Fix IOUtils.skip() usage in concurrent scenarios
    + [javadoc] Fix XmlStreamReader Javadoc to indicate the correct
    class that is built
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 91
    + [test] Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
    + [test] Bump commons.bytebuddy.version from 1.17.6 to 1.17.8
    + [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to
    3.19.0
  * Removed
    + Inline private constant field
    ProxyInputStream.exceptionHandler</changelog>
  <changelog author="fstrba@suse.com" date="1778068800">- Upgrade to 2.22.0
  * New features
    + Add and use IOUtils.closeQuietlySuppress(Closeable, Throwable)
    + Add ProxyWriter.setReference(Writer)
    + Add ProxyWriter.unwrap()
    + Add ProxyReader.setReference(Reader)
    +Add ProxyReader.unrwap()
    + IO-883: ByteArraySeekableByteChannel should optionally
    configure a read-only channel
    + IO-883: Add ByteArraySeekableByteChannel.Builder and builder()
    + IO-883: Add AbstractStreamBuilder.getByteArray()
    + CloseShieldInputStream now supports a custom close shield as
    a function
    + Add FlushShieldOutputStream to workaround issues in generic
    code that ends up calling third parties like like
    org.tukaani.xz.LZMAOutputStream.flush()
    + Add filter channels
  * Fixed Bugs
    + Fix Apache RAT plugin console warnings
    + ByteArraySeekableByteChannel.position(long) and truncate(long)
    shouldn't throw an IllegalArgumentException for a new positive
    position that's too large
    + Fix malformed Javadoc comments
    + ReadAheadInputStream.close() doesn't always close its filtered
    input stream
    + ReadAheadInputStream now restores the current thread's
    interrupt flag when catching InterruptedException
    + FileAlterationMonitor.stop(long) now restores the current
    thread's interrupt flag when catching InterruptedException
    + FileCleaningTracker now restores the current thread's
    interrupt flag when catching InterruptedException
    + ThreadMonitor.run() now restores the current thread's
    interrupt flag when catching InterruptedException
    + ThrottledInputStream.throttle() now restores the current
    thread's interrupt flag when catching InterruptedException
    + ThrottledInputStream.throttle() doesn't preserve the original
    InterruptedException as the cause of its
    InterruptedIOException
    + All thread names are now prefixed with "commons-io-"
    + IO-639: ReversedLinesFileReader does not read first line if
    its empty
    + IO-886: Fixed incorrect regular expression in
    PathUtils.RelativeSortedPaths.extractKey(String, String)
    + Fix typos in Javadoc of FileUtils and related test classes
    + IO-887: WriterOutputStream from a builder fails on malformed
    or unmappable input bytes
    + BoundedReader now extends ProxyReader
    + AbstractStreamBuilder.setOpenOptions(OpenOption...) now makes
    a defensive copy of its input array
    + IO-885: Path visits follow links
    + BOMInputStream fail-fast and tracks its ByteOrderMark as a final
    + Refactor UnixLineEndingInputStream and
    WindowsLineEndingInputStream for duplication
    + IO-857: [Javadoc] PathUtils.cleanDirectory() methods vs FileUtils
    + Fix JaCoCo report generation (code coverage)
    + AbstractStreamBuilder.setBufferSizeDefault(int) now resets to
    default for input less than or equal to zero
  * Changes
    + Bump org.apache.commons:commons-parent from 91 to 98
    + Bump commons-codec:commons-codec from 1.19.0 to 1.21.0
    + Bump commons.bytebuddy.version from 1.17.8 to 1.18.8
    + Bump commons-lang3 from 3.19.0 to 3.20.0</changelog>
</package>
<package pkgid="8f3d1702c5af55e2860f29a0329b792ea41325c8a14d964648fbce5bb42d8da7f90f673fe5aa1412d1aea48237cb91b3948f421bf8062d0a8ab77681dbbab04c" name="apache-commons-jexl" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551355200">- Initial package based on Fedora rpm
- Generate and sanitize ant build files</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="edc00e19eb10da6819649e95403cd572d93c8dd550a98a8603ac9bba9481a18839a054aa4d78c5f610b49319cde00156249dfdc56c1fa6d9e91ed387cec501b2" name="apache-commons-jexl-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551355200">- Initial package based on Fedora rpm
- Generate and sanitize ant build files</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="50fe93aff3540b3b029554aa9c699c44c08ed239403772d91860d80009333591e72be91d61822151546a966844390ea86a7b75170b0651ad042457ca9de6e091" name="apache-commons-jxpath" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora's. Removed maven stuff</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit to be acceptable.</changelog>
  <changelog author="tchvatal@suse.com" date="1433419200">- Build with new tomcat</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove unneeded requires</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8</changelog>
  <changelog author="fstrba@suse.com" date="1540036800">- Install the provided pom.xml file and generate the mvn(...)
  provides</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- Include a manifest in the jar file</changelog>
  <changelog author="fstrba@suse.com" date="1551355200">- Sanitize dependencies
- Build and distribute the javadoc too
- Added patch:
  * commons-jxpath-1.3-manifest.patch
  - Add OSGi bundle entries
- Modified patch:
  * build.xml.patch
  - Remove completely the get-deps target that we don't use</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727006400">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="278f1cabf6cb2cb1dfba5914fa1e12e395249d85d9fb37f8b1e87dd7d192bc973c5dc7ee68cc9baff55fe331b87b624c88be8400c44876616e6a8e6672552e47" name="apache-commons-jxpath-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="dmacvicar@suse.de" date="1324382400">- initial package based on Fedora's. Removed maven stuff</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit to be acceptable.</changelog>
  <changelog author="tchvatal@suse.com" date="1433419200">- Build with new tomcat</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove unneeded requires</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8</changelog>
  <changelog author="fstrba@suse.com" date="1540036800">- Install the provided pom.xml file and generate the mvn(...)
  provides</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- Include a manifest in the jar file</changelog>
  <changelog author="fstrba@suse.com" date="1551355200">- Sanitize dependencies
- Build and distribute the javadoc too
- Added patch:
  * commons-jxpath-1.3-manifest.patch
  - Add OSGi bundle entries
- Modified patch:
  * build.xml.patch
  - Remove completely the get-deps target that we don't use</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727006400">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="2634c93ef71467ffe135647923415178b80eb8be7c4923280a1db266bdaf9d35ed7fc14123441e7b430b1c430325a081fd907468ed5ea8b5321004958d60ae5b" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.18.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1613476800">- Add OSGi manifest</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- Fixed SPEC file: Replaced broken URL
- Update to 3.9
  * Requires jdk &gt;= 1.8
  * Fixed issues with java 12
  * Add more SystemUtils.IS_JAVA_XX variants
  * Adding the Functions class
  * Add @FunctionalInterface to ThreadPredicate and ThreadGroupPredicate
  * Add isEmpty method to ObjectUtils
  * null-safe StringUtils.valueOf(char[]) to delegate to
    String.valueOf(char[]).
  * Add API org.apache.commons.lang3.SystemUtils.isJavaVersionAtMost(JavaVersion)
  * Consolidate the StringUtils equals and equalsIgnoreCase</changelog>
  <changelog author="david.anes@suse.com" date="1640347200">- Updated download URL.
- Update to 3.12.0:
  - New features:
  * Add BooleanUtils.booleanValues().
  * Add BooleanUtils.primitiveValues().
  * Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
  * Add StopWatch.getStopTime().
  * More test coverage for CharSequenceUtils.
  * Add fluent-style ArraySorter.
  * Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
  * Add FailableShortSupplier, handy for JDBC APIs.
  * Add JavaVersion.JAVA_17.
  * Add missing boolean[] join method.
  * Add StringUtils.substringBefore(String, int).
  * Add Range.INTEGER.
  * Add DurationUtils.
  * Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
  * Add and use true and false String constants.
  * Add and use ObjectUtils.requireNonEmpty().
  - Fixed Bugs:
  * Correct implementation of RandomUtils.nextLong(long, long).
  * Restore handling of collections for non-JSON ToStringStyle.
  * ContextedException Javadoc add missing semicolon.
  * Resolve JUnit pioneer transitive dependencies using JUnit BOM.
  * NumberUtilsTest - incorrect types in min/max tests.
  * Improve StringUtils.stripAccents conversion of remaining accents.
  * StringUtils.countMatches - clarify Javadoc.
  * Remove redundant argument from substring call.
  * BigDecimal is created when you pass it the min and max values.
  * ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
  * ArrayUtils contains() and indexOf() fail to handle Float.NaN.
  * Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type&gt;).
  * TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
  * testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
  * Fix Javadoc for SystemUtils.isJavaVersionAtMost().
  * Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
  * Fix formatting of isAnyBlank() and isAnyEmpty().
  * TypeUtils. containsTypeVariables does not support GenericArrayType.
  * Javadoc of some methods incorrectly refers to another method.
  * Refine StringUtils.lastIndexOfIgnoreCase.
  * Refine StringUtils.abbreviate.
  * Refine StringUtils.isNumericSpace.
  * Refine StringUtils.deleteWhitespace.
  * Correction in Javadoc of some methods.
  * Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
  * Correct markup in Javadoc for unbalanced braces.
  * MethodUtils.invokeMethod NullPointerException in case of null in args list.
  * Fix 2 digit week year formatting.
  * Fix broken Javadoc links to commons-text.
  * Add and use ThreadUtils.sleep(Duration).
  * Add and use ThreadUtils.join(Thread, Duration).
  * Add ObjectUtils.wait(Duration).
  - Changes:
  * ArrayUtils.toPrimitive(Object) does not support boolean and other types.
  * Enable Dependabot.
  * Bump junit-jupiter from 5.6.2 to 5.7.0.
  * Bump spotbugs from 4.1.2 to 4.2.1.
  * Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
  * Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
  * Bump junit-pioneer from 0.6.0 to 1.1.0.
  * Bump checkstyle from 8.34 to 8.40.
  * Bump actions/checkout from v2.3.1 to v2.3.4.
  * Bump actions/setup-java from v1.4.0 to v1.4.2.
  * Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
  * Update maven-surefire-plugin 2.22.2 -&gt; 3.0.0-M5.
  * Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
  * Bump jmh.version from 1.21 to 1.27.
  * Update commons.japicmp.version 0.14.3 -&gt; 0.15.2.
  * Processor.java: check enum equality with == instead of .equals() method.
  * Bump junit-pioneer from 1.1.0 to 1.3.0.
  * Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
  * Bump actions/cache from v2 to v2.1.4.
  * Bump junit-bom from 5.7.0 to 5.7.1.
  * Minor Improvements.
  * Minor Improvement: Add final variable.try to make the code read-only.
  * Minor Improvement: Remove redundant initializer.
  * Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
  - New features:
  * Add ArrayUtils.isSameLength() to compare more array types.
  * Added the Locks class as a convenient possibility to deal with locked objects.
  * Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
  * Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
  * Add JavaVersion enum constants for Java 14 and 15.
  * Add JavaVersion enum constants for Java 16.
  * Use Java 8 lambdas and Map operations.
  * Change removeLastFieldSeparator to use endsWith.
  * Change a Pattern to a static final field, for not letting it compile each time the function invoked.
  * Add ImmutablePair factory methods left() and right().
  * Add ObjectUtils.toString(Object, Supplier&lt;String&gt;).
  * Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
  * Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
  - Fixed Bugs:
  * Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
  * Refine Javadoc.
  * Fix typos
  * Ignored exception `ignored`, should not be called so.
  * StringUtils.replaceEachRepeatedly gives IllegalStateException.
  * [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
  * Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
  * Add allNull() and anyNull() methods to ObjectUtils.
  - Changes:
  * Refine test output for FastDateParserTest
  * CharSequenceUtils.lastIndexOf : remake it
  * remove encoding and docEncoding and use inherited values from commons-parent
  * Simplify null checks in Pair.hashCode() using Objects.hashCode().
  * Simplify null checks in Triple.hashCode() using Objects.hashCode().
  * Simplify some if statements in StringUtils.
  * Simplify a null check in the private replaceEach() method of StringUtils.
  * Replace some usages of the ternary operator with calls to Math.max() and Math.min().
  * (Javadoc) Fix return tag for throwableOf*() methods.
  * CharSequenceUtils.regionMatches is wrong dealing with Georgian.
  * Optimize ArrayUtils::isArrayIndexValid method.
  * Use List.sort instead of Collection.sort.
  * Use StandardCharsets.UTF_8.
  * Use Collections.singletonList insteadof Arrays.asList when there be only one element.
  * Change array style from `int a[]` to `int[] a`.
  * Change from addAll to constructors for some List.
  * Simplify if as some conditions are covered by others.
  * Fixed Javadocs for setTestRecursive().
  * ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
  * Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
  * org.apache.commons:commons-parent 50 -&gt; 51.
  * org.junit-pioneer:junit-pioneer 0.5.4 -&gt; 0.6.0.
  * org.junit.jupiter:junit-jupiter 5.6.0 -&gt; 5.6.2.
  * com.github.spotbugs:spotbugs 4.0.0 -&gt; 4.0.6.
  * com.puppycrawl.tools:checkstyle 8.29 -&gt; 8.34.
  * commons.surefire.version 3.0.0-M4 -&gt; 3.0.0-M5..
- From 3.10 Update:
  - New features:
  * Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
  * Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
  * Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
  * Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
  * Add ArrayUtils.addFirst() methods.
  * Add Range.fit(T) to fit a value into a range.
  * Added Functions.as*, and tests thereof, as suggested by Peter Verhas
  * Add getters for lhs and rhs objects in DiffResult.
  * Generify builder classes Diffable, DiffBuilder, and DiffResult.
  * Add ClassLoaderUtils with toString() implementations.
  * Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
  * Add org.apache.commons.lang3.time.Calendars.
  * Add EnumUtils getEnum() methods with default values.
  * Added indexesOf methods and simplified removeAllOccurences.
  * Add support of lambda value evaluation for defaulting methods.
  * Add factory methods to Pair classes with Map.Entry input.
  * Add StopWatch convenience APIs to format times and create a simple instance.
  * Allow a StopWatch to carry an optional message.
  * Add ComparableUtils.
  * Add org.apache.commons.lang3.SystemUtils.getUserName().
  * Add ObjectToStringComparator.
  * Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
  * Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
  * ObjectUtils: Get first non-null supplier value.
  * Added the Streams class, and Functions.stream() as an accessor thereof.
  - Fixed Bugs:
  * Make test more stable by wrapping assertions in hashset.
  * Generate Javadoc jar on build.
  * Trivial: year of release for 3.9 says 2018, should be 2019.
  * Use synchronize on a set created with Collections.synchronizedSet before iterating.
  * StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
  * StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
  * StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
  * Corrected usage examples in Javadocs.
  * StringUtils abbreviate returns String of length greater than maxWidth.
  * Test may fail due to a different order of fields returned by reflection api.
  * Sort fields in ReflectionToStringBuilder for deterministic order.
  * MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
  * MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
  - Changes:
  * Remove redundant if statements in join methods.
  * commons.japicmp.version 0.13.1 -&gt; 0.14.1.
  * junit-jupiter 5.5.0 -&gt; 5.5.1.
  * junit-jupiter 5.5.1 -&gt; 5.5.2.
  * Improve Javadoc based on the discussion of the GitHub PR.
  * maven-checkstyle-plugin 3.0.0 -&gt; 3.1.0.
  * Update documentation related to the issue LANG-696.
  * AnnotationUtils little cleanup.
  * Update test dependency: org.easymock:easymock 4.0.2 -&gt; 4.1.
  * Update test dependency: org.hamcrest:hamcrest 2.1 -&gt; 2.2.
  * Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -&gt; 0.4.2.
  * Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -&gt; 8.27.
  * Update POM parent: org.apache.commons:commons-parent 48 -&gt; 50.
  * BooleanUtils Javadoc.
  * Functions Javadoc.
  * org.easymock:easymock 4.1 -&gt; 4.2.
  * org.junit-pioneer:junit-pioneer 0.4.2 -&gt; 0.5.4.
  * org.junit.jupiter:junit-jupiter 5.5.2 -&gt; 5.6.0.
  * Use Javadoc {@code} instead of pre tags.
  * ExceptionUtilsTest to 100%.
  * Reuse own code in Functions.java.
  * Avoid unnecessary allocation in StringUtils.wrapIfMissing.
  * Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
  * Add 1 and 0 in toBooleanObject(final String str).
  * Remove an redundant argument check in NumberUtils.
  * Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Fix component version in default.properties to 3.12</changelog>
  <changelog author="pmonreal@suse.com" date="1640779201">- Remove the junit bom dependency for now as it breaks the build of
  other packages like log4j.
  * Add apache-commons-lang3-junit-bom.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693396800">- Break cycle with the new bcel
- Removed patch:
  * apache-commons-lang3-junit-bom.patch
    + not needed since we install the pom file using the new
    %%mvn_install_pom macro which sanitizes the pom file to the
    bare runtime dependencies.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Update to 3.14.0:
  * New features:
    + Add Functions#function(Function).
    + Add FailableFunction#function(FailableFunction).
    + Add CalendarUtils.getInstance().
    + Add syntax for optional tokens to DurationFormatUtils.
    + Add ArrayFill.
    + Add FastDateParser.TimeZoneStrategy.TzInfo.toString().
    + Add LocaleUtils.isLanguageUndetermined(Locale).
    + Add ObjectUtils.toString(Supplier&lt;Object&gt;, Supplier&lt;String&gt;).
    + Add LazyInitializer.isInitialized().
    + Add ConcurrentInitializer#isInitialized() #1120.
    + Add Streams.failableStream(T...).
    + Add FailableSupplier.nul().
    + Add Suppliers.nul().
    + Add ExceptionUtils.throwUnchecked(T) where T extends
    Throwable, and deprecate Object version.
    + Add ExceptionUtils.rethrowRuntimeException(T), and deprecate
    rethrow(T).
    + ConcurrentInitializer implementations can now be instantiated
    and configured with allocation and release lambdas.
    Fixes LANG-1716.
    + Add support for RISC-V in ArchUtils #1128. Fixes LANG-1717.
  * Fixed bugs:
    + Rename variable names from 'clss' to 'clazz'.
    + [Javadoc] ComparableUtils'c1' to 'comparable1', 'c2' to
    'comparable2'
    + [Javadoc] Remove 2.1 specific comment #1091.
    + [Javadoc] Fix Incorrect Description in Processor isAarch64()
    [#1093]. Fixes LANG-1704.
    + [Javadoc] Point to right getShortClassName flavor in Javadoc
    for relevant notes #1097.
    + Improve performance of StringUtils.isMixedCase().
    + ThreadUtils find methods should not return null items. Fixes
    LANG-1706.
    + ReflectionToStringBuilder changes in version 3.13.0 has broken
    the logic for overriding classes. Fixes LANG-1710.
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(ClassLoader).
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(URLClassLoader).
    + Return ToStringStyle.nullText instead of NPE for
    ReflectionToStringBuilder.toString().
    + Fix ThresholdCircuitBreaker#checkState().
    + Use ConcurrentInitializer implementations without subclassing.
    + Update critical value for chi-square test.
    + Fix Javadoc syntax errors #1129.
- From 3.13.0 update
  * New features:
    + Add GitHub coverage.yml.
    + Add EnumUtils.getEnumSystemProperty(...).
    + Add TriConsumer.
    + Add and use EnumUtils.getFirstEnumIgnoreCase(Class, String,
    Function, E).
    + Add and use Suppliers.
    + Add and use ArrayUtils.getComponentType(T[]).
    + Add and use ClassUtils.getComponentType(Class&gt;T[]&gt;).
    + Add and use ObjectUtils.getClass(T).
    + Add and use ArrayUtils.newInstance(Class&gt;T&gt;, int).
    + Add and use null-safe Streams.of(T...).
    + Add ClassUtils.comparator().
    + Add and use ThreadUtils.sleepQuietly(Duration).
    + Add and use ArrayUtils.setAll(T[], IntFunction).
    + Add and use ArrayUtils.setAll(T[], Supplier).
    + Add BooleanConsumer.
    + Add IntToCharFunction.
    + Add IntStreams.
    + Add UncheckedFuture.
    + Add UncheckedException.
    + Add UncheckedExecutionException.
    + Add UncheckedTimeoutException.
    + Add UncheckedInterruptedException.
    + Add TimeZones.GMT.
    + Add ObjectUtils.identityHashCodeHex(Object).
    + Add ObjectUtils.hashCodeHex(Object).
    + Add StringUtils.removeStart(String, char).
    + Add null-safe ObjectUtils.isArray(). Fixes LANG-1659.
    + Add ComparableUtils.max(A, A) and ComparableUtils.min(A, A).
    + Add UncheckedReflectiveOperationException.
    + Add and use ClassUtils.isPublic(Class).
    + Add UncheckedIllegalAccessException.
    + Add MethodInvokers.
    + Add Streams.nullSafeStream(Collection).
    + Add Streams.toStream(Collection).
    + Add Streams.failableStream(Collection) and deprecate misnamed
    stream(Collection).
    + Add Streams.failableStream(Stream) and deprecate misnamed
    stream(Stream).
    + Add EnumUtils.getEnumMap(Class, Function).
    + Add FluentBitSet.
    + Add Streams.instancesOf(Class, Collection).
    + Add ImmutablePair.ofNonNull(L, R).
    + Add ImmutableTriple.ofNonNull(L, M, R).
    + Add MutablePair.ofNonNull(L, R).
    + Add MutableTriple.ofNonNull(L, M, R).
    + Add Pair.ofNonNull(L, R).
    + Add Triple.ofNonNull(L, M, R).
    + Add ArrayUtils.containsAny(Object[], Object...).
    + Add Processor.Type.AARCH_64.
    + Add Processor.isAarch64().
    + Update ArchUtils.getProcessor(String) for "aarch64".
    + Add JavaVersion.JAVA_18.
    + Add JavaVersion.JAVA_19.
    + Add JavaVersion.JAVA_20.
    + Add JavaVersion.JAVA_21.
    + Add TimeZones.toTimeZone(TimeZone).
    + Add FutureTasks.
    + Add Memoizer(Function) and Memoizer(Function, boolean).
    + Add Consumers.
    + Add github/codeql-action.
    + Add coverage.yml.
    + Add DurationUtils.since(Temporal).
    + Add DurationUtils.of(FailableConsumer|FailableRunnbale).
    + Add ExceptionUtils.forEach(Throwable, Consumer&lt;Throwable&gt;).
    + Add ExceptionUtils.stream(Throwable).
    + Add ExceptionUtils.getRootCauseStackTraceList(Throwable).
    + Add SystemUtils.IS_OS_WINDOWS_11.
    + Add SystemUtils.IS_JAVA_16.
    + Add SystemUtils.IS_JAVA_17.
    + Add SystemUtils.IS_JAVA_18.
    + Add SystemUtils.IS_JAVA_19.
    + Add SystemUtils.IS_JAVA_20.
    + Add SystemUtils.IS_JAVA_21.
    + Add ArrayUtils.oneHot(). Fixes LANG-1627.
    + Let ReflectionToStringBuilder only reflect given field names.
    Fixes LANG-1662.
    + Add Streams.of(Enumeration&lt;E&gt;).
    + Add Streams.of(Iterable&lt;E&gt;).
    + Add Streams.of(Iterator&lt;E&gt;).
    + Simple support for Optional in ObjectUtils#isEmpty(). Fixes
    LANG-1689.
    + Add Processor.Type.getLabel().
    + Add Processor.toString().
    + Add HashCodeBuilder.equals(Object).
    + Add BooleanUtils.values() and forEach().
    + Add ClassPathUtils.packageToPath(String) and pathToPackage(String)
    + Add CalendarUtils#getDayOfYear()
    + Add NumberRange, DoubleRange, IntegerRange, LongRange.
    + Add missing exception javadoc/tests for some null arguments.
    + Add ClassLoaderUtils.getSystemURLs() and getThreadURLs().
    + Add RegExUtils.dotAll() and dotAllMatcher().
    + Add Pair.accept(FailableBiConsumer).
    + Add Pair.apply(FailableBiFunction).
    + Add ReflectionDiffBuilder.setExcludeFieldNames(...) and
    DiffExclude a... Fixes LANG-1677.
    + Add and ExceptionUtils.isChecked() and isUnchecked(). Fixes
    LANG-1647.
    + Add and use ExceptionUtils.throwUnchecked(throwable).
    + Add LockingVisitors.create(O, ReadWriteLock).
  * Fixed bugs:
    + NumberUtils.createNumber() to recognize hex integers prefixed
    with +. Fixes LANG-1645.
    + NumberUtils.createNumber() to return requested floating point
    type for zero. Fixes LANG-1646.
    + DMI: Random object created and used only once
    (DMI_RANDOM_USED_ONLY_ONCE); Better multi-threaded behavior.
    + Redundant Collection operation. Use
    Collections.emptyIterator(). Fixes LANG-1646.
    + Make Streams.stream(Collection) null-safe.
    + Allow tests to access java.util classes such as ArrayList in
    Java 16. Fixes LANG-1667.
    + OpenJDK 16 Day Period Parsing. Fixes LANG-1669.
    + Update documentation to list correct exception for null array
    parameters. Fixes LANG-1663.
    + Fixing reversed Javadoc descriptions in StopWatch.
    + Fix typos in JavaDoc. Fixes LANG-1670.
    + Simplify assertions with equivalent but more simple..
    + Avoid multiple equivalent occurrences of the same expression.
    + Remove redundant initializers.
    + Fix ObjectUtils Javadocs.
    + Make Range constructors more generic. Fixes LANG-1674.
    + Use final and Remove redundant String.
    + Use Set instead of List for checking the contains() method.
    + Javadoc for StringUtils.substringBefore(String str,
    int separator) doesn't mention that the separator is an int.
    + Fix NullPointerException in ThreadUtils.getSystemThreadGroup()
    when the current thread is stopped.
    + ArrayUtils.toPrimitive(Boolean...) null array elements map to
    false, like Boolean.parseBoolean(null) and its callers return
    false.
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows.
    + Deprecate Validate#notNull(Object) in favor of using
    Objects#requireNonNull(Object, String).
    + Use TimeZone from calendar in DateFormatUtils. Fixes
    LANG-1462.
    + Updating javadoc for NullPointerException when
    Validate.notNull() is called.
    + Fixing and adding DateUtils exception Javadocs.
    + Improve performance of StringUtils.unwrap(String, String).
    Fixes LANG-1679.
    + Improve performance of StringUtils.join for primitives. Fixes
    LANG-1675.
    + Fixed NPE getting Stack Trace if Throwable is null. Fixes
    LANG-1675.
    + Make Validate.isAssignableFrom() check null inputs.
    + Fix Javadoc for Validate.isAssignableFrom().
    + Make final mappingFunction variable.
    + Remove unnecessary variable creations.
    + Minor changes.
    + FastDateFormat does not support the 'L'-Pattern from
    SimpleDateFormat. Fixes LANG-1680.
    + Increase test coverage of ComparableUtils from 71% to 100%.
    + Increase method test coverage of
    MultilineRecursiveToStringStyle.
    + Fix unstable coverage of CharSequenceUtils tests noticed
    during merge of PRs 898 and 899.
    + Rewrite Conversion.binaryBeMsb0ToHexDigit to invert logic of
    binaryToHexDigit.
    + Allow extension of previously final classes ImmutablePair and
    ImmutableTriple.
    + Update ClassUtils Javadoc with some missing throws NPE.
    + Javadoc: StringUtils.repeat("", "x", 3) = "xx";.
    + StringUtils.join(Iterable, String) should only return null
    when the Iterable is null.
    + Add tests to increase coverage.
    + Extends Object clauses are redundant.
    + Simplify conditional expression..
    + Fix some Javadoc comments.
    + Deprecate getNanosOfMiili() method with typo and create proper
    getNanosOfMilli().
    + Deprecate ThreadUtils code that defines custom function
    interfaces in favor of stock java.util.function.Predicate
    usage.
    + Fix links in Javadoc and documentation.
    + Deprecate RandomUtils in favor of Apache Commons RNG
    UniformRandomProvider. Fixes LANG-1604.
    + Added docs regarding week year support. Fixes LANG-1638.
    + ClassUtils.getShortCanonicalName doesn't use the
    canonicalName. Fixes LANG-1691.
    + Validate: Get error messages without using String.format when
    varargs is empty.
    + Simplify expression (length is never &lt; 0).
    + Fix simple broken javadoc..
    + Fix typo.
    + Use Objects.requireNonNull() directly.
    + MethodUtils.getMatchingMethod() fails with "Found multiple
    candidates". Fixes LANG-1694.
    + Construct ArrayList with better default size. Fixes LANG-1643.
    + ThreadUtilsTest#testThreadGroups will test failed when using
    Junit5 parallel test.
    + Swap the order of assertion args (first excepted then actual).
    + Fix the comment of Failable, redundant "-".
    + Fix the comment of ComparableUtils, using "smallest", not
    "largest".
    + AnnotationUtilsTest and FormattableUtilsTest Only use static
    imports to import assert methods in tests.
    + [LANG-1681] Fix some FieldUtils Javadocs.
    + Remove unnecessary statement in DurationFormatUtils.
    + Corrected value of SystemUtils.JAVA_VENDOR. Fixes LANG-1699.
    + [StepSecurity] ci: Harden GitHub Actions.
    + Update Javadoc for the insert methods in ArrayUtils.
    + Deprecate ExceptionUtils.ExceptionUtils().
    + TypeUtils.getRawType() throws a NullPointerException on
    Wildcard GenericArrayType. Fixes LANG-1697.
    + Throw IllegalArgumentException instead of InternalError in the
    builder package.
    + Avoid NPE in MutableObject#equals() for null content.
    + SystemUtils fix and updates related to macOS.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Update to 3.16.0:
  * New features:
    + Add StopWatch.getSplitDuration() and deprecate
    getSplitTime().
    + Add StopWatch.getStartInstant() and deprecate getStartTime().
    + Add StopWatch.getStopInstant() and deprecate getStopTime().
    + Add StopWatch.getDuration() and deprecate getTime().
    + Add Javadoc links from StopWatch to DurationUtils #1249.
    + Add LangCollectors.collect(Collector, T...).
    + Add RandomStringUtils.secure().
    + Add RandomStringUtils.insecure().
  * Fixed bugs:
    + Reimplement StopWatch internals to use java.time.
    + RandomStringUtils.random() with a negative character index
    should throw IllegalArgumentException. Fixes LANG-1745.
    + LocaleUtils.toLocale(String) cannot parse four segments.
    Fixes LANG-1741.
    + Use fewer intermediary strings in
    DefaultExceptionContext.getFormattedExceptionMessage(String).
    + Fix Javadoc in StringUtils.splitPreserveAllTokens() #1251.
    + Deprecate ArraySort constructor for removal.
    + Deprecate CharEncoding constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate EntityArrays constructor for removal.
    + Deprecate ObjectToStringComparator constructor for removal.
    + Deprecate RuntimeEnvironment constructor for removal.
- Includes changes from 3.15.0:
  * New features:
    + Customize text pattern in DiffResult#toString(). Fixes
    LANG-1724.
    + Add DiffBuilder.Builder.
    + Add DiffBuilder.builder().
    + Add ReflectionDiffBuilder.Builder.
    + Add ReflectionDiffBuilder.builder().
    + Add test in TypeUtilsTest #1151.
    + Add Streams.failableStream(T), non-varargs variant.
    + Add Streams.nonNull(T), non-varargs variant.
    + Add ArrayUtils.nullTo(T[], T[]).
    + Add T ArrayUtils.arraycopy(T, int, T, int, int) fluent style.
    + Add T ArrayUtils.arraycopy(T, int, int, int, Function) fluent
    style.
    + Add SystemUtils.IS_JAVA_22.
    + Add JavaVersion.JAVA_22.
    + Add SystemProperties.getUserName(Supplier&lt;String&gt;).
    + Add SystemProperties.getLineSeparator(Supplier&lt;String&gt;).
    + Add
    + SystemProperties.getJavaSpecificationVersion(Supplier&lt;String&gt;).
    + Add SystemProperties constants and methods for system
    properties as of Java 22.
    + Add MethodUtils.getMethodObject(Class, String, Class...).
    + Add null-safe Consumers.accept() and Functions.apply() #1215.
    Fixes LANG-1733.
    + Add SystemUtils.IS_OS_ANDROID.
    + Add SystemUtils.IS_OS_MAC_OSX_SONOMA.
    + Add RuntimeEnvironment.inContainer() #1241.
    + Add AppendableJoiner and refactor string joining #1244.
  * Fixed bugs:
    + Improve Javadoc in ExceptionUtils #1136.
    + Fixed two non-deterministic tests in EnumUtilsTest.java
    [#1131].
    + Fix wrong number check that cause
    StringIndexOutOfBoundsException #1140. Fixes LANG-1721.
    + Rethrow NegativeArraySizeException as SerializationException
    in SerializationUtils.deserialize(InputStream) #1141. Fixes
    LANG-1722.
    + Throw NumberFormatException instead of
    IndexOutOfBoundsException in NumberUtils.getMantissa(String,
    int) #1145. Fixes LANG-1723.
    + Minor grammar fixes #1143.
    + ArrayUtils will return null when adding two null arrays, but
    undocumented. Fixes LANG-1713.
    + Let parent POM figure out commons.spdx.version.
    + Undeprecate ExceptionUtils.rethrow(Throwable). Fixes
    LANG-1726.
    + Test the Conversion class #1155. Fixes LANG-1702.
    + Address minor redundancies after code inspection #1148.
    + Allow EventListenerSupport to handle (and ignore) exception
    from listeners allowing invocation of all listeners #1167.
    + Deprecate AnnotationUtils 0-argument constructor.
    + Deprecate ArchUtils 0-argument constructor.
    + Deprecate ArrayUtils 0-argument constructor.
    + Deprecate BooleanUtils 0-argument constructor.
    + Deprecate CharSequenceUtils 0-argument constructor.
    + Deprecate CharSetUtils 0-argument constructor.
    + Deprecate CharUtils 0-argument constructor.
    + Deprecate ClassLoaderUtils 0-argument constructor.
    + Deprecate ClassPathUtils 0-argument constructor.
    + Deprecate ClassUtils 0-argument constructor.
    + Deprecate ConstructorUtils 0-argument constructor.
    + Deprecate DateFormatUtils 0-argument constructor.
    + Deprecate DateUtils 0-argument constructor.
    + Deprecate Diff.getType().
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle).
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle,
    boolean).
    + Deprecate DurationFormatUtils 0-argument constructor.
    + Deprecate DurationUtils 0-argument constructor.
    + Deprecate EnumUtils 0-argument constructor.
    + Deprecate EventUtils 0-argument constructor.
    + Deprecate FieldUtils 0-argument constructor.
    + Deprecate IEEE754rUtils 0-argument constructor.
    + Deprecate InheritanceUtils 0-argument constructor.
    + Deprecate IntStreams 0-argument constructor.
    + Deprecate LocaleUtils 0-argument constructor.
    + Deprecate LockingVisitors 0-argument constructor.
    + Deprecate MemberUtils 0-argument constructor.
    + Deprecate MethodUtils 0-argument constructor.
    + Deprecate NumberUtils 0-argument constructor.
    + Deprecate ObjectUtils 0-argument constructor.
    + Deprecate RandomStringUtils 0-argument constructor.
    + Deprecate RandomUtils 0-argument constructor.
    + Deprecate ReflectionDiffBuilder.ReflectionDiffBuilder(T, T,
    ToStringStyle).
    + Deprecate RegExUtils 0-argument constructor.
    + Deprecate SerializationUtils 0-argument constructor.
    + Deprecate Streams 0-argument constructor.
    + Deprecate StringEscapeUtils 0-argument constructor.
    + Deprecate StringUtils 0-argument constructor.
    + Deprecate Suppliers 0-argument constructor.
    + Deprecate SystemProperties 0-argument constructor.
    + Deprecate ThreadUtils 0-argument constructor.
    + Deprecate TypeUtils 0-argument constructor.
    + Make ArrayFill null-safe.
    + Make ArraySorter null-safe.
    + Make ArrayUtils.removeAll() null-safe.
    + Fix Java version in README.md #1170.
    + StringUtils.stripAccents() should handle ligatures, UTF32
    math blocks, etc. #1201.
    + TypeUtils.toString(Type) StackOverflowError for an inner
    class in the inner class parameterized enclosing class #657.
    Fixes LANG-1524.
    + Deprecate SystemUtils.getUserName(String) in favor of
    SystemProperties.getUserName(Supplier).
    + Make LockVisitor.acceptReadLocked(FailableConsumer)
    null-safe.
    + Make LockVisitor.applyWriteLocked(FailableConsumer)
    null-safe.
    + Make ObjectUtils.getFirstNonNull(Supplier...) null-safe.
    + Make SystemProperties.getLineSeparator(Supplier).
    + StringUtils.stripAccents(String) doesn't handle "\u0111" and
    "\u0110" (Vietnamese) #1216.
    + StringUtils.stripAccents(String) doesn't handle I with bar.
    + StringUtils.stripAccents(String) doesn't handle U with bar.
    + StringUtils.stripAccents(String) doesn't handle T with
    stroke.
    + Fix Javadoc for FluentBitSet.setInclusive(int, int) #1222.
    Fixes LANG-1735.
    + Same Javadoc changes as [TEXT-234] #1223.
    + Remove duplicate static data in
    SerializationUtils.ClassLoaderAwareObjectInputStream.
    + Reimplement RandomUtils and RandomStringUtils on top of
    SecureRandom#getInstanceStrong() #1235.
    + DiffBuilder: Type constraint for method append(...,
    DiffResult) too strict #786. Fixes LANG-1657.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Update to 3.17.0
  * New features:
  * RandomUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * RandomStringUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * Remove unused exception from deprecated
    StringUtils.toString(byte[], String).
  * Make RandomUtils.insecure() public.
  * Add RandomUtils.secureStrong().
  * Add RandomStringUtils.secureStrong().
  * Add CalendarUtils.toLocalDateTime(Calendar).
  * Add CalendarUtils.toLocalDateTime().
  * Add CalendarUtils.toZonedDateTime(Calendar).
  * Add CalendarUtils.toZonedDateTime().
  * Add CalendarUtils.toOffsetDateTime(Calendar).
  * Add CalendarUtils.toOffsetDateTime().
  * Fixed Bugs:
  * LANG-1760: Using RandomStringUtils.insecure() still leads to
    using the secure() random.
  * Deprecate static RandomUtils.next*() methods in favor or
    .secure() and .insecure() versions.
  * Deprecate static RandomStringUtils.random*() methods in favor
    or .secure() and .insecure() versions.
  * Changes:
  * Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1255.
  * Bump org.easymock:easymock from 5.3.0 to 5.4.0 #1256.
  * Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
    [#1262], #1264.
  * Bump org.apache.commons:commons-parent from 72 to 73 #1265.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Update to 3.18.0
  * New features:
    + Add Strings and refactor StringUtils
    + LANG-1747: Add StopWatch.run([Failable]Runnable) and
    get([Failable]Supplier)
    + Add JavaVersion.JAVA_23
    + Add JavaVersion.JAVA_24
    + Add SystemUtils.IS_JAVA_23
    + Add SystemUtils.IS_JAVA_24
    + Add IntegerRange.toIntStream()
    + Add LongRange.toLongStream()
    + Add IntStrams.of(int...)
    + Add ArrayUtils.containsAny(int[], int...)
    + Add CalendarUtils.toLocalDate() #725
    + Add SystemUtils.IS_OS_MAC_OSX_SEQUOIA
    + Add BasicThreadFactory.builder() and deprecate
    BasicThreadFactory.Builder()
    + Add BasicThreadFactory.daemon()
    + Add ArrayUtils.startsWith
    + Add Predicates
    + Add RegExUtils methods typed to CharSequence input and
    deprecate old versions typed to String
    + Add IterableStringTokenizer
    + Add FailableIntToFloatFunction
    + Add Validate.isTrue(boolean, Supplier&lt;String&gt;)
    + Add EnumUtils.getFirstEnum(Class&lt;E&gt;, int, ToIntFunction&lt;E&gt;, E)
    + Add FailableToBooleanFunction
    + Add the @FunctionalInterface annotation to
    org.apache.commons.lang3.concurrent.Computable
    + Add SystemUtils.getJavaIoTmpDirPath()
    + Add SystemUtils.getJavaHomePath()
    + Add SystemUtils.getUserDirPath()
    + Add SystemUtils.getUserHomePath()
    + Add ArrayFill.fill(T[], FailableIntFunction))
    + Add SystemProperties.JAVA_SECURITY_DEBUG
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_CONF
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_KDC
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_REAL
    + Add ArrayFill.fill(boolean[], boolean) #1386
    + Add ObjectUtils.getIfNull(Object, Object) and deprecate
    defaultIfNull(Object, Object)
    + org.apache.commons.lang3.mutable.Mutable now extends Supplier
    + Add org.apache.commons.lang3.CharUtils.isHex(char)
    + Add org.apache.commons.lang3.CharUtils.isOctal(char)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .reentrantLockVisitor(Object)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .create(Object, ReentrantLock)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .ReentrantLockVisitor
    + Add builders for LockingVisitors implementations
    + Add EnumSet.stream(Class)
    + Add org.apache.commons.lang3.SystemProperties.isPropertySet(String)
  * Fixed Bugs:
    + Fix flaky FileUtilsWaitForTest.testWaitForNegativeDuration()
    + Pick up exec-maven-plugin version from parent POM
    + Speed up and sanitize StopWatchTest
    + Fix handling of non-ASCII letters and numbers in
    RandomStringUtils #1273
    + Rewrite ClassUtils.getClass(...) without recursion to avoid
    StackOverflowError on very long inputs (bsc#1246397,
    CVE-2025-48924)
    + OSS-Fuzz Issue 42522972: apache-commons-text:
    StringSubstitutorInterpolatorFuzzer: Security exception in
    org.apache.commons.lang3.ClassUtils.getClass
    + Remove trailing whitespace in StopWatch exception messages
    + LANG-1754: Use getAllSuperclassesAndInterfaces() in
    getMatchingMethod() #1289
    + Add details to the ArrayFill Javadoc
    + Add details to the ArraySorter Javadoc
    + Fix broken URL to project location in Maven Central #1296
    + LANG-1753: StringUtils.replaceEachRepeatedly regression in
    3.11+ #1297
    + Use simplified JUnit assertion methods #1298
    + LANG-1682: Javadoc and test: Use Strings.CI.startsWithAny
    method instead #1299
    + Fix NullPointerException in FastDateParser.TimeZoneStrategy
    .setCalendar(FastDateParser, Calendar, String) on Java 23
    + LANG-1757: Fix NullPointerException in MethodUtils
    .getMatchingAccessibleMethod((Class, String, Class...))
    + LANG-1698: Fix StackOverflowError in TypeUtils
    .typeVariableToString(TypeVariable), TypeUtils.toString(Type)
    on Java 17 and up
    + LANG-1511: SystemUtils is missing important documentation
    + Make Failable.run(FailableRunnable) null-safe
    + Make Failable.accept(*) null-safe
    + Improve container detection by mimicking systemd #1323
    + Make LangCollectors.collect(...) null-safe
    + Make LangCollectors.collect(...) null-safe
    + Fix names of UTF-16 surrogate character test fixture
    constants, see also #1326
    + Moditect plugin generates split package warnings
    + LocaleUtils.availableLocaleSet() uses predictable iteration
    order
    + LANG-1759: SerializationUtils.clone(Object) throws
    ClassCastException when called with a Serializable lambda
    + LANG-1759: [StringUtils::indexOfAnyBut] redesign due to
    inconsistent/faulty behavior regarding UTF-16 surrogates #1327
    + Undeprecate ObjectUtils.toString(Object)
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.leftSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.rightSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + LANG-1762: StopWatch methods should not delegate to deprecated
    methods
    + Don't call TypeUtils.toString(Type) on every array item in
    TypeUtils.parameterize[WithOwner](Type, Class, Map, Type&gt;)
    unless required
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Instead of throwing a NullPointerException,
    ArrayUtils.toStringArray(Object[]) should return "null" for
    null elements like ArrayUtils.toStringArray(Object[], String)
    returns its valueForNullElements
    + LANG-1764: Deprecate NumericEntityUnescaper.OPTION in favor of
    Apache Commons Text
    + Several hash collisions in Fraction class
    + LANG-1768: MutableLong and friends should provide better
    parsing exceptions Javadocs
    + Reimplement StringUtils.toCodePoints(CharSequence) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.capitalize(String) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.uncapitalize(String) to use
    java.lang.CharSequence.codePoints()
    + org.apache.commons.lang3.ClassUtils.getCanonicalName(String)
    now throws an IllegalArgumentException for array dimensions
    greater than 255
    + Fix Javadoc typo and improve clarity in defaultIfBlank method
    [#1376]
    + LANG-1773: Apache Commons Lang no longer builds on Android
    [#1381]
    + LANG-1772: Restrict size of cache to prevent overflow errors
    [#1379]
    + LANG-1772: Reimplement
    org.apache.commons.lang3.ClassUtils.hierarchy(Class,
    Interfaces) using an AtomicReference
    + Fix Javadoc code examples in DiffBuilder and
    ReflectionDiffBuilder #1400
    + Fix generics in org.apache.commons.lang3.stream.Streams
    .toArray(Class) signature
    + LANG-1727: EventListenerSupport doesn't document ordering of
    events
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.IS_OS_ANDROID
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtLeast(JavaVersion)
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtMost(JavaVersion)
    + Return the default enum if a SecurityException is caught in
    getEnumSystemProperty()
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .EnumUtils.getEnum(Class, String, E)
    + org.apache.commons.lang3.EnumUtils
    .getFirstEnumIgnoreCase(Class, String, Function, E) now
    returns the given default enum on null enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String, E) now returns the given default enum on null
    enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String) now returns the given default enum on null enumClass
    input
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.equalTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThanOrEqualTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThanOrEqualTo(A)
    + LANG-1776: Use GitHub URL in POM for improved automation
    support</changelog>
</package>
<package pkgid="618986764c18941aa69116dc228893cae67a9bf3de4a70dd358fac2e7e1f39c351c32b54ba0abac3c0813023d429e494c1b8e12ee6eac372e05b70faf90fa347" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.20.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1640347200">- Updated download URL.
- Update to 3.12.0:
  - New features:
  * Add BooleanUtils.booleanValues().
  * Add BooleanUtils.primitiveValues().
  * Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
  * Add StopWatch.getStopTime().
  * More test coverage for CharSequenceUtils.
  * Add fluent-style ArraySorter.
  * Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
  * Add FailableShortSupplier, handy for JDBC APIs.
  * Add JavaVersion.JAVA_17.
  * Add missing boolean[] join method.
  * Add StringUtils.substringBefore(String, int).
  * Add Range.INTEGER.
  * Add DurationUtils.
  * Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
  * Add and use true and false String constants.
  * Add and use ObjectUtils.requireNonEmpty().
  - Fixed Bugs:
  * Correct implementation of RandomUtils.nextLong(long, long).
  * Restore handling of collections for non-JSON ToStringStyle.
  * ContextedException Javadoc add missing semicolon.
  * Resolve JUnit pioneer transitive dependencies using JUnit BOM.
  * NumberUtilsTest - incorrect types in min/max tests.
  * Improve StringUtils.stripAccents conversion of remaining accents.
  * StringUtils.countMatches - clarify Javadoc.
  * Remove redundant argument from substring call.
  * BigDecimal is created when you pass it the min and max values.
  * ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
  * ArrayUtils contains() and indexOf() fail to handle Float.NaN.
  * Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type&gt;).
  * TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
  * testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
  * Fix Javadoc for SystemUtils.isJavaVersionAtMost().
  * Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
  * Fix formatting of isAnyBlank() and isAnyEmpty().
  * TypeUtils. containsTypeVariables does not support GenericArrayType.
  * Javadoc of some methods incorrectly refers to another method.
  * Refine StringUtils.lastIndexOfIgnoreCase.
  * Refine StringUtils.abbreviate.
  * Refine StringUtils.isNumericSpace.
  * Refine StringUtils.deleteWhitespace.
  * Correction in Javadoc of some methods.
  * Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
  * Correct markup in Javadoc for unbalanced braces.
  * MethodUtils.invokeMethod NullPointerException in case of null in args list.
  * Fix 2 digit week year formatting.
  * Fix broken Javadoc links to commons-text.
  * Add and use ThreadUtils.sleep(Duration).
  * Add and use ThreadUtils.join(Thread, Duration).
  * Add ObjectUtils.wait(Duration).
  - Changes:
  * ArrayUtils.toPrimitive(Object) does not support boolean and other types.
  * Enable Dependabot.
  * Bump junit-jupiter from 5.6.2 to 5.7.0.
  * Bump spotbugs from 4.1.2 to 4.2.1.
  * Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
  * Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
  * Bump junit-pioneer from 0.6.0 to 1.1.0.
  * Bump checkstyle from 8.34 to 8.40.
  * Bump actions/checkout from v2.3.1 to v2.3.4.
  * Bump actions/setup-java from v1.4.0 to v1.4.2.
  * Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
  * Update maven-surefire-plugin 2.22.2 -&gt; 3.0.0-M5.
  * Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
  * Bump jmh.version from 1.21 to 1.27.
  * Update commons.japicmp.version 0.14.3 -&gt; 0.15.2.
  * Processor.java: check enum equality with == instead of .equals() method.
  * Bump junit-pioneer from 1.1.0 to 1.3.0.
  * Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
  * Bump actions/cache from v2 to v2.1.4.
  * Bump junit-bom from 5.7.0 to 5.7.1.
  * Minor Improvements.
  * Minor Improvement: Add final variable.try to make the code read-only.
  * Minor Improvement: Remove redundant initializer.
  * Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
  - New features:
  * Add ArrayUtils.isSameLength() to compare more array types.
  * Added the Locks class as a convenient possibility to deal with locked objects.
  * Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
  * Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
  * Add JavaVersion enum constants for Java 14 and 15.
  * Add JavaVersion enum constants for Java 16.
  * Use Java 8 lambdas and Map operations.
  * Change removeLastFieldSeparator to use endsWith.
  * Change a Pattern to a static final field, for not letting it compile each time the function invoked.
  * Add ImmutablePair factory methods left() and right().
  * Add ObjectUtils.toString(Object, Supplier&lt;String&gt;).
  * Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
  * Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
  - Fixed Bugs:
  * Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
  * Refine Javadoc.
  * Fix typos
  * Ignored exception 'ignored', should not be called so.
  * StringUtils.replaceEachRepeatedly gives IllegalStateException.
  * [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
  * Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
  * Add allNull() and anyNull() methods to ObjectUtils.
  - Changes:
  * Refine test output for FastDateParserTest
  * CharSequenceUtils.lastIndexOf : remake it
  * remove encoding and docEncoding and use inherited values from commons-parent
  * Simplify null checks in Pair.hashCode() using Objects.hashCode().
  * Simplify null checks in Triple.hashCode() using Objects.hashCode().
  * Simplify some if statements in StringUtils.
  * Simplify a null check in the private replaceEach() method of StringUtils.
  * Replace some usages of the ternary operator with calls to Math.max() and Math.min().
  * (Javadoc) Fix return tag for throwableOf*() methods.
  * CharSequenceUtils.regionMatches is wrong dealing with Georgian.
  * Optimize ArrayUtils::isArrayIndexValid method.
  * Use List.sort instead of Collection.sort.
  * Use StandardCharsets.UTF_8.
  * Use Collections.singletonList insteadof Arrays.asList when there be only one element.
  * Change array style from 'int a[]' to 'int[] a'.
  * Change from addAll to constructors for some List.
  * Simplify if as some conditions are covered by others.
  * Fixed Javadocs for setTestRecursive().
  * ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
  * Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
  * org.apache.commons:commons-parent 50 -&gt; 51.
  * org.junit-pioneer:junit-pioneer 0.5.4 -&gt; 0.6.0.
  * org.junit.jupiter:junit-jupiter 5.6.0 -&gt; 5.6.2.
  * com.github.spotbugs:spotbugs 4.0.0 -&gt; 4.0.6.
  * com.puppycrawl.tools:checkstyle 8.29 -&gt; 8.34.
  * commons.surefire.version 3.0.0-M4 -&gt; 3.0.0-M5..
- From 3.10 Update:
  - New features:
  * Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
  * Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
  * Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
  * Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
  * Add ArrayUtils.addFirst() methods.
  * Add Range.fit(T) to fit a value into a range.
  * Added Functions.as*, and tests thereof, as suggested by Peter Verhas
  * Add getters for lhs and rhs objects in DiffResult.
  * Generify builder classes Diffable, DiffBuilder, and DiffResult.
  * Add ClassLoaderUtils with toString() implementations.
  * Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
  * Add org.apache.commons.lang3.time.Calendars.
  * Add EnumUtils getEnum() methods with default values.
  * Added indexesOf methods and simplified removeAllOccurences.
  * Add support of lambda value evaluation for defaulting methods.
  * Add factory methods to Pair classes with Map.Entry input.
  * Add StopWatch convenience APIs to format times and create a simple instance.
  * Allow a StopWatch to carry an optional message.
  * Add ComparableUtils.
  * Add org.apache.commons.lang3.SystemUtils.getUserName().
  * Add ObjectToStringComparator.
  * Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
  * Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
  * ObjectUtils: Get first non-null supplier value.
  * Added the Streams class, and Functions.stream() as an accessor thereof.
  - Fixed Bugs:
  * Make test more stable by wrapping assertions in hashset.
  * Generate Javadoc jar on build.
  * Trivial: year of release for 3.9 says 2018, should be 2019.
  * Use synchronize on a set created with Collections.synchronizedSet before iterating.
  * StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
  * StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
  * StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
  * Corrected usage examples in Javadocs.
  * StringUtils abbreviate returns String of length greater than maxWidth.
  * Test may fail due to a different order of fields returned by reflection api.
  * Sort fields in ReflectionToStringBuilder for deterministic order.
  * MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
  * MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
  - Changes:
  * Remove redundant if statements in join methods.
  * commons.japicmp.version 0.13.1 -&gt; 0.14.1.
  * junit-jupiter 5.5.0 -&gt; 5.5.1.
  * junit-jupiter 5.5.1 -&gt; 5.5.2.
  * Improve Javadoc based on the discussion of the GitHub PR.
  * maven-checkstyle-plugin 3.0.0 -&gt; 3.1.0.
  * Update documentation related to the issue LANG-696.
  * AnnotationUtils little cleanup.
  * Update test dependency: org.easymock:easymock 4.0.2 -&gt; 4.1.
  * Update test dependency: org.hamcrest:hamcrest 2.1 -&gt; 2.2.
  * Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -&gt; 0.4.2.
  * Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -&gt; 8.27.
  * Update POM parent: org.apache.commons:commons-parent 48 -&gt; 50.
  * BooleanUtils Javadoc.
  * Functions Javadoc.
  * org.easymock:easymock 4.1 -&gt; 4.2.
  * org.junit-pioneer:junit-pioneer 0.4.2 -&gt; 0.5.4.
  * org.junit.jupiter:junit-jupiter 5.5.2 -&gt; 5.6.0.
  * Use Javadoc {@code} instead of pre tags.
  * ExceptionUtilsTest to 100%.
  * Reuse own code in Functions.java.
  * Avoid unnecessary allocation in StringUtils.wrapIfMissing.
  * Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
  * Add 1 and 0 in toBooleanObject(final String str).
  * Remove an redundant argument check in NumberUtils.
  * Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Fix component version in default.properties to 3.12</changelog>
  <changelog author="pmonreal@suse.com" date="1640779201">- Remove the junit bom dependency for now as it breaks the build of
  other packages like log4j.
  * Add apache-commons-lang3-junit-bom.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693396800">- Break cycle with the new bcel
- Removed patch:
  * apache-commons-lang3-junit-bom.patch
    + not needed since we install the pom file using the new
    %%mvn_install_pom macro which sanitizes the pom file to the
    bare runtime dependencies.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Update to 3.14.0:
  * New features:
    + Add Functions#function(Function).
    + Add FailableFunction#function(FailableFunction).
    + Add CalendarUtils.getInstance().
    + Add syntax for optional tokens to DurationFormatUtils.
    + Add ArrayFill.
    + Add FastDateParser.TimeZoneStrategy.TzInfo.toString().
    + Add LocaleUtils.isLanguageUndetermined(Locale).
    + Add ObjectUtils.toString(Supplier&lt;Object&gt;, Supplier&lt;String&gt;).
    + Add LazyInitializer.isInitialized().
    + Add ConcurrentInitializer#isInitialized() #1120.
    + Add Streams.failableStream(T...).
    + Add FailableSupplier.nul().
    + Add Suppliers.nul().
    + Add ExceptionUtils.throwUnchecked(T) where T extends
    Throwable, and deprecate Object version.
    + Add ExceptionUtils.rethrowRuntimeException(T), and deprecate
    rethrow(T).
    + ConcurrentInitializer implementations can now be instantiated
    and configured with allocation and release lambdas.
    Fixes LANG-1716.
    + Add support for RISC-V in ArchUtils #1128. Fixes LANG-1717.
  * Fixed bugs:
    + Rename variable names from 'clss' to 'clazz'.
    + [Javadoc] ComparableUtils'c1' to 'comparable1', 'c2' to
    'comparable2'
    + [Javadoc] Remove 2.1 specific comment #1091.
    + [Javadoc] Fix Incorrect Description in Processor isAarch64()
    [#1093]. Fixes LANG-1704.
    + [Javadoc] Point to right getShortClassName flavor in Javadoc
    for relevant notes #1097.
    + Improve performance of StringUtils.isMixedCase().
    + ThreadUtils find methods should not return null items. Fixes
    LANG-1706.
    + ReflectionToStringBuilder changes in version 3.13.0 has broken
    the logic for overriding classes. Fixes LANG-1710.
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(ClassLoader).
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(URLClassLoader).
    + Return ToStringStyle.nullText instead of NPE for
    ReflectionToStringBuilder.toString().
    + Fix ThresholdCircuitBreaker#checkState().
    + Use ConcurrentInitializer implementations without subclassing.
    + Update critical value for chi-square test.
    + Fix Javadoc syntax errors #1129.
- From 3.13.0 update
  * New features:
    + Add GitHub coverage.yml.
    + Add EnumUtils.getEnumSystemProperty(...).
    + Add TriConsumer.
    + Add and use EnumUtils.getFirstEnumIgnoreCase(Class, String,
    Function, E).
    + Add and use Suppliers.
    + Add and use ArrayUtils.getComponentType(T[]).
    + Add and use ClassUtils.getComponentType(Class&gt;T[]&gt;).
    + Add and use ObjectUtils.getClass(T).
    + Add and use ArrayUtils.newInstance(Class&gt;T&gt;, int).
    + Add and use null-safe Streams.of(T...).
    + Add ClassUtils.comparator().
    + Add and use ThreadUtils.sleepQuietly(Duration).
    + Add and use ArrayUtils.setAll(T[], IntFunction).
    + Add and use ArrayUtils.setAll(T[], Supplier).
    + Add BooleanConsumer.
    + Add IntToCharFunction.
    + Add IntStreams.
    + Add UncheckedFuture.
    + Add UncheckedException.
    + Add UncheckedExecutionException.
    + Add UncheckedTimeoutException.
    + Add UncheckedInterruptedException.
    + Add TimeZones.GMT.
    + Add ObjectUtils.identityHashCodeHex(Object).
    + Add ObjectUtils.hashCodeHex(Object).
    + Add StringUtils.removeStart(String, char).
    + Add null-safe ObjectUtils.isArray(). Fixes LANG-1659.
    + Add ComparableUtils.max(A, A) and ComparableUtils.min(A, A).
    + Add UncheckedReflectiveOperationException.
    + Add and use ClassUtils.isPublic(Class).
    + Add UncheckedIllegalAccessException.
    + Add MethodInvokers.
    + Add Streams.nullSafeStream(Collection).
    + Add Streams.toStream(Collection).
    + Add Streams.failableStream(Collection) and deprecate misnamed
    stream(Collection).
    + Add Streams.failableStream(Stream) and deprecate misnamed
    stream(Stream).
    + Add EnumUtils.getEnumMap(Class, Function).
    + Add FluentBitSet.
    + Add Streams.instancesOf(Class, Collection).
    + Add ImmutablePair.ofNonNull(L, R).
    + Add ImmutableTriple.ofNonNull(L, M, R).
    + Add MutablePair.ofNonNull(L, R).
    + Add MutableTriple.ofNonNull(L, M, R).
    + Add Pair.ofNonNull(L, R).
    + Add Triple.ofNonNull(L, M, R).
    + Add ArrayUtils.containsAny(Object[], Object...).
    + Add Processor.Type.AARCH_64.
    + Add Processor.isAarch64().
    + Update ArchUtils.getProcessor(String) for "aarch64".
    + Add JavaVersion.JAVA_18.
    + Add JavaVersion.JAVA_19.
    + Add JavaVersion.JAVA_20.
    + Add JavaVersion.JAVA_21.
    + Add TimeZones.toTimeZone(TimeZone).
    + Add FutureTasks.
    + Add Memoizer(Function) and Memoizer(Function, boolean).
    + Add Consumers.
    + Add github/codeql-action.
    + Add coverage.yml.
    + Add DurationUtils.since(Temporal).
    + Add DurationUtils.of(FailableConsumer|FailableRunnbale).
    + Add ExceptionUtils.forEach(Throwable, Consumer&lt;Throwable&gt;).
    + Add ExceptionUtils.stream(Throwable).
    + Add ExceptionUtils.getRootCauseStackTraceList(Throwable).
    + Add SystemUtils.IS_OS_WINDOWS_11.
    + Add SystemUtils.IS_JAVA_16.
    + Add SystemUtils.IS_JAVA_17.
    + Add SystemUtils.IS_JAVA_18.
    + Add SystemUtils.IS_JAVA_19.
    + Add SystemUtils.IS_JAVA_20.
    + Add SystemUtils.IS_JAVA_21.
    + Add ArrayUtils.oneHot(). Fixes LANG-1627.
    + Let ReflectionToStringBuilder only reflect given field names.
    Fixes LANG-1662.
    + Add Streams.of(Enumeration&lt;E&gt;).
    + Add Streams.of(Iterable&lt;E&gt;).
    + Add Streams.of(Iterator&lt;E&gt;).
    + Simple support for Optional in ObjectUtils#isEmpty(). Fixes
    LANG-1689.
    + Add Processor.Type.getLabel().
    + Add Processor.toString().
    + Add HashCodeBuilder.equals(Object).
    + Add BooleanUtils.values() and forEach().
    + Add ClassPathUtils.packageToPath(String) and pathToPackage(String)
    + Add CalendarUtils#getDayOfYear()
    + Add NumberRange, DoubleRange, IntegerRange, LongRange.
    + Add missing exception javadoc/tests for some null arguments.
    + Add ClassLoaderUtils.getSystemURLs() and getThreadURLs().
    + Add RegExUtils.dotAll() and dotAllMatcher().
    + Add Pair.accept(FailableBiConsumer).
    + Add Pair.apply(FailableBiFunction).
    + Add ReflectionDiffBuilder.setExcludeFieldNames(...) and
    DiffExclude a... Fixes LANG-1677.
    + Add and ExceptionUtils.isChecked() and isUnchecked(). Fixes
    LANG-1647.
    + Add and use ExceptionUtils.throwUnchecked(throwable).
    + Add LockingVisitors.create(O, ReadWriteLock).
  * Fixed bugs:
    + NumberUtils.createNumber() to recognize hex integers prefixed
    with +. Fixes LANG-1645.
    + NumberUtils.createNumber() to return requested floating point
    type for zero. Fixes LANG-1646.
    + DMI: Random object created and used only once
    (DMI_RANDOM_USED_ONLY_ONCE); Better multi-threaded behavior.
    + Redundant Collection operation. Use
    Collections.emptyIterator(). Fixes LANG-1646.
    + Make Streams.stream(Collection) null-safe.
    + Allow tests to access java.util classes such as ArrayList in
    Java 16. Fixes LANG-1667.
    + OpenJDK 16 Day Period Parsing. Fixes LANG-1669.
    + Update documentation to list correct exception for null array
    parameters. Fixes LANG-1663.
    + Fixing reversed Javadoc descriptions in StopWatch.
    + Fix typos in JavaDoc. Fixes LANG-1670.
    + Simplify assertions with equivalent but more simple..
    + Avoid multiple equivalent occurrences of the same expression.
    + Remove redundant initializers.
    + Fix ObjectUtils Javadocs.
    + Make Range constructors more generic. Fixes LANG-1674.
    + Use final and Remove redundant String.
    + Use Set instead of List for checking the contains() method.
    + Javadoc for StringUtils.substringBefore(String str,
    int separator) doesn't mention that the separator is an int.
    + Fix NullPointerException in ThreadUtils.getSystemThreadGroup()
    when the current thread is stopped.
    + ArrayUtils.toPrimitive(Boolean...) null array elements map to
    false, like Boolean.parseBoolean(null) and its callers return
    false.
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows.
    + Deprecate Validate#notNull(Object) in favor of using
    Objects#requireNonNull(Object, String).
    + Use TimeZone from calendar in DateFormatUtils. Fixes
    LANG-1462.
    + Updating javadoc for NullPointerException when
    Validate.notNull() is called.
    + Fixing and adding DateUtils exception Javadocs.
    + Improve performance of StringUtils.unwrap(String, String).
    Fixes LANG-1679.
    + Improve performance of StringUtils.join for primitives. Fixes
    LANG-1675.
    + Fixed NPE getting Stack Trace if Throwable is null. Fixes
    LANG-1675.
    + Make Validate.isAssignableFrom() check null inputs.
    + Fix Javadoc for Validate.isAssignableFrom().
    + Make final mappingFunction variable.
    + Remove unnecessary variable creations.
    + Minor changes.
    + FastDateFormat does not support the 'L'-Pattern from
    SimpleDateFormat. Fixes LANG-1680.
    + Increase test coverage of ComparableUtils from 71% to 100%.
    + Increase method test coverage of
    MultilineRecursiveToStringStyle.
    + Fix unstable coverage of CharSequenceUtils tests noticed
    during merge of PRs 898 and 899.
    + Rewrite Conversion.binaryBeMsb0ToHexDigit to invert logic of
    binaryToHexDigit.
    + Allow extension of previously final classes ImmutablePair and
    ImmutableTriple.
    + Update ClassUtils Javadoc with some missing throws NPE.
    + Javadoc: StringUtils.repeat("", "x", 3) = "xx";.
    + StringUtils.join(Iterable, String) should only return null
    when the Iterable is null.
    + Add tests to increase coverage.
    + Extends Object clauses are redundant.
    + Simplify conditional expression..
    + Fix some Javadoc comments.
    + Deprecate getNanosOfMiili() method with typo and create proper
    getNanosOfMilli().
    + Deprecate ThreadUtils code that defines custom function
    interfaces in favor of stock java.util.function.Predicate
    usage.
    + Fix links in Javadoc and documentation.
    + Deprecate RandomUtils in favor of Apache Commons RNG
    UniformRandomProvider. Fixes LANG-1604.
    + Added docs regarding week year support. Fixes LANG-1638.
    + ClassUtils.getShortCanonicalName doesn't use the
    canonicalName. Fixes LANG-1691.
    + Validate: Get error messages without using String.format when
    varargs is empty.
    + Simplify expression (length is never &lt; 0).
    + Fix simple broken javadoc..
    + Fix typo.
    + Use Objects.requireNonNull() directly.
    + MethodUtils.getMatchingMethod() fails with "Found multiple
    candidates". Fixes LANG-1694.
    + Construct ArrayList with better default size. Fixes LANG-1643.
    + ThreadUtilsTest#testThreadGroups will test failed when using
    Junit5 parallel test.
    + Swap the order of assertion args (first excepted then actual).
    + Fix the comment of Failable, redundant "-".
    + Fix the comment of ComparableUtils, using "smallest", not
    "largest".
    + AnnotationUtilsTest and FormattableUtilsTest Only use static
    imports to import assert methods in tests.
    + [LANG-1681] Fix some FieldUtils Javadocs.
    + Remove unnecessary statement in DurationFormatUtils.
    + Corrected value of SystemUtils.JAVA_VENDOR. Fixes LANG-1699.
    + [StepSecurity] ci: Harden GitHub Actions.
    + Update Javadoc for the insert methods in ArrayUtils.
    + Deprecate ExceptionUtils.ExceptionUtils().
    + TypeUtils.getRawType() throws a NullPointerException on
    Wildcard GenericArrayType. Fixes LANG-1697.
    + Throw IllegalArgumentException instead of InternalError in the
    builder package.
    + Avoid NPE in MutableObject#equals() for null content.
    + SystemUtils fix and updates related to macOS.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Update to 3.16.0:
  * New features:
    + Add StopWatch.getSplitDuration() and deprecate
    getSplitTime().
    + Add StopWatch.getStartInstant() and deprecate getStartTime().
    + Add StopWatch.getStopInstant() and deprecate getStopTime().
    + Add StopWatch.getDuration() and deprecate getTime().
    + Add Javadoc links from StopWatch to DurationUtils #1249.
    + Add LangCollectors.collect(Collector, T...).
    + Add RandomStringUtils.secure().
    + Add RandomStringUtils.insecure().
  * Fixed bugs:
    + Reimplement StopWatch internals to use java.time.
    + RandomStringUtils.random() with a negative character index
    should throw IllegalArgumentException. Fixes LANG-1745.
    + LocaleUtils.toLocale(String) cannot parse four segments.
    Fixes LANG-1741.
    + Use fewer intermediary strings in
    DefaultExceptionContext.getFormattedExceptionMessage(String).
    + Fix Javadoc in StringUtils.splitPreserveAllTokens() #1251.
    + Deprecate ArraySort constructor for removal.
    + Deprecate CharEncoding constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate EntityArrays constructor for removal.
    + Deprecate ObjectToStringComparator constructor for removal.
    + Deprecate RuntimeEnvironment constructor for removal.
- Includes changes from 3.15.0:
  * New features:
    + Customize text pattern in DiffResult#toString(). Fixes
    LANG-1724.
    + Add DiffBuilder.Builder.
    + Add DiffBuilder.builder().
    + Add ReflectionDiffBuilder.Builder.
    + Add ReflectionDiffBuilder.builder().
    + Add test in TypeUtilsTest #1151.
    + Add Streams.failableStream(T), non-varargs variant.
    + Add Streams.nonNull(T), non-varargs variant.
    + Add ArrayUtils.nullTo(T[], T[]).
    + Add T ArrayUtils.arraycopy(T, int, T, int, int) fluent style.
    + Add T ArrayUtils.arraycopy(T, int, int, int, Function) fluent
    style.
    + Add SystemUtils.IS_JAVA_22.
    + Add JavaVersion.JAVA_22.
    + Add SystemProperties.getUserName(Supplier&lt;String&gt;).
    + Add SystemProperties.getLineSeparator(Supplier&lt;String&gt;).
    + Add
    + SystemProperties.getJavaSpecificationVersion(Supplier&lt;String&gt;).
    + Add SystemProperties constants and methods for system
    properties as of Java 22.
    + Add MethodUtils.getMethodObject(Class, String, Class...).
    + Add null-safe Consumers.accept() and Functions.apply() #1215.
    Fixes LANG-1733.
    + Add SystemUtils.IS_OS_ANDROID.
    + Add SystemUtils.IS_OS_MAC_OSX_SONOMA.
    + Add RuntimeEnvironment.inContainer() #1241.
    + Add AppendableJoiner and refactor string joining #1244.
  * Fixed bugs:
    + Improve Javadoc in ExceptionUtils #1136.
    + Fixed two non-deterministic tests in EnumUtilsTest.java
    [#1131].
    + Fix wrong number check that cause
    StringIndexOutOfBoundsException #1140. Fixes LANG-1721.
    + Rethrow NegativeArraySizeException as SerializationException
    in SerializationUtils.deserialize(InputStream) #1141. Fixes
    LANG-1722.
    + Throw NumberFormatException instead of
    IndexOutOfBoundsException in NumberUtils.getMantissa(String,
    int) #1145. Fixes LANG-1723.
    + Minor grammar fixes #1143.
    + ArrayUtils will return null when adding two null arrays, but
    undocumented. Fixes LANG-1713.
    + Let parent POM figure out commons.spdx.version.
    + Undeprecate ExceptionUtils.rethrow(Throwable). Fixes
    LANG-1726.
    + Test the Conversion class #1155. Fixes LANG-1702.
    + Address minor redundancies after code inspection #1148.
    + Allow EventListenerSupport to handle (and ignore) exception
    from listeners allowing invocation of all listeners #1167.
    + Deprecate AnnotationUtils 0-argument constructor.
    + Deprecate ArchUtils 0-argument constructor.
    + Deprecate ArrayUtils 0-argument constructor.
    + Deprecate BooleanUtils 0-argument constructor.
    + Deprecate CharSequenceUtils 0-argument constructor.
    + Deprecate CharSetUtils 0-argument constructor.
    + Deprecate CharUtils 0-argument constructor.
    + Deprecate ClassLoaderUtils 0-argument constructor.
    + Deprecate ClassPathUtils 0-argument constructor.
    + Deprecate ClassUtils 0-argument constructor.
    + Deprecate ConstructorUtils 0-argument constructor.
    + Deprecate DateFormatUtils 0-argument constructor.
    + Deprecate DateUtils 0-argument constructor.
    + Deprecate Diff.getType().
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle).
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle,
    boolean).
    + Deprecate DurationFormatUtils 0-argument constructor.
    + Deprecate DurationUtils 0-argument constructor.
    + Deprecate EnumUtils 0-argument constructor.
    + Deprecate EventUtils 0-argument constructor.
    + Deprecate FieldUtils 0-argument constructor.
    + Deprecate IEEE754rUtils 0-argument constructor.
    + Deprecate InheritanceUtils 0-argument constructor.
    + Deprecate IntStreams 0-argument constructor.
    + Deprecate LocaleUtils 0-argument constructor.
    + Deprecate LockingVisitors 0-argument constructor.
    + Deprecate MemberUtils 0-argument constructor.
    + Deprecate MethodUtils 0-argument constructor.
    + Deprecate NumberUtils 0-argument constructor.
    + Deprecate ObjectUtils 0-argument constructor.
    + Deprecate RandomStringUtils 0-argument constructor.
    + Deprecate RandomUtils 0-argument constructor.
    + Deprecate ReflectionDiffBuilder.ReflectionDiffBuilder(T, T,
    ToStringStyle).
    + Deprecate RegExUtils 0-argument constructor.
    + Deprecate SerializationUtils 0-argument constructor.
    + Deprecate Streams 0-argument constructor.
    + Deprecate StringEscapeUtils 0-argument constructor.
    + Deprecate StringUtils 0-argument constructor.
    + Deprecate Suppliers 0-argument constructor.
    + Deprecate SystemProperties 0-argument constructor.
    + Deprecate ThreadUtils 0-argument constructor.
    + Deprecate TypeUtils 0-argument constructor.
    + Make ArrayFill null-safe.
    + Make ArraySorter null-safe.
    + Make ArrayUtils.removeAll() null-safe.
    + Fix Java version in README.md #1170.
    + StringUtils.stripAccents() should handle ligatures, UTF32
    math blocks, etc. #1201.
    + TypeUtils.toString(Type) StackOverflowError for an inner
    class in the inner class parameterized enclosing class #657.
    Fixes LANG-1524.
    + Deprecate SystemUtils.getUserName(String) in favor of
    SystemProperties.getUserName(Supplier).
    + Make LockVisitor.acceptReadLocked(FailableConsumer)
    null-safe.
    + Make LockVisitor.applyWriteLocked(FailableConsumer)
    null-safe.
    + Make ObjectUtils.getFirstNonNull(Supplier...) null-safe.
    + Make SystemProperties.getLineSeparator(Supplier).
    + StringUtils.stripAccents(String) doesn't handle "\u0111" and
    "\u0110" (Vietnamese) #1216.
    + StringUtils.stripAccents(String) doesn't handle I with bar.
    + StringUtils.stripAccents(String) doesn't handle U with bar.
    + StringUtils.stripAccents(String) doesn't handle T with
    stroke.
    + Fix Javadoc for FluentBitSet.setInclusive(int, int) #1222.
    Fixes LANG-1735.
    + Same Javadoc changes as [TEXT-234] #1223.
    + Remove duplicate static data in
    SerializationUtils.ClassLoaderAwareObjectInputStream.
    + Reimplement RandomUtils and RandomStringUtils on top of
    SecureRandom#getInstanceStrong() #1235.
    + DiffBuilder: Type constraint for method append(...,
    DiffResult) too strict #786. Fixes LANG-1657.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Update to 3.17.0
  * New features:
  * RandomUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * RandomStringUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * Remove unused exception from deprecated
    StringUtils.toString(byte[], String).
  * Make RandomUtils.insecure() public.
  * Add RandomUtils.secureStrong().
  * Add RandomStringUtils.secureStrong().
  * Add CalendarUtils.toLocalDateTime(Calendar).
  * Add CalendarUtils.toLocalDateTime().
  * Add CalendarUtils.toZonedDateTime(Calendar).
  * Add CalendarUtils.toZonedDateTime().
  * Add CalendarUtils.toOffsetDateTime(Calendar).
  * Add CalendarUtils.toOffsetDateTime().
  * Fixed Bugs:
  * LANG-1760: Using RandomStringUtils.insecure() still leads to
    using the secure() random.
  * Deprecate static RandomUtils.next*() methods in favor or
    .secure() and .insecure() versions.
  * Deprecate static RandomStringUtils.random*() methods in favor
    or .secure() and .insecure() versions.
  * Changes:
  * Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1255.
  * Bump org.easymock:easymock from 5.3.0 to 5.4.0 #1256.
  * Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
    [#1262], #1264.
  * Bump org.apache.commons:commons-parent from 72 to 73 #1265.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Update to 3.18.0
  * New features:
    + Add Strings and refactor StringUtils
    + LANG-1747: Add StopWatch.run([Failable]Runnable) and
    get([Failable]Supplier)
    + Add JavaVersion.JAVA_23
    + Add JavaVersion.JAVA_24
    + Add SystemUtils.IS_JAVA_23
    + Add SystemUtils.IS_JAVA_24
    + Add IntegerRange.toIntStream()
    + Add LongRange.toLongStream()
    + Add IntStrams.of(int...)
    + Add ArrayUtils.containsAny(int[], int...)
    + Add CalendarUtils.toLocalDate() #725
    + Add SystemUtils.IS_OS_MAC_OSX_SEQUOIA
    + Add BasicThreadFactory.builder() and deprecate
    BasicThreadFactory.Builder()
    + Add BasicThreadFactory.daemon()
    + Add ArrayUtils.startsWith
    + Add Predicates
    + Add RegExUtils methods typed to CharSequence input and
    deprecate old versions typed to String
    + Add IterableStringTokenizer
    + Add FailableIntToFloatFunction
    + Add Validate.isTrue(boolean, Supplier&lt;String&gt;)
    + Add EnumUtils.getFirstEnum(Class&lt;E&gt;, int, ToIntFunction&lt;E&gt;, E)
    + Add FailableToBooleanFunction
    + Add the @FunctionalInterface annotation to
    org.apache.commons.lang3.concurrent.Computable
    + Add SystemUtils.getJavaIoTmpDirPath()
    + Add SystemUtils.getJavaHomePath()
    + Add SystemUtils.getUserDirPath()
    + Add SystemUtils.getUserHomePath()
    + Add ArrayFill.fill(T[], FailableIntFunction))
    + Add SystemProperties.JAVA_SECURITY_DEBUG
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_CONF
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_KDC
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_REAL
    + Add ArrayFill.fill(boolean[], boolean) #1386
    + Add ObjectUtils.getIfNull(Object, Object) and deprecate
    defaultIfNull(Object, Object)
    + org.apache.commons.lang3.mutable.Mutable now extends Supplier
    + Add org.apache.commons.lang3.CharUtils.isHex(char)
    + Add org.apache.commons.lang3.CharUtils.isOctal(char)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .reentrantLockVisitor(Object)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .create(Object, ReentrantLock)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .ReentrantLockVisitor
    + Add builders for LockingVisitors implementations
    + Add EnumSet.stream(Class)
    + Add org.apache.commons.lang3.SystemProperties.isPropertySet(String)
  * Fixed Bugs:
    + Fix flaky FileUtilsWaitForTest.testWaitForNegativeDuration()
    + Pick up exec-maven-plugin version from parent POM
    + Speed up and sanitize StopWatchTest
    + Fix handling of non-ASCII letters and numbers in
    RandomStringUtils #1273
    + Rewrite ClassUtils.getClass(...) without recursion to avoid
    StackOverflowError on very long inputs (bsc#1246397,
    CVE-2025-48924)
    + OSS-Fuzz Issue 42522972: apache-commons-text:
    StringSubstitutorInterpolatorFuzzer: Security exception in
    org.apache.commons.lang3.ClassUtils.getClass
    + Remove trailing whitespace in StopWatch exception messages
    + LANG-1754: Use getAllSuperclassesAndInterfaces() in
    getMatchingMethod() #1289
    + Add details to the ArrayFill Javadoc
    + Add details to the ArraySorter Javadoc
    + Fix broken URL to project location in Maven Central #1296
    + LANG-1753: StringUtils.replaceEachRepeatedly regression in
    3.11+ #1297
    + Use simplified JUnit assertion methods #1298
    + LANG-1682: Javadoc and test: Use Strings.CI.startsWithAny
    method instead #1299
    + Fix NullPointerException in FastDateParser.TimeZoneStrategy
    .setCalendar(FastDateParser, Calendar, String) on Java 23
    + LANG-1757: Fix NullPointerException in MethodUtils
    .getMatchingAccessibleMethod((Class, String, Class...))
    + LANG-1698: Fix StackOverflowError in TypeUtils
    .typeVariableToString(TypeVariable), TypeUtils.toString(Type)
    on Java 17 and up
    + LANG-1511: SystemUtils is missing important documentation
    + Make Failable.run(FailableRunnable) null-safe
    + Make Failable.accept(*) null-safe
    + Improve container detection by mimicking systemd #1323
    + Make LangCollectors.collect(...) null-safe
    + Make LangCollectors.collect(...) null-safe
    + Fix names of UTF-16 surrogate character test fixture
    constants, see also #1326
    + Moditect plugin generates split package warnings
    + LocaleUtils.availableLocaleSet() uses predictable iteration
    order
    + LANG-1759: SerializationUtils.clone(Object) throws
    ClassCastException when called with a Serializable lambda
    + LANG-1759: [StringUtils::indexOfAnyBut] redesign due to
    inconsistent/faulty behavior regarding UTF-16 surrogates #1327
    + Undeprecate ObjectUtils.toString(Object)
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.leftSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.rightSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + LANG-1762: StopWatch methods should not delegate to deprecated
    methods
    + Don't call TypeUtils.toString(Type) on every array item in
    TypeUtils.parameterize[WithOwner](Type, Class, Map, Type&gt;)
    unless required
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Instead of throwing a NullPointerException,
    ArrayUtils.toStringArray(Object[]) should return "null" for
    null elements like ArrayUtils.toStringArray(Object[], String)
    returns its valueForNullElements
    + LANG-1764: Deprecate NumericEntityUnescaper.OPTION in favor of
    Apache Commons Text
    + Several hash collisions in Fraction class
    + LANG-1768: MutableLong and friends should provide better
    parsing exceptions Javadocs
    + Reimplement StringUtils.toCodePoints(CharSequence) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.capitalize(String) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.uncapitalize(String) to use
    java.lang.CharSequence.codePoints()
    + org.apache.commons.lang3.ClassUtils.getCanonicalName(String)
    now throws an IllegalArgumentException for array dimensions
    greater than 255
    + Fix Javadoc typo and improve clarity in defaultIfBlank method
    [#1376]
    + LANG-1773: Apache Commons Lang no longer builds on Android
    [#1381]
    + LANG-1772: Restrict size of cache to prevent overflow errors
    [#1379]
    + LANG-1772: Reimplement
    org.apache.commons.lang3.ClassUtils.hierarchy(Class,
    Interfaces) using an AtomicReference
    + Fix Javadoc code examples in DiffBuilder and
    ReflectionDiffBuilder #1400
    + Fix generics in org.apache.commons.lang3.stream.Streams
    .toArray(Class) signature
    + LANG-1727: EventListenerSupport doesn't document ordering of
    events
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.IS_OS_ANDROID
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtLeast(JavaVersion)
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtMost(JavaVersion)
    + Return the default enum if a SecurityException is caught in
    getEnumSystemProperty()
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .EnumUtils.getEnum(Class, String, E)
    + org.apache.commons.lang3.EnumUtils
    .getFirstEnumIgnoreCase(Class, String, Function, E) now
    returns the given default enum on null enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String, E) now returns the given default enum on null
    enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String) now returns the given default enum on null enumClass
    input
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.equalTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThanOrEqualTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThanOrEqualTo(A)
    + LANG-1776: Use GitHub URL in POM for improved automation
    support</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to 3.19.0
  * New features:
    + Add ArrayUtils.SOFT_MAX_ARRAY_LENGTH
    + Add SystemUtils.IS_OS_NETWARE
    + Add MethodUtils.getAccessibleMethod(Class, Method)
    + Add documentation to site for CVE-2025-48924
    ClassUtils.getClass(...) can throw a StackOverflowError on
    very long inputs
    + Add StringUtils.indexOfAny(CharSequence, int, char...)
    + Add ConcurrentException.ConcurrentException(String)
    + Add DateUtils.toLocalDateTime(Date[, TimeZone])
    + Add DateUtils.toOffsetDateTime(Date[, TimeZone])
    + Add DateUtils.toZonedDateTime(Date[, TimeZone])
    + Add ByteConsumer
    + Add ByteSupplier
    + Add FailableByteConsumer
    + Add FailableByteSupplier
    + LANG-1784: Add Functions methods for null-safe mapping and
    chaining
    + LANG-1784: Add Failable methods for null-safe mapping and
    chaining
    + Add DoubleRange.fit(double)
    + Add IntegerRange.fit(int)
    + Add LongRange.fit(long)
    + Add DurationUtils.get(String, TemporalUnit, long)
    + Add DurationUtils.getMillis(String, long)
    + Add DurationUtils.getSeconds(String, long)
    + Add SystemProperties.getBoolean(Class, String, boolean)
    + Add SystemProperties.getInt(Class, String, int)
    + Add SystemProperties.getLong(Class, String, long)
  * Fixed Bugs:
    + LANG-1778: MethodUtils.getMatchingMethod() doesn't respect the
    hierarchy of methods
    + MethodUtils.getMethodObject(Class&lt;?&gt;, String, Class&lt;?&gt;...) now
    returns null instead of throwing a NullPointerException, as it
    does for other exception types
    + Reduce spurious failures in ArrayUtilsTest methods that test
    ArrayUtils.shuffle() methods
    + MethodUtils cannot find or invoke a public method on a public
    class implemented in its package-private superclass
    + AtomicSafeInitializer.get() can spin internally if the
    FailableSupplier given to AbstractConcurrentInitializer
    .AbstractBuilder.setInitializer(FailableSupplier) throws a
    RuntimeException
    + LANG-1783: WordUtils.containsAllWords?() may throw
    PatternSyntaxException
    + LANG-1782: MethodUtils cannot find or invoke vararg methods
    without providing vararg types or values
    + MethodUtils cannot find or invoke vararg methods of interface
    types
    + MethodUtils cannot find or invoke vararg methods when widening
    primitive types following the JLS 5.1.2. Widening Primitive
    Conversion
    + LANG-1597: Invocation fails because matching varargs method
    found but then discarded
    + Don't check accessibility twice in MemberUtils
    .setAccessibleWorkaround(T)
    + LANG-1774: Improve handling of ClassUtils
    .getShortCanonicalName() for invalid input
    + LANG-1720: Improve Javadocs for Conversion
    + Fix CalendarUtils.toLocalDate() Javadoc return type
    description
    + Fix the method name in Javadoc examples for CharUtils.isHex()
    + Deprecate NumberUtils.compare(byte, byte) in favor of
    Byte.compare(byte, byte)
    + Deprecate NumberUtils.compare(int, int) in favor of
    Integer.compare(int, int)
    + Deprecate NumberUtils.compare(long, long) in favor of
    Long.compare(long, long)
    + Deprecate NumberUtils.compare(short, short) in favor of
    Short.compare(short, short)
    + Deprecate obsolete system property constant
    SystemProperties.AWT_TOOLKIT
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_FONTS
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_GRAPHICSENV
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_HEADLESS
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_PRINTERJOB
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_COMPILER
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_ENDORSED_DIRS
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_EXT_DIRS
    + Deprecate method for obsolete system property constant
    SystemProperties.getAwtToolkit()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtFonts()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtGraphicsenv()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtHeadless()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtPrinterjob()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaCompiler()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaEndorsedDirs()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaExtDirs()
    + Deprecate method for obsolete system property constant
    SystemUtils.isJavaAwtHeadless()
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_FONTS
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_GRAPHICSENV
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_HEADLESS
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_PRINTERJOB
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_COMPILER
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_ENDORSED_DIRS
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_EXT_DIRS
    + [javadoc] General improvements
    + [javadoc] Fix thrown exception documentation for
    MethodUtils.getMethodObject(Class&lt;?&gt;, String, Class&lt;?&gt;...)
    + [javadoc] Strings::equalsAny: CI doc string should show it's
    insensitive
    + [javadoc] General Javadoc improvements
    + LANG-1780: [javadoc] Fix Strings Javadoc
    + [javadoc] Fix typo in Javadoc of Strings instances
    + [javadoc] Fix Javadocs in ClassUtils
    + [javadoc] Fix @deprecated link for StringUtils#startsWithAny
    + Replace old feather logotype with new oak logotype
  * Changes:
    + [test] Bump org.apache.commons:commons-text from 1.13.1 to
    1.14.0
    + Bump org.apache.commons:commons-parent from 85 to 88</changelog>
  <changelog author="fstrba@suse.com" date="1778500801">- Update to 3.20.0
  * New features:
    + Add SystemProperties.getPath(String, Supplier&lt;Path&gt;)
    + Add JavaVersion.JAVA_25
    + Add JavaVersion.JAVA_26
    + Add SystemUtils.IS_JAVA_25
    + Add SystemUtils.IS_JAVA_26
    + Add MutablePair.ofNonNull(Map.Entry)
    + Add TimedSemaphore.builder(), Builder, and deprecate
    constructors
    + LANG-1504: Adding labels and history to split StopWatch
  * Fixed Bugs:
    + Optimize ObjectToStringComparator.compare() method
    + [javadoc] Improve StringUtils Javadoc
    + Fix internal inverted logic in private isEnum() method and
    correct its usage in getFirstEnum()
    + Use accessors in ToStringStyle so subclasses can effectively
    override them
    + 'LocaleUtils.toLocale(String)' for a 2 letter country code
    now returns a value instead of throwing an
    'IllegalArgumentException'
    + Fix typo in StringUtils.trunctate() IllegalArgumentException
    message and test assertion messages
    + Fix test fixture in
    ReflectionDiffBuilderTest.testTransientFieldDifference()
    + LANG-1789: NullPointerException when generating
    NoSuchMethodException in MethodUtils
    + LANG-1786: Map deprecated TimeZone short IDs and avoid JRE
    WARNINGs to the console
    + LANG-1792: TypeUtils.toString() skips angle brackets for Class
    type
    + Mention JDK 25 LTS as a tested version in the release notes
  * Changes:
    + Bump org.apache.commons:commons-parent from 88 to 92</changelog>
</package>
<package pkgid="1287b2bf5aa6f1679dff4424a5cad5d7fe69e28fec9fe325731617454b0fd36a39ffe46ee5c1b6d5e0ac57c69ab366e7019d37dc05bd795d25472d485caf1903" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.18.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1613476800">- Add OSGi manifest</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- Fixed SPEC file: Replaced broken URL
- Update to 3.9
  * Requires jdk &gt;= 1.8
  * Fixed issues with java 12
  * Add more SystemUtils.IS_JAVA_XX variants
  * Adding the Functions class
  * Add @FunctionalInterface to ThreadPredicate and ThreadGroupPredicate
  * Add isEmpty method to ObjectUtils
  * null-safe StringUtils.valueOf(char[]) to delegate to
    String.valueOf(char[]).
  * Add API org.apache.commons.lang3.SystemUtils.isJavaVersionAtMost(JavaVersion)
  * Consolidate the StringUtils equals and equalsIgnoreCase</changelog>
  <changelog author="david.anes@suse.com" date="1640347200">- Updated download URL.
- Update to 3.12.0:
  - New features:
  * Add BooleanUtils.booleanValues().
  * Add BooleanUtils.primitiveValues().
  * Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
  * Add StopWatch.getStopTime().
  * More test coverage for CharSequenceUtils.
  * Add fluent-style ArraySorter.
  * Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
  * Add FailableShortSupplier, handy for JDBC APIs.
  * Add JavaVersion.JAVA_17.
  * Add missing boolean[] join method.
  * Add StringUtils.substringBefore(String, int).
  * Add Range.INTEGER.
  * Add DurationUtils.
  * Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
  * Add and use true and false String constants.
  * Add and use ObjectUtils.requireNonEmpty().
  - Fixed Bugs:
  * Correct implementation of RandomUtils.nextLong(long, long).
  * Restore handling of collections for non-JSON ToStringStyle.
  * ContextedException Javadoc add missing semicolon.
  * Resolve JUnit pioneer transitive dependencies using JUnit BOM.
  * NumberUtilsTest - incorrect types in min/max tests.
  * Improve StringUtils.stripAccents conversion of remaining accents.
  * StringUtils.countMatches - clarify Javadoc.
  * Remove redundant argument from substring call.
  * BigDecimal is created when you pass it the min and max values.
  * ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
  * ArrayUtils contains() and indexOf() fail to handle Float.NaN.
  * Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type&gt;).
  * TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
  * testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
  * Fix Javadoc for SystemUtils.isJavaVersionAtMost().
  * Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
  * Fix formatting of isAnyBlank() and isAnyEmpty().
  * TypeUtils. containsTypeVariables does not support GenericArrayType.
  * Javadoc of some methods incorrectly refers to another method.
  * Refine StringUtils.lastIndexOfIgnoreCase.
  * Refine StringUtils.abbreviate.
  * Refine StringUtils.isNumericSpace.
  * Refine StringUtils.deleteWhitespace.
  * Correction in Javadoc of some methods.
  * Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
  * Correct markup in Javadoc for unbalanced braces.
  * MethodUtils.invokeMethod NullPointerException in case of null in args list.
  * Fix 2 digit week year formatting.
  * Fix broken Javadoc links to commons-text.
  * Add and use ThreadUtils.sleep(Duration).
  * Add and use ThreadUtils.join(Thread, Duration).
  * Add ObjectUtils.wait(Duration).
  - Changes:
  * ArrayUtils.toPrimitive(Object) does not support boolean and other types.
  * Enable Dependabot.
  * Bump junit-jupiter from 5.6.2 to 5.7.0.
  * Bump spotbugs from 4.1.2 to 4.2.1.
  * Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
  * Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
  * Bump junit-pioneer from 0.6.0 to 1.1.0.
  * Bump checkstyle from 8.34 to 8.40.
  * Bump actions/checkout from v2.3.1 to v2.3.4.
  * Bump actions/setup-java from v1.4.0 to v1.4.2.
  * Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
  * Update maven-surefire-plugin 2.22.2 -&gt; 3.0.0-M5.
  * Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
  * Bump jmh.version from 1.21 to 1.27.
  * Update commons.japicmp.version 0.14.3 -&gt; 0.15.2.
  * Processor.java: check enum equality with == instead of .equals() method.
  * Bump junit-pioneer from 1.1.0 to 1.3.0.
  * Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
  * Bump actions/cache from v2 to v2.1.4.
  * Bump junit-bom from 5.7.0 to 5.7.1.
  * Minor Improvements.
  * Minor Improvement: Add final variable.try to make the code read-only.
  * Minor Improvement: Remove redundant initializer.
  * Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
  - New features:
  * Add ArrayUtils.isSameLength() to compare more array types.
  * Added the Locks class as a convenient possibility to deal with locked objects.
  * Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
  * Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
  * Add JavaVersion enum constants for Java 14 and 15.
  * Add JavaVersion enum constants for Java 16.
  * Use Java 8 lambdas and Map operations.
  * Change removeLastFieldSeparator to use endsWith.
  * Change a Pattern to a static final field, for not letting it compile each time the function invoked.
  * Add ImmutablePair factory methods left() and right().
  * Add ObjectUtils.toString(Object, Supplier&lt;String&gt;).
  * Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
  * Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
  - Fixed Bugs:
  * Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
  * Refine Javadoc.
  * Fix typos
  * Ignored exception `ignored`, should not be called so.
  * StringUtils.replaceEachRepeatedly gives IllegalStateException.
  * [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
  * Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
  * Add allNull() and anyNull() methods to ObjectUtils.
  - Changes:
  * Refine test output for FastDateParserTest
  * CharSequenceUtils.lastIndexOf : remake it
  * remove encoding and docEncoding and use inherited values from commons-parent
  * Simplify null checks in Pair.hashCode() using Objects.hashCode().
  * Simplify null checks in Triple.hashCode() using Objects.hashCode().
  * Simplify some if statements in StringUtils.
  * Simplify a null check in the private replaceEach() method of StringUtils.
  * Replace some usages of the ternary operator with calls to Math.max() and Math.min().
  * (Javadoc) Fix return tag for throwableOf*() methods.
  * CharSequenceUtils.regionMatches is wrong dealing with Georgian.
  * Optimize ArrayUtils::isArrayIndexValid method.
  * Use List.sort instead of Collection.sort.
  * Use StandardCharsets.UTF_8.
  * Use Collections.singletonList insteadof Arrays.asList when there be only one element.
  * Change array style from `int a[]` to `int[] a`.
  * Change from addAll to constructors for some List.
  * Simplify if as some conditions are covered by others.
  * Fixed Javadocs for setTestRecursive().
  * ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
  * Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
  * org.apache.commons:commons-parent 50 -&gt; 51.
  * org.junit-pioneer:junit-pioneer 0.5.4 -&gt; 0.6.0.
  * org.junit.jupiter:junit-jupiter 5.6.0 -&gt; 5.6.2.
  * com.github.spotbugs:spotbugs 4.0.0 -&gt; 4.0.6.
  * com.puppycrawl.tools:checkstyle 8.29 -&gt; 8.34.
  * commons.surefire.version 3.0.0-M4 -&gt; 3.0.0-M5..
- From 3.10 Update:
  - New features:
  * Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
  * Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
  * Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
  * Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
  * Add ArrayUtils.addFirst() methods.
  * Add Range.fit(T) to fit a value into a range.
  * Added Functions.as*, and tests thereof, as suggested by Peter Verhas
  * Add getters for lhs and rhs objects in DiffResult.
  * Generify builder classes Diffable, DiffBuilder, and DiffResult.
  * Add ClassLoaderUtils with toString() implementations.
  * Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
  * Add org.apache.commons.lang3.time.Calendars.
  * Add EnumUtils getEnum() methods with default values.
  * Added indexesOf methods and simplified removeAllOccurences.
  * Add support of lambda value evaluation for defaulting methods.
  * Add factory methods to Pair classes with Map.Entry input.
  * Add StopWatch convenience APIs to format times and create a simple instance.
  * Allow a StopWatch to carry an optional message.
  * Add ComparableUtils.
  * Add org.apache.commons.lang3.SystemUtils.getUserName().
  * Add ObjectToStringComparator.
  * Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
  * Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
  * ObjectUtils: Get first non-null supplier value.
  * Added the Streams class, and Functions.stream() as an accessor thereof.
  - Fixed Bugs:
  * Make test more stable by wrapping assertions in hashset.
  * Generate Javadoc jar on build.
  * Trivial: year of release for 3.9 says 2018, should be 2019.
  * Use synchronize on a set created with Collections.synchronizedSet before iterating.
  * StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
  * StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
  * StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
  * Corrected usage examples in Javadocs.
  * StringUtils abbreviate returns String of length greater than maxWidth.
  * Test may fail due to a different order of fields returned by reflection api.
  * Sort fields in ReflectionToStringBuilder for deterministic order.
  * MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
  * MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
  - Changes:
  * Remove redundant if statements in join methods.
  * commons.japicmp.version 0.13.1 -&gt; 0.14.1.
  * junit-jupiter 5.5.0 -&gt; 5.5.1.
  * junit-jupiter 5.5.1 -&gt; 5.5.2.
  * Improve Javadoc based on the discussion of the GitHub PR.
  * maven-checkstyle-plugin 3.0.0 -&gt; 3.1.0.
  * Update documentation related to the issue LANG-696.
  * AnnotationUtils little cleanup.
  * Update test dependency: org.easymock:easymock 4.0.2 -&gt; 4.1.
  * Update test dependency: org.hamcrest:hamcrest 2.1 -&gt; 2.2.
  * Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -&gt; 0.4.2.
  * Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -&gt; 8.27.
  * Update POM parent: org.apache.commons:commons-parent 48 -&gt; 50.
  * BooleanUtils Javadoc.
  * Functions Javadoc.
  * org.easymock:easymock 4.1 -&gt; 4.2.
  * org.junit-pioneer:junit-pioneer 0.4.2 -&gt; 0.5.4.
  * org.junit.jupiter:junit-jupiter 5.5.2 -&gt; 5.6.0.
  * Use Javadoc {@code} instead of pre tags.
  * ExceptionUtilsTest to 100%.
  * Reuse own code in Functions.java.
  * Avoid unnecessary allocation in StringUtils.wrapIfMissing.
  * Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
  * Add 1 and 0 in toBooleanObject(final String str).
  * Remove an redundant argument check in NumberUtils.
  * Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Fix component version in default.properties to 3.12</changelog>
  <changelog author="pmonreal@suse.com" date="1640779201">- Remove the junit bom dependency for now as it breaks the build of
  other packages like log4j.
  * Add apache-commons-lang3-junit-bom.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693396800">- Break cycle with the new bcel
- Removed patch:
  * apache-commons-lang3-junit-bom.patch
    + not needed since we install the pom file using the new
    %%mvn_install_pom macro which sanitizes the pom file to the
    bare runtime dependencies.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Update to 3.14.0:
  * New features:
    + Add Functions#function(Function).
    + Add FailableFunction#function(FailableFunction).
    + Add CalendarUtils.getInstance().
    + Add syntax for optional tokens to DurationFormatUtils.
    + Add ArrayFill.
    + Add FastDateParser.TimeZoneStrategy.TzInfo.toString().
    + Add LocaleUtils.isLanguageUndetermined(Locale).
    + Add ObjectUtils.toString(Supplier&lt;Object&gt;, Supplier&lt;String&gt;).
    + Add LazyInitializer.isInitialized().
    + Add ConcurrentInitializer#isInitialized() #1120.
    + Add Streams.failableStream(T...).
    + Add FailableSupplier.nul().
    + Add Suppliers.nul().
    + Add ExceptionUtils.throwUnchecked(T) where T extends
    Throwable, and deprecate Object version.
    + Add ExceptionUtils.rethrowRuntimeException(T), and deprecate
    rethrow(T).
    + ConcurrentInitializer implementations can now be instantiated
    and configured with allocation and release lambdas.
    Fixes LANG-1716.
    + Add support for RISC-V in ArchUtils #1128. Fixes LANG-1717.
  * Fixed bugs:
    + Rename variable names from 'clss' to 'clazz'.
    + [Javadoc] ComparableUtils'c1' to 'comparable1', 'c2' to
    'comparable2'
    + [Javadoc] Remove 2.1 specific comment #1091.
    + [Javadoc] Fix Incorrect Description in Processor isAarch64()
    [#1093]. Fixes LANG-1704.
    + [Javadoc] Point to right getShortClassName flavor in Javadoc
    for relevant notes #1097.
    + Improve performance of StringUtils.isMixedCase().
    + ThreadUtils find methods should not return null items. Fixes
    LANG-1706.
    + ReflectionToStringBuilder changes in version 3.13.0 has broken
    the logic for overriding classes. Fixes LANG-1710.
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(ClassLoader).
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(URLClassLoader).
    + Return ToStringStyle.nullText instead of NPE for
    ReflectionToStringBuilder.toString().
    + Fix ThresholdCircuitBreaker#checkState().
    + Use ConcurrentInitializer implementations without subclassing.
    + Update critical value for chi-square test.
    + Fix Javadoc syntax errors #1129.
- From 3.13.0 update
  * New features:
    + Add GitHub coverage.yml.
    + Add EnumUtils.getEnumSystemProperty(...).
    + Add TriConsumer.
    + Add and use EnumUtils.getFirstEnumIgnoreCase(Class, String,
    Function, E).
    + Add and use Suppliers.
    + Add and use ArrayUtils.getComponentType(T[]).
    + Add and use ClassUtils.getComponentType(Class&gt;T[]&gt;).
    + Add and use ObjectUtils.getClass(T).
    + Add and use ArrayUtils.newInstance(Class&gt;T&gt;, int).
    + Add and use null-safe Streams.of(T...).
    + Add ClassUtils.comparator().
    + Add and use ThreadUtils.sleepQuietly(Duration).
    + Add and use ArrayUtils.setAll(T[], IntFunction).
    + Add and use ArrayUtils.setAll(T[], Supplier).
    + Add BooleanConsumer.
    + Add IntToCharFunction.
    + Add IntStreams.
    + Add UncheckedFuture.
    + Add UncheckedException.
    + Add UncheckedExecutionException.
    + Add UncheckedTimeoutException.
    + Add UncheckedInterruptedException.
    + Add TimeZones.GMT.
    + Add ObjectUtils.identityHashCodeHex(Object).
    + Add ObjectUtils.hashCodeHex(Object).
    + Add StringUtils.removeStart(String, char).
    + Add null-safe ObjectUtils.isArray(). Fixes LANG-1659.
    + Add ComparableUtils.max(A, A) and ComparableUtils.min(A, A).
    + Add UncheckedReflectiveOperationException.
    + Add and use ClassUtils.isPublic(Class).
    + Add UncheckedIllegalAccessException.
    + Add MethodInvokers.
    + Add Streams.nullSafeStream(Collection).
    + Add Streams.toStream(Collection).
    + Add Streams.failableStream(Collection) and deprecate misnamed
    stream(Collection).
    + Add Streams.failableStream(Stream) and deprecate misnamed
    stream(Stream).
    + Add EnumUtils.getEnumMap(Class, Function).
    + Add FluentBitSet.
    + Add Streams.instancesOf(Class, Collection).
    + Add ImmutablePair.ofNonNull(L, R).
    + Add ImmutableTriple.ofNonNull(L, M, R).
    + Add MutablePair.ofNonNull(L, R).
    + Add MutableTriple.ofNonNull(L, M, R).
    + Add Pair.ofNonNull(L, R).
    + Add Triple.ofNonNull(L, M, R).
    + Add ArrayUtils.containsAny(Object[], Object...).
    + Add Processor.Type.AARCH_64.
    + Add Processor.isAarch64().
    + Update ArchUtils.getProcessor(String) for "aarch64".
    + Add JavaVersion.JAVA_18.
    + Add JavaVersion.JAVA_19.
    + Add JavaVersion.JAVA_20.
    + Add JavaVersion.JAVA_21.
    + Add TimeZones.toTimeZone(TimeZone).
    + Add FutureTasks.
    + Add Memoizer(Function) and Memoizer(Function, boolean).
    + Add Consumers.
    + Add github/codeql-action.
    + Add coverage.yml.
    + Add DurationUtils.since(Temporal).
    + Add DurationUtils.of(FailableConsumer|FailableRunnbale).
    + Add ExceptionUtils.forEach(Throwable, Consumer&lt;Throwable&gt;).
    + Add ExceptionUtils.stream(Throwable).
    + Add ExceptionUtils.getRootCauseStackTraceList(Throwable).
    + Add SystemUtils.IS_OS_WINDOWS_11.
    + Add SystemUtils.IS_JAVA_16.
    + Add SystemUtils.IS_JAVA_17.
    + Add SystemUtils.IS_JAVA_18.
    + Add SystemUtils.IS_JAVA_19.
    + Add SystemUtils.IS_JAVA_20.
    + Add SystemUtils.IS_JAVA_21.
    + Add ArrayUtils.oneHot(). Fixes LANG-1627.
    + Let ReflectionToStringBuilder only reflect given field names.
    Fixes LANG-1662.
    + Add Streams.of(Enumeration&lt;E&gt;).
    + Add Streams.of(Iterable&lt;E&gt;).
    + Add Streams.of(Iterator&lt;E&gt;).
    + Simple support for Optional in ObjectUtils#isEmpty(). Fixes
    LANG-1689.
    + Add Processor.Type.getLabel().
    + Add Processor.toString().
    + Add HashCodeBuilder.equals(Object).
    + Add BooleanUtils.values() and forEach().
    + Add ClassPathUtils.packageToPath(String) and pathToPackage(String)
    + Add CalendarUtils#getDayOfYear()
    + Add NumberRange, DoubleRange, IntegerRange, LongRange.
    + Add missing exception javadoc/tests for some null arguments.
    + Add ClassLoaderUtils.getSystemURLs() and getThreadURLs().
    + Add RegExUtils.dotAll() and dotAllMatcher().
    + Add Pair.accept(FailableBiConsumer).
    + Add Pair.apply(FailableBiFunction).
    + Add ReflectionDiffBuilder.setExcludeFieldNames(...) and
    DiffExclude a... Fixes LANG-1677.
    + Add and ExceptionUtils.isChecked() and isUnchecked(). Fixes
    LANG-1647.
    + Add and use ExceptionUtils.throwUnchecked(throwable).
    + Add LockingVisitors.create(O, ReadWriteLock).
  * Fixed bugs:
    + NumberUtils.createNumber() to recognize hex integers prefixed
    with +. Fixes LANG-1645.
    + NumberUtils.createNumber() to return requested floating point
    type for zero. Fixes LANG-1646.
    + DMI: Random object created and used only once
    (DMI_RANDOM_USED_ONLY_ONCE); Better multi-threaded behavior.
    + Redundant Collection operation. Use
    Collections.emptyIterator(). Fixes LANG-1646.
    + Make Streams.stream(Collection) null-safe.
    + Allow tests to access java.util classes such as ArrayList in
    Java 16. Fixes LANG-1667.
    + OpenJDK 16 Day Period Parsing. Fixes LANG-1669.
    + Update documentation to list correct exception for null array
    parameters. Fixes LANG-1663.
    + Fixing reversed Javadoc descriptions in StopWatch.
    + Fix typos in JavaDoc. Fixes LANG-1670.
    + Simplify assertions with equivalent but more simple..
    + Avoid multiple equivalent occurrences of the same expression.
    + Remove redundant initializers.
    + Fix ObjectUtils Javadocs.
    + Make Range constructors more generic. Fixes LANG-1674.
    + Use final and Remove redundant String.
    + Use Set instead of List for checking the contains() method.
    + Javadoc for StringUtils.substringBefore(String str,
    int separator) doesn't mention that the separator is an int.
    + Fix NullPointerException in ThreadUtils.getSystemThreadGroup()
    when the current thread is stopped.
    + ArrayUtils.toPrimitive(Boolean...) null array elements map to
    false, like Boolean.parseBoolean(null) and its callers return
    false.
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows.
    + Deprecate Validate#notNull(Object) in favor of using
    Objects#requireNonNull(Object, String).
    + Use TimeZone from calendar in DateFormatUtils. Fixes
    LANG-1462.
    + Updating javadoc for NullPointerException when
    Validate.notNull() is called.
    + Fixing and adding DateUtils exception Javadocs.
    + Improve performance of StringUtils.unwrap(String, String).
    Fixes LANG-1679.
    + Improve performance of StringUtils.join for primitives. Fixes
    LANG-1675.
    + Fixed NPE getting Stack Trace if Throwable is null. Fixes
    LANG-1675.
    + Make Validate.isAssignableFrom() check null inputs.
    + Fix Javadoc for Validate.isAssignableFrom().
    + Make final mappingFunction variable.
    + Remove unnecessary variable creations.
    + Minor changes.
    + FastDateFormat does not support the 'L'-Pattern from
    SimpleDateFormat. Fixes LANG-1680.
    + Increase test coverage of ComparableUtils from 71% to 100%.
    + Increase method test coverage of
    MultilineRecursiveToStringStyle.
    + Fix unstable coverage of CharSequenceUtils tests noticed
    during merge of PRs 898 and 899.
    + Rewrite Conversion.binaryBeMsb0ToHexDigit to invert logic of
    binaryToHexDigit.
    + Allow extension of previously final classes ImmutablePair and
    ImmutableTriple.
    + Update ClassUtils Javadoc with some missing throws NPE.
    + Javadoc: StringUtils.repeat("", "x", 3) = "xx";.
    + StringUtils.join(Iterable, String) should only return null
    when the Iterable is null.
    + Add tests to increase coverage.
    + Extends Object clauses are redundant.
    + Simplify conditional expression..
    + Fix some Javadoc comments.
    + Deprecate getNanosOfMiili() method with typo and create proper
    getNanosOfMilli().
    + Deprecate ThreadUtils code that defines custom function
    interfaces in favor of stock java.util.function.Predicate
    usage.
    + Fix links in Javadoc and documentation.
    + Deprecate RandomUtils in favor of Apache Commons RNG
    UniformRandomProvider. Fixes LANG-1604.
    + Added docs regarding week year support. Fixes LANG-1638.
    + ClassUtils.getShortCanonicalName doesn't use the
    canonicalName. Fixes LANG-1691.
    + Validate: Get error messages without using String.format when
    varargs is empty.
    + Simplify expression (length is never &lt; 0).
    + Fix simple broken javadoc..
    + Fix typo.
    + Use Objects.requireNonNull() directly.
    + MethodUtils.getMatchingMethod() fails with "Found multiple
    candidates". Fixes LANG-1694.
    + Construct ArrayList with better default size. Fixes LANG-1643.
    + ThreadUtilsTest#testThreadGroups will test failed when using
    Junit5 parallel test.
    + Swap the order of assertion args (first excepted then actual).
    + Fix the comment of Failable, redundant "-".
    + Fix the comment of ComparableUtils, using "smallest", not
    "largest".
    + AnnotationUtilsTest and FormattableUtilsTest Only use static
    imports to import assert methods in tests.
    + [LANG-1681] Fix some FieldUtils Javadocs.
    + Remove unnecessary statement in DurationFormatUtils.
    + Corrected value of SystemUtils.JAVA_VENDOR. Fixes LANG-1699.
    + [StepSecurity] ci: Harden GitHub Actions.
    + Update Javadoc for the insert methods in ArrayUtils.
    + Deprecate ExceptionUtils.ExceptionUtils().
    + TypeUtils.getRawType() throws a NullPointerException on
    Wildcard GenericArrayType. Fixes LANG-1697.
    + Throw IllegalArgumentException instead of InternalError in the
    builder package.
    + Avoid NPE in MutableObject#equals() for null content.
    + SystemUtils fix and updates related to macOS.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Update to 3.16.0:
  * New features:
    + Add StopWatch.getSplitDuration() and deprecate
    getSplitTime().
    + Add StopWatch.getStartInstant() and deprecate getStartTime().
    + Add StopWatch.getStopInstant() and deprecate getStopTime().
    + Add StopWatch.getDuration() and deprecate getTime().
    + Add Javadoc links from StopWatch to DurationUtils #1249.
    + Add LangCollectors.collect(Collector, T...).
    + Add RandomStringUtils.secure().
    + Add RandomStringUtils.insecure().
  * Fixed bugs:
    + Reimplement StopWatch internals to use java.time.
    + RandomStringUtils.random() with a negative character index
    should throw IllegalArgumentException. Fixes LANG-1745.
    + LocaleUtils.toLocale(String) cannot parse four segments.
    Fixes LANG-1741.
    + Use fewer intermediary strings in
    DefaultExceptionContext.getFormattedExceptionMessage(String).
    + Fix Javadoc in StringUtils.splitPreserveAllTokens() #1251.
    + Deprecate ArraySort constructor for removal.
    + Deprecate CharEncoding constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate EntityArrays constructor for removal.
    + Deprecate ObjectToStringComparator constructor for removal.
    + Deprecate RuntimeEnvironment constructor for removal.
- Includes changes from 3.15.0:
  * New features:
    + Customize text pattern in DiffResult#toString(). Fixes
    LANG-1724.
    + Add DiffBuilder.Builder.
    + Add DiffBuilder.builder().
    + Add ReflectionDiffBuilder.Builder.
    + Add ReflectionDiffBuilder.builder().
    + Add test in TypeUtilsTest #1151.
    + Add Streams.failableStream(T), non-varargs variant.
    + Add Streams.nonNull(T), non-varargs variant.
    + Add ArrayUtils.nullTo(T[], T[]).
    + Add T ArrayUtils.arraycopy(T, int, T, int, int) fluent style.
    + Add T ArrayUtils.arraycopy(T, int, int, int, Function) fluent
    style.
    + Add SystemUtils.IS_JAVA_22.
    + Add JavaVersion.JAVA_22.
    + Add SystemProperties.getUserName(Supplier&lt;String&gt;).
    + Add SystemProperties.getLineSeparator(Supplier&lt;String&gt;).
    + Add
    + SystemProperties.getJavaSpecificationVersion(Supplier&lt;String&gt;).
    + Add SystemProperties constants and methods for system
    properties as of Java 22.
    + Add MethodUtils.getMethodObject(Class, String, Class...).
    + Add null-safe Consumers.accept() and Functions.apply() #1215.
    Fixes LANG-1733.
    + Add SystemUtils.IS_OS_ANDROID.
    + Add SystemUtils.IS_OS_MAC_OSX_SONOMA.
    + Add RuntimeEnvironment.inContainer() #1241.
    + Add AppendableJoiner and refactor string joining #1244.
  * Fixed bugs:
    + Improve Javadoc in ExceptionUtils #1136.
    + Fixed two non-deterministic tests in EnumUtilsTest.java
    [#1131].
    + Fix wrong number check that cause
    StringIndexOutOfBoundsException #1140. Fixes LANG-1721.
    + Rethrow NegativeArraySizeException as SerializationException
    in SerializationUtils.deserialize(InputStream) #1141. Fixes
    LANG-1722.
    + Throw NumberFormatException instead of
    IndexOutOfBoundsException in NumberUtils.getMantissa(String,
    int) #1145. Fixes LANG-1723.
    + Minor grammar fixes #1143.
    + ArrayUtils will return null when adding two null arrays, but
    undocumented. Fixes LANG-1713.
    + Let parent POM figure out commons.spdx.version.
    + Undeprecate ExceptionUtils.rethrow(Throwable). Fixes
    LANG-1726.
    + Test the Conversion class #1155. Fixes LANG-1702.
    + Address minor redundancies after code inspection #1148.
    + Allow EventListenerSupport to handle (and ignore) exception
    from listeners allowing invocation of all listeners #1167.
    + Deprecate AnnotationUtils 0-argument constructor.
    + Deprecate ArchUtils 0-argument constructor.
    + Deprecate ArrayUtils 0-argument constructor.
    + Deprecate BooleanUtils 0-argument constructor.
    + Deprecate CharSequenceUtils 0-argument constructor.
    + Deprecate CharSetUtils 0-argument constructor.
    + Deprecate CharUtils 0-argument constructor.
    + Deprecate ClassLoaderUtils 0-argument constructor.
    + Deprecate ClassPathUtils 0-argument constructor.
    + Deprecate ClassUtils 0-argument constructor.
    + Deprecate ConstructorUtils 0-argument constructor.
    + Deprecate DateFormatUtils 0-argument constructor.
    + Deprecate DateUtils 0-argument constructor.
    + Deprecate Diff.getType().
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle).
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle,
    boolean).
    + Deprecate DurationFormatUtils 0-argument constructor.
    + Deprecate DurationUtils 0-argument constructor.
    + Deprecate EnumUtils 0-argument constructor.
    + Deprecate EventUtils 0-argument constructor.
    + Deprecate FieldUtils 0-argument constructor.
    + Deprecate IEEE754rUtils 0-argument constructor.
    + Deprecate InheritanceUtils 0-argument constructor.
    + Deprecate IntStreams 0-argument constructor.
    + Deprecate LocaleUtils 0-argument constructor.
    + Deprecate LockingVisitors 0-argument constructor.
    + Deprecate MemberUtils 0-argument constructor.
    + Deprecate MethodUtils 0-argument constructor.
    + Deprecate NumberUtils 0-argument constructor.
    + Deprecate ObjectUtils 0-argument constructor.
    + Deprecate RandomStringUtils 0-argument constructor.
    + Deprecate RandomUtils 0-argument constructor.
    + Deprecate ReflectionDiffBuilder.ReflectionDiffBuilder(T, T,
    ToStringStyle).
    + Deprecate RegExUtils 0-argument constructor.
    + Deprecate SerializationUtils 0-argument constructor.
    + Deprecate Streams 0-argument constructor.
    + Deprecate StringEscapeUtils 0-argument constructor.
    + Deprecate StringUtils 0-argument constructor.
    + Deprecate Suppliers 0-argument constructor.
    + Deprecate SystemProperties 0-argument constructor.
    + Deprecate ThreadUtils 0-argument constructor.
    + Deprecate TypeUtils 0-argument constructor.
    + Make ArrayFill null-safe.
    + Make ArraySorter null-safe.
    + Make ArrayUtils.removeAll() null-safe.
    + Fix Java version in README.md #1170.
    + StringUtils.stripAccents() should handle ligatures, UTF32
    math blocks, etc. #1201.
    + TypeUtils.toString(Type) StackOverflowError for an inner
    class in the inner class parameterized enclosing class #657.
    Fixes LANG-1524.
    + Deprecate SystemUtils.getUserName(String) in favor of
    SystemProperties.getUserName(Supplier).
    + Make LockVisitor.acceptReadLocked(FailableConsumer)
    null-safe.
    + Make LockVisitor.applyWriteLocked(FailableConsumer)
    null-safe.
    + Make ObjectUtils.getFirstNonNull(Supplier...) null-safe.
    + Make SystemProperties.getLineSeparator(Supplier).
    + StringUtils.stripAccents(String) doesn't handle "\u0111" and
    "\u0110" (Vietnamese) #1216.
    + StringUtils.stripAccents(String) doesn't handle I with bar.
    + StringUtils.stripAccents(String) doesn't handle U with bar.
    + StringUtils.stripAccents(String) doesn't handle T with
    stroke.
    + Fix Javadoc for FluentBitSet.setInclusive(int, int) #1222.
    Fixes LANG-1735.
    + Same Javadoc changes as [TEXT-234] #1223.
    + Remove duplicate static data in
    SerializationUtils.ClassLoaderAwareObjectInputStream.
    + Reimplement RandomUtils and RandomStringUtils on top of
    SecureRandom#getInstanceStrong() #1235.
    + DiffBuilder: Type constraint for method append(...,
    DiffResult) too strict #786. Fixes LANG-1657.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Update to 3.17.0
  * New features:
  * RandomUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * RandomStringUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * Remove unused exception from deprecated
    StringUtils.toString(byte[], String).
  * Make RandomUtils.insecure() public.
  * Add RandomUtils.secureStrong().
  * Add RandomStringUtils.secureStrong().
  * Add CalendarUtils.toLocalDateTime(Calendar).
  * Add CalendarUtils.toLocalDateTime().
  * Add CalendarUtils.toZonedDateTime(Calendar).
  * Add CalendarUtils.toZonedDateTime().
  * Add CalendarUtils.toOffsetDateTime(Calendar).
  * Add CalendarUtils.toOffsetDateTime().
  * Fixed Bugs:
  * LANG-1760: Using RandomStringUtils.insecure() still leads to
    using the secure() random.
  * Deprecate static RandomUtils.next*() methods in favor or
    .secure() and .insecure() versions.
  * Deprecate static RandomStringUtils.random*() methods in favor
    or .secure() and .insecure() versions.
  * Changes:
  * Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1255.
  * Bump org.easymock:easymock from 5.3.0 to 5.4.0 #1256.
  * Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
    [#1262], #1264.
  * Bump org.apache.commons:commons-parent from 72 to 73 #1265.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Update to 3.18.0
  * New features:
    + Add Strings and refactor StringUtils
    + LANG-1747: Add StopWatch.run([Failable]Runnable) and
    get([Failable]Supplier)
    + Add JavaVersion.JAVA_23
    + Add JavaVersion.JAVA_24
    + Add SystemUtils.IS_JAVA_23
    + Add SystemUtils.IS_JAVA_24
    + Add IntegerRange.toIntStream()
    + Add LongRange.toLongStream()
    + Add IntStrams.of(int...)
    + Add ArrayUtils.containsAny(int[], int...)
    + Add CalendarUtils.toLocalDate() #725
    + Add SystemUtils.IS_OS_MAC_OSX_SEQUOIA
    + Add BasicThreadFactory.builder() and deprecate
    BasicThreadFactory.Builder()
    + Add BasicThreadFactory.daemon()
    + Add ArrayUtils.startsWith
    + Add Predicates
    + Add RegExUtils methods typed to CharSequence input and
    deprecate old versions typed to String
    + Add IterableStringTokenizer
    + Add FailableIntToFloatFunction
    + Add Validate.isTrue(boolean, Supplier&lt;String&gt;)
    + Add EnumUtils.getFirstEnum(Class&lt;E&gt;, int, ToIntFunction&lt;E&gt;, E)
    + Add FailableToBooleanFunction
    + Add the @FunctionalInterface annotation to
    org.apache.commons.lang3.concurrent.Computable
    + Add SystemUtils.getJavaIoTmpDirPath()
    + Add SystemUtils.getJavaHomePath()
    + Add SystemUtils.getUserDirPath()
    + Add SystemUtils.getUserHomePath()
    + Add ArrayFill.fill(T[], FailableIntFunction))
    + Add SystemProperties.JAVA_SECURITY_DEBUG
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_CONF
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_KDC
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_REAL
    + Add ArrayFill.fill(boolean[], boolean) #1386
    + Add ObjectUtils.getIfNull(Object, Object) and deprecate
    defaultIfNull(Object, Object)
    + org.apache.commons.lang3.mutable.Mutable now extends Supplier
    + Add org.apache.commons.lang3.CharUtils.isHex(char)
    + Add org.apache.commons.lang3.CharUtils.isOctal(char)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .reentrantLockVisitor(Object)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .create(Object, ReentrantLock)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .ReentrantLockVisitor
    + Add builders for LockingVisitors implementations
    + Add EnumSet.stream(Class)
    + Add org.apache.commons.lang3.SystemProperties.isPropertySet(String)
  * Fixed Bugs:
    + Fix flaky FileUtilsWaitForTest.testWaitForNegativeDuration()
    + Pick up exec-maven-plugin version from parent POM
    + Speed up and sanitize StopWatchTest
    + Fix handling of non-ASCII letters and numbers in
    RandomStringUtils #1273
    + Rewrite ClassUtils.getClass(...) without recursion to avoid
    StackOverflowError on very long inputs (bsc#1246397,
    CVE-2025-48924)
    + OSS-Fuzz Issue 42522972: apache-commons-text:
    StringSubstitutorInterpolatorFuzzer: Security exception in
    org.apache.commons.lang3.ClassUtils.getClass
    + Remove trailing whitespace in StopWatch exception messages
    + LANG-1754: Use getAllSuperclassesAndInterfaces() in
    getMatchingMethod() #1289
    + Add details to the ArrayFill Javadoc
    + Add details to the ArraySorter Javadoc
    + Fix broken URL to project location in Maven Central #1296
    + LANG-1753: StringUtils.replaceEachRepeatedly regression in
    3.11+ #1297
    + Use simplified JUnit assertion methods #1298
    + LANG-1682: Javadoc and test: Use Strings.CI.startsWithAny
    method instead #1299
    + Fix NullPointerException in FastDateParser.TimeZoneStrategy
    .setCalendar(FastDateParser, Calendar, String) on Java 23
    + LANG-1757: Fix NullPointerException in MethodUtils
    .getMatchingAccessibleMethod((Class, String, Class...))
    + LANG-1698: Fix StackOverflowError in TypeUtils
    .typeVariableToString(TypeVariable), TypeUtils.toString(Type)
    on Java 17 and up
    + LANG-1511: SystemUtils is missing important documentation
    + Make Failable.run(FailableRunnable) null-safe
    + Make Failable.accept(*) null-safe
    + Improve container detection by mimicking systemd #1323
    + Make LangCollectors.collect(...) null-safe
    + Make LangCollectors.collect(...) null-safe
    + Fix names of UTF-16 surrogate character test fixture
    constants, see also #1326
    + Moditect plugin generates split package warnings
    + LocaleUtils.availableLocaleSet() uses predictable iteration
    order
    + LANG-1759: SerializationUtils.clone(Object) throws
    ClassCastException when called with a Serializable lambda
    + LANG-1759: [StringUtils::indexOfAnyBut] redesign due to
    inconsistent/faulty behavior regarding UTF-16 surrogates #1327
    + Undeprecate ObjectUtils.toString(Object)
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.leftSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.rightSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + LANG-1762: StopWatch methods should not delegate to deprecated
    methods
    + Don't call TypeUtils.toString(Type) on every array item in
    TypeUtils.parameterize[WithOwner](Type, Class, Map, Type&gt;)
    unless required
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Instead of throwing a NullPointerException,
    ArrayUtils.toStringArray(Object[]) should return "null" for
    null elements like ArrayUtils.toStringArray(Object[], String)
    returns its valueForNullElements
    + LANG-1764: Deprecate NumericEntityUnescaper.OPTION in favor of
    Apache Commons Text
    + Several hash collisions in Fraction class
    + LANG-1768: MutableLong and friends should provide better
    parsing exceptions Javadocs
    + Reimplement StringUtils.toCodePoints(CharSequence) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.capitalize(String) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.uncapitalize(String) to use
    java.lang.CharSequence.codePoints()
    + org.apache.commons.lang3.ClassUtils.getCanonicalName(String)
    now throws an IllegalArgumentException for array dimensions
    greater than 255
    + Fix Javadoc typo and improve clarity in defaultIfBlank method
    [#1376]
    + LANG-1773: Apache Commons Lang no longer builds on Android
    [#1381]
    + LANG-1772: Restrict size of cache to prevent overflow errors
    [#1379]
    + LANG-1772: Reimplement
    org.apache.commons.lang3.ClassUtils.hierarchy(Class,
    Interfaces) using an AtomicReference
    + Fix Javadoc code examples in DiffBuilder and
    ReflectionDiffBuilder #1400
    + Fix generics in org.apache.commons.lang3.stream.Streams
    .toArray(Class) signature
    + LANG-1727: EventListenerSupport doesn't document ordering of
    events
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.IS_OS_ANDROID
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtLeast(JavaVersion)
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtMost(JavaVersion)
    + Return the default enum if a SecurityException is caught in
    getEnumSystemProperty()
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .EnumUtils.getEnum(Class, String, E)
    + org.apache.commons.lang3.EnumUtils
    .getFirstEnumIgnoreCase(Class, String, Function, E) now
    returns the given default enum on null enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String, E) now returns the given default enum on null
    enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String) now returns the given default enum on null enumClass
    input
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.equalTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThanOrEqualTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThanOrEqualTo(A)
    + LANG-1776: Use GitHub URL in POM for improved automation
    support</changelog>
</package>
<package pkgid="da4b4017038dc29821f7f20553e4524c335c235db11e7c1c0b91e3c6b461b447567867a30e2c8d2955b8b213eaa9711e7ff0a12f81bc5c39502c11efc75ebf50" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.20.0" rel="160000.1.1"/>
  <changelog author="david.anes@suse.com" date="1640347200">- Updated download URL.
- Update to 3.12.0:
  - New features:
  * Add BooleanUtils.booleanValues().
  * Add BooleanUtils.primitiveValues().
  * Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
  * Add StopWatch.getStopTime().
  * More test coverage for CharSequenceUtils.
  * Add fluent-style ArraySorter.
  * Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
  * Add FailableShortSupplier, handy for JDBC APIs.
  * Add JavaVersion.JAVA_17.
  * Add missing boolean[] join method.
  * Add StringUtils.substringBefore(String, int).
  * Add Range.INTEGER.
  * Add DurationUtils.
  * Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
  * Add and use true and false String constants.
  * Add and use ObjectUtils.requireNonEmpty().
  - Fixed Bugs:
  * Correct implementation of RandomUtils.nextLong(long, long).
  * Restore handling of collections for non-JSON ToStringStyle.
  * ContextedException Javadoc add missing semicolon.
  * Resolve JUnit pioneer transitive dependencies using JUnit BOM.
  * NumberUtilsTest - incorrect types in min/max tests.
  * Improve StringUtils.stripAccents conversion of remaining accents.
  * StringUtils.countMatches - clarify Javadoc.
  * Remove redundant argument from substring call.
  * BigDecimal is created when you pass it the min and max values.
  * ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
  * ArrayUtils contains() and indexOf() fail to handle Float.NaN.
  * Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type&gt;).
  * TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
  * testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
  * Fix Javadoc for SystemUtils.isJavaVersionAtMost().
  * Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
  * Fix formatting of isAnyBlank() and isAnyEmpty().
  * TypeUtils. containsTypeVariables does not support GenericArrayType.
  * Javadoc of some methods incorrectly refers to another method.
  * Refine StringUtils.lastIndexOfIgnoreCase.
  * Refine StringUtils.abbreviate.
  * Refine StringUtils.isNumericSpace.
  * Refine StringUtils.deleteWhitespace.
  * Correction in Javadoc of some methods.
  * Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
  * Correct markup in Javadoc for unbalanced braces.
  * MethodUtils.invokeMethod NullPointerException in case of null in args list.
  * Fix 2 digit week year formatting.
  * Fix broken Javadoc links to commons-text.
  * Add and use ThreadUtils.sleep(Duration).
  * Add and use ThreadUtils.join(Thread, Duration).
  * Add ObjectUtils.wait(Duration).
  - Changes:
  * ArrayUtils.toPrimitive(Object) does not support boolean and other types.
  * Enable Dependabot.
  * Bump junit-jupiter from 5.6.2 to 5.7.0.
  * Bump spotbugs from 4.1.2 to 4.2.1.
  * Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
  * Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
  * Bump junit-pioneer from 0.6.0 to 1.1.0.
  * Bump checkstyle from 8.34 to 8.40.
  * Bump actions/checkout from v2.3.1 to v2.3.4.
  * Bump actions/setup-java from v1.4.0 to v1.4.2.
  * Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
  * Update maven-surefire-plugin 2.22.2 -&gt; 3.0.0-M5.
  * Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
  * Bump jmh.version from 1.21 to 1.27.
  * Update commons.japicmp.version 0.14.3 -&gt; 0.15.2.
  * Processor.java: check enum equality with == instead of .equals() method.
  * Bump junit-pioneer from 1.1.0 to 1.3.0.
  * Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
  * Bump actions/cache from v2 to v2.1.4.
  * Bump junit-bom from 5.7.0 to 5.7.1.
  * Minor Improvements.
  * Minor Improvement: Add final variable.try to make the code read-only.
  * Minor Improvement: Remove redundant initializer.
  * Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
  - New features:
  * Add ArrayUtils.isSameLength() to compare more array types.
  * Added the Locks class as a convenient possibility to deal with locked objects.
  * Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
  * Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
  * Add JavaVersion enum constants for Java 14 and 15.
  * Add JavaVersion enum constants for Java 16.
  * Use Java 8 lambdas and Map operations.
  * Change removeLastFieldSeparator to use endsWith.
  * Change a Pattern to a static final field, for not letting it compile each time the function invoked.
  * Add ImmutablePair factory methods left() and right().
  * Add ObjectUtils.toString(Object, Supplier&lt;String&gt;).
  * Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
  * Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
  - Fixed Bugs:
  * Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
  * Refine Javadoc.
  * Fix typos
  * Ignored exception 'ignored', should not be called so.
  * StringUtils.replaceEachRepeatedly gives IllegalStateException.
  * [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
  * Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
  * Add allNull() and anyNull() methods to ObjectUtils.
  - Changes:
  * Refine test output for FastDateParserTest
  * CharSequenceUtils.lastIndexOf : remake it
  * remove encoding and docEncoding and use inherited values from commons-parent
  * Simplify null checks in Pair.hashCode() using Objects.hashCode().
  * Simplify null checks in Triple.hashCode() using Objects.hashCode().
  * Simplify some if statements in StringUtils.
  * Simplify a null check in the private replaceEach() method of StringUtils.
  * Replace some usages of the ternary operator with calls to Math.max() and Math.min().
  * (Javadoc) Fix return tag for throwableOf*() methods.
  * CharSequenceUtils.regionMatches is wrong dealing with Georgian.
  * Optimize ArrayUtils::isArrayIndexValid method.
  * Use List.sort instead of Collection.sort.
  * Use StandardCharsets.UTF_8.
  * Use Collections.singletonList insteadof Arrays.asList when there be only one element.
  * Change array style from 'int a[]' to 'int[] a'.
  * Change from addAll to constructors for some List.
  * Simplify if as some conditions are covered by others.
  * Fixed Javadocs for setTestRecursive().
  * ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
  * Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
  * org.apache.commons:commons-parent 50 -&gt; 51.
  * org.junit-pioneer:junit-pioneer 0.5.4 -&gt; 0.6.0.
  * org.junit.jupiter:junit-jupiter 5.6.0 -&gt; 5.6.2.
  * com.github.spotbugs:spotbugs 4.0.0 -&gt; 4.0.6.
  * com.puppycrawl.tools:checkstyle 8.29 -&gt; 8.34.
  * commons.surefire.version 3.0.0-M4 -&gt; 3.0.0-M5..
- From 3.10 Update:
  - New features:
  * Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
  * Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
  * Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
  * Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
  * Add ArrayUtils.addFirst() methods.
  * Add Range.fit(T) to fit a value into a range.
  * Added Functions.as*, and tests thereof, as suggested by Peter Verhas
  * Add getters for lhs and rhs objects in DiffResult.
  * Generify builder classes Diffable, DiffBuilder, and DiffResult.
  * Add ClassLoaderUtils with toString() implementations.
  * Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
  * Add org.apache.commons.lang3.time.Calendars.
  * Add EnumUtils getEnum() methods with default values.
  * Added indexesOf methods and simplified removeAllOccurences.
  * Add support of lambda value evaluation for defaulting methods.
  * Add factory methods to Pair classes with Map.Entry input.
  * Add StopWatch convenience APIs to format times and create a simple instance.
  * Allow a StopWatch to carry an optional message.
  * Add ComparableUtils.
  * Add org.apache.commons.lang3.SystemUtils.getUserName().
  * Add ObjectToStringComparator.
  * Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
  * Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
  * ObjectUtils: Get first non-null supplier value.
  * Added the Streams class, and Functions.stream() as an accessor thereof.
  - Fixed Bugs:
  * Make test more stable by wrapping assertions in hashset.
  * Generate Javadoc jar on build.
  * Trivial: year of release for 3.9 says 2018, should be 2019.
  * Use synchronize on a set created with Collections.synchronizedSet before iterating.
  * StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
  * StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
  * StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
  * Corrected usage examples in Javadocs.
  * StringUtils abbreviate returns String of length greater than maxWidth.
  * Test may fail due to a different order of fields returned by reflection api.
  * Sort fields in ReflectionToStringBuilder for deterministic order.
  * MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
  * MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
  - Changes:
  * Remove redundant if statements in join methods.
  * commons.japicmp.version 0.13.1 -&gt; 0.14.1.
  * junit-jupiter 5.5.0 -&gt; 5.5.1.
  * junit-jupiter 5.5.1 -&gt; 5.5.2.
  * Improve Javadoc based on the discussion of the GitHub PR.
  * maven-checkstyle-plugin 3.0.0 -&gt; 3.1.0.
  * Update documentation related to the issue LANG-696.
  * AnnotationUtils little cleanup.
  * Update test dependency: org.easymock:easymock 4.0.2 -&gt; 4.1.
  * Update test dependency: org.hamcrest:hamcrest 2.1 -&gt; 2.2.
  * Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -&gt; 0.4.2.
  * Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -&gt; 8.27.
  * Update POM parent: org.apache.commons:commons-parent 48 -&gt; 50.
  * BooleanUtils Javadoc.
  * Functions Javadoc.
  * org.easymock:easymock 4.1 -&gt; 4.2.
  * org.junit-pioneer:junit-pioneer 0.4.2 -&gt; 0.5.4.
  * org.junit.jupiter:junit-jupiter 5.5.2 -&gt; 5.6.0.
  * Use Javadoc {@code} instead of pre tags.
  * ExceptionUtilsTest to 100%.
  * Reuse own code in Functions.java.
  * Avoid unnecessary allocation in StringUtils.wrapIfMissing.
  * Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
  * Add 1 and 0 in toBooleanObject(final String str).
  * Remove an redundant argument check in NumberUtils.
  * Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Fix component version in default.properties to 3.12</changelog>
  <changelog author="pmonreal@suse.com" date="1640779201">- Remove the junit bom dependency for now as it breaks the build of
  other packages like log4j.
  * Add apache-commons-lang3-junit-bom.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693396800">- Break cycle with the new bcel
- Removed patch:
  * apache-commons-lang3-junit-bom.patch
    + not needed since we install the pom file using the new
    %%mvn_install_pom macro which sanitizes the pom file to the
    bare runtime dependencies.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Update to 3.14.0:
  * New features:
    + Add Functions#function(Function).
    + Add FailableFunction#function(FailableFunction).
    + Add CalendarUtils.getInstance().
    + Add syntax for optional tokens to DurationFormatUtils.
    + Add ArrayFill.
    + Add FastDateParser.TimeZoneStrategy.TzInfo.toString().
    + Add LocaleUtils.isLanguageUndetermined(Locale).
    + Add ObjectUtils.toString(Supplier&lt;Object&gt;, Supplier&lt;String&gt;).
    + Add LazyInitializer.isInitialized().
    + Add ConcurrentInitializer#isInitialized() #1120.
    + Add Streams.failableStream(T...).
    + Add FailableSupplier.nul().
    + Add Suppliers.nul().
    + Add ExceptionUtils.throwUnchecked(T) where T extends
    Throwable, and deprecate Object version.
    + Add ExceptionUtils.rethrowRuntimeException(T), and deprecate
    rethrow(T).
    + ConcurrentInitializer implementations can now be instantiated
    and configured with allocation and release lambdas.
    Fixes LANG-1716.
    + Add support for RISC-V in ArchUtils #1128. Fixes LANG-1717.
  * Fixed bugs:
    + Rename variable names from 'clss' to 'clazz'.
    + [Javadoc] ComparableUtils'c1' to 'comparable1', 'c2' to
    'comparable2'
    + [Javadoc] Remove 2.1 specific comment #1091.
    + [Javadoc] Fix Incorrect Description in Processor isAarch64()
    [#1093]. Fixes LANG-1704.
    + [Javadoc] Point to right getShortClassName flavor in Javadoc
    for relevant notes #1097.
    + Improve performance of StringUtils.isMixedCase().
    + ThreadUtils find methods should not return null items. Fixes
    LANG-1706.
    + ReflectionToStringBuilder changes in version 3.13.0 has broken
    the logic for overriding classes. Fixes LANG-1710.
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(ClassLoader).
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(URLClassLoader).
    + Return ToStringStyle.nullText instead of NPE for
    ReflectionToStringBuilder.toString().
    + Fix ThresholdCircuitBreaker#checkState().
    + Use ConcurrentInitializer implementations without subclassing.
    + Update critical value for chi-square test.
    + Fix Javadoc syntax errors #1129.
- From 3.13.0 update
  * New features:
    + Add GitHub coverage.yml.
    + Add EnumUtils.getEnumSystemProperty(...).
    + Add TriConsumer.
    + Add and use EnumUtils.getFirstEnumIgnoreCase(Class, String,
    Function, E).
    + Add and use Suppliers.
    + Add and use ArrayUtils.getComponentType(T[]).
    + Add and use ClassUtils.getComponentType(Class&gt;T[]&gt;).
    + Add and use ObjectUtils.getClass(T).
    + Add and use ArrayUtils.newInstance(Class&gt;T&gt;, int).
    + Add and use null-safe Streams.of(T...).
    + Add ClassUtils.comparator().
    + Add and use ThreadUtils.sleepQuietly(Duration).
    + Add and use ArrayUtils.setAll(T[], IntFunction).
    + Add and use ArrayUtils.setAll(T[], Supplier).
    + Add BooleanConsumer.
    + Add IntToCharFunction.
    + Add IntStreams.
    + Add UncheckedFuture.
    + Add UncheckedException.
    + Add UncheckedExecutionException.
    + Add UncheckedTimeoutException.
    + Add UncheckedInterruptedException.
    + Add TimeZones.GMT.
    + Add ObjectUtils.identityHashCodeHex(Object).
    + Add ObjectUtils.hashCodeHex(Object).
    + Add StringUtils.removeStart(String, char).
    + Add null-safe ObjectUtils.isArray(). Fixes LANG-1659.
    + Add ComparableUtils.max(A, A) and ComparableUtils.min(A, A).
    + Add UncheckedReflectiveOperationException.
    + Add and use ClassUtils.isPublic(Class).
    + Add UncheckedIllegalAccessException.
    + Add MethodInvokers.
    + Add Streams.nullSafeStream(Collection).
    + Add Streams.toStream(Collection).
    + Add Streams.failableStream(Collection) and deprecate misnamed
    stream(Collection).
    + Add Streams.failableStream(Stream) and deprecate misnamed
    stream(Stream).
    + Add EnumUtils.getEnumMap(Class, Function).
    + Add FluentBitSet.
    + Add Streams.instancesOf(Class, Collection).
    + Add ImmutablePair.ofNonNull(L, R).
    + Add ImmutableTriple.ofNonNull(L, M, R).
    + Add MutablePair.ofNonNull(L, R).
    + Add MutableTriple.ofNonNull(L, M, R).
    + Add Pair.ofNonNull(L, R).
    + Add Triple.ofNonNull(L, M, R).
    + Add ArrayUtils.containsAny(Object[], Object...).
    + Add Processor.Type.AARCH_64.
    + Add Processor.isAarch64().
    + Update ArchUtils.getProcessor(String) for "aarch64".
    + Add JavaVersion.JAVA_18.
    + Add JavaVersion.JAVA_19.
    + Add JavaVersion.JAVA_20.
    + Add JavaVersion.JAVA_21.
    + Add TimeZones.toTimeZone(TimeZone).
    + Add FutureTasks.
    + Add Memoizer(Function) and Memoizer(Function, boolean).
    + Add Consumers.
    + Add github/codeql-action.
    + Add coverage.yml.
    + Add DurationUtils.since(Temporal).
    + Add DurationUtils.of(FailableConsumer|FailableRunnbale).
    + Add ExceptionUtils.forEach(Throwable, Consumer&lt;Throwable&gt;).
    + Add ExceptionUtils.stream(Throwable).
    + Add ExceptionUtils.getRootCauseStackTraceList(Throwable).
    + Add SystemUtils.IS_OS_WINDOWS_11.
    + Add SystemUtils.IS_JAVA_16.
    + Add SystemUtils.IS_JAVA_17.
    + Add SystemUtils.IS_JAVA_18.
    + Add SystemUtils.IS_JAVA_19.
    + Add SystemUtils.IS_JAVA_20.
    + Add SystemUtils.IS_JAVA_21.
    + Add ArrayUtils.oneHot(). Fixes LANG-1627.
    + Let ReflectionToStringBuilder only reflect given field names.
    Fixes LANG-1662.
    + Add Streams.of(Enumeration&lt;E&gt;).
    + Add Streams.of(Iterable&lt;E&gt;).
    + Add Streams.of(Iterator&lt;E&gt;).
    + Simple support for Optional in ObjectUtils#isEmpty(). Fixes
    LANG-1689.
    + Add Processor.Type.getLabel().
    + Add Processor.toString().
    + Add HashCodeBuilder.equals(Object).
    + Add BooleanUtils.values() and forEach().
    + Add ClassPathUtils.packageToPath(String) and pathToPackage(String)
    + Add CalendarUtils#getDayOfYear()
    + Add NumberRange, DoubleRange, IntegerRange, LongRange.
    + Add missing exception javadoc/tests for some null arguments.
    + Add ClassLoaderUtils.getSystemURLs() and getThreadURLs().
    + Add RegExUtils.dotAll() and dotAllMatcher().
    + Add Pair.accept(FailableBiConsumer).
    + Add Pair.apply(FailableBiFunction).
    + Add ReflectionDiffBuilder.setExcludeFieldNames(...) and
    DiffExclude a... Fixes LANG-1677.
    + Add and ExceptionUtils.isChecked() and isUnchecked(). Fixes
    LANG-1647.
    + Add and use ExceptionUtils.throwUnchecked(throwable).
    + Add LockingVisitors.create(O, ReadWriteLock).
  * Fixed bugs:
    + NumberUtils.createNumber() to recognize hex integers prefixed
    with +. Fixes LANG-1645.
    + NumberUtils.createNumber() to return requested floating point
    type for zero. Fixes LANG-1646.
    + DMI: Random object created and used only once
    (DMI_RANDOM_USED_ONLY_ONCE); Better multi-threaded behavior.
    + Redundant Collection operation. Use
    Collections.emptyIterator(). Fixes LANG-1646.
    + Make Streams.stream(Collection) null-safe.
    + Allow tests to access java.util classes such as ArrayList in
    Java 16. Fixes LANG-1667.
    + OpenJDK 16 Day Period Parsing. Fixes LANG-1669.
    + Update documentation to list correct exception for null array
    parameters. Fixes LANG-1663.
    + Fixing reversed Javadoc descriptions in StopWatch.
    + Fix typos in JavaDoc. Fixes LANG-1670.
    + Simplify assertions with equivalent but more simple..
    + Avoid multiple equivalent occurrences of the same expression.
    + Remove redundant initializers.
    + Fix ObjectUtils Javadocs.
    + Make Range constructors more generic. Fixes LANG-1674.
    + Use final and Remove redundant String.
    + Use Set instead of List for checking the contains() method.
    + Javadoc for StringUtils.substringBefore(String str,
    int separator) doesn't mention that the separator is an int.
    + Fix NullPointerException in ThreadUtils.getSystemThreadGroup()
    when the current thread is stopped.
    + ArrayUtils.toPrimitive(Boolean...) null array elements map to
    false, like Boolean.parseBoolean(null) and its callers return
    false.
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows.
    + Deprecate Validate#notNull(Object) in favor of using
    Objects#requireNonNull(Object, String).
    + Use TimeZone from calendar in DateFormatUtils. Fixes
    LANG-1462.
    + Updating javadoc for NullPointerException when
    Validate.notNull() is called.
    + Fixing and adding DateUtils exception Javadocs.
    + Improve performance of StringUtils.unwrap(String, String).
    Fixes LANG-1679.
    + Improve performance of StringUtils.join for primitives. Fixes
    LANG-1675.
    + Fixed NPE getting Stack Trace if Throwable is null. Fixes
    LANG-1675.
    + Make Validate.isAssignableFrom() check null inputs.
    + Fix Javadoc for Validate.isAssignableFrom().
    + Make final mappingFunction variable.
    + Remove unnecessary variable creations.
    + Minor changes.
    + FastDateFormat does not support the 'L'-Pattern from
    SimpleDateFormat. Fixes LANG-1680.
    + Increase test coverage of ComparableUtils from 71% to 100%.
    + Increase method test coverage of
    MultilineRecursiveToStringStyle.
    + Fix unstable coverage of CharSequenceUtils tests noticed
    during merge of PRs 898 and 899.
    + Rewrite Conversion.binaryBeMsb0ToHexDigit to invert logic of
    binaryToHexDigit.
    + Allow extension of previously final classes ImmutablePair and
    ImmutableTriple.
    + Update ClassUtils Javadoc with some missing throws NPE.
    + Javadoc: StringUtils.repeat("", "x", 3) = "xx";.
    + StringUtils.join(Iterable, String) should only return null
    when the Iterable is null.
    + Add tests to increase coverage.
    + Extends Object clauses are redundant.
    + Simplify conditional expression..
    + Fix some Javadoc comments.
    + Deprecate getNanosOfMiili() method with typo and create proper
    getNanosOfMilli().
    + Deprecate ThreadUtils code that defines custom function
    interfaces in favor of stock java.util.function.Predicate
    usage.
    + Fix links in Javadoc and documentation.
    + Deprecate RandomUtils in favor of Apache Commons RNG
    UniformRandomProvider. Fixes LANG-1604.
    + Added docs regarding week year support. Fixes LANG-1638.
    + ClassUtils.getShortCanonicalName doesn't use the
    canonicalName. Fixes LANG-1691.
    + Validate: Get error messages without using String.format when
    varargs is empty.
    + Simplify expression (length is never &lt; 0).
    + Fix simple broken javadoc..
    + Fix typo.
    + Use Objects.requireNonNull() directly.
    + MethodUtils.getMatchingMethod() fails with "Found multiple
    candidates". Fixes LANG-1694.
    + Construct ArrayList with better default size. Fixes LANG-1643.
    + ThreadUtilsTest#testThreadGroups will test failed when using
    Junit5 parallel test.
    + Swap the order of assertion args (first excepted then actual).
    + Fix the comment of Failable, redundant "-".
    + Fix the comment of ComparableUtils, using "smallest", not
    "largest".
    + AnnotationUtilsTest and FormattableUtilsTest Only use static
    imports to import assert methods in tests.
    + [LANG-1681] Fix some FieldUtils Javadocs.
    + Remove unnecessary statement in DurationFormatUtils.
    + Corrected value of SystemUtils.JAVA_VENDOR. Fixes LANG-1699.
    + [StepSecurity] ci: Harden GitHub Actions.
    + Update Javadoc for the insert methods in ArrayUtils.
    + Deprecate ExceptionUtils.ExceptionUtils().
    + TypeUtils.getRawType() throws a NullPointerException on
    Wildcard GenericArrayType. Fixes LANG-1697.
    + Throw IllegalArgumentException instead of InternalError in the
    builder package.
    + Avoid NPE in MutableObject#equals() for null content.
    + SystemUtils fix and updates related to macOS.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Update to 3.16.0:
  * New features:
    + Add StopWatch.getSplitDuration() and deprecate
    getSplitTime().
    + Add StopWatch.getStartInstant() and deprecate getStartTime().
    + Add StopWatch.getStopInstant() and deprecate getStopTime().
    + Add StopWatch.getDuration() and deprecate getTime().
    + Add Javadoc links from StopWatch to DurationUtils #1249.
    + Add LangCollectors.collect(Collector, T...).
    + Add RandomStringUtils.secure().
    + Add RandomStringUtils.insecure().
  * Fixed bugs:
    + Reimplement StopWatch internals to use java.time.
    + RandomStringUtils.random() with a negative character index
    should throw IllegalArgumentException. Fixes LANG-1745.
    + LocaleUtils.toLocale(String) cannot parse four segments.
    Fixes LANG-1741.
    + Use fewer intermediary strings in
    DefaultExceptionContext.getFormattedExceptionMessage(String).
    + Fix Javadoc in StringUtils.splitPreserveAllTokens() #1251.
    + Deprecate ArraySort constructor for removal.
    + Deprecate CharEncoding constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate EntityArrays constructor for removal.
    + Deprecate ObjectToStringComparator constructor for removal.
    + Deprecate RuntimeEnvironment constructor for removal.
- Includes changes from 3.15.0:
  * New features:
    + Customize text pattern in DiffResult#toString(). Fixes
    LANG-1724.
    + Add DiffBuilder.Builder.
    + Add DiffBuilder.builder().
    + Add ReflectionDiffBuilder.Builder.
    + Add ReflectionDiffBuilder.builder().
    + Add test in TypeUtilsTest #1151.
    + Add Streams.failableStream(T), non-varargs variant.
    + Add Streams.nonNull(T), non-varargs variant.
    + Add ArrayUtils.nullTo(T[], T[]).
    + Add T ArrayUtils.arraycopy(T, int, T, int, int) fluent style.
    + Add T ArrayUtils.arraycopy(T, int, int, int, Function) fluent
    style.
    + Add SystemUtils.IS_JAVA_22.
    + Add JavaVersion.JAVA_22.
    + Add SystemProperties.getUserName(Supplier&lt;String&gt;).
    + Add SystemProperties.getLineSeparator(Supplier&lt;String&gt;).
    + Add
    + SystemProperties.getJavaSpecificationVersion(Supplier&lt;String&gt;).
    + Add SystemProperties constants and methods for system
    properties as of Java 22.
    + Add MethodUtils.getMethodObject(Class, String, Class...).
    + Add null-safe Consumers.accept() and Functions.apply() #1215.
    Fixes LANG-1733.
    + Add SystemUtils.IS_OS_ANDROID.
    + Add SystemUtils.IS_OS_MAC_OSX_SONOMA.
    + Add RuntimeEnvironment.inContainer() #1241.
    + Add AppendableJoiner and refactor string joining #1244.
  * Fixed bugs:
    + Improve Javadoc in ExceptionUtils #1136.
    + Fixed two non-deterministic tests in EnumUtilsTest.java
    [#1131].
    + Fix wrong number check that cause
    StringIndexOutOfBoundsException #1140. Fixes LANG-1721.
    + Rethrow NegativeArraySizeException as SerializationException
    in SerializationUtils.deserialize(InputStream) #1141. Fixes
    LANG-1722.
    + Throw NumberFormatException instead of
    IndexOutOfBoundsException in NumberUtils.getMantissa(String,
    int) #1145. Fixes LANG-1723.
    + Minor grammar fixes #1143.
    + ArrayUtils will return null when adding two null arrays, but
    undocumented. Fixes LANG-1713.
    + Let parent POM figure out commons.spdx.version.
    + Undeprecate ExceptionUtils.rethrow(Throwable). Fixes
    LANG-1726.
    + Test the Conversion class #1155. Fixes LANG-1702.
    + Address minor redundancies after code inspection #1148.
    + Allow EventListenerSupport to handle (and ignore) exception
    from listeners allowing invocation of all listeners #1167.
    + Deprecate AnnotationUtils 0-argument constructor.
    + Deprecate ArchUtils 0-argument constructor.
    + Deprecate ArrayUtils 0-argument constructor.
    + Deprecate BooleanUtils 0-argument constructor.
    + Deprecate CharSequenceUtils 0-argument constructor.
    + Deprecate CharSetUtils 0-argument constructor.
    + Deprecate CharUtils 0-argument constructor.
    + Deprecate ClassLoaderUtils 0-argument constructor.
    + Deprecate ClassPathUtils 0-argument constructor.
    + Deprecate ClassUtils 0-argument constructor.
    + Deprecate ConstructorUtils 0-argument constructor.
    + Deprecate DateFormatUtils 0-argument constructor.
    + Deprecate DateUtils 0-argument constructor.
    + Deprecate Diff.getType().
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle).
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle,
    boolean).
    + Deprecate DurationFormatUtils 0-argument constructor.
    + Deprecate DurationUtils 0-argument constructor.
    + Deprecate EnumUtils 0-argument constructor.
    + Deprecate EventUtils 0-argument constructor.
    + Deprecate FieldUtils 0-argument constructor.
    + Deprecate IEEE754rUtils 0-argument constructor.
    + Deprecate InheritanceUtils 0-argument constructor.
    + Deprecate IntStreams 0-argument constructor.
    + Deprecate LocaleUtils 0-argument constructor.
    + Deprecate LockingVisitors 0-argument constructor.
    + Deprecate MemberUtils 0-argument constructor.
    + Deprecate MethodUtils 0-argument constructor.
    + Deprecate NumberUtils 0-argument constructor.
    + Deprecate ObjectUtils 0-argument constructor.
    + Deprecate RandomStringUtils 0-argument constructor.
    + Deprecate RandomUtils 0-argument constructor.
    + Deprecate ReflectionDiffBuilder.ReflectionDiffBuilder(T, T,
    ToStringStyle).
    + Deprecate RegExUtils 0-argument constructor.
    + Deprecate SerializationUtils 0-argument constructor.
    + Deprecate Streams 0-argument constructor.
    + Deprecate StringEscapeUtils 0-argument constructor.
    + Deprecate StringUtils 0-argument constructor.
    + Deprecate Suppliers 0-argument constructor.
    + Deprecate SystemProperties 0-argument constructor.
    + Deprecate ThreadUtils 0-argument constructor.
    + Deprecate TypeUtils 0-argument constructor.
    + Make ArrayFill null-safe.
    + Make ArraySorter null-safe.
    + Make ArrayUtils.removeAll() null-safe.
    + Fix Java version in README.md #1170.
    + StringUtils.stripAccents() should handle ligatures, UTF32
    math blocks, etc. #1201.
    + TypeUtils.toString(Type) StackOverflowError for an inner
    class in the inner class parameterized enclosing class #657.
    Fixes LANG-1524.
    + Deprecate SystemUtils.getUserName(String) in favor of
    SystemProperties.getUserName(Supplier).
    + Make LockVisitor.acceptReadLocked(FailableConsumer)
    null-safe.
    + Make LockVisitor.applyWriteLocked(FailableConsumer)
    null-safe.
    + Make ObjectUtils.getFirstNonNull(Supplier...) null-safe.
    + Make SystemProperties.getLineSeparator(Supplier).
    + StringUtils.stripAccents(String) doesn't handle "\u0111" and
    "\u0110" (Vietnamese) #1216.
    + StringUtils.stripAccents(String) doesn't handle I with bar.
    + StringUtils.stripAccents(String) doesn't handle U with bar.
    + StringUtils.stripAccents(String) doesn't handle T with
    stroke.
    + Fix Javadoc for FluentBitSet.setInclusive(int, int) #1222.
    Fixes LANG-1735.
    + Same Javadoc changes as [TEXT-234] #1223.
    + Remove duplicate static data in
    SerializationUtils.ClassLoaderAwareObjectInputStream.
    + Reimplement RandomUtils and RandomStringUtils on top of
    SecureRandom#getInstanceStrong() #1235.
    + DiffBuilder: Type constraint for method append(...,
    DiffResult) too strict #786. Fixes LANG-1657.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Update to 3.17.0
  * New features:
  * RandomUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * RandomStringUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * Remove unused exception from deprecated
    StringUtils.toString(byte[], String).
  * Make RandomUtils.insecure() public.
  * Add RandomUtils.secureStrong().
  * Add RandomStringUtils.secureStrong().
  * Add CalendarUtils.toLocalDateTime(Calendar).
  * Add CalendarUtils.toLocalDateTime().
  * Add CalendarUtils.toZonedDateTime(Calendar).
  * Add CalendarUtils.toZonedDateTime().
  * Add CalendarUtils.toOffsetDateTime(Calendar).
  * Add CalendarUtils.toOffsetDateTime().
  * Fixed Bugs:
  * LANG-1760: Using RandomStringUtils.insecure() still leads to
    using the secure() random.
  * Deprecate static RandomUtils.next*() methods in favor or
    .secure() and .insecure() versions.
  * Deprecate static RandomStringUtils.random*() methods in favor
    or .secure() and .insecure() versions.
  * Changes:
  * Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1255.
  * Bump org.easymock:easymock from 5.3.0 to 5.4.0 #1256.
  * Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
    [#1262], #1264.
  * Bump org.apache.commons:commons-parent from 72 to 73 #1265.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Update to 3.18.0
  * New features:
    + Add Strings and refactor StringUtils
    + LANG-1747: Add StopWatch.run([Failable]Runnable) and
    get([Failable]Supplier)
    + Add JavaVersion.JAVA_23
    + Add JavaVersion.JAVA_24
    + Add SystemUtils.IS_JAVA_23
    + Add SystemUtils.IS_JAVA_24
    + Add IntegerRange.toIntStream()
    + Add LongRange.toLongStream()
    + Add IntStrams.of(int...)
    + Add ArrayUtils.containsAny(int[], int...)
    + Add CalendarUtils.toLocalDate() #725
    + Add SystemUtils.IS_OS_MAC_OSX_SEQUOIA
    + Add BasicThreadFactory.builder() and deprecate
    BasicThreadFactory.Builder()
    + Add BasicThreadFactory.daemon()
    + Add ArrayUtils.startsWith
    + Add Predicates
    + Add RegExUtils methods typed to CharSequence input and
    deprecate old versions typed to String
    + Add IterableStringTokenizer
    + Add FailableIntToFloatFunction
    + Add Validate.isTrue(boolean, Supplier&lt;String&gt;)
    + Add EnumUtils.getFirstEnum(Class&lt;E&gt;, int, ToIntFunction&lt;E&gt;, E)
    + Add FailableToBooleanFunction
    + Add the @FunctionalInterface annotation to
    org.apache.commons.lang3.concurrent.Computable
    + Add SystemUtils.getJavaIoTmpDirPath()
    + Add SystemUtils.getJavaHomePath()
    + Add SystemUtils.getUserDirPath()
    + Add SystemUtils.getUserHomePath()
    + Add ArrayFill.fill(T[], FailableIntFunction))
    + Add SystemProperties.JAVA_SECURITY_DEBUG
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_CONF
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_KDC
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_REAL
    + Add ArrayFill.fill(boolean[], boolean) #1386
    + Add ObjectUtils.getIfNull(Object, Object) and deprecate
    defaultIfNull(Object, Object)
    + org.apache.commons.lang3.mutable.Mutable now extends Supplier
    + Add org.apache.commons.lang3.CharUtils.isHex(char)
    + Add org.apache.commons.lang3.CharUtils.isOctal(char)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .reentrantLockVisitor(Object)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .create(Object, ReentrantLock)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .ReentrantLockVisitor
    + Add builders for LockingVisitors implementations
    + Add EnumSet.stream(Class)
    + Add org.apache.commons.lang3.SystemProperties.isPropertySet(String)
  * Fixed Bugs:
    + Fix flaky FileUtilsWaitForTest.testWaitForNegativeDuration()
    + Pick up exec-maven-plugin version from parent POM
    + Speed up and sanitize StopWatchTest
    + Fix handling of non-ASCII letters and numbers in
    RandomStringUtils #1273
    + Rewrite ClassUtils.getClass(...) without recursion to avoid
    StackOverflowError on very long inputs (bsc#1246397,
    CVE-2025-48924)
    + OSS-Fuzz Issue 42522972: apache-commons-text:
    StringSubstitutorInterpolatorFuzzer: Security exception in
    org.apache.commons.lang3.ClassUtils.getClass
    + Remove trailing whitespace in StopWatch exception messages
    + LANG-1754: Use getAllSuperclassesAndInterfaces() in
    getMatchingMethod() #1289
    + Add details to the ArrayFill Javadoc
    + Add details to the ArraySorter Javadoc
    + Fix broken URL to project location in Maven Central #1296
    + LANG-1753: StringUtils.replaceEachRepeatedly regression in
    3.11+ #1297
    + Use simplified JUnit assertion methods #1298
    + LANG-1682: Javadoc and test: Use Strings.CI.startsWithAny
    method instead #1299
    + Fix NullPointerException in FastDateParser.TimeZoneStrategy
    .setCalendar(FastDateParser, Calendar, String) on Java 23
    + LANG-1757: Fix NullPointerException in MethodUtils
    .getMatchingAccessibleMethod((Class, String, Class...))
    + LANG-1698: Fix StackOverflowError in TypeUtils
    .typeVariableToString(TypeVariable), TypeUtils.toString(Type)
    on Java 17 and up
    + LANG-1511: SystemUtils is missing important documentation
    + Make Failable.run(FailableRunnable) null-safe
    + Make Failable.accept(*) null-safe
    + Improve container detection by mimicking systemd #1323
    + Make LangCollectors.collect(...) null-safe
    + Make LangCollectors.collect(...) null-safe
    + Fix names of UTF-16 surrogate character test fixture
    constants, see also #1326
    + Moditect plugin generates split package warnings
    + LocaleUtils.availableLocaleSet() uses predictable iteration
    order
    + LANG-1759: SerializationUtils.clone(Object) throws
    ClassCastException when called with a Serializable lambda
    + LANG-1759: [StringUtils::indexOfAnyBut] redesign due to
    inconsistent/faulty behavior regarding UTF-16 surrogates #1327
    + Undeprecate ObjectUtils.toString(Object)
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.leftSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.rightSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + LANG-1762: StopWatch methods should not delegate to deprecated
    methods
    + Don't call TypeUtils.toString(Type) on every array item in
    TypeUtils.parameterize[WithOwner](Type, Class, Map, Type&gt;)
    unless required
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Instead of throwing a NullPointerException,
    ArrayUtils.toStringArray(Object[]) should return "null" for
    null elements like ArrayUtils.toStringArray(Object[], String)
    returns its valueForNullElements
    + LANG-1764: Deprecate NumericEntityUnescaper.OPTION in favor of
    Apache Commons Text
    + Several hash collisions in Fraction class
    + LANG-1768: MutableLong and friends should provide better
    parsing exceptions Javadocs
    + Reimplement StringUtils.toCodePoints(CharSequence) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.capitalize(String) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.uncapitalize(String) to use
    java.lang.CharSequence.codePoints()
    + org.apache.commons.lang3.ClassUtils.getCanonicalName(String)
    now throws an IllegalArgumentException for array dimensions
    greater than 255
    + Fix Javadoc typo and improve clarity in defaultIfBlank method
    [#1376]
    + LANG-1773: Apache Commons Lang no longer builds on Android
    [#1381]
    + LANG-1772: Restrict size of cache to prevent overflow errors
    [#1379]
    + LANG-1772: Reimplement
    org.apache.commons.lang3.ClassUtils.hierarchy(Class,
    Interfaces) using an AtomicReference
    + Fix Javadoc code examples in DiffBuilder and
    ReflectionDiffBuilder #1400
    + Fix generics in org.apache.commons.lang3.stream.Streams
    .toArray(Class) signature
    + LANG-1727: EventListenerSupport doesn't document ordering of
    events
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.IS_OS_ANDROID
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtLeast(JavaVersion)
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtMost(JavaVersion)
    + Return the default enum if a SecurityException is caught in
    getEnumSystemProperty()
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .EnumUtils.getEnum(Class, String, E)
    + org.apache.commons.lang3.EnumUtils
    .getFirstEnumIgnoreCase(Class, String, Function, E) now
    returns the given default enum on null enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String, E) now returns the given default enum on null
    enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String) now returns the given default enum on null enumClass
    input
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.equalTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThanOrEqualTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThanOrEqualTo(A)
    + LANG-1776: Use GitHub URL in POM for improved automation
    support</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to 3.19.0
  * New features:
    + Add ArrayUtils.SOFT_MAX_ARRAY_LENGTH
    + Add SystemUtils.IS_OS_NETWARE
    + Add MethodUtils.getAccessibleMethod(Class, Method)
    + Add documentation to site for CVE-2025-48924
    ClassUtils.getClass(...) can throw a StackOverflowError on
    very long inputs
    + Add StringUtils.indexOfAny(CharSequence, int, char...)
    + Add ConcurrentException.ConcurrentException(String)
    + Add DateUtils.toLocalDateTime(Date[, TimeZone])
    + Add DateUtils.toOffsetDateTime(Date[, TimeZone])
    + Add DateUtils.toZonedDateTime(Date[, TimeZone])
    + Add ByteConsumer
    + Add ByteSupplier
    + Add FailableByteConsumer
    + Add FailableByteSupplier
    + LANG-1784: Add Functions methods for null-safe mapping and
    chaining
    + LANG-1784: Add Failable methods for null-safe mapping and
    chaining
    + Add DoubleRange.fit(double)
    + Add IntegerRange.fit(int)
    + Add LongRange.fit(long)
    + Add DurationUtils.get(String, TemporalUnit, long)
    + Add DurationUtils.getMillis(String, long)
    + Add DurationUtils.getSeconds(String, long)
    + Add SystemProperties.getBoolean(Class, String, boolean)
    + Add SystemProperties.getInt(Class, String, int)
    + Add SystemProperties.getLong(Class, String, long)
  * Fixed Bugs:
    + LANG-1778: MethodUtils.getMatchingMethod() doesn't respect the
    hierarchy of methods
    + MethodUtils.getMethodObject(Class&lt;?&gt;, String, Class&lt;?&gt;...) now
    returns null instead of throwing a NullPointerException, as it
    does for other exception types
    + Reduce spurious failures in ArrayUtilsTest methods that test
    ArrayUtils.shuffle() methods
    + MethodUtils cannot find or invoke a public method on a public
    class implemented in its package-private superclass
    + AtomicSafeInitializer.get() can spin internally if the
    FailableSupplier given to AbstractConcurrentInitializer
    .AbstractBuilder.setInitializer(FailableSupplier) throws a
    RuntimeException
    + LANG-1783: WordUtils.containsAllWords?() may throw
    PatternSyntaxException
    + LANG-1782: MethodUtils cannot find or invoke vararg methods
    without providing vararg types or values
    + MethodUtils cannot find or invoke vararg methods of interface
    types
    + MethodUtils cannot find or invoke vararg methods when widening
    primitive types following the JLS 5.1.2. Widening Primitive
    Conversion
    + LANG-1597: Invocation fails because matching varargs method
    found but then discarded
    + Don't check accessibility twice in MemberUtils
    .setAccessibleWorkaround(T)
    + LANG-1774: Improve handling of ClassUtils
    .getShortCanonicalName() for invalid input
    + LANG-1720: Improve Javadocs for Conversion
    + Fix CalendarUtils.toLocalDate() Javadoc return type
    description
    + Fix the method name in Javadoc examples for CharUtils.isHex()
    + Deprecate NumberUtils.compare(byte, byte) in favor of
    Byte.compare(byte, byte)
    + Deprecate NumberUtils.compare(int, int) in favor of
    Integer.compare(int, int)
    + Deprecate NumberUtils.compare(long, long) in favor of
    Long.compare(long, long)
    + Deprecate NumberUtils.compare(short, short) in favor of
    Short.compare(short, short)
    + Deprecate obsolete system property constant
    SystemProperties.AWT_TOOLKIT
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_FONTS
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_GRAPHICSENV
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_HEADLESS
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_AWT_PRINTERJOB
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_COMPILER
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_ENDORSED_DIRS
    + Deprecate obsolete system property constant
    SystemProperties.JAVA_EXT_DIRS
    + Deprecate method for obsolete system property constant
    SystemProperties.getAwtToolkit()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtFonts()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtGraphicsenv()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtHeadless()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaAwtPrinterjob()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaCompiler()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaEndorsedDirs()
    + Deprecate method for obsolete system property constant
    SystemProperties.getJavaExtDirs()
    + Deprecate method for obsolete system property constant
    SystemUtils.isJavaAwtHeadless()
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_FONTS
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_GRAPHICSENV
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_HEADLESS
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_AWT_PRINTERJOB
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_COMPILER
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_ENDORSED_DIRS
    + Deprecate constants for obsolete system property
    SystemUtils.JAVA_EXT_DIRS
    + [javadoc] General improvements
    + [javadoc] Fix thrown exception documentation for
    MethodUtils.getMethodObject(Class&lt;?&gt;, String, Class&lt;?&gt;...)
    + [javadoc] Strings::equalsAny: CI doc string should show it's
    insensitive
    + [javadoc] General Javadoc improvements
    + LANG-1780: [javadoc] Fix Strings Javadoc
    + [javadoc] Fix typo in Javadoc of Strings instances
    + [javadoc] Fix Javadocs in ClassUtils
    + [javadoc] Fix @deprecated link for StringUtils#startsWithAny
    + Replace old feather logotype with new oak logotype
  * Changes:
    + [test] Bump org.apache.commons:commons-text from 1.13.1 to
    1.14.0
    + Bump org.apache.commons:commons-parent from 85 to 88</changelog>
  <changelog author="fstrba@suse.com" date="1778500801">- Update to 3.20.0
  * New features:
    + Add SystemProperties.getPath(String, Supplier&lt;Path&gt;)
    + Add JavaVersion.JAVA_25
    + Add JavaVersion.JAVA_26
    + Add SystemUtils.IS_JAVA_25
    + Add SystemUtils.IS_JAVA_26
    + Add MutablePair.ofNonNull(Map.Entry)
    + Add TimedSemaphore.builder(), Builder, and deprecate
    constructors
    + LANG-1504: Adding labels and history to split StopWatch
  * Fixed Bugs:
    + Optimize ObjectToStringComparator.compare() method
    + [javadoc] Improve StringUtils Javadoc
    + Fix internal inverted logic in private isEnum() method and
    correct its usage in getFirstEnum()
    + Use accessors in ToStringStyle so subclasses can effectively
    override them
    + 'LocaleUtils.toLocale(String)' for a 2 letter country code
    now returns a value instead of throwing an
    'IllegalArgumentException'
    + Fix typo in StringUtils.trunctate() IllegalArgumentException
    message and test assertion messages
    + Fix test fixture in
    ReflectionDiffBuilderTest.testTransientFieldDifference()
    + LANG-1789: NullPointerException when generating
    NoSuchMethodException in MethodUtils
    + LANG-1786: Map deprecated TimeZone short IDs and avoid JRE
    WARNINGs to the console
    + LANG-1792: TypeUtils.toString() skips angle brackets for Class
    type
    + Mention JDK 25 LTS as a tested version in the release notes
  * Changes:
    + Bump org.apache.commons:commons-parent from 88 to 92</changelog>
</package>
<package pkgid="f85bba43b3e58c73a60370ecd1c485f5182481917a831da96d1d4faf4fb95267f182c24b7b18f4eb2f610e05a252468288b8cf0bb1299bb0d09965bb78c5e712" name="apache-commons-logging" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1548676800">- Added patch:
  * commons-logging-manifests.patch
    + Different Bundle-SymbolicName for different jars</changelog>
  <changelog author="fstrba@suse.com" date="1549454400">- Build against glassfish-servlet-api</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven
- Use the pom.xml distributed with the package instead of
  downloading the same file as a separate source</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility log4j12-mini package</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Added patch
  * no-tests.patch
    + ignore failing tests for arm6</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Disable tests everywhere, not only for arm6</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Upgrade to 1.3.3
  * Bug Fixes:
    + * LOGGING-193: Update Log4j 2 OSGi imports #268.
    + * Fix PMD UnnecessaryFullyQualifiedName in SimpleLog.
    + * Fix NullPointerException in SimpleLog#write(Object) on null
    input.
    + Fix NullPointerException in SimpleLog#write(StringBuffer) on
    null input.
- Includes changes from 1.3.2
  * Fixed Bugs
    + LOGGING-190: Add OSGi metadata to enable Service Loader
    Mediator #234.
    + LOGGING-191: Apache commons logging shows 1.4 as latest
    release instead of 1.3.1.
    + Deprecate
    org.apache.commons.logging.LogSource.jdk14IsAvailable.
- Includes changes from 1.3.1
  * New features
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
  * Fixed Bugs
    + Remove references to very old JDK and Commons Logging
    versions #201.
    + Update from Logj 1 to the Log4j 2 API compatibility layer
    [#231].
    + Allow Servlet 4 in OSGi environment #191.
    + Fix generics warnings #213.
    + LOGGING-189: Fix Import-Package entry for org.slf4j #188.
- Includes changes from 1.3.0
  * New Features:
    + Add support for Log4j API and SLF4J #177.
    + Deprecate org.apache.commons.logging.impl.WeakHashtable
    without replacement.  LOGGING-188: Deprecate and disable
    `Jdk13LumberjackLogger` and `Log4JLogger`.  LOGGING-173:
    + Deprecate and disable `AvalonLogger` and `LogKitLogger`.
    + LOGGING-165: Add Automatic-Module-Name Manifest Header for
    Java 9 compatibility.
  * Fixed Bugs:
    + LOGGING-163: BufferedReader is not closed properly.
    + LOGGING-177: Remove redundant initializer #46
    + Use a weak reference for the cached class loader #71.
    + Add more entries to .gitignore file #25.
    + Minor Improvements #34.
    + [StepSecurity] ci: Harden GitHub Actions #145.
    + LOGGING-185: Replace custom code with `ServiceLoader` call.
    + Fix possible NPEs in LogFactoryImpl.
    + LOGGING-185: Fix failing tests #180.
    + Deprecate LogConfigurationException.cause in favor of
    getCause().
    + Fix SpotBugs [ERROR] High: Found reliance on default encoding
    in org.apache.commons.logging.LogFactory.initDiagnostics():
    new java.io.PrintStream(OutputStream)
    [org.apache.commons.logging.LogFactory] At
    LogFactory.java:[line 1205] DM_DEFAULT_ENCODING.
    + Fix SpotBugs [ERROR] Medium: Class
    org.apache.commons.logging.impl.WeakHashtable defines
    non-transient non-serializable instance field queue
    [org.apache.commons.logging.impl.WeakHashtable] In
    WeakHashtable.java SE_BAD_FIELD.
    + Set java.logging as optional module #183.
    + Fix SpotBugs [ERROR] Medium: Switch statement found in
    org.apache.commons.logging.impl.SimpleLog.log(int, Object,
    Throwable) where default case is missing
    [org.apache.commons.logging.impl.SimpleLog] At
    SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT.
    + Deprecate
    org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel
    without replacement.
- Remove deprecated patch files:
  * commons-logging-1.1.3-src-junit.diff
  * commons-logging-1.2-sourcetarget.patch
  * commons-logging-manifests.patch
  * no-tests.patch
- Reinstate ant build (removed upstream)
  * add build.xml
  * add build.properties
- Remove unnecessary dependencies
  * add commons-logging-1.3.3-dependencies.patch
- Add upstream dev's public key to apache-commons-logging.keyring</changelog>
  <changelog author="fstrba@suse.com" date="1730203200">- Upgrade to 1.3.4
  * Bug fix:
    + LOGGING-192: Fix factory loading from context class
    loader #280, #281.</changelog>
</package>
<package pkgid="5cab8744fd51a15e46ad3bd53313d13f057a69e8a9ec7840afad1b8387882f870597c61c62c258dd1b570ae38cd271c016cd377015f93cb2addc52dd924aba21" name="apache-commons-logging" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1549454400">- Build against glassfish-servlet-api</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven
- Use the pom.xml distributed with the package instead of
  downloading the same file as a separate source</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility log4j12-mini package</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Added patch
  * no-tests.patch
    + ignore failing tests for arm6</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Disable tests everywhere, not only for arm6</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Upgrade to 1.3.3
  * Bug Fixes:
    + LOGGING-193: Update Log4j 2 OSGi imports #268.
    + Fix PMD UnnecessaryFullyQualifiedName in SimpleLog.
    + Fix NullPointerException in SimpleLog#write(Object) on null
    input.
    + Fix NullPointerException in SimpleLog#write(StringBuffer) on
    null input.
- Includes changes from 1.3.2
  * Fixed Bugs
    + LOGGING-190: Add OSGi metadata to enable Service Loader
    Mediator #234.
    + LOGGING-191: Apache commons logging shows 1.4 as latest
    release instead of 1.3.1.
    + Deprecate
    org.apache.commons.logging.LogSource.jdk14IsAvailable.
- Includes changes from 1.3.1
  * New features
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
  * Fixed Bugs
    + Remove references to very old JDK and Commons Logging
    versions #201.
    + Update from Logj 1 to the Log4j 2 API compatibility layer
    [#231].
    + Allow Servlet 4 in OSGi environment #191.
    + Fix generics warnings #213.
    + LOGGING-189: Fix Import-Package entry for org.slf4j #188.
- Includes changes from 1.3.0
  * New Features:
    + Add support for Log4j API and SLF4J #177.
    + Deprecate org.apache.commons.logging.impl.WeakHashtable
    without replacement.  LOGGING-188: Deprecate and disable
    `Jdk13LumberjackLogger` and `Log4JLogger`.  LOGGING-173:
    + Deprecate and disable `AvalonLogger` and `LogKitLogger`.
    + LOGGING-165: Add Automatic-Module-Name Manifest Header for
    Java 9 compatibility.
  * Fixed Bugs:
    + LOGGING-163: BufferedReader is not closed properly.
    + LOGGING-177: Remove redundant initializer #46
    + Use a weak reference for the cached class loader #71.
    + Add more entries to .gitignore file #25.
    + Minor Improvements #34.
    + [StepSecurity] ci: Harden GitHub Actions #145.
    + LOGGING-185: Replace custom code with `ServiceLoader` call.
    + Fix possible NPEs in LogFactoryImpl.
    + LOGGING-185: Fix failing tests #180.
    + Deprecate LogConfigurationException.cause in favor of
    getCause().
    + Fix SpotBugs [ERROR] High: Found reliance on default encoding
    in org.apache.commons.logging.LogFactory.initDiagnostics():
    new java.io.PrintStream(OutputStream)
    [org.apache.commons.logging.LogFactory] At
    LogFactory.java:[line 1205] DM_DEFAULT_ENCODING.
    + Fix SpotBugs [ERROR] Medium: Class
    org.apache.commons.logging.impl.WeakHashtable defines
    non-transient non-serializable instance field queue
    [org.apache.commons.logging.impl.WeakHashtable] In
    WeakHashtable.java SE_BAD_FIELD.
    + Set java.logging as optional module #183.
    + Fix SpotBugs [ERROR] Medium: Switch statement found in
    org.apache.commons.logging.impl.SimpleLog.log(int, Object,
    Throwable) where default case is missing
    [org.apache.commons.logging.impl.SimpleLog] At
    SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT.
    + Deprecate
    org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel
    without replacement.
- Remove deprecated patch files:
  * commons-logging-1.1.3-src-junit.diff
  * commons-logging-1.2-sourcetarget.patch
  * commons-logging-manifests.patch
  * no-tests.patch
- Reinstate ant build (removed upstream)
  * add build.xml
  * add build.properties
- Remove unnecessary dependencies
  * add commons-logging-1.3.3-dependencies.patch
- Add upstream dev's public key to apache-commons-logging.keyring</changelog>
  <changelog author="fstrba@suse.com" date="1730203200">- Upgrade to 1.3.4
  * Bug fix:
    + LOGGING-192: Fix factory loading from context class
    loader #280, #281.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Upgrade to 1.3.5
  * Fixed Bugs
    + Javadoc is missing its Overview page.
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80).
  * Changes
    + Bump org.apache.commons:commons-parent from 72 to 81 #285,
    [#287], #295, #298, #303, #310, #339.
    + Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
    [#288] [test].
    + Bump log4j2.version from 2.23.1 to 2.24.3 #292, #299, #319,
    [#328].
  * Removed:
    + Remove "cobertura" plugin use JaCoco, Cobertura is
    unmaintained.</changelog>
</package>
<package pkgid="7c722cc814628635d1c25bc5987f3529cdcff65098bfae867f291c8fade56481afb6aa8fd129522b87ae6154e4b7787d2c0a66707ca3ad56dd1468a443f31c2f" name="apache-commons-logging" arch="noarch">
  <version epoch="0" ver="1.3.6" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility log4j12-mini package</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Added patch
  * no-tests.patch
    + ignore failing tests for arm6</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Disable tests everywhere, not only for arm6</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Upgrade to 1.3.3
  * Bug Fixes:
    + LOGGING-193: Update Log4j 2 OSGi imports #268.
    + Fix PMD UnnecessaryFullyQualifiedName in SimpleLog.
    + Fix NullPointerException in SimpleLog#write(Object) on null
    input.
    + Fix NullPointerException in SimpleLog#write(StringBuffer) on
    null input.
- Includes changes from 1.3.2
  * Fixed Bugs
    + LOGGING-190: Add OSGi metadata to enable Service Loader
    Mediator #234.
    + LOGGING-191: Apache commons logging shows 1.4 as latest
    release instead of 1.3.1.
    + Deprecate
    org.apache.commons.logging.LogSource.jdk14IsAvailable.
- Includes changes from 1.3.1
  * New features
    + Add Maven property project.build.outputTimestamp for build
    reproducibility.
  * Fixed Bugs
    + Remove references to very old JDK and Commons Logging
    versions #201.
    + Update from Logj 1 to the Log4j 2 API compatibility layer
    [#231].
    + Allow Servlet 4 in OSGi environment #191.
    + Fix generics warnings #213.
    + LOGGING-189: Fix Import-Package entry for org.slf4j #188.
- Includes changes from 1.3.0
  * New Features:
    + Add support for Log4j API and SLF4J #177.
    + Deprecate org.apache.commons.logging.impl.WeakHashtable
    without replacement.  LOGGING-188: Deprecate and disable
    `Jdk13LumberjackLogger` and `Log4JLogger`.  LOGGING-173:
    + Deprecate and disable `AvalonLogger` and `LogKitLogger`.
    + LOGGING-165: Add Automatic-Module-Name Manifest Header for
    Java 9 compatibility.
  * Fixed Bugs:
    + LOGGING-163: BufferedReader is not closed properly.
    + LOGGING-177: Remove redundant initializer #46
    + Use a weak reference for the cached class loader #71.
    + Add more entries to .gitignore file #25.
    + Minor Improvements #34.
    + [StepSecurity] ci: Harden GitHub Actions #145.
    + LOGGING-185: Replace custom code with `ServiceLoader` call.
    + Fix possible NPEs in LogFactoryImpl.
    + LOGGING-185: Fix failing tests #180.
    + Deprecate LogConfigurationException.cause in favor of
    getCause().
    + Fix SpotBugs [ERROR] High: Found reliance on default encoding
    in org.apache.commons.logging.LogFactory.initDiagnostics():
    new java.io.PrintStream(OutputStream)
    [org.apache.commons.logging.LogFactory] At
    LogFactory.java:[line 1205] DM_DEFAULT_ENCODING.
    + Fix SpotBugs [ERROR] Medium: Class
    org.apache.commons.logging.impl.WeakHashtable defines
    non-transient non-serializable instance field queue
    [org.apache.commons.logging.impl.WeakHashtable] In
    WeakHashtable.java SE_BAD_FIELD.
    + Set java.logging as optional module #183.
    + Fix SpotBugs [ERROR] Medium: Switch statement found in
    org.apache.commons.logging.impl.SimpleLog.log(int, Object,
    Throwable) where default case is missing
    [org.apache.commons.logging.impl.SimpleLog] At
    SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT.
    + Deprecate
    org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel
    without replacement.
- Remove deprecated patch files:
  * commons-logging-1.1.3-src-junit.diff
  * commons-logging-1.2-sourcetarget.patch
  * commons-logging-manifests.patch
  * no-tests.patch
- Reinstate ant build (removed upstream)
  * add build.xml
  * add build.properties
- Remove unnecessary dependencies
  * add commons-logging-1.3.3-dependencies.patch
- Add upstream dev's public key to apache-commons-logging.keyring</changelog>
  <changelog author="fstrba@suse.com" date="1730203200">- Upgrade to 1.3.4
  * Bug fix:
    + LOGGING-192: Fix factory loading from context class
    loader #280, #281.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Upgrade to 1.3.5
  * Fixed Bugs
    + Javadoc is missing its Overview page.
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS (from
    org.apache.commons:commons-parent:80).
  * Changes
    + Bump org.apache.commons:commons-parent from 72 to 81 #285,
    [#287], #295, #298, #303, #310, #339.
    + Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
    [#288] [test].
    + Bump log4j2.version from 2.23.1 to 2.24.3 #292, #299, #319,
    [#328].
  * Removed:
    + Remove "cobertura" plugin use JaCoco, Cobertura is
    unmaintained.</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Upgrade to 1.3.6
  * Fixed Bugs
    + Fix running spotbugs:check: Unable to parse configuration of
    mojo
    + Update deprecated call in
    PathableClassLoader.addLogicalLib(String)
    + Fix malformed Javadoc comments
    + Fix log level in Slf4jLogFactory.error(Object, Throwable)
  * Changes
    + Bump org.apache.commons:commons-parent from 81 to 97
    + Bump org.slf4j:slf4j-api from 2.0.16 to 2.0.17
    + Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.13.0
    to 1.14.0
    + Bump log4j2.version from 2.24.3 to 2.25.3
    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0
    + Bump ch.qos.logback:logback-core from 1.3.14 to 1.3.16
- Removed patch:
  * commons-logging-1.3.3-dependencies.patch
    + not needed (the two files it is removing can be removed from
    the spec file)</changelog>
  <changelog author="fstrba@suse.com" date="1779192000">- No need to verify sources during the build</changelog>
</package>
<package pkgid="f418e7a40b5194620db3c199ccc07bc3db00d3dc717652115cbec48db2ed6e9852858f6251fc15f5e9d9faf3b4fb8474a34aa014ab643a5ace64990a51fe534c" name="apache-commons-math" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="bp160.1.9"/>
  <changelog author="p.drouand@gmail.com" date="1444392000">- Initial release (version 3.5)</changelog>
  <changelog author="shshyukriev@suse.com" date="1487937600">- Update to version 3.6.1
  * Minor bug fix release</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove needless requires</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying java source and target 1.6
- Added patch:
  * commons-math3-3.6.1-notests.patch
  - Disable unit tests, since they are bound to fail. The new
    methods of java.lang.StrictMath are not implemented in the
    org.apache.commons.math3.utils.FastMath and the unit tests
    bail out.</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Add alias to the maven artifact
- Clean-up the spec file
- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1613044800">- use maven local
- drop commons-math3-3.6.1-notests.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.com&gt;" date="1655640000">- Obsolete apache-commons-math3 package (jsc#SLE-23217)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="f1b4e5ed089351e516d72dfb86e8dcbabe716b97e34a34c0c959e93b7d31410af0c591d712a8c50d82560d1d3415db4015c8bdf6b9e90aa997bb9b16bd78bfb3" name="apache-commons-math-javadoc" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="bp160.1.9"/>
  <changelog author="p.drouand@gmail.com" date="1444392000">- Initial release (version 3.5)</changelog>
  <changelog author="shshyukriev@suse.com" date="1487937600">- Update to version 3.6.1
  * Minor bug fix release</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove needless requires</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying java source and target 1.6
- Added patch:
  * commons-math3-3.6.1-notests.patch
  - Disable unit tests, since they are bound to fail. The new
    methods of java.lang.StrictMath are not implemented in the
    org.apache.commons.math3.utils.FastMath and the unit tests
    bail out.</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Add alias to the maven artifact
- Clean-up the spec file
- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1613044800">- use maven local
- drop commons-math3-3.6.1-notests.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.com&gt;" date="1655640000">- Obsolete apache-commons-math3 package (jsc#SLE-23217)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="9acc2f7c984c7660361c438720f8abd4b3c16159cb76dc9104950b329c06d043b8495871669ee27a99d3373f52af9562b6a032d4a2cf9ff8596d269cc7ffb1dc" name="apache-commons-net" arch="noarch">
  <version epoch="0" ver="3.13.0" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1551528000">- Rename to apache-commons-net
- Upgrade to version 3.6
- Generate and customize the ant build file</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fridrich.strba@bluewin.ch" date="1670241600">- Upgrade to 3.9.0 (Security fixes)
  * Changes in 3.9.0
    + Use yyyy instead of YYYY in SimpleDateFormat #97.
    Fixes NET-708.
    + Prevent serialization of the 4 classes that implement
    Serializable. It is not useful and is unlikely to work
    properly.
    + Use Math.min and Math.max method instead of manual
    calculations. #104.
    + Add FTP option to toggle use of return host like CURL.
    Fixes NET-711, bsc#1206018, CVE-2021-37533.
    + FTPSClient execPROT removes proxy settings #90. Fixes NET-642.
    + JUnit5 assertThrows SimpleSMTPHeaderTestCase #121.
    + JUnit5 assertThrows TestTimeInfo #120.
    + Simplify conditions avoiding extra operations #88.
    + Remove reflection from SSLSocketUtils.
    + Process files with spaces in name for OS400 #95.
    Fixes NET-707.
    + [FTP] Add FTPClient.mdtmInstant(String).
    + [FTP] Add MLSxEntryParser.parseGmtInstant(String).
    + [FTP] Add FTPClient.getControlKeepAliveReplyTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveReplyTimeout(Duration).
    + [FTP] Add FTPClient.getControlKeepAliveTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveTimeout(Duration).
    + [FTP] Add FTPClient.getDataTimeout().
    + [FTP] Add FTPClient.setDataTimeout(Duration).
    + [FTP] Add FTPFile.getTimestampInstant().
  * Changes in 3.8.0
    + Add and use NetConstants.
    + Add and use SocketClient.applySocketAttributes().
    + [FTP] Add FTPClient.hasFeature(FTPCmd).
    + [FTP] Add FTPClient.mdtmCalendar(String).
    + [IMAP] Fix concurrent counting of chunks in IMAPExportMbox.
    + Fix possible if rare NPEs in tests.
    + Update SocketClient default connect timeout from ∞ to 60
    seconds #51. Fixes NET-685.
    + Apply SocketClient timeout after connection but before SSL
    negotiation. Fixes NET-695.
    + Minor Improvements #71, #72.
  * Changes in 3.7.2
    + Host name is not set on the SSLSocket causing
    isEndpointCheckingEnabled to fail. Fixes NET-689.
    + Fix possible socket and input stream leak on socket exception
    in org.apache.commons.net.ftp.FTPClient._retrieveFile(String,
    String, OutputStream).
    + Performance issue when using the FTPClient to retrieve
    files #65. Fixes NET-690.
    + Improve Javadoc for IMAPSClient #68. Fixes NET-691.
  * Changes in 3.7.1
    + [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized
    SSL message, #59. Fixes NET-687.
  * Changes in 3.7
    + IMAPClient.APPEND does not always calculate the correct
    length. Fixes NET-673.
    + ALLO FTP Command for files &gt;2GB. Fixes NET-646.
    + IMAPClient could simplify using empty arguments. Fixes
    NET-615.
    + IMAP fails to quote/encode mailbox names. Fixes NET-614.
    + NPE when closing telnet stream. Fixes NET-643.
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility. Fixes NET-648.
    + SubnetUtils.SubnetInfo.isInRange("0.0.0.0") returns true for
    CIDR/31, 32. Fixes NET-641.
    + Telnet subnegotiations hard-limited to 512 bytes - allow
    override. Fixes NET-638.
    + MVSFTPEntryParser.preParse - MVS, z/OS - allow for merged
    Ext/Used fields. Fixes NET-639.
    + examples should be in org.apache.commons.net subpackage. Fixes
    NET-636.
    + Add SIZE command support. Fixes NET-634.
    + Add POP3ExportMbox example code
    + Add XOAUTH2 to IMAP and SMTP. Fixes NET-633.
    + FTPHTTPClient - support for encoding other than UTF-8. Fixes
    NET-632.
    + Bug in MVSFTPEntryParser.parseUnixList (FindBugs). Fixes
    NET-631.
    + Error when using org.apache.commons.net.ftp.FTPClient
    setControlKeepAliveTimeout. Fixes NET-584.
    + SubnetUtils#SubnetUtils - improved comment. Fixes NET-626.
    + SubnetUtils - improve construction. Fixes NET-625.
    + SubnetInfo#getCidrSignature - improve functions. Fixes
    NET-624.
    + SubnetInfo#toCidrNotation: A wrong format subnet mask is
    allowed. Fixes NET-624.
    + SubnetUtils - fixed spelling errors. Fixes NET-623.
    + SubnetUtils#SubnetInfo - remove unnecessary accessors. Fixes
    NET-621.
    + SubnetUtils - improve binary netmask algorithm. Fixes NET-619.
    + System Information Leak in ftp parser. Fixes NET-613.
    + VMS ftp LIST parsing results in empty file list. Fixes
    NET-678.
    + FTPListParseEngine should support listing via MLSD. Fixes
    NET-674.
    + NullPointerException when FTPClient remote verification fails.
    Fixes NET-663.
    + 227 Entering Passive Mode. Fixes NET-649.
    + Next and Previous IP Address in SubnetUtils.SubnetInfo. Fixes
    NET-660.
    + MVSFTPEntryParser doesn't support Record Formats of U. Fixes
    NET-682.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1782129600">- Upgrade to 3.10.0
  * New features
    +  Add and use DatagramSocketClient.setDefaultTimeout(Duration)
    and deprecate DatagramSocketClient.setDefaultTimeout(int)
    + Add and use TFTP.DEFAULT_TIMEOUT_DURATION and deprecate
    org.apache.commons.net.tftp.TFTP.DEFAULT_TIMEOUT
    + Add and use DatagramSocketClient#getSoTimeoutDuration()
    + Add and use DatagramSocketClient#setSoTimeout(Duration)
    + Add and use DatagramSocketClient.checkOpen()
    + Add TelnetClient.sendAYT(Duration)
    + TFTPServer implements AutoCloseable
    + DatagramSocketClient implements AutoCloseable
    + Add IMAP package tests, include junit-jupiter-params artifact
    [#166]
    + Add Base64 missing tests and documentation fixes #161
    + Add FTPFile tests and fix Javadoc typos #162
    + Add IMAPReply tests and documentation fixes #165
  * Fixed Bugs
    + NET-650: Delegate host resolution to Socket.connect() #138
    + Fixes many grammar issues and typos in JavaDoc and code
    comments #141
    + Remove redundant (null) initializations and other clean ups
    [#155]
    + TFTPServer.setMaxTimeoutRetries() now throws
    IllegalArgumentException instead of RuntimeException
    + TFTPServer.setSocketTimeout() now throws
    IllegalArgumentException instead of RuntimeException
    + FTPCommand.checkArray() now throws IllegalStateException
    instead of RuntimeException
    + org.apache.commons.net.nntp.Threader now throws
    IllegalStateException instead of RuntimeException
    + POP3Command static initializer now throws
    IllegalStateException instead of RuntimeException
    + SMTPCommand static initializer now throws
    IllegalStateException instead of RuntimeException
    + SubnetUtils.SubnetInfo.getPreviousAddress() now throws
    IllegalStateException instead of RuntimeException
    + IMAPExportMbox.MboxListener.chunkReceived(IMAP) now throws
    UncheckedIOException instead of RuntimeException
    + IMAPUtils.imapLogin(URI, int, ProtocolCommandListener) now
    throws IOException instead of RuntimeException while
    maintaining method signature source compatibility
    + [StepSecurity] ci: Harden GitHub Actions #156
    + NET-722: Javadoc for FtpClient
    .setControlKeepAliveReplyTimeout(Duration) says timeout is in
    milliseconds
    + Change class org.apache.commons.net.ftp.parser
    .MVSFTPEntryParser to support more datasets #182
    + Bulletproof TFTPServerPathTest #173
    + Deprecate org.apache.commons.net.util.Base64 in favor of
    java.util.Base64
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.ftp
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.imap
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.pop3
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.smtp
  * Changes
    + Bump commons-parent from 54 to 62 #132, #137, #153
    + Bump commons-io from 2.11.0 to 2.14.0
    + Bump commons-lang3 from 3.12.0 to 3.13.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129601">- Upgrade to 3.11.0
  * New features
    + NET-726: Add protected getters to FTPSClient #204
    + Add SubnetUtils.toString()
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
    + Add FTP.DEFLATE_TRANSFER_MODE to support the "deflate"
    compression format in FTPClient.setFileTransferMode(int)
    + Add org.apache.commons.net.SocketClient.checkOpenOutputStream()
  * Fixed Bugs
    + Precompile regular expression in UnixFTPEntryParser
    .preParse(List&lt;String&gt;)
    + Guard against polynomial regular expression used on
    uncontrolled data in VMSVersioningFTPEntryParser.REGEX
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.TAGGED_RESPONSE
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.UNTAGGED_RESPONSE
    + NET-730: Cannot connect to FTP server with HTTP proxy
    + Base 64 Encoding with URL and Filename Safe Alphabet should
    not chunk per RFC 4648
    + Deprecate org.apache.commons.net.util.Charsets.Charsets() for
    removal
    + Deprecate org.apache.commons.net.util.TrustManagerUtils
    .TrustManagerUtils() for removal
  * Changes
    + Bump commons-parent from 62 to 70 #238
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0,
    [#221]
    + Bump commons-lang3 from 3.13.0 to 3.14.0
    + Bump commons-io from 2.15.0 to 2.16.1 #236, #240</changelog>
  <changelog author="fstrba@suse.com" date="1782129602">- Upgrade to 3.11.1
  * Fixed Bugs
    + Allow longer data in pattern IMAPReply.UNTAGGED_RESPONSE
    + Fix Reproducible Builds issues #259</changelog>
  <changelog author="fstrba@suse.com" date="1782129603">- Upgrade to 3.12.0
  * New features
    + Add org.apache.commons.net.nntp.Article#getChild()
    + Add org.apache.commons.net.nntp.Article#getNext()
    + Add private SubnetAddressStringIterable and private
    SubnetAddressStringIterator to implement
    SubnetInfo.iterableAddressStrings() and
    SubnetInfo.streamAddressStrings() #298
    + Add SubnetInfo.iterableAddressStrings()
    + Add SubnetInfo.streamAddressStrings()
    + Add FTPCmd.OPTS
    + Add FTP.opts(String, String)
    + Add FTP.opts(String...)
    + Add FTP.setControlEncoding(Charset)
    + Add --OPTS to FTPClientExample
    + NET-727: Add accessing options map for TFTP request packet and
    allow using 'blksize' option #331
    + Add org.apache.commons.net.util.ListenerList.isEmpty()
    + Add org.apache.commons.net.ftp.FTPClient
    .getSystemTypeOverride()
    + Add generics to ListenerList
    + Add module-info.class in the JAR file instead of an
    Automatic-Module-Name in MANIFEST.MF
    + Fixed Bugs
    + Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to
    500 characters
    + Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160
    to 500 characters
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .authenticate(AUTH_METHOD, String, String) never throws, it's
    not thrown
    + Remove InvalidKeySpecException from ExtendedPOP3Client
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from
    org.apache.commons.net.smtp.AuthenticatingSMTPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in
    SSLSocketUtils
    + Fix PMD UnnecessaryFullyQualifiedName
    + Fix PMD UnusedFormalParameter
    + Fix PMD AvoidBranchingStatementAsLastInLoop in org.apache
    .commons.net.bsd.RCommandClient
    + Fix PMD UselessOverridingMethod in org.apache.commons.net
    .telnet.TelnetClient
    + Fix PMD UnnecessaryModifier
    + Deprecate MLSxEntryParser default constructor in favor of
    MLSxEntryParser.getInstance()
    + Deprecate direct access to org.apache.commons.net.nntp.Article
    .kid and next fields
    + Fix SpotBugs CT_CONSTRUCTOR_THROW in Base64 by implementing
    finalize() as a noop to avoid finalizer attacks
    + Add missing Javadoc to ListenerList
    + Add missing Javadoc to SubnetUtils
    + Deprecate PrintCommandListeners.PrintCommandListeners()
    + Deprecate NtpUtils.NtpUtils()
    + Deprecate FTPFileFilters.FTPFileFilters()
    + Avoid multiple possible NullPointerException in SocketClient
    .verifyRemote(Socket)
    + PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
    doesn't always use an end-of-line
    + FTPClientExample uses the wrong FTP system type to parse file
    lines
    + Base64 does not call super.finalize()
    + TFTPServer does not call super.finalize()
    + KeyManagerUtils.loadStore(String, File, String) shouldn't
    ignore an IOException closing a keystore stream; use
    try-with-resources
    + NNTPClient.readNewsgroupListing() can use an ArrayList instead
    of a Vector
    + Deprecate org.apache.commons.net.util.Charsets
    + Performance: NTFTPEntryParser.parseFTPEntry(String) doesn't
    need to parse timestamps if there is no name
    + Improve error handling in org.apache.commons.net.ftp.parser
    .DefaultFTPFileEntryParserFactory
    .createFileEntryParser(String, FTPClientConfig)
    + Fail-fast in org.apache.commons.net.PrintCommandListener
    .PrintCommandListener(PrintWriter, boolean, char, boolean) if
    the PrintWriter is null
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolCommandSent(ProtocolCommandEvent)
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
  * Changes
    + Bump org.apache.commons:commons-parent from 70 to 85 #261,
    [#278], #280, #285, #298, #293, #300, #345
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.18.0
    [#268], #273, #281, #354
    + Bump commons-io:commons-io from 2.16.1 to 2.20.0 #286, #308
    + Bump org.apache.commons:commons-collections4 from 4.5.0-M2 to
    4.5.0 #314
    + Bump org.apache.ftpserver:ftpserver-core from 1.2.0 to 1.2.1</changelog>
  <changelog author="fstrba@suse.com" date="1782129604">- Upgrade to 3.13.0
  * New features
    + Add DatagramSocketClient.getDefaultTimeoutDuration() and
    deprecate getDefaultTimeout()
    + NET-741: Add subnet IPv6 handling with SubnetUtils6 #391
  * Fixed Bugs
    + DaytimeTCPClientTest now should now pass inside most VPNs
    + Migrate tests to JUnit5 #358, #359
    + Fix malformed Javadoc comments
    + IMAPExportMbox now restores the current thread's interrupt
    flag when catching InterruptedException
    + IOUtil.readWrite() now restores the current thread's interrupt
    flag when catching InterruptedException
    + TelnetInputStream now restores the current thread's interrupt
    flag when catching InterruptedException
    + NET-740: FTP fails to parse listings for Linux vsftpd in
    Chinese or Japanese #393
    + TelnetInputStream.read() doesn't preserve the original
    InterruptedException as the cause of its
    InterruptedIOException
    + FTPClient._storeFile(String, String, InputStream) doesn't
    always close it's internal socket when an exception is thrown
    early in processing
    + ListenerList.removeListener(T) now ignores null input to avoid
    a NullPointerException
    + ListenerList.addListener(T) now ignores null input
    + Fix typo in FTPConnectionClosedException message from FTP
    .getReply(boolean)
    + Reimplement Util.copyReader() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils
    .copyLarge(Reader, Writer)
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 97 #371,
    [#388], #389
    + Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
    + Bump Util.DEFAULT_COPY_BUFFER_SIZE from 1 KiB to 8 KiB</changelog>
</package>
<package pkgid="80241d6c451ecb64a10bb6a63e6c73375ab6b92189a82e33076bd7ea55b911c2143b556c686e54c56d0cdf7f7ff1e652b406fb94c6216f0346ac9dfb51e30e04" name="apache-commons-net" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1404820800">- Fix sle build properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java 1.6 or newer to build</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Specify java source and target 1.6 in order to allow building
  with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1551528000">- Rename to apache-commons-net
- Upgrade to version 3.6
- Generate and customize the ant build file</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fridrich.strba@bluewin.ch" date="1670241600">- Upgrade to 3.9.0 (Security fixes)
  * Changes in 3.9.0
    + Use yyyy instead of YYYY in SimpleDateFormat #97.
    Fixes NET-708.
    + Prevent serialization of the 4 classes that implement
    Serializable. It is not useful and is unlikely to work
    properly.
    + Use Math.min and Math.max method instead of manual
    calculations. #104.
    + Add FTP option to toggle use of return host like CURL.
    Fixes NET-711, bsc#1206018, CVE-2021-37533.
    + FTPSClient execPROT removes proxy settings #90. Fixes NET-642.
    + JUnit5 assertThrows SimpleSMTPHeaderTestCase #121.
    + JUnit5 assertThrows TestTimeInfo #120.
    + Simplify conditions avoiding extra operations #88.
    + Remove reflection from SSLSocketUtils.
    + Process files with spaces in name for OS400 #95.
    Fixes NET-707.
    + [FTP] Add FTPClient.mdtmInstant(String).
    + [FTP] Add MLSxEntryParser.parseGmtInstant(String).
    + [FTP] Add FTPClient.getControlKeepAliveReplyTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveReplyTimeout(Duration).
    + [FTP] Add FTPClient.getControlKeepAliveTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveTimeout(Duration).
    + [FTP] Add FTPClient.getDataTimeout().
    + [FTP] Add FTPClient.setDataTimeout(Duration).
    + [FTP] Add FTPFile.getTimestampInstant().
  * Changes in 3.8.0
    + Add and use NetConstants.
    + Add and use SocketClient.applySocketAttributes().
    + [FTP] Add FTPClient.hasFeature(FTPCmd).
    + [FTP] Add FTPClient.mdtmCalendar(String).
    + [IMAP] Fix concurrent counting of chunks in IMAPExportMbox.
    + Fix possible if rare NPEs in tests.
    + Update SocketClient default connect timeout from ∞ to 60
    seconds #51. Fixes NET-685.
    + Apply SocketClient timeout after connection but before SSL
    negotiation. Fixes NET-695.
    + Minor Improvements #71, #72.
  * Changes in 3.7.2
    + Host name is not set on the SSLSocket causing
    isEndpointCheckingEnabled to fail. Fixes NET-689.
    + Fix possible socket and input stream leak on socket exception
    in org.apache.commons.net.ftp.FTPClient._retrieveFile(String,
    String, OutputStream).
    + Performance issue when using the FTPClient to retrieve
    files #65. Fixes NET-690.
    + Improve Javadoc for IMAPSClient #68. Fixes NET-691.
  * Changes in 3.7.1
    + [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized
    SSL message, #59. Fixes NET-687.
  * Changes in 3.7
    + IMAPClient.APPEND does not always calculate the correct
    length. Fixes NET-673.
    + ALLO FTP Command for files &gt;2GB. Fixes NET-646.
    + IMAPClient could simplify using empty arguments. Fixes
    NET-615.
    + IMAP fails to quote/encode mailbox names. Fixes NET-614.
    + NPE when closing telnet stream. Fixes NET-643.
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility. Fixes NET-648.
    + SubnetUtils.SubnetInfo.isInRange("0.0.0.0") returns true for
    CIDR/31, 32. Fixes NET-641.
    + Telnet subnegotiations hard-limited to 512 bytes - allow
    override. Fixes NET-638.
    + MVSFTPEntryParser.preParse - MVS, z/OS - allow for merged
    Ext/Used fields. Fixes NET-639.
    + examples should be in org.apache.commons.net subpackage. Fixes
    NET-636.
    + Add SIZE command support. Fixes NET-634.
    + Add POP3ExportMbox example code
    + Add XOAUTH2 to IMAP and SMTP. Fixes NET-633.
    + FTPHTTPClient - support for encoding other than UTF-8. Fixes
    NET-632.
    + Bug in MVSFTPEntryParser.parseUnixList (FindBugs). Fixes
    NET-631.
    + Error when using org.apache.commons.net.ftp.FTPClient
    setControlKeepAliveTimeout. Fixes NET-584.
    + SubnetUtils#SubnetUtils - improved comment. Fixes NET-626.
    + SubnetUtils - improve construction. Fixes NET-625.
    + SubnetInfo#getCidrSignature - improve functions. Fixes
    NET-624.
    + SubnetInfo#toCidrNotation: A wrong format subnet mask is
    allowed. Fixes NET-624.
    + SubnetUtils - fixed spelling errors. Fixes NET-623.
    + SubnetUtils#SubnetInfo - remove unnecessary accessors. Fixes
    NET-621.
    + SubnetUtils - improve binary netmask algorithm. Fixes NET-619.
    + System Information Leak in ftp parser. Fixes NET-613.
    + VMS ftp LIST parsing results in empty file list. Fixes
    NET-678.
    + FTPListParseEngine should support listing via MLSD. Fixes
    NET-674.
    + NullPointerException when FTPClient remote verification fails.
    Fixes NET-663.
    + 227 Entering Passive Mode. Fixes NET-649.
    + Next and Previous IP Address in SubnetUtils.SubnetInfo. Fixes
    NET-660.
    + MVSFTPEntryParser doesn't support Record Formats of U. Fixes
    NET-682.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="048adda9dca4303034019a923cd0c593a8e9a51129ba256b365aaaa7863a737aa23d8ba264cb79aa779dc03cb4e1f9d754df585121b1148803f2e4e4028b350c" name="apache-commons-net-examples" arch="noarch">
  <version epoch="0" ver="3.13.0" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1551528000">- Rename to apache-commons-net
- Upgrade to version 3.6
- Generate and customize the ant build file</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fridrich.strba@bluewin.ch" date="1670241600">- Upgrade to 3.9.0 (Security fixes)
  * Changes in 3.9.0
    + Use yyyy instead of YYYY in SimpleDateFormat #97.
    Fixes NET-708.
    + Prevent serialization of the 4 classes that implement
    Serializable. It is not useful and is unlikely to work
    properly.
    + Use Math.min and Math.max method instead of manual
    calculations. #104.
    + Add FTP option to toggle use of return host like CURL.
    Fixes NET-711, bsc#1206018, CVE-2021-37533.
    + FTPSClient execPROT removes proxy settings #90. Fixes NET-642.
    + JUnit5 assertThrows SimpleSMTPHeaderTestCase #121.
    + JUnit5 assertThrows TestTimeInfo #120.
    + Simplify conditions avoiding extra operations #88.
    + Remove reflection from SSLSocketUtils.
    + Process files with spaces in name for OS400 #95.
    Fixes NET-707.
    + [FTP] Add FTPClient.mdtmInstant(String).
    + [FTP] Add MLSxEntryParser.parseGmtInstant(String).
    + [FTP] Add FTPClient.getControlKeepAliveReplyTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveReplyTimeout(Duration).
    + [FTP] Add FTPClient.getControlKeepAliveTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveTimeout(Duration).
    + [FTP] Add FTPClient.getDataTimeout().
    + [FTP] Add FTPClient.setDataTimeout(Duration).
    + [FTP] Add FTPFile.getTimestampInstant().
  * Changes in 3.8.0
    + Add and use NetConstants.
    + Add and use SocketClient.applySocketAttributes().
    + [FTP] Add FTPClient.hasFeature(FTPCmd).
    + [FTP] Add FTPClient.mdtmCalendar(String).
    + [IMAP] Fix concurrent counting of chunks in IMAPExportMbox.
    + Fix possible if rare NPEs in tests.
    + Update SocketClient default connect timeout from ∞ to 60
    seconds #51. Fixes NET-685.
    + Apply SocketClient timeout after connection but before SSL
    negotiation. Fixes NET-695.
    + Minor Improvements #71, #72.
  * Changes in 3.7.2
    + Host name is not set on the SSLSocket causing
    isEndpointCheckingEnabled to fail. Fixes NET-689.
    + Fix possible socket and input stream leak on socket exception
    in org.apache.commons.net.ftp.FTPClient._retrieveFile(String,
    String, OutputStream).
    + Performance issue when using the FTPClient to retrieve
    files #65. Fixes NET-690.
    + Improve Javadoc for IMAPSClient #68. Fixes NET-691.
  * Changes in 3.7.1
    + [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized
    SSL message, #59. Fixes NET-687.
  * Changes in 3.7
    + IMAPClient.APPEND does not always calculate the correct
    length. Fixes NET-673.
    + ALLO FTP Command for files &gt;2GB. Fixes NET-646.
    + IMAPClient could simplify using empty arguments. Fixes
    NET-615.
    + IMAP fails to quote/encode mailbox names. Fixes NET-614.
    + NPE when closing telnet stream. Fixes NET-643.
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility. Fixes NET-648.
    + SubnetUtils.SubnetInfo.isInRange("0.0.0.0") returns true for
    CIDR/31, 32. Fixes NET-641.
    + Telnet subnegotiations hard-limited to 512 bytes - allow
    override. Fixes NET-638.
    + MVSFTPEntryParser.preParse - MVS, z/OS - allow for merged
    Ext/Used fields. Fixes NET-639.
    + examples should be in org.apache.commons.net subpackage. Fixes
    NET-636.
    + Add SIZE command support. Fixes NET-634.
    + Add POP3ExportMbox example code
    + Add XOAUTH2 to IMAP and SMTP. Fixes NET-633.
    + FTPHTTPClient - support for encoding other than UTF-8. Fixes
    NET-632.
    + Bug in MVSFTPEntryParser.parseUnixList (FindBugs). Fixes
    NET-631.
    + Error when using org.apache.commons.net.ftp.FTPClient
    setControlKeepAliveTimeout. Fixes NET-584.
    + SubnetUtils#SubnetUtils - improved comment. Fixes NET-626.
    + SubnetUtils - improve construction. Fixes NET-625.
    + SubnetInfo#getCidrSignature - improve functions. Fixes
    NET-624.
    + SubnetInfo#toCidrNotation: A wrong format subnet mask is
    allowed. Fixes NET-624.
    + SubnetUtils - fixed spelling errors. Fixes NET-623.
    + SubnetUtils#SubnetInfo - remove unnecessary accessors. Fixes
    NET-621.
    + SubnetUtils - improve binary netmask algorithm. Fixes NET-619.
    + System Information Leak in ftp parser. Fixes NET-613.
    + VMS ftp LIST parsing results in empty file list. Fixes
    NET-678.
    + FTPListParseEngine should support listing via MLSD. Fixes
    NET-674.
    + NullPointerException when FTPClient remote verification fails.
    Fixes NET-663.
    + 227 Entering Passive Mode. Fixes NET-649.
    + Next and Previous IP Address in SubnetUtils.SubnetInfo. Fixes
    NET-660.
    + MVSFTPEntryParser doesn't support Record Formats of U. Fixes
    NET-682.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1782129600">- Upgrade to 3.10.0
  * New features
    +  Add and use DatagramSocketClient.setDefaultTimeout(Duration)
    and deprecate DatagramSocketClient.setDefaultTimeout(int)
    + Add and use TFTP.DEFAULT_TIMEOUT_DURATION and deprecate
    org.apache.commons.net.tftp.TFTP.DEFAULT_TIMEOUT
    + Add and use DatagramSocketClient#getSoTimeoutDuration()
    + Add and use DatagramSocketClient#setSoTimeout(Duration)
    + Add and use DatagramSocketClient.checkOpen()
    + Add TelnetClient.sendAYT(Duration)
    + TFTPServer implements AutoCloseable
    + DatagramSocketClient implements AutoCloseable
    + Add IMAP package tests, include junit-jupiter-params artifact
    [#166]
    + Add Base64 missing tests and documentation fixes #161
    + Add FTPFile tests and fix Javadoc typos #162
    + Add IMAPReply tests and documentation fixes #165
  * Fixed Bugs
    + NET-650: Delegate host resolution to Socket.connect() #138
    + Fixes many grammar issues and typos in JavaDoc and code
    comments #141
    + Remove redundant (null) initializations and other clean ups
    [#155]
    + TFTPServer.setMaxTimeoutRetries() now throws
    IllegalArgumentException instead of RuntimeException
    + TFTPServer.setSocketTimeout() now throws
    IllegalArgumentException instead of RuntimeException
    + FTPCommand.checkArray() now throws IllegalStateException
    instead of RuntimeException
    + org.apache.commons.net.nntp.Threader now throws
    IllegalStateException instead of RuntimeException
    + POP3Command static initializer now throws
    IllegalStateException instead of RuntimeException
    + SMTPCommand static initializer now throws
    IllegalStateException instead of RuntimeException
    + SubnetUtils.SubnetInfo.getPreviousAddress() now throws
    IllegalStateException instead of RuntimeException
    + IMAPExportMbox.MboxListener.chunkReceived(IMAP) now throws
    UncheckedIOException instead of RuntimeException
    + IMAPUtils.imapLogin(URI, int, ProtocolCommandListener) now
    throws IOException instead of RuntimeException while
    maintaining method signature source compatibility
    + [StepSecurity] ci: Harden GitHub Actions #156
    + NET-722: Javadoc for FtpClient
    .setControlKeepAliveReplyTimeout(Duration) says timeout is in
    milliseconds
    + Change class org.apache.commons.net.ftp.parser
    .MVSFTPEntryParser to support more datasets #182
    + Bulletproof TFTPServerPathTest #173
    + Deprecate org.apache.commons.net.util.Base64 in favor of
    java.util.Base64
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.ftp
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.imap
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.pop3
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.smtp
  * Changes
    + Bump commons-parent from 54 to 62 #132, #137, #153
    + Bump commons-io from 2.11.0 to 2.14.0
    + Bump commons-lang3 from 3.12.0 to 3.13.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129601">- Upgrade to 3.11.0
  * New features
    + NET-726: Add protected getters to FTPSClient #204
    + Add SubnetUtils.toString()
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
    + Add FTP.DEFLATE_TRANSFER_MODE to support the "deflate"
    compression format in FTPClient.setFileTransferMode(int)
    + Add org.apache.commons.net.SocketClient.checkOpenOutputStream()
  * Fixed Bugs
    + Precompile regular expression in UnixFTPEntryParser
    .preParse(List&lt;String&gt;)
    + Guard against polynomial regular expression used on
    uncontrolled data in VMSVersioningFTPEntryParser.REGEX
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.TAGGED_RESPONSE
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.UNTAGGED_RESPONSE
    + NET-730: Cannot connect to FTP server with HTTP proxy
    + Base 64 Encoding with URL and Filename Safe Alphabet should
    not chunk per RFC 4648
    + Deprecate org.apache.commons.net.util.Charsets.Charsets() for
    removal
    + Deprecate org.apache.commons.net.util.TrustManagerUtils
    .TrustManagerUtils() for removal
  * Changes
    + Bump commons-parent from 62 to 70 #238
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0,
    [#221]
    + Bump commons-lang3 from 3.13.0 to 3.14.0
    + Bump commons-io from 2.15.0 to 2.16.1 #236, #240</changelog>
  <changelog author="fstrba@suse.com" date="1782129602">- Upgrade to 3.11.1
  * Fixed Bugs
    + Allow longer data in pattern IMAPReply.UNTAGGED_RESPONSE
    + Fix Reproducible Builds issues #259</changelog>
  <changelog author="fstrba@suse.com" date="1782129603">- Upgrade to 3.12.0
  * New features
    + Add org.apache.commons.net.nntp.Article#getChild()
    + Add org.apache.commons.net.nntp.Article#getNext()
    + Add private SubnetAddressStringIterable and private
    SubnetAddressStringIterator to implement
    SubnetInfo.iterableAddressStrings() and
    SubnetInfo.streamAddressStrings() #298
    + Add SubnetInfo.iterableAddressStrings()
    + Add SubnetInfo.streamAddressStrings()
    + Add FTPCmd.OPTS
    + Add FTP.opts(String, String)
    + Add FTP.opts(String...)
    + Add FTP.setControlEncoding(Charset)
    + Add --OPTS to FTPClientExample
    + NET-727: Add accessing options map for TFTP request packet and
    allow using 'blksize' option #331
    + Add org.apache.commons.net.util.ListenerList.isEmpty()
    + Add org.apache.commons.net.ftp.FTPClient
    .getSystemTypeOverride()
    + Add generics to ListenerList
    + Add module-info.class in the JAR file instead of an
    Automatic-Module-Name in MANIFEST.MF
    + Fixed Bugs
    + Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to
    500 characters
    + Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160
    to 500 characters
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .authenticate(AUTH_METHOD, String, String) never throws, it's
    not thrown
    + Remove InvalidKeySpecException from ExtendedPOP3Client
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from
    org.apache.commons.net.smtp.AuthenticatingSMTPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in
    SSLSocketUtils
    + Fix PMD UnnecessaryFullyQualifiedName
    + Fix PMD UnusedFormalParameter
    + Fix PMD AvoidBranchingStatementAsLastInLoop in org.apache
    .commons.net.bsd.RCommandClient
    + Fix PMD UselessOverridingMethod in org.apache.commons.net
    .telnet.TelnetClient
    + Fix PMD UnnecessaryModifier
    + Deprecate MLSxEntryParser default constructor in favor of
    MLSxEntryParser.getInstance()
    + Deprecate direct access to org.apache.commons.net.nntp.Article
    .kid and next fields
    + Fix SpotBugs CT_CONSTRUCTOR_THROW in Base64 by implementing
    finalize() as a noop to avoid finalizer attacks
    + Add missing Javadoc to ListenerList
    + Add missing Javadoc to SubnetUtils
    + Deprecate PrintCommandListeners.PrintCommandListeners()
    + Deprecate NtpUtils.NtpUtils()
    + Deprecate FTPFileFilters.FTPFileFilters()
    + Avoid multiple possible NullPointerException in SocketClient
    .verifyRemote(Socket)
    + PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
    doesn't always use an end-of-line
    + FTPClientExample uses the wrong FTP system type to parse file
    lines
    + Base64 does not call super.finalize()
    + TFTPServer does not call super.finalize()
    + KeyManagerUtils.loadStore(String, File, String) shouldn't
    ignore an IOException closing a keystore stream; use
    try-with-resources
    + NNTPClient.readNewsgroupListing() can use an ArrayList instead
    of a Vector
    + Deprecate org.apache.commons.net.util.Charsets
    + Performance: NTFTPEntryParser.parseFTPEntry(String) doesn't
    need to parse timestamps if there is no name
    + Improve error handling in org.apache.commons.net.ftp.parser
    .DefaultFTPFileEntryParserFactory
    .createFileEntryParser(String, FTPClientConfig)
    + Fail-fast in org.apache.commons.net.PrintCommandListener
    .PrintCommandListener(PrintWriter, boolean, char, boolean) if
    the PrintWriter is null
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolCommandSent(ProtocolCommandEvent)
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
  * Changes
    + Bump org.apache.commons:commons-parent from 70 to 85 #261,
    [#278], #280, #285, #298, #293, #300, #345
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.18.0
    [#268], #273, #281, #354
    + Bump commons-io:commons-io from 2.16.1 to 2.20.0 #286, #308
    + Bump org.apache.commons:commons-collections4 from 4.5.0-M2 to
    4.5.0 #314
    + Bump org.apache.ftpserver:ftpserver-core from 1.2.0 to 1.2.1</changelog>
  <changelog author="fstrba@suse.com" date="1782129604">- Upgrade to 3.13.0
  * New features
    + Add DatagramSocketClient.getDefaultTimeoutDuration() and
    deprecate getDefaultTimeout()
    + NET-741: Add subnet IPv6 handling with SubnetUtils6 #391
  * Fixed Bugs
    + DaytimeTCPClientTest now should now pass inside most VPNs
    + Migrate tests to JUnit5 #358, #359
    + Fix malformed Javadoc comments
    + IMAPExportMbox now restores the current thread's interrupt
    flag when catching InterruptedException
    + IOUtil.readWrite() now restores the current thread's interrupt
    flag when catching InterruptedException
    + TelnetInputStream now restores the current thread's interrupt
    flag when catching InterruptedException
    + NET-740: FTP fails to parse listings for Linux vsftpd in
    Chinese or Japanese #393
    + TelnetInputStream.read() doesn't preserve the original
    InterruptedException as the cause of its
    InterruptedIOException
    + FTPClient._storeFile(String, String, InputStream) doesn't
    always close it's internal socket when an exception is thrown
    early in processing
    + ListenerList.removeListener(T) now ignores null input to avoid
    a NullPointerException
    + ListenerList.addListener(T) now ignores null input
    + Fix typo in FTPConnectionClosedException message from FTP
    .getReply(boolean)
    + Reimplement Util.copyReader() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils
    .copyLarge(Reader, Writer)
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 97 #371,
    [#388], #389
    + Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
    + Bump Util.DEFAULT_COPY_BUFFER_SIZE from 1 KiB to 8 KiB</changelog>
</package>
<package pkgid="ff6f5d68000dc4417d4864697b355a553f571998c3af4e10393456082774b6a2599063eba3f47b31d812de127b48673ceb46b303a6483accd8a9b7413ee6973f" name="apache-commons-net-ftp" arch="noarch">
  <version epoch="0" ver="3.13.0" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1551528000">- Rename to apache-commons-net
- Upgrade to version 3.6
- Generate and customize the ant build file</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fridrich.strba@bluewin.ch" date="1670241600">- Upgrade to 3.9.0 (Security fixes)
  * Changes in 3.9.0
    + Use yyyy instead of YYYY in SimpleDateFormat #97.
    Fixes NET-708.
    + Prevent serialization of the 4 classes that implement
    Serializable. It is not useful and is unlikely to work
    properly.
    + Use Math.min and Math.max method instead of manual
    calculations. #104.
    + Add FTP option to toggle use of return host like CURL.
    Fixes NET-711, bsc#1206018, CVE-2021-37533.
    + FTPSClient execPROT removes proxy settings #90. Fixes NET-642.
    + JUnit5 assertThrows SimpleSMTPHeaderTestCase #121.
    + JUnit5 assertThrows TestTimeInfo #120.
    + Simplify conditions avoiding extra operations #88.
    + Remove reflection from SSLSocketUtils.
    + Process files with spaces in name for OS400 #95.
    Fixes NET-707.
    + [FTP] Add FTPClient.mdtmInstant(String).
    + [FTP] Add MLSxEntryParser.parseGmtInstant(String).
    + [FTP] Add FTPClient.getControlKeepAliveReplyTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveReplyTimeout(Duration).
    + [FTP] Add FTPClient.getControlKeepAliveTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveTimeout(Duration).
    + [FTP] Add FTPClient.getDataTimeout().
    + [FTP] Add FTPClient.setDataTimeout(Duration).
    + [FTP] Add FTPFile.getTimestampInstant().
  * Changes in 3.8.0
    + Add and use NetConstants.
    + Add and use SocketClient.applySocketAttributes().
    + [FTP] Add FTPClient.hasFeature(FTPCmd).
    + [FTP] Add FTPClient.mdtmCalendar(String).
    + [IMAP] Fix concurrent counting of chunks in IMAPExportMbox.
    + Fix possible if rare NPEs in tests.
    + Update SocketClient default connect timeout from ∞ to 60
    seconds #51. Fixes NET-685.
    + Apply SocketClient timeout after connection but before SSL
    negotiation. Fixes NET-695.
    + Minor Improvements #71, #72.
  * Changes in 3.7.2
    + Host name is not set on the SSLSocket causing
    isEndpointCheckingEnabled to fail. Fixes NET-689.
    + Fix possible socket and input stream leak on socket exception
    in org.apache.commons.net.ftp.FTPClient._retrieveFile(String,
    String, OutputStream).
    + Performance issue when using the FTPClient to retrieve
    files #65. Fixes NET-690.
    + Improve Javadoc for IMAPSClient #68. Fixes NET-691.
  * Changes in 3.7.1
    + [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized
    SSL message, #59. Fixes NET-687.
  * Changes in 3.7
    + IMAPClient.APPEND does not always calculate the correct
    length. Fixes NET-673.
    + ALLO FTP Command for files &gt;2GB. Fixes NET-646.
    + IMAPClient could simplify using empty arguments. Fixes
    NET-615.
    + IMAP fails to quote/encode mailbox names. Fixes NET-614.
    + NPE when closing telnet stream. Fixes NET-643.
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility. Fixes NET-648.
    + SubnetUtils.SubnetInfo.isInRange("0.0.0.0") returns true for
    CIDR/31, 32. Fixes NET-641.
    + Telnet subnegotiations hard-limited to 512 bytes - allow
    override. Fixes NET-638.
    + MVSFTPEntryParser.preParse - MVS, z/OS - allow for merged
    Ext/Used fields. Fixes NET-639.
    + examples should be in org.apache.commons.net subpackage. Fixes
    NET-636.
    + Add SIZE command support. Fixes NET-634.
    + Add POP3ExportMbox example code
    + Add XOAUTH2 to IMAP and SMTP. Fixes NET-633.
    + FTPHTTPClient - support for encoding other than UTF-8. Fixes
    NET-632.
    + Bug in MVSFTPEntryParser.parseUnixList (FindBugs). Fixes
    NET-631.
    + Error when using org.apache.commons.net.ftp.FTPClient
    setControlKeepAliveTimeout. Fixes NET-584.
    + SubnetUtils#SubnetUtils - improved comment. Fixes NET-626.
    + SubnetUtils - improve construction. Fixes NET-625.
    + SubnetInfo#getCidrSignature - improve functions. Fixes
    NET-624.
    + SubnetInfo#toCidrNotation: A wrong format subnet mask is
    allowed. Fixes NET-624.
    + SubnetUtils - fixed spelling errors. Fixes NET-623.
    + SubnetUtils#SubnetInfo - remove unnecessary accessors. Fixes
    NET-621.
    + SubnetUtils - improve binary netmask algorithm. Fixes NET-619.
    + System Information Leak in ftp parser. Fixes NET-613.
    + VMS ftp LIST parsing results in empty file list. Fixes
    NET-678.
    + FTPListParseEngine should support listing via MLSD. Fixes
    NET-674.
    + NullPointerException when FTPClient remote verification fails.
    Fixes NET-663.
    + 227 Entering Passive Mode. Fixes NET-649.
    + Next and Previous IP Address in SubnetUtils.SubnetInfo. Fixes
    NET-660.
    + MVSFTPEntryParser doesn't support Record Formats of U. Fixes
    NET-682.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1782129600">- Upgrade to 3.10.0
  * New features
    +  Add and use DatagramSocketClient.setDefaultTimeout(Duration)
    and deprecate DatagramSocketClient.setDefaultTimeout(int)
    + Add and use TFTP.DEFAULT_TIMEOUT_DURATION and deprecate
    org.apache.commons.net.tftp.TFTP.DEFAULT_TIMEOUT
    + Add and use DatagramSocketClient#getSoTimeoutDuration()
    + Add and use DatagramSocketClient#setSoTimeout(Duration)
    + Add and use DatagramSocketClient.checkOpen()
    + Add TelnetClient.sendAYT(Duration)
    + TFTPServer implements AutoCloseable
    + DatagramSocketClient implements AutoCloseable
    + Add IMAP package tests, include junit-jupiter-params artifact
    [#166]
    + Add Base64 missing tests and documentation fixes #161
    + Add FTPFile tests and fix Javadoc typos #162
    + Add IMAPReply tests and documentation fixes #165
  * Fixed Bugs
    + NET-650: Delegate host resolution to Socket.connect() #138
    + Fixes many grammar issues and typos in JavaDoc and code
    comments #141
    + Remove redundant (null) initializations and other clean ups
    [#155]
    + TFTPServer.setMaxTimeoutRetries() now throws
    IllegalArgumentException instead of RuntimeException
    + TFTPServer.setSocketTimeout() now throws
    IllegalArgumentException instead of RuntimeException
    + FTPCommand.checkArray() now throws IllegalStateException
    instead of RuntimeException
    + org.apache.commons.net.nntp.Threader now throws
    IllegalStateException instead of RuntimeException
    + POP3Command static initializer now throws
    IllegalStateException instead of RuntimeException
    + SMTPCommand static initializer now throws
    IllegalStateException instead of RuntimeException
    + SubnetUtils.SubnetInfo.getPreviousAddress() now throws
    IllegalStateException instead of RuntimeException
    + IMAPExportMbox.MboxListener.chunkReceived(IMAP) now throws
    UncheckedIOException instead of RuntimeException
    + IMAPUtils.imapLogin(URI, int, ProtocolCommandListener) now
    throws IOException instead of RuntimeException while
    maintaining method signature source compatibility
    + [StepSecurity] ci: Harden GitHub Actions #156
    + NET-722: Javadoc for FtpClient
    .setControlKeepAliveReplyTimeout(Duration) says timeout is in
    milliseconds
    + Change class org.apache.commons.net.ftp.parser
    .MVSFTPEntryParser to support more datasets #182
    + Bulletproof TFTPServerPathTest #173
    + Deprecate org.apache.commons.net.util.Base64 in favor of
    java.util.Base64
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.ftp
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.imap
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.pop3
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.smtp
  * Changes
    + Bump commons-parent from 54 to 62 #132, #137, #153
    + Bump commons-io from 2.11.0 to 2.14.0
    + Bump commons-lang3 from 3.12.0 to 3.13.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129601">- Upgrade to 3.11.0
  * New features
    + NET-726: Add protected getters to FTPSClient #204
    + Add SubnetUtils.toString()
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
    + Add FTP.DEFLATE_TRANSFER_MODE to support the "deflate"
    compression format in FTPClient.setFileTransferMode(int)
    + Add org.apache.commons.net.SocketClient.checkOpenOutputStream()
  * Fixed Bugs
    + Precompile regular expression in UnixFTPEntryParser
    .preParse(List&lt;String&gt;)
    + Guard against polynomial regular expression used on
    uncontrolled data in VMSVersioningFTPEntryParser.REGEX
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.TAGGED_RESPONSE
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.UNTAGGED_RESPONSE
    + NET-730: Cannot connect to FTP server with HTTP proxy
    + Base 64 Encoding with URL and Filename Safe Alphabet should
    not chunk per RFC 4648
    + Deprecate org.apache.commons.net.util.Charsets.Charsets() for
    removal
    + Deprecate org.apache.commons.net.util.TrustManagerUtils
    .TrustManagerUtils() for removal
  * Changes
    + Bump commons-parent from 62 to 70 #238
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0,
    [#221]
    + Bump commons-lang3 from 3.13.0 to 3.14.0
    + Bump commons-io from 2.15.0 to 2.16.1 #236, #240</changelog>
  <changelog author="fstrba@suse.com" date="1782129602">- Upgrade to 3.11.1
  * Fixed Bugs
    + Allow longer data in pattern IMAPReply.UNTAGGED_RESPONSE
    + Fix Reproducible Builds issues #259</changelog>
  <changelog author="fstrba@suse.com" date="1782129603">- Upgrade to 3.12.0
  * New features
    + Add org.apache.commons.net.nntp.Article#getChild()
    + Add org.apache.commons.net.nntp.Article#getNext()
    + Add private SubnetAddressStringIterable and private
    SubnetAddressStringIterator to implement
    SubnetInfo.iterableAddressStrings() and
    SubnetInfo.streamAddressStrings() #298
    + Add SubnetInfo.iterableAddressStrings()
    + Add SubnetInfo.streamAddressStrings()
    + Add FTPCmd.OPTS
    + Add FTP.opts(String, String)
    + Add FTP.opts(String...)
    + Add FTP.setControlEncoding(Charset)
    + Add --OPTS to FTPClientExample
    + NET-727: Add accessing options map for TFTP request packet and
    allow using 'blksize' option #331
    + Add org.apache.commons.net.util.ListenerList.isEmpty()
    + Add org.apache.commons.net.ftp.FTPClient
    .getSystemTypeOverride()
    + Add generics to ListenerList
    + Add module-info.class in the JAR file instead of an
    Automatic-Module-Name in MANIFEST.MF
    + Fixed Bugs
    + Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to
    500 characters
    + Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160
    to 500 characters
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .authenticate(AUTH_METHOD, String, String) never throws, it's
    not thrown
    + Remove InvalidKeySpecException from ExtendedPOP3Client
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from
    org.apache.commons.net.smtp.AuthenticatingSMTPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in
    SSLSocketUtils
    + Fix PMD UnnecessaryFullyQualifiedName
    + Fix PMD UnusedFormalParameter
    + Fix PMD AvoidBranchingStatementAsLastInLoop in org.apache
    .commons.net.bsd.RCommandClient
    + Fix PMD UselessOverridingMethod in org.apache.commons.net
    .telnet.TelnetClient
    + Fix PMD UnnecessaryModifier
    + Deprecate MLSxEntryParser default constructor in favor of
    MLSxEntryParser.getInstance()
    + Deprecate direct access to org.apache.commons.net.nntp.Article
    .kid and next fields
    + Fix SpotBugs CT_CONSTRUCTOR_THROW in Base64 by implementing
    finalize() as a noop to avoid finalizer attacks
    + Add missing Javadoc to ListenerList
    + Add missing Javadoc to SubnetUtils
    + Deprecate PrintCommandListeners.PrintCommandListeners()
    + Deprecate NtpUtils.NtpUtils()
    + Deprecate FTPFileFilters.FTPFileFilters()
    + Avoid multiple possible NullPointerException in SocketClient
    .verifyRemote(Socket)
    + PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
    doesn't always use an end-of-line
    + FTPClientExample uses the wrong FTP system type to parse file
    lines
    + Base64 does not call super.finalize()
    + TFTPServer does not call super.finalize()
    + KeyManagerUtils.loadStore(String, File, String) shouldn't
    ignore an IOException closing a keystore stream; use
    try-with-resources
    + NNTPClient.readNewsgroupListing() can use an ArrayList instead
    of a Vector
    + Deprecate org.apache.commons.net.util.Charsets
    + Performance: NTFTPEntryParser.parseFTPEntry(String) doesn't
    need to parse timestamps if there is no name
    + Improve error handling in org.apache.commons.net.ftp.parser
    .DefaultFTPFileEntryParserFactory
    .createFileEntryParser(String, FTPClientConfig)
    + Fail-fast in org.apache.commons.net.PrintCommandListener
    .PrintCommandListener(PrintWriter, boolean, char, boolean) if
    the PrintWriter is null
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolCommandSent(ProtocolCommandEvent)
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
  * Changes
    + Bump org.apache.commons:commons-parent from 70 to 85 #261,
    [#278], #280, #285, #298, #293, #300, #345
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.18.0
    [#268], #273, #281, #354
    + Bump commons-io:commons-io from 2.16.1 to 2.20.0 #286, #308
    + Bump org.apache.commons:commons-collections4 from 4.5.0-M2 to
    4.5.0 #314
    + Bump org.apache.ftpserver:ftpserver-core from 1.2.0 to 1.2.1</changelog>
  <changelog author="fstrba@suse.com" date="1782129604">- Upgrade to 3.13.0
  * New features
    + Add DatagramSocketClient.getDefaultTimeoutDuration() and
    deprecate getDefaultTimeout()
    + NET-741: Add subnet IPv6 handling with SubnetUtils6 #391
  * Fixed Bugs
    + DaytimeTCPClientTest now should now pass inside most VPNs
    + Migrate tests to JUnit5 #358, #359
    + Fix malformed Javadoc comments
    + IMAPExportMbox now restores the current thread's interrupt
    flag when catching InterruptedException
    + IOUtil.readWrite() now restores the current thread's interrupt
    flag when catching InterruptedException
    + TelnetInputStream now restores the current thread's interrupt
    flag when catching InterruptedException
    + NET-740: FTP fails to parse listings for Linux vsftpd in
    Chinese or Japanese #393
    + TelnetInputStream.read() doesn't preserve the original
    InterruptedException as the cause of its
    InterruptedIOException
    + FTPClient._storeFile(String, String, InputStream) doesn't
    always close it's internal socket when an exception is thrown
    early in processing
    + ListenerList.removeListener(T) now ignores null input to avoid
    a NullPointerException
    + ListenerList.addListener(T) now ignores null input
    + Fix typo in FTPConnectionClosedException message from FTP
    .getReply(boolean)
    + Reimplement Util.copyReader() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils
    .copyLarge(Reader, Writer)
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 97 #371,
    [#388], #389
    + Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
    + Bump Util.DEFAULT_COPY_BUFFER_SIZE from 1 KiB to 8 KiB</changelog>
</package>
<package pkgid="ad2e7fad197a97aa3ad962d2ea7a3975a878d5ee2d54c2e48edc78ed18fe094c0d7e7585384e765e0eaecae140928057a03efe11b4cce337b14d34d699b83c56" name="apache-commons-net-javadoc" arch="noarch">
  <version epoch="0" ver="3.13.0" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1551528000">- Rename to apache-commons-net
- Upgrade to version 3.6
- Generate and customize the ant build file</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fridrich.strba@bluewin.ch" date="1670241600">- Upgrade to 3.9.0 (Security fixes)
  * Changes in 3.9.0
    + Use yyyy instead of YYYY in SimpleDateFormat #97.
    Fixes NET-708.
    + Prevent serialization of the 4 classes that implement
    Serializable. It is not useful and is unlikely to work
    properly.
    + Use Math.min and Math.max method instead of manual
    calculations. #104.
    + Add FTP option to toggle use of return host like CURL.
    Fixes NET-711, bsc#1206018, CVE-2021-37533.
    + FTPSClient execPROT removes proxy settings #90. Fixes NET-642.
    + JUnit5 assertThrows SimpleSMTPHeaderTestCase #121.
    + JUnit5 assertThrows TestTimeInfo #120.
    + Simplify conditions avoiding extra operations #88.
    + Remove reflection from SSLSocketUtils.
    + Process files with spaces in name for OS400 #95.
    Fixes NET-707.
    + [FTP] Add FTPClient.mdtmInstant(String).
    + [FTP] Add MLSxEntryParser.parseGmtInstant(String).
    + [FTP] Add FTPClient.getControlKeepAliveReplyTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveReplyTimeout(Duration).
    + [FTP] Add FTPClient.getControlKeepAliveTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveTimeout(Duration).
    + [FTP] Add FTPClient.getDataTimeout().
    + [FTP] Add FTPClient.setDataTimeout(Duration).
    + [FTP] Add FTPFile.getTimestampInstant().
  * Changes in 3.8.0
    + Add and use NetConstants.
    + Add and use SocketClient.applySocketAttributes().
    + [FTP] Add FTPClient.hasFeature(FTPCmd).
    + [FTP] Add FTPClient.mdtmCalendar(String).
    + [IMAP] Fix concurrent counting of chunks in IMAPExportMbox.
    + Fix possible if rare NPEs in tests.
    + Update SocketClient default connect timeout from ∞ to 60
    seconds #51. Fixes NET-685.
    + Apply SocketClient timeout after connection but before SSL
    negotiation. Fixes NET-695.
    + Minor Improvements #71, #72.
  * Changes in 3.7.2
    + Host name is not set on the SSLSocket causing
    isEndpointCheckingEnabled to fail. Fixes NET-689.
    + Fix possible socket and input stream leak on socket exception
    in org.apache.commons.net.ftp.FTPClient._retrieveFile(String,
    String, OutputStream).
    + Performance issue when using the FTPClient to retrieve
    files #65. Fixes NET-690.
    + Improve Javadoc for IMAPSClient #68. Fixes NET-691.
  * Changes in 3.7.1
    + [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized
    SSL message, #59. Fixes NET-687.
  * Changes in 3.7
    + IMAPClient.APPEND does not always calculate the correct
    length. Fixes NET-673.
    + ALLO FTP Command for files &gt;2GB. Fixes NET-646.
    + IMAPClient could simplify using empty arguments. Fixes
    NET-615.
    + IMAP fails to quote/encode mailbox names. Fixes NET-614.
    + NPE when closing telnet stream. Fixes NET-643.
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility. Fixes NET-648.
    + SubnetUtils.SubnetInfo.isInRange("0.0.0.0") returns true for
    CIDR/31, 32. Fixes NET-641.
    + Telnet subnegotiations hard-limited to 512 bytes - allow
    override. Fixes NET-638.
    + MVSFTPEntryParser.preParse - MVS, z/OS - allow for merged
    Ext/Used fields. Fixes NET-639.
    + examples should be in org.apache.commons.net subpackage. Fixes
    NET-636.
    + Add SIZE command support. Fixes NET-634.
    + Add POP3ExportMbox example code
    + Add XOAUTH2 to IMAP and SMTP. Fixes NET-633.
    + FTPHTTPClient - support for encoding other than UTF-8. Fixes
    NET-632.
    + Bug in MVSFTPEntryParser.parseUnixList (FindBugs). Fixes
    NET-631.
    + Error when using org.apache.commons.net.ftp.FTPClient
    setControlKeepAliveTimeout. Fixes NET-584.
    + SubnetUtils#SubnetUtils - improved comment. Fixes NET-626.
    + SubnetUtils - improve construction. Fixes NET-625.
    + SubnetInfo#getCidrSignature - improve functions. Fixes
    NET-624.
    + SubnetInfo#toCidrNotation: A wrong format subnet mask is
    allowed. Fixes NET-624.
    + SubnetUtils - fixed spelling errors. Fixes NET-623.
    + SubnetUtils#SubnetInfo - remove unnecessary accessors. Fixes
    NET-621.
    + SubnetUtils - improve binary netmask algorithm. Fixes NET-619.
    + System Information Leak in ftp parser. Fixes NET-613.
    + VMS ftp LIST parsing results in empty file list. Fixes
    NET-678.
    + FTPListParseEngine should support listing via MLSD. Fixes
    NET-674.
    + NullPointerException when FTPClient remote verification fails.
    Fixes NET-663.
    + 227 Entering Passive Mode. Fixes NET-649.
    + Next and Previous IP Address in SubnetUtils.SubnetInfo. Fixes
    NET-660.
    + MVSFTPEntryParser doesn't support Record Formats of U. Fixes
    NET-682.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1782129600">- Upgrade to 3.10.0
  * New features
    +  Add and use DatagramSocketClient.setDefaultTimeout(Duration)
    and deprecate DatagramSocketClient.setDefaultTimeout(int)
    + Add and use TFTP.DEFAULT_TIMEOUT_DURATION and deprecate
    org.apache.commons.net.tftp.TFTP.DEFAULT_TIMEOUT
    + Add and use DatagramSocketClient#getSoTimeoutDuration()
    + Add and use DatagramSocketClient#setSoTimeout(Duration)
    + Add and use DatagramSocketClient.checkOpen()
    + Add TelnetClient.sendAYT(Duration)
    + TFTPServer implements AutoCloseable
    + DatagramSocketClient implements AutoCloseable
    + Add IMAP package tests, include junit-jupiter-params artifact
    [#166]
    + Add Base64 missing tests and documentation fixes #161
    + Add FTPFile tests and fix Javadoc typos #162
    + Add IMAPReply tests and documentation fixes #165
  * Fixed Bugs
    + NET-650: Delegate host resolution to Socket.connect() #138
    + Fixes many grammar issues and typos in JavaDoc and code
    comments #141
    + Remove redundant (null) initializations and other clean ups
    [#155]
    + TFTPServer.setMaxTimeoutRetries() now throws
    IllegalArgumentException instead of RuntimeException
    + TFTPServer.setSocketTimeout() now throws
    IllegalArgumentException instead of RuntimeException
    + FTPCommand.checkArray() now throws IllegalStateException
    instead of RuntimeException
    + org.apache.commons.net.nntp.Threader now throws
    IllegalStateException instead of RuntimeException
    + POP3Command static initializer now throws
    IllegalStateException instead of RuntimeException
    + SMTPCommand static initializer now throws
    IllegalStateException instead of RuntimeException
    + SubnetUtils.SubnetInfo.getPreviousAddress() now throws
    IllegalStateException instead of RuntimeException
    + IMAPExportMbox.MboxListener.chunkReceived(IMAP) now throws
    UncheckedIOException instead of RuntimeException
    + IMAPUtils.imapLogin(URI, int, ProtocolCommandListener) now
    throws IOException instead of RuntimeException while
    maintaining method signature source compatibility
    + [StepSecurity] ci: Harden GitHub Actions #156
    + NET-722: Javadoc for FtpClient
    .setControlKeepAliveReplyTimeout(Duration) says timeout is in
    milliseconds
    + Change class org.apache.commons.net.ftp.parser
    .MVSFTPEntryParser to support more datasets #182
    + Bulletproof TFTPServerPathTest #173
    + Deprecate org.apache.commons.net.util.Base64 in favor of
    java.util.Base64
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.ftp
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.imap
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.pop3
    + Replace use of org.apache.commons.net.util.Base64 with
    java.util.Base64 in org.apache.commons.net.smtp
  * Changes
    + Bump commons-parent from 54 to 62 #132, #137, #153
    + Bump commons-io from 2.11.0 to 2.14.0
    + Bump commons-lang3 from 3.12.0 to 3.13.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129601">- Upgrade to 3.11.0
  * New features
    + NET-726: Add protected getters to FTPSClient #204
    + Add SubnetUtils.toString()
    + Add Maven property project.build.outputTimestamp for build
    reproducibility
    + Add FTP.DEFLATE_TRANSFER_MODE to support the "deflate"
    compression format in FTPClient.setFileTransferMode(int)
    + Add org.apache.commons.net.SocketClient.checkOpenOutputStream()
  * Fixed Bugs
    + Precompile regular expression in UnixFTPEntryParser
    .preParse(List&lt;String&gt;)
    + Guard against polynomial regular expression used on
    uncontrolled data in VMSVersioningFTPEntryParser.REGEX
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.TAGGED_RESPONSE
    + Guard against polynomial regular expression used on
    uncontrolled data in IMAPReply.UNTAGGED_RESPONSE
    + NET-730: Cannot connect to FTP server with HTTP proxy
    + Base 64 Encoding with URL and Filename Safe Alphabet should
    not chunk per RFC 4648
    + Deprecate org.apache.commons.net.util.Charsets.Charsets() for
    removal
    + Deprecate org.apache.commons.net.util.TrustManagerUtils
    .TrustManagerUtils() for removal
  * Changes
    + Bump commons-parent from 62 to 70 #238
    + Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0,
    [#221]
    + Bump commons-lang3 from 3.13.0 to 3.14.0
    + Bump commons-io from 2.15.0 to 2.16.1 #236, #240</changelog>
  <changelog author="fstrba@suse.com" date="1782129602">- Upgrade to 3.11.1
  * Fixed Bugs
    + Allow longer data in pattern IMAPReply.UNTAGGED_RESPONSE
    + Fix Reproducible Builds issues #259</changelog>
  <changelog author="fstrba@suse.com" date="1782129603">- Upgrade to 3.12.0
  * New features
    + Add org.apache.commons.net.nntp.Article#getChild()
    + Add org.apache.commons.net.nntp.Article#getNext()
    + Add private SubnetAddressStringIterable and private
    SubnetAddressStringIterator to implement
    SubnetInfo.iterableAddressStrings() and
    SubnetInfo.streamAddressStrings() #298
    + Add SubnetInfo.iterableAddressStrings()
    + Add SubnetInfo.streamAddressStrings()
    + Add FTPCmd.OPTS
    + Add FTP.opts(String, String)
    + Add FTP.opts(String...)
    + Add FTP.setControlEncoding(Charset)
    + Add --OPTS to FTPClientExample
    + NET-727: Add accessing options map for TFTP request packet and
    allow using 'blksize' option #331
    + Add org.apache.commons.net.util.ListenerList.isEmpty()
    + Add org.apache.commons.net.ftp.FTPClient
    .getSystemTypeOverride()
    + Add generics to ListenerList
    + Add module-info.class in the JAR file instead of an
    Automatic-Module-Name in MANIFEST.MF
    + Fixed Bugs
    + Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to
    500 characters
    + Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160
    to 500 characters
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from AuthenticatingIMAPClient
    .authenticate(AUTH_METHOD, String, String) never throws, it's
    not thrown
    + Remove InvalidKeySpecException from ExtendedPOP3Client
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Remove InvalidKeySpecException from
    org.apache.commons.net.smtp.AuthenticatingSMTPClient
    .auth(AUTH_METHOD, String, String) never throws, it's not
    thrown
    + Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in
    SSLSocketUtils
    + Fix PMD UnnecessaryFullyQualifiedName
    + Fix PMD UnusedFormalParameter
    + Fix PMD AvoidBranchingStatementAsLastInLoop in org.apache
    .commons.net.bsd.RCommandClient
    + Fix PMD UselessOverridingMethod in org.apache.commons.net
    .telnet.TelnetClient
    + Fix PMD UnnecessaryModifier
    + Deprecate MLSxEntryParser default constructor in favor of
    MLSxEntryParser.getInstance()
    + Deprecate direct access to org.apache.commons.net.nntp.Article
    .kid and next fields
    + Fix SpotBugs CT_CONSTRUCTOR_THROW in Base64 by implementing
    finalize() as a noop to avoid finalizer attacks
    + Add missing Javadoc to ListenerList
    + Add missing Javadoc to SubnetUtils
    + Deprecate PrintCommandListeners.PrintCommandListeners()
    + Deprecate NtpUtils.NtpUtils()
    + Deprecate FTPFileFilters.FTPFileFilters()
    + Avoid multiple possible NullPointerException in SocketClient
    .verifyRemote(Socket)
    + PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
    doesn't always use an end-of-line
    + FTPClientExample uses the wrong FTP system type to parse file
    lines
    + Base64 does not call super.finalize()
    + TFTPServer does not call super.finalize()
    + KeyManagerUtils.loadStore(String, File, String) shouldn't
    ignore an IOException closing a keystore stream; use
    try-with-resources
    + NNTPClient.readNewsgroupListing() can use an ArrayList instead
    of a Vector
    + Deprecate org.apache.commons.net.util.Charsets
    + Performance: NTFTPEntryParser.parseFTPEntry(String) doesn't
    need to parse timestamps if there is no name
    + Improve error handling in org.apache.commons.net.ftp.parser
    .DefaultFTPFileEntryParserFactory
    .createFileEntryParser(String, FTPClientConfig)
    + Fail-fast in org.apache.commons.net.PrintCommandListener
    .PrintCommandListener(PrintWriter, boolean, char, boolean) if
    the PrintWriter is null
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolCommandSent(ProtocolCommandEvent)
    + Avoid NullPointerException in org.apache.commons.net
    .PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
  * Changes
    + Bump org.apache.commons:commons-parent from 70 to 85 #261,
    [#278], #280, #285, #298, #293, #300, #345
    + Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.18.0
    [#268], #273, #281, #354
    + Bump commons-io:commons-io from 2.16.1 to 2.20.0 #286, #308
    + Bump org.apache.commons:commons-collections4 from 4.5.0-M2 to
    4.5.0 #314
    + Bump org.apache.ftpserver:ftpserver-core from 1.2.0 to 1.2.1</changelog>
  <changelog author="fstrba@suse.com" date="1782129604">- Upgrade to 3.13.0
  * New features
    + Add DatagramSocketClient.getDefaultTimeoutDuration() and
    deprecate getDefaultTimeout()
    + NET-741: Add subnet IPv6 handling with SubnetUtils6 #391
  * Fixed Bugs
    + DaytimeTCPClientTest now should now pass inside most VPNs
    + Migrate tests to JUnit5 #358, #359
    + Fix malformed Javadoc comments
    + IMAPExportMbox now restores the current thread's interrupt
    flag when catching InterruptedException
    + IOUtil.readWrite() now restores the current thread's interrupt
    flag when catching InterruptedException
    + TelnetInputStream now restores the current thread's interrupt
    flag when catching InterruptedException
    + NET-740: FTP fails to parse listings for Linux vsftpd in
    Chinese or Japanese #393
    + TelnetInputStream.read() doesn't preserve the original
    InterruptedException as the cause of its
    InterruptedIOException
    + FTPClient._storeFile(String, String, InputStream) doesn't
    always close it's internal socket when an exception is thrown
    early in processing
    + ListenerList.removeListener(T) now ignores null input to avoid
    a NullPointerException
    + ListenerList.addListener(T) now ignores null input
    + Fix typo in FTPConnectionClosedException message from FTP
    .getReply(boolean)
    + Reimplement Util.copyReader() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Reimplement Util.copyStream() with IOUtils.copyLarge()
    + Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils
    .copyLarge(Reader, Writer)
  * Changes
    + Bump org.apache.commons:commons-parent from 85 to 97 #371,
    [#388], #389
    + Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
    + Bump Util.DEFAULT_COPY_BUFFER_SIZE from 1 KiB to 8 KiB</changelog>
</package>
<package pkgid="2287ab5814acd8c8bea641d3cdf969bea47535b54b831cb87cae7a4993617823101c09ec58a5162db60bf21be6cfb12fd9d5acb79108244dc6ded86e64db6ea5" name="apache-commons-net-javadoc" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1404820800">- Fix sle build properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java 1.6 or newer to build</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Specify java source and target 1.6 in order to allow building
  with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1551528000">- Rename to apache-commons-net
- Upgrade to version 3.6
- Generate and customize the ant build file</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Remove reference to the parent pom, since we don't build with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fridrich.strba@bluewin.ch" date="1670241600">- Upgrade to 3.9.0 (Security fixes)
  * Changes in 3.9.0
    + Use yyyy instead of YYYY in SimpleDateFormat #97.
    Fixes NET-708.
    + Prevent serialization of the 4 classes that implement
    Serializable. It is not useful and is unlikely to work
    properly.
    + Use Math.min and Math.max method instead of manual
    calculations. #104.
    + Add FTP option to toggle use of return host like CURL.
    Fixes NET-711, bsc#1206018, CVE-2021-37533.
    + FTPSClient execPROT removes proxy settings #90. Fixes NET-642.
    + JUnit5 assertThrows SimpleSMTPHeaderTestCase #121.
    + JUnit5 assertThrows TestTimeInfo #120.
    + Simplify conditions avoiding extra operations #88.
    + Remove reflection from SSLSocketUtils.
    + Process files with spaces in name for OS400 #95.
    Fixes NET-707.
    + [FTP] Add FTPClient.mdtmInstant(String).
    + [FTP] Add MLSxEntryParser.parseGmtInstant(String).
    + [FTP] Add FTPClient.getControlKeepAliveReplyTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveReplyTimeout(Duration).
    + [FTP] Add FTPClient.getControlKeepAliveTimeoutDuration().
    + [FTP] Add FTPClient.setControlKeepAliveTimeout(Duration).
    + [FTP] Add FTPClient.getDataTimeout().
    + [FTP] Add FTPClient.setDataTimeout(Duration).
    + [FTP] Add FTPFile.getTimestampInstant().
  * Changes in 3.8.0
    + Add and use NetConstants.
    + Add and use SocketClient.applySocketAttributes().
    + [FTP] Add FTPClient.hasFeature(FTPCmd).
    + [FTP] Add FTPClient.mdtmCalendar(String).
    + [IMAP] Fix concurrent counting of chunks in IMAPExportMbox.
    + Fix possible if rare NPEs in tests.
    + Update SocketClient default connect timeout from ∞ to 60
    seconds #51. Fixes NET-685.
    + Apply SocketClient timeout after connection but before SSL
    negotiation. Fixes NET-695.
    + Minor Improvements #71, #72.
  * Changes in 3.7.2
    + Host name is not set on the SSLSocket causing
    isEndpointCheckingEnabled to fail. Fixes NET-689.
    + Fix possible socket and input stream leak on socket exception
    in org.apache.commons.net.ftp.FTPClient._retrieveFile(String,
    String, OutputStream).
    + Performance issue when using the FTPClient to retrieve
    files #65. Fixes NET-690.
    + Improve Javadoc for IMAPSClient #68. Fixes NET-691.
  * Changes in 3.7.1
    + [FTPS] javax.net.ssl.SSLException: Unsupported or unrecognized
    SSL message, #59. Fixes NET-687.
  * Changes in 3.7
    + IMAPClient.APPEND does not always calculate the correct
    length. Fixes NET-673.
    + ALLO FTP Command for files &gt;2GB. Fixes NET-646.
    + IMAPClient could simplify using empty arguments. Fixes
    NET-615.
    + IMAP fails to quote/encode mailbox names. Fixes NET-614.
    + NPE when closing telnet stream. Fixes NET-643.
    + Add Automatic-Module-Name MANIFEST entry for Java 9
    compatibility. Fixes NET-648.
    + SubnetUtils.SubnetInfo.isInRange("0.0.0.0") returns true for
    CIDR/31, 32. Fixes NET-641.
    + Telnet subnegotiations hard-limited to 512 bytes - allow
    override. Fixes NET-638.
    + MVSFTPEntryParser.preParse - MVS, z/OS - allow for merged
    Ext/Used fields. Fixes NET-639.
    + examples should be in org.apache.commons.net subpackage. Fixes
    NET-636.
    + Add SIZE command support. Fixes NET-634.
    + Add POP3ExportMbox example code
    + Add XOAUTH2 to IMAP and SMTP. Fixes NET-633.
    + FTPHTTPClient - support for encoding other than UTF-8. Fixes
    NET-632.
    + Bug in MVSFTPEntryParser.parseUnixList (FindBugs). Fixes
    NET-631.
    + Error when using org.apache.commons.net.ftp.FTPClient
    setControlKeepAliveTimeout. Fixes NET-584.
    + SubnetUtils#SubnetUtils - improved comment. Fixes NET-626.
    + SubnetUtils - improve construction. Fixes NET-625.
    + SubnetInfo#getCidrSignature - improve functions. Fixes
    NET-624.
    + SubnetInfo#toCidrNotation: A wrong format subnet mask is
    allowed. Fixes NET-624.
    + SubnetUtils - fixed spelling errors. Fixes NET-623.
    + SubnetUtils#SubnetInfo - remove unnecessary accessors. Fixes
    NET-621.
    + SubnetUtils - improve binary netmask algorithm. Fixes NET-619.
    + System Information Leak in ftp parser. Fixes NET-613.
    + VMS ftp LIST parsing results in empty file list. Fixes
    NET-678.
    + FTPListParseEngine should support listing via MLSD. Fixes
    NET-674.
    + NullPointerException when FTPClient remote verification fails.
    Fixes NET-663.
    + 227 Entering Passive Mode. Fixes NET-649.
    + Next and Previous IP Address in SubnetUtils.SubnetInfo. Fixes
    NET-660.
    + MVSFTPEntryParser doesn't support Record Formats of U. Fixes
    NET-682.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="426ebd27734e5f5e20fe0d0da8486b9b1d3e87f2d0987795265c4df3466a99920000094572c5f4493f346e47afb7bbba5f3f1bdc6faee312f95796cd5103f864" name="apache-commons-ognl" arch="noarch">
  <version epoch="0" ver="4.0~20191021git51cf8f4" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1583150400">- Initial packaging of apache-commons-ognl git checkout from
  20191021 (hash 51cf8f4)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604404800">- Fix javadoc build on some systems</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8 (jsc#SLE-23217)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="3319ec26231af221fc3a1ce110dd66ec45613dcf9cc645a21a861f992b4188e6f1094c7f98c04ee955b469a50739d8d0f5256ecfa9d5e90703a537f3f6723a65" name="apache-commons-ognl-javadoc" arch="noarch">
  <version epoch="0" ver="4.0~20191021git51cf8f4" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1583150400">- Initial packaging of apache-commons-ognl git checkout from
  20191021 (hash 51cf8f4)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604404800">- Fix javadoc build on some systems</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8 (jsc#SLE-23217)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="0bc9990c97a4f3aacff0be911c85d8d54c266ad284ed7d73b73119dd47991278dea39751231a5b41eea6b3085823e1f09209f6c8e0b28b2712c415f5ca6a8f2a" name="apache-commons-parent" arch="noarch">
  <version epoch="0" ver="71" rel="bp160.1.10"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="darin@darins.net" date="1397476800">- add xz buildrequires for sles
- add buildroot for sles</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="tchvatal@suse.com" date="1495195201">- Do not require java-devel for build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Upgrade to version 47 and cleanup the pom file installation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554465600">- Make the package suitable for building with maven. Do not patch
  out useful plugins.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Upgrade to version 52
- Full changelog:
  * github.com/apache/commons-parent/blob/master/RELEASE-NOTES.txt</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1660132800">- Upgrade to version 53
- Changes:
  * New features:
  - Add .asf.yaml to RAT excludes.
  - Add versions-maven-plugin run for this build.
  - Add maven-checkstyle-plugin to pluginManagement.
  - Allow Maven PMD plugin to override PMD implementation jars
    with property "commons.pmd-impl.version".
  - Add property commons.javadoc16.java.link.
  - Add and use property commons.enforcer-plugin.version.
  - Add SpotBugs to plugin management section.
  - Add and use property commons.buildnumber-plugin.version.
  - Add property commons.javadoc17.java.link.
  * Fixed Bugs:
  - Use HTTPS for Javadoc links to Oracle.
  - Use HTTPS for most links to Apache.
  - Rename property biz.aQute.bndlib.version -&gt;
    commons.biz.aQute.bndlib.version.
  * Changes:
  - Bump versions-maven-plugin from 2.7 to 2.10.0
  - Bump maven-project-info-reports-plugin from 3.1.0 to 3.2.2
  - Bump Jacoco from 0.8.5 to 0.8.7
  - Bump actions/setup-java from v1.4.0 to v2
  - Bump commons-build-plugin 1.11 -&gt; 1.12
  - Bump biz.aQute.bndlib from 5.1.2 to 6.2.0
  - Bump actions/checkout from 2.3.1 to 3
  - Bump com.github.siom79.japicmp:japicmp-maven-plugin
    0.14.3 -&gt; 0.15.7
  - Bump org.apache.maven.wagon:wagon-ssh 3.4.0 -&gt; 3.4.3
  - Bump maven-pmd-plugin 3.13.0 -&gt; 3.16.0
  - Bump commons.checkstyle-plugin.version 3.1.1 -&gt; 3.1.2
  - Bump actions/cache from 2 to 3
  - Bump animal-sniffer-maven-plugin from 1.19 to 1.21
  - Bump com.puppycrawl.tools:checkstyle from 8.40 to 9.0.2
  - Bump maven-bundle-plugin from 5.1.1 to 5.1.4
  - Bump maven-jxr-plugin from 3.0.0 to 3.1.1
  - Bump maven-javadoc-plugin from 3.2.0 to 3.3.2
  - Bump commons.pmd-impl.version from 6.29.0 to 6.44.0
  - Bump spotbugs-maven-plugin from 4.0.4 to 4.5.3.0
  - Bump spotbugs from 4.0.6 to 4.5.3
  - Bump maven-enforcer-plugin from 3.0.0-M3 to 3.0.0
  - Bump buildnumber-maven-plugin from 1.4 to 3.0.0
  - Bump maven-site-plugin from 3.9.1 to 3.11.0
  - Bump wagon-ssh from 3.4.3 to 3.5.1
  - Bump checkstyle from 9.2 to 9.3
  - Bump maven-compiler-plugin from 3.8.1 to 3.10.1
  - Bump maven-jar-plugin from 3.2.0 to 3.2.2
  - Bump commons-release-plugin from 1.7 to 1.8.0</changelog>
  <changelog author="Gus Kenion &lt;gus.kenion@suse.com&gt;" date="1720699200">- Upgrade to version 71
  * Maintenance and update dependencies
    + Full list of updated dependencies for all versions can be
    found in RELEASE-NOTES.txt in source archive
- Update upstream source to GitHub
- Includes changes from version 70
  * New features:
    + Add profile benchmark for JMH benchmarks.
    + Add JMH to dependency management section.
  * Fixed Bugs:
    + Set Javadoc link to latest Java API LTS version.
    + Set Jacoco defaults to 1.00.
  * Update dependencies
- Includes changes from version 69
  * Maintenance and update dependencies
- Includes changes from version 68
  * Maintenance and update dependencies
- Includes changes from version 67
  * Maintenance and update dependencies
- Includes changes from version 66
  * New features:
    + Add property commons.javadoc21.java.link.
    + Add artifact:check-buildplan to the validate phase.
  * Fixed Bugs:
    + Drop markmail from mailingList section
  * Update dependencies
- Includes changes from version 65
  * New features:
    + Add exec-maven-plugin to plugin management section.
  * Fixed Bugs:
    + s/commons.surefire-report.version/commons.surefire.version/
    incorrectly added in 714c3a9
  * Update dependencies
- Includes changes from version 64
  * New features:
    + Restore building on Java 8 (com.puppycrawl.tools:checkstyle
    10.x requires Java 11).
    + Rename profile 'moditect' to 'java-9-up'.
    + Merge profile 'jdk9-compiler' into 'java-9-up' and remove
    'jdk9-compiler'.
  * Changes:
    + Use Checkstyle 9.x on Java less than 11 and Checkstyle 10.x
    on Java 11 and up.
  * Removed:
    + Remove 'javasvn' profile.
    + Remove '.svn'-activated profile.
    + Remove 'jdk9-compiler.' profile.
- Includes changes from version 63
  * New features:
    + Add commons.conf.dir property defaulting to src/conf.
  * Update dependencies
  * Removed:
    + Remove obsolete Travis CI profiles.
- Includes changes from version 62
  * Fixed Bugs:
    + Use addServiceUses when generating JPMS module info.
- Includes changes from version 61
  * Fixed Bugs:
    + Always use version.maven-source-plugin 3.2.1 (workaround
    MSOURCES-143).
- Includes changes from version 60
  * New features:
    + Add SPDX SBOM in the package phase.
  * Fixed Bugs:
    + Reuse the parent POM's maven-enforcer-plugin configuration
    + Workaround MSOURCES-143 by using version.maven-source-plugin
    3.2.1 on Java 8.
    + Remove property commons.source-plugin.version and reuse the
    parent POM's version.maven-source-plugin.
  * Update dependencies
- Includes changes from version 59
  * New features:
    + Add moditect profile for JPMS on Java &gt;= 9.
    + Add POM property commons.javadoc.javaee8.link.
    + Add POM property commons.javadoc.javaee9.link.
    + Add POM property commons.javadoc.javaee9.1.link.
    + Add POM property commons.javadoc.javaee10.link.
    + Don't use the animal sniffer plugin on Java &gt;=9, use the
    release flag instead.
  * Update dependencies
- Includes changes from version 58
  * New features:
    + Add commons.javadoc20.java.link.
  * Update dependencies
- Includes changes from version 57
  * Fixed Bugs:
    + Fix cyclonedx-maven-plugin configuration for multi-module
    projects.
    + Drop non-reproducible Implementation-Build in jar #242.
    + Use Java compiler release flag when compiling with Java &gt;= 9.
  * Update dependencies
- Includes changes from version 56
  * Fixed Bugs:
    + Add Privacy link to site.xml
  * Update dependencies
- Includes changes from version 55
  * Changes:
    + Make CycloneDX work better with multi-module projects.
    + New interface methods must be default methods to maintain BC.
    + Add property commons.javadoc19.java.link.
  * Update dependencies
- Includes changes from version 54
  * New features:
    + Add .vscode/* to RAT excludes.
    + Add property commons.javadoc18.java.link.
    + Add JUnit BOM to dependency management.
    + Add CycloneDX SBOM generation #122.
    + Add SPDX SBOM generation.
  * Update dependencies</changelog>
</package>
<package pkgid="48179c41aedcd52a78034316e39510c272644c9f70c730c451d16a5ae4475a799308e1162b927f8d00f03bca90f4b4cb888e64829f1ae43e50c1b368f95ccb31" name="apache-commons-pool" arch="noarch">
  <version epoch="0" ver="1.6" rel="bp160.1.12"/>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.3
- changes in BuildRequires:
  - java2-deve-packages was substituded by java-devel
  - added a junit
  - added a maven build support and maven related BuildRequires
  - xml-commons-apis was moved to the maven build branch
- added a gcj build support
- included a maven depmap files
- remove a source=1.4 from build and a java14compat patch
- provides and obsoletes of main package contains the version
- new tomcat5 subpackage
- new manual subpackage (build only with maven)</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1475150400">- Rename from jakarta-commons-pool to apache-commons-pool
- Version update to 1.6:
  * drop the tomcat5 package, we need pool2 to work with new tomcat
  * Last and final from the pool1 series, new pool2 was introduced
    for future developement.</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * commons-pool-1.6-sourcetarget.patch
    + Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * commons-pool-1.6-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility
- Run fdupes on the documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544702400">- Install as maven artifact</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698235200">- Modified patch:
  * commons-pool-1.6-sourcetarget.patch
    + In ant Javac task, use "release" with compilers that support
    it. Fixes some return value incompatibilities with jdk 21</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1714478400">- Simplify the spec: fix broken links and remove old macros</changelog>
</package>
<package pkgid="797a974768323814929ade0f583a471b12b45634b2b0fe75a0d8803137cac23efb5c245fa89b50c6b39d667293f3c7616393a20791fe6df78b55e858c861d6eb" name="apache-commons-pool-javadoc" arch="noarch">
  <version epoch="0" ver="1.6" rel="bp160.1.12"/>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.3
- changes in BuildRequires:
  - java2-deve-packages was substituded by java-devel
  - added a junit
  - added a maven build support and maven related BuildRequires
  - xml-commons-apis was moved to the maven build branch
- added a gcj build support
- included a maven depmap files
- remove a source=1.4 from build and a java14compat patch
- provides and obsoletes of main package contains the version
- new tomcat5 subpackage
- new manual subpackage (build only with maven)</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1475150400">- Rename from jakarta-commons-pool to apache-commons-pool
- Version update to 1.6:
  * drop the tomcat5 package, we need pool2 to work with new tomcat
  * Last and final from the pool1 series, new pool2 was introduced
    for future developement.</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * commons-pool-1.6-sourcetarget.patch
    + Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * commons-pool-1.6-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility
- Run fdupes on the documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544702400">- Install as maven artifact</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698235200">- Modified patch:
  * commons-pool-1.6-sourcetarget.patch
    + In ant Javac task, use "release" with compilers that support
    it. Fixes some return value incompatibilities with jdk 21</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1714478400">- Simplify the spec: fix broken links and remove old macros</changelog>
</package>
<package pkgid="f8f4a03778cbba381716a28842ce65ba1846243c2f534469f32db374321cc4d6ac3a922100fddb6e2574e15a95683776daa247b20f17725bbf056f9de5efd7c9" name="apache-commons-pool2" arch="noarch">
  <version epoch="0" ver="2.13.1" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1782129600">- Update to 2.8.0
  * New features:
    + POOL-378: Deprecate PoolUtils.prefill(ObjectPool, int) in
    favor of ObjectPool.addObjects(int)
    + POOL-379: Deprecate PoolUtils.prefill(KeyedObjectPool, K, int)
    in favor of KeyedObjectPool.addObjects(K, int)
    + POOL-380: Deprecate PoolUtils.prefill(KeyedObjectPool,
    Collection, int) in favor of KeyedObjectPool
    .addObjects(Collection, int)
  * Fixed Bugs:
    + POOL-374: org.apache.commons.pool2.impl.GenericKeyedObjectPool
    .returnObject(K, T) should throw IllegalStateException instead
    of NullPointerException when a key is not found in the pool
    map
    + POOL-376: Fixed regression from original fix for POOL-356
    which could result in NPE when destroying objects
    + POOL-326: Eliminated NPE / ISE exceptions due to keyed pools
    being prematurely removed
    + Close BufferedOutputStream in test before calling toString on
    underlying BufferedOutputStream #26
    + [Javadoc] Add missing @throws comment in
    SoftReferenceObjectPool. #28
  * Changes:
    + POOL-375: Update optional library cglib from 3.2.12 to 3.3.0
    + Update site build from Apache Commons BCEL 6.3.1 to 6.4.1
    + POOL-377: Update optional library org.ow2.asm:asm-util from
    7.1 to 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1782129601">- Update to 2.8.1
  * New features:
    + POOL-385: Added Automatic-Module-Name to support JPMS #31
  * Fixed Bugs:
    + POOL-386: Refactored EvictionTimer usage tracking to fix
    POOL-386 and handle abandoned pools. #32
    + [Javadoc] Add missing @throws comment in PoolUtils. #27
  * Changes:
    + POOL-384: Update optional library org.ow2.asm:asm-util from
    7.2 to 8.0.1
    + Update site reports from org.apache.bcel:bcel 6.4.1 to 6.5.0
    + Update site reports from maven-pmd-plugin 3.12.0 to 3.13.0
    + Update build from biz.aQute.bnd:biz.aQute.bndlib
    5.1.0 -&gt; 5.1.2
    + Update actions/checkout from v1 to v2.3.1 #33
    + Update commons-parent from 50 to 51 #36
    + Update Checkstyle plugin from 3.0.0 to 3.1.1
    + Update JApiCmp from 0.14.1 to 0.14.3
    + Update animal-sniffer-maven-plugin from 1.16 to 1.19</changelog>
  <changelog author="fstrba@suse.com" date="1782129602">- Update to 2.9.0
  * Changes:
    + POOL-387: Object factory destroy method should carry
    information on activation context
    + Update spotbugs from 4.0.6 to 4.1.3, #37, #41, #46
    + Update actions/checkout from v2.3.1 to v2.3.3 #56, #45
    + Update actions/setup-java from v1.4.0 to v1.4.2 #42
    + Update optional asm-util from 8.0.1 to 9.0 #44</changelog>
  <changelog author="fstrba@suse.com" date="1782129603">- Update to 2.10.0
  * New features:
    + Add and use java.time.Duration APIs timeouts instead of using
    ints for seconds.
    + Implement AbandonedConfig for GenericKeyedObjectPool #67
  * Fixed Bugs:
    + Simplify Assertions in tests #77
    + Replace C-style array declaration with Java style #80
    + Use Objects.equals(); Use Anonymous type; Use method reference
    instead Lambda; Replace Loop with Collection.removeIf(). #81
    + Use diamond operator. #82
    + Code clean ups. #83
  * Changes:
    + Bump spotbugs-maven-plugin from 4.0.4 to 4.2.1 #48, #53, #59,
    [#62]
    + Bump actions/setup-java from v1.4.2 to v2, #47
    + Bump junit from 4.13 to 4.13.1 #50
    + Bump biz.aQute.bndlib from 5.1.2 to 5.3.0, #51, #66
    + POOL-389: Migrate to JUnit 5 #57
    + POOL-389: Minor Improvements #58, #60
    + Bump actions/checkout from v2.3.3 to v2.3.4 #54
    + Bump maven-pmd-plugin from 3.13.0 to 3.14.0 #55
    + Update commons.japicmp.version 0.14.3 -&gt; 0.15.3
    + Bump actions/cache from v2 to v2.1.6 #65, #75, #84
    + Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2 #61
    + Bump asm-util from 9.0 to 9.1 #64
    + Bump spotbugs from 4.2.1 to 4.2.3 #68, #73, #74
    + Bump junit-bom from 5.7.1 to 5.8.0-M1 #76
    + Bump maven-bundle-plugin from 5.1.1 to 5.1.2 #70
    + Bump animal-sniffer-maven-plugin from 1.19 to 1.20</changelog>
  <changelog author="fstrba@suse.com" date="1782129604">- Update to 2.11.0
  * New features:
    + Track timestamps with Instants instead of longs. There is
    currently no increased precision on Java 8, but starting with
    Java 9, the JRE SystemClock precision is increased usually
    down to microseconds, or tenth of microseconds, depending on
    the OS, Hardware, and JVM implementation.
    Add and use:
    ° DefaultPooledObject.getCreateInstant()
    ° DefaultPooledObject.getLastUsedInstant()
    ° PooledObject.getCreateInstant()
    ° PooledObject.getLastBorrowInstant()
    ° PooledObject.getLastReturnInstant()
    ° PooledObject.getLastUsedInstant()
    ° TrackedUse#getLastUsedInstant()
    + Add BaseObjectPoolConfig.setEvictorShutdownTimeoutDuration(Duration),
    deprecate setEvictorShutdownTimeoutMillis(Duration)
    + Add BaseGenericObjectPool.{get|set}MaxWaitDuration(Duration)
    and deprecate {get|set}MaxWaitMillis(long)
    + Add BaseObjectPoolConfig.{get|set}MaxWaitDuration(Duration)
    and deprecate {get|set}MaxWaitMillis(long)
    + Add and use Duration APIs instead of ints or longs.
    ° Add and use Duration APIs in BaseGenericObjectPool:
    getDurationBetweenEvictionRuns(),
    getEvictorShutdownTimeoutDuration(),
    getMinEvictableIdleDuration(),
    getSoftMinEvictableIdleDuration(), setMaxWait(Duration),
    setMinEvictableIdle(Duration),
    setSoftMinEvictableIdle(Duration)
    ° Add and use Duration APIs in BaseObjectPoolConfig:
    getDurationBetweenEvictionRuns(),
    getEvictorShutdownTimeoutDuration(),
    getMinEvictableIdleDuration(),
    getSoftMinEvictableIdleDuration()
    ° Add and use Duration APIs in EvictionConfig:
    getIdleEvictDuration(), getIdleSoftEvictDuration()
    ° Add and use Duration APIs in PooledObject: getIdleDuration(),
    getActiveDuration()
    ° No need to initialize instance variables to their default
    values
    ° Update Javadocs.
    ° Update toString() implementations with duration labels
    + POOL-396: Handle validation exceptions during eviction. #85
    + POOL-395: Improve exception thrown in GenericObjectPool
    .borrowObject when pool is exhausted. Added
    BaseGenericObjectPool.setMessagesStatistics(boolean)
    + Add and use AbandonedConfig.copy(AbandonedConfig) to fix CPD
    code duplication issues in GenericKeyedObjectPool and
    GenericObjectPool
    + Pull up AbandonedConfig and related methods from
    GenericKeyedObjectPool and GenericObjectPool to
    BaseGenericObjectPool (fix for CPD issues).
    ° BaseGenericObjectPool.getLogAbandoned()
    ° BaseGenericObjectPool.getRemoveAbandonedOnBorrow()
    ° BaseGenericObjectPool.getRemoveAbandonedOnMaintenance()
    ° BaseGenericObjectPool.getRemoveAbandonedTimeout()
    ° BaseGenericObjectPool.getRemoveAbandonedTimeoutDuration()
    ° BaseGenericObjectPool.isAbandonedConfig()
    ° BaseGenericObjectPool.setAbandonedConfig(AbandonedConfig)
  * Fixed Bugs:
    + Fix "[WARNING] Old version of checkstyle detected. Consider
    updating to &gt;= v8.30." Update Checktyle to 8.44
    + Make Duration setters use their respective default values when
    null
    + Call swallowException(Exception) instead of printing
    exceptions to the console in GenericKeyedObjectPool
    .removeAbandoned(AbandonedConfig) and GenericObjectPool
    .removeAbandoned(AbandonedConfig)
    + Fix Javadoc link reference #91
    + No need to initialize to default values. #90
    + Bump org.ow2.asm:asm-util from 9.1 to 9.2
    + Bump com.github.spotbugs:spotbugs from 4.2.3 to 4.3.0
    + Bump checkstyle from 8.44 to 8.45 #92</changelog>
  <changelog author="fstrba@suse.com" date="1782129605">- Update to 2.11.1
  * Fixed Bugs:
    + Getting a PooledObject's active duration returns a negative
    duration when the object is borrowed but not returned.
    Affects:
    ° PooledObject.getActiveDuration()
    ° PooledObject.getActiveTime()
    ° PooledObject.getActiveTimeMillis()
    + The default implementation of TrackedUse.getLastUsedInstant()
    uses seconds instead of milliseconds
    + This interface is not implemented within Apache Commons Pool
    but affects Apache Commons DBCP
    + DefaultPooledObject.getIdleTime() drops nanoseconds on Java 9
    and greater
    + Fix field label in BaseGenericObjectPool toString() builder:
    From timeBetweenEvictionRunsMillis to
    durationBetweenEvictionRuns
    + Fix field label in BaseObjectPoolConfig toString() builder:
    From maxWaitMillis to maxWaitDuration
    + Fix field label in NoSuchElementException message for
    GenericObjectPool.borrowObject(Duration): From
    borrowMaxWaitMillis to borrowMaxWaitDuration
    + Reimplement DefaultPooledObject.getIdleDuration() using
    Duration computation
    + Reimplement BaseGenericObjectPool.maxBorrowWait as a Duration
    instead of a long
    + Minors Changes #89
  * Changes:
    + Bump checkstyle from 8.45 to 8.45.1 #93
    + Bump spotbugs from 4.2.3 to 4.3.0 and ignore new medium
    warnings EI_EXPOSE_REP and EI_EXPOSE_REP2</changelog>
  <changelog author="fstrba@suse.com" date="1782129606">- Update to 2.12.0
  * New features:
    + Add PooledObject.getFullDuration()
    + Add GenericKeyedObjectPool.getKeys()
    + Add KeyedObjectPool.getKeys()
    + Add github/codeql-action.
    + Add BaseGenericObjectPool.Evictor.toString().
    + Make BaseGenericObjectPool implement AutoCloseable.
    + Add BaseGenericObjectPool methods that return Duration and
    deprecate equivalents that return milliseconds as long
    + Add BaseObjectPoolConfig.DEFAULT_DURATION_BETWEEN_EVICTION_RUNS
    and deprecate BaseObjectPoolConfig
    .DEFAULT_TIME_BETWEEN_EVICTION_RUNS
  * Fixed Bugs:
    + POOL-401: Ensure that capacity freed by invalidateObject is
    available to all keyed pools
    + POOL-391: Ensure capacity freed by clear is made available to
    GKOP borrowers
    + POOL-402: Check blockWhenExhausted in hasBorrowWaiters #116
    + Simplify test assertion with similar call but simpler. #131
    + POOL-405: NullPointerException GenericKeyedObjectPool
    .invalidateObject(GenericKeyedObjectPool.java:1343)
    + POOL-408: Fix a typo related to KeyedPooledObjectFactory on
    the site and Javadoc
    + Fail-fast on null input for DefaultPooledObjectInfo
    .DefaultPooledObjectInfo(PooledObject) with a
    NullPointerException
    + POOL-393: Improve BaseGenericObjectPool's JMX Register
    performance when creating many pools
    + Null-guard in GenericObjectPool.use(T) like other call sites
    of GenericObjectPool.getPooledObject(T)
    + POOL-411: Guard against NPE when deregistering a key at the
    end of borrow
    + Make private GenericKeyedObjectPool.ObjectDeque class static
    + Make private BaseGenericObjectPool.StatsStore class static
    + [StepSecurity] ci: Harden GitHub Actions #225
    + Fix possible NPE in DefaultPooledObjectInfo
    .getPooledObjectToString()
    + Fix possible NPE in DefaultPooledObjectInfo
    .getPooledObjectType()
  * Changes:
    + Bump actions/cache from 2.1.6 to 3.0.10 #117, #138, #158,
    [#174], #178
    + Bump actions/checkout from 2.3.4 to 3.0.2 #109, #112, #134
    + Bump actions/setup-java from 2 to 3.5.1
    + Bump spotbugs from 4.3.0 to 4.7.3 #94, #99, #106, #114, #122,
    [#129], #137, #155, #168, #187
    + Bump spotbugs-maven-plugin from 4.3.0 to 4.7.3.0 #102, #110,
    [#119], #125, #128, #139, #149, #157, #161, #169, #180, #190
    + Bump junit-bom from 5.8.0-M1 to 5.9.1 #96, #100, #103, #120,
    [#160], #172
    + Bump checkstyle from 8.45.1 to 9.3 #97, #104, #111, #121,
    [#126], #132
    + Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #166
    + Bump maven-pmd-plugin from 3.14.0 to 3.19.0 #101, #153, #170
    + Bump pmd from 6.44.0 to 6.52.0
    + Bump biz.aQute.bndlib from 5.3.0 to 6.4.1 #105, #118, #135,
    [#151], #154, #191, #223
    + Bump maven-bundle-plugin from 5.1.3 to 5.1.8 #127, #146, #148,
    [#159], #164
    + Bump maven-surefire-plugin from 3.0.0-M7 to 3.0.0-M6 #142,
    [#152]
    + Bump asm-util from 9.2 to 9.5 #141, #179, #220
    + Bump commons-parent from 52 to 58 #173, #195, #204, #222
    + Bump japicmp-maven-plugin from 0.15.3 to 0.16.0
    + Bump animal-sniffer-maven-plugin 1.20 to 1.21
    + Bump Apache Commons BCEL 6.5.0 to 6.7.0 #194
    + Bump commons-lang3 from 3.12.0 to 3.13.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129607">- Update to 2.12.1
  * Fixed Bugs:
    + Use java.time.Instant precision in org.apache.commons.pool2
    .impl.ThrowableCallStack.Snapshot throwable message
    + GenericObjectPool.borrowObject(Duration) doesn't obey its
    borrowMaxWait Duration argument when the argument is different
    from GenericObjectPool.getMaxWaitDuration()
    + POOL-418:  The maximum wait time for GenericObjectPool
    .borrowObject(*) may exceed expectations due to a spurious
    thread wakeup
    + Javadoc is missing its Overview page
    + Migrate site generation templates to
    https://maven.apache.org/xsd/xdoc-2.0.xsd
  * Changes:
    + Bump org.apache.commons:commons-parent from 62 to 79
    + [test] Bump commons-lang3 from 3.13.0 to 3.17.0
    + [site] Pickup org.apache.bcel:bcel version from parent POM
    + [test] Bump org.ow2.asm:asm-util from 9.5 to 9.7.1</changelog>
  <changelog author="fstrba@suse.com" date="1782129608">- Update to 2.13.0
  * New features:
    + Add org.apache.commons.pool2.PooledObject
    .nonNull(PooledObject)
    + Add org.apache.commons.pool2.PooledObject
    .getObject(PooledObject)
    + Made statistics collection optional in BaseGenericObjectPool
    [#429]
  * Fixed Bugs:
    + POOL-424: GenericObjectPool.invalidateObject() can leave other
    threads waiting to borrow hanging. The fix for this issue
    changes behavior of invalidateObject. This method now always
    tries to add a new instance to the pool to replace the
    invalidated and destroyed instance. As a result of this
    change, abandoned object removal now attemps to replace
    abandoned objects
    + POOL-425: GenericObjectPool addObject does not respect maxIdle
    + POOL-350: Make placement of calls to GKOP reuseCapacity
    configurable
    + POOL-290: TestSoftRefOutOfMemory (unit test) can loop
    infinitely on failure
    + POOL-419: GenericObjectPool counters and object collections
    can be corrupted when returnObject and invalidate are invoked
    concurrently by client threads on the same pooled object
    + POOL-421: GenericObjectPool addObject should return
    immediately when there is no capacity to add
    + POOL-420: The maximum wait time for GenericKeyedObjectPool
    .borrowObject(*) may exceed configured maximum wait time.
    This is the same issue as POOL-418, but for GKOP. Also included
    in this fix is a change to addObject that prevents it from
    waiting for capacity to create. That method now returns
    immediately when there is no capcity to add to the pool under
    the given key
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + POOL-418: The maximum wait time for GenericObjectPool
    .borrowObject(*) may exceed expectations due to a spurious
    thread wakeup. he remaining duration was incorrectly
    calculated and the method did not end up waiting long enough.
    Recompute the remaining duration an additional time when we
    block when exhausted
    + Fix site link from the About page to the Download page, see
    also #387
    + Operation on the "idleHighWaterMark" shared variable in
    "ErodingFactor" class is not atomic
    [org.apache.commons.pool2.PoolUtils$ErodingFactor] At
    PoolUtils.java:[line 98]
    AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE
    + org.apache.commons.pool2.impl.GenericObjectPool
    .create(Duration) should normalize a negative duration to zero
    + Fix potential ConcurrentModificationException in EvictionTimer
    thread clean-up
    + Fix potential ConcurrentModificationException in EvictionTimer
    tasks
  * Changes:
    + Bump org.apache.commons:commons-parent from 79 to 93
    + [test] Bump commons-lang3 from 3.17.0 to 3.20.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129609">- Update to 2.13.1
  * Fixed Bugs:
    + POOL-427: The fix for POOL-425 introduced a regression where
    addObject fails when maxIdle is negative (indicating no limit)
- Removed patch:
  * jakarta-commons-pool-build.patch
    + not needed with this version</changelog>
</package>
<package pkgid="35fb4d5f91037db89a6f28cc310da36412ab62ddeb18c5ccd6762dd12ed7ce34f846553da0ceda7b2181809666e441db19cd3b8acab6b3833107f085eb855b2d" name="apache-commons-pool2" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="160000.2.2"/>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.3
- changes in BuildRequires:
  - java2-deve-packages was substituded by java-devel
  - added a junit
  - added a maven build support and maven related BuildRequires
  - xml-commons-apis was moved to the maven build branch
- added a gcj build support
- included a maven depmap files
- remove a source=1.4 from build and a java14compat patch
- provides and obsoletes of main package contains the version
- new tomcat5 subpackage
- new manual subpackage (build only with maven)</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1475150400">- Rename from jakarta-commons-pool to apache-commons-pool
- Version update to 1.6:
  * drop the tomcat5 package, we need pool2 to work with new tomcat
  * Last and final from the pool1 series, new pool2 was introduced
    for future developement.</changelog>
  <changelog author="tchvatal@suse.com" date="1475150401">- Version update to 2.4.2 release from pool2:
  * rename to latest 2.x pool series for dbcp and other packages</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix javadoc build</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1544702400">- Add maven pom file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Simplify and clean up the spec file: avoid versioned jars</changelog>
</package>
<package pkgid="3b45f11b36032f0f861969cc0d8bb6c33332816e3ef5816c815f6a7a80788a2297b36462010a84724948aee4fe48e68789f4dd3d677828faca9fe72a42ef521d" name="apache-commons-pool2-javadoc" arch="noarch">
  <version epoch="0" ver="2.13.1" rel="160000.1.2"/>
  <changelog author="fstrba@suse.com" date="1782129600">- Update to 2.8.0
  * New features:
    + POOL-378: Deprecate PoolUtils.prefill(ObjectPool, int) in
    favor of ObjectPool.addObjects(int)
    + POOL-379: Deprecate PoolUtils.prefill(KeyedObjectPool, K, int)
    in favor of KeyedObjectPool.addObjects(K, int)
    + POOL-380: Deprecate PoolUtils.prefill(KeyedObjectPool,
    Collection, int) in favor of KeyedObjectPool
    .addObjects(Collection, int)
  * Fixed Bugs:
    + POOL-374: org.apache.commons.pool2.impl.GenericKeyedObjectPool
    .returnObject(K, T) should throw IllegalStateException instead
    of NullPointerException when a key is not found in the pool
    map
    + POOL-376: Fixed regression from original fix for POOL-356
    which could result in NPE when destroying objects
    + POOL-326: Eliminated NPE / ISE exceptions due to keyed pools
    being prematurely removed
    + Close BufferedOutputStream in test before calling toString on
    underlying BufferedOutputStream #26
    + [Javadoc] Add missing @throws comment in
    SoftReferenceObjectPool. #28
  * Changes:
    + POOL-375: Update optional library cglib from 3.2.12 to 3.3.0
    + Update site build from Apache Commons BCEL 6.3.1 to 6.4.1
    + POOL-377: Update optional library org.ow2.asm:asm-util from
    7.1 to 7.2</changelog>
  <changelog author="fstrba@suse.com" date="1782129601">- Update to 2.8.1
  * New features:
    + POOL-385: Added Automatic-Module-Name to support JPMS #31
  * Fixed Bugs:
    + POOL-386: Refactored EvictionTimer usage tracking to fix
    POOL-386 and handle abandoned pools. #32
    + [Javadoc] Add missing @throws comment in PoolUtils. #27
  * Changes:
    + POOL-384: Update optional library org.ow2.asm:asm-util from
    7.2 to 8.0.1
    + Update site reports from org.apache.bcel:bcel 6.4.1 to 6.5.0
    + Update site reports from maven-pmd-plugin 3.12.0 to 3.13.0
    + Update build from biz.aQute.bnd:biz.aQute.bndlib
    5.1.0 -&gt; 5.1.2
    + Update actions/checkout from v1 to v2.3.1 #33
    + Update commons-parent from 50 to 51 #36
    + Update Checkstyle plugin from 3.0.0 to 3.1.1
    + Update JApiCmp from 0.14.1 to 0.14.3
    + Update animal-sniffer-maven-plugin from 1.16 to 1.19</changelog>
  <changelog author="fstrba@suse.com" date="1782129602">- Update to 2.9.0
  * Changes:
    + POOL-387: Object factory destroy method should carry
    information on activation context
    + Update spotbugs from 4.0.6 to 4.1.3, #37, #41, #46
    + Update actions/checkout from v2.3.1 to v2.3.3 #56, #45
    + Update actions/setup-java from v1.4.0 to v1.4.2 #42
    + Update optional asm-util from 8.0.1 to 9.0 #44</changelog>
  <changelog author="fstrba@suse.com" date="1782129603">- Update to 2.10.0
  * New features:
    + Add and use java.time.Duration APIs timeouts instead of using
    ints for seconds.
    + Implement AbandonedConfig for GenericKeyedObjectPool #67
  * Fixed Bugs:
    + Simplify Assertions in tests #77
    + Replace C-style array declaration with Java style #80
    + Use Objects.equals(); Use Anonymous type; Use method reference
    instead Lambda; Replace Loop with Collection.removeIf(). #81
    + Use diamond operator. #82
    + Code clean ups. #83
  * Changes:
    + Bump spotbugs-maven-plugin from 4.0.4 to 4.2.1 #48, #53, #59,
    [#62]
    + Bump actions/setup-java from v1.4.2 to v2, #47
    + Bump junit from 4.13 to 4.13.1 #50
    + Bump biz.aQute.bndlib from 5.1.2 to 5.3.0, #51, #66
    + POOL-389: Migrate to JUnit 5 #57
    + POOL-389: Minor Improvements #58, #60
    + Bump actions/checkout from v2.3.3 to v2.3.4 #54
    + Bump maven-pmd-plugin from 3.13.0 to 3.14.0 #55
    + Update commons.japicmp.version 0.14.3 -&gt; 0.15.3
    + Bump actions/cache from v2 to v2.1.6 #65, #75, #84
    + Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2 #61
    + Bump asm-util from 9.0 to 9.1 #64
    + Bump spotbugs from 4.2.1 to 4.2.3 #68, #73, #74
    + Bump junit-bom from 5.7.1 to 5.8.0-M1 #76
    + Bump maven-bundle-plugin from 5.1.1 to 5.1.2 #70
    + Bump animal-sniffer-maven-plugin from 1.19 to 1.20</changelog>
  <changelog author="fstrba@suse.com" date="1782129604">- Update to 2.11.0
  * New features:
    + Track timestamps with Instants instead of longs. There is
    currently no increased precision on Java 8, but starting with
    Java 9, the JRE SystemClock precision is increased usually
    down to microseconds, or tenth of microseconds, depending on
    the OS, Hardware, and JVM implementation.
    Add and use:
    ° DefaultPooledObject.getCreateInstant()
    ° DefaultPooledObject.getLastUsedInstant()
    ° PooledObject.getCreateInstant()
    ° PooledObject.getLastBorrowInstant()
    ° PooledObject.getLastReturnInstant()
    ° PooledObject.getLastUsedInstant()
    ° TrackedUse#getLastUsedInstant()
    + Add BaseObjectPoolConfig.setEvictorShutdownTimeoutDuration(Duration),
    deprecate setEvictorShutdownTimeoutMillis(Duration)
    + Add BaseGenericObjectPool.{get|set}MaxWaitDuration(Duration)
    and deprecate {get|set}MaxWaitMillis(long)
    + Add BaseObjectPoolConfig.{get|set}MaxWaitDuration(Duration)
    and deprecate {get|set}MaxWaitMillis(long)
    + Add and use Duration APIs instead of ints or longs.
    ° Add and use Duration APIs in BaseGenericObjectPool:
    getDurationBetweenEvictionRuns(),
    getEvictorShutdownTimeoutDuration(),
    getMinEvictableIdleDuration(),
    getSoftMinEvictableIdleDuration(), setMaxWait(Duration),
    setMinEvictableIdle(Duration),
    setSoftMinEvictableIdle(Duration)
    ° Add and use Duration APIs in BaseObjectPoolConfig:
    getDurationBetweenEvictionRuns(),
    getEvictorShutdownTimeoutDuration(),
    getMinEvictableIdleDuration(),
    getSoftMinEvictableIdleDuration()
    ° Add and use Duration APIs in EvictionConfig:
    getIdleEvictDuration(), getIdleSoftEvictDuration()
    ° Add and use Duration APIs in PooledObject: getIdleDuration(),
    getActiveDuration()
    ° No need to initialize instance variables to their default
    values
    ° Update Javadocs.
    ° Update toString() implementations with duration labels
    + POOL-396: Handle validation exceptions during eviction. #85
    + POOL-395: Improve exception thrown in GenericObjectPool
    .borrowObject when pool is exhausted. Added
    BaseGenericObjectPool.setMessagesStatistics(boolean)
    + Add and use AbandonedConfig.copy(AbandonedConfig) to fix CPD
    code duplication issues in GenericKeyedObjectPool and
    GenericObjectPool
    + Pull up AbandonedConfig and related methods from
    GenericKeyedObjectPool and GenericObjectPool to
    BaseGenericObjectPool (fix for CPD issues).
    ° BaseGenericObjectPool.getLogAbandoned()
    ° BaseGenericObjectPool.getRemoveAbandonedOnBorrow()
    ° BaseGenericObjectPool.getRemoveAbandonedOnMaintenance()
    ° BaseGenericObjectPool.getRemoveAbandonedTimeout()
    ° BaseGenericObjectPool.getRemoveAbandonedTimeoutDuration()
    ° BaseGenericObjectPool.isAbandonedConfig()
    ° BaseGenericObjectPool.setAbandonedConfig(AbandonedConfig)
  * Fixed Bugs:
    + Fix "[WARNING] Old version of checkstyle detected. Consider
    updating to &gt;= v8.30." Update Checktyle to 8.44
    + Make Duration setters use their respective default values when
    null
    + Call swallowException(Exception) instead of printing
    exceptions to the console in GenericKeyedObjectPool
    .removeAbandoned(AbandonedConfig) and GenericObjectPool
    .removeAbandoned(AbandonedConfig)
    + Fix Javadoc link reference #91
    + No need to initialize to default values. #90
    + Bump org.ow2.asm:asm-util from 9.1 to 9.2
    + Bump com.github.spotbugs:spotbugs from 4.2.3 to 4.3.0
    + Bump checkstyle from 8.44 to 8.45 #92</changelog>
  <changelog author="fstrba@suse.com" date="1782129605">- Update to 2.11.1
  * Fixed Bugs:
    + Getting a PooledObject's active duration returns a negative
    duration when the object is borrowed but not returned.
    Affects:
    ° PooledObject.getActiveDuration()
    ° PooledObject.getActiveTime()
    ° PooledObject.getActiveTimeMillis()
    + The default implementation of TrackedUse.getLastUsedInstant()
    uses seconds instead of milliseconds
    + This interface is not implemented within Apache Commons Pool
    but affects Apache Commons DBCP
    + DefaultPooledObject.getIdleTime() drops nanoseconds on Java 9
    and greater
    + Fix field label in BaseGenericObjectPool toString() builder:
    From timeBetweenEvictionRunsMillis to
    durationBetweenEvictionRuns
    + Fix field label in BaseObjectPoolConfig toString() builder:
    From maxWaitMillis to maxWaitDuration
    + Fix field label in NoSuchElementException message for
    GenericObjectPool.borrowObject(Duration): From
    borrowMaxWaitMillis to borrowMaxWaitDuration
    + Reimplement DefaultPooledObject.getIdleDuration() using
    Duration computation
    + Reimplement BaseGenericObjectPool.maxBorrowWait as a Duration
    instead of a long
    + Minors Changes #89
  * Changes:
    + Bump checkstyle from 8.45 to 8.45.1 #93
    + Bump spotbugs from 4.2.3 to 4.3.0 and ignore new medium
    warnings EI_EXPOSE_REP and EI_EXPOSE_REP2</changelog>
  <changelog author="fstrba@suse.com" date="1782129606">- Update to 2.12.0
  * New features:
    + Add PooledObject.getFullDuration()
    + Add GenericKeyedObjectPool.getKeys()
    + Add KeyedObjectPool.getKeys()
    + Add github/codeql-action.
    + Add BaseGenericObjectPool.Evictor.toString().
    + Make BaseGenericObjectPool implement AutoCloseable.
    + Add BaseGenericObjectPool methods that return Duration and
    deprecate equivalents that return milliseconds as long
    + Add BaseObjectPoolConfig.DEFAULT_DURATION_BETWEEN_EVICTION_RUNS
    and deprecate BaseObjectPoolConfig
    .DEFAULT_TIME_BETWEEN_EVICTION_RUNS
  * Fixed Bugs:
    + POOL-401: Ensure that capacity freed by invalidateObject is
    available to all keyed pools
    + POOL-391: Ensure capacity freed by clear is made available to
    GKOP borrowers
    + POOL-402: Check blockWhenExhausted in hasBorrowWaiters #116
    + Simplify test assertion with similar call but simpler. #131
    + POOL-405: NullPointerException GenericKeyedObjectPool
    .invalidateObject(GenericKeyedObjectPool.java:1343)
    + POOL-408: Fix a typo related to KeyedPooledObjectFactory on
    the site and Javadoc
    + Fail-fast on null input for DefaultPooledObjectInfo
    .DefaultPooledObjectInfo(PooledObject) with a
    NullPointerException
    + POOL-393: Improve BaseGenericObjectPool's JMX Register
    performance when creating many pools
    + Null-guard in GenericObjectPool.use(T) like other call sites
    of GenericObjectPool.getPooledObject(T)
    + POOL-411: Guard against NPE when deregistering a key at the
    end of borrow
    + Make private GenericKeyedObjectPool.ObjectDeque class static
    + Make private BaseGenericObjectPool.StatsStore class static
    + [StepSecurity] ci: Harden GitHub Actions #225
    + Fix possible NPE in DefaultPooledObjectInfo
    .getPooledObjectToString()
    + Fix possible NPE in DefaultPooledObjectInfo
    .getPooledObjectType()
  * Changes:
    + Bump actions/cache from 2.1.6 to 3.0.10 #117, #138, #158,
    [#174], #178
    + Bump actions/checkout from 2.3.4 to 3.0.2 #109, #112, #134
    + Bump actions/setup-java from 2 to 3.5.1
    + Bump spotbugs from 4.3.0 to 4.7.3 #94, #99, #106, #114, #122,
    [#129], #137, #155, #168, #187
    + Bump spotbugs-maven-plugin from 4.3.0 to 4.7.3.0 #102, #110,
    [#119], #125, #128, #139, #149, #157, #161, #169, #180, #190
    + Bump junit-bom from 5.8.0-M1 to 5.9.1 #96, #100, #103, #120,
    [#160], #172
    + Bump checkstyle from 8.45.1 to 9.3 #97, #104, #111, #121,
    [#126], #132
    + Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #166
    + Bump maven-pmd-plugin from 3.14.0 to 3.19.0 #101, #153, #170
    + Bump pmd from 6.44.0 to 6.52.0
    + Bump biz.aQute.bndlib from 5.3.0 to 6.4.1 #105, #118, #135,
    [#151], #154, #191, #223
    + Bump maven-bundle-plugin from 5.1.3 to 5.1.8 #127, #146, #148,
    [#159], #164
    + Bump maven-surefire-plugin from 3.0.0-M7 to 3.0.0-M6 #142,
    [#152]
    + Bump asm-util from 9.2 to 9.5 #141, #179, #220
    + Bump commons-parent from 52 to 58 #173, #195, #204, #222
    + Bump japicmp-maven-plugin from 0.15.3 to 0.16.0
    + Bump animal-sniffer-maven-plugin 1.20 to 1.21
    + Bump Apache Commons BCEL 6.5.0 to 6.7.0 #194
    + Bump commons-lang3 from 3.12.0 to 3.13.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129607">- Update to 2.12.1
  * Fixed Bugs:
    + Use java.time.Instant precision in org.apache.commons.pool2
    .impl.ThrowableCallStack.Snapshot throwable message
    + GenericObjectPool.borrowObject(Duration) doesn't obey its
    borrowMaxWait Duration argument when the argument is different
    from GenericObjectPool.getMaxWaitDuration()
    + POOL-418:  The maximum wait time for GenericObjectPool
    .borrowObject(*) may exceed expectations due to a spurious
    thread wakeup
    + Javadoc is missing its Overview page
    + Migrate site generation templates to
    https://maven.apache.org/xsd/xdoc-2.0.xsd
  * Changes:
    + Bump org.apache.commons:commons-parent from 62 to 79
    + [test] Bump commons-lang3 from 3.13.0 to 3.17.0
    + [site] Pickup org.apache.bcel:bcel version from parent POM
    + [test] Bump org.ow2.asm:asm-util from 9.5 to 9.7.1</changelog>
  <changelog author="fstrba@suse.com" date="1782129608">- Update to 2.13.0
  * New features:
    + Add org.apache.commons.pool2.PooledObject
    .nonNull(PooledObject)
    + Add org.apache.commons.pool2.PooledObject
    .getObject(PooledObject)
    + Made statistics collection optional in BaseGenericObjectPool
    [#429]
  * Fixed Bugs:
    + POOL-424: GenericObjectPool.invalidateObject() can leave other
    threads waiting to borrow hanging. The fix for this issue
    changes behavior of invalidateObject. This method now always
    tries to add a new instance to the pool to replace the
    invalidated and destroyed instance. As a result of this
    change, abandoned object removal now attemps to replace
    abandoned objects
    + POOL-425: GenericObjectPool addObject does not respect maxIdle
    + POOL-350: Make placement of calls to GKOP reuseCapacity
    configurable
    + POOL-290: TestSoftRefOutOfMemory (unit test) can loop
    infinitely on failure
    + POOL-419: GenericObjectPool counters and object collections
    can be corrupted when returnObject and invalidate are invoked
    concurrently by client threads on the same pooled object
    + POOL-421: GenericObjectPool addObject should return
    immediately when there is no capacity to add
    + POOL-420: The maximum wait time for GenericKeyedObjectPool
    .borrowObject(*) may exceed configured maximum wait time.
    This is the same issue as POOL-418, but for GKOP. Also included
    in this fix is a change to addObject that prevents it from
    waiting for capacity to create. That method now returns
    immediately when there is no capcity to add to the pool under
    the given key
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + POOL-418: The maximum wait time for GenericObjectPool
    .borrowObject(*) may exceed expectations due to a spurious
    thread wakeup. he remaining duration was incorrectly
    calculated and the method did not end up waiting long enough.
    Recompute the remaining duration an additional time when we
    block when exhausted
    + Fix site link from the About page to the Download page, see
    also #387
    + Operation on the "idleHighWaterMark" shared variable in
    "ErodingFactor" class is not atomic
    [org.apache.commons.pool2.PoolUtils$ErodingFactor] At
    PoolUtils.java:[line 98]
    AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE
    + org.apache.commons.pool2.impl.GenericObjectPool
    .create(Duration) should normalize a negative duration to zero
    + Fix potential ConcurrentModificationException in EvictionTimer
    thread clean-up
    + Fix potential ConcurrentModificationException in EvictionTimer
    tasks
  * Changes:
    + Bump org.apache.commons:commons-parent from 79 to 93
    + [test] Bump commons-lang3 from 3.17.0 to 3.20.0</changelog>
  <changelog author="fstrba@suse.com" date="1782129609">- Update to 2.13.1
  * Fixed Bugs:
    + POOL-427: The fix for POOL-425 introduced a regression where
    addObject fails when maxIdle is negative (indicating no limit)
- Removed patch:
  * jakarta-commons-pool-build.patch
    + not needed with this version</changelog>
</package>
<package pkgid="46e214baf7fe94ab745dd01d31532bc1c570d206e95096df6763407f3c800868d1062b0776884bf6528c99b89a053e3856229b97f1cb855b42424a9111afbfa2" name="apache-commons-pool2-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="160000.2.2"/>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.3
- changes in BuildRequires:
  - java2-deve-packages was substituded by java-devel
  - added a junit
  - added a maven build support and maven related BuildRequires
  - xml-commons-apis was moved to the maven build branch
- added a gcj build support
- included a maven depmap files
- remove a source=1.4 from build and a java14compat patch
- provides and obsoletes of main package contains the version
- new tomcat5 subpackage
- new manual subpackage (build only with maven)</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1475150400">- Rename from jakarta-commons-pool to apache-commons-pool
- Version update to 1.6:
  * drop the tomcat5 package, we need pool2 to work with new tomcat
  * Last and final from the pool1 series, new pool2 was introduced
    for future developement.</changelog>
  <changelog author="tchvatal@suse.com" date="1475150401">- Version update to 2.4.2 release from pool2:
  * rename to latest 2.x pool series for dbcp and other packages</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix javadoc build</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1544702400">- Add maven pom file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Simplify and clean up the spec file: avoid versioned jars</changelog>
</package>
<package pkgid="69bc5d123a2c6bced266244c097bc3d0bbcecbd4d80ceea3dab2525087ab24a61b2c8e7650a4af12e899456f99dc905574f9c6623dc6b66ec76e0f347a8c3563" name="apache-commons-text" arch="noarch">
  <version epoch="0" ver="1.10.0" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1561464000">- Initial release v1.6 on OBS</changelog>
  <changelog author="fstrba@suse.com" date="1573300800">- Upgrade to upstream version 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Rewrite build system to build with ant in order to avoid build
  cycles.
  * This package is now the dependency of maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1665748800">- Upgrade to version 1.10.0 (mitigation of bsc#1204284,
  CVE-2022-42889)
  * Changes of 1.10.0:
    + Fix CaseUtils when the input string contains only delimiters
    + Add GraalVM test dependencies to fix test failures with Java
    15
    + Incorrect values for Jaccard similarity with empty strings
    + StringSubstitutor map constructor throws NPE on 1.9 with null
    map
    + JaroWinklerDistance returns the same values as
    JaroWinklerSimilarity
    + Correct Javadoc in FileStringLookup
    + Use StringUtils.INDEX_NOT_FOUND constant
    + Remove redundant local variable
    + Replace lambda with method reference
    + Simplify statements
    + Replace statement lambda with expression lambda
    + Use static class inner class in tests
    + Simplify assertion
    + Extract duplicate code
    + Set void return method
    + Remove unused exception from
    TextStringBuilder.readFrom(CharBuffer). This preserves binary
    compatibility but not source compatibility
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows
    + TextStringBuilder.TextStringBuilderReader.skip(long): Throw
    an exception when an implicit narrowing conversion in a
    compound assignment would result in information loss or a
    numeric error such as an overflows
    + TextStringBuilder.equals whatever the capacity is
    + A More Efficient Implementation for Calculating Size of
    Longest Common Subsequence
    + LookupTranslator returns count of chars consumed, not of
    codepoints consumed
    + Use Math.min() call instead of doing it manually
    + TextStringBuilder: Throw OutOfMemoryError instead of
    NegativeArraySizeException
    + TextStringBuilder: Can't grow to sizes up to
    Integer.MAX_VALUE
    + Make default string lookups configurable via system property
    Remove dns, url, and script lookups from defaults. If these
    lookups are required for use in StringSubstitutor
    .createInterpolator(), they must be enabled via system
    property (bsc#
    + Add DoubleFormat utility
    + Document negative limit for WordUtils abbreviate method
    + Speed up LevenshteinDistance with threshold by exiting early
    + Release Notes page hasn't been updated for 1.9 release yet
    + Add StrBuilder.isNotEmpty()
  * Changes of 1.9:
    + Removed non-existing parameter from Javadocs and spelled out
    parameters in throws
    + StringEscapeUtils.unescapeCsv doesn't remove quotes at begin
    and end of string
    + ScriptStringLookup does not accept ":"
    + StringSubstitutor incorrectly removes some escape characters
    + Make ConstantStringLookup.constantCache final
    + Simplify if in CaseUtils
    + Add StringMatcher.size()
    + Refactor TextStringBuilder.readFrom(Readable), extracting
    readFrom(CharBuffer) and readFrom(Reader)
    + Add BiStringLookup and implementation BiFunctionStringLookup
    + Add org.apache.commons.text.StringSubstitutor
    .StringSubstitutor(StringSubstitutor)
    + Add org.apache.commons.text.TextStringBuilder
    .TextStringBuilder(CharSequence)
    + Add org.apache.commons.text.TextStringBuilder.drainChar(int)
    + Add org.apache.commons.text.TextStringBuilder.drainChars(int,
    int, char[]. int)
    + Add org.apache.commons.text.TextStringBuilder.isNotEmpty()
    + Add org.apache.commons.text.TextStringBuilder.isReallocated()
    + Add org.apache.commons.text.TextStringBuilder.readFrom(Reader,
    int)
    + Add org.apache.commons.text.TextStringBuilder.set(String)
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[])
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[],
    int)
    + Add org.apache.commons.text.io.StringSubstitutorReader
    + Add org.apache.commons.text.lookup.StringLookupFactory
    .functionStringLookup(Function&lt;String, V&gt;)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int, int, int)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .andMatcher(StringMatcher...)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .stringMatcher(char...)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667217600">- add upstream signing key and verify source signature</changelog>
</package>
<package pkgid="999907d79b43ff8b7ce2e0086a1beb30dcedf4df11cd491f6e5a973eb9dcf58220ed6e08bde3dae55d66d9d5c1a8c5b2fc69a8eab1bff2add5b89da4b53da84e" name="apache-commons-text" arch="noarch">
  <version epoch="0" ver="1.15.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1573300800">- Upgrade to upstream version 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Rewrite build system to build with ant in order to avoid build
  cycles.
  * This package is now the dependency of maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1665748800">- Upgrade to version 1.10.0 (mitigation of bsc#1204284,
  CVE-2022-42889)
  * Changes of 1.10.0:
    + Fix CaseUtils when the input string contains only delimiters
    + Add GraalVM test dependencies to fix test failures with Java
    15
    + Incorrect values for Jaccard similarity with empty strings
    + StringSubstitutor map constructor throws NPE on 1.9 with null
    map
    + JaroWinklerDistance returns the same values as
    JaroWinklerSimilarity
    + Correct Javadoc in FileStringLookup
    + Use StringUtils.INDEX_NOT_FOUND constant
    + Remove redundant local variable
    + Replace lambda with method reference
    + Simplify statements
    + Replace statement lambda with expression lambda
    + Use static class inner class in tests
    + Simplify assertion
    + Extract duplicate code
    + Set void return method
    + Remove unused exception from
    TextStringBuilder.readFrom(CharBuffer). This preserves binary
    compatibility but not source compatibility
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows
    + TextStringBuilder.TextStringBuilderReader.skip(long): Throw
    an exception when an implicit narrowing conversion in a
    compound assignment would result in information loss or a
    numeric error such as an overflows
    + TextStringBuilder.equals whatever the capacity is
    + A More Efficient Implementation for Calculating Size of
    Longest Common Subsequence
    + LookupTranslator returns count of chars consumed, not of
    codepoints consumed
    + Use Math.min() call instead of doing it manually
    + TextStringBuilder: Throw OutOfMemoryError instead of
    NegativeArraySizeException
    + TextStringBuilder: Can't grow to sizes up to
    Integer.MAX_VALUE
    + Make default string lookups configurable via system property
    Remove dns, url, and script lookups from defaults. If these
    lookups are required for use in StringSubstitutor
    .createInterpolator(), they must be enabled via system
    property (bsc#
    + Add DoubleFormat utility
    + Document negative limit for WordUtils abbreviate method
    + Speed up LevenshteinDistance with threshold by exiting early
    + Release Notes page hasn't been updated for 1.9 release yet
    + Add StrBuilder.isNotEmpty()
  * Changes of 1.9:
    + Removed non-existing parameter from Javadocs and spelled out
    parameters in throws
    + StringEscapeUtils.unescapeCsv doesn't remove quotes at begin
    and end of string
    + ScriptStringLookup does not accept ":"
    + StringSubstitutor incorrectly removes some escape characters
    + Make ConstantStringLookup.constantCache final
    + Simplify if in CaseUtils
    + Add StringMatcher.size()
    + Refactor TextStringBuilder.readFrom(Readable), extracting
    readFrom(CharBuffer) and readFrom(Reader)
    + Add BiStringLookup and implementation BiFunctionStringLookup
    + Add org.apache.commons.text.StringSubstitutor
    .StringSubstitutor(StringSubstitutor)
    + Add org.apache.commons.text.TextStringBuilder
    .TextStringBuilder(CharSequence)
    + Add org.apache.commons.text.TextStringBuilder.drainChar(int)
    + Add org.apache.commons.text.TextStringBuilder.drainChars(int,
    int, char[]. int)
    + Add org.apache.commons.text.TextStringBuilder.isNotEmpty()
    + Add org.apache.commons.text.TextStringBuilder.isReallocated()
    + Add org.apache.commons.text.TextStringBuilder.readFrom(Reader,
    int)
    + Add org.apache.commons.text.TextStringBuilder.set(String)
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[])
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[],
    int)
    + Add org.apache.commons.text.io.StringSubstitutorReader
    + Add org.apache.commons.text.lookup.StringLookupFactory
    .functionStringLookup(Function&lt;String, V&gt;)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int, int, int)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .andMatcher(StringMatcher...)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .stringMatcher(char...)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667217600">- add upstream signing key and verify source signature</changelog>
  <changelog author="fstrba@suse.com" date="1778760000">- Upgrade to version 1.11.0
  * New features
    + TEXT-224: Set SecureProcessing feature in XmlStringLookup by
    default
    + TEXT-224: Add StringLookupFactory.xmlStringLookup(Map&lt;String,
    Boolean&gt;...)
    + Add @FunctionalInterface to FormatFactory
    + Add RandomStringGenerator.builder()
    + TEXT-229: Add XmlEncoderStringLookup/XmlDecoderStringLookup
    + Add StringSubstitutor.toString()
  * Fixed Bugs
    + TEXT-219: Fix StringTokenizer.getTokenList to return an
    independent modifiable list
    + Fix Javadoc for StringEscapeUtils.escapeHtml4
    + TextStringBuidler#hashCode() allocates a String on each call
    + TEXT-221: Fix Bundle-SymbolicName to use the package name
    org.apache.commons.text
    + Add and use a package-private singleton for RegexTokenizer
    + Add and use a package-private singleton for CosineSimilarity
    + Add and use a package-private singleton for
    LongestCommonSubsequence
    + Add and use a package-private singleton for
    JaroWinklerSimilarity
    + Add and use a package-private singleton for JaccardSimilarity
    + [StepSecurity] ci: Harden GitHub Actions
    + Improve AlphabetConverter Javadoc
    + Fix exception message in IntersectionResult to make
    set-theoretic sense
    + Add null-check in RandomStringGenerator#Builder#selectFrom()
    to avoid NullPointerException
    + Add null-check in RandomStringGenerator#Builder#withinRange()
    to avoid NullPointerException
    + TEXT-228: Fix TextStringBuilder to over-allocate when ensuring
    capacity
    + Constructor for ResourceBundleStringLookup should be private
    instead of package-private
    + Constructor for UrlDecoderStringLookup should be private
    instead of package-private
    + Constructor for UrlEncoderStringLookup should be private
    instead of package-private
    + TEXT-230: Javadoc of org.apache.commons.text.lookup
    .DefaultStringLookup.XML is incorrect
    + Update DoubleFormat to state it is based on Double.toString</changelog>
  <changelog author="fstrba@suse.com" date="1778760001">- Upgrade to version 1.12.0
  * New features
    + Add StringLookupFactory.fileStringLookup(Path...) and
    deprecated fileStringLookup()
    + Add StringLookupFactory.propertiesStringLookup(Path...) and
    deprecated propertiesStringLookup()
    + Add StringLookupFactory.xmlStringLookup(Map, Path...) and
    deprecated xmlStringLookup() and xmlStringLookup(Map)
    + Add StringLookupFactory.builder() for fencing Path resolution
    of the file, properties and XML lookups
    + Add DoubleFormat.Builder.get() as Builder now implements
    Supplier
  * Fixed Bugs
    + TEXT-232: WordUtils.containsAllWords?() may throw
    PatternSyntaxException
    + TEXT-175: Fix regression for determining whitespace in
    WordUtils
    + Deprecate Builder in favor of Supplier</changelog>
  <changelog author="fstrba@suse.com" date="1778760002">- Upgrade to version 1.13.0
  * New features
    + Add StringLookupFactory.loopbackAddressStringLookup()
    + Add StringLookupFactory.KEY_LOOPBACK_ADDRESS
    + Add DefaultStringLookup.LOOPBACK_ADDRESS
    + Add richer inputs in package org.apache.commons.text
    .similarity with SimilarityInput
    + Add HammingDistance.apply(SimilarityInput, SimilarityInput)
    + Add JaccardDistance.apply(SimilarityInput, SimilarityInput)
    + Add JaccardSimilarity.apply(SimilarityInput, SimilarityInput)
    + Add JaroWinklerDistance.apply(SimilarityInput,
    SimilarityInput)
    + Add JaroWinklerSimilarity.apply(SimilarityInput,
    SimilarityInput)
    + Add LevenshteinDetailedDistance.apply(SimilarityInput,
    SimilarityInput)
    + Add LevenshteinDistance.apply(SimilarityInput,
    SimilarityInput)
  * Fixed Bugs
    + Fix build on Java 22
    + Fix build on Java 23-ea
    + Make package-private constructor private:
    StrLookup.MapStrLookup.MapStrLookup(Map)
    + Make package-private constructor private: StrLookup
    .SystemPropertiesStrLookup.SystemPropertiesStrLookup()
    + Make package-private class private and final: MapStrLookup
    + Make package-private class private: StrMatcher.CharMatcher
    + Make package-private class private: StrMatcher.CharSetMatcher
    + Make package-private class private: StrMatcher.NoMatcher
    + Make package-private class private: StrMatcher.StringMatcher
    + Make package-private class private: StrMatcher.TrimMatcher
    + Make package-private class private and final:
    IntersectionSimilarity.BagCount
    + Make package-private class private and final:
    IntersectionSimilarity.TinyCount
    + Deprecate LevenshteinDistance.LevenshteinDistance() in favor
    of LevenshteinDistance.getDefaultInstance()
    + Deprecate LevenshteinDetailedDistance
    .LevenshteinDetailedDistance() in favor of
    LevenshteinDetailedDistance.getDefaultInstance()
    + TEXT-234: Improve StrBuilder documentation for new line text
    + TEXT-234: Improve TextStringBuilder documentation for new line
    text
    + TEXT-233: Required OSGi Import-Package version numbers in
    MANIFEST.MF</changelog>
  <changelog author="fstrba@suse.com" date="1778760003">- Upgrade to version 1.13.1
  * Fixed Bugs
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Deprecate EntityArrays.EntityArrays()
    + StringLookupFactory.DefaultStringLookupsHolder
    .createDefaultStringLookups() maps DefaultStringLookup
    .LOCAL_HOST twice instead of once for LOCAL_HOST and
    LOOPBACK_ADDRESS</changelog>
  <changelog author="fstrba@suse.com" date="1778760004">- Upgrade to version 1.14.0
  * New features
    + Interface StringLookup now extends UnaryOperator&lt;String&gt;
    + Interface TextRandomProvider extends IntUnaryOperator
    + Add RandomStringGenerator.Builder
    .usingRandom(IntUnaryOperator)
    + Add PMD check to default Maven goal
    + Add org.apache.commons.text.RandomStringGenerator.Builder
    .setAccumulate(boolean)
  * Fixed Bugs
    + Fix PMD UnnecessaryFullyQualifiedName in StringLookupFactory
    + Fix PMD UnnecessaryFullyQualifiedName in
    DefaultStringLookupsHolder
    + Fix PMD UnnecessaryFullyQualifiedName in
    PropertiesStringLookup
    + Fix PMD UnnecessaryFullyQualifiedName in
    JavaPlatformStringLookup
    + Fix PMD UnnecessaryFullyQualifiedName in StringSubstitutor
    + Fix PMD UnnecessaryFullyQualifiedName in StrSubstitutor
    + Fix PMD UnnecessaryFullyQualifiedName in AlphabetConverter
    + Fix PMD AvoidBranchingStatementAsLastInLoop in
    TextStringBuilder
    + Fix PMD AvoidBranchingStatementAsLastInLoop in StrBuilder
    + org.apache.commons.text.translate.LookupTranslator
    .LookupTranslator(Map CharSequence&gt;) now throws
    NullPointerException instead of
    java.security.InvalidParameterException</changelog>
  <changelog author="fstrba@suse.com" date="1778760005">- Upgrade to version 1.15.0
  * New features
    + Add experimental CycloneDX VEX file
    + TEXT-235: Add Damerau-Levenshtein distance
    + Add unit tests to increase coverage
    + Add new test for CharSequenceTranslator#with()
    + Add tests and assertions to org.apache.commons.text.similarity
    to get to 100% code coverage
  * Fixed Bugs
    + Fix exception message typo in XmlStringLookup
    .XmlStringLookup(Map, Path...)
    + TEXT-236: Inserting at the end of a TextStringBuilder throws
    a StringIndexOutOfBoundsException
    + Fix TextStringBuilderTest.testAppendToCharBuffer() to use
    proper argument type
    + Fix Apache RAT plugin console warnings
    + Fix site XML to use version 2.0.0 XML schema
    + Removed unreachable threshold verification code in
    src/main/java/org/apache/commons/text/similarity
    + Enable secure processing for the XML parser in XmlStringLookup
    in case the underlying JAXP implementation doesn't</changelog>
</package>
<package pkgid="debc13c5d1d9c80122bc9a986990caad4efaf6295469ab5d53ccd0d8151ce7840734de7b568d584080a7b4c22ccd10b42f39242830c951caba9faec6be1be8a8" name="apache-commons-text-javadoc" arch="noarch">
  <version epoch="0" ver="1.10.0" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1561464000">- Initial release v1.6 on OBS</changelog>
  <changelog author="fstrba@suse.com" date="1573300800">- Upgrade to upstream version 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Rewrite build system to build with ant in order to avoid build
  cycles.
  * This package is now the dependency of maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1665748800">- Upgrade to version 1.10.0 (mitigation of bsc#1204284,
  CVE-2022-42889)
  * Changes of 1.10.0:
    + Fix CaseUtils when the input string contains only delimiters
    + Add GraalVM test dependencies to fix test failures with Java
    15
    + Incorrect values for Jaccard similarity with empty strings
    + StringSubstitutor map constructor throws NPE on 1.9 with null
    map
    + JaroWinklerDistance returns the same values as
    JaroWinklerSimilarity
    + Correct Javadoc in FileStringLookup
    + Use StringUtils.INDEX_NOT_FOUND constant
    + Remove redundant local variable
    + Replace lambda with method reference
    + Simplify statements
    + Replace statement lambda with expression lambda
    + Use static class inner class in tests
    + Simplify assertion
    + Extract duplicate code
    + Set void return method
    + Remove unused exception from
    TextStringBuilder.readFrom(CharBuffer). This preserves binary
    compatibility but not source compatibility
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows
    + TextStringBuilder.TextStringBuilderReader.skip(long): Throw
    an exception when an implicit narrowing conversion in a
    compound assignment would result in information loss or a
    numeric error such as an overflows
    + TextStringBuilder.equals whatever the capacity is
    + A More Efficient Implementation for Calculating Size of
    Longest Common Subsequence
    + LookupTranslator returns count of chars consumed, not of
    codepoints consumed
    + Use Math.min() call instead of doing it manually
    + TextStringBuilder: Throw OutOfMemoryError instead of
    NegativeArraySizeException
    + TextStringBuilder: Can't grow to sizes up to
    Integer.MAX_VALUE
    + Make default string lookups configurable via system property
    Remove dns, url, and script lookups from defaults. If these
    lookups are required for use in StringSubstitutor
    .createInterpolator(), they must be enabled via system
    property (bsc#
    + Add DoubleFormat utility
    + Document negative limit for WordUtils abbreviate method
    + Speed up LevenshteinDistance with threshold by exiting early
    + Release Notes page hasn't been updated for 1.9 release yet
    + Add StrBuilder.isNotEmpty()
  * Changes of 1.9:
    + Removed non-existing parameter from Javadocs and spelled out
    parameters in throws
    + StringEscapeUtils.unescapeCsv doesn't remove quotes at begin
    and end of string
    + ScriptStringLookup does not accept ":"
    + StringSubstitutor incorrectly removes some escape characters
    + Make ConstantStringLookup.constantCache final
    + Simplify if in CaseUtils
    + Add StringMatcher.size()
    + Refactor TextStringBuilder.readFrom(Readable), extracting
    readFrom(CharBuffer) and readFrom(Reader)
    + Add BiStringLookup and implementation BiFunctionStringLookup
    + Add org.apache.commons.text.StringSubstitutor
    .StringSubstitutor(StringSubstitutor)
    + Add org.apache.commons.text.TextStringBuilder
    .TextStringBuilder(CharSequence)
    + Add org.apache.commons.text.TextStringBuilder.drainChar(int)
    + Add org.apache.commons.text.TextStringBuilder.drainChars(int,
    int, char[]. int)
    + Add org.apache.commons.text.TextStringBuilder.isNotEmpty()
    + Add org.apache.commons.text.TextStringBuilder.isReallocated()
    + Add org.apache.commons.text.TextStringBuilder.readFrom(Reader,
    int)
    + Add org.apache.commons.text.TextStringBuilder.set(String)
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[])
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[],
    int)
    + Add org.apache.commons.text.io.StringSubstitutorReader
    + Add org.apache.commons.text.lookup.StringLookupFactory
    .functionStringLookup(Function&lt;String, V&gt;)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int, int, int)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .andMatcher(StringMatcher...)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .stringMatcher(char...)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667217600">- add upstream signing key and verify source signature</changelog>
</package>
<package pkgid="d3b2360061e73382afd2fbf72aad3447b74aa5858ddf33f8f2c90092781d2222fcb1a6e8f07f912e0246c3304f6223843dc13c72d3819a2ec5337e43b4bf7cd6" name="apache-commons-text-javadoc" arch="noarch">
  <version epoch="0" ver="1.15.0" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1573300800">- Upgrade to upstream version 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Rewrite build system to build with ant in order to avoid build
  cycles.
  * This package is now the dependency of maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1665748800">- Upgrade to version 1.10.0 (mitigation of bsc#1204284,
  CVE-2022-42889)
  * Changes of 1.10.0:
    + Fix CaseUtils when the input string contains only delimiters
    + Add GraalVM test dependencies to fix test failures with Java
    15
    + Incorrect values for Jaccard similarity with empty strings
    + StringSubstitutor map constructor throws NPE on 1.9 with null
    map
    + JaroWinklerDistance returns the same values as
    JaroWinklerSimilarity
    + Correct Javadoc in FileStringLookup
    + Use StringUtils.INDEX_NOT_FOUND constant
    + Remove redundant local variable
    + Replace lambda with method reference
    + Simplify statements
    + Replace statement lambda with expression lambda
    + Use static class inner class in tests
    + Simplify assertion
    + Extract duplicate code
    + Set void return method
    + Remove unused exception from
    TextStringBuilder.readFrom(CharBuffer). This preserves binary
    compatibility but not source compatibility
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows
    + TextStringBuilder.TextStringBuilderReader.skip(long): Throw
    an exception when an implicit narrowing conversion in a
    compound assignment would result in information loss or a
    numeric error such as an overflows
    + TextStringBuilder.equals whatever the capacity is
    + A More Efficient Implementation for Calculating Size of
    Longest Common Subsequence
    + LookupTranslator returns count of chars consumed, not of
    codepoints consumed
    + Use Math.min() call instead of doing it manually
    + TextStringBuilder: Throw OutOfMemoryError instead of
    NegativeArraySizeException
    + TextStringBuilder: Can't grow to sizes up to
    Integer.MAX_VALUE
    + Make default string lookups configurable via system property
    Remove dns, url, and script lookups from defaults. If these
    lookups are required for use in StringSubstitutor
    .createInterpolator(), they must be enabled via system
    property (bsc#
    + Add DoubleFormat utility
    + Document negative limit for WordUtils abbreviate method
    + Speed up LevenshteinDistance with threshold by exiting early
    + Release Notes page hasn't been updated for 1.9 release yet
    + Add StrBuilder.isNotEmpty()
  * Changes of 1.9:
    + Removed non-existing parameter from Javadocs and spelled out
    parameters in throws
    + StringEscapeUtils.unescapeCsv doesn't remove quotes at begin
    and end of string
    + ScriptStringLookup does not accept ":"
    + StringSubstitutor incorrectly removes some escape characters
    + Make ConstantStringLookup.constantCache final
    + Simplify if in CaseUtils
    + Add StringMatcher.size()
    + Refactor TextStringBuilder.readFrom(Readable), extracting
    readFrom(CharBuffer) and readFrom(Reader)
    + Add BiStringLookup and implementation BiFunctionStringLookup
    + Add org.apache.commons.text.StringSubstitutor
    .StringSubstitutor(StringSubstitutor)
    + Add org.apache.commons.text.TextStringBuilder
    .TextStringBuilder(CharSequence)
    + Add org.apache.commons.text.TextStringBuilder.drainChar(int)
    + Add org.apache.commons.text.TextStringBuilder.drainChars(int,
    int, char[]. int)
    + Add org.apache.commons.text.TextStringBuilder.isNotEmpty()
    + Add org.apache.commons.text.TextStringBuilder.isReallocated()
    + Add org.apache.commons.text.TextStringBuilder.readFrom(Reader,
    int)
    + Add org.apache.commons.text.TextStringBuilder.set(String)
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[])
    + Add org.apache.commons.text.TextStringBuilder.wrap(char[],
    int)
    + Add org.apache.commons.text.io.StringSubstitutorReader
    + Add org.apache.commons.text.lookup.StringLookupFactory
    .functionStringLookup(Function&lt;String, V&gt;)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int)
    + Add org.apache.commons.text.matcher.StringMatcher
    .isMatch(CharSequence, int, int, int)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .andMatcher(StringMatcher...)
    + Add org.apache.commons.text.matcher.StringMatcherFactory
    .stringMatcher(char...)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1667217600">- add upstream signing key and verify source signature</changelog>
  <changelog author="fstrba@suse.com" date="1778760000">- Upgrade to version 1.11.0
  * New features
    + TEXT-224: Set SecureProcessing feature in XmlStringLookup by
    default
    + TEXT-224: Add StringLookupFactory.xmlStringLookup(Map&lt;String,
    Boolean&gt;...)
    + Add @FunctionalInterface to FormatFactory
    + Add RandomStringGenerator.builder()
    + TEXT-229: Add XmlEncoderStringLookup/XmlDecoderStringLookup
    + Add StringSubstitutor.toString()
  * Fixed Bugs
    + TEXT-219: Fix StringTokenizer.getTokenList to return an
    independent modifiable list
    + Fix Javadoc for StringEscapeUtils.escapeHtml4
    + TextStringBuidler#hashCode() allocates a String on each call
    + TEXT-221: Fix Bundle-SymbolicName to use the package name
    org.apache.commons.text
    + Add and use a package-private singleton for RegexTokenizer
    + Add and use a package-private singleton for CosineSimilarity
    + Add and use a package-private singleton for
    LongestCommonSubsequence
    + Add and use a package-private singleton for
    JaroWinklerSimilarity
    + Add and use a package-private singleton for JaccardSimilarity
    + [StepSecurity] ci: Harden GitHub Actions
    + Improve AlphabetConverter Javadoc
    + Fix exception message in IntersectionResult to make
    set-theoretic sense
    + Add null-check in RandomStringGenerator#Builder#selectFrom()
    to avoid NullPointerException
    + Add null-check in RandomStringGenerator#Builder#withinRange()
    to avoid NullPointerException
    + TEXT-228: Fix TextStringBuilder to over-allocate when ensuring
    capacity
    + Constructor for ResourceBundleStringLookup should be private
    instead of package-private
    + Constructor for UrlDecoderStringLookup should be private
    instead of package-private
    + Constructor for UrlEncoderStringLookup should be private
    instead of package-private
    + TEXT-230: Javadoc of org.apache.commons.text.lookup
    .DefaultStringLookup.XML is incorrect
    + Update DoubleFormat to state it is based on Double.toString</changelog>
  <changelog author="fstrba@suse.com" date="1778760001">- Upgrade to version 1.12.0
  * New features
    + Add StringLookupFactory.fileStringLookup(Path...) and
    deprecated fileStringLookup()
    + Add StringLookupFactory.propertiesStringLookup(Path...) and
    deprecated propertiesStringLookup()
    + Add StringLookupFactory.xmlStringLookup(Map, Path...) and
    deprecated xmlStringLookup() and xmlStringLookup(Map)
    + Add StringLookupFactory.builder() for fencing Path resolution
    of the file, properties and XML lookups
    + Add DoubleFormat.Builder.get() as Builder now implements
    Supplier
  * Fixed Bugs
    + TEXT-232: WordUtils.containsAllWords?() may throw
    PatternSyntaxException
    + TEXT-175: Fix regression for determining whitespace in
    WordUtils
    + Deprecate Builder in favor of Supplier</changelog>
  <changelog author="fstrba@suse.com" date="1778760002">- Upgrade to version 1.13.0
  * New features
    + Add StringLookupFactory.loopbackAddressStringLookup()
    + Add StringLookupFactory.KEY_LOOPBACK_ADDRESS
    + Add DefaultStringLookup.LOOPBACK_ADDRESS
    + Add richer inputs in package org.apache.commons.text
    .similarity with SimilarityInput
    + Add HammingDistance.apply(SimilarityInput, SimilarityInput)
    + Add JaccardDistance.apply(SimilarityInput, SimilarityInput)
    + Add JaccardSimilarity.apply(SimilarityInput, SimilarityInput)
    + Add JaroWinklerDistance.apply(SimilarityInput,
    SimilarityInput)
    + Add JaroWinklerSimilarity.apply(SimilarityInput,
    SimilarityInput)
    + Add LevenshteinDetailedDistance.apply(SimilarityInput,
    SimilarityInput)
    + Add LevenshteinDistance.apply(SimilarityInput,
    SimilarityInput)
  * Fixed Bugs
    + Fix build on Java 22
    + Fix build on Java 23-ea
    + Make package-private constructor private:
    StrLookup.MapStrLookup.MapStrLookup(Map)
    + Make package-private constructor private: StrLookup
    .SystemPropertiesStrLookup.SystemPropertiesStrLookup()
    + Make package-private class private and final: MapStrLookup
    + Make package-private class private: StrMatcher.CharMatcher
    + Make package-private class private: StrMatcher.CharSetMatcher
    + Make package-private class private: StrMatcher.NoMatcher
    + Make package-private class private: StrMatcher.StringMatcher
    + Make package-private class private: StrMatcher.TrimMatcher
    + Make package-private class private and final:
    IntersectionSimilarity.BagCount
    + Make package-private class private and final:
    IntersectionSimilarity.TinyCount
    + Deprecate LevenshteinDistance.LevenshteinDistance() in favor
    of LevenshteinDistance.getDefaultInstance()
    + Deprecate LevenshteinDetailedDistance
    .LevenshteinDetailedDistance() in favor of
    LevenshteinDetailedDistance.getDefaultInstance()
    + TEXT-234: Improve StrBuilder documentation for new line text
    + TEXT-234: Improve TextStringBuilder documentation for new line
    text
    + TEXT-233: Required OSGi Import-Package version numbers in
    MANIFEST.MF</changelog>
  <changelog author="fstrba@suse.com" date="1778760003">- Upgrade to version 1.13.1
  * Fixed Bugs
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Deprecate EntityArrays.EntityArrays()
    + StringLookupFactory.DefaultStringLookupsHolder
    .createDefaultStringLookups() maps DefaultStringLookup
    .LOCAL_HOST twice instead of once for LOCAL_HOST and
    LOOPBACK_ADDRESS</changelog>
  <changelog author="fstrba@suse.com" date="1778760004">- Upgrade to version 1.14.0
  * New features
    + Interface StringLookup now extends UnaryOperator&lt;String&gt;
    + Interface TextRandomProvider extends IntUnaryOperator
    + Add RandomStringGenerator.Builder
    .usingRandom(IntUnaryOperator)
    + Add PMD check to default Maven goal
    + Add org.apache.commons.text.RandomStringGenerator.Builder
    .setAccumulate(boolean)
  * Fixed Bugs
    + Fix PMD UnnecessaryFullyQualifiedName in StringLookupFactory
    + Fix PMD UnnecessaryFullyQualifiedName in
    DefaultStringLookupsHolder
    + Fix PMD UnnecessaryFullyQualifiedName in
    PropertiesStringLookup
    + Fix PMD UnnecessaryFullyQualifiedName in
    JavaPlatformStringLookup
    + Fix PMD UnnecessaryFullyQualifiedName in StringSubstitutor
    + Fix PMD UnnecessaryFullyQualifiedName in StrSubstitutor
    + Fix PMD UnnecessaryFullyQualifiedName in AlphabetConverter
    + Fix PMD AvoidBranchingStatementAsLastInLoop in
    TextStringBuilder
    + Fix PMD AvoidBranchingStatementAsLastInLoop in StrBuilder
    + org.apache.commons.text.translate.LookupTranslator
    .LookupTranslator(Map CharSequence&gt;) now throws
    NullPointerException instead of
    java.security.InvalidParameterException</changelog>
  <changelog author="fstrba@suse.com" date="1778760005">- Upgrade to version 1.15.0
  * New features
    + Add experimental CycloneDX VEX file
    + TEXT-235: Add Damerau-Levenshtein distance
    + Add unit tests to increase coverage
    + Add new test for CharSequenceTranslator#with()
    + Add tests and assertions to org.apache.commons.text.similarity
    to get to 100% code coverage
  * Fixed Bugs
    + Fix exception message typo in XmlStringLookup
    .XmlStringLookup(Map, Path...)
    + TEXT-236: Inserting at the end of a TextStringBuilder throws
    a StringIndexOutOfBoundsException
    + Fix TextStringBuilderTest.testAppendToCharBuffer() to use
    proper argument type
    + Fix Apache RAT plugin console warnings
    + Fix site XML to use version 2.0.0 XML schema
    + Removed unreachable threshold verification code in
    src/main/java/org/apache/commons/text/similarity
    + Enable secure processing for the XML parser in XmlStringLookup
    in case the underlying JAXP implementation doesn't</changelog>
</package>
<package pkgid="1e6a19f4fd5cceb4761d8227f708f6e70dad21e97545c504c9aa1cd9e5e0b92a8ae3357352f55d8e9abf2837c5d84ba943d3b2e0636ea5ce71ef0ea8c720835c" name="apache-commons-validator" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="bp160.1.11"/>
  <changelog author="fstrba@suse.com" date="1505390400">- Build with java source and target 1.6
- Use java-devel &lt; 1.9 because with jdk9, some unit tests fail
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Fix build and running of junit tests with Java 9+
- Added patch:
  * commons-validator-1.3.1-locale.patch
    + Made two different test.routines target, one with java &lt;= 1.8
    and one with java 9+, since the locale providers changed
    between java 1.8 and 9. Moreover, the options that Java 9
    needs to run in compatibility mode break build with lower
    versions of Java.</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393600">- Update to 1.5.0
- Install the maven pom file
- Removed patch:
  * commons-validator-1.3.1-crosslink.patch
    + not needed
- Added patch:
  * commons-validator-1.5.0-digester.patch
    + fix build with older versions of commons-digester
- Modified patches:
  * commons-validator-1.3.1-srcencoding.patch -&gt;
    commons-validator-1.5.0-srcencoding.patch
    + specify encoding utf-8 for javac and javadoc invocation
    instead of escaping characters
  * commons-validator-1.3.1-locale.patch -&gt;
    commons-validator-1.5.0-locale.patch
    + Adapt the patch to the 1.5.0 context
    + Add the sysproperty to the junit task</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393601">- Build against commons-digester &gt;= 1.8
- Removed patch:
  * commons-validator-1.5.0-digester.patch
    + building against commons-digester &gt;= 1.8, this patch is
    superfluous</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven
- Remove special conditions for suse_version 1110</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1651147200">- use https urls</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1714219200">- Put hamcrest on classpath explicitely. This allows buiding against
  junit without shaded hamcrest</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="bbef209c095b619dfd3b0b201b1d0715f20bab5805e2bce19cdeb82dd070dbf0581473181d348c0fafdbe781d9fca856c92359e053848fd07e94c43c6300f55d" name="apache-commons-validator-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="bp160.1.11"/>
  <changelog author="fstrba@suse.com" date="1505390400">- Build with java source and target 1.6
- Use java-devel &lt; 1.9 because with jdk9, some unit tests fail
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Fix build and running of junit tests with Java 9+
- Added patch:
  * commons-validator-1.3.1-locale.patch
    + Made two different test.routines target, one with java &lt;= 1.8
    and one with java 9+, since the locale providers changed
    between java 1.8 and 9. Moreover, the options that Java 9
    needs to run in compatibility mode break build with lower
    versions of Java.</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393600">- Update to 1.5.0
- Install the maven pom file
- Removed patch:
  * commons-validator-1.3.1-crosslink.patch
    + not needed
- Added patch:
  * commons-validator-1.5.0-digester.patch
    + fix build with older versions of commons-digester
- Modified patches:
  * commons-validator-1.3.1-srcencoding.patch -&gt;
    commons-validator-1.5.0-srcencoding.patch
    + specify encoding utf-8 for javac and javadoc invocation
    instead of escaping characters
  * commons-validator-1.3.1-locale.patch -&gt;
    commons-validator-1.5.0-locale.patch
    + Adapt the patch to the 1.5.0 context
    + Add the sysproperty to the junit task</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545393601">- Build against commons-digester &gt;= 1.8
- Removed patch:
  * commons-validator-1.5.0-digester.patch
    + building against commons-digester &gt;= 1.8, this patch is
    superfluous</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven
- Remove special conditions for suse_version 1110</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1651147200">- use https urls</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1714219200">- Put hamcrest on classpath explicitely. This allows buiding against
  junit without shaded hamcrest</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="8fc8cf3648a851c45555966ed374ae43db5f38ef48af405886c87208e660f27e7304d8a3767491484f2a8607d5afa8374c7d5b5938c79c643838a666929662eb" name="apache-commons-vfs2" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Intial packaging of apache-commons-vfs2 2.2
- Generate and customize ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1742904000">- Upgrade to upstream version 2.10.0
  * Fixes bsc#1239973, CVE-2025-27553: Possible path traversal
    issue when using NameScope.DESCENDENT
  * Fixes bsc#1239974, CVE-2025-30474: Failing to find an FTP file
    can reveal the URI's password in an error message
  * For detailed list of all changes, see RELEASE-NOTES.txt file
    distributed with the package</changelog>
</package>
<package pkgid="3083e95693641fba6631ebf9027672612b7cb813da4b0053595d953fc515f5b5091fb4b5724502f2c0b659039b8cf2e9f0e4e6f9749ba5ed5d5a672762635301" name="apache-commons-vfs2-ant" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Intial packaging of apache-commons-vfs2 2.2
- Generate and customize ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1742904000">- Upgrade to upstream version 2.10.0
  * Fixes bsc#1239973, CVE-2025-27553: Possible path traversal
    issue when using NameScope.DESCENDENT
  * Fixes bsc#1239974, CVE-2025-30474: Failing to find an FTP file
    can reveal the URI's password in an error message
  * For detailed list of all changes, see RELEASE-NOTES.txt file
    distributed with the package</changelog>
</package>
<package pkgid="8f4aabeb9e7fa68b7760ef39699fdeee788e645230725315f58b1e8156d4e54069938231250c2a9e6356f26f5a22cca27d1f15dfc465a02c81087b64afba6334" name="apache-commons-vfs2-examples" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Intial packaging of apache-commons-vfs2 2.2
- Generate and customize ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1742904000">- Upgrade to upstream version 2.10.0
  * Fixes bsc#1239973, CVE-2025-27553: Possible path traversal
    issue when using NameScope.DESCENDENT
  * Fixes bsc#1239974, CVE-2025-30474: Failing to find an FTP file
    can reveal the URI's password in an error message
  * For detailed list of all changes, see RELEASE-NOTES.txt file
    distributed with the package</changelog>
</package>
<package pkgid="5ea9eb4766a52a54c8cb8d446f472764b24bf5997d077aef12a5e37c1adbceaa99b48e7631fed91684cebdf3041d33c25c34cfc0e37eebf688cfea1de1dbbbbe" name="apache-commons-vfs2-javadoc" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1551700800">- Intial packaging of apache-commons-vfs2 2.2
- Generate and customize ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1742904000">- Upgrade to upstream version 2.10.0
  * Fixes bsc#1239973, CVE-2025-27553: Possible path traversal
    issue when using NameScope.DESCENDENT
  * Fixes bsc#1239974, CVE-2025-30474: Failing to find an FTP file
    can reveal the URI's password in an error message
  * For detailed list of all changes, see RELEASE-NOTES.txt file
    distributed with the package</changelog>
</package>
<package pkgid="1b14ec80c4b301a6a633948bcceed544f67fbc88cd12ea4a149526dde40a1469112c36c758e98d0e7cc40becfc989029d92a480b03c69b04961b689d33d1dad1" name="apache-ivy" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1575979200">- Specify bundle.version in order to avoid unexpanded macro</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Upgrade to upstream version 2.5.0
- Force building with JDK &lt; 14, since it imports statically a class
  removed in JDK14
- Change dependencies for the httpclient to httpcomponents-client
  instead of apache-commons-httpclient
- Modified patch:
  * apache-ivy-global-settings.patch
    + implement the same functionality with a bit of less code
- Removed patches:
  * apache-ivy-2.4.0-jdk9.patch
  * port-to-bc-1.52.patch
    + not needed with this version</changelog>
  <changelog author="david.anes@suse.com" date="1667822400">- Upgrade to version 2.5.1 (bsc#1205142, bsc#1205138)
  * Breaking:
    + Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition
    file.
  * Fixes:
    + CVE-2022-37865 allow create/overwrite any file on the system.
    (see https://ant.apache.org/ivy/security.html)
    + CVE-2022-37866 Path traversal in patterns.
    (see https://ant.apache.org/ivy/security.html)
    + ResolveEngine resets dictator resolver to null in the global
    configuration.
    + ConcurrentModificationException in
    MessageLoggerHelper.sumupProblems.
    + useOrigin="true" fails with file-based ibiblio.
    + ivy:retrieve Ant task didn’t create an empty fileset when no
    files were retrieved to a non-empty directory.
    + ivy:retrieve Ant task relied on the default HTTP header
    "Accept" which caused problems with servers that interpret it
    strictly (e.g. AWS CodeArtifact).
  * Improvements:
    + Ivy command now accepts a URL for the -settings option.</changelog>
  <changelog author="fstrba@suse.com" date="1692619200">- Upgrade to version 2.5.2 (bsc#1214422)
  * Fixes:
    + ivy:retrieve could fail because of a 'NullPointerException'
    (jira:IVY-1641[])
    + reading POMs may loose dependencies when multiple Maven
    dependencies only differ in 'classifier' (jira:IVY-1642[])
    + CVE-2022-46751: Apache Ivy Is Vulnerable to XML External
    Entity Injections</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Added patch:
  * apache-ivy-publication-date.patch
    + Use SOURCE_DATE_EPOCH for publication date in ivy artifacts</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Added patch:
  * apache-ivy-pack200.patch
    + conditionally apply to allow building against standalone
    pack200 implementation</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1738238400">- Upgrade to version 2.5.3
  * Bugfixes:
    + trying to set safe XML features causes SAXExceptions when
    used with certain XML parsers (jira:IVY-1647[])
    + some unit tests failed on Java 8 (jira:IVY-1648[])
    + cached Ivy files were not valid in some scenarios
    (jira:IVY-1649[], jira:IVY-1650[])
  * Documentation:
    + improved to the documentation regarding the use of patterns
    in the resolvers and retrieve task (jira:IVY-1651[])
- Update patch files for compatibility with 2.5.3:
  * apache-ivy-global-settings.patch
  * apache-ivy-publication-date.patch
  * apache-ivy-pack200.patch</changelog>
  <changelog author="fstrba@suse.com" date="1746014400">- Use standalone pack200 implementation and allow wider variety
  of Java versions</changelog>
</package>
<package pkgid="fd35fdbf47223de0c310a64c82dbfcaaf52b0ce98d98aaf4da94781b787f9ddd7d6158e1ebc5f1426614d5a12e2a8187d76a1960df22fdc2b47a47173cc5b404" name="apache-ivy-javadoc" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1575979200">- Specify bundle.version in order to avoid unexpanded macro</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Upgrade to upstream version 2.5.0
- Force building with JDK &lt; 14, since it imports statically a class
  removed in JDK14
- Change dependencies for the httpclient to httpcomponents-client
  instead of apache-commons-httpclient
- Modified patch:
  * apache-ivy-global-settings.patch
    + implement the same functionality with a bit of less code
- Removed patches:
  * apache-ivy-2.4.0-jdk9.patch
  * port-to-bc-1.52.patch
    + not needed with this version</changelog>
  <changelog author="david.anes@suse.com" date="1667822400">- Upgrade to version 2.5.1 (bsc#1205142, bsc#1205138)
  * Breaking:
    + Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition
    file.
  * Fixes:
    + CVE-2022-37865 allow create/overwrite any file on the system.
    (see https://ant.apache.org/ivy/security.html)
    + CVE-2022-37866 Path traversal in patterns.
    (see https://ant.apache.org/ivy/security.html)
    + ResolveEngine resets dictator resolver to null in the global
    configuration.
    + ConcurrentModificationException in
    MessageLoggerHelper.sumupProblems.
    + useOrigin="true" fails with file-based ibiblio.
    + ivy:retrieve Ant task didn’t create an empty fileset when no
    files were retrieved to a non-empty directory.
    + ivy:retrieve Ant task relied on the default HTTP header
    "Accept" which caused problems with servers that interpret it
    strictly (e.g. AWS CodeArtifact).
  * Improvements:
    + Ivy command now accepts a URL for the -settings option.</changelog>
  <changelog author="fstrba@suse.com" date="1692619200">- Upgrade to version 2.5.2 (bsc#1214422)
  * Fixes:
    + ivy:retrieve could fail because of a 'NullPointerException'
    (jira:IVY-1641[])
    + reading POMs may loose dependencies when multiple Maven
    dependencies only differ in 'classifier' (jira:IVY-1642[])
    + CVE-2022-46751: Apache Ivy Is Vulnerable to XML External
    Entity Injections</changelog>
  <changelog author="fstrba@suse.com" date="1695124800">- Added patch:
  * apache-ivy-publication-date.patch
    + Use SOURCE_DATE_EPOCH for publication date in ivy artifacts</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Added patch:
  * apache-ivy-pack200.patch
    + conditionally apply to allow building against standalone
    pack200 implementation</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="gus.kenion@suse.com" date="1738238400">- Upgrade to version 2.5.3
  * Bugfixes:
    + trying to set safe XML features causes SAXExceptions when
    used with certain XML parsers (jira:IVY-1647[])
    + some unit tests failed on Java 8 (jira:IVY-1648[])
    + cached Ivy files were not valid in some scenarios
    (jira:IVY-1649[], jira:IVY-1650[])
  * Documentation:
    + improved to the documentation regarding the use of patterns
    in the resolvers and retrieve task (jira:IVY-1651[])
- Update patch files for compatibility with 2.5.3:
  * apache-ivy-global-settings.patch
  * apache-ivy-publication-date.patch
  * apache-ivy-pack200.patch</changelog>
  <changelog author="fstrba@suse.com" date="1746014400">- Use standalone pack200 implementation and allow wider variety
  of Java versions</changelog>
</package>
<package pkgid="b9c6bbcb59cb6040b5f369b9430f352955d4c45d691790d7118ec3d45d897b658ca47809f9cebd0a032360a3b60dd395a1814186d8e786a9cc2c5057b0f19faa" name="apache-log4j-extras" arch="noarch">
  <version epoch="0" ver="1.2.17.1" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1642593600">- Initial packaging of apache-log4j-extras 1.2.17</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Let maven-compiler-plugin decide the appropriate java source
  and target levels</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698235200">- Build with source and target levels 8</changelog>
</package>
<package pkgid="fadbf9f02cfcfadb4ebfc2e4c93bdafc1b4314a51dff223736760426177c44fa6e33e7c66404fe0c78873b034e000ca2feb5cde09834a1e34fd1f1bfb21b3092" name="apache-log4j-extras-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17.1" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1642593600">- Initial packaging of apache-log4j-extras 1.2.17</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Let maven-compiler-plugin decide the appropriate java source
  and target levels</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698235200">- Build with source and target levels 8</changelog>
</package>
<package pkgid="3d55df8d6035f18407a91196bc7eccf02522dbc081fcff99ce649dfe17428ca35ef430974f0a7b5ec23970911c0de249cecbab83d86c2e65da073237d7091878" name="apache-logging-parent" arch="noarch">
  <version epoch="0" ver="5" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Intial packaging of apache-logging-parent</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1642593600">- Upgrade to logging-parent 5
- Do not require maven-local, since it can be handled by
  javapackages-local just fine</changelog>
</package>
<package pkgid="1277f5a96cd3efdd54c34b2294035abd153da250d360ce9fea5d074306cdffdc4981387714e3bec5e038116e55ead70b53d02aecd4e95cfcc5316639735a4e23" name="apache-parent" arch="noarch">
  <version epoch="0" ver="31" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
  <changelog author="fstrba@suse.com" date="1705665600">- update to 31:
  * New Feature
    + MPOM-440: Add maven-checkstyle-plugin to pluginManagement
  * Improvement
    + MPOM-399: Set minimalMavenBuildVersion to 3.6.3 - the minimum
    used by plugins
    + MPOM-378: Using an SPDX identifier as the license name is
    recommended by Maven
    + MPOM-289: Use properties to define the versions of plugins
  * Bug
    + MPOM-386: update documentation for previous changes</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify the spec: remove old macros and fetch updated keyring</changelog>
</package>
<package pkgid="2770e6d038b33e1cc64d2d359485fb5f02535090275d348b01892e75905977c2523c6aa6dee5354fc056afb8ffd251ddd68b72da5194e518d602ef294670bc0d" name="apache-parent" arch="noarch">
  <version epoch="0" ver="37" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
  <changelog author="fstrba@suse.com" date="1705665600">- update to 31:
  * New Feature
    + MPOM-440: Add maven-checkstyle-plugin to pluginManagement
  * Improvement
    + MPOM-399: Set minimalMavenBuildVersion to 3.6.3 - the minimum
    used by plugins
    + MPOM-378: Using an SPDX identifier as the license name is
    recommended by Maven
    + MPOM-289: Use properties to define the versions of plugins
  * Bug
    + MPOM-386: update documentation for previous changes</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify the spec: remove old macros and fetch updated keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767787200">- Update to 36:
  * Breaking changes
    + Update minimum maven version to match current stable version
    (3.6.3 -&gt; 3.9)
    + Introduce javaVersion property for maven.compiler.*
    configuration
    + Switch JDK &gt;= 9 to only use maven.compiler.release
  * New features and improvements
    + Add default specification and implementation for javadoc and
    source manifest entries
  * Documentation updates
    + Clarify how to use Apache Snapshot repository
    + activate Fluido skin's anchorJs
  * Maintenance
    + Avoid - WARNING: Use of the three-letter time zone ID ... on
    JDK 25 for RAT plugin
    + feat: enable prevent branch protection rules</changelog>
  <changelog author="fstrba@suse.com" date="1768305600">- Update to 37:
  * New features and improvements
    + Disable parallel PUT on release</changelog>
</package>
<package pkgid="a909b1f22e2e89c4566d24df271361bf05251dc8b45f6956f95342372c7f1a62924cbccd682ab7af1c8c69cf017c01c35ec86673af6e4f0416b1fcd87b29aaaa" name="apache-parent" arch="noarch">
  <version epoch="0" ver="38" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
  <changelog author="fstrba@suse.com" date="1705665600">- update to 31:
  * New Feature
    + MPOM-440: Add maven-checkstyle-plugin to pluginManagement
  * Improvement
    + MPOM-399: Set minimalMavenBuildVersion to 3.6.3 - the minimum
    used by plugins
    + MPOM-378: Using an SPDX identifier as the license name is
    recommended by Maven
    + MPOM-289: Use properties to define the versions of plugins
  * Bug
    + MPOM-386: update documentation for previous changes</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Simplify the spec: remove old macros and fetch updated keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767787200">- Update to 36:
  * Breaking changes
    + Update minimum maven version to match current stable version
    (3.6.3 -&gt; 3.9)
    + Introduce javaVersion property for maven.compiler.*
    configuration
    + Switch JDK &gt;= 9 to only use maven.compiler.release
  * New features and improvements
    + Add default specification and implementation for javadoc and
    source manifest entries
  * Documentation updates
    + Clarify how to use Apache Snapshot repository
    + activate Fluido skin's anchorJs
  * Maintenance
    + Avoid - WARNING: Use of the three-letter time zone ID ... on
    JDK 25 for RAT plugin
    + feat: enable prevent branch protection rules</changelog>
  <changelog author="fstrba@suse.com" date="1768305600">- Update to 37:
  * New features and improvements
    + Disable parallel PUT on release</changelog>
  <changelog author="fstrba@suse.com" date="1778414400">- Update to 38:
  👻  * Maintenance
    + Update banner links
  * Dependency updates
    + Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1
    to 3.10.1
    + Bump org.apache.maven.plugins:maven-resources-plugin from
    3.4.0 to 3.5.0
    + Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to
    3.6.2
    + Bump org.apache.apache.resources
    :apache-source-release-assembly-descriptor from 1.7 to 1.8
    + Bump version.maven-surefire from 3.5.4 to 3.5.5
    + Bump org.apache.maven.plugins:maven-dependency-plugin from
    3.9.0 to 3.10.0
    + Bump org.apache.maven.plugins:maven-compiler-plugin from
    3.14.1 to 3.15.0</changelog>
</package>
<package pkgid="d74650654615f013e0ac2e8f5f7f61f37da990e918249731f9e56a712bbef9817ca842e4b37cf54a94ccd33f2f110dcd81a1731b6b74de0b2f1942ace17d4a4b" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="2.0.29" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1539000000">- Update to 1.8.16:
  * [PDFBOX-4261] - Invalidated signature signing pdf twice
  * [PDFBOX-4276] - Multiply blend mode not detected
  * [PDFBOX-4283] - Allowing Rectangles with additional elements
  * [PDFBOX-4298] - NullPointerException when doing overlay
  * [PDFBOX-4316] - RemoveAllText does not delete all parameters with " operator
  * [PDFBOX-4274] - Get rid of warning about prerequisites
  * Improve skip duplicates (bsc#1111009, CVE-2018-11797)
- Adjust fix-version.patch</changelog>
  <changelog author="fstrba@suse.com" date="1591272000">- Upgrade to 2.0.19:
  * Move from 1.x release line to the 2.x one.
  * This is a ABI change
  * Generate the ant build system from the maven one and customize
    it
- Removed patches:
  * disable-downloads.patch
  * fix-javadoc-dep.patch
  * fix-version.patch
  * pdfbox-1.8.12-bouncycastle.patch
  * pdfbox-1.8.12-sourcetarget.patch
    + incorporated in the customizations of the ant build system</changelog>
  <changelog author="pmonreal@suse.com" date="1608724800">- Update to 2.0.22:
  * See https://downloads.apache.org/pdfbox/2.0.22/RELEASE-NOTES.txt
- Remove provided binaries</changelog>
  <changelog author="fvogt@suse.com" date="1609761600">- Add source signature and keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1618228800">- Update to 2.0.23:
  * Security fixes:
  - CVE-2021-27807: A carefully crafted PDF file can trigger an
    infinite loop while loading the file [bsc#1184356]
  - CVE-2021-27906: OutOfMemory-Exception while loading a crafted
    PDF file [bsc#1184357]
  * Bug fixes:
  - Transparency Group issues
  - getLastSignatureDictionary modifies internal structure of
    PDDocument
  - NullPointerexception in
    AcroFormOrphanWidgetsProcessor.resolveNonRootField()
  - AcroForm PDTextField formatting lost when setting value
  - java.lang.IndexOutOfBoundsException
  - Failure to modify cropBox when splitting a PDF Page
    vertically into 2 pieces
  - ArrayIndexOutOfBoundsException in isOwnerPassword
  - IllegalArgumentException in computeEncryptedKeyRev56
  - IllegalArgumentException in
    PDFObjectStreamParser.privateReadObjectNumbers
  - ClassCastException in COSStream.getFilterList
  - ArrayIndexOutOfBoundsException in
    PDFXrefStreamParser.parseValue
  * Improvements:
  - Improve document signing
  - Allow reuse of subsetted fonts by inverting the ToUnicode
    CMap
  - improve performance in signature validation
  - Add more checks to PDFXrefStreamParser and reduce memory
    footprint
  - Use StringBuilder for key in
    PDDeviceN.toRGBWithTintTransform()
  - Don't use RGB loop in PDDeviceN.toRGBWithTintTransform()</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package all resources in pdfbox module</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1650715200">- Fix build with bouncycastle 1.71 and the new bcutil artifact</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1681473600">- Update to 2.0.28
  * Bug
  - Extraction of Arabic PDF has incorrect ordering of normalized
    ligatures
  - Parsing differences between 2.0.23 and 2.0.24/3.0
  - Signing tries to set byteRange of old signature
  - Bug in
    org/apache/pdfbox/multipdf/Overlay#overlay(specificPageOverlayFile)
  - Inactive OCGs shown when not top level
  - Null pointer exception in PDFASchemaType.getNamespaceURI()
  - export:text creates jibberish / malformed output
  - ArrayIndexOutOfBounds in SampledImageReader.fromAny()
  - PDFRenderer resulting image has black background
  - NPE due to a malformed rectangle
  - Fix meta markup in HTML generation
  - ArrayIndexOutOfBoundsException in CFFCIDFont class
  - Can't open PDF with PDFBox: java.awt.color.CMMException: LCMS
    error 13: Couldn't link the profiles
  - ClassCastException in ShadingFill.process()
  - Font gets smaller for each rendered page
  - fix some logging inconsistencies
  - NPE in PDFMergerUtility.acroFormLegacyMode()
  - Avoid OOME when parsing an malformed pdf with a corrupted
    object stream
  * Improvement
  - Apply subsampling and region to masks
  - Remove finalize from ScratchFileBuffer
  - Invisible signature field is not referenced from /Annots
    dictionary of a Page
  - Support charset parameter in TextToPDF
  - Add a method to get the components of a composite glyph
  - PDResource font cache improvement
  - RFE: Comb flag warning
  - fix unnecessary boxing/unboxing
  - optimize LZWFilter
  - renderer.setSubsamplingAllowed(true) causing the picture to
    blur
  * Task
  - Remove Travis build
- Update to 2.0.27
  * Bug
  - Invalid stream Length validation in StreamValidationProcess
  - To set compressed on buffered image while creating a PDF
  - Blurry / distorted rendering
  - java.lang.IndexOutOfBoundsException (2)
  - PDFDebugger does not remove listeners for PagePane when
    opening new File
  - PDFRenderer.renderImageWithDPI thows EOFException in PDF
  - PDFCloneUtility.checkForRecursion breaks support for some
    existing PDFs
  - PDFStreamEngine.showTextStrings with font switch
  - ClassCastException (PDColor.java:66)
  - NullPointerException in PDFunctionType3.eval()
  - Deadlock in TrueTypeFont and RAFDataStream
  - illegalArgumentException for rendering PDF (image extraction)
  - NullPointerException in CmapSubtable.getCharCode
  - PDActionEmbeddedGoTo does not accept a Destination with a
    page number or string
  - NPE when Transparency Group is missing the BBox
  - PDFRenderer does not render letters when converting page to
    image
  - JPEG image rendered with wrong colors when using
    TwelveMonkeys
  - Performance issue since 2.0.18
  - NullPointerException in PDType0Font.readCode() if cMap is
    null
  - NullPointerException in CFFParser.parseFont()
  - IndexOutOfBoundsException in PDCIDFont.readWidths()
  - IndexOutOfBoundsException in Type1Parser.java
  - ClassCastException in CMapParser.parseBeginbfchar
  - ClassCastException in PDXObject.createXObject()
  - ClassCastException in PDAcroForm.getFields()
  - ClassCastException in PDDocumentCatalog.getAcroForm()
  - ClassCastException in PDResources.getIndirect()
  - getPageLayout throws IllegalArgumentException for empty mode
  - Font not found because of case issues
- Update to 2.0.26
  * Bug
  - COSParser: Infinite recursion
  - TestCreateSignature.testCreateSignedTimeStamp checkLTV build
    test fail
  - No Content - xRef / Obj Parsing
  - Pdf-A/1b Validation
  - A list of bugs found （70 bugs in total)
  - Text size option for PDFBox Debugger
  - IllegalArgumentException: Input buffer too short in
    StandardSecurityHandler.computeRC4key
  - ArrayIndexOutOfBoundsException in
    PDSeparation.tintTransform()
  - EOFException: Can't read 20 bytes
  - Wrong datatype for OPM in PDExtendedGraphicsState
  - Unhandled IOException thrown from BaseParser creates issue in
    PDFStreamEngine.processStreamOperators
  - *LOADS of* "WARNING: key node000xxxxx already exists in
    destination IDTree"
  - NullPointerException in PDRange.getMin()
  - Image interpolation when there shouldn't be
  - pDAcroForm.flatten() does not remove /SigFlags in /Catalog
    object
  - Could not read embedded TTF for font
  - ToUnicodeWriter.writeTo allows byte overflow in bfrange
    operator
  - TextToPDF appends space to each line
  - NegativeArraySizeException in pfb parser with 0 byte pfb font
    file
  - Hangup in COSFilterInputStream.nextRange
  - Certain PDF cannot be processed
  - Parsing fails in 2.0.26 that worked in 2.0.25
  - Object must be defined and must not be compressed object
  - Page tree root must be a dictionary
  - A carefully crafted pdf can trigger an infinite loop while
    parsing
  - POCIDFontType2 (Wingdings) encode throws a
    NullPointerException
  - Possible loop detection is triggered in 2.0.26 but file works
    in 2.0.25
  - IOException: object reference 112 0 R at offset 18355 in
    content stream
  - Field text missing
  - NPE during page render
  - Parsing shows 1 empty page with 2.0.26 and 7 with 2.0.25
  * Improvement
  - Create push button example
  - FontMapper should also take into account the user's font
    directory on Windows operating systems
  - Don't log warnings if there are not fonts to cache
  - support multiple widgets in PDTerminalField.importFDF()
  - Improve AddValidationInformation to handle exceptional
    situations better
  - Avoid duplicate certificates in AddValidation example
  - Render symbol for file attachment annotations
  * Task
  - Add test of PFB font
  - Add maven enforcer rule to ensure that JAVA_HOME is set
- Update to 2.0.25
  * Sub-task
  - Add print dpi submenu
  - Reduce HighResolutionImageIcons memory leaks
  * Bug
  - Page not rendered / extracted, Unknown type in array for TJ
    operation
  - ArrayIndexOutOfBoundsException: arraycopy: length -2 is
    negative in PDPanose.getPanose
  - LayerUtility().importPageAsForm() doesn't return
  - PDPageContentStream.setLineWidth(float) not allowed in text
    block
  - preflight SMask entry check incorrect
  - NumberFormatException in merge if fieldname is
    "dummyFieldName1#1"
  - FDFJavaScript.getDoc() always returns null or empty
  - Annotation shown with thick border
  - Deeply nested drawings not shown
  - Not existing rectangle appears on page image
  - Not rendered (white) pages for given pdf
  - Encryption on Split documents
  - PDPage.getAnnotations() causes subsequent calls to
    PDDocument.getPages() to fail
  - Error rendering png from PDF - Error at Type1Parser
    parseBinary for Type 1 Font
  - EOFException during TTF parsing
  - Incorrect rendering of Type3 character
  - class org.apache.pdfbox.cos.COSName cannot be cast to class
    org.apache.pdfbox.cos.COSString
  - unneeded / double code in PageExtractor
  - When PDF is converted to an image, the image has a large
    black rectangle.
  - Slow rendering for specific PDF File with small chunks 16x8
  - Decryption for V4 fails when no Length entry is set in
    Encryption Dictionary
  - `NullPointerException` when intersecting area with null
    clipping path
  - Stack overflow in PDColorSpace.create()
  - Splitter: Problematic /Info causes big files
  - Resolution of ambiguities in inline images don't follow the
    standard
  - Silent fail of PDTextField.setValue when font encoding
    missing
  - TTFSubsetter incorrectly calculating 'searchRange'
  - Failing to get multiple encodings from cmap table
  - Text "820-01869-U-A" is omitted from PDF doc
  - Wrong number of fonts leads to OOM-Exception
  * New Feature
  - Additional `showTransparencyGroupOnGraphics()` method
  * Improvement
  - Optimize SampledImageReader.from1Bit()
  - Optimize reading of masked images
  - Support BGR for OpenCV and JavaCV
  - Preserve indirect object reference when copying resources
  - PDFBox should use the quadding for fields with the comb flag
  - Lazier clipping
  - LegacyPDFStreamEngine.glyphList loaded from disk on each
    instantiation rather than static final?
  - Prefer MergeSort over QuickSort and try native TimSort first
    (with explanation)
  - Avoid creating Paint objects and filling when there is
    nothing to do
  - support get unicode from embedded TrueTypeFont cmap
  - Update liberation fonts
  * Test
  - Add test for double visible signature on the same page
  * Task
  - Add test for double visible signature on encrypted file
  - Add test for comb fields adjustment
  - Store x and y scaling factor
  - Update CCITTFaxDecoderStream.java from twelvemonkeys (3)
- Update to 2.0.24
  * Bug
  - Slow rendering for specific PDF file
  - Very slow rendering on PageDrawer.shadingFill
  - Glyphs missed in rendering
  - Wrong classification of an JPEG image leading to a blank
    image added to a pdf document
  - Embedded files not extracted from PDF files with multilevel
    EmbeddedFiles tree
  - 3.0.0-RC1: PDComboBox.setValue() throws
    IllegalArgumentException: /DA is a required entry
  - Issue with COSObjectKey::fixGeneration
  - Error extracting text from PDF - Can't read the embedded
    Type1 font FDFBJU+NewsGothic
  - Error in identification of PDF comment symbol % as a token
    separator with PDF names
  - Stack overflow when reading a corrupt dictionary
  - dash pattern [0] should be invisible
  - Behaviour change in 2.0.20 due to use of
    IOUtils.populateBuffer in
    SecurityHandler.prepareAESInitializationVector leading to
    IOException for certain PDF
  - java.io.IOException: Page tree root must be a dictionary
  - Snapshot Deploy not working
  - TSAClient with username+password
  - COSOutputStream.flush doesn't call super
  - BaseParser: stack overflow when reading a corrupt pdf
  - isEmbeddingPermitted() is too restrictive on TTFs with OS2
    table versions 0-2
  - Wild rendering when repeating truetype glyph flag is outside
    of range
  - v2.0.22 and v3.0.0-RC1 PDF Debugger app crashes with
    java.lang.NullPointerException
  - CreateCheckBox example draws too large, clipped checkmark
  - Wrong color space detected for some Jpeg images
  - Possible memory leak after calling decode filter
  - Ink annotation not rendered
  * Improvement
  - Pass PDFRenderer to PDFPrintable constructor
  - Create tests for HelloWorld examples
  - Faster PDImageXObject.applyMask
  - Custom folder for fonts in FontMapper
  - allow to make timestamp only signature "LTV"
  - Create portable collection PDF
  - Optimize memory footprint of PDFObjectStreamParser
  - Add getter/setter for suppressDuplicateOverlappingText in
    PDFMarkedContentExtractor
  - Cache PageTree in PDFPrintable
  - Add Adobe Illustrator COSNames
  - Make constructors of CIDSystemInfo and PDPanoseClassification
    public
  * Wish
  - When merging multiple pdf ua documents, Tags become nested
  * Task
  - Failing testFlattenPDFBox2469Filled on Ubuntu
  - Add test for PDFMarkedContentExtractor class
  - Create test for CreateGradientShadingPDF</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1691409600">- Update to 2.0.29
  * Bug
  - A (rotated) barcode is missing from a pdf when printed
  - NullPointerException in PDTrueTypeFont.java getPath( )
  - Parsing of XMP metadata without optional xmpmeta element
  - Avoid division by 0 in shading function interpolation
  - MyPageDrawer#getPaint may produce
    UnsupportedOperationException
  - Barcode corrupted when printing document
  - The text in some fonts is lost when converting pdf to image
  - PDFTextStripper runs out of memory in 2.0.28 but not in
    2.0.27 same code
  - all values in the signature dictionary shall be direct
    objects
  - Glyphs not rendered
  - PDF with mangled font rendering in some environments
  - RadioButtons disappear when printing PDF
  - BitsPerComponent 16 not allowed in PDF/A-1b
  - NullPointerException in PDFStreamEngine.showText
  - Infinte loop when parsing Type1 font
  * Improvement
  - Add duplex and tray parameters to PrintPDF
  - Create command line utility to extract XMP data
  - Improve Opaque PDFRenderer example
  * Task
  - Implement /RunLengthDecode encoder
  - Slight regression on corrupt bug tracker file
  - move and update bc from jdk15on to jdk15to18
- Build and package forgotten artifact org.apache.pdfbox:xmpbox
- Add build dependency on mvn(javax.xml.bind:jaxb-api), needed for
  xmpbox.</changelog>
</package>
<package pkgid="eb485587d81ffb1d3f07ead3f7c13526c976e597bed23f1149c453aac92ceba29042aabec2118d02c0a3b557de5adefc150343f3e1ce25d85069cae29975b205" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="2.0.36" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1681473600">- Update to 2.0.28
  * Bug
  - Extraction of Arabic PDF has incorrect ordering of normalized
    ligatures
  - Parsing differences between 2.0.23 and 2.0.24/3.0
  - Signing tries to set byteRange of old signature
  - Bug in
    org/apache/pdfbox/multipdf/Overlay#overlay(specificPageOverlayFile)
  - Inactive OCGs shown when not top level
  - Null pointer exception in PDFASchemaType.getNamespaceURI()
  - export:text creates jibberish / malformed output
  - ArrayIndexOutOfBounds in SampledImageReader.fromAny()
  - PDFRenderer resulting image has black background
  - NPE due to a malformed rectangle
  - Fix meta markup in HTML generation
  - ArrayIndexOutOfBoundsException in CFFCIDFont class
  - Can't open PDF with PDFBox: java.awt.color.CMMException: LCMS
    error 13: Couldn't link the profiles
  - ClassCastException in ShadingFill.process()
  - Font gets smaller for each rendered page
  - fix some logging inconsistencies
  - NPE in PDFMergerUtility.acroFormLegacyMode()
  - Avoid OOME when parsing an malformed pdf with a corrupted
    object stream
  * Improvement
  - Apply subsampling and region to masks
  - Remove finalize from ScratchFileBuffer
  - Invisible signature field is not referenced from /Annots
    dictionary of a Page
  - Support charset parameter in TextToPDF
  - Add a method to get the components of a composite glyph
  - PDResource font cache improvement
  - RFE: Comb flag warning
  - fix unnecessary boxing/unboxing
  - optimize LZWFilter
  - renderer.setSubsamplingAllowed(true) causing the picture to
    blur
  * Task
  - Remove Travis build
- Update to 2.0.27
  * Bug
  - Invalid stream Length validation in StreamValidationProcess
  - To set compressed on buffered image while creating a PDF
  - Blurry / distorted rendering
  - java.lang.IndexOutOfBoundsException (2)
  - PDFDebugger does not remove listeners for PagePane when
    opening new File
  - PDFRenderer.renderImageWithDPI thows EOFException in PDF
  - PDFCloneUtility.checkForRecursion breaks support for some
    existing PDFs
  - PDFStreamEngine.showTextStrings with font switch
  - ClassCastException (PDColor.java:66)
  - NullPointerException in PDFunctionType3.eval()
  - Deadlock in TrueTypeFont and RAFDataStream
  - illegalArgumentException for rendering PDF (image extraction)
  - NullPointerException in CmapSubtable.getCharCode
  - PDActionEmbeddedGoTo does not accept a Destination with a
    page number or string
  - NPE when Transparency Group is missing the BBox
  - PDFRenderer does not render letters when converting page to
    image
  - JPEG image rendered with wrong colors when using
    TwelveMonkeys
  - Performance issue since 2.0.18
  - NullPointerException in PDType0Font.readCode() if cMap is
    null
  - NullPointerException in CFFParser.parseFont()
  - IndexOutOfBoundsException in PDCIDFont.readWidths()
  - IndexOutOfBoundsException in Type1Parser.java
  - ClassCastException in CMapParser.parseBeginbfchar
  - ClassCastException in PDXObject.createXObject()
  - ClassCastException in PDAcroForm.getFields()
  - ClassCastException in PDDocumentCatalog.getAcroForm()
  - ClassCastException in PDResources.getIndirect()
  - getPageLayout throws IllegalArgumentException for empty mode
  - Font not found because of case issues
- Update to 2.0.26
  * Bug
  - COSParser: Infinite recursion
  - TestCreateSignature.testCreateSignedTimeStamp checkLTV build
    test fail
  - No Content - xRef / Obj Parsing
  - Pdf-A/1b Validation
  - A list of bugs found （70 bugs in total)
  - Text size option for PDFBox Debugger
  - IllegalArgumentException: Input buffer too short in
    StandardSecurityHandler.computeRC4key
  - ArrayIndexOutOfBoundsException in
    PDSeparation.tintTransform()
  - EOFException: Can't read 20 bytes
  - Wrong datatype for OPM in PDExtendedGraphicsState
  - Unhandled IOException thrown from BaseParser creates issue in
    PDFStreamEngine.processStreamOperators
  - *LOADS of* "WARNING: key node000xxxxx already exists in
    destination IDTree"
  - NullPointerException in PDRange.getMin()
  - Image interpolation when there shouldn't be
  - pDAcroForm.flatten() does not remove /SigFlags in /Catalog
    object
  - Could not read embedded TTF for font
  - ToUnicodeWriter.writeTo allows byte overflow in bfrange
    operator
  - TextToPDF appends space to each line
  - NegativeArraySizeException in pfb parser with 0 byte pfb font
    file
  - Hangup in COSFilterInputStream.nextRange
  - Certain PDF cannot be processed
  - Parsing fails in 2.0.26 that worked in 2.0.25
  - Object must be defined and must not be compressed object
  - Page tree root must be a dictionary
  - A carefully crafted pdf can trigger an infinite loop while
    parsing
  - POCIDFontType2 (Wingdings) encode throws a
    NullPointerException
  - Possible loop detection is triggered in 2.0.26 but file works
    in 2.0.25
  - IOException: object reference 112 0 R at offset 18355 in
    content stream
  - Field text missing
  - NPE during page render
  - Parsing shows 1 empty page with 2.0.26 and 7 with 2.0.25
  * Improvement
  - Create push button example
  - FontMapper should also take into account the user's font
    directory on Windows operating systems
  - Don't log warnings if there are not fonts to cache
  - support multiple widgets in PDTerminalField.importFDF()
  - Improve AddValidationInformation to handle exceptional
    situations better
  - Avoid duplicate certificates in AddValidation example
  - Render symbol for file attachment annotations
  * Task
  - Add test of PFB font
  - Add maven enforcer rule to ensure that JAVA_HOME is set
- Update to 2.0.25
  * Sub-task
  - Add print dpi submenu
  - Reduce HighResolutionImageIcons memory leaks
  * Bug
  - Page not rendered / extracted, Unknown type in array for TJ
    operation
  - ArrayIndexOutOfBoundsException: arraycopy: length -2 is
    negative in PDPanose.getPanose
  - LayerUtility().importPageAsForm() doesn't return
  - PDPageContentStream.setLineWidth(float) not allowed in text
    block
  - preflight SMask entry check incorrect
  - NumberFormatException in merge if fieldname is
    "dummyFieldName1#1"
  - FDFJavaScript.getDoc() always returns null or empty
  - Annotation shown with thick border
  - Deeply nested drawings not shown
  - Not existing rectangle appears on page image
  - Not rendered (white) pages for given pdf
  - Encryption on Split documents
  - PDPage.getAnnotations() causes subsequent calls to
    PDDocument.getPages() to fail
  - Error rendering png from PDF - Error at Type1Parser
    parseBinary for Type 1 Font
  - EOFException during TTF parsing
  - Incorrect rendering of Type3 character
  - class org.apache.pdfbox.cos.COSName cannot be cast to class
    org.apache.pdfbox.cos.COSString
  - unneeded / double code in PageExtractor
  - When PDF is converted to an image, the image has a large
    black rectangle.
  - Slow rendering for specific PDF File with small chunks 16x8
  - Decryption for V4 fails when no Length entry is set in
    Encryption Dictionary
  - `NullPointerException` when intersecting area with null
    clipping path
  - Stack overflow in PDColorSpace.create()
  - Splitter: Problematic /Info causes big files
  - Resolution of ambiguities in inline images don't follow the
    standard
  - Silent fail of PDTextField.setValue when font encoding
    missing
  - TTFSubsetter incorrectly calculating 'searchRange'
  - Failing to get multiple encodings from cmap table
  - Text "820-01869-U-A" is omitted from PDF doc
  - Wrong number of fonts leads to OOM-Exception
  * New Feature
  - Additional `showTransparencyGroupOnGraphics()` method
  * Improvement
  - Optimize SampledImageReader.from1Bit()
  - Optimize reading of masked images
  - Support BGR for OpenCV and JavaCV
  - Preserve indirect object reference when copying resources
  - PDFBox should use the quadding for fields with the comb flag
  - Lazier clipping
  - LegacyPDFStreamEngine.glyphList loaded from disk on each
    instantiation rather than static final?
  - Prefer MergeSort over QuickSort and try native TimSort first
    (with explanation)
  - Avoid creating Paint objects and filling when there is
    nothing to do
  - support get unicode from embedded TrueTypeFont cmap
  - Update liberation fonts
  * Test
  - Add test for double visible signature on the same page
  * Task
  - Add test for double visible signature on encrypted file
  - Add test for comb fields adjustment
  - Store x and y scaling factor
  - Update CCITTFaxDecoderStream.java from twelvemonkeys (3)
- Update to 2.0.24
  * Bug
  - Slow rendering for specific PDF file
  - Very slow rendering on PageDrawer.shadingFill
  - Glyphs missed in rendering
  - Wrong classification of an JPEG image leading to a blank
    image added to a pdf document
  - Embedded files not extracted from PDF files with multilevel
    EmbeddedFiles tree
  - 3.0.0-RC1: PDComboBox.setValue() throws
    IllegalArgumentException: /DA is a required entry
  - Issue with COSObjectKey::fixGeneration
  - Error extracting text from PDF - Can't read the embedded
    Type1 font FDFBJU+NewsGothic
  - Error in identification of PDF comment symbol % as a token
    separator with PDF names
  - Stack overflow when reading a corrupt dictionary
  - dash pattern [0] should be invisible
  - Behaviour change in 2.0.20 due to use of
    IOUtils.populateBuffer in
    SecurityHandler.prepareAESInitializationVector leading to
    IOException for certain PDF
  - java.io.IOException: Page tree root must be a dictionary
  - Snapshot Deploy not working
  - TSAClient with username+password
  - COSOutputStream.flush doesn't call super
  - BaseParser: stack overflow when reading a corrupt pdf
  - isEmbeddingPermitted() is too restrictive on TTFs with OS2
    table versions 0-2
  - Wild rendering when repeating truetype glyph flag is outside
    of range
  - v2.0.22 and v3.0.0-RC1 PDF Debugger app crashes with
    java.lang.NullPointerException
  - CreateCheckBox example draws too large, clipped checkmark
  - Wrong color space detected for some Jpeg images
  - Possible memory leak after calling decode filter
  - Ink annotation not rendered
  * Improvement
  - Pass PDFRenderer to PDFPrintable constructor
  - Create tests for HelloWorld examples
  - Faster PDImageXObject.applyMask
  - Custom folder for fonts in FontMapper
  - allow to make timestamp only signature "LTV"
  - Create portable collection PDF
  - Optimize memory footprint of PDFObjectStreamParser
  - Add getter/setter for suppressDuplicateOverlappingText in
    PDFMarkedContentExtractor
  - Cache PageTree in PDFPrintable
  - Add Adobe Illustrator COSNames
  - Make constructors of CIDSystemInfo and PDPanoseClassification
    public
  * Wish
  - When merging multiple pdf ua documents, Tags become nested
  * Task
  - Failing testFlattenPDFBox2469Filled on Ubuntu
  - Add test for PDFMarkedContentExtractor class
  - Create test for CreateGradientShadingPDF</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1691409600">- Update to 2.0.29
  * Bug
  - A (rotated) barcode is missing from a pdf when printed
  - NullPointerException in PDTrueTypeFont.java getPath( )
  - Parsing of XMP metadata without optional xmpmeta element
  - Avoid division by 0 in shading function interpolation
  - MyPageDrawer#getPaint may produce
    UnsupportedOperationException
  - Barcode corrupted when printing document
  - The text in some fonts is lost when converting pdf to image
  - PDFTextStripper runs out of memory in 2.0.28 but not in
    2.0.27 same code
  - all values in the signature dictionary shall be direct
    objects
  - Glyphs not rendered
  - PDF with mangled font rendering in some environments
  - RadioButtons disappear when printing PDF
  - BitsPerComponent 16 not allowed in PDF/A-1b
  - NullPointerException in PDFStreamEngine.showText
  - Infinte loop when parsing Type1 font
  * Improvement
  - Add duplex and tray parameters to PrintPDF
  - Create command line utility to extract XMP data
  - Improve Opaque PDFRenderer example
  * Task
  - Implement /RunLengthDecode encoder
  - Slight regression on corrupt bug tracker file
  - move and update bc from jdk15on to jdk15to18
- Build and package forgotten artifact org.apache.pdfbox:xmpbox
- Add build dependency on mvn(javax.xml.bind:jaxb-api), needed for
  xmpbox.</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Update to 2.0.30
  * Bug
  - Regression unicode mapping in Korean document
  - Operators "q" and "Q" should also preserve text matrices
  - Signature Image not Rendered starting with PDFBox 2.0.23
  - Fonts are not subsetted when saving incrementally
  - Bug in PDFMergerUtility#mergeFields
  - Password protected PDF opens in GUI apps but PDFbox says
    invalid password
  - Wrong error message "2.4.1 : Invalid Color space, The operator
    "rg" can't be used with CMYK Profile"
  - Make FDF annotations more compliant with the specification
  - NPE in DomXmpParser.parseLiDescription
  - Regression: NoSuchElementException in PDFXrefStreamParser
  - The PageDrawer.strokePath method is blocked, and cpu100%
  - Avoid NPE when processing CFF2 based fonts
  - IllegalArgumentException: Dimensions (width=458477041
    height=26) are too large
  - Can not see checkbox check
  - NPE when converting pdf to image.
  - NullPointerException in XMPMetadata.getSchema()
  - PDFToImage might not correctly detect unsupported image
    formats
  - Font cache isn't effective on my machine, always rebuilds
  - PDF to Image conversion results in different converted image
  - Text in a certain font is lost when converting pdf to image
  - Incorrect colors in image from PDFs (DCTDecode)
  * New Feature
  - Inconsistent/incomplete PDF rendering
  * Improvement
  - Improve code quality (4)
  - Add PDRectangle#TABLOID paper size
  - Support version 0.5 of MaximumProfileTable
  - loca-table isn't mandatory for TTF/OTF-fonts using CFF
    outlines
  - Implement PDF 2.0 dash phase clarification
  - Add getter and setter for the CO array under PDAcroForm
  - Make UTC timezone static
  - Facilitate migration to PDFBox 3.0
  - Consolidate bouncycastle configuration
  - Consistent scm.url values for pom.xml
  - use comparison operators for enums</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Update to 2.0.31
  * Bug
  - [PATCH] Split pdf lose accessibility tags
  - Allow creating of PDFXObjectImage without accessing to the
    image stream
  - PfbParser fails to parse PFB font with multiple binary
    records.
  - Lines vanish when printing on MacOS
  - java.lang.IllegalArgumentException: Provided dictionary is not
    of type 'COSName{OCG}'
  - The embedded font DroidSansFallbackFull reports an error when
    parsing, and finally uses lastResortFont, resulting in garbled
    fonts.
  - COSName caches already cached hashCode
  - Font operation takes a long time with 3.0.1
  - NullPointerException in TTFSubsetter.buildPostTable()
  - Problem converting PDF to image (java.awt.color.CMMException:
    Can not access specified profile)
  - Set the default value for PDNonTerminalField
  - java.lang.ArrayIndexOutOfBoundsException Bug Report
  - Wrong colors in PDF since PDFBOX-5488
  - Java 7 support on 2.0
  - Convert to image exception
  - PDF conversion in this format is very slow. Is there any room
    for optimization?
  - IllegalArgumentException: -Infinity is not a finite number
  - Inconsistent signature page handling when signing in existing
    signature fields
  - Add leading "0" for octal values in MacOSRomanEncoding
  - DataFormatException: invalid distance too far back
  - Grayscale JPEG rendered multicolor
  - OutOfMemoryError in FileSystemFontsProvider.scanFonts
  - NPE in PageDrawer.getPaint()
  - Issue with embedded Font and descendant Font
  - LCMS error 13: Mismatched alpha channels
  * New Feature
  - Enable Native Markdown Extraction in Apache PDFBox
  * Improvement
  - When splitting, keep page destinations that are part of target
    document(s)
  - Replace Exception with some repair attempt</changelog>
  <changelog author="fstrba@suse.com" date="1776168002">- Update to 2.0.32
  * Bug
  - preflight-app fails on Java 11+ with NoClassDefFoundError:
    javax/activation/DataSource
  - AppearanceGeneratorHelper assumes fontscale 1000
  - Remove release subproject
  - Don't use a predefined CMap if a ToUnicode CMap is present
  - Regression NPE in Splitter
  - The content of the specified font is lost, Google Chrome can
    display it
  - Crash for Softmask with incorrect backdrop color components
  - Observable Timing Discrepancy (Timing Attack)
  - Black rectangle over image
  - Wrong font substitution for Wingdings
  - PDDocument#importPage slowed down by factor 1300
  - Split aborts with broken destinations
  - IllegalArgumentException: Parameter must be 1-based, but is 0
    when using PDFTextStripperByArea
  - Files created with PDFMergerExample are not correct PDF/A
  - Missing /Subtype and /Type in Metadata not detected
  - Multiple exceptions coming from org.apache.fontbox.ttf for
    different PDFs
  - IOException: Error expected floating point
    numberactual='-12.-1'
  - NullPointerException: Cannot invoke "String.codePointAt(int)"
    because "uni" is null
  - DomXmpParser - IllegalArgumentException: prefix cannot be
    "null" when creating a QName
  - ClassCastException: org.apache.pdfbox.cos.COSNull cannot be
    cast to org.apache.pdfbox.cos.COSDictionary
  - IllegalArgumentException: Width (26) and height (0) must be
    non-zero
  - There is an exception when getting embedded font, is it
    compatible?
  - Infinite loop after splitting and saving PDF / giant result
    files
  * Improvement
  - JPEGFactory. Reduce logging severity when no image metadata is
    present
  - Add test for surrogate pair character ð©¸½
  - Update unicode Scripts.txt
  - Include a PDFA check with VeraPDF for CreatePDFATest
  - Add center constructor parameter to PDFPageable and to
    pdfbox-app
  - When splitting, keep named page destinations that are part of
    target document(s)
  - When this PDF is rendered with the "f" Operator, a black
    screen appears.
  * Task
  - Investigate why we get "response contains wrong nonce value"
    during build tests</changelog>
  <changelog author="fstrba@suse.com" date="1776168003">- Update to 2.0.33
  * Bug
  - Character positions shifted
  - Incorrectly extracted text (broken words)
  - Wrong color of uncolored tiling pattern
  - OutOfMemoryError - during renderImageWithDPI
  - BaseParser fails when a number is followed by a string
    starting with 'e'
  - Type3 font is not rendered
  - Flattening removes all annotations when widget annotation has
    no page
  - Image lost on page render
  - extra whitespaces when extracting Arabic text
  - SMaskInData not supported for JPX images
  - Kid Widget /DA is ignored in setDefaultAppearance() call
  - Radio button can't be set
  - the PDDocument.documentId does not seem to be written into the
    flat byteStream
  - PDFBox is unable to remove ID
  - Fix last step of the build process
  - StringIndexOutOfBoundsException in AppearanceGeneratorHelper
  - ClassCastException in SetLineJoinStyle.process()
  - Unable to load password protected pdf
  - PDFBox not extracting text of non-latin languages(tamil,
    bengali) properly but adobe reader's save as text does
  - Checkstyle
  - [PATCH] Detect CMYK image without relying on metadata
  - Regression from PDFBOX-5841: Text extraction with rotation
    magic fails for PDF with multiple content streams in a page
  - PDF render blank page: The end of the stream doesn't point to
    the correct offset, using workaround to read the stream,
    stream start position: 196, length: 0, expected end position:
    196
  - CVE for Lucene libraries
  - The pattern created with PDFBox shows inconsistent colors
    between Safari and Adobe.
  - BDC sequence with resource reference instead of with MCID
  - StackOverflowError in PDFieldFactory.findFieldType
  - ClassCastException in AnnotationValidator
  - The CPU usage of a PDF file with a size of 85.6 MB is abnormal
  - Many ZapfDingbats symbols do not appear when page is rendered.
  - IOException when reading isolated "+"
  - IllegalArgumentException: capacity &lt; 0: (-75475220 &lt; 0) in
    RandomAccessReadBuffer constructor
  - FontBox spawns a `cmd` subprocess to read an environment
    variable (on Windows)
  - Implement PDF 2.0 dash phase clarification (2)
  - Particular PDF fails on renderImageWithDPI call
  - PDType0Font return invalid space width
  - Icons of text annotations sometimes too large
  - Orphan page check doesn't check annotation destinations
  - NPE in COSArray.indexOfObject
  - NPE in PagePane.mouseMoved()
  - ArrayIndexOutOfBoundsException in CMap.toInt()
  * New Feature
  - Show ASN.1 decoded Contents for Signature-Dictionary
  * Improvement
  - Exchange hard-coded values for variables and provide
    command-line options in TextToPDF component
  - Long rendering time of fonts in a specific PDF
  - Support imageio-jnr / imageio-openjpeg library for JPEG2000
    decoding
  - Improve ExtractTTFFonts
  - Change Loglevel from Warn to info when rebuilding font cache
  - Support OCG visibility expressions
  - Add page getter/setter to PDObjectReference
  - Support long values for COSInteger objects
  - Empty constructor for PDViewerPreferences
  - Add check of /P to PDFMergerUtilityTest
  - support Markdown extraction from the command line
  - Calculate dpi dynamically when printing with raster
  - Remove orphan annotations in structure tree
  - Add font name to PrintTextLocations
  * Wish
  - Improve detection whether printing or viewing
  - Hi CPU and memory usage when converting a PDF with type 4
    shading
  * Task
  - 2.0 builds fail on jenkins because jdk11 no longer supported</changelog>
  <changelog author="fstrba@suse.com" date="1776168004">- Update to 2.0.34
  * Bug
  - PageDrawer is not rendering unrotatable Annotations on rotated
    pages
  - Zero-width non-joiner characters visible in generated PDF
  - Surrogate pairs with combining diacritics are incorrectly
    ordered on text extraction
  - TestCreateSignature.testCreateSignedTimeStamp checkLTV build
    test fail (2) / Support several issuers
  - IllegalArgumentException: Width (0) and height (0) must be
    non-zero
  - Merge docs with specific characteristics causes stack overflow
  - InvalidKeyException: Supplied key
    (sun.security.ec.ECPrivateKeyImpl) is not a RSAPrivateKey
  - Can't read the embedded Type1 font: Found Token[kind=NAME,
    text=def] but expected begin
  - Wrong size entry in trailer after incremental save
  - FileSystemFontProvider doesn't register failed type1 fonts
  - Text annotation crosshair symbol too small when using Adobe
    symbol font
  - Orphan /OpenAction destination page kept in merge
  - PDFRenderer causes endless loop
  - Invalid stream length: 0, stream start position: &lt;xxx&gt;
  - Inline image incorrectly parsed (2)
  - IllegalArgumentException: Not a valid Unicode code point:
    0xE28496
  - Type 3 font glyphs not displayed
  - Rendered PDF is missing shading pattern graphics
  - NPE during merge
  - Class cast exception in building PDDestinationNameTreeNode
  - DomXmpParser incorrectly expects namespaces on attribute level
  - BDC processor mishandles property name
  - Can't render some Type1C fonts.
  - PDF to Image conversion results in a blank white page
  * Improvement
  - Implement PDFormXObject.setGroup()
  - CertificateVerifier.isSelfSigned() should not throw an
    exception
  - Use Zapf Dingbats code for cross text annotation
  - Support PushPin, Tag and Graph file attachment annotation
    icons
  - Improve PDFMergerUtility memory footprint
  - Support rare RC4 encryption where R=4, key length &lt; 128 bits
  - Improve checkWithNumberTree() test
  - Use SHA256 instead of MD5 for document id
  * Wish
  - PrintPDF should not be case sensitive against printer name on
    Windows
  * Task
  - Run regression tests for 2.0.34</changelog>
  <changelog author="fstrba@suse.com" date="1776168005">- Update to 2.0.35
  * Bug
  - NegativeArraySizeException with PDF file with huge fonts
  - Inline image bug with multi-byte newline tokens
  - fix initial ByteArrayOutputStream size for deflate operation
  - PDF takes an hour to render
  - Splitter does not include structure tree in documents past the
    first split
  - build fails on jdk11
  - Load a TTF font which is from Mac OS throw an exception
  - Wrong glyphs since PDFBOX-5790
  - ClassCastException on broken file in
    PDEmbeddedFilesNameTreeNode.convertCOSToPD()
  - invalid XMP generated when Apache Xalan in the classpath
  - XMP JobType constructor ignores fieldPrefix
  - NullPointerException in xmpbox serializer if a date is empty
  - Rendering issue with type 2 shading: vertical expansion
  - Possible infinite loop in shading code
  - Potential OOM in XrefStreamParser
  - Potential StackOverflow in PDFStreamParser
  - Potential StackOverflow in PDPageTree's
    getInheritableAttribute
  - Potential OOM in Type1Lexer
  - Potential OOM in PfbParser
  - PDMarkedContentReference.setMCID() should not accept negative
    numbers
  - IllegalPathStateException: missing initial moveto in path
    definition
  - Fix possible ClassCastException
  - NullPointerException in COSDictionary
  - StringIndexOutOfBoundsException in
    PlainText$Paragraph.getLines()
  - LZWFilter crashes, probably not handling the KwKwK special
    case
  - NullPointerException in PDNumberTreeNode.getNumbers()
  - UnsupportedOperationException: JPX color spaces don't support
    drawing
  - Signing tries to set byteRange of old signature (2)
  - ClassCastException in
    PDOptionalContentProperties.getBaseState()
  * Improvement
  - Add test for embedded files
  - set size for ByteArrayOutputStreams
  - avoid creation of temporary objects when parsing hex values
  - avoid unnecessary map lokups
  - remove unnecessary iteration and StringBuilder creation
  - Support reverse landscape orientation for printing
  - Add test coverage for orphan annotation
  - Remove orphan popup parent annotation
  - Improve XmpSerializer test by verifying its output
  - Consider rotation of page when applying overlay
  - Preserve Perms dictionary when signing
  - Check /ParentTree against /K tree
  - Add test for 5521
  - Refactor RC4Cipher
  * Task
  - Regression tests for 2.0.35</changelog>
  <changelog author="fstrba@suse.com" date="1776168006">- Update to 2.0.36
  * Bug
  - XMPBox removes namespaces on serialization
  - False negative on PDFA-1b validation : missing field type
  - PlainText.Paragraph.getLines extremely slow on long lines
  - Valid PDF/A 1B is rejected
  - Potential StackOverflows in BaseParser
  - Unknown code in Huffman RLE stream
  - IllegalArgumentException: Can't add attribute to 0-length text
  - TTFSubsetter.buildGlyfTable() modifies glyphIds while
    iterating over its entries possibly causing
    ConcurrentModificationException to be thrown
  - IndexOutOfBoundsException in
    Type1CharStringParser.processCallSubr()
  - Exception "No type defined for
    {http://www.aiim.org/pdfa/ns/id/}rev" when trying to determine
    version of PDF/A-4 document
  - allow new PDF/A-4 conformance levels
  - pdfbox-app-X.X.X-sources.jar on maven central are empty (and
    javadoc jar is missing)
  - Cmd line docs
  - IllegalArgumentException: Multiplying two matrices produces
    illegal values in PDFStreamEngine.processAnnotation()
  - XmpParsingException: Schema is not set in this document:
    http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  - NullPointerException in FontMapperImpl.getFontMatches()
  - border style in FDFAnnotation is not initialized if width is 0
  - German umlauts are not rendered
  - Invalid type in Schema not detected when in XML attributes
  - Serializing produces date "1-01-01T00:00:00+01:00"
  - Seconds of date "D:2015-02-03T10:11:12" returned as 0
  - Confusing naming of "DerivedFrom" property getter in
    XMPMediaManagementSchema
  - ClassCastException in XMPMediaManagementSchema.getHistory()
  - IllegalArgumentException: Input buffer too short in
    StandardSecurityHandler.computeRC4key()
  - IllegalArgumentException: Width (0) and height (0) cannot be
    &lt;= 0 when printing landscape rotated with RASTERIZE_DPI_AUTO
  - DateConverter fails on valid date
  - ClassCastException: class org.apache.xmpbox.type.TextType
    cannot be cast to class org.apache.xmpbox.type.ArrayProperty
    in DublinCoreSchema.getCreatorsProperty()
  - tiff:YCbCrSubSampling and tiff:YCbCrPositioning have wrong
    cardinality
  - ClassCastException: class org.apache.xmpbox.type.FlashType
  - Cannot find a definition for the namespace
    http://www.w3.org/1999/02/22-rdf-syntax-ns#, property:
    rdf:Description
  - XmpParsingException: Schema is not set in this document:
    http://ns.adobe.com/xap/1.0/sType/ResourceEvent#, property:
    stEvt:action
  - XmpParsingException: Missing pdfaSchema:property in type
    definition in lenient mode
  - XmpParsingException: Unknown property value type : Open Choice
    of Integer
  - XmpParsingException: Property 'CountryCode' not defined in
    http://www.epo.org/patent-bibliographic-data/1.0/
  - date "0-00-00T00:00:00-04:00" read as
    "0002-11-30T00:00:00-40:00"
  - XmpParsingException: Type 'stRef:documentName' not defined in
    http://ns.adobe.com/xap/1.0/sType/ResourceRef# in lenient mode
  - Invalid PDF/A namespace definition, prefix: xmlns, namespace:
    http://www.aiim.org/pdfa/ns/extension/
  - XmpParsingException: Schema is not set in this document:
    http://www.aiim.org/pdfa/ns/extension/, property:
    pdfaExtension:schemas
  - NegativeArraySizeException in PredictorOutputStream()
  - NullpointerException in PDAcroForm.getField(Line 485)
  - OutOfMemoryError when trying to extract text from pdf
  - Outlines circular reference vulnerability
  - Rendered text missing
  - Inverted images due to enlarged decode array
  - PDF displays garbled characters in Adobe Reader but renders
    correctly in web browsers
  - NullPointerException while merging PDFs with output intents
  * Improvement
  - Valid XMP Extension Schema rejected
  - Remove dead code from PDFMarkedContentExtractor
  - Include test file in test class
  - Get and Add PageTextSchema
  - Remove / deprecate TypeMapping.getAssociatedSchemaObject()
  - Support Seq / Bag mixup in lenient mode
  - Parse xmp files in lenient mode that have no processing
    instructions
  - deprecate getPDFIdentificationSchema() in favor of
    getPDFAIdentificationSchema()
  - Support TIFF-files with FillOrder=2 conversion to PDF
  * Task
  - Remove / deprecate unused parts of PDIndexed
  - modernize rat exclusions
  - Run regression tests for 2.0.36</changelog>
  <changelog author="fstrba@suse.com" date="1776168007">- Added patch:
  * pdfbox-CVE-2026-33929.patch
    + upstream fix for bsc#1262046, CVE-2026-3392: Path Traversal
    in PDFBox ExtractEmbeddedFiles Example Code</changelog>
</package>
<package pkgid="b0a6925460544b9e6cda85077e44e6bc6d521f3ea1ab3701c905d12006e5d7c244f9fe94df8246051f27b001b751e22d364f22f7298b79284037863a3a5b087a" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.29" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1539000000">- Update to 1.8.16:
  * [PDFBOX-4261] - Invalidated signature signing pdf twice
  * [PDFBOX-4276] - Multiply blend mode not detected
  * [PDFBOX-4283] - Allowing Rectangles with additional elements
  * [PDFBOX-4298] - NullPointerException when doing overlay
  * [PDFBOX-4316] - RemoveAllText does not delete all parameters with " operator
  * [PDFBOX-4274] - Get rid of warning about prerequisites
  * Improve skip duplicates (bsc#1111009, CVE-2018-11797)
- Adjust fix-version.patch</changelog>
  <changelog author="fstrba@suse.com" date="1591272000">- Upgrade to 2.0.19:
  * Move from 1.x release line to the 2.x one.
  * This is a ABI change
  * Generate the ant build system from the maven one and customize
    it
- Removed patches:
  * disable-downloads.patch
  * fix-javadoc-dep.patch
  * fix-version.patch
  * pdfbox-1.8.12-bouncycastle.patch
  * pdfbox-1.8.12-sourcetarget.patch
    + incorporated in the customizations of the ant build system</changelog>
  <changelog author="pmonreal@suse.com" date="1608724800">- Update to 2.0.22:
  * See https://downloads.apache.org/pdfbox/2.0.22/RELEASE-NOTES.txt
- Remove provided binaries</changelog>
  <changelog author="fvogt@suse.com" date="1609761600">- Add source signature and keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1618228800">- Update to 2.0.23:
  * Security fixes:
  - CVE-2021-27807: A carefully crafted PDF file can trigger an
    infinite loop while loading the file [bsc#1184356]
  - CVE-2021-27906: OutOfMemory-Exception while loading a crafted
    PDF file [bsc#1184357]
  * Bug fixes:
  - Transparency Group issues
  - getLastSignatureDictionary modifies internal structure of
    PDDocument
  - NullPointerexception in
    AcroFormOrphanWidgetsProcessor.resolveNonRootField()
  - AcroForm PDTextField formatting lost when setting value
  - java.lang.IndexOutOfBoundsException
  - Failure to modify cropBox when splitting a PDF Page
    vertically into 2 pieces
  - ArrayIndexOutOfBoundsException in isOwnerPassword
  - IllegalArgumentException in computeEncryptedKeyRev56
  - IllegalArgumentException in
    PDFObjectStreamParser.privateReadObjectNumbers
  - ClassCastException in COSStream.getFilterList
  - ArrayIndexOutOfBoundsException in
    PDFXrefStreamParser.parseValue
  * Improvements:
  - Improve document signing
  - Allow reuse of subsetted fonts by inverting the ToUnicode
    CMap
  - improve performance in signature validation
  - Add more checks to PDFXrefStreamParser and reduce memory
    footprint
  - Use StringBuilder for key in
    PDDeviceN.toRGBWithTintTransform()
  - Don't use RGB loop in PDDeviceN.toRGBWithTintTransform()</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package all resources in pdfbox module</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1650715200">- Fix build with bouncycastle 1.71 and the new bcutil artifact</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1681473600">- Update to 2.0.28
  * Bug
  - Extraction of Arabic PDF has incorrect ordering of normalized
    ligatures
  - Parsing differences between 2.0.23 and 2.0.24/3.0
  - Signing tries to set byteRange of old signature
  - Bug in
    org/apache/pdfbox/multipdf/Overlay#overlay(specificPageOverlayFile)
  - Inactive OCGs shown when not top level
  - Null pointer exception in PDFASchemaType.getNamespaceURI()
  - export:text creates jibberish / malformed output
  - ArrayIndexOutOfBounds in SampledImageReader.fromAny()
  - PDFRenderer resulting image has black background
  - NPE due to a malformed rectangle
  - Fix meta markup in HTML generation
  - ArrayIndexOutOfBoundsException in CFFCIDFont class
  - Can't open PDF with PDFBox: java.awt.color.CMMException: LCMS
    error 13: Couldn't link the profiles
  - ClassCastException in ShadingFill.process()
  - Font gets smaller for each rendered page
  - fix some logging inconsistencies
  - NPE in PDFMergerUtility.acroFormLegacyMode()
  - Avoid OOME when parsing an malformed pdf with a corrupted
    object stream
  * Improvement
  - Apply subsampling and region to masks
  - Remove finalize from ScratchFileBuffer
  - Invisible signature field is not referenced from /Annots
    dictionary of a Page
  - Support charset parameter in TextToPDF
  - Add a method to get the components of a composite glyph
  - PDResource font cache improvement
  - RFE: Comb flag warning
  - fix unnecessary boxing/unboxing
  - optimize LZWFilter
  - renderer.setSubsamplingAllowed(true) causing the picture to
    blur
  * Task
  - Remove Travis build
- Update to 2.0.27
  * Bug
  - Invalid stream Length validation in StreamValidationProcess
  - To set compressed on buffered image while creating a PDF
  - Blurry / distorted rendering
  - java.lang.IndexOutOfBoundsException (2)
  - PDFDebugger does not remove listeners for PagePane when
    opening new File
  - PDFRenderer.renderImageWithDPI thows EOFException in PDF
  - PDFCloneUtility.checkForRecursion breaks support for some
    existing PDFs
  - PDFStreamEngine.showTextStrings with font switch
  - ClassCastException (PDColor.java:66)
  - NullPointerException in PDFunctionType3.eval()
  - Deadlock in TrueTypeFont and RAFDataStream
  - illegalArgumentException for rendering PDF (image extraction)
  - NullPointerException in CmapSubtable.getCharCode
  - PDActionEmbeddedGoTo does not accept a Destination with a
    page number or string
  - NPE when Transparency Group is missing the BBox
  - PDFRenderer does not render letters when converting page to
    image
  - JPEG image rendered with wrong colors when using
    TwelveMonkeys
  - Performance issue since 2.0.18
  - NullPointerException in PDType0Font.readCode() if cMap is
    null
  - NullPointerException in CFFParser.parseFont()
  - IndexOutOfBoundsException in PDCIDFont.readWidths()
  - IndexOutOfBoundsException in Type1Parser.java
  - ClassCastException in CMapParser.parseBeginbfchar
  - ClassCastException in PDXObject.createXObject()
  - ClassCastException in PDAcroForm.getFields()
  - ClassCastException in PDDocumentCatalog.getAcroForm()
  - ClassCastException in PDResources.getIndirect()
  - getPageLayout throws IllegalArgumentException for empty mode
  - Font not found because of case issues
- Update to 2.0.26
  * Bug
  - COSParser: Infinite recursion
  - TestCreateSignature.testCreateSignedTimeStamp checkLTV build
    test fail
  - No Content - xRef / Obj Parsing
  - Pdf-A/1b Validation
  - A list of bugs found （70 bugs in total)
  - Text size option for PDFBox Debugger
  - IllegalArgumentException: Input buffer too short in
    StandardSecurityHandler.computeRC4key
  - ArrayIndexOutOfBoundsException in
    PDSeparation.tintTransform()
  - EOFException: Can't read 20 bytes
  - Wrong datatype for OPM in PDExtendedGraphicsState
  - Unhandled IOException thrown from BaseParser creates issue in
    PDFStreamEngine.processStreamOperators
  - *LOADS of* "WARNING: key node000xxxxx already exists in
    destination IDTree"
  - NullPointerException in PDRange.getMin()
  - Image interpolation when there shouldn't be
  - pDAcroForm.flatten() does not remove /SigFlags in /Catalog
    object
  - Could not read embedded TTF for font
  - ToUnicodeWriter.writeTo allows byte overflow in bfrange
    operator
  - TextToPDF appends space to each line
  - NegativeArraySizeException in pfb parser with 0 byte pfb font
    file
  - Hangup in COSFilterInputStream.nextRange
  - Certain PDF cannot be processed
  - Parsing fails in 2.0.26 that worked in 2.0.25
  - Object must be defined and must not be compressed object
  - Page tree root must be a dictionary
  - A carefully crafted pdf can trigger an infinite loop while
    parsing
  - POCIDFontType2 (Wingdings) encode throws a
    NullPointerException
  - Possible loop detection is triggered in 2.0.26 but file works
    in 2.0.25
  - IOException: object reference 112 0 R at offset 18355 in
    content stream
  - Field text missing
  - NPE during page render
  - Parsing shows 1 empty page with 2.0.26 and 7 with 2.0.25
  * Improvement
  - Create push button example
  - FontMapper should also take into account the user's font
    directory on Windows operating systems
  - Don't log warnings if there are not fonts to cache
  - support multiple widgets in PDTerminalField.importFDF()
  - Improve AddValidationInformation to handle exceptional
    situations better
  - Avoid duplicate certificates in AddValidation example
  - Render symbol for file attachment annotations
  * Task
  - Add test of PFB font
  - Add maven enforcer rule to ensure that JAVA_HOME is set
- Update to 2.0.25
  * Sub-task
  - Add print dpi submenu
  - Reduce HighResolutionImageIcons memory leaks
  * Bug
  - Page not rendered / extracted, Unknown type in array for TJ
    operation
  - ArrayIndexOutOfBoundsException: arraycopy: length -2 is
    negative in PDPanose.getPanose
  - LayerUtility().importPageAsForm() doesn't return
  - PDPageContentStream.setLineWidth(float) not allowed in text
    block
  - preflight SMask entry check incorrect
  - NumberFormatException in merge if fieldname is
    "dummyFieldName1#1"
  - FDFJavaScript.getDoc() always returns null or empty
  - Annotation shown with thick border
  - Deeply nested drawings not shown
  - Not existing rectangle appears on page image
  - Not rendered (white) pages for given pdf
  - Encryption on Split documents
  - PDPage.getAnnotations() causes subsequent calls to
    PDDocument.getPages() to fail
  - Error rendering png from PDF - Error at Type1Parser
    parseBinary for Type 1 Font
  - EOFException during TTF parsing
  - Incorrect rendering of Type3 character
  - class org.apache.pdfbox.cos.COSName cannot be cast to class
    org.apache.pdfbox.cos.COSString
  - unneeded / double code in PageExtractor
  - When PDF is converted to an image, the image has a large
    black rectangle.
  - Slow rendering for specific PDF File with small chunks 16x8
  - Decryption for V4 fails when no Length entry is set in
    Encryption Dictionary
  - `NullPointerException` when intersecting area with null
    clipping path
  - Stack overflow in PDColorSpace.create()
  - Splitter: Problematic /Info causes big files
  - Resolution of ambiguities in inline images don't follow the
    standard
  - Silent fail of PDTextField.setValue when font encoding
    missing
  - TTFSubsetter incorrectly calculating 'searchRange'
  - Failing to get multiple encodings from cmap table
  - Text "820-01869-U-A" is omitted from PDF doc
  - Wrong number of fonts leads to OOM-Exception
  * New Feature
  - Additional `showTransparencyGroupOnGraphics()` method
  * Improvement
  - Optimize SampledImageReader.from1Bit()
  - Optimize reading of masked images
  - Support BGR for OpenCV and JavaCV
  - Preserve indirect object reference when copying resources
  - PDFBox should use the quadding for fields with the comb flag
  - Lazier clipping
  - LegacyPDFStreamEngine.glyphList loaded from disk on each
    instantiation rather than static final?
  - Prefer MergeSort over QuickSort and try native TimSort first
    (with explanation)
  - Avoid creating Paint objects and filling when there is
    nothing to do
  - support get unicode from embedded TrueTypeFont cmap
  - Update liberation fonts
  * Test
  - Add test for double visible signature on the same page
  * Task
  - Add test for double visible signature on encrypted file
  - Add test for comb fields adjustment
  - Store x and y scaling factor
  - Update CCITTFaxDecoderStream.java from twelvemonkeys (3)
- Update to 2.0.24
  * Bug
  - Slow rendering for specific PDF file
  - Very slow rendering on PageDrawer.shadingFill
  - Glyphs missed in rendering
  - Wrong classification of an JPEG image leading to a blank
    image added to a pdf document
  - Embedded files not extracted from PDF files with multilevel
    EmbeddedFiles tree
  - 3.0.0-RC1: PDComboBox.setValue() throws
    IllegalArgumentException: /DA is a required entry
  - Issue with COSObjectKey::fixGeneration
  - Error extracting text from PDF - Can't read the embedded
    Type1 font FDFBJU+NewsGothic
  - Error in identification of PDF comment symbol % as a token
    separator with PDF names
  - Stack overflow when reading a corrupt dictionary
  - dash pattern [0] should be invisible
  - Behaviour change in 2.0.20 due to use of
    IOUtils.populateBuffer in
    SecurityHandler.prepareAESInitializationVector leading to
    IOException for certain PDF
  - java.io.IOException: Page tree root must be a dictionary
  - Snapshot Deploy not working
  - TSAClient with username+password
  - COSOutputStream.flush doesn't call super
  - BaseParser: stack overflow when reading a corrupt pdf
  - isEmbeddingPermitted() is too restrictive on TTFs with OS2
    table versions 0-2
  - Wild rendering when repeating truetype glyph flag is outside
    of range
  - v2.0.22 and v3.0.0-RC1 PDF Debugger app crashes with
    java.lang.NullPointerException
  - CreateCheckBox example draws too large, clipped checkmark
  - Wrong color space detected for some Jpeg images
  - Possible memory leak after calling decode filter
  - Ink annotation not rendered
  * Improvement
  - Pass PDFRenderer to PDFPrintable constructor
  - Create tests for HelloWorld examples
  - Faster PDImageXObject.applyMask
  - Custom folder for fonts in FontMapper
  - allow to make timestamp only signature "LTV"
  - Create portable collection PDF
  - Optimize memory footprint of PDFObjectStreamParser
  - Add getter/setter for suppressDuplicateOverlappingText in
    PDFMarkedContentExtractor
  - Cache PageTree in PDFPrintable
  - Add Adobe Illustrator COSNames
  - Make constructors of CIDSystemInfo and PDPanoseClassification
    public
  * Wish
  - When merging multiple pdf ua documents, Tags become nested
  * Task
  - Failing testFlattenPDFBox2469Filled on Ubuntu
  - Add test for PDFMarkedContentExtractor class
  - Create test for CreateGradientShadingPDF</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1691409600">- Update to 2.0.29
  * Bug
  - A (rotated) barcode is missing from a pdf when printed
  - NullPointerException in PDTrueTypeFont.java getPath( )
  - Parsing of XMP metadata without optional xmpmeta element
  - Avoid division by 0 in shading function interpolation
  - MyPageDrawer#getPaint may produce
    UnsupportedOperationException
  - Barcode corrupted when printing document
  - The text in some fonts is lost when converting pdf to image
  - PDFTextStripper runs out of memory in 2.0.28 but not in
    2.0.27 same code
  - all values in the signature dictionary shall be direct
    objects
  - Glyphs not rendered
  - PDF with mangled font rendering in some environments
  - RadioButtons disappear when printing PDF
  - BitsPerComponent 16 not allowed in PDF/A-1b
  - NullPointerException in PDFStreamEngine.showText
  - Infinte loop when parsing Type1 font
  * Improvement
  - Add duplex and tray parameters to PrintPDF
  - Create command line utility to extract XMP data
  - Improve Opaque PDFRenderer example
  * Task
  - Implement /RunLengthDecode encoder
  - Slight regression on corrupt bug tracker file
  - move and update bc from jdk15on to jdk15to18
- Build and package forgotten artifact org.apache.pdfbox:xmpbox
- Add build dependency on mvn(javax.xml.bind:jaxb-api), needed for
  xmpbox.</changelog>
</package>
<package pkgid="8badc3e8e9f214efb756112a60d59e3d3e681340df6bde3eab6c839d23374b1307fd0d50a8ce040c4fefe678667f3f53ab0fb924254d853de843d9e533cb1052" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.36" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1681473600">- Update to 2.0.28
  * Bug
  - Extraction of Arabic PDF has incorrect ordering of normalized
    ligatures
  - Parsing differences between 2.0.23 and 2.0.24/3.0
  - Signing tries to set byteRange of old signature
  - Bug in
    org/apache/pdfbox/multipdf/Overlay#overlay(specificPageOverlayFile)
  - Inactive OCGs shown when not top level
  - Null pointer exception in PDFASchemaType.getNamespaceURI()
  - export:text creates jibberish / malformed output
  - ArrayIndexOutOfBounds in SampledImageReader.fromAny()
  - PDFRenderer resulting image has black background
  - NPE due to a malformed rectangle
  - Fix meta markup in HTML generation
  - ArrayIndexOutOfBoundsException in CFFCIDFont class
  - Can't open PDF with PDFBox: java.awt.color.CMMException: LCMS
    error 13: Couldn't link the profiles
  - ClassCastException in ShadingFill.process()
  - Font gets smaller for each rendered page
  - fix some logging inconsistencies
  - NPE in PDFMergerUtility.acroFormLegacyMode()
  - Avoid OOME when parsing an malformed pdf with a corrupted
    object stream
  * Improvement
  - Apply subsampling and region to masks
  - Remove finalize from ScratchFileBuffer
  - Invisible signature field is not referenced from /Annots
    dictionary of a Page
  - Support charset parameter in TextToPDF
  - Add a method to get the components of a composite glyph
  - PDResource font cache improvement
  - RFE: Comb flag warning
  - fix unnecessary boxing/unboxing
  - optimize LZWFilter
  - renderer.setSubsamplingAllowed(true) causing the picture to
    blur
  * Task
  - Remove Travis build
- Update to 2.0.27
  * Bug
  - Invalid stream Length validation in StreamValidationProcess
  - To set compressed on buffered image while creating a PDF
  - Blurry / distorted rendering
  - java.lang.IndexOutOfBoundsException (2)
  - PDFDebugger does not remove listeners for PagePane when
    opening new File
  - PDFRenderer.renderImageWithDPI thows EOFException in PDF
  - PDFCloneUtility.checkForRecursion breaks support for some
    existing PDFs
  - PDFStreamEngine.showTextStrings with font switch
  - ClassCastException (PDColor.java:66)
  - NullPointerException in PDFunctionType3.eval()
  - Deadlock in TrueTypeFont and RAFDataStream
  - illegalArgumentException for rendering PDF (image extraction)
  - NullPointerException in CmapSubtable.getCharCode
  - PDActionEmbeddedGoTo does not accept a Destination with a
    page number or string
  - NPE when Transparency Group is missing the BBox
  - PDFRenderer does not render letters when converting page to
    image
  - JPEG image rendered with wrong colors when using
    TwelveMonkeys
  - Performance issue since 2.0.18
  - NullPointerException in PDType0Font.readCode() if cMap is
    null
  - NullPointerException in CFFParser.parseFont()
  - IndexOutOfBoundsException in PDCIDFont.readWidths()
  - IndexOutOfBoundsException in Type1Parser.java
  - ClassCastException in CMapParser.parseBeginbfchar
  - ClassCastException in PDXObject.createXObject()
  - ClassCastException in PDAcroForm.getFields()
  - ClassCastException in PDDocumentCatalog.getAcroForm()
  - ClassCastException in PDResources.getIndirect()
  - getPageLayout throws IllegalArgumentException for empty mode
  - Font not found because of case issues
- Update to 2.0.26
  * Bug
  - COSParser: Infinite recursion
  - TestCreateSignature.testCreateSignedTimeStamp checkLTV build
    test fail
  - No Content - xRef / Obj Parsing
  - Pdf-A/1b Validation
  - A list of bugs found （70 bugs in total)
  - Text size option for PDFBox Debugger
  - IllegalArgumentException: Input buffer too short in
    StandardSecurityHandler.computeRC4key
  - ArrayIndexOutOfBoundsException in
    PDSeparation.tintTransform()
  - EOFException: Can't read 20 bytes
  - Wrong datatype for OPM in PDExtendedGraphicsState
  - Unhandled IOException thrown from BaseParser creates issue in
    PDFStreamEngine.processStreamOperators
  - *LOADS of* "WARNING: key node000xxxxx already exists in
    destination IDTree"
  - NullPointerException in PDRange.getMin()
  - Image interpolation when there shouldn't be
  - pDAcroForm.flatten() does not remove /SigFlags in /Catalog
    object
  - Could not read embedded TTF for font
  - ToUnicodeWriter.writeTo allows byte overflow in bfrange
    operator
  - TextToPDF appends space to each line
  - NegativeArraySizeException in pfb parser with 0 byte pfb font
    file
  - Hangup in COSFilterInputStream.nextRange
  - Certain PDF cannot be processed
  - Parsing fails in 2.0.26 that worked in 2.0.25
  - Object must be defined and must not be compressed object
  - Page tree root must be a dictionary
  - A carefully crafted pdf can trigger an infinite loop while
    parsing
  - POCIDFontType2 (Wingdings) encode throws a
    NullPointerException
  - Possible loop detection is triggered in 2.0.26 but file works
    in 2.0.25
  - IOException: object reference 112 0 R at offset 18355 in
    content stream
  - Field text missing
  - NPE during page render
  - Parsing shows 1 empty page with 2.0.26 and 7 with 2.0.25
  * Improvement
  - Create push button example
  - FontMapper should also take into account the user's font
    directory on Windows operating systems
  - Don't log warnings if there are not fonts to cache
  - support multiple widgets in PDTerminalField.importFDF()
  - Improve AddValidationInformation to handle exceptional
    situations better
  - Avoid duplicate certificates in AddValidation example
  - Render symbol for file attachment annotations
  * Task
  - Add test of PFB font
  - Add maven enforcer rule to ensure that JAVA_HOME is set
- Update to 2.0.25
  * Sub-task
  - Add print dpi submenu
  - Reduce HighResolutionImageIcons memory leaks
  * Bug
  - Page not rendered / extracted, Unknown type in array for TJ
    operation
  - ArrayIndexOutOfBoundsException: arraycopy: length -2 is
    negative in PDPanose.getPanose
  - LayerUtility().importPageAsForm() doesn't return
  - PDPageContentStream.setLineWidth(float) not allowed in text
    block
  - preflight SMask entry check incorrect
  - NumberFormatException in merge if fieldname is
    "dummyFieldName1#1"
  - FDFJavaScript.getDoc() always returns null or empty
  - Annotation shown with thick border
  - Deeply nested drawings not shown
  - Not existing rectangle appears on page image
  - Not rendered (white) pages for given pdf
  - Encryption on Split documents
  - PDPage.getAnnotations() causes subsequent calls to
    PDDocument.getPages() to fail
  - Error rendering png from PDF - Error at Type1Parser
    parseBinary for Type 1 Font
  - EOFException during TTF parsing
  - Incorrect rendering of Type3 character
  - class org.apache.pdfbox.cos.COSName cannot be cast to class
    org.apache.pdfbox.cos.COSString
  - unneeded / double code in PageExtractor
  - When PDF is converted to an image, the image has a large
    black rectangle.
  - Slow rendering for specific PDF File with small chunks 16x8
  - Decryption for V4 fails when no Length entry is set in
    Encryption Dictionary
  - `NullPointerException` when intersecting area with null
    clipping path
  - Stack overflow in PDColorSpace.create()
  - Splitter: Problematic /Info causes big files
  - Resolution of ambiguities in inline images don't follow the
    standard
  - Silent fail of PDTextField.setValue when font encoding
    missing
  - TTFSubsetter incorrectly calculating 'searchRange'
  - Failing to get multiple encodings from cmap table
  - Text "820-01869-U-A" is omitted from PDF doc
  - Wrong number of fonts leads to OOM-Exception
  * New Feature
  - Additional `showTransparencyGroupOnGraphics()` method
  * Improvement
  - Optimize SampledImageReader.from1Bit()
  - Optimize reading of masked images
  - Support BGR for OpenCV and JavaCV
  - Preserve indirect object reference when copying resources
  - PDFBox should use the quadding for fields with the comb flag
  - Lazier clipping
  - LegacyPDFStreamEngine.glyphList loaded from disk on each
    instantiation rather than static final?
  - Prefer MergeSort over QuickSort and try native TimSort first
    (with explanation)
  - Avoid creating Paint objects and filling when there is
    nothing to do
  - support get unicode from embedded TrueTypeFont cmap
  - Update liberation fonts
  * Test
  - Add test for double visible signature on the same page
  * Task
  - Add test for double visible signature on encrypted file
  - Add test for comb fields adjustment
  - Store x and y scaling factor
  - Update CCITTFaxDecoderStream.java from twelvemonkeys (3)
- Update to 2.0.24
  * Bug
  - Slow rendering for specific PDF file
  - Very slow rendering on PageDrawer.shadingFill
  - Glyphs missed in rendering
  - Wrong classification of an JPEG image leading to a blank
    image added to a pdf document
  - Embedded files not extracted from PDF files with multilevel
    EmbeddedFiles tree
  - 3.0.0-RC1: PDComboBox.setValue() throws
    IllegalArgumentException: /DA is a required entry
  - Issue with COSObjectKey::fixGeneration
  - Error extracting text from PDF - Can't read the embedded
    Type1 font FDFBJU+NewsGothic
  - Error in identification of PDF comment symbol % as a token
    separator with PDF names
  - Stack overflow when reading a corrupt dictionary
  - dash pattern [0] should be invisible
  - Behaviour change in 2.0.20 due to use of
    IOUtils.populateBuffer in
    SecurityHandler.prepareAESInitializationVector leading to
    IOException for certain PDF
  - java.io.IOException: Page tree root must be a dictionary
  - Snapshot Deploy not working
  - TSAClient with username+password
  - COSOutputStream.flush doesn't call super
  - BaseParser: stack overflow when reading a corrupt pdf
  - isEmbeddingPermitted() is too restrictive on TTFs with OS2
    table versions 0-2
  - Wild rendering when repeating truetype glyph flag is outside
    of range
  - v2.0.22 and v3.0.0-RC1 PDF Debugger app crashes with
    java.lang.NullPointerException
  - CreateCheckBox example draws too large, clipped checkmark
  - Wrong color space detected for some Jpeg images
  - Possible memory leak after calling decode filter
  - Ink annotation not rendered
  * Improvement
  - Pass PDFRenderer to PDFPrintable constructor
  - Create tests for HelloWorld examples
  - Faster PDImageXObject.applyMask
  - Custom folder for fonts in FontMapper
  - allow to make timestamp only signature "LTV"
  - Create portable collection PDF
  - Optimize memory footprint of PDFObjectStreamParser
  - Add getter/setter for suppressDuplicateOverlappingText in
    PDFMarkedContentExtractor
  - Cache PageTree in PDFPrintable
  - Add Adobe Illustrator COSNames
  - Make constructors of CIDSystemInfo and PDPanoseClassification
    public
  * Wish
  - When merging multiple pdf ua documents, Tags become nested
  * Task
  - Failing testFlattenPDFBox2469Filled on Ubuntu
  - Add test for PDFMarkedContentExtractor class
  - Create test for CreateGradientShadingPDF</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1691409600">- Update to 2.0.29
  * Bug
  - A (rotated) barcode is missing from a pdf when printed
  - NullPointerException in PDTrueTypeFont.java getPath( )
  - Parsing of XMP metadata without optional xmpmeta element
  - Avoid division by 0 in shading function interpolation
  - MyPageDrawer#getPaint may produce
    UnsupportedOperationException
  - Barcode corrupted when printing document
  - The text in some fonts is lost when converting pdf to image
  - PDFTextStripper runs out of memory in 2.0.28 but not in
    2.0.27 same code
  - all values in the signature dictionary shall be direct
    objects
  - Glyphs not rendered
  - PDF with mangled font rendering in some environments
  - RadioButtons disappear when printing PDF
  - BitsPerComponent 16 not allowed in PDF/A-1b
  - NullPointerException in PDFStreamEngine.showText
  - Infinte loop when parsing Type1 font
  * Improvement
  - Add duplex and tray parameters to PrintPDF
  - Create command line utility to extract XMP data
  - Improve Opaque PDFRenderer example
  * Task
  - Implement /RunLengthDecode encoder
  - Slight regression on corrupt bug tracker file
  - move and update bc from jdk15on to jdk15to18
- Build and package forgotten artifact org.apache.pdfbox:xmpbox
- Add build dependency on mvn(javax.xml.bind:jaxb-api), needed for
  xmpbox.</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Update to 2.0.30
  * Bug
  - Regression unicode mapping in Korean document
  - Operators "q" and "Q" should also preserve text matrices
  - Signature Image not Rendered starting with PDFBox 2.0.23
  - Fonts are not subsetted when saving incrementally
  - Bug in PDFMergerUtility#mergeFields
  - Password protected PDF opens in GUI apps but PDFbox says
    invalid password
  - Wrong error message "2.4.1 : Invalid Color space, The operator
    "rg" can't be used with CMYK Profile"
  - Make FDF annotations more compliant with the specification
  - NPE in DomXmpParser.parseLiDescription
  - Regression: NoSuchElementException in PDFXrefStreamParser
  - The PageDrawer.strokePath method is blocked, and cpu100%
  - Avoid NPE when processing CFF2 based fonts
  - IllegalArgumentException: Dimensions (width=458477041
    height=26) are too large
  - Can not see checkbox check
  - NPE when converting pdf to image.
  - NullPointerException in XMPMetadata.getSchema()
  - PDFToImage might not correctly detect unsupported image
    formats
  - Font cache isn't effective on my machine, always rebuilds
  - PDF to Image conversion results in different converted image
  - Text in a certain font is lost when converting pdf to image
  - Incorrect colors in image from PDFs (DCTDecode)
  * New Feature
  - Inconsistent/incomplete PDF rendering
  * Improvement
  - Improve code quality (4)
  - Add PDRectangle#TABLOID paper size
  - Support version 0.5 of MaximumProfileTable
  - loca-table isn't mandatory for TTF/OTF-fonts using CFF
    outlines
  - Implement PDF 2.0 dash phase clarification
  - Add getter and setter for the CO array under PDAcroForm
  - Make UTC timezone static
  - Facilitate migration to PDFBox 3.0
  - Consolidate bouncycastle configuration
  - Consistent scm.url values for pom.xml
  - use comparison operators for enums</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Update to 2.0.31
  * Bug
  - [PATCH] Split pdf lose accessibility tags
  - Allow creating of PDFXObjectImage without accessing to the
    image stream
  - PfbParser fails to parse PFB font with multiple binary
    records.
  - Lines vanish when printing on MacOS
  - java.lang.IllegalArgumentException: Provided dictionary is not
    of type 'COSName{OCG}'
  - The embedded font DroidSansFallbackFull reports an error when
    parsing, and finally uses lastResortFont, resulting in garbled
    fonts.
  - COSName caches already cached hashCode
  - Font operation takes a long time with 3.0.1
  - NullPointerException in TTFSubsetter.buildPostTable()
  - Problem converting PDF to image (java.awt.color.CMMException:
    Can not access specified profile)
  - Set the default value for PDNonTerminalField
  - java.lang.ArrayIndexOutOfBoundsException Bug Report
  - Wrong colors in PDF since PDFBOX-5488
  - Java 7 support on 2.0
  - Convert to image exception
  - PDF conversion in this format is very slow. Is there any room
    for optimization?
  - IllegalArgumentException: -Infinity is not a finite number
  - Inconsistent signature page handling when signing in existing
    signature fields
  - Add leading "0" for octal values in MacOSRomanEncoding
  - DataFormatException: invalid distance too far back
  - Grayscale JPEG rendered multicolor
  - OutOfMemoryError in FileSystemFontsProvider.scanFonts
  - NPE in PageDrawer.getPaint()
  - Issue with embedded Font and descendant Font
  - LCMS error 13: Mismatched alpha channels
  * New Feature
  - Enable Native Markdown Extraction in Apache PDFBox
  * Improvement
  - When splitting, keep page destinations that are part of target
    document(s)
  - Replace Exception with some repair attempt</changelog>
  <changelog author="fstrba@suse.com" date="1776168002">- Update to 2.0.32
  * Bug
  - preflight-app fails on Java 11+ with NoClassDefFoundError:
    javax/activation/DataSource
  - AppearanceGeneratorHelper assumes fontscale 1000
  - Remove release subproject
  - Don't use a predefined CMap if a ToUnicode CMap is present
  - Regression NPE in Splitter
  - The content of the specified font is lost, Google Chrome can
    display it
  - Crash for Softmask with incorrect backdrop color components
  - Observable Timing Discrepancy (Timing Attack)
  - Black rectangle over image
  - Wrong font substitution for Wingdings
  - PDDocument#importPage slowed down by factor 1300
  - Split aborts with broken destinations
  - IllegalArgumentException: Parameter must be 1-based, but is 0
    when using PDFTextStripperByArea
  - Files created with PDFMergerExample are not correct PDF/A
  - Missing /Subtype and /Type in Metadata not detected
  - Multiple exceptions coming from org.apache.fontbox.ttf for
    different PDFs
  - IOException: Error expected floating point
    numberactual='-12.-1'
  - NullPointerException: Cannot invoke "String.codePointAt(int)"
    because "uni" is null
  - DomXmpParser - IllegalArgumentException: prefix cannot be
    "null" when creating a QName
  - ClassCastException: org.apache.pdfbox.cos.COSNull cannot be
    cast to org.apache.pdfbox.cos.COSDictionary
  - IllegalArgumentException: Width (26) and height (0) must be
    non-zero
  - There is an exception when getting embedded font, is it
    compatible?
  - Infinite loop after splitting and saving PDF / giant result
    files
  * Improvement
  - JPEGFactory. Reduce logging severity when no image metadata is
    present
  - Add test for surrogate pair character ð©¸½
  - Update unicode Scripts.txt
  - Include a PDFA check with VeraPDF for CreatePDFATest
  - Add center constructor parameter to PDFPageable and to
    pdfbox-app
  - When splitting, keep named page destinations that are part of
    target document(s)
  - When this PDF is rendered with the "f" Operator, a black
    screen appears.
  * Task
  - Investigate why we get "response contains wrong nonce value"
    during build tests</changelog>
  <changelog author="fstrba@suse.com" date="1776168003">- Update to 2.0.33
  * Bug
  - Character positions shifted
  - Incorrectly extracted text (broken words)
  - Wrong color of uncolored tiling pattern
  - OutOfMemoryError - during renderImageWithDPI
  - BaseParser fails when a number is followed by a string
    starting with 'e'
  - Type3 font is not rendered
  - Flattening removes all annotations when widget annotation has
    no page
  - Image lost on page render
  - extra whitespaces when extracting Arabic text
  - SMaskInData not supported for JPX images
  - Kid Widget /DA is ignored in setDefaultAppearance() call
  - Radio button can't be set
  - the PDDocument.documentId does not seem to be written into the
    flat byteStream
  - PDFBox is unable to remove ID
  - Fix last step of the build process
  - StringIndexOutOfBoundsException in AppearanceGeneratorHelper
  - ClassCastException in SetLineJoinStyle.process()
  - Unable to load password protected pdf
  - PDFBox not extracting text of non-latin languages(tamil,
    bengali) properly but adobe reader's save as text does
  - Checkstyle
  - [PATCH] Detect CMYK image without relying on metadata
  - Regression from PDFBOX-5841: Text extraction with rotation
    magic fails for PDF with multiple content streams in a page
  - PDF render blank page: The end of the stream doesn't point to
    the correct offset, using workaround to read the stream,
    stream start position: 196, length: 0, expected end position:
    196
  - CVE for Lucene libraries
  - The pattern created with PDFBox shows inconsistent colors
    between Safari and Adobe.
  - BDC sequence with resource reference instead of with MCID
  - StackOverflowError in PDFieldFactory.findFieldType
  - ClassCastException in AnnotationValidator
  - The CPU usage of a PDF file with a size of 85.6 MB is abnormal
  - Many ZapfDingbats symbols do not appear when page is rendered.
  - IOException when reading isolated "+"
  - IllegalArgumentException: capacity &lt; 0: (-75475220 &lt; 0) in
    RandomAccessReadBuffer constructor
  - FontBox spawns a `cmd` subprocess to read an environment
    variable (on Windows)
  - Implement PDF 2.0 dash phase clarification (2)
  - Particular PDF fails on renderImageWithDPI call
  - PDType0Font return invalid space width
  - Icons of text annotations sometimes too large
  - Orphan page check doesn't check annotation destinations
  - NPE in COSArray.indexOfObject
  - NPE in PagePane.mouseMoved()
  - ArrayIndexOutOfBoundsException in CMap.toInt()
  * New Feature
  - Show ASN.1 decoded Contents for Signature-Dictionary
  * Improvement
  - Exchange hard-coded values for variables and provide
    command-line options in TextToPDF component
  - Long rendering time of fonts in a specific PDF
  - Support imageio-jnr / imageio-openjpeg library for JPEG2000
    decoding
  - Improve ExtractTTFFonts
  - Change Loglevel from Warn to info when rebuilding font cache
  - Support OCG visibility expressions
  - Add page getter/setter to PDObjectReference
  - Support long values for COSInteger objects
  - Empty constructor for PDViewerPreferences
  - Add check of /P to PDFMergerUtilityTest
  - support Markdown extraction from the command line
  - Calculate dpi dynamically when printing with raster
  - Remove orphan annotations in structure tree
  - Add font name to PrintTextLocations
  * Wish
  - Improve detection whether printing or viewing
  - Hi CPU and memory usage when converting a PDF with type 4
    shading
  * Task
  - 2.0 builds fail on jenkins because jdk11 no longer supported</changelog>
  <changelog author="fstrba@suse.com" date="1776168004">- Update to 2.0.34
  * Bug
  - PageDrawer is not rendering unrotatable Annotations on rotated
    pages
  - Zero-width non-joiner characters visible in generated PDF
  - Surrogate pairs with combining diacritics are incorrectly
    ordered on text extraction
  - TestCreateSignature.testCreateSignedTimeStamp checkLTV build
    test fail (2) / Support several issuers
  - IllegalArgumentException: Width (0) and height (0) must be
    non-zero
  - Merge docs with specific characteristics causes stack overflow
  - InvalidKeyException: Supplied key
    (sun.security.ec.ECPrivateKeyImpl) is not a RSAPrivateKey
  - Can't read the embedded Type1 font: Found Token[kind=NAME,
    text=def] but expected begin
  - Wrong size entry in trailer after incremental save
  - FileSystemFontProvider doesn't register failed type1 fonts
  - Text annotation crosshair symbol too small when using Adobe
    symbol font
  - Orphan /OpenAction destination page kept in merge
  - PDFRenderer causes endless loop
  - Invalid stream length: 0, stream start position: &lt;xxx&gt;
  - Inline image incorrectly parsed (2)
  - IllegalArgumentException: Not a valid Unicode code point:
    0xE28496
  - Type 3 font glyphs not displayed
  - Rendered PDF is missing shading pattern graphics
  - NPE during merge
  - Class cast exception in building PDDestinationNameTreeNode
  - DomXmpParser incorrectly expects namespaces on attribute level
  - BDC processor mishandles property name
  - Can't render some Type1C fonts.
  - PDF to Image conversion results in a blank white page
  * Improvement
  - Implement PDFormXObject.setGroup()
  - CertificateVerifier.isSelfSigned() should not throw an
    exception
  - Use Zapf Dingbats code for cross text annotation
  - Support PushPin, Tag and Graph file attachment annotation
    icons
  - Improve PDFMergerUtility memory footprint
  - Support rare RC4 encryption where R=4, key length &lt; 128 bits
  - Improve checkWithNumberTree() test
  - Use SHA256 instead of MD5 for document id
  * Wish
  - PrintPDF should not be case sensitive against printer name on
    Windows
  * Task
  - Run regression tests for 2.0.34</changelog>
  <changelog author="fstrba@suse.com" date="1776168005">- Update to 2.0.35
  * Bug
  - NegativeArraySizeException with PDF file with huge fonts
  - Inline image bug with multi-byte newline tokens
  - fix initial ByteArrayOutputStream size for deflate operation
  - PDF takes an hour to render
  - Splitter does not include structure tree in documents past the
    first split
  - build fails on jdk11
  - Load a TTF font which is from Mac OS throw an exception
  - Wrong glyphs since PDFBOX-5790
  - ClassCastException on broken file in
    PDEmbeddedFilesNameTreeNode.convertCOSToPD()
  - invalid XMP generated when Apache Xalan in the classpath
  - XMP JobType constructor ignores fieldPrefix
  - NullPointerException in xmpbox serializer if a date is empty
  - Rendering issue with type 2 shading: vertical expansion
  - Possible infinite loop in shading code
  - Potential OOM in XrefStreamParser
  - Potential StackOverflow in PDFStreamParser
  - Potential StackOverflow in PDPageTree's
    getInheritableAttribute
  - Potential OOM in Type1Lexer
  - Potential OOM in PfbParser
  - PDMarkedContentReference.setMCID() should not accept negative
    numbers
  - IllegalPathStateException: missing initial moveto in path
    definition
  - Fix possible ClassCastException
  - NullPointerException in COSDictionary
  - StringIndexOutOfBoundsException in
    PlainText$Paragraph.getLines()
  - LZWFilter crashes, probably not handling the KwKwK special
    case
  - NullPointerException in PDNumberTreeNode.getNumbers()
  - UnsupportedOperationException: JPX color spaces don't support
    drawing
  - Signing tries to set byteRange of old signature (2)
  - ClassCastException in
    PDOptionalContentProperties.getBaseState()
  * Improvement
  - Add test for embedded files
  - set size for ByteArrayOutputStreams
  - avoid creation of temporary objects when parsing hex values
  - avoid unnecessary map lokups
  - remove unnecessary iteration and StringBuilder creation
  - Support reverse landscape orientation for printing
  - Add test coverage for orphan annotation
  - Remove orphan popup parent annotation
  - Improve XmpSerializer test by verifying its output
  - Consider rotation of page when applying overlay
  - Preserve Perms dictionary when signing
  - Check /ParentTree against /K tree
  - Add test for 5521
  - Refactor RC4Cipher
  * Task
  - Regression tests for 2.0.35</changelog>
  <changelog author="fstrba@suse.com" date="1776168006">- Update to 2.0.36
  * Bug
  - XMPBox removes namespaces on serialization
  - False negative on PDFA-1b validation : missing field type
  - PlainText.Paragraph.getLines extremely slow on long lines
  - Valid PDF/A 1B is rejected
  - Potential StackOverflows in BaseParser
  - Unknown code in Huffman RLE stream
  - IllegalArgumentException: Can't add attribute to 0-length text
  - TTFSubsetter.buildGlyfTable() modifies glyphIds while
    iterating over its entries possibly causing
    ConcurrentModificationException to be thrown
  - IndexOutOfBoundsException in
    Type1CharStringParser.processCallSubr()
  - Exception "No type defined for
    {http://www.aiim.org/pdfa/ns/id/}rev" when trying to determine
    version of PDF/A-4 document
  - allow new PDF/A-4 conformance levels
  - pdfbox-app-X.X.X-sources.jar on maven central are empty (and
    javadoc jar is missing)
  - Cmd line docs
  - IllegalArgumentException: Multiplying two matrices produces
    illegal values in PDFStreamEngine.processAnnotation()
  - XmpParsingException: Schema is not set in this document:
    http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  - NullPointerException in FontMapperImpl.getFontMatches()
  - border style in FDFAnnotation is not initialized if width is 0
  - German umlauts are not rendered
  - Invalid type in Schema not detected when in XML attributes
  - Serializing produces date "1-01-01T00:00:00+01:00"
  - Seconds of date "D:2015-02-03T10:11:12" returned as 0
  - Confusing naming of "DerivedFrom" property getter in
    XMPMediaManagementSchema
  - ClassCastException in XMPMediaManagementSchema.getHistory()
  - IllegalArgumentException: Input buffer too short in
    StandardSecurityHandler.computeRC4key()
  - IllegalArgumentException: Width (0) and height (0) cannot be
    &lt;= 0 when printing landscape rotated with RASTERIZE_DPI_AUTO
  - DateConverter fails on valid date
  - ClassCastException: class org.apache.xmpbox.type.TextType
    cannot be cast to class org.apache.xmpbox.type.ArrayProperty
    in DublinCoreSchema.getCreatorsProperty()
  - tiff:YCbCrSubSampling and tiff:YCbCrPositioning have wrong
    cardinality
  - ClassCastException: class org.apache.xmpbox.type.FlashType
  - Cannot find a definition for the namespace
    http://www.w3.org/1999/02/22-rdf-syntax-ns#, property:
    rdf:Description
  - XmpParsingException: Schema is not set in this document:
    http://ns.adobe.com/xap/1.0/sType/ResourceEvent#, property:
    stEvt:action
  - XmpParsingException: Missing pdfaSchema:property in type
    definition in lenient mode
  - XmpParsingException: Unknown property value type : Open Choice
    of Integer
  - XmpParsingException: Property 'CountryCode' not defined in
    http://www.epo.org/patent-bibliographic-data/1.0/
  - date "0-00-00T00:00:00-04:00" read as
    "0002-11-30T00:00:00-40:00"
  - XmpParsingException: Type 'stRef:documentName' not defined in
    http://ns.adobe.com/xap/1.0/sType/ResourceRef# in lenient mode
  - Invalid PDF/A namespace definition, prefix: xmlns, namespace:
    http://www.aiim.org/pdfa/ns/extension/
  - XmpParsingException: Schema is not set in this document:
    http://www.aiim.org/pdfa/ns/extension/, property:
    pdfaExtension:schemas
  - NegativeArraySizeException in PredictorOutputStream()
  - NullpointerException in PDAcroForm.getField(Line 485)
  - OutOfMemoryError when trying to extract text from pdf
  - Outlines circular reference vulnerability
  - Rendered text missing
  - Inverted images due to enlarged decode array
  - PDF displays garbled characters in Adobe Reader but renders
    correctly in web browsers
  - NullPointerException while merging PDFs with output intents
  * Improvement
  - Valid XMP Extension Schema rejected
  - Remove dead code from PDFMarkedContentExtractor
  - Include test file in test class
  - Get and Add PageTextSchema
  - Remove / deprecate TypeMapping.getAssociatedSchemaObject()
  - Support Seq / Bag mixup in lenient mode
  - Parse xmp files in lenient mode that have no processing
    instructions
  - deprecate getPDFIdentificationSchema() in favor of
    getPDFAIdentificationSchema()
  - Support TIFF-files with FillOrder=2 conversion to PDF
  * Task
  - Remove / deprecate unused parts of PDIndexed
  - modernize rat exclusions
  - Run regression tests for 2.0.36</changelog>
  <changelog author="fstrba@suse.com" date="1776168007">- Added patch:
  * pdfbox-CVE-2026-33929.patch
    + upstream fix for bsc#1262046, CVE-2026-3392: Path Traversal
    in PDFBox ExtractEmbeddedFiles Example Code</changelog>
</package>
<package pkgid="f381e6bd7796b2b08017e49231fda064864976793fedad217394d5d3644870ff0d34a796bfd923b6b98f926c266d09dd4929e89360e3653c3f524a55dec9abb1" name="apache-portlet-1_0-api" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.12"/>
  <changelog author="mvyskocil@suse.cz" date="1219665600">- target=1.5 source=1.5
- remove a gcj build support
- fixed some rpmlint warnings</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.com" date="1377604800">- use new add_maven_depmap</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-nodeps.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Removed maven conditions
- Spec file cleaned
- Fixed javadoc Requires</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9: specify java source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="e16c5121e15d3bcfb4293c4e141ceadd2b18101b1bfe6ac1918713585325c3699f9833e9a8f6eeb0808136f65015218e24d8b67129b950bef10774dee42411ef" name="apache-portlet-1_0-api-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.12"/>
  <changelog author="mvyskocil@suse.cz" date="1219665600">- target=1.5 source=1.5
- remove a gcj build support
- fixed some rpmlint warnings</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.com" date="1377604800">- use new add_maven_depmap</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-nodeps.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Removed maven conditions
- Spec file cleaned
- Fixed javadoc Requires</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9: specify java source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="cef115d8f6cd34e2c620646fca833343004ea8322c4036bf7b77f5a0afeb43da84ff6537a9a7fb97e0542154418fac5aebdbf2a45b6fedcca84e878f1c289222" name="apache-rpm-macros" arch="x86_64">
  <version epoch="0" ver="20201124" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1442923200">- version 20150921
- make package usable also for other rpm based distros
- %apache_test_module_start_apache: introduce -p, -u and -g options
- %apache_test_module_curl: introduce -p and -u option</changelog>
  <changelog author="pgajdos@suse.com" date="1443614400">- version 20150930
- %apache_test_module_start_apache, %apache_test_module_load:
  introduce -t option
- %apache_test_module_curl: introduce -r option</changelog>
  <changelog author="pgajdos@suse.com" date="1446724800">- do not append macros.apache-module-test to macros.apache, provide
  separate macros file instead</changelog>
  <changelog author="pgajdos@suse.com" date="1447156800">- require apache-rpm-macros-control [bsc#893659]</changelog>
  <changelog author="pgajdos@suse.com" date="1448539200">- version 20151211
- %apache_test_module_start_apache:
  * declare -p switch in function header
  * fix wording of messages when apache start failed
  * report unsuccessful start also to stderr to see it in build
    log, when stdout is redirected to a file (see apache-test:
    when apache test failed, macro is exiting 1, so the log is
    not cat'ed to output)
  * %{apache_branch} converted to a number: 204 for 2.4,
    202 for 2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1452513600">- version 20160111
  * added %{apache_version}</changelog>
  <changelog author="pgajdos@suse.com" date="1453291200">- version 20161120
- %apache_test_module_start_apache: detect if module is built in
  statically before attempt to search for it in filesystem</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir/rpm with %_rpmconfigdir</changelog>
  <changelog author="pgajdos@suse.com" date="1581422400">- version update to 20200211
  * remove %apache_test_* macros, %apache_rex_* is the replacement
    (package apache-rex)
- deleted sources
  - macros.apache-module-test (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1606392000">- version update to 20201124
  * change location of apache2_MMN</changelog>
</package>
<package pkgid="5a4a5515cd1b7fd86c9e762df43436e3cc3a301c29af37fca8fd22eb9239a71d0a329cdfb3bc5c972559876f7345df1d0d6775caab1383354abcefd99c7c09cf" name="apache-rpm-macros-control" arch="x86_64">
  <version epoch="0" ver="20151110" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1447156800">- initial version of the package 20151110 [bsc#893659]
  macros: %define apache_restart_flag
    %apache_request_restart
    %apache_restart_if_needed</changelog>
  <changelog author="opensuse@cboltz.de" date="1450440000">- fix typo in %apache_request_restart</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir/rpm with %_rpmconfigdir</changelog>
</package>
<package pkgid="c237a76edc0af590445c89b28c141f987574c0a580f00ed52bbf5954f2d28d49de62e59bf0dedb32837a808da2e28e40f18accfe4f6e23c0c2275e80ec4041d8" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="eaa27e7eeadfc189af501474528b4044ada31225fa0168666dd6887d9e3f3c3b7ceaa8fcde3c90d4723099d6059ff8806e1331259d4e56088e163603098bc9a1" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="44fb7d71b8d7596c3e4c3ad6d4cfeca542402a9371cc34b3fd39882935bae270c82f355a8444ee942245adcad7566b4e17830772b1ff6cf1e76af5a8732c4121" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="58d9fd1b59960b32806063e6cb2046a48e97cef19965de390215c4ea58f7ade6d862ba0ea6c7d2e7a6033634f3dada381740339ad01ea2cb7d276d664db6d1dc" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="93fd2f31021bfa205a0fe1b53c312d2f671d68909702de198411f0859f064c8e46bfc090c20e186973d9aad3bc10b404a536d04fbaca82b50b102c0b17a1c91d" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="876639b003d30e172af0b5f972eb4b5a64459bcc0cfc870861e1798fba51f698fa6dc9bcd16bd9b80f19ac7f82e4a7afac1e237073aba64ce8e06a000c27ba85" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="923c3121e6b69e52ab04fa8453359ffa93a84bb9e5c3e40695e5274522bf6d2d37416691bf3985eab6ff8fd205822ec5bd3b7f490c8aceea72ca3407a9e1c254" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="7edd1af0f3e2ed77d8c6f0fee3b6a1ff2e0f4d48e9f32885726656c0aaf2c31a27590d7aa32521a61a7bfd0d835ae44bf7f40de8ceb9eb683e9ffea97ef43951" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="fe35ad30df89bf63e70912cc001989fbb87e3e775b67dc8a6c212818ecef266e0b091683b7ab47221af5a1f39da2b2797b56b6699e0dd6249ab2064a546807f3" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="4692e8166a9d853b267eda78c2bc4446c5c6388ded84d64bddc36c356687d2c5d56dffb51145b830fef609337827553c7202962314c3ab396697450adc72f683" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="ad2f03c2a5f79624256ec3a037816310e650a4541f48ffadbadbdd265ef83bd4034d1e592decc0762f69ccac238b62cbecbc2b8c62bf5f630fa4b67d356c7d8d" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="f7e6bbb67f9571fd56c1909d3edc30bb514001ac24f794f689b19668b9cb0eadbea8cac0868f789b31c2ca4d0848bae73bbe2f50ccde1dd9c7fbb30c65c32b94" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="aca901e55ac3ee5a682176da39aadd117f29c6728f8a57ed29bba3d6a338eb70b43c06a3d83720bdb14fa2ce1696cdd1db51899cb501f32fc94caf99c6c58183" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="728c126ceacb1d53174d894c3fe572a3d61180cde78a5f8cdcf221751f7e5dbd97941d37c3d57ec10d9624ae2de84305c79cae15b7ce53281273fcb894eca463" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="fe3b7fca46e8df33d90bc779bcdb33b58223f470b995f309c477cc3701c3d1197b055c1a0b7e57892ea44d484e2176b4d40983f5a7a4d02f334ca8d03c2efcf6" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="83f77ae9e2997174a9538830623cb6a501e874b362b297033faf9a340d70b6ef7c3308d14736e5fb3cd3bf549d3dd9cb98d723ac3cd9d30de48b1bf042bdea67" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="02ab8bb70beb5a6d66654943e9ce0087b482e22e2e5e5baaee646aca4f7d97829de5ba4ab6b79b94ec6a60af7e59f7107763e8297d08a6ce73e6ba81c8b9413c" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="a5220b539ea3ae56fed767535fbbabdb864c0b25d0d015fa16c3e0a211ede2376cfa25230fc6e666ee71b9d3903cabb1c42b7cba99c5464d60b75e9cbb53f4e8" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="1dd0864075ad7bb9afe2dc40ab8f85fa0e76e76002b5654111336bfcc8f4c3b5365c56c71e67ea3b993f4d4316e817904f6dbec6dd8cb8a54fcd838b7c97c2bd" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="309335f297488feee8b31b4ad2ab6a0d8820158009055cf030afcf54570b1b04f3767612b68870dc4f0f8cbadd6f2dd22456be708d7df02ba2732be4ef06325d" name="apache2-manual" arch="noarch">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="e2a767ae1d1925449976679f1884641a39640a33cbb9a030b79837612edaa19f8591203e18f11ab013bf13fcd71a4c901d7e0bd3407af36a6cb9af9c1931576e" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="4791af2450092154b3e627fc5d1a5c106bb9ebfa660b3a2890227f6f3a7b99affebec8ca9387c9708f85cdb193fca0a7fd9a7cb880887e17a180039ebcd1df79" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="cba12b50c587f7e09ac5f3aad939b4fabeb8bc3a89a0d4f4042d3de33cec4d670a090f69408a9aad76872452f20b19514a08432ecd132b9b51ec31aed87a02d2" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="02bbb5358a0284438dc2a207e57d5bc901eb4c98fa8e4da939cd450bb52857ead90243000688269252603ad1f9488ccaf8f3fe1a1bc172d2c7102b30b7e8c8e0" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="5e98364d09bfbb024dc4f623576e9b53ee42b3174b5ced8a5da2c8f1abaa202fd9c0e962209979b1f6e98dc93517605f1ceac8f517f3e41934db6d3cbf1c8c41" name="apache2-mod_auth_gssapi" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="bp160.1.7"/>
  <changelog author="k0da@opensuse.org" date="1488283200">- Initial mod_gssapi-1.5 version</changelog>
  <changelog author="pgajdos@suse.com" date="1581249600">- removing %apache_test_* macros, do not test module just by
  loading the module</changelog>
  <changelog author="pgajdos@suse.com" date="1586347200">- version update to 1.6.1
  * lot of changes, see
    https://github.com/gssapi/mod_auth_gssapi/releases
- added patches
  python3 and other testsuite fixes
  + apache2-mod_auth_gssapi-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- version update to 1.6.3
  * add a few options to expose the mechanism used for authentication
    (when multiple are available) and to control the timeout interval
    for Basic Auth sessions
  * CI and other minor fixes, as well as a fix for gss_localname()
  * see
    https://github.com/gssapi/mod_auth_gssapi/releases
- modified patches
  % apache2-mod_auth_gssapi-test.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1643889600">- test only when test requirements are fulfilled</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689595200">- change upstream URL to https://github.com/gssapi/mod_auth_gssapi,
  because https://github.com/modauthgssapi/mod_auth_gssapi has no
  releases, no activity and looks fishy
- upgrade to 1.6.4:
  * tests: Catch errors during tests setup by @stanislavlevin in
    [#225]
  * tests: Don't override the specific environment by the global
    one by @stanislavlevin in #227
  * Emit error in logs if keytab files can't be opened by @simo5 in
    [#229]
  * Add warnings if s4u2proxy options are inconsistent by @simo5 in
    [#232]
  * Move to python3 by default by @frozencemetery in #235
  * Fix type/token distinction in parser.y by @frozencemetery in
    [#237]
  * Special ccache handling for {HOSTNAME} acceptor by @simo5 in
    [#238]
  * crypto: Handle EVP changes in OpenSSL 3 by @frozencemetery in
    [#256]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689595201">- update to 1.6.5:
  * Fix a bad crash bug when the GssapiUseS4U2Proxy option is set
    but no GssapiCredStore directives are provided at all.
  - crash bug when s4u2proxy is configured by @simo5 in #272
- rebased patch apache2-mod_auth_gssapi-test.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1743681600">- turn the testsuite off even for Factory for now, it appears it
  requires certain kerberos tweaks
  [kinit: Configuration file does not specify default realm when parsing name maguser]</changelog>
</package>
<package pkgid="330165bbe10f4e4ed053f5f0d27310024daf9c5d5124692f3b22fd1b2b09e875df358c063ca489e82bd9cfb8ecdae9c51a50fa3bbf32d208bebe3f8add2e2842" name="apache2-mod_auth_mellon" arch="x86_64">
  <version epoch="0" ver="0.19.1" rel="160000.2.2"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1651752000">- Wrap default config in &lt;IfModule&gt; to avoid reload error</changelog>
  <changelog author="elimat@opensuse.org" date="1690804800">- Update to 0.18.1
  * Logout endpoint should handle idP POST response
  * mellon_create_metadata.sh: Fix compatibility with OpenSSL 3
  * Add some clarification to the documentation
  * Add encryption certificate to generated metadata
- Changes in 0.18.0
  * CVE-2021-3639 Redirect URL validation bypass - Version 0.17.0 and
    older of mod_auth_mellon allows the redirect URL validation to be
    bypassed by specifying an URL formatted as ///fishing-site.example.com/logout.html.
    In this case, the browser would interpret the URL differently
    than the APR parsing utility mellon uses and redirect to
    fishing-site.example.com. This could be reproduced with:
    https://rp.example.co.jp/mellon/logout?ReturnTo=///fishing-site.example.com/logout.html
    This version fixes that issue by rejecting all URLs that start with "///".
  * A new option MellonSessionIdleTimeout that represents the amount of
    time a user can be inactive before the user's session times out in seconds.
  * Several build-time fixes
  * The CookieTest SameSite attribute was only set to None if mellon configure option
    MellonCookieSameSite was set to something other than default. This is now fixed.
- add libtool and xmlsec1-openssl-devel as new dependencies
- set Buildarch to noarch for docs sub-package</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 0.19.0
  Enhancements:
  * Support for HTTP-POST binding on Singe Logout endpoint.
  * Update documentation.
  Cleanup:
  * Raise minimum Lasso version to 2.4, cleaning up legacy code for
    compatibility with older versions, including the obsolete
    `MellonIdPPublicKeyFile` setting which was not working with recent
    Lasso versions.</changelog>
  <changelog author="pgajdos@suse.com" date="1733918400">- version update to 0.19.1
  * Remove legacy code that is unused because of minimum requirements.
  * Cleanup HTML in rendered forms.
  * Documentation cleanups and improvements.</changelog>
</package>
<package pkgid="ed87b56c5e43163f2b24aa3074187a550f3127dbc122bb83b4d618f24bc048a5d7f18652caaa8c58d2bd258149b05384cde65eec8d0e77b3ea6f6a2657d33438" name="apache2-mod_auth_mellon-diagnostics" arch="x86_64">
  <version epoch="0" ver="0.19.1" rel="160000.2.2"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1651752000">- Wrap default config in &lt;IfModule&gt; to avoid reload error</changelog>
  <changelog author="elimat@opensuse.org" date="1690804800">- Update to 0.18.1
  * Logout endpoint should handle idP POST response
  * mellon_create_metadata.sh: Fix compatibility with OpenSSL 3
  * Add some clarification to the documentation
  * Add encryption certificate to generated metadata
- Changes in 0.18.0
  * CVE-2021-3639 Redirect URL validation bypass - Version 0.17.0 and
    older of mod_auth_mellon allows the redirect URL validation to be
    bypassed by specifying an URL formatted as ///fishing-site.example.com/logout.html.
    In this case, the browser would interpret the URL differently
    than the APR parsing utility mellon uses and redirect to
    fishing-site.example.com. This could be reproduced with:
    https://rp.example.co.jp/mellon/logout?ReturnTo=///fishing-site.example.com/logout.html
    This version fixes that issue by rejecting all URLs that start with "///".
  * A new option MellonSessionIdleTimeout that represents the amount of
    time a user can be inactive before the user's session times out in seconds.
  * Several build-time fixes
  * The CookieTest SameSite attribute was only set to None if mellon configure option
    MellonCookieSameSite was set to something other than default. This is now fixed.
- add libtool and xmlsec1-openssl-devel as new dependencies
- set Buildarch to noarch for docs sub-package</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 0.19.0
  Enhancements:
  * Support for HTTP-POST binding on Singe Logout endpoint.
  * Update documentation.
  Cleanup:
  * Raise minimum Lasso version to 2.4, cleaning up legacy code for
    compatibility with older versions, including the obsolete
    `MellonIdPPublicKeyFile` setting which was not working with recent
    Lasso versions.</changelog>
  <changelog author="pgajdos@suse.com" date="1733918400">- version update to 0.19.1
  * Remove legacy code that is unused because of minimum requirements.
  * Cleanup HTML in rendered forms.
  * Documentation cleanups and improvements.</changelog>
</package>
<package pkgid="ae105c85cb79a04baa73181d30aeee3390b8513c678ca715506adb80028fd314ff1efc1727930078e23f45e53f63b440ff77580d8b387c3419b3aaa1c83e4e38" name="apache2-mod_auth_mellon-doc" arch="noarch">
  <version epoch="0" ver="0.19.1" rel="160000.2.2"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1651752000">- Wrap default config in &lt;IfModule&gt; to avoid reload error</changelog>
  <changelog author="elimat@opensuse.org" date="1690804800">- Update to 0.18.1
  * Logout endpoint should handle idP POST response
  * mellon_create_metadata.sh: Fix compatibility with OpenSSL 3
  * Add some clarification to the documentation
  * Add encryption certificate to generated metadata
- Changes in 0.18.0
  * CVE-2021-3639 Redirect URL validation bypass - Version 0.17.0 and
    older of mod_auth_mellon allows the redirect URL validation to be
    bypassed by specifying an URL formatted as ///fishing-site.example.com/logout.html.
    In this case, the browser would interpret the URL differently
    than the APR parsing utility mellon uses and redirect to
    fishing-site.example.com. This could be reproduced with:
    https://rp.example.co.jp/mellon/logout?ReturnTo=///fishing-site.example.com/logout.html
    This version fixes that issue by rejecting all URLs that start with "///".
  * A new option MellonSessionIdleTimeout that represents the amount of
    time a user can be inactive before the user's session times out in seconds.
  * Several build-time fixes
  * The CookieTest SameSite attribute was only set to None if mellon configure option
    MellonCookieSameSite was set to something other than default. This is now fixed.
- add libtool and xmlsec1-openssl-devel as new dependencies
- set Buildarch to noarch for docs sub-package</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 0.19.0
  Enhancements:
  * Support for HTTP-POST binding on Singe Logout endpoint.
  * Update documentation.
  Cleanup:
  * Raise minimum Lasso version to 2.4, cleaning up legacy code for
    compatibility with older versions, including the obsolete
    `MellonIdPPublicKeyFile` setting which was not working with recent
    Lasso versions.</changelog>
  <changelog author="pgajdos@suse.com" date="1733918400">- version update to 0.19.1
  * Remove legacy code that is unused because of minimum requirements.
  * Cleanup HTML in rendered forms.
  * Documentation cleanups and improvements.</changelog>
</package>
<package pkgid="b974f93687d97738dbf0f8976dbbfe9c7b0647e09fa9cf8244ead356a73a66916582c8a96ba004d549f853faddecdf19ade05c9cb4ffa809b23bd81844611ecc" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.4.17" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1701345600">- update to 2.4.14.4:
  * for the complete list of changes, please have a look at ChangeLog</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708084800">- Update to 2.4.15.3:
  * for the complete list of changes, please have a look at ChangeLog
- Fix CVE-2024-24814, DoS when `OIDCSessionType client-cookie` is set
  and a crafted Cookie header is supplied, bsc#1219911</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 2.4.15.6
  03/14/2024
  - fix userinfo refresh interval parsing; closes #1200; thanks @HolgerHees
    avoid refreshing userinfo on each request until access token expiry
  - store interval as JSON integer in session
  - use SameSite=Lax when OIDCCookieSameSite is On (also by default) instead of
    Strict as overriding from Lax to Strict does not work reliably anymore (Chrome)
  - release 2.4.15.6
  03/13/2024
  - fix compilation without libhiredis; closes #1195 ; thanks @HolgerHees
    conditionally define oidc_set_redis_connect_timeout
  - fix `OIDCPassClaimsAs environment` bug introduced in 2.4.15.4; see #1196; thanks @HolgerHees
  - release 2.4.15.5
  03/12/2024
  - release 2.4.15.4
  - fix setting the default PCKE method to "none" in a multi-provider setup</changelog>
  <changelog author="pgajdos@suse.com" date="1726574400">- version update to 2.4.16.3
  09/06/2024
  - allow overriding globally set OIDCCacheType back to shm in vhosts
  - correct typo in child initialization routines when using multiple vhosts; closes #1208; thanks @studersi
    this fixes possible segmentation faults when using Redis and Metrics settings in vhosts
  09/05/2024
  - fix OIDCCacheShmMax min/max settings; see #1260; thanks @bbartke
  08/29/2024
  - fix setting OIDCPKCEMethod none; closes #1256; thanks @eoliphan
  08/28/2024
  - re-introduce OIDCSessionMaxDuration 0; see #1252
  - add some resilience when both Forwarded and X-Forwarded-* are configured
  - fix disabled OIDCStateCookiePrefix command; closes #1254; thanks @damisanet
  - remove support for OIDCHTMLErrorTemplate, deprecated since 2.4.14
  08/26/2024
  - fix parsing OIDCXForwardedHeaders; closes #1250; thanks @maltesmann
  07/03/2024
  - cfg/provider: use oidc_jwk_list_copy when merging client_keys
  06/18/2024
  - memcache: correct dead server check on APR_NOTFOUND; see #1230; thanks @rpluem-vf
  06/08/2024
  - support DPoP nonces to the userinfo endpoint
  06/06/2024
  - add OIDCDPoPMode [off|optional|required] primitive
  - store the token_type in the session
  06/05/2024
  - add "nbf" claim in the Request Object as per https://openid.net/specs/openid-financial-api-part-2-1_0-final.html#rfc.section.5.2.2
  06/04/2024
  - add (client) support for RFC 9449 OAuth 2.0 Demonstrating Proof of Possession (DPoP)
  - replace multi-provider .conf "issuer_specific_redirect_uri" boolean with "response_require_iss" boolean
  - tighten up the "aud" claim validation in ID tokens
  - add support for the FAPI 2.0 Security Profile https://openid.net/specs/fapi-2_0-security-profile-ID2.html
  05/30/2024
  - add support for RFC 9126 OAuth 2.0 Pushed Authorization Requests
  04/23/2024
  - disable support for the RSA PKCS v1.5 JWE encryption algorithm as it is deemed unsafe
    due to the Marvin attack and is removed from libcjose as well
  04/05/2024
  - add debug printout for OIDCUnAuthAction expression evaluation
  04/03/2024
  - when an expression is configured for OIDCUnAuthAction (i.e. in the 2nd argument), also apply
    it to OIDCUnAutzAction so that it can be used to enable step-up authentication for SPAs with
    non-conformant browsers (some versions of Safari) and in (potentially insecure) iframes
    see #1205; thanks @ryanwilliamnicholls
  04/02/2024
  - major rewrite of config primitive handling:
  - split out over different files, use header files consistently
  - encapsulate config record with getters/setters
  - allow overriding defined global configuration primitives to their default value on the individual vhost level
  - apply input/boundary checking on all configuration values, shared with provider metadata parsing
  - various fixes to applying default config values and allowing primitives in vhost/directory scopes
  - return HTTTP 502 when refreshing acces token or userinfo fails (default: "502_on_error")
  - use a singleton token refresh mutex
  - add support for OIDCOAuthIntrospectionEndpointKeyPassword
  - bump to 2.4.16dev
  04/01/2024
  - release 2.4.15.7
  03/29/2024
- fix OIDCUserInfoRefreshInterval, interval seconds would be interpreted as microseconds</changelog>
  <changelog author="pgajdos@suse.com" date="1733918400">- version update to 2.4.16.6
  12/05/2024
  - metadata: fix caching of JWKs from jwks_uri when using the default expiry setting (i.e. not using OIDCJWKSRefreshInterval)
    and avoid fetching JWKs from the jwks_uri for each user login; also addresses Redis cache
    error entries the log [ERR invalid expire time in 'setex' command]
  - avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found
    on the system upon initalizing cache mutexes and file cache; see #1288; thanks @ErmakovDmitriy
  11/21/2024
  - add option to set local address for outgoing HTTP requests; see #1283; thanks @studersi
    using e.g. SetEnvIfExpr true OIDC_CURL_INTERFACE=192.168.10.2
  - try and address metris cleanup segmentation fault on shutdown; see #1207
    by not flushing metrics to the shared memory segment upon exit
  11/14/2024
  - allow specific settings Strict|Lax|None|Disabled for OIDCCookieSameSite in addition to On(=Lax)|Off(=None)
  - fix: default behaviour Lax
  - fix: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
  - re-introduces the option to configure a Strict SameSite session cookie policy, which will turn the initial
    Lax session cookie - set upon receving the response to the Redirect URI - into a Strict session cookie
    immediately after the first application request
  - allows for a "Disabled" value that does not set any SameSite flag on the cookies, in which case a browser
    falls back to its default browser behaviour (which should be Lax by spec)
  11/07/2024
  - info: fix requests to the info hook with extend_session=false; see #1279; thanks @fnieri-cdp
  - properly reflect the (unmodified) inactivity timeout in the response ("timeout")
  - avoid refreshing an access token (since the session is not saved)
  - avoid refreshing claims from the user info endpoint, and possibly refreshing the access token
  10/23/2024
  - metadata: allow plain HTTP URLs in metadata elements `jwks_uri` and `signed_jwks_uri`
    to ensure backwards compatibility with &lt;=2.4.15.7 and to support private/test deployments
  10/22/2024
  - address warnings from static code analysis tool CodeChecker
  10/04/2024
  - ensure backwards compatibility with versions &lt;2.4.16.x when a JSON array of string values
    is provided in the "aud" claim of the ID token; required by (at least) Oracle IDCS
    see #1272 and #1273; thanks @lufik and @tydalforce
  - add OIDCIDTokenAudValues configuration primitive that allows for explicit (and exhaustive)
    configuration of the list of accepted values in the "aud" claim of the ID token
    e.g. as required for passing FAPI 2 conformance testing
  09/27/2024
  - correct usage of free() for json_dumps return values instead of cjose_get_dealloc()()
  - use compact encoding and preserve order where appropriate for most calls to json_dumps
  - replace json_dumps/free combos with oidc_util_encode_json
  - refactor oidc_jwk_to_json
  09/26/2024
  - fix oidc_jwk_copy wrt. "x5t", which broke private_key_jwt authentication to Azure AD since 2.4.13
    see #1269; thanks @uoe-pjackson
  09/21/2024
  - refactor state and userinfo
  09/11/2024
  - change warnings about not passing unknown claim types into debug messages; see #1263; thanks @nclarkau
  09/09/2024
  - fix accepting custom cookie names in OIDCOAuthAcceptTokenAs cookie:&lt;name&gt;; see #1261; thanks @bbartke
  - improve basic authentication parsing when using OIDCOAuthAcceptTokenAs basic</changelog>
  <changelog author="pgajdos@suse.com" date="1739188800">- version update to 2.4.16.7
  01/29/2025
  - add OIDCProfile to configure OpenID Connect profile behaviours for, so far "FAPI20" only, which configures:
    Authentication Request method, DPoP, PKCE, ID token aud values requirements
    token endpoint JWT authentication "aud" values, "iss" parameter requirement in authentication reponses</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1741953600">- update to 2.4.16.8:
  * add support for claim value counters in OIDCMetricsData
  * do not reset Prometheus counters by default, only when
    explicitly specified
  * metrics: reset to 0 in case of an integer overflow
- build with pcre2</changelog>
  <changelog author="pgajdos@suse.com" date="1744113600">- version update to 2.4.16.11 (CVE-2025-31492 [bsc#1240893])
  - fix protected content leakage when using OIDCProviderAuthRequestMethod POST, see:
    https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-59jp-rwph-878r
  - allow for regular Apache processing (e.g. setting response headers) when using OIDCProviderAuthRequestMethod POST
  - core: complete case-insensitive protocol/hostname/domain-name comparisons
  2.4.16.10
  - core: compare hostnames and domains in a case insensitive way in:
    oidc_request_check_cookie_domain
    oidc_util_cookie_domain_valid
    oidc_validate_redirect_url
    oidc_cfg_parse_is_valid_url_scheme
    oidc_discovery_target_link_uri_match
  - cookie: fix oidc_util_cookie_domain_valid so that it checks the incoming request against OIDCCookieDomain
    rather than the OIDCRedirectURI and displays the correct error message if they don't match
  2.4.16.9
  - cookie: use case insensitive hostname/domain comparison in oidc_check_cookie_domain
  - authz: remove the Location header from HTML based step up authentication redirects
    as it may conflict with its HTTP 200 status code and confuse middle boxes
  - metrics: avoid double-free on shutdown by not calling pthread_exit; fixes #1207; thanks @studersi
  - metrics: upon exit, do write cached metrics into shared memory before exiting</changelog>
  <changelog author="pgajdos@suse.com" date="1746014400">- version update to 2.4.17
  * Features
  - proto: pass the scope parameter as returned from the token endpoint in the OIDC_scope
    header/environment variable and make it available for Require claim scope: purposes,
    if not available as a claim returned in the id_token or userinfo endpoint; thanks Amaury Buffet
  * Bugfixes
  - metadata: fix parsing the OPs token_endpoint_auth_methods_supported and avoid the log error:
  - oidc_metadata_provider_parse: oidc_provider_token_endpoint_auth_set: invalid value
    and falling back to client_secret_basic after that; thanks François Kooman
  - fix memory leaks when using provider specific client keys and/or signed_jwks_uri_key in.a
    multi-provider setup; thanks Sami Korvonen
  - allow for regular Apache processing (e.g. setting response/security headers) by deferring HTML/HTTP
    output generation to the content handler (instead of user id check handler) for the following use cases:
    OIDCProviderAuthRequestMethod POST
    OIDCPreservePost On (both internal and template-based)
    POST page for the implicit grant type
    Request URI handler
    internally generated POST logout page
    session management RP iframe
    session management logout HTML top-window redirect page</changelog>
  <changelog author="pgajdos@suse.com" date="1748865600">- build with hiredis for openSUSE only [bsc#1243922]</changelog>
</package>
<package pkgid="fe29e31a48d17fcd554338d838ab02e408c41bfd3e29c0f25d547c4e932956447caa0d45224db7ba4d7ba5d219e1065d1ab699fd7b6c7fa36269e07eb7c47f12" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.4.17.1" rel="160000.1.1"/>
  <changelog author="danilo.spinella@suse.com" date="1708084800">- Update to 2.4.15.3:
  * for the complete list of changes, please have a look at ChangeLog
- Fix CVE-2024-24814, DoS when `OIDCSessionType client-cookie` is set
  and a crafted Cookie header is supplied, bsc#1219911</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 2.4.15.6
  03/14/2024
  - fix userinfo refresh interval parsing; closes #1200; thanks @HolgerHees
    avoid refreshing userinfo on each request until access token expiry
  - store interval as JSON integer in session
  - use SameSite=Lax when OIDCCookieSameSite is On (also by default) instead of
    Strict as overriding from Lax to Strict does not work reliably anymore (Chrome)
  - release 2.4.15.6
  03/13/2024
  - fix compilation without libhiredis; closes #1195 ; thanks @HolgerHees
    conditionally define oidc_set_redis_connect_timeout
  - fix `OIDCPassClaimsAs environment` bug introduced in 2.4.15.4; see #1196; thanks @HolgerHees
  - release 2.4.15.5
  03/12/2024
  - release 2.4.15.4
  - fix setting the default PCKE method to "none" in a multi-provider setup</changelog>
  <changelog author="pgajdos@suse.com" date="1726574400">- version update to 2.4.16.3
  09/06/2024
  - allow overriding globally set OIDCCacheType back to shm in vhosts
  - correct typo in child initialization routines when using multiple vhosts; closes #1208; thanks @studersi
    this fixes possible segmentation faults when using Redis and Metrics settings in vhosts
  09/05/2024
  - fix OIDCCacheShmMax min/max settings; see #1260; thanks @bbartke
  08/29/2024
  - fix setting OIDCPKCEMethod none; closes #1256; thanks @eoliphan
  08/28/2024
  - re-introduce OIDCSessionMaxDuration 0; see #1252
  - add some resilience when both Forwarded and X-Forwarded-* are configured
  - fix disabled OIDCStateCookiePrefix command; closes #1254; thanks @damisanet
  - remove support for OIDCHTMLErrorTemplate, deprecated since 2.4.14
  08/26/2024
  - fix parsing OIDCXForwardedHeaders; closes #1250; thanks @maltesmann
  07/03/2024
  - cfg/provider: use oidc_jwk_list_copy when merging client_keys
  06/18/2024
  - memcache: correct dead server check on APR_NOTFOUND; see #1230; thanks @rpluem-vf
  06/08/2024
  - support DPoP nonces to the userinfo endpoint
  06/06/2024
  - add OIDCDPoPMode [off|optional|required] primitive
  - store the token_type in the session
  06/05/2024
  - add "nbf" claim in the Request Object as per https://openid.net/specs/openid-financial-api-part-2-1_0-final.html#rfc.section.5.2.2
  06/04/2024
  - add (client) support for RFC 9449 OAuth 2.0 Demonstrating Proof of Possession (DPoP)
  - replace multi-provider .conf "issuer_specific_redirect_uri" boolean with "response_require_iss" boolean
  - tighten up the "aud" claim validation in ID tokens
  - add support for the FAPI 2.0 Security Profile https://openid.net/specs/fapi-2_0-security-profile-ID2.html
  05/30/2024
  - add support for RFC 9126 OAuth 2.0 Pushed Authorization Requests
  04/23/2024
  - disable support for the RSA PKCS v1.5 JWE encryption algorithm as it is deemed unsafe
    due to the Marvin attack and is removed from libcjose as well
  04/05/2024
  - add debug printout for OIDCUnAuthAction expression evaluation
  04/03/2024
  - when an expression is configured for OIDCUnAuthAction (i.e. in the 2nd argument), also apply
    it to OIDCUnAutzAction so that it can be used to enable step-up authentication for SPAs with
    non-conformant browsers (some versions of Safari) and in (potentially insecure) iframes
    see #1205; thanks @ryanwilliamnicholls
  04/02/2024
  - major rewrite of config primitive handling:
  - split out over different files, use header files consistently
  - encapsulate config record with getters/setters
  - allow overriding defined global configuration primitives to their default value on the individual vhost level
  - apply input/boundary checking on all configuration values, shared with provider metadata parsing
  - various fixes to applying default config values and allowing primitives in vhost/directory scopes
  - return HTTTP 502 when refreshing acces token or userinfo fails (default: "502_on_error")
  - use a singleton token refresh mutex
  - add support for OIDCOAuthIntrospectionEndpointKeyPassword
  - bump to 2.4.16dev
  04/01/2024
  - release 2.4.15.7
  03/29/2024
- fix OIDCUserInfoRefreshInterval, interval seconds would be interpreted as microseconds</changelog>
  <changelog author="pgajdos@suse.com" date="1733918400">- version update to 2.4.16.6
  12/05/2024
  - metadata: fix caching of JWKs from jwks_uri when using the default expiry setting (i.e. not using OIDCJWKSRefreshInterval)
    and avoid fetching JWKs from the jwks_uri for each user login; also addresses Redis cache
    error entries the log [ERR invalid expire time in 'setex' command]
  - avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory cannot be found
    on the system upon initalizing cache mutexes and file cache; see #1288; thanks @ErmakovDmitriy
  11/21/2024
  - add option to set local address for outgoing HTTP requests; see #1283; thanks @studersi
    using e.g. SetEnvIfExpr true OIDC_CURL_INTERFACE=192.168.10.2
  - try and address metris cleanup segmentation fault on shutdown; see #1207
    by not flushing metrics to the shared memory segment upon exit
  11/14/2024
  - allow specific settings Strict|Lax|None|Disabled for OIDCCookieSameSite in addition to On(=Lax)|Off(=None)
  - fix: default behaviour Lax
  - fix: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
  - re-introduces the option to configure a Strict SameSite session cookie policy, which will turn the initial
    Lax session cookie - set upon receving the response to the Redirect URI - into a Strict session cookie
    immediately after the first application request
  - allows for a "Disabled" value that does not set any SameSite flag on the cookies, in which case a browser
    falls back to its default browser behaviour (which should be Lax by spec)
  11/07/2024
  - info: fix requests to the info hook with extend_session=false; see #1279; thanks @fnieri-cdp
  - properly reflect the (unmodified) inactivity timeout in the response ("timeout")
  - avoid refreshing an access token (since the session is not saved)
  - avoid refreshing claims from the user info endpoint, and possibly refreshing the access token
  10/23/2024
  - metadata: allow plain HTTP URLs in metadata elements `jwks_uri` and `signed_jwks_uri`
    to ensure backwards compatibility with &lt;=2.4.15.7 and to support private/test deployments
  10/22/2024
  - address warnings from static code analysis tool CodeChecker
  10/04/2024
  - ensure backwards compatibility with versions &lt;2.4.16.x when a JSON array of string values
    is provided in the "aud" claim of the ID token; required by (at least) Oracle IDCS
    see #1272 and #1273; thanks @lufik and @tydalforce
  - add OIDCIDTokenAudValues configuration primitive that allows for explicit (and exhaustive)
    configuration of the list of accepted values in the "aud" claim of the ID token
    e.g. as required for passing FAPI 2 conformance testing
  09/27/2024
  - correct usage of free() for json_dumps return values instead of cjose_get_dealloc()()
  - use compact encoding and preserve order where appropriate for most calls to json_dumps
  - replace json_dumps/free combos with oidc_util_encode_json
  - refactor oidc_jwk_to_json
  09/26/2024
  - fix oidc_jwk_copy wrt. "x5t", which broke private_key_jwt authentication to Azure AD since 2.4.13
    see #1269; thanks @uoe-pjackson
  09/21/2024
  - refactor state and userinfo
  09/11/2024
  - change warnings about not passing unknown claim types into debug messages; see #1263; thanks @nclarkau
  09/09/2024
  - fix accepting custom cookie names in OIDCOAuthAcceptTokenAs cookie:&lt;name&gt;; see #1261; thanks @bbartke
  - improve basic authentication parsing when using OIDCOAuthAcceptTokenAs basic</changelog>
  <changelog author="pgajdos@suse.com" date="1739188800">- version update to 2.4.16.7
  01/29/2025
  - add OIDCProfile to configure OpenID Connect profile behaviours for, so far "FAPI20" only, which configures:
    Authentication Request method, DPoP, PKCE, ID token aud values requirements
    token endpoint JWT authentication "aud" values, "iss" parameter requirement in authentication reponses</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1741953600">- update to 2.4.16.8:
  * add support for claim value counters in OIDCMetricsData
  * do not reset Prometheus counters by default, only when
    explicitly specified
  * metrics: reset to 0 in case of an integer overflow
- build with pcre2</changelog>
  <changelog author="pgajdos@suse.com" date="1744113600">- version update to 2.4.16.11 (CVE-2025-31492 [bsc#1240893])
  - fix protected content leakage when using OIDCProviderAuthRequestMethod POST, see:
    https://github.com/OpenIDC/mod_auth_openidc/security/advisories/GHSA-59jp-rwph-878r
  - allow for regular Apache processing (e.g. setting response headers) when using OIDCProviderAuthRequestMethod POST
  - core: complete case-insensitive protocol/hostname/domain-name comparisons
  2.4.16.10
  - core: compare hostnames and domains in a case insensitive way in:
    oidc_request_check_cookie_domain
    oidc_util_cookie_domain_valid
    oidc_validate_redirect_url
    oidc_cfg_parse_is_valid_url_scheme
    oidc_discovery_target_link_uri_match
  - cookie: fix oidc_util_cookie_domain_valid so that it checks the incoming request against OIDCCookieDomain
    rather than the OIDCRedirectURI and displays the correct error message if they don't match
  2.4.16.9
  - cookie: use case insensitive hostname/domain comparison in oidc_check_cookie_domain
  - authz: remove the Location header from HTML based step up authentication redirects
    as it may conflict with its HTTP 200 status code and confuse middle boxes
  - metrics: avoid double-free on shutdown by not calling pthread_exit; fixes #1207; thanks @studersi
  - metrics: upon exit, do write cached metrics into shared memory before exiting</changelog>
  <changelog author="pgajdos@suse.com" date="1746014400">- version update to 2.4.17
  * Features
  - proto: pass the scope parameter as returned from the token endpoint in the OIDC_scope
    header/environment variable and make it available for Require claim scope: purposes,
    if not available as a claim returned in the id_token or userinfo endpoint; thanks Amaury Buffet
  * Bugfixes
  - metadata: fix parsing the OPs token_endpoint_auth_methods_supported and avoid the log error:
  - oidc_metadata_provider_parse: oidc_provider_token_endpoint_auth_set: invalid value
    and falling back to client_secret_basic after that; thanks François Kooman
  - fix memory leaks when using provider specific client keys and/or signed_jwks_uri_key in.a
    multi-provider setup; thanks Sami Korvonen
  - allow for regular Apache processing (e.g. setting response/security headers) by deferring HTML/HTTP
    output generation to the content handler (instead of user id check handler) for the following use cases:
    OIDCProviderAuthRequestMethod POST
    OIDCPreservePost On (both internal and template-based)
    POST page for the implicit grant type
    Request URI handler
    internally generated POST logout page
    session management RP iframe
    session management logout HTML top-window redirect page</changelog>
  <changelog author="pgajdos@suse.com" date="1748865600">- build with hiredis for openSUSE only [bsc#1243922]</changelog>
  <changelog author="pgajdos@suse.com" date="1771329600">- version update to 2.4.17.1 [jsc#PED-12759][jsc#PED-14130]
  * fix usage of OIDCSessionType client-cookie:persistent:store_id_token; see #1331; thanks @rgcv
  * fix usage of OIDCPreservePostTemplates, regression in 2.4.17; see #1325; thanks @perry19987
  * javascript: use HTMLFormElement.prototype.submit.call(document.forms[0]) on all Javascript
    auto-submit POST forms to prevent browser Javascript error: "form.submit is not a function"
  * metrics: avoid possible segfault after restart twice; thanks @atzm
  * code: refactor util.c into util/ directory
  * allow adding a prefix to the cache (section) key through environment variable OIDC_CACHE_PREFIX</changelog>
</package>
<package pkgid="4d8f0ae5d118d2b2e62f76b7ad23eeedafeb9a1f0912acc2945b887a411fdbd4f97a29c90bf48ef6991be26f9d821ac72cafc24495a327ddf164f7aca4be074c" name="apache2-mod_authn_otp" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="bp160.1.12"/>
  <changelog author="pgajdos@suse.com" date="1443700800">- do not %check for apache 2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1443960000">- %check for apache 2.2 again</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1509364800">- Update to version 1.1.8
  + Added PINFakeBasicAuth configuration option</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1561204800">- Update to version 1.1.9
  + Added genotpurl(1) utility
  + Added "-F" flag to otptool(1).</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- testing with apache-rex instead</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619179200">- Fixed SPEC file: Replaced broken URL and minor cleanup</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1651665600">- Update to version 1.1.10
  + Fixed bug in genotpurl on platforms with signed "char" (pr #46)
  + Added "-K" flag to genotpurl tool to specify key length (pr #43)
  + Update spec file description to include genotpurl(1)</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1719489600">- Update to version 1.1.11
  - Fixed build issue with libapr on some systems (issue #48)
  - Added otplock(1) utility (issue #38)</changelog>
</package>
<package pkgid="3b9166d701cca34eeb1ba6a5cc41906404f980222007b39c3d00fe027c1ccb6250a674021c7c8f56aab9425ac7c5ea87a09c92b5d2f19ccc587652a9fc0ebe9e" name="apache2-mod_evasive" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1413288000">- fixed module loading [bnc#865567], [bnc#867984]</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- use apache rpm macros</changelog>
  <changelog author="jengelh@inai.de" date="1415620800">- Add mail-invocation.diff: Use -t parameter with the mail program
  [boo#884877]; add recommends on mailx so that that can work</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441022400">- test module with %apache_test_module</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1571313600">- Update homepage URL.</changelog>
  <changelog author="pgajdos@suse.com" date="1581249600">- removing %apache_test_* macros, do not test module just by
  loading the module</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650456000">- Trim duplicate LoadModule [boo#1198570]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- remove unneeded pcre build dependency</changelog>
</package>
<package pkgid="b96eba6f7f3c3cd0378f63fdd7ddaf9637fe497dd0cf730cf031a277d3d0c72d49b1bcc9cacf8305f7180dd0a8f08d3020f02bc579e8ead0f6c7bafdefe68510" name="apache2-mod_fcgid" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="bp160.1.12"/>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441281600">- test module with %apache_test_module_load</changelog>
  <changelog author="kstreitova@suse.com" date="1469620800">- add mod_fcgid-2.3.9-CVE-2016-1000104.patch - don't allow setting
  the HTTP_PROXY environment variable from a http header
  [CVE-2016-1000104], [bsc#988492]
- run spec-cleaner to clean specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1489406400">- add a true example to %check</changelog>
  <changelog author="pgajdos@suse.com" date="1494590400">- amend example in %check to see how output to stderr get
  logged in error_log</changelog>
  <changelog author="pgajdos@suse.com" date="1561464000">- test via apache-rex instead</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- drop unmaintained apache-rex usage</changelog>
</package>
<package pkgid="955a6e2cd36fdd9770f88248a06a798b37f258f5de0f5866a0a3ac5cea0d60e8b34916fa1e37b1ca8d4b63612b73ea99f96d85527c29fa0ca800a72000e93800" name="apache2-mod_jk" arch="x86_64">
  <version epoch="0" ver="1.2.50" rel="bp160.1.4"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1537358400">- Update to version 1.2.44
  Updates:
  * Remove the Novell Netware make files and Netware specific source
    code since there has not been a supported version of Netware
    available for over five years. (markt)
  * Apache: Update the documentation to use httpd 2.4.x style access
    control directives. (markt)
  * Update PCRE bundled with the ISAPI redirector to 8.42. (rjung)
  * Update config.guess and config.sub from
    https://git.savannah.gnu.org/git/config.git. (rjung)
  Fixes:
  * Common: Use Local, rather than Global, mutexs on Windows to
    better support multi-user environments. (markt)
  * Apache: Use poll rather than select to avoid the limitations of
    select triggering an httpd crash. Patch provided by Koen Wilde. (markt)
  * ISAPI: Remove the check that rejects requests that contain path
    segments that match WEB-INF or META-INF as it duplicates a check
    that Tomcat performs and, because ISAPI does not have visibility of
    the current context path, it is impossible to implement this check
    without valid requests being rejected. (markt)
  * Refactor normalisation of request URIs to a common location and align
    the normalisation implementation for mod_jk with that implemented by
    Tomcat. (markt)
  Add:
  * Clarify the behvaiour of lb workers when all ajp13 workers fail with
    particular reference to the role of the retries attribute. (markt)
  * Add the new load-balancer worker property lb_retries to improve the
    control over the number of retries. Based on a patch provided by
    Frederik Nosi. (markt)
  * Add a note to the documentation that the CollapseSlashes options are
    now effectively hard-coded to CollpaseSlashesAll due to the changes
    made to align normalization with that implemented in Tomcat. (markt)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1541419200">- Update to version 1.2.46
  Fixes:
  * Apache: Fix regression in 1.2.44 which resulted in
    socket_connect_timeout to be interpreted in units of seconds
    instead of milliseconds on platforms that provide poll(). (rjung)
  * Security: CVE-2018-11759 Connector path traversal [bsc#1114612]
- Update to version 1.2.45
  Fixes:
  * Correct regression in 1.2.44 that broke request handling for
    OPTIONS * requests. (rjung)
  * Improve path parameter parsing so that the session ID specified
    by the session_path worker property for load-balanced workers
    can be extracted from a path parameter in any segment of the
    URI, rather than only from the final segment. (markt)
  * Apache: Improve path parameter handling so that JkStripSession
    can remove session IDs that are specified on path parameters in any
    segment of the URI rather than only the final segment. (markt)
  * IIS: Improve path parameter handling so that strip_session can
    remove session IDs that are specified on path parameters in any
    segment of the URI rather than only the final segment. (markt)
  Updates:
  * Apache: Update the documentation to note additional
    limitations of the JkAutoAlias directive. (markt)
  Code:
  * Common: Optimize path parameter handling. (rjung)
- Cleaned with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1581249600">- remove useless %check section</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589198400">- Changes for 1.2.47 and 1.2.48 updates:
  * Add: Apache: Extend trace level logging of method entry/exit to
    aid debugging of request mapping issues.
  * Fix: Apache: Fix a bug in the normalization checks that prevented
    file based requests, such as SSI file includes, from being processed.
  * Fix: Apache: When using JkAutoAlias, ensure that files that include
    spaces in their name are accessible.
  * Update: Common: Update the documentation to reflect that the source
    code for the Apache Tomcat Connectors has moved from Subversion to Git.
  * Fix: Common: When using set_session_cookie, ensure that an updated session
    cookie is issued if the load-balancer has to failover to a different worker.
  * Update: Common: Update config.guess and config.sub from
    https://git.savannah.gnu.org/git/config.git.
  * Update: Common: Update release script for migration to git.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589198401">- Fix Aliases to be compatible with the tomcat example URLs [bsc#1167896]</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589803200">- Update jk.conf: [bsc#1167896]
  * Specify the location of JkShmFile.
  * Update tomcat-webapps paths.</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1697544000">- Update to version 1.2.49:
  Apache
  * Retrieve default request id from mod_unique_id. It can also be
    taken from an arbitrary environment variable by configuring
    "JkRequestIdIndicator".
  * Don't delegate the generation of the response body to httpd
    when the status code represents an error if the request used
    the HEAD method.
  * Only export the main module symbol. Visibility of module
    internal symbols led to crashes when conflicting with library
    symbols. Based on a patch provided by Josef Čejka. (wrong fix
    was applied for bsc#1206261)
  * Remove support for implicit mapping of requests to workers.
    All mappings must now be explicit.
  IIS
  * Set default request id as a GUID. It can also be taken from an
    arbitrary request header by configuring "request_id_header".
  * Fix non-empty check for the Translate header.
  Common
  * Fix compiler warning when initializing and copying fixed
    length strings.
  * Add a request id to mod_jk log lines.
  * Enable configure to find the correct sizes for pid_t and
    pthread_t when building on MacOS.
  * Fix Clang 15/16 compatibility. Pull request #6 provided by
    Sam James.
  * Improve XSS hardening in status worker.
  * Add additional bounds and error checking when reading AJP
    messages.
  Docs
  * Remove support for the Netscape / Sun ONE / Oracle iPlanet Web
    Server as the product has been retired.
  * Remove links to the old JK2 documentation. The JK2
    documentation is still available, it is just no longer linked
    from the current JK documentation.
  * Restructure subsections in changelog starting with version
    1.2.45.</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1703160000">- Add apache2-fix-symbol-export-typo.patch to fix a typo to restrict
  the symbols to export by the module. Fixes bsc#1206261.</changelog>
  <changelog author="Gus Kenion &lt;gus.kenion@suse.com&gt;" date="1729512000">- Update to version 1.2.50:
  * Apache
    + Fix: 68117: Fix typo in new libtool flag introduced in
    1.2.49 to reduce symbol visibility. Also improve escaping
    of it in the Makefile.
    +  Fix: Improve shared memory handling on non-Windows.
  * IIS
    + Update: Update PCRE bundled with the ISAPI redirector to
    8.45.
  * Common
    + Fix: #8: Fix compilation on musl.
    + Update: Update config.guess and config.sub
- Remove apache2-fix-symbol-export-typo.patch - this upstream fix
  is included in 1.2.50</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- drop unneeded pcre build requirement</changelog>
</package>
<package pkgid="b46e1d9649d475bc21559950beee82872fde1c9a69838171050289b4d63feb1d66dcf9a3bf04750bbb485f7061cc256fbe212192a546fddac21198115228ba4b" name="apache2-mod_maxminddb" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.10"/>
  <changelog author="jweberhofer@weberhofer.at" date="1526558400">- Initial release 1.1.0</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1570449600">- Added autoreconf to allow building on factory version
- Added apache2-mod_maxminddb-build.patch to make it buildable on opensuse fatory again.
  Does not build with LDFLAGS="-flto=8"</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="pgajdos@suse.com" date="1581249600">- removing %apache_test_* macros, do not test module just by
  loading the module</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585051200">- update to 1.2.0
  https://github.com/maxmind/mod_maxminddb/releases/tag/1.2.0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="23a46b95f16248195be82bd1b7d753b4171911179e4c9345e24a2d5d74e8d9cc10603e0ca5ee72fbe71e1c69f25e0aef44bba132cafa623aa79906f80e654ed4" name="apache2-mod_perl" arch="x86_64">
  <version epoch="0" ver="2.0.13" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- define %license for older codestreams</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1632744000">- fix build error with fix_perl_5.34_build.patch</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1650542400">- update to 2.0.12:
  * Add bug tracker information to README, and add CONTRIBUTING.md.
  * Fix detection of APR's threading support on RHEL 8.
  * Fix build for perl &gt;= 5.33.7.
  * Fix SIGSEGV crash due to wrong use of perl_parse().
  * Improve installation instructions for AIX.
- remove patch:
  * fix_perl_5.34_build.patch (there is a fix already upstreamed)
- refreshed patches:
  * avoid-broken-provides.diff
  * apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1691496000">- Add apache2-mod_perl-perl-5.38.patch: Fix build with Perl 5.38.
  Usptream rev 1910623.</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1699876800">- Update to 2.0.13:
  * Use get_server_banner() instead of deprecated get_server_version() in
    Apache2::Status.
  * Avoid generating APR precompiled headers.
  * Fix build for perl &gt;= 5.37.1.
- Removed apache2-mod_perl-perl-5.38.patch (fix already upstream)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720440000">- fix build on Tumbleweed (boo#1227485)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727438400">- Add /srv/www to filelist [bsc#1231027]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- removed unneeded pcre build dependency</changelog>
</package>
<package pkgid="82c19afa03a6b850e78c9ad7c53585e294e5751d8438a5bcba91827847d63927b55283635cb94808b2d3569bb58b645d9d0e832f8093cee2882589fcde3f7d77" name="apache2-mod_perl-devel" arch="x86_64">
  <version epoch="0" ver="2.0.13" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1531828800">- restore process name after sv_setpv_mg() call [bsc#1091625]
  + apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573905600">- Apache mod_perl 2.0.11:
  * CVE-2011-2767: Arbitrary Perl code execution in the context of
    the user account via a user-owned .htaccess (boo#1156944)</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- define %license for older codestreams</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1632744000">- fix build error with fix_perl_5.34_build.patch</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1650542400">- update to 2.0.12:
  * Add bug tracker information to README, and add CONTRIBUTING.md.
  * Fix detection of APR's threading support on RHEL 8.
  * Fix build for perl &gt;= 5.33.7.
  * Fix SIGSEGV crash due to wrong use of perl_parse().
  * Improve installation instructions for AIX.
- remove patch:
  * fix_perl_5.34_build.patch (there is a fix already upstreamed)
- refreshed patches:
  * avoid-broken-provides.diff
  * apache2-mod_perl-prctl-short-name.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1691496000">- Add apache2-mod_perl-perl-5.38.patch: Fix build with Perl 5.38.
  Usptream rev 1910623.</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1699876800">- Update to 2.0.13:
  * Use get_server_banner() instead of deprecated get_server_version() in
    Apache2::Status.
  * Avoid generating APR precompiled headers.
  * Fix build for perl &gt;= 5.37.1.
- Removed apache2-mod_perl-perl-5.38.patch (fix already upstream)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720440000">- fix build on Tumbleweed (boo#1227485)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727438400">- Add /srv/www to filelist [bsc#1231027]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- removed unneeded pcre build dependency</changelog>
</package>
<package pkgid="0015f72b01cc006dce2f224b4a3918f271d236e7219ca012a9d990425456907777841e3dae3336cb5d523ce5835b1ce62a48c02fa58c1ee1779ec6ef289c5a50" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.4.10" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1736510400">- obsolete php7 to smooth the migration [bsc#1234788]</changelog>
  <changelog author="pgajdos@suse.com" date="1737115200">- version update to 8.3.16
    Core:
    Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
    Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
    Fixed bug GH-17101 (AST-&gt;string does not reproduce constructor property promotion correctly).
    Fixed bug GH-17211 (observer segfault on function loaded with dl()).
    Fixed bug GH-17216 (Trampoline crash on error).
    Date:
    Fixed bug GH-14709 DatePeriod::__construct() overflow on recurrences.
    DBA:
    Skip test if inifile is disabled.
    DOM:
    Fixed bug GH-17224 (UAF in importNode).
    Embed:
    Make build command for program using embed portable.
    FFI:
    Fixed bug #79075 (FFI header parser chokes on comments).
    Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
    Fixed bug GH-16013 and bug #80857 (Big endian issues).
    Filter:
    Fixed bug GH-16944 (Fix filtering special IPv4 and IPv6 ranges, by using information from RFC 6890).
    FPM:
    Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
    Fixed bug GH-17112 (Macro redefinitions).
    Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
    GD:
    Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
    Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
    Gettext:
    Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
    Iconv:
    Fixed bug GH-17047 (UAF on iconv filter failure).
    LDAP:
    Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
    LibXML:
    Fixed bug GH-17223 (Memory leak in libxml encoding handling).
    MBString:
    Fixed bug GH-17112 (Macro redefinitions).
    Opcache:
    opcache_get_configuration() properly reports jit_prof_threshold.
    Fixed bug GH-17246 (GC during SCCP causes segfault).
    PCNTL:
    Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
    PgSql:
    Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
    Fixed further ArgumentCountError for calls with flexible number of arguments.
    Phar:
    Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
    SimpleXML:
    Fixed bug GH-17040 (SimpleXML's unset can break DOM objects).
    Fixed bug GH-17153 (SimpleXML crash when using autovivification on document).
    Sockets:
    Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
    Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
    SPL:
    Fixed bug GH-17225 (NULL deref in spl_directory.c).
    Streams:
    Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling).
    Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
    Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
    Windows:
    Hardened proc_open() against cmd.exe hijacking.
    XML:
    Fixed bug GH-1718 (unreachable program point in zend_hash).
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1738929600">- obsolete also apache2-mod_php7 [bsc#1236850]</changelog>
  <changelog author="pgajdos@suse.com" date="1739534400">- version update to 8.3.17
    Core:
    Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
    Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
    Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
    Fixed NULL arithmetic during system program execution on Windows.
    Fixed potential OOB when checking for trailing spaces on Windows.
    Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
    Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
    Fix NULL arithmetic in System V shared memory emulation for Windows.
    DOM:
    Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
    Enchant:
    Fix crashes in enchant when passing null bytes.
    FTP:
    Fixed bug GH-16800 (ftp functions can abort with EINTR).
    GD:
    Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
    Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
    Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
    Intl:
    Fixed bug GH-11874 (intl causing segfault in docker images).
    Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding).
    Opcache:
    Fixed bug GH-17307 (Internal closure causes JIT failure).
    Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
    PDO:
    Fixed a memory leak when the GC is used to free a PDOStatment.
    Fixed a crash in the PDO Firebird Statement destructor.
    Fixed UAFs when changing default fetch class ctor args.
    Phar:
    Fixed bug GH-17518 (offset overflow phar extractTo()).
    PHPDBG:
    Fix crashes in function registration + test.
    Session:
    Fix type confusion with session SID constant.
    Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).
    SimpleXML:
    Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).
    SNMP:
    Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
    SPL:
    Fixed bug GH-17463 (crash on SplTempFileObject::ftruncate with negative value).
    Zip:
    Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 8.3.19
    BCMath:
    Fixed bug GH-17398 (bcmul memory leak).
    Core:
    Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
    Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
    Fix fallback paths in fast_long_{add,sub}_function.
    Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
    Fixed bug GH-17797 (zend_test_compile_string crash on invalid script path).
    Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
    DOM:
    Fixed bug GH-17847 (xinclude destroys live node).
    FFI:
    Fix FFI Parsing of Pointer Declaration Lists.
    FPM:
    Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
    GD:
    Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
    LDAP:
    Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
    LibXML:
    Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
    Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
    MBString:
    Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
    Opcache:
    Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
    Fixed bug GH-17577 (JIT packed type guard crash).
    Fixed bug GH-17899 (zend_test_compile_string with invalid path when opcache is enabled).
    Fixed bug GH-17868 (Cannot allocate memory with tracing JIT).
    PDO_SQLite:
    Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
    Fix cycle leak in sqlite3 setAuthorizer().
    Phar:
    Fixed bug GH-17808: PharFileInfo refcount bug.
    PHPDBG:
    Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer).
    Fix memory leak in phpdbg calling registered function.
    Reflection:
    Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
    Standard:
    Fixed bug #72666 (stat cache clearing inconsistent between file:// paths and plain paths).
    Streams:
    Fixed bug GH-17650 (realloc with size 0 in user_filters.c).
    Fix memory leak on overflow in _php_stream_scandir().
    Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
    Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
    Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
    Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
    Windows:
    Fixed phpize for Windows 11 (24H2).
    Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
    Zlib:
    Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
    Fix memory leak when encoding check fails.
    Fix zlib support for large files.
- fixes: CVE-2025-1217 [bsc#1239664]
    CVE-2024-11235 [bsc#1239666]
    CVE-2025-1734 [bsc#1239668]
    CVE-2025-1861 [bsc#1239669]
    CVE-2025-1736 [bsc#1239670]
    CVE-2025-1219 [bsc#1239667]</changelog>
  <changelog author="pgajdos@suse.com" date="1743595200">- version update to 8.4.5
    BCMath:
    Fixed bug GH-17398 (bcmul memory leak).
    Core:
    Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
    Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
    Fix fallback paths in fast_long_{add,sub}_function.
    Fixed bug OSS-Fuzz #391975641 (Crash when accessing property backing value by reference).
    Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
    Fixed bug GH-17713 (ReflectionProperty::getRawValue() and related methods may call hooks of overridden properties).
    Fixed bug GH-17916 (Final abstract properties should error).
    Fixed bug GH-17866 (zend_mm_heap corrupted error after upgrading from 8.4.3 to 8.4.4).
    Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
    DOM:
    Fixed bug GH-17609 (Typo in error message: Dom\NO_DEFAULT_NS instead of Dom\HTML_NO_DEFAULT_NS).
    Fixed bug GH-17802 (\Dom\HTMLDocument querySelector attribute name is case sensitive in HTML).
    Fixed bug GH-17847 (xinclude destroys live node).
    Fix using Dom\Node with Dom\XPath callbacks.
    GD:
    Fixed bug GH-17703 (imagescale with both width and height negative values triggers only an Exception on width).
    Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
    FFI:
    Fix FFI Parsing of Pointer Declaration Lists.
    FPM:
    Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
    LDAP:
    Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
    LibXML:
    Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
    Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
    MBString:
    Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
    Opcache:
    Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
    Fixed bug GH-17577 (JIT packed type guard crash).
    Fixed bug GH-17747 (Exception on reading property in register-based FETCH_OBJ_R breaks JIT).
    Fixed bug GH-17715 (Null pointer deref in observer API when calling cases() method on preloaded enum).
    Fixed bug GH-17868 (Cannot allocate memory with tracing JIT on 8.4.4).
    PDO_SQLite:
    Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
    Fix cycle leak in sqlite3 setAuthorizer().
    Fix memory leaks in pdo_sqlite callback registration.
    Phar:
    Fixed bug GH-17808: PharFileInfo refcount bug.
    PHPDBG:
    Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer).
    Fix memory leak in phpdbg calling registered function.
    Reflection:
    Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
    Fixed missing final and abstract flags when dumping properties.
    Standard:
    Fixed bug #72666 (stat cache clearing inconsistent between file:// paths and plain paths).
    Streams:
    Fixed bug GH-17650 (realloc with size 0 in user_filters.c).
    Fix memory leak on overflow in _php_stream_scandir().
    Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
    Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
    Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
    Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
    Windows:
    Fixed phpize for Windows 11 (24H2).
    Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
    Zlib:
    Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
    Fix memory leak when encoding check fails.
    Fix zlib support for large files.
- version update to 8.4.4
    Core:
    Fixed bug GH-17234 (Numeric parent hook call fails with assertion).
    Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
    Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
    Fixed bug GH-17222 (__PROPERTY__ magic constant does not work in all constant expression contexts).
    Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
    Fixed NULL arithmetic during system program execution on Windows.
    Fixed potential OOB when checking for trailing spaces on Windows.
    Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
    Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
    Fix NULL arithmetic in System V shared memory emulation for Windows.
    Fixed bug GH-17597 (#[\Deprecated] does not work for __call() and __callStatic()).
    DOM:
    Fixed bug GH-17397 (Assertion failure ext/dom/php_dom.c).
    Fixed bug GH-17486 (Incorrect error line numbers reported in Dom\HTMLDocument::createFromString).
    Fixed bug GH-17481 (UTF-8 corruption in \Dom\HTMLDocument).
    Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
    Fixed bug GH-17485 (upstream fix, Self-closing tag on void elements shouldn't be a parse error/warning in \Dom\HTMLDocument).
    Fixed bug GH-17572 (getElementsByTagName returns collections with tagName-based indexing).
    Enchant:
    Fix crashes in enchant when passing null bytes.
    FTP:
    Fixed bug GH-16800 (ftp functions can abort with EINTR).
    GD:
    Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
    Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
    Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
    Added support for reading GIFs without colormap to bundled libgd.
    Gettext:
    Fixed bug GH-17400 (bindtextdomain SEGV on invalid domain).
    Intl:
    Fixed bug GH-11874 (intl causing segfault in docker images).
    Opcache:
    Fixed bug GH-15981 (Segfault with frameless jumps and minimal JIT).
    Fixed bug GH-17307 (Internal closure causes JIT failure).
    Fixed bug GH-17428 (Assertion failure ext/opcache/jit/zend_jit_ir.c:8940).
    Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
    PCNTL:
    Fixed pcntl_setcpuaffinity exception type from ValueError to TypeError for the cpu mask argument with entries type different than int/string.
    PCRE:
    Fixed bug GH-17122 (memory leak in regex).
    PDO:
    Fixed a memory leak when the GC is used to free a PDOStatment.
    Fixed a crash in the PDO Firebird Statement destructor.
    Fixed UAFs when changing default fetch class ctor args.
    PgSql:
    Fixed build failure when the constant PGRES_TUPLES_CHUNK is not present in the system.
    Phar:
    Fixed bug GH-17518 (offset overflow phar extractTo()).
    PHPDBG:
    Fix crashes in function registration + test.
    Session:
    Fix type confusion with session SID constant.
    Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).
    SimpleXML:
    Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).
    SNMP:
    Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
    SPL:
    Fixed bug GH-15833 (Segmentation fault (access null pointer) in ext/spl/spl_array.c).
    Fixed bug GH-17516 (SplFileTempObject::getPathInfo() Undefined behavior on invalid class).
    Standard:
    Fixed bug GH-17447 (Assertion failure when array popping a self addressing variable).
    Windows:
    Fixed clang compiler detection.
    Zip:
    Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).
- version update to 8.4.3
    BcMath:
    Fixed bug GH-17049 (Correctly compare 0 and -0).
    Fixed bug GH-17061 (Now Number::round() does not remove trailing zeros).
    Fixed bug GH-17064 (Correctly round rounding mode with zero edge case).
    Fixed bug GH-17275 (Fixed the calculation logic of dividend scale).
    Core:
    Fixed bug OSS-Fuzz #382922236 (Duplicate dynamic properties in hooked object iterator properties table).
    Fixed unstable get_iterator pointer for hooked classes in shm on Windows.
    Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
    Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
    Fixed bug GH-17101 (AST-&gt;string does not reproduce constructor property promotion correctly).
    Fixed bug GH-17200 (Incorrect dynamic prop offset in hooked prop iterator).
    Fixed bug GH-17216 (Trampoline crash on error).
    DBA:
    Skip test if inifile is disabled.
    DOM:
    Fixed bug GH-17145 (DOM memory leak).
    Fixed bug GH-17201 (Dom\TokenList issues with interned string replace).
    Fixed bug GH-17224 (UAF in importNode).
    Embed:
    Make build command for program using embed portable.
    FFI:
    Fixed bug #79075 (FFI header parser chokes on comments).
    Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
    Fixed bug GH-16013 and bug #80857 (Big endian issues).
    Fileinfo:
    Fixed bug GH-17039 (PHP 8.4: Incorrect MIME content type).
    FPM:
    Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
    Fixed bug GH-17112 (Macro redefinitions).
    Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
    GD:
    Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
    Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
    Gettext:
    Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
    Iconv:
    Fixed bug GH-17047 (UAF on iconv filter failure).
    LDAP:
    Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
    LibXML:
    Fixed bug GH-17223 (Memory leak in libxml encoding handling).
    MBString:
    Fixed bug GH-17112 (Macro redefinitions).
    Opcache:
    opcache_get_configuration() properly reports jit_prof_threshold.
    Fixed bug GH-17140 (Assertion failure in JIT trace exit with ZEND_FETCH_DIM_FUNC_ARG).
    Fixed bug GH-17151 (Incorrect RC inference of op1 of FETCH_OBJ and INIT_METHOD_CALL).
    Fixed bug GH-17246 (GC during SCCP causes segfault).
    Fixed bug GH-17257 (UBSAN warning in ext/opcache/jit/zend_jit_vm_helpers.c).
    PCNTL:
    Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
    PgSql:
    Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
    Fixed further ArgumentCountError for calls with flexible number of arguments.
    Phar:
    Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
    SimpleXML:
    Fixed bug GH-17040 (SimpleXML's unset can break DOM objects).
    Fixed bug GH-17153 (SimpleXML crash when using autovivification on document).
    Sockets:
    Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
    Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
    SPL:
    Fixed bug GH-17198 (SplFixedArray assertion failure with get_object_vars).
    Fixed bug GH-17225 (NULL deref in spl_directory.c).
    Streams:
    Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling).
    Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
    Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
    Windows:
    Hardened proc_open() against cmd.exe hijacking.
    XML:
    Fixed bug GH-1718 (unreachable program point in zend_hash).
- modified patches
  % php-build-reproducible-phar.patch (refreshed)
- version update to 8.4.2
    BcMath:
    Fixed bug GH-16978 (Avoid unnecessary padding with leading zeros) (Saki Takamachi)
    Calendar:
    Fixed jdtogregorian overflow.
    Fixed cal_to_jd julian_days argument overflow.
    COM:
    Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
    Core:
    Fail early in *nix configuration build script.
    Fixed bug GH-16344 (setRawValueWithoutLazyInitialization() and skipLazyInitialization() may change initialized proxy).
    Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
    Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
    Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
    Fix is_zend_ptr() huge block comparison.
    Fixed potential OOB read in zend_dirname() on Windows.
    Fixed bug GH-15964 (printf() can strip sign of -INF).
    Curl:
    Fixed bug GH-16802 (open_basedir bypass using curl extension).
    Fix various memory leaks in curl mime handling.
    DBA:
    Fixed bug GH-16990 (dba_list() is now zero-indexed instead of using resource ids) (kocsismate)
    DOM:
    Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF).
    Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
    FPM:
    Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
    Fixed bug GH-16932 (wrong FPM status output).
    GD:
    Fixed GH-16776 (imagecreatefromstring overflow).
    GMP:
    Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
    Hash:
    Fixed GH-16711: Segfault in mhash().
    Opcache:
    Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
    Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
    Fixed bug GH-16879 (JIT dead code skipping does not update call_level).
    OpenSSL:
    Prevent unexpected array entry conversion when reading key.
    Fix various memory leaks related to openssl exports.
    Fix memory leak in php_openssl_pkey_from_zval().
    PDO:
    Fixed memory leak of `setFetchMode()`.
    Phar:
    Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
    PHPDBG:
    Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
    SAPI:
    Fixed bug GH-16998 (UBSAN warning in rfc1867).
    SimpleXML:
    Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator -&gt;current() with a xml element input).
    SOAP:
    Fix make check being invoked in ext/soap.
    Standard:
    Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
    Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array).
    Streams:
    Fixed network connect poll interuption handling.
    Windows:
    Fixed bug GH-16849 (Error dialog causes process to hang).
    Windows Server 2025 is now properly reported.
- version update to 8.4.1
  * Property Hooks
  * Asymmetric Property Visibility
  * Lazy Objects
  * PDO driver-specific subclasses
  * BCMath object type
  * details: https://www.php.net/ChangeLog-8.php#8.4.1
  * upgrading notes: https://www.php.net/manual/en/migration84.php</changelog>
  <changelog author="mmanu84@outlook.de" date="1744977600">- version update to 8.4.6
    BCMath:
    Fixed pointer subtraction for scale.
    Core:
    Fixed property hook backing value access in multi-level inheritance.
    Fixed accidentally inherited default value in overridden virtual properties.
    Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class).
    Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()).
    Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks).
    Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()).
    Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache).
    Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again).
    Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction).
    Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown).
    Fixed OSS-Fuzz #403308724.
    Fixed bug GH-13193 again (Significant performance degradation in 'foreach').
    DBA:
    Fixed assertion violation when opening the same file with dba_open multiple times.
    DOM:
    Fixed bug GH-17991 (Assertion failure dom_attr_value_write).
    Fix weird unpack behaviour in DOM.
    Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased).
    Fix xinclude destruction of live attributes.
    Fuzzer:
    Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI).
    GD:
    Fixed bug GH-17984 (calls with arguments as array with references).
    LDAP:
    Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing).
    Mbstring:
    Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes).
    Opcache:
    Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT).
    Fixed bug GH-17966 (Symfony JIT 1205 assertion failure).
    Fixed bug GH-18037 (SEGV Zend/zend_execute.c).
    Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken).
    Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
    Fixed bug GH-18112 (NULL access with preloading and INI option).
    Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table).
    PDO:
    Fix memory leak when destroying PDORow.
    Standard:
    Fix memory leaks in array_any() / array_all().
    SOAP:
    Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) .
    SPL:
    Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject).
    Treewide:
    Fixed bug GH-17736 (Assertion failure zend_reference_destroy()).
    Windows:
    Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings).</changelog>
  <changelog author="suse+build@de-korte.org" date="1746792000">- version update to 8.4.7
    Core:
    Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
    Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
    Fixed bug GH-18268 (Segfault in array_walk() on object with added property hooks).
    Fixed bug GH-18304 (Changing the properties of a DateInterval through dynamic properties triggers a SegFault).
    Fix some leaks in php_scandir.
    DBA:
    FIxed bug GH-18247 dba_popen() memory leak on invalid path.
    Filter:
    Fixed bug GH-18309 (ipv6 filter integer overflow).
    GD:
    Fixed imagecrop() overflow with rect argument with x/width y/heigh usage in gdImageCrop().
    Fixed GH-18243 imagettftext() overflow/underflow on font size value.
    Intl:
    Fix reference support for intltz_get_offset().
    LDAP:
    Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
    Fix NULL deref on high modification key.
    libxml:
    Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message.
    Opcache:
    Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
    Fixed bug GH-18289 (Fix segfault in JIT).
    Fixed bug GH-18136 (tracing JIT floating point register clobbering on Windows and ARM64).
    OpenSSL:
    Fix memory leak in openssl_sign() when passing invalid algorithm.
    Fix potential leaks when writing to BIO fails.
    PDO Firebird:
    Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with setAttribute())
    Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
    PDO Sqlite:
    Fix memory leak on error return of collation callback.
    PgSql:
    Fix uouv in pg_put_copy_end().
    SPL:
    Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
    Standard:
    Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
    Fix resource leak in iptcembed() on error.
    Tests:
    Address deprecated PHP 8.4 session options to prevent test failures.
    Zip:
    Fix uouv when handling empty options in ZipArchive::addGlob().
    Fix memory leak when handling a too long path in ZipArchive::addGlob().</changelog>
  <changelog author="pgajdos@suse.com" date="1749211200">- version update to 8.4.8
    Core:
    Fixed GH-18480 (array_splice with large values for offset/length arguments).
    Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
    Fixed OSS-Fuzz #417078295.
    Fixed OSS-Fuzz #418106144.
    Curl:
    Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
    Date:
    Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
    Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
    DOM:
    Backport lexbor/lexbor#274.
    Intl:
    Fix various reference issues.
    LDAP:
    Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
    Opcache:
    Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
    Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
    Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
    Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
    Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
    Fix leak of accel_globals-&gt;key.
    OpenSSL:
    Fix missing checks against php_set_blocking() in xp_ssl.c.
    SPL:
    Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
    Standard:
    Fixed bug GH-17403 (Potential deadlock when putenv fails).
    Fixed bug GH-18400 (http_build_query type error is inaccurate).
    Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
    Windows:
    Fix leak+crash with sapi_windows_set_ctrl_handler().
    Zip:
    Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
    Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).</changelog>
  <changelog author="pgajdos@suse.com" date="1751544000">- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
    BcMath:
    Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
    Core:
    Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
    Fixed GH-18695 (zend_ast_export() - float number is not preserved).
    Fix handling of references in zval_try_get_long().
    Do not delete main chunk in zend_gc.
    Fix compile issues with zend_alloc and some non-default options.
    Curl:
    Fix memory leak when setting a list via curl_setopt fails.
    Date:
    Fix leaks with multiple calls to DatePeriod iterator current().
    DOM:
    Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
    FPM:
    Fixed GH-18662 (fpm_get_status segfault).
    Hash:
    Fixed bug GH-14551 (PGO build fails with xxhash).
    Intl:
    Fix memory leak in intl_datetime_decompose() on failure.
    Fix memory leak in locale lookup on failure.
    Opcache:
    Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
    ODBC:
    Fix memory leak on php_odbc_fetch_hash() failure.
    OpenSSL:
    Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
    Fixed bug #74796 (Requests through http proxy set peer name).
    PGSQL:
    Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
    Fix warning not being emitted when failure to cancel a query with pg_cancel_query().
    PDO ODBC:
    Fix memory leak if WideCharToMultiByte() fails.
    PDO Sqlite:
    Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
    Phar:
    Add missing filter cleanups on phar failure.
    Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek).
    PHPDBG:
    Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.
    Random:
    Fix reference type confusion and leak in user random engine.
    Readline:
    Fix memory leak when calloc() fails in php_readline_completion_cb().
    SimpleXML:
    Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).
    SOAP:
    Fix memory leaks in php_http.c when call_user_function() fails.
    Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
    Standard:
    Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
    Tidy:
    Fix memory leak in tidy output handler on error.
    Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
</package>
<package pkgid="94fe2aa907532a72a3d39477839381b8d015c2b3eb46cc62ea8922bb62d08bf1f7520f17f7dccad8e57ea240639326906864528c71eb6e973d33c180627429e6" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.4.16" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1746792000">- version update to 8.4.7
    Core:
    Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
    Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
    Fixed bug GH-18268 (Segfault in array_walk() on object with added property hooks).
    Fixed bug GH-18304 (Changing the properties of a DateInterval through dynamic properties triggers a SegFault).
    Fix some leaks in php_scandir.
    DBA:
    FIxed bug GH-18247 dba_popen() memory leak on invalid path.
    Filter:
    Fixed bug GH-18309 (ipv6 filter integer overflow).
    GD:
    Fixed imagecrop() overflow with rect argument with x/width y/heigh usage in gdImageCrop().
    Fixed GH-18243 imagettftext() overflow/underflow on font size value.
    Intl:
    Fix reference support for intltz_get_offset().
    LDAP:
    Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
    Fix NULL deref on high modification key.
    libxml:
    Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message.
    Opcache:
    Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
    Fixed bug GH-18289 (Fix segfault in JIT).
    Fixed bug GH-18136 (tracing JIT floating point register clobbering on Windows and ARM64).
    OpenSSL:
    Fix memory leak in openssl_sign() when passing invalid algorithm.
    Fix potential leaks when writing to BIO fails.
    PDO Firebird:
    Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with setAttribute())
    Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
    PDO Sqlite:
    Fix memory leak on error return of collation callback.
    PgSql:
    Fix uouv in pg_put_copy_end().
    SPL:
    Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
    Standard:
    Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
    Fix resource leak in iptcembed() on error.
    Tests:
    Address deprecated PHP 8.4 session options to prevent test failures.
    Zip:
    Fix uouv when handling empty options in ZipArchive::addGlob().
    Fix memory leak when handling a too long path in ZipArchive::addGlob().</changelog>
  <changelog author="pgajdos@suse.com" date="1749211200">- version update to 8.4.8
    Core:
    Fixed GH-18480 (array_splice with large values for offset/length arguments).
    Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
    Fixed OSS-Fuzz #417078295.
    Fixed OSS-Fuzz #418106144.
    Curl:
    Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
    Date:
    Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
    Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
    DOM:
    Backport lexbor/lexbor#274.
    Intl:
    Fix various reference issues.
    LDAP:
    Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
    Opcache:
    Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
    Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
    Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
    Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
    Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
    Fix leak of accel_globals-&gt;key.
    OpenSSL:
    Fix missing checks against php_set_blocking() in xp_ssl.c.
    SPL:
    Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
    Standard:
    Fixed bug GH-17403 (Potential deadlock when putenv fails).
    Fixed bug GH-18400 (http_build_query type error is inaccurate).
    Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
    Windows:
    Fix leak+crash with sapi_windows_set_ctrl_handler().
    Zip:
    Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
    Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).</changelog>
  <changelog author="pgajdos@suse.com" date="1751544000">- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
    BcMath:
    Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
    Core:
    Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
    Fixed GH-18695 (zend_ast_export() - float number is not preserved).
    Fix handling of references in zval_try_get_long().
    Do not delete main chunk in zend_gc.
    Fix compile issues with zend_alloc and some non-default options.
    Curl:
    Fix memory leak when setting a list via curl_setopt fails.
    Date:
    Fix leaks with multiple calls to DatePeriod iterator current().
    DOM:
    Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
    FPM:
    Fixed GH-18662 (fpm_get_status segfault).
    Hash:
    Fixed bug GH-14551 (PGO build fails with xxhash).
    Intl:
    Fix memory leak in intl_datetime_decompose() on failure.
    Fix memory leak in locale lookup on failure.
    Opcache:
    Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
    ODBC:
    Fix memory leak on php_odbc_fetch_hash() failure.
    OpenSSL:
    Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
    Fixed bug #74796 (Requests through http proxy set peer name).
    PGSQL:
    Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
    Fix warning not being emitted when failure to cancel a query with pg_cancel_query().
    PDO ODBC:
    Fix memory leak if WideCharToMultiByte() fails.
    PDO Sqlite:
    Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
    Phar:
    Add missing filter cleanups on phar failure.
    Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek).
    PHPDBG:
    Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.
    Random:
    Fix reference type confusion and leak in user random engine.
    Readline:
    Fix memory leak when calloc() fails in php_readline_completion_cb().
    SimpleXML:
    Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).
    SOAP:
    Fix memory leaks in php_http.c when call_user_function() fails.
    Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
    Standard:
    Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
    Tidy:
    Fix memory leak in tidy output handler on error.
    Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1754654400">- version update to 8.4.11
    Calendar:
    Fixed jewishtojd overflow on year argument.
    Core:
    Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
    Fixed bug GH-18907 (Leak when creating cycle in hook).
    Fix OSS-Fuzz #427814456.
    Fix OSS-Fuzz #428983568 and #428760800.
    Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c).
    Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64).
    Curl:
    Fix memory leaks when returning refcounted value from curl callback.
    Remove incorrect string release.
    DOM:
    Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte).
    LDAP:
    Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
    MbString:
    Fixed bug GH-18901 (integer overflow mb_split).
    Opcache:
    Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
    Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet).
    Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
    Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading).
    OpenSSL:
    Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
    PCNTL:
    Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
    Phar:
    Fix stream double free in phar.
    Fix phar crash and file corruption with SplFileObject.
    SOAP:
    Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction).
    Fix memory leak when URL parsing fails in redirect.
    SPL:
    Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
    Standard:
    Fix misleading errors in printf().
    Fix RCN violations in array functions.
    Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
    Streams:
    Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
    Zip:
    Fix leak when path is too long in ZipArchive::extractTo().</changelog>
  <changelog author="pgajdos@suse.com" date="1756382400">- version update to 8.4.12
    Core:
    Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro.
    Fixed bug GH-19053 (Duplicate property slot with hooks and interface property).
    Fixed bug GH-19044 (Protected properties are not scoped according to their prototype).
    Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking).
    Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr).
    Fixed bug GH-19305 (Operands may be being released during comparison).
    Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure).
    Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator).
    Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes).
    Fixed bug GH-19280 (Stale array iterator position on rehashing).
    Fixed bug GH-18736 (Circumvented type check with return by ref + finally).
    Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming).
    Calendar:
    Fixed bug GH-19371 (integer overflow in calendar.c).
    FTP:
    Fix theoretical issues with hrtime() not being available.
    GD:
    Fix incorrect comparison with result of php_stream_can_cast().
    Hash:
    Fix crash on clone failure.
    Intl:
    Fix memleak on failure in collator_get_sort_key().
    Fix return value on failure for resourcebundle count handler.
    LDAP:
    Fixed bug GH-18529 (additional inheriting of TLS int options).
    LibXML:
    Fixed bug GH-19098 (libxml&lt;2.13 segmentation fault caused by php_libxml_node_free).
    MbString:
    Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown).
    Opcache:
    Reset global pointers to prevent use-after-free in zend_jit_status().
    Fix issue with JIT restart and hooks.
    Fix crash with dynamic function defs in hooks during preload.
    OpenSSL:
    Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check).
    Fix error return check of EVP_CIPHER_CTX_ctrl().
    Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param).
    PDO Pgsql:
    Fixed dangling pointer access on _pdo_pgsql_trim_message helper.
    SOAP:
    Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref).
    Sockets:
    Fix some potential crashes on incorrect argument value.
    Standard:
    Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache).
    Fix theoretical issues with hrtime() not being available.
    Fixed bug GH-19300 (Nested array_multisort invocation with error breaks).
    Windows:
    Free opened_path when opened_path_len &gt;= MAXPATHLEN.</changelog>
  <changelog author="pgajdos@suse.com" date="1758888000">- version update to 8.4.13
    Core:
    Fixed bug GH-18850 (Repeated inclusion of file with __halt_compiler() triggers "Constant already defined" warning).
    Partially fixed bug GH-19542 (Scanning of string literals &gt;=2GB will fail due to signed int overflow).
    Fixed bug GH-19544 (GC treats ZEND_WEAKREF_TAG_MAP references as WeakMap references).
    Fixed bug GH-19613 (Stale array iterator pointer).
    Fixed bug GH-19679 (zend_ssa_range_widening may fail to converge).
    Fixed bug GH-19681 (PHP_EXPAND_PATH broken with bash 5.3.0).
    Fixed bug GH-19720 (Assertion failure when error handler throws when accessing a deprecated constant).
    CLI:
    Fixed bug GH-19461 (Improve error message on listening error with IPv6 address).
    Date:
    Fixed date_sunrise() and date_sunset() with partial-hour UTC offset.
    DBA:
    Fixed bug GH-19706 (dba stream resource mismanagement).
    DOM:
    Fixed bug GH-19612 (Mitigate libxml2 tree dictionary bug).
    FPM:
    Fixed failed debug assertion when php_admin_value setting fails.
    Intl:
    Fixed bug GH-11952 (Fix locale strings canonicalization for IntlDateFormatter and NumberFormatter).
    Opcache:
    Fixed bug GH-19493 (JIT variable not stored before YIELD).
    OpenSSL:
    Fixed bug GH-19245 (Success error message on TLS stream accept failure).
    PGSQL:
    Fixed bug GH-19485 (potential use after free when using persistent pgsql connections).
    Phar:
    Fixed memory leaks when verifying OpenSSL signature.
    Fix memory leak in phar tar temporary file error handling code.
    Fix metadata leak when phar convert logic fails.
    Fix memory leak on failure in phar_convert_to_other().
    Fixed bug GH-19752 (Phar decompression with invalid extension can cause UAF).
    Standard:
    Fixed bug GH-16649 (UAF during array_splice).
    Fixed bug GH-19577 (Avoid integer overflow when using a small offset and PHP_INT_MAX with LimitIterator).
    Streams:
    Remove incorrect call to zval_ptr_dtor() in user_wrapper_metadata().
    Fix OSS-Fuzz #385993744.
    Zip:
    Fix memory leak in zip when encountering empty glob result.</changelog>
  <changelog author="suse+build@de-korte.org" date="1761220800">- version update to 8.4.14
    Core:
    Fixed bug GH-19765 (object_properties_load() bypasses readonly property checks).
    Fixed hard_timeout with --enable-zend-max-execution-timers.
    Fixed bug GH-19792 (SCCP causes UAF for return value if both warning and exception are triggered).
    Fixed bug GH-19653 (Closure named argument unpacking between temporary closures can cause a crash).
    Fixed bug GH-19839 (Incorrect HASH_FLAG_HAS_EMPTY_IND flag on userland array).
    Fixed bug GH-19480 (error_log php.ini cannot be unset when open_basedir is configured).
    Fixed bug GH-20002 (Broken build on *BSD with MSAN).
    CLI:
    Fix useless "Failed to poll event" error logs due to EAGAIN in CLI server with PHP_CLI_SERVER_WORKERS.
    Curl:
    Fix cloning of CURLOPT_POSTFIELDS when using the clone operator instead of the curl_copy_handle() function to clone a CurlHandle.
    Fix curl build and test failures with version 8.16.
    Date:
    Fixed GH-17159: "P" format for ::createFromFormat swallows string literals.
    DOM:
    Fix macro name clash on macOS.
    Fixed bug GH-20022 (docker-php-ext-install DOM failed).
    GD:
    Fixed GH-19955 (imagefttext() memory leak).
    MySQLnd:
    Fixed bug #67563 (mysqli compiled with mysqlnd does not take ipv6 adress as parameter).
    Opcache:
    Fixed bug GH-19669 (assertion failure in zend_jit_trace_type_to_info_ex).
    Fixed bug GH-19831 (function JIT may not deref property value).
    Fixed bug GH-19889 (race condition in zend_runtime_jit(), zend_jit_hot_func()).
    Phar:
    Fix memory leak and invalid continuation after tar header writing fails.
    Fix memory leaks when creating temp file fails when applying zip signature.
    SimpleXML:
    Fixed bug GH-19988 (zend_string_init with NULL pointer in simplexml (UB)).
    Soap:
    Fixed bug GH-19784 (SoapServer memory leak).
    Fixed bug GH-20011 (Array of SoapVar of unknown type causes crash).
    Standard:
    Fixed bug GH-12265 (Cloning an object breaks serialization recursion).
    Fixed bug GH-19701 (Serialize/deserialize loses some data).
    Fixed bug GH-19801 (leaks in var_dump() and debug_zval_dump()).
    Fixed bug GH-20043 (array_unique assertion failure with RC1 array causing an exception on sort).
    Fixed bug GH-19926 (reset internal pointer earlier while splicing array while COW violation flag is still set).
    Fixed bug GH-19570 (unable to fseek in /dev/zero and /dev/null).
    Streams:
    Fixed bug GH-19248 (Use strerror_r instead of strerror in main).
    Fixed bug GH-17345 (Bug #35916 was not completely fixed).
    Fixed bug GH-19705 (segmentation when attempting to flush on non seekable stream.
    XMLReader:
    Fixed bug GH-20009 (XMLReader leak on RelaxNG schema failure).
    Zip:
    Fixed bug GH-19688 (Remove pattern overflow in zip addGlob()).
    Fixed bug GH-19932 (Memory leak in zip setEncryptionName()/setEncryptionIndex()).</changelog>
  <changelog author="pgajdos@suse.com" date="1763640000">- version update to 8.4.15
    Core:
    Fixed bug GH-19934 (CGI with auto_globals_jit=0 causes uouv).
    Fixed bug GH-20073 (Assertion failure in WeakMap offset operations on reference).
    Fixed bug GH-20085 (Assertion failure when combining lazy object get_properties exception with foreach loop).
    Fixed bug GH-19844 (Don't bail when closing resources on shutdown).
    Fixed bug GH-20177 (Accessing overridden private property in get_object_vars() triggers assertion error).
    Fixed bug GH-20270 (Broken parent hook call with named arguments).
    Fixed bug GH-20183 (Stale EG(opline_before_exception) pointer through eval).
    DOM:
    Partially fixed bug GH-16317 (DOM classes do not allow __debugInfo() overrides to work).
    Fixed bug GH-20281 (\Dom\Document::getElementById() is inconsistent after nodes are removed).
    Exif:
    Fix possible memory leak when tag is empty.
    FPM:
    Fixed bug GH-19974 (fpm_status_export_to_zval segfault for parallel execution).
    FTP:
    Fixed bug GH-20240 (FTP with SSL: ftp_fput(): Connection timed out on successful writes).
    GD:
    Fixed bug GH-20070 (Return type violation in imagefilter when an invalid filter is provided).
    Intl:
    Fix memory leak on error in locale_filter_matches().
    LibXML:
    Fix not thread safe schema/relaxng calls.
    MySQLnd:
    Fixed bug GH-8978 (SSL certificate verification fails (port doubled)).
    Fixed bug GH-20122 (getColumnMeta() for JSON-column in MySQL).
    Opcache:
    Fixed bug GH-20081 (access to uninitialized vars in preload_load()).
    Fixed bug GH-20121 (JIT broken in ZTS builds on MacOS 15).
    Fixed bug GH-19875 (JIT 1205 segfault on large file compiled in subprocess).
    Fixed bug GH-20012 (heap buffer overflow in jit).
    Partially fixed bug GH-17733 (Avoid calling wrong function when reusing file caches across differing environments).
    PgSql:
    Fix memory leak when first string conversion fails.
    Fix segfaults when attempting to fetch row into a non-instantiable class name.
    Phar:
    Fix memory leak of argument in webPhar.
    Fix memory leak when setAlias() fails.
    Fix a bunch of memory leaks in phar_parse_zipfile() error handling.
    Fix file descriptor/memory leak when opening central fp fails.
    Fix memleak+UAF when opening temp stream in buildFromDirectory() fails.
    Fix potential buffer length truncation due to usage of type int instead of type size_t.
    Fix memory leak when openssl polyfill returns garbage.
    Fix file descriptor leak in phar_zip_flush() on failure.
    Fix memory leak when opening temp file fails while trying to open gzip-compressed archive.
    Fixed bug GH-20302 (Freeing a phar alias may invalidate PharFileInfo objects).
    Random:
    Fix Randomizer::__serialize() w.r.t. INDIRECTs.
    Reflection:
    Fixed bug GH-20217 (ReflectionClass::isIterable() incorrectly returns true for classes with property hooks).
    SimpleXML:
    Partially fixed bug GH-16317 (SimpleXML does not allow __debugInfo() overrides to work).
    Streams:
    Fixed bug GH-19798: XP_SOCKET XP_SSL (Socket stream modules): Incorrect condition for Win32/Win64.
    Tidy:
    Fixed GH-19021 (improved tidyOptGetCategory detection).
    Fix UAF in tidy when tidySetErrorBuffer() fails.
    XMLReader:
    Fix arginfo/zpp violations when LIBXML_SCHEMAS_ENABLED is not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1766059200">- main package require wwwrun:www user as it assumes it in filelist
  [bsc#1255043]</changelog>
  <changelog author="pgajdos@suse.com" date="1766145600">- version update to 8.4.16
    Core:
    Sync all boost.context files with release 1.86.0.
    Fixed bug GH-20435 (SensitiveParameter doesn't work for named argument passing to variadic parameter).
    Fixed bug GH-20286 (use-after-destroy during userland stream_close()).
    Bz2:
    Fix assertion failures resulting in crashes with stream filter object parameters.
    Date:
    Fix crashes when trying to instantiate uninstantiable classes via date static constructors.
    DOM:
    Fix memory leak when edge case is hit when registering xpath callback.
    Fixed bug GH-20395 (querySelector and querySelectorAll requires elements in $selectors to be lowercase).
    Fix missing NUL byte check on C14NFile().
    Fibers:
    Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI small value).
    FTP:
    Fixed bug GH-20601 (ftp_connect overflow on timeout).
    GD:
    Fixed bug GH-20511 (imagegammacorrect out of range input/output values).
    Fixed bug GH-20602 (imagescale overflow with large height values).
    Intl:
    Fixed bug GH-20426 (Spoofchecker::setRestrictionLevel() error message suggests missing constants).
    LibXML:
    Fix some deprecations on newer libxml versions regarding input buffer/parser handling.
    MbString:
    Fixed bug GH-20491 (SLES15 compile error with mbstring oniguruma).
    Fixed bug GH-20492 (mbstring compile warning due to non-strings).
    MySQLnd:
    Fixed bug GH-20528 (Regression breaks mysql connexion using an IPv6 address enclosed in square brackets).
    Opcache:
    Fixed bug GH-20329 (opcache.file_cache broken with full interned string buffer).
    PDO:
    Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
    Phar:
    Fixed bug GH-20442 (Phar does not respect case-insensitiveness of __halt_compiler() when reading stub).
    Fix broken return value of fflush() for phar file entries.
    Fix assertion failure when fseeking a phar file out of bounds.
    PHPDBG:
    Fixed ZPP type violation in phpdbg_get_executable() and phpdbg_end_oplog().
    SPL:
    Fixed bug GH-20614 (SplFixedArray incorrectly handles references in deserialization).
    Standard:
    Fix memory leak in array_diff() with custom type checks.
    Fixed bug GH-20583 (Stack overflow in http_build_query via deep structures).
    Fixed GHSA-www2-q4fc-65wf (Null byte termination in dns_get_record()).
    Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178)
    Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177)
    Tidy:
    Fixed bug GH-20374 (PHP with tidy and custom-tags).
    XML:
    Fixed bug GH-20439 (xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback).
    Zip:
    Fix crash in property existence test.
    Don't truncate return value of zip_fread() with user sizes.
    Zlib:
    Fix assertion failures resulting in crashes with stream filter object parameters.
- fixes CVE-2025-14178 [bsc#1255711]
    CVE-2025-14180 [bsc#1255712]
    CVE-2025-14177 [bsc#1255710]</changelog>
</package>
<package pkgid="b7dc9b7deeea21958495d28d2b6e4ac35acd91f0ddb0efee12967224838216ac4dfa7656df5944f5cc4aac64ae78329da3871cd83c0ddd44840a504f450a178d" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.4.16" rel="160000.2.1"/>
  <changelog author="pgajdos@suse.com" date="1749211200">- version update to 8.4.8
    Core:
    Fixed GH-18480 (array_splice with large values for offset/length arguments).
    Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
    Fixed OSS-Fuzz #417078295.
    Fixed OSS-Fuzz #418106144.
    Curl:
    Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
    Date:
    Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
    Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
    DOM:
    Backport lexbor/lexbor#274.
    Intl:
    Fix various reference issues.
    LDAP:
    Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
    Opcache:
    Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
    Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
    Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
    Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
    Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
    Fix leak of accel_globals-&gt;key.
    OpenSSL:
    Fix missing checks against php_set_blocking() in xp_ssl.c.
    SPL:
    Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
    Standard:
    Fixed bug GH-17403 (Potential deadlock when putenv fails).
    Fixed bug GH-18400 (http_build_query type error is inaccurate).
    Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
    Windows:
    Fix leak+crash with sapi_windows_set_ctrl_handler().
    Zip:
    Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
    Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).</changelog>
  <changelog author="pgajdos@suse.com" date="1751544000">- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
    BcMath:
    Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
    Core:
    Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
    Fixed GH-18695 (zend_ast_export() - float number is not preserved).
    Fix handling of references in zval_try_get_long().
    Do not delete main chunk in zend_gc.
    Fix compile issues with zend_alloc and some non-default options.
    Curl:
    Fix memory leak when setting a list via curl_setopt fails.
    Date:
    Fix leaks with multiple calls to DatePeriod iterator current().
    DOM:
    Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
    FPM:
    Fixed GH-18662 (fpm_get_status segfault).
    Hash:
    Fixed bug GH-14551 (PGO build fails with xxhash).
    Intl:
    Fix memory leak in intl_datetime_decompose() on failure.
    Fix memory leak in locale lookup on failure.
    Opcache:
    Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
    ODBC:
    Fix memory leak on php_odbc_fetch_hash() failure.
    OpenSSL:
    Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
    Fixed bug #74796 (Requests through http proxy set peer name).
    PGSQL:
    Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
    Fix warning not being emitted when failure to cancel a query with pg_cancel_query().
    PDO ODBC:
    Fix memory leak if WideCharToMultiByte() fails.
    PDO Sqlite:
    Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
    Phar:
    Add missing filter cleanups on phar failure.
    Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek).
    PHPDBG:
    Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.
    Random:
    Fix reference type confusion and leak in user random engine.
    Readline:
    Fix memory leak when calloc() fails in php_readline_completion_cb().
    SimpleXML:
    Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).
    SOAP:
    Fix memory leaks in php_http.c when call_user_function() fails.
    Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
    Standard:
    Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
    Tidy:
    Fix memory leak in tidy output handler on error.
    Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1754654400">- version update to 8.4.11
    Calendar:
    Fixed jewishtojd overflow on year argument.
    Core:
    Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
    Fixed bug GH-18907 (Leak when creating cycle in hook).
    Fix OSS-Fuzz #427814456.
    Fix OSS-Fuzz #428983568 and #428760800.
    Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c).
    Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64).
    Curl:
    Fix memory leaks when returning refcounted value from curl callback.
    Remove incorrect string release.
    DOM:
    Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte).
    LDAP:
    Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
    MbString:
    Fixed bug GH-18901 (integer overflow mb_split).
    Opcache:
    Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
    Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet).
    Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
    Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading).
    OpenSSL:
    Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
    PCNTL:
    Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
    Phar:
    Fix stream double free in phar.
    Fix phar crash and file corruption with SplFileObject.
    SOAP:
    Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction).
    Fix memory leak when URL parsing fails in redirect.
    SPL:
    Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
    Standard:
    Fix misleading errors in printf().
    Fix RCN violations in array functions.
    Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
    Streams:
    Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
    Zip:
    Fix leak when path is too long in ZipArchive::extractTo().</changelog>
  <changelog author="pgajdos@suse.com" date="1756382400">- version update to 8.4.12
    Core:
    Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro.
    Fixed bug GH-19053 (Duplicate property slot with hooks and interface property).
    Fixed bug GH-19044 (Protected properties are not scoped according to their prototype).
    Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking).
    Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr).
    Fixed bug GH-19305 (Operands may be being released during comparison).
    Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure).
    Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator).
    Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes).
    Fixed bug GH-19280 (Stale array iterator position on rehashing).
    Fixed bug GH-18736 (Circumvented type check with return by ref + finally).
    Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming).
    Calendar:
    Fixed bug GH-19371 (integer overflow in calendar.c).
    FTP:
    Fix theoretical issues with hrtime() not being available.
    GD:
    Fix incorrect comparison with result of php_stream_can_cast().
    Hash:
    Fix crash on clone failure.
    Intl:
    Fix memleak on failure in collator_get_sort_key().
    Fix return value on failure for resourcebundle count handler.
    LDAP:
    Fixed bug GH-18529 (additional inheriting of TLS int options).
    LibXML:
    Fixed bug GH-19098 (libxml&lt;2.13 segmentation fault caused by php_libxml_node_free).
    MbString:
    Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown).
    Opcache:
    Reset global pointers to prevent use-after-free in zend_jit_status().
    Fix issue with JIT restart and hooks.
    Fix crash with dynamic function defs in hooks during preload.
    OpenSSL:
    Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check).
    Fix error return check of EVP_CIPHER_CTX_ctrl().
    Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param).
    PDO Pgsql:
    Fixed dangling pointer access on _pdo_pgsql_trim_message helper.
    SOAP:
    Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref).
    Sockets:
    Fix some potential crashes on incorrect argument value.
    Standard:
    Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache).
    Fix theoretical issues with hrtime() not being available.
    Fixed bug GH-19300 (Nested array_multisort invocation with error breaks).
    Windows:
    Free opened_path when opened_path_len &gt;= MAXPATHLEN.</changelog>
  <changelog author="pgajdos@suse.com" date="1758888000">- version update to 8.4.13
    Core:
    Fixed bug GH-18850 (Repeated inclusion of file with __halt_compiler() triggers "Constant already defined" warning).
    Partially fixed bug GH-19542 (Scanning of string literals &gt;=2GB will fail due to signed int overflow).
    Fixed bug GH-19544 (GC treats ZEND_WEAKREF_TAG_MAP references as WeakMap references).
    Fixed bug GH-19613 (Stale array iterator pointer).
    Fixed bug GH-19679 (zend_ssa_range_widening may fail to converge).
    Fixed bug GH-19681 (PHP_EXPAND_PATH broken with bash 5.3.0).
    Fixed bug GH-19720 (Assertion failure when error handler throws when accessing a deprecated constant).
    CLI:
    Fixed bug GH-19461 (Improve error message on listening error with IPv6 address).
    Date:
    Fixed date_sunrise() and date_sunset() with partial-hour UTC offset.
    DBA:
    Fixed bug GH-19706 (dba stream resource mismanagement).
    DOM:
    Fixed bug GH-19612 (Mitigate libxml2 tree dictionary bug).
    FPM:
    Fixed failed debug assertion when php_admin_value setting fails.
    Intl:
    Fixed bug GH-11952 (Fix locale strings canonicalization for IntlDateFormatter and NumberFormatter).
    Opcache:
    Fixed bug GH-19493 (JIT variable not stored before YIELD).
    OpenSSL:
    Fixed bug GH-19245 (Success error message on TLS stream accept failure).
    PGSQL:
    Fixed bug GH-19485 (potential use after free when using persistent pgsql connections).
    Phar:
    Fixed memory leaks when verifying OpenSSL signature.
    Fix memory leak in phar tar temporary file error handling code.
    Fix metadata leak when phar convert logic fails.
    Fix memory leak on failure in phar_convert_to_other().
    Fixed bug GH-19752 (Phar decompression with invalid extension can cause UAF).
    Standard:
    Fixed bug GH-16649 (UAF during array_splice).
    Fixed bug GH-19577 (Avoid integer overflow when using a small offset and PHP_INT_MAX with LimitIterator).
    Streams:
    Remove incorrect call to zval_ptr_dtor() in user_wrapper_metadata().
    Fix OSS-Fuzz #385993744.
    Zip:
    Fix memory leak in zip when encountering empty glob result.</changelog>
  <changelog author="suse+build@de-korte.org" date="1761220800">- version update to 8.4.14
    Core:
    Fixed bug GH-19765 (object_properties_load() bypasses readonly property checks).
    Fixed hard_timeout with --enable-zend-max-execution-timers.
    Fixed bug GH-19792 (SCCP causes UAF for return value if both warning and exception are triggered).
    Fixed bug GH-19653 (Closure named argument unpacking between temporary closures can cause a crash).
    Fixed bug GH-19839 (Incorrect HASH_FLAG_HAS_EMPTY_IND flag on userland array).
    Fixed bug GH-19480 (error_log php.ini cannot be unset when open_basedir is configured).
    Fixed bug GH-20002 (Broken build on *BSD with MSAN).
    CLI:
    Fix useless "Failed to poll event" error logs due to EAGAIN in CLI server with PHP_CLI_SERVER_WORKERS.
    Curl:
    Fix cloning of CURLOPT_POSTFIELDS when using the clone operator instead of the curl_copy_handle() function to clone a CurlHandle.
    Fix curl build and test failures with version 8.16.
    Date:
    Fixed GH-17159: "P" format for ::createFromFormat swallows string literals.
    DOM:
    Fix macro name clash on macOS.
    Fixed bug GH-20022 (docker-php-ext-install DOM failed).
    GD:
    Fixed GH-19955 (imagefttext() memory leak).
    MySQLnd:
    Fixed bug #67563 (mysqli compiled with mysqlnd does not take ipv6 adress as parameter).
    Opcache:
    Fixed bug GH-19669 (assertion failure in zend_jit_trace_type_to_info_ex).
    Fixed bug GH-19831 (function JIT may not deref property value).
    Fixed bug GH-19889 (race condition in zend_runtime_jit(), zend_jit_hot_func()).
    Phar:
    Fix memory leak and invalid continuation after tar header writing fails.
    Fix memory leaks when creating temp file fails when applying zip signature.
    SimpleXML:
    Fixed bug GH-19988 (zend_string_init with NULL pointer in simplexml (UB)).
    Soap:
    Fixed bug GH-19784 (SoapServer memory leak).
    Fixed bug GH-20011 (Array of SoapVar of unknown type causes crash).
    Standard:
    Fixed bug GH-12265 (Cloning an object breaks serialization recursion).
    Fixed bug GH-19701 (Serialize/deserialize loses some data).
    Fixed bug GH-19801 (leaks in var_dump() and debug_zval_dump()).
    Fixed bug GH-20043 (array_unique assertion failure with RC1 array causing an exception on sort).
    Fixed bug GH-19926 (reset internal pointer earlier while splicing array while COW violation flag is still set).
    Fixed bug GH-19570 (unable to fseek in /dev/zero and /dev/null).
    Streams:
    Fixed bug GH-19248 (Use strerror_r instead of strerror in main).
    Fixed bug GH-17345 (Bug #35916 was not completely fixed).
    Fixed bug GH-19705 (segmentation when attempting to flush on non seekable stream.
    XMLReader:
    Fixed bug GH-20009 (XMLReader leak on RelaxNG schema failure).
    Zip:
    Fixed bug GH-19688 (Remove pattern overflow in zip addGlob()).
    Fixed bug GH-19932 (Memory leak in zip setEncryptionName()/setEncryptionIndex()).</changelog>
  <changelog author="pgajdos@suse.com" date="1763640000">- version update to 8.4.15
    Core:
    Fixed bug GH-19934 (CGI with auto_globals_jit=0 causes uouv).
    Fixed bug GH-20073 (Assertion failure in WeakMap offset operations on reference).
    Fixed bug GH-20085 (Assertion failure when combining lazy object get_properties exception with foreach loop).
    Fixed bug GH-19844 (Don't bail when closing resources on shutdown).
    Fixed bug GH-20177 (Accessing overridden private property in get_object_vars() triggers assertion error).
    Fixed bug GH-20270 (Broken parent hook call with named arguments).
    Fixed bug GH-20183 (Stale EG(opline_before_exception) pointer through eval).
    DOM:
    Partially fixed bug GH-16317 (DOM classes do not allow __debugInfo() overrides to work).
    Fixed bug GH-20281 (\Dom\Document::getElementById() is inconsistent after nodes are removed).
    Exif:
    Fix possible memory leak when tag is empty.
    FPM:
    Fixed bug GH-19974 (fpm_status_export_to_zval segfault for parallel execution).
    FTP:
    Fixed bug GH-20240 (FTP with SSL: ftp_fput(): Connection timed out on successful writes).
    GD:
    Fixed bug GH-20070 (Return type violation in imagefilter when an invalid filter is provided).
    Intl:
    Fix memory leak on error in locale_filter_matches().
    LibXML:
    Fix not thread safe schema/relaxng calls.
    MySQLnd:
    Fixed bug GH-8978 (SSL certificate verification fails (port doubled)).
    Fixed bug GH-20122 (getColumnMeta() for JSON-column in MySQL).
    Opcache:
    Fixed bug GH-20081 (access to uninitialized vars in preload_load()).
    Fixed bug GH-20121 (JIT broken in ZTS builds on MacOS 15).
    Fixed bug GH-19875 (JIT 1205 segfault on large file compiled in subprocess).
    Fixed bug GH-20012 (heap buffer overflow in jit).
    Partially fixed bug GH-17733 (Avoid calling wrong function when reusing file caches across differing environments).
    PgSql:
    Fix memory leak when first string conversion fails.
    Fix segfaults when attempting to fetch row into a non-instantiable class name.
    Phar:
    Fix memory leak of argument in webPhar.
    Fix memory leak when setAlias() fails.
    Fix a bunch of memory leaks in phar_parse_zipfile() error handling.
    Fix file descriptor/memory leak when opening central fp fails.
    Fix memleak+UAF when opening temp stream in buildFromDirectory() fails.
    Fix potential buffer length truncation due to usage of type int instead of type size_t.
    Fix memory leak when openssl polyfill returns garbage.
    Fix file descriptor leak in phar_zip_flush() on failure.
    Fix memory leak when opening temp file fails while trying to open gzip-compressed archive.
    Fixed bug GH-20302 (Freeing a phar alias may invalidate PharFileInfo objects).
    Random:
    Fix Randomizer::__serialize() w.r.t. INDIRECTs.
    Reflection:
    Fixed bug GH-20217 (ReflectionClass::isIterable() incorrectly returns true for classes with property hooks).
    SimpleXML:
    Partially fixed bug GH-16317 (SimpleXML does not allow __debugInfo() overrides to work).
    Streams:
    Fixed bug GH-19798: XP_SOCKET XP_SSL (Socket stream modules): Incorrect condition for Win32/Win64.
    Tidy:
    Fixed GH-19021 (improved tidyOptGetCategory detection).
    Fix UAF in tidy when tidySetErrorBuffer() fails.
    XMLReader:
    Fix arginfo/zpp violations when LIBXML_SCHEMAS_ENABLED is not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1766059200">- main package require wwwrun:www user as it assumes it in filelist
  [bsc#1255043]</changelog>
  <changelog author="pgajdos@suse.com" date="1766145600">- version update to 8.4.16
    Core:
    Sync all boost.context files with release 1.86.0.
    Fixed bug GH-20435 (SensitiveParameter doesn't work for named argument passing to variadic parameter).
    Fixed bug GH-20286 (use-after-destroy during userland stream_close()).
    Bz2:
    Fix assertion failures resulting in crashes with stream filter object parameters.
    Date:
    Fix crashes when trying to instantiate uninstantiable classes via date static constructors.
    DOM:
    Fix memory leak when edge case is hit when registering xpath callback.
    Fixed bug GH-20395 (querySelector and querySelectorAll requires elements in $selectors to be lowercase).
    Fix missing NUL byte check on C14NFile().
    Fibers:
    Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI small value).
    FTP:
    Fixed bug GH-20601 (ftp_connect overflow on timeout).
    GD:
    Fixed bug GH-20511 (imagegammacorrect out of range input/output values).
    Fixed bug GH-20602 (imagescale overflow with large height values).
    Intl:
    Fixed bug GH-20426 (Spoofchecker::setRestrictionLevel() error message suggests missing constants).
    LibXML:
    Fix some deprecations on newer libxml versions regarding input buffer/parser handling.
    MbString:
    Fixed bug GH-20491 (SLES15 compile error with mbstring oniguruma).
    Fixed bug GH-20492 (mbstring compile warning due to non-strings).
    MySQLnd:
    Fixed bug GH-20528 (Regression breaks mysql connexion using an IPv6 address enclosed in square brackets).
    Opcache:
    Fixed bug GH-20329 (opcache.file_cache broken with full interned string buffer).
    PDO:
    Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
    Phar:
    Fixed bug GH-20442 (Phar does not respect case-insensitiveness of __halt_compiler() when reading stub).
    Fix broken return value of fflush() for phar file entries.
    Fix assertion failure when fseeking a phar file out of bounds.
    PHPDBG:
    Fixed ZPP type violation in phpdbg_get_executable() and phpdbg_end_oplog().
    SPL:
    Fixed bug GH-20614 (SplFixedArray incorrectly handles references in deserialization).
    Standard:
    Fix memory leak in array_diff() with custom type checks.
    Fixed bug GH-20583 (Stack overflow in http_build_query via deep structures).
    Fixed GHSA-www2-q4fc-65wf (Null byte termination in dns_get_record()).
    Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178)
    Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177)
    Tidy:
    Fixed bug GH-20374 (PHP with tidy and custom-tags).
    XML:
    Fixed bug GH-20439 (xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback).
    Zip:
    Fix crash in property existence test.
    Don't truncate return value of zip_fread() with user sizes.
    Zlib:
    Fix assertion failures resulting in crashes with stream filter object parameters.
- fixes CVE-2025-14178 [bsc#1255711]
    CVE-2025-14180 [bsc#1255712]
    CVE-2025-14177 [bsc#1255710]</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- remove incorrect patch [bsc#1256905]
- deleted patches
  * php-sort-filelist-phar.patch</changelog>
</package>
<package pkgid="a01058785a2b19de130ed7e1c5781041d9a6dd4d017b44c4d6e72e3c73e7193f44967f5344d7f556d7337424a0aef38f911a69057235c737a27830d0bb911fcf" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.4.21" rel="160000.1.1"/>
  <changelog author="pgajdos@suse.com" date="1751544000">- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
    BcMath:
    Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
    Core:
    Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
    Fixed GH-18695 (zend_ast_export() - float number is not preserved).
    Fix handling of references in zval_try_get_long().
    Do not delete main chunk in zend_gc.
    Fix compile issues with zend_alloc and some non-default options.
    Curl:
    Fix memory leak when setting a list via curl_setopt fails.
    Date:
    Fix leaks with multiple calls to DatePeriod iterator current().
    DOM:
    Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
    FPM:
    Fixed GH-18662 (fpm_get_status segfault).
    Hash:
    Fixed bug GH-14551 (PGO build fails with xxhash).
    Intl:
    Fix memory leak in intl_datetime_decompose() on failure.
    Fix memory leak in locale lookup on failure.
    Opcache:
    Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
    ODBC:
    Fix memory leak on php_odbc_fetch_hash() failure.
    OpenSSL:
    Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
    Fixed bug #74796 (Requests through http proxy set peer name).
    PGSQL:
    Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
    Fix warning not being emitted when failure to cancel a query with pg_cancel_query().
    PDO ODBC:
    Fix memory leak if WideCharToMultiByte() fails.
    PDO Sqlite:
    Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
    Phar:
    Add missing filter cleanups on phar failure.
    Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek).
    PHPDBG:
    Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.
    Random:
    Fix reference type confusion and leak in user random engine.
    Readline:
    Fix memory leak when calloc() fails in php_readline_completion_cb().
    SimpleXML:
    Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).
    SOAP:
    Fix memory leaks in php_http.c when call_user_function() fails.
    Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
    Standard:
    Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
    Tidy:
    Fix memory leak in tidy output handler on error.
    Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
- modified patches
  % php-build-reproducible-phar.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1754654400">- version update to 8.4.11
    Calendar:
    Fixed jewishtojd overflow on year argument.
    Core:
    Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
    Fixed bug GH-18907 (Leak when creating cycle in hook).
    Fix OSS-Fuzz #427814456.
    Fix OSS-Fuzz #428983568 and #428760800.
    Fixed bug GH-17204 (-Wuseless-escape warnings emitted by re2c).
    Fixed bug GH-19064 (Undefined symbol 'execute_ex' on Windows ARM64).
    Curl:
    Fix memory leaks when returning refcounted value from curl callback.
    Remove incorrect string release.
    DOM:
    Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte).
    LDAP:
    Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
    MbString:
    Fixed bug GH-18901 (integer overflow mb_split).
    Opcache:
    Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
    Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet).
    Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
    Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading).
    OpenSSL:
    Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
    PCNTL:
    Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
    Phar:
    Fix stream double free in phar.
    Fix phar crash and file corruption with SplFileObject.
    SOAP:
    Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction).
    Fix memory leak when URL parsing fails in redirect.
    SPL:
    Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
    Standard:
    Fix misleading errors in printf().
    Fix RCN violations in array functions.
    Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
    Streams:
    Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
    Zip:
    Fix leak when path is too long in ZipArchive::extractTo().</changelog>
  <changelog author="pgajdos@suse.com" date="1756382400">- version update to 8.4.12
    Core:
    Fixed GH-19169 build issue with C++17 and ZEND_STATIC_ASSERT macro.
    Fixed bug GH-19053 (Duplicate property slot with hooks and interface property).
    Fixed bug GH-19044 (Protected properties are not scoped according to their prototype).
    Fixed bug GH-18581 (Coerce numeric string keys from iterators when argument unpacking).
    Fixed OSS-Fuzz #434346548 (Failed assertion with throwing __toString in binary const expr).
    Fixed bug GH-19305 (Operands may be being released during comparison).
    Fixed bug GH-19303 (Unpacking empty packed array into uninitialized array causes assertion failure).
    Fixed bug GH-19306 (Generator can be resumed while fetching next value from delegated Generator).
    Fixed bug GH-19326 (Calling Generator::throw() on a running generator with a non-Generator delegate crashes).
    Fixed bug GH-19280 (Stale array iterator position on rehashing).
    Fixed bug GH-18736 (Circumvented type check with return by ref + finally).
    Fixed bug GH-19065 (Long match statement can segfault compiler during recursive SSA renaming).
    Calendar:
    Fixed bug GH-19371 (integer overflow in calendar.c).
    FTP:
    Fix theoretical issues with hrtime() not being available.
    GD:
    Fix incorrect comparison with result of php_stream_can_cast().
    Hash:
    Fix crash on clone failure.
    Intl:
    Fix memleak on failure in collator_get_sort_key().
    Fix return value on failure for resourcebundle count handler.
    LDAP:
    Fixed bug GH-18529 (additional inheriting of TLS int options).
    LibXML:
    Fixed bug GH-19098 (libxml&lt;2.13 segmentation fault caused by php_libxml_node_free).
    MbString:
    Fixed bug GH-19397 (mb_list_encodings() can cause crashes on shutdown).
    Opcache:
    Reset global pointers to prevent use-after-free in zend_jit_status().
    Fix issue with JIT restart and hooks.
    Fix crash with dynamic function defs in hooks during preload.
    OpenSSL:
    Fixed bug GH-18986 (OpenSSL backend: incorrect RAND_{load,write}_file() return value check).
    Fix error return check of EVP_CIPHER_CTX_ctrl().
    Fixed bug GH-19428 (openssl_pkey_derive segfaults for DH derive with low key_length param).
    PDO Pgsql:
    Fixed dangling pointer access on _pdo_pgsql_trim_message helper.
    SOAP:
    Fixed bug GH-18640 (heap-use-after-free ext/soap/php_encoding.c:299:32 in soap_check_zval_ref).
    Sockets:
    Fix some potential crashes on incorrect argument value.
    Standard:
    Fixed OSS Fuzz #433303828 (Leak in failed unserialize() with opcache).
    Fix theoretical issues with hrtime() not being available.
    Fixed bug GH-19300 (Nested array_multisort invocation with error breaks).
    Windows:
    Free opened_path when opened_path_len &gt;= MAXPATHLEN.</changelog>
  <changelog author="pgajdos@suse.com" date="1758888000">- version update to 8.4.13
    Core:
    Fixed bug GH-18850 (Repeated inclusion of file with __halt_compiler() triggers "Constant already defined" warning).
    Partially fixed bug GH-19542 (Scanning of string literals &gt;=2GB will fail due to signed int overflow).
    Fixed bug GH-19544 (GC treats ZEND_WEAKREF_TAG_MAP references as WeakMap references).
    Fixed bug GH-19613 (Stale array iterator pointer).
    Fixed bug GH-19679 (zend_ssa_range_widening may fail to converge).
    Fixed bug GH-19681 (PHP_EXPAND_PATH broken with bash 5.3.0).
    Fixed bug GH-19720 (Assertion failure when error handler throws when accessing a deprecated constant).
    CLI:
    Fixed bug GH-19461 (Improve error message on listening error with IPv6 address).
    Date:
    Fixed date_sunrise() and date_sunset() with partial-hour UTC offset.
    DBA:
    Fixed bug GH-19706 (dba stream resource mismanagement).
    DOM:
    Fixed bug GH-19612 (Mitigate libxml2 tree dictionary bug).
    FPM:
    Fixed failed debug assertion when php_admin_value setting fails.
    Intl:
    Fixed bug GH-11952 (Fix locale strings canonicalization for IntlDateFormatter and NumberFormatter).
    Opcache:
    Fixed bug GH-19493 (JIT variable not stored before YIELD).
    OpenSSL:
    Fixed bug GH-19245 (Success error message on TLS stream accept failure).
    PGSQL:
    Fixed bug GH-19485 (potential use after free when using persistent pgsql connections).
    Phar:
    Fixed memory leaks when verifying OpenSSL signature.
    Fix memory leak in phar tar temporary file error handling code.
    Fix metadata leak when phar convert logic fails.
    Fix memory leak on failure in phar_convert_to_other().
    Fixed bug GH-19752 (Phar decompression with invalid extension can cause UAF).
    Standard:
    Fixed bug GH-16649 (UAF during array_splice).
    Fixed bug GH-19577 (Avoid integer overflow when using a small offset and PHP_INT_MAX with LimitIterator).
    Streams:
    Remove incorrect call to zval_ptr_dtor() in user_wrapper_metadata().
    Fix OSS-Fuzz #385993744.
    Zip:
    Fix memory leak in zip when encountering empty glob result.</changelog>
  <changelog author="suse+build@de-korte.org" date="1761220800">- version update to 8.4.14
    Core:
    Fixed bug GH-19765 (object_properties_load() bypasses readonly property checks).
    Fixed hard_timeout with --enable-zend-max-execution-timers.
    Fixed bug GH-19792 (SCCP causes UAF for return value if both warning and exception are triggered).
    Fixed bug GH-19653 (Closure named argument unpacking between temporary closures can cause a crash).
    Fixed bug GH-19839 (Incorrect HASH_FLAG_HAS_EMPTY_IND flag on userland array).
    Fixed bug GH-19480 (error_log php.ini cannot be unset when open_basedir is configured).
    Fixed bug GH-20002 (Broken build on *BSD with MSAN).
    CLI:
    Fix useless "Failed to poll event" error logs due to EAGAIN in CLI server with PHP_CLI_SERVER_WORKERS.
    Curl:
    Fix cloning of CURLOPT_POSTFIELDS when using the clone operator instead of the curl_copy_handle() function to clone a CurlHandle.
    Fix curl build and test failures with version 8.16.
    Date:
    Fixed GH-17159: "P" format for ::createFromFormat swallows string literals.
    DOM:
    Fix macro name clash on macOS.
    Fixed bug GH-20022 (docker-php-ext-install DOM failed).
    GD:
    Fixed GH-19955 (imagefttext() memory leak).
    MySQLnd:
    Fixed bug #67563 (mysqli compiled with mysqlnd does not take ipv6 adress as parameter).
    Opcache:
    Fixed bug GH-19669 (assertion failure in zend_jit_trace_type_to_info_ex).
    Fixed bug GH-19831 (function JIT may not deref property value).
    Fixed bug GH-19889 (race condition in zend_runtime_jit(), zend_jit_hot_func()).
    Phar:
    Fix memory leak and invalid continuation after tar header writing fails.
    Fix memory leaks when creating temp file fails when applying zip signature.
    SimpleXML:
    Fixed bug GH-19988 (zend_string_init with NULL pointer in simplexml (UB)).
    Soap:
    Fixed bug GH-19784 (SoapServer memory leak).
    Fixed bug GH-20011 (Array of SoapVar of unknown type causes crash).
    Standard:
    Fixed bug GH-12265 (Cloning an object breaks serialization recursion).
    Fixed bug GH-19701 (Serialize/deserialize loses some data).
    Fixed bug GH-19801 (leaks in var_dump() and debug_zval_dump()).
    Fixed bug GH-20043 (array_unique assertion failure with RC1 array causing an exception on sort).
    Fixed bug GH-19926 (reset internal pointer earlier while splicing array while COW violation flag is still set).
    Fixed bug GH-19570 (unable to fseek in /dev/zero and /dev/null).
    Streams:
    Fixed bug GH-19248 (Use strerror_r instead of strerror in main).
    Fixed bug GH-17345 (Bug #35916 was not completely fixed).
    Fixed bug GH-19705 (segmentation when attempting to flush on non seekable stream.
    XMLReader:
    Fixed bug GH-20009 (XMLReader leak on RelaxNG schema failure).
    Zip:
    Fixed bug GH-19688 (Remove pattern overflow in zip addGlob()).
    Fixed bug GH-19932 (Memory leak in zip setEncryptionName()/setEncryptionIndex()).</changelog>
  <changelog author="pgajdos@suse.com" date="1763640000">- version update to 8.4.15
    Core:
    Fixed bug GH-19934 (CGI with auto_globals_jit=0 causes uouv).
    Fixed bug GH-20073 (Assertion failure in WeakMap offset operations on reference).
    Fixed bug GH-20085 (Assertion failure when combining lazy object get_properties exception with foreach loop).
    Fixed bug GH-19844 (Don't bail when closing resources on shutdown).
    Fixed bug GH-20177 (Accessing overridden private property in get_object_vars() triggers assertion error).
    Fixed bug GH-20270 (Broken parent hook call with named arguments).
    Fixed bug GH-20183 (Stale EG(opline_before_exception) pointer through eval).
    DOM:
    Partially fixed bug GH-16317 (DOM classes do not allow __debugInfo() overrides to work).
    Fixed bug GH-20281 (\Dom\Document::getElementById() is inconsistent after nodes are removed).
    Exif:
    Fix possible memory leak when tag is empty.
    FPM:
    Fixed bug GH-19974 (fpm_status_export_to_zval segfault for parallel execution).
    FTP:
    Fixed bug GH-20240 (FTP with SSL: ftp_fput(): Connection timed out on successful writes).
    GD:
    Fixed bug GH-20070 (Return type violation in imagefilter when an invalid filter is provided).
    Intl:
    Fix memory leak on error in locale_filter_matches().
    LibXML:
    Fix not thread safe schema/relaxng calls.
    MySQLnd:
    Fixed bug GH-8978 (SSL certificate verification fails (port doubled)).
    Fixed bug GH-20122 (getColumnMeta() for JSON-column in MySQL).
    Opcache:
    Fixed bug GH-20081 (access to uninitialized vars in preload_load()).
    Fixed bug GH-20121 (JIT broken in ZTS builds on MacOS 15).
    Fixed bug GH-19875 (JIT 1205 segfault on large file compiled in subprocess).
    Fixed bug GH-20012 (heap buffer overflow in jit).
    Partially fixed bug GH-17733 (Avoid calling wrong function when reusing file caches across differing environments).
    PgSql:
    Fix memory leak when first string conversion fails.
    Fix segfaults when attempting to fetch row into a non-instantiable class name.
    Phar:
    Fix memory leak of argument in webPhar.
    Fix memory leak when setAlias() fails.
    Fix a bunch of memory leaks in phar_parse_zipfile() error handling.
    Fix file descriptor/memory leak when opening central fp fails.
    Fix memleak+UAF when opening temp stream in buildFromDirectory() fails.
    Fix potential buffer length truncation due to usage of type int instead of type size_t.
    Fix memory leak when openssl polyfill returns garbage.
    Fix file descriptor leak in phar_zip_flush() on failure.
    Fix memory leak when opening temp file fails while trying to open gzip-compressed archive.
    Fixed bug GH-20302 (Freeing a phar alias may invalidate PharFileInfo objects).
    Random:
    Fix Randomizer::__serialize() w.r.t. INDIRECTs.
    Reflection:
    Fixed bug GH-20217 (ReflectionClass::isIterable() incorrectly returns true for classes with property hooks).
    SimpleXML:
    Partially fixed bug GH-16317 (SimpleXML does not allow __debugInfo() overrides to work).
    Streams:
    Fixed bug GH-19798: XP_SOCKET XP_SSL (Socket stream modules): Incorrect condition for Win32/Win64.
    Tidy:
    Fixed GH-19021 (improved tidyOptGetCategory detection).
    Fix UAF in tidy when tidySetErrorBuffer() fails.
    XMLReader:
    Fix arginfo/zpp violations when LIBXML_SCHEMAS_ENABLED is not available.</changelog>
  <changelog author="pgajdos@suse.com" date="1766059200">- main package require wwwrun:www user as it assumes it in filelist
  [bsc#1255043]</changelog>
  <changelog author="pgajdos@suse.com" date="1766145600">- version update to 8.4.16
    Core:
    Sync all boost.context files with release 1.86.0.
    Fixed bug GH-20435 (SensitiveParameter doesn't work for named argument passing to variadic parameter).
    Fixed bug GH-20286 (use-after-destroy during userland stream_close()).
    Bz2:
    Fix assertion failures resulting in crashes with stream filter object parameters.
    Date:
    Fix crashes when trying to instantiate uninstantiable classes via date static constructors.
    DOM:
    Fix memory leak when edge case is hit when registering xpath callback.
    Fixed bug GH-20395 (querySelector and querySelectorAll requires elements in $selectors to be lowercase).
    Fix missing NUL byte check on C14NFile().
    Fibers:
    Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI small value).
    FTP:
    Fixed bug GH-20601 (ftp_connect overflow on timeout).
    GD:
    Fixed bug GH-20511 (imagegammacorrect out of range input/output values).
    Fixed bug GH-20602 (imagescale overflow with large height values).
    Intl:
    Fixed bug GH-20426 (Spoofchecker::setRestrictionLevel() error message suggests missing constants).
    LibXML:
    Fix some deprecations on newer libxml versions regarding input buffer/parser handling.
    MbString:
    Fixed bug GH-20491 (SLES15 compile error with mbstring oniguruma).
    Fixed bug GH-20492 (mbstring compile warning due to non-strings).
    MySQLnd:
    Fixed bug GH-20528 (Regression breaks mysql connexion using an IPv6 address enclosed in square brackets).
    Opcache:
    Fixed bug GH-20329 (opcache.file_cache broken with full interned string buffer).
    PDO:
    Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
    Phar:
    Fixed bug GH-20442 (Phar does not respect case-insensitiveness of __halt_compiler() when reading stub).
    Fix broken return value of fflush() for phar file entries.
    Fix assertion failure when fseeking a phar file out of bounds.
    PHPDBG:
    Fixed ZPP type violation in phpdbg_get_executable() and phpdbg_end_oplog().
    SPL:
    Fixed bug GH-20614 (SplFixedArray incorrectly handles references in deserialization).
    Standard:
    Fix memory leak in array_diff() with custom type checks.
    Fixed bug GH-20583 (Stack overflow in http_build_query via deep structures).
    Fixed GHSA-www2-q4fc-65wf (Null byte termination in dns_get_record()).
    Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178)
    Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177)
    Tidy:
    Fixed bug GH-20374 (PHP with tidy and custom-tags).
    XML:
    Fixed bug GH-20439 (xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback).
    Zip:
    Fix crash in property existence test.
    Don't truncate return value of zip_fread() with user sizes.
    Zlib:
    Fix assertion failures resulting in crashes with stream filter object parameters.
- fixes CVE-2025-14178 [bsc#1255711]
    CVE-2025-14180 [bsc#1255712]
    CVE-2025-14177 [bsc#1255710]</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- remove incorrect patch [bsc#1256905]
- deleted patches
  * php-sort-filelist-phar.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1778587200">- version update to 8.4.21
    Core:
    Fixed bug GH-19983 (GC assertion failure with fibers, generators and destructors).
    Fixed bug GH-21478 (Forward property operations to real instance for initialized lazy proxies).
    Fixed bug GH-21605 (Missing addref for Countable::count()).
    Fixed bug GH-21699 (Assertion failure in shutdown_executor when resolving self::/parent::/static:: callables if the error handler throws).
    Fixed bug GH-21603 (Missing addref for __unset).
    Fixed bug GH-21760 (Trait with class constant name conflict against enum case causes SEGV).
    CLI:
    Fixed bug GH-21754 (`--rf` command line option with a method triggers ext/reflection deprecation warnings).
    Curl:
    Add support for brotli and zstd on Windows.
    DOM:
    Fixed GHSA-4jhr-8w89-j733 and GH-21566 (Dom\XMLDocument::C14N() emits duplicate xmlns declarations after setAttributeNS()). (CVE-2026-7263)
    Fixed bug GH-21688 (segmentation fault on empty HTMLDocument).
    Upgrade to lexbor v2.7.0.
    FPM:
    Fixed GHSA-7qg2-v9fj-4mwv (XSS within status endpoint). (CVE-2026-6735)
    Iconv:
    Fixed bug GH-17399 (iconv memory leak on bailout).
    MBString:
    Fixed GHSA-wm6j-2649-pv75 (Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()). (CVE-2026-7259)
    Fixed GHSA-74r9-qxhc-fx53 (Out-of-bounds access in mbfl_name2encoding_ex()). (CVE-2026-6104)
    Opcache:
    Fixed bug GH-21158 (JIT: Assertion jit-&gt;ra[var].flags &amp; (1&lt;&lt;0) failed in zend_jit_use_reg).
    Fixed bug GH-21593 (Borked function JIT JMPNZ smart branch).
    Fixed bug GH-21460 (COND optimization regression).
    Fixed faulty returns out of zend_try block in zend_jit_trace().
    OpenSSL:
    Fix a bunch of memory leaks and crashes on edge cases.
    PDO_Firebird:
    Fixed GHSA-w476-322c-wpvm (SQL injection via NUL bytes in quoted strings). (CVE-2025-14179)
    Phar:
    Restore is_link handler in phar_intercept_functions_shutdown.
    Fixed bug GH-21797 (phar: NULL dereference in Phar::webPhar() when SCRIPT_NAME is absent from SAPI environment).
    Fix memory leak in Phar::offsetGet().
    Fix memory leak in phar_add_file().
    Fixed bug GH-21799 (phar: propagate phar_stream_flush return value from phar_stream_close).
    Fix memory leak in phar_verify_signature() when md_ctx is invalid.
    Random:
    Fixed bug GH-21731 (Random\Engine\Xoshiro256StarStar::__unserialize() accepts all-zero state).
    Session:
    Fixed memory leak when session GC callback return a refcounted value.
    SOAP:
    Fixed GHSA-85c2-q967-79q5 (Stale SOAP_GLOBAL(ref_map) pointer with Apache Map). (CVE-2026-6722)
    Fixed GHSA-m33r-qmcv-p97q (Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION). (CVE-2026-7261)
    Fixed GHSA-hmxp-6pc4-f3vv (Broken Apache map value NULL check). (CVE-2026-7262)
    SPL:
    Fixed bug GH-21499 (RecursiveArrayIterator getChildren UAF after parent free).
    Fix concurrent iteration and deletion issues in SplObjectStorage.
    Standard:
    Fixed GHSA-96wq-48vp-hh57 (Signed integer overflow of char array offset). (CVE-2026-7568)
    Fixed GHSA-m8rr-4c36-8gq4 (Consistently pass unsigned char to ctype.h functions). (CVE-2026-7258)
    Streams:
    Fixed bug GH-21468 (Segfault in file_get_contents w/ a https URL and a proxy set).
    XSL:
    Fixed bug GH-21600 (Segfault on module shutdown).
    Zip:
    Fixed bug GH-21698 (memory leak with ZipArchive::addGlob() early return statements).
- version update to 8.4.20
    Bz2:
    Fix truncation of total output size causing erroneous errors.
    Core:
    Fixed bugs GH-20875, GH-20873, GH-20854 (Propagate IN_GET guard in get_property_ptr_ptr for lazy proxies).
    DOM:
    Fixed bug GH-21486 (Dom\HTMLDocument parser mangles xml:space and xml:lang attributes).
    FFI:
    Fixed resource leak in FFI::cdef() onsymbol resolution failure.
    GD:
    Fixed bug GH-21431 (phpinfo() to display libJPEG 10.0 support).
    Opcache:
    Fixed bug GH-20838 (JIT compiler produces wrong arithmetic results).
    Fixed bug GH-21267 (JIT tracing: infinite loop on FETCH_OBJ_R with IS_UNDEF property in polymorphic context).
    Fixed bug GH-21395 (uaf in jit).
    OpenSSL:
    Fixed bug GH-21083 (Skip private_key_bits validation for EC/curve-based keys).
    Fix missing error propagation for BIO_printf() calls.
    PCRE:
    Fixed re-entrancy issue on php_pcre_match_impl, php_pcre_replace_impl, php_pcre_split_impl, and php_pcre_grep_impl.
    PGSQL:
    Fixed preprocessor silently guarding PGSQL_SUPPRESS_TIMESTAMPS support due to a typo.
    SNMP:
    Fixed bug GH-21336 (SNMP::setSecurity() undefined behavior with NULL arguments).
    SOAP:
    Fixed Set-Cookie parsing bug wrong offset while scanning attributes.
    SPL:
    Fixed bug GH-21454 (missing write lock validation in SplHeap).
    Standard:
    Fixed bug GH-20906 (Assertion failure when messing up output buffers).
    Fixed bug GH-20627 (Cannot identify some avif images with getimagesize).
    Sysvshm:
    Fix memory leak in shm_get_var() when variable is corrupted.
    XSL:
    Fix GH-21357 (XSLTProcessor works with DOMDocument, but fails with Dom\XMLDocument).
    Fixed bug GH-21496 (UAF in dom_objects_free_storage).
- version update to 8.4.19
    Core:
    Fixed bug GH-21029 (zend_mm_heap corrupted on Aarch64, LTO builds).
    Fixed bug GH-20657 (Assertion failure in zend_lazy_object_get_info triggered by setRawValueWithoutLazyInitialization() and newLazyGhost()).
    Fixed bug GH-20504 (Assertion failure in zend_get_property_guard when accessing properties on Reflection LazyProxy via isset()).
    Fixed OSS-Fuzz #478009707 (Borked assign-op/inc/dec on untyped hooked property backing value).
    Fixed bug GH-21215 (Build fails with -std=).
    Fixed bug GH-13674 (Build system installs libtool wrappers when using slibtool).
    Curl:
    Fixed bug GH-21023 (CURLOPT_XFERINFOFUNCTION crash with a null callback).
    Don't truncate length.
    Date:
    Fixed bug GH-20936 (DatePeriod::__set_state() cannot handle null start).
    Fix timezone offset with seconds losing precision.
    DOM:
    Fixed bug GH-21077 (Accessing Dom\Node::baseURI can throw TypeError).
    Fixed bug GH-21097 (Accessing Dom\Node properties can can throw TypeError).
    MBString:
    Fixed bug GH-21223; mb_guess_encoding no longer crashes when passed huge list of candidate encodings (with 200,000+ entries).
    Opcache:
    Fixed bug GH-20718 ("Insufficient shared memory" when using JIT on Solaris).
    Fixed bug GH-21227 (Borked SCCP of array containing partial object).
    Fixed bug GH-21052 (Preloaded constant erroneously propagated to file-cached script).
    OpenSSL:
    Fix a bunch of leaks and error propagation.
    PCNTL:
    Fixed pcntl_setns() internal errors handling regarding errnos.
    Fixed cpuset leak in pcntl_setcpuaffinity on out-of-range CPU ID on NetBSD/Solaris platforms.
    Fixed pcntl_signal() signal table registering the callback first OS-wise before the internal list.
    Fixed pcntl_signal_dispatch() stale pointer and exception handling.
    PCRE:
    Fixed preg_match memory leak with invalid regexes.
    PDO_PGSQL:
    Fixed bug GH-21055 (connection attribute status typo for GSS negotiation).
    PGSQL:
    Fixed bug GH-21162 (pg_connect() memory leak on error).
    Sockets:
    Fixed bug GH-21161 (socket_set_option() crash with array 'addr' entry as null).
    Fixed possible addr length overflow with socket_connect() and AF_UNIX family sockets.
- version update to 8.4.18
    Core:
    Fixed bug GH-20837 (NULL dereference when calling ob_start() in shutdown function triggered by bailout in php_output_lock_error()).
    Fix OSS-Fuzz #471533782 (Infinite loop in GC destructor fiber).
    Fix OSS-Fuzz #472563272 (Borked block_pass JMP[N]Z optimization).
    Fixed bug GH-GH-20914 (Internal enums can be cloned and compared).
    Fix OSS-Fuzz #474613951 (Leaked parent property default value).
    Fixed bug GH-20766 (Use-after-free in FE_FREE with GC interaction).
    Fix OSS-Fuzz #471486164 (Broken by-ref assignment to uninitialized hooked backing value).
    Fix OSS-Fuzz #438780145 (Nested finally with repeated return type check may uaf).
    Fixed bug GH-20905 (Lazy proxy bailing __clone assertion).
    Fixed bug GH-20479 (Hooked object properties overflow).
    Date:
    Update timelib to 2022.16.
    DOM:
    Fixed GH-21041 (Dom\HTMLDocument corrupts closing tags within scripts).
    MbString:
    Fixed bug GH-20833 (mb_str_pad() divide by zero if padding string is invalid in the encoding).
    Fixed bug GH-20836 (Stack overflow in mb_convert_variables with recursive array references).
    Opcache:
    Fixed bug GH-20818 (Segfault in Tracing JIT with object reference).
    OpenSSL:
    Fix memory leaks when sk_X509_new_null() fails.
    Fix crash when in openssl_x509_parse() when i2s_ASN1_INTEGER() fails.
    Fix crash in openssl_x509_parse() when X509_NAME_oneline() fails.
    Phar:
    Fixed bug GH-20882 (buildFromIterator breaks with missing base directory).
    PGSQL:
    Fixed INSERT/UPDATE queries building with PQescapeIdentifier() and possible UB.
    Readline:
    Fixed bug GH-18139 (Memory leak when overriding some settings via readline_info()).
    SPL:
    Fixed bug GH-20856 (heap-use-after-free in SplDoublyLinkedList iterator when modifying during iteration).
    Standard:
    Fixed bug #74357 (lchown fails to change ownership of symlink with ZTS) (Jakub Zelenka)
    Fixed bug GH-20843 (var_dump() crash with nested objects) (David Carlier)
- version u pdate to 8.4.17
    Core:
    Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument).
    Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing malformed INI input via parse_ini_string()).
    Fixed bug GH-20714 (Uncatchable exception thrown in generator).
    Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant ob_start() during error deactivation).
    Bz2:
    Fixed bug GH-20620 (bzcompress overflow on large source size).
    DOM:
    Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects).
    Fixed bug GH-20444 (Dom\XMLDocument::C14N() seems broken compared to DOMDocument::C14N()).
    GD:
    Fixed bug GH-20622 (imagestring/imagestringup overflow).
    Intl:
    Fix leak in umsg_format_helper().
    LDAP:
    Fix memory leak in ldap_set_options().
    Mbstring:
    Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
    PCNTL:
    Fixed bug with pcntl_getcpuaffinity() on solaris regarding invalid process ids handling.
    Phar:
    Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
    Fix SplFileInfo::openFile() in write mode.
    Fix build on legacy OpenSSL 1.1.0 systems.
    Fixed bug #74154 (Phar extractTo creates empty files).
    POSIX:
    Fixed crash on posix groups to php array creation on macos.
    SPL:
    Fixed bug GH-20678 (resource created by GlobIterator crashes with fclose()).
    Sqlite3:
    Fixed bug GH-20699 (SQLite3Result fetchArray return array|false, null returned).
    Standard:
    Fix error check for proc_open() command.
    Fix memory leak in mail() when header key is numeric.
    Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed).
    Zlib:
    Fix OOB gzseek() causing assertion failure.
- modified patches
  * php-build-reproducible-phar.patch (refreshed)
- fixes CVE-2025-14179 [bsc#1264778]
    CVE-2026-7568 [bsc#1264769]
    CVE-2026-7263 [bsc#1264770]
    CVE-2026-7261 [bsc#1264772]
    CVE-2026-7259 [bsc#1264773]
    CVE-2026-7258 [bsc#1264774]
    CVE-2026-6722 [bsc#1264776]
    CVE-2026-6104 [bsc#1264777]
    CVE-2026-6735 [bsc#1264775]
    CVE-2026-7262 [bsc#1264771]</changelog>
</package>
<package pkgid="6c839d12e3aa0646c95ba038bffbf3be865475b6c91544cfee447105c3210afa8a31b798391f7547922e8ba89e26b2ad0b3fd9fbf0032fa5531d1e47352de473" name="apache2-mod_security2" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.3.2"/>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 2.9.7:
  * Fix: FILES_TMP_CONTENT may sometimes lack complete content
  * Support configurable limit on number of arguments processed
  * Silence compiler warning about discarded const
  * Support for JIT option for PCRE2
  * Use uid for user if apr_uid_name_get() fails
  * Fix: handle error with SecConnReadStateLimit configuration
  * Only check for pcre2 install if required
  * Adjustment of previous fix for log messages
  * Mark apache error log messages as from mod_security2
  * Use pkg-config to find libxml2 first
  * Support for PCRE2 in mlogc
  * Support for PCRE2
  * Adjust parser activation rules in modsecurity.conf-
    recommended
  * Multipart parsing fixes and new MULTIPART_PART_HEADERS
    collection
  * Limit rsub null termination to where necessary
  * IIS: Update dependencies for next planned release
  * XML parser cleanup: NULL duplicate pointer
  * Properly cleanup XML parser contexts upon completion
  * Fix memory leak in streams
  * Fix: negative usec on log line when data type long is 32b
  * mlogc log-line parsing fails due to enhanced timestamp
  * Allow no-key, single-value JSON body
  * Set SecStatusEngine Off in modsecurity.conf-recommended
  * Fix memory leak that occurs on JSON parsing error
  * Multipart names/filenames may include single quote if double-
    quote enclosed
  * Add SecRequestBodyJsonDepthLimit to modsecurity.conf-
    recommended
  * IIS: Update dependencies for Windows build as of v2.9.5
  * Support configurable limit on depth of JSON parsing
- fixes CVE-2022-48279 [bsc#1207378], CVE-2023-24021 [bsc#1207379]</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1715083200">- added patches
  fix fix build with gcc14
  + apache2-mod_security2-gcc14.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1717502400">- Fix patch application syntax: Use %patch -P N instead of
  deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1717502401">- %autopatch instead of %patchN
- modified patches
  % apache2-mod_security2-no_rpath.diff (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1737460800">- package cleanup, coordinated with owasp-modsecurity-crs cleanup
- version update to 2.9.8 (changed upstream: Trustwave -&gt; OWASP)
  * Fixed ap_log_perror() usage
  * Memory leaks + enhanced logging
  * CI improvement: First check syntax &amp; always display error/audit logs
  * Fixed assert() usage
  * Removed useless code
  * feat: Check if the MP header contains invalid character
  * Use standard httpd logging format in error log
  * fix msc_regexec() != PCRE_ERROR_NOMATCH strict check
  * Move xmlFree() call to the right place
  * Add collection size in log in case of writing error
  * Passing address of lock instead of lock in acquire_global_lock()
  * Invalid pointer access in case rule id == NOT_SET_P
  * Show error.log after httpd start in CI
  * chore: add pull request template
  * chore: add gitignore file
  * Possible double free
  * Set 'jit' variable's initial value
  * Missing null byte + optimization
  * fix: remove usage of insecure tmpname
  * docs: update copyright
  * Enhanced logging [Issue #3107]
  * Check for null pointer dereference (almost) everywhere
  * Fix possible segfault in collection_unpack
  * fix: Replace obsolete macros
  * chore: update bug-report-for-version-2-x.md
  * feat: Add more steps: install built module and restart the server
  * Add new flag: --without-lua
  * Initial release of CI worklow
  * V2/fixbuildissue
  * ; incorrectly replaced by space in cmdline
  * Detailed error message when writing collections
  * docs: Fix organization name in references and security e-mail (v2)
  * ctl:ruleRemoveByTag isn't executed if no rule id is present in the rule
  * Suppress useless loop on tag matching
  * Optimization: Avoid last loop and storing an empty value in case nothing
    after last %{..} macro
  * Ignore (consistently) empty actions
  * Add context info to error message
  * Implement msre_action_phase_validate()
  * Avoid some useless code and memory allocation in case no macro is present
  * 'jit' variable not initialized when WITH_PCRE2 is defined
  * Configure: do not check for pcre1 if pcre2 requested
  * Double memory allocation
  * Fix for DEBUG_CONF compile flag
  * Enhance logging
  * Fix possible segfault in collection_unpack
  * Set the minimum security protocol version for SecRemoteRules
  * Allow lua version 5.4
  * Configure: do not check for pcre1 if pcre2 requested
  * Check return code of apr_procattr_io_set()
  * Do not escape special chars in rx pattern with macro
  * Substitute two equals-equals operators in build
- modified patches
  % apache2-mod_security2-no_rpath.diff (refreshed)
  % modsecurity-2.9.3-input_filtering_errors.patch (refreshed)
  % modsecurity-fixes.patch (refreshed)
- added sources
  + apache2-mod_security2.keyring</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1741953600">- build with pcre2 (test suite disabled temporarily)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1748865600">- update to 2.9.10:
  * CVE-2025-48866: excessive number of arguments in sanitiseArg
    can lead to a denial of service due to high memory consumption
    (boo#1243976)
- includes changes from 2.9.9:
  * CVE-2025-47947: DoS through sanitiseMatchedBytes (boo#1243978)
  * log error codes for global mutex failure modes
  * Fix error logging for standalone module
  * improved XMLArgs processing
  * Incorrect utf8toUnicode transformation for 00xx
  * PCRE2 compatibility fixes
  * gcc14 fixes, developer visible fixes
- drop apache2-mod_security2-gcc14.patch
- run tests again as they are now fixed with pcre2</changelog>
  <changelog author="pgajdos@suse.com" date="1751544000">- version update to 2.9.11 [bsc#1245620] (CVE-2025-52891)
  * fix: prevent segmentation fault if the XML node is empty
  * Plug memory leak when msre_op_validateSchema_execute() exits normally (validateSchema)
  * chore: bump version in MSI installer.wxs
  * Fix resource leaks in `msc_status_engine_mac_address`
- modified patches
  % apache2-mod_security2-no_rpath.diff (refreshed)
  % modsecurity-fixes.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1755864000">- security update
- added patches
  CVE-2025-54571 [bsc#1247674], Insufficient Return Value Handling on ModSecurity leads to XSS and Source Code Disclosure
  + apache2-mod_security2-CVE-2025-54571.patch</changelog>
</package>
<package pkgid="d11b0e35fa084d6e1a062900d562da8d2bc0c93e6e57e38dade371f53a5751d81634438867854b4e6512f9b9792eb08f233fb248952810e9926ddb024e86b088" name="apache2-mod_uwsgi" arch="x86_64">
  <version epoch="0" ver="2.0.28" rel="bp160.1.15"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697630400">- Update to version 2.0.22:
  + apache2/mod_proxy_uwsgi: stricter backend HTTP response
    parsing/validation (CVE-2023-27522).
  + plugins/rack: fix compilation with ruby 3.1.
  + plugins/php: fix build with PHP &gt;= 8.2.
- Drop uwsgi-php82-php_module_startup-signature.patch: fixed
  upstream.</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1704542400">- Update to 2.0.23
  * Add support for Python 3.12 (Ralf Ertzinger)
  * plugins/php: ini_entries is read-only since PHP 8.3 (Remi
    Collet)
  * Silence glibc warnings against pthread robust mutex functions
    (Riccardo Magliocchetti)
  * Fixup jvm library path detection (Riccardo Magliocchetti)
  * Use sysconfig if distutils is not available (Steve Kowalik,
    Terence D. Honles, Riccardo Magliocchetti)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="James Oakley &lt;jfunk@funktronics.ca&gt;" date="1710504000">- Update to 2.0.24
  * properly init cache for purge_lru (Alexandre Rossi)
  * fix linking with php8 (Remi Collet)
  * remove unused variables to fix compilation (László Károlyi)
  * fix function parameter type to avoid overflow in harakiri (Shai Bentov)
  * fix socket queue stats for ipv6 (Riccardo Magliocchetti)
  * fixup -Wformat-signedness warnings (Riccardo Magliocchetti)
  * Avoid strncpy from null in pyloader (Ben Kallus)
  * add clang to compile test matrix in ci (Riccardo Magliocchetti)</changelog>
  <changelog author="pgajdos@suse.com" date="1715688000">- version update to 2.0.25.1
  * fixed build with gcc14
  2.0.25.1
  * Fix build when pcre is not found and is optional (umut)
  2.0.25
  * Update glusterfs io callback function signature for 6.0 (Ralf Ertzinger)
  * Fix default values in help for min-worker-lifetime &amp; legion-skew-tolerance (Thomas Riccardi)
  * Fix build regression with gcc &lt; 5 (Riccardo Magliocchetti)
  * Add support for building against prcre2. This changes the regexp internal data structures (Alexandre Rossi)
  * Allow the valgrind generator script to run with a different python version (Wynn Wilkes)
  * Fix a potential error with not releasing the gil in uwsgi_python_rpc (Wynn Wilkes)
  * Rework threading cancellation handling. This can fix issues with threading, missing atexit callbacks and whatnot. (Inada Naoki)
- modified patches
  % uwsgi-1.9.17-plugin_build_path.patch (refreshed)
- deleted patches
  - uwsgi-2.0.24-update-glusterfs-io-callback-signature.patch (upstreamed)</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1721908800">- Added a backport of uwsgi-93d07ec38b31.patch to fix a type
  incompatibility problem to enable build with GCC 14.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1730203200">- update to 2.0.28 (bsc#1222332, CVE-2024-24795):
  * Bit more friendly log messages
  * Add more integration tests
  * Fix static library not found install error on conda
  * pyuwsgi: avoid interleaving pywsgi threadstate
  * Fix gracefully_kill_them_all with running requests
  * Fix –catch-exceptions causing a segfault in Python 3.5+
  * plugins/php: Add support for uwsgi.disconnect() function
  * plugins/python: use PyOS_*Fork stable API functions on 3.7+
  * core/uwsgi: set enable threads by default
  * plugins/python: fix compilation with Python 3.13
  * use pipe in gracefully_kill() to stop worker loop
  * port pypy plugin to python3
  * add some integrations tests
  * apache2/mod_proxy_uwsgi: let httpd handle CL/TE for
    non-http handlers CVE-2024-24795
  * remove race-condition over termination of uWSGI process
    when using need-app and lazy-apps (Hanan .T)
  * fix 32-bit compilation with GCC14 (Rosen Penev)
  * uwsgiconfig: get compiler version with -dumpfullversion
  * Fix uwsgi_regexp_match() with pcre2
- drop uwsgi-93d07ec38b31.patch (upstream)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1730808000">- add python313.patch to support the newest CPython</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1733400000">- Added patch:
  * uwsgi-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742472000">- build with pcre2</changelog>
</package>
<package pkgid="1a6f306aa5dcf8b3ae4f3c1234bcbfa3a7a671701614e9d44dd4cfc54cb2709a4ca7db01897b80d3286d79d9df26175f1c7158473b0c6a6b03e18b785e48ca5d" name="apache2-mod_uwsgi" arch="x86_64">
  <version epoch="0" ver="2.0.31" rel="bp160.1.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1733400000">- Added patch:
  * uwsgi-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742472000">- build with pcre2</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744718400">- add gcc15.patch (from upstream) and plugins-gcc15.patch to fix
  gcc-15 compile time errors</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1747224000">- Use $RPM_BUILD_NCPUS instead of %jobs (boo#1237231)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1751889600">- Deactivate glusterfs backend.
- Delete old specfile constructs.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1760961600">- Update to 2.0.31:
  - Fix build with gcc-15 (Arne de Bruijn)
  - Build improvements (Janos Guljas, Jonas Smedegaard)
  - Fix some user visible typos (Alexandre Rossi)
  - Fix gracefully_kill_them_all() for setups using fifo-based
    master graceful reload (Wynn Wilkes)
  - Fix compilation with PHP 8.5 (Remi Collet)
- Update to 2.0.30:
  - Port to Python 3.14 beta 1 (Victor Stinner)
  - Fix atexit handler install with –lazy / –lazy-apps (Taegyun
    Kim)
- Update to 2.0.29:
  - Fix integration tests not running (Alexandre Rossi)
  - Backport pypy plugin fixes (Alexandre Rossi)
  - Add support for rack 3 (Alexandre Rossi)
  - Fix compilation with gcc-15 (Alexandre Rossi)
  - Backport –max-request-delta from master (Jeremy Goulard)
  - Disable executable stack (Martin Liška)
  - Fix uwsgi_request_body_readline without new lines found (Juho
    Heikkinen)
  - Fix reload-os-env option (wszak)
  - Tidy python code (Curtis)
  - Python3 compat for examples and testing code (Thomas Goirand)
- Remove upstreamed patches:
  - gcc15.patch
- Readjusted patches:
  - plugins-gcc15.patch
  - python313.patch
  - uwsgi-1.9.11-systemd_logger-old_systemd.patch
  - uwsgi-1.9.13-objc_gc-no-fobjc-gc.patch
  - uwsgi-1.9.17-plugin_build_path.patch
  - uwsgi-2.0.12-no-LD_RUN_PATH.patch
  - uwsgi-2.0.18-postgresql-config.patch
  - uwsgi-ld-noexecstack.patch
  - uwsgi-reproducible-jar-mtime.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1761652800">- Use LuaJIT instead of Lua PUC 5.1, because the latter is being
  decommissioned in Factory. Also, we really do not support SUSE
  12.1 any more.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451200">- Add missing python3-base BR</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1779451201">- Use the current style of checking whether the current Python is the primary one.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1780142400">- Allow building with JDK that uses libalternatives instead of
  update-alternatives</changelog>
</package>
<package pkgid="5d119d723861cab15dd879b11b414112b9037e66d1ecb14e4b4dd08f521a97a377a2b29a1058a71894621aa9022eb5e29d50eb4fd7c5e9e3db9d3c914d986be5" name="apache2-mod_wsgi" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="bp160.1.12"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1586433600">- Add Python-native build so Python metadata and wrapper is present
  (bsc#1189467).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588766400">- Update to version 4.7.1:
  + Use Python 3 style print.
  + Mostly changes around distribtion from PyPi, where mod_wsgi is
    completented by a mod_wsgi-standalone with an own apache
    instance.
- Drop the python2 based package (py2 is EOL): Move the content of
  the former apache2-mod_wsgi-python3 package into apache-mod_wsgi.
  Provide/Obsolete the old -python3 package for ease of upgrade.</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1633089600">- Add missing bug reference to allow inclusion in SLE-15:SP4.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1655899200">- New version 4.9.2
  * see https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.2.html
  * dropped wsgi_fixVersionCheck.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669204800">- Update to version 4.9.4:
  + Apache 2.4.54 changed the default value for LimitRequestBody
    from 0, which indicates there is no limit, to 1Gi. If the
    Apache configuration supplied with a distribution wasn’t
    explicitly setting LimitRequestBody to 0 at global server scope
    for the purposes of documenting the default, and it was
    actually relying on the compiled in default, then when using
    mod_wsgi daemon mode, if a request body size greater than 1Gi
    was encountered the mod_wsgi daemon mode process would crash.
  + Fix ability to build mod_wsgi against Apache 2.2. Do note that
    in general only recent versions of Apache 2.4 are supported
- Changes from version 4.9.3 (CVE-2022-2255, boo#1201634):
  * See https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.3.html</changelog>
  <changelog author="Marina Latini &lt;marina.latini@suse.com&gt;" date="1697716800">- Use %posttrans instead of %post while adding the wsgi keyword.
  (bsc#1216411)
  * In systems where the former apache2-mod_wsgi-python3 is
    installed, the removal of the obsoleted apache2-mod_wsgi-python3
    and the installation of the new apache2-mod_wsgi did not
    preserve the keyword wsgi in the APACHE_MODULES variable.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697803200">- Do not generate empty postun/posttrans scriptlets in case of
  non-openSUSE: guard the entire script by the condition, not only
  the entire content of the script.</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 5.0.0
  * Note that the major version 5.0 was introduced not because of any new major
    features but because from version 5.0 onwards compatability with Python 2.7 is
    no longer guaranteed. A minimum Python version of 3.8 will be enforced by the
    Python package installation configuration.*
  Features Changed
  - ---------------
  * The `setuptools` package is now required to be installed in order to use the
    `pip install` method to install mod_wsgi. This is because `distutils` has been
    removed in Python 3.12.
  Bugs Fixed
  - ---------
  * Fix ability to build mod_wsgi against Apache 2.2. Do note that in general only
    recent versions of Apache 2.4 are supported</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- drop unmaintained apache-rex usage</changelog>
</package>
<package pkgid="3def16f6889fc2954e82f0ea97834d9b19c33d80a411f1fd02a6fd1cf26083dd22ca12c193b2a2764dc7de945fec44bd390dd4bff22e6548eb70780f400486b4" name="apache2-mod_wsgi" arch="x86_64">
  <version epoch="0" ver="5.0.2" rel="bp160.1.1"/>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1633089600">- Add missing bug reference to allow inclusion in SLE-15:SP4.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1655899200">- New version 4.9.2
  * see https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.2.html
  * dropped wsgi_fixVersionCheck.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669204800">- Update to version 4.9.4:
  + Apache 2.4.54 changed the default value for LimitRequestBody
    from 0, which indicates there is no limit, to 1Gi. If the
    Apache configuration supplied with a distribution wasn’t
    explicitly setting LimitRequestBody to 0 at global server scope
    for the purposes of documenting the default, and it was
    actually relying on the compiled in default, then when using
    mod_wsgi daemon mode, if a request body size greater than 1Gi
    was encountered the mod_wsgi daemon mode process would crash.
  + Fix ability to build mod_wsgi against Apache 2.2. Do note that
    in general only recent versions of Apache 2.4 are supported
- Changes from version 4.9.3 (CVE-2022-2255, boo#1201634):
  * See https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.3.html</changelog>
  <changelog author="Marina Latini &lt;marina.latini@suse.com&gt;" date="1697716800">- Use %posttrans instead of %post while adding the wsgi keyword.
  (bsc#1216411)
  * In systems where the former apache2-mod_wsgi-python3 is
    installed, the removal of the obsoleted apache2-mod_wsgi-python3
    and the installation of the new apache2-mod_wsgi did not
    preserve the keyword wsgi in the APACHE_MODULES variable.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697803200">- Do not generate empty postun/posttrans scriptlets in case of
  non-openSUSE: guard the entire script by the condition, not only
  the entire content of the script.</changelog>
  <changelog author="pgajdos@suse.com" date="1711368000">- version update to 5.0.0
  * Note that the major version 5.0 was introduced not because of any new major
    features but because from version 5.0 onwards compatability with Python 2.7 is
    no longer guaranteed. A minimum Python version of 3.8 will be enforced by the
    Python package installation configuration.*
  Features Changed
  - ---------------
  * The `setuptools` package is now required to be installed in order to use the
    `pip install` method to install mod_wsgi. This is because `distutils` has been
    removed in Python 3.12.
  Bugs Fixed
  - ---------
  * Fix ability to build mod_wsgi against Apache 2.2. Do note that in general only
    recent versions of Apache 2.4 are supported</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742385600">- Update to 5.0.2 includes changes from 5.0.1:
  * Eliminate noise in logs under Python 3.13 when Python garbage collection
    decides to delay destruction of objects until a second phase, resulting in
    the wsgi.errors log object being accessed after the request had been
    completed and the log object marked as invalid. This resulted due to changes
    in garbage collection behaviour in Python 3.13.
  * Internally, when using Python 3.8 or newer, the PyConfig API will now be
    used due to deprecation and future removal of older C API alternatives.
    This was required to support Python 3.13.
  * Fix issue which could result in process crashing when values were supplied
    for user/password/realm of HTTP basic authentication which weren’t
    compliant with UTF-8 encoding format.
  * Fix memory leak in check_password() authentication hook handler.
  * Change use of deprecated thread.setDaemon to thread.daemon.</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1763640000">- Don't enable the module by default. Instead, include instructions in the
  description, consistent with other comparable modules, such as
  apache2-mod_fcgid, apache2-mod_jk and apache2-mod_mono.  If a reverse
  dependency of this module requires it, that package may execute
  `a2enmod wsgi`.</changelog>
</package>
<package pkgid="1f13caa84a1454ad2ef9b8eeffef68274511ec85d2466a8b0265dc0cd3dee0c3bc239da0a63a3c559b200407a11532ec825249549c3deaf086f86605019db126" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="b62b0ba1c238e261219952d0b99a7b3683fdbb463d3964ddfe6154e155a114fefbe1d1234241ba076b845a6abe3ee9225b44b96ee67437f93d699ea2e3942cb1" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="00ce674582c52142d2502a457c901f34e621ac608ec27940f3e8a3c687525cf1f25a35c8ff2636aeea77c9bf635732ee0ed33542182c89562c1a3c35b3afb6de" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="c4d31987f97c19f908b68425aa2a4cc856bd05747921a060e686308bc9605ce325961daaabbc1340e58aa4ff68f2667d03e9256e8f7bd6b4c402d3e8f8ec91ae" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="f01b95cd2fa3778647cb428e7bb273dfe5d8dae01c4e64e61e3c78dd91fe68e8e1886df5668a5a7819fabc0cac51980eb9c788ea5cfa22c29027cb6452f8a5cc" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="f597f003cf240cbe9a01f7a72c5a8523daf35cceb43bcc8e75e11124fdeb7a527fde3f886d874610da030c4d418a746bc2fbb0397bb33c93e7aa6f0bdbe466f0" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="be2e1467a5bed8c655f391f5bea74db864e38da8551260340e4d4a48631cf7119dd158fc8d1cb9ab4a64bc7ae4c4621cc1a546366a7ab870a90ebac6aecfc557" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="b93ee88a8dc6dc42f04fa318786af18943f8a5cdb31a5f10102619707b717cc1c4086ae2bb1bcce27d585c6679c75c99255755c7c819de4294fbf8a29b54debb" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="641fd74de37c799a32d13d65711914858ae9e045e4e5befde3a99998969126a65ac1338e24e194eaa26abccbd64b40656e67b667e5e7321008336d9b4b426b74" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="a37c32c9dfbfd2c47a3211084b45b420f0bef7324cda5fcd87c334c790ba4dd28b60a84591cea31986461f8fb6a0e4080ae7909428aa2d2cd18544cada0a7b94" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="0139c5d793f02733264d891ba78a1f4747062597aae6b3c9d67ab34f2c59fd3d2144bacbb9adc29cef320409b871917f727296fb19201eaef1bd5737febe7212" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1727697600">- Add /srv/www directories to filelist [bsc#1231027]
  (apache2 will not start since default config uses this directory)</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="cf7ad8c2b8ce494f5b92f8dbbee86b868e75f3ec53edc6f66dbfb32a935dad9e9e49cbb4528257283863b8c89e2f14de35b0959999ea2f0dbb16978f8559cef9" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727870400">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="1b841ad82710c8c85ced53df605a1502608e328ad404958df33b9dae1546870af8f51e3bea1be81433c69b4ac9f03f4143c48a935d91c3fa219163aa564b8dc5" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.1.1"/>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="jengelh@inai.de" date="1730721600">- Explicitly mark start_apache2 as bash-dependent.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
</package>
<package pkgid="3f31313f03cc34c326f5ae010e0724d62755a816f8c37743321c7b14066760c23638d9e85f66a12c2809001fe2c1443ebd27ae31c13a9c7e4770a6bcaf4fd89e" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.2.1"/>
  <changelog author="martin.schreiner@suse.com" date="1730808000">- Update httpd-framework to svn1921782.
- Fixes Apache's impact on bsc#1218342.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="6b5203560d8afede445e7a9e615fbb2083c37c31f80b153c09ec4332565d31266a7eba7d51e8dce15d0261863991c510ab009d3ec013ca121b388e1135150744" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1731758400">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
- Fix build for SLFO:Main (bsc#1232273).
  * Fix contributed by Petr Gajdos.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11927).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix builds of test package with RPM 4.20:
  + noarch packages cannot rely on libdir, which is an
    arch-dependent variable. Rely on apxs -q libdir to extract the
    correct information instead.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1741608000">- Update to 2.4.63:
  * mod_dav: Update redirect-carefully example BrowserMatch config
    to match more recent client versions.
  * mod_cache_socache: Fix possible crash on error path.
  * mod_ssl: Fail cleanly at startup if OpenSSL initialization fails.
  * mod_md: update to version 2.4.31
  - Improved error reporting when waiting for ACME server to verify
    domains or finalizing the order fails, e.g. times out.
  - Increasing the timeouts to wait for ACME server to verify domain
    names and issue the certificate from 30 seconds to 5 minutes.
  - Change a log level from error to debug when Stapling is enabled
    but a certificate carries no OCSP responder URL.
  * mod_proxy_balancer: Fix the handling of the stickysession
    configuration parameter by the balancer manager.
  * Add the ldap-search option to mod_authnz_ldap, allowing
    authorization to be based on arbitrary expressions that do not
    include the username.  Make sure that when ldap searches are too
    long, we explicitly log the error.
  * mod_proxy: Honor parameters of ProxyPassMatch workers with substitution
    in the host name or port.
  * mod_log_config: Fix merging for the "LogFormat" directive.
  * mod_lua: Make r.ap_auth_type writable.
  * mod_md: update to version 2.4.29
  - Fixed HTTP-01 challenges to not carry a final newline, as some
    ACME server fail to ignore it.
  - Fixed missing label+newline in server-status plain text output
    when MDStapling is enabled.
  * mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
    without "SSLCryptoDevice" configured.
  * mod_authnz_ldap: Fix possible memory corruption if the
    AuthLDAPSubGroupAttribute directive is configured.
  * mod_proxy_fcgi: Don't re-encode SCRIPT_FILENAME when set via SetHandler.
  * mod_rewrite, mod_proxy: mod_proxy to canonicalize rewritten URLs,
    including "unix:" ones.
  * mod_rewrite: Error out in case a RewriteRule in directory context
    uses the proxy, but mod_proxy is not loaded.
  * http: Remove support for Request-Range header sent by Navigator
    2-3 and MSIE 3.
  * mod_rewrite: Don't require flag to preserve a leading // added by
    applying the perdir prefix to the substitution.
  * Windows: Restore the ability to "Include" configuration files on
    UNC paths.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs
    in Location (incomplete fix in 2.4.62).
  * mod_md: update to version 2.4.28
  - When the server starts, it looks for new, staged certificates to
    activate. If the staged set of files in 'md/staging/' is messed
    up, this could prevent further renewals to happen. Now, when the
    staging set is present, but could not be activated due to an
    error, purge the whole directory.
  - Fix certificate retrieval on ACME renewal to not require a
    'Location:' header returned by the ACME CA. This was the way it
    was done in ACME before it became an IETF standard. Let's
    Encrypt still supports this, but other CAs do not.
  - Restore compatibility with OpenSSL &lt; 1.1.
  * mod_tls: removed the experimental module. It now is availble
    standalone from https://github.com/icing/mod_tls. The rustls
    provided API is not stable and does not align with the httpd
    release cycle.
  * mod_rewrite: Better question mark tracking to avoid UnsafeAllow3F.
  * mod_http2: Return connection monitoring to the event MPM when
    blocking on client updates.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765886400">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778673600">- Version update to 2.4.66 (jsc#PED-16181)
  * ) SECURITY: CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec
    bypass via AllowOverride FileInfo (cve.mitre.org)
    mod_userdir+suexec bypass via AllowOverride FileInfo
    vulnerability in Apache HTTP Server. Users with access to use
    the RequestHeader directive in htaccess can cause some CGI
    scripts to run under an unexpected userid.
    This issue affects Apache HTTP Server: from 2.4.7 through
    2.4.65.
  * ) SECURITY: CVE-2025-65082: Apache HTTP Server: CGI environment
    variable override (cve.mitre.org)
    Improper Neutralization of Escape, Meta, or Control Sequences
    vulnerability in Apache HTTP Server through environment
    variables set via the Apache configuration unexpectedly
    superseding variables calculated by the server for CGI programs.
    This issue affects Apache HTTP Server from 2.4.0 through 2.4.65.
  * ) SECURITY: CVE-2025-59775: Apache HTTP Server: NTLM Leakage on
    Windows through UNC SSRF (cve.mitre.org)
    Server-Side Request Forgery (SSRF) vulnerability
    Â in Apache HTTP Server on Windows
    with AllowEncodedSlashes OnÂ and MergeSlashes OffÂ  allows to
    potentially leak NTLM
    hashes to a malicious server via SSRF and malicious requests or
    content
  * ) SECURITY: CVE-2025-58098: Apache HTTP Server: Server Side
    Includes adds query string to #exec cmd=... (cve.mitre.org)
    Apache HTTP Server 2.4.65 and earlier with Server Side Includes
    (SSI) enabled and mod_cgid (but not mod_cgi) passes the
    shell-escaped query string to #exec cmd="..." directives.
    This issue affects Apache HTTP Server before 2.4.66.
  * ) SECURITY: CVE-2025-55753: Apache HTTP Server: mod_md (ACME),
    unintended retry intervals (cve.mitre.org)
    An integer overflow in the case of failed ACME certificate
    renewal leads, after a number of failures (~30 days in default
    configurations), to the backoff timer becoming 0. Attempts to
    renew the certificate then are repeated without delays until it
    succeeds.
    This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66.
  * ) mod_http2: Fix handling of 304 responses from mod_cache.
  * ) mod_http2/mod_proxy_http2: fix a bug in calculating the log2 value of
    integers, used in push diaries and proxy window size calculations.
  * ) mod_md: update to version 2.6.5
  - New directive `MDInitialDelay`, controlling how longer to wait after
    a server restart before checking certificates for renewal.
    [Michael Kaufmann]
  - Hardening: when build with OpenSSL older than 1.0.2 or old libressl
    versions, the parsing of ASN.1 time strings did not do a length check.
  - Hardening: when reading back OCSP responses stored in the local JSON
    store, missing 'valid' key led to uninitialized values, resulting in
    wrong refresh behaviour.
  * ) mod_md: update to version 2.6.6
  - Fix a small memory leak when using OpenSSL's BIGNUMs.
  - Fix reuse of curl easy handles by resetting them.
  * ) mod_http2: update to version 2.0.35
    New directive `H2MaxStreamErrors` to control how much bad behaviour
    by clients is tolerated before the connection is closed.
  * ) mod_proxy_http2: add support for ProxyErrorOverride directive.
  * ) mpm_common: Add new ListenTCPDeferAccept directive that allows to specify
    the value set for the TCP_DEFER_ACCEPT socket option on listen sockets.
  * ) mod_ssl: Add SSLVHostSNIPolicy directive to control the virtual
    host compatibility policy.
  * ) mod_md: update to version 2.6.2
  - Fix error retry delay calculation to not already doubling the wait
    on the first error.
  * ) mod_md: update to version 2.6.1
  - Increasing default `MDRetryDelay` to 30 seconds to generate less bursty
    traffic on errored renewals for the ACME CA. This leads to error retries
    of 30s, 1 minute, 2, 4, etc. up to daily attempts.
  - Checking that configuring `MDRetryDelay` will result in a positive
    duration. A delay of 0 is not accepted.
  - Fix a bug in checking Content-Type of responses from the ACME server.
  - Added ACME ARI support (rfc9773) to the module. Enabled by default. New
    directive "MDRenewViaARI on|off" for controlling this.
  - Removing tailscale support. It has not been working for a long time
    as the company decided to change their APIs. Away with the dead code,
    documentation and tests.
  - Fixed a compilation issue with pre-industrial versions of libcurl.
- httpd testsuite of svn revision 1929573
- Remove the following patches, as they've been upstream as of 2.4.66:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Refresh patches:
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1782302400">- Fix the following bugs / CVEs:
  * bsc#1267976 / CVE-2026-29167
  * bsc#1267977 / CVE-2026-29170
  * bsc#1267978 / CVE-2026-34355
  * bsc#1267955 / CVE-2026-34356
  * bsc#1267956 / CVE-2026-42535
  * bsc#1267962 / CVE-2026-42536
  * bsc#1267963 / CVE-2026-43951
  * bsc#1267965 / CVE-2026-44119
  * bsc#1267969 / CVE-2026-44185
  * bsc#1267970 / CVE-2026-44186
  * bsc#1267971 / CVE-2026-44631
  * bsc#1267972 / CVE-2026-48913
  * bsc#1267503 / CVE-2026-49975
- Add patch files:
  * CVE-2026-29167.patch
  * CVE-2026-29170.patch
  * CVE-2026-34355.patch
  * CVE-2026-34356.patch
  * CVE-2026-42535.patch
  * CVE-2026-42536.patch
  * CVE-2026-43951.patch
  * CVE-2026-44119.patch
  * CVE-2026-44119-testsuite.patch
  * CVE-2026-44185.patch
  * CVE-2026-44186.patch
  * CVE-2026-44631.patch
  * CVE-2026-48913.patch
  * CVE-2026-49975.patch</changelog>
</package>
<package pkgid="f26622be7abfba64c18a5ae083319f3345cd604c8c9b4a54c1f94cacd8a2e39b65d614dd17901802dc44aff0cdef23545b53fe22ca04179f8582fab04690d51c" name="apcupsd" arch="x86_64">
  <version epoch="0" ver="3.14.14" rel="bp160.1.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597924800">- Fix build when /etc/os-release contains a LIST as ID_LIKE (which
  is valid). Simply pass --with-distname=suse to configure when
  %suse_version is defined. This is 'a nice way' of not explicitly
  breaking build for non-suse releases (even though we're not
  verifying it would really build on other distros based on this
  spec).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1609416000">- Use apache_serverroot instead of apache_datadir.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1645531200">- Drop build requirements on systemd packages
  This was done for figuring out the path of shutdown(8) (which is provided now
  by systemd itself on Factory but still by systemd-sysvinit on SLE) but OTOH
  shutdown(8) is not used at all when apcupsd is running on Linux systems. Hence
  let's hard code the path and drop the build requirements.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645531201">- Conditionally disable build for gcapmon for Tumbleweed and newer
  via bcond. Gconf-2 is being removed from Tumbleweed, as it is
  deprecated and archived upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1680004800">- Require wall utility from util-linux-tty-tools - fixes build in Factory
- Use autosetup</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1720440000">- Leap 15.6 also needs util-linux-tty-tools
- Patch configure to show correct GCC version (not configure.in, autoreconf fails)
  * apcupsd-config.patch
- Use %make_build in spec file</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1720612800">- remove obsolete text concerning apcupsd-early-powerdown in README.SUSE
- do not use /sbin/service, call systemctl directly</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1720699200">- Revert SuSEfirewall2 removal (commit on Wed Jul  3 13:45:08 UTC 2019),
    conditionally for SLE/Leap, to avoid possible regressions.
- Require systemd-sysvinit for SLE/Leap &lt; 15.6 to have a /usr/sbin/shutdown
    command available. For newer versions, it is included in the systemd package.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727438400">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
</package>
<package pkgid="7a378450aa6043365b86b65d99ac6a67206d25aeaf0aa7d735b55efe53a99a0248717420f841a689d95809920199f7d0a3512b0883c4e6c5e387372ccc1f5ca3" name="apcupsd-cgi" arch="x86_64">
  <version epoch="0" ver="3.14.14" rel="bp160.1.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597924800">- Fix build when /etc/os-release contains a LIST as ID_LIKE (which
  is valid). Simply pass --with-distname=suse to configure when
  %suse_version is defined. This is 'a nice way' of not explicitly
  breaking build for non-suse releases (even though we're not
  verifying it would really build on other distros based on this
  spec).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1609416000">- Use apache_serverroot instead of apache_datadir.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1645531200">- Drop build requirements on systemd packages
  This was done for figuring out the path of shutdown(8) (which is provided now
  by systemd itself on Factory but still by systemd-sysvinit on SLE) but OTOH
  shutdown(8) is not used at all when apcupsd is running on Linux systems. Hence
  let's hard code the path and drop the build requirements.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645531201">- Conditionally disable build for gcapmon for Tumbleweed and newer
  via bcond. Gconf-2 is being removed from Tumbleweed, as it is
  deprecated and archived upstream.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1680004800">- Require wall utility from util-linux-tty-tools - fixes build in Factory
- Use autosetup</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1720440000">- Leap 15.6 also needs util-linux-tty-tools
- Patch configure to show correct GCC version (not configure.in, autoreconf fails)
  * apcupsd-config.patch
- Use %make_build in spec file</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1720612800">- remove obsolete text concerning apcupsd-early-powerdown in README.SUSE
- do not use /sbin/service, call systemctl directly</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1720699200">- Revert SuSEfirewall2 removal (commit on Wed Jul  3 13:45:08 UTC 2019),
    conditionally for SLE/Leap, to avoid possible regressions.
- Require systemd-sysvinit for SLE/Leap &lt; 15.6 to have a /usr/sbin/shutdown
    command available. For newer versions, it is included in the systemd package.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727438400">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
</package>
<package pkgid="7dc341ccefea81c81699efa5881886e135d6b7b657f6b702e8ba8543baa0b21c4003e67e607fabe0055658d057bee683269a613e91d9a34f6c1d1f1626f0ae92" name="apfel-devel" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="bp160.1.12"/>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.0.3:
  + Undocumented bug fixes.</changelog>
  <changelog author="badshah400@gmail.com" date="1547294400">- Install pre-generated PDF manual as part of a new -doc package.
- Move ListFunctions binary into -devel package: apfel-config,
  already being installed as part of the devel package, is partly
  broken without this.
- Change `env` based script interpreter in apfel-config to
  directly call /bin/bash instead.
- Use %%license macro to install the license file.
- Run spec-cleaner for minor specfile cleanups</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547380800">- Update descriptions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1561464000">- Update to version 3.0.4:
  + New release for use with the latest version of HELL (no more
    changes documented by upstream).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588075200">- Add apfel-allow-disabling-pywrap.patch to support building
  without building the python extensions and binaries; build
  python bindings and python-based binaries only for distributions
  supporting python2 since apfel does not support python3.
- Add libtool BuildRequires and run autoreconf since patch touches
  build files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1623153600">- Update to version 3.0.5:
  + No release notes.
- Rename source tarball to %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642680000">- Update to version 3.0.6:
  * Merging vbertone fork.
- Drop apfel-allow-disabling-pywrap.patch: With py3 supported,
  this is no longer required.
- Enable python bindings: apfel now python3 compliant.
- Enable multiple python flavours; Requires(post) and
  Requires(postun) for update-alternatives.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 3.1.0:
  * F2C_CCE and F2C_CCP (gh#scarazza/apfel#41).
  * Make the --disable-pywrap option work (gh#scarazza/apfel#43).
  * Some changes to cmake build system to simplify the flags
    treatment and the python installation (gh#scarazza/apfel#42).
  * Actually functioning cmake (gh#scarazza/apfel#44).
  * cmake fixes and CI with cmake (gh#scarazza/apfel#46).
  * Update README (gh#scarazza/apfel#47).
  * Remove Circle CI (gh#scarazza/apfel#48).
  * Drop CircleCI badge (gh#scarazza/apfel#51).
  * Remove autotool builds (gh#scarazza/apfel#49).
  * Update README removing autotools instructions
    (gh#scarazza/apfel#52).
- Add apfel-fix-project-version.patch -- Use the correct version
  in defining project in CMakeLists.txt
- Add apfel-dont-set-default-reltype.patch -- Don't assume
  'RELEASE' as the release type, this should be set at the cmake
  command line.
- Build static lib and install it as part of a -devel-static
  package; upstream cmake does not allow disabling static libs and
  it ends up everywhere in the cmake files, so cannot just ignore
  it either.
- Use cmake for build in keeping with upstream; BuildRequires:
  cmake &gt;= 3.15.
- Add BuildRequires: swig needed to generate python wrappings.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1703764800">- Update to version 3.1.1:
  * CMakeLists.txt: define APFEL_VERSION, like in config.h.in
    (gh#scarazza/apfel#53).
- Drop apfel-fix-project-version.patch: incorporated upstream.
- Rebase apfel-dont-set-default-reltype.patch for update.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Remove README in one possible location where cmake
  would potentially install it to.</changelog>
</package>
<package pkgid="fea8790863432f2bf172f53680a1ae4157b45744225ea87064a863c0e1f642a60453514561d2d3b924363a8b847c24260aea079bfab42b5c6ebe872df6594aa8" name="apfel-devel-static" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="bp160.1.12"/>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.0.3:
  + Undocumented bug fixes.</changelog>
  <changelog author="badshah400@gmail.com" date="1547294400">- Install pre-generated PDF manual as part of a new -doc package.
- Move ListFunctions binary into -devel package: apfel-config,
  already being installed as part of the devel package, is partly
  broken without this.
- Change `env` based script interpreter in apfel-config to
  directly call /bin/bash instead.
- Use %%license macro to install the license file.
- Run spec-cleaner for minor specfile cleanups</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547380800">- Update descriptions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1561464000">- Update to version 3.0.4:
  + New release for use with the latest version of HELL (no more
    changes documented by upstream).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588075200">- Add apfel-allow-disabling-pywrap.patch to support building
  without building the python extensions and binaries; build
  python bindings and python-based binaries only for distributions
  supporting python2 since apfel does not support python3.
- Add libtool BuildRequires and run autoreconf since patch touches
  build files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1623153600">- Update to version 3.0.5:
  + No release notes.
- Rename source tarball to %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642680000">- Update to version 3.0.6:
  * Merging vbertone fork.
- Drop apfel-allow-disabling-pywrap.patch: With py3 supported,
  this is no longer required.
- Enable python bindings: apfel now python3 compliant.
- Enable multiple python flavours; Requires(post) and
  Requires(postun) for update-alternatives.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 3.1.0:
  * F2C_CCE and F2C_CCP (gh#scarazza/apfel#41).
  * Make the --disable-pywrap option work (gh#scarazza/apfel#43).
  * Some changes to cmake build system to simplify the flags
    treatment and the python installation (gh#scarazza/apfel#42).
  * Actually functioning cmake (gh#scarazza/apfel#44).
  * cmake fixes and CI with cmake (gh#scarazza/apfel#46).
  * Update README (gh#scarazza/apfel#47).
  * Remove Circle CI (gh#scarazza/apfel#48).
  * Drop CircleCI badge (gh#scarazza/apfel#51).
  * Remove autotool builds (gh#scarazza/apfel#49).
  * Update README removing autotools instructions
    (gh#scarazza/apfel#52).
- Add apfel-fix-project-version.patch -- Use the correct version
  in defining project in CMakeLists.txt
- Add apfel-dont-set-default-reltype.patch -- Don't assume
  'RELEASE' as the release type, this should be set at the cmake
  command line.
- Build static lib and install it as part of a -devel-static
  package; upstream cmake does not allow disabling static libs and
  it ends up everywhere in the cmake files, so cannot just ignore
  it either.
- Use cmake for build in keeping with upstream; BuildRequires:
  cmake &gt;= 3.15.
- Add BuildRequires: swig needed to generate python wrappings.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1703764800">- Update to version 3.1.1:
  * CMakeLists.txt: define APFEL_VERSION, like in config.h.in
    (gh#scarazza/apfel#53).
- Drop apfel-fix-project-version.patch: incorporated upstream.
- Rebase apfel-dont-set-default-reltype.patch for update.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Remove README in one possible location where cmake
  would potentially install it to.</changelog>
</package>
<package pkgid="3932fa5af81491a5dfe1cb1f2bac0e3d716524c71ecae741605ccbaa383a0f9524f6db015d9893774691254925646d3a73ded1e972926b2cf46398f90afd179d" name="apfel-doc" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="bp160.1.12"/>
  <changelog author="badshah400@gmail.com" date="1531569600">- Update to version 3.0.3:
  + Undocumented bug fixes.</changelog>
  <changelog author="badshah400@gmail.com" date="1547294400">- Install pre-generated PDF manual as part of a new -doc package.
- Move ListFunctions binary into -devel package: apfel-config,
  already being installed as part of the devel package, is partly
  broken without this.
- Change `env` based script interpreter in apfel-config to
  directly call /bin/bash instead.
- Use %%license macro to install the license file.
- Run spec-cleaner for minor specfile cleanups</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547380800">- Update descriptions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1561464000">- Update to version 3.0.4:
  + New release for use with the latest version of HELL (no more
    changes documented by upstream).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588075200">- Add apfel-allow-disabling-pywrap.patch to support building
  without building the python extensions and binaries; build
  python bindings and python-based binaries only for distributions
  supporting python2 since apfel does not support python3.
- Add libtool BuildRequires and run autoreconf since patch touches
  build files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1623153600">- Update to version 3.0.5:
  + No release notes.
- Rename source tarball to %{name}-%{version} format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642680000">- Update to version 3.0.6:
  * Merging vbertone fork.
- Drop apfel-allow-disabling-pywrap.patch: With py3 supported,
  this is no longer required.
- Enable python bindings: apfel now python3 compliant.
- Enable multiple python flavours; Requires(post) and
  Requires(postun) for update-alternatives.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 3.1.0:
  * F2C_CCE and F2C_CCP (gh#scarazza/apfel#41).
  * Make the --disable-pywrap option work (gh#scarazza/apfel#43).
  * Some changes to cmake build system to simplify the flags
    treatment and the python installation (gh#scarazza/apfel#42).
  * Actually functioning cmake (gh#scarazza/apfel#44).
  * cmake fixes and CI with cmake (gh#scarazza/apfel#46).
  * Update README (gh#scarazza/apfel#47).
  * Remove Circle CI (gh#scarazza/apfel#48).
  * Drop CircleCI badge (gh#scarazza/apfel#51).
  * Remove autotool builds (gh#scarazza/apfel#49).
  * Update README removing autotools instructions
    (gh#scarazza/apfel#52).
- Add apfel-fix-project-version.patch -- Use the correct version
  in defining project in CMakeLists.txt
- Add apfel-dont-set-default-reltype.patch -- Don't assume
  'RELEASE' as the release type, this should be set at the cmake
  command line.
- Build static lib and install it as part of a -devel-static
  package; upstream cmake does not allow disabling static libs and
  it ends up everywhere in the cmake files, so cannot just ignore
  it either.
- Use cmake for build in keeping with upstream; BuildRequires:
  cmake &gt;= 3.15.
- Add BuildRequires: swig needed to generate python wrappings.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1703764800">- Update to version 3.1.1:
  * CMakeLists.txt: define APFEL_VERSION, like in config.h.in
    (gh#scarazza/apfel#53).
- Drop apfel-fix-project-version.patch: incorporated upstream.
- Rebase apfel-dont-set-default-reltype.patch for update.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Remove README in one possible location where cmake
  would potentially install it to.</changelog>
</package>
<package pkgid="1621114abbad4db2234a7a7f8ce76b2d6b8def87eed3e3a8d3eb8036c910db8f356e21def2b8e8d50617714cd5adcba188cc915b3daf318b47e8ba3a0ff543fc" name="apfsprogs" arch="x86_64">
  <version epoch="0" ver="0~git493" rel="bp160.1.11"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1686312000">- Initial build
  + Version 0~git453</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1701604800">- Update to version 0~git475
  * Increase limit for compressed size of files
  * Update check for reserved oids
  * Don't hardcode the size of the ip bitmaps
  * Don't hardcode the sm offset of the cib address
  * apfsck: Don't assume consecutive volume numbers
  * apfsck: Implement checks for multiblock ip bitmaps
  * mkapfs: Support multiblock ip bitmaps
  * apfsck: Improve volume count check
  * apfsck: Check xids for multiblock ip bitmaps
  * mkapfs: Set the whole xid array for ip bitmaps
  * apfsck: Fix check for multiblock ip_bitmap_offset
  * apfsck: Get rid of magical constant for xid array
  * mkapfs: Set multiblock ip_bitmap_offset correctly
  * apfsck: Don't check tails of multiblock ip bitmaps
  * apfsck: Implement checks for cib address blocks
  * apfsck: Support multiblock ephemeral objects
  * mkapfs: Support multiblock spacemans
  * mkapfs: Support cib address blocks
  * mkapfs: Add tests for different container sizes
  * mkapfs: Report release info in apfs_formatted_by
  * Report release info with "-v" flag
  * mkapfs: Correct reported upper size limit
- Restrict license to GPL-2.0-only in License field</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715688000">- Update to version 0~git490
  * Ignore orphans for directory statistics
  * Don't check the sparse byte count for orphans
  * Support tiny disks in the ephemeral info checks
  * mkapfs: Support containers of less than 128M
  * mkapfs: Pack hardcoded blocks closer together
  * mkapfs: Fix size of spaceman mmap
  * mkapfs: Don't hardcode checkpoint desc/data sizes
  * mkapfs: Fix checkpoint data blocks formula for 3G
  * mkapfs: Remove comment about oldest xid in fq
  * apfsck: Ignore WAS_EVER_CLONED before the epoch
  * Update raw volume superblock to match driver
  * Add checks for new volume flags
  * Add checks for new file extent flags
  * Document the existence of a new xattr flag
  * Allow newer xids in snapshots for sealed volumes</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1718280000">- Update to version 0~git491
  * Allow snapshot xids to match the current xid</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1727956800">- Update to version 0~git491
  * apfs-label: Add new tool to list container labels
  * apfs-label: Check label termination before print
- Build new apfs-label binary in %build section
- Build shared library required by apfs-label in %build-section
- Install apfs-label binary and manpage in %install section</changelog>
</package>
<package pkgid="10e53871b42fd13d831aa3a602088d635c641d9805344f7f0aaf0ce304b784dc13271389d8a7965908d11fb057ececc802f7e75600184503515bd91fc3b5c942" name="apg" arch="x86_64">
  <version epoch="0" ver="2.2.3" rel="bp160.1.12"/>
  <changelog author="pascal.bleser@opensuse.org" date="1276603200">- initial package (2.2.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="48eda84783876ca77b2864a47a7dc1b0b03d24fe45ca05a16ff8ac3366771f57251fd2898314f067b08a8dd6c46daeeeaa92e9863f0ab6e7438d147a2ac92a67" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="331d1d468f05010d1e037df993be5ba6053915d3b102609d577dc21bac46040ccff218b6a140bf9bff9a0f12ad906621e244fa82fd8fb3afeaa91334f5ce42b7" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1549022400">- Initial package of apiguardian 1.0.0
- Add apiguardian-build.xml file to be able to build with ant</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- Upgrade to upstream version 1.1.2
  * Fixes:
    + Javadoc 1.8 cannot link to the published 1.1.0 API
    documentation
    + Add LICENSE/NOTICE to the generated jar
    + Allow @API to be declared at the package level
    + Explain usage of Status.DEPRECATED
    + Include OSGi metadata in manifest</changelog>
</package>
<package pkgid="064eaa341964f730849b5cd4f7df90c04e09768251fe37c362d61c11f3c6b32406e2c2e1af42c6194779fb2b99246ba23e8e87a89cb9a95d9d962a770805214d" name="apitrace" arch="x86_64">
  <version epoch="0" ver="10.0" rel="bp160.1.13"/>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1580126400">- new package; version 9.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1631102400">- Update to version 10.0
  * Upstream does not provide a changelog
- Run unit tests
- Package license file and readme</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1631275200">- mention baselibs.conf in spec</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1631620800">- improve packaging
  - remove GLIBC_PRIVATE from generated rpm requires
    (see https://github.com/apitrace/apitrace/issues/258)
  - don't use bundled 'snappy'.
  - don't duplicate license and docs files</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1632571200">- Added patch apitrace-fix-glibc-2.34.patch
  Fixes building with glibc 2.34. See also
  https://github.com/apitrace/apitrace/issues/756</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire pkgconfig(libprocps) or pkgconfig(libproc2).</changelog>
</package>
<package pkgid="b92137242891c6380a56562e4cd5708bdf44b94ceb19273d75452b019a388658e26b48a4602a4097b6a50aac4a97b7bade05f24c70907dd1c0bac7cb333f31bb" name="apitrace-wrappers" arch="x86_64">
  <version epoch="0" ver="10.0" rel="bp160.1.13"/>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1580126400">- new package; version 9.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1631102400">- Update to version 10.0
  * Upstream does not provide a changelog
- Run unit tests
- Package license file and readme</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1631275200">- mention baselibs.conf in spec</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1631620800">- improve packaging
  - remove GLIBC_PRIVATE from generated rpm requires
    (see https://github.com/apitrace/apitrace/issues/258)
  - don't use bundled 'snappy'.
  - don't duplicate license and docs files</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1632571200">- Added patch apitrace-fix-glibc-2.34.patch
  Fixes building with glibc 2.34. See also
  https://github.com/apitrace/apitrace/issues/756</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire pkgconfig(libprocps) or pkgconfig(libproc2).</changelog>
</package>
<package pkgid="2eb74f8686295720d40c61e43213b79bb978fadc98c3586e2a75c7def975e9e0db95909f75a5cc77e0b9523f93f4519a44a2eac9a2f92733914eecad6ab157fe" name="apk-devel" arch="x86_64">
  <version epoch="0" ver="2.14.4" rel="bp160.1.15"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1710072000">- Initial package, version 2.14.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1719057600">- Build lua module
- Update to version 2.14.4
  * db: fix creation of missing directories
  * index: do not print message if outputting file to stdout
  * pkg: accept broken fpm generated packages with a warning
  * pkg: allow multiple data sections with a warning
  * pkg: fix index speed regression
  * pkg: always use real digest, openssl-fips module crashes
    otherwise
- Update to version 2.14.3
  * io: fix gunzip mpart handling regression
- Update to version 2.14.2
  * list: fix -P with filter
  * verify: synchronize with git master
  * db: refactor apk_package.filename to index
  * pkg: clean up and simplify code
  * io: simplify mpart and error handling
  * io: fix apk_istream_get_max non-complete reads
  * doc: apk(8) document environment and libfetch config
  * doc: apk(8) add FILES section, speak of world constraints
  * list: consider only tag appropriate versions in upgradable
  * doc: add(8), del(8), world(5) speak of world constraints
  * doc: apk(8) document --force-broken-world better
  * pkg: reorder struct apk_package fields for size
  * doc: apk-search(8) is case insensitive
  * doc: mention /etc/apk/repositories.d/*.list
  * doc: fix tagged package explaination
  * doc: mention apk-world(5) in apk-del(8) and apk-add(8)
  * doc: mention apk-repositories(5) in apk-search(8)
  * hash: remove unused code
  * db: remove dynamic allocations from reverse name calculation
  * version: calculate installed column size dynamically
  * build: require gnu11 and guarantee assert.h included from
    apk_defines.h
  * db, selected applets: allow --arch to override database
    architecture
  * commit: consider install_if chains correctly in error analysis
  * solver: purge conflicts also via provided name
  * audit: fix reporting of directory db details
- Update to version 2.14.1
  * apk: remove empty arguments for add/del/dot/fix only
  * tar: set file mtime to package mtime in scripts.tar
  * db: calculate cache index hash from full url
  * doc: remove args from apk info --test and --check
  * doc: document -t short option for apk info
  * list: add support for --quiet to only print pkgname
  * apk-audit: exclude busybox-extras with
  - -ignore-busybox-symlinks
  * apk-cache(5): add missing word
  * apk-repositories(5): fix cache path
  * libfetch: remove a set-but-not-uswed variable
  * libfetch: support EAI_ADDRFAMILY error, correct two error
    messages
  * doc/apk-policy: fix documentation about sort order
  * db, print: describe process exit status better
  * db: handle waitpid returning EINTR
  * commit: properly propagate install-if status in error
    analysis
  * define APK_DEFAULT_ARCH for loongarch targets
  * pkg: invalidate sorted installed packages cache on package
    uninstall
  * fetch: prefer fetching package with the concrete name
  * del: fix up previous commit
  * del: fix --rdepends</changelog>
</package>
<package pkgid="125d74bd2c8248a0e5945ff9f83d34b2b6e6d0ef0d6295510c66b78225f969259eacc2a6b9307e24bce80aa215119f58fd291b205ea01808814c15504a01845c" name="apk-tools" arch="x86_64">
  <version epoch="0" ver="2.14.4" rel="bp160.1.15"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1710072000">- Initial package, version 2.14.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1719057600">- Build lua module
- Update to version 2.14.4
  * db: fix creation of missing directories
  * index: do not print message if outputting file to stdout
  * pkg: accept broken fpm generated packages with a warning
  * pkg: allow multiple data sections with a warning
  * pkg: fix index speed regression
  * pkg: always use real digest, openssl-fips module crashes
    otherwise
- Update to version 2.14.3
  * io: fix gunzip mpart handling regression
- Update to version 2.14.2
  * list: fix -P with filter
  * verify: synchronize with git master
  * db: refactor apk_package.filename to index
  * pkg: clean up and simplify code
  * io: simplify mpart and error handling
  * io: fix apk_istream_get_max non-complete reads
  * doc: apk(8) document environment and libfetch config
  * doc: apk(8) add FILES section, speak of world constraints
  * list: consider only tag appropriate versions in upgradable
  * doc: add(8), del(8), world(5) speak of world constraints
  * doc: apk(8) document --force-broken-world better
  * pkg: reorder struct apk_package fields for size
  * doc: apk-search(8) is case insensitive
  * doc: mention /etc/apk/repositories.d/*.list
  * doc: fix tagged package explaination
  * doc: mention apk-world(5) in apk-del(8) and apk-add(8)
  * doc: mention apk-repositories(5) in apk-search(8)
  * hash: remove unused code
  * db: remove dynamic allocations from reverse name calculation
  * version: calculate installed column size dynamically
  * build: require gnu11 and guarantee assert.h included from
    apk_defines.h
  * db, selected applets: allow --arch to override database
    architecture
  * commit: consider install_if chains correctly in error analysis
  * solver: purge conflicts also via provided name
  * audit: fix reporting of directory db details
- Update to version 2.14.1
  * apk: remove empty arguments for add/del/dot/fix only
  * tar: set file mtime to package mtime in scripts.tar
  * db: calculate cache index hash from full url
  * doc: remove args from apk info --test and --check
  * doc: document -t short option for apk info
  * list: add support for --quiet to only print pkgname
  * apk-audit: exclude busybox-extras with
  - -ignore-busybox-symlinks
  * apk-cache(5): add missing word
  * apk-repositories(5): fix cache path
  * libfetch: remove a set-but-not-uswed variable
  * libfetch: support EAI_ADDRFAMILY error, correct two error
    messages
  * doc/apk-policy: fix documentation about sort order
  * db, print: describe process exit status better
  * db: handle waitpid returning EINTR
  * commit: properly propagate install-if status in error
    analysis
  * define APK_DEFAULT_ARCH for loongarch targets
  * pkg: invalidate sorted installed packages cache on package
    uninstall
  * fetch: prefer fetching package with the concrete name
  * del: fix up previous commit
  * del: fix --rdepends</changelog>
</package>
<package pkgid="6a4ca4f2faf59cfd4f54fa0508d598794f2b13f71541a3e95e556714109487aab4d2afc7ed3999ef90532d17f0c63a703db84b61265829202ef72e649b9650cf" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="e2a0e97c1b7d4392b07f90edff357c48d6d5e36841637dac85badb4084269dd4b1b83aa306fd72d6f4df4416a82f8118c3dca2263aff4b63a0c16f5092c4e172" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="5dbb9ec79defc55ea26816c22ac1f51fef2433d1eb7cb5b565404a3b642c251c46e23163d10bcd8fdbd217196d98f5080037f339549525af6b938c2d727a6f4b" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="758ba66a1121fcbc4094f5971bf2aa09df94cf8257aad3a1f3b820d9f84f400add68076dc7b629cd0250c5c11e06304932484fa435837765018d68a19f9b19b6" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="fae0fac9e767456cb47463108cd4fbc25c70444c0c462fe150460f3de2ed25e87df97da36fb2db151ccf2e98703447cfb6fdea27350e43f3399d7b73f4428063" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="a178a7cb9385e64a7eff89f73c53709ef1540ca98baac82a4162272036091f5b1ac017f8f8b4a0d8519f0dde2be91b860b595335408063ef6cf0125844ddccc5" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="ab322dcebc56ba84f42aee57a7f75cfea6618a0eb8534caea53dfdbc9b938b2776bb0919232356aa1a54d24eaf9f5926bfbad7f3b59bf1e302f1d13d0aa734af" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="01e877e8801cb7f791e99820b7291c551b66bdfbb049917aebf49cd4d6dcac3101a1de3ae31099d84be9374e26383fcd7e0ef6a08e52e366ae839be04fb2805e" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="1b2bd2a841c714c9b2c0d9e7cf55d132144aab272bc8138bf745e26eec40a2136137713b9b311bce869ccdf86d4d090352045dcb33973aa2c149a5033a254147" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="625259d81b3b889bd5b984e312e884e9ef935b3cd2e19ddd3f166a65d12f5e83ee842d706e44ea293ff37a008cb994a506cd15a805e1e41dfd48ef4165ff2b51" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="d70bb6e0338b491575acfad21663e0648affe9dd14ddc65bbf4ac387f840707e3ac78503b171be54dbc96ff4f3be6fc05009c46129650c41116fc43617495360" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="f1c2f367004a6df8df4d9099f4de48d238ea2a925412fea3f19f3d420dab4be1d4cd9568af8b2edfa268ecea915f2dc8a66009a6c0b3bdf9312052dc38b6fec8" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="ebc27e1be3d94a3eee9859e5d7d09667c245bf2c353b30a4641977b3355d74ff4827b59c5d056bdb5b491e095c2ce326e9908c3e15bd6d48ac86868bba1b64bb" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="b1dfa5eaddbdbf6798ca31e79faff29e2a825938d1e4bfe4ad73c8798e724caf067877dd4dcd02b13224de27b65a8415d51007a0dd0f5b71cde87160cf47ea56" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="6c9914d86505f817fffc361b318e98d7f0baea9e2193de166f022119c4113aafb037b5efe65b934fbadcb1719a80f7bf55a3c65a9ca5444ef47ebceaef364616" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="a573ba625997faa852c384a660aa37ae6bf4b084f96dec9270e99790c30c5c851864630a075becc7b0f346c0dd60b6c6e1bad8e9b5ff970c62683315c46de356" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="1a181a90a4b9bc4cf8b3ce263584f20707d9f5426be2e3bd909fc6e6de7a7d9f081b4964fbf4e8bbd21c9581ead673985caac05b48304de95b88af6d7d52ea5d" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="560ef0ab35784d2d0d6e6734c4a7ad2383283532051fe219383847a154c74df6ff5660a400a44f2c1ec21d8a88ee2ece2de093ff79c37bd30b322fc12fefc424" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="dd3b621e8e29ba702b7b025ea81139d31e6346bacff2b837fdbf8b4d57a06a67c81f032fe16a69a77d3ccd72b88ff1154d9ed17e66ac6c0d4772ffbfc4aac250" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="598ffc702c97494726b69bc3dba9260098cc1a3334db27506dca593e12a903d9c4562e8cac37c109961ea8bf26869b75fe75a5d3462715e8ccc038a62ebc570f" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="6076a54bef65385898d3fe41675231172a02059228e87d9e920f432184937a243827a2cc4611659297fb008855ad9d4c24f69d35fb0b4aacdad52cd56ec997ad" name="apparmor-rpm-macros" arch="noarch">
  <version epoch="0" ver="1.0" rel="bp160.1.10"/>
  <changelog author="ushamim@linux.com" date="1468411200">- Initial creation of macro, only contains %apparmor_reload</changelog>
  <changelog author="jengelh@inai.de" date="1484136000">- RPM group fix</changelog>
  <changelog author="suse-beta@cboltz.de" date="1503748800">- %apparmor_reload: skip and regenerate cache to make sure the latest
  profile gets always used (even if the existing cache is newer)</changelog>
  <changelog author="tbechtold@suse.com" date="1519819200">- Check if apparmor is active before reloading a profile (bsc#1083226)
  Otherwise a package using the %apparmor_reload macro in %post
  automatically enables the profile even if apparmor itself is
  not active.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1557316800">- move macros.apparmor from /etc/rpm/ to /usr/lib/rpm/macros.d/</changelog>
  <changelog author="kukuk@suse.de" date="1566216000">- Don't assume systemctl is already installed or available at all.
- Files in /usr/lib/rpm/macros.d are no config files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1685793600">- No longer suppress stderr</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1708430400">- Update macro to detect when installing in chroot
  (transactional-update) and avoid calling apparmor_parser.</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1727956800">- Add %apparmor_profilesdir</changelog>
</package>
<package pkgid="6894db10bf776c0ed02fc96058aee87c3d7f6dcb3ca71d0b4e51cd2636cc7bfe86b080fde96013b5ee76f893206115097ff130b7493a5dcd3a75ca506729ccad" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="286789fa141a15782371615a9183380a87923b036abf193a60d6dd0d18c69efb7aa89a6ebb83e8205713aa478fe881148793361bbafc1d88b4993a44eaa9f428" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="8dcd1b0656f013dbdc073aae502010fcfd808238d8110c2d67503976ee8bd7f34fcaf9c0a55f471f9de62771199759d7a2fd6637debe444ec44cd94f780e9f85" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="befa378bd341ce102317c2bfd64896add36ae6159e2c4f97692353d310ba00720d54dbcf7e77f580a3f86ef6fe53550d0a6d170f954c3f3cda3a7a13da609f49" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="7bfa94f268640beb343d6b2c48c4a82ce8805da4346d673c9d57881e15a22ccfa58d1c8999030c87930b303122ed0f23b08ac56d45b05b465d995d4c98a2f3e1" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="160000.2.2"/>
  <changelog author="mmachova@suse.com" date="1740139200">- add py313-aa-notify.patch to adapt the last bits to python 3.13</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742385600">- remove unused pcre build dependency</changelog>
  <changelog author="suse-beta@cboltz.de" date="1744200000">- update to ApppArmor 4.1.0
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.0
    for the detailed upstream changelog
- remove upstream py313-aa-notify.patch</changelog>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
</package>
<package pkgid="8352fe6c37d2849931fb7e1ba91a01c44629ff27dbc0f6bdd851fe9ff545522266189c7e211d6dce2277f1b0d6ebd839d6c4415906207a64f49c190effe56366" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="4.1.2" rel="160000.1.1"/>
  <changelog author="ddiss@suse.com" date="1747137600">- Purge potentially stale profile cache during rpm posttrans via
  "apparmor_parser --purge-cache" (boo#1242553)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1748952000">- replace workaround for boo#853019 with using %restart_on_update -
  apparmor.service now contains a workaround to survive restart
  (boo#1237462)
- get posttrans of profiles and abstractions in sync
- add dovecot24.diff to fix the profile for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1749470400">- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1750593600">- update to ApppArmor 4.1.1
  - unix-chkpwd: allow dac_read_search (boo#1241678)
  - extend mesa, wutmp and nameservice abstractions
  - utils: add support for priority rule prefix
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752580800">- replace dovecot24.diff with upstream fix from MR 1733 (boo#1243008)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
</package>
<package pkgid="e77802e4eedf4e586128bd92486c3783b0a5b315f1b4daf6b7b6223f813f373329686be9dbad7a8b4aee17f8740ce8dff24a940559daa016aa3dc1f315a9696d" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.1.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add kerberosclient-usrmerge.diff to allow reading
  /usr/etc/krb5.conf (boo#1246689)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1752840001">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
</package>
<package pkgid="a6eac63f98f4fb97ed51138c1d7982a0c25205a168aebfa22acd0dcb7eb8aa86e00ec2965601b311350baf0b58272ee573bc2155e800570947b04c02ba01850d" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="160000.2.1"/>
  <changelog author="suse-beta@cboltz.de" date="1752840000">- add xkeyboard.diff to allow reading /usr/share/xkeyboard-config-2/
  via abstractions/X (boo#1246743)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1754049600">- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1759665600">- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1760875200">- add dovecot24-part3-mr1822.diff: allow writing /tmp/doveconf.* in
  more dovecot profiles</changelog>
  <changelog author="suse-beta@cboltz.de" date="1768046400">- update to AppArmor 4.1.3
  - several profile updates
  - add abi/4.0-ip and abstractions/golang
  - minor fixes in parser and utils
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.3
    for the detailed upstream changelog
- remove upstreamed patches:
  - dovecot24-part2.diff
  - dovecot24-part3-mr1822.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1770811200">- update to AppArmor 4.1.6
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.4
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.5 and
    https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.6
    for the detailed upstream changelogs
  - update %files for new python LibAppArmor location
- refresh kerberosclient-usrmerge.diff</changelog>
  <changelog author="schwab@suse.de" date="1773921600">- Fix file list to match all possible LibAppArmor module names</changelog>
  <changelog author="suse-beta@cboltz.de" date="1773921601">- update to AppArmor 4.1.7
  - various bugfixes
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.7
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1777204800">- Add and use tmpfiles.d/apparmor.conf for log and cache path creation
  (jsc#PED-14916) (jsc#PED-14917)
  + drop removal of pre-2.12 cache location
  + retain "apparmor_parser --purge-cache" calls for non-transactional
    systems</changelog>
  <changelog author="ali.abdallah@suse.com" date="1779192000">- Update apparmor-lessopen-profile.patch:
  * Allow execution of /usr/bin/zstd (bsc#1265620)</changelog>
</package>
<package pkgid="cee78df6ea62599d80b86ed9d6df96ab315aca55d9623eb0cb48d048542b3c27f9b9d0f5534ca65d32a3b562d90b188fa7e61bc25ed3793fdc73396a47547222" name="appframework" arch="noarch">
  <version epoch="0" ver="1.03" rel="bp160.1.12"/>
  <changelog author="mvyskocil@suse.cz" date="1242734400">- 'Initial SUSE packaging (From Fedora 11)'</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-nodeps.</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Drop unneeded dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patch:
  * appframework-sourcetarget.patch
    + fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * appframework-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="cf87837eeb349070aa8cac0734d11b58ffb49b83307ba065acf588bc848750dd30836eb5860e0ad8dadcf70842be3c07404d64b5d36d34f019a3e5f820923703" name="appframework-javadoc" arch="noarch">
  <version epoch="0" ver="1.03" rel="bp160.1.12"/>
  <changelog author="mvyskocil@suse.cz" date="1242734400">- 'Initial SUSE packaging (From Fedora 11)'</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-nodeps.</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Drop unneeded dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patch:
  * appframework-sourcetarget.patch
    + fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix some rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * appframework-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="9c21f19e20c81f5ff5b7ecee967f572a740b4da57b48fc443945e4b47127875ece5eb89979819fd6e77c4f824f439108548eb24c246565e590eb21f7a20f0191" name="appres" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="bp160.1.12"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split appres from xorg-x11. Initial version: 1.0.3.</changelog>
  <changelog author="zaitor@opensuse.org" date="1369051200">- Update to version 1.0.4:
  + Add -V option to print command version.
  + Combine usage message into a single string.
  + Mark usage() as _X_NORETURN to satisfy -Wmissing-noreturn
    warning.
  + config: move man pages into their own directory.
  + man: replace hard coded man page section with substitution
    strings.
  + man: remove trailing spaces and tabs.
- Add pkgconfig(xproto), configure now checks for it.</changelog>
  <changelog author="sndirsch@suse.com" date="1391688000">- fixed license to X11 in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.0.5
  * Print which option was in error along with usage message
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1648987200">- Update to version 1.0.6
  * bugfix release</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1718539200">- Update to version 1.0.7
  * This release includes support for building with meson as well as autoconf.
    Please test building with meson and report any issues you hit to our
    gitlab issue tracker at:
    https://gitlab.freedesktop.org/xorg/app/appres/-/issues
    as we plan on removing the autoconf build support in a future release.
- switched to meson build</changelog>
</package>
<package pkgid="8c547af46965c0e7326ba69fe9ed81dfbb5fe116b4a39bf7cf86898e2f4170d3337ac76e90d90400fda6e20f8d917046dfe5640d0e521dd38a50aae5fcbd049c" name="appstream-glib" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1644926400">- Update to version 0.7.18+29:
  * Updated translations.
- Improve _service file to handle to drop +0 in versions for when
  we are exactly on a tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Update to version 0.7.18+30:
  * libappstream-builder: Fix file paths in icon tarball</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647172800">- Update to version 0.7.18+31:
  * Fix extracting relative symlinks (boo#1196459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1655985600">- Update to version 0.7.18+37:
  * Update fa.po
  * trivial: Fix a tiny memory leak when mirroring screenshots
  * trivial: Be explicit when ignoring return error values
  * trivial: Fix a tiny memory leak on failure
  * Add vcs-browser and contribute URL type
  * update to spdx 3.16</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 0.8.1:
  * Initialize proxy resolver in appstream-validate
  * Improve handling of &lt;em&gt; and &lt;code&gt; tags
  * trivial: Turn is_{em,code}_text fields into bitfields
  * Properly initialize AsNodeToXmlHelper
  * Correct typos in as-app.c
- Changes from version 0.8.0:
  * Use GProxyResolver to auto-detect the correct proxy
  * Port from libsoup to libcurl
  * Remove the --enable-hidpi option completely
  * Updated translations.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires following upstreams port.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668427200">- Update to version 0.8.2:
  + asb-plugin-appdata: Never add default icons to firmware, IMs or
    codecs.
  + Tell CURL to follow http redirect for validate.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668686400">- openSUSE-appstream-process: drop --enable-hidpi parameter:
  - -enable-hidpi now does nothing and will be removed in future
  versions.</changelog>
  <changelog author="fvogt@suse.com" date="1706788800">- Add patch for interoperability with newer AppStream spec (boo#1218427):
  * 0001-Move-from-app-info-to-swcatalog-locations.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Add asglib(swcatalog) provides: allow other packages to declare
  that they need swcatalog support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- Update to version 0.8.3:
  * Drop support for libstemmer
  * Do not veto the extension if the parent cannot be found
  * Support RFC9512 registration for application/yaml
  * Stop trying to convert Fedora licenses into SPDX
  * asb-plugin-font: Add glob match for .ttc files
  * Update gl.po
  * Update Simplified Chinese translation
  * Make the appdata filename check match the plugin globs
  * Remove Check for X-KDE-StartupNotify
  * Update Russian translation
  * Include screenshot size in "too large" errors
  * Include screenshot height in "too small" error</changelog>
</package>
<package pkgid="ad333656afb0cb0856dd6a9b0e93950002219d994b0e2a9defac788108613a4d7cb6df36e6e012f18fc59ec6c4655bf444d5f516b5578a05116ac313cf14d75e" name="appstream-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1644926400">- Update to version 0.7.18+29:
  * Updated translations.
- Improve _service file to handle to drop +0 in versions for when
  we are exactly on a tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Update to version 0.7.18+30:
  * libappstream-builder: Fix file paths in icon tarball</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647172800">- Update to version 0.7.18+31:
  * Fix extracting relative symlinks (boo#1196459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1655985600">- Update to version 0.7.18+37:
  * Update fa.po
  * trivial: Fix a tiny memory leak when mirroring screenshots
  * trivial: Be explicit when ignoring return error values
  * trivial: Fix a tiny memory leak on failure
  * Add vcs-browser and contribute URL type
  * update to spdx 3.16</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 0.8.1:
  * Initialize proxy resolver in appstream-validate
  * Improve handling of &lt;em&gt; and &lt;code&gt; tags
  * trivial: Turn is_{em,code}_text fields into bitfields
  * Properly initialize AsNodeToXmlHelper
  * Correct typos in as-app.c
- Changes from version 0.8.0:
  * Use GProxyResolver to auto-detect the correct proxy
  * Port from libsoup to libcurl
  * Remove the --enable-hidpi option completely
  * Updated translations.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires following upstreams port.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668427200">- Update to version 0.8.2:
  + asb-plugin-appdata: Never add default icons to firmware, IMs or
    codecs.
  + Tell CURL to follow http redirect for validate.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668686400">- openSUSE-appstream-process: drop --enable-hidpi parameter:
  - -enable-hidpi now does nothing and will be removed in future
  versions.</changelog>
  <changelog author="fvogt@suse.com" date="1706788800">- Add patch for interoperability with newer AppStream spec (boo#1218427):
  * 0001-Move-from-app-info-to-swcatalog-locations.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Add asglib(swcatalog) provides: allow other packages to declare
  that they need swcatalog support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- Update to version 0.8.3:
  * Drop support for libstemmer
  * Do not veto the extension if the parent cannot be found
  * Support RFC9512 registration for application/yaml
  * Stop trying to convert Fedora licenses into SPDX
  * asb-plugin-font: Add glob match for .ttc files
  * Update gl.po
  * Update Simplified Chinese translation
  * Make the appdata filename check match the plugin globs
  * Remove Check for X-KDE-StartupNotify
  * Update Russian translation
  * Include screenshot size in "too large" errors
  * Include screenshot height in "too small" error</changelog>
</package>
<package pkgid="f8193e14b7753d434e7e67b96fb48e3a2465ba1e5ab2fe23d6adf113cd1c23a11e4062ba42fbae6ef80f59b2cf01f915efad620de8a2c25da30d0a4341ad4389" name="appstream-glib-lang" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1644926400">- Update to version 0.7.18+29:
  * Updated translations.
- Improve _service file to handle to drop +0 in versions for when
  we are exactly on a tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Update to version 0.7.18+30:
  * libappstream-builder: Fix file paths in icon tarball</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647172800">- Update to version 0.7.18+31:
  * Fix extracting relative symlinks (boo#1196459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1655985600">- Update to version 0.7.18+37:
  * Update fa.po
  * trivial: Fix a tiny memory leak when mirroring screenshots
  * trivial: Be explicit when ignoring return error values
  * trivial: Fix a tiny memory leak on failure
  * Add vcs-browser and contribute URL type
  * update to spdx 3.16</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 0.8.1:
  * Initialize proxy resolver in appstream-validate
  * Improve handling of &lt;em&gt; and &lt;code&gt; tags
  * trivial: Turn is_{em,code}_text fields into bitfields
  * Properly initialize AsNodeToXmlHelper
  * Correct typos in as-app.c
- Changes from version 0.8.0:
  * Use GProxyResolver to auto-detect the correct proxy
  * Port from libsoup to libcurl
  * Remove the --enable-hidpi option completely
  * Updated translations.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires following upstreams port.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668427200">- Update to version 0.8.2:
  + asb-plugin-appdata: Never add default icons to firmware, IMs or
    codecs.
  + Tell CURL to follow http redirect for validate.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1668686400">- openSUSE-appstream-process: drop --enable-hidpi parameter:
  - -enable-hidpi now does nothing and will be removed in future
  versions.</changelog>
  <changelog author="fvogt@suse.com" date="1706788800">- Add patch for interoperability with newer AppStream spec (boo#1218427):
  * 0001-Move-from-app-info-to-swcatalog-locations.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Add asglib(swcatalog) provides: allow other packages to declare
  that they need swcatalog support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- Update to version 0.8.3:
  * Drop support for libstemmer
  * Do not veto the extension if the parent cannot be found
  * Support RFC9512 registration for application/yaml
  * Stop trying to convert Fedora licenses into SPDX
  * asb-plugin-font: Add glob match for .ttc files
  * Update gl.po
  * Update Simplified Chinese translation
  * Make the appdata filename check match the plugin globs
  * Remove Check for X-KDE-StartupNotify
  * Update Russian translation
  * Include screenshot size in "too large" errors
  * Include screenshot height in "too small" error</changelog>
</package>
<package pkgid="d086773033dd41a9883fc986a1cec5c8d51ca340a0d45dcc5d6e26465f4688b9316264dfc75d51500ed1591884a29fcc9f02a150e2d6bfc54f118bffb51e5b51" name="appstream-qt5-devel" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="23c6f0f66d85b377aeca16e444817f5f8eee0eae5f75958f70cb4177211e68fa29a89bcfc83feff8926f9f151c04c135c432abe8fc2eed5dc0e7ed2c5f302559" name="appstream-qt6-devel" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="160000.2.2"/>
  <changelog author="christophe@krop.fr" date="1702468800">- Add upstream change to fix a couple test issues (related to boo#1217047)
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
- Add more changes:
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch
- Add a Qt6 multibuild flavor</changelog>
  <changelog author="christophe@krop.fr" date="1702641600">- Use GCC 12 for building on Leap</changelog>
  <changelog author="christophe@krop.fr" date="1706702400">- Switch to the latest GCC version available in Leap for packages
  that can't build with the default compiler</changelog>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
</package>
<package pkgid="5655092dcc0cfd5f812702c0f8d2341754ba07c2b7f91f76a2770b6bbab5dd9a6ebaa2223769dac0354b254c43bd3818ff9d561b32727aa801c71430ef7009cc" name="appstream-qt6-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.1.1"/>
  <changelog author="christophe@krop.fr" date="1706788800">- Update to 1.0.1
  Bugfixes:
  * Fix lib name for Qt5 link target
  * meson: Pass -D_DARWIN_C_SOURCE on darwin
  * Fix macOS build
  * stemmer: Resolve potential issue where stemmer may never be
    initialized
  * cli: Don't fail what-provides if components were found
  * Fix query element order for what-provides queries
  * validator: Demote developer-name-tag-deprecated to info
    severity for now
  * content-rating: Fix missing or wrong value descriptions for
    rating IDs
  * curl: Add transfer speed timeouts for HTTP downloads
  * curl: Retry operations on potentially transient errors
    Miscellaneous:
  * validator: Improve hint for content-attribute-value-invalid
  * Allow building without zstd temporarily
- Drop patches, merged upstream:
  * 0001-validator-Demote-developer-name-tag-deprecated-to-in.patch
  * 0001-content-rating-Fix-missing-or-wrong-value-descriptio.patch
  * 0001-Fix-lib-name-for-Qt5-link-target.patch</changelog>
  <changelog author="christophe@krop.fr" date="1708257600">- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="christophe@krop.fr" date="1709294400">- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that &lt;summary/&gt; tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old &amp; new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add conflict in appstream-qt6-devel with
  libAppStreamQt-devel &lt; 1.0. This is required to fix a file
  conflict in SLE with the old libAppStreamQt-devel package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 1.0.3:
  + Features:
  * validator: Check that description lists don't get translated
  * validator: Improve translation checks for descriptions
  * cli: compose: Allow to propagate selected custom entries to
    catalog output
  * validator: Check for common typo of "scheme_preference"
    branding property
  * xml: Generate a developer_name compat tag for older 3rd-party
    parsers
  * validator: Flag duplicate branding colors as invalid
  * Add Plasma Mobile as recognized desktop-style
  + Specification:
  * docs: Clarify a developer element is not allowed to exist
    multiple times
  * docs: Explicitly clarify a developer/name element must not be
    repeated
  * docs: Clarify metainfo translation rules a bit
  + Bugfixes:
  * qt: Fix relocation of Config.cmake files
  * cli: check-syscompat: Recognize available required controls
    as available
  * validator: Guard issue emission functions with G_GNUC_PRINTF
  * validator: Always use secure string formatting for issue emit
    function
  * utils: Explicitly set format style when installing catalog
    metadata
  * Suppress static-analyzer drawing wrong conclusions on GCC 14
  + Miscellaneous:
  * docs: List AppStreamCompose as related to AppStream
  * docs: Add manpages back
  * validator: Mark developer-id-missing as info-priority again</changelog>
  <changelog author="dimstar@opensuse.org" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="christophe@krop.fr" date="1734696000">- Update to 1.0.4
  Features:
  * bundle: Add AS_BUNDLE_KIND_SYSUPDATE
  * desktop-style-ids: Add dark support for Plasma
  * desktop-style-ids: add pantheon:dark
  * qt: Expose branding color
  * sysinfo: Add memory size detection support for Illumos and
    Solaris
  * sysinfo: Add memory size detection support for GNU/Hurd
  * validator: Don't fail validation if a snapshot release is
    missing a time
  Specification:
  * docs: Note that support for some legacy path was dropped in 1.0
  * docs: Update fd.o spec URLs
  * docs: Better explain desktop applications
  * Update ESRA website URL
  Bugfixes:
  * validator: Make sure we read an initialised variable
  * qt: Specify utc as the dates' timezone
  * tests: Ignore some tests on Windows
  * sysinfo: make uname() usage POSIX compliant
  * Only emit legacy compat tag developer_name for catalog data
  * compose: Allow file discovery even in symlinked directories
  * Avoid a race condition when loading GResource data
  * validator: Mention length limit in summary length warning message
  * utils: Explicitly set permissions on installed metadata files
  * as-vercmp: Fix gtkdoc to not start with '&gt;'
  Miscellaneous:
  * desktop-style-ids: Remove Endless
  * ci: Fix FreeBSD build (update `py-gi-docgen`)
  * ci: Update to Ubuntu 24.04 for Debian Testing builds
  * utils: Assume 64px as size when installing an icon tarball of
    unknown size</changelog>
  <changelog author="meissner@suse.com" date="1742731200">- build with PIE mode also when using gcc13 (bsc#1239941)</changelog>
  <changelog author="christophe@krop.fr" date="1746014400">- Update to 1.0.5
  Features:
  * qt: Expose markup conversion utils
  * desktop-styles: Add android and iOS
  * validator: Check for xml:lang="en" being used on description
    template elements
  * validator: Flag cases of raw text in "description" elements
  * metadata: Add more known extensions into
    as_metadata_file_guess_style()
  Specification:
  * docs: Clarify that the style segment of a screenshot
    environment is optional
  * docs: Explain consequences of defining an icon for
    desktop-app metainfo
  * docs: Clarify that description content must be in p/li
    elements
  Bugfixes:
  * validator: mark as_validator_issue_tag_list static
  * docs: Add workaround for gi-docgen misnaming devhelp files
  * compose: Do not permit SVG images as screenshots
  * compose: Don't "forget" to scan remaining paths when
    re-encountering a dir
  * pool: Try explicit singular term match if we only have
    low-quality tokens
  * utils: Provide compatibility with Fedora icon tarballs when
    installing them
  * utils: Remove leftover g_chmod()
  * zstd-decompressor: Pass output/written data when decompression
    finished
  * utils: Expect a dash in icons file name
  * utils: Recognize .yml* and .yaml* file extension variants,
    and .zst extension
  * utils: Rename the appstream file when re-saving it on install</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Make qt6 the default qt flavor and qt5 the flavor built
  separately and disable the qt5 flavor in SLE16 where we don't
  want to have Qt5 libraries.</changelog>
</package>
<package pkgid="7e45e6ddbc2bde535edbabc6b861ea93318ec234a53b0e634d3806ff453988f725df624bdd047884d7735ab10d46473560403a53647fd05f8888e79da080a813" name="apptainer" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="bp160.1.36"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690372800">- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is
  compiled with setuid</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690545600">- updated to 1.2.2 with following changes:
  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.
  * Fix build failures when in setuid mode and unprivileged user namespaces are
    unavailable and the --fakeroot option is not selected.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Update license for the package to cover also OpenSSL and CRYPTOGAMS
  part of chacha_ppc64le.s</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695643200">- updated to 1.2.3 with following changes:
  * The apptainer push/pull commands now show a progress bar for the oras
    protocol like there was for docker and library protocols.
  * The --nv and --rocm flags can now be used simultaneously.
  * Fix the use of APPTAINER_CONFIGDIR with apptainer instance start and action
    commands that refer to instance://.
  * Fix the issue that apptainer would not read credentials from the Docker
    fallback path ~/.docker/config.json if missing in the apptainer
    credentials.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695816000">- removed CRYPTOGAMS license as not known in OBS and OpenSSL is
  also valid</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1698148800">- Do not build squashfuse, require it as a dependency.
  Removed: squashfuse-0.1.105.tar.gz, 70.patch
- Replace awkward 'Obsoletes: singularity-*' as well as the
  'Provides: Singularity' by 'Conflicts:' and drop the provides -
  the versioning scheme does not match and we do not automatically
  migrate from one to the other.
- Exclude platforms which do not provide all build dependencies.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1706702400">- Updated apptainer to version 1.2.5
  * Added `libnvidia-nvvm` to `nvliblist.conf`. Newer NVIDIA
    Drivers (known with &gt;= 525.85.05) require this lib to compile
    OpenCL programs against NVIDIA GPUs, i.e. `libnvidia-opencl`
    depends on `libnvidia-nvvm`.
  * Disable the usage of cgroup in instance creation when
    `--fakeroot` is passed.
  * Disable the usage of cgroup in instance creation when `hidepid`
    mount option on `/proc` is set.
  * Fixed a regression introduced in 1.2.0 where the user's
    password file information was not copied in to the container
    when there was a parent root-mapped user namespace (as is the
    case for example in `cvmfsexec`).
  * Added the upcoming NVIDIA driver library `libnvidia-gpucomp.so`
    to the list of libraries to add to NVIDIA GPU-enabled
    containers. Fixed missing error handling during the creation
    of an encrypted image that lead to the generation of corrupted
    images.
  * Use `APPTAINER_TMPDIR` for temporary files during privileged
    image encryption.
  * If rootless unified cgroups v2 is available when starting an
    image but `XDG_RUNTIME_DIR` or `DBUS_SESSION_BUS_ADDRESS` is
    not set, print an info message that stats will not be available
    instead of exiting with a fatal error.
  * Allow templated build arguments to definition files to have
    empty values.
- Package .def templates separately for different SPs.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1710331200">- Fix 'apptainer build' using signed packages from the SUSE
  Registry (bsc#1221364).
  * Remove-signatures-from-Docker-images.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1710504000">- Updated apptainer to version 1.3.0
  * FUSE mounts are now supported in setuid mode, enabling full
    functionality even when kernel filesystem mounts are insecure due to
    unprivileged users having write access to raw filesystems in
    containers. When allow `setuid-mount extfs = no` (the default) in
    apptainer.conf, then the fuse2fs image driver will be used to mount
    ext3 images in setuid mode instead of the kernel driver (ext3 images
    are primarily used for the `--overlay` feature), restoring
    functionality that was removed by default in Apptainer 1.1.8 because
    of the security risk.
    The allow `setuid-mount squashfs` configuration option in
    `apptainer.conf` now has a new default called `iflimited` which allows
    kernel squashfs mounts only if there is at least one `limit container`
    option set or if Execution Control Lists are activated in ecl.toml.
    If kernel squashfs mounts are are not allowed, then the squashfuse
    image driver will be used instead.
    `iflimited` is the default because if one of those limits are used
    the system administrator ensures that unprivileged users do not have
    write access to the containers, but on the other hand using FUSE
    would enable a user to theoretically bypass the limits via `ptrace()`
    because the FUSE process runs as that user.
    The `fuse-overlayfs` image driver will also now be tried in setuid
    mode if the kernel overlayfs driver does not work (for example if
    one of the layers is a FUSE filesystem).  In addition, if `allow
    setuid-mount encrypted = no` then the unprivileged gocryptfs format
    will be used for encrypting SIF files instead of the kernel
    device-mapper. If a SIF file was encrypted using the gocryptfs
    format, it can now be mounted in setuid mode in addition to
    non-setuid mode.
  * Change the default in user namespace mode to use either kernel
    overlayfs or fuse-overlayfs instead of the underlay feature for the
    purpose of adding bind mount points. That was already the default in
    setuid mode; this change makes it consistent. The underlay feature
    can still be used with the `--underlay` option, but it is deprecated
    because the implementation is complicated and measurements have
    shown that the performance of underlay is similar to overlayfs and
    fuse-overlayfs.
    For now the underlay feature can be made the default again with a
    new `preferred` value on the `enable underlay` configuration option.
    Also the `--underlay` option can be used in setuid mode or as the
    root user, although it was ignored previously.
  * Prefer again to use kernel overlayfs over fuse-overlayfs when a
    lower layer is FUSE and there's no writable upper layer, undoing the
    change from 1.2.0. Another workaround was found for the problem that
    change addressed. This applies in both setuid mode and in user
    namespace mode.
  * `--cwd` is now the preferred form of the flag for setting the
    container's working directory, though `--pwd` is still supported for
    compatibility.
  * The way `--home` is handled when running as root (e.g. sudo apptainer)
    or with `--fakeroot` has changed. Previously, we were only modifying
    the `HOME` environment variable in these cases, while leaving the
    container's `/etc/passwd` file unchanged (with its homedir field
    pointing to `/root`, regardless of the value passed to `--home`). With
    this change, both value of HOME and the contents of `/etc/passwd` in
    the container will reflect the value passed to `--home` if the
    container is readonly. If the container is writable, the
    `/etc/passwd` file is left alone because it can interfere with
    commands that want to modify it.
  * The `--vm` and related flags to start apptainer inside a VM have been
    removed. This functionality was related to the retired Singularity Desktop
    / SyOS projects.
  * The keyserver-related commands that were under `remote` have been moved to
    their own, dedicated `keyserver` command. Run `apptainer help keyserver`
    for more information.
  * The commands related to OCI/Docker registries that were under `remote` have
    been moved to their own, dedicated `registry` command. Run
    `apptainer help registry` for more information.
  * The the `remote list` subcommand now outputs only remote endpoints (with
    keyservers and OCI/Docker registries having been moved to separate
    commands), and the output has been streamlined.
  * Adding a new remote endpoint using the `apptainer remote add` command will
    now set the new endpoint as default. This behavior can be suppressed by
    supplying the `--no-default` (or `-n`) flag to `remote add`.
  * Skip parsing build definition file template variables after comments
    beginning with a hash symbol.
  * The global `/tmp` directory is no longer used for gocryptfs mountpoints.
- New Features &amp; Functionality
  * The `remote status` command will now print the username, realname, and
    email of the logged-in user, if available.
  * Add monitoring feature support, which requires the usage of an
    additional tool named `apptheus`, this tool will put apptainer starter
    into a newly created cgroup and collect system metrics.
  * A new `--no-pid` flag for `apptainer run/shell/exec` disables the PID
    namespace inferred by `--containall` and `--compat`.
  * Added `--config` option to `keyserver` commands.
  * Honor an optional remoteName argument to the `keyserver list` command.
  * Added the `APPTAINER_ENCRYPTION_PEM_DATA` env var to allow for
    encrypting and running encrypted containers without a PEM file.
  * Adding `--sharens` mode for `apptainer exec/run/shell`, which enables to
    run multiple apptainer instances created by the same parent using
    the same image in the same user namespace.
- Make 'gocryptfs' an optional dependency.
- Make apptainer definition templates version dependent.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1715601600">- Make sure, digest values handled by the Go library
  github.com/opencontainers/go-digest and used throughout the
  Go-implemented containers ecosystem are always validated. This
  prevents attackers from triggering unexpected authenticated
  registry accesses.
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
    (CVE-2024-3727, bsc#1224114).</changelog>
</package>
<package pkgid="feeee3781a4c52e8ddf53a018c2a71e6691cd8e917effae2a1c6316fa187f29962151f25c0f74dee73cba06e67ceed1aec1f4ea41f94031ac7fca294fa08edff" name="apptainer" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp160.1.1"/>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1735905600">- Update to version 1.3.6
  * Avoid using kernel overlayfs when the lower layer is a sandbox
    on an incompatible filesystem type such as GPFS or Lustre.
    For those cases use fuse-overlayfs instead. This fixes a
    regression introduced in 1.3.0. The regression didn't much
    impact Lustre because kernel overlayfs refused to try to use
    it and Apptainer proceeded to use fuse-overlayfs anyway, but
    with GPFS the kernel overlayfs allowed mounting but returned
    stale file handle errors.
- Version 1.3.5
  * Fix a regression introduced in 1.3.4 that overwrote existing
    standard `/.singularity.d` files such as `runscript` in
    container images even if they had been modified.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Support parsing nested variables defined inside `%arguments`
    section of definition files.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
- Version 1.3.4
  * Fixed sif-embedded overlay partitions for containers that are
    larger than 2 gigabytes.
  * Fixed the failure when starting apptainer with
    `instance --fakeroot`.
  * `apptainer build -B ...` can now be used to mount custom
    resolv.conf and hosts files from non-standard outside locations.
    This can be used to run `apptainer build` in a nix-build sandbox
    that has no `/etc/resolv.conf`.
  * Fixed failing builds from local images that have symbolic links
    for paths that are part of the base container environment (e.g.
    /var/tmp -&gt; /tmp).
  * Show info messages suggesting to use
    `enable underlay = preferred` or the `--underlay` flag when
    overlay is implied for bind mounts but the kernel is too old
    to support fuse mounts in user namespaces and so tries to use
    fusermount.
  * When someone uses a `yum` bootstrap to build a container
    without using subuid-based fakeroot or root, warn that it is
    unlikely to work.
  * Allow a writable `--overlay` to be used with `--nvccli` instead
    of `--writable-tmpfs`.
  * If an error "no descriptor found for reference" is seen while
    getting an oci container, retry the operation up to five times.
  * Make fakeroot Recommended for SUSE rpms instead of Required.
  * Allow bind mounts onto existing files on r/o NFS filesystems.
  * If an error is seen in the %post section when building a
    container using fakeroot mode 3 (with the fakeroot command)
    then show a message suggesting using `--ignore-fakeroot-command`
    and referring to the documentation about how to install and use
    it inside the container definition file.
  * Show a more helpful error message when using fakeroot in suid
    mode and there's an `/etc/subuid` mapping even though user
    namespaces are not available (user namespaces are required for
    `/etc/subuid` mapping).
- Version 1.3.3
  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb
    in CUDA 12+.
  * Ensure opened/kept file descriptors in stage 1 are not closed
    during the Go garbage collection to avoid "bad file descriptor"
    errors at startup.
  * Fixed a segmentation violation issue when running Apptainer
    checkpoint.
  * Fixed an issue that Apptainer won't read default docker
    credentials.
- Version 1.3.2
  * Fix for
    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)
    in a dependent library which describes a flaw that can allow
    attackers to trigger unexpected authenticated registry accesses
    due to object digest values not being validated in all cases.
  * Fixed the issue when nesting `apptainer instance start` inside
    a container on cgroups-v2 capable host.
  * Fixed the issue that oras download progress bar gets stuck
    when downloading large images.
- Version 1.3.1
  * Make 'apptainer build' work with signed Docker containers.
  * Fixed regression introduced in 1.3.0 that prevented closing
    cryptsetup and the corresponding loop device after running
    an encrypted sif container file in suid mode.
  * Stopped binding over the default timezone in the container
    with the host's timezone, which led to unexpected behavior if
    the application changed timezones.
  * Added progress bars for `oras://` push and pull.
  * Hide `Instance stats will not be available` message under
    `--sharens` mode.
  * Fix problem where credentials locally stored with
    `registry login` command were not usable in some execution
    flows. Run `registry login` again with latest version to ensure
    credentials are stored correctly.
  * Make runscript timeout configurable.
  * Return invalid bind path mount options during bind path
    parsing.
  * Make the INFO message more helpful when a running background
    process at exit time causes a FUSE mount to not shut down
    cleanly.
  * Fixed the wrong mediaType in the oras push manifest.
- Add Apptainer definition template for SLE15-SP7.
- Obsoleted:
  * Remove-signatures-from-Docker-images.patch
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
- Make sure, build is reproducible by setting the GNU build ID to one
  derived from the Go one. See https://pkg.go.dev/cmd/link.
- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1738152000">- Update golang.org/x/net to v0.23 to fix CVE-2023-45288
  (bnc#1236528).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1742299200">- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110
  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)
    GO-2025-3503 CVE-2025-22870 (bsc#1238611):
    Update to: golang.org/x/net@v0.36.0
  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)
    GO-2025-3487 CVE-2025-22869 (bsc#1239341):
    Update to: golang.org/x/crypto@v0.35.0
  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):
    Update to: github.com/go-jose/go-jose/v3@v3.0.4
  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):
    Update to: github.com/docker/docker@v25.0.6+incompatible</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1748865600">- Update to 1.4.1
  * Fix the use of libsubid which had been broken by the revision
    applied in 1.4.0-rc.2.
  * Fix a bug introduced in 1.4.0 that caused arm64 to be
    mis-converted to arm64v8 and resulted in a failure when pulling
    OCI containers.
  * Fix user database lookup in master process preventing instance
    from starting correctly on systems using winbind.
  * Check for existence of `/run/systemd/system` when verifying
    cgroups can be used via systemd manager.
  * Add a clear error message if someone tries to use privileged
    network options while not using setuid mode.
  * Allow multi-arch oci-archive files that have a nested index
    with the manifest. This is the default format (both for Docker
    and OCI) when using `nerdctl save`.
  * Test if docker-archive is actually an oci-archive (since Docker
    version 25), and if it is oci then use the OCI parser to avoid
    bugs in the Docker parser. Save the daemon-daemon references
    to a temporary docker-archive, to benefit from the same
    improvements also for those references. Parse as oci-archive.
- New Features &amp; Functionality in from ineherited 1.4.0
  * Add new build option `--mksquashfs-args` to pass additional
    arguments to the `mksquashfs` command when building SIF files.
    If a compression method other than gzip is selected, the SIF
    file might not work with older installations of Apptainer
    or Singularity, so an INFO message about that is printed. On
    the other hand, an INFO message that was printed (twice) when
    running an image with non-gzip compression has been removed.
  * If the `mksquashfs` version is new enough (version 4.6 in
    Leaep 16.0), then show a percentage progress bar (with ETA)
    during SIF creation in the default log level. If the `mksquashfs`
    version is older, then in verbose or debug log level show the
    output of mksquashfs with its own progress bar.
  * Statistics are now normally available for instances that are
    started by non-root users on cgroups v2 systems. The instance
    will be started in the current cgroup. Information about
    configuration issues that prevent collection of statistics are
    displayed as INFO messages by default.
  * Add a `--sandbox` option to `apptainer pull`.
  * Add configuration file binding to the `--nv` option. Files
    that are recognized in the NVIDIA Container Toolkit, including
    files for EGL ICD, were added to the default `nvliblist.conf`.
  * It is now possible to use multiple environment variable files
    using the `--env-file` flag. Files can be specified as a
    comma-separated list or by using the flag multiple times.
    Variables defined in later files take precedence over earlier
    files.
  * The registry login and registry logout commands now support a
    `--authfile &lt;path&gt;` option, which causes OCI credentials to be
    written to / removed from a custom file located at `&lt;path&gt;`
    instead of the default location (`$HOME/.apptainer/docker-config.json`).
    The commands `pull`, `push`, `run`, `exec`, `shell` and
    instance start can now also be passed a `--authfile &lt;path&gt;`
    option, to read OCI registry credentials from this custom file.
  * A new `--netns-path` option takes a path to a network
    namespace to join when starting a container. The root user
    may join any network namespace. An unprivileged user can only
    join a network namespace specified in the new `allow netns
    paths` directive in `apptainer.conf`, if they are also listed
    in `allow net users` / `allow net groups` and apptainer is
    installed with setuid privileges. Not supported with
    `--fakeroot`.
  * `apptainer.conf` now accepts setting the following options:
    `allow ipc ns` -- Default value is `yes`; when set to `no`,
  it will disable the use of the `--ipc` flag.
    `allow uts ns` -- Default value is `yes`; when set to `no`,
  it will invalidate the use of the `--uts` and `--hostname`
  flags.
    `allow user ns` -- Default value is `yes`; when set to
  `no`, it will disable creation of user namespaces. Note
  that this will prevent execution of containers with the
  `--userns` or `--fakeroot` flags and with unprivileged
  installations of Apptainer.
- Changed defaults / behaviours
  * Label the starter process seen in `ps` with the image filename,
    for example: Apptainer runtime parent: `example.sif`.
  * Remove runtime and compute libraries from `rocmliblist.conf`.
    They should instead be provided by the container image.
  * Allow overriding the build architecture with `--arch` and
    `--arch-variant`, to build images for another architecture
    than the current host arch. This requires that the host has
    been set up to support multiple architectures (`binfmt_misc`).
  * Complete the previously partial support for the riscv64
    architecture.
  * Show a warning message if changing directory to the cwd
    fails, instead of silently switching to the home directory
    or `/`.
  * Write starter messages to stderr when an instance fails to
    start. Previously they were incorrectly written to stdout.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Fix storage of credentials for `docker.io` to behave the same
    as for `index.docker.io`.
  * Change message log level from warning to debug when environment
    variables set inside a container or by `APPTAINERENV` have a
    different value than the environment variable on the host.
  * Change the default message level from silent to the normal
    level in the nested apptainer that executes a build's `%post`
    section, and suppress an unnecessary warning message.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
  * Remove the little-known `fakerootcallback` functionality.
  * Update the default pacman confURL for `Bootstrap: arch`
    container builds.
  * Update the bundled fuse programs to their latest releases.
- Bug fixes
  * Fix the `mconfig -s` option to build the apptainer and starter
    binaries statically as documented.
  * `%files from` in a definition file will now correctly copy
    symlinks that `%point` to a target above the destination
    directory but inside the `%destination` stage root filesystem.
  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -&gt; `libnvoptix.so`).
  * Avoid timeouts when cleaning up from building gocryptfs-encrypted
    SIF files.
  * Fix bug that prevented build with `--passphrase` or
    `--pem-path` but without `--encrypt` from implying fakeroot.
  * Fix hang when copying files between build stages while using
    suid mode without user namespaces.
  * Fix running and building containers of different architectures
    than the host via binfmt_misc when using rootless fakeroot.
  * Fix `target: no such file or directory` error when extracting
    layers from certain OCI images that manipulate hard links
    across layers.
  * Fix the crash that happened when executing a privilege-encrypted
    container as root.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757246400">- Update to 1.4.2
  * Restore looking for registry mirrors in /etc/containers/registry.conf
    and related files. This had been inadvertently dropped beginning in 1.4.0.
  * Fix use of the image cache when the home directory contains @ characters.
    Previously it would assume that it was the start of a digest in the oci-dir.
  * Fix signature verification failures on unsigned images.
  * Add additional .deb packages to the release assets that include the label
    trixie+ to indicate that they are for installing on Debian 13 or later.
    Those packages are necessary to work with the new libfuse3 library in
    Debian13. They also support libsubid, unlike the default packages because
    they are built on Debian 11 which doesn't have that library.
  * Add automatic triggering of Ubuntu PPA builds whenever there's a new
    apptainer release.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
</package>
<package pkgid="b83547f1470a9c46626f3ba4b769459b496b3a83ab256bf49fd6d9b49bd25bc2b770eccb8d3e5e684bfd269bb88531cad0b56da41e0587e99786d5030cdb11a0" name="apptainer" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp160.2.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1748865600">- Update to 1.4.1
  * Fix the use of libsubid which had been broken by the revision
    applied in 1.4.0-rc.2.
  * Fix a bug introduced in 1.4.0 that caused arm64 to be
    mis-converted to arm64v8 and resulted in a failure when pulling
    OCI containers.
  * Fix user database lookup in master process preventing instance
    from starting correctly on systems using winbind.
  * Check for existence of `/run/systemd/system` when verifying
    cgroups can be used via systemd manager.
  * Add a clear error message if someone tries to use privileged
    network options while not using setuid mode.
  * Allow multi-arch oci-archive files that have a nested index
    with the manifest. This is the default format (both for Docker
    and OCI) when using `nerdctl save`.
  * Test if docker-archive is actually an oci-archive (since Docker
    version 25), and if it is oci then use the OCI parser to avoid
    bugs in the Docker parser. Save the daemon-daemon references
    to a temporary docker-archive, to benefit from the same
    improvements also for those references. Parse as oci-archive.
- New Features &amp; Functionality in from ineherited 1.4.0
  * Add new build option `--mksquashfs-args` to pass additional
    arguments to the `mksquashfs` command when building SIF files.
    If a compression method other than gzip is selected, the SIF
    file might not work with older installations of Apptainer
    or Singularity, so an INFO message about that is printed. On
    the other hand, an INFO message that was printed (twice) when
    running an image with non-gzip compression has been removed.
  * If the `mksquashfs` version is new enough (version 4.6 in
    Leaep 16.0), then show a percentage progress bar (with ETA)
    during SIF creation in the default log level. If the `mksquashfs`
    version is older, then in verbose or debug log level show the
    output of mksquashfs with its own progress bar.
  * Statistics are now normally available for instances that are
    started by non-root users on cgroups v2 systems. The instance
    will be started in the current cgroup. Information about
    configuration issues that prevent collection of statistics are
    displayed as INFO messages by default.
  * Add a `--sandbox` option to `apptainer pull`.
  * Add configuration file binding to the `--nv` option. Files
    that are recognized in the NVIDIA Container Toolkit, including
    files for EGL ICD, were added to the default `nvliblist.conf`.
  * It is now possible to use multiple environment variable files
    using the `--env-file` flag. Files can be specified as a
    comma-separated list or by using the flag multiple times.
    Variables defined in later files take precedence over earlier
    files.
  * The registry login and registry logout commands now support a
    `--authfile &lt;path&gt;` option, which causes OCI credentials to be
    written to / removed from a custom file located at `&lt;path&gt;`
    instead of the default location (`$HOME/.apptainer/docker-config.json`).
    The commands `pull`, `push`, `run`, `exec`, `shell` and
    instance start can now also be passed a `--authfile &lt;path&gt;`
    option, to read OCI registry credentials from this custom file.
  * A new `--netns-path` option takes a path to a network
    namespace to join when starting a container. The root user
    may join any network namespace. An unprivileged user can only
    join a network namespace specified in the new `allow netns
    paths` directive in `apptainer.conf`, if they are also listed
    in `allow net users` / `allow net groups` and apptainer is
    installed with setuid privileges. Not supported with
    `--fakeroot`.
  * `apptainer.conf` now accepts setting the following options:
    `allow ipc ns` -- Default value is `yes`; when set to `no`,
  it will disable the use of the `--ipc` flag.
    `allow uts ns` -- Default value is `yes`; when set to `no`,
  it will invalidate the use of the `--uts` and `--hostname`
  flags.
    `allow user ns` -- Default value is `yes`; when set to
  `no`, it will disable creation of user namespaces. Note
  that this will prevent execution of containers with the
  `--userns` or `--fakeroot` flags and with unprivileged
  installations of Apptainer.
- Changed defaults / behaviours
  * Label the starter process seen in `ps` with the image filename,
    for example: Apptainer runtime parent: `example.sif`.
  * Remove runtime and compute libraries from `rocmliblist.conf`.
    They should instead be provided by the container image.
  * Allow overriding the build architecture with `--arch` and
    `--arch-variant`, to build images for another architecture
    than the current host arch. This requires that the host has
    been set up to support multiple architectures (`binfmt_misc`).
  * Complete the previously partial support for the riscv64
    architecture.
  * Show a warning message if changing directory to the cwd
    fails, instead of silently switching to the home directory
    or `/`.
  * Write starter messages to stderr when an instance fails to
    start. Previously they were incorrectly written to stdout.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Fix storage of credentials for `docker.io` to behave the same
    as for `index.docker.io`.
  * Change message log level from warning to debug when environment
    variables set inside a container or by `APPTAINERENV` have a
    different value than the environment variable on the host.
  * Change the default message level from silent to the normal
    level in the nested apptainer that executes a build's `%post`
    section, and suppress an unnecessary warning message.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
  * Remove the little-known `fakerootcallback` functionality.
  * Update the default pacman confURL for `Bootstrap: arch`
    container builds.
  * Update the bundled fuse programs to their latest releases.
- Bug fixes
  * Fix the `mconfig -s` option to build the apptainer and starter
    binaries statically as documented.
  * `%files from` in a definition file will now correctly copy
    symlinks that `%point` to a target above the destination
    directory but inside the `%destination` stage root filesystem.
  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -&gt; `libnvoptix.so`).
  * Avoid timeouts when cleaning up from building gocryptfs-encrypted
    SIF files.
  * Fix bug that prevented build with `--passphrase` or
    `--pem-path` but without `--encrypt` from implying fakeroot.
  * Fix hang when copying files between build stages while using
    suid mode without user namespaces.
  * Fix running and building containers of different architectures
    than the host via binfmt_misc when using rootless fakeroot.
  * Fix `target: no such file or directory` error when extracting
    layers from certain OCI images that manipulate hard links
    across layers.
  * Fix the crash that happened when executing a privilege-encrypted
    container as root.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757246400">- Update to 1.4.2
  * Restore looking for registry mirrors in /etc/containers/registry.conf
    and related files. This had been inadvertently dropped beginning in 1.4.0.
  * Fix use of the image cache when the home directory contains @ characters.
    Previously it would assume that it was the start of a digest in the oci-dir.
  * Fix signature verification failures on unsigned images.
  * Add additional .deb packages to the release assets that include the label
    trixie+ to indicate that they are for installing on Debian 13 or later.
    Those packages are necessary to work with the new libfuse3 library in
    Debian13. They also support libsubid, unlike the default packages because
    they are built on Debian 11 which doesn't have that library.
  * Add automatic triggering of Ubuntu PPA builds whenever there's a new
    apptainer release.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1769688000">- Sync with Factory version which also fixes CVE-2024-45310
  tracked in bsc#1257432
- Readded SLE-15SP6.def as it was removed from Factory</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451200">- Fix  CVE-2026-33814 GO-2026-4918 (bsc#1265844)
  Update golang.org/x/net to version v0.53.0
- Integrate vulnchecker into %check stage (optional).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451201">- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
  CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830,
  CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595,
  CVE-2026-39835 (bsc#1266202)
  Update golang.org/x/crypto to v0.52.0</changelog>
</package>
<package pkgid="9771a3249216154ccebeec2bfffcb91267846db0d020a1812cd1adb46ed7afc94c0ec42d3ab035a681958d523c0fbf6987d109142f26913c2a4bf0a4d4adbf02" name="apptainer" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp160.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1769688000">- Sync with Factory version which also fixes CVE-2024-45310
  tracked in bsc#1257432
- Readded SLE-15SP6.def as it was removed from Factory</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451200">- Fix  CVE-2026-33814 GO-2026-4918 (bsc#1265844)
  Update golang.org/x/net to version v0.53.0
- Integrate vulnchecker into %check stage (optional).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451201">- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
  CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830,
  CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595,
  CVE-2026-39835 (bsc#1266202)
  Update golang.org/x/crypto to v0.52.0</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779537600">- Add improved handling of suid-starter:
  * Add system group `apptainer`
  * Make sure, only users belonging to this group are able to
    run the application.
  * Document this in a README and point user to it if execution
    fails.
  Building of the 'suid-root' starter is still optional.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1780056000">- Fix CVE-2026-39821 (GO-2026-5026) (bsc#1266656)
  Update golang.org/x/net to 0.55.0.</changelog>
</package>
<package pkgid="caa51ef7e6702b2bf03a1895f16a1e4bffdf01df61a8ae99372790a6df611e8a64d3fdf4a5bac39ed89b11b4c44ffb9b3899330abab0e048962011e81b84066b" name="apptainer" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="bp160.1.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1769688000">- Sync with Factory version which also fixes CVE-2024-45310
  tracked in bsc#1257432
- Readded SLE-15SP6.def as it was removed from Factory</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451200">- Fix  CVE-2026-33814 GO-2026-4918 (bsc#1265844)
  Update golang.org/x/net to version v0.53.0
- Integrate vulnchecker into %check stage (optional).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451201">- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
  CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830,
  CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595,
  CVE-2026-39835 (bsc#1266202)
  Update golang.org/x/crypto to v0.52.0</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779537600">- Add improved handling of suid-starter:
  * Add system group `apptainer`
  * Make sure, only users belonging to this group are able to
    run the application.
  * Document this in a README and point user to it if execution
    fails.
  Building of the 'suid-root' starter is still optional.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1780056000">- Fix CVE-2026-39821 (GO-2026-5026) (bsc#1266656)
  Update golang.org/x/net to 0.55.0.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1780920000">- Update apptainer to version v1.5.1
  * Security fix (bsc#1267982):
    Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path
    matching for limit container paths directive. This is only
    applicable to SUID installations that have paths listed in
    limit container paths that are string prefixes of other paths
    which are not desired to be included in the list. For example,
    if /scratch is in the list but `/scratch2` also exists and contains
    container images, previously the latter would match but now
    only images under the exactly matching `/scratch` are included.
  Other changes:
  * Work around segmentation fault sometimes seen while `mksquashfs`
    under proot is creating a SIF file.
  * Update bundled PRoot to version 5.4.0-rootless.3 in order to
    fix a problem where SIF files could be corrupted when
    `mksquashfs` died with a signal. The proot command was not
    passing back an error exit code.
  * Updated bundled `squashfuse_ll` to version 0.6.2 in order to
    fix a crash sometimes seen with apptainer in unprivileged
    docker.
  * Update bundled fuse2fs to version 1.47.4 instead of patching
    the bugs in 1.47.3.
  * Fix a crash that happened when `/etc/resolv.conf` was a
    symlink while building from a definition file using the
    localimage bootstrap.
  * Support hosts that have an /etc/resolv.conf symlink pointing
    to `../run` in addition to `/run`.
  * Change the download-dependencies script to skip downloading
    the PRoot source code on architectures that it is known to
    not support (that is: ppc*, s390*, and riscv*).
    In those situations Apptainer will skip trying to compile
    and run proot. As a result original owners and groups of
    files will not be preserved in SIF images built by
    unprivileged users, as was the case for all architectures
    prior to 1.5.0.
  * Fix panic encountered during progress bar update while
    pulling image.
  * Fix fakeroot overwriting root's username in `/etc/passwd`
    with the host user's name, a regression introduced in v1.5.0.
  * Add nonested flag for --mount specifications to prevent
    individual bind mounts from being passed to nested containers
    via `APPTAINER_BIND`.
    Example: `--mount type=bind,source=/data,destination=/mnt,nonested`.
- Changes from version v1.5.0:
  New Features &amp; Functionalities
  * Add support for a subset of the Container Device Interface
    (CDI) standard through new `--device` and
    `--cdi-dirs run/shell/exec` options. Honors environment
    variable settings, bind mounts, and device files listed in
    CDI specification files.
  * Add support for selective mounting of Intel(R) Gaudi
    accelerators. This feature is only for use in combination
    with a minimal /dev directory, selected either with the
    `--contain` flag or by configuring mount dev with the minimal
    option; otherwise all the devices are available anyway. This
    feature is enabled via the `--intel-hpu option` and by
    specifying the HABANA_VISIBLE_DEVICES environment variable,
    which should contain a comma-separated list of device IDs
    (e.g., "1,2,3") or "all" to import all of them.
    The default if `HABANA_VISIBLE_DEVICES` is not set is "all".
  * Add support for downloading SIF images from an IPFS
    peer-to-peer cluster using an HTTP gateway (similar to the
    existing support for IPFS in the curl tool). The address of
    the gateway can be set in the `IPFS_GATEWAY` environment
    variable or read from ~/.ipfs/gateway or /etc/ipfs/gateway.
  * Add `--no-env` action and instance option and corresponding
    `APPTAINER_NOENV` environment variable that can provide a
    comma-separated list of environment variables to skip
    importing from the host environment into the container.
  * Add `--data` build option which creates a SIF file with
    a squashfs data partition instead of a code partition,
    given an existing squashfs file as the source.
  * If `PREPEND_LD_LIBRARY_PATH` is set in the container
    environment (through an `--env` option, an `APPTAINERENV_`
    prefix from the host, or in the container definition)
    then prepend that string to `:$LD_LIBRARY_PATH`. Likewise
    if `APPEND_LD_LIBRARY_PATH` is set in the container
    environment then append that string to `$LD_LIBRARY_PATH:`.
    This is only done when `LD_LIBRARY_PATH` is set, although
    if the container is based on glibc, when `LD_LIBRARY_PATH`
    is not set it will first be filled with the default
    library search path as found through ldconfig.
  * Create reproducible SIF images, if the environment variable
    `SOURCE_DATE_EPOCH` has been set (as a Unix timestamp given
    as seconds since the beginning of 1970, in the UTC timezone).
    Also add `--reproducible` flag to build and pull from
    `oras://` sources. This sets `SOURCE_DATE_EPOCH`
    automatically from the image "created" time.
  * Support hosts that have `/etc/resolv.conf` pointing to a
    symlink under /run, such as those hosts that are running
    systemd-resolved. In this case, the symlink is copied into
    the container and the parent directory of the target of the
    symlink is bind-mounted from the host. The result is that
    even if the target of the symlink is replaced with a new file,
    the container sees the update in `/etc/resolv.conf`.
  * Add `/etc/resolv.conf` to the list of host paths that can be
    prevented from automatic import into the container with the
    `--no-mount` option.
  * Preserve owner and group information on files in containers
    downloaded from OCI registries when building SIF files, even
    for unprivileged users. This takes advantage of the fact that
    the library (umoci) that downloads containers preserves owner
    and group information in an extended attribute. Adds bundled
    tool proot which is modified from the upstream tool by the
    rootless-containers project to make the owner and group appear
    to be in the ordinary `stat()` information. That tool is now
    used when invoking mksquashfs to create the filesystem
    partition in a SIF file. It can be disabled with the hidden
    build option `--ignore-proot`.
  * When unsquashing an image while running under a root-mapped
    user namespace (such as when using fakeroot without subuid
    mapping), insert another namespace mapping back to the
    original user so unsquashfs doesn't try (and fail) to change
    the owner and group information on the unpacked files.
  * Record image digest metadata (sha256 from RepoDigests), for
    OCI registry images. Also add the image name (ref) of the
    image from "docker", with registry and tag. This is useful
    for traceability, when using docker.io or a tag like latest.
    Unfortunately the feature does not work with "docker-archive"
    or "docker-daemon".
  * Apptainer now supports the `loong64` architecture.
  Changed defaults / behaviours
  * If libraries are bound in to `/.singularity.d/libs` (such as
    with GPU options like `--nv`) and the container is based on
    glibc and `LD_LIBRARY_PATH` is not already set, it is now set
    to the default library search path. Since `/.singularity.d/libs`
    is appended to `LD_LIBRARY_PATH`, this makes libraries
    installed in the container take precedence over libraries
    bound in from the host. This reduces the chances of mismatched
    glibc versions. However, if there are indeed libraries on the
    host that need to take precedence over libraries in the
    container, that can be forced with
    `PREPEND_LD_LIBRARY_PATH=/.singularity.d/libs`.
  * Change the default arm variant to v7, and stop using the GOARM
    environment variable. The variables GOOS, GOARCH and GOARM
    are only used when building.
  * The oras transport now supports architectures beyond amd64.
    Images downloaded from oras without using the cache are now
    checksummed. A progress bar is shown during the process.
    Add support for APPTAINER_TMPDIR to the commands apptainer
    overlay create and apptainer plugin compile.
  Bug Fixes:
  * Make the root default capabilities configuration option apply
    only to the real root user as documented and not to a
    fakeroot user.
  * Fix long-time bug in importing environment variables from oci
    containers (defined by `ENV` in their definition file) with
    shell characters in them. It now escapes them with single
    backslashes instead of double backslashes so they behave
    like they do in podman and docker.
  * The username in `/etc/passwd` inside a container now always
    corresponds to the username of the user on the host even if
    an entry with the same UID is found in the container.
  * When apptainer reinvokes itself on behalf of the run-help
    command, it passes through `LD_LIBRARY_PATH`. This makes it
    work correctly when it was installed with
    `install-unprivileged.sh` on a host operating system that's
    different than the one the installed binaries were built on.</changelog>
</package>
<package pkgid="fa731d3243925d64c7496c3dade6c954264db04b4279a5f382c3b1fd891c857f542daba16463c25ebb29c0cd7453b513fac1fb28ea636d00e92991f4b827f61a" name="apptainer-leap" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="bp160.1.36"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690372800">- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is
  compiled with setuid</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690545600">- updated to 1.2.2 with following changes:
  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.
  * Fix build failures when in setuid mode and unprivileged user namespaces are
    unavailable and the --fakeroot option is not selected.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Update license for the package to cover also OpenSSL and CRYPTOGAMS
  part of chacha_ppc64le.s</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695643200">- updated to 1.2.3 with following changes:
  * The apptainer push/pull commands now show a progress bar for the oras
    protocol like there was for docker and library protocols.
  * The --nv and --rocm flags can now be used simultaneously.
  * Fix the use of APPTAINER_CONFIGDIR with apptainer instance start and action
    commands that refer to instance://.
  * Fix the issue that apptainer would not read credentials from the Docker
    fallback path ~/.docker/config.json if missing in the apptainer
    credentials.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695816000">- removed CRYPTOGAMS license as not known in OBS and OpenSSL is
  also valid</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1698148800">- Do not build squashfuse, require it as a dependency.
  Removed: squashfuse-0.1.105.tar.gz, 70.patch
- Replace awkward 'Obsoletes: singularity-*' as well as the
  'Provides: Singularity' by 'Conflicts:' and drop the provides -
  the versioning scheme does not match and we do not automatically
  migrate from one to the other.
- Exclude platforms which do not provide all build dependencies.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1706702400">- Updated apptainer to version 1.2.5
  * Added `libnvidia-nvvm` to `nvliblist.conf`. Newer NVIDIA
    Drivers (known with &gt;= 525.85.05) require this lib to compile
    OpenCL programs against NVIDIA GPUs, i.e. `libnvidia-opencl`
    depends on `libnvidia-nvvm`.
  * Disable the usage of cgroup in instance creation when
    `--fakeroot` is passed.
  * Disable the usage of cgroup in instance creation when `hidepid`
    mount option on `/proc` is set.
  * Fixed a regression introduced in 1.2.0 where the user's
    password file information was not copied in to the container
    when there was a parent root-mapped user namespace (as is the
    case for example in `cvmfsexec`).
  * Added the upcoming NVIDIA driver library `libnvidia-gpucomp.so`
    to the list of libraries to add to NVIDIA GPU-enabled
    containers. Fixed missing error handling during the creation
    of an encrypted image that lead to the generation of corrupted
    images.
  * Use `APPTAINER_TMPDIR` for temporary files during privileged
    image encryption.
  * If rootless unified cgroups v2 is available when starting an
    image but `XDG_RUNTIME_DIR` or `DBUS_SESSION_BUS_ADDRESS` is
    not set, print an info message that stats will not be available
    instead of exiting with a fatal error.
  * Allow templated build arguments to definition files to have
    empty values.
- Package .def templates separately for different SPs.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1710331200">- Fix 'apptainer build' using signed packages from the SUSE
  Registry (bsc#1221364).
  * Remove-signatures-from-Docker-images.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1710504000">- Updated apptainer to version 1.3.0
  * FUSE mounts are now supported in setuid mode, enabling full
    functionality even when kernel filesystem mounts are insecure due to
    unprivileged users having write access to raw filesystems in
    containers. When allow `setuid-mount extfs = no` (the default) in
    apptainer.conf, then the fuse2fs image driver will be used to mount
    ext3 images in setuid mode instead of the kernel driver (ext3 images
    are primarily used for the `--overlay` feature), restoring
    functionality that was removed by default in Apptainer 1.1.8 because
    of the security risk.
    The allow `setuid-mount squashfs` configuration option in
    `apptainer.conf` now has a new default called `iflimited` which allows
    kernel squashfs mounts only if there is at least one `limit container`
    option set or if Execution Control Lists are activated in ecl.toml.
    If kernel squashfs mounts are are not allowed, then the squashfuse
    image driver will be used instead.
    `iflimited` is the default because if one of those limits are used
    the system administrator ensures that unprivileged users do not have
    write access to the containers, but on the other hand using FUSE
    would enable a user to theoretically bypass the limits via `ptrace()`
    because the FUSE process runs as that user.
    The `fuse-overlayfs` image driver will also now be tried in setuid
    mode if the kernel overlayfs driver does not work (for example if
    one of the layers is a FUSE filesystem).  In addition, if `allow
    setuid-mount encrypted = no` then the unprivileged gocryptfs format
    will be used for encrypting SIF files instead of the kernel
    device-mapper. If a SIF file was encrypted using the gocryptfs
    format, it can now be mounted in setuid mode in addition to
    non-setuid mode.
  * Change the default in user namespace mode to use either kernel
    overlayfs or fuse-overlayfs instead of the underlay feature for the
    purpose of adding bind mount points. That was already the default in
    setuid mode; this change makes it consistent. The underlay feature
    can still be used with the `--underlay` option, but it is deprecated
    because the implementation is complicated and measurements have
    shown that the performance of underlay is similar to overlayfs and
    fuse-overlayfs.
    For now the underlay feature can be made the default again with a
    new `preferred` value on the `enable underlay` configuration option.
    Also the `--underlay` option can be used in setuid mode or as the
    root user, although it was ignored previously.
  * Prefer again to use kernel overlayfs over fuse-overlayfs when a
    lower layer is FUSE and there's no writable upper layer, undoing the
    change from 1.2.0. Another workaround was found for the problem that
    change addressed. This applies in both setuid mode and in user
    namespace mode.
  * `--cwd` is now the preferred form of the flag for setting the
    container's working directory, though `--pwd` is still supported for
    compatibility.
  * The way `--home` is handled when running as root (e.g. sudo apptainer)
    or with `--fakeroot` has changed. Previously, we were only modifying
    the `HOME` environment variable in these cases, while leaving the
    container's `/etc/passwd` file unchanged (with its homedir field
    pointing to `/root`, regardless of the value passed to `--home`). With
    this change, both value of HOME and the contents of `/etc/passwd` in
    the container will reflect the value passed to `--home` if the
    container is readonly. If the container is writable, the
    `/etc/passwd` file is left alone because it can interfere with
    commands that want to modify it.
  * The `--vm` and related flags to start apptainer inside a VM have been
    removed. This functionality was related to the retired Singularity Desktop
    / SyOS projects.
  * The keyserver-related commands that were under `remote` have been moved to
    their own, dedicated `keyserver` command. Run `apptainer help keyserver`
    for more information.
  * The commands related to OCI/Docker registries that were under `remote` have
    been moved to their own, dedicated `registry` command. Run
    `apptainer help registry` for more information.
  * The the `remote list` subcommand now outputs only remote endpoints (with
    keyservers and OCI/Docker registries having been moved to separate
    commands), and the output has been streamlined.
  * Adding a new remote endpoint using the `apptainer remote add` command will
    now set the new endpoint as default. This behavior can be suppressed by
    supplying the `--no-default` (or `-n`) flag to `remote add`.
  * Skip parsing build definition file template variables after comments
    beginning with a hash symbol.
  * The global `/tmp` directory is no longer used for gocryptfs mountpoints.
- New Features &amp; Functionality
  * The `remote status` command will now print the username, realname, and
    email of the logged-in user, if available.
  * Add monitoring feature support, which requires the usage of an
    additional tool named `apptheus`, this tool will put apptainer starter
    into a newly created cgroup and collect system metrics.
  * A new `--no-pid` flag for `apptainer run/shell/exec` disables the PID
    namespace inferred by `--containall` and `--compat`.
  * Added `--config` option to `keyserver` commands.
  * Honor an optional remoteName argument to the `keyserver list` command.
  * Added the `APPTAINER_ENCRYPTION_PEM_DATA` env var to allow for
    encrypting and running encrypted containers without a PEM file.
  * Adding `--sharens` mode for `apptainer exec/run/shell`, which enables to
    run multiple apptainer instances created by the same parent using
    the same image in the same user namespace.
- Make 'gocryptfs' an optional dependency.
- Make apptainer definition templates version dependent.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1715601600">- Make sure, digest values handled by the Go library
  github.com/opencontainers/go-digest and used throughout the
  Go-implemented containers ecosystem are always validated. This
  prevents attackers from triggering unexpected authenticated
  registry accesses.
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
    (CVE-2024-3727, bsc#1224114).</changelog>
</package>
<package pkgid="4a1f14a443db31c448eaa63feefacd36e9c075eb708f041439398e175ada2c6f555ffa9b384e50574e04e68be29c8ea9dca0d557e3109a3c6375c19ee96eb91e" name="apptainer-leap" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="bp160.1.1"/>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1735905600">- Update to version 1.3.6
  * Avoid using kernel overlayfs when the lower layer is a sandbox
    on an incompatible filesystem type such as GPFS or Lustre.
    For those cases use fuse-overlayfs instead. This fixes a
    regression introduced in 1.3.0. The regression didn't much
    impact Lustre because kernel overlayfs refused to try to use
    it and Apptainer proceeded to use fuse-overlayfs anyway, but
    with GPFS the kernel overlayfs allowed mounting but returned
    stale file handle errors.
- Version 1.3.5
  * Fix a regression introduced in 1.3.4 that overwrote existing
    standard `/.singularity.d` files such as `runscript` in
    container images even if they had been modified.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Support parsing nested variables defined inside `%arguments`
    section of definition files.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
- Version 1.3.4
  * Fixed sif-embedded overlay partitions for containers that are
    larger than 2 gigabytes.
  * Fixed the failure when starting apptainer with
    `instance --fakeroot`.
  * `apptainer build -B ...` can now be used to mount custom
    resolv.conf and hosts files from non-standard outside locations.
    This can be used to run `apptainer build` in a nix-build sandbox
    that has no `/etc/resolv.conf`.
  * Fixed failing builds from local images that have symbolic links
    for paths that are part of the base container environment (e.g.
    /var/tmp -&gt; /tmp).
  * Show info messages suggesting to use
    `enable underlay = preferred` or the `--underlay` flag when
    overlay is implied for bind mounts but the kernel is too old
    to support fuse mounts in user namespaces and so tries to use
    fusermount.
  * When someone uses a `yum` bootstrap to build a container
    without using subuid-based fakeroot or root, warn that it is
    unlikely to work.
  * Allow a writable `--overlay` to be used with `--nvccli` instead
    of `--writable-tmpfs`.
  * If an error "no descriptor found for reference" is seen while
    getting an oci container, retry the operation up to five times.
  * Make fakeroot Recommended for SUSE rpms instead of Required.
  * Allow bind mounts onto existing files on r/o NFS filesystems.
  * If an error is seen in the %post section when building a
    container using fakeroot mode 3 (with the fakeroot command)
    then show a message suggesting using `--ignore-fakeroot-command`
    and referring to the documentation about how to install and use
    it inside the container definition file.
  * Show a more helpful error message when using fakeroot in suid
    mode and there's an `/etc/subuid` mapping even though user
    namespaces are not available (user namespaces are required for
    `/etc/subuid` mapping).
- Version 1.3.3
  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb
    in CUDA 12+.
  * Ensure opened/kept file descriptors in stage 1 are not closed
    during the Go garbage collection to avoid "bad file descriptor"
    errors at startup.
  * Fixed a segmentation violation issue when running Apptainer
    checkpoint.
  * Fixed an issue that Apptainer won't read default docker
    credentials.
- Version 1.3.2
  * Fix for
    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)
    in a dependent library which describes a flaw that can allow
    attackers to trigger unexpected authenticated registry accesses
    due to object digest values not being validated in all cases.
  * Fixed the issue when nesting `apptainer instance start` inside
    a container on cgroups-v2 capable host.
  * Fixed the issue that oras download progress bar gets stuck
    when downloading large images.
- Version 1.3.1
  * Make 'apptainer build' work with signed Docker containers.
  * Fixed regression introduced in 1.3.0 that prevented closing
    cryptsetup and the corresponding loop device after running
    an encrypted sif container file in suid mode.
  * Stopped binding over the default timezone in the container
    with the host's timezone, which led to unexpected behavior if
    the application changed timezones.
  * Added progress bars for `oras://` push and pull.
  * Hide `Instance stats will not be available` message under
    `--sharens` mode.
  * Fix problem where credentials locally stored with
    `registry login` command were not usable in some execution
    flows. Run `registry login` again with latest version to ensure
    credentials are stored correctly.
  * Make runscript timeout configurable.
  * Return invalid bind path mount options during bind path
    parsing.
  * Make the INFO message more helpful when a running background
    process at exit time causes a FUSE mount to not shut down
    cleanly.
  * Fixed the wrong mediaType in the oras push manifest.
- Add Apptainer definition template for SLE15-SP7.
- Obsoleted:
  * Remove-signatures-from-Docker-images.patch
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
- Make sure, build is reproducible by setting the GNU build ID to one
  derived from the Go one. See https://pkg.go.dev/cmd/link.
- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1738152000">- Update golang.org/x/net to v0.23 to fix CVE-2023-45288
  (bnc#1236528).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1742299200">- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110
  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)
    GO-2025-3503 CVE-2025-22870 (bsc#1238611):
    Update to: golang.org/x/net@v0.36.0
  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)
    GO-2025-3487 CVE-2025-22869 (bsc#1239341):
    Update to: golang.org/x/crypto@v0.35.0
  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):
    Update to: github.com/go-jose/go-jose/v3@v3.0.4
  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):
    Update to: github.com/docker/docker@v25.0.6+incompatible</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1748865600">- Update to 1.4.1
  * Fix the use of libsubid which had been broken by the revision
    applied in 1.4.0-rc.2.
  * Fix a bug introduced in 1.4.0 that caused arm64 to be
    mis-converted to arm64v8 and resulted in a failure when pulling
    OCI containers.
  * Fix user database lookup in master process preventing instance
    from starting correctly on systems using winbind.
  * Check for existence of `/run/systemd/system` when verifying
    cgroups can be used via systemd manager.
  * Add a clear error message if someone tries to use privileged
    network options while not using setuid mode.
  * Allow multi-arch oci-archive files that have a nested index
    with the manifest. This is the default format (both for Docker
    and OCI) when using `nerdctl save`.
  * Test if docker-archive is actually an oci-archive (since Docker
    version 25), and if it is oci then use the OCI parser to avoid
    bugs in the Docker parser. Save the daemon-daemon references
    to a temporary docker-archive, to benefit from the same
    improvements also for those references. Parse as oci-archive.
- New Features &amp; Functionality in from ineherited 1.4.0
  * Add new build option `--mksquashfs-args` to pass additional
    arguments to the `mksquashfs` command when building SIF files.
    If a compression method other than gzip is selected, the SIF
    file might not work with older installations of Apptainer
    or Singularity, so an INFO message about that is printed. On
    the other hand, an INFO message that was printed (twice) when
    running an image with non-gzip compression has been removed.
  * If the `mksquashfs` version is new enough (version 4.6 in
    Leaep 16.0), then show a percentage progress bar (with ETA)
    during SIF creation in the default log level. If the `mksquashfs`
    version is older, then in verbose or debug log level show the
    output of mksquashfs with its own progress bar.
  * Statistics are now normally available for instances that are
    started by non-root users on cgroups v2 systems. The instance
    will be started in the current cgroup. Information about
    configuration issues that prevent collection of statistics are
    displayed as INFO messages by default.
  * Add a `--sandbox` option to `apptainer pull`.
  * Add configuration file binding to the `--nv` option. Files
    that are recognized in the NVIDIA Container Toolkit, including
    files for EGL ICD, were added to the default `nvliblist.conf`.
  * It is now possible to use multiple environment variable files
    using the `--env-file` flag. Files can be specified as a
    comma-separated list or by using the flag multiple times.
    Variables defined in later files take precedence over earlier
    files.
  * The registry login and registry logout commands now support a
    `--authfile &lt;path&gt;` option, which causes OCI credentials to be
    written to / removed from a custom file located at `&lt;path&gt;`
    instead of the default location (`$HOME/.apptainer/docker-config.json`).
    The commands `pull`, `push`, `run`, `exec`, `shell` and
    instance start can now also be passed a `--authfile &lt;path&gt;`
    option, to read OCI registry credentials from this custom file.
  * A new `--netns-path` option takes a path to a network
    namespace to join when starting a container. The root user
    may join any network namespace. An unprivileged user can only
    join a network namespace specified in the new `allow netns
    paths` directive in `apptainer.conf`, if they are also listed
    in `allow net users` / `allow net groups` and apptainer is
    installed with setuid privileges. Not supported with
    `--fakeroot`.
  * `apptainer.conf` now accepts setting the following options:
    `allow ipc ns` -- Default value is `yes`; when set to `no`,
  it will disable the use of the `--ipc` flag.
    `allow uts ns` -- Default value is `yes`; when set to `no`,
  it will invalidate the use of the `--uts` and `--hostname`
  flags.
    `allow user ns` -- Default value is `yes`; when set to
  `no`, it will disable creation of user namespaces. Note
  that this will prevent execution of containers with the
  `--userns` or `--fakeroot` flags and with unprivileged
  installations of Apptainer.
- Changed defaults / behaviours
  * Label the starter process seen in `ps` with the image filename,
    for example: Apptainer runtime parent: `example.sif`.
  * Remove runtime and compute libraries from `rocmliblist.conf`.
    They should instead be provided by the container image.
  * Allow overriding the build architecture with `--arch` and
    `--arch-variant`, to build images for another architecture
    than the current host arch. This requires that the host has
    been set up to support multiple architectures (`binfmt_misc`).
  * Complete the previously partial support for the riscv64
    architecture.
  * Show a warning message if changing directory to the cwd
    fails, instead of silently switching to the home directory
    or `/`.
  * Write starter messages to stderr when an instance fails to
    start. Previously they were incorrectly written to stdout.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Fix storage of credentials for `docker.io` to behave the same
    as for `index.docker.io`.
  * Change message log level from warning to debug when environment
    variables set inside a container or by `APPTAINERENV` have a
    different value than the environment variable on the host.
  * Change the default message level from silent to the normal
    level in the nested apptainer that executes a build's `%post`
    section, and suppress an unnecessary warning message.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
  * Remove the little-known `fakerootcallback` functionality.
  * Update the default pacman confURL for `Bootstrap: arch`
    container builds.
  * Update the bundled fuse programs to their latest releases.
- Bug fixes
  * Fix the `mconfig -s` option to build the apptainer and starter
    binaries statically as documented.
  * `%files from` in a definition file will now correctly copy
    symlinks that `%point` to a target above the destination
    directory but inside the `%destination` stage root filesystem.
  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -&gt; `libnvoptix.so`).
  * Avoid timeouts when cleaning up from building gocryptfs-encrypted
    SIF files.
  * Fix bug that prevented build with `--passphrase` or
    `--pem-path` but without `--encrypt` from implying fakeroot.
  * Fix hang when copying files between build stages while using
    suid mode without user namespaces.
  * Fix running and building containers of different architectures
    than the host via binfmt_misc when using rootless fakeroot.
  * Fix `target: no such file or directory` error when extracting
    layers from certain OCI images that manipulate hard links
    across layers.
  * Fix the crash that happened when executing a privilege-encrypted
    container as root.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757246400">- Update to 1.4.2
  * Restore looking for registry mirrors in /etc/containers/registry.conf
    and related files. This had been inadvertently dropped beginning in 1.4.0.
  * Fix use of the image cache when the home directory contains @ characters.
    Previously it would assume that it was the start of a digest in the oci-dir.
  * Fix signature verification failures on unsigned images.
  * Add additional .deb packages to the release assets that include the label
    trixie+ to indicate that they are for installing on Debian 13 or later.
    Those packages are necessary to work with the new libfuse3 library in
    Debian13. They also support libsubid, unlike the default packages because
    they are built on Debian 11 which doesn't have that library.
  * Add automatic triggering of Ubuntu PPA builds whenever there's a new
    apptainer release.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
</package>
<package pkgid="ea97bd7ee514e2848298248c30b8fcff5b847978db15a85897f12119dc16b3898b34e369f4fccd4671f85b0592c354f7718625f1986dc6857bfbb6ac6f02910a" name="apptainer-leap" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="bp160.2.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1748865600">- Update to 1.4.1
  * Fix the use of libsubid which had been broken by the revision
    applied in 1.4.0-rc.2.
  * Fix a bug introduced in 1.4.0 that caused arm64 to be
    mis-converted to arm64v8 and resulted in a failure when pulling
    OCI containers.
  * Fix user database lookup in master process preventing instance
    from starting correctly on systems using winbind.
  * Check for existence of `/run/systemd/system` when verifying
    cgroups can be used via systemd manager.
  * Add a clear error message if someone tries to use privileged
    network options while not using setuid mode.
  * Allow multi-arch oci-archive files that have a nested index
    with the manifest. This is the default format (both for Docker
    and OCI) when using `nerdctl save`.
  * Test if docker-archive is actually an oci-archive (since Docker
    version 25), and if it is oci then use the OCI parser to avoid
    bugs in the Docker parser. Save the daemon-daemon references
    to a temporary docker-archive, to benefit from the same
    improvements also for those references. Parse as oci-archive.
- New Features &amp; Functionality in from ineherited 1.4.0
  * Add new build option `--mksquashfs-args` to pass additional
    arguments to the `mksquashfs` command when building SIF files.
    If a compression method other than gzip is selected, the SIF
    file might not work with older installations of Apptainer
    or Singularity, so an INFO message about that is printed. On
    the other hand, an INFO message that was printed (twice) when
    running an image with non-gzip compression has been removed.
  * If the `mksquashfs` version is new enough (version 4.6 in
    Leaep 16.0), then show a percentage progress bar (with ETA)
    during SIF creation in the default log level. If the `mksquashfs`
    version is older, then in verbose or debug log level show the
    output of mksquashfs with its own progress bar.
  * Statistics are now normally available for instances that are
    started by non-root users on cgroups v2 systems. The instance
    will be started in the current cgroup. Information about
    configuration issues that prevent collection of statistics are
    displayed as INFO messages by default.
  * Add a `--sandbox` option to `apptainer pull`.
  * Add configuration file binding to the `--nv` option. Files
    that are recognized in the NVIDIA Container Toolkit, including
    files for EGL ICD, were added to the default `nvliblist.conf`.
  * It is now possible to use multiple environment variable files
    using the `--env-file` flag. Files can be specified as a
    comma-separated list or by using the flag multiple times.
    Variables defined in later files take precedence over earlier
    files.
  * The registry login and registry logout commands now support a
    `--authfile &lt;path&gt;` option, which causes OCI credentials to be
    written to / removed from a custom file located at `&lt;path&gt;`
    instead of the default location (`$HOME/.apptainer/docker-config.json`).
    The commands `pull`, `push`, `run`, `exec`, `shell` and
    instance start can now also be passed a `--authfile &lt;path&gt;`
    option, to read OCI registry credentials from this custom file.
  * A new `--netns-path` option takes a path to a network
    namespace to join when starting a container. The root user
    may join any network namespace. An unprivileged user can only
    join a network namespace specified in the new `allow netns
    paths` directive in `apptainer.conf`, if they are also listed
    in `allow net users` / `allow net groups` and apptainer is
    installed with setuid privileges. Not supported with
    `--fakeroot`.
  * `apptainer.conf` now accepts setting the following options:
    `allow ipc ns` -- Default value is `yes`; when set to `no`,
  it will disable the use of the `--ipc` flag.
    `allow uts ns` -- Default value is `yes`; when set to `no`,
  it will invalidate the use of the `--uts` and `--hostname`
  flags.
    `allow user ns` -- Default value is `yes`; when set to
  `no`, it will disable creation of user namespaces. Note
  that this will prevent execution of containers with the
  `--userns` or `--fakeroot` flags and with unprivileged
  installations of Apptainer.
- Changed defaults / behaviours
  * Label the starter process seen in `ps` with the image filename,
    for example: Apptainer runtime parent: `example.sif`.
  * Remove runtime and compute libraries from `rocmliblist.conf`.
    They should instead be provided by the container image.
  * Allow overriding the build architecture with `--arch` and
    `--arch-variant`, to build images for another architecture
    than the current host arch. This requires that the host has
    been set up to support multiple architectures (`binfmt_misc`).
  * Complete the previously partial support for the riscv64
    architecture.
  * Show a warning message if changing directory to the cwd
    fails, instead of silently switching to the home directory
    or `/`.
  * Write starter messages to stderr when an instance fails to
    start. Previously they were incorrectly written to stdout.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Fix storage of credentials for `docker.io` to behave the same
    as for `index.docker.io`.
  * Change message log level from warning to debug when environment
    variables set inside a container or by `APPTAINERENV` have a
    different value than the environment variable on the host.
  * Change the default message level from silent to the normal
    level in the nested apptainer that executes a build's `%post`
    section, and suppress an unnecessary warning message.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
  * Remove the little-known `fakerootcallback` functionality.
  * Update the default pacman confURL for `Bootstrap: arch`
    container builds.
  * Update the bundled fuse programs to their latest releases.
- Bug fixes
  * Fix the `mconfig -s` option to build the apptainer and starter
    binaries statically as documented.
  * `%files from` in a definition file will now correctly copy
    symlinks that `%point` to a target above the destination
    directory but inside the `%destination` stage root filesystem.
  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -&gt; `libnvoptix.so`).
  * Avoid timeouts when cleaning up from building gocryptfs-encrypted
    SIF files.
  * Fix bug that prevented build with `--passphrase` or
    `--pem-path` but without `--encrypt` from implying fakeroot.
  * Fix hang when copying files between build stages while using
    suid mode without user namespaces.
  * Fix running and building containers of different architectures
    than the host via binfmt_misc when using rootless fakeroot.
  * Fix `target: no such file or directory` error when extracting
    layers from certain OCI images that manipulate hard links
    across layers.
  * Fix the crash that happened when executing a privilege-encrypted
    container as root.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757246400">- Update to 1.4.2
  * Restore looking for registry mirrors in /etc/containers/registry.conf
    and related files. This had been inadvertently dropped beginning in 1.4.0.
  * Fix use of the image cache when the home directory contains @ characters.
    Previously it would assume that it was the start of a digest in the oci-dir.
  * Fix signature verification failures on unsigned images.
  * Add additional .deb packages to the release assets that include the label
    trixie+ to indicate that they are for installing on Debian 13 or later.
    Those packages are necessary to work with the new libfuse3 library in
    Debian13. They also support libsubid, unlike the default packages because
    they are built on Debian 11 which doesn't have that library.
  * Add automatic triggering of Ubuntu PPA builds whenever there's a new
    apptainer release.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1769688000">- Sync with Factory version which also fixes CVE-2024-45310
  tracked in bsc#1257432
- Readded SLE-15SP6.def as it was removed from Factory</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451200">- Fix  CVE-2026-33814 GO-2026-4918 (bsc#1265844)
  Update golang.org/x/net to version v0.53.0
- Integrate vulnchecker into %check stage (optional).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451201">- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
  CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830,
  CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595,
  CVE-2026-39835 (bsc#1266202)
  Update golang.org/x/crypto to v0.52.0</changelog>
</package>
<package pkgid="392f72f140b463f9db0d8ce0f9bbbd308f6e87780a64ae6f31510458efebaa281ff2b26d9cca05a35b87f2b694d1e19792b7c86ac401b5d69f6df383abdb0dc8" name="apptainer-leap" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="bp160.3.1"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1769688000">- Sync with Factory version which also fixes CVE-2024-45310
  tracked in bsc#1257432
- Readded SLE-15SP6.def as it was removed from Factory</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451200">- Fix  CVE-2026-33814 GO-2026-4918 (bsc#1265844)
  Update golang.org/x/net to version v0.53.0
- Integrate vulnchecker into %check stage (optional).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451201">- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
  CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830,
  CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595,
  CVE-2026-39835 (bsc#1266202)
  Update golang.org/x/crypto to v0.52.0</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779537600">- Add improved handling of suid-starter:
  * Add system group `apptainer`
  * Make sure, only users belonging to this group are able to
    run the application.
  * Document this in a README and point user to it if execution
    fails.
  Building of the 'suid-root' starter is still optional.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1780056000">- Fix CVE-2026-39821 (GO-2026-5026) (bsc#1266656)
  Update golang.org/x/net to 0.55.0.</changelog>
</package>
<package pkgid="2f7132521e298fdd7d3c0911b532761ad9468aff00a824c022bd5428cab019b3fa87162bd21860502e09a2d82e6bf5dfdc125f57b6a84b505b345fb62ad720b6" name="apptainer-leap" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="bp160.1.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1769688000">- Sync with Factory version which also fixes CVE-2024-45310
  tracked in bsc#1257432
- Readded SLE-15SP6.def as it was removed from Factory</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451200">- Fix  CVE-2026-33814 GO-2026-4918 (bsc#1265844)
  Update golang.org/x/net to version v0.53.0
- Integrate vulnchecker into %check stage (optional).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779451201">- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829,
  CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830,
  CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595,
  CVE-2026-39835 (bsc#1266202)
  Update golang.org/x/crypto to v0.52.0</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1779537600">- Add improved handling of suid-starter:
  * Add system group `apptainer`
  * Make sure, only users belonging to this group are able to
    run the application.
  * Document this in a README and point user to it if execution
    fails.
  Building of the 'suid-root' starter is still optional.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1780056000">- Fix CVE-2026-39821 (GO-2026-5026) (bsc#1266656)
  Update golang.org/x/net to 0.55.0.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1780920000">- Update apptainer to version v1.5.1
  * Security fix (bsc#1267982):
    Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path
    matching for limit container paths directive. This is only
    applicable to SUID installations that have paths listed in
    limit container paths that are string prefixes of other paths
    which are not desired to be included in the list. For example,
    if /scratch is in the list but `/scratch2` also exists and contains
    container images, previously the latter would match but now
    only images under the exactly matching `/scratch` are included.
  Other changes:
  * Work around segmentation fault sometimes seen while `mksquashfs`
    under proot is creating a SIF file.
  * Update bundled PRoot to version 5.4.0-rootless.3 in order to
    fix a problem where SIF files could be corrupted when
    `mksquashfs` died with a signal. The proot command was not
    passing back an error exit code.
  * Updated bundled `squashfuse_ll` to version 0.6.2 in order to
    fix a crash sometimes seen with apptainer in unprivileged
    docker.
  * Update bundled fuse2fs to version 1.47.4 instead of patching
    the bugs in 1.47.3.
  * Fix a crash that happened when `/etc/resolv.conf` was a
    symlink while building from a definition file using the
    localimage bootstrap.
  * Support hosts that have an /etc/resolv.conf symlink pointing
    to `../run` in addition to `/run`.
  * Change the download-dependencies script to skip downloading
    the PRoot source code on architectures that it is known to
    not support (that is: ppc*, s390*, and riscv*).
    In those situations Apptainer will skip trying to compile
    and run proot. As a result original owners and groups of
    files will not be preserved in SIF images built by
    unprivileged users, as was the case for all architectures
    prior to 1.5.0.
  * Fix panic encountered during progress bar update while
    pulling image.
  * Fix fakeroot overwriting root's username in `/etc/passwd`
    with the host user's name, a regression introduced in v1.5.0.
  * Add nonested flag for --mount specifications to prevent
    individual bind mounts from being passed to nested containers
    via `APPTAINER_BIND`.
    Example: `--mount type=bind,source=/data,destination=/mnt,nonested`.
- Changes from version v1.5.0:
  New Features &amp; Functionalities
  * Add support for a subset of the Container Device Interface
    (CDI) standard through new `--device` and
    `--cdi-dirs run/shell/exec` options. Honors environment
    variable settings, bind mounts, and device files listed in
    CDI specification files.
  * Add support for selective mounting of Intel(R) Gaudi
    accelerators. This feature is only for use in combination
    with a minimal /dev directory, selected either with the
    `--contain` flag or by configuring mount dev with the minimal
    option; otherwise all the devices are available anyway. This
    feature is enabled via the `--intel-hpu option` and by
    specifying the HABANA_VISIBLE_DEVICES environment variable,
    which should contain a comma-separated list of device IDs
    (e.g., "1,2,3") or "all" to import all of them.
    The default if `HABANA_VISIBLE_DEVICES` is not set is "all".
  * Add support for downloading SIF images from an IPFS
    peer-to-peer cluster using an HTTP gateway (similar to the
    existing support for IPFS in the curl tool). The address of
    the gateway can be set in the `IPFS_GATEWAY` environment
    variable or read from ~/.ipfs/gateway or /etc/ipfs/gateway.
  * Add `--no-env` action and instance option and corresponding
    `APPTAINER_NOENV` environment variable that can provide a
    comma-separated list of environment variables to skip
    importing from the host environment into the container.
  * Add `--data` build option which creates a SIF file with
    a squashfs data partition instead of a code partition,
    given an existing squashfs file as the source.
  * If `PREPEND_LD_LIBRARY_PATH` is set in the container
    environment (through an `--env` option, an `APPTAINERENV_`
    prefix from the host, or in the container definition)
    then prepend that string to `:$LD_LIBRARY_PATH`. Likewise
    if `APPEND_LD_LIBRARY_PATH` is set in the container
    environment then append that string to `$LD_LIBRARY_PATH:`.
    This is only done when `LD_LIBRARY_PATH` is set, although
    if the container is based on glibc, when `LD_LIBRARY_PATH`
    is not set it will first be filled with the default
    library search path as found through ldconfig.
  * Create reproducible SIF images, if the environment variable
    `SOURCE_DATE_EPOCH` has been set (as a Unix timestamp given
    as seconds since the beginning of 1970, in the UTC timezone).
    Also add `--reproducible` flag to build and pull from
    `oras://` sources. This sets `SOURCE_DATE_EPOCH`
    automatically from the image "created" time.
  * Support hosts that have `/etc/resolv.conf` pointing to a
    symlink under /run, such as those hosts that are running
    systemd-resolved. In this case, the symlink is copied into
    the container and the parent directory of the target of the
    symlink is bind-mounted from the host. The result is that
    even if the target of the symlink is replaced with a new file,
    the container sees the update in `/etc/resolv.conf`.
  * Add `/etc/resolv.conf` to the list of host paths that can be
    prevented from automatic import into the container with the
    `--no-mount` option.
  * Preserve owner and group information on files in containers
    downloaded from OCI registries when building SIF files, even
    for unprivileged users. This takes advantage of the fact that
    the library (umoci) that downloads containers preserves owner
    and group information in an extended attribute. Adds bundled
    tool proot which is modified from the upstream tool by the
    rootless-containers project to make the owner and group appear
    to be in the ordinary `stat()` information. That tool is now
    used when invoking mksquashfs to create the filesystem
    partition in a SIF file. It can be disabled with the hidden
    build option `--ignore-proot`.
  * When unsquashing an image while running under a root-mapped
    user namespace (such as when using fakeroot without subuid
    mapping), insert another namespace mapping back to the
    original user so unsquashfs doesn't try (and fail) to change
    the owner and group information on the unpacked files.
  * Record image digest metadata (sha256 from RepoDigests), for
    OCI registry images. Also add the image name (ref) of the
    image from "docker", with registry and tag. This is useful
    for traceability, when using docker.io or a tag like latest.
    Unfortunately the feature does not work with "docker-archive"
    or "docker-daemon".
  * Apptainer now supports the `loong64` architecture.
  Changed defaults / behaviours
  * If libraries are bound in to `/.singularity.d/libs` (such as
    with GPU options like `--nv`) and the container is based on
    glibc and `LD_LIBRARY_PATH` is not already set, it is now set
    to the default library search path. Since `/.singularity.d/libs`
    is appended to `LD_LIBRARY_PATH`, this makes libraries
    installed in the container take precedence over libraries
    bound in from the host. This reduces the chances of mismatched
    glibc versions. However, if there are indeed libraries on the
    host that need to take precedence over libraries in the
    container, that can be forced with
    `PREPEND_LD_LIBRARY_PATH=/.singularity.d/libs`.
  * Change the default arm variant to v7, and stop using the GOARM
    environment variable. The variables GOOS, GOARCH and GOARM
    are only used when building.
  * The oras transport now supports architectures beyond amd64.
    Images downloaded from oras without using the cache are now
    checksummed. A progress bar is shown during the process.
    Add support for APPTAINER_TMPDIR to the commands apptainer
    overlay create and apptainer plugin compile.
  Bug Fixes:
  * Make the root default capabilities configuration option apply
    only to the real root user as documented and not to a
    fakeroot user.
  * Fix long-time bug in importing environment variables from oci
    containers (defined by `ENV` in their definition file) with
    shell characters in them. It now escapes them with single
    backslashes instead of double backslashes so they behave
    like they do in podman and docker.
  * The username in `/etc/passwd` inside a container now always
    corresponds to the username of the user on the host even if
    an entry with the same UID is found in the container.
  * When apptainer reinvokes itself on behalf of the run-help
    command, it passes through `LD_LIBRARY_PATH`. This makes it
    work correctly when it was installed with
    `install-unprivileged.sh` on a host operating system that's
    different than the one the installed binaries were built on.</changelog>
</package>
<package pkgid="2f30ab54f58a689578b733aae9b5f56807c927f03ee3ebffb2eb91da265c506926190bd151574d3d9eb18b8f6f3373bac570c916331df8d072b32655b67708ca" name="apptainer-sle15_5" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="bp160.1.36"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690372800">- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is
  compiled with setuid</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690545600">- updated to 1.2.2 with following changes:
  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.
  * Fix build failures when in setuid mode and unprivileged user namespaces are
    unavailable and the --fakeroot option is not selected.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Update license for the package to cover also OpenSSL and CRYPTOGAMS
  part of chacha_ppc64le.s</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695643200">- updated to 1.2.3 with following changes:
  * The apptainer push/pull commands now show a progress bar for the oras
    protocol like there was for docker and library protocols.
  * The --nv and --rocm flags can now be used simultaneously.
  * Fix the use of APPTAINER_CONFIGDIR with apptainer instance start and action
    commands that refer to instance://.
  * Fix the issue that apptainer would not read credentials from the Docker
    fallback path ~/.docker/config.json if missing in the apptainer
    credentials.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695816000">- removed CRYPTOGAMS license as not known in OBS and OpenSSL is
  also valid</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1698148800">- Do not build squashfuse, require it as a dependency.
  Removed: squashfuse-0.1.105.tar.gz, 70.patch
- Replace awkward 'Obsoletes: singularity-*' as well as the
  'Provides: Singularity' by 'Conflicts:' and drop the provides -
  the versioning scheme does not match and we do not automatically
  migrate from one to the other.
- Exclude platforms which do not provide all build dependencies.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1706702400">- Updated apptainer to version 1.2.5
  * Added `libnvidia-nvvm` to `nvliblist.conf`. Newer NVIDIA
    Drivers (known with &gt;= 525.85.05) require this lib to compile
    OpenCL programs against NVIDIA GPUs, i.e. `libnvidia-opencl`
    depends on `libnvidia-nvvm`.
  * Disable the usage of cgroup in instance creation when
    `--fakeroot` is passed.
  * Disable the usage of cgroup in instance creation when `hidepid`
    mount option on `/proc` is set.
  * Fixed a regression introduced in 1.2.0 where the user's
    password file information was not copied in to the container
    when there was a parent root-mapped user namespace (as is the
    case for example in `cvmfsexec`).
  * Added the upcoming NVIDIA driver library `libnvidia-gpucomp.so`
    to the list of libraries to add to NVIDIA GPU-enabled
    containers. Fixed missing error handling during the creation
    of an encrypted image that lead to the generation of corrupted
    images.
  * Use `APPTAINER_TMPDIR` for temporary files during privileged
    image encryption.
  * If rootless unified cgroups v2 is available when starting an
    image but `XDG_RUNTIME_DIR` or `DBUS_SESSION_BUS_ADDRESS` is
    not set, print an info message that stats will not be available
    instead of exiting with a fatal error.
  * Allow templated build arguments to definition files to have
    empty values.
- Package .def templates separately for different SPs.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1710331200">- Fix 'apptainer build' using signed packages from the SUSE
  Registry (bsc#1221364).
  * Remove-signatures-from-Docker-images.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1710504000">- Updated apptainer to version 1.3.0
  * FUSE mounts are now supported in setuid mode, enabling full
    functionality even when kernel filesystem mounts are insecure due to
    unprivileged users having write access to raw filesystems in
    containers. When allow `setuid-mount extfs = no` (the default) in
    apptainer.conf, then the fuse2fs image driver will be used to mount
    ext3 images in setuid mode instead of the kernel driver (ext3 images
    are primarily used for the `--overlay` feature), restoring
    functionality that was removed by default in Apptainer 1.1.8 because
    of the security risk.
    The allow `setuid-mount squashfs` configuration option in
    `apptainer.conf` now has a new default called `iflimited` which allows
    kernel squashfs mounts only if there is at least one `limit container`
    option set or if Execution Control Lists are activated in ecl.toml.
    If kernel squashfs mounts are are not allowed, then the squashfuse
    image driver will be used instead.
    `iflimited` is the default because if one of those limits are used
    the system administrator ensures that unprivileged users do not have
    write access to the containers, but on the other hand using FUSE
    would enable a user to theoretically bypass the limits via `ptrace()`
    because the FUSE process runs as that user.
    The `fuse-overlayfs` image driver will also now be tried in setuid
    mode if the kernel overlayfs driver does not work (for example if
    one of the layers is a FUSE filesystem).  In addition, if `allow
    setuid-mount encrypted = no` then the unprivileged gocryptfs format
    will be used for encrypting SIF files instead of the kernel
    device-mapper. If a SIF file was encrypted using the gocryptfs
    format, it can now be mounted in setuid mode in addition to
    non-setuid mode.
  * Change the default in user namespace mode to use either kernel
    overlayfs or fuse-overlayfs instead of the underlay feature for the
    purpose of adding bind mount points. That was already the default in
    setuid mode; this change makes it consistent. The underlay feature
    can still be used with the `--underlay` option, but it is deprecated
    because the implementation is complicated and measurements have
    shown that the performance of underlay is similar to overlayfs and
    fuse-overlayfs.
    For now the underlay feature can be made the default again with a
    new `preferred` value on the `enable underlay` configuration option.
    Also the `--underlay` option can be used in setuid mode or as the
    root user, although it was ignored previously.
  * Prefer again to use kernel overlayfs over fuse-overlayfs when a
    lower layer is FUSE and there's no writable upper layer, undoing the
    change from 1.2.0. Another workaround was found for the problem that
    change addressed. This applies in both setuid mode and in user
    namespace mode.
  * `--cwd` is now the preferred form of the flag for setting the
    container's working directory, though `--pwd` is still supported for
    compatibility.
  * The way `--home` is handled when running as root (e.g. sudo apptainer)
    or with `--fakeroot` has changed. Previously, we were only modifying
    the `HOME` environment variable in these cases, while leaving the
    container's `/etc/passwd` file unchanged (with its homedir field
    pointing to `/root`, regardless of the value passed to `--home`). With
    this change, both value of HOME and the contents of `/etc/passwd` in
    the container will reflect the value passed to `--home` if the
    container is readonly. If the container is writable, the
    `/etc/passwd` file is left alone because it can interfere with
    commands that want to modify it.
  * The `--vm` and related flags to start apptainer inside a VM have been
    removed. This functionality was related to the retired Singularity Desktop
    / SyOS projects.
  * The keyserver-related commands that were under `remote` have been moved to
    their own, dedicated `keyserver` command. Run `apptainer help keyserver`
    for more information.
  * The commands related to OCI/Docker registries that were under `remote` have
    been moved to their own, dedicated `registry` command. Run
    `apptainer help registry` for more information.
  * The the `remote list` subcommand now outputs only remote endpoints (with
    keyservers and OCI/Docker registries having been moved to separate
    commands), and the output has been streamlined.
  * Adding a new remote endpoint using the `apptainer remote add` command will
    now set the new endpoint as default. This behavior can be suppressed by
    supplying the `--no-default` (or `-n`) flag to `remote add`.
  * Skip parsing build definition file template variables after comments
    beginning with a hash symbol.
  * The global `/tmp` directory is no longer used for gocryptfs mountpoints.
- New Features &amp; Functionality
  * The `remote status` command will now print the username, realname, and
    email of the logged-in user, if available.
  * Add monitoring feature support, which requires the usage of an
    additional tool named `apptheus`, this tool will put apptainer starter
    into a newly created cgroup and collect system metrics.
  * A new `--no-pid` flag for `apptainer run/shell/exec` disables the PID
    namespace inferred by `--containall` and `--compat`.
  * Added `--config` option to `keyserver` commands.
  * Honor an optional remoteName argument to the `keyserver list` command.
  * Added the `APPTAINER_ENCRYPTION_PEM_DATA` env var to allow for
    encrypting and running encrypted containers without a PEM file.
  * Adding `--sharens` mode for `apptainer exec/run/shell`, which enables to
    run multiple apptainer instances created by the same parent using
    the same image in the same user namespace.
- Make 'gocryptfs' an optional dependency.
- Make apptainer definition templates version dependent.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1715601600">- Make sure, digest values handled by the Go library
  github.com/opencontainers/go-digest and used throughout the
  Go-implemented containers ecosystem are always validated. This
  prevents attackers from triggering unexpected authenticated
  registry accesses.
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
    (CVE-2024-3727, bsc#1224114).</changelog>
</package>
<package pkgid="38cdfd1c81eeb58a5b433d6db1bddfdb3c6f0e9bc16f67f2ff1bd233247dad26316d6afbe86fd8f72372cb61c11e278b1e1d33d8b0862d58b96deefb7ba248cb" name="apptainer-sle15_6" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="bp160.1.36"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690372800">- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is
  compiled with setuid</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1690545600">- updated to 1.2.2 with following changes:
  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.
  * Fix build failures when in setuid mode and unprivileged user namespaces are
    unavailable and the --fakeroot option is not selected.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Update license for the package to cover also OpenSSL and CRYPTOGAMS
  part of chacha_ppc64le.s</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695643200">- updated to 1.2.3 with following changes:
  * The apptainer push/pull commands now show a progress bar for the oras
    protocol like there was for docker and library protocols.
  * The --nv and --rocm flags can now be used simultaneously.
  * Fix the use of APPTAINER_CONFIGDIR with apptainer instance start and action
    commands that refer to instance://.
  * Fix the issue that apptainer would not read credentials from the Docker
    fallback path ~/.docker/config.json if missing in the apptainer
    credentials.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1695816000">- removed CRYPTOGAMS license as not known in OBS and OpenSSL is
  also valid</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1698148800">- Do not build squashfuse, require it as a dependency.
  Removed: squashfuse-0.1.105.tar.gz, 70.patch
- Replace awkward 'Obsoletes: singularity-*' as well as the
  'Provides: Singularity' by 'Conflicts:' and drop the provides -
  the versioning scheme does not match and we do not automatically
  migrate from one to the other.
- Exclude platforms which do not provide all build dependencies.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1706702400">- Updated apptainer to version 1.2.5
  * Added `libnvidia-nvvm` to `nvliblist.conf`. Newer NVIDIA
    Drivers (known with &gt;= 525.85.05) require this lib to compile
    OpenCL programs against NVIDIA GPUs, i.e. `libnvidia-opencl`
    depends on `libnvidia-nvvm`.
  * Disable the usage of cgroup in instance creation when
    `--fakeroot` is passed.
  * Disable the usage of cgroup in instance creation when `hidepid`
    mount option on `/proc` is set.
  * Fixed a regression introduced in 1.2.0 where the user's
    password file information was not copied in to the container
    when there was a parent root-mapped user namespace (as is the
    case for example in `cvmfsexec`).
  * Added the upcoming NVIDIA driver library `libnvidia-gpucomp.so`
    to the list of libraries to add to NVIDIA GPU-enabled
    containers. Fixed missing error handling during the creation
    of an encrypted image that lead to the generation of corrupted
    images.
  * Use `APPTAINER_TMPDIR` for temporary files during privileged
    image encryption.
  * If rootless unified cgroups v2 is available when starting an
    image but `XDG_RUNTIME_DIR` or `DBUS_SESSION_BUS_ADDRESS` is
    not set, print an info message that stats will not be available
    instead of exiting with a fatal error.
  * Allow templated build arguments to definition files to have
    empty values.
- Package .def templates separately for different SPs.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1710331200">- Fix 'apptainer build' using signed packages from the SUSE
  Registry (bsc#1221364).
  * Remove-signatures-from-Docker-images.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1710504000">- Updated apptainer to version 1.3.0
  * FUSE mounts are now supported in setuid mode, enabling full
    functionality even when kernel filesystem mounts are insecure due to
    unprivileged users having write access to raw filesystems in
    containers. When allow `setuid-mount extfs = no` (the default) in
    apptainer.conf, then the fuse2fs image driver will be used to mount
    ext3 images in setuid mode instead of the kernel driver (ext3 images
    are primarily used for the `--overlay` feature), restoring
    functionality that was removed by default in Apptainer 1.1.8 because
    of the security risk.
    The allow `setuid-mount squashfs` configuration option in
    `apptainer.conf` now has a new default called `iflimited` which allows
    kernel squashfs mounts only if there is at least one `limit container`
    option set or if Execution Control Lists are activated in ecl.toml.
    If kernel squashfs mounts are are not allowed, then the squashfuse
    image driver will be used instead.
    `iflimited` is the default because if one of those limits are used
    the system administrator ensures that unprivileged users do not have
    write access to the containers, but on the other hand using FUSE
    would enable a user to theoretically bypass the limits via `ptrace()`
    because the FUSE process runs as that user.
    The `fuse-overlayfs` image driver will also now be tried in setuid
    mode if the kernel overlayfs driver does not work (for example if
    one of the layers is a FUSE filesystem).  In addition, if `allow
    setuid-mount encrypted = no` then the unprivileged gocryptfs format
    will be used for encrypting SIF files instead of the kernel
    device-mapper. If a SIF file was encrypted using the gocryptfs
    format, it can now be mounted in setuid mode in addition to
    non-setuid mode.
  * Change the default in user namespace mode to use either kernel
    overlayfs or fuse-overlayfs instead of the underlay feature for the
    purpose of adding bind mount points. That was already the default in
    setuid mode; this change makes it consistent. The underlay feature
    can still be used with the `--underlay` option, but it is deprecated
    because the implementation is complicated and measurements have
    shown that the performance of underlay is similar to overlayfs and
    fuse-overlayfs.
    For now the underlay feature can be made the default again with a
    new `preferred` value on the `enable underlay` configuration option.
    Also the `--underlay` option can be used in setuid mode or as the
    root user, although it was ignored previously.
  * Prefer again to use kernel overlayfs over fuse-overlayfs when a
    lower layer is FUSE and there's no writable upper layer, undoing the
    change from 1.2.0. Another workaround was found for the problem that
    change addressed. This applies in both setuid mode and in user
    namespace mode.
  * `--cwd` is now the preferred form of the flag for setting the
    container's working directory, though `--pwd` is still supported for
    compatibility.
  * The way `--home` is handled when running as root (e.g. sudo apptainer)
    or with `--fakeroot` has changed. Previously, we were only modifying
    the `HOME` environment variable in these cases, while leaving the
    container's `/etc/passwd` file unchanged (with its homedir field
    pointing to `/root`, regardless of the value passed to `--home`). With
    this change, both value of HOME and the contents of `/etc/passwd` in
    the container will reflect the value passed to `--home` if the
    container is readonly. If the container is writable, the
    `/etc/passwd` file is left alone because it can interfere with
    commands that want to modify it.
  * The `--vm` and related flags to start apptainer inside a VM have been
    removed. This functionality was related to the retired Singularity Desktop
    / SyOS projects.
  * The keyserver-related commands that were under `remote` have been moved to
    their own, dedicated `keyserver` command. Run `apptainer help keyserver`
    for more information.
  * The commands related to OCI/Docker registries that were under `remote` have
    been moved to their own, dedicated `registry` command. Run
    `apptainer help registry` for more information.
  * The the `remote list` subcommand now outputs only remote endpoints (with
    keyservers and OCI/Docker registries having been moved to separate
    commands), and the output has been streamlined.
  * Adding a new remote endpoint using the `apptainer remote add` command will
    now set the new endpoint as default. This behavior can be suppressed by
    supplying the `--no-default` (or `-n`) flag to `remote add`.
  * Skip parsing build definition file template variables after comments
    beginning with a hash symbol.
  * The global `/tmp` directory is no longer used for gocryptfs mountpoints.
- New Features &amp; Functionality
  * The `remote status` command will now print the username, realname, and
    email of the logged-in user, if available.
  * Add monitoring feature support, which requires the usage of an
    additional tool named `apptheus`, this tool will put apptainer starter
    into a newly created cgroup and collect system metrics.
  * A new `--no-pid` flag for `apptainer run/shell/exec` disables the PID
    namespace inferred by `--containall` and `--compat`.
  * Added `--config` option to `keyserver` commands.
  * Honor an optional remoteName argument to the `keyserver list` command.
  * Added the `APPTAINER_ENCRYPTION_PEM_DATA` env var to allow for
    encrypting and running encrypted containers without a PEM file.
  * Adding `--sharens` mode for `apptainer exec/run/shell`, which enables to
    run multiple apptainer instances created by the same parent using
    the same image in the same user namespace.
- Make 'gocryptfs' an optional dependency.
- Make apptainer definition templates version dependent.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1715601600">- Make sure, digest values handled by the Go library
  github.com/opencontainers/go-digest and used throughout the
  Go-implemented containers ecosystem are always validated. This
  prevents attackers from triggering unexpected authenticated
  registry accesses.
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
    (CVE-2024-3727, bsc#1224114).</changelog>
</package>
<package pkgid="183b11eb8896350344bfafecec1c04d8f9441e55677e6a2f0f18d74f1e7b177988b9c75fc1cfc3663f33e7dc90d23814ba8b085aef129f672a0b2ca195d7dddd" name="apptainer-sle15_7" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="bp160.1.1"/>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1735905600">- Update to version 1.3.6
  * Avoid using kernel overlayfs when the lower layer is a sandbox
    on an incompatible filesystem type such as GPFS or Lustre.
    For those cases use fuse-overlayfs instead. This fixes a
    regression introduced in 1.3.0. The regression didn't much
    impact Lustre because kernel overlayfs refused to try to use
    it and Apptainer proceeded to use fuse-overlayfs anyway, but
    with GPFS the kernel overlayfs allowed mounting but returned
    stale file handle errors.
- Version 1.3.5
  * Fix a regression introduced in 1.3.4 that overwrote existing
    standard `/.singularity.d` files such as `runscript` in
    container images even if they had been modified.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Support parsing nested variables defined inside `%arguments`
    section of definition files.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
- Version 1.3.4
  * Fixed sif-embedded overlay partitions for containers that are
    larger than 2 gigabytes.
  * Fixed the failure when starting apptainer with
    `instance --fakeroot`.
  * `apptainer build -B ...` can now be used to mount custom
    resolv.conf and hosts files from non-standard outside locations.
    This can be used to run `apptainer build` in a nix-build sandbox
    that has no `/etc/resolv.conf`.
  * Fixed failing builds from local images that have symbolic links
    for paths that are part of the base container environment (e.g.
    /var/tmp -&gt; /tmp).
  * Show info messages suggesting to use
    `enable underlay = preferred` or the `--underlay` flag when
    overlay is implied for bind mounts but the kernel is too old
    to support fuse mounts in user namespaces and so tries to use
    fusermount.
  * When someone uses a `yum` bootstrap to build a container
    without using subuid-based fakeroot or root, warn that it is
    unlikely to work.
  * Allow a writable `--overlay` to be used with `--nvccli` instead
    of `--writable-tmpfs`.
  * If an error "no descriptor found for reference" is seen while
    getting an oci container, retry the operation up to five times.
  * Make fakeroot Recommended for SUSE rpms instead of Required.
  * Allow bind mounts onto existing files on r/o NFS filesystems.
  * If an error is seen in the %post section when building a
    container using fakeroot mode 3 (with the fakeroot command)
    then show a message suggesting using `--ignore-fakeroot-command`
    and referring to the documentation about how to install and use
    it inside the container definition file.
  * Show a more helpful error message when using fakeroot in suid
    mode and there's an `/etc/subuid` mapping even though user
    namespaces are not available (user namespaces are required for
    `/etc/subuid` mapping).
- Version 1.3.3
  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb
    in CUDA 12+.
  * Ensure opened/kept file descriptors in stage 1 are not closed
    during the Go garbage collection to avoid "bad file descriptor"
    errors at startup.
  * Fixed a segmentation violation issue when running Apptainer
    checkpoint.
  * Fixed an issue that Apptainer won't read default docker
    credentials.
- Version 1.3.2
  * Fix for
    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)
    in a dependent library which describes a flaw that can allow
    attackers to trigger unexpected authenticated registry accesses
    due to object digest values not being validated in all cases.
  * Fixed the issue when nesting `apptainer instance start` inside
    a container on cgroups-v2 capable host.
  * Fixed the issue that oras download progress bar gets stuck
    when downloading large images.
- Version 1.3.1
  * Make 'apptainer build' work with signed Docker containers.
  * Fixed regression introduced in 1.3.0 that prevented closing
    cryptsetup and the corresponding loop device after running
    an encrypted sif container file in suid mode.
  * Stopped binding over the default timezone in the container
    with the host's timezone, which led to unexpected behavior if
    the application changed timezones.
  * Added progress bars for `oras://` push and pull.
  * Hide `Instance stats will not be available` message under
    `--sharens` mode.
  * Fix problem where credentials locally stored with
    `registry login` command were not usable in some execution
    flows. Run `registry login` again with latest version to ensure
    credentials are stored correctly.
  * Make runscript timeout configurable.
  * Return invalid bind path mount options during bind path
    parsing.
  * Make the INFO message more helpful when a running background
    process at exit time causes a FUSE mount to not shut down
    cleanly.
  * Fixed the wrong mediaType in the oras push manifest.
- Add Apptainer definition template for SLE15-SP7.
- Obsoleted:
  * Remove-signatures-from-Docker-images.patch
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
- Make sure, build is reproducible by setting the GNU build ID to one
  derived from the Go one. See https://pkg.go.dev/cmd/link.
- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1738152000">- Update golang.org/x/net to v0.23 to fix CVE-2023-45288
  (bnc#1236528).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1742299200">- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110
  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)
    GO-2025-3503 CVE-2025-22870 (bsc#1238611):
    Update to: golang.org/x/net@v0.36.0
  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)
    GO-2025-3487 CVE-2025-22869 (bsc#1239341):
    Update to: golang.org/x/crypto@v0.35.0
  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):
    Update to: github.com/go-jose/go-jose/v3@v3.0.4
  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):
    Update to: github.com/docker/docker@v25.0.6+incompatible</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1748865600">- Update to 1.4.1
  * Fix the use of libsubid which had been broken by the revision
    applied in 1.4.0-rc.2.
  * Fix a bug introduced in 1.4.0 that caused arm64 to be
    mis-converted to arm64v8 and resulted in a failure when pulling
    OCI containers.
  * Fix user database lookup in master process preventing instance
    from starting correctly on systems using winbind.
  * Check for existence of `/run/systemd/system` when verifying
    cgroups can be used via systemd manager.
  * Add a clear error message if someone tries to use privileged
    network options while not using setuid mode.
  * Allow multi-arch oci-archive files that have a nested index
    with the manifest. This is the default format (both for Docker
    and OCI) when using `nerdctl save`.
  * Test if docker-archive is actually an oci-archive (since Docker
    version 25), and if it is oci then use the OCI parser to avoid
    bugs in the Docker parser. Save the daemon-daemon references
    to a temporary docker-archive, to benefit from the same
    improvements also for those references. Parse as oci-archive.
- New Features &amp; Functionality in from ineherited 1.4.0
  * Add new build option `--mksquashfs-args` to pass additional
    arguments to the `mksquashfs` command when building SIF files.
    If a compression method other than gzip is selected, the SIF
    file might not work with older installations of Apptainer
    or Singularity, so an INFO message about that is printed. On
    the other hand, an INFO message that was printed (twice) when
    running an image with non-gzip compression has been removed.
  * If the `mksquashfs` version is new enough (version 4.6 in
    Leaep 16.0), then show a percentage progress bar (with ETA)
    during SIF creation in the default log level. If the `mksquashfs`
    version is older, then in verbose or debug log level show the
    output of mksquashfs with its own progress bar.
  * Statistics are now normally available for instances that are
    started by non-root users on cgroups v2 systems. The instance
    will be started in the current cgroup. Information about
    configuration issues that prevent collection of statistics are
    displayed as INFO messages by default.
  * Add a `--sandbox` option to `apptainer pull`.
  * Add configuration file binding to the `--nv` option. Files
    that are recognized in the NVIDIA Container Toolkit, including
    files for EGL ICD, were added to the default `nvliblist.conf`.
  * It is now possible to use multiple environment variable files
    using the `--env-file` flag. Files can be specified as a
    comma-separated list or by using the flag multiple times.
    Variables defined in later files take precedence over earlier
    files.
  * The registry login and registry logout commands now support a
    `--authfile &lt;path&gt;` option, which causes OCI credentials to be
    written to / removed from a custom file located at `&lt;path&gt;`
    instead of the default location (`$HOME/.apptainer/docker-config.json`).
    The commands `pull`, `push`, `run`, `exec`, `shell` and
    instance start can now also be passed a `--authfile &lt;path&gt;`
    option, to read OCI registry credentials from this custom file.
  * A new `--netns-path` option takes a path to a network
    namespace to join when starting a container. The root user
    may join any network namespace. An unprivileged user can only
    join a network namespace specified in the new `allow netns
    paths` directive in `apptainer.conf`, if they are also listed
    in `allow net users` / `allow net groups` and apptainer is
    installed with setuid privileges. Not supported with
    `--fakeroot`.
  * `apptainer.conf` now accepts setting the following options:
    `allow ipc ns` -- Default value is `yes`; when set to `no`,
  it will disable the use of the `--ipc` flag.
    `allow uts ns` -- Default value is `yes`; when set to `no`,
  it will invalidate the use of the `--uts` and `--hostname`
  flags.
    `allow user ns` -- Default value is `yes`; when set to
  `no`, it will disable creation of user namespaces. Note
  that this will prevent execution of containers with the
  `--userns` or `--fakeroot` flags and with unprivileged
  installations of Apptainer.
- Changed defaults / behaviours
  * Label the starter process seen in `ps` with the image filename,
    for example: Apptainer runtime parent: `example.sif`.
  * Remove runtime and compute libraries from `rocmliblist.conf`.
    They should instead be provided by the container image.
  * Allow overriding the build architecture with `--arch` and
    `--arch-variant`, to build images for another architecture
    than the current host arch. This requires that the host has
    been set up to support multiple architectures (`binfmt_misc`).
  * Complete the previously partial support for the riscv64
    architecture.
  * Show a warning message if changing directory to the cwd
    fails, instead of silently switching to the home directory
    or `/`.
  * Write starter messages to stderr when an instance fails to
    start. Previously they were incorrectly written to stdout.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Fix storage of credentials for `docker.io` to behave the same
    as for `index.docker.io`.
  * Change message log level from warning to debug when environment
    variables set inside a container or by `APPTAINERENV` have a
    different value than the environment variable on the host.
  * Change the default message level from silent to the normal
    level in the nested apptainer that executes a build's `%post`
    section, and suppress an unnecessary warning message.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
  * Remove the little-known `fakerootcallback` functionality.
  * Update the default pacman confURL for `Bootstrap: arch`
    container builds.
  * Update the bundled fuse programs to their latest releases.
- Bug fixes
  * Fix the `mconfig -s` option to build the apptainer and starter
    binaries statically as documented.
  * `%files from` in a definition file will now correctly copy
    symlinks that `%point` to a target above the destination
    directory but inside the `%destination` stage root filesystem.
  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -&gt; `libnvoptix.so`).
  * Avoid timeouts when cleaning up from building gocryptfs-encrypted
    SIF files.
  * Fix bug that prevented build with `--passphrase` or
    `--pem-path` but without `--encrypt` from implying fakeroot.
  * Fix hang when copying files between build stages while using
    suid mode without user namespaces.
  * Fix running and building containers of different architectures
    than the host via binfmt_misc when using rootless fakeroot.
  * Fix `target: no such file or directory` error when extracting
    layers from certain OCI images that manipulate hard links
    across layers.
  * Fix the crash that happened when executing a privilege-encrypted
    container as root.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757246400">- Update to 1.4.2
  * Restore looking for registry mirrors in /etc/containers/registry.conf
    and related files. This had been inadvertently dropped beginning in 1.4.0.
  * Fix use of the image cache when the home directory contains @ characters.
    Previously it would assume that it was the start of a digest in the oci-dir.
  * Fix signature verification failures on unsigned images.
  * Add additional .deb packages to the release assets that include the label
    trixie+ to indicate that they are for installing on Debian 13 or later.
    Those packages are necessary to work with the new libfuse3 library in
    Debian13. They also support libsubid, unlike the default packages because
    they are built on Debian 11 which doesn't have that library.
  * Add automatic triggering of Ubuntu PPA builds whenever there's a new
    apptainer release.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
</package>
<package pkgid="a7070defba608f9a000896254bd763d3a9dcf4e6635e0d1229b45e853e32f62388efc0093374a6f4373ff75a284e30433c2a1afbfd6fac755f9bf1da2a469ff9" name="apptainer-sle16" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="bp160.1.1"/>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1735905600">- Update to version 1.3.6
  * Avoid using kernel overlayfs when the lower layer is a sandbox
    on an incompatible filesystem type such as GPFS or Lustre.
    For those cases use fuse-overlayfs instead. This fixes a
    regression introduced in 1.3.0. The regression didn't much
    impact Lustre because kernel overlayfs refused to try to use
    it and Apptainer proceeded to use fuse-overlayfs anyway, but
    with GPFS the kernel overlayfs allowed mounting but returned
    stale file handle errors.
- Version 1.3.5
  * Fix a regression introduced in 1.3.4 that overwrote existing
    standard `/.singularity.d` files such as `runscript` in
    container images even if they had been modified.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Support parsing nested variables defined inside `%arguments`
    section of definition files.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
- Version 1.3.4
  * Fixed sif-embedded overlay partitions for containers that are
    larger than 2 gigabytes.
  * Fixed the failure when starting apptainer with
    `instance --fakeroot`.
  * `apptainer build -B ...` can now be used to mount custom
    resolv.conf and hosts files from non-standard outside locations.
    This can be used to run `apptainer build` in a nix-build sandbox
    that has no `/etc/resolv.conf`.
  * Fixed failing builds from local images that have symbolic links
    for paths that are part of the base container environment (e.g.
    /var/tmp -&gt; /tmp).
  * Show info messages suggesting to use
    `enable underlay = preferred` or the `--underlay` flag when
    overlay is implied for bind mounts but the kernel is too old
    to support fuse mounts in user namespaces and so tries to use
    fusermount.
  * When someone uses a `yum` bootstrap to build a container
    without using subuid-based fakeroot or root, warn that it is
    unlikely to work.
  * Allow a writable `--overlay` to be used with `--nvccli` instead
    of `--writable-tmpfs`.
  * If an error "no descriptor found for reference" is seen while
    getting an oci container, retry the operation up to five times.
  * Make fakeroot Recommended for SUSE rpms instead of Required.
  * Allow bind mounts onto existing files on r/o NFS filesystems.
  * If an error is seen in the %post section when building a
    container using fakeroot mode 3 (with the fakeroot command)
    then show a message suggesting using `--ignore-fakeroot-command`
    and referring to the documentation about how to install and use
    it inside the container definition file.
  * Show a more helpful error message when using fakeroot in suid
    mode and there's an `/etc/subuid` mapping even though user
    namespaces are not available (user namespaces are required for
    `/etc/subuid` mapping).
- Version 1.3.3
  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb
    in CUDA 12+.
  * Ensure opened/kept file descriptors in stage 1 are not closed
    during the Go garbage collection to avoid "bad file descriptor"
    errors at startup.
  * Fixed a segmentation violation issue when running Apptainer
    checkpoint.
  * Fixed an issue that Apptainer won't read default docker
    credentials.
- Version 1.3.2
  * Fix for
    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)
    in a dependent library which describes a flaw that can allow
    attackers to trigger unexpected authenticated registry accesses
    due to object digest values not being validated in all cases.
  * Fixed the issue when nesting `apptainer instance start` inside
    a container on cgroups-v2 capable host.
  * Fixed the issue that oras download progress bar gets stuck
    when downloading large images.
- Version 1.3.1
  * Make 'apptainer build' work with signed Docker containers.
  * Fixed regression introduced in 1.3.0 that prevented closing
    cryptsetup and the corresponding loop device after running
    an encrypted sif container file in suid mode.
  * Stopped binding over the default timezone in the container
    with the host's timezone, which led to unexpected behavior if
    the application changed timezones.
  * Added progress bars for `oras://` push and pull.
  * Hide `Instance stats will not be available` message under
    `--sharens` mode.
  * Fix problem where credentials locally stored with
    `registry login` command were not usable in some execution
    flows. Run `registry login` again with latest version to ensure
    credentials are stored correctly.
  * Make runscript timeout configurable.
  * Return invalid bind path mount options during bind path
    parsing.
  * Make the INFO message more helpful when a running background
    process at exit time causes a FUSE mount to not shut down
    cleanly.
  * Fixed the wrong mediaType in the oras push manifest.
- Add Apptainer definition template for SLE15-SP7.
- Obsoleted:
  * Remove-signatures-from-Docker-images.patch
  * Bump-github.com-containers-image-v5-from-5.30.0-to-5.30.1.patch
- Make sure, build is reproducible by setting the GNU build ID to one
  derived from the Go one. See https://pkg.go.dev/cmd/link.
- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1738152000">- Update golang.org/x/net to v0.23 to fix CVE-2023-45288
  (bnc#1236528).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1742299200">- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110
  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)
    GO-2025-3503 CVE-2025-22870 (bsc#1238611):
    Update to: golang.org/x/net@v0.36.0
  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)
    GO-2025-3487 CVE-2025-22869 (bsc#1239341):
    Update to: golang.org/x/crypto@v0.35.0
  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):
    Update to: github.com/go-jose/go-jose/v3@v3.0.4
  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):
    Update to: github.com/docker/docker@v25.0.6+incompatible</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1748865600">- Update to 1.4.1
  * Fix the use of libsubid which had been broken by the revision
    applied in 1.4.0-rc.2.
  * Fix a bug introduced in 1.4.0 that caused arm64 to be
    mis-converted to arm64v8 and resulted in a failure when pulling
    OCI containers.
  * Fix user database lookup in master process preventing instance
    from starting correctly on systems using winbind.
  * Check for existence of `/run/systemd/system` when verifying
    cgroups can be used via systemd manager.
  * Add a clear error message if someone tries to use privileged
    network options while not using setuid mode.
  * Allow multi-arch oci-archive files that have a nested index
    with the manifest. This is the default format (both for Docker
    and OCI) when using `nerdctl save`.
  * Test if docker-archive is actually an oci-archive (since Docker
    version 25), and if it is oci then use the OCI parser to avoid
    bugs in the Docker parser. Save the daemon-daemon references
    to a temporary docker-archive, to benefit from the same
    improvements also for those references. Parse as oci-archive.
- New Features &amp; Functionality in from ineherited 1.4.0
  * Add new build option `--mksquashfs-args` to pass additional
    arguments to the `mksquashfs` command when building SIF files.
    If a compression method other than gzip is selected, the SIF
    file might not work with older installations of Apptainer
    or Singularity, so an INFO message about that is printed. On
    the other hand, an INFO message that was printed (twice) when
    running an image with non-gzip compression has been removed.
  * If the `mksquashfs` version is new enough (version 4.6 in
    Leaep 16.0), then show a percentage progress bar (with ETA)
    during SIF creation in the default log level. If the `mksquashfs`
    version is older, then in verbose or debug log level show the
    output of mksquashfs with its own progress bar.
  * Statistics are now normally available for instances that are
    started by non-root users on cgroups v2 systems. The instance
    will be started in the current cgroup. Information about
    configuration issues that prevent collection of statistics are
    displayed as INFO messages by default.
  * Add a `--sandbox` option to `apptainer pull`.
  * Add configuration file binding to the `--nv` option. Files
    that are recognized in the NVIDIA Container Toolkit, including
    files for EGL ICD, were added to the default `nvliblist.conf`.
  * It is now possible to use multiple environment variable files
    using the `--env-file` flag. Files can be specified as a
    comma-separated list or by using the flag multiple times.
    Variables defined in later files take precedence over earlier
    files.
  * The registry login and registry logout commands now support a
    `--authfile &lt;path&gt;` option, which causes OCI credentials to be
    written to / removed from a custom file located at `&lt;path&gt;`
    instead of the default location (`$HOME/.apptainer/docker-config.json`).
    The commands `pull`, `push`, `run`, `exec`, `shell` and
    instance start can now also be passed a `--authfile &lt;path&gt;`
    option, to read OCI registry credentials from this custom file.
  * A new `--netns-path` option takes a path to a network
    namespace to join when starting a container. The root user
    may join any network namespace. An unprivileged user can only
    join a network namespace specified in the new `allow netns
    paths` directive in `apptainer.conf`, if they are also listed
    in `allow net users` / `allow net groups` and apptainer is
    installed with setuid privileges. Not supported with
    `--fakeroot`.
  * `apptainer.conf` now accepts setting the following options:
    `allow ipc ns` -- Default value is `yes`; when set to `no`,
  it will disable the use of the `--ipc` flag.
    `allow uts ns` -- Default value is `yes`; when set to `no`,
  it will invalidate the use of the `--uts` and `--hostname`
  flags.
    `allow user ns` -- Default value is `yes`; when set to
  `no`, it will disable creation of user namespaces. Note
  that this will prevent execution of containers with the
  `--userns` or `--fakeroot` flags and with unprivileged
  installations of Apptainer.
- Changed defaults / behaviours
  * Label the starter process seen in `ps` with the image filename,
    for example: Apptainer runtime parent: `example.sif`.
  * Remove runtime and compute libraries from `rocmliblist.conf`.
    They should instead be provided by the container image.
  * Allow overriding the build architecture with `--arch` and
    `--arch-variant`, to build images for another architecture
    than the current host arch. This requires that the host has
    been set up to support multiple architectures (`binfmt_misc`).
  * Complete the previously partial support for the riscv64
    architecture.
  * Show a warning message if changing directory to the cwd
    fails, instead of silently switching to the home directory
    or `/`.
  * Write starter messages to stderr when an instance fails to
    start. Previously they were incorrectly written to stdout.
  * Skip attempting to bind inaccessible mount points when
    handling the `mount hostfs = yes` configuration option.
  * Fix storage of credentials for `docker.io` to behave the same
    as for `index.docker.io`.
  * Change message log level from warning to debug when environment
    variables set inside a container or by `APPTAINERENV` have a
    different value than the environment variable on the host.
  * Change the default message level from silent to the normal
    level in the nested apptainer that executes a build's `%post`
    section, and suppress an unnecessary warning message.
  * Ignore invalid environment variables when pulling oci/docker
    containers.
  * Remove the little-known `fakerootcallback` functionality.
  * Update the default pacman confURL for `Bootstrap: arch`
    container builds.
  * Update the bundled fuse programs to their latest releases.
- Bug fixes
  * Fix the `mconfig -s` option to build the apptainer and starter
    binaries statically as documented.
  * `%files from` in a definition file will now correctly copy
    symlinks that `%point` to a target above the destination
    directory but inside the `%destination` stage root filesystem.
  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -&gt; `libnvoptix.so`).
  * Avoid timeouts when cleaning up from building gocryptfs-encrypted
    SIF files.
  * Fix bug that prevented build with `--passphrase` or
    `--pem-path` but without `--encrypt` from implying fakeroot.
  * Fix hang when copying files between build stages while using
    suid mode without user namespaces.
  * Fix running and building containers of different architectures
    than the host via binfmt_misc when using rootless fakeroot.
  * Fix `target: no such file or directory` error when extracting
    layers from certain OCI images that manipulate hard links
    across layers.
  * Fix the crash that happened when executing a privilege-encrypted
    container as root.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757246400">- Update to 1.4.2
  * Restore looking for registry mirrors in /etc/containers/registry.conf
    and related files. This had been inadvertently dropped beginning in 1.4.0.
  * Fix use of the image cache when the home directory contains @ characters.
    Previously it would assume that it was the start of a digest in the oci-dir.
  * Fix signature verification failures on unsigned images.
  * Add additional .deb packages to the release assets that include the label
    trixie+ to indicate that they are for installing on Debian 13 or later.
    Those packages are necessary to work with the new libfuse3 library in
    Debian13. They also support libsubid, unlike the default packages because
    they are built on Debian 11 which doesn't have that library.
  * Add automatic triggering of Ubuntu PPA builds whenever there's a new
    apptainer release.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1759406400">- Update to 1.4.3
  * Corrected the mconfig -s option for statically building apptainer
    and starter binaries.
  * Resolved an issue where the Makefile generated by mconfig -b
    failed when the build directory was not a subdirectory of the
    Apptainer source code.
  * Fixed %files in definition files to correctly copy symlinks
    pointing above the destination directory but within the
    destination stage root filesystem.
  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was
    corrected to libnvoptix.so).
  * Prevented timeouts during cleanup after building
    gocryptfs-encrypted SIF files.
  * Fixed a bug that prevented build with --passphrase or --pem-path
    (without --encrypt) from implying fakeroot.
  * Resolved a hang when copying files between build stages while
    using suid mode without user namespaces.
  * Fixed issues with running and building containers of different
    architectures than the host via binfmt_misc when using rootless
    fakeroot.
  * Corrected "target: no such file or directory" errors when
    extracting layers from certain OCI images that manipulate hard
    links across layers.
  * Fixed a crash when executing a privilege-encrypted container as
    root.
  * Improved documentation for the remote list command.
  * Removed the fakerootcallback functionality.
  * Updated the default pacman confURL for Bootstrap: arch container
    builds.
  * Updated bundled fuse programs to their latest releases.
  * Changed the default message level from silent to normal in
    nested apptainer executions of a build's %post section, and
    suppressed an unnecessary warning.
  * Invalid environment variables are now ignored when pulling
    oci/docker containers.
- Add definition file for SLE 16 (SLE-16.def).
- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and
  SP6 (SLE-15SP6.def).</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1761048000">- No need for binutils-gold for aarch64</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1767700800">- Update ot 1.4.5
  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /
    GHSA-j3rw-fx6g-q46j (bsc#1255462):
    Ineffective application of selinux / apparmor --security option.
    Updates of a few dependent go libraries for related security fixes.
  * Other fix
    Run FUSE processes in a separate process group. This detaches them
    from the main process so they don't receive signals such as interrupts
    sent to a terminal there. This was not a problem with interactive
    shells because they start their own group, but was a problem with
    some programs with interactive Read/Eval/Print/Loops such as python.
    An interrupt there would kill the FUSE processes.
- From 1.4.4
  * By applying patches to the bundled fuse2fs, allow again the possibility
    of using a non-writable ext3 image file as an overlay. Fixes regression
    introduced in 1.4.3.
  * If an overlay or bound data image is asked to be mounted writable but
    the user has no write access to the image, show a warning message
    instead of silently switching to readonly.
  * Avoid a fatal error when starting fakeroot from suid mode while
    in an NFS directory.
  * Fix 32-bit builds which were accidentally broken by a library
    upgrade that was done for a minor security issue.
- Fix CVEs:
  * GO-2025-4135 - CVE-2025-47914
    Malformed constraint may cause denial of service in
    golang.org/x/crypto/ssh/agent.
  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924
    Unbounded memory consumption in golang.org/x/crypto/ssh.
  * GO-2025-4116 - CVE-2025-47913
    Potential denial of service in golang.org/x/crypto/ssh/agent.
  * GO-2025-3595 - CVE-2025-22872
  Incorrect Neutralization of Input During Web Page Generation
  in x/net.
  * GO-2025-3503 - CVE-2025-22870
    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.
  * GO-2025-3487 - CVE-2025-22869
    Potential denial of service in golang.org/x/crypto.
  * GO-2025-3485 - CVE-2025-27144
    DoS in go-jose Parsing in github.com/go-jose/go-jose.
  * GO-2025-3754 - CVE-2025-8556
    CIRCL-Fourq: Missing and wrong validation can lead to
    incorrect results in github.com/cloudflare/circl.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1770724800">- Fix HTML parser misimplementation of a part of the HTML
  specification for table related tags (CVE-2025-58190,
  GO-2026-4441, bsc#1258048).
- Fix issue where the HTML parser takes a very long time or
  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1778068800">- Fix CVE-2026-34986 (bsc#1262956)
  * github.com/go-jose/go-jose/v4@v4.1.4
    CVE-2026-33186 GO-2026-4762 (bsc#1260311)
  * google.golang.org/grpc@v1.79.3
    CVE-2026-24137 GO-2026-4358 (bsc#1264177)
  * github.com/sigstore/sigstore@v1.10.4
    Fix fallout:
  github.com/moby/go-archive@v0.1.0
  github.com/containers/image/v5=github.com/containers/image/v5@v5.36.0
- Building Add `%%with_suid` macro to optionally build the
  `suid` starter (default: off).</changelog>
</package>
<package pkgid="b03789d0f1929c9cb6d3023fa65d197d994bfbbb80d411f0db48334dd06ff127f14ab490c4980ef6fb73c6e8942cfa66c315a5d11c9459912a551402ecb88536" name="appx-util" arch="x86_64">
  <version epoch="0" ver="0.5" rel="160000.2.2"/>
  <changelog author="ngompa13@gmail.com" date="1622116800">- Initial package based on Fedora packaging</changelog>
  <changelog author="pmonreal@suse.com" date="1667995200">- Add OpenSSL 3.0 support [bsc#1205042]
  * Add appx-util-openssl3-support.patch</changelog>
  <changelog author="scott.bradnick@suse.com" date="1694433600">- Updating to version 0.5
  * Add support for OpenSSL 3.0 by @ignatenkobrain in #1
  * Removing appx-util-openssl3-support.patch</changelog>
</package>
<package pkgid="7386aef24429ab9d3f8c3fa2323ae4ee5e9998891afa698d54beea8fe31e457cc61c396496cacb5616290b5e064e8826b5199120787d34fe24c3ce41acbca423" name="apr-devel" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="160000.2.2"/>
  <changelog author="mmanu84@outlook.de" date="1564833600">- Version 1.7.0
  * apr_dir_read: [Unix] Dropped the preference of the dirread_r() flavor
    for dirread(), because the former is both deprecated and unneeded.
    [Yann Ylavic, William Rowe]
  * apr_file_info: [Win32 only] Treat only "name surrogate" reparse points
    as symlinks, and not other reparse tag types. PR47630
    [Oleg Liatte &lt;olegliatte gmail.com&gt;]
  * Test %ld vs. %lld to avoid compiler emits using APR_OFF_T_FMT, in the
    case of apparently equivilant long and long long types. [William Rowe]
  * Recognize APPLE predefined macros as equivilant to DARWIN. [Jim Jagielski]
  * Signals: Allow handling of SIGUSR2 in apr_signal_thread. [Yann Ylavic]
  * Atomics: Support for 64bit ints. [Jim Jagielski]
  * Add the apr_encode_* API that implements RFC4648 and RFC7515
    compliant BASE64, BASE64URL, BASE32, BASE32HEX and BASE16
    encode/decode functions. [Graham Leggett]
  * rand: Use arc4random_buf() on BSD platforms and getrandom() on Linux,
    when available. [Christian Weisgerber &lt;naddy openbsd.org, Yann Ylavic]
  * Add apr_sockaddr_zone_set, apr_sockaddr_zone_set to set and retrieve
    the zone for link-local IPv6 addresses.  [Joe Orton]
  * apr_sockaddr_equal: Compare link-local IPv6 addresses with different
    zones as not equal.  [Joe Orton]
  * apr_sockaddr_ip_getbuf, apr_sockaddr_ip_get: Append "%zone" for
    IPv6 link-local addresses.  [Joe Orton]
  * Locks: add a --disable-timedlocks config option in case users
    encounter more platforms where it fails [Nick Kew].
  * apr_allocator, apr_pools: Add apr_allocator_page_size() and
    apr_allocator_min_order_set() to respectively get the (system's) page size
    in use and set the minimum allocation size for an allocator (expressed in
    2^order pages).  [Yann Ylavic]
  * locks: provide portable implementations of timedlock()s for
    posix-sems, sysv-sems and pthreads for those platforms that
    lack native versions (eg: OSX/macOS). [Jim Jagielski]
  * locks: Introduce apr_{thread,proc,global}_mutex_timedlock().
    [Yann Ylavic]
- Remove patch
  * apr-use-getrandom.patch no longer needed, apr 1.7.0 use getrandom() on Linux,
    when available.
- Refresh apr-visibility.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1630584000">- security update
- added patches
  fix CVE-2021-35940 [bsc#1190072], Regression of fix in apr 1.7
  + apr-CVE-2021-35940.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1634644800">- fix shlib-policy-name-error [bsc#1191747]</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- deleted patches
  - apr-CVE-2021-3594.patch (renamed)
- added patches
  + apr-CVE-2021-35940.patch (correct name)</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Remove autoreconf call, it breaks with uptodate autoconf versions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1675339200">- update to 1.7.2:
  * CVE-2022-24963: Integer Overflow or Wraparound vulnerability in
    apr_encode functions allows an attacker to write beyond bounds
    of a buffer (boo#1207870)
  * Add error handling for lseek() failures in apr_file_write() and
    apr_file_writev()
  * Avoid an overflow on 32 bit platforms
  * Don't silently set APR_FOPEN_NOCLEANUP for apr_file_mktemp()
    created file to avoid a fd and inode leak when/if later passed
    to apr_file_setaside().
  * build system fixes and fixes for other platforms
- drop apr-CVE-2021-35940.patch included upstream (CVE-2021-35940)</changelog>
  <changelog author="dmueller@suse.com" date="1681646400">- update to 1.7.3:
  * apr-1-config: Fix crosscompiling detection
  * configure: Add --enable-sysv-shm to use SysV shared
    memory (shmget) if available.
  * apr_socket_sendfile: Use WSAIoctl() to get TransmitFile
    function pointer on Windows. [Ivan Zhakov]
  * apr_dir_read: Do not request short file names on Windows
    7 and later. [Ivan Zhakov]
  * apr_file_gets: Optimize for buffered files on Windows.
  * Fix a deadlock when writing to locked files opened with
    APR_FOPEN_APPEND on Windows. PR 50058. [Evgeny Kotkov]
  * Don't seek to the end when opening files with
    APR_FOPEN_APPEND on Windows.
  * apr_file_write: Optimize large writes to buffered files
    on Windows.
  * apr_file_write: Optimize large reads from buffered files
    on Windows.</changelog>
  <changelog author="pgajdos@suse.com" date="1681992000">- version update to 1.7.4
  * ) Fix a regression where writing to a file opened with both APR_FOPEN_APPEND
    and APR_FOPEN_BUFFERED did not properly append the data on Windows.
    (This regression was introduced in APR 1.7.3)  [Evgeny Kotkov]</changelog>
  <changelog author="bwiedemann@suse.com" date="1702900800">- Add reproducible.patch to drop build host name (boo#1084909)</changelog>
  <changelog author="pgajdos@suse.com" date="1726574400">- version update to 1.7.5 [bsc#1229783] CVE-2023-49582
  * ) Unix: Implement apr_shm_perms_set() for the "POSIX shm_open()"
    and "classic mmap" shared memory implementations.  [Joe Orton,
    Ruediger Pluem]
  * ) Fix missing ';' for XML/HTML hex entities from apr_escape_entity().
    [Yann Ylavic]
  * ) Fix crash in apr_pool_create() with --enable-pool-debug=all|owner.
    [Yann Ylavic]
  * ) Improve platform detection by updating config.guess and config.sub.
    [Rainer Jung]
  * ) CMake: Add support for CMAKE_WARNING_AS_ERROR. [Ivan Zhakov]
  * ) CMake: Enable support for MSVC runtime library selection by abstraction.
    [Ivan Zhakov]
  * ) CMake: Export installed targets (libapr-1, apr-1, libaprapp-1, aprapp-1)
    to apr:: namespace. [Ivan Zhakov]
- modified patches
  % apr-visibility.patch (refreshed)
  % reproducible.patch (refreshed)</changelog>
</package>
<package pkgid="dea2a9308a3d4a05364b878096602ea7e187f8091fb676eca950857a0edf08806ec681d774bcbb11bf9a155d5c8cb90a5ae27b8665a9efbd463062baaee16f54" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
  <changelog author="vcizek@suse.com" date="1537790400">- Add missing zlib-devel build dependency which used to be pulled in
  by libopenssl-devel</changelog>
  <changelog author="max@suse.com" date="1551787200">- apr-util-postgresql.patch: PostrgeSQL's pg_config is meant for
  linking server extensions, use libpq's pkg-config, if pg_config
  is missing. This fixes build with PostgreSQL 11.</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- fix linking with libpq
- modified patches
  % apr-util-postgresql.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598961600">- drop dependency on Berkeley DB [jsc#SLE-12211], gdbm DBM connector
  is now built instead and sdbm works as well
  * added patches
  https://svn.apache.org/viewvc?view=revision&amp;revision=1825312
  + apr-util-apr_dbm_gdbm-fix-handling-of-error-codes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1634644800">- fix shlib-policy-name-error [bsc#1191748]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640088000">- add upstream signing key (taken from apr package) and validate
  source signature
- run spec-cleaner and mark license files as %license</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1675339200">- update to 1.6.3
  * CVE-2022-25147: Integer Overflow or Wraparound vulnerability in
    apr_base64 function allows an attacker to write beyond bounds
    of a buffer (boo#1207866)
  * build system updates
- drop patches now included upstream:
  * apr-util-apr_dbm_gdbm-fix-handling-of-error-codes.patch
  * apr-util-mariadb-10.2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1730376000">- Fix dependency on libapr: in 2021, libapr1 was renamed to
  libapr1-0, conforming to the shared library packaging policy.
  requires_eq silently dropped the dependency, as the packahe name,
  libapr1, does not exist.</changelog>
</package>
<package pkgid="5b348c4a59e1b9a074e0355729c5d7d9bc6ec261c42b366ae80d89235aa96d5e662615dcee7defd3fd4bdb57ed0ab08f63db55a62b1208f2c26eaf41e84a9514" name="aqbanking" arch="x86_64">
  <version epoch="0" ver="6.5.4" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1616068800">- Update to 6.2.10:
  + Increased verbosity for debugging purposes.
  + Fixed a bug regarding TAN-secured jobs.</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1620561600">- Update to 6.3.0
  + Create transaction logs, for now only for HBCI/FinTS backend</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1631620800">- Update to 6.3.1
  + Bugfixes and small enhancements</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1632225600">- Update to 6.3.2
  + Bugfixes</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1639396800">- Update to 6.4.0
  + Bugfixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 6.4.1:
  * rebuild with latest typemaker2</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647777600">- Update to 6.5.0
  + Bugfixes
  + Fix dispatching of messages for two-step TANs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- add keyring for gpg validation</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1660824000">- Update to 6.5.3
  + aqbanking-cli: Added command to show supported commands per account.
  + AqHBCI: Cleanup (remove defs for static function from header files).
  + AqHBCI: Cleanup jobtransferbase.c. Probably fixed #260.
  + AqPaypal: Probably fixed missing unlock in bug #253.
  + AqHBCI: Probably fixed a bug in attach code/ack code handling (#263).
  + AqHBCI: Move _removeAttachPoints() to cbox_send and call it there.
  + Many more bugfixes
  + Add keyring for gpg validation</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1681732800">- Update to 6.5.4
  + Bugfixes
  + add command line tool to create ofx user/accounts (#288)</changelog>
</package>
<package pkgid="829fcd49f243bce79546864df19c534580f595d9a66c597bc4713291bafbea2984ef9f76a78a6975399f58e7677c4f70aeb2055eb5577e30b9db18f3777ea85f" name="aqbanking-devel" arch="x86_64">
  <version epoch="0" ver="6.5.4" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1616068800">- Update to 6.2.10:
  + Increased verbosity for debugging purposes.
  + Fixed a bug regarding TAN-secured jobs.</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1620561600">- Update to 6.3.0
  + Create transaction logs, for now only for HBCI/FinTS backend</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1631620800">- Update to 6.3.1
  + Bugfixes and small enhancements</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1632225600">- Update to 6.3.2
  + Bugfixes</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1639396800">- Update to 6.4.0
  + Bugfixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 6.4.1:
  * rebuild with latest typemaker2</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647777600">- Update to 6.5.0
  + Bugfixes
  + Fix dispatching of messages for two-step TANs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- add keyring for gpg validation</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1660824000">- Update to 6.5.3
  + aqbanking-cli: Added command to show supported commands per account.
  + AqHBCI: Cleanup (remove defs for static function from header files).
  + AqHBCI: Cleanup jobtransferbase.c. Probably fixed #260.
  + AqPaypal: Probably fixed missing unlock in bug #253.
  + AqHBCI: Probably fixed a bug in attach code/ack code handling (#263).
  + AqHBCI: Move _removeAttachPoints() to cbox_send and call it there.
  + Many more bugfixes
  + Add keyring for gpg validation</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1681732800">- Update to 6.5.4
  + Bugfixes
  + add command line tool to create ofx user/accounts (#288)</changelog>
</package>
<package pkgid="0817b74de05e5f726ea68f783fdfbb35c85bbb5626d275547783b3337dfd4cd7429e287bfd3e179eab66b0fed11fa40b7fbedb54fb38f2d47663cdd92e92a394" name="aqbanking-doc" arch="x86_64">
  <version epoch="0" ver="6.5.4" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1616068800">- Update to 6.2.10:
  + Increased verbosity for debugging purposes.
  + Fixed a bug regarding TAN-secured jobs.</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1620561600">- Update to 6.3.0
  + Create transaction logs, for now only for HBCI/FinTS backend</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1631620800">- Update to 6.3.1
  + Bugfixes and small enhancements</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1632225600">- Update to 6.3.2
  + Bugfixes</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1639396800">- Update to 6.4.0
  + Bugfixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 6.4.1:
  * rebuild with latest typemaker2</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647777600">- Update to 6.5.0
  + Bugfixes
  + Fix dispatching of messages for two-step TANs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- add keyring for gpg validation</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1660824000">- Update to 6.5.3
  + aqbanking-cli: Added command to show supported commands per account.
  + AqHBCI: Cleanup (remove defs for static function from header files).
  + AqHBCI: Cleanup jobtransferbase.c. Probably fixed #260.
  + AqPaypal: Probably fixed missing unlock in bug #253.
  + AqHBCI: Probably fixed a bug in attach code/ack code handling (#263).
  + AqHBCI: Move _removeAttachPoints() to cbox_send and call it there.
  + Many more bugfixes
  + Add keyring for gpg validation</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1681732800">- Update to 6.5.4
  + Bugfixes
  + add command line tool to create ofx user/accounts (#288)</changelog>
</package>
<package pkgid="be5423a611a02c000bbe9e28349e7f47ca3efae21cd7f8125f20345c1dc3238e4c95c088dadaff65994adc660bd9e1f597602af5c1a4cc85202c3f0e7de1ffd3" name="aqbanking-ebics" arch="x86_64">
  <version epoch="0" ver="6.5.4" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1616068800">- Update to 6.2.10:
  + Increased verbosity for debugging purposes.
  + Fixed a bug regarding TAN-secured jobs.</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1620561600">- Update to 6.3.0
  + Create transaction logs, for now only for HBCI/FinTS backend</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1631620800">- Update to 6.3.1
  + Bugfixes and small enhancements</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1632225600">- Update to 6.3.2
  + Bugfixes</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1639396800">- Update to 6.4.0
  + Bugfixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 6.4.1:
  * rebuild with latest typemaker2</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647777600">- Update to 6.5.0
  + Bugfixes
  + Fix dispatching of messages for two-step TANs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- add keyring for gpg validation</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1660824000">- Update to 6.5.3
  + aqbanking-cli: Added command to show supported commands per account.
  + AqHBCI: Cleanup (remove defs for static function from header files).
  + AqHBCI: Cleanup jobtransferbase.c. Probably fixed #260.
  + AqPaypal: Probably fixed missing unlock in bug #253.
  + AqHBCI: Probably fixed a bug in attach code/ack code handling (#263).
  + AqHBCI: Move _removeAttachPoints() to cbox_send and call it there.
  + Many more bugfixes
  + Add keyring for gpg validation</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1681732800">- Update to 6.5.4
  + Bugfixes
  + add command line tool to create ofx user/accounts (#288)</changelog>
</package>
<package pkgid="8cd5ed429b38e2316c892fe3b4c4f1684c52ac10ced148f53734785f7a5b10aaef588146a594285a0791a315e219ade128867f05e4d6591a653c385cf974f456" name="aqbanking-lang" arch="noarch">
  <version epoch="0" ver="6.5.4" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1616068800">- Update to 6.2.10:
  + Increased verbosity for debugging purposes.
  + Fixed a bug regarding TAN-secured jobs.</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1620561600">- Update to 6.3.0
  + Create transaction logs, for now only for HBCI/FinTS backend</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1631620800">- Update to 6.3.1
  + Bugfixes and small enhancements</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1632225600">- Update to 6.3.2
  + Bugfixes</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1639396800">- Update to 6.4.0
  + Bugfixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 6.4.1:
  * rebuild with latest typemaker2</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647777600">- Update to 6.5.0
  + Bugfixes
  + Fix dispatching of messages for two-step TANs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- add keyring for gpg validation</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1660824000">- Update to 6.5.3
  + aqbanking-cli: Added command to show supported commands per account.
  + AqHBCI: Cleanup (remove defs for static function from header files).
  + AqHBCI: Cleanup jobtransferbase.c. Probably fixed #260.
  + AqPaypal: Probably fixed missing unlock in bug #253.
  + AqHBCI: Probably fixed a bug in attach code/ack code handling (#263).
  + AqHBCI: Move _removeAttachPoints() to cbox_send and call it there.
  + Many more bugfixes
  + Add keyring for gpg validation</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1681732800">- Update to 6.5.4
  + Bugfixes
  + add command line tool to create ofx user/accounts (#288)</changelog>
</package>
<package pkgid="f979024b4c000ac55f07e14147c14e5469b68952748e3b9e579d3801fdedc4330499c490b47695841e4e1c7b96e278912fe186248782041b59b92a0139f3b4b7" name="aqbanking-ofx" arch="x86_64">
  <version epoch="0" ver="6.5.4" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1616068800">- Update to 6.2.10:
  + Increased verbosity for debugging purposes.
  + Fixed a bug regarding TAN-secured jobs.</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1620561600">- Update to 6.3.0
  + Create transaction logs, for now only for HBCI/FinTS backend</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1631620800">- Update to 6.3.1
  + Bugfixes and small enhancements</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1632225600">- Update to 6.3.2
  + Bugfixes</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1639396800">- Update to 6.4.0
  + Bugfixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1641297600">- update to 6.4.1:
  * rebuild with latest typemaker2</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1647777600">- Update to 6.5.0
  + Bugfixes
  + Fix dispatching of messages for two-step TANs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1660737600">- add keyring for gpg validation</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1660824000">- Update to 6.5.3
  + aqbanking-cli: Added command to show supported commands per account.
  + AqHBCI: Cleanup (remove defs for static function from header files).
  + AqHBCI: Cleanup jobtransferbase.c. Probably fixed #260.
  + AqPaypal: Probably fixed missing unlock in bug #253.
  + AqHBCI: Probably fixed a bug in attach code/ack code handling (#263).
  + AqHBCI: Move _removeAttachPoints() to cbox_send and call it there.
  + Many more bugfixes
  + Add keyring for gpg validation</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1681732800">- Update to 6.5.4
  + Bugfixes
  + add command line tool to create ofx user/accounts (#288)</changelog>
</package>
<package pkgid="f5f873e5843f1e61a831574963d641ab601075d579c764b38f2b60168a3286ff5392ac8c2f12386006a95e9554c63b5c30f3c4ac3b144123bf3ce8bacaa49471" name="aquamarine-devel" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="bp160.1.4"/>
  <changelog author="Florian &quot;sp1rit&quot; &lt;sp1rit@disroot.org&gt;" date="1723118400">- Initial packaging of aquamarine-0.3.0</changelog>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1726574400">- Update to aquamarine-0.4.1
  * drm: fix crash on null crtc setCursor
  * gbm: improve trace logging around allocs
  * drm: reconfigure swapchain props after creating
  * output: avoid crashing on no crtc
  * GBM: fixup good() return value
  * drm: verify output format in commit
  * drm: request page flip events after commit
  * drm: add missing destructor
  * drm: fix typo in schedule
  * backend: dont overflow on 32bit builds
  * wayland: fix possible out-of-range crash in setCursor
  * drm: recheck crtcs before connecting on udev event
  * misc: make for loops const reference
  * gbm: improve automatic format selection
  * drm: don't connect before crtcs are guaranteed
  * output: always emit a destroy event in ~dtor
  * gbm/drm: conform to different scanout requirements for different planes
  * wayland: send 1280x720 if w/h is 0 in configure
  * gbm: override gbm_bo_get_modifier results for modifier-based allocation
  * drm: allow disabling commit, even if pageFlipPending
  * drm: add AQ_NO_MODIFIERS to try to mitigate hardware limitations
  * gbm: don't select opaque pixel formats for cursor
- Run spec-cleaner over the specfile</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;sp1rit@disroot.org&gt;" date="1731153600">- Update to aquamarine-0.4.4:
  * drm: guard cursorFB buffer in restoreAfterVT
- Changes from aquamarine-0.4.3:
  * fix drm lease crash
- Changes from aquamarine-0.4.2:
  * A minor update with some fixes and fresh new CTM support.
  * Fixes:
  - session: only dispatch udev in dispatchPendingEventsAsync if on
  linux
  - wayland: log compositor name on startup</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;sp1rit@disroot.org&gt;" date="1734436800">- Update to aquamarine-0.5.1:
  * A minor update with some stability improvements.
  * Fixes:
  - buffer: remove useless forward def
  - drm: Validate conn before dereference in
    CDRMAtomicRequest::commit()
  - clearer flow when rescanning connectors
  - allow multigpu blit from explicit to implicit
- Changes from aquamarine-0.5.0:
  * A new major update with a few fixes.
    This update breaks ABI and API compatibility. Sover has been
    bumped to 4.
  * Fixes:
  - Fix fences according to spec
  - scan only cards and not outputs, safeguard against null
    renderer
- Changes from aquamarine-0.4.5:
  * A small update to add a drm_dumb allocator.</changelog>
</package>
<package pkgid="ec3442a266ec6fdfbb57d5d776d035911f8b39f7a51b07dabaef8fdc1b87b0a6369604483b1cb60d71ae447422a1d269f5ad0b00cdb5d9ccf1007fde984613ce" name="aqute-bnd" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1728302400">- Add dependency on osgi-service-subsystem to allow upgrade to
  osgi-compendium 8.0.0</changelog>
</package>
<package pkgid="df6407d060abb96f5dc92c269929a4739fa7048afb76fa157e211a54705c5e39e15a09277016391255cd92c0e44d8a474646019b30ebec868b4f1b762094d307" name="aqute-bnd" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1728302400">- Add dependency on osgi-service-subsystem to allow upgrade to
  osgi-compendium 8.0.0</changelog>
  <changelog author="fstrba@suse.com" date="1778241600">- Remove unnecessary dependency on jline</changelog>
</package>
<package pkgid="f6c743f4a374e01c522fb917425b6f6b3aa0110d377e5cf4b4579a15c8101d2db901a3f93c5b2b6dfe458a9bdec93dde47f00f68074563059269ae1995a093b4" name="aqute-bnd-javadoc" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1728302400">- Add dependency on osgi-service-subsystem to allow upgrade to
  osgi-compendium 8.0.0</changelog>
</package>
<package pkgid="b94f4de1a52177dcad35b1d80fa440a157413f5de331480bd14e65c6e7305de401d0f1d4d7cf0889088e9beb0c86850ee131c592e5b65b1c246396be13b693a7" name="aqute-bnd-javadoc" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1728302400">- Add dependency on osgi-service-subsystem to allow upgrade to
  osgi-compendium 8.0.0</changelog>
  <changelog author="fstrba@suse.com" date="1778241600">- Remove unnecessary dependency on jline</changelog>
</package>
<package pkgid="8f8832228be48962efe8bff3dcbe2fcb6e418df254cb1244bcc6565a83c78b2fcf9d09d96954c64edfe8825a9fded32f5ef861922ad1887a6a8a6bd2d8f5fd28" name="aqute-bndlib" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1728302400">- Add dependency on osgi-service-subsystem to allow upgrade to
  osgi-compendium 8.0.0</changelog>
</package>
<package pkgid="8249bdc224bd015c3d943806f900c5f92a0f886977313357945de82d8060c01b77a089d3c72776934eaaa111bbb4c59ebd634aea8127bc2263550ee5c06c2975" name="aqute-bndlib" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1728302400">- Add dependency on osgi-service-subsystem to allow upgrade to
  osgi-compendium 8.0.0</changelog>
  <changelog author="fstrba@suse.com" date="1778241600">- Remove unnecessary dependency on jline</changelog>
</package>
<package pkgid="f77fa7edfb19f501b136931f164b8d21ae0eb50b16971e07ce16c7e46c37813c334cd970e7805a953f79ba71b6a6bad3b2eee0f2e764e92bde98f35a42f01bb0" name="arabic-ae-fonts" arch="noarch">
  <version epoch="0" ver="2.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="1306b03161a415d6977763b835398388bb9a97f285bc27e6ffa0d6a22c36ed85c65c79e9779f64ad94c30b8a17326e4c5b3db5168356070d2e09068af8cb775c" name="arabic-amiri-fonts" arch="noarch">
  <version epoch="0" ver="0.109" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="d57afa13c4a1cb0c274e844b72903b52103156f2ebf5ace8b96c34ed732fb721e5233ff6fdf5f32bc587167a599f87acd972f716f51ef3b1080430cc64852a0e" name="arabic-bitmap-fonts" arch="noarch">
  <version epoch="0" ver="1.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="1eca1515c800a2e712ae4c992dd1dd57c8dfd3b8c97d594063f5a4b3aa5270d3abe7e1c6989f16573eeee3744a1d35a005b34d31f0a687e672729c4874218d91" name="arabic-fonts" arch="noarch">
  <version epoch="0" ver="0.20161120" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="578cd14f37fad65815467e2e33ad2f0b867bce12f9427031c0531d47072ec50d267341eb2c5d16e18f93e53818a29f9d51b02c6f44217b3fe5c0b66d1c4b571d" name="arabic-kacst-fonts" arch="noarch">
  <version epoch="0" ver="2.01" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="69db39496d3b94a891dc29a7052cbf215763b03ba69300a05de754586bbcba604d13d885ec9ea1f333e1048d0b9da94fe39c7eb341e94c358880c4b26ed82c0e" name="arabic-kacstone-fonts" arch="noarch">
  <version epoch="0" ver="5.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="db6d921ea6d5dacf2d7374f90d7f83f4131065661b9b3ab29cfd6edbeadba7886fafb91c3adf970ebc29be24222a243672d96588b7e9e59a158eb8e5d071d6d2" name="arabic-naqsh-fonts" arch="noarch">
  <version epoch="0" ver="2.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1372075200">- arabic-fonts splitted into subpackages [bnc#825954]
- new font: KacstOne 5.0 [bnc#825955]
- %if-0-out Haydar and Nesf2 family because of missing license
  specification</changelog>
  <changelog author="pgajdos@suse.com" date="1372248000">- new font: Amiri 0.106 [bnc#825961]</changelog>
  <changelog author="pgajdos@suse.com" date="1399896000">- Amiri font updated to 0.107
  * New glyphs:
  - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
    (U+1EE00–U+1EEFF).
  - Optional support for placing the kasra below the shadda, with “ss05”
    feature.
  - Missing proportional LTR digits in the slanted font.
  * Fixes:
  - Reverted the lowering of marks above wide isolated glyphs, it made the marks
    look weird relative to other ones.
  - Fixed the position of marks above qaf of ﻖﺣ.
  - Dropped the special combination in ﺖﻤﺧ&lt;200d&gt; when it is follow vowelled as
    it was too crowded.
  - Fixed the position of sukun over shadda.
  - Fixed the side bearings of ﺙﺭ, ﺚﻧ and sisters so that the dots do not clash
    with preceding glyphs.
  - Positive kerning between ﻡﺮﻴﻧ and likes.
  - Slight kerning between the period and closing quotes.
  - Made sure the italic European digits are really tabular.
- package regular font instead of webfonts</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- fixed url for arabic-amiri-fonts package</changelog>
  <changelog author="pgajdos@suse.com" date="1442836800">- updated to 0.108
  * New glyphs:
  - New design of ﻩ in &lt;200d&gt;ﻪﻳ combination.
  - Alternate numbers for use in fractions, accessible with the OpenType
    features `numr` and `dnom`.
  - The new Arabic Extended-A vowel marks, in the range U+08E4–08FE.
  - Redesign the U+06C1 forms to make it distinctive from U+06BE.
  - Add “ﺞﻟ ﺝﻼﻠﻫ” symbol, U+FDFB.
  * Fixes:
  - No longer replace two successive *fatha*, *damma* or *kasra* with a
    sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
    should be used instead.
  - Many kerning improvements.
  - Workaround a bug in Core Text (Mac OS X text layout engine) that break
    the ﻞﻠﻫ ligature.
  - All forms of U+06BA are now dotless, per Unicode standard.
  - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
    missing.
  - The dots in initial and medial forms of U+06BD should be inverted.
  * New fonts:
  - A coloured version of the Amiri Quran font that gives the vowels and
    Quranic annotation marks distinctive colours. This font uses the new
    `COLR`/`CPAL` font tables which are currently supported only by Firefox
    (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
  - The webfonts now include WOFF 2.0 files as well.</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update amiri subpackage to 0.109
  * New glyphs:
  * A new stylistic set (ss06) to avoid automatically
    adding ◌ّٰ above لله.
  * A localised &amp;.
  * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
    TATWEEL (𞻰).
  * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (𞻱).
  * Adding missing forms of U+06C2.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Modernize $RPM_* shell vars and shell logic to generate BDFs.</changelog>
</package>
<package pkgid="a271b2cc801f708c7e47d1d9bc4c462029d910f15a6641b0a9c2833b01e4c30053e7ded8e690c9177fe63c4085396cc4bea2e4432100bc1f19cd6af0f2fa1ee0" name="arandr" arch="noarch">
  <version epoch="0" ver="0.1.11" rel="bp160.1.10"/>
  <changelog author="mvetter@suse.com" date="1437048000">- Cleanup spec
- Update to version 0.1.8
  * Add support for choosing the primary output
  * Use "save" button in the file-save dialog
  * Update and add a lot of new languages</changelog>
  <changelog author="mvetter@suse.com" date="1456920000">- Update to version 0.1.9:
  * XRandR version 1.5 is accepted
  * Translations were added (Albanian) and updated</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1521633600">- BuildRequire desktop-data instead of desktop-data-openSUSE to
  fix build on SLES</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1570968000">- Update to version 0.1.10:
  * package has been ported to Python 3 and GTK 3
  * 9 new laguages, and updates to existing i18n</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1576411200">- update arandr-fix_desktop_icon.patch: use "video-display" icon
  instead of no longer existent "package_utility_desktop" to fix
  build on factory.
- drop desktop-data and hicolor-icon-theme buildrequires, they are
  no longer needed because "video-display" is a whitelisted name
  in brp-desktop.data</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1591099200">- boo#1172370 arandr fails to start in TW and 15.1:
  Add BR on gobject-introspection and Requires on python3-gobject-Gdk</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 0.1.11:
  * Fix compatibility with Python 3.11 (by Rowan Hart)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430401">- Fix build: autosetup -p0 for this package</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1721131200">- remove obsolete suse_update_desktop_file macro</changelog>
</package>
<package pkgid="58347552f80cbae0be9601013b04a2c05c728cbbbdea1f9a264329e28f124babf12d6ee880524f3fcb9293290b83645f336c707d1eabc94658eb512e741efa00" name="aravis" arch="x86_64">
  <version epoch="0" ver="0.8.33" rel="bp160.1.13"/>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1632571200">- Update to version 0.8.18</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1639396800">- Split arv-viewer to separate package: it requires GTK and graphical stack
  while other arv tools can be installed on head-less systems.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652097600">- Update to 0.8.21
  * gigevision: performance improvement of standard socket method
  * usb3vision: prevent USB command mix up
  * usb3vision: fix PacketResend size field in extended ID mode
  * genicam: allow more Category child nodes
  * genicam: AccessMode fixes
  * genicam: fix pIsLocked when target is a Boolean node
  * doc: port to gi-docgen</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1658404800">- Update to 0.8.22
  * camera: new network command for IP settings
  * camera: don't fail if TriggerSelector is not available
  * camera: make region setting work even without Offset features
  * camera: allow frame rate setting during acquisition on more devices
  * gstplugin: allow low frame rate with external triggers
  * genicam: list for forced legacy mode
  * genicam: access mode check policy
  * genicam: fix inifinite loop during availability check
  * u3v: use libusb device-left event for control lost detection
  * genicam: fix information loss
  * fake_camera: add TriggerSoftware support
  * build: appdata fix
  * build: disable documentation by default
  * tests: fix ChunkFloat test on big endian platform
  * introspection: fix user_data_destroy_func annotations
  * misc: memory leak and warning fixes</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1669550400">- Update license to LGPL-2.1
  https://github.com/AravisProject/aravis/commit/c20298b222012a63b3a73193e3849ba8980b2c07</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1679918400">- Update to 0.8.26:
  * viewer: fix pixel format selection #765
- Changes for 0.8.25:
  * viewer: add component selection support
  * buffer: add component id getter
  * buffer: fix multipart informations
- Changes for 0.8.24:
  * gv: fix multipart data accessor
  * gv: improve error handling of network API</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1690200000">- Update to 0.8.27:
  * camera: add vendor specific quirks to frame rate
  * camera: multiple tap helpers
  * gv: start packet timeout after the first non leader packet
  * gv: auto packet size fix
  * gv: add more camera to the legacy endianness mechanism exception list
  * u3v: fix u3vcp_capability register size
  * chore: compilation warning fixes
  * ci: pipeline babysitting
  * doc: link fix</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1703592000">- Update to 0.8.30:
  * gv: add EVK Helios and Automation Technology C6 devices to the
    legacy mode list
  * gv: don't ignore POINTTOPOINT interfaces, allows for direct
    connection to devices through VPNs
- Changes for 0.8.29:
  * usb3vision: fix callbacks triggering in async mode
  * usb3vision: fix underrun counting
- Changes for 0.8.28:
  * usb3vision: make async libusb default
  * usb3vision: improve CPU use when no buffer is available for the
    stream thread
  * usb3vision: don't wait forever for USB transfer completion
  * usb3vision: enable stream after the receiving stream thread is
    started
  * viewer: avoid buffer exhaustion if GStreamer pipeline is late
  * build: fix clang 32 bits compilation</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1710331200">- Update to 0.8.31:
  * viewer: better handling of exposure and gain setting
  * genicam: genicam URL stored as DomDocument URL property
  * genicam: fix arv_device_get_feature_access_mode return value
  * camera: set/dup_register helper
  * camera: frame_rate setting improvements
  * usb3vision: handle GenDC payload
  * gigevision: set a lower boundary to minimum socket size in auto mode
  * build: fix a libxml2 API breakage</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1725710400">- Update to 0.8.33:
  * viewer: ignore exposure time feature representation
- Update to 0.8.32:
  * viewer: workaround for Blackfly Mono16 pixel endianness issue
  * gst: disconnect camera in stop method
  * gst: stream object accessor
  * gst: camera change signal
  * gst: stream change signal
  * gst: allow software trigger
  * gvsp: fix chunk detection
  * gv_device: crach fix on finalization
  * Fix device_write_memory rust binding
  * introspection: add generic feature value accessors
  * chore: fix libxml2 deprecation warnings
  * chore: appstream fixes</changelog>
</package>
<package pkgid="548803b514553c0c94c06e99ad7acf57959ac1d7a0a197215431cc4313ae0620ee55f4fb338049c2ffbbcc434e54bd8d2983db1bd87bad9a009f87dae6f03812" name="aravis-viewer" arch="x86_64">
  <version epoch="0" ver="0.8.33" rel="bp160.1.13"/>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1632571200">- Update to version 0.8.18</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1639396800">- Split arv-viewer to separate package: it requires GTK and graphical stack
  while other arv tools can be installed on head-less systems.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1652097600">- Update to 0.8.21
  * gigevision: performance improvement of standard socket method
  * usb3vision: prevent USB command mix up
  * usb3vision: fix PacketResend size field in extended ID mode
  * genicam: allow more Category child nodes
  * genicam: AccessMode fixes
  * genicam: fix pIsLocked when target is a Boolean node
  * doc: port to gi-docgen</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1658404800">- Update to 0.8.22
  * camera: new network command for IP settings
  * camera: don't fail if TriggerSelector is not available
  * camera: make region setting work even without Offset features
  * camera: allow frame rate setting during acquisition on more devices
  * gstplugin: allow low frame rate with external triggers
  * genicam: list for forced legacy mode
  * genicam: access mode check policy
  * genicam: fix inifinite loop during availability check
  * u3v: use libusb device-left event for control lost detection
  * genicam: fix information loss
  * fake_camera: add TriggerSoftware support
  * build: appdata fix
  * build: disable documentation by default
  * tests: fix ChunkFloat test on big endian platform
  * introspection: fix user_data_destroy_func annotations
  * misc: memory leak and warning fixes</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1669550400">- Update license to LGPL-2.1
  https://github.com/AravisProject/aravis/commit/c20298b222012a63b3a73193e3849ba8980b2c07</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1679918400">- Update to 0.8.26:
  * viewer: fix pixel format selection #765
- Changes for 0.8.25:
  * viewer: add component selection support
  * buffer: add component id getter
  * buffer: fix multipart informations
- Changes for 0.8.24:
  * gv: fix multipart data accessor
  * gv: improve error handling of network API</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1690200000">- Update to 0.8.27:
  * camera: add vendor specific quirks to frame rate
  * camera: multiple tap helpers
  * gv: start packet timeout after the first non leader packet
  * gv: auto packet size fix
  * gv: add more camera to the legacy endianness mechanism exception list
  * u3v: fix u3vcp_capability register size
  * chore: compilation warning fixes
  * ci: pipeline babysitting
  * doc: link fix</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1703592000">- Update to 0.8.30:
  * gv: add EVK Helios and Automation Technology C6 devices to the
    legacy mode list
  * gv: don't ignore POINTTOPOINT interfaces, allows for direct
    connection to devices through VPNs
- Changes for 0.8.29:
  * usb3vision: fix callbacks triggering in async mode
  * usb3vision: fix underrun counting
- Changes for 0.8.28:
  * usb3vision: make async libusb default
  * usb3vision: improve CPU use when no buffer is available for the
    stream thread
  * usb3vision: don't wait forever for USB transfer completion
  * usb3vision: enable stream after the receiving stream thread is
    started
  * viewer: avoid buffer exhaustion if GStreamer pipeline is late
  * build: fix clang 32 bits compilation</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1710331200">- Update to 0.8.31:
  * viewer: better handling of exposure and gain setting
  * genicam: genicam URL stored as DomDocument URL property
  * genicam: fix arv_device_get_feature_access_mode return value
  * camera: set/dup_register helper
  * camera: frame_rate setting improvements
  * usb3vision: handle GenDC payload
  * gigevision: set a lower boundary to minimum socket size in auto mode
  * build: fix a libxml2 API breakage</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1725710400">- Update to 0.8.33:
  * viewer: ignore exposure time feature representation
- Update to 0.8.32:
  * viewer: workaround for Blackfly Mono16 pixel endianness issue
  * gst: disconnect camera in stop method
  * gst: stream object accessor
  * gst: camera change signal
  * gst: stream change signal
  * gst: allow software trigger
  * gvsp: fix chunk detection
  * gv_device: crach fix on finalization
  * Fix device_write_memory rust binding
  * introspection: add generic feature value accessors
  * chore: fix libxml2 deprecation warnings
  * chore: appstream fixes</changelog>
</package>
<package pkgid="4b3c0e6e687ab51474b118e2bdbad88d53828eef8777d80d6596d183dc0b041d7713f59d5fc19551a5868c3e49107cb5e21c883d87895b1867b1e525773b13bf" name="arcanist" arch="noarch">
  <version epoch="0" ver="0.0~git.20220517T162014~85c953e" rel="bp160.1.9"/>
  <changelog author="i@guoyunhe.me" date="1578916800">- Update to version 0.0~git.20191118T203151~cc850163:
  * When "arc close-revision --finalize ..." skips closing a revision, print a message
  * When generating diffs in "arc diff", disable Git config option "diff.suppressBlankEmpty"
  * Make "arc land --merge" an explicit error when targeting a Perforce remote
  * In "arc land", when "remote/onto" does not exist locally, try to fetch it before giving up
  * Update "arc help land" to reference Perforce support
  * Support Perforce/Git repositories in "arc land"
  * Move Git-specific "arc land" parsing of "--onto" and "--remote" into GitLandEngine
  * Add a lint check for deprecated argument order to "implode()"
  * When running "arc land" from a detached HEAD, don't try to delete the source ref
  * Fix two "msort()" vs "msortv()" issues in "arc land"</changelog>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1587988800">- Update to version 0.0~git.20200426T084008~b81818b2:
  * Accommodate PHP 7.4 changes to certain "preg_match_all()" calls
  * Make "arc &lt;workflow&gt; --help" work again for workflows which haven't updated yet
  * Allow HTTPFuture callers to disable processing of "Content-Encoding" response headers
  * If the Conduit server asserts it has the "gzip" capability, compress requests
  * If the Conduit client supports gzip, make calls with "Accept-Encoding: gzip"
  * In "phutil_loggable_string()", encode every byte above 0x7F
  * Only inject legacy Arcanist workflows into "help" if run from the context of an Arcanist runtime
  * Update "arc paste" for Toolsets
  * Crudely bridge legacy workflows into "arc help"
  * Remove "backout", "close", "flag", "start", "stop", "time", and "revert" workflows
  * Upgrade (most) Differential API callsites to "differential.revision.search"
  * Restore "%d" support to "tsprintf()"
  * Upgrade "arc download" to Toolsets
  * Update "arc call-conduit" for Toolsets
  * Update "arc amend" for Toolsets
  * Add a "SymbolEngine" to support top-level ref resolution by symbol
  * Add some support code for printing refs to stdout
  * Add ref lookup for username symbols
  * Add a "RevisionSymbolRef", revision commit messages, and make "--explore" recursive
  * Add a "CommitSymbolRef" for resolving symbolic commits into stable commit hashes
  * Add a mode to "ExecFuture" that makes "resolvex()" semantics the default
  * Allow "loadHardpoints()" to accept a single ref and/or a single hardpoint
  * Remove obsolete definitions of "defineHardpoints()" in older Ref objects
  * Update "feature", "branch", and "bookmark" flows to report properly in "arc help"
  * Port "arc prompts" from wilds and fix a path issue in shell completion
  * Restore "arc alias" shell aliases
  * Remove "RefQuery" and all "HardpointLoader" code
  * Reroute all RefQuery callers to HardpointEngine
  * Bring "pro" browse queries from modern hardpoint code
  * Bring a "pro" WorkingCopyState ref to "master"
  * Introduce "arc inspect" and some of the new ref/hardpoint classes
  * Rename "getWorkingCopy()" to "getWorkingCopyIdentity()" in Arcanist
  * Trivially update "arc branch/feature" and "arc browse" for Toolsets
  * Revert "Compress requests from the Conduit client to Phabricator"
  * Compress requests from the Conduit client to Phabricator
  * Remove onboard future bulk-resolution from ConduitEngine
  * Add new "Hardpoint" classes to support request parallelization
  * Update the "WorkingCopy" API and create a fallback "Filesystem" working copy
  * Fix improper XHPAST parsing of namespace grammar like "use x as private;"
  * Fix XHPAST parsing of variadic calls
  * Update XHPAST "expect" test blocks to the new stable, human-readable format
  * Make XHPAST unit test "expect" blocks stable and human-readable
  * Remove duplication of XHPAST version in PHP and C code
  * Revert xhpast changes that impacted builds under Bison 2.3
  * Allow "phage" to print execution status on SIGINT
  * Move Phage to FuturePool
  * Introduce "FuturePool" to make it easier to manage an ongoing pool of futures
  * Update some ancient "set X=Y" environment code for new Windows execution without a shell
  * Make Windows escaping preserve "%" symbols in arguments
  * Fix error behavior of "arc version" when it encounters a library which is not a working copy
  * Fix three Windows subprocess issues
  * Fix two issues with Future key selection inside FutureIterator
  * Integrate "ServiceProfiler" into the base "Future"
  * Make "FutureIterator" queue management more formal
  * Make "exception" on Future a private property
  * Make the "result" property on Future private
  * Resolve all futures inside FutureIterator
  * Remove the "timeout" parameter from "Future-&gt;resolve()"
  * Run ls-files from the root of the directory
  * Treat all PHP language-level errors as exceptions by default
  * Switch file uploader in "arc diff" to use ConduitEngine
  * Use a named remote and branches for staging to help git-lfs
  * Remove the "preg_quote()" lint rule and update the "__CLASS__" lint rule
  * Fix an issue where "arc" may fail on startup when trying to read older "default" config
  * When "ArcanistRuntime" exits with a nonzero exit code, emit that exit code
  * Update "arc upload" for Toolsets
  * Improve error handling in ArcanistRuntime when failing to load libraries
  * Update Phage for toolsets and restore library loading behaviors
  * Fix two "implode()" order issues arising from wilds/experimental collapse
  * Port "arc upgrade" to Toolsets
  * Remove obscure features no longer supported by Toolsets from "classic" Arcanist
  * Restore old expanded include path rules for workflows which fall through
  * Require "--" as an argument terminator when running noninteractively
  * Port "arc weld" and "arc anoid" to Toolsets workflows, plus minor fixes
  * Port "arc shell-complete" to Toolsets
  * Update "arc alias" to modern workflows
  * Port "arc version" to Toolsets
  * Port "arc liberate" to Toolsets
  * Port "arc help" to Toolsets
  * Collapse Arcanist toolsets from "wilds" into "master", as an overlay layer
  * Merge utility/support changes from "wilds" to "master"
  * Don't depend on "XMLWriter" to load the lint renderer class tree
  * Merge the remainder of the "experimental" branch
  * Merge Arcanist lint changes from "experimental" branch
  * Merge "--draft" flag and related changes from "experimental" to "master"
  * Make "arcanist/" unit tests pass
  * Merge "phage" from "experimental"
  * Fully merge "libphutil/" into "arcanist/"
  * Move HTML-only intraline diff code to Phabricator
  * Omit "--" in older fallback commands for Git remote URIs
  * In Git, fall back across versions more cleanly when trying to get the URI for a remote</changelog>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1593777600">- Update to version 0.0~git.20200703T100739~8daff5ee:
  * Clean up some service profiler behavior in Conduit futures
  * Improve login/auth messages from Arcanist toolset workflows
  * Drop intended support for "--anonymous" from Arcanist Toolsets
  * When tab-completing "arc" commands, suggest paths if the argument is empty and a path wildcard argument exists
  * Implement Conduit login prompt behavior as a pure FutureProxy, not a Future-like object
  * Improve resolution behaviors of FutureProxy
  * Remove an unused method in "ArcanistUploadWorkflow"
  * Give Mercurial more plausible marker behavior
  * Support date-range commit graph queries, and multiple disjoint commits in Git
  * In "arc branches", group linear sequences of published revisions together
  * When a commit graph set has many commits, summarize them
  * Improve grid layout in "arc branches" at various terminal widths
  * Remove implicit sorting from "MarkerRefQuery"
  * Render "arc markers" workflows as a tree, not a list
  * Identify published commits in working copies by using remote configuration
  * Load and map repository objects for remote URIs
  * Provide "arc look", a user-facing inspection command
  * Support generating remote refs in Git
  * Support inspection of remote refs with "arc inspect remote(...)"
  * Copy repository URI normalization code from Phabricator to Arcanist
  * Introduce "phutil_partition()" and natural case sorting for "msortv(...)"
  * Introduce "GridView", an updated version of "ConsoleTableView"
  * Correct a leftover reference to "--keep-branch"
  * Add more "RepositoryRef" legacy status mappings
  * In "arc land" under Git, confirm branch creation
  * Collect scattered implementations of "getDisplayHash()" into RepositoryAPI
  * Update "arc land" display of build failures, and rename "DisplayRef" to "RefView"
  * On Windows, don't try to set "stdin" nonblocking, as it does not work
  * When a linter raises a message at a nonexistent line, don't fatal during rendering
  * Improve "--hold", save/restore state, bookmark creation, and some warnings for "arc land" in Mercurial
  * Correct some minor "arc land" workflow issues in Mercurial
  * Use a "branchmap" call to identify remote branches in "arc-hg"
  * In "arc land" in Mercurial, inch closer to making complex branch/bookmark workflows function
  * In "arc land", fix some coarse issues with build warnings
  * Realign "arc land" closed/published warning around more modern language
  * In "arc land" in Mercurial, show a tidier "ls-remote" command
  * Disambiguate various types of Mercurial remote markers with "hg arc-ls-remote"
  * Verify remotes ("paths") in Mercurial during "arc land"
  * Refine "arc land" behavior when pushing "onto" a new branch
  * Support "arc land --pick" to pick specific changes out of a sequence
  * Improve "arc land" behavior in the presence of merge conflicts and change sequences
  * Remove "arc feature", "arc branch", "arc bookmark", and significant chunks of obsolete marker code
  * Implement "arc work", to replace "arc feature"
  * Use MarkerRefs to resolve landing symbols in Mercurial
  * Provide a more powerful query mechanism for "markers" (branches/bookmarks)
  * Allow "arc" to accept any prefix of a command as that command
  * Remove old Mercurial code testing for rebase and phase support
  * Add a check for ambiguous merge strategies after the "history.immutable" behavioral change
  * Allow users to save prompt responses in "arc" workflows
  * Format "arc land" passthru commands more nicely, and execute them from CWD
  * Make Mercurial use "hg shelve" and "hg unshelve" in dirty working copies in "arc land"
  * Improve final messages under "arc land --hold"
  * Show some "arc" help pages through a configurable pager, like "less"
  * Update "arc help land"
  * Improve the logic for identifying ambiguous commits and applying "--revision" to them
  * When landing changes in an empty repository, merge cleanly in Git
  * Modernize output when pruning branches in Git during "arc land"
  * Provide more information about merge progress in "arc land" under Git
  * Sometimes discard already-closed revisions in "arc land"
  * Add a synopsis and example for "arc help land"
  * In "arc land", rebase branches in natural order
  * Substantially modernize the "arc land" workflow
  * In "arc branch" output, sort branches updated in the same second by name
  * Remove "--ignore-unsound-tests" from "arc diff"
  * When "arc" receives SIGWINCH or other signals during display of a prompt, recover
  * Introduce "RepositoryLocalState", a modern version of "requireCleanWorkingCopy()"
  * Provide modern config options for "arc land" configuration
  * Add modern refs and hardpoints for buildables, builds, and build plans
  * Add "Author" and "Parent Revision" hardpoints to RevisionRefs
  * Alias newer "--library" to "--load-phutil-library" in legacy workflows
  * Remove the "--less-context" flag from "arc diff"
  * Remove "--encoding" flag from "arc diff"
  * Remove "haveUncommittedChanges" property from "arc diff"
  * Remove "--lintall" and "--only-new" flags to "arc diff"
  * Remove lint and unit excuses and "--advice" and "--excuse" flags from "arc diff"
  * Remove "--use-commit-message/-C" from "arc diff"
  * Support short aliases and repeatable arguments in Arcanist Workflow arguments
  * Add a "%?" ("hint") conversion to "tsprintf()"
  * Support appending arbitrary lines to DisplayRef output
  * Impose a HardpointEngine future parallelism limit
  * Remove special casing of "arc --version"
  * Allow PhutilArrayCheck to accept a list of objects as a context
  * Add a support class to simplify typechecking list-of-objects return values
  * Mark the wildcard argument to "arc liberate" as a path argument for shell completion
  * Make lint tests handle paths better and distinguish between "0" and "null" more carefully
  * Fix an issue when rendering a lint message which removes whitespace at the end of a file
  * In the "cpplint" binding, raise messages on "line 0" without a line
  * Allow construction of a ConduitEngine with a bare ConduitClient
  * update SSL error messge re:libphutil
  * Add "HTTPSFuture-&gt;addCurlOption()" for raw access to "curl_setopt()"
  * Fix an initialization issue in VectorTree
  * Add "--browse" and "--input" to "arc paste", and remove "--json" (which had no effect)
  * Add "--browse" to "arc upload" and update behavior, particularly "--json"
  * When recent PHP raises a "broken pipe" error in ExecFuture, treat it as a blocked stdin
  * When a proxy future wraps a future which throws an exception, resolve with an exception
  * Work around "mb_check_encoding(&lt;stringlike-object&gt;)" warning in particular versions of PHP
  * Restore the ":(attr:filter=lfs)" test for LFS
  * Detect LFS by looking for tracks in ".gitattributes" instead of using "ls-tree"
  * Replace "PhutilFileTree" with a more abstract "VectorTree"</changelog>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1599220800">- Update to version 0.0~git.20200904T100240~7f87aeaa:
  * Give Futures clearer start/end and exception semantics
  * Preserve bookmarks across "hg rebase --keep --collapse", and destroy them before "hg strip/prune"
  * When saving and restoring local state in Mercurial, also save and restore bookmarks
  * Clean up push failure messaging in "arc land" slightly
  * When "arc land" fails a Mercurial push, actually raise it as an exception
  * Fix additional Mercurial/Python compatibility issues in "arc land"
  * Allow "hg arc-ls-markers" to run under Python 2 or Python 3
  * Fix a MarkerRef call to get the active bookmark in Mercurial
  * Render the state tree in "arc branches" slightly more cleanly</changelog>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1603713600">- Update to version 0.0~git.20201026T090106~f713656a:
  * Fix a typo of "previously" in FutureIterator
  * Fix an issue where "phutil_utf8v()" could fatal when passed an integer
  * Fix rubocop lint tests
  * Fix "PhutilOpaqueEnvelopeTestCase" under PHP 7.4 with "zend.exception_ignore_args"
  * fail `arc diff` if second lfs push errors
  * In "phutil_passthru()", "resolve()" the future rather than calling "execute()" directly
  * In ConduitCallFuture, only call Conduit exception messages on Conduit exceptions
  * Fix a slow memory leak in long-lived FutureIterator objects, as used by FuturePool
  * When raising a Conduit client exception, show the called method in the error message
  * Fix additional "xsprintf()"-family static parameter errors
  * Allow AAST to extract string literal values from HEREDOCs
  * Fix a missing "pht()" parameter in HTTPSFuture
  * Fix a false negative in lint for "xsprintf()"-family functions</changelog>
  <changelog author="pgajdos@suse.com" date="1609848000">- remove php7-devel from build dependencies</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1636891200">- Replace bundled certificates with symlink to the system
  certificate bundle.
- Some typo fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1669809600">- Update to version 0.0~git.20220517T162014~85c953e:
  * Fix a PHP 8.1 repository marker issue in Mercurial
  * Straggling fixes for PhutilURI under PHP 8.1
  * Add "pht_list()", a translation wrapper for lists of items
  * Return STDIN, STDOUT, and STDERR file descriptors from parent process
  * Add an ArgumentParser helper for integers
  * Fix more PHP 8.1 "strlen(null)" callsites in PhutilURI
  * Mostly remove "STDERR" and "STDOUT" constants from Arcanist
  * Catch more product names in "pht()", and replace newly matched Arcanist product names
  * Remove all product name literals in "pht()" in Arcanist
  * Add a "product name literal in pht()" linter
  * Introduce PHP8.1 replacement functions for string tests which may take multiple types
  * Fix a PHP 8.1 issue with "phutil_console_strlen()"
  * Fix a PHP 8.1 issue in lint rendering
  * Update arc-hg to support mercurial 6.1
  * Provide additional Arcanist PHP 8.1 fixes
  * Add a lint rule forbidding use of "each()"
  * Correct some Arcanist behaviors under PHP8.1
  * Update the extracted cURL SSL CA bundle
  * Provide an API for parsing swap information from "/proc/meminfo"
  * Allow "PhutilAWSException" to identify "EBS: Not Found" errors
  * Make corrections to the "arc amend" workflow in Mercurial repositories to be compatible with PHP 5+
  * Update ArcanistMercurialAPI to support getting the current commit ref
  * Update "arc liberate" to fix error with PHP 8 and add "--verbose" argument to adjust it
  * Provide "MethodCallFuture" to fix exception semantics in mixed-future contexts
  * Name extension as "arc-hg", not "arg-hg"
  * Update other usages of "hg rebase" to use the new extension-enabling function
  * Remove "phutil_deprecated()"
  * Deprecate "PhutilExecPassthru-&gt;execute()" in favor of "resolve()"
  * Refactor how Mercurial runs commands that require extensions
  * Fix an ExecFuture typo, "preprebuilt"
  * Display informative message when arc launches an editor
  * Update "arc diff" to amend non-head commits with Mercurial
  * An assortment of fixes and updates to using arc-land with mercurial
  * Update templates used with mercurial to remove '--debug'
  * Force all mercurial commands to use UTF-8 encoding
  * Correct an issue when winning "arc anoid" with certain terminal dimensions
  * Avoid leaving stdin in nonblocking mode after a modern prompt
  * On Windows, implement "Filesystem::copyFile()" with "copy()"
  * Update Paste help to include missing "--"
  * Correct a mistaken Phurl link in the "missing symbol" exception
  * Improve "PhutilJSON" handling of PHP-object JSON values
  * In Arcanist, when trying to write to a file configuration source, create missing directories
  * In "arc land", if rebasing a range fails, attempt to "reduce" it
  * Add a character marker to the "IMPLICIT COMMITS" warning in "arc land"
  * Temporarily disable all logfile writability checks
  * Add a simple primitive for managing PHP runtime error logs
  * Apply "pcre.*_limit" config options at startup in CLI environments
  * Provide some "preg_*" wrappers which raise exceptions on failure
  * Update golint install instructions
  * In "array_mergev()", guarantee the "call_user_func_array()" parameter list is a natrual list
  * Add a lint check for catching "Exception" without catching "Throwable"
  * Annotate the unusual use of "$callback()" in "xsprintf()"
  * Detect and correct "final private" methods in lint
  * Allow lint to correct the spelling of builtin symbols
  * When lint identifies an unknown symbol, attempt to correct it if it is miscapitalized
  * Provide "gitsprintf(...)" and disambiguate Git ref selectors
  * Fix pyflakes tests for recent pyflakes versions
  * Fix ArcanistJSHintLinterTestCase::testLinter for recent JSHint
  * Fix PhutilOAuth1FutureTestCase::testOAuth1SigningWithJIRAExamples for PHP 8
  * Fix PhutilUTF8TestCase::testUTF8Convert for PHP 8
  * Fix ArcanistFormattedStringXHPASTLinterRule on older PHP after D21500
  * Fix ArcanistFormattedStringXHPASTLinterRule for PHP 8
  * Fix PhutilTypeSpec's regex handling for PHP 8
  * Fix error handler on PHP 8
  * Suppress PHP 8 deprecation warning in __arcanist_init_script__
  * Remove final from private functions for PHP 8 compatibility
- add arcanist-default-error_reporting.patch, do not no E_STRICT and E_DEPRECATED</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1670932800">- Correctly replace shebangs from php to php8 after the move away
  from php7.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="2aa32b010c090486b3c5cc8bf7b65277616af0b64a6b99c81a809ea4c971e08da1f11e2b86b1678deb59a456599af1547882bc7667e553fa82f8ea49bdca22d9" name="arch-install-scripts" arch="noarch">
  <version epoch="0" ver="28" rel="bp160.1.9"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 24" date="1641297600">- Initial packaging of version 24 for openSUSE.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 25" date="1656936000">- New upstream version 25
  * arch-chroot: add unshare mode
  * arch-chroot: resolv.conf recursive host + target symlinks
  * arch-chroot: Make run a tmpfs mount</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt; - 26" date="1659268800">- New upstream version 26
  * arch-chroot: Use separate pid namespace for worker processes</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1664452800">- New upstream release 27
  * update pseudofs and fsck lists</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1669032000">- New upstream release 28
  * genfstab: disable fsck for btrfs (it does not need it and the binary is a no-op)
  * genfstab: remove subvolid= from btrfs options if subvol= is set</changelog>
</package>
<package pkgid="cc51526804a619c797f43ceefd8b61945237a7924251dbb06de8060c531c6e11de252adab125e5f724f704db9639158a3fd420ec1bf37cc277032cd7bab91e0a" name="archivemount-ng" arch="x86_64">
  <version epoch="0" ver="1a" rel="bp160.1.5"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1746014400">- archivemount-ng is a fork and continuation of archivemount, the
  original author passed away.
- This version contains bug fixes and fuse 3 support (boo#1242079)</changelog>
</package>
<package pkgid="51a7e6c0018f21cdab3226d56849730e675c518743ccc9b8169e7f995d0c0b1634f9b45aa5b5554481f59c0eb3193d1be08dd0efe900786f3d262f3da841cc06" name="ardour" arch="x86_64">
  <version epoch="0" ver="8.12.0" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708516800">- Update to 8.4.0. Check https://ardour.org/whatsnew.html for the
  full list of changes
  Improvements and Bug Fixes:
  * Mixer interaction fixes (interaction consistent use of
    button press and release).
  * Lots of miscellaneous color and drawing tweaks.
  * AAF import now (mostly) functional. This is still somewhat
    experimental, but we would welcome feedback..
  * Add metadata to session property editor so that search
    "works" there.
  * Dummy Backend: allow testing with some prime buffersizes.
  * Region groups: do not group multiple takes on a single track.
  * Add a tooltip to describe ops on the pianoroll header,
    incl note select.
  * Don't show plugin preset UI for plugins without controls.
  * New "adwaita" color theme (based on the GNOME Adwaita
    desktop theme).
  * Don't show automation of hidden plugins.
  * Set default MIDI CC values to be more in line with MIDI specs.
  * MIDI notes that were already on/down when recording starts
    are now captured.
  Control Surfaces and Devices:
  * Allow control surfaces to keep editing plugin parameters
    when an unrelated plugin is removed.
  * Adjusted Akai MIDIMix mapping to make solo function as
    described in original user manual provided by manufacturer.
  * Add Lexicon MPX100 midnam file.
  * Add Yamaha SY85 midnam file.
  * Add Donner DMK25 spacline MIDI interface map file.
  * Add a minimalistic Arturia MiniLab 3 map.
  * FaderPort 8: only use visible channelstrip plugins.
  Bug Fixes:
  * Fix sensitivity of macOS global menu at application start.
  * Fix snap to triplet (still no builtin triplet drawing, sadly).
  * MIDI Legatize operation should now function correctly..
  * Escape cue cd-text like toc.
  * Fix crash when using Ripple with a RegionMoveDrag.
  * Allow to use ardour --gdb on newer Linux distros (fixes an
    issue with the way these systems build gdb).
  * Update bundled gdb for windows debug builds.
  * Fix gtk-critical message when monitor section is not present.
  * Fix gdk livelock on Windows when compiled with recent mingw/gcc.
  * Explicitly catch some errors when handling illegal file name
    characters.
  * Do not attempt to save automation data for non-automatable
    parameters.
  * Fix "Ignored automation data for non-automatable parameter".
  * Fix crash (or stuck solo) when removing tracks.
  * Fix crash when session-load fails while creating Routes.
  * Fix erasing events in MIDIBuffer (removing the last event
    marked the whole buffer empty).
  * Fix crash when replicating an LV2 plugin with a different I/O
    configuration.
  * Fix ffmpeg-5+ encoding drop-frame framerates.
  * Fix ACE Compressor inplace processing (when using stereo
    compressor on mono track)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1712836800">- Update to 8.5.0. Check https://ardour.org/whatsnew.html for the
  full list of changes
  Improvements:
  * Improvements to AAF import support.
  * Make it easier to use Ardour --gdb on linux by handling SIG32
    automatically.
  * Do not include hidden plugin in plugin-list.
  * Use session-file version as part of backup file names in
    backup/ folder.
  * General MIDI MIDNAM file now includes drum names.
  * Display grid lines for triplets/quintuplets/septuplets.
  * When nudging a single control point, locate to the new
    position to make the time/position clear.
  * Add support for pitch bend to Reasonable Synth.
  Bug Fixes:
  * Fix Snapping quintuplets and septuplets 2x factor grid: fix
    quintuplets 2x factor (septuplets still don't draw properly).
  * Add missing horizontal separator after last track header.
  * Work around itstools bug #9648.
  * Fix undefined symbol when built with VST3 disabled.
  * Disable broken septuplet option.
  * Adding new route in front now works as intended (#9651).
  * Fix jump to next/prev bar.
  * Discard untitled sessions even when not quitting Ardour.
  * Refilling buffers after edits now avoids gaps in audio data.
  * Set correct Timecode widget name.
  * Half-baked automation-point nudge.
  * Fix loading session by relative path.
  * Accumulate IO port-change signals return values.
  * Prevent crashes when trying to add/remove IOPlug ports.
  * Fix a -Wincompatible-pointer-types.
  * Ellipsize inactive track-header name-label (#9674).
  * Prevent double-click on the pianoroll to toggle track height.
  * Clarify that there are no archive file format options.
  * Fix crashing file dialogs - fdopen(3) requires
    _POSIX_C_SOURCE.
  * Set default time domain to Audiotime to sidestep various
    MusicTime issues.
  * Fix solo controller for Monitor bus.
  * Fix potential memory corruption in AVX512f DSP.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713182400">- Update to 8.6.0.
  * Fix crash when using jack2
  * Fix a drawing bug</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1726315200">- Update to 8.7.0. Check https://ardour.org/whatsnew.html for the
  full list of changes
  New features:
  * Track dragging
  * Ruler changes
  * Midi scene markers
  * Parallel disk I/O
- Add patch:
  * ardour-boost-1.85.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728043200">- Update to 8.8.0. Check https://ardour.org/whatsnew.html for the
  full list of changes
  * Add option to name new MIDI tracks from SMF with just the
    SMF track name.
  * Fix for LV2 plugins whose GUI depend on a "changed" signal
    (e.g. ZynSubAddFX).
  * Fix MIDI Clock output times by using the correct call to get
    tempo at a position.
  * Overdubbing in non-layered mode no longer assignes regions to
    the wrong groups.
  * Add build support for latest versions of macOS.
  * Generic MIDI: do not send touch events for all mapped
    controllers when one is touched.
  * Fix fan-out of instruments with illegal path-chars in their
    name.
  * Require user's own color theme files to be versioned.
  * Fix underruns when looping/locating and changing region
    content.
  * Do not allow changing the loop range while recording.
  * Avoid pixel-level shifts in waveform when splitting or
    trimming regions.
  * Fix playhead moving beyond loop range.
  * Fix count-in/preroll recording offsets.
  * Use dedicated thread to start export timespans.
  * Fix and simplify Playlist::fade_range for multiple ranges.
  * Fix interaction with snapshot list.
  * Fix sample-rate display rounding for 22.05kHz.
  * Fix playback of sessions with low sample-rate.
  * VST3: Fix possible deadlock when using PSL extension for
    sends.
  * VST3: work around plugins that do not heed
    ContextInfo::kSendCount.
  * Fix XML syntax for AKAI MPK mini mk3 MIDI binding map.
- Drop patch, merged upstream:
  * ardour-boost-1.85.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728734400">- Update to 8.9.0. Hotfix release. Check
  https://ardour.org/whatsnew.html for the full list of changes
  * Fix crash caused by a change in how waveforms were drawn
  * Fix bug that caused MIDI notes immediately after the start
    of playback to be ignored.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1729857600">- Update to 8.10. Check https://ardour.org/whatsnew.html for the
  full list of changes
  * Fix performance issues caused by scheduling of disk I/O
    threads
  * Importing SMF (MIDI) via drag-n-drop now uses the file name
    once again
  * Small updates to the non-default color themes
  * New MIDI binding map for the M-Audio Axiom 49 MkII
  * New Lua script to duplicate regions on the grid</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738584000">- Update to 8.11.0. Check https://ardour.org/whatsnew.html for the
  full list of changes
  * Fix for a critical workflow-blocking bug.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741780800">- Update to 8.12. Check https://ardour.org/whatsnew.html for the
  full list of changes
  * new approach to fixing the problem with region lengths
    after certain operations could cause sessions to be
    unloadable
  * Fix translations on macOS</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1745150400">- Also recommend libcanberra-gtk2-module as Ardour is looking for
  it</changelog>
</package>
<package pkgid="b89ff50a4bc5053d88440bdea91f4e3e86bfd47cd117a3b3566d789ca29f89c673c4a9f5cae4d602e6e760dca70012df6c188f644b04be69913432277c1a1114" name="argon2" arch="x86_64">
  <version epoch="0" ver="20190702" rel="160000.2.2"/>
  <changelog author="hpj@urpla.net" date="1485604800">- make sure to call cc with -pthread option (implies -lpthread)
- run test suite</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- moved argon2-specs.pdf to doc subpackage
- added packaging of man page</changelog>
  <changelog author="meissner@suse.com" date="1492516800">- ship libargon2.pc (bsc#1034441)</changelog>
  <changelog author="lnussel@suse.de" date="1515499200">- Update to version 0.0+git20171227.670229c:
  * Added ABI version number
  * AVX2/AVX-512F optimizations of BLAMKA
  * Set Argon2 version number from the command line
  * New bindings
  * Minor bug and warning fixes (no security issue)
- use _service file</changelog>
  <changelog author="jengelh@inai.de" date="1515499201">- Update description.</changelog>
  <changelog author="lnussel@suse.de" date="1517313600">- add baselibs.conf as cryptsetup also has 32bit variants</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1589284800">- Update to version 0.0+git20190520.62358ba (boo#1170512):
  * Fix the Makefile to install libargon2.pc.
  * Wait for already running threads if a thread creation failed.
  * Added Argon2 Erlang binding.
  * Additional JVM bindings (Jargon2).</changelog>
  <changelog author="rpm@fthiessen.de" date="1650715200">- Fix version of package: 20190702 is the upstream version number
  of the package
- Replaced optflags.patch with adjust-makefile.patch, the
  patch will now also allow to set the file permissions of installed
  libraries. This fixes the rpmlint error: shared-library-not-executable</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use a source url</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="a3f995f28c7acf1925caad894156a5011ed2bf988d0cbf0af45c2e5ef3c78f80106736310ae49d41eeee67b4384817d62c0e6cb7a1f0e6e29a5fc06b9d694d27" name="argon2-devel" arch="x86_64">
  <version epoch="0" ver="20190702" rel="160000.2.2"/>
  <changelog author="hpj@urpla.net" date="1485604800">- make sure to call cc with -pthread option (implies -lpthread)
- run test suite</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- moved argon2-specs.pdf to doc subpackage
- added packaging of man page</changelog>
  <changelog author="meissner@suse.com" date="1492516800">- ship libargon2.pc (bsc#1034441)</changelog>
  <changelog author="lnussel@suse.de" date="1515499200">- Update to version 0.0+git20171227.670229c:
  * Added ABI version number
  * AVX2/AVX-512F optimizations of BLAMKA
  * Set Argon2 version number from the command line
  * New bindings
  * Minor bug and warning fixes (no security issue)
- use _service file</changelog>
  <changelog author="jengelh@inai.de" date="1515499201">- Update description.</changelog>
  <changelog author="lnussel@suse.de" date="1517313600">- add baselibs.conf as cryptsetup also has 32bit variants</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1589284800">- Update to version 0.0+git20190520.62358ba (boo#1170512):
  * Fix the Makefile to install libargon2.pc.
  * Wait for already running threads if a thread creation failed.
  * Added Argon2 Erlang binding.
  * Additional JVM bindings (Jargon2).</changelog>
  <changelog author="rpm@fthiessen.de" date="1650715200">- Fix version of package: 20190702 is the upstream version number
  of the package
- Replaced optflags.patch with adjust-makefile.patch, the
  patch will now also allow to set the file permissions of installed
  libraries. This fixes the rpmlint error: shared-library-not-executable</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use a source url</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="f75fab34ccd76594594459747e3f0e626e742dd96291b73d8a4720c6991bddfed2e313e2943bb0c6cf3bb53b7ca8b8166006f09443aca1f58b93bb22a0ccc0e1" name="argon2-doc" arch="noarch">
  <version epoch="0" ver="20190702" rel="160000.2.2"/>
  <changelog author="hpj@urpla.net" date="1485604800">- make sure to call cc with -pthread option (implies -lpthread)
- run test suite</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- moved argon2-specs.pdf to doc subpackage
- added packaging of man page</changelog>
  <changelog author="meissner@suse.com" date="1492516800">- ship libargon2.pc (bsc#1034441)</changelog>
  <changelog author="lnussel@suse.de" date="1515499200">- Update to version 0.0+git20171227.670229c:
  * Added ABI version number
  * AVX2/AVX-512F optimizations of BLAMKA
  * Set Argon2 version number from the command line
  * New bindings
  * Minor bug and warning fixes (no security issue)
- use _service file</changelog>
  <changelog author="jengelh@inai.de" date="1515499201">- Update description.</changelog>
  <changelog author="lnussel@suse.de" date="1517313600">- add baselibs.conf as cryptsetup also has 32bit variants</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1589284800">- Update to version 0.0+git20190520.62358ba (boo#1170512):
  * Fix the Makefile to install libargon2.pc.
  * Wait for already running threads if a thread creation failed.
  * Added Argon2 Erlang binding.
  * Additional JVM bindings (Jargon2).</changelog>
  <changelog author="rpm@fthiessen.de" date="1650715200">- Fix version of package: 20190702 is the upstream version number
  of the package
- Replaced optflags.patch with adjust-makefile.patch, the
  patch will now also allow to set the file permissions of installed
  libraries. This fixes the rpmlint error: shared-library-not-executable</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use a source url</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="e57293f6f4c7a0b014d58478d72cbe0864e2f7f6e9ee9bce48cba4fa22f04f132e6d28b1c8a3c15a5ee3e612ed565d847f6bf73f5a9ba6870ea33a12fb71e073" name="argparse-devel" arch="x86_64">
  <version epoch="0" ver="3.2" rel="bp160.1.2"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1740225600">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1740312000">- Adapt conditional for gcc version to allow default version
  (14.2) on Leap 16+.</changelog>
</package>
<package pkgid="23a22f02a3a85efdc3f6fcfbde622363f37cff7155c50acd553226bb5a42ccd788e028ea47400c6eb824da024fc2663597ac18e62e08b4ad142674bc6ef836f5" name="args4j" arch="noarch">
  <version epoch="0" ver="2.33" rel="bp160.1.12"/>
  <changelog author="bmaryniuk@novell.com" date="1310644800">- Packaged for the SUSE Linux.</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit. Use MIT license as rh does.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9: specify java source and target 1.6 and
  correct encoding of source files
- Clean spec file and fix rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539950400">- Download from maven central the corresponding pom file and
  install it.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568980800">- Remove reference to the parent pom since we are not building
  using maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Update to version 2.33
  * generate and customize the ant build files
- Add option to build with tests on (disabled by default)
- Package the tools in a subpackage</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="8efac7432f01c5afd8b811a2063142f51885b1c9d56a7910a7f98c7240b8289e4059631402edd38fbdd24de9043c33af02ac5e5c766975c314d9f21fac642ddb" name="args4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.33" rel="bp160.1.12"/>
  <changelog author="bmaryniuk@novell.com" date="1310644800">- Packaged for the SUSE Linux.</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit. Use MIT license as rh does.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9: specify java source and target 1.6 and
  correct encoding of source files
- Clean spec file and fix rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539950400">- Download from maven central the corresponding pom file and
  install it.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568980800">- Remove reference to the parent pom since we are not building
  using maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Update to version 2.33
  * generate and customize the ant build files
- Add option to build with tests on (disabled by default)
- Package the tools in a subpackage</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="3b4bed8f7341b9bd742321fbfb3f5c4dffcbc8da3581a7f148c408d00a1f76edb6519ebbd5bff79059c0dca2a3f1133051afd20d5397b6f872466ae960c9ea62" name="args4j-tools" arch="noarch">
  <version epoch="0" ver="2.33" rel="bp160.1.12"/>
  <changelog author="bmaryniuk@novell.com" date="1310644800">- Packaged for the SUSE Linux.</changelog>
  <changelog author="tchvatal@suse.com" date="1405684800">- Cleanup a bit. Use MIT license as rh does.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9: specify java source and target 1.6 and
  correct encoding of source files
- Clean spec file and fix rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539950400">- Download from maven central the corresponding pom file and
  install it.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1568980800">- Remove reference to the parent pom since we are not building
  using maven</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Update to version 2.33
  * generate and customize the ant build files
- Add option to build with tests on (disabled by default)
- Package the tools in a subpackage</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="1e0e0f33e0f79cbe5eaa5e6b9149c4febcce9d4a9a1236a7f9a509352de921d20091b723d40e4c210408cc864e632eeb0b71266aae42c4171d7defb211adc9f5" name="argus" arch="x86_64">
  <version epoch="0" ver="3.0.8.3" rel="bp160.1.13"/>
  <changelog author="sfalken@opensuse.org" date="1411041600">- Changed SuSE to SUSE in README.SUSE (sr#250033)</changelog>
  <changelog author="p.drouand@gmail.com" date="1440676800">- Update to version 3.0.8.1
  * Upstream doesn't publish a short changelog; please read the
    ChangeLog file
- Use download Url as source
- Require systemd-rpm-macros instead of systemd: increase dependencies</changelog>
  <changelog author="p.drouand@gmail.com" date="1475064000">- Update to version 3.0.8.2
  * Upstream doesn't publish a short changelog; please read the
    ChangeLog file</changelog>
  <changelog author="dimstar@opensuse.org" date="1509019200">- BuildRequire libnsl-devel: since confiugure implicitly adds
  - lnsl, it is our duty to make sure deps are present.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553169600">- Reduce scriptlets' hard dependency on systemd.
- Replace some UUOC by find -exec.
- Make %install POSIX sh compatible.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1591876800">- Add -fcommon in order to fix building with GCC10</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- Update to version 3.0.8.3
  * Fix ekinzie-ccc-analyzer issues</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628596800">- Added hardening to systemd service(s). Added patch(es):
  * harden_argus.service.patch
  Modified:
  * argus.service</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Replace wrong libnsl build require with correct libtirpc one
- fix-configure-libwrap-dependencies.diff: libwrap does not
  depend on libnsl</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6198891ceaeff972a971752f6aca093cf5ec5be16fa4ee7e6ad41461d3280b2c2d56d5612fad46ed343e6b59b3f20f309e42991c6d291526533b48c3343d5f72" name="argus-client" arch="x86_64">
  <version epoch="0" ver="3.0.8.2" rel="bp160.1.14"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="vdziewiecki@suse.com" date="1335355200">- update to 3.0.6 - bnc#739260 - Multiple licensing problems with
  argus-client 3.0.0
- remove obsolete argus-clients-3.0.0-leak-fix.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1337601600">- Fix build</changelog>
  <changelog author="cfarrell@suse.com" date="1337947200">- license update: GPL-2.0+
  COPYING is actually GPL-3.0 but majority of source files are GPL-2.0+ and
  presence of include/argus/CflowdFlowPdu.h (GPL-2.0) means binary is
  GPL-2.0 anyway (upstream aware of this). See also bnc#739260</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 3.0.8
  + Please read the ChangeLog
- Adapt patches to upstream changes
  argus-clients-3.0.6-fclose.patch &gt; argus-clients-3.0.8-fclose.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1475064000">- Update to version 3.0.8.2
  * Please read the ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1521288000">- Format with spec-cleaner and remove not-needed code
- Fix build on Tumbleweed by stating more dependencies</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1559995200">- Add argus-client-fix-build.patch to properly fail build on errors
  and avoid these (boo#1102408)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="d3b2b230a3aa61796a8d4ad111315159c2664166299ba5d5c9298f4f18a79775dd3a5436dda49b11a0555cb29d6c471b7631f60e8e565d805f1f310ab58fc83a" name="argus-server" arch="x86_64">
  <version epoch="0" ver="3.0.8.3" rel="bp160.1.13"/>
  <changelog author="sfalken@opensuse.org" date="1411041600">- Changed SuSE to SUSE in README.SUSE (sr#250033)</changelog>
  <changelog author="p.drouand@gmail.com" date="1440676800">- Update to version 3.0.8.1
  * Upstream doesn't publish a short changelog; please read the
    ChangeLog file
- Use download Url as source
- Require systemd-rpm-macros instead of systemd: increase dependencies</changelog>
  <changelog author="p.drouand@gmail.com" date="1475064000">- Update to version 3.0.8.2
  * Upstream doesn't publish a short changelog; please read the
    ChangeLog file</changelog>
  <changelog author="dimstar@opensuse.org" date="1509019200">- BuildRequire libnsl-devel: since confiugure implicitly adds
  - lnsl, it is our duty to make sure deps are present.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553169600">- Reduce scriptlets' hard dependency on systemd.
- Replace some UUOC by find -exec.
- Make %install POSIX sh compatible.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1591876800">- Add -fcommon in order to fix building with GCC10</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- Update to version 3.0.8.3
  * Fix ekinzie-ccc-analyzer issues</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628596800">- Added hardening to systemd service(s). Added patch(es):
  * harden_argus.service.patch
  Modified:
  * argus.service</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1674648000">- Replace wrong libnsl build require with correct libtirpc one
- fix-configure-libwrap-dependencies.diff: libwrap does not
  depend on libnsl</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="4e7e8e6a6f695a9659242568b35e94ce6ea0cd8b20c57c13d236ec2db6d5b3f7f1268b4c17cc504ea534e1f81b2037afbc01fc7618bc717899052c9d2cd4ac63" name="argyllcms" arch="x86_64">
  <version epoch="0" ver="3.3.0" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1643198400">- Update to version 2.3.0:
  * Fixed spotread -YL (i1Pro1/2 lamp remediation) to function even
  if calibration is impossible due to the white reference being out of tolerance.
  * Fix SpyderX faulty initial black calibration
  * Added icomuf_reset_before_close flag for SpyderX, as some versions
  of the instrument have been reported to lock up after use.
  * Modified the ArgyllCMS CIECAM02 implementation to include a blue
  hue linearization tweak, to improve the "blue goes purple" effect
  when gamut mapping or clipping highly saturated blues to smaller gamuts.
  * Added spotread -Y y option that forces the listing of instrument
  specific display calibrations in the usage, even for serial instruments.
  * Removed native i1d3 C6 instrument support as a favor to X-Rite.
  * Improved cxf2ti3 so that it should cope with XML that uses "Colour"
  spelling rather than "Color".
  * Added I1D3_ESCAPE environment variable to allow a user to potentialy
  use any current or future OEM coded i1d3 instrument.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.3.1:
  * Added value sanity check &amp; warning to chartread patch by patch mode.
  * Fixed crash on 64 bit MSWin in spectro/aglob due to changing SDK
    declarations for _findfirst().
  * Fixed one remaining problem with not coping with "Colour" spelling rather
    than "Color" in cxf2ti3.
  * Add code in cgats write to check for float format problems when faced with
  - inf or +inf value.
  * Fix i1Pro3 highres in ccxxmake, dispcal &amp; dispread.
  * Changed OS X usb reset to re-enumerate instead, as reset does nothing on OS
    X &gt;= 10.8.
  * Added spectro/instlib.api.txt file to public distribution.
  * Fixed possible crashes in xicc/ccss.c and spectro/oeminst.c</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set everything inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1695384000">- Update to 3.0.0:
  * Updated ccast/axTLS to get ChromCast working again with latest Google CC
    operating software.
  * Extensive re-write/re-factor of icclib to make it more future-proof.
    See https://www.argyllcms.com/doc/ChangesSummary.html for details.
  * Added ref/ColorCheckerPassport.ti2 and ref/ColorCheckerHalfPassport.ti2
    to allow measuring ColorCheckerPassport with instrument.
  * Fixed bug in Munki spectro hi-res mode with some instruments. Luminance
    matching between normal and hi-res was sometimes quite poor.
  * Added ARGYLL_CREATE_DISPLAY_PROFILE_WITHOUT_CHAD environment variable.
  * Changed colprof -U flag to -u. Changed dispcal -J flag to -K to accommodate
    a potential new flag for colprof and dispcal.
  * Added workaround for bug in madHcNet64.dll32/64.dll which sometimes causes
    failure.
  * Added delay after USB set_config on OS X to help Spyder 3/4 on Ventura OS.
  * Added -Y parameter to dispwin to override automatic patch delay.
  * Changed i1d3 driver to cope with Rev. B "0x83" error robustly. This should
    fix any issues measuring low level Red only patch values on OLED displays,
    but with slower measurements when this occurs.
  * Added spotread -Y S option to save spectral sensitivity curves and added
    corresponding support in i1d3 driver. This allows for comparison of different
    instruments factory calibrations.
  * Added a -h scale parameter to dispread, to allow the automatic instrument
    calibration test patch values to be scaled down from their default 100%
    value. This is useful with HDR displays.
  * Added manifest to MSWindows executables to use UTF-8 code pages on Windows
    1903 and later. This should improve non-ASCII filename and path handling.
  * Added a Violet colorant to the targen colorant list.
  * Fixed problem with OS X 64 bit backwards compatibility where it failed to
    locate serial instruments when the binaries are run on OS X V12 or latter
    machines.
  * Fixed bug in i1Pro3 driver where it was not returning the correct
    measurement conditions enum.
  * Fixed spotread so that ambient measure for monochrome sources doesn't error
    out due to bad CCT/VCT/VDT. Also change -T so that it suppresses CCT etc. if
    ambient mode is used.
  * Added hacky workaround to strange Mac M2/rosetta bug in del_i1proimp().
- Make the argyllcms-doc package noarch.</changelog>
  <changelog author="dmueller@suse.com" date="1699531200">- update to 3.0.2:
  * Fix #include &lt;ctype.h&gt; in spectro/conv.c
  * Fix typo introduced into spectro/i1d3.c that prevents
    retail i1d3 from working.
  * Fixed accuracy problem with xicclu -fb when using cLut type
    profiles that use a matrix in their B2A table.
  * Fixed crash in xicclu with device link profiles.
  * Fixed error when creating profiles with
    ARGYLL_CREATE_DISPLAY_PROFILE_WITH_CHAD or
    ARGYLL_CREATE_OUTPUT_PROFILE_WITH_CHAD.
  * Make re-writing an ICC profile more forgiving of
    tags that are incorrect for the profile version.
  * Fixed problem with writing textDescriptionType
    ScriptCode that was not being padded to 67 characters.
  * Fixed bug in CGATS output. This showed up in oeminst.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1701691200">- update to 3.1.0:
  * Fixed bug in CMYK profile B2A table creation that sometimes resulted in
    bumpy black generation. (Only occurred when compiled using recent gcc with
    code optimization.)
  * Changed ICC profile serialization of pure ASCII text tags emit a warning
    rather than error if they are fed non-ASCII utf8 input.
  * Made ICC code a little more robust against bad profiles. (Thanks to David Hoyt).
  * Fixed latent bug in X11 plot code that caused window not to be created or
    updated when dowait == 0. This shows up on Linux as failure of spotread -S
    to show spectral plot.
  * Fixed problem with colorhug not noticing errors from the instrument.
  * Updated scanin/it8Wolf.cht to improve accuracy of grey wedge patch recognition.
  * Merged some Debian patches, including spelling fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1710244800">- Fix build with gcc14 (bsc#1221304)
  * Add ajam-gcc14.patch
- Reformat ajam-include.patch with a/b prefixes
- Use %autosetup</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1715688000">- Update to 3.2.0:
  * Added extra diagnostics to printcal.
  * Added colprof -nI option, that adds inverse gamut mapping to Perceptual and
    Saturation A2B tables, if they are being created. This is not recommended for
    source profiles, since it handicaps true gamut mapping, but may be a workaround
    to faulty Adobe Lightroom BPC for Perceptual intent in output profiles.
  * Added error message for ColorMunki spectro sensor internal cable being
    disconnected.
  * Fixed bug in Appearance B2A conversion that appeared in V3.0 release.
  * Fixed crash in chartread strip reading when given faulty .ti2 file.
  * Tweaked i1d3 AIO adaptive integration time to reduce measure time to be more
    comparable to just using Rev A commands.
  * Re-worked ARGYLL_NOT_INTERACTIVE stdin to work much better on MSWin when
    connected to a pipe. Removed code that empties stdin before expecting use input
    when ARGYLL_NOT_INTERACTIVE.
  * Fixed OS X dispwin -c etc.
  * Fixed colprof IGNORE_DISP_ZEROS heuristic so that it doesn't reject OLED red
    measurements that have a Z value of 0.0.
  * Added -H option to colprof to allow setting the charTargetTag to given string,
    rather than automatically filling with .ti3 data.
  * Changed instrument monitoring thread debug messages to only be shown on -D9, so
    they don't interfere with messages shown at -D8.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1727438400">- Update to 3.3.0:
  * Improved reliability of i1Pro2 startup by adding recovery delay after the
    getmisc instruction.
  * Fixed i1pro2/3 driver to be more forgiving of wavelength calibration pushing
    filter offsets outside the range of raw CCD range.
  * Fixed numerical bug in targen when using -V and -c with profile with zero
    black.
  * Added support for Spyder X2 (thanks to Chris Minasians and A.K. for helping
    make an instrument available).
  * Added support for JETI 2501 spectrometer thanks to to Omardis.
  * Added -T option to targen to allow separate total ink limit for text and spacer
    text.
  * Modified targen CMYK chart generation to apply a level of luminance boost to
    the resulting OFPS samples. This partially compensates for the overall
    darkening of the test set due to exploring the combined K response of the
    device. While this will reduce the sampling density and resulting profile
    accuracy in darker parts of the gamut, it should improve the accuracy of colors
    for realistic prints, which typically have a lighter average than the device
    CMYK gamut.
  * Added extra diagnostics and -p plot detail to printcal. Added -z flag to allow
    setting a resulting calibration table resolution to values other than 256.
  * Fix 3.2.0 bug introduced into spectro/Jamfile install that omitted spec2cie
    from binary distributions.</changelog>
</package>
<package pkgid="c68ebd7a476df13c1559e83191312edcf6fcbeb599614f52c2fc1f66b1b7392d6d1f8debc0859b260a7aebb67ddf184480436be56f2e5aa6da4aee867870bf47" name="argyllcms-doc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1643198400">- Update to version 2.3.0:
  * Fixed spotread -YL (i1Pro1/2 lamp remediation) to function even
  if calibration is impossible due to the white reference being out of tolerance.
  * Fix SpyderX faulty initial black calibration
  * Added icomuf_reset_before_close flag for SpyderX, as some versions
  of the instrument have been reported to lock up after use.
  * Modified the ArgyllCMS CIECAM02 implementation to include a blue
  hue linearization tweak, to improve the "blue goes purple" effect
  when gamut mapping or clipping highly saturated blues to smaller gamuts.
  * Added spotread -Y y option that forces the listing of instrument
  specific display calibrations in the usage, even for serial instruments.
  * Removed native i1d3 C6 instrument support as a favor to X-Rite.
  * Improved cxf2ti3 so that it should cope with XML that uses "Colour"
  spelling rather than "Color".
  * Added I1D3_ESCAPE environment variable to allow a user to potentialy
  use any current or future OEM coded i1d3 instrument.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.3.1:
  * Added value sanity check &amp; warning to chartread patch by patch mode.
  * Fixed crash on 64 bit MSWin in spectro/aglob due to changing SDK
    declarations for _findfirst().
  * Fixed one remaining problem with not coping with "Colour" spelling rather
    than "Color" in cxf2ti3.
  * Add code in cgats write to check for float format problems when faced with
  - inf or +inf value.
  * Fix i1Pro3 highres in ccxxmake, dispcal &amp; dispread.
  * Changed OS X usb reset to re-enumerate instead, as reset does nothing on OS
    X &gt;= 10.8.
  * Added spectro/instlib.api.txt file to public distribution.
  * Fixed possible crashes in xicc/ccss.c and spectro/oeminst.c</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set everything inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1695384000">- Update to 3.0.0:
  * Updated ccast/axTLS to get ChromCast working again with latest Google CC
    operating software.
  * Extensive re-write/re-factor of icclib to make it more future-proof.
    See https://www.argyllcms.com/doc/ChangesSummary.html for details.
  * Added ref/ColorCheckerPassport.ti2 and ref/ColorCheckerHalfPassport.ti2
    to allow measuring ColorCheckerPassport with instrument.
  * Fixed bug in Munki spectro hi-res mode with some instruments. Luminance
    matching between normal and hi-res was sometimes quite poor.
  * Added ARGYLL_CREATE_DISPLAY_PROFILE_WITHOUT_CHAD environment variable.
  * Changed colprof -U flag to -u. Changed dispcal -J flag to -K to accommodate
    a potential new flag for colprof and dispcal.
  * Added workaround for bug in madHcNet64.dll32/64.dll which sometimes causes
    failure.
  * Added delay after USB set_config on OS X to help Spyder 3/4 on Ventura OS.
  * Added -Y parameter to dispwin to override automatic patch delay.
  * Changed i1d3 driver to cope with Rev. B "0x83" error robustly. This should
    fix any issues measuring low level Red only patch values on OLED displays,
    but with slower measurements when this occurs.
  * Added spotread -Y S option to save spectral sensitivity curves and added
    corresponding support in i1d3 driver. This allows for comparison of different
    instruments factory calibrations.
  * Added a -h scale parameter to dispread, to allow the automatic instrument
    calibration test patch values to be scaled down from their default 100%
    value. This is useful with HDR displays.
  * Added manifest to MSWindows executables to use UTF-8 code pages on Windows
    1903 and later. This should improve non-ASCII filename and path handling.
  * Added a Violet colorant to the targen colorant list.
  * Fixed problem with OS X 64 bit backwards compatibility where it failed to
    locate serial instruments when the binaries are run on OS X V12 or latter
    machines.
  * Fixed bug in i1Pro3 driver where it was not returning the correct
    measurement conditions enum.
  * Fixed spotread so that ambient measure for monochrome sources doesn't error
    out due to bad CCT/VCT/VDT. Also change -T so that it suppresses CCT etc. if
    ambient mode is used.
  * Added hacky workaround to strange Mac M2/rosetta bug in del_i1proimp().
- Make the argyllcms-doc package noarch.</changelog>
  <changelog author="dmueller@suse.com" date="1699531200">- update to 3.0.2:
  * Fix #include &lt;ctype.h&gt; in spectro/conv.c
  * Fix typo introduced into spectro/i1d3.c that prevents
    retail i1d3 from working.
  * Fixed accuracy problem with xicclu -fb when using cLut type
    profiles that use a matrix in their B2A table.
  * Fixed crash in xicclu with device link profiles.
  * Fixed error when creating profiles with
    ARGYLL_CREATE_DISPLAY_PROFILE_WITH_CHAD or
    ARGYLL_CREATE_OUTPUT_PROFILE_WITH_CHAD.
  * Make re-writing an ICC profile more forgiving of
    tags that are incorrect for the profile version.
  * Fixed problem with writing textDescriptionType
    ScriptCode that was not being padded to 67 characters.
  * Fixed bug in CGATS output. This showed up in oeminst.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1701691200">- update to 3.1.0:
  * Fixed bug in CMYK profile B2A table creation that sometimes resulted in
    bumpy black generation. (Only occurred when compiled using recent gcc with
    code optimization.)
  * Changed ICC profile serialization of pure ASCII text tags emit a warning
    rather than error if they are fed non-ASCII utf8 input.
  * Made ICC code a little more robust against bad profiles. (Thanks to David Hoyt).
  * Fixed latent bug in X11 plot code that caused window not to be created or
    updated when dowait == 0. This shows up on Linux as failure of spotread -S
    to show spectral plot.
  * Fixed problem with colorhug not noticing errors from the instrument.
  * Updated scanin/it8Wolf.cht to improve accuracy of grey wedge patch recognition.
  * Merged some Debian patches, including spelling fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1710244800">- Fix build with gcc14 (bsc#1221304)
  * Add ajam-gcc14.patch
- Reformat ajam-include.patch with a/b prefixes
- Use %autosetup</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1715688000">- Update to 3.2.0:
  * Added extra diagnostics to printcal.
  * Added colprof -nI option, that adds inverse gamut mapping to Perceptual and
    Saturation A2B tables, if they are being created. This is not recommended for
    source profiles, since it handicaps true gamut mapping, but may be a workaround
    to faulty Adobe Lightroom BPC for Perceptual intent in output profiles.
  * Added error message for ColorMunki spectro sensor internal cable being
    disconnected.
  * Fixed bug in Appearance B2A conversion that appeared in V3.0 release.
  * Fixed crash in chartread strip reading when given faulty .ti2 file.
  * Tweaked i1d3 AIO adaptive integration time to reduce measure time to be more
    comparable to just using Rev A commands.
  * Re-worked ARGYLL_NOT_INTERACTIVE stdin to work much better on MSWin when
    connected to a pipe. Removed code that empties stdin before expecting use input
    when ARGYLL_NOT_INTERACTIVE.
  * Fixed OS X dispwin -c etc.
  * Fixed colprof IGNORE_DISP_ZEROS heuristic so that it doesn't reject OLED red
    measurements that have a Z value of 0.0.
  * Added -H option to colprof to allow setting the charTargetTag to given string,
    rather than automatically filling with .ti3 data.
  * Changed instrument monitoring thread debug messages to only be shown on -D9, so
    they don't interfere with messages shown at -D8.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1727438400">- Update to 3.3.0:
  * Improved reliability of i1Pro2 startup by adding recovery delay after the
    getmisc instruction.
  * Fixed i1pro2/3 driver to be more forgiving of wavelength calibration pushing
    filter offsets outside the range of raw CCD range.
  * Fixed numerical bug in targen when using -V and -c with profile with zero
    black.
  * Added support for Spyder X2 (thanks to Chris Minasians and A.K. for helping
    make an instrument available).
  * Added support for JETI 2501 spectrometer thanks to to Omardis.
  * Added -T option to targen to allow separate total ink limit for text and spacer
    text.
  * Modified targen CMYK chart generation to apply a level of luminance boost to
    the resulting OFPS samples. This partially compensates for the overall
    darkening of the test set due to exploring the combined K response of the
    device. While this will reduce the sampling density and resulting profile
    accuracy in darker parts of the gamut, it should improve the accuracy of colors
    for realistic prints, which typically have a lighter average than the device
    CMYK gamut.
  * Added extra diagnostics and -p plot detail to printcal. Added -z flag to allow
    setting a resulting calibration table resolution to values other than 256.
  * Fix 3.2.0 bug introduced into spectro/Jamfile install that omitted spec2cie
    from binary distributions.</changelog>
</package>
<package pkgid="1b261e026c539a0f7556dac95f1f421fd3fddb9bf86446781c9d1fcb25193b6c3048e6f37f778d498b8c22133d6718b743390d0f436d370462cbf033c3d45850" name="aria2" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="bp160.1.16"/>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1700481600">- Update to version 1.37.0
  * Fix header in --http-accept-gzip documentation
  * Allow empty dist name in bencode which is needed for hybrid torrent
  * Fix undefined behavior/crash in GZipEncoder
  * Fix Metalink4 parsing with foreign namespaces
  * fix wrong dht.dat binary file structure in docs
  * Increase ByteArrayDiskWriter maximum size
  * Logger: Fix format string overflow in writeHeader()
  * Cap infoHashLength in .aria2 file
  * Various documentation fixes and rewords</changelog>
</package>
<package pkgid="95e73b7ed7708bda544d5af2a706be698551e69574b500c293654f0ddc0f17f648cb37863eb553a8afcd5189e72d8e3cc4c2cfac355062cb14d3d23d51cfd7e3" name="aria2-devel" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="bp160.1.16"/>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1700481600">- Update to version 1.37.0
  * Fix header in --http-accept-gzip documentation
  * Allow empty dist name in bencode which is needed for hybrid torrent
  * Fix undefined behavior/crash in GZipEncoder
  * Fix Metalink4 parsing with foreign namespaces
  * fix wrong dht.dat binary file structure in docs
  * Increase ByteArrayDiskWriter maximum size
  * Logger: Fix format string overflow in writeHeader()
  * Cap infoHashLength in .aria2 file
  * Various documentation fixes and rewords</changelog>
</package>
<package pkgid="a5e094a26ffb3d1ff1e3c77530bc8ad5ece2d7598bdd90363f662309e55e9f4c9c5b5f9fea21bd02a502206a6498f139147a8350962bc3466864dc3dd21d6533" name="aria2-lang" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="bp160.1.16"/>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1700481600">- Update to version 1.37.0
  * Fix header in --http-accept-gzip documentation
  * Allow empty dist name in bencode which is needed for hybrid torrent
  * Fix undefined behavior/crash in GZipEncoder
  * Fix Metalink4 parsing with foreign namespaces
  * fix wrong dht.dat binary file structure in docs
  * Increase ByteArrayDiskWriter maximum size
  * Logger: Fix format string overflow in writeHeader()
  * Cap infoHashLength in .aria2 file
  * Various documentation fixes and rewords</changelog>
</package>
<package pkgid="90afce6e176c74832e2607029d0bf629db8035cf176df369748dd2889fd8214c58e4461323ced9a3a2fc1708c0646f711ecad24654c43ca97676ad68d4051991" name="arianna" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- Changes since 24.11.90:
  * Fix access to undefined variable
  * Clip TableOfContentDrawer listview
  * Add missing icon in Settings page
  * Remove boring screenshots
  * Fix crash with Qt 6.8
  * Fix creation of EpubViewerPage
  * Ensure cover cache is regenerated when deleted</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * flatpak: Update qt and baloo</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="f28d4c76e7abb6976fdf302c40aa08ebc8df963a797f97eb485f9a7342b00d4c762cc677a065fc04ed1580c389c5688b63a7e591290af07b5da24401716e640c" name="arianna-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- Changes since 24.11.90:
  * Fix access to undefined variable
  * Clip TableOfContentDrawer listview
  * Add missing icon in Settings page
  * Remove boring screenshots
  * Fix crash with Qt 6.8
  * Fix creation of EpubViewerPage
  * Ensure cover cache is regenerated when deleted</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * flatpak: Update qt and baloo</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="1d248a9488acbf4f4a92c1171321a4fda71641dd5ff2e74f917e7140e497430d665c61d0b5a593afe855d0cd507b34bf3b765d0e88361956fc287ef97e5bd14c" name="arj" arch="x86_64">
  <version epoch="0" ver="3.10.22" rel="bp160.1.25"/>
  <changelog author="mpluskal@suse.com" date="1511697600">- Import package from home:Sauerland
- Some packaging cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Update description to be more clear about this arj variant.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513425600">- Add arj-3.10.22-reproducible.patch to not include build date (boo#1047218)</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1585137600">- Add arj-3.10.22-fixstrcpy.patch to fix data corruption
  and make package builds reproducible (boo#1100677)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1680955200">- Extend arj-3.10.22-fixstrcpy.patch to avoid trouble with strcpy
  in two more places</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="1938633316d60fc6cd87c6cff836126efbf74120630036909dc2e920214c66dcfc0773a4b0bc1e7e2c577726eb81f0cb33876768a996fd24df3a5fda76bc32b7" name="ark" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- Changes since 24.11.90:
  * Treat absolute paths as relative paths during extraction</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * CI: The image has no clang-format 14 anymore</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Remove nanoseconds from timestamp (kde#499032)
  * Add job to publish on Microsoft Store (and build appx)
  * Add xml/yaml linting
  * CMake proofreading
  * Add missing include
  * Treat absolute paths as relative paths during extraction
  * Adding Dia_FIX &amp; Alex Gurenko as supporters
  * Added supporter Andreas Pietzowski
  * Added Travis McCoy as supporter
  * Added supporter Marco Rebhan
  * Fix -Wdangling-reference
  * Add traling commas to all enums</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * CompressFileItemAction: stat without progress info</changelog>
</package>
<package pkgid="4061b945aa7871d89c0f5749208fc2e02cf07fae6306f9badf7081062b472f012ae2e4e790924c9f521380b00e510f889da26ca528f9a8a2ca713754b2b18eb8" name="ark-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- Changes since 24.11.90:
  * Treat absolute paths as relative paths during extraction</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * CI: The image has no clang-format 14 anymore</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Remove nanoseconds from timestamp (kde#499032)
  * Add job to publish on Microsoft Store (and build appx)
  * Add xml/yaml linting
  * CMake proofreading
  * Add missing include
  * Treat absolute paths as relative paths during extraction
  * Adding Dia_FIX &amp; Alex Gurenko as supporters
  * Added supporter Andreas Pietzowski
  * Added Travis McCoy as supporter
  * Added supporter Marco Rebhan
  * Fix -Wdangling-reference
  * Add traling commas to all enums</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * CompressFileItemAction: stat without progress info</changelog>
</package>
<package pkgid="1ac65dd2d50649e55c653b50f46c34fae5831368509e8ac27bb87e4c4cb3be86054b1733c74c814ee0985c0a699422d0a3ada92d274e92f8733b06ae79da8c66" name="arm-trusted-firmware" arch="x86_64">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="a39eae70fd2bf243a884d0fcad19ae325b98099fbce43763c3ef7c023e615bdb3326bcc4e8af9fd219ffda9cc834b25d8b8b80b73562e8e2e3a056ef1189b85d" name="arm-trusted-firmware-a80x0_mcbin" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="672fd6c1dd0be9862ebd0ecfc29cbbcb57c20ffec3cde2220198345a7b7c1ad0f2a8bbb409f69985115ca8b07d7a3792c4a6bac93efb96193df781ef7b828fcd" name="arm-trusted-firmware-imx8mm" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="bce2399d70da4a64bd6ac49779222a8a3d8d096725e28124e02a070b138966063d7a6dd08975a9be022966f8d79aeef69b0c253d981abf28488ce227d2c4385a" name="arm-trusted-firmware-imx8qm" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="9b9849e3318c51f6be83636a2f4f1e1962e9926e2a7c66eac23ae07bcfbdfe72c4722516a3ae26fcc520671c50b6e57296a809c1b855f00d81d3b50b56b61ab2" name="arm-trusted-firmware-imx8qx" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="5014bbffda2dcfbda7f5cb04045a6ea20bf7cd30f8bdfb611cfcf10599ca81b3039e249ac4eecc1d34fe9db31832d1ff2ae42bb2fce9cb375135c447e660d5ac" name="arm-trusted-firmware-poplar" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="1e77d44e16651eab2c7f7f3a8eeffe67ca75e0f7571d4f6fccd0e9bcdb6798e74934b335414fbc4c5fc8d35c4d248d0718b5ce42abde257fcac53a481d3e588b" name="arm-trusted-firmware-poplar-devel" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="fc57b68c2e961a343948c02c2cdec994e7c49fbae809a11bf6e922b43513ba6946d0d8bf19e79705325d40dd06164309404290f8fe699de3f32c979c4bc9fd3c" name="arm-trusted-firmware-qemu" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="c04abc06ef22afc7e9fe4a660b8056d4772b3fe93ae702615a0161c661ab492ee49297de0b06d8f4e7011a70bdab84ba97d2c1c7ee7b60bb92695f610ae2376c" name="arm-trusted-firmware-qemu_sbsa" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="7d097c205297fe90c462649dc30b55670bc395ece3d39fd7447676227747a14e893d869b11ec698c4ae4bcd4adb6ffdd0ab1324e6a5589124e1dd5378ea01a5f" name="arm-trusted-firmware-rk3328" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="12f55c1e764866993c5f4e974cb889739ce3a39d34dc7d64cf9192eddea5bfa547dd7f2bf58297b09d749dbfa94a11c978d7e87bf7bd1c519bb4b91ebdd4efb2" name="arm-trusted-firmware-rk3368" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="b545d61741d83936321eef15a38daee1089bf39447541dd1f23651dacf271df031af41256b57a493821182a08a00320db251d1670b6475e31af3cdb659e7de80" name="arm-trusted-firmware-rpi3" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="98eb6a83f65b08cc5f6e6bcdb96b2322a7304761fae21b25eef2e34042ce12ec8c699ae6ecb48fe1923c1f64d8aa7217cae04ff03e53bce3fface9bb7fae0083" name="arm-trusted-firmware-rpi4" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="e84b787b407790968538a43647c9e6f166f366cfda652e0c3a52cfedca669d1730018fd31fea723fb3117f7d438a79db941942e8b2d9707ac39a737742ba0e73" name="arm-trusted-firmware-sun50i_a64" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="c236f04749923dfde652eb1f49728f6a8806e20f7718fb33cf2e9faa1cabbaadda24fca8d39b8c7e72054366ae7bf385840fd7be9b5e90a1f9acd2c1499f0474" name="arm-trusted-firmware-sun50i_h6" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="3affa814a14d933ce362f327d51ffa4a617e63e588ac69f699c2a972f1daaffa1067cdd8efaa14d4a316058b8b68193a8fcf20331863f85ad5ca9cedb7e58cfa" name="arm-trusted-firmware-sun50i_h616" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="2d1b4cbeb0d6319b7e5164f215065d7167d48cca0736baaed90cec81e0754add29e9aef366dc160e949ef94ac02e156b515fbf29df2a571cb6dfa2000e2b3ee6" name="arm-trusted-firmware-tegra186" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="b4d393b159b35f9d60860f8413370e740a1166ce09a297f6cf62f668cc4aa002b803219eeb707eca49f231e4ef1746e0aace1775694b550016be596cf4bab1c9" name="arm-trusted-firmware-tegra210" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="593d299059e7c5d80983d761855fdb53409dba6524f4f22d56377b81837b103bdbeb0f53a3216fee63c79b1f058e919ddf2ed2c6ab3da83c4ca3da903701fc7c" name="arm-trusted-firmware-tools" arch="x86_64">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="7c000831d6e3c43d2f3c0b960f9285c9ec876c9cfb21c5eab8fded3430141470f1e9dc45c72f389b5ec8aaee3cc133a00cf15c9ce5d4a15e247a198d75b03328" name="arm-trusted-firmware-zynqmp" arch="noarch">
  <version epoch="0" ver="2.10.14" rel="160000.2.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1680523200">- Add fvp platform</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682337600">- Update to 2.8.6:
  - **Arm**
  - **GIC**
  - **GICv3**
  - fix(gicv3): workaround for NVIDIA erratum T241-FABRIC-4 ([2e48284](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2e48284c8b5a4cf28779a30fd60d99650928865e))
  - **Bootloader Images**
  - **BL32**
  - **TSP**
  - fix(tsp): use verbose for power logs ([6cc8ca9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/6cc8ca93a905cfdc791ab7a7d2b8d6c366b5705e))
- Skipped 2.8.5:
  - **Libraries**
  - **CPU Support**
  - refactor(cpus): shorten errata flag defines ([e31060c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/e31060c472cd53ce5a21a5ce19cd663a3fd79ec3))
  - fix(cpus): workaround for Cortex-A78C erratum 1827430 ([14bb756](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/14bb7567d5e9805e5287651eeec5aa95cae40432))
  - fix(cpus): workaround for Cortex-A78C erratum 1827440 ([330095f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/330095fa4a2695bac85fd12e0017090d9ebb633f))
- Skipped 2.8.4:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V1 errata 2743233 ([08a0f6a](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/08a0f6acaa327b0de868a2fdff9fcdf5880de9db))
- Skipped 2.8.3:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A78 erratum 2742426 ([a307605](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a30760567eacce2b384ba072050eae4a422a5e9f))
  - fix(cpus): workaround for Cortex-A78C erratum 2779484 ([48f38bc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/48f38bcb0465719a502d98bc04efe69553b3cb22))
  - **Dependencies**
  - **Compiler runtime libraries**
  - fix(deps): add missing aeabi_memset.S ([0aae8a3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/0aae8a34b3ca8ed0885166cb5bf6af67bc91c5fa))
- Skipped 2.8.2:
  - **Platforms**
  - **Xilinx**
  - **ZynqMP**
  - fix(zynqmp): enable A53 workaround(errata 1530924) ([3c5ba11ca] (https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3c5ba11ca800e41e36ea97b696cd3ce9c64d5412)))
- Skipped 2.8.1:
  - **Libraries**
  - **el3_runtime**
  - Revert "fix(el3_runtime): allow SErrors when executing in EL3" ([51120a499](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/51120a499ee7682ce659e613e197597e9376aae7))
- Skipped 2.8.0:
  - **Libraries**
  - **C Standard Library**
  - fix(libc): properly define SCHAR_MIN ([33d7e301f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/33d7e301f74059b12b606cfc54afd48a9ad26b4a))
  - **CPU Support**
  - fix(cpus): workaround for Cortex-A510 erratum 2684597 ([a40d9559b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a40d9559b2f104923dc01c74dcdd4ac06b85adef))
  - fix(cpus): workaround for Cortex-A78C erratum 2772121 ([b33ea1e3e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b33ea1e3e91430d03d4328f1c7c094af7622ff2d))
  - fix(cpus): workaround for Neoverse V1 errata 2779461 ([c06124dad](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c06124dadc10a4cdc63772483921810dbc3f4b95))
  - fix(cpus): workaround for Cortex-A78 erratum 2779479 ([5a25a70fb](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5a25a70fb67f56be5f3ebed3d4234bb3b8120181))
  - fix(cpus): workaround for Cortex-X2 erratum 2282622 ([209b8ccd7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/209b8ccd772d3b94b30b731bd85da1c3ecd0ecdb))
  - fix(cpus): workaround for Cortex-A710 erratum 2282622 ([a9f7a50d3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a9f7a50d30598d2bd7f3d048930e54c520adc69f))
  - fix(cpus): workaround for Neoverse V1 erratum 2743093 ([b7f723e55](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b7f723e55f52f693e6517120bd016d56f0cdb80c))
  - fix(cpus): workaround for Cortex-A78 erratum 2772019 ([3a8011088](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/3a80110887ed752b0c6e5b4f0d59bd6d40f4bb24))
  - fix(cpus): workaround for Neoverse N2 erratum 2743089 ([b0b654f90](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b0b654f908df85133e9d8cbbe252cf7f48dd883c))
  - fix(cpus): workaround for Cortex-X2 erratum 2768515 ([262bb3a22](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/262bb3a223bed377603ac756fef8d685fad016ef))
  - fix(cpus): workaround for Cortex-A710 erratum 2768515 ([c90daab3f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/c90daab3f0029867f7d1b419dcb72961bdfaea9d))
  - fix(cpus): workaround for Cortex-X3 erratum 2615812 ([bcdd5152d](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bcdd5152dc6c0496d25e936f3af4416dab1d32bc))
  - **el3_runtime**
  - fix(el3_runtime): allow SErrors when executing in EL3 ([327f4bb0c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/327f4bb0cf2035ee46f0753429a43fd4c97a5d98))
  - fix(el3_runtime): restore SPSR/ELR/SCR after esb ([f06ba4a21](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f06ba4a2137000e87f1ec77eef054d3ac1706d84))
  - **Miscellaneous**
  - **Debug**
  - fix(console): fix crash on spin_unlock with cache disabled ([cede543e2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cede543e29d7110adfd99427f35858e6a81cb596))
  - **Platforms**
  - **Arm**
  - **CSS**
  - fix(plat/css): fix invalid redistributor poweroff ([1432d4b86](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1432d4b86ea11160d211470a15cdcdc1e36bb0fb))
  - **ST**
  - fix(st): include utils.h to solve compilation error ([06d5116f2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/06d5116f29bcffef89ae3190bb4df3043cb91cf8))
  - **Intel**
  - fix(intel): fix fcs_client crashed when increased param size ([2b2eaf1d9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/2b2eaf1d96255f5e56cf8469e98ee77631b0bcda))
  - **Layerscape**
  - fix(layerscape): unlock write access SMMU_CBn_ACTLR ([40b90a9c4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/40b90a9c4ce8a7f131ea65edb549d8f0160a5999))
  - fix(layerscape): fix errata a008850 ([61cc890d7](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/61cc890d715e6d388ed15ba9cb1a5a8c66ded6c3))
  - **LX2**
  - feat(lx2): enable OCRAM ECC ([1c65e8798](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1c65e8798b5be2a2ac7f3aaa410e02f7fc4b29ad))
  - feat(lx2): support more variants ([fa8a6d76f](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fa8a6d76ffe03647676f12740fce5a2ed3735616))
  - fix(lx2): init global data before using it ([fd857216e](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fd857216e5e7bec268579f4999b9c23dd7c1cfac))
  - **NXP**
  - fix(nxp-drivers): fix tzc380 memory regions config ([4b654f4b4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4b654f4b47267469426a3f77ad0981a1063ebf24))
  - fix(nxp-ddr): apply Max CDD values for warm boot ([1414e0add](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1414e0adda7fdfa4405412c6328d52371e1e376a))
  - fix(nxp-ddr): use CDDWW for write to read delay ([8047151ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8047151ab249c9f900132486c17d5bdf39d7ca51))
  - **ls1046a**
  - fix(ls1046a): 4 keys secureboot failure resolved ([ff8694041](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ff8694041010045e3fcafe57aed0fbbe236d2cf5))
  - **Security**
  - docs(security): security advisory for CVE-2022-47630 ([084d29c26](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/084d29c2654f0717129aac116adb644df9a8387c))
  - fix(auth): properly validate X.509 extensions ([a89b1f193](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/a89b1f19303add7971828546f922bb9f889dae87))
  - fix(auth): avoid out-of-bounds read in auth_nvctr() ([187e79427](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/187e79427dd09ae4b47128aa17975dc1310453bc))
  - fix(auth): require at least one extension to be present ([379183edc](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/379183edc4d34e513678f652703b890c1db95d3b))
  - fix(auth): forbid junk after extensions ([609437cbf](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/609437cbf591d77050d4a4e2de4e0c322d71706e))
  - **Tools**
  - fix(sptool): add dependency to SP image ([9e01aedd4](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/9e01aedd4359311169f4e472240314db8494d251))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038400">- Update to 2.8.8:
  - **Libraries**
  - **CPU Support**
  - fix(cpus): workaround for Neoverse V2 erratum 2801372 ([ec3fafa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/ec3fafa24307686b957de0899ba30bfbb5a70380))
- Skipped 2.8.7:
  - **Build System**
  - fix(build): allow warnings when using lld ([37bee49](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/37bee4983192451a00ed9dd5987e8e856fb09714))
  - build(makefile): add helper to detect linker options ([8782b88](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/8782b8849147aef0e0f8dcf54ec3f2d980acbf50))
  - feat(build): add support for new binutils versions ([1fdc979](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1fdc9797f32c711c35a8a61a591607c8fa8a5468))
  - **Services**
  - **Errata ABI**
  - feat(errata_abi): errata management firmware interface ([bb9d6fa](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/bb9d6faa41ee9d60fdd310f446870b1dbcc41b03))
  - refactor(errata_abi): factor in non-arm interconnect ([4a001ff](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/4a001ffb68e0a8f306ca84a6c1c3142dff728aa2))
  - fix(cpus): workaround platforms non-arm interconnect ([f718c87](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/f718c8723aca40164340c416a0e9d96a37719fe5))
  - docs(errata_abi): document the errata abi changes ([66dab5c](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/66dab5c69420fc728a74d10a83f0abc0e4c4f756))
  - **Platforms**
  - **FVP**
  - feat(fvp): enable errata management interface ([b8bb1e3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/b8bb1e347e5486583edda32e47af53a43165a3aa))</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1695038401">- Update to 2.9.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=b78ad00e580596c4f0b5dfc41efbf5f5877cbdb9</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700740800">- Update to 2.10.0:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/docs/change-log.md?id=9873580997c7f5ec60535bd45367d0c7d3cc2784</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707739200">- Disable imx8mq is it fails to build due to size constraints</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1715774400">- Don't use TF-A on RPi3 by default, just keep it around for testing.
  Fixes bsc#1207204.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729080000">- Update to 2.10.7:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.7/docs/change-log.md
- Skipped 2.10.6:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.6/docs/change-log.md
- Skipped 2.10.5:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.5/docs/change-log.md
- Skipped 2.10.4:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.4/docs/change-log.md
- Skipped 2.10.3:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.3/docs/change-log.md
- Skipped 2.10.2:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.2/docs/change-log.md
- Skipped 2.10.1:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.1/docs/change-log.md</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1742817600">- Update to 2.10.14:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.14/docs/change-log.md
- Skipped 2.10.13:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.13/docs/change-log.md
- Skipped 2.10.12:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.12/docs/change-log.md
- Skipped 2.10.11:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.11/docs/change-log.md
- Skipped 2.10.10:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.10/docs/change-log.md
- Skipped 2.10.9:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.9/docs/change-log.md
- Skipped 2.10.8:
  * Changelog: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/+/refs/tags/lts-v2.10.8/docs/change-log.md
- Remove support for Hikey and Hikey960, since they have been
  dropped from edk2</changelog>
</package>
<package pkgid="6af5f8a76cf0f73ec9567854e0fd214696c45b28e9e0a101353d6b40c6ee00b975789f0dfdb7695a55ee5d2adcf8c90fba44909250c091e6be6f1b39aaadb691" name="armadillo-devel" arch="x86_64">
  <version epoch="0" ver="14.0.1" rel="bp160.1.10"/>
  <changelog author="Atri Bhattacharya &lt;A.Bhattacharya@uliege.be&gt;" date="1697457600">- Update to version 12.6.5:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 12.6.6:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1703764800">- Update to version 12.6.7:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1707652800">- Update to version 12.8.0:
  * Faster detection of symmetric expressions by pinv() and
    rank().
  * Expanded shift() to handle sparse matrices.
  * Expanded conv_to for more flexible conversions between sparse
    and dense matrices.
  * Added cbrt().
  * More compact representation of integers when saving matrices
    in CSV format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1710244800">- Update to version 12.8.1:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712145600">- Update to version 12.8.2:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714824000">- Drop pkgconfig file from baselibs.conf generated -devel package
  to avoid "have choice" issues for dependents arising from both
  armadillo-devel and armadillo-32bit-devel (for example)
  providing pkgconfig(armadillo).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1715688000">- Update to version 12.8.3:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1719662400">- Update to version 14.0.0:
  * C++14 is now the minimum recommended C++ standard.
  * Faster handling of compound expressions by as_scalar(),
    accu(), dot().
  * Faster interactions between sparse and dense matrices.
  * Expanded stddev() to handle sparse matrices.
  * Expanded relational operators to handle expressions between
    sparse matrices and scalars.
  * Added .as_dense() to obtain dense vector/matrix representation
    of any sparse matrix expression.
  * Updated physical constants to NIST 2022 CODATA values.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1720440000">- Update to version 14.0.1:
  * No release notes.</changelog>
</package>
<package pkgid="3c6af834990d97308da567bcee02c88bc79c336665f6fe9f02173dbaef75cc2ba53384baef7ac6d3fa9d64205d1a195c00757795ded85f417a886c6616d88761" name="armadillo-doc" arch="noarch">
  <version epoch="0" ver="14.0.1" rel="bp160.1.10"/>
  <changelog author="Atri Bhattacharya &lt;A.Bhattacharya@uliege.be&gt;" date="1697457600">- Update to version 12.6.5:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 12.6.6:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1703764800">- Update to version 12.6.7:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1707652800">- Update to version 12.8.0:
  * Faster detection of symmetric expressions by pinv() and
    rank().
  * Expanded shift() to handle sparse matrices.
  * Expanded conv_to for more flexible conversions between sparse
    and dense matrices.
  * Added cbrt().
  * More compact representation of integers when saving matrices
    in CSV format.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1710244800">- Update to version 12.8.1:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712145600">- Update to version 12.8.2:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714824000">- Drop pkgconfig file from baselibs.conf generated -devel package
  to avoid "have choice" issues for dependents arising from both
  armadillo-devel and armadillo-32bit-devel (for example)
  providing pkgconfig(armadillo).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1715688000">- Update to version 12.8.3:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1719662400">- Update to version 14.0.0:
  * C++14 is now the minimum recommended C++ standard.
  * Faster handling of compound expressions by as_scalar(),
    accu(), dot().
  * Faster interactions between sparse and dense matrices.
  * Expanded stddev() to handle sparse matrices.
  * Expanded relational operators to handle expressions between
    sparse matrices and scalars.
  * Added .as_dense() to obtain dense vector/matrix representation
    of any sparse matrix expression.
  * Updated physical constants to NIST 2022 CODATA values.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1720440000">- Update to version 14.0.1:
  * No release notes.</changelog>
</package>
<package pkgid="f7c568e1468e1ca8dbbba189e9aa3244f582ceb25baf000b17c2bb593bc1bbf58c89edff3b32c066726222a86e615068ef75536dd2b5a5e4d8b823d616404add" name="arp-scan" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="bp160.1.13"/>
  <changelog author="mpluskal@suse.com" date="1431000000">- Update to 1.9
- Cleanup spec file with spec-cleaner
- Update project url
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1431000001">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1455451200">- Update project and download url</changelog>
  <changelog author="meissner@suse.com" date="1462968000">- arp-scan-avoid-crash.patch: avoid crash when trying capture as
  user (bsc#978596)</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Cleanup spec file with spec-cleaner
- Adjust dependencies</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 1.9.5:
  * Updated IEEE OUI and IAB MAC/Vendor files.
  * Added new --plain (-x) option to surpress printing of header
    and footer text, and only display one output line for each
    responding host.
  * Use LWP::UserAgent instead of LWP::Simple in get-oui and
    get-iab to enable the raw content to be obtained, which avoids
    Unicode/UTF-8 issues.
  * Added arp-finherprint patterns for WIZnet W5100 and Cisco IOS
    15.0.
- Drop no longer needed arp-scan-avoid-crash.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572004800">- Update to version 1.9.6 (boo#1154552):
  * Use libpcap function pcap_set_immediate_mode() instead of ioctl
    calls to ensure packets are delivered immediately. This means
    that arp-scan now requires libpcap 1.5.0 or later and will
    not work with earlier libpcap versions</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573732800">- Update to version 1.9.7:
  * Internal changes only</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dirk@matrix&gt;" date="1670241600">- update to 1.9.8:
  - Allow the use of Linux IP aliases such as eth0:0 for the interface name.
  - Permit regular MAC addresses e.g. 00:0c:29:b9:43:1b in mac-vendor.txt.
  - --limit=n option exits after n of hosts have responded, exit 1 for &lt;n
  - --resolve option to resolve responding IP addresses to hostnames
  - Potential buffer overrun in unmarshal_arp_pkt().
  - arp-scan aborts with EAGAIN on busy network or using high bandwidth
  - late ARP responses could sometimes be incorrectly flagged as duplicate
  - Updated IEEE URLs in download perl scripts.
  - Updated source for Mersenne RNG and replacement strlcat/strlcpy &amp; getopt.
  - Updated for compatability with autoconf 2.71
  - "make distcheck" works now
  - Number of responding hosts reported no longer counts duplicate packets.
  - Many typos corrected and edge cases fixed.
  - CI framework migrated from travis-ci to github actions.
  - Several new tests for "make check"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677672000">- update to 1.10.0
  * Support for POSIX.1e capabilities. Administrators can set
    cap_net_raw+p on the arp-scan binaries to allow non-root users
    to run arp scan if desired
  * MAC/Vendor file layout changed. /etc/arp-scan/mac-vendor.txt
    allows for local configuration
- build with upstream tarball</changelog>
</package>
<package pkgid="2aef12f49cbcd78a3733e2e2314a09a8f03b5f111a9cb5f4e7fcf28a4e561f6820380ad5a3048ccb3cb152dcd0aece7f58d0bbaff0b954fc4f5793dcc5de581c" name="arp-scan" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="bp160.2.1"/>
  <changelog author="mpluskal@suse.com" date="1431000000">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1455451200">- Update project and download url</changelog>
  <changelog author="meissner@suse.com" date="1462968000">- arp-scan-avoid-crash.patch: avoid crash when trying capture as
  user (bsc#978596)</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Cleanup spec file with spec-cleaner
- Adjust dependencies</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 1.9.5:
  * Updated IEEE OUI and IAB MAC/Vendor files.
  * Added new --plain (-x) option to surpress printing of header
    and footer text, and only display one output line for each
    responding host.
  * Use LWP::UserAgent instead of LWP::Simple in get-oui and
    get-iab to enable the raw content to be obtained, which avoids
    Unicode/UTF-8 issues.
  * Added arp-finherprint patterns for WIZnet W5100 and Cisco IOS
    15.0.
- Drop no longer needed arp-scan-avoid-crash.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1572004800">- Update to version 1.9.6 (boo#1154552):
  * Use libpcap function pcap_set_immediate_mode() instead of ioctl
    calls to ensure packets are delivered immediately. This means
    that arp-scan now requires libpcap 1.5.0 or later and will
    not work with earlier libpcap versions</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573732800">- Update to version 1.9.7:
  * Internal changes only</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dirk@matrix&gt;" date="1670241600">- update to 1.9.8:
  - Allow the use of Linux IP aliases such as eth0:0 for the interface name.
  - Permit regular MAC addresses e.g. 00:0c:29:b9:43:1b in mac-vendor.txt.
  - --limit=n option exits after n of hosts have responded, exit 1 for &lt;n
  - --resolve option to resolve responding IP addresses to hostnames
  - Potential buffer overrun in unmarshal_arp_pkt().
  - arp-scan aborts with EAGAIN on busy network or using high bandwidth
  - late ARP responses could sometimes be incorrectly flagged as duplicate
  - Updated IEEE URLs in download perl scripts.
  - Updated source for Mersenne RNG and replacement strlcat/strlcpy &amp; getopt.
  - Updated for compatability with autoconf 2.71
  - "make distcheck" works now
  - Number of responding hosts reported no longer counts duplicate packets.
  - Many typos corrected and edge cases fixed.
  - CI framework migrated from travis-ci to github actions.
  - Several new tests for "make check"</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677672000">- update to 1.10.0
  * Support for POSIX.1e capabilities. Administrators can set
    cap_net_raw+p on the arp-scan binaries to allow non-root users
    to run arp scan if desired
  * MAC/Vendor file layout changed. /etc/arp-scan/mac-vendor.txt
    allows for local configuration
- build with upstream tarball</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1782129600">- Add arp-scan-EACCES-as-ENOENT.patch: treat EACCES like ENOENT when
  stat'ing the MAC/vendor mapping file (ieee-oui.txt / mac-vendor.txt)
  in the current directory, so arp-scan falls through to the system
  datadir instead of failing with "Permission denied"
  (boo#1210703, gh#royhills/arp-scan#120)
- Drop obsolete RPM group</changelog>
</package>
<package pkgid="feaf8130cb35d99b0a0a9100ab81ff6456bbaff4f38582dba86093418863c00080faca7f66b1d75172bd7d02ff8d979e4332974566ddafdb35f7037f5e99a18f" name="arpack-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="bp160.1.12"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1637755200">- Disable pyarpack on armv6/7 to fix build</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643803200">- Add fix_tautological_compare_321.patch
- Apply memory constraints also on ppc64/ppc64le</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650974400">- Add an rpmlintrc for shlib-policy-name-error</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670241600">- Add memory constraints for pyarpack builds on s390x (slightly
  higher than on other 64 bit archs).
- Remove obsolete rpmlintrc.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Fix build after numpy 1.24 API changes, add
  replace_deprecated_np-complex.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1676462400">- Update to version 3.9.0
  * parpack.h and parpack.hpp: type of rwork should be real instead
    of complex.
  * Allow ritz_option {"LR", "SR", "LI", "SI"} for complex eigenvalue
    problems in ICB.
  * Replace deprecated NP complex
  * Include location of header files changed to arpack-ng
  * Many smaller bugfixes
- Drop upsteam fixed and merged patches
  * fix_tautological_compare_321.patch
  * replace_deprecated_np-complex.patch
  * Use-CMAKE_INSTALL_FULL_-dir.patch
- Rebased arpack-ng-python-module-installdir.patch</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 3.9.1:
  * pyarpack: Ensure that the matrix properties
    (symmetric/hermitian) fit the solver (CG/LDL) with which they
    are used in the tests
  * [BUG FIX] Tests for PARPACK with C/C++ bindings icb_parpack_c
    and icb_parpack_cpp are now really parallel and split the
    problem across MPI processes.
  * Update arpackmm test suite: enable solving non-symmetric tests
    with BiCG solver
  * README: Add details on Windows installation.
  * [BUG FIX] Fix install: headers in
    /path/to/local/include/arpack for ICB samples
  * [BUG FIX] Fix install: headers in
    /path/to/local/include/arpack
  * arpackmm: allow for using LA/SA magnitudes.
  * Rename icbexmm option into eigen option.
  * README: document how to use ICB.
  * [BUG FIX] arpackmm: fix restart.
  * README: document where to find arpack user's guide.
- Make tests run with '-j1' for serial flavour
  (gh#opencollab/arpack-ng#439).
- Update includedir location: arpack-ng now installs headers to
  %{_includedir}/arpack/ instead of %{_includedir}/arpack-ng/ used
  previously.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1706875200">- Add openmpi5 flavour.</changelog>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1711281600">- Remove s390x specific memory constraints based on improved memory usage</changelog>
</package>
<package pkgid="7669f283b0dd5c769bc2709ef4a794889bbc64db9b9d070a5323d4fd8ee414a8a10681a5560a96d6a31a36ca9d4df620a830200f742df80a46c8abd41203bf22" name="arphic-bkai00mp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1674043200">- amend license SUSE-Arphic to SPDX's Arphic-1999</changelog>
</package>
<package pkgid="ad688ce57c55caa10427cbf1161f2d7c36958e93e9eeab27b963b5a2eaf33d2be4d40d9d2b4fa9ff2ec07b51a64e44354d501ff759dd0070fd76839824a8ea96" name="arphic-bsmi00lp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1674043200">- amend license SUSE-Arphic to SPDX's Arphic-1999</changelog>
</package>
<package pkgid="98c28bdca91b0d15ed251380e2de4fff6006d1887a1056cd6a517657e8f3a2dca5863555a7db07602e8efb992d2b260ac668c01c8cb7640b92f8c283c8624f70" name="arphic-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1674043200">- amend license SUSE-Arphic to SPDX's Arphic-1999</changelog>
</package>
<package pkgid="f6b56961d879632123098ebc46b288042304a9d694dcc8a706fb0cf1c84f7643452c4d0cb011a3a96287f0777adb8adced05291340a66926303199942fba8330" name="arphic-gbsn00lp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1674043200">- amend license SUSE-Arphic to SPDX's Arphic-1999</changelog>
</package>
<package pkgid="b480661dc8ddc0a4384bfb8be6d0644889a46eb229f9b3a17c8930740d7a2b773a1dde76db6fd0edebfcf9a450dc8ba1e815bc1f1c1c90658e1e6fe1fec17903" name="arphic-gkai00mp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1674043200">- amend license SUSE-Arphic to SPDX's Arphic-1999</changelog>
</package>
<package pkgid="88cd8586f06ee913283cd4602cf9e0849276f3e4990cdb3e0691503f516d4d7183b5a187450724161c137499271d62bf86a3e8efd6198990e57d02d66f0c04f9" name="arphic-ukai-fonts" arch="noarch">
  <version epoch="0" ver="0.2.20080216.1" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1191585600">- new package: ttf-arphic-ukai, version 0.1.20060928.</changelog>
  <changelog author="tiwai@suse.de" date="1270814400">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic-ukai -&gt; arphic-ukai-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1333368000">- updated to 20080216:
  * This release comes as TrueType Collection with 4 font flavors:
  * AR PL UKai CN: glyph shapes according to GB18030-2000
  * AR PL UKai HK: glyph shapes according to the Ming-Uni reference font
    and HKSCS printed material published by the HKSAR government
  * AR PL UKai TW: glyph styles according to CNS11643
  * AR PL UKai TW MBE: like "AR PL UKai TW" plus MBE glyph shapes in the
    Bopomofo Extended block used for Minnan and Hakka
  * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
    concept. All other glyphs have the same style throughout all flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1674043200">- amend license SUSE-Arphic to SPDX's Arphic-1999</changelog>
</package>
<package pkgid="1760b2ebe8038560ad9a671496af2fafe822dbcff7190abcf38d532718d450c2852c8c9cc1462a6c7c365e1fa922b3a820c74430d540939940782d63eea8b7cd" name="arphic-uming-fonts" arch="noarch">
  <version epoch="0" ver="0.2.20080216.1" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1191585600">- new package: ttf-arphic-uming, version 0.1.20060928.</changelog>
  <changelog author="tiwai@suse.de" date="1270814400">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic-uming -&gt; arphic-uming-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1333368000">- updated to 0.2.20080216:
  * This release comes as TrueType Collection with 4 font flavors:
  * AR PL UMing CN: glyph shapes according to GB18030-2000
  * AR PL UMing HK: glyph shapes according to the Ming-Uni reference font
    and HKSCS printed material published by the HKSAR government
  * AR PL UMing TW: glyph styles according to CNS11643
  * AR PL UMing TW MBE: like "AR PL UMing TW" plus MBE glyph shapes in the
    Bopomofo Extended block used for Minnan and Hakka
  * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
  concept. All other glyphs have the same style throughout all flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1673179200">- amend license SUSE-Arphic to SPDX's Arphic1999</changelog>
</package>
<package pkgid="5e900bfb5b91f77d30621d2a7af5ebadcf1c4164948d636cdf0d3a22e8493eed83e01193434bf31fa7c691da9f89e7471cc6775ed7f556accbdba1cf35fb89e8" name="arping2" arch="x86_64">
  <version epoch="0" ver="2.25" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 2.15
  * Add option -m to allow setting timestamp type</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to 2.16
- Add gpg signature</changelog>
  <changelog author="aginies@suse.com" date="1481198400">- Update to new upstream release 2.17
  * Add padding to IP and MAC pings</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504180800">- Update to version 2.19
  * Make `arping` -w/-W behave like `ping` and `iputils-arping`
  * Add option -g to specify group to drop privs to</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1566388800">- update to version 2.20: no upstream changelog
- run spec-cleaner</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596110400">- Update to version 2.21
  * Use more modern pcap API calls, when available
  * Add payload data to mac ping
  * chdir(/) after chroot()
  * Misc minor cleanup
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1625918400">- Update to release 2.22
  * Build system updates only; no user-related changes.
- Drop arping-setgroups.diff (merged)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651320000">- Update to release 2.23
  * Work around VLAN bug in libpcap 1.7-1.9.0
  * Experimental support for seccomp (off by default)
  * Made -P set target MAC address (-t)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1704196800">- Update to release 2.24
  * Stricter and more correct number parsing and casting</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1725624000">- Update to release 2.25
  * seccomp (default disabled): Allow some more syscalls
  * seccomp (default disabled): Move some checks from build time to runtime
  * Sane output and exit code when sending ARP replies
  * Work around libpcap bug when linking with musl</changelog>
</package>
<package pkgid="00423f8bda51665f6756c50fa896b022485c771b7b382a5476093d6ad26b42510bbb55d85b09ff6c07a528470892229c85e0ec308c04be93dddb67e115208bf1" name="arprec-devel" arch="x86_64">
  <version epoch="0" ver="2.2.17" rel="bp160.1.13"/>
  <changelog author="scorot@free.fr" date="1345464000">- first package</changelog>
  <changelog author="scorot@free.fr" date="1345464001">- spec file enhancement</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1415188800">- Update to version 2.2.17
  * bugfix release, see included ChangeLog for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1466164800">- Fix build with GCC6 [boo#985135]
  * arprec-gcc6.patch</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- Fixup shared library package name and groups</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="6ec43e8fddcc068ce87678d5d4140502fa451398a410d6c6af760adac1e4d73971b4b0d425b7a793a6f611e785d6355c1cca5d3e986b2b81ef219544d8a7f6f6" name="arpwatch" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1630670400">- Update to version 3.1 (bsc#1185939)
  * Dropped
    + arpwatch-2.1a11-emailaddr.dif, this is now supported upstream.
    Incompatible change: Flags change from -e and -s to -w and -W
    + arpwatch-2.1a11-hname-overflow.dif: included upstream
    + arpwatch-2.1a11-tokenring.diff: Dropped token ring support
    + arpwatch-2.1a15-massagevendor.patch: new python version
    is available
    + arpwatch-MAC.patch: Fix is upstream
    + getnameinfo.patch
  * Refreshed
    + 0001-Ignore-802.1Q-frames.patch
    + arp2ethers.patch
  * Notable upstream changes:
    + Add python 2 compatibility to massagevendor (for pfsense &lt;= 2.4.4).
    + Add -Z (zero pad) and -C (compact) flags to arpwatch and arpsnmp to allow
    run time selection of zero padded or compact ethernet addresses in arp.dat.
    + arpsnmp errors now go to stderr instead of syslog.
    + Add arpwatch directory flag (-D)
    + Added the -x flag which is like -n but excludes cidrs</changelog>
  <changelog author="jsegitz@suse.com" date="1630670401">- Remove accidentially checked in manpage (arpwatch.8)</changelog>
  <changelog author="olaf@aepfle.de" date="1641816000">- remove instance units from post scripts, they can not be reloaded</changelog>
  <changelog author="dmueller@suse.com" date="1647864000">- update to 3.2:
  - Change update-ethercodes to not clobber ethercodes.dat on failure.
  - Add a configure option to specify the path to sendmail
- use https, its 2022 after all</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Update to version 3.3:
  + Fix direction of memmove() in sanity_fddi().</changelog>
  <changelog author="olaf@aepfle.de" date="1670328000">- Enable loading of ethercodes.dat with arpwatch.ETHERCODES.patch
- Log useless 0-source only once for each MAC</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1697371200">- update to 3.4:
  * build system maintenance (upgrade to autoconf 2.71)
  * add arpwatch-3.4-include-time.patch to fix build broken by it</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1704542400">- update to 3.5:
  * Make SIGHUP checkpoint arp.dat
  * Fix bug that prevented checkpoint() from being called until
    after receiving a new arp/rarp packet</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1705924800">- update to 3.6:
  * Fix bug that prevented checkpoint() from being called until
    after receiving a new arp/rarp packet
  * Remove unconditional FreeBSD configure mandir hack</changelog>
  <changelog author="meissner@suse.com" date="1721908800">- arpwatch-gcc14.patch: fixed gcc14 issue</changelog>
</package>
<package pkgid="eef9bea32655f122bcbd1afe7a7b5f933e4f0509c6559a6ed5f76ca2ab3287baa3d7657272f90a6f226a7660478872e7943a0f421cf84da1b471939b9565e6a3" name="arpwatch-ethercodes" arch="noarch">
  <version epoch="0" ver="20241212" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1605009600">- Removed URL for source0 as this causes issues with our bots</changelog>
  <changelog author="olaf@aepfle.de" date="1668168000">- sort existing oui.csv to show differences in future updates
- sort downloaded oui.csv
- move vim commands to a place where vim can find the commands</changelog>
  <changelog author="olaf@aepfle.de" date="1670846400">- Update to version 20221212</changelog>
  <changelog author="olaf@aepfle.de" date="1675944000">- Update to version 20230209</changelog>
  <changelog author="olaf@aepfle.de" date="1681992000">- Update to version 20230420
- Inject a QEMU/KVM entry</changelog>
  <changelog author="olaf@aepfle.de" date="1691496000">- Update to version 20230808</changelog>
  <changelog author="olaf@aepfle.de" date="1702382400">- Update to version 20231212</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 20240404</changelog>
  <changelog author="olaf@aepfle.de" date="1723118400">- Update to version 20240808</changelog>
  <changelog author="olaf@aepfle.de" date="1734004800">- Update to version 20241212</changelog>
</package>
<package pkgid="a8103b8b37de730bf885cf9589c6a8b49c5a9048b6a6168ec20a5859e5b6400f17a8fc33af290adc271003e4c14edb0f0715804a24f41d6406122f3471b231fc" name="arpwatch-ethercodes-build" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.com" date="1630670400">- Update to version 3.1 (bsc#1185939)
  * Dropped
    + arpwatch-2.1a11-emailaddr.dif, this is now supported upstream.
    Incompatible change: Flags change from -e and -s to -w and -W
    + arpwatch-2.1a11-hname-overflow.dif: included upstream
    + arpwatch-2.1a11-tokenring.diff: Dropped token ring support
    + arpwatch-2.1a15-massagevendor.patch: new python version
    is available
    + arpwatch-MAC.patch: Fix is upstream
    + getnameinfo.patch
  * Refreshed
    + 0001-Ignore-802.1Q-frames.patch
    + arp2ethers.patch
  * Notable upstream changes:
    + Add python 2 compatibility to massagevendor (for pfsense &lt;= 2.4.4).
    + Add -Z (zero pad) and -C (compact) flags to arpwatch and arpsnmp to allow
    run time selection of zero padded or compact ethernet addresses in arp.dat.
    + arpsnmp errors now go to stderr instead of syslog.
    + Add arpwatch directory flag (-D)
    + Added the -x flag which is like -n but excludes cidrs</changelog>
  <changelog author="jsegitz@suse.com" date="1630670401">- Remove accidentially checked in manpage (arpwatch.8)</changelog>
  <changelog author="olaf@aepfle.de" date="1641816000">- remove instance units from post scripts, they can not be reloaded</changelog>
  <changelog author="dmueller@suse.com" date="1647864000">- update to 3.2:
  - Change update-ethercodes to not clobber ethercodes.dat on failure.
  - Add a configure option to specify the path to sendmail
- use https, its 2022 after all</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Update to version 3.3:
  + Fix direction of memmove() in sanity_fddi().</changelog>
  <changelog author="olaf@aepfle.de" date="1670328000">- Enable loading of ethercodes.dat with arpwatch.ETHERCODES.patch
- Log useless 0-source only once for each MAC</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1697371200">- update to 3.4:
  * build system maintenance (upgrade to autoconf 2.71)
  * add arpwatch-3.4-include-time.patch to fix build broken by it</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1704542400">- update to 3.5:
  * Make SIGHUP checkpoint arp.dat
  * Fix bug that prevented checkpoint() from being called until
    after receiving a new arp/rarp packet</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1705924800">- update to 3.6:
  * Fix bug that prevented checkpoint() from being called until
    after receiving a new arp/rarp packet
  * Remove unconditional FreeBSD configure mandir hack</changelog>
  <changelog author="meissner@suse.com" date="1721908800">- arpwatch-gcc14.patch: fixed gcc14 issue</changelog>
</package>
<package pkgid="a30f4711b392e6b2f7f9c92c0e48fb293031bf388600c7a1d2bc5b223a7e8566f3ba2d51e8d32c31eac7882b874e4e4e196568d5ec27e8dfce8e18c29b4bb276" name="art-ctlscripts" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="bp160.1.2"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1716897600">- Initial OBS release.</changelog>
  <changelog author="info@paolostivanin.com" date="1716897601">- Update to version 1.0.1:
  * fixed typo in ght.ctl
  * added simple B&amp;W mixer
  * color mix: added subtract blend mode
  * reworked gamut compression to make it compliant with ACES reference implementation
  * added simple split toning
  * added simple exposure compensation
  * use rec2020 for gamma
  * some tweaks to the odt default parameters
  * added channel mixer and gamma/slope correction scripts
  * some tweaks to GHT</changelog>
</package>
<package pkgid="998a38355d8a0f4b0dca616c2b4b64c3e5afdfa8145573824272f62883da6fbc82e70ddbf24d227e8e505a0b0c504875616daba02fa74ba19bb5b77ed235d062" name="artem" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="bp160.1.15"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1712923200">- Initial package</changelog>
</package>
<package pkgid="9ebbc92bebe9e9da20334f355b9f87fba489ac02291a75482ad6f11d8cb4cebe84b0a09153af5583914008126f51640237cd471c73c42f42595c9ca3bb8e7f93" name="arti" arch="x86_64">
  <version epoch="0" ver="1.2.5~0" rel="bp160.1.13"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1698667200">- Add _constraints file to avoid build failures</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1699876800">- Update to version 1.1.10:
  Arti 1.1.10 continues work on support for onion services in
  Arti. At last, we can (technically) run as an onion service...
  though not yet in a useful way. (Onion services don't yet recover
  correctly after a restart, outdated keys are not removed, and we
  are missing other important security features.)
  [#]## Breaking changes in lower-level crates
  - The [`IoErrorExt`] trait in [`tor-basic-utils`] is now
    sealed. ([!1654])
  - The [`Requestable`] trait in [`tor-dirclient`] is now sealed,
    and most of its members are now private. ([!1679])
  - In [`tor-cell`], stream and circuit IDs are now inherently
    non-zero. To represent an ID that might be zero on the wire, we
    now use
    `Option&lt;StreamId&gt;` or `Option&lt;CircId&gt;`. ([#1080], [!1697])
  - In [`tor-cell`], `CREATE2` handshake types are no longer raw
    `u16` values. ([!1703])
  - In [`tor-cert`], `encode_and_sign` now returns an
    `Ed25519EncodedCert` rather than a raw `Vec&lt;u8&gt;`. ([!1702])
  [#]## Client features
  - Arti can now be configured to listen for connections on
    multiple arbitrary addresses—not just `localhost`. ([!1613])
  [#]## Key manager
  - The key manager code now has improved support for generating
    keypairs, keys with derived data, and other structures needed for
    onion services. ([!1653])
  - The key manager now encodes whether a key is private or public in its
    file extension. ([!1672])
  - The key manager now disallows path components that could lead
    (under some programming errors) to directory traversal. ([!1661])
  - We can now list keys by path and type; this is important so that
    we can identify disused keys and eventually expire them. ([!1677])
  See https://gitlab.torproject.org/tpo/core/arti/-/blob/c39857a8a63200ed5ed539d1f9231b05d7da7e0d/CHANGELOG.md
  for more info</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1702036800">- Update to version 1.1.11:
  Arti 1.1.11 continues work on support for running onion services.
  Onion services are now working in our testing, and we expect we'll
  have something testable by others in our next release.
  Arti 1.1.11 also increases our MSRV (Minimum Supported Rust Version)
  to 1.70, in accordance with our [MSRV policy].
  [#]## Onion service development
  - Correct our handling of BEGIN and END messages to bring them
    into conformance with the C Tor implementation and the specification.
    ([#1077], [!1694], [!1738])
  - In our key manager, use macros to define key specifiers, instead of
    repeating the same boilerplate code. ([#1069], [#1093], [!1710],
    [!1733])
  - Refactoring and refinement on the definitions of onion-service-related
    errors. ([!1718], [!1724], [!1750], [!1751], [!1779])
  - Add a "time-store" mechanism for (as correctly as possible) storing and loading
    future timestamps, even in the presence of system clock skew ([!1723], [!1774])
  - Implement a replay-log backend to prevent INTRODUCE replay attacks
    against onion services. ([!1725])
  - Improved encoding for key-denotators in the key manager. ([#1063],
    [#1070], [!1722])
  - Allow a single key to have more than one denotator in its path.
    ([#1112], [!1747])
  - Use an order-preserving-encryption back-end to generate
    monotonically increasing revision counters for onion service
    descriptors.  We do this to ensure a reproducible series of counters
    without leaking our clock skew.  ([#1053], [!1741], [!1744])
  - Deprecate key types for INTRODUCE-based authentication:
    C tor has never implemented this, and we do not plan to implement it
    without additional specification work. ([#1037], [!1749])
  - When establishing an introduction point, send the `intro_dos`
    extension as appropriate. ([#723], [!1740])
  - Added conversion functions and initial persistence support for
    introduction point keys. ([!1756])
  - Start work on introduction point persistence. ([!1755], [!1765]).
  - Revert to our intended configuration format for onion service proxy rules.
    ([#1058], [!1771])
  [#]## Client features
  - Backend and API code for the "ntor-v3" circuit-extension handshake.
    This handshake adds the ability to send additional options
    from the client to the relay when creating or extending a circuit,
    and will eventually be used to negotiate protocol features like
    RTT-based congestion control and UDP-over-Tor support.
    ([!1720], [!1739])</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1705320000">- Update to version 1.1.12~0:
  Arti 1.1.12 continues work on support for running onion services.
  You can now launch an onion service and expect it to run,
  though the user experience leaves a lot to be desired.
  Don't rely on this onion service implementation for security yet;
  there are a number of [missing security features]
  we will need to develop before we can recommend them
  for actual use.
  https://gitlab.torproject.org/tpo/core/arti/-/blob/3c44d849f4c3332ccbb86328392d54e7c1d8e9b6/CHANGELOG.md
- Updated the ignored RUSTSEC advisories, as per the project
  recommended way of building the crate</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1712059200">- Update to version 1.2.1:
  * Reorganize onion service code.
  * Design work for out-of-memory handling, which is necessary for
    onion service security.
  * Initial implementation work for onion service [vanguards],
    which are needed to improve onion service security.
    This is not yet complete.
  * Added support for unmanaged pluggable transports
  * Begun work to improve Tor's relay cell protocol with support
    for packed and fragmented messages
- Update to version 1.2.0
  * Initial support for running onion services.
  * Fixed a number of bugs and security issues.
  * Made the onion-service-service feature non-experimental.
  For a full changelog, refer to the package changelog
  (/usr/share/doc/packages/arti/CHANGELOG.md)</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1712059201">- Added LICENSE-APACHE and LICENSE-MIT to %files
- Added README.md and CHANGELOG.md to %files</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1712232000">- Update constraints to build on more workers (especially for aarch64)</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1717675200">- Update to version 1.2.4:
  * Development on onion services, and on the RPC subsystem.
  * This release restores the faravahar directory authority,
    which has a new location and keys.
  * Fixed two-medium security issues, tracked as TROVE-2024-005
    and TROVE-2024-006.
  * For a full changelog, refer to the installed package changelog
    (/usr/share/doc/packages/arti/CHANGELOG.md)
- Update to version 1.2.3:
  * Fixes a high-severity issue affecting onion services and
    clients connecting to onion services with 'lite' vanguards
    (the default) enabled. TROVE-2024-003
  * This release also fixes a medium-severity issue affecting
    'full' vanguards. TROVE-2024-004
  * For a full changelog, refer to the installed package changelog
    (/usr/share/doc/packages/arti/CHANGELOG.md)
- Update to version 1.2.2:
  * Arti now supports Vanguards for improved security
    against guard discovery for onion service circuits.
    By default, we use the vanguards-lite algorithm;
    the vanguards-full algorithm can be configured.
  * Update to use the new identity key for the tor26 directory
    authority.
  * Fix an inadvertent recursion bug when converting TorAddrError
    to arti_client::Error.
  * Improve reliability of bootstrap status reporting.
  * Convert to use figment instead of config-rs as our
    configuration backend, for improved error messages.
  * For a full changelog, refer to the installed package changelog
    (/usr/share/doc/packages/arti/CHANGELOG.md)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1719489600">- Increase RAM needed per thread in %limit_build to avoid OOM on aarch64</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1720958400">- Update to version 1.2.5:
  * Stop publishing the obsolete arti-hyper crate
  * Update curve25519-dalek to avoid a low-severity timing
    vulnerability. (TROVE-2024-007)
  * With full vanguards, client rendezvous circuits
    do not reuse the final vanguard as the rendezvous point.
    (TROVE-2024-008)
  * Some RPC development
  * Add skeleton, including (experimental): arti-relay crate,
    relay cargo feature in arti-client,
    relay command line argument to arti
  * Add a key material export facility for some of our TLS
    implementations.
  * Tolerate removal of files from Arti's cache directory.</changelog>
</package>
<package pkgid="67de60c1ac639839080c99124425fa243830198f7b1d5fa9e20206a5158a943a42098e2d2cdf942ab749b44a6653e3c2a88b8a253057994c06a666439ae4c97b" name="artifacts" arch="noarch">
  <version epoch="0" ver="20221219" rel="bp160.1.3"/>
  <changelog author="jengelh@inai.de" date="1534420800">- Compact description for size. Wrap it, too.</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1553688000">- update to v20190320
  * 9 months worth of artifact additions</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578398400">- Switch to build and distribution under python3 as py2 is obsolete</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1586347200">- update to v20200118
  * 10 months worth of artifact additions</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1654084800">-update to v20220429
  * 27 months worth of artifact additions</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1671192000">- Portions of the libyal family of forensic modules now require python 3.7 or newer. Update spec file as follows
  - # security:forensics is now only supporting python 3.7 or newer
  - BuildRequires:  python3-setuptools &gt; 3.7
  - BuildRequires:  python3-packaging &gt; 3.7
  - BuildRequires:  %{python_module base &gt;= 3.7}</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679918400">- Do not require all python versions to build: primary python is
  sufficient.</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1689681600">- update to v20221219
  * 8 months worth of artifact additions</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1690545600">- update to python 3.11 as the internal build tool.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1742817600">- Use the primary python for building
- Run tests
- Add PyYAML as a runtime dependency</changelog>
</package>
<package pkgid="c92ff991316a07f3108d396a84bf189069d4b7aade5ee3fa9f04017c08223ce3fa12e1ee0cb2d7dfcdb844c3d7a3e45d3bd421b88d209a6a1efbe212bfb8aaf9" name="artifacts-validator" arch="noarch">
  <version epoch="0" ver="20221219" rel="bp160.1.3"/>
  <changelog author="jengelh@inai.de" date="1534420800">- Compact description for size. Wrap it, too.</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1553688000">- update to v20190320
  * 9 months worth of artifact additions</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578398400">- Switch to build and distribution under python3 as py2 is obsolete</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1586347200">- update to v20200118
  * 10 months worth of artifact additions</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1654084800">-update to v20220429
  * 27 months worth of artifact additions</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1671192000">- Portions of the libyal family of forensic modules now require python 3.7 or newer. Update spec file as follows
  - # security:forensics is now only supporting python 3.7 or newer
  - BuildRequires:  python3-setuptools &gt; 3.7
  - BuildRequires:  python3-packaging &gt; 3.7
  - BuildRequires:  %{python_module base &gt;= 3.7}</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1679918400">- Do not require all python versions to build: primary python is
  sufficient.</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1689681600">- update to v20221219
  * 8 months worth of artifact additions</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1690545600">- update to python 3.11 as the internal build tool.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1742817600">- Use the primary python for building
- Run tests
- Add PyYAML as a runtime dependency</changelog>
</package>
<package pkgid="1f953b8559555a0948180c6ab3da2c209dd1675d215d97b827d74c966715ec24ecdb84ca5987f2f3a884b94424e1c17d0f23f6a98a7ccdb4d45183599a471535" name="artikulate" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- No code change since 24.12.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * snapcraft: Release stable</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="63c8348c9a96287251b8e07b4b57f1a8e6ff7d826f1ecc62868848c4fdeb7e4add777b5ae5ca3b332608b67687d7f582749f9082d60b6d1286d05919a9abe564" name="artikulate-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- No code change since 24.12.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * snapcraft: Release stable</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="3984d5486e09c53a3e54d53ef67b112909ec5fba98f26248262f683412027321539338a00cc24ade2b76cbd439d7cf1b18cea2829027cf389524818df09e12f6" name="as10k1" arch="x86_64">
  <version epoch="0" ver="A0.99" rel="bp160.1.6"/>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="tiwai@suse.de" date="1576843200">- Fix hdspmixer build error with the latest alsa-lib:
  0001-hdspmixer-Use-__u32-and-__u64-for-RMS-array-types.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582632000">- Update to 1.2.2 (do not support Python 2 and PyGtk).
- Remove
  0001-hdspmixer-Use-__u32-and-__u64-for-RMS-array-types.patch
  which was included upstream.</changelog>
  <changelog author="tiwai@suse.de" date="1603454400">- Drop unnecessary buildreq alsa-topology-devel (bsc#1178064)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to version 1.2.5 (jsc#PED-6566):
  * hdspmixer: add output loopback buttons
  * hdspmixer: enhance saving of presets</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add tarball signature and keyring</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706529600">- hwmixvolume: replace the unversioned python shebang to point to
  python3 (alsa-project/alsa-tools@fb04384 claims it is compatible
  to python3).
- Change hwmixvolume's dependency on pyalso to python3-alsa: ensure
  we get the main python interpreters' alsa module (matching the
  /usr/bin/python3 shebang) (boo#1219312).</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1706875200">- Update to version 1.2.11:
  * hdajackretask: resolution limit for wide screen, pipewire support
  * hdspmixer: fix coredump
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-tools
- Fix build with gcc7:
  0001-hdajackretask-Fix-build-with-gcc7.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ba493400893e31316b7a9c05383e9af063be02d257bfce14a02d73c4a01443fef4593fb60a188735fbc3342f413c8df514181b580d0bdaffb69131801f7a4c68" name="asar" arch="noarch">
  <version epoch="0" ver="3.2.13" rel="bp160.1.11"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1667563200">- New upstream version 3.2.2
  * Fix allowing nested empty directories.
- New upstream version 3.2.1
  * Rename package to @electron/asar
- Correct bogus “0.0.0-development” version reported by the program.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1673956800">- New upstream version 3.2.3
  * fix bad output on unknown CLI command
  * update vendored dependencies</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1695124800">- New upstream version 3.2.5
  * properly handle rejections on `createPackageWithOptions`</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1695729600">- New upstream version 3.2.6
  * Don't overwrite existing folders</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1695816000">- New upstream version 3.2.7
  * ensure that files/folders whose names are properties of Object.prototype are packaged/extracted correctly</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1699444800">- New upstream version 3.2.8
  * better error message when extracting a file that doesn't exist in the archive</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1709726400">- New upstream version 3.2.9
  * fix symlink pointing error in filesystem.insertLink</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1714910400">- New upstream release 3.2.10
  * Fix relative link error (gh#electron/asar#308)</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1725969600">- New upstream release 3.2.11
  * complete rewrite of the program in Typescript
  * ensure symlinks do not write unexpectedly (gh#electron/asar#322)
- Run test suite in %check</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1726056000">- New upstream release 3.2.13
  * Export a `default` property (gh#electron/asar#325)</changelog>
</package>
<package pkgid="73939a76c43eb150550170313511f7a27daea0daa38018d7b6e035fdf02d56ebff7bf3ebef70e6ef132bfcee52d6baa83b2dfbddba04738e0f870774c963ccda" name="asciidoc" arch="noarch">
  <version epoch="0" ver="10.2.1" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1603281600">- Update to version 9.0.3
  * Fix extra newline characters inserted into generated source
  * Validate line endings as part of test suite</changelog>
  <changelog author="idonmez@suse.com" date="1604404800">- Update to version 9.0.4
  * Fix listing out installed plugins (e.g. --filter list)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 9.0.5:
  - Use config newline setting in system attribute evaulation
  - Update to deadsnakes/python@v2.0.2</changelog>
  <changelog author="elimat@opensuse.org" date="1614600000">- update to version 9.1.0
  * Can specify a line range when using the include macro.
  * Setting the SGML_CATALOG_FILES environment variable will set --catalogs
    on xmllint within a2x.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651320000">- Update to version 10.1.4
  * Add top-level __version__ and VERSION module exports
  * Fix self reference errors in AsciiDocApi
  * Add back asciidoc execute print in a2x verbose
- Update to version 10.0.0
  * AsciiDoc.py has been rewritten to be a proper Python package
  * Support for overriding the bundled *.conf files is done through
    CLI flags, environment variables, etc., and not through directly
    editing the files within the installation.
  * Importing asciidoc should no longer require the asciidocapi.py script
    and can be done through regular python import
  * The APIs of the asciidoc and a2x scripts are now considered
    "provisional" with no guarantee of BC between releases with the
    exception of the asciidoc.execute method.
- Update to version 9.1.1
  * Cleanup outfile on system-exiting exceptions
- Rebased asciidoc.version.patch</changelog>
  <changelog author="coolo@suse.com" date="1651492800">- Add a subpackage that brings in the requirements for building pdf (too much
  for default, recommends won't help in building OBS packages)
- Adding multibuild flavor to verify the latex dependencies are complete
- Motivated by nut failing to build pdf in SP4</changelog>
  <changelog author="dimstar@opensuse.org" date="1655899200">- Do not recommend asciidoc-latex-backend: Do not pull in the LaTeX
  stack on all systems using asciidoc.
- Supplement asciidoc and dblatext with the -latex-backend sub
  package: users that have both, asciidoc and dblatex installed,
  and thus already opted-in to LaTeX, will also get the backend
  installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655985600">- Update to version 10.2.0:
  + Future feature:
  - As part of the intended 10.3.0 release, the following
    document attribute flags will be reserved for modifying
    asciidoc-py runtime behavior:
    . future-compat
    . legacy-compat
    . compat-mode
  - Please see GH issue #254 for more information.
  + Bug fixes: Fix verbose output not working when using a2x or
    asciidoc entry points.
  + Miscellaneous: Automate publishing asciidoc-py website as part
    of release process.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Remove python3 shebang from sitelib files (bsc#1212476)</changelog>
  <changelog author="jgwang@suse.com" date="1727006400">- Update to version 10.2.1
  + Bug fixes:
  * Fix deprecation warning on escaping table separators
  + Miscellaneous:
  * Include manpage source files to sdist archive
  * Fix setting up debian backports in Dockerfile</changelog>
</package>
<package pkgid="1f5be589fb776ca8b47f1dfc2f1c5f7bab8ad276d7926eb3b045bebec2f81da92bd49c724ee46e44a44e995359e69b4ae73f657a8e4708fad2e9b0bba1a33972" name="asciidoc-examples" arch="noarch">
  <version epoch="0" ver="10.2.1" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1603281600">- Update to version 9.0.3
  * Fix extra newline characters inserted into generated source
  * Validate line endings as part of test suite</changelog>
  <changelog author="idonmez@suse.com" date="1604404800">- Update to version 9.0.4
  * Fix listing out installed plugins (e.g. --filter list)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 9.0.5:
  - Use config newline setting in system attribute evaulation
  - Update to deadsnakes/python@v2.0.2</changelog>
  <changelog author="elimat@opensuse.org" date="1614600000">- update to version 9.1.0
  * Can specify a line range when using the include macro.
  * Setting the SGML_CATALOG_FILES environment variable will set --catalogs
    on xmllint within a2x.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651320000">- Update to version 10.1.4
  * Add top-level __version__ and VERSION module exports
  * Fix self reference errors in AsciiDocApi
  * Add back asciidoc execute print in a2x verbose
- Update to version 10.0.0
  * AsciiDoc.py has been rewritten to be a proper Python package
  * Support for overriding the bundled *.conf files is done through
    CLI flags, environment variables, etc., and not through directly
    editing the files within the installation.
  * Importing asciidoc should no longer require the asciidocapi.py script
    and can be done through regular python import
  * The APIs of the asciidoc and a2x scripts are now considered
    "provisional" with no guarantee of BC between releases with the
    exception of the asciidoc.execute method.
- Update to version 9.1.1
  * Cleanup outfile on system-exiting exceptions
- Rebased asciidoc.version.patch</changelog>
  <changelog author="coolo@suse.com" date="1651492800">- Add a subpackage that brings in the requirements for building pdf (too much
  for default, recommends won't help in building OBS packages)
- Adding multibuild flavor to verify the latex dependencies are complete
- Motivated by nut failing to build pdf in SP4</changelog>
  <changelog author="dimstar@opensuse.org" date="1655899200">- Do not recommend asciidoc-latex-backend: Do not pull in the LaTeX
  stack on all systems using asciidoc.
- Supplement asciidoc and dblatext with the -latex-backend sub
  package: users that have both, asciidoc and dblatex installed,
  and thus already opted-in to LaTeX, will also get the backend
  installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655985600">- Update to version 10.2.0:
  + Future feature:
  - As part of the intended 10.3.0 release, the following
    document attribute flags will be reserved for modifying
    asciidoc-py runtime behavior:
    . future-compat
    . legacy-compat
    . compat-mode
  - Please see GH issue #254 for more information.
  + Bug fixes: Fix verbose output not working when using a2x or
    asciidoc entry points.
  + Miscellaneous: Automate publishing asciidoc-py website as part
    of release process.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Remove python3 shebang from sitelib files (bsc#1212476)</changelog>
  <changelog author="jgwang@suse.com" date="1727006400">- Update to version 10.2.1
  + Bug fixes:
  * Fix deprecation warning on escaping table separators
  + Miscellaneous:
  * Include manpage source files to sdist archive
  * Fix setting up debian backports in Dockerfile</changelog>
</package>
<package pkgid="8d07914ce1384f3fb024d916cc164aa271c007f124e8781439f06c77aeb6c262e0325961917d781ff6ab6d5cb38805ff0ab7d4e415abb10df0ffba8c710545f8" name="asciidoc-latex-backend" arch="noarch">
  <version epoch="0" ver="10.2.1" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1603281600">- Update to version 9.0.3
  * Fix extra newline characters inserted into generated source
  * Validate line endings as part of test suite</changelog>
  <changelog author="idonmez@suse.com" date="1604404800">- Update to version 9.0.4
  * Fix listing out installed plugins (e.g. --filter list)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 9.0.5:
  - Use config newline setting in system attribute evaulation
  - Update to deadsnakes/python@v2.0.2</changelog>
  <changelog author="elimat@opensuse.org" date="1614600000">- update to version 9.1.0
  * Can specify a line range when using the include macro.
  * Setting the SGML_CATALOG_FILES environment variable will set --catalogs
    on xmllint within a2x.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651320000">- Update to version 10.1.4
  * Add top-level __version__ and VERSION module exports
  * Fix self reference errors in AsciiDocApi
  * Add back asciidoc execute print in a2x verbose
- Update to version 10.0.0
  * AsciiDoc.py has been rewritten to be a proper Python package
  * Support for overriding the bundled *.conf files is done through
    CLI flags, environment variables, etc., and not through directly
    editing the files within the installation.
  * Importing asciidoc should no longer require the asciidocapi.py script
    and can be done through regular python import
  * The APIs of the asciidoc and a2x scripts are now considered
    "provisional" with no guarantee of BC between releases with the
    exception of the asciidoc.execute method.
- Update to version 9.1.1
  * Cleanup outfile on system-exiting exceptions
- Rebased asciidoc.version.patch</changelog>
  <changelog author="coolo@suse.com" date="1651492800">- Add a subpackage that brings in the requirements for building pdf (too much
  for default, recommends won't help in building OBS packages)
- Adding multibuild flavor to verify the latex dependencies are complete
- Motivated by nut failing to build pdf in SP4</changelog>
  <changelog author="dimstar@opensuse.org" date="1655899200">- Do not recommend asciidoc-latex-backend: Do not pull in the LaTeX
  stack on all systems using asciidoc.
- Supplement asciidoc and dblatext with the -latex-backend sub
  package: users that have both, asciidoc and dblatex installed,
  and thus already opted-in to LaTeX, will also get the backend
  installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655985600">- Update to version 10.2.0:
  + Future feature:
  - As part of the intended 10.3.0 release, the following
    document attribute flags will be reserved for modifying
    asciidoc-py runtime behavior:
    . future-compat
    . legacy-compat
    . compat-mode
  - Please see GH issue #254 for more information.
  + Bug fixes: Fix verbose output not working when using a2x or
    asciidoc entry points.
  + Miscellaneous: Automate publishing asciidoc-py website as part
    of release process.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Remove python3 shebang from sitelib files (bsc#1212476)</changelog>
  <changelog author="jgwang@suse.com" date="1727006400">- Update to version 10.2.1
  + Bug fixes:
  * Fix deprecation warning on escaping table separators
  + Miscellaneous:
  * Include manpage source files to sdist archive
  * Fix setting up debian backports in Dockerfile</changelog>
</package>
<package pkgid="e698e1a4d554c3d79b1d6d266106dda73ad316f9a7c9f716e78a52af6046458c40617acfeff8b24f89d88e18f9f348835782061f987f37904c6497941403ddfb" name="asciinema" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="bp160.1.10"/>
  <changelog author="avvissu@yandex.by" date="1468411200">- Upadate to 1.3.0:
  * see: /usr/share/doc/packages/asciinema/CHANGELOG
- Create a new spec file for building RPM on Python.</changelog>
  <changelog author="avvissu@yandex.by" date="1494331200">- Update to 1.4.0:
  * see: /usr/share/doc/packages/asciinema/CHANGELOG</changelog>
  <changelog author="avvissu@yandex.by" date="1518350400">- Update to 2.0.0:
  * see: /usr/share/doc/packages/asciinema/CHANGELOG</changelog>
  <changelog author="avvissu@yandex.by" date="1522929600">- Upadte to 2.0.1:
  * Fixed example in asciicast v2 format doc
  * Replaced deprecated encodestring with encodebytes
  * Fixed location of config dir (mv ~/.asciinema ~/.config/asciinema)
  * Internal refactorings</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1547380800">- Update to 2.0.2
  * Official support for Python 3.7
  * Recording is now possible on US-ASCII locale
  * Improved Android support
  * Possibility of programatic recording with
    asciinema.record_asciicast function
  * Uses new JSON response format added recently to asciinema-server
  * Tweaked message about how to stop recording
  * Added proper description and other metadata to Python package</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1555502400">- Modernise spec file
- Reduce space usage by fdupes</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1634558400">- Update to 2.1.0:
  * Ability to pause/resume terminal capture with `C-\` key
    shortcut
  * Desktop notifications - only for the above pause feature at
    the moment
  * Removed dependency on tput/ncurses (thanks @arp242 / Martin
    Tournoij!)
  * ASCIINEMA_REC env var is back (thanks @landonb / Landon
    Bouma!)
  * Terminal answerbacks (CSI 6 n) in `asciinema cat` are now
    hidden (thanks @djpohly / Devin J. Pohly!)
  * Codeset detection works on HP-UX now (thanks @michael-o /
    Michael Osipov!)
  * Attempt at recording to existing file suggests use of
    `--overwrite` option now
  * Upload for users with very long `$USER` is fixed
  * Added official support for Python 3.8 and 3.9
  * Dropped official support for EOL-ed Python 3.4 and 3.5
  * Internal refactorings</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1657886400">- update to 2.2.0:
  * Added official support for Python 3.8, 3.9, 3.10
  * Dropped official support for Python 3.5
  * Added `--cols` / `--rows` options for overriding size of pseudo-terminal reported to recorded program
  * Improved behaviour of `--append` when output file doesn't exist
  * Keyboard input is now explicitly read from a TTY device in addition to stdin (when stdin != TTY)
  * Recorded program output is now explicitly written to a TTY device instead of stdout
  * Dash char (`-`) can now be passed as output filename to write asciicast to stdout
  * Diagnostic messages are now printed to stderr (without colors when stderr != TTY)
  * Improved robustness of writing asciicast to named pipes
  * Lots of codebase modernizations (many thanks to Davis @djds Schirmer!)
  * Many other internal refactorings</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1693224000">- update to 2.3.0:
  * Added official support for Python 3.11
  * Dropped official support for Python 3.6
  * Implemented markers in rec and play -m commands
  * Added --loop option for looped playback in play command
  * Added --stream and --out-fmt option for customizing output of play command
  * Improved terminal charset detection (thanks @djds)
  * Extended cat command to support multiple files (thanks @Low-power)
  * Improved upload error messages
  * Fixed direct playback from URL
  * Made raw output start with terminal size sequence (\e[8;H;Wt)
  * Prevented recording to stdout when it's a TTY
  * Added target file permission checks to avoid ugly errors
  * Removed named pipe re-opening, which was causing hangs in certain scenarios
  * Improved PTY/TTY data reading - it goes in bigger chunks now (256 kb)
  * Fixed deadlock in PTY writes (thanks @Low-power)
  * Improved input forwarding from stdin
  * Ignored OSC responses in recorded stdin stream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1698148800">- update to 2.4.0:
  * When recording without file arg we now ask whether to save,
    upload or discard the recording
  * Added capture of terminal resize events
  * Fixed blocking write error when PTY master is not ready
  * Fixed "broken pipe" errors when piping certain commands during
    recording
  * Fixed crash during playback of cast files with trailing blank
    line
- Requires Python &gt;= 3.7</changelog>
</package>
<package pkgid="19a914c8ea45b9721e68ea6500ce84ffffee325a93f9bd3302d5961e5509a703857d97548999a71ce2b6157bc248d6b3a0158713e1d9c7a7d0a1034a07eaa31f" name="asclock" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="bp160.1.12"/>
  <changelog author="schwab@suse.de" date="1154692800">- New package.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1415102400">- Due to broken prjconf I missed adding imake as buildRequire
  in the previous change.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591963200">- Fix building with gcc10
- Modernise spec file with spec-cleaner
- Honor optflags
- Reduce duplicities using fdupes</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723809600">- Add asclock-C99.diff which declares a function defined after use so
  that the cource code does not violate C99 and builds with GCC 14.</changelog>
</package>
<package pkgid="165c3ca5f4df7be7ed88244394a08820019cdb1db03e8b0a52cb69c36e5696ed5faf1cab7049f379497dcaec861074090cea60490dcc477e4dd68a118cc244a8" name="asco" arch="x86_64">
  <version epoch="0" ver="0.4.11" rel="bp160.1.12"/>
  <changelog author="dmitry_r@opensuse.org" date="1412164800">- Initial package, version 0.4.9
- Add asco_unbuffered.patch for QUCS</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1412596800">- Change package license to GPL-2.0 according to source headers</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to version 0.4.10:
  * Simulation re-runs are now supported in Spectre during an
    optimization.
  * Minor enhancements in the RF module.
  * Support for the newest MPICH versions.
  * The 'postp' tool is more robust to changes of each SPICE output
    format.
  * Support for the newest versions of MPICH documented.
- Fix implicit declaration error of 'gethostname':
  * Add asco-0.4.10-fix-implicit-declaration.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1591876800">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651320000">- Update to version 0.4.11
  * Minor improvements to work/warn about changes in simulators
    output format.
  * Improvements in Spectre support.
  * Bug fixes.
- Drop upstream fixed asco-0.4.10-fix-implicit-declaration.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685448000">- Trim filler wording from descriptions
- Trim R/TM signs as per
  https://en.opensuse.org/openSUSE:Package_description_guidelines</changelog>
</package>
<package pkgid="0bc41c3e53e319016d1e786233d5e077d7795d577cca55148d9a138847a852309bee0c0de332be26e4292e1c9e03d99b3aee1ac223c2113f1d5df0786f98db57" name="asco-doc" arch="noarch">
  <version epoch="0" ver="0.4.11" rel="bp160.1.12"/>
  <changelog author="dmitry_r@opensuse.org" date="1412164800">- Initial package, version 0.4.9
- Add asco_unbuffered.patch for QUCS</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1412596800">- Change package license to GPL-2.0 according to source headers</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to version 0.4.10:
  * Simulation re-runs are now supported in Spectre during an
    optimization.
  * Minor enhancements in the RF module.
  * Support for the newest MPICH versions.
  * The 'postp' tool is more robust to changes of each SPICE output
    format.
  * Support for the newest versions of MPICH documented.
- Fix implicit declaration error of 'gethostname':
  * Add asco-0.4.10-fix-implicit-declaration.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1591876800">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651320000">- Update to version 0.4.11
  * Minor improvements to work/warn about changes in simulators
    output format.
  * Improvements in Spectre support.
  * Bug fixes.
- Drop upstream fixed asco-0.4.10-fix-implicit-declaration.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685448000">- Trim filler wording from descriptions
- Trim R/TM signs as per
  https://en.opensuse.org/openSUSE:Package_description_guidelines</changelog>
</package>
<package pkgid="8f5b7d9c4d144a17d5d05e7f982d34c798f93a72f9892db0ea6105b324c74f6cf74b024e360fc753f64cb2255fbf41d3b8acd82373cf9e5c42132ffe111f72a1" name="aseqview" arch="x86_64">
  <version epoch="0" ver="0.2.8" rel="bp160.1.12"/>
  <changelog author="puzel@novell.com" date="1267790400">- add aseqview-quote-macros.patch - fix build
- minor spec cleanup</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tiwai@suse.de" date="1323777600">- fix license to GPL-2.0 only (bnc#735017)</changelog>
  <changelog author="tiwai@suse.de" date="1453204800">- update to version 0.2.8;
  * Added ports to control tuning events
  * Ports are disabled per default, explicitly capable via -T option
  * Fix mix-up of g_free and free
  * Fix visualization of tuning information after reset.
    Default to C-tuning (dumper off) and Am-tuning (dumper on).
  * Fix playback of multiple songs keeping connection of tuning
    ports</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619092800">- Fixed and modernized SPEC file
  * Replace broken URL with latest upstream</changelog>
  <changelog author="tiwai@suse.de" date="1623585600">- Fix segfault at piano widget creation with the recent gtk2
  (boo#1187239):
  aseqview-piano-segfault-fix.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1724241600">- Fix gcc14 build errors:
  aseqview-gcc14-fixes.patch
- Refresh other patches, use autosetup</changelog>
</package>
<package pkgid="0007f40a29c995d9d303f258e39425a65e50ee36a52cdca10a1a79bd6a9f803fab5e2500879fcbd306a787f23deee6a9af2959a2a372f4bf358f05936a710157" name="asio-devel" arch="x86_64">
  <version epoch="0" ver="1.30.2" rel="bp160.1.4"/>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="suse+build@de-korte.org" date="1512475200">- Update to stable version 1.10.8
  * More recent than 1.11.0 (development release).
  * Release notes unavailable.
  * Fixes building with openssl-1.1.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version update to 1.12.1:
  * Includes changes from 1.11.0
  * Added missing const qualifier to basic_socket_acceptor::get_option.
  * Worked around a parsing error that occurs with some versions of gcc.
  * Fixed broken code samples in tutorial.
  * Added new experimental features. (Note that "experimental" features may be changed without notice in subsequent releases.)
  * Added experimental::detached completion token.
  * Added experimental::redirect_error completion token.
  * Added experimental::co_spawn facility for integration with the coroutines technical specification.
  * Updated timeout examples to use latest features.
  * Used asio::steady_timer rather than asio::deadline_timer.
  * Used asio::dynamic_buffer rather than asio::streambuf.
  * Used timed asio::io_context::run_for() function for blocking clients.
  * Added example showing a custom completion token for blocking with timeouts.
  * Fixed unit tests to compile when (BOOST_)ASIO_NO_DEPRECATED is defined.
  * Changed socket iostreams to use chrono by default, to fix compatibility with the Networking TS. Define (BOOST_)ASIO_USE_BOOST_DATE_TIME_FOR_SOCKET_IOSTREAM to enable the old Boost.Date_Time interface in basic_socket_streambuf and basic_socket_iostream.
  * Updated examples to use chrono rather than Boost.Date_Time.
  * Fixed an incorrect member function detector in the is_dynamic_buffer trait.
  * Fixed an async_result incompatibility with deprecated handler_type.
  * Added a missing move optimisation in the SSL stream implementation.
  * Fixed incorrect basic_resolver_results::value_type typedef.
  * Fixed a compile error with some OpenSSL versions when SSL_OP_NO_COMPRESSION is defined.
  * Changed add_certificate_authority to process multiple certificates in a bundle.
  * Eliminated deprecation warning with MSVC by using std::invoke_result rather than std::result_of.
  * Changed to use std::string_view for C++17 or later, and std::experimental::string_view for C++14. Define the preprocessor macro (BOOST_)ASIO_DISABLE_STD_STRING_VIEW to force the use of std::experimental::string_view (assuming it is available) when compiling in C++17 mode.
  * Ensured DynamicBuffer template arguments are decayed before using in enable_if tests.
  * Changed documentation to distinguish legacy completion handlers (which are still required to be CopyConstructible) from new MoveConstructible handlers.
  * Suppressed a discarded return value warning in the buffer debugging support.
  * Fixed basic_yield_context to work with completion signatures containing reference parameters.
  * Ensured that stackful coroutines launched using spawn() correctly store decayed copies of their function and handler arguments.
  * Fixed some compatibility issues with Android.
  * Fixed some minor portability issues in examples.
  * Completed the interface changes to reflect the Networking TS (N4656).
  * See the list of new interfaces and, where applicable, the corresponding old interfaces that have been superseded.
  * The service template parameters, and the corresponding classes, are disabled by default. For example, instead of basic_socket&lt;Protocol, SocketService&gt; we now have simply basic_socket&lt;Protocol&gt;. The old interface can be enabled by defining the (BOOST_)ASIO_ENABLE_OLD_SERVICES macro.
  * Added support for customised handler tracking.
  * Added reactor-related (i.e. descriptor readiness) events to handler tracking.
  * Added special concurrency hint values that may be used to disable locking on a per io_context basis.
  * Enabled perfect forwarding for the first ssl::stream&lt;&gt; constructor argument.
  * Added ability to release ownership of the underlying native socket. (Requires Windows 8.1 or later when using the I/O completion port backend.)</changelog>
  <changelog author="ecsos@opensuse.org" date="1568980800">- Version update to 1.12.2:
  * Fixed a problem with the detection of std::future availability with libstdc++.
  * Fixed compile error in regex overload of read_until.
  * Fixed a timer heap corruption issue that can occur when moving a cancelled timer.
  * Fixed detection of std::experimental::string_view and std::string_view with newer clang/libc++.
  * Fixed MSVC version detection for availability of std::invoke_result.
  * Fixed the buffer sequence traits to test the new requirements, if decltype is available.
  * Fixed an MSVC issue when building with exceptions disabled.
  * Added SSL context options for TLS v1.3.
  * Added a compile-time test for TLS v1 support.
  * Fixed the macro used to test for TLS v1.2 support.
  * Prevented global objects from being created once per thread on Windows.
  * Fixed a crash when using size(), max_size() or empty() on default-constructed resolver results.
  * Changed to move the return value in basic_resolver_results::begin() to avoid copying.
  * Enabled move support for the Intel Compiler.
  * Fixed std::string_view detection issue when using clang-cl.
  * Fixed the handler tracking operation name for io_context::executor_type::dispatch.
  * Fixed a buffer overflow that could occur when parsing an address string with a 64-bit scope id.
  * Added examples showing how to write composed operations.
  * Added C++11 versions of the Timeouts, Timers, SOCKS4 and SSL examples.
  * Fixed minor issues in documentation and examples.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1595419200">- Version update to 1.16.1:
  * Fixed compatibility with C++20 concept syntax.
  * Marked the POSIX descriptor classes' move constructors as noexcept.
  * Added the ssl::host_name_verification class
  * Added an ssl::context constructor to take ownership of a native handle.
  * Changed C++ language version detection with gcc to use __cplusplus macro.
  * Fixed a work counting issue in the asynchronous resolve operation for endpoints.
  * Fixed the strand&lt;&gt; converting constructors and assignment operators.
  * Ensured that resolvers are restarted correctly after a fork.
  * Fixed compatibility with the current NetBSD release.
  * Removed spurious handler requirement checks in some async_read overloads.
  * Changed the ssl::context class to propagate non-EOF errors
  * Fixed a compile error in the buffered streams due to the lack of
    reference collapsing in C++98.
  * Changed the priority_scheduler example to demonstrate calls to shutdown()
    and destroy().
  * Removed some unnecessary null pointer checks.
  * Added some emscripten compatibility patches.
  * Fixed a compile error in the use_awaitable_t::as_default_on function.
  * Changed all uses of the boost.bind placeholders to use the
    boost::placeholders namespace.
  * Fixed a potential compile error in the async_compose implementation
    due to incorrect overload selection.
  * Various documentation fixes and improvements.
- Changes from 1.16.0
  * Changed the async_initiate helper function to automatically deduce its return type. This is enabled for C++11 or later.
  * Changed all asynchronous operations to use automatically deduced return types. This allows completion token implementations to incorporate the asynchronous operation initiation into the initiating function's return type, without type erasure. Note that C++14 or later is required to support completion tokens that use per-operation return type deduction. For C++11 or earlier, a completion token's async_result specialisation must still provide the nested typedef return_type.
  * Added the nested template type rebind_executor to all I/O object types, as a way to generically rebind them to use alternative I/O executors.
  * Changed the asynchronous operations' initiation function objects to report their associated I/O executor via the nested type executor_type and member function get_executor(). Note that the presence of executor_type and get_executor() should be treated as optional, and consequently it may be preferable to access them via the associated_executor trait and the get_associated_executor() helper function.
  * Added the default_completion_token trait, so that every I/O executor type now has an associated default completion token type.
  * Specialised the default_completion_token trait for the use_awaitable completion token
  * Ensured that the executor type is propagated to newly accepted sockets. When synchronously or asynchronously accepting a new connection, but without specifying an executor or execution context, the accept operation will now correctly propagate the executor type from the acceptor to the socket.
  * Changed to require that Protocol copy and move operations never throw.
  * Changed to require that Endpoint default constructor and move operations never throw.
- Changes from 1.14.1
  * Improved performance slightly by eliminating a redundant move construction
    when completed handlers are dispatched.
  * Fixed the is_*_buffer_sequence detection traits for user-defined sequence types.
  * Changed the serial port get_option() member function to be const.
  * Fixed a name hiding issue with the WinRT stream-oriented socket backend's shutdown function.
  * Applied a minor fix to the documentation for is_dynamic_buffer.
  * Added some support for Haiku OS.
  * Added wolfSSL compatability.
  * Changed to require C++17 or later for coroutines TS support with clang.
  * Fixed a doxygen generation problem in the tutorial.
- Changes from 1.14.0
  * Improved I/O object performance by adding runtime detection of native I/O executors when using the polymorphic executor wrapper.
  * Changed I/O object move constructors so that the executor is copied, not moved. This ensures that the moved-from I/O object is left in the same state as if constructed with a valid executor but without a resource.
  * Fixed move-based async_accept between sockets with different executor types.
- Changes from 1.13.0
  * Added custom I/O executor support to I/O objects.
  - All I/O objects now have an additional Executor template parameter. This template parameter defaults to the asio::executor type (the polymorphic executor wrapper) but can be used to specify a user-defined executor type.
  - I/O objects' constructors and functions that previously took an asio::io_context&amp; now accept either an Executor or a reference to a concrete ExecutionContext (such as asio::io_context or asio::thread_pool).
  - Note: One potential source of breakage in existing user code is when reusing an I/O object's io_context for constructing another I/O object
  - The previously deprecated get_io_context and get_io_service member functions have now been removed.
  - The previously deprecated service template parameters, and the corresponding classes, have now been removed.
  * Added a new async_result form with an initiate static member function.
  - The async_result template now supports a new form
  - The initiate member function must: (a) transform the token into a completion handler object handler; (b) cause the invocation of the function object initiation as if by calling std::forward&lt;Initiation&gt;(initiation)(std::move(handler), std::forward&lt;Args&gt;(args)...). Note that the invocation of initiation may be deferred (e.g. lazily evaluated), in which case initiation and args must be decay-copied and moved as required.
  - A helper function template async_initiate has also been added as a wrapper for the invocation of async_result&lt;&gt;::initiate. For backward compatibility, this function supports both the old and new async_result forms.
  - The composed operations examples have been updated to use async_initiate.
  - The previously deprecated handler_type trait and single-argument form of async_result have now been removed.
  * Updated the Coroutines TS support and promoted it to the asio namespace.
  - The awaitable&lt;&gt;, co_spawn, this_coro, detached, and redirect_error facilities have been moved from the asio::experimental namespace to namespace asio. As part of this change, the this_coro::token() awaitable has been superseded by the asio::use_awaitable completion token.
  - Please note that the use_awaitable and redirect_error completion tokens work only with asynchronous operations that use the new form of async_result with member function initiate. Furthermore, when using use_awaitable, please be aware that the asynchronous operation is not initiated until co_await is applied to the awaitable&lt;&gt;.
  * Added a new DynamicBuffer_v2 concept which is CopyConstructible.
  - This change adds a new set of type requirements for dynamic buffers, DynamicBuffer_v2, which supports copy construction. These new type requirements enable dynamic buffers to be used as arguments to user-defined composed operations, where the same dynamic buffer object is used repeatedly for multiple underlying operations
  - The original DynamicBuffer type requirements have been renamed to DynamicBuffer_v1. These requirements continue to be compatible with the Networking TS.
  - New type traits is_dynamic_buffer_v1 and is_dynamic_buffer_v2 have been added to test for conformance to DynamicBuffer_v1 and DynamicBuffer_v2 respectively. The existing is_dynamic_buffer trait has been retained and delegates to is_dynamic_buffer_v1 (unless ASIO_NO_DYNAMIC_BUFFER_V1 is explicitly defined, in which case it delegates to is_dynamic_buffer_v2).
  - For convenience, the dynamic_string_buffer and dynamic_vector_buffer classes conform to both DynamicBuffer_v1 and DynamicBuffer_v2 requirements.
  - When ASIO_NO_DYNAMIC_BUFFER_V1 is defined, all support for DynamicBuffer_v1 types and functions is #ifdef-ed out. Support for using basic_streambuf with the read, async_read, read_until, async_read_until, write, and async_write functions is also disabled as a consequence.
  - Note: This change should have no impact on existing source code that simply uses dynamic buffers in conjunction with Asio's composed operations.
  * Added a new async_compose function that simplifies the implementation of user-defined asynchronous operations.
  * Added a make_strand function, which creates a strand with a deduced Executor template argument.
  * Relaxed the completion condition type requirements to only require move-constructibility rather than copy-constructibility.
  * Added a constructor for local::basic_endpoint that takes a string_view.
  * Added the noexcept qualifier to various member functions of the ip::address, ip::address_v4, ip::address_v6, ip::basic_endpoint, and executor_work_guard classes.
  * Added the noexcept qualifier to the buffer_sequence_begin and buffer_sequence_end functions.
  * Added a new ASIO_DISABLE_VISIBILITY configuration #define that allows visibility pragmas to be disabled. (Note: If symbols are hidden, extra care must be taken to ensure that Asio types are not passed across shared library API boundaries.)
  * Changed compile-time feature detection to define ASIO_STANDALONE automatically if C++11 or later is detected.
  - Users should define ASIO_ENABLE_BOOST to explicitly disable standalone mode when compiling with C++11 or later.
  - The configure script now defaults to a standalone build unless Boost is specified or detected.
  * Enabled recycling of the memory used to type-erase a function object with the polymorphic executor.
  * Changed receive operations to return the correct number of bytes transferred when truncation (error::message_size) occurs on a datagram-oriented socket.
  * Fixed multicast behaviour on QNX by automatically applying SO_REUSEPORT when the reuse_address option is set.
  * Added inclusion of unistd.h when targeting Haiku OS, to fix feature detection.
  * Added the network_v[46].hpp headers to the top-level convenience header.
  * Fixed calculation of absolute timeout when the backend uses pthread_cond_timedwait.
  * Changed the range-based asynchronous connect operation to deduce the EndpointSequence iterator type rather than assume the presence of a const_iterator typedef.
  * Fixed buffer_sequence_begin and buffer_sequence_end to prevent implicit conversion. This change addresses an issue where a call to buffer_sequence_begin or buffer_sequence_end could trigger an implicit conversion to const_buffer or mutable_buffer. Whenever this implicit conversion occurred, the return value of buffer_sequence_begin or buffer_sequence_end would point to a temporary object.
  * Ensured SSL handshake errors are propagated to the peer before the local operation completes.
  * Suppressed the eof error on SSL shutdown as it actually indicates success.
  * Added a fallback error code for when we OpenSSL produces an SSL_ERROR_SYSCALL result without an associated error.
  * Changed composed asynchronous read and write operations to move, rather than copy, the buffer sequence objects when the composed operation implementation is moved.
  * Fixed dispatch documentation to note that it may call the supplied function object in the current thread.
  * Updated post and defer documentation to clarify the the distinction between them.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621857600">- Update to 1.18.2
  * Added ip::scope_id_type type alias.
  * Added ip::port_type type alias.
  * Added std::hash specialisations for IP addresses.
  * Added std::hash specialisations for ip::basic_endpoint&lt;&gt;.
  * Added friendship support to customisation points
  * Changed any_io_executor to a "strong typedef"-style class.
  * Fixed experimental::as_single to work with handler hook deprecation.
  * Fixed work tracking for io_context and thread_pool executors
    when move-assigned.
  * Fixed I/O object move-assignment to ensure the executor is left
    in a valid state.
  * Prevented the blocking.always property from being used with strand&lt;&gt;,
    as it did not produce the correct semantics.
  * Removed deprecated file asio/impl/src.cpp.
- Update to version 1.18.1
  * Added executor-converting construction and assignment to ip::basic_resolver.
  * Added the experimental::as_single completion token adapter.
  * Fixed the executor concept to test for a const-qualified execute().
  * Fixed the thread_pool unit test to work without RTTI support.
- Update to version 1.18.0
  * Added workarounds for various issues in gcc 10's coroutine support.
  * Added missing compatibility macros for the execution::receiver_of concept.
  * Added constraints to the strand template's constructor
  * Changed Asio's internal executor adapters to prevent template
    instantiation recursion.
  * Changed execution::blocking_t::always_t::is_preferable to be false as
    per the specification.
  * Added shape_type and index_type to thread_pool executors
  * Ensured that the standard executor concept-related traits
  * Fixed async_compose support for standard executors.
  * Fixed the forward declaration of any_io_executor in asio/ts/netfwd.hpp.
- Update to version 1.17.0
  * Added support for the proposed standard executors to Asio's I/O facilities
  * Added support for using detached_t as a default completion token
  * Added a move constructor to ssl::stream&lt;&gt;.
  * Fixed async_compose to work with copyable handlers when passed by lvalue.
  * Fixed completion signature deduction in co_spawn.
  * Removed a spurious Executor base class from the executor_binder
    implementation.
  * Various fixes and improvements in the documentation and examples.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1668081600">- Update to 1.24.0
  - Improved the performance of awaitable&lt;&gt;-based coroutines when they directly co_await an asynchronous operation,
    by eliminating the copy of the operation object in await_transform.
  - Improved the performance of spawn()-based stackful coroutines by storing a reference to the yield context in the completion handler,
    rather than storing a copy of the executor.
  - Fixed a C++03 build error by disabling index_sequence emulation when variadic templates are unavailable.
  - Fixed detection of std::aligned_alloc for older Apple platforms.
  - Removed faulty assertions from experimental::coro implementation.
  - Added defence against Qt-defined macros when building with Intel C++.
  - Ensured that a spawn()-based stackful coroutine is cleaned up immediately after it completes.
  - Changed the implementation of the select_reactor, on Windows, to ensure that any exception resulting from failure
    to recreate its interrupter's sockets will be allowed to propagate out through io_context::run().
  - Changed the MSVC version used for the system_error workaround, as more recent runtime redistributables appear to have fixed the issue.
  - Changed the async_compose example to use a return type compatible with the new async_result form.
- Update to 1.23.0
  - Added a deduced trailing return type, using decltype, to all asynchronous operations' initiating functions when using C++11.
    This change enables the new form of async_result, where the return type can vary per operation, for C++11.
  - Moved append, prepend, as_tuple, and deferred to the asio namespace, and made them compatible with C++11.
    These are no longer experimental facilities, although the names have temporarily been retained under the asio::experimental namespace for backwards compatibility.
  - Added buffer() overloads for contiguous containers, such as std::span.
  - Added the ability for awaitable&lt;&gt;-based coroutines to directly co_await operations that are packaged as function objects.
  - Changed spawn() to be a completion token-based asynchronous operation.
  - Added the is_async_operation trait and async_operation concept.
  - Added the completion_signature_of trait. The completion_signature_of trait (and corresponding type alias completion_signature_of_t)
    may be used to determine the completion signature of an asynchronous operation.
  - Added converting move construction/assignment to posix descriptors, serial ports, pipes,
    Windows object_handle, Windows stream handles, and Windows random-access handles.
  - Added release() member functions to pipes, Windows stream handles, and Windows random-access handles.
  - Enabled support for Endpoint implementations that return void pointers from their data() member functions,
    as per the documented Endpoint type requirements.
  - Removed all() and race() from experimental::promise, as experimental::parallel_group covers this functionality.
  - Added source locations to exceptions and error codes produced by the synchronous and asynchronous operations.
  - Fixed compatibility with OpenSSL 3.0.4 and later.
  - Fixed compatibility with with -masm=intel.
  - Explicitly stated that socket shutdown() calls are thread-safe with respect to certain other synchronous operations on the same socket.
  - Optimised the move construction of I/O objects where only the executor type differs.
  - Fixed the detection of std::invoke_result for clang/libc++.
  - Fixed an issue where experimental::parallel_group initiation incorrectly moved arguments instead of forwarding them.
  - Fixed a sequencing issue in the implementation of post(), dispatch(), and defer(), where the the associated allocator
    may be obtained from an already moved-from completion handler.
  - Fixed the awaitable&lt;&gt; implementation to propagate exceptions from awaited initiation functions through the current completion handler.
  - Fixed detection of std::aligned_alloc with gcc.
  - Changed to avoid using the soon-to-be-deprecated std::aligned_storage on newer compilers.
  - Fixed various compiler warnings.
  - Updated all composed operations examples, and the C++11 timeouts example, to use the new async_result form.
  - Added composed operation and coroutine examples for C++20.
  - Added pkg-config support.
- Update to 1.22.2
  - On Windows, changed the file support to open files using the same sharing mode as fopen().
  - On Linux, fixed the UNIX domain sockets implementation to correctly handle EAGAIN as an indication of an in-progress connect operation.
  - Fixed experimental::basic_channel::reset() and experimental::basic_concurrent_channel::reset()
    so that they work correctly for an unclosed channel.
  - Fixed potential undefined behaviour in the experimental::promise operations race() and all().
  - Changed the co_spawn implementation to explicitly dispatch cancellation signals through the specified executor,
    if the the completion handler has an associated executor of its own.
  - Added more detailed reference documentation to make_strand(), make_work_guard(), ip::address_v4, ip::address_v6,
    experimental::basic_channel, and experimental::basic_concurrent_channel.
  - Re-arranged and extended the Overview documentation to cover files, pipes, async_compose, experimental::deferred,
    experimental::parallel_group, experimental::promise, channels, and completion token adapters.
  - Reverted the io_context reference documentation to use executor_work_guard when preventing the io_context from running out of work.
  - Removed references to deadline_timer from the Overview documentation.
  - Added reference documentation cross-references to asynchronous model elements.
- Update to 1.22.1
  - Added bind_allocator, to simplify associating a custom allocator with a completion token or handler.
  - Added the file_base::sync_all_on_write flag, which maps to O_SYNC on POSIX and FILE_FLAG_WRITE_THROUGH on Windows.
  - Added missing implementation of basic_file::release().
  - Added per-operation cancellation support to signal sets.
  - Exposed recycling_allocator as part of the public interface.
  + Added the nodiscard attribute to the following functions:
  - bind_allocator()
  - bind_cancellation_slot()
  - bind_executor()
  - buffer()
  - dynamic_buffer()
  - experimental::append()
  - experimental::as_single()
  - experimental::as_tuple()
  - experimental::make_parallel_group()
  - experimental::prepend()
  - get_associated_allocator()
  - get_associated_cancellation_slot()
  - get_associated_executor()
  - make_work_guard()
  - Added compatibility with OpenSSL 3.0, particularly when deprecated functionality is disabled.
  - Added support for adopting an existing SSL* into an ssl::stream&lt;&gt;.
  - Enabled executor_work_guard&lt;&gt; even when ASIO_NO_TS_EXECUTORS is defined.
  - Enabled movable socket iostreams when using clang.
  - Fixed bind_cancellation_slot compatibility with legacy completion tokens.
  - Fixed bind_executor compatibility with legacy completion tokens.
  - Fixed associator specialisations for experimental::append and experimental::prepend,
    to correctly propagate the associated allocator, executor, and cancellation slot.
  - Fixed 'zero as null pointer constant' warning in C++20 coroutines implementation of awaitable.
  - Ensured concurrency hint preprocessor macros are made available when asio/io_context.hpp is included.
  - Fixed issue where the primary associated_allocator template was not correctly detecting the nested T::allocator_type.
  - Fixed io_uring implementation of async_receive_from operation for sockets.
  - Fixed io_uring implementation of write_some_at operation for files.
  - Changed io_uring implementation to correctly check that it is not the default before registering with reactor.
  - Fixed a circular inclusion issue when using io_uring in some build configurations.
  - Fixed experimental::coro's per-operation cancellation to clear the slot at completion of each operation.
  - Fixed memory management in experimental::promise's type-erased completion handlers.
  - Fixed move operator= implementation for ssl::stream.
  - Fixed any_io_executor implementation to work when both ASIO_USE_TS_EXECUTOR_AS_DEFAULT and ASIO_SEPARATE_COMPILATION are defined.
  - Fixed implementation of basic_socket::at_mark() when using the sockatmark() system call.
  - Changed the recycling allocator to use the default alignment as the minimum alignment for allocations.
  - Added additional standard header file includes, as required by newer compilers.
  - Added a workaround for apparent coroutine codegen bug with Apple's clang.
  - Fixed various warnings in the examples and unit tests.
  - Added a C++11 example showing file descriptor passing over local sockets. Thanks to Heiko Hund for providing this example.
  - Added C++14 examples of wrapping callback-based APIs in asynchronous operations.
  - Added an overview of Asio's asynchronous model to the documentation.
  - Reworked reference documentation in terms of completion tokens.
  - Updated documentation of asynchronous operation requirements to use new completion token form.
  - Updated documentation for dispatch(), post(), and defer() to cover both the old and new executor forms.
  - Documented per-operation cancellation for serial ports.
  - Clarified the non-concurrency guarantees made for allocators.
- Update to 1.22.0
  - Improved error messages emitted by ssl facilities.
  - Fixed bind_executor compatibility with completion tokens.
  - Fixed build errors when ASIO_USE_TS_EXECUTOR_AS_DEFAULT is defined.
  - Fixed corruption, cleanup issues in channel implementation.
  - Added missing move assignment operator to awaitable&lt;&gt;.
  - Fixed an access violation when using coroutines with MSVC, due to incorrect alignment of allocated memory.
  - Fixed a cleanup issue in experimental::parallel_group that occured when the execution context was shut down with parallel operations still pending.
  - Fixed header inclusion order problem when io_uring is enabled.
  - Eliminated shared_ptr use from experimental::coro co_spawn() implementation.
  - Prevented async_resume from being called on experimental::coro temporaries.
  - Made awaitable_operators.hpp header self-contained.
  - Added clarifications to the documentation on concurrency hints.
  - Added documentation on error handling techniques for C++20 coroutines.
  - Added channel-based proxy example.
  - Regenerated ssl certificates used in examples.
- Update to 1.21.0
  - Added an io_uring backend. This backend may be used for all I/O objects, including sockets, timers, and posix descriptors.
  - Added support for files. This introduces new classes for stream-oriented and random-access files.
  - Added support for portable pipes. This change add supports for pipes on POSIX and Windows (when I/O completion ports are available).
  - Added support for registered buffers. The mutable_registered_buffer and const_registered_buffer classes
    are buffer sequence types that represent registered buffers.
  - Added experimental support for channels. This adds templates experimental::basic_channel and experimental::basic_concurrent_channel,
    with aliases experimental::channel and experimental::concurrent_channel. Channels may be used to send completions as messages.
  + Implemented improvements to experimental::coro.
  - Added overload so member functions can provide an explicit executor.
  - Added co_spawn for coro tasks.
  - Added reference and overview documentation.
  - Adopted awaitable cancellation model.
  - Refactored implementation.
  - Disabled aligned_alloc on clang when using an MSVC runtime.
  - Changed to use a faster implementation for ip::network_v4::canonical().
  - Added template specialisations for common uses to improve compile time.
  - Reduced the size of io_context executors to a single pointer.
  - Increased the small object buffer size for execution::any_executor and any_io_executor.
  - Fixed multi-signature handling when variadic templates are disabled.
  - Fixed compatibility with new versions of gcc and clang.
  - Fixed compilation on Solaris.
  - Fix defence against Qt-defined macros when building with MSVC.
  - Fixed various warnings.
- Update to 1.20.0
  - Fixed experimental::coro compatibility with gcc.
  - Fixed experimental::promise compatibility with gcc.
  - Added documentation for per-operation cancellation.
  - Added documentation for parallel_group.
  - Added overview documentation for experimental::coro.
  - Added some missing C++14 examples.
  - Updated C++20 coroutines overview documentation.
- Update to 1.19.2
  - Cleaned up memory recycling to ensure the cache size is used consistently.
  - Changed parallel_group to use the recycling allocator for shared state.
  - Changed awaitable memory recycling to use the configurable cache size.
  - Ensured parallel_group respects operations' associated executors.
  - Added defence against macros defined by Qt.
  - Added missing boost_ prefix to namespaces during boostification.
  - Added missing lvalue-qualified overloads for deferred operator().
  - Added a tag to disambiguate deferred constructors.
  - Added missing push/pop_options includes.
  - Fixed argument evaluation order issue with a potentially moved-from variable in awaitable implementation.
  - Enabled "expression SFINAE" for recent MSVC using /std:c++latest.
  - Fixed compilation errors when dev_poll_reactor backend is used.
  - Fixed handler type requirements checking to reflect rvalue completion handler invocation.
  - Fixed posix::basic_stream_descriptor move operations to work with non-defaulted executors.
  - Added missing move of executor in strand implementation.
- Update to 1.19.1
  - Fixed handling of move-only results with awaitable operators &amp;&amp; and ||.
  - Fixed strand&lt;&gt; to avoid using a potentially moved-from executor.
  - Fixed order of _aligned_malloc arguments for MSVC.
  - Ensured handler alignment requirements are respected by cancellation_signal.
  - Ensured gcc tests are not used for clang when detecting compiler features.
  - Disabled coroutines support for the clang shipped with MSVC.
  - Fixed compatibility with recent LibreSSL when OPENSSL_NO_SSL_INTERN is defined.
  - Documented supported cancellation types for individual asynchronous operations.
  - Ensured un-cancelled ops are correctly placed back in the queue.
- Update to 1.19.0
  + Added support for cancellation of individual asynchronous operations.
    The ability to cancel individual operations, or composed operations, is currently supported by:
  - timers
  - sockets on POSIX and Windows
  - POSIX descriptors
  - Windows HANDLEs
  - SSL streams
  - all Asio-provided composed operations such as async_read and async_write
  - compositions based on async_compose
  - C++20 coroutines that use awaitable
  - C++20 coroutines that use the new experimental::coro (see below)
  - the new experimental::parallel_group operation (see below)
  - the new experimental::promise class (see below)
  - Added the associator trait.
  - Changed all asynchronous operations implemented in Asio to invoke their completion handlers as rvalue references.
  - Added support for asynchronous operations with multiple completion signatures.
  - Added operator&amp;&amp; and operator|| for awaitable&lt;&gt;. The logical operators || and &amp;&amp; have been overloaded for awaitable&lt;&gt;,
    to allow coroutines to be trivially awaited in parallel.
  - Added the experimental::as_tuple completion token adapter.
  - Added the experimental::append completion token adapter.
  - Added the experimental::prepend completion token adapter.
  - Added the experimental::deferred completion token.
  - Added the experimental::parallel_group class and experimental::make_parallel_group function.
  - Added experimental::promise. The promise type allows eager execution and synchronisation of async operations.
  - Added the experimental::coro class template. The coro type is a C++20 coroutine primitive for resumable functions,
    with the ability to combine both asynchronous waiting (co_await) and yielding (co_yield) into a single, stateful control flow.
  - Added move assignment to ssl::stream&lt;&gt;.
  - Changed co_spawn to dispatch the coroutine's initial step to the executor, and to only post the completion handler if the coroutine
    did not otherwise perform a context switch (i.e. a co_await on an asynchronous operation).
  - Enabled additional optimisations for any_executor and any_io_executor when used with asynchronous operations.
  - Added the nodiscard attribute to awaitable&lt;&gt;.
  - Increased the number of cached slots in the default recycling allocator. This number defaults to 2,
    but may also be specified by defining the ASIO_RECYCLING_ALLOCATOR_CACHE_SIZE macro.
  - Disabled the std::system_error message workaround for recent MSVC.
  - Changed the default allocator behaviour to respect alignment requirements, to support over-aligned types.
    Requires C++17 or later, or Boost.
  - Ensured the result strings are always initialised in reverse name resolution.
  - Fixed recursive template instantiation issues in use_awaitable_t::executor_with_default.
  - Fixed the any_io_executor equality operators to correctly return a result based on the target executor.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1676462400">- Use secure URLs (HTTPS)
- Update to 1.26
  * Fixed spawn and co_spawn implementations to dispatch cancellation
    handlers on the correct executor.
  * Fixed spawn to ensure the completion handler is dispatched through
    the correct executor.
  * Fixed compatibility between co_spawn and any_completion_handler.
  * Fixed the arguments passed to select_reactor::run when it is run
    on an internal thread.
  * Updated the asynchronous operation requirements to relax the
    requirements on the associated executor.
- Update to 1.25
  * Added the consign completion token adapter, which can be used to
    attach additional values to a completion handler.
  * Added any_completion_handler&lt;&gt;, which can be used to type-erase
    completion handlers.
  * Added experimental::co_composed which facilitates a lightweight
    implementation of user-defined asynchronous operations using C++20 coroutines.
  * Add range-based experimental::make_parallel_group() overloads
    that may be used to launch a dynamically-sized set of asynchronous
    operations, where all operations are the same type.
  * Added any_completion_executor, a type-erased wrappers for
    executors that are associated with completion handlers.
  * Added missing context query to use_future's executor.
  * Added nothrow constructor overloads to execution::any_executor&lt;&gt;
    and any_io_executor.
  * Optimised representation of empty execution::any_executor objects
    to improve the performance of copy and move operations.
  * Added a specialised channel implementation for the for R(error_code) signature.
  * Added an associated_cancellation_slot specialisation for
    std::reference_wrapper.
  * Added io_executor_type and get_io_executor to the async_compose 'self' object.
  * Deprecated the execution::execute customisation point.
  * Deprecated the concepts, traits, functions and customisation
    points related to senders and receivers.
  * Many bug fixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 1.28:
  * Added missing handler tracking source location support to
    awaitable&lt;&gt;-based coroutine's ability to co_await asynchronous
    operations packaged as function objects.
  * Add missing handler tracking source location support to
    co_composed.
  * Fixed suppression of spurious 'potential null dereference'
    warnings, to work with older compilers.
  * Fixed a bug where passing the deprecated const_buffers_1 and
    mutable_buffers_1 types to asio::buffer() would result in the
    contiguous iterator overloads being incorrectly chosen.
  * Fixed compatibility between buffered stream wrappers and
    move-constructible streams, such as ssl::stream&lt;&gt;.
  * Marked ip::address_v4::to_ulong as deprecated in the documentation.
  * Fixed shadowed variable warnings.
  * Fixed basic_socket_acceptor::async_accept concept requirement
    checking to be compatible with lambdas that have a deduced return
    type.
  * Fixed a feature detection macro used in use_future's compatibility
    traits.
  * Fixed as_tuple compatibility with legacy completion tokens.
  * Fixed redirect_error compatibility with new completion tokens.
  * Fixed a potential, Windows-specific program termination due to
    exceptions that should have been allowed to escape from a destructor.
  * Fixed this_coro to prevent inadvertent co_await of boolean
    expressions.
  * Fixed result handling in experimental::use_coro implementation.
  * Fixed variadic template emulation for is_async_operation and
    completion_signature_of.
  * Fixed incorrect reuse of a moved-from result in experimental::promise.
  * Fixed experimental::coro use with custom allocators.
  * Fixed clean up of internal I/O object structures when using io_uring.
  * Use cached offset when seeking a file with seek_cur on Windows.
  * Added immediate completion to asynchronous operation requirements.
  * Added any_completion_handler&lt;&gt;, co_composed, and immediate completion
    support to the documentation overview.
  * Added buffer literals to the documentation.
  * Added a link to the Asio debugger extensions repository.</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1719489600">- update to 1.30.2
  * Fixed co_spawn to correctly propagate exceptions resulting from cancellation to the completion handler.
  * Added calls to std::launder to fix undefined behaviour in awaitable&lt;&gt; internal storage.
  * Added missing handling of the file_base::append flag in the Windows implementation of file support.
  * Updated the socket and descriptor implementations to add more cases where they will fall back to fcntl if a call to ioctl fails.
  * Fixed a compile error that occurred when channels and experimental::coro were both used in the same translation unit.
  * Added missing CancellationSlot type requirements to documentation.
  * Minor documentation updates.
- update to 1.30.1
  * Fixed the async_result primary template's concept checking to correctly handle lvalue-qualified completion signatures.
  * Fixed some compile errors that could arise when using the bind_allocator, bind_executor, bind_immediate_executor and bind_cancellation_slot completion token adapters to adapt each other.
  * Changed the experimental::ranged_parallel_group operation so that it moves the completion_order vector when invoking the completion handler.
  * Fixed the asio/experimental/parallel_group.hpp header so that it is self-contained.
  * Fixed some warnings about deprecated implicit copy constructors on ip::basic_resolver_query, io_context::strand, and coroutine.
  * Updated the version specification used to initialise Winsock.
  * Fixed the documentation hyperlinks for the deduced return types of asynchronous operations' initiating functions.
- update to 1.30.0
  * Fixed compatibility between any_completion_handler and compilation using ASIO_USE_TS_EXECUTOR_AS_DEFAULT.
  * Fixed a crash that may occur when attempting to access a default-constructed any_completion_handler object's associators.
  * Fixed ssl::stream&lt;&gt; class's async_handshake operation so that it works with a defaulted completion token.
  * Updated all examples to use C++11 as the minimum language standard.
- update to 1.29.0
  * Changed to require C++11 as the minimum language standard.
  * Removed deprecated functionality from the asio::execution namespace.
  * Removed deprecated invocation and allocation hooks.
  * Added compatibility between Asio's placeholders and std::bind.
  * Added try_send_via_dispatch and try_send_n_via_dispatch functions to channels.
  * Improved C++11 support for multi-signature channels.
  * Fixed compatibility between channel asynchronous operations and any_completion_handler.
  * Added missing equality operators for mixed property types belonging to the same category.
  * Fixed an issue where spawn-based stackful coroutines would terminate the program when used with asynchronous operations that have a completion signature starting with std::exception_ptr.
- update to 1.28.2
  * Fixed the completion token adapters bind_allocator, bind_cancellation_slot and bind_immediate_executor to not require a return_type type alias in the adapted async_result specialisation.
  * Fixed a potental crash due to an object lifetime issue in the co_spawn operation's cancellation support.
  * Enabled compiler-supported thread locals on more target platforms, using the thread_local keyword if available.
  * Fixed the documentation of the per-operation cancellation behaviour for experimental::co_composed to correctly state that terminal cancellation is enabled by default.
  * Documented the per-operation cancellation behaviour of async_compose.
  * Added bind_immediate_executor to the Completion Token Adapters overview.
  * Added an example illustrating how to use an experimental channel for mutual exclusion between cooperating asynchronous actors.
  * Added an example showing how to write a minimal completion executor.
- update to 1.28.1
  * Added missing compatibility with associated_immediate_executor to any_completion_handler.
  * Fixed a null pointer dereference that occurs when using query, require or prefer with an empty any_executor.
  * Added a workaround in experimental::coro for a spurious syntax error when compiling with MSVC.
  * Fixed an integer truncation issue in per-operation cancellation, when using the reactor backend on 64-bit Windows.
  * Added a compile-time check for a minimum Linux kernel version of 5.10, when io_uring support is enabled.
  * Fixed a compile error in the converting move constructors for experimental::basic_channel and experimental::basic_concurrent_channel.
  * Fixed a memory leak on some signal_set error handling code paths.
  * Fixed bad_address_cast to not use a deprecated implicit copy constructor.
  * Fixed a copy/paste error in the dev_poll_reactor backend.
  * Fixed the io_uring backend to ensure the internal timeout operations, used to implement io_context::run_for and io_context::run_until, are cleaned up correctly.
  * Eliminated some duplicated state in the co_spawn implementation's entry point, reducing memory consumption.
  * Added c++14 echo examples to boostify script.</changelog>
</package>
<package pkgid="e603f10509ad3401b7e5fa817229d2432908b4c8a8ca4166d08d032accd80b4f4b7a49b30b57f160c7d0a492fe552271bb279491143609a5a2a2427a811bb941" name="asl" arch="x86_64">
  <version epoch="0" ver="1.42_bld232" rel="bp160.1.12"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507464000">- Drop asl-aarch64.patch, as upstream headers already contain valid
  defines for aarch64 (LP64)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520424000">- remove unused buildrequires on xorg-x11-* and libpng</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1527163200">- Drop doc subpackage - building fails on current Factory</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551873600">- Update to version 142-bld115
  * No changelog available</changelog>
  <changelog author="&lt;gunreben@t-online.de&gt;" date="1552392000">- add #define PRIInteg32 "d" to sysdefs for s390x to fix build</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579780800">- asl-riscv64.patch: add sysdefs for riscv64</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1600257600">- Update to 1.42_bld173.
  See http://john.ccac.rwth-aachen.de:8000/as/changelog for the
  changelog
- Update the license tag to GPL-2.0-only OR GPL-3.0-only to
  match the license tag added to most files.
- Fixes for %_libexecdir changing to /usr/libexec (boo#1174075)
- Update asl-buildfixes.patch
- Merge asl-riscv64.patch and asl-ppc64.patch with
  asl-buildfixes.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1668513600">- Update to version 1.42_bld232
  See http://john.ccac.rwth-aachen.de:8000/as/changelog for the
  changelog</changelog>
</package>
<package pkgid="049a27740ed7151a9b4ea1ad99fd3d578b06dadc1a567f15287e162e43cc142a86c77dff4b37569a709246ef8a437f76279a4c1203cbfe4f5ea2fbd8378dc3b6" name="aspell" arch="x86_64">
  <version epoch="0" ver="0.60.8.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch source urls to https</changelog>
  <changelog author="dmueller@suse.com" date="1703937600">- update to 0.60.8.1:
  * Fix memory leak in suggestion code introduced in 0.60.8.
  * Various documentation fixes.
  * Fix various warnings when compiling with -Wall.
  * Fix two buffer overflows found by Google’s OSS-Fuzz.
  * Other minor updates.
- drop aspell-CVE-2019-25051.patch (upstream)</changelog>
</package>
<package pkgid="344cd6c79cb71c4672a7c5413ec8eb51b2608d80a506465cf57f4fe2ec57584d71a127fc6d616adb77f3a4f9f66104fccbebbd7c4215f30f8e62f7cbf317d684" name="aspell-af" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="854721440657182e7c85b1f9b1f3eba9dcdc8af11671c83e0a44b58e7bc8163bf126cff78204ecb1ce7387bb815faa1f7a2f553d9422a6a5dea2462714bc6823" name="aspell-agal" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="1ef985af3ed870fa49786d049ba2b889b5dc68ac8856a7cf53647c1fb0f84b87626079dfc9ee81480afc187a7586d2998a19962e374a08b620a6096737b79455" name="aspell-am" arch="x86_64">
  <version epoch="0" ver="0.03.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="54b7d2cd99ff8e8cd0e61a1b33ad5c62a2a699345a0c77708738c5d5b9f10822bf94101cae4065c5656e9f0569a6189050d436d098680f4295c80b8169ca8af2" name="aspell-ar" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="9347b8174cc8106423348dea59de2d7a22fa014fff57cccbe25db5ac6985c1e4b9704d733e0a2f9f560f2fd7a7f5defef0f4ebe677871a30ee405193ef3100fc" name="aspell-ast" arch="x86_64">
  <version epoch="0" ver="0.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="a5b72d0ddba7de1de85f0f053d59b04b28fcf9be86b0717b5ed3361c71501a46f2d2da02933142cafcb36056f2b8f72e5d712622218db1ba9d3d67df3688a7be" name="aspell-az" arch="x86_64">
  <version epoch="0" ver="0.02" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="783f8e7a58590e4883013486f88547ec20d784fc83e05bf1dd48459650ba0eb46a37e5b76edabcdca34973bd31a1b6489e3500451bf19d740dd405e10ebde592" name="aspell-be" arch="x86_64">
  <version epoch="0" ver="0.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="946ee3ded2fce032c9b599791e1b735067a63cc674e06f8c0d9b626ef8bd0bc9a1005eab972c3c8671edb6cd124df720b53ff7d33146073cbf3fbf7408215460" name="aspell-bg" arch="x86_64">
  <version epoch="0" ver="4.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="eb7ada8f717cd0f43c85ddad6702446f730483e1a1baffbe7a39659a5ba2b09c9abd92b9335411179759a3336d2ae2d9036c6b61f117591c274faaf80c4db94a" name="aspell-bn" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="17973343e3fac2ded2b159a87fd222cac5d8f644e69eb8ffe2131c65d6aee0f4bf88fcd945481f1ec7164321e88efdbb844141fcd93b1247f2393abe061c3eae" name="aspell-br" arch="x86_64">
  <version epoch="0" ver="0.50.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="935bded62d58705ec6ca3fb9df9d191e16cd41e3466ad45efcd3f23103f214988a91b646cd4e5416a3a24a9aff2d657bca492b80803b53f097583b202c88ac3a" name="aspell-ca" arch="x86_64">
  <version epoch="0" ver="0.60.1.20090722" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="1a746c5ffbcea0ffda8f93750682ae52061bc3f9cda75e610458db4e072ffa4e03c9813bacf872a343c669c7705dd47dcc6dd5ad09322b2700861deb96cb7f09" name="aspell-cs" arch="x86_64">
  <version epoch="0" ver="0.60.0.20040614" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="641fda9ec5ff26f73da2d0ac09c24e469fcf8ca33a242a88afb46c45aa72bf6d26746b8de3a551b02c40a16ec4dcbd1cdf228c691d4eda1c6c75cf85ac5624ba" name="aspell-csb" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="a57b30ba66bea8dafd2ce8e2f5621b582be14e6163690a25b136a73961cefa1afce750b1d9b84c40916a8040c10fd6f079fe63dabfd7dacafea177220648425f" name="aspell-cy" arch="x86_64">
  <version epoch="0" ver="0.50.3" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="475677110613d5ba688293804bdd2a876aa19d68cb497ba51df71a20f98d43b8925b77c932aa12d126f40081c4f373b193c853fc99b837285d729173ef6098ec" name="aspell-da" arch="x86_64">
  <version epoch="0" ver="1.6.20" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="bc6548e4d7e1005dfe2a2db27e8854c94dd14e8b7191183ddeda584a49f7959b384458f3d6837edeb9de81057162df98ea858e13681ad81b94fd40243687a428" name="aspell-de" arch="x86_64">
  <version epoch="0" ver="20161207.7.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="05f83fc385c7e98a111a76e91808ed17f6c6a60e901d64a0fe2786039d5498b36783a1d5034afc1634e1f1a3ef82f63b470be050aafd21547f38336ec7236eb7" name="aspell-devel" arch="x86_64">
  <version epoch="0" ver="0.60.8.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch source urls to https</changelog>
  <changelog author="dmueller@suse.com" date="1703937600">- update to 0.60.8.1:
  * Fix memory leak in suggestion code introduced in 0.60.8.
  * Various documentation fixes.
  * Fix various warnings when compiling with -Wall.
  * Fix two buffer overflows found by Google’s OSS-Fuzz.
  * Other minor updates.
- drop aspell-CVE-2019-25051.patch (upstream)</changelog>
</package>
<package pkgid="bb00e364cf1cc77dfc19f6b1e8e4ff58515c373c500998033b114031a6fe8253cb99a67a5e8ed003c5d23313489bbec15c08d1116424dc5f4b2d149d2908ea2a" name="aspell-el" arch="x86_64">
  <version epoch="0" ver="0.50.3+0.08" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="25f38b14b5dddf109e0a4e66d3e5fe8cfe7d7b6cc85db338d155c66a0cfb83147a6fb2ce57fdc623e44052d5c298f5dedb0aa776900b667f0e12665381ebcbe7" name="aspell-en" arch="x86_64">
  <version epoch="0" ver="2020.12.07" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 2015.03.24:
  * Updated to SCOWL 2015.02.15 which added a large number of new words
    such as "inbox", "smartphone", and "selfie" and removed some
    problematic words.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 2016.11.20:
  * various new words (see SCOWL-README for other changes)</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 2017.08.24
  * various new words (see SCOWL-README for other changes)</changelog>
  <changelog author="rpm@fthiessen.de" date="1533988800">- Use SourceURL
- Use GPG signed source
- updated to 2018.04.16
  * various new words (see SCOWL-README for other changes)</changelog>
  <changelog author="amajer@suse.com" date="1533988801">- run fdupes only on dictionary data
- update keyring to include all upstream signatures
- update URL</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 2019.10.06
  Various new words.
  Remove compare's and fail's.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionary can be used
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1602504001">- removing Novell residues
- deleted patches
  - aspell-en-Novellwords_extra_dict.patch (not needed)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="pgajdos@suse.com" date="1609156800">- version update to 2020.12.07
  * Various new words.
  * Variant cleanups.
  * Bump irregardless, froward (+ derivatives) and perpend to level 70.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1657195200">- switch source url to https</changelog>
</package>
<package pkgid="cfe8444253e4d7f4802920e767b8fa8be578af50a5eae6df71f57882cccd4daeecad4d32bb81a65b56a68240d7de4f0e763e80c6d5f53c174a63e1d38bec3280" name="aspell-eo" arch="x86_64">
  <version epoch="0" ver="2.1.20000225" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="173c69d222a01db701a2ef40763675f4a5fc1940796050bdbd6c20c1b85efa2fa3f42ccec72d8cd5b1a7387ce97c0d45cf78150ccb904606819afe75fd4e3338" name="aspell-es" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="45a316e40b3fa6c610565dfcad2e344d4260a612f6adb67d64762b134c633bc1c8e50b75298c0c9445db9f12553af437771eb5479748b7c1e3238a28d2ebdae4" name="aspell-et" arch="x86_64">
  <version epoch="0" ver="0.1.21" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="95f8efe8a3d4287ead50e5447e509e021477c8eae72f9c7a281d7318d51f3da5caa9a982edbb8e48c8b010720add7ffb99e4a67e2a2c71639d2a23c60bae4214" name="aspell-fa" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="f5f06352d5eee5be3d0555be5633d3738ec2d86830a5bb8ee523844c930976fc7c428fdcfa74c32b779b42f1ce1b853b5152aad976b7a254288bb563edcdeb08" name="aspell-fi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d2dd00991b4db8e2c791e90b67fe72c9c7a460fb9c88edb8bda3106de190d9e8ffeb41c9ae2e78347d36ece4cba03d67edd45085c56c5fba49d1d3ef3b077e55" name="aspell-fo" arch="x86_64">
  <version epoch="0" ver="0.2.16" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="27815af8f060388079c96f85879faff0414730db25f87ab7686f41dc6798cd323ba80ac5601b6e02c8c7537aee920111c3bc27d32cfd5137b771904ac4ef6320" name="aspell-fr" arch="x86_64">
  <version epoch="0" ver="0.50.3" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="888b70fc95e7bcc85c1941a5fb3432411265ecf5523abeae4a12eac0d5b1483806e62700eb48b7d9eee57e77748731b342164b253a29d110f93c6addab20002d" name="aspell-fy" arch="x86_64">
  <version epoch="0" ver="0.12" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="5f24842cf7c8d5c7cff09108ad487455bda292f86dd9f738380ef30e03a72a1bf0487a324a9b6a0b38e76f6ddccb4164c78466f7bb9b46953da01a8dae1f5dcf" name="aspell-ga" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="52d58fe987887a58f4f51d1fe795a4e28d6e8975d3fd555fb1abb4229da68492602de6a970f9eb5f203c5e0b7b31228f656c6b56d54289b94667fdb37acd4c2d" name="aspell-gd" arch="x86_64">
  <version epoch="0" ver="0.7.1.1.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="f692e5374c4dec3f8d958e006cd6958ae0c861a63883cf4926894b82af949f868afca1fb2698dedfff31c2de891f5fe26bac5b386d22258d4002204b6fb9a444" name="aspell-gl" arch="x86_64">
  <version epoch="0" ver="0.50a" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="7e379d16ae36f47ebf16353eef2668b7ffbc943b4d697ab0d7cfebbc81dac0cbe68ea7ec0cc94a897d47e23525652fedf88dbcccfaf66f88e471691e4d83066d" name="aspell-grc" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="f4820587d3d86b1f6a084f60a5720ec3491c192577eb6bc38252f4d2756c4dd61711a266c861d86eb5340db4aeafdc3d67be76387702f5c5386bd7e0120d5b5e" name="aspell-gu" arch="x86_64">
  <version epoch="0" ver="0.03" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d3b21bcc6aec8dead8c75795c1a5999e4a76a423f8b3e22251bf9e1bbfffdadb71d3f5dc7d7fb824528d8ec302edcaa4b0b37cd0d0206204b801cc5080888f83" name="aspell-gv" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="9c6ffa4c94ed67d283002fff519e133dfc62985b01c963b3bee50ce8037921b56064ecd6f3e6001ca320f1ce201b7102de9f4ecc86169ed2342d4ee856efe5bc" name="aspell-he" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="7d2aa93ada53f61af105337163de5a0784445c0ed994c10a58cd0d090e85d09caf67a4f70ffeaf2ab1113b111b3f63bb7921dfb341afb4c499713c845918328a" name="aspell-hi" arch="x86_64">
  <version epoch="0" ver="0.02" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="4e9b7cacf633c7ff73d9c88a33dad53cdc42755ebd3694d2cef433b5dd15ed7b825e88eab007137cb42c88ce4b263e35a4ea44bb7e7bed1877bed3a147fcb2a9" name="aspell-hil" arch="x86_64">
  <version epoch="0" ver="0.11" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="465c17c577e2f71225c47c2320900a0aff9149aad031e7c1312a19f68826b94e4280378817b34d916f0addd45bc03878a72b8574a67685a07c5b3c7affa1ffc3" name="aspell-hr" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="5cd9427f516f0b51ca16b0f5affaf17c431852d8a87c7ee7e46d7e26bcb7bf71567cd06ff3cdf66f30098c28acd2a74f4e3c9379c515cf5e79b3d5ba82742803" name="aspell-hsb" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="71b2875c62d6c7834e259986d0180b8072a155da5a66a90a364c4a89d6890c3aca0efb7f3017fb85ebd2d6222aba1176db6a077bf99c30236481ce40a3b26e54" name="aspell-hu" arch="x86_64">
  <version epoch="0" ver="0.99.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="610016604864749cd41c7ded0281ab9b5011a1a880ec794c14d0e3f680632062abb2cf9126eef45628b33c70d28a7f7d20e8abcfb3841f659dd26fd8949a7f48" name="aspell-hus" arch="x86_64">
  <version epoch="0" ver="0.03.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="57bdf1cb22060769a63f1957bc803009f1ee841daaa763cddabda3674059fb911d50d9807675e084e41d1d93cfc378bbd14aa6d17073efb32962d1107bbe1cef" name="aspell-hy" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="aa04fa8af6a50053076fe786c2ad772b4a7ad25ef8138ead92b46d1295a84f0a36ae703215e933fe0af9a769253df84ed9a05142414a0b31c6f2c33c3c4e4cd9" name="aspell-ia" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="e6c9d3b5c791f3a6e7ab82847eb3c376e0f6956972705d0edf19dab7ac239ba781e18277447e262732f251fc6550febfc0ab584fa1ebc1b3b3ee6e4758d72b31" name="aspell-id" arch="x86_64">
  <version epoch="0" ver="1.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="23cac9cd5a1e59be6a811b492cb2383bdff2decc2d918bcc52ec655e9b63eb52508052161d68b7e50141c4239f723754d8a2336925a2eb7eb2b5189b3a2c73e4" name="aspell-is" arch="x86_64">
  <version epoch="0" ver="0.51.10" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="2521b0353ba803f95f6aa7ccd008997397d56464ec66689669f0ff2913b8c79940673e93ae274046cdff853c1e664223a4c1b3c5927ddcceeb275554ba356a25" name="aspell-ispell" arch="x86_64">
  <version epoch="0" ver="0.60.8.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch source urls to https</changelog>
  <changelog author="dmueller@suse.com" date="1703937600">- update to 0.60.8.1:
  * Fix memory leak in suggestion code introduced in 0.60.8.
  * Various documentation fixes.
  * Fix various warnings when compiling with -Wall.
  * Fix two buffer overflows found by Google’s OSS-Fuzz.
  * Other minor updates.
- drop aspell-CVE-2019-25051.patch (upstream)</changelog>
</package>
<package pkgid="40404af36d1a21265339b042aef06f5c000424ff3d8f97b49dc1fa8b419aec4c390139dbcefe2483db82ad0e5142486f55fb4add77652a8105cc9b3d325f36ff" name="aspell-it" arch="x86_64">
  <version epoch="0" ver="2.2_20050523" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="8103d0023567ff99c3e376a7315c1c2883a265aa55d4b22e00d37d028d3a480c6b5c284abe0165ab8305a6d8f1a5f749c41eb6ab8947ab94d0e281354a0e0c2f" name="aspell-kn" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="c81e82fa9dbe984c63a11036824edf993788ed9669361eab1785aff5510dbf4839ab38227b3fe639c1338b25aab3853c6c65e0b88fdd2311bef275c7c192533e" name="aspell-ku" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d84f31888f0c25dc25f0682b555d861fc8b6198672af9f1e50e1cbd0b6cf4ae1608673ce802895f1008fb9e1328deb621c70efefeec3b7d4148a9a1c15264d51" name="aspell-ky" arch="x86_64">
  <version epoch="0" ver="0.01.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="e77364fe6a9209c8f86a2a3be5b762d145b5b4e8c88c36e06c44cfd012316549a6ad9a0c18b15be42df895dee5a98cee65685e843621541164d6d048fcd8222c" name="aspell-la" arch="x86_64">
  <version epoch="0" ver="20020503" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="4dc327446fdfcba098e65793f9afa4f819ed5fa316c470007239aa2623b3624f42a48f71b0779f5d8bec743bb0b396b28a42a184e6b1532a7b777e090b5ca1a6" name="aspell-lt" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="791c7964ead014571fe3430c35376c5e91075c9d848f8ff66ff10837fb45cd181733e449e97131d6e5d35321516a25f71936e276f16675a2c0245a1f36e89327" name="aspell-lv" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="a78d5496c5931d0381ebac99eca8e71b8f091c99416f9e077d4de3269e3ff522ffc0c141684b34d59fb2ae7f70acb23e17e2e3e10713c6962a7b6cba8446cbcb" name="aspell-mg" arch="x86_64">
  <version epoch="0" ver="20040807" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="442a67c927ce94c77940cd2bdd01b6dbbb9f1f4e8afb98053cc86ad63dc5b053d9ed80f31a1ae165d42e6442d61e95773c9da1423caab1348f5f7327723449d3" name="aspell-mi" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="ec062f0c4a1c0234f8a14a0ba95fcf60ee96b5551bc39e8f040a1ffde13847b01f72a8e5ee0e5edf07332186944dc3b15a1a34d8e93dcd22ceefb97a310feb06" name="aspell-mk" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="7233a3e724c25c80f6afe41ca5750dd21e346755287906bb350d6d9eb41794b099156604517f290c9a4bc1bdfdf0eac80d457972e1c69a52a88167c98d116351" name="aspell-ml" arch="x86_64">
  <version epoch="0" ver="0.03" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="c925b08d410513b92b1f261884dec02a83ebabc025cdd1221bbd60e7f6d2b51aefaffe0adddd8634058cc9d018afbb0d4ca698c2ba897f0bda375d35a9f25162" name="aspell-mn" arch="x86_64">
  <version epoch="0" ver="0.06.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d9c38263c5a3abea2a717762aabc7a9eac50c5f9300a50f0b4ea31f837016b88aa4fde00f1aff66245a813b1888d581ccd5092362222223b0283c1f888bf295c" name="aspell-mr" arch="x86_64">
  <version epoch="0" ver="0.10" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="1ac107f08f56d63def6702cca0fb19cc87ccd7452b77169a1f586825d9ab35ab06f55f85f262338f3c0e501637ed2e3d8ebcede137e57a915d9d40ad4c1786c2" name="aspell-ms" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d98824ba91ed1cde470d53d34407b70cf8daaac2be3e4be6abc372aaf8ba3543ebcf6f3a2708bb9458d283748c922e3abe2390827005dea7d65487afa58e921f" name="aspell-mt" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="6ad95f89b2a148317a0ca1ece1288a760882bd80b2951835579f4fe5acd4981020945fceb3413c888b9afa11c7fd438e7e786dc9e563cb2c9e3a13cfcbebf9fa" name="aspell-nb" arch="x86_64">
  <version epoch="0" ver="0.50.10" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d1aa868f755205fa2fb53b34a59271c13d9bea4a0b5f424fc0b3b9b80025a1689419dd351e7cc28cdeac8119b0421694b87dba409235f4bed6fdfb5dcd981279" name="aspell-nds" arch="x86_64">
  <version epoch="0" ver="0.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="f0a79e7d98e2df3bbd1c982958f006a136b39feba4b1a90a5b1a8eb0516fe302d63571e1a9bf4bc743f3070656c03639e2f69172916fe7d78261394e02fa6604" name="aspell-nl" arch="x86_64">
  <version epoch="0" ver="1.00.7" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="6426d38dfaddbbc98639c569c1e53efb8389354a47195ad40e48890b7086eba725b908cc8d11d27c1cb0a646c747f6571a45f68319a8464889bd902a8473420a" name="aspell-nn" arch="x86_64">
  <version epoch="0" ver="0.50.11" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="32738d7e5fbadd811e0262466eff1d16fd6b57bff9b0ef48cdd1b53ef22d1b6494b878f1f249a2fddb135052352b7e107e8c9ce82964fb3452f514cfd0303259" name="aspell-ny" arch="x86_64">
  <version epoch="0" ver="0.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="c075eb399d7f8c470c1b3851ddf4f46b35e6e1413824a8c6235864357f534846a77af915e37142e84f52b1ded313fb3b4c48db9ba2bc6eeca827d1f32834dc8e" name="aspell-or" arch="x86_64">
  <version epoch="0" ver="0.03" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="87d95f89d5b8f7722d990b34af369e05d82ce473d9c0965e94013b4b48ca1c2ff2789b57fac2a9f50250c1740a3c97cd523e9bd803c5eacdb837b37b521d4747" name="aspell-pa" arch="x86_64">
  <version epoch="0" ver="0.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d9a89e34d7482aef5471e00cd5c5a31b04b0d1fbc011146152d8ef70f0611a340d7218a72b47a0341a3b22d9a4d19693858f2db969057b333e97918e20163b92" name="aspell-pl" arch="x86_64">
  <version epoch="0" ver="0.60.2015.04.28" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="ac409b6171c04d3d1e37f513edba64759c1873d0319949565b30b5219960f4687eac3ab4d8d2e32f0af89d4aa3f628d8c4983a5dc51fc414f84fc626c3827a95" name="aspell-pt_BR" arch="x86_64">
  <version epoch="0" ver="20131030.12.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="33de90f3ee64b03abeeaf88adf314740fe63003add498857657c2bed6970212748b8d6d80bd26bad6bb31c73c23c9e4f61556c3bcfc3d3e9298af9ea46c193bc" name="aspell-pt_PT" arch="x86_64">
  <version epoch="0" ver="20190329" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="a61cc7259807aa6b5b7760f1dd7a31ae0a10eb076eb4bb302f8cd787346ad4bf861d6d91bc59955cb3e96e828d1bb04762ae4cd7964a8d8d5e318d1949b71840" name="aspell-qu" arch="x86_64">
  <version epoch="0" ver="0.02" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="5e4992891c724f923ee48113de5dffa8537cde9d92f218e8abe063629cf699ee4fefc76fc77014f93122f267aa7ec522b7bebfcaed268b9591e5a11387733491" name="aspell-ro" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="15eca07340b923e552e2ef6dbbbadd89d388e441309ed385b077a9e42081012549781020b1fa21c4deb4cf18eb3999f018dfad0c957e999ec481eb5bdc2d44a5" name="aspell-ru" arch="x86_64">
  <version epoch="0" ver="0.99.f7.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="ba2fcd78c3aa21e9e0aa333a2085e10b2df7567288eeb94921f13892b778b694376ebe215e12cbc90d1eff23b7a0f3b86b1160daab319f347cf45a961cbda2cc" name="aspell-rw" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="1dbbf438241e4d7c411933aca5e5ee47c3852ee004dd4534fd91d230411efb793d0b119c2e602f2b8b912f594d82aae1935c99875114d1e4fe5846294dfea83b" name="aspell-sc" arch="x86_64">
  <version epoch="0" ver="1.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="50daaa97b8671a1b85bfb5439ea46b8bf974518eb241bab29e5699aa0f5df99d18b206f8ea8cc4c9dee031fa38a8f4b07fafce591cefd1f65cbc324f01745d6e" name="aspell-sk" arch="x86_64">
  <version epoch="0" ver="2.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="481aecfafe39a2363a6b1cf523356d0af12031257793fe1353d5be132db6253a0b4e3479118b51f120177caa677fbe9437ca19cd4ac12bad60566c970b83a379" name="aspell-sl" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="a7d4eb41043986346d779584bc1d2c5d5333eb7c63349699b3cd7684affd2a2798122d83fbdf5529f8a21638b56db7766b9161749dd369cfa67544b047a68b26" name="aspell-spell" arch="x86_64">
  <version epoch="0" ver="0.60.8.1" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
  <changelog author="meissner@suse.com" date="1657195200">- switch source urls to https</changelog>
  <changelog author="dmueller@suse.com" date="1703937600">- update to 0.60.8.1:
  * Fix memory leak in suggestion code introduced in 0.60.8.
  * Various documentation fixes.
  * Fix various warnings when compiling with -Wall.
  * Fix two buffer overflows found by Google’s OSS-Fuzz.
  * Other minor updates.
- drop aspell-CVE-2019-25051.patch (upstream)</changelog>
</package>
<package pkgid="d6350b80317d95c5ff39c158bacac2cd570c3bc3139d11d9a9c7e13f0ea491cce235423d91e3534cd8876d7d1aa65125419edae23de2f5c4fad081928b9589f2" name="aspell-sr" arch="x86_64">
  <version epoch="0" ver="0.02" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="9a4be82848c034c70443699c5650b80cbaf5a09e6a8ab4d4f4f8471122d011d1d1267fdc12037f6adb1369632aaf1b71d5fcafdf3198bb7392fe2fdc31d7f947" name="aspell-sv" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="c3135a624cb62f5c780d2da36490892c82465ad2d7f37813ca65edce80c5d569f2ab6ea103d2e85cca77bf11e4df8d0467173223704154416bafd724c2c2038a" name="aspell-sw" arch="x86_64">
  <version epoch="0" ver="1.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="1cfac0356faddcdd72b824fe99a5a9f7885dd5cfb550ec59b12bcac8e43a35d6d4ac3eed2d0155bc7c77efb79750fab8e611b290c3c33a422d4d6b98b1ff2a9c" name="aspell-ta" arch="x86_64">
  <version epoch="0" ver="20040424" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="c7ac2b9aa7ca744593825352d38db9c7cd2c3deb190697f48cbbd9af1c1d500f250335c321f4ab58b9bdfbd642b5fc2d722b02c712d37e89662ab374d52d4d8f" name="aspell-te" arch="x86_64">
  <version epoch="0" ver="0.01.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="531c749d3a0d7630bfcbe37cecd99571301c26e82578b780efd2062e36a81a22b5f2bf9b91dbc20f93769e654ca9eb604403758723d6439c938dad35fff0140a" name="aspell-tet" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="2300d421419e1af0efa01e5c98402d771c0d2940c56f6605c71e2fd423b020779383c4cbaca07bbdf340fef931416ad96175f9a02eb31610a57727f729b6a46c" name="aspell-tk" arch="x86_64">
  <version epoch="0" ver="0.01" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="634a4f1960ead6a0c1a1b8e05b8b140fa0ea8eb1b3c917e3f4275217062b1aaa6a30497f0cdc5e4f424dc258c0d60ffd53d3afaa6a9b7384a534405b2e45e150" name="aspell-tl" arch="x86_64">
  <version epoch="0" ver="0.02" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="7964ae7f474bd34940015c145e54dce94afe43250d684cf5dc5f2af8b5247cd97f3c9a866e30aa633c7ed6681968479d6aebeb361aaca25181ce7494a26f9643" name="aspell-tn" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="f9625768bb89aa60914f5890ec6d6aa4ca79dadd054fc2395a827a2546ddb23facc9b583b7381de95af11a34f01169c39aaf22a9036b54700aeccd8eeb9bcafa" name="aspell-tr" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="da780cee39de408fb0ffb3a86ae2a59cc5367c079784fb669c44410ee6b80ff787c439bafe8b1da6a01a620d7023b1ded5a29591036911c4e2be3e02014d7097" name="aspell-uk" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="6ddd82a47080cba0f1af0a373d9a19a940b593eba3653c130fa619d924eedd848a50dbc37a3752d60b9271a0db2c32babbbd9d874e666534bda77ee9fabc616f" name="aspell-uz" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="d8e87a6b7e24b49a1c91766ac1736bb5bb7de6cc931ac4fa9cec08b0fb789daa3bbb0605226a74f9440a8fd90cd8cc67facc6642a9ca59ec43a84521cae2c26f" name="aspell-vi" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="f56c847948458903993e9a0b37e6cb19a84fedced3f60f9e6bc1e3e46712b1546f48e9c3af5ecb56d385daad74ec1405daa73d6888a482c0bbca9286a2a22487" name="aspell-wa" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="0f48ec3ea5ac08e1d37a11a33d4fe43f58fd9e1182b0aae5e8f9100d07e9424fff4ffe025c0beffc723a75da0cee81aa8fd4b904622c9a8e208b795389a78c4e" name="aspell-yi" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="a910cf68bd52715a4d5cf88a47dcc40a6f3fa7db48d0fb41345aa2bf4d63d7c370b8c95876f51f05c47d79d555f49c5f558e563dbb735b7c217a07a659f5d205" name="aspell-zu" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- do not require aspell binary, dictionaries can be used even
  by the aspell library [bsc#1177523]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1709121600">- Delete old specfile constructs.</changelog>
</package>
<package pkgid="12ad83b534e5b9f3c0c1c79e64e9b8eb0dd80538c280063d0b8c818c5fa847068aa4921322b54a40f3ef6b3bb9beb581f64838a90b49ad03f869e48a29ad8feb" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.25.3" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="5ce2526aed77b394745f2430088616b968b7ba2e0300a5e5cacc3da672d814c53e2ff04cf48f0c4135add7de236ccca7e02cfabfad184e2746923d75cd037aa6" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.27.7" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1769515200">- Upgrade to version 3.27.7
  * Security
    + Fix XXE vulnerability in isXmlEqualTo assertion
    (bsc#1257293, CVE-2026-24400)
  * Breaking Changes
    + Delegate OptionalDouble value comparison to Double.compare
    in hasValue assertion
    + Replace assertThat(Temporal) with
    assertThatTemporal(Temporal)
  * Deprecated
    + Deprecate ObjectAssertFactory in favor of
    Assertions.assertThat(Object)
    + Deprecate AssertionErrorFactory in favor of
    AssertionErrorCreator
    + Deprecate catchThrowableOfType(ThrowingCallable, Class) in
    favor of catchThrowableOfType(Class, ThrowingCallable)
    + Deprecate assertThat(Iterable, AssertFactory),
    + Deprecate ClassBasedNavigableIterableAssert and
    ClassBasedNavigableListAssert
    + Deprecate usingComparatorForFields and remove deprecated
    assertions from usingComparatorForType documentation
    + Deprecate hasCauseReference(Throwable) from Throwable
    assertions
    + Deprecate org.assertj.core.annotations.Beta in favor of
    org.assertj.core.annotation.Beta
    + Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor
    of org.assertj.core.annotation.CanIgnoreReturnValue
    + Deprecate org.assertj.core.util.CheckReturnValue in favor of
    org.assertj.core.annotation.CheckReturnValue
    + Deprecate XmlStringPrettyFormatter with no replacement
  * New Features
    + Support multiple AfterAssertionErrorCollected callbacks
    + Add InstanceOfAssertFactory for Set instances
    + Add doesNotContainKey and doesNotContainKeys to Guava Multimap
    assertions
    + Add assertions for JDK YearMonth type
    + Add TemporalAssert type
    + Add ignoringFieldsOfTypesMatchingRegexes
    + Add fail(Throwable) and fail() variants
    + Add isPrivate to Class assertions
    + Add doesNot[Start/End]WithWhitespace methods to CharSequence
    assertions
    + Add createAssert(ValueProvider) to AssertFactory
    + Add values() navigation method to AbstractMapAssert
    + Add bytes()/bytes(Charset)/bytes(String) navigation methods to
    AbstractStringAssert
    + Add doesNotThrowAnyExceptionExcept to AbstractThrowableAssert
    + Add hasPermittedSubclasses to Class assertions
    + Add isUnmodifiable to Iterator assertions
    + Add actual() to access the object under test
    + Add isCompletedWithValueMatchingWithin to CompletableFuture
    assertions
    + Add completesExceptionallyWithin to CompletableFuture
    assertions
    + Add inBinary to CharSequence assertions
    + Support for Assertions.byLessThan(Duration) and
    Assertions.within(Duration)
    + Add standard representation for CharSequence
    + Add predicate descriptions overloads to anyMatch and noneMatch
    + Add doesNotMatch(Predicate)
    + Add usingEquals accepting a BiPredicate and an optional
    description to provide a custom comparison in assertions
    + Add isNotEmpty to Table assertions
  * Bug Fixes
    + Preserve original order of elements when returning duplicates
    on doesNotHaveDuplicates
    + Make isNotEqualTo(boolean) pass when actual is null
    + Fix isEqualTo comparison of Timestamp instances with Instant
    + Fix Instant conversion with Date assertions
    + Rebuild default date formats used to parse strings as dates
    when default timezone or lenient flag changes
    + Fix Javadoc rendering on
    FactoryBasedNavigableListAssert::assertThat
    + Allow ComparingNormalizedFields instances to be reused across
    different assertions
    + Recursive assertion hasNoNullFields throws NPE with fields of
    anonymous and local types
    + Fix incorrect mutation of actualElementsGroupedByHashCode in
    recursive comparison
    + Recursive comparison ignoringFields not working properly with
    maps
    + Custom representation ignored when describing expected items
    not in the actual list
    + hasFieldOrPropertyWithValue swallows exceptions thrown by
    getters, and reports non-existent property instead
    + satisfies() with nested assertions obscures stack trace
    + Recursive comparison fails if ignored fields are not found in
    expected
    + Fix missing introspection for record accessors
    + Honor assertion description in asString()
    + Avoid InputStream manipulation when mark / reset are supported
    + NPE with custom RecursiveComparisonConfiguration on
    usingRecursiveFieldByFieldElementComparator
    + Restore support for null-valued maps when ignoring fields
    + Fix StandardRepresentation regression for unquoted strings
    + Fix thread-safety in AbstractDateAssert
    + Add missing export for org.assertj.core.annotation
    + Navigation to assertj-core or guava types from assertj-guava
    Javadoc site has unnecessary header
  * Improvements
    + Avoid duplicating maven-javadoc-plugin configuration and CSS
    files
    + Favor additionalOption entries in maven-javadoc-plugin
    + Fix typo in Javadoc
    + Improve AssertFactory Javadoc
    + Add Throwable stack trace to ShouldHaveCauseExactlyInstance
    + Fix typo
    + Add Throwable stack trace to ShouldHaveCauseInstance
    + Implement boolean assertions directly in AbstractBooleanAssert
    and remove Booleans internal class
    + Remove stack trace elements triggered by AssertJ in addition
    to AssertJ elements
    + Report all failing conditions when using
    satisfies(allOf(Condition...))
    + Fix Unicode escapes in inUnicode() Javadoc
    + Show error differences if values were compared with equals in
    recursive comparison
    + Add throwable stacktrace to ShouldNotContainCharSequence
    + Remove unused code and other minor cleanup
    + Simplify comparison strategy isLessThan and
    isLessThanOrEqualTo in AbstractComparisonStrategy
    + Update AbstractCharSequenceAssert.java reference
    + Include stack trace of internal errors in all/any satisfy
    assertions
    + Declare license using SPDX identifier
    + Add Class info to class loading strategy failures
    + Migrate to the Central Publisher Portal, enable snapshot
    publishing
    + Annotate fail methods with custom @Contract
    + ByteBuddy in AssertJ 3.27.4 not compatible with Java 25</changelog>
</package>
<package pkgid="0bd0589e25fd2ddc0a23f976e91ebf6302a273b2b4256cad0fab2cc1d6324356a4cee6d12e617eb1adfd0a05ba04720f84ec80da57597d11c3dfe475e25e4ffe" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.25.3" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="17dc5085627318da6bfd8362b111849ecdce4b8d0cd9e4e5abf2d12b3646527dd6da8507dd73942a94c9a0f0337fb7897fdb3a0567d7bb657f60683a688e760f" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.27.7" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1556625600">- Initial packaging of assertj-core 3.8.0</changelog>
  <changelog author="jengelh@inai.de" date="1556712000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1714478400">- Upgrade to version 3.25.3
  * Deprecations:
    + Deprecate the following date/time related assertions in favor
    of isCloseTo:
  - isEqualToIgnoringHours
  - isEqualToIgnoringMinutes
  - isEqualToIgnoringSeconds
  - isEqualToIgnoringMillis
  - isEqualToIgnoringNanos
  - isInSameHourAs
  - isInSameMinuteAs
  - isInSameSecondAs
    + Deprecate asList in favor of asInstanceOf
  * New Features:
    + Add Descriptable#describedAs(Supplier&lt;String&gt;)
    + Add isInThePast and isInTheFuture to LocalDate assertions
    + Add isInThePast and isInTheFuture to the missing Java 8
    date/time types
    + Add isRecord and isNotRecord to Class assertions
    + Add hasNullValue and doesNotHaveNullValue to
    AtomicReferenceAssert
    + Add asBoolean|Byte|Short|Int|Long|Float|Double to String
    assertions
    + Add hasRecordComponents to Class assertions
    + Add getters for field path in ComparisonDifference
    + Allow to compare enum and string fields in the recursive
    comparison
    + Provide value when assertThatThrownBy / thenThrownBy fail
    + Add isSealed and isNotSealed to Class assertions
    + Add assertThatCharSequence to disambiguate Groovy's GString
    + Change the way the properties are collected using the
    Class.getMethods() API instead of iterating the class
    hierarchy using Class.declaredMethods()
    + Add default constructor for RecursiveComparator
    + Add isPrimitive and isNotPrimitive to Class assertions
    + Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...)
    + Show the array/iterable under test in the assertion error
    message when it is not empty but should have been
  * Bug Fixes:
    + Compare Java types from javax and com.sun by their equals
    method in recursive comparison
    + The recursive comparison comparingOnlyFields did not treat
    array/iterable elements as root objects
    + Fixes a bug when failing assertions on DirectoryStream types
    + Fix handling of null containers in the recursive assertion
    + Handle null values in map entry sets when formatting
    + Fix NPE when expected and actual field values are null
    + Fix NPE on anyMatch when actual contains null and
    Objects::isNull is used as predicate
    + Fix misleading subsequence failure messages in string
    assertions
    + Do not ignore nested fields of types specified in
    comparingOnlyFieldsOfTypes
    + containsExactly does not work properly with maps not using
    equals to compare keys
    + Escape percentage in shouldContainExactly error message
    + Fix recursive comparison of ignored types in unordered
    collection
    + Revert "Provide value when assertThatThrownBy/thenThrownBy
    fail"
    + Revert "fix: containsExactly does not work properly with maps
    not using equals to compare keys"
    + Fix unresolvable Javadoc stylesheet URLs, simplify
    configuration
    + Fix missing configuration for MatcherAssert soft assertions
    + Make deprecation notice visible in AbstractAssert#asList
    + Recursive comparison uses equals on root object when
    useOverriddenEquals is enabled
    + satisfiesExactlyInAnyOrder fails if actual overrides equals
    + Avoid calling actual.hashCode() and expected.hashCode() in
    DualValue
    + Recursive comparison checks for existence of fields in types
    that parameterize nested unordered iterables
    + Lock maven-clean-plugin version for all modules
    + Fix a performance regression in the recursive comparison
    related to FieldLocation
    + Don't fail when the recursive comparison checks compared
    fields in collection elements
  * Improvements
    + Add Spotless
    + Use Bnd feature to write resolved bndrun files to output
    folder
    + Add Throwable stack trace to ShouldHaveClause
    + Avoid copy of any Collection instance in
    Iterables::assertContains
    + Add Throwable stack trace to ShouldHaveRootCauseInstance and
    ShouldHaveRootCauseExactlyInstance
    + Add missing description to nested condition
    + Make nestable condition factory accept conditions on super
    types
    + Add varargs overload to Assert::hasString and
    Assert::doesNotHaveString
    + Improve recursive comparison performance by caching field and
    field names result
    + Document performance cost of ignoring collection order
    + Track visited values and their comparison differences so that
    they can be reused
    + Use hash code for compareUnorderedIterables to improve
    performance in some common cases
    + Improve recursive comparison error message regarding equals
    methods used for JDK types
    + Format large arrays as strings
    + Remove null check as isArray already performs it
    + Fix PrimitiveArralList/TransformlingList test file names
    + Add exception for usages of isEqualTo and isNotEqualTo on
    assertions
    + Add check for missing fields in recursive comparison where
    specific fields are requested for comparison
    + Improve efficiency of iterable string conversion
    + Add more tests for usingRecursiveComparison
    + Checks that compared fields exist before running the recursive
    comparison
    + Remove maven-surefire-plugin duplicate version
    + Remove Maven default goal
    + Add dependency graph workflow
    + Normalize non-breaking spaces like regular white spaces
    + AbstractOffsetDateTimeAssert::isBetween parameter names should
    use inclusive, not exclusive
    + Invoke isNotNull in returns and doesNotReturn
    + Cache node names in ComparingFields, ComparingProperties
    + Cache node names in ComparingNormalizedFields
    + Use simpler syntax in
    DefaultRecursiveComparisonIntrospectionStrategy
    .getChildrenNodeNamesOf
    + Update to Contributor Covenant Code of Conduct v2.1
    + Correct contains assertion Javadoc to reflect method behavior
    in case actual is not empty and the group of values to look
    for is
    + Fix Javadoc typos
    + Improving null-safety of isEqualToNormalizingNewlines
    + Speed up for BinaryDiff performance
    + Upgrade workflows to Java 21
    + Apply flatten-maven-plugin to assertj-core and assertj-guava</changelog>
  <changelog author="fstrba@suse.com" date="1716552000">- Require in OBS junit5-minimal to avoid provider choice</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1769515200">- Upgrade to version 3.27.7
  * Security
    + Fix XXE vulnerability in isXmlEqualTo assertion
    (bsc#1257293, CVE-2026-24400)
  * Breaking Changes
    + Delegate OptionalDouble value comparison to Double.compare
    in hasValue assertion
    + Replace assertThat(Temporal) with
    assertThatTemporal(Temporal)
  * Deprecated
    + Deprecate ObjectAssertFactory in favor of
    Assertions.assertThat(Object)
    + Deprecate AssertionErrorFactory in favor of
    AssertionErrorCreator
    + Deprecate catchThrowableOfType(ThrowingCallable, Class) in
    favor of catchThrowableOfType(Class, ThrowingCallable)
    + Deprecate assertThat(Iterable, AssertFactory),
    + Deprecate ClassBasedNavigableIterableAssert and
    ClassBasedNavigableListAssert
    + Deprecate usingComparatorForFields and remove deprecated
    assertions from usingComparatorForType documentation
    + Deprecate hasCauseReference(Throwable) from Throwable
    assertions
    + Deprecate org.assertj.core.annotations.Beta in favor of
    org.assertj.core.annotation.Beta
    + Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor
    of org.assertj.core.annotation.CanIgnoreReturnValue
    + Deprecate org.assertj.core.util.CheckReturnValue in favor of
    org.assertj.core.annotation.CheckReturnValue
    + Deprecate XmlStringPrettyFormatter with no replacement
  * New Features
    + Support multiple AfterAssertionErrorCollected callbacks
    + Add InstanceOfAssertFactory for Set instances
    + Add doesNotContainKey and doesNotContainKeys to Guava Multimap
    assertions
    + Add assertions for JDK YearMonth type
    + Add TemporalAssert type
    + Add ignoringFieldsOfTypesMatchingRegexes
    + Add fail(Throwable) and fail() variants
    + Add isPrivate to Class assertions
    + Add doesNot[Start/End]WithWhitespace methods to CharSequence
    assertions
    + Add createAssert(ValueProvider) to AssertFactory
    + Add values() navigation method to AbstractMapAssert
    + Add bytes()/bytes(Charset)/bytes(String) navigation methods to
    AbstractStringAssert
    + Add doesNotThrowAnyExceptionExcept to AbstractThrowableAssert
    + Add hasPermittedSubclasses to Class assertions
    + Add isUnmodifiable to Iterator assertions
    + Add actual() to access the object under test
    + Add isCompletedWithValueMatchingWithin to CompletableFuture
    assertions
    + Add completesExceptionallyWithin to CompletableFuture
    assertions
    + Add inBinary to CharSequence assertions
    + Support for Assertions.byLessThan(Duration) and
    Assertions.within(Duration)
    + Add standard representation for CharSequence
    + Add predicate descriptions overloads to anyMatch and noneMatch
    + Add doesNotMatch(Predicate)
    + Add usingEquals accepting a BiPredicate and an optional
    description to provide a custom comparison in assertions
    + Add isNotEmpty to Table assertions
  * Bug Fixes
    + Preserve original order of elements when returning duplicates
    on doesNotHaveDuplicates
    + Make isNotEqualTo(boolean) pass when actual is null
    + Fix isEqualTo comparison of Timestamp instances with Instant
    + Fix Instant conversion with Date assertions
    + Rebuild default date formats used to parse strings as dates
    when default timezone or lenient flag changes
    + Fix Javadoc rendering on
    FactoryBasedNavigableListAssert::assertThat
    + Allow ComparingNormalizedFields instances to be reused across
    different assertions
    + Recursive assertion hasNoNullFields throws NPE with fields of
    anonymous and local types
    + Fix incorrect mutation of actualElementsGroupedByHashCode in
    recursive comparison
    + Recursive comparison ignoringFields not working properly with
    maps
    + Custom representation ignored when describing expected items
    not in the actual list
    + hasFieldOrPropertyWithValue swallows exceptions thrown by
    getters, and reports non-existent property instead
    + satisfies() with nested assertions obscures stack trace
    + Recursive comparison fails if ignored fields are not found in
    expected
    + Fix missing introspection for record accessors
    + Honor assertion description in asString()
    + Avoid InputStream manipulation when mark / reset are supported
    + NPE with custom RecursiveComparisonConfiguration on
    usingRecursiveFieldByFieldElementComparator
    + Restore support for null-valued maps when ignoring fields
    + Fix StandardRepresentation regression for unquoted strings
    + Fix thread-safety in AbstractDateAssert
    + Add missing export for org.assertj.core.annotation
    + Navigation to assertj-core or guava types from assertj-guava
    Javadoc site has unnecessary header
  * Improvements
    + Avoid duplicating maven-javadoc-plugin configuration and CSS
    files
    + Favor additionalOption entries in maven-javadoc-plugin
    + Fix typo in Javadoc
    + Improve AssertFactory Javadoc
    + Add Throwable stack trace to ShouldHaveCauseExactlyInstance
    + Fix typo
    + Add Throwable stack trace to ShouldHaveCauseInstance
    + Implement boolean assertions directly in AbstractBooleanAssert
    and remove Booleans internal class
    + Remove stack trace elements triggered by AssertJ in addition
    to AssertJ elements
    + Report all failing conditions when using
    satisfies(allOf(Condition...))
    + Fix Unicode escapes in inUnicode() Javadoc
    + Show error differences if values were compared with equals in
    recursive comparison
    + Add throwable stacktrace to ShouldNotContainCharSequence
    + Remove unused code and other minor cleanup
    + Simplify comparison strategy isLessThan and
    isLessThanOrEqualTo in AbstractComparisonStrategy
    + Update AbstractCharSequenceAssert.java reference
    + Include stack trace of internal errors in all/any satisfy
    assertions
    + Declare license using SPDX identifier
    + Add Class info to class loading strategy failures
    + Migrate to the Central Publisher Portal, enable snapshot
    publishing
    + Annotate fail methods with custom @Contract
    + ByteBuddy in AssertJ 3.27.4 not compatible with Java 25</changelog>
</package>
<package pkgid="896e54c06941634c5d980162c3bfa5a20b23be69f360be2c49325218e05204562e3553d5b87cff21bfda40e6dfb12f45b0efa8f50b8a0d3c56acaf3f1a39bb2a" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1662984000">- update to 5.2.5:
  * Add unittest to reproduce undefined behavior
  * Cleanups
  * Link static linkage for std_image.
  * fix msvc warnings-as-errors
  * Remove dll-export tags from static library builds.
  * Fix Import a specific FBX model will freeze the app
  * Create SECURITY.md
  * Pragma warnings cause build fail with MinGW
  * Fixed FBXConverter build error when using double precision
  * Fix possible nullptr exception
  * [Experimental] New skeleton container for bones
  * Add support for GCC v12
  * Remove unused variable.
  * Infinite loop on bad import files
  * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
  * Fix Windows 32-bit builds
  * Fix GNUC check on Windows
  * Update the name of the package
  * Kimkulling/fix invalid opengex token match
  * Disable build for tools per default
  * Use mingw.include
  * Fix a memory leak
  * Fix nested animation name being lost in Collada
  * Fix possible bad_alloc exception for an invalid file
  * Bump JesseTG/rm from 1.0.2 to 1.0.3
  * Bump actions/cache from 2 to 3
  * Kimkulling/fix texture loading 3MF, reladed issue-4568
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/checkout from 2 to 3
  * Remove assertion test
  * Fix memory leak in D3MFOpcPackage
  * Fix typo in installation instructions for ubuntu.
  * Build fix for compiling against minizip.
  * Fix stl for over 4 GB
  * Fix uninitialized variable.
  * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
  * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
  * Fixes Heap-buffer-overflow in std::__1::basic_string&lt;char, std::__1::…
  * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
  * Fixes Heap-buffer-overflow in SuperFastHash
  * ColladaParser - Store sid in mSID field
  * Fix mingw include in assimp_cmd.rc
  * Fix warnings that are causing build fails with specific build flags
  * Update version tag
  * Improvements and optimizations for the obj-parsers.
  * Experiment: try to enable parallel build
  * Fixed typo
  * Use [[fallthrough]]; to mark whished fallthroughs
  * Kimkulling/do not add dot when the extension is empty
  * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
  * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
  * Fix problems setting DirectX_LIBRARY
  * Added support for more bone weights in GLTF2
  * (Mostly) Blender fixes
  * [WIP] Use ai_Real to write correct accuracy
  * SMD fixes
  * Remove exception on glTF 2.0 loading
  * Fix out-of-bounds reads in X3D importer
  * Apply the modernize-use-emplace clang-tidy rule
  * The Wrong object is created here!
  * [WIP] Code cleanup and some new unittests for edge-cases.
  * clang-tidy: explicitly default all empty ctors and dtors
  * fix vertices being joined duplicating weights
  * add missing light data to assbin import/export
  * Fix aiBone.mOffsetMatrix documentation
  * Minor obj export bugfix
  * Kimkulling/cleanup after reviewing
- drop 0001-Fix-build-with-zlib.patch (upstream)</changelog>
  <changelog author="predivan@mts.rs" date="1680696000">- Enable build of CLI tools.</changelog>
  <changelog author="rpm@fthiessen.de" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="christophe@krop.fr" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="adam@mizerski.pl" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="christophe@krop.fr" date="1712836800">- Update to 5.4.0
  * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
  * Fix: Add check for invalid input argument
  * Replace an assert
  * Extension of skinning data export to GLB/GLTF format
  * Fix output floating-point values to fbx
  * Update ImproveCacheLocality.cpp
  * Deep arsdk bone double free
  * Fix Spelling error
  * use size to be compatible with float and double
  * Fix: Add missing transformation for normalized normals.
  * Fix: Implicit Conversion Error
  * Fix add checks for indices
  * Update FBXBinaryTokenizer.cpp
  * link to external minizip with full path
  * utf8 header not found
  * Rm unnecessary deg-&gt;radian conversion in FBX exporter
  * Fix empty mesh handling
  * Refactoring: Some cleanups
  * Fix invalid read of uint from uvwsrc
  * Remove double delete
  * fix the mesh-name error.
  * COLLADA fixes for textures in C4D input
  * Use the correct allocator for deleting objects in case of
    duplicate animation Ids
  * Fix container overflow in MMD parser
  * Fix: PLY heap buffer overflow
  * Fix: Check if index for mesh access is out of range
  * Update FBXConverter.cpp
  * FBX: Use correct time scaling
  * Drop explicit inclusion of contrib/ headers
  * Update Build.md
  * Fix buffer overflow in FBX::Util::DecodeBase64()
  * Readme.md: correct 2 errors in section headers
  * Fix double free in Video::~Video()
  * FBXMeshGeometry: solve issue #5116 using patch provided
  * Fix target names not being imported on some gLTF2 models
  * correct grammar/typographic errors in comments (8 files)
  * KHR_materials_specular fixes
  * Disable Hunter
  * fixed several issues
  * Fix leak
  * Check the validity of the archive without parsing
  * Fix integer overflow
  * Add a test before generating the texture folder
  * Build: Disable building zlib for non-windows
  * null check.
  * Bump actions/upload-artifact from 3 to 4
  * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
    to pbrMetallicRoughness/baseColorFactor
  * dynamic_cast error.
  * Add missing IRR textures
  * Fix handling of X3D IndexedLineSet nodes
  * Improve acc file loading
  * Readme.md: present hyperlinks in a more uniform style
  * FBX Blendshape FullWeight: Vec&lt;Float&gt; -&gt; FullWeight: Vec&lt;Double&gt;
  * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling fix
    and colour fix
  * Update StbCommon.h to stay up-to-date with stb_image.h.
  * Introduce aiBuffer
  * Add bounds checks to the parsing utilities.
  * Fix crash in viewer
  * Static code analysis fixes
  * Kimkulling/fix behavior of remove redundant mats issue 5438
  * Fix X importer breakage introduced in commit f844c33
  * Fileformats.md: clarify that import of .blend files is deprecated
  * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
  * More GLTF loading hardening
  * Bump actions/cache from 3 to 4
  * Blendshape-&gt;Geometry in FBX Export
  * Fix identity matrix check
  * Fix PyAssimp under Python &gt;= 3.12 and macOS library search support
  * Add ISC LICENSE file
  * ColladaParser: check values length
  * Include defs in not cpp-section
  * Add correct double zero check
  * Add zlib-header to ZipArchiveIOSystem.h
  * Add 2024 to copyright infos
  * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
  * Eliminate non-ascii comments in clipper
  * Fix compilation for MSVC14.
  * Add correction of fbx model rotation
  * Delete tools/make directory
  * Delete packaging/windows-mkzip directory
  * Fix #5420 duplicate degrees to radians conversion in fbx importer
  * Respect merge identical vertices in ObjExporter
  * Fix utDefaultIOStream test under MinGW
  * Fix typos
  * Add initial macOS support to C4D importer
  * Update hunter into CMakeLists.txt
  * Fix: add a missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
  * updated json
  * Cleanup: Fix review findings
  * Update CMakeLists.txt
- Drop patch, merged upstream:
  * 0001-ColladaParser-check-values-length-5462.patch</changelog>
  <changelog author="christophe@krop.fr" date="1716292800">- Update to 5.4.1
  * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
  * Deps: updated minizip to last version
  * Deps: updated STBIMAGElib
  * Fix issue #5461 (segfault after removing redundant materials)
  * Update ComputeUVMappingProcess.cpp
  * Add some ASSIMP_INSTALL checks
  * Fix SplitByBoneCount typo that prevented node updates
  * Q3DLoader: Fix possible material string overflow
  * Reverts the changes introduced by commit ad766cb in February 2022
  * Fix a collada import bug
  * Mention IQM loader in Fileformats.md
  * Fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
    or is 0
  * Add checks for invalid buffer and size
  * Make sure for releases revision will be zero
  * glTF2Importer: Support .vrm extension</changelog>
  <changelog author="christophe@krop.fr" date="1720526400">- Update to 5.4.2
  * Fix building on Haiku
  * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
    significantly
  * Fix: Add check for invalid input argument
  * Replace an assert
  * Extension of skinning data export to GLB/GLTF format
  * Fix output floating-point values to fbx
  * Update ImproveCacheLocality.cpp
  * Update Readme.md
  * Deep arsdk bone double free
  * Fix Spelling error
  * use size in order to be compatible with float and double
  * Fix: Add missing transformation for normalized normals.
  * Fix: Implicit Conversion Error
  * Fix add checks for indices
  * Update FBXBinaryTokenizer.cpp
  * link to external minizip with full path
  * utf8 header not found
  * Rm unnecessary deg-&gt;radian conversion in FBX exporter
  * Fix empty mesh handling
  * Refactoring: Some cleanups
  * Fix invalid read of uint from uvwsrc
  * Remove double delete
  * fix mesh-name error.
  * COLLADA fixes for textures in C4D input
  * Use the correct allocator for deleting objects in case of
    duplicate animation Ids
  * Fix container overflow in MMD parser
  * Fix: PLY heap buffer overflow
  * Fix: Check if index for mesh access is out of range
  * Update FBXConverter.cpp
  * FBX: Use correct time scaling
  * Drop explicit inclusion of contrib/ headers
  * Update Build.md
  * Fix buffer overflow in FBX::Util::DecodeBase64()
  * Readme.md: correct 2 errors in section headers
  * Fix double free in Video::~Video()
  * FBXMeshGeometry: solve issue #5116 using patch provided
  * Fix target names not being imported on some gLTF2 models
  * correct grammar/typographic errors in comments (8 files)
  * KHR_materials_specular fixes
  * Disable Hunter
  * fixed several issues
  * Fix leak
  * Check validity of archive without parsing
  * Fix integer overflow
  * Add a test before generating the txture folder
  * Build: Disable building zlib for non-windows
  * null check.
  * Bump actions/upload-artifact from 3 to 4
  * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
    to pbrMetallicRoughness/baseColorFactor
  * fix building errors for MinGW
  * dynamic_cast error.
  * Add missing IRR textures
  * Update Dockerfile
  * Fix handling of X3D IndexedLineSet nodes
  * Improve acc file loading
  * Readme.md: present hyperlinks in a more uniform style
  * FBX Blendshape FullWeight: Vec&lt;Float&gt; -&gt; FullWeight: Vec&lt;Double&gt;
  * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling
    fix and colour fix
  * Update StbCommon.h to stay up-to-date with stb_image.h.
  * Introduce aiBuffer
  * Add bounds checks to the parsing utilities.
  * Fix crash in viewer
  * Static code analysis fixes
  * Kimkulling/fix bahavior of remove redundat mats issue 5438
  * Fix X importer breakage introduced in commit f844c33
  * Fileformats.md: clarify that import of .blend files is deprecated
  * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
  * More GLTF loading hardening
  * Bump actions/cache from 3 to 4
  * Update CMakeLists.txt
  * Blendshape-&gt;Geometry in FBX Export
  * Fix identity matrix check
  * Fix PyAssimp under Python &gt;= 3.12 and macOS library search support
  * Add ISC LICENSE file
  * ColladaParser: check values length
  * Include defs in not cpp-section
  * Add correct double zero check
  * Add zlib-header to ZipArchiveIOSystem.h
  * Add 2024 to copyright infos
  * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
  * Eliminate non-ascii comments in clipper
  * Fix compilation for MSVC14.
  * Add correction of fbx model rotation
  * Delete tools/make directory
  * Delete packaging/windows-mkzip directory
  * Fix #5420 duplicate degrees to radians conversion in fbx importer
  * Respect merge identical vertices in ObjExporter
  * Fix utDefaultIOStream test under MinGW
  * Fix typos
  * Add initial macOS support to C4D importer
  * Update hunter into CMakeLists.txt
  * Fix: add missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
  * updated json
  * Cleanup: Fix review findings
  * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
  * updated minizip to last version
  * updated STBIMAGElib
  * fix issue #5461 (segfault after removing redundant materials)
  * Update ComputeUVMappingProcess.cpp
  * add some ASSIMP_INSTALL checks
  * Fix SplitByBoneCount typo that prevented node updates
  * Q3DLoader: Fix possible material string overflow
  * Reverts the changes introduced
  * fix a collada import bug
  * mention IQM loader in Fileformats.md
  * Kimkulling/fix pyassimp compatibility
  * fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
    or is 0
  * Add checks for invalid buffer and size
  * Make sure for releases revision will be zero
  * glTF2Importer: Support .vrm extension
  * Prepare v5.4.1
  * Remove deprecated c++11 warnings
  * fix ci
  * Fix integer overflow
  * Assimp viewer fixes
  * Optimize readability
  * Temporary fix for #5557 GCC 13+ build issue -Warray-bounds
  * Fix a bug that could cause assertion failure.
  * Fix possible nullptr dereferencing.
  * Update ObjFileParser.cpp
  * Fix for #5592 Disabled maybe-uninitialized error for
    AssetLib/Obj/ObjFileParser.cpp
  * updated zip
  * Postprocessing: Fix endless loop
  * Build: Fix compilation for VS-2022 debug mode - warning
  * Converted a size_t to mz_uint that was being treated as an error
  * Add trim to xml string parsing
  * Replace duplicated trim
  * Move aiScene constructor
  * Move revision.h and revision.h.in to include folder
  * Update MDLMaterialLoader.cpp
  * Create inno_setup
  * clean HunterGate.cmake
  * Draft: Update init of aiString
  * Fix init aistring issue 5622 inpython module
  * update dotnet example
  * Make stepfile schema validation more robust.
  * fix PLY binary export color from float to uchar
  * Some FBXs do not have "Materials" information, which can cause
    parsing errors
  * Fix collada uv channels - temporary was stored and then updated.
  * remove ASE parsing break
  * FBX-Exporter: Fix nullptr dereferencing
  * Fix FBX exporting incorrect bone order
  * fixes potential memory leak on malformed obj file
  * Update zip.c
  * Fixes some uninit bool loads
  * Fix names of enum values in docstring of aiProcess_FindDegenerates
  * Fix: StackAllocator Undefined Reference fix
  * Plx: Fix out of bound access (CVE-2024-40724, boo#1228142)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- fix check failure on s390x (bsc#1218474)</changelog>
  <changelog author="christophe@krop.fr" date="1725969600">- Update to 5.4.3
  * Ply-Importer: Fix vulnerability
  * Update ccpp.yml
  * `build`: Add ccache support
  * Update glTF2AssetWriter.inl
  * Update PyAssimp structs with Skeleton &amp; SkeletonBone members
  * FBX: add metadata as properties
  * Fix casting typo in D3MFExporter::writeBaseMaterials (color
    channels &lt; 1.0f were zeroed out)
  * Fix to judge 'multi-configuration' correctly
  * Fix potential memory leak in SceneCombiner for LWS/IRR/MD3
    loader
  * Fix copying private data when source pointer is NULL
  * Bump softprops/action-gh-release from 1 to 2
  * Bump actions/upload-artifact from 1 to 4
  * Bump actions/download-artifact from 1 to 4
  * fix GetShortFilename function
  * Added more Maya materials
  * Sparky kitty studios master
  * Expose aiGetEmbeddedTexture to C-API
  * Fix leak in loader
  * Fix MSVC build error
  * Revert variable name (fix broken build on android)
  * Fixes possible out-of-bound read in findDegenerate
  * Remove recursive include
  * include Exceptional.h in 3DSExporter.cpp
  * Use DRACO_GLTF_BITSTREAM
  * Fix MSVC PDBs and permit them to be disabled if required
  * Added AND condition in poly2tri dll_symbol.h
  * fixing static build
  * FBX exporter - handle multiple vertex color channels
  * Update DefaultIOSystem.cpp
  * Make coord transfor for hs1 files optional
  * Return false instead of crash
  * A fuzzed stride could cause the max count to become negative
    and hence wrap around uint
  * CalcTangents: zero vector is invalid for tangent/bitangent
  * Mosfet80 updatedpoli2tri
  * Fix a fuzz test heap buffer overflow in mdl material loader
  * Introduce interpolation mode to vectro and quaternion keys
  * Update Python structs with missing fields
  * Introduce interpolation mode to vectro and quaternion keys
  * Kimkulling/fix double precision tests
  * [USD] Integrate "tinyusdz" project
  * Update Readme.md
  * Allow empty slots in mTextureCoords
  * Fix compile warning
  * Replace raw pointers by std::string
  * Fix potential heapbuffer overflow in md5 parsing
  * Fixes bsc#1230679, CVE-2024-45679.</changelog>
</package>
<package pkgid="1e52b8af0061b5196f14f96354586088da26002d3df7c1551031ac880b221179178884dca0eebb709a69a6371d71fe7dcc6e787d292e79eba53d8723e4305443" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="160000.3.1"/>
  <changelog author="rpm@fthiessen.de" date="1695988800">- Update to 5.3.1
  * Fixes CVE-2022-38528 (boo#1203187)
  * Mainly bug fixes
  * Fix: Use ASCII treeview in assimp-cmd.
  * Fix: Fix head overflow in MD5-parser.
  * Fix: C++ std::tuple constexpr initial list on old compiler
  * Make FBX parser resilient to missing data streams
  * Fix incorrect documentation of defaults
  * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
  * Fix build error: ‘temp’ may be used uninitialized in this function
  * Fix: Use correct epsilon
  * Fix: Add missing handling for double export in json
  * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0</changelog>
  <changelog author="christophe@krop.fr" date="1696420800">- Disable the collada importer/exporter due to a long standing
  security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
- Add patch:
  * 0001-Don-t-build-the-collada-importer-exporter-tests.patch</changelog>
  <changelog author="adam@mizerski.pl" date="1707739200">- Reenable the Collada parser.
- Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
- Add patch (boo#1207377, CVE-2022-45748)
  * 0001-ColladaParser-check-values-length-5462.patch
- Improved tests filtering</changelog>
  <changelog author="christophe@krop.fr" date="1712836800">- Update to 5.4.0
  * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
  * Fix: Add check for invalid input argument
  * Replace an assert
  * Extension of skinning data export to GLB/GLTF format
  * Fix output floating-point values to fbx
  * Update ImproveCacheLocality.cpp
  * Deep arsdk bone double free
  * Fix Spelling error
  * use size to be compatible with float and double
  * Fix: Add missing transformation for normalized normals.
  * Fix: Implicit Conversion Error
  * Fix add checks for indices
  * Update FBXBinaryTokenizer.cpp
  * link to external minizip with full path
  * utf8 header not found
  * Rm unnecessary deg-&gt;radian conversion in FBX exporter
  * Fix empty mesh handling
  * Refactoring: Some cleanups
  * Fix invalid read of uint from uvwsrc
  * Remove double delete
  * fix the mesh-name error.
  * COLLADA fixes for textures in C4D input
  * Use the correct allocator for deleting objects in case of
    duplicate animation Ids
  * Fix container overflow in MMD parser
  * Fix: PLY heap buffer overflow
  * Fix: Check if index for mesh access is out of range
  * Update FBXConverter.cpp
  * FBX: Use correct time scaling
  * Drop explicit inclusion of contrib/ headers
  * Update Build.md
  * Fix buffer overflow in FBX::Util::DecodeBase64()
  * Readme.md: correct 2 errors in section headers
  * Fix double free in Video::~Video()
  * FBXMeshGeometry: solve issue #5116 using patch provided
  * Fix target names not being imported on some gLTF2 models
  * correct grammar/typographic errors in comments (8 files)
  * KHR_materials_specular fixes
  * Disable Hunter
  * fixed several issues
  * Fix leak
  * Check the validity of the archive without parsing
  * Fix integer overflow
  * Add a test before generating the texture folder
  * Build: Disable building zlib for non-windows
  * null check.
  * Bump actions/upload-artifact from 3 to 4
  * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
    to pbrMetallicRoughness/baseColorFactor
  * dynamic_cast error.
  * Add missing IRR textures
  * Fix handling of X3D IndexedLineSet nodes
  * Improve acc file loading
  * Readme.md: present hyperlinks in a more uniform style
  * FBX Blendshape FullWeight: Vec&lt;Float&gt; -&gt; FullWeight: Vec&lt;Double&gt;
  * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling fix
    and colour fix
  * Update StbCommon.h to stay up-to-date with stb_image.h.
  * Introduce aiBuffer
  * Add bounds checks to the parsing utilities.
  * Fix crash in viewer
  * Static code analysis fixes
  * Kimkulling/fix behavior of remove redundant mats issue 5438
  * Fix X importer breakage introduced in commit f844c33
  * Fileformats.md: clarify that import of .blend files is deprecated
  * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
  * More GLTF loading hardening
  * Bump actions/cache from 3 to 4
  * Blendshape-&gt;Geometry in FBX Export
  * Fix identity matrix check
  * Fix PyAssimp under Python &gt;= 3.12 and macOS library search support
  * Add ISC LICENSE file
  * ColladaParser: check values length
  * Include defs in not cpp-section
  * Add correct double zero check
  * Add zlib-header to ZipArchiveIOSystem.h
  * Add 2024 to copyright infos
  * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
  * Eliminate non-ascii comments in clipper
  * Fix compilation for MSVC14.
  * Add correction of fbx model rotation
  * Delete tools/make directory
  * Delete packaging/windows-mkzip directory
  * Fix #5420 duplicate degrees to radians conversion in fbx importer
  * Respect merge identical vertices in ObjExporter
  * Fix utDefaultIOStream test under MinGW
  * Fix typos
  * Add initial macOS support to C4D importer
  * Update hunter into CMakeLists.txt
  * Fix: add a missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
  * updated json
  * Cleanup: Fix review findings
  * Update CMakeLists.txt
- Drop patch, merged upstream:
  * 0001-ColladaParser-check-values-length-5462.patch</changelog>
  <changelog author="christophe@krop.fr" date="1716292800">- Update to 5.4.1
  * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
  * Deps: updated minizip to last version
  * Deps: updated STBIMAGElib
  * Fix issue #5461 (segfault after removing redundant materials)
  * Update ComputeUVMappingProcess.cpp
  * Add some ASSIMP_INSTALL checks
  * Fix SplitByBoneCount typo that prevented node updates
  * Q3DLoader: Fix possible material string overflow
  * Reverts the changes introduced by commit ad766cb in February 2022
  * Fix a collada import bug
  * Mention IQM loader in Fileformats.md
  * Fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
    or is 0
  * Add checks for invalid buffer and size
  * Make sure for releases revision will be zero
  * glTF2Importer: Support .vrm extension</changelog>
  <changelog author="christophe@krop.fr" date="1720526400">- Update to 5.4.2
  * Fix building on Haiku
  * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
    significantly
  * Fix: Add check for invalid input argument
  * Replace an assert
  * Extension of skinning data export to GLB/GLTF format
  * Fix output floating-point values to fbx
  * Update ImproveCacheLocality.cpp
  * Update Readme.md
  * Deep arsdk bone double free
  * Fix Spelling error
  * use size in order to be compatible with float and double
  * Fix: Add missing transformation for normalized normals.
  * Fix: Implicit Conversion Error
  * Fix add checks for indices
  * Update FBXBinaryTokenizer.cpp
  * link to external minizip with full path
  * utf8 header not found
  * Rm unnecessary deg-&gt;radian conversion in FBX exporter
  * Fix empty mesh handling
  * Refactoring: Some cleanups
  * Fix invalid read of uint from uvwsrc
  * Remove double delete
  * fix mesh-name error.
  * COLLADA fixes for textures in C4D input
  * Use the correct allocator for deleting objects in case of
    duplicate animation Ids
  * Fix container overflow in MMD parser
  * Fix: PLY heap buffer overflow
  * Fix: Check if index for mesh access is out of range
  * Update FBXConverter.cpp
  * FBX: Use correct time scaling
  * Drop explicit inclusion of contrib/ headers
  * Update Build.md
  * Fix buffer overflow in FBX::Util::DecodeBase64()
  * Readme.md: correct 2 errors in section headers
  * Fix double free in Video::~Video()
  * FBXMeshGeometry: solve issue #5116 using patch provided
  * Fix target names not being imported on some gLTF2 models
  * correct grammar/typographic errors in comments (8 files)
  * KHR_materials_specular fixes
  * Disable Hunter
  * fixed several issues
  * Fix leak
  * Check validity of archive without parsing
  * Fix integer overflow
  * Add a test before generating the txture folder
  * Build: Disable building zlib for non-windows
  * null check.
  * Bump actions/upload-artifact from 3 to 4
  * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
    to pbrMetallicRoughness/baseColorFactor
  * fix building errors for MinGW
  * dynamic_cast error.
  * Add missing IRR textures
  * Update Dockerfile
  * Fix handling of X3D IndexedLineSet nodes
  * Improve acc file loading
  * Readme.md: present hyperlinks in a more uniform style
  * FBX Blendshape FullWeight: Vec&lt;Float&gt; -&gt; FullWeight: Vec&lt;Double&gt;
  * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling
    fix and colour fix
  * Update StbCommon.h to stay up-to-date with stb_image.h.
  * Introduce aiBuffer
  * Add bounds checks to the parsing utilities.
  * Fix crash in viewer
  * Static code analysis fixes
  * Kimkulling/fix bahavior of remove redundat mats issue 5438
  * Fix X importer breakage introduced in commit f844c33
  * Fileformats.md: clarify that import of .blend files is deprecated
  * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
  * More GLTF loading hardening
  * Bump actions/cache from 3 to 4
  * Update CMakeLists.txt
  * Blendshape-&gt;Geometry in FBX Export
  * Fix identity matrix check
  * Fix PyAssimp under Python &gt;= 3.12 and macOS library search support
  * Add ISC LICENSE file
  * ColladaParser: check values length
  * Include defs in not cpp-section
  * Add correct double zero check
  * Add zlib-header to ZipArchiveIOSystem.h
  * Add 2024 to copyright infos
  * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
  * Eliminate non-ascii comments in clipper
  * Fix compilation for MSVC14.
  * Add correction of fbx model rotation
  * Delete tools/make directory
  * Delete packaging/windows-mkzip directory
  * Fix #5420 duplicate degrees to radians conversion in fbx importer
  * Respect merge identical vertices in ObjExporter
  * Fix utDefaultIOStream test under MinGW
  * Fix typos
  * Add initial macOS support to C4D importer
  * Update hunter into CMakeLists.txt
  * Fix: add missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
  * updated json
  * Cleanup: Fix review findings
  * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
  * updated minizip to last version
  * updated STBIMAGElib
  * fix issue #5461 (segfault after removing redundant materials)
  * Update ComputeUVMappingProcess.cpp
  * add some ASSIMP_INSTALL checks
  * Fix SplitByBoneCount typo that prevented node updates
  * Q3DLoader: Fix possible material string overflow
  * Reverts the changes introduced
  * fix a collada import bug
  * mention IQM loader in Fileformats.md
  * Kimkulling/fix pyassimp compatibility
  * fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
    or is 0
  * Add checks for invalid buffer and size
  * Make sure for releases revision will be zero
  * glTF2Importer: Support .vrm extension
  * Prepare v5.4.1
  * Remove deprecated c++11 warnings
  * fix ci
  * Fix integer overflow
  * Assimp viewer fixes
  * Optimize readability
  * Temporary fix for #5557 GCC 13+ build issue -Warray-bounds
  * Fix a bug that could cause assertion failure.
  * Fix possible nullptr dereferencing.
  * Update ObjFileParser.cpp
  * Fix for #5592 Disabled maybe-uninitialized error for
    AssetLib/Obj/ObjFileParser.cpp
  * updated zip
  * Postprocessing: Fix endless loop
  * Build: Fix compilation for VS-2022 debug mode - warning
  * Converted a size_t to mz_uint that was being treated as an error
  * Add trim to xml string parsing
  * Replace duplicated trim
  * Move aiScene constructor
  * Move revision.h and revision.h.in to include folder
  * Update MDLMaterialLoader.cpp
  * Create inno_setup
  * clean HunterGate.cmake
  * Draft: Update init of aiString
  * Fix init aistring issue 5622 inpython module
  * update dotnet example
  * Make stepfile schema validation more robust.
  * fix PLY binary export color from float to uchar
  * Some FBXs do not have "Materials" information, which can cause
    parsing errors
  * Fix collada uv channels - temporary was stored and then updated.
  * remove ASE parsing break
  * FBX-Exporter: Fix nullptr dereferencing
  * Fix FBX exporting incorrect bone order
  * fixes potential memory leak on malformed obj file
  * Update zip.c
  * Fixes some uninit bool loads
  * Fix names of enum values in docstring of aiProcess_FindDegenerates
  * Fix: StackAllocator Undefined Reference fix
  * Plx: Fix out of bound access (CVE-2024-40724, boo#1228142)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- fix check failure on s390x (bsc#1218474)</changelog>
  <changelog author="christophe@krop.fr" date="1725969600">- Update to 5.4.3
  * Ply-Importer: Fix vulnerability
  * Update ccpp.yml
  * `build`: Add ccache support
  * Update glTF2AssetWriter.inl
  * Update PyAssimp structs with Skeleton &amp; SkeletonBone members
  * FBX: add metadata as properties
  * Fix casting typo in D3MFExporter::writeBaseMaterials (color
    channels &lt; 1.0f were zeroed out)
  * Fix to judge 'multi-configuration' correctly
  * Fix potential memory leak in SceneCombiner for LWS/IRR/MD3
    loader
  * Fix copying private data when source pointer is NULL
  * Bump softprops/action-gh-release from 1 to 2
  * Bump actions/upload-artifact from 1 to 4
  * Bump actions/download-artifact from 1 to 4
  * fix GetShortFilename function
  * Added more Maya materials
  * Sparky kitty studios master
  * Expose aiGetEmbeddedTexture to C-API
  * Fix leak in loader
  * Fix MSVC build error
  * Revert variable name (fix broken build on android)
  * Fixes possible out-of-bound read in findDegenerate
  * Remove recursive include
  * include Exceptional.h in 3DSExporter.cpp
  * Use DRACO_GLTF_BITSTREAM
  * Fix MSVC PDBs and permit them to be disabled if required
  * Added AND condition in poly2tri dll_symbol.h
  * fixing static build
  * FBX exporter - handle multiple vertex color channels
  * Update DefaultIOSystem.cpp
  * Make coord transfor for hs1 files optional
  * Return false instead of crash
  * A fuzzed stride could cause the max count to become negative
    and hence wrap around uint
  * CalcTangents: zero vector is invalid for tangent/bitangent
  * Mosfet80 updatedpoli2tri
  * Fix a fuzz test heap buffer overflow in mdl material loader
  * Introduce interpolation mode to vectro and quaternion keys
  * Update Python structs with missing fields
  * Introduce interpolation mode to vectro and quaternion keys
  * Kimkulling/fix double precision tests
  * [USD] Integrate "tinyusdz" project
  * Update Readme.md
  * Allow empty slots in mTextureCoords
  * Fix compile warning
  * Replace raw pointers by std::string
  * Fix potential heapbuffer overflow in md5 parsing
  * Fixes bsc#1230679, CVE-2024-45679.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1769083200">- Adding pr6073.patch to address CVE-2025-3548 / bsc#1241367</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1777982400">- Add upstream changes:
  * 0001-ASE-Fix-possible-out-of-bound-access.patch
    (CVE-2025-3015 bsc#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (gh#assimp/assimp#6009)
    (CVE-2025-2591 bsc#1239920)
  * CVE-2025-2151.patch
    (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (gh#assimp/assimp#6010)
    (CVE-2025-2592, bsc#1239916)</changelog>
</package>
<package pkgid="cf3c44fbdd0749caf7c596a97bd78f57d6f487ca530d9e1d28f65272d8593131b98b7dc444ceaaad8ffa3cea28670b586df130c347670c7ff30c9253019d2c2d" name="assimp-devel" arch="x86_64">
  <version epoch="0" ver="5.4.3" rel="160000.4.1"/>
  <changelog author="christophe@krop.fr" date="1716292800">- Update to 5.4.1
  * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
  * Deps: updated minizip to last version
  * Deps: updated STBIMAGElib
  * Fix issue #5461 (segfault after removing redundant materials)
  * Update ComputeUVMappingProcess.cpp
  * Add some ASSIMP_INSTALL checks
  * Fix SplitByBoneCount typo that prevented node updates
  * Q3DLoader: Fix possible material string overflow
  * Reverts the changes introduced by commit ad766cb in February 2022
  * Fix a collada import bug
  * Mention IQM loader in Fileformats.md
  * Fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
    or is 0
  * Add checks for invalid buffer and size
  * Make sure for releases revision will be zero
  * glTF2Importer: Support .vrm extension</changelog>
  <changelog author="christophe@krop.fr" date="1720526400">- Update to 5.4.2
  * Fix building on Haiku
  * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
    significantly
  * Fix: Add check for invalid input argument
  * Replace an assert
  * Extension of skinning data export to GLB/GLTF format
  * Fix output floating-point values to fbx
  * Update ImproveCacheLocality.cpp
  * Update Readme.md
  * Deep arsdk bone double free
  * Fix Spelling error
  * use size in order to be compatible with float and double
  * Fix: Add missing transformation for normalized normals.
  * Fix: Implicit Conversion Error
  * Fix add checks for indices
  * Update FBXBinaryTokenizer.cpp
  * link to external minizip with full path
  * utf8 header not found
  * Rm unnecessary deg-&gt;radian conversion in FBX exporter
  * Fix empty mesh handling
  * Refactoring: Some cleanups
  * Fix invalid read of uint from uvwsrc
  * Remove double delete
  * fix mesh-name error.
  * COLLADA fixes for textures in C4D input
  * Use the correct allocator for deleting objects in case of
    duplicate animation Ids
  * Fix container overflow in MMD parser
  * Fix: PLY heap buffer overflow
  * Fix: Check if index for mesh access is out of range
  * Update FBXConverter.cpp
  * FBX: Use correct time scaling
  * Drop explicit inclusion of contrib/ headers
  * Update Build.md
  * Fix buffer overflow in FBX::Util::DecodeBase64()
  * Readme.md: correct 2 errors in section headers
  * Fix double free in Video::~Video()
  * FBXMeshGeometry: solve issue #5116 using patch provided
  * Fix target names not being imported on some gLTF2 models
  * correct grammar/typographic errors in comments (8 files)
  * KHR_materials_specular fixes
  * Disable Hunter
  * fixed several issues
  * Fix leak
  * Check validity of archive without parsing
  * Fix integer overflow
  * Add a test before generating the txture folder
  * Build: Disable building zlib for non-windows
  * null check.
  * Bump actions/upload-artifact from 3 to 4
  * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
    to pbrMetallicRoughness/baseColorFactor
  * fix building errors for MinGW
  * dynamic_cast error.
  * Add missing IRR textures
  * Update Dockerfile
  * Fix handling of X3D IndexedLineSet nodes
  * Improve acc file loading
  * Readme.md: present hyperlinks in a more uniform style
  * FBX Blendshape FullWeight: Vec&lt;Float&gt; -&gt; FullWeight: Vec&lt;Double&gt;
  * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling
    fix and colour fix
  * Update StbCommon.h to stay up-to-date with stb_image.h.
  * Introduce aiBuffer
  * Add bounds checks to the parsing utilities.
  * Fix crash in viewer
  * Static code analysis fixes
  * Kimkulling/fix bahavior of remove redundat mats issue 5438
  * Fix X importer breakage introduced in commit f844c33
  * Fileformats.md: clarify that import of .blend files is deprecated
  * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
  * More GLTF loading hardening
  * Bump actions/cache from 3 to 4
  * Update CMakeLists.txt
  * Blendshape-&gt;Geometry in FBX Export
  * Fix identity matrix check
  * Fix PyAssimp under Python &gt;= 3.12 and macOS library search support
  * Add ISC LICENSE file
  * ColladaParser: check values length
  * Include defs in not cpp-section
  * Add correct double zero check
  * Add zlib-header to ZipArchiveIOSystem.h
  * Add 2024 to copyright infos
  * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
  * Eliminate non-ascii comments in clipper
  * Fix compilation for MSVC14.
  * Add correction of fbx model rotation
  * Delete tools/make directory
  * Delete packaging/windows-mkzip directory
  * Fix #5420 duplicate degrees to radians conversion in fbx importer
  * Respect merge identical vertices in ObjExporter
  * Fix utDefaultIOStream test under MinGW
  * Fix typos
  * Add initial macOS support to C4D importer
  * Update hunter into CMakeLists.txt
  * Fix: add missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
  * updated json
  * Cleanup: Fix review findings
  * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
  * updated minizip to last version
  * updated STBIMAGElib
  * fix issue #5461 (segfault after removing redundant materials)
  * Update ComputeUVMappingProcess.cpp
  * add some ASSIMP_INSTALL checks
  * Fix SplitByBoneCount typo that prevented node updates
  * Q3DLoader: Fix possible material string overflow
  * Reverts the changes introduced
  * fix a collada import bug
  * mention IQM loader in Fileformats.md
  * Kimkulling/fix pyassimp compatibility
  * fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
    or is 0
  * Add checks for invalid buffer and size
  * Make sure for releases revision will be zero
  * glTF2Importer: Support .vrm extension
  * Prepare v5.4.1
  * Remove deprecated c++11 warnings
  * fix ci
  * Fix integer overflow
  * Assimp viewer fixes
  * Optimize readability
  * Temporary fix for #5557 GCC 13+ build issue -Warray-bounds
  * Fix a bug that could cause assertion failure.
  * Fix possible nullptr dereferencing.
  * Update ObjFileParser.cpp
  * Fix for #5592 Disabled maybe-uninitialized error for
    AssetLib/Obj/ObjFileParser.cpp
  * updated zip
  * Postprocessing: Fix endless loop
  * Build: Fix compilation for VS-2022 debug mode - warning
  * Converted a size_t to mz_uint that was being treated as an error
  * Add trim to xml string parsing
  * Replace duplicated trim
  * Move aiScene constructor
  * Move revision.h and revision.h.in to include folder
  * Update MDLMaterialLoader.cpp
  * Create inno_setup
  * clean HunterGate.cmake
  * Draft: Update init of aiString
  * Fix init aistring issue 5622 inpython module
  * update dotnet example
  * Make stepfile schema validation more robust.
  * fix PLY binary export color from float to uchar
  * Some FBXs do not have "Materials" information, which can cause
    parsing errors
  * Fix collada uv channels - temporary was stored and then updated.
  * remove ASE parsing break
  * FBX-Exporter: Fix nullptr dereferencing
  * Fix FBX exporting incorrect bone order
  * fixes potential memory leak on malformed obj file
  * Update zip.c
  * Fixes some uninit bool loads
  * Fix names of enum values in docstring of aiProcess_FindDegenerates
  * Fix: StackAllocator Undefined Reference fix
  * Plx: Fix out of bound access (CVE-2024-40724, boo#1228142)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- fix check failure on s390x (bsc#1218474)</changelog>
  <changelog author="christophe@krop.fr" date="1725969600">- Update to 5.4.3
  * Ply-Importer: Fix vulnerability
  * Update ccpp.yml
  * `build`: Add ccache support
  * Update glTF2AssetWriter.inl
  * Update PyAssimp structs with Skeleton &amp; SkeletonBone members
  * FBX: add metadata as properties
  * Fix casting typo in D3MFExporter::writeBaseMaterials (color
    channels &lt; 1.0f were zeroed out)
  * Fix to judge 'multi-configuration' correctly
  * Fix potential memory leak in SceneCombiner for LWS/IRR/MD3
    loader
  * Fix copying private data when source pointer is NULL
  * Bump softprops/action-gh-release from 1 to 2
  * Bump actions/upload-artifact from 1 to 4
  * Bump actions/download-artifact from 1 to 4
  * fix GetShortFilename function
  * Added more Maya materials
  * Sparky kitty studios master
  * Expose aiGetEmbeddedTexture to C-API
  * Fix leak in loader
  * Fix MSVC build error
  * Revert variable name (fix broken build on android)
  * Fixes possible out-of-bound read in findDegenerate
  * Remove recursive include
  * include Exceptional.h in 3DSExporter.cpp
  * Use DRACO_GLTF_BITSTREAM
  * Fix MSVC PDBs and permit them to be disabled if required
  * Added AND condition in poly2tri dll_symbol.h
  * fixing static build
  * FBX exporter - handle multiple vertex color channels
  * Update DefaultIOSystem.cpp
  * Make coord transfor for hs1 files optional
  * Return false instead of crash
  * A fuzzed stride could cause the max count to become negative
    and hence wrap around uint
  * CalcTangents: zero vector is invalid for tangent/bitangent
  * Mosfet80 updatedpoli2tri
  * Fix a fuzz test heap buffer overflow in mdl material loader
  * Introduce interpolation mode to vectro and quaternion keys
  * Update Python structs with missing fields
  * Introduce interpolation mode to vectro and quaternion keys
  * Kimkulling/fix double precision tests
  * [USD] Integrate "tinyusdz" project
  * Update Readme.md
  * Allow empty slots in mTextureCoords
  * Fix compile warning
  * Replace raw pointers by std::string
  * Fix potential heapbuffer overflow in md5 parsing
  * Fixes bsc#1230679, CVE-2024-45679.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1769083200">- Adding pr6073.patch to address CVE-2025-3548 / bsc#1241367</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1777982400">- Add upstream changes:
  * 0001-ASE-Fix-possible-out-of-bound-access.patch
    (CVE-2025-3015 bsc#1240412)
  * 0001-MDL-Limit-max-texture-sizes.patch
    (gh#assimp/assimp#6022)
  * 0001-MDL-Fix-overflow-check.patch
    (gh#assimp/assimp#6009)
    (CVE-2025-2591 bsc#1239920)
  * CVE-2025-2151.patch
    (CVE-2025-2151, boo#1239220)
  * 0001-Bugfix-Fix-possible-nullptr-dereferencing.patch
    (gh#assimp/assimp#6025)
  * 0001-Potential-use-after-free.patch
  * 0001-ASE-Use-correct-vertex-container.patch
    (gh#assimp/assimp#6024)
  * 0001-CMS-Fix-possible-overflow-access.patch
    (gh#assimp/assimp#6010)
    (CVE-2025-2592, bsc#1239916)</changelog>
  <changelog author="pgajdos@suse.com" date="1780488000">- added patches
  CVE-2026-10197: Affected is the function glTF2Importer:ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp. manipulation results in null pointer dereference [bsc#1266996]
  * assimp-CVE-2026-10197.patch
  CVE-2026-10199: Affected by this issue is the function glTF2:LazyDict in the library glTF2Asset.h. Manipulation of the argument operator[] leads to null pointer dereference [bsc#1266998]
  * assimp-CVE-2026-10199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1780574400">- added patches
  CVE-2025-11277: large mWidth and mHeight dimensions can lead to integer overflow and a heap-based buffer overflow [bsc#1251019]
  * assimp-CVE-2025-11277.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782302400">- added patches
  CVE-2026-10200: This affects the function glTFCommon:CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in a heap-based buffer overflow [bsc#1266999]
  * assimp-CVE-2026-10200.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1782388800">- added patches
  CVE-2026-10232: heap use-after-free in aiNode::~aiNode due to invalid node tree when processing malformed ASE files [bsc#1267037]
  * assimp-CVE-2026-10232.patch</changelog>
</package>
<package pkgid="2143c4729f0dc95cfae5106504dcc24222e4b07b5bb8daf6407e5bc457d8d24c70e7c3a6fe40adf3aa79ff6ba762759866b54cfc330e90f493ceac8ec58a1c79" name="ast-grep" arch="x86_64">
  <version epoch="0" ver="0.28.0+0" rel="bp160.1.14"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1723291200">- Update to 0.26.1:
  * feat: support dynamic language in pyo3 #1143
  * test: add test for load dynamic lang in python 236f4ab
  * feat: add py_lang registration function 43e74e7
  * feat: add pytype for register language 8b660cf</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1724068800">- Update to 0.26.2:
  * fix: readopt matched metavar in napi #1380
  * chore: update napi definition 07e084a
  * fix(deps): update dependency @swc/core to v1.7.11 835b06f
  * fix(deps): update dependency @swc/core to v1.7.10 d7a3820</changelog>
  <changelog author="Holger Rauch &lt;holger.rauch@posteo.de&gt;" date="1724155200">- Increased memory to 8 GB for s390x (_constraints)</changelog>
  <changelog author="Holger Rauch &lt;holger.rauch@posteo.de&gt;" date="1724155201">- Added ppc64le to the list of architectures (_constraints)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1724673600">- Update to 0.26.3:
  * fix: fix wrong transformation indentation #1405
  * fix: compare only kind for unnamed nodes #1419
  * fix(deps): update dependency @swc/core to v1.7.18 9ecb02c
  * fix(deps): update dependency @swc/core to v1.7.14 459d20a
  * test: add test for transformation indentation e0bfaf2</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 0.27.0:
  * feat: support YAML language #1436
  * fix(deps): update dependency @swc/core to v1.7.22 c577761
  * fix(deps): update dependency @swc/core to v1.7.21 4b0e594
  * feat: add rule config potential kind test def5b21</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883201">- Update to 0.27.1:
  * fix: create .gitkeep file in new dirs #1273
  * fix: fix unwrap error for unfound dir #1456
  * fix(deps): update dependency @swc/core to v1.7.23 5fd4101
  * chore(deps): update dependency @types/node to v20.16.5 294e402
  * fix: improve error message d46df6a</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1727092800">- Update to 0.27.2:
  * feat: add follow symbolic links option to CLI #1461
  * fix(deps): update dependency @swc/core to v1.7.26 e0b437d
  * fix(deps): update dependency @swc/core to v1.7.24 657bc4e
  * chore(deps): update dependency typescript to v5.6.2 c55a404</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1727092801">- Update to 0.27.3:
  * feat: add prettified pattern debug 70d33b5
  * fix(deps): update rust crate pyo3 to v0.22.3 683e398
  * test: add test for CST a79f13f</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1728302400">- Update to 0.28.0:
  * feat: TypeScript types for Rules in NAPI #1038
  * feat:support glob path match in CLI #1062
  * refactor: move input/output args to standalone file 3d937cb
  * refactor: move worker outside of utils 84ea621
  * fix(deps): update babel monorepo to v7.25.7 b989f05</changelog>
</package>
<package pkgid="b439adcb1adc01f978b7aee507c1f65a36d20d3def8f551d5f135321aeba52e6b1393a9c60ad1f52f31a956d0b9b3658b22f0f51d230bffb72dd3f5adaec7ebf" name="asteroids3D" arch="x86_64">
  <version epoch="0" ver="1.0" rel="bp160.1.12"/>
  <changelog author="jengelh@medozas.de" date="1324036800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668686400">- Update to release 1.0
  * Build system modernization
- Metadata update (homepage URL) and trim old RPM constructs.</changelog>
</package>
<package pkgid="9001ac57034b4637442b132fb5cbdb61339c338f5efd85085981c0c8f9f440a1b0b037001e3b0fd2362fd31a13f410f02024ca0865de1adaf921fe41fd210492" name="astyle" arch="x86_64">
  <version epoch="0" ver="3.4.13" rel="bp160.1.13"/>
  <changelog author="kkaempf@suse.com" date="1523880000">- don't obsolete libastyle1, let the distribution update handle
  removal of old shared lib.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1684929600">- Update to 3.3:
  * The source code has been refactored to no longer use the std namespace
    globally.
  * Some features of "modern C++" are now supported, ie. lambda function
    arguments and array initializers with braces.
  * Two new options to remove superfluous whitespace and empty lines were
    added: "squeeze-ws" and "squeeze-lines=#" (parameter value is the number of
    empty lines to keep).
  * Two new options to add or remove whitespace around square brackets were
    added: "pad-brackets" and "unpad-brackets".
- Changes of 3.2:
  * Use C++11 feature.
  * New option "style=webkit": Similar to the Stroustrup brace style except the
    'else' keyword is attached to the previous closing bracket.
  * Various bugs fixes, especially causing reformatting the code in repeated
    runs.
  * Deprecated options have been removed.
- Install man page.
- Add astyle-3.3-std.patch: Fix build.
- Refresh spec file.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1685275200">- Update to 3.3.1: Fix build.
- Remove astyle-3.3-std.patch: Fixed upstream.</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1686139200">- bring back libastylej.so symlink to fix at least Arduino
- add libastylej.rpmlintrc to disarm the harmful check which
  probably caused the removal of libastylej.so</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1686139201">- spec: add libastylej.rpmlintrc to please factory-auto check</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1687003200">- Update to 3.4:
  * Fixed formatting of CS interpolation literals (gl#saalen/astyle#8).
  * Fixed false lambda recognition (gl#saalen/astyle#11).
  * Fixed indentation of member declarations (gl#saalen/astyle#10).
  * Fixed indentation of struct assignments (gl#saalen/astyle#12).
  * Added new option "--indent-lambda" to to enable new lambda recognition
    (gl#saalen/astyle#7).</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1697889600">- Update to 3.4.10:
  * Fixed missing indent in function parameter list (gl#saalen/astyle#16).
- Changes of version 3.4.9:
  * Applied one wording for Objective-C in the docs.
  * Fixed more CS regressions (gl#saalen/astyle#16).
  * Fixed inserting space with combined "--pad-oper" and "--align-pointer" options (#557).
- Changes of version 3.4.8:
  * Fixed lambda broken brace after auto keyword (#554).
  * Fixed line break after comment in asm block (#226).
  * Fixed padding of multiply operator (#126).
  * Fixed indentation of method calls (#434).
  * Fixed empty line after closing while block (gl#saalen/astyle#18).
  * Added outer padding for emtpy parens pairs (gl#saalen/astyle#19).
  * Fixed more CS regressions (gl#saalen/astyle#16).
- Changes of version 3.4.6:
  * Added VS2022 project files (gl#saalen/astyle!3).
  * Fixed CS regressions (gl#saalen/astyle#16).
  * Added CS coalesce assignment operator (gl#saalen/astyle#17).
- Changes of version 3.4.1:
  * Fixed padding of &amp; following a comma (#552).
  * Fixed indent of function declarations following access modifiers (#504).
  * Fixed indent of C# allocation blocks (#464).
  * Fixed indentation of comments after CS interpolation quotes (gl#saalen/astyle#16).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1706616000">- Update to 3.4.11:
  * added new option "--add-braces=nested" to add braces in nested single line statements
    (https://gitlab.com/saalen/astyle/-/issues/27)
  * fix indent after double template brackets (https://gitlab.com/saalen/astyle/-/issues/28)
  * fix indent after dot (https://gitlab.com/saalen/astyle/-/issues/28)
  * "--squeeze-lines=1" is no longer default with Linux builds (#559)
  * add experimental GHC mode (https://gitlab.com/saalen/astyle/-/issues/31)
  * fix indent after raw string (https://gitlab.com/saalen/astyle/-/issues/32)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 3.4.13:
  * fix comment indent after string macro with R suffix
  * do not break single line block after enum in mozilla mode
  * adjust cmake policy for new versions only
  * update man page path
  * add support for scikit-build-core
  * added "--pad-brackets-in" and "--pad-brackets-out" options
  * fixed indentation of initializer lists
  * fixed crash with "--add-braces=nested" applied to if-else blocks</changelog>
</package>
<package pkgid="f6237a250f819e6014e3f47ae434e281c46d6eb845933034843508bbb7fb24bd15917e593fef7b2750e6bf047b873d048e0fe95ffbc06df9b43a5b052c93d6e8" name="asymptote" arch="x86_64">
  <version epoch="0" ver="2.90" rel="bp160.1.14"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1608811200">- Update to release 2.68
  * Floating point exceptions in OpenGL libraries are now masked.
  * A normalization used to render tubes was fixed.
  * A Label align(Label,dir) function was added for aligning
    label normals.
  * A new settings.compress=true option controls PDF image
    compression.
  * A bool isometry(transform) function was added.
  * The transpose function ignores uninitialized elements.
  * Null fields are treated as undefined values in cvs mode and
    in line mode.
  * Uninitialized rendering variables were fixed.
  * Logarithmic graphs of surfaces are supported.
  * Files are opened without assuming an asy suffix.
  * Support for Ghostscript 9.53 was implemented.
  * The end argument of Margin functions is now optional.
  * A function cputime().change.clock that returns the
    high-resolution elapsed wall clock time was added.
  * The centering of slides was fixed.
  * Null characters and null strings are supported in the replace
    function.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1620388800">- Update to release 2.70
  * Fix segmentation fault in subpath3
  * Make Gouraud image respect x and y picture scaling</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650542400">- Update to release 2.80
  * Compression of empty transparent pixel counts and other
    optimizations were implemented in the transparency shader. A
    weighted least-squares fit was added.
  * LSP: Add basic Language Server Protocol. server code to
    Asymptote.
  * Add preliminary v3d standard.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655380800">- Update to release 2.81
  * Schur decompositions were implemented. A bug in uniform() was
    fixed.
  * The Xasy bounding box and a crash when opening Xasy files
    were fixed.
  * The transparency offset buffer is zeroed when GPU compression
    is unavailable.
  * The surface constructor for solids of revolution was
    documented.
  * Opaque rendering on platforms lacking
    GL_ARB_fragment_shader_interlock was fixed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660132800">- Update to release 2.82
  * Support for Ghostscript 9.56 was added.
  * The dvisvgmMultipleFiles option is now enabled by default.
  * The mean color of multicoloured patches is output only for
    PRC code.
  * Subdivision crack adjustments were disabled for transparent
    patches.
  * The OpenGL transparency shader was further accelerated.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668859200">- Update to release 2.83
  * WebGL triangle groups were fixed.
  * Context menus were added to Xasy objects to allow one to edit
    the fill type, line type, color, line cap, and optionally add
    arrowheads.
  * Support for begingroup() and endgroup() was added to Xasy.
  * Scaling in the vectorfield function was fixed.
  * A quotient(x,y) bug when -1 &lt; x/y &lt; 0, introduced in version
    2.42, was fixed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687608000">- Update to release 2.86
  * Terminate phase1 of simplex method once a zero-cost solution
    is found.
  * Fix bug in XDR reads due to uninitialized variable.
  * Add high-resolution clock; update FFT support.
- Add 0001-Fix-without-lsp-issue-379.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1712836800">- Update to release 2.89
  * Avoid broken dvisvgm reassign-clippaths optimization.
  * Use a unique signature hash for identifying templated imports.
  * Optimize dvisvgm output by default.
- Delete 0001-Fix-without-lsp-issue-379.patch (merged)</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- Drop the dependency on /usr/bin/python3 symlink
  * boo#1212476</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721304000">- Update to release 2.90
  * Support templated access with imported and top-level
    structure types, templated access with types containing
    static fields, and templated imports for parameter types
    defined in imported modules.
  * Decouple scaling of each dimension with a fixed version of
    the original 2-variable simplex method.
  * Fix approximate transparency rendering for GPUs without SSBO
    support.</changelog>
</package>
<package pkgid="98abacc236b3c91ae682c94aff94bb8ec92235528301d263b4b000c66eb3dbdace6a81fdc90ae3424052b6ecbbf72ed2644be6178fd938312d88c392c6c8f43c" name="at" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 3.2.2:
  * Add script batch-job
- Refresh patch at-3.1.14.patch into at-3.2.2.patch
- Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atd.service.patch
  Modified:
  * atd.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- Tumbleweed is not affected by the following SLE issues:
  * jsc#SLE-17611
  * bsc#1181576</changelog>
  <changelog author="jsegitz@suse.com" date="1637668800">- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
  breaking at jobs (boo#1192294)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645531200">- Update to version 3.2.4:
  * Upstream SUSE patches
- Update to version 3.2.3:
  * Fix two typos on documentation
  * Upstream SUSE patches
  * Various improvements to the code and the build system
- Refresh patches:
  * at-3.1.16-handle_malformed_jobs.patch
  * at-3.2.2.patch
  * at-backport-old-privs.patch
  * harden_atd.service.patch
- Drop upstreamed patches:
  * at-3.1.13-leak-fix.patch
  * at-3.1.13-massive_batch.patch
  * at-3.1.14-joblist.patch
  * at-3.1.14-usePOSIXtimers.patch
  * at-3.1.8-jobdir-mtime.patch
  * at-atq-timeformat.patch
  * at-secure_getenv.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647345600">- Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
  * Remove harden_atd.service.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1648036800">- Switch to dynamic UIDs instead of hardcoding 25</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 3.2.5:
  + Fix: atd forgets to run a job in the queue (deb#1004972).</changelog>
  <changelog author="schubi@suse.com" date="1672142400">- Migration of PAM settings to /usr/lib/pam.d</changelog>
</package>
<package pkgid="b2ebfd861e5066c9231d957ba444625c5ef4c7928741ef67f67bc6acf7f790e08ae3f260c78696f785642a5291816a2e9308f70b6d54f0a3df0c142b9bb495a4" name="at-spi2-core" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="5fe939133e6fd65a0e444bc5f91b92618a7528b6da246980760159f6eeb00362b72e2f06b782ff2ecd7b3c9176a55d224ec0a6ef115fd8a4b3bd22a2e49df761" name="at-spi2-core-devel" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="1a3ed7363250fd8768875baa1a2dcad6662706b95a07c3e3f0b1748d4b8dd560a0d04fabc0095da6d8d9b1b4b9ef43cbdedfb5510435f16884bcecfb014d4c0a" name="at-spi2-core-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="13ee1b5e8f49e062a873f3e1ec7edd9c5156091336b8a2a6f045bb5c46f4dafa45db74337acc56c062f21820738e89f6bc8d2c7ed499115b739de2cc308a0449" name="at-spi2-core-lang" arch="noarch">
  <version epoch="0" ver="2.56.3" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1736596800">- Update to version 2.54.1:
  + Fix various memory leaks.
  + Fix the build on FreeBSD.
- Switch to source service for tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736596801">- Update to version 2.55.0 (Unstable):
  + Improve warnings when setting a property.
  + Use the appropriate annotations for callbacks.
  + device: Support adding grabs given a keysym.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1736856000">- Update to version 2.55.0.1 (Unstable):
  + Fix regression in 2.55.0 where ungrabbing keys did not work
    reliably.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1738497600">- Update to version 2.55.2 (Unstable):
  + Attempt to fix a use after free in the atk bridge.
  + Add a switch role.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740744000">- Update to version 2.55.90 (Unstable):
  + Support grabbing keyboard shortcuts through the new
    org.freedesktop.a11y.KeyboardMonitor interface. This allows key
    grabs to be supported under Wayland with the latest mutter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742126400">- Update to version 2.56.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1743249600">- Update to version 2.56.1:
  + device-a11y-manager:
  - Fix crash on dispose
  - Check properly for the DBus backend presence</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1745841600">- Update to version 2.56.2:
  + Fix the build with glib &lt; 2.76.
  + a11y-manager-device: Fix unmap_keysym_modifier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1751198400">- Update to version 2.56.3:
  + DeviceEventController: update mouse coordinates before sending
    button events
  + atspi-device-legacy: Don't crash when XkbGetMap fails
  + Return localized role name for ATSPI_ROLE_EDITBAR</changelog>
  <changelog author="mgorse@suse.com" date="1752235200">- Add upstream fixes:
  +  at-spi2-core-grab-memory-leak.patch
  + at-spi2-core-key-grabs.patch (glgo#GNOME/at-spi2-core!193)
  + at-spi2-core-plug-crash.patch (glgo#GNOME/at-spi2-core#198)</changelog>
</package>
<package pkgid="d7175a267735b486acf1272c6291372047bf92f399ddeb60d8dba83b73f0685a77d18d0c4a746fcbcb999c89092cf0346861f77b76c12023f7552f37f479b7d9" name="atftp" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="bp160.1.10"/>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1611230400">- Use system wide tftp user/group, don't create them again</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621944000">- Update to version 0.7.4
  * fix compile, missing include
  * fix compile, add missing defines
  * link against libpthread for atftp
  * fixed atftp fails to write to /proc/self/fd/1
  * Fix for DoS issue CVE-2020-6097
  * remove inline keyword from definitions
  * remove extern inlines
  * sys/cdefs usage
- Drop fixed atftp-CVE-2020-6097.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * atftpd.service</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631707200">- Update to version 0.7.5 [bsc#1190522, CVE-2021-41054]
  * text files: mark/convert all textfiles to UTF-8
  * fix some compiler warnings
  * fix buffer overflow in atftpd (CVE-2021-41054)
  * test.sh: check for root no longer necessary
  * tftpd.c: Only drop privs if requested or running as root + check for failure
  * fix invalid read of 1 byte in tftp_send_request.
  * Check return value of fseek(), abort if != 0
  * options.c: Proper fix for the read-past-end-of-array
  * configure.ac: Add -std=gnu89 if gcc/clang is detected
  * tftpd.c: Fix memleak if thread spawning fails
  * atftp: Check return value of fgets, buffer might be uninitialized on NULL
  * Fix check for argz support (HAVE_ARGZ -&gt; HAVE_ARGZ_H)
  * replace LICENSE with current version
  * Remove patches fixed upstream:
  - atftp-0.7-sorcerers_apprentice.patch
  - atftp-0.7-server_receive_race.patch
  - atftp-0.7-ack_heuristic.patch
  * Rebase patches:
  - atftp-drop_privileges_non-daemon.patch
  - atftp-0.7-default_dir_man.patch
  - atftp-0.7-default_user_man.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@intern&gt;" date="1656417600">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1662033600">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="David Anes &lt;david.anes@suse.com&gt;" date="1663156800">- Update to version 0.8.0
  * test.sh: add MTFTP tests
  * Fix MTFTP support for atftp
  * Fix multicast download.
  * Fix algorithm in case of packet loss in the last window.
  * Improve the robustness of the atftp-client in case of package loss or duplication
  * Implement PCRE tests.
  * Improve upstream test script. Include tests for windowsize option.
  * Fix/update minor issues in upstream
  * Fix the 'windowsize' option for write requests
  * FAQ INSTALL README.CVS README.PCRE: cosmetic and spelling fixes
  * *.h: cosmetic and spelling fixes
  * configure.ac: more fixes, also for libpcre2 detection
  * Port to maintained PCRE2 API
  * Changelog: update the recent changes
  * autoconf: modify autogen.sh
  * atftp.1: add more examples for options
  * Add a simple congestion control
  * Do some cosmetic changes
  * Add windowsize option as described in RFC7440</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1727179200">- Delete /usr/sbin/rc* symlink &amp; specfile housekeeping
- Make atftpd.socket listen on AF_INET6 as well
- Deactivate FORTIFY_SOURCE for the time being due to a glibc bug</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1742385600">- Switch to PCRE2</changelog>
</package>
<package pkgid="299874014479a08e7d75c154b742c11aaf90a576a3cad2e49f3b58570fdb5142f3c861f9d6fcc0c03c7968afe2e2dee9cf6ff1888c2bfbd89ae20a121ddea509" name="atheme" arch="x86_64">
  <version epoch="0" ver="7.2.12" rel="bp160.1.10"/>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Generate "atheme" user with sysusers mechanism</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718712000">- Remove rc* symlinks</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742558400">- Use /run/atheme not /run to resolve a permission error on startup.
- Add pcre2.diff.</changelog>
</package>
<package pkgid="699e7ad590c8d7da30498ad294828a9272f810144e9f1b2bfaf6a9062332d46bc245a6bcc5431cb0e537d76e37f6b5bd1010b808593e10ca2af0744cefdee369" name="atheme-devel" arch="x86_64">
  <version epoch="0" ver="7.2.12" rel="bp160.1.10"/>
  <changelog author="jengelh@inai.de" date="1490875200">- Update to new upstream release 7.2.8
  * Close a memory leak that could be exploited by attackers to
    potentially cause a denial of service.
    [CVE-2017-6384, boo#1027614]
- Update to new upstream release 7.2.9
  * Fixing use after free that could potentially be used by an
    attacker already having the privilege to use SASL impersonation
    to cause a denial of service.</changelog>
  <changelog author="jengelh@inai.de" date="1509710400">- Rename the tools dbverify and ecdsakeygen with an "atheme-"
  prefix. This is possible since they do not appear to get invoked
  by the server, but only by the user.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566388800">- Update to new upstream release 7.2.10.r2
  * Fix potential NULL dereference in modules/crypto/posix.
  * Bump E-Mail address maximum length to 254 characters.
  * Use flags setter information in modules/chanserv/access &amp;
    modules/chanserv/flags.
  * Fix issue where modules/misc/httpd was not closing its
    listening socket on deinit.
  * Fix GroupServ data loss issue when a group was the founder of
    another group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600084800">- Fix misuse of %_libexecdir for /usr/lib/tmpfiles
  [boo#1174075]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 7.2.11
  * Add a preliminary Turkish translation
  * Add HMAC-MD5 verify-only support to crypto/pbkdf2v2
  * modules/chanserv/akick: fix unload crash with akicks that
    have timeouts
  * modules/nickserv/multimark: use IRC case canonicalisation
    for restored nicks
  * modules/nickserv/multimark: forbid unloading due to the
    potential for data loss
  * CA_ constants: include CA_EXEMPT (+e) where appropriate
- Drop atheme-serno.diff (no longer applies)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615118400">- Redownload atheme-services-v7.2.11.tar.xz
  because they changed it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1643630400">- Update to release 7.2.12
  * Fix CVE-2022-24976 [boo#1195989]
  * Track SASL login EID</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Generate "atheme" user with sysusers mechanism</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718712000">- Remove rc* symlinks</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742558400">- Use /run/atheme not /run to resolve a permission error on startup.
- Add pcre2.diff.</changelog>
</package>
<package pkgid="284ceaf9beda0e21d9eece81b91d3e5ab74e98c6367992233cad02bbd58c3a88d28001f653d5eba972473bd791ad204567e620f2548eb93f9d7f37a4a04a60c8" name="atinject" arch="noarch">
  <version epoch="0" ver="1+20211017gitd06ce18" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540382400">- Initial packaging of atinject adapted from Fedora rpm</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8
- Added patch:
  * atinject-javadoc.patch
    + fix build with javadoc 17</changelog>
  <changelog author="fstrba@suse.com" date="1648123200">- Fetch the sources using a source service
- Do not use the upstream build.sh, but use it to write a
  necessary part directly to the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1648900800">- Alias to the new jakarta name</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Upgrade to version 1.0.5 and switch to sources in
  https://github.com/jakartaee/inject/
  * Changes of 1.0.5:
    + This switches the module name back to the java.inject that was
    used by the 1.0.3 release with automatic module. This is a
    multi-release jar
  * Changes of 1.0.4:
    + This is a 1.0.4 service release with a multi-release jar that
    adds the module-info class to
    META-INF/versions/9/module-info.class using the
    https://github.com/moditect/moditect plugin for the
    javax.inject module.
  * Changes of 1.0.3:
    + This release corrects the 1.0.2 release which was incorrectly
    done from the master branch with the jakarta.* packages.
    + It adds the Automatic-Module-Name=java.inject to the api jar
    manifest.
  * Changes of 1.0.2:
    + A service release that addresses:
  - #14, set Automatic-Module-Name to java.inject
  - #15, add OSGi bundle headers
  * Changes of 1.0.1:
    + Add Automatic-Module-Name of jakarta.inject
  * Changes of 1.0:
    + First Injection API release for Jakarta EE
- Remove unused sub-package tck
- Removed patch:
  * atinject-javadoc.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1717761600">- Don't distribute as jakarta.inject:jakarta-inject-api artifact
  to prevent conflicts with the version 2.x that actually has
  classes in jakarta.inject namespace and thus is incompatible</changelog>
  <changelog author="fstrba@suse.com" date="1720526400">- Revert to versioning 1+&lt;date&gt;git&lt;git short hash&gt; to avoid upgrade
  problems in SLE</changelog>
</package>
<package pkgid="1e8ac05785340e72df712ac3af95ef88d9c3d1df3fadf9b29ba407a89858d2effae30bcbc3515f35746c6a8f0c415c1728c075d91074d0c6f0672fc1baed66e2" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1+20211017gitd06ce18" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540382400">- Initial packaging of atinject adapted from Fedora rpm</changelog>
  <changelog author="fstrba@suse.com" date="1647691200">- Build with source/target levels 8
- Added patch:
  * atinject-javadoc.patch
    + fix build with javadoc 17</changelog>
  <changelog author="fstrba@suse.com" date="1648123200">- Fetch the sources using a source service
- Do not use the upstream build.sh, but use it to write a
  necessary part directly to the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1648900800">- Alias to the new jakarta name</changelog>
  <changelog author="fstrba@suse.com" date="1712750400">- Upgrade to version 1.0.5 and switch to sources in
  https://github.com/jakartaee/inject/
  * Changes of 1.0.5:
    + This switches the module name back to the java.inject that was
    used by the 1.0.3 release with automatic module. This is a
    multi-release jar
  * Changes of 1.0.4:
    + This is a 1.0.4 service release with a multi-release jar that
    adds the module-info class to
    META-INF/versions/9/module-info.class using the
    https://github.com/moditect/moditect plugin for the
    javax.inject module.
  * Changes of 1.0.3:
    + This release corrects the 1.0.2 release which was incorrectly
    done from the master branch with the jakarta.* packages.
    + It adds the Automatic-Module-Name=java.inject to the api jar
    manifest.
  * Changes of 1.0.2:
    + A service release that addresses:
  - #14, set Automatic-Module-Name to java.inject
  - #15, add OSGi bundle headers
  * Changes of 1.0.1:
    + Add Automatic-Module-Name of jakarta.inject
  * Changes of 1.0:
    + First Injection API release for Jakarta EE
- Remove unused sub-package tck
- Removed patch:
  * atinject-javadoc.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1717761600">- Don't distribute as jakarta.inject:jakarta-inject-api artifact
  to prevent conflicts with the version 2.x that actually has
  classes in jakarta.inject namespace and thus is incompatible</changelog>
  <changelog author="fstrba@suse.com" date="1720526400">- Revert to versioning 1+&lt;date&gt;git&lt;git short hash&gt; to avoid upgrade
  problems in SLE</changelog>
</package>
<package pkgid="d8e6b37b29d234adedf4b823e86411165403e0f785fc0870aeff8283058a3a4c449e4e5e0b5aaeddd8e74d5f85f24ec7a9279f4b815bddba3aac2b4066941e2e" name="atinout" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="bp160.1.12"/>
  <changelog author="mardnh@gmx.de" date="1535457600">- Initial package, version 0.9.1</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="245a3e73d3705921a02300fba839cd752e29da721c842fa81c893a8f444410e8c8625631de5f25250bec96ed8fa244afa6407809fe8ee31347603940c8aad75c" name="atkmm-devel" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Export CXXFLAGS="-std=c++17" until upstream catches up. Required,
  as libsigc++-3.0 moved to C++17.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.29.1:
  + Build:
  - Require C++17.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Use glibmm-2.60 instead of glibmm-2.56.
  - Change the ABI to atkmm-2.30.
- Replace pkgconfig(glibmm-2.58) with pkgconfig(glibmm-2.60)
  BuildRequires.
- Drop pkgconfig(glibmm-2.60): Fixed upstream. Following this, also
  drop libtool and mm-common as well as autogen.sh call, no longer
  needed.
- Bump soname following upstream changes.
- Drop atkmm-glibmm-bump.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Add atkmm-use-glibmm-262.patch: Forward port to use new glibmm2.
  Following this, add libtool and mm-common BuildRequires and pass
  autogen.sh as the patch touches the buildsystem. Also replace
  pkgconfig(glibmm-2.60) with pkgconfig(glibmm-2.62) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582200000">- Add atkmm-use-glibmm-264.patch: Forward port to use new glibmm2.
- Replace pkgconfig(glibmm-2.62) BuildRequires with
  pkgconfig(glibmm-2.64).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584878400">- Add atkmm-use-glibmm-266.patch: Forward port to use new glibmm2.
- Replace pkgconfig(glibmm-2.64) BuildRequires with
  pkgconfig(glibmm-2.66).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1608379200">- Update to version 2.36.0:
  + Object: Add get_object_locale(), get/set_accessible_id(),
    property_accessible_table_caption_object() and
    property_accessible_hypertext_nlinks().
  + Text: Add signal_text_insert() and signal_text_remove().
  + Value: Add signal_value_changed().
  + Hyperlink, Object: Remove deprecated properties
  + Build:
  - Use glibmm-2.68 instead of glibmm-2.60
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
    Drop gendef.exe
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
  - Change the ABI to atkmm-2.36
- Drop patches fixed upstream:
  + atkmm-use-glibmm-262.patch
  + atkmm-use-glibmm-264.patch
  + atkmm-use-glibmm-266.patch
- Add meson BuildRequires and macros following upstreams port.
- Bump base_ver and libname (and in baselibs.conf) following
  upstream changes.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace pkgconfig(glibmm-2.66) with pkgconfig(glibmm-2.68)
  BuildRequires.
- Add doxygen, graphviz and xsltproc BuildRequires, needed now to
  build documentation.
- Drop libtool and mm-common BuildRequires.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621944000">- Update to version 2.36.1
  + Only build system related changes</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1660219200">- Update to version 2.36.2:
  + Support building with Visual Studio 2022.
  + Meson build:
  - Specify 'check' option in run_command(). Will be necessary
    with future versions of Meson.
  - Perl is not required by new versions of mm-common.
  - Avoid unnecessary configuration warnings.
  - Require meson &gt;= 0.55.0.
  + Require atk &gt;= 2.33.3. Not a new requirement, but previously
    it was not specified in configure.ac and meson.build.
- Use ldconfig_scriptlets macro for post(un) handling.
- Remove erroneous executable bit from NEWS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671192000">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706529600">- Update to version 2.36.3:
  + Documentation:
  - atkmm.h: Update link to ATK.
  - Add README.win32.md with Win32 build documentation.
  - Remove AUTHORS and add general information to README.md.
  + Meson build:
  - Detect if we build from a git subtree.
  - Don't copy files with configure_file().
  - Fix the evaluation of is_git_build on Windows.
  - Don't fail if warning_level=everything.</changelog>
</package>
<package pkgid="1f4f40f9e82517ccb5228ed9e4afcc2d132e478b1153ce0ed4093fffbb5f03dbf8d8d58776c259fd6a3bb3a18e615f9fe5aca04e0d56a9e2bdbe3e4df9903171" name="atkmm-doc" arch="noarch">
  <version epoch="0" ver="2.36.3" rel="bp160.1.13"/>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Export CXXFLAGS="-std=c++17" until upstream catches up. Required,
  as libsigc++-3.0 moved to C++17.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.29.1:
  + Build:
  - Require C++17.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Use glibmm-2.60 instead of glibmm-2.56.
  - Change the ABI to atkmm-2.30.
- Replace pkgconfig(glibmm-2.58) with pkgconfig(glibmm-2.60)
  BuildRequires.
- Drop pkgconfig(glibmm-2.60): Fixed upstream. Following this, also
  drop libtool and mm-common as well as autogen.sh call, no longer
  needed.
- Bump soname following upstream changes.
- Drop atkmm-glibmm-bump.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Add atkmm-use-glibmm-262.patch: Forward port to use new glibmm2.
  Following this, add libtool and mm-common BuildRequires and pass
  autogen.sh as the patch touches the buildsystem. Also replace
  pkgconfig(glibmm-2.60) with pkgconfig(glibmm-2.62) BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582200000">- Add atkmm-use-glibmm-264.patch: Forward port to use new glibmm2.
- Replace pkgconfig(glibmm-2.62) BuildRequires with
  pkgconfig(glibmm-2.64).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584878400">- Add atkmm-use-glibmm-266.patch: Forward port to use new glibmm2.
- Replace pkgconfig(glibmm-2.64) BuildRequires with
  pkgconfig(glibmm-2.66).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1608379200">- Update to version 2.36.0:
  + Object: Add get_object_locale(), get/set_accessible_id(),
    property_accessible_table_caption_object() and
    property_accessible_hypertext_nlinks().
  + Text: Add signal_text_insert() and signal_text_remove().
  + Value: Add signal_value_changed().
  + Hyperlink, Object: Remove deprecated properties
  + Build:
  - Use glibmm-2.68 instead of glibmm-2.60
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
    Drop gendef.exe
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
  - Change the ABI to atkmm-2.36
- Drop patches fixed upstream:
  + atkmm-use-glibmm-262.patch
  + atkmm-use-glibmm-264.patch
  + atkmm-use-glibmm-266.patch
- Add meson BuildRequires and macros following upstreams port.
- Bump base_ver and libname (and in baselibs.conf) following
  upstream changes.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace pkgconfig(glibmm-2.66) with pkgconfig(glibmm-2.68)
  BuildRequires.
- Add doxygen, graphviz and xsltproc BuildRequires, needed now to
  build documentation.
- Drop libtool and mm-common BuildRequires.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1621944000">- Update to version 2.36.1
  + Only build system related changes</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1660219200">- Update to version 2.36.2:
  + Support building with Visual Studio 2022.
  + Meson build:
  - Specify 'check' option in run_command(). Will be necessary
    with future versions of Meson.
  - Perl is not required by new versions of mm-common.
  - Avoid unnecessary configuration warnings.
  - Require meson &gt;= 0.55.0.
  + Require atk &gt;= 2.33.3. Not a new requirement, but previously
    it was not specified in configure.ac and meson.build.
- Use ldconfig_scriptlets macro for post(un) handling.
- Remove erroneous executable bit from NEWS.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671192000">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706529600">- Update to version 2.36.3:
  + Documentation:
  - atkmm.h: Update link to ATK.
  - Add README.win32.md with Win32 build documentation.
  - Remove AUTHORS and add general information to README.md.
  + Meson build:
  - Detect if we build from a git subtree.
  - Don't copy files with configure_file().
  - Fix the evaluation of is_git_build on Windows.
  - Don't fail if warning_level=everything.</changelog>
</package>
<package pkgid="37e58144634c75be4c5b78a0f93eee23ec5b6efc4ba479e154be1012d00c99bf906c5dbe6cf71f96792220b44d8a66a12c0412cf74e503ee4af2482d0d567ab5" name="atkmm1_6-devel" arch="x86_64">
  <version epoch="0" ver="2.28.3" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660219200">- Update to version 2.28.3:
  + Support building with Visual Studio 2022.
  + Meson build:
  - Specify 'check' option in run_command(). Will be necessary
    with future versions of Meson.
  - Perl is not required by new versions of mm-common.
  - Avoid unnecessary configuration warnings.
  - Require meson &gt;= 0.55.0.
  + Require atk &gt;= 2.12.0. Not a new requirement, but previously it
    was not specified in configure.ac and meson.build.
- Changes from version 2.28.2:
  + Meson build:
  - Use relative paths to untracked/.
  - Make it possible to use atkmm as a subproject.
  - No implicit_include_directories.
  + atkmmconfig.h.*: Don't dllimport on MinGW.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094, bsc#1209139).</changelog>
  <changelog author="dimstar@opensuse.org" date="1709640000">- Drop baselibs.conf: the -32bit packages are no longer needed and
  have not been part of Tumbleweed for a while already (build for
  i586 only enabled in LegacyX86).</changelog>
</package>
<package pkgid="177d9e6855ac5ebdab214cec6d51a5279fce5161bcf59169500e9494329da087d0e9e25c377807e35fee5131b0261fb595b12c5a42ffc8cbb1083a60aeff9fae" name="atmel-firmware" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="agruen@suse.de" date="1141732800">- Add modalias tags (155357).</changelog>
  <changelog author="jg@suse.de" date="1174046400">- removed /lib/firmware from filelist</changelog>
  <changelog author="lrupp@suse.de" date="1251374400">- specfile cleanup</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="msuchanek@suse.com" date="1616328000">- Fix build on Leap which does not have %_firmwaredir</changelog>
</package>
<package pkgid="8169af2743b544639d443dfbcb1a91afaa8245ace6abd48cb03342a1cdd9a153a736e00a0218a1b0ab95c2039e48d1141a8af2f8bb5723b67464474ead3e271d" name="atomix" arch="x86_64">
  <version epoch="0" ver="44.0" rel="bp160.1.16"/>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0.1:
  + Fixed game menu not appearing (glgo#GNOME/atomix#13).
- Changes from version 3.30.0:
  + Do not show scores after entering scores.
  + Fixed libgnome-games-support git repo typo.
  + Updated translations.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550404800">- Update to version 3.31.90:
  + Moved app menu to in-game menu.
  + Removed quit menu item.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Stable release version bump.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565784000">- Update to version 3.32.1:
  + Fixed keys in menu controlling game.
  + Fixed keyboard shortcuts.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.33.92:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Stable release version bump.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Add atomix-gcc10.patch: Fix build with GCC 10.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678104000">- Update to version 44.rc:
  + Fixed build issues.
  + Updated translations.
- Drop atomix-gcc10.patch: fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 44.0:
  + Stable release version bump.</changelog>
</package>
<package pkgid="9b8719494217c370c510bbe09ea1e21ec6fa036a57d1353c03553733b039a7a5fdf68781eca1e0e4baa6abac2c4e72cc42abdaeed031c32a54db2a99f22a4094" name="atomix-lang" arch="noarch">
  <version epoch="0" ver="44.0" rel="bp160.1.16"/>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0.1:
  + Fixed game menu not appearing (glgo#GNOME/atomix#13).
- Changes from version 3.30.0:
  + Do not show scores after entering scores.
  + Fixed libgnome-games-support git repo typo.
  + Updated translations.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550404800">- Update to version 3.31.90:
  + Moved app menu to in-game menu.
  + Removed quit menu item.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Stable release version bump.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565784000">- Update to version 3.32.1:
  + Fixed keys in menu controlling game.
  + Fixed keyboard shortcuts.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.33.92:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Stable release version bump.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1591272000">- Add atomix-gcc10.patch: Fix build with GCC 10.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678104000">- Update to version 44.rc:
  + Fixed build issues.
  + Updated translations.
- Drop atomix-gcc10.patch: fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 44.0:
  + Stable release version bump.</changelog>
</package>
<package pkgid="a711d1d8d0fb85e46ee820c5e0d179b9d4e0e9edb8ec248513b67205879162074f95a1150e2a0ecf71a237972ad111ed50bb801887137402a23399d0623124cf" name="atop" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="bp160.1.4"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160</changelog>
</package>
<package pkgid="9d212d88e3429dacd9ddc3107300bdc0208af3ec93128dc260dd35ae575bdd15cd0f36d9f43f34e4cffcf28859d084f4d321d4cd39222fd527b33f933fb246d8" name="atop-daemon" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="bp160.1.4"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618315200">- Update to version 2.6.0
  * Sort threads within process.
  * Individual threads within a process (key 'y') are shown in the
    order of their TID. With the additional key 'Y' threads within
    a process are sorted based on the current sort criterium.
  * Show the WCHAN per thread.
  * With the key 'W' is active, the wait channel is determined per
    thread and shown with the scheduling information (key 's').
  * Show runqueue delay per thread/process.
  * For every process (cumulated) and every thread the time spent
    waiting on the runqueue is shown as value 'RDELAY'.
  * Show other modified/new metrics:
    + PSI pressure during interval time is shown
    + Counter 'avio' (average I/O time) for fast disks in
    microseconds or nanoseconds
    + Counter 'zfarc' showing the current size of the ARC (cache)
    for ZFSonlinux
    + Counter 'swcac' showing the current size of the swap cache
    + Counter LOCKSZ showing the virtual locked memory size
  * Avoid crash with very high load average values.
  * Fix errors in reading InfiniBand states.
  * Support of rawlog files spanning multiple days.
  * The time specification to define the begin time (-b flag)
    and end time (-e flag) of both atop and atopsar is
    [YYYYMMDD]hhmm now
  * This also applies to the branch key ('b') when using atop
    interactively.
  * Support reading rawlog from a pipe.
  * Rawlog data can be read from a pipe by atop and atopsar with
    the option '-r -'. In this way, concatenated rawlog data from
    the command atopcat can be directly processed.
  * New program atopcat, the program atopcat concatenates rawlog
    files and writes this data to stdout. The output can be
    redirected to a new rawlog file or to atop/atopsar directly
    via a pipe (see option '-r -' of these commands).
    In this way e.g. weekly or monthly reports or extractions
    can be created.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atop-rotate.service.patch
  * harden_atop.service.patch
  * harden_atopacct.service.patch
  * harden_atopgpu.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1641556800">- Update to 2.7.0:
  * Describe (un)restricted view in first screen
  * Cosmetic change
  * Determine (un)restricted view by verifying suid instead of euid.
  * Do not ignore unknown network interface
  * Parseable output: optionally exchange spaces in command
  * No setuid by default
  * Correct conversion to 2.7 raw files
  * Corrected type
  * Only show per-node NUMA stats when more than 1 node
  * Prepare man pages for version 2.7
  * Prepare atopconvert for version 2.7
  * Detect logrotation for process accounting with psacct/acct
  * Speed and duplex mode not correctly filled for interface
  * Bug solution related to discards
  * Support discard counter for disks and skip unused disks
  * ifprop.c: fix ioctl parameter after handshaking with kernel
  * Show gigabits/sec instead of megabits/sec for Infiniband #131
  * CVE: use execvp with a specified path to avoid PATH hijacking
  * Correct memory busy logic in atopsar
  * Add parseable output for per-node NUMA counters
  * Additions to NUMA counters Table overflow checks
  * Gather and show per numa cpu related statistics
  * Gather and show per numa memory related statistics
  * Correction in handling of zswap and ksm counters
  * Support containers created by podman
  * Cleanup old messages
  * Do not change owner to root in Makefile (#76)
  * Support process accounting log /var/log/account/pacct (#138)
  * Polish do_perfevents when atop built with NOPERFEVENT
  * Do not use doconvert funtion to validate counter (#160)
  * New counter for number of NUMA pages migrated
  * Modify field order and priority of paging counters
  * Small text modification for migrated counter
  * Avoid non-initialized prestat by introducing extra pointer
  * Function 'calcdiff' (deviate.c) used uninitialized prestat struct
  * Reserver space for future counters.
  * Clean up ignored files
  * Variable number of positions for sortitem
  * Adapt man page of atop for state selection (add state 'I').
  * Allow thread state 'I' with state selection (key 'Q')
  * Count idle threads as non-interruptible threads
  * Uninitialized index might cause segmentation fault.
  * Support NVMe multipath disk statistics
  * Support page migration counter
  * photosyst.c: fix build on musl
  * Use of struct ethtool_link_settings should be conditional
  * Cosmetic change (source code layout)
  * Various bug fixes and in general add 'thread' to all messages
  * Properly define if interface is virtual or physical
  * Add license info to various include files (solves issue #144)
  * HTTP statistics modified from -h flag to -o flag (#152)
  * Possible buffer overflow with huge number of seconds Number
    of seconds will be limited to 5 positions.
  * Possible buffer overflow with average disk I/O
  * Allow process selection based on specific process states.
  * Correct definition of environment variable LOGOPTS
  * Switch to using curses vw_printw as vwprintw is deprecated
  * Support multiple counters 'allocstall_' in /proc/vmstat.
  * Avoid integer overflow when calculating PSI percentages.
  * Suppress irrelevant counters (solves issue #148)
  * Add the number of OOM kills to the -s report
  * Record the number of process stalls to run memory compaction
  * Make clean removes atopsar now (issue 145)
  * Add counter for the number of OOM kills to the PAG line
  * Add counters for zswap and KSM.
  * ifprop.c: fix build with kernel &lt; 4.6
  * Fix initifprop() when obtaining properties of all interfaces
  * Fixed rounding problems in the average-per-second mode.
- Refresh atop-makefile.patch
- Refresh harden_atop.service.patch
- Call make install instead of make systemdinstall
  Default is systemd now</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 2.7.1:
  * Correct disk stats in atopsar (#182)
  * Explicit type definition in atop.service (#180)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1672660800">- Update to 2.8.0:
  * Rename AUTHOR in spec file
  * Adapt atopconvert for conversion to version 2.8
  * Atopacct.service verifies if psacct/acct is active (#227)
    To avoid that the atopacctd daemon and the (ps)acct service both
    try to activate process accounting continuously, the atopacct.service
    refuses to start when the (ps)acct service is already active.
  * Fix LLC output for Json
  * Solve format-overflow/maybe-uninitialized warnings
  * Reshuffle counters to ease raw file conversion
  * Recalculate average queue in parseable output
  * Corrected the order of inflight/avque
  * Add inflight and avque counters to parseable data
  * Fix BDELAY in priphead call to make_proc_prints for schedprocs
  * Correct the array index used for previous samples per-container CPU values
  * Reinstate dropped printing of avio msec values between 99.95 and 9995
  * photosyst: add ceph rbd disk display
  * photosys.c: correct the numa number for NUM and NUC
  * Timeout when setting semaphore in atop (#207)
  * Current CPU set to -1 for terminated process (#201)
    When a process has terminated (status 'E') the current CPU will be
    set to -1 (means: unknown) in the parsable output with label PRC.
  * Typo corrections and correction in man page
  * Introduce JSON output by '-J xxx'
  * Add missing counter iInCsumErrors to ICMP counters
  * supplement inflight I/O requests
  * Man page: clarify elapsed time in PRG parseable output
  * Exponent calulation for high counter might exceed column width
    When a column width was defined of e.g. 4 positions, the value
    99999 was shown as 100e3 instead of 99e3 (upward rounding caused
    an extra position).
  * PID selection can not be undone for same interval When pressing
    'I' to select particular PIDs and pressing 'I' again within the
    same interval to deselect by pressing the Enter-key, the deselection
    is ignored. Solved by reinitializing the input buffer.
  * Split the MEM line into two lines and add pagetable size Since it was
    hardly possible to view the values in the MEM line (too many), the memory
    utilization has been spread over two lines. The amount of memory used
    for page tables has been added.
  * Memory usage for TCP/UDP sockets
  * Add Documentation key to atop-rotate.service/.timer (#206)
  * Correct typos in man pages (#205)
  * Add cgroup support (#127) The current cgroup is registered
    for systems that are based on cgroup v2. Apart from the group name also
    relevant controller information is maintained, like the cpu.max and the
    memory.max (for the group itself and the most restrictive value in the
    parent groups).
  * Fix compiling error with -DHTTPSTATS
  * supplement tcpsock and udpsock memory consumption
  * Store PID width in header of raw log Register the number of positions
    for PID and TID numbers on the measured system in the raw log. In this
    way, the viewing of the raw log on another system will use the proper
    column width for PID/TID.
  * showhdrline: fix OOB access when COLS is too small
  * Fix disk busy in man page
  * Add block I/O delay to processes/threads
  * Move run_in_guest into various.c
  * Minor changes to text, column priority and coloring
  * Support pgin &amp; pgout
  * Correction on calibration (one too many)
  * Detect vmmemctl at two locations
  * Use dup2 instead of close+dup
  * Fix compiling warning
  * Calibrate the value of nthr for each process
  * photosyst.c: fixed path for vmmemctl
  * Fix typo in man page
  * Added link
  * Only print current CPU frequency when supported by CPU architecture
  * Lower priority of column 'numnode' in MEM line
  * Support per-second counter for LLC
  * Reformat status line info in initial screen
  * Add LLC in atop man page
  * Support LLC collection
  * Add OpenRC init scripts (atop, atopacct)
  * Support LLC collection
- Refresh patches:
  * harden_atop-rotate.service.patch
  * harden_atopacct.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673092800">- Update to 2.8.1:
  * Correct NUMA conversion in logfiles from version 2.7 to 2.8
  * Avoid buffer overflows during value formatting
  * Solve compiler warnings about format-truncation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683979200">- Update to 2.9.0:
  * Avoid compiler warning by limiting PSI average
  * Install cleanup function to avoid termination of parent process
  * add man for PAG steal
  * Oomkills event should not remain orange after boot values
  * Clarified atop man page
  * Closing bracket missing in synopsis
  * Add highlight concerning bar graph mode
  * Introduce bar graph mode Besides all detailed information that
    is supplied by atop on system and process level, a (character-based)
    bar graph can be shown about the utilization of the most critical system resources
  * Freeing ethlink should depend of ifdef
  * Added reset to indicate shadow file to be closed
  * fix atopacctd.c: failed to start atopacct.service
  * acctatop: reacquire acctfd to collect nprocexit for some bad cases
  * Calibrate nprocexit to avoid atop coredumps unexpectedly
  * json.c: fix avque counters output
  * Resolve compiler warnings from latest versions of GCC
  * Added versdate.h to make clean target
  * Revert "Added versdate.h to make clean target"
  * Added versdate.h to make clean target
  * fix calculation for scan and steal
  * only call str.decode if nvml returned bytes
  * Add exit epoch to parseable output PRG (solves issue #242)
  * Minor correction in man page for NVCSW/NIVCSW
  * Context switches (voluntary and involuntary) on process level incorrect
  * Various modifications releated to (non)voluntary context switches
  * Add nvcsw and nivcsw for each process
  * ifprop.c: Fix possible memory leak
  * Code cleanup and prototype additions
  * Consistency check on number of threads (solves issue #232)
  * atop-rotate.service: use restart instead of try-restart
  * Add link to atophttpd
- Update patches:
  * atop-makefile.patch
  * harden_atop-rotate.service.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704456000">- Update to 2.10.0:
  * Additional memory statistics on system level: amount of available
    memory, amount of memory used for Transparant Huge Pages, amount
    of memory used by two categories of static huge pages (usually
    2MiB and 1GiB), and the number of pages transferred to/from zswap.
  * Additional counters for the number of idle threads on system
    level and process level.
  * Refined view of memory bar graph, including free static huge pages.
  * Generic way to determine the container id or pod name for
    containerized processes.
  * Support for a BPF-based alternative[1] for the netatop kernel
    module to gather network statistics per process/thread.
  * Use the -z flag followed by a regex to prepend matching environment
    variables to the full command line that is shown per process (with key 'c').
  * Various bugfixes (like memory leak when switching to bar graph mode)
    and minor improvements.
  * Bugfix: failing malloc while starting atopsar (unprivileged) for a live measurement.
  * The program atophide can be used to make an extraction from an input
    raw log to an output raw log, optionally specifying a begin time and/or an
    end time. The output raw log can be anonymized, i.e. the hostname
    will be replaced, command names of non-standard commands will be
    replaced, all command arguments will be wiped, logical volume names
    will be replaced and NFS mounted volume names will be replaced.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722254400">- Update to 2.11.0:
  * Cgroups (version 2) support.
    Show the hierarchical structure of cgroups and the related metrics
    with key/option 'G', and define the cgroup depth with the keys/options
    2 till 7. Key/option 8 also shows the processes per cgroup level,
    except the kernel processes in the root cgroup. Key/option 9 shows
    the related processes per cgroup level including the kernel processes
    in the root cgroup. With key/option 'C' the output is sorted on
    CPU consumption (default), with key/option 'M' on memory consumption,
    and with key/option 'D' (requires root privileges) on disk utilization.
    Note: The collection of cgroup information per process is not supported any more.
  * Twin mode: live measurement with review option.
    In twin mode atop spawns into a lower level process that gathers
    the counters and writes them to a temporary raw file, and an upper level
    process that reads the counters from the temporary raw file and presents them to
    the user.
    The reading of the upper level process keeps in pace with the written samples
    of the lower level process for live measurements. However, when pressing the
    'r' (reset to measurement begin), the 'b' (branch to time stamp),
    or the 'T' (previous sample), the upper level process implicitly
    pauses with the possibility to review previous samples.
    The 'z' (explicit pause) can also be used to pause the live measurement.
    When pressing the 'z' again (continue after pause) viewing of the
    live measurement will be continued.
  * Various corrections related to JSON output.
  * Improved gathering of current CPU frequency.
  * Support more than 500 CPUs.
  * The format of the raw file is incompatible with previous versions.
    Raw files from previous versions can be converted to the new layout
    with the atopconvert command.
- Update atop-makefile.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1743422400">- Update to 2.11.1:
  * Atop will not connect to the TCP port of 'atopgpud' daemon any more
    by default. The flag -k can be used explicitly when 'atopgpud' is
    active. Also the code to parse the received strings is improved to
    avoid future issues with heap corruption.
  * The flag -K has been implemented to connect to netatop/netatop-bpf.
  * Fix CVE-2025-31160</changelog>
</package>
<package pkgid="fb1d75010e29777ce4fa1a0e1af6af518df4ed9d3ad28b35152a921bfc2961d3d6e07792b4c7d47fc5511d0937d756ce67c005e4d83d232248985c750bb14637" name="atril" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="a6b39b24dbbe4be0f7a33a5b126ef531e96bfea66ef01bcf14b63ab49649b7181dcf33c59036b64a868b7b3eee5ee1d045d7616f5978158ebb192e8cde3b6b80" name="atril" arch="x86_64">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="37e9cd85ffe2640e4967a608cb6403ce91159bc810095a9c33d8b5b2eaee62670573209cb06305c86d84f0e90ef4bef66400e2949fbbe2ccc6cb3f3598ba6ead" name="atril-backends" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="c8e811b4a5132c24a3336ff492d422599ded7ac00adf21f42b4c940d2f0c91c4a8171b6b2f2788d3b440502bf162de9b05cfc73ba3fd2d6a54a5472568bdbe9c" name="atril-backends" arch="x86_64">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="6ef470a7998ca8a37a4ece8eb6a02f616cd35a423beacda1ec3b7c61854e0bf8814f2fe2b9419a3a14cb2e3edbe55cfe49a5d00b7b50cf3ddfade220a3619710" name="atril-devel" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="9e05267afcb4f27dcde6119d4d512687de8a07460afdda1671420c90a647d1d7117c37d4d46dc63b88a2c14d8cf0fdf076192d1db00a942cee2bcf43078b48da" name="atril-devel" arch="x86_64">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="e4e6b357cd1ebc4a62eb9598868229ac2aa6518565f55637663de931562a3dbe8304ec96037f4b9f4633367ae7de9dc9802e91c338bf7ed75c79963e311d0a96" name="atril-doc" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="f0c7ec39f8d5bcf18f600212313bbd52bf93a7122fac0860622da17bae33ab3e8a697a4b753e4f799ab50c63ad4e1a779cd5e6f87f886899666781470a4dd905" name="atril-doc" arch="noarch">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="2707210116db368801d0e3982dd940a39d008b84c24ed9d592d31a0abb3b38fa5d282db9897db754edc99d1f282de5bd3c8a942cb46b2bc38f5cdc3e1b795f82" name="atril-lang" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="be396a5d8d1bf7f200748ae6e586a178ee5e8310fe08e23827bf55e27f0a22a08ea374428cb21ed8d648314dd80d47d8cf3db549232397d693b2abac8f17cb44" name="atril-lang" arch="noarch">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="98e39be33e7f7f819e65cce59c6a721191b3bda56559cfee11b45f4fc2075a7f2b86038d72df236a9b8d39df1ff2158f7184f2aaa15585d17a4bcfe0748f749c" name="atril-thumbnailer" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="cbc611c06b8cbd7811a5cd1ff3158455d01b11e13bb8d7b14e2a25d95c4cdfb74b67f9ccfac60a1269f75a22cb8fbed0c102ccdc6888c7b4e84ce6a697aadf80" name="atril-thumbnailer" arch="x86_64">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="f905e1aba10ae654e119fd3e688951135a6380e76bed14dffa6e67f26830ae2b6974f0f0a38d84d0f208486fd9c35aff484b057c06345c18a5d86e99b698f369" name="attica-qt5" arch="x86_64">
  <version epoch="0" ver="5.116.0" rel="bp160.1.13"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1685966400">- Update to 5.107.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.107.0
- No code change since 5.106.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688385600">- Update to 5.108.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.108.0
- Changes since 5.107.0:
  * Remove qt6 CI builds</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Update to 5.109.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.109.0
- Changes since 5.108.0:
  * Add explicit moc includes to sources for moc-covered headers</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694001600">- Update to 5.110.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.110.0
- No code change since 5.109.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696852800">- Update to 5.111.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.111.0
- No code change since 5.110.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699272000">- Update to 5.112.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.112.0
- No code change since 5.111.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 5.113.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.113.0
- No code change since 5.112.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1705147200">- Update to 5.114.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.114.0
- No code change since 5.113.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707393600">- Update to 5.115.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.115.0
- No code change since 5.114.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714996800">- Update to 5.116.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.116.0
- No code change since 5.115.0</changelog>
</package>
<package pkgid="f55dde75bc694871353a09be9bd64b4c9572814c2844cd314f4df9f5d7279c56d64fee26b13d059d16ece129fe77285edd20bd2b7b26e754c246dc71c733ff3b" name="attica-qt5-devel" arch="x86_64">
  <version epoch="0" ver="5.116.0" rel="bp160.1.13"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1685966400">- Update to 5.107.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.107.0
- No code change since 5.106.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688385600">- Update to 5.108.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.108.0
- Changes since 5.107.0:
  * Remove qt6 CI builds</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Update to 5.109.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.109.0
- Changes since 5.108.0:
  * Add explicit moc includes to sources for moc-covered headers</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694001600">- Update to 5.110.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.110.0
- No code change since 5.109.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696852800">- Update to 5.111.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.111.0
- No code change since 5.110.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699272000">- Update to 5.112.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.112.0
- No code change since 5.111.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 5.113.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.113.0
- No code change since 5.112.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1705147200">- Update to 5.114.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.114.0
- No code change since 5.113.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707393600">- Update to 5.115.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.115.0
- No code change since 5.114.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714996800">- Update to 5.116.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.116.0
- No code change since 5.115.0</changelog>
</package>
<package pkgid="43beacef12ba0ff769c1d91a93e9ac3bcb0c6b5eefdecd2fa6ad4d051d0e6ffab5edc36fe515e814856b0f1337015785af45574c15050fb9cafd1a660d9d14aa" name="attr" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Remove obsolete Obsolete lines
- Drop static subpackage, nothing in TW depends on it Deb/RH do not
  provide it either
- Rely on simple upstream make install target
- Run tests
- Update to 2.4.48:
  * Provide default xattr.conf
  * Update buildsystem to reflect current autotools state
  * Small test updates
  * Remove various deprecated sections like attr/attr.h
- Update keyring, Mike Frysinger released this version
- Add patch to have tests working with newer perls:
  * 0001-attr-2.4.48-test-suite-perl.patch</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Replace unspecific boilerplate summary from years ago.</changelog>
  <changelog author="schwab@suse.de" date="1536148800">- Add libattr-devel-static subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1536667200">- update description for libattr-devel-static to make it less
  boilerplate</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.5.1:
  * Fix libtool library versioning regression
  * Update po files and German translation
  * getfattr: Add --one-file-system option
  * Move struct stat into struct walk_tree_args
  * Move list of open directories into struct walk_tree_args
  * Move walk_tree_rec arguments into a separate struct
  * xattr.conf: Indicate afs metadata xattrs should be skipped when copying
  * Fix typos in manual pages
  * getfattr.1: by default only user namespace attributes are dumped
  * Enable large-file support on systems that do not enable it by default
  * test: escape left brace in a regex in test/run
- drop 0001-attr-2.4.48-test-suite-perl.patch (upstream)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1707825600">- update to 2.5.2:
  * attr: eliminate a dead store in attr_copy_action()
  * libattr: Set symbol versions for legacy syscalls via attribute
    or asm
  * exports: use LGPL for library code
  * documentation updates
  * translation updates (Polish, Dutch, Gregorian, French)
  * build system updates</changelog>
</package>
<package pkgid="051ccb9b0519220bdfb0ed22ccae0d4d92df57b6e927a1b2f8159e29bdd36be19733e3323ba5ae88fd5af6749e4268ee9421dd6730d3a2de6fd27219b276896f" name="atuin" arch="x86_64">
  <version epoch="0" ver="18.3.0" rel="bp160.1.14"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1694606400">- Fix and update generated vendored tarball.</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698667200">- Apply patch properly. It got overlooked.
- Update to version 17.0.1:
  * fix(enter_accept): clear old cmd snippet
  * Fix for breaking change in ratatui 0.24.0
  * fix(bash): improve output of `enter_accept`
  * fix(fish): improve output for `enter_accept`
  * update support template
  * Remove duplicate "invert" in default config
  * Silence fish string match
  * Fix cargo deb usage
  * Add release blog post and update docs
  * Correct some secrets filter regex
  * Revert "Revert "Revert "Use github runners for unit tests (for now)"""
  * fix(nushell): Ignore stderr messages
  * Document that the self-hosted port is TCP
  * Add bash support to `enter_accept`
  * allow binding server to hostname
  * Add fish support for `enter_accept`
  * Add enter_accept to immediately execute an accepted command
  * Checkout repo so the manifest publish step can read git
  * use the short sha to tag images
  * Use ubuntu for x86, oops
  * Update key binding docs
  * Add commands to print the default configuration
  * Update key-binding.md
  * Revert "Revert "Use github runners for unit tests (for now)""
  * Revert "Use github runners for unit tests (for now)"
  * clear history id
  * fix(1220): Workspace Filtermode not handled in skim engine
  * Fix/1207 deleted entries shown in interactive search
  * A man is not dead while his name is still spoken
  * Add --print0 to `history list`
  * Use github runners for unit tests (for now)
  * Revert "Re-enable `linux/arm64` platform in CI docker build"
  * Re-enable `linux/arm64` platform in CI docker build
  * feat: copy to clipboard
  * support timezones in calendar
  * handle empty keybindings list for nushell
  * add --reverse to history list
  * Fix support template
  * fix sync timestamps
  * better sync error messages
  * refactor: Duplications reduced in order to align implementations of reading history files
  * Add connect timeout and overall timeout
  * feat(keyup): Configure SearchMode for KeyUp invocation #1216
  * Fix selecting complex fish commands
  * docs: document the available format options of History list command
  * config.md: invert mode detailed options
  * Update config.toml: List inverted mode
  * Move contributors to be a top-level file
  * replace chrono with time
  * Use `case` for Linux distro choice in `install.sh`
  * Update issue templates
  * feat: mouse selection support
  * Update docker.md
  * Explicitly use buster image for cargo-chef, mitigates #1204
  * Update shell-completions.md
  * Update config.md
  * Remove fig from README
  * Automatically filter out secrets
  * Update dependencies
  * Add kv map builder and list function
  * fix(ubuntu/arm*): detect non amd64 ubuntu and handle
  * Fix keybinding link in README
  * docs: update `workspace` config key to `workspaces`
  * Only setup shell plugin if it's not already there
  * Remove terminal mode switching
  * Update to ratatui 0.22
  * Include revision in status
  * Fix index tail leak
  * Update(docs) Add `workspace` to config.toml and config.md
  * Fix client-only builds</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698753600">- Update patch 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1705406400">- Update to 17.2.1:
  Fixes:
  * Fix typo with default config
  * Don't require all fields under [stats]
  * Disallow deletion if the '--limit' flag is present
  * Fix loss of the last output line with enter_accept
  * Ignore struct_field_names
  * Improve the support for enter_accept with ble.sh
  * Fix small issues of enter_accept for the plain Bash
  * Time now_local not working
  * Fix quirks on search cancel
  * Zsh_autosuggest_strategy for no-unset environment
  * Fix error by the use of ${PS1@P} in bash &lt; 4.4
  * Zsh use a special format to escape some characters
  * Initial list of history in workspace mode
  * Add Appkit to the package build
  * Bind in the most popular modes
  * Only trigger up-arrow on first line
  * Clean up the fish script options
  * Use fish builtins for enter_accept
  * Make atuin account delete void session + key
  * New clippy lints
  * Accept multiline commands
  * Reenable enter_accept for bash
  * Respect ZSH's $ZDOTDIR environment variable
  Documentation:
  * Add actuated linkback
  * Add link to forum
  * Align setup links in docs and readme
  * Add Void Linux install instruction
  * Add fish install script
  * Correct link
  * Fix light/dark mode logo
  * Use picture element for logo
  * Add docs for zsh-autosuggestion integration
  * Remove stray character from README
  * Update logo
  * Update sync.md
  * Update Arch Linux package URL in advanced-install.md
  * New stats config
  Features:
  * Add semver checking to client requests
  * Add TLS to atuin-server
  * Integrate with zsh-autosuggestions
  * Support high-resolution duration if available
  * Provide auto-complete source for ble.sh
  * Add a nixpkgs overlay
  * Add metrics server and http metrics
  * Add some metrics related to Atuin as an app
  * Allow configuring stats prefix
  * Allow spaces in stats prefixes</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998400">- Update to 18.0.1:
  * Reorder the exit of enhanced keyboard mode
  * Prevent input to be interpreted as options for zsh autosuggestions
  * Avoid unexpected `atuin history start` for keybindings
  * Prevent input to be interpreted as options for blesh auto-complete
  * Work around custom IFS
  * Fix and improve the keybinding to `up`
  * Fix incorrect timing of child shells
  * Disable musl deb building
  * Work around bash &lt; 4 and introduce initialization guards
  * Set umask 077
  * Disables unix specific stuff for windows
  * Fix invisible tab title
  * Shorten text, use ctrl-o for inspector
  * Integration on older fishes
  * Save sync time when it starts, not ends
  * Print literal control characters to non terminals
  * Escape control characters in command preview
  * Use existing db querying for history list
  * Add acquire timeout to sqlite database connection
  * Update repo url in CONTRIBUTING.md
  * Dedupe was removing history
  * Only escape control characters when writing to terminal
  * Strip control chars generated by `\[\]` in PS1 with bash-preexec
  * Check for format errors when printing history
  * Skip padding time if it will overflow the allowed prefix length
  * Never overwrite the key
  * Erase the prompt last line before Bash renders it
  * Erase the previous prompt before overwriting
  * Support termcap names for tput
  * Set durability for sqlite to recommended settings
  * Correct download list for incremental builds
  * Add Settings::ut
  * Enable enhanced keyboard mode
  * Rework record sync for improved reliability
  * Include atuin login in secret patterns
  * Add redraw
  * Make it clear what you are registering for
  * Support high-resolution timing even without ble.sh
  * Add extended help
  * Add interactive command inspector
  * Vim mode
  * Add better error handling for sync
  * Add history rebuild
  * Introduce keymap-dependent vim-mode
  * Make deleting from the UI work with record store sync
  * Add metrics counter for records downloaded
  * Make cursor style configurable
  * Make store init idempotent
  * Don't stop with invalid key
  * Add registered and deleted metrics
  * When in vim-normal mode apply an alternative highlighting to the selected line
  * [**breaking**] Bind the Atuin search to "/" in vi-normal mode
  * Update widget names
  * Make history list format configurable
  * Add change-password command &amp; support on server
  * Automatically init history store when record sync is enabled
  * Add store push
  * Reencrypt/rekey local store
  * Add prefers_reduced_motion flag
  * Add verify command to local store
  * Add store purge command
  * Failure to decrypt history = failure to sync
  * Add `store push --force`
  * Add `store pull`
  * Disable auto record store init
  * Add progress bars to sync and store init</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998401">- omit feature 'check-update' instead of using the removed patch 0000-disable_update_check.patch
- remove 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713528000">- Update to 18.2.0:
  Bug Fixes:
  * Add missing description
  * Allow empty search
  * Pass search query in via env
  * Pass search query in via env for Nushell
  * Case insensitive hostname filtering
  * Update atuin.nu to resolve 0.92 deprecation
  * Detect preexec plugin using env ATUIN_PREEXEC_BACKEND
  * Install script echo
  * Report non-decodable errors correctly
  * Do not use "return" to cancel initialization
  * Use spawn_blocking for file access during async context
  Documentation:
  * Add security contact
  * Add install instructions for cave/exherbo linux in README.md
  * Describe the limitation of missing commands
  * Add missing cli help text
  Features:
  * Process [C-h] and [C-?] as representations of backspace
  * Allow specifying search query as an env var
  * Check PG version before running migrations
  * Add atuin prefix binding
  * Update install.sh to support KDE Neon
  * Add better search scoring
  * Sync v2 default for new installs
  * Add 'ctrl-a a' to jump to beginning of line
  * Prevents stderr from going to the screen
  * Add alias import
  * Use _ble_exec_time_ata for duration even in bash &lt; 5
  * Add base structure
  Miscellaneous Tasks:
  * Add issue form
  * Require atuin doctor in issue form
  * Add section to issue form
  * Add codespell support (config, workflow) and make it fix some
    typos
  Performance:
  * Cache aliases and read straight from file
- Updates from 18.1.0:
  Bug Fixes
  * Rework #1509 to recover from the preexec failure</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1717416000">- Update specfile
  * rust+cargo -&gt; cargo
  * set --locked flag</changelog>
  <changelog author="Soc Virnyl Estela &lt;obs@uncomfyhalomacro.pl&gt;" date="1719662400">- Update to version 18.3.0:
  * *(bash)* Fix a workaround for bash-5.2 keybindings
  * *(ci)* Release workflow
  * *(client)* Better error reporting on login/registration
  * *(config)* Add quotes for strategy value in comment
  * *(daemon)* Do not try to sync if logged out
  * *(deps)* Replace parse_duration with humantime
  * *(dotfiles)* Alias import with init output
  * *(dotfiles)* Fish alias import
  * *(dotfiles)* More fish alias import
  * *(dotfiles)* Unquote aliases before quoting
  * *(dotfiles)* Allow clearing aliases, disable import
  * *(stats)* Generation for commands starting with a pipe
  * *(ui)* Handle being logged out gracefully
  * *(ui)* Fix mistake in last pr
  * Support not-mac for default shell
  * Adapt help to `enter_accept` config
  * Add protobuf compiler to docker image
  * Add incremental rebuild to daemon loop
  * Alias enable/enabled in settings
  * Bogus error message wording
  * Save sync time in daemon
  * Redact password in database URI when logging
  * Save sync time in daemon
  * Replace serde_yaml::to_string with serde_json::to_string_yaml
  * Fix "From source" `cd` command
  * Add docs for store subcommand
  * *(daemon)* Add support for daemon on windows
  * *(doctor)* Detect active preexec framework
  * *(doctor)* Report sqlite version
  * *(dotfiles)* Support syncing shell/env vars
  * *(gui)* Work on home page, sort state
  * *(history)* Create atuin-history, add stats to it
  * *(install)* Add Tuxedo OS
  * *(server)* Add me endpoint
  * *(ui)* Scroll history infinitely
  * *(ui)* Add history explore
  * *(ui)* Use correct username on welcome screen
  * *(ui)* Add login/register dialog
  * *(ui)* Setup single-instance
  * *(ui/dotfiles)* Add vars
  * Allow ignoring failed commands
  * Show preview auto
  * Add background daemon
  * Support importing from replxx history files
  * Move crates into crates/ dir
  * Fix atuin crate readme
  * Add some more logging to handlers
  * Add some more debug logs
  * Clarify default config file
  * Handle rate limited responses
  * Add Systemd config for self-hosted server
  * Switch to cargo dist for releases
  * Update email, gitignore, tweak ui
  * *(nushell)* Use version.(major|minor|patch) if available
  * Only open the database for commands if strictly required
  * Preview_auto to use enum and different option</changelog>
  <changelog author="Holden Fried &lt;holdenrf2021@gmail.com&gt;" date="1720526400">- Fixing broken build. Needs rustc &gt;= 1.77 and protobuf-devel</changelog>
</package>
<package pkgid="3da1158b431a077e8525f3c86be59d709a94f3f130a48195ea364744e6fb48b3c3b32ad63cf1a8cef8961a9b407557a1c580cdc22d1b268df543b7763d561cf0" name="atuin-bash-completion" arch="noarch">
  <version epoch="0" ver="18.3.0" rel="bp160.1.14"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1694606400">- Fix and update generated vendored tarball.</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698667200">- Apply patch properly. It got overlooked.
- Update to version 17.0.1:
  * fix(enter_accept): clear old cmd snippet
  * Fix for breaking change in ratatui 0.24.0
  * fix(bash): improve output of `enter_accept`
  * fix(fish): improve output for `enter_accept`
  * update support template
  * Remove duplicate "invert" in default config
  * Silence fish string match
  * Fix cargo deb usage
  * Add release blog post and update docs
  * Correct some secrets filter regex
  * Revert "Revert "Revert "Use github runners for unit tests (for now)"""
  * fix(nushell): Ignore stderr messages
  * Document that the self-hosted port is TCP
  * Add bash support to `enter_accept`
  * allow binding server to hostname
  * Add fish support for `enter_accept`
  * Add enter_accept to immediately execute an accepted command
  * Checkout repo so the manifest publish step can read git
  * use the short sha to tag images
  * Use ubuntu for x86, oops
  * Update key binding docs
  * Add commands to print the default configuration
  * Update key-binding.md
  * Revert "Revert "Use github runners for unit tests (for now)""
  * Revert "Use github runners for unit tests (for now)"
  * clear history id
  * fix(1220): Workspace Filtermode not handled in skim engine
  * Fix/1207 deleted entries shown in interactive search
  * A man is not dead while his name is still spoken
  * Add --print0 to `history list`
  * Use github runners for unit tests (for now)
  * Revert "Re-enable `linux/arm64` platform in CI docker build"
  * Re-enable `linux/arm64` platform in CI docker build
  * feat: copy to clipboard
  * support timezones in calendar
  * handle empty keybindings list for nushell
  * add --reverse to history list
  * Fix support template
  * fix sync timestamps
  * better sync error messages
  * refactor: Duplications reduced in order to align implementations of reading history files
  * Add connect timeout and overall timeout
  * feat(keyup): Configure SearchMode for KeyUp invocation #1216
  * Fix selecting complex fish commands
  * docs: document the available format options of History list command
  * config.md: invert mode detailed options
  * Update config.toml: List inverted mode
  * Move contributors to be a top-level file
  * replace chrono with time
  * Use `case` for Linux distro choice in `install.sh`
  * Update issue templates
  * feat: mouse selection support
  * Update docker.md
  * Explicitly use buster image for cargo-chef, mitigates #1204
  * Update shell-completions.md
  * Update config.md
  * Remove fig from README
  * Automatically filter out secrets
  * Update dependencies
  * Add kv map builder and list function
  * fix(ubuntu/arm*): detect non amd64 ubuntu and handle
  * Fix keybinding link in README
  * docs: update `workspace` config key to `workspaces`
  * Only setup shell plugin if it's not already there
  * Remove terminal mode switching
  * Update to ratatui 0.22
  * Include revision in status
  * Fix index tail leak
  * Update(docs) Add `workspace` to config.toml and config.md
  * Fix client-only builds</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698753600">- Update patch 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1705406400">- Update to 17.2.1:
  Fixes:
  * Fix typo with default config
  * Don't require all fields under [stats]
  * Disallow deletion if the '--limit' flag is present
  * Fix loss of the last output line with enter_accept
  * Ignore struct_field_names
  * Improve the support for enter_accept with ble.sh
  * Fix small issues of enter_accept for the plain Bash
  * Time now_local not working
  * Fix quirks on search cancel
  * Zsh_autosuggest_strategy for no-unset environment
  * Fix error by the use of ${PS1@P} in bash &lt; 4.4
  * Zsh use a special format to escape some characters
  * Initial list of history in workspace mode
  * Add Appkit to the package build
  * Bind in the most popular modes
  * Only trigger up-arrow on first line
  * Clean up the fish script options
  * Use fish builtins for enter_accept
  * Make atuin account delete void session + key
  * New clippy lints
  * Accept multiline commands
  * Reenable enter_accept for bash
  * Respect ZSH's $ZDOTDIR environment variable
  Documentation:
  * Add actuated linkback
  * Add link to forum
  * Align setup links in docs and readme
  * Add Void Linux install instruction
  * Add fish install script
  * Correct link
  * Fix light/dark mode logo
  * Use picture element for logo
  * Add docs for zsh-autosuggestion integration
  * Remove stray character from README
  * Update logo
  * Update sync.md
  * Update Arch Linux package URL in advanced-install.md
  * New stats config
  Features:
  * Add semver checking to client requests
  * Add TLS to atuin-server
  * Integrate with zsh-autosuggestions
  * Support high-resolution duration if available
  * Provide auto-complete source for ble.sh
  * Add a nixpkgs overlay
  * Add metrics server and http metrics
  * Add some metrics related to Atuin as an app
  * Allow configuring stats prefix
  * Allow spaces in stats prefixes</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998400">- Update to 18.0.1:
  * Reorder the exit of enhanced keyboard mode
  * Prevent input to be interpreted as options for zsh autosuggestions
  * Avoid unexpected `atuin history start` for keybindings
  * Prevent input to be interpreted as options for blesh auto-complete
  * Work around custom IFS
  * Fix and improve the keybinding to `up`
  * Fix incorrect timing of child shells
  * Disable musl deb building
  * Work around bash &lt; 4 and introduce initialization guards
  * Set umask 077
  * Disables unix specific stuff for windows
  * Fix invisible tab title
  * Shorten text, use ctrl-o for inspector
  * Integration on older fishes
  * Save sync time when it starts, not ends
  * Print literal control characters to non terminals
  * Escape control characters in command preview
  * Use existing db querying for history list
  * Add acquire timeout to sqlite database connection
  * Update repo url in CONTRIBUTING.md
  * Dedupe was removing history
  * Only escape control characters when writing to terminal
  * Strip control chars generated by `\[\]` in PS1 with bash-preexec
  * Check for format errors when printing history
  * Skip padding time if it will overflow the allowed prefix length
  * Never overwrite the key
  * Erase the prompt last line before Bash renders it
  * Erase the previous prompt before overwriting
  * Support termcap names for tput
  * Set durability for sqlite to recommended settings
  * Correct download list for incremental builds
  * Add Settings::ut
  * Enable enhanced keyboard mode
  * Rework record sync for improved reliability
  * Include atuin login in secret patterns
  * Add redraw
  * Make it clear what you are registering for
  * Support high-resolution timing even without ble.sh
  * Add extended help
  * Add interactive command inspector
  * Vim mode
  * Add better error handling for sync
  * Add history rebuild
  * Introduce keymap-dependent vim-mode
  * Make deleting from the UI work with record store sync
  * Add metrics counter for records downloaded
  * Make cursor style configurable
  * Make store init idempotent
  * Don't stop with invalid key
  * Add registered and deleted metrics
  * When in vim-normal mode apply an alternative highlighting to the selected line
  * [**breaking**] Bind the Atuin search to "/" in vi-normal mode
  * Update widget names
  * Make history list format configurable
  * Add change-password command &amp; support on server
  * Automatically init history store when record sync is enabled
  * Add store push
  * Reencrypt/rekey local store
  * Add prefers_reduced_motion flag
  * Add verify command to local store
  * Add store purge command
  * Failure to decrypt history = failure to sync
  * Add `store push --force`
  * Add `store pull`
  * Disable auto record store init
  * Add progress bars to sync and store init</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998401">- omit feature 'check-update' instead of using the removed patch 0000-disable_update_check.patch
- remove 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713528000">- Update to 18.2.0:
  Bug Fixes:
  * Add missing description
  * Allow empty search
  * Pass search query in via env
  * Pass search query in via env for Nushell
  * Case insensitive hostname filtering
  * Update atuin.nu to resolve 0.92 deprecation
  * Detect preexec plugin using env ATUIN_PREEXEC_BACKEND
  * Install script echo
  * Report non-decodable errors correctly
  * Do not use "return" to cancel initialization
  * Use spawn_blocking for file access during async context
  Documentation:
  * Add security contact
  * Add install instructions for cave/exherbo linux in README.md
  * Describe the limitation of missing commands
  * Add missing cli help text
  Features:
  * Process [C-h] and [C-?] as representations of backspace
  * Allow specifying search query as an env var
  * Check PG version before running migrations
  * Add atuin prefix binding
  * Update install.sh to support KDE Neon
  * Add better search scoring
  * Sync v2 default for new installs
  * Add 'ctrl-a a' to jump to beginning of line
  * Prevents stderr from going to the screen
  * Add alias import
  * Use _ble_exec_time_ata for duration even in bash &lt; 5
  * Add base structure
  Miscellaneous Tasks:
  * Add issue form
  * Require atuin doctor in issue form
  * Add section to issue form
  * Add codespell support (config, workflow) and make it fix some
    typos
  Performance:
  * Cache aliases and read straight from file
- Updates from 18.1.0:
  Bug Fixes
  * Rework #1509 to recover from the preexec failure</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1717416000">- Update specfile
  * rust+cargo -&gt; cargo
  * set --locked flag</changelog>
  <changelog author="Soc Virnyl Estela &lt;obs@uncomfyhalomacro.pl&gt;" date="1719662400">- Update to version 18.3.0:
  * *(bash)* Fix a workaround for bash-5.2 keybindings
  * *(ci)* Release workflow
  * *(client)* Better error reporting on login/registration
  * *(config)* Add quotes for strategy value in comment
  * *(daemon)* Do not try to sync if logged out
  * *(deps)* Replace parse_duration with humantime
  * *(dotfiles)* Alias import with init output
  * *(dotfiles)* Fish alias import
  * *(dotfiles)* More fish alias import
  * *(dotfiles)* Unquote aliases before quoting
  * *(dotfiles)* Allow clearing aliases, disable import
  * *(stats)* Generation for commands starting with a pipe
  * *(ui)* Handle being logged out gracefully
  * *(ui)* Fix mistake in last pr
  * Support not-mac for default shell
  * Adapt help to `enter_accept` config
  * Add protobuf compiler to docker image
  * Add incremental rebuild to daemon loop
  * Alias enable/enabled in settings
  * Bogus error message wording
  * Save sync time in daemon
  * Redact password in database URI when logging
  * Save sync time in daemon
  * Replace serde_yaml::to_string with serde_json::to_string_yaml
  * Fix "From source" `cd` command
  * Add docs for store subcommand
  * *(daemon)* Add support for daemon on windows
  * *(doctor)* Detect active preexec framework
  * *(doctor)* Report sqlite version
  * *(dotfiles)* Support syncing shell/env vars
  * *(gui)* Work on home page, sort state
  * *(history)* Create atuin-history, add stats to it
  * *(install)* Add Tuxedo OS
  * *(server)* Add me endpoint
  * *(ui)* Scroll history infinitely
  * *(ui)* Add history explore
  * *(ui)* Use correct username on welcome screen
  * *(ui)* Add login/register dialog
  * *(ui)* Setup single-instance
  * *(ui/dotfiles)* Add vars
  * Allow ignoring failed commands
  * Show preview auto
  * Add background daemon
  * Support importing from replxx history files
  * Move crates into crates/ dir
  * Fix atuin crate readme
  * Add some more logging to handlers
  * Add some more debug logs
  * Clarify default config file
  * Handle rate limited responses
  * Add Systemd config for self-hosted server
  * Switch to cargo dist for releases
  * Update email, gitignore, tweak ui
  * *(nushell)* Use version.(major|minor|patch) if available
  * Only open the database for commands if strictly required
  * Preview_auto to use enum and different option</changelog>
  <changelog author="Holden Fried &lt;holdenrf2021@gmail.com&gt;" date="1720526400">- Fixing broken build. Needs rustc &gt;= 1.77 and protobuf-devel</changelog>
</package>
<package pkgid="b42fb2c3286fa2d405fb1a7790852f3cec66192f84dda8bb91921abc35e3f46dbdc56fb758be238e618ebb0d3238b74edc152e5a5937277a72b4ea3d3582eee3" name="atuin-fish-completion" arch="noarch">
  <version epoch="0" ver="18.3.0" rel="bp160.1.14"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1694606400">- Fix and update generated vendored tarball.</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698667200">- Apply patch properly. It got overlooked.
- Update to version 17.0.1:
  * fix(enter_accept): clear old cmd snippet
  * Fix for breaking change in ratatui 0.24.0
  * fix(bash): improve output of `enter_accept`
  * fix(fish): improve output for `enter_accept`
  * update support template
  * Remove duplicate "invert" in default config
  * Silence fish string match
  * Fix cargo deb usage
  * Add release blog post and update docs
  * Correct some secrets filter regex
  * Revert "Revert "Revert "Use github runners for unit tests (for now)"""
  * fix(nushell): Ignore stderr messages
  * Document that the self-hosted port is TCP
  * Add bash support to `enter_accept`
  * allow binding server to hostname
  * Add fish support for `enter_accept`
  * Add enter_accept to immediately execute an accepted command
  * Checkout repo so the manifest publish step can read git
  * use the short sha to tag images
  * Use ubuntu for x86, oops
  * Update key binding docs
  * Add commands to print the default configuration
  * Update key-binding.md
  * Revert "Revert "Use github runners for unit tests (for now)""
  * Revert "Use github runners for unit tests (for now)"
  * clear history id
  * fix(1220): Workspace Filtermode not handled in skim engine
  * Fix/1207 deleted entries shown in interactive search
  * A man is not dead while his name is still spoken
  * Add --print0 to `history list`
  * Use github runners for unit tests (for now)
  * Revert "Re-enable `linux/arm64` platform in CI docker build"
  * Re-enable `linux/arm64` platform in CI docker build
  * feat: copy to clipboard
  * support timezones in calendar
  * handle empty keybindings list for nushell
  * add --reverse to history list
  * Fix support template
  * fix sync timestamps
  * better sync error messages
  * refactor: Duplications reduced in order to align implementations of reading history files
  * Add connect timeout and overall timeout
  * feat(keyup): Configure SearchMode for KeyUp invocation #1216
  * Fix selecting complex fish commands
  * docs: document the available format options of History list command
  * config.md: invert mode detailed options
  * Update config.toml: List inverted mode
  * Move contributors to be a top-level file
  * replace chrono with time
  * Use `case` for Linux distro choice in `install.sh`
  * Update issue templates
  * feat: mouse selection support
  * Update docker.md
  * Explicitly use buster image for cargo-chef, mitigates #1204
  * Update shell-completions.md
  * Update config.md
  * Remove fig from README
  * Automatically filter out secrets
  * Update dependencies
  * Add kv map builder and list function
  * fix(ubuntu/arm*): detect non amd64 ubuntu and handle
  * Fix keybinding link in README
  * docs: update `workspace` config key to `workspaces`
  * Only setup shell plugin if it's not already there
  * Remove terminal mode switching
  * Update to ratatui 0.22
  * Include revision in status
  * Fix index tail leak
  * Update(docs) Add `workspace` to config.toml and config.md
  * Fix client-only builds</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698753600">- Update patch 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1705406400">- Update to 17.2.1:
  Fixes:
  * Fix typo with default config
  * Don't require all fields under [stats]
  * Disallow deletion if the '--limit' flag is present
  * Fix loss of the last output line with enter_accept
  * Ignore struct_field_names
  * Improve the support for enter_accept with ble.sh
  * Fix small issues of enter_accept for the plain Bash
  * Time now_local not working
  * Fix quirks on search cancel
  * Zsh_autosuggest_strategy for no-unset environment
  * Fix error by the use of ${PS1@P} in bash &lt; 4.4
  * Zsh use a special format to escape some characters
  * Initial list of history in workspace mode
  * Add Appkit to the package build
  * Bind in the most popular modes
  * Only trigger up-arrow on first line
  * Clean up the fish script options
  * Use fish builtins for enter_accept
  * Make atuin account delete void session + key
  * New clippy lints
  * Accept multiline commands
  * Reenable enter_accept for bash
  * Respect ZSH's $ZDOTDIR environment variable
  Documentation:
  * Add actuated linkback
  * Add link to forum
  * Align setup links in docs and readme
  * Add Void Linux install instruction
  * Add fish install script
  * Correct link
  * Fix light/dark mode logo
  * Use picture element for logo
  * Add docs for zsh-autosuggestion integration
  * Remove stray character from README
  * Update logo
  * Update sync.md
  * Update Arch Linux package URL in advanced-install.md
  * New stats config
  Features:
  * Add semver checking to client requests
  * Add TLS to atuin-server
  * Integrate with zsh-autosuggestions
  * Support high-resolution duration if available
  * Provide auto-complete source for ble.sh
  * Add a nixpkgs overlay
  * Add metrics server and http metrics
  * Add some metrics related to Atuin as an app
  * Allow configuring stats prefix
  * Allow spaces in stats prefixes</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998400">- Update to 18.0.1:
  * Reorder the exit of enhanced keyboard mode
  * Prevent input to be interpreted as options for zsh autosuggestions
  * Avoid unexpected `atuin history start` for keybindings
  * Prevent input to be interpreted as options for blesh auto-complete
  * Work around custom IFS
  * Fix and improve the keybinding to `up`
  * Fix incorrect timing of child shells
  * Disable musl deb building
  * Work around bash &lt; 4 and introduce initialization guards
  * Set umask 077
  * Disables unix specific stuff for windows
  * Fix invisible tab title
  * Shorten text, use ctrl-o for inspector
  * Integration on older fishes
  * Save sync time when it starts, not ends
  * Print literal control characters to non terminals
  * Escape control characters in command preview
  * Use existing db querying for history list
  * Add acquire timeout to sqlite database connection
  * Update repo url in CONTRIBUTING.md
  * Dedupe was removing history
  * Only escape control characters when writing to terminal
  * Strip control chars generated by `\[\]` in PS1 with bash-preexec
  * Check for format errors when printing history
  * Skip padding time if it will overflow the allowed prefix length
  * Never overwrite the key
  * Erase the prompt last line before Bash renders it
  * Erase the previous prompt before overwriting
  * Support termcap names for tput
  * Set durability for sqlite to recommended settings
  * Correct download list for incremental builds
  * Add Settings::ut
  * Enable enhanced keyboard mode
  * Rework record sync for improved reliability
  * Include atuin login in secret patterns
  * Add redraw
  * Make it clear what you are registering for
  * Support high-resolution timing even without ble.sh
  * Add extended help
  * Add interactive command inspector
  * Vim mode
  * Add better error handling for sync
  * Add history rebuild
  * Introduce keymap-dependent vim-mode
  * Make deleting from the UI work with record store sync
  * Add metrics counter for records downloaded
  * Make cursor style configurable
  * Make store init idempotent
  * Don't stop with invalid key
  * Add registered and deleted metrics
  * When in vim-normal mode apply an alternative highlighting to the selected line
  * [**breaking**] Bind the Atuin search to "/" in vi-normal mode
  * Update widget names
  * Make history list format configurable
  * Add change-password command &amp; support on server
  * Automatically init history store when record sync is enabled
  * Add store push
  * Reencrypt/rekey local store
  * Add prefers_reduced_motion flag
  * Add verify command to local store
  * Add store purge command
  * Failure to decrypt history = failure to sync
  * Add `store push --force`
  * Add `store pull`
  * Disable auto record store init
  * Add progress bars to sync and store init</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998401">- omit feature 'check-update' instead of using the removed patch 0000-disable_update_check.patch
- remove 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713528000">- Update to 18.2.0:
  Bug Fixes:
  * Add missing description
  * Allow empty search
  * Pass search query in via env
  * Pass search query in via env for Nushell
  * Case insensitive hostname filtering
  * Update atuin.nu to resolve 0.92 deprecation
  * Detect preexec plugin using env ATUIN_PREEXEC_BACKEND
  * Install script echo
  * Report non-decodable errors correctly
  * Do not use "return" to cancel initialization
  * Use spawn_blocking for file access during async context
  Documentation:
  * Add security contact
  * Add install instructions for cave/exherbo linux in README.md
  * Describe the limitation of missing commands
  * Add missing cli help text
  Features:
  * Process [C-h] and [C-?] as representations of backspace
  * Allow specifying search query as an env var
  * Check PG version before running migrations
  * Add atuin prefix binding
  * Update install.sh to support KDE Neon
  * Add better search scoring
  * Sync v2 default for new installs
  * Add 'ctrl-a a' to jump to beginning of line
  * Prevents stderr from going to the screen
  * Add alias import
  * Use _ble_exec_time_ata for duration even in bash &lt; 5
  * Add base structure
  Miscellaneous Tasks:
  * Add issue form
  * Require atuin doctor in issue form
  * Add section to issue form
  * Add codespell support (config, workflow) and make it fix some
    typos
  Performance:
  * Cache aliases and read straight from file
- Updates from 18.1.0:
  Bug Fixes
  * Rework #1509 to recover from the preexec failure</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1717416000">- Update specfile
  * rust+cargo -&gt; cargo
  * set --locked flag</changelog>
  <changelog author="Soc Virnyl Estela &lt;obs@uncomfyhalomacro.pl&gt;" date="1719662400">- Update to version 18.3.0:
  * *(bash)* Fix a workaround for bash-5.2 keybindings
  * *(ci)* Release workflow
  * *(client)* Better error reporting on login/registration
  * *(config)* Add quotes for strategy value in comment
  * *(daemon)* Do not try to sync if logged out
  * *(deps)* Replace parse_duration with humantime
  * *(dotfiles)* Alias import with init output
  * *(dotfiles)* Fish alias import
  * *(dotfiles)* More fish alias import
  * *(dotfiles)* Unquote aliases before quoting
  * *(dotfiles)* Allow clearing aliases, disable import
  * *(stats)* Generation for commands starting with a pipe
  * *(ui)* Handle being logged out gracefully
  * *(ui)* Fix mistake in last pr
  * Support not-mac for default shell
  * Adapt help to `enter_accept` config
  * Add protobuf compiler to docker image
  * Add incremental rebuild to daemon loop
  * Alias enable/enabled in settings
  * Bogus error message wording
  * Save sync time in daemon
  * Redact password in database URI when logging
  * Save sync time in daemon
  * Replace serde_yaml::to_string with serde_json::to_string_yaml
  * Fix "From source" `cd` command
  * Add docs for store subcommand
  * *(daemon)* Add support for daemon on windows
  * *(doctor)* Detect active preexec framework
  * *(doctor)* Report sqlite version
  * *(dotfiles)* Support syncing shell/env vars
  * *(gui)* Work on home page, sort state
  * *(history)* Create atuin-history, add stats to it
  * *(install)* Add Tuxedo OS
  * *(server)* Add me endpoint
  * *(ui)* Scroll history infinitely
  * *(ui)* Add history explore
  * *(ui)* Use correct username on welcome screen
  * *(ui)* Add login/register dialog
  * *(ui)* Setup single-instance
  * *(ui/dotfiles)* Add vars
  * Allow ignoring failed commands
  * Show preview auto
  * Add background daemon
  * Support importing from replxx history files
  * Move crates into crates/ dir
  * Fix atuin crate readme
  * Add some more logging to handlers
  * Add some more debug logs
  * Clarify default config file
  * Handle rate limited responses
  * Add Systemd config for self-hosted server
  * Switch to cargo dist for releases
  * Update email, gitignore, tweak ui
  * *(nushell)* Use version.(major|minor|patch) if available
  * Only open the database for commands if strictly required
  * Preview_auto to use enum and different option</changelog>
  <changelog author="Holden Fried &lt;holdenrf2021@gmail.com&gt;" date="1720526400">- Fixing broken build. Needs rustc &gt;= 1.77 and protobuf-devel</changelog>
</package>
<package pkgid="4dd2e48651104872ee09480d9cf7045426ec2c34c9ce2bd6f37cf526d414bd9cabe48b6982b4b968cad443c19e6874853392d01cbbe623aee2cf7eaa5f0a75e8" name="atuin-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.3.0" rel="bp160.1.14"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1694606400">- Fix and update generated vendored tarball.</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698667200">- Apply patch properly. It got overlooked.
- Update to version 17.0.1:
  * fix(enter_accept): clear old cmd snippet
  * Fix for breaking change in ratatui 0.24.0
  * fix(bash): improve output of `enter_accept`
  * fix(fish): improve output for `enter_accept`
  * update support template
  * Remove duplicate "invert" in default config
  * Silence fish string match
  * Fix cargo deb usage
  * Add release blog post and update docs
  * Correct some secrets filter regex
  * Revert "Revert "Revert "Use github runners for unit tests (for now)"""
  * fix(nushell): Ignore stderr messages
  * Document that the self-hosted port is TCP
  * Add bash support to `enter_accept`
  * allow binding server to hostname
  * Add fish support for `enter_accept`
  * Add enter_accept to immediately execute an accepted command
  * Checkout repo so the manifest publish step can read git
  * use the short sha to tag images
  * Use ubuntu for x86, oops
  * Update key binding docs
  * Add commands to print the default configuration
  * Update key-binding.md
  * Revert "Revert "Use github runners for unit tests (for now)""
  * Revert "Use github runners for unit tests (for now)"
  * clear history id
  * fix(1220): Workspace Filtermode not handled in skim engine
  * Fix/1207 deleted entries shown in interactive search
  * A man is not dead while his name is still spoken
  * Add --print0 to `history list`
  * Use github runners for unit tests (for now)
  * Revert "Re-enable `linux/arm64` platform in CI docker build"
  * Re-enable `linux/arm64` platform in CI docker build
  * feat: copy to clipboard
  * support timezones in calendar
  * handle empty keybindings list for nushell
  * add --reverse to history list
  * Fix support template
  * fix sync timestamps
  * better sync error messages
  * refactor: Duplications reduced in order to align implementations of reading history files
  * Add connect timeout and overall timeout
  * feat(keyup): Configure SearchMode for KeyUp invocation #1216
  * Fix selecting complex fish commands
  * docs: document the available format options of History list command
  * config.md: invert mode detailed options
  * Update config.toml: List inverted mode
  * Move contributors to be a top-level file
  * replace chrono with time
  * Use `case` for Linux distro choice in `install.sh`
  * Update issue templates
  * feat: mouse selection support
  * Update docker.md
  * Explicitly use buster image for cargo-chef, mitigates #1204
  * Update shell-completions.md
  * Update config.md
  * Remove fig from README
  * Automatically filter out secrets
  * Update dependencies
  * Add kv map builder and list function
  * fix(ubuntu/arm*): detect non amd64 ubuntu and handle
  * Fix keybinding link in README
  * docs: update `workspace` config key to `workspaces`
  * Only setup shell plugin if it's not already there
  * Remove terminal mode switching
  * Update to ratatui 0.22
  * Include revision in status
  * Fix index tail leak
  * Update(docs) Add `workspace` to config.toml and config.md
  * Fix client-only builds</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1698753600">- Update patch 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1705406400">- Update to 17.2.1:
  Fixes:
  * Fix typo with default config
  * Don't require all fields under [stats]
  * Disallow deletion if the '--limit' flag is present
  * Fix loss of the last output line with enter_accept
  * Ignore struct_field_names
  * Improve the support for enter_accept with ble.sh
  * Fix small issues of enter_accept for the plain Bash
  * Time now_local not working
  * Fix quirks on search cancel
  * Zsh_autosuggest_strategy for no-unset environment
  * Fix error by the use of ${PS1@P} in bash &lt; 4.4
  * Zsh use a special format to escape some characters
  * Initial list of history in workspace mode
  * Add Appkit to the package build
  * Bind in the most popular modes
  * Only trigger up-arrow on first line
  * Clean up the fish script options
  * Use fish builtins for enter_accept
  * Make atuin account delete void session + key
  * New clippy lints
  * Accept multiline commands
  * Reenable enter_accept for bash
  * Respect ZSH's $ZDOTDIR environment variable
  Documentation:
  * Add actuated linkback
  * Add link to forum
  * Align setup links in docs and readme
  * Add Void Linux install instruction
  * Add fish install script
  * Correct link
  * Fix light/dark mode logo
  * Use picture element for logo
  * Add docs for zsh-autosuggestion integration
  * Remove stray character from README
  * Update logo
  * Update sync.md
  * Update Arch Linux package URL in advanced-install.md
  * New stats config
  Features:
  * Add semver checking to client requests
  * Add TLS to atuin-server
  * Integrate with zsh-autosuggestions
  * Support high-resolution duration if available
  * Provide auto-complete source for ble.sh
  * Add a nixpkgs overlay
  * Add metrics server and http metrics
  * Add some metrics related to Atuin as an app
  * Allow configuring stats prefix
  * Allow spaces in stats prefixes</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998400">- Update to 18.0.1:
  * Reorder the exit of enhanced keyboard mode
  * Prevent input to be interpreted as options for zsh autosuggestions
  * Avoid unexpected `atuin history start` for keybindings
  * Prevent input to be interpreted as options for blesh auto-complete
  * Work around custom IFS
  * Fix and improve the keybinding to `up`
  * Fix incorrect timing of child shells
  * Disable musl deb building
  * Work around bash &lt; 4 and introduce initialization guards
  * Set umask 077
  * Disables unix specific stuff for windows
  * Fix invisible tab title
  * Shorten text, use ctrl-o for inspector
  * Integration on older fishes
  * Save sync time when it starts, not ends
  * Print literal control characters to non terminals
  * Escape control characters in command preview
  * Use existing db querying for history list
  * Add acquire timeout to sqlite database connection
  * Update repo url in CONTRIBUTING.md
  * Dedupe was removing history
  * Only escape control characters when writing to terminal
  * Strip control chars generated by `\[\]` in PS1 with bash-preexec
  * Check for format errors when printing history
  * Skip padding time if it will overflow the allowed prefix length
  * Never overwrite the key
  * Erase the prompt last line before Bash renders it
  * Erase the previous prompt before overwriting
  * Support termcap names for tput
  * Set durability for sqlite to recommended settings
  * Correct download list for incremental builds
  * Add Settings::ut
  * Enable enhanced keyboard mode
  * Rework record sync for improved reliability
  * Include atuin login in secret patterns
  * Add redraw
  * Make it clear what you are registering for
  * Support high-resolution timing even without ble.sh
  * Add extended help
  * Add interactive command inspector
  * Vim mode
  * Add better error handling for sync
  * Add history rebuild
  * Introduce keymap-dependent vim-mode
  * Make deleting from the UI work with record store sync
  * Add metrics counter for records downloaded
  * Make cursor style configurable
  * Make store init idempotent
  * Don't stop with invalid key
  * Add registered and deleted metrics
  * When in vim-normal mode apply an alternative highlighting to the selected line
  * [**breaking**] Bind the Atuin search to "/" in vi-normal mode
  * Update widget names
  * Make history list format configurable
  * Add change-password command &amp; support on server
  * Automatically init history store when record sync is enabled
  * Add store push
  * Reencrypt/rekey local store
  * Add prefers_reduced_motion flag
  * Add verify command to local store
  * Add store purge command
  * Failure to decrypt history = failure to sync
  * Add `store push --force`
  * Add `store pull`
  * Disable auto record store init
  * Add progress bars to sync and store init</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1707998401">- omit feature 'check-update' instead of using the removed patch 0000-disable_update_check.patch
- remove 0000-disable_update_check.patch</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713528000">- Update to 18.2.0:
  Bug Fixes:
  * Add missing description
  * Allow empty search
  * Pass search query in via env
  * Pass search query in via env for Nushell
  * Case insensitive hostname filtering
  * Update atuin.nu to resolve 0.92 deprecation
  * Detect preexec plugin using env ATUIN_PREEXEC_BACKEND
  * Install script echo
  * Report non-decodable errors correctly
  * Do not use "return" to cancel initialization
  * Use spawn_blocking for file access during async context
  Documentation:
  * Add security contact
  * Add install instructions for cave/exherbo linux in README.md
  * Describe the limitation of missing commands
  * Add missing cli help text
  Features:
  * Process [C-h] and [C-?] as representations of backspace
  * Allow specifying search query as an env var
  * Check PG version before running migrations
  * Add atuin prefix binding
  * Update install.sh to support KDE Neon
  * Add better search scoring
  * Sync v2 default for new installs
  * Add 'ctrl-a a' to jump to beginning of line
  * Prevents stderr from going to the screen
  * Add alias import
  * Use _ble_exec_time_ata for duration even in bash &lt; 5
  * Add base structure
  Miscellaneous Tasks:
  * Add issue form
  * Require atuin doctor in issue form
  * Add section to issue form
  * Add codespell support (config, workflow) and make it fix some
    typos
  Performance:
  * Cache aliases and read straight from file
- Updates from 18.1.0:
  Bug Fixes
  * Rework #1509 to recover from the preexec failure</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1717416000">- Update specfile
  * rust+cargo -&gt; cargo
  * set --locked flag</changelog>
  <changelog author="Soc Virnyl Estela &lt;obs@uncomfyhalomacro.pl&gt;" date="1719662400">- Update to version 18.3.0:
  * *(bash)* Fix a workaround for bash-5.2 keybindings
  * *(ci)* Release workflow
  * *(client)* Better error reporting on login/registration
  * *(config)* Add quotes for strategy value in comment
  * *(daemon)* Do not try to sync if logged out
  * *(deps)* Replace parse_duration with humantime
  * *(dotfiles)* Alias import with init output
  * *(dotfiles)* Fish alias import
  * *(dotfiles)* More fish alias import
  * *(dotfiles)* Unquote aliases before quoting
  * *(dotfiles)* Allow clearing aliases, disable import
  * *(stats)* Generation for commands starting with a pipe
  * *(ui)* Handle being logged out gracefully
  * *(ui)* Fix mistake in last pr
  * Support not-mac for default shell
  * Adapt help to `enter_accept` config
  * Add protobuf compiler to docker image
  * Add incremental rebuild to daemon loop
  * Alias enable/enabled in settings
  * Bogus error message wording
  * Save sync time in daemon
  * Redact password in database URI when logging
  * Save sync time in daemon
  * Replace serde_yaml::to_string with serde_json::to_string_yaml
  * Fix "From source" `cd` command
  * Add docs for store subcommand
  * *(daemon)* Add support for daemon on windows
  * *(doctor)* Detect active preexec framework
  * *(doctor)* Report sqlite version
  * *(dotfiles)* Support syncing shell/env vars
  * *(gui)* Work on home page, sort state
  * *(history)* Create atuin-history, add stats to it
  * *(install)* Add Tuxedo OS
  * *(server)* Add me endpoint
  * *(ui)* Scroll history infinitely
  * *(ui)* Add history explore
  * *(ui)* Use correct username on welcome screen
  * *(ui)* Add login/register dialog
  * *(ui)* Setup single-instance
  * *(ui/dotfiles)* Add vars
  * Allow ignoring failed commands
  * Show preview auto
  * Add background daemon
  * Support importing from replxx history files
  * Move crates into crates/ dir
  * Fix atuin crate readme
  * Add some more logging to handlers
  * Add some more debug logs
  * Clarify default config file
  * Handle rate limited responses
  * Add Systemd config for self-hosted server
  * Switch to cargo dist for releases
  * Update email, gitignore, tweak ui
  * *(nushell)* Use version.(major|minor|patch) if available
  * Only open the database for commands if strictly required
  * Preview_auto to use enum and different option</changelog>
  <changelog author="Holden Fried &lt;holdenrf2021@gmail.com&gt;" date="1720526400">- Fixing broken build. Needs rustc &gt;= 1.77 and protobuf-devel</changelog>
</package>
<package pkgid="4275ad6eb5b2f722b5e45dcaa2253f0dba6ade7a6dbffb32b95a47acbabb3b897d42f0c92a8ef551e24f2cd7529d2abb087d35fe78f498f725de0987de81de03" name="aubio-docs" arch="noarch">
  <version epoch="0" ver="0.4.9" rel="bp160.1.2"/>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Update to version 0.4.9:
  * No upstream changes provided, please see
    https://git.aubio.org/?p=aubio.git;a=shortlog
- Changes from version 0.4.8:
  * src/notes: new option release_drop.
  * src/spectral: new parameters added to filterbank and mfcc.
  * python/lib: start documenting module, improve build for
    win-amd64.
  * src fixes: prevent crash when using fft sizes unsupported by
    vDSP, prevent saturation when down-mixing a multi-channel
    source (avcodec/ffmpeg).
- Changes from version 0.4.7:
  * src/io/, src/notes/, src/pitch: prevent crashes on corrupted
    files.
  * src/spectral/dct.h: add dct type II object with optimised
    versions.
  * examples/: fix jack midi output, improve messages when jack
    disabled.
  * python/: add dct support, minor bug fixes tests and demos.
  * wscript: improve support for BLAS/ATLAS.
- Drop upstream fixed patches:
  * aubio-wavread-input-validation.patch
  * aubio-resampler-NULL-deref-fix.patch
  * 0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  * 0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  * 0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
  * 0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
- Run spec-cleaner, modernize spec.
- Replace ffmpeg3-devel with pkgconfig(libavdevice) BuildRequires:
  Allow to build with ffmpeg v4 and newer.</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580385600">- Do not pull in the python2 as a dependency since we can build
  fine with python3</changelog>
  <changelog author="dliw@posteo.net" date="1649505600">- Enable fftw3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670932800">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as ffmpeg-5 does not provide libavresample.
- Add cdfe9ce.patch: [source_avcodec] avoid deprecation warning
  with latest avcodec api (58.134.100).
- Add 8a05420.patch: [source_avcodec] define FF_API_LAVF_AVCTX for
  libavcodec &gt; 59, thx @berolinux (closes gh-353).</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1678795200">- Replace ffmpeg libs pkgconfig build requires with actual
  ffmpeg-4 devel packages to fix build for Tumbleweed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1689508800">- Add waflib_deprecated.patch (fixes TW compilation)</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1743163200">- Fix build by using python312 and enabling waflib_python312.patch
  for the main build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1743249600">- Fix build differently:
  + BuildRequire waf and use system waf instead of old intree version.
  + waflib_python312.patch is only needed in python-aubio.</changelog>
</package>
<package pkgid="763bde52bd6be1b1bd026432437be5bdacb6356a3ed2046f818f70077b973c03aba8ac189233e9cd325f15b48571095a6b01fcffdc19dea0908d7d2b9fa35984" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="bp160.1.2"/>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Update to version 0.4.9:
  * No upstream changes provided, please see
    https://git.aubio.org/?p=aubio.git;a=shortlog
- Changes from version 0.4.8:
  * src/notes: new option release_drop.
  * src/spectral: new parameters added to filterbank and mfcc.
  * python/lib: start documenting module, improve build for
    win-amd64.
  * src fixes: prevent crash when using fft sizes unsupported by
    vDSP, prevent saturation when down-mixing a multi-channel
    source (avcodec/ffmpeg).
- Changes from version 0.4.7:
  * src/io/, src/notes/, src/pitch: prevent crashes on corrupted
    files.
  * src/spectral/dct.h: add dct type II object with optimised
    versions.
  * examples/: fix jack midi output, improve messages when jack
    disabled.
  * python/: add dct support, minor bug fixes tests and demos.
  * wscript: improve support for BLAS/ATLAS.
- Drop upstream fixed patches:
  * aubio-wavread-input-validation.patch
  * aubio-resampler-NULL-deref-fix.patch
  * 0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  * 0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  * 0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
  * 0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
- Run spec-cleaner, modernize spec.
- Replace ffmpeg3-devel with pkgconfig(libavdevice) BuildRequires:
  Allow to build with ffmpeg v4 and newer.</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580385600">- Do not pull in the python2 as a dependency since we can build
  fine with python3</changelog>
  <changelog author="dliw@posteo.net" date="1649505600">- Enable fftw3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1670932800">- Replace pkgconfig(libavresample) with pkgconfig(libswresample)
  BuildRequires as ffmpeg-5 does not provide libavresample.
- Add cdfe9ce.patch: [source_avcodec] avoid deprecation warning
  with latest avcodec api (58.134.100).
- Add 8a05420.patch: [source_avcodec] define FF_API_LAVF_AVCTX for
  libavcodec &gt; 59, thx @berolinux (closes gh-353).</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1678795200">- Replace ffmpeg libs pkgconfig build requires with actual
  ffmpeg-4 devel packages to fix build for Tumbleweed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1689508800">- Add waflib_deprecated.patch (fixes TW compilation)</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1743163200">- Fix build by using python312 and enabling waflib_python312.patch
  for the main build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1743249600">- Fix build differently:
  + BuildRequire waf and use system waf instead of old intree version.
  + waflib_python312.patch is only needed in python-aubio.</changelog>
</package>
<package pkgid="58feced7bc85a0237e3c75b59e3939f2565a7e252510f103a82f0ff98ac378ca6077b22b795e8a2dcc54ad5035c4de0c72aaf51c0f20dbdb2df2edf0c9aa7029" name="audacity" arch="x86_64">
  <version epoch="0" ver="3.7.4" rel="bp160.1.2"/>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1721649600">- Update to 3.6.1
  This is a hotfix release. It fixes the following bugs:
  * #6889 Fixed a crash when exporting multichannel audio.
  * #6882 Fixed a crash when pasting mono clips into stereo tracks.
  * #4763 (Accessibility) Made more values available when using the
    plain UI of plugins. (Thanks, David Bailes!)
  * #6855 Prevented incompatible versions from opening projects
    created in 3.6.x.
  * #6892 Fixed the dark theme sometimes having white corners in buttons.</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1722081600">- Update to 3.6.2
  * #6955 Fix out of bound access in waveform cache
  * #6857 fix: pitch-shift value not showing on Linux
  * #6883 Fix for labeled audio operations don't work in certain cases
  * Fix for TCP UI Breaks when dragging waveform splitter
  * Undo stack is cleared before project is compacted
  * Call SetBypass at the right time
  * Clear clipboard also before cutting
  * Prepare a set of tracks to apply labeled audio operations depending
  * Extend Join Region by one sample, to ensure that Split-Join operation
  * Envelope display fix: pass absolute time value when querying envelope</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1725883200">- Update vst3sdk to 3.7.12_build_20
- Update to 3.6.3
  * #7266 Fixed a crash when exiting Audacity. (Thanks, Joe Souza!)
- Updated 3.6.2 release notes:
  * This is a patch release. It adds a "Legacy" effects section
    containing the old Limiter, Compressor and Classic Filters.
  * #6995 Fixed a hang after undoing.
  * #6912 Fixed the zero line going missing.
  * #6927 Fixed envelope appearance for clips offset from 0.
  * #6955 Fixed Audacity turning white on some systems.
  * #6857 Fixed the pitch indicator disappearing on Linux when
    hitting double digits.
  * #6941 Fixed cutting not putting clips into the clipboard.
  * #6926 Fixed pasting sometimes resetting the clip name.
  * #6751 Fixed the track header UI breaking when resizing channels
    in a stereo track.
  * #6847, #6846 Fixed LV2 plugin detection on macOS and Windows.
  * #3679 Fixed Labeled Audio operations.
  * #6924, #6989 Fixed Cloud projects sometimes not opening.
  * #7060 Fixed a bug regarding stereo-to-mono splitting.
  * #7055 Fixed a bug causing tracks with master effects sometimes
    only exporting silence.
  * #7025, #7133 Fixed multi-channel OGG and Wavpack import.
  * #7018 Fixed a crash after recording long sessions.
  * #7126 Fixed a crash when failing to load a cloud project.
  * #7093 Fixed Audacity maxing out the CPU when minimized.
  * #7124 Fixed the "editing clips can move other clips" preference
    desynchronizing multiple tracks.
  * Other changes:
  * #6736 The time track range now is a single dialog.
  * #6929 Reverted the behavior of selection change when importing
    a clip to the previous behavior.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1726920000">- Remove old Leap (15.3) workarounds
- Update audacity-no_buildstamp.patch and fix cmake params in spec file
- Update to 3.6.4
  * #7310 Fixed another crash when exiting Audacity. (Thanks, Joe Souza!)
  * #7312 Fixed projects not being compacted on close.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1730462400">- Disable VST3 support due CVE-2024-50602 and misssing VST3 plugins UI
- Fixes boo#1232608
- Update to 3.7.0
  * #6233, #7397, #6900 Improved Linux compatibility.
  * #6702 Improved contrast in the light theme.
  * #7008 MP3 exports: Renamed "Insane" to "Excessive".
  * #7570, #7452 Improved non-standard character handling for cloud
    saving.
  * #7486 Renamed "Split cut/delete" to "Cut/delete and leave gap".
  * #7293 Pasting clips no longer moves clips on other tracks if
    "editing clips can move other clips" is enabled.
  * #7312, #7382 Fixed database compacting not working properly sometimes.
  * #6851 Improved startup speed on systems with many audio devices.
  * #7186 Multi view: Fixed the hitbox of the x being misaligned with
    the visuals. (Thanks, Kurtsley)
  * #7468 macOS: Fixed VST presets path.
  * #7571 Adding, removing, replacing and reordering of effects now
    is undoable.
  * #7573 Closing a project upon turning a realtime effect stack on
    and off doesn't crash Audacity anymore.
  * #7610 Canceling a stereo track mid-operation no longer crashes Audacity.
  * #7385 Importing Opus files using libopus no longer shifts the audio data.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1734091200">- Update to 3.7.1
  This is a patch release. It fixes the following bugs:
  * #7797 Effects can be applied to time-stretched clips.
  * #7620 Moving or renaming the installation directory no longer
    re-enables disabled modules.
  * #7652 Opening the "Adjust Playback Speed" dialog doesn't crash
    Audacity anymore.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1741780800">- Update to 3.7.2
- Refresh audacity-no_buildstamp.patch
  This is a patch release. It contains the following changes:
  * #8290 Fixed a crash when applying some effects across multiple
    tracks if one track is empty.
  * #8157, #8155 Fixed some crashes emanating from the Mixer window.
  * #7672 Returned the "Residue" option in noise reduction.
    (Thanks, Christopher Rooney!)
  * #7809 Modules are now allowed to stick around when patch releases
    like this one are published. This means you likely won't need to
    update the OpenVINO again during 3.7.x.
  * #7076 When adding a realtime effect to a track, the effect
    settings are now opened immediately.
  * #7819 Added an infobox when saving a project in a new version
    breaks compatibility with an old one.
  * #7740 Added a preference to turn off automatic tempo detection.
  * #4169 When duplicating tracks, the duplicated tracks now have
    independent realtime effect instances.
  * #7700 Fixed range-selection beyond the edge of a clip being
    destructive.
  * #8013, #8008, #8004, #8009, #8003, #8005, #8071 Improved
    stability of cloud saving.
  * #7410 Fixed pasting content from a clip at the beginning of itself
    being offset in time.
  * #4231 macOS: Fixed AUSoundIsolation.
  * #6342 Fixed audacity continuing to scroll after letting go of
    the scrollbar.
  * #8110 Fixed black stripes appearing when zooming in while in
    the envelope or multi-tool.
  * #8043 Added a new "get effects" button next to the Upload Audio button.
  * #8211 Added UUID instance support. See this page for further
    info: https://forum.audacityteam.org/t/introducing-a-uuid-system-in-audacity-here-s-what-you-need-to-know/128561
  * #7154 Fixed label texts using the wrong color in dark themes.
    (Thanks, GovindaMadhava!)
  * #8261 Fixed tracks being incorrectly drawn on high zoom levels
    using high precision trackpads.
  * #7902 Linux: Fixed FFmpeg loading in the Ubuntu 22.04 AppImage.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1741867200">- Update to 3.7.3
  This is a hotfix release. It fixes the following bugs:
  * #8426 Incorrect results when applying effects to multiple clips
  * #8425 Truncate Silence fails to work properly when there is more
    than one silent part</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1749556800">- Update to 3.7.4
  This is a patch release. It contains the following changes:
  * #6890 Fixed a crash when closing a large unsaved project
  * #8709 Fixed a crash when using real-time effects that activate
    delay compensation
  * #8494 Fixed issue where Studio Fade Out creates a new clip when
    applied at the end of a clip
  * #8442 Fixed incorrect waveform rendering on clipped audio
  * #8559 Fixed unintended deletion of a clip when joining two clips
    with pitch adjustment
  * #3003 Effect preview now works when the track is muted
  * #8666 Fixed possible incorrect calculations in the Hamming window
    derivative (Thanks, witwald!)
  * #8577 Fixed compilation issues on legacy macOS (Thanks, barracuda156!)</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1750161600">- Add Use-full-function-prototypes-in-libnyquist.patch fixing build
  with gcc-15</changelog>
</package>
<package pkgid="d95bdc58410327af0a2dc3ddd0ee479f60c51b9d7c1aba4bbd5b81eabbe1cddea67e2769b6cf0287ac19d0cce12e1ab1eb5cc2ff1ef74cc8a00e113586eb9d4c" name="audacity-lang" arch="noarch">
  <version epoch="0" ver="3.7.4" rel="bp160.1.2"/>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1721649600">- Update to 3.6.1
  This is a hotfix release. It fixes the following bugs:
  * #6889 Fixed a crash when exporting multichannel audio.
  * #6882 Fixed a crash when pasting mono clips into stereo tracks.
  * #4763 (Accessibility) Made more values available when using the
    plain UI of plugins. (Thanks, David Bailes!)
  * #6855 Prevented incompatible versions from opening projects
    created in 3.6.x.
  * #6892 Fixed the dark theme sometimes having white corners in buttons.</changelog>
  <changelog author="Stephan Hemeier &lt;Sauerlandlinux@gmx.de&gt;" date="1722081600">- Update to 3.6.2
  * #6955 Fix out of bound access in waveform cache
  * #6857 fix: pitch-shift value not showing on Linux
  * #6883 Fix for labeled audio operations don't work in certain cases
  * Fix for TCP UI Breaks when dragging waveform splitter
  * Undo stack is cleared before project is compacted
  * Call SetBypass at the right time
  * Clear clipboard also before cutting
  * Prepare a set of tracks to apply labeled audio operations depending
  * Extend Join Region by one sample, to ensure that Split-Join operation
  * Envelope display fix: pass absolute time value when querying envelope</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1725883200">- Update vst3sdk to 3.7.12_build_20
- Update to 3.6.3
  * #7266 Fixed a crash when exiting Audacity. (Thanks, Joe Souza!)
- Updated 3.6.2 release notes:
  * This is a patch release. It adds a "Legacy" effects section
    containing the old Limiter, Compressor and Classic Filters.
  * #6995 Fixed a hang after undoing.
  * #6912 Fixed the zero line going missing.
  * #6927 Fixed envelope appearance for clips offset from 0.
  * #6955 Fixed Audacity turning white on some systems.
  * #6857 Fixed the pitch indicator disappearing on Linux when
    hitting double digits.
  * #6941 Fixed cutting not putting clips into the clipboard.
  * #6926 Fixed pasting sometimes resetting the clip name.
  * #6751 Fixed the track header UI breaking when resizing channels
    in a stereo track.
  * #6847, #6846 Fixed LV2 plugin detection on macOS and Windows.
  * #3679 Fixed Labeled Audio operations.
  * #6924, #6989 Fixed Cloud projects sometimes not opening.
  * #7060 Fixed a bug regarding stereo-to-mono splitting.
  * #7055 Fixed a bug causing tracks with master effects sometimes
    only exporting silence.
  * #7025, #7133 Fixed multi-channel OGG and Wavpack import.
  * #7018 Fixed a crash after recording long sessions.
  * #7126 Fixed a crash when failing to load a cloud project.
  * #7093 Fixed Audacity maxing out the CPU when minimized.
  * #7124 Fixed the "editing clips can move other clips" preference
    desynchronizing multiple tracks.
  * Other changes:
  * #6736 The time track range now is a single dialog.
  * #6929 Reverted the behavior of selection change when importing
    a clip to the previous behavior.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1726920000">- Remove old Leap (15.3) workarounds
- Update audacity-no_buildstamp.patch and fix cmake params in spec file
- Update to 3.6.4
  * #7310 Fixed another crash when exiting Audacity. (Thanks, Joe Souza!)
  * #7312 Fixed projects not being compacted on close.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1730462400">- Disable VST3 support due CVE-2024-50602 and misssing VST3 plugins UI
- Fixes boo#1232608
- Update to 3.7.0
  * #6233, #7397, #6900 Improved Linux compatibility.
  * #6702 Improved contrast in the light theme.
  * #7008 MP3 exports: Renamed "Insane" to "Excessive".
  * #7570, #7452 Improved non-standard character handling for cloud
    saving.
  * #7486 Renamed "Split cut/delete" to "Cut/delete and leave gap".
  * #7293 Pasting clips no longer moves clips on other tracks if
    "editing clips can move other clips" is enabled.
  * #7312, #7382 Fixed database compacting not working properly sometimes.
  * #6851 Improved startup speed on systems with many audio devices.
  * #7186 Multi view: Fixed the hitbox of the x being misaligned with
    the visuals. (Thanks, Kurtsley)
  * #7468 macOS: Fixed VST presets path.
  * #7571 Adding, removing, replacing and reordering of effects now
    is undoable.
  * #7573 Closing a project upon turning a realtime effect stack on
    and off doesn't crash Audacity anymore.
  * #7610 Canceling a stereo track mid-operation no longer crashes Audacity.
  * #7385 Importing Opus files using libopus no longer shifts the audio data.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1734091200">- Update to 3.7.1
  This is a patch release. It fixes the following bugs:
  * #7797 Effects can be applied to time-stretched clips.
  * #7620 Moving or renaming the installation directory no longer
    re-enables disabled modules.
  * #7652 Opening the "Adjust Playback Speed" dialog doesn't crash
    Audacity anymore.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1741780800">- Update to 3.7.2
- Refresh audacity-no_buildstamp.patch
  This is a patch release. It contains the following changes:
  * #8290 Fixed a crash when applying some effects across multiple
    tracks if one track is empty.
  * #8157, #8155 Fixed some crashes emanating from the Mixer window.
  * #7672 Returned the "Residue" option in noise reduction.
    (Thanks, Christopher Rooney!)
  * #7809 Modules are now allowed to stick around when patch releases
    like this one are published. This means you likely won't need to
    update the OpenVINO again during 3.7.x.
  * #7076 When adding a realtime effect to a track, the effect
    settings are now opened immediately.
  * #7819 Added an infobox when saving a project in a new version
    breaks compatibility with an old one.
  * #7740 Added a preference to turn off automatic tempo detection.
  * #4169 When duplicating tracks, the duplicated tracks now have
    independent realtime effect instances.
  * #7700 Fixed range-selection beyond the edge of a clip being
    destructive.
  * #8013, #8008, #8004, #8009, #8003, #8005, #8071 Improved
    stability of cloud saving.
  * #7410 Fixed pasting content from a clip at the beginning of itself
    being offset in time.
  * #4231 macOS: Fixed AUSoundIsolation.
  * #6342 Fixed audacity continuing to scroll after letting go of
    the scrollbar.
  * #8110 Fixed black stripes appearing when zooming in while in
    the envelope or multi-tool.
  * #8043 Added a new "get effects" button next to the Upload Audio button.
  * #8211 Added UUID instance support. See this page for further
    info: https://forum.audacityteam.org/t/introducing-a-uuid-system-in-audacity-here-s-what-you-need-to-know/128561
  * #7154 Fixed label texts using the wrong color in dark themes.
    (Thanks, GovindaMadhava!)
  * #8261 Fixed tracks being incorrectly drawn on high zoom levels
    using high precision trackpads.
  * #7902 Linux: Fixed FFmpeg loading in the Ubuntu 22.04 AppImage.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1741867200">- Update to 3.7.3
  This is a hotfix release. It fixes the following bugs:
  * #8426 Incorrect results when applying effects to multiple clips
  * #8425 Truncate Silence fails to work properly when there is more
    than one silent part</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1749556800">- Update to 3.7.4
  This is a patch release. It contains the following changes:
  * #6890 Fixed a crash when closing a large unsaved project
  * #8709 Fixed a crash when using real-time effects that activate
    delay compensation
  * #8494 Fixed issue where Studio Fade Out creates a new clip when
    applied at the end of a clip
  * #8442 Fixed incorrect waveform rendering on clipped audio
  * #8559 Fixed unintended deletion of a clip when joining two clips
    with pitch adjustment
  * #3003 Effect preview now works when the track is muted
  * #8666 Fixed possible incorrect calculations in the Hamming window
    derivative (Thanks, witwald!)
  * #8577 Fixed compilation issues on legacy macOS (Thanks, barracuda156!)</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1750161600">- Add Use-full-function-prototypes-in-libnyquist.patch fixing build
  with gcc-15</changelog>
</package>
<package pkgid="2aa6978481924f50b801c43a9f8df1e890e41bc82728a1d8a37ac7eed3e1cbef49cdc11705ba21ee1f2237edc0c017f77932d181057685b4d000f26274140cab" name="audaspace" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="32e6c9acb8ed17c56dc8df0186bf512ea11b18131d31d60ae38bce3897eafeb9e2a05051759209f6194a5420b45a285bf06dcd57a700b23276f52fe862fa1c52" name="audaspace-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="b5d0cf415f35252da8169509c0953ef00898dce195678ecc99e21165c5f76f7e5be3dfc1dd78694d4eccaba3f88bd2400a0d54734ddc7d9141dad2da39aaf128" name="audaspace-doc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="fe5c51fd3e368a3c0602b701780fbbb9b58bead5b4dac3c8de042f17e702b53b23e4973fe27ce467e3df137d93dd172613fd51f55411d173467f510d193980aa" name="audaspace-plugin-ffmpeg" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="5999d2ecc5693474359e56b8bb29ff88cab33bd229a3a34f454c0f186cabd3d6119248461461bd5c8ab4a440512106181f795ea9cb7b04047c598c629414c42b" name="audaspace-plugin-jack" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="580f6689748c921414665c82bf85fae2180e5a721da37d99989f4644a86ba55af919080227be4dd28fd283b41473c44fdceea2a163a98e18c246537eb2f22422" name="audaspace-plugin-openal" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="b2daf246b937b0f5a5269ca502c837d9beab642e50d3eefdb353ac51c8c95bcec49602199583e0752321e0457d10149f53d9a948867b2382d067377da5b31c95" name="audaspace-plugin-pipewire" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="c83cc1976d23f32acd3d5d6cdad4b19a83aba9b6eefe5d592e42924d916bc39a54fd9ee60b206e77702407f29c555b188684880020608de4be6de9382cc64b5f" name="audaspace-plugin-pulse" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="6d95ec31944a59b4475f83c5b07fafbf032e0ba214f1ae451f07e5ea9d628c86349ba31ce5329c82b5cc9e789c6942d4ebf856a01c4144d9b25a014f74b404ab" name="audaspace-plugin-sdl2" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="6e79206b0b4db23177629e2939070068aa277eae35108da1c7f6f00675b7e22f323967ec61d3c2ad3843361d96510a8a3944a6e1bdd454287e991f537fc60a13" name="audaspace-plugin-sndfile" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.2"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Add 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch: Support
  ffmpeg v5, patch from upstream git.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1675512000">- Update to release 1.4.0
  * Support for OS specific/native audio devices/backends has been
    added, that is PulseAudio (Linux), WASAPI (Windows) and
    CoreAudio (MacOS).
  * New sound effects have been added, namely Modulator and
    Equalizer. Thanks to Marcos Perez for contributing the
    Equalizer.
  * File stream info: if an audio file contains multiple streams
    you can choose which one to process instead of taking the first
    one (this feature is only supported by ffmpeg, not libsndfile).
  * API Change: double instead of float for time values for more
    precise timing control.
  * There have been lots of bugfixes, which are basically the
    majority of all changes.
  * And some other minor improvements were implemented as well.
- Drop upstream patches:
  * audaspace-gcc7.patch
  * audaspace-plugin-build-options.patch
  * audaspace-support-ffmpeg4.patch
  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
- Use pkgconfig(jack), let distro select jack implementation
- Split plugins packages to avoid pulling in excessive
  dependencies, and recommend at least one device plugin from
  the library.</changelog>
  <changelog author="draskmont@protonmail.com" date="1701000000">- Added upstream patch audaspace-animated-sequence.patch:
  * Aditional functions required by Blender 4.0.
  * Bugfix for reading an animated property with a negative
    time value</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1721217600">- Update to release 1.5.0
  Audaspace 1.5.0 is a release with not many changes but big enough
  to warrant a new release after a year since the last one.
  - Performance improvements and two more quality presets for the
    JOS resampler.
  - Bugfixes for PulseAudio.
  - CoreAudio device is only opened on demand.
  - FFMPEG 7 support and dropped support for FFMPEG older than 6.
  - Various minor fixes and improvements.
- drop audaspace-animated-sequence.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740830400">- add git.patch to get the needed symbols (like AUD_CONTAINER_AAC)
  needed in blender 4.4.
  https://github.com/audaspace/audaspace/issues/30
- enable pipewire plugin
  new audaspace-plugin-pipewire plugin</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1740916800">- Update to release 1.6.0
  - Pipewire support (thanks Sebastian Parborg!)
  - AAC container (ADTS stream).
  - Update to C++17.
  - Improvements for PulseAudio backend.
  - Many (bug) fixes.
- drop git.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1741003200">- fix soversion</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- disable pipewire support on leap 15.x until we find out why the
  build does not find the development files.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742385600">- instead of disabling pipewire support based on the OS version
  tie that decision to the pipewire version</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751457600">- Update to release 1.7.0
  - Rewrite of the Synchronizer API.
  - Unified backends with a mixing thread (Jack, Pulse, Pipewire,
    CoreAudio)
  - Various fixes for CoreAudio.</changelog>
</package>
<package pkgid="8372d87c574c54aa3e9032418c3bee93a8fe72e1c0cdc11883b9ee2bd1b3a6a4d2bf3e9dda4f6d2ff2b25bde15f74c6509e12a3a5b5b2f6e28549e2ff38c2394" name="audex" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- No code change since 24.12.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="b10e19e9ee2d8e0325b3c7317d48088374de28d14efea812034e5d7f65d1bdee7f1fd53eb02c459fc27196210b4a09c31146ba9e714b1f0c18b078c5f417ad1e" name="audex-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- No code change since 24.12.3</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="3a181ed6a37c34c18596e2745032011463f8fc9b0b1c8632325671a73da98496cdbc7802c4b0235a00136623f22b3a4015d49aef3e00323ecf91ede3d7d48d59" name="audio-recorder" arch="x86_64">
  <version epoch="0" ver="3.3.4" rel="bp160.1.12"/>
  <changelog author="dimstar@opensuse.org" date="1412856000">- Add audio-recorder-automake.patch: fix the order of commands in
  configure.ac.</changelog>
  <changelog author="dimstar@opensuse.org" date="1430827200">- Update to version 1.6-2:
  + See ChangeLog for full details.
- Add pkgconfig(gstreamer-pbutils-1.0) and
  pkgconfig(appindicator3-0.1) BuildRequires: new dependecies.
- Add audio-recorder-gtk-3.16.patch: Add GTK 3.16 compatibility.
- Drop audio-recorder-automake.patch: fixed upstream.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 2.0.2:
  + See ChangeLog for full details
- Rebase audio-recorder-correct-desktop-menu.patch
- Drop audio-recorder-gtk-3.16.patch: merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1511265600">- Update descriptions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Update to 2.1.3:
  + Fix in rec_stop_recording(...) to avoid possible blockage.
  + Fix to support longer filenames and filenames with bad
    characters.</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1568030400">- Update to 3.0.5:
  + Create audio folder even it has many subpaths.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 3.2.3
  * The recording must end with EOS message,
    otherwise MPEG 4 Audio (.m4a) files becomes invalid.
  * Fixed export to M4A / AAC with new gstreamer
  * Fixed a minor issue in settings-pipe.c</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to version 3.3.4
  * Removed Speexenc (SPX) encoder from MediaProfiles.
  * Added opus encoder.
  * Added suport for pipewiresrc plugin
  * Removed support for Skype as the latest versions of Skype do not
    support MPRIS2.
  * This will be the last version suporting Pulseaudio (pulsesrc).
  * Later, newer audio-recorder versions will run on Gstreamer and Pipewire.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Prepare for RPM 4.20: use autosetup.</changelog>
</package>
<package pkgid="0171973c209362180631196a853f85b80a2c5e4bc45af17040c459098c824469905c83ca4c4f05a72e56553a059aac2a2df1876b0a067f8dbd811ab9ba3be6b3" name="audio-recorder-lang" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="bp160.1.12"/>
  <changelog author="dimstar@opensuse.org" date="1412856000">- Add audio-recorder-automake.patch: fix the order of commands in
  configure.ac.</changelog>
  <changelog author="dimstar@opensuse.org" date="1430827200">- Update to version 1.6-2:
  + See ChangeLog for full details.
- Add pkgconfig(gstreamer-pbutils-1.0) and
  pkgconfig(appindicator3-0.1) BuildRequires: new dependecies.
- Add audio-recorder-gtk-3.16.patch: Add GTK 3.16 compatibility.
- Drop audio-recorder-automake.patch: fixed upstream.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to 2.0.2:
  + See ChangeLog for full details
- Rebase audio-recorder-correct-desktop-menu.patch
- Drop audio-recorder-gtk-3.16.patch: merged upstream</changelog>
  <changelog author="jengelh@inai.de" date="1511265600">- Update descriptions.</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Update to 2.1.3:
  + Fix in rec_stop_recording(...) to avoid possible blockage.
  + Fix to support longer filenames and filenames with bad
    characters.</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1568030400">- Update to 3.0.5:
  + Create audio folder even it has many subpaths.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 3.2.3
  * The recording must end with EOS message,
    otherwise MPEG 4 Audio (.m4a) files becomes invalid.
  * Fixed export to M4A / AAC with new gstreamer
  * Fixed a minor issue in settings-pipe.c</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650628800">- Update to version 3.3.4
  * Removed Speexenc (SPX) encoder from MediaProfiles.
  * Added opus encoder.
  * Added suport for pipewiresrc plugin
  * Removed support for Skype as the latest versions of Skype do not
    support MPRIS2.
  * This will be the last version suporting Pulseaudio (pulsesrc).
  * Later, newer audio-recorder versions will run on Gstreamer and Pipewire.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Prepare for RPM 4.20: use autosetup.</changelog>
</package>
<package pkgid="905f1ec82c675d6228be5415763608f34e32b025553c8a9f1d67d85dc6c8ad90624f2f4d1fc53830d17bda1e67ad21155647a4758206b290661aa363195c766a" name="audioclock" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="bp160.1.9"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655294400">- Initial package version 1.0</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655294401">- upgrade to 1.1 with cleaner audio samples</changelog>
  <changelog author="bwiedemann@suse.de" date="1699963200">- Update to version 1.2:
  * Handle signals</changelog>
  <changelog author="bwiedemann@suse.com" date="1716206400">- Update to version 1.3.1:
  * Modernize spec file
  * Consider local timezone
  * Drop test code</changelog>
</package>
<package pkgid="0f945028f26e33a836ab2d79e8c867b3771f26f3fa4a44050634cd559b7932575049b370b651052e1c60520ce0e1b26942ee1fdd130f704060ef81edecfae8ae" name="audiofile" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="bp160.1.13"/>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1710244800">- Fix the incorrect argument passed to createTemporaryFile() (bsc#1221308):
  createTemporaryFile-argument-fix.patch
- Refresh patch to be applied with -p1, use autosetup macro for cleanup
- Put COPYING* to licenses</changelog>
</package>
<package pkgid="5c0bc824ddaa0f24b2b8fc5797e7994ae93e417b9083cef1cf858417225426e91dd8524a1fae6f4b2f8101c6bc19383814ff6c6de0a9367108ceefcb36b4237b" name="audiofile-devel" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="bp160.1.13"/>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1710244800">- Fix the incorrect argument passed to createTemporaryFile() (bsc#1221308):
  createTemporaryFile-argument-fix.patch
- Refresh patch to be applied with -p1, use autosetup macro for cleanup
- Put COPYING* to licenses</changelog>
</package>
<package pkgid="a2e2bf39d0cd9f533e8eb5808b096247fd040d2a8550b939a7512e9e42f73a35febfe5ab07675d78aa5dc936d9586422d6ded03ce3f3c30893100564e9186451" name="audiofile-doc" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="bp160.1.13"/>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1710244800">- Fix the incorrect argument passed to createTemporaryFile() (bsc#1221308):
  createTemporaryFile-argument-fix.patch
- Refresh patch to be applied with -p1, use autosetup macro for cleanup
- Put COPYING* to licenses</changelog>
</package>
<package pkgid="d325ed9c3ddf3efc3d9ff62b60dd97765ef1512afd9ef51570c975b50a108e784dc5c7b9d20d210b3d1384018138b9e34c9c46c3282df434bd29f33f5432ea56" name="audiotube" arch="x86_64">
  <version epoch="0" ver="25.04.0" rel="bp160.1.8"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728388800">- Update to 24.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.08.2/
- No code change since 24.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1730808000">- Update to 24.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.08.3/
- Changes since 24.08.2:
  * LibraryPage: Fix text colour</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731758400">- Update to 24.11.80
  * New feature release
- Changes since 24.08.3:
  * Fix parsing certain playlists
  * snap: update for latest release
  * flatpak: Switch yt-dlp away from flatpak-builder-tools
  * Update ytmusicapi to 1.8.2
  * LibraryPage: Fix text colour
  * Use regular Qt.createComponent
  * About: Use Qt.createComponent to create About Page
  * Fix up 19a48e4c
  * Main: Store window geomety with KConfig.WindowStateSaver
  * appstream: Switch summary to sentence case
  * Update tested ytmusicapi version to 1.8.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Update tested ytmusicapi version to 1.10.1
  * Update ytmusicapi to 1.9.0
  * Fix loading albums without id
  * Appdata: add display size</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Fix loading certain artist pages
  * cmake: Require ytmisicapi 1.10.2
  * Update to ytmusicapi 1.10.2
  * Fixes for the software renderer
  * Update tested ytmusicapi version to 1.10.1
  * Fix loading albums without id
  * Appdata: add display size
  * Fix skipping based on lyrics (skipping in general is still broken)
  * center lyrics horizontally
  * Update ytmusicapi to 1.9.0
  * LyricsModel: Fix error handling
  * MaximizedPlayerPage: solve some unqualified accesses
  * Unify lyrics font size
  * Add synchronized lyrics
  * Removed empty line just in case
  * Added Alessio Adamo as supporter
  * Add the album name to MaximizedPlayerPage
  * flatpak: Update dependencies
  * Fix appdata to align with appstream spec
  * Fix parsing certain playlists
  * flatpak: Update runtime to 6.8</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
</package>
<package pkgid="da820296950b9182bcc8b70a092c8a80a468531a5efa3ac3e78dd666bf301e7d420e9d2f2f984604cb9bf08376ebf1a989da7b28c8da3ceeecdc38116a6b5705" name="audiotube-lang" arch="noarch">
  <version epoch="0" ver="25.04.0" rel="bp160.1.8"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728388800">- Update to 24.08.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.08.2/
- No code change since 24.08.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1730808000">- Update to 24.08.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.08.3/
- Changes since 24.08.2:
  * LibraryPage: Fix text colour</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731758400">- Update to 24.11.80
  * New feature release
- Changes since 24.08.3:
  * Fix parsing certain playlists
  * snap: update for latest release
  * flatpak: Switch yt-dlp away from flatpak-builder-tools
  * Update ytmusicapi to 1.8.2
  * LibraryPage: Fix text colour
  * Use regular Qt.createComponent
  * About: Use Qt.createComponent to create About Page
  * Fix up 19a48e4c
  * Main: Store window geomety with KConfig.WindowStateSaver
  * appstream: Switch summary to sentence case
  * Update tested ytmusicapi version to 1.8.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Update tested ytmusicapi version to 1.10.1
  * Update ytmusicapi to 1.9.0
  * Fix loading albums without id
  * Appdata: add display size</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Fix loading certain artist pages
  * cmake: Require ytmisicapi 1.10.2
  * Update to ytmusicapi 1.10.2
  * Fixes for the software renderer
  * Update tested ytmusicapi version to 1.10.1
  * Fix loading albums without id
  * Appdata: add display size
  * Fix skipping based on lyrics (skipping in general is still broken)
  * center lyrics horizontally
  * Update ytmusicapi to 1.9.0
  * LyricsModel: Fix error handling
  * MaximizedPlayerPage: solve some unqualified accesses
  * Unify lyrics font size
  * Add synchronized lyrics
  * Removed empty line just in case
  * Added Alessio Adamo as supporter
  * Add the album name to MaximizedPlayerPage
  * flatpak: Update dependencies
  * Fix appdata to align with appstream spec
  * Fix parsing certain playlists
  * flatpak: Update runtime to 6.8</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
</package>
<package pkgid="575e7c5632fbbe350fbdd3e9db4a18048cfe88552e00eb01c8c22e9cc60fa5df7a9263a1d63c3235b5bc02c5db08027204badb82e912a6a8c9b3b5b6fca6ac13" name="audiowmark" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="bp160.1.11"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1708689600">- initial version</changelog>
</package>
<package pkgid="ae810fdde7b9a45d6cdfaea47b96881791bcead84dc36dc6d6365fe4656abd04ab80102ceeb04640bd02d7bc7ec093a62f5fbf76e66e35cbe124a5421333fbd1" name="audit" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="3e1dbb42ca28201dea0544914496a0776fc14904c9099ed507978f499bd5c16add5624df3ab03d3050b512e78c670de8e3c520840d3eede1e0c4550303b33bba" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="27622b5c144d160b91e2d21bbb31e47511a11f545e0cca53b70d1f7c52181e7d4af659d0246447d7ca0b3874fed6248e180ecaa142ee8d20848aaf192f663440" name="audit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Add new headers 'audit_logging.h' and 'audit-records.h' for
    audit-devel</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec: add requirement for 'awk' package (bsc#1231236)</changelog>
</package>
<package pkgid="ba21901bd6fc7b35a60618f06f69913f46e4b59d7efe15f71f906cc515f58c228a1173487b3eaa184d2665120488b71ae5bb70bb133192a5144c1157cba0b0c5" name="audit-devel" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1671105600">- Enable build for ARM (32-bit)
- Update to version 3.0.9:
  * In auditd, release the async flush lock on stop
  * Don't allow auditd to log directly into /var/log when log_group is non-zero
  * Cleanup krb5 memory leaks on error paths
  * Update auditd.cron to use auditctl --signal
  * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
  * In auparse, special case kernel module name interpretation
  * If overflow_action is ignore, don't treat as an error
  (3.0.8)
  * Add gcc function attributes for access and allocation
  * Add some more man pages (MIZUTA Takeshi)
  * In auditd, change the reinitializing of the plugin queue
  * Fix path normalization in auparse (Sergio Correia)
  * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
  * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
  * Drop ProtectHome from auditd.service as it interferes with rules
  (3.0.7)
  * Add support for the OPENAT2 record type (Richard Guy Briggs)
  * In auditd, close the logging file descriptor when logging is suspended
  * Update the capabilities lookup table to match 5.16 kernel
  * Improve interpretation of renamat &amp; faccessat family of syscalls
  * Update syscall table for the 5.16 kernel
  * Reduce dependency from initscripts to initscripts-service
- Refresh patches (context adjusment):
  * audit-allow-manual-stop.patch
  * audit-ausearch-do-not-require-tclass.patch
  * audit-no-gss.patch
  * enable-stop-rules.patch
  * fix-hardened-service.patch
  * harden_auditd.service.patch
- Remove patches (fixed by version update):
  * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Add new headers 'audit_logging.h' and 'audit-records.h' for
    audit-devel</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec: add requirement for 'awk' package (bsc#1231236)</changelog>
</package>
<package pkgid="eb84f85e97fbcc29186edfa2fe2e9c8e8b0e239a0efac5f9ef418b5f7419a6bc8a45c2028c4449f67da3d4a273a4c6aea9b7d2b0ed077314d4dd1de5d91fd9c8" name="audit-rules" arch="x86_64">
  <version epoch="0" ver="4.0" rel="160000.2.2"/>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1676894400">- Update to 3.1:
  * Disable ProtectControlGroups in auditd.service by default
  * Fix rule checking for exclude filter
  * Make audit_rule_syscallbyname_data work correctly outside of auditctl
  * Add new record types
  * Add io_uring support
  * Add support for new FANOTIFY record fields
  * Add keyword, this-hour, to ausearch/report start/end options
  * Add Requires.private to audit.pc file
  * Try to interpret OPENAT2 fields correctly</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="info@paolostivanin.com" date="1688385600">- Update to 3.1.1:
  * Add user friendly keywords for signals to auditctl
  * In ausearch, parse up URINGOP and DM_CTRL records
  * Harden auparse to better handle corrupt logs
  * Fix a CFLAGS propogation problem in the common directory
  * Move the audispd af_unix plugin to a standalone program</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Remove rcaudit symlink [jsc#PED-266]</changelog>
  <changelog author="ematsumiya@suse.com" date="1726574400">- Update to 4.0
  - Drop python2 support
  - Drop auvirt and autrace programs
  - Drop SysVinit support
  - Require the use of the 5.0 or later kernel headers
  - New README.md file
  - Rewrite legacy service functions in terms of systemctl
  - Consolidate and update end of event detection to a common function
  - Split off rule loading from auditd.service into audit-rules.service
  - Refactor libaudit.h to split out logging functions and record numbers
  - Speed up aureport --summary reports
  - Limit libaudit python bindings to logging functions
  - Add a metrics function for auparse
  - Change auditctl to use pidfd_send_signal for signaling auditd
  - Adjust watches to optimize syscalls hooked when watch file access
  - Drop nispom rules
  - Add intepretations for fsconfig, fsopen, fsmount, &amp; move_mount
  - Many code fixups (cgzones)
  - Update syscall and interpretation tables to the 6.8 kernel
  (from v3.1.2)
  - When processing a run level change, make auditd exit
  - In auditd, fix return code when rules added in immutable mode
  - In auparse, when files are given, also consider EUID for access
  - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
  - Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
  - Update all lookup tables for the 6.5 kernel
  - Don't be as paranoid about auditctl -R file permissions
  - In ausearch, correct subject/object search to be an and if both are given
  - Adjust formats for 64 bit time_t
  - Fix segfault in python bindings around the feed API
  - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
  * Move rules-related files into new subpackage `audit-rules':
  * Files moved:
  - /sbin/auditctl, /sbin/augenrules,
  /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
  - manpages for auditctl, augenrules, and audit.rules
  - /etc/audit is now owned by `audit-rules' as well
  * Add new file /usr/lib/systemd/system/audit-rules.service
  * Remove in-house create-augenrules-service.patch that generated
    augenrules.service systemd unit service
  * Remove ownership of /usr/share/audit
  * Create /usr/share/audit-rules directory on %install
  * Remove audit-userspace-517-compat.patch (fixed upstream)
  * Remove libev-werror.patch (fixed upstream)
  * Remove audit-allow-manual-stop.patch (fixed upstream)
  * Add fix-auparse-test.patch (downstream):
    Upstream tests uses a static value (42) for 'gdm' uid/gid (based
    on Fedora values, apparently).  Replace these occurrences with
    'unknown(123456)'
  * Replace '--with-python' with '--with-python3' on %configure
  * Remove autrace and auvirt references (upstream)
  * Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
  aren't supported in upstream since
  113ae191758c ("Drop support for SysVinit")</changelog>
  <changelog author="ematsumiya@suse.com" date="1727352000">- Update audit-secondary.spec:
  * Add "Requires: audit-rules" for audit package
  * Remove preun/postun handling of audit-rules.service</changelog>
  <changelog author="ematsumiya@suse.com" date="1727784000">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1727870400">- Readd audit-allow-manual-stop.patch (removed by mistake)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728043200">- Update audit.spec (bsc#1231236):
  * add requirement for 'awk' package
  * move some %post logic from audit to audit-rules</changelog>
</package>
<package pkgid="dd412df42fd2503736080f6d5289450d640b15dd46c5ff896ec49900677b3c813494fc813d37320459d1045497c2cd75eb876d72c0aa9f73085a624f50109efb" name="audit-visualize" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="bp160.1.9"/>
  <changelog author="tonyj@suse.de" date="1178452800">- created package</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1382616000">- Package doesn't provide any sysconfig file or sysvinit script
  Remove %insserv_prereq %fillup_prereq PreReq tag
- Some improvements</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix shebang in scripts that contains bash-specific options of
  'read' command
- add patches:
  * audit-visualize-fix-bashisms.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="cefbaf32188d0977efd55ca890fb4b9eaeb2f451faaa89f2f99a7c61679a56ec0bc6995342100be0b319886b61221225a1505b971185f41e7e96f53bda019a23" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="7be5cbe8ec1327720bbb085cb3a4bbf727390399354d6ae6880bfed1f857154e46c74e7acc74628003761f06b95411d925ce40799bd8fbc7865c9fcd7fc8143a" name="augeas-bash-completion" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="99c2f36d187a156755c7ca6a6811cf86b304de758d6e7f9ecf60ce7a93da27ab4f02b6a177184037d56bbafdf2c6eed06a2c455e3dba19b336aa115cc63d0d51" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="dcfaef61ff4cdcaeff2bf5ff2b9b42c5d3be3acff263d2da477fe53df2604a69696f175c8f482dca1771ae4c103f745f3f7214bf621aa8e7dd149397b7b4a87e" name="augeas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="04e641c9909250172fd983f08ca5d182d15ab816bfcace20a2760461a5179fd9c59090577e592698d08bb26c47b8e62c107932ff40cda68befcd59defa8ba33c" name="augeas-lense-tests" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="b4905f44b4a7555c9efc78adb59802ec26701e837d8d407eb11709bad31097bec083e404bbea60cb5c758b16ca24c20a6daa4eaebfd2a41cda59f66d84c7d5ba" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="dmueller@suse.com" date="1648123200">- add sysctl_parsing.patch (bsc#1197443)</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="347e54fc000d2733cfebaae440ea057eae35b9f302e3d7ffd982c78e1ec81d573433be793069528ff148d65cd872cdfb710fb9e3aab7637b49f347414786fcfb" name="aurorae6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746360000">- Init aurorae6</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Initial release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Drop unused dependency and mark KSvg as runtime
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="dfd6f0c4da8e9059d5ca1d5b075ad8a5663834599d1575db26c4416b9a9015623409c8f14ed5ff35ac355dc7eb38b71c24c0589cb6894a0227bade8562dfdfcc" name="aurorae6-devel" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746360000">- Init aurorae6</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Initial release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Drop unused dependency and mark KSvg as runtime
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="052428311868614029c6779ac3a0fa113fc48282ebd3d701a3ad921e9ec18ec6653b807c095d3a65753953dbee48765e4a8121ebee1342d47ac1f999c3823d43" name="aurorae6-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746360000">- Init aurorae6</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Initial release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Drop unused dependency and mark KSvg as runtime
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="62b17e4ae6843afa4d9f6f63fedee67fea2ef64f9c87af30582c66915a788a42c0f8a3d86502727b50882563e61197b6a02e661980892c6270ae068668c11abb" name="auto" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="5df01a1f7c9ed52a4a7ee1a773ca7f28dc8998e955a2a25a000d7173872f28ca6695d747140e57f81ddc567186c492090efaa471ac1083722eecb30217055cf8" name="auto" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="d8002e622cb07a69892aef9cde4d660e5cf8f6d920243e315b1e3482fcd430b24dbf959072ce825b9f024a7dedd59b335fba235e740cb31f85fd59ff14d122f9" name="auto-common" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="44dd21ae023a157fd52a3741522845c5d65c56a385b8e4fc16cb54ce0068e5599497d70b0be9580dd2992c9a3554616b18fce55b1135a346760d6bcb9e30cf5f" name="auto-common" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="be06616944c6fe7623d38ae395fcdc527128856c1410d54b6789b648dc01cc1ff14eff32f989b807033b51c10f9af81dfd09b4196564526738aaa1c0dee770f7" name="auto-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="a0d9f032ba81b0b0614ab187ac4d18832680c827de68dfdab559c76ffce5345893cf9672f975761c484962adf4101b3eda6165339acaff4b74583284d5c13f0a" name="auto-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="c89344b084e3a2682c7c69733117b829dd42a5fe14ca7b5d2c1b6af1f32969d093a0100cd8e3b9492f56e84266b4bc7abeb0df9935b31916beb4d829403293a0" name="auto-service" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="9c374f231da537b81edfac244d5a60c9fd75d8db51d474c26f2d0384a0d358b2fbcc871388bcd5b7c92159f633fbb3869e96ec47139e61c88ce952a50078e2cd" name="auto-service" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="ad37f63bbad1d659cc2c0f7ce79beffebd4e1e16e59699602bd465ecfe72a1b7902091eee84e757c23269a7027929643429cad0b821d5524becac87f84a34bc8" name="auto-service-aggregator" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="b02d9b8f5242ccbf277e926b596ba5261c77abd3df5775aa0169a203ddaca8435977448f0ad17a3aa1d816072083b70f9d2d22736f2efcad728bd318096a2b65" name="auto-service-aggregator" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="31e17ef377baaa1b7d037fbcdb4f3f2fd82820f95ed4e38f757561e2d1574f5f9b45b28894189abee01f4c721279d3aac34d3e1f9a5c7b68cb0e0f67f936d1a7" name="auto-service-annotations" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="874ea144a95480c94020207e4e2f4416b63ed7400fb12a011e4678287ec8d4fade90f99e85ba732f5f567dee7d12bb4b008488bdb5f944d0b03ebae2ad900943" name="auto-service-annotations" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="d2e52492405e56dd5101ab76289746baaf893f309f62fd7430c835c8e68f3380d1f78b87c4288ae874d64b648cc9403bfc327e7b2097b7f08fd3d1b5dc67ddc9" name="auto-value" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="b3a25dc22298b81a1587918a5e59877188d48ab3b2b46c17469210573b453656c39550f07cae7173df7b54724b9d2768b5ef4f31ddd8b3d6156c141f772641d8" name="auto-value" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="f802ab1c6665d53c803798564d3808dd6dbfd89b1ae5ed0509b5680eeabade00d3581a94f9124bc050fdd8ee357a3001f176418ca2304a5190e98368bd237ad0" name="auto-value-annotations" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="03de15d1d87aa9ddbbe032d5603589a933e21f99e3b877e3ee9bc208949e2e491dcc688a4745dc021bd0dfc728e159b2ecb0c58068ff646b79a401add2e52daf" name="auto-value-annotations" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="e5d6f3392fded193d7087497b971beb87a818880b30c7e43b3a82d634f9f132106ccbe0fddf3e16a16d506c5dfd47fc290dd0268ff1129d460e8802eaba16a0c" name="auto-value-parent" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="f1840fed41be40de5a1c54ac12e9a322f884ec57ef74b173f88c49602a06358645f6a34a212c9291f0ad894d6311a29df884106c26b650e94cdbe7bd900a1d4a" name="auto-value-parent" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1557144000">- Initial packaging of auto value 1.3</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for the javadoc subpackage.</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Update to upstream release 1.5.4
- Fetch 4 different tarballs in order to have correctly tagged
  submodules in the build</changelog>
  <changelog author="fstrba@suse.com" date="1642075200">- Update to upstream release 1.6.1
  * provides the auto-value-annotations artifact</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
  <changelog author="fstrba@suse.com" date="1761220800">- Force annotation processing, since it is needed with Java 25</changelog>
</package>
<package pkgid="de355819750366dd1607c881312cca823a3e59f8851f9e7ab8423eb8c113d06c97d849da2025db0034a49f6efb6893e49fbd3944f12b5bdb29de0adf10e18209" name="autobuild" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.4"/>
  <changelog author="mrueckert@suse.de" date="1527940800">- https://src.fedoraproject.org/rpms/opendkim/raw/master/f/opendkim.ticket35+37.patch
  allow building on newer distros (openssl 1.1 support)</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1594641600">- Use systemd_ordering instead of systemd_requires for container
- Update to opendkim 2.11.0-Beta2
  - Add support for ED25519 keys
  - Add compatibility with openssl-1.1.0
  - Feature request #190: Reject signature object requests
    where the domain name or selector includes non-printable
    characters.
  - Feature requrest #187: Add option to match subdomains when
    generating zone files.
  - Many bug fixes
  - Obsoletes opendkim.ticket35+37.patch
- Disable erlang, new erlang version seems to miss required files</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1594814400">- opendkim calls openssl, make sure the command is there</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Fix usage of %{_libexecdir} when %{_tmpfilesdir} was meant to be
  used.</changelog>
  <changelog author="Christian Wittmer &lt;chris@computersalat.de&gt;" date="1625572800">- add opendkim to Group unbound to be able to read TrustAnchorFile
- add postfix to Group opendkim to be able to read/write to opendkim.sock
- add %{_sysconfdir}/%{name}/keys dir
- change /var/run to /run wherever used
- rework opendkim-2.9.2_default_config.patch and renamed it to
  opendkim-default_config.patch</changelog>
  <changelog author="Togan Muftuoglu &lt;toganm@opensuse.org&gt;" date="1634212800">- Add cve-2020-12272.patch (CVE-2020-12272)
  * Confirm that the value of "d=" is properly formed, fixed
    upstream in commit 14d54524e0a97d3fe9b80441907d7e356c9ded04
- Add unbound-fix.patch
  * Plug memory leak in Unbound callback
    https://github.com/trusteddomainproject/OpenDKIM/pull/57</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634558400">- Added hardening to systemd service (bsc#1181400). Added patch:
  * harden_opendkim.service.patch
  Modified:
  * opendkim.service</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1697198400">- Add fix-RSA_sign-call.patch
  * Fix bsc#1216117
  * Fix call of RSA sign on big endian systems, patch origin:
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012506</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1707134400">- Add Provides for user/group needed by rpm 4.19</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="0497447b449fc48a13f938863fd8b9edc748846b21510e287aa1e7572a4862f7e97fdcf88e27ace19c0420009e878b6ae77f1b8c9443f4c81c93f06390d244ff" name="autoconf" arch="noarch">
  <version epoch="0" ver="2.72" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1610798400">- add autom4te-always-update-output-file.patch to fix testsuite
  failures
- handle-gettext-alone.patch: support GNU_GETTEXT alone being called
  again
- add prog-c99-fix-typo.patch: fix typo in C99 detection
- add restore-compatibility-gnu11.patch: restore compatibility in GNU11
  mode</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1612008000">- autoconf 2.71:
  * Compilers that support C99 but not C2011 are detected correctly
  * Compatibility improved with clang and Oracle C++
  * Compatibility restored with automake's rules for regenerating
    configure
  * Compatibility restored with old versions of std-gnu11.m4
- dropped upstream patches:
  * prog-c99-fix-typo.patch
  * restore-compatibility-gnu11.patch
  * autom4te-always-update-output-file.patch
  * handle-gettext-alone.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- use https urls</changelog>
  <changelog author="dmueller@suse.com" date="1648468800">- convert to use _multibuild
- fix keyring gpg validation</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1666872000">- fix testsuite failure by bash 5.2 update
  * [fix-testsuite-failures-with-bash-5.2.patch]</changelog>
  <changelog author="foss@grueninger.de" date="1703332800">- update to version 2.72
  * Support for ensuring time_t is Y2038-safe
    configure can now ensure that time_t can represent moments in time
    after 18 January 2038, i.e. 2**31 - 1 seconds after the Unix epoch.
    On most 64-bit systems this is true by default; the new feature
    is detection of systems where time_t is a 32-bit signed integer by
    default, *and* there is an alternative mode in which it is larger,
    in which case that mode will be enabled.
  * AC_USE_SYSTEM_EXTENSIONS now enables C23 Annex F extensions
    by defining __STDC_WANT_IEC_60559_EXT__.
  * Configure scripts no longer support pre-1989 C compilers.
  * Autoconf developers now need Perl 5.10 (2007) or later.
  * Autoconf users now need GNU M4 1.4.8 (2006) or later.
  * Some m4sh diversions have been renumbered.
  * AC_FUNC_GETGROUPS and AC_TYPE_GETGROUPS no longer run test programs.
  * All internal uses of AC_EGREP_CPP and AC_EGREP_HEADER have been removed.
- Update dependencies as recommendd to m4 1.4.16, Perl 5.10
- Drop patch autoreconf-ltdl.diff as similar code is part of upstream
- Drop patch fix-testsuite-failures-with-bash-5.2.patch, it is
  part of upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1703419200">- Use autosetup</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1707825600">- Re-add patch (bsc#1219035)
  * [autoreconf-ltdl.diff]
- Remove test with macro LARGEFILE and YEAR2038, broken for i586 arch. see
  https://git.savannah.gnu.org/cgit/autoconf.git/tree/NEWS#n194 (bsc#1219035)
  * [remove-largefile-test.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1714651200">- Fix AC_SYS_LARGEFILE doesn't honor AC_LANG setting and undo the removing of
  the largefile test. (bsc#1219035)
  + Port-AC_SYS_LARGEFILE-to-C.patch
  - remove-largefile-test.patch</changelog>
</package>
<package pkgid="50d5ea41cd02ebfc991457457649c19b8f950abba33517cd58623fc63a297a5f7a11044718d28d3e41f0ef74d996506b91e6f20ebab93ba58cfceaed32c07ab1" name="autoconf-archive" arch="noarch">
  <version epoch="0" ver="2023.02.20" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1490270400">- Update to version 2017.03.21:
  * Removed macros:
    + AX_CXX_COMPILER_VENDOR
    + AX_GCC_LIBRARIES_DIR
    + AX_GCC_VERSION,
    + AX_HAVE_OPENGL
  * Obsolete macros:
    + AX_DEFINE_SUB_PATH</changelog>
  <changelog author="astieger@suse.com" date="1507809600">- update to 2017.09.28:
  * New macros AX_PROG_HELP2MAN, AX_RECURSIVE_EVAL,
    AX_SUBDIRS_CONFIGURE, AX_ELISP, and AX_PROG_EMACS
  * updates to various macros</changelog>
  <changelog author="astieger@suse.com" date="1521288000">- update to 2018.03.13:
  * Add macros packages AX_R_PACKAGE and AX_PROG_DATE
  * updates for other macros
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1547467200">- update to 2019.01.06:
  * The macro AX_CODE_COVERAGE was modified to use
    AX_ADD_AM_MACRO_STATIC
  * various updates to multiple macros</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Drop info Requires(pre|post) and usage of install_info and
  install_info_delete in the pre/post scriptlets: info files are
  handled by file triggers.</changelog>
  <changelog author="dmueller@suse.com" date="1613908800">- update to 2021.02.19:
  * The macros AX_CHECK_PCRE2 and AX_PROG_ROBOT have been added. Many other
    macros have received updates.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644580800">- update to 2022.02.11:
  * AX_CC_FOR_BUILD was deprecated in favor of AX_PROG_CC_FOR_BUILD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662379200">- update to 2022.09.03:
  * AX_PYTHON_DEVEL: Improved Python version support
  * ax_boost_json: implement for Boost::JSON library
  * AX_LIB_MYSQL: try pkg-config before mysql_config
  * AX_LUA_HEADERS: update to use AC_COMPUTE_INT
  * ax_lib_netcdf4: enable NF_CONFIG run-time definition.
  * Make assembler-finding macros more portable
  * ax_prog_cc_for_build: Properly restore ac_cv_c_compiler_gnu</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- update to 2023.02.20:
  * This release contains fixes for multiple macros. In preparation
    for Clang 16 it contains multiple compatibility changes.</changelog>
</package>
<package pkgid="ee069601392130d72b6bf72a65abfdec88237f4227589e86c54c6be7cb0138cdebd7ebb4a194a81a0630819e3157d0f54c225d1e5212cc6f70cc431c35ffc8ef" name="autoconf-el" arch="noarch">
  <version epoch="0" ver="2.72" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1610798400">- add autom4te-always-update-output-file.patch to fix testsuite
  failures
- handle-gettext-alone.patch: support GNU_GETTEXT alone being called
  again
- add prog-c99-fix-typo.patch: fix typo in C99 detection
- add restore-compatibility-gnu11.patch: restore compatibility in GNU11
  mode</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1612008000">- autoconf 2.71:
  * Compilers that support C99 but not C2011 are detected correctly
  * Compatibility improved with clang and Oracle C++
  * Compatibility restored with automake's rules for regenerating
    configure
  * Compatibility restored with old versions of std-gnu11.m4
- dropped upstream patches:
  * prog-c99-fix-typo.patch
  * restore-compatibility-gnu11.patch
  * autom4te-always-update-output-file.patch
  * handle-gettext-alone.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- use https urls</changelog>
  <changelog author="dmueller@suse.com" date="1648468800">- convert to use _multibuild
- fix keyring gpg validation</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1666872000">- fix testsuite failure by bash 5.2 update
  * [fix-testsuite-failures-with-bash-5.2.patch]</changelog>
  <changelog author="foss@grueninger.de" date="1703332800">- update to version 2.72
  * Support for ensuring time_t is Y2038-safe
    configure can now ensure that time_t can represent moments in time
    after 18 January 2038, i.e. 2**31 - 1 seconds after the Unix epoch.
    On most 64-bit systems this is true by default; the new feature
    is detection of systems where time_t is a 32-bit signed integer by
    default, *and* there is an alternative mode in which it is larger,
    in which case that mode will be enabled.
  * AC_USE_SYSTEM_EXTENSIONS now enables C23 Annex F extensions
    by defining __STDC_WANT_IEC_60559_EXT__.
  * Configure scripts no longer support pre-1989 C compilers.
  * Autoconf developers now need Perl 5.10 (2007) or later.
  * Autoconf users now need GNU M4 1.4.8 (2006) or later.
  * Some m4sh diversions have been renumbered.
  * AC_FUNC_GETGROUPS and AC_TYPE_GETGROUPS no longer run test programs.
  * All internal uses of AC_EGREP_CPP and AC_EGREP_HEADER have been removed.
- Update dependencies as recommendd to m4 1.4.16, Perl 5.10
- Drop patch autoreconf-ltdl.diff as similar code is part of upstream
- Drop patch fix-testsuite-failures-with-bash-5.2.patch, it is
  part of upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1703419200">- Use autosetup</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1707825600">- Re-add patch (bsc#1219035)
  * [autoreconf-ltdl.diff]
- Remove test with macro LARGEFILE and YEAR2038, broken for i586 arch. see
  https://git.savannah.gnu.org/cgit/autoconf.git/tree/NEWS#n194 (bsc#1219035)
  * [remove-largefile-test.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1714651200">- Fix AC_SYS_LARGEFILE doesn't honor AC_LANG setting and undo the removing of
  the largefile test. (bsc#1219035)
  + Port-AC_SYS_LARGEFILE-to-C.patch
  - remove-largefile-test.patch</changelog>
</package>
<package pkgid="337f8dc8dce073e1f9a060819ba1e856fc4cb9b237d1a9d9618fab139d217f7df54732365ce92b25364bed9cbcee82a9a37b57b120ce80cf8523c2fb92f93471" name="autoconf213" arch="noarch">
  <version epoch="0" ver="2.13" rel="160000.2.2"/>
  <changelog author="wr@rosenauer.org" date="1219406400">- initial autoconf 2.13 package based on Fedora's package</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342699200">- buildrequire makeinfo</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Move %install_info_delete from postun to preun: we need to handle
  the case while the file is still present.
- Fix filename of info files for post/preun: autoconf213.info.gz.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4: do not rely on the build system to
  contain this dependency for us.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="aa5dfce2f2b97803be51dececee40b50652824b53c2c9d99b3ea9184a515d69286f99201380ed30386213f205810b89c950e5abcb28214b82903508c54538726" name="autocutsel" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="bp160.1.13"/>
  <changelog author="mhopf@novell.com" date="1303992000">- Initial release</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1328788800">- fixed buildreqs due to splitted xorg-x11-libs</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Update dependencies to what is required by configure.ac</changelog>
  <changelog author="sndirsch@suse.com" date="1391688000">- added missing LICENSE file</changelog>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update to version 0.10.0
  + set WM_NAME, _NET_WM_NAME, and _NET_WM_PID
  + support for UTF-8 strings
  + minor fixes
- Use download Url as source</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- Update to version 0.10.1
  + fixed allocation error</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1732622400">- add man pages from Debian
- changed LICENSE file from %doc to %license</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1732708800">- do not compress the manual page manually; it's done by a brp
  script during build automatically giving us more flexibility</changelog>
</package>
<package pkgid="4c7de81d01cc95022dd784ab22ec64d56cce63973807292fd80722a36dc638d8ae2c622fce52a0d0bb9a18558058023c62feadff1375434c4a524846cbd9e32f" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.9" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1663070400">- Move dbus-1 system.d file to /usr (bsc#1203362)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1681732800">- Add autofs-suse-manpage-remove-initdir.patch
  Removes references of initdir from man pages (bsc#1207881)</changelog>
  <changelog author="ddiss@suse.com" date="1682164800">- autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  Fix off-by-one error in recursive map handling. (bsc#1209653)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1704974400">- Removed following upstreamed patches because of upgrade:
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
  * 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  * 0002-Fix-monotonic_elapsed.patch Deleted
  * 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch Deleted
  * 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
  * 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  * autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  * autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707566400">- update to 5.1.9 (bsc#1219508)
  * fix kernel mount status notification.
  * fix fedfs build flags.
  * fix set open file limit.
  * improve descriptor open error reporting.
  * fix root offset error handling.
  * fix fix root offset error handling.
  * fix nonstrict fail handling of last offset mount.
  * dont fail on duplicate offset entry tree add.
  * fix loop under run in cache_get_offset_parent().
  * bailout on rpc systemerror.
  * fix nfsv4 only mounts should not use rpcbind.
  * simplify cache_add() a little.
  * fix use after free in tree_mapent_delete_offset_tree().
  * fix memory leak in xdr_exports().
  * avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
  * fix sysconf(3) return handling.
  * remove nonstrict parameter from tree_mapent_umount_offsets().
  * fix handling of incorrect return from umount_ent().
  * dont use initgroups() at spawn.
  * fix bashism in configure.
  * musl: fix missing include in hash.h.
  * musl: define fallback dummy NSS config path
  * musl: avoid internal stat.h definitions.
  * musl: add missing include to hash.h for _WORDSIZE.
  * musl: add missing include to log.h for pid_t.
  * musl: define _SWORD_TYPE.
  * add autofs_strerror_r() helper for musl.
  * update configure.
  * handle innetgr() not present in musl.
  * fix missing unlock in sasl_do_kinit_ext_cc().
  * fix a couple of null cache locking problems.
  * restore gcc flags after autoconf Kerberos 5 check.
  * prepare for OpenLDAP SASL binding.
  * let OpenLDAP handle SASL binding.
  * configure: LDAP function checks ignore implicit declarations.
  * improve debug logging of LDAP binds.
  * improve debug logging of SASL binds.
  * internal SASL logging only in debug log mode.
  * more comprehensive verbose logging for LDAP maps.
  * fix invalid tsv access.
  * support SCRAM for SASL binding.
  * ldap_sasl_interactive_bind() needs credentials for auto-detection.
  * fix autofs regression due to positive_timeout.
  * fix parse module instance mutex naming.
  * serialise lookup module open and reinit.
  * coverity fix for invalid access.
  * fix hosts map deadlock on restart.
  * fix deadlock with hosts map reload.
  * fix memory leak in update_hosts_mounts().
  * fix minus only option handling in concat_options().
  * fix incorrect path for is_mounted() in try_remount().
  * fix additional tsv invalid access.
  * fix use_ignore_mount_option description.
  * include addtional log info for mounts.
  * fail on empty replicated host name.
  * improve handling of ENOENT in sss setautomntent().
  * don't immediately call function when waiting.
  * define LDAP_DEPRECATED during LDAP configure check.
  * fix return status of mount_autofs().
  * don't close lookup at umount.
  * fix deadlock in lookups.
  * dont delay expire.
  * make amd mapent search function name clear.
  * rename statemachine() to signal_handler().
  * make signal handling consistent.
  * eliminate last remaining state_pipe usage.
  * add function master_find_mapent_by_devid().
  * use device id to locate autofs_point when setting log priotity.
  * add command pipe handling functions.
  * switch to application wide command pipe.
  * get rid of unused field submnt_count.
  * fix mount tree startup reconnect.
  * fix unterminated read in handle_cmd_pipe_fifo_message().
  * fix memory leak in sasl_do_kinit()
  * fix fix mount tree startup reconnect.
  * fix amd selector function matching.
  * get rid entry thid field.
  * continue expire immediately after submount check.
  * eliminate realpath from mount of submount.
  * eliminate root param from autofs mount and umount.
  * remove redundant fstat from do_mount_direct().
  * get rid of strlen call in handle_packet_missing_direct().
  * remove redundant stat call in lookup_ghost().
  * set mapent dev and ino before adding to index.
  * change to use printf functions in amd parser.
  * dont call umount_subtree_mounts() on parent at umount.
  * dont take parent source lock at mount shutdown.
  * fix possible use after free in handle_mounts_exit().
  * make submount cleanup the same as top level mounts.
  * add soucre parameter to module functions.
  * add ioctlfd open helper.
  * make open files limit configurable.
  * use correct reference for IN6 macro call.
  * dont probe interface that cant send packet.
  * fix some sss error return cases.
  * fix incorrect matching of cached wildcard key.
  * fix expire retry looping.
  * allow -null map in indirect maps.
  * fix multi-mount check.
  * fix let OpenLDAP handle SASL binding.
  * always recreate credential cache.
  * fix ldap_parse_page_control() check.
  * fix typo in create_cmd_pipe_fifo().
  * add null check in master_kill().
  * be more careful with cmd pipe at exit.
  * rename configure.in to configure.ac.
  * update autoconf macros.
  * update autoconf release.
  * update autofs release.
- drop autofs-5-1-3-fix-unset-tsd-group-name-handling.patch, upstream
  as ab8ca82 ("autofs-5.1.3 - fix unset tsd group name handling")
- drop autofs-Test-TCP-request-correctly-in-nfs_get_info.patch,
  superseded by 80845bb ("autofs-5.1.8 - fix nfsv4 only mounts should
  not use rpcbind")
- rebase autofs-5.1.1-dbus-udisks-monitor.patch atop 37fda2c
  ("autofs-5.1.8 - add soucre parameter to module functions")</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ddiss@suse.com" date="1710936000">- Fix -Werror=incompatible-pointer-types issues (bsc#1221682)
  * Add autofs-5.1.9-fix-ldap_parse_page_control-check.patch
  * Add autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch</changelog>
  <changelog author="ddiss@suse.com" date="1717416000">- Fix xmlStructuredErrorFunc callback parameter type (bsc#1221682)
  * Refresh autofs-5.1.1-dbus-udisks-monitor.patch
- Use upstream sasl_callback_t patch
  * Remove autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch
  * Add autofs-5.1.9-Fix-incompatible-function-pointer-types.patch</changelog>
  <changelog author="kukuk@suse.com" date="1730808000">- 5.1.8 removed rpcgen dependency, remove it from spec file, too</changelog>
  <changelog author="rgoldwyn@suse.com" date="1736856000">- Remove libnsl-devel dependency to remove NSL support</changelog>
</package>
<package pkgid="2cad2a62304cc60f2e57e31aef8e8aeab1b408cf857f2ab3352fc3c0ed8859decbf77cca05881b63b5037df4998ec57bd199da0bb4b937293febff8efb419235" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.9" rel="160000.3.1"/>
  <changelog author="ddiss@suse.com" date="1682164800">- autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  Fix off-by-one error in recursive map handling. (bsc#1209653)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1704974400">- Removed following upstreamed patches because of upgrade:
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
  * 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  * 0002-Fix-monotonic_elapsed.patch Deleted
  * 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch Deleted
  * 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
  * 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  * autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  * autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707566400">- update to 5.1.9 (bsc#1219508)
  * fix kernel mount status notification.
  * fix fedfs build flags.
  * fix set open file limit.
  * improve descriptor open error reporting.
  * fix root offset error handling.
  * fix fix root offset error handling.
  * fix nonstrict fail handling of last offset mount.
  * dont fail on duplicate offset entry tree add.
  * fix loop under run in cache_get_offset_parent().
  * bailout on rpc systemerror.
  * fix nfsv4 only mounts should not use rpcbind.
  * simplify cache_add() a little.
  * fix use after free in tree_mapent_delete_offset_tree().
  * fix memory leak in xdr_exports().
  * avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
  * fix sysconf(3) return handling.
  * remove nonstrict parameter from tree_mapent_umount_offsets().
  * fix handling of incorrect return from umount_ent().
  * dont use initgroups() at spawn.
  * fix bashism in configure.
  * musl: fix missing include in hash.h.
  * musl: define fallback dummy NSS config path
  * musl: avoid internal stat.h definitions.
  * musl: add missing include to hash.h for _WORDSIZE.
  * musl: add missing include to log.h for pid_t.
  * musl: define _SWORD_TYPE.
  * add autofs_strerror_r() helper for musl.
  * update configure.
  * handle innetgr() not present in musl.
  * fix missing unlock in sasl_do_kinit_ext_cc().
  * fix a couple of null cache locking problems.
  * restore gcc flags after autoconf Kerberos 5 check.
  * prepare for OpenLDAP SASL binding.
  * let OpenLDAP handle SASL binding.
  * configure: LDAP function checks ignore implicit declarations.
  * improve debug logging of LDAP binds.
  * improve debug logging of SASL binds.
  * internal SASL logging only in debug log mode.
  * more comprehensive verbose logging for LDAP maps.
  * fix invalid tsv access.
  * support SCRAM for SASL binding.
  * ldap_sasl_interactive_bind() needs credentials for auto-detection.
  * fix autofs regression due to positive_timeout.
  * fix parse module instance mutex naming.
  * serialise lookup module open and reinit.
  * coverity fix for invalid access.
  * fix hosts map deadlock on restart.
  * fix deadlock with hosts map reload.
  * fix memory leak in update_hosts_mounts().
  * fix minus only option handling in concat_options().
  * fix incorrect path for is_mounted() in try_remount().
  * fix additional tsv invalid access.
  * fix use_ignore_mount_option description.
  * include addtional log info for mounts.
  * fail on empty replicated host name.
  * improve handling of ENOENT in sss setautomntent().
  * don't immediately call function when waiting.
  * define LDAP_DEPRECATED during LDAP configure check.
  * fix return status of mount_autofs().
  * don't close lookup at umount.
  * fix deadlock in lookups.
  * dont delay expire.
  * make amd mapent search function name clear.
  * rename statemachine() to signal_handler().
  * make signal handling consistent.
  * eliminate last remaining state_pipe usage.
  * add function master_find_mapent_by_devid().
  * use device id to locate autofs_point when setting log priotity.
  * add command pipe handling functions.
  * switch to application wide command pipe.
  * get rid of unused field submnt_count.
  * fix mount tree startup reconnect.
  * fix unterminated read in handle_cmd_pipe_fifo_message().
  * fix memory leak in sasl_do_kinit()
  * fix fix mount tree startup reconnect.
  * fix amd selector function matching.
  * get rid entry thid field.
  * continue expire immediately after submount check.
  * eliminate realpath from mount of submount.
  * eliminate root param from autofs mount and umount.
  * remove redundant fstat from do_mount_direct().
  * get rid of strlen call in handle_packet_missing_direct().
  * remove redundant stat call in lookup_ghost().
  * set mapent dev and ino before adding to index.
  * change to use printf functions in amd parser.
  * dont call umount_subtree_mounts() on parent at umount.
  * dont take parent source lock at mount shutdown.
  * fix possible use after free in handle_mounts_exit().
  * make submount cleanup the same as top level mounts.
  * add soucre parameter to module functions.
  * add ioctlfd open helper.
  * make open files limit configurable.
  * use correct reference for IN6 macro call.
  * dont probe interface that cant send packet.
  * fix some sss error return cases.
  * fix incorrect matching of cached wildcard key.
  * fix expire retry looping.
  * allow -null map in indirect maps.
  * fix multi-mount check.
  * fix let OpenLDAP handle SASL binding.
  * always recreate credential cache.
  * fix ldap_parse_page_control() check.
  * fix typo in create_cmd_pipe_fifo().
  * add null check in master_kill().
  * be more careful with cmd pipe at exit.
  * rename configure.in to configure.ac.
  * update autoconf macros.
  * update autoconf release.
  * update autofs release.
- drop autofs-5-1-3-fix-unset-tsd-group-name-handling.patch, upstream
  as ab8ca82 ("autofs-5.1.3 - fix unset tsd group name handling")
- drop autofs-Test-TCP-request-correctly-in-nfs_get_info.patch,
  superseded by 80845bb ("autofs-5.1.8 - fix nfsv4 only mounts should
  not use rpcbind")
- rebase autofs-5.1.1-dbus-udisks-monitor.patch atop 37fda2c
  ("autofs-5.1.8 - add soucre parameter to module functions")</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ddiss@suse.com" date="1710936000">- Fix -Werror=incompatible-pointer-types issues (bsc#1221682)
  * Add autofs-5.1.9-fix-ldap_parse_page_control-check.patch
  * Add autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch</changelog>
  <changelog author="ddiss@suse.com" date="1717416000">- Fix xmlStructuredErrorFunc callback parameter type (bsc#1221682)
  * Refresh autofs-5.1.1-dbus-udisks-monitor.patch
- Use upstream sasl_callback_t patch
  * Remove autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch
  * Add autofs-5.1.9-Fix-incompatible-function-pointer-types.patch</changelog>
  <changelog author="kukuk@suse.com" date="1730808000">- 5.1.8 removed rpcgen dependency, remove it from spec file, too</changelog>
  <changelog author="rgoldwyn@suse.com" date="1736856000">- Remove libnsl-devel dependency to remove NSL support</changelog>
  <changelog author="ddiss@suse.com" date="1752667200">- Fix autofs-5.1.1-dbus-udisks-monitor.patch (bsc#1246612) to account for:
  * d2feac6784b6 autofs-5.1.6 - make autofs.a a shared library
  * bcd8e1b642e9 autofs-5.0.7 - use LIBS for link libraries</changelog>
  <changelog author="ddiss@suse.com" date="1758196800">- Link against ldap.so instead of ldap_r.so; the former now provides
  thread-safety and the latter is a symlink which may not exist
  (bsc#1249966)
  * drop autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
</package>
<package pkgid="026e134f45bd001edc30b9f4078dd581ee88adaa402d7b473561b56d636aa310054268f9ca9faf4442a1f8a77739f077fb44fa04a0d88f14748dc32e68b21ad0" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.9" rel="160000.4.1"/>
  <changelog author="ddiss@suse.com" date="1707566400">- update to 5.1.9 (bsc#1219508)
  * fix kernel mount status notification.
  * fix fedfs build flags.
  * fix set open file limit.
  * improve descriptor open error reporting.
  * fix root offset error handling.
  * fix fix root offset error handling.
  * fix nonstrict fail handling of last offset mount.
  * dont fail on duplicate offset entry tree add.
  * fix loop under run in cache_get_offset_parent().
  * bailout on rpc systemerror.
  * fix nfsv4 only mounts should not use rpcbind.
  * simplify cache_add() a little.
  * fix use after free in tree_mapent_delete_offset_tree().
  * fix memory leak in xdr_exports().
  * avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
  * fix sysconf(3) return handling.
  * remove nonstrict parameter from tree_mapent_umount_offsets().
  * fix handling of incorrect return from umount_ent().
  * dont use initgroups() at spawn.
  * fix bashism in configure.
  * musl: fix missing include in hash.h.
  * musl: define fallback dummy NSS config path
  * musl: avoid internal stat.h definitions.
  * musl: add missing include to hash.h for _WORDSIZE.
  * musl: add missing include to log.h for pid_t.
  * musl: define _SWORD_TYPE.
  * add autofs_strerror_r() helper for musl.
  * update configure.
  * handle innetgr() not present in musl.
  * fix missing unlock in sasl_do_kinit_ext_cc().
  * fix a couple of null cache locking problems.
  * restore gcc flags after autoconf Kerberos 5 check.
  * prepare for OpenLDAP SASL binding.
  * let OpenLDAP handle SASL binding.
  * configure: LDAP function checks ignore implicit declarations.
  * improve debug logging of LDAP binds.
  * improve debug logging of SASL binds.
  * internal SASL logging only in debug log mode.
  * more comprehensive verbose logging for LDAP maps.
  * fix invalid tsv access.
  * support SCRAM for SASL binding.
  * ldap_sasl_interactive_bind() needs credentials for auto-detection.
  * fix autofs regression due to positive_timeout.
  * fix parse module instance mutex naming.
  * serialise lookup module open and reinit.
  * coverity fix for invalid access.
  * fix hosts map deadlock on restart.
  * fix deadlock with hosts map reload.
  * fix memory leak in update_hosts_mounts().
  * fix minus only option handling in concat_options().
  * fix incorrect path for is_mounted() in try_remount().
  * fix additional tsv invalid access.
  * fix use_ignore_mount_option description.
  * include addtional log info for mounts.
  * fail on empty replicated host name.
  * improve handling of ENOENT in sss setautomntent().
  * don't immediately call function when waiting.
  * define LDAP_DEPRECATED during LDAP configure check.
  * fix return status of mount_autofs().
  * don't close lookup at umount.
  * fix deadlock in lookups.
  * dont delay expire.
  * make amd mapent search function name clear.
  * rename statemachine() to signal_handler().
  * make signal handling consistent.
  * eliminate last remaining state_pipe usage.
  * add function master_find_mapent_by_devid().
  * use device id to locate autofs_point when setting log priotity.
  * add command pipe handling functions.
  * switch to application wide command pipe.
  * get rid of unused field submnt_count.
  * fix mount tree startup reconnect.
  * fix unterminated read in handle_cmd_pipe_fifo_message().
  * fix memory leak in sasl_do_kinit()
  * fix fix mount tree startup reconnect.
  * fix amd selector function matching.
  * get rid entry thid field.
  * continue expire immediately after submount check.
  * eliminate realpath from mount of submount.
  * eliminate root param from autofs mount and umount.
  * remove redundant fstat from do_mount_direct().
  * get rid of strlen call in handle_packet_missing_direct().
  * remove redundant stat call in lookup_ghost().
  * set mapent dev and ino before adding to index.
  * change to use printf functions in amd parser.
  * dont call umount_subtree_mounts() on parent at umount.
  * dont take parent source lock at mount shutdown.
  * fix possible use after free in handle_mounts_exit().
  * make submount cleanup the same as top level mounts.
  * add soucre parameter to module functions.
  * add ioctlfd open helper.
  * make open files limit configurable.
  * use correct reference for IN6 macro call.
  * dont probe interface that cant send packet.
  * fix some sss error return cases.
  * fix incorrect matching of cached wildcard key.
  * fix expire retry looping.
  * allow -null map in indirect maps.
  * fix multi-mount check.
  * fix let OpenLDAP handle SASL binding.
  * always recreate credential cache.
  * fix ldap_parse_page_control() check.
  * fix typo in create_cmd_pipe_fifo().
  * add null check in master_kill().
  * be more careful with cmd pipe at exit.
  * rename configure.in to configure.ac.
  * update autoconf macros.
  * update autoconf release.
  * update autofs release.
- drop autofs-5-1-3-fix-unset-tsd-group-name-handling.patch, upstream
  as ab8ca82 ("autofs-5.1.3 - fix unset tsd group name handling")
- drop autofs-Test-TCP-request-correctly-in-nfs_get_info.patch,
  superseded by 80845bb ("autofs-5.1.8 - fix nfsv4 only mounts should
  not use rpcbind")
- rebase autofs-5.1.1-dbus-udisks-monitor.patch atop 37fda2c
  ("autofs-5.1.8 - add soucre parameter to module functions")</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ddiss@suse.com" date="1710936000">- Fix -Werror=incompatible-pointer-types issues (bsc#1221682)
  * Add autofs-5.1.9-fix-ldap_parse_page_control-check.patch
  * Add autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch</changelog>
  <changelog author="ddiss@suse.com" date="1717416000">- Fix xmlStructuredErrorFunc callback parameter type (bsc#1221682)
  * Refresh autofs-5.1.1-dbus-udisks-monitor.patch
- Use upstream sasl_callback_t patch
  * Remove autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch
  * Add autofs-5.1.9-Fix-incompatible-function-pointer-types.patch</changelog>
  <changelog author="kukuk@suse.com" date="1730808000">- 5.1.8 removed rpcgen dependency, remove it from spec file, too</changelog>
  <changelog author="rgoldwyn@suse.com" date="1736856000">- Remove libnsl-devel dependency to remove NSL support</changelog>
  <changelog author="ddiss@suse.com" date="1752667200">- Fix autofs-5.1.1-dbus-udisks-monitor.patch (bsc#1246612) to account for:
  * d2feac6784b6 autofs-5.1.6 - make autofs.a a shared library
  * bcd8e1b642e9 autofs-5.0.7 - use LIBS for link libraries</changelog>
  <changelog author="ddiss@suse.com" date="1758196800">- Link against ldap.so instead of ldap_r.so; the former now provides
  thread-safety and the latter is a symlink which may not exist
  (bsc#1249966)
  * drop autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="kukuk@suse.com" date="1758715200">- Drop rcautofs symlink [jsc#PED-266]</changelog>
  <changelog author="songchuan.kang@suse.com" date="1758801600">- Modified NetworkManager-autofs: (bsc#1250091)
  * don't reload autofs.service on loopback interface changes
  * add --no-block option to request asynchronous behavior</changelog>
</package>
<package pkgid="7e4e1ea958e83ad99798b138078dd2d7095b905d460b414c97437ef6283a131320956dd07319e284b1fdd507421bc87d42bf142a2df0d3256a7ddf34212b8843" name="autogen" arch="x86_64">
  <version epoch="0" ver="5.18.16" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1533038400">- Don't require libopts-devel from autogen
- Rename libopts-devel to autoopts
- Move all autoopts related files to autoopts
- Don't run autoreconf
- Don't remove -Werror
- sprintf-overflow.patch: Fix sprintf overflow
- autogen-guile-2.2.patch: properly add support for guile 2.2
- autogen-constant-timeout.patch: remove, use --enable-timeout
  instead</changelog>
  <changelog author="schwab@suse.de" date="1539691200">- Update to version 5.8.16
  - Enable compiling with Guile 2.2
- autogen-guile-2.2.patch: removed
- installable-programs.patch: don't make programs uninstallable
- Rediff remaining patches</changelog>
  <changelog author="jbrielmaier@suse.de" date="1542801600">- BuildRequire guile-devel to make transistion to Guile 2.2 smooth</changelog>
  <changelog author="schwab@suse.de" date="1542888000">- Remove invalid signature file and keyring</changelog>
  <changelog author="mliska@suse.cz" date="1553515200">- Add gcc9-fix-wrestrict.patch in order to fix
  bsc#1125772.</changelog>
  <changelog author="schwab@suse.de" date="1579608000">- guile-version.patch: Allow building with guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1584964800">- guile-version.patch: Allow all patchlevel versions of guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1589198400">- Increase default timeout
- Run testsuite in verbose mode</changelog>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Set MAN_PAGE_DATE to normalize man page date (boo#1047218)</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Add upstream patch autogen-avoid-GCC-code-analysis-bug.patch
  in order to support -D_FORTIFY_SOURCE=3 with GCC 12.
- Use autosetup.</changelog>
</package>
<package pkgid="d5e2bfd3110b515bc7e76c05edd000bd98b87ed03a3134b2a2ebf3263cbd9acad23a0aa4b76259d322fda33eba8ee11741004318dd873df835009eb9374b2090" name="autogen" arch="x86_64">
  <version epoch="0" ver="5.18.16" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1539691200">- Update to version 5.8.16
  - Enable compiling with Guile 2.2
- autogen-guile-2.2.patch: removed
- installable-programs.patch: don't make programs uninstallable
- Rediff remaining patches</changelog>
  <changelog author="jbrielmaier@suse.de" date="1542801600">- BuildRequire guile-devel to make transistion to Guile 2.2 smooth</changelog>
  <changelog author="schwab@suse.de" date="1542888000">- Remove invalid signature file and keyring</changelog>
  <changelog author="mliska@suse.cz" date="1553515200">- Add gcc9-fix-wrestrict.patch in order to fix
  bsc#1125772.</changelog>
  <changelog author="schwab@suse.de" date="1579608000">- guile-version.patch: Allow building with guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1584964800">- guile-version.patch: Allow all patchlevel versions of guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1589198400">- Increase default timeout
- Run testsuite in verbose mode</changelog>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Set MAN_PAGE_DATE to normalize man page date (boo#1047218)</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Add upstream patch autogen-avoid-GCC-code-analysis-bug.patch
  in order to support -D_FORTIFY_SOURCE=3 with GCC 12.
- Use autosetup.</changelog>
  <changelog author="pgajdos@suse.com" date="1756123200">- security update
- added patches
  CVE-2025-8746 [bsc#1247921], improper input validation and memory bounds checking when processing certain malformed configuration files
  + autogen-CVE-2025-8746.patch</changelog>
</package>
<package pkgid="b8b86297a036d18d4d82489cff1e26ee84a9ad4f49e9edf51faaed3901eb1d998451d155048205001c90972eabea18dbd4e4a09c228c7805adf334612e8e1ac4" name="autojump" arch="noarch">
  <version epoch="0" ver="22.5.3" rel="bp160.1.11"/>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Initial package.</changelog>
  <changelog author="Dilawar Singh &lt;dilawar.s.rajput@gmail.com&gt;" date="1555156800">- Bumped version to 22.5.3.
- Upstream has no changelog.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- do not require pytest-mock for build
- added patches
  fix https://github.com/wting/autojump/pull/648
  + autojump-no-mock.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="54beda2efb01bf0254df4442c2761e3e06eee86d2ebe1d8f6b32bf8c9c3f0914797e42fa97a12c01358a4fd44729a69d8b69f1802c812d0a6f2d90676b225175" name="automake" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1615550400">- move license to licensedir</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.16.5:
  - PYTHON_PREFIX and PYTHON_EXEC_PREFIX are now set according to
    Python's sys.* values only if the new configure option
  - -with-python-sys-prefix is specified. Otherwise, GNU default values
    are used, as in the past. (The change in 1.16.3 was too incompatible.)
  - consistently depend on install-libLTLIBRARIES.
  - use const for yyerror declaration in bison/yacc tests.
  - Common top-level files can be provided as .md; the non-md version is
    used if both are present:
    AUTHORS ChangeLog INSTALL NEWS README README-alpha THANKS
  - CTAGS, ETAGS, SCOPE variables can be set via configure.
  - Silent make output for custom link commands.
  - New option "no-dist-built-sources" skips generating $(BUILT_SOURCES)
    before building the tarball as part of "make dist", that is,
    omits the dependency of $(distdir): $(BUILT_SOURCES).
  - automake output more reproducible.
  - test-driver less likely to clash with tests writing to the same file.
  - DejaGnu tests always use the directory name, testsuite/, for
    compatibility with the newer dejagnu-1.6.3 and with prior versions.
  - config.sub and config.guess updates include restoration of `...`
    for maximum portability.
- refresh automake-suse-vendor.patch
- drop fix-testsuite-failures-with-autoconf270.patch (upstream)
- drop automake-reproducible.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- update automake.keyring: use release-team keyring
- don't reference source URL when the linked sources change over time</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- switch to python3 testing for testsuite, we no longer care
  about python 2.x testresults</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1715083200">- Fix testsuite with gcc 14
  + tests-Fix-type-defaults-error-in-link_cond.patch
  + tests-avoid-implicit-function-declaration-in-depcomp.patch
  + tests-avoid-implicit-function-declarations.patch
  + tests-don-t-try-to-prevent-flex-from-including-unist.patch</changelog>
  <changelog author="foss@grueninger.de" date="1720785600">- update to 1.17
  - AM_PATH_PYTHON will, after checking "python", prefer any Python 3
    version (latest versions checked first) over any Python 2
    version. If a specific version of Python 2 is still needed, the
    $PYTHON variable should be set beforehand.
  - AM_PATH_PYTHON will also search for Python versions 3.20 through 3.10.
    It previously searched for 3.9 through 3.0.
  - RANLIB may be overridden on a per-target basis.
  - AM_TEXI2FLAGS may be defined to pass extra flags to TEXI2DVI &amp; TEXI2PDF.
  - New option "posix" to emit the special target .POSIX for make.
  - Systems with non-POSIX "rm -f" behavior are now supported, and the
    prior intent to drop support for them has been reversed.
    The ACCEPT_INFERIOR_RM_PROGRAM setting no longer exists.
  - Variables using escaped \# will trigger portability warnings, but be
    retained when appended.  GNU Make &amp; BSD Makes are known to support it.
  - GNU Make's default pattern rules are disabled, for speed and debugging.
    (.SUFFIXES was already cleared.)
  - For Texinfo documents, if a .texi.in file exists, but no .texi, the
    .texi.in will be read. Texinfo source files need not be present at
    all, and if present, need not contain @setfilename. Then the file name
    as given in the Makefile.am will be used.  If @setfilename is present,
    it should be the basename of the Texinfo file, extended with .info.
  - aclocal has a new option --aclocal-path to override $ACLOCAL_PATH.
  - The missing script also supports autoreconf, autogen, and perl.
  - test-suite.log now contains basic system information, and the
    console message about bug reporting on failure has a bit more detail.
  - When using the (default) "parallel" test driver, you can now omit the
    output of skipped tests from test-suite.log by defining the
    variable IGNORE_SKIPPED_LOGS to a non-empty value. (bug#71422)
- Drop patches now included in 1.17
  * tests-Fix-type-defaults-error-in-link_cond.patch
  * tests-avoid-implicit-function-declaration-in-depcomp.patch
  * tests-don-t-try-to-prevent-flex-from-including-unist.patch
  * tests-avoid-implicit-function-declarations.patch
- Drop patch automake-require_file.patch with different upstream fix
- Drop no longer necessary patch
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch
- Ajust patches automake-suse-vendor.patch and
  0001-correct-parameter-parsing-in-test-driver-script.patch</changelog>
  <changelog author="foss@grueninger.de" date="1748433600">- update to 1.18
  * Default tar format is now ustar, mainly to support longer
    filenames; the tar-v7 and other explicit options to force a
    particular tar format are unchanged and still override the
    default.
  * The mdate-sh auxiliary script generally used with Texinfo now
    uses SOURCE_DATE_EPOCH, if set, instead of the source file's
    mtime.
  * New option dist-bzip3 for bzip3 compression of distributions.
  * New option --stderr-prefix for tap-driver.sh, to prefix each
    line of stderr from a test script with a given string.
  * Support for Algol 68 added, based on the GNU Algol 68
    compiler.
- Do not call bootstrap script, as it triggers an texinfo run.</changelog>
  <changelog author="foss@grueninger.de" date="1748952000">- test-driver don't use equal sign for assigning parameter, upstream well
  documented to use only spaces. See commit:
  6cfd9401c5d6b4a6fce1318d50a6ec34fdd4799a
  * Drop 0001-correct-parameter-parsing-in-test-driver-script.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1749038400">- Get the latest automake.keyring from Savannah, including new key used to
  sign the sources.</changelog>
  <changelog author="foss@grueninger.de" date="1751025600">- update to 1.18.1
  - Undo change to mdate-sh; once again, it does not look at
    SOURCE_DATE_EPOCH. This change was a misunderstanding that causes
    problems, not fixes, for reproducible builds.
  - Improve debuggability of installcheck failures.</changelog>
</package>
<package pkgid="6609fab92968e168d6ead81fc2e024b2ffdb61ce9b89662e696499ab899e2b50aecc022934df25d1f1ceb58c038ae2095ed0fce1a99c0e570019e19fe2b5cbcd" name="autoopts" arch="x86_64">
  <version epoch="0" ver="5.18.16" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1533038400">- Don't require libopts-devel from autogen
- Rename libopts-devel to autoopts
- Move all autoopts related files to autoopts
- Don't run autoreconf
- Don't remove -Werror
- sprintf-overflow.patch: Fix sprintf overflow
- autogen-guile-2.2.patch: properly add support for guile 2.2
- autogen-constant-timeout.patch: remove, use --enable-timeout
  instead</changelog>
  <changelog author="schwab@suse.de" date="1539691200">- Update to version 5.8.16
  - Enable compiling with Guile 2.2
- autogen-guile-2.2.patch: removed
- installable-programs.patch: don't make programs uninstallable
- Rediff remaining patches</changelog>
  <changelog author="jbrielmaier@suse.de" date="1542801600">- BuildRequire guile-devel to make transistion to Guile 2.2 smooth</changelog>
  <changelog author="schwab@suse.de" date="1542888000">- Remove invalid signature file and keyring</changelog>
  <changelog author="mliska@suse.cz" date="1553515200">- Add gcc9-fix-wrestrict.patch in order to fix
  bsc#1125772.</changelog>
  <changelog author="schwab@suse.de" date="1579608000">- guile-version.patch: Allow building with guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1584964800">- guile-version.patch: Allow all patchlevel versions of guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1589198400">- Increase default timeout
- Run testsuite in verbose mode</changelog>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Set MAN_PAGE_DATE to normalize man page date (boo#1047218)</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Add upstream patch autogen-avoid-GCC-code-analysis-bug.patch
  in order to support -D_FORTIFY_SOURCE=3 with GCC 12.
- Use autosetup.</changelog>
</package>
<package pkgid="5e08b7182a7d1858296f8aacb42319bdc333f2aa33e6d4811d23f40d9be9de3b16f4f94edbdda9166c73f56982b01b0befe821b126835ea1cdc897a527053dec" name="autoopts" arch="x86_64">
  <version epoch="0" ver="5.18.16" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1539691200">- Update to version 5.8.16
  - Enable compiling with Guile 2.2
- autogen-guile-2.2.patch: removed
- installable-programs.patch: don't make programs uninstallable
- Rediff remaining patches</changelog>
  <changelog author="jbrielmaier@suse.de" date="1542801600">- BuildRequire guile-devel to make transistion to Guile 2.2 smooth</changelog>
  <changelog author="schwab@suse.de" date="1542888000">- Remove invalid signature file and keyring</changelog>
  <changelog author="mliska@suse.cz" date="1553515200">- Add gcc9-fix-wrestrict.patch in order to fix
  bsc#1125772.</changelog>
  <changelog author="schwab@suse.de" date="1579608000">- guile-version.patch: Allow building with guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1584964800">- guile-version.patch: Allow all patchlevel versions of guile 3.0</changelog>
  <changelog author="schwab@suse.de" date="1589198400">- Increase default timeout
- Run testsuite in verbose mode</changelog>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Set MAN_PAGE_DATE to normalize man page date (boo#1047218)</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Add upstream patch autogen-avoid-GCC-code-analysis-bug.patch
  in order to support -D_FORTIFY_SOURCE=3 with GCC 12.
- Use autosetup.</changelog>
  <changelog author="pgajdos@suse.com" date="1756123200">- security update
- added patches
  CVE-2025-8746 [bsc#1247921], improper input validation and memory bounds checking when processing certain malformed configuration files
  + autogen-CVE-2025-8746.patch</changelog>
</package>
<package pkgid="13c8a4126ce2b06cfddf2691e20b422d8c7de72b1e8048ffc96add057983c57fb2c491465bbc1903419b398aedfefe9ee55ecdfe96588992f91d8511e50e13e4" name="autorandr" arch="noarch">
  <version epoch="0" ver="1.15.0.1709469470" rel="bp160.1.9"/>
  <changelog author="phillip.berndt@googlemail.com" date="1481112000">- initial version</changelog>
  <changelog author="Eric Renfro &lt;erenfro@linux-help.org&gt;" date="1716638400">- Branched version
- Update to version 1.15.0.1709469470:
  * Release autorandr 1.15
  * Fix: Skip profiles without outputs
  * Fix const warnings
  * Do not check for mask in evt-&gt;response_type
  * add compiled autorandr-launcher binary to .gitignore
  * fix: remove literal backslashes in edid regex
  * Added missing r literal in OUTPUT_REGEX
  * Add missing r literal to regex strings
  * fish completion: fix typo in folder name</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1716897600">- Update specfile to openSUSE standards.</changelog>
  <changelog author="Eric Renfro &lt;erenfro@linux-help.org&gt;" date="1716897601">- Added dependancy libinput-utils for autorandr-lid-switch service</changelog>
  <changelog author="Eric Renfro &lt;erenfro@linux-help.org&gt;" date="1716897602">- Removed obsoleted Group.</changelog>
</package>
<package pkgid="18725c63343f66c923bec8ca7d91cdc18f3d0c32ebba93bbae8ebaa7ec480b4ce150c14636e2db921719212390712620b742bf40dbeed0e162dc40fb2c53b5dd" name="autorandr-bash-completion" arch="noarch">
  <version epoch="0" ver="1.15.0.1709469470" rel="bp160.1.9"/>
  <changelog author="phillip.berndt@googlemail.com" date="1481112000">- initial version</changelog>
  <changelog author="Eric Renfro &lt;erenfro@linux-help.org&gt;" date="1716638400">- Branched version
- Update to version 1.15.0.1709469470:
  * Release autorandr 1.15
  * Fix: Skip profiles without outputs
  * Fix const warnings
  * Do not check for mask in evt-&gt;response_type
  * add compiled autorandr-launcher binary to .gitignore
  * fix: remove literal backslashes in edid regex
  * Added missing r literal in OUTPUT_REGEX
  * Add missing r literal to regex strings
  * fish completion: fix typo in folder name</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1716897600">- Update specfile to openSUSE standards.</changelog>
  <changelog author="Eric Renfro &lt;erenfro@linux-help.org&gt;" date="1716897601">- Added dependancy libinput-utils for autorandr-lid-switch service</changelog>
  <changelog author="Eric Renfro &lt;erenfro@linux-help.org&gt;" date="1716897602">- Removed obsoleted Group.</changelog>
</package>
<package pkgid="39c541d9cb294f0bd09dae901377dc223ca499b61ef3f250af38821fe4f3cc1761739b88b5db004538c3e12963a301a47b8cbd58e9027ea94e2c8b3e95f75bdc" name="autotrace" arch="x86_64">
  <version epoch="0" ver="0.31.1" rel="bp160.1.12"/>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="1e13f5186569ef3f36024b6f376914981d0adb43ba2d14a3f64a98c44b4bf2b89102b8791141e7b60ebeafd15e1d42a9119fb0986264ee3969a721d980d7a791" name="autotrace-devel" arch="x86_64">
  <version epoch="0" ver="0.31.1" rel="bp160.1.12"/>
  <changelog author="crrodriguez@suse.de" date="1240315200">- remove static libraries and "la" files
- cleanup spec file a bit</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="meissner@suse.de" date="1292846400">- libexif does not seem to be directly required</changelog>
  <changelog author="sbrabec@suse.cz" date="1299499200">- Split according to shared library packaging rules.
- Enabled ImageMagick support.</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="sfalken@opensuse.org" date="1407844800">- Add 0001-fix_input_png.patch:  Corrects build failure against libpng15
- Updated .spec file to use %make_install macro</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1652443200">- biWidth*biBitCnt integer overflow fix (bsc#1182158,
  CVE-2019-19004, CVE-2019-19004.patch).
- Bitmap double free fix (bsc1182159, CVE-2019-19005,
  CVE-2017-9182, CVE-2017-9190, CVE-2019-19005.patch).</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1667908800">- Added CVE-2022-32323.patch
  * [bsc#1201529, CVE-2022-32323]
  * Fixes Heap overflow in ReadImage()</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="bbf5eff8a2bced73446abedfe69a8a1d31a262bac718ebe5fb694c33abea03d86d4b28e8144cc8abc1b6a8d7f63e4608683c28d50306bb32968d76e95338a1dd" name="autotrash" arch="noarch">
  <version epoch="0" ver="0.4.6" rel="bp160.1.11"/>
  <changelog author="mailaender@opensuse.org" date="1454760000">- initial packaging</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620734400">- Do not BuildRequire pandoc (as it does not exist on all
  architectures).
- Inject autotrash.1: build will fail when this needs to be
  regenerated (as pandoc would be missing).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1640779200">- Update to version 0.4.4:
  + Tiny bit of love: change default template for systemd unit
    files to also contain a link to the project on github.
- Changes from version 0.4.3:
  + This release only fixes the license rendering on pypi.
- Changes from version 0.4.2:
  + Drop arrow dependency.
- Changes from version 0.4.1:
  + Release 0.4.1 but now with a package description in PyPi.
- Changes from version 0.4.0;
  + New --install feature to add systemctl timer.
- Changes from version 0.3.0:
  + A date parsing issue (#15) inspired me to revamp the
    distribution and packaging.
  + The package is no longer a single python script, but a full
    python package you will be able to install from PyPi shortly.
- Changes from version 0.2.1:
  + Prevent UnboundLocalError when --max-free is set and enough
    space free.
- Drop injected man page: upstream no longer maintains it
  apparently.
- Add python3-setuptools BuildRequires: new build dependency.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1709985600">- Updated to version 0.4.6:
  + Upgrade dependencies, (gh#bneijt/autotrash#59).
  + Bump cryptography from 40.0.1 to 41.0.3,
    (gh#bneijt/autotrash#62).
  + Upgrade poetry, (gh#bneijt/autotrash#63).
  + OSV scan, (gh#bneijt/autotrash#54).
- Changes from version 0.4.5:
  + Add mypy and actions cache, (gh#bneijt/autotrash#42).
  + Update documentation, (gh#bneijt/autotrash#45).
  + Add .gnomerc Example For Granular Cleanup,
    (gh#bneijt/autotrash#46).
  + Upgrades, (gh#bneijt/autotrash#53).
- Update source URL.
- Update spec file, move to building with poetry macros.</changelog>
</package>
<package pkgid="a6db3f5a388322e2455c4889a6fea66f637a9f8a88f650921c16e99bd90d44a940c9a93f054c23c55d59c173fd65e1a659bb782c822a5ee8b3f0f6d75ec9359f" name="autoyast2" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="160000.2.2"/>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.6.1</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.6.2</changelog>
  <changelog author="jreidinger@suse.cz" date="1693396800">- 5.0.0 (#bsc1185510)</changelog>
  <changelog author="ancor@suse.com" date="1695384000">- Added several LUKS-related elements to the partitioning schema
  (jsc#PED-3878, jsc#PED-5518).
- 5.0.1</changelog>
  <changelog author="mfilka@suse.com" date="1707998400">- jsc#PED-6407
  - enabled lvm_vg_reuse to be used in general/storage/proposal
    section</changelog>
  <changelog author="lslezak@suse.com" date="1707998401">- Install standard SLES when the AY XML profile selects SLE_HPC,
  it has been dropped in SP6 (jsc#PED-7841)
- 5.0.2</changelog>
  <changelog author="shundhammer@suse.com" date="1727784000">- Removed obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD
  (bsc#1231006)
- 5.0.3</changelog>
  <changelog author="kanderssen@suse.com" date="1740052800">- Update the partitioning schema to support the pervasive encryption
  apqns and key type elements (jsc#PED-10950).
- 5.0.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1742472000">- Allow skipping profile fetch errors by setting
  YAST_SKIP_PROFILE_FETCH_ERROR=1 (see gh#agama-project/agama#2180).
- 5.0.5</changelog>
  <changelog author="kanderssen@suse.com" date="1743076800">- Load default security settings before importing the section to
  ensure the settings are set in case there is no security section
  defined and run without confirmation dialog (bsc#1231490)
- 5.0.6</changelog>
</package>
<package pkgid="70d2a1926a0f5e0d0a5e91073ffec7c2697ee38a520b562ec7bf67b89634edcbd50408ea298b5dac7f743518708b48f0da6078b2c6f0bafbd8689c1beb6dc95e" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="160000.2.2"/>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.6.1</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.6.2</changelog>
  <changelog author="jreidinger@suse.cz" date="1693396800">- 5.0.0 (#bsc1185510)</changelog>
  <changelog author="ancor@suse.com" date="1695384000">- Added several LUKS-related elements to the partitioning schema
  (jsc#PED-3878, jsc#PED-5518).
- 5.0.1</changelog>
  <changelog author="mfilka@suse.com" date="1707998400">- jsc#PED-6407
  - enabled lvm_vg_reuse to be used in general/storage/proposal
    section</changelog>
  <changelog author="lslezak@suse.com" date="1707998401">- Install standard SLES when the AY XML profile selects SLE_HPC,
  it has been dropped in SP6 (jsc#PED-7841)
- 5.0.2</changelog>
  <changelog author="shundhammer@suse.com" date="1727784000">- Removed obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD
  (bsc#1231006)
- 5.0.3</changelog>
  <changelog author="kanderssen@suse.com" date="1740052800">- Update the partitioning schema to support the pervasive encryption
  apqns and key type elements (jsc#PED-10950).
- 5.0.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1742472000">- Allow skipping profile fetch errors by setting
  YAST_SKIP_PROFILE_FETCH_ERROR=1 (see gh#agama-project/agama#2180).
- 5.0.5</changelog>
  <changelog author="kanderssen@suse.com" date="1743076800">- Load default security settings before importing the section to
  ensure the settings are set in case there is no security section
  defined and run without confirmation dialog (bsc#1231490)
- 5.0.6</changelog>
</package>
<package pkgid="1caa7d1326b22795700604431b5ec64aab4ae3bbacbd3211b52f37f0059e39c9117992d38d33da0072cd628005fd1124469a4d763b7a6095941febedfa8e4162" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="1c1c6e6ab085862b04f77d9a0539d3bbb6a997842ef362776bba9711f39772f9004af5718bba479c67a3a7b374bba63b3f33396cb35bee02814396d255e88c7d" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="b9687c9f11a2133a2afda1bbc5d97f25d56f4bdc1f0c09eab33c16cd6783d4ab41915e401baafc1e8982f155dba60661ab1b7cd34e9d3b7af770719a8f502297" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="c9ad9c6162241c3934e97f54349a3e28326a1304e0ec211bea274241bb3cb0e7ea386465be265b5a69f1072386d34b4e6601772c6fdc49fd5f4175679a98d0d3" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="41dc82bb3a68c174321008c5fc32ce48d0fb9e9ba2bd26e7b4f2226c55d1afeaffa26c59abf900a9d05c07d98019c0788f7408caaea0247a2ce1dd2b6e3d7003" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="7b391884b72ba154e8937e8e666710bb6156c975c17cf026bfc27d3aff846d0250437e4a6ba078db75a7af0a25d6cc23540dad2e9514f028a1f263c8ef18af6b" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="dbf3f6c875f3994ea85a18a48224bf298866365fd927086a696abe8978486a0cba3c059a9d99e175356f64b029580e40ac4aafe7a118fa5f5a3ffaa6ccbf6935" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="4c68d3f9c5a3366d9f6ded860d7ece2a16fe55120e2506d374bcfc15936eb4b73393939cb246b3ff0cce1f597910a19d058dc5e67ec4137f2bfdf11582ecfa20" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="b4f6d47c1aa8e348e04be8e309a473b002f9786a72ef7afa8e1c2395c3365db4ecb78bf4e84588a56d827fbc9b5aed57ee65ce25f06670e8f34687b553c82416" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="d05017236586da80fc03ff313b6ef07ef2f5b82f6aa1ec22d068dff6ac2faa554903b7738526c84f8f292da386dcc0762388d8a13d418289ce7d6171e358efe3" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="7444c9b8388d5d1dcdb1b46263d29bc9b68a7610e95e4ec1a538d4c25108256c90d24f04c039c76cfc7a6b69758df7ed53e505f90f01a7c1fbb7e4a6adf11cfd" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="d1467a0cb60b2692d1de8f06ac51988624cebe54f325c458036956f44f6236ad8c846af550ee7afedcf8d4d0c241ea57e159b6ce9e4bd71328cf58fb7374e82b" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="09e51dd7b701475d9dbd9abab4b74d524d14545905ff7fb7431b512bb2029ed4837e0c719b2b9950cb47eb564cdb269556c3cc0cce7c36e4cc0fbec4dfcf20e2" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="27a59015d840716bd2c22416f202730ff8f08030fb87e2b8faf74ab8781f7fc45c3f89c136d61d2c61f9d70114707a2854dc9856a942be85c58b5f235550635f" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="bf6b66d3af8a14c825bb2a6625213bfcbae960a5d74454543a379890952228ded516e4e6e4d9822cb5e9a127a22d5b1f9a718d2842f228b50bca2e2b335c0057" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="9a0ee3316f0a1b93a7caddbacec20b2f92521d87757508f892d551fb42aa794c4a8f561adab21acbfa45ba2212904c772ca1d1269bf3fe229f2bc8a6da39a630" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="1538454cfedbf67baca9251e672db2c48b1a7354ca3516555ece48dac990d1583d209798f581ebd4b3afa9f13c33a2c4fcffdff549754fe4a740da912d186fdd" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="e9482c9c39f4af04d4ef9403c2f4867376f137d6942283effa82e9647cb19296ba69da1966b288eb252204d7019fa42660c1eb2c9d671fed7bd93e463285e4c1" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="cf88f06d33144df96425329a91bf86ebd1cb2abe62164c9ef3322d5c981418bd5a82977fdb838b196c8436648264778211aa1365dd241d725b968368676db5dc" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="613a8a2b5f805307ec3e99dde05eb8877ca9dbbafd8c4ab742d7f73da5f2dc735c89d024ee09b295da8fda4e06ce67859753e332c50b10a75f5507f9454c9c38" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="920020ddb742e0fe3018ff36641302061da8045cc7aa2e566e69af75f6eb452be32122eac688d902ce7f4420a3e3a802c6717c1d9ca6336cdfd3c052e7d61e8e" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="9c627e65d38524e54379cd5ef57367d790765dd781a4ca75ac9bda82b81c63c7452054aff5dbdd1922137f85e7393e91b57cd6a39300ca8a9015bf828a00a344" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="8a9d71e13229a5420a3137aa589e517a58210621ca701d4eb2183f5eef1b9be65da559ea0f50c693104f5d81068ab6963e8947c218cab5758801bd907164ea7d" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="277b61d7d7469a74e004b8c4b80216a2bf106551bbee37aabcfc12a9c582c77ddc1de803ba68f960d70775175074c806a818bfbfd0341fffa0b83cdbbc992105" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="fce06f3346c42bf749581600556f73cc02c9bbcb24f21ee6691124573a5b578e5120e160a151de125eabde85fc34d4e335151ff7c060ef0bcb38e2be89f28c44" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
</package>
<package pkgid="caaf4f2feb5827d4c5011266703f7bdc5524de01e765ee91b1e3db6290b49de39546d4961b037981211d772f71b54c80329d48393d79151752e7ce826e2a036a" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.3.1"/>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="pgajdos@suse.com" date="1710244800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="926b69000abee834347155d9f369f71cd92c947379087f71d2c6f79e454890a243d76a1936af15ca01e8ab3754b83720adf85b0a4c3e0129053952e1af808441" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patches as PATCH-FEATURE-OPENSUSE</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="13762dc6bf9ad48e5737cfd4bce622498aa8a3b8b499cf1415c226a46e34d0ff4fba9408fd2ec9b05a2d7fc14dfbdbee614cc57bb2f8406ca7066c5ee98601b0" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.8" rel="160000.5.1"/>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1748001600">- Drop obsolete update-desktop-files BuildRequires and macro.
  Replace with desktop-file-utils BuildRequires.
- Drop unneeded update_spec.pl source, not needed since change to
  proper multibuild.</changelog>
  <changelog author="alarrosa@suse.com" date="1748606400">- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1777291200">- Add avahi-CVE-2026-34933.patch: refuse to accept publish flags
  where both wide_area and multicast are set.
  (CVE-2026-34933, bsc#1261546)</changelog>
</package>
<package pkgid="5caf814f4d64cb5d7889548be98799859bf0d86e1d6418161882acdea3eaf29886969731121ec825747fb872e888e66afb3efa49ac3e84fe93da1cc15ffd364d" name="avalon-framework" arch="noarch">
  <version epoch="0" ver="4.3" rel="bp160.1.11"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add maven pom files</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Upgrade to 4.3
  * Two source packages avalon-framework-api-4.3 and
    avalon-framework-impl-4.3 buildable both with ant
  * Make javadoc subpackage provide the manual subpackage, since
    the manual content is basically a javadoc for api
- Added patches:
  * 0001-Port-build-script-to-Maven-3.patch
    + convert the project.xml files in both sources to a valid
    maven 3 pom files.
  * avalon-framework-manifest.patch
    + Add Bundle-SymbolicName attributes to both jar files
- Removed patch:
  * avalon-framework-target.patch
    + not needed with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554379200">- Do not require optional dependencies</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against log4j12 compatibility package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430401">- Rather use %setup/%autopatch: autosetup does not handle the
  decompression of additional sources and applying patches in the
  correct order for this package.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1721044800">- Add alias for avalon-framework:avalon-framework and point it to
  the avalon-framework:avalon-framework-impl artifact.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="1e7f908319e0ea7a34938e450d4f95764f679ceee2a085bf90bd744ea9f7e4e85acadb9325d0d9993fa9f9893285224ac6703421bdd989ffc84e3537039fa3d7" name="avalon-framework-javadoc" arch="noarch">
  <version epoch="0" ver="4.3" rel="bp160.1.11"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544011200">- Add maven pom files</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Upgrade to 4.3
  * Two source packages avalon-framework-api-4.3 and
    avalon-framework-impl-4.3 buildable both with ant
  * Make javadoc subpackage provide the manual subpackage, since
    the manual content is basically a javadoc for api
- Added patches:
  * 0001-Port-build-script-to-Maven-3.patch
    + convert the project.xml files in both sources to a valid
    maven 3 pom files.
  * avalon-framework-manifest.patch
    + Add Bundle-SymbolicName attributes to both jar files
- Removed patch:
  * avalon-framework-target.patch
    + not needed with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554379200">- Do not require optional dependencies</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against log4j12 compatibility package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430401">- Rather use %setup/%autopatch: autosetup does not handle the
  decompression of additional sources and applying patches in the
  correct order for this package.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1721044800">- Add alias for avalon-framework:avalon-framework and point it to
  the avalon-framework:avalon-framework-impl artifact.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="74db8654ffafe3263a9c846ffc730e7d0a90fff60b60bc3bfa67270ace2d437b6977f574ec7007c714193ce57d355ffc35cf77c99e1937dc60af7912f0cb2ffb" name="avalon-logkit" arch="noarch">
  <version epoch="0" ver="2.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1548158400">- Require dependencies by their maven artifactId and groupId in
  order to be usable from maven build</changelog>
  <changelog author="fstrba@suse.com" date="1550145600">- Build against the glassfish-servlet-api</changelog>
  <changelog author="fstrba@suse.com" date="1555329600">- Depend directly on the geronimo-jms-1_1-api package instead of
  the jms virtual provider</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against compatibility log4j12 package</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build the org.apache.log.output.lf5 package</changelog>
  <changelog author="fstrba@suse.com" date="1645531201">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Clean the spec file and use the new %%mvn_install_pom</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="3cc0cbc09aad1f7ec6407c4bc3eea02d3a8fa6e0acabe42983d9f63da7b39d86a71c2d2f04f1eb2956e8983fcb947985e56860fd38bf0c5027a53a879475f3e4" name="avalon-logkit-javadoc" arch="noarch">
  <version epoch="0" ver="2.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1548158400">- Require dependencies by their maven artifactId and groupId in
  order to be usable from maven build</changelog>
  <changelog author="fstrba@suse.com" date="1550145600">- Build against the glassfish-servlet-api</changelog>
  <changelog author="fstrba@suse.com" date="1555329600">- Depend directly on the geronimo-jms-1_1-api package instead of
  the jms virtual provider</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against compatibility log4j12 package</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build the org.apache.log.output.lf5 package</changelog>
  <changelog author="fstrba@suse.com" date="1645531201">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Clean the spec file and use the new %%mvn_install_pom</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="acdc8e24ec464ead0263ce534de9737a19fa1fe6922f0ca33bcd73965ee656d40a9779b0472b483a67c6fdb2dd9866ecf7f37f2f79554c24b1e3fea62b12b16f" name="avfs" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="bp160.1.12"/>
  <changelog author="mpluskal@suse.com" date="1431432000">- Update licensing information</changelog>
  <changelog author="jengelh@inai.de" date="1431864000">- Improve summary and description. -devel subpackage should require
  same-version shared library. Drop --with-pic, because it is
  implicit for shared libraries (and we do not build static).
  Use short Sourceforge download URLs.</changelog>
  <changelog author="p.drouand@gmail.com" date="1447243200">- Update to version 1.0.3
  * fixed zlib assert triggered for some Huffman encodings
  * added rar v5 in extfs urar (which is also renamed to uextrar to avoid
    collision with internal rar module)
  * some configure script improvements have been done for fuse and liblzma
    dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1482408000">- Update to version 1.0.4:
  * fixed zip module to correctly read archives with a lot of
    files or very large files
- Use pkgconfig() style requires</changelog>
  <changelog author="aloisio@gmx.com" date="1519041600">- Update to version 1.0.5
  * limit the file cache to 50 elements and age of 10 minutes to
    avoid endless grow of internal cache
  * allow reproducable builds
  * fixed crash in parsing ls output for modules which need to
    handle ls-like output
  * fix urar module when external rar/unrar tool crashed
- Spec cleanup</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 1.1.0:
  * improved handling of single '#' to stop resolving archive
    handlers when it makes no sense to add another chain
  * support multiple gzip member in a single file (concatenated
    gzip files)
  * updated webdav module with work with latest libneon (which is
    no longer bundled)
  * CODA and PRELOAD support has been removed
- Changes for version 1.0.6:
  * added support for libzstd (zst files)
  * fixed arbitrary command execution in rsh/ssh module
  * zip workaround for zip archives with unix attributes but
    regular files are not marked correctly</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.1.3:
  - fix compilation problem on MacOS
  - fix encoding problem in ulha extfs module
  - add support for rar 5.0 files
  - fix memleak in zstd support
  - small fix for extfs udar module
  - updated internal bzlib to 1.0.8 to fix security bug</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622030400">- Update to version 1.1.4:
  * add support for lzip (ulzip module for .lz files)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678190400">- update to 1.1.5:
  * added support for ls output with SElinux attributes.
  * improved handling of xz memory limit to allow detecting
    when the limit is reached and to increase it on demand.
  * added basic decoding of tar's extended headers to support
    longer file names.</changelog>
</package>
<package pkgid="4c9651af721b1f40208777f5704ae908533f93597c47c3bb1d7b5706066996ba8dfcab250ca0c03d532da347e5f8c405832b9f71b117bd3a79bf25304a8f2e42" name="avfs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="bp160.1.12"/>
  <changelog author="mpluskal@suse.com" date="1431432000">- Update licensing information</changelog>
  <changelog author="jengelh@inai.de" date="1431864000">- Improve summary and description. -devel subpackage should require
  same-version shared library. Drop --with-pic, because it is
  implicit for shared libraries (and we do not build static).
  Use short Sourceforge download URLs.</changelog>
  <changelog author="p.drouand@gmail.com" date="1447243200">- Update to version 1.0.3
  * fixed zlib assert triggered for some Huffman encodings
  * added rar v5 in extfs urar (which is also renamed to uextrar to avoid
    collision with internal rar module)
  * some configure script improvements have been done for fuse and liblzma
    dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1482408000">- Update to version 1.0.4:
  * fixed zip module to correctly read archives with a lot of
    files or very large files
- Use pkgconfig() style requires</changelog>
  <changelog author="aloisio@gmx.com" date="1519041600">- Update to version 1.0.5
  * limit the file cache to 50 elements and age of 10 minutes to
    avoid endless grow of internal cache
  * allow reproducable builds
  * fixed crash in parsing ls output for modules which need to
    handle ls-like output
  * fix urar module when external rar/unrar tool crashed
- Spec cleanup</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 1.1.0:
  * improved handling of single '#' to stop resolving archive
    handlers when it makes no sense to add another chain
  * support multiple gzip member in a single file (concatenated
    gzip files)
  * updated webdav module with work with latest libneon (which is
    no longer bundled)
  * CODA and PRELOAD support has been removed
- Changes for version 1.0.6:
  * added support for libzstd (zst files)
  * fixed arbitrary command execution in rsh/ssh module
  * zip workaround for zip archives with unix attributes but
    regular files are not marked correctly</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.1.3:
  - fix compilation problem on MacOS
  - fix encoding problem in ulha extfs module
  - add support for rar 5.0 files
  - fix memleak in zstd support
  - small fix for extfs udar module
  - updated internal bzlib to 1.0.8 to fix security bug</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622030400">- Update to version 1.1.4:
  * add support for lzip (ulzip module for .lz files)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678190400">- update to 1.1.5:
  * added support for ls output with SElinux attributes.
  * improved handling of xz memory limit to allow detecting
    when the limit is reached and to increase it on demand.
  * added basic decoding of tar's extended headers to support
    longer file names.</changelog>
</package>
<package pkgid="9dd9518fd9ae8a523f99976d9dcf1a8b771181b9cc9d0f05b9320423cbd0c4d5d55bb5bb641fc01175870a115812ad423c5a353cc947b2b85951c250389c7849" name="avgtime" arch="x86_64">
  <version epoch="0" ver="v0.5.0+4.ffdf200" rel="bp160.1.7"/>
  <changelog author="okurz@suse.com" date="1488801600">- Initial submission</changelog>
  <changelog author="okurz@suse.com" date="1495886400">- Use local Source0 for oS:Fctry submission</changelog>
  <changelog author="okurz@suse.com" date="1523620800">- Link dynamically to support openSUSE:Factory in the current version as well
- Add package post-installation test</changelog>
  <changelog author="okurz@suse.com" date="1523966400">- Update to version v0.5.0+4.ffdf200:
  * -Release 0.3: Histogram, sample mode and confidence intervals
  * -Release 0.4: Added conf. intervals for estimated mu average (actually, fixed the values confidence interval).
  * -README changes.
  * -Release 0.5: Now works in windows.
  * Fix compile error on 2.061
  * add dub package file
  * -Fix compile errors on DMD 2.067 (issue #7). Thanks alekseymya for reporting issue.
  * -Updated readme.md to mention Windows and Linux.
  * -Mentioned OS X as working in the README.md.
  * -Added SpawnProcess optional implementation version (not enabled by default), to cover issue #5).
- Update descriptions</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1535630400">- Use LDC compiler when DMD is not available
- Make use of %license</changelog>
  <changelog author="Holger B. A. Rauch &lt;holger.rauch@posteo.de&gt;" date="1680523200">- Use gdmd (DMD as part of the GCC (GNU Compiler Collection)). This approach
  is most likely sane for all architectures and a recent enough GCC (version 13)</changelog>
</package>
<package pkgid="9a10e5d8a13b90b8f11603c88b48c6cfb7afd661eed7dbcf729af7af1a7029f18bb67faa12c1e3a7f60879f7038606991b0e58f3966dfa5a27649cfa0b43e774" name="avif-tools" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1693310400">- Update to 1.0.0:
  * Incompatible changes:
    + The clli member was added to the avifImage struct.
    + The repetitionCount member was added to the avifEncoder and avifDecoder
    structs.
    + The quality and qualityAlpha members were added to the avifEncoder struct.
    + Check that functions returning pointers do not return NULL before accessing
    those pointers.
    + Check the return value of avifEncoderSetCodecSpecificOption().
    + The maxThreads member was added to the avifRGBImage struct.
    + Check the return value of avifRGBImageAllocatePixels(), avifRWDataRealloc(),
    avifRWDataSet(), avifImageSetProfileICC(), avifImageSetMetadataExif() and
    avifImageSetMetadataXMP().
    + The meaning of the keyframeInterval member of avifEncoder struct has changed
    slightly. When set to a value of "n",
    Before: It forces a keyframe on every nth frame.
    After: Any set of "n" consecutive frame will have at least one keyframe
    (every nth frame may or may not be a keyframe).
  * Added:
    + Add clli metadata read and write support
    + Add repetitionCount member to avifEncoder and avifDecoder structs to specify
    the number of repetitions for animated image sequences.
    + Add quality and qualityAlpha to avifEncoder. Note: minQuantizer,
    maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha are deprecated. Code
    should be updated to set quality (and qualityAlpha if applicable) and leave
    minQuantizer, maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha
    initialized to the default values.
    + The --target-size flag in avifenc was added to adapt the quality so that the
    output file size is as close to the given number of bytes as possible.
    + Add the public API function avifImageIsOpaque() in avif.h.
    + Add the public API functions avifImagePlane(), avifImagePlaneRowBytes(),
    avifImagePlaneWidth(), and avifImagePlaneHeight() in avif.h.
    + Add API for multi-threaded YUV to RGB color conversion.
    + Allow lossless 4:0:0 on grayscale input.
    + Add avifenc --no-overwrite flag to avoid overwriting output file.
    + Add avifenc --clli flag to set clli.
    + Add support for all transfer functions when using libsharpyuv.
  * Changed:
    + Exif and XMP metadata is exported to PNG and JPEG files by default,
    except XMP payloads larger than 65502 bytes in JPEG.
    + The --grid flag in avifenc can be used for images that are not evenly divided
    into cells.
    + Change the encoder to write the boxes within the "stbl" box in the order of
    stsd, stts, stsc, stsz, stco, stss.
    + avifImageRGBToYUV() and avifImageYUVToRGB() handle avifImage bit depths 8, 10,
    12 and now also 16. Files read by apps/shared/ can output 16-bit avifImage
    instances.
    + avifImageCreate(), avifImageCreateEmpty(), avifEncoderCreate() and other
    internal functions now return NULL if a memory allocation failed.
    + avifEncoderSetCodecSpecificOption() now returns avifResult instead of void to
    report memory allocation failures.
- Add fix-gdkpixbuf.patch.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701172800">- update to 1.0.2:
  * Update avifCropRectConvertCleanApertureBox() to the revised
    requirements in ISO/IEC 23000-22:2019/Amd. 2:2021 Section
    7.3.6.7.
  * CVE-2023-6350: Out of bounds memory to alphaItemIndices (boo#1217614)
  * CVE-2023-6351: use-after-free in colorProperties (boo#1217615)
- drop fix-gdkpixbuf.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1703160000">- update to 1.0.3:
  * Rewrite the fix for memory errors fixed in 1.0.2
  * Fix use-after-free errors.
    (CVE-2023-6704, boo#1218303)
  * src/reformat.c: Allocate the threadData array directly</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 1.0.4:
  * AVIF_ENABLE_WERROR is set to OFF by default.
  * Fix wrong alpha plane deallocation when decoded tile pixel
    format does not match reconstructed output image pixel format
  * Fix identical chunk skipping optimization when writing
    animation data
  * Fix ID selection for artificial grid alpha item when decoding
    a grid of tiles which each have an associated auxiliary alpha
    image item (https://crbug.com/oss-fuzz/65657).</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.1.1:
  * In avif.h, change "AVIF_API AVIF_NODISCARD" back to
    "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation
    errors in the shared library build on Windows.
  * Fix -DAVIF_GTEST=SYSTEM
  * Fix infe_type and codec_config_type wrongly read as byte-
    aligned fields in the
  * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1.
  * When building aom as a local dependency, runtime CPU
    detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`;
  * Fix CMake config shared library leaks
  * Update gain map metadata to current ISO 21496-1 draft.
  * cmake: Only search for ASM_NASM language on x86_64 platforms.
  * Fix "No known features for CXX compiler" CMake error.
  * Fix aom link flags so that transitive library link flags are
    included when aom is a static library
  * Fix out-of-order 'dimg' grid associations
  * Report files with an item used in multiple 'dimg' boxes with
  * AVIF_RESULT_NOT_IMPLEMENTED instead of
    AVIF_RESULT_INVALID_IMAGE_GRID.
  * Add experimental API for reading and writing gain maps in
    AVIF files.
  * If enabled at compile time, add `gainMap` field to
    `avifImage`,
  * add `qualityGainMap` field to `avifEncoder`, add
    `gainMapPresent`, `enableDecodingGainMap`,
    `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to
    `avifDecoder`.
  * Utility functions for working with gain maps are also added.
  * Gain maps allow readers that support them to display HDR
    images that look good on both HDR and SDR displays.
  * Add experimental support for converting jpeg files with gain
    maps to AVIF files with gain maps. Requires libxml2, and the
    AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag.
  * Add a --qgain-map flag to control the gain map quality in
    avifenc.
  * Add the headerFormat member of new type avifHeaderFormat to
    avifEncoder.
  * Add experimental API for reading and writing "mif3"-branded
    AVIF files behind the compilation flag
    AVIF_ENABLE_EXPERIMENTAL_METAV1.
  * Implement avifImageScale() fallback when libyuv is not
    available.
  * Partial import of libyuv to third_party/libyuv (new LICENSE).
  * Add avifenc flag suffixes ":update" and ":u". Quality-
    relative, tiling-relative and codec-specific flags can now be
    positional, relative to input files.
  * Add experimental support for layered AVIF encoding in
    avifenc.
  * Use the --layered flag to enable layered AVIF encoding.
  * Layered AVIF has multiple layers, which works like frame of
    animated AVIF, and layers can be rendered in progressive
    manner on supported viewers
  * Only aom supports layered AVIF encoding at the time of
    writing.
  * Add --scaling-mode flag to set scaling mode of each layer.
  * This part of AV1 encoder is not as thoroughly tested, so
    there are higher possibility encoder may crash when given certain
    configuration or input.
  * Add imageSequenceTrackPresent flag to the avifDecoder struct.
  * avifImageScale() function was made part of the public ABI.
  * Add avif_cxx.h as a C++ header with basic functionality.
  * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB,
    AVIF_COLOR_PRIMARIES_BT2100,
  * AVIF_COLOR_PRIMARIES_DCI_P3,
    AVIF_TRANSFER_CHARACTERISTICS_PQ.
  * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR.
  * Require libyuv by default (but it can still be disabled with
  * -DAVIF_LIBYUV=OFF).
  * Add avifdec --icc flag to override the output color profile.
  * Add experimental API for reading and writing 16-bit AVIF
    files behind the
  * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM.
  * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to
    avifChromaSamplePosition enum.</changelog>
  <changelog author="kieltux@gmail.com" date="1725969600">- Enable building with aom and libyuv for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1744891200">- update to 1.2.1:
  * Added since 1.2.0
  - Add support for outputting all frames of an image sequence in avifdec.
  - avifdec --index all sequence.avif out.png creates files named
  - out-xxxxxxxxxx.png where xxxxxxxxxx are the zero-padded frame indices.
  * Changed since 1.2.0
  - Fix local libargparse dependency patch step on macOS 10.15 and earlier.
  - Patch local libyuv dependency for compatibility with gcc 10.
  - Use stricter C99 syntax to avoid related compilation issues.
  - Update svt.cmd/svt.sh/LocalSvt.cmake to v3.0.1.
- update to 1.2.0:
  * Added since 1.1.1
  - Turn on the gain map API. Remove the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP CMake
    flag.
  - Allow YCgCo_Re and YCgCo_Ro encoding/decoding and update the enum values to
    the latest CICP specification. Remove the AVIF_ENABLE_EXPERIMENTAL_YCGCO_R
    CMake flag.
  - Add the properties and numProperties fields to avifImage. They are filled by
    the avifDecoder instance with the properties unrecognized by libavif. They are
    written by the avifEncoder.
  - Add avif(Un)SignedFraction structs and avifDoubleTo(Un)SignedFraction
    utility functions.
  - Add 'avifgainmaputil' command line tool to installed apps.
  - Add avifCropRectRequiresUpsampling().
  - Add experimental support for PixelInformationProperty syntax from HEIF 3rd Ed.
    Amd2 behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_EXTENDED_PIXI.
  - Add experimental Sample Transform recipe
    BIT_DEPTH_EXTENSION_12B_8B_OVERLAP_4B.
  * Changed since 1.1.1
  - avifenc: Allow large images to be encoded.
  - Fix empty CMAKE_CXX_FLAGS_RELEASE if -DAVIF_CODEC_AOM=LOCAL -DAVIF_LIBYUV=OFF
    is specified. #2365.
  - Rename AVIF_ENABLE_EXPERIMENTAL_METAV1 to AVIF_ENABLE_EXPERIMENTAL_MINI and
    update the experimental reduced header feature to the latest specification
    draft. Rename AVIF_HEADER_REDUCED to AVIF_HEADER_MINI.
  - Update the experimental Sample Transform feature behind the
    AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM CMake flag to the latest
    specification draft.
  - Ignore gain maps with unsupported metadata. Handle gain maps with
    writer_version &gt; 0 correctly.
  - Simplify gain map API: remove the enableParsingGainMapMetadata setting, now
    gain map metadata is always parsed if present and if this feature is compiled
    in. Replace enableDecodingGainMap and ignoreColorAndAlpha with a bit field to
    choose image content to decode. Remove gainMapPresent: users can check if
    decoder-&gt;image-&gt;gainMap != NULL instead. Remove avifGainMapMetadata and
    avifGainMapMetadataDouble structs.
  - Write an empty HandlerBox name field instead of "libavif" (saves 7 bytes).
  - Check for FileTypeBox precedence in avifParse().
  - Do not write an alternative group with the same ID as an item.
  - Update aom.cmd/LocalAom.cmake: v3.12.0. The new codec-specific option tune=iq
    (image quality) is added in libaom v3.12.0.
  - Update parseAV2SequenceHeader() and avm.cmd: research-v9.0.0
  - Update dav1d.cmd/dav1d_android.sh/LocalDav1d.cmake: 1.5.1
  - Update libjpeg.cmd/LocalJpeg.cmake: v3.0.4
  - Update libxml2.cmd/LocalLibXml2.cmake: v2.13.5
  - Update libyuv.cmd: ccdf87034 (1903)
  - Update svt.cmd/svt.sh/LocalSvt.cmake to v3.0.0. When available, use
    EbSvtAv1EncConfiguration::lossless and ::level_of_parallelism in libavif.
  - Remove AVIF_ENABLE_GTEST CMake option. It's now implied by
    AVIF_GTEST=LOCAL/SYSTEM.
  - Deprecate avifEncoder's minQuantizer, maxQuantizer, minQuantizerAlpha,
    and maxQuantizerAlpha fields. quality and qualityAlpha should be used
    instead. Deprecate avifenc's --min, --max, --minalpha and --maxalpha
    flags. -q or --qcolor and --qalpha should be used instead.
  - For dependencies, the deprecated way of setting AVIF_LOCAL_* to ON is
    removed. Dependency options can now only be set to OFF/LOCAL/SYSTEM.
  - Change the default quality for alpha to be the same as the quality for color.
  - Allow decoding subsampled images with odd Clean Aperture dimensions or offsets.
  - Deprecate avifCropRectConvertCleanApertureBox() and
    avifCleanApertureBoxConvertCropRect(). Replace them with
    avifCropRectFromCleanApertureBox() and avifCleanApertureBoxFromCropRect().
  - Write descriptive properties before transformative properties.
  - Reject non-essential transformative properties.
  - Treat avifenc --stdin as a regular positional file path argument.
  - Update man pages based on avifenc/dec's --help message.
  - android_jni: Support 16kb page size
  - android_jni: Set threads to 2 instead of CPU count
  - Fix overflows when dealing with alpha during YUV/RGB conversions and in
    avifRGBImageAllocatePixels().
  - Make avifEncoder.headerFormat a flag combination for future features.
  - Rename AVIF_HEADER_FULL to AVIF_HEADER_DEFAULT. Deprecate AVIF_HEADER_FULL.
  - Fix decoding image sequences with non video tracks (such as audio or subtitles).
  - Fix type checking of auxiliary tracks: previously any auxiliary track was
    assumed to be alpha, even if it was a different type. If the aux type is absent,
    it is assumed to be alpha.
- Add libargparse-ee74d1b53bd680748af14e737378de57e2a0a954.tar.gz
- Add %check/tests
- Add man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1745496000">- Temporary deactivation of the generation of manual pages
  with pandoc due to restrictions in Factory/ring1.
  (https://build.opensuse.org/request/show/1272161#comment-2136811)</changelog>
  <changelog author="munix9@googlemail.com" date="1745841600">- Disable tests due to restrictions in Factory/ring1.</changelog>
  <changelog author="munix9@googlemail.com" date="1746792000">- update to 1.3.0:
  * Add grayscale conversions in avifImageRGBToYUV and avifImageYUVToRGB.
  * Add avifRGBFormatIsGray to check whether an avifRGBFormat is gray.
  * Reject the conversion in avifenc from non-monochrome/monochrome to
    monochrome/non-monochrome when an ICC profile is present and not explicitly
    discarded.
  * Forbid encoding with AVIF_MATRIX_COEFFICIENTS_IDENTITY and
    AVIF_PIXEL_FORMAT_YUV400 to be AV1 spec compatible.
  * Do not go through RGB when reading/writing a grayscale PNG/JPG images in
    avifenc/avifdec
  * Ignore tmap items not present in grpl box
  * Assume any id is present in only one altr group as per spec.
  * avifpng.c: support ImageMagick app1 exif text data
  * avifjpeg.c: check for uint32_t overflow before add
  * Update googletest.cmd/LocalGTest.cmake: v1.16.0
  * Update libjpeg.cmd/LocalJpeg.cmake: 3.1.0
  * Update libsharpyuv: v1.5.0
  * Update libxml2.cmd/LocalLibXml2.cmake: v2.14.0
  * Update libyuv.cmd/LocalLibyuv.cmake: 4db2af62d (1909)
  * Update LocalRav1e.cmake: cargo-c v0.10.12
  * Update zlibpng.cmd: libpng 1.6.47
  * Fix wrong Exif orientation set in JPEG or PNG output by avifdec when the input
    AVIF file has an ImageRotation property with angle set to 1 or 3, has no
    ImageMirror property, and carries an Exif chunk. Note that Exif orientation is
    usually ignored in PNG files, so this mainly impacts JPEG files.
  * Encoder: fix ispe property for tmap with grid.
  * Decoder: check the ispe property of tmap items.
  * Allow lowercase GUIDs in XMP when reading JPEG files.
  * Update aom.cmd/LocalAom.cmake: v3.12.1
  * Change avifenc to start in automatic tiling mode.
  * Always forward Unspecified (2) CICP color primaries, transfer characteristics,
    and matrix coefficients to the AV1 encoder. Rely on the 'colr' box instead.
  * Declare *RowBytes as size_t in avifImageRGBToYUV()
    (CVE-2025-48175, bsc#1243270)
  * Check ftell returned value in avifjpeg.c
  * Add integer overflow checks to makeRoom.
    (CVE-2025-48174, bsc#1243269)
  * LocalJpeg.cmake: Support multi-config generators.
- Remove 'Group:' tags.</changelog>
</package>
<package pkgid="c4729bce7450909a5615900d7d898ac2cf11b6736c86a8a81931516120cbce67cccbf3a19441c9f12a2b0fa96ff2a300fc76784dcb3c604897f8554ac88c3a1f" name="avogadro" arch="x86_64">
  <version epoch="0" ver="1.100.0" rel="bp160.1.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1520424000">- Correct buildrequires so xorg-x11-devel is no longer
  used.</changelog>
  <changelog author="Atri B &lt;badshah400@gmail.com&gt;" date="1553601600">- Add avogadro-port-to-eigen3.patch: Pick commits from upstream
  to get avogadro building with eigen3; replace libeigen2-devel
  BuildRequires by eigen3-devel.
- Use cmake macros for build (%%cmake_build) and install
  (%%cmake_install).
- Use autosetup to setup source and apply patches in one go.
- Minor specfile cleanups:
  * Use %%license to package COPYING file.
  * Do away with defattrs for file lists.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554206400">- Remove 0006-Fix-libmsym-libdir-for-64bit.patch and define
  INSTALL_LIB_DIR and INSTALL_CMAKE_DIR via cmdline instead</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622116800">- Update to 1.93.0
  * A lot bug fixes and enhancements
  * Build with QT5
- Drop upstream fixed:
  * avogadro-port-to-eigen3.patch
  * 0005-Link-with-libm.patch
  * 0004-don-t-use-signbit-on-non-float.patch
  * avogadro-1.1.0-avopkg-fix-echo.patch
  * avogadro-boost.patch
  * avogadro-opanbabel.patch
- Icon and desktop file are now provided by upstream, dopped our
  versions
- Drop baselibs.conf, no libraries are installed (they are provided
  by the avogadrolibs package)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1629288000">- Update to 1.95.0
  * New "Layer" system, including custom rendering,
    locking and hiding parts of the molecule
  * Atom and residue labels
  * New protein cartoon / ribbon display
  * Update render options for Wireframe and Ball-and-Sticks
  * Add CJSON support for save/load residues and atom colors
  * New View =&gt; Apply Colors menu
  * Apply color schemes for residues
  * Render selected atoms in VdW and licorice modes
  * Save enabled / disabled state of scene / rendering plugins on quit
  * Install all translations
- Add required i18n subpackage as source (OBS does not support
  downloading on build time)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1634212800">- Update to 1.95.1
  * Bug Fixes
  - Fix disabled Balls and Sticks rendering on a fresh install (#744)
  - Fix for loading settings (#732)
  - Add ... to all input generators to indicate opening a dialog (#743)
  - Fix reference axes menu item (#705)
  - Continue rendering cartoons even if residues aren't found (#736)
  - Enable script formats like cclib to ask for bond perception on read (#738)
  * Features
  - Initial display-only property tables (#711)
  - Improve selection tool for layers (#729)
  * Maintenance
  - Make sure to run tests in avogadrolibs (including some fix for test failures) (#739)
  * Translations
  - Translations update from Weblate (#721)
- Fix build error for Tumbleweed.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1663243200">- Update to 1.97.0
  https://github.com/OpenChemistry/avogadroapp/releases/tag/1.97.0
  Highlights:
  * Adds molecular surfaces, solvent-accessible, and
    solvent-excluded surfaces
  * Adds support for a range of partial charge models, including
    coloring electrostatic potentials on surfaces.
  * This includes writing Python scripts to assign atomic charges
    or electrostatic potential
  * Adds improved hydrogen-bond, chalcogen, and halogen bond
    rendering.
  * Add improved close-contact and salt-bridge rendering
  * Significantly improves interface translation, properly loading
    translation files, and including a dialog to choose your
    preferred user interface language</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.98.1:
  * Migrated typedefs and changed const to constexpr
    (gh#OpenChemistry/avogadrolibs#1395)
  * Fix Python module install dir
    (gh#OpenChemistry/avogadrolibs#1413)
  * Revert validation of filenames
    (gh#OpenChemistry/avogadrolibs#1433).
  * Parsing orca output would crash when swapping orbitals
    (gh#OpenChemistry/avogadrolibs#1422)
  * Maint: vtk: Add missing OpenGL link target
    (gh#OpenChemistry/avogadrolibs#1412)
- Update avogadro-i18n source to 1.98.0.
- Requires avogadrolibs &gt;= 1.98.0.
- Bump required cmake version to 3.24 as required by upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Remove documentation installed by cmake: we package those files
  using %doc.
- Do not recommend -lang package: the package already has relevant
  supplements in place.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1746964800">- Update to version 1.100.0:
  * Long list of changes, see
    &lt;https://github.com/OpenChemistry/avogadroapp/releases/tag/1.100.0&gt;
- Switch to Qt6 for build.
- Set up for tests, but these cannot be built as of now due to
  dependency on paraview's QtTesting (unavailable for openSUSE).
- Disable Avogadro_ENABLE_RPC to avoid depending on Molequeue,
  which is abandoned and does not build with Qt6.
- Fix builds for 15.6 by requiring gcc-c++ &gt;= 8 for &lt;filesystem&gt;
  support.</changelog>
</package>
<package pkgid="3842dbf6e0269eb4614739a03a42496977382bb5c6ec6d3cb23b72aba1b65b525af619d281f6a37dd67b0e1fdb8bd46e16250318ba40c513d92a08c21b8db787" name="avogadro-lang" arch="noarch">
  <version epoch="0" ver="1.100.0" rel="bp160.1.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1520424000">- Correct buildrequires so xorg-x11-devel is no longer
  used.</changelog>
  <changelog author="Atri B &lt;badshah400@gmail.com&gt;" date="1553601600">- Add avogadro-port-to-eigen3.patch: Pick commits from upstream
  to get avogadro building with eigen3; replace libeigen2-devel
  BuildRequires by eigen3-devel.
- Use cmake macros for build (%%cmake_build) and install
  (%%cmake_install).
- Use autosetup to setup source and apply patches in one go.
- Minor specfile cleanups:
  * Use %%license to package COPYING file.
  * Do away with defattrs for file lists.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554206400">- Remove 0006-Fix-libmsym-libdir-for-64bit.patch and define
  INSTALL_LIB_DIR and INSTALL_CMAKE_DIR via cmdline instead</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622116800">- Update to 1.93.0
  * A lot bug fixes and enhancements
  * Build with QT5
- Drop upstream fixed:
  * avogadro-port-to-eigen3.patch
  * 0005-Link-with-libm.patch
  * 0004-don-t-use-signbit-on-non-float.patch
  * avogadro-1.1.0-avopkg-fix-echo.patch
  * avogadro-boost.patch
  * avogadro-opanbabel.patch
- Icon and desktop file are now provided by upstream, dopped our
  versions
- Drop baselibs.conf, no libraries are installed (they are provided
  by the avogadrolibs package)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1629288000">- Update to 1.95.0
  * New "Layer" system, including custom rendering,
    locking and hiding parts of the molecule
  * Atom and residue labels
  * New protein cartoon / ribbon display
  * Update render options for Wireframe and Ball-and-Sticks
  * Add CJSON support for save/load residues and atom colors
  * New View =&gt; Apply Colors menu
  * Apply color schemes for residues
  * Render selected atoms in VdW and licorice modes
  * Save enabled / disabled state of scene / rendering plugins on quit
  * Install all translations
- Add required i18n subpackage as source (OBS does not support
  downloading on build time)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1634212800">- Update to 1.95.1
  * Bug Fixes
  - Fix disabled Balls and Sticks rendering on a fresh install (#744)
  - Fix for loading settings (#732)
  - Add ... to all input generators to indicate opening a dialog (#743)
  - Fix reference axes menu item (#705)
  - Continue rendering cartoons even if residues aren't found (#736)
  - Enable script formats like cclib to ask for bond perception on read (#738)
  * Features
  - Initial display-only property tables (#711)
  - Improve selection tool for layers (#729)
  * Maintenance
  - Make sure to run tests in avogadrolibs (including some fix for test failures) (#739)
  * Translations
  - Translations update from Weblate (#721)
- Fix build error for Tumbleweed.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1663243200">- Update to 1.97.0
  https://github.com/OpenChemistry/avogadroapp/releases/tag/1.97.0
  Highlights:
  * Adds molecular surfaces, solvent-accessible, and
    solvent-excluded surfaces
  * Adds support for a range of partial charge models, including
    coloring electrostatic potentials on surfaces.
  * This includes writing Python scripts to assign atomic charges
    or electrostatic potential
  * Adds improved hydrogen-bond, chalcogen, and halogen bond
    rendering.
  * Add improved close-contact and salt-bridge rendering
  * Significantly improves interface translation, properly loading
    translation files, and including a dialog to choose your
    preferred user interface language</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.98.1:
  * Migrated typedefs and changed const to constexpr
    (gh#OpenChemistry/avogadrolibs#1395)
  * Fix Python module install dir
    (gh#OpenChemistry/avogadrolibs#1413)
  * Revert validation of filenames
    (gh#OpenChemistry/avogadrolibs#1433).
  * Parsing orca output would crash when swapping orbitals
    (gh#OpenChemistry/avogadrolibs#1422)
  * Maint: vtk: Add missing OpenGL link target
    (gh#OpenChemistry/avogadrolibs#1412)
- Update avogadro-i18n source to 1.98.0.
- Requires avogadrolibs &gt;= 1.98.0.
- Bump required cmake version to 3.24 as required by upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Remove documentation installed by cmake: we package those files
  using %doc.
- Do not recommend -lang package: the package already has relevant
  supplements in place.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1746964800">- Update to version 1.100.0:
  * Long list of changes, see
    &lt;https://github.com/OpenChemistry/avogadroapp/releases/tag/1.100.0&gt;
- Switch to Qt6 for build.
- Set up for tests, but these cannot be built as of now due to
  dependency on paraview's QtTesting (unavailable for openSUSE).
- Disable Avogadro_ENABLE_RPC to avoid depending on Molequeue,
  which is abandoned and does not build with Qt6.
- Fix builds for 15.6 by requiring gcc-c++ &gt;= 8 for &lt;filesystem&gt;
  support.</changelog>
</package>
<package pkgid="b3fb6d808daff132a1583d9ce84bf41c6e3468f6b6ab5274a6087c3b58ca8a90454936925089c26fec8ea9867d03be6c8599db99e3656e54f353be8abc13bda5" name="avogadro2-data" arch="noarch">
  <version epoch="0" ver="1.100.0" rel="bp160.1.2"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1634212800">- Update to 1.95.1
  * Bug Fixes
  - Fix disabled Balls and Sticks rendering on a fresh install (#744)
  - Fix for loading settings (#732)
  - Add ... to all input generators to indicate opening a dialog (#743)
  - Fix reference axes menu item (#705)
  - Continue rendering cartoons even if residues aren't found (#736)
  - Enable script formats like cclib to ask for bond perception on read (#738)
  * Features
  - Initial display-only property tables (#711)
  - Improve selection tool for layers (#729)
  * Maintenance
  - Make sure to run tests in avogadrolibs (including some fix for test failures) (#739)
  * Translations
  - Translations update from Weblate (#721)
- Fix build error for Leap with libmsym &gt;= 0.2.0.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634644800">- Workaround for Arm/openGL ES, until overlayaxes fixed upstream
  https://github.com/OpenChemistry/avogadrolibs/issues/810</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1662897600">- Update to 1.97.0
  https://github.com/OpenChemistry/avogadrolibs/releases/tag/1.97.0
  Highlights:
  * Adds molecular surfaces, solvent-accessible, and
    solvent-excluded surfaces
  * Adds support for a range of partial charge models, including
    coloring electrostatic potentials on surfaces.
  * This includes writing Python scripts to assign atomic charges
    or electrostatic potential
  * Adds improved hydrogen-bond, chalcogen, and halogen bond
    rendering.
  * Add improved close-contact and salt-bridge rendering
  * Significantly improves interface translation, properly loading
    translation files, and including a dialog to choose your
    preferred user interface language
- Add Fix_qtplugins_surfaces_linking.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670414400">- Fix build with mmtf-cpp 1.1.0, add
  0001-Avoid-ambigous-definition-of-mmtf-s-is_polymer.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.98.1:
  * Migrated typedefs and changed const to constexpr
    (gh#OpenChemistry/avogadrolibs#1395).
  * Fix Python module install dir
    (gh#OpenChemistry/avogadrolibs#1413).
  * Revert validation of filenames
    (gh#OpenChemistry/avogadrolibs#1433).
  * Parsing orca output would crash when swapping orbitals
    (gh#OpenChemistry/avogadrolibs#1422).
  * Maint: vtk: Add missing OpenGL link target
    (gh#OpenChemistry/avogadrolibs#1412).
- Update molecules and crystals source tarballs to version
  1.98.0.
- Drop upstreamed patches:
  * Fix_qtplugins_surfaces_linking.patch
  * 0001-Avoid-ambigous-definition-of-mmtf-s-is_polymer.patch.
- Minor rebase of not-install-gwavi.patch to apply cleanly.
- Remove executable permissions from scripts not installed to
  $PATH and not expected to be directly executed.
- Bump cmake required version to 3.24 as required by upstream.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1710936000">- Update licenses based on legaldb scan</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1742472000">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTFBS with cmake4</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1747051200">- Update to version 1.00.0:
  * Too many changes to list, see
    &lt;https://github.com/OpenChemistry/avogadrolibs/releases/tag/1.100.0&gt;
- Add fragments-1.99.0.tar.gz as source, needed for build.
- Switch to Qt6 for build.
- Enable testing during build and run tests as part of %check for
  openSUSE &gt; 1550 (gtest too old on 15.6 and older); add necessary
  deps cmake(GTest) and cmake(Qt6Test) as BuildRequires.
- Build with system nlohmann_json, pugixml.
- Drop dependence on Molequeue (abandoned, does not build with
  Qt6).
- Fix builds for Leap 15.6 after switching to Qt6 (needs gcc-c++
  &gt;= 8 for &lt;filesystem&gt; support).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1747656000">- Add eigen3-devel to avogadrolibs-devel Requires.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749470400">- Add upstream fix (gh#OpenChemistry/avogadrolibs#2021)
  * fix-cmake-dependencies.patch</changelog>
</package>
<package pkgid="58ba550a3e96045304c86c4f119916cbc9099afdb0229308ff7b0df2eee724e715d87c7b6471c6d4a08ebb09822d1c073367ed51bf1b54adf666e0bb8e398175" name="avogadrolibs-devel" arch="x86_64">
  <version epoch="0" ver="1.100.0" rel="bp160.1.2"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1634212800">- Update to 1.95.1
  * Bug Fixes
  - Fix disabled Balls and Sticks rendering on a fresh install (#744)
  - Fix for loading settings (#732)
  - Add ... to all input generators to indicate opening a dialog (#743)
  - Fix reference axes menu item (#705)
  - Continue rendering cartoons even if residues aren't found (#736)
  - Enable script formats like cclib to ask for bond perception on read (#738)
  * Features
  - Initial display-only property tables (#711)
  - Improve selection tool for layers (#729)
  * Maintenance
  - Make sure to run tests in avogadrolibs (including some fix for test failures) (#739)
  * Translations
  - Translations update from Weblate (#721)
- Fix build error for Leap with libmsym &gt;= 0.2.0.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634644800">- Workaround for Arm/openGL ES, until overlayaxes fixed upstream
  https://github.com/OpenChemistry/avogadrolibs/issues/810</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1662897600">- Update to 1.97.0
  https://github.com/OpenChemistry/avogadrolibs/releases/tag/1.97.0
  Highlights:
  * Adds molecular surfaces, solvent-accessible, and
    solvent-excluded surfaces
  * Adds support for a range of partial charge models, including
    coloring electrostatic potentials on surfaces.
  * This includes writing Python scripts to assign atomic charges
    or electrostatic potential
  * Adds improved hydrogen-bond, chalcogen, and halogen bond
    rendering.
  * Add improved close-contact and salt-bridge rendering
  * Significantly improves interface translation, properly loading
    translation files, and including a dialog to choose your
    preferred user interface language
- Add Fix_qtplugins_surfaces_linking.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670414400">- Fix build with mmtf-cpp 1.1.0, add
  0001-Avoid-ambigous-definition-of-mmtf-s-is_polymer.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.98.1:
  * Migrated typedefs and changed const to constexpr
    (gh#OpenChemistry/avogadrolibs#1395).
  * Fix Python module install dir
    (gh#OpenChemistry/avogadrolibs#1413).
  * Revert validation of filenames
    (gh#OpenChemistry/avogadrolibs#1433).
  * Parsing orca output would crash when swapping orbitals
    (gh#OpenChemistry/avogadrolibs#1422).
  * Maint: vtk: Add missing OpenGL link target
    (gh#OpenChemistry/avogadrolibs#1412).
- Update molecules and crystals source tarballs to version
  1.98.0.
- Drop upstreamed patches:
  * Fix_qtplugins_surfaces_linking.patch
  * 0001-Avoid-ambigous-definition-of-mmtf-s-is_polymer.patch.
- Minor rebase of not-install-gwavi.patch to apply cleanly.
- Remove executable permissions from scripts not installed to
  $PATH and not expected to be directly executed.
- Bump cmake required version to 3.24 as required by upstream.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1710936000">- Update licenses based on legaldb scan</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1742472000">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTFBS with cmake4</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1747051200">- Update to version 1.00.0:
  * Too many changes to list, see
    &lt;https://github.com/OpenChemistry/avogadrolibs/releases/tag/1.100.0&gt;
- Add fragments-1.99.0.tar.gz as source, needed for build.
- Switch to Qt6 for build.
- Enable testing during build and run tests as part of %check for
  openSUSE &gt; 1550 (gtest too old on 15.6 and older); add necessary
  deps cmake(GTest) and cmake(Qt6Test) as BuildRequires.
- Build with system nlohmann_json, pugixml.
- Drop dependence on Molequeue (abandoned, does not build with
  Qt6).
- Fix builds for Leap 15.6 after switching to Qt6 (needs gcc-c++
  &gt;= 8 for &lt;filesystem&gt; support).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1747656000">- Add eigen3-devel to avogadrolibs-devel Requires.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749470400">- Add upstream fix (gh#OpenChemistry/avogadrolibs#2021)
  * fix-cmake-dependencies.patch</changelog>
</package>
<package pkgid="6954c6eb528ec2503fc3ba29c63bc5b6bd8960a157a87e2259300ae39e81f918283fee760b3991a168139511206ea18294c6e1950497d849468917c3f2657bed" name="avogadrolibs-plugins" arch="x86_64">
  <version epoch="0" ver="1.100.0" rel="bp160.1.2"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1634212800">- Update to 1.95.1
  * Bug Fixes
  - Fix disabled Balls and Sticks rendering on a fresh install (#744)
  - Fix for loading settings (#732)
  - Add ... to all input generators to indicate opening a dialog (#743)
  - Fix reference axes menu item (#705)
  - Continue rendering cartoons even if residues aren't found (#736)
  - Enable script formats like cclib to ask for bond perception on read (#738)
  * Features
  - Initial display-only property tables (#711)
  - Improve selection tool for layers (#729)
  * Maintenance
  - Make sure to run tests in avogadrolibs (including some fix for test failures) (#739)
  * Translations
  - Translations update from Weblate (#721)
- Fix build error for Leap with libmsym &gt;= 0.2.0.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634644800">- Workaround for Arm/openGL ES, until overlayaxes fixed upstream
  https://github.com/OpenChemistry/avogadrolibs/issues/810</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1662897600">- Update to 1.97.0
  https://github.com/OpenChemistry/avogadrolibs/releases/tag/1.97.0
  Highlights:
  * Adds molecular surfaces, solvent-accessible, and
    solvent-excluded surfaces
  * Adds support for a range of partial charge models, including
    coloring electrostatic potentials on surfaces.
  * This includes writing Python scripts to assign atomic charges
    or electrostatic potential
  * Adds improved hydrogen-bond, chalcogen, and halogen bond
    rendering.
  * Add improved close-contact and salt-bridge rendering
  * Significantly improves interface translation, properly loading
    translation files, and including a dialog to choose your
    preferred user interface language
- Add Fix_qtplugins_surfaces_linking.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670414400">- Fix build with mmtf-cpp 1.1.0, add
  0001-Avoid-ambigous-definition-of-mmtf-s-is_polymer.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701864000">- Update to version 1.98.1:
  * Migrated typedefs and changed const to constexpr
    (gh#OpenChemistry/avogadrolibs#1395).
  * Fix Python module install dir
    (gh#OpenChemistry/avogadrolibs#1413).
  * Revert validation of filenames
    (gh#OpenChemistry/avogadrolibs#1433).
  * Parsing orca output would crash when swapping orbitals
    (gh#OpenChemistry/avogadrolibs#1422).
  * Maint: vtk: Add missing OpenGL link target
    (gh#OpenChemistry/avogadrolibs#1412).
- Update molecules and crystals source tarballs to version
  1.98.0.
- Drop upstreamed patches:
  * Fix_qtplugins_surfaces_linking.patch
  * 0001-Avoid-ambigous-definition-of-mmtf-s-is_polymer.patch.
- Minor rebase of not-install-gwavi.patch to apply cleanly.
- Remove executable permissions from scripts not installed to
  $PATH and not expected to be directly executed.
- Bump cmake required version to 3.24 as required by upstream.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1710936000">- Update licenses based on legaldb scan</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1742472000">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTFBS with cmake4</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1747051200">- Update to version 1.00.0:
  * Too many changes to list, see
    &lt;https://github.com/OpenChemistry/avogadrolibs/releases/tag/1.100.0&gt;
- Add fragments-1.99.0.tar.gz as source, needed for build.
- Switch to Qt6 for build.
- Enable testing during build and run tests as part of %check for
  openSUSE &gt; 1550 (gtest too old on 15.6 and older); add necessary
  deps cmake(GTest) and cmake(Qt6Test) as BuildRequires.
- Build with system nlohmann_json, pugixml.
- Drop dependence on Molequeue (abandoned, does not build with
  Qt6).
- Fix builds for Leap 15.6 after switching to Qt6 (needs gcc-c++
  &gt;= 8 for &lt;filesystem&gt; support).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1747656000">- Add eigen3-devel to avogadrolibs-devel Requires.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1749470400">- Add upstream fix (gh#OpenChemistry/avogadrolibs#2021)
  * fix-cmake-dependencies.patch</changelog>
</package>
<package pkgid="2416ddaa62cee569484a9eeee8891f4ca20660ac712ae788050f8ef399f08c646a7e5c253bdfe6234324c5ee3ddc9f63b9f0a90b8775cd5e4daf81e1e444cfe4" name="avr-libc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="bp160.1.33"/>
  <changelog author="sbrabec@suse.com" date="1434542400">- Update to version 1.8.1.
- Drop patches:
  * 41-avr-libc-1.7.1-xmega32X1.patch: introduces just empty header
  * 42-avr-libc-1.7.1-xmega128b1.patch: now upstreamed
- Add PDF doc.
- Add GPG keys.
- Clean spec file.</changelog>
  <changelog author="duwe@suse.com" date="1486382400">- update to 2.0.0
- remove old gcc-4.7 spec file
- fix prefix
- update some self tests to v2.0 tree structure</changelog>
  <changelog author="kkaempf@suse.com" date="1512648000">- symlink /opt/cross/avr/bin to /usr/avr/bin to make gcc use
  avr-as instead of as.</changelog>
  <changelog author="kkaempf@suse.com" date="1512820800">- build with cross-avr-gcc7</changelog>
  <changelog author="kkaempf@suse.com" date="1513080000">- build with cross-avr-gcc7-bootstrap (bsc#1072028)</changelog>
  <changelog author="rguenther@suse.com" date="1513080001">- Fix gcc dependences to use %gcc_version.
- Remove install dependences on cross-avr-gcc and cross-avr-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1513080002">- Adjust sysroot to /usr/avr/sys-root as agreed upon by gcc and binutils.</changelog>
  <changelog author="kkaempf@suse.com" date="1513080003">- fix Leap 42.x build: define gcc_version 7</changelog>
  <changelog author="rguenther@suse.com" date="1518696000">- Remove setBadness from avr-libc-rpmlintrc, filter also errors</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.com&gt;" date="1668081600">- update to 2.1.0
  * Improvements and additions:
  - Patch #9187 improved the library coverage for the AVR_TINY
    architecture (ATtiny10 and relatives).  In particular, many
    of the functions from &lt;string.h&gt; are now available there.
  - Patch #8729 adds ISR_NOICF and ISR_FLATTEN to &lt;avr/interrupt.h&gt;
  * Bugs fixed:
    [#36933] Documentation no longer correctly describes how to declare
    [#41689] add static_assert to assert.h
    [#48898] power_usart3_* functions no more defined in power.h
    [#49020] dtostre() flags documentation error
    [#49447] Example code for uart_putchar() has error in recursive call
    strings for storage in program memory
    [#50439] avr/iom32u4.h does not define PRTIM4
    [#51755] iotn441.h &amp; iotn841.h missing definitions for PUEA[0-7] and PUEB[0-3]
    [no-id] util/eu_dst.h: fix reversed DST decision logic for March and October
    [no-id] util/delay.h.in: add missing return
  * Contributed Patches:
    [no-id] Define weak symbols for known memory region sizes based on device
    header definitions, starting with fuse region.
    [#8961] Update test script for new simulavr and library layout
    [#8964] Update tests isinf-01.c, signbit-01.c and modf-np.c
    [#9163] New eeprom write block function for xmega using eeprom page write
    [#8729] [avr/interrupt.h] Add ISR_NOICF, ISR_FLATTEN. Fix namespace
    of identifiers.
    [#8536] Fix a typo within &lt;stdio.h&gt;
    [#8649] small documentation fixes in
    [#9187] [AVR_TINY]: Support 16-bit xtoa functons and more string functions.
    [#9400] Add avrxmega3 multilibs
    [#9659] Update eeprom_is_ready for avrxmega3 devices
    [#9553] Fix some issues in libc/
    [#9864] Use proper float function names and prototypes</changelog>
</package>
<package pkgid="8bacf250d304a51d6f2936b517b6683476c18888261200f0004523758bed8107c371810f650dcaf393436f1f646a5829ea6e7427fb57c1ed09388dbe12702e03" name="avrdude" arch="x86_64">
  <version epoch="0" ver="8.0" rel="bp160.1.5"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1687262400">- update PKGBUILD url</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.com&gt;" date="1696766400">- Update to 7.2:
  * Major changes
  - libgpiod support for linuxgpio #1299
  - Support jtag2updi -U UPDI EEPROM write #1318
  - avrdude.conf reconciled with ATDFs #1343
  - avrdude -p part/s now also shows part variants #1343
  - New programmer dryrun for testing #1347
  - New -T cmd to mix terminal with -U commands #1373
  - Run -t interactive terminals in CLI option order #1402
  - Terminal
    + Command config (mnemonic fuse setting) #1365
    + Write to memory from files #1358
    + Command save memory to file #1396
    + Subshell command ! #1397
    + Command include file #1429
  * New devices supported:
  - AT89S51, AT89S52
  - AT90S2323, ATtiny22
  - ATmega16M1, ATmega32C1, ATmega64C1
  - ATA5505
  - ATA6612C, ATA6613C
  - ATA6614Q
  - ATA6616C, ATA6617C
  - ATA664251
  - ATmega16HVA, ATmega8HVA
  - ATmega16HVB, ATmega16HVBrevB, ATmega32HVB, ATmega32HVBrevB
  - ATmega64HVE2, ATmega32HVE2
  - AT90PWM1
  - AT90PWM161, AT90PWM81
  - ATxmega32C3
  - ATxmega32D3
  - ATtiny416auto
  * New programmers supported:
  - dryrun
  - raspberry_pi_gpio
  - Flyswatter2
  - CH341A
  - Kanda AVRISP-U
  - arduino_as_isp
  - scratchmonkey, scratchmonkey_pp, scratchmonkey_hvsp
  See https://github.com/avrdudes/avrdude/blob/main/NEWS for
  full changelog</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Adjust PKGBUILD to also reference version 7.2. Source download
  verificator gets confused otherwise.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN (all patches
  currently commented out).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717416000">- Update to 7.3:
  * Connect target via -P serialadapter[:sn] and -P usb:vid:pid[:sn]
  * Add io and sram memory info in lieu of incomplete data memory
  * New test-avrdude script in tools
  * Update SerialUPDI protocol
  * New terminal commands: regfile, factory reset.
  * New devices supported: AVR16EB14, AVR16EB20, AVR16EB28,
    AVR16EB32, AVR64DU28, AVR64DU32
  * New programmers supported: ft2232h_jtag, ft232h_jtag, dryboot
  * For full changelog, see:
    https://github.com/avrdudes/avrdude/blob/main/NEWS</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1720008000">- Update avrdude.keyring</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720180800">- Set version appropriately in PKGBUILD: if it file is present, it
  must be correct.</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.de&gt;" date="1736078400">- Update to 8.0
  * Major changes compared to the previous version:
  - Support of multi-memory .hex/.srec files and memory lists #1828
  - New terminal disasm command #1842
  - GUI implementation of avrdude to demonstrate libavrdude #1714
  * New devices supported:
  - AVR16DU14, AVR16DU20, AVR16DU28, AVR16DU32
  - AVR32DU14, AVR32DU20, AVR32DU28, AVR32DU32
  * New programmers supported:
  - serprog
  - pickit5_updi
  * New serial adapters supported:
  - ch342, ch344, ch347, ch9103
- bump libavrdude soname
- building with libserialport now</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.de&gt;" date="1736856001">- drop avrdude-5.11-no-builddate.diff
  and avrdude-ipv6.patch, both upstream</changelog>
</package>
<package pkgid="33f49814dbfedebff95e53ebcf80ba4fdc6825b4a3cd2e6f1626df7aef16269c735c806fb51d654b1e43782e44cbed22607040e720d70f0dc3140efdbd977663" name="avrdude-devel" arch="x86_64">
  <version epoch="0" ver="8.0" rel="bp160.1.5"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1687262400">- update PKGBUILD url</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.com&gt;" date="1696766400">- Update to 7.2:
  * Major changes
  - libgpiod support for linuxgpio #1299
  - Support jtag2updi -U UPDI EEPROM write #1318
  - avrdude.conf reconciled with ATDFs #1343
  - avrdude -p part/s now also shows part variants #1343
  - New programmer dryrun for testing #1347
  - New -T cmd to mix terminal with -U commands #1373
  - Run -t interactive terminals in CLI option order #1402
  - Terminal
    + Command config (mnemonic fuse setting) #1365
    + Write to memory from files #1358
    + Command save memory to file #1396
    + Subshell command ! #1397
    + Command include file #1429
  * New devices supported:
  - AT89S51, AT89S52
  - AT90S2323, ATtiny22
  - ATmega16M1, ATmega32C1, ATmega64C1
  - ATA5505
  - ATA6612C, ATA6613C
  - ATA6614Q
  - ATA6616C, ATA6617C
  - ATA664251
  - ATmega16HVA, ATmega8HVA
  - ATmega16HVB, ATmega16HVBrevB, ATmega32HVB, ATmega32HVBrevB
  - ATmega64HVE2, ATmega32HVE2
  - AT90PWM1
  - AT90PWM161, AT90PWM81
  - ATxmega32C3
  - ATxmega32D3
  - ATtiny416auto
  * New programmers supported:
  - dryrun
  - raspberry_pi_gpio
  - Flyswatter2
  - CH341A
  - Kanda AVRISP-U
  - arduino_as_isp
  - scratchmonkey, scratchmonkey_pp, scratchmonkey_hvsp
  See https://github.com/avrdudes/avrdude/blob/main/NEWS for
  full changelog</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Adjust PKGBUILD to also reference version 7.2. Source download
  verificator gets confused otherwise.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN (all patches
  currently commented out).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1717416000">- Update to 7.3:
  * Connect target via -P serialadapter[:sn] and -P usb:vid:pid[:sn]
  * Add io and sram memory info in lieu of incomplete data memory
  * New test-avrdude script in tools
  * Update SerialUPDI protocol
  * New terminal commands: regfile, factory reset.
  * New devices supported: AVR16EB14, AVR16EB20, AVR16EB28,
    AVR16EB32, AVR64DU28, AVR64DU32
  * New programmers supported: ft2232h_jtag, ft232h_jtag, dryboot
  * For full changelog, see:
    https://github.com/avrdudes/avrdude/blob/main/NEWS</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1720008000">- Update avrdude.keyring</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720180800">- Set version appropriately in PKGBUILD: if it file is present, it
  must be correct.</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.de&gt;" date="1736078400">- Update to 8.0
  * Major changes compared to the previous version:
  - Support of multi-memory .hex/.srec files and memory lists #1828
  - New terminal disasm command #1842
  - GUI implementation of avrdude to demonstrate libavrdude #1714
  * New devices supported:
  - AVR16DU14, AVR16DU20, AVR16DU28, AVR16DU32
  - AVR32DU14, AVR32DU20, AVR32DU28, AVR32DU32
  * New programmers supported:
  - serprog
  - pickit5_updi
  * New serial adapters supported:
  - ch342, ch344, ch347, ch9103
- bump libavrdude soname
- building with libserialport now</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.de&gt;" date="1736856001">- drop avrdude-5.11-no-builddate.diff
  and avrdude-ipv6.patch, both upstream</changelog>
</package>
<package pkgid="bfefae14b4294bf0e88637779801c639b61423ee81ff1f3052e2a76040e2ba07ff404d114e06db032fd59df067b7f77a5d3a9212f650aeafd317b0a72bb1e244" name="awesfx" arch="x86_64">
  <version epoch="0" ver="0.5.2" rel="bp160.1.13"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1365681600">- Place udev rules in the correct directory.</changelog>
  <changelog author="tiwai@suse.de" date="1406203200">- Updated to version 0.5.1e:
  fix wrong error condition checks in loadbank.c</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in udev-soundfont script
- add patches:
  * awesfx-0.5.1e-fix-bashisms.patch</changelog>
  <changelog author="tiwai@suse.de" date="1553601600">- Update to version 0.5.2:
  Added ALSA-native GUS patch loader (agusload)
- Change URL to github</changelog>
  <changelog author="tiwai@suse.de" date="1567684800">- Fix the build error and warning:
  Fix-the-bogus-return-in-seq_set_gus_bank.patch
  Fix-unused-variable-prev-in-strtoken.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712404800">- Use full URL for source tarball.</changelog>
</package>
<package pkgid="4f4f847a6e921590c054987e9e2ae1af25aace67fadc9e445605213bd59c8fa0544671832a537d4f23d7eab7d3cebb2adf793b8e339a9162ec02a6a57b5240e3" name="awesome" arch="x86_64">
  <version epoch="0" ver="4.3" rel="bp160.1.10"/>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1501761600">- Update to version 4.2:
  * See https://awesomewm.org/apidoc/documentation/89-NEWS.md.html#v42</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204800">- relax lua requires for openSUSE:Leap</changelog>
  <changelog author="tiwai@suse.de" date="1519819200">- Fix the documentation build with asciidoctor (bsc#1075764):
  awesome-asciidoc-fix.patch</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Ensure neutrality of descriptions.</changelog>
  <changelog author="mvetter@suse.com" date="1548676800">- Update to 4.3 :
  See https://awesomewm.org/apidoc/documentation/89-NEWS.md.html#v43
- Remove awesome-asciidoc-fix.patch:
  asciidoctor is used instead of asciidoc now</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549713600">- Do not hardcode default ruby, but use macro
- package LICENSE as %license</changelog>
  <changelog author="Brice DEKANY &lt;brice.dekany@suse.com&gt;" date="1595073600">- Added 001-extern-vars-declaration-fix-gcc10.patch: Move variable
  declarations from header to C file to fix build with GCC 10
  See https://github.com/awesomeWM/awesome/pull/3065</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1638964800">- Update awesome-branding-upstream metadata:
  + do not use otherproviders() conflicts: the syntax is
    deprecated.
  + UUse booleandeps for supplements instead of packageand().
- Add requires(post|postun): upate-alternatives. The scriplets call
  u-a unconditionally, thus we need to ensure presence of
  update-alternatives.
- Properly %ghost-own /etc/alternatives/default.desktop.
- Drop duplicate LICENSE in docdir: we have it in licensedir.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="4a3a5957063a4364e17c65218bbf0bc42b949bbf253ee3fce3b66740206f4f203a304e743cd21464bfbe3f7961981e56b6961f5c00d0f02a2651c75091c29502" name="awesome-branding-upstream" arch="noarch">
  <version epoch="0" ver="4.3" rel="bp160.1.10"/>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1501761600">- Update to version 4.2:
  * See https://awesomewm.org/apidoc/documentation/89-NEWS.md.html#v42</changelog>
  <changelog author="mimi.vx@gmail.com" date="1507204800">- relax lua requires for openSUSE:Leap</changelog>
  <changelog author="tiwai@suse.de" date="1519819200">- Fix the documentation build with asciidoctor (bsc#1075764):
  awesome-asciidoc-fix.patch</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Ensure neutrality of descriptions.</changelog>
  <changelog author="mvetter@suse.com" date="1548676800">- Update to 4.3 :
  See https://awesomewm.org/apidoc/documentation/89-NEWS.md.html#v43
- Remove awesome-asciidoc-fix.patch:
  asciidoctor is used instead of asciidoc now</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549713600">- Do not hardcode default ruby, but use macro
- package LICENSE as %license</changelog>
  <changelog author="Brice DEKANY &lt;brice.dekany@suse.com&gt;" date="1595073600">- Added 001-extern-vars-declaration-fix-gcc10.patch: Move variable
  declarations from header to C file to fix build with GCC 10
  See https://github.com/awesomeWM/awesome/pull/3065</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1638964800">- Update awesome-branding-upstream metadata:
  + do not use otherproviders() conflicts: the syntax is
    deprecated.
  + UUse booleandeps for supplements instead of packageand().
- Add requires(post|postun): upate-alternatives. The scriplets call
  u-a unconditionally, thus we need to ensure presence of
  update-alternatives.
- Properly %ghost-own /etc/alternatives/default.desktop.
- Drop duplicate LICENSE in docdir: we have it in licensedir.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ee43ee96e00f8b0571cc8df9a02a436744322429b9ae44faeb6801bda4350b03fecbcea85d15c64b106c65c22a87b058f92f43839af71b69509f2fcf4dff79ff" name="awesome-vicious" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="bp160.1.9"/>
  <changelog author="toganm@opensuse.org" date="1328961600">- Update to git201202051838
  * hddtemp: fix curl hang in version 7.24.0</changelog>
  <changelog author="toganm@opensuse.org" date="1351684800">- Update to official version 2.1.0
  Cleanup spec to meet guidelines</changelog>
  <changelog author="toganm@opensuse.org" date="1352376000">- Change license to GPL-2.0+</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Update to version 2.1.3
  + bat: fix broken battery remaining time (was always N/A)
  + volume: get the normalized volume like alsamixer and DE's indicator
- Use download Url as source</changelog>
  <changelog author="okurz@suse.com" date="1529323200">- Update to version 2.3.1:
  * Allow widget to be a function again
  * btc: also usuable with cjson
  * btc: remove synchronous variant and dead code
  * Bitcoin price widget.
  * Do not hide loading errors when widgets failed to load
  * cmus: use correct shell escape function
  * Add widget for cmus (follow mpd conventions) (#46)
- Switch to https://github.com/Mic92/vicious</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619611200">- Update to version 2.3.3
  * LUA 5.3 compatibility
  * Support stacked graphs
  * hwmontemp_linux: Provide name-based access to hwmon sensors
    via sysfs
  * mpd_all: Expose more informations and format time in [hh:]mm:ss
  * Improve defaults and mechanism for data caching
  * Escape XML entities in results by default
  * weather_all: Update NOAA link and use Awesome asynchronous API
  * mem_linux: Use MemAvailable to calculate free amount
  * mem_freebsd: Correct calculation and switch to swapinfo for swap
  * bat_freebsd: Add critical charging state
  * fs_all: Fix shell quoting of option arguments</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622030400">- Update to version 2.5.0
  * Added vicious.call_async asynchronous analogous to vicious.call
  * Feature: [hwmontemp] Bring back sysfs path cache
  * Fixed fallback the number of lines before packages listing to 0
  * Remove trailing semicolon at the end of command.
  * volume now uses other emojis to show mute state.
    This BREAKS backward compatibility if users substitute custom
    symbols from these default.
  * Added notmuch_all, cpu_freebsd widget types
  * [cmus_all] Promote to widgets/.
  * [wifiiw_linux] Expose BSSID.
  * [wifi_linux] Expose frequency and transmission power.
  * spawn as a fallback for awful.spawn in case Vicious is used as a
    stand-alone library.
  * Added helpers.setasyncall to avoid writing redundant workers for
    asynchronous widget types.
  * Added helpers.setcall for registering functions as widget types.
  * Deprecate the use of io.popen
  * [pkg,weather,contrib/btc] Allow function call without Awesome
  * Removed: helpers.sysctl and helpers.sysctl_table were removed
    in favour of helpers.sysctl_async.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1622116800">- Update old RPM macros/constructs.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1665403200">- Update to version 2.5.1
  * Fixed escaping of % in helpers.format, which affects mpd widget ${Progress}
  * Fixed possible deadlock of when update widgets
  * [contrib.openweather] New API compatibility, which requires an API key
  * [gmail] Authentication documentation
  * [mpd] Added support for sending arbitrary commands
  * [contrib.openweather] Added various new return values</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673870400">- update to 2.6.0:
  * Added AMD GPU widget type for Linux.
  * Fixed typos in contrib widgets documentation.</changelog>
</package>
<package pkgid="462dad7a2a82e810083513c1b18f1a251b9ec36166094b5a762a2d9e155dc18b26689a22c1ac66254a6579aeedffb943e72039192ba017a5353f366a5043a58e" name="awf-gtk2" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp160.1.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs</changelog>
</package>
<package pkgid="2837bd607f40f2c1f8349c16b37bc70549d313709bc480e260dac97e7b9fd49823095633f4cfb2299659ff970e84d6d57393b627571fefccc2545e92da5d8930" name="awf-gtk3" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp160.1.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  from GLIB 2.32 &amp; GTK 3.4
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change from GLIB 2.32
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem from GTK 3.14</changelog>
</package>
<package pkgid="8140dec9f078dc2333073ce416626829061d27d551cd8e9e182091fda1203ce8e7bd7f9b532675ef834f5881f725a241c87c8d27669337540df405965171bede" name="awf-gtk4" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp160.1.2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1620216000">- New upstream version (2.4.0)
  * add gtk widgets (check, radio, progress, icon) to gtk treeview
  * add text, check, radio, action, accelerator for menu items
  * add two GtkVolumeButton widgets
  * add two GtkLinkButton widgets</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1625659200">- New upstream version (2.5.0)
  * display all themes in system theme menu
  * display hour in status bar on startup, on theme reload,
    on theme change
  * add new toolbar button (minus icon) to switch text direction
  * add new dialog with many scales
  * enable keyboard shortcuts
  * disable non working screenshot</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1631188800">- New upstream version (2.6.0)
  * puts the Options menu first
  * allow to run multiple independent instances
  * fix getenv crash when variable is not defined
  * set fixed width for font button
  * add 0 and 100 marks for all scales</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686052800">- New upstream version (2.7.0)
  * add text direction menu
  * add close button for tabs</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1686916800">- Package spec update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1706875200">- New upstream release (2.8.0)
  * add progress bar in tool bar and status bar
  * auto resize window to minimal size after layout update</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1741003200">- New upstream release (2.8.1)
  * packages scripts update
  * fix building error from GLIB 2.83 and/or from GCC 15
  * replace some deprecated functions
  * auto resize window to minimal size 1s after application start</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1743768000">- New upstream release (2.9.0)
  * hide deprecated notices from includes
  * add notification from toolbar
  * add entry in toolbar
  * support for native --help, argc/argv for g_application_run
  * fix set theme from command line
  * limit width of filebutton
  * allow multiple selection for open dialog
  * split source code in 3 files</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1746446400">- New upstream release (3.0.0)
  * add support for CSD window
  * add headerbar for CSD window
  * add --enable-only-gtkx and --disable-gtkx options
  * stop spinner and remove -n option
  * add bash autocomplete script</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt;" date="1754654400">- New upstream release (3.1.0)
  * move Mint-L/Mint-X/Mint-Y themes in submenus
  * set theme on general theme change
  * add Help menu and merge GtkScales menuitems
  * move all scales into a notebook with four tabs
  * use CSD dialogs when using GTK_CSD=1
  * add GtkInspector menuitem + disable Open recent file menuitem
  * add icons in menubar and in CSD main menu
  * add missing buttons for scales and calendar dialogs
  * add close action for inactive dialog buttons</changelog>
</package>
<package pkgid="e395b3a84bd3ce64b04491fc7944bed931ea310a1f4f5e6fb1ad7c5119ed64b0f7fac3fd953ea1f5e16ccc44e8964bad935a230267754bde6b326107336de564" name="aws-c-auth-devel" arch="x86_64">
  <version epoch="0" ver="0.7.31" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712232000">- Update to version 0.7.17
  * Additional logging for default credentials chain by @jamesbornholt in (#231)
  * Remove unused test files by @jmklix in (#232)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715169600">- Update to version 0.7.19
  * Refactor ECSCredentialsProvider Part 1 by @waahm7 in (#236)
  * Refactor ECSCredentialsProvider Part 2 by @waahm7 in (#235)
- from version 0.7.18
  * Update ECS Credentials Provider to add support for
    AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE by @waahm7 in (#233)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715601600">- Update to version 0.7.21
  * Fix STSCredentialsProvider Signing Region by @waahm7 in (#239)
- from version 0.7.20
  * Fix STS Credentials Provider to use regional
    endpoint if possible by @waahm7 in (#237)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1718280000">- Update to version 0.7.22
  * trivial: add_net_test_case for credentials_provider_ecs_basic_success_uri_env
    test by @waahm7 in (#240)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722427200">- Update to version 0.7.23
  * Ecforce ECS Credentials Provider IP Rules by @waahm7 in (#238)
  * clang-format 18 by @graebm in (#242)
  * Update MacOS to arm64 by @waahm7 in (#243)
  * Support "external_id" in config file,
    for STS AssumeRole by @graebm in (#244)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722600000">- Update to version 0.7.24
  * Fix Empty Env varibales for STSWebIdentity by @waahm7 in (#246)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.7.25
  * Add ProcessProvider to ProfileProvider by @waahm7 in (#245)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.7.26
  * Update CacheCredentialsProvider Refresh Time to
    5 Minutes before Expiry by @waahm7 in (#247)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1725537600">- Update to version 0.7.27
  * Add content-sha256 header for presign when the signed_body_value
    is set to UNSIGNED-PAYLOAD by @TingDaoK in (#248)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.7.31
  * Add more partitions for sts cred provider
    by @DmitriyMusatkin in (#253)
- from version 0.7.30
  * Fix Multiple Shutdown Callback for Profile with
    STS Code Path by @waahm7 in (#251)
- from version 0.7.29
  * When sourcing credentials from an external process,
    ignore stderr by @graebm in (#250)
- from version 0.7.28
  * Service specific presign by @TingDaoK in (#249)</changelog>
</package>
<package pkgid="18c26aed6b46fd9ef17ae676a3568afbf665eedcea5749f2023e1740cbcea13deed06f2e967fa4346c5221b6ed57fc89d9acef8df73ea9697cf8fb1b3a31fa20" name="aws-c-cal-devel" arch="x86_64">
  <version epoch="0" ver="0.7.4" rel="bp160.1.13"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.6.10
  * Update bot permissions by @jmklix in (#172)
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#176)
  * Consistently use lowercase for Windows libraries by @giordano in (#161)
  * Allows cmake to force crypto linkage. by @sbiscigl in (#175)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1713182400">- Update to version 0.6.11
  * Not install tests stuff by @TingDaoK in (#177)
  * chore(ci): Performance boost to OpenBSD CI jobs by @knightjoel in (#179)
  * CI job for FreeBSD by @knightjoel in (#178)
  * Fix: Use buffer without memory allocation by @alfred2g in (#180)
- Drop aws-c-cal package as upstream no longer installs the binaries</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715601600">- Update to version 0.6.13
  * Fix handling of empty plaintext for AES by @DmitriyMusatkin in (#183)
  * Adds a way to keep a more detailed state of a symetric cipher
    by @sbiscigl in (#184)
- from version 0.6.12
  * CI test: Apple: explicitly include &amp; link to CoreFoundation
    by @jmklix in (#181)
  * Move aws-lc shutdown to destructor from cleanup
    by @DmitriyMusatkin in (#182)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1716379200">- Update to version 0.6.14
  - Fix inccorect export of aws_symmetric_cipher_get_state by @sbiscigl in (#185)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717156800">- Update to version 0.6.15
  * Fix inccorect export of aws_symmetric_cipher_get_state by @sbiscigl in (#185)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1719403200">- Update to version 0.7.0
  * clang-format 18 by @graebm in (#187)
  * Implement runtime check on libcrypto linkage
    by @WillChilds-Klein in (#186)
  * Pin AWS-LC until it's fixed for manylinux1
    by @graebm in (#188)
  * Make AES GCM more consistent cross platform
    by @DmitriyMusatkin in (#189)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720094400">- Update to version 0.7.1
  * Revert lc pin by @DmitriyMusatkin in (#190)
  * Revert "Implement runtime check on libcrypto linkage (#186)"
    by @graebm in (#191)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Update to version 0.7.2
  * CI for AWS-LC-FIPS by @graebm in (#192)
  * Fix FreeBSD CI to install default python packages
    by @TingDaoK in (#193)
  * Revert "Revert "Implement runtime check on libcrypto linkage (#186)"
    by @TingDaoK in (#195)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.7.4
  * OpenSSL Runtime and Compile Time Mismatch Fix by @waahm7 in (#198)
- from version 0.7.3
  * Update MacOS CI to arm64 by @waahm7 in (#196)
  * Use prebuilt aws-lc by @sfod in (#197)</changelog>
</package>
<package pkgid="63464583e5a22521324fa3e6d24b7ff804dffb3e0b756dbddc080395f6b947d353f7bbe79ffc118d062e71dae892f35fcfdda87054f781e38c73f9f753ded344" name="aws-c-common-devel" arch="x86_64">
  <version epoch="0" ver="0.9.28" rel="bp160.1.13"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712232000">- Update to version 0.9.15
  * Claim range for aws-crt-kotlin by @aajtodd in (#1095)
  * Remove unused external headers by @TingDaoK in (#1097)
  * Best Effort Thread Pinning to CPU_ID by @waahm7 in (#1096)
  * Add support for WIN ARM64 by @alfred2g in (#1092)
  * Better vectorization and crc64. Cleaned up cmake and
    added better runtime cpu detection by @JonathanHenson in (#1083)
  * Avoid overallocating for strings by @DmitriyMusatkin in (#1099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715169600">- Update to version 0.9.17
  * Fix invalid cpu_id for RHEL_5 by @waahm7 in (#1106)
- from version 0.9.16
  * Switch test harness to print errors in decimal by @DmitriyMusatkin in (#1100)
  * Add list membership API and uint64 hash utilities by @bretambrose in (#1103)
  * Clarity updates for uint64_t hash helper by @bretambrose in (#1104)
  * Move is ipv4/ipv6 functions from Aws-c-sdkutils to Aws-c-common by @waahm7 in (#1105)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715601600">- Update to version 0.9.19
  * Fix aws_host_utils_is_ipv6 function by @waahm7 in (#1114)
- from version 0.9.18
  * memtrace: Fix underflow when stack_depth &lt; FRAMES_TO_SKIP
    by @zhaofengli in (#873)
  * chore: Make CBMC stubs with zero parameters proper
    declarations by @tautschnig in (#1107)
  * Satisfy some signed vs unsigned comparison
    warnings by @KaibaLopez in (#809)
  * Remove promise class by @waahm7 in (#1110)
  * Fix host parsing for IPv6 URI by @waahm7 in (#1112)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717588800">- Update to version 0.9.20
  * Task scheduler: log at TRACE, instead of DEBUG by @graebm in (#1115)
  * Update CJson to v1.7.18 by @waahm7 in (#1116)
  * Avoid overflowing pointers passed to memcpy by @qinheping in (#874)
  * Fix test skipping by @graebm in (#1118)
  * Fix CMake Windows ARM typo by @graebm in (#1119)
  * Fix weird decimal formatting in tests by @graebm in (#1121)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1718107200">- Update to version 0.9.21
  * Fix memtracer bad assumptions on the size of stack trace
    by @DmitriyMusatkin in (#1122)
  * Disable optimization was not working by @TingDaoK in (#1123)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1719316800">- Update to version 0.9.23
  * cbor support by @TingDaoK in (#1131)
- from version 0.9.22
  * clang-format 18 by @graebm in (#1113)
  * Use CBMC version 5.95.1 by @tautschnig in (#1124)
  * latest_submodules.py uses AWS-LC-FIPS releases in
    aws-crt-java by @graebm in (#1125)
  * Use CBMC 6.0.0 by @graebm in (#1128)
  * Fix default thread options for windows to not pin to
    any cpu_id by @waahm7 in (#1126)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721995200">- Update to version 0.9.24
  * Fix FreeBSD CI to install default python packages by @TingDaoK in (#1133)
  * Fix out variable in cmake sanitizer module by @sfod in (#1134)
  * Update MacOS CI to Arm64 by @waahm7 in (#1136)
  * Update builder to fix macos arm64 CI by @waahm7 in (#1137)
  * Bump the minimum stack size to at least 1MB by @waahm7 in (#1139)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.9.25
  * Run proofs with CBMC 6.1.0 by @graebm in (#1140)
  * Avoiding allocating a handle in the Windows RNG
    by @teo-tsirpanis in (#1046)
  * Add no copy api variants to json interface
    by @DmitriyMusatkin in (#1138)
  * Allocate error space for aws-crt-swift
    by @xiazhvera in (#1129)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.9.27
  * Fix -Wuseless-cast compiler warnings by @graebm in (#1145)
- from version 0.9.26
  * Add cmake module for building dependencies
    at configuration time by @sfod in (#1144)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.9.28
  * Add aws_ prefix to prebuild_dependency CMake function name by @sfod in (#1146)
  * Makefile.common updates for CBMC by @tautschnig in (#1148)
  * Run proofs with CBMC 6.2.0 by @graebm in (#1149)
  * Only set mtune neoverse if compiler supports it by @DmitriyMusatkin in (#1150)</changelog>
</package>
<package pkgid="0a4a68e95c2585a675b7a2930a3288573524dc4271965cb04b50a28e2e5372cdc20e05a256433ec50612bf7d1c4f2b9dfdd76f85da4c8d9738237608b21adaeb" name="aws-c-compression-devel" arch="x86_64">
  <version epoch="0" ver="0.2.18" rel="bp160.1.11"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1634040000">- Initial build
  + Version 0.2.14</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634040001">- Simplify package naming. Replace bogus shlib package name.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662120000">- Update to version 0.2.15
  * Fallback for target load by @TingDaoK in (#55)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1668168000">- Update to version 0.2.16
  * Add AppVerifier to CI by @TwistedTwigleg in (#56)
  * Fix C++ One Definition Rules (ODR) Violations by @graebm in (#58)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1686744000">- Update to version 0.2.17
  * Update CI to fix downstream build by @waahm7 in (#57)
  * Update builder version to fix aws-lc build on manylinux1 by @TingDaoK in (#59)
  * Fix warnings in public headers by @waahm7 in (#60)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.2.18
  * Add github templates and bots by @jmklix in (#61)
  * Fix compiler warning by @graebm in (#62)
  * Added workflow for handling answerable discussions
    by @yasminetalby in (#65)
  * BUILDER_VERSION: v0.9.55 by @graebm in (#66)</changelog>
</package>
<package pkgid="1d2805a22457b9206223b28662864e13a29a7af0802933cf7a77baab2e457790c55ca5ac050e4c6154a6fbdf746a3c123ac8e83072811cbf3ec7dbfc55f188d5" name="aws-c-event-stream-devel" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="bp160.1.11"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662120000">- Update to version 0.2.14
  * Allow mix of static and shared libs
    + Fallback for target load by @TingDaoK in (#86)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1664971200">- Update to version 0.2.15
  * Add AppVerifier to CI by @TwistedTwigleg in (#87)
  * Fix continuation race condition and windows test
    failures by @bretambrose in (#89)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674043200">- Update to version 0.2.18
  * Fix macro usage by @DmitriyMusatkin in (#94)
- from version 0.2.17
  * Add onComplete callback for streaming decoder by @waahm7 in (#93)
- from version 0.2.16
  * sprintf() -&gt; snprintf() by @graebm in (#91)
  * Update CI to fix downstream build by @waahm7 in (#90)
  * Fix decoding of headers with static value by @waahm7 in (#92)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1677585600">- Update to version 0.2.19
  * Delete .DS_Store by @graebm in (#95)
  * Cursor header APIs by @bretambrose in (#96)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1677672000">- Update to version 0.2.20
  * Change #if _MSC_VER to #ifdef _MSC_VER by @jmklix in (#97)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1686744000">- Update to version 0.3.0
  * Update builder version to fix aws-lc build on manylinux1 by @TingDaoK in (#98)
  * Fix warnings in public headers by @waahm7 in (#99)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1688558400">- Update to version 0.3.1
  * Add Github templates and bots by @jmklix in (#100)
  * Double Terminate Crash by @bretambrose in (#101)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1692964800">- Update to version 0.3.2
  * Explicit Private for target_link_libraries by @waahm7 in (#107)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.4.2
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#111)
- from version 0.4.1
  * Fix Variable Len Headers with Empty Value by @waahm7 in (#108)
- from version 0.4.0
  * Added workflow for handling answerable discussions by @yasminetalby in (#105)
  * Change port from uint16_t to uint32_t to support VSOCK by @graebm in (#109)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716292800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
</package>
<package pkgid="de3a2f0b5b3666f78bc8b79dcbce41339279328584d92e07877611e1f867703c967d46136468280cc5bd5977b8b27329c96f8ba5a2a2b2cc8a485f84a7a4f92e" name="aws-c-event-stream-devel" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="bp160.2.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1664971200">- Update to version 0.2.15
  * Add AppVerifier to CI by @TwistedTwigleg in (#87)
  * Fix continuation race condition and windows test
    failures by @bretambrose in (#89)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674043200">- Update to version 0.2.18
  * Fix macro usage by @DmitriyMusatkin in (#94)
- from version 0.2.17
  * Add onComplete callback for streaming decoder by @waahm7 in (#93)
- from version 0.2.16
  * sprintf() -&gt; snprintf() by @graebm in (#91)
  * Update CI to fix downstream build by @waahm7 in (#90)
  * Fix decoding of headers with static value by @waahm7 in (#92)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1677585600">- Update to version 0.2.19
  * Delete .DS_Store by @graebm in (#95)
  * Cursor header APIs by @bretambrose in (#96)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1677672000">- Update to version 0.2.20
  * Change #if _MSC_VER to #ifdef _MSC_VER by @jmklix in (#97)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1686744000">- Update to version 0.3.0
  * Update builder version to fix aws-lc build on manylinux1 by @TingDaoK in (#98)
  * Fix warnings in public headers by @waahm7 in (#99)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1688558400">- Update to version 0.3.1
  * Add Github templates and bots by @jmklix in (#100)
  * Double Terminate Crash by @bretambrose in (#101)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1692964800">- Update to version 0.3.2
  * Explicit Private for target_link_libraries by @waahm7 in (#107)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.4.2
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#111)
- from version 0.4.1
  * Fix Variable Len Headers with Empty Value by @waahm7 in (#108)
- from version 0.4.0
  * Added workflow for handling answerable discussions by @yasminetalby in (#105)
  * Change port from uint16_t to uint32_t to support VSOCK by @graebm in (#109)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716292800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1775131200">- Add aces_bump-max-message-size.patch, required for CVE fix
- Add aces_bump-max-headers-size.patch, required for CVE fix
- Add CVE-2026-5190.patch to fix that crafted event-stream
  messages causing out-of-bounds write (bsc#1261298, CVE-2026-5190)</changelog>
</package>
<package pkgid="665fd77082b64e0ead13f91ef444b1d421bae58bde6825536df1d0a1f9757b5058241a79b3748649b38c2d1b4bf7de31bf68d3741f82241207b6335833751cc9" name="aws-c-http" arch="x86_64">
  <version epoch="0" ver="0.8.10" rel="bp160.1.13"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700568000">- Update to version 0.7.14
  * system vtables: Use full function names,
    for better grepping by @graebm in (#454)
  * Request idle timeout by @TingDaoK in (#456)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1704283200">- Update to version 0.8.0
  * Correct the doc about unactivated stream and add test by @TingDaoK in (#460)
  * Change `port` from uint16_t to uint32_t to support VSOCK by @graebm in (#457)
- from version 0.7.15
  * sizeof('c') == 4, not 1: Fix overallocation by @nabijaczleweli in (#459)
  * Add support for cancel stream by @TingDaoK in (#458)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.8.1
  * Minor GitHub workflow changes by @kellertk in (#461)
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#462)
  * API to query http server listener endpoint by @bretambrose in (#463)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717588800">- Update to version 0.8.2
  * Mark some missing Network tests as net_tests. by @waahm7 in (#465)
  * Add test where connection shuts down before response completes
    by @graebm in (#468)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.8.4
  * Mark the network interface API experimental by @waahm7 in (#475)
- from version 0.8.3
  * clang-format 18 by @graebm in (#469)
  * Bind to a list of Network Interfaces by @waahm7 in (#471)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722427200">- Update to version 0.8.5
  * Update MacOS to arm64 by @waahm7 in (#476)
  * Update stale issue bot permissions by @jmklix in (#478)
  * Adapt change from "TLS deliver buffer data during shutdown"
    by @TingDaoK in (#474)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.8.6
  * Connection Manager Acquisition Timeout by @waahm7 in (#479)
  * Support MaxPendingConnectionAcquisitions by @waahm7 in (#481)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.8.8
  * Fix websocket shutdown behavior by @TingDaoK in (#483)
- from version 0.8.7
  * Connection shutdown with buffered data by @TingDaoK in (#482)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.8.10
  * Increase timeout for http integration tests by @TingDaoK in (#487)
- from version 0.8.9
  * Fix max_pending_connection_acquisitions to respect connection
    pool size by @waahm7 in (#485)</changelog>
</package>
<package pkgid="df9e2d34e61180350f00f3d2a5b48f6d478ce4def1df313d036f4b001aa6c91f84ef0838665667c90b4b498abe0b573a336368420713a4ec35b525c65c92e9c0" name="aws-c-http-devel" arch="x86_64">
  <version epoch="0" ver="0.8.10" rel="bp160.1.13"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700568000">- Update to version 0.7.14
  * system vtables: Use full function names,
    for better grepping by @graebm in (#454)
  * Request idle timeout by @TingDaoK in (#456)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1704283200">- Update to version 0.8.0
  * Correct the doc about unactivated stream and add test by @TingDaoK in (#460)
  * Change `port` from uint16_t to uint32_t to support VSOCK by @graebm in (#457)
- from version 0.7.15
  * sizeof('c') == 4, not 1: Fix overallocation by @nabijaczleweli in (#459)
  * Add support for cancel stream by @TingDaoK in (#458)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.8.1
  * Minor GitHub workflow changes by @kellertk in (#461)
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#462)
  * API to query http server listener endpoint by @bretambrose in (#463)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717588800">- Update to version 0.8.2
  * Mark some missing Network tests as net_tests. by @waahm7 in (#465)
  * Add test where connection shuts down before response completes
    by @graebm in (#468)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.8.4
  * Mark the network interface API experimental by @waahm7 in (#475)
- from version 0.8.3
  * clang-format 18 by @graebm in (#469)
  * Bind to a list of Network Interfaces by @waahm7 in (#471)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722427200">- Update to version 0.8.5
  * Update MacOS to arm64 by @waahm7 in (#476)
  * Update stale issue bot permissions by @jmklix in (#478)
  * Adapt change from "TLS deliver buffer data during shutdown"
    by @TingDaoK in (#474)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.8.6
  * Connection Manager Acquisition Timeout by @waahm7 in (#479)
  * Support MaxPendingConnectionAcquisitions by @waahm7 in (#481)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.8.8
  * Fix websocket shutdown behavior by @TingDaoK in (#483)
- from version 0.8.7
  * Connection shutdown with buffered data by @TingDaoK in (#482)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.8.10
  * Increase timeout for http integration tests by @TingDaoK in (#487)
- from version 0.8.9
  * Fix max_pending_connection_acquisitions to respect connection
    pool size by @waahm7 in (#485)</changelog>
</package>
<package pkgid="e50bcdb733428fa7c122861522a5134b771c90dc16935627a24c93456f023eeabbae689b18726bd3d63ddb61e11de4e91b9bcbc86e03fa68621b9ca24b704898" name="aws-c-io-devel" arch="x86_64">
  <version epoch="0" ver="0.14.18" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1711108800">- Update to version 0.14.6
  * Remove aws_tls_handler_write by @jmklix in (#628)
  * CI job for FreeBSD by @knightjoel in (#630)
  * Update docs to clarify aws_io_message Cleanup Rules by @waahm7 in (#633)
  * Fix sizeof channel negotiation task by @quinnj in (#631)
- from version 0.14.5
  * chore(CI): CI job for OpenBSD by @knightjoel in (#625)
  * Fix Memory leak caused by redefinition by @xiazhvera in (#626)
  * Test for duplicate key import by @TingDaoK in (#627)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1712318400">- Update to version 0.14.7
  * Skip rsa8192.badssl.com test to fix CI by @waahm7 in (#635)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715601600">- Update to version 0.14.8
  * Remove setenv by @DmitriyMusatkin in (#634)
  * aws_tls_connection_options_copy comment update following
    [#]eaa583a or #475 by @SergeyRyabinin in (#482)
  * Update Expired Certs by @waahm7 in (#636)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717588800">- Update to version 0.14.9
  * Fix tests that require a valid cert to use add_net_test_case
    by @waahm7 in (#637)
  * Fix signed/unsigned bug with aws_future_wait() timeout value
    by @graebm in (#638)
  * Adds Host Resolver IPv6 variations test by @waahm7 in (#639)
  * Fix bug where last few bytes on socket go unread
    by @graebm in (#642)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720699200">- Update to version 0.14.10
  * clang-format 18 by @graebm in (#644)
  * Fix Freebsd CI by @waahm7 in (#648)
  * Fix memory leaks in Windows TLS code
    by @graebm in #652</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.14.12
  * Mark the network interface API internal by @waahm7 in (#654)
- from version 0.14.11
  * Fix FreeBSD CI to install default python packages
    by @TingDaoK in (#653)
  * Socket option for binding to a network interface by name
    by @waahm7 in (#647)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721995200">- Update to version 0.14.13
  * Fix import of inttype (#656)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722427200">- Update to version 0.14.15
  * Fix undefined type enum aws_tls_handler_state in source/windows/
    secure_channel_tls_handler.c when building on Windows
    by @brechtsanders in (#663)
- from version 0.14.14
  * Update MacOS CI by @waahm7 in (#658)
  * Remove uv headers from CMakeLists.txt by @sbSteveK in (#660)
  * TLS deliver buffer data during shutdown by @TingDaoK in (#650)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722600000">- Update to version 0.14.16
  * Use const pointers in secure_channel_tls_handler.c by @teo-tsirpanis in (#664)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.14.18
  * Unique port between test_socket_with_bind_to_interface
    and test_tcp_socket_communication by @waahm7 in (#667)
- from version 0.14.17
  * Make port more random for test_socket_with_bind_to_interface
    test by @waahm7 in (#666)</changelog>
</package>
<package pkgid="7e0c8d84abc55c66dfbac65d4f55db29312ea3d7330da30bc5a207b62179836cc6dcbee440a4984731cfbe05a189c7c625279c7f44d87dc1bd7da902a14cad1c" name="aws-c-mqtt-bin" arch="x86_64">
  <version epoch="0" ver="0.10.6" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700568000">- Update to version 0.9.9
  * MQTT5 operation timeout by @bretambrose in (#333)
  * Relax validation on user-specified topic aliasing by @bretambrose in (#334)
- from version 0.9.8
  * Remove callback severance on 5-to-3 adapter by @bretambrose in (#329)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1701345600">- Update to version 0.9.10
  * Add MQTT error for subscribe failure by @sfod in (#335)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1704283200">- Update to version 0.10.1
  * Change `port` from uint16_t to uint32_t to support VSOCK by @graebm in (#338)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708516800">- Update to version 0.10.2
  * Remove no-longer-necessary setup callback cross-thread task by @bretambrose in (#341)
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#350)
  * Push ping time only if the request complete is successful by @alfred2g in (#348)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1708948800">- use shared library naming policy</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 0.10.3:
  * return an error code when an mqtt5 puback has a failing reason code</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716292800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717156800">- Update to version 0.10.4
  * Refactor MQTT5 ping timeout by @bretambrose in (#361)
  * Disabled keep alive by @bretambrose in (#363)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.10.5
  * clang-format 18 by @graebm in (#371)
  * Update MacOS to arm64 by @waahm7 in (#372)
  * Final request-response polish by @bretambrose in (#367)
  * Enum reordering by @bretambrose in (#374)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1727092800">- Update to version 0.10.6
  * Misc request-response fixes by @bretambrose in (#375)</changelog>
</package>
<package pkgid="ebfb6bd095c00f353a90b6815cba28fbf74912dbafab8b70c939ac8c4970295b476d396fc7b0488e84fe5485fed164691415321e08ad988784e32055efb980b5" name="aws-c-mqtt-devel" arch="x86_64">
  <version epoch="0" ver="0.10.6" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1700568000">- Update to version 0.9.9
  * MQTT5 operation timeout by @bretambrose in (#333)
  * Relax validation on user-specified topic aliasing by @bretambrose in (#334)
- from version 0.9.8
  * Remove callback severance on 5-to-3 adapter by @bretambrose in (#329)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1701345600">- Update to version 0.9.10
  * Add MQTT error for subscribe failure by @sfod in (#335)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1704283200">- Update to version 0.10.1
  * Change `port` from uint16_t to uint32_t to support VSOCK by @graebm in (#338)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708516800">- Update to version 0.10.2
  * Remove no-longer-necessary setup callback cross-thread task by @bretambrose in (#341)
  * Fix a bunch of places we forget to aws_raise_error() by @graebm in (#350)
  * Push ping time only if the request complete is successful by @alfred2g in (#348)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1708948800">- use shared library naming policy</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 0.10.3:
  * return an error code when an mqtt5 puback has a failing reason code</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1716292800">- Use %autosetup macro: allows us to eliminate usage of deprecated
  %patchN syntax.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717156800">- Update to version 0.10.4
  * Refactor MQTT5 ping timeout by @bretambrose in (#361)
  * Disabled keep alive by @bretambrose in (#363)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.10.5
  * clang-format 18 by @graebm in (#371)
  * Update MacOS to arm64 by @waahm7 in (#372)
  * Final request-response polish by @bretambrose in (#367)
  * Enum reordering by @bretambrose in (#374)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1727092800">- Update to version 0.10.6
  * Misc request-response fixes by @bretambrose in (#375)</changelog>
</package>
<package pkgid="46dcc0c8df4ae94c7532cd8108141b35c70de4f094f0fd0e7ac3d8db66ede6e19dd9f3cf81dbb7cbc81a004f9afe33f1a7e9b505603823c938be8342637bce9f" name="aws-c-s3-bin" arch="x86_64">
  <version epoch="0" ver="0.6.6" rel="bp160.1.13"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1711108800">- Update to version 0.5.3
  * Partial fix: Too many "stalled" uploads can deadlock
    the S3 Client by @graebm in (#417)
  * Auto-Update S3 Ruleset &amp; Partition by @waahm7 in (#408)
- from version 0.5.2
  * Stop limiting num-connections based on num-known-IPs
    (Improve S3-Express performance) by @graebm in (#407)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1711627200">- Update to version 0.5.4
  * UserAgent updates by @waahm7 in (#414)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715601600">- Update to version 0.5.8
  * Allow disabling upload checksums while using upload review
    by @jamesbornholt in (#421)
  * Remove Dashboard and S3 Benchmark Stack by @waahm7 in (#427)
  * Make test_s3_range_requests less flaky by @waahm7 in #423
  * Add 'Content-Length: 0' header on multipart upload creation
    by @waahm7 in #428
- from version 0.5.7
  * Add async write() function - fixes "stalled" uploads deadlocking
    S3 Client by @graebm in (#418)
- from version 0.5.6
  * Adds Connection Pool Destroy Delay Take 2 by @waahm7 in (#419)
- from version 0.5.5
  * Set fail-fast to false in CI by @waahm7 in (#420)
  * Small buffer by @DmitriyMusatkin in (#422)
- Rename shared librar package from lib%{name}%{library_soversion}
  to lib%{name}-%{library_soversion} to fix rpmlint error</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1716465600">- Update to version 0.5.9
  * Buffer-pool allows "forced" buffers, which don't count
    against memory limit by @graebm in (#429)
  * Improve async write (fewer copies, polling API)
    by @graebm in (#430)
- Add Provides and Obsoletes for lib%{name}%{library_soversion}</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717502400">- Update to version 0.5.10
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#434)
  * Update test helper by @TingDaoK in (#431)
  * Add explaination for the code that confuses me by @TingDaoK in (#433)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720094400">- Update to version 0.6.0
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#436)
  * clang-format 18 by @graebm in (#438)
  * BREAKING CHANGE: operation_name must be set for DEFAULT
    meta-requests by @graebm in (#439)
  * Fix shutdown_callback or returning NULL contract for
    meta_request by @waahm7 in (#440)
  * test_helper.py improvements by @graebm in (#442)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.6.4
  * Make options more const by @DmitriyMusatkin in (#445)
- from version 0.6.3
  * Mark the network interface API experimental by @waahm7 in (#447)
- from version 0.6.2
  * Fix assert when library goes through init/cleanup multiple times
    by @graebm in (#446)
  * Support machines with multiple NICs by @waahm7 in (#444)
- from version 0.6.1
  * Fix assert when library goes through init/cleanup multiple times
    by @graebm in (#446)
  * Support machines with multiple NICs by @waahm7 in (#444)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1725537600">- Update to version 0.6.5
  * Update MacOS to arm64 by @waahm7 in (#448)
  * Rewrite some checksum related code by @TingDaoK in (#443)
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#450)
  * S3 receive filepath by @TingDaoK in (#449)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1727092800">- Update to version 0.6.6
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#451)
  * Fix MemoryLimit primary_allocated stat by @waahm7 in (#453)</changelog>
</package>
<package pkgid="23eb6a2340e84968efa61e6221e6b7883bbabf17d53676cc2c750d2577568152a826ed39c768c192b27d50f518e76ea3df45b56771deb1c0b2c40dfae0a806a5" name="aws-c-s3-devel" arch="x86_64">
  <version epoch="0" ver="0.6.6" rel="bp160.1.13"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1711108800">- Update to version 0.5.3
  * Partial fix: Too many "stalled" uploads can deadlock
    the S3 Client by @graebm in (#417)
  * Auto-Update S3 Ruleset &amp; Partition by @waahm7 in (#408)
- from version 0.5.2
  * Stop limiting num-connections based on num-known-IPs
    (Improve S3-Express performance) by @graebm in (#407)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1711627200">- Update to version 0.5.4
  * UserAgent updates by @waahm7 in (#414)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1715601600">- Update to version 0.5.8
  * Allow disabling upload checksums while using upload review
    by @jamesbornholt in (#421)
  * Remove Dashboard and S3 Benchmark Stack by @waahm7 in (#427)
  * Make test_s3_range_requests less flaky by @waahm7 in #423
  * Add 'Content-Length: 0' header on multipart upload creation
    by @waahm7 in #428
- from version 0.5.7
  * Add async write() function - fixes "stalled" uploads deadlocking
    S3 Client by @graebm in (#418)
- from version 0.5.6
  * Adds Connection Pool Destroy Delay Take 2 by @waahm7 in (#419)
- from version 0.5.5
  * Set fail-fast to false in CI by @waahm7 in (#420)
  * Small buffer by @DmitriyMusatkin in (#422)
- Rename shared librar package from lib%{name}%{library_soversion}
  to lib%{name}-%{library_soversion} to fix rpmlint error</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1716465600">- Update to version 0.5.9
  * Buffer-pool allows "forced" buffers, which don't count
    against memory limit by @graebm in (#429)
  * Improve async write (fewer copies, polling API)
    by @graebm in (#430)
- Add Provides and Obsoletes for lib%{name}%{library_soversion}</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717502400">- Update to version 0.5.10
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#434)
  * Update test helper by @TingDaoK in (#431)
  * Add explaination for the code that confuses me by @TingDaoK in (#433)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720094400">- Update to version 0.6.0
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#436)
  * clang-format 18 by @graebm in (#438)
  * BREAKING CHANGE: operation_name must be set for DEFAULT
    meta-requests by @graebm in (#439)
  * Fix shutdown_callback or returning NULL contract for
    meta_request by @waahm7 in (#440)
  * test_helper.py improvements by @graebm in (#442)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.6.4
  * Make options more const by @DmitriyMusatkin in (#445)
- from version 0.6.3
  * Mark the network interface API experimental by @waahm7 in (#447)
- from version 0.6.2
  * Fix assert when library goes through init/cleanup multiple times
    by @graebm in (#446)
  * Support machines with multiple NICs by @waahm7 in (#444)
- from version 0.6.1
  * Fix assert when library goes through init/cleanup multiple times
    by @graebm in (#446)
  * Support machines with multiple NICs by @waahm7 in (#444)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1725537600">- Update to version 0.6.5
  * Update MacOS to arm64 by @waahm7 in (#448)
  * Rewrite some checksum related code by @TingDaoK in (#443)
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#450)
  * S3 receive filepath by @TingDaoK in (#449)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1727092800">- Update to version 0.6.6
  * Auto - Update S3 Ruleset &amp; Partition by @waahm7 in (#451)
  * Fix MemoryLimit primary_allocated stat by @waahm7 in (#453)</changelog>
</package>
<package pkgid="079b17b699551b8f08fd732e58c05fc8177c2c98b0bd50f21e6f1ef4fd54b3e4bc35507698e38cd6c86b281a20e66fae788701e6fcbe7bf6fe45533ad185d4b3" name="aws-c-sdkutils-devel" arch="x86_64">
  <version epoch="0" ver="0.1.19" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1684238400">- Update to version 0.1.10
  * Fix warnings in public headers by @waahm7 in (#28)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1685534400">- Update to version 0.1.11
  * Update time to ancient by @jmklix in (#29)
  * Update the behavior for profile override by @TingDaoK in (#30)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1690286400">- Update to version 0.1.12
  * aws_profile: Reduce logging verbosity of the
    ~/.aws/profile parser by @grrtrr in (#31)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1702468800">- Update to version 0.1.13
  * Minor CMakelists.txt cleanup by @graebm in (#34)
  * Added workflow for handling answerable
    discussions by @yasminetalby in (#35)
  * Add partition mapping for iso-e and
    iso-f by @DmitriyMusatkin in (#36)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1706270400">- Update to version 0.1.14
  * Add minimal regex matcher by @DmitriyMusatkin in (#37)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706356800">- fix naming to match shlib policy</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710676800">- update to 0.1.15:
  * Fix a bunch of places we forget to aws_raise_error()</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717502400">- Update to version 0.1.16
  * Remove is IPv4/IPv6 functions utils from sdkutils to c-common
    by @waahm7 in (#39)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.1.19
  * Lets make string array const input by @DmitriyMusatkin in (#44)
- from version 0.1.18
  * Switch to more efficient functions for json parsing
    by @DmitriyMusatkin in (#43)
- from version 0.1.17
  * clang-format 18 by @graebm in (#40)
  * Update MacOS to arm64 by @waahm7 in (#41)
  * Add support for string array request parameter to
    endpoint resolution by @DmitriyMusatkin in (#42)</changelog>
</package>
<package pkgid="b3852db51162375b4976f5e239c4ea839ba48a530e23195afddf32c8a43e7671298cefde90a8e178d4fb803791cd96b8c276fe4756525717c07043c46ab9f668" name="aws-checksums-bin" arch="x86_64">
  <version epoch="0" ver="0.1.20" rel="bp160.1.13"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1613390400">- Update to version 0.1.11
  + Improved ARM support
  * Updated feature test compilation flags to properly
    detect/fail Cortex features</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1633953600">- Update to version 0.1.12
  + Support new build flag: USE_CPU_EXTENSIONS
  * If -DUSE_CPU_EXTENSIONS=OFF then do not use function implementations
    that are optimized for specific CPU architectures, only use the generic
    implementation</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1662033600">- Update to version 0.1.13
  + Allow mix of static and shared libs
  * Load cmake target fallback by @TingDaoK in (#56)
- Use cmake() macro in BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674043200">- Update to version 0.1.14
  * Add AppVerifier to CI by @TwistedTwigleg in (#58)
  * Update CI to fix downstream build by @waahm7 in (#59)
  * Fixed gcc and clang constraint error due to improper
    input operands and clobbers via suggestion from @topperc
    by @JonathanHenson in (#57)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1684238400">- Update to version 0.1.15
  * Add to .gitignore by @graebm in (#62)
  * Fix warnings in public headers by @waahm7 in (#63)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1686139200">- Update to version 0.1.16
  * Add Github templates and bots by @jmklix in (#64)
  * Fix use of inline ASM labels by @jamesbornholt in (#65)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1689595200">- Update to version 0.1.17
  * Refactor CPU_EXTENSIONS logic for MSVC with Clang by @waahm7 in (#69)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1708344000">- Update to version 0.1.18
  * Added workflow for handling answerable discussions by @yasminetalby in (#75)
  * Remove unused source/arm/asm directory include by @waahm7 in (#78)
  * BUILDER_VERSION: v0.9.55 by @graebm in (#80)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.1.20
  * Add crc helpers for writing to large buffers. by @DmitriyMusatkin in (#93)
  * Fix builds on clang 16+ by @DmitriyMusatkin in (#96)
- from version 0.1.19
  * Rebase CRC32DATA32VALUE by @jmklix in (#87)
  * clang-format 18 by @graebm in (#91)
  * Update MacOS to arm64 by @waahm7 in (#92)
  * Better vectorization and crc64 by @JonathanHenson in (#79)
- Add new aws-checksums-bin binary package
- Refresh patches for new version
  * ac_fix-cmake-modules-path.patch
  * ac_re-add-so-version.patch</changelog>
</package>
<package pkgid="b16dabd4e0abb15e8f1b9cbd60da2922233cba49556e077c6a7b04bee7b5dc5c4b02fac65e242938f702d249808e9467cefc2998ef30bdffe1c0c421bc1402cf" name="aws-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.1" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
</package>
<package pkgid="e67ed771194fb54a84a8ec68f540df0fb8c89bda230d6dafeb2aa2edd06b18fd36b8e0ffde7964ed0ffb9b8fbff6f1e73dd0bd71c3533da9d554d011c990ab77" name="aws-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.1" rel="160000.3.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
</package>
<package pkgid="baaa481853ad2e678eabaa14c4fe5e6ac9eafaf8558a461b2bc13d7049fabf9963e6e9a94ef8048ae1a9acd20ca886047954126876273936ad97fc5a2a4ddd22" name="aws-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.2" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
</package>
<package pkgid="893351d5cbf76c8a4a0eb22f87a18eec03656184cf9b39301bbf7603058dc3aa216d1e80d63641bd3863311c5c1a54fdd104ba61baa9aa287cb759f4ffd6b68d" name="aws-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.2" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1769515200">- Fix install/upgrade/removal
  With the release of flake-pilot 3.1.27 a force option
  for registration and deregistration has been added. This
  allows for a simpler registration processing in the spec
  file of the -cmd package. This commit adds registration
  and deregistration helper scripts and calls them as part
  of the spec pre/post processing macros. The macro setup
  makes sure:
  1. The flake gets registered as %post install action
  2. The flake gets deregistered as %preun uninstall (no upgrade) action
  With regards to the already released package and the
  existing macro code the following applies:
  The %postun code from the old package runs after the %post code
  of the new package and only in upgrade mode. This would harm the
  registration which is the reason why we again call register_aws
  in %posttrans which is the last action of the entire transaction
  and ensures the registration will be effective</changelog>
</package>
<package pkgid="c1fc949fad8baa51a9a72d50cc7ed58dabc17375539172659f0040480321676e306af727d8a171c430fb8272f8b271e125c7e4e44381e72d8bd1f088e4720afe" name="aws-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.2" rel="160000.5.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1769515200">- Fix install/upgrade/removal
  With the release of flake-pilot 3.1.27 a force option
  for registration and deregistration has been added. This
  allows for a simpler registration processing in the spec
  file of the -cmd package. This commit adds registration
  and deregistration helper scripts and calls them as part
  of the spec pre/post processing macros. The macro setup
  makes sure:
  1. The flake gets registered as %post install action
  2. The flake gets deregistered as %preun uninstall (no upgrade) action
  With regards to the already released package and the
  existing macro code the following applies:
  The %postun code from the old package runs after the %post code
  of the new package and only in upgrade mode. This would harm the
  registration which is the reason why we again call register_aws
  in %posttrans which is the last action of the entire transaction
  and ensures the registration will be effective</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1780488000">- Adapt HOME sharing to be more useful
  So far the HOME directory of the calling user was mapped
  into the container to appear as the HOME of the root
  user (/root) inside of the container because it's effectively
  the only user present inside of the container. However, from
  a usabilty perspective this is not a good setup because
  any home based file reference on the host has a different
  path inside of the container which is confusing for users.
  This commit makes sure that the host path references matches
  with the path inside the container. This Fixes bsc#1266045</changelog>
</package>
<package pkgid="bd3eb828d9d17777b32a37037c422a195fe95901661dfd9f55e42a22cc597319dda025d9069d2935829b28b68837e97e1e0be64017ad16c4a1a2fcbf5667e29a" name="aws-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.2" rel="160000.6.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1769515200">- Fix install/upgrade/removal
  With the release of flake-pilot 3.1.27 a force option
  for registration and deregistration has been added. This
  allows for a simpler registration processing in the spec
  file of the -cmd package. This commit adds registration
  and deregistration helper scripts and calls them as part
  of the spec pre/post processing macros. The macro setup
  makes sure:
  1. The flake gets registered as %post install action
  2. The flake gets deregistered as %preun uninstall (no upgrade) action
  With regards to the already released package and the
  existing macro code the following applies:
  The %postun code from the old package runs after the %post code
  of the new package and only in upgrade mode. This would harm the
  registration which is the reason why we again call register_aws
  in %posttrans which is the last action of the entire transaction
  and ensures the registration will be effective</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1780488000">- Adapt HOME sharing to be more useful
  So far the HOME directory of the calling user was mapped
  into the container to appear as the HOME of the root
  user (/root) inside of the container because it's effectively
  the only user present inside of the container. However, from
  a usabilty perspective this is not a good setup because
  any home based file reference on the host has a different
  path inside of the container which is confusing for users.
  This commit makes sure that the host path references matches
  with the path inside the container. This Fixes bsc#1266045</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1783080000">- Fix typo in spec
  The %ghost reference contained a superfluous quote sign
  at the end of the line</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1783080001">- Add /etc/ssl as path to share with the container
  This Fixes bsc#1269510</changelog>
</package>
<package pkgid="38b2de304b40571e7edf38eb1e003b640c022a2b1249c2d6512f383530e53a550f0db73cb02d527658b68472509648374b37cee5db007357b766709c284783ac" name="aws-cli-image" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="5.33"/>
</package>
<package pkgid="65564c88a03e80a89e24a846e8f420198222df4a109f6d188c49cfe96a2d417b1f55323b2bc094736758b33d331b35474b8e238bc72fbebf6e374f36cbe99cad" name="aws-crt-cpp-bin" arch="x86_64">
  <version epoch="0" ver="0.28.3" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717502400">- Update to version 0.26.11
  * Latest submodules by @waahm7 in (#621)
- from version 0.26.10
  * Fix memory leak when UnsubscribePacket is reused by @sfod in (#617)
  * Fix order of arguments when calling aws_aes_gcm_256_new by @sbiscigl in (#618)
  * Symmetric cipher state by @sbiscigl in (#619)
  * AutoTag PR for v0.26.9 by @bretambrose in (#620)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1718280000">- Update to version 0.26.12.
  * Fix bug where last few bytes on socket go unread by @graebm in (#624)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1719403200">- Update to version 0.27.1
  * cbor binding by @TingDaoK in (#627)
  * Fix ASan report about alloc/dealloc mismatch
    when compiled with C++23 by @waahm7 in (#633)
- from version 0.27.0
  * clang-format 18 by @graebm in (#628)
  * Update aes interface by @DmitriyMusatkin in (#631)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720094400">- Update to version 0.27.2
  * Make variant index casts more explicit by @DmitriyMusatkin in (#635)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.27.3
  * Fix memory leaks in Windows TLS handler by @graebm in (#637)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Update to version 0.27.4
  * Bump crt lib versions by @DmitriyMusatkin in (#639)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.27.5
  * Update MacOS to arm64 by @waahm7 in (#641)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.27.6
  * Proxy fix by @bretambrose in (#647)
  * Update submodules by @sfod in (#649)
  * Add support for string array ep context
    params by @DmitriyMusatkin in (#646)
  * Fix websocket shutdown behavior
    (submodule updates) by @graebm in (#650)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1725278400">- Update to version 0.28.2
  * Fix MSVC most vexing parse by @sbiscigl in (#659)
  * Add wrappers around readsome and peek methods in
    std istream by @SergeyRyabinin in (#658)
- from version 0.28.1
  * Fix typo in variant by @sbiscigl in (#653)
  * Fix OpenSSL Compile and Runtime Version Mismatch by @waahm7 in (#656)
- from version 0.28.0
  * Expose socket options from Mqtt5ClientBuilder by @xiazhvera in (#652)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.28.3
  * Bind out CRC64 by @DmitriyMusatkin in (#662)</changelog>
</package>
<package pkgid="616a4c90aff0d5e069d3ee2bd9eafbb38d6801b0ccf6fd71a51b256d615df68e4cc37bc61b1349ddc09a9e6f599a14cab902ffae1c9cf50acad687253af92a0e" name="aws-crt-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.28.3" rel="bp160.1.12"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1717502400">- Update to version 0.26.11
  * Latest submodules by @waahm7 in (#621)
- from version 0.26.10
  * Fix memory leak when UnsubscribePacket is reused by @sfod in (#617)
  * Fix order of arguments when calling aws_aes_gcm_256_new by @sbiscigl in (#618)
  * Symmetric cipher state by @sbiscigl in (#619)
  * AutoTag PR for v0.26.9 by @bretambrose in (#620)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1718280000">- Update to version 0.26.12.
  * Fix bug where last few bytes on socket go unread by @graebm in (#624)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1719403200">- Update to version 0.27.1
  * cbor binding by @TingDaoK in (#627)
  * Fix ASan report about alloc/dealloc mismatch
    when compiled with C++23 by @waahm7 in (#633)
- from version 0.27.0
  * clang-format 18 by @graebm in (#628)
  * Update aes interface by @DmitriyMusatkin in (#631)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1720094400">- Update to version 0.27.2
  * Make variant index casts more explicit by @DmitriyMusatkin in (#635)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721044800">- Update to version 0.27.3
  * Fix memory leaks in Windows TLS handler by @graebm in (#637)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1721390400">- Update to version 0.27.4
  * Bump crt lib versions by @DmitriyMusatkin in (#639)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1723032000">- Update to version 0.27.5
  * Update MacOS to arm64 by @waahm7 in (#641)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1724673600">- Update to version 0.27.6
  * Proxy fix by @bretambrose in (#647)
  * Update submodules by @sfod in (#649)
  * Add support for string array ep context
    params by @DmitriyMusatkin in (#646)
  * Fix websocket shutdown behavior
    (submodule updates) by @graebm in (#650)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1725278400">- Update to version 0.28.2
  * Fix MSVC most vexing parse by @sbiscigl in (#659)
  * Add wrappers around readsome and peek methods in
    std istream by @SergeyRyabinin in (#658)
- from version 0.28.1
  * Fix typo in variant by @sbiscigl in (#653)
  * Fix OpenSSL Compile and Runtime Version Mismatch by @waahm7 in (#656)
- from version 0.28.0
  * Expose socket options from Mqtt5ClientBuilder by @xiazhvera in (#652)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1726574400">- Update to version 0.28.3
  * Bind out CRC64 by @DmitriyMusatkin in (#662)</changelog>
</package>
<package pkgid="69d40d2b8a9b1afa278c2769183ffe30094f1e850bc9d6181b83e91c79a85c88c90daa71cf6d113d722a15622fa0071e3a3d40c4dd77a335073be8d9a71b112f" name="aws-efs-utils" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="bp160.1.11"/>
  <changelog author="pgajdos@suse.com" date="1652875200">- version update to 1.33.1
  * Enable mount process to retry on failed or timed out mount.nfs command
  * use unittest.mock instead of mock</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1663934400">- Update to version 1.33.4 (bsc#1203170)
  * Fix the issue where watchdog sending signal to incorrect
    processes and add FIPS mode support
  * Apply additional check on awscredsuri option
- from version 1.33.3
  * Fix the potential stunnel hanging issue caused by full
    subprocess PIPE filled by stunnel log
  * Specify FIPS mode in configuration
  * Add separate env_path for macOS; Add comments
  * Update get-pip.py download url in README
- from version 1.33.2
  * Fix the incorrect path to generate read_ahead_kb config file
    and Bump the default tls port range from 400 to 1000
- Add patch to use unittest.mock instead of mock in testsuite
  * use_mock_from_unittest.patch
- Use relative URL in Source field</changelog>
  <changelog author="pgajdos@suse.com" date="1666094400">- python-six is not required for build
  https://trello.com/c/MO53MocR/143-remove-python3-six</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1669982400">- Update to version 1.34.3
  * Fix stunnel constantly restart issue when upgrading
    from 1.32.1 and before version to latest version
  * Fix race in stunnel port selection
  * Disable journal entry fetch from systemctl call
- from version 1.34.2
  * Fix potential issue on AL2 when watchdog trying to restart
    stunnel for the TLS mounts that existing before upgrade
- from version 1.34.1
  * Update Amazon Linux 2 platform to use namespaced stunnel5</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1672747200">- Update to version 1.34.4
  * Fix potential tlsport selection collision by using
    state file as tlsport lock file (bsc#1206737, CVE-2022-46174)
- Use RPM macros for directory paths (bsc#1191055)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1674648000">- Update to version 1.34.5
  * Handle invalid entries in /proc/mounts
  * Detect invalid private key</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1680264000">- Update to version 1.35.0
  * Add parameters to allow mount fo pod impersonation feature in EFS CSI Driver
  * Updated the README with support of Oracle8 distribution
  * Readme troubleshooting section + table of contents
  * Add efs-utils Support for MacOS Ventura EC2 instances</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1707825600">- Update to version 1.35.1
  * Revert openssl requirement change
  * Revert "Update EFS Documentation: Clarify Current FIPS Compliance Status"
  * Update EFS Documentation: Clarify Current FIPS Compliance Status
  * test: Change repo urls in eol debian9 build
  * Check private key file size to skip generation
  * test: Fix pytest that failed since commit 3dd89ca
  * Fix should_check_efs_utils_version scope
  * Add warning if using old version
  * Add 'fsap' option as EFS-only option</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1722427200">- Update to version 2.0.3
  * Upgrade py version
  * Replace deprecated usage of datetime
- from version 2.0.2
  * Check for efs-proxy PIDs when cleaning tunnel state files
  * Add PID to log entries
- from version 2.0.1
  * Disable Nagle's algorithm for efs-proxy TLS mounts to improve latencies
- from version 2.0.0
  * Replace stunnel, which provides TLS encryptions for mounts, with efs-proxy,
    a component built in-house at AWS. Efs-proxy lays the foundation for upcoming
    feature launches at EFS.
- from version 1.36.0
  * Support new mount option: crossaccount, conduct cross account mounts via ip address.
    Use client AZ-ID to choose mount target.
- from version 1.35.2
  * Revert "Add warning if using older Version"
  * Support MacOS Sonoma
- Switch package to modern Python Stack on SLE-15
  * Use Python 3.11 on SLE-15 by default
  * Use primary Python version on Tumbleweed</changelog>
</package>
<package pkgid="7075701056f1d070dd787f4042d0d0f89934b2253ee40d68920bc2dd521b0543d146d5c1bd18f22b7f3d7a08f4e2bc651d60710948b0c828dde51d5d9879fd4c" name="aws-nitro-enclaves-binaryblobs-upstream" arch="x86_64">
  <version epoch="0" ver="1.4.2~git0.6e8512e" rel="160000.2.2"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
  <changelog author="olaf@aepfle.de" date="1725969600">- Update to version 1.3.3~git0.afb7264
- Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a</changelog>
  <changelog author="rjschwei@suse.com" date="1744891200">- Update to version 1.4.2
- Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6</changelog>
</package>
<package pkgid="d52ce734300f41187b7d8bf83c5f4afcae1db73e660a7e056c0c15d0ac76d6485d4f3f2ba23f6fd5c104bace3fbef182ff15abeb57b19b8b76fb7f20da717bd2" name="aws-nitro-enclaves-binaryblobs-upstream" arch="x86_64">
  <version epoch="0" ver="1.4.3~git0.82501bb" rel="160000.1.1"/>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
  <changelog author="olaf@aepfle.de" date="1725969600">- Update to version 1.3.3~git0.afb7264
- Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a</changelog>
  <changelog author="rjschwei@suse.com" date="1744891200">- Update to version 1.4.2
- Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6</changelog>
  <changelog author="olaf@aepfle.de" date="1757073600">- Update to version 1.4.3</changelog>
  <changelog author="jeffm@suse.com" date="1758888000">- Fix group in udev rule (boo#1250566)
- Automatically load kernel module when allocator service is started
  (boo#1250567)
  * Added 0001-nitro-enclaves-allocator.service-drop-in-autoload-ke.patch</changelog>
  <changelog author="jeffm@suse.com" date="1758888001">- Add header from kernel configs to blobs to fix image builds
  (boo#1250573).</changelog>
</package>
<package pkgid="b3e6c9aebb0d9ac36a5867de89edcaefcfd971162aaf7a54b29322df8652d845fc5a2b65b66c81da37e0e86bb4243912e6a2fb80899aecd7eaa48cd649a90432" name="aws-nitro-enclaves-cli" arch="x86_64">
  <version epoch="0" ver="1.4.2~git0.6e8512e" rel="160000.2.2"/>
  <changelog author="olaf@aepfle.de" date="1637582400">- Initial version 1.1.0~git8.a46465e (bsc#1179544, jsc#SLE-22954)</changelog>
  <changelog author="olaf@aepfle.de" date="1639483200">- Update to version 1.1.0~git16.860cfe4 to get all the precious cargo
  (bsc#1195053)</changelog>
  <changelog author="olaf@aepfle.de" date="1643025600">- Update to version 1.1.0~git32.8f6ed74 to get all the precious cargo
- init.c is maintained in aws-nitro-enclaves-sdk-bootstrap.git</changelog>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
  <changelog author="olaf@aepfle.de" date="1725969600">- Update to version 1.3.3~git0.afb7264
- Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a</changelog>
  <changelog author="rjschwei@suse.com" date="1744891200">- Update to version 1.4.2
- Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6</changelog>
</package>
<package pkgid="415ca714e8183d713a26de6028e4bccc962dc470c2dd9b2fc7b14ded0a68173c6f5d5339058bc4e9f993405b17d6bd35c87ed8cea691b3829aeb81733128ae6c" name="aws-nitro-enclaves-cli" arch="x86_64">
  <version epoch="0" ver="1.4.3~git0.82501bb" rel="160000.1.1"/>
  <changelog author="olaf@aepfle.de" date="1647518400">- Update to version 1.2.0~git2.841ef94 to get all the precious cargo
  (bsc#1196972, CVE-2022-24713)</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Update to version 1.2.2~git0.4ccc639 to get all the precious cargo
  (bsc#1208555, CVE-2022-31394)</changelog>
  <changelog author="olaf@aepfle.de" date="1712232000">- Update to version 1.2.3~git11.d3d77e0 to get all the precious cargo
  (bsc#1218501, CVE-2023-50711)</changelog>
  <changelog author="olaf@aepfle.de" date="1714478400">- Update to version 1.3.0~git0.be13960</changelog>
  <changelog author="olaf@aepfle.de" date="1716379200">- Update to version 1.3.0~git1.db34c02
- Update aws-nitro-enclaves-sdk-bootstrap to version v1.0.0 (203242d5)</changelog>
  <changelog author="olaf@aepfle.de" date="1725969600">- Update to version 1.3.3~git0.afb7264
- Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a</changelog>
  <changelog author="rjschwei@suse.com" date="1744891200">- Update to version 1.4.2
- Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6</changelog>
  <changelog author="olaf@aepfle.de" date="1757073600">- Update to version 1.4.3</changelog>
  <changelog author="jeffm@suse.com" date="1758888000">- Fix group in udev rule (boo#1250566)
- Automatically load kernel module when allocator service is started
  (boo#1250567)
  * Added 0001-nitro-enclaves-allocator.service-drop-in-autoload-ke.patch</changelog>
  <changelog author="jeffm@suse.com" date="1758888001">- Add header from kernel configs to blobs to fix image builds
  (boo#1250573).</changelog>
</package>
<package pkgid="019e6753d60de9fa817c89ffae498bc6e921a50dc0f48b8ab3ffe7bc07acda9906c17520f40ce64944b1397c4961436567958dfb064128e367cb79104be613c3" name="aws-sdk-image" arch="x86_64">
  <version epoch="0" ver="0.1.8" rel="7.66"/>
</package>
<package pkgid="7dfce6c6cfbc2fd9986c02546e4ee1287ea8d8d1d02e73eb71611101e386274fe0a7eb5ae1c2fe14d52d46e9868ce672e9410cdabf9e828ed566a8c22dfb8d1f" name="axel" arch="x86_64">
  <version epoch="0" ver="2.17.14" rel="bp160.1.13"/>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1553169600">- fix broken URL</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1560081600">- update to version 2.17.3:
  - Builds now use canonical host triplet instead of `uname -s`
  - Fixed build on Darwin / Mac OS X
  - Fixed download loops caused by last byte pointer being off by one
  - Fixed linking issues (i18n and posix threads)
  - Updated build instructions
  - Code cleanup
  - Added autoconf-archive to building instructions
- update to version 2.17.2:
  - Fixed HTTP request-ranges to be zero-based
  - Fixed typo "too may" -&gt; "too many"
  - Replaced malloc + memset calls with calloc
  - Sanitize progress bar buffer len passed to memset
- update to version 2.17.1:
  - Fixed comparison error in axel_divide
  - Make sure maxconns is at least 1
- update to version 2.17:
  - Fixed composition of URLs in redirections
  - Fixed request range calculation
  - Updated all translations
  - Updated build documentation
  - Major code cleanup
  - Cleanup of alternate progress output
  - Removed global string buffers
  - Fixed min and max macros
  - Moved User-Agent header to conf-&gt;add_header
  - Use integers for speed ratio and delay calculation
  - Added support for parsing IPv6 literal hostname
  - Fixed filename extraction from URL
  - Fixed request-target message to proxy
  - Handle secure protocol's schema even with SSL disabled
  - Fixed Content-Disposition filename value decoding
  - Strip leading hyphens in extracted filenames</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1571918400">- update to version 2.17.6:
  - Fixed handling of non-recoverable HTTP errors
  - Cleanup of connection setup code
  - Fixed manpage reproducibility issue
  - Use tracker instead of PTS from Debian
- update to version 2.17.5:
  - Fixed progress indicator misalignment
  - Cleaned up the wget-like progress output code
  - Improved progress output flushing
- update to version 2.17.4:
  - Fixed build with bionic libc (Android)
  - TCP Fast Open support on Linux
  - TCP code cleanup
  - Removed dependency on libm
  - Data types and format strings cleanup
  - String handling cleanup
  - Format string checking GCC attributes added
  - Buildsystem fixes and improvements
  - Updates to the documentation
  - Updated all translations
  - Fixed Footnotes in documentation
  - Fixed a typo in README.md</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1585483200">- update to version 2.17.7:
  - Buildsystem fixes
  - Fixed release date for man-pages on BSD
  - Explicitly close TCP sockets on SSL connections too
  - Fixed HTTP basic auth header generation
  - Changed the default progress report to "alternate output mode"
  - Improved English in README.md</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590926400">- update to 2.17.8:
  * CVE-2020-13614: SSL Certificate Hostnames were not verified
    (boo#1172159)
  * Replaced progressbar line clearing with terminal control sequence
  * Fixed parsing of Content-Disposition HTTP header
  * Fixed User-Agent HTTP header never being included</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1598011200">- update to 2.17.9:
  * Fixed insecure mode certificate checking error.
  * Fixed progress bar for large number of connections.
  * Fixed some race conditions with conn_t.
  * Removed limitations on state file name length.
  * Removed limitations on HTTP query length.
  * Fixed a memory leak when deleting the download state file.
  * Added coding style aid and licensing rules to CONTRIBUTING.md.
  * Updated and improved README.md.
  * Cleanup of code &amp; build system.
  * Made the help flag report axel's version number.
  * Updated Chinese translation.
- run spec-cleaner
  * remove rpm groups</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1606046400">- update to 2.17.10:
  * Potential NULL pointer dereference
  * Fixed incrementig procedure for delay_time
  * Fixed speed limiting
  * Made stop signal handler portable
  * Build system improvements
  - Now you can specify where OpenSSL is installed
  - Further improved code portability
  * Optimized wildcard search in URLs
  * Added human-readable file size report at the begining of downloads
  * Reworked Request Range support check
  * Added "Accept-Encoding" header to requests
  * Updated the documentation
  * Fixed data type for sizes and offsets on 32-bit systems
  * Fixed duplicated non-default port when using proxy
  * Fixed request range comparison and overflow
  * i8n fixes and updates for Simplified Chinese, Dutch, German,
    Italian, Portuguese, Spanish. Also updates for Indonesian,
    Japanese, Russian.
- CREDITS and AUTHORS files removed from upstream</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1642507200">- Update to 2.17.11:
  * Fixed a deadlock in conn_info
  * Fixed build on FreeBSD (workaround for hidden typedefs)
  * Added SPDX license information
  * Improved reporting of HTTP status codes
  * Source-code simplifications
  * Buildsystem improvements
    + Check intmax_t &gt;= int64_t on Mac OS X
    + Improved output when pkg-config is unavailable
  * Implemented percentage output mode for piping
  * Fixed typos
  * Added Turkish Translation</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 2.17.13:
  * abuf: Fix realloc usage
  * configure: Fix handling of --with-ssl
  * random: Initialize fd at startup
  * Fixed a wrong translation for Turkish
  * Implemented early redirect loop detection
  * Added LGTM.com support
  * Buildsystem improvements
  * Added wolfSSL support
  * Fixed potential int overflow
  * Simplified configuration support code
  * Early redirect loop detection improvements
  * Fixed speed-limiting sleep delay overflow
  * Removed HTTP encoding of URLs on the CLI, should be pre-
    encoded</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1719748800">- Update to version 2.17.14
  * Remove inclusion of &lt;stdatomic.h&gt;
  * configure: Fix handling of --with-ssl=yes
  * conn: Fix potential buffer overrun
  * http: Fix filename parsing from Content-Disposition
  * configure: Force C89-compliant return type of signal handlers
  * configure: Update to autoconf 2.72</changelog>
</package>
<package pkgid="786de823ef592f3e8181e5d8afc74bf10b98f6e6cc584bd066cfd88050e6dc9d629ad7be63aee531c205dfbda0474a94e36cc458787eee4cf339b5a0114c70b3" name="axis" arch="noarch">
  <version epoch="0" ver="1.4" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555329600">- Replace find -exec rm by just -delete</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557403200">- Security fix [bsc#1134598, CVE-2012-5784, CVE-2014-3596]
  Missing connection hostname check against X.509 certificate name
  * Added axis-CVE-2014-3596.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compat package log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646136000">- Alias relevant artifacts to org.apache.axis</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647604800">- Unify the dependency on glassfish-activation-api instead of jaf
  and gnu-jaf
- Added patch:
  * unimplemented-saaj13-methods.patch
    + on systems where the JavaEE modules exist, allow building
    against newer versions of APIs</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Depend on the glassfish-activation-api standalone in order to
  prevent missing APIs when running the ant task</changelog>
  <changelog author="Gus Kenion &lt;gkenion@suse.com&gt;" date="1707393600">- Security fix [bsc#1218605, CVE-2023-51441] SSRF when untrusted
  input is passed to the service admin HTTP API
  * Added axis-CVE-2023-51441.patch
  - Update axis-jdk11.patch, remove references to files that are
  no longer present.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707480000">- Clean the spec file and use javapackages-local &gt;= 6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="81156a8c0692bb07913c31f029b0d6f2462fb7c69ed18fb058f57df7b9239c2a70bd814b718793ce86d71d6c342591b067c43fd4370b737cbd1dc3d659cc9ad7" name="axis-manual" arch="noarch">
  <version epoch="0" ver="1.4" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555329600">- Replace find -exec rm by just -delete</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557403200">- Security fix [bsc#1134598, CVE-2012-5784, CVE-2014-3596]
  Missing connection hostname check against X.509 certificate name
  * Added axis-CVE-2014-3596.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compat package log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1645531200">- Do not build against the log4j12 packages, use the new reload4j</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1646136000">- Alias relevant artifacts to org.apache.axis</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647604800">- Unify the dependency on glassfish-activation-api instead of jaf
  and gnu-jaf
- Added patch:
  * unimplemented-saaj13-methods.patch
    + on systems where the JavaEE modules exist, allow building
    against newer versions of APIs</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Depend on the glassfish-activation-api standalone in order to
  prevent missing APIs when running the ant task</changelog>
  <changelog author="Gus Kenion &lt;gkenion@suse.com&gt;" date="1707393600">- Security fix [bsc#1218605, CVE-2023-51441] SSRF when untrusted
  input is passed to the service admin HTTP API
  * Added axis-CVE-2023-51441.patch
  - Update axis-jdk11.patch, remove references to files that are
  no longer present.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1707480000">- Clean the spec file and use javapackages-local &gt;= 6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b22d2bd73b9dbce1a01eb185588579a07828df19f09b8eefd629ddb7897bd772253121b4314aaf80475144e2ea58e6645e00f90554046a067f4f65e8a970b016" name="ayatana-ido-devel" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="bp160.1.11"/>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534593600">- Update to version 0.4.4 (changes since 0.4.2):
  * Fix the Name field in the libayatana-ido3.pc.in file.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1573214400">- add ayatana-ido-glib-2.58.patch
  * g_type_class_add_private was deprecated since glib 2.58
    get rid of it and self-defined *_GET_PRIVATE() functions,
    use G_DEFINE_TYPE_* and auto-generated *_get_instance_private()
    instead.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1600257600">- Add upstream patch to fix build:
  * 0001-gtk_widget_get_state-is-deprecated.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- Update to version 0.8.2
  * Add a new menu item type: IDO Removable.
  * Add optional markup to the basic menu item.
  * Replace x-canonical attributes solely used by Ayatana Indicators
  * Drop IDO Message Dialog.
  * Centre playback menu item spinner/Pad application menu item label.
  * Centre volume control/Stretch calendar horizontally.
  * Updated colour getter for playback control.
- Drop upstream fixed
  * ayatana-ido-glib-2.58.patch
  * 0001-gtk_widget_get_state-is-deprecated.patch
- Add pkgconfig-requires.patch
  * Add all public dependencies to pkgconfig Requires section</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1637755200">- Update to version 0.9.0:
  * Switch to CMake from autotools.
  * Add better documentation.
  * data/libayatana-ido3-0.4.pc.in: Add glib-2.0 dependency.
  * src/idoappointmentmenuitem.c: Construct the basic menu item
    using the pixbuf property.
  * src/basicmenuitem.c: Add GdkPixbuf source support for the
    icon.
  * src/idoremovablemenuitem.c: Replace grid with box to fix
    a11y.
  * src/idolocationmenuitem.c: Fix deprecated g_time_zone_new
    warning.
  * Fix a unit test failure on Ubuntu 20.04.
  * Use consistent Ayatana IDO names. This version of Ayatana IDO
    breaks NG system indicators before 0.9.x.
- Drop pkgconfig-requires.patch: merged upstream.
- Add ayatana-ido-0.9.0-libm.patch: Link with libm to fix build.
- Restore Group.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1654257600">- Update to version 0.9.2:
  * src/CMakeLists.txt: link libm for expf, pow and sinf.
  * vala: The name of the vapi should match the pkg-config name.
- Drop ayatana-ido-0.9.0-libm.patch. Applied upstream.
- Adjust to .vapi file renaming by upstream (AyatanaIdo3-0.4.vapi -&gt;
  libayatana-ido3-0.4.vapi.</changelog>
</package>
<package pkgid="e8c87c459b5587fcaced795d61178d8570964e694ec3a3fbd28cc424ca8efa7f29ebc3afe783fb978e708e45cb1c379cdfdd64f031694e8d7ce8d32b20f4b77b" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.36.1" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
</package>
<package pkgid="35455e5b11ec24cf303e22a3e0e706472973097a0cd07238b77dd54a22188946c0583522ba649cff7deb9c0c36af0326d726d87549aa7d8a3b4a12aec552a3d2" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.37.0" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1762516800">- version 1.37.0
  - Drop dependencies that do not appear needed. Not referenced in the
    sources of azure-cli upstream. (bsc#1253140)
  - Change the deriviation chain by adding the az-sdk container as a base</changelog>
</package>
<package pkgid="5089902f00929073aa995fb7d76584afa61b825a177792835449d22b0b57dc305e3a4756fca5374f3bc2b9838af5a68a33b00b37e238e48663b078ee97421f8a" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.37.1" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1762516800">- version 1.37.0
  - Drop dependencies that do not appear needed. Not referenced in the
    sources of azure-cli upstream. (bsc#1253140)
  - Change the deriviation chain by adding the az-sdk container as a base</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
</package>
<package pkgid="adf42ee950956625d08b4720b311a5b7baf8487b93e29eb266fb439413ddecdac52e8b7c5771bae3746a742530133e37d103a83816cbe418ffe7fad7b59db442" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.37.1" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1762516800">- version 1.37.0
  - Drop dependencies that do not appear needed. Not referenced in the
    sources of azure-cli upstream. (bsc#1253140)
  - Change the deriviation chain by adding the az-sdk container as a base</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="rjschwei@suse.com" date="1765281600">- Update package summary (bsc#1253491)</changelog>
</package>
<package pkgid="d2ae19df33d0b11be21e4a6c732fc77531523b013611f1387a48a4d3a400e16595cd0bf0f4043626ed535bdb66d33217c9754eee7a9300a8aed0794f56fa4506" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.37.1" rel="160000.3.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1762516800">- version 1.37.0
  - Drop dependencies that do not appear needed. Not referenced in the
    sources of azure-cli upstream. (bsc#1253140)
  - Change the deriviation chain by adding the az-sdk container as a base</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="rjschwei@suse.com" date="1765281600">- Update package summary (bsc#1253491)</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1773748800">- Fix install/upgrade/removal
  With the release of flake-pilot 3.1.27 a force option
  for registration and deregistration has been added. This
  allows for a simpler registration processing in the spec
  file of the -cmd package. This commit adds registration
  and deregistration helper scripts and calls them as part
  of the spec pre/post processing macros. The macro setup
  makes sure:
  1. The flake gets registered as %post install action
  2. The flake gets deregistered as %preun uninstall (no upgrade) action
  With regards to the already released package and the
  existing macro code the following applies:
  The %postun code from the old package runs after the %post code
  of the new package and only in upgrade mode. This would harm the
  registration which is the reason why we again call register_az
  in %posttrans which is the last action of the entire transaction
  and ensures the registration will be effective
  This Fixes bsc#1259604</changelog>
</package>
<package pkgid="d8943363529fba0f03c2574d42a8462b9a9712dc54a67ef33248749d77c3a4991fbce84bf68b8ee7cd59a5ef5fa9bc9173b8365ec382cb36cad25ca9429368b2" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.37.1" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1734264000">- the magic</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758542400">- drop build requires and flake-ctl build actions and move them to %post</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1762516800">- version 1.37.0
  - Drop dependencies that do not appear needed. Not referenced in the
    sources of azure-cli upstream. (bsc#1253140)
  - Change the deriviation chain by adding the az-sdk container as a base</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="rjschwei@suse.com" date="1765281600">- Update package summary (bsc#1253491)</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1773748800">- Fix install/upgrade/removal
  With the release of flake-pilot 3.1.27 a force option
  for registration and deregistration has been added. This
  allows for a simpler registration processing in the spec
  file of the -cmd package. This commit adds registration
  and deregistration helper scripts and calls them as part
  of the spec pre/post processing macros. The macro setup
  makes sure:
  1. The flake gets registered as %post install action
  2. The flake gets deregistered as %preun uninstall (no upgrade) action
  With regards to the already released package and the
  existing macro code the following applies:
  The %postun code from the old package runs after the %post code
  of the new package and only in upgrade mode. This would harm the
  registration which is the reason why we again call register_az
  in %posttrans which is the last action of the entire transaction
  and ensures the registration will be effective
  This Fixes bsc#1259604</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1780488000">- Adapt HOME sharing to be more useful
  So far the HOME directory of the calling user was mapped
  into the container to appear as the HOME of the root
  user (/root) inside of the container because it's effectively
  the only user present inside of the container. However, from
  a usabilty perspective this is not a good setup because
  any home based file reference on the host has a different
  path inside of the container which is confusing for users.
  This commit makes sure that the host path references matches
  with the path inside the container. This Fixes bsc#1266045</changelog>
</package>
<package pkgid="db3ca70c58608a5ec7b9f4e08ff542412c6f19d85943de3dcd23950e677d0bfc1dc39d39551e37efe962730e4d1d2c206eb439cc0cfb42cbc16ca6ffe3a3277c" name="az-cli-cmd" arch="noarch">
  <version epoch="0" ver="1.37.1" rel="160000.5.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1759924800">- Use fixed python version 3.13</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1761912000">- Disable security context for shared volume
  For sharing the home directory with the container the
  security context needs to be disabled to allow this
  shared mount. For details about this setting as well
  as approval on the approach please visit bsc#1252390</changelog>
  <changelog author="rjschwei@suse.com" date="1762430400">- Remove the executable script if it exists prior to generation of
  a new wrapper by flake-ctl. Otherwise flake-ctl complains about the
  existence of the script and we get an error during package update.</changelog>
  <changelog author="rjschwei@suse.com" date="1762516800">- version 1.37.0
  - Drop dependencies that do not appear needed. Not referenced in the
    sources of azure-cli upstream. (bsc#1253140)
  - Change the deriviation chain by adding the az-sdk container as a base</changelog>
  <changelog author="rjschwei@suse.com" date="1763553600">- Update postun scriplet (bsc#1253743)
  - Do not run the postun scriptlet on upgrade as it will remove the
    just created command.</changelog>
  <changelog author="rjschwei@suse.com" date="1765281600">- Update package summary (bsc#1253491)</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1773748800">- Fix install/upgrade/removal
  With the release of flake-pilot 3.1.27 a force option
  for registration and deregistration has been added. This
  allows for a simpler registration processing in the spec
  file of the -cmd package. This commit adds registration
  and deregistration helper scripts and calls them as part
  of the spec pre/post processing macros. The macro setup
  makes sure:
  1. The flake gets registered as %post install action
  2. The flake gets deregistered as %preun uninstall (no upgrade) action
  With regards to the already released package and the
  existing macro code the following applies:
  The %postun code from the old package runs after the %post code
  of the new package and only in upgrade mode. This would harm the
  registration which is the reason why we again call register_az
  in %posttrans which is the last action of the entire transaction
  and ensures the registration will be effective
  This Fixes bsc#1259604</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1780488000">- Adapt HOME sharing to be more useful
  So far the HOME directory of the calling user was mapped
  into the container to appear as the HOME of the root
  user (/root) inside of the container because it's effectively
  the only user present inside of the container. However, from
  a usabilty perspective this is not a good setup because
  any home based file reference on the host has a different
  path inside of the container which is confusing for users.
  This commit makes sure that the host path references matches
  with the path inside the container. This Fixes bsc#1266045</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1783080000">- Fix typo in spec
  The %ghost reference contained a superfluous quote sign
  at the end of the line</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1783080001">- Add /etc/ssl as path to share with the container
  This Fixes bsc#1269510</changelog>
</package>
<package pkgid="512a18f312b288e0f46dfe13eff8d4838325707389d765cbda9fee472850d2fd5cd954d58ed7b469429584f5754deb30fffd843c73d37178a77e583e1c1c203a" name="az-cli-image" arch="x86_64">
  <version epoch="0" ver="0.1.4" rel="1.79"/>
</package>
<package pkgid="dd45b9c5f6d60b55d1e2b21fe3ea525ca10f39b3755ea21c00f2c82742a5c196e1217117ff2095ef63e24ad76c713aba9ac4ba23754de3c856bb8af1bf0926cf" name="az-sdk-image" arch="x86_64">
  <version epoch="0" ver="0.1.9" rel="1.70"/>
</package>
<package pkgid="b41788c704b4cc6a5ec3c763c6b12adb79a236ace05643d9224d06e2a6aecf3b209001717f1e1e809fc5e6b71143aad68aa6cc93c9a09d88beeb5ae6d004de93" name="azote" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp160.1.10"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688558400">- Update to 1.12.2:
  * Fix crash on attempt to split an image #183</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1689076800">- Update to 1.12.3:
  * Fix crash on spaces in directory names #184</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706356800">- Update to 1.12.4:
  * Documentation updated</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708948800">- Update to 1.12.5:
  * Fixed silent crash on file extension in uppercase.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1712232000">- Update to 1.12.6:
  * Added Italian translation #186</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1714737600">- Update to 1.12.7:
  * Get ready for Hyprland socket files moved to $XDG_RUNTIME_DIR/hypr</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1716811200">- Update to 1.12.8:
  * Fix no such file in directory bug #189</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1716984000">- Update to 1.12.9:
  * Fix broken images path</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1724414400">- Update to 1.13.0:
  * fixed SyntaxWarning for invalid escape sequence in main.py #193
  * adjustment to the current imagemagick version (convert -&gt; magick);
  * workaround for Hyprland 0.42.0 oddity:
    If you use generic display names instead of output names, and your display
    has the serial value empty, Hyprland for some reason expects a space at the
    end of the output description (called 'Generic display name' in Azote).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1727265600">- Update to 1.13.1:
  * Fix path to the helper image used when creating a thumbnail
    for images with non-standard aspect ratios. Closes #197.</changelog>
</package>
<package pkgid="351678a43eee22a3ff088b72c2d5e5e470f9cb5437a9f3d1798f089b727a11cde79a3793630f49678297a7855a26f476a1256a13587fc157a3d9a9aee0416459" name="azove" arch="x86_64">
  <version epoch="0" ver="2.0" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1369310400">- Initial package (version 2.0) for build.opensuse.org
- Add azove-cpp.diff to fix compile error</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Modernize specfile.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698926400">- Update homepage URLs</changelog>
</package>
<package pkgid="00bc949905af6bb0d36cecff55fd67b2008b54ab2f766bd993e4f5d01be67e62e702f1ebd3d8ca088fa63aff11f2cebf618d49b24510b9482c440df087ffa8ff" name="azure-vm-utils" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="160000.2.2"/>
  <changelog author="cpatterson@microsoft.com" date="1728561600">-  Initial packaging (0.4.0).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1737028800">- Add sed invocation to adjust path to bash interpretor on SLE-12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1737374400">- Include in SLE-15 and SLFO (jsc#PED-11608)</changelog>
</package>
<package pkgid="2575aac87ff660aeda1d5a6c2c52e9f36fc071bc11d2301f8b16cd24ece864dc00194fe77e675120337f54228cca62e82f4b84bc786a8af213a917201c34dd3b" name="b3sum" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="bp160.1.13"/>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1691150400">- Initial package of blake3/b3sum 1.4.1 for openSUSE</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704024000">- Update to version 1.5.0:
  * The Rust crate's Hasher type has gained new helper methods
    for common forms of IO: update_reader, update_mmap, and
    update_mmap_rayon. The latter matches the default behavior
    of b3sum. The mmap methods are gated by the new "mmap" Cargo
    feature.
  * Most of the Rust crate's public types now implement the Zeroize
    trait. This is gated by the new "zeroize" Cargo feature.
  * The Rust crate's Hash types now implements the serde Serialize
    and Deserialize traits. This is gated by the new "serde" Cargo
    feature.
  * NEON support is now disabled by default on big-endian AArch64.
    Previously this was a build error if the caller didn't
    explicitly disable it.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713787200">- Package changes:
  * Swap from obsolete tar_scm to obs_scm
  * Remove obsolete cargo_audit (now part of cargo_vendor)
  * Enable tests
- Update to version 1.5.1:
  * The Rust crate is now compatible with Miri.
  * ~1% performance improvement on Arm NEON
  * Various fixes and improvements in the CMake build.
  * The MSRV of b3sum is now 1.74.1. (The MSRV of the library crate
    is unchanged, 1.66.1.)</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1720785600">- Update to version 1.5.2:
  * build.rs sets cc::Build::emit_rerun_if_env_changed(false) to
    prevent some unnecessary rebuilds
  * Serializing a Hash produces a bytestring instead of an array in
    formats that support bytestrings (like CBOR). Deserialization
    is backwards-compatible with the array format
  * Cleanup and edge case fixes in the C and CMake builds.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1721304000">- Update to version 1.5.3:
  * Revert the serialization change. It was intended to be
    backwards compatible, but that didn't hold for
    non-self-describing serialization formats like bincode.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1724068800">- Update to version 1.5.4:
  * Initial implementation of SIMD acceleration for the XOF (i.e.
    blake3::Hasher::finalize_xof). This brings long output
    performance into line with long input performance. Currently
    AVX-512-only and Unix-only.
  * The "zeroize" feature no longer depends on proc-macros and syn.</changelog>
</package>
<package pkgid="c6fc345b0de63740ec7dcc6ad321f73d84ebf7567b36284b7f056320355b5dc09cb846c3d3bb052e7801049a7a70fdfe9142f357fc531aa084cecaca76517708" name="b4" arch="noarch">
  <version epoch="0" ver="0.14.2" rel="bp160.1.11"/>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1687780800">- update to 0.12.3:
  * ez: store sent prefixes with the tag message
  * Properly quote the address before adding into From
  * shazam: switch to top of git tree before running git-am
  * trailers: normalize address after parsing
  * Fix wrong CTR header after 8bit cover content is mixed in
  * ez: make it easier to send single-patch series
  * ez: make message-ids use today's date
  * ez: only include base-branch when using non-default strategy
  * Fix to properly handle under-scissors patches with a unixfrom line
  * Clean headers before adding them to the pre-scissors email
  * b4: Fix envelopeSender handling
  * am, shazam: allow cherry-picking an out-of-series patch
  * mbox.py::make_am: simplify check for early return
  * ez: Fix 'trailers -F' used on a single commit
  * b4.sh: keep existing PYTHONPATH if set
  * b4: Allow prep new branch while on a b4 managed branch
  * docs: fix smtpServerPort option
  * trailers: add 'Closes' as recognized link trailer
  * trailers: accept recognized link trailers
  * Consider '@' safe in msgid URLs
  * ez: better fix for "no follow-up trailers" condition
  * Add subscribe/unsubscribe to badtrailers
  * ez: do not trust local commands to properly reflect
  * ez-trailers: don't crash when there are no follow-ups received</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1690459200">- add python3-base &gt;= 3.9 to BuildRequires for 15.5 and older
- add %{?sle15_python_module_pythons}
- switch back to python_module macro to have all this working</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1696507200">- Remove dependency on /usr/bin/python3 using %python3_fix_shebang
  macro, bsc#1212476</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1698148800">- update to 0.12.4:
  * ez: ignore invalid unicode returned by get_maintainer
  * Only pass -f to sendmail if envelopesender is set
  * trailers: do not quote names when special chars are present</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1698753600">- add %{python_module ...} also to requires, otherwise bad
  requires are generated</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699358400">- remove python_module from requires, this might lead to unwanted
  side effects. use pprefix macro instead to manage sle15</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1708084800">- update to 0.13.0:
  * `b4 am` now has a `--single-message` flag that lets you process a
    single message and ignore any other parts of a thread; this is
    useful when there is a patch series sent as attachments to a single
    message
  * `--apply-cover-trailers` is now the default behaviour
  * when patchwork integration is configured, `b4 am` will attempt to
    retrieve the CI status of patches
  * `b4 prep --show-info` can do a lot more now, including showing
    information about branches that aren't currently checked out
  * `b4 prep` gained a --cleanup option to properly archive and remove
    old b4*prep-managed branches
  * `b4 send` has a `--preview-to` option that lets you send a
    pre*review of your series to your colleagues, mentors, or bosses
  * various fixes and improvements to `b4 send` functionality
  * b4 can now take config options on commandline, allowing to override
    global configs via scripted invocations
  * improvements to `b4 diff` that should make it work more reliably for
    series without exact object matches</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1718625600">- update to 0.14.0:
  * Switch to using pyproject.toml
  * Automatic dependency resolution
  * Checkpatch and other pre-submit checks
  * Document new features
  * Miscellaneous enhancements</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1721822400">- update to 0.14.1:
  * Forward the smtpserveroption to the local command
  * Support "valueless truth" in configuration parsing
  * Exclude tests from dist files
  * bump-version: fix path to the manpages
  * shazam: force mboxrd mode for git-am
  * Improve tests exclusion from the built packages
  * When looking for the cover commit, restrict to current committer</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1726660800">- update to 0.14.2:
  * fixes "b4 am/shazam" sometimes pulling in bogus trailers
  * fixes "b4 send" treating message-ids as email addresses to cc
  * fixes "prep-perpatch-check-cmd" for custom checkpatch configurations
  * fixes "b4 send" expanding prerequisites in incorrect order</changelog>
</package>
<package pkgid="f80a30eb75aa363bcf6172beb44b40e538002c25903225e9e4beb27ca1ce00f02976f6e24ba0ef41d81ed5a905118235f611a1077afda6c7211185bc3c377cc4" name="b43-fwcutter" arch="x86_64">
  <version epoch="0" ver="019" rel="bp160.1.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="cfarrell@suse.com" date="1345723200">- license update: BSD-2-Clause
  Only BSD-2-Clause license found in the package</changelog>
  <changelog author="jeffm@suse.com" date="1366200000">- Update to v017 (bnc#815700)
- Update source URL for firmware
- removed b43-fwcutter.diff</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1378468800">- add Supplements for the rest of devices supported by the b43
  and b43legacy drivers.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385294400">- Update to version 018 (no changelog)</changelog>
  <changelog author="p.drouand@gmail.com" date="1415707200">- Update to version 019
  + No changelog available</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in install_bcm43xx_firmware script</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1452081600">- Update downloaded firmware from version 666.2 to version 784.2. This
  release adds firmware for a number of newer devices. Not all of these
  are supported by b43, but with this change, the firmware will be
  available when any are supported. As Broadcom does not release details
  of the changes in their firmware, it is not known what enhancements have
  been made to the firmware for older devices.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Fixed SPEC file: Replace broken URL with current upstream</changelog>
</package>
<package pkgid="a655664b3428cf4e25a7500f963499eccfd4f74884677d4f310b4fbda3237d881be30d805ceb6cb0705505eada7cb0753d91bbaf29f6ff6912f0d58af4e7392d" name="babelstone-han-fonts" arch="noarch">
  <version epoch="0" ver="16.0.2" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1382011200">- initial version 1.11</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 8.0.0
  * 9 characters added to the end of the main CJK block
  * 115 CJK-A characters
  * 363 CJK-B characters
  * 30 CJK-C characters
  * 1,125 CJK-E characters
  * 194 PUA characters removed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449921600">- Update to version 8.0.2
  * More glyph corrections
  * 5 additional CJK-B characters.
- Changes from version 8.0.1
  * 269 CJK-A characters
  * 428 CJK-B characters
  * 97 CJK-C characters
  * 209 CJK-E characters
  * 1,671 PUA characters added from BabelStone Han PUA
  * Various glyph corrections.</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1668340800">update: 8.0.2 -&gt; 15.0.4
- Added lots of new glyphs
  * See: https://www.babelstone.co.uk/Fonts/Han_Versions.html</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1673006400">- update: 15.0.4 -&gt; 15.0.5
  * Change license ID from SUSE-Arphic to Arphic-1999
  * 179 additional CJK unified ideographs
  * 7 PUA characters added from BabelStone Han PUA version 1.320
  * 10 duplicate PUA characters removed and about 60 PUA characters removed (now supported as IVS sequences)</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1694606400">- Update to 15.1.1
  * 128 PUA characters added from BabelStone Han PUA version 1.357
  * 193 PUA characters removed (now included in Ext. I)
  * 5 new IDC characters added
  * 786 Latin letters and non-Han symbols removed (due to the 65,535 glyph limit on TrueType fonts)
  * Glyph corrections and glyph improvements for 337 CJK unified ideographs</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1699617600">- Update to 15.1.2
  * 49 glyph corrections and improvements</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1704542400">- Update to 15.1.3
  * 1,176 additional CJK unified ideographs
  * Due to the font limit of 65,535 glyphs,
  all PUA characters in the range E080 through F8DF have been removed,
  and are now only available in the BabelStone Han PUA font
  * 56 glyph corrections and improvements</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1711281600">- Update to 15.1.4
  * 463 additional CJK unified ideographs
  * 17 glyph corrections and improvements</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1729512000">- Update to 16.0.2
  * 1,265 additional CJK unified ideographs
  * 150 glyph corrections and improvements</changelog>
</package>
<package pkgid="7d69cdc9504f63d30475d72a64a35e33b4ff48d8c9a50c329733d37c7bbdacbe6bf700d441dab13f6f05a768aaa3b4d8bc57d350030243963ca9d3cb51ab11e4" name="babelstone-marchen-fonts" arch="noarch">
  <version epoch="0" ver="9.003" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1382011200">- initial version 1.01</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1668254400">update: 1.01 -&gt; 9.003
- Remapped to Unicode's Marchen Block
- etc: https://www.babelstone.co.uk/Fonts/Marchen.html
  Replaced generic license with specific BabelStoneOFL.txt</changelog>
</package>
<package pkgid="480392632fcdb5f0e5e8cb6ad85609cda921ec2deb43bd68e83fea37cb01eeacd2cfb3955a44b1d3593f3f9056bf5a912bd076d4f9b2570026f67dc8995597d4" name="babelstone-ogham-fonts" arch="noarch">
  <version epoch="0" ver="20220314" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1382011200">- initial version 20131112</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1668340800">update: 20131112 -&gt; 20220314
- Added 'Ogam' tag for design languages and supported languages of the meta table
  Replaced generic license with specific BabelStoneOFL.txt</changelog>
</package>
<package pkgid="75e7abfb1b89df484cbd31c6fa50e8ad43f6643f7b090c4b483c807b5631eb4b773f8dc80ef24f19ecf1c112a1543d6846bbfef58a1be64e0451f570723ce686" name="babelstone-runic-fonts" arch="noarch">
  <version epoch="0" ver="20131112" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1382011200">- initial version 20131112</changelog>
  <changelog author="Gordon Leung &lt;pirateclip@protonmail.com&gt;" date="1668340800">update: 20131112 -&gt; 20220314
- Added runes from Unicode 7.0
- Added missing OpenType substitutions for mirrored forms of U+16F1 through 16F8
- Added 'Runr' tag for design languages and supported languages of the meta table
  Replaced generic license with specific BabelStoneOFL.txt</changelog>
</package>
<package pkgid="7c2076b02351cf6eabc62b185e86468be392fad08db9e8b45f7a1645a7a39b9dc04251483276713330f08f796be7922702102fed306cc53c2ab04a91447e9b58" name="babeltrace" arch="x86_64">
  <version epoch="0" ver="1.5.8" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="dmueller@suse.com" date="1639396800">- reenable babeltrace on armv6/v7 (switch to excludearch)</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add explicit python3-setuptools BuildRequires: needed when
  building with Python 3.13.</changelog>
</package>
<package pkgid="2ba46bc1c82f07372202190d33467785fb45da430c2682dc182541054185f99403c812444d17209411a3872520189a6a0e9934ce38537f05d1be97fafd8665c0" name="babeltrace-devel" arch="x86_64">
  <version epoch="0" ver="1.5.8" rel="160000.2.2"/>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="dmueller@suse.com" date="1639396800">- reenable babeltrace on armv6/v7 (switch to excludearch)</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add explicit python3-setuptools BuildRequires: needed when
  building with Python 3.13.</changelog>
</package>
<package pkgid="920c5f150b13795a207a69c2855b5d81f96efa3f6e62a5aecf341c1718b8770395243f0c3984183b984e8d60d42e8272b8c72040ca57d7559c3afc96d1bc9196" name="babeltrace2" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="bp160.1.10"/>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Initial package.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 2.0.3:
  * Fix: lib: use appropriate format specifier to print message iterator class
  * Fix: sink.text.pretty: check that port is connected before creating message iterator
  * Add initial Python bindings documentation
  * Fix: bt2: read properties on _DiscardedEventsMessage
  * tests: add tests for discarded events/packets creation
  * Fix: bt2: add precond. check, for stream class supporting discarded msgs with clock snapshot without clock class
  * Fix: flt-utils.muxer: reference leak in muxer_msg_iter_add_upstream_msg_iter error path
  * Fix: sink.text.details: goto error when failing to add input port
  * Fix: src.text.dmesg: add missing assignment of `status` on error path
  * Revert "bt2: _EventConst.__getitem__(): use a single temporary variable"
  * Fix: src.ctf.fs: initialize the other_entry variable
  * bt2: _EventConst.__getitem__(): use a single temporary variable
  * Fix: _EventConst.__getitem__(): check if event has a packet
  * doc: bt_field_class...get_mapping_labels...(): clarify RV's validity
  * doc/api/libbabeltrace2/style.css: make font weight of `.intertd` normal
  * common: cast arguments to character classification functions to unsigned char
  * flt.utils.muxer: initialize variable to silence -Wmaybe-uninitialized warning
  * Fix: configure.ac: silently accepting invalid Python configuration
  * Cleanup: configure.ac: remove redundant `AC_ARG_ENABLE` parameters
  * Fix: plugin-dev.h: Disable address sanitizer on pointer array section variables
  * Fix: cli: use BT_CLI_LOGE_APPEND_CAUSE instead of printf to print errors
  * tests: improve flt.utils.trimmer/test_trimming to test streams without packets
  * Fix: flt-utils.trimmer: accept streams without packet support
  * Fix: lib: don't assume that streams have packets in auto seek
  * Fix: correct typo in README</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Update to 2.0.4:
  * Fix: macro name for "get supported mip versions method"
    attribute descriptor
  * Fix: disable deprecation warnings for SWIG generated code
  * Fix: sink.ctf.fs: fix logic of make_unique_stream_file_name
  * Fix: sink.ctf.fs: remove spurious directory level when using assume-single-trace
  * Fix: bt2: _trim_docstring(): docstring can have 0 or 1 line
  * Fix: `ctf` plugin: use element FC's alignment as array/seq. FC alignment
  * Fix: source.ctf.lttng-live: muxing failure on clear (unit conversion)
  * Fix: src.ctf.lttng-live: incomplete metadata packet is an error
  * Fix: source.ctf.lttng-live: muxing failure on clear
  * Fix: source.ctf.fs: 0-length packet index length causes SIGFPE</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691064000">- Update to 2.0.5:
  * bt2: honor build system compiler/linker preferences
  * Fix: clear_string_field(): set first character to 0
  * Fix: src.ctf.fs: Not resolving event common ctx
  * debug-info: fix -Wenum-int-mismatch problem in copy_field_class_content_internal
  * fix: pass exec-prefix to python bindings install
  * fix: document proper Bison version requirement
  * cli: use return value of g_string_free
  * babeltrace2-query(1): erroneous parameter used in example
  * Fix: tests: print real values in a fixed format
  * Fix: bt2: autodisc: remove thread error while inserting status in map
  * tests: src.ctf.fs: add test for metadata with invalid syntax
  * tests: shorten names of session-rotation trace
  * bt2: ignore -Wredundant-decls warning
  * ctf: fix -Wformat-overflow error in ctf-meta-resolve.cpp
  * ctf-writer: fix -Wformat-overflow errors in resolve.c
  * Fix: src.text.details: use write_uint_prop_value to handle unsigned values in write_int_range
  * Add dev-requirements.txt for pip
  * Fix: src.ctf.lttng-live: consider empty metadata packet as retry
  * Fix: ctf: wrongfully requiring CTF metadata signature for every section
  * Fix: src.ctf.lttng-live: session closed before any metadata is received
  * fix: obsolete warnings with autoconf &gt;= 2.71
  * fix: explicitly disable '-Wsuggest-attribute=format'
  * fix: set stable branch in gitreview config
  * Fix: ctf-writer: list of reserved keywords
  * compiler warning cleanup: is_signed_type: compare -1 to 1
  * Update working version to Babeltrace 2.0.5</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1737547200">- Update to 2.0.6:
  * bt2: disable some warnings for `native_bt.c`
  * bt2: compile `native_bt.c` with `-Wno-undef`
  * Fix: src.ctf.lttng-live: expect NEW_STREAM/METADATA for inactive streams
  * Fix: `babeltrace2 convert`: don't consider the `--plugin-path` opt.
  * include/babeltrace2/plugin/plugin-dev.h: "define" -&gt; "definition
  * Fix: doc: escape double quote in bt_p alias
  * Fix: bt2: pass _TraceClassConst to destruction listeners
  * fix: 'load_module()' deprecated in Python 3.12
  * tests: retry os.rename on PermissionError failure in lttng_live_server.py
  * doc: fix uptream -&gt; upstream typos
  * fix: test_message_iterator.py hangs on Python 3.12
  * plugin-dev: mark symbols meant to be public with __attribute__((visibility("default")))
  * Silence -Wunused-but-set-variable error with clang
  * Fix: Windows DLL path lookup with Python &gt;= 3.8
  * doc/man: make default values of boolean init. params. clearer
  * RFC: docs: fix: Match stated automake requirement
  * fix: make flake8 6.x happy
  * fix: running black on python 3.11
  * bt_query_executor_create_with_method_data(): fix docs note
  * Fix: ctf-writer: null dereference in bt_ctf_trace_common_add_stream_class
  * Update working version to Babeltrace v2.0.6</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1738238400">- Update to 2.1.0
  Changelog changed to a verbose format, see ChangeLog file or
  https://babeltrace.org/docs/release-notes/babeltrace-2.1.0-release-notes.html</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741608000">- Add BuildRequires on python3-setuptools, required for Python 3.12+.</changelog>
</package>
<package pkgid="27a5c1feaec8610dd041cf68d4fcc5b2d20eff2839b3d137c63ab6f8101f05c8ed4e59144410574ec4284db4d95a1289a4d3410a87cc4a0efe734ac4d3da72ff" name="babeltrace2-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="bp160.1.10"/>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Initial package.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597752000">- update to 2.0.3:
  * Fix: lib: use appropriate format specifier to print message iterator class
  * Fix: sink.text.pretty: check that port is connected before creating message iterator
  * Add initial Python bindings documentation
  * Fix: bt2: read properties on _DiscardedEventsMessage
  * tests: add tests for discarded events/packets creation
  * Fix: bt2: add precond. check, for stream class supporting discarded msgs with clock snapshot without clock class
  * Fix: flt-utils.muxer: reference leak in muxer_msg_iter_add_upstream_msg_iter error path
  * Fix: sink.text.details: goto error when failing to add input port
  * Fix: src.text.dmesg: add missing assignment of `status` on error path
  * Revert "bt2: _EventConst.__getitem__(): use a single temporary variable"
  * Fix: src.ctf.fs: initialize the other_entry variable
  * bt2: _EventConst.__getitem__(): use a single temporary variable
  * Fix: _EventConst.__getitem__(): check if event has a packet
  * doc: bt_field_class...get_mapping_labels...(): clarify RV's validity
  * doc/api/libbabeltrace2/style.css: make font weight of `.intertd` normal
  * common: cast arguments to character classification functions to unsigned char
  * flt.utils.muxer: initialize variable to silence -Wmaybe-uninitialized warning
  * Fix: configure.ac: silently accepting invalid Python configuration
  * Cleanup: configure.ac: remove redundant `AC_ARG_ENABLE` parameters
  * Fix: plugin-dev.h: Disable address sanitizer on pointer array section variables
  * Fix: cli: use BT_CLI_LOGE_APPEND_CAUSE instead of printf to print errors
  * tests: improve flt.utils.trimmer/test_trimming to test streams without packets
  * Fix: flt-utils.trimmer: accept streams without packet support
  * Fix: lib: don't assume that streams have packets in auto seek
  * Fix: correct typo in README</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Update to 2.0.4:
  * Fix: macro name for "get supported mip versions method"
    attribute descriptor
  * Fix: disable deprecation warnings for SWIG generated code
  * Fix: sink.ctf.fs: fix logic of make_unique_stream_file_name
  * Fix: sink.ctf.fs: remove spurious directory level when using assume-single-trace
  * Fix: bt2: _trim_docstring(): docstring can have 0 or 1 line
  * Fix: `ctf` plugin: use element FC's alignment as array/seq. FC alignment
  * Fix: source.ctf.lttng-live: muxing failure on clear (unit conversion)
  * Fix: src.ctf.lttng-live: incomplete metadata packet is an error
  * Fix: source.ctf.lttng-live: muxing failure on clear
  * Fix: source.ctf.fs: 0-length packet index length causes SIGFPE</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691064000">- Update to 2.0.5:
  * bt2: honor build system compiler/linker preferences
  * Fix: clear_string_field(): set first character to 0
  * Fix: src.ctf.fs: Not resolving event common ctx
  * debug-info: fix -Wenum-int-mismatch problem in copy_field_class_content_internal
  * fix: pass exec-prefix to python bindings install
  * fix: document proper Bison version requirement
  * cli: use return value of g_string_free
  * babeltrace2-query(1): erroneous parameter used in example
  * Fix: tests: print real values in a fixed format
  * Fix: bt2: autodisc: remove thread error while inserting status in map
  * tests: src.ctf.fs: add test for metadata with invalid syntax
  * tests: shorten names of session-rotation trace
  * bt2: ignore -Wredundant-decls warning
  * ctf: fix -Wformat-overflow error in ctf-meta-resolve.cpp
  * ctf-writer: fix -Wformat-overflow errors in resolve.c
  * Fix: src.text.details: use write_uint_prop_value to handle unsigned values in write_int_range
  * Add dev-requirements.txt for pip
  * Fix: src.ctf.lttng-live: consider empty metadata packet as retry
  * Fix: ctf: wrongfully requiring CTF metadata signature for every section
  * Fix: src.ctf.lttng-live: session closed before any metadata is received
  * fix: obsolete warnings with autoconf &gt;= 2.71
  * fix: explicitly disable '-Wsuggest-attribute=format'
  * fix: set stable branch in gitreview config
  * Fix: ctf-writer: list of reserved keywords
  * compiler warning cleanup: is_signed_type: compare -1 to 1
  * Update working version to Babeltrace 2.0.5</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1737547200">- Update to 2.0.6:
  * bt2: disable some warnings for `native_bt.c`
  * bt2: compile `native_bt.c` with `-Wno-undef`
  * Fix: src.ctf.lttng-live: expect NEW_STREAM/METADATA for inactive streams
  * Fix: `babeltrace2 convert`: don't consider the `--plugin-path` opt.
  * include/babeltrace2/plugin/plugin-dev.h: "define" -&gt; "definition
  * Fix: doc: escape double quote in bt_p alias
  * Fix: bt2: pass _TraceClassConst to destruction listeners
  * fix: 'load_module()' deprecated in Python 3.12
  * tests: retry os.rename on PermissionError failure in lttng_live_server.py
  * doc: fix uptream -&gt; upstream typos
  * fix: test_message_iterator.py hangs on Python 3.12
  * plugin-dev: mark symbols meant to be public with __attribute__((visibility("default")))
  * Silence -Wunused-but-set-variable error with clang
  * Fix: Windows DLL path lookup with Python &gt;= 3.8
  * doc/man: make default values of boolean init. params. clearer
  * RFC: docs: fix: Match stated automake requirement
  * fix: make flake8 6.x happy
  * fix: running black on python 3.11
  * bt_query_executor_create_with_method_data(): fix docs note
  * Fix: ctf-writer: null dereference in bt_ctf_trace_common_add_stream_class
  * Update working version to Babeltrace v2.0.6</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1738238400">- Update to 2.1.0
  Changelog changed to a verbose format, see ChangeLog file or
  https://babeltrace.org/docs/release-notes/babeltrace-2.1.0-release-notes.html</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741608000">- Add BuildRequires on python3-setuptools, required for Python 3.12+.</changelog>
</package>
<package pkgid="2239c44ff5b1f55d8a8e8fcd3f5e483f2203d4cbc80c4eebc94da3c6a0857b885173a0e62eec525686b76391a0b65ad383a8e5d7655c5718a4518d42e482df1a" name="babl-devel" arch="x86_64">
  <version epoch="0" ver="0.1.114" rel="bp160.1.2"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1661774400">- update to 0.1.96:
  * Minor changes from 0.1.94, fixing build.
  * Fix of crash on non-aligned data for SIMD, add commandline tool, improve vala
    compatibility of introspection info.
- drop patches 2dc7fc40.patch, b05b2826.patch (upstream)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1669118400">- update to 0.1.98:
  * More robust bounds protection in ICC handling, avoid garbage collecting
    lookup tables in-line with processing.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1677672000">- update to 0.1.102:
  * LUT code-paths now disabled by default.
  * Stop double processing with LUT+normal fishes.
  * Support for non-ASCII characters in file paths on windows.
    Improved wrap build support.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678363200">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1684411200">- Update to 0.1.106:
  * Disable LUTs on big-endian, fix to 1bpp-&gt;4bpp LUTs, faster startup by caching
    balanced RGB to XYZ matrices.
  * LUT code-paths re-enabled, some array overflow proofing.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708603200">- Update to 0.1.108:
  - "double" and "half" support in cli-tool, build fixes.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1708603201">- disable gi-docgen docs for now</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1730894400">- Update to 0.1.110:
  - Build improvements.
  - Fixes to alpha componet in HCY, HSL, HSV and YCbCr models.
  - Use same CIE Lab conversion for start/end as rest with SIMD.
  - Remove reliance on set rounding mode.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1742212800">- Update to 0.1.112:
  - Fix crash for locales using neither '.' nor ',' as decimal
    seperator.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1747656000">- Update to 0.1.114:
  * Fix to broken TRC cache for formula based TRCs in ICC profiles.
  * BABL_ICC_INTENT_DEFAULT added.
  * Some broken conversions removed.</changelog>
</package>
<package pkgid="e014218fee511347e7d939cec255d4055e5ff0203d1fe7c2307a57be9cb16a464533eafee7dd412235f38544fabbe504ec908e6e4ef38c179793019d1b02023d" name="backintime" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="bp160.1.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 1.3.3:
  * New feature: Command line argument "--diagnostics" to show helpful info
    for better issue support
  * GUI change: Remove Exit button from the toolbar
  * GUI change: Define accelerator keys for menu bar and tabs, as well as
    toolbar shortcuts
  * Desktop integration: Update .desktop file to mark Back In Time as a
    single main window program
  * Improvement: Write all log output to stderr; do not pollute stdout with
    INFO and WARNING messages anymore
  * Bugfix: RTE "reentrant call inside io.BufferedWriter" in logFile.flush()
    during backup
  * Bugfix: Incompatibility with rsync 3.2.4 or later because of rsync's
    "new argument protection" (#1247). Deactivate "--old-args" rsync
    argument earlier recommaned to users as a workaround.
  * Bugfix: DeprecationWarnings about invalid escape sequences.
  * Bugfix: AttributeError in "Diff Options" dialog
  * Bugfix: Settings GUI: "Save password to Keyring" was disabled due to "no
    appropriate keyring found"
  * Bugfix: Back in Time did not start with D-Bus error
  * Bugfix: Avoid logging errors while waiting for a target drive to be
    mounted
  * Bugfix: [Arch Linux] AUR pkg "backintime-git": Build tests fails and
    installation is aborted
  * Bugfix: Wrong systray icon showing in Wayland
  * Documentation update: Correct description of profile&lt;N&gt;.schedule.time in
    backintime-config manpage
  * Translation update: Brazilian Portuguese
  * Translation update: Italian
  * Translation update: French
  * Testing: Fix a test fail when dealing with an empty crontab
  * Testing: Fix a test fail when dealing with an empty config file
  * Testing: Skip "test_quiet_mode" (does not work reliably)
  * Testing: Improve "test_diagnostics_arg" (introduced with #1100) to no
    longer fail when JSON output was mixed with logging output (part of #921)
  * Testing: Numerous fixes and extensions to testing</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1673179200">- Remove backintime-rsync324_args.patch (no longer needed)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1675598400">- Require python3-packaging</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1699012800">- update to 1.4.1:
  * Dependency: Add "qt translations" to GUI runtime dependencies (gh#bit-team/backintime#1538)
  * Build: Unit tests do generically ignore all instead of well-known warnings now (gh#bit-team/backintime#1539).
  * Build: Warnings about missing Qt translation now are ignored while testing (gh#bit-team/backintime#1537).
  * Fix bug: GUI didn't start when "show hidden files" button was on (gh#bit-team/backintime#1535).
- update to 1.4.0:
  * Project: Renamed branch "master" to "main" and started "gitflow" branching
    model.
  * Refactor: Renamed qt4plugin.py to systrayiconplugin.py (we are using Qt5
    for years now ;-)
  * Refactor: Removed unfinished feature "Full system backup" (gh#bit-team/backintime#1526)
  * Fix bug: AttributeError: can't set attribute 'showHiddenFiles' in app.py (gh#bit-team/backintime#1532)
  * Fix bug: Check SSH login works on machines with limited commands (gh#bit-team/backintime#1442)
  * Fix bug: Missing icon in SSH private key button (gh#bit-team/backintime#1364)
  * Fix bug: Master issue for missing or empty system-tray icon (gh#bit-team/backintime#1306)
  * Fix bug: System-tray icon missing or empty (GUI and cron) (gh#bit-team/backintime#1236)
  * Fix bug: Improve KDE plasma icon compatibility (gh#bit-team/backintime#1159)
  * GUI Change: View last (snapshot) log button in GUI uses
    "document-open-recent" icon now instead of "document-new"
    (gh#bit-team/backintime#1386)
  * Fix bug: Unit test fails on some machines due to warning "Ignoring
    XDG_SESSION_TYPE=wayland on Gnome..." (gh#bit-team/backintime#1429)
  * Fix bug: Generation of config-manpage caused an error with Debian's Lintian (gh#bit-team/backintime#1398).
  * Fix bug: Return empty list in smartRemove (gh#bit-team/backintime#1392,
    Debian Bug Report 973760)
  * Fix bug: Taking a snapshot reports rsync errors now even if no snapshot was
    taken (gh#bit-team/backintime#1491)
  * Fix bug: takeSnapshot() recognizes errors now by also evaluating the rsync
    exit code (gh#bit-team/backintime#489)
  * Fixes related problem: Killing rsync was not handled gracefully (by
    ignoring the rsync exit code)
  * Fix bug: The error user-callback is now always called if an error happened
    while taking a snapshot (gh#bit-team/backintime#1491)
  * Fix bug: D-Bus serviceHelper error "LimitExceeded: Maximum length of
    command line reached (100)":
  * Max command length is now 120 instead of 100 (gh#bit-team/backintime#1027)
  * Feature: Introduce new error codes for the "error" user callback (as part
    of gh#bit-team/backintime#1491):
    5: Error while taking a snapshot.
    6: New snapshot taken but with errors.
  * Feature: The rsync exit code is now contained in the snapshot log (part
    of gh#bit-team/backintime#489). Example:
    [E] Error: 'rsync' ended with exit code -9 (negative values are signal numbers, see 'kill -l')
  * Fix bug: Treat rsync exit code 24 as INFO instead of ERROR (gh#bit-team/backintime#1506)
  * Breaking change: Minimal Python version 3.8 required (gh#bit-team/backintime#1358).
  * Removed: Handling and checking of user group "fuse" (gh#bit-team/backintime#1472).
  * Feature: Exclude /swapfile by default (gh#bit-team/backintime#1053)
  * Feature: Rearranged menu bar and its entries in the main window
    (gh#bit-team/backintime#1487, gh#bit-team/backintime#1478).
  * Feature: Configure user interface language via config file and GUI.
  * Documentation: Removed outdated docbook (gh#bit-team/backintime#1345).
  * Build: Introduced .readthedocs.yaml as asked by ReadTheDocs.org (gh#bit-team/backintime#1443).
  * Dependency: The oxygen icons should be installed with the BiT Qt GUI since
  * they are used as fallback in case of missing icons
  * Fix bug: Add support for ChainerBackend class as keyring which iterates
    over all supported keyring backends (gh#bit-team/backintime#1410)
  * Translation: Strings to translate now easier to understand for translators
    (gh#bit-team/backintime#1448, gh#bit-team/backintime#1457,
    gh#bit-team/backintime#1462, gh#bit-team/backintime#1465).
  * Translation: Improved completeness of translations and additional
    modifications of source strings
    (gh#bit-team/backintime#1454,gh#bit-team/backintime#1512)
  * Translation: Plural forms support (gh#bit-team/backintime#1488).
  * Removed: Translation in Canadian English, British English and Javanese (gh#bit-team/backintime#1455).
  * Added: Translation in Persian and Vietnamese (gh#bit-team/backintime#1460).
  * Added: Message to users (after 10 starts of BIT Gui) to motivate them
    contributing translations (gh#bit-team/backintime#1473).</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1704628800">- Add backintime-python_location.patch to manually specify python and allow build on Leap 15.5
- Re-add missing Group and Provides tags</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1717848000">- Update to 1.4.3
  * Feature: Exclude 'SingletonLock' and 'SingletonCookie' (Discord) and 'lock' (Mozilla Firefox) files by default (part of #1555)
  * Work around: Relax `rsync` exit code 23: Ignore instead of error now (part of #1587)
  * Feature (experimental): Add new snapshot log filter `rsync transfer failures (experimental)` to find them easier (they are normally not shown as "error").
    This feature is experimental because it is based on hard-coded error message strings in the rsync source code
    and may possibly not find all rsync messages or show false positives.
  * Fix bug: 'qt5_probing.py' hangs when BiT is run as root and no user is logged into a desktop environment (#1592 and #1580)
  * Fix bug: Launching BiT GUI (root) hangs on Wayland without showing the GUI (#836)
  * Improve: Launcher for BiT GUI (root) does not enforce Wayland anymore but uses same settings as for BiT GUI (userland) (#1350)
  * Fix bug: Disabling suspend during taking a backup ("inhibit suspend") hangs when BiT is run as root and no user is logged into a desktop environment (#1592)
  * Change of semantics: BiT running as root never disables suspend during taking a backup ("inhibit suspend") even though this may have worked before in BiT &lt;= v1.4.1 sometimes (required to fix #1592)
  * Fix bug: RTE: module 'qttools' has no attribute 'initate_translator' with encFS when prompting the user for a password (#1553).
  * Fix bug: Schedule dropdown menu used "minutes" instead of "hours".
  * Fix bug: Unhandled exception "TypeError: 'NoneType' object is not callable" in tools.py function __log_keyring_warning (#820).
    Logging thread removed and logger module correctly initialized as fix. Is "Heisenbug" so 100 % retesting was not possible.
  * Build: Use PyLint in unit testing to catch E1101 (no-member) errors.
  * Build: Activate PyLint warning W1401 (anomalous-backslash-in-string).
  * Build: Add codespell config.
  * Build: Allow manual specification of python executable (--python=PYTHON_PATH) in common/configure and qt/configure
  * Build: All starter scripts do use an absolute path to the python executable by default now via common/configure and qt/configure (#1574)
  * Build: Install dbus configuration file to /usr/share not /etc (#1596)
  * Build: `configure` does delete old installed files (`qt4plugin.py` and `net.launchpad.backintime.serviceHelper.conf`) that were renamed or moved in a previous release (#1596)
  * Translation: Minor modifications in source strings and updating language files.
  * Refactor: Solved circular dependency between tools.py and logger.py to fix #820
  * Improved: qtsystrayicon.py, qt5_probing.py, usercallbackplugin.py and all parts of app.py
    do now also use "backintime" as logging namespace in the syslog to ensure complete log output with `journalctl | grep -i backintime`
- Remove backintime-python_location.patch (upstreamed)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1719403200">- Remove backintime-polkit_priv_downgrade.patch, not needed (boo#1226446)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1728734400">- Update to 1.5.2
  * Fix: Ensure crontab with ending newline (#781)
  * Fix(translation): Correct corrupt translated strings in Basque, Islandic and Spanish causing application crashes (#1828)
  * Fix: Use correct port to ping SSH Proxy (#1815)
  * Dependency: Migration to PyQt6
  * Breaking Change: EncFS deprecation warning (#1735, #1734)
  * Breaking Change: GUI started with --debug does no longer add --debug to the crontab for scheduled profiles.
    Use the new "enable logging for debug messages" in the 'Schedule' section of the 'Manage profiles' GUI instead.
  * Feature: Warn if Cron is not running (#1747)
  * Feature: Profile and GUI allow to activate debug output for scheduled jobs by adding '--debug' to crontab entry (#1616, contributed by @stcksmsh Kosta Vukicevic)
  * Feature: Support SSH proxy (jump) host (#1688) (@cgrinham, Christie Grinham)
  * Feature: Support rsync '--one-file-system' in Expert Options (#1598)
  * Feature: "*-dev" version strings contain last commit hash (#1637)
  * Fix: Global flock fallback to single-user mode if insufficient permissions (#1743, #1751)
  * Fix: Fix Qt segmentation fault with uninstall ExtraMouseButtonEventFilter when closing main window (#1095)
  * Fix: Names of weekdays and months translated correct (#1729)
  * Fix: Global flock for multiple users (#1122, #1676)
  * Fix bug: "Backup folders" list does reflect the selected snapshot (#1585) (@rafaelhdr Rafael Hurpia da Rocha)
  * Fix: Validation of diff command settings in compare snapshots dialog (#1662) (@stcksmsh Kosta Vukicevic)
  * Fix bug: Open symlinked folders in file view (#1476)
  * Fix bug: Respect dark mode using color roles (#1601)
  * Fix: "Highly recommended" exclusion pattern in "Manage Profile" dialog's "Exclude" tab show missing only (#1620)
  * Fix bug: `make install` ignored $(DEST) in file migration part (#1630)
  * Removed: Context menu in LogViewDialog (#1578)
  * Removed: Field "filesystem_mount" and "snapshot_version" in "info" file (#1684)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1735387200">- Update to 1.5.3
  * Feature: Support language Interlingua (Occidental)
  * Feature: Warn if destination directory is formatted as NTFS (#1854) (David Gibbs @fallingrock)
  * Breaking Change: Minimal Python version 3.9 required (#1731)
  * Breaking Change: Auto migration of config version 4 or lower not longer supported (#1857)
  * Fix: Prevent duplicates in Exclude/Include list of Manage Profiles dialog
  * Fix: Fix Qt segmentation fault when canceling out of unconfigured BiT (#1095) (Derek Veit @DerekVeit)
  * Fix: Correct global flock fallbacks (#1834) (Timothy Southwick @NickNackGus)
  * Fix: Use SSH key password only if it is valid, otherwise request it from user (#1852) (David Wales @daviewales)
  * Feature: Support fcron (#610)
  * Feature: User message about release candidate (#1906)</changelog>
</package>
<package pkgid="80802a5f204c75f3c489cd04dac95054a8e290eeb67e6d4588c5cedc1b090e8701498697dfc99c438ae138408c6461ba1117737aa0eacfbcbefa64eb5bc66859" name="backintime-lang" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="bp160.1.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 1.3.3:
  * New feature: Command line argument "--diagnostics" to show helpful info
    for better issue support
  * GUI change: Remove Exit button from the toolbar
  * GUI change: Define accelerator keys for menu bar and tabs, as well as
    toolbar shortcuts
  * Desktop integration: Update .desktop file to mark Back In Time as a
    single main window program
  * Improvement: Write all log output to stderr; do not pollute stdout with
    INFO and WARNING messages anymore
  * Bugfix: RTE "reentrant call inside io.BufferedWriter" in logFile.flush()
    during backup
  * Bugfix: Incompatibility with rsync 3.2.4 or later because of rsync's
    "new argument protection" (#1247). Deactivate "--old-args" rsync
    argument earlier recommaned to users as a workaround.
  * Bugfix: DeprecationWarnings about invalid escape sequences.
  * Bugfix: AttributeError in "Diff Options" dialog
  * Bugfix: Settings GUI: "Save password to Keyring" was disabled due to "no
    appropriate keyring found"
  * Bugfix: Back in Time did not start with D-Bus error
  * Bugfix: Avoid logging errors while waiting for a target drive to be
    mounted
  * Bugfix: [Arch Linux] AUR pkg "backintime-git": Build tests fails and
    installation is aborted
  * Bugfix: Wrong systray icon showing in Wayland
  * Documentation update: Correct description of profile&lt;N&gt;.schedule.time in
    backintime-config manpage
  * Translation update: Brazilian Portuguese
  * Translation update: Italian
  * Translation update: French
  * Testing: Fix a test fail when dealing with an empty crontab
  * Testing: Fix a test fail when dealing with an empty config file
  * Testing: Skip "test_quiet_mode" (does not work reliably)
  * Testing: Improve "test_diagnostics_arg" (introduced with #1100) to no
    longer fail when JSON output was mixed with logging output (part of #921)
  * Testing: Numerous fixes and extensions to testing</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1673179200">- Remove backintime-rsync324_args.patch (no longer needed)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1675598400">- Require python3-packaging</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1699012800">- update to 1.4.1:
  * Dependency: Add "qt translations" to GUI runtime dependencies (gh#bit-team/backintime#1538)
  * Build: Unit tests do generically ignore all instead of well-known warnings now (gh#bit-team/backintime#1539).
  * Build: Warnings about missing Qt translation now are ignored while testing (gh#bit-team/backintime#1537).
  * Fix bug: GUI didn't start when "show hidden files" button was on (gh#bit-team/backintime#1535).
- update to 1.4.0:
  * Project: Renamed branch "master" to "main" and started "gitflow" branching
    model.
  * Refactor: Renamed qt4plugin.py to systrayiconplugin.py (we are using Qt5
    for years now ;-)
  * Refactor: Removed unfinished feature "Full system backup" (gh#bit-team/backintime#1526)
  * Fix bug: AttributeError: can't set attribute 'showHiddenFiles' in app.py (gh#bit-team/backintime#1532)
  * Fix bug: Check SSH login works on machines with limited commands (gh#bit-team/backintime#1442)
  * Fix bug: Missing icon in SSH private key button (gh#bit-team/backintime#1364)
  * Fix bug: Master issue for missing or empty system-tray icon (gh#bit-team/backintime#1306)
  * Fix bug: System-tray icon missing or empty (GUI and cron) (gh#bit-team/backintime#1236)
  * Fix bug: Improve KDE plasma icon compatibility (gh#bit-team/backintime#1159)
  * GUI Change: View last (snapshot) log button in GUI uses
    "document-open-recent" icon now instead of "document-new"
    (gh#bit-team/backintime#1386)
  * Fix bug: Unit test fails on some machines due to warning "Ignoring
    XDG_SESSION_TYPE=wayland on Gnome..." (gh#bit-team/backintime#1429)
  * Fix bug: Generation of config-manpage caused an error with Debian's Lintian (gh#bit-team/backintime#1398).
  * Fix bug: Return empty list in smartRemove (gh#bit-team/backintime#1392,
    Debian Bug Report 973760)
  * Fix bug: Taking a snapshot reports rsync errors now even if no snapshot was
    taken (gh#bit-team/backintime#1491)
  * Fix bug: takeSnapshot() recognizes errors now by also evaluating the rsync
    exit code (gh#bit-team/backintime#489)
  * Fixes related problem: Killing rsync was not handled gracefully (by
    ignoring the rsync exit code)
  * Fix bug: The error user-callback is now always called if an error happened
    while taking a snapshot (gh#bit-team/backintime#1491)
  * Fix bug: D-Bus serviceHelper error "LimitExceeded: Maximum length of
    command line reached (100)":
  * Max command length is now 120 instead of 100 (gh#bit-team/backintime#1027)
  * Feature: Introduce new error codes for the "error" user callback (as part
    of gh#bit-team/backintime#1491):
    5: Error while taking a snapshot.
    6: New snapshot taken but with errors.
  * Feature: The rsync exit code is now contained in the snapshot log (part
    of gh#bit-team/backintime#489). Example:
    [E] Error: 'rsync' ended with exit code -9 (negative values are signal numbers, see 'kill -l')
  * Fix bug: Treat rsync exit code 24 as INFO instead of ERROR (gh#bit-team/backintime#1506)
  * Breaking change: Minimal Python version 3.8 required (gh#bit-team/backintime#1358).
  * Removed: Handling and checking of user group "fuse" (gh#bit-team/backintime#1472).
  * Feature: Exclude /swapfile by default (gh#bit-team/backintime#1053)
  * Feature: Rearranged menu bar and its entries in the main window
    (gh#bit-team/backintime#1487, gh#bit-team/backintime#1478).
  * Feature: Configure user interface language via config file and GUI.
  * Documentation: Removed outdated docbook (gh#bit-team/backintime#1345).
  * Build: Introduced .readthedocs.yaml as asked by ReadTheDocs.org (gh#bit-team/backintime#1443).
  * Dependency: The oxygen icons should be installed with the BiT Qt GUI since
  * they are used as fallback in case of missing icons
  * Fix bug: Add support for ChainerBackend class as keyring which iterates
    over all supported keyring backends (gh#bit-team/backintime#1410)
  * Translation: Strings to translate now easier to understand for translators
    (gh#bit-team/backintime#1448, gh#bit-team/backintime#1457,
    gh#bit-team/backintime#1462, gh#bit-team/backintime#1465).
  * Translation: Improved completeness of translations and additional
    modifications of source strings
    (gh#bit-team/backintime#1454,gh#bit-team/backintime#1512)
  * Translation: Plural forms support (gh#bit-team/backintime#1488).
  * Removed: Translation in Canadian English, British English and Javanese (gh#bit-team/backintime#1455).
  * Added: Translation in Persian and Vietnamese (gh#bit-team/backintime#1460).
  * Added: Message to users (after 10 starts of BIT Gui) to motivate them
    contributing translations (gh#bit-team/backintime#1473).</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1704628800">- Add backintime-python_location.patch to manually specify python and allow build on Leap 15.5
- Re-add missing Group and Provides tags</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1717848000">- Update to 1.4.3
  * Feature: Exclude 'SingletonLock' and 'SingletonCookie' (Discord) and 'lock' (Mozilla Firefox) files by default (part of #1555)
  * Work around: Relax `rsync` exit code 23: Ignore instead of error now (part of #1587)
  * Feature (experimental): Add new snapshot log filter `rsync transfer failures (experimental)` to find them easier (they are normally not shown as "error").
    This feature is experimental because it is based on hard-coded error message strings in the rsync source code
    and may possibly not find all rsync messages or show false positives.
  * Fix bug: 'qt5_probing.py' hangs when BiT is run as root and no user is logged into a desktop environment (#1592 and #1580)
  * Fix bug: Launching BiT GUI (root) hangs on Wayland without showing the GUI (#836)
  * Improve: Launcher for BiT GUI (root) does not enforce Wayland anymore but uses same settings as for BiT GUI (userland) (#1350)
  * Fix bug: Disabling suspend during taking a backup ("inhibit suspend") hangs when BiT is run as root and no user is logged into a desktop environment (#1592)
  * Change of semantics: BiT running as root never disables suspend during taking a backup ("inhibit suspend") even though this may have worked before in BiT &lt;= v1.4.1 sometimes (required to fix #1592)
  * Fix bug: RTE: module 'qttools' has no attribute 'initate_translator' with encFS when prompting the user for a password (#1553).
  * Fix bug: Schedule dropdown menu used "minutes" instead of "hours".
  * Fix bug: Unhandled exception "TypeError: 'NoneType' object is not callable" in tools.py function __log_keyring_warning (#820).
    Logging thread removed and logger module correctly initialized as fix. Is "Heisenbug" so 100 % retesting was not possible.
  * Build: Use PyLint in unit testing to catch E1101 (no-member) errors.
  * Build: Activate PyLint warning W1401 (anomalous-backslash-in-string).
  * Build: Add codespell config.
  * Build: Allow manual specification of python executable (--python=PYTHON_PATH) in common/configure and qt/configure
  * Build: All starter scripts do use an absolute path to the python executable by default now via common/configure and qt/configure (#1574)
  * Build: Install dbus configuration file to /usr/share not /etc (#1596)
  * Build: `configure` does delete old installed files (`qt4plugin.py` and `net.launchpad.backintime.serviceHelper.conf`) that were renamed or moved in a previous release (#1596)
  * Translation: Minor modifications in source strings and updating language files.
  * Refactor: Solved circular dependency between tools.py and logger.py to fix #820
  * Improved: qtsystrayicon.py, qt5_probing.py, usercallbackplugin.py and all parts of app.py
    do now also use "backintime" as logging namespace in the syslog to ensure complete log output with `journalctl | grep -i backintime`
- Remove backintime-python_location.patch (upstreamed)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1719403200">- Remove backintime-polkit_priv_downgrade.patch, not needed (boo#1226446)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1728734400">- Update to 1.5.2
  * Fix: Ensure crontab with ending newline (#781)
  * Fix(translation): Correct corrupt translated strings in Basque, Islandic and Spanish causing application crashes (#1828)
  * Fix: Use correct port to ping SSH Proxy (#1815)
  * Dependency: Migration to PyQt6
  * Breaking Change: EncFS deprecation warning (#1735, #1734)
  * Breaking Change: GUI started with --debug does no longer add --debug to the crontab for scheduled profiles.
    Use the new "enable logging for debug messages" in the 'Schedule' section of the 'Manage profiles' GUI instead.
  * Feature: Warn if Cron is not running (#1747)
  * Feature: Profile and GUI allow to activate debug output for scheduled jobs by adding '--debug' to crontab entry (#1616, contributed by @stcksmsh Kosta Vukicevic)
  * Feature: Support SSH proxy (jump) host (#1688) (@cgrinham, Christie Grinham)
  * Feature: Support rsync '--one-file-system' in Expert Options (#1598)
  * Feature: "*-dev" version strings contain last commit hash (#1637)
  * Fix: Global flock fallback to single-user mode if insufficient permissions (#1743, #1751)
  * Fix: Fix Qt segmentation fault with uninstall ExtraMouseButtonEventFilter when closing main window (#1095)
  * Fix: Names of weekdays and months translated correct (#1729)
  * Fix: Global flock for multiple users (#1122, #1676)
  * Fix bug: "Backup folders" list does reflect the selected snapshot (#1585) (@rafaelhdr Rafael Hurpia da Rocha)
  * Fix: Validation of diff command settings in compare snapshots dialog (#1662) (@stcksmsh Kosta Vukicevic)
  * Fix bug: Open symlinked folders in file view (#1476)
  * Fix bug: Respect dark mode using color roles (#1601)
  * Fix: "Highly recommended" exclusion pattern in "Manage Profile" dialog's "Exclude" tab show missing only (#1620)
  * Fix bug: `make install` ignored $(DEST) in file migration part (#1630)
  * Removed: Context menu in LogViewDialog (#1578)
  * Removed: Field "filesystem_mount" and "snapshot_version" in "info" file (#1684)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1735387200">- Update to 1.5.3
  * Feature: Support language Interlingua (Occidental)
  * Feature: Warn if destination directory is formatted as NTFS (#1854) (David Gibbs @fallingrock)
  * Breaking Change: Minimal Python version 3.9 required (#1731)
  * Breaking Change: Auto migration of config version 4 or lower not longer supported (#1857)
  * Fix: Prevent duplicates in Exclude/Include list of Manage Profiles dialog
  * Fix: Fix Qt segmentation fault when canceling out of unconfigured BiT (#1095) (Derek Veit @DerekVeit)
  * Fix: Correct global flock fallbacks (#1834) (Timothy Southwick @NickNackGus)
  * Fix: Use SSH key password only if it is valid, otherwise request it from user (#1852) (David Wales @daviewales)
  * Feature: Support fcron (#610)
  * Feature: User message about release candidate (#1906)</changelog>
</package>
<package pkgid="07c16be528230f5d5532a04dbb46c8b60f99711889b67494d2f15334fff63ab60b6230fa329dc880e4c322f987504c89ba83c5397845f414de17adf4e5f82a96" name="backintime-qt" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="bp160.1.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 1.3.3:
  * New feature: Command line argument "--diagnostics" to show helpful info
    for better issue support
  * GUI change: Remove Exit button from the toolbar
  * GUI change: Define accelerator keys for menu bar and tabs, as well as
    toolbar shortcuts
  * Desktop integration: Update .desktop file to mark Back In Time as a
    single main window program
  * Improvement: Write all log output to stderr; do not pollute stdout with
    INFO and WARNING messages anymore
  * Bugfix: RTE "reentrant call inside io.BufferedWriter" in logFile.flush()
    during backup
  * Bugfix: Incompatibility with rsync 3.2.4 or later because of rsync's
    "new argument protection" (#1247). Deactivate "--old-args" rsync
    argument earlier recommaned to users as a workaround.
  * Bugfix: DeprecationWarnings about invalid escape sequences.
  * Bugfix: AttributeError in "Diff Options" dialog
  * Bugfix: Settings GUI: "Save password to Keyring" was disabled due to "no
    appropriate keyring found"
  * Bugfix: Back in Time did not start with D-Bus error
  * Bugfix: Avoid logging errors while waiting for a target drive to be
    mounted
  * Bugfix: [Arch Linux] AUR pkg "backintime-git": Build tests fails and
    installation is aborted
  * Bugfix: Wrong systray icon showing in Wayland
  * Documentation update: Correct description of profile&lt;N&gt;.schedule.time in
    backintime-config manpage
  * Translation update: Brazilian Portuguese
  * Translation update: Italian
  * Translation update: French
  * Testing: Fix a test fail when dealing with an empty crontab
  * Testing: Fix a test fail when dealing with an empty config file
  * Testing: Skip "test_quiet_mode" (does not work reliably)
  * Testing: Improve "test_diagnostics_arg" (introduced with #1100) to no
    longer fail when JSON output was mixed with logging output (part of #921)
  * Testing: Numerous fixes and extensions to testing</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1673179200">- Remove backintime-rsync324_args.patch (no longer needed)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1675598400">- Require python3-packaging</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1699012800">- update to 1.4.1:
  * Dependency: Add "qt translations" to GUI runtime dependencies (gh#bit-team/backintime#1538)
  * Build: Unit tests do generically ignore all instead of well-known warnings now (gh#bit-team/backintime#1539).
  * Build: Warnings about missing Qt translation now are ignored while testing (gh#bit-team/backintime#1537).
  * Fix bug: GUI didn't start when "show hidden files" button was on (gh#bit-team/backintime#1535).
- update to 1.4.0:
  * Project: Renamed branch "master" to "main" and started "gitflow" branching
    model.
  * Refactor: Renamed qt4plugin.py to systrayiconplugin.py (we are using Qt5
    for years now ;-)
  * Refactor: Removed unfinished feature "Full system backup" (gh#bit-team/backintime#1526)
  * Fix bug: AttributeError: can't set attribute 'showHiddenFiles' in app.py (gh#bit-team/backintime#1532)
  * Fix bug: Check SSH login works on machines with limited commands (gh#bit-team/backintime#1442)
  * Fix bug: Missing icon in SSH private key button (gh#bit-team/backintime#1364)
  * Fix bug: Master issue for missing or empty system-tray icon (gh#bit-team/backintime#1306)
  * Fix bug: System-tray icon missing or empty (GUI and cron) (gh#bit-team/backintime#1236)
  * Fix bug: Improve KDE plasma icon compatibility (gh#bit-team/backintime#1159)
  * GUI Change: View last (snapshot) log button in GUI uses
    "document-open-recent" icon now instead of "document-new"
    (gh#bit-team/backintime#1386)
  * Fix bug: Unit test fails on some machines due to warning "Ignoring
    XDG_SESSION_TYPE=wayland on Gnome..." (gh#bit-team/backintime#1429)
  * Fix bug: Generation of config-manpage caused an error with Debian's Lintian (gh#bit-team/backintime#1398).
  * Fix bug: Return empty list in smartRemove (gh#bit-team/backintime#1392,
    Debian Bug Report 973760)
  * Fix bug: Taking a snapshot reports rsync errors now even if no snapshot was
    taken (gh#bit-team/backintime#1491)
  * Fix bug: takeSnapshot() recognizes errors now by also evaluating the rsync
    exit code (gh#bit-team/backintime#489)
  * Fixes related problem: Killing rsync was not handled gracefully (by
    ignoring the rsync exit code)
  * Fix bug: The error user-callback is now always called if an error happened
    while taking a snapshot (gh#bit-team/backintime#1491)
  * Fix bug: D-Bus serviceHelper error "LimitExceeded: Maximum length of
    command line reached (100)":
  * Max command length is now 120 instead of 100 (gh#bit-team/backintime#1027)
  * Feature: Introduce new error codes for the "error" user callback (as part
    of gh#bit-team/backintime#1491):
    5: Error while taking a snapshot.
    6: New snapshot taken but with errors.
  * Feature: The rsync exit code is now contained in the snapshot log (part
    of gh#bit-team/backintime#489). Example:
    [E] Error: 'rsync' ended with exit code -9 (negative values are signal numbers, see 'kill -l')
  * Fix bug: Treat rsync exit code 24 as INFO instead of ERROR (gh#bit-team/backintime#1506)
  * Breaking change: Minimal Python version 3.8 required (gh#bit-team/backintime#1358).
  * Removed: Handling and checking of user group "fuse" (gh#bit-team/backintime#1472).
  * Feature: Exclude /swapfile by default (gh#bit-team/backintime#1053)
  * Feature: Rearranged menu bar and its entries in the main window
    (gh#bit-team/backintime#1487, gh#bit-team/backintime#1478).
  * Feature: Configure user interface language via config file and GUI.
  * Documentation: Removed outdated docbook (gh#bit-team/backintime#1345).
  * Build: Introduced .readthedocs.yaml as asked by ReadTheDocs.org (gh#bit-team/backintime#1443).
  * Dependency: The oxygen icons should be installed with the BiT Qt GUI since
  * they are used as fallback in case of missing icons
  * Fix bug: Add support for ChainerBackend class as keyring which iterates
    over all supported keyring backends (gh#bit-team/backintime#1410)
  * Translation: Strings to translate now easier to understand for translators
    (gh#bit-team/backintime#1448, gh#bit-team/backintime#1457,
    gh#bit-team/backintime#1462, gh#bit-team/backintime#1465).
  * Translation: Improved completeness of translations and additional
    modifications of source strings
    (gh#bit-team/backintime#1454,gh#bit-team/backintime#1512)
  * Translation: Plural forms support (gh#bit-team/backintime#1488).
  * Removed: Translation in Canadian English, British English and Javanese (gh#bit-team/backintime#1455).
  * Added: Translation in Persian and Vietnamese (gh#bit-team/backintime#1460).
  * Added: Message to users (after 10 starts of BIT Gui) to motivate them
    contributing translations (gh#bit-team/backintime#1473).</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1704628800">- Add backintime-python_location.patch to manually specify python and allow build on Leap 15.5
- Re-add missing Group and Provides tags</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1717848000">- Update to 1.4.3
  * Feature: Exclude 'SingletonLock' and 'SingletonCookie' (Discord) and 'lock' (Mozilla Firefox) files by default (part of #1555)
  * Work around: Relax `rsync` exit code 23: Ignore instead of error now (part of #1587)
  * Feature (experimental): Add new snapshot log filter `rsync transfer failures (experimental)` to find them easier (they are normally not shown as "error").
    This feature is experimental because it is based on hard-coded error message strings in the rsync source code
    and may possibly not find all rsync messages or show false positives.
  * Fix bug: 'qt5_probing.py' hangs when BiT is run as root and no user is logged into a desktop environment (#1592 and #1580)
  * Fix bug: Launching BiT GUI (root) hangs on Wayland without showing the GUI (#836)
  * Improve: Launcher for BiT GUI (root) does not enforce Wayland anymore but uses same settings as for BiT GUI (userland) (#1350)
  * Fix bug: Disabling suspend during taking a backup ("inhibit suspend") hangs when BiT is run as root and no user is logged into a desktop environment (#1592)
  * Change of semantics: BiT running as root never disables suspend during taking a backup ("inhibit suspend") even though this may have worked before in BiT &lt;= v1.4.1 sometimes (required to fix #1592)
  * Fix bug: RTE: module 'qttools' has no attribute 'initate_translator' with encFS when prompting the user for a password (#1553).
  * Fix bug: Schedule dropdown menu used "minutes" instead of "hours".
  * Fix bug: Unhandled exception "TypeError: 'NoneType' object is not callable" in tools.py function __log_keyring_warning (#820).
    Logging thread removed and logger module correctly initialized as fix. Is "Heisenbug" so 100 % retesting was not possible.
  * Build: Use PyLint in unit testing to catch E1101 (no-member) errors.
  * Build: Activate PyLint warning W1401 (anomalous-backslash-in-string).
  * Build: Add codespell config.
  * Build: Allow manual specification of python executable (--python=PYTHON_PATH) in common/configure and qt/configure
  * Build: All starter scripts do use an absolute path to the python executable by default now via common/configure and qt/configure (#1574)
  * Build: Install dbus configuration file to /usr/share not /etc (#1596)
  * Build: `configure` does delete old installed files (`qt4plugin.py` and `net.launchpad.backintime.serviceHelper.conf`) that were renamed or moved in a previous release (#1596)
  * Translation: Minor modifications in source strings and updating language files.
  * Refactor: Solved circular dependency between tools.py and logger.py to fix #820
  * Improved: qtsystrayicon.py, qt5_probing.py, usercallbackplugin.py and all parts of app.py
    do now also use "backintime" as logging namespace in the syslog to ensure complete log output with `journalctl | grep -i backintime`
- Remove backintime-python_location.patch (upstreamed)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1719403200">- Remove backintime-polkit_priv_downgrade.patch, not needed (boo#1226446)</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1728734400">- Update to 1.5.2
  * Fix: Ensure crontab with ending newline (#781)
  * Fix(translation): Correct corrupt translated strings in Basque, Islandic and Spanish causing application crashes (#1828)
  * Fix: Use correct port to ping SSH Proxy (#1815)
  * Dependency: Migration to PyQt6
  * Breaking Change: EncFS deprecation warning (#1735, #1734)
  * Breaking Change: GUI started with --debug does no longer add --debug to the crontab for scheduled profiles.
    Use the new "enable logging for debug messages" in the 'Schedule' section of the 'Manage profiles' GUI instead.
  * Feature: Warn if Cron is not running (#1747)
  * Feature: Profile and GUI allow to activate debug output for scheduled jobs by adding '--debug' to crontab entry (#1616, contributed by @stcksmsh Kosta Vukicevic)
  * Feature: Support SSH proxy (jump) host (#1688) (@cgrinham, Christie Grinham)
  * Feature: Support rsync '--one-file-system' in Expert Options (#1598)
  * Feature: "*-dev" version strings contain last commit hash (#1637)
  * Fix: Global flock fallback to single-user mode if insufficient permissions (#1743, #1751)
  * Fix: Fix Qt segmentation fault with uninstall ExtraMouseButtonEventFilter when closing main window (#1095)
  * Fix: Names of weekdays and months translated correct (#1729)
  * Fix: Global flock for multiple users (#1122, #1676)
  * Fix bug: "Backup folders" list does reflect the selected snapshot (#1585) (@rafaelhdr Rafael Hurpia da Rocha)
  * Fix: Validation of diff command settings in compare snapshots dialog (#1662) (@stcksmsh Kosta Vukicevic)
  * Fix bug: Open symlinked folders in file view (#1476)
  * Fix bug: Respect dark mode using color roles (#1601)
  * Fix: "Highly recommended" exclusion pattern in "Manage Profile" dialog's "Exclude" tab show missing only (#1620)
  * Fix bug: `make install` ignored $(DEST) in file migration part (#1630)
  * Removed: Context menu in LogViewDialog (#1578)
  * Removed: Field "filesystem_mount" and "snapshot_version" in "info" file (#1684)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1735387200">- Update to 1.5.3
  * Feature: Support language Interlingua (Occidental)
  * Feature: Warn if destination directory is formatted as NTFS (#1854) (David Gibbs @fallingrock)
  * Breaking Change: Minimal Python version 3.9 required (#1731)
  * Breaking Change: Auto migration of config version 4 or lower not longer supported (#1857)
  * Fix: Prevent duplicates in Exclude/Include list of Manage Profiles dialog
  * Fix: Fix Qt segmentation fault when canceling out of unconfigured BiT (#1095) (Derek Veit @DerekVeit)
  * Fix: Correct global flock fallbacks (#1834) (Timothy Southwick @NickNackGus)
  * Fix: Use SSH key password only if it is valid, otherwise request it from user (#1852) (David Wales @daviewales)
  * Feature: Support fcron (#610)
  * Feature: User message about release candidate (#1906)</changelog>
</package>
<package pkgid="f6e843f7e8a37dfac1f6dafc0432cb2919c1b7a043e76181231fdab6c5aba800796df2f81168a939a9d1e2d451b6f26ed62d346d490372781fd122f6d6180001" name="backupninja" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="bp160.1.9"/>
  <changelog author="Vicente Adolfo Bolea Sanchez &lt;vicente.bolea@gmail.com&gt; - 1.2.2-0" date="1681300800">- Added backupninja v1.2.2.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Normalize the license field according to legaldb</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for source tarball for verifiability.</changelog>
</package>
<package pkgid="48da46977295a539aa7e312b9da5dbac218f10bd83d8f5cd942e3097a79b26bbe2ded60d832c0729dda2fbe6a516a84e448b567861e5207f7d881dc5c0d7f168" name="baekmuk-bitmap-fonts" arch="noarch">
  <version epoch="0" ver="2.2" rel="bp160.1.9"/>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed baekmuk -&gt; baekmuk-bitmap-fonts and
  baekmuk-ttf -&gt; baekmuk-ttf-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- fix build with older distros due to lack of freetype shlib</changelog>
  <changelog author="cfarrell@suse.com" date="1333368000">- license update: HPND
  SPDX format (and choose the correct license)</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="kukuk@suse.de" date="1397476800">- Fix typos in Obsoletes</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt;" date="1608292800">- Create new 2.1.1 release
- Fix bsc#1178540, download new archive
  Replace buggy version 2.0 post tables with version 3.0 ones, which
  indicate that the font doesn’t contain glyph names. This is common
  for CJK fonts that are accessed by character code only.
- Apply spec-cleaner</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650715200">- Update to upstream version 2.2
  * No changelog available
- Use SourceURL
- Drop coditional parts of SPEC file for outdated versions
- Add baekmuk-bdf-fonts-fix-fonts-alias.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="82123b43e630d64216dcce97ab5b2b358edb56b0040c9f79471d7bca9f828ce745e3c9877831175ca828a63486ea5b07096cee42ddcd8ff94c9dc68207f61f9e" name="baekmuk-ttf-fonts" arch="noarch">
  <version epoch="0" ver="2.2" rel="bp160.1.9"/>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed baekmuk -&gt; baekmuk-bitmap-fonts and
  baekmuk-ttf -&gt; baekmuk-ttf-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- fix build with older distros due to lack of freetype shlib</changelog>
  <changelog author="cfarrell@suse.com" date="1333368000">- license update: HPND
  SPDX format (and choose the correct license)</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="kukuk@suse.de" date="1397476800">- Fix typos in Obsoletes</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="Thomas Schraitle &lt;thomas.schraitle@suse.com&gt;" date="1608292800">- Create new 2.1.1 release
- Fix bsc#1178540, download new archive
  Replace buggy version 2.0 post tables with version 3.0 ones, which
  indicate that the font doesn’t contain glyph names. This is common
  for CJK fonts that are accessed by character code only.
- Apply spec-cleaner</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650715200">- Update to upstream version 2.2
  * No changelog available
- Use SourceURL
- Drop coditional parts of SPEC file for outdated versions
- Add baekmuk-bdf-fonts-fix-fonts-alias.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="d20657637b7f667f489df6f7e8dfd9755f286855b87f03f6d799cb0ac454769a3e4a1aa0a9ee2b8644e0c048b7c76603deae0e6ea65e1266618ab20f17d33650" name="baka-mplayer" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="bp160.1.12"/>
  <changelog author="aloisio@gmx.com" date="1420113600">- Added support for $RPM_OPT_FLAGS</changelog>
  <changelog author="aloisio@gmx.com" date="1423742400">- Update to version 2.0.2
  * Fixed: Dim Desktop on multiple platforms
  * Fixed: Playing files located in the root directory (Windows only)
  * Fixed: Show parent folder under recently opened list (Windows only)
  * Fixed: Show in Folder selects file (Windows only)
  * Fixed: Gesture sensitivity is resolution independent
  * Changed: Custom settings implementation
  * Changed: File info shows up as overlay
  * Changed: Some default key-bindings for easier workflow
  * Improved: Major code refracting for efficiency
  * Improved: Playlist
  * Improved: Fit Window
  * Improved: Settings
  * Improved: Multiple-monitor support
  * Improved: Tweaked interface colors for better visibility
  * Added: Italian translation
  * Added: Support for custom keyboard shortcuts
  * Added: Playlist will auto show if cursor is near it in full screen
  * Added: Automatic Updating (Windows only)
  * Added: Command-Line engine
  * Added: Support for easily updating youtube-dl</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1436184000">- Update to version 2.0.3
  * Hint: If you speed up the video, Baka will display how much real time you have remaining.
  * Fixed: Status info is now displayed with audio files without album art
  * Fixed: Disable Show in Folder for online files
  * Fixed: Key Bindings table is, and can be, sorted alphabetically
  * Changed: Logo :D
  * Changed: Settings file uses JSON
  * Changed: Currently playing file is selected in playlist (old behavior)
  * Changed: External subtitles will be labeled as so
  * Changed: Volume level shown on mouse scroll
  * Changed: Speed is increased/decreased by interval of 10%
  * Changed: Sub font size is increased/decreased by 0.1
  * Improved: Overall design
  * Improved: Playback Info display
  * Added: Croatian translation
  * Added: Dutch translation
  * Added: French translation
  * Added: Spanish translation
  * Added: Mute (different from setting volume to 0)
  * Added: Thumbnail buttons (Windows only)
  * Added: Metadata (ex. ID3 Tags) to playback info
  * Added: Delete external sub file along with video file (optional)
  * Added: Motion Interpolation option (previously called "smoothmotion")
  * Added: "help" command</changelog>
  <changelog author="aloisio@gmx.com" date="1453204800">- Update to version 2.0.4
  * New: Highly requested Hide All Controls mode (under
    Settings menu)
  * New: Ability to add external audio files
  * New: Option to not save recently opened files
  * New: Option to not restore playback position
  * New: Option to change mpv msg-level
  * New: "clear" command
  * New: Explain how to leave full screen mode
  * New: Message is displayed for Motion Interpolation &amp;
    Deinterlace options
  * New: Media Info displays if hwdec is in use or not
  * Fixed: Reordering playlist items would make them disappear
    (Windows only)
  * Fixed: Show message if file couldn't be opened
  * Fixed: An issue with resuming playback position
  * Fixed: Hide Album Art fully hides that portion
  * Fixed: Command line output is no longer double spaced
  * Changed: Double click a Key Binding entry to change it
  * Changed: Renamed an item to Open Copied Link
  * Changed: Cmd line shortcut key is now Ctrl+`
  * Changed: Cmd line no longer requires "debug debug" to show
    output
  * Changed: Gesture info is visually represented
  * Changed: Button text case to Sane Case</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487764800">- import from packman</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Throw out NPOV wording and instead mention a number of
  real features.</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Remove Category "Utilities" from desktop file</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1540468800">- cleanup specfile</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1645444800">- Fix build with mpv 2.0 (gh#mpv-player/mpv#9541, gh#u8sand/Baka-MPlayer#317)
  * Port-away-from-deprecated-removed-APIs-in-mpv-2.0.patch</changelog>
</package>
<package pkgid="6629615986640a16c5000cc18dbfe6c37ddd21b0722a89239fe26d9d3db1aec24c4c906e1af1871593d465deee0d906e55ab77e8d9f02f2461725c59f832ac3d" name="baloo-widgets" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * kedittagsdialog: Don't prepend slash to tags (kde#488588)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="525e6a6f0ea2fe8d0660e68adcf8c51f5d122b6193375ab8400a4fd728fb2fd60aa0e977177b439ab28c991fd5ae7acadbd7b7c2bf6e5b443abbbb771843d09a" name="baloo-widgets-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * kedittagsdialog: Don't prepend slash to tags (kde#488588)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="87b3b5b64ce2d07e436d60e8278a5e7d3a24835c27c4e7e09261d097a2facbaae97332f2e281d0d0817fb067a9cb3a47ccd9c74a6b3f33a4d52258070d287b36" name="baloo-widgets-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * kedittagsdialog: Don't prepend slash to tags (kde#488588)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="7f25f4d259e76d63f66f3b8c980c879327f149177696a2dfa348fac2f8f4fc3249503ab97910d56b63ed6ffc32e90891bab58d72ee4307b7377e6c5f45ba3b71" name="balsa" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="bp160.1.18"/>
  <changelog author="antoine.belvire@opensuse.org" date="1530187200">- Update to version 2.5.6:
  + Fix scroll on click issue.
  + Display time stamps of date-only RFC 5545 iCalendar events.
  + Disable reply-to-group when the message is not from an
    RFC-2369-compliant mail list.
  + Mitigate EFail vulnerability for Webkit2.
- Fix a typo that breaks build in released version:
  + Add balsa-2.5.6-fix-build-breaker-typo.patch (picked from
    upstream).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Drop pkgconfig(libnm-glib) BuildRequires: Balsa switched from
  libnm-glib to GNetworkMonitor in version 2.5.2.
- Drop pkgconfig(libsecret-1) BuildRequires: Not used, as we are
  not passing --with-libsecret to configure (upstream default is
  not using it).
- Stop passing --enable-smime, --with-gtkspell and --with-ssl to
  configure, no longer recognized.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires and pass --with-spell-checker=gspell to configure.
  This also allows for dropping conditionals for
  pkgconfig(enchant-2) and pkgconfig(enchant) BuildRequires.
- Replace openssl-devel with pkgconfig(openssl) BuildRequires,
  align with what configure checks for.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571227200">- Update to version 2.5.8:
  + HTML email improvements; vcal attachment handling.
- Changes from version 2.5.7:
  + encryption, HTML email improvements; bug fixes.
- Drop conditional post(un) handling for obsolete versions of
  openSUSE.
- Drop balsa-2.5.6-fix-build-breaker-typo.patch: Fixed upstream.
- Drop update-desktop-files BuildRequires and macros as well as
  balsa-lang Recommends, no longer needed.
- Add pkgconfig(fribidi) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692800">- Update to version 2.5.10:
  + Set message threading correctly on new mailboxes.
  + Display S/MIME and TLS certificate chains.
  + Improve handling of multipart/related message parts.
  + Display text/calendar parts using ical library.
  + Multiple bug fixes and code cleanups; remove obsolete command
    line options.
- Changes from version 2.5.9:
  + Fix HTML message layout issues.
- Add pkgconfig(libical) and pkgconfig(libsecret-1) BuildRequires:
  New dependencies.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692801">- Update to version 2.6.0:
  + This release switches to gmime3 library for MIME processing.
- Replace pkgconfig(gmime-2.6) with pkgconfig(gmime-3.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596024000">- Update to version 2.6.1:
  + fix server identity verification.
- Run spec-cleaner
  + Remove package groups</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 2.6.2:
  * Webkit widgets are now sandboxed.
  * Improved desktop notifications.
  * iTIP calendar reply are improved.
  * Handling of multiple crypto keys for the same recipient.
  * build cleanups and improvements, e.g. application logging.
  * code cleanups and simplifications as enabled by moving to more modern
    libraries.
  * bug fixes: draft with message/external-body attachments;
    do not crash on importing half-broken keys</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1640779200">- Update to version 2.6.3:
  + Improve Autocrypt-related error messages.
  + Improvements to communication with GnuPG key servers.
  + Create standard-compatible HTML messages.
  + Implement sender-dependent HTML message preferences.
  + Reuse HTTP connections when rendering HTML messages.
  + Do not send empty Reply-To, Cc, etc headers.
  + More robust IMAP parser and response handling.
  + Code cleanups, platform-dependent build fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1666353600">- Update to version 2.6.4:
  + Fix display/printout with nondefault HTML preferences.
  + HTML context meny improments, integration with Webkit HTML
    privacy filter.
  + Header edition in GNOME editor fixed.
  + Some MDN, iCalendar issues fixed.
  + More informative error messages.
  + Notification improvements.
  + Show UI for opening download location after download.
  + Minor memory leaks plugged.
  + Code refactoring and cleanup.
  + Library and build system deprecation cleanups.
  + Updated translations.
- Pass disable static to configure and remove la files in install.
- Replace gpgme-devel with pkgconfig(gpgme) BuildRequires following
  upstreams changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678622400">- Add balsa-webkitgtk-bump.patch: Port to build against
  webkit2gtk-4.1. Following this replace pkgconfig(webkit2gtk-4.0)
  with pkgconfig(webkit2gtk-4.1) BuildRequires, and add libtool
  BuildRequires and bootstrap the build since the patch touches the
  buildsystem.</changelog>
</package>
<package pkgid="5e3fd0454abc18ead939040102e2d86b981f8b41c94ff3eebdb1cbfe7af38959d8dd7d79a95ffae84ac096d5bb50fd285a63a6a74d83d89b14f4d3cdf64b77ee" name="balsa-lang" arch="noarch">
  <version epoch="0" ver="2.6.4" rel="bp160.1.18"/>
  <changelog author="antoine.belvire@opensuse.org" date="1530187200">- Update to version 2.5.6:
  + Fix scroll on click issue.
  + Display time stamps of date-only RFC 5545 iCalendar events.
  + Disable reply-to-group when the message is not from an
    RFC-2369-compliant mail list.
  + Mitigate EFail vulnerability for Webkit2.
- Fix a typo that breaks build in released version:
  + Add balsa-2.5.6-fix-build-breaker-typo.patch (picked from
    upstream).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Drop pkgconfig(libnm-glib) BuildRequires: Balsa switched from
  libnm-glib to GNetworkMonitor in version 2.5.2.
- Drop pkgconfig(libsecret-1) BuildRequires: Not used, as we are
  not passing --with-libsecret to configure (upstream default is
  not using it).
- Stop passing --enable-smime, --with-gtkspell and --with-ssl to
  configure, no longer recognized.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires and pass --with-spell-checker=gspell to configure.
  This also allows for dropping conditionals for
  pkgconfig(enchant-2) and pkgconfig(enchant) BuildRequires.
- Replace openssl-devel with pkgconfig(openssl) BuildRequires,
  align with what configure checks for.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571227200">- Update to version 2.5.8:
  + HTML email improvements; vcal attachment handling.
- Changes from version 2.5.7:
  + encryption, HTML email improvements; bug fixes.
- Drop conditional post(un) handling for obsolete versions of
  openSUSE.
- Drop balsa-2.5.6-fix-build-breaker-typo.patch: Fixed upstream.
- Drop update-desktop-files BuildRequires and macros as well as
  balsa-lang Recommends, no longer needed.
- Add pkgconfig(fribidi) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692800">- Update to version 2.5.10:
  + Set message threading correctly on new mailboxes.
  + Display S/MIME and TLS certificate chains.
  + Improve handling of multipart/related message parts.
  + Display text/calendar parts using ical library.
  + Multiple bug fixes and code cleanups; remove obsolete command
    line options.
- Changes from version 2.5.9:
  + Fix HTML message layout issues.
- Add pkgconfig(libical) and pkgconfig(libsecret-1) BuildRequires:
  New dependencies.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692801">- Update to version 2.6.0:
  + This release switches to gmime3 library for MIME processing.
- Replace pkgconfig(gmime-2.6) with pkgconfig(gmime-3.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1596024000">- Update to version 2.6.1:
  + fix server identity verification.
- Run spec-cleaner
  + Remove package groups</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 2.6.2:
  * Webkit widgets are now sandboxed.
  * Improved desktop notifications.
  * iTIP calendar reply are improved.
  * Handling of multiple crypto keys for the same recipient.
  * build cleanups and improvements, e.g. application logging.
  * code cleanups and simplifications as enabled by moving to more modern
    libraries.
  * bug fixes: draft with message/external-body attachments;
    do not crash on importing half-broken keys</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1640779200">- Update to version 2.6.3:
  + Improve Autocrypt-related error messages.
  + Improvements to communication with GnuPG key servers.
  + Create standard-compatible HTML messages.
  + Implement sender-dependent HTML message preferences.
  + Reuse HTTP connections when rendering HTML messages.
  + Do not send empty Reply-To, Cc, etc headers.
  + More robust IMAP parser and response handling.
  + Code cleanups, platform-dependent build fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1666353600">- Update to version 2.6.4:
  + Fix display/printout with nondefault HTML preferences.
  + HTML context meny improments, integration with Webkit HTML
    privacy filter.
  + Header edition in GNOME editor fixed.
  + Some MDN, iCalendar issues fixed.
  + More informative error messages.
  + Notification improvements.
  + Show UI for opening download location after download.
  + Minor memory leaks plugged.
  + Code refactoring and cleanup.
  + Library and build system deprecation cleanups.
  + Updated translations.
- Pass disable static to configure and remove la files in install.
- Replace gpgme-devel with pkgconfig(gpgme) BuildRequires following
  upstreams changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678622400">- Add balsa-webkitgtk-bump.patch: Port to build against
  webkit2gtk-4.1. Following this replace pkgconfig(webkit2gtk-4.0)
  with pkgconfig(webkit2gtk-4.1) BuildRequires, and add libtool
  BuildRequires and bootstrap the build since the patch touches the
  buildsystem.</changelog>
</package>
<package pkgid="79cff4147f966e50e808b997d1159120a46cc546999b0b9491a5902cc9057d244334773b322156b60a13bd8508df158bfff428c716d78a04e3c6444fcaa19af5" name="bam" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="bp160.1.12"/>
  <changelog author="mailaender@opensuse.org" date="1469880000">- initial packaging of version 0.5.0
  * Upgraded to Lua 5.3.3 from 5.1
  * More accurate cache to reduce recompiles when switching parameters
  * Make use of CC environment variables when available by default
  * Build should now be reproducable and not add date or timestamps into the executable
  * Bug-fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1469880001">- Use pretty name for archive
- Build with optflags</changelog>
  <changelog author="jengelh@inai.de" date="1469880002">- Update description</changelog>
  <changelog author="mailaender@opensuse.org" date="1517572800">- update to version 0.5.1
  * Fixed issues with CC environment variables
  * Out of bounds fixed to debug output and output cache
  * XLC compiler support
  * Fixed parallel build with make
- disable tests
- enforce Lua 5.3</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1523880000">- Fix compilation issue order:
  * Add bam-0.5.1-fix-compilation-order.patch.
  * Enable tests (they actually showed the problem).
- Clean spec file with spec-cleaner.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1609761600">- Replace pandoc BuildRequires with help2man: this is sufficient to
  convert docs/bam.1.txt into man page format.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1665662400">- Add patch support-python3.patch:
  * Support Python 3.
- Switch BuildRequires to python3.
- Correct URL.</changelog>
</package>
<package pkgid="4185342d96738c6cc2431cf966b880894fae6c64f2394985d4253540219c3c1210563744253475818ac483bdc1dec76caf5972711b5487187a246d1ff86c6a5d" name="bamf-daemon" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="bp160.1.14"/>
  <changelog author="jengelh@inai.de" date="1399464000">- Add bamf-voidreturn.diff to resolve a compile abort due to
  nonsensical syntax.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430568000">- Update to 0.5.1:
  * BamfView: Reload the view children everytime it changes D-Bus
    path.
  * BamfXutils: Trap the X errors when doing async X calls.
  * BamfLegacyScreen: When in Unity monitor for Compiz
    ClientMessage's to show action menu.
  * BamfMatcher: Fix prefix regex for pythonX support.
  * BamfMatcher: Rename set our atom to _BAMF_DESKTOP_FILE.
  * BamfLegacyScreen: Do not show the actions menu for desktop
    type window.
  * Fix return value of try_create_local_desktop_data.
  * Remove old webapp related code since now we do not use browser
    tab matching anymore.
  * Install typelib files into MA libdir.
  * BamfMatcher: honour the _GTK_APPLICATION_ID xprop.
  * Replace gtk_icon_theme_has_icon with gtk_icon_theme_lookup_icon.
- Remove bamf-voidreturn.diff.
- Spec cleanup.</changelog>
  <changelog author="jengelh@inai.de" date="1431172800">- Update RPM package groups and summaries
- Avoid running configure twice
- Make sure all non-base directories are owned
- Ensure all configure.ac requirements appear as BuildRequires
- Place documentation into subpackage, it is not needed for
  automated builds.</changelog>
  <changelog author="jengelh@inai.de" date="1431259200">- Add gpg signature</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479211200">- Update to version 0.5.3 (changes since 0.5.1):
  * BamfView: Reload the view children everytime it changes dbus
    path. Without doing it we could have children-less views in
    case we have just re-matched a view with a different dbus path
    (this happens in general for desktop-less applications), because
    the proxy won't be fast enough to catch the signal to update
    the inner children list (lp#1238064).
  * BamfXutils: Trap the X errors when doing async X calls
    (lp#1193714).
  * bamf-legacy-window-test.c: Don't use 'return' with a value, in
    function returning void.
  * Fix return value of try_create_local_desktop_data (lp#1280110).
  * BamfLegacyScreen: When in Unity monitor for compiz
    ClientMessage's to show action menu If we get a
    _COMPIZ_TOOLKIT_ACTION client message with the internal value
    _COMPIZ_TOOLKIT_ACTION_WINDOW_MENU, then we are requested by
    compiz to show the window action menu, and thus let's ask the
    proper BamfLegacyWindow to do that, thanks to libwnck
    (lp#1280042).
  * Remove old webapp related code since now we don't use browser
    tab matching anymore (lp#1289498).
  * Rip out vestigial webapps code (lp#1280337, lp#1280337).
  * BamfMatcher: Fix prefix regex for pythonX support (used for
    converting /usr/bin/python[stuff] foo into foo) to work with
    pythonX as well as python and pythonX.Y.
  * BamfLegacyScreen: Do not show the actions menu for desktop type
    window (lp#1342609).
  * Replace gtk_icon_theme_has_icon with gtk_icon_theme_lookup_icon
    (lp#1407192).
  * Matcher: Honour the _GTK_APPLICATION_ID xprop.
  * BamfMatcher: Rename set our atom to _BAMF_DESKTOP_FILE.
  * Matcher: Use desktop file path when matching on
    _GTK_APPLICATION_ID.
  * BamfMatcher: Update special g-c-c code to unity-control-center
    (lp#1511481).
  * libBAMF: Cache active{window,application} and be smarter in
    reusing known resources.
  * BamfDaemon: Add upstart session support.
  * BamfMatcher: Don't assign no-display desktop files to windows
    by default when launched (lp#1519376).
  * Use startup notifications to set a "starting" property
    (lp#676457).
  * BamfMatcher: Avoid to register applications with invalid (empty
    or not existing) destkop files (lp#1560490).
  * BamfApplication: Bind window-{added,removed} signals to
    child-{added,removed} ones.
  * BamfWindow: Export window actions menu using dbusmenu
    (lp#1570812).
  * BamfApplication: Correctly set a main child when handling
    windows.
  * bamfdaemon-dbus-runner: Don't try to start again if already
    running (lp#1581896, lp#1532226).
  * BamfMatcher: Allow overriding desktop with the environment var
    BAMF_DESKTOP_FILE_HINT.
  * Daemon: Manually set to complete the startup notification on
    view state change (lp#1582430).
  * Add support for starting bamf through user systemd units.
  * Unscale x/y coordinates returned by top_window_action_menu
    (lp#1606234).
  * Adjust for XDG_CURRENT_DESKTOP containing multiple
    colon-separated values.
- Chop -Werror off with a regular expression.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1569585600">- BuildRequire python2-libxml2 instead of python-libxml2</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1575892800">- Update to version 0.5.4:
  * See /usr/share/doc/packages/bamf-daemon/ChangeLog
- Add bamf-fix-gtester2xunit.patch: Make gtester2xunit requirements
  easier to meet.
  BuildRequire python3-lxml instead of libxslt-python and
  python2-libxml2.
- Drop openSUSE Leap 42.3 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Update to version 0.5.5:
  * bamf-tab: Fix spelling
  * bamf-view: avoid overriding the `timeout` variables after
    setting them
  * Run gtester2xunit.py with Python3, port libxml2/libxslt to
    lxml module, this obsoletes bamf-fix-gtester2xunit.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620820800">- Update keyring for new key Marco Trevisan
  D4C501DA48EB797A081750939449C2F50996635F</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659009600">- update to 0.5.6:
  * configure.ac: bump glib requirement to &gt;= 2.38
  * port gobject privates methods using non-deprecated macros
  * bamf-view: Fix deprecation warning with proper replacement
  * libbamf: Use more modern macros to define classes
  * configure: Ensure we compile using all the required gobject packages
  * daemon/bamf-application: Support ShowIn in generated desktop with new format
  * tests/bamfdaemon: Remove window-added/removed tests
  * bamfdaemon, tests: Export and destroy windows and applications</changelog>
</package>
<package pkgid="e2f89e3451e28407d596cf03af1385d6a1ec36e4401262569917d7b88252858e2bf2a7c6347845b9fc2e69d097e4d8a70d15db97a717a496206d0f8825a8e574" name="bamf-devel" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="bp160.1.14"/>
  <changelog author="jengelh@inai.de" date="1399464000">- Add bamf-voidreturn.diff to resolve a compile abort due to
  nonsensical syntax.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430568000">- Update to 0.5.1:
  * BamfView: Reload the view children everytime it changes D-Bus
    path.
  * BamfXutils: Trap the X errors when doing async X calls.
  * BamfLegacyScreen: When in Unity monitor for Compiz
    ClientMessage's to show action menu.
  * BamfMatcher: Fix prefix regex for pythonX support.
  * BamfMatcher: Rename set our atom to _BAMF_DESKTOP_FILE.
  * BamfLegacyScreen: Do not show the actions menu for desktop
    type window.
  * Fix return value of try_create_local_desktop_data.
  * Remove old webapp related code since now we do not use browser
    tab matching anymore.
  * Install typelib files into MA libdir.
  * BamfMatcher: honour the _GTK_APPLICATION_ID xprop.
  * Replace gtk_icon_theme_has_icon with gtk_icon_theme_lookup_icon.
- Remove bamf-voidreturn.diff.
- Spec cleanup.</changelog>
  <changelog author="jengelh@inai.de" date="1431172800">- Update RPM package groups and summaries
- Avoid running configure twice
- Make sure all non-base directories are owned
- Ensure all configure.ac requirements appear as BuildRequires
- Place documentation into subpackage, it is not needed for
  automated builds.</changelog>
  <changelog author="jengelh@inai.de" date="1431259200">- Add gpg signature</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479211200">- Update to version 0.5.3 (changes since 0.5.1):
  * BamfView: Reload the view children everytime it changes dbus
    path. Without doing it we could have children-less views in
    case we have just re-matched a view with a different dbus path
    (this happens in general for desktop-less applications), because
    the proxy won't be fast enough to catch the signal to update
    the inner children list (lp#1238064).
  * BamfXutils: Trap the X errors when doing async X calls
    (lp#1193714).
  * bamf-legacy-window-test.c: Don't use 'return' with a value, in
    function returning void.
  * Fix return value of try_create_local_desktop_data (lp#1280110).
  * BamfLegacyScreen: When in Unity monitor for compiz
    ClientMessage's to show action menu If we get a
    _COMPIZ_TOOLKIT_ACTION client message with the internal value
    _COMPIZ_TOOLKIT_ACTION_WINDOW_MENU, then we are requested by
    compiz to show the window action menu, and thus let's ask the
    proper BamfLegacyWindow to do that, thanks to libwnck
    (lp#1280042).
  * Remove old webapp related code since now we don't use browser
    tab matching anymore (lp#1289498).
  * Rip out vestigial webapps code (lp#1280337, lp#1280337).
  * BamfMatcher: Fix prefix regex for pythonX support (used for
    converting /usr/bin/python[stuff] foo into foo) to work with
    pythonX as well as python and pythonX.Y.
  * BamfLegacyScreen: Do not show the actions menu for desktop type
    window (lp#1342609).
  * Replace gtk_icon_theme_has_icon with gtk_icon_theme_lookup_icon
    (lp#1407192).
  * Matcher: Honour the _GTK_APPLICATION_ID xprop.
  * BamfMatcher: Rename set our atom to _BAMF_DESKTOP_FILE.
  * Matcher: Use desktop file path when matching on
    _GTK_APPLICATION_ID.
  * BamfMatcher: Update special g-c-c code to unity-control-center
    (lp#1511481).
  * libBAMF: Cache active{window,application} and be smarter in
    reusing known resources.
  * BamfDaemon: Add upstart session support.
  * BamfMatcher: Don't assign no-display desktop files to windows
    by default when launched (lp#1519376).
  * Use startup notifications to set a "starting" property
    (lp#676457).
  * BamfMatcher: Avoid to register applications with invalid (empty
    or not existing) destkop files (lp#1560490).
  * BamfApplication: Bind window-{added,removed} signals to
    child-{added,removed} ones.
  * BamfWindow: Export window actions menu using dbusmenu
    (lp#1570812).
  * BamfApplication: Correctly set a main child when handling
    windows.
  * bamfdaemon-dbus-runner: Don't try to start again if already
    running (lp#1581896, lp#1532226).
  * BamfMatcher: Allow overriding desktop with the environment var
    BAMF_DESKTOP_FILE_HINT.
  * Daemon: Manually set to complete the startup notification on
    view state change (lp#1582430).
  * Add support for starting bamf through user systemd units.
  * Unscale x/y coordinates returned by top_window_action_menu
    (lp#1606234).
  * Adjust for XDG_CURRENT_DESKTOP containing multiple
    colon-separated values.
- Chop -Werror off with a regular expression.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1569585600">- BuildRequire python2-libxml2 instead of python-libxml2</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1575892800">- Update to version 0.5.4:
  * See /usr/share/doc/packages/bamf-daemon/ChangeLog
- Add bamf-fix-gtester2xunit.patch: Make gtester2xunit requirements
  easier to meet.
  BuildRequire python3-lxml instead of libxslt-python and
  python2-libxml2.
- Drop openSUSE Leap 42.3 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Update to version 0.5.5:
  * bamf-tab: Fix spelling
  * bamf-view: avoid overriding the `timeout` variables after
    setting them
  * Run gtester2xunit.py with Python3, port libxml2/libxslt to
    lxml module, this obsoletes bamf-fix-gtester2xunit.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620820800">- Update keyring for new key Marco Trevisan
  D4C501DA48EB797A081750939449C2F50996635F</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659009600">- update to 0.5.6:
  * configure.ac: bump glib requirement to &gt;= 2.38
  * port gobject privates methods using non-deprecated macros
  * bamf-view: Fix deprecation warning with proper replacement
  * libbamf: Use more modern macros to define classes
  * configure: Ensure we compile using all the required gobject packages
  * daemon/bamf-application: Support ShowIn in generated desktop with new format
  * tests/bamfdaemon: Remove window-added/removed tests
  * bamfdaemon, tests: Export and destroy windows and applications</changelog>
</package>
<package pkgid="27d8d5b8c53cbf0ac859baf759eb20ab5210df2eeac380da24f8f6b107da0cbb1c4ef5cd6d28e5dea1013c6b2c122af544b271c34dc65570f8b93630c80ca712" name="bamf-doc" arch="noarch">
  <version epoch="0" ver="0.5.6" rel="bp160.1.14"/>
  <changelog author="jengelh@inai.de" date="1399464000">- Add bamf-voidreturn.diff to resolve a compile abort due to
  nonsensical syntax.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430568000">- Update to 0.5.1:
  * BamfView: Reload the view children everytime it changes D-Bus
    path.
  * BamfXutils: Trap the X errors when doing async X calls.
  * BamfLegacyScreen: When in Unity monitor for Compiz
    ClientMessage's to show action menu.
  * BamfMatcher: Fix prefix regex for pythonX support.
  * BamfMatcher: Rename set our atom to _BAMF_DESKTOP_FILE.
  * BamfLegacyScreen: Do not show the actions menu for desktop
    type window.
  * Fix return value of try_create_local_desktop_data.
  * Remove old webapp related code since now we do not use browser
    tab matching anymore.
  * Install typelib files into MA libdir.
  * BamfMatcher: honour the _GTK_APPLICATION_ID xprop.
  * Replace gtk_icon_theme_has_icon with gtk_icon_theme_lookup_icon.
- Remove bamf-voidreturn.diff.
- Spec cleanup.</changelog>
  <changelog author="jengelh@inai.de" date="1431172800">- Update RPM package groups and summaries
- Avoid running configure twice
- Make sure all non-base directories are owned
- Ensure all configure.ac requirements appear as BuildRequires
- Place documentation into subpackage, it is not needed for
  automated builds.</changelog>
  <changelog author="jengelh@inai.de" date="1431259200">- Add gpg signature</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1479211200">- Update to version 0.5.3 (changes since 0.5.1):
  * BamfView: Reload the view children everytime it changes dbus
    path. Without doing it we could have children-less views in
    case we have just re-matched a view with a different dbus path
    (this happens in general for desktop-less applications), because
    the proxy won't be fast enough to catch the signal to update
    the inner children list (lp#1238064).
  * BamfXutils: Trap the X errors when doing async X calls
    (lp#1193714).
  * bamf-legacy-window-test.c: Don't use 'return' with a value, in
    function returning void.
  * Fix return value of try_create_local_desktop_data (lp#1280110).
  * BamfLegacyScreen: When in Unity monitor for compiz
    ClientMessage's to show action menu If we get a
    _COMPIZ_TOOLKIT_ACTION client message with the internal value
    _COMPIZ_TOOLKIT_ACTION_WINDOW_MENU, then we are requested by
    compiz to show the window action menu, and thus let's ask the
    proper BamfLegacyWindow to do that, thanks to libwnck
    (lp#1280042).
  * Remove old webapp related code since now we don't use browser
    tab matching anymore (lp#1289498).
  * Rip out vestigial webapps code (lp#1280337, lp#1280337).
  * BamfMatcher: Fix prefix regex for pythonX support (used for
    converting /usr/bin/python[stuff] foo into foo) to work with
    pythonX as well as python and pythonX.Y.
  * BamfLegacyScreen: Do not show the actions menu for desktop type
    window (lp#1342609).
  * Replace gtk_icon_theme_has_icon with gtk_icon_theme_lookup_icon
    (lp#1407192).
  * Matcher: Honour the _GTK_APPLICATION_ID xprop.
  * BamfMatcher: Rename set our atom to _BAMF_DESKTOP_FILE.
  * Matcher: Use desktop file path when matching on
    _GTK_APPLICATION_ID.
  * BamfMatcher: Update special g-c-c code to unity-control-center
    (lp#1511481).
  * libBAMF: Cache active{window,application} and be smarter in
    reusing known resources.
  * BamfDaemon: Add upstart session support.
  * BamfMatcher: Don't assign no-display desktop files to windows
    by default when launched (lp#1519376).
  * Use startup notifications to set a "starting" property
    (lp#676457).
  * BamfMatcher: Avoid to register applications with invalid (empty
    or not existing) destkop files (lp#1560490).
  * BamfApplication: Bind window-{added,removed} signals to
    child-{added,removed} ones.
  * BamfWindow: Export window actions menu using dbusmenu
    (lp#1570812).
  * BamfApplication: Correctly set a main child when handling
    windows.
  * bamfdaemon-dbus-runner: Don't try to start again if already
    running (lp#1581896, lp#1532226).
  * BamfMatcher: Allow overriding desktop with the environment var
    BAMF_DESKTOP_FILE_HINT.
  * Daemon: Manually set to complete the startup notification on
    view state change (lp#1582430).
  * Add support for starting bamf through user systemd units.
  * Unscale x/y coordinates returned by top_window_action_menu
    (lp#1606234).
  * Adjust for XDG_CURRENT_DESKTOP containing multiple
    colon-separated values.
- Chop -Werror off with a regular expression.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1569585600">- BuildRequire python2-libxml2 instead of python-libxml2</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1575892800">- Update to version 0.5.4:
  * See /usr/share/doc/packages/bamf-daemon/ChangeLog
- Add bamf-fix-gtester2xunit.patch: Make gtester2xunit requirements
  easier to meet.
  BuildRequire python3-lxml instead of libxslt-python and
  python2-libxml2.
- Drop openSUSE Leap 42.3 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Update to version 0.5.5:
  * bamf-tab: Fix spelling
  * bamf-view: avoid overriding the `timeout` variables after
    setting them
  * Run gtester2xunit.py with Python3, port libxml2/libxslt to
    lxml module, this obsoletes bamf-fix-gtester2xunit.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620820800">- Update keyring for new key Marco Trevisan
  D4C501DA48EB797A081750939449C2F50996635F</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659009600">- update to 0.5.6:
  * configure.ac: bump glib requirement to &gt;= 2.38
  * port gobject privates methods using non-deprecated macros
  * bamf-view: Fix deprecation warning with proper replacement
  * libbamf: Use more modern macros to define classes
  * configure: Ensure we compile using all the required gobject packages
  * daemon/bamf-application: Support ShowIn in generated desktop with new format
  * tests/bamfdaemon: Remove window-added/removed tests
  * bamfdaemon, tests: Export and destroy windows and applications</changelog>
</package>
<package pkgid="9f207e6078eecd19fac8d0ebb64a7b37e3d15f18d2606436b2af0875ff5f0ed5810992fdd1e4de8ceb20927a337caa50a7a651fd8831e5ad6c03dd21aad07329" name="bandicoot-devel" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701259200">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712923200">- Update to version 1.13.0:
  * No linux specific fixes.
- Changes from version 1.12.2:
  * Fix for OpenCL kernel compilation on devices that don't
    support float64
- Changes from version 1.12.2:
  * Add compatibility container functions: .front(), .back(),
    .size(), .clear(), .empty()
  * Fix bug in two-dimensional CUDA grid size computation
- Empty %check section to satisfy rpmlint.</changelog>
</package>
<package pkgid="32b37fc069defe8e83c0eb41b11d9d39b9d2a9da79bf4653853f67f84fcba525ced5f4fe57743a63eb9d46f5b0a24a90ea79a7d447c000eefacaf9764efb0fb3" name="bandwidth" arch="x86_64">
  <version epoch="0" ver="1.11.2b" rel="bp160.1.10"/>
  <changelog author="mpluskal@suse.com" date="1494504000">- Enable arm as well</changelog>
  <changelog author="mardnh@gmx.de" date="1497787200">- Update to version 1.4.2
  - Upstream does not provide a Changelog</changelog>
  <changelog author="mardnh@gmx.de" date="1510228800">- Update to version 1.5
  - Fixed AVX bug.
  - Added --nice mode</changelog>
  <changelog author="mardnh@gmx.de" date="1515585600">- Update to version 1.5.1
  - Fixed crashing bug</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1570536000">- Update to version 1.9.1
  * More object-oriented improvements.
  * Separated object-oriented C (OOC) from bandwidth app.
- Use HTTPS URL
- Drop patch:
  * bandwidth-fix-cflags.diff</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1571745600">- Update to version 1.9.3
  * no changes, bugfix release only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1571745601">- Enforce usage of CFLAGS</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1600084800">- Update to 1.9.4:
  * Removed unfinished AVX512 code that was causing a crash
    on Xeon CPUs.</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1651060800">- Update to 1.11.2:
  * AVX-512 support. Improved fonts. Fixed Win64/Cygwin support.
  * ARM64 (AArch64) support and improved ARM32 (AArch32) support.
- Drop i586 architecture.</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1651233600">- Update to 1.11.2b:
  * Built binary does not have executable stack.</changelog>
</package>
<package pkgid="b5646ccd27fb38cea2208393e4d3766681afeac8298b5ea4351e5d7abaa8e6705faff682c7462b689d6784c7ca968c9be839a7fc458056ae69da023a6991c780" name="baobab" arch="x86_64">
  <version epoch="0" ver="48.0" rel="bp160.1.6"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688731200">- Update to version 45.alpha:
  + Use new libadwaita widgets and design patterns.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695038400">- Update to version 45.0:
  + Use new libadwaita widgets and design patterns.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705492800">- Fix versioned BuildRequires for libadwaita; according to
  meson.build it must be &gt;= 1.4.alpha.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711108800">- Update to version 46.0:
  + Improved App metainfo.
  + Use enter instead of leave to update highlightitem.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1724673600">- Update to version 47.alpha:
  + Use GtkColumnView instead of GtkTreeView
  + Replace named colors with CSS variables
  + Use symbolic icons in location lists
  + Port to AdwDialog
  + Use AdwPreferencesPage/Group for location list
  + Use AdwButtonRow for "Add Location" button
  + Miscellaneous style cleanups
  + Allow removing files that don't exist
  + New pathbar style
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726488000">- Update to version 47.0:
  + Port to AdwSpinner.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1736683200">- Update to version 48.alpha:
  + Replace X-GNOME-Utilities category with Utility
  + Metainfo improvements
  + Updated translations.
- Add appstream-glib BuildRequires and a checksection where we
  verify appdata and desktop file.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741953600">- Update to version 48.0:
  + Sort POTFILES alphabetically
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1744459200">- Add baobab-Improve-Scaning-Speed_cpu.patch: Improve Scaning Speed
  and Memory Usage.</changelog>
</package>
<package pkgid="b6014501a09792d242a75806a68e7837bf1eae6994fd671e7357b7e89a3acde11bf928a2d5b4b69856a21581edbbb460a12a9ec8194899e53fcaf5faf6acd7b6" name="baobab-lang" arch="noarch">
  <version epoch="0" ver="48.0" rel="bp160.1.6"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1688731200">- Update to version 45.alpha:
  + Use new libadwaita widgets and design patterns.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695038400">- Update to version 45.0:
  + Use new libadwaita widgets and design patterns.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705492800">- Fix versioned BuildRequires for libadwaita; according to
  meson.build it must be &gt;= 1.4.alpha.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1711108800">- Update to version 46.0:
  + Improved App metainfo.
  + Use enter instead of leave to update highlightitem.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1724673600">- Update to version 47.alpha:
  + Use GtkColumnView instead of GtkTreeView
  + Replace named colors with CSS variables
  + Use symbolic icons in location lists
  + Port to AdwDialog
  + Use AdwPreferencesPage/Group for location list
  + Use AdwButtonRow for "Add Location" button
  + Miscellaneous style cleanups
  + Allow removing files that don't exist
  + New pathbar style
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726488000">- Update to version 47.0:
  + Port to AdwSpinner.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1736683200">- Update to version 48.alpha:
  + Replace X-GNOME-Utilities category with Utility
  + Metainfo improvements
  + Updated translations.
- Add appstream-glib BuildRequires and a checksection where we
  verify appdata and desktop file.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741953600">- Update to version 48.0:
  + Sort POTFILES alphabetically
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1744459200">- Add baobab-Improve-Scaning-Speed_cpu.patch: Improve Scaning Speed
  and Memory Usage.</changelog>
</package>
<package pkgid="bcf4d9d0e5e38b28ec63732b67321381c25280a0b6aa7756b99b506ebb56d20a863d87edb60349ef9d9a19bb744ed782aaab0f8dad5765ba9d6097f6e5fae4ee" name="barcode" arch="x86_64">
  <version epoch="0" ver="0.99" rel="bp160.1.13"/>
  <changelog author="werner@suse.de" date="1343131200">- Build requires texinfo as well as makeinfo.</changelog>
  <changelog author="p.drouand@gmail.com" date="1388836800">- Update to version 0.99:
  + Support for i18n.
  + Change license to GPLv3 or later version.
  + SVG support.
  + Added support for PCL output.
- Removed patchs fixed by upstream:
  + barcode-0.98.patch.
  + barcode-0.98-bookland.patch.
  + barcode-0.98-gcc_warning.patch.
  + barcode-0.98-memoryleak.patch.
  + barcode-0.98-nohtmltoinfo.patch.
- Adapt barcode-0.98-info.patch patch to upstream changes.
- Change license tag to GPL-3.0+ because of license change by
  upstream.
- Use %configure instead of pass options "by-hand".
- Remove devel subpackage; it was already useless and upstream
  doesn't provide development files anymore.
- info file has to be provided with linked binary.
- Upstream doesn't provide any manpage anymore.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1416571200">- Reintroduce devel package, header file needed for development of
  other packages, eg glabels.
- Add barcode-fix-renamed-include.patch: Fix renamed gettext
  include header reference.
- Spec and changes file tidy up.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- info deletion must be in %preun</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Add gpg signature
- Tiny cleanup with spec-clener</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568030400">- Build using -ffat-lto-objects
- Run spec-cleaner
- Remove obsolete conditions and unneeded build requirements
- Fix the -devel package group</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1592481600">- Fix building with gcc10</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1652961600">- switch to https source urls</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1721390400">- Add barcode-C99.diff to add mssing includes of libintl.h to allow
  the package to be built with GCC 14.</changelog>
</package>
<package pkgid="c19ec411f5e271ff112a1ae9af9455addc7c31e43b0b48f700cd12acfba2542230a682769e221fd4322b81718e1ce31a3866f076a3e5b82be9ae097095dd191c" name="barcode-devel" arch="x86_64">
  <version epoch="0" ver="0.99" rel="bp160.1.13"/>
  <changelog author="werner@suse.de" date="1343131200">- Build requires texinfo as well as makeinfo.</changelog>
  <changelog author="p.drouand@gmail.com" date="1388836800">- Update to version 0.99:
  + Support for i18n.
  + Change license to GPLv3 or later version.
  + SVG support.
  + Added support for PCL output.
- Removed patchs fixed by upstream:
  + barcode-0.98.patch.
  + barcode-0.98-bookland.patch.
  + barcode-0.98-gcc_warning.patch.
  + barcode-0.98-memoryleak.patch.
  + barcode-0.98-nohtmltoinfo.patch.
- Adapt barcode-0.98-info.patch patch to upstream changes.
- Change license tag to GPL-3.0+ because of license change by
  upstream.
- Use %configure instead of pass options "by-hand".
- Remove devel subpackage; it was already useless and upstream
  doesn't provide development files anymore.
- info file has to be provided with linked binary.
- Upstream doesn't provide any manpage anymore.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1416571200">- Reintroduce devel package, header file needed for development of
  other packages, eg glabels.
- Add barcode-fix-renamed-include.patch: Fix renamed gettext
  include header reference.
- Spec and changes file tidy up.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- info deletion must be in %preun</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Add gpg signature
- Tiny cleanup with spec-clener</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568030400">- Build using -ffat-lto-objects
- Run spec-cleaner
- Remove obsolete conditions and unneeded build requirements
- Fix the -devel package group</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1592481600">- Fix building with gcc10</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1652961600">- switch to https source urls</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1721390400">- Add barcode-C99.diff to add mssing includes of libintl.h to allow
  the package to be built with GCC 14.</changelog>
</package>
<package pkgid="f0a6c821339fee702f3c6c2012a7dd5eeb42d95b4317f69c74256cad6b92a0e1721399ab83db46012bc359adc42843fc569659328c9a9cb426d1b56e9e9bc17e" name="barrel" arch="x86_64">
  <version epoch="0" ver="0.2.8" rel="bp160.1.13"/>
  <changelog author="aschnell@suse.com" date="1685534400">- handle unsupported partition ids during loading of devicegraph
- version 0.2.1</changelog>
  <changelog author="aschnell@suse.com" date="1695297600">- allow to not add file systems in /etc/fstab
- version 0.2.2</changelog>
  <changelog author="aschnell@suse.com" date="1696593600">- allow to use a key file when creating an encryption device
- version 0.2.3</changelog>
  <changelog author="aschnell@suse.com" date="1697025600">- support RAID level LINEAR
- version 0.2.4</changelog>
  <changelog author="aschnell@suse.com" date="1704196800">- speedup startup
- version 0.2.5</changelog>
  <changelog author="aschnell@suse.com" date="1706529600">- experimental support for bcachefs</changelog>
  <changelog author="aschnell@suse.com" date="1707134400">- follow renumbering of partitions during remove
  (gh#openSUSE/snapper#85)
- version 0.2.6</changelog>
  <changelog author="aschnell@suse.com" date="1710504000">- mark inactive mount points</changelog>
  <changelog author="aschnell@suse.com" date="1714651200">- fix build with gcc14
- version 0.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1721131200">- support more encryption options
- version 0.2.8</changelog>
</package>
<package pkgid="8b8e05987568436550a63713b8329d119c3befdb86e8e74ef97213e233f71684a9cb5ecb1b3f2a268e797b1977f570056a783861a0c23cddf16a356f218a6ba5" name="barrel-lang" arch="noarch">
  <version epoch="0" ver="0.2.8" rel="bp160.1.13"/>
  <changelog author="aschnell@suse.com" date="1685534400">- handle unsupported partition ids during loading of devicegraph
- version 0.2.1</changelog>
  <changelog author="aschnell@suse.com" date="1695297600">- allow to not add file systems in /etc/fstab
- version 0.2.2</changelog>
  <changelog author="aschnell@suse.com" date="1696593600">- allow to use a key file when creating an encryption device
- version 0.2.3</changelog>
  <changelog author="aschnell@suse.com" date="1697025600">- support RAID level LINEAR
- version 0.2.4</changelog>
  <changelog author="aschnell@suse.com" date="1704196800">- speedup startup
- version 0.2.5</changelog>
  <changelog author="aschnell@suse.com" date="1706529600">- experimental support for bcachefs</changelog>
  <changelog author="aschnell@suse.com" date="1707134400">- follow renumbering of partitions during remove
  (gh#openSUSE/snapper#85)
- version 0.2.6</changelog>
  <changelog author="aschnell@suse.com" date="1710504000">- mark inactive mount points</changelog>
  <changelog author="aschnell@suse.com" date="1714651200">- fix build with gcc14
- version 0.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1721131200">- support more encryption options
- version 0.2.8</changelog>
</package>
<package pkgid="9a001145098c9c05cb32d1a5cfe648a6d946ba92fe202841b7eb53f1f151d76c1e84ccd280f20da0512f09ee87add45028b8b7fd0283e9090b3d9fd0562c3d97" name="barrier" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="bp160.1.2"/>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1635854400">- Drop use of barrier-use-system-includes.patch use commandline
  flag instead</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1637064000">- Updated to version 2.4.0:
  * Barrier now supports client identity verification (fixes CVE-2021-42072,
    CVE-2021-42073).
    Previously a malicious client could connect to Barrier server without any
    authentication and send application-level messages. This made the attack
    surface of Barrier significantly larger. Additionally, in case the malicious
    client got possession of a valid screen name by brute forcing or other means
    it could modify the clipboard contents of the server.
    To support seamless upgrades from older versions of Barrier this is
    currently disabled by default. The feature can be enabled in the settings
    dialog. If enabled, older clients of Barrier will be rejected.
    Barrier now uses SHA256 fingerprints for establishing security of encrypted
    SSL connections. After upgrading client to new version the existing server
    fingerprint will need to be approved again. Client and server will show both
    SHA1 and SHA256 server fingerprints to allow interoperability with older
    versions of Barrier.
  Bugfixes:
  * Fixed build failure on mips*el and riscv64 architecture.
  * Barrier no longer uses openssl CLI tool for any operations and hooks into
    the openssl library directly.
  * More X11 clipboard MIME types have been mapped to corresponding converters
    (#344).
  * Fixed setup of multiple actions associated with a hotkey.
  * Fixed setup of hotkeys with special characters such as comma and semicolon
    (#778).
  * Fixed transfer of non-ASCII characters coming from a Windows server in
    certain cases (#527).
  * Barrier will now regenerate server certificate if it's invalid instead of
    failing to launch (#802)
  * Added support for additional keys on Sun Microsystems USB keyboards (#784).
  * Updated Chinese translation.
  * Updated Slovak translation.
  * Theme icons are now preferred to icons distributed together with Barrier
    (#471).
  Features:
  * Added --drop-target option that improves drag and drop support on Windows
    when Barrier is being run as a portable app.
  * The --enable-crypto command line option has been made the default to reduce
    chances of accidental security mishaps when configuring Barrier from command
    line. A new --disable-crypto command line option has been added to
    explicitly disable encryption.
  * Added support for randomart images for easier comparison of SSL certificate
    fingerprints. The algorithm is identical to what OpenSSH uses.
  * Implemented a configuration option for Server GUI auto-start.
  * Made it possible to use keyboard instead of mouse to modify screen layout.
  * Added support for keyboard backlight media keys
  * Added support for Eisu_toggle and Muhenkan keys
  * Added --profile-dir option that allows to select custom profile directory.
- Bundle Gulrak Filesystem Headers (New Dependency)
- Enable Tests
- Add fix-build.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1679918400">- Fix gcc13 build with fix-build2.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712318400">- Use full URL for gulrak/filesystem.</changelog>
</package>
<package pkgid="ab8b2f481936bfcf516ca89d0502926c3acc82526656d416e25cdb7017d3da7a43ed0d864156cf3b61ae5a16bf000e494696f4961c7344f7b6f37ed024666962" name="barvinok" arch="x86_64">
  <version epoch="0" ver="0.41.7" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599912000">- Initial package (version 0.41.3) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1608811200">- Update to release 0.41.4
  * Support for newer clang; no user-visible changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650542400">- Update to release 0.41.5
  * Build updates / work with newer clang</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1659096000">- Update to release 0.41.6
  * Support recent versions of clang</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687608000">- Update to release 0.41.7
  * Support even newer versions of clang
  * Remove polytope_scan, similar function is provided by the
    iscc and isl/isl_polytope_scan tools</changelog>
</package>
<package pkgid="768ac7155d54a290b8d075313afb38b0aa9666d7d3acf63b98c543067aab61d2a02d1a2ac95de25fb8b92601b6af7d4efacb376f05d71b962cf6f342d0c36148" name="barvinok-devel" arch="x86_64">
  <version epoch="0" ver="0.41.7" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599912000">- Initial package (version 0.41.3) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1608811200">- Update to release 0.41.4
  * Support for newer clang; no user-visible changes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650542400">- Update to release 0.41.5
  * Build updates / work with newer clang</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1659096000">- Update to release 0.41.6
  * Support recent versions of clang</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687608000">- Update to release 0.41.7
  * Support even newer versions of clang
  * Remove polytope_scan, similar function is provided by the
    iscc and isl/isl_polytope_scan tools</changelog>
</package>
<package pkgid="f15d3c2cce7eb82119c21e477ec32a4711277ced69bba3245d714e5aa68b2cd1f3975cd71b9e96db74a4c0eb28fec4b5f6648796e653d87deb566dc127c01079" name="base64coder" arch="noarch">
  <version epoch="0" ver="20101219" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- Initial package of base64coder 20101219</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549540800">- Trim bias from description.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554724800">- Do not depend on the parent pom, since we are not building using
  maven.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="932662b8956a9871b379f50a75af87d99d9699a98879db6f471415452f03605c92072264f745f3eed01cb3123ece75117574114586a1f89c9892538f1c5ae8a7" name="base64coder-javadoc" arch="noarch">
  <version epoch="0" ver="20101219" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- Initial package of base64coder 20101219</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549540800">- Trim bias from description.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554724800">- Do not depend on the parent pom, since we are not building using
  maven.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="a8a44e2b22eab3d12711c0e330328940e481ccb32674e01be50ec5022bba3a5ed4d45129686e444bcdf361707d12722b642eb9981ba85c805fb9f4793e4d6b18" name="baseiso-agama-installer-Leap_16.0" arch="x86_64">
  <version epoch="0" ver="17.0.0" rel="12.16"/>
</package>
<package pkgid="e06d780bcc5c59019fbdbf0a3df6f3b4590e41fb6c22dae418c94ec8f9e5a4fc1f1de084673e8e719fc9a621e94eddad49104cd84091b6dc2e4eaf94a265514d" name="baseiso-containment" arch="noarch">
  <version epoch="0" ver="0.2.6" rel="160000.2.2"/>
  <changelog author="adrian@suse.de" date="1738152000">- 0.2
  * add provides baseiso($NAME) to avoid the need to maintain this
    in build config</changelog>
  <changelog author="adrian@suse.de" date="1738238400">- 0.2.1
  * process only agama-installer iso's for now to avoid problems
    with other image builds.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1738324800">- 0.2.2
  * fix baseiso_post_run for Minimal VMs</changelog>
  <changelog author="mlin@suse.com" date="1740052800">- add %changelog to baseiso.spec.in
  * avoid source_date_epoch_from_changelog set but %changelog
    is missing</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1740571200">- 0.2.3
  * add the flavour name, if any, to the output package name</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1743076800">- 0.2.4
  * generate tftpboot subpackage when agama PXE tarballs are
    detected</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1745150400">- 0.2.5
  * use the same permissions for the /usr/share/tftpboot-installation
    directory as on SLE15 (bsc#1240935)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1745841600">* copy project changelog to allow reproducible builds to have a
  starting date</changelog>
  <changelog author="ro@suse.de" date="1750766400">* copy milestone files along with the created rpms if they exist</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1751457600">- 0.2.6
  * rework tftpboot rpm generation: extract the whole live squashfs
    filesystem from the standard agama-installer iso, rather than
    using the purpose-built PXE images (which will be likely dropped
    soon)</changelog>
</package>
<package pkgid="40dc931a42a1a3067d41ac3bb5fcd273281dafb1ca9901f9ade549c145feefe3241d61f3e267a307f6e17afce741ab6ae62ca2b07d23ff3dfc0fe7019b1d2bec" name="baseiso-containment" arch="noarch">
  <version epoch="0" ver="0.2.7" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1738238400">- 0.2.1
  * process only agama-installer iso's for now to avoid problems
    with other image builds.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1738324800">- 0.2.2
  * fix baseiso_post_run for Minimal VMs</changelog>
  <changelog author="mlin@suse.com" date="1740052800">- add %changelog to baseiso.spec.in
  * avoid source_date_epoch_from_changelog set but %changelog
    is missing</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1740571200">- 0.2.3
  * add the flavour name, if any, to the output package name</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1743076800">- 0.2.4
  * generate tftpboot subpackage when agama PXE tarballs are
    detected</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1745150400">- 0.2.5
  * use the same permissions for the /usr/share/tftpboot-installation
    directory as on SLE15 (bsc#1240935)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1745841600">* copy project changelog to allow reproducible builds to have a
  starting date</changelog>
  <changelog author="ro@suse.de" date="1750766400">* copy milestone files along with the created rpms if they exist</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1751457600">- 0.2.6
  * rework tftpboot rpm generation: extract the whole live squashfs
    filesystem from the standard agama-installer iso, rather than
    using the purpose-built PXE images (which will be likely dropped
    soon)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1757073600">- 0.2.7
  * tftpboot: package s390x specific files
  * maintain the directory structure rather than putting everything inside
    the loader/ directory. Files are also symlinked into loader/ to
    keep old configurations working
  * add skelcd package that can be extracted in ftp-trees (bsc#1248800)</changelog>
</package>
<package pkgid="6e55d3870dd199b98767795c26733db2ac51df730f69c968bb61a1b94d92d2b480156f599c9a832a9da48268dbc88892a54dde2cdfb30c64e30c2979a541c545" name="baseiso-containment" arch="noarch">
  <version epoch="0" ver="0.2.7" rel="lp160.2.1"/>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1738324800">- 0.2.2
  * fix baseiso_post_run for Minimal VMs</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1740052800">- add %changelog to baseiso.spec.in
  * avoid source_date_epoch_from_changelog set but %changelog
    is missing</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1740571200">- 0.2.3
  * add the flavour name, if any, to the output package name</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1743076800">- 0.2.4
  * generate tftpboot subpackage when agama PXE tarballs are
    detected</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1745150400">- 0.2.5
  * use the same permissions for the /usr/share/tftpboot-installation
    directory as on SLE15 (bsc#1240935)</changelog>
  <changelog author="Giacomo Leidi &lt;giacomo.leidi@suse.com&gt;" date="1745841600">* copy project changelog to allow reproducible builds to have a
  starting date</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1750766400">* copy milestone files along with the created rpms if they exist</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1751457600">- 0.2.6
  * rework tftpboot rpm generation: extract the whole live squashfs
    filesystem from the standard agama-installer iso, rather than
    using the purpose-built PXE images (which will be likely dropped
    soon)</changelog>
  <changelog author="Eugenio Paolantonio &lt;eugenio.paolantonio@suse.com&gt;" date="1757073600">- 0.2.7
  * tftpboot: package s390x specific files
  * maintain the directory structure rather than putting everything inside
    the loader/ directory. Files are also symlinked into loader/ to
    keep old configurations working
  * add skelcd package that can be extracted in ftp-trees (bsc#1248800)</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1757505600">- Only add squashfs.img to CD1 if s390x architecture</changelog>
</package>
<package pkgid="4cb63c5c2431b6eb2805cfdd4e083b44e648c10fb55d558a5dbc560ddf6200e3c4ec3f11fd8fe7f4a020c61b3482b1b20af3d6264e7f5cb6abe253c1327d99f3" name="bash" arch="x86_64">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="5cff5fabfeaca63beb1215aba5372bae8e64136f702e49d943f3670fe08148e9450b21ba22eb44f8e7a0f0747fea52b35f8669d9a3067c2c8e588175288cbb29" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1643371200">- remove PS1-completion-boo903362.patch as it breaks on non-bash
  shells and the original problem in
  bsc#903362#c9 does not occur anymore
- add versioned dependency to bash versions that have the fix</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
</package>
<package pkgid="38d09b42b98851f7e05725eb393ad8a93f81566266bcb900a0dabbc5ea5bda5d58d61c5b89afc90176c83619d7391ab59de744ce85dec8235d4aeaf94e3a1eee" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.3.1"/>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
  <changelog author="werner@suse.de" date="1758196800">- Add patch bug1246923.patch
  * Skip colon from device names for ethtool (bsc#1246923)</changelog>
</package>
<package pkgid="3b858701b76b0f38261a369a6349e0a76d782932a70182ea2e04345451bb6976ed90ba613e5127694b0c799561cb514cff0a890607b9b4f1a803de6c53187b64" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1643371200">- remove PS1-completion-boo903362.patch as it breaks on non-bash
  shells and the original problem in
  bsc#903362#c9 does not occur anymore
- add versioned dependency to bash versions that have the fix</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
</package>
<package pkgid="d480db2f6590717c248999182bf422643907f2e8c9ca8ce4c8e5a1a56ba9e886a2f41b5cdc31d79e5831e8896216a9943802ea7b64e8cd1c951107d7e27650df" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.3.1"/>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
  <changelog author="werner@suse.de" date="1758196800">- Add patch bug1246923.patch
  * Skip colon from device names for ethtool (bsc#1246923)</changelog>
</package>
<package pkgid="19c7ef358f78313681edafa69625263025de21daa785aa7ba42d8cbedfde0ae7fd3394002b470a7003411d0eabe16045cb3f29b3383382c6fa8838692ff9304e" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1643371200">- remove PS1-completion-boo903362.patch as it breaks on non-bash
  shells and the original problem in
  bsc#903362#c9 does not occur anymore
- add versioned dependency to bash versions that have the fix</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
</package>
<package pkgid="b285d5f39f3fd366c61649c225edb48ad6e317462e07af7ab83ce2e529673ef5bd025b92042b24a7a701d2419c3e7c81bac87d8f8bc6bf46422f3122d568f020" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.12.0" rel="160000.3.1"/>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
  <changelog author="gmbr3@opensuse.org" date="1680436800">- Move cmake config files to devel</changelog>
  <changelog author="werner@suse.de" date="1692273600">- Modify patches
  * ls-completion-boo889319.patch
  * rm-completion-smart-boo958462.patch
  to avoid skipping spaces after last word on command line (boo#1210974)
- Add patch fix_quote_readline_by_ref.patch
  * Do not escape leading ~ nor backslash and avoid empty quoting</changelog>
  <changelog author="werner@suse.de" date="1708689600">- Update to version 2.12.0:
  Features
  * _comp_backup_glob: add ucf generated backup files (351be1c)
  * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
  * comp_compgen{filedir,set}: define exit status (7920c9d)
  * _comp_compgen_commands: align return value with other compgens (9d3362e)
  * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
  * _comp_compgen_commands: include dirs (b9c7b5d)
  * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
  * _comp_compgen: support -i cmd and -x cmd (39cc200)
  * _comp_compgen: support -U var to unlocal var (b603535)
  * _comp_compgen: support option -C (6b3dfa5)
  * _comp_expand_glob: fail when no paths are generated (6b0a466)
  * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
  * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
  * add _comp_compgen_split (542bf73)
  * add _comp_locate_first_arg (0384bd5)
  * airflow: add fallback 3rd party completion loader (bf5550b)
  * ansible:* add fallback 3rd party completion loader (5f8384e)
  * apt-get: prefer apt-cache in same dir as command (a731bfd)
  * b2sum: new completion (cd985df)
  * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
  * black,blackd: add fallback 3rd party completion loader (47a1f05)
  * carton: support exec command completions (0eb3a21)
  * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
  * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
  * crc: add 3rd-party completion loader (cobra) (f10866e)
  * cz: add fallback 3rd party completion loader (b7ba70e)
  * dot: support filename extension .gv (be0010e)
  * dprint: add fallback 3rd party completion loader (e201e0e)
  * eog: add missing extension .heif (9e4a48f)
  * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
  * eog: associate with *.heic and *.jxl (20c9cea)
  * eog: associate with *.pbm (#1006) (5472cc1)
  * feh: associate with y4m and heic/heif/avif (e252c73)
  * feh: deassociate with avci/avcs (af46f34)
  * flask: add fallback 3rd party completion loader (3e0d00d)
  * hash: new completion (#1013) (4d0bffb)
  * httpx: add fallback 3rd party completion loader (3f4861c)
  * ip: Add completion for monitor subcommand (fa696e6)
  * jungle: add fallback 3rd-party completion loader (c69845a)
  * keyring: add fallback 3rd party completion loader (8082602)
  * kontena: add fallback 3rd-party completion loader (5eef0ce)
  * lefthook: add fallback 3rd party completion loader (dc9650e)
  * mailman: prefer list_lists in same dir as command (a46ccf1)
  * mysql: prefer mysqlshow from same dir (643886c)
  * no empty command completion if no_empty_cmd_completion is on (faab292)
  * npm: add fallback 3rd-party completion loader (f1c085c)
  * nvm: add fallback 3rd-party completion loader (dea7e1d)
  * oc: add 3rd-party completion loader (cobra) (26b5f09)
  * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
  * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
  * pytest: complete new --import-mode value (#1021) (2d636a3)
  * rtx: add fallback 3rd party completion loader (0628e22)
  * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
  * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
  * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
  * ssh: complete RequiredRSASize (#1064) (de15205)
  * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
  * tkn: add 3rd-party completion loader (cobra) (161fc5d)
  * xrandr: comma separated --setmonitor third argument (8a76f3d)
  Bug Fixes
  * __load_completion: quoted compspec for variants (#1008) (0a2443e)
  * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
  * _comp__init_set_up_service_completions: work around failglob (2529d40)
  * comp{first_arg,count_args}: count - as argument (e23a79e)
  * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
  * _comp_command_offset: Support complete -C (80450ca)
  * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
  * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
  * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
  * _comp_compgen_split: work around nounset (f488f96)
  * _comp_compgen_term: replace completions by default (d3696a3)
  * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
  * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
  * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
  * _comp_count_args: check optarg correctly (874c503)
  * _comp_count_args: exclude &lt;&gt;&amp; from wordbreaks as _comp_initialize (521d2bb)
  * _comp_count_args: ignore empty $3 (76eea74)
  * _comp_count_args: perform optarg check also on $3 (21d3122)
  * _comp_count_args: skip reassembling cword and words (3127703)
  * _comp_delimited: treat delimiter as a fixed string (571a0f7)
  * _comp_deprecate_func: argument order in usage error message (597f62f)
  * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
  * _comp_initialize: fix completions of redirections without space (da16bf6)
  * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
  * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
  * _comp_split: update error message for the correct options (3c4a89c)
  * _comp_sysvdirs: work around nounset (da26178)
  * _filedir_xspec: clean up unused variable tmp (67f1189)
  * _get_cword_at_cursor,cvs: quote array length (201239c)
  * _get_first_arg: remove invalid doccomment (eb40f56)
  * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
  * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
  * _service: quote word (c2d7fb7)
  * _slackpkg: do not scan after cword (ecd1384)
  * 7z: remove redundant printf '%s\n' "..." (20c2e32)
  * ant: work around custom IFS (584e567)
  * apt-cache: check all the words (84cfeda)
  * aptitude: do not use non-POSIX BRE \w (cd8c870)
  * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
  * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
  * bts: update functions to generators and fix variable conflicts (7d2867c)
  * carton: remove a branch never happening (cd063f9)
  * chgrp: fix typo _comp_compgen{d  =&amp;gt; _}filedir (#1063) (4c98ce5)
  * compat: find compat dir for prefix-install (b6d06bc)
  * completions/*: quote array assignments properly (848aa41)
  * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
  * completions/*: work around localvar_inherit (e3a871d)
  * curl,koji: use _comp_compgen_help (f37f221)
  * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
  * curl: colon handling for IPv6 address completions (8508d1d)
  * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
  * cvs: avoid variable conflicts (0d145c9)
  * dict: nounset error when host/port not set (57191e2)
  * dict: protect splitting from custom IFS (b31fe1e)
  * dict: work around bash-4.2 array nounset (d76dd9e)
  * dict: work around bash-4.3 ${v+"$@"} with custom IFS
  Unable to render expression.
  * ${v+"$@"} with custom IFS (cc21298)
  * dmypy: protect against "localvar_inherit" (768ce65)
  * dpkg-source: filter completions by cur (dbcef6e)
  * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
  * fix problems with set -o nounset (9c3e196)
  * gdb: fix regression that fails to generate command names (ca8e240)
  * gdb: remove duplicate candidates (532fc05)
  * gdb: use POSIX-compatible find expression (73938cd)
  * gdb: work around bash 4.4 ${v+"$@"}
  * get_words: work around bash-4.3 connected ${v+"$@"}
  * getent: check noargopts (6143f25)
  * getent: work around localvar_inherit (a12f438)
  * gzip,isort: fix typo _comp_com{gp =&amp;gt; pg}en (462feb3)
  * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
  * iperf: work around failglob with backslash in bash-5.0 (979f04f)
  * ip: Remove non-existent route completion (3b9ce4d)
  * isql: work around nounset (cb7007a)
  * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
  * java: localize cur (ec0068d)
  * kcov,povray: quote array expansions to avoid extra processing (215edab)
  * kldload,mplayer,mutt: work around nounset (5330fbe)
  * kldunload: remove unused -X option (35017d2)
  * known_hosts_real: match *.pub instead of *pub (470a644)
  * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
  * known_hosts_real: work around nounset (07c619a)
  * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
  * lvm: replace array slices with existing utility (ea49840)
  * lvm: update call to sub-command (30494f7)
  * make: handle multiple short options in skipping arguments (24c80c9)
  * make: typo fix in a code comment (e72cc82)
  * mdadm,update-alternatives: fix leak variable (14cd53b)
  * medusa: filter completions by the current word cur (f3ae706)
  * mr: avoid ${var/pat/$'...'} for compat42 in bash &gt;= 4.3 (b5ae5fa)
  * mr: exactly match command names (800b103)
  * mutt: avoid unexpected word splitting (3183e67)
  * mutt: fix use of regex in the glob context (63924e6)
  * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
  * mutt: use _comp_dequote for safe eval (f98379d)
  * openssl: avoid variable conflicts (a31906c)
  * openssl: fix variable i leak (83844b7)
  * perl: fix ineffective condition in an awk script (302dc52)
  * perl: helper call regression from 01611dd (b85263a)
  * pgrep: do not rely on uncontrolled IFS (99e38b2)
  * portinstall: use awk and _comp_compgen to filter completions (791f56c)
  * povray,sbopkg: check filetype (434eb08)
  * povray: process each element against patsub_replacement (0afc2e4)
  * povray: quote an argument properly (0a240bd)
  * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
  * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
  * pytest: do not filter underscores from parsed option arg choices (ea13241)
  * python: avoid variable conflicts (bef94c3)
  * python: complete filenames for script arguments (#1018) (397a49d)
  * python: complete micropython and pyston script args consistently (5b60ccc)
  * qdbus: remove cur and all the rest arguments (531b751)
  * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
  * ri: avoid interference on existing COMPREPLY (0a9d931)
  * ri: fix wrongly quoted options to compgen (5248bbf)
  * ri: properly split methods (910a5a0)
  * ri: split classes using _comp_split (c95baa1)
  * ri: work around localvar_inherit (9d6ff68)
  * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
  * sbopkg: work around nounset (9709bdf)
  * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
  * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
  * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
  * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
  * ssh: avoid variable conflicts (f2df91d)
  * ssh: fix wrong quoting inside compgen -W (febb3b3)
  * ssh: remove -a of generators (55c5c45)
  * ssh: remove unnecessary -a to _comp_compgen (992f28e)
  * ssh: resolve relative ssh_config Include correctly (4ac86e8)
  * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
  * ssh: work around bash-4.2 nounset (4447f83)
  * ssh: work around bash-4.2 nounset (d0695d0)
  * sudo: use $1 (sudo) as $root_command (329ca0e)
  * svcadm: fix ineffective IFS for splitting (1fd456e)
  * svcadm: use the first matching name as command (1870d5e)
  * sysbench: fix extraction of test-name option (cc246a1)
  * timeout: always treat word after duration as command (0d0531b)
  * tipc: remove filtered-out elements (75b36b2)
  * update-alternatives: quote dirname (1205ed1)
  * update-alternatives: suppress error for non-existent directory (adbdab8)
  * update-alternatives: work around localvar_inherit (1d9e19c)
  * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
  * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
  * use _comp_compgen_split to split and filter words (158b8ba)
  * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
  * use _comp_compgen for word list (83f033f)
  * use _comp_split while keeping filtering by $cur (509e642)
  * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
  * use XPG4 awk in Solaris (cdd6da9)
  * wol: filter IP addresses by cur (c3505c5)
  * wtf: quote array assignment (44c1d12)
  * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
  * xfunc ssh identityfile: localize change to cur (76b5726)
  Performance Improvements
  * _comp_count_args: skip reinitializing cword and words (29398ef)
  * mutt: return earlier on empty cur (a244587)
  * portinstall: return earlier for -lLo and non-existent file (395e463)
  * vncviewer: set nocasematch inside subshell (5ed0020)
- Delete patches as fixed upstream
  * fix-curl-help-completion-bsc1200791.patch
  * fix_quote_readline_by_ref.patch
- Port patches
  * FOO-dir-completion-boo905348.patch
  * LVM-completion-bsc946875.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion-2.7-unRAR-remove.patch
  * bash-completion.changes
  * bash-completion.spec
  * boo1190929-9af4afd0.patch
  * bsc1199724-modules.patch
  * ls-completion-boo889319.patch
  * qdbus-qt5.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * tar-completion.patch
- Do not apply patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as not known how to port and if this is required</changelog>
  <changelog author="werner@suse.de" date="1708689601">- Remove also patch
  bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
  as the problem is fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1711108800">- Add patch boo1221414-scp.patch
  * Do not replace the asignment of the array COMPREPLY with
    the shell function _comp_compgen_split (boo#1221414)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737374400">- No longer ship completion for secret-tool, which belongs to
  libsecret and newly brings the completions by itself.
  https://github.com/scop/bash-completion/issues/1317</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Drop completions for kmod; kmod&gt;=34 provides its own now.</changelog>
  <changelog author="werner@suse.de" date="1758196800">- Add patch bug1246923.patch
  * Skip colon from device names for ethtool (bsc#1246923)</changelog>
</package>
<package pkgid="c0f81f197f643ce033c4a1f65dd20948295eb5a1ffb33da194b48bea07c1bc48e4f9f04c1f7e6ba0898d592ffd363cf8ef1c050fa3bd90e78cbbf993609ef3d3" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="71aadceaa424ae9bac23092d5e881bc36559b337e0b55bdce949bdae5b4e4f2f0827e94ad3486b3a92b30bdc05df9df29b6a571286d3247435ea5d15475831c9" name="bash-doc" arch="noarch">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="cb3db1eef24c15a338564a678f9b84b846322362693c357ab71e0acffd1862e928ea10062d4ab692740921f05965256c1c2d87ba1f2f8f7bd9a93cce30c402a3" name="bash-git-prompt" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="bp160.1.2"/>
  <changelog author="Justin Zhang &lt;schnell18@gmail.com&gt;" date="1407499200">bash-git-prompt 1.0.1-1
- Initial version of package</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582200000">- Version 2.7.1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582545600">- Use profile.d instead of editing /etc/bashrc.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1589112000">- Add configuration file.</changelog>
</package>
<package pkgid="1493526921b7d4be4212ccdf51395f32b742da588b69ec35cccafa00114a08452ebd007af0ab34f6a66e154c090531dae5855812d4cb1a487e933354b522d487" name="bash-git-prompt" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="bp160.2.1"/>
  <changelog author="Justin Zhang &lt;schnell18@gmail.com&gt;" date="1407499200">bash-git-prompt 1.0.1-1
- Initial version of package</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582200000">- Version 2.7.1</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1582545600">- Use profile.d instead of editing /etc/bashrc.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1589112000">- Add configuration file.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1758542400">- add use-safe-tempfile.diff: this fixes bsc#1247489 CVE-2025-61659, an
  insecure predictable /tmp file usage in bash-git-prompt.</changelog>
</package>
<package pkgid="3d35003971186b038fb39109eb276c16fc5b8b9726d4ba86bb9f923a790bf802c214b5757346782c57b4b0426cc77df11d69e1e229d451ab37fad0daf636c704" name="bash-lang" arch="noarch">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="ece3c602018705ca7626adcc862431ec1e4ee3650af8512b3d2a71fa0136de9f0d6068dfca3959126f0ec44b5ddeb5edbd43c470c7a20d70307c62f9b69ac644" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="4205eeab1c92e903781fe4354764402aae097fee3abc61ef1116bd60bb48da2bb5f038dff5fefd51b2717394a4881b1a2c45a1833c648219c7aec210751149dd" name="bash-sh" arch="noarch">
  <version epoch="0" ver="5.2.37" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1705406400">- Add upstream patches
  * bash52-022
    It's possible for readline to try to zero out a line that's not
    null-terminated, leading to a memory fault.
  * bash52-023
    Running `local -' multiple times in a shell function would
    overwrite the original saved set of options.
  * bash52-024
    Fix bug where associative array compound assignment would not
    expand tildes in values.
  * bash52-025
    Make sure a subshell checks for and handles any terminating
    signals before exiting (which might have arrived after the
    command completed) so the parent and any EXIT trap will see
    the correct value for $?.</changelog>
  <changelog author="werner@suse.de" date="1709121600">- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include &lt;sys/mman.h&gt;
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch</changelog>
  <changelog author="werner@suse.de" date="1711368000">- Help dependcy resolver to identify package split done with bash-sh</changelog>
  <changelog author="werner@suse.de" date="1724068800">- Add upstream patches
  * bash52-027
    The configure test for the presence of strtoimax(3) is inverted.
  * bash52-028
    A DEBUG trap in an asynchronous process can steal the controlling terminal
    away from the calling shell, causing it to exit.
  * bash52-030
    `wait -n' can fail to return some jobs if they exit due to signals the shell
    does not report to the user.
  * bash52-031
    There is a memory leak in the code that implements the optimized $(&lt;file)
    expansion for some code paths.
  * bash52-032
    When printing functions containing coprocesses, the displayed coproc command
    has the word COPROC inserted unconditionally, resulting in function bodies
    that cannot be re-read as input.</changelog>
  <changelog author="werner@suse.de" date="1727265600">- Add upstream patches
  * bash52-037
    Fix the case where text to be completed from the line buffer (quoted) is
    compared to the common prefix of the possible matches (unquoted) and the
    quoting makes the former appear to be longer than the latter. Readline
    assumes the match doesn't add any characters to the word and doesn't display
    multiple matches.
  * bash52-036
    When readline is accumulating bytes until it reads a complete multibyte
    character, reading a byte that makes the multibyte character invalid can
    result in discarding the bytes in the partial character.
  * bash52-035
    There are systems that supply one of select or pselect, but not both.
  * bash52-034
    If we parse a compound assignment during an alias expansion, it's possible
    to have the current input string popped out from underneath the parse. In
    this case, we should not restore the input we were using when we began to
    parse the compound assignment.
  * bash52-033
    A typo in the autoconf test for strtold causes false negatives for strtold
    being available and working when compiled with gcc-14.
- Port patch bash-3.2-printf.patch to fit change in bash52-033</changelog>
  <changelog author="werner@suse.de" date="1734350400">- Remove bash-4.3-winch.dif as this is the (current) default</changelog>
  <changelog author="heitor@opensuse.org" date="1735387200">- Move (/etc/skel/.bashrc) and (/etc/skel/.profile) to (/usr/etc/skel/).</changelog>
  <changelog author="werner@suse.de" date="1737720000">- As in bash-sh there is only a symbolic link avoid to require a version</changelog>
  <changelog author="jengelh@inai.de" date="1740398400">- Explicitly specify that the build recipe needs bash</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="456323d99957740d275099b654101db24bd2e9d619aad8db6810f83ea94f8d00fca5738c927c0d42481122254b75e4292b675dff424ec42b41860413aab094ea" name="bat" arch="x86_64">
  <version epoch="0" ver="0.24.0" rel="bp160.1.1"/>
  <changelog author="mvetter@suse.com" date="1629288000">- Update to f3d53b to fix build on Tumbleweed because of Rust 1.54
    See https://github.com/sharkdp/bat/issues/1796
  * Update git2 dependency to fix incompatibility with Rust 1.54
  * Reduce startup time in loop-through mode with 80%-90%
  * HighlightingAssets: Move out fn get_integrated_*set() to module scope
  * Support a hidden arg --no-custom-assets that skips loading assets from the cache
  * HighlightingAssets: Make .syntaxes() and syntax_for_file_name() failable
  * HighlightingAssets::get_extension_syntax(): Split up into smaller methods
  * Make loading of cached assets closer in performance to integrated assets
  * Add Enselic in FUNDING.yml
  * Update battest.py
  * Add `rs` identifier for Rust code blocks in Markdown
  * Update CHANGELOG
  * Add groff syntax
  * Add custom FUNDING.yml
  * HighlightingAssets: Introduce private fn new() helper
  * HighlightingAssets: Encapsulate syntax_set behind a getter
  * De-duplicate some themes.bin and syntaxes.bin related code
  * Fix typo in README</changelog>
  <changelog author="william.brown@suse.com" date="1633003200">- Replace rust-packaging with cargo-packaging</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650283200">- Update to version 0.20.0
  * New style component header-filesize to show size of the displayed
    file in the header.
  * Use underline for line highlighting on ANSI
  * Fix bash completion on bash 3.x and bash-completion 1.x.
- Update to version 0.19.0
  * Reduce startup time in loop-through mode by 90%.
  * Load themes lazily to make bat start 25% faster when disregarding
    syntax load time.
  * Python syntax highlighting no longer suffers from abysmal performance
    in specific scenarios.
  * Fix for poor performance when ANSI escape sequences are piped to bat
  * Fix for incorrect handling of ANSI escape sequences when
    using --wrap=never
  * Load custom assets as fast as integrated assets
  * Support for x:-delta (minus) syntax in line ranges
  * Support for --ignored-suffix argument.
  * $BAT_CONFIG_DIR is now a recognized environment variable. It has
    precedence over $XDG_CONFIG_HOME
  * Support for x:+delta syntax in line ranges (e.g. 20:+10)
  * Add new --acknowledgements option that gives credit to theme and
    syntax definition authors
  * Fix: First line not shown in diff context.
  * Fix: Do not ignore syntaxes that handle file names with
    a *.conf extension.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1653912000">- Update to version 0.21.0:
  * assets/create.sh
  * Bump to v0.21.0
  * Make `INI` syntax register as handler of `.inf` files
  * release-checklist.md: Don't recommend `--allow-dirty` to cargo publish
  * release-checklist.md: Recommend looking at the tip of master for `-h` and `man`
  * release-checklist.md: Recommend `--locked` for `cargo install`
  * release-checklist.md: Recommend a single git grep command for MSRV
  * CHANGELOG.md: Clean up and tweak
  * Bump to syntect 5.0.0 to e.g. start lazy-loading syntaxes (#2181)
  * Simplify release-checklist.md by printing `-h`, `--help` and `man` in CI (#2183)
  * Bump assets/syntaxes/02_Extra/Zig from `87ecbca` to `1a4a384` (#2136)
  * Add `--relative` to `batdiff` in README.md (#2172)
  * printer.rs: De-duplicate code to highlight long lines
  * Limit nix features
  * Add a --style=default option (#2119)
  * Bump assets/syntaxes/02_Extra/Nginx from `15a1db1` to `65f5a63`
  * Skip syntax highlighting for long lines (#2165)
  * Add support for BusyBox less as pager (#2162)
  * Bump nix from 0.23.1 to 0.24.1
  * Bump flate2 from 1.0.22 to 1.0.23
  * Bump thiserror from 1.0.30 to 1.0.31
  * Run `cargo clippy --fix --all-targets --all-features` with Rust 1.60
  * Add mapping for Unix mail spool (#2156)
  * Bump assets/syntaxes/02_Extra/Fish from `cd95616` to `98316d4`
  * Syntax: add cmd-help (#2148)
  * bug_report.md template: Explicitly ask for steps
  * bug_report.md template: Mention some already reported bugs
  * Print info about custom assets in --diagnostics
  * Lock regex crate at min 1.5.5 for CVE-2022-24713
  * Allow configuring show_nonprintable from PrettyPrinter
  * Bump git2 from 0.14.1 to 0.14.2
  * Bump once_cell from 1.9.0 to 1.10.0
  * Bump regex from 1.5.4 to 1.5.5
  * Bump semver from 1.0.6 to 1.0.7
  * Bump assets/syntaxes/02_Extra/Fish from `2c254cc` to `cd95616`
  * Syntax: [Log] highlight escape characters in double quoted strings
  * Include contents of custom assets `metadata.yaml` in `--diagnostics`
  * Bump shell-words from 1.0.0 to 1.1.0
  * Bump git2 from 0.13.25 to 0.14.1
  * Updated test names
  * correctly handle multiple tabs in one line
  * add show_all_tabstops_long integration test
  * add show_all_tabstops integration test
  * Correctly render tab stops
  * Syntax: add clang-format (#2076)
  * Bump serial_test from 0.5.1 to 0.6.0
  * Bump semver from 1.0.4 to 1.0.6
  * Bump predicates from 2.1.0 to 2.1.1
  * release-checklist: Remind where to push tags in forks</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663070400">- Update to version 0.22.1:
  - v0.22.1
  * Bugfixes
  - Bring back pre-processing of ANSI escape characters to so that some
    common bat use cases starts working again. See #2308 (@Enselic)
  - v0.22.0
  * Features
  - Make the default macOS theme depend on Dark Mode.
    See #2197, #1746 (@Enselic)
  - Support for separate system and user config files.
    See #668 (@patrickpichler)
  * Bugfixes
  - Prevent fork nightmare with PAGER=batcat. See #2235 (@johnmatthiggins)
  - Make --no-paging/-P override --paging=... if passed as a later arg,
    see #2201 (@themkat)
  - --map-syntax and --ignored-suffix now works together, see #2093 (@czzrr)
  - Strips byte order mark from output when in non-loop-through mode.
    See #1922 (@dag-h)
  * Other
  - Relaxed glibc requirements on amd64, see #2106 and #2194 (@sharkdp)
  - Improved fish completions. See #2275 (@zgracem)
  - Stop pre-processing ANSI escape characters. Syntax highlighting on ANSI
    escaped input is not supported. See #2185 and #2189 (@Enselic)
  * Syntaxes
  - NSE (Nmap Scripting Engine) is mapped to Lua, see #2151 (@Cre3per)
  - Correctly color fstab dump and pass fields, see #2246 (@yuvalmo)
  - Update Command Help syntax, see #2255
  - Julia: Fix syntax highlighting for function name starting with struct,
    see #2230
  - Minor update to LiveScript, see #2291
  - Associate .mts and .cts files with the TypeScript syntax.
    See #2236 (@kidonng)
  - Fish history is mapped to YAML. See #2237 (@kidonng)
  * bat as a library
  - Make bat::PrettyPrinter::syntaxes() iterate over new bat::Syntax struct
    instead of &amp;syntect::parsing::SyntaxReference. See #2222 (@Enselic)
  - Clear highlights after printing, see #1919 and #1920 (@rhysd)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1665748800">- Update vendored dependencies
- Add _constraints to prevent OBS workers randomly failing</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669809600">- Add shell completion packages
- Install manpage</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1679745600">- Update to 0.23.0:
  Features:
  * Implemented -S and --chop-long-lines flags as aliases for
  - -wrap=never. See #2309
  * Breaking change: Environment variables can now override config
    file settings (but command-line arguments still have the highest
    precedence), see #1152, #1281, and #2381
  * Implemented --nonprintable-notation=caret to support showing
    non-printable characters using caret notation. See #2429
  Bugfixes:
  * Fix bat cache --clear not clearing the --target dir if specified. See #2393
  Other:
  * Various bash completion improvements, see #2310
  * Disable completion of cache subcommand, see #2399
  * Signifigantly improve startup performance on macOS, see #2442
  * Bump MSRV to 1.62, see #2496
  Syntaxes:
  * Added support for Ada, see #1300 and #2316
  * Added todo.txt syntax, see #2375
  * Improve Manpage.sublime-syntax. See #2364 and #2461
  * Added a new requirements.txt syntax, see #2361
  * Added a new VimHelp syntax, see #2366
  * Associate pdm.lock with TOML syntax, see #2410
  * Todo.txt: Fix highlighting of contexts and projects at beginning
    of done.txt, see #2411
  * cmd-help: overhaul scope names (colors) to improve theme
    support; misc syntax improvements. See #2419
  * Added support for Crontab, see #2509</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1699012800">- Update to 0.24.0:
  Features:
  * Add environment variable BAT_PAGING, see #2629
  * Add opt-in (--features lessopen) support for LESSOPEN and
    LESSCLOSE. See #1597, #1739, #2444, #2602, and #2662
  Bugfixes:
  * Fix more not being found on Windows when provided via
    BAT_PAGER, see #2570, #2580, and #2651
  * Switched default behavior of --map-syntax to be case
    insensitive #2520
  * Updated version of serde_yaml to 0.9. See #2627
  * Fix arithmetic overflow in LineRange::from and
    LineRange::parse_range, see #2674, #2698
  * Fix paging not happening when stdout is interactive but stdin
    is not, see #2574
  * Make -pp override --paging and vice versa when passed as a
    later argument, see #2660
  Other:
  * Output directory for generated assets (completion, manual) can
    be customized, see #2515
  * Use the is-terminal crate instead of atty, see #2530
  * Add Winget Releaser workflow, see #2519
  * Bump MSRV to 1.70, see #2651
  Syntaxes:
  * Associate os-release with bash syntax, see #2587
  * Associate Containerfile with Dockerfile syntax, see #2606
  * Replaced quotes with double quotes so fzf integration example
    script works on windows and linux. see #2095
  * Associate ksh files with bash syntax, see #2633
  * Associate sarif files with JSON syntax, see #2695
  * Associate ron files with rust syntax, see #2427
  * Add support for WebGPU Shader Language, see #2692
  * Add .dpkg-new and .dpkg-tmp to ignored suffixe, see #2595
  * fix: Add syntax mapping *.jsonl =&gt; json, see #2539
  * Update Julia syntax, see #2553
  * add NSIS support, see #2577
  * Update ssh-config, see #2697</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1732017600">- Update vendored dependencies to fix build failures on newer rust versions
- Remove cargo_config since it is now included in vendor.tar.xz by the obs service</changelog>
</package>
<package pkgid="547696fa27e941b7d700228a87ac20c1064f6031ba57c12283647fd95db85f999d501e49f747d4252d528019942fb4d4ffbe7e4dd52afe9cf0c71d3d4a44f011" name="bat-bash-completion" arch="noarch">
  <version epoch="0" ver="0.24.0" rel="bp160.1.1"/>
  <changelog author="mvetter@suse.com" date="1629288000">- Update to f3d53b to fix build on Tumbleweed because of Rust 1.54
    See https://github.com/sharkdp/bat/issues/1796
  * Update git2 dependency to fix incompatibility with Rust 1.54
  * Reduce startup time in loop-through mode with 80%-90%
  * HighlightingAssets: Move out fn get_integrated_*set() to module scope
  * Support a hidden arg --no-custom-assets that skips loading assets from the cache
  * HighlightingAssets: Make .syntaxes() and syntax_for_file_name() failable
  * HighlightingAssets::get_extension_syntax(): Split up into smaller methods
  * Make loading of cached assets closer in performance to integrated assets
  * Add Enselic in FUNDING.yml
  * Update battest.py
  * Add `rs` identifier for Rust code blocks in Markdown
  * Update CHANGELOG
  * Add groff syntax
  * Add custom FUNDING.yml
  * HighlightingAssets: Introduce private fn new() helper
  * HighlightingAssets: Encapsulate syntax_set behind a getter
  * De-duplicate some themes.bin and syntaxes.bin related code
  * Fix typo in README</changelog>
  <changelog author="william.brown@suse.com" date="1633003200">- Replace rust-packaging with cargo-packaging</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650283200">- Update to version 0.20.0
  * New style component header-filesize to show size of the displayed
    file in the header.
  * Use underline for line highlighting on ANSI
  * Fix bash completion on bash 3.x and bash-completion 1.x.
- Update to version 0.19.0
  * Reduce startup time in loop-through mode by 90%.
  * Load themes lazily to make bat start 25% faster when disregarding
    syntax load time.
  * Python syntax highlighting no longer suffers from abysmal performance
    in specific scenarios.
  * Fix for poor performance when ANSI escape sequences are piped to bat
  * Fix for incorrect handling of ANSI escape sequences when
    using --wrap=never
  * Load custom assets as fast as integrated assets
  * Support for x:-delta (minus) syntax in line ranges
  * Support for --ignored-suffix argument.
  * $BAT_CONFIG_DIR is now a recognized environment variable. It has
    precedence over $XDG_CONFIG_HOME
  * Support for x:+delta syntax in line ranges (e.g. 20:+10)
  * Add new --acknowledgements option that gives credit to theme and
    syntax definition authors
  * Fix: First line not shown in diff context.
  * Fix: Do not ignore syntaxes that handle file names with
    a *.conf extension.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1653912000">- Update to version 0.21.0:
  * assets/create.sh
  * Bump to v0.21.0
  * Make `INI` syntax register as handler of `.inf` files
  * release-checklist.md: Don't recommend `--allow-dirty` to cargo publish
  * release-checklist.md: Recommend looking at the tip of master for `-h` and `man`
  * release-checklist.md: Recommend `--locked` for `cargo install`
  * release-checklist.md: Recommend a single git grep command for MSRV
  * CHANGELOG.md: Clean up and tweak
  * Bump to syntect 5.0.0 to e.g. start lazy-loading syntaxes (#2181)
  * Simplify release-checklist.md by printing `-h`, `--help` and `man` in CI (#2183)
  * Bump assets/syntaxes/02_Extra/Zig from `87ecbca` to `1a4a384` (#2136)
  * Add `--relative` to `batdiff` in README.md (#2172)
  * printer.rs: De-duplicate code to highlight long lines
  * Limit nix features
  * Add a --style=default option (#2119)
  * Bump assets/syntaxes/02_Extra/Nginx from `15a1db1` to `65f5a63`
  * Skip syntax highlighting for long lines (#2165)
  * Add support for BusyBox less as pager (#2162)
  * Bump nix from 0.23.1 to 0.24.1
  * Bump flate2 from 1.0.22 to 1.0.23
  * Bump thiserror from 1.0.30 to 1.0.31
  * Run `cargo clippy --fix --all-targets --all-features` with Rust 1.60
  * Add mapping for Unix mail spool (#2156)
  * Bump assets/syntaxes/02_Extra/Fish from `cd95616` to `98316d4`
  * Syntax: add cmd-help (#2148)
  * bug_report.md template: Explicitly ask for steps
  * bug_report.md template: Mention some already reported bugs
  * Print info about custom assets in --diagnostics
  * Lock regex crate at min 1.5.5 for CVE-2022-24713
  * Allow configuring show_nonprintable from PrettyPrinter
  * Bump git2 from 0.14.1 to 0.14.2
  * Bump once_cell from 1.9.0 to 1.10.0
  * Bump regex from 1.5.4 to 1.5.5
  * Bump semver from 1.0.6 to 1.0.7
  * Bump assets/syntaxes/02_Extra/Fish from `2c254cc` to `cd95616`
  * Syntax: [Log] highlight escape characters in double quoted strings
  * Include contents of custom assets `metadata.yaml` in `--diagnostics`
  * Bump shell-words from 1.0.0 to 1.1.0
  * Bump git2 from 0.13.25 to 0.14.1
  * Updated test names
  * correctly handle multiple tabs in one line
  * add show_all_tabstops_long integration test
  * add show_all_tabstops integration test
  * Correctly render tab stops
  * Syntax: add clang-format (#2076)
  * Bump serial_test from 0.5.1 to 0.6.0
  * Bump semver from 1.0.4 to 1.0.6
  * Bump predicates from 2.1.0 to 2.1.1
  * release-checklist: Remind where to push tags in forks</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663070400">- Update to version 0.22.1:
  - v0.22.1
  * Bugfixes
  - Bring back pre-processing of ANSI escape characters to so that some
    common bat use cases starts working again. See #2308 (@Enselic)
  - v0.22.0
  * Features
  - Make the default macOS theme depend on Dark Mode.
    See #2197, #1746 (@Enselic)
  - Support for separate system and user config files.
    See #668 (@patrickpichler)
  * Bugfixes
  - Prevent fork nightmare with PAGER=batcat. See #2235 (@johnmatthiggins)
  - Make --no-paging/-P override --paging=... if passed as a later arg,
    see #2201 (@themkat)
  - --map-syntax and --ignored-suffix now works together, see #2093 (@czzrr)
  - Strips byte order mark from output when in non-loop-through mode.
    See #1922 (@dag-h)
  * Other
  - Relaxed glibc requirements on amd64, see #2106 and #2194 (@sharkdp)
  - Improved fish completions. See #2275 (@zgracem)
  - Stop pre-processing ANSI escape characters. Syntax highlighting on ANSI
    escaped input is not supported. See #2185 and #2189 (@Enselic)
  * Syntaxes
  - NSE (Nmap Scripting Engine) is mapped to Lua, see #2151 (@Cre3per)
  - Correctly color fstab dump and pass fields, see #2246 (@yuvalmo)
  - Update Command Help syntax, see #2255
  - Julia: Fix syntax highlighting for function name starting with struct,
    see #2230
  - Minor update to LiveScript, see #2291
  - Associate .mts and .cts files with the TypeScript syntax.
    See #2236 (@kidonng)
  - Fish history is mapped to YAML. See #2237 (@kidonng)
  * bat as a library
  - Make bat::PrettyPrinter::syntaxes() iterate over new bat::Syntax struct
    instead of &amp;syntect::parsing::SyntaxReference. See #2222 (@Enselic)
  - Clear highlights after printing, see #1919 and #1920 (@rhysd)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1665748800">- Update vendored dependencies
- Add _constraints to prevent OBS workers randomly failing</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669809600">- Add shell completion packages
- Install manpage</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1679745600">- Update to 0.23.0:
  Features:
  * Implemented -S and --chop-long-lines flags as aliases for
  - -wrap=never. See #2309
  * Breaking change: Environment variables can now override config
    file settings (but command-line arguments still have the highest
    precedence), see #1152, #1281, and #2381
  * Implemented --nonprintable-notation=caret to support showing
    non-printable characters using caret notation. See #2429
  Bugfixes:
  * Fix bat cache --clear not clearing the --target dir if specified. See #2393
  Other:
  * Various bash completion improvements, see #2310
  * Disable completion of cache subcommand, see #2399
  * Signifigantly improve startup performance on macOS, see #2442
  * Bump MSRV to 1.62, see #2496
  Syntaxes:
  * Added support for Ada, see #1300 and #2316
  * Added todo.txt syntax, see #2375
  * Improve Manpage.sublime-syntax. See #2364 and #2461
  * Added a new requirements.txt syntax, see #2361
  * Added a new VimHelp syntax, see #2366
  * Associate pdm.lock with TOML syntax, see #2410
  * Todo.txt: Fix highlighting of contexts and projects at beginning
    of done.txt, see #2411
  * cmd-help: overhaul scope names (colors) to improve theme
    support; misc syntax improvements. See #2419
  * Added support for Crontab, see #2509</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1699012800">- Update to 0.24.0:
  Features:
  * Add environment variable BAT_PAGING, see #2629
  * Add opt-in (--features lessopen) support for LESSOPEN and
    LESSCLOSE. See #1597, #1739, #2444, #2602, and #2662
  Bugfixes:
  * Fix more not being found on Windows when provided via
    BAT_PAGER, see #2570, #2580, and #2651
  * Switched default behavior of --map-syntax to be case
    insensitive #2520
  * Updated version of serde_yaml to 0.9. See #2627
  * Fix arithmetic overflow in LineRange::from and
    LineRange::parse_range, see #2674, #2698
  * Fix paging not happening when stdout is interactive but stdin
    is not, see #2574
  * Make -pp override --paging and vice versa when passed as a
    later argument, see #2660
  Other:
  * Output directory for generated assets (completion, manual) can
    be customized, see #2515
  * Use the is-terminal crate instead of atty, see #2530
  * Add Winget Releaser workflow, see #2519
  * Bump MSRV to 1.70, see #2651
  Syntaxes:
  * Associate os-release with bash syntax, see #2587
  * Associate Containerfile with Dockerfile syntax, see #2606
  * Replaced quotes with double quotes so fzf integration example
    script works on windows and linux. see #2095
  * Associate ksh files with bash syntax, see #2633
  * Associate sarif files with JSON syntax, see #2695
  * Associate ron files with rust syntax, see #2427
  * Add support for WebGPU Shader Language, see #2692
  * Add .dpkg-new and .dpkg-tmp to ignored suffixe, see #2595
  * fix: Add syntax mapping *.jsonl =&gt; json, see #2539
  * Update Julia syntax, see #2553
  * add NSIS support, see #2577
  * Update ssh-config, see #2697</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1732017600">- Update vendored dependencies to fix build failures on newer rust versions
- Remove cargo_config since it is now included in vendor.tar.xz by the obs service</changelog>
</package>
<package pkgid="5fc519d570f3002bce11e09f8dc45a27193dea1df88fe944ef08ad9e8babd3a22521f1efc082adba07b498c77695d0bff69630f0249c02968364d67349a4c997" name="bat-fish-completion" arch="noarch">
  <version epoch="0" ver="0.24.0" rel="bp160.1.1"/>
  <changelog author="mvetter@suse.com" date="1629288000">- Update to f3d53b to fix build on Tumbleweed because of Rust 1.54
    See https://github.com/sharkdp/bat/issues/1796
  * Update git2 dependency to fix incompatibility with Rust 1.54
  * Reduce startup time in loop-through mode with 80%-90%
  * HighlightingAssets: Move out fn get_integrated_*set() to module scope
  * Support a hidden arg --no-custom-assets that skips loading assets from the cache
  * HighlightingAssets: Make .syntaxes() and syntax_for_file_name() failable
  * HighlightingAssets::get_extension_syntax(): Split up into smaller methods
  * Make loading of cached assets closer in performance to integrated assets
  * Add Enselic in FUNDING.yml
  * Update battest.py
  * Add `rs` identifier for Rust code blocks in Markdown
  * Update CHANGELOG
  * Add groff syntax
  * Add custom FUNDING.yml
  * HighlightingAssets: Introduce private fn new() helper
  * HighlightingAssets: Encapsulate syntax_set behind a getter
  * De-duplicate some themes.bin and syntaxes.bin related code
  * Fix typo in README</changelog>
  <changelog author="william.brown@suse.com" date="1633003200">- Replace rust-packaging with cargo-packaging</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650283200">- Update to version 0.20.0
  * New style component header-filesize to show size of the displayed
    file in the header.
  * Use underline for line highlighting on ANSI
  * Fix bash completion on bash 3.x and bash-completion 1.x.
- Update to version 0.19.0
  * Reduce startup time in loop-through mode by 90%.
  * Load themes lazily to make bat start 25% faster when disregarding
    syntax load time.
  * Python syntax highlighting no longer suffers from abysmal performance
    in specific scenarios.
  * Fix for poor performance when ANSI escape sequences are piped to bat
  * Fix for incorrect handling of ANSI escape sequences when
    using --wrap=never
  * Load custom assets as fast as integrated assets
  * Support for x:-delta (minus) syntax in line ranges
  * Support for --ignored-suffix argument.
  * $BAT_CONFIG_DIR is now a recognized environment variable. It has
    precedence over $XDG_CONFIG_HOME
  * Support for x:+delta syntax in line ranges (e.g. 20:+10)
  * Add new --acknowledgements option that gives credit to theme and
    syntax definition authors
  * Fix: First line not shown in diff context.
  * Fix: Do not ignore syntaxes that handle file names with
    a *.conf extension.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1653912000">- Update to version 0.21.0:
  * assets/create.sh
  * Bump to v0.21.0
  * Make `INI` syntax register as handler of `.inf` files
  * release-checklist.md: Don't recommend `--allow-dirty` to cargo publish
  * release-checklist.md: Recommend looking at the tip of master for `-h` and `man`
  * release-checklist.md: Recommend `--locked` for `cargo install`
  * release-checklist.md: Recommend a single git grep command for MSRV
  * CHANGELOG.md: Clean up and tweak
  * Bump to syntect 5.0.0 to e.g. start lazy-loading syntaxes (#2181)
  * Simplify release-checklist.md by printing `-h`, `--help` and `man` in CI (#2183)
  * Bump assets/syntaxes/02_Extra/Zig from `87ecbca` to `1a4a384` (#2136)
  * Add `--relative` to `batdiff` in README.md (#2172)
  * printer.rs: De-duplicate code to highlight long lines
  * Limit nix features
  * Add a --style=default option (#2119)
  * Bump assets/syntaxes/02_Extra/Nginx from `15a1db1` to `65f5a63`
  * Skip syntax highlighting for long lines (#2165)
  * Add support for BusyBox less as pager (#2162)
  * Bump nix from 0.23.1 to 0.24.1
  * Bump flate2 from 1.0.22 to 1.0.23
  * Bump thiserror from 1.0.30 to 1.0.31
  * Run `cargo clippy --fix --all-targets --all-features` with Rust 1.60
  * Add mapping for Unix mail spool (#2156)
  * Bump assets/syntaxes/02_Extra/Fish from `cd95616` to `98316d4`
  * Syntax: add cmd-help (#2148)
  * bug_report.md template: Explicitly ask for steps
  * bug_report.md template: Mention some already reported bugs
  * Print info about custom assets in --diagnostics
  * Lock regex crate at min 1.5.5 for CVE-2022-24713
  * Allow configuring show_nonprintable from PrettyPrinter
  * Bump git2 from 0.14.1 to 0.14.2
  * Bump once_cell from 1.9.0 to 1.10.0
  * Bump regex from 1.5.4 to 1.5.5
  * Bump semver from 1.0.6 to 1.0.7
  * Bump assets/syntaxes/02_Extra/Fish from `2c254cc` to `cd95616`
  * Syntax: [Log] highlight escape characters in double quoted strings
  * Include contents of custom assets `metadata.yaml` in `--diagnostics`
  * Bump shell-words from 1.0.0 to 1.1.0
  * Bump git2 from 0.13.25 to 0.14.1
  * Updated test names
  * correctly handle multiple tabs in one line
  * add show_all_tabstops_long integration test
  * add show_all_tabstops integration test
  * Correctly render tab stops
  * Syntax: add clang-format (#2076)
  * Bump serial_test from 0.5.1 to 0.6.0
  * Bump semver from 1.0.4 to 1.0.6
  * Bump predicates from 2.1.0 to 2.1.1
  * release-checklist: Remind where to push tags in forks</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663070400">- Update to version 0.22.1:
  - v0.22.1
  * Bugfixes
  - Bring back pre-processing of ANSI escape characters to so that some
    common bat use cases starts working again. See #2308 (@Enselic)
  - v0.22.0
  * Features
  - Make the default macOS theme depend on Dark Mode.
    See #2197, #1746 (@Enselic)
  - Support for separate system and user config files.
    See #668 (@patrickpichler)
  * Bugfixes
  - Prevent fork nightmare with PAGER=batcat. See #2235 (@johnmatthiggins)
  - Make --no-paging/-P override --paging=... if passed as a later arg,
    see #2201 (@themkat)
  - --map-syntax and --ignored-suffix now works together, see #2093 (@czzrr)
  - Strips byte order mark from output when in non-loop-through mode.
    See #1922 (@dag-h)
  * Other
  - Relaxed glibc requirements on amd64, see #2106 and #2194 (@sharkdp)
  - Improved fish completions. See #2275 (@zgracem)
  - Stop pre-processing ANSI escape characters. Syntax highlighting on ANSI
    escaped input is not supported. See #2185 and #2189 (@Enselic)
  * Syntaxes
  - NSE (Nmap Scripting Engine) is mapped to Lua, see #2151 (@Cre3per)
  - Correctly color fstab dump and pass fields, see #2246 (@yuvalmo)
  - Update Command Help syntax, see #2255
  - Julia: Fix syntax highlighting for function name starting with struct,
    see #2230
  - Minor update to LiveScript, see #2291
  - Associate .mts and .cts files with the TypeScript syntax.
    See #2236 (@kidonng)
  - Fish history is mapped to YAML. See #2237 (@kidonng)
  * bat as a library
  - Make bat::PrettyPrinter::syntaxes() iterate over new bat::Syntax struct
    instead of &amp;syntect::parsing::SyntaxReference. See #2222 (@Enselic)
  - Clear highlights after printing, see #1919 and #1920 (@rhysd)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1665748800">- Update vendored dependencies
- Add _constraints to prevent OBS workers randomly failing</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669809600">- Add shell completion packages
- Install manpage</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1679745600">- Update to 0.23.0:
  Features:
  * Implemented -S and --chop-long-lines flags as aliases for
  - -wrap=never. See #2309
  * Breaking change: Environment variables can now override config
    file settings (but command-line arguments still have the highest
    precedence), see #1152, #1281, and #2381
  * Implemented --nonprintable-notation=caret to support showing
    non-printable characters using caret notation. See #2429
  Bugfixes:
  * Fix bat cache --clear not clearing the --target dir if specified. See #2393
  Other:
  * Various bash completion improvements, see #2310
  * Disable completion of cache subcommand, see #2399
  * Signifigantly improve startup performance on macOS, see #2442
  * Bump MSRV to 1.62, see #2496
  Syntaxes:
  * Added support for Ada, see #1300 and #2316
  * Added todo.txt syntax, see #2375
  * Improve Manpage.sublime-syntax. See #2364 and #2461
  * Added a new requirements.txt syntax, see #2361
  * Added a new VimHelp syntax, see #2366
  * Associate pdm.lock with TOML syntax, see #2410
  * Todo.txt: Fix highlighting of contexts and projects at beginning
    of done.txt, see #2411
  * cmd-help: overhaul scope names (colors) to improve theme
    support; misc syntax improvements. See #2419
  * Added support for Crontab, see #2509</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1699012800">- Update to 0.24.0:
  Features:
  * Add environment variable BAT_PAGING, see #2629
  * Add opt-in (--features lessopen) support for LESSOPEN and
    LESSCLOSE. See #1597, #1739, #2444, #2602, and #2662
  Bugfixes:
  * Fix more not being found on Windows when provided via
    BAT_PAGER, see #2570, #2580, and #2651
  * Switched default behavior of --map-syntax to be case
    insensitive #2520
  * Updated version of serde_yaml to 0.9. See #2627
  * Fix arithmetic overflow in LineRange::from and
    LineRange::parse_range, see #2674, #2698
  * Fix paging not happening when stdout is interactive but stdin
    is not, see #2574
  * Make -pp override --paging and vice versa when passed as a
    later argument, see #2660
  Other:
  * Output directory for generated assets (completion, manual) can
    be customized, see #2515
  * Use the is-terminal crate instead of atty, see #2530
  * Add Winget Releaser workflow, see #2519
  * Bump MSRV to 1.70, see #2651
  Syntaxes:
  * Associate os-release with bash syntax, see #2587
  * Associate Containerfile with Dockerfile syntax, see #2606
  * Replaced quotes with double quotes so fzf integration example
    script works on windows and linux. see #2095
  * Associate ksh files with bash syntax, see #2633
  * Associate sarif files with JSON syntax, see #2695
  * Associate ron files with rust syntax, see #2427
  * Add support for WebGPU Shader Language, see #2692
  * Add .dpkg-new and .dpkg-tmp to ignored suffixe, see #2595
  * fix: Add syntax mapping *.jsonl =&gt; json, see #2539
  * Update Julia syntax, see #2553
  * add NSIS support, see #2577
  * Update ssh-config, see #2697</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1732017600">- Update vendored dependencies to fix build failures on newer rust versions
- Remove cargo_config since it is now included in vendor.tar.xz by the obs service</changelog>
</package>
<package pkgid="902400176048ff204db8f93644775163add14dab0407d178557b28d22519c2cf22c63dd8241dc790e23401c3966e1b901610e4b12dada793d311d1e1cbb47146" name="bat-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.24.0" rel="bp160.1.1"/>
  <changelog author="mvetter@suse.com" date="1629288000">- Update to f3d53b to fix build on Tumbleweed because of Rust 1.54
    See https://github.com/sharkdp/bat/issues/1796
  * Update git2 dependency to fix incompatibility with Rust 1.54
  * Reduce startup time in loop-through mode with 80%-90%
  * HighlightingAssets: Move out fn get_integrated_*set() to module scope
  * Support a hidden arg --no-custom-assets that skips loading assets from the cache
  * HighlightingAssets: Make .syntaxes() and syntax_for_file_name() failable
  * HighlightingAssets::get_extension_syntax(): Split up into smaller methods
  * Make loading of cached assets closer in performance to integrated assets
  * Add Enselic in FUNDING.yml
  * Update battest.py
  * Add `rs` identifier for Rust code blocks in Markdown
  * Update CHANGELOG
  * Add groff syntax
  * Add custom FUNDING.yml
  * HighlightingAssets: Introduce private fn new() helper
  * HighlightingAssets: Encapsulate syntax_set behind a getter
  * De-duplicate some themes.bin and syntaxes.bin related code
  * Fix typo in README</changelog>
  <changelog author="william.brown@suse.com" date="1633003200">- Replace rust-packaging with cargo-packaging</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650283200">- Update to version 0.20.0
  * New style component header-filesize to show size of the displayed
    file in the header.
  * Use underline for line highlighting on ANSI
  * Fix bash completion on bash 3.x and bash-completion 1.x.
- Update to version 0.19.0
  * Reduce startup time in loop-through mode by 90%.
  * Load themes lazily to make bat start 25% faster when disregarding
    syntax load time.
  * Python syntax highlighting no longer suffers from abysmal performance
    in specific scenarios.
  * Fix for poor performance when ANSI escape sequences are piped to bat
  * Fix for incorrect handling of ANSI escape sequences when
    using --wrap=never
  * Load custom assets as fast as integrated assets
  * Support for x:-delta (minus) syntax in line ranges
  * Support for --ignored-suffix argument.
  * $BAT_CONFIG_DIR is now a recognized environment variable. It has
    precedence over $XDG_CONFIG_HOME
  * Support for x:+delta syntax in line ranges (e.g. 20:+10)
  * Add new --acknowledgements option that gives credit to theme and
    syntax definition authors
  * Fix: First line not shown in diff context.
  * Fix: Do not ignore syntaxes that handle file names with
    a *.conf extension.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1653912000">- Update to version 0.21.0:
  * assets/create.sh
  * Bump to v0.21.0
  * Make `INI` syntax register as handler of `.inf` files
  * release-checklist.md: Don't recommend `--allow-dirty` to cargo publish
  * release-checklist.md: Recommend looking at the tip of master for `-h` and `man`
  * release-checklist.md: Recommend `--locked` for `cargo install`
  * release-checklist.md: Recommend a single git grep command for MSRV
  * CHANGELOG.md: Clean up and tweak
  * Bump to syntect 5.0.0 to e.g. start lazy-loading syntaxes (#2181)
  * Simplify release-checklist.md by printing `-h`, `--help` and `man` in CI (#2183)
  * Bump assets/syntaxes/02_Extra/Zig from `87ecbca` to `1a4a384` (#2136)
  * Add `--relative` to `batdiff` in README.md (#2172)
  * printer.rs: De-duplicate code to highlight long lines
  * Limit nix features
  * Add a --style=default option (#2119)
  * Bump assets/syntaxes/02_Extra/Nginx from `15a1db1` to `65f5a63`
  * Skip syntax highlighting for long lines (#2165)
  * Add support for BusyBox less as pager (#2162)
  * Bump nix from 0.23.1 to 0.24.1
  * Bump flate2 from 1.0.22 to 1.0.23
  * Bump thiserror from 1.0.30 to 1.0.31
  * Run `cargo clippy --fix --all-targets --all-features` with Rust 1.60
  * Add mapping for Unix mail spool (#2156)
  * Bump assets/syntaxes/02_Extra/Fish from `cd95616` to `98316d4`
  * Syntax: add cmd-help (#2148)
  * bug_report.md template: Explicitly ask for steps
  * bug_report.md template: Mention some already reported bugs
  * Print info about custom assets in --diagnostics
  * Lock regex crate at min 1.5.5 for CVE-2022-24713
  * Allow configuring show_nonprintable from PrettyPrinter
  * Bump git2 from 0.14.1 to 0.14.2
  * Bump once_cell from 1.9.0 to 1.10.0
  * Bump regex from 1.5.4 to 1.5.5
  * Bump semver from 1.0.6 to 1.0.7
  * Bump assets/syntaxes/02_Extra/Fish from `2c254cc` to `cd95616`
  * Syntax: [Log] highlight escape characters in double quoted strings
  * Include contents of custom assets `metadata.yaml` in `--diagnostics`
  * Bump shell-words from 1.0.0 to 1.1.0
  * Bump git2 from 0.13.25 to 0.14.1
  * Updated test names
  * correctly handle multiple tabs in one line
  * add show_all_tabstops_long integration test
  * add show_all_tabstops integration test
  * Correctly render tab stops
  * Syntax: add clang-format (#2076)
  * Bump serial_test from 0.5.1 to 0.6.0
  * Bump semver from 1.0.4 to 1.0.6
  * Bump predicates from 2.1.0 to 2.1.1
  * release-checklist: Remind where to push tags in forks</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663070400">- Update to version 0.22.1:
  - v0.22.1
  * Bugfixes
  - Bring back pre-processing of ANSI escape characters to so that some
    common bat use cases starts working again. See #2308 (@Enselic)
  - v0.22.0
  * Features
  - Make the default macOS theme depend on Dark Mode.
    See #2197, #1746 (@Enselic)
  - Support for separate system and user config files.
    See #668 (@patrickpichler)
  * Bugfixes
  - Prevent fork nightmare with PAGER=batcat. See #2235 (@johnmatthiggins)
  - Make --no-paging/-P override --paging=... if passed as a later arg,
    see #2201 (@themkat)
  - --map-syntax and --ignored-suffix now works together, see #2093 (@czzrr)
  - Strips byte order mark from output when in non-loop-through mode.
    See #1922 (@dag-h)
  * Other
  - Relaxed glibc requirements on amd64, see #2106 and #2194 (@sharkdp)
  - Improved fish completions. See #2275 (@zgracem)
  - Stop pre-processing ANSI escape characters. Syntax highlighting on ANSI
    escaped input is not supported. See #2185 and #2189 (@Enselic)
  * Syntaxes
  - NSE (Nmap Scripting Engine) is mapped to Lua, see #2151 (@Cre3per)
  - Correctly color fstab dump and pass fields, see #2246 (@yuvalmo)
  - Update Command Help syntax, see #2255
  - Julia: Fix syntax highlighting for function name starting with struct,
    see #2230
  - Minor update to LiveScript, see #2291
  - Associate .mts and .cts files with the TypeScript syntax.
    See #2236 (@kidonng)
  - Fish history is mapped to YAML. See #2237 (@kidonng)
  * bat as a library
  - Make bat::PrettyPrinter::syntaxes() iterate over new bat::Syntax struct
    instead of &amp;syntect::parsing::SyntaxReference. See #2222 (@Enselic)
  - Clear highlights after printing, see #1919 and #1920 (@rhysd)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1665748800">- Update vendored dependencies
- Add _constraints to prevent OBS workers randomly failing</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1669809600">- Add shell completion packages
- Install manpage</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1679745600">- Update to 0.23.0:
  Features:
  * Implemented -S and --chop-long-lines flags as aliases for
  - -wrap=never. See #2309
  * Breaking change: Environment variables can now override config
    file settings (but command-line arguments still have the highest
    precedence), see #1152, #1281, and #2381
  * Implemented --nonprintable-notation=caret to support showing
    non-printable characters using caret notation. See #2429
  Bugfixes:
  * Fix bat cache --clear not clearing the --target dir if specified. See #2393
  Other:
  * Various bash completion improvements, see #2310
  * Disable completion of cache subcommand, see #2399
  * Signifigantly improve startup performance on macOS, see #2442
  * Bump MSRV to 1.62, see #2496
  Syntaxes:
  * Added support for Ada, see #1300 and #2316
  * Added todo.txt syntax, see #2375
  * Improve Manpage.sublime-syntax. See #2364 and #2461
  * Added a new requirements.txt syntax, see #2361
  * Added a new VimHelp syntax, see #2366
  * Associate pdm.lock with TOML syntax, see #2410
  * Todo.txt: Fix highlighting of contexts and projects at beginning
    of done.txt, see #2411
  * cmd-help: overhaul scope names (colors) to improve theme
    support; misc syntax improvements. See #2419
  * Added support for Crontab, see #2509</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1699012800">- Update to 0.24.0:
  Features:
  * Add environment variable BAT_PAGING, see #2629
  * Add opt-in (--features lessopen) support for LESSOPEN and
    LESSCLOSE. See #1597, #1739, #2444, #2602, and #2662
  Bugfixes:
  * Fix more not being found on Windows when provided via
    BAT_PAGER, see #2570, #2580, and #2651
  * Switched default behavior of --map-syntax to be case
    insensitive #2520
  * Updated version of serde_yaml to 0.9. See #2627
  * Fix arithmetic overflow in LineRange::from and
    LineRange::parse_range, see #2674, #2698
  * Fix paging not happening when stdout is interactive but stdin
    is not, see #2574
  * Make -pp override --paging and vice versa when passed as a
    later argument, see #2660
  Other:
  * Output directory for generated assets (completion, manual) can
    be customized, see #2515
  * Use the is-terminal crate instead of atty, see #2530
  * Add Winget Releaser workflow, see #2519
  * Bump MSRV to 1.70, see #2651
  Syntaxes:
  * Associate os-release with bash syntax, see #2587
  * Associate Containerfile with Dockerfile syntax, see #2606
  * Replaced quotes with double quotes so fzf integration example
    script works on windows and linux. see #2095
  * Associate ksh files with bash syntax, see #2633
  * Associate sarif files with JSON syntax, see #2695
  * Associate ron files with rust syntax, see #2427
  * Add support for WebGPU Shader Language, see #2692
  * Add .dpkg-new and .dpkg-tmp to ignored suffixe, see #2595
  * fix: Add syntax mapping *.jsonl =&gt; json, see #2539
  * Update Julia syntax, see #2553
  * add NSIS support, see #2577
  * Update ssh-config, see #2697</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1732017600">- Update vendored dependencies to fix build failures on newer rust versions
- Remove cargo_config since it is now included in vendor.tar.xz by the obs service</changelog>
</package>
<package pkgid="eba954d2a8ce2737e636c1d21acbd49f235b00fdf94aec5585a12d4208889a33003894aff1bfba1b43fdef65552aad58952f09dee7a32a0d3511a35e8d41eb5d" name="bats" arch="noarch">
  <version epoch="0" ver="1.11.1" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1637755200">- update to 1.5.0:
  * new command line flags
  * `--verbose-run`: Make `run` print `$output` by default
  * `-x`, `--trace`: Print test commands as they are executed (like `set -x`)`
  * `--show-output-of-passing-tests`: Print output of passing tests
  * `--print-output-on-failure`: Automatically print the value of  `$output` on
    failed tests
  * `--gather-test-outputs-in &lt;directory&gt;`: Gather the output of failing **and**
    passing tests as files in directory
  * Experimental: add return code checks to `run` via `!`/`-&lt;N&gt;`
  * `install.sh` and `uninstall.sh` take an optional second parameter for the lib
    folder name to allow for multilib install, e.g. into lib64
  * add `run` flag `--keep-empty-lines` to retain empty lines in `${lines[@]}`
  * add `run` flag `--separate-stderr` which also fills `$stderr` and
    `$stderr_lines`
  * don't glob `run`'s `$output` when splitting into `${lines[@]}`
  * remove empty line after test with pretty formatter on some terminals
  * don't run setup_file/teardown_file on files without tests, e.g. due to
    filtering
  * print final line without newline on Bash 3.2 for midtest (ERREXIT) failures
  * abort with error on missing flock/shlock when running in parallel mode
  * improved `set -u` test and fixed some unset variable accesses
  * shorten suite/file/test temporary folder paths to leave enough space even on
    restricted systems
  * added BATS_TEST_TMPDIR, BATS_FILE_TMPDIR, BATS_SUITE_TMPDIR
  * added checks and improved documentation for `$BATS_TMPDIR`
  * the docker container now uses [tini](https://github.com/krallin/tini) as the
    container entrypoint to improve signal forwarding
  * script to uninstall bats from a given prefix
  * replace preprocessed file path (e.g. `/tmp/bats-run-22908-NP0f9h/bats.23102.src`)
    with original filename in stdout/err (but not FD3!)
  * print aborted command on SIGINT/CTRL+C
  * print error message when BATS_RUN_TMPDIR could not be created</changelog>
  <changelog author="seroton10@gmail.com" date="1639224000">- boo#1193177: Fix build on Leap and SLE</changelog>
  <changelog author="rpm@fthiessen.de" date="1650283200">- Update to version 1.6.0
  * Added: New flag --code-quote-style (and $BATS_CODE_QUOTE_STYLE)
    to customize quotes around code blocks in error output
  * Added: bats_load_library for loading libraries from the search
    path $BATS_LIB_PATH
  * Improved error trace for some broken cases
  * Fixed leaking of local variables from debug trap
  * Don't mark FD3 output from teardown_file as &lt;failure&gt; in junit
    output
  * Fix unbound variable error with Bash pre 4.4</changelog>
  <changelog author="seroton10@gmail.com" date="1654689600">- Update to version 1.6.1:
  * prevent teardown, teardown_file, and teardown_suite from overriding bats'
    exit code by setting $status (e.g. via calling run) (#581, #575)
  - CRITICAL: this can return exit code 0 despite failed tests, thus
    preventing your CI from reporting test failures! The regression happened
    in version 1.6.0.
  * corrected invalid documentation of run -N (had =N instead) (#579)
  - CRITICAL: using the incorrect form can lead to silent errors. See issue
    [#578] for more details and how to find out if your tests are affected.</changelog>
  <changelog author="seroton10@gmail.com" date="1655294400">- Update to version 1.7.0:
  * Pretty formatter print filename when entering file (#561)
  * BATS_TEST_NAME_PREFIX allows prefixing test names on stdout and in reports (#561)
  * setup_suite and teardown_suite (#571, #585)
  * out-of-band warning infrastructure, with following warnings:
  * BW01: run command not found (exit code 127)  (#586)
  * BW02: run uses flags without proper `bats_require_minimum_version` guard (#587)
  * `bats_require_minimum_version` to guard code that would not run on older
    versions (#587)
  * unbound variable errors in formatters when using `SHELLOPTS=nounset` (`-u`) (#558)
  * don't require `flock` *and* `shlock` for parallel mode test (#554)
  * print name of failing test when using TAP13 with timing information (#559, #555)
  * removed broken symlink, added regression test (#560)
  * don't show empty lines as `#` with pretty formatter  (#561)
  * prevent `teardown`, `teardown_file`, and `teardown_suite` from overriding bats'
    exit code by setting `$status` (e.g. via calling `run`) (#581, #575)
  * **CRITICAL**: this can return exit code 0 despite failed tests, thus preventing
    your CI from reporting test failures! The regression happened in version 1.6.0.
  * `run --keep-empty-lines` now reports 0 lines on empty `$output` (#583)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1667908800">- Update to version 1.8.2:
  * fix non zero return code on successful retried tests
  * avoid kernel warning flood/hang with CTRL+C on Bash 5.2 RC
  * Fix infinite wait with (invalid) -j&lt;n&gt; (without space)
  * using external formatters via --formatter &lt;absolute path&gt; (also works for --report-formatter)
  * running only tests that failed in the last run via --filter-status failed
  * variable BATS_TEST_RETRIES that specifies how often a test should be reattempted before it is considered failed
  * BATS_TEST_TIMEOUT variable to force a timeout on test (including setup())
  * test_tags=&lt;tag list&gt;/# bats file_tags=&lt;tag list&gt; and --filter-tags &lt;tag list&gt; for tagging tests
  * add documentation for bats_require_minimum_version, setup_suite, fix typos
  * improve documentation about setup_suite
  * allow --gather-test-outputs-in &lt;directory&gt; to work with existing, empty directories
  * fix load in teardown marking failed tests as not run
  * add /usr/lib/bats as default value for BATS_LIB_PATH
  * fix unset variable in bats-formatter-junit when setup_file fails
  * unify error behavior of teardown/teardown_file/teardown_suite functions: only fail via return code, not via ERREXIT
  * only print setup_suite's stderr on errors</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1676376000">- Update to version 1.9.0:
  * add installation instructions for Debian, Fedora, Gentoo, and OpenSUSE (#659)
  * add `--line-reference-format` to switch file/line references in stack traces (#665)
  * add `bats:focus` tag to run only focused tests (#679)
  * add bats-support, bats-assert, bats-file and bats-detik to Dockerfile (#674)
  * add `--help` text and `man` page content for `--filter-tags` (#679)
  * explicitly check for GNU parallel (#691)
  * wait for report-formatter to finish before ending `bats`' execution,
    to fix empty files with `--report-fomatter junit` under Docker (#692)
  * improved clarity of section about output in free code (#671)
  * fixed typos (#673)
  * clarify use cases of `run` (#366)</changelog>
  <changelog author="dmueller@suse.com" date="1689508800">- update to 1.10.0:
  * add `${BATS_TEST_TAGS[@]}` for querying the tags during a
    test
  * print tags on failing tests
  * test for negative arguments to `--jobs`
  * add tests for `--formatter cat`
  * test coverage in CI
  * Support for rush as alternative to GNU parallel
  * add `bats_pipe` helper function for `run` that executes `\|`
    as pipes
  * publish docker images to ghcr.io (additionally to Dockerhub)
  * clarify use cases of `--formatter cat`
  * fix `run` with options overwriting the value of `i`
  * fix `${BATS_TEST_NAMES[@]}` containing only `--tags` instead
    of test name since Bats v1.8.0
  * fix `run --keep-empty-lines` counting trailing ` ` as
    (empty) new line
  * fix short flag unpacker creating bogus command lines with
    valued flags
  * fix formatter becoming confused with retries
  * fix `--gather-test-outputs-in` fails on tests with `/`
  * fix overriding `date` breaks `--timing`</changelog>
  <changelog author="andrea.manzini@suse.com" date="1713355200">- update to 1.11.0:
  * add security.md (#762)
  * add dynamic test registration via bats_test_function (#349)
  * add check that Bats is executed with Bash &gt;= 3.2 (#873)
  * Fixed:
    + install.sh now works for deviating lib/ dirs (like lib32,lib64) (#487)
    + catch unset BATS_TEST_SOURCE in lib/bats-core/tracing.bash so
    + set -u/set -o nounset works as expected (#827)
    + fix --gather-test-outputs-in fails on tests with multiple / (#789)
    + install does not create unused /usr/share/bats anymore (#857)
    + ensure IFS is unchanged in {setup,teardown}{_suite,_file,}, @test and free code (#879)
    + junit formatter: remove ANSI Codes to avoid invalid XML character (#886)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1734264000">- update to 1.11.1:
  * document bats_pipe function
  * unbreak test suites with multiple files loading common constants,
    introduced in v1.11.0
  * docker image won't crash if a file or directory named 'bats' exists
  * use $BATS_LIBDIR instead of hardcoded lib in 'bats-gather-tests'
  * cleanup: remove unused $BATS_FILTER</changelog>
</package>
<package pkgid="274d93bac02938cccff51dccbc67a6d8d7e62d37d0c4e22b16d21b6af16148e25d08fb46131be0f7ed716ff3d814f4b9458365ee3adaa54e54ee1212ea628357" name="bazel8" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="160000.1.2"/>
  <changelog author="ftake@geeko.jp" date="1738584000">- Initial package based on bazel6</changelog>
</package>
<package pkgid="44a4dc9a25a33e4f36106a6bc043b798f0e112ef89251775d3561fd7a38905082417226e3799420ae912dd6e31e31323e204aea2622292fe9dbb8697e996fbce" name="bb" arch="x86_64">
  <version epoch="0" ver="1.3~rc1" rel="bp160.1.13"/>
  <changelog author="sbrabec@suse.cz" date="1176292800">- Require just created libmikmod-devel instead of libmikmod.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1285761600">- Do not use internal minilzo, it turns that it includes
  build dates that causes this package to republish when
  not needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix wrong linking
- include &lt;time.h&gt; to avoid warnings.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1512475200">- Remove unused buildrequires on xorg-x11-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for source.
- Miscellaneous specfile cleanups using spec-cleaner.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1721304000">- Build with -fpermissive to work around various C99 violations which
  lead to compiler errors with GCC 14 by default [boo#1228121]</changelog>
</package>
<package pkgid="f5e01f8e81f78b4b7c1e03dcc61d20c93ec1be6ee144842abf734492751a7c97fdd7c916e7da36cc58f980bee88a6d8413b700f7f175dffeda26de04ca72ae8b" name="bc" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566993600">- Use %license instead of %doc [bsc#1082318]
- Cleanup %doc section</changelog>
  <changelog author="pgajdos@suse.com" date="1602763200">- fix [bsc#1177579] -- wrong clamping of hexadecimal digits in dc
- deleted patches
  - bc-1.06-dc_ibase.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="0e3d60d8f00649296bbe2b24afbc79bf35392ddce2aa82025dde4493c9cea8a570f0349774647f81495e5b3fe973d9eeacf3fcf4211d21a6ce13d5f6f3ac2b81" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1+git37.a5e3753" rel="160000.2.2"/>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="jengelh@inai.de" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="colyli@suse.com" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="colyli@suse.com" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="colyli@suse.com" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
  <changelog author="colyli@suse.com" date="1677758400">- bcache-tools: improve is_zoned_device() (bsc#1208425)
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
  <changelog author="jengelh@inai.de" date="1699531200">- Update to snapshot 1.1+git37.a5e3753
  * support ``bcache show -d`` for nvdimm-meta device
- Abolish /usr/bin/env [boo#1216370]
- Delete (merged):
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch
  0002-bcache-tools-add-is_zoned_device.patch
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
  0012-bcache-tools-Fix-potential-coredump-issues.patch
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
  0016-bcache-tools-add-bcache-status.patch
  0017-bcache-tools-add-man-page-bcache-status.8.patch
  0018-Makefile-install-bcache-status.patch
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
  0022-bcache-tools-check-incompatible-feature-set.patch
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch
  0029-bcache-tools-improve-is_zoned_device.patch</changelog>
</package>
<package pkgid="94491180a151f57348f9920bfbf1209be306e61f527dbbb8f629e7b51943ecd595db0abfdfc166921842aa64b12b190e1be215f72c4e8f067b29641d639243cd" name="bcachefs-tools" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="bp160.1.14"/>
  <changelog author="David Disseldorp &lt;ddiss@suse.de&gt;" date="1709553600">- Update to release v1.6.4
  * fix build on powerpc
  * drop upstream rust-use-libc-Ioctl-type-for-ioctl-request-argument.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.de&gt;" date="1713441600">- Update to release v1.7.0
  * New on disk forat feature - per member 64-bit bitmap of regions
    with btree nodes, to accelerate recovering by scanning for
    btree nodes.
  * mount: canonicalize device path for single device node
  * Topology repair now uses nodes found by scanning to fill holes
  * mount: Handle multi-device with 1 device node</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1718798400">- Update to release v1.9.1:
  * improve editorconfig to include sh scripts
  * fix: remove newlines from passphrase
  * fix: search for key in all keyrings
- Updates from release v1.9.0:
  * add BCACHEFS_BLOCK_SCAN environment variable for users that
  * add BCACHEFS_KERNEL_ONLY environment variable for test
    bcachefs, utilize it. Otherwise, resort to traversing block
    devices and checking for bcachefs super blocks.
    environments
  * Handle mount with FS with 1 device
    have a broken blkid which renders the udev db as incomplete
  * manpage: incorrect "delete" to "snapshot"
  * mount: If the udev database contains information about
  * mount: Make udev_bcachefs_info more idiomatic
  * fix typo that causes encrypted drives to become stuck in a
    busy loop
  * check_for_key before ask_for_passphrase -- check if there is
    already a key in the keyring available before trying to get the
    key from some more involved means</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.de&gt;" date="1718884800">- Update to release v1.9.1
  * disk_accounting_v2: report on compression type/ratio, btree usage,
    and pending rebalance work.
- Fix 32-bit builds
  * add 0001-key-use-c_long-type-for-keyctl_search-helper-fn.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.de&gt;" date="1719921600">- Update to release v1.9.2
  * Fix fsck: Revert OPT_MOUNT change for read_only and make it OPT_HIDDEN
- Remove upstreamed patch
  * 0001-key-use-c_long-type-for-keyctl_search-helper-fn.patch</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.de&gt;" date="1720785600">- Update to release v1.9.3
  * Fix 32-bit builds further</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.de&gt;" date="1721649600">- Update to release v1.9.4
  * No longer logging by default
  * Fix undefined behavour</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1723982400">- Update to release 1.11.0
  * mount: Fix UAF in option string handling
  * mount: Support asking for password via systemd-ask-password
- Fix a crash in mkfs.bcachefs by disabling LTO.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1734523200">- update to 1.13.0:
  * posix_to_bcachefs: fix missing copy_xattrs() error checking
  * Change lingering set-option texts to set-fs-option
  * change setattr to set-file-option in docs/usage
- update to 1.11.1:
  * bch_bindgen: Remove memoffset dep
  * cmd_list: open with noexcl
  * fuse: graceful shutdown when startup fails</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1738843200">- Update to 1.20.0:
  * bcachefs fs top - show runtime performance information
  * various fixes</changelog>
</package>
<package pkgid="bd2caecb47b57320b3deda83d6c6ee841df585ecbc48baec1028e382d4f7906617ca77c20a8a51338686aaa9e960877216aaa6dcf4a1bb0ecf2735d8952bad52" name="bcal" arch="x86_64">
  <version epoch="0" ver="2.4" rel="bp160.1.12"/>
  <changelog author="dilawar.s.rajput@gmail.com" date="1533902400">- First realease v1.9</changelog>
  <changelog author="Dilawar Singh &lt;dilawar.s.rajput@gmail.com&gt;" date="1555156800">- Update to version 2.1
  * Support for C bitwise operators (|, ^, &amp;)
  * Support floating point in unit conversion
  * Support hex in expressions
  * Persistent readline history
  * Static-analysis (clang-tidy and coverity) integration
- Update to version 2.0
  * bc mode for general purpose calculations
  * Bitwise shift (&lt;&lt; and &gt;&gt;) operations
  * Base conversion in interactive mode
  * Prompt help</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555329600">- Trim excess whitespace in description. Change to written style.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1559649600">- Added bcal-2.1_gcc9.patch to fix Factory build
- Limit build to 64-bit systems (as per README.md)
- Spec cleanup</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1615982400">- Update to version 2.2
  * Support [`calc`](http://www.isthe.com/chongo/tech/comp/calc/)
    for multi-base expressions
  * To use `calc`, `export BCAL_USE_CALC=1`
  * Fix lint issues
  * Fix issue #30
  * Updated auto-generated packages
  * More portable Makefile
  * Delete bcal-2.1_gcc9.patch, it was merged into upsteam.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650283200">- Update to version 2.4
  * Support "exit" and "quit" at prompt
  * Fix lint report
- Update to version 2.3
  * Show binary conversion output in octets for readability
  * Handle CTRL+D
  * Quit program or 'exit' or 'quit'
  * Fix broken terminal with calc as backend on "undefined input"</changelog>
</package>
<package pkgid="56f11463e9f4d6fd9fb17e0e6e0729d2655e7aa05dfc82003cc5e19508864965c4a17bb159ccc2e6a5acc8cff996fdb24f757235e6577a9fd002906ae42cacbe" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="160000.2.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502401">- Add python3-pyelftools as requirement of bcc-tools (boo#1225497)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1732795200">- Removed patch: build-remove-llvm-dev-dependency-from-libbcc.patch
  It is included in the latest upstream release.
- Update to version 0.32.0
  * Support for kernel up to 6.11.
  * bcc tool update: wakeuptime, readahead, shmsnoop, offcputime, cachestat,
    cachetop, hardirqs
  * libbpf tool update: futexctn, profile, readhead, softirqs, hardirqs
  * Multiple enhancements for memleak: better error path checking, adding
    mremap uprobe, etc.
  * Support get pid/tgid in pid namespaces (cpudist, profile)
  * multiple pid filtering support: profile, offcputime
  * detect whether elf binary is PIE even if the binary is marked as DYN
  * Fix several compilation issues with llvm20
  * doc update, other bug fixes and tools improvement.
- Update to version 0.31.0
  * Support for kernel up to 6.9.
  * Add support for bcachefs to fsdist and fsslower tools
  * libbpf tool update: memleak, syncsnoop, numamove, syscount, vfsstat,
    tcptop, capable, syncsnoop, sigsnoop, etc.
  * bcc tool update: biolatency, biosnoop, biotop, vfsstat, kvmexit, sslsniff,
    swapin, etc.
  * build: Remove llvm-dev dependency from libbcc
  * build: Remove dependency on LLVM header from libbcc packages
  * usdt: Fix bare register dereference on aarch64
  * Extend `bcc_proc` API which allows to limit search to specific pid
  * Fix several flaky tests.
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734609600">- Default to LLVM 19 in Factory and SLE15-SP7
- Drop fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch
  (bsc#1219096)
  * since LLVM 19 this is no longer required</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 0.33.0
  * Support for kernel up to 6.12
  * Add new bcc tool numasched
  * syms: Initialize ModulePath::fd_ to invalid FD
  * libbpf-tools/memleak: Fix off-by-one error
  * libbpf-tools/slabratetop: Fix failed to create kprobe error
  * libbpf_tools/profile: Support PID namespace mapping
  * libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  * tools/oomkill: get application level stack trace
  * tools/profile: Add additional information to backtrace
  * tools/mountsnoop: Fix fsmount printing wrong flags
  * tools/compactsnoop: Add aarch64 support
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739275200">- luajit: enable deterministic bytecode generation (boo#1236871)
  * add deterministic_luajit.patch
  * the bcc-lua package should now be reproducible</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1742558400">- Support building with cmake4
  * Add 0001-Bump-CMake-minimum-version-to-3.12.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1743768000">- Add optional requires to libbcc0 for kernel-longterm-devel, if
  kernel-longterm is in use</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to version 0.34.0
  * Support for kernel up to 6.13
  * Bump cmake minimum version to 3.12
  * drop 0001-Bump-CMake-minimum-version-to-3.12.patch
  * statsnoop: Display syscall name with -s
  * readahead: Fix incorrect page accessed count since kernel 5.16
  * libbpf-tools/opensnoop: Add new fields
  * libbpf-tools: hardirqs/softirqs: Fix logarithmic calculation issue
  * libbpf-tools/hardirqs: have better default display and add CPU column
  * libbpf-tools/klockstat: Better stack dump and summary info
  * libbpf-tools/sigsnoop: Support real-time signals and thread comm
  * libbpf-tools/statsnoop: Support more syscalls
  * libbpf-tools/memleak: Some fixes and better messages
  * tools/opensnoop: Add new fields and fix bad mode value
  * tools/profile: Prioritize using the cpu-cycles hardware event
  * tools/tcpdrop: Add support for dumping TCP drop reasons
  * Fix event name too long error in python source
  * doc update, other bug fixes and example improvement.
  * enable deterministic bytecode generation
  * drop deterministic_luajit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to version 0.35.0
  * Support for kernel up to 6.14
  * New bcc tools: mptcp: enable mptcp for tcp traffic
  * tools/biosnoop: Fix biosnoop pattern option
  * Allow cmake run out of the source tree
  * Fix for test bpf_stack_id when running on custom image in yocto
  * libbpf-tools/map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  * libbpf-tools/biotop: Use dump_hash for map processing
  * uninstall: use execute_process() instead of exec_program()
  * clang: Fix pointer dereference on big-endian machines
  * ci: Upgrade to ubuntu 24.04
  * doc update, other bug fixes and example improvement.</changelog>
</package>
<package pkgid="b9f4587c1c95330c47ce9d0e0a3fca43a31a66c061b71f7ae6fa08a19413a1356617ae443ef3b1efc7f4e19d42c450d94afbe7a270e681b5817d6bd80c3341f5" name="bcc-docs" arch="noarch">
  <version epoch="0" ver="0.35.0" rel="160000.2.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502401">- Add python3-pyelftools as requirement of bcc-tools (boo#1225497)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1732795200">- Removed patch: build-remove-llvm-dev-dependency-from-libbcc.patch
  It is included in the latest upstream release.
- Update to version 0.32.0
  * Support for kernel up to 6.11.
  * bcc tool update: wakeuptime, readahead, shmsnoop, offcputime, cachestat,
    cachetop, hardirqs
  * libbpf tool update: futexctn, profile, readhead, softirqs, hardirqs
  * Multiple enhancements for memleak: better error path checking, adding
    mremap uprobe, etc.
  * Support get pid/tgid in pid namespaces (cpudist, profile)
  * multiple pid filtering support: profile, offcputime
  * detect whether elf binary is PIE even if the binary is marked as DYN
  * Fix several compilation issues with llvm20
  * doc update, other bug fixes and tools improvement.
- Update to version 0.31.0
  * Support for kernel up to 6.9.
  * Add support for bcachefs to fsdist and fsslower tools
  * libbpf tool update: memleak, syncsnoop, numamove, syscount, vfsstat,
    tcptop, capable, syncsnoop, sigsnoop, etc.
  * bcc tool update: biolatency, biosnoop, biotop, vfsstat, kvmexit, sslsniff,
    swapin, etc.
  * build: Remove llvm-dev dependency from libbcc
  * build: Remove dependency on LLVM header from libbcc packages
  * usdt: Fix bare register dereference on aarch64
  * Extend `bcc_proc` API which allows to limit search to specific pid
  * Fix several flaky tests.
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734609600">- Default to LLVM 19 in Factory and SLE15-SP7
- Drop fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch
  (bsc#1219096)
  * since LLVM 19 this is no longer required</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 0.33.0
  * Support for kernel up to 6.12
  * Add new bcc tool numasched
  * syms: Initialize ModulePath::fd_ to invalid FD
  * libbpf-tools/memleak: Fix off-by-one error
  * libbpf-tools/slabratetop: Fix failed to create kprobe error
  * libbpf_tools/profile: Support PID namespace mapping
  * libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  * tools/oomkill: get application level stack trace
  * tools/profile: Add additional information to backtrace
  * tools/mountsnoop: Fix fsmount printing wrong flags
  * tools/compactsnoop: Add aarch64 support
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739275200">- luajit: enable deterministic bytecode generation (boo#1236871)
  * add deterministic_luajit.patch
  * the bcc-lua package should now be reproducible</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1742558400">- Support building with cmake4
  * Add 0001-Bump-CMake-minimum-version-to-3.12.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1743768000">- Add optional requires to libbcc0 for kernel-longterm-devel, if
  kernel-longterm is in use</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to version 0.34.0
  * Support for kernel up to 6.13
  * Bump cmake minimum version to 3.12
  * drop 0001-Bump-CMake-minimum-version-to-3.12.patch
  * statsnoop: Display syscall name with -s
  * readahead: Fix incorrect page accessed count since kernel 5.16
  * libbpf-tools/opensnoop: Add new fields
  * libbpf-tools: hardirqs/softirqs: Fix logarithmic calculation issue
  * libbpf-tools/hardirqs: have better default display and add CPU column
  * libbpf-tools/klockstat: Better stack dump and summary info
  * libbpf-tools/sigsnoop: Support real-time signals and thread comm
  * libbpf-tools/statsnoop: Support more syscalls
  * libbpf-tools/memleak: Some fixes and better messages
  * tools/opensnoop: Add new fields and fix bad mode value
  * tools/profile: Prioritize using the cpu-cycles hardware event
  * tools/tcpdrop: Add support for dumping TCP drop reasons
  * Fix event name too long error in python source
  * doc update, other bug fixes and example improvement.
  * enable deterministic bytecode generation
  * drop deterministic_luajit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to version 0.35.0
  * Support for kernel up to 6.14
  * New bcc tools: mptcp: enable mptcp for tcp traffic
  * tools/biosnoop: Fix biosnoop pattern option
  * Allow cmake run out of the source tree
  * Fix for test bpf_stack_id when running on custom image in yocto
  * libbpf-tools/map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  * libbpf-tools/biotop: Use dump_hash for map processing
  * uninstall: use execute_process() instead of exec_program()
  * clang: Fix pointer dereference on big-endian machines
  * ci: Upgrade to ubuntu 24.04
  * doc update, other bug fixes and example improvement.</changelog>
</package>
<package pkgid="bd303ddae86a678a905b0c0a512236a082f98442a9b1081b4e8a966b968bc345aab3305737ce7a73d0e1f0819320fec04d484d9bc0565d692ebba6b4c0b6e907" name="bcc-examples" arch="noarch">
  <version epoch="0" ver="0.35.0" rel="160000.2.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502401">- Add python3-pyelftools as requirement of bcc-tools (boo#1225497)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1732795200">- Removed patch: build-remove-llvm-dev-dependency-from-libbcc.patch
  It is included in the latest upstream release.
- Update to version 0.32.0
  * Support for kernel up to 6.11.
  * bcc tool update: wakeuptime, readahead, shmsnoop, offcputime, cachestat,
    cachetop, hardirqs
  * libbpf tool update: futexctn, profile, readhead, softirqs, hardirqs
  * Multiple enhancements for memleak: better error path checking, adding
    mremap uprobe, etc.
  * Support get pid/tgid in pid namespaces (cpudist, profile)
  * multiple pid filtering support: profile, offcputime
  * detect whether elf binary is PIE even if the binary is marked as DYN
  * Fix several compilation issues with llvm20
  * doc update, other bug fixes and tools improvement.
- Update to version 0.31.0
  * Support for kernel up to 6.9.
  * Add support for bcachefs to fsdist and fsslower tools
  * libbpf tool update: memleak, syncsnoop, numamove, syscount, vfsstat,
    tcptop, capable, syncsnoop, sigsnoop, etc.
  * bcc tool update: biolatency, biosnoop, biotop, vfsstat, kvmexit, sslsniff,
    swapin, etc.
  * build: Remove llvm-dev dependency from libbcc
  * build: Remove dependency on LLVM header from libbcc packages
  * usdt: Fix bare register dereference on aarch64
  * Extend `bcc_proc` API which allows to limit search to specific pid
  * Fix several flaky tests.
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734609600">- Default to LLVM 19 in Factory and SLE15-SP7
- Drop fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch
  (bsc#1219096)
  * since LLVM 19 this is no longer required</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 0.33.0
  * Support for kernel up to 6.12
  * Add new bcc tool numasched
  * syms: Initialize ModulePath::fd_ to invalid FD
  * libbpf-tools/memleak: Fix off-by-one error
  * libbpf-tools/slabratetop: Fix failed to create kprobe error
  * libbpf_tools/profile: Support PID namespace mapping
  * libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  * tools/oomkill: get application level stack trace
  * tools/profile: Add additional information to backtrace
  * tools/mountsnoop: Fix fsmount printing wrong flags
  * tools/compactsnoop: Add aarch64 support
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739275200">- luajit: enable deterministic bytecode generation (boo#1236871)
  * add deterministic_luajit.patch
  * the bcc-lua package should now be reproducible</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1742558400">- Support building with cmake4
  * Add 0001-Bump-CMake-minimum-version-to-3.12.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1743768000">- Add optional requires to libbcc0 for kernel-longterm-devel, if
  kernel-longterm is in use</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to version 0.34.0
  * Support for kernel up to 6.13
  * Bump cmake minimum version to 3.12
  * drop 0001-Bump-CMake-minimum-version-to-3.12.patch
  * statsnoop: Display syscall name with -s
  * readahead: Fix incorrect page accessed count since kernel 5.16
  * libbpf-tools/opensnoop: Add new fields
  * libbpf-tools: hardirqs/softirqs: Fix logarithmic calculation issue
  * libbpf-tools/hardirqs: have better default display and add CPU column
  * libbpf-tools/klockstat: Better stack dump and summary info
  * libbpf-tools/sigsnoop: Support real-time signals and thread comm
  * libbpf-tools/statsnoop: Support more syscalls
  * libbpf-tools/memleak: Some fixes and better messages
  * tools/opensnoop: Add new fields and fix bad mode value
  * tools/profile: Prioritize using the cpu-cycles hardware event
  * tools/tcpdrop: Add support for dumping TCP drop reasons
  * Fix event name too long error in python source
  * doc update, other bug fixes and example improvement.
  * enable deterministic bytecode generation
  * drop deterministic_luajit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to version 0.35.0
  * Support for kernel up to 6.14
  * New bcc tools: mptcp: enable mptcp for tcp traffic
  * tools/biosnoop: Fix biosnoop pattern option
  * Allow cmake run out of the source tree
  * Fix for test bpf_stack_id when running on custom image in yocto
  * libbpf-tools/map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  * libbpf-tools/biotop: Use dump_hash for map processing
  * uninstall: use execute_process() instead of exec_program()
  * clang: Fix pointer dereference on big-endian machines
  * ci: Upgrade to ubuntu 24.04
  * doc update, other bug fixes and example improvement.</changelog>
</package>
<package pkgid="b03af0a09b767b9b02086a55756cbc788fe7d23968b30d8fd983a2138b081cb08f192bd2a7ad078b5865dfd9eb20272c255f670a38617df0c7699a5023b18e35" name="bcc-lua" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="160000.2.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502401">- Add python3-pyelftools as requirement of bcc-tools (boo#1225497)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1732795200">- Removed patch: build-remove-llvm-dev-dependency-from-libbcc.patch
  It is included in the latest upstream release.
- Update to version 0.32.0
  * Support for kernel up to 6.11.
  * bcc tool update: wakeuptime, readahead, shmsnoop, offcputime, cachestat,
    cachetop, hardirqs
  * libbpf tool update: futexctn, profile, readhead, softirqs, hardirqs
  * Multiple enhancements for memleak: better error path checking, adding
    mremap uprobe, etc.
  * Support get pid/tgid in pid namespaces (cpudist, profile)
  * multiple pid filtering support: profile, offcputime
  * detect whether elf binary is PIE even if the binary is marked as DYN
  * Fix several compilation issues with llvm20
  * doc update, other bug fixes and tools improvement.
- Update to version 0.31.0
  * Support for kernel up to 6.9.
  * Add support for bcachefs to fsdist and fsslower tools
  * libbpf tool update: memleak, syncsnoop, numamove, syscount, vfsstat,
    tcptop, capable, syncsnoop, sigsnoop, etc.
  * bcc tool update: biolatency, biosnoop, biotop, vfsstat, kvmexit, sslsniff,
    swapin, etc.
  * build: Remove llvm-dev dependency from libbcc
  * build: Remove dependency on LLVM header from libbcc packages
  * usdt: Fix bare register dereference on aarch64
  * Extend `bcc_proc` API which allows to limit search to specific pid
  * Fix several flaky tests.
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734609600">- Default to LLVM 19 in Factory and SLE15-SP7
- Drop fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch
  (bsc#1219096)
  * since LLVM 19 this is no longer required</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 0.33.0
  * Support for kernel up to 6.12
  * Add new bcc tool numasched
  * syms: Initialize ModulePath::fd_ to invalid FD
  * libbpf-tools/memleak: Fix off-by-one error
  * libbpf-tools/slabratetop: Fix failed to create kprobe error
  * libbpf_tools/profile: Support PID namespace mapping
  * libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  * tools/oomkill: get application level stack trace
  * tools/profile: Add additional information to backtrace
  * tools/mountsnoop: Fix fsmount printing wrong flags
  * tools/compactsnoop: Add aarch64 support
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739275200">- luajit: enable deterministic bytecode generation (boo#1236871)
  * add deterministic_luajit.patch
  * the bcc-lua package should now be reproducible</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1742558400">- Support building with cmake4
  * Add 0001-Bump-CMake-minimum-version-to-3.12.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1743768000">- Add optional requires to libbcc0 for kernel-longterm-devel, if
  kernel-longterm is in use</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to version 0.34.0
  * Support for kernel up to 6.13
  * Bump cmake minimum version to 3.12
  * drop 0001-Bump-CMake-minimum-version-to-3.12.patch
  * statsnoop: Display syscall name with -s
  * readahead: Fix incorrect page accessed count since kernel 5.16
  * libbpf-tools/opensnoop: Add new fields
  * libbpf-tools: hardirqs/softirqs: Fix logarithmic calculation issue
  * libbpf-tools/hardirqs: have better default display and add CPU column
  * libbpf-tools/klockstat: Better stack dump and summary info
  * libbpf-tools/sigsnoop: Support real-time signals and thread comm
  * libbpf-tools/statsnoop: Support more syscalls
  * libbpf-tools/memleak: Some fixes and better messages
  * tools/opensnoop: Add new fields and fix bad mode value
  * tools/profile: Prioritize using the cpu-cycles hardware event
  * tools/tcpdrop: Add support for dumping TCP drop reasons
  * Fix event name too long error in python source
  * doc update, other bug fixes and example improvement.
  * enable deterministic bytecode generation
  * drop deterministic_luajit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to version 0.35.0
  * Support for kernel up to 6.14
  * New bcc tools: mptcp: enable mptcp for tcp traffic
  * tools/biosnoop: Fix biosnoop pattern option
  * Allow cmake run out of the source tree
  * Fix for test bpf_stack_id when running on custom image in yocto
  * libbpf-tools/map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  * libbpf-tools/biotop: Use dump_hash for map processing
  * uninstall: use execute_process() instead of exec_program()
  * clang: Fix pointer dereference on big-endian machines
  * ci: Upgrade to ubuntu 24.04
  * doc update, other bug fixes and example improvement.</changelog>
</package>
<package pkgid="eed4d3e571010495e881fd8103141a71639494a9a10a4705d665a07e2311ce5d16a461bbbd3c9cb562400a42ff53b606a6eaf5de1f8572f067356b4acce27dac" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="160000.2.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1717502400">- Remove bcc-devel's requirement on llvm-devel
  * add build-remove-llvm-dev-dependency-from-libbcc.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502401">- Add python3-pyelftools as requirement of bcc-tools (boo#1225497)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1732795200">- Removed patch: build-remove-llvm-dev-dependency-from-libbcc.patch
  It is included in the latest upstream release.
- Update to version 0.32.0
  * Support for kernel up to 6.11.
  * bcc tool update: wakeuptime, readahead, shmsnoop, offcputime, cachestat,
    cachetop, hardirqs
  * libbpf tool update: futexctn, profile, readhead, softirqs, hardirqs
  * Multiple enhancements for memleak: better error path checking, adding
    mremap uprobe, etc.
  * Support get pid/tgid in pid namespaces (cpudist, profile)
  * multiple pid filtering support: profile, offcputime
  * detect whether elf binary is PIE even if the binary is marked as DYN
  * Fix several compilation issues with llvm20
  * doc update, other bug fixes and tools improvement.
- Update to version 0.31.0
  * Support for kernel up to 6.9.
  * Add support for bcachefs to fsdist and fsslower tools
  * libbpf tool update: memleak, syncsnoop, numamove, syscount, vfsstat,
    tcptop, capable, syncsnoop, sigsnoop, etc.
  * bcc tool update: biolatency, biosnoop, biotop, vfsstat, kvmexit, sslsniff,
    swapin, etc.
  * build: Remove llvm-dev dependency from libbcc
  * build: Remove dependency on LLVM header from libbcc packages
  * usdt: Fix bare register dereference on aarch64
  * Extend `bcc_proc` API which allows to limit search to specific pid
  * Fix several flaky tests.
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734609600">- Default to LLVM 19 in Factory and SLE15-SP7
- Drop fix-alignment-issue-on-x86_64-due-to-consecutive-bit.patch
  (bsc#1219096)
  * since LLVM 19 this is no longer required</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1737374400">- Update to version 0.33.0
  * Support for kernel up to 6.12
  * Add new bcc tool numasched
  * syms: Initialize ModulePath::fd_ to invalid FD
  * libbpf-tools/memleak: Fix off-by-one error
  * libbpf-tools/slabratetop: Fix failed to create kprobe error
  * libbpf_tools/profile: Support PID namespace mapping
  * libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  * tools/oomkill: get application level stack trace
  * tools/profile: Add additional information to backtrace
  * tools/mountsnoop: Fix fsmount printing wrong flags
  * tools/compactsnoop: Add aarch64 support
  * doc update, other bug fixes and tools improvement.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739275200">- luajit: enable deterministic bytecode generation (boo#1236871)
  * add deterministic_luajit.patch
  * the bcc-lua package should now be reproducible</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1742558400">- Support building with cmake4
  * Add 0001-Bump-CMake-minimum-version-to-3.12.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1743768000">- Add optional requires to libbcc0 for kernel-longterm-devel, if
  kernel-longterm is in use</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to version 0.34.0
  * Support for kernel up to 6.13
  * Bump cmake minimum version to 3.12
  * drop 0001-Bump-CMake-minimum-version-to-3.12.patch
  * statsnoop: Display syscall name with -s
  * readahead: Fix incorrect page accessed count since kernel 5.16
  * libbpf-tools/opensnoop: Add new fields
  * libbpf-tools: hardirqs/softirqs: Fix logarithmic calculation issue
  * libbpf-tools/hardirqs: have better default display and add CPU column
  * libbpf-tools/klockstat: Better stack dump and summary info
  * libbpf-tools/sigsnoop: Support real-time signals and thread comm
  * libbpf-tools/statsnoop: Support more syscalls
  * libbpf-tools/memleak: Some fixes and better messages
  * tools/opensnoop: Add new fields and fix bad mode value
  * tools/profile: Prioritize using the cpu-cycles hardware event
  * tools/tcpdrop: Add support for dumping TCP drop reasons
  * Fix event name too long error in python source
  * doc update, other bug fixes and example improvement.
  * enable deterministic bytecode generation
  * drop deterministic_luajit.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to version 0.35.0
  * Support for kernel up to 6.14
  * New bcc tools: mptcp: enable mptcp for tcp traffic
  * tools/biosnoop: Fix biosnoop pattern option
  * Allow cmake run out of the source tree
  * Fix for test bpf_stack_id when running on custom image in yocto
  * libbpf-tools/map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  * libbpf-tools/biotop: Use dump_hash for map processing
  * uninstall: use execute_process() instead of exec_program()
  * clang: Fix pointer dereference on big-endian machines
  * ci: Upgrade to ubuntu 24.04
  * doc update, other bug fixes and example improvement.</changelog>
</package>
<package pkgid="3ed1c185d9d463d5b9495e31c75353aae6836b77006d40e2dcda9e0fc1ed4ac94206f2211b873b15f1d48a5f07d2a7f41eb00d50718df95c492536de38457673" name="bcel" arch="noarch">
  <version epoch="0" ver="6.10.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1495195200">- Buildignore more java implementations</changelog>
  <changelog author="fstrba@suse.com" date="1506513600">- Allow building with any java-devel provider
- Specify java source and target level 1.6 to fix build with jdk9
- Added patch:
  * bcel-5.2-encoding.patch
    + specify the correct encoding of the files</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1542283200">- Add maven pom file and generate mvn(...) dependencies for this
  package</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Build against the generic xml-apis provider which allows
  building against bootstrap and non-bootstrap packages according
  of their availability.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- BuildIgnore xalan-j2, xml-apis, xml-resolver, xerces-j2, since
  those packages are not necessary for the build.</changelog>
  <changelog author="pmonreal@suse.com" date="1668081600">- Security fix: [bsc#1205125, CVE-2022-42920]
  * Apache Commons BCEL prior to 6.6.0 allows producing
    arbitrary bytecode via out-of-bounds writing
  * Add bcel-CVE-2022-42920.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to version 6.7.0
  * 6.7.0 (2022-11-28) Maintenance and bug fix release.
  * 6.6.1 (2022-10-29) Maintenance and bug fix release.
  * 6.6.0 (2022-10-08) Minor feature and bug fix release.
  * 6.5.0 (2020-06-05) Minor feature and bug fix release.
  * 6.4.1 (2019-09-26) Bug fix release.
  * 6.4.0 (2019-09-20) Feature and bug fix release.
  * 6.3.1 (2019-03-20) Bug fix release
  * 6.3 (2019-01-23) Experimental Java 9, 10, 11, 12-EA, and 13-EA
    Support
  * 6.2 (2017-12-08) Experimental Java 9 Support
  * 6.1 (2017-09-14) Experimental Java 9 Support
  * 6.0 (2016-07-10) Apache Commons BCEL 6.0 is a major release
    supporting the new features introduced in Java 6, 7 and 8. It
    requires Java 7 or higher to run.
    COMPATIBILITY with 5.2
    + Binary compatible
  - not strictly compatible
  - The constant interface org.apache.bcel.Constants has been
    deprecated. Classes which implemented this interface in 5.2
    now use the constants defined in the org.apache.bcel.Const
    class.
  - The constant interface
    org.apache.bcel.generic.InstructionConstants has been
    deprecated. Classes which implemented this interface in 5.2
    now use the constants defined in the
    org.apache.bcel.generic.InstructionConsts class.
  - Return type of method 'public java.lang.Object
    getElementAt(int)' in org.apache.bcel.verifier
    .VerifierFactoryListModel has been changed to
    java.lang.String.
  - The BCEL classes do no longer implement java.io.Serializable.
    + Source compatible
  - Yes, sort of;
  - The org.apache.bcel.classfile.Visitor interface has been
    enhanced with additional methods. If you implemented it
    directly instead of extending the EmptyVisitor class you'll
    have to implement the new methods.
  - The org.apache.bcel.generic.Visitor interface has been
    enhanced with an additional method. If you implemented it
    directly instead of extending the EmptyVisitor class you'll
    have to implement the new methods.
    + Semantic compatible
  - Yes, except:
  - BCEL 6.0 handles new attributes such as code annotations
    that could only be processed by implementing a custom
    AttributeReader in the previous versions. Code relying on
    this behavior will have to be adjusted since the
    AttributeReader will no longer be called in these cases.
    + For full information about API changes please see the extended
    Clirr report: https://commons.apache.org/bcel/clirr-report.html
- Removed patches:
  * bcel-5.2-encoding.patch
    + part of our own build.xml file generated to build with ant
  * bcel-CVE-2022-42920.patch
    + integrated upstrea</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703332800">- Update to version 6.8.0
  * 6.8.0 (2023-12-08) Maintenance and bug fix release.
    + New features:
    ~ Add and use InvalidMethodSignatureException extending
    ClassFormatException.
    ~ Increase code coverage in Class2HTMLTestCase with new test
    input Java4Example #186.
    ~ Add verifier tests on some opcodes #180.
    ~ Added signature test cases for class/method, and bad
    signatures #182.
    ~ Add Const.MAJOR_20.
    ~ Add Const.MINOR_20.
    ~ Add Const.MAJOR_21.
    ~ Add Const.MINOR_21.
    ~ [Bcelifier] stackmap support to pass JDK verifier #177.
    ~ Fix SpotBugs [ERROR] Class org.apache.bcel.util.ClassVector
    defines non-transient non-serializable instance field vec
    [org.apache.bcel.util.ClassVector] In ClassVector.java
    SE_BAD_FIELD.
    ~ Fix SpotBugs [ERROR] Switch statement found in
    org.apache.bcel.util.BCELFactory.visitAllocationInstruction(AllocationInstruction)
    where one case falls through to the next case
    [org.apache.bcel.util.BCELFactory,
    org.apache.bcel.util.BCELFactory] At
    BCELFactory.java:[lines 188-191]Another occurrence at
    BCELFactory.java:[lines 192-196] SF_SWITCH_FALLTHROUGH.
    + Fixed bugs:
    ~ When parsing an class with an invalid constant reference,
    ensure ClassParser.parse() throws ClassFormatException, not
    NullPointerException.
    ~ Ensure that references to a constant pool entry with index
    zero trigger a ClassFormatException, not a
    NullPointerException.
    ~ Ensure that references to the unused constant pool entry
    after a long/double entry triggers a ClassFormatException,
    not a NullPointerException.
    ~ Test and coverage of InstructionFactory #190.
    ~ Verifier: test and coverage for SWAP instruction #188.
    ~ Exception parsing Kotlin class with 'fun `method name with
    () in it`()' #205.
    ~ Fix null pointers in AnnotationEntry #213.
    ~ Field not found, search field in both super class and
    implemented interfaces (5x duplicated code to find field by
    name and type is refactored to a new method and now
    supports package-private) #181.
    ~ BCEL-366: Use alternative name for broken classes under
    test #220.
    ~ BCEL-367: Fixes java.lang.IndexOutOfBoundsException for
    ATHROW on empty stack #223.
    ~ BCEL-368: Fixes java.lang.StackOverflowError in
    Select#toString(boolean) #229.
    ~ Fix for type.getType(...) use on non-signature type names
    [#221].
    ~ Fix EmptyVisitorTestCase on Java 21.
    + Changes:
    ~ Bump commons-parent from 54 to 65 #189, #198, #222.
    ~ Bump jna.version from 5.12.1 to 5.13.0 #203.
    ~ Bump kotlin-stdlib from 1.8.10 to 1.9.21 #217, #219, #227,
    [#231], #235, #245, #247.
    ~ Bump commons-io from 2.11.0 to 2.15.1.
    ~ Bump commons-lang3 from 3.12.0 to 3.14.0.
    ~ Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to
    3.1.1 #246.</changelog>
  <changelog author="gus.kenion@suse.com" date="1726833600">- Update to version 6.10.0
  * 6.10.0 (2024-06-24) Maintenance and bug fix release. Requires
    a minimum of Java 8.
    + Fix PMD UnnecessaryFullyQualifiedName.
    + Fix PMD EmptyCatchBlock by allowing commented blocks.
    + Fix PMD EmptyControlStatement by allowing commented blocks.
    + Fix SpotBugs RV_RETURN_VALUE_IGNORED_BAD_PRACTICE in
    JasminVisitor.
    + SpotBugs checks should ignore code generated by JavaCC.
    + Fix SpotBugs URF_UNREAD_FIELD in ClassDumper.
    + Fix SpotBugs DM_DEFAULT_ENCODING in JasminVisitor.
    + Fix SpotBugs RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE in
    ASTFunAppl.
    + Fix SpotBugs RV_ABSOLUTE_VALUE_OF_HASHCODE in
    Mini.Environment.
    + Fix SpotBugs DM_DEFAULT_ENCODING in Mini.MiniC.
    + Fix SpotBugs WMI_WRONG_MAP_ITERATOR in Package.go(String[]).
    + Deprecate TransitiveHull.INGORED in favor of
    TransitiveHull.getIgnored().
    + Add accessors to model and unit tests, Javadoc #183.
    + Add Const.MAJOR_22.
    + Add Const.MINOR_22.
    + Add Const.MAJOR_23.
    + Add Const.MINOR_23.
    + Add Const.MAJOR_24.
    + Add Const.MINOR_24.
    + Bump tests from org.assertj:assertj-core 3.25.3 to 3.26.3
    [#322], #332.
    + Bump tests from org.jetbrains.kotlin:kotlin-stdlib 1.9.23 to
    2.0.0 #309, #318.
    + Bump tests from org.apache.commons:commons-collections4 4.4
    to 4.5.0-M2.
    + Bump org.apache.commons:commons-parent from 69 to 71.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #331.
  * Includes changes from  6.9.0 Maintenance and bug fix release.
    +  Add Support for Java 16 records #290.
    +  Add null guard for InstructionFactory.createInvoke() #289.
    +  Avoid possible NullPointerException in
    org.apache.bcel.classfile.DescendingVisitor.accept(E[]).
    +  Avoid possible NullPointerException in
    AnnotationEntryGen.getAnnotationAttributes(ConstantPoolGen,
    AnnotationEntryGen[]).
    +  Avoid possible NullPointerException in
    AnnotationEntryGen.copyValues(ElementValuePair[],
    ConstantPoolGen, boolean).
    +  Avoid possible NullPointerException in
    ArrayElementValueGen.ArrayElementValueGen(int,
    ElementValue[], ConstantPoolGen).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.ClassGen.setMethods(Method[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.ClassGen.unpackAnnotations(Attribute[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.classfile.ParameterAnnotationEntry.createParameterAnnotationEntries(Attribute[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.ClassGen.ClassGen(JavaClass).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.FieldGenOrMethodGen.addAll(Attribute[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.classfile.ParameterAnnotationEntry.createParameterAnnotationEntries(Attribute[]).
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.MethodParameters.setParameters(MethodParameter[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.ParameterAnnotations.setParameterAnnotationTable(ParameterAnnotationEntry[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.LocalVariableTypeTable.setLocalVariableTable(LocalVariable[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.LocalVariableTable.setLocalVariableTable(LocalVariable[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.LineNumberTable.setLineNumberTable(LineNumber[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setMethods(Method[] with
    null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setInterfaces(int[]) with
    null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setInterfaceNames(String[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setFields(Field[]) with
    null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setAttributes(Attribute[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.ConstantPool.setConstantPool(Constant[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.FieldOrMethod.setAttributes(Attribute[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.Annotations.setAnnotationTable(AnnotationEntry[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.ArrayElementValue.ArrayElementValue(int,
    ElementValue[], ConstantPool) with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethod.BootstrapMethod(int,
    int[]) with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethod.setBootstrapArguments(int[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethods.BootstrapMethods(int,
    int, BootstrapMethod[], ConstantPool) with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethods.setBootstrapMethods(BootstrapMethod[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.InstructionList.redirectLocalVariables(LocalVariableGen[],
    InstructionHandle, InstructionHandle) with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.InstructionList.redirectExceptionHandlers(CodeExceptionGen[],
    InstructionHandle, InstructionHandle) with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.InstructionList.findHandle(InstructionHandle[],
    int[], int, int) with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.setArgumentTypes(Type[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.setArgumentNames(String[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.removeRuntimeAttributes(Attribute[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.makeMutableVersion(AnnotationEntry[])
    with null.
    +  Bump org.apache.commons:commons-parent from 66 to 69 #283,
    [#297].
    +  Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.22 to 1.9.23
    [#284].
    +  Bump commons-io:commons-io from 2.15.1 to 2.16.1 #295, #300.</changelog>
</package>
<package pkgid="3cea8bede77a7bfc33709591883a6902234e5338130f93c405432cc70e7d02d30c9fff78cbe06208ddea6fd3a8a6dd43a32ea6866dcd0932d54c1ef2375d03a0" name="bcel-javadoc" arch="noarch">
  <version epoch="0" ver="6.10.0" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1495195200">- Buildignore more java implementations</changelog>
  <changelog author="fstrba@suse.com" date="1506513600">- Allow building with any java-devel provider
- Specify java source and target level 1.6 to fix build with jdk9
- Added patch:
  * bcel-5.2-encoding.patch
    + specify the correct encoding of the files</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1542283200">- Add maven pom file and generate mvn(...) dependencies for this
  package</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Build against the generic xml-apis provider which allows
  building against bootstrap and non-bootstrap packages according
  of their availability.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- BuildIgnore xalan-j2, xml-apis, xml-resolver, xerces-j2, since
  those packages are not necessary for the build.</changelog>
  <changelog author="pmonreal@suse.com" date="1668081600">- Security fix: [bsc#1205125, CVE-2022-42920]
  * Apache Commons BCEL prior to 6.6.0 allows producing
    arbitrary bytecode via out-of-bounds writing
  * Add bcel-CVE-2022-42920.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693483200">- Update to version 6.7.0
  * 6.7.0 (2022-11-28) Maintenance and bug fix release.
  * 6.6.1 (2022-10-29) Maintenance and bug fix release.
  * 6.6.0 (2022-10-08) Minor feature and bug fix release.
  * 6.5.0 (2020-06-05) Minor feature and bug fix release.
  * 6.4.1 (2019-09-26) Bug fix release.
  * 6.4.0 (2019-09-20) Feature and bug fix release.
  * 6.3.1 (2019-03-20) Bug fix release
  * 6.3 (2019-01-23) Experimental Java 9, 10, 11, 12-EA, and 13-EA
    Support
  * 6.2 (2017-12-08) Experimental Java 9 Support
  * 6.1 (2017-09-14) Experimental Java 9 Support
  * 6.0 (2016-07-10) Apache Commons BCEL 6.0 is a major release
    supporting the new features introduced in Java 6, 7 and 8. It
    requires Java 7 or higher to run.
    COMPATIBILITY with 5.2
    + Binary compatible
  - not strictly compatible
  - The constant interface org.apache.bcel.Constants has been
    deprecated. Classes which implemented this interface in 5.2
    now use the constants defined in the org.apache.bcel.Const
    class.
  - The constant interface
    org.apache.bcel.generic.InstructionConstants has been
    deprecated. Classes which implemented this interface in 5.2
    now use the constants defined in the
    org.apache.bcel.generic.InstructionConsts class.
  - Return type of method 'public java.lang.Object
    getElementAt(int)' in org.apache.bcel.verifier
    .VerifierFactoryListModel has been changed to
    java.lang.String.
  - The BCEL classes do no longer implement java.io.Serializable.
    + Source compatible
  - Yes, sort of;
  - The org.apache.bcel.classfile.Visitor interface has been
    enhanced with additional methods. If you implemented it
    directly instead of extending the EmptyVisitor class you'll
    have to implement the new methods.
  - The org.apache.bcel.generic.Visitor interface has been
    enhanced with an additional method. If you implemented it
    directly instead of extending the EmptyVisitor class you'll
    have to implement the new methods.
    + Semantic compatible
  - Yes, except:
  - BCEL 6.0 handles new attributes such as code annotations
    that could only be processed by implementing a custom
    AttributeReader in the previous versions. Code relying on
    this behavior will have to be adjusted since the
    AttributeReader will no longer be called in these cases.
    + For full information about API changes please see the extended
    Clirr report: https://commons.apache.org/bcel/clirr-report.html
- Removed patches:
  * bcel-5.2-encoding.patch
    + part of our own build.xml file generated to build with ant
  * bcel-CVE-2022-42920.patch
    + integrated upstrea</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1703332800">- Update to version 6.8.0
  * 6.8.0 (2023-12-08) Maintenance and bug fix release.
    + New features:
    ~ Add and use InvalidMethodSignatureException extending
    ClassFormatException.
    ~ Increase code coverage in Class2HTMLTestCase with new test
    input Java4Example #186.
    ~ Add verifier tests on some opcodes #180.
    ~ Added signature test cases for class/method, and bad
    signatures #182.
    ~ Add Const.MAJOR_20.
    ~ Add Const.MINOR_20.
    ~ Add Const.MAJOR_21.
    ~ Add Const.MINOR_21.
    ~ [Bcelifier] stackmap support to pass JDK verifier #177.
    ~ Fix SpotBugs [ERROR] Class org.apache.bcel.util.ClassVector
    defines non-transient non-serializable instance field vec
    [org.apache.bcel.util.ClassVector] In ClassVector.java
    SE_BAD_FIELD.
    ~ Fix SpotBugs [ERROR] Switch statement found in
    org.apache.bcel.util.BCELFactory.visitAllocationInstruction(AllocationInstruction)
    where one case falls through to the next case
    [org.apache.bcel.util.BCELFactory,
    org.apache.bcel.util.BCELFactory] At
    BCELFactory.java:[lines 188-191]Another occurrence at
    BCELFactory.java:[lines 192-196] SF_SWITCH_FALLTHROUGH.
    + Fixed bugs:
    ~ When parsing an class with an invalid constant reference,
    ensure ClassParser.parse() throws ClassFormatException, not
    NullPointerException.
    ~ Ensure that references to a constant pool entry with index
    zero trigger a ClassFormatException, not a
    NullPointerException.
    ~ Ensure that references to the unused constant pool entry
    after a long/double entry triggers a ClassFormatException,
    not a NullPointerException.
    ~ Test and coverage of InstructionFactory #190.
    ~ Verifier: test and coverage for SWAP instruction #188.
    ~ Exception parsing Kotlin class with 'fun `method name with
    () in it`()' #205.
    ~ Fix null pointers in AnnotationEntry #213.
    ~ Field not found, search field in both super class and
    implemented interfaces (5x duplicated code to find field by
    name and type is refactored to a new method and now
    supports package-private) #181.
    ~ BCEL-366: Use alternative name for broken classes under
    test #220.
    ~ BCEL-367: Fixes java.lang.IndexOutOfBoundsException for
    ATHROW on empty stack #223.
    ~ BCEL-368: Fixes java.lang.StackOverflowError in
    Select#toString(boolean) #229.
    ~ Fix for type.getType(...) use on non-signature type names
    [#221].
    ~ Fix EmptyVisitorTestCase on Java 21.
    + Changes:
    ~ Bump commons-parent from 54 to 65 #189, #198, #222.
    ~ Bump jna.version from 5.12.1 to 5.13.0 #203.
    ~ Bump kotlin-stdlib from 1.8.10 to 1.9.21 #217, #219, #227,
    [#231], #235, #245, #247.
    ~ Bump commons-io from 2.11.0 to 2.15.1.
    ~ Bump commons-lang3 from 3.12.0 to 3.14.0.
    ~ Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to
    3.1.1 #246.</changelog>
  <changelog author="gus.kenion@suse.com" date="1726833600">- Update to version 6.10.0
  * 6.10.0 (2024-06-24) Maintenance and bug fix release. Requires
    a minimum of Java 8.
    + Fix PMD UnnecessaryFullyQualifiedName.
    + Fix PMD EmptyCatchBlock by allowing commented blocks.
    + Fix PMD EmptyControlStatement by allowing commented blocks.
    + Fix SpotBugs RV_RETURN_VALUE_IGNORED_BAD_PRACTICE in
    JasminVisitor.
    + SpotBugs checks should ignore code generated by JavaCC.
    + Fix SpotBugs URF_UNREAD_FIELD in ClassDumper.
    + Fix SpotBugs DM_DEFAULT_ENCODING in JasminVisitor.
    + Fix SpotBugs RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE in
    ASTFunAppl.
    + Fix SpotBugs RV_ABSOLUTE_VALUE_OF_HASHCODE in
    Mini.Environment.
    + Fix SpotBugs DM_DEFAULT_ENCODING in Mini.MiniC.
    + Fix SpotBugs WMI_WRONG_MAP_ITERATOR in Package.go(String[]).
    + Deprecate TransitiveHull.INGORED in favor of
    TransitiveHull.getIgnored().
    + Add accessors to model and unit tests, Javadoc #183.
    + Add Const.MAJOR_22.
    + Add Const.MINOR_22.
    + Add Const.MAJOR_23.
    + Add Const.MINOR_23.
    + Add Const.MAJOR_24.
    + Add Const.MINOR_24.
    + Bump tests from org.assertj:assertj-core 3.25.3 to 3.26.3
    [#322], #332.
    + Bump tests from org.jetbrains.kotlin:kotlin-stdlib 1.9.23 to
    2.0.0 #309, #318.
    + Bump tests from org.apache.commons:commons-collections4 4.4
    to 4.5.0-M2.
    + Bump org.apache.commons:commons-parent from 69 to 71.
    + Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to
    3.1.0 #331.
  * Includes changes from  6.9.0 Maintenance and bug fix release.
    +  Add Support for Java 16 records #290.
    +  Add null guard for InstructionFactory.createInvoke() #289.
    +  Avoid possible NullPointerException in
    org.apache.bcel.classfile.DescendingVisitor.accept(E[]).
    +  Avoid possible NullPointerException in
    AnnotationEntryGen.getAnnotationAttributes(ConstantPoolGen,
    AnnotationEntryGen[]).
    +  Avoid possible NullPointerException in
    AnnotationEntryGen.copyValues(ElementValuePair[],
    ConstantPoolGen, boolean).
    +  Avoid possible NullPointerException in
    ArrayElementValueGen.ArrayElementValueGen(int,
    ElementValue[], ConstantPoolGen).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.ClassGen.setMethods(Method[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.ClassGen.unpackAnnotations(Attribute[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.classfile.ParameterAnnotationEntry.createParameterAnnotationEntries(Attribute[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.ClassGen.ClassGen(JavaClass).
    +  Avoid possible NullPointerException in
    org.apache.bcel.generic.FieldGenOrMethodGen.addAll(Attribute[]).
    +  Avoid possible NullPointerException in
    org.apache.bcel.classfile.ParameterAnnotationEntry.createParameterAnnotationEntries(Attribute[]).
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.MethodParameters.setParameters(MethodParameter[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.ParameterAnnotations.setParameterAnnotationTable(ParameterAnnotationEntry[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.LocalVariableTypeTable.setLocalVariableTable(LocalVariable[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.LocalVariableTable.setLocalVariableTable(LocalVariable[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.LineNumberTable.setLineNumberTable(LineNumber[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setMethods(Method[] with
    null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setInterfaces(int[]) with
    null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setInterfaceNames(String[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setFields(Field[]) with
    null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.JavaClass.setAttributes(Attribute[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.ConstantPool.setConstantPool(Constant[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.FieldOrMethod.setAttributes(Attribute[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.Annotations.setAnnotationTable(AnnotationEntry[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.ArrayElementValue.ArrayElementValue(int,
    ElementValue[], ConstantPool) with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethod.BootstrapMethod(int,
    int[]) with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethod.setBootstrapArguments(int[])
    with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethods.BootstrapMethods(int,
    int, BootstrapMethod[], ConstantPool) with null.
    +  Avoid NullPointerException after calling
    org.apache.bcel.classfile.BootstrapMethods.setBootstrapMethods(BootstrapMethod[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.InstructionList.redirectLocalVariables(LocalVariableGen[],
    InstructionHandle, InstructionHandle) with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.InstructionList.redirectExceptionHandlers(CodeExceptionGen[],
    InstructionHandle, InstructionHandle) with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.InstructionList.findHandle(InstructionHandle[],
    int[], int, int) with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.setArgumentTypes(Type[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.setArgumentNames(String[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.removeRuntimeAttributes(Attribute[])
    with null.
    +  Avoid NullPointerException calling
    org.apache.bcel.generic.MethodGen.makeMutableVersion(AnnotationEntry[])
    with null.
    +  Bump org.apache.commons:commons-parent from 66 to 69 #283,
    [#297].
    +  Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.22 to 1.9.23
    [#284].
    +  Bump commons-io:commons-io from 2.15.1 to 2.16.1 #295, #300.</changelog>
</package>
<package pkgid="74a7ad5c0faeff9a136bd15a24ec01b8aef81bb03d0b97aa50bdda4fefbce27dd7181c474230a791ff4b1edae8bb0c0cd4e607bd38753f567aa3aa330cb64e41" name="bcel5_3" arch="noarch">
  <version epoch="0" ver="5.3" rel="bp160.1.11"/>
  <changelog author="mvyskocil@suse.cz" date="1244030400">- Initial SUSE packaging of bcel5_3 (from jpackage.org 5.0)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9:
  * specify java source and target level 1.6
  * specify encoding of source files
- Clean spec file and fix rpmlint errors</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668081600">- Security fix: [bsc#1205125, CVE-2022-42920]
  * Apache Commons BCEL prior to 6.6.0 allows producing
    arbitrary bytecode via out-of-bounds writing
  * Add bcel-CVE-2022-42920.patch</changelog>
</package>
<package pkgid="940e5c431eaafbf54fa944febaff9e4dc7240d68fa3c18cd718ce986b5d3280d69580bfd242e7609481d2d1a5fa84d65937f3d3b89a8e851f55a2fc93988ddd5" name="bcel5_3-javadoc" arch="noarch">
  <version epoch="0" ver="5.3" rel="bp160.1.11"/>
  <changelog author="mvyskocil@suse.cz" date="1244030400">- Initial SUSE packaging of bcel5_3 (from jpackage.org 5.0)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Fix build with jdk9:
  * specify java source and target level 1.6
  * specify encoding of source files
- Clean spec file and fix rpmlint errors</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1668081600">- Security fix: [bsc#1205125, CVE-2022-42920]
  * Apache Commons BCEL prior to 6.6.0 allows producing
    arbitrary bytecode via out-of-bounds writing
  * Add bcel-CVE-2022-42920.patch</changelog>
</package>
<package pkgid="d1779feb7e3724332126aac9819e2dc98439546de7e1431c21985a6d5e0f1adb8de9735cd57739bb87154dd4e3aecbb097b25cde493698b84dbd382f66b77db1" name="bcftools" arch="x86_64">
  <version epoch="0" ver="1.19" rel="bp160.1.12"/>
  <changelog author="flyos@mailoo.org" date="1531396800">- Cleaned spec file using spec-cleaner
- Update to 1.8
  * `-i, -e` filtering: Support for custom perl scripts
  * `+contrast`: New plugin to annotate genotype differences between groups of samples
  * `+fixploidy`: New options for simpler ploidy usage
  * `+setGT`: Target genotypes can be set to phased by giving `--new-gt p`
  * `run-roh.pl`: Allow to pass options directly to `bcftools roh`
  * Number of bug fixes
  * `-i, -e` filtering: Major revamp, improved filtering by FORMAT fields
    and missing values. New GT=ref,alt,mis etc keywords, check the documenation
    for details.
  * `query`: Only matching expression are printed when both the -f and -i/-e
    expressions contain genotype fields. Note that this changes the original
    behavior. Previously all samples were output when one matching sample was
    found. This functionality can be achieved by pre-filtering with view and then
    streaming to query. Compare
    bcftools query -f'[%CHROM:%POS %SAMPLE %GT\n]' -i'GT="alt"' file.bcf
    and
    bcftools view -i'GT="alt"' file.bcf -Ou | bcftools query -f'[%CHROM:%POS %SAMPLE %GT\n]'
  * `annotate`: New -k, --keep-sites option
  * `consensus`: Fix --iupac-codes output
  * `csq`: Homs always considered phased and other fixes
  * `norm`: Make `-c none` work and remove `query -c`
  * `roh`: Fix errors in the RG output
  * `stats`: Allow IUPAC ambiguity codes in the reference file; report the number of missing genotypes
  * `+fill-tags`: Add ExcHet annotation
  * `+setGt`: Fix bug in binom.test calculation, previously it worked only for nAlt&lt;nRef!
  * `+split`: New plugin to split a multi-sample file into single-sample files in one go
  * Improve python3 compatibility in plotting scripts
  * New `sort` command.
  * New options added to the `consensus` command. Note that the `-i, --iupac`
    option has been renamed to `-I, --iupac`, in favor of the standard
    `-i, --include`.
  * Filtering expressions (`-i/-e`): support for `GT=&lt;type&gt;` expressions and
    for lists and ranges (#639) - see the man page for details.
  * `csq`: relax some GFF3 parsing restrictions to enable using Ensembl
    GFF3 files for plants (#667)
  * `stats`: add further documentation to output stats files (#316) and
    include haploid counts in per-sample output (#671).
  * `plot-vcfstats`: further fixes for Python3 (@nsoranzo, #645, #666).
  * `query` bugfix (#632)
  * `+setGT` plugin: new option to set genotypes based on a two-tailed binomial
    distribution test. Also, allow combining `-i/-e` with `-t q`.
  * `mpileup`: fix typo (#636)
  * `convert --gvcf2vcf` bugfix (#641)
  * `+mendelian`: recognize some mendelian inconsistencies that were
    being missed (@oronnavon, #660), also add support for multiallelic
    sites and sex chromosomes.</changelog>
  <changelog author="flyos@mailoo.org" date="1536235200">- Update to 1.9
  * `annotate`
  - REF and ALT columns can be now transferred from the annotation
    file.
  - fixed bug when setting vector_end values.
  * `consensus`
  - new -M option to control output at missing genotypes
  - variants immediately following insersions should not be skipped.
    Note however, that the current fix requires normalized VCF and may
    still falsely skip variants adjacent to multiallelic indels.
  - bug fixed in -H selection handling
  * `convert`
  - the --tsv2vcf option now makes the missing genotypes diploid,
    "./." instead of "."
  - the behavior of -i/-e with --gvcf2vcf changed. Previously only
    sites with FILTER set to "PASS" or "." were expanded and the -i/-e
    options dropped sites completely. The new behavior is to let the -i/-e
    options control which records will be expanded. In order to drop
    records completely, one can stream through "bcftools view" first.
  * `csq`
  - since the real consequence of start/splice events are not known,
    the aminoacid positions at subsequent variants should stay unchanged
  - add `--force` option to skip malformatted transcripts in GFFs
    with out-of-phase CDS exons.
  * `+dosage`: output all alleles and all their dosages at multiallelic
    sites
  * `+fixref`: fix serious bug in -m top conversion
  * `-i/-e` filtering expressions:
  - add two-tailed binomial test
  - add functions N_PASS() and F_PASS()
  - add support for lists of samples in filtering expressions, with
    many samples it was impractical to list them all on the command line.
    Samples can be now in a file as, e.g., GT[@samples.txt]="het"
  - allow multiple perl functions in the expressions and some bug
    fixes
  - fix a parsing problem, '@' was not removed from '@filename'
    expressions
  * `mpileup`: fixed bug where, if samples were renamed using the `-G`
    (`--read-groups`) option, some samples could be omitted from the
    output file.
  * `norm`: update INFO/END when normalizing indels
  * `+split`: new -S option to subset samples and to use custom file
    names instead of the defaults
  * `+smpl-stats`: new plugin
  * `+trio-stats`: new plugin
  * Fixed build problems with non-functional configure script produced
    on some platforms</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580904000">- Update to 1.10.2
  * This release fixes crashes reported on files including integer
    INFO tags with values outside the range officially supported
    by VCF. It also fixes a bug where invalid BCF files would be
    created if such values were present.
- Update to 1.10.0
  + Numerous bug fixes, usability improvements and sanity checks were added to prevent common user errors.
  + The -r, --regions (and -R, --regions-file) option should never create unsorted VCFs or duplicates records again. This also fixes rare cases where a spanning deletion makes a subsequent record invisible to bcftools isec and other commands.
  + Additions to filtering and formatting expressions
  * support for the spanning deletion alternate allele (ALT=*)
  * new ILEN filtering expression to be able to filter by indel length
  * new MEAN, MEDIAN, MODE, STDEV, phred filtering functions
  * new formatting expression %PBINOM (phred-scaled binomial probability), %INFO (the whole INFO column), %FORMAT (the whole FORMAT column), %END (end position of the REF allele), %END0 (0-based end position of the REF allele), %MASK (with multiple files indicates the presence of the site in other files)
  + New plugins
  * +gvcfz: compress gVCF file by resizing gVCF blocks according to specified criteria
  * +indel-stats: collect various indel-specific statistics
  * +parental-origin: determine parental origin of a CNV region
  * +remove-overlaps: remove overlapping variants.
  * +split-vep: query structured annotations such INFO/CSQ created by bcftools/csq or VEP
  * +trio-dnm: screen variants for possible de-novo mutations in trios
  + annotate
  * new -l, --merge-logic option for combining multiple overlapping regions
  + call
  * new bcftools call -G, --group-samples option which allows grouping samples into populations and applying the HWE assumption within but not across the groups.
  + csq
  * significant reduction of memory usage in the local -l mode for VCFs with thousands of samples and 20% reduction in the non-local haplotype-aware mode.
  * fixes a small memory leak and formatting issue in FORMAT/BCSQ at sites with many consequences
  * do not print protein sequence of start_lost events
  * support for "start_retained" consequence
  * support for symbolic insertions (ALT="&lt;INS...&gt;"), "feature_elongation" consequence
  * new -b, --brief-predictions option to output abbreviated protein predictions.
  + concat
  * the --naive command now checks header compatibility when concatenating multiple files.
  + consensus
  * add a new -H, --haplotype 1pIu/2pIu feature to output first/second allele for phased genotypes and the IUPAC code for unphased genotypes
  * new -p, --prefix option to add a prefix to sequence names on output
  + +contrast
  * added support for Fisher's test probability and other annotations
  + +fill-from-fasta
  * new -N, --replace-non-ACGTN option
  + +dosage
  * fix some serious bugs in dosage calculation
  + +fill-tags
  * extended to perform simple on-the-fly calculations such as calculating INFO/DP from FORMAT/DP.
  + merge
  * add support for merging FORMAT strings
  * bug fixed in gVCF merging
  + mpileup
  * a new optional SCR annotation for the number of soft-clipped reads
  + reheader
  * new -f, --fai option for updating contig lines in the VCF header
  + +trio-stats
  * extend output to include DNM homs and recurrent DNMs
  + VariantKey support</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1581508800">- Add use_python3.patch to switch from python2 to python3</changelog>
  <changelog author="Pierre Bonamy &lt;flyos@mailoo.org&gt;" date="1582632000">- Changed python dependencies from python3 to python3-base and
  python3-matplotlib</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620907200">- Update to version 1.11
  * Breaking change in -i/-e expressions on the FILTER column.
    The new behaviour is:
    Expression 	Result
    FILTER="A" 	Exact match, for example "A;B" does not pass
    FILTER!="A" 	Exact match, for example "A;B" does pass
    FILTER~"A" 	Both "A" and "A;B" pass
    FILTER!~"A" 	Neither "A" nor "A;B" pass
  * Fix in commutative comparison operators, in some cases reversing
    sides would produce incorrect results
  * Better support for filtering on sample subsests
  * bcftools annotate:
  * Previously it was not possible to use --columns =TAG with INFO
    tags and the --merge-logic feature was restricted to tab files
    with BEG,END columns, now extended to work also with REF,ALT.
  * Make annotate -TAG/+TAG work also with FORMAT fields.
  * ID and FILTER can be transferred to INFO and ID can be populated
    from INFO.
  * bcftools consensus:
  * Fix in handling symbolic deletions and overlapping variants.
  * Fix --iupac-codes crash on REF-only positions with ALT=".".
  * Fix --chain crash
  * Preserve the case of the genome reference.
  * Add new -a, --absent option which allows to set positions with
    no supporting evidence to "N" (or any other character).
  * bcftools convert:
  * The option --vcf-ids now works also with -haplegendsample2vcf.
  * New option --keep-duplicates
  * bcftools csq:
  * Add misc/gff2gff.py script for conversion between various
    flavors of GFF files. The initial commit supports only one type
  * Add missing consequence types.
  * Allow overlapping CDS to support ribosomal slippage.
  * bcftools +fill-tags:
  * Added new annotations: INFO/END, TYPE, F_MISSING.
  * bcftools filter:
  * Make --SnpGap optionally filter also SNPs close to other variant
    types.
  * bcftools gtcheck:
  * Complete revamp of the command. The new version is faster and allows
    N:M sample comparisons, not just 1:N or NxN comparisons. Some
    functionality was lost (plotting and clustering) but may be added back
    on popular demand.
  * bcftools +mendelian:
  * Revamp of user options, output VCFs with mendelian errors annotation,
    read PED files
  * bcftools merge:
  * Update headers when appropriate with the '--info-rules *:join'
    INFO rule.
  * Local alleles merging that produce LAA and LPL when requested, a
    draft implementation of samtools/hts-specs#434
  * New --no-index which allows to merge unindexed files.
  * Fixes in gVCF merging.
  * bcftools norm:
  * Fixes in --check-ref s reference setting features with non-ACGT bases.
  * New --keep-sum switch to keep vector sum constant when splitting
    multiallelics.
  * bcftools +prune:
  * Extend to allow annotating with various LD metrics: r^2, Lewontin's D'
  * bcftools query:
  * New %N_PASS() formatting expression to output the number of samples
    that pass the filtering expression.
  * bcftools reheader:
  * Improved error reporting to prevent user mistakes.
  * bcftools roh:
  * The --AF-file description incorrectly suggested "REF\tALT"
    instead of the correct "REF,ALT".
  * RG lines could have negative length.
  * new --include-noalt option to allow also ALT=. records.
  * bcftools scatter:
  * New plugin intended as a convenient inverse to concat
  * bcftools +split:
  * New --groups-file option for more flexibility of defining
    desired output
  * New --hts-opts option to reduce required memory by reusing
    one output
    header and allow overriding the default hFile's block size
  * Add support for multisample output and sample renaming
  * bcftools +split-vep:
  * Add default types (Integer, Float, String) for VEP subfields
    and make --columns - extract all subfields into INFO tags
    in one go.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620993600">- Update to version 1.12
  * The output file type is determined from the output file name
    suffix, where available, so the -O/--output-type option is often
    no longer necessary.
  * Make F_MISSING in filtering expressions work for sites with
    multiple ALT alleles
  * Fix N_PASS and F_PASS to behave according to expectation when
    reverse logic is used (#1397). This fix has the side effect of
    query (or programs like +trio-stats) behaving differently with
    these expressions, operating now in site-oriented rather than
    sample-oriented mode.
  * bcftools annotate:
  * New --rename-annots option to help fix broken VCFs
  * New -C option allows to read a long list of options from a file
    to prevent very long command lines.
  * New append-missing logic allows annotations to be added for
    each ALT allele in the same order as they appear in the VCF.
  * bcftools concat:
  * Do not phase genotypes by mistake if they are not already
    phased with -l
  * bcftools consensus:
  * New --mask-with, --mark-del, --mark-ins, --mark-snv options
  * Symbolic &lt;DEL&gt; should have only one REF base. If there are
    multiple, take POS+1 as the first deleted base.
  * Make consensus work when the first base of the reference genome
    is deleted.
  * bcftools +contrast:
  * The NOVELGT annotation was previously not added when requested.
  * bcftools convert:
  * Make the --hapsample and --hapsample2vcf options consistent with
    each other and with the documentation.
  * bcftools call:
  * Revamp of call -G, previously sample grouping by population was
    not truly independent and could still be influenced by the
    presence of other sample groups.
  * Optional addition of INFO/PV4 annotation with call -a INFO/PV4
  * Remove generation of useless HOB and ICB annotation;
    use +fill-tags -- -t HWE,ExcHet instead
  * The call -f option was renamed to -a to (1) make it consistent
    with mpileup and (2) to indicate that it includes both INFO and
    FORMAT annotations
  * bcftools csq:
  * Fix a bug wich caused incorrect FORMAT/BCSQ formatting at sites
    with too many per-sample consequences
  * Fix a bug which incorrectly handled the --ncsq parameter and
    could clash with reserved BCF values, consequently producing
    truncated or even incorrect output of the %TBCSQ formatting
    expression in bcftools query.
  * bcftools +fill-tags:
  * MAF definition revised for multiallelic sites, the second most
    common allele is considered to be the minor allele
  * New FORMAT/VAF, VAF1 annotations to set the fraction of
    alternate reads provided FORMAT/AD is present
  * bcftools gtcheck:
  * support matching of a single sample against all other samples
    in the file with -s qry:sample -s gt:-.
  * bcftools merge:
  * Make merge -R behavior consistent with other commands and pull
    in overlapping records with POS outside of the regions
  * Bug fix
  * bcftools mpileup:
  * Add new optional tag mpileup -a FORMAT/QS
  * bcftools norm:
  * New -a, --atomize functionality to decompose complex variants,
    for example MNVs into consecutive SNVs
  * New option --old-rec-tag to indicate the original variant
  * bcftools query:
  * Incorrect fields were printed in the per-sample output when
    subset of samples was requested via -s/-S and the order of
    samples in the header was different from the requested -s/-S order
  * bcftools +prune:
  * New options --random-seed and --nsites-per-win-mode
  * bcftools +split-vep:
  * Transcript selection now works also on the raw CSQ/BCSQ annotation.
  * Bug fix, samples were dropped on VCF input and VCF/BCF output
  * bcftools stats:
  * Changes to QUAL and ts/tv plotting stats: avoid capping QUAL to
    predefined bins, use an open-range logarithmic binning instead
  * plot dual ts/tv stats: per quality bin and cumulative as if
    threshold applied on the whole dataset
  * bcftools +trio-dnm2:
  * Major revamp of +trio-dnm plugin, which is now deprecated
    and replaced by +trio-dnm2.
  * The original trio-dnm calling model used genotype likelihoods
    (PLs) as the input for calling.
  * This new version also implements the DeNovoGear model.
  * For more details see http://samtools.github.io/bcftools/trio-dnm.pdf
- Update use_python3.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650542400">- Update to version 1.15.1
  * bcftools annotate: New -H, --header-line convenience option to
    pass a header line on command line
  * bcftools csq: A list of consequence types supported by bcftools
    csq has been added to the manual page.
  * bcftools +fill-tags:
  * Extend generalized functions so that FORMAT tags can be filled
    as well
  * Allow multiple custom functions in a single run.
  * bcftools norm:
  * Fix an assertion failure triggered when a faulty VCF file with
    a '-' character in the REF allele was used with bcftools
    norm --atomize.
  * Fix the loss of phasing in half-missing genotypes in variant
    atomization
  * bcftools roh: Fix a bug that could result in an endless loop or
    incorrect AF estimate when missing genotypes are present and
    the --estimate-AF - option was used
  * bcftools +split-vep: VEP fields with characters disallowed in
    VCF tag names by the specification couldn't be queried.
- Update to version 1.15
  * New bcftools head subcommand for conveniently displaying the
    headers of a VCF or BCF file.
  * The -T, --targets-file option had the following bug originating
    in HTSlib code
  * bcftools annotate:
  * In addition to --rename-annots, which requires a file with
    name mappings, it is now possible to do the same on the
    command line -c NEW_TAG:=OLD_TAG
  * Add new option --min-overlap which allows to specify the
    minimum required overlap of intersecting regions
  * Allow to transfer ALT from VCF with or without replacement
  * bcftools convert:
  * Revamp of --gensample, --hapsample and --haplegendsample
    family of options
  * New --3N6 option to output/input the new version of the .gen
    file format
  * Deprecate the --chrom option in favor of --3N6.
  * The CHROM:POS_REF_ALT IDs which are used to detect strand
    swaps are required and must appear either in the "SNP ID"
    column or the "rsID" column.
  * bcftools csq: Allow GFF files with phase column unset
  * bcftools filter: New --mask, --mask-file and --mask-overlap
    options to soft filter variants in regions
  * bcftools +fixref
  * The -m id option now works also for non-dbSNP ids
  * New -m flip-all mode for flipping all sites
  * bcftools isec: Prevent segfault on sites filtered with -i/-e
    in all files
  * bcftools mpileup: More flexible read filtering using the options
  * bcftools query: Make the --samples and --samples-file options
    work also in the --list-samples mode.
  * bcftools +setGT: Fix a bug in -t q -e EXPR logic applied on
    FORMAT fields, sites with all samples failing the expression
    EXPR were incorrectly skipped.
  * bcftools sort: make use of the TMPDIR environment variable
    when defined
  * bcftools +trio-dnm2: The --use-NAIVE mode now also adds the
    de novo allele in FORMAT/VA
- Update to version 1.14
  * New --regions-overlap and --targets-overlap options which
    address a long-standing design problem with subsetting VCF
    files by region.
  * The --output-type option can be used to override the default
    compression level
  * bcftools annotate:
  * when --set-id and --remove are combined, --set-id cannot use
    tags deleted by --remove.
  * while non-symbolic variation are uniquely identified by
    POS,REF,ALT, symbolic alleles starting at the same position
    were indistinguishable.
  * add a new . modifier to control whether missing values should
    be carried over from a tab-delimited file or not.
  * bcftools +check-ploidy: by default missing genotypes are not
    used when determining ploidy.
  * bcftools concat: new --ligate-force and --ligate-warn options
    for finer control of -l, --ligate behavior in imperfect overlaps.
  * bcftools consensus: Apply mask even when the VCF has no notion
    about the chromosome.
  * bcftools +contrast: support for chunking within map/reduce
    framework allowing to collect NASSOC counts even for empty
    case/control sample sets
  * bcftools csq:
  * bug fix, compound indels were not recognised in some cases
  * compound variants were incorrectly marked as 'inframe' even when
    stop codon would occur before the frame was restored
  * bug fix, FORMAT/BCSQ bitmasks could have been assigned incorrectly
    to some samples at multiallelic sites, a superset of the correct
    consequences would have been set
  * bug fix, the upstream stop could be falsely assigned to all samples
    in a multi-sample VCF even if the stop was relevant for a single
    sample only
  * further improve the detection of mismatching chromosome naming
    (e.g. "chrX" vs "X") in the GFF, VCF and fasta files
  * bcftools merge: keep (sum) INFO/AN,AC values when merging VCFs
    with no samples
  * bcftools mpileup: new --indel-size option which allows to increase
    the maximum considered indel size considered, large deletions in
    long read data are otherwise lost.
  * bcftools norm:
  * atomization now supports Number=A,R string annotations
  * assign as many alternate alleles to genotypes at multiallelic
    sites in the-m + mode, disregarding the phase.
  * bcftools sort: increase accuracy of the --max-mem option limit,
    previously the limit could be exceeded by more than 20%
  * bcftools +trio-dnm: new --with-pAD option to allow processing of
    VCFs without FORMAT/QS.
  * bcftools view: the functionality of the option --compression-level
    lost in 1.12 has been restored
- Update to version 1.13
  * bcftools annotate:
  * Fix rare a bug when INFO/END is present, all INFO fields are
    removed with bcftools annotate -x INFO and BCF output is produced.
  * Support for matching annotation line by ID, in addition to
    CHROM,POS,REF, and ALT
  * bcftools csq:
  * When GFF and VCF/fasta use a different chromosome naming convention
    no consequences would be added.
  * Parametrize brief-predictions parameter to allow explicit number
    of amino acids to be printed.
  * bcftools +fill-tags:
  * Generalization and better support for custom functions that allow
    adding new INFO tags based on arbitrary -i, --include type of expressions.
  * When FORMAT/GT is not present, the INFO/AF tag will be newly
    calculated from INFO/AC and INFO/AN.
  * bcftools gtcheck:
  * Switch between FORMAT/GT or FORMAT/PL when one is (implicitly)
    requested but only the other is available
  * Improve diagnostics, printing warnings when a line cannot be
    matched and the number of lines skipped for various reasons
  * bcftools index: The program now accepts both data file name and
    the index file name.
  * bcftools isec: Always generate sites.txt with isec -p
  * bcftools +mendelian: Consider only complete trios,
    do not crash on sample name typos
  * bcftools mpileup:
  * New --seed option for reproducibility of subsampling code in HTSlib
  * The SCR annotation which shows the number of soft-clipped reads
    now correctly pools reads together regardless of the variant type.
  * Major revamp of BAQ.
  * Modified scale of Mann-Whitney U tests.
    Newly INFO/*Z annotations will be printed
  * bcftools norm:
  * Fix Type=Flag output in norm --atomize
  * Atomization must not discard ALT=. records
  * Atomization of AD and QS tags now correctly updates occurrences
    of duplicate alleles within different haplotypes
  * Fix a bug in atomization of Number=A,R tags
  * bcftools reheader: Add -T, --temp-prefix option
  * bcftools +setGT: A wider range of genotypes can be set by the
    plugin by allowing specifying custom genotypes.
  * bcftools +split-vep:
  * New -u, --allow-undef-tags option
  * Better handling of ambiguous keys such as INFO/AF and CSQ/AD.
  * Some consequence field names may not constitute a valid tag name,
    such as "pos(1-based)".
  * bcftools +tag2tag: New --QR-QA-to-QS option to convert annotations
    generated by Freebayes to QS used by BCFtools
  * bcftools +trio-dnm:
  * Add support for sites with more than four alleles.
  * New --use-NAIVE option for a naive DNM calling based solely on
    FORMAT/GT and expected Mendelian inheritance.
  * Fix behaviour to match the documentation, the --dnm-tag DNG option
    now correctly outputs log scaled values by default, not phred scaled.
  * Fix bug in VAF calculation, homozygous de novo variants were
    incorrectly reported as having VAF=50%
  * Fix arithmetic underflow which could lead to imprecise scores
    and improve sensitivity in high coverage regions
  * Allow combining --pn and --pns to set the noise thresholds independently
- Rebased use_python3.patch
- Drop python3 and perl build requirements, not needed, shbang of
  executables can be patched anyway.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1661515200">- Update to release 1.16
  * New plugin `bcftools +variant-distance` to annotate records
    with distance to the nearest variant.
  * The -i/-e filtering expression gained support for multiple
    filters, e.g. `-i FILTER="A;B"`.
- Resolve "file packaged twice" rpmlint warnings</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704283200">- Update to version 1.19
  Too many changes to list, for details see
  https://github.com/samtools/bcftools/releases/tag/1.19
- Update to version 1.18
  Too many changes to list, for details see
  https://github.com/samtools/bcftools/releases/tag/1.18
- Update to version 1.17
  Too many changes to list, for details see
  https://github.com/samtools/bcftools/releases/tag/1.17</changelog>
</package>
<package pkgid="c04eafba4f8a5c8bfb381e6b09bc61986ca05b4ca0d13d88c67191c13584afb909cb84d09f2d36bf7dbc2c7dde8b326eb7c4ff79349ce76d7eac30646eca1d8d" name="bcg729-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1498996800">- Initial package.</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- RPM group/description correction.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Update to version 1.0.4:
  * Build system fixes.
- Remove bcg729-1.0.3-fix-includedir.patch: fixed upstream.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Use correct macros for cmake build</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574078400">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 1.1.1:
  * compatibility with old compilers
  * Fixed infinite loop in VAD module and overflow in encoder
  * build scripts fixes</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1643716800">- fixed license tag</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="ba309f1a21f02f9aaa21e53ca549b35ba94f0e904d6cbf440e5b4eae35c2720e30b6d0fc956df200618d5efef3a9e736a787d6e69ee2d59b0595c8426995ef48" name="bcm20702a1-firmware" arch="noarch">
  <version epoch="0" ver="1201650" rel="bp160.1.9"/>
  <changelog author="tchvatal@suse.com" date="1458734400">- Try to add modalias to auto install on hardware that requires it</changelog>
  <changelog author="matz.fuchs@gmx.at" date="1487073600">- Fix typo in filelist, add one additional firmware file</changelog>
  <changelog author="tiwai@suse.de" date="1540814400">- Fetch &amp; install another variant firmware (0a5c:21e8) (bsc#1087996)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Avoid bashisms in %post</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350400">- Use https to fetch the archive bsc#1154083</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1592740800">- add support for BCM20702A1-050d-065a.hcd
  (050d:065a Belkin Components F8T065BF Mini Bluetooth 4.0 Adapter)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="Javier S. Pedro &lt;dev.rpm@javispedro.com&gt;" date="1614427200">- fix boo#1175038 - remove unnecessary %postun scriptlet that is
  incorrectly deleting all package files on upgrade; all files are
  already listed in %files as %ghost so no scriptlet is needed.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1616328000">- Fix build on Leap which does not have %_firmwaredir</changelog>
  <changelog author="tiwai@suse.de" date="1650888000">- Drop superfluous dependency on kernel-firmware (bsc#1198795)</changelog>
</package>
<package pkgid="1410bdd9979634e5953436efbb5f1814795a2ee5ea6fadecc90b9138fe92c6cb86a2ece4f57bdd8efe0ceb94d14b59f25544622205128555dd9b1b8f83ce5bd7" name="bcm43xx-firmware" arch="noarch">
  <version epoch="0" ver="20180314" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1600171200">- Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
  * BCM43430A1.hcd
  * BCM4345C0.hcd</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1606478400">-  Introduce firmware files for RPi400:
  * brcmfmac43456-sdio.bin
  * brcmfmac43456-sdio.clm_blob
  * brcmfmac43456-sdio.txt</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1606737600">- Introduce firmware file for RPi Compute Module 4
- Update BCM4345C0.hcd
- Update brcmfmac43456-sdio.clm_blob</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1614600000">- Cater for old and new ways of configuring bluetooth on RPi. Users of
  'hciattach' expect the firmware in '/lib/firmware' while users of the serdev
  configured bluetooth setups will expect it in '/lib/firmware/brcm'
  (bsc#1177189).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1615896000">- Introduce Raspberry Pi 4 Compute Module's brcmfmac43455 configuration file.
  (bsc#1183524)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1617969600">- Introduce firmware file for Raspberry Pi 400's bluetooth.</changelog>
  <changelog author="mbrugger@suse.com" date="1639569600">- Introduce firmware files for Raspberry Pi Zero 2 W support (jsc#SLE-23064).
- Update BCM4345C0.hcd to fix Spectra for CYW43455 (CVE-2020-10370)
- Change source file links from branch master to branch buster.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1647604800">- Add required firmware file for Bluetooth module found on RPi Zero 2W (bsc#1197286)</changelog>
  <changelog author="jsrain@suse.com" date="1685534400">- refresh BCM4345C[05].hcd from upstream URL</changelog>
</package>
<package pkgid="2723b2a044e6dd5783ea273eeb80875ace9d044c5da9b7981b7f78518502611b14a1e6756f591350a4801a89f34907a3d9842dba3a8ab41ed04be58b0d0dcb21" name="bcmatroska2-devel" arch="x86_64">
  <version epoch="0" ver="5.3.36" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Initial package.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1536926400">- Modernise spec file</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574078400">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1626264000">- Update to latest commit in order to be able to build the
  latest version of mediastreamer2.
  The 'Provides' field was added because we need mediastreamer2 to
  depend on this latest version of the library, but upstream didn't
  release a new tag.
- Rebase bcmatroska2-include-subdir.patch</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 0.23+git.20210209" date="1627300800">- changed version from 0.23~git.20210209 to 0.23+git.20210209,
  0.23~git.20210209 is considered older than the previous version 0.23
  and could cause the package not being updated automatically
- fix several RPMLINT warning</changelog>
  <changelog author="thod_@gmx.de" date="1660478400">- Remove RPATH to be able to build on Fedora</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672833600">- Update to 5.2.1 (no changelog).
- Add fix-cmakelist-version.patch
- Add remove-file.patch
- Add fix-libmatroska-cmake.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711540800">- Update to 5.3.26 (no changelog).
- Drop remove-file.patch
- Drop fix-libmatroska-cmake.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.36 (no changelog).</changelog>
</package>
<package pkgid="c92e2093b9003ecd4edf059ce07ef7702b648ad65d9b79ae567d9b0bf73a0c027fe31a9f88d996e5d451939ae0ec27c3727830aec5ea92e535ce9057623fc5f6" name="bctoolbox-devel" arch="x86_64">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog)</changelog>
  <changelog author="i thod &lt;thod_@gmx.de&gt;" date="1696766400">- Remove RPATH to be able to build on Fedora</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1702296000">- Add decaf dep for post quantum crypto (tumbleweed only for now).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog)
- Removed no longer needed gcc9-stringop-bogus-warning.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1728820800">- Update to 5.3.89 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1749643200">- Compile with mbedtls 2.x on Leap 16.0</changelog>
</package>
<package pkgid="22e0c0023ad53ada93fa961b974943facc5dd3b47f3705e057fe5f7179bea93f887c71cd29d1e865e2a7040293e97e00f6e203441e9c953c9f105f0583af653a" name="bcunit-devel" arch="x86_64">
  <version epoch="0" ver="5.3.36" rel="bp160.1.11"/>
  <changelog author="jengelh@inai.de" date="1497355200">- Rewrite incorrect %description of main RPM.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Update to version 3.0.2:
  * Version bump.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1582718400">- Update to latest master. This is needed for us in order to be able to
  update bctoolbox, ortp and bzrtp to the latest version
- Update bcunit-sover.patch accordingly</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1582804800">- Small packaging cleanups</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1582804801">- use correct archive extensione (xz instead of gz)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696593600">- Update to 5.2.62 (no changelog).
- Add set_current_version.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).
- Disable NCurses since it doesn't build.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.36 (no changelog).</changelog>
</package>
<package pkgid="51a6b5ed0469905cac571c9a835d3209b434891df96149f2e870b9ffe3fb0fcde9bb3295fbc3c2d8a253e7a9242fd4e7b6f53d879fe34fb6d7e5ca25c43da3c1" name="bcunit-doc" arch="x86_64">
  <version epoch="0" ver="5.3.36" rel="bp160.1.11"/>
  <changelog author="jengelh@inai.de" date="1497355200">- Rewrite incorrect %description of main RPM.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Update to version 3.0.2:
  * Version bump.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1582718400">- Update to latest master. This is needed for us in order to be able to
  update bctoolbox, ortp and bzrtp to the latest version
- Update bcunit-sover.patch accordingly</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1582804800">- Small packaging cleanups</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1582804801">- use correct archive extensione (xz instead of gz)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696593600">- Update to 5.2.62 (no changelog).
- Add set_current_version.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).
- Disable NCurses since it doesn't build.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.36 (no changelog).</changelog>
</package>
<package pkgid="532320a69a52328ef75661645c7d4d1121fe41e3e929ce27f859be513afc2540bbb16edfa76544d099fd854fc46c6406eadcfca65d975d9b0e4c678741c673ed" name="bdf2psf" arch="noarch">
  <version epoch="0" ver="1.223" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 1.134</changelog>
  <changelog author="sndirsch@suse.com" date="1453982400">- removed unneeded requires to kbd in order to resolve build cycle
  kbd &lt;-&gt; console-setup (bnc#963942)</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add console-setup-1.134-perl526.patch to work with perl 5.26,
  fixed upstream in 1.143</changelog>
  <changelog author="bwiedemann@suse.com" date="1515153600">- Add console-setup-1.134-reproducible.patch to make package build
  reproducible (boo#1062303)</changelog>
  <changelog author="sndirsch@suse.com" date="1548331200">- u_fix-iso-left-tab.patch
  * fix Shift-Tab mapping (bsc#1122361)</changelog>
  <changelog author="fvogt@suse.com" date="1670846400">- Add patch to fix Caps_Lock mapping for us.map and others (bsc#1202853):
  * 0001-ckbcomp-Fix-check-for-non-ascii.patch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672401600">- Update to version 1.215:
  * See https://salsa.debian.org/installer-team/console-setup/-/blob/debian/1.215/debian/changelog
- Make a bdf2psf package like in Fedora.
- Suggest xkeyboard-config.
- Replace console-setup-1.76-paths.patch with
  console-setup-paths.patch.
- Move the fonts to /usr/share/kbd/ to be discoverable by vconsole.
- Drop console-setup-1.134-perl526.patch,
  console-setup-1.134-reproducible.patch, u_fix-iso-left-tab.patch,
  0001-ckbcomp-Fix-check-for-non-ascii.patch: fixed upstream.
- Fix the RPM Group.</changelog>
  <changelog author="sndirsch@suse.com" date="1672574400">- removed buildrequires to kbd to resolve kbd/console-setup build
  cycle</changelog>
  <changelog author="fcrozat@suse.com" date="1684238400">- Update to version 1.220:
  * updated translations</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1696161600">- Update to version 1.223:
  * Updated translations</changelog>
</package>
<package pkgid="90ed83e6ac10b90132e5b79db130b22833d45ef13e459a706f9713d780f4b6b9383a5b2490ccd6898efecfa0874f013c81b94d94c0da64d241dde9a666612291" name="bdfresize" arch="x86_64">
  <version epoch="0" ver="1.5" rel="bp160.1.13"/>
  <changelog author="mfabian@suse.de" date="1005739200">- new package: bdfresize-1.5</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- build as user</changelog>
  <changelog author="uli@suse.de" date="1112961600">- fixed to build with GCC4</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Cleanup with spec-cleaner
- Add 020_minus-sign.patch from debian</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1720440000">- Added bdfresize-gcc14.patch which adds a missing return type to main
  function in the configure script so that the configure script works
  with C99 standard enforcing compilers like GCC 14. [boo#1225772]</changelog>
</package>
<package pkgid="9580d40c1798533974887d72113d7fdc231728f671c73c00eb7caeafa34ce87b0eb9a608dfcb8bae92054148b0061951917129697413b6b22881271ff44691b9" name="bdftopcf" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="160000.2.2"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split bdftopcf from xorg-x11. Initial version: 1.0.3.</changelog>
  <changelog author="zaitor@opensuse.org" date="1358596800">- Update to version 1.0.4:
  + Use remove() instead of unlink() to remove files.
  + Use symbolic names instead of raw integers for stdin &amp; stdout
    fd's.
  + Add -v flag to print version info.
  + Combine usage message strings.
  + Initialize font to 0 values directly instead of via bzero.
  + Adopt X.Org standard coding style (via x-indent.sh).
  + man: remove trailing spaces and tabs.
  + config:
  - Move man pages into their own directory.
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Use AC_PROG_INSTALL now supplied by XORG_DEFAULT_OPTIONS.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1420286400">- Update to version 1.0.5:
  This minor maintenance release fixes a couple of issues with the
  usage messages printed for incorrect options, and updates the
  configure scripts to the latest X.Org standards.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123200">- Add gpg signature
- Remove obsolete parts of spec file
- Make building more verbose</changelog>
  <changelog author="sndirsch@suse.com" date="1510228800">- Update to version 1.1
  * This release imports the libXfont 1.x BDF-reading and PCF-writing
    code, as this program is the only known user of that code and
    libXfont 1.x is otherwise unmaintained. No functional difference
    should be apparent, this is just another step towards eliminating
    the old version of libXfont from the world.</changelog>
  <changelog author="sndirsch@suse.com" date="1627905600">- switch to libXfont2</changelog>
  <changelog author="sndirsch@suse.com" date="1665835200">- Update to version 1.1.1
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Adopt X.Org standard coding style (via x-indent-all.sh)
  * Add .git-blame-ignore-revs to hide whitespace commits from git blame
  * Variable scope reductions as recommended by cppcheck
  * Delete functions identified as unused by cppcheck
  * Make some functions static that aren't called from other files
  * Remove redundant assignment
  * Remove redundant null-pointer check
  * Fix -Wsign-compare warnings
  * Remove unnecessary cast of strlen result in malloc argument
  * Remove weak symbol setup from Atom code
  * Depend on xproto and fsproto that are now used.</changelog>
  <changelog author="sndirsch@suse.com" date="1666008000">- fixed download URLs of tarball and signature file in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1728820800">- Update to version 1.1.2
  * gitlab CI: stop requiring Signed-off-by in commits
  * bdfReadBitmap: avoid NULL dereference on zero-width glyphs
  * bdfReadBitmap: avoid access to byte before start of array
  * pcfWriteFont: Avoid uninitialized values in tables
  * atom: Update Hash() to be unsigned</changelog>
</package>
<package pkgid="88629934e47085c351ee80edb3f55c454b934676a50f0dc8c6a0dd403285463cac3f62eea3ac665809d429406ecd2f0ac312466f3c14f9cd1882c103b992c4e4" name="bea-stax" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="bp160.1.11"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.com" date="1357560000">- remove xerces-j2-bootstrap depenency (bnc#789163)</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- don't build javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Cleanup a bit and remove unused patch bea-stax-gcj43-build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Don't require java-1_5_0-gcj-compat and build with source and
  target level 1.6
- Removed patch:
  * bea-stax-target15.patch
- Added patch:
  * bea-stax-target16.patch
  - change the source and target levels and fix a problem with
    the encoding of one file</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * bea-stax-target16.patch -&gt; bea-stax-target8.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545048000">- Upgrade to released bea-stax 1.2.0 and bea-stax-api 1.0.1
- Add maven pom files</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545220800">- Add LICENSE file to packages</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1731067200">- Sanitize the spec file
  * Download sources from their urls.
  * Do not install versioned jar file
  * Use newer javapackages features
  * Build and package javadoc documentation
- Removed patch:
  * bea-stax-gcj-build.patch
    + not needed since we don't build this package with gcj
- Modified patch:
  * bea-stax-target8.patch
    + specify consistently encoding of sources so that newer
    java compilers don't fail on invalid characters</changelog>
</package>
<package pkgid="e40f34e19b6787726c8ff9a435658a8bb583058cf9b9ba0ba714aa13e511d96c1231dcb2da4246aede74d593c3f7d5d63b862d95611918f5e3ab5c5e6d16ca2f" name="bea-stax-api" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="bp160.1.11"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.com" date="1357560000">- remove xerces-j2-bootstrap depenency (bnc#789163)</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- don't build javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Cleanup a bit and remove unused patch bea-stax-gcj43-build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Don't require java-1_5_0-gcj-compat and build with source and
  target level 1.6
- Removed patch:
  * bea-stax-target15.patch
- Added patch:
  * bea-stax-target16.patch
  - change the source and target levels and fix a problem with
    the encoding of one file</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * bea-stax-target16.patch -&gt; bea-stax-target8.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545048000">- Upgrade to released bea-stax 1.2.0 and bea-stax-api 1.0.1
- Add maven pom files</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545220800">- Add LICENSE file to packages</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1731067200">- Sanitize the spec file
  * Download sources from their urls.
  * Do not install versioned jar file
  * Use newer javapackages features
  * Build and package javadoc documentation
- Removed patch:
  * bea-stax-gcj-build.patch
    + not needed since we don't build this package with gcj
- Modified patch:
  * bea-stax-target8.patch
    + specify consistently encoding of sources so that newer
    java compilers don't fail on invalid characters</changelog>
</package>
<package pkgid="20a56e4ace4cf52af833850b19e19db5c2cfa85dc545743930763e55b5abce0dd1ffa4a97b599c04b5690b0c34cf40910e6825d11851b2b74ab1563c81efbd4d" name="bea-stax-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="bp160.1.11"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.com" date="1357560000">- remove xerces-j2-bootstrap depenency (bnc#789163)</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- don't build javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Cleanup a bit and remove unused patch bea-stax-gcj43-build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Don't require java-1_5_0-gcj-compat and build with source and
  target level 1.6
- Removed patch:
  * bea-stax-target15.patch
- Added patch:
  * bea-stax-target16.patch
  - change the source and target levels and fix a problem with
    the encoding of one file</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Modified patch:
  * bea-stax-target16.patch -&gt; bea-stax-target8.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545048000">- Upgrade to released bea-stax 1.2.0 and bea-stax-api 1.0.1
- Add maven pom files</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1545220800">- Add LICENSE file to packages</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1731067200">- Sanitize the spec file
  * Download sources from their urls.
  * Do not install versioned jar file
  * Use newer javapackages features
  * Build and package javadoc documentation
- Removed patch:
  * bea-stax-gcj-build.patch
    + not needed since we don't build this package with gcj
- Modified patch:
  * bea-stax-target8.patch
    + specify consistently encoding of sources so that newer
    java compilers don't fail on invalid characters</changelog>
</package>
<package pkgid="9902e12d65acdc67eb66535ee1bc08b8540e64137d2c2bf95d4baa8ed96249410d1190c249446af5ebd8cdccffbae22a17e0eef6b61d6a7b0eca83bd009a5d81" name="bean-validation-api" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1595592000">- Initial packaging of bean-validation-api 2.0.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694520000">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="6f282875e7ddd1dd3fafaa6b8407f55a83107af41d54a4186250611c0e70f2bb3ba3a798c45047bfe7f28807ca37d18b2a536ab1e1e56ffd52704d90049a697c" name="bean-validation-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1595592000">- Initial packaging of bean-validation-api 2.0.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694520000">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="507027d365b6be2a02b1edcd4cac16a9cbbe68552b8347dd4b6df87dd2e49b54303d697243ff73c768b4f3f3553f976d58c81e0cb7a8cd5cad82b62908934081" name="bees" arch="x86_64">
  <version epoch="0" ver="0.10" rel="bp160.1.12"/>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 0.6.5
  - Make clang builds work.
- Update to 0.6.4
  - Fix a bug that was causing bees to stop deduping.
- spec: remove empty sections, unify make</changelog>
  <changelog author="dsterba@suse.cz" date="1633435200">- Update to 0.7
  - Highlights:
  * Remove 8-CPU thread limit
  * Add kernel bugs reference table to docs
  * Workarounds for btrfs send and balance issues
  * Reduce the number of temporary inodes created
  * Use posix_fadvise to optimize page cache usage
  * Use private namespace for mounts under systemd
  * Assorted bug fixes and small performance improvements
  * SIGTERM handler to save crawl state, hash table, and exit
  * Higher ref limits per extent on kernels with LOGICAL_INO_V2
  - Build dependency changes:
  * Convert docs to Github Flavored Markdown
  * Updates for new compilers including clang
  * Remove dependencies on libbtrfs-dev and uuid-dev
  * Remove unversioned `libcrucible.so` shared library</changelog>
  <changelog author="dsterba@suse.cz" date="1662292800">- Added patch: 0001-fs-fix-FIEMAP_MAX_OFFSET-type-silliness-in-fiemap.h.patch
  (fix build on ppc64le)</changelog>
  <changelog author="dsterba@suse.cz" date="1666180800">- update to 0.7 git 5953ea6d3c5646 (20221025)
- build fixes
- Removed patch: 0001-fs-fix-FIEMAP_MAX_OFFSET-type-silliness-in-fiemap.h.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 0.8:
  * fs: make dedupe work again after a really unfortunate build fix</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676376000">- update to 0.9.1:
  * Fix the install target.
  * Makefile: also drop fiemap and fiewalk from main Makefile
- update to 0.9:
  - Highlights:
  * Work around a kernel bug which can be triggered by running the
    LOGICAL_INO ioctl and dedupe on the same extent at the same time.
  * Prevent worker threads from being blocked by extent and inode
    locks.  Defer the blocked item and find something else for that
    worker thread to do.
  * Fix the labelling of threads so they aren't all "task_consumer".
  * Speed up SIGTERM process termination to have a better chance of
    flushing the hash table and crawl state to $BEESHOME before the
    process is killed by a service timeout.
  * Reduce the hash table writeback rate to 128K/s.
  * Reduce the interval between crawl restarts to one transid.
  * Add 'recent' scan mode, which dedupes new data in fully scanned
    subvols instead of waiting for every old subvol to be scanned.
  * Better behavior when there are write errors in $BEESHOME.
  * Drop the unused and obsolete `fiemap` and `fiewalk` binaries.</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1678622400">- Removed patch: fix-Makefile-version.diff, replaced with make parameter.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680609600">- update to 0.9.3:
  * roots: don't share a RootFetcher between threads
  * seeker: fix the test for ILP32 platforms
  * reduce memory usage with long-running work items
  * allow BtrfsIoctlLogicalInoArgs to be reused, remove virtual methods
  * create a Pool of BtrfsIoctlLogicalInoArgs objects
- add avoid-swap.patch to fix build with gcc 13</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1690200000">- Update to 0.10:
  * Update kernel bugs list to 6.4.1
  * Update docs
  * Build fixes for GCC 13 and clang 16
- Drop avoid-swap.patch, no longer needed.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1709812800">- Fix build fail with gcc7 on Leap 15
  * Use gcc13 on compilation</changelog>
</package>
<package pkgid="2e0f5cb73737a04831314c4b47c24523fdf9168d6a62b2e05bfa029afce2191e55432c249543d845c9a414d7a444871656bc0e6c31ce194f199fceb711872046" name="beets" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="bp160.1.6"/>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1549713600">- Add fix_python_3_7_compatibility.patch: fix compatibility with python 3.7</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1558267200">- Update to 1.4.8:
  * This release is far too long in coming, but it's a good one. There is the
    usual torrent of new features and a ridiculously long line of fixes, but
    there are also some crucial maintenance changes. We officially support
    Python 3.7 and 3.8, and some performance optimizations can (anecdotally)
    make listing your library more than three times faster than in the previous
    version.
  * The new core features are:
  * A new config-aunique configuration option allows setting default options
    for the aunique template function.
  * The albumdisambig field no longer includes the MusicBrainz release group
    disambiguation comment. A new releasegroupdisambig field has been added.
  * The modify command now allows resetting fixed attributes. For example,
    beet modify -a artist:beatles artpath! resets artpath attribute from matching albums back to the default value.
  * A new importer option, ignore_data_tracks, lets you skip audio tracks
    contained in data files.
  * There are some new plugins:
  * The playlist can query the beets library using M3U playlists.
  * The loadext allows loading of SQLite extensions, primarily for use with
    the ICU SQLite extension for internationalization.
  * The subsonicupdate can automatically update your Subsonic library.
  * And many improvements to existing plugins:
  * lastgenre: Added option -A to match individual tracks and singletons.
  * play: The plugin can now emit a UTF-8 BOM, fixing some issues with
    foobar2000 and Winamp.
  * gmusic:
  * Add a new option to automatically upload to Google Play Music library
    on track import.
  * Add new options for Google Play Music authentication.
  * replaygain: albumpeak on large collections is calculated as the average,
    not the maximum.
  * chroma:
  * Now optionally has a bias toward looking up more relevant releases
    according to the preferred configuration options.
  * Fingerprint values are now properly stored as strings, which prevents
    strange repeated output when running beet write.
  * convert: The plugin now has an id3v23 option that allows you to override
    the global id3v23 option.
  * spotify:
  * The plugin now uses OAuth for authentication to the Spotify API.
  * The plugin now works as an import metadata provider: you can match
    tracks and albums using the Spotify database.
  * ipfs: The plugin now supports a nocopy option which passes that flag to
    ipfs.
  * discogs: The plugin now has rate limiting for the Discogs API.
  * mpdstats, mpdupdate: These plugins now use the MPD_PORT environment
    variable if no port is specified in the configuration file.
  * bpd:
  * MPD protocol commands consume and single are now supported along with
    updated semantics for repeat and previous and new fields for status.
    The bpd server now understands and ignores some additional commands.
  * MPD protocol command idle is now supported, allowing the MPD version to
    be bumped to 0.14.
  * MPD protocol command decoders is now supported.
  * The plugin now uses the main beets logging system. The special-purpose
  - -debug flag has been removed.
  * mbsync: The plugin no longer queries MusicBrainz when either the
    mb_albumid or mb_trackid field is invalid. See also the discussion on
    Google Groups
  * export: The plugin now also exports path field if the user explicitly
    specifies it with -i parameter. This only works when exporting library
    fields.
  * acousticbrainz: The plugin now declares types for all its fields, which
    enables easier querying and avoids a problem where very small numbers
    would be stored as strings.
  * Some improvements have been focused on improving beets' performance:
  * Querying the library is now faster:
  * We only convert fields that need to be displayed.
  * We now compile templates once and reuse them instead of recompiling
    them to print out each matching object.
  * Querying the library for items is now faster, for all queries that do
    not need to access album level properties. This was implemented by
    lazily fetching the album only when needed.
  * absubmit, badfiles: Analysis now works in parallel (on Python 3 only).
  * mpdstats: Use the currentsong MPD command instead of playlist to get the
    current song, improving performance when the playlist is long.
  * Several improvements are related to usability:
  * The disambiguation string for identifying albums in the importer now
    shows the catalog number.
  * Added whitespace padding to missing tracks dialog to improve readability.
  * The move command now lists the number of items already in-place.
  * Modify selection can now be applied early without selecting every item.
  * Beets now emits more useful messages during startup if SQLite returns an
    error. The SQLite error message is now attached to the beets message.
  * Fixed a confusing typo when the convert plugin copies the art covers.
  * Many other fixes
  * The full changelog can be read at
    https://github.com/beetbox/beets/releases/tag/v1.4.8
- Remove fix_python_3_7_compatibility.patch: No longer needed</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1561809600">- Update to 1.4.9:
  * This small update is part of our attempt to release new versions more often!
    There are a few important fixes, and we're clearing the deck for a change
    to beets' dependencies in the next version.
  * The new feature is:
  * You can use the NO_COLOR environment variable to disable terminal colors.
  * There are some fixes in this release:
  * Fix a regression in the last release that made the image resizer fail to
    detect older versions of ImageMagick.
  * gmusic: The oauth_file config option now supports more flexible path
    values, including ~ for the home directory.
  * gmusic: Fix a crash when using version 12.0.0 or later of the gmusicapi
    module.
  * Fix an incompatibility with Python 3.8's AST changes.
  * Here's a note for packagers:
  * pathlib is now an optional test dependency on Python 3.4+, removing the
    need for a Debian patch.
- Remove fix-pathlib-requirement.diff: Incorporated upstream</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1603886400">- Add patch to fix a crash due to invalid use of the ast module
  (boo#1178199):
  * 0001-Compatibility-with-breaking-changes-to-the-ast-module.patch
- Use %license</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1644580800">- Update to 1.5.0:
  * Major new features:
  * Fields in queries now fall back to an item's album and check its fields
    too. Notably, this allows querying items by an album's attribute:
    in other words, beet list foo:bar will not only find tracks with
    the foo attribute; it will also find tracks on albums that have
    the foo attribute. This may be particularly useful in the
    path-format-config, which matches individual items to decide which path
    to use.
  * A new reflink config option instructs the importer to create fast,
    copy-on-write file clones on filesystems that support them.
  * A new unimported lets you find untracked files in your library directory.
  * The aura has arrived! Try out the future of remote music library access today.
  * We now fetch information about works from MusicBrainz.
    MusicBrainz matches provide the fields work (the title),
    mb_workid (the MBID), and work_disambig (the disambiguation string).
  * A new parentwork gets information about the original work,
    which is useful for classical music.
  * bpd: BPD now supports most of the features of version 0.16
    of the MPD protocol. This is enough to get it talking to
    more complicated clients like ncmpcpp, but there are still
    some incompatibilities, largely due to MPD commands we don't support yet.
  * A new deezer can autotag tracks and albums using the Deezer database.
  * A new bareasc provides a new query type: "bare ASCII" queries that ignore
    accented characters, treating them as though they were plain
    ASCII characters. Use the # prefix with list or other commands.
  * fetchart: The plugin can now get album art from last.fm.
  * web: The API now supports the HTTP DELETE and PATCH methods for
    modifying items. They are disabled by default; set readonly:
    no in your configuration file to enable modification via the API.
  * Some functionality has been move to their own python packags: Confuse
    and MediaFile. Mutagen is no longer a direct dependency.
  * Full changelog available at https://github.com/beetbox/beets/releases/tag/v1.5.0
- Drop 0001-Fixed-failing-test-where.patch: Included upstream
- Drop fix_test_command_line_option_relative_to_working_dir.diff: Included upstream
- Drop 0001-Compatibility-with-breaking-changes-to-the-ast-module.patch: Included upstream</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1644580801">- Update to 1.6.0:
  * Major new features:
  * When fetching genres from MusicBrainz, we now include genres from the
    release group (in addition to the release). We also prioritize genres
    based on the number of votes. Thanks to @aereaux.
  * Primary and secondary release types from MusicBrainz are now stored in a
    new albumtypes field.
  * An accompanying new albumtypes includes some options for formatting this
    new albumtypes field.
  * Other new things:
  * permissions: The plugin now sets cover art permissions to match the audio
    file permissions.
  * unimported: A new configuration option supports excluding specific
    subdirectories in library.
  * info: Add support for an --album flag.
  * export: Similarly add support for an --album flag.
  * beet move now highlights path differences in color (when enabled).
  * When moving files and a direct rename of a file is not possible (for
    example, when crossing filesystems), beets now copies to a temporary file
    in the target folder first and then moves to the destination instead of
    directly copying the target path. This gets us closer to always updating
    files atomically.
  * fetchart: Add a new option to store cover art as non-progressive image.
    This is useful for DAPs that do not support progressive images. Set
    deinterlace: yes in your configuration to enable this conversion.
  * fetchart: Add a new option to change the file format of cover art images.
    This may also be useful for DAPs that only support some image formats.
  * Support flexible attributes in %aunique.
  * Make %aunique faster, especially when using inline fields.
  * Bug fixes:
  * lyrics: Fix a crash when Beautiful Soup is not installed.
  * discogs: Support a new Discogs URL format for IDs.
  * discogs: Remove built-in rate-limiting because the Discogs Python library
    we use now has its own rate-limiting.
  * export: Fix some duplicated output.
  * aura: Fix a potential security hole when serving image files.
  * The six package is no longer required.
  * The full changelog can be read at https://github.com/beetbox/beets/releases/tag/v1.6.0
- Run fdupes</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- python-mock is not required for build</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1692705600">- Fix the names of the Flask recommended packages</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1720526400">- Update to 2.0.0
  Major new features
  * The beets importer UI received a major overhaul. Several new configuration options are available for customizing layout and colors: ui_options.
  New features
  * edit: Prefer editor from VISUAL environment variable over EDITOR.
  * config: Prefer editor from VISUAL environment variable over EDITOR.
  * listenbrainz: Add initial support for importing history and playlists from ListenBrainz
  * mbsubmit: add new prompt choices helping further to submit unmatched tracks to MusicBrainz faster.
  * spotify: We now fetch track's ISRC, EAN, and UPC identifiers from Spotify when using the spotifysync command.
  * discogs: supply a value for the cover_art_url attribute, for use by fetchart.
  * update: added `-e` flag for excluding fields from being updated.
  * deezer: Import rank and other attributes from Deezer during import and add a function to update the rank of existing items.
  * resolve transl-tracklisting relations for pseudo releases and merge data with the actual release
  * Fetchart: Use the right field (spotify_album_id) to obtain the Spotify album id
  * Prevent reimporting album if it is permanently removed from Spotify
  * Added option to use cover_art_url as an album art source in the fetchart plugin.
  * fetchart: The plugin can now get album art from spotify.
  * Added option to specify a URL in the embedart plugin.
  * list singleton:true queries have been made faster
  * list singleton:1 and singleton:0 can now alternatively be used in queries, same as comp
  * --from-logfile now parses log files using a UTF-8 encoding in beets/beets/ui/commands.py.
  * bareasc lookups have been made faster
  * list lookups using the pattern operator :: have been made faster
  * Added additional error handling for spotify plugin.
  * We now import the remixer field from Musicbrainz into the library.
  * mbsubmit: Added a new mbsubmit command to print track information to be submitted to MusicBrainz after initial import.
  * Added spotify_updated field to track when the information was last updated.
  * We now import and tag the album information when importing singletons using Spotify source.
  * spotify: The plugin now provides an additional command spotifysync that allows getting track popularity and audio features information from Spotify.
  * spotify: The plugin now records Spotify-specific IDs in the spotify_album_id, spotify_artist_id, and spotify_track_id fields.
  * Create the parental directories for database if they do not exist.
  * musicbrainz-config: a new musicbrainz.enabled option allows disabling the MusicBrainz metadata source during the autotagging process
  * kodiupdate: Now supports multiple kodi instances
  * Add the item fields bitrate_mode, encoder_info and encoder_settings.
  * Add query prefixes = and ~.
  * A new configuration option, duplicate_keys, lets you change which fields the beets importer uses to identify duplicates.
  * Add exact match &lt;exact-match&gt; queries, using the prefixes = and =~.
  * discogs: Permit appending style to genre.
  * discogs: Implement item_candidates for matching singletons.
  * discogs: Check for compliant discogs_client module.
  * convert: Add a new auto_keep option that automatically converts files but keeps the originals in the library.
  * Added a -P (or --disable-plugins) flag to specify one/multiple plugin(s) to be disabled at startup.
  * import-options: Add support for re-running the importer on paths in log files that were created with the -l (or --logfile) argument.
  * Preserve mtimes from archives
  * Add %sunique{} &lt;sunique&gt; template to disambiguate between singletons.
  * Add a new import.ignored_alias_types config option to allow for specific alias types to be skipped over when importing items/albums.
  * smartplaylist: A new --pretend option lets the user see what a new or changed smart playlist saved in the config is actually returning.
  * fromfilename: Add debug log messages that inform when the plugin replaced bad (missing) artist, title or tracknumber metadata.
  * musicbrainz-config: MusicBrainz release pages often link to related metadata sources like Discogs, Bandcamp, Spotify, Deezer and Beatport. When enabled via the musicbrainz.external_ids options, release ID's will be extracted from those URL's and imported to the library.
  * convert: Add support for generating m3u8 playlists together with converted media files.
  * Fetch the release_group_title field from MusicBrainz.  4809
  * discogs: Add support for applying album information on singleton imports.  4716
  * smartplaylist: During explicit runs of the splupdate command, the log message "Creating playlist ..."" is now displayed instead of hidden in the debug log, which states some form of progress through the UI.
  * subsonicupdate: Updates are now triggered whenever either the beets database is changed or a smart playlist is created/updated.  4862
  * importfeeds: Add a new output format allowing to save a playlist once per import session.  4863
  * Make ArtResizer work with PIL/pillow 10.0.0 removals.
  * A new configuration option, duplicate_verbose_prompt, allows changing how duplicates are presented during import.  4866
  * embyupdate: Add handling for private users by adding userid config option.
  * substitute: Add the new plugin substitute as an alternative to the rewrite plugin. The main difference between them being that rewrite modifies files' metadata and substitute does not.
  * Add support for artists and albumartists multi-valued tags.
  * autobpm: Add the autobpm plugin which uses Librosa to calculate the BPM of the audio.
  * fetchart: Fix the error with CoverArtArchive where the maxwidth option would not be used to download a pre-sized thumbnail for release groups, as is already done with releases.
  * fetchart: Fix the error with CoverArtArchive where no cover would be found when the maxwidth option matches a pre-sized thumbnail size, but no thumbnail is provided by CAA. We now fallback to the raw image.
  * advancedrewrite: Add an advanced version of the rewrite plugin which allows to replace fields based on a given library query.
  * lyrics: Add LRCLIB as a new lyrics provider and a new synced option to prefer synced lyrics over plain lyrics.
  * import: Expose import.quiet_fallback as CLI option.
  * import: Expose import.incremental_skip_later as CLI option.
  * smartplaylist: Expose config options as CLI options.
  * smartplaylist: Add new option smartplaylist.output.
  * smartplaylist: Add new option smartplaylist.uri_format.
  * Sorted the default configuration file into categories.
  * convert: Don't treat WAVE (.wav) files as lossy anymore when using the never_convert_lossy_files option. They will get transcoded like the other lossless formats.
  * Add support for barcode field.
  * smartplaylist: Add new config option smartplaylist.fields.
  Bug fixes
  * lastimport: Improve error handling in the process_tracks function and enable it to be used with other plugins.
  * spotify: Improve handling of ConnectionError.
  * deezer: Improve Deezer plugin error handling and set requests timeout to 10 seconds.
  * spotify: Add bad gateway (502) error handling.
  * spotify: Add a limit of 3 retries, instead of retrying endlessly when the API is not available.
  * Fix a crash when the Spotify API timeouts or does not return a Retry-After interval.
  * scrub: Fixed the import behavior where scrubbed database tags were restored to newly imported tracks with config settings scrub.auto: yes and import.write: no.
  * deezer: Fixed the error where Deezer plugin would crash if non-Deezer id is passed during import.
  * fetchart: Fix fetching from Cover Art Archive when the maxwidth option is set to one of the supported Cover Art Archive widths.
  * discogs: Fix "Discogs plugin replacing Feat. or Ft. with a comma" by fixing an oversight that removed a functionality from the code base when the MetadataSourcePlugin abstract class was introduced in PR's #3335 and #3371.
  * convert: Set default max_bitrate value to None to avoid transcoding when this parameter is not set.
  * replaygain: Avoid a crash when errors occur in the analysis backend.
  * We now use Python's defaults for command-line argument encoding, which should reduce the chance for errors and "file not found" failures when invoking other command-line tools, especially on Windows.
  * We now respect the Spotify API's rate limiting, which avoids crashing when the API reports code 429 (too many requests).
  * Fix implicit paths OR queries (e.g. beet list /path/ , /other-path/) which have previously been returning the entire library.
  * The Discogs release ID is now populated correctly to the discogs_albumid field again (it was no longer working after Discogs changed their release URL format).
  * The autotagger no longer considers all matches without a MusicBrainz ID as duplicates of each other.
  * convert: Resize album art when embedding
  * deezer: Fix auto tagger pagination issues (fetch beyond the first 25 tracks of a release).
  * spotify: Fix auto tagger pagination issues (fetch beyond the first 50 tracks of a release).
  * lyrics: Fix Genius search by using query params instead of body.
  * unimported: The new ignore_subdirectories configuration option added in 1.6.0 now has a default value if it hasn't been set.
  * deezer: Tolerate missing fields when searching for singleton tracks.
  * replaygain: The type of the internal r128_track_gain and r128_album_gain fields was changed from integer to float to fix loss of precision due to truncation.
  * Fix a regression in the previous release that caused a TypeError when moving files across filesystems.
  * convert: Deleting the original files during conversion no longer logs output when the quiet flag is enabled.
  * web: Fix handling of "query" requests. Previously queries consisting of more than one token (separated by a slash) always returned an empty result.
  * discogs: Skip Discogs query on insufficiently tagged files (artist and album tags missing) to prevent arbitrary candidate results.
  * lyrics: Fixed issues with the Tekstowo.pl and Genius backends where some non-lyrics content got included in the lyrics
  * limit: Better header formatting to improve index
  * replaygain: Correctly handle the overwrite config option, which forces recomputing ReplayGain values on import even for tracks that already have the tags.
  * embedart: Fix a crash when using recent versions of ImageMagick and the compare_threshold option.
  * lyrics: Fixed issue with Genius header being included in lyrics, added test case of up-to-date Genius html
  * importadded: Fix a bug with recently added reflink import option that causes a crash when ImportAdded plugin enabled.
  * convert: Fix a bug with the wma format alias.
  * web: Fix get file from item.
  * lastgenre: Fix a duplicated entry for trip hop in the default genre list.
  * lyrics: Fixed issue with Tekstowo backend not actually checking if the found song matches.
  * embedart: Add support for ImageMagick 7.1.1-12
  * fromfilename: Fix failed detection of &lt;track&gt; &lt;title&gt; filename patterns.
  * Fix issue where deletion of flexible fields on an album doesn't cascade to items
  * Fix issue where beet write continuously retags the albumtypes metadata field in files. Additionally broken data could have been added to the library when the tag was read from file back into the library using beet update. It is required for all users to check if such broken data is present in the library. Following the instructions described here, a sanity check and potential fix is easily possible.
  * Fix updating "data_source" on re-imports and improve logging when flexible attributes are being re-imported.
  * fetchart: Correctly select the cover art from fanart.tv with the highest number of likes
  * lyrics: Fix a crash with the Google backend when processing some web pages.
  * Modifying flexible attributes of albums now cascade to the individual album tracks, similar to how fixed album attributes have been cascading to tracks already. A new option --noinherit/-I to modify &lt;modify-cmd&gt; allows changing this behaviour.
  * Fix bug where an interrupted import process poisons the database, causing a null path that can't be removed.
  * discogs: Fix bug where empty artist and title fields would return None instead of an empty list.
  * Fix bug regarding displaying tracks that have been changed not being displayed unless the detail configuration is enabled.
  * web: Fix range request support, allowing to play large audio/ opus files using e.g. a browser/firefox or gstreamer/mopidy directly.
  * Fix bug where zsh completion script made assumptions about the specific variant of awk installed and required specific settings for sqlite3 and caching in zsh.
  * Remove unused functions
  * Fix bug where all media types are reported as the first media type when importing with MusicBrainz as the data source
  * Fix bug where unimported plugin would not ignore children directories of ignored directories.
  For plugin developers
  * beets now explicitly prevents multiple plugins to define replacement functions for the same field. When previously defining template_fields for the same field in two plugins, the last loaded plugin would silently overwrite the function defined by the other plugin. Now, beets will raise an exception when this happens.
  * Allow reuse of some parts of beets' testing components. This may ease the work for externally developed plugins or related software (e.g. the beets plugin for Mopidy), if they need to create an in-memory instance of a beets music library for their tests.
  For packagers
  * As noted above, the minimum Python version is now 3.7.
  * We fixed a version for the dependency on the Confuse library.
  * The minimum required version of mediafile is now 0.9.0.
  Other changes
  * Add sphinx and sphinx_rtd_theme as dependencies for a new docs extra
  * absubmit: Deprecate the absubmit plugin since AcousticBrainz has stopped accepting new submissions.
  * acousticbrainz: Deprecate the acousticbrainz plugin since the AcousticBrainz project has shut down.
  * limit: Limit query results to head or tail (lslimit command only)
  * fish: Add --output option.
  * lyrics: Remove Musixmatch from default enabled sources as they are currently blocking requests from the beets user agent.
  * /faq: multidisc: Elaborated the multi-disc FAQ
  * /faq: src: Removed some long lines.
  * Refactor the test cases to avoid test smells.</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1737115200">- Update to 2.2.0
  * New features
  * /plugins/substitute: Allow the replacement string to use capture groups
    from the match. It is thus possible to create more general rules,
    applying to many different artists at once.
  * Bug fixes
  * Bring back test files and the manual to the source distribution tarball.
  * Fix bug where matcher doesn't consider medium number when importing. This
    makes it difficult to import hybrid SACDs and other releases with
    duplicate tracks.
  * Check if running python from the Microsoft Store and provide feedback to
    install from python.org.
  * Other changes
  * Changed bitesize label to good first issue. Our contribute page is now
    automatically populated with these issues.
- Update to 2.1.0
  * New features
  * Ability to query albums with track db fields and vice-versa, for example
    beet list -a title:something or beet list artpath:cover. Consequently
    album queries involving path field have been sped up, like beet list -a
    path:/path/.
  * Beets now uses platformdirs to determine the default music directory.
    This location varies between systems -- for example, users can configure
    it on Unix systems via user-dirs.dirs(5).
  * New template function added: %capitalize. Converts the first letter of
    the text to uppercase and the rest to lowercase.
  * Plugin autobpm: Add new configuration option beat_track_kwargs which
    enables adjusting keyword arguments supplied to librosa's beat_track
    function call.
  * Plugin ftintitle: New keep_in_artist option for the plugin, which allows
    keeping the "feat." part in the artist metadata while still changing the
    title.
  * Bug fixes
  * Album flexible fields are now correctly saved. For instance MusicBrainz
    external links such as bandcamp_album_id will be available on albums in
    addition to tracks. For albums already in your library, a re-import is
    required for the fields to be added. Such a re-import can be done with,
    in this case, beet import -L data_source:=MusicBrainz.
  * Fix lyrics plugin only getting part of the lyrics from Genius.com
  * Fix the TypeError when set_fields is provided non-string values.
  * Fix the auto value for the reflink config option.
  * Improve naming of temporary files by separating the random part with the
    file extension.
  * Plugin autobpm: Fix the TypeError where tempo was being returned as a
    numpy array. Update librosa dependency constraint to prevent similar
    issues in the future.
  * Plugin convert: Fixed the convert plugin no_convert option so that it no
    longer treats "and" and "or" queries the same. To maintain previous
    behaviour add commas between your query keywords. For help see
    combiningqueries.
  * Plugin discogs: Fix the TypeError when there is no description.
  * Plugin ftintitle: The detection of a "feat. X" part in a song title does
    not produce any false positives caused by words like "and" or "with"
    anymore.
  * Plugin ftintitle: The detection of a "feat. X" part now also matches such
    parts if they are in parentheses or brackets.
  * Plugin lyrics: Update tekstowo backend to fetch lyrics directly since
    recent updates to their website made it unsearchable.
  * Use single quotes in all SQL queries
  * For packagers
  * The beet script has been removed from the repository.
  * The typing_extensions is required for Python 3.10 and below.
  * The minimum supported Python version is now 3.8.
  * Other changes
  * Added caching for dependency installation in all CI jobs which speeds
    them up a bit, especially the tests.
  * GitHub workflows have been reorganised for clarity: style, linting, type
    and docs checks now live in separate jobs and are named accordingly.
  * Installation instructions have been made consistent across plugins
    documentation. Users should simply install beets with an extra of the
    corresponding plugin name in order to install extra dependencies for that
    plugin.
  * Plugin autobpm: Add plugin dependencies to pyproject.toml under the
    autobpm extra and update the plugin installation instructions in the
    docs. Since importing the bpm calculation functionality from librosa
    takes around 4 seconds, update the plugin to only do so when it actually
    needs to calculate the bpm. Previously this import was being done
    immediately, so every beet invocation was being delayed by a couple of
    seconds.
  * The linting workflow has been made to run only when Python files or
    documentation is changed, and they only check the changed files. When
    dependencies are updated (poetry.lock), then the entire code base is
    checked.
  * The long-deprecated beets.util.confit module has been removed. This may
    cause extremely outdated external plugins to fail to load.
  * contributing: Since poetry now manages local virtual environments, tox
    has been replaced by a task runner poethepoet. This change affects beets
    developers and contributors. Please see updates in the development-tools
    section for more details. Type poe while in the project directory to see
    the available commands.
  * contributing: The project now uses poetry for packaging and dependency
    management. This change affects project management and mostly affects
    beets developers. Please see updates in getting-the-source and testing
    for more information.</changelog>
</package>
<package pkgid="2ba13aad4ac0a9da53fd99a0195d07a563f910cc70ab3055457ee106a9711488028e700cd6200ecb4ea0b6511d5427acb660be84aace840975eeb6d292102113" name="beforelight" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="bp160.1.12"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split beforelight from xorg-x11. Initial version: 1.0.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1358596800">- Update to version 1.0.5:
  + Remove Xaw mention from README.
  + config: Add missing AC_CONFIG_SRCDIR.
  + Remove dependency on libXaw.
  + man: remove trailing spaces and tabs.
  + config:
  - Move man pages into their own directory.
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Replace deprecated AC_HELP_STRING with AS_HELP_STRING.
- Drop pkgconfig(xaw7) BuildRequires, no longer needed.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1674993600">- Update to version 1.0.6
  * It's been a decade since the last release in January 2013,
    here's a new release to flush out the accumulated changes
    from the git repo.</changelog>
</package>
<package pkgid="08184e9344392fb4f725f27723f8844b4a8c9edcafa3b757cb246ef243e5fdd873fae18c339a568d75dd3da948f7a5e8c983db9d30f968f060d84cf4d41d4257" name="belcard-data" arch="noarch">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.1.72:
  * rerelease under new version number, no changes</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 5.2.9" date="1673438400">- Update to version 5.2.9:
  * Fix syntax error in Github issue template
  * Added Github yml issue template</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 5.2.16:
  * no changes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog).
- Add set_current_version.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1739361600">- Update to 5.3.96 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
</package>
<package pkgid="bf0c37786ea85580b03d161f8d475a762c70b557d7913c7b612b8d0bab099becdcc418c570ca4cde920cf8eb391bcad613fd41b9b4efac1c2adfc2435045ac9f" name="belcard-devel" arch="x86_64">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.1.72:
  * rerelease under new version number, no changes</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 5.2.9" date="1673438400">- Update to version 5.2.9:
  * Fix syntax error in Github issue template
  * Added Github yml issue template</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 5.2.16:
  * no changes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog).
- Add set_current_version.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1739361600">- Update to 5.3.96 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
</package>
<package pkgid="4a02d7ec974e5b008882b58f814f789a52138db628cb7ec3042874a77a87e4fd9bd432d208a0ddc4863531be1b54ca35e15020a8423e8d35c190111646292402" name="belle-sip-data" arch="noarch">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Update to 5.2.30 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1680868800">- Update to 5.2.49 (no changelog)
- Add set_current_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1687953600">- Update to 5.2.73 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1739361600">- Update to 5.3.96 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
</package>
<package pkgid="6c582568cb60e517b924280319aa3048c810e989551ac68182eec1d7f1ba0f3988a51a39d7631eebad44a6ba3f01e7f359751fd0a9cf1990ef98695f21339e9c" name="belle-sip-devel" arch="x86_64">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678276800">- Update to 5.2.30 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1680868800">- Update to 5.2.49 (no changelog)
- Add set_current_version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1687953600">- Update to 5.2.73 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1739361600">- Update to 5.3.96 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
</package>
<package pkgid="6cb939279edbc6bb661c1558b0ee08791628c4a0c40d1000b77e684ac6fe9f8b824f5ce439941ce8dcd3cdd80b8e62e8160c913f88ef0eab270df3dc6b720200" name="belr-devel" arch="x86_64">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 5.1.72:
  * version bump, no source code change</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 5.2.9" date="1673438400">- Update to version 5.2.9:
  * Fix syntax error in Github issue template
  * Added Github yml issue template
  * Parse integers as long long</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1681646400">- update to 5.2.51:
  * Fix bug resulting in empty matches not being considered as
    valid when enclosed within a selector.
  * Fix build using flexisip flags</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog)
- Add set_current_version.patch.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1739361600">- Update to 5.3.96 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
</package>
<package pkgid="79f982bb9cf3d37cfe08cbcc561935e3176a1809bcad8f04c67c1a6b207697b2e43db57d0262ca94f558b0448ab8ac681fd2bd4ccaaea6aa8a46b8cf9478cf85" name="bemenu" arch="x86_64">
  <version epoch="0" ver="0.6.23" rel="bp160.1.12"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1671192000">- Update to 0.6.14:
  * Add basic vim bindings #314
  * Make pkg-config configurable #316
  * improve exit code docs #320
  * Fix --filter #322</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683633600">- Update to 0.6.15:
  * Add rounded corners/Border radius #319
  * Add Match/Page Counter #204
  * docs: add missing options #331
  * Add fixed height option #270
  * Fix Makefile to support submodule setups #329
  * Fix: invisible right border #333
  * Fix: select last entry if pointer/touch above last index #332
  * ESC have no effect under Wayland while enabled Vim binding #334
  * Small fixes #340</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1693396800">- Update to 0.6.16:
  * docs: add missing option #344
  * docs: Add missing items to manpage #345
  * Add option to exit bemenu using esc in vim binds normal mode #348
  * Evaluate filter first #350</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706443200">- Update to 0.6.17:
  * Add new flag --auto-select: when there is only one entry left,
  automaticallty select it #357
  * Password flag parameters with indicator option(Addresses #221) #360
  * Single instance mode(Addresses #324) #358
  * Update help/usage to add cursor background and foreground
  colors(Addresses #361). #362
  * Wayland: fix monitor and scaling detection #356
  * fix: wayland mmap failed on Sway 1.8.1 #368
  * chore: minor variable rewording #369
  * Fix fallback to xclip #365
  * Upwards list support(Addresses #328, X11/Wayland/Cairo) #364
  * add option to start vim bindings in normal mode #375
  * wayland: ensure bemenu is shown on top of fullscreen windows #376
  * feat: C-b to go left #377</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706875200">- Update to 0.6.18:
  * fix: buffer is not divisible #380
  * implement wayland fractional scaling #379
  * Reapply "implement wayland fractional scaling" #381</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706961600">- Update to 0.6.19:
  * Revert "wayland: force window-&gt;scale = 1, if BEMENU_SCALE"</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1709812800">- Update to 0.6.20:
  * Fix mouse press being ignored on x11 #382
  * Fixed verry fast repeat when pressing shift+Tab #383
  * Fix use after free in wayland.c #386
  * document vim bindings #389
  * wayland: bind to zwlr_layer_shell_v1 version 3 #390</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710331200">- Update to 0.6.21:
  * Move SIGCHLD handler #391</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720440000">- Update to 0.6.22:
  * Clipboard fixes/improvements #405
  * Fix: Transparency on the filter reveals a rectangle behind it
    that shouldn't be there. #404
  * Fix osx build failing. #406
  * Correctness fixes (memory leaks, compiler warning, out-of-bounds
    read) #411
  * Border fixes (fixes: #399) #407</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721390400">- Update to 0.6.23:
  * Disable cairo antialiasing with Wayland fractional scaling #413</changelog>
</package>
<package pkgid="6c578f97e1895162b973416592be05cb29255035d1ade4044b18c30148d6fe5673466b6d28787dc83ce1b21d698f7faab6ef2b648e708e7da53cde3dc4828fda" name="bemenu-devel" arch="x86_64">
  <version epoch="0" ver="0.6.23" rel="bp160.1.12"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1671192000">- Update to 0.6.14:
  * Add basic vim bindings #314
  * Make pkg-config configurable #316
  * improve exit code docs #320
  * Fix --filter #322</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1683633600">- Update to 0.6.15:
  * Add rounded corners/Border radius #319
  * Add Match/Page Counter #204
  * docs: add missing options #331
  * Add fixed height option #270
  * Fix Makefile to support submodule setups #329
  * Fix: invisible right border #333
  * Fix: select last entry if pointer/touch above last index #332
  * ESC have no effect under Wayland while enabled Vim binding #334
  * Small fixes #340</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1693396800">- Update to 0.6.16:
  * docs: add missing option #344
  * docs: Add missing items to manpage #345
  * Add option to exit bemenu using esc in vim binds normal mode #348
  * Evaluate filter first #350</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706443200">- Update to 0.6.17:
  * Add new flag --auto-select: when there is only one entry left,
  automaticallty select it #357
  * Password flag parameters with indicator option(Addresses #221) #360
  * Single instance mode(Addresses #324) #358
  * Update help/usage to add cursor background and foreground
  colors(Addresses #361). #362
  * Wayland: fix monitor and scaling detection #356
  * fix: wayland mmap failed on Sway 1.8.1 #368
  * chore: minor variable rewording #369
  * Fix fallback to xclip #365
  * Upwards list support(Addresses #328, X11/Wayland/Cairo) #364
  * add option to start vim bindings in normal mode #375
  * wayland: ensure bemenu is shown on top of fullscreen windows #376
  * feat: C-b to go left #377</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706875200">- Update to 0.6.18:
  * fix: buffer is not divisible #380
  * implement wayland fractional scaling #379
  * Reapply "implement wayland fractional scaling" #381</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706961600">- Update to 0.6.19:
  * Revert "wayland: force window-&gt;scale = 1, if BEMENU_SCALE"</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1709812800">- Update to 0.6.20:
  * Fix mouse press being ignored on x11 #382
  * Fixed verry fast repeat when pressing shift+Tab #383
  * Fix use after free in wayland.c #386
  * document vim bindings #389
  * wayland: bind to zwlr_layer_shell_v1 version 3 #390</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710331200">- Update to 0.6.21:
  * Move SIGCHLD handler #391</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1720440000">- Update to 0.6.22:
  * Clipboard fixes/improvements #405
  * Fix: Transparency on the filter reveals a rectangle behind it
    that shouldn't be there. #404
  * Fix osx build failing. #406
  * Correctness fixes (memory leaks, compiler warning, out-of-bounds
    read) #411
  * Border fixes (fixes: #399) #407</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721390400">- Update to 0.6.23:
  * Disable cairo antialiasing with Wayland fractional scaling #413</changelog>
</package>
<package pkgid="fceb407c6fe41f1cf1ccfec983f1562ea1e1d4761de9463d53768f9b6a05fff2111b90aa64d1e6d5efcc308e0df455c0da3057419f1bc40e37808c7483047c22" name="benchdnn" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="bp160.1.11"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1663070400">- Update to 2.6.2:
  * https://github.com/oneapi-src/oneDNN/releases
- Removed onednn-1045.patch.
- Removed onednn-xbyak-aarch64.patch.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1663675200">- Add patch to fix build with latest Arm Compute Library:
  * 1428.patch
  * fa93750.patch (dep for 1428.patch)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1679400000">- Update to 3.0.1:
  * Changes: https://github.com/oneapi-src/oneDNN/releases/tag/v3.0.1
- Skipped 3.0:
  * Changes: https://github.com/oneapi-src/oneDNN/releases/tag/v3.0
- Add patch to fix build with GCC13:
  * onednn-fix-gcc13.patch
- Disable Arm Compute library support until fixed upstream
  https://github.com/oneapi-src/oneDNN/issues/1599
- Drop upstream patches:
  * 1428.patch
  * fa93750.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696939200">- Update to 3.3:
  * 3.3: https://github.com/oneapi-src/oneDNN/releases/tag/v3.3
  * 3.2: https://github.com/oneapi-src/oneDNN/releases/tag/v3.2
  * 3.1: https://github.com/oneapi-src/oneDNN/releases/tag/v3.1
- Drop upstreamed onednn-fix-gcc13.patch</changelog>
  <changelog author="Alessandro de Oliveira Faria &lt;cabelo@opensuse.org&gt;" date="1701432000">- Update to 3.3.1:
- This is a patch release containing the following changes to v3.3:
  * Fixed int8 convolution accuracy issue on Intel GPUs (09c87c7)
  * Switched internal stream to in-order mode for NVIDIA and AMD GPUs to avoid synchronization issues (db01d62)
  * Fixed runtime error for avgpool_bwd operation in Graph API (d025ef6, 9e0602a, e0dc1b3)
  * Fixed benchdnn error reporting for some Graph API cases (98dc9db)
  * Fixed accuracy issue in experimental Graph Compiler for int8 MHA variant from StarCoder model (5476ef7)
  * Fixed incorrect results for layer normalization with trivial dimensions on Intel GPUs (a2ec0a0)
  * Removed redundant synchronization for out-of-order SYCL queues (a96e9b1)
  * Fixed runtime error in experimental Graph Compiler for int8 MLP subgraph from LLAMA model (595543d)
  * Fixed SEGFAULT in experimental Graph Compiler for fp32 MLP subgraph (4207105)
  * Fixed incorrect results in experimental Graph Compiler for MLP subgraph (57e14b5)
  * Fixed the issue with f16 inner product primitive with s8 output returning unimplemented on Intel GPUs (bf12207, 800b5e9, ec7054a)
  * Fixed incorrect results for int8 deconvolution with zero-points on processors with Intel AMX instructions support (55d2cec)</changelog>
  <changelog author="Alessandro de Oliveira Faria &lt;cabelo@opensuse.org&gt;" date="1701432001">- Update to 3.3.3:
- This is a patch release containing the following changes to v3.3.2:
  * Fixed performance regression in int8 convolutions on processors with Intel AVX-512 and Intel DL Boost support (a00661f)
  * Fixed race condition during library initialization on Intel Data Center GPU Max Series (7dfcd11)
  * Fixed accuracy issue in experimental Graph Compiler with LLVM code generator (8892e7e)
  * Disabled int8 RNN implementation for cases with non-trivial strides (2195e4b)
  * Fixed incorrect results in bfloat16 convolution implementation on processors with Intel AMX support (9f00af9)
  * Fixed incorrect results in fp16 and int8 convolution on Intel Core Ultra integrated GPUs (69cef84, 79bc6cc, c9c0b09)</changelog>
  <changelog author="Alessandro de Oliveira Faria &lt;cabelo@opensuse.org&gt;" date="1713528000">- Update to 3.4.1:
  * Fixed an issue with caching and serialization of primitives in
    deterministic mode (7ed604a)
  * Introduced memory descriptor serialization API
    (4cad420, 929a27a, 9b848c8)
  * Fixed incorrect results in fp64 convolution and deconvolution
    on Intel GPUs based on Xe-LPG architecture (ebe77b5, 0b399ac,
    d748d64, 9f4f3d5, 21a8cae)
  * Fixed incorrect results in reorder with large sizes on
    Intel CPUs and GPUs (69a111e, 4b72361, 74a343b)
  * Reduced creation time for deconvolution primitive on
    Intel CPUs (bec487e, 1eab005)
  * Fixed performance regression in deconvolution on
    Intel CPUs (fbe5b97, 1dd3c6a)
  * Removed dangling symblols from static builds
    (e92c404, 6f5621a)
  * Fixed crash during platform detection on some
    AArch64-based systems (406a079)
  * Fixed performance regression in int8 deconvolution on
    Intel CPUs (7e50e15)
  * Fixed handling of zero points for matmul in verbose
    logs converter (15c7916)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1727092800">- Update to 3.5.3:
  * https://github.com/oneapi-src/oneDNN/releases/tag/v3.5.3</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1727179200">- Enable graph component</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1727870400">- Add openCL deps for devel package</changelog>
</package>
<package pkgid="fba49f709166ce435af1d1a4907c195d87df058e93baa8279cf79fdcd1588d0fbf1c9b49ff21868435aa769c388080f7b09a24f58c4d9ca3b07bc215fb2df6fa" name="benchmark-devel" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1609243200">- Update to version 1.5.2:
  * Timestamps in output are now rfc3339-formatted #965
  * overflow warnings with timers fixed #980
  * Python dependencies are now covered by a requirements.txt #994
  * JSON output cleaned up when no CPU scaling is present (#1008)
  * CartesianProduct added for easier settings of multiple ranges (#1029)
  * Python bindings improvements:
    + Custom main functions (#993)
    + A rename to google_benchmark (#199
    + More state methods bound (#1037) with a builder interface (#1040)
  * Workflow additions in github include pylint (#1039) and bindings runs (#1041)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Add upstream patch to fix build with GCC 11 (boo#1181865):
  * 0001-src-benchmark_register.h-add-missing-limits-inclusio.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1619611200">- Update to version 1.5.3:
  * Be compliant and return 0 from main.
  * Fix windows warning on type conversion (#1121)
  * Add verbosity to CI logs (#1122)
  * fix cmake issue with referencing a non-existing function argument (#1118)
  * [tools] Fix dumb mistake in previous commit - print aggregates only means aggregates, not non-aggregates
  * [tools] Don't forget to print UTest when printing aggregates only
  * [sysinfo] Fix CPU Frequency reading on AMD Ryzen CPU's (#1117)
  * Use fewer ramp up repetitions when KeepRunningBatch is used (#1113)
  * Add bazel status to README
  * Re-enable bazel without bazelisk and with scoped build/test targets (#1109)
- Drop no longer needed 0001-src-benchmark_register.h-add-missing-limits-inclusio.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1631534400">- Update to version 1.5.5:
  * [NFCI] Drop warning to satisfy clang's -Wunused-but-set-variable diag (#1174)
  * Add support for new architecture loongarch (#1173)
  * Use modern clang/libc++ for sanitizers (#1171)
  * Enable various sanitizer builds in github actions (#1167)
  * Random interleaving of benchmark repetitions - the sequel (fixes #1051) (#1163)
  * Fix leak in test, and provide path to remove leak from library (#1169)
  * [NFCI] Make BenchmarkRunner non-internal to it's .cpp file
  * [NFCI] RunBenchmarks(): extract FlushStreams()/Report() functions
  * compare.py: sort the results (#1168)
  * Make 'complexity reports' cache per-family, not global (#1166)
  * Introduce per-family instance index (#1165)
  * Introduce "family index" field into JSON output (#1164)
  * BenchmarkFamilies::FindBenchmarks(): correctly use std::vector&lt;&gt;::reserve()
  * Ensure that we print repetition count even when it was specified via flag `--benchmark_repetitions=`
  * Revert "Implementation of random interleaving.  (#1105)" (#1161)
  * Fix perf counter argument parsing (#1160)
  * Run build-and-test on all branches
  * Un-disable github actions :]
  * Run build-and-test on all branches
  * Set theme jekyll-theme-hacker
  * bump version to v1.5.4
  * Removing freenode from README
  * Fix pedantic compilation flag violation (#1156)
  * fix version recorded in releases (#1047)
  * Implementation of random interleaving.  (#1105)
  * remove appveyor and add libera.chat as IRC resource
  * [PFM] Extend perf counter support to multi-threaded cases. (#1153)
  * Support -Wsuggest-override (#1059)
  * Refactor `BenchmarkInstance` (#1148)
  * Remove travis configs that are covered by actions (#1145)
  * remove done TODOs
  * add g++-6 to ubuntu-14.04 (#1144)
  * Add MSVC ARM64 support to cmake (#1090)
  * Add ubuntu-14.04 build and test workflow (#1131)
  * Clean -Wreserved-identifier instances (#1143)
  * Fix StrSplit empty string case (#1142)
  * cmake: Add explicit BENCHMARK_ENABLE_LIBPFM option (#1141)
  * Add API to benchmark allowing for custom context to be added (#1137)
  * Add `benchmark_context` flag that allows per-run custom context. (#1127)
  * Add multiple compiler support to build-and-test workflow (#1128)
  * enable markdown rendering on github pages
  * Support optional, user-directed collection of performance counters (#1114)</changelog>
  <changelog author="mpluskal@suse.com" date="1642420800">- Update to version 1.6.1:
  * Creating release commit for v1.6.1
  * Destructor not returning is expected in some cases (#1316)
  * Address c4267 warning on MSVC (#1315)
  * Fix `-DBENCHMARK_ENABLE_INSTALL=OFF` (Fixes #1275) (#1305)
  * Avoid errors due to "default label in switch which covers all enumeration values" in Windows codepath (#1302)
  * update googletest to latest release tag 1.11.0 (#1301)
  * clang-tidy: readability-redundant and performance (#1298)
  * Update user_guide.md (#1296)
  * Fix broken link to Setup/Teardown section (#1291)
  * Add clang-tidy check (#1290)
  * compare.py: compute and print 'OVERALL GEOMEAN' aggregate (#1289)
  * remove long-defunct cli parameter
  * lose some build warnings
  * Disable clang-tidy (unused-using-decls) (#1287)
  * disable lint check where we know it'd fail (#1286)
  * Add Setup/Teardown option on Benchmark. (#1269)
  * Googletest renamed master to main today. (#1285)
  * Remove bazelbuild/rules_cc dependency (#1283)
  * Support for building with LLVM clang-10/clang-11 on Windows. (#1227)
  * Fix dependency typo and unpin cibuildwheel version in wheel building … (#1263)
  * check clang format on pull requests and merges (#1281)
  * format tests with clang-format (#1282)
  * clang-format Google on {src/,include/} (#1280)
  * Fix warning with MacOS (#1276)
  * Fixed typo in doc:  s/marcro/macro (#1274)
  * Fix error with Fix Werror=old-style-cast  (#1272)
  * Fix error Wshorten-64-to-32 (#1273)
  * [cleanup] Change `== ""` to `.empty()` on string to avoid clang-tidy warnings (#1271)
  * Fix un-initted error in test and fix change the API previously proposed to use std::string instead of raw char* (#1266)
  * use docker container for ubuntu-16.04 builds (#1265)
  * [RFC] Adding API for setting/getting benchmark_filter flag? (#1254)
  * Allow template arguments to be specified directly on the BENCHMARK macro (#1262)
  * Added Doxygen support. (#1228)
  * Fix -Wdeprecated-declarations warning once more. (#1256)
  * cmake: allow to use package config from build directory
  * cmake: make package config relocatable
  * GoogleTest.cmake.in: mention BENCHMARK_USE_BUNDLED_GTEST
  * GoogleTest.cmake.in: immediately error-out after failure message, Closes #1255
  * Introduce additional memory metrics (#1238)
  * Fix -Wdeprecated-declarations warning triggered by clang-cl. (#1245)
  * Cmake: options for controlling werror, disable werror for PGI compilers (#1246)
  * cmake: eliminate redundant `target_include_directories` (#1242)
  * Update policy to match reality
  * Fix mention of --benchmarks in comment (#1229)
  * Added support of packaged GTest for running unit tests. (#1226)
  * Optimized docs installation (#1225)
  * Remove unused parameter from lambda. (#1223)
  * add  to final releasing step
  * bump version to 1.6 in preparation for release
  * COnsole reporter: if statistic produces percents, format it as such (#1221)
  * Introduce Coefficient of variation aggregate (#1220)
  * Statistics: add support for percentage unit in addition to time (#1219)
  * report.py: adjust expected u-test values for tests
  * CMake: add forgotten include(FeatureSummary) into FindPFM.cmake to fix build
  * replace #warning with #pragma message  (#1216)
  * force cmake version to 3.5.1
  * [NFC] PFM: actually report package as found, and advertise description
  * Fix links to further doc in user_guide.md (#1215)
  * Introduce accessors for currently public data members (threads and thread_index) (#1208)
  * Fix a -Wunreachable-code-aggressive warning (#1214)
  * Set theme jekyll-theme-minimal
  * wrap things that look like tags but aren't with `{% raw %}`
  * install docs folder when installing library (#1212)
  * add .DS_Store to .gitignore
  * refactor the documentation to minimise `README.md` (#1211)
  * preparing v1.5.6 release
  * Set theme jekyll-theme-modernist
  * so much for googletest not failing any more
  * turn back on strict mode for googletest as it no longer breaks
  * Change the default value of `--benchmark_filter` from "." to &lt;empty&gt; (#1207)
  * Remove dead code from PredictNumItersNeeded (#1206)
  * downgrade warnings for googletest (#1203)
  * Add wheel and sdist building action to GH Workflow (#1180)
  * add g++ to sanitizer buildbots (#1197)
  * Don't return a reference when the callers all expect pointers.
  * fix clang-tidy warnings (#1195)
  * Fix typos (#1194)
  * Fix type warning on certain compilers (#1193)
  * Use C++11 atomic_signal_fence for ClobberMemory (#1190)
  * Bazel qnx (#1192)
  * Deduplicate test function name in python bindings example (#1189)
  * prefix VLOG (#1187)
  * prefix macros to avoid clashes (#1186)
  * Move flags inside the `benchmark` namespace (#1185)
  * Add missing trailing commas (#1182)
  * Provide helpers to create integer lists for the given ranges. (#1179)
  * benchmark_runner.h: Remove superfluous semi colon (#1178)</changelog>
  <changelog author="mliska@suse.cz" date="1647259200">- Add gcc12-disable-Werror=maybe-uninitialized.patch in order
  to fix boo#1196587.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- Update to version 1.7.0:
  * version bump
  * simplified code (#1439)
  * use target_compile_definitions (#1440)
  * Stop generating the export header and just check it in (#1435)
  * Also fix the SOVERSION for benchmark_main
  * Fix SOVERSION of shared library
  * v1.6.2 bump
  * Expose google_benchmark.State for python bindings. (#1430)
  * Suppress nvcc `offsetof` warning (#1429)
  * Correct typo in Passing Arguments section
  * cleanup comments
  * fix sanitizer builds by using clang 13 (#1426)
  * fix dependabot numpy version warning
  * fix cmake warning for libcxx setup
  * Expose default help printer function (#1425)
  * Fix DoNotOptimize() GCC compile error with some types (#1340) (#1424)
  * Remove redundant formatting tags (#1420)
  * Revert "Add possibility to ask for libbenchmark version number (#1004) (#1403)" (#1417)
  * Clarify that the cpu frequency is not used for benchmark timings. (#1414)
  * Fix DoNotOptimize() GCC copy overhead (#1340) (#1410)
  * Add possibility to ask for libbenchmark version number (#1004) (#1403)
  * add multiple OSes to bazel workflow (#1412)
  * fix some build warnings on type conversions
  * fix typo in comment
  * Report large numbers in scientific notation in console reporter (#1303) (#1402)
  * Introduce warmup phase to BenchmarkRunner (#1130) (#1399)
  * Add support to get clock for new architecture CSKY (#1400)
  * Add option to get the verbosity provided by commandline flag -v (#1330) (#1397)
  * fix some typos (#1393)
  * Add installation and build instructions for Python bindings (#1392)
  * Enable -Wconversion (#1390)
  * Add benchmark labels to the output of the comparison tool (#1388)
  * Filter out benchmarks that start with "DISABLED_" (#1387)
  * Fix wheel job name for PyPI uploads (#1384)
  * Shut down Bazel gracefully and revert wheel build strategy to job matrix (#1383)
  * Small optimization to counter map management (#1382)
  * getting sysinfo in line with Google style (#1381)
  * Promote inclusive language. (#1360)
  * [nfc] Reformat doc-string in generate_export_header (#1376)
  * Fix Bazel build breakage caused by commit 6a894bd. (#1374)
  * Build `//:benchmark` as a static library only. (#1373)
  * add note about wheels action to releasing docs
  * Change artifact download name to dist to match upload name (#1371)
  * Remove conditional trigger from PyPI upload job (#1370)
  * Add BENCHMARK_STATIC_DEFINE to the Python bindings' `cc_binary` local defines. (#1369)
  * Update LICENSE file to clearly state which file needs BSD 3 (#1366)
  * Fix float comparaison and add float comparison warning (#1368)
  * Add PyPI upload job to wheel building workflow (#1359)
  * Appended additional BSD 3-Clause to LICENSE (#1363)
  * Add SetBenchmarkFilter() to set --benchmark_filter flag value in user code (#1362)
  * Add long description and content type for proper PyPI presentation (#1361)
  * Allow setting the default time unit globally (#1337)
  * restore BENCHMARK_MAIN() (#1357)
  * @platforms is magical; remove it from WORKSPACE. (#1356)
  * Make generate_export_header.bzl work for Windows. (#1355)
  * avoid case sensitive issues with duplicated names (#1354)
  * move bzl file out of tools (#1352)
  * Introduce the possibility to customize the help printer function (#1342)
  * simplify reference to internal path (#1349)
  * Check for macro existence before using (#1347)
  * annotate and export public symbols (#1321)
  * Expose default display reporter creation in public API (#1344)
  * Avoid potential truncation issues for the integral type parameterized tests. (#1341)
  * Add mutex when reading counters_ (Fixes #1335) (#1338)
  * Use Win32 API only for Win32 apps (#1333)
  * bump numby, as per dependabot (#1336)
  * Fix cross compilation for macOS ARM builds in `cibuildwheel` (#1334)
  * Cache PerfCounters instance in PerfCountersMeasurement (#1308)
  * Fix some errors in Custom Statistics demo code. (#1332)
  * Refine the User Guide CPU Frequency Scaling section (#1331)
  * Refine docs on changing cpufreq governor (#1325)
  * Expand documentation for unpacking arbitrary arguments. (#1324)
  * Suppress GoogleTest warnings on windows (MSVC) too. (#1320)
  * Add docs on Memory profiling (#1217). (#1319)
  * Add docs for `ThreadRange`. (#1318)</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- Update to version 1.7.1:
  * version bump for release
  * [bazel] Build libpfm as a dependency to allow collection of perf counters (#1408)
  * Add information for supported Python versions to setup.py (#1502)
  * Partially revert "Do not depend on unversioned python binary (#1496)" (#1501)
  * Do not depend on unversioned python binary (#1496)
  * Fix Solaris compilation (#1499) (#1500)
  * Support for QuRT OS (Hexagon RTOS) (#1497)
  * bump cmake dep and docs (#1468)
  * Bump pybind11 version to enable Python 3.11 wheel builds (#1489)
  * Discuss sources of variance in the user guide (#1481)
  * Stop using pandas.Timedelta (fixes #1482) (#1483)
  * Eliminate usage of deprecated  API in sysinfo.cc (#1474)
  * Enable aarch64 Linux wheel builds, use cibuildwheel action directly (#1472)
  * Clean up test documentation formatting (#1475)
  * use CMAKE_INSTALL_FULL in pkg-config file (#1473)
  * Link error when use as static library on windows. (#1470)
  * add debug option for enabling more output for failed cxxfeaturechecks (#1467)
  * FIx typo in benchmark.h (#1465)
  * run ClearRegisteredBenchmarks at exit (#1463)
  * Avoid deprecation warning in NVHPC (#1459)
  * Ensure we don't need benchmark installed to pass c++ feature checks (#1456)
  * Explicitly cast int literals to int8_t in tests to silence implicit-conversion warnings (#1455)
  * Fixed build issues on window (#1449)
  * remove unnecessary generated include directory (#1451)
  * Initialize help hook before actually parsing the command line (#1447)
  * Remove stray comment and added missing header (#1444)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1706097600">- Fix build to cope with changes in (open)SUSE specific cmake
  macros, no user visible changes.</changelog>
  <changelog author="mpluskal@suse.com" date="1722340800">- Update to version 1.8.5:
  * preparing for v1.8.5
  * clang format yet again
  * update actions/checkout to v4
  * another reversal of something that breaks on wasm
  * clang format header fixes
  * clang-format fixes
  * roll back fatal error that breaks some platform (wasm) expectations
  * revert perf counters change until we can do the full version
  * remove old travis config
  * [FR] Add API to provide custom profilers #1807 (#1809)
  * Clarify the difference between `BENCHMARK_TEMPLATE_F` and `BENCHMARK_TEMPLATE_DEFINE_F` + `BENCHMARK_REGISTER_F` (#1815)
  * add PERF_FORMAT_TOTAL_TIME_{ENABLED,RUNNING} to support multiplexing (#1814)
  * Add -lkstat to the .pc for Solaris (#1801)
  * Find libpfm dependency in installed CMake configs (#1806)
  * [bazel] Use `includes` instead of `strip_include_prefix` (#1803)
  * cycleclock: Fix type conversion to match function return type on riscv64 (#1802)
  * Bump minimum required C++ version from C++11 to C++14 (#1800)
  * bump standard to C++14 (#1799)
  * cycleclock: Fix type conversion to match function return type (#1794)
  * CMake: unbreak version handling for tarballs (#1793)
  * hotfix: Correct pypi-publishing action tag to v1.8.14 (#1791)
  * Improve compatibility with Hexagon hardware (#1785)
  * preparing for v1.8.4 (#1788)
  * Modernize wheel building job config (#1783)
  * Switch git override to stable BCR tag for nanobind_bazel (#1778)
  * Add `benchmark_main.pc` to link `main()` containing library (#1779)
  * Refactor: Return frequency as double (#1782)
  * Remove COMPILER_IBMXL macro for z/OS (#1777)
  * Fix OpenBSD build (#1772)
  * allow BENCHMARK_VERSION to be undefined (#1769)
  * clang-tidy broke the world (#1766)
  * Fix implicit conversion changes signess warning in perf_counters.cc (#1765)
  * Add Python bindings build using bzlmod (#1764)
  * mitigate clang build warnings -Wconversion (#1763)
  * Fixed LTO issue on no discard variable (#1761)
  * Revert "fix some warnings" (#1762)
  * fix some warnings
  * Rewrite complexity_test to use (hardcoded) manual time (#1757)
  * sysinfo.cc: Always abort on GetNumCPUs failure (#1756)
  * CycleClock: Add support for Alpha architecture (#1753)
  * fix typo in GetBenchmarkVersion() (#1755)
  * Deflake CI (#1751)
  * Add `BENCHMARK_TEMPLATE[12]_CAPTURE`, fusion of `BENCHMARK_CAPTURE` and `BENCHMARK_TEMPLATE` (#1747)
  * set library version in bazel (#1746)
  * Output library / schema versions in JSON context block (#1742)
  * ignore new bzlmod lock file
  * changes to run bazel migration scripts
  * Bump pre-commit dependencies (#1740)
  * Fix C-style typecasting in QNX-specific code (#1739)
  * Docs: `reducing_variance.md`: proofreading, fix typos (#1736)
  * fix(cmakelists.txt): enforce CMake to find PFM or fail when BENCHMARK_ENABLE_LIBPFM is ON (#1705)
  * Issue 1734: Streams not flushed if not running actual benchmarks (#1735)
  * tools/compare: don't actually discard valid (but zero) `pvalue` (#1733)
  * Issue1731 created console does not receive output (#1732)
  * Change Fixture to use non-const SetUp and TearDown in example (#1723)
  * Avoid leaking LFS flags to reverse dependencies (#1730)
  * style: re-format BUILD file with buildifier.
  * fix per-thread timing error on z/OS (#1719)
  * Enable Large-file Support (#1726)
  * CycleClock: use RDTIME instead of RDCYCLE on RISC-V (#1727)
  * Update perf_counters_gtest.cc (#1728)
  * Fix division by zero for low frequency timers for CV statistics (#1724)
  * fix: fail to import gbench in bazel and python3.12
  * define HOST_NAME_MAX for z/oS (#1717)
  * Fix mis-matching argument in closing tag for cmake macro (#1714) (#1715)
  * Check out repo at depth 0 for Python tests, bump Python and PyPI actions (#1713)
  * Run `pre-commit autoupdate`, fix stale pyproject.toml comments (#1712)
  * Upgrade core bazel dependencies (#1711)
  * Fix editable install by unsetting `build_ext.copy_extensions_to_source` (#1710)
  * [NFC] `complexity_n` is not of `IterationCount` type (#1709)
  * Fix `pre-commit` GitHub Actions job (#1708)
  * Support windows MSYS2 environments (#1704)
  * [CI] Try to fix sanitizer builds by pinning the LLVM revision (#1703)
  * Fix CMakeLists.txt for perf_counters_test (#1701)
  * Add missing `\n` character at end of error log string (#1700)
  * Switch out black for ruff format (#1698)
  * Fixed compiler warnings (#1697)
  * Fix unit tests compilation with non-gnu / non-msvc compilers with c++11 support. (#1691)
  * Add `setuptools_scm` for dynamic zero-config Python versioning (#1690)
  * Drop isort hook for ruff builtin import sorting (#1689)
  * Add pre-commit config and GitHub Actions job (#1688)
  * [bindings] Add LTO builds on Windows+MSVC (#1687)
  * Reapply size optimizations for clang &amp; MSVC, LTO for Mac+Linux (#1685)
  * Change nanobind linkage to response file approach on macOS (#1638)
  * Add Python 3.12 support (#1676)
  * Add no-unititialized to tests (#1683)
  * Set -Wno-unused-variable for tests (#1682)
  * Increase the kMaxIterations limit (#1668)
  * fix format in src/sysinfo
  * add name to clang format job
  * Fix building on MinGW: default `WINVER` is too old (#1681)
  * Update bazel.yml (#1671)
  * correct cli param in docs
  * Make json and csv output consistent. (#1662)
  * Audit MSVC references in cmake files to consider clang++ (#1669)
  * bump version to 1.8.3
  * tweak comment wording
  * StatisticsMedian: Fix bug
  * test: Use gtest_main only when needed  (#1657)
  * perf_counters: Initialize once only when needed (#1656)
  * State: Initialize counters with kAvgIteration in constructor (#1652)
  * perf-counters: Make tests pass on Android (#1653)
  * add logo to github pages
  * add black icon
  * remove logo from generated docs
  * remove icon from main README
  * update logo path
  * adding a logo to the docs
  * benchmark.cc: Fix benchmarks_with_threads condition (#1651)
  * sysinfo.cc: Call getloadavg for Android API &gt;= 29 (#1) (#1649)
  * [perf-counters] Fix pause/resume (#1643)
  * fix: added benchmark_counters_tabular for file (#1645)
  * Fix IntelLLVM compiler error (#1644)
  * bug: Inconsistent suffixes console reporter 1009 (#1631)
  * Mark internal deps as dev_depenencies so that downstream modules don't require those. (#1640)
  * Fix `-Werror,-Wold-style-cast` build failure on Windows. (#1637)
  * Re-enable windows-latest tests for newer Bazel (#1641)
  * Update bzlmod support to new rules_python extension API (#1633)
  * Delete unused requirements file, simplify nanobind build file (#1635)
  * Add tests for Human Readable functionality (#1632)
  * Downgrade bazel to windows-2019 (#1629)
  * Bump scipy from 1.5.4 to 1.10.0 in /tools (#1630)
  * Bump `nanobind` to stable v1.4.0 tag (#1626)
  * missing cmake include
  * add back package properties for PFM
  * pfm: Use a more standard CMake approach for finding libpfm (#1628)
  * Add pyproject.toml file for PEP518 compliance (#1625)
  * Update tools.md for missing color meaning issue #1491 (#1624)
  * Fix broken PFM-enabled tests (#1623)
  * bump version to 1.8.2 ready for release
  * Fix passing non-const lvalue refs to DoNotOptimize (#1622)
  * Add more terminals with color support (#1621)
  * Add discord server link to README
  * bump version to 1.8.1 pre release
  * Suppress intentional potential memory leak as detected by clang static analysis (#1618)
  * Add a CI test for the new bzlmod integration (#1617)
  * Add support for bzlmod (excluding Python bindings) (#1615)
  * remove old-style (C-style) casts (#1614)
  * Fix a typo in regex choice (#1610)
  * Fix pass rvalue to DoNotOptimize (#1608)
  * Add project name to version message
  * Fixed a typo in docs (#1600)
  * Update Python version to PY3, as indicated by the actual source file. (#1598)
  * Fix code triggering -Wsign-conversion (#1596)
  * Disable debug-only test in release builds to avoid expected failures. (#1595)
  * update version to v1.8.0
  * reenable msan sanitizer workflow (#1589)
  * Guard NOMINMAX to prevent redefinition error (#1581) (#1582)
  * Correct libpfm dep for integrators. (#1579)
  * Fix compile warnings about ignoring a [[nodiscard]] type. (#1577)
  * make libpfm dep work for integrators
  * use 'new_git_repository' in external deps call to work with older bazel versions
  * link to benchmark directly for tests that aren't link_main_test (#1576)
  * Convert uses of `const char*` to `std::string` (#1567)
  * add '@' to correctly reference build file for libpfm (#1575)
  * Address warnings on NVIDIA nvc++ (#1573)
  * simplify setting C++ standard
  * [FR] Provide public accessors to benchmark name and arguments #1551 (#1563)
  * use std::string for skip messages (#1571)
  * [FR] state.SkipWithMessage #963 (#1564)
  * Fix build break with nvc++ when -Werror is ON (#1569)
  * Fix examples in user guide using deprecated `DoNotOptimize`-API (#1568)
  * Bump nanobind to stable v0.2.0, change linker options (#1565)
  * Refactoring of PerfCounters infrastructure (#1559)
  * get rid of  warnings in tests (#1562)
  * Filter performance counter names, not invalidate all (#1554)
  * Implement unlimited number of performance counters (#1552)
  * add compiler to build-and-test and create min-cmake CI bot (#1550)
  * Fix CPU frequency estimation on riscv (#1549)
  * cleanup: support CMake &gt;= 3.10 (#1544)
  * Werror all the time (#1546)
  * Add missing parentheses in ParseBenchMinTime() (#1545)
  * Removing warnings appearing with C++20 / CLang 15 (#1542)
  * update github actions to latest versions (#1541)
  * replace complexity with simplicity for faster libc++ setup (#1539)
  * Refactor links which include "master" and change it to "main" (#1540)
  * Allow specifying number of iterations via --benchmark_min_time. (#1525)
  * Support --benchmarks_filter in the compare.py 'benchmarks' command (#1486)
  * get rid of some deprecation warnings from tests
  * fix #1446 by removing the address operator (#1538)
  * Fixing issue with ARM64EC and MSVC (#1514)
  * Deprecate constant reference API to DoNotOptimize. (#1493)
  * remove best effort support for ubuntu 18.04 (#1537)
  * try disabling liquid for jekyll to fix curly braces (#1536)
  * Switch bindings implementation to `nanobind` (#1526)
  * Modernize setup.py, extend Python bindings CI (#1535)
  * Add quick instructions on how to enable sans checks (#1529)
  * Fix Clang-Tidy warnings readability-else-after-return (#1528)
  * Include the benchmark's family-name in State (#1511)
  * Fix typos found by codespell (#1519)
  * Fix Clang-Tidy warnings related to modernize-use-override (#1523)
  * Bug fix variable 'actual_iterations' set but not used (#1517)
  * add more docs to index
  * Add a `benchmark_deps.bzl` function to Google Benchmark (#1520)
  * Try removing attempt to set the C++ standard (#1464)
  * Fixes incorrect wide string conversion on win32 (#1516)
  * Return option benchmark_perf_counters to help output (#1508)
  * Removed deprecated function (#1506)
- Drop no longer needed gcc12-disable-Werror=maybe-uninitialized.patch</changelog>
</package>
<package pkgid="283b71466931875deeb4510ad663eaafb75a096ed95a1e48604361c6f55afbff5d3ecf33e1e0ffda7de12509f31273c048658e9803ae73a503b763cbc96aaf88" name="berkeleylm" arch="noarch">
  <version epoch="0" ver="1.1.6" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1582891200">- Initial packaging of berkeleylm 1.1.6</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="d164e7dac0b462413f91a407f8a33edc04b81b28bf4f619d03983c43ff94f162ec2b36e5752be45460f8e842a525b1f790594d4d88138063aad421f2fa4945f8" name="berkeleylm-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.6" rel="bp160.1.11"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1582891200">- Initial packaging of berkeleylm 1.1.6</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647864000">- Build with source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="dfceffa0e4b1968b4ace16dcf42edac6e1db663b6a2162cb30d761d65428e9339b6d2972930e2816d8b1744da98f0b35acb594957b7f3a383b75dde0d2e8cf03" name="bettercap" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1586347200">- Update to version 2.27
  New Features
  * new: added new http.proxy.redirect and https.proxy.redirect
    parameters to optionally disable iptables port redirection
  * View HTTP Basic authorization credentials when sniffing
  Fixes
  * fix: logging error when read from websocket fails
  * fix: using iw instead of iwconfig whenever possible
  * fix: fixed a bug with wifi.recon.channel clear when
    wifi.interface is nil (fixes #661)
  * fix: fixed gateway regexp for macOS (closes #645)
  * Update iw txpower syntax to only use int
  * Fix iw txpower syntax
  * Correcting content-length for stripped response body
  * modules/wifi: Fix handle activation when monitor device is
    already set up
  * modules/wifi: fix SetSnapLen error message text
  * modules/ble: swap error returns
  * caplets: Swap Error Returns
  * tls: fix CertConfigFromModule() return order
  * tls: fix CreateCertificate() return order
  * modules/events_stream: fix dropped error</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1593777600">- Update to version 2.28
  New Features
  * Implemented a way to not send deauthentication and/or
    association packets to AP's for which key material was already
    acquired
  Fixes
  * Make domain matches in the dns.spoof module case insensitive
  * Update mysql_server.go
  * Fix sslstrip &amp; some related issues in http(s).proxy and
    dns.spoof
  * Fix problem with the client ip in https.proxy as described in
    bettercap/caplets#45
  * modules/arp_spoof: use net.IP to compare addresses
  Misc
  * Fix conflict with last commit</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1618142400">- Update to version 2.30.2
  - Bugfix release
- Update to version 2.30
  New Features
  * new c2 module, first draft
  Fixes
  * Fix bug in target parsing
  * fix: updated readline, using syscall package instead of
    constants
  * fix: better phrasing
  * fix: added sasl authentication support for the c2 module
  Misc
  * Add start/stop callbacks to packet proxy
  * Delete .deepsource.toml
  * Remove unnecessary comparison with bool
  * Remove unnecessary guard around delete
  * Add .deepsource.toml
- Update to version 2.29
  New Features
  * gps module can use both serial and gpsd
  Fixes
  * fix: do not close serial port if nil
  * network: remove mutex lock that breaks webui and api
  * go vet fixes
  * wifi.go: dont claim read lock until it is needed
  * fix slice memory allocation optimization
  * network: optimize wifi locking and include memory
    allocation optimization
  * Fix content type parsing error, improve regexp search
    performance, strip header names and values.
  * Set Content-Type for PAC and WPAD file
  Misc
  * misc: updated the version of go used to compile releases
  * Remove proxy-side TLD spoofing.
  * Update HTTP header regexp selector.
  * misc: removed useless badges from the README
  * misc: updated dependencies</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1618660800">- Update to version 2.31.0
  New Features
  * gateway.change event for MITM monitoring.
  * ticker now broadcasts a tick event.
  * wifi.probe to send fake client probe requests.
  * session scripts can now include other scripts via require('file')
  * new -script allows to run JS code to instrument session.
  * implemented icmpv6 rogue router advertisement.
  * experimental ipv6 ndp spoofer.
  * net.sniff now supports ipv6.
  * basic ipv6 support.
  * module parameters now accept that will be resolved to the
    interface IP address.
  * detection and parsing of deauthentication frames as
    wifi.deauthentication events.
  * new -caplets-path argument to specify an alternative caplets
    base path.
  Fixes
  * fixed a 'ble.recon off' panic on linux.
  * handle disconnection (nil gateway) in routes monitor.
  * refactored routing logic (fixes #701).
  * do not trigger deauth events for frames sent by client
    stations or unknown access points.
  * small fix or general refactoring i did not bother commenting.
  * do not override req.Hostname in http proxy module script.
  * fixed a panic in net.show.meta when rendeing open ports.
  * don't print wifi.client.probe we generate.
  * fixed vm locking.
  * using static url for qemu.
  * keep track of ipv6 packets.
  * collect additional frames for stations with key material.
  * using iw if available to get supported wifi frequencies.
  * returning error when neither iw or iwconfig are found.
  * updated gatt library which fixes some linux issues.
  * do not add unhandled dns types to dns spoofing packets.
  Misc
  * moved example script in dedicated repo
  * using script to detect karma attacks</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621684800">- Update to version 2.31.1
  * Bugfix release</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1629547200">- Update to version 2.32.0
  New Features
  * new: new -pcap-buf-size option to set a custom pcap buffer size.
  * new: centralized pcap capture configuration management.
  * add wifi fake authentication attack.
  * add channel hopping attack.
  * added Windows basepath to UI setup.
  Fixes
  * Various changes and fixes.
  * Fix arp.spoof not sending replies.
  * fix: checking boundaries when parsing WPS vendor extensions.
  Misc
  * Add DESTDIR variable.
  * nothing but import format change.
  * make import statement clean.
  * Support for ch177 .
  * Further tests for mapping dot11 frequencies to channels as.
    ch177 was not discovered correctly based on freq.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1711195200">- Add libnetfilter_queue1 to Requires</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1712318400">- Add %check section to prevent rpmlint warnings</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1712318401">- Remove the empty %check section.
  rpmlint issued an misleading warning/recommendation.
  * https://github.com/rpm-software-management/rpmlint/commit/d7da573e63844648107a3c1a076cddbf13f7df8a
  * https://github.com/rpm-software-management/rpmlint/pull/1222</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1726574400">- Update to version 2.4.0:
  * fix: added better debug logging for core.Exec (fixes #1125).
  * new: added support for 29bit obd2 identifiers.
  * new: implemented can.obd2 builtin parser.
  * fix: fixed address reload on api.rest.
  * new: can.fuzz now supports an optional size argument.
  * fix: can.fuzz now expects an hexadecimal frame id.
  * fix: stop can.dump reader when can.recon is stopped.
  * new: can.dump reader will now sleep for the correct amount
    of time.
  * new: implemented can.dup and can.dump.inject to read a candump
    log file.
  * refact: refactored can dbc logic.
  * new: added new wifi cipher suites and auth types.
  * new: added new wifi RSN parsing.
  * fix: fixed a nil pointer dereference when wifi.show is executed
    before wifi.recon on.
  * fix: fixed handshakes filename if wifi.aggregate is false.
  * fix: expanding file path in file read api.
  * fix: initialize wifi module state correctly.
  * new: embedded ui.
  * new: added CAN to session json object.
  * fix: do not allow wifi.recon if wifi.bruteforce is running.
  * fix: added p2p_disabled=1 for wifi.bruteforce on linux.
  * new: implemented wifi.bruteforce for linux.
  * fix: bring interface down for mac.changer module.
  * fix: do not attempt mac lookup if gateway is empty.
  * fix: do not report a routing error if the interface is
    disconnected.
  * fix: make sure that wifi channels are unique and sorted.
  * fix: WPA3 is now correcly identified and reported.
  * new: ble, can, hid and wifi modules will now set a custom
    prompt.
  * new: implemented can.filter.
  * new: can.fuzz command.
  * new: gps.set to manually set/override gps coordinates.
  * fix: fixed verbose gousb logging.
  * fix: using proper v2 package suffix.
  * fix: fixed device index use for BLE module.
  * new: history file location can now be set via
    BETTERCAP_HISTORY env var.
  * new: implemented can.inject.
  * new can module for CAN-bus.</changelog>
</package>
<package pkgid="4ce078b4fcb9bbe9c3447e1a59434610fcd10fd463e48728abf519e9c336d4623e8b225368f184db02ef143d65fd3ab89a07c86cd7235feb322f3a705c6cec87" name="beust-jcommander" arch="noarch">
  <version epoch="0" ver="1.85" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540382400">- Initial packaging built without maven, adapted from Fedora rpm</changelog>
  <changelog author="fstrba@suse.com" date="1540468800">- Build with java source/target levels 8 since the code uses
  String.join() which does not exist before java 8</changelog>
  <changelog author="fstrba@suse.com" date="1544097600">- Fix javadoc build with older JDK versions</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Avoid double shipping of documentation.
- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Remove reference to pom parent from pom.xml file, since we are
  not building with maven.</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version 1.82
  * Fixes:
    + #392: fixed bug when parsing arguments is ignoring case
    sensitivity option
    + Add a test for Parameter order usage
    + add a test for Path converter
    + Add automatic module name to manifest
    + Add check if Boolean parameter is default null, then do not
    flip value
    + Added testing modules
    + Add format tests for DefaultUsageFormatter,
    UnixStyleUsageFormatter
    + add Path converter change #414 to changelog
    + Add test case for issue 367
    + Add testing for UnixStyleUsageFormatter
    + Add unix-style formatter, allow DefaultUsageFormatter to be
    extended easier
    + Allow generics of type &lt;? extends X&gt; and &lt;? super Y&gt; in
    parameters
    + Allow main parameters to be a single field.
    + allow System.out to be replaced by something else (f.e.
    System.err)
    + Allow UsageFormatter to be set in JCommander Builder
    + Change UsageFormatter into an interface
    + Clean up DefaultUsageFormatter
    + Create MyDelegate.java
    + Create UsageFormatter (preliminary)
    + Enable usage() ordering for DynamicParameter
    + Encapsulate MainParameter.
    + encode user input to massage error message
    + Expose more of the UsageFormatter implementations
    + Fields annotated with @ParametersDelegate are now allowed to
    be final.
    + FIX #380 Main parameter doesn't support Converter
    + Fix error message when failing to convert a Path
    + Fixing: squid:ModifiersOrderCheck and squid:S2444
    + Fix locale-related issues in usage formatter tests
    + Get boolean/Boolean getter with "is" prefix
    + GH-477 Environment Variable Default Provider
    + make console configurable by JCommander.Builder
    + Make UsageFormatter abstract, Create DefaultUsageFormatter
    + Only one DefaultConverterFactory
    + Remove String.join usage - resolves #381
    + Remove the generic in IStringConverterFactory
    + Restrict access to JCommander.Options again
    + Support arity for main parameters.
    + Update DefaultParameterizedParser.java
    + Update IParameterizedParser.java
    + Update JCommander.java
    + usage() hides 'Comments:' header when only hidden commands
    exist
    + Use Builder API as constructor is deprecated
    + Use get&lt;fieldname&gt; default getter approach if is&lt;fieldname&gt;
    method is not found
  * Upgrade needed by new code in xmvn 4.2.0
- Fetch sources using source service and clean the tarball of
  unnecessary binary files</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1716206400">- Update to version 1.83
  * Fixes:
    + Fixed Docs Timestamp
    + Fixed: #563 - JCommander does not recognize command by alias.
    + fixed: missing null check
    + renamed IRule to IParametersValidator
    + `@Parameters(rules = &lt;? extends IRule&gt;)`
    + Unit Test for #532
    + Fixed #532: @-syntax not working with command objects
    + enable testng tests
    + Fix regression with removed usage methods
    + Add OSGi entries in MANIFEST.MF during jar creation</changelog>
  <changelog author="fstrba@suse.com" date="1725537600">- Update to version 1.85
  * Changes of 1.84
    + Changed the method processing to only ignore bridge and
    synthetic methods which are not duplicate of other normal
    methods.
    + Renamed BuilderExample to BridgeMethodsExample.
    + Exclude methods which are bridge or synthetic when parsing
    + Added public IMainParameter interface to fix
    cbeust/jcommander#559
    + Fixed: A default fulfils requirement, but does not count as
    assignment.
    + Expand dynamic arg expands non dynamic args
    + Order parameters with the same order by name in usage()
    + Asserting that double quotes are not removed.
    + Replace arrayOf with array literals in Kotlin sample
    + Keep original exception thrown by the parameter setter method
    + Fixes #557: Now validates BEFORE conversion
    + Fixed: Broken link to TestNG example
    + Allow acceptUnknownOption with variableArity
    + Fixed: Default value of primitive type must not satisfy
    required = true
    + Simplified code: No need for public class
    + No ParameterException if a default value assigned for
    required params
    + Fixed documentation: Contributor fixed inidex.html instead of
    index.adoc
    + Example for @Parameter on setter method
    + Fixed docs formatting
    + Mentioning Charset converter in docs
    + Improved ByteOrderConverterTest: Removing unused Exception
    + Adds a CharsetConverter.
    + Mentioning ByteOrder converter in docs
    + Improved ByteOrderConverterTest: Proofs that parameter may be
    in mixed case
    + Adds a ByteOrderConverter.
    + Improved VariableArityTest: Proofs that unknown options are
    safely passed through
    + Test for dontShowNullForMissingCommandDescription
    + Fix usage() for missing description on commands
    + Moved description of defaultValueDescription to usage chapter
    + Fixed backwards compatiblity fail:
    ParameterDescription.getDefault() must not produce different
    result as existing code relies on current behavior
    + Fixed test fail: NullPointerException in ParameterDescription
    + Fixed #471 @Param(default = )
    + Clarification: List and Set can be comma-separated
    + Modify convertValue() to fix issue 509 and add a test
    + Performance: String.isEmpty() is faster than .equals()
    + Return an empty list when parsing an empty string
    + Using secret GPG_PASSPHRASE for improved security
    + Fixed: Deprecation Warning about new Integer(int)
    + Ignore default value for required parameter
  * Changes of 1.85
    + Fixed: Compilation fails due to Java 11 API used on Java 8
    target
    + Cleanup configFile after enabledAtSignExpansionTest
    + Simplified AtSignExpansion code
    + Improved testing of AtSignExpansion
    + Fix: enable parameter values to start with @
    + Simplified Strings::startsWith
    + Simplified Strings::join(String, List&lt;Object&gt;)
    + Simplified Strings::join(String, List&lt;String&gt;)
- Modified patch:
  * 0001-ParseValues-NullPointerException-patch.patch
    + rebase</changelog>
</package>
<package pkgid="1a96c05946084ac4b883067350dbaa19dbd7bf7fbfb99ab47ac25530ecf4571a5bc29782bec2d6cc8d46bcd4577680db9de7df1d9a23adf1f9699171502cd49d" name="beust-jcommander-javadoc" arch="noarch">
  <version epoch="0" ver="1.85" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1540382400">- Initial packaging built without maven, adapted from Fedora rpm</changelog>
  <changelog author="fstrba@suse.com" date="1540468800">- Build with java source/target levels 8 since the code uses
  String.join() which does not exist before java 8</changelog>
  <changelog author="fstrba@suse.com" date="1544097600">- Fix javadoc build with older JDK versions</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Avoid double shipping of documentation.
- Ensure neutrality of descriptions.</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Remove reference to pom parent from pom.xml file, since we are
  not building with maven.</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version 1.82
  * Fixes:
    + #392: fixed bug when parsing arguments is ignoring case
    sensitivity option
    + Add a test for Parameter order usage
    + add a test for Path converter
    + Add automatic module name to manifest
    + Add check if Boolean parameter is default null, then do not
    flip value
    + Added testing modules
    + Add format tests for DefaultUsageFormatter,
    UnixStyleUsageFormatter
    + add Path converter change #414 to changelog
    + Add test case for issue 367
    + Add testing for UnixStyleUsageFormatter
    + Add unix-style formatter, allow DefaultUsageFormatter to be
    extended easier
    + Allow generics of type &lt;? extends X&gt; and &lt;? super Y&gt; in
    parameters
    + Allow main parameters to be a single field.
    + allow System.out to be replaced by something else (f.e.
    System.err)
    + Allow UsageFormatter to be set in JCommander Builder
    + Change UsageFormatter into an interface
    + Clean up DefaultUsageFormatter
    + Create MyDelegate.java
    + Create UsageFormatter (preliminary)
    + Enable usage() ordering for DynamicParameter
    + Encapsulate MainParameter.
    + encode user input to massage error message
    + Expose more of the UsageFormatter implementations
    + Fields annotated with @ParametersDelegate are now allowed to
    be final.
    + FIX #380 Main parameter doesn't support Converter
    + Fix error message when failing to convert a Path
    + Fixing: squid:ModifiersOrderCheck and squid:S2444
    + Fix locale-related issues in usage formatter tests
    + Get boolean/Boolean getter with "is" prefix
    + GH-477 Environment Variable Default Provider
    + make console configurable by JCommander.Builder
    + Make UsageFormatter abstract, Create DefaultUsageFormatter
    + Only one DefaultConverterFactory
    + Remove String.join usage - resolves #381
    + Remove the generic in IStringConverterFactory
    + Restrict access to JCommander.Options again
    + Support arity for main parameters.
    + Update DefaultParameterizedParser.java
    + Update IParameterizedParser.java
    + Update JCommander.java
    + usage() hides 'Comments:' header when only hidden commands
    exist
    + Use Builder API as constructor is deprecated
    + Use get&lt;fieldname&gt; default getter approach if is&lt;fieldname&gt;
    method is not found
  * Upgrade needed by new code in xmvn 4.2.0
- Fetch sources using source service and clean the tarball of
  unnecessary binary files</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1716206400">- Update to version 1.83
  * Fixes:
    + Fixed Docs Timestamp
    + Fixed: #563 - JCommander does not recognize command by alias.
    + fixed: missing null check
    + renamed IRule to IParametersValidator
    + `@Parameters(rules = &lt;? extends IRule&gt;)`
    + Unit Test for #532
    + Fixed #532: @-syntax not working with command objects
    + enable testng tests
    + Fix regression with removed usage methods
    + Add OSGi entries in MANIFEST.MF during jar creation</changelog>
  <changelog author="fstrba@suse.com" date="1725537600">- Update to version 1.85
  * Changes of 1.84
    + Changed the method processing to only ignore bridge and
    synthetic methods which are not duplicate of other normal
    methods.
    + Renamed BuilderExample to BridgeMethodsExample.
    + Exclude methods which are bridge or synthetic when parsing
    + Added public IMainParameter interface to fix
    cbeust/jcommander#559
    + Fixed: A default fulfils requirement, but does not count as
    assignment.
    + Expand dynamic arg expands non dynamic args
    + Order parameters with the same order by name in usage()
    + Asserting that double quotes are not removed.
    + Replace arrayOf with array literals in Kotlin sample
    + Keep original exception thrown by the parameter setter method
    + Fixes #557: Now validates BEFORE conversion
    + Fixed: Broken link to TestNG example
    + Allow acceptUnknownOption with variableArity
    + Fixed: Default value of primitive type must not satisfy
    required = true
    + Simplified code: No need for public class
    + No ParameterException if a default value assigned for
    required params
    + Fixed documentation: Contributor fixed inidex.html instead of
    index.adoc
    + Example for @Parameter on setter method
    + Fixed docs formatting
    + Mentioning Charset converter in docs
    + Improved ByteOrderConverterTest: Removing unused Exception
    + Adds a CharsetConverter.
    + Mentioning ByteOrder converter in docs
    + Improved ByteOrderConverterTest: Proofs that parameter may be
    in mixed case
    + Adds a ByteOrderConverter.
    + Improved VariableArityTest: Proofs that unknown options are
    safely passed through
    + Test for dontShowNullForMissingCommandDescription
    + Fix usage() for missing description on commands
    + Moved description of defaultValueDescription to usage chapter
    + Fixed backwards compatiblity fail:
    ParameterDescription.getDefault() must not produce different
    result as existing code relies on current behavior
    + Fixed test fail: NullPointerException in ParameterDescription
    + Fixed #471 @Param(default = )
    + Clarification: List and Set can be comma-separated
    + Modify convertValue() to fix issue 509 and add a test
    + Performance: String.isEmpty() is faster than .equals()
    + Return an empty list when parsing an empty string
    + Using secret GPG_PASSPHRASE for improved security
    + Fixed: Deprecation Warning about new Integer(int)
    + Ignore default value for required parameter
  * Changes of 1.85
    + Fixed: Compilation fails due to Java 11 API used on Java 8
    target
    + Cleanup configFile after enabledAtSignExpansionTest
    + Simplified AtSignExpansion code
    + Improved testing of AtSignExpansion
    + Fix: enable parameter values to start with @
    + Simplified Strings::startsWith
    + Simplified Strings::join(String, List&lt;Object&gt;)
    + Simplified Strings::join(String, List&lt;String&gt;)
- Modified patch:
  * 0001-ParseValues-NullPointerException-patch.patch
    + rebase</changelog>
</package>
<package pkgid="f493296c2a6cfeaca42443c2d28429eefbdb935b53ab9c5451bad7c7e54d0b392280eb1c692bf3c1583c3fcf463855c1006e20749c712bafbe93cce848226243" name="bff" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="bp160.1.12"/>
  <changelog author="adam@mizerski.pl" date="1270987200">- new package</changelog>
  <changelog author="cfarrell@novell.com" date="1306497600">- license update: BSD-3-Clause
  Spec file should have license with version. Use syntax from
  spdx.org/licenses</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="adam@mizerski.pl" date="1316347200">- update to 1.0.4
- use gcc directly instead of make</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 1.0.5:
  * Add samples written in Brainfuck.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 1.0.7:
  * fixed an issue in preprocessing stage that caused it
    to ingest more bf code than there was if the bf code
    started with &lt;&lt;... or &gt;&gt;... sequence. This lead to a
    heap corruption with variable consequences.
  * added special handling for [-] and [+]
- readd groups tag</changelog>
</package>
<package pkgid="ea83a5a82125f91772e13c671672db7a6bafd520f197ee9b933347a6d9587fb4cacff8f009df042e900e3d3c487940ca5611fd47bd6c5b83f74e66e23c225857" name="bff-samples" arch="noarch">
  <version epoch="0" ver="1.0.7" rel="bp160.1.12"/>
  <changelog author="adam@mizerski.pl" date="1270987200">- new package</changelog>
  <changelog author="cfarrell@novell.com" date="1306497600">- license update: BSD-3-Clause
  Spec file should have license with version. Use syntax from
  spdx.org/licenses</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="adam@mizerski.pl" date="1316347200">- update to 1.0.4
- use gcc directly instead of make</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 1.0.5:
  * Add samples written in Brainfuck.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 1.0.7:
  * fixed an issue in preprocessing stage that caused it
    to ingest more bf code than there was if the bf code
    started with &lt;&lt;... or &gt;&gt;... sequence. This lead to a
    heap corruption with variable consequences.
  * added special handling for [-] and [+]
- readd groups tag</changelog>
</package>
<package pkgid="067b1da0e6e75cdcb3770afc53046e09c088c1b5d0bbf8e69b6277323754fff27cb286ddc450bf0d59ac6a334ae27da0646b59adce408971e398be3a42f75551" name="bff4" arch="x86_64">
  <version epoch="0" ver="1" rel="bp160.1.12"/>
  <changelog author="adam@mizerski.pl" date="1270987200">- new package</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="adam@mizerski.pl" date="1340107200">- added license-clarification.txt (bnc#761551) and updated
  license tag
- updated bff4.c
- renamed arg.patch -&gt; bff4-arg.patch and added patch info
- improved and cleaned-up spec file</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b9f393c4e101bb27bbd78ff5933e2f7e59ed7aff9bc86d45e6e40c415f22284e1e6c60de2282572668247ab4b1d7eaef591904ad52cd5b8dd05e83dcc200fd71" name="bgzip" arch="x86_64">
  <version epoch="0" ver="1.20" rel="bp160.1.14"/>
  <changelog author="flyos@mailoo.org" date="1531396800">- Better formatting of the descriptions
- Spec file cleaned up using spec-cleaner
- Update to 1.8
  * The URL to get sequences from the EBI reference server has been changed
    to https://.  This is because the EBI no longer serve sequences via
    plain HTTP - requests to the http:// endpoint just get redirected.
    HTSlib needs to be linked against libcurl to download https:// URLs,
    so CRAM users who want to get references from the EBI will need to
    run configure and ensure libcurl support is enabled using the
  - -enable-libcurl option.
  * Added libdeflate as a build option for alternative faster compression and
    decompression.  Results vary by CPU but compression should be twice as fast
    and decompression faster.
  * It is now possible to set the compression level in bgzip.  (#675; thanks
    to Nathan Weeks).
  * bgzip now gets its own manual page.
  * CRAM encoding now stored MD and NM tags verbatim where the reference
    contains 'N' characters, to work around ambiguities in the SAM
    specification (samtools #717/762).
    Also added "store_md" and "store_nm" cram-options for forcing these
    tags to be stored at all locations.  This is best when combined with
    a subsequent decode_md=0 option while reading CRAM.
  * Multiple CRAM bug fixes, including a fix to free and the subsequent reuse of
    references with `-T ref.fa`. (#654; reported by Chris Saunders)
  * CRAM multi-threading bugs fixed: don't try to call flush on reading;
    processing of multiple range queries; problems with multi-slice containers.
  * Fixed crashes caused when decoding some cramtools produced CRAM files.
  * Fixed a couple of minor rANS issues with handling invalid data.
  * Fixed bug where probaln_glocal() tried to allocate far more memory than
    needed when the query sequence was much longer than the reference.  This
    caused crashes in samtools and bcftools mpileup when used on data with very
    long reads. (#572, problem reported by Felix Bemm via minimap2).
  * sam_prop_realn() now returns -1 (the same value as for unmapped reads)
    on reads that do not include at least one 'M', 'X' or '=' CIGAR operator,
    and no longer adds BQ or ZQ tags.  BAQ adjustments are only made to bases
    covered by these operators so there is no point in trying to align
    reads that do not have them. (#572)
  * BAM: HTSlib now supports BAMs which include CIGARs with more than
    65535 operations as per HTS-Specs 18th November (dab57f4 and 2f915a8).
  * BCF/VCF:
  - Removed the need for long double in pileup calculations.
  - Sped up the synced reader in some situations.
  - Bug fixing: removed memory leak in bcf_copy.
  * CRAM:
  - Added support for HTS_IDX_START in cram iterators.
  - Easier to build when lzma header files are absent.
  - Bug fixing: a region query with REQUIRED_FIELDS option to
    disable sequence retrieval now gives correct results.
  - Bug fixing: stop queries to regions starting after the last
    read on a chromosome from incorrectly reporting errors
    (#651, #653; reported by Imran Haque and @egafni via pysam).
  * Multi-region iterator: The new structure takes a list of regions and
    iterates over all, deduplicating reads in the process, and producing a
    full list of file offset intervals. This is usually much faster than
    repeatedly using the old single-region iterator on a series of regions.
  * Curl improvements:
  - Add Bearer token support via HTS_AUTH_LOCATION env (#600).
  - Use CURL_CA_BUNDLE environment variable to override the CA (#622;
    thanks to Garret Kelly &amp; David Alexander).
  - Speed up (removal of excessive waiting) for both http(s) and ftp.
  - Avoid repeatedly reconnecting by removal of unnecessary seeks.
  - Bug fixing: double free when libcurl_open fails.
  * BGZF block caching, if enabled, now performs far better (#629; reported
    by Ram Yalamanchili).
  * Added an hFILE layer for in-memory I/O buffers (#590; thanks to Thomas
    Hickman).
  * Tidied up the drand48 support (intended for systems that do not
    provide this function).
  * Fixed bug where iterators on CRAM files did not propagate error return
    values to the caller correctly.  Thanks go to Chris Saunders.
  * Overhauled Windows builds.  Building with msys2/mingw64 now works
    correctly and passes all tests.
  * More improvements to logging output (thanks again to Anders Kaplan).
  * Return codes from sam_read1() when reading cram have been made
    consistent with those returned when reading sam/bam.  Thanks to
    Chris Saunders (#575).
  * BGZF CRC32 checksums are now always verified.
  * It's now possible to set nthreads = 1 for cram files.
  * hfile_libcurl has been modified to make it thread-safe.  It's also
    better at handling web servers that do not honour byte range requests
    when attempting to seek - it now sets errno to ESPIPE and keeps
    the existing connection open so callers can revert to streaming mode
    it they want to.
  * hfile_s3 now recalculates access tokens if they have become stale.  This
    fixes a reported problem where authentication failed after a file
    had been in use for more than 15 minutes.
  * Fixed bug where remote index fetches would fail to notice errors when
    writing files.
  * bam_read1() now checks that the query sequence length derived from the
    CIGAR alignment matches the sequence length in the BAM record.</changelog>
  <changelog author="flyos@mailoo.org" date="1536235200">- Update to 1.9
  * If `./configure` fails, `make` will stop working until either configure
    is re-run successfully, or `make distclean` is used.  This makes
    configuration failures more obvious.  (#711, thanks to John Marshall)
  * The default SAM version has been changed to 1.6.  This is in line with the
    latest version specification and indicates that HTSlib supports the
    CG tag used to store long CIGAR data in BAM format.
  * bgzip integrity check option '--test' (#682, thanks to @sd4B75bJ, @jrayner)
  * Faidx can now index fastq files as well as fasta.  The fastq index adds
    an extra column to the `.fai` index which gives the offset to the quality
    values.  New interfaces have been added to `htslib/faidx.h` to read the
    fastq index and retrieve the quality values.  It is possible to open
    a fastq index as if fasta (only sequences will be returned), but not
    the other way round. (#701)
  * New API interfaces to add or update integer, float and array aux tags. (#694)
  * Add `level=&lt;number&gt;` option to `hts_set_opt()` to allow the compression
    level to be set.  Setting `level=0` enables uncompressed output. (#715)
  * Improved bgzip error reporting.
  * Better error reporting when CRAM reference files can't be opened. (#706)
  * Fixes to make tests work properly on Windows/MinGW - mainly to handle
    line ending differences. (#716)
  * Efficiency improvements:
  - Small speed-up for CRAM indexing.
  - Reduce the number of unnecessary wake-ups in the thread pool. (#703)
  - Avoid some memory copies when writing data, notably for uncompressed
    BGZF output. (#703)
  * Bug fixes:
  - Fix multi-region iterator bugs on CRAM files. (#684)
  - Fixed multi-region iterator bug that caused some reads to be skipped
    incorrectly when reading BAM files. (#687)
  - Fixed synced_bcf_reader() bug when reading contigs multiple times. (#691,
    reported by @freeseek)
  - Fixed bug where bcf_hdr_set_samples() did not update the sample dictionary
    when removing samples. (#692, reported by @freeseek)
  - Fixed bug where the VCF record ref length was calculated incorrectly
    if an INFO END tag was present. (71b00a)
  - Fixed warnings found when compiling with gcc 8.1.0. (#700)
  - sam_hdr_read() and sam_hdr_write() will now return an error code
    if passed a NULL file pointer, instead of crashing.
  - Fixed possible negative array look-up in sam_parse1() that somehow
    escaped previous fuzz testing. (#731, reported by @fCorleone)
  - Fixed bug where cram range queries could incorrectly report an error
    when using multiple threads. (#734, reported by Brent Pedersen)
  - Fixed very rare rANS normalisation bug that could cause an assertion
    failure when writing CRAM files. (#739, reported by @carsonhh)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580904000">- Update to release 1.10.2
  * This is a release fix that corrects minor inconsistencies discovered in
    previous deliverables.
- Update to release 1.10.1
  * The support for 64-bit coordinates in VCF brought problems for files
    not conforming to VCF/BCF specification. While previous versions would
    make out-of-range values silently overflow creating nonsense values
    but parseable file, the version 1.10 would silently create an invalid BCF.
- Update to release 1.10
  + Brief summary
  * Addition of support for references longer than 2Gb (NB: SAM and VCF
    formats only, not their binary counterparts).  This may need changes
    in code using HTSlib.  See README.large_positions.md for more information.
  * Added a SAM header API.
  * Major speed up to SAM reading and writing.  This also now supports
    multi-threading.
  * We can now auto-index on-the-fly while writing a file.  This also
    includes to bgzipped SAM.gz.
  * Overhaul of the S3 interface, which now supports version 4
    signatures.  This also makes writing to S3 work.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1581336000">- Include baselibs.conf as source file.
- Update baselibs.conf.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1613736000">- Update to version 1.11: https://github.com/samtools/htslib/releases/tag/1.11
  * Features and Updates
  - Support added for remote reference files.
  - Added tabix --separate-regions option
  - Added tabix --cache option to set a BGZF block cache size.
  - Improved error checking in tabix and added a --verbosity option
  - A note about the maximum chromosome length usable with TBI
    indexes has been added to the tabix manual page.
  - New method vcf_open_mode() changes the opening mode of a variant
    file based on its file extension.
  - The VCF parser has been made faster and easier to maintain.
  - bcf_record_check() has been made faster
  - The VCF parser now recognises the &lt;NON_REF&gt; symbolic allele produced by GATK.
  - Support has been added for simultaneous reading of unindexed
    VCF/BCF files when using the synced_bcf_reader interface.
  - The VCF and BCF readers will now attempt to fix up invalid INFO/END tags
  - The htsFile interface can now detect the crypt4gh encrypted format
  - hts_srand48() now seeds the same POSIX-standard sequences of pseudo-random
    numbers regardless of platform, including on OpenBSD where plain srand48()
    produces a different cryptographically-strong non-deterministic sequence.
  - Iterators now work with 64 bit positions.
  - Improved the speed of range queries when using BAI indexes by making better
    use of the linear index data included in the file.
  - Alignments which consume no reference bases are now considered to have length 1.
  - A bam_set_seqi() function to modify a single base in the BAM structure has been added.
  - Writing SAM format is around 30% faster.
  - Added sam_format_aux1() which converts a BAM aux tag to a SAM format string.
  - bam_aux_update_str() no longer requires NUL-terminated strings.
  - It is now possible to use external plug-ins in language bindings
    that dynamically load HTSlib.
  - bgzf_close(), and therefore hts_close(), will now return non-zero when
    closing a BGZF handle on which errors have been detected.
  - Added a special case to the kt_fisher_exact() test for when the table
    probability is too small to be represented in a double.
  - Improved error diagnostics in the CRAM decoder (#1042), BGZF (#1049),
    the VCF and BCF readers (#1059), and the SAM parser (#1073).
  - ks_resize() now allocates 1.5 times the requested size when it needs to
    expand a kstring instead of rounding up to the next power of two.
  * Bug fixes
  - Fixed hfile_libcurl breakage when using libcurl 7.69.1 or later.
  - Fixed overflows kroundup32() and kroundup_size_t() which caused them to return
    zero when rounding up values where the most significant bit was set.
  - Fixed missing return parameter value in idx_test_and_fetch().
  - Fixed crashes due to inconsistent selection between BGZF and plain (hFILE)
    interfaces when reading files.
  - Added and/or fixed byte swapping code for big-endian platforms.
  - Fixed a problem with multi-threaded on-the-fly indexes which would occasionally
    write virtual offsets pointing at the end of a BGZF block.
  - In sam_hdr_create(), free newly allocated SN strings when encountering an error.
  - Prevent double free in case of idx_test_and_fetch() failure.
  - In the header, link a new PG line only to valid chains. Prevents an explosive
    growth of PG lines on headers where PG lines are already present but not linked
    together correctly.
  - Also in the header, when calling sam_hdr_update_line(), update target arrays
    only when the name or length is changed.
  - Fixed buffer overflows in CRAM MD5 calculation triggered by files with invalid
    compression headers, or files with embedded references that were one byte too short.
  - Fix mpileup regression between 1.9 and 1.10 where overlap detection was incorrectly
    skipped on reads where RNEXT, PNEXT and TLEN were set to the "unavailable" values
    ("*", 0, 0 in SAM).
  - kputs() now checks for null pointer in source string.
  - Fix potential bcf_update_alleles() crash on 0 alleles.
  - Added bcf_unpack() calls to some bcf_update functions to fix a bug where updates
    made after a call to bcf_dup() could be lost.
  - Error message typo "Number=R" instead of "Number=G" fixed in bcf_remove_allele_set().
  - Fixed crashes that could occur in BCF files that use IDX= header annotations to
    create a sparse set of CHROM, FILTER or FORMAT indexes, and include records that
    use one of the missing index values.
  - Fixed potential integer overflows in the VCF parser and ensured that the total
    length of FORMAT fields cannot go over 2Gbytes.
  - Download index files atomically in idx_test_and_fetch(). This prevents corruption
    when running parallel jobs on S3 files.
  - The pileup constructor callback is now given the copy of the bam1_t struct made
    by pileup instead of the original one passed to bam_plp_push().
  - Fixed possible error in code_sort() on negative CRAM Huffman code length.
  - Fixed possible undefined shift in cram_byte_array_stop_decode_init().
  - Fixed a bug where range queries to the end of a given reference would return
    incorrect results on CRAM files.
  - Fixed an integer overflow in cram_read_slice().
  - Fixed a memory leak on failure in cram_decode_slice().
  - Fixed a regression which caused cram_transcode_rg() to fail, resulting in a
    crash in "samtools cat" on CRAM files.
  - Fixed an undersized string reallocation in the threaded SAM reader which caused
    it to crash when reading SAM files with very long lines. Numerous memory allocation
    checks have also been added.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619611200">- Update to version 1.12:
  * Added experimental CRAM 3.1 and 4.0 support.
  * Added a general filtering syntax for alignment records in
    SAM/BAM/CRAM readers.
  * The knet networking code has been removed if favor of libcurl
  * The old htslib/knetfile.h interfaces have been marked as deprecated.
  * Added an introspection API for checking some of the capabilities
    provided by HTSlib
  * Made performance improvements to probaln_glocal method, which
    speeds up mpileup BAQ calculations.
  * Added a public method for constructing a BAM record from the
    component pieces.
  * Added two public methods, sam_parse_cigar and bam_parse_cigar,
    as part of a small CIGAR API
  * HTSlib, and the included htsfile program, will now recognise
    the old RAZF compressed file format. Note that while the format
    is detected, HTSlib is unable to read it.
  * The S3 plugin now has options to force the address style.
    It will recognise the addressing_style and host_bucket entries
    in the respective AWS .credentials and s3cmd .s3cfg files.
  * Fixed VCF #CHROM header parsing to only separate columns at tab
    characters.
  * Fixed a crash reported in bcf_sr_sort_set, which expects REF
    to be present.
  * Fixed a bcf synced reader bug when filtering with a region list,
    and the first record for a chromosome had the same position as
    the last record for the previous chromosome.
  * Fixed a bug in the overlapping logic of mpileup, dealing with
    iterating over CIGAR segments.
  * Fixed a tabix bug that prevented setting the correct number of
    lines to be skipped in a region file.
  * Made bam_itr_next an alias for sam_itr_next, to prevent it from
    crashing when working with htsFile pointers.
  * Fixed once per outgoing multi-threaded block bgzf_idx_flush
    assertion, to accommodate situations when a single record could
    span multiple blocks.
  * Fixed assumption of pthread_t being a non-structure, as
    permitted by POSIX.
  * Fixed the minimum offset of a BAI index bin, to account for
    unmapped reads.
  * Fixed the CRLF handling in sam_parse_worker method.
  * Included unistd.h and errno.h directly in HTSlib files, as
    opposed to including them indirectly, via third party code.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1650456000">- Use system provided libhtscodecs
- Update to version 1.15.1
  * Security fix: Fixed broken error reporting in the sam_cap_mapq()
    function, due to a missing hts_log() parameter.
    Prior to this fix it was possible to abuse the log message format
    string by passing a specially crafted alignment record to
    this function.
  * Fixed excessive memory used by multi-threaded SAM output on long
    reads.
  * Fixed a bug where tabix would misinterpret region specifiers
    starting at position 0.
  * The VCF header parser will now issue a warning if it finds an
    INFO header with Type=Flag but Number not equal to 0.
- Update to version 1.15
  * Bgzip now has a --keep option to not remove the input file
    after compressing.
  * Improved file format detection so some BED files are no longer
    detected as FASTQ or FASTA.
  * Added xz (lzma), zstd and D4 formats to the file type detection
    functions. We don't actively support reading these data types,
    but function calls and htsfile can detect them.
  * CRAM now also uses libdeflate for read-names if the libdeflate
    version is new enough (1.9 onwards). Previously we used zlib for
    this due to poor performance of libdeflate.
  * The VCF and BCF readers will now issue a warning if contig,
    INFO or FORMAT IDs do not match the formats described in the
    VCFv4.3 specification.
  * Bug fixes
- Update to version 1.14
  * Added a keep option to bgzip to leave the original file untouched.
  * endpos has been added to the filter language, giving the position
    of the rightmost mapped base as measured by the CIGAR string.
  * Interfaces have been added to interpret the new base modification
    tags added to the SAMtags document in samtools/hts-specs#418.
  * New API functions hts_flush()/sam_flush()/bcf_flush() for
    flushing output htsFile/samFile/vcfFile streams.
  * The synced_bcf_reader now sorts lines with symbolic alleles by
    END tag as well as POS.
  * Added synced_bcf_reader options BCF_SR_REGIONS_OVERLAP and
    BCF_SR_TARGETS_OVERLAP for better control of records that start
    outside the desired region but overlap it are handled.
  * HTSlib will now accept long-cigar CG:B: tags made by htsjdk which
    don't quite follow the specification properly
  * The FASTA and FASTQ readers get an option to skip over the first
    item on the header line, and use the second as the read name.
  * HTSlib is now more strict when parsing the VCF samples line
  * HTSlib will now warn if it looks like the header has been
    corrupted by diagnostic messages from the program that made it.
  * File format detection will now recognise signatures for
    XZ, Zstd and D4 files (note that HTSlib will not read them yet).
  * Bug fixes
- Update to version 1.13
  * In case a PG header line has multiple ID tags supplied by other
    applications, the header API now selects the first one encountered
    as the identifying tag and issues a warning when detecting
    subsequent ID tags.
  * VCF header reading function (vcf_hdr_read) no longer tries to
    download a remote index file by default.
  * Support reading and writing FASTQ format in the same way as SAM,
    BAM or CRAM. Records read from a FASTQ file will be treated as
    unmapped data.
  * Added GCP requester pays bucket access.
  * Made mpileup's overlap removal choose which copy to remove at
    random instead of always removing the second one.
  * It is now possible to use platform specific BAQ parameters.
  * A new hts_bin_level API function has been added, to compute the
    level of a given bin in the binning index.
  * Related to the above, a new API method, hts_idx_nseq,
    now returns the total number of contigs from an index.
  * Added bracket handling to bcf_hdr_parse_line,
    for use with ##META lines.
  * Bug fixes</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1662638400">- Update to version 1.16
  * Make hfile_s3 refresh AWS credentials on expiry in order to make
    HTSlib work better with AWS IAM credentials, which have a
    limited lifespan.
  * Allow BAM headers between 2GB and 4GB in size once more.
  * Improve error message when failing to load an index.
  * Permit MM (base modification) tags containing . and ? suffixes.
  * Warn if spaces instead of tabs are detected in a VCF file to
    prevent confusion.
  * Add an sclen filter expression keyword.
  * Improve error messages for CRAM reference mismatches.
  * Expose more of the CRAM API and add new functionality to extract
    the reference from a CRAM file.
  * Improvements to the implementation of embedded references in CRAM
    where no external reference is specified.
  * The CRAM writer now allows alignment records with RG:Z: aux tags
    that don't have a corresponding @RG ID in the file header.
  * Set tab delimiter in man page for tabix GFF3 sort.
  * When using libdeflate, the 1...9 scale of BGZF compression levels
    is now remapped to the 1...12 range used by libdeflate instead of
    being passed directly.
  * The VCF variant API has been extended so that it can return separate
    flags for INS and DEL variants as well as the existing INDEL one.
  * The missing, but trivial, le_to_u8() function has been added
    to hts_endian.
  * bcf_format_gt() now works properly on big-endian platforms.
  * Update htscodecs to version 1.3.0 for new SIMD code + various fixes.
  * Detect ARM Neon support and only build appropriate SIMD object files.
  * make print-config now reports extra CFLAGS that are needed to build
    the SIMD parts of htscodecs.
  * Fixed some Makefile dependency issues for the check/test targets
    and plugins.
  * Fix bug when reading position -1 in BCF (0 in VCF), which is used
    to indicate telomeric regions.
  * Various bugs and quirks have been fixed in the filter expression
    engine, mostly related to the handling of absent tags, and
    the is_true flag.
  * Fix buffer overrun in bam_plp_insertion_mod.
  * Remove limit of returned size from fai_retrieve().
  * Cap hts_getline() return value at INT_MAX.
  * Fix breakend detection and test bcf_set_variant_type().
  * Prevent arrays of BCF_BT_NULL values found in BCF files from
    causing bcf_fmt_array() to call exit() as the type is unsupported.
  * Improved detection of fasta and fastq files that have very long
    comments following identifiers.
  * Fixed a SEGV triggered by giving a SAM file to samtools import.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704283200">- Update to version 1.19
  Too many changes to list, for details see
  https://github.com/samtools/htslib/releases/tag/1.19
- Update to version 1.18
  Too many changes to list, for details see
  https://github.com/samtools/htslib/releases/tag/1.18
- Update to version 1.17
  Too many changes to list, for details see
  https://github.com/samtools/htslib/releases/tag/1.17</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1721044800">- Update to version 1.20
  * When working on named files, bgzip now sets the modified and
    access times of the output files it makes to match those of
    the corresponding input
  * It's now possible to use a -o option to specify the output
    file name in bgzip
  * Improved error faidx error messages
  * Faster reading of SAM array (type "B") tags. These often turn
    up in ONT and PacBio data
  * Improved validity checking of base modification tags
  * mpileup overlap removal now works where one read has a
    deletion
  * The S3 plugin can now find buckets via S3 access point aliases
  * Added a --threads option (and -@ short option) to tabix
  * tabix can now index Graph Alignment Format (GAF) files
  * Security fix: Prevent possible heap overflow in
    cram_encode_aux() on bad RG:Z tags
  * Security fix: Prevent attempts to call a NULL pointer if
    certain URL schemes are used in CRAM @SQ UR: tags
  * Security fix: Fixed a bug where following certain AWS S3
    redirects could downgrade the connection from TLS
    (i.e. https://) to unencrypted http://. This could happen when
    using path-based URLs and AWS_DEFAULT_REGION was set to a
    region other that the one where the data was stored
  * Fixed arithmetic overflow when loading very long references
    for CRAM
  * Fixed faidx and CRAM reference look-ups on compressed fasta
    where the .fai index file was present, but the .gzi index of
    compressed offsets was not
  * Fixed BCF indexing on-the-fly bug which produced invalid
    indexes when using multiple compression threads
  * Ensure that pileup destructors are called by
    bam_plp_destroy(), to prevent memory leaks
  * Ensure on-the-fly index timestamps are always older than the
    data file. Previously the files could be closed out of order,
    leading to warnings being printed when using the index
  * To prevent data corruption when reading (strictly invalid)
    VCF files with duplicated FORMAT tags, all but the first copy
    of the data associated with the tag are now dropped with a
    warning
  * Fixed a bug introduced in release 1.19 (PR #1689) which broke
    variant record data if it tried to remove an over-long tag
  * Changed error to warning when complaining about use of the CG
    tag in SAM or CRAM files</changelog>
</package>
<package pkgid="a396991479ad7e21b0bcc9ce70d5a2e15128ff82cd9be32871186eaa1bd75e5ddd4cf047740beecd32c7be8e8a1526aa7052edd38bb8c59096736167801830ee" name="bibtool" arch="x86_64">
  <version epoch="0" ver="2.68" rel="bp160.1.8"/>
  <changelog author="gber@opensuse.org" date="1409054400">- update to version 2.57
  - Segfault in deTeX fixed.
  - Compiler warnings silenced.
  - Disambiguating numbers adapted to fit to documentation.
  - Configuration of regex fixed to work on Linux.
  - Documentation typos fixed.
  - Signed characters fro translation tables changed to unsigned.
  - Autoconf configuration improved.
- fix URL
- remove support for &lt; 12.3</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Update to 2.60
  * The field name and other symbols may start with any allowed
    character.
  * Non-alpha characters at the beginning are treated as warining
    only.
- Use url for source
- Add gpg signature
- Small cleanups with spec-cleaner</changelog>
  <changelog author="cfarrell@suse.com" date="1436961600">- license update: GPL-1.0+ and CC-BY-SA-3.0
  Various .sty files are CC-BY-SA-3.0 licensed</changelog>
  <changelog author="mpluskal@suse.com" date="1448539200">- Update to 2.61
  * New resource rename.field introduced to conditionally rename a
    field.
  * Duplicate file doc/bibtool.tex in the distribution tar ball
    eliminated.</changelog>
  <changelog author="mpluskal@suse.com" date="1454846400">- Update to 2.36
  * Combined rewrite and delete bug fixed.
  * Minor improvements for the distribution.
  * README renamed to README.md to comply with the conventions of
    the GitHub repository.</changelog>
  <changelog author="mpluskal@suse.com" date="1471262400">- Drop -doc subpackage as building it is getting more and more
  difficult</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1706529600">- Update to version 2.68
  * Handling of extracting by aux file improved.
  * Record extended by attribute lineno.This attribute carries
    the line number of the initiating @.
  * The format of the error messages has been slightly
    streamlined. Double spaces are avoided; two colons in one
    message are avoided.
  * The format of the messages of check_rule include file and
    line number.
  * Warning for double fields added.
  * The empty output file is used to signal that the output
    should be suppressed.
  * The resources check.warning.rule and check.error.rule have
    been introduced to allow semantic checks to be classified
    as warning or error.
  * The behaviour of the resource check.double has been
    generalized. The requirement that double entries to be
    adjacent has been dropped. This has the impact that the
    processing is slightly slower.
  * New resource file unique.field introduced. With this
    resource it is possible to specify additional unique
    constraints for fields. If different records have the same
    value for one of those fields then a warning is issued.
  * Static library renamed from libbib.a to libbibtool.a.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN (all patches
  disabled, scripted change).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
</package>
<package pkgid="40d3a4d36dc49c13094a49feb1d733c55cb31bb1d1160b79dafefe6181793263f393a3295c77d8d30b3460dbe0737f62128b12774a7e60446230f01298239e6f" name="bibview" arch="x86_64">
  <version epoch="0" ver="2.2" rel="bp160.1.12"/>
  <changelog author="werner@suse.de" date="1154520000">- Make it build with X11R7
- Make german app-defaults file depending on LANG variable
- Use Xaw3d to get see 3d menue</changelog>
  <changelog author="werner@suse.de" date="1164888000">- Remove broken error handler declaration type</changelog>
  <changelog author="dmueller@suse.de" date="1180699200">- fix buildrequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- buildrequire xorg-x11 for directory ownership</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Remove xorg-x11-devel from BuildRequires</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550577600">- Correct documentation as there is no X11R6 anymore for a long time</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723809600">- Add bibview-C99.dif adding missing includes so that all called
  functions are properly declared and the package builds with
  GCC 14.</changelog>
</package>
<package pkgid="aed1ae0c363821f655b90bbeb52d98efd9a905bb69b44328fecf5d89f13035d8744c1c9bbf22f8fd5b986e3d4f5db5bf95323ad248df564918c35c74a9c5e489" name="bijiben" arch="x86_64">
  <version epoch="0" ver="40.1" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600776000">- Update to version 3.38.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616068800">- Update to version 40.0:
  + Added bidirectional text support to notes view.
  + Dropped Zeitgeist support.
  + Enabled formatting without dependency on selected text.
  + Improved Help.
  + Improved Nextcloud support by using Nextcloud Notes API.
  + Fixed many bugs and improved application code overall.
  + Updated translations.
- Clean up zeitgeist remainders in the spec file: it has been
  disabled for a while already.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libcurl)
  BuildRequires: new dependencies.
- Replace pkgconfig(libhandy-0.0) BuildRequires with
  pkgconfig(libhandy-1): follow upstreams port to libhandy-1.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1619784000">- Update to version 40.1:
  + Fixed e-mail sharing feature.
  + Fixed issue preventing compiling single source files.
  + Fixed 40's release date in appdata.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1621252800">- No longer own /usr/share/help/C: this is owned by the file system
  package.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636027200">- Stop passing option static=false to meson, no longer used nor
  needed.
- Replace option update-mimed=false with update_mimedb=false
  following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643803200">- Add 158.patch: Fix build with meson 0.61.0 and newer.
- Update our Supplements to current standard.
- Drop update-desktop-files BuildRequires and macro, no longer
  needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650024000">- Call find_lang before fdupes: find_lang potentially deletes some
  files which might, in worst case, be link targets identified by
  fdupes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661860800">- Add bijiben-switch-to-soup3.patch: Backport upstream switch to
  soup3. Following this, replace pkgconfig(webkit2gtk-4.0) with
  pkgconfig(webkit2gtk-4.1) BuildRequires.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1716811200">- The packages gnome-shell-search-provider-bijiben triggers
  repetitive crash (bsc#1210322, bsc#1221387). From Alynx's analysis
  from openSUSE side, this can be a complex glib/gdbus issue which
  can not be fixed quickly. Temporarily not to pull the package now
  will keep the main application more useful before a fix.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
</package>
<package pkgid="f556d6190475fa59aa1364e7f276c741ffa7184ddeda6bc2cc857973bb8e0efbd7a13d792534464f6ae9d518e792fa2e9c0343b0836b4b8acf3aef7126da5a88" name="bijiben-lang" arch="noarch">
  <version epoch="0" ver="40.1" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1600776000">- Update to version 3.38.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616068800">- Update to version 40.0:
  + Added bidirectional text support to notes view.
  + Dropped Zeitgeist support.
  + Enabled formatting without dependency on selected text.
  + Improved Help.
  + Improved Nextcloud support by using Nextcloud Notes API.
  + Fixed many bugs and improved application code overall.
  + Updated translations.
- Clean up zeitgeist remainders in the spec file: it has been
  disabled for a while already.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libcurl)
  BuildRequires: new dependencies.
- Replace pkgconfig(libhandy-0.0) BuildRequires with
  pkgconfig(libhandy-1): follow upstreams port to libhandy-1.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1619784000">- Update to version 40.1:
  + Fixed e-mail sharing feature.
  + Fixed issue preventing compiling single source files.
  + Fixed 40's release date in appdata.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1621252800">- No longer own /usr/share/help/C: this is owned by the file system
  package.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1636027200">- Stop passing option static=false to meson, no longer used nor
  needed.
- Replace option update-mimed=false with update_mimedb=false
  following upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643803200">- Add 158.patch: Fix build with meson 0.61.0 and newer.
- Update our Supplements to current standard.
- Drop update-desktop-files BuildRequires and macro, no longer
  needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650024000">- Call find_lang before fdupes: find_lang potentially deletes some
  files which might, in worst case, be link targets identified by
  fdupes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661860800">- Add bijiben-switch-to-soup3.patch: Backport upstream switch to
  soup3. Following this, replace pkgconfig(webkit2gtk-4.0) with
  pkgconfig(webkit2gtk-4.1) BuildRequires.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1716811200">- The packages gnome-shell-search-provider-bijiben triggers
  repetitive crash (bsc#1210322, bsc#1221387). From Alynx's analysis
  from openSUSE side, this can be a complex glib/gdbus issue which
  can not be fixed quickly. Temporarily not to pull the package now
  will keep the main application more useful before a fix.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
</package>
<package pkgid="eaf17f0dfe7ca0dddd4aad48d35351fe0dfcebe5a10148eb84942af9b44aa8b6bdaec9d3f23a3204cbe30264c046eeb9689446363d3da72c7814b5bec60c6576" name="bind" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="527eaf951558a842297eb924314bcb5b7b643f8e040d30dab1c7c8917b27c317e9171ddd7c777c6a5ec4855db92db38bfebb245753d544dee62d235265155c94" name="bind" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="ee02c137dac7469007e5e092c15d66f658c8534d62da332dd067473f6aa623c81cfa8b3744dfb017765e4d512de249074b7f2d0e857cdccea64956434726e569" name="bind" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="febad36b9c85fb0687c3e6232237a0b5876eeb40b890163abc29b666bdbc9da6828fbc85005a78bb00d65e6ef0806e19a880acc40b1496368c08b31b7c5622a9" name="bind" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="adf80321917235e34ce6dceb5ee16be6e1929d59cd94f7f340da101c3b814fd54d14ddc05760606c11683c325536eecf73f6df0f9e4e444dd45209dffbba0086" name="bind" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="0ff5ff415a485ec2cda151662b220a432175e1d98c1d4934478090b7a4057d7cde22071c1bed2855964384e3fce7c7a7ad4c347f5ce094b9151fc64673370f7a" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="2a34c905038adb5a3cd9dbd4c5723ca1a1f5e6c633868322d023fd60b2453105379689435c5266c890c559b8033d23e42e36a7dba6ad58195c17dd28e17d2a98" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="86514e0a0709ff9562703832f7f028fa96c02636a63b781f377daa5978772d0cdf244518171791f6931161e58e2ffad378398ab691730adce475890bcfec3986" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="c5b0ec7c6f1a598d70628ca431af26227567cea6afae6c1047ed963e5e74222c1002209e1b8f870b4923e183001c5a71003651293955bd572e6d5408ef09d9e4" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="10b410f579911b9326aedd7e069f082a3d5e9d0ee18b5a397f3dc906e30aefdfa13baef4160e069a8880c3578f682040a34f8cc3134bf99b2cf55c32a5541bd2" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="20425b05af023a14d4e66cba60f336ea66cf5e847177855c7743c83aff7e6c657eb3021fa8316f4246b4be8d690f1aeeceae1c72ebeeb3b97783182de07c8e95" name="bind-modules-bdbhpt" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="04863a1182b411e863c1f8fb02a04c69c56ce231cd20f0de572a0787056126630fd8fd35515e320c2c1c163ff5451bba15c6ac50e0acf2fbf438ed8cc4704673" name="bind-modules-bdbhpt" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="d21ee9a862394f4de483fe575776f8fa692e06a1e2dd123d6a734108db112e4658980fbf620134f8c79a4f2ec15b261a9b14a90897bd2edf8df8731588efd2c2" name="bind-modules-bdbhpt" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="d67fc95e52db21df5c3b8ca553ce4e35b588d61b7297ade7447056db6840276d1d3e21915dd4720c87d40c7292a65038ef546c3e440dca05320ec91f675ad73e" name="bind-modules-bdbhpt" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="2b01071c42c3ea2754fc554a0763f4045b3c2f48a9869cc4251f41b0c59f2607c8b2536308fd0d9cc5ad8ea6fa468b04ed63bf7b06705426c65b4046d70e0ff5" name="bind-modules-bdbhpt" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="b56ec96475fdb87888e3c7dd37c8a7283d66b9b7825ac85d33f7dfd14eb28f74f45e00954b081773d33935d5cd0c59a4986284db2536caf2bc83e5d64fe36418" name="bind-modules-generic" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="70f32195c635bc6b04f41eaf1e17c7481c3d56ee55b61015184753e98913544dee68c06026d88648465105c41e21372403b0f0326ab2383acad6165e8baeab93" name="bind-modules-generic" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="e6abc44f9d7428d7501401137c77b63c09db3ee877b64788d56354ff2d9a5660cb1d80b01ab95a6f662f5e0ab6bc9eb3a2f71602ee2f18d625ec479b05f98232" name="bind-modules-generic" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="20199eb2d6fb10b107114d206975f1ae402dec225c518ed97657174cc45adff93c5927a1a08bc8e656498f39850c710639b2371a6b01b375eec79b09d5e769f8" name="bind-modules-generic" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="1e9543928bb7bb382b81a16649cff952319577bd1463f804e6902ae4649c870b0790e4be4ec03d7040ace6d27406c7e5f9b17aaf98d7a55accebd52390b733e6" name="bind-modules-generic" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="9573b0f0857d7e678b6d3d5d442d84f4dd2d3833bfdc553bf7e54d56f62136c198616725bb192f122b47daec205bff69a3e77aa8e97a3dead54f29cb44ab7c26" name="bind-modules-ldap" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="e7214ad056d736886ff5d5f485e167fb11902b173edd00495d03f0aa28ee8f4892e6b567259a455ffd81f60a6714a57d60c6363698a9581862880f5597870590" name="bind-modules-ldap" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="9b5a131fd96a9c7999211908d529c2fc488c401e7b2358f400be6ac961630be93502bc80f9941a72cf1b779434662ac3de2f6036ed138cb824a76a68deb6cd07" name="bind-modules-ldap" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="cb5f4260a6e287381ce82cca14591094e84b0df8199c839124014175fa63111e6d5d9e9ff7beab92d59d38b2353725a0325997a2a670a5703c74155bf9324baf" name="bind-modules-ldap" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="a22ae34b8c7b32dabd99a98a84c3531432bf54a443d6212649b460551c108f2337c97be877432276f35d87a1514397108f218539cdfb941017c50ac2f211559a" name="bind-modules-ldap" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="a7717995f593580e1baa626402be593d7921c8ba8109e3fdd07177916d36031916df770ec8850b49123c72d91173f46e39f7fb09073a17b252b9f73ae87d94b4" name="bind-modules-mysql" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="159d51ca868d6d89bb4f68cb9cf0f21b3e9e13a7a28e9a3acc5a29d671cd439aa424e8593153ddf923cda7d199b4edf6d7c2bc04529f6d4809697a7cd4430293" name="bind-modules-mysql" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="9319cadcb33c9e6767e1169753d883efb7da8a87b69112a2740ce8075f45dab1ffe4950e075f72f0646d2e6fe81f45df1577ce8e3140b4049e90f1a8f1182aab" name="bind-modules-mysql" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="bc683aa77eb9742ef432b47405d758fe8d1d441440d1491839baee3cd286082c39185fc02d5357e3ed15dec2a6841a7d0533dc9bec74614edbe4005b9cee2480" name="bind-modules-mysql" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="ff9e50d906ac15b09ef75049c8e676f439b338aad381f53c8acc4b80affb5841b5bf7eb3e39bb635e5bda89240d22c32f6cd46adae57cb8b17cb28b3be91a46b" name="bind-modules-mysql" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="1d44ede72db888b005251b598d5fd46969104accdea7b8afa108684348a63660ec6dbf0abee17e9fe93e329f1dee8b25a9fe79a925843bd969848620945549cf" name="bind-modules-perl" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="9d3ebc4853e25b79339c333c63e577015b65e6953fe195be9305e4badf95428cad89701559ee87052b5598dba620a982cc6f2ce64d14038e550ad0b0a1a3be02" name="bind-modules-perl" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="4b83776d265d16b1f7ee9c5c36cd681ceacd87079c81b3562d80f5004375baedae140be963c5cf8678e6a65e9047bab1e85983e8321ee66e557162ca750e741a" name="bind-modules-perl" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="3341afbc3c2b8912e1f66c3b7f0e1cfbfee036e6d8bd350fe11dd36a9937bb62e46e24c045033f9cfcbd7ec3a2a0376497e6055f441a23095dd404fd4b524273" name="bind-modules-perl" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="57218670031a0e0652319cdb054fbe98e36e6d980b954e720ee1728a2afb5df44d16d217a0147a547171bd24376b76d292b4230ba09cfa521afa7428daf12845" name="bind-modules-perl" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="9ce076c134348d5f8b20941ad5a111352420afc30fe071addc284466d8e6ba46664b9ec82acfd34958cb246eedd1cbb5d54816ebd333816ec2ffb64d4b63fff7" name="bind-modules-sqlite3" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="8df827ab368bb95974dd42289ac77c546175d415d5546fb9dfc2ac6ae2b39a12e74cd624a7c8070b1e860addc2f02d85700b244d69210714b8c7ad62cbf84ed3" name="bind-modules-sqlite3" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="3056cc32b23f6d67859c2cc11cdeea0f78ce82cf2aa45494968ec7250fb412d09d9900b6179b04f558c4da5e9ab0b73513eaa894d6eaf49337c72a9e54caedfb" name="bind-modules-sqlite3" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="e2bb3e4b89c62deaa319d88199e50ce3720bb42d305eca5c1525f320e85f75f2db28eab18bd496a8d3331aaf8c750e2339ee88d7df309dc5c214e1e798997585" name="bind-modules-sqlite3" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="51af49e03b34773dca01db2629c829206d67de6d6c3e8d3a68641958ff90ca673291bfd0f8f1b7f666b729179c98808a100b559935aa766c660756a7a4b6fe52" name="bind-modules-sqlite3" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="bc1b5ff12ff136b3f56930a82feb032feb7243817d270686fe35256b30f4ac5bd51f61eb3a5461b106f3f88e21017bc347d7e990056a772e5bf04a804167a4bb" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1729512000">- Update to release 9.20.3
  New Features:
  * Log query response status to the query log.
  * Log a query response summary using the new responses category.
    Logging can be controlled via the responselog option and via
    rndc responselog.
  * Added WALLET type.
  * Add the new record type WALLET (262). This provides a mapping
    from a domain name to a cryptographic currency wallet. Multiple
    mappings can exist if multiple records exist.
  Feature Changes:
  * Set logging category for notify/xfer-in-related messages.
  * Some notify and xfer-in-related log messages were logged at the
    “general” category level instead of their own category. This
    has been fixed.
  * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS.
  * This change allows fallback from an IXFR failure to AXFR when
    the reason is DNS_R_TOOMANYRECORDS.
  Bug Fixes:
  * Fix a statistics channel counter bug when “forward only” zones
    are used.
  * When resolving a zone with a “forward only” policy, and finding
    out that all the forwarders were marked as “bad”, the
    “ServerQuota” counter of the statistics channel was incorrectly
    increased. This has been fixed.
  * Fix a bug in the static-stub implementation.
  * Static-stub addresses and addresses from other sources were
    being mixed together, resulting in static-stub queries going to
    addresses not specified in the configuration, or alternatively,
    static-stub addresses being used instead of the correct server
    addresses.
  * Don’t allow statistics-channels if libxml2 and libjson-c are
    not configured.
  * When BIND 9 is not configured with the libxml2 and libjson-c
    libraries, the use of the statistics-channels option is a fatal
    error.
  * Separate DNSSEC validation from long-running tasks.
  * Split CPU-intensive and long-running tasks into separate
    threadpools in a way that the long-running tasks - like RPZ,
    catalog zone processing, or zone file operations - don’t block
    CPU-intensive operations like DNSSEC validations.
  * Fix an assertion failure when processing access control lists.
  * The named process could terminate unexpectedly when processing
    ACLs. This has been fixed.
  * Fix a bug in Offline KSK using a ZSK with an unlimited
    lifetime.
  * If the ZSK had an unlimited lifetime, the timing metadata
    Inactive and Delete could not be found and were treated as an
    error, preventing the zone from being signed. This has been
    fixed.
  * Limit the outgoing UDP send queue size.
  * If the operating system UDP queue got full and the outgoing UDP
    sending started to be delayed, BIND 9 could exhibit memory
    spikes as it tried to enqueue all the outgoing UDP messages. It
    now tries to deliver the outgoing UDP messages synchronously;
    if that fails, it drops the outgoing DNS message that would get
    queued up and then timeout on the client side.
  * Do not set SO_INCOMING_CPU.
  * Remove the SO_INCOMING_CPU setting as kernel scheduling
    performs better without constraints.
  * Fix the rndc dumpdb command’s error reporting.
  * The rndc dumpdb command was not reporting errors that occurred
    when named started up the database dump process. This has been
    fixed.
  * Fix long-running incoming transfers.
  * Incoming transfers that took longer than 30 seconds would stop
    reading from the TCP stream and the incoming transfer would be
    indefinitely stuck, causing BIND 9 to hang during shutdown.
  * This has been fixed, and the max-transfer-time-in and
    max-transfer-idle-in timeouts are now honored.
  * Fix an assertion failure when receiving DNS responses over TCP.
  * When matching the received Query ID in the TCP connection, an
    invalid Query ID could cause an assertion failure. This has
    been fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
</package>
<package pkgid="66f3aeb47a554c2c61b7a8d504e0590b4139815ff89ce8d22d389d61b5ab233f7820900f5c3e7dd370ff1333fad4da304bda2685b71a438c0f1d2d1947d8ed14" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="160000.1.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734004800">- update root hints file to 2024-11-20 version (boo#1234406)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1734004801">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
</package>
<package pkgid="71fb9a7f130aaa80efa105bfa936a2f0017f3e6729f833fe6a1169a5cc0bb2cf604d0b197f735ca2c96d5ffccff7b273703e2c15d38d19c647b847f7d821fca9" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1734004800">- Add new dlz-modules source
- Update to release 9.20.4
  New Features:
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Removed Features:
  * Move contributed DLZ modules into a separate repository. DLZ
    modules should not be used except in testing.
  * The DLZ modules were not maintained, the DLZ interface itself
    is going to be scheduled for removal, and the DLZ interface is
    blocking. Any module that blocks the query to the database
    blocks the whole server.
  * The DLZ modules now live in
    https://gitlab.isc.org/isc-projects/dlz-modules repository.
  Feature Changes:
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  Bug Fixes:
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="c1297cb8a7625f691f3680f8786caaa7b8863f3e647f7ffc53faacdbc355f59ce1adf9fd59d9dc13390909313ee713ef4cf4e26947734526d31e5a897ed62ddb" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="160000.1.1"/>
  <changelog author="steven.kowalik@suse.com" date="1737460800">- Explicitly BuildRequire sphinx_rtd_theme.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
</package>
<package pkgid="27d71d669b821a72fac1951a405eda42aac38e312da63632fc81d81f698dccf95825d1ca8e472bda1eb1f908f962d1ab876bb1774529eaaf55082ef5f8000194" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.23" rel="160000.1.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Upgrade to release 9.20.5
  Security Fixes:
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  New Features:
  * Add Extended DNS Error Code 22 - No Reachable Authority.
    When the resolver is trying to query an authoritative server
    and eventually times out, a SERVFAIL answer is given to the
    client. Add the Extended DNS Error Code 22 - No Reachable
    Authority to the response.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
    The configuration option max-query-count sets how many outgoing
    queries per client request are allowed. The existing
    max-recursion-queries value is the number of permissible
    queries for a single name and is reset on every CNAME
    redirection. This new option is a global limit on the client
    request. The default is 200.
    The default for max-recursion-queries is changed from 32 to 50.
    This allows named to send a few more queries while looking up a
    single name.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
    This improves compatibility with other DNS server software.
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
    The top blocks primaries and parental-agents are no longer
    preferred and should be renamed to remote-servers. The zone
    statements parental-agents and primaries are still used, and
    may refer to any remote-servers top block.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  Bug Fixes:
  * Fix nsupdate hang when processing a large update.
    To mitigate DNS flood attacks over a single TCP connection,
    throttle the connection when the other side does not read the
    data. Throttling should only occur on server-side sockets, but
    erroneously also happened for nsupdate, which acts as a client.
    When nsupdate started throttling the connection, it never
    attempted to read again. This has been fixed.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
    When the attach-cache option is used in the options block with
    an arbitrary name, it causes all views to use the same cache.
    Previously, this configuration caused the cache to be deleted
    and a new cache to be created every time the server was
    reconfigured. This has been fixed.
  * Resolve the spurious drops in performance due to glue cache.
    For performance reasons, the returned glue records are cached
    on the first use. The current implementation could randomly
    cause a performance drop and increased memory use. This has
    been fixed.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
    dnssec-signzone was using revoked keys for signing RRsets other
    than DNSKEY. This has been corrected.
  * Fix improper handling of unknown directives in resolv.conf.
    The line after an unknown directive in resolv.conf could
    accidentally be skipped, potentially affecting dig, host,
    nslookup, nsupdate, or delv. This has been fixed.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
    Response policy zones (RPZ) and catalog zones were not working
    correctly if they had an $INCLUDE statement defined. This has
    been fixed
- Remove desktop file and BuildRequires: update-desktop-files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742817600">- Upgrade to release 9.20.7
  New Features:
  * Implement the min-transfer-rate-in configuration option.
    A new option min-transfer-rate-in has been added to the view
    and zone configurations. It can abort incoming zone transfers
    that run very slowly due to network-related issues, for
    example. The default value is 10240 bytes in five minutes. [GL
    [#3914]]
  * Add HTTPS record query to host command line tool.
    The host command was extended to also query for the HTTPS RR
    type by default.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
    Previously, a hard-coded limitation of a maximum of two key or
    message verification checks was introduced when checking a
    message’s SIG(0) signature, to protect against possible DoS
    attacks. Two as a maximum was chosen so that more than a single
    key should only be required during key rotations, and in that
    case two keys are enough. It later became apparent that there
    are other use cases where even more keys are required; see the
    related GitLab issue for examples.
    This change introduces two new configuration options for the
    views: sig0key-checks-limit and sig0message-checks-limit. They
    define how many keys can be checked to find a matching key, and
    how many message verifications are allowed to take place once a
    matching key has been found. The former provides slightly less
    “expensive” key parsing operations and defaults to 16. The
    latter protects against expensive cryptographic operations when
    there are keys with colliding tags and algorithm numbers; the
    default is 2. [GL #5050]
  * Adds support for EDE code 1 and 2.
    Support was added for EDE codes 1 and 2, which might occur
    during DNSSEC validation in the case of an unsupported RRSIG
    algorithm or DNSKEY digest. [GL #2715]
  * Add an rndc command to toggle jemalloc profiling.
    The new command is rndc memprof; the memory profiling status is
    also reported inside rndc status. The status shows whether
    named can toggle memory profiling, and whether the server is
    built with jemalloc. [GL #4759]
  * Add support for multiple extended DNS errors.
    The Extended DNS Error (EDE) mechanism may raise errors during
    a DNS resolution. named is now able to add up to three EDE
    codes in a DNS response. If there are duplicate error codes,
    only the first one is part of the DNS response. [GL #5085]
  * Print the expiration time of stale records.
    BIND now prints the expiration time of any stale RRsets in the
    cache dump.
  Bug Fixes:
  * Fix dual-stack-servers configuration option.
    The dual-stack-servers configuration option was not working as
    expected; the specified servers were not being used when they
    should have been, leading to resolution failures. This has been
    fixed. [GL #5019]
  * Fix a data race causing a permanent active client increase.
    Previously, a data race could cause a newly created fetch
    context for a new client to be used before it had been fully
    initialized, which would cause the query to become stuck;
    queries for the same data would be either paused indefinitely
    or dropped because of the clients-per-query limit. This has
    been fixed. [GL #5053]
  * Fix deferred validation of unsigned DS and DNSKEY records.
    When processing a query with the “checking disabled” bit set
    (CD=1), named stores the invalidated result in the cache,
    marked “pending”. When the same query is sent with CD=0, the
    cached data is validated and either accepted as an answer, or
    ejected from the cache as invalid. This deferred validation was
    not attempted for DS and DNSKEY records if they had no cached
    signatures, causing spurious validation failures. The deferred
    validation is now completed in this scenario.
    Also, if deferred validation fails, the data is now re-queried
    to find out whether the zone has been corrected since the
    invalid data was cached. [GL #5066]
  * Fix RPZ race condition during a reconfiguration.
    With RPZ in use, named could terminate unexpectedly because of
    a race condition when a reconfiguration command was received
    using rndc. This has been fixed. [GL #5146]
  * “CNAME and other data check” not applied to all types.
    An incorrect optimization caused “CNAME and other data” errors
    not to be detected if certain types were at the same node as a
    CNAME. This has been fixed. [GL #5150]
  * Relax private DNSKEY and RRSIG constraints.
    DNSKEY, KEY, RRSIG, and SIG constraints have been relaxed to
    allow empty key and signature material after the algorithm
    identifier for PRIVATEOID and PRIVATEDNS. It is arguable
    whether this falls within the expected use of these types, as
    no key material is shared and the signatures are ineffective,
    but these are private algorithms and they can be totally
    insecure. [GL #5167]
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
    Previously, when parsing responses, named incorrectly rejected
    responses without matching RRSIG records for NSEC/DS/NSEC3
    records in the authority section. This rejection, if
    appropriate, should have been left for the validator to
    determine and has been fixed. [GL #5185]
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
    Answers to an “ANY” query which were processed by the RPZ
    “passthru” policy had the response-policy’s max-policy-ttl
    value unexpectedly applied. This has been fixed. [GL #5187]
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
    dnssec-signzone could dereference a NULL key pointer when
    resigning a zone. This has been fixed. [GL #5192]
  * Fix a bug in the statistics channel when querying zone transfer
    information.
    When querying zone transfer information from the statistics
    channel, there was a rare possibility that named could
    terminate unexpectedly if a zone transfer was in a state when
    transferring from all the available primary servers had failed
    earlier. This has been fixed. [GL #5198]
  * Fix assertion failure when dumping recursing clients.
    Previously, if a new counter was added to the hash table while
    dumping recursing clients via the rndc recursing command, and
    fetches-per-zone was enabled, an assertion failure could occur.
    This has been fixed. [GL #5200]
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches()
    Previously, active resolver fetches were only dumped when the
    fetches-per-zone configuration option was enabled. Now, active
    resolver fetches are dumped along with the number of
    clients-per-query counters per resolver fetch.
  * Recently expired records could be returned with a timestamp in
    future.
    Under rare circumstances, an RRSet that expired at the time of
    the query could be returned with a TTL in the future. This has
    been fixed.
    As a side effect, the expiration time of expired RRSets is no
    longer returned in a cache dump. [GL #5094]
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
    When dnssec-signzone was called on an already-signed zone and
    the private key file was unavailable, a signature that needed
    to be refreshed was dropped without being able to generate a
    replacement. This has been fixed. [GL #5126]
  * Apply the memory limit only to ADB database items.
    Under heavy load, a resolver could exhaust the memory available
    for storing the information in the Address Database (ADB),
    effectively discarding previously stored information in the
    ADB. The memory used to retrieve and provide information from
    the ADB is no longer subject to the same memory limits that are
    applied to the Address Database. [GL #5127]
  * Avoid unnecessary locking in the zone/cache database.
    Lock contention among many worker threads referring to the same
    database node at the same time is now prevented. This improves
    zone and cache database performance for any heavily contended
    database nodes. [GL #5130]
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
    This error code was previously not reported in some applicable
    situations. This has been fixed. [GL #5137]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1744891200">- Upgrade to release 9.20.8
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Upgrade to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  Feature Changes:
  * Return DNS COOKIE and NSID with BADVERS.
  * Disable separate memory context for libxml2 memory allocations
    on macOS.
  * Use Jinja2 templates in system tests.
  Bug Fixes:
  * Revert NSEC3 closest encloser lookup improvements.
  * Fix EDNS YAML output in dig.
  * Fix RDATA checks for PRIVATEOID keys.
  * Fix a serve-stale issue with a delegated zone.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1750680000">- Upgrade to release 9.20.10
  New Features:
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
  * Ensure file descriptors 0-2 are in use before using libuv
    [bsc#1230649]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775131200">- Update to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.
  * Fix the handling of key statements defined inside views.</changelog>
  <changelog author="max@suse.com" date="1779883200">- Upgrade to release 9.20.23
  https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html
  Security-Fixes:
  * Amplification vulnerabilities via self-pointed glue records.
    (CVE-2026-3592)
    [bsc#1265592]
  * server memory exhaustion during GSS-API TKEY negotiation.
    (CVE-2026-3039)
    [bsc#1265591]
  * Unbounded resend loop in BIND 9 resolver
    (CVE-2026-5950)
    [bsc#1265596]
  * SIG(0) validation during query flood may lead to undefined
    behavior.
    (CVE-2026-5947)
    [bsc#1265595]
  * Invalid handling of CLASS != IN.
    (CVE-2026-5946)
    [bsc#1265594]
  * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS
    implementation
    (CVE-2026-3593)
    [bsc#1265593]</changelog>
</package>
<package pkgid="2a58ac5d6b6af3273b0736fac0a9f7d096128530b2cad1d7584e99fb4145f0e71f2f2ea687c7c8dbe5f65c910f8570dca5b87965082779ded7bf76f557c9b9a0" name="bindfs" arch="x86_64">
  <version epoch="0" ver="1.17.7" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598443200">- Update to release 1.14.7
  * Added --map-passwd and --map-group</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.14.8
  * No user-visible changes (build system only)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614340800">- Update to release 1.15.1
  * Support for libfuse3.
  * Fixed non-zero exit code when unable to chdir into source dir.
  * Pass through "-o fsname" to FUSE.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1659096000">- Update to release 1.17.0
  * Added --map-{passwd,group}-rev</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 1.17.1:
  * Fixed --resolve-symlinks when mountpoint name starts
    with source dir name</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678190400">- update to 1.17.2:
  * Fixed FD leak when using --block-devices-as-files</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1687780800">- update to 1.17.3:
  * Added MacOS statfs_x implementation</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 1.17.4
  * MacOS-specific updates only</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 1.17.6:
  * Support negative --{uid,gid}-offset (issue #142)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1712836800">- Update to release 1.17.7
  * Fixed compiler warnings during build</changelog>
</package>
<package pkgid="a20f0768b84d96eb3d1251b373e50fa212df28fdded3932a2f4838792461512e38b7a959439fc53317c8df388b21cc54f9b44222efcd8900a004e52f7c5d6b4b" name="binsider" arch="x86_64">
  <version epoch="0" ver="0.2.1" rel="bp160.1.13"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1727784000">- Initial package</changelog>
</package>
<package pkgid="d5de42912c1ee53be8b84f9201665dbbde1cf1bb0d5b1a99242d9967b62068eb1e71d0021cd560598e233e21561bf4e0dff453523dd35d136d4751a209b8585a" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="30c2a00ef0b37c474c43ad11e074553d139a46dcd2987b72f977bddcbd297b20a0daf6aabd9d090119c5e9dc0bd67760309a899504188eaec21d16f322600ca4" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="c87091922b1c47ccb26ebc5157eb5227ead92bb89d17e8b249a1ba4430447350c114af38c989f9b159139d0b44d0b3cc18e2d560180a449690212934ae79b7b0" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="83b49f3e71eb5cf89bf797faea44f95555e20c03ed988bd53b93e1c6c45f09177c386f3c1537093b31814ba3c651945499d48c2d1bcf421d236e9d5234643de2" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="7987a8103fc2a468444ce7ac1176537dd58c6b4963ebee8c1d3ccd1fed6987a23b8e1dde343c29c4a8f038b331f198169c5164b945a6251ed19776499865ad15" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="25ab191bd652c59b4eb8659c3c1c049f0fc6a42ae5f720a20584a8e8fb0709f98db19d94c61b6aeba0e79c41ed5c2712053379471d4182a99896e76652da4073" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="de42076711e44d7f62ad6b2c6dfc83bd8e1cd5078e611eaa73c69cda705e79b5a2126c94228845bd8bd3e891b1762a2dc9a47745a17e242ad4ed9cb377c7ee29" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="a72f2816fd239acfc75ffcfbda262bc406aec1dd17129572b6acf618fa9778e9010c3a7260931fc5e44925e2bae198afaa43efb3625aed3b7fe3768e86f69265" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="658f6f27010d4c81cf827ae4e9e1a1c9937fc6795b6a225f4994ee8b03276a49479d10e7d24fb3c67d9fb59c5c21feebb2fa582e11ee314bd42ab0c5db586772" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="70d8179694cfa93dba3f69d5340f6106678c28bf33d0744d81a91004306677ede617f054e8cd8afc91cd6668153272b8826493ac6e8d8cdce09b69269b304cdf" name="binwalk" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Klaus K&#xE4;mpf &lt;kkaempf@suse.com&gt;" date="1580990400">- Update to version 2.2.0
  - no further information available -</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1601035200">- Create (via help2man) and package manpage
- Recommend more unpacking programs
  * capstone, cramfs-tools, cramfsswap, jefferson, lhasa, lzop,
    sasquatch, sleuthkit, squashfs, srecord, ubi_reader, yaffshiv</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1616414400">- Update to version 2.3.0
  * Upstream does not provide a changelog</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1616932800">- Update to version 2.3.1
  * Upstream does not provide a changelog</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1629374400">- Update to version 2.3.2
  * Minor bug fixes
  * Removed hilink decryption plugin</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1631361600">- Update to version 2.3.3
  * Added checks to prevent directory traversal vulnerability when
    external extractors create symlinks on the filesystem.
  * Added --run-as command line option to allow users to control
    the privilege level external extractors are given as well as
    the power to run as root if they so choose.</changelog>
  <changelog author="Boris Manojlovic &lt;boris@steki.net&gt;" date="1675080000">- add CVE-2022-4510 patch file: CVE-2022-4510.patch (boo#1207744)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1676376000">- Update to version 2.3.4
  * CVE-2022-4510: path traversal in PFS extractor script (boo#1207744)
- drop CVE-2022-4510.patch</changelog>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1727438400">- Switch upstream to a maintained fork
- Update to version 2.4.2
  * enhance the accuracy of esp image by @samhjn in #17
  * Improve install by @stkw0 in #20
  * Show warning when extraction fails and print only successful extracted entries
- Update to version 2.4.1
  * change jefferson uri by @stkw0 in #7
  * Detect WAVE and FLAC by @puhitaku in #8
  * Update audio signature file by @kagekiyo7 in #10
  * entropy: don't parse math by @ElDavoo in #12
- Update to version 2.4.0
  This release merged the next upstream PR:
  * Add magic for ZTE firmware
  * Improve YAFFS signature
  * Add Microware OS-9/68000 magic support
  * Add PKCS#1 DER hash signatures
  * Add firmware signatures used with JBOOT bootloader
  * Added ESP32 image and partition entry signatures
  * Add WinCE file extractor plugin
  * PKCS #8 Private key
- Update to version 2.3.8
  * Fix support for python3.12
- Update to version 2.3.7
  * Fix issue in Windows due to the use of pwd
  * Fix dep.sh bug in some specific distros
- Update to version 2.3.6
  * Fix missing import on extractor.py
- Update to version 2.3.5
  This release applies a bunch of important pull request from the original repository.
  Most relevant changes:
  * Add support for python 3.12
  * Switch from nose to pytest
  * Update minimum supported python version to 3.8
  * Move from travis to Github actions
  * Fix dep.sh build issues</changelog>
</package>
<package pkgid="15480e8659c7c9c685bccf117299e29aaa1f560d719a20846609060e91456c3e9cb4ba6cee6ccb6459ac380e8e284b1b06f6a2f09f8f5035f57f28d9c9fe5830" name="biome" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="bp160.1.33"/>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1713355200">- update to 1.7.0:
  * 235 commits, see https://github.com/biomejs/biome/compare/cli/v1.6.1...cli/v1.7.0</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1714737600">- update to 1.7.2:
  * Import sorting now ignores side effect imports (#817)
  * Import sorting now adds spaces where needed (#1665)
  * biome migrate eslint now handles cyclic references.
  * Correctly handle placement of comments inside named import clauses. #2566
  * add nusery/noReactSpecificProps.
  * add noUselessUndefinedInitialization.
  * add nusery/useArrayLiterals.
  * add nusery/useConsistentBuiltinInstatiation.
  * add nusery/useDefaultSwitchClause.
  * noDuplicateJsonKeys no longer crashes when a JSON file
    contains an unterminated string (#2357)
  * noRedeclare now reports redeclarations of parameters in a functions body (#2394)
  * noRedeclare no longer reports overloads in object types (#2608)
  * noRedeclare now merge default function export declarations
    and types (#2372)
  * noUndeclaredVariables no longer reports variable-only and type-only exports (#2637)
  * [noUnusedVariables] no longer crash Biome when encountering a
    malformed conditional type (#1695)
  * useConst now ignores a variable that is read before its assignment.
  * useShorthandFunctionType now suggests correct code fixes when parentheses are required (#2595)
  * useTemplate now correctly escapes strings (#2580)
  * noMisplacedAssertion now allow various expect.* calls
  * The language parsers no longer panic on unterminated strings
    followed by a newline and a space (#2606, #2410)
  * build(xstask): remove deps fs_extra and filetime #2562
  * docs: Add more useImportType examples to docs #2307
  * chore: update schema definition #2567
  * fix(configuration_schema): rename some fields to camelCase in
    the configuration_schema.json #2568
  * fix: rename some fileds to camelCase in the configuration_schema #2569
  * feat(biome_css_analyzer): noUnknownUnit #2535
  * chore: fix some typos in comments #2579
  * refactor: foundations for LSP workspaces support #2589
  * fix(lint/noRedundantAlt): rule source #2609
  * feat(linter): Implement useGenericFontNames #2573
  * chore: remove some website leftovers #2617
  * refactor(deserialize): don't handle Option specifically #2630
  * refactor: use TriviaPiece factory functions in more places #2632
  * feat(biome_css_analyzer): noUnknownFunction #2570
  * fix(snippet): should emit only one diagnostic #2650
  * chore: add infrastructure for Grit engine #2586
  * docs: fix typos in biome_rowan batch mutation #2653
  * chore: upgrade prettier and update snapshots #2502
  * build(deps): update #2657
- includes 1.7.1:
  * Fix #2403 by printing the errors in the client console.
  * Add parentheses for the return expression that has leading multiline comments. #2504
  * Correctly format dangling comments of continue statements. #2555
  * Fix case where jsxRuntime wasn't being respected by useImportType rule (#2473)
  * Fix #2460, where the rule noUselessFragments was crashing the linter in some cases.
  * Fix #2366, where noDuplicateJsonKeys incorrectly computed the kes to highlight.
  * The rule noMisplacedAssertions now considers valid calling expect inside waitFor
  * fix(lint/noBarrelFile): rule source #2464
  * refactor(bench): update import statement and module handling in run.js #2471
  * docs: fix missing punctuation and typo #2477
  * fix: missing "--apply" option in the command example #2479
  * chore: tidy up dependencies #2480
  * chore(ci): add repository dispatch workflow #2442
  * chore: fix some typos in comments #2486
  * feat: start working on yaml support #2428
  * chore: prepare knope #2484
  * ci: trigger prepare release #2489
  * ci: trigger prepare release #2490
  * chore: remove variables from workflows #2491
  * chore: speed up wasm-pack profiling build #2494
  * fix: reverts hashbrown, which causes issues when compiling to WASM #2496
  * fix(linter): name of typescript-eslint #2503
  * Handle operation parsing error GraphQL #2434
  * chore: remove website from monorepo #2505
  * ci: add a workflow for linting pr titles #2497
  * feat(rule/solidjs): add no-react-specific-props #2427
  * refactor(js_syntax): remove TsNameWithTypeArguments #2510
  * fix(linter): add missing fix kind for solid rule #2519
  * feat(biome_css_analyzer): noCssEmptyBlock #2513
  * chore: added how to create new css lint rule #2522
  * refactor(css_formatter): implement FormatCssBlockLike #2531
  * feat(biome_css_analyze): noDuplicateSelectorsKeyframeBlock #2534
  * docs: fixed path to crates, updated link to translating doc #2538
  * fix(biome_css_analyzer): update lint error messages #2545
  * feat(biome_css_analyze): noImportantInKeyframe #2542
  * chore(deps): update rust crate serde_json to 1.0.116 #2553
  * chore(deps): update rust crate proc-macro2 to 1.0.81 #2551
  * chore(deps): update github-actions #2549
  * chore: add a new bronze sponsor #2556
  * chore(deps): update rust:1.77.2 docker digest to 6052afe #2550
  * chore(deps): update rust crate serde to 1.0.198 #2552
  * feat(biome_graphql_parser): parse fragment definition #2506
  * refactor(ci): add more valid PR title types #2559
  * docs: fix typo in biome analyze contribution document #2560
  * build(deps): remove 'case' dependency #2561</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1714996800">- update to 1.7.3:
  * The stdin-file-path option now works correctly for Astro/
    Svelte/Vue files (#2686)
  * Add nursery/useExplicitLengthCheck.
  * noBlankTarget no longer hangs when applying a code fix (#2675)
  * noRedeclare no longer panics on conditional type (#2659)
  * noUnusedLabels and noConfusingLabels now ignore svelte
    reactive statements (#2571)
  * useExportType no longer removes leading comments (#2685)
  * useJsxKeyInIterable no longer reports false positive when
    iterating on non-jsx items (#2590)
  * Fix typo by renaming useConsistentBuiltinInstatiation to
    useConsistentBuiltinInstantiation
  * feat(biome_graphql_parser): parse schema definition #2557
  * chore(ci): renovate pin GA to semver #2670
  * build(deps): update #2669
  * build(deps): upgrade indexmap crate #2673
  * feat(biome_css_analyzer): implement noDuplicateAtImportRules #2658
  * feat(biome_css_analyzer): noUnknownSelectorPseudoElement #2655
  * feat(biome_graphql_parser): implement NthAt for GraphqlLexer #2677
  * feat(biome_graphql_parser): parse scalar type definition #2663
  * chore: add Grit node compilers #2689
  * chore: upgrade to rust 1.78 #2691
  * feat: parse object type definition #2690
  * chore(deps): upgrade oxc_resolver #2694
  * chore: implement Grit node bindings #2697
  * docs: better explanation of the directive "use strict" #2699
  * docs: add small note about process.exit #2700
  * fix(lint/noDuplicateAtImportRules): correctly handle both
    single- and double quotes #2707
  * feat(biome_graphql_parser): parse interface type definition #2703
  * feat(linter): implement NoUnmatchableAnbSelector #2706
  * chore(deps): update rust crate tracing to 0.1.40 #2554
  * fix(lint/useJsxKeyInIterable): handle ternaries properly #2701
  * fix(useExplicitLengthCheck): docs #2735
  * chore(deps): update rust crate serde to 1.0.200 #2737
  * chore(deps): update github-actions #2740
  * chore(deps): update dependency prettier to v3.2.5 #2739
  * chore(deps): update pnpm to v8.15.8 #2733
  * chore(deps): update @biomejs packages #2732
  * chore(deps): update dependency eslint to v9.2.0 #2738</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1718020800">- update to 1.8.0:
  * see https://github.com/biomejs/biome/releases/tag/cli%2Fv1.8.0</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1718020801">- update to 1.8.1:
  * Fix #3069, prevent overwriting paths when using --staged or --changed options.
  * Fix a case where the file link inside a diagnostic wasn't
    correctly displayed inside a terminal run by VSCode.
  * Fix #3067, by assigning the correct default value to indentWidth.
  * Fix the bug where whitespace after the &amp; character in CSS
    nesting was incorrectly trimmed, ensuring proper targeting of
    child classes #3061.
  * Fix #3068 where the CSS formatter was inadvertently
    converting variable declarations and function calls to lowercase.
  * Fix the formatting of CSS grid layout properties.
  * The noEmptyBlock css lint rule now treats empty blocks
    containing comments as valid ones useLiteralKeys no longer
    reports quoted member names (#3085)
  * noEmptyInterface now ignores empty interfaces in ambient modules (#3110)
  * noUnusedVariables and noUnusedFunctionParameters no longer
    report the parameters of a constructor type (#3135)
  * noStringCaseMismatch now ignores escape sequences (#3134)
  * Implemented CSS Unknown At-Rule parsing, allowing the parser
    to gracefully handle unsupported or unrecognized CSS at-rules.
  * Fix #3055 CSS: Layout using named grid lines is now correctly parsed.
  * Fix #3091. Allows the parser to handle nested style rules and
    at-rules properly, enhancing the parser's compatibility with the
    CSS Nesting Module.</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1719403200">- update to 1.8.2:
- Fix #3201 by correctly injecting the source code of the file
  when printing the diagnostics.
- Fix #3179 where comma separators are not correctly removed
  after running biome migrate and thus choke the parser.
- Fix #3232 by correctly using the colors set by the user.
- Reword the reporter message "No fixes needed" to "No fixes applied"
- Don't conceal previous overrides (#3176). The rule is now
  correctly enabled for the index.js file.
- Fix #3103 by correctly resolving CSS formatter options.
- Fix #3192 don't add an extra whitespace within :has.
- Fix a regression introduced by the release of v1.8.0
- Add nursery/useValidAutocomplete.
- Add nursery/noShorthandPropertyOverrides. #2958
- Fix [#3084] false positive by correctly recognize parenthesized
  return statement.
- useImportExtensions now suggests a correct fix for import '.'
  and import './.'.
- Fix useDateNow false positive when new Date object has
  arguments new Date(0).getTime().
- The noUnmatchableAnbSelector rule is now able to catch
  unmatchable an+b selectors like 0n+0 or -0n+0.
- The useHookAtTopLevel rule now recognizes properties named as hooks like foo.useFoo().
- Fix #3092, prevent warning for Custom properties (--*).
- Fix a false positive in the useLiteralKeys rule. (#3160)
- The noUnknownProperty rule now ignores the composes property
  often used in css modules. #3000
- Fix false positives of the useExhaustiveDependencies rule.
- Fix missing withDefaults macro in vue files for globals variables.
- Fix CSS modules settings mapping.
- chore(ci): improve rules_check task
- chore: change js code blocks containing JSX elements to jsx
- feat(biome_js_analyzer): noSubstr
- chore(deps): update rust crate tokio to 1.38.0
- chore(grit): implement Grit snippet bindings
- chore(deps): update @biomejs packages
- feat(analyzer): useSortedKeys for JSON objects
- docs(useImportType): add docs about TypeScript settings
- docs(noUndeclaredDependencies,useImportExtensions): add note about LSP configs
- docs(no_undeclared_dependencies): follow up fix of #3173
- chore(ci): try enable --compact flag for pkg.pr.new
- chore(ci): remove --compact flag
- fix(formatter): escape double quotes when printing formatter IR
- fix: remove unnecessary example
- chore: move maintainers to past maintainers
- chore: removes old files
- chore: move Sec-ant to core contributor
- chore: add minht11 to the maintainers team
- chore: add chansuke to maintainers list
- chore: rust 1.79.0
- chore(deps): update github-actions
- chore(deps): update @biomejs packages
- chore(grit): improve snippet compiler
- refactor(analyzer): use enumflags2
- feat(biome_css_analyzer): implement function-linear-gradient-no-nonstandard-direction
- chore(deps): update dependency eslint to v9.5.0</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1719576000">- update to 1.8.3:
  * "Fix #3104 by suppressing node warnings when using biome
    migrate.
  * Force colors to be off when using the GitHub reporter to
    properly create annotations in GitHub actions (#3148)
  * Implement CSS unicode range.
  * Fix #3184 CSS formatter converts custom identifiers to lowercase.
  * Fix #3256 constant crashes when editing css files #3256.
  * Add nursery/useDeprecatedReason rule.
  * Add nursery/noExportedImports.
  * useConsistentArrayType and useShorthandArrayType now ignore
    Array in the extends and implements clauses. Fix #3247.
  * Fixes #3066 by taking into account the dependencies declared in the package.json.
  * The code action of the useArrowFunction rule now preserves a
    trailing comma when there is only a single type parameter in
    the arrow function and JSX is enabled. Fixes #3292.
  * Enhance tailwind sorting lint rule #1274 with variant support.
  * Every preconfigured variant is assigned a weight that concurs
    on establishing the output sorting order.
  * Since nesting variants on the same utility class is possible,
    the resulting weight is the Bitwise XOR of all the variants
    weight for that class.
  * Dynamic variants (e.g. has-[.custom-class], group-[:checked])
    are also supported and they take the weight of their base
    variant name the custom value attached (e.g. has-[.custom-
    class] takes has weight).
  * Arbitrary variants (e.g. [&amp;nth-child(2)]) don't have a weight
    assigned and they are placed after every known variant.
  * Classes with the same amount of arbitrary variants follow
    lexicographical order. The class that has the highest number
    of nested arbitrary variants is placed last.
  * Screen variants (e.g. sm:, max-md:, min-lg:) are not supported yet.
  * feat(workspace): adds GraphQL parsing capabilities via feature #3238
  * feat(editorconfig): expand unknown globs into known globs #3218
  * chore(core): implement pull_diagnostics for graphql #3248
  * chore(linter): add a rule source of noUnknownProperty #3252
  * feat: tailwind variant sorting #3208
  * test(parse/json): add test for bug where overrides
    erroneously override special parsing options #3260
  * docs(analyzer): improve contributing guide for rules with multiple signals #3245
  * chore(lint): initialise biome_graphql_analyze #3276
  * chore(deps): update @biomejs packages #3266
  * docs(useNamingConvention): add examples and improve explanations #3277
  * refactor(parse/json): change fields in JsonParserSettings to Option #3272
  * feat(search-output-formatter): initialize search output formatter #3258
  * chore(grit): implement node-like compilers + fixes #3253
  * feat: enable linting for graphql #3295
  * refactor(parse/css): change fields in CssParserSettings to Option #3273
  * refactor: add variables to format strings directly #3299
  * chore: update codegen to include GraphQL #3301</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1726142400">- update to 1.9.0:
  * see https://github.com/biomejs/biome/releases/tag/cli%2Fv1.9.0</changelog>
  <changelog author="Soc Virnyl Estela &lt;obs@uncomfyhalomacro.pl&gt;" date="1728216000">- add _service
- remove cargo_config
- add vendor.tar.zst
- update to version 1.9.3:
  * fix: add missing word
  * perf(linter): remove unneeded memory allocation for str
  * fix(lint): options for `noLabelWithoutControl` are optional
  * feat(useExhaustiveDependencies): add option to disable errors for unecessary dependencies
  * fix(noUnusedVariables): don't panic when renaming ref at the start
  * chore: setup GritQL benchmark
  * feat(useExplicitFunctionReturnType): support higher-order function
  * feat(biome_css_analyze): implement `noDescendingSpecificity`
  * ci: update codspeed action
  * fix(noMisleadingCharacterClass): properly handle escaping and improve diagnostics
  * chore(deps): update @biomejs packages
  * chore(deps): update dependency @typescript-eslint/eslint-plugin to v8.7.0
  * chore(deps): update rust:1.81.0 docker digest to a21d540
  * chore(deps): update actions/checkout action to v4.2.0
  * chore(deps): update rust crate oxc_resolver to 1.12.0
  * chore(deps): update dependency eslint to v9.11.1
  * chore(deps): update pnpm to v9.11.0
  * feat(formatter): implement formatting for GritQL root node
  * fix(bench): typo in `.prettierignore`
  * fix(deps): update rust crate libc to 0.2.159
  * fix(js-api): update code
  * fix(formatter): trim CSS raw values
  * fix(cli): don't error in stdin, with `--write`
  * fix: updated query feature range interval format
  * docs: fix `isNan` to `isNaN`
  * fix(lsp): correctly enable CSS on LSP
  * chore: to_lowercase -&gt; to_lowercase_cow
  * feat(biome_js_parser): forbid undefined as type name
  * fix(noMisleadingCharacterClass): ignore characters outside of char classes
  * fix(linter): apply `useExplicitFunctionReturnType` only to TypeScript…
  * fix(noUndeclaredDependencies): ignore NodeJS modules
  * fix(noUselessEscapeInRegex): don't panic on regexes starting with an empty class
  * chore: update CHANGELOG.md
  * perf: iterate over bytes instead of chars where possible
  * feat(grit): implement disregarded snippet nodes
  * fix(schema): make optional the `options` JSON schema field
  * feat(linter): implement noTemplateCurlyInString
  * fix(useSemanticElements): examples
  * fix(useSemanticElements): check only elements associated to a role
  * fix(useButtonType): don't report dynamically created button with valid type
  * fix(format/html): keep at most 1 empty line between elements
  * feat(linter): implement no-nested-ternary
  * feat(markdown/parser): support thematic break block parser
  * refactor(parser/html): refactor comments to be nodes in the tree
  * fix(noUnusedFunctionParameters): ignore params in obj pattern with a rest param
  * fix(noUselessStringConcat): don't panic on malformed code
  * fix(linter): noUselessFragments fix creates invalid CST
  * refactor(aria_metadata): generate ARIA metadata from specification
  * docs: fix markdown link in CHANGELOG.md
  * perf(linter): performance improvement for css semantic model
  * perf(grit): use `to_ascii_lowercase_cow`
  * test(format/grit): add tests for grit formatter
  * feat(linter): support allow expressions
  * fix(deps): update rust crate rand to 0.8.5
  * chore(deps): update rust crate bpaf to 0.9.14
  * chore(deps): update actions/setup-node action to v4.0.4
  * chore(deps): update @biomejs packages
  * feat(html): resolve format options
  * fix(parser/html): add `param` to void elements list
  * feat(html): implement debug features for html
  * feat(lsp): `noExcessiveCognitiveComplexity` diagnostic shows levels
  * feat(linter): support direct const assertions in useExplicitFunctionReturnType rule
  * fix(parser/html): allow multi line attribute values
  * feat(linter): implement useExplicitFunctionReturnType
  * chore: fix udeps failure
  * chore: enforce usage of to_ascii_lowercase_cow
  * fix(graphql_formatter): panic in block comments with empty line
  * chore(cli): replace PanicInfo -&gt; PanicHookInfo
  * fix(parser/html): fix incorrect parsing when text starts with a quote
  * feat(formatter/html): add line break at the end of files
  * feat: add additional `FeatureKind` entries for debug features
  * chore(readme): use polar shield
  * feat(html/formatter): self close tag add slash char
  * fix(html/parser): support root element list
  * feat(grit): implement GritQL log() function
  * feat(linter): implement noOctalEscape
  * docs: improve documentation of rule
  * refactor(lint): set version field for new rules
  * test(format/html): reenable snapshot tests
  * chore: move Grit changes in CHANGELOG
  * chore: add Grit updates to CHANGELOG
  * fix(grit): fix node walking
  * feat(grit): implement Grit built-ins
  * fix(noLabelWithoutControl): accept expressions as label
  * feat(lint): add rule `useComponentExportOnlyModules`
  * feat(grit): support for Grit pattern, predicate and function definitions
  * feat(html): add `experimental-html` feature flag to enable html file handler
  * build: upgrade to Rust 1.81
  * fix(lsp): code actions capabilities
  * feat(parser/html): handle script and style tags
  * feat(parser/html): parse doctype declarations
  * feat(parser/html): lex and parse unquoted attribute values
  * feat(markdown): support markdown grammar code generation
  * fix(format/html): fix doctype formatting
  * fix(format/html): keep single quotes if string contains a double quote
  * fix(parser/html): check void element names case insensitively
  * chore(deps): update dependency vite to v5.4.6 [security]
  * fix(useFilenamingConvention): apply formats to file extensions
  * fix(useFilenamingConvention): allow leading digits in lower-like cases
  * feat(linter): add noMissingVarFunction
  * fix(useFilenamingConvention): don't suggest names with disallowed case
  * feat(format/html): port `JsxChildList` formatting to `HtmlElementList`
  * fix(lsp): reduced the number of log files on disk
  * test: fix outdated snapshot tests
  * fix(useStrictMode): check actual directives
  * fix(lsp): apply `.editorconfig` options
  * fix: preserve other children in `useConsistentCurlyBraces`
  * fix(config): handle `unset` and `off` values in editorconfig files
  * fix(css_parser): accept U+FDCF and U+FFFD in identifiers
  * fix(parser/html): fix whitespace being lexed as html literal
  * chore(deps): update rust crate anyhow to 1.0.89
  * chore(deps): update rust crate serde to 1.0.210
  * chore(deps): update @biomejs packages
  * fix(cli): use correct list of evaluated paths
  * chore(deps): update dependency @typescript-eslint/eslint-plugin to v8.5.0
  * chore(deps): update rust crate dashmap to 6.1.0
  * chore(deps): update rust crate insta to 1.40.0
  * fix: re-implement #3856 to improve correctness
  * chore(deps): update rust docker tag to v1.81.0
  * chore(deps): update rust crate tokio to 1.40.0
  * chore(deps): update dependency eslint to v9.10.0
  * docs(readme): add zh-tw readme translation
  * feat(format/grit): grit formatter initial configuration
  * chore(deps): update rust crate serde_json to 1.0.128
  * fix(deps): update rust crates
  * chore: update biome version of rules
  * revert: "feat(lsp): add codeActionKinds"
  * chore: remove sponsor
  * fix(noUndeclaredDependencies): ignore invalid package names, bun import, and recognize Definitely Typed
  * chore: tweak `useConsistentArrayType` rule documentation
  * chore: add `noConsole` options documentation
  * feat(lint): add noProcessEnv
  * feat(format/html): attribute formatting
  * docs: update snippet ignore file on `useFilenamingConvention` rule
  * chore: add more logs for #3839
  * docs(changelog): fix typo
  * refactor(package.json): add more keywords
  * fix(editorconfig): fix editorconfig not being loaded when running `biome ci`
  * docs(readme): add CSS and GraphQL
  * fix(aria): remove concept for alert like roles
  * fix: update eslint-plugin-solid docs position
  * feat(parser/html): correctly parse void elements
  * chore: fix docs comments</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1729166400">- update to version 1.9.4:
  * see https://github.com/biomejs/biome/releases/tag/cli%2Fv1.9.4</changelog>
</package>
<package pkgid="2b26e02e9d5e4afbf5df6cb0dae38088ba93429ae9196f94e5f2ed401bd5284cd425d2dbef131f9546d08ea75eb8c20e540542e157b8c549290f2eba637c0b1c" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="160000.2.2"/>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1597320001">- Add support for SMBIOS 3.
  * biosdevname-Add-SMBIOS-3.x-support.patch
- Fix URL in specfile. It should be readable to developers.</changelog>
  <changelog author="sebastian.parschauer@instana.com" date="1600430400">- Amend the package description</changelog>
  <changelog author="lnussel@suse.de" date="1623153600">- install to /usr (boo#1029961)</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Enhance _service file
- Update to version 0.7.3:
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
  This are now all mainline and got reverted:
  D    biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  D    biosdevname-Add-SMBIOS-3.x-support.patch
  D    biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch
  D    dmidecode-prevent-infinite-recursion.patch</changelog>
  <changelog author="trenn@suse.de" date="1709035200">- Binary is in /usr/sbin not /sbin
  (cmp with install to /usr below) (bsc#1220125)
  M udev-rule-path.patch</changelog>
</package>
<package pkgid="bd0b2592515a0dbbbb1c0b4b120460efca80f9275f9d3d91b5c3bf368ef8375cf5b58670515771470001fd72b953a81f47a5c89fd3971e343d12cf5e18a28cfe" name="bird" arch="x86_64">
  <version epoch="0" ver="2.15.1" rel="bp160.1.6"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1670760000">- Update to version 2.0.11
  * BGP roles (RFC 9234)
  * BGP: Keepalive time scaling
  * BGP: New 'min hold time' and 'min keepalive time' options
  * BGP: New 'next hop prefer global' option
  * Filter: For loops and direct recursion
  * Filter: Mixed declarations of local variables
  * Filter: Improved static type checks
  * Filter: Literal [] for empty set
  * Linux: Netlink KRT improvements
  * Memory management improvements
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1674475200">- Update to version 2.0.12
  * Filter: New 'onlink' route attribute.
  * Compile-time option to use 4-way tries instead of 16-way ones.
  * Important bugfixes.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1682337600">- Update to version 2.13
  * Babel: IPv4 via IPv6 extension (RFC 9229)
  * Babel: Improve authentication on lossy networks
  * BGP: New 'allow bgp_med' option
  * BSD: Support for IPv4 routes with IPv6 nexthop on FreeBSD
  * Experimental BMP protocol implementation
  * Important bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1687435200">- Update to version 2.13.1
  Bugfix release:
  * When a case statement in filter had an empty branch, it crashed
    BIRD.
  * fixed a bug in BGP Roles manifesting when the other party sent
    no capabilities at all.</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@gmx.com&gt;" date="1695816000">- add 'shadow' to Requires(pre)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1696766400">- Update to version 2.14
  * MPLS subsystem
  * L3VPN: BGP/MPLS VPNs (RFC 4364)
  * BGP: Access to unknown route attributes
  * RAdv: Custom options
  * Babel: RTT metric extension
  * BMP: Refactored route monitoring
  * BMP: Multiple instances of BMP protocol
  * BMP: Both pre-policy and post-policy monitoring
  * Experimental route aggregation
  * Filter: Method framework
  * Filter: Functions have return type statements
  * Filter: New bytestring data type
  * Kernel: Option to learn kernel routes
  * Many bugfixes and improvements</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1710244800">- Update to version 2.15
  * BGP: Send hold timer
  * BGP: New options to specify required BGP capabilities
  * BFD: Improvements to 'show bfd sessions' command
  * RPKI: New 'local address' configuration option
  * Linux: Support for more route attributes, including
    TCP congestion control algorithm
  * Support for UDP logging
  * Static routes can have both nexthop and interface specified
  * Completion of command options in BIRD client
  * Many bugfixes and improvements</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1710331200">- log-commit.patch: fix crash in log_commit with empty log list</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1712491200">- Update to version 2.15.1
  * OSPF: Fix regression in handling PtP links
  * RPKI: Handle connection resets properly
  * Static: Reject invalid combination of options
  * Fix builds with limited set of protocols</changelog>
</package>
<package pkgid="cfa303d40497755e9e5342051f5fec8e05864cebfad636af2a5b92680bec6f4fe39383a0283606738369ba7c63db37093b9bd6006c16697daed522a035085641" name="bird-doc" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="bp160.1.6"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1670760000">- Update to version 2.0.11
  * BGP roles (RFC 9234)
  * BGP: Keepalive time scaling
  * BGP: New 'min hold time' and 'min keepalive time' options
  * BGP: New 'next hop prefer global' option
  * Filter: For loops and direct recursion
  * Filter: Mixed declarations of local variables
  * Filter: Improved static type checks
  * Filter: Literal [] for empty set
  * Linux: Netlink KRT improvements
  * Memory management improvements
  * Many bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1674475200">- Update to version 2.0.12
  * Filter: New 'onlink' route attribute.
  * Compile-time option to use 4-way tries instead of 16-way ones.
  * Important bugfixes.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1682337600">- Update to version 2.13
  * Babel: IPv4 via IPv6 extension (RFC 9229)
  * Babel: Improve authentication on lossy networks
  * BGP: New 'allow bgp_med' option
  * BSD: Support for IPv4 routes with IPv6 nexthop on FreeBSD
  * Experimental BMP protocol implementation
  * Important bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1687435200">- Update to version 2.13.1
  Bugfix release:
  * When a case statement in filter had an empty branch, it crashed
    BIRD.
  * fixed a bug in BGP Roles manifesting when the other party sent
    no capabilities at all.</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@gmx.com&gt;" date="1695816000">- add 'shadow' to Requires(pre)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1696766400">- Update to version 2.14
  * MPLS subsystem
  * L3VPN: BGP/MPLS VPNs (RFC 4364)
  * BGP: Access to unknown route attributes
  * RAdv: Custom options
  * Babel: RTT metric extension
  * BMP: Refactored route monitoring
  * BMP: Multiple instances of BMP protocol
  * BMP: Both pre-policy and post-policy monitoring
  * Experimental route aggregation
  * Filter: Method framework
  * Filter: Functions have return type statements
  * Filter: New bytestring data type
  * Kernel: Option to learn kernel routes
  * Many bugfixes and improvements</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1710244800">- Update to version 2.15
  * BGP: Send hold timer
  * BGP: New options to specify required BGP capabilities
  * BFD: Improvements to 'show bfd sessions' command
  * RPKI: New 'local address' configuration option
  * Linux: Support for more route attributes, including
    TCP congestion control algorithm
  * Support for UDP logging
  * Static routes can have both nexthop and interface specified
  * Completion of command options in BIRD client
  * Many bugfixes and improvements</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1710331200">- log-commit.patch: fix crash in log_commit with empty log list</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1712491200">- Update to version 2.15.1
  * OSPF: Fix regression in handling PtP links
  * RPKI: Handle connection resets properly
  * Static: Reject invalid combination of options
  * Fix builds with limited set of protocols</changelog>
</package>
<package pkgid="8c38df25764452e8cb2b1ea0446ee4bee13059324073a3942c157e2e54e19464c1f15ed7ff7e110d0263699a941b64005bed95b130678133578e2fd9a3980f97" name="bird3" arch="x86_64">
  <version epoch="0" ver="3.1.4" rel="bp160.1.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1745582400">- Update description
- Migrate user creation to sysuser-tools</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746446400">- Update to version 3.1
  * see https://gitlab.nic.cz/labs/bird/-/blob/v3.1.0/NEWS
- Rename to bird3 to be able to provide package as an alternative in old
  distributions</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746619200">- Fix documentation subpackage</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746619201">- Drop explicit User &amp; Group provides, should be handled automatically</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746705600">- Drop extra spaces in sysusers file and drop explicit group creation</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746792000">- Minor polishing
  * use %tmpfiles_create macro
  * use install -D instead of mkdir &amp;&amp; install</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1747137600">- Update to version 3.1.1
  * Makefile: Fix accidentally added dry-run markers
  * BGP: Fix route refresh behavior
  * BGP: Fix reconfiguration of import behavior modifiers
  * BGP: Fix crash on too long export
  * Conf: Fix invalid check in text_or_ipa grammar
  * Netlink: Fix FreeBSD build error
  * Fix use-after-free in thread group reconfiguration
  * Fix CentOS 7 and NetBSD build
  * Fix several crashes in table export (already fixed in 3.0.2)
  * Fix crash on graceful restart of a channel with ROA subscription
  * Lots of internal tooling and CI updates</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1748347200">- Update to version 3.1.2
  * BGP: Fix warnings for roa_check
  * MRT: Fix typo in assert
  * ASPA: Fix table subscriptions
  * ASPA: Fix filter parse crash
  * Table: Fix several race conditions
  * Shutdown: Do not export routes
  * Logs: Fix logs reopening on configure undo</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1756987200">- Update to version 3.1.3
  * ASPA check fix for AS_SET</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1758542400">- Update to version 3.1.4
  * BGP: Fixed crash on Notification with a message, CVE-2025-59688
  * BGP: Fixed invalid memory access in pending TX flush
  * BGP: Fixed a rare bug with listening socket delay
  * Pipe: Disabled statisticts for stopping pipe
  * Hash: Read-only assertions
  * ROA Aggregator: Fixed crash on multiwithdraw
  * Protocol: Fixed broken state announcements</changelog>
</package>
<package pkgid="e7a99f8d8c59dc13f4bdbb42b9d8c4da48e498945960becf071e7335252064f844eb82e89db1086f574ba34b77fc1a7982e112ba5fc91ebe45e196486d7bad9a" name="bird3-doc" arch="noarch">
  <version epoch="0" ver="3.1.4" rel="bp160.1.1"/>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1745582400">- Update description
- Migrate user creation to sysuser-tools</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746446400">- Update to version 3.1
  * see https://gitlab.nic.cz/labs/bird/-/blob/v3.1.0/NEWS
- Rename to bird3 to be able to provide package as an alternative in old
  distributions</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746619200">- Fix documentation subpackage</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746619201">- Drop explicit User &amp; Group provides, should be handled automatically</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746705600">- Drop extra spaces in sysusers file and drop explicit group creation</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1746792000">- Minor polishing
  * use %tmpfiles_create macro
  * use install -D instead of mkdir &amp;&amp; install</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1747137600">- Update to version 3.1.1
  * Makefile: Fix accidentally added dry-run markers
  * BGP: Fix route refresh behavior
  * BGP: Fix reconfiguration of import behavior modifiers
  * BGP: Fix crash on too long export
  * Conf: Fix invalid check in text_or_ipa grammar
  * Netlink: Fix FreeBSD build error
  * Fix use-after-free in thread group reconfiguration
  * Fix CentOS 7 and NetBSD build
  * Fix several crashes in table export (already fixed in 3.0.2)
  * Fix crash on graceful restart of a channel with ROA subscription
  * Lots of internal tooling and CI updates</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1748347200">- Update to version 3.1.2
  * BGP: Fix warnings for roa_check
  * MRT: Fix typo in assert
  * ASPA: Fix table subscriptions
  * ASPA: Fix filter parse crash
  * Table: Fix several race conditions
  * Shutdown: Do not export routes
  * Logs: Fix logs reopening on configure undo</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1756987200">- Update to version 3.1.3
  * ASPA check fix for AS_SET</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1758542400">- Update to version 3.1.4
  * BGP: Fixed crash on Notification with a message, CVE-2025-59688
  * BGP: Fixed invalid memory access in pending TX flush
  * BGP: Fixed a rare bug with listening socket delay
  * Pipe: Disabled statisticts for stopping pipe
  * Hash: Read-only assertions
  * ROA Aggregator: Fixed crash on multiwithdraw
  * Protocol: Fixed broken state announcements</changelog>
</package>
<package pkgid="85abaa24e7e3c2b0fedb34651aba6414bce4d942f3ffb8293bfc2ece10ac57ecac0f5c529837ebaa00c1fbb7a7ecbf29c63ae776a07d7b2b774741e3ecaff725" name="bison" arch="x86_64">
  <version epoch="0" ver="3.8.2" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1602590400">- GNU bison 3.7.3:
  * Fix concurrent build issues
  * The bison executable is no longer linked uselessly against
    libreadline
  * Fix incorrect use of yytname in glr.cc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605355200">- GNU bison 3.7.4:
  * In Yacc mode, YYEMPTY token was missing its macro definiton
  * Fix lalr1.cc skeleton internal assertions
  * Make macro YY_ASSERT obey the api.prefix %define variable
  * Work around C++ limitations for long assertions
  * The YYBISON macro in generated "regular C parsers" is now
    defined to the version of Bison as an integer</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1611489600">- GNU bison 3.7.5:
  * Fix crashes in counterexample generation
  * Fix Table Generation generating incorrect parsers when there
    are many useless tokens
  * GLR parsers now support %merge together with
    api.value.type=union
  * C++ parsers use noexcept in more places
  * Generated parsers avoid some warnings about signedness issues
  * C-language parsers now avoid warnings from pedantic clang</changelog>
  <changelog author="dmueller@suse.com" date="1611489601">- use https for sources</changelog>
  <changelog author="mpluskal@suse.com" date="1612872000">- Run tests in parallel</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- GNU bison 3.7.6:
  * Fix reused push parsers
  * Fix table generation</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move COPYING file into licenses subdirectory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633176000">- GNU bison 3.8.2
  * in Yacc compatibility mode (options -y/--yacc) Bison now
    generates prototypes for yyerror and yylex if POSIXLY_CORRECT
    is set
  * -g/--graph now generates a *.gv file by default, instead of *.dot
  * Support for the YYPRINT macro is removed
  * The "lalr1.d" skeleton is now officially part of Bison
  * Option -H, --header and directive %header supersede
  - -defines and %defines, respectively
  * --html generates HTML reports directly in one step
  * A new C++ native GLR parser
  * Counterexamples now show the rule numbers, and always show ε
    for rules with an empty right-hand side
  * Support for Lookahead correction (LAC) in Java
  * User actions may now use YYNOMEM to abort the current parse
    with memory exhaustion
  * Support for custom error messages and location print macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637150400">- disable tests and profiling using tests on armv6l (boo#1192737)</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Remove profiling support. Bison's performance is not really key to
  rebuild cycles, but as bison is a bootstrap package, it's own build
  time can hurt - especially if it's not reproducible.</changelog>
</package>
<package pkgid="694a819a904246a7edeb7c1f1fc410ba52d2f5df701b6217a8aeb89dc39df5f3c68a5f18110873b603ab707ce721a894fd2c707f55557bfb949a1b0224c1dead" name="bison-32bit" arch="x86_64">
  <version epoch="0" ver="3.8.2" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1602590400">- GNU bison 3.7.3:
  * Fix concurrent build issues
  * The bison executable is no longer linked uselessly against
    libreadline
  * Fix incorrect use of yytname in glr.cc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605355200">- GNU bison 3.7.4:
  * In Yacc mode, YYEMPTY token was missing its macro definiton
  * Fix lalr1.cc skeleton internal assertions
  * Make macro YY_ASSERT obey the api.prefix %define variable
  * Work around C++ limitations for long assertions
  * The YYBISON macro in generated "regular C parsers" is now
    defined to the version of Bison as an integer</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1611489600">- GNU bison 3.7.5:
  * Fix crashes in counterexample generation
  * Fix Table Generation generating incorrect parsers when there
    are many useless tokens
  * GLR parsers now support %merge together with
    api.value.type=union
  * C++ parsers use noexcept in more places
  * Generated parsers avoid some warnings about signedness issues
  * C-language parsers now avoid warnings from pedantic clang</changelog>
  <changelog author="dmueller@suse.com" date="1611489601">- use https for sources</changelog>
  <changelog author="mpluskal@suse.com" date="1612872000">- Run tests in parallel</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- GNU bison 3.7.6:
  * Fix reused push parsers
  * Fix table generation</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move COPYING file into licenses subdirectory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633176000">- GNU bison 3.8.2
  * in Yacc compatibility mode (options -y/--yacc) Bison now
    generates prototypes for yyerror and yylex if POSIXLY_CORRECT
    is set
  * -g/--graph now generates a *.gv file by default, instead of *.dot
  * Support for the YYPRINT macro is removed
  * The "lalr1.d" skeleton is now officially part of Bison
  * Option -H, --header and directive %header supersede
  - -defines and %defines, respectively
  * --html generates HTML reports directly in one step
  * A new C++ native GLR parser
  * Counterexamples now show the rule numbers, and always show ε
    for rules with an empty right-hand side
  * Support for Lookahead correction (LAC) in Java
  * User actions may now use YYNOMEM to abort the current parse
    with memory exhaustion
  * Support for custom error messages and location print macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637150400">- disable tests and profiling using tests on armv6l (boo#1192737)</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Remove profiling support. Bison's performance is not really key to
  rebuild cycles, but as bison is a bootstrap package, it's own build
  time can hurt - especially if it's not reproducible.</changelog>
</package>
<package pkgid="a5999c186ab7ffa551771ce5bf3d6aed1ff71da0abc1748d0b659cc31666d751dff92c140f45c41611ccd06fce1db53ef8a94c81b858e8adcb038552ad4e7378" name="bison-lang" arch="noarch">
  <version epoch="0" ver="3.8.2" rel="160000.2.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1602590400">- GNU bison 3.7.3:
  * Fix concurrent build issues
  * The bison executable is no longer linked uselessly against
    libreadline
  * Fix incorrect use of yytname in glr.cc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605355200">- GNU bison 3.7.4:
  * In Yacc mode, YYEMPTY token was missing its macro definiton
  * Fix lalr1.cc skeleton internal assertions
  * Make macro YY_ASSERT obey the api.prefix %define variable
  * Work around C++ limitations for long assertions
  * The YYBISON macro in generated "regular C parsers" is now
    defined to the version of Bison as an integer</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1611489600">- GNU bison 3.7.5:
  * Fix crashes in counterexample generation
  * Fix Table Generation generating incorrect parsers when there
    are many useless tokens
  * GLR parsers now support %merge together with
    api.value.type=union
  * C++ parsers use noexcept in more places
  * Generated parsers avoid some warnings about signedness issues
  * C-language parsers now avoid warnings from pedantic clang</changelog>
  <changelog author="dmueller@suse.com" date="1611489601">- use https for sources</changelog>
  <changelog author="mpluskal@suse.com" date="1612872000">- Run tests in parallel</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615291200">- GNU bison 3.7.6:
  * Fix reused push parsers
  * Fix table generation</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move COPYING file into licenses subdirectory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1633176000">- GNU bison 3.8.2
  * in Yacc compatibility mode (options -y/--yacc) Bison now
    generates prototypes for yyerror and yylex if POSIXLY_CORRECT
    is set
  * -g/--graph now generates a *.gv file by default, instead of *.dot
  * Support for the YYPRINT macro is removed
  * The "lalr1.d" skeleton is now officially part of Bison
  * Option -H, --header and directive %header supersede
  - -defines and %defines, respectively
  * --html generates HTML reports directly in one step
  * A new C++ native GLR parser
  * Counterexamples now show the rule numbers, and always show ε
    for rules with an empty right-hand side
  * Support for Lookahead correction (LAC) in Java
  * User actions may now use YYNOMEM to abort the current parse
    with memory exhaustion
  * Support for custom error messages and location print macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637150400">- disable tests and profiling using tests on armv6l (boo#1192737)</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Remove profiling support. Bison's performance is not really key to
  rebuild cycles, but as bison is a bootstrap package, it's own build
  time can hurt - especially if it's not reproducible.</changelog>
</package>
<package pkgid="bae6e4b9aba7f5bef8725affc858660f47f62b551797a2c2cba02e950f3a145257132efc2fed3fb93db1e5ed1ca79b97e86518f17002fe22febda744071b4941" name="bitcoin-qt5" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.1.14"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671537600">- Update to version 24.0.1
  changelogs:
  * https://bitcoincore.org/en/releases/24.0.1/
  * https://bitcoincore.org/en/releases/23.0/
  * https://bitcoincore.org/en/releases/22.1/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
</package>
<package pkgid="c5ad4ec4ab64d45b3f71445b2de772f930926fd480c1dc5141875064a3e50fcfbb25c12f97df9b04f433a512fb9737c3f67c5ea6c63091ef4fd64b2a1b9654f9" name="bitcoin-qt5" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.2.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1782043200">- Reference the tracking bugs for CVEs already fixed in current bitcoin
  (the affected versions all predate the shipped release):
  * CVE-2018-20587 (boo#1125092)
  * CVE-2019-15947 (boo#1149711)
  * CVE-2020-14198 (boo#1181786)
  * CVE-2021-3195 (boo#1181784)
  * CVE-2023-37192 (boo#1217678)
  * CVE-2024-35202 (boo#1231507)</changelog>
</package>
<package pkgid="0f4d84d639323b7dc06ddd66933e506dd7baaba2b0ac24125fa65a9d4db5a628de9cf0775c26fbbea74bf76bdc6f0f78a276a975756f19e4af65484795edecf6" name="bitcoin-test" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.1.14"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671537600">- Update to version 24.0.1
  changelogs:
  * https://bitcoincore.org/en/releases/24.0.1/
  * https://bitcoincore.org/en/releases/23.0/
  * https://bitcoincore.org/en/releases/22.1/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
</package>
<package pkgid="366380028a2c11df4322c0949a39f4afefb07f3b68139429249604d68c20182c64b20187b3ad8a784f703ba0d37193d0b3aa8ce4cd7735f776bb70b5192f9395" name="bitcoin-test" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.2.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1782043200">- Reference the tracking bugs for CVEs already fixed in current bitcoin
  (the affected versions all predate the shipped release):
  * CVE-2018-20587 (boo#1125092)
  * CVE-2019-15947 (boo#1149711)
  * CVE-2020-14198 (boo#1181786)
  * CVE-2021-3195 (boo#1181784)
  * CVE-2023-37192 (boo#1217678)
  * CVE-2024-35202 (boo#1231507)</changelog>
</package>
<package pkgid="63ba421d6e2adbb6359f4feb027f6f3b026bab5a3a8a365d0a0a04f9e6bd032f994f5fb128448c465b929b1c3e116811f0157631fd8bf279c91bacc52b7b5734" name="bitcoin-utils" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.1.14"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671537600">- Update to version 24.0.1
  changelogs:
  * https://bitcoincore.org/en/releases/24.0.1/
  * https://bitcoincore.org/en/releases/23.0/
  * https://bitcoincore.org/en/releases/22.1/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
</package>
<package pkgid="f5391175896e874807bd76625dea8e0a353cc33075aebe17e7eb62b77db1b9261f30af76abf6b6762238037f1a9a7a474b9de13104997942bd57a4008198043e" name="bitcoin-utils" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.2.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1782043200">- Reference the tracking bugs for CVEs already fixed in current bitcoin
  (the affected versions all predate the shipped release):
  * CVE-2018-20587 (boo#1125092)
  * CVE-2019-15947 (boo#1149711)
  * CVE-2020-14198 (boo#1181786)
  * CVE-2021-3195 (boo#1181784)
  * CVE-2023-37192 (boo#1217678)
  * CVE-2024-35202 (boo#1231507)</changelog>
</package>
<package pkgid="a6a3d1e70fb215345bddd680ee2205d4b1d09a8f3aca39bb905d12431378cf2ede8ca6720044a9645b201d0123fe46ea2316020ac6ddb5182db9c927d0a14e1a" name="bitcoind" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.1.14"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671537600">- Update to version 24.0.1
  changelogs:
  * https://bitcoincore.org/en/releases/24.0.1/
  * https://bitcoincore.org/en/releases/23.0/
  * https://bitcoincore.org/en/releases/22.1/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
</package>
<package pkgid="e1c080bd16599311f589b9fb5698ad79d6d090250b1bce658c3823841dc319119dda36528e07da82b9d62b0b0eeb2f36d64566bad55ef97360c5c7ac7162cb41" name="bitcoind" arch="x86_64">
  <version epoch="0" ver="27.1" rel="bp160.2.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1680782400">- Add 392dc68e.patch: Fix build with gcc 13.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685534400">- Update to version 25.0:
  * doc: update release notes for 25.0
  * doc: update manual pages for 25.0
  * build: bump version to v25.0 final
  * doc: update manual pages for v25.0rc2
  * build: bump version to v25.0rc2
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * p2p: Avoid prematurely clearing download state for other peers
- Drop 392dc68e.patch</changelog>
  <changelog author="andrea.manzini@suse.com" date="1704456000">- Update to version 26.0:
  * doc: update release notes for 26.0
  * doc: update manual pages for 26.0
  * build: bump version to v26.0 final
  * doc: update release notes for v26.0rc3
  * doc: update manual pages for v26.0rc3
  * build: bump version to v26.0rc3
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * p2p: do not make automatic outbound connections to addnode peers
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * pool: change memusage_test to use int64_t, add allocation check
  * pool: make sure PoolAllocator uses the correct alignment
  * doc: regenerate example bitcoin.conf
  * doc: rewrite explanation for -par=
  * doc: update manual pages for v26.0rc2
  * build: bump version to v26.0rc2
  * gui: fix crash on selecting "Mask values" in transaction view
  * guix: update signapple
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * [test] Test i2p private key constraints
  * [net] Check i2p private key constraints
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * qt: 26.0rc2 translations update
  * doc: generate example bitcoin.conf for v26.0rc1
  * doc: generate manual pages for v26.0rc1
  * build: bump version to v26.0rc1
  * qt: 26.0rc1 translations update
  * doc: consolidate release note fragments
  * test: enable reindex readonly test on *BSD and macOS as root
  * ci: Add missing --external to podman image prune
  * Revert "gui: provide wallet controller context to wallet actions"
  * doc: add historical release notes for 24.2
  * chainparams, assumeutxo: Fix signet txoutset hash
  * chainparams, assumeutxo: Fix testnet txoutset hash
  * assumeutxo: Check deserialized coins for out of range values
  * docs: Add release notes for #28685
  * scripted-diff: Rename hash_serialized_2 to hash_serialized_3
  * coinstats: Fix hash_serialized2 calculation
  * fuzz: Increase merge -rss_limit_mb
  * refactor: Remove CBlockFileInfo::SetNull
  * build: Include `config/bitcoin-config.h` explicitly in `util/trace.h`
  * [fuzz] Delete i2p target
  * log: Don't log cache rebalancing in absense of a snapshot chainstate
  * test: De-dublicate/optimize assumeutxo test for further extensions
  * test: check au file with changed outpoint index
  * test: Check tx metadata is migrated to watchonly
  * wallet: Reload watchonly and solvables wallets after migration
  * wallet: Copy all tx metadata to watchonly wallet
  * build: move -fstack-reuse=none to CORE_CXXFLAGS
  * docs: Add reference to total.coverage report
  * test: Fix failing time check in rpc_net.py
  * test: Check that a failed wallet migration is cleaned up
  * doc: add historical release notes for 25.1
  * test: assumeutxo file with unknown block hash
  * test: Add assumeutxo test for wrong hash
  * assumeutxo: fail early if snapshot block hash doesn't match AssumeUTXO parameters
  * fuzz: Allow multiple --m_dir args
  * net: remove unused CConnman::FindNode(const CSubNet&amp;)
  * netbase: possibly change the result of LookupSubNet() to CJDNS
  * doc: add release note for #27460 (new `importmempool` RPC)
  * gui: disable top bar menu actions during shutdown
  * gui: provide wallet controller context to wallet actions
  * miniscript: make GetWitnessSize accurate for tapscript
  * test: add tests for miniscript GetWitnessSize
  * test: remove mutable global contexts in miniscript fuzzer/test
  * fuzz: Merge with -set_cover_merge=1
  * lint: Include test_utxo_snapshots in lint_shell
  * fuzz: add coverage for `bitcoinconsensus_verify_script_with_spent_outputs`
  * docs: add release notes for #28539
  * docs: add docs for additional libconsensus functions
  * docs: link to rust-bitcoinconsensus
  * lib: add Taproot support to libconsensus
  * test: fix `assert_debug_log` call-site bugs, add type checks
  * ci: always prune all dangling bitcoin-ci-test images
  * ci: Add missing CI_RETRY_EXE before git clone
  * ci: Export `IN_GETOPT_BIN` on macOS
  * Revert "ci: Upgrading pip version in macos environment"
  * ci: add label to docker images
  * test: Fuzz merge with -use_value_profile=0 for now
  * ci: Bump asan
  * ci: Drop no longer needed `NOLINTNEXTLINE`
  * tidy: modernize-use-emplace
  * test: Check snapshot file with wrong number of coins
  * refactor: Remove unused nchaintx from SnapshotMetadata constructor
  * test: don't run old binaries under valgrind
  * test: BIP324: add check for missing garbage terminator detection
  * doc: assumeutxo prune and index notes
  * ci: Install Android API 31 platform as Qt expects
  * test: Add Wallet Unlock Context Manager
  * test: Use pathlib over os.path #28362
  * build: add `-mbranch-protection=bti` to aarch64 hardening flags
  * devtools: test_utxo_snapshots.sh sleep cleanup and documentation
  * contrib: add test for macOS linker version to symbol-check
  * depends: update LD64_VERSION to 711
  * ci: use LLVM/Clang 17 in tidy job
  * ci: use LLVM 17.0.2 in MSAN jobs
  * test: check that loading snapshot not matching AssumeUTXO parameters fails
  * docs: fix typo
  * test: fix usdt undeclared function errors on mantis
  * test: Unit test for inferring scripts with hybrid and uncompressed keys
  * test: Scripts with hybrid pubkeys are migrated to watchonly
  * descriptors: Move InferScript's pubkey validity checks to InferPubkey
  * descriptors: Check result of InferPubkey
  * ci: move-only CI_CONTAINER_ID to 02_run_container.sh
  * ci: Work around podman stop bug
  * ci: Add set -ex to 02_run_container.sh
  * ci: Rename 04_install to 02_run_container
  * qt: Update translation source file for v26.0 string freeze
  * Adjust Gradle properties
  * miniscript: remove P2WSH-specific part of GetStackSize doc comment
  * qa: bound testing for TapMiniscript
  * miniscript: have a custom Node destructor
  * qa: Tapscript Miniscript signing functional tests
  * qa: list descriptors in Miniscript signing functional tests
  * script/sign: Miniscript support in Tapscript
  * MOVEONLY: script/sign: move Satisfier declaration above Tapscript signing
  * qa: functional test Miniscript inside Taproot descriptors
  * descriptor: parse Miniscript expressions within Taproot descriptors
  * descriptor: Tapscript-specific Miniscript key serialization / parsing
  * fuzz: miniscript: higher sensitivity for max stack size limit under Tapscript
  * qa: test Miniscript max stack size tracking
  * miniscript: check maximum stack size during execution
  * fuzz: adapt Miniscript targets to Tapscript
  * qa: Tapscript-Miniscript unit tests
  * pubkey: introduce a GetEvenCorrespondingCPubKey helper
  * miniscript: account for keys as being 32 bytes under Taproot context
  * miniscript: adapt resources checks depending on context
  * serialize: make GetSizeOfCompactSize constexpr
  * miniscript: sanity asserts context in ComputeType
  * miniscript: make 'd:' have the 'u' property under Tapscript context
  * miniscript: introduce a multi_a fragment
  * miniscript: restrict multi() usage to P2WSH context
  * miniscript: store the script context within the Node structure
  * miniscript: introduce a MsContext() helper to contexts
  * miniscript: don't anticipate signature presence in CalcStackSize()
  * miniscript: add a missing dup key check bypass in Parse()
  * gui: fix coin control input size accounting for taproot spends
  * gui: remove legacy wallet creation
  * rpc: Use Ensure(Any)Chainman in assumeutxo related RPCs
  * doc: Drop references to assumevalid in assumeutxo docs
  * test: Rename wait_until_helper to wait_until_helper_internal
  * chain: Rename HaveTxsDownloaded to HaveNumChainTxs
  * blockstorage: Let FlushChainstateBlockFile return true in case of missing cursor
  * validation, test: Improve and document nChainTx check for testability
  * doc: Add snapshot chainstate removal warning to reindexing documentation
  * test: Improvements of feature_assumeutxo
  * doc: Add and edit some comments around assumeutxo
  * validation: remove unused mempool param in DetectSnapshotChainstate
  * test: Use feerate higher than minrelay fee in wallet_fundraw
  * doc: update example pulls in release-process.md
  * github actions: Fix test-one-commit when parent of head is merge commit
  * wallet: No BDB creation, unless -deprecatedrpc=create_bdb
  * assumeutxo: change getchainstates RPC to return a list of chainstates
  * net: move MaybeFlipIPv6toCJDNS() from net to netbase
  * net: move IsReachable() code to netbase and encapsulate it
  * fuzz: ConsumeNetAddr(): avoid IPv6 addresses that look like CJDNS
  * net: put CJDNS prefix byte in a constant
  * test: display abrupt shutdown errors in console output
  * i2p: destroy the session if we get an unexpected error from the I2P router
  * i2p: also sleep after errors in Accept()
  * ci: Avoid cache depends/build
  * test: Bump walletpassphrase timeouts to avoid intermittent issues
  * headerssync: update params for 26.x
  * kernel: update m_assumed_* chain params for 26.x
  * kernel: update chainTxData for 26.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 26.x
  * qt: enable -ltcg for windows HOST
  * test: BIP324: add checks for v1 prefix matching / wrong network magic detection
  * gui: Add wallet name to address book page
  * ci: Only run functional tests on windows in master
  * tests: assumeutxo: accept final height from either chainstate
  * descriptors: disallow hybrid public keys
  * test: assumeutxo: avoid race in functional test
  * test: add wait_for_connect to BitcoinTestFramework.connect_nodes
  * net: raise V1_PREFIX_LEN from 12 to 16
  * build: Update qt package up to 5.15.10
  * [test] Make PeerManager's rng deterministic in tests
  * [net processing] FeeFilterRounder doesn't own a FastRandomContext
  * [net processing] Make fee filter rounder non-global
  * qt: Add "Session id" label to peer details
  * refactor: add and use EnsureAnyAddrman in rpc
  * doc: add release notes for #27511
  * rpc: `getaddrmaninfo` followups
  * typo: in packages.md
  * ci: Print Linux kernel info
  * http: bugfix: track closed connection
  * http: log connection instead of request count
  * http: refactor: use encapsulated HTTPRequestTracker
  * depends: fix unusable memory_resource in macos qt build
  * [net processing] Addr shuffle uses PeerManager's rng
  * [net processing] PushAddress uses PeerManager's rng
  * [net processing] PeerManager holds a FastRandomContext
  * qt: Add "Transport" label to peer details
  * doc: mention BIP324 support in bips.md
  * test: enable v2 transport between nodes in some functional tests
  * test: Functional test for opportunistic encryption
  * net: expose transport types/session IDs of connections in RPC and logs
  * net: reconnect with V1Transport under certain conditions
  * sync: modernize CSemaphore / CSemaphoreGrant
  * rpc: addnode arg to use BIP324 v2 p2p
  * net: use V2Transport when NODE_P2P_V2 service flag is present
  * rpc: don't report v2 handshake bytes in the per-type sent byte statistics
  * net: advertise NODE_P2P_V2 if CLI arg -v2transport is on
  * chainparams: add signet assumeutxo param at height 160_000
  * chainparams: add testnet assumeutxo param at height 2_500_000
  * test: getrawaddrman RPC
  * rpc: getrawaddrman for addrman entries
  * bench: drop NO_THREAD_SAFETY_ANALYSIS from disconnected_txs
  * doc: fix link to developer-notes.md file in multiprocess.md
  * [doc] add release note for submitpackage
  * [rpc] allow submitpackage to be called outside of regtest
  * [rpc] require package to be a tree in submitpackage
  * [txpackages] IsChildWithParentsTree()
  * [doc] parent pay for child in aggregate CheckFeeRate
  * test: add coverage to feature_addrman.py
  * doc: add note about confusing HaveTxsDownloaded name
  * contrib: add script to demo/test assumeutxo
  * test: add feature_assumeutxo functional test
  * rpc: add getchainstates
  * refuse to activate a UTXO snapshot if mempool not empty
  * rpc: add loadtxoutset
  * validation: do not activate snapshot if behind active chain
  * validation: assumeutxo: swap m_mempool on snapshot activation
  * blockstorage: segment normal/assumedvalid blockfiles
  * validation: populate nChainTx value for assumedvalid chainstates
  * test: adjust chainstate tests to use recognized snapshot base
  * validation: pruning for multiple chainstates
  * validation: indexing changes for assumeutxo
  * net_processing: validationinterface: ignore some events for bg chain
  * wallet: validationinterface: only handle active chain notifications
  * validationinterface: only send zmq notifications for active
  * validation: pass ChainstateRole for validationinterface calls
  * validation: only call UpdatedBlockTip for active chainstate
  * validation: add ChainstateRole
  * validation: MaybeRebalanceCaches when chain leaves IBD
  * chainparams: add blockhash to AssumeutxoData
  * assumeutxo: remove snapshot during -reindex{-chainstate}
  * bugfix: correct is_snapshot_cs in VerifyDB
  * net_processing: Request assumeutxo background chain blocks
  * Add instructions for headerssync-params.py to release-process.md
  * Update parameters in headerssync.cpp
  * Add headerssync-params.py script to the repository
  * lint: fix custom mypy cache dir setting
  * Add package evaluation fuzzer
  * key: don't allocate secure mem for null (invalid) key
  * Add make_secure_unique helper
  * wallet: Add TxStateString function for debugging and logging
  * tests: Use manual bumps instead of bumpfee for resendwallettransactions
  * test: Avoid test failure on Linux root without cap-add LINUX_IMMUTABLE
  * build, macos: Fix `qt` package build with new Xcode 15 linker
  * net: Simplify v2 recv logic by decoupling AAD from state machine
  * net: Drop v2 garbage authentication packet
  * test: Test loading wallets with conflicts without a chain
  * wallet: Check last block and conflict height are valid in MarkConflicted
  * rpc: bumpfee, improve doc for 'reduce_output' arg
  * ci: Install Homebrew's `pkg-config` package
  * bench: Add SHA256 implementation specific benchmarks
  * Add ability to specify SHA256 implementation for benchmark purposes
  * doc: Be vague instead of wrong about MALLOC_ARENA_MAX
  * test: add unit test coverage for Python ECDSA implementation
  * Add functional test to catch too large vsize packages
  * Handle over-sized (in virtual bytes) packages with no in-mempool ancestors
  * Bugfix: Pass correct virtual size to CheckPackageLimits
  * Replace MAX_PACKAGE_SIZE with MAX_PACKAGE_WEIGHT to avoid vbyte confusion
  * test: add functional test for getaddrmaninfo
  * ci: Use nproc over MAKEJOBS in 01_base_install
  * Remove SER_GETHASH, hard-code client version in CKeyPool serialize
  * Remove CHashWriter type
  * Remove unused GetType() from OverrideStream, CVectorWriter, SpanReader
  * Add regression test for m_limit mutation
  * contrib/bash-completions: use package naming conventions
  * fuzz: Add missing PROVIDE_FUZZ_MAIN_FUNCTION guard to __AFL_FUZZ_INIT
  * rpc: Introduce getaddrmaninfo for count of addresses stored in new/tried table
  * ci: Reintroduce fixed "test-each-commit" job
  * doc: add release note
  * test: check `descriptorprocesspsbt` return hex encoded tx
  * rpc: `descriptorprocesspsbt` return hex encoded tx
  * Refactor: Replace 'isMockableChain' with inline 'ChainType' check for 'submitpackage'
  * build: remove dmg dependencies
  * macdeploy: remove DMG generation from deploy script
  * build: produce a .zip for macOS distribution
  * build: add -zip option to macdeployqtplus
  * Return CAutoFile from BlockManager::Open*File()
  * Make BufferedFile to be a CAutoFile wrapper
  * refactor: Drop unused fclose() from BufferedFile
  * tests: fix incorrect assumption in v2transport_test
  * Remove MemPoolAccept::m_limits, only have local copies for carveouts
  * doc: Remove confusing assert linter
  * test: cover read-only blockstore
  * [fuzz] Don't use afl++ deferred forkserver mode
  * build: use _LIBCPP_ENABLE_DEBUG_MODE over ENABLE_ASSERTIONS
  * Revert "Merge bitcoin/bitcoin#28279: ci: Add test-each-commit task"
  * ci: use LLVM 17.0.0 in MSAN jobs
  * scripted-diff: use SER_PARAMS_OPFUNC
  * serialize: add SER_PARAMS_OPFUNC
  * serialize: specify type for ParamsWrapper not ref
  * serialize: move ser_action functions out of global namespace
  * Amend bumpfee for inputs with overlapping ancestry
  * Bump unconfirmed parent txs to target feerate
  * coinselection: Move GetSelectionWaste into SelectionResult
  * [node] interface to get bump fees
  * Make MiniMinerMempoolEntry fields private
  * Remove unused imports
  * Fix calculation of ancestor set feerates in test
  * Match tx names to index in miniminer overlap test
  * [test] mempool coins disappearing mid-package evaluation
  * [refactor] split setup in mempool_limit test
  * [test framework] add ability to spend only confirmed utxos
  * [validation] don't LimitMempoolSize in any subpackage submissions
  * [validation] return correct result when already-in-mempool tx gets evicted
  * [refactor] back-fill results in AcceptPackage
  * [validation] make PackageMempoolAcceptResult members mutable
  * [validation] add AcceptSubPackage to delegate Accept* calls and clean up m_view
  * [CCoinsViewMemPool] track non-base coins and allow Reset
  * [policy] check for duplicate txids in package
  * fuzz: Rework addr fuzzing
  * fuzz: Drop unused params from serialize helpers
  * make DisconnectedBlockTransactions responsible for its own memory management
  * MOVEONLY: DisconnectedBlockTransactions to its own file
  * rewrite DisconnectedBlockTransactions as a list + map
  * ci: clang-17 for fuzz and tsan
  * Do not use std::vector = {} to release memory
  * add std::list to memusage
  * [bench] DisconnectedBlockTransactions
  * [refactor] Remove compat.h from kernel headers
  * [refactor] Remove netaddress.h from kernel headers
  * [refactor] Add CChainParams member to CConnman
  * [refactor] Add missing includes for next commit
  * kernel: Move MessageStartChars to its own file
  * [refactor] Define MessageStartChars as std::array
  * [refactor] Allow std::array&lt;std::byte, N&gt; in serialize.h
  * gui: macOS, make appMenuBar part of the main app window
  * wallet: Use CTxDestination in CRecipient rather than scriptPubKey
  * Add PubKeyDestination for P2PK scripts
  * Allow CNoDestination to represent a raw script
  * Make WitnessUnknown members private
  * [fuzz] Use afl++ shared-memory fuzzing
  * doc: Clarify that -fstack-reuse=all bugs exist on all versions of GCC
  * scripted-diff: Rename CBufferedFile to BufferedFile
  * Remove unused GetType() from CBufferedFile and CAutoFile
  * dbwrapper: Use DataStream for batch operations
  * qt: Silence `-Wcast-function-type` warning
  * rpc: Deprecate rpcserialversion=0
  * doc: fix typos and mistakes in BIP324 code comments
  * net: do not use send buffer to store/cache garbage
  * net: merge V2Transport constructors, move key gen
  * gui: macOS, do not process dock icon actions during shutdown
  * refactor: remove clientversion include from dbwrapper.h
  * refactor: Use DataStream now that version/type are unused
  * Remove version/hashing options from CBlockLocator/CDiskBlockIndex
  * index: add [nodiscard] attribute to functions writing to the db
  * consensus/validation.h: remove needless GetTransactionOutputWeight helper
  * [refactor] batch-add transactions to DisconnectedBlockTransactions
  * index: coinstats reorg, fail when block cannot be reversed
  * net: detect wrong-network V1 talking to V2Transport
  * test: add unit tests for V2Transport
  * net: make V2Transport preallocate receive buffer space
  * net: make V2Transport send uniformly random number garbage bytes
  * net: add short message encoding/decoding support to V2Transport
  * net: make V2Transport auto-detect incoming V1 and fall back to it
  * net: add V2Transport class with subset of BIP324 functionality
  * crypto: Spanify EllSwiftPubKey constructor
  * net: remove unused Transport::SetReceiveVersion
  * net: add have_next_message argument to Transport::GetBytesToSend()
  * doc: s/--no-substitute/--no-substitutes in guix/INSTALL
  * doc: add release note for PR #28414
  * test: remove unnecessary finalizepsbt rpc calls
  * depends: cctools 986 &amp; ld64 711
  * depends: libtapi 1300.0.6.5
  * ci: enable chattr +i capability inside containers
  * unit test: add coverage for BlockManager
  * fuzz: introduce and use `ConsumePrivateKey` helper
  * wallet rpc: return final tx hex from walletprocesspsbt if complete
  * test: remove unused variables in `p2p_invalid_block`
  * test: Combine sync_send_with_ping and sync_with_ping
  * Remove unused legacy CHashVerifier
  * test: add tests that exercise WithParams()
  * Use serialization parameters for CAddress serialization
  * Squashed 'src/secp256k1/' changes from c545fdc374..199d27cea3
  * ci: Limit test-each-commit to --max-count=6
  * ci: Add test-each-commit task
  * ci: Bump `actions/checkout` version
  * test: p2p: check that `getaddr` msgs are only responded once per connection
  * test: remove fixed timeouts from feature_config_args
  * ci: Avoid saving the same Ccache cache
  * ci: Avoid oversubscription in functional tests on Windows
  * qt: Update translation source file
  * qt: Bump Transifex slug for 26.x
  * qt: Translation updates from Transifex
  * blockstorage: Return on fatal undo file flush error
  * blockstorage: Return on fatal block file flush error
  * blockstorage: Mark FindBlockPos as nodiscard
  * Refactor: Remove m_is_test_chain
  * fuzz: add ConstructPubKeyBytes function
  * build: use -muse-unaligned-vector-move for Windows
  * doc: Fill in the required skills in the good_first_issue template
  * ci, windows: Do not run extended functional tests for pull requests
  * guix: remove GCC 10 workaround from NSIS
  * ci: Asan with -ftrivial-auto-var-init=pattern
  * [doc] move comment about AlreadyHaveTx DoS score to the right place
  * [log] add more logs related to orphan handling
  * [log] add category TXPACKAGES for orphanage and package relay
  * [log] include wtxid in tx {relay,validation,orphanage} logging
  * Support for serialization parameters
  * Rename CSerAction* to Action*
  * Replace READWRITEAS macro with AsBase wrapping function
  * test: improve sock_tests/move_assignment
  * doc: Release notes for testnet defaulting to -acceptnonstdtxn=0
  * config: default acceptnonstdtxn=0 on all chains
  * ci: Remove unused TEST_RUNNER_ENV="LC_ALL=C" from s390x task
  * ci: Remove /ro_base bind mount
  * doc: Remove sudo from command that is already run as root
  * test: Support powerpc64le in get_previous_releases.py
  * log: Print error message when coindb is in inconsistent state
  * guix: use clang-toolchain-15 for macOS compilation
  * depends: use LLVM/Clang 15.0.6 for macOS cross-compile
  * script: replace deprecated pkg_resources with importlib.metadata
  * refactor: Use HashWriter over legacy CHashWriter (via SerializeHash)
  * refactor: Use HashWriter over legacy CHashWriter
  * ci: Run "Win64 native" job on GitHub Actions
  * net: remove Sock default constructor, it's not necessary
  * net: remove now unnecessary Sock::Get()
  * wallet: accurately account for the size of the witness stack
  * wallet: use descriptor satisfaction size to estimate inputs size
  * script/signingprovider: introduce a MultiSigningProvider
  * descriptor: introduce a method to get the satisfaction size
  * miniscript: introduce a helper to get the maximum witness size
  * miniscript: make GetStackSize independent of P2WSH context
  * net: don't check if the socket is valid in ConnectSocketDirectly()
  * net: don't check if the socket is valid in GetBindAddress()
  * i2p: avoid using Sock::Get() for checking for a valid socket
  * rpc: Add MaybeArg() and Arg() default helper
  * guix: drop Windows broken-longjmp.patch
  * guix: drop NSIS patch now that we use 3.09
  * guix: use cross-* keyword arguments
  * guix: update time-machine to 160f78a4d92205df986ed9efcce7d3aac188cb24
  * guix: update python-oscrypto to 1.3.0
  * guix: backport glibc patch to fix powerpc build
  * test: previous releases: speed up fetching sources with shallow clone
  * refactor: make Transport::ReceivedBytes just return success/fail
  * net: move message conversion to wire bytes from PushMessage to SocketSendData
  * net: measure send buffer fullness based on memory usage
  * fuzz: add bidirectional fragmented transport test
  * net: make V1Transport implicitly use current chainparams
  * net: abstract sending side of transport serialization further
  * refactor: rename Transport class receive functions
  * net: add V1Transport lock protecting receive state
  * refactor: merge transport serializer and deserializer into Transport class
  * test: roundtrip wallet backwards compat downgrade
  * test: Add 25.0 to wallet backwards compatibiilty test
  * test: Run upgrade test on all nodes
  * test: Run downgrade test on descriptor wallets
  * test: Add 0.21 tr() incompatibility test
  * test: add logging 0.17 incompatibilities in wallet back compat
  * test: Refactor v19 addmultisigaddress test to be distinct
  * test: Remove w1_v18 from wallet backwards compatibility
  * test: Fix 0.16 wallet paths and downgrade test
  * ci: Add missing docker.io prefix to CI_IMAGE_NAME_TAG
  * fuzz: coinselection, fix `m_cost_of_change`
  * fuzz: coinselection, BnB should never produce change
  * fuzz: coinselection, compare `GetSelectedValue` with target
  * fuzz: coinselection, improve `ComputeAndSetWaste`
  * fuzz: coinselection, add coverage for `Merge`
  * fuzz: coinselection, add coverage for `GetShuffledInputVector`/`GetInputSet`
  * fuzz: coinselection, add coverage for `AddInputs`
  * ci: Remove no longer applicable section
  * ci: Start with clean env
  * ci: Limit scope of some env vars
  * test: wallet_backup.py, fix intermittent failure in "restore using dumped wallet"
  * Update help text for spend and rawtransaction rpcs
  * test: add functional test for deadlock situation
  * fuzz: coinselection, add coverage for `EligibleForSpending`
  * fuzz: coinselection, add `CreateCoins`
  * test: add basic tests for sendmsgtopeer to rpc_net.py
  * rpc: add test-only sendmsgtopeer rpc
  * guix: consolidate Linux GCC package
  * guix: consolidate glibc 2.27 package
  * ci: Use concurrency for pull requests only
  * test: Fix intermittent issue in mempool_reorg
  * test: Support riscv64 in get_previous_releases.py
  * test: fix 'unknown named parameter' test in `wallet_basic`
  * ci: Disable cache save for pull requests in GitHub Actions
  * test: ensure acceptstalefeeestimates is supported only on regtest chain
  * assumeutxo cleanup: Move IsInitialBlockDownload &amp; NotifyHeaderTip to ChainstateManager
  * ci: Remove distro-name from task name
  * ci: Switch remaining tasks to self-hosted
  * ci: Add missing amd64 to win64-cross task
  * ci: Add missing ${CI_RETRY_EXE} before curl
  * guix: pre time-machine bump changes (Windows)
  * Remove unused includes from wallet.cpp
  * doc, refactor: Changing -torcontrol help to specify that a default port is used
  * removed StrFormatInternalBug quote delimitation
  * rpc: remove one more quote from non-string oneline description
  * crypto: make ChaCha20::SetKey wipe buffer
  * tests: miscellaneous hex / std::byte improvements
  * fuzz: support std::byte in Consume{Fixed,Variable}LengthByteVector
  * crypto: require key on ChaCha20 initialization
  * random: simplify FastRandomContext::randbytes using fillrand
  * crypto: refactor ChaCha20 classes to use Span&lt;std::byte&gt; interface
  * Remove unused includes from blockfilter.h
  * Make post-p2sh consensus rules mandatory for tx relay
  * doc, policy: Clarify comment on STANDARD_SCRIPT_VERIFY_FLAGS
  * move-only: Create src/kernel/mempool_removal_reason.h
  * Remove unused includes from txmempool.h
  * Refactor: Remove confusing static_cast
  * refactor: Add missing includes
  * ci: Refactor: Remove CI_USE_APT_INSTALL
  * ci: Ensure that only a single workflow processes `github.ref` at a time
  * tx fees, policy: doc: update and delete unnecessary comment
  * bitcoin-tidy: Apply bitcoin-unterminated-logprintf to spkm as well
  * refactor: Enable all clang-tidy plugin bitcoin tests
  * ci: Avoid error on macOS native
  * ci: Fix macOS-cross SDK rsync
  * refactor: Remove PERSISTENT_WORKER_* yaml templates
  * refactor: add missing headers for BIP324 ciphersuite
  * Rename script/standard.{cpp/h} to script/solver.{cpp/h}
  * Clean up script/standard.{h/cpp} includes
  * Clean up things that include script/standard.h
  * MOVEONLY: Move datacarrier defaults to policy.h
  * Move CTxDestination to its own file
  * Move Taproot{SpendData/Builder} to signingprovider.{h/cpp}
  * Move CScriptID to script.{h/cpp}
  * Remove ScriptHash from CScriptID constructor
  * Move MANDATORY_SCRIPT_VERIFY_FLAGS from script/standard.h to policy/policy.h
  * ci: Drop no longer needed `macos_sdk_cache`
  * [functional test] transaction orphan handling
  * [test framework] make it easier to fast-forward setmocktime
  * crypto: BIP324 ciphersuite follow-up
  * gui: make '-min' minimize wallet loading dialog
  * test: check backup from `migratewallet` can be successfully restored
  * fuzz: coins_view: remove an incorrect assertion
  * bitcoin-tidy: fix macOS build
  * test: wallet, verify migration doesn't crash for an invalid script
  * wallet: disallow migration of invalid or not-watched scripts
  * test: locked_wallet, skip default fee estimation
  * doc: use llvm-config for bitcoin-tidy example
  * doc: Improve documentation of rpcallowip rpchelp
  * ci: Move tidy to persistent worker
  * ci: Use hard-coded root path for CI containers
  * ci: Only create folders when needed
  * ci: Drop BASE_SCRATCH_DIR from LIBCXX_DIR
  * ci: Run "macOS native x86_64" job on GitHub Actions
  * Sort includes in compat.h
  * remove unused limits.h include in compat.h
  * Replace LocaleIndependentAtoi with ToIntegral
  * iwyu on torcontrol
  * Remove unused boost signals2 from torcontrol
  * refactor: Enforce C-str fmt strings in WalletLogPrintf()
  * doc: Fix bitcoin-unterminated-logprintf tidy comments
  * ci: Use qemu-user through container engine
  * doc: remove Fedora libdb4-*-devel install docs
  * mempool_entry: improve struct packing
  * test: add bip157 coverage for (start height &gt; stop height) disconnect
  * test: check for specific disconnect reasons in p2p_blockfilters.py
  * Add importmempool RPC
  * refactor: Add and use kernel::ImportMempoolOptions
  * doc: Clarify the getmempoolinfo.loaded RPC field documentation
  * Remove Chainstate::LoadMempool
  * refactor: Correct dbwrapper key naming
  * build: Remove leveldb from BITCOIN_INCLUDES
  * refactor: Move CDBWrapper leveldb members to their own context struct
  * refactor: Split dbwrapper CDBWrapper::EstimateSize implementation
  * refactor: Move HandleError to dbwrapper implementation
  * refactor: Split dbwrapper CDBWrapper::Exists implementation
  * refactor: Fix logging.h includes
  * refactor: Split dbwrapper CDBWrapper::Read implementation
  * refactor: Pimpl leveldb::Iterator for CDBIterator
  * refactor: Split dbwrapper CDBIterator::GetValue implementation
  * refactor: Split dbwrapper CDBIterator::GetKey implementation
  * refactor: Split dbwrapper CDBIterator::Seek implementation
  * refactor: Pimpl leveldb::batch for CDBBatch
  * refactor: Split dbwrapper CDBatch::Erase implementation
  * refactor: Split dbwrapper CDBBatch::Write implementation
  * fuzz: coins_view: correct an incorrect assertion
  * p2p: network-specific management of outbound connections
  * test: Add test for outbound protection by network
  * p2p: Protect extra full outbound peers by network
  * doc: Add release note
  * p2p: Introduce data struct to track connection counts by network
  * tidy: Integrate bicoin-tidy clang-tidy plugin
  * refactor: fix unterminated LogPrintf()s
  * lint: remove  /* Continued */ markers from codebase
  * lint: remove lint-logs.py
  * lint: drop DIR_IWYU global
  * scripted-diff: Specify Python major version explicitly on Windows
  * net_processing: Clean up INVENTORY_BROADCAST_MAX constants
  * test: Check tx from disconnected block is immediately requestable
  * net_processing: don't add txids to m_tx_inventory_known_filter
  * net_processing: drop m_recently_announced_invs bloom filter
  * refactor: use "if constexpr" in std::vector's Unserialize()
  * refactor: use "if constexpr" in std::vector's Serialize()
  * refactor: use "if constexpr" in prevector's Unserialize()
  * refactor: use "if constexpr" in prevector's Serialize()
  * refactor: use fold expressions instead of recursive calls in UnserializeMany()
  * refactor: use fold expressions instead of recursive calls in SerializeMany()
  * validation: when adding txs due to a block reorg, allow immediate relay
  * mempool_entry: add mempool entry sequence number
  * qa: Close SQLite connection properly
  * doc: make it clear that `node` in `addnode` refers to the node's address
  * test: `addnode` with an invalid command should throw an error
  * rpc, refactor: clean-up `addnode`
  * scripted-diff: Rename CBlockTreeDB -&gt; BlockTreeDB
  * refactor: Wrap DestroyDB in dbwrapper helper
  * ci: Add missing linux-headers package to ASan task
  * ci: Move ASan USDT to persistent_worker
  * Fixup style of moved code
  * move-only: Move CBlockTreeDB to node/blockstorage
  * index: Drop legacy -txindex check
  * scripted-diff: Use blocks_path where possible
  * script: update flake8 to 6.1.0
  * test: python E721 updates
  * Remove unused MessageStartChars parameters from BlockManager methods
  * ci: Use documented `CCACHE_MAXSIZE` instead of `CCACHE_SIZE`
  * qa, doc: Fix comment
  * test: remove redundant test values
  * test: use common assert_signing_completed_successfully helper
  * test: add coverage for passing an invalid sighashtype
  * Remove unused raw-pointer read helper from univalue
  * refactor: Revert addition of univalue sighash string check
  * doc: Correct release-notes for sighashtype exceptions
  * tests: add decryption test to bip324_tests
  * Add BIP324Cipher, encapsulating key agreement, derivation, and stream/AEAD ciphers
  * crypto: support split plaintext in ChaCha20Poly1305 Encrypt/Decrypt
  * bench: add benchmark for FSChaCha20Poly1305
  * crypto: add FSChaCha20Poly1305, rekeying wrapper around ChaCha20Poly1305
  * crypto: add FSChaCha20, a rekeying wrapper around ChaCha20
  * crypto: add the ChaCha20Poly1305 AEAD as specified in RFC8439
  * crypto: remove outdated variant of ChaCha20Poly1305 AEAD
  * test: remove unused `totalOut` code
  * test: remove unecessary `decoderawtransaction` calls
  * net processing: clamp -blockreconstructionextratxn to uint32_t bounds
  * net processing: clamp -maxorphantx to uint32_t bounds
  * doc: document PeerManager::Options members
  * test: refactor: deduplicate segwitv0 ECDSA signing for tx inputs
  * kernel: Remove Univalue from kernel library
  * kernel: Split ParseSighashString
  * test: Avoid intermittent issues due to async events in validationinterface_tests
  * test: drop duplicate getaddrs from p2p_getaddr_caching
  * test: fix intermittent failure in p2p_getaddr_caching
  * scripted-diff: Use blocks_path where possible
  * test: Add blocks_path property to TestNode
  * test: Drop 22.x node from TxindexCompatibilityTest
  * refactor: deduplicate ignores_incoming_txs
  * refactor: set ignore_incoming_txs in ApplyArgsManOptions
  * test: Use clean chain in MempoolCompatibilityTest
  * doc: misc changes in release-process
  * suppressions: note that 'type:ClassName::MethodName' should be used
  * doc: filter out merge-script from list of authors
  * doc: remove generate changelog section from release-process.md
  * doc: remove note to update bips.md version number
  * valgrind: add suppression for bug 472219
  * Don't derive secure_allocator from std::allocator
  * Remove unused function `reliesOnAssumedValid`
  * Cache block index entry corresponding to assumeutxo snapshot base blockhash
  * Move CheckBlockIndex() from Chainstate to ChainstateManager
  * Documentation improvements for assumeutxo
  * Fix initialization of setBlockIndexCandidates when working with multiple chainstates
  * Tighten requirements for adding elements to setBlockIndexCandidates
  * [net processing] Move -capturemessages to PeerManager::Options
  * [net processing] Move -blockreconstructionextratxn to PeerManager::Options
  * [net processing] Move -maxorphantx to PeerManager::Options
  * [net processing] Move -txreconciliation to PeerManager::Options
  * [net processing] Use ignore_incoming_txs from m_opts
  * [net processing] Introduce PeerManager options
  * ci: Keep system env vars as-is
  * ci: Set PATH inside the CI env
  * ci: Remove P_CI_DIR and --workdir
  * test: create wallet specific for test_locked_wallet case
  * refactor: Use reinterpret_cast where appropriate
  * refactor: Avoid casting away constness
  * refactor: Remove unused C-style casts
  * Add UBSan `-fsanitize=integer` suppressions for `src/secp256k1` subtree
  * fuzz: use `ConnmanTestMsg` in `connman`
  * refactor: Make more transaction size variables signed
  * fuzz: Re-enable symbolize=1 in ASAN_OPTIONS
  * RPC/Mining: Document template_request better for getblocktemplate
  * RPC/rpcdoccheck: Error if a oneline_description has a quote for a non-string
  * Bugfix: RPC: Remove quotes from non-string oneline descriptions
  * fuzz: increase coverage of the descriptor targets
  * fuzz: add a new, more efficient, descriptor parsing target
  * Move block-storage-related logic to ChainstateManager
  * refactor: Use EnsureAnyNodeContext
  * test: Add SyncWithValidationInterfaceQueue to mockscheduler RPC
  * fuzz: make the parsed descriptor testing into a function
  * Rework receive buffer pushback
  * test: wallet, add coverage for watch-only raw sh script migration
  * descriptor: InferScript, do not return top-level only func as sub descriptor
  * doc: correct Fedora systemtap dep
  * lint: Ignore check_fileopens failure on **kwargs
  * test: Ignore UTF-8 errors in assert_debug_log
  * test: Fix debug_log_size helper
  * Inline short, often-called, rarely-changed basic CNetAddr getters
  * Convert GetLocal() to std::optional and remove out-param
  * Use higher-level CNetAddr and CNode helpers in net.cpp
  * Add CNetAddr::IsPrivacyNet() and CNode::IsConnectedThroughPrivacyNet()
  * test: fix intermittent failure in wallet_resendwallettransactions.py
  * GetLocal() type-safety, naming, const, and formatting cleanups
  * Add and use CNetAddr::HasCJDNSPrefix() helper
  * Move GetLocal() declaration from header to implementation
  * Move CaptureMessageToFile() declaration from header to implementation
  * Move IsPeerAddrLocalGood() declaration from header to implementation
  * test: cover addrv2 support in anchors.dat with a TorV3 address
  * streams: Teach AutoFile how to XOR
  * lint: Add missing `set -ex` to ci/lint/06_script.sh
  * doc: Add doc comment to ci/test_imagefile
  * test: fix feature_init.py file perturbation
  * contrib: move user32.dll from bitcoind.exe libs
  * init: abort loading of blockindex in case of missing height.
  * build: adapt Windows builds for libsecp256k1 build changes
  * Squashed 'src/secp256k1/' changes from 705ce7ed8c..c545fdc374
  * ci: document that -Wreturn-type has been fixed upstream (Windows)
  * depends: xcb-proto 1.15.2
  * clang-tidy: turn on modernize-use-noexcept
  * validation: use noexcept instead of deprecated throw()
  * test: Disable known broken USDT test
  * refactor: use Span for SipHash::Write
  * fuzz: Bump FuzzedDataProvider.h
  * doc: update windows -fstack-clash-protection doc
  * ci: Use DOCKER_BUILDKIT for lint image
  * test: Clear block index flags when testing snapshots
  * Update CheckBlockIndex invariants for chains based on an assumeutxo snapshot
  * Add wrapper for adding entries to a chainstate's block index candidates
  * Move block-arrival information / preciousblock counters to ChainstateManager
  * test: Add helper functions for checking node versions
  * Remove CChain dependency in node/blockstorage
  * Explicitly track maximum block height stored in undo files
  * Added `longpollid` and `data` params to `template_request` #27998
  * scripted-diff: Use new FUZZ_TARGET macro everywhere
  * fuzz: Accept options in FUZZ_TARGET macro
  * Add AutoFile::detail_fread member function
  * refactor: Modernize AutoFile
  * Switch all callers from poly1305_auth to Poly1305 class
  * tests: add more Poly1305 test vectors
  * crypto: add Poly1305 class with std::byte Span interface
  * crypto: switch poly1305 to incremental implementation
  * fuzz: Generate process_message targets individually
  * ci: Add missing -O2 to valgrind tasks
  * guix: backport glibc patch to prevent redundant librt link
  * contrib: remove librt from release deps
  * build: remove check for gettimeofday &amp; librt
  * doc: Remove comments that just repeat what the code does
  * refactor: Remove redundant file check from AutoFile shift operators
  * Extract util::Xor, Add key_offset option, Add bench
  * refactor: Remove duplicate allNetMessageTypesVec
  * kernel: Remove StartShutdown calls from validation code
  * wallet: loading, log descriptor parsing error details
  * refactor: Move stopafterblockimport handling out of blockstorage
  * test: indexes, fix on error infinite loop
  * test: add keep_alive option to socks5 proxy in test_framework
  * test: cover TorV3 address in p2p_addrv2_relay
  * test: add support for all networks in CAddress in messages.py
  * index: verify blocks data existence only once
  * init: don't start indexes sync thread prematurely
  * refactor: simplify pruning violation check
  * make GetFirstStoredBlock assert that 'start_block' always has data
  * refactor: index, decouple 'Init' from 'Start'
  * test: Check expected_stderr after stop
  * test: add ChaCha20 test triggering 32-bit block counter overflow
  * test: make assumeUTXO test capture the expected fatal error
  * refactor: init indexes, decouple 'Start()' from the creation step
  * doc: describe 'init load' thread actions
  * scripted-diff: rename 'loadblk' thread name to 'initload'
  * init: start indexes sync earlier
  * tests: improve ChaCha20 unit tests
  * crypto: Implement RFC8439-compatible variant of ChaCha20
  * wallet: bdb: include bdb header from our implementation files only
  * wallet: bdb: don't use bdb define in header
  * wallet: bdb: move BerkeleyDatabase constructor to cpp file
  * wallet: bdb: move SafeDbt to cpp file
  * wallet: bdb: move SpanFromDbt to below SafeDbt's implementation
  * test: miner: add coverage for `-blockmintxfee` setting
  * wallet: bdb: move TxnBegin to cpp file since it uses a bdb function
  * wallet: bdb: drop default parameter
  * wallet: sqlite: force sqlite3.h to be included by the cpp files
  * test: wallet, add coverage for addressbook migration
  * wallet: migration bugfix, persist empty labels
  * wallet: migration bugfix, clone 'send' record label to all wallets
  * test: remove race in the user-agent reception check
  * test: Restore unlimited timeout in IndexWaitSynced
  * ci: Print full lscpu output
  * ci: Remove deprecated container.greedy
  * gui: send, left alignment for "bytes" and "change" label
  * Fix RPCConsole wallet selection
  * qt: remove confusing "Dust" label from coincontrol / sendcoins dialog
  * test: refactor: deduplicate legacy ECDSA signing for tx inputs
  * docs: fixup honggfuzz patch
  * descriptor: assert we never parse a sane miniscript with no pubkey
  * qa: make sure we don't let unspendable Miniscript descriptors be imported
  * descriptor: refuse to parse unspendable miniscript descriptors
  * Consolidate Win32-specific error formatting
  * Show descriptive error messages when FileCommit fails
  * ci: re-enable gui tests for s390x
  * doc: Fix verify-binaries link in contrib README
  * Allow std::byte serialization
  * Allow FastRandomContext::randbytes for all byte types
  * script: appease spelling linter
  * script: update ignored-words.txt
  * script: update linter dependencies
  * test: fix PEP484 no implicit optional argument types errors
  * script, test: add missing python type annotations
  * test: add ellswift test vectors from BIP324
  * test: Add ellswift unit tests
  * test: Add python ellswift implementation to test framework
  * test: Rename EncodeDecimal to serialization_fallback
  * refactor: remove in-code warning suppression
  * contrib: add macOS fixup_chains check to security-check
  * ci: filter all subtrees from tidy output
  * build: support -no_fixup_chains in ld64
  * miniscript: make GetStackSize() and GetOps() return optionals
  * Remove now-unnecessary poll, fcntl includes from net(base).cpp
  * refactor: Drop unsafe AsBytePtr function
  * fuzz: Generate rpc fuzz targets individually
  * test: add coverage for descriptor ID
  * wallet: bugfix, always use apostrophe for spkm descriptor ID
  * refactor: extract descriptor ID calculation from spkm GetID()
  * wallet: do not allow loading descriptor with an invalid ID
  * guix: Specify symbols in modules explicitly
  * guix: Drop unneeded modules
  * guix: Unify fetch methods
  * test: Use same timeout for all index sync
  * ci: remove duplicate python3 from CI configs
  * ci: remove duplicate bsdmainutils from CI configs
  * kernel: Add fatalError method to notifications
  * kernel: Add flushError method to notifications
  * scripted-diff: Rename FatalError to FatalErrorf
  * kernel: Pass interrupt reference to chainman
  * util: Add SignalInterrupt class and use in shutdown.cpp
  * doc: simplify the router options in doc/i2p.md
  * doc: clarify when and how to launch the SAM bridge in doc/i2p.md
  * doc: Add release note for wallet loading changes
  * walletdb: Remove loading code where the database is iterated
  * walletdb: refactor decryption key loading
  * walletdb: refactor defaultkey and wkey loading
  * walletdb: refactor active spkm loading
  * walletdb: refactor tx loading
  * walletdb: refactor address book loading
  * walletdb: Refactor descriptor wallet records loading
  * walletdb: Refactor legacy wallet record loading into its own function
  * test: EC: optimize scalar multiplication of G by using lookup table
  * test: add secp256k1 module with FE (field element) and GE (group element) classes
  * Use only Span{} constructor for byte-like types where possible
  * util: Allow std::byte and char Span serialization
  * tests: Test for bumping single output transaction
  * test: Test bumpfee reduce_output
  * bumpfee: Allow original change position to be specified
  * net: remove unused `CConnmanTest`
  * wallet: Give deprecation warning when loading a legacy wallet
  * gui: Add File &gt; Migrate Wallet
  * Bench test for EllSwift ECDH
  * gui: Optionally return passphrase after unlocking
  * Bench tests for CKey-&gt;EllSwift
  * Fuzz test for Ellswift ECDH
  * Fuzz test for CKey-&gt;EllSwift-&gt;CPubKey creation/decoding
  * Unit test for ellswift creation/decoding roundtrip
  * Add ElligatorSwift key creation and ECDH logic
  * Enable ellswift module in libsecp256k1
  * gui: Disable and uncheck blank when private keys are disabled
  * http: update libevent workaround to correct version
  * MaybePunishNodeForTx: Remove unused message arg and logging
  * guix: Update `python-lief` package to 0.13.2
  * test: refactor: usdt_mempool: store all events
  * test: refactor: remove unnecessary nonlocal
  * test: log sanity check assertion failures
  * test: store utxocache events
  * test: refactor: deduplicate handle_utxocache_* logic
  * test: refactor:  rename inbound to is_inbound
  * test: refactor: remove unnecessary blocks_checked counter
  * test: Fix intermittent issue in mining_getblocktemplate_longpoll.py
  * test: Add implicit-signed-integer-truncation:*/include/c++/ suppression
  * GUI: TransactionRecord: When time/index/etc match, sort send before receive
  * Bugfix: Ignore ischange flag when we're not the sender
  * GUI: Remove SendToSelf TransactionRecord type
  * GUI: TransactionRecord: Refactor to turn send-to-self into send+receive pairs
  * GUI: TransactionRecord: Use "any from me" as the criteria for deciding whether a transaction is a send or receive
  * contrib: remove macOS lazy_bind check
  * build: explicitly opt-in to new fixup_chains functionality for darwin
  * depends: Bump MacOS minimum runtime requirement to 11.0
  * depends: bump darwin clang to 11.1
  * test: added coverage to estimatefee
  * test: Run fuzz tests on macOS
  * Added static_assert to check that base_blob is using whole bytes.
  * [fuzz] Show that SRD budgets for non-dust change
  * [bug] Increase SRD target by change_fee
  * Add more tests for the BIP21 implementation
  * net: Give seednodes time before falling back to fixed seeds
  * Squashed 'src/secp256k1/' changes from 4258c54f4e..705ce7ed8c
  * test: Use TestNode *_path properties where possible
  * test: Allow pathlib.Path as RPC argument via authproxy
  * scripted-diff: Use wallets_path and chain_path where possible
  * test: Use wallet_dir lambda in wallet_multiwallet test where possible
  * fuzz: Avoid OOM in transaction fuzz target
  * qt: show own outputs on PSBT signing window
  * depends: modernize clang flags
  * ci: disable false-positive warnings for now
  * ci: Run fuzz target even if input folder is empty
  * ci: install llvm-symbolizer in MSAN jobs
  * ci: use LLVM 16.0.6 in MSAN jobs
  * fuzz: Fix implicit-integer-sign-change in wallet/fees fuzz target
  * scripted-diff: Following the C++ Standard rules for identifiers with _.
  * fuzz: addrman, avoid `ConsumeDeserializable` when possible
  * salvage: Remove use of ReadKeyValue in salvage
  * feerate: For GetFeePerK() return nSatoshisPerK instead of round trip through GetFee
  * test: refactor: introduce `generate_keypair` helper with WIF support
  * walletdb: Refactor hd chain loading to its own function
  * walletdb: Refactor encryption key loading to its own function
  * walletdb: Refactor crypted key loading to its own function
  * walletdb: Refactor key reading and loading to its own function
  * Manage exceptions in bcc callback functions
  * fuzz: wallet, add target for CoinControl
  * bench: disable birth time block skip for wallet_create_tx.cpp
  * doc: test: update TestShell instructions
  * validation: add missing insert to m_dirty_blockindex
  * Remove the syscall sandbox
  * validation: Stricter assumeutxo error handling in InvalidateCoinsDBOnDisk
  * validation: Stricter assumeutxo error handling in LoadChainstate
  * refactor: rename BCLog::BLOCKSTORE to BLOCKSTORAGE
  * doc: release note re raising on invalid -debug/debugexclude/loglevel
  * init: remove config option names from translated -loglevel strings
  * net: net_processing, add `ProcessCompactBlockTxns`
  * refactor: Avoid copy of bilingual_str when formatting, Fix ADL violation
  * build: suppress external warnings by default
  * test: clean up is node stopped
  * test: ensure old fee_estimate.dat not read on restart and flushed
  * tx fees, policy: read stale fee estimates with a regtest-only option
  * tx fees, policy: do not read estimates of old fee_estimates.dat
  * refactor: Make m_count_with_* in CTxMemPoolEntry int64_t, drop UBSAN supp
  * tx fees, policy: periodically flush fee estimates to fee_estimates.dat
  * test: Make linter to look for `BOOST_ASSERT` macros
  * test: Kill `BOOST_ASSERT`
  * test: move random.h include header from setup_common.h to cpp
  * test: move remaining random test util code from setup_common to random
  * test: -loglevel raises on invalid values
  * init: raise on invalid loglevel config option
  * test: -debug and -debugexclude raise on invalid values
  * init: raise on invalid debug/debugexclude config options
  * fuzz: wallet, add target for `fees`
  * ci: Switch to `amd64` container in "ARM" task
  * ci: Bump macOS cross task to ubuntu:jammy
  * interfaces, wallet: Expose migrate wallet
  * ci: Use latest `macos-ventura-xcode:14.3.1` image
  * wallet: Document blank flag use in descriptor wallets
  * wallet: Ensure that the blank wallet flag is unset after imports
  * build: make sure we can overwrite config.{guess,sub}
  * scripted-diff: Use datadir from options in chainstatemanager test
  * test: Add test for migrating default wallet and plain file wallet
  * wallet: Generated migrated wallet's path from walletdir and name
  * Remove txmempool implicit-integer-sign-change sanitizer suppressions
  * Use `int32_t` type for most transaction size/weight values
  * test: fix intermittent failure in p2p_leak_tx.py
  * fuzz: Fix mini_miner_selection running out of coin
  * net: do not `break` when `addr` is not from a distinct network group
  * test: add coverage for `/deploymentinfo` passing a blockhash
  * rest: bugfix, fix crash error when calling `/deploymentinfo`
  * refactor: decouple early return commands from AppInit
  * gui: return EXIT_FAILURE on post-init fatal errors
  * Return EXIT_FAILURE on post-init fatal errors
  * ci: Use podman stop over podman kill
  * contrib: docs fix --import-keys flag on verify.py
  * refactor: index: use `AbortNode` in fatal error helper
  * move ThreadImport ABC error to use AbortNode
  * rpc, wallet: Include information about blank flag
  * doc: Clarify that -datacarriersize applies to the full raw scriptPubKey, not the data push
  * test: Add -datacarriersize=2 tests
  * Remove mapRelay
  * net_processing: relay txs from m_most_recent_block
  * walletdb: Refactor wallet flags loading
  * walletdb: Refactor minversion loading
  * ci: Invalidate Cirrus CI docker cache
  * ci: Nuke Android APK task, Use credits for tsan
  * test: add unit test for local address advertising
  * net: restrict self-advertisements with privacy networks
  * net, refactor: pass reference for peer address in GetReachabilityFrom
  * net, refactor: pass CNode instead of CNetAddr to GetLocalAddress
  * ci: enable AArch64 target in MSAN jobs
  * ci: use LLVM 16.0.5 in MSAN jobs
  * doc: add release note about removal of `deprecatedrpc=walletwarningfield` flag
  * Restorewallet/createwallet help documentation fixups/improvements
  * rpc: remove deprecated "warning" field from {create,load,restore,unload}wallet
  * test: avoid sporadic MINIMALDATA failure in feature_taproot.py (fixes #27595)
  * [fuzz] Only check duplicate coinbase script when block was valid
  * wallet: Add tracing for sqlite statements
  * guix: remove cURL from build env
  * Mitigate timeout in CalculateTotalBumpFees
  * Update .style.yapf
  * wallet: Add GetPrefixCursor to DatabaseBatch
  * streams: Drop confusing DataStream::Serialize method and &lt;&lt; operator
  * doc: update getnodeaddresses for CJDNS, I2P and Tor and rm link
  * walletdb: Handle when database keys are empty
  * walletdb: Consistently clear key and value streams before writing
  * Add public Boost headers explicitly
  * test: Avoid `BOOST_ASSERT` macro
  * fuzz: fix wallet notifications.cpp
  * test: add block sync to getblockfrompeer.py
  * scripted-diff: move settings to common namespace
  * move-only: Move settings to the common library
  * kernel: Remove chainparams, chainparamsbase, args, settings from kernel library
  * refactor: Remove gArgs access from validation.cpp
  * refactor: Add path argument to FindSnapshotChainstateDir
  * refactor: Add stop_at_height option in ChainstateManager
  * fuzz: Avoid timeout in utxo_total_supply
  * ci: Enable float-divide-by-zero check
  * ci: Use podman for persistent workers
  * ci: Prune dangling images on RESTART_CI_DOCKER_BEFORE_RUN
  * ci: return to using Ubuntu 22.04 in MSAN jobs
  * ci: compile clang and compiler-rt in MSAN jobs
  * ci: use LLVM 16.0.4 in MSAN jobs
  * ci: remove extra CC &amp; CXX from MSAN jobs
  * ci: standardize custom libc++ usage in MSAN jobs
  * fix includes for touched header files (iwyu)
  * Add [[nodiscard]] where ignoring a Result return type is an error
  * lint: stop ignoring LIEF imports
  * ci: Avoid leaking HOME var into CI pod
  * ci: Remove "default" test env
  * ci: Add missing set -e to 01_base_install.sh
  * contrib/init: Better systemd integration
  * test: ensure addrman test is finite
  * addrman: change asserts to Assumes
  * p2p, refactor: return `std::optional&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return vector/optional&lt;CService&gt; in `Lookup`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupHost`
  * p2p, refactor: return `std::vector&lt;CNetAddr&gt;` in `LookupIntern`
  * fuzz: Change LIMIT_TO_MESSAGE_TYPE from a compile-time to a run-time setting
  * doc: Fix broken link in release notes
  * test: Move test_chain_listunspent wallet check from mempool_packages to wallet_basic
  * p2p: Log addresses of stalling peers
  * bench: Remove incorrect LoadWallet call in WalletBalance
  * tests: Move ADDRESS_BCRT1_UNSPENDABLE to wallet/test/util.h
  * tests, bench: Consolidate {Test,Bench}Un/LoadWallet helper
  * test: Throw error when -signetchallenge is non-hex
  * Fix `#include`s in `src/wallet`
  * wallet: skip block scan if block was created before wallet birthday
  * refactor: single method to append new spkm to the wallet
  * doc: Fix typo in doc/release-process.md URL
  * doc: Add doc/release-notes/release-notes-25.0.md
  * use 'byte'/'bytes' for bech32(m) validation error
  * doc: update `Select` function description
  * refactor: de-duplicate lookups
  * Unconditionally return when compact block status == READ_STATUS_FAILED
  * refactor: Replace std::optional&lt;bilingual_str&gt; with util::Result
  * util: Add void support to util::Result
  * Add tests for parallel compact block downloads
  * Support up to 3 parallel compact block txn fetchings
  * rpc: Fix invalid bech32 handling
  * build: disable boost multi index safe mode
  * depends: remove redundant stdlib option
  * index: prevent race by calling 'CustomInit' prior setting 'synced' flag
  * test: Make `util/test_runner.py` honor `BITCOINUTIL` and `BITCOINTX`
  * ci: Log qa-assets repo last commit
  * fuzz: Print error message when FUZZ is missing
  * test: p2p: check misbehavior for non-continuous headers messages
  * ci: remove MSAN getrandom syscall workaround
  * random: switch to using getrandom() directly
  * random: add [[maybe_unused]] to GetDevURandom
  * random: getentropy on macOS does not need unistd.h
  * ci, iwyu: Double maximum line length for includes
  * refactor: Move system from util to common library
  * refactor: Split util::AnyPtr into its own file
  * refactor: Split util::insert into its own file
  * refactor: Move ScheduleBatchPriority to its own file
  * kernel: Add warning method to notifications
  * kernel: Add progress method to notifications
  * kernel: Add headerTip method to notifications
  * kernel: Add notification interface
  * test: Explicitly specify directory where to search tests for
  * test: fix `include_immature_coinbase` logic in `get_utxos`
  * test: fix `interface_usdt_mempool` by mining a block after each test
  * test: fix mature utxos addition to wallet in `mempool_package_limits`
  * test: fix intermittent issue in `feature_bip68_sequence`
  * doc: add 24.1 release notes
  * doc: add 23.2 release notes
  * Only request full blocks from the peer we thought had the block in-flight
  * Convert mapBlocksInFlight to a multimap
  * Remove nBlocksInFlight
  * alias BlockDownloadMap for mapBlocksInFlight
  * build: Detect USDT the same way how it is used in the code
  * doc: remove Security section from build-unix.md
  * build: Bump minimum supported GCC to g++-9
  * ci: Bump centos:stream8 to centos:stream9
  * ci: Document the false positive error for g++-9
  * build: Do not define `ENABLE_ZMQ` when ZMQ is not available
  * test: Add test to check tx in the last block can be downloaded
  * test: Split up test_notfound_on_unannounced_tx test case
  * index: Enable reindex-chainstate with active indexes
  * index: Use first block from locator instead of looking for fork point
  * ci: Reduce tsan CPU and memory for faster scheduling
  * ci: Use credits for ARM task
  * msvc: Provide `ObjectFileName` explicitly
  * doc: remove mention of glibc 2.10+
  * doc: Rework build-unix.md
  * ci: remove RUN_SECURITY_TESTS
  * ci: Drop NO_WERROR=1 for clang-10 build
  * build: Bump minimum Clang to clang-10
  * doc: Remove outdated CentOS comment
  * qt, test: Add missed header
  * ci: Fix "Number of CPUs" output
  * ConnectTip: don't log total disk read time in bench
  * guix: remove redundant glibc patches
  * guix: document when certain guix patches can be dropped
  * ci: Remove unused errtrace trap ERR
  * walletdb: Remove unused CreateMockWalletDatabase
  * add `lief` to `spelling.ignore-words`
  * test: fix spelling in `interface_usdt_utxocache`
  * test: add coverage for wallet read write db deadlock
  * walletdb: scope bdb::EraseRecords under a single db txn
  * wallet: bugfix, GetNewCursor() misses to provide batch ptr to BerkeleyCursor
  * doc, test: Document steps to reproduce TSan warning for `libdb`
  * doc: Remove unused NO_BLOOM_VERSION constant
  * build, doc: Adjust comment after PR27254
  * Add wallets_conflicts
  * wallet, tests: mark unconflicted txs as inactive
  * ci: Run iwyu on all src files
  * build: cleanup comments after adding yet another libtool hack
  * build: Fix shared lib linking for darwin with lld
  * test: Return dict in MiniWallet::send_to
  * doc: remove version number from bips.md
  * depends: no-longer nuke libc++abi.so* in native_clang package
  * [mempool] clear mapDeltas entry if prioritisetransaction sets delta to 0
  * [functional test] prioritisation is not removed during replacement and expiry
  * [functional test] getprioritisedtransactions RPC
  * [rpc] add getprioritisedtransactions
  * [mempool] add GetPrioritisedTransactions
  * refactor, blockstorage: Replace stopafterblockimport arg
  * refactor, blockstorage: Replace blocksdir arg
  * refactor, BlockManager: Replace fastprune from arg with options
  * refactor/iwyu: Complete includes for blockmanager_args
  * refactor: Move functions to BlockManager methods
  * zmq: Pass lambda to zmq's ZMQPublishRawBlockNotifier
  * ci: Remove CI_EXEC bloat
  * test: added coverage to mining_basic.py
  * move-only: Move almost all CI_EXEC code to 06_script_b.sh
  * refactor: Declare g_zmq_notification_interface as unique_ptr
  * msvc: Do not define `HAVE_CONSENSUS_LIB`
  * msvc: Clean up `libbitcoin_consensus` source files
  * scripted-diff: Rename `libbitcoinconsensus` to `libbitcoin_consensus`
  * refactor: Use ChainType enum exhaustively
  * net_processing: Boost inv trickle rate
  * txmempool: have CompareDepthAndScore sort missing txs first
  * Temporarily work around gcc-13 warning bug in interfaces_tests
  * p2p: Avoid prematurely clearing download state for other peers
  * Fix clang-tidy performance-unnecessary-copy-initialization warnings
  * Remove unused find_value global function
  * scripted-diff: Use UniValue::find_value method
  * Add UniValue::find_value method
  * scripted-diff: Remove unused chainparamsbase includes
  * Add missing definitions in prep for scripted diff
  * refactor: Replace string chain name constants with ChainTypes
  * refactor: Introduce ChainType getters for ArgsManager
  * refactor: Create chaintype files
  * add ryanofsky to trusted-keys
  * doc: clarify PR 26076 release note
  * refactor: Remove unused GetTimeMillis
  * test: add test for `descriptorprocesspsbt` RPC
  * ci: fix asan task name
  * test: Treat `bitcoin-wallet` binary in the same way as others
  * test, refactor: Add `set_binary_paths` function
  * util: improve streams.h:FindByte() performance
  * [bench] add streams findbyte
  * fuzz: BIP 42, BIP 30, CVE-2018-17144
  * Move LoadVerifyActivateChainstate to ChainTestingSetup
  * msvc: Cleanup after upgrading libsecp256k1 up to 0.3.0
  * ci: Remove CI_EXEC bloat in test/06_script_b.sh
  * ci: Move CI container kill out of 06_script_b.sh
  * ci: Pass full env to CI pod to avoid missing a var
  * scripted-diff: Use platform-agnostic `ALWAYS_INLINE` macro
  * Introduce platform-agnostic `ALWAYS_INLINE` macro
  * [doc] Add post branch-off note about fuzz input pruning
  * Remove unused chainparams from BlockManager methods
  * Replace pindex pointer with block reference
  * Add BlockManagerOpts::chainparams reference
  * rpc: add descriptorprocesspsbt rpc
  * test: dedup file hashing using `sha256sum_file` helper
  * rpc: Add check for unintended option/parameter name clashes
  * test: Update python tests to use named parameters instead of options objects
  * RPC: Allow RPC methods accepting options to take named parameters
  * RPC: Add add OBJ_NAMED_PARAMS type
  * wallet, bench: Remove unused database options from WalletBenchLoading
  * tests: Modify records directly in wallet ckey loading test
  * tests: Update DuplicateMockDatabase for MockableDatabase
  * scripted-diff: Replace CreateMockWalletDB with CreateMockableWalletDB
  * wallet, tests: Include wallet/test/util.h
  * wallet: Move DummyDatabase to salvage
  * wallet, tests: Replace usage of dummy db with mockable db
  * Introduce MockableDatabase for wallet unit tests
  * ci: Use arm_container.dockerfile
  * clarify processing of mempool-msgs when NODE_BLOOM
  * Avoid dereferencing interruption_point if it is nullptr
  * contrib: add ELF ABI check to symbol-check.py
  * test: Add util to mine invalid blocks
  * fuzz: addrman, add coverage for `network` field in `Select()`, `Size()` and `GetAddr()`
  * test: Simplify feature_fastprune.py
  * test: add ripemd160 to test framework modules list
  * test: added coverage to rpc_scantxoutset.py
  * ci: remove usage of untrusted bpfcc-tools
  * ci: use LLVM/clang-16 in native_asan job
  * rpc: scanblocks, add "completed" flag to the result obj
  * rpc: scanblocks, do not traverse the whole chain block by block
  * test: remove modinv python util helper function
  * rpc: return block hash &amp; height in getbalances, gettransaction &amp; getwalletinfo JSONs
  * refactor: Make ListSelected return vector
  * wallet: Move CoinCointrol definitions to .cpp
  * wallet: Use std::optional for GetExternalOutput and fixups
  * scripted-diff: Rename setSelected-&gt;m_selected_inputs
  * test: fix `feature_addrman.py` on big-endian systems
  * build: Use newest `config.{guess,sub}` available
  * test: simplify uint256 (de)serialization routines
  * wallet: introduce generic recursive tx state updating function
  * ci: Bump ci/lint/Dockerfile
  * bugfix: Fix incorrect debug.log config file path
  * init: Error if ignored bitcoin.conf file is found
  * lint: Fix lint-format-strings false positives when format specifiers have argument positions
  * depends: latest config.sub
  * depends: latest config.guess
  * test: Use python3.8 pow()
  * Bump python minimum version to 3.8
  * test: Remove unused sanitizer suppressions
  * test: prevent intermittent failures
  * depends: reuse _config_opts for CMake options
  * test: cover fastprune with excessive block size
  * blockstorage: Adjust fastprune limit if block exceeds blockfile size
  * move-only: Extract common/args and common/config.cpp from util/system
  * p2p: "skip netgroup diversity of new connections for tor/i2p/cjdns" follow-up
  * [test] mempool full in package accept
  * [validation] set PackageValidationState when mempool full
  * [policy] disallow transactions under min relay fee, even in packages
  * [test] package cpfp bumps parents &lt;mempoolminfee but &gt;=minrelaytxfee
  * [test util] mock mempool minimum feerate
  * test: bumpfee, add coverage for "send coins back to yourself"
  * bumpfee: enable send coins back to yourself
  * fuzz: re-enable prioritisetransaction &amp; analyzepsbt RPC
  * refactor: Remove CAddressBookData::destdata
  * wallet: Add DatabaseBatch::ErasePrefix method
  * [fuzz] Add MiniMiner target + diff fuzz against BlockAssembler
  * [unit test] GatherClusters and MiniMiner unit tests
  * refactor: coinselector_tests, unify wallet creation code
  * test: coverage for bnb max weight
  * wallet: clean post coin selection max weight filter
  * coin selection: BnB, don't return selection if exceeds max allowed tx weight
  * test: coin selection, add coverage for SRD
  * coin selection: heap-ify SRD, don't return selection if exceeds max tx weight
  * coin selection: knapsack, select closest UTXO above target if result exceeds max tx size
  * test: add coverage to ensure the first arg of scantxoutset is needed
  * logging: log ASN when using `-asmap`
  * tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings
  * Switch hardened derivation marker to h in descriptors
  * wallet: Use steady clock to calculate number of derive iterations
  * wallet: Use steady clock to measure scanning duration
  * qt: Use steady clock to throttle GUI notifications
  * test: Use steady clock in index tests
  * net: Use steady clock in InterruptibleRecv
  * net: add `GetMappedAS` in `CConnman`
  * Implement Mini version of BlockAssembler to calculate mining scores
  * validation: Move warningcache to ChainstateManager
  * [mempool] find connected mempool entries with GatherClusters(…)
  * util: implement prevector's move ctor &amp; move assignment
  * test: CScriptCheck is used a lot in std::vector, make sure that's efficient
  * util: prevector's move ctor and move assignment is `noexcept`
  * bench: Add benchmark for prevector usage in std::vector
  * test: various `converttopsbt` check cleanups in rpc_psbt.py
  * Use PoolAllocator for CCoinsMap
  * Call ReallocateCache() on each Flush()
  * Add PoolResource fuzzer
  * Calculate memory usage correctly for unordered_maps that use PoolAllocator
  * Add pool based memory resource &amp; allocator
  * refactor: rpc: hide and rename ParseNonRFCJSONValue()
  * test: move coverage on ParseNonRFCJSONValue() to UniValue::read()
  * rpc, tests: in `utxoupdatepsbt` also look for the transaction in the txindex
  * doc: clarify new_only param for Select function
  * bench: test select for a new table with only one address
  * bench: add coverage for addrman select with network parameter
  * test: increase coverage of addrman select (without network)
  * test: add addrman test for special case
  * tests: add addrman_select_by_network test
  * addrman: add functionality to select by network
  * scripted-diff: rename local variables to match modern conventions
  * refactor: consolidate select logic for new and tried tables
  * refactor: generalize select logic
  * addrman: Introduce helper to generalize looking up an addrman entry
  * test: add coverage for `-bantime`
  * doc: document json rpc endpoints
  * wallet: refactor coin selection algos to return util::Result
  * refactor: update Select_ function
  * prune, import: fixes #23852
  * Build: Log when test -f fails in Makefile
  * Build: Use AM_V_GEN in Makefiles where appropriate
  * rpc: extract psbt updating logic into ProcessPSBT
  * doc: add release notes for `abandoned` field in `gettransaction` and `listtransactions`
  * rpc, wallet: add `abandoned` field for all categories of transactions in ListTransactions
  * assumeutxo: catch and log fs::remove error instead of two exist checks
  * test: test banlist database recreation
  * Add test for `sendmany` rpc that uses `subtractfeefrom` parameter
  * test, init: perturb file to ensure failure instead of only deleting them
  * rpc, docs: Add note for commands that supports only legacy wallets
  * test: perturb anchors.dat to test it doesn't throw an error during initialization
  * Periodically check disk space to avoid corruption
  * Implement CCoinsViewErrorCatcher::HaveCoin
  * test: add coverage for rpc error when trying to rescan beyond pruned data
  * build: Drop redundant qt/bitcoin.cpp
  * build: Include qt sources for parsing with extract_strings.py</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707307200">- Provide user/group symbol for user created during pre.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1707912000">- Enable LTO and test package for Leap
- Enable sqlite3 support for wallet
- Enable asm optimizations unconditionally</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709985600">- Use gcc13 on Leap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1713182400">- Update to version 26.1:
  * [doc] add manual pages for 26.1
  * [doc] update release notes 26.1
  * [build] bump version to 26.1 final
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * [doc] update manual pages for v26.1rc2
  * [build] bump version to v26.1rc2
  * update release notes 26.1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * [test] IsBlockMutated unit tests
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * rpc: keep .cookie if it was not generated
  * [doc] add release notes for 26.1rc1
  * [doc] update manual pages for 26.1rc1
  * [build] bump version to 26.1rc1
  * qt: 26.1rc1 translations update
  * ci: Switch native macOS CI job to Xcode 15.0
  * build: Fix `-Xclang -internal-isystem` option
  * Use hardened runtime on macOS release builds.
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * [log] mempool loading
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * [refactor] Add helper for iterating through mempool entries
  * doc: update release notes for 26.x
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * test: add regression test for the getrawtransaction segfault
  * rpc: fix getrawtransaction segfault
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * doc: Missing additions to 26.0 release notes
  * doc: add historical release notes for 26.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1714392000">- Update to version 27.0:
  * doc: update manual pages for v27.0
  * build: bump version to v27.0 final
  * doc: import release notes from devwiki
  * Update the developer mailing list address.
  * ci: Print tsan errors to stderr
  * ci: Pull in qtbase5-dev instead of seperate low-level libraries
  * doc: Suggest installing dev packages for debian/ubuntu qt5 build
  * ci: Bump msan to llvm-18
  * ci, macos: Use `--break-system-packages` with Homebrew's python
  * ci: Add workaround for Homebrew's python link error
  * serfloat: improve/simplify tests
  * serfloat: do not test encode(bits)=bits anymore
  * doc: point release-notes.md to the dev wiki
  * doc: generate example bitcoin.conf for v27.0rc1
  * doc: generate manual pages for v27.0rc1
  * build: bump version to v27.0rc1
  * fuzz: restrict fopencookie usage to Linux &amp; FreeBSD
  * docs: Fix broken reference to CI setup in test/lint/README.md
  * seeds: Update testnet seeds
  * seeds: Update mainnet seeds
  * makeseeds: Check i2p seeds too
  * makeseeds: Update PATTERN_AGENT
  * doc: remove rel note fragments
  * kernel: chainparams updates for 27.x
  * kernel: update chainTxData for 27.x
  * kernel: update nMinimumChainWork &amp; defaultAssumeValid for 27.x
  * qt: 27.0 translations update
  * doc: update signet faucet link in offline-signing-tutorial.md
  * test: remove file-wide interpreter.cpp ubsan suppression
  * ci: Fix functional tests step for pull requests in Windows GHA job
  * build, msvc: Do not compile redundant sources
  * build: move sha256_sse4 into libbitcoin_crypto_base
  * test: fix flaky wallet_send functional test
  * test: fix weight estimates in functional tests
  * p2p: Don't consider blocks mutated if they don't connect to known prev block
  * doc: correct function name in AssumeUTXO design docs
  * doc: remove references to disable-asm option now that it's gone
  * build: remove confusing and inconsistent disable-asm option
  * refactor: gui, simplify boost signals disconnection
  * fuzz: add target for local addresses
  * test: removes unnecessary check from validation_tests
  * test: Fix intermittent failure in rpc_net.py --v2transport
  * gui: guard accessing a nullptr 'clientModel'
  * ci: print python version on win64 native job
  * serialization: use internal endian conversion functions
  * serialization: detect byteswap builtins without autoconf tests
  * test: make sure keypool sizes do not change on `getrawchangeaddress`/`getnewaddress` failures
  * wallet: Avoid updating `ReserveDestination::nIndex` when `GetReservedDestination` fails
  * doc: Fix Broken Links
  * serialization: replace char-is-int8_t autoconf detection with c++20 concept
  * Squashed 'src/crc32c/' changes from 0bac72c455..b60d2b7334
  * test: Remove Windows-specific code from `system_tests/run_command`
  * [test] IsBlockMutated unit tests
  * Add transaction_identifier::size to allow Span conversion
  * [validation] Cache merkle root and witness commitment checks
  * [test] Add regression test for #27608
  * [net processing] Don't process mutated blocks
  * [validation] Merkle root malleation should be caught by IsBlockMutated
  * [validation] Introduce IsBlockMutated
  * [refactor] Cleanup merkle root checks
  * [validation] Isolate merkle root checks
  * build: remove -Wdocumentation conditional
  * crypto: replace CountBits with std::bit_width
  * crypto: replace non-standard CLZ builtins with c++20's bit_width
  * doc: Update OpenBSD build docs to 7.4
  * test: Drop `x` modifier in `fsbridge::fopen` call for mingw builds
  * test: Add option to skip unit tests for the test runner
  * Fix CI-detected codespell warnings
  * doc: document preference for list-initialization
  * test: Fix intermittent issue in interface_rest.py
  * [fuzz] Avoid partial negative result
  * ci: avoid running git diff after patching
  * test: assert rpc error for addnode v2transport not enabled
  * refactor: Add missing include for USE_BDB, USE_SQLITE to bench/wallet_ismine.cpp
  * lint: Check for missing or redundant bitcoin-config.h includes
  * lint: Make lint error easier to spot in output
  * doc: Add missing RUST_BACKTRACE=1
  * lint: Add get_subtrees() helper
  * docs: ci multi-arch requires qemu
  * doc: document that BIP324 on by default for v27.0
  * qt, test: Recognize dialog object by name
  * depends: fix BDB compilation on OpenBSD
  * wallet: Retrieve ID from loaded DescSPKM directly
  * wallet: Use scriptPubKeyCache in GetSolvingProvider
  * wallet: Use scriptPubKey cache in GetScriptPubKeyMans
  * wallet: Use scriptPubKey cache in IsMine
  * wallet: Cache scriptPubKeys for all DescriptorSPKMs
  * wallet: Introduce a callback called after TopUp completes
  * bench: Add a benchmark for ismine
  * ci: Skip git install if it is already installed
  * doc: Clarify maxfeerate help
  * rpc: Fixed signed integer overflow for large feerates
  * rpc: Add ParseFeeRate helper
  * doc: Update translation_process.md
  * rpc: Implement RPCHelpMan::ArgValue&lt;&gt; for UniValue
  * scripted-diff: Fix bitcoin_config_h includes
  * qt: Update translation source file for v27.0 string freeze
  * test: fix intermittent failure in wallet_reorgrestore.py
  * wallet: simplify EraseRecords by using 'ErasePrefix'
  * wallet: bdb batch 'ErasePrefix', do not create txn internally
  * wallet: db, introduce 'RunWithinTxn()' helper function
  * test: enable v2 for python p2p depending on global --v2transport flag
  * [test] second child of a v3 tx can be replaced individually
  * [refactor] use MAX_PUBKEYS_PER_MULTISIG instead of magic numbers in test
  * [test] PackageV3Checks with inheritance violation in mempool ancestor
  * [doc] fix docs and comments from v3
  * scripted-diff: rename ZapSelectTx to RemoveTxs
  * wallet: batch and simplify ZapSelectTx process
  * opt: Skip over barren combinations of tiny UTXOs
  * opt: Skip checking max_weight separately
  * opt: Cut if last addition was minimal weight
  * opt: Skip heavier UTXOs with same effective value
  * opt: Tiebreak UTXOs by weight for CoinGrinder
  * opt: Skip evaluation of equivalent input sets
  * opt: Track remaining effective_value in lookahead
  * opt: Skip branches with worse weight
  * fuzz: Test optimality of CoinGrinder
  * fuzz: Add CoinGrinder fuzz target
  * coinselection: Track whether CG completed
  * test: Add coin_grinder_tests
  * coinselection: Add CoinGrinder algorithm
  * test, assumeutxo: Add test to ensure failure when mempool not empty
  * [doc] v3 signaling in mempool-replacements.md
  * [fuzz] v3 transactions and sigop-adjusted vsize
  * [functional test] v3 transaction submission
  * test framework: Add and use option for tx-version in MiniWallet methods
  * [policy/validation] allow v3 transactions with certain restrictions
  * [policy] add v3 policy rules
  * fuzz: increase length of string used for `NetWhitelist{bind}Permissions::TryParse`
  * wallet: migration, batch addressbook records removal
  * wallet: addressbook migration, batch db writes
  * refactor: wallet, simplify addressbook migration
  * refactor: SetAddressBookWithDB, minimize number of map lookups
  * refactor: SetAddrBookWithDB, signal only if write succeeded
  * wallet: clean redundancies in DelAddressBook
  * test: Fix SegwitV0SignatureMsg nLockTime signedness
  * test: Fix utxo set hash serialisation signedness
  * qt: Update translation source file
  * qt: Bump Transifex slug for 27.x
  * qt: Translation updates from Transifex
  * test: Don't use v2transport when it's too slow.
  * test: enable p2p_invalid_messages.py with v2transport
  * test: enable p2p_sendtxrcncl.py with v2transport
  * test: wallet, coverage for concurrent db transactions
  * tests: Test for concurrent writes with db tx
  * sqlite: Ensure that only one SQLiteBatch is writing to db at a time
  * test: speedup bip324_cipher.py unit test
  * fuzz: remove unused `args` and `context` from `FuzzedWallet`
  * test: check that mempool msgs lead to disconnect if uploadtarget is reached
  * test: check for specific disconnect reasons in feature_maxuploadtarget.py
  * test: verify `-maxuploadtarget` limit state via `getnettotals` RPC result
  * fuzz: Set -rss_limit_mb=8000 for generate as well
  * fuzz: Generate with random libFuzzer settings
  * test: Add makefile target for running unit tests
  * wallet: remove unused 'accept_no_keys' arg from decryption process
  * test: fix intermittent failure in rpc_setban.py --v2transport
  * tests: Test that descriptors flag is set for migrated blank wallets
  * wallet: Make sure that the descriptors flag is set for blank wallets
  * test: Test migration of tx with both spendable and watchonly
  * wallet: Keep txs that belong to both watchonly and migrated wallets
  * test: Make sure that migration test does not rescan on reloading
  * wallet: Reload the wallet if migration exited early
  * wallet: Write bestblock to watchonly and solvable wallets
  * refactor: Fix timedata includes
  * test: p2p: adhere to typical VERSION message protocol flow
  * test: p2p: process post-v2-handshake data immediately
  * test: p2p: introduce helper for sending prepared VERSION message
  * test: Fix CPartialMerkleTree.nTransactions signedness
  * Modify command line help to show support for BIP21 URIs
  * Don't use scientific notation in log messages
  * [test] make v2transport arg in addconnection mandatory and few cleanups
  * test: fix intermittent failure in p2p_v2_earlykeyresponse
  * test: Assumeutxo with more than just coinbase transactions
  * libconsensus: deprecate
  * test: sqlite, add coverage for dangling to-be-reverted db txns
  * sqlite: guard against dangling to-be-reverted db transactions
  * sqlite: introduce HasActiveTxn method
  * sqlite: add ability to interrupt statements
  * rpc: Do not wait for headers inside loadtxoutset
  * net: enable v2transport by default
  * fuzz: Print coverage summary after run_once
  * doc: update `BroadcastTransaction` comment
  * test: fix wallet_import_rescan unrounded minimum amount
  * test: Remove struct import from messages.py
  * scripted-diff: test: Use int from_bytes and to_bytes over struct packing
  * test: Use int from_bytes and to_bytes over struct packing
  * test: Treat msg_version.relay as unsigned
  * depends: remove (darwin) libtool now that it's no longer used
  * depends: use ar rather than libtool for miniupnpc/libnatpmp
  * [rpc] return full string for package_msg and package-error
  * fuzz: also set MSAN_SYMBOLIZER_PATH
  * ci: Use DEBUG=1 in depends for MSAN jobs
  * ci: use LLVM 17.0.6 in MSAN jobs
  * refactor: Compile unreachable code
  * depends: Do not override CFLAGS when building SQLite with DEBUG=1
  * depends: Ensure definitions are passed when building SQLite with DEBUG=1
  * ci: Update cache action
  * qt: Avoid non-self-contained Windows header
  * [test] Add functional test to test early key response behaviour in BIP 324
  * [test] Check whether v2 TestNode performs downgrading
  * [test] Add functional tests to test v2 P2P behaviour
  * [test] Ignore BIP324 decoy messages
  * [test] Allow inbound and outbound connections supporting v2 P2P protocol
  * [test] Reconnect using v1 P2P when v2 P2P terminates due to magic byte mismatch
  * [test] Build v2 P2P messages
  * [test] Use lock for sending P2P messages in test framework
  * [test] Read v2 P2P messages
  * [test] Perform initial v2 handshake
  * [test] Introduce EncryptedP2PState object in P2PConnection
  * fuzz: Exit and log stderr for parse_test_list errors
  * [test] Construct class to handle v2 P2P protocol functions
  * wallet: clarify replaced_by_txid and replaces_txid in help output
  * init: settings, do not load auto-generated warning msg
  * validation: move nChainTx assert down in CheckBlockIndex
  * doc: fix checkblockindex comments
  * [test] Move MAGIC_BYTES to messages.py
  * [test/crypto] Add ECDH
  * [rpc/net] Allow v2 p2p support in addconnection
  * net: remove now unused global 'g_initial_block_download_completed'
  * test: add coverage for peerman adaptive connections service flags
  * net: peer manager, dynamically adjust desirable services flag
  * fuzz: extend ConsumeNetAddr() to return I2P and CJDNS addresses
  * depends: Update libmultiprocess library to fix C++20 macos build error
  * settings: add auto-generated warning msg for editing the file manually
  * init: improve corrupted/empty settings file error msg
  * wallet: remove unused `SignatureData` instances in spkm's `FillPSBT` methods
  * Move TRACEx parameters to seperate lines
  * wallet: fix coin selection tracing to return -1 when no change pos
  * test: ensure output is large enough to pay for its fees
  * refactor: pass CRecipient to FundTransaction
  * refactor: simplify `CreateRecipients`
  * refactor: remove out param from `ParseRecipients`
  * refactor: move parsing to new function
  * refactor: move normalization to new function
  * test: add tests for fundrawtx and sendmany rpcs
  * build: Pass sanitize flags to instrument `libsecp256k1` code
  * refactor: remove CTxMemPool::queryHashes()
  * refactor: Mark prevector iterator with std::contiguous_iterator_tag
  * ci: vary /tmp/env
  * wallet: avoid returning a reference to vMasterKey after releasing the mutex that guards it
  * refactor: Fix binary operator+ for prevector iterators
  * refactor: Fix constness for prevector iterators
  * refactor: Add missing default constructor to prevector iterators
  * test: Use blocks_path where possible
  * rpc: Fix race in loadtxoutset
  * contrib: Fix clang-format-diff.py lint errors
  * contrib: Latest clang-format-diff.py script
  * refactor: Allow std::span construction from CKey
  * [refactor] change Workspace::m_conflicts and adjacent funcs/structs to use Txid
  * Add missing XOnlyPubKey::data() to get mutable data
  * test: Remove all-lint.py script
  * doc: move-only lint docs to one place
  * build: move -mlinker-version to *FLAGS
  * depends: deduplicate use of mmacosx-version-min in macOS build
  * build: fix optimisation flags used for --coverage
  * ci: cleanup C*FLAG usage in Valgrind jobs
  * build: add sanitizer flags to configure output
  * build: always set -g -O2 in CORE_CXXFLAGS
  * depends: add NM output to gen_id
  * test: wallet db, exercise deadlock after write failure
  * doc, test: Test and explain service flag handling
  * opt: Tie-break UTXO sort by waste for BnB
  * doc: Document max_weight on BnB
  * net: move state dependent peer services flags
  * net: decouple state independent service flags from desirable ones
  * net: store best block tip time inside PeerManager
  * wallet: Reset chain notifications handler if AttachChain fails
  * doc: Add missing backtick in developer notes logging section
  * [test] import descriptor wallet with reorged parent + IsFromMe child in mempool
  * Make v2transport default for addnode RPC when enabled
  * [log] mempool loading
  * [test] rescan legacy wallet with reorged parent + IsFromMe child in mempool
  * Add test for negative transaction version w/ CSV to tx_valid.json
  * tests: Test migration of blank wallets
  * wallet: Better error message when missing LegacySPKM during migration
  * wallet: Check for descriptors flag before migration
  * wallet: Skip key and script migration for blank wallets
  * [depends] Allow PATH with spaces in directory names.
  * doc: refer to "Node relay options" in policy/README
  * doc: add unconditional info loglevel following merge of PR 28318
  * ci: Rename tasks (previous releases, macOS cross)
  * test: Assert that a new tx with a delta of 0 is never added
  * rpc: exposing modified_fee in getprioritisedtransactions
  * ci: move CMake into base packages
  * doc: upgrade Bitcoin Core license to 2024
  * [fuzz] Improve fuzzing stability for ellswift_roundtrip harness
  * test: assumeutxo: spend coin from snapshot chainstate after loading
  * Fix -netinfo backward compat with getpeerinfo pre-v26
  * fuzz: fix `connman` initialization
  * fuzz: Assume presence of __builtin_*_overflow, without checks
  * Revert "build: Fix undefined reference to __mulodi4"
  * build: Bump clang minimum supported version to 14
  * rpc: renaming txid -&gt; transactionid
  * rpc: changed prioritisation-map -&gt; ""
  * build: Drop `ALLOW_HOST_PACKAGES` support in depends
  * test: wallet migration, add coverage for tx extra data
  * ci: Switch native macOS CI job to Xcode 15.0
  * net: create I2P sessions with both ECIES-X25519 and ElGamal encryption
  * build: Fix `-Xclang -internal-isystem` option
  * wallet: migration, remove extra NotifyTransactionChanged call
  * wallet: ZapSelectTx, remove db rewrite code
  * Remove GetAdjustedTime
  * crypto: remove sha256_sse4 from the base crypto helper lib
  * crypto, hash: replace custom rotl32 with std::rotl
  * ci, iwyu: Drop backported mappings
  * fuzz: set `nMaxOutboundLimit` in connman target
  * build: remove --enable-lto
  * crypto: remove use of BUILD_BITCOIN_INTERNAL macro in sha256
  * doc: Clarify C++20 comments
  * RPC/Blockchain: scanblocks: Accept named param for filter_false_positives
  * Revert "depends: systemtap: remove variadic params that trigger compiler warnings"
  * Squashed 'src/secp256k1/' changes from 199d27cea3..efe85c70a2
  * build: Fix check whether `-latomic` needed
  * wallet: Fix use-after-free in WalletBatch::EraseRecords
  * contrib: add macho branch protection check
  * test: change `m_submitted_in_package` input to fuzz data provider boolean
  * tx fees: update `m_from_disconnected_block` to `m_mempool_limit_bypassed`
  * doc: fix typo and update incorrect comment
  * fuzz: rule-out too deep derivation paths in descriptor parsing targets
  * cli: add transport protcol column to -netinfo
  * net: attempt v2 transport for addrfetch connections if we support it
  * net: attempt v2 transport for manual connections if we support it
  * During IBD, prune as much as possible until we get close to where we will eventually keep blocks
  * refactor: share and use `GenerateRandomKey` helper
  * doc: Add multiprocess design doc
  * Allow int8_t optimized vector serialization
  * Faster std::byte (pre)vector (un)serialize
  * depends: patch around non-determinism in qt
  * build: rename native_clang to native_llvm
  * Revert "build: Patch Qt to handle minimum macOS version properly"
  * guix: use clang-toolchain-17 for macOS build
  * build: Bump `native_clang` up to 17.0.6
  * Use hardened runtime on macOS release builds.
  * logging: Replace uses of LogPrintfCategory
  * logging: add LogError, LogWarning, LogInfo, LogDebug, LogTrace
  * wallettool: Don't create CWallet when dumping DB
  * wallettool: Don't unilaterally reset wallet_instance if loading error
  * [doc]: add doxygen return comment for CheckPackageLimits
  * doc: Rework guix docs after 1.4 release
  * wallet, mempool: propagete `checkChainLimits` error message to wallet
  * Allow std::byte C-style array serialization
  * refactor: Print verbose serialize compiler error messages
  * fuzz: coinselection, improve `min_viable_change`/`change_output_size`
  * tests: ensure functional tests set permitbaremultisig=1 when needed
  * tests: test both settings for permitbaremultisig in p2sh tests
  * logging: add -loglevelalways=1 option
  * logging: treat BCLog::ALL like BCLog::NONE
  * logging: Drop BCLog::Level::None
  * logging: Log Info messages unconditionally
  * logging: make [cat:debug] and [info] implicit
  * logging: refactor: pull prefix code out
  * Update security.md contact for achow101
  * [fuzz] Improve fuzzing stability for minisketch harness
  * refactor: Rename fs::path::u8string() to fs::path::utf8string()
  * ci: Set `HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` to avoid failures
  * fuzz: Limit p2p fuzz targets to MAX_PROTOCOL_MESSAGE_LENGTH
  * build: Bump guix time-machine to unlock riscv64 metal
  * fuzz: set `m_fallback_fee`/`m_fee_mode` in `wallet_fees` target
  * msvc: Fix `test\config.ini` content
  * test: add TestNode wait_until helper
  * test: Actually fail when a python unit test fails
  * build: Bump minimum required Boost to 1.73.0 to support C++20
  * test: wallet, fix change position out of range error
  * depends: build libmultiprocess with position independant code
  * depends: always install libmultiprocess to /lib
  * depends: always install capnp to /lib
  * Revert "ci: Only run functional tests on windows in master"
  * fuzz: disable BnB when SFFO is enabled
  * test: add coverage for BnB-SFFO restriction
  * wallet: Assert that the wallet is not initialized in LoadWallet
  * tests, bench: Remove incorrect LoadWallet() calls
  * test: Add tests for CFeeRate multiplication operator
  * doc: update/clarify max outbound connection count
  * doc: Update bitcoin-tx replaceable documentation
  * Remove deprecated -rpcserialversion
  * ArgsManager: return path by value from GetBlocksDirPath()
  * refactor: Remove pre-C++20 fs code
  * Add tests for C++20 std::u8string
  * refactor: Avoid copy/move in fs.h
  * refactor: Use C++20 std::chrono::days
  * Add a note to msvc readme re building Qt for Bitcoin Core.
  * msvc: Define the same `QT_...` macros as in Autotools builds
  * Add multiplication operator to CFeeRate
  * msvc: Optimize "Release" builds
  * test: fix intermittent error in rpc_net.py (#29030)
  * tests: Add unit tests for bitcoin-tx replaceable command
  * wallet: return CreatedTransactionResult from FundTransaction
  * wallet: use optional for change position as an optional in CreateTransaction
  * wallet: Explicitly preserve scriptSig and scriptWitness in CreateTransaction
  * wallet: Explicitly preserve transaction version in CreateTransaction
  * wallet: Explicitly preserve transaction locktime in CreateTransaction
  * wallet: Set preset input sequence through coin control
  * wallet: Replace SelectExternal with SetTxOut
  * coincontrol: Replace HasInputWeight with returning optional from Get
  * wallet: Introduce and use PreselectedInput class in CCoinControl
  * test: fix `addnode` functional test failure on OpenBSD
  * doc: test: mention OS detection preferences in style guideline
  * test: detect OS consistently using `platform.system()`
  * test: use `skip_if_platform_not_linux` helper where possible
  * fuzz: Improve fuzzing stability for txorphan harness
  * wallet: fix key parsing check for miniscript expressions in `ParseScript`
  * wallet: create tx, log resulting coin selection info
  * wallet: skip BnB when SFFO is active
  * qt: update widgets availability on wallet selection
  * doc: Missing additions to 26.0 release notes
  * doc: Add link to needs-release-notes label
  * doc: add historical release notes for 26.0
  * doc: add minimum required Linux Kernel to release-notes
  * refactor: rpc: Pass CBlockIndex by reference instead of pointer
  * refactor: Use reference instead of pointer in IsBlockPruned
  * fuzz: Use C++20 starts_with in rpc.cpp
  * Revert "tracepoints: Disables `-Wgnu-zero-variadic-macro-arguments` to compile without warnings"
  * refactor: Drop unused _Pragma to ignore -Wgnu-zero-variadic-macro-arguments
  * refactor: modernize-use-default-member-init for bit-fields (C++20)
  * build: Require C++20 compiler
  * test: Extends MEMPOOL msg functional test
  * fuzz: Detect deadlocks in process_message
  * fuzz: Avoid timeout in bitdeque
  * test: wait for fee estimator to catch up before estimating fees
  * fuzz: p2p: Detect peer deadlocks
  * test: fix v2 transport intermittent test failure (#29002)
  * test: add regression test for the getrawtransaction segfault
  * rpc: getwalletinfo, return wallet 'birthtime'
  * test: coverage for wallet birth time interaction with -reindex
  * wallet: fix legacy spkm default birth time
  * rpc, doc: encryptwallet, mention HD seed rotation and new backup
  * wallet: Migrate entire address book entries
  * rpc: fix getrawtransaction segfault
  * build: Enable -Wunreachable-code
  * build: use macOS 14 SDK (Xcode 15.0)
  * build: patch boost process for macOS 14 SDK
  * depends: add -platform_version to macOS build flags
  * bitcoin-tx: Make replaceable value optional
  * fuzz: txorphan check wtxids using GenTxid::Wtxid not GenTxid::Txid
  * Get rid of shutdown.cpp/shutdown.h, use SignalInterrupt directly
  * refactor: Add InitContext function to initialize NodeContext with global pointers
  * refactor: Remove calls to StartShutdown from KernelNotifications
  * refactor: Remove call to StartShutdown from stop RPC
  * util: Get rid of uncaught exceptions thrown by SignalInterrupt class
  * refactor: Remove call to ShutdownRequested from IndexWaitSynced
  * refactor: Remove call to ShutdownRequested from HTTPRequest
  * refactor: Add NodeContext::shutdown member
  * refactor: Remove call to StartShutdown from qt
  * refactor: Remove call to ShutdownRequested from rpc/mining
  * refactor: Remove call to ShutdownRequested from chainstate init
  * depends: Build `native_capnp` package with CMake
  * depends: Build `capnp` package with CMake
  * init: don't delete PID file if it was not generated
  * ci: Use Ubuntu 24.04 Noble for asan
  * ci: Use Ubuntu 24.04 Noble for tsan,tidy,fuzz
  * test: Fix test by checking the actual exception instance
  * net: Add continuous ASMap health check logging
  * build: disable external-signer for Windows
  * ci: remove --enable-external-signer from win64 job
  * contrib: drop GCC MAX_VERSION to 4.3.0 in symbol-check
  * ci: remove libz-dev from macOS build deps
  * Rename version.h to node/protocol_version.h
  * Remove unused version.h include
  * Remove unused SER_NETWORK, SER_DISK
  * Remove unused CDataStream
  * fuzz: Drop unused version from fuzz input format
  * guix: switch from guix environment to guix shell
  * test_submitpackage: only make a chain of 3 txns
  * doc: submitpackage vsize results are sigops-adjusted
  * RPC submitpackage: change return format to allow partial errors
  * fuzz: Avoid signed-integer-overflow in wallet_notifications fuzz target
  * fuzz: Fix nullptr deref in scriptpubkeyman
  * ci: Reduce use of bash -c
  * test: Add missing CBlockPolicyEstimator::processBlockTx suppression
  * test: Setup networking globally
  * multiprocess: Add type conversion code for UniValue types
  * multiprocess: Add type conversion code for serializable types
  * test: add ipc test to test multiprocess type conversion code
  * guix: remove input labels
  * refactor: Use Txid in CMerkleBlock
  * ci: Rename test script to 03_test_script.sh
  * scripted-diff: Use DataStream in most places
  * refactor: SpanReader without nVersion
  * fuzz: Avoid timeout in process_messages
  * fuzz: BIP324: damage ciphertext/aad in full byte range
  * fuzz: Faster wallet_notifications target
  * bench: add readblock benchmark
  * msvc: Specify `boost-date-time` package explicitly
  * msvc: Update vcpkg manifest baseline up to "2023.08.09 Release"
  * msvc: No need to specify the default feature for `libevent` package
  * Change petertodd seeds to petertodd.net
  * Revert "ci: Avoid toolset ambiguity that MSVC can't handle"
  * ci: Set MSVC toolset version explicitly
  * ci: Run vcpkg with path prefix
  * Export assert from util/check.h
  * ci: remove python3-setuptools from mac build deps
  * Fix IWYU for the script_flags fuzz target
  * fuzz: Limit fuzz buffer size in script_flags target
  * fuzz: CDataStream -&gt; DataStream in script_flags
  * test: Add gettransaction test for "coin-join" tx
  * wallet: birth time update during tx scanning
  * refactor: rename FirstKeyTimeChanged to MaybeUpdateBirthTime
  * refactor: P2P transport without serialize version and type
  * rpc: `SyncWithValidationInterfaceQueue` on fee estimation RPC's
  * tx fees, policy: CBlockPolicyEstimator update from `CValidationInterface` notifications
  * CValidationInterface: modify the parameter of `TransactionAddedToMempool`
  * tx fees, policy: update `CBlockPolicyEstimator::processBlock` parameter
  * CValidationInterface, mempool: add new callback to `CValidationInterface`
  * tx fees, policy: cast with static_cast instead of C-Style cast
  * tx fees, policy: bugfix: move `removeTx` into reason != `BLOCK` condition
  * ci: Switch from `apt` to `apt-get`
  * ci: Update apt cache
  * wallet: batch external signer descriptor import
  * wallet: descriptors setup, batch db operations
  * wallet: batch legacy spkm TopUp
  * wallet: batch descriptor spkm TopUp
  * test: Directly constructing 2 entry map for getprioritisedtransactions
  * test: Add uint256 string parse tests
  * refactor: Remove unused and fragile string interface from arith_uint256
  * Use Txid in COutpoint
  * fuzz: add target for `DescriptorScriptPubKeyMan`
  * fuzz: create ConsumeCoins
  * fuzz: move `MockedDescriptorConverter` to `fuzz/util`
  * pool: change memusage_test to use int64_t, add allocation check
  * build: Fix regression in "ARMv8 CRC32 intrinsics" test
  * refactor: NetMsg::Make() without nVersion
  * pool: make sure PoolAllocator uses the correct alignment
  * refactor: Make CTxMemPoolEntry only explicitly copyable
  * depends: bump libmultiprocess to fix capnproto deprecation warnings
  * streams: Drop unused CAutoFile
  * refactor: switch from CAutoFile to AutoFile
  * blockstorage: switch from CAutoFile to AutoFile
  * ci: Avoid toolset ambiguity that MSVC can't handle
  * streams: Remove unused CAutoFile::GetVersion
  * streams: Base BufferedFile on AutoFile instead of CAutoFile
  * Remove unused Make() overload in netmessagemaker.h
  * refactor: VectorWriter without nVersion
  * doc: Simplify guix install doc, after 1.4 release
  * doc: remove mingw-w64 install for "older" systems
  * test: replace `Callable`/`Iterable` with their `collections.abc` alternative (PEP 585)
  * test: add unit test for CConnman::AddedNodesContain()
  * p2p: do not make automatic outbound connections to addnode peers
  * test: fix `AddNode` unit test failure on OpenBSD
  * bench: add benchmark for wallet creation procedure
  * Include version.h in fewer places
  * Convert some CDataStream to DataStream
  * serialize: Drop useless version param from GetSerializeSize()
  * serialize: drop GetSerializeSizeMany
  * serialize: Drop nVersion from [C]SizeComputer
  * doc: remove x86_64 build assumption from depends doc
  * contrib: use a raw string for a regular expression literal that contains backslashes in signet/miner
  * doc: remove mention of missing bdb being a configure error
  * bench: Update nanobench to 4.3.11
  * fuzz: AutoFile with XOR
  * fuzz: Reduce LIMITED_WHILE limit for file fuzzing
  * fuzz: Remove FuzzedAutoFileProvider
  * depends: remove PYTHONPATH from config.site
  * test: migrate to some per-symbol ubsan suppressions
  * depends: Include `config.guess` and `config.sub` into `meta_depends`
  * Drop CHashWriter
  * Drop OverrideStream
  * Use ParamsWrapper for witness serialization
  * script: Enhance validations in utxo_snapshot.sh
  * ci: Add missing COPY for ./test/lint/test_runner
  * lint: Report all lint errors instead of early exit
  * guix: default ssp for Windows GCC
  * guix: remove ssp workaround from Windows GCC
  * build: remove explicit libssp linking from Windows build
  * guix: remove python-macholib
  * guix: update signapple
  * test: Add test for array serialization
  * refactor: Initialize magic bytes in constructor initializer
  * doc: rewrite explanation for -par=
  * test: add assumeutxo wallet test
  * guix: update time-machine to 77386bdbfe6b0c649c05ab37f08051d1ab3e5074
  * build: Patch Qt to handle minimum macOS version properly
  * test: fix node index bug when comparing peerinfo
  * [refactor] remove access to mapTx in validation_block_tests
  * [refactor] rewrite BlockAssembler inBlock and failedTx as sets of txids
  * scripted-diff: rename vTxHashes to txns_randomized
  * [refactor] rewrite vTxHashes as a vector of CTransactionRef
  * [refactor] remove access to mapTx in validation.cpp
  * [txmempool] make CTxMemPoolEntry::lockPoints mutable
  * [refactor] use CheckPackageLimits for checkChainLimits
  * [refactor] remove access to mapTx.find in mempool_tests.cpp
  * [refactor] remove access to mapTx in blockencodings_tests.cpp
  * [refactor] remove access to mapTx from rpc/mempool.cpp
  * [refactor] get wtxid from entry instead of vTxHashes
  * [refactor] use exists() instead of mapTx.find()
  * [refactor] remove access to mapTx from policy/rbf.cpp
  * [refactor] Add helper for retrieving mempool entry
  * [refactor] Add helper for iterating through mempool entries
  * test, assumeutxo: Use assert_debug_log for error details
  * mempool: persist with XOR
  * build: Add an old hack to remove bind_at_load from libtool.
  * build: remove -bind_at_load usage
  * fuzz: allow fake and duplicate inputs in tx_package_eval target
  * fuzz: allow reaching MempoolAcceptResult::ResultType::DIFFERENT_WITNESS in tx_package_eval target
  * test: Avoid intermittent failures in feature_init
  * ci: remove "--exclude banman" for fuzzing in mac
  * fuzz: call lookup functions before calling `Ban`
  * ci: Switch IWYU to `clang_17` branch
  * ci: win64 task does use boost:process
  * test: enable v2 transport for p2p_timeouts.py
  * test: enable v2 transport for rpc_net.py
  * test: enable v2 transport for p2p_node_network_limited.py
  * test: enable --v2transport in combination with --usecli
  * test: persist -v2transport over restarts and respect -v2transport=0
  * [refactor] updating miniminer comments to be more accurate
  * ci: remove note re M1 usage
  * test: Add missing wait for version to be sent in add_outbound_p2p_connection
  * fuzz: Avoid timeout and bloat in fuzz targets
  * tests: Increase wallet_miniscript.py rpc timeout to 90 seconds
  * Throw error if invalid parameters passed to getnetworkhashps RPC endpoint
  * fuzz: explicitly specify llvm-symbolizer path in runner
  * [refactor] Miniminer var cached_descendants to descendants
  * [refactor] Change MiniMinerMempoolEntry order
  * [validation] change package-fee-too-low, return wtxid(s) and effective feerate
  * [test] use CheckPackageMempoolAcceptResult in previous tests
  * doc: fix typos
  * [validation] add TxValidationResult::TX_RECONSIDERABLE, TX_UNKNOWN
  * [refactor] use Wtxid for m_wtxids_fee_calculations
  * test: remove custom rpc timeout for `wallet_miniscript.py`, reorder in test_runner
  * wallet: cache descriptor ID to avoid repeated descriptor string creation
  * build: Drop no longer needed MSVC warning suppressions
  * ci: Drop no longer needed "Fix Visual Studio installation" step
  * snapshots: don't core dump when running -checkblockindex after `loadtxoutset`
  * fuzz: Avoid utxo_total_supply timeout
  * test: bugfix CheckPackageMempoolAcceptResult return all error strings
  * init: completely remove `-zapwallettxes` (remaining hidden option)
  * guix: switch to 6.1 kernel headers over 5.15
  * rpc: keep .cookie if it was not generated
  * test: Add missing sync on send_version in peer_connect
  * depends: Bump to capnproto-c++-1.0.1
  * build: latest config.sub in depends
  * build: latest config.guess in depends
  * [test] MiniMiner::Linearize and manual construction
  * [refactor] unify fee amounts in miniminer_tests
  * [MiniMiner] track inclusion order and add Linearize() function
  * [test] add case for MiniMiner working with negative fee txns
  * [MiniMiner] make target_feerate optional
  * [MiniMiner] allow manual construction with non-mempool txns
  * [refactor] change MiniMinerMempoolEntry ctor to take values, update includes
  * [lint] update expected boost includes
  * doc: update docs for CHECK_ATOMIC macro
  * depends: drop -O1 workaround from arm64 apple Qt build
  * Use CheckPackageMempoolAcceptResult for package evaluation fuzzing
  * [test util] CheckPackageMempoolAcceptResult for sanity-checking results
  * tests: Fix LCOV_OPTS to be in the correct position
  * MOVEONLY: CleanupTemporaryCoins into its own function
  * [test util] CreateValidTransaction multi-in/out, configurable feerate, signal BIP125
  * scripted-diff: rename CheckPackage to IsWellFormedPackage
  * [refactor] move package checks into helper functions
  * refactor: Remove unused circular include dependency from validation.cpp
  * build: Update `qt` package up to 5.15.11
  * [primitives] Precompute result of CTransaction::HasWitness
  * fuzz: tx_pool checks ATMP result invariants
  * Create net_peer_connection unit tests
  * netbase: use reliable send() during SOCKS5 handshake
  * sock: change Sock::SendComplete() to take Span
  * guix: Zip needs to include all files with time as SOURCE_DATE_EPOCH
  * guix: update signapple
  * build: remove potential for duplciate natpmp linking
  * build: remove duplicate -lminiupnpc linking
  * gui: fix crash on selecting "Mask values" in transaction view
  * addrman: log AS only when using asmap
  * Allow unit tests to access additional CConnman members
  * net/rpc: Makes CConnman::GetAddedNodeInfo able to return only non-connected address on request
  * rpc: Prevents adding the same ip more than once when formatted differently
  * net/rpc: Check all resolved addresses in ConnectNode rather than just one
  * refactor: Remove unused gcc-9 workaround in txrequest
  * Always enable -Wsuggest-override
  * Bump g++ minimum supported version to 10
  * refactor: Fix bugprone-string-constructor warning
  * Remove WithParams serialization helper
  * [test] Test i2p private key constraints
  * Remove feature_txindex_compatibility.py in V27
  * refactor: Add LIFETIMEBOUND to all (w)txid getters
  * Add offline signing tutorial
  * [net] Check i2p private key constraints
  * Fix bugprone-lambda-function-name errors
  * Remove DirIsWritable, GetUniquePath
  * Return LockResult::ErrorWrite in LockDirectory
  * refactor: Return enum in LockDirectory
  * bugfix: Mark CNoDestination and PubKeyDestination constructor explicit
  * test: add coverage for snapshot chainstate not matching AssumeUTXO parameters
  * test: replace random_bytes with randbytes #28720
  * iwyu: Export prevector.h from script.h
  * assumeutxo, blockstorage: prevent core dump on invalid hash
  * scripted-diff: use PEP 585 built-in collection types for verify-binary script
  * test: use built-in collection types for type hints (Python 3.9 / PEP 585)
  * gui: Check for private keys disabled before attempting unlock
  * build: Bump minimum supported Clang to clang-13
  * Bump .python-version from 3.9.17 to 3.9.18
  * depends: zeromq 4.3.5
  * doc: remove release note fragments for 26.x branch
  * build: bump version to 26.99
  * test: remove unused `find_output` helper
  * test: refactor: support sending funds with outpoint result
  * tests: Reset node context members on ~BasicTestingSetup
  * shutdown: Destroy kernel last
  * wallet: Add asserts to detect unset transaction height values
  * wallet, refactor: Add CWalletTx::updateState function
  * lint: Add `lint-qt-translation.py`
  * qt: Avoid error prone leading spaces in translatable strings
  * qt, refactor: Drop superfluous type conversions
  * doc: fix broken doc/design/multiprocess.md links after #24352
  * span: Make Span template deduction guides work in SFINAE context
  * util: Add ArgsManager SetConfigFilePath method
  * interfaces: Rename CalculateBumpFees methods to be compatible with capn'proto
  * interfaces: Change getUnspentOutput return type to avoid multiprocess segfault
  * interfaces: Add schedulerMockForward method so mockscheduler RPC can work across processes
  * interfaces: Fix const virtual method that breaks multiprocess support
  * streams: Add SpanReader ignore method
  * [test] DisconnectedBlockTransactions::DynamicMemoryUsage
  * bugfix: correct DisconnectedBlockTransactions memory usage
  * rpc: mention that migratewallet can take a while
  * assume duplicate transactions are not added to `iters_by_txid`
  * move only: move implementation code to disconnected_transactions.cpp
  * Move compat.h include from system.h to system.cpp
  * refactor: update `MAX_DISCONNECTED_TX_POOL` from kb to bytes
  * scripted-diff: Use ser params operator
  * test: Use SER_PARAMS_OPFUNC in serialize_tests.cpp
  * Use type-safe txid types in orphanage
  * Introduce types for txids &amp; wtxids
  * test: check that we don't send a getaddr msg to an inbound peer
  * test: make python p2p not send getaddr messages when it's being connected to
  * [net processing] Use HasWitness over comparing (w)txids
  * test: randomized perturbing in feature_init
  * test: simplify feature_init
  * test: Add tests for unfiltered GetAddr usage
  * fuzz: Let fuzzers use filter options in GetAddr/GetAddresses
  * net: Optionally include terrible addresses in GetAddr results
  * Move compat/assumptions.h include to one place that actually needs it
  * Remove __cplusplus from compat/assumptions.h
  * Remove duplicate NDEBUG check from compat/assumptions.h
  * doc: improve documentation around connection limit maximums
  * scripted-diff: Rename connection limit variables
  * net: add m_max_inbound to connman
  * net, refactor: move calculations for connection type limits into connman
  * refactor: Move `{MAX,DEFAULT}_SCRIPTCHECK_THREADS` constants
  * refactor: Make `CCheckQueue` non-copyable and non-movable explicitly
  * refactor: Drop unneeded declaration
  * refactor: Make `CCheckQueue` constructor start worker threads
  * Make `CCheckQueue` destructor stop worker threads
  * Move global `scriptcheckqueue` into `ChainstateManager` class
  * Add support for RNDR/RNDRRS for aarch64 on Linux
  * [test/crypto] Add FSChaCha20Poly1305 AEAD python implementation
  * [test/crypto] Add FSChaCha20 python implementation
  * [test/crypto] Add RFC 8439's ChaCha20Poly1305 AEAD
  * [test/crypto] Add Poly1305 python implementation
  * [test/crypto] Use chacha20_block function in `data_to_num3072`
  * [test/crypto] Add ChaCha20 python implementation
  * addrman, refactor: improve stochastic test in `AddSingle`
  * test: add coverage to rpc_blockchain.py
  * refactor: drop protocol.h include header in rpc/util.h
  * refactor: move GetServicesNames from rpc/util.{h,cpp} to rpc/net.cpp
  * gui: Update Node window title with chain type
  * ci: Add filesystem lint check
  * refactor: Replace &lt;filesystem&gt; with &lt;util/fs.h&gt;
  * [test/crypto] Add HMAC-based Key Derivation Function (HKDF)
  * [test] Move test framework crypto functions to crypto/
  * doc: Recommend lint image build on every call
  * Bump python minimum version to 3.9
  * ci: Bump i686_multiprocess.sh to latest Ubuntu LTS
  * doc: remove out-of-date external link in src/util/strencodings.h
  * refactor: use string_view to pass string literals to Parse{Hash,Hex}
  * Update JSON-RPC-interface.md
  * GUI: OptionsDialog: Replace verbose two-option font selector with simple combobox with Custom... choice
  * GUI: Use FontChoice type in OptionsModel settings abstraction
  * GUI: Load custom FontForMoney from QSettings
  * GUI: Add possibility for an explicit QFont for FontForMoney in OptionsModel
  * GUI: Move "embedded font or not" decision into new OptionsModel::getFontForMoney method
  * rpc: Drop migratewallet experimental warning
  * gui: Show error if unrecognized command line args are present
  * GUI/Intro: Never change the prune checkbox after the user has touched it
  * Bugfix: GUI/Intro: Disable GUI prune option if -prune is set, regardless of set value
  * p2p: return `CSubNet` in `LookupSubNet`
  * sync: unpublish LocksHeld() which is used only in sync.cpp
  * doc: clarify that LOCK() does AssertLockNotHeld() internally
  * Fee estimation: extend bucket ranges consistently
  * refactor: Add more negative `!m_banned_mutex` thread safety annotations
  * refactor: replace RecursiveMutex m_banned_mutex with Mutex
  * scripted-diff: rename m_cs_banned -&gt; m_banned_mutex
  * refactor: Get rid of `BanMan::SetBannedSetDirty()`
  * refactor: Get rid of `BanMan::BannedSetIsDirty()`
  * qt: change QLineEdit error background</changelog>
  <changelog author="andrea.manzini@suse.com" date="1719230400">- Update to version 27.1:
  * doc: update manual pages for 27.1
  * build: bump version to v27.1 final
  * depends: Update Boost download link
  * build: Fix building `fuzz` binary on on SunOS / illumos
  * qt: 27.1rc1 translations update
  * depends: Fetch miniupnpc sources from an alternative website
  * test: add GetAddedNodeInfo() CJDNS regression unit test
  * p2p, bugfix: detect addnode cjdns peers in GetAddedNodeInfo()
  * crypto: disable asan for sha256_sse4 with clang and -O0
  * rpc: move UniValue in blockToJSON
  * gui: don't permit port in proxy IP option
  * gui: fix create unsigned transaction fee bump
  * depends: Fix build of Qt for 32-bit platforms
  * Fix #29767, set m_synced = true after Commit()
  * sign: don't assume we are parsing a sane Miniscript
  * rpc: Reword SighashFromStr error message
  * build: Fix false positive `CHECK_ATOMIC` test for clang-15
  * test: Fix failing univalue float test
  * doc: archive 27.0 release notes
  * [rpc, bugfix] Enforce maximum value for setmocktime
  * Change Luke Dashjr seed to dashjr-list-of-p2p-nodes.us</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1782043200">- Reference the tracking bugs for CVEs already fixed in current bitcoin
  (the affected versions all predate the shipped release):
  * CVE-2018-20587 (boo#1125092)
  * CVE-2019-15947 (boo#1149711)
  * CVE-2020-14198 (boo#1181786)
  * CVE-2021-3195 (boo#1181784)
  * CVE-2023-37192 (boo#1217678)
  * CVE-2024-35202 (boo#1231507)</changelog>
</package>
<package pkgid="06a02e22be7a1eeea8b81f7b690f06e335aba5364171c604c2734ac4b215fea7b63cfc1e4a33880de6e7ab2fade168a14f5d780e3b70c244912c6acb39797b9d" name="bitmap" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.12"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split bitmap from xorg-x11. Initial version: 1.0.5.</changelog>
  <changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 1.0.6:
  + Code clean-ups.
  + Man page fixes
  + Build system fixes
- Add pkgconfig(xproto) BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1369051200">- Update to version 1.0.7:
  + Mark usage() functions as noreturn, as suggested by gcc.
  + Fix genererate typo in bmtoa error messages.
  + Combine usage messages into a single string.
  + bitmap.man:  Fix some typos.
  + Fix pixmap leak in error paths of BWGetUnzoomedPixmap.</changelog>
  <changelog author="sndirsch@suse.com" date="1391688000">- fixed license to X11 in specfile</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1421755200">- update to version 1.0.8:
  * Stop memory leak in XmuWriteBitmapDataToFile()
  * Stop memory leaks from XtNewString(StripFilename(filename))
  * autogen.sh: Honor NOCONFIGURE=1
  * configure: Drop AM_MAINTAINER_MODE
  * Use '&amp; 7' instead '% 8' to silence clang analyzer warning
  * Demacro modernization of NewSList to plug a memory leak during
    error handling
  * Silence -Wbad-function-cast
  * Avoid shadow declarations
  * assert to avoid a NULL dereference
  * Print which option was in error along with usage message
  * config: replace deprecated use of AC_OUTPUT with
    AC_CONFIG_FILES
  * Use table markup in preference to various low-level
    constructions</changelog>
  <changelog author="sndirsch@suse.com" date="1549886400">- update to version 1.0.9:
  * This release fixes a long standing bug in the bitmap editor
    where operations would not work properly when NumLock was on.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1651406400">- update to version 1.1.0
  * Use _CONST_X_STRING to make libXt declare String as const char *
  * Fix spelling/wording issues
  * gitlab CI: add a basic build test
  * Build xz tarballs instead of bzip2
  * Move bitmaps into a new bitmaps directory
  * test: add round-trip-test for atobm &amp; bmtoa
  * atobm: accept single character lines
  * atobm: close memory leaks
  * gitlab CI: stop requiring Signed-off-by in commits
  * bitmap: Fix a crash with underspecified dimensions</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1707048000">- update to version 1.1.1
  * configure: Use AC_SYS_LARGEFILE to enable large file support
  * Ensure all *.c files include config.h before any other headers
  * atobm, bmtoa, bitmap: Add -help and -version options
  * bitmap: Print which option was in error along with usage message
  * Remove "All rights reserved" from Oracle copyright notices</changelog>
</package>
<package pkgid="57a27c306e8a7a6ecf84a86fa89e13406092a5093fa67b8a9e7de5845a936a975e555f8a048b22f16e1556cdecdcbdba1d9b2a3cf136b6fada48790ac9218c42" name="bitstream-vera-fonts" arch="noarch">
  <version epoch="0" ver="1.10" rel="160000.2.2"/>
  <changelog author="mfabian@suse.de" date="1102075200">- use new macro "%run_suseconfig_fonts".</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1155124800">- install into /usr/share/fonts/truetype</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed bitstream-vera -&gt; bitstream-vera-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Bitstream-Vera license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update project url
- Use url for source</changelog>
  <changelog author="pirateclip@protonmail.com" date="1674043200">- amend license SUSE-Bitstream-Vera to SPDX's Bitstream-Vera</changelog>
</package>
<package pkgid="1b0f5a8b699343d210484a932052613722b8766ed14a3d6055edafd5fe0b6b2dedebd6aa0efb7f9b8bfcdc34afec2e33df6c3229dad8fbe094c8b4bc59223e88" name="bittwist" arch="x86_64">
  <version epoch="0" ver="3.8" rel="bp160.1.12"/>
  <changelog author="mardnh@gmx.de" date="1451736000">- initial package, version 2.0</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Trim filler wording from description.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1688299200">- Update to version 3.7
  Changes since 2.0:
  general
  * added support for trace files with nanosecond resolution.
  * updated manual pages.
  * use in-memory trace files when sending packets in loop.
  * fixed integer overflow in stats output.
  * added static code analysis in Makefile (make check).
  * reformatted source files for C17 standard.
  * added initial python testing framework for Linux systems.
  bittwist (generator):
  * 30% speed up when sending large pcap file.
  * fixed linerate throttling.
  * updated -p option to send packets at set packets per second
    (pps).
  * added -t option to set inter-packet gap (this was previously
  - p option).
  * removed speed (-m) flag; use -p/-r to shape throughput.
  * updated linerate (-r) flag to use token bucket algorithm.
  bittwiste (editor)
  * added -G option to set fixed or random inter-packet gap in
    microseconds.
  * added support for CIDR notation when modifying IPv4/IPv6
    addressA.
  * added support for random MAC address.
  * added option to edit IPv6 next header.
  * added random number support for id, ttl, proto, next header,
    hop limit.
  * added option to set uniformly distributed random number
    (mersenne twister). for tcp/udp source/destination port and
    tcp sequence/acknowledgment number.
  * added -N flag to duplicate packets from trace file, e.g.
  - N 100000 to repeat packets from trace file for 100,000 times
  * added ip6tcp and ip6udp templates.
  * updated -I flag to allow loading trace file from built-in
    templates.
  * options to edit IPv4/IPv6 packets to allow testing of
    classification/queuing.  features of switches/routers, e.g.
    + -T ip -e 3 to indicate congestion to the end hosts
    + -T ip6 -c 16 to classify packet for operation and management
    of the network
    + -T ip6 -f 0xfffff to set custom flow label
  * added support for IPv6 packets.
  * improved cksum().
  * expanded test cases.
- Update patch:
  * bittwist-makefile.diff
- Update URL</changelog>
  <changelog author="Ming Li &lt;mli@suse.com&gt;" date="1695384000">- Update to version 3.8
  * bumped from gcc -O2 to -O3 optimization flag:
    https://gcc.gnu.org/onlinedocs/gcc/Optimize-Options.html#index-O3
  bittwist (generator)
  * added RFC 2544 benchmark data generator and benchmark page
  * improved actual inter-packet gap replay by using token bucket algorithm for
    short IPG and self-regulated timer for long IPG</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="44dc60f6898b762603a18ab9fc2c57720750cc8eee2246df2e4422a73af7453c723d213732d1770a678396f86cc60f342e42233803e1406f90b3827002ed7a8a" name="bitwise" arch="x86_64">
  <version epoch="0" ver="0.50" rel="bp160.1.13"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1607256000">- Initial package, version 0.41</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1617710400">- Add "-Wl,--start-group" to CFLAGS to fix Tumbeweed linking
  errors.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1618574400">- Update to version 0.42
  * Add support for leading 0 on binary numbers</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1635768000">- Update to version 0.43
  * Add support for IPv4 parsing and output in command line mode
  * Fix compiler warnings</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1692619200">- Update to version 0.50
  * Enhancements:
    + Add r command to reverse endianess
    + Allow shortening of commands
  * Bug Fixes:
    + Disable mouse events in interactive command mode
    + Fix backward key not working in some terminals
    + Fix divide by zero crash
    + Fit bit function overflow</changelog>
</package>
<package pkgid="043d5bfcc3df2f631a38d636e84b8f7e68c3678e930dfd678abc3f8bcab0c3672b1fb393c71084f8e585d57d5bf811c0606420757113afd48773397b1e32e453" name="bk" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="bp160.1.13"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1718280000">- Initial package</changelog>
</package>
<package pkgid="54b0a491850f0c106ee17a8e2ba3745d3dd08374e49425eb3aed0dbe18807c23f05cad3fd6ab4afc46108c1b4113f90434a3b51a8b582f7c75edda8c9d430ac2" name="black-hole-solver" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="bp160.1.14"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1595851200">- Initial commit</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619697600">- Update to version 1.10.1:
  * Add "--show-max-num-played-cards" flag, inspired by
    https://politaire.com/article/blackhole.html
- Add fix-pkgconfig-libdir.patch to fix path of library dir in
  pkgconfig file.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 1.2.0:
  * Convert to cmake/rinutils_bootstrap.cmake
  * Minor refactorings</changelog>
</package>
<package pkgid="009b061f5f6fd5d9791d114a84652c61a2f3492ef6e0cea471c332246e861c1d18888561d84a788b086a1fe60b5c21df77b6f391bb726f875d74fd6462e4a7bf" name="black-hole-solver-devel" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="bp160.1.14"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1595851200">- Initial commit</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619697600">- Update to version 1.10.1:
  * Add "--show-max-num-played-cards" flag, inspired by
    https://politaire.com/article/blackhole.html
- Add fix-pkgconfig-libdir.patch to fix path of library dir in
  pkgconfig file.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 1.2.0:
  * Convert to cmake/rinutils_bootstrap.cmake
  * Minor refactorings</changelog>
</package>
<package pkgid="6d73df3ccd9f6e3c088837c86cc73f27e26b70d8411e0796c5e34b8a641a5adb349e26f05c905ca12ac1bd4b3de1f929c2badbde9010c246b11aed08cf856b63" name="blacs-devel-headers" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="bp160.1.5"/>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1592395200">- Add compiler flag -fallow-argument-mismatch to allow build with
  gcc10.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1594900800">- Add openmpi4 spport (provided by Alin M Elena)
- Replace -fallow-argument-mismatch by -std=legacy</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1609848000">- Fix build for non-HPC packages: do not build BLACS headers for
  multiple flavors (boo#1178116).</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1698062401">- Disable HPC flavors on i586</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1706875200">- Enable openmpi5 and gnu-hpc-openmpi5 flavours.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1726660800">- Update to version 2.2.0:
  * Feature: Allow compilation in ILP64 mode
  * (gh#Reference-ScaLAPACK/scalapack#19).  Bugs fixed:
  - Use pointer macro to prevent integer overflow
    (gh#Reference-ScaLAPACK/scalapack#16).
  - Fix argument mismatches for implicitly defined functions
    (for gcc-10+ compatibility)
    (gh#Reference-ScaLAPACK/scalapack#26).
  - No memory leaks on blacs_exit
    (gh#Reference-ScaLAPACK/scalapack#37).
- Add `-Wno-error=implicit-function-declaration` to work around
  non-prototyped functions (gh#Reference-ScaLAPACK/scalapack#81).</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1742817600">- Disable and remove support of gnu-hpc build flavours (bsc#1239982)
- openmpi5 is not available on 32b systems
- Switch default openmpi to openmpi4 to openmpi5</changelog>
</package>
<package pkgid="e056646e354601445be9fd8b94d746f4bc79e339503a51ad5e8f1ff5940e2e0fa7ad327ec8d55d3c13a66a3e6193411d534afe2863e6b6ce4fbad1a57ac10678" name="bladeRF" arch="x86_64">
  <version epoch="0" ver="2023.02" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1610712000">- Update to version 2020.12
  libbladeRF
  * Added packet mode format BLADERF_FORMAT_PACKET_META.
    libbladeRF is able to exchange variable length packets with
    the HDL if packet mode is enabled
  * Added RFIC parameters for burst waveforms
  * Ability to query backend for handle and lock FX3
  * Variable length packet support for PACKET_META mode
  bladeRF-cli:
  * Indicate presence of packet cores in FPGA
  Python
  * Update for libbladeRF v2.4.0
- Drop patches (integrated upstream):
  * 0001-libbladeRF-unambiguous-flash_arch-macro-name.patch
  * 0002-libbladeRF-define-bladerf2_state_to_string-as-extern.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613217600">- Update to version 2021.02
  Bugfix release
  * Revert "ad936x_params: allow CTRL_IN to control gain in MGC
    mode"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613476800">- Update to version 2021.03
  * cyapi: add META support to cyapi backend</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1632225600">- Update to version 2021.09
  * Support new keywords in config file for bladerf2.0 clocking:
    + Update doc for new keywords
    + Add clock_out keyword
    + Add clock_sel keyword
    + Add refin_freq keyword
    + Add clock_ref keyword
    + Fix parsing of vctcxo_tamer key
  * Python bindings: Fix get_gain_modes
  * Make all of the get_*_range functions work
  * Revert "hdl: bladerf-wlan: disable RX switch when tx_ota_req
    is asserted"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1633435200">- Update to version 2021.10
  * Fix up packet mode bugs
  * Add Wishbone master core as NiOS peripheral</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1642852800">- Don't set VERSION_INFO_EXTRA to strip "-git-unknown" from the
  libbladeRF version (e.g. "2.4.1-git-unknown" -&gt; "2.4.1")</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676289600">- Update to version 2023.02
  * libbladeRF
    + Add 8bit format mode support
    + Add AD936x overclocking feature
    + Fix bugs, including a locking bug
  * FPGA:
    + Add 8bit mode support to FIFO reader and writer
- Add patch:
  * bladeRF-doxygen-no-timestamp.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Align path for document installation between openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Add _service file to download ad9361.tar.xz file from git
  repository.</changelog>
</package>
<package pkgid="15f499ce4951c4977aa7ff03df7fbb2e05e542f00c5639feceacaac9f0212845c6ad5f70e569b68139ed426098f5c1a19c3fe40c84e872ea2681cf0e02b0bab2" name="bladeRF-devel" arch="x86_64">
  <version epoch="0" ver="2023.02" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1610712000">- Update to version 2020.12
  libbladeRF
  * Added packet mode format BLADERF_FORMAT_PACKET_META.
    libbladeRF is able to exchange variable length packets with
    the HDL if packet mode is enabled
  * Added RFIC parameters for burst waveforms
  * Ability to query backend for handle and lock FX3
  * Variable length packet support for PACKET_META mode
  bladeRF-cli:
  * Indicate presence of packet cores in FPGA
  Python
  * Update for libbladeRF v2.4.0
- Drop patches (integrated upstream):
  * 0001-libbladeRF-unambiguous-flash_arch-macro-name.patch
  * 0002-libbladeRF-define-bladerf2_state_to_string-as-extern.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613217600">- Update to version 2021.02
  Bugfix release
  * Revert "ad936x_params: allow CTRL_IN to control gain in MGC
    mode"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613476800">- Update to version 2021.03
  * cyapi: add META support to cyapi backend</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1632225600">- Update to version 2021.09
  * Support new keywords in config file for bladerf2.0 clocking:
    + Update doc for new keywords
    + Add clock_out keyword
    + Add clock_sel keyword
    + Add refin_freq keyword
    + Add clock_ref keyword
    + Fix parsing of vctcxo_tamer key
  * Python bindings: Fix get_gain_modes
  * Make all of the get_*_range functions work
  * Revert "hdl: bladerf-wlan: disable RX switch when tx_ota_req
    is asserted"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1633435200">- Update to version 2021.10
  * Fix up packet mode bugs
  * Add Wishbone master core as NiOS peripheral</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1642852800">- Don't set VERSION_INFO_EXTRA to strip "-git-unknown" from the
  libbladeRF version (e.g. "2.4.1-git-unknown" -&gt; "2.4.1")</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676289600">- Update to version 2023.02
  * libbladeRF
    + Add 8bit format mode support
    + Add AD936x overclocking feature
    + Fix bugs, including a locking bug
  * FPGA:
    + Add 8bit mode support to FIFO reader and writer
- Add patch:
  * bladeRF-doxygen-no-timestamp.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Align path for document installation between openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Add _service file to download ad9361.tar.xz file from git
  repository.</changelog>
</package>
<package pkgid="b8e64b2dcbb0d3f91f66502ee6d9c6eb6954c8366e659e18f2c315282d1a2fe90ca6026f939ab5fd49601a6786b07d93c66b6c0f36adc2f7d5e371489fc1296b" name="bladeRF-udev" arch="x86_64">
  <version epoch="0" ver="2023.02" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1610712000">- Update to version 2020.12
  libbladeRF
  * Added packet mode format BLADERF_FORMAT_PACKET_META.
    libbladeRF is able to exchange variable length packets with
    the HDL if packet mode is enabled
  * Added RFIC parameters for burst waveforms
  * Ability to query backend for handle and lock FX3
  * Variable length packet support for PACKET_META mode
  bladeRF-cli:
  * Indicate presence of packet cores in FPGA
  Python
  * Update for libbladeRF v2.4.0
- Drop patches (integrated upstream):
  * 0001-libbladeRF-unambiguous-flash_arch-macro-name.patch
  * 0002-libbladeRF-define-bladerf2_state_to_string-as-extern.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613217600">- Update to version 2021.02
  Bugfix release
  * Revert "ad936x_params: allow CTRL_IN to control gain in MGC
    mode"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613476800">- Update to version 2021.03
  * cyapi: add META support to cyapi backend</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1632225600">- Update to version 2021.09
  * Support new keywords in config file for bladerf2.0 clocking:
    + Update doc for new keywords
    + Add clock_out keyword
    + Add clock_sel keyword
    + Add refin_freq keyword
    + Add clock_ref keyword
    + Fix parsing of vctcxo_tamer key
  * Python bindings: Fix get_gain_modes
  * Make all of the get_*_range functions work
  * Revert "hdl: bladerf-wlan: disable RX switch when tx_ota_req
    is asserted"</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1633435200">- Update to version 2021.10
  * Fix up packet mode bugs
  * Add Wishbone master core as NiOS peripheral</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1642852800">- Don't set VERSION_INFO_EXTRA to strip "-git-unknown" from the
  libbladeRF version (e.g. "2.4.1-git-unknown" -&gt; "2.4.1")</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1676289600">- Update to version 2023.02
  * libbladeRF
    + Add 8bit format mode support
    + Add AD936x overclocking feature
    + Fix bugs, including a locking bug
  * FPGA:
    + Add 8bit mode support to FIFO reader and writer
- Add patch:
  * bladeRF-doxygen-no-timestamp.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708689600">- Align path for document installation between openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Add _service file to download ad9361.tar.xz file from git
  repository.</changelog>
</package>
<package pkgid="dd384f67d9b64f5450b694115e9d5651bd7071ac3bd184530c1a3e7adffa3857bbefbc73c82542a5da91caf41d2297c6dd661c913c466995a7294bc1ad917a86" name="blame" arch="x86_64">
  <version epoch="0" ver="1.4+t20250101" rel="bp160.1.2"/>
  <changelog author="Michael Chapman &lt;foonly@users.sourceforge.net&gt;" date="1164283200">- version 1.3.1-1:
  - Gnulib updates.
  - Rebuilt for fc4/fc5/fc6.</changelog>
  <changelog author="manfred99@gmx.ch" date="1437480000">- rpm packaging for OBS</changelog>
  <changelog author="manfred99@gmx.ch" date="1444046400">- spec-cleaner changes
- separate changelog file</changelog>
  <changelog author="manfred99@gmx.ch" date="1469966400">- fix for -Werror=format-security
  * format-security.patch</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1591704000">- add "-fcommon" for GCC 10
- add %licence tag in spec file.
- some spec file cleanup</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1619956800">- as the original source location is dead, switch to the repo
    https://github.com/ThomasDickey/rcs-blame-snapshots
- update to version t20210207:
  * several build and code fixes
- remove patch format-security.patch, not needed anymore</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1664798400">- update to snapshot t20220129:
  * configure and makefile updates</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1667908800">- update to snapshot t20221108:
  * minor cleanup of README and blame.1
  * add VERSION file
  * config and install-sh updates</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1707739200">- update to version 1.4 snapshot t20240206:
  * spelling/documentation fixes
  * support $RCS_DIR for compatibility with cm_tools utilities.
  * make test-suite run from the build-directory rather than the installed copy.
- update to snapshot t20240204:
  * modify top-level makefile to work around pmake's reordering of rules
  * fix a build problem with lib/mktime.c on NetBSD i386
  * modify configure script to permit building with 64-bit time_t on 32-bit system.
  * require standard C, e.g., c89 and later for compiler
  * reduce stricter compiler warnings
- update to snapshot t20240201:
  * fixes to build/work with MacOS and Solaris 10.
- update to snapshot t20240130:
  * build-fixes to work with c11, c23
  * autoconf updates</changelog>
  <changelog author="Manfred Schwarb &lt;manfred99@gmx.ch&gt;" date="1736251200">- update to version 1.4 snapshot t20250101:
  * configure updates
  * add "--format-date" option
  * fix stricter gcc 15 warnings</changelog>
</package>
<package pkgid="7531ed6f0dac4c5115ae8cba8bfed3da47cfbb4f224776f73b6d0feedfb891813ea5f7f4c3124fee0c15ba3228aa9469e60c7513750f2a195154dbd70b3a3b92" name="blanket" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="bp160.1.11"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604404800">- Initial package of blanket 0.3.1 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1618833600">- Update to 0.4.0:
  * Added autostart on background feature
  * Added six new sounds
  * New sounds icons, thanks to Jakub Steiner
  * Sounds improvements
  * Added French translation
  * Added Ukrainian translation
  * Added Slovak translation
  * Added Nepali translation
  * Added German translation
  * Added Croatian translation
  * Performance improvements
  * UI improvements
  * Bug fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1619611200">- Update to 0.4.1:
  * Added Turkish translation
  * Added Occitan translation
  * Fix German and Slovak translations</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1633003200">- Update to 0.5.0:
  * Added new Presets feature
  * Now you can toggle sounds by clicking the row
  * Added new dark mode option
  * Added Tamil translation
  * Added Simplified Chinese translation
  * Added Russian translation
  * Added Irish translation
  * Added Japanese translation
  * Added Indonesian translation
  * Added Finnish translation
  * Added Portuguese translation
  * Added Swedish translation
  * Added Czech translation
  * Added Hungarian translation
  * Added Persian (Farsi) translation
  * Added Galician translation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650456000">- Update to 0.6.0:
  * App ported to GTK 4 and libadwaita
  * User interface refinements
  * New translations added
  * Bug fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1712577600">- Update to 0.7.0:
  * Redesign the user interface and use latest GNOME patterns
  * Inhibit suspension when playing
  * Pause playback if the system enters power saver mode
  * MPRIS: Implement Play, Pause and Stop methods in addition to PlayPause
  * MPRIS: Implement Next and Prev methods for navigating presets
  * Updated Pink Noise sample
  * Changed train sound
  * Added preference to always start on pause</changelog>
</package>
<package pkgid="db247126653e05debda572cc251ac34084192bd1870e6c8ac05cab0c83302012ec18537934f7416cc04d8e9e73ce9adc957e4bf8ef9d253d49af9c21c8d62282" name="blanket-lang" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="bp160.1.11"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1604404800">- Initial package of blanket 0.3.1 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1618833600">- Update to 0.4.0:
  * Added autostart on background feature
  * Added six new sounds
  * New sounds icons, thanks to Jakub Steiner
  * Sounds improvements
  * Added French translation
  * Added Ukrainian translation
  * Added Slovak translation
  * Added Nepali translation
  * Added German translation
  * Added Croatian translation
  * Performance improvements
  * UI improvements
  * Bug fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1619611200">- Update to 0.4.1:
  * Added Turkish translation
  * Added Occitan translation
  * Fix German and Slovak translations</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1633003200">- Update to 0.5.0:
  * Added new Presets feature
  * Now you can toggle sounds by clicking the row
  * Added new dark mode option
  * Added Tamil translation
  * Added Simplified Chinese translation
  * Added Russian translation
  * Added Irish translation
  * Added Japanese translation
  * Added Indonesian translation
  * Added Finnish translation
  * Added Portuguese translation
  * Added Swedish translation
  * Added Czech translation
  * Added Hungarian translation
  * Added Persian (Farsi) translation
  * Added Galician translation</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650456000">- Update to 0.6.0:
  * App ported to GTK 4 and libadwaita
  * User interface refinements
  * New translations added
  * Bug fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1712577600">- Update to 0.7.0:
  * Redesign the user interface and use latest GNOME patterns
  * Inhibit suspension when playing
  * Pause playback if the system enters power saver mode
  * MPRIS: Implement Play, Pause and Stop methods in addition to PlayPause
  * MPRIS: Implement Next and Prev methods for navigating presets
  * Updated Pink Noise sample
  * Changed train sound
  * Added preference to always start on pause</changelog>
</package>
<package pkgid="39db804b2b84227a7736445fba495564016b4b783ccff1db96668f61e9bf493cca6310b004b84cc52e570787876f7b58f0e6479eccd84c8336274cf0acf84f4d" name="blas-devel" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1676030400">- Fix missing symbols for deprecated functions in LAPACK, add
  Restore_missing_deprecated_prototypes.patch
- Add -Wl,--no-undefined when creating shared libraries,
  to catch missing symbols during build
- Test fixes:
  * Build test binaries during %build, run in %check
  * Fix incorrect path for test output, to actually catch
    any test failures
- Spec file cleanup:
  * Do not rename blaslib, it is used for test binaries
  * Use same commands for building lapacke as for other libs
  * Remove unused FFLAGS_NOOP for test binaries</changelog>
  <changelog author="eich@suse.com" date="1676462400">- As a configurable option add tmglib code to the LAPACK librarly
  and enable TMG in LAPACKE as the header files provide its API
  (boo#1207989 &amp; bsc#1087426).
- Fix update-alternatives for lapacke (bsc#1207358).
- Restore generic link for update-alternatives. This is usually
  set by the update-alternatives and it is '%ghost'ed but rpmlint
  complains.
- Move update-alternatives --remove to %%postun to stop rpmlint
  from complaining.
- Removed useless - because never executed - %%postrans scriptlets.
- Added missing _%%{_arch} to update-alternative names.
- rpmlint complains anyway - this time about alternative-link-missing
  - as it does not understand the _%%{_arch} endings: muffle with
  rpmlintrc.
- Make arch-dependent generic names conditional.</changelog>
  <changelog author="eich@suse.com" date="1677153600">- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1710158400">- Add Fix-testing-input.patch to remove stray ';' in the input data
  for TESTING/dgebal.in now rejected with the GFortran 14 runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1714824000">- Update to version 3.12.0 (boo#1223783):
  * Long list of changes, see
    &lt;https://netlib.org/lapack/lapack-3.12.0.html&gt;.
- Drop all upstreamed or otherwise fixed patches:
  * lapack-3.2.2.patch
  * Fix-MinGW-build-error.patch
  * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
  * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
  * Fix-out-of-bounds-read.patch
  * Restore_missing_deprecated_prototypes.patch
  * Fix-testing-input.patch
- Use cmake for configure and ninja for build.
- Package pkgconf and cmake scripts for -devel pkgs.
- Drop multibuild flavour for man files.
- Add multibuild flavour for static libs (also used to build man
  files).
- Build man files using doxygen instead of using pre-built files.
- Explicitly symlink library to relocated shared libs in
  baselibs.conf (boo#1207563).
- Recommend lapack-man package from
  {blas,lapack,lapacke,cblas}-devel packages.</changelog>
  <changelog author="badshah400@gmail.com" date="1718366400">- Rename isnan man file to avoid conflict with libm's isnan (from
  package man-pages).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720094400">- Add fix-lapack-testing.patch to fix tests
  gh#Reference-LAPACK/lapack@5b0687f429cf</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721600">- Add -ffp-contract=off flag for aarch64 to avoid precision issues
  https://github.com/scipy/scipy/issues/21475#issuecomment-2454203196</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721601">- Fix previous commit for static build on aarch64
- Run %fdupes on man folder as suggested by rpmlint</changelog>
</package>
<package pkgid="7880bf7c72dd2bbca224dedd33892e92aac98586ba99fcc84fce07e35ab2ee31c44a220238c40232b810d2777e11d807540b23ea518b31f3148e24f560aac8e6" name="blas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1676030400">- Fix missing symbols for deprecated functions in LAPACK, add
  Restore_missing_deprecated_prototypes.patch
- Add -Wl,--no-undefined when creating shared libraries,
  to catch missing symbols during build
- Test fixes:
  * Build test binaries during %build, run in %check
  * Fix incorrect path for test output, to actually catch
    any test failures
- Spec file cleanup:
  * Do not rename blaslib, it is used for test binaries
  * Use same commands for building lapacke as for other libs
  * Remove unused FFLAGS_NOOP for test binaries</changelog>
  <changelog author="eich@suse.com" date="1676462400">- As a configurable option add tmglib code to the LAPACK librarly
  and enable TMG in LAPACKE as the header files provide its API
  (boo#1207989 &amp; bsc#1087426).
- Fix update-alternatives for lapacke (bsc#1207358).
- Restore generic link for update-alternatives. This is usually
  set by the update-alternatives and it is '%ghost'ed but rpmlint
  complains.
- Move update-alternatives --remove to %%postun to stop rpmlint
  from complaining.
- Removed useless - because never executed - %%postrans scriptlets.
- Added missing _%%{_arch} to update-alternative names.
- rpmlint complains anyway - this time about alternative-link-missing
  - as it does not understand the _%%{_arch} endings: muffle with
  rpmlintrc.
- Make arch-dependent generic names conditional.</changelog>
  <changelog author="eich@suse.com" date="1677153600">- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1710158400">- Add Fix-testing-input.patch to remove stray ';' in the input data
  for TESTING/dgebal.in now rejected with the GFortran 14 runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1714824000">- Update to version 3.12.0 (boo#1223783):
  * Long list of changes, see
    &lt;https://netlib.org/lapack/lapack-3.12.0.html&gt;.
- Drop all upstreamed or otherwise fixed patches:
  * lapack-3.2.2.patch
  * Fix-MinGW-build-error.patch
  * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
  * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
  * Fix-out-of-bounds-read.patch
  * Restore_missing_deprecated_prototypes.patch
  * Fix-testing-input.patch
- Use cmake for configure and ninja for build.
- Package pkgconf and cmake scripts for -devel pkgs.
- Drop multibuild flavour for man files.
- Add multibuild flavour for static libs (also used to build man
  files).
- Build man files using doxygen instead of using pre-built files.
- Explicitly symlink library to relocated shared libs in
  baselibs.conf (boo#1207563).
- Recommend lapack-man package from
  {blas,lapack,lapacke,cblas}-devel packages.</changelog>
  <changelog author="badshah400@gmail.com" date="1718366400">- Rename isnan man file to avoid conflict with libm's isnan (from
  package man-pages).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720094400">- Add fix-lapack-testing.patch to fix tests
  gh#Reference-LAPACK/lapack@5b0687f429cf</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721600">- Add -ffp-contract=off flag for aarch64 to avoid precision issues
  https://github.com/scipy/scipy/issues/21475#issuecomment-2454203196</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721601">- Fix previous commit for static build on aarch64
- Run %fdupes on man folder as suggested by rpmlint</changelog>
</package>
<package pkgid="4aafa2534f3e5899b2e8cfb81c8f9c95ff26fdbcf9c36922067c0fdcbc1b8417a156e7b8e56ec40acf7f809a4f8419d24c149c4b5497280c2a97fdacdd0c0631" name="blas-devel-static" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1676030400">- Fix missing symbols for deprecated functions in LAPACK, add
  Restore_missing_deprecated_prototypes.patch
- Add -Wl,--no-undefined when creating shared libraries,
  to catch missing symbols during build
- Test fixes:
  * Build test binaries during %build, run in %check
  * Fix incorrect path for test output, to actually catch
    any test failures
- Spec file cleanup:
  * Do not rename blaslib, it is used for test binaries
  * Use same commands for building lapacke as for other libs
  * Remove unused FFLAGS_NOOP for test binaries</changelog>
  <changelog author="eich@suse.com" date="1676462400">- As a configurable option add tmglib code to the LAPACK librarly
  and enable TMG in LAPACKE as the header files provide its API
  (boo#1207989 &amp; bsc#1087426).
- Fix update-alternatives for lapacke (bsc#1207358).
- Restore generic link for update-alternatives. This is usually
  set by the update-alternatives and it is '%ghost'ed but rpmlint
  complains.
- Move update-alternatives --remove to %%postun to stop rpmlint
  from complaining.
- Removed useless - because never executed - %%postrans scriptlets.
- Added missing _%%{_arch} to update-alternative names.
- rpmlint complains anyway - this time about alternative-link-missing
  - as it does not understand the _%%{_arch} endings: muffle with
  rpmlintrc.
- Make arch-dependent generic names conditional.</changelog>
  <changelog author="eich@suse.com" date="1677153600">- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1710158400">- Add Fix-testing-input.patch to remove stray ';' in the input data
  for TESTING/dgebal.in now rejected with the GFortran 14 runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1714824000">- Update to version 3.12.0 (boo#1223783):
  * Long list of changes, see
    &lt;https://netlib.org/lapack/lapack-3.12.0.html&gt;.
- Drop all upstreamed or otherwise fixed patches:
  * lapack-3.2.2.patch
  * Fix-MinGW-build-error.patch
  * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
  * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
  * Fix-out-of-bounds-read.patch
  * Restore_missing_deprecated_prototypes.patch
  * Fix-testing-input.patch
- Use cmake for configure and ninja for build.
- Package pkgconf and cmake scripts for -devel pkgs.
- Drop multibuild flavour for man files.
- Add multibuild flavour for static libs (also used to build man
  files).
- Build man files using doxygen instead of using pre-built files.
- Explicitly symlink library to relocated shared libs in
  baselibs.conf (boo#1207563).
- Recommend lapack-man package from
  {blas,lapack,lapacke,cblas}-devel packages.</changelog>
  <changelog author="badshah400@gmail.com" date="1718366400">- Rename isnan man file to avoid conflict with libm's isnan (from
  package man-pages).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720094400">- Add fix-lapack-testing.patch to fix tests
  gh#Reference-LAPACK/lapack@5b0687f429cf</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721600">- Add -ffp-contract=off flag for aarch64 to avoid precision issues
  https://github.com/scipy/scipy/issues/21475#issuecomment-2454203196</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721601">- Fix previous commit for static build on aarch64
- Run %fdupes on man folder as suggested by rpmlint</changelog>
</package>
<package pkgid="2a7f7a961844182e149e82218811f9155ead75c06d301aefa1ee9c15811acde8eb891ff5d4171d75d9bf07f35199a6095e5130bdb6c489a133d75a9711ab95cd" name="blasphemer" arch="noarch">
  <version epoch="0" ver="0.1.8" rel="bp160.1.9"/>
  <changelog author="mailaender@opensuse.org" date="1468152000">- initial packaging of version 0.1.5</changelog>
  <changelog author="jengelh@inai.de" date="1468152001">- Summary mismatch with description fixed</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Add new repository home (no new tar releases yet)</changelog>
  <changelog author="Matthias Mail&#xE4;nder &lt;mailaender@opensuse.org&gt;" date="1635681600">- Update to version 0.1.7
  * Added an additional episode
  * This release is officially single player and death match ready
  * New maps were added
  * A lot new texture, sprites and sounds</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1676203200">- Update to release 0.1.8
  * Added Ghoul (Mummy), replacing the previous deer demon.
  * Added Harpy (Imp), replacing the previous lost soul.
  * Added Ogre (Maulotaurus).
  * Added Morphed Eye (Chicken).
  * Added Unknown (Lich), replacing Freedoom's cacodemon.
  * Textures: added archways variations
- Added Deathmatch maps</changelog>
</package>
<package pkgid="786d2aed70c9dc5e5ad163038f078aa64b090b977567b887f3741e19ca2e1b5f47f492d870b19aa74743632638d1e61ed2dc5a84793e5ca7fd2ce0eb4a90a5c1" name="blaspp-devel" arch="x86_64">
  <version epoch="0" ver="2024.05.31" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1717934400">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718366400">- Add pkgconfig(blas) as Requires for blaspp-devel.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1724155200">- Add 87.patch for reproducible builds (boo#1084909)</changelog>
</package>
<package pkgid="58a9aef7368f1fd837062eee8f82259bc826e7914a2a2468669de594895d46531ea5044f0927f9a6ac3b636c16333b32679cb5d2ce76cef90f375b5dd09339c2" name="blaze-devel" arch="noarch">
  <version epoch="0" ver="3.8.2" rel="bp160.1.9"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700568000">- Initial package.</changelog>
</package>
<package pkgid="ea157a16ee288b06411ad0468016a4ed1e84bf68ff26ea54487cfbcf1a89f636cdd4257825ef7181ba5dadf465773b33dad25f2a7e72c135f068031f12052107" name="blaze-devel-doc" arch="noarch">
  <version epoch="0" ver="3.8.2" rel="bp160.1.9"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700568000">- Initial package.</changelog>
</package>
<package pkgid="febf5d6f3e8c56ed2894ffc47034b782e40e911978d2e20eb73355049edd14502b26b7900a92dbae25487fe10aa18bf0c99b7728edfea6ac81b2283d5c72de5d" name="bleachbit" arch="noarch">
  <version epoch="0" ver="4.6.0" rel="bp160.1.9"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1587643200">- BuildRequire gobject-introspection and let deps autodetect
- BuildRequire on pkgconfig(systemd) so OBS can use systemd-mini
- Remove desktop_database_post macros
- Don't recommend lang package. Supplement is added already
- Remove python3-configparser seems not needed anymore</changelog>
  <changelog author="andrew ziem &lt;ahz001@gmail.com&gt;" date="1589716800">- Add missing dependency typelib-1_0-Gtk-3_0 to fix error
  "Namespace Gtk not available"</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1589803200">- Fix dependencies:
  + gobject-introspection is a build-depoendency, not a runtime
    dependency. Having it in the buildroot also enable the
    typelib()-dependency scanner, which in turn allows to:
  + Remove typelib-1_0-Gtk-3_0 Requires: this is now propelry
  auto-detected (together with the other typelib-* deps).
- Fix more shebangs using sed: we still ended up requiring python2.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598875200">- Update to 4.1.0:
  * Fix KeyError: 'win10_theme' on Linux (#880)
  * Fix file_wipe() for special files (#875)
  * Fix SyntaxWarning: "is not" with a literal. (#902)
  * Open files with FILE_FLAG_BACKUP_SEMANTICS (#337)
  * Use encoding='utf-8' when opening json/xml files (#874)
  * Worker generator should be added using default prior (#881)
  * Update translations</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1609761600">- Update to 4.2.0:
  * Fix: dnf process was not closed (#1001)
  * Update translations
  * Add Slack cleaner
  * Add new action for deleting firefox favicons
  * Initial support for Microsoft Edge
  * Clean Chromium installed as snap</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 4.3.0:
  * Clean the Brave browser (1061).
  * Use the new --all-but-warning CLI command (365).
  * In the preferences, toggle the option to remember window geometry.
    Restart BleachBit and check that the behavior matches the setting
    (1056).
  * Download chaff, and there should not be a ResourceWarning
    message (issue 856).
  * Clean Firefox favicons in URL history, and there should not
    be a sqlite3.Warning message (1135).
  * Wipe the free space on a FAT32 partition with more than
    4GB of available space (1051).
  * Clean Thunderbird - Index, and there should be a warning (363).
  * In Google Chrome, type CTRL+S to save the page. Save it
    to a non-default location, and not the location. Then in
    BleachBit, clean Google Chrome - History, and back in Google
    Chrome verify the location was forgotten (944).
  * On a system with non-English user interface, use BleachBit to
    wipe free space, and verify the "About # minutes remaining"
    message is translated (1162). This also depends on whether
    this string was translated for your language.
  * Clean Firefox - URL History, and verify bookmark icons were
    not deleted (1081).
  * Clean Google Chrome unstable (1147).
  * Open Thunderbird and try to clean it while it is running.
    There should be an error (1112).
  * Clean journald, and BleachBit should report how much space
    was freed (1115).
  * For any GTK theme, the scrollbar should not cover the
    checkboxes (1034.)
  * Clean System - Recent documents, and it may clean more paths (1118).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1624881600">- Update to 4.4.0:
  * Add cleaner for Brave browser
  * Clean the last location of the File - Save As dialog in
    Google Chrome
  * Clean session for Thunderbird
  * Add new command line option --all-but-warning to enable all
    cleaners that do not emit a warning
  * Add preference option to remember window geometry,
    which means whether it was maximized and the last window size,
    if it was not maximized.
  * Fix ResourceWarning message when cleaning Firefox URL history
  * Fix: do not clean bookmarks in Firefox
  * Add warning when cleaning Thunderbird - Index
  * Fix wiping free space on FAT32 partitions with more than 4GB of
  available space
  * Fix "About # minutes remaining" was not translatable into any
    language
  * Fix ResourceWarning message when downloading chaff
  * The menu item Diagnostics was replaced with the term System
    Information.
  * Add ability to clean the profile of the unstable version of
    Google Chrome
  * Clean more with System - Recent Documents
  * Correctly detect that Thunderbird is running
  * Correctly detect how much space was freed by journald
  * Adjust spacing so the scrollbar does not cover checkbox with
    some GTK themes
  * Improve AppStream metainfo</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 4.4.2
  * Separate the cleaning option for site preferences from history
  * Disable the auto-hide behavior for scrollbars
  * Report zero bytes as "0B" instead of just "0"</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1667649600">- Activate test suite
- Add _constraints to increase disk space, needed by tests</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1699963200">- Update to 4.6.0
  * Clean recently-closed tabs on Firefox.
  * Clean autofill data in Chromium-based browsers.
  * Clean more of Firefox: AlternativeServices.txt.
  * Improve support for FileZilla.
  * Support new versions of GIMP and add runtime detection.
  * Fix AttributeError and "OperationalError: no such table" when cleaning Firefox.
  * Add workaround for DLL security vulnerability.
  * Prevent opening other dialogs when making chaff.
  * Vacuum last after other operations in every language.
  * Add title for dialogs.
  * Enable more strings to be translated.
  * Improve organization of --help in the CLI.
  * Show debug information in CLI only if --debug or --preset is set.
  * Fix crash when wiping free space with Brazilian Portuguese.
  * Specific to Linux
  * Clean Microsoft Edge on Linux.
  * Clean Firefox and Thunderbird when installed as Flatpak.
  * Clean Google Chrome as Flatpak.
  * Clean recent documents list on KDE 5.
  * Clean Firefox installed as a snap.
  * Add shred context menu for KDE.
  * Keep bookmark icons in Firefox.
  * Keep xauth files in /tmp.
  * Fix "Permission denied: /proc/".
  * Use branded icon in application launcher.
  * Fix detection of invalid .desktop files.
  * Fix the error "The child memory-wiping process returned code 9.".
  * Notify user when running as root with Wayland.
  * Fix ModuleNotFoundError.
  * Remove Windows-specific files from Linux packages, again.
  * Remove unneeded SafeConfigParser causing startup error on Python 3.12.
  * Do not show error "Gtk-CRITICAL **: gtk_text_view_scroll_mark_onscreen".
  * Add python3-psutil dependency.
- Disable unit test for get_ip_for_url() which won't work in OBS</changelog>
</package>
<package pkgid="4807d8902dffa6308333367a1e3553e3e524ae43b471821fe9926e053328b782e94e70a27dafbb16a26bd498cf7a2ffe3a17c0a134e036231724843cd2211046" name="bleachbit-lang" arch="noarch">
  <version epoch="0" ver="4.6.0" rel="bp160.1.9"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1587643200">- BuildRequire gobject-introspection and let deps autodetect
- BuildRequire on pkgconfig(systemd) so OBS can use systemd-mini
- Remove desktop_database_post macros
- Don't recommend lang package. Supplement is added already
- Remove python3-configparser seems not needed anymore</changelog>
  <changelog author="andrew ziem &lt;ahz001@gmail.com&gt;" date="1589716800">- Add missing dependency typelib-1_0-Gtk-3_0 to fix error
  "Namespace Gtk not available"</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1589803200">- Fix dependencies:
  + gobject-introspection is a build-depoendency, not a runtime
    dependency. Having it in the buildroot also enable the
    typelib()-dependency scanner, which in turn allows to:
  + Remove typelib-1_0-Gtk-3_0 Requires: this is now propelry
  auto-detected (together with the other typelib-* deps).
- Fix more shebangs using sed: we still ended up requiring python2.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598875200">- Update to 4.1.0:
  * Fix KeyError: 'win10_theme' on Linux (#880)
  * Fix file_wipe() for special files (#875)
  * Fix SyntaxWarning: "is not" with a literal. (#902)
  * Open files with FILE_FLAG_BACKUP_SEMANTICS (#337)
  * Use encoding='utf-8' when opening json/xml files (#874)
  * Worker generator should be added using default prior (#881)
  * Update translations</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1609761600">- Update to 4.2.0:
  * Fix: dnf process was not closed (#1001)
  * Update translations
  * Add Slack cleaner
  * Add new action for deleting firefox favicons
  * Initial support for Microsoft Edge
  * Clean Chromium installed as snap</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 4.3.0:
  * Clean the Brave browser (1061).
  * Use the new --all-but-warning CLI command (365).
  * In the preferences, toggle the option to remember window geometry.
    Restart BleachBit and check that the behavior matches the setting
    (1056).
  * Download chaff, and there should not be a ResourceWarning
    message (issue 856).
  * Clean Firefox favicons in URL history, and there should not
    be a sqlite3.Warning message (1135).
  * Wipe the free space on a FAT32 partition with more than
    4GB of available space (1051).
  * Clean Thunderbird - Index, and there should be a warning (363).
  * In Google Chrome, type CTRL+S to save the page. Save it
    to a non-default location, and not the location. Then in
    BleachBit, clean Google Chrome - History, and back in Google
    Chrome verify the location was forgotten (944).
  * On a system with non-English user interface, use BleachBit to
    wipe free space, and verify the "About # minutes remaining"
    message is translated (1162). This also depends on whether
    this string was translated for your language.
  * Clean Firefox - URL History, and verify bookmark icons were
    not deleted (1081).
  * Clean Google Chrome unstable (1147).
  * Open Thunderbird and try to clean it while it is running.
    There should be an error (1112).
  * Clean journald, and BleachBit should report how much space
    was freed (1115).
  * For any GTK theme, the scrollbar should not cover the
    checkboxes (1034.)
  * Clean System - Recent documents, and it may clean more paths (1118).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1624881600">- Update to 4.4.0:
  * Add cleaner for Brave browser
  * Clean the last location of the File - Save As dialog in
    Google Chrome
  * Clean session for Thunderbird
  * Add new command line option --all-but-warning to enable all
    cleaners that do not emit a warning
  * Add preference option to remember window geometry,
    which means whether it was maximized and the last window size,
    if it was not maximized.
  * Fix ResourceWarning message when cleaning Firefox URL history
  * Fix: do not clean bookmarks in Firefox
  * Add warning when cleaning Thunderbird - Index
  * Fix wiping free space on FAT32 partitions with more than 4GB of
  available space
  * Fix "About # minutes remaining" was not translatable into any
    language
  * Fix ResourceWarning message when downloading chaff
  * The menu item Diagnostics was replaced with the term System
    Information.
  * Add ability to clean the profile of the unstable version of
    Google Chrome
  * Clean more with System - Recent Documents
  * Correctly detect that Thunderbird is running
  * Correctly detect how much space was freed by journald
  * Adjust spacing so the scrollbar does not cover checkbox with
    some GTK themes
  * Improve AppStream metainfo</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to 4.4.2
  * Separate the cleaning option for site preferences from history
  * Disable the auto-hide behavior for scrollbars
  * Report zero bytes as "0B" instead of just "0"</changelog>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1667649600">- Activate test suite
- Add _constraints to increase disk space, needed by tests</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1699963200">- Update to 4.6.0
  * Clean recently-closed tabs on Firefox.
  * Clean autofill data in Chromium-based browsers.
  * Clean more of Firefox: AlternativeServices.txt.
  * Improve support for FileZilla.
  * Support new versions of GIMP and add runtime detection.
  * Fix AttributeError and "OperationalError: no such table" when cleaning Firefox.
  * Add workaround for DLL security vulnerability.
  * Prevent opening other dialogs when making chaff.
  * Vacuum last after other operations in every language.
  * Add title for dialogs.
  * Enable more strings to be translated.
  * Improve organization of --help in the CLI.
  * Show debug information in CLI only if --debug or --preset is set.
  * Fix crash when wiping free space with Brazilian Portuguese.
  * Specific to Linux
  * Clean Microsoft Edge on Linux.
  * Clean Firefox and Thunderbird when installed as Flatpak.
  * Clean Google Chrome as Flatpak.
  * Clean recent documents list on KDE 5.
  * Clean Firefox installed as a snap.
  * Add shred context menu for KDE.
  * Keep bookmark icons in Firefox.
  * Keep xauth files in /tmp.
  * Fix "Permission denied: /proc/".
  * Use branded icon in application launcher.
  * Fix detection of invalid .desktop files.
  * Fix the error "The child memory-wiping process returned code 9.".
  * Notify user when running as root with Wayland.
  * Fix ModuleNotFoundError.
  * Remove Windows-specific files from Linux packages, again.
  * Remove unneeded SafeConfigParser causing startup error on Python 3.12.
  * Do not show error "Gtk-CRITICAL **: gtk_text_view_scroll_mark_onscreen".
  * Add python3-psutil dependency.
- Disable unit test for get_ip_for_url() which won't work in OBS</changelog>
</package>
<package pkgid="051c6905cb4f56e8c18062e70d51d01f2e7cbb6dbe2bdb8f338e8fc08ba0734777d656b218374da711d4ec877c572f771dff7e00980e8f7136ff9be9747b4512" name="blender" arch="x86_64">
  <version epoch="0" ver="4.5.1" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1746100800">- Update to 4.4.3
  https://developer.blender.org/docs/release_notes/4.4/corrective_releases/
  - Crashing in compositor (#138132)
  - Assigning Action without assigning slot crashes the Dope Sheet
    when the NLA is involved. (#137779)
  - Compositor: Support link search for Glare node. (e6aae3926b)
  - Crash in Blender 4.4.1 related to custom properties and
    drivers. (#138073)
  - Crash when compositor references another scene. (#137821)
  - Principled BSDF and curve info shading error when using
    roughness and image texture in cycles. (#137621)
  - Switching Lattice to Edit Mode Crashes Blender. (#137700)
  - The Curve to Point node cannot output the tangent attribute in
    Blender 4.4.1. (#137600)
  - "Merge Group" on empty grease pencil layer group will crash.
    (#136755)
  - Anim: Converting bone rotation with Rigify crashes Blender.
    (#136706)
  - Anim: Keying slotless NLA strip does not update the strip's
    slot. (#136596)
  - Anim: versioning after #136347 fixed keyframe interpolation
    flags. (f15257ae3c)
  - Assets Reload After each Save which makes it Invisible in the
    Search List for a second. (#136254)
  - Blender 4.4.0 Reference images draw in front of meshes while
    render engine is set to Cycles. (#136185)
  - Blender crash when entering a number in remesh modifier.
    (#136637)
  - Bugs with Slotted Actions and the Available Keying Set.
    (#137041)
  - Canceling sculpt transform tool leads to invalid display of
    mesh. (fa2eee6f70)
  - Cannot edit any texts when file comes from blender translated
    in Chinese . (#136829)
  - Cannot select objects inside View Clipping Region (ALT+B).
    (#136273)
  - Changed legacy node types. (#136891)
  - Collection Line Art is distorted. (#136868)
  - Color management settings can't be animated in 4.4. (#136415)
  - Color sample only works as "merge". (#136105)
  - Compilation error with XCode 16.3. (2a4303a1cb)
  - Crash 'Select Linked' after 'Select Boundary Loop' in
    multiobject editmode. (#136491)
  - Crash drawing poly-line gesture. (fe8e7618f4)
  - Crash loading &amp; saving large Iris images. (ac5b00a453)
  - Crash on Mac arm64 trying to draw an empty batch for shader.
    (#136831)
  - Crash on Merge Animation when Slot has no Channelbag. (#136967)
  - Crash open a file in early versions with a closure node output.
    (#136949)
  - Crash saving large Cineon images. (44a91fd528)
  - Crash saving large WebP images. (7ce866e3c0)
  - Crash when deleting tools Measure. (#136402)
  - Crash when hiding a collection referenced by Geometry Nodes.
    (#136269)
  - Crash when left click after deleting light. (#136563)
  - Crash when using both viewport and normal compositor with fog
    glow. (#136557)
  - Crash with certain compositor setups. (#136360)
  - Crash with object info node. (#137114)
  - Crash with Select "Shortest path" in the UV editor. (#136280)
  - Crashed while using Interpolate tool in Grease Pencil.
    (#136646)
  - Cycles HIP RDNA2 white and blue render artifacts. (#136138)
  - Cycles OSL: Window texture coordinate is wrong for panoramic
    cameras. (#135955)
  - Cycles: Disable MNEE on RDNA4 GPUs. (6dbecf1fdb)
  - Cycles: Principled BSDF renders incorrectly in specific setup.
    (#137420)
  - Difficulty to select pose bones when in Weight Paint mode.
    (#136098)
  - Edges become occluded in Edit Mode when they line up with the
    viewport grid. (#136501)
  - ERROR (gpu.shader): gpu_shader_2D_widget_base FragShader.
    (#132968)
  - Error reading RLE compressed Iris images. (2cbb07d7ad)
  - Exception showing touch-pad preferences. (c0c76b34b5)
  - Failure to save an existing Cineon file. (23c7ca6e39)
  - FCurve noise modifier offset affected by scale. (f1e829a459)
  - Fix crash from a missing check for an environment variable on
    macOS. (e0244cb2cb)
  - Fix missing topology cache in during node tree updates.
    (e4e4d642bd)
  - Geometry Nodes: Fill Caps + Resample Curves Count result in
    crash. (#136668)
  - Geometry Nodes: Segfault when deleting one of multiple Group
    Output nodes. (#136327)
  - glTF export: Fix NLA animation mode export. (d5fc1b070e)
  - Graph Editor: copy/pasting a single keyframe pastes on
    unselected curves when channels are collapsed. (#136736)
  - Grease Pencil corrupted strokes turn black and can't be
    colorized any more. (#136844)
  - Grease Pencil Edit Mode does not apply low Multiframe Falloff
    properly. (#137043)
  - grease pencil materials duplicating on custom brushes.
    (#137197)
  - Grease Pencil SVG export - wrong export resolution (should be
    Output &gt; Resolution X,Y). (#136312)
  - Grease Pencil: "AutoMerge" Destroys weight paining on strokes.
    (#136243)
  - Grease Pencil: Assert when weight painting rigged GP object and
    some layers hidden. (#134517)
  - Grease Pencil: Channel color versioning. (fa29eef109)
  - Grease Pencil: Crash when exporting PDF/SVG with sampling.
    (97fe0a3aac)
  - Grease Pencil: Crash when using selection tools in edit mode.
    (#137227)
  - Grease Pencil: Interpolation changing static strokes. (#128769)
  - Grease Pencil: SVG export uniform width option. (85657e36a0)
  - Grease Pencil: Thickness modifier affects strokes that are not
    part of the vertex group. (#137385)
  - GreasePencil: Layer visible when loading in Blender 4.5.
    (#137152)
  - H.265 / HEVC Codec ID incompatible with Apple's apps such as
    Final Cut Pro. (#136651)
  - Hard Crash when second UV Map has big Islands. (#136235)
  - Inconsistent Bézier Curve to Grease Pencil Conversion and
    Stroke Thickness Issue. (#134098)
  - Integer overflows calculating the number of pixels in imbuf.
    (358d4b8e02)
  - Integer overflows calculating the number of pixels.
    (8cacf61568)
  - Intel OpenGL: Camera gizmo can not be shifted with gizmo while
    Drag Select box is active. (#132196)
  - Interface: Division by zero exception opening a enum menu.
    (#136206)
  - Interface: Edge slide and Mesh Shear Status Bars Incorrectly
    Overridden. (#136061)
  - Interface: various minor fixes/changes to file
    BUTTONS_OT_file_browse. (d0157b0b70)
  - Internal mode in IES texture node flagged in missing file
    report. (#134756)
  - Inversion Mode of the Fill/Deepen and Scrape/Fill brushes is
    weaker than expected. (#136204)
  - Keyframe interpolation behavior changed for BoolProperty.
    (#136347)
  - Knife Tool Cut through not working after enabling Angle
    Constraint. (#136867)
  - macOS: Disable OpenMP when using Xcode 16.3 / LLVM 17.
    (12ae5630dc)
  - Mantaflow moving Collision not detected. (#136317)
  - Material set from geometry nodes with a texture does not
    display in edit mode. (#136175)
  - Messed up Buttons with Spacemouse Pro. (#136401)
  - Missed Update when node Tool is removed. (#113215)
  - Missing BLI_endian_switch_uint32(&amp;val) leads to failure on
    s390x architecture. (#136860)
  - Motion path keyframe number not showing on bones. (#136728)
  - Move slots to new action not maintaining animation data.
    (#136388)
  - My blender is crashing randomly when I change the glare in the
    composition. (#136310)
  - Name Filter/Search in Dope Sheet and Timeline editors do not
    hide channels properly. (#136887)
  - New render slots could contain truncated UTF8 byte sequences.
    (898c840480)
  - Opening files from Splash executes scripts even from excluded
    folders. (#137314)
  - Orbit &amp; Pan Auto Depth affected by transparent geometry when
    Viewport Shading is set to Material Preview or Rendered.
    (#136335)
  - Pasted curves on multiple selected objects only visible after
    deselecting. (#136830)
  - Plane brush symmetry passes do not use the stabilized normal.
    (04db7df4ef)
  - Potential stack use after free with Plane brush. (74d14e2588)
  - Potential use of invalid IME window pointer on Wayland.
    (d0ef007134)
  - Python: Limit numpy version for bpy wheel. (#134551)
  - python3.dll dependency in extensions cant be loaded from
    subprocesses..? leads to import issues in extension. (#126782)
  - QuadriFlow Remesh gets stuck in a specific case. (#136593)
  - Regression: Geometry Nodes: "Set Curve Normal" -&gt; "Free"
    corrupts normals (?). (#136378)
  - Regression: Stereoscope Output Images Wrong Color. (#136619)
  - Regression: VSE: Playhead jumps to start frame on Mac.
    (#136155)
  - Retain slot name when baking actions. (a89d6e0544)
  - Sculpt: Improve smooth brush performance with small radius.
    (b38ecd5148)
  - Shadow Loss on Non-manifold Meshes in Solid Viewport Mode with
    Backface Culling Enabled. (#136422)
  - Slotted Actions - Duplicate Slot doesn't duplicate animation
    data. (#136947)
  - The presence of a hidden panels affects the text weight of
    sided tabs. (#135742)
  - UV maps can render incorrectly in certain situations. (#136810)
  - Viewport render in 4.4 beta does not match the viewport render
    of 4.3.2. (#135841)
  - VSE crash when moving retiming key. (983f0ba086)
  - VSE Inconsistent retiming key UI over audio waveform (and a
    crash). (#136724)
  - When marking multiple objects as assets, only the last asset
    automatically generates a preview thumbnail. (#136645)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1746100801">- add BuildRequires for fftw3-threads-devel which is needed now</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1746532800">- Add condition for OpenImageDenoise BuildRequires
- Enable OpenImageDenoise on aarch64</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- bump to openvdb &gt;= 11
- force embree &gt;= 4
- remove unused cmake options
  - DWITH_OPENMP:BOOL=ON
  - DWITH_X11_XF86VMODE:BOOL=ON
- disable system audaspace until
  https://github.com/audaspace/audaspace/issues/31 is solved</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752408000">- enable manifold support. New BuildRequires cmake(manifold)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752494400">- make OSL shader compilation actually find our files</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752580800">- Add manifold build conditional
- Add manifold-include-fix.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580801">- Update to 4.5.0
  https://www.blender.org/download/releases/4-5/
  https://developer.blender.org/docs/release_notes/4.5/
- let the package provide if the current version is LTS</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752667200">- Sync manifold-include-fix.patch with upstream fix</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754308800">- Update to 4.5.1
  https://developer.blender.org/docs/release_notes/4.5/corrective_releases/
- Drop manifold-include-fix.patch</changelog>
</package>
<package pkgid="7692994755859a7e34cdededb347e5030a6175308b94ea6eeb35c3e33b6f3b9098bd5e1a4525868fdeb3d991b6b5e1c2d392df78eeaed5072fd7a4843ae58476" name="blender-demo" arch="noarch">
  <version epoch="0" ver="4.5.1" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1746100800">- Update to 4.4.3
  https://developer.blender.org/docs/release_notes/4.4/corrective_releases/
  - Crashing in compositor (#138132)
  - Assigning Action without assigning slot crashes the Dope Sheet
    when the NLA is involved. (#137779)
  - Compositor: Support link search for Glare node. (e6aae3926b)
  - Crash in Blender 4.4.1 related to custom properties and
    drivers. (#138073)
  - Crash when compositor references another scene. (#137821)
  - Principled BSDF and curve info shading error when using
    roughness and image texture in cycles. (#137621)
  - Switching Lattice to Edit Mode Crashes Blender. (#137700)
  - The Curve to Point node cannot output the tangent attribute in
    Blender 4.4.1. (#137600)
  - "Merge Group" on empty grease pencil layer group will crash.
    (#136755)
  - Anim: Converting bone rotation with Rigify crashes Blender.
    (#136706)
  - Anim: Keying slotless NLA strip does not update the strip's
    slot. (#136596)
  - Anim: versioning after #136347 fixed keyframe interpolation
    flags. (f15257ae3c)
  - Assets Reload After each Save which makes it Invisible in the
    Search List for a second. (#136254)
  - Blender 4.4.0 Reference images draw in front of meshes while
    render engine is set to Cycles. (#136185)
  - Blender crash when entering a number in remesh modifier.
    (#136637)
  - Bugs with Slotted Actions and the Available Keying Set.
    (#137041)
  - Canceling sculpt transform tool leads to invalid display of
    mesh. (fa2eee6f70)
  - Cannot edit any texts when file comes from blender translated
    in Chinese . (#136829)
  - Cannot select objects inside View Clipping Region (ALT+B).
    (#136273)
  - Changed legacy node types. (#136891)
  - Collection Line Art is distorted. (#136868)
  - Color management settings can't be animated in 4.4. (#136415)
  - Color sample only works as "merge". (#136105)
  - Compilation error with XCode 16.3. (2a4303a1cb)
  - Crash 'Select Linked' after 'Select Boundary Loop' in
    multiobject editmode. (#136491)
  - Crash drawing poly-line gesture. (fe8e7618f4)
  - Crash loading &amp; saving large Iris images. (ac5b00a453)
  - Crash on Mac arm64 trying to draw an empty batch for shader.
    (#136831)
  - Crash on Merge Animation when Slot has no Channelbag. (#136967)
  - Crash open a file in early versions with a closure node output.
    (#136949)
  - Crash saving large Cineon images. (44a91fd528)
  - Crash saving large WebP images. (7ce866e3c0)
  - Crash when deleting tools Measure. (#136402)
  - Crash when hiding a collection referenced by Geometry Nodes.
    (#136269)
  - Crash when left click after deleting light. (#136563)
  - Crash when using both viewport and normal compositor with fog
    glow. (#136557)
  - Crash with certain compositor setups. (#136360)
  - Crash with object info node. (#137114)
  - Crash with Select "Shortest path" in the UV editor. (#136280)
  - Crashed while using Interpolate tool in Grease Pencil.
    (#136646)
  - Cycles HIP RDNA2 white and blue render artifacts. (#136138)
  - Cycles OSL: Window texture coordinate is wrong for panoramic
    cameras. (#135955)
  - Cycles: Disable MNEE on RDNA4 GPUs. (6dbecf1fdb)
  - Cycles: Principled BSDF renders incorrectly in specific setup.
    (#137420)
  - Difficulty to select pose bones when in Weight Paint mode.
    (#136098)
  - Edges become occluded in Edit Mode when they line up with the
    viewport grid. (#136501)
  - ERROR (gpu.shader): gpu_shader_2D_widget_base FragShader.
    (#132968)
  - Error reading RLE compressed Iris images. (2cbb07d7ad)
  - Exception showing touch-pad preferences. (c0c76b34b5)
  - Failure to save an existing Cineon file. (23c7ca6e39)
  - FCurve noise modifier offset affected by scale. (f1e829a459)
  - Fix crash from a missing check for an environment variable on
    macOS. (e0244cb2cb)
  - Fix missing topology cache in during node tree updates.
    (e4e4d642bd)
  - Geometry Nodes: Fill Caps + Resample Curves Count result in
    crash. (#136668)
  - Geometry Nodes: Segfault when deleting one of multiple Group
    Output nodes. (#136327)
  - glTF export: Fix NLA animation mode export. (d5fc1b070e)
  - Graph Editor: copy/pasting a single keyframe pastes on
    unselected curves when channels are collapsed. (#136736)
  - Grease Pencil corrupted strokes turn black and can't be
    colorized any more. (#136844)
  - Grease Pencil Edit Mode does not apply low Multiframe Falloff
    properly. (#137043)
  - grease pencil materials duplicating on custom brushes.
    (#137197)
  - Grease Pencil SVG export - wrong export resolution (should be
    Output &gt; Resolution X,Y). (#136312)
  - Grease Pencil: "AutoMerge" Destroys weight paining on strokes.
    (#136243)
  - Grease Pencil: Assert when weight painting rigged GP object and
    some layers hidden. (#134517)
  - Grease Pencil: Channel color versioning. (fa29eef109)
  - Grease Pencil: Crash when exporting PDF/SVG with sampling.
    (97fe0a3aac)
  - Grease Pencil: Crash when using selection tools in edit mode.
    (#137227)
  - Grease Pencil: Interpolation changing static strokes. (#128769)
  - Grease Pencil: SVG export uniform width option. (85657e36a0)
  - Grease Pencil: Thickness modifier affects strokes that are not
    part of the vertex group. (#137385)
  - GreasePencil: Layer visible when loading in Blender 4.5.
    (#137152)
  - H.265 / HEVC Codec ID incompatible with Apple's apps such as
    Final Cut Pro. (#136651)
  - Hard Crash when second UV Map has big Islands. (#136235)
  - Inconsistent Bézier Curve to Grease Pencil Conversion and
    Stroke Thickness Issue. (#134098)
  - Integer overflows calculating the number of pixels in imbuf.
    (358d4b8e02)
  - Integer overflows calculating the number of pixels.
    (8cacf61568)
  - Intel OpenGL: Camera gizmo can not be shifted with gizmo while
    Drag Select box is active. (#132196)
  - Interface: Division by zero exception opening a enum menu.
    (#136206)
  - Interface: Edge slide and Mesh Shear Status Bars Incorrectly
    Overridden. (#136061)
  - Interface: various minor fixes/changes to file
    BUTTONS_OT_file_browse. (d0157b0b70)
  - Internal mode in IES texture node flagged in missing file
    report. (#134756)
  - Inversion Mode of the Fill/Deepen and Scrape/Fill brushes is
    weaker than expected. (#136204)
  - Keyframe interpolation behavior changed for BoolProperty.
    (#136347)
  - Knife Tool Cut through not working after enabling Angle
    Constraint. (#136867)
  - macOS: Disable OpenMP when using Xcode 16.3 / LLVM 17.
    (12ae5630dc)
  - Mantaflow moving Collision not detected. (#136317)
  - Material set from geometry nodes with a texture does not
    display in edit mode. (#136175)
  - Messed up Buttons with Spacemouse Pro. (#136401)
  - Missed Update when node Tool is removed. (#113215)
  - Missing BLI_endian_switch_uint32(&amp;val) leads to failure on
    s390x architecture. (#136860)
  - Motion path keyframe number not showing on bones. (#136728)
  - Move slots to new action not maintaining animation data.
    (#136388)
  - My blender is crashing randomly when I change the glare in the
    composition. (#136310)
  - Name Filter/Search in Dope Sheet and Timeline editors do not
    hide channels properly. (#136887)
  - New render slots could contain truncated UTF8 byte sequences.
    (898c840480)
  - Opening files from Splash executes scripts even from excluded
    folders. (#137314)
  - Orbit &amp; Pan Auto Depth affected by transparent geometry when
    Viewport Shading is set to Material Preview or Rendered.
    (#136335)
  - Pasted curves on multiple selected objects only visible after
    deselecting. (#136830)
  - Plane brush symmetry passes do not use the stabilized normal.
    (04db7df4ef)
  - Potential stack use after free with Plane brush. (74d14e2588)
  - Potential use of invalid IME window pointer on Wayland.
    (d0ef007134)
  - Python: Limit numpy version for bpy wheel. (#134551)
  - python3.dll dependency in extensions cant be loaded from
    subprocesses..? leads to import issues in extension. (#126782)
  - QuadriFlow Remesh gets stuck in a specific case. (#136593)
  - Regression: Geometry Nodes: "Set Curve Normal" -&gt; "Free"
    corrupts normals (?). (#136378)
  - Regression: Stereoscope Output Images Wrong Color. (#136619)
  - Regression: VSE: Playhead jumps to start frame on Mac.
    (#136155)
  - Retain slot name when baking actions. (a89d6e0544)
  - Sculpt: Improve smooth brush performance with small radius.
    (b38ecd5148)
  - Shadow Loss on Non-manifold Meshes in Solid Viewport Mode with
    Backface Culling Enabled. (#136422)
  - Slotted Actions - Duplicate Slot doesn't duplicate animation
    data. (#136947)
  - The presence of a hidden panels affects the text weight of
    sided tabs. (#135742)
  - UV maps can render incorrectly in certain situations. (#136810)
  - Viewport render in 4.4 beta does not match the viewport render
    of 4.3.2. (#135841)
  - VSE crash when moving retiming key. (983f0ba086)
  - VSE Inconsistent retiming key UI over audio waveform (and a
    crash). (#136724)
  - When marking multiple objects as assets, only the last asset
    automatically generates a preview thumbnail. (#136645)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1746100801">- add BuildRequires for fftw3-threads-devel which is needed now</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1746532800">- Add condition for OpenImageDenoise BuildRequires
- Enable OpenImageDenoise on aarch64</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- bump to openvdb &gt;= 11
- force embree &gt;= 4
- remove unused cmake options
  - DWITH_OPENMP:BOOL=ON
  - DWITH_X11_XF86VMODE:BOOL=ON
- disable system audaspace until
  https://github.com/audaspace/audaspace/issues/31 is solved</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752408000">- enable manifold support. New BuildRequires cmake(manifold)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752494400">- make OSL shader compilation actually find our files</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752580800">- Add manifold build conditional
- Add manifold-include-fix.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580801">- Update to 4.5.0
  https://www.blender.org/download/releases/4-5/
  https://developer.blender.org/docs/release_notes/4.5/
- let the package provide if the current version is LTS</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752667200">- Sync manifold-include-fix.patch with upstream fix</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754308800">- Update to 4.5.1
  https://developer.blender.org/docs/release_notes/4.5/corrective_releases/
- Drop manifold-include-fix.patch</changelog>
</package>
<package pkgid="fec1654d86041f93fd423ea416234a8b55c1cfb292a3ef0a5cd668efe39b3f870582c8b7e7fdca5b8cdf2daa4a32416db7bc3ad519f01c6058cfe40fcaf86ce8" name="blender-lang" arch="noarch">
  <version epoch="0" ver="4.5.1" rel="bp160.1.2"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1746100800">- Update to 4.4.3
  https://developer.blender.org/docs/release_notes/4.4/corrective_releases/
  - Crashing in compositor (#138132)
  - Assigning Action without assigning slot crashes the Dope Sheet
    when the NLA is involved. (#137779)
  - Compositor: Support link search for Glare node. (e6aae3926b)
  - Crash in Blender 4.4.1 related to custom properties and
    drivers. (#138073)
  - Crash when compositor references another scene. (#137821)
  - Principled BSDF and curve info shading error when using
    roughness and image texture in cycles. (#137621)
  - Switching Lattice to Edit Mode Crashes Blender. (#137700)
  - The Curve to Point node cannot output the tangent attribute in
    Blender 4.4.1. (#137600)
  - "Merge Group" on empty grease pencil layer group will crash.
    (#136755)
  - Anim: Converting bone rotation with Rigify crashes Blender.
    (#136706)
  - Anim: Keying slotless NLA strip does not update the strip's
    slot. (#136596)
  - Anim: versioning after #136347 fixed keyframe interpolation
    flags. (f15257ae3c)
  - Assets Reload After each Save which makes it Invisible in the
    Search List for a second. (#136254)
  - Blender 4.4.0 Reference images draw in front of meshes while
    render engine is set to Cycles. (#136185)
  - Blender crash when entering a number in remesh modifier.
    (#136637)
  - Bugs with Slotted Actions and the Available Keying Set.
    (#137041)
  - Canceling sculpt transform tool leads to invalid display of
    mesh. (fa2eee6f70)
  - Cannot edit any texts when file comes from blender translated
    in Chinese . (#136829)
  - Cannot select objects inside View Clipping Region (ALT+B).
    (#136273)
  - Changed legacy node types. (#136891)
  - Collection Line Art is distorted. (#136868)
  - Color management settings can't be animated in 4.4. (#136415)
  - Color sample only works as "merge". (#136105)
  - Compilation error with XCode 16.3. (2a4303a1cb)
  - Crash 'Select Linked' after 'Select Boundary Loop' in
    multiobject editmode. (#136491)
  - Crash drawing poly-line gesture. (fe8e7618f4)
  - Crash loading &amp; saving large Iris images. (ac5b00a453)
  - Crash on Mac arm64 trying to draw an empty batch for shader.
    (#136831)
  - Crash on Merge Animation when Slot has no Channelbag. (#136967)
  - Crash open a file in early versions with a closure node output.
    (#136949)
  - Crash saving large Cineon images. (44a91fd528)
  - Crash saving large WebP images. (7ce866e3c0)
  - Crash when deleting tools Measure. (#136402)
  - Crash when hiding a collection referenced by Geometry Nodes.
    (#136269)
  - Crash when left click after deleting light. (#136563)
  - Crash when using both viewport and normal compositor with fog
    glow. (#136557)
  - Crash with certain compositor setups. (#136360)
  - Crash with object info node. (#137114)
  - Crash with Select "Shortest path" in the UV editor. (#136280)
  - Crashed while using Interpolate tool in Grease Pencil.
    (#136646)
  - Cycles HIP RDNA2 white and blue render artifacts. (#136138)
  - Cycles OSL: Window texture coordinate is wrong for panoramic
    cameras. (#135955)
  - Cycles: Disable MNEE on RDNA4 GPUs. (6dbecf1fdb)
  - Cycles: Principled BSDF renders incorrectly in specific setup.
    (#137420)
  - Difficulty to select pose bones when in Weight Paint mode.
    (#136098)
  - Edges become occluded in Edit Mode when they line up with the
    viewport grid. (#136501)
  - ERROR (gpu.shader): gpu_shader_2D_widget_base FragShader.
    (#132968)
  - Error reading RLE compressed Iris images. (2cbb07d7ad)
  - Exception showing touch-pad preferences. (c0c76b34b5)
  - Failure to save an existing Cineon file. (23c7ca6e39)
  - FCurve noise modifier offset affected by scale. (f1e829a459)
  - Fix crash from a missing check for an environment variable on
    macOS. (e0244cb2cb)
  - Fix missing topology cache in during node tree updates.
    (e4e4d642bd)
  - Geometry Nodes: Fill Caps + Resample Curves Count result in
    crash. (#136668)
  - Geometry Nodes: Segfault when deleting one of multiple Group
    Output nodes. (#136327)
  - glTF export: Fix NLA animation mode export. (d5fc1b070e)
  - Graph Editor: copy/pasting a single keyframe pastes on
    unselected curves when channels are collapsed. (#136736)
  - Grease Pencil corrupted strokes turn black and can't be
    colorized any more. (#136844)
  - Grease Pencil Edit Mode does not apply low Multiframe Falloff
    properly. (#137043)
  - grease pencil materials duplicating on custom brushes.
    (#137197)
  - Grease Pencil SVG export - wrong export resolution (should be
    Output &gt; Resolution X,Y). (#136312)
  - Grease Pencil: "AutoMerge" Destroys weight paining on strokes.
    (#136243)
  - Grease Pencil: Assert when weight painting rigged GP object and
    some layers hidden. (#134517)
  - Grease Pencil: Channel color versioning. (fa29eef109)
  - Grease Pencil: Crash when exporting PDF/SVG with sampling.
    (97fe0a3aac)
  - Grease Pencil: Crash when using selection tools in edit mode.
    (#137227)
  - Grease Pencil: Interpolation changing static strokes. (#128769)
  - Grease Pencil: SVG export uniform width option. (85657e36a0)
  - Grease Pencil: Thickness modifier affects strokes that are not
    part of the vertex group. (#137385)
  - GreasePencil: Layer visible when loading in Blender 4.5.
    (#137152)
  - H.265 / HEVC Codec ID incompatible with Apple's apps such as
    Final Cut Pro. (#136651)
  - Hard Crash when second UV Map has big Islands. (#136235)
  - Inconsistent Bézier Curve to Grease Pencil Conversion and
    Stroke Thickness Issue. (#134098)
  - Integer overflows calculating the number of pixels in imbuf.
    (358d4b8e02)
  - Integer overflows calculating the number of pixels.
    (8cacf61568)
  - Intel OpenGL: Camera gizmo can not be shifted with gizmo while
    Drag Select box is active. (#132196)
  - Interface: Division by zero exception opening a enum menu.
    (#136206)
  - Interface: Edge slide and Mesh Shear Status Bars Incorrectly
    Overridden. (#136061)
  - Interface: various minor fixes/changes to file
    BUTTONS_OT_file_browse. (d0157b0b70)
  - Internal mode in IES texture node flagged in missing file
    report. (#134756)
  - Inversion Mode of the Fill/Deepen and Scrape/Fill brushes is
    weaker than expected. (#136204)
  - Keyframe interpolation behavior changed for BoolProperty.
    (#136347)
  - Knife Tool Cut through not working after enabling Angle
    Constraint. (#136867)
  - macOS: Disable OpenMP when using Xcode 16.3 / LLVM 17.
    (12ae5630dc)
  - Mantaflow moving Collision not detected. (#136317)
  - Material set from geometry nodes with a texture does not
    display in edit mode. (#136175)
  - Messed up Buttons with Spacemouse Pro. (#136401)
  - Missed Update when node Tool is removed. (#113215)
  - Missing BLI_endian_switch_uint32(&amp;val) leads to failure on
    s390x architecture. (#136860)
  - Motion path keyframe number not showing on bones. (#136728)
  - Move slots to new action not maintaining animation data.
    (#136388)
  - My blender is crashing randomly when I change the glare in the
    composition. (#136310)
  - Name Filter/Search in Dope Sheet and Timeline editors do not
    hide channels properly. (#136887)
  - New render slots could contain truncated UTF8 byte sequences.
    (898c840480)
  - Opening files from Splash executes scripts even from excluded
    folders. (#137314)
  - Orbit &amp; Pan Auto Depth affected by transparent geometry when
    Viewport Shading is set to Material Preview or Rendered.
    (#136335)
  - Pasted curves on multiple selected objects only visible after
    deselecting. (#136830)
  - Plane brush symmetry passes do not use the stabilized normal.
    (04db7df4ef)
  - Potential stack use after free with Plane brush. (74d14e2588)
  - Potential use of invalid IME window pointer on Wayland.
    (d0ef007134)
  - Python: Limit numpy version for bpy wheel. (#134551)
  - python3.dll dependency in extensions cant be loaded from
    subprocesses..? leads to import issues in extension. (#126782)
  - QuadriFlow Remesh gets stuck in a specific case. (#136593)
  - Regression: Geometry Nodes: "Set Curve Normal" -&gt; "Free"
    corrupts normals (?). (#136378)
  - Regression: Stereoscope Output Images Wrong Color. (#136619)
  - Regression: VSE: Playhead jumps to start frame on Mac.
    (#136155)
  - Retain slot name when baking actions. (a89d6e0544)
  - Sculpt: Improve smooth brush performance with small radius.
    (b38ecd5148)
  - Shadow Loss on Non-manifold Meshes in Solid Viewport Mode with
    Backface Culling Enabled. (#136422)
  - Slotted Actions - Duplicate Slot doesn't duplicate animation
    data. (#136947)
  - The presence of a hidden panels affects the text weight of
    sided tabs. (#135742)
  - UV maps can render incorrectly in certain situations. (#136810)
  - Viewport render in 4.4 beta does not match the viewport render
    of 4.3.2. (#135841)
  - VSE crash when moving retiming key. (983f0ba086)
  - VSE Inconsistent retiming key UI over audio waveform (and a
    crash). (#136724)
  - When marking multiple objects as assets, only the last asset
    automatically generates a preview thumbnail. (#136645)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1746100801">- add BuildRequires for fftw3-threads-devel which is needed now</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1746532800">- Add condition for OpenImageDenoise BuildRequires
- Enable OpenImageDenoise on aarch64</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1751112000">- bump to openvdb &gt;= 11
- force embree &gt;= 4
- remove unused cmake options
  - DWITH_OPENMP:BOOL=ON
  - DWITH_X11_XF86VMODE:BOOL=ON
- disable system audaspace until
  https://github.com/audaspace/audaspace/issues/31 is solved</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752408000">- enable manifold support. New BuildRequires cmake(manifold)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752494400">- make OSL shader compilation actually find our files</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752580800">- Add manifold build conditional
- Add manifold-include-fix.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1752580801">- Update to 4.5.0
  https://www.blender.org/download/releases/4-5/
  https://developer.blender.org/docs/release_notes/4.5/
- let the package provide if the current version is LTS</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1752667200">- Sync manifold-include-fix.patch with upstream fix</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1754308800">- Update to 4.5.1
  https://developer.blender.org/docs/release_notes/4.5/corrective_releases/
- Drop manifold-include-fix.patch</changelog>
</package>
<package pkgid="a292446597cdf5aae2ef3c391a359d72c29be9e6031353b97f7839d7ca80f48dbfa120a175cb2afaed363ee58604c789b8073e1b5c6bb8130ab339a680b51845" name="blinken" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Drop Qt6Qml dependency for the non-QML version</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Revert "Drop Qt6Qml dependency for the non-QML version"</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Use the QtMultimedia player also for the non QML version
  * Add icon for f-droid store
  * Port to AboutKDEPage from AboutKDE
  * Show headers in qtc6
  * Add missing include moc</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * flatpak: Update runtime version</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="2f9dc23737f361be6de0b5f8301fa4a85e85be8a845ec634b60cc899a9968993be52f497465144e0db2a4a4eb92ffdfa819a49e534234372dfdefb3b43b82b29" name="blinken-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Drop Qt6Qml dependency for the non-QML version</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Revert "Drop Qt6Qml dependency for the non-QML version"</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Add xml/yaml linting
  * Use the QtMultimedia player also for the non QML version
  * Add icon for f-droid store
  * Port to AboutKDEPage from AboutKDE
  * Show headers in qtc6
  * Add missing include moc</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * flatpak: Update runtime version</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="cb7feb3ad286d901a06b98b5551ffb9d7726d15d329f2b0f951a125e1bd83eaaaa0f42002cc8491e4ed35711542a8772ff2385ab61acbae17cfc762e0ef3a386" name="blis-devel" arch="x86_64">
  <version epoch="0" ver="1.0" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701518400">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1715688000">- Update to version 1.0:
  * Long list of changes, see
    &lt;https://github.com/flame/blis/blob/1.0/docs/ReleaseNotes.md&gt;
    or offline: /usr/share/doc/packages/blis-devel/ReleaseNotes.md
- Drop a cat command used previously for debugging purposes.
- Build pthread support (in addition to openmp) into library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1716206400">- blis-devel: Add conflicts against cblas-devel, both cblas-devel
  and blis-devel provide a %%{_includedir}/cblas.h header file and
  the latter is a drop-in replacement for the former</changelog>
</package>
<package pkgid="dba7ec25a6e86a0aa780e4ca9a36563b08f97738854e8b688ae7b51c1b35a4a0a5eeb238f372428f4e3086becbedeb66c41a903ff044cbfa8c1bb3c13435abd8" name="bliss" arch="x86_64">
  <version epoch="0" ver="0.77" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1505390400">- Initial package (version 0.73) for build.opensuse.org
- Add bliss-am.diff, bliss-nodate.diff</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Correct URL line in specfile</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Modernize specfile.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to version 0.77:
  * set_color and copy methods in the C++ API
  * precise group size computation also without GNU GMP
  * no more exit-causing "fatal_errors", instead a standard exception
    is thrown
- Update to version 0.76:
  * The monolithic "graph" file is split in "abstractgraph",
    "graph" and "digraph".
  * defs.hh now contains the version number as a #define.
  * is_automorphism is now a public member of Graph and Digraph.
- Update to version 0.75:
  * Automorphism reporting and termination check functions
    are now of C++ type std::function.
  * Bignum allows one to get a copy of internal GNU GMP integer.
- Update to version 0.74:
  * Fixed a memory leak
  * Possibility to terminate the search early
  * Minor changes for better C++11 compatibility.
  * Memory allocation failures now throw std::bad_alloc
- Drop bliss-am.diff upstream uses cmake
- Add cmake.patch, allow installing the library and binary.
- Refresh bliss-nodate.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624276800">- Set versioned cmake requirement</changelog>
</package>
<package pkgid="59834543ffb4fddf431d0c08bef31b84b353c07db7808b157c901cb9c16406bbc8d3a671f7e56dd30702c41eebbee85c4a4129b31df53f5568dae6ddd401a206" name="bliss-devel" arch="x86_64">
  <version epoch="0" ver="0.77" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1505390400">- Initial package (version 0.73) for build.opensuse.org
- Add bliss-am.diff, bliss-nodate.diff</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Correct URL line in specfile</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Modernize specfile.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to version 0.77:
  * set_color and copy methods in the C++ API
  * precise group size computation also without GNU GMP
  * no more exit-causing "fatal_errors", instead a standard exception
    is thrown
- Update to version 0.76:
  * The monolithic "graph" file is split in "abstractgraph",
    "graph" and "digraph".
  * defs.hh now contains the version number as a #define.
  * is_automorphism is now a public member of Graph and Digraph.
- Update to version 0.75:
  * Automorphism reporting and termination check functions
    are now of C++ type std::function.
  * Bignum allows one to get a copy of internal GNU GMP integer.
- Update to version 0.74:
  * Fixed a memory leak
  * Possibility to terminate the search early
  * Minor changes for better C++11 compatibility.
  * Memory allocation failures now throw std::bad_alloc
- Drop bliss-am.diff upstream uses cmake
- Add cmake.patch, allow installing the library and binary.
- Refresh bliss-nodate.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624276800">- Set versioned cmake requirement</changelog>
</package>
<package pkgid="848232b46cbd2d149c6af980d64ce4454ad0cbab5cbab23d42c50eea43416f10698938e737ee169119cc5b76dcc40851890f924f3cf336d5c3aa6cd91f1e2c30" name="blktests" arch="x86_64">
  <version epoch="0" ver="0+20240213.ac3d8d0" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1543147200">- Move /var/lib/blktests to /usr/lib/blktests, packages don't
  deliver variadic data.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="pcervinka@suse.com" date="1585137600">- Update to version 20200307.cd11d00:
  * Support skipping tests from test{,_device}()
  * Show last run for skipped tests
  * Skip tests based on SKIP_REASON, not return value
  * nbd/003: fix compiling error with gcc version 4.8.5
  * nbd/003:add mount and clear_sock test for nbd
  * nvme/018: Reword misleading error message
  * nvme/018: Ignore message generated by nvme read
  * tests/srp/015: Add a test that uses the SoftiWARP (siw) driver
  * common/multipath-over-rdma, tests/srp: Make it easy to use siw instead of rdma_rxe
  * common/multipath-over-rdma: Rename two functions
- Apply spec-cleaner
- Change version format in service file
- Add GPL-3.0 to license list
- Add README.md to doc section</changelog>
  <changelog author="Sebastian Chlad &lt;sebastian.chlad@suse.com&gt;" date="1585828800">- Add blktrace to recommended as some tests require it</changelog>
  <changelog author="Petr Cervinka &lt;pcervinka@suse.com&gt;" date="1588334400">- Update to version 0+20200430.bff70b0:
  * Add $DESCRIPTION to the TEST_RUN
  * Fix unintentional skipping of tests
  * Add a test that triggers the blk_mq_realloc_hw_ctxs() error path
  * Introduce the function _configure_null_blk()
  * Use _{init,exit}_null_blk instead of open-coding these functions
  * Make _exit_null_blk remove all null_blk device instances
  * common/fio: do not use norandommap with verify</changelog>
  <changelog author="pcervinka@suse.com" date="1606910400">- Update to version 0+20201022.e10add0:
  * nvme/038: Test removal of un-enabled subsystem and ports
  * nvme/037: Add test which loops passthru connect and disconnect
  * nvme/036: Add test for testing reset command on nvme-passthru
  * nvme/035: Add test to verify passthru controller with a filesystem
  * nvme/034: Add test for passthru data verification
  * nvme/033: Simple test to create and connect to a passthru target
  * nvme: Add common helpers for passthru tests
  * nvme: Search for specific subsysnqn in _find_nvme_loop_dev
  * common/xfs: Create common helper to verify block device with xfs
  * common/xfs: Create common helper to check for XFS support
  * common/fio: Remove state file in common helper
  * zbd/003: Reset zones when the test device has max_active_zones limit
  * block/004: Provide max_active_zones to fio command
  * common/rc: Add _test_dev_max_active_zones() helper function
  * nvme: support rdma transport type
  * common: move module_unload to common
  * nvme: support nvme-tcp when runinng tests
  * tests/nvme: restrict tests to specific transports
  * nvme: make tests transport type agnostic
  * nvme: consolidate some nvme-cli utility functions
  * nvme: consolidate nvme requirements based on transport type
  * nvme/005: add the missing _have_program nvme
  * common/multipath-over-rdma: make block scheduler directory optional
  * zbd/002: Check write pointers only when zones have valid conditions
  * zbd/005: Enable zonemode=zbd when zone capacity is less than zone size
  * zbd/004: Check zone boundary writes using zones without zone capacity gap
  * zbd/002: Check validity of zone capacity
  * zbd/rc: Support zone capacity report by blkzone
  * Remove partition rereading tests for reverted fixes
  * tests/srp/rc: Separate login parameters with a comma
  * srp tests: Use _{init,exit}_scsi_debug() instead of duplicating these functions
  * common/multipath-over-rdma: Log mkfs output
  * srp, nvmeof-mp: Use no_path_retry instead of queue_if_no_path
  * tests/nvmeof-mp/rc: Make login failures easier to debug
  * block/012: add comment explaning second --setro
  * tests/srp/rc: Fix a shellcheck warning
  * tests: mark tests with CAN_BE_ZONED=1
  * common/cpuhotplug: fix ALL_CPUS
  * tests/srp/rc: Do not pass an empty string to dd
  * zbd/007: Add --force option to blkzone reset
  * Fix ./check: line 275: LAST_TEST_RUN["$key"]: unbound variable
  * Fix unquoted integer shellcheck errors
  * travis: update shellcheck URL
  * tests/srp/rc: Make the SRP tests pass against kernel v5.7</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1680436800">- Update to version 0+20230302.676d42c:
  * src/Makefile: fix number sign handling in macro
  * block/033: add test to cover gendisk leak
  * src: add mini ublk source code
  * nvme/046: add test for unprivileged passthrough
  * check, common/rc: support normal user privilege
  * block/032: add test to cover umount one deleted disk
  * Update tests for discovery log page changes
  * tests/block/007: Rework I/O polling
- Use explicit commit id. Also exclude .gitignore files.</changelog>
  <changelog author="petr@cervinka.net" date="1687867200">- Update to version 0+20230615.154e652:
  * block/034: Test memory is released by null-blk driver with memory_backed=1
  * nvme/040: Free loop back resources
  * block/011: recover test target NVME device capacity
  * block/011: skip when mounted block devices are affected
  * common/rc: introduce _get_pci_from_dev_sysfs
  * nvmeof-mp: Remove nvmeof-mp tests
  * nvme/rc: remove _filter_discovery
  * nvme/{016,017}: use _check_genctr instead of _filter_discovery
  * nvme/rc: Cleanup fc resource before module unloading
  * nvme/rc: Cleanup fc ports in reverse order
  * tests: Add ublk tests
  * src/miniublk: add user recovery
  * srp/rc: Replace _have_module() with _have_driver()
  * nvme/{016,017}: Make the number iterations configurable
  * nvme/{002,030}: Move discovery generation counter code to rc
  * nvme/{045,047}: Calculate IO size for random fio jobs
  * nvme: Add minimal test image size requirement
  * nvme: Make test image size configurable
  * Documentation: Add info on nvme_trtype
  * nvme/{032,040}: Use runtime fio background jobs
  * common/xfs: Limit fio size job to fit into xfs fs
  * common/xfs: Make size argument optional for _xfs_run_fio_verify_io
  * nvme/{014/015}: Do not hard code device size for dd test
  * nvme/rc: Auto convert test device size info
  * block/{001,002,027}: allow to run with built-in scsi_debug and sd_mod
  * scsi/{004,005}: allow to run with built-in scsi_debug
  * common/scsi_debug: introduce _configure_scsi_debug
  * common/scsi_debug: factor out _setup_scsi_debug_vars
  * common/scsi_debug, tests/*: re-define _have_scsi_debug
  * common/rc: skip module file check if modules path does not exist
  * loop/009: add test for loop partition uvents
  * test/nvme: add missing _have_fio check for nvme/045
  * tests/dm: add dm test group and a test for self-map
  * common/rc: fix kernel version parse failure
  * block/{014,015,030}: don't require modular null_blk for fault-injection
  * src/Makefile: forward LDFLAGS to $(CC)
  * nvme/039: avoid failure by error message rate limit
  * nvme/049: add test for uring-passthrough
  * common,fio: helper for version check
  * nvme/048: test queue count changes on reconnect
  * nvme/rc: Add timeout argument parsing to _nvme_connect_subsys()
  * nvme/047: Test different queue types for fabrics transports
  * nvme/rc: Add parametric transport required check
  * nvme/rc: Add nr queue parser arguments to _nvme_connect_subsys()
  * nvme/rc: Parse optional arguments in _nvme_connect_subsys()
  * tests/block/013.out: remove the unused 013.out file
  * tests: add the missing +x mode</changelog>
  <changelog author="pcervinka@suse.com" date="1697025600">- Replace disabled mode in service file by manual mode
- Update to version 0+20231006.1aeff01:
  * nbd/004: avoid left connection
  * Change the default RDMA driver from rdma_rxe to siw
  * srp/015: Remove this test
  * tests/srp/rc: Reduce the number of channels
  * tests/srp/rc: Rework use_blk_mq()
  * tests/nvme/031: fix connecting faiure
  * block/002,scsi/007,zbd/003: remove options for shellcheck SC2119
  * nvme: introduce nvmet_target_{setup/cleanup} common code
  * nvme/{033,034,035,036,37}: drop port handle between passthru target setup and cleanup
  * nvme/{033,034,035,036}: use default subsysnqn variable directly
  * Revert "Do not suppress any shellcheck warnings"
  * nvme: remove "udevadm settle" after _nvme_connect_subsys
  * nvme/rc: fix nvme device readiness check after _nvme_connect_subsys
  * nvme: Add explicitly host to allow_host list
  * nvme/rc: Add helper for adding/removing to allow list
  * nvme: Use def_subsys_uuid variable
  * nvme/rc: Add common def_subsys_uuid define
  * nvme: Use def_file_path variable instead local variable
  * nvme/rc: Add common file_path name define
  * nvme/{041,042,043,044,045,048}: Remove local variable hostnqn and hostid
  * nvme: Use def_subsysnqn variable instead local variable
  * nvme/rc: Add common subsystem nqn define
  * nvme/043: Use hostnqn to generate DHCAP key
  * nvme: Reorganize test preamble code section
  * nvme/{003,004,005,013,046,049}: Group all variables declarations
  * block/004: reset zones of TEST_DEV before fio operation
  * README: clarify motivations to add new test cases
  * CONTRIBUTING, README: recommend patch post for contributions
  * README: describe what './new' script documents
  * new: don't mandate double square brackets
  * src/Makefile: fix static linking of miniublk
  * common/scsi_debug: Use _unload_module() instead of modprobe -r
  * _unload_module(): Report the failure reason once
  * block/005: require queue/scheduler sysfs attribute
  * block/004, zbd/{005,006}: call _test_dev_set_scheduler
  * common/rc: introduce _require_test_dev_sysfs
  * common/{rc,dm}: introduce functions to set scheduler of dm destinations
  * common/dm: add script file for device-mapper functions
  * check, common/rc: save sysfs attribute path
  * common/ublk: avoid modprobe failure for built-in ublk_drv
  * nvme/{041,042,043,044,045,048}: Use default hostnqn and hostid
  * nvme/rc: Avoid triggering host nvme-cli autoconnect
  * nvme/048: Check for queue count check directly
  * nvme/043: use a valid hostkey
  * zbd/009: skip have_good_mkfs_btrfs when mkfs.btrfs not avaiable
  * nvme/rc: specify hostnqn and hostid to nvme discover and connect</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1708084800">- Update to version 0+20240213.ac3d8d0:
  * nvme/rc: revert nvme-cli context tracking
  * nvme/rc: do not issue errors when disconnecting when using fc transport
  * nvme/rc: do not issue warnings on cleanup when using fc transport
  * nvme/rc: filter out errors from cat when reading files
  * nvme/029: fix local variable declarations
  * nvme/046: change nvme io-passthru command option from -o to --opcode
  * nvme: add nvme pci timeout testcase
  * block/031: allow to run with built-in null_blk driver
  * common/null_blk: introduce _have_null_blk_feature
  * nvme/rc: don't print the nvme connect msg
  * block/007: skip hybrid polling tests when kernel does not support it
  * block/011: set default timeout to 20 minutes
  * block/011: recover test target devices to online or live status
  * loop/009: require --option of udevadm control command
  * nvme/{041,042,043,044,045}: check dhchap_ctrl_secret support by nvme-fabrics
  * nvme: do not print subsystem NQN to stdout
  * nvme: do not print UUID to log files
  * common/ublk: allow to run ublk test without building miniublk
  * ublk/rc: prefer to rublk over miniublk
  * Fix common misspellings from codespell project
  * tests/srp: remove the unused file 015.out
  * src/miniublk: fix logical block size setting
  * block/002: fix TMPDIR path
  * nvme/{rc,017,031}: replace def_file_path with _nvme_def_file_path()
  * nvme/rc: fix rdma driver check
- Small spec file modernisation</changelog>
</package>
<package pkgid="e5207c2be1d85f5892364795165f687842136168c7ea517e1bcd4321841f8f6534692d11e381b65c431aaef60322e9decff8ff36c8fc7bdba088b43f121aabbb" name="blktrace" arch="x86_64">
  <version epoch="0" ver="1.3.0+git.20211021" rel="160000.2.2"/>
  <changelog author="jeffm@suse.com" date="1461672000">- Add _service for automatic git syncing
  + exclude .git when generating tarball
  + enable automatic changelog updating</changelog>
  <changelog author="jeffm@suse.com" date="1461672001">- Update to version 1.1.0+git.20160425:
  * Refer to sda instead of hda in man pages
  * btreplay: Fix typo in scaling up the dynamic cpu set size.
  * include sys/types.h for dev_t definition
  * Fix warnings on newer gcc
  * Add the "-a discard" filter option to the blktrace.8 man page
  * blktrace: Use number of online CPUs
  * btreplay: fix memory corruption caused by CPU_ZERO_S
  * btreplay: fix sched_{set|get}affinity
  * btreplay: make Ctrl-C work
  * btreplay: remove timestamps</changelog>
  <changelog author="mpluskal@suse.com" date="1480075200">- Update to version 1.1.0+git.20160823:
  * Use maximum over all traces for queue depth
  * Process notify events outside of given interval
  * iowatcher: Use queue events if issue not available
  * btt: Replace overlapping IO
  * Zero sectors are strange
  * Don't prepend blktrace destination dir if we didn't run blktrace
  * Separate prefix in legend with space
  * Fixup graph name in help text
  * blktrace: remove -k from manpage synopsis
  * iowatcher: link with -lrt</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Update to version 1.1.0+git.20170126:
  * blktrace: Add support for sparse CPU numbers
  * blktrace: Reorganize creation of output file name
  * blktrace: Create empty output files for non-existent cpus</changelog>
  <changelog author="jeffm@suse.com" date="1521547200">- Update to version 1.2.0+git.20180124:
  * blktrace: don't stop tracer if not setup trace successfully
  * fix parallel build failures
  * respect LDFLAGS when linking programs
  * btt: Fix overlapping IO stats.
  * btt/devs: silence warning on sprintf overflow
  * jhash: fix annoying gcc fall through warnings
  * Blktrace 1.2.0
  * blktrace: abort if device ioctl setup fails</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528200000">- Update to version 1.2.0+git.20180516:
  * make btt scripts python3-ready
  * btt: make device/devno use PATH_MAX to avoid overflow (bsc#1091942).
  * blkparse: add documetation for 'R' requeue request
  * blkparse: remove duplicated entry for flag M</changelog>
  <changelog author="ddiss@suse.com" date="1633953600">- UsrMerge: relocate blktrace, blkparse and btrace (bsc#1191056)</changelog>
  <changelog author="ddiss@suse.com" date="1633953601">- Update to version 1.3.0+git.20210628:
  * blktrace: exit directly when nthreads_running != ncpus in run_tracers()
  * blktrace 1.3.0
  * blkparse: Print time when trace was started
  * blktrace: inclusive terminology
  * blkparse: Print PID information for TN_MESSAGE events
  * iowatcher: Handle cgroup information
  * iowatcher: Use blktrace_api.h
  * blkparse: Handle cgroup information
  * blkparse: Fix up the sector and length of split completions
  * blkparse: Initialize and test for undefined request tracking timestamps</changelog>
  <changelog author="jeffm@suse.com" date="1634817600">- Update to version 1.3.0+git.20211021:
  * blkparse: fix incorrectly sized memset in check_cpu_map
  * blkparse: skip check_cpu_map with pipe input</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="92f05a05c47c50a415fdbd0cf04a1ef11587674d30ca0294aff0604d81aab762a392e1c52d70960b0d01bbfc31dcd9a7ed4d2fbfa34433c1e9e506f0af76074f" name="blog" arch="x86_64">
  <version epoch="0" ver="2.35" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743163200">- Update to version 2.29
  * Make sure that password prompt is seen Latest
    Use a temporary buffer to be silent during asking passwords.
    And stop system console output during password questions
    only if temporary buffer becomes short. As well as do coloring
    on /dev/ttysclp0 for S390.
- Drop patch.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1743422400">- Update to version 2.30
  * The asking variable is not shared
  * Allow password asking prompt to be repeated if empty.
  * Make spinner support UTF-8 multibyte conform.
  * Spinner lines of system still not handled.</changelog>
  <changelog author="werner@suse.de" date="1743595200">- Update to version 2.31
  * Handel BS on password prompt as well
  * Drop spining code as systemd uses clear to end of line
    escape sequence (hard coded!) for its cylon lines.
- blog: again suggest blog-plymouth</changelog>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
</package>
<package pkgid="0f395fef13401b531a5f4deca9afbc1d2e21dcceeb6bc4c65af85446d067342d473e8f043676b380470108bd31312600a07d75d4aab74588766e4a9a5f759140" name="blog" arch="x86_64">
  <version epoch="0" ver="2.38" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
  <changelog author="werner@suse.de" date="1773748800">- Update to version 2.36
  * If SYS_pidfd_open is not defined use a fallback
    Include &lt;asm/unistd.h&gt; to get __NR_pidfd_open for
    the definition of SYS_pidfd_open.
  * Changes to let systemd find plymouth replacements
    which means to add the appropiate Alias in systemd-ask-password-blog.path
    and also in systemd-ask-password-blog.service with new Install
    sections.  Also change description in systemd-ask-password-blog.path
    to hint for blogd as replacement.
  * Rework password asking method to be asynchronous</changelog>
  <changelog author="werner@suse.de" date="1773921600">- Update to version 2.37
  * Make release.sh active
  * Run klogctl with console massages off only once in the
    password asking processes on the main console device only
  * Clean up white spaces
  * This will help on high console I/O as now blogd uses its epoll
    event handler to monitor via a file descriptor open with pidfd_open
    the password asking child processes (boo#1259547)</changelog>
  <changelog author="werner@suse.de" date="1776081600">- Update to version 2.38
  * Silent debugging messages in epoll algorithm (boo#1261699)
  * Make it work on 3215 console of s390
    means no tcdrain() for 3215, no blocking writes, not more then
    130 characters per line, no \r, finalize lines with \n.
    Nevertheless use a blocking read for password requests.
    Make automatic CLEAR an kernel command line option with
    the parameter blog.timeout=0 (boo#1261697)</changelog>
</package>
<package pkgid="c8dba4cf6b784445c46d17299ba8b1db48c384a8f5e531286d9e090807759c3ffeb54375ca13252a05437b3de52f2e22251363aeafd93074127c10b378d4bcfe" name="blog" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1773921600">- Update to version 2.37
  * Make release.sh active
  * Run klogctl with console massages off only once in the
    password asking processes on the main console device only
  * Clean up white spaces
  * This will help on high console I/O as now blogd uses its epoll
    event handler to monitor via a file descriptor open with pidfd_open
    the password asking child processes (boo#1259547)</changelog>
  <changelog author="werner@suse.de" date="1776081600">- Update to version 2.38
  * Silent debugging messages in epoll algorithm (boo#1261699)
  * Make it work on 3215 console of s390
    means no tcdrain() for 3215, no blocking writes, not more then
    130 characters per line, no \r, finalize lines with \n.
    Nevertheless use a blocking read for password requests.
    Make automatic CLEAR an kernel command line option with
    the parameter blog.timeout=0 (boo#1261697)</changelog>
  <changelog author="werner@suse.de" date="1776859200">- Update to version 2.39
  * New feature to protect passwords to be logged
    On S390 now blogd use for 3215 console the command
    [#]CP SPOOL CONSOLE STOP
    to stop logging the plain password at prompting for the password.
    Also a warning is written out to warn the user that the password
    will be visible. With getting the password the CONSOLE log is
    enabled again if it was enabled before.</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Update to version 2.40
  * Protect password data stream on 3270 console as well
    On S390 the 3270 console is also logged and the passwords,
    even if hidden on the 3270 console, would be logged as well.</changelog>
  <changelog author="werner@suse.de" date="1781870400">- Update to version 2.41
  * The __attribute__((noreturn)) for error() in libconsole.h added
  * The variable err with 0 initialized in thread_poll()
  * The variable cp.parity with {0} initialized in readpw()
  * feat(blogd): handle pending systemd password requests on coldstart
  * Initialize console pointer list as well
  * Check peer credentials before reading command
  * Make isinteger() string check usable for all architectures
  * Add some comments about warnings and translation for S390</changelog>
  <changelog author="werner@suse.de" date="1782129600">- Update to version 2.42
  Fix possible memory leaks, eliminate type punning, and resolve I/O blocking
  This update implements a series of systemic improvements to stability,
  security, and performance:
  1. Memory Safety &amp; Leak Resolution:
  - Implemented lcons_shutdown destructor to automatically purge the console
    list and close FDs on exit.
  - Fixed password buffer leak by using in closeIO, correctly matching
    the mmap allocation in shm_malloc.
  - Added cleanup for pwprompt in closeIO.
  2. Elimination of Dangerous Type Punning:
  - Replaced the unreliable &amp;cons-&gt;node pattern with a type-safe list_t lcons
    sentinel across the codebase.
  - Added __attribute__((may_alias)) to list_t in listing.h to prevent
    compiler strict aliasing optimizations from corrupting list traversals.
  3. I/O Responsiveness &amp; Stability:
  - Removed tcdrain() from the high-frequency epoll_console_in path to
    eliminate daemon freezes during heavy output.
  - Updated consinitIO to ensure CON_SERIAL devices remain in O_NONBLOCK
    mode, preventing freezes on slow serial lines.
  - Extended the tcdrain skip-list in closeIO to include CON_SERIAL, ensuring
    a hang-free shutdown.
  4. Architectural Improvements:
  - Redesigned shm_malloc to use a tiered mapping strategy: prefers
    file-backed shared memory in /dev/shm with a graceful fallback
    to MAP_ANONYMOUS.
  - Optimized listing.h with always_inline attributes, __builtin_prefetch
    for cache efficiency, and list poisoning for safer debugging.</changelog>
  <changelog author="werner@suse.de" date="1782388800">- Update to version 2.43
  Make sure that if blog is running it is identified as plymouth Latest
  also add conflicts to systemd-ask-password-console units in the
  systemd-ask-password-blog units. This should avoid conflicting password
  agents asking the same question in s390x.</changelog>
  <changelog author="werner@suse.de" date="1782734400">- Correct latest changes of 2.43</changelog>
  <changelog author="werner@suse.de" date="1782820800">- Update to version 2.44
  Harden blog and use shims units to handle plymouth
  Disable coldstart requests via epoll
  Avoid handling fd twice in epoll loop</changelog>
  <changelog author="werner@suse.de" date="1782993600">- Update to version 2.45
  Fix early boot LUKS prompt on s390x and resolve memory corruptions
  This update addresses several critical issues in the early boot phase,
  especially on s390x architectures, and hardens the daemon's architecture:
  - Initrd/Dracut: Properly include `systemd-ask-password-blog.path` in
    sysinit.target.wants during the initrd phase to ensure LUKS password
    prompts are captured early in the zipl phase.
  - Systemd Units: Drop restrictive `ConditionKernelCommandLine=!plymouth.enable=0`
    to prevent the agent from being disabled by standard mainframe boot parameters.
  - Memory Corruption: Fix a critical heap corruption by renaming the conflicting
    `alignof()` macro to `ALIGNED_SIZEOF()` and zeroing allocated memory for
    `struct request` (memset) to prevent reading uninitialized pointers #5.
  - Kernel Command Line: Improve `parse_cmdline()` to support boolean parameters
    without an explicit value (e.g., `blog.silent` defaults to `blog.silent=1`).
  - New Features: Introduce `blog.silent` to suppress console I/O and `blog.coldboot`
    to explicitly trigger the early coldstart password query.
  - Lifecycle: Switch `KillMode=none` to `KillMode=mixed` to comply with modern
    systemd process lifecycle management.
  Fixes: gh#bitstreamout/showconsole#5
  Fixes: gh#bitstreamout/showconsole#6
  Fixes: bsc#1264176</changelog>
</package>
<package pkgid="442ca74ef221ce6514c60ded76616e11e59e77efc6478a59421b293c37be1d35f3fb10e74ee5566aa45c5f06b6e2c9c0e8dd7f4e7d7ad294c64a17746f615441" name="blog-devel" arch="x86_64">
  <version epoch="0" ver="2.35" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743163200">- Update to version 2.29
  * Make sure that password prompt is seen Latest
    Use a temporary buffer to be silent during asking passwords.
    And stop system console output during password questions
    only if temporary buffer becomes short. As well as do coloring
    on /dev/ttysclp0 for S390.
- Drop patch.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1743422400">- Update to version 2.30
  * The asking variable is not shared
  * Allow password asking prompt to be repeated if empty.
  * Make spinner support UTF-8 multibyte conform.
  * Spinner lines of system still not handled.</changelog>
  <changelog author="werner@suse.de" date="1743595200">- Update to version 2.31
  * Handel BS on password prompt as well
  * Drop spining code as systemd uses clear to end of line
    escape sequence (hard coded!) for its cylon lines.
- blog: again suggest blog-plymouth</changelog>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
</package>
<package pkgid="db4bb349d2a9564e30f5faf417a6a9ea3a235b8bcbd8eaf1a94eb8bcc29e22088a597206da5cea37b666b354fbdd24ddb0771c6d945d4124dfcb477f2259806e" name="blog-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
  <changelog author="werner@suse.de" date="1773748800">- Update to version 2.36
  * If SYS_pidfd_open is not defined use a fallback
    Include &lt;asm/unistd.h&gt; to get __NR_pidfd_open for
    the definition of SYS_pidfd_open.
  * Changes to let systemd find plymouth replacements
    which means to add the appropiate Alias in systemd-ask-password-blog.path
    and also in systemd-ask-password-blog.service with new Install
    sections.  Also change description in systemd-ask-password-blog.path
    to hint for blogd as replacement.
  * Rework password asking method to be asynchronous</changelog>
  <changelog author="werner@suse.de" date="1773921600">- Update to version 2.37
  * Make release.sh active
  * Run klogctl with console massages off only once in the
    password asking processes on the main console device only
  * Clean up white spaces
  * This will help on high console I/O as now blogd uses its epoll
    event handler to monitor via a file descriptor open with pidfd_open
    the password asking child processes (boo#1259547)</changelog>
  <changelog author="werner@suse.de" date="1776081600">- Update to version 2.38
  * Silent debugging messages in epoll algorithm (boo#1261699)
  * Make it work on 3215 console of s390
    means no tcdrain() for 3215, no blocking writes, not more then
    130 characters per line, no \r, finalize lines with \n.
    Nevertheless use a blocking read for password requests.
    Make automatic CLEAR an kernel command line option with
    the parameter blog.timeout=0 (boo#1261697)</changelog>
</package>
<package pkgid="afe01e9a0c3d1b389b42f8e5a9eec08087305e7bc8811dc9a00ea719f36eaabb1c3a08ce61acf08888935c5f67fe2ed529c94980e6c0cea1d3bd586b64bacb84" name="blog-devel" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1773921600">- Update to version 2.37
  * Make release.sh active
  * Run klogctl with console massages off only once in the
    password asking processes on the main console device only
  * Clean up white spaces
  * This will help on high console I/O as now blogd uses its epoll
    event handler to monitor via a file descriptor open with pidfd_open
    the password asking child processes (boo#1259547)</changelog>
  <changelog author="werner@suse.de" date="1776081600">- Update to version 2.38
  * Silent debugging messages in epoll algorithm (boo#1261699)
  * Make it work on 3215 console of s390
    means no tcdrain() for 3215, no blocking writes, not more then
    130 characters per line, no \r, finalize lines with \n.
    Nevertheless use a blocking read for password requests.
    Make automatic CLEAR an kernel command line option with
    the parameter blog.timeout=0 (boo#1261697)</changelog>
  <changelog author="werner@suse.de" date="1776859200">- Update to version 2.39
  * New feature to protect passwords to be logged
    On S390 now blogd use for 3215 console the command
    [#]CP SPOOL CONSOLE STOP
    to stop logging the plain password at prompting for the password.
    Also a warning is written out to warn the user that the password
    will be visible. With getting the password the CONSOLE log is
    enabled again if it was enabled before.</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Update to version 2.40
  * Protect password data stream on 3270 console as well
    On S390 the 3270 console is also logged and the passwords,
    even if hidden on the 3270 console, would be logged as well.</changelog>
  <changelog author="werner@suse.de" date="1781870400">- Update to version 2.41
  * The __attribute__((noreturn)) for error() in libconsole.h added
  * The variable err with 0 initialized in thread_poll()
  * The variable cp.parity with {0} initialized in readpw()
  * feat(blogd): handle pending systemd password requests on coldstart
  * Initialize console pointer list as well
  * Check peer credentials before reading command
  * Make isinteger() string check usable for all architectures
  * Add some comments about warnings and translation for S390</changelog>
  <changelog author="werner@suse.de" date="1782129600">- Update to version 2.42
  Fix possible memory leaks, eliminate type punning, and resolve I/O blocking
  This update implements a series of systemic improvements to stability,
  security, and performance:
  1. Memory Safety &amp; Leak Resolution:
  - Implemented lcons_shutdown destructor to automatically purge the console
    list and close FDs on exit.
  - Fixed password buffer leak by using in closeIO, correctly matching
    the mmap allocation in shm_malloc.
  - Added cleanup for pwprompt in closeIO.
  2. Elimination of Dangerous Type Punning:
  - Replaced the unreliable &amp;cons-&gt;node pattern with a type-safe list_t lcons
    sentinel across the codebase.
  - Added __attribute__((may_alias)) to list_t in listing.h to prevent
    compiler strict aliasing optimizations from corrupting list traversals.
  3. I/O Responsiveness &amp; Stability:
  - Removed tcdrain() from the high-frequency epoll_console_in path to
    eliminate daemon freezes during heavy output.
  - Updated consinitIO to ensure CON_SERIAL devices remain in O_NONBLOCK
    mode, preventing freezes on slow serial lines.
  - Extended the tcdrain skip-list in closeIO to include CON_SERIAL, ensuring
    a hang-free shutdown.
  4. Architectural Improvements:
  - Redesigned shm_malloc to use a tiered mapping strategy: prefers
    file-backed shared memory in /dev/shm with a graceful fallback
    to MAP_ANONYMOUS.
  - Optimized listing.h with always_inline attributes, __builtin_prefetch
    for cache efficiency, and list poisoning for safer debugging.</changelog>
  <changelog author="werner@suse.de" date="1782388800">- Update to version 2.43
  Make sure that if blog is running it is identified as plymouth Latest
  also add conflicts to systemd-ask-password-console units in the
  systemd-ask-password-blog units. This should avoid conflicting password
  agents asking the same question in s390x.</changelog>
  <changelog author="werner@suse.de" date="1782734400">- Correct latest changes of 2.43</changelog>
  <changelog author="werner@suse.de" date="1782820800">- Update to version 2.44
  Harden blog and use shims units to handle plymouth
  Disable coldstart requests via epoll
  Avoid handling fd twice in epoll loop</changelog>
  <changelog author="werner@suse.de" date="1782993600">- Update to version 2.45
  Fix early boot LUKS prompt on s390x and resolve memory corruptions
  This update addresses several critical issues in the early boot phase,
  especially on s390x architectures, and hardens the daemon's architecture:
  - Initrd/Dracut: Properly include `systemd-ask-password-blog.path` in
    sysinit.target.wants during the initrd phase to ensure LUKS password
    prompts are captured early in the zipl phase.
  - Systemd Units: Drop restrictive `ConditionKernelCommandLine=!plymouth.enable=0`
    to prevent the agent from being disabled by standard mainframe boot parameters.
  - Memory Corruption: Fix a critical heap corruption by renaming the conflicting
    `alignof()` macro to `ALIGNED_SIZEOF()` and zeroing allocated memory for
    `struct request` (memset) to prevent reading uninitialized pointers #5.
  - Kernel Command Line: Improve `parse_cmdline()` to support boolean parameters
    without an explicit value (e.g., `blog.silent` defaults to `blog.silent=1`).
  - New Features: Introduce `blog.silent` to suppress console I/O and `blog.coldboot`
    to explicitly trigger the early coldstart password query.
  - Lifecycle: Switch `KillMode=none` to `KillMode=mixed` to comply with modern
    systemd process lifecycle management.
  Fixes: gh#bitstreamout/showconsole#5
  Fixes: gh#bitstreamout/showconsole#6
  Fixes: bsc#1264176</changelog>
</package>
<package pkgid="b491e44accc1f58c817260f039cb955e667f5fd27bb6450dd893f72e90fca411225b5e361a0a1da19a946ee00cc3b59d86fcb12ec78f01094d2aa3e17504bf03" name="blog-plymouth" arch="x86_64">
  <version epoch="0" ver="2.35" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743163200">- Update to version 2.29
  * Make sure that password prompt is seen Latest
    Use a temporary buffer to be silent during asking passwords.
    And stop system console output during password questions
    only if temporary buffer becomes short. As well as do coloring
    on /dev/ttysclp0 for S390.
- Drop patch.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1743422400">- Update to version 2.30
  * The asking variable is not shared
  * Allow password asking prompt to be repeated if empty.
  * Make spinner support UTF-8 multibyte conform.
  * Spinner lines of system still not handled.</changelog>
  <changelog author="werner@suse.de" date="1743595200">- Update to version 2.31
  * Handel BS on password prompt as well
  * Drop spining code as systemd uses clear to end of line
    escape sequence (hard coded!) for its cylon lines.
- blog: again suggest blog-plymouth</changelog>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
</package>
<package pkgid="43a3876f86fc3e3c89b2a414bb0efcf2a2ace68822f455a1d23eac9de941142729d31e41d814ca7ec2998c1c25e1be7e17fb08a6b39b0d68cb3fe74fcfd58fae" name="blog-plymouth" arch="x86_64">
  <version epoch="0" ver="2.38" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1743681600">- Update to version 2.32
  * Better 3270 console support, use uevent below /sys file system</changelog>
  <changelog author="werner@suse.de" date="1744286400">- The suse-module-tools are required at build otherwise blog
  is not in the initrd</changelog>
  <changelog author="werner@suse.de" date="1744372800">- Use rpm-config-SUSE instead of suse-module-tools for suse version
  above 1550 and add code for the missing macros for older
  distributions like leap 15.6</changelog>
  <changelog author="werner@suse.de" date="1744804800">- Update to version 2.34
  * Make it work on s390x (still no 3215 console)
    This is a bug fix release.  But still no support in conmode
    3215 as there is a race triggered by using conmode 3215.
    The order of the systemd units seems to change with this
    console mode.</changelog>
  <changelog author="werner@suse.de" date="1744891200">- Add patch blog-install.patch
  * Fixes install problems
  * Use module-setup.sh to install in BUILDROOT</changelog>
  <changelog author="werner@suse.de" date="1744891201">- Add patch blog-3215.patch
  * Try to avoid blocking mode of 3215 console on s390x as holding
    the output at `MORE' stops blogd, that is that it can not see
    any messages over its socket like switch of the root file system.</changelog>
  <changelog author="werner@suse.de" date="1745841600">- Update to version 2.35
  * Make s390 3215 console work that is use EPOLLOUT|EPOLLONESHOT
    to control if we can write to ttyS0 in nonblocking mode and if
    not reenable EPOLLOUT|EPOLLONESHOT.
  * At boot set for ttyS0 via vmcp API nonblocking MORE mode with
    `0 0'.  It beeps but boots.
- Remove patches now upstream
  * blog-3215.patch
  * blog-install.patch</changelog>
  <changelog author="werner@suse.de" date="1773748800">- Update to version 2.36
  * If SYS_pidfd_open is not defined use a fallback
    Include &lt;asm/unistd.h&gt; to get __NR_pidfd_open for
    the definition of SYS_pidfd_open.
  * Changes to let systemd find plymouth replacements
    which means to add the appropiate Alias in systemd-ask-password-blog.path
    and also in systemd-ask-password-blog.service with new Install
    sections.  Also change description in systemd-ask-password-blog.path
    to hint for blogd as replacement.
  * Rework password asking method to be asynchronous</changelog>
  <changelog author="werner@suse.de" date="1773921600">- Update to version 2.37
  * Make release.sh active
  * Run klogctl with console massages off only once in the
    password asking processes on the main console device only
  * Clean up white spaces
  * This will help on high console I/O as now blogd uses its epoll
    event handler to monitor via a file descriptor open with pidfd_open
    the password asking child processes (boo#1259547)</changelog>
  <changelog author="werner@suse.de" date="1776081600">- Update to version 2.38
  * Silent debugging messages in epoll algorithm (boo#1261699)
  * Make it work on 3215 console of s390
    means no tcdrain() for 3215, no blocking writes, not more then
    130 characters per line, no \r, finalize lines with \n.
    Nevertheless use a blocking read for password requests.
    Make automatic CLEAR an kernel command line option with
    the parameter blog.timeout=0 (boo#1261697)</changelog>
</package>
<package pkgid="e6ffd4e1966d45840a5214ddf24d3b16fcc614a27331d13fee1c4933cf8451996ca659fccba90a61272b34fd665dae79e620e68171254c46a22b00607943b2f4" name="blog-plymouth" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1773921600">- Update to version 2.37
  * Make release.sh active
  * Run klogctl with console massages off only once in the
    password asking processes on the main console device only
  * Clean up white spaces
  * This will help on high console I/O as now blogd uses its epoll
    event handler to monitor via a file descriptor open with pidfd_open
    the password asking child processes (boo#1259547)</changelog>
  <changelog author="werner@suse.de" date="1776081600">- Update to version 2.38
  * Silent debugging messages in epoll algorithm (boo#1261699)
  * Make it work on 3215 console of s390
    means no tcdrain() for 3215, no blocking writes, not more then
    130 characters per line, no \r, finalize lines with \n.
    Nevertheless use a blocking read for password requests.
    Make automatic CLEAR an kernel command line option with
    the parameter blog.timeout=0 (boo#1261697)</changelog>
  <changelog author="werner@suse.de" date="1776859200">- Update to version 2.39
  * New feature to protect passwords to be logged
    On S390 now blogd use for 3215 console the command
    [#]CP SPOOL CONSOLE STOP
    to stop logging the plain password at prompting for the password.
    Also a warning is written out to warn the user that the password
    will be visible. With getting the password the CONSOLE log is
    enabled again if it was enabled before.</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Update to version 2.40
  * Protect password data stream on 3270 console as well
    On S390 the 3270 console is also logged and the passwords,
    even if hidden on the 3270 console, would be logged as well.</changelog>
  <changelog author="werner@suse.de" date="1781870400">- Update to version 2.41
  * The __attribute__((noreturn)) for error() in libconsole.h added
  * The variable err with 0 initialized in thread_poll()
  * The variable cp.parity with {0} initialized in readpw()
  * feat(blogd): handle pending systemd password requests on coldstart
  * Initialize console pointer list as well
  * Check peer credentials before reading command
  * Make isinteger() string check usable for all architectures
  * Add some comments about warnings and translation for S390</changelog>
  <changelog author="werner@suse.de" date="1782129600">- Update to version 2.42
  Fix possible memory leaks, eliminate type punning, and resolve I/O blocking
  This update implements a series of systemic improvements to stability,
  security, and performance:
  1. Memory Safety &amp; Leak Resolution:
  - Implemented lcons_shutdown destructor to automatically purge the console
    list and close FDs on exit.
  - Fixed password buffer leak by using in closeIO, correctly matching
    the mmap allocation in shm_malloc.
  - Added cleanup for pwprompt in closeIO.
  2. Elimination of Dangerous Type Punning:
  - Replaced the unreliable &amp;cons-&gt;node pattern with a type-safe list_t lcons
    sentinel across the codebase.
  - Added __attribute__((may_alias)) to list_t in listing.h to prevent
    compiler strict aliasing optimizations from corrupting list traversals.
  3. I/O Responsiveness &amp; Stability:
  - Removed tcdrain() from the high-frequency epoll_console_in path to
    eliminate daemon freezes during heavy output.
  - Updated consinitIO to ensure CON_SERIAL devices remain in O_NONBLOCK
    mode, preventing freezes on slow serial lines.
  - Extended the tcdrain skip-list in closeIO to include CON_SERIAL, ensuring
    a hang-free shutdown.
  4. Architectural Improvements:
  - Redesigned shm_malloc to use a tiered mapping strategy: prefers
    file-backed shared memory in /dev/shm with a graceful fallback
    to MAP_ANONYMOUS.
  - Optimized listing.h with always_inline attributes, __builtin_prefetch
    for cache efficiency, and list poisoning for safer debugging.</changelog>
  <changelog author="werner@suse.de" date="1782388800">- Update to version 2.43
  Make sure that if blog is running it is identified as plymouth Latest
  also add conflicts to systemd-ask-password-console units in the
  systemd-ask-password-blog units. This should avoid conflicting password
  agents asking the same question in s390x.</changelog>
  <changelog author="werner@suse.de" date="1782734400">- Correct latest changes of 2.43</changelog>
  <changelog author="werner@suse.de" date="1782820800">- Update to version 2.44
  Harden blog and use shims units to handle plymouth
  Disable coldstart requests via epoll
  Avoid handling fd twice in epoll loop</changelog>
  <changelog author="werner@suse.de" date="1782993600">- Update to version 2.45
  Fix early boot LUKS prompt on s390x and resolve memory corruptions
  This update addresses several critical issues in the early boot phase,
  especially on s390x architectures, and hardens the daemon's architecture:
  - Initrd/Dracut: Properly include `systemd-ask-password-blog.path` in
    sysinit.target.wants during the initrd phase to ensure LUKS password
    prompts are captured early in the zipl phase.
  - Systemd Units: Drop restrictive `ConditionKernelCommandLine=!plymouth.enable=0`
    to prevent the agent from being disabled by standard mainframe boot parameters.
  - Memory Corruption: Fix a critical heap corruption by renaming the conflicting
    `alignof()` macro to `ALIGNED_SIZEOF()` and zeroing allocated memory for
    `struct request` (memset) to prevent reading uninitialized pointers #5.
  - Kernel Command Line: Improve `parse_cmdline()` to support boolean parameters
    without an explicit value (e.g., `blog.silent` defaults to `blog.silent=1`).
  - New Features: Introduce `blog.silent` to suppress console I/O and `blog.coldboot`
    to explicitly trigger the early coldstart password query.
  - Lifecycle: Switch `KillMode=none` to `KillMode=mixed` to comply with modern
    systemd process lifecycle management.
  Fixes: gh#bitstreamout/showconsole#5
  Fixes: gh#bitstreamout/showconsole#6
  Fixes: bsc#1264176</changelog>
</package>
<package pkgid="1baf21cac2b935141dab55a853e0e1a4e7901ecc9fc4b5c73b984e77c0daab9fc3379fa6a4f263c7675d21fd58d6e0dd0d74ed6dae6d9f1aa5fa99480359248c" name="blogbench" arch="x86_64">
  <version epoch="0" ver="1.2" rel="bp160.1.12"/>
  <changelog author="pascal.bleser@opensuse.org" date="1279886400">- initial package (1.1)</changelog>
  <changelog author="dsterba@suse.cz" date="1386331200">- fix-rewriters-argcount.patch: the --rewriters argument should accept
  a value according to help
- clean up spec file</changelog>
  <changelog author="mpluskal@suse.com" date="1423051200">- Tiny spec file cleanup
- Update license</changelog>
  <changelog author="mpluskal@suse.com" date="1425816000">- Add gpg key
- Replace _DATE_
- Cleanup build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Correct license</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update project url
- Modernise spec file</changelog>
  <changelog author="Bill Anastasiadis &lt;vasilios.anastasiadis@suse.com&gt;" date="1560945600">- Enable more thorough dependency tracking</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618833600">- Fixed SPEC file: Replaced broken URL with current upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687262400">- Update to version 1.2
  * Access the memory pages being read, which is more realistic that just filling a shared buffer.
- Drop no longer relevant fix-rewriters-argcount.patch</changelog>
</package>
<package pkgid="6d97e728eb3a5724cb7ee80c884506b28c933b522e068f59993fb067886595d6a3a387d56471f62088bec87a0806fe2b6f0b327ca405187b06cfe30d087f2866" name="blosc-devel" arch="x86_64">
  <version epoch="0" ver="1.21.6" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1585656000">- Update to version 1.18.1:
  * Fixed the copy of the leftovers of a chunk when its size is not
    a multiple of the typesize.</changelog>
  <changelog author="mpluskal@suse.com" date="1592913600">- Update to version 1.19.0:
  * The length of automatic blocksizes for fast codecs (lz4, blosclz) has been incremented quite a bit (up to 256 KB) for better compression ratios.
  * The performance in modern CPUs (with at least 256 KB in L2 cache) should be better too (for older CPUs the performance should stay roughly the same).
  * For small buffers that cannot be compressed (typically &lt; 128 bytes), blosc_compress() returns now a 0 (cannot compress) instead of a negative number (internal error). See #294.
  * blosclz codec updated to 2.1.0. Expect better compression ratios and performance in a wider variety of scenarios.
  * blosc_decompress_unsafe(), blosc_decompress_ctx_unsafe() and blosc_getitem_unsafe() have been removed because they are dangerous and after latest improvements, they should not be used in production.</changelog>
  <changelog author="andythe_great@pm.me" date="1597147200">- Enable support for SNAPPY compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Stop assuming that %{_libexecdir} == /usr/lib (boo#1174075).</changelog>
  <changelog author="mpluskal@suse.com" date="1608292800">- Update to version 1.20.1 boo#1179914 CVE-2020-29367:
  * More saftey checks have been implemented so that potential flaws discovered by new fuzzers in OSS-Fuzzer are fixed now
  * BloscLZ updated to 2.3.0. Expect better compression ratios for faster codecs. For details, see our new blog post: https://blosc.org/posts/beast-release/
  * Fixed the _xgetbv() collision. Thanks to Michał Górny (@mgorny).</changelog>
  <changelog author="rpm@fthiessen.de" date="1618574400">- Update to 1.21.0:
  * Updated internal codecs</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to 1.21.1
  * Fix pthread on ppc64le.
  * Updates in internal codecs, important performance improvements</changelog>
  <changelog author="elimat@opensuse.org" date="1691150400">- Update to 1.21.4
  * Upgrade internal-complib zstd from 1.5.2 to 1.5.5.
  * Zlib updated to 1.2.13.
- remove fix of moving pkgconfig file to correct location, it have been fixed upstrem</changelog>
  <changelog author="dmueller@suse.com" date="1693828800">- update to 1.21.5:
  * Fix SSE2/AVX2 build issue.  Fixes #352.</changelog>
  <changelog author="jgwang@suse.com" date="1725796800">- Update to version 1.21.6
  * Zlib updated to 1.3.1. Thanks to Lachlan Deakin
  * Zstd updated to 1.5.6
  * Fixed many typos. Thanks to Dimitri Papadopoulos</changelog>
</package>
<package pkgid="2c8a16c8b52db1a899a6d2fef9401b884e451765885a757a704b67397a1b5ad389b5c45849d0085d36ac411e9f25546a3b54a14b78e654a9961f3aaff56c86fa" name="bluedevil6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * Fix glitch while scrolling with touch
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * update version for new release
  * applet: fix standalone widget toolbar
  * applet: remove second argument of removeInternalAction
  * applet: add optional badge overlay with number of connected devices
  * applet: port to qml declarative
  * Remove unused PROJECT_VERSION_MAJOR variable
  * kded/requestpin: only use forceActiveWindow on X11
  * Fix glitch while scrolling with touch
  * applet: Hide devices if bluetooth adapter is powered off
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kcm: keep "Pair Device" always visible (kde#499232)
  * [kcm] Fix file receiver URL setting handling
  * Use KConfigXT for bluedevilglobalrc
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * DevicesStateProxyModel: Split disconnecting into a dedicated state (kde#493245)
  * DevicesStateProxyModel: Remove unused method
  * Wizard: Sort devices with an actual name first</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="0ec949a96631509335cedc74028ed0dcca95217a89b8cef69c57d692f57941a6ca0735cfbc881cfecd3651e838764ae6bcadcf8cb8937682123a0ffdbcce9541" name="bluedevil6-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * Fix glitch while scrolling with touch
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * update version for new release
  * applet: fix standalone widget toolbar
  * applet: remove second argument of removeInternalAction
  * applet: add optional badge overlay with number of connected devices
  * applet: port to qml declarative
  * Remove unused PROJECT_VERSION_MAJOR variable
  * kded/requestpin: only use forceActiveWindow on X11
  * Fix glitch while scrolling with touch
  * applet: Hide devices if bluetooth adapter is powered off
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kcm: keep "Pair Device" always visible (kde#499232)
  * [kcm] Fix file receiver URL setting handling
  * Use KConfigXT for bluedevilglobalrc
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * DevicesStateProxyModel: Split disconnecting into a dedicated state (kde#493245)
  * DevicesStateProxyModel: Remove unused method
  * Wizard: Sort devices with an actual name first</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="2503412cb791fe69e654fb5e329be2a7d20f3a1c8b51e1338b4504b9df207f9c344dc4e77ed0bed1d6f7ae179ba22ea4f1731188a1d37b8ba274136687240bfb" name="blueman" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (bsc#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to version 2.2.1
  * New Desktop notifications on connect / disconnect
  * New notifications with battery level for connecting devices
  * Allow cancelling device connection attempts
  * Allow opening device menus via keyboard (Shift+F10 or menu key)
  * Add Ctrl+Q and Ctrl+W accelerators for closing blueman-manager
  * Stop discovery and retry connection for broken adapter drivers
  * Improved passkey handling
  * Auto-connect settings for supported services
  * Fix hide devices with no name
  * Fix disconnecting NMDevice
  * Fix DiscvManager plugin showed its icon unreliably
  * Drop blueman-report, and blueman-assistant
- Add subpackages for caja, nautilus, and nemo sendto extensions</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1636804800">- Update to version 2.2.3
  * Recent connections disabled after suspend and resume
  * Service authorization notifications did not respond
  * Passkeys did not get displayed
- Updates from version 2.2.2
  * Issues with power level bars
  * Error message in blueman-mechanism</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1638100800">- Disable agent startup on Pantheon desktop</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1646740800">- Update to version 2.2.4:
  * Dropped the PIN database.
  * Fix that blueman-mechanism accepted arbitrary file paths and
    returned the errors from trying to open them,
    see https://github.com/blueman-project/blueman/security/advisories/GHSA-3r9p-m5c8-8mw8
- Add blueman-2.2.4-ayatana-appindicator.patch: Support
  Ayatana AppIndicators.
- Require dbus(org.freedesktop.Notifications) instead of
  notification-daemon.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1649678400">- Added iproute2 build dependency to satisfy ip requirement</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1649678401">- Do not recommend -lang package: the auto-generated -lang package
  already contains relevant supplements.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676030400">- Update to version 2.3.5:
  * Right click menu was pointing to the wrong list row
  * Double click to connect
- Changes from version 2.3.4:
  * Errors when connected to a device with the DisconnectItems plugin enabled
- Changes from version 2.3.3:
  * Issues with NM PANU connections of equally named devices
  * Submenus in KDE Plasma tray
  * Avoid using StatusNotifierItem and GtkStatusIcon icons in parallel
  * Do not re-use dbusmenu item identifiers; avoids issues at least with
    gnome-shell-extension-appindicator
- Changes from version 2.3.2:
  * StatusNotifierItem submenus did not work in lxqt-panel (@niknah)
  * StatusNotifierItem vanished on panel restarts
  * StatusNotifierItem compatibility issues with libdbusmenu used at least
    by xfce4-panel and Waybar
  * StatusNotifierItem showed the menu on left click in xfce4-panel
- Changes from version 2.3.1:
  * StatusNotifierItem sent an incomplete NewStatus signal.
  * Avoid statusbar resize when showing progressbar
- Changes from version 2.3.0:
  * Blocked emblem was not visible for scales other than 1
  * Audio profile switcher in applet menu (@abhijeetviswa)
  * Symbolic tray icon option (GSettings switch symbolic-status-icons in
    org.blueman.general)
  * Replace AppIndicator with DBus StatusNotifierItem
  * Use a GtkTreeModelFilter to show/hide unnamed devices
  * Replace sigint hack with GLib to catch it
  * Port meson from deprecated python3 module
  * Rework battery handling
  * Merge Battery applet plugin into ConnectionNotifier
  * Symbolic icons and small UI improvements
- Changes from version 2.2.5:
  * Fix network interface iteration on 32 bit systems
  * Manager: Fix cancel button in send-note dialog
  * Fix battery and signals bars
- Removed blueman-2.2.4-ayatana-appindicator.patch as Appindicator
  has been replaced with DBus StatusNotifierItem
- Dependencies.md file is no longer packaged</changelog>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1721304000">- Update to version 2.4.2:
  * Broken audio profile applet menu items
  * Missing manager window title
  * Teardown of DBus mock server in tests
  * Only a single battery notification
  * Renamed recent connections header in applet menu
  * Translation updates
  * An option to toggle the manager window with the tray icon (the 2.3 behavior
    useful when there are no window decorations for closing it)
- Update to version 2.4.1:
  * Fallback for missing icons
  * Correct Bluetooth state tracking in manager window
  * Sporadic error on battery data (Note that there was a regression
    in Linux 6.8.2, 6.7.11 and 6.6.23 that causes it and lots of other trouble)
  * Active state on tray icon
  * Broken markup in tray menu
  * Translation updates
  * Handle incompabilities with kded6 running on desktops without
    StatusNotifierItem support
- Update to version 2.4:
  * Fix device-selected handlers
  * Fix deprecations in tests
  * Fix showing -1 seconds when discovering @kuraga
  * Tray: Let dbus call end and reply to caller
  * Get the image-missing icon if lookup failed to avoid crash
  * Raise minimum Python version to 3.8
  * Raise minumum Gtk+ version to 3.24
  * Hide recent connections associated with unavailable adapters
  * Store network configuration in GSettings instead of
    /var/lib/blueman/network.state.
  * Replace custom MessageArea widget with regular Gtk.InfoBar
  * Drop auto-power feature. BlueZ now has the AutoEnable setting for even
    better auto-powering.
  * Do not use pointless link quality value
  * Recent connections in toplevel applet menu
  * Never hide keyboard and combos, see #1954 for more info
  * Do not close blueman-manager from applet
  * Add Switch to blueman-manager to set bluetooth on/off
  * Remove broken check for bluetooth status
  * PluginDialog: Replace custom list with Gtk.ListBox
  * Ignore double-click for connect when unpowered
  * Drop homgeneous from statusbar
  * PulseAudioUtils: Use python enums in several places
  * Use operator convenience functions
  * Cleanup PluginDialog UI
  * Show HCI device in blueman-adapers tabs
  * Show different icon for the active audio profile @localevil
  * Make blueman-services a notebook
  * Use the TypedDict as constructor
  * Audio profile switcher in applet menu (@abhijeetviswa)
  * Set router address as DNS server instead of loopback addresses
  * Enable dnsmasq DNS service if possible and add DNS servers otherwise
  * Reconfigure DHCP service on local nameserver changes
  * Support for systemd-resolved for getting nameservers for NAP clients
  * List connected devices in status icon tooltip
  * Support for nautilus 43 and later
  * Copy bleutooth address to clipboard in devicelist
  * Add battery levels to status icon tooltip</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1754913600">- Fix build on Leap 16.0 that has no nemo-extensions package
  (bsc#1247915)</changelog>
</package>
<package pkgid="586c245c1af593d6fcee8c18bc69796dc311064d8dc9eadcf8b59478da16c6caa205bd894a96a8c39b63a4d7efa22b667f1bf60e51e082f547ff1eefdae90d11" name="blueman-lang" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (bsc#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to version 2.2.1
  * New Desktop notifications on connect / disconnect
  * New notifications with battery level for connecting devices
  * Allow cancelling device connection attempts
  * Allow opening device menus via keyboard (Shift+F10 or menu key)
  * Add Ctrl+Q and Ctrl+W accelerators for closing blueman-manager
  * Stop discovery and retry connection for broken adapter drivers
  * Improved passkey handling
  * Auto-connect settings for supported services
  * Fix hide devices with no name
  * Fix disconnecting NMDevice
  * Fix DiscvManager plugin showed its icon unreliably
  * Drop blueman-report, and blueman-assistant
- Add subpackages for caja, nautilus, and nemo sendto extensions</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1636804800">- Update to version 2.2.3
  * Recent connections disabled after suspend and resume
  * Service authorization notifications did not respond
  * Passkeys did not get displayed
- Updates from version 2.2.2
  * Issues with power level bars
  * Error message in blueman-mechanism</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1638100800">- Disable agent startup on Pantheon desktop</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1646740800">- Update to version 2.2.4:
  * Dropped the PIN database.
  * Fix that blueman-mechanism accepted arbitrary file paths and
    returned the errors from trying to open them,
    see https://github.com/blueman-project/blueman/security/advisories/GHSA-3r9p-m5c8-8mw8
- Add blueman-2.2.4-ayatana-appindicator.patch: Support
  Ayatana AppIndicators.
- Require dbus(org.freedesktop.Notifications) instead of
  notification-daemon.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1649678400">- Added iproute2 build dependency to satisfy ip requirement</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1649678401">- Do not recommend -lang package: the auto-generated -lang package
  already contains relevant supplements.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676030400">- Update to version 2.3.5:
  * Right click menu was pointing to the wrong list row
  * Double click to connect
- Changes from version 2.3.4:
  * Errors when connected to a device with the DisconnectItems plugin enabled
- Changes from version 2.3.3:
  * Issues with NM PANU connections of equally named devices
  * Submenus in KDE Plasma tray
  * Avoid using StatusNotifierItem and GtkStatusIcon icons in parallel
  * Do not re-use dbusmenu item identifiers; avoids issues at least with
    gnome-shell-extension-appindicator
- Changes from version 2.3.2:
  * StatusNotifierItem submenus did not work in lxqt-panel (@niknah)
  * StatusNotifierItem vanished on panel restarts
  * StatusNotifierItem compatibility issues with libdbusmenu used at least
    by xfce4-panel and Waybar
  * StatusNotifierItem showed the menu on left click in xfce4-panel
- Changes from version 2.3.1:
  * StatusNotifierItem sent an incomplete NewStatus signal.
  * Avoid statusbar resize when showing progressbar
- Changes from version 2.3.0:
  * Blocked emblem was not visible for scales other than 1
  * Audio profile switcher in applet menu (@abhijeetviswa)
  * Symbolic tray icon option (GSettings switch symbolic-status-icons in
    org.blueman.general)
  * Replace AppIndicator with DBus StatusNotifierItem
  * Use a GtkTreeModelFilter to show/hide unnamed devices
  * Replace sigint hack with GLib to catch it
  * Port meson from deprecated python3 module
  * Rework battery handling
  * Merge Battery applet plugin into ConnectionNotifier
  * Symbolic icons and small UI improvements
- Changes from version 2.2.5:
  * Fix network interface iteration on 32 bit systems
  * Manager: Fix cancel button in send-note dialog
  * Fix battery and signals bars
- Removed blueman-2.2.4-ayatana-appindicator.patch as Appindicator
  has been replaced with DBus StatusNotifierItem
- Dependencies.md file is no longer packaged</changelog>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1721304000">- Update to version 2.4.2:
  * Broken audio profile applet menu items
  * Missing manager window title
  * Teardown of DBus mock server in tests
  * Only a single battery notification
  * Renamed recent connections header in applet menu
  * Translation updates
  * An option to toggle the manager window with the tray icon (the 2.3 behavior
    useful when there are no window decorations for closing it)
- Update to version 2.4.1:
  * Fallback for missing icons
  * Correct Bluetooth state tracking in manager window
  * Sporadic error on battery data (Note that there was a regression
    in Linux 6.8.2, 6.7.11 and 6.6.23 that causes it and lots of other trouble)
  * Active state on tray icon
  * Broken markup in tray menu
  * Translation updates
  * Handle incompabilities with kded6 running on desktops without
    StatusNotifierItem support
- Update to version 2.4:
  * Fix device-selected handlers
  * Fix deprecations in tests
  * Fix showing -1 seconds when discovering @kuraga
  * Tray: Let dbus call end and reply to caller
  * Get the image-missing icon if lookup failed to avoid crash
  * Raise minimum Python version to 3.8
  * Raise minumum Gtk+ version to 3.24
  * Hide recent connections associated with unavailable adapters
  * Store network configuration in GSettings instead of
    /var/lib/blueman/network.state.
  * Replace custom MessageArea widget with regular Gtk.InfoBar
  * Drop auto-power feature. BlueZ now has the AutoEnable setting for even
    better auto-powering.
  * Do not use pointless link quality value
  * Recent connections in toplevel applet menu
  * Never hide keyboard and combos, see #1954 for more info
  * Do not close blueman-manager from applet
  * Add Switch to blueman-manager to set bluetooth on/off
  * Remove broken check for bluetooth status
  * PluginDialog: Replace custom list with Gtk.ListBox
  * Ignore double-click for connect when unpowered
  * Drop homgeneous from statusbar
  * PulseAudioUtils: Use python enums in several places
  * Use operator convenience functions
  * Cleanup PluginDialog UI
  * Show HCI device in blueman-adapers tabs
  * Show different icon for the active audio profile @localevil
  * Make blueman-services a notebook
  * Use the TypedDict as constructor
  * Audio profile switcher in applet menu (@abhijeetviswa)
  * Set router address as DNS server instead of loopback addresses
  * Enable dnsmasq DNS service if possible and add DNS servers otherwise
  * Reconfigure DHCP service on local nameserver changes
  * Support for systemd-resolved for getting nameservers for NAP clients
  * List connected devices in status icon tooltip
  * Support for nautilus 43 and later
  * Copy bleutooth address to clipboard in devicelist
  * Add battery levels to status icon tooltip</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1754913600">- Fix build on Leap 16.0 that has no nemo-extensions package
  (bsc#1247915)</changelog>
</package>
<package pkgid="a0dfcc53ca14e9fed897cfef68bc8691ff427f09b487b4882b8e4127bffa93dd49129e6469683f9cef2fe158739bdb1b140db8e353c068d4f3ada94f4f191449" name="bluemoon" arch="x86_64">
  <version epoch="0" ver="2.12" rel="bp160.1.13"/>
  <changelog author="nemysis@gmx.ch" date="1419163200">- Initial package creation</changelog>
  <changelog author="nemysis@gmx.ch" date="1419249600">- Use for patches %{name}-version instead of %{name}-%{version}</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="750609d9e2a853dc10e401ed677f31a9195bc729f87bee92306d752f3ff750c890f823556bc33c5d8e4fdf51d355282a983ea5f0eacb0d1ba42f16043c72888a" name="blueprint-compiler" arch="noarch">
  <version epoch="0" ver="0.16.0" rel="bp160.1.4"/>
  <changelog author="Lukas M&#xFC;ller &lt;expeehaa@outlook.com&gt;" date="1664020800">- Create initial package.</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676548800">- Update to version 0.6.0:
  + Quoted and numeric literals are no longer interchangeable (e.g.
    `"800"` is no longer an accepted value for an integer type).
  + Boxed types are now type checked.
  + Added: There is now syntax for `GType` literals: the `typeof()`
    pseudo-function. For example, list stores have an `item-type`
    property which is now specifiable like this:
    `item-type: typeof(.MyDataModel)`.
  + The language server now logs to stderr.
  + Fix the build on Windows, where backslashes in paths were not
    escaped. (William Roy)
  + Remove the syntax for specifying menu objects inline,
    since it does not work.
  + Fix a crash in the language server that was triggered in files
    with incomplete `using Gtk 4.0;` statements.
  + Fixed compilation on big-endian systems.
  + Fix an issue in the interactive port tool that would lead to
    missed files. (Frank Dana)
  + Fix an issue for documentation contributors where changing the
    documentation files would not trigger a rebuild.
  + Document the missing support for Gtk.Label `&lt;attributes&gt;`,
    which is intentional, and recommend alternatives. (Sonny Piers)
  + Add a prominent warning that Blueprint is still experimental</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1702123200">- Update to version 0.10.0:
  + The bind-property keyword has been removed. Use bind instead.
  + Fixed an issue with the language server not conforming the spec.
  + Fixed the signature section of the hover documentation
    for properties and signals.
  + Fixed a bug where documentation was sometimes shown
    for a different symbol with the same name.
  + Number literals are now correctly parsed as floats
  + Decompiling an empty file now produces an empty file
  + Added hover documentation for the Adw.Breakpoint extensions
- Update to version 0.8.1:
  + Duplicates in a number of places are now considered errors.
  + Fixed a number of bugs in the XML output
- Update to version 0.8.0:
  + Fixed a bug in the language server's acceptance of text
    change commands.
  + Fixed a bug in the display of diagnostics when the diagnostic
    is at the beginning of a line.
  + Fixed a crash that occurred when dealing with array types.
  + Fixed a bug that prevented Gio.File properties from
    being settable.
  + Added support for closure expressions.
  + Added cast expressions, which are sometimes needed to specify
    type information in expressions.
  + Added the --typelib-path command line argument, which allows
    adding directories to the search path for typelib files.
  + Added custom compile and decompile commands to
    the language server.
  + Added support for Adw.MessageDialog custom syntax.
  + Added support for inline sub-templates for
    Gtk.BuilderListItemFactory.
  + Added support for Adw.Breakpoint custom syntax.
  + Added a warning when an object ID might be confusing.
  + Added support for Gtk.Scale custom syntax.
  + The XML output uses the integer value rather than GIR name
    for enum values.
  + Compiler errors are now printed to stderr rather than stdout.
  + Introduced $ to indicate types or callbacks
  + When a namespace is not found, errors are supressed
    when the namespace is used.
  + The compiler bug message now reports the version of
    blueprint-compiler.
  + The typeof syntax now uses &lt;&gt; instead of () to match
    cast expressions.
  + Menu sections and subsections can now have an ID.
  + The interactive porting tool now ignores hidden folders.
  + Templates now use the typename syntax rather than an ID
    to specify the template's class.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1702900800">- Revert python3-gobject Requires: fix No module named 'gi'</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1711368000">- Update to version 0.12.0:
  + Add support for Adw.AlertDialog
  + Emit warnings for deprecated APIs
  + Document symbols
  + "Go to definition" (ctrl+click)
  + Code action for "namespace not imported" diagnostics, that adds the
    missing import
  + Add a formatter - cli and lsp
  + Support for translation domain
  + Print code actions in error messages
  + Add a header notice mentionning the file is generated
  + decompiler: Use single quotes for output
  + Fixed multine strings support with the escape newline character
  + Fixed the signal completion, which was missing the "$"
  + Fixed property value completion
  + Added a missing semantic highlight (for the enum in Gtk.Scale marks)
  + Handle big endian bitfields correctly
  + Fix mixing relative and absolute paths</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724587200">- update to 0.14.0:
  * Added a warning for unused imports.
  * Added an option to not print the diff when formatting with the CLI.
  * Added support for building Gtk.ColumnViewRow, Gtk.ColumnViewCell,
  * and Gtk.ListHeader widgets with Gtk.BuilderListItemFactory.
  * Added support for the after keyword for signals. This was previously
  * documented but not implemented.
  * Added support for string arrays.
  * Added hover documentation for properties in lookup expressions.
  * The decompiler supports action widgets, translation domains, typeof&lt;&gt;
  * syntax, and expressions. It also supports extension syntax for
  * Adw.Breakpoint, Gtk.BuilderListItemFactory, Gtk.ComboBoxText,
  * Gtk.SizeGroup, and Gtk.StringList.
  * Added a decompile subcommand to the CLI, which decompiles an XML .ui
  * file to blueprint.
  * Accessibility relations that allow multiple values are supported
  * using list syntax.
  * The decompiler sorts imports alphabetically.
  * Translatable strings use translatable="yes" instead of translatable="true"
  * for compatibility with xgettext.
  * The first line of the documentation is shown in the completion list
  * when using the language server.
  * Object autocomplete uses a snippet to add the braces and position the
  * cursor inside them.
  * The carets in the CLI diagnostic output now span the whole error
  * message up to the end of the first line, rather than just the first
  * character.
  * The decompiler emits double quotes, which are compatible with gettext.
  * Fixed deprecation warnings in the language server.
  * The decompiler no longer duplicates translator comments on properties.
  * Subtemplates no longer output a redundant @generated comment.
  * When extension syntax from a library that is not available is used,
  * the compiler emits an error instead of crashing.
  * The language server reports semantic token positions correctly.
  * The decompiler no longer emits the deprecated bind-property syntax.
  * Fixed the tests when used as a Meson subproject.
  * Signal autocomplete generates correct syntax.
  * The decompiler supports templates that do not specify a parent class.
  * Adw.Breakpoint setters that set a property on the template no longer cause a crash.
  * Fixed type checking with templates that do not have a parent class.
  * Fixed online documentation links for interfaces.
  * The wording of edit suggestions is fixed for insertions and deletions.
  * When an input file uses tabs instead of spaces, the diagnostic output
  * on the CLI aligns the caret correctly.
  * The decompiler emits correct syntax when a property binding refers to
  * the template object.
  * Fixed typos in "Built with Blueprint" section.
- build documentation
- remove tests, as they fail on obs, but work otherwise fine when build locally</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1730030400">- Add missing requirements.
- Put spec in a position to build for Leap too.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324800">- Update to version 0.16.0:
  + Added:
  - Added more "go to reference" implementations in the language
    server
  - Added semantic token support for flag members in the language
    server
  - Added property documentation to the hover tooltip for notify
    signals
  - The language server now shows relevant sections of the
    reference documentation when hovering over keywords and
    symbols
  - Added not-swapped flag to signal handlers, which may be
    needed for signal handlers that specify an object
  - Added expression literals, which allow you to specify a
    Gtk.Expression property (as opposed to the existing
    expression support, which is for property bindings)
  + Changed:
  - The formatter adds trailing commas to lists
  - The formatter removes trailing whitespace from comments
  - Autocompleting a commonly translated property automatically
    adds the _("") syntax
  - Marking a single-quoted string as translatable now generates
    a warning, since gettext does not recognize it when using the
    configuration recommended in the blueprint documentation
  + Fixed:
  - Added support for libgirepository-2.0 so that blueprint
    doesn't crash due to import conflicts on newer versions of
    PyGObject
  - Fixed a bug when decompiling/porting files with enum values
  - Fixed several issues where tests would fail with versions of
    GTK that added new deprecations
  - Addressed a problem with the language server protocol in some
    editors
  - Fixed an issue where the compiler would crash instead of
    reporting compiler errors
  - Fixed a crash in the language server that occurred when a
    detailed signal (e.g. notify::*) was not complete
  - The language server now properly implements the shutdown
    command, fixing support for some editors and improving
    robustness when restarting
  - Marking a string in an array as translatable now generates an
    error, since it doesn't work
  + Documentation:
  - Added mention of null in the Literal Values section
  - Add apps to Built with Blueprint section
  - Corrected and updated many parts of the documentation</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1741435200">- Fix build error for Leap &lt; 16.</changelog>
</package>
<package pkgid="3abc7271a5e11eea17c3caf5f1734ceb5e402dea65e47634917d55347b9b19e9ed7cc11c797d0fbbc25113de1bc8ca3dfbcec8969ef1e85ebe5a0b02b538a218" name="blueprint-compiler-devel" arch="noarch">
  <version epoch="0" ver="0.16.0" rel="bp160.1.4"/>
  <changelog author="Lukas M&#xFC;ller &lt;expeehaa@outlook.com&gt;" date="1664020800">- Create initial package.</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676548800">- Update to version 0.6.0:
  + Quoted and numeric literals are no longer interchangeable (e.g.
    `"800"` is no longer an accepted value for an integer type).
  + Boxed types are now type checked.
  + Added: There is now syntax for `GType` literals: the `typeof()`
    pseudo-function. For example, list stores have an `item-type`
    property which is now specifiable like this:
    `item-type: typeof(.MyDataModel)`.
  + The language server now logs to stderr.
  + Fix the build on Windows, where backslashes in paths were not
    escaped. (William Roy)
  + Remove the syntax for specifying menu objects inline,
    since it does not work.
  + Fix a crash in the language server that was triggered in files
    with incomplete `using Gtk 4.0;` statements.
  + Fixed compilation on big-endian systems.
  + Fix an issue in the interactive port tool that would lead to
    missed files. (Frank Dana)
  + Fix an issue for documentation contributors where changing the
    documentation files would not trigger a rebuild.
  + Document the missing support for Gtk.Label `&lt;attributes&gt;`,
    which is intentional, and recommend alternatives. (Sonny Piers)
  + Add a prominent warning that Blueprint is still experimental</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1702123200">- Update to version 0.10.0:
  + The bind-property keyword has been removed. Use bind instead.
  + Fixed an issue with the language server not conforming the spec.
  + Fixed the signature section of the hover documentation
    for properties and signals.
  + Fixed a bug where documentation was sometimes shown
    for a different symbol with the same name.
  + Number literals are now correctly parsed as floats
  + Decompiling an empty file now produces an empty file
  + Added hover documentation for the Adw.Breakpoint extensions
- Update to version 0.8.1:
  + Duplicates in a number of places are now considered errors.
  + Fixed a number of bugs in the XML output
- Update to version 0.8.0:
  + Fixed a bug in the language server's acceptance of text
    change commands.
  + Fixed a bug in the display of diagnostics when the diagnostic
    is at the beginning of a line.
  + Fixed a crash that occurred when dealing with array types.
  + Fixed a bug that prevented Gio.File properties from
    being settable.
  + Added support for closure expressions.
  + Added cast expressions, which are sometimes needed to specify
    type information in expressions.
  + Added the --typelib-path command line argument, which allows
    adding directories to the search path for typelib files.
  + Added custom compile and decompile commands to
    the language server.
  + Added support for Adw.MessageDialog custom syntax.
  + Added support for inline sub-templates for
    Gtk.BuilderListItemFactory.
  + Added support for Adw.Breakpoint custom syntax.
  + Added a warning when an object ID might be confusing.
  + Added support for Gtk.Scale custom syntax.
  + The XML output uses the integer value rather than GIR name
    for enum values.
  + Compiler errors are now printed to stderr rather than stdout.
  + Introduced $ to indicate types or callbacks
  + When a namespace is not found, errors are supressed
    when the namespace is used.
  + The compiler bug message now reports the version of
    blueprint-compiler.
  + The typeof syntax now uses &lt;&gt; instead of () to match
    cast expressions.
  + Menu sections and subsections can now have an ID.
  + The interactive porting tool now ignores hidden folders.
  + Templates now use the typename syntax rather than an ID
    to specify the template's class.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1702900800">- Revert python3-gobject Requires: fix No module named 'gi'</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1711368000">- Update to version 0.12.0:
  + Add support for Adw.AlertDialog
  + Emit warnings for deprecated APIs
  + Document symbols
  + "Go to definition" (ctrl+click)
  + Code action for "namespace not imported" diagnostics, that adds the
    missing import
  + Add a formatter - cli and lsp
  + Support for translation domain
  + Print code actions in error messages
  + Add a header notice mentionning the file is generated
  + decompiler: Use single quotes for output
  + Fixed multine strings support with the escape newline character
  + Fixed the signal completion, which was missing the "$"
  + Fixed property value completion
  + Added a missing semantic highlight (for the enum in Gtk.Scale marks)
  + Handle big endian bitfields correctly
  + Fix mixing relative and absolute paths</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1724587200">- update to 0.14.0:
  * Added a warning for unused imports.
  * Added an option to not print the diff when formatting with the CLI.
  * Added support for building Gtk.ColumnViewRow, Gtk.ColumnViewCell,
  * and Gtk.ListHeader widgets with Gtk.BuilderListItemFactory.
  * Added support for the after keyword for signals. This was previously
  * documented but not implemented.
  * Added support for string arrays.
  * Added hover documentation for properties in lookup expressions.
  * The decompiler supports action widgets, translation domains, typeof&lt;&gt;
  * syntax, and expressions. It also supports extension syntax for
  * Adw.Breakpoint, Gtk.BuilderListItemFactory, Gtk.ComboBoxText,
  * Gtk.SizeGroup, and Gtk.StringList.
  * Added a decompile subcommand to the CLI, which decompiles an XML .ui
  * file to blueprint.
  * Accessibility relations that allow multiple values are supported
  * using list syntax.
  * The decompiler sorts imports alphabetically.
  * Translatable strings use translatable="yes" instead of translatable="true"
  * for compatibility with xgettext.
  * The first line of the documentation is shown in the completion list
  * when using the language server.
  * Object autocomplete uses a snippet to add the braces and position the
  * cursor inside them.
  * The carets in the CLI diagnostic output now span the whole error
  * message up to the end of the first line, rather than just the first
  * character.
  * The decompiler emits double quotes, which are compatible with gettext.
  * Fixed deprecation warnings in the language server.
  * The decompiler no longer duplicates translator comments on properties.
  * Subtemplates no longer output a redundant @generated comment.
  * When extension syntax from a library that is not available is used,
  * the compiler emits an error instead of crashing.
  * The language server reports semantic token positions correctly.
  * The decompiler no longer emits the deprecated bind-property syntax.
  * Fixed the tests when used as a Meson subproject.
  * Signal autocomplete generates correct syntax.
  * The decompiler supports templates that do not specify a parent class.
  * Adw.Breakpoint setters that set a property on the template no longer cause a crash.
  * Fixed type checking with templates that do not have a parent class.
  * Fixed online documentation links for interfaces.
  * The wording of edit suggestions is fixed for insertions and deletions.
  * When an input file uses tabs instead of spaces, the diagnostic output
  * on the CLI aligns the caret correctly.
  * The decompiler emits correct syntax when a property binding refers to
  * the template object.
  * Fixed typos in "Built with Blueprint" section.
- build documentation
- remove tests, as they fail on obs, but work otherwise fine when build locally</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1730030400">- Add missing requirements.
- Put spec in a position to build for Leap too.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324800">- Update to version 0.16.0:
  + Added:
  - Added more "go to reference" implementations in the language
    server
  - Added semantic token support for flag members in the language
    server
  - Added property documentation to the hover tooltip for notify
    signals
  - The language server now shows relevant sections of the
    reference documentation when hovering over keywords and
    symbols
  - Added not-swapped flag to signal handlers, which may be
    needed for signal handlers that specify an object
  - Added expression literals, which allow you to specify a
    Gtk.Expression property (as opposed to the existing
    expression support, which is for property bindings)
  + Changed:
  - The formatter adds trailing commas to lists
  - The formatter removes trailing whitespace from comments
  - Autocompleting a commonly translated property automatically
    adds the _("") syntax
  - Marking a single-quoted string as translatable now generates
    a warning, since gettext does not recognize it when using the
    configuration recommended in the blueprint documentation
  + Fixed:
  - Added support for libgirepository-2.0 so that blueprint
    doesn't crash due to import conflicts on newer versions of
    PyGObject
  - Fixed a bug when decompiling/porting files with enum values
  - Fixed several issues where tests would fail with versions of
    GTK that added new deprecations
  - Addressed a problem with the language server protocol in some
    editors
  - Fixed an issue where the compiler would crash instead of
    reporting compiler errors
  - Fixed a crash in the language server that occurred when a
    detailed signal (e.g. notify::*) was not complete
  - The language server now properly implements the shutdown
    command, fixing support for some editors and improving
    robustness when restarting
  - Marking a string in an array as translatable now generates an
    error, since it doesn't work
  + Documentation:
  - Added mention of null in the Literal Values section
  - Add apps to Built with Blueprint section
  - Corrected and updated many parts of the documentation</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1741435200">- Fix build error for Leap &lt; 16.</changelog>
</package>
<package pkgid="b9d3c2386a36c702ffaab73313a6da571b3f575c1a9860d525baa80cc771559771f5e90e63cdf523501a09603c3b98db2b74f36829488da131dfce877a4cb305" name="bluetui" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="bp160.1.13"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1708862400">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1720699200">- Update to version 0.5
  * Rename paired devices
  * Support light background</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1722254400">- Update to version 0.5.1
  * Detect when the device is soft/hard blocked
  * Add 'q' to quit</changelog>
</package>
<package pkgid="2b6950a741da69f5eddbcd168cc5ded24f4cc9a6da30ac8743430091ba5c3f5f4c73129ef28e5ff9fe864a7c82567703e1eca1894c6006dbebde9338d6a9d64c" name="bluetuith" arch="x86_64">
  <version epoch="0" ver="0.2.3" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1687521600">- Update to 0.1.4:
  * Minor bugfixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1687521601">- Update to 0.1.5:
  * Update dependencies to resolve vulnerability</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688990400">- Update to 0.1.5:
  * ui: device: Show address if name is empty
  * agent: Display pincode in a modal #14</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1693569600">- Update to 0.1.7:
  * New HJSON-based configuration format
  * Adapter status indicators
  * Cancellable OBEX session creation
  * Enhanced popups
  * Major bugfixes and improvements</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1698235200">- Update to 0.1.8:
  * New command-line options:
    + 'no-warning' to disable the warnings popup.
    + 'confirm-on-quit' to show a confirmation message before quitting the application.
    + 'adapter-states' to set the adapter states (powered, scan, discoverable, pairable).
    + 'connect-bdaddr' to connect to a device with its address.
  * Modifiable navigation keys
  * Display device's 'Bonded' property
  * Allow blocking/unblocking devices
  * Minor bugfixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1699272000">- Update to 0.1.9:
  * bluez: Assert single/multiple property types safely
  * ui: progress: Do not close page when no transfers are in progress
  * ui: modal: Set width and height appropriately with the provided message
  * ui: modal: Set width and height appropriately with the provided message</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1705752000">- Update to 0.2.0:
  * Show device alias name if it is unique
  * Display compact set of help keybindings</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706961600">- Update to version 0.2.1:
  * go: Update dependencies
  * ui, theme: Set adapter state colors appropriately
  * ui: Handle default Ctrl-C keyevent
  * ui: player: Use defined keybindings
  * ui: player: Show help area after the information display
  * ui: progress: Clear status progress on transfer completion
  * bluez: services: Update service table and descriptors
  * cmd: Finish parsing before initializing connection
  * cmd: fix version print if no `@` is present</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1712318400">- Update to version 0.2.2:
  * go: Update dependencies</changelog>
  <changelog author="Michael Vette &lt;mvetter@suse.com&gt;" date="1723636800">- Update to version 0.2.3:
  * README: Update project status and features
  * goreleaser: Update version and change format
  * go: Update dependencies
  * ui/help: Mark toggleable device actions properly
  * ui: help: Clarify connect keybinding toggle functionality</changelog>
</package>
<package pkgid="569b624f2d60ea6c4040476e9e459e3c6386f4402835ab63f7e5bac2a843fcfde8e900c8b1956e9cfc2ffc664ef4a3787f9df659e1c4432dc63057e44be3008a" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="38b840b8237dc96f24ab018aaf43189e42ee6203e61dc9fede5423466430ae245920e9c2ffa2ace3e0f665c41089093981ba39c6f78156c4622ab2387d7d56b9" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="03a8feda7816aeb2731a8c7f171e03d5748d390052f287a5a10b62107edee82a5e235487de8b4e31fabad222d446c1694af450dd887827b577a59dd0e38ff18d" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="5d5786b26af7738485d5e9d180e80b865bc776f7d6319398965703ee280360966c36513a24221d57e94ba0d590fd48dbefab9f64a66b840d168c48a82576da55" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="68818e4e156906edaa89f3ea9a07a35ad112378e91d869f3a3874210ec6715a45fce4ee6840a8a7b7282b1309d47c1b9287da7f2604a68a6b3b099dd3ea9b773" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="a335caab3f636a9ff4d1df376d8659a2a70b4d100780be3bdb05d4b784692587af9557f9f149857cc45c6350306ba4a1ad4338d423c8cc2c46a646fb037bf1e2" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="4da3b66169dbfd23cf03944c8cf58a14562eafdb29272921a93df02ea8ae6a92f24800acba3ad37ed9045d4a4818eb34088153f7efe5565abe4d34547427513f" name="bluez-firmware" arch="x86_64">
  <version epoch="0" ver="1.2" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="agruen@suse.de" date="1141819200">- Add modalias tags (155357).</changelog>
  <changelog author="seife@suse.de" date="1152187200">- update to v1.2:
  * ver 1.2:
    Add ST Microelectronics firmware files.
  * ver 1.1:
    Add old Broadcom firmware files.</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="mpluskal@suse.com" date="1428148800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- modernize specfile</changelog>
</package>
<package pkgid="36bfbb61b36e188ddb125f11aa63356f0a34ad5e91fcf6e51dd6b66f018f0beb1edd07549dc6b57f5f045c01caa2e6d3c9b0c2470ebcf741b58a430c03089347" name="bluez-obexd" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="5b5149b7ba55fb4c42170c79cfb94e4d4620d6f1a3f186131c5076a639f83a2fc79a7b4175e97a7ec01646c5f2a9184424cc41291702822f81e26b793cbf62c2" name="bluez-qt-devel" arch="x86_64">
  <version epoch="0" ver="5.116.0" rel="bp160.1.14"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1685966400">- Update to 5.107.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.107.0
- No code change since 5.106.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688385600">- Update to 5.108.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.108.0
- Changes since 5.107.0:
  * Remove qt6 CI builds</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Update to 5.109.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.109.0
- Changes since 5.108.0:
  * Remove code variants for building with Qt 6
  * Add explicit moc includes to sources for moc-covered headers</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694001600">- Update to 5.110.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.110.0
- No code change since 5.109.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696852800">- Update to 5.111.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.111.0
- No code change since 5.110.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699272000">- Update to 5.112.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.112.0
- No code change since 5.111.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 5.113.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.113.0
- No code change since 5.112.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1705147200">- Update to 5.114.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.114.0
- No code change since 5.113.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707393600">- Update to 5.115.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.115.0
- No code change since 5.114.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714996800">- Update to 5.116.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.116.0
- No code change since 5.115.0</changelog>
</package>
<package pkgid="51d441077d3be607b0231ba22579c5635962a2abfd131c08baff7f13eda25ca3ef68ecd08f89767f56841b342d2eebc8cf6db0374245d1b313c34539e1d24c56" name="bluez-qt-imports" arch="x86_64">
  <version epoch="0" ver="5.116.0" rel="bp160.1.14"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1685966400">- Update to 5.107.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.107.0
- No code change since 5.106.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688385600">- Update to 5.108.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.108.0
- Changes since 5.107.0:
  * Remove qt6 CI builds</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Update to 5.109.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.109.0
- Changes since 5.108.0:
  * Remove code variants for building with Qt 6
  * Add explicit moc includes to sources for moc-covered headers</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694001600">- Update to 5.110.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.110.0
- No code change since 5.109.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696852800">- Update to 5.111.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.111.0
- No code change since 5.110.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699272000">- Update to 5.112.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.112.0
- No code change since 5.111.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 5.113.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.113.0
- No code change since 5.112.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1705147200">- Update to 5.114.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.114.0
- No code change since 5.113.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707393600">- Update to 5.115.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.115.0
- No code change since 5.114.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714996800">- Update to 5.116.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.116.0
- No code change since 5.115.0</changelog>
</package>
<package pkgid="25379121dd8b036b0b93fa52556d3e7e7e8a23b72f25c634b62d07917f9bc6d6c036e0172bda004d9b620bb0df21abef0b2692beefa252831fc678a4fee34f66" name="bluez-qt-udev" arch="x86_64">
  <version epoch="0" ver="5.116.0" rel="bp160.1.14"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1685966400">- Update to 5.107.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.107.0
- No code change since 5.106.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1688385600">- Update to 5.108.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.108.0
- Changes since 5.107.0:
  * Remove qt6 CI builds</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1691496000">- Update to 5.109.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.109.0
- Changes since 5.108.0:
  * Remove code variants for building with Qt 6
  * Add explicit moc includes to sources for moc-covered headers</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1694001600">- Update to 5.110.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.110.0
- No code change since 5.109.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1696852800">- Update to 5.111.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.111.0
- No code change since 5.110.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1699272000">- Update to 5.112.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.112.0
- No code change since 5.111.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1701777600">- Update to 5.113.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.113.0
- No code change since 5.112.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1705147200">- Update to 5.114.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.114.0
- No code change since 5.113.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1707393600">- Update to 5.115.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.115.0
- No code change since 5.114.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1714996800">- Update to 5.116.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.116.0
- No code change since 5.115.0</changelog>
</package>
<package pkgid="b786b8ab1bb6f73f2b9281396e1f28a6d5ecd83d1b81015363fe5edf8627d25b1e863374eb7e3903f9da9bd77a1711bdecca9f98ac13e9f67eea62c955a6a359" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="15263193f7e6d68e2221e1ab07722e4f64f37bff5e669a0046b4bceef9495cbe54148fa92d3db8a515d575ba9b604a80bc7f096a2d1de5226a33d4e823fc9d8c" name="bluez-zsh-completion" arch="noarch">
  <version epoch="0" ver="5.79" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1709121600">- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1718107200">- Fix python3 shebang from test files (bsc#1212476)</changelog>
  <changelog author="calad0i.fill@outlook.com" date="1722859200">- add fix-a2dp-suspend-crash.patch (Issue #701 in upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1722859201">- update to 5.77:
  * Fix issue with storing and handling connection parameters.
  * Fix issue with handling device that are marked as temporary.
  * Fix issue with HID and special handling for non-keyboards.
  * Fix issue with BR/EDR not support when discoverable is off.
  * Add support for initial implementation of ASHA profile.
  * Fix issue with broadcast channel location and stream
    capabilities.
  * Fix issue with handling BIS management and synchronization.
  * Fix issue with handling Extended Advertising.
  * Fix issue with UserspaceHID and replay structures.
  * Add support for providing PPCP characteristic.
  * Fix issue with build system and header inclusion.
  * Fix issue with not enabling Wideband Speech when available.
  * Fix issue with UserspaceHID and Bluetooth Classic devices.
  * Fix issue with checking for services being connected.
  * Fix issue with GATT client connection creation.
  * Fix issue with OBEX and small file transfers.
  * Fix issue with handling pairing with Apple AirPods.
  * Fix issue with BAP and setting up broadcast source.
  * Fix issue with BAP and register all endpoints.
  * Fix issue with BAP and missing metadata property.
  * Fix issue with BAP and not handling out of order responses.
  * Fix issue with BAP and attempting to set device as
    connectable.
  * Add support for CCP plugin for call control profile.
  * Fix issue with BAP and handling stream IO linking.
  * Fix issue with BAP and setup of multiple streams per
    endpoint.
  * Fix issue with AVDTP and potential incorrect transaction
    label.
  * Fix issue with A2DP and handling crash on suspend.
  * Fix issue with GATT database and an invalid pointer.
  * Add support for AICS service.
- drop bluez-test-2to3.diff, bluez-cups-libexec.patch:
  upstream has different solutions for ages, use those instead
- drop fix-link-key-address-type.patch,
  fix-a2dp-suspend-crash.patch: upstream</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723723200">- add bluez-no-cups-devel-buildreq.patch to avoid cups-devel
  buildrequires which results in an excessive build loop</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142400">- Update to 5.78:
  * Fix issue with handling notification of scanned BISes to BASS
  * Fix issue with handling checking BIS caps against peer caps.
  * Fix issue with handling MGMT Set Device Flags overwrites.
  * Fix issue with handling ASE notification order.
  * Fix issue with handling BIG Info report events.
  * Fix issue with handling PACS Server role.
  * Fix issue with registering UHID_START multiple times.
  * Fix issue with pairing method not setting auto-connect.
- Fix 3 rpmlint warnings, some configuration files were not marked as so.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1726142401">- Mark the configuration files as 'noreplace'.</changelog>
  <changelog author="pallaswept@proton.me" date="1726660800">- add Fix-crash-after-bt_uhid_unregister_all.patch to fix crashes
  when devices disconnect or go to sleep</changelog>
  <changelog author="fcrozat@suse.com" date="1730894400">- Update to 5.79:
  * Fix issue with handling address type while pairing.
  * Add support for allowing to set A2DP transport delay.
  * Add support for persistent userspace HID operation.
  * Add support for handling syncing to multiple BISes.
- Drop Fix-crash-after-bt_uhid_unregister_all.patch, merged
  upstream.</changelog>
  <changelog author="lioli7k@gmail.com" date="1739793600">- Add supplements bluedevil6 for bluez-obexd
  * In Plasma 6 bluedevil5 got renamed to bluedevil6.
    While bluedevil6 provides bluedevil5 on Tumbleweed it's a good
    idea to add it for future proofing.</changelog>
</package>
<package pkgid="fb3c1d65d74bb05ae525635681d3fc7460e36a5e6934364ed96c842ec7cd835682bc5bfd45b2468df97d53f4e176a28b2e9aff71a0a4331bedd56a1e216aab08" name="bmake" arch="x86_64">
  <version epoch="0" ver="20230723" rel="bp160.1.13"/>
  <changelog author="dziolkowski@suse.com" date="1495195200">- Update to version 20170510
  * For full list of changes see provided Changelog
- Fix allow-overriding-compiler-variables.patch to work with new version</changelog>
  <changelog author="dap.darkness@gmail.com" date="1497787200">- Let's skip optflags macro using to fix all builds.
  "-D_FORTIFY_SOURCE=0" for some reason doesn't fix x64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500379200">- Add bmake-strlcpy-explicit.patch: ensure strlcpy is not defined
  implicit.
- Do not de-FORTIFY the sources, use proper optflags. Above patch
  ensures strlcpy is not implicit declared.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1500465600">- bmake-strlcpy-explicit.patch was replaced by upstream's one.
- Update to version 20170711:
  * main.c: refactor to reduce size of main function.
    add -v option to always fully expand values.
  * meta.c: ensure command output in meta file has ending newline
    even when filemon not being used.
    When matching ${.MAKE.META.IGNORE_PATTERNS} do not use
    pathname via ':L' since any ':' in pathname breaks that.
    Instead set a '${.p.}' to pathname in the target context and
    use that.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1531483200">- Removed already upstreamed bmake-strlcpy-explicit.patch.
- Added bmake-env-script-interpreter.diff.
- Update to version 20180512:
  * job.c: skip polling job token pipe
  * parse.c: be more cautious about detecting depenency line
    rather than sysV style include.
  * parse.c: avoid calling sysconf for every call to loadfile
  * var.c: Var_Set handle NULL value anytime.
  * parse.c: do not treat .info as warning with -W
  * var.c: Var_Append use Var_Set if var not previously set
    so that VAR_CMD is handled correctly.
    Add a suitable unit-test.
  * var.c: do not append to variable set on command line
    add unit-test to catch this.
  * main.c: ignore empty MAKEOBJDIR
  * meta.c: if target is in subdir we only need subdir name in
    meta_name.
  * compat.c: pass SIGINT etc onto child and wait for it to exit
    before we self-terminate.
  * aclocal.m4: use AC_LINK_IFELSE for AC_C___ATTRIBUTE__
    since AC_TRY_COMPILE puts input inside main()
    which upsets modern compilers.
  * Makefile.config.in:
    make @prefix@ @machine*@ and @default_sys_path@ defaults.
  * unit-tests/dotwait.mk: redirect stderr through pipe for more
    consistent result on some platforms.
  * machine.sh: entry for AIX
  * VERSION (_MAKE_VERSION): Move the setting of _MAKE_VERSION
    to a file that can be included by configure as well as make.
    This allows configure to set set _MAKE_VERSION in make-bootstrap.sh</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1568203200">- Update to version 20181221:
  * For full list of changes see provided Changelog</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1592136000">- Updated allow-overriding-compiler-variables.patch.
- Update to version 20200606:
  * make.1: cleanup
  * Makefile: fix depends for main.o which broke MAKE_VERSION
  * dir.c: cached_stats - don't confuse stat and lstat results.
  * var.c: add :Or for reverse sort.
  * configure.in: add AC_PROG_CC_C99 for mipspro compiler
    also if --with-filemon= specifies path to filemon.h
    set use_filemon=dev
  * dirname.c: remove include of namespace.h
  * modified dollar tests to avoid shell dependencies
  * new tests for .INCLUDEFROM
  * unit-tests/dollar.mk: tweak  '1 dollar literal' test
    to not depend so much on shell behavior
  * unit test for dollar handling
  * str.c: empty string does not match % pattern
    plus unit-test changes
  * var.c: import handling of old sysV style modifier using '%'
  * str.c: refactor brk_string
  * unit-tests: add test case for lazy conditions
  * configure.in: use_makefile=no for cygwin et al.
    case insensitive filesystems just don't work if both
    makefile and Makefile exist.
  * meta.c: meta_oodate, CHECK_VALID_META is too aggressive for CMD
    a blank command is perfectly valid.
  * make.h: extern debug_file
  * meta.c: meta_oodate, check for corrupted meta file
    earlier and more often.
  * boot-strap: unset MAKEFLAGS
  * meta.c: meta_compat_parent check for USE_FILEMON
    patch from Soeren Tempel
  * meta.c: fix compat mode, need to call meta_job_output()
  * job.c: extra fds for meta mode not needed if using filemon_dev
  * meta.c: avoid passing NULL to filemon_*() when meta_needed()
    returns FALSE.
  * filemon/filemon_{dev,ktrace}.c: allow selection of
    filemon implementation.  filemon_dev.c uses the kernel module
    while filemon_ktrace.c leverages the fktrace api available in
    NetBSD.  filemon_ktrace.c can hopefully form the basis for
    adding support for other tracing mechanisms such as strace on
    Linux.
  * meta.c: when target is out-of-date per normal make rules
    record value of .OODATE in meta file.
  * parse.c: don't pass NULL to realpath(3)
    some versions cannot handle it.
  * parse.c: ParseDoDependency: free paths rather than assert
  * configure.in: add --without-makefile to avoid generating
    makefile and make-bootstrap.sh
  * include Makefile.inc if it exists
  * Use Makefile and Makefile.config.in in unit-tests
    so we can use just: make obj &amp;&amp; make &amp;&amp; make test
    when bmake is already available.
    We add --without-makefile to CONFIGURE_ARGS in this case.
  * tweak bsd.after-import.mk (captures Makefile.config etc
    after import to FreeBSD for example) to cope with all the above.
  * parse.c: ParseVErrorInternal use .PARSEDIR
    and apply if relative, and then use .PARSEFILE
    for consistent result.
  * parse.c: ParseVErrorInternal use .CURDIR if .PARSEDIR
    is relative
  * var.c: avoid SEGFAULT in .unexport-env
    when MAKELEVEL is not set
  * fix for unit-tests/varquote.mk on Debian
  * var.c: add :q
  * dir.c: cleanup caching of stats
  * Makefile.config.in: use += where it makes sense.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1623844800">- Update bmake-env-script-interpreter.diff to switch to interpreter
  to python3.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1690372800">- Refresh patches, remove %patchN construct.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1690372801">- Update to 20230723:
  - There were many changes, like really many. See ChangeLog
    which has been packaged for the list of them.</changelog>
</package>
<package pkgid="1bb0fbcdf03b975c006a07224503d297ab66150d1d9ea6478387f26aeb8f5fcc709ce2dd3fc5775219a408568f2bcb78d91000a3b21a69c4eb6e46218cc4d45c" name="bmkdep" arch="x86_64">
  <version epoch="0" ver="20140112" rel="bp160.1.12"/>
  <changelog author="vle@gmx.net" date="1584100800">- Initial version of bmkdep-20140112</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for Source tarball.</changelog>
</package>
<package pkgid="08b3a629f8f5387895e884791d009e4ad64750c5ff63bbcf51cabe6bca1d72988b12f1947ce95430fab040e464237c921240c27e2774f43083554e94397cb554" name="bnd-maven-plugin" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1634558400">- Added patch:
  + aqute-bnd-java8compat.patch
    + Produce bytecode compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
</package>
<package pkgid="b94fdf4991660fbd397ba6cc2cf5d2b6159fa6c8c66c75a5df79fdc907283cf15d07027a998ed8daf19a6ae584c0d8f99625853daa82588c898d625ddb9ea797" name="bnd-maven-plugin" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1778241600">- The maven build considers the SOURCE_DATE_EPOCH automatically now</changelog>
</package>
<package pkgid="c48dce3a62d57ea43e4bbb18452059c2fc031acb35a95f47a718c9c11d5fcac8667080752c8d2442218894af4ce4f045a653930f13100cacdd5d34c63e27d7fc" name="bnd-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1634558400">- Added patch:
  + aqute-bnd-java8compat.patch
    + Produce bytecode compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
</package>
<package pkgid="1b6fde7d87ad89a5e73534e51aef0749dd4103087fe9e6848f0885d090148c7848fc16f348c596f601f18e2922457202882d613e8173e8a23169c14f8dff5499" name="bnd-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="160000.3.1"/>
  <changelog author="fstrba@suse.com" date="1634644800">- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Fix-ant-compatibility.patch
  * 0001-Port-to-OSGI-7.0.0.patch -&gt; 0003-Port-to-OSGI-7.0.0.patch
    + rediff to changed context
- Added patch:
  * 0004-maven-plugin-dependencies.patch
    + Do not build a whole artifact, if we need only one source file</changelog>
  <changelog author="fstrba@suse.com" date="1636545600">- Update to aqute-bnd 5.1.1
  * ant plugin is in separate artifact
- Removed patch:
  * 0002-Fix-ant-compatibility.patch
    + fixed by upstream</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210878)</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1694865600">- Added patches:
  * reproducible-timestamps.patch
    + set "-reproducible" option to true by default
    + use SOURCE_DATE_EPOCH for timestamp if available
  * reproducible-packages-list.patch
    + make the order of packages to import/export deterministic</changelog>
  <changelog author="fstrba@suse.com" date="1695038400">- Update to aqute-bnd 6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0003-Port-to-OSGI-7.0.0.patch -&gt; 0002-Port-to-OSGI-7.0.0.patch
  * 0004-maven-plugin-dependencies.patch -&gt;
    0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch
  * reproducible-packages-list.patch
    + rediff to changed context
- Removed patch:
  * aqute-bnd-java8compat.patch
    + handled by release=8 in ant javac task</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1725883200">- Update to aqute-bnd 6.4.1
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0
  * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic
- Modified patches:
  * 0001-Disable-removed-commands.patch
  * 0002-Port-to-OSGI-7.0.0.patch
  * 0003-Remove-unmet-dependencies.patch
  * reproducible-timestamps.patch -&gt;
    0004-reproducible-timestamps.patch
  * reproducible-packages-list.patch -&gt;
    0005-reproducible-packages-list.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds
- Added patch:
  * 0006-Set-reproducible-build-from-environment.patch
    + SOURCE_DATE_EPOCH environmental variable triggers reproducible
    use of the bnd-maven-plugin if it is not requested already
    using the project.build.outputTimestamp option.</changelog>
  <changelog author="fstrba@suse.com" date="1778241600">- The maven build considers the SOURCE_DATE_EPOCH automatically now</changelog>
</package>
<package pkgid="020fae096e8814f9ed6dbcee7c4b4405260e2d8e136bb4fc0c4e507686553cd379cf8b61dead66634fce72081c9e69c9b166fabd0c8e17733c702bdc2b873042" name="bogofilter-common" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="bp160.1.12"/>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
  <changelog author="olaf@aepfle.de" date="1551873600">- Swallow old bogofilter pkgs in the db subpkg (bsc#1128219)
  fix change from April 2015
- Require subpkgs from the very same build</changelog>
  <changelog author="olaf@aepfle.de" date="1552478400">- The previous change added strict versioned Requires from and to a
  noarch subpkg. The release part can not be used in this case
  because the noarch packages will most likely be shared across
  architectures, and different architectures may have different
  release numbers.
  Relax the Requires again</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1604491200">- Convert to _multibuild: with RPM 4.16, we can no longer use
  make_install in the build phase, as %install will always empty
  DESTDIR.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="a1321b98442becbb67046d356462607246f604ab44415f1d5c1d10fab73a6f43eb0c98c491e4e1dc5e23a3f435d2ae1810ecf2fbe9a0211257add01fa2c5532a" name="bogofilter-db" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="bp160.1.12"/>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
  <changelog author="olaf@aepfle.de" date="1551873600">- Swallow old bogofilter pkgs in the db subpkg (bsc#1128219)
  fix change from April 2015
- Require subpkgs from the very same build</changelog>
  <changelog author="olaf@aepfle.de" date="1552478400">- The previous change added strict versioned Requires from and to a
  noarch subpkg. The release part can not be used in this case
  because the noarch packages will most likely be shared across
  architectures, and different architectures may have different
  release numbers.
  Relax the Requires again</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1604491200">- Convert to _multibuild: with RPM 4.16, we can no longer use
  make_install in the build phase, as %install will always empty
  DESTDIR.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="2543efbc97e4dcd1f40548d097b6f607f1ef977bd62a9a831a7653a9e52500aef2b0e85e14902efd61d6004ce1cbd421eab4b02100b8b96962930ef37f3517db" name="bogofilter-doc" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="bp160.1.12"/>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
  <changelog author="olaf@aepfle.de" date="1551873600">- Swallow old bogofilter pkgs in the db subpkg (bsc#1128219)
  fix change from April 2015
- Require subpkgs from the very same build</changelog>
  <changelog author="olaf@aepfle.de" date="1552478400">- The previous change added strict versioned Requires from and to a
  noarch subpkg. The release part can not be used in this case
  because the noarch packages will most likely be shared across
  architectures, and different architectures may have different
  release numbers.
  Relax the Requires again</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1604491200">- Convert to _multibuild: with RPM 4.16, we can no longer use
  make_install in the build phase, as %install will always empty
  DESTDIR.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="7ec754013f4fdfb85b887db88c5e49b60483ba569621cd7307dea575d674ca816dbfde9618d55f87f386eccb790a1f48748489bbecddd2fefce43dff38554d0f" name="bogofilter-kyotocabinet" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="bp160.1.12"/>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
  <changelog author="olaf@aepfle.de" date="1551873600">- Swallow old bogofilter pkgs in the db subpkg (bsc#1128219)
  fix change from April 2015
- Require subpkgs from the very same build</changelog>
  <changelog author="olaf@aepfle.de" date="1552478400">- The previous change added strict versioned Requires from and to a
  noarch subpkg. The release part can not be used in this case
  because the noarch packages will most likely be shared across
  architectures, and different architectures may have different
  release numbers.
  Relax the Requires again</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1604491200">- Convert to _multibuild: with RPM 4.16, we can no longer use
  make_install in the build phase, as %install will always empty
  DESTDIR.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="776693e3e6cea88327c552650363973ed73d14139392fbfc3a813ca6d2d1297fdc404377ca3284c3fc0f856cf2d7beb45bc356badc40cb8f4dab74505fbc5930" name="bogofilter-sqlite3" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="bp160.1.12"/>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
  <changelog author="olaf@aepfle.de" date="1551873600">- Swallow old bogofilter pkgs in the db subpkg (bsc#1128219)
  fix change from April 2015
- Require subpkgs from the very same build</changelog>
  <changelog author="olaf@aepfle.de" date="1552478400">- The previous change added strict versioned Requires from and to a
  noarch subpkg. The release part can not be used in this case
  because the noarch packages will most likely be shared across
  architectures, and different architectures may have different
  release numbers.
  Relax the Requires again</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1604491200">- Convert to _multibuild: with RPM 4.16, we can no longer use
  make_install in the build phase, as %install will always empty
  DESTDIR.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="095fe8eeff58105d08d792756a7a3f9df5c2bdfa3d187335b74f68031f5dcdbac0353bc55da9456d870f3d74f7c419152f321ae44657cdc67010e511d326987b" name="boinc-client" arch="x86_64">
  <version epoch="0" ver="8.0.4" rel="bp160.1.7"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674561600">- Update to relesae 7.22
  * Add not-in-use computing prefs
  * Update cpu/gpu resources when app_config is re-read</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684756800">- Update to release 7.22.2
  * Fix a screensaver crash bug</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691496000">- Update to release 7.24
  * client: improve implementation of CPU throttling
  * client: set Content-type of POST requests to text/xml</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691841600">- Update to release 7.24.1
  * Resolve some crash on MacOS</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1704369600">- Use systemd-sysusers to create service user and group.
- Add service user to "render" group to allow BOINC applications
  to use GPU devices for accelerated computation. DRM render nodes
  have been restricted in sr#1128161.
- Remove unused SysV init script.
- Update README.SUSE and the logrotate configuration file to use
  systemctl instead of the no longer relevant init script.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Employ %sysuser macros to generate "boinc" user</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716724800">- Update to release 8.0.2
  * Support so-called "sporadic applications"</changelog>
  <changelog author="chris@computersalat.de" date="1719489600">- fix for bnc#1227092
  * Add WorkingDirectory= to unit file
- Add further Variables to unit file
  +ProtectSystem=full
  +ProtectControlGroups=true
  +ReadWritePaths=-$BOINC_BOINC_DIR
- rebase patches
  * boinc-docbook2x.patch
  * build-client-scripts.patch
  * libboinc-shared.patch
  * xlocale.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720785600">- Revert to state of 2024-05-26 due to regressions,
  https://build.opensuse.org/request/show/1183568#comment-1957214
  https://build.opensuse.org/request/show/1184357#comment-1959404
  [boo#1227092]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721736000">- Update to release 8.0.4
  * Resolve a case where the required memory for an application was
    overestimated and caused a lower concurrent job count.</changelog>
</package>
<package pkgid="884b8722a6ae5db69660d874404bce58fa1ae28316544c279aef26979b159b438d6f1a546fccd0825833932c6df7857ed8e35e195f96c38c4b86df5052529cb6" name="boinc-client-devel" arch="x86_64">
  <version epoch="0" ver="8.0.4" rel="bp160.1.7"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674561600">- Update to relesae 7.22
  * Add not-in-use computing prefs
  * Update cpu/gpu resources when app_config is re-read</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684756800">- Update to release 7.22.2
  * Fix a screensaver crash bug</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691496000">- Update to release 7.24
  * client: improve implementation of CPU throttling
  * client: set Content-type of POST requests to text/xml</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691841600">- Update to release 7.24.1
  * Resolve some crash on MacOS</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1704369600">- Use systemd-sysusers to create service user and group.
- Add service user to "render" group to allow BOINC applications
  to use GPU devices for accelerated computation. DRM render nodes
  have been restricted in sr#1128161.
- Remove unused SysV init script.
- Update README.SUSE and the logrotate configuration file to use
  systemctl instead of the no longer relevant init script.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Employ %sysuser macros to generate "boinc" user</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716724800">- Update to release 8.0.2
  * Support so-called "sporadic applications"</changelog>
  <changelog author="chris@computersalat.de" date="1719489600">- fix for bnc#1227092
  * Add WorkingDirectory= to unit file
- Add further Variables to unit file
  +ProtectSystem=full
  +ProtectControlGroups=true
  +ReadWritePaths=-$BOINC_BOINC_DIR
- rebase patches
  * boinc-docbook2x.patch
  * build-client-scripts.patch
  * libboinc-shared.patch
  * xlocale.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720785600">- Revert to state of 2024-05-26 due to regressions,
  https://build.opensuse.org/request/show/1183568#comment-1957214
  https://build.opensuse.org/request/show/1184357#comment-1959404
  [boo#1227092]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721736000">- Update to release 8.0.4
  * Resolve a case where the required memory for an application was
    overestimated and caused a lower concurrent job count.</changelog>
</package>
<package pkgid="34dafe9dc6cdf17c41a932cc5978846908a8683d211c0b6d6a9ff50053b54fc2d1a3fc33b668c815192cd3218ac02caa1a086710a78255cb6ab26569b90abf11" name="boinc-client-lang" arch="noarch">
  <version epoch="0" ver="8.0.4" rel="bp160.1.7"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674561600">- Update to relesae 7.22
  * Add not-in-use computing prefs
  * Update cpu/gpu resources when app_config is re-read</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684756800">- Update to release 7.22.2
  * Fix a screensaver crash bug</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691496000">- Update to release 7.24
  * client: improve implementation of CPU throttling
  * client: set Content-type of POST requests to text/xml</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691841600">- Update to release 7.24.1
  * Resolve some crash on MacOS</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1704369600">- Use systemd-sysusers to create service user and group.
- Add service user to "render" group to allow BOINC applications
  to use GPU devices for accelerated computation. DRM render nodes
  have been restricted in sr#1128161.
- Remove unused SysV init script.
- Update README.SUSE and the logrotate configuration file to use
  systemctl instead of the no longer relevant init script.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Employ %sysuser macros to generate "boinc" user</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716724800">- Update to release 8.0.2
  * Support so-called "sporadic applications"</changelog>
  <changelog author="chris@computersalat.de" date="1719489600">- fix for bnc#1227092
  * Add WorkingDirectory= to unit file
- Add further Variables to unit file
  +ProtectSystem=full
  +ProtectControlGroups=true
  +ReadWritePaths=-$BOINC_BOINC_DIR
- rebase patches
  * boinc-docbook2x.patch
  * build-client-scripts.patch
  * libboinc-shared.patch
  * xlocale.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720785600">- Revert to state of 2024-05-26 due to regressions,
  https://build.opensuse.org/request/show/1183568#comment-1957214
  https://build.opensuse.org/request/show/1184357#comment-1959404
  [boo#1227092]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721736000">- Update to release 8.0.4
  * Resolve a case where the required memory for an application was
    overestimated and caused a lower concurrent job count.</changelog>
</package>
<package pkgid="2963cd1734480f190eca2d41b48b9466de3c56640d659654fadc6cb87cf36667236bf3a623756761b288453557f3600203ebc7e47e04611e9c234fed71c3746a" name="boinc-manager" arch="x86_64">
  <version epoch="0" ver="8.0.4" rel="bp160.1.7"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674561600">- Update to relesae 7.22
  * Add not-in-use computing prefs
  * Update cpu/gpu resources when app_config is re-read</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684756800">- Update to release 7.22.2
  * Fix a screensaver crash bug</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691496000">- Update to release 7.24
  * client: improve implementation of CPU throttling
  * client: set Content-type of POST requests to text/xml</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691841600">- Update to release 7.24.1
  * Resolve some crash on MacOS</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1704369600">- Use systemd-sysusers to create service user and group.
- Add service user to "render" group to allow BOINC applications
  to use GPU devices for accelerated computation. DRM render nodes
  have been restricted in sr#1128161.
- Remove unused SysV init script.
- Update README.SUSE and the logrotate configuration file to use
  systemctl instead of the no longer relevant init script.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Employ %sysuser macros to generate "boinc" user</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716724800">- Update to release 8.0.2
  * Support so-called "sporadic applications"</changelog>
  <changelog author="chris@computersalat.de" date="1719489600">- fix for bnc#1227092
  * Add WorkingDirectory= to unit file
- Add further Variables to unit file
  +ProtectSystem=full
  +ProtectControlGroups=true
  +ReadWritePaths=-$BOINC_BOINC_DIR
- rebase patches
  * boinc-docbook2x.patch
  * build-client-scripts.patch
  * libboinc-shared.patch
  * xlocale.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720785600">- Revert to state of 2024-05-26 due to regressions,
  https://build.opensuse.org/request/show/1183568#comment-1957214
  https://build.opensuse.org/request/show/1184357#comment-1959404
  [boo#1227092]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721736000">- Update to release 8.0.4
  * Resolve a case where the required memory for an application was
    overestimated and caused a lower concurrent job count.</changelog>
</package>
<package pkgid="df247b112bdefbebe779107c898f04e65963c8fb5fa3122b1f3e52d75d38516bbaf7e3bb32510a769ac92e380246581d50cfc51f2d5d9572f5c2ad1c4391e3d1" name="boinc-manager-lang" arch="noarch">
  <version epoch="0" ver="8.0.4" rel="bp160.1.7"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674561600">- Update to relesae 7.22
  * Add not-in-use computing prefs
  * Update cpu/gpu resources when app_config is re-read</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1684756800">- Update to release 7.22.2
  * Fix a screensaver crash bug</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691496000">- Update to release 7.24
  * client: improve implementation of CPU throttling
  * client: set Content-type of POST requests to text/xml</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691841600">- Update to release 7.24.1
  * Resolve some crash on MacOS</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1704369600">- Use systemd-sysusers to create service user and group.
- Add service user to "render" group to allow BOINC applications
  to use GPU devices for accelerated computation. DRM render nodes
  have been restricted in sr#1128161.
- Remove unused SysV init script.
- Update README.SUSE and the logrotate configuration file to use
  systemctl instead of the no longer relevant init script.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706961600">- Employ %sysuser macros to generate "boinc" user</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716724800">- Update to release 8.0.2
  * Support so-called "sporadic applications"</changelog>
  <changelog author="chris@computersalat.de" date="1719489600">- fix for bnc#1227092
  * Add WorkingDirectory= to unit file
- Add further Variables to unit file
  +ProtectSystem=full
  +ProtectControlGroups=true
  +ReadWritePaths=-$BOINC_BOINC_DIR
- rebase patches
  * boinc-docbook2x.patch
  * build-client-scripts.patch
  * libboinc-shared.patch
  * xlocale.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720785600">- Revert to state of 2024-05-26 due to regressions,
  https://build.opensuse.org/request/show/1183568#comment-1957214
  https://build.opensuse.org/request/show/1184357#comment-1959404
  [boo#1227092]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721736000">- Update to release 8.0.4
  * Resolve a case where the required memory for an application was
    overestimated and caused a lower concurrent job count.</changelog>
</package>
<package pkgid="5c6da52e4287d22de1679bbe9d29299b960365ac78e6d433eff5c53ed3b1b0abfd08e5dc1ce34789feb326cd7ff26cc6c695ca4dffe651b409e857d85236d3d8" name="bolt" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="bp160.1.12"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to 0.9.1
  * Support Ice Lake Thunderbolt 3 i/o subsystem
  * Don't store domains where uuids change across reboots
  * Fixes for the journal and the domain's acl-log
  * Version the store and use that to clean up stale domains once
  * Host identification for embedded thunderbolt controllers [!233]
  * Various other small bug fixes and memory leak fixes.</changelog>
  <changelog author="Oliver Neukum &lt;oneukum@suse.com&gt;" date="1632830400">- Need in SLE
  * Support for working with adapters without ROMs is needed
    (jsc#SLE-19359)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643371200">- Update to 0.9.2
  * This release is compatible with umockdev &gt;= 0.16.3; there was a change in
    umockdev that made our test fail with it, since both our test and umockev
    were trying to create the same directorires. bolt now allows for the dir
    to already exist.
  * The license for `90-bolt.rules` has changed from `GPL-2.1+`, which does
    not exist and was probably was confused with `LGPL-2.1+`, to `GPL 2.0+`.
  * Documentation has been updated and spelling mistakes fixed.
  * Various improvements for continuous integration.
  * The minimum required version of meson has been bumped to 0.46.0.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1661342400">- Update to 0.9.3:
  * Work around a glib fix that changed behavior of the log API where now
    calling `g_log_set_writer_func` results in an hard error, which broke
    the test suite since aforementioned function was indeed called more
    than once. Nothing a level of indirection couldn't fix.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 0.9.4:
  * spec file added and a few metadata fixes, no code change</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1672833600">- update to 0.9.5:
  * Fixed several test and build setting issues.
  * Introduced packit. Packit was used to package rpm to downstream Fedora
    automatically. Moreover, Koji and bodhi could be triggered by packit
    automatically.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696334400">- update to 0.9.6:
  * Compiler warnings and log messages for the domain not found were fixed.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1708344000">- update to 0.9.7:
  * Add a 'nopcie' security level since some devices report nopcie when Thunderbolt
    is disabled through BIOS setting.
  * Markdown lint styling is used for documents.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1715860800">- update to 0.9.8:
  * A new NHI for REMBRANDT.
  * CI fixes.
  * Don't install an empty DB directory.
  * Fixed: Determine the string length before writing file.
  * Fixed: Free on error to prevent resource leak.</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1719662400">- Edit license: LGPL-2.1-or-later
- Add BuildRequires: asciidoc to produce manpages:
  * boltd.8 boltctl.1
- Switch dependencies to provided pkgconfig
- Update meson required version 0.60
- Use autosetup</changelog>
</package>
<package pkgid="833ed41ea6fc8e3b757d32b5667b156dd263b901e5b4c8f121f5ad1e605d70b9fbd7bfd61302abfc63ab0e79369a62ff627d779610baa7d376f42d7186fd826d" name="bolt-tools" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="bp160.1.12"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to 0.9.1
  * Support Ice Lake Thunderbolt 3 i/o subsystem
  * Don't store domains where uuids change across reboots
  * Fixes for the journal and the domain's acl-log
  * Version the store and use that to clean up stale domains once
  * Host identification for embedded thunderbolt controllers [!233]
  * Various other small bug fixes and memory leak fixes.</changelog>
  <changelog author="Oliver Neukum &lt;oneukum@suse.com&gt;" date="1632830400">- Need in SLE
  * Support for working with adapters without ROMs is needed
    (jsc#SLE-19359)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1643371200">- Update to 0.9.2
  * This release is compatible with umockdev &gt;= 0.16.3; there was a change in
    umockdev that made our test fail with it, since both our test and umockev
    were trying to create the same directorires. bolt now allows for the dir
    to already exist.
  * The license for `90-bolt.rules` has changed from `GPL-2.1+`, which does
    not exist and was probably was confused with `LGPL-2.1+`, to `GPL 2.0+`.
  * Documentation has been updated and spelling mistakes fixed.
  * Various improvements for continuous integration.
  * The minimum required version of meson has been bumped to 0.46.0.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1661342400">- Update to 0.9.3:
  * Work around a glib fix that changed behavior of the log API where now
    calling `g_log_set_writer_func` results in an hard error, which broke
    the test suite since aforementioned function was indeed called more
    than once. Nothing a level of indirection couldn't fix.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 0.9.4:
  * spec file added and a few metadata fixes, no code change</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1672833600">- update to 0.9.5:
  * Fixed several test and build setting issues.
  * Introduced packit. Packit was used to package rpm to downstream Fedora
    automatically. Moreover, Koji and bodhi could be triggered by packit
    automatically.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1696334400">- update to 0.9.6:
  * Compiler warnings and log messages for the domain not found were fixed.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1708344000">- update to 0.9.7:
  * Add a 'nopcie' security level since some devices report nopcie when Thunderbolt
    is disabled through BIOS setting.
  * Markdown lint styling is used for documents.</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1715860800">- update to 0.9.8:
  * A new NHI for REMBRANDT.
  * CI fixes.
  * Don't install an empty DB directory.
  * Fixed: Determine the string length before writing file.
  * Fixed: Free on error to prevent resource leak.</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1719662400">- Edit license: LGPL-2.1-or-later
- Add BuildRequires: asciidoc to produce manpages:
  * boltd.8 boltctl.1
- Switch dependencies to provided pkgconfig
- Update meson required version 0.60
- Use autosetup</changelog>
</package>
<package pkgid="d0408382e9097e194f713b403176b7868394af33e386724578a8a9e2302972dd03b05014e6744a1a289eac407d092f0c4176b5ae12620782b70a85bb9fd43935" name="bomber" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * It compiles fine without qt6.9 deprecated methods
  * Add xml/yaml linting
  * Stripping '.desktop' suffix from legacy AppStream ID.
  * Add apple bundle support
  * add macos support
  * Fix theme/icon on windows
  * Add windows support</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="33b8b2a2dfe893701a16bb948a7ef4de73fa58d20b8c358f48f845badc447f612849aeee1fa318c52b165b2013b6bafc3b8b8a17d7eb6101f5ea658aa4b47655" name="bomber-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * It compiles fine without qt6.9 deprecated methods
  * Add xml/yaml linting
  * Stripping '.desktop' suffix from legacy AppStream ID.
  * Add apple bundle support
  * add macos support
  * Fix theme/icon on windows
  * Add windows support</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="924b909162cdb00baac2f3e4d467bc7902f82067bb3793ee3ad17f484aad250f249d7a76fab405d6b236833d1846a07993924658f805b88d18c5ed849f1a2421" name="bonk" arch="x86_64">
  <version epoch="0" ver="0.4.0+g0" rel="bp160.1.13"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1666180800">- Initial spec for bonk version 0.3.2</changelog>
  <changelog author="Soc Virnyl Estela &lt;contact@uncomfyhalomacro.pl&gt;" date="1698753600">- Update to version 0.3.2+g4:
  * Update main.rs. fixes issues when parameters creates files</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1710763200">- Update to version 0.4.0+g0:
  * refactor and add scoop support
  * Update main.rs
  * updated readme
  * removed all unwraps
  * Error Handling added for file and dir
  * fixed panic on no args</changelog>
</package>
<package pkgid="3ef81e24df10cf14b101abbb14d5c4099fc1afaab70928f2cd371838ab4ae6b1a8bde08acb6e4ea1d775d39c5c64d787dc19e274dffca051c342e5d95ab8d4b8" name="bonnie++" arch="x86_64">
  <version epoch="0" ver="2.00a" rel="bp160.1.12"/>
  <changelog author="alarrosa@suse.com" date="1406808000">- Two small fixes to the spec file. Sources now is an url to
  the upstream package and removed a provides statement which is
  not needed since it's implicit (both noticed by dimstar)</changelog>
  <changelog author="dsterba@suse.cz" date="1413547200">- replace tarball with the upstream version</changelog>
  <changelog author="mpluskal@suse.com" date="1466337600">- Cleanup spec file with spec-cleaner
- Use configure and make install
- Add patches (both from Fedora):
  * bonnie++-1.96-minmax.patch (building with gcc6 - boo#985139)
  * bonnie++-1.96-makefile.patch (fixes installation using make)</changelog>
  <changelog author="mpluskal@suse.com" date="1479038400">- Update to version 1.97.2
  * make it build with GCC-6
  * fix some Debian bugs.
- Drop needed patch bonnie++-1.96-minmax.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1490356800">- Update to version 1.97.3:
  * man page fixes
  * fixed symlink test
  * CSS fix for bon_csv2html</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599912000">- update to 1.98:
  * Allow specifying the number of random seeks and the number
  of seeker processes and store that in the CSV (for testing NVMe).
  * Changed the text output to use KiB/MiB/GiB as units of measurement so we
  can fit NVMe results on screen.</changelog>
  <changelog author="Fernando Mattioli &lt;mattioli.fernando@gmail.com&gt;" date="1624622400">- Add patch:
  * bonnie++-1.98-bon_csv2html.patch (fixes gcc11 build).</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676462400">- Update to 2.00a:
  * Fixed an error in assigning colors in bon_csv2html.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6d996aa8a4917359bcb3ad60647ade2be826c302249415627236524f53dfbc3aad3c9f8d5b016faf8858e553e61a15aa461da3712f097457c4b6e6b8d58639be" name="bonnie" arch="x86_64">
  <version epoch="0" ver="1.6" rel="160000.2.2"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1316606400">- disable ctcs for &gt; 11.4, not available</changelog>
  <changelog author="jeffm@suse.de" date="1330603200">- Update to 1.5: Minor changes.</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Cleanup spec file with spec-cleaner
- Remove ctcs packages</changelog>
  <changelog author="mpluskal@suse.com" date="1467288000">- Use url for source
- Tiny spec file cleanups</changelog>
  <changelog author="kurt@garloff.de" date="1547208000">- Update to bonnie-1.6:
  * Use 16 threads by default
  * Smaller 4k reads (seeking)
  * Larger blocks in intelligent read/write
  * Smaller I/O size for char in/out
  * More digits for formatting.</changelog>
  <changelog author="kurt@garloff.de" date="1547208001">- bonnie-fix-o_direct.diff: Don't use O_DIRECT for character input,
  as newer kernels don't allow this.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="mpluskal@suse.com" date="1572955200">- Do not use download url anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="367fb040209d96f9b827df5ecc0f896fbda225d440ac0fb94a55ab709c21a7849b4ddc090836bedfec3d76a5527a95dd37cde3be0d7538cc37b8ca4b93c7931c" name="boost-devel" arch="noarch">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1640088000">- Update for Boost 1.78.0</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to Boost 1.79.0</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to Boost 1.80.0</changelog>
  <changelog author="aschnell@suse.com" date="1671019200">- Update for Boost 1.81.0</changelog>
  <changelog author="aschnell@suse.com" date="1681992000">- Update for Boost 1.82.0</changelog>
  <changelog author="aschnell@suse.com" date="1689076800">- Update for Boost 1.83.0</changelog>
  <changelog author="aschnell@suse.com" date="1700222400">- Update for Boost 1.84.0</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- Update for Boost 1.85.0</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- Update for Boost 1.86.0</changelog>
  <changelog author="code@bnavigator.de" date="1726660800">- Add libboost_process-devel for Boost.Process</changelog>
</package>
<package pkgid="34d4fdecdb8dea88dd382cd5ee6c602f1d03443a9646cf2b82d04be3de9d9caf52b4587873d8a8d0e7ea11a5f0aee76126aa2d380575d16848393ec55352d953" name="boost-jam" arch="noarch">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1640088000">- Update for Boost 1.78.0</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- update to Boost 1.79.0</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to Boost 1.80.0</changelog>
  <changelog author="aschnell@suse.com" date="1671019200">- Update for Boost 1.81.0</changelog>
  <changelog author="aschnell@suse.com" date="1681992000">- Update for Boost 1.82.0</changelog>
  <changelog author="aschnell@suse.com" date="1689076800">- Update for Boost 1.83.0</changelog>
  <changelog author="aschnell@suse.com" date="1700222400">- Update for Boost 1.84.0</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- Update for Boost 1.85.0</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- Update for Boost 1.86.0</changelog>
  <changelog author="code@bnavigator.de" date="1726660800">- Add libboost_process-devel for Boost.Process</changelog>
</package>
<package pkgid="1a314a30122c6a1c06855d22ba621c3f4862a01122bcbb73121df7b6bd998a0c0ab04d00bb7158868bd38bd65aa020731cb06e933f88ada6fd48855f07699272" name="boost-license1_86_0" arch="noarch">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="b1a540815c4e248be4f055a7b6b7cb9e244a13a8ae107290996f9bbb271c13eae3bb00481b6d57196c6e11e9441c31c62e10d90a719d5c309dbc9222434593de" name="boost1_86_0-doc-html" arch="noarch">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="b1a84bdfe5d80e7a80c6c6e4f872cd766e4bec36d62260e533d3fc98525f77af03962356d2592bf4fdd5dce1ada87b78ab74ec49d05beb19f150c0f27971b3dc" name="boost1_86_0-doc-pdf" arch="noarch">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="3f6856bda3a3a148489d9f7d2234f2594a964c1d907dad67787174edc367a855fb2fc7e4db5f9196a27b4e023af945a18f954e3c1089b9a2e499768979ef3567" name="boost1_86_0-jam" arch="x86_64">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="bfea8c3663947daf124c17789fd313596042889cef41203225616d965e059497d68e987b1afd157a9ac595bec6588fca99cf03b03b7a04e4b64a507710ff0bff" name="boost1_86_0-quickbook" arch="x86_64">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="aschnell@suse.com" date="1693915200">- update to 1.83.0
  * new libraries:
    + Compat - Header-only Library.
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_83_0.html
- dynamic_linking.patch: updated
- boost-mpi-noreturn.patch: added</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698148800">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="nicolas.morey@suse.com" date="1698321600">- Fix build for gnu-mpich-hpc broken by previous update</changelog>
  <changelog author="aschnell@suse.com" date="1702555200">- update to 1.84.0
  * new libraries:
    + Cobalt (single-threaded asynchronicity framework)
    + Redis (implements protocol RESP3)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_84_0.html
- drop boost-phoenix-revert-std-tuple-support.patch (upstream)
- drop boost-mpi-noreturn.patch (upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1708516800">- avoid obsolete rpm syntax</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Avoid BuildRequire of 'gcc-c++ &gt; 5' which is only a redundant
  check.  This interferes with Substitute.</changelog>
  <changelog author="aschnell@suse.com" date="1713873600">- update to 1.85.0
  * new libraries:
    + charconv (implementation of &lt;charconv&gt;)
    + scope (collection of scope guard utilities)
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_85_0.html
- dynamic_linking.patch: updated
- boost-charconv-quadmath.patch: added</changelog>
  <changelog author="hsk17@mail.de" date="1719662400">- add patch boost-1.85.0-python-numpy-2.patch from upstream</changelog>
  <changelog author="aschnell@suse.com" date="1725019200">- update to 1.86.0
  * process turned into compile library
  * for details on all changes see,
    https://www.boost.org/users/history/version_1_86_0.html
- boost-aarch64-flags.patch: updated
- boost-1.57.0-python-abi_letters.patch: updated
- boost-process.patch: removed (included upstream)
- boost-charconv-quadmath.patch: removed (improved upstream)</changelog>
  <changelog author="aschnell@suse.com" date="1725278400">- fix compilation of compute module (gh#boostorg/uuid#166)
- boost-compute-uuid.patch: added</changelog>
</package>
<package pkgid="42676fafdb6f0cad20c3797e19b621741858950b28b8e4fe19dc7768d06a7b908f4074909d54d86c99998526f935edfc85355c3a17b4cea4a52d8b1d3c715de5" name="bootiso" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="bp160.1.3"/>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1612180800">- Update to version 4.2.0:
  * chore: update changelog
  * feat: add new flag --assume-image-is hybrid | non-hybrid
  * fix: robust check for image hybridness
  * deps: require util-linux &gt;= 2.27
  * chore: move pull request template
  * .github: issue templates enhanced
  * man: fix typo
  * man: add troubleshooting entry for USB3
  * man: typo
- Add patch export-syslinux-lib-root.patch</changelog>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1613217600">- Change source to upstream tarball</changelog>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1613217601">- Create subpackages for bash and zsh completions
- Polish spec file</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1617883200">- Rename export-syslinux-lib-root.patch to syslinux-lib-root.patch
  and fix syslinux logic.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="7dfc0041ca7688f871391b4c7b6ce85e5de9c9aa69af0557188a784875a076068be84c387a272f32ba09ef802e04080c4d792854b67ebb32ecc1d6d7b861efd2" name="bootiso-bash-completion" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="bp160.1.3"/>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1612180800">- Update to version 4.2.0:
  * chore: update changelog
  * feat: add new flag --assume-image-is hybrid | non-hybrid
  * fix: robust check for image hybridness
  * deps: require util-linux &gt;= 2.27
  * chore: move pull request template
  * .github: issue templates enhanced
  * man: fix typo
  * man: add troubleshooting entry for USB3
  * man: typo
- Add patch export-syslinux-lib-root.patch</changelog>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1613217600">- Change source to upstream tarball</changelog>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1613217601">- Create subpackages for bash and zsh completions
- Polish spec file</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1617883200">- Rename export-syslinux-lib-root.patch to syslinux-lib-root.patch
  and fix syslinux logic.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="0475c228563243e43f80b79cde0f9b0af9a200a3f84ab4a2f326d9614ee33df28b399de7d2a3f95c41c1f61997a83a06aeb37112d1fdb862917d951c3c047a49" name="bootiso-zsh-completion" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="bp160.1.3"/>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1612180800">- Update to version 4.2.0:
  * chore: update changelog
  * feat: add new flag --assume-image-is hybrid | non-hybrid
  * fix: robust check for image hybridness
  * deps: require util-linux &gt;= 2.27
  * chore: move pull request template
  * .github: issue templates enhanced
  * man: fix typo
  * man: add troubleshooting entry for USB3
  * man: typo
- Add patch export-syslinux-lib-root.patch</changelog>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1613217600">- Change source to upstream tarball</changelog>
  <changelog author="Mustafa &#xC7;al&#x131;&#x15F;kan &lt;musfay@protonmail.com&gt;" date="1613217601">- Create subpackages for bash and zsh completions
- Polish spec file</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1617883200">- Rename export-syslinux-lib-root.patch to syslinux-lib-root.patch
  and fix syslinux logic.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
</package>
<package pkgid="24f16ce3d4c58d080894fdfc03f5ff3e21d200cb9616f7aa65457b2d55160366ab51893ecc75d0f0cf3c0323cfdfae2e667947c31a5fbd04dc37a84aa7562afd" name="borgbackup" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.12"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1661774400">- Support dates beyond 2038 on 64-bit platforms</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1663416000">- Update to 1.2.2
- Update requirements: openssl-devel &gt;= 1.1.0
  New features:
  * prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT
    support, #6284
  Fixes:
  * SaveFile: use a custom mkstemp with mode support, #6933,
    [#6400], #6786. This fixes umask/mode/ACL issues (and also
    "chmod not supported" exceptions seen in 1.2.1) of files
  * updated using SaveFile, e.g. the repo config.
  * hashindex_compact: fix eval order (check idx before use),
    [#5899]
  * create --paths-from-(stdin|command): normalize paths, #6778
  * secure_erase: avoid collateral damage, #6768. If a hardlink
    copy of a repo was made and a new repo config shall be
    saved, do NOT fill in random garbage before deleting the
    previous repo config, because that would damage the hardlink
    copy.
  * list: fix {flags:&lt;WIDTH&gt;} formatting, #6081
  * check: try harder to create the key, #5719
  * misc commands: ctrl-c must not kill other subprocesses, #6912
    borg create with a remote repo via ssh
    borg create --content-from-command
    borg create --paths-from-command
  * (de)compression filter process of import-tar / export-tar
  Other changes:
  * deprecate --prefix, use -a / --glob-archives, see #6806
  * make setuptools happy ("package would be ignored"), #6874
  * fix pyproject.toml to create a fixed _version.py file,
    compatible with both old and new setuptools_scm version,
    [#6875]
  * automate asciinema screencasts
  * CI: test on macOS 12 without fuse / fuse tests (too
    troublesome on github CI due to kernel extensions needed by
    macFUSE)
  * tests: fix test_obfuscate byte accounting
  * repository: add debug logging for issue #6687
  * _chunker.c: fix warnings on macOS
  * requirements.lock.txt: use the latest cython 0.29.32
  docs:
  * add info on man page installation, #6894
  * update archive_progress json description about
    "finished", #6570
  * json progress_percent: some values are optional, #4074
  * FAQ: full quota / full disk, #5960
  * correct shell syntax for installation using git
- Full Changelog: /usr/share/doc/packages/borgbackup/CHANGES.rst</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1672056000">- Update to 1.2.3
  Fixes:
  * create: fix --list --dry-run output for directories, #7209
  * diff/recreate: normalize chunker params before comparing them,
    [#7079]
  * check: fix uninitialised variable if repo is completely empty,
    [#7034]
  * xattrs: improve error handling, #6988
  * fix args.paths related argparsing, #6994
  * archive.save(): always use metadata from stats (e.g. nfiles,
    size, ...), #7072
  * tar_filter: recognize .tar.zst as zstd, #7093
  * get_chunker: fix missing sparse=False argument, #7056
  * file_integrity.py: make sure file_fd is always closed on exit
  * repository: cleanup(): close segment before unlinking
  * repository: use os.replace instead of os.rename
  Other changes:
  * remove python &lt; 3.7 compatibility code
  * do not use version_tuple placeholder in setuptools_scm
    template
  * CI: fix tox4 passenv issue, #7199
  * vagrant: update to python 3.9.16, use the openbsd 7.1 box
  * misc. test suite and docs fixes / improvements
  * remove deprecated --prefix from docs, #7109
  * Windows: use MSYS2 for Github CI, remove Appveyor CI
  More info:
  * https://github.com/borgbackup/borg/blob/1.2.3/docs/changes.rst#version-123-2022-12-24</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679659200">- update to 1.2.4
  New features:
  * import-tar: add --ignore-zeros to process concatenated tars,
    [#7432].
  * debug id-hash: computes file/chunk content id-hash, #7406
  * diff: --content-only does not show mode/ctime/mtime changes,
    [#7248]
  * diff: JSON strings in diff output are now sorted
    alphabetically
  Bug fixes:
  * xattrs: fix namespace processing on FreeBSD, #6997
  * diff: fix path related bug seen when addressing deferred
    items.
  * debug get-obj/put-obj: always give chunkid as cli param, see
    [#7290] (this is an incompatible change, see also borg debug
    id-hash)
  * extract: fix mtime when ResourceFork xattr is set (macOS
    specific), #7234
  * recreate: without --chunker-params, do not re-chunk, #7337
  * recreate: when --target is given, do not detect "nothing to
    do". use case: borg recreate -a src --target dst can be used
    to make a copy of an archive inside the same repository,
    [#7254].
  * set .hardlink_master for ALL hardlinkable items, #7175
  * locking: fix host, pid, tid order. tid (thread id) must be
    parsed as hex from lock file name.
  * update development.lock.txt, including a setuptools security
    fix, #7227
  Other changes:
  * requirements: allow msgpack 1.0.5 also
  * upgrade Cython to 0.29.33
  * hashindex minor fixes, refactor, tweaks, tests
  * use os.replace not os.rename
  * remove BORG_LIBB2_PREFIX (not used any more)
  * docs:
  * BORG_KEY_FILE: clarify docs, #7444
  * update FAQ about locale/unicode issues, #6999
  * improve mount options rendering, #7359
  * make timestamps in manual pages reproducible
  * installation: update Fedora in distribution list, #7357
  * tests:
  * fix test_size_on_disk_accurate for large st_blksize, #7250
  * add same_ts_ns function and use it for relaxed timestamp
    comparisons
  * "auto" compressor tests: don't assume a specific size, do not
    assume zlib is better than lz4, #7363
  * add test for extracted directory mtime
  * vagrant:
  * upgrade local freebsd 12.1 box -&gt; generic/freebsd13 box
    (13.1)
  * use pythons &gt; 3.8 which work on freebsd 13.1
  * pyenv: also install python 3.11.1 for testing
  * pyenv: use python 3.10.1, 3.10.0 build is broken on freebsd
  Full changelog:
  https://github.com/borgbackup/borg/blob/1.2.4/docs/changes.rst#version-124-2023-03-23</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679745600">- change requirement: python3-Cython &gt;= 0.29.33</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Update to version 1.2.6:
  + The upgrade procedure docs as published with borg 1.2.5 did not
    work, if the repository had archives resulting from a borg
    rename or borg recreate operation.
  + The updated docs now use
    BORG_WORKAROUNDS=ignore_invalid_archive_tam at some places to
    avoid that issue.
- Changes from version 1.2.5:
  + Fixes:
  - Security: fix pre-1.2.5 archives spoofing vulnerability
    (CVE-2023-36811, boo#1214809).
  - rename/recreate: correctly update resulting archive’s TAM.
  - create: do not try to read parent dir of recursion root.
  - extract: fix false warning about pattern never matching.
  - diff: remove surrogates before output,
  - compact: clear empty directories at end of compact process.
  - create --files-cache=size: fix crash,
  - keyfiles: improve key sanity check.
  - only warn about “invalid” chunker params.
  - ProgressIndicatorPercent: fix space computation for wide
    chars.
  - improve argparse validator error messages.
  + New features:
  - mount: make up volname if not given (macOS), #7690. macFUSE
    supports a volname mount option to give what finder displays
    on the desktop / in the directory view. if the user did not
    specify it, we make something up, because otherwise it would
    be “macFUSE Volume 0 (Python)” and hide the mountpoint
    directory name.
  - BORG_WORKAROUNDS=authenticated_no_key to extract from
    authenticated repos without key.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1705147200">- Update to version 1.2.7
- Update Requires/BuildRequires to
  (python3-msgpack &gt;= 0.5.6 with python3-msgpack &lt;= 1.0.7)
  + Fixes:
  - docs: CVE-2023-36811 upgrade steps: consider checkpoint
    archives, #7802
  - check/compact: fix spurious reappearance of orphan chunks
    since borg 1.2, #6687 - this consists of 2 fixes:
  - for existing chunks: check --repair: recreate shadow index,
    [#6687]
  - for newly created chunks: update shadow index when doing a
    double-put, #5661
  - LockRoster.modify: no KeyError if element was already gone,
    [#7937]
  - create --X-from-command: run subcommands with a clean
    environment, #7916
  - list --sort-by: support "archive" as alias of "name", #7873
  - fix rc and msg if arg parsing throws an exception, #7885
  + Other changes:
  - support and test on Python 3.12
  - include unistd.h in _chunker.c (fix for Python 3.13)
  - allow msgpack 1.0.6 and 1.0.7
  - TAM issues: show tracebacks, improve borg check logging,
    [#7797]
  - replace "datetime.utcfromtimestamp" with custom helper to
    avoid deprecation warnings when using Python 3.12
  + vagrant:
  - use generic/debian9 box, fixes #7579
  - add VM with debian bookworm / test on OpenSSL 3.0.x.
  + docs:
  - not only attack/unsafe, can also be a fs issue, #7853
  - point to CVE-2023-36811 upgrade steps from borg 1.1 to 1.2
    upgrade steps, #7899
  - upgrade steps needed for all kinds of repos (including
    "none" encryption mode), #7813
  - upgrade steps: talk about consequences of borg check, #7816
  - upgrade steps: remove period that could be interpreted as
    part of the command
  - automated-local.rst: use GPT UUID for consistent udev rule
  - create disk/partition sector backup by disk serial number,
    [#7934]
  - update macOS hint about full disk access
  - clarify borg prune -a option description, #7871
  - readthedocs: also build offline docs (HTMLzip), #7835
  - frontends: add "check.rebuild_refcounts" message
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.7/docs/changes.rst#version-127-2023-12-02</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1719748800">- Update to version 1.2.8
  + Fixes:
  * check: fix return code and log level for index entry value
    discrepancies
  * with-lock: catch FileNotFoundError exception, print error
    msg, #8022
  * benchmark: inherit options --rsh --remote-path, #8099
  * fix Ctrl-C / SIGINT behaviour for pyinstaller-made binaries,
    [#8155]
  + New features:
  * upgrade --check-tam: check manifest TAM auth, exit with rc=1
    if there are issues.
  * upgrade --check-archives-tam: check archives TAM auth, exit
    with rc=1 if there are issues.
  + Other changes:
  * allow msgpack 1.0.8 (this might fix memory leaks with Python
    3.12), #8133
  * use the latest Cython 0.29.x
  * vagrant:
  * use / build binaries with python 3.9.19
  * use generic/openbsd7 box
  * docs:
  * simplify TAM-related upgrade docs using the new commands
  * improve docs for borg with-lock, #8022
  * add more infos borg check --repair recreating the shadow
    index to change log, see #6687
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.8/docs/changes.rst#version-128-2024-03-29</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1720785600">- update to version 1.4.0
- adjust copyright header
- add two new variable definitions needed by borgbackup &gt;= 1.4.0:
  "BORG_LIBXXHASH_PREFIX=" and "BORG_LIBACL_PREFIX="
- change requirements for
  libacl-devel to &gt;= 2.2.47
  python3-Cython to &gt;=3.0.10
  python3-base to &gt;= 3.9
  python3-msgpack to &gt;= 1.0.3 and &lt;= 1.1.0
  python3-llfuse to &gt;= 1.3.8
- remove obsolete conflict for python3-msgpack = 1.0.1
- add %{borg_libacl_prefix} and %{borg_libxxhash_prefix} to the
  %build and the %install section
- Upgrade Notes borg 1.2.x to 1.4.x:
  * If you currently use borg 1.2.5+: no upgrade steps needed (if
    you already did them when upgrading to that version,
    otherwise see below).
  * If you currently use borg 1.2.0 .. 1.2.4, read and follow
    “Pre-1.2.5 archives spoofing vulnerability (CVE-2023-36811)”
    section in the changelog, see link below.
- Compatibility notes:
  * By default, borg 1.4 will behave quite similar to borg 1.2
    (it was forked off from 1.2-maint branch at 1.2.7).
  * the slashdot hack: be careful not to accidentally give paths
    containing /./ to “borg create” if you do not want to trigger
    this feature (which strips the left part of the path from
    archived items).
  * BORG_EXIT_CODES=modern is a feature that borg script, wrapper
    and GUI authors may want to use to get more specific error
    and warning return codes from borg. In that case, of course
    they will need to make sure to correctly deal with these new
    codes, see the internals/frontends docs.
- Update to version 1.4:
  * BORG_EXIT_CODES=modern: optional more specific return codes
    (for errors and warnings)
  * borg create: add the "slashdot hack" to strip recursion root
    prefixes
  * borg version REPO: show version of borg client and server
- Other bigger changes:
  * ACL code: refactor, improve acl_get / acl_set error handling
  * removed bundled 3rd party code (lz4/zstd/xxhash)
  * modernised python packaging (use pyproject.toml, use less
    setup.py)
  * use pyinstaller 6.7.0 and python 3.11 for the binary builds
  * new naming convention for fat binaries (include glibc version
    for linux)
  Full changelog:
  https://borgbackup.readthedocs.io/en/1.4-maint/changes.html</changelog>
</package>
<package pkgid="72606a2f999a789dca3cef1abbd20029c6d01b57de327df8a1e606041c5612edae7570435e69c340a56c1fff8c3b9f4c004067969ad23083a331731c76bfba1a" name="borgbackup-bash-completion" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="bp160.1.12"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1661774400">- Support dates beyond 2038 on 64-bit platforms</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1663416000">- Update to 1.2.2
- Update requirements: openssl-devel &gt;= 1.1.0
  New features:
  * prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT
    support, #6284
  Fixes:
  * SaveFile: use a custom mkstemp with mode support, #6933,
    [#6400], #6786. This fixes umask/mode/ACL issues (and also
    "chmod not supported" exceptions seen in 1.2.1) of files
  * updated using SaveFile, e.g. the repo config.
  * hashindex_compact: fix eval order (check idx before use),
    [#5899]
  * create --paths-from-(stdin|command): normalize paths, #6778
  * secure_erase: avoid collateral damage, #6768. If a hardlink
    copy of a repo was made and a new repo config shall be
    saved, do NOT fill in random garbage before deleting the
    previous repo config, because that would damage the hardlink
    copy.
  * list: fix {flags:&lt;WIDTH&gt;} formatting, #6081
  * check: try harder to create the key, #5719
  * misc commands: ctrl-c must not kill other subprocesses, #6912
    borg create with a remote repo via ssh
    borg create --content-from-command
    borg create --paths-from-command
  * (de)compression filter process of import-tar / export-tar
  Other changes:
  * deprecate --prefix, use -a / --glob-archives, see #6806
  * make setuptools happy ("package would be ignored"), #6874
  * fix pyproject.toml to create a fixed _version.py file,
    compatible with both old and new setuptools_scm version,
    [#6875]
  * automate asciinema screencasts
  * CI: test on macOS 12 without fuse / fuse tests (too
    troublesome on github CI due to kernel extensions needed by
    macFUSE)
  * tests: fix test_obfuscate byte accounting
  * repository: add debug logging for issue #6687
  * _chunker.c: fix warnings on macOS
  * requirements.lock.txt: use the latest cython 0.29.32
  docs:
  * add info on man page installation, #6894
  * update archive_progress json description about
    "finished", #6570
  * json progress_percent: some values are optional, #4074
  * FAQ: full quota / full disk, #5960
  * correct shell syntax for installation using git
- Full Changelog: /usr/share/doc/packages/borgbackup/CHANGES.rst</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1672056000">- Update to 1.2.3
  Fixes:
  * create: fix --list --dry-run output for directories, #7209
  * diff/recreate: normalize chunker params before comparing them,
    [#7079]
  * check: fix uninitialised variable if repo is completely empty,
    [#7034]
  * xattrs: improve error handling, #6988
  * fix args.paths related argparsing, #6994
  * archive.save(): always use metadata from stats (e.g. nfiles,
    size, ...), #7072
  * tar_filter: recognize .tar.zst as zstd, #7093
  * get_chunker: fix missing sparse=False argument, #7056
  * file_integrity.py: make sure file_fd is always closed on exit
  * repository: cleanup(): close segment before unlinking
  * repository: use os.replace instead of os.rename
  Other changes:
  * remove python &lt; 3.7 compatibility code
  * do not use version_tuple placeholder in setuptools_scm
    template
  * CI: fix tox4 passenv issue, #7199
  * vagrant: update to python 3.9.16, use the openbsd 7.1 box
  * misc. test suite and docs fixes / improvements
  * remove deprecated --prefix from docs, #7109
  * Windows: use MSYS2 for Github CI, remove Appveyor CI
  More info:
  * https://github.com/borgbackup/borg/blob/1.2.3/docs/changes.rst#version-123-2022-12-24</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679659200">- update to 1.2.4
  New features:
  * import-tar: add --ignore-zeros to process concatenated tars,
    [#7432].
  * debug id-hash: computes file/chunk content id-hash, #7406
  * diff: --content-only does not show mode/ctime/mtime changes,
    [#7248]
  * diff: JSON strings in diff output are now sorted
    alphabetically
  Bug fixes:
  * xattrs: fix namespace processing on FreeBSD, #6997
  * diff: fix path related bug seen when addressing deferred
    items.
  * debug get-obj/put-obj: always give chunkid as cli param, see
    [#7290] (this is an incompatible change, see also borg debug
    id-hash)
  * extract: fix mtime when ResourceFork xattr is set (macOS
    specific), #7234
  * recreate: without --chunker-params, do not re-chunk, #7337
  * recreate: when --target is given, do not detect "nothing to
    do". use case: borg recreate -a src --target dst can be used
    to make a copy of an archive inside the same repository,
    [#7254].
  * set .hardlink_master for ALL hardlinkable items, #7175
  * locking: fix host, pid, tid order. tid (thread id) must be
    parsed as hex from lock file name.
  * update development.lock.txt, including a setuptools security
    fix, #7227
  Other changes:
  * requirements: allow msgpack 1.0.5 also
  * upgrade Cython to 0.29.33
  * hashindex minor fixes, refactor, tweaks, tests
  * use os.replace not os.rename
  * remove BORG_LIBB2_PREFIX (not used any more)
  * docs:
  * BORG_KEY_FILE: clarify docs, #7444
  * update FAQ about locale/unicode issues, #6999
  * improve mount options rendering, #7359
  * make timestamps in manual pages reproducible
  * installation: update Fedora in distribution list, #7357
  * tests:
  * fix test_size_on_disk_accurate for large st_blksize, #7250
  * add same_ts_ns function and use it for relaxed timestamp
    comparisons
  * "auto" compressor tests: don't assume a specific size, do not
    assume zlib is better than lz4, #7363
  * add test for extracted directory mtime
  * vagrant:
  * upgrade local freebsd 12.1 box -&gt; generic/freebsd13 box
    (13.1)
  * use pythons &gt; 3.8 which work on freebsd 13.1
  * pyenv: also install python 3.11.1 for testing
  * pyenv: use python 3.10.1, 3.10.0 build is broken on freebsd
  Full changelog:
  https://github.com/borgbackup/borg/blob/1.2.4/docs/changes.rst#version-124-2023-03-23</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679745600">- change requirement: python3-Cython &gt;= 0.29.33</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Update to version 1.2.6:
  + The upgrade procedure docs as published with borg 1.2.5 did not
    work, if the repository had archives resulting from a borg
    rename or borg recreate operation.
  + The updated docs now use
    BORG_WORKAROUNDS=ignore_invalid_archive_tam at some places to
    avoid that issue.
- Changes from version 1.2.5:
  + Fixes:
  - Security: fix pre-1.2.5 archives spoofing vulnerability
    (CVE-2023-36811, boo#1214809).
  - rename/recreate: correctly update resulting archive’s TAM.
  - create: do not try to read parent dir of recursion root.
  - extract: fix false warning about pattern never matching.
  - diff: remove surrogates before output,
  - compact: clear empty directories at end of compact process.
  - create --files-cache=size: fix crash,
  - keyfiles: improve key sanity check.
  - only warn about “invalid” chunker params.
  - ProgressIndicatorPercent: fix space computation for wide
    chars.
  - improve argparse validator error messages.
  + New features:
  - mount: make up volname if not given (macOS), #7690. macFUSE
    supports a volname mount option to give what finder displays
    on the desktop / in the directory view. if the user did not
    specify it, we make something up, because otherwise it would
    be “macFUSE Volume 0 (Python)” and hide the mountpoint
    directory name.
  - BORG_WORKAROUNDS=authenticated_no_key to extract from
    authenticated repos without key.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1705147200">- Update to version 1.2.7
- Update Requires/BuildRequires to
  (python3-msgpack &gt;= 0.5.6 with python3-msgpack &lt;= 1.0.7)
  + Fixes:
  - docs: CVE-2023-36811 upgrade steps: consider checkpoint
    archives, #7802
  - check/compact: fix spurious reappearance of orphan chunks
    since borg 1.2, #6687 - this consists of 2 fixes:
  - for existing chunks: check --repair: recreate shadow index,
    [#6687]
  - for newly created chunks: update shadow index when doing a
    double-put, #5661
  - LockRoster.modify: no KeyError if element was already gone,
    [#7937]
  - create --X-from-command: run subcommands with a clean
    environment, #7916
  - list --sort-by: support "archive" as alias of "name", #7873
  - fix rc and msg if arg parsing throws an exception, #7885
  + Other changes:
  - support and test on Python 3.12
  - include unistd.h in _chunker.c (fix for Python 3.13)
  - allow msgpack 1.0.6 and 1.0.7
  - TAM issues: show tracebacks, improve borg check logging,
    [#7797]
  - replace "datetime.utcfromtimestamp" with custom helper to
    avoid deprecation warnings when using Python 3.12
  + vagrant:
  - use generic/debian9 box, fixes #7579
  - add VM with debian bookworm / test on OpenSSL 3.0.x.
  + docs:
  - not only attack/unsafe, can also be a fs issue, #7853
  - point to CVE-2023-36811 upgrade steps from borg 1.1 to 1.2
    upgrade steps, #7899
  - upgrade steps needed for all kinds of repos (including
    "none" encryption mode), #7813
  - upgrade steps: talk about consequences of borg check, #7816
  - upgrade steps: remove period that could be interpreted as
    part of the command
  - automated-local.rst: use GPT UUID for consistent udev rule
  - create disk/partition sector backup by disk serial number,
    [#7934]
  - update macOS hint about full disk access
  - clarify borg prune -a option description, #7871
  - readthedocs: also build offline docs (HTMLzip), #7835
  - frontends: add "check.rebuild_refcounts" message
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.7/docs/changes.rst#version-127-2023-12-02</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1719748800">- Update to version 1.2.8
  + Fixes:
  * check: fix return code and log level for index entry value
    discrepancies
  * with-lock: catch FileNotFoundError exception, print error
    msg, #8022
  * benchmark: inherit options --rsh --remote-path, #8099
  * fix Ctrl-C / SIGINT behaviour for pyinstaller-made binaries,
    [#8155]
  + New features:
  * upgrade --check-tam: check manifest TAM auth, exit with rc=1
    if there are issues.
  * upgrade --check-archives-tam: check archives TAM auth, exit
    with rc=1 if there are issues.
  + Other changes:
  * allow msgpack 1.0.8 (this might fix memory leaks with Python
    3.12), #8133
  * use the latest Cython 0.29.x
  * vagrant:
  * use / build binaries with python 3.9.19
  * use generic/openbsd7 box
  * docs:
  * simplify TAM-related upgrade docs using the new commands
  * improve docs for borg with-lock, #8022
  * add more infos borg check --repair recreating the shadow
    index to change log, see #6687
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.8/docs/changes.rst#version-128-2024-03-29</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1720785600">- update to version 1.4.0
- adjust copyright header
- add two new variable definitions needed by borgbackup &gt;= 1.4.0:
  "BORG_LIBXXHASH_PREFIX=" and "BORG_LIBACL_PREFIX="
- change requirements for
  libacl-devel to &gt;= 2.2.47
  python3-Cython to &gt;=3.0.10
  python3-base to &gt;= 3.9
  python3-msgpack to &gt;= 1.0.3 and &lt;= 1.1.0
  python3-llfuse to &gt;= 1.3.8
- remove obsolete conflict for python3-msgpack = 1.0.1
- add %{borg_libacl_prefix} and %{borg_libxxhash_prefix} to the
  %build and the %install section
- Upgrade Notes borg 1.2.x to 1.4.x:
  * If you currently use borg 1.2.5+: no upgrade steps needed (if
    you already did them when upgrading to that version,
    otherwise see below).
  * If you currently use borg 1.2.0 .. 1.2.4, read and follow
    “Pre-1.2.5 archives spoofing vulnerability (CVE-2023-36811)”
    section in the changelog, see link below.
- Compatibility notes:
  * By default, borg 1.4 will behave quite similar to borg 1.2
    (it was forked off from 1.2-maint branch at 1.2.7).
  * the slashdot hack: be careful not to accidentally give paths
    containing /./ to “borg create” if you do not want to trigger
    this feature (which strips the left part of the path from
    archived items).
  * BORG_EXIT_CODES=modern is a feature that borg script, wrapper
    and GUI authors may want to use to get more specific error
    and warning return codes from borg. In that case, of course
    they will need to make sure to correctly deal with these new
    codes, see the internals/frontends docs.
- Update to version 1.4:
  * BORG_EXIT_CODES=modern: optional more specific return codes
    (for errors and warnings)
  * borg create: add the "slashdot hack" to strip recursion root
    prefixes
  * borg version REPO: show version of borg client and server
- Other bigger changes:
  * ACL code: refactor, improve acl_get / acl_set error handling
  * removed bundled 3rd party code (lz4/zstd/xxhash)
  * modernised python packaging (use pyproject.toml, use less
    setup.py)
  * use pyinstaller 6.7.0 and python 3.11 for the binary builds
  * new naming convention for fat binaries (include glibc version
    for linux)
  Full changelog:
  https://borgbackup.readthedocs.io/en/1.4-maint/changes.html</changelog>
</package>
<package pkgid="78c78313dc813a537b3634076aa75a9d0e62ec213e8d6bef5490cb694503929b64b9d6d7b32565e654b0200212f65c45176ee37db5738ff8633d0af743886346" name="borgbackup-doc" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="bp160.1.12"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1661774400">- Support dates beyond 2038 on 64-bit platforms</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1663416000">- Update to 1.2.2
- Update requirements: openssl-devel &gt;= 1.1.0
  New features:
  * prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT
    support, #6284
  Fixes:
  * SaveFile: use a custom mkstemp with mode support, #6933,
    [#6400], #6786. This fixes umask/mode/ACL issues (and also
    "chmod not supported" exceptions seen in 1.2.1) of files
  * updated using SaveFile, e.g. the repo config.
  * hashindex_compact: fix eval order (check idx before use),
    [#5899]
  * create --paths-from-(stdin|command): normalize paths, #6778
  * secure_erase: avoid collateral damage, #6768. If a hardlink
    copy of a repo was made and a new repo config shall be
    saved, do NOT fill in random garbage before deleting the
    previous repo config, because that would damage the hardlink
    copy.
  * list: fix {flags:&lt;WIDTH&gt;} formatting, #6081
  * check: try harder to create the key, #5719
  * misc commands: ctrl-c must not kill other subprocesses, #6912
    borg create with a remote repo via ssh
    borg create --content-from-command
    borg create --paths-from-command
  * (de)compression filter process of import-tar / export-tar
  Other changes:
  * deprecate --prefix, use -a / --glob-archives, see #6806
  * make setuptools happy ("package would be ignored"), #6874
  * fix pyproject.toml to create a fixed _version.py file,
    compatible with both old and new setuptools_scm version,
    [#6875]
  * automate asciinema screencasts
  * CI: test on macOS 12 without fuse / fuse tests (too
    troublesome on github CI due to kernel extensions needed by
    macFUSE)
  * tests: fix test_obfuscate byte accounting
  * repository: add debug logging for issue #6687
  * _chunker.c: fix warnings on macOS
  * requirements.lock.txt: use the latest cython 0.29.32
  docs:
  * add info on man page installation, #6894
  * update archive_progress json description about
    "finished", #6570
  * json progress_percent: some values are optional, #4074
  * FAQ: full quota / full disk, #5960
  * correct shell syntax for installation using git
- Full Changelog: /usr/share/doc/packages/borgbackup/CHANGES.rst</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1672056000">- Update to 1.2.3
  Fixes:
  * create: fix --list --dry-run output for directories, #7209
  * diff/recreate: normalize chunker params before comparing them,
    [#7079]
  * check: fix uninitialised variable if repo is completely empty,
    [#7034]
  * xattrs: improve error handling, #6988
  * fix args.paths related argparsing, #6994
  * archive.save(): always use metadata from stats (e.g. nfiles,
    size, ...), #7072
  * tar_filter: recognize .tar.zst as zstd, #7093
  * get_chunker: fix missing sparse=False argument, #7056
  * file_integrity.py: make sure file_fd is always closed on exit
  * repository: cleanup(): close segment before unlinking
  * repository: use os.replace instead of os.rename
  Other changes:
  * remove python &lt; 3.7 compatibility code
  * do not use version_tuple placeholder in setuptools_scm
    template
  * CI: fix tox4 passenv issue, #7199
  * vagrant: update to python 3.9.16, use the openbsd 7.1 box
  * misc. test suite and docs fixes / improvements
  * remove deprecated --prefix from docs, #7109
  * Windows: use MSYS2 for Github CI, remove Appveyor CI
  More info:
  * https://github.com/borgbackup/borg/blob/1.2.3/docs/changes.rst#version-123-2022-12-24</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679659200">- update to 1.2.4
  New features:
  * import-tar: add --ignore-zeros to process concatenated tars,
    [#7432].
  * debug id-hash: computes file/chunk content id-hash, #7406
  * diff: --content-only does not show mode/ctime/mtime changes,
    [#7248]
  * diff: JSON strings in diff output are now sorted
    alphabetically
  Bug fixes:
  * xattrs: fix namespace processing on FreeBSD, #6997
  * diff: fix path related bug seen when addressing deferred
    items.
  * debug get-obj/put-obj: always give chunkid as cli param, see
    [#7290] (this is an incompatible change, see also borg debug
    id-hash)
  * extract: fix mtime when ResourceFork xattr is set (macOS
    specific), #7234
  * recreate: without --chunker-params, do not re-chunk, #7337
  * recreate: when --target is given, do not detect "nothing to
    do". use case: borg recreate -a src --target dst can be used
    to make a copy of an archive inside the same repository,
    [#7254].
  * set .hardlink_master for ALL hardlinkable items, #7175
  * locking: fix host, pid, tid order. tid (thread id) must be
    parsed as hex from lock file name.
  * update development.lock.txt, including a setuptools security
    fix, #7227
  Other changes:
  * requirements: allow msgpack 1.0.5 also
  * upgrade Cython to 0.29.33
  * hashindex minor fixes, refactor, tweaks, tests
  * use os.replace not os.rename
  * remove BORG_LIBB2_PREFIX (not used any more)
  * docs:
  * BORG_KEY_FILE: clarify docs, #7444
  * update FAQ about locale/unicode issues, #6999
  * improve mount options rendering, #7359
  * make timestamps in manual pages reproducible
  * installation: update Fedora in distribution list, #7357
  * tests:
  * fix test_size_on_disk_accurate for large st_blksize, #7250
  * add same_ts_ns function and use it for relaxed timestamp
    comparisons
  * "auto" compressor tests: don't assume a specific size, do not
    assume zlib is better than lz4, #7363
  * add test for extracted directory mtime
  * vagrant:
  * upgrade local freebsd 12.1 box -&gt; generic/freebsd13 box
    (13.1)
  * use pythons &gt; 3.8 which work on freebsd 13.1
  * pyenv: also install python 3.11.1 for testing
  * pyenv: use python 3.10.1, 3.10.0 build is broken on freebsd
  Full changelog:
  https://github.com/borgbackup/borg/blob/1.2.4/docs/changes.rst#version-124-2023-03-23</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679745600">- change requirement: python3-Cython &gt;= 0.29.33</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Update to version 1.2.6:
  + The upgrade procedure docs as published with borg 1.2.5 did not
    work, if the repository had archives resulting from a borg
    rename or borg recreate operation.
  + The updated docs now use
    BORG_WORKAROUNDS=ignore_invalid_archive_tam at some places to
    avoid that issue.
- Changes from version 1.2.5:
  + Fixes:
  - Security: fix pre-1.2.5 archives spoofing vulnerability
    (CVE-2023-36811, boo#1214809).
  - rename/recreate: correctly update resulting archive’s TAM.
  - create: do not try to read parent dir of recursion root.
  - extract: fix false warning about pattern never matching.
  - diff: remove surrogates before output,
  - compact: clear empty directories at end of compact process.
  - create --files-cache=size: fix crash,
  - keyfiles: improve key sanity check.
  - only warn about “invalid” chunker params.
  - ProgressIndicatorPercent: fix space computation for wide
    chars.
  - improve argparse validator error messages.
  + New features:
  - mount: make up volname if not given (macOS), #7690. macFUSE
    supports a volname mount option to give what finder displays
    on the desktop / in the directory view. if the user did not
    specify it, we make something up, because otherwise it would
    be “macFUSE Volume 0 (Python)” and hide the mountpoint
    directory name.
  - BORG_WORKAROUNDS=authenticated_no_key to extract from
    authenticated repos without key.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1705147200">- Update to version 1.2.7
- Update Requires/BuildRequires to
  (python3-msgpack &gt;= 0.5.6 with python3-msgpack &lt;= 1.0.7)
  + Fixes:
  - docs: CVE-2023-36811 upgrade steps: consider checkpoint
    archives, #7802
  - check/compact: fix spurious reappearance of orphan chunks
    since borg 1.2, #6687 - this consists of 2 fixes:
  - for existing chunks: check --repair: recreate shadow index,
    [#6687]
  - for newly created chunks: update shadow index when doing a
    double-put, #5661
  - LockRoster.modify: no KeyError if element was already gone,
    [#7937]
  - create --X-from-command: run subcommands with a clean
    environment, #7916
  - list --sort-by: support "archive" as alias of "name", #7873
  - fix rc and msg if arg parsing throws an exception, #7885
  + Other changes:
  - support and test on Python 3.12
  - include unistd.h in _chunker.c (fix for Python 3.13)
  - allow msgpack 1.0.6 and 1.0.7
  - TAM issues: show tracebacks, improve borg check logging,
    [#7797]
  - replace "datetime.utcfromtimestamp" with custom helper to
    avoid deprecation warnings when using Python 3.12
  + vagrant:
  - use generic/debian9 box, fixes #7579
  - add VM with debian bookworm / test on OpenSSL 3.0.x.
  + docs:
  - not only attack/unsafe, can also be a fs issue, #7853
  - point to CVE-2023-36811 upgrade steps from borg 1.1 to 1.2
    upgrade steps, #7899
  - upgrade steps needed for all kinds of repos (including
    "none" encryption mode), #7813
  - upgrade steps: talk about consequences of borg check, #7816
  - upgrade steps: remove period that could be interpreted as
    part of the command
  - automated-local.rst: use GPT UUID for consistent udev rule
  - create disk/partition sector backup by disk serial number,
    [#7934]
  - update macOS hint about full disk access
  - clarify borg prune -a option description, #7871
  - readthedocs: also build offline docs (HTMLzip), #7835
  - frontends: add "check.rebuild_refcounts" message
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.7/docs/changes.rst#version-127-2023-12-02</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1719748800">- Update to version 1.2.8
  + Fixes:
  * check: fix return code and log level for index entry value
    discrepancies
  * with-lock: catch FileNotFoundError exception, print error
    msg, #8022
  * benchmark: inherit options --rsh --remote-path, #8099
  * fix Ctrl-C / SIGINT behaviour for pyinstaller-made binaries,
    [#8155]
  + New features:
  * upgrade --check-tam: check manifest TAM auth, exit with rc=1
    if there are issues.
  * upgrade --check-archives-tam: check archives TAM auth, exit
    with rc=1 if there are issues.
  + Other changes:
  * allow msgpack 1.0.8 (this might fix memory leaks with Python
    3.12), #8133
  * use the latest Cython 0.29.x
  * vagrant:
  * use / build binaries with python 3.9.19
  * use generic/openbsd7 box
  * docs:
  * simplify TAM-related upgrade docs using the new commands
  * improve docs for borg with-lock, #8022
  * add more infos borg check --repair recreating the shadow
    index to change log, see #6687
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.8/docs/changes.rst#version-128-2024-03-29</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1720785600">- update to version 1.4.0
- adjust copyright header
- add two new variable definitions needed by borgbackup &gt;= 1.4.0:
  "BORG_LIBXXHASH_PREFIX=" and "BORG_LIBACL_PREFIX="
- change requirements for
  libacl-devel to &gt;= 2.2.47
  python3-Cython to &gt;=3.0.10
  python3-base to &gt;= 3.9
  python3-msgpack to &gt;= 1.0.3 and &lt;= 1.1.0
  python3-llfuse to &gt;= 1.3.8
- remove obsolete conflict for python3-msgpack = 1.0.1
- add %{borg_libacl_prefix} and %{borg_libxxhash_prefix} to the
  %build and the %install section
- Upgrade Notes borg 1.2.x to 1.4.x:
  * If you currently use borg 1.2.5+: no upgrade steps needed (if
    you already did them when upgrading to that version,
    otherwise see below).
  * If you currently use borg 1.2.0 .. 1.2.4, read and follow
    “Pre-1.2.5 archives spoofing vulnerability (CVE-2023-36811)”
    section in the changelog, see link below.
- Compatibility notes:
  * By default, borg 1.4 will behave quite similar to borg 1.2
    (it was forked off from 1.2-maint branch at 1.2.7).
  * the slashdot hack: be careful not to accidentally give paths
    containing /./ to “borg create” if you do not want to trigger
    this feature (which strips the left part of the path from
    archived items).
  * BORG_EXIT_CODES=modern is a feature that borg script, wrapper
    and GUI authors may want to use to get more specific error
    and warning return codes from borg. In that case, of course
    they will need to make sure to correctly deal with these new
    codes, see the internals/frontends docs.
- Update to version 1.4:
  * BORG_EXIT_CODES=modern: optional more specific return codes
    (for errors and warnings)
  * borg create: add the "slashdot hack" to strip recursion root
    prefixes
  * borg version REPO: show version of borg client and server
- Other bigger changes:
  * ACL code: refactor, improve acl_get / acl_set error handling
  * removed bundled 3rd party code (lz4/zstd/xxhash)
  * modernised python packaging (use pyproject.toml, use less
    setup.py)
  * use pyinstaller 6.7.0 and python 3.11 for the binary builds
  * new naming convention for fat binaries (include glibc version
    for linux)
  Full changelog:
  https://borgbackup.readthedocs.io/en/1.4-maint/changes.html</changelog>
</package>
<package pkgid="4ea85e26e1b4e0ae8808a85401b2fbd9c87262d975446ab98540b743dc62359d1c4370b79fbdf9bf485ab3e7217ffcb9d78f2deaa309464a0418e5c6e6a6ab5e" name="borgbackup-fish-completion" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="bp160.1.12"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1661774400">- Support dates beyond 2038 on 64-bit platforms</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1663416000">- Update to 1.2.2
- Update requirements: openssl-devel &gt;= 1.1.0
  New features:
  * prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT
    support, #6284
  Fixes:
  * SaveFile: use a custom mkstemp with mode support, #6933,
    [#6400], #6786. This fixes umask/mode/ACL issues (and also
    "chmod not supported" exceptions seen in 1.2.1) of files
  * updated using SaveFile, e.g. the repo config.
  * hashindex_compact: fix eval order (check idx before use),
    [#5899]
  * create --paths-from-(stdin|command): normalize paths, #6778
  * secure_erase: avoid collateral damage, #6768. If a hardlink
    copy of a repo was made and a new repo config shall be
    saved, do NOT fill in random garbage before deleting the
    previous repo config, because that would damage the hardlink
    copy.
  * list: fix {flags:&lt;WIDTH&gt;} formatting, #6081
  * check: try harder to create the key, #5719
  * misc commands: ctrl-c must not kill other subprocesses, #6912
    borg create with a remote repo via ssh
    borg create --content-from-command
    borg create --paths-from-command
  * (de)compression filter process of import-tar / export-tar
  Other changes:
  * deprecate --prefix, use -a / --glob-archives, see #6806
  * make setuptools happy ("package would be ignored"), #6874
  * fix pyproject.toml to create a fixed _version.py file,
    compatible with both old and new setuptools_scm version,
    [#6875]
  * automate asciinema screencasts
  * CI: test on macOS 12 without fuse / fuse tests (too
    troublesome on github CI due to kernel extensions needed by
    macFUSE)
  * tests: fix test_obfuscate byte accounting
  * repository: add debug logging for issue #6687
  * _chunker.c: fix warnings on macOS
  * requirements.lock.txt: use the latest cython 0.29.32
  docs:
  * add info on man page installation, #6894
  * update archive_progress json description about
    "finished", #6570
  * json progress_percent: some values are optional, #4074
  * FAQ: full quota / full disk, #5960
  * correct shell syntax for installation using git
- Full Changelog: /usr/share/doc/packages/borgbackup/CHANGES.rst</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1672056000">- Update to 1.2.3
  Fixes:
  * create: fix --list --dry-run output for directories, #7209
  * diff/recreate: normalize chunker params before comparing them,
    [#7079]
  * check: fix uninitialised variable if repo is completely empty,
    [#7034]
  * xattrs: improve error handling, #6988
  * fix args.paths related argparsing, #6994
  * archive.save(): always use metadata from stats (e.g. nfiles,
    size, ...), #7072
  * tar_filter: recognize .tar.zst as zstd, #7093
  * get_chunker: fix missing sparse=False argument, #7056
  * file_integrity.py: make sure file_fd is always closed on exit
  * repository: cleanup(): close segment before unlinking
  * repository: use os.replace instead of os.rename
  Other changes:
  * remove python &lt; 3.7 compatibility code
  * do not use version_tuple placeholder in setuptools_scm
    template
  * CI: fix tox4 passenv issue, #7199
  * vagrant: update to python 3.9.16, use the openbsd 7.1 box
  * misc. test suite and docs fixes / improvements
  * remove deprecated --prefix from docs, #7109
  * Windows: use MSYS2 for Github CI, remove Appveyor CI
  More info:
  * https://github.com/borgbackup/borg/blob/1.2.3/docs/changes.rst#version-123-2022-12-24</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679659200">- update to 1.2.4
  New features:
  * import-tar: add --ignore-zeros to process concatenated tars,
    [#7432].
  * debug id-hash: computes file/chunk content id-hash, #7406
  * diff: --content-only does not show mode/ctime/mtime changes,
    [#7248]
  * diff: JSON strings in diff output are now sorted
    alphabetically
  Bug fixes:
  * xattrs: fix namespace processing on FreeBSD, #6997
  * diff: fix path related bug seen when addressing deferred
    items.
  * debug get-obj/put-obj: always give chunkid as cli param, see
    [#7290] (this is an incompatible change, see also borg debug
    id-hash)
  * extract: fix mtime when ResourceFork xattr is set (macOS
    specific), #7234
  * recreate: without --chunker-params, do not re-chunk, #7337
  * recreate: when --target is given, do not detect "nothing to
    do". use case: borg recreate -a src --target dst can be used
    to make a copy of an archive inside the same repository,
    [#7254].
  * set .hardlink_master for ALL hardlinkable items, #7175
  * locking: fix host, pid, tid order. tid (thread id) must be
    parsed as hex from lock file name.
  * update development.lock.txt, including a setuptools security
    fix, #7227
  Other changes:
  * requirements: allow msgpack 1.0.5 also
  * upgrade Cython to 0.29.33
  * hashindex minor fixes, refactor, tweaks, tests
  * use os.replace not os.rename
  * remove BORG_LIBB2_PREFIX (not used any more)
  * docs:
  * BORG_KEY_FILE: clarify docs, #7444
  * update FAQ about locale/unicode issues, #6999
  * improve mount options rendering, #7359
  * make timestamps in manual pages reproducible
  * installation: update Fedora in distribution list, #7357
  * tests:
  * fix test_size_on_disk_accurate for large st_blksize, #7250
  * add same_ts_ns function and use it for relaxed timestamp
    comparisons
  * "auto" compressor tests: don't assume a specific size, do not
    assume zlib is better than lz4, #7363
  * add test for extracted directory mtime
  * vagrant:
  * upgrade local freebsd 12.1 box -&gt; generic/freebsd13 box
    (13.1)
  * use pythons &gt; 3.8 which work on freebsd 13.1
  * pyenv: also install python 3.11.1 for testing
  * pyenv: use python 3.10.1, 3.10.0 build is broken on freebsd
  Full changelog:
  https://github.com/borgbackup/borg/blob/1.2.4/docs/changes.rst#version-124-2023-03-23</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679745600">- change requirement: python3-Cython &gt;= 0.29.33</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Update to version 1.2.6:
  + The upgrade procedure docs as published with borg 1.2.5 did not
    work, if the repository had archives resulting from a borg
    rename or borg recreate operation.
  + The updated docs now use
    BORG_WORKAROUNDS=ignore_invalid_archive_tam at some places to
    avoid that issue.
- Changes from version 1.2.5:
  + Fixes:
  - Security: fix pre-1.2.5 archives spoofing vulnerability
    (CVE-2023-36811, boo#1214809).
  - rename/recreate: correctly update resulting archive’s TAM.
  - create: do not try to read parent dir of recursion root.
  - extract: fix false warning about pattern never matching.
  - diff: remove surrogates before output,
  - compact: clear empty directories at end of compact process.
  - create --files-cache=size: fix crash,
  - keyfiles: improve key sanity check.
  - only warn about “invalid” chunker params.
  - ProgressIndicatorPercent: fix space computation for wide
    chars.
  - improve argparse validator error messages.
  + New features:
  - mount: make up volname if not given (macOS), #7690. macFUSE
    supports a volname mount option to give what finder displays
    on the desktop / in the directory view. if the user did not
    specify it, we make something up, because otherwise it would
    be “macFUSE Volume 0 (Python)” and hide the mountpoint
    directory name.
  - BORG_WORKAROUNDS=authenticated_no_key to extract from
    authenticated repos without key.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1705147200">- Update to version 1.2.7
- Update Requires/BuildRequires to
  (python3-msgpack &gt;= 0.5.6 with python3-msgpack &lt;= 1.0.7)
  + Fixes:
  - docs: CVE-2023-36811 upgrade steps: consider checkpoint
    archives, #7802
  - check/compact: fix spurious reappearance of orphan chunks
    since borg 1.2, #6687 - this consists of 2 fixes:
  - for existing chunks: check --repair: recreate shadow index,
    [#6687]
  - for newly created chunks: update shadow index when doing a
    double-put, #5661
  - LockRoster.modify: no KeyError if element was already gone,
    [#7937]
  - create --X-from-command: run subcommands with a clean
    environment, #7916
  - list --sort-by: support "archive" as alias of "name", #7873
  - fix rc and msg if arg parsing throws an exception, #7885
  + Other changes:
  - support and test on Python 3.12
  - include unistd.h in _chunker.c (fix for Python 3.13)
  - allow msgpack 1.0.6 and 1.0.7
  - TAM issues: show tracebacks, improve borg check logging,
    [#7797]
  - replace "datetime.utcfromtimestamp" with custom helper to
    avoid deprecation warnings when using Python 3.12
  + vagrant:
  - use generic/debian9 box, fixes #7579
  - add VM with debian bookworm / test on OpenSSL 3.0.x.
  + docs:
  - not only attack/unsafe, can also be a fs issue, #7853
  - point to CVE-2023-36811 upgrade steps from borg 1.1 to 1.2
    upgrade steps, #7899
  - upgrade steps needed for all kinds of repos (including
    "none" encryption mode), #7813
  - upgrade steps: talk about consequences of borg check, #7816
  - upgrade steps: remove period that could be interpreted as
    part of the command
  - automated-local.rst: use GPT UUID for consistent udev rule
  - create disk/partition sector backup by disk serial number,
    [#7934]
  - update macOS hint about full disk access
  - clarify borg prune -a option description, #7871
  - readthedocs: also build offline docs (HTMLzip), #7835
  - frontends: add "check.rebuild_refcounts" message
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.7/docs/changes.rst#version-127-2023-12-02</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1719748800">- Update to version 1.2.8
  + Fixes:
  * check: fix return code and log level for index entry value
    discrepancies
  * with-lock: catch FileNotFoundError exception, print error
    msg, #8022
  * benchmark: inherit options --rsh --remote-path, #8099
  * fix Ctrl-C / SIGINT behaviour for pyinstaller-made binaries,
    [#8155]
  + New features:
  * upgrade --check-tam: check manifest TAM auth, exit with rc=1
    if there are issues.
  * upgrade --check-archives-tam: check archives TAM auth, exit
    with rc=1 if there are issues.
  + Other changes:
  * allow msgpack 1.0.8 (this might fix memory leaks with Python
    3.12), #8133
  * use the latest Cython 0.29.x
  * vagrant:
  * use / build binaries with python 3.9.19
  * use generic/openbsd7 box
  * docs:
  * simplify TAM-related upgrade docs using the new commands
  * improve docs for borg with-lock, #8022
  * add more infos borg check --repair recreating the shadow
    index to change log, see #6687
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.8/docs/changes.rst#version-128-2024-03-29</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1720785600">- update to version 1.4.0
- adjust copyright header
- add two new variable definitions needed by borgbackup &gt;= 1.4.0:
  "BORG_LIBXXHASH_PREFIX=" and "BORG_LIBACL_PREFIX="
- change requirements for
  libacl-devel to &gt;= 2.2.47
  python3-Cython to &gt;=3.0.10
  python3-base to &gt;= 3.9
  python3-msgpack to &gt;= 1.0.3 and &lt;= 1.1.0
  python3-llfuse to &gt;= 1.3.8
- remove obsolete conflict for python3-msgpack = 1.0.1
- add %{borg_libacl_prefix} and %{borg_libxxhash_prefix} to the
  %build and the %install section
- Upgrade Notes borg 1.2.x to 1.4.x:
  * If you currently use borg 1.2.5+: no upgrade steps needed (if
    you already did them when upgrading to that version,
    otherwise see below).
  * If you currently use borg 1.2.0 .. 1.2.4, read and follow
    “Pre-1.2.5 archives spoofing vulnerability (CVE-2023-36811)”
    section in the changelog, see link below.
- Compatibility notes:
  * By default, borg 1.4 will behave quite similar to borg 1.2
    (it was forked off from 1.2-maint branch at 1.2.7).
  * the slashdot hack: be careful not to accidentally give paths
    containing /./ to “borg create” if you do not want to trigger
    this feature (which strips the left part of the path from
    archived items).
  * BORG_EXIT_CODES=modern is a feature that borg script, wrapper
    and GUI authors may want to use to get more specific error
    and warning return codes from borg. In that case, of course
    they will need to make sure to correctly deal with these new
    codes, see the internals/frontends docs.
- Update to version 1.4:
  * BORG_EXIT_CODES=modern: optional more specific return codes
    (for errors and warnings)
  * borg create: add the "slashdot hack" to strip recursion root
    prefixes
  * borg version REPO: show version of borg client and server
- Other bigger changes:
  * ACL code: refactor, improve acl_get / acl_set error handling
  * removed bundled 3rd party code (lz4/zstd/xxhash)
  * modernised python packaging (use pyproject.toml, use less
    setup.py)
  * use pyinstaller 6.7.0 and python 3.11 for the binary builds
  * new naming convention for fat binaries (include glibc version
    for linux)
  Full changelog:
  https://borgbackup.readthedocs.io/en/1.4-maint/changes.html</changelog>
</package>
<package pkgid="6cbe5a3ed36ec432cb39b8a256e4961a1641541987a7cb91fdb0c071ac6dd55d0baf48670d17f44d746cb7e374e0cfc9ab1465a0af06ea76d8efd3c040c1ef32" name="borgbackup-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="bp160.1.12"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1661774400">- Support dates beyond 2038 on 64-bit platforms</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1663416000">- Update to 1.2.2
- Update requirements: openssl-devel &gt;= 1.1.0
  New features:
  * prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT
    support, #6284
  Fixes:
  * SaveFile: use a custom mkstemp with mode support, #6933,
    [#6400], #6786. This fixes umask/mode/ACL issues (and also
    "chmod not supported" exceptions seen in 1.2.1) of files
  * updated using SaveFile, e.g. the repo config.
  * hashindex_compact: fix eval order (check idx before use),
    [#5899]
  * create --paths-from-(stdin|command): normalize paths, #6778
  * secure_erase: avoid collateral damage, #6768. If a hardlink
    copy of a repo was made and a new repo config shall be
    saved, do NOT fill in random garbage before deleting the
    previous repo config, because that would damage the hardlink
    copy.
  * list: fix {flags:&lt;WIDTH&gt;} formatting, #6081
  * check: try harder to create the key, #5719
  * misc commands: ctrl-c must not kill other subprocesses, #6912
    borg create with a remote repo via ssh
    borg create --content-from-command
    borg create --paths-from-command
  * (de)compression filter process of import-tar / export-tar
  Other changes:
  * deprecate --prefix, use -a / --glob-archives, see #6806
  * make setuptools happy ("package would be ignored"), #6874
  * fix pyproject.toml to create a fixed _version.py file,
    compatible with both old and new setuptools_scm version,
    [#6875]
  * automate asciinema screencasts
  * CI: test on macOS 12 without fuse / fuse tests (too
    troublesome on github CI due to kernel extensions needed by
    macFUSE)
  * tests: fix test_obfuscate byte accounting
  * repository: add debug logging for issue #6687
  * _chunker.c: fix warnings on macOS
  * requirements.lock.txt: use the latest cython 0.29.32
  docs:
  * add info on man page installation, #6894
  * update archive_progress json description about
    "finished", #6570
  * json progress_percent: some values are optional, #4074
  * FAQ: full quota / full disk, #5960
  * correct shell syntax for installation using git
- Full Changelog: /usr/share/doc/packages/borgbackup/CHANGES.rst</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1672056000">- Update to 1.2.3
  Fixes:
  * create: fix --list --dry-run output for directories, #7209
  * diff/recreate: normalize chunker params before comparing them,
    [#7079]
  * check: fix uninitialised variable if repo is completely empty,
    [#7034]
  * xattrs: improve error handling, #6988
  * fix args.paths related argparsing, #6994
  * archive.save(): always use metadata from stats (e.g. nfiles,
    size, ...), #7072
  * tar_filter: recognize .tar.zst as zstd, #7093
  * get_chunker: fix missing sparse=False argument, #7056
  * file_integrity.py: make sure file_fd is always closed on exit
  * repository: cleanup(): close segment before unlinking
  * repository: use os.replace instead of os.rename
  Other changes:
  * remove python &lt; 3.7 compatibility code
  * do not use version_tuple placeholder in setuptools_scm
    template
  * CI: fix tox4 passenv issue, #7199
  * vagrant: update to python 3.9.16, use the openbsd 7.1 box
  * misc. test suite and docs fixes / improvements
  * remove deprecated --prefix from docs, #7109
  * Windows: use MSYS2 for Github CI, remove Appveyor CI
  More info:
  * https://github.com/borgbackup/borg/blob/1.2.3/docs/changes.rst#version-123-2022-12-24</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679659200">- update to 1.2.4
  New features:
  * import-tar: add --ignore-zeros to process concatenated tars,
    [#7432].
  * debug id-hash: computes file/chunk content id-hash, #7406
  * diff: --content-only does not show mode/ctime/mtime changes,
    [#7248]
  * diff: JSON strings in diff output are now sorted
    alphabetically
  Bug fixes:
  * xattrs: fix namespace processing on FreeBSD, #6997
  * diff: fix path related bug seen when addressing deferred
    items.
  * debug get-obj/put-obj: always give chunkid as cli param, see
    [#7290] (this is an incompatible change, see also borg debug
    id-hash)
  * extract: fix mtime when ResourceFork xattr is set (macOS
    specific), #7234
  * recreate: without --chunker-params, do not re-chunk, #7337
  * recreate: when --target is given, do not detect "nothing to
    do". use case: borg recreate -a src --target dst can be used
    to make a copy of an archive inside the same repository,
    [#7254].
  * set .hardlink_master for ALL hardlinkable items, #7175
  * locking: fix host, pid, tid order. tid (thread id) must be
    parsed as hex from lock file name.
  * update development.lock.txt, including a setuptools security
    fix, #7227
  Other changes:
  * requirements: allow msgpack 1.0.5 also
  * upgrade Cython to 0.29.33
  * hashindex minor fixes, refactor, tweaks, tests
  * use os.replace not os.rename
  * remove BORG_LIBB2_PREFIX (not used any more)
  * docs:
  * BORG_KEY_FILE: clarify docs, #7444
  * update FAQ about locale/unicode issues, #6999
  * improve mount options rendering, #7359
  * make timestamps in manual pages reproducible
  * installation: update Fedora in distribution list, #7357
  * tests:
  * fix test_size_on_disk_accurate for large st_blksize, #7250
  * add same_ts_ns function and use it for relaxed timestamp
    comparisons
  * "auto" compressor tests: don't assume a specific size, do not
    assume zlib is better than lz4, #7363
  * add test for extracted directory mtime
  * vagrant:
  * upgrade local freebsd 12.1 box -&gt; generic/freebsd13 box
    (13.1)
  * use pythons &gt; 3.8 which work on freebsd 13.1
  * pyenv: also install python 3.11.1 for testing
  * pyenv: use python 3.10.1, 3.10.0 build is broken on freebsd
  Full changelog:
  https://github.com/borgbackup/borg/blob/1.2.4/docs/changes.rst#version-124-2023-03-23</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1679745600">- change requirement: python3-Cython &gt;= 0.29.33</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1697025600">- Update to version 1.2.6:
  + The upgrade procedure docs as published with borg 1.2.5 did not
    work, if the repository had archives resulting from a borg
    rename or borg recreate operation.
  + The updated docs now use
    BORG_WORKAROUNDS=ignore_invalid_archive_tam at some places to
    avoid that issue.
- Changes from version 1.2.5:
  + Fixes:
  - Security: fix pre-1.2.5 archives spoofing vulnerability
    (CVE-2023-36811, boo#1214809).
  - rename/recreate: correctly update resulting archive’s TAM.
  - create: do not try to read parent dir of recursion root.
  - extract: fix false warning about pattern never matching.
  - diff: remove surrogates before output,
  - compact: clear empty directories at end of compact process.
  - create --files-cache=size: fix crash,
  - keyfiles: improve key sanity check.
  - only warn about “invalid” chunker params.
  - ProgressIndicatorPercent: fix space computation for wide
    chars.
  - improve argparse validator error messages.
  + New features:
  - mount: make up volname if not given (macOS), #7690. macFUSE
    supports a volname mount option to give what finder displays
    on the desktop / in the directory view. if the user did not
    specify it, we make something up, because otherwise it would
    be “macFUSE Volume 0 (Python)” and hide the mountpoint
    directory name.
  - BORG_WORKAROUNDS=authenticated_no_key to extract from
    authenticated repos without key.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1705147200">- Update to version 1.2.7
- Update Requires/BuildRequires to
  (python3-msgpack &gt;= 0.5.6 with python3-msgpack &lt;= 1.0.7)
  + Fixes:
  - docs: CVE-2023-36811 upgrade steps: consider checkpoint
    archives, #7802
  - check/compact: fix spurious reappearance of orphan chunks
    since borg 1.2, #6687 - this consists of 2 fixes:
  - for existing chunks: check --repair: recreate shadow index,
    [#6687]
  - for newly created chunks: update shadow index when doing a
    double-put, #5661
  - LockRoster.modify: no KeyError if element was already gone,
    [#7937]
  - create --X-from-command: run subcommands with a clean
    environment, #7916
  - list --sort-by: support "archive" as alias of "name", #7873
  - fix rc and msg if arg parsing throws an exception, #7885
  + Other changes:
  - support and test on Python 3.12
  - include unistd.h in _chunker.c (fix for Python 3.13)
  - allow msgpack 1.0.6 and 1.0.7
  - TAM issues: show tracebacks, improve borg check logging,
    [#7797]
  - replace "datetime.utcfromtimestamp" with custom helper to
    avoid deprecation warnings when using Python 3.12
  + vagrant:
  - use generic/debian9 box, fixes #7579
  - add VM with debian bookworm / test on OpenSSL 3.0.x.
  + docs:
  - not only attack/unsafe, can also be a fs issue, #7853
  - point to CVE-2023-36811 upgrade steps from borg 1.1 to 1.2
    upgrade steps, #7899
  - upgrade steps needed for all kinds of repos (including
    "none" encryption mode), #7813
  - upgrade steps: talk about consequences of borg check, #7816
  - upgrade steps: remove period that could be interpreted as
    part of the command
  - automated-local.rst: use GPT UUID for consistent udev rule
  - create disk/partition sector backup by disk serial number,
    [#7934]
  - update macOS hint about full disk access
  - clarify borg prune -a option description, #7871
  - readthedocs: also build offline docs (HTMLzip), #7835
  - frontends: add "check.rebuild_refcounts" message
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.7/docs/changes.rst#version-127-2023-12-02</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1719748800">- Update to version 1.2.8
  + Fixes:
  * check: fix return code and log level for index entry value
    discrepancies
  * with-lock: catch FileNotFoundError exception, print error
    msg, #8022
  * benchmark: inherit options --rsh --remote-path, #8099
  * fix Ctrl-C / SIGINT behaviour for pyinstaller-made binaries,
    [#8155]
  + New features:
  * upgrade --check-tam: check manifest TAM auth, exit with rc=1
    if there are issues.
  * upgrade --check-archives-tam: check archives TAM auth, exit
    with rc=1 if there are issues.
  + Other changes:
  * allow msgpack 1.0.8 (this might fix memory leaks with Python
    3.12), #8133
  * use the latest Cython 0.29.x
  * vagrant:
  * use / build binaries with python 3.9.19
  * use generic/openbsd7 box
  * docs:
  * simplify TAM-related upgrade docs using the new commands
  * improve docs for borg with-lock, #8022
  * add more infos borg check --repair recreating the shadow
    index to change log, see #6687
  Full Changelog:
  https://github.com/borgbackup/borg/blob/1.2.8/docs/changes.rst#version-128-2024-03-29</changelog>
  <changelog author="Andreas Prittwitz &lt;m4ng4n@gmx.de&gt;" date="1720785600">- update to version 1.4.0
- adjust copyright header
- add two new variable definitions needed by borgbackup &gt;= 1.4.0:
  "BORG_LIBXXHASH_PREFIX=" and "BORG_LIBACL_PREFIX="
- change requirements for
  libacl-devel to &gt;= 2.2.47
  python3-Cython to &gt;=3.0.10
  python3-base to &gt;= 3.9
  python3-msgpack to &gt;= 1.0.3 and &lt;= 1.1.0
  python3-llfuse to &gt;= 1.3.8
- remove obsolete conflict for python3-msgpack = 1.0.1
- add %{borg_libacl_prefix} and %{borg_libxxhash_prefix} to the
  %build and the %install section
- Upgrade Notes borg 1.2.x to 1.4.x:
  * If you currently use borg 1.2.5+: no upgrade steps needed (if
    you already did them when upgrading to that version,
    otherwise see below).
  * If you currently use borg 1.2.0 .. 1.2.4, read and follow
    “Pre-1.2.5 archives spoofing vulnerability (CVE-2023-36811)”
    section in the changelog, see link below.
- Compatibility notes:
  * By default, borg 1.4 will behave quite similar to borg 1.2
    (it was forked off from 1.2-maint branch at 1.2.7).
  * the slashdot hack: be careful not to accidentally give paths
    containing /./ to “borg create” if you do not want to trigger
    this feature (which strips the left part of the path from
    archived items).
  * BORG_EXIT_CODES=modern is a feature that borg script, wrapper
    and GUI authors may want to use to get more specific error
    and warning return codes from borg. In that case, of course
    they will need to make sure to correctly deal with these new
    codes, see the internals/frontends docs.
- Update to version 1.4:
  * BORG_EXIT_CODES=modern: optional more specific return codes
    (for errors and warnings)
  * borg create: add the "slashdot hack" to strip recursion root
    prefixes
  * borg version REPO: show version of borg client and server
- Other bigger changes:
  * ACL code: refactor, improve acl_get / acl_set error handling
  * removed bundled 3rd party code (lz4/zstd/xxhash)
  * modernised python packaging (use pyproject.toml, use less
    setup.py)
  * use pyinstaller 6.7.0 and python 3.11 for the binary builds
  * new naming convention for fat binaries (include glibc version
    for linux)
  Full changelog:
  https://borgbackup.readthedocs.io/en/1.4-maint/changes.html</changelog>
</package>
<package pkgid="70dd654b3fe10f53749dc94caabc8996efd5cd8da86b2a4e21e04f5702cb124490d2aa643ba345b4a7d9ddd16d58f8f9d13b91df29494b1901bdc2ebfff75ab5" name="borgmatic" arch="noarch">
  <version epoch="0" ver="1.9.5" rel="bp160.1.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 1.7.12:
  * Add "log_file" context to command hooks so your scripts
    can consume the borgmatic log file.
  * Fix error when running the "info" action with the
    "--match-archives" or "--archive"
    flags. Also fix the "--match-archives"/"--archive" flags
  * Fix error when running the "prune" action with both
    "archive_name_format" and "prefix" options set.
  * Selectively shallow merge certain mappings or sequences
    when including configuration files.
  * Selectively omit list values when including
    configuration files.
  * View the results of configuration file merging via
    "validate-borgmatic-config --show" flag.
  * BREAKING: Automatically use the
    "archive_name_format" option to filter which archives
    get used for borgmatic actions that operate on multiple
    archives. Override this behavior with the
    new "match_archives" option in the storage section. This
    change is "breaking" in that it silently
    changes which archives get considered for "rlist",
    "prune", "check", etc.
  * The "prefix" options have been deprecated in
    favor of the new "archive_name_format"
    auto-matching behavior and the "match_archives" option.
  * Add "--log-file-format" flag for customizing the log
    message format.
  * Fix regression in which the "check_repositories" option
    failed to match repositories.
  * Fix regression in which the "transfer" action produced
    a traceback.
  * Add spellchecking of source code during test runs.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707201">- update to 1.7.13:
  * Restore particular PostgreSQL schemas from a database
    dump via "borgmatic restore --schema"
    flag.
  * Fix error from PostgreSQL when dumping a database with
    a "format" of "plain".
  * : Fix PostgreSQL hook to support "psql_command" and
    "pg_restore_command" options containing
    commands with arguments.
  * Fix calls to psql in PostgreSQL hook to ignore
    "~/.psqlrc", whose settings can break
    database dumping.
  * Add support for logging each log line as a JSON object
    via global "--log-json" flag.
  * Fix "source_directories_must_exist" option to expand
    globs and tildes in source directories.
  * Add fish shell completion script so you can tab-
    complete on the borgmatic command-line.
  * Fix borgmatic error when not finding the configuration
    schema for certain "pip install --editable" development
    installs.
  * Fix archive checks being skipped even when particular
    archives haven't been checked
    recently. This occurred when using multiple borgmatic
    configuration files with different
    "archive_name_format"s, for instance.
  * Fix error in "borgmatic restore" action when the
    configured repository path is relative
    instead of absolute.
  * Run "borgmatic borg" action without capturing output so
    interactive prompts and flags like
    "--progress" still work.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1688040000">- update to 1.7.15
  * Add configuration options and command-line flags for backing up
    a database from one location while restoring it somewhere else.
  * Add a documentation troubleshooting note for MySQL/MariaDB
    authentication errors.
  * Remove upgrade-borgmatic-config command for upgrading borgmatic
    1.1.0 INI-style configuration.
  * Deprecate generate-borgmatic-config in favor of new
    "config generate" action.
  * Deprecate validate-borgmatic-config in favor of new
    "config validate" action.
  * Extract borgmatic configuration from backup via new
    "config bootstrap" action—even when borgmatic has no
    configuration yet!
  * Add sample systemd user service for running borgmatic as a
    non-root user.
  * Fix an error when "data" check time files are accessed without
    getting upgraded first.
- update to 1.7.14:
  * Add a new verbosity level (-2) to disable output entirely (for
    console, syslog, log file, or monitoring), so not even errors
    are shown.
  * Tweak archive check probing logic to use the newest timestamp
    found when multiple exist.
  * Add Borg 2 date-based matching flags to various actions for
    archive selection.
  * Fix an error when loading the configuration schema on Fedora
    Linux.
  * Fix "check" action error when repository and archive checks are
    configured but the archive gets skipped due to the configured
    frequency.
  * Fix "--archive latest" on "list" and "info" actions that only
    worked on the first of multiple configured repositories.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1689940800">- update to 1.8.0:
  * BREAKING: For the "borgmatic borg" action, instead of
    implicitly injecting repository/archive into the resulting Borg
    command-line, pass repository to Borg via an environment
    variable and make archive available for explicit use in your
    commands.
  * Fix an error when running "borg key export" through borgmatic.
  * Fix an error when dumping a database and the "exclude_nodump"
    option is set.
  * Add "check_i_know_what_i_am_doing" option to bypass Borg
    confirmation prompt when running "check --repair".
  * When merging two configuration files, error gracefully if the
    two files do not adhere to the same format.
  * Remove configuration sections ("location:", "storage:",
    "hooks:" etc.), while still keeping deprecated support for
    them. Now, all options are at the same level, and you don't
    need to worry about commenting/uncommenting section headers
    when you change an option (if you remove your sections first).
  * BREAKING: The retention prefix and the consistency prefix
    can no longer have different values (unless one is not set).
  * BREAKING: The storage umask and the hooks umask can no longer
    have different values (unless one is not set).
  * BREAKING: Flags like "--config" that previously took multiple
    values now need to be given once per value, e.g.
    "--config first.yaml --config second.yaml" instead of
    "--config first.yaml second.yaml". This prevents argument
    parsing errors on ambiguous commands.
  * BREAKING: Remove the deprecated (and silently ignored)
    "--successful" flag on the "list" action, as newer versions
    of Borg list successful (non-checkpoint) archives by default.
  * All deprecated configuration option values now generate
    warning logs.
  * Remove the deprecated (and non-functional) "--excludes"
    flag in favor of excludes within configuration.
  * Fix an error when logging too-long command output during
    error handling. Now, long command output is truncated
    before logging.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1695988800">- update to 1.8.2:
  * Add "key export" action to export a copy of the repository key
    for safekeeping in case the original goes missing or gets
    damaged.
  * Add a MariaDB database hook that uses native MariaDB commands
    instead of the deprecated MySQL ones. Be aware though that any
    existing backups made with the "mysql_databases:" hook are
    only restorable with a "mysql_databases:" configuration.
  * Fix for potential data loss (data not getting restored) in
    which the database "restore" action didn't actually restore
    anything and indicated success anyway.
  * Remove the deprecated use of the MongoDB hook's "--db" flag for
    database restoration.
  * Add source code reference documentation for getting oriented
    with the borgmatic code as a developer:
    https://torsion.org/borgmatic/docs/reference/source-code/</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1707912000">- Add borgmatic.rpmlintrc
- Rebase skip-tests.patch
- Remove unneeded support-python3.6.patch
- Update to 1.8.8:
  * For the PostgreSQL hook, pass the "PGSSLMODE" environment
    variable through to Borg when the database's configuration
    omits the "ssl_mode" option.
  * Allow the "--repository" flag to match across multiple
    configuration files.
  * Fix broken repository detection in the "rcreate" action with
    Borg 1.4. The issue did not occur with other versions of Borg.
  * Fix broken escaping logic in the PostgreSQL hook's
    "pg_dump_command" option.
  * SECURITY: Prevent additional shell injection attacks within
    the PostgreSQL hook.
- Updates from 1.8.7:
  * Store included configuration files within each backup archive
    in support of the "config bootstrap" action. Previously, only
    top-level configuration files were stored.
  * Elevate specific Borg warnings to errors or squash errors to
    warnings.
  * SECURITY: Prevent shell injection attacks within the PostgreSQL
    hook, the MongoDB hook, the SQLite hook, the "borgmatic borg"
    action, and command hook variable/constant interpolation.
  * Fix a traceback when providing an invalid "--override" value
    for a list option.
- Updates from 1.8.6:
  * Add an "--ssh-command" flag to the "config bootstrap"
    action for setting a custom SSH command, as no configuration
    is available (including the "ssh_command" option) until
    bootstrapping completes.
  * Fix a traceback when the "repositories" option contains both
    strings and key/value pairs.
  * Add configured repository labels to the JSON output for all
    actions.
  * The "check --force" flag now runs checks even if "check" is
    in "skip_actions".
  * Validate the configured action names in the "skip_actions"
    option.
  * Stream SQLite databases directly to Borg instead of dumping
    to an intermediate file. When logging commands that borgmatic
    executes, log the environment variables that borgmatic sets for
    those commands. (But don't log their values, since they often
    contain passwords.)
- Updates from 1.8.5:
  * Add a "skip_actions" option to skip running particular actions,
    handy for append-only or checkless configurations.
  * Deprecate the "disabled" value for the "checks" option in favor
    of the new "skip_actions" option.
  * Constants now apply to included configuration, not just the
    file doing the includes. As a side effect of this change,
    constants no longer apply to option names and only substitute
    into configuration values.
  * Add a "--match-archives" flag to the "check" action for
    selecting the archives to check, overriding the existing
    "archive_name_format" and "match_archives" options in
    configuration.
  * Only parse "--override" values as complex data types when
    they're for options of those types.
  * Fix environment variable interpolation within configured
    repository paths.
  * Add configuration constant overriding via the existing
    "--override" flag.
  * Upgrade ruamel.yaml dependency to support version 0.18.x.
  * Drop support for Python 3.7, which has been end-of-lifed.
- Updates from 1.8.4:
  * Add a monitoring hook for sending backup status to a variety of
    monitoring services via the Apprise library.
  * When an archive filter causes no matching archives for the
    "rlist" or "info" actions, warn the user and suggest how to
    remove the filter.
  * Fix a traceback when an invalid command-line flag or action
    is used.
  * Fix normalization of deprecated sections ("location:",
    "storage:", "hooks:", etc.) to support empty sections without
    erroring.
  * Disallow the "--dry-run" flag with the "borg" action, as
    borgmatic can't guarantee the Borg command won't have side
    effects.
- Updates from 1.8.3:
  * BREAKING: Simplify logging logic as follows: Syslog
    verbosity is now disabled by default, but setting the
    "--syslog-verbosity" flag enables it regardless of
    whether you're at an interactive console. Additionally,
    "--log-file-verbosity" and "--monitoring-verbosity" now
    default to 1 (info about steps borgmatic is taking) instead
    of 0. And both syslog logging and file logging can be enabled
    simultaneously.
  * Add a monitoring hook for sending backup status and logs to
    Grafana Loki.
  * When "archive_name_format" is not set, filter archives using
    the default archive name format.
  * Fix error handling to log command output as one record per line
    instead of truncating too-long output and swallowing the end of
    some Borg error messages.
  * Fix for borgmatic not stopping Borg immediately when the user
    presses ctrl-C.</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1710331200">- Update to 1.8.9:
  * Add custom dump/restore command options for MySQL and MariaDB.
  * Add an "access_token" option to the ntfy monitoring hook for
    authenticating without username/password.
  * When the "--json" flag is given, suppress console escape codes
    so as not to interfere with JSON output.
  * Fix "--override" values containing deprecated section headers
    not actually overriding configuration options under deprecated
    section headers.
  * Add support for the NO_COLOR environment variable.
    See the documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/set-up-backups/#colored-output
  * Add log sending for the Apprise logging hook, enabled by
    default. See the documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/monitor-your-backups/#apprise-hook
  * Document a potentially breaking shell quoting edge case within
    error hooks:
    https://torsion.org/borgmatic/docs/how-to/monitor-your-backups/#error-hooks
  * When running the "rcreate" action and the repository already
    exists but with a different encryption mode than requested,
    error.
  * Switch from Drone to Gitea Actions for continuous integration.
  * Rename scripts/run-end-to-end-dev-tests to
    scripts/run-end-to-end-tests and use it in both dev and CI for
    better dev-CI parity.
  * Clarify documentation about restoring a database:
    borgmatic does not create the database upon restore.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1726833600">- Update to 1.8.14:
  * Fix an error in borgmatic rcreate/init on an empty repository
    directory with Borg 1.4.
  * Add glob ("*") support to the "--repository" flag. Just quote
    any values containing globs so your shell doesn't interpret
    them.
  * Fix for a "bad character" Borg error in which the "spot" check
    fed Borg an invalid pattern.
  * Fix for a potential traceback (TypeError) during the handling
    of another error.
  * Clarify the configuration reference about the "spot" check
    options:
    https://torsion.org/borgmatic/docs/reference/configuration/
  * Fix the "source_directories_must_exist" option to work with
    relative "source_directories" paths when a "working_directory"
    is set.
  * Add documentation details for how to run custom database dump
    commands using binaries from running containers:
    https://torsion.org/borgmatic/docs/how-to/backup-your-databases/#containers
  * Fix a regression in which the "color" option had no effect.
  * Add a recent contributors section to the documentation, because
    credit  where credit's due! See:
    https://torsion.org/borgmatic/#recent-contributors
  * Add "delete" and "rdelete" actions to delete archives or entire
    repositories.
  * Add an "only_run_on" option to consistency checks so you can
    limit a check to running on particular days of the week. See
    the documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/deal-with-very-large-backups/#check-days
  * Add an Uptime Kuma monitoring hook. See the documentation for
    more information:
    https://torsion.org/borgmatic/docs/how-to/monitor-your-backups/#uptime-kuma-hook
  * Fix a PagerDuty hook traceback with Python &lt; 3.10.
  * Fix the Healthchecks ping body size limit, restoring it to the
    documented 100,000 bytes.
  * Add a "--max-duration" flag to the "check" action and a
    "max_duration" option to the repository check configuration.
    This tells Borg to interrupt a repository check after a certain
    duration.
  * Fix interaction between environment variable interpolation in
    constants and shell escaping.
  * When color output is disabled (explicitly or implicitly), don't
    prefix each log line with the log level.
  * Add an "upload_buffer_size" option to set the size of the
    upload buffer used in "create" action.
  * Fix "Argument list too long" error in the "spot" check when
    checking hundreds of thousands of files at once.
  * Add the configured repository label as "repository_label" to
    the interpolated variables passed to before/after command
    hooks.
  * Fix "Unrecognized argument" error when the same value is used
    with different command-line flags.
  * In the "spot" check, don't try to hash symlinked directories.
  * Add optional Healthchecks auto-provisioning via "create_slug"
    option.
  * Fix lack of file extraction when using "extract
  - -strip-components all" on a path with a leading slash.
  * Fix a traceback when the "data" consistency check is used.
  * Fix a traceback with "check --only spot" when the "spot" check
    is unconfigured.
  * Add a "spot" consistency check that compares file counts and
    contents between your source files and the latest archive,
    ensuring they fall within configured tolerances. This can catch
    problems like incorrect excludes, inadvertent deletes, files
    changed by malware, etc. See the documentation for more
    information:
    https://torsion.org/borgmatic/docs/how-to/deal-with-very-large-backups/#spot-check
  * When "--match-archives *" is used with "check" action, don't
    skip Borg's orphaned objects check.
  * When a command hook exits with a soft failure, ping the log and
    finish states for any configured monitoring hooks.
  * Add documentation link to Loki dashboard for borgmatic:
    https://torsion.org/borgmatic/docs/how-to/monitor-your-backups/#loki-hook
  * Fix "--json" error when Borg includes non-JSON warnings in JSON
    output.
  * SECURITY: Mask the password when logging a MongoDB dump or
    restore command.
  * Fix handling of the NO_COLOR environment variable to ignore an
    empty value.
  * Add documentation about backing up containerized databases by
    configuring borgmatic to exec into a container to run a dump
    command:
    https://torsion.org/borgmatic/docs/how-to/backup-your-databases/#containers
- remove skip-tests.patch
- remove borgmatic.rpmlintrc</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1736856000">- Update to 1.9.5
  * #418: Backup and restore databases that have the same name but
    with different ports, hostnames, or hooks.
  * #947: To avoid a hang in the database hooks, error and exit
    when the borgmatic runtime directory overlaps with the
    configured excludes.
  * #954: Fix a findmnt command error in the Btrfs hook by
    switching to parsing JSON output.
  * #956: Fix the printing of a color reset code even when color
    is disabled.
  * #958: Drop colorama as a library dependency.
  * When the ZFS, Btrfs, or LVM hooks aren't configured, don't try
    to cleanup snapshots for them.
  * #80 (beta): Add an LVM hook for snapshotting and backing up LVM
    logical volumes. See the documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/snapshot-your-filesystems/
  * #251 (beta): Add a Btrfs hook for snapshotting and backing up
    Btrfs subvolumes. See the documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/snapshot-your-filesystems/
  * #926: Fix a library error when running within a PyInstaller
    bundle.
  * #950: Fix a snapshot unmount error in the ZFS hook when using
    nested datasets.
  * Update the ZFS hook to discover and snapshot ZFS datasets even
    if they are parent/grandparent directories of your source
    directories.
  * Reorganize data source and monitoring hooks to make developing
    new hooks easier.
  * #261 (beta): Add a ZFS hook for snapshotting and backing up ZFS
    datasets. See the documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/snapshot-your-filesystems/
  * Remove any temporary copies of the manifest file created in
    support of the "bootstrap" action.
  * Deprecate the "store_config_files" option at the global scope
    and move it under the "bootstrap" hook. See the documentation
    for more information:
    https://torsion.org/borgmatic/docs/how-to/extract-a-backup/#extract-the-configuration-files-used-to-create-an-archive
  * Require the runtime directory to be an absolute path.
  * Add a "--deleted" flag to the "repo-list" action for listing
    deleted archives that haven't yet been compacted (Borg 2 only).
  * Promote the "spot" check from a beta feature to stable.
  * #441: Apply the "umask" option to all relevant actions, not
    just some of them.
  * #722: Remove the restriction that the "extract" and "mount"
    actions must match a single  repository. Now they work more
    like other actions, where each repository is applied in turn.
  * #932: Fix the missing build backend setting in pyproject.toml
    to allow Fedora builds.
  * #934: Update the logic that probes for the borgmatic streaming
    database dump, bootstrap metadata, and check state directories
    to support more platforms and use cases. See the documentation
    for more information:
    https://torsion.org/borgmatic/docs/how-to/backup-your-databases/#runtime-directory
  * #934: Add the "RuntimeDirectory" and "StateDirectory" options
    to the sample systemd service file to support the new runtime
    and state directory logic.
  * #939: Fix borgmatic ignoring the
    "BORG_RELOCATED_REPO_ACCESS_IS_OK" and
    "BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK" environment
    variables.
  * Add a Pushover monitoring hook. See the documentation for more
    information:
    https://torsion.org/borgmatic/docs/how-to/monitor-your-backups/#pushover-hook
  * #928: Fix the user runtime directory location on macOS (and
    possibly Cygwin).
  * #930: Fix an error with the sample systemd service when no
    credentials are configured.
  * #931: Fix an error when implicitly upgrading the check state
    directory from ~/.borgmatic to ~/.local/state/borgmatic across
    filesystems.
  * #609: Fix the glob expansion of "source_directories" values to
    respect the "working_directory" option.
  * #609: BREAKING: Apply the "working_directory" option to all
    actions, not just "create". This includes repository paths,
    destination paths, mount points, etc.
  * #562: Deprecate the "borgmatic_source_directory" option in
    favor of "user_runtime_directory" and "user_state_directory".
  * #562: BREAKING: Move the default borgmatic streaming database
    dump and bootstrap metadata directory from ~/.borgmatic to
    /run/user/$UID/borgmatic, which is more XDG-compliant. You can
    override this location with the new "user_runtime_directory"
    option. Existing archives with database dumps at the old
    location are still restorable.
  * #562, #638: Move the default check state directory from
    ~/.borgmatic to ~/.local/state/borgmatic. This is more
    XDG-compliant and also prevents these state files from getting
    backed up (unless you explicitly include them). You can
    override this location with the new "user_state_directory"
    option. After the first time you run the "check" action with
    borgmatic 1.9.0, you can safely delete the ~/.borgmatic
    directory.
  * #838: BREAKING: With Borg 1.4+, store database dumps and
    bootstrap metadata in a "/borgmatic" directory within a backup
    archive, so the path doesn't depend on the current user. This
    means that you can now backup as one user and restore or
    bootstrap as another user, among other use cases.
  * #902: Add loading of encrypted systemd credentials. See the
    documentation for more information:
    https://torsion.org/borgmatic/docs/how-to/provide-your-passwords/#using-systemd-service-credentials
  * #911: Add a "key change-passphrase" action to change the
    passphrase protecting a repository key.
  * #914: Fix a confusing apparent hang when when the repository
    location changes, and instead show a helpful error message.
  * #915: BREAKING: Rename repository actions like "rcreate" to
    more explicit names like "repo-create" for compatibility with
    recent changes in Borg 2.0.0b10.
  * #918: BREAKING: When databases are configured, don't
    auto-enable the "one_file_system" option, as existing
    auto-excludes of special files should be sufficient to prevent
    Borg from hanging on them. But if this change causes problems
    for you, you can always enable "one_file_system" explicitly.
  * #919: Clarify the command-line help for the "--config" flag.
  * #919: Document a policy for versioning and breaking changes:
    https://torsion.org/borgmatic/docs/how-to/upgrade/#versioning-and-breaking-changes
  * #921: BREAKING: Change soft failure command hooks to skip only
    the current repository rather than all repositories in the
    configuration file.
  * #922: Replace setup.py (Python packaging metadata) with the
    more modern pyproject.toml.
  * When using Borg 2, default the "archive_name_format" option to
    just "{hostname}", as Borg 2 does not require unique archive
    names; identical archive names form a common "series" that can
    be targeted together. See the Borg 2 documentation for more
    information:
    https://borgbackup.readthedocs.io/en/2.0.0b13/changes.html#borg-1-2-x-1-4-x-to-borg-2-0
  * Add support for Borg 2's "rclone:" repository URLs, so you can
    backup to 70+ cloud storage services whether or not they
    support Borg explicitly.
  * Add support for Borg 2's "sftp://" repository URLs.
  * Update the "--match-archives" and "--archive" flags to support
    Borg 2 series names or archive hashes.
  * Add a "--match-archives" flag to the "prune" action.
  * Add "--local-path" and "--remote-path" flags to the "config
    bootstrap" action for setting the Borg executable paths used
    for bootstrapping.
  * Add a "--user-runtime-directory" flag to the "config bootstrap"
    action for helping borgmatic locate the bootstrap metadata
    stored in an archive.
  * Add a Zabbix monitoring hook. See the documentation for more
    information:
    https://torsion.org/borgmatic/docs/how-to/monitor-your-backups/#zabbix-hook
  * Add a tarball of borgmatic's HTML documentation to the packages
    on the project page.
- Refresh dependencies
- Update packaging to the modern python standard</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1737374400">- Fix changelog line widths</changelog>
</package>
<package pkgid="3f7b41bb1880bf207f3cbea7eb92fac3fc10c7af60d789cafc98e2cb27e82bd4f7a64f235aebf7fb5abf83642f6a58384420e9f63f23b884ef4174a1727f8b26" name="bosh" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="770967dc7040f146e518570041d35d8c94cfc079f160509795884d87ab0ea4a0a6919484c919dfeb62cf7afcce44be5a4d8f42e5663f1f06b9ba7662aa30054e" name="bottom" arch="x86_64">
  <version epoch="0" ver="0.10.2~0" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684065600">- Update to 0.9.1:
  * #1148: Fix Gruvbox colour string being invalid when cache usage
    is enabled.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1686571200">- Update to 0.9.2:
  Bug Fixes:
  * #1186: Fix for temperature sensor data gathering on Linux immediately halting if any method failed.
  * #1191: Fix ntfs3 mounts not being counted as a physical drive type.
  * #1195: Fix battery health being incorrectly reported on M1 macOS.
  * #1188: Don't fail fast with temperature sensor name generation on Linux.
  Features:
  * #1172: Support human times for time_delta and default_time_value.
  * #1187: Use better names for duplicate temp sensors on Linux.
  * #1188: Also check /sys/devices/platform/coretemp.* for temp sensors on Linux.
  Other:
  * #1199: bottom should build on aarch64-linux-android with features disabled.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1687780800">- Update to 0.9.3:
  * #1216: Fix arguments not being sorted alphabetically.
  * #1219: Fix overflow/underflow in graph timespan zoom.
  * #1221: Support human times for rate.
  * #1206: Add .rpm package generation.
  * #1220: Update documentation for features supporting human times.</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1691323200">- Update to version 0.9.4:
  Bug Fixes:
  * #1230: Fix core dump if the terminal is closed while bottom is
    open.
  * #1264: Fix ARC usage showing max system memory instead of max
    ARC size.
  Features:
  * #1248: Add I/O counters from ZFS for Linux and FreeBSD.
  Changes:
  * #1236: Hide the battery tab selector if there is only one
    battery detected.
  * #1251: Make the charge meter take the entire width of the
    battery widget.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1693137600">- Update to 0.9.5:
  * #1278: Pin serde to 1.0.171.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1693137601">- Update to 0.9.6:
  * #1286: Pin serde to 1.0.188 to help with potential cargo install
    issues. Note this version should be fine and not pull in binaries.</changelog>
  <changelog author="opensuse-packages@jlk.one" date="1693137602">- Update to version 0.9.6~0:
  * uptick: 0.9.6 (#1288)
  * deps: bump dependencies as of 2023-08-26 (#1287)
  * deps: pin serde to 1.0.188 (#1286)
  * docs: update changelog dates
  * ci: pin musl to 1.71.0 for now when building releases (#1282)
  * other: appease clippy after Rust 1.72.0 (#1281)
  * uptick: 0.9.5 (#1280)
  * deps: bump windows to 0.51.1 (#1279)
  * deps: bump dependencies as of 2023-08-18 (#1277)
  * deps: pin serde to &lt;=1.0.171 (#1278)
  * deps: pin sysinfo to 0.29.8 (#1273)
  * deps: bump deps as of 2023-08-08 (#1272)</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Correct license to MIT and Apache-2.0</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1712491200">- Bump required rust build version</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1722945600">- Adapt service to new cargo vendor version
- Update to version 0.10.2:
  * uptick: 0.10.2 (#1544)
  * bug: fix occasionally wrong run time reported by sysinfo (#1542)
  * docs: update docs and requirements as of 2024-08-05 (#1545)
  * bug: fix default_cpu_entry arg not being used and missing from docs (#1543)
  * bug: fix not updating sysinfo processes correctly (#1541)
  * docs: fix alphabetical ordering of the linux install docs (#1537)
  * docs: update some of the installation docs (#1536)
  * docs: fix incorrect link in all-contributors (#1535)
  * docs: update changelog (#1534)
  * feat: add option to move avg CPU to another row (#1487)
  * other: delete v1.0 schema directory (#1529)
  * uptick: 0.10.1 (#1527)
  * other: add test to catch issues with incorrect long arg names (#1528)
  * bug: fix using clap macro incorrectly, causing broken long help name (#1526)
  * docs: fix invalid flag in docs (#1523)
  * docs: update changelog (#1524)
  * uptick: 0.10.0 (#1510)
  * docs: update docs on filter (#1519)
  * other: clarify config file creation logic/code (#1518)
  * docs: update changelog (#1517)
  * docs: add CosmicHorrorDev as a contributor for code (#1516)
  * other: Add the config path to the error message if unable to create config (#1515)
  * feature: support italic text styling (#1514)
  * change: make table headers bold by default (#1513)
  * feature: support bold text (#1512)
  * feature: support simple colour settings for text fields too (#1511)
  * docs: add the binary name to the title again (#1508)
  * refactor: refactor styling options (#1499)
  * deps: bump deps as of 2024-07-027 (#1507)
  * refactor: remove time as a dependency outside of logging (#1506)
  * uptick: 0.9.7 (#1505)
  * other: remove toolchain, clean up CI (#1504)
  * other: include a toolchain file from now on (#1503)
  * refactor: run clippy after updating to Rust 1.80 (#1502)
  * refactor: remove BottomError (#1498)
  * refactor: migrate data collection and some others away from BottomError (#1497)
  * refactor: convert more errors over (#1496)
  * refactor: out with arg/config error, and make user messages more consistent (#1494)
  * refactor: clean up conversion and crossterm errors (#1493)
  * refactor: error refactoring, part 1 (#1492)
  * deps: bump deps as of 2024-07-03 (#1490)
  * deps: bump root + lock deps as of 2024-06-27 (#1488)
  * deps: bump root deps and lockfile as of 2024-06-19 (#1486)
  * other: add schema test for uncommented default config (#1484)
  * feat: add way to automatically generate new json schemas (#1482)
  * change: change how disk, temp, and net filters in config are set (#1481)
  * uptick: 0.10.0 (#1479)
  * refactor: remove `lib` and move some things around (#1477)
  * bug: fix -V not working and causing Cirrus CI to fail (#1478)
  * refactor: use struct for args instead of builder interface (#1472)
  * deps: update deps as of 2024-05-26 (#1473)
  * Run cargo wix init (#1468)
  * refactor: extract unicode-ellipsis into its own crate (#1465)
  * refactor: some string-related code cleanup/refactor (#1463)
  * docs: add TheSkyentist as a contributor for code (#1461)
  * bug: fix battery table when hiding gaps (#1458)
  * other: comment out some dead code (#1456)
  * docs: add MichalBryxi as a contributor for doc (#1453)
  * docs: Which table goes "flags" under? (#1452)
  * deps: bump lock deps as of 2024-04-28 (#1451)
  * deps: bump deps as of 2024-04-28 (#1450)
  * docs: update some docs about install methods (#1446)
  * deps: bump clap-related dependencies, increase unofficial msrv to 1.74 (#1445)
  * deps: bump dependencies as of 2024-04-10, including sysinfo 0.30.10 (#1444)
  * docs: sort some install methods (#1443)
  * other: update a bunch of argument descriptions and some arg/config names (#1441)
  * docs: add davlgd as a contributor for doc (#1442)
  * docs: add install instructions to Exherbo Linux in README.md (#1440)
  * docs: update changelog for #1436 and #1430 (#1439)
  * docs: add lyuha as a contributor for code, and doc (#1438)
  * feature: Add option to set a position of legend (#1430)
  * change: use sysinfo's swap value for Windows (#1436)
  * deps: bump dependencies as of 2024-03-23 (#1431)
  * docs: bump deps as of 2024-03-23 (#1432)
  * deps: bump sysinfo to =0.30.7 (#1425)
  * deps: downgrade clap and run cargo update to build on 1.70 (#1423)
  * deps: bump root dependencies as of 2024-03-04 (#1422)
  * deps: bump sysinfo to 0.30.6 (#1420)
  * chore(deps): bump mio from 0.8.10 to 0.8.11 (#1421)
  * docs: actually fix numbering for Windows font troubleshooting guide (#1417)
  * docs: fix numbering for Windows font troubleshooting guide (#1416)
  * docs: some clarification (#1415)
  * docs: add john-s-lin as a contributor for doc (#1414)
  * docs: fix broken link to config documentation in README (#1413)
  * other: add process uptime as a default column (#1411)
  * bug: fix uptime calculation for Linux (#1410)
  * deps: update lock dependencies (2024-02-14) (#1409)
  * deps: update root dependencies (2024-02-14) (#1408)
  * other: add v1 schema + versioning + tests (#1407)
  * deps: bump ratatui to 0.26 (#1406)
  * docs: add Freed-Wu as a contributor for code, and doc (#1404)
  * other: add json schema (#1382) (#1394)
  * other: flatten process config struct and clean up help text (#1395)
  * refactor: move some files around in prep for a future options refactor (#1393)
  * refactor: convert layout creation tests back to being unit tests (#1392)
  * deps: bump sysinfo to =0.30.5 (#1390)
  * deps: bump non-root dependencies as of 2024-01-15 (#1387)
  * deps: bump dependencies as of 2024-01-15 (#1386)
  * refactor: simplify some config -&gt; constraints code (#1383)
  * other: fix deploy profile
  * docs: change code font and enable privacy (#1381)
  * add last revision date (#1380)
  * docs: bump mkdocs-material to 0.9.6 (#1379)
  * docs: fix another incorrect heading
  * docs: use consistent wording around command-line options (#1378)
  * refactor: clean up arg code more (#1377)
  * refactor: rearrange/resort args (#1376)
  * refactor: clean up help drawing code (#1374)
  * feature: Add support for bcachefs (#1373)
  * refactor: clean up some more drawing/component code (#1372)
  * refactor: move around some configuration code again (#1371)
  * refactor: move around configuration-related files (#1370)
  * other: update lints (#1369)
  * refactor: restructure canvas file folder structure (#1368)
  * other: quick lint fixes for some warnings (#1367)
  * deps: bump anyhow, clap, and thiserror (#1365)
  * refactor: pull data collection out of nested folder structure (#1364)
  * deps: update ratatui version (#1362)
  * refactor: fix macro formatting in disk data collection code (#1363)
  * refactor: remove once_cell (#1361)
  * refactor: some more cleanups around linux temp code (#1360)
  * other: if in a non-D0 state, short-circuit further logic (#1355)
  * docs: update changelog with #1353 (#1358)
  * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#1357)
  * feature: support default selection of average CPU graph (#1353)
  * other: master -&gt; main (#1349)
  * other: add back local time in debug logs (#1346)
  * other: change group -&gt; group_processes for consistency between config and command-line args (#1344)
  * deps: bump dependencies as of 2023-11-27 (#1338)
  * deps: update sysinfo to 0.29.11 (#1337)
  * other: preallocate space for ellipsis (#1336)
  * other: update generated config file (#1335)
  * refactor: iteratively detect ASCII and build string when truncating (#1334)
  * refactor: add fast branch if the string is short enough to not be truncated (#1333)
  * refactor: add fast branch for ascii-only string truncate (#1330)
  * docs: update changelog ordering and some wording (#1328)
  * change changelog heading levels (#1327)
  * refactor: simplify temperature conversion function usage (#1326)
  * change: small gpu proc changes (#1325)
  * feature: Add gpu proc info (#1276)
  * docs: fix typo in process column config (#1323)
  * other: add additional clamping functions on numeric types (#1324)
  * docs: add Android as unsupported but builds in README (#1321)
  * deps: bump toml_edit to 0.21.0 (#1320)
  * docs: bump mike to v2.0.0 (#1318)
  * docs: bump mkdocs-related dependencies to latest (#1317)
  * refactor: clean up some query code and some ascii-only string comparisons (#1316)
  * refactor: comment on convoluted `Filesystem::from_str` code (#1315)
  * chore: fix certain uninlined string format uses (#1310)
  * chore: run spell and grammar checkers
  * bug: fat32 mounts don't show up in macOS (#1314)
  * Chore: Remove un-needed lifetimes in a few calls (#1309)
  * chore: Minor cleanup - remove un-needed ident qualifiers (#1307)
  * bump clap and add nushell/fig completions (#1300)
  * deps: bump sysinfo to =0.29.10 (#1298)
  * docs: bump mkdocs and mkdocs-material versions (#1293)</changelog>
</package>
<package pkgid="f84601ab189b569a77143181a91fd9163ebdcccd45b09ecec07e39ab81282e4654baf402ce94d5dd1bc8a6e2a5c2e3cbb179f00fa01fca539d8980f18af72d69" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="cbbeb00783f820bf63ea4a0b7720d02b82c5c220303198724eb4f9a533dc0dbab1abea5d620b118fe3d7cdf567ce52d7bdac7fcb8191638c53444e9180248e54" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="76d7b0f3015d7d0b6192359279dc792f25f1d02d5a286031f097afe10847e19847cc73ddd9541490548ba9ad1bf1d834690d0697bd91a0cf6539e04b63bb95fa" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="719ea17d60a649ead1379060f2ed2c38f2fbf53d977864f9d035d502ea8d27a5c578a3f387db80c3770be6e0846abf178e026493b98b9f12441a31787c9333d3" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="1492f402b5a89d76597a54f5e17d739c0dc72eaf85f0076c58e5fc2b595e63bdc92bde60c712c8c53807a1d3aced0b84c11c459807f412beee002a0826b13180" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="81f6f53c523121708ea9d1136d80941a0424ebef8f8f30d41c8d4e1ef228510d86a626d2bc8110c685a31334367178f8025eb3525aa3e3742304ce9c7bfc6447" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="f06b9c01cbea21a32ed47e1ac9250430219b5e3baf3ea3eb38fcaf87aa2e371bf5539dcacc2f925666c514b64a98fb06f1bcb638ecc6f7062f779216448a1d9d" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="56064ab2e0daad8940a9f3e38dbcadbafb3f24b3bb7ef60e7797002a057bc3177ed82f4a545105347a02880c41121d7d39fa1baa3e4cf43e4dcec7eb17758f2f" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="5c285dd166fab9c8e2a85740aed01442c9e6ea9ae31aaabc2151caebddd8bc80039e331bc8ef1eb9769a4d18066bc38f90c7684a65d62a0dc876da46a801b9ce" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="0c1f3e9cba2ab5ff102d43a22d956f70076a9381cc15b62d7ceddd1e7837f8a99969a42d7db6c273c2e4d123e5e96162b594642e1175ac470923a3621c4acce8" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="08dacd4756e699d634549ae858d566aa34840656bf83226bb064673ad0f1012b59f51d1ff8988e2ab6d9de8b83e3c176e710d5dd8863e69c6152a26fdacdb73e" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="1b5b6a0d22ee27c0d0e75450a18e24a7b9c07135fdb8d947b6b19a10a8d5b14db8d10a7d8dfc5d375abc136cb2fa4b4b339dfe83525fbb8ed4e2f2540e64f4a0" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="0ccf2735168af4533c120c3704a9ec247a0ce2d572065668f81b36bb1205eea1384f47a1d6d4549878dd2470d01a91ebe3106693e8b7884ded31e9e9837fe9da" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="48cf08e6e0411fe86fb70054b9e5f5b61e958d230e82554105f951882b80559232d37034572abf8fd5b8f4e9975ddea7025d7e65d48222dc6bf926accddac1b6" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="22c36b69d8c4d2013eccc2a343d7795ceed178bed52818519e8ab018729352a76874cbf2f4d2e7c38401cc2241080e51ad804b61009a086d438766d44d099fec" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="1d696a3b23e48305b431636caee0c6b89ff13005d372831852429bdffb12a45608a66f11eaca53a1fb5e4fdd28a84ca0f8095ee31710d39e91b506ecc676385c" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="ba507df48d19c9cd21577e8219a7ad31685c57af8e3b2722f3cbd1acd14c6f8153821429765b310c2c309c2b2d96b190deb118340dc8d496583e44b4286312ef" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="f9f9634ecc2b7b640d0024c6b30f3f275303057ddde82d0ea78cb7c4cf433d7778cf96d059e2641fae905dfe70ae98dfb049688cfe43b74a99e99b1b2ac53aa4" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="dab8fcc9d7f2650fbac960ec5ae2ac7efbd3cc3d63d8b7a60e87b11c5df78ae5100ce53253d87e25423ecadc68d37be3bee0dbf87dd651ce2912529800a6eb1d" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="49b0db8cbc61d3da22a675401a7027d0f468fc361be2c10f8d6de70ae2f1142027d57a888ee240d52e0293f0ae344a63124f6945730fce0d190eec25cbccd646" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="e88439d6201b64e2279ad14a38117a9163336130772693c64a0d4bb4d9746f4a561348bc2d827e8bc820f4cfe6083f33108c6837a0b7b7ca37b36e973b5f06ae" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="6bce94d210aaea69c5f6817b9a7d9111045e5a47a7dd212f82be6c4d884473ed98dd1e466c2ab2fb1f29b7747f8d6ef6558a699332c19e86a443cb025a8b1223" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="96d8d541616ac037b6530712d1890c9e7eaadc2e5668ef4a0485642ea53045573de46cd370f0d9aa36efc6501ebef2fafb7cbf10c117c5218e3df41f88035c11" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="bb6fa65730e4d255c22436384a69ec6c617ced02ac91873c1d55163d9341fd4e243cd49ce9438d32be58bf713940deed9c1bf13817015a85ada2bfce3c99ed6e" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="bfec0b512dcb174409bcb3c3818ef45132807ea35452f074b0e0be2053fa64a64d5a5a51c8e5408325d9159a44279bc3eb26d53a38163eabb59d4ac93529e994" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="98567ea69747f3454209881306fe61d19dd5827463338959d999367ac4ba6f08f415d55c5ce9f8759dc2a02433eb646ecca9d9923e983c7727a40d0c2608a29b" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="0df0eb1500e11577f05f854922bab051fdcfb23ca5d8660e24a42ec7f30c74cfda6176597e6adba0c82c333d18287ab7ab3a22326a53f95495874a6eb6f9cd81" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="c514b61cb0887b251b141ae09071b9e12a02d769a9a024495d0825a523a4794586839e1ff157d4f80a8747dfff1653bad2ea237480b338a96501aef4451679c5" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="5f9eb20691702719e27698e882ed4f75afc7f00ab5774e2b3522543d834e4224f8e7209cb1e2a1a40ec6b76da13ec2d3ad672c6bb04d1b7982ce87dcb6315162" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.80" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
</package>
<package pkgid="60d43116d512dd3ee2f1bced1ec4ef30b3ea18325b0751c5cf5b33eff1ce65ae93341c2ab2050e0483a23bce0839d149689d2046991a299151ce09673d5d7dbc" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.82" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
</package>
<package pkgid="5dbd85dcc6108c95da124f80262836fdeefd197b254c5cd6e841f7916a671ecfcf20af38273a92af59fd284883fc397429161d228b05780f62e2a1e529f34397" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.83" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1697630400">- Update to version 1.76:
  * Defects Fixed:
  - Service allocation in the provider could fail due to the lack
    of a permission block. This has been fixed.
  - JceKeyFingerPrintCalculator has been generalised for different
    providers by using "SHA-256" for the algorithm string.
  - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
    prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
  - DTLS: Fixed server support for client_certificate_type extension.
  - Cipher.unwrap() for HQC could fail due to a miscalculation of
    the length of the KEM packet. This has been fixed.
  - There was exposure to a Java 7 method in the Java 5 to Java 8
    BCTLS jar which could cause issues with some TLS 1.2 cipher
    suites running on older JVMs. This is now fixed.
  * Additional Features and Functionality:
  - BCJSSE: Following OpenJDK, finalizers have been removed from
    SSLSocket subclasses. Applications should close sockets and
    not rely on garbage collection.
  - BCJSSE: Added support for boolean system property
    "jdk.tls.client.useCompatibilityMode" (default "true").
  - DTLS: Added server support for session resumption.
  - JcaPKCS10CertificationRequest will now work with EC on the
    OpenJDK provider.
  - TimeStamp generation now supports the SHA3 algorithm set.
  - The SPHINCS+ simple parameters are now fully supported in the
    BCPQC provider.
  - Kyber, Classic McEliece, HQC, and Bike now supported by the
    CRMF/CMS/CMP APIs.
  - Builder classes have been add for PGP ASCII Armored streams
    allowing CRCs and versions to now be optional.
  - An UnknownPacket type has been added to the PGP APIs to allow
    for forwards compatibility with upcoming revisions to the standard.
  * Rebase patch bouncycastle-notests.patch
- Update to version 1.75:
  * Defects Fixed:
  - Several Java 8 method calls were accidentally introduced in
    the Java 5 to Java 8 build. The affected classes have been
    refactored to remove this.
  - (D)TLS: renegotiation after resumption now fixed to avoid
    breaking connection.
  * Notes:
  - The ASN.1 core package has had some dead and retired methods
    cleaned up and removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
</package>
<package pkgid="b000288f96f984f6a34d356ece84e0aab73b9f1c6b40881a7af0ac3a66407982a9d6e57adc02a23ab88ab92624f3cfa5533a6d1e12f584a655f7891eb8eb226f" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.84" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1701691200">- Update to version 1.77:
  * Defects Fixed:
  - Using an unescaped '=' in an X.500 RDN would result in the
    RDN being truncated silently. The issue is now detected and
    an exception is thrown.
  - asn1.eac.CertificateBody was returning certificateEffectiveDate
    from getCertificateExpirationDate(). This has been fixed to
    return certificateExpirationDate.
  - DTLS: Fixed retransmission in response to re-receipt of an
    aggregated ChangeCipherSpec.
  - (D)TLS: Fixed compliance for supported_groups extension.
    Server will no longer negotiate an EC cipher suite using a
    default curve when the ClientHello includes the supported_groups
    extension but it contains no curves in common with the server.
    Similarly, a DH cipher suite will not be negotiated when the
    ClientHello includes supported_groups, containing at least one
    FFDHE group, but none in common with the server.
  - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
  - TLS: class annotation issues that could occur between the BC
    provider and the TLS API for the GCMParameterSpec class when
    the jars were loaded on the boot class path have been addressed.
  - Attempt to create an ASN.1 OID from a zero length byte array
    is now caught at construction time.
  - Attempt to create an X.509 extension block which is empty will
    now be blocked cause an exception.
  - IES implementation will now accept a null ParameterSpec if no
    nonce is needed.
  - An internal method in Arrays was failing to construct its
    failure message correctly on an error.
  - HSSKeyPublicParameters.generateLMSContext() would fail for a
    unit depth key.
  * Additional Features and Functionality:
  - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
    and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
    system properties to control (for client and server resp.) whether
    the signature_algorithms_cert extension should be omitted if it
    would be identical to signature_algorithms. Defaults to true, the
    historical behaviour.
  - The low-level HPKE API now allows the sender to specify an
    ephemeral key pair.
  - Support has been added for the delta-certificate requests in line
    with the current Chameleon Cert draft from the IETF.
  - Some accommodation has been added for historical systems to
    accommodate variations in the SHA-1 digest OID for CMS SignedData.
  - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
    the newer RSAPSS algorithm names when used with the JCA.
  - TLS: RSA key exchange cipher suites are now disabled by default.
  - Support has been added for PKCS#10 requests to allow certificates
    using the altSignature/altPublicKey extensions.
  * Notes:
  - Kyber and Dilithium have been updated according to the latest
    draft of the standard. Dilithium-AES and Kyber-AES have now been
    removed. Kyber now produces 256 bit secrets for all parameter sets
    (in line with the draft standard).
  - NTRU has been updated to produce 256 bit secrets in line with Kyber.
  - SPHINCS+ can now be used to generate certificates in line with
    those used by (Open Quantum Safe) OQS.
  - Falcon object idenitifiers are now in line with OQS as well.
  - PQC CMS SignedData now defaults to SHA-256 for signed attributes
    rather than SHAKE-256. This is also a compatibility change, but may
    change further again as the IETF standard for CMS is updated.</changelog>
  <changelog author="pmonreal@suse.com" date="1714392000">- Update to version 1.78: [bsc#1223252, CVE-2024-30171]
  [bsc#1224304, CVE-2024-30172] [bsc#1224299, CVE-2024-29857]
  * Security Advisories.
  - CVE-2024-29857: Importing an EC certificate with specially crafted
    F2m parameters can cause high CPU usage during parameter evaluation.
  - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
    due to exception processing eliminated.
  - CVE-2024-30172: Crafted signature and public key can be used to
    trigger an infinite loop in the Ed25519 verification code.
  - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
    and an SSL socket is not created with an explicit hostname (as happens
    with HttpsURLConnection), hostname verification could be performed
    against a DNS-resolved IP address. This has been fixed.
  * Defects Fixed:
  - Issues with a dangling weak reference causing intermittent
    NullPointerExceptions in the OcspCache have been fixed.
  - Issues with non-constant time RSA operations in TLS handshakes.
  - Issue with Ed25519, Ed448 signature verification causing intermittent
    infinite loop have been fixed.
  - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
  - Align ML-KEM input validation with FIPS 203 IPD requirements.
  - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
  - Fix CCM length checks with large nonce sizes (n=12, n=13).
  - EAC: Fixed the CertificateBody ASN.1 type to support an optional
    Certification Authority Reference in a Certificate Request.
  - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
    and the contents octets for both types are now limited to 4096 bytes.
  - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
    which could cause issues for HSM RSA keys.
  - BCJSSE: When endpoint identification is enabled and an SSL socket is not
    created with an explicit hostname (as happens with HttpsURLConnection),
    hostname verification could be performed against a DNS-resolved IP address.
  - The missing module import of java.logging to the provider module has been added.
  - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
  - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
  - PEM Parser now enforces PEM headers to start at the beginning of the line
    to be meaningful.
  * Additional Features and Functionality.
  - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
    has been added as a new module.
  - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
  - Improvements to PGP support, including Camellia key wrapping and Curve25519,
    Curve448 key types (including XDH with HKDF).
  - Added initial support for ML-KEM in TLS.
  - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
  - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
  - Introduced initial composite signature support for X509 Certificates.
  - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
    PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
  - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
    using the org.bouncycastle.pkcs12.default system/security property.
  - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
  - Dilithium and Kyber key encoding updated to latest Draft RFCs
    (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
  - Support has been added for encryption key derivation using HKDF in CMS, see
    draft-housley-lamps-cms-cek-hkdf-sha256.
  - X500Name now recognises jurisdiction{C,ST,L} DNs.
  - CertPathValidationContext and CertificatePoliciesValidation now include
    implementations of Memoable.
  - The Composite post-quantum signatures implementation has been updated to the
    latest draft draft-ounsworth-pq-composite-sigs.
  * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="fstrba@suse.com" date="1714392001">- Update to version 1.78.1
  * Defects Fixed:
  - The new dependency of the the PGP API on the bcutil jar was
    missing from the module jar, the OSGi manifest, and the Maven
    POM. This has been fixed.
  - Missing exports and duplicate imports have been added/removed
    from the OSGi manifests.
  - The OSGi manifests now have the same bundle IDs as 1.77 and
    lock down dependencies to the equivalent variations
  - A check in the X.509 Extensions class preventing the parsing
    of empty extensions has been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1730721600">- Update to 1.79:
  * Defects Fixed:
  - Leading zeroes were sometimes dropped from Ed25519 signatures
    leading to verification errors in the PGP API.
  - Default version string for Armored Output is now set correctly in 18on build.
  - The Elephant cipher would fail on large messages.
  - CMSSignedData.replaceSigners() would re-encode the digest algorithms
    block, occassionally dropping ones where NULL had been previously
    added as an algorithm parameter. The method now attempts to only use
    the original digest algorithm identifiers.
  - ERSInputStreamData would fail to generate the correct hash if
    called a second time with a different hash algorithm.
  - A downcast in the CrlCache which would cause FTP based CRLs to fail
    to load has been removed.
  - ECUtil.getNamedCurveOid() now trims curve names of excess space
    before look up.
  - The PhotonBeetle and Xoodyak digests did not reset properly after
    a doFinal() call.
  - Malformed AlgorithmIdentifiers in CertIDs could cause caching
    issues in the OCSP cache.
  - With Java 21 a provider service class will now be returned with
    a null class name where previously a null would have been returned
    for a service. This can cause a NullPointerException to be thrown
    by the BC provider if a non-existant service is requested.
  - CMS: OtherKeyAttribute.keyAttr now treated as optional.
  - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions.
  - The default version header for PGP armored output did not carry
    the correct version string.
  - In some situations the algorithm lookup for creating PGPDigestCalculators
    would fail due to truncation of the algorithm name.
  * Additional Features and Functionality:
  - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.
  - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA
    (including pre-hash) have been added to the BC provider and the lightweight API.
  - A new spec, ContextParameterSpec, has been added to support
    signature contexts for ML-DSA and SLH-DSA.
  - BCJSSE: Added support for security property
    "jdk.tls.server.defaultDHEParameters" (disabled in FIPS mode).
  - BCJSSE: Added support for signature_algorithms_cert configuration via
    "org.bouncycastle.jsse.client.SignatureSchemesCert" and
    "org.bouncycastle.jsse.server.SignatureSchemesCert" system properties
    or BCSSLParameters property "SignatureSchemesCert".
  - BCJSSE: Added support for boolean system property
    "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" (false by default).
  - (D)TLS: Remove redundant verification of self-generated RSA signatures.
  - CompositePrivateKeys now support the latest revision of the composite
    signature draft.
  - Delta Certificates now support the latest revision of the delta
    certificate extension draft.
  - A general KeyIdentifier class, encapsulating both PGP KeyID and the
    PGP key fingerprint has been added to the PGP API.
  - Support for the LibrePGP PreferredEncryptionModes signature subpacket
    has been added to the PGP API.
  - Support for Version 6 signatures, including salts, has been added to the PGP API.
  - Support for the PreferredKeyServer signature supacket has been added to the PGP API.
  - Support for RFC 9269, "Using KEMs in Cryptographic Message Syntax (CMS)",
    has been added to the CMS API.
  - Support for the Argon2 S2K has been added to the PGP API.
  - The system property "org.bouncycastle.pemreader.lax" has been introduced
    for situations where the BC PEM parsing is now too strict.
  - The system property "org.bouncycastle.ec.disable_f2m" has been introduced
    to allow F2m EC support to be disabled.
  * Rebase bouncycastle-notests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738584000">- Update to 1.80:
  * Defects Fixed:
  - A splitting issue for ML-KEM led to an incorrect size for kemct
    in KEMRecipientInfos. This has been fixed.
  - The PKCS12 KeyStore has been adjusted to prevent accidental doubling
    of the Oracle trusted certificate attribute (results in an IOException
    when used with the JVM PKCS12 implementation).
  - The SignerInfoGenerator copy constructor was ignoring the certHolder field.
  - The getAlgorithm() method return value for a CompositePrivateKey was
    not consistent with the corresponding getAlgorithm() return value for
    the CompositePrivateKey. This has been fixed.
  - The international property files were missing from the bcjmail distribution.
  - Issues with ElephantEngine failing on processing large/multi-block messages
    have been addressed.
  - GCFB mode now fully resets on a reset.
  - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle,
    Xoodyak now support the use of the AEADParameters class and provide
    accurate update/doFinal output lengths.
  - An unnecessary downcast in CertPathValidatorUtilities was resulting
    in the ignoring of URLs for FTP based CRLs.
  - A regression in the OpenPGP API could cause NoSuchAlgorithmException
    to be thrown when attempting to use SHA-256 in some contexts.
  - EtsiTs1029411TypesAuthorization was missing an extension field.
  - Interoperability issues with single depth LMS keys have been addressed.
  * Additional Features and Functionality:
  - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
  - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings
    as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06,
    draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
  - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
  - Support has been added for EC-JPAKE to the lightweight API.
  - Support has been added for the direct construction of S/MIME AuthEnvelopedData
    objects, via the SMIMEAuthEnvelopedData class.
  - An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been
    added to disable new OID encoding checks (use with caution).
  - Support has been added for the PBEParemeterSpec.getParameterSpec()
    method where supported by the JVM.
  - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context
    is provided. This allows the algorithms to be used with the existing Java key tool.
  - HQC has been updated to reflect the reference implementation released on 2024-10-30.
  - Support has been added to the low-level APIs for the OASIS Shamir Secret
    Splitting algorithms.
  - BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12"
    no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to
    JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if
    done in alignment with FIPS requirements.
  - Support has been added for OpenPGP V6 PKESK and message encryption.
  - PGPSecretKey.copyWithNewPassword() now includes AEAD support.
  - The ASCON family of algorithms have been updated in accordance with the
    published FIPS SP 800-232 draft.</changelog>
  <changelog author="pmonreal@suse.com" date="1750248000">- Update to 1.81:
  * Defects Fixed:
  - A potention NullPointerException in the KEM KDF KemUtil class
    has been removed.
  - Overlapping input/output buffers in doFinal could result in
    data corruption.
  - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.
  - Add configurable header validation to prevent malicious header
    injection in PGP cleartext signed messages; Fix signature packet
    encoding issues in PGPSignature.join() and embedded signatures
    while phasing out legacy format.
  - Fixed ParallelHash initialization stall when using block size B=0.
  - The PRF from the PBKDF2 function was been lost when PBMAC1 was
    initialized from protectionAlgorithm. This has been fixed.
  - The lowlevel DigestFactory was cloning MD5 when being asked
    to clone SHA1.
  * Additional Features and Functionality:
  - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/
  - Further support has been added for generation and use of PGP V6 keys
  - Additional validation has been added for armored headers in Cleartext
    Signed Messages.
  - The PQC signature algorithm proposal Mayo has been added to the
    low-level API and the BCPQC provider.
  - The PQC signature algorithm proposal Snova has been added to the
    low-level API and the BCPQC provider.
  - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.
  - The Falcon implementation has been updated to the latest draft.
  - Support has been added for generating keys which encode as seed-only
    and expanded-key-only for ML-KEM and ML-DSA private keys.
  - Private key encoding of ML-DSA and ML-KEM private keys now follows
    the latest IETF draft.
  - The Ascon family of algorithms has been updated to the initial draft
    of SP 800-232. Some additional optimisation work has been done.
  - Support for ML-DSA's external-mu calculation and signing has been
    added to the BC provider.
  - CMS now supports ML-DSA for SignedData generation.
  - Introduce high-level OpenPGP API for message creation/consumption
    and certificate evaluation.
  - Added JDK21 KEM API implementation for HQC algorithm.
  - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.
  - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).
  - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).
  - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order
    (BCSSLParameters.useNamedGroupsOrder).</changelog>
  <changelog author="fstrba@suse.com" date="1750248001">- Added patch:
  * bouncycastle-char-literal.patch
    + Somehow, during the build, one unicode character become too
    long for being a char literal. Consider it as string then.</changelog>
  <changelog author="pmonreal@suse.com" date="1758542400">- Update to 1.82:
  * Defects Fixed:
  - SNOVA and MAYO are now correctly added to the JCA provider module-info file.
  - TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
  - BCJSSE: Session binding map is now shared across all stages of the
    session lifecycle (SunJSSE compatibility).
  - The CMCEPrivateKeyParameters#reconstructPublicKey method was returning
    an empty byte array. It now returns an encoding of the public key.
  - CBZip2InputStream no longer auto-closes at end-of-contents.
  - The BC CertPath implementation was eliminating certificates on the
    bases of the Key-ID. This is not in accordance with RFC 4158.
  - Support for the previous set of libOQS Falcon OIDs has been restored.
  - The BC CipherInputStream could throw an exception if asked to handle an
    AEAD stream consisting of the MAC only.
  - Some KeyAgreement classes were missing in the Java 11 class hierarchy.
  - Fix typo in a constant name in the HPKE class and deprecate the old constant.
  - Fuzzing analysis has been done on the OpenPGP API and additional code
    has been added to prevent escaping exceptions.
  * Additional Features and Functionality:
  - SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable
    and EncodableService.
  - BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
  - BCJSSE: Added support for system properties "jdk.tls.{client,server}.maxInboundCertificateChainLength"
  - BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
  - The Composite post-quantum signatures implementation has been updated to
    the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
  - "_PREHASH" implementations are now provided for all composite signatures
    to allow the hash of the date to be used instead of the actual data in
    signature calculation.
  - The gradle build can now be used to generate an Bill of Materials (BOM) file.
  - It is now possible to configure the SignerInfoVerifierBuilder used by the
    SignedMailValidator class.
  - The Ascon family of algorithms has been updated with the latest published changes.
  - Composite signature keys can now be constructed from the individual keys of
    the algorithms composing the composite.
  - PGPSecretKey, PGPSignatureGenerator now support version 6.
  - Further optimisation work has been done on ML-KEM public key validation.
  - Zeroization of passwords in the JCA PKCS12 key store has been improved.
  - The "org.bouncycastle.drbg.effective_256bits_entropy" property has been
    added for platforms where the entropy source is not producing 1 full bit
    of entropy per bit and additional bits are required (default value 282).
  - OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
  - The HQC KEM has been updated with the latest draft updates.
  * Additional Notes:
  - The legacy post-quantum package has now been removed.</changelog>
  <changelog author="pmonreal@suse.com" date="1765886400">- Update to 1.83:
  * Defects Fixed:
  - Attempting to check a password on a stripped PGP would throw an
    exception. Checking the password on such a key will now always
    return false.
  - Fixed an issue in KangarooTwelve where premature absorption caused
    erroneous 168-byte padding; absorption is now delayed so correct
    final-byte padding is applied.
  - BCJSSE: Fix supported_versions creation for renegotiation handshake.
  - (D)TLS: Reneg info now oly offered with pre-1.3.
  * Additional Features and Functionality:
  - A generic "COMPOSITE" algorithm name has been added as a JCA
    Signature algorithm. The algorithm will identify the composite
    signature to use from the composite key passed in.
  - The composite signatures implementation has been updated to the
    final draft and now follows the submitted standard.
  - Support for the generation and use as trust anchors has been added
    for certificate signatures with id-alg-unsigned as the signature type.
  - Support for CMP direct POP for encryption keys using
    challenge/response has been added to the CMP/CRMF APIs.
  - Support for SupportedCurves attribute to the BC provider
  - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per
    draft-reddy-tls-slhdsa-01.
  - Support has been added for the Java 25 KDF API (current algorithms,
    PBKDF2, SCRYPT, and HKDF).
  - Support for composite signatures is now included in CMS and timestamping.
  - It is now possible to disable the Lenstra check in RSA where the public
    key is not available via the system/security property
    "org.bouncycastle.rsa.no_lenstra_check".</changelog>
  <changelog author="pmonreal@suse.com" date="1776340800">- Update to 1.84:
  * Security Fixes:
  - CVE-2025-14813: GOSTCTR implementation unable to process more than
    255 blocks correctly. (bsc#1262225)
  - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java.
    (bsc#1262226)
  - CVE-2026-3505: Unbounded PGP AEAD chunk size leads to pre-auth
    resource exhaustion. (bsc#1262232)
  - CVE-2026-5588: PKIX draft CompositeVerifier accepts empty signature
    sequence as valid. (bsc#1262228)
  - CVE-2026-5598: Non-constant time comparisons risk private key
    leakage in FrodoKEM. (bsc#1262227)
  * Additional Features and Functionality:
  - In line with JVM changes, KEM support has been backported to
    Java 17.
  - BCJSSE: Configurable (client) early key_share groups via
    BCSSLParameters.earlyKeyShares or
    'org.bouncycastle.jsse.client.earlyKeyShares' system property.
  - BCJSSE: Support for curveSM2MLKEM768 hybrid NamedGroup in TLS
    1.3 per draft-yang-tls-hybrid-sm2-mlkem-03.
  - BCJSSE: Log when default cipher suites are disabled.
  - BCJSSE: Experimental support for ShangMi crypto in TLS 1.3 per
    RFC 8998 (not enabled by default).
  - CMS: Added CMSAuthEnvelopedDataStreamGenerator.open taking an
    explicit content type.
  - HKDF: Provider support for HKDFParameterSpec.Expand.
  - Added initial support for RFC 9380 (Hashing to Elliptic Curves);
    see org.bouncycastle.crypto.hash2curve .
  - PKCS12: Added default max iteration count of 5,000,000 (configurable
    via 'org.bouncycastle.pkcs12.max_it_count' property).
  - TLS: Use javax.crypto.KEM API (when available) to access ML-KEM
    implementation (incl. hybrids).
  - A new KeyStore, PKCS12-PBMAC1, has been added which defaults to
    using PBMAC1 and supports RFC 9879.
  - A new property 'org.bouncycastle.asn1.max_cons_depth' has been added
    to allow setting of the maximum nesting for SETs/SEQUENCESs in ASN.1.
    Default is 32.
  - A new property 'org.bouncycastle.asn1.max_limit' has been added
    to allow setting of the stream size of ASN.1 encodings. The value can
    be either in bytes, or appended with k (1 kilobyte blocks), m (1
    megabyte blocks), or g (1 gigabyte blocks).
  - Added NTRU+ support to the lightweight PQC API and the BCPQC provider.
  - Added SM4 key wrap/unwrap mode, SM2 key exchange, and logging to SM2Signer.
  - OpenPGP: Added encryption-key filtering by purpose, a new OpenPGPKey
    constructor, KeyPassphraseProvider-based passphrase change, wildcard
    (anonymous) recipient handling, and Web-of-Trust methods for
    third-party signature chains and delegations.
  - CMSSignedDataStreamGenerator can now support the generation of DER/DL
    encoded SignedData objects (note memory restrictions still apply).
  - It is now possible to add extra digest alorithm IDs to
    CMSSignedDataStreamGenerator when required.
  * Defects Fixed:
  - Random numbers being generated for DSTU4145 signature calculations
    were 1 bit shorter than they could be. The code has been corrected
    to allow the generated numbers to occupy the full numeric range available.
  - HKDF implementation has been corrected to use multiple IKMs if available.
  - CompositePublic/PrivateKey builders had an issue identifying brainpool
    and EdDSA curves from the algorithm names due to an error in the OID
    mapping table. This has been fixed.
  - S/MIME: Fix AuthEnveloped support for AES192/GCM and AES256/GCM.
  - CMS: Use implicit tag for AuthEnvelopedData.authEncryptedContentInfo.encryptedContent.
  - Fixed Strings.split to handle delimiters at position 0.
  - Fixed FrodoKEM error sampling to be constant-time.
  - Fixed PKIXNameConstraintValidator to treat a DNS name as intersecting itself.
  - Fixed PKCS12 key stores not calling getInstance with the original provider
    (which was forcing provider registration).
  - A resource leak due to the SMIMESigned constructor leaving background
    threads hanging on MessagingException has been fixed.
  - OpenPGP: Fixed an issue where a custom signature creation time was
    ignored when generating message signatures.
  - OpenPGP: Fixed SKESK encoding for direct-S2K-encrypted messages.
  * Additional Notes:
  - DSA was recently deprecated by NIST and several users have requested
    that we move to an RSA signing certificate for provider signing
    instead of our current DSA one. We are grateful to report that Oracle
    have been very supportive of this and issued us a second RSA certificate
    based on a new RSA key for signing providers. Providers signed with the
    previous DSA key will continue to work as before.
  - This will be the last release which will recognise Dilithium and
    SphincsPlus in the BC provider, the Kyber wrapper (which is just ML-KEM)
    will also be removed. The algorithms won't be deleted in 1.85, but will
    only be accessible via the low-level APIs and deleted in a later release.</changelog>
</package>
<package pkgid="9bc9785738d7d97b330deaf22fab3692ac26af4123b5b418173558710f604783afc6aef772be518cafe75c69ceb65f8fbd193a54c603e751113f8eba3a1072ca" name="bovo" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * It compiles fine without qt6.9 deprecated methods
  * Add xml/yaml linting
  * Stripping '.desktop' suffix from legacy AppStream ID.
  * Add apple bundle support
  * Fix theme/icon on windows
  * Remove /Qt6 suffix
  * Add macos support
  * Add craft windows support</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="237b66aa9acf2da5e108718d031daa6888df6787afb8dd6e949e778588eccc77b268ee159dd3f7c374d52f1dc383e6be1e79d61a83a5e5c809b9916b74f75875" name="bovo-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * It compiles fine without qt6.9 deprecated methods
  * Add xml/yaml linting
  * Stripping '.desktop' suffix from legacy AppStream ID.
  * Add apple bundle support
  * Fix theme/icon on windows
  * Remove /Qt6 suffix
  * Add macos support
  * Add craft windows support</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="6dfabc92a231907e7a77584514adcf339e52957aeea4d0939250fef9952c43a77281e88d2d4fd59631fe317367a58481696528a358c797ce59d3cb334b804fef" name="bowtie" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="bp160.1.10"/>
  <changelog author="flyos@mailoo.org" date="1462449600">- Initial release</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1573128000">- Update to version 1.2.3:
  * Added support for reading and inspecting Bowtie 2 indexes.
    Bowtie 2 indexes can now be used with either Bowtie or Bowtie
    2.
  * Added support for building an index from a gzipped-compressed
    FASTA.
  * Fixed issue preventing bowtie from reporting repeated
    alignments when -M is specified.
  * Fixed issue with -F mode omitting final base of each read.
  * Fixed clipping of first letter of first read in batches after
    first.
  * Fixed an issue preventing bowtie wrapper script from finding
    indexes.
- New BuildRequires: tbb-devel.
- Fix env based hashbangs.
- Use %%license to install LICENSE.
- Only build on 64-bit, building on 32-bit is no longer supported.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589284800">- aarch64 is not yet supported on Bowtie1. See:
  https://github.com/BenLangmead/bowtie/pull/13</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1600084800">- Update to 1.3.0:
  * Fixed an issue causing bowtie to report incorrect results
    when using a Bowtie 2 index.
  * New, more efficient implementation of --reorder for
    keeping SAM output lines in same order as input reads
  * Added -x parameter for specifying index. bowtie still
    supports specifying an index via positional parameter,
    but this behavior will be deprecated.
  * Migrated python scripts to python3.
  * Fully removed colorspace functionality.
  * Added support for compiling on ARM architectures.
  * Fixed an issue preventing bowtie from outputting newlines
    in --max and --un output files.
  * Fixed an issue causing alignment results to vary based
    on read names.
  * Fixed an issue preventing --no-unal from suppressing
    unmapped reads.
  * Removed dependence on some third-party libraries,
    simplifying the code and improving portability.
  * Fix an issue preventing bowtie from running with
    many threads on big-endian machines.
- Spec cleanup
- Enable aarch64 and disable ppc* and s390x.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619092800">- Fixed SPEC file: Replaced broken URL</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652875200">- Update to version 1.3.1:
  + Fixed an overflow issue in `bowtie-build` that would sometimes
    yield corrupt "large" (64-bit) indexes; the resulting index
    would sometimes cause `bowtie` to hang. Note: `bowtie2-build`
    does not have this issue.
  + Fixed an issue in `bowtie` causing XM:i SAM optional field to
    sometimes be off by 1 when using the `-m/-M` flags.
  + Fixed an issue that would sometimes cause deadlocks in `bowtie`
    when running multithreaded.
  + Fixed an issue causing build errors when compiling against
    a pre-C++11 standard.</changelog>
</package>
<package pkgid="b5cd2cca362c5b3867c87096a814c60c6b496a477e0285faaf60749b7117839866895866a52e9aecedcc68bb139bf7221cfcd2b60b9fefe61e031ff385b29d5d" name="bowtie2" arch="x86_64">
  <version epoch="0" ver="2.5.4" rel="bp160.1.20"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602849600">- Update to version 2.4.2:
  * Fixed an issue that would cause the `bowtie2` wrapper script
    to throw an error when using wrapper-specific arguments.
  * Added new `--sam-append-comment` flag that appends comment
    from FASTA/Q read to corresponding SAM record.
  * Fixed an issue that would cause qupto, `-u`, to overflow when
    there are &gt;= 2^32 query sequences
    (gh#BenLangmead/bowtie2#312).
  * Fixed an issue that would cause bowtie2-build script to
    incorrectly process reference files.
- Drop _service file and use tagged version of simde instead (at
  version 0.6.0); correspondingly drop the obsinfo and obscpio
  files as well.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1603281600">- Actually update bowtie2 source to version 2.4.2 (fixing previous
  revision).
- Drop patches incorporated upstream:
  * bowtie2-processor_support.patch (commit ebb07cf).
  * bowtie2-cmake-install-targets.patch (commit c9d92ce).
- Package README.md file as doc.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1620993600">- Update to version 2.4.3:
  * Replaced TBB concurrency with C++ threads.
  * Added native support for processing Zstd-compressed read files
    to bowtie2.
  * Added native support for processing Zstd-compressed
    reference-genome files to bowtie2-build.
  * Fixed an issue causing `bowtie2` to report incorrect
    alignments on big-endian machines.
  * Fixed an issue causing `bowtie2` to incorrectly process BAM
    files on big-endian machines.
  * Fixed an issue causing Bowtie2 to set an incorrect MAPQ when
    AS and XS are the maximum for read length.
  * Add support for building on Apple M1 processors.
- Update simde to version 0.7.0.
- Drop BuildRequires tbb-devel: no longer required.
- RelWithDebInfo isn't supported and assumes fully unoptimised
  Debug mode; use Release mode instead by passing
  `-DCMAKE_RELEASE_TYPE=Release` to cmake.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1625227200">- Update to version 2.4.4:
  * Fixed an issue that would sometimes cause deadlocks in bowtie2
    when running multithreaded.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1642680000">- Update to version 2.4.5:
  * Fixed issues with bowtie2 BAM parser that would cause bowtie2
    to crash when processing input that was encoded with tools
    other than samtools e.g. Picard.
  * Fixed an issue causing bowtie2 to drop certain optional fields
    when when aligning BAM reads with the --preserve-tags option.
  * Fixed an issue causing bowtie2 to produce mangled SAM output
    when specifying --sam-append-comment together with the
  - -passthrough option.
  * Appended GO:query to SAM @HD entry to indicate that reads are
    grouped by query name, bump SAM version to 1.5 to indicate
    support for this change.
- Update simde to version 0.7.2.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1668945600">- Update to version 2.5.0:
  * Overall improvements in the use of prefetch instructions.
  * Made input/output fully asynchronous by using a dedicated
    thread.
  * Added support for AVX2 256-bit instructions with can be
    enabled by setting the SSE_AXV2 environment variable at
    compile time.
  * Fixed an issue causing bowtie2 to crash when processing ZSTD
    files with high compression ratios.
  * Changed the way that unique alignments are counted in summary
    message to better match up with filters on SAM output.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1674043200">- Update to version 2.5.1:
  * Fixed an issue affecting bowtie2 alignment accuracy.
  * Updated the versions of the NCBI NGS and VDB libraries used by
    bowtie2.
  * Fixed a segmentation fault that would occur while aligning SRA
    data.
  * Fixed an issue preventing --un-mates from properly saving
    unaligned mates.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697716800">- Update to version 2.5.2:
  * Fixed an issue preventing bowtie2 from utilizing the specified
    number of CPU cores.
  * Fixed an issue causing bowtie2 to segfault while parsing
    interleaved reads.
  * Overhauled the FASTQ parser with better tolerance for empty
    lines.
- Update simde to version 0.7.6.
- Allow building with LTO, do not set _lto_cflags to %{nil}.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708776000">- Update to version 2.5.3:
  * Fixed an issue causing bowtie2's memory usage to increase over
    time.
  * Fixed an issue causing bowtie2 to crash when processing empty
    FASTQ records.
  * Fixed an issue that would cause bowtie2 to erroneously treat
  - f and -F as mutually exclusive.
  * Add optional support for libsais to bowtie2-build for faster
    index building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1723032000">- Update to version 2.5.4:
  * Added --sam-opt-config command line option for toggling SAM
    Opt flags.
  * Fixed an issue causing bowtie2’s memory usage to increase over
    time when aligning BAM files.
  * Changed bowtie2 to continue flushing output in the event of a
    partial write.
  * Changed the behavior of bowtie2-build to throw an exception if
    it is unable to write the BWT (.1.bt2, .1.rev.bt2). In prior
    versions bowtie2-build, would silently ignore the error which
    has led some to report the absence of the BWT files in a
    “completed” index build.
  * Reverted the changes made in v2.5.0 that sometimes caused
    unique concordant alignments to be overcounted.</changelog>
</package>
<package pkgid="964a231af934a41300c006ca40947685f5afb606cea75eac99e654eb6203c71ac255fde5cc40d91058d76c34a078fe61cca6735107003dd9cf298ff83ab8391e" name="boxfort" arch="x86_64">
  <version epoch="0" ver="0.1.4" rel="bp160.1.11"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672833600">- Initial OBS release (0.1.4).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674993600">- Ensure neutrality of descriptions.</changelog>
</package>
<package pkgid="ecaf3ab8584e1897e5cab6f0d37e767174a58351dc38922bd30d77826be32bf79d6d810bab67468cdd384bc3b57ff2a843ae3a74583675ee6670119e55d956c5" name="boxfort-devel" arch="x86_64">
  <version epoch="0" ver="0.1.4" rel="bp160.1.11"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672833600">- Initial OBS release (0.1.4).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674993600">- Ensure neutrality of descriptions.</changelog>
</package>
<package pkgid="c5874188a21c28c3f76abb94b7e77ac4b314820c8a1768f2f5eb7beac553d9e98f868140d3184e5f608c2855313695e4fe13eced0330894336b341a2b5ac421b" name="bpf2go" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="160000.2.2"/>
  <changelog author="jkowalczyk@suse.com" date="1727265600">- Initial package version 0.16.0:
  * map: remove misleading error message when creating without BTF
  * btf: fix panic when copying nil Type
  * program: deprecate LogSize and VerifierError.Truncated
  * map: do not allocate on lookup when key doesn't exist
  * fix a variety of Copy() problems
  * perf: do not add offline CPUs
  * info: make it harder to add backwards incompatible API
  * link: fix nil pointer dereference in AttachXDP
  * map: fix flaky TestMapIteratorAllocations
  * perf: fix panic when CPU is offline
  * cmd/bpf2go: make Nick Zavaritsky a reviewer
  * build(deps): bump certifi from 2024.6.2 to 2024.7.4 in /docs
  * program, btf: probe correct log buffer size
  * ci: fix golangci-lint
  * link: allow pinning uprobe multi links
  * build(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in /docs
  * link: allow pinning perf event based links
  * bpf2go: export targets
  * bpf2go: export compilation
  * bpf2go: export binding generator
  * perf: rearrange fields to make locking of Reader clearer
  * perf, ringbuf: add Flush for manual Read/ReadInto wakeup
  * ringbuf: fix ring size reporting
  * docs: fix clipped headline on home page
  * examples: add tcx example
  * build(deps): bump urllib3 from 2.2.1 to 2.2.2 in /docs
  * map: add Map.Handle() method for retrieving a Map's type information
  * gh: try to group dependabot updates
  * map: fix TestMapBatch failing with ENOSPC for hash maps
  * build(deps): bump mkdocs-git-revision-date-localized-plugin in /docs
  * build(deps): bump mkdocs-git-authors-plugin from 0.8.0 to 0.9.0 in /docs
  * build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1
  * build(deps): bump mkdocs-material from 9.5.20 to 9.5.26 in /docs
  * docs: add a section on examples
  * elf: turn BTF map_extra into ErrNotSupported
  * program: add RecursionMisses to access ProgramInfo recursion misses counter
  * link: add Info() method to all link types
  * ci: use stable-selftests tag
  * ci: debug sporadic vimto hang
  * link: add test suite for netkit
  * perf_event_open cpu should be -1 for valid PID
  * link: allow retrieving perf event file descriptor
  * perf: flush Record when deadline is exceeded
  * perf: opportunistically check all rings for data
  * epoll: fix eventFd.add
  * epoll: simplify timeout calculation
  * ci: ignore kprobe_multi test failures on arm64
  * ci: test against stable and mainline
  * ci: replace virtme with vimto
  * build(deps): bump jinja2 from 3.1.3 to 3.1.4 in /docs
  * build(deps): bump mkdocs-git-revision-date-localized-plugin in /docs
  * build(deps): bump mkdocs-material from 9.5.16 to 9.5.20 in /docs
  * build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.1.0
  * build(deps): bump mkdocs from 1.5.3 to 1.6.0 in /docs
  * CI: switch from 6.7 to 6.8
  * features: Fix test `TestHaveProgramType/Extension` in kernel &gt;=v6.8
  * gh: don't use code blocks in Bug report template
  * [go.mod] Change `go` directive to `1.21`
  * perf: clean up error handling and bare fds</changelog>
</package>
<package pkgid="d7809ba604492c4a835607143e614a29ec06784e2bcee6eb65ebc7853fb01e1e43e9903b2a5a088593c133ed6b1fcce0db85e60465a309ad32526f3d13eef573" name="bpfmon" arch="x86_64">
  <version epoch="0" ver="2.52" rel="bp160.1.13"/>
  <changelog author="Jonathan Papineau &lt;jonathan@jontech.app&gt;" date="1642593600">- Initial packaging of bpfmon 2.50</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675598400">- bpfmon 2.51:
  * support latest yascreen
- add upstream signing key and verify signature</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700136000">- update to 2.52:
  * Implements proper handling of sending to background and back</changelog>
</package>
<package pkgid="9e0a7853fa7a5c724615ea28d4c8bd8b6032244fe9fdc03077ba31632fefa410d688ed33ff9947e3a206551d6b22e74b5feee58df5807f13256eff42529e565c" name="bpftool" arch="x86_64">
  <version epoch="0" ver="7.5.0" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1676462400">- Add binutils-2.40.patch where we need to explicitly link against
  - lsframe. It's a workaround for an existing issue:
  https://github.com/libbpf/bpftool/issues/73.</changelog>
  <changelog author="mliska@suse.cz" date="1677067200">- Rebase binutils-2.40.patch for v6.2.</changelog>
  <changelog author="mliska@suse.cz" date="1677672000">- Add -lzstd as libbfd is linked against the compression library.</changelog>
  <changelog author="msuchanek@suse.com" date="1680091200">- Update to out-of-tree version 7.2.0
- Use release tarball that includes the specific copy of libbpf that is needed
  to build bpftool
- Fix build on Linux 5.14
  + 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  + 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  + 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  + 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1701172800">- Update to version 7.3.0
  * deprecate keyword "dev" for specifying interface name, use
    offload_dev instead
  * support passing an interface name with xdpmeta_dev &lt;ifname&gt;
    with "prog load"
  * show more details information when displaying BPF links
  * show netfilter, tcx, and netkit information in the "net list"
  * support cgroup UNIX socket attach points
  * show inner map IDs (instead of raw values) with "map dump"
  * support LLVM's v4 instructions in the disassembler
  * fix JIT compiler global memory limit report for unprivileged
    users on aarch64
- Remove backported patches that have been included in v7.3.0
  * drop 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  * drop 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  * drop 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  * drop 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 7.4.0
  * Kernel configuration options related to bpfilter (namely: CONFIG_BPFILTER
  * and CONFIG_BPFILTER_UMH) are no longer checked with bpftool feature probe
  * More information displayed for BPF links
  * Generate shadow variables for struct_ops maps in program skeletons
  * Mark orphaned programs as such when listing programs
  * Recognize arena map types (a09e203) and global variables
  * Support the addr_space_cast instruction in the disassembler for translated
    programs
  * In the mirror repository, fix the detection of clang-bpf-co-re (for
    skeletons support) for some clang versions
  * Displaying PIDs for processes holding references to BPF links when listing
    links with bpftool link list on older kernels broke in v7.3.0, because the
    internal program pid_iter would fail to load</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Update LLVM version selection logic to align with bcc and bpftrace
  * narrow down the dependency to clang and llvm</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- Update to version 7.5.0
  * Add support for attaching and detaching tcx programs with bpftool net,
    along with relevant documentation and bash completion.
  * When dumping BTF information, support dumping kfunc prototypes. Users
    willing to use kfunc no longer have to define the prototypes themselves,
    then can use the generated header file. This is also convenient to check
    what kfuncs are available in the running kernel.
  * Sort the output from the dump, in C format, of BTF objects. Sorting the
    output helps applying diff tools on the generated header files, and helps
    generate a more natural ordering in the header.
  * Print richer information when dumping sockmap links.
  * In BPF skeletons, auto-attach struct_ops BPF maps as part of
    &lt;skeleton&gt;__attach(), define BPF_SKEL_SUPPORTS_MAP_AUTO_ATTACH accordingly.
  * Improvements in libbpf bring the ability to open and work with object files
    in either endianness for some operations like object linking or light BPF
    skeleton creation.
  * Bpftool automatically mounts the BPF virtual file system (bpffs) when
    necessary, for example to pin programs. This bpffs was mounted on the
    parent directory for the provided path under certain circumstances. Now
    bpftool mounts the bpffs on the provided path instead, as expected.
  * When loading programs and trying to pin the maps, attempt to mount the
    bpffs when the provided path for the maps is not under an existing bpffs
    already, as bpftool usually does for other similar commands.
  * Use __typeof__() rather than typeof() in BPF skeleton, to improve
    compatibility with C++.
  * Fix cgroup-related queries to avoid trying to dump (inaccessible)
    Netkit-related information.
  * Fix backward compatibility issue related to struct_ops maps handling for
    BPF skeletons used with older versions of libbpf.
  * Many trivial improvements to bpftool's documentation and bash completion,
    such as formatting fixes, typo fixes, or minor clarifications.
  * Fix typos in error message and usage help message.</changelog>
  <changelog author="christophe@krop.fr" date="1740484800">- Simplify the LLVM version conditions</changelog>
  <changelog author="bwiedemann@suse.com" date="1748174400">- Change .spec to not write files</changelog>
</package>
<package pkgid="07460e4ab7f871e765ddaac762e9526867bb55bc09aa0e57e26c7dd426c73b6d0fbe9679bb71accc0c03b149bd44ae7efd88b17d315254232430bf1a8547334b" name="bpftool" arch="x86_64">
  <version epoch="0" ver="7.5.0" rel="160000.2.3"/>
  <changelog author="mliska@suse.cz" date="1676462400">- Add binutils-2.40.patch where we need to explicitly link against
  - lsframe. It's a workaround for an existing issue:
  https://github.com/libbpf/bpftool/issues/73.</changelog>
  <changelog author="mliska@suse.cz" date="1677067200">- Rebase binutils-2.40.patch for v6.2.</changelog>
  <changelog author="mliska@suse.cz" date="1677672000">- Add -lzstd as libbfd is linked against the compression library.</changelog>
  <changelog author="msuchanek@suse.com" date="1680091200">- Update to out-of-tree version 7.2.0
- Use release tarball that includes the specific copy of libbpf that is needed
  to build bpftool
- Fix build on Linux 5.14
  + 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  + 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  + 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  + 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1701172800">- Update to version 7.3.0
  * deprecate keyword "dev" for specifying interface name, use
    offload_dev instead
  * support passing an interface name with xdpmeta_dev &lt;ifname&gt;
    with "prog load"
  * show more details information when displaying BPF links
  * show netfilter, tcx, and netkit information in the "net list"
  * support cgroup UNIX socket attach points
  * show inner map IDs (instead of raw values) with "map dump"
  * support LLVM's v4 instructions in the disassembler
  * fix JIT compiler global memory limit report for unprivileged
    users on aarch64
- Remove backported patches that have been included in v7.3.0
  * drop 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  * drop 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  * drop 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  * drop 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 7.4.0
  * Kernel configuration options related to bpfilter (namely: CONFIG_BPFILTER
  * and CONFIG_BPFILTER_UMH) are no longer checked with bpftool feature probe
  * More information displayed for BPF links
  * Generate shadow variables for struct_ops maps in program skeletons
  * Mark orphaned programs as such when listing programs
  * Recognize arena map types (a09e203) and global variables
  * Support the addr_space_cast instruction in the disassembler for translated
    programs
  * In the mirror repository, fix the detection of clang-bpf-co-re (for
    skeletons support) for some clang versions
  * Displaying PIDs for processes holding references to BPF links when listing
    links with bpftool link list on older kernels broke in v7.3.0, because the
    internal program pid_iter would fail to load</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Update LLVM version selection logic to align with bcc and bpftrace
  * narrow down the dependency to clang and llvm</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- Update to version 7.5.0
  * Add support for attaching and detaching tcx programs with bpftool net,
    along with relevant documentation and bash completion.
  * When dumping BTF information, support dumping kfunc prototypes. Users
    willing to use kfunc no longer have to define the prototypes themselves,
    then can use the generated header file. This is also convenient to check
    what kfuncs are available in the running kernel.
  * Sort the output from the dump, in C format, of BTF objects. Sorting the
    output helps applying diff tools on the generated header files, and helps
    generate a more natural ordering in the header.
  * Print richer information when dumping sockmap links.
  * In BPF skeletons, auto-attach struct_ops BPF maps as part of
    &lt;skeleton&gt;__attach(), define BPF_SKEL_SUPPORTS_MAP_AUTO_ATTACH accordingly.
  * Improvements in libbpf bring the ability to open and work with object files
    in either endianness for some operations like object linking or light BPF
    skeleton creation.
  * Bpftool automatically mounts the BPF virtual file system (bpffs) when
    necessary, for example to pin programs. This bpffs was mounted on the
    parent directory for the provided path under certain circumstances. Now
    bpftool mounts the bpffs on the provided path instead, as expected.
  * When loading programs and trying to pin the maps, attempt to mount the
    bpffs when the provided path for the maps is not under an existing bpffs
    already, as bpftool usually does for other similar commands.
  * Use __typeof__() rather than typeof() in BPF skeleton, to improve
    compatibility with C++.
  * Fix cgroup-related queries to avoid trying to dump (inaccessible)
    Netkit-related information.
  * Fix backward compatibility issue related to struct_ops maps handling for
    BPF skeletons used with older versions of libbpf.
  * Many trivial improvements to bpftool's documentation and bash completion,
    such as formatting fixes, typo fixes, or minor clarifications.
  * Fix typos in error message and usage help message.</changelog>
  <changelog author="christophe@krop.fr" date="1740484800">- Simplify the LLVM version conditions</changelog>
  <changelog author="bwiedemann@suse.com" date="1748174400">- Change .spec to not write files</changelog>
</package>
<package pkgid="930481a116cbfbcc056eb19f63593c9935fd08623f6914f5b24e49550ac69f135f1aff9c2b35e3f55e668bae89d74934c8157fcd9fbc258a15b551c5d544d6ac" name="bpftool-bash-completion" arch="x86_64">
  <version epoch="0" ver="7.5.0" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1676462400">- Add binutils-2.40.patch where we need to explicitly link against
  - lsframe. It's a workaround for an existing issue:
  https://github.com/libbpf/bpftool/issues/73.</changelog>
  <changelog author="mliska@suse.cz" date="1677067200">- Rebase binutils-2.40.patch for v6.2.</changelog>
  <changelog author="mliska@suse.cz" date="1677672000">- Add -lzstd as libbfd is linked against the compression library.</changelog>
  <changelog author="msuchanek@suse.com" date="1680091200">- Update to out-of-tree version 7.2.0
- Use release tarball that includes the specific copy of libbpf that is needed
  to build bpftool
- Fix build on Linux 5.14
  + 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  + 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  + 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  + 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1701172800">- Update to version 7.3.0
  * deprecate keyword "dev" for specifying interface name, use
    offload_dev instead
  * support passing an interface name with xdpmeta_dev &lt;ifname&gt;
    with "prog load"
  * show more details information when displaying BPF links
  * show netfilter, tcx, and netkit information in the "net list"
  * support cgroup UNIX socket attach points
  * show inner map IDs (instead of raw values) with "map dump"
  * support LLVM's v4 instructions in the disassembler
  * fix JIT compiler global memory limit report for unprivileged
    users on aarch64
- Remove backported patches that have been included in v7.3.0
  * drop 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  * drop 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  * drop 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  * drop 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 7.4.0
  * Kernel configuration options related to bpfilter (namely: CONFIG_BPFILTER
  * and CONFIG_BPFILTER_UMH) are no longer checked with bpftool feature probe
  * More information displayed for BPF links
  * Generate shadow variables for struct_ops maps in program skeletons
  * Mark orphaned programs as such when listing programs
  * Recognize arena map types (a09e203) and global variables
  * Support the addr_space_cast instruction in the disassembler for translated
    programs
  * In the mirror repository, fix the detection of clang-bpf-co-re (for
    skeletons support) for some clang versions
  * Displaying PIDs for processes holding references to BPF links when listing
    links with bpftool link list on older kernels broke in v7.3.0, because the
    internal program pid_iter would fail to load</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Update LLVM version selection logic to align with bcc and bpftrace
  * narrow down the dependency to clang and llvm</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- Update to version 7.5.0
  * Add support for attaching and detaching tcx programs with bpftool net,
    along with relevant documentation and bash completion.
  * When dumping BTF information, support dumping kfunc prototypes. Users
    willing to use kfunc no longer have to define the prototypes themselves,
    then can use the generated header file. This is also convenient to check
    what kfuncs are available in the running kernel.
  * Sort the output from the dump, in C format, of BTF objects. Sorting the
    output helps applying diff tools on the generated header files, and helps
    generate a more natural ordering in the header.
  * Print richer information when dumping sockmap links.
  * In BPF skeletons, auto-attach struct_ops BPF maps as part of
    &lt;skeleton&gt;__attach(), define BPF_SKEL_SUPPORTS_MAP_AUTO_ATTACH accordingly.
  * Improvements in libbpf bring the ability to open and work with object files
    in either endianness for some operations like object linking or light BPF
    skeleton creation.
  * Bpftool automatically mounts the BPF virtual file system (bpffs) when
    necessary, for example to pin programs. This bpffs was mounted on the
    parent directory for the provided path under certain circumstances. Now
    bpftool mounts the bpffs on the provided path instead, as expected.
  * When loading programs and trying to pin the maps, attempt to mount the
    bpffs when the provided path for the maps is not under an existing bpffs
    already, as bpftool usually does for other similar commands.
  * Use __typeof__() rather than typeof() in BPF skeleton, to improve
    compatibility with C++.
  * Fix cgroup-related queries to avoid trying to dump (inaccessible)
    Netkit-related information.
  * Fix backward compatibility issue related to struct_ops maps handling for
    BPF skeletons used with older versions of libbpf.
  * Many trivial improvements to bpftool's documentation and bash completion,
    such as formatting fixes, typo fixes, or minor clarifications.
  * Fix typos in error message and usage help message.</changelog>
  <changelog author="christophe@krop.fr" date="1740484800">- Simplify the LLVM version conditions</changelog>
  <changelog author="bwiedemann@suse.com" date="1748174400">- Change .spec to not write files</changelog>
</package>
<package pkgid="1a2526ec785c6db8b43b0f577744f3573b71beef74f8ad0ed3ba152523e45bc5a629010a2613dc122f1d060a20ae6ca7a0ae5cd628279afa87715120cfb97fd0" name="bpftool-bash-completion" arch="x86_64">
  <version epoch="0" ver="7.5.0" rel="160000.2.3"/>
  <changelog author="mliska@suse.cz" date="1676462400">- Add binutils-2.40.patch where we need to explicitly link against
  - lsframe. It's a workaround for an existing issue:
  https://github.com/libbpf/bpftool/issues/73.</changelog>
  <changelog author="mliska@suse.cz" date="1677067200">- Rebase binutils-2.40.patch for v6.2.</changelog>
  <changelog author="mliska@suse.cz" date="1677672000">- Add -lzstd as libbfd is linked against the compression library.</changelog>
  <changelog author="msuchanek@suse.com" date="1680091200">- Update to out-of-tree version 7.2.0
- Use release tarball that includes the specific copy of libbpf that is needed
  to build bpftool
- Fix build on Linux 5.14
  + 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  + 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  + 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  + 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1701172800">- Update to version 7.3.0
  * deprecate keyword "dev" for specifying interface name, use
    offload_dev instead
  * support passing an interface name with xdpmeta_dev &lt;ifname&gt;
    with "prog load"
  * show more details information when displaying BPF links
  * show netfilter, tcx, and netkit information in the "net list"
  * support cgroup UNIX socket attach points
  * show inner map IDs (instead of raw values) with "map dump"
  * support LLVM's v4 instructions in the disassembler
  * fix JIT compiler global memory limit report for unprivileged
    users on aarch64
- Remove backported patches that have been included in v7.3.0
  * drop 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
  * drop 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
  * drop 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
  * drop 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 7.4.0
  * Kernel configuration options related to bpfilter (namely: CONFIG_BPFILTER
  * and CONFIG_BPFILTER_UMH) are no longer checked with bpftool feature probe
  * More information displayed for BPF links
  * Generate shadow variables for struct_ops maps in program skeletons
  * Mark orphaned programs as such when listing programs
  * Recognize arena map types (a09e203) and global variables
  * Support the addr_space_cast instruction in the disassembler for translated
    programs
  * In the mirror repository, fix the detection of clang-bpf-co-re (for
    skeletons support) for some clang versions
  * Displaying PIDs for processes holding references to BPF links when listing
    links with bpftool link list on older kernels broke in v7.3.0, because the
    internal program pid_iter would fail to load</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Update LLVM version selection logic to align with bcc and bpftrace
  * narrow down the dependency to clang and llvm</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1730289600">- Update to version 7.5.0
  * Add support for attaching and detaching tcx programs with bpftool net,
    along with relevant documentation and bash completion.
  * When dumping BTF information, support dumping kfunc prototypes. Users
    willing to use kfunc no longer have to define the prototypes themselves,
    then can use the generated header file. This is also convenient to check
    what kfuncs are available in the running kernel.
  * Sort the output from the dump, in C format, of BTF objects. Sorting the
    output helps applying diff tools on the generated header files, and helps
    generate a more natural ordering in the header.
  * Print richer information when dumping sockmap links.
  * In BPF skeletons, auto-attach struct_ops BPF maps as part of
    &lt;skeleton&gt;__attach(), define BPF_SKEL_SUPPORTS_MAP_AUTO_ATTACH accordingly.
  * Improvements in libbpf bring the ability to open and work with object files
    in either endianness for some operations like object linking or light BPF
    skeleton creation.
  * Bpftool automatically mounts the BPF virtual file system (bpffs) when
    necessary, for example to pin programs. This bpffs was mounted on the
    parent directory for the provided path under certain circumstances. Now
    bpftool mounts the bpffs on the provided path instead, as expected.
  * When loading programs and trying to pin the maps, attempt to mount the
    bpffs when the provided path for the maps is not under an existing bpffs
    already, as bpftool usually does for other similar commands.
  * Use __typeof__() rather than typeof() in BPF skeleton, to improve
    compatibility with C++.
  * Fix cgroup-related queries to avoid trying to dump (inaccessible)
    Netkit-related information.
  * Fix backward compatibility issue related to struct_ops maps handling for
    BPF skeletons used with older versions of libbpf.
  * Many trivial improvements to bpftool's documentation and bash completion,
    such as formatting fixes, typo fixes, or minor clarifications.
  * Fix typos in error message and usage help message.</changelog>
  <changelog author="christophe@krop.fr" date="1740484800">- Simplify the LLVM version conditions</changelog>
  <changelog author="bwiedemann@suse.com" date="1748174400">- Change .spec to not write files</changelog>
</package>
<package pkgid="37a72b7a98a1e5f4919194856de99e4e3e0fdd4250c72473958cec3530007f49f2398a2c175ac42dbc5a1cc0d4eeab6a80264278354c3f0ada165ba97e30b346" name="bpftop" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1743854400">- initial version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755777600">- Update to version 0.7.0:
  * Customizable refresh rate: Added -d/--delay option to set
    screen refresh rate in seconds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Update to version 0.7.1:
  * CVE-2025-58160: Update tracing-subscriber to version 0.3.20
    (boo#1249007)
  * The BPF iterator program that tracks which process loaded each
    BPF program now fails gracefully instead of preventing bpftop
    from starting</changelog>
</package>
<package pkgid="46ba3d28bb39d8dc03446ac342c96e803d15b790948fdecd439bbfed5ebb90c8f3d7237d3bc51e3da4ef98717a741c5e7950c6c0a23d4ed2afdeb55b00e60cc6" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.23.5" rel="160000.1.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Update to 0.20.4
  * Drop the kernel headers unpack and caching feature</changelog>
  <changelog author="asarai@suse.com" date="1729771200">- Update to 0.21.2.
  + Add lazy_symbolication config option.
  + Add ability to list all probes in a program.
  + Add ability to call print() with indexed maps to print single map values.
  + Add LLVM 18 support.
  + Add ability to call delete() with multiple arguments.
  + Add for-each loops for iterating over map elements.
  + Add optional systemd support.
  + Add ability to attach uprobes to inlined functions.
  + Enable count, sum, min, and max map reads in kernel space.
  + Add config option for handling missing probes.
  * Better error message for args in mixed probes.
  * Improve DWARF support, using liblldb instead of libdw.
  * Use new hash function to reduce collisions when aggregating on stack
    traces.
  * Disable func builtin for kretprobes and uretprobes when get_func_ip feature
    is not available.
  * Move error printing from debug to verbose mode.
  * Allow attaching to spin_lock functions with mitigations to prevent
    deadlocks.
  * Remove length limitations for strings coming out of str() and path().
  - Deprecate sarg builtin.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1730289600">- Switch to gcc for compilation (bsc#1219008)</changelog>
  <changelog author="pvorel@suse.cz" date="1730462400">- Backport fix for tools/bashreadline.bt needed for openQA testing
  (bsc#1232536)
  0001-tools-bashreadline-fix-probe-for-dynamically-linked-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1731326400">- Use clang for build in Factory.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Update to 0.21.3
  * Fix alignment issue for multi-key maps</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1735214400">- Support building with LLVM 19
  * add 0002-Drop-support-for-LLVM-12-and-below.patch
  * add 0003-cmake-Allow-any-LLVM-release-for-debug-builds.patch
  * add 0004-Bump-max-LLVM-version-to-19-3433.patch
- Default to LLVM 19 in Factory and SLE15-SP7</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1743076800">- Fix runqlen tool to work on 6.14 kernel (bsc#1239774)
  * add 0001-tools-runqlen.bt-rename-nr_running-to-nr_queued.patch
- Update to 0.23.0
  * Breaking Changes
  * Remove '-kk' command line opt, surface some BPF errors by
    default, and make '-k' surface probe read errors
  * Added
  * offsetof() now supports sub fields
    e.g. offsetof(struct Foo, bar.a.b);
  * Pointers may now be used in if conditions, tenary conditions and
    as operands in logical AND and OR expressions
  * len now also accepts ustack and kstack as arguments
  * Add ability to cast int to an enum
  * Added warning when strcontains() is used on strings that are too
    big and may cause verifier issues
  * Add support for LLVM 20
  * Changed
  * probe builtin is now represented as a string type
  * Change bpftrace help flag output from stderr to stdout
  * Change max_strlen default from 64 to 1024
  * Add feature check for castable map reads
  * Increase default values for max_bpf_progs and max_probes
  * Allow use of variables before they are assigned
  * Removed
  * Drop support for LLVM 14 and 15
  * Fixed
  * Fix json output for none type
  * Fix bug where strftime() %f specifier could be off by up to 1s
  * Fix pid, tid and ustack when running bpftrace in containers with
    PID namespacing
  * Do not generate functions for empty attach points
  * Fix ternary expression to accept all types
  * Fix feature detection for tracing program types
  * Fix strcontains() correctness bug where matches could be lost if
    both strings are non-literal
  * Fix str() bug where optional size parameter did not count
    towards NUL terminator
  * Tools
  * Fix dcsnoop.bt on newer kernels
- Update to 0.22.1
  * Fixed
  * Do not generate functions for empty attach points
  * Tools
  * Switch all bio* tools to tracepoints
  * Fix dcsnoop.bt on newer kernels
- Update to 0.22.0
  * Breaking Changes
  * Return uint32 instead of uint64 for pid and tid builtins
  * Remove multi-map delete functionality
  * Add lexical/block scoping for variables
  * Replace default map printing on SIGUSR1 with custom signal
    handling probes
  * Added
  * Bump max supported LLVM version to 19
  * drop 0002-Drop-support-for-LLVM-12-and-below.patch
  * drop 0003-cmake-Allow-any-LLVM-release-for-debug-builds.patch
  * drop 0004-Bump-max-LLVM-version-to-19-3433.patch
  * Add --dry-run CLI option
  * Enable avg map reads in kernel space (implicit casting)
  * Enable for-loops in multiple probes
  * For-loops: Allow sharing variables between the main probe and
    the loop's body
  * Parse C++ Class and Inheritance from Debug Info
  * Add an optional size parameter to path
  * Allow tuples to be used as map keys
  * Add has_key function for maps
  * Add ability to attach kprobes to inlined functions
  * Variable declarations with let
  * Support symbolizing enum values using %s specifier in printf()
  * Configuration option to suppress printing maps by default at
    program exit
  * Add symbol_source config to source uprobe locations from either
    DWARF or the Symbol Table
  * Introduce builtin to access percpu kernel data
  * Changed
  * Merge output into stdout when -lv
  * Stream output when printing maps
  * Only print kernel headers not found message if parsing fails
  * Add mandatory "stage" argument to the -d CLI option
  * Allow simultaneous use of -v and -d
  * Remove length limitations for the buf builtin function
  * Change delete API to accept a map and key as separate args
  * Symbolize enums when used in maps
  * Removed
  * Remove the -dd CLI option
  * Drop support for LLVM 12 and below
  * Remove ALLOW_UNSAFE_PROBE compiler flag
  * Fixed
  * Fix verifier error when array indexing through pointer
  * Fix segfault for multi-tracepoint probes
  * Fix verifier error from misaligned stack access when using
    strings as map keys
  * Fix min/max map functions
  * Fix stack mode for stack builtin
  * Fix lldb support in appimage builds
  * Fix parsing large unsigned int strings as positional params
  * Fix json formatting for strftime function
  * Fix BTF/DWARF parsing for structs contained in arrays
  * Fix integer comparisons and auto casting for scratch variables
  * Fix tuple resizing
  * Handle invalid BTF without crashing
  * Fix json formatting for hex values
  * Fix binary operations on integers always returning 64 bit values
  * Fix verifier error when comparing result of len()
  * Fix type back propagation for map keys
  * Fix crash by adding checks for bad var/map assignments
  * Fix field access and offsetof for strings that are builtin types
  * Fix crash when using castable per-cpu map types as map keys
  * Fix loop values with per-cpu aggregations
  * Docs
  * Remove mention of unsupported character literals
  * Tools
  * Fix bashreadline tool probe for dynamically linked readline and drop
    0001-tools-bashreadline-fix-probe-for-dynamically-linked-.patch
- Bump maximum support LLVM version to 20</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to 0.23.1
  * Fix build failures due to missing location.hh</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to 0.23.5
  * Fix 32-bit build failures due to missing cast
  * Fix biosnoop.bt to print comm from block_io_start probe
  * Fix per-cpu map update warning
  * Fix probe firing order for fexit and software
  * Fix execution watchpoints
  * Fix runqlen.bt script (bsc#1239774)
  * Reduce delete warnings in runqlat.bt
  * Fix crashes if kernel is built without PID namespaces
  * Fix kstack/ustack on big-endian systems
- Drop 0001-tools-runqlen.bt-rename-nr_running-to-nr_queued.patch
  which is included since 0.23.3</changelog>
</package>
<package pkgid="120c06fc8ed5d94d5b211ec43be4f0b09db11d0e8c9e381e2165fb97d17f581c36d1f404a3195e2c05c7d0e5ea04e3043753e20951bc2bc91f6ec8d4de65df12" name="bpftrace-tools" arch="noarch">
  <version epoch="0" ver="0.23.5" rel="160000.1.2"/>
  <changelog author="shung-hsi.yu@suse.com" date="1716379200">- Update to 0.20.4
  * Drop the kernel headers unpack and caching feature</changelog>
  <changelog author="asarai@suse.com" date="1729771200">- Update to 0.21.2.
  + Add lazy_symbolication config option.
  + Add ability to list all probes in a program.
  + Add ability to call print() with indexed maps to print single map values.
  + Add LLVM 18 support.
  + Add ability to call delete() with multiple arguments.
  + Add for-each loops for iterating over map elements.
  + Add optional systemd support.
  + Add ability to attach uprobes to inlined functions.
  + Enable count, sum, min, and max map reads in kernel space.
  + Add config option for handling missing probes.
  * Better error message for args in mixed probes.
  * Improve DWARF support, using liblldb instead of libdw.
  * Use new hash function to reduce collisions when aggregating on stack
    traces.
  * Disable func builtin for kretprobes and uretprobes when get_func_ip feature
    is not available.
  * Move error printing from debug to verbose mode.
  * Allow attaching to spin_lock functions with mitigations to prevent
    deadlocks.
  * Remove length limitations for strings coming out of str() and path().
  - Deprecate sarg builtin.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1730289600">- Switch to gcc for compilation (bsc#1219008)</changelog>
  <changelog author="pvorel@suse.cz" date="1730462400">- Backport fix for tools/bashreadline.bt needed for openQA testing
  (bsc#1232536)
  0001-tools-bashreadline-fix-probe-for-dynamically-linked-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1731326400">- Use clang for build in Factory.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1734523200">- Update to 0.21.3
  * Fix alignment issue for multi-key maps</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1735214400">- Support building with LLVM 19
  * add 0002-Drop-support-for-LLVM-12-and-below.patch
  * add 0003-cmake-Allow-any-LLVM-release-for-debug-builds.patch
  * add 0004-Bump-max-LLVM-version-to-19-3433.patch
- Default to LLVM 19 in Factory and SLE15-SP7</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1743076800">- Fix runqlen tool to work on 6.14 kernel (bsc#1239774)
  * add 0001-tools-runqlen.bt-rename-nr_running-to-nr_queued.patch
- Update to 0.23.0
  * Breaking Changes
  * Remove '-kk' command line opt, surface some BPF errors by
    default, and make '-k' surface probe read errors
  * Added
  * offsetof() now supports sub fields
    e.g. offsetof(struct Foo, bar.a.b);
  * Pointers may now be used in if conditions, tenary conditions and
    as operands in logical AND and OR expressions
  * len now also accepts ustack and kstack as arguments
  * Add ability to cast int to an enum
  * Added warning when strcontains() is used on strings that are too
    big and may cause verifier issues
  * Add support for LLVM 20
  * Changed
  * probe builtin is now represented as a string type
  * Change bpftrace help flag output from stderr to stdout
  * Change max_strlen default from 64 to 1024
  * Add feature check for castable map reads
  * Increase default values for max_bpf_progs and max_probes
  * Allow use of variables before they are assigned
  * Removed
  * Drop support for LLVM 14 and 15
  * Fixed
  * Fix json output for none type
  * Fix bug where strftime() %f specifier could be off by up to 1s
  * Fix pid, tid and ustack when running bpftrace in containers with
    PID namespacing
  * Do not generate functions for empty attach points
  * Fix ternary expression to accept all types
  * Fix feature detection for tracing program types
  * Fix strcontains() correctness bug where matches could be lost if
    both strings are non-literal
  * Fix str() bug where optional size parameter did not count
    towards NUL terminator
  * Tools
  * Fix dcsnoop.bt on newer kernels
- Update to 0.22.1
  * Fixed
  * Do not generate functions for empty attach points
  * Tools
  * Switch all bio* tools to tracepoints
  * Fix dcsnoop.bt on newer kernels
- Update to 0.22.0
  * Breaking Changes
  * Return uint32 instead of uint64 for pid and tid builtins
  * Remove multi-map delete functionality
  * Add lexical/block scoping for variables
  * Replace default map printing on SIGUSR1 with custom signal
    handling probes
  * Added
  * Bump max supported LLVM version to 19
  * drop 0002-Drop-support-for-LLVM-12-and-below.patch
  * drop 0003-cmake-Allow-any-LLVM-release-for-debug-builds.patch
  * drop 0004-Bump-max-LLVM-version-to-19-3433.patch
  * Add --dry-run CLI option
  * Enable avg map reads in kernel space (implicit casting)
  * Enable for-loops in multiple probes
  * For-loops: Allow sharing variables between the main probe and
    the loop's body
  * Parse C++ Class and Inheritance from Debug Info
  * Add an optional size parameter to path
  * Allow tuples to be used as map keys
  * Add has_key function for maps
  * Add ability to attach kprobes to inlined functions
  * Variable declarations with let
  * Support symbolizing enum values using %s specifier in printf()
  * Configuration option to suppress printing maps by default at
    program exit
  * Add symbol_source config to source uprobe locations from either
    DWARF or the Symbol Table
  * Introduce builtin to access percpu kernel data
  * Changed
  * Merge output into stdout when -lv
  * Stream output when printing maps
  * Only print kernel headers not found message if parsing fails
  * Add mandatory "stage" argument to the -d CLI option
  * Allow simultaneous use of -v and -d
  * Remove length limitations for the buf builtin function
  * Change delete API to accept a map and key as separate args
  * Symbolize enums when used in maps
  * Removed
  * Remove the -dd CLI option
  * Drop support for LLVM 12 and below
  * Remove ALLOW_UNSAFE_PROBE compiler flag
  * Fixed
  * Fix verifier error when array indexing through pointer
  * Fix segfault for multi-tracepoint probes
  * Fix verifier error from misaligned stack access when using
    strings as map keys
  * Fix min/max map functions
  * Fix stack mode for stack builtin
  * Fix lldb support in appimage builds
  * Fix parsing large unsigned int strings as positional params
  * Fix json formatting for strftime function
  * Fix BTF/DWARF parsing for structs contained in arrays
  * Fix integer comparisons and auto casting for scratch variables
  * Fix tuple resizing
  * Handle invalid BTF without crashing
  * Fix json formatting for hex values
  * Fix binary operations on integers always returning 64 bit values
  * Fix verifier error when comparing result of len()
  * Fix type back propagation for map keys
  * Fix crash by adding checks for bad var/map assignments
  * Fix field access and offsetof for strings that are builtin types
  * Fix crash when using castable per-cpu map types as map keys
  * Fix loop values with per-cpu aggregations
  * Docs
  * Remove mention of unsupported character literals
  * Tools
  * Fix bashreadline tool probe for dynamically linked readline and drop
    0001-tools-bashreadline-fix-probe-for-dynamically-linked-.patch
- Bump maximum support LLVM version to 20</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1744632000">- Update to 0.23.1
  * Fix build failures due to missing location.hh</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1749556800">- Update to 0.23.5
  * Fix 32-bit build failures due to missing cast
  * Fix biosnoop.bt to print comm from block_io_start probe
  * Fix per-cpu map update warning
  * Fix probe firing order for fexit and software
  * Fix execution watchpoints
  * Fix runqlen.bt script (bsc#1239774)
  * Reduce delete warnings in runqlat.bt
  * Fix crashes if kernel is built without PID namespaces
  * Fix kstack/ustack on big-endian systems
- Drop 0001-tools-runqlen.bt-rename-nr_running-to-nr_queued.patch
  which is included since 0.23.3</changelog>
</package>
<package pkgid="c16e7cba2a204829ca739684d515c0acbf28f5531e25b19e22cdaf596995b3ba246e9fe834453464b26452477fc7f28e616394b0121ba90094208b6f2df07f80" name="bpftune" arch="x86_64">
  <version epoch="0" ver="0.1~20241025" rel="bp160.1.21"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1732017600">- initial package</changelog>
</package>
<package pkgid="6fb72205e1c6eb7dc331fc5b915e56a559adae24a15bfc554e3980b59f2a118de81131ff26fb9555410a87c8a44e59c92d34d5cc846d17bdffef7a61acbd4505" name="bpftune-devel" arch="x86_64">
  <version epoch="0" ver="0.1~20241025" rel="bp160.1.21"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1732017600">- initial package</changelog>
</package>
<package pkgid="16400461c44a4caabe5dc6ae40b8eafca2f2f710d7b7c86a3d9e515be356b573f1a765c714521ddfc2835d1e31098afd6d0a76f37f4a63cb398b1cb90974457e" name="branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="16.0.20240405" rel="lp160.10.1"/>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Bump to 15.4</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1650542400">- Skip *.tr files in /etc/bootsplash/themes/openSUSE/bootloader</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1662984000">- Bump to 15.5
- Supply new Wallpaper Issue#132</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1663156800">- use path-&gt;union for fonts in logo boo#1203394</changelog>
  <changelog author="Yuchen Lin &lt;mlin+factory@suse.de&gt;" date="1668427200">- Remove systemd-icon-branding since it has been replaced by
  distribution-logos-openSUSE-icon, bsc#1204657</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318400">- Bump to 16.0 and se png for wallpapers
  * SLES seems to be using png
  * Using a compat symlink wallpapers/openSUSEdefault-&gt; wallpapers/SLEdefault
  allows running certain apps without rebuild. Such as cockpit.
  * Use optipng -o5 to compress files (has to be reflected in spec)
  * Bump date</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1712318401">* Drop hicolor symlinks from Makefile which are no longer present in TW
  exactly these are raising unpackaged errors on Leap 16.0 build.
  * Plasma 6 drops support for metadata.desktop</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1727784000">- Unified 4096x4096 Leap 16.0 wallpaper
  * Graphics from @hellcp. Many thanks for all the work!
  * Resolves Leap part of gh#openSUSE/branding#135
  * Covers both dark and light variant
  * Use single 4096x4096 file as mentioned in gh#openSUSE/branding#161
  * Use the dark 800x600 also for the back.png
  * Use default.png instead of default-light.png to maximize compatability.
  * Stop using static/dynamic xml files.
  * Drop resolution-specific .desktop files.
  they're useless now when we have single default.png
  and default-dark.png. Entry in
  /usr/share/gnome-background-properties is enough.
  * Generate a compat symlink 1920x1200.png used by SLES/cockpit,
  XFce, and KDE.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1727956800">- The wallpapers-openSUSE-extra complete the distribution wallpaper
  collection starting by Leap 16.0. We want the latest on TW too.
  * Suggest wallpapers-openSUSE-extra on Leap 16+ and TW
  * Expectation is to have 5/6 wallpapers alltogether.
  * Might be skipped from LIVE</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1746446400">- Do not build package as noarch</changelog>
</package>
<package pkgid="d543cd270a687ae19f308a13cfbda5c5b97a63d34e73035b55d7d443c580aec330edd430a1787345c82964897495fa35eae47d90858f79d4357f2b25a35cd2e4" name="brasero" arch="x86_64">
  <version epoch="0" ver="3.12.3+43" rel="bp160.1.11"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568635200">- Disable building of gtk-doc, it fails with newer (1.32) versions
  of gtk-doc. Pass --disable-gtk-doc to configure and drop gtk-doc
  BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- Update to version 3.12.2+20200906.5945fdff:
  + Updated translations.
- Disable tracker integration, as there is no Tracker 3 support:
  + --disable-search insted of --enable-search to configure:
  + Drop tracker-devel BuildRequires.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1632139200">- Update to version 3.12.3:
  + Blu-ray fixes.
  + Support Tracker 3.0.
  + Transcode plugin gstreamer plugin improvement.
  + Fix crash with malformed URI.
  + Fix default project label.
  + Man page fixes.
  + Header guard fix.
  + Help improvements.
  + Updated translations.
- Re-enable tracker support, as Tracker 3.0 is now supported:
  + Pass --enable-search to configure.
  + Add tracker-devel BuildRequires.
- Switch back to regular release tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641988800">- Add 9b3f451e72cfa3bac700517a036faab61f683b3f.patch:
  libbrasero-media: Fix duplicated if.
- Disable nautilus integration for now, does not work with gtk4
  based nautilus. Disable pkgconfig(libnautilus-extension)
  BuildRequires and pass disable-nautilus to configure via bcond.
- Modernize post(un) handling and Supplements, use
  ldconfig_scriptlets macro.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1720612800">- Add 5cdefa8c76ddb797bce8b67a3f5767678bd36a5a.patch: Fix gcc 14.x
  build failure (due to -Wincompatible-pointer-types).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1725710400">- Replace tracker-devel with tinysparql-devel BuildRequires
  following the rename of tracker.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1743854400">- Update to version 3.12.3+43 (boo#1240085):
  * burn-dialog: Use 'media-optical' for notifications
  * Prefer 'application/vnd.efi.iso' MIME type
  * src: Fix 'GtkSpinButton' filling vertical space
  * libbrasero-burn: Fix incorrect plugin version comparison
  * Replace invalid signal name
  * Fix gcc 14.x build failure (due to
  - Wincompatible-pointer-types)
  * Updated translations.
- Drop 5cdefa8c76ddb797bce8b67a3f5767678bd36a5a.patch and
  9b3f451e72cfa3bac700517a036faab61f683b3f.patch: Fixed upstream.
- Bootstrap build via autogen.sh call.</changelog>
</package>
<package pkgid="d29009c9ca0d4cbe000c8b8c0cc07b25c6067485a78297237029b8e13f26cca0665f4dcb4d1301ad94cc8db14cf1432164e3d1574fdf69440e38d3981adaa18d" name="brasero-devel" arch="x86_64">
  <version epoch="0" ver="3.12.3+43" rel="bp160.1.11"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568635200">- Disable building of gtk-doc, it fails with newer (1.32) versions
  of gtk-doc. Pass --disable-gtk-doc to configure and drop gtk-doc
  BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- Update to version 3.12.2+20200906.5945fdff:
  + Updated translations.
- Disable tracker integration, as there is no Tracker 3 support:
  + --disable-search insted of --enable-search to configure:
  + Drop tracker-devel BuildRequires.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1632139200">- Update to version 3.12.3:
  + Blu-ray fixes.
  + Support Tracker 3.0.
  + Transcode plugin gstreamer plugin improvement.
  + Fix crash with malformed URI.
  + Fix default project label.
  + Man page fixes.
  + Header guard fix.
  + Help improvements.
  + Updated translations.
- Re-enable tracker support, as Tracker 3.0 is now supported:
  + Pass --enable-search to configure.
  + Add tracker-devel BuildRequires.
- Switch back to regular release tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641988800">- Add 9b3f451e72cfa3bac700517a036faab61f683b3f.patch:
  libbrasero-media: Fix duplicated if.
- Disable nautilus integration for now, does not work with gtk4
  based nautilus. Disable pkgconfig(libnautilus-extension)
  BuildRequires and pass disable-nautilus to configure via bcond.
- Modernize post(un) handling and Supplements, use
  ldconfig_scriptlets macro.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1720612800">- Add 5cdefa8c76ddb797bce8b67a3f5767678bd36a5a.patch: Fix gcc 14.x
  build failure (due to -Wincompatible-pointer-types).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1725710400">- Replace tracker-devel with tinysparql-devel BuildRequires
  following the rename of tracker.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1743854400">- Update to version 3.12.3+43 (boo#1240085):
  * burn-dialog: Use 'media-optical' for notifications
  * Prefer 'application/vnd.efi.iso' MIME type
  * src: Fix 'GtkSpinButton' filling vertical space
  * libbrasero-burn: Fix incorrect plugin version comparison
  * Replace invalid signal name
  * Fix gcc 14.x build failure (due to
  - Wincompatible-pointer-types)
  * Updated translations.
- Drop 5cdefa8c76ddb797bce8b67a3f5767678bd36a5a.patch and
  9b3f451e72cfa3bac700517a036faab61f683b3f.patch: Fixed upstream.
- Bootstrap build via autogen.sh call.</changelog>
</package>
<package pkgid="c2f6ce92c773c8a35bc66fee87d8f1def98bc4f3097882027516ab14a289ee3728e041bc8b44f2e3001ddb107cb352d0fda8db5937071e1bd77e746ab75dbefc" name="brasero-lang" arch="noarch">
  <version epoch="0" ver="3.12.3+43" rel="bp160.1.11"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568635200">- Disable building of gtk-doc, it fails with newer (1.32) versions
  of gtk-doc. Pass --disable-gtk-doc to configure and drop gtk-doc
  BuildRequires.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- Update to version 3.12.2+20200906.5945fdff:
  + Updated translations.
- Disable tracker integration, as there is no Tracker 3 support:
  + --disable-search insted of --enable-search to configure:
  + Drop tracker-devel BuildRequires.</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1632139200">- Update to version 3.12.3:
  + Blu-ray fixes.
  + Support Tracker 3.0.
  + Transcode plugin gstreamer plugin improvement.
  + Fix crash with malformed URI.
  + Fix default project label.
  + Man page fixes.
  + Header guard fix.
  + Help improvements.
  + Updated translations.
- Re-enable tracker support, as Tracker 3.0 is now supported:
  + Pass --enable-search to configure.
  + Add tracker-devel BuildRequires.
- Switch back to regular release tarball.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641988800">- Add 9b3f451e72cfa3bac700517a036faab61f683b3f.patch:
  libbrasero-media: Fix duplicated if.
- Disable nautilus integration for now, does not work with gtk4
  based nautilus. Disable pkgconfig(libnautilus-extension)
  BuildRequires and pass disable-nautilus to configure via bcond.
- Modernize post(un) handling and Supplements, use
  ldconfig_scriptlets macro.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1720612800">- Add 5cdefa8c76ddb797bce8b67a3f5767678bd36a5a.patch: Fix gcc 14.x
  build failure (due to -Wincompatible-pointer-types).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1725710400">- Replace tracker-devel with tinysparql-devel BuildRequires
  following the rename of tracker.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1743854400">- Update to version 3.12.3+43 (boo#1240085):
  * burn-dialog: Use 'media-optical' for notifications
  * Prefer 'application/vnd.efi.iso' MIME type
  * src: Fix 'GtkSpinButton' filling vertical space
  * libbrasero-burn: Fix incorrect plugin version comparison
  * Replace invalid signal name
  * Fix gcc 14.x build failure (due to
  - Wincompatible-pointer-types)
  * Updated translations.
- Drop 5cdefa8c76ddb797bce8b67a3f5767678bd36a5a.patch and
  9b3f451e72cfa3bac700517a036faab61f683b3f.patch: Fixed upstream.
- Bootstrap build via autogen.sh call.</changelog>
</package>
<package pkgid="34bf2867c495125207a7aae0a099a804ccb30f5ee1bac3e8ff1797a75b551d0d97d8f4dee6f14e472c8eca5a6424c0217985fa9d695a520d7240b53011b3da25" name="breeze6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="3477f2714cce2fba82ebfa927af7366535f85bcf7263fb72db575801bf036d19e97662c7f3fa2b4bcc21ed519e1469ea64d0535a412653ae147ab6acb935fe03" name="breeze6-cursors" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="734c70054be351716a7a753b0c4eeaa258a78e67f501da41db6e8b9f2782db42eabce6abf66c33717dec0ad7b20845e4b501bc4c69054c74c94c497f4e407617" name="breeze6-decoration" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="c3ecf06db777c8cd261e6ba563d9a47e8b8b84c1e8040b7c9bedea84eec2b1fb2c13bdbc6c5eea08d424e71209a3a07feb146589fb8396a9dbf4f63afc5067e5" name="breeze6-devel" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="fae9d39a9b8be0f16a370bc2e312e0d0e87e04e896402ceb28defeebb50cff500d16db055d41f4011dbb13ba0c934a82e1c30e6ad11e2ff8305be7a250468125" name="breeze6-style" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="a03ca1512e27bee75e139ad6a59c634d82dbefa740125f05db7406160b3987d82c0eddb6919b3909b4ab619b31327f511a9951a5eca46d440c35b4a711f9fb4a" name="breeze6-style-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="78564e26889a9225331f7dc1cfbbaa27c3199b00578cada84b53761bd80bae6bbb8820a226b4375f360f5030688b19a24b5b85994272dd4ff7ba3b0d436fdb68" name="breeze6-wallpapers" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * Fix Qt6 build regression with MinGW (kde#500106)
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * kstyle: Don't replay scrollbar mouse event to same position
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1743681600">- Add patches to fix build:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * kcursorgen: Add QDebug include
  * Add missing includes
  * update version for new release
- Drop patches, now upstream:
  * 0001-Add-missing-includes.patch
  * 0002-kcursorgen-Add-QDebug-include.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Changes since 6.3.5:
  * wallpapers: Remove old 1080x1920 mobile wallpapers
  * update version for new release
  * Replace Nuvole with Coast for Plasma 6.4
  * kstyle: Take into account widget font when drawing QGroupBox (kde#498582)
  * Remove unused PROJECT_VERSION_MAJOR variable
  * ToolsAreaManager: Store windows as a vector (kde#501688)
  * Rename Breeze cursors to "Breeze Dark"
  * Stop machine-cropping wallpapers and delete existing ones
  * kstyle: Don't replay scrollbar mouse event to same position
  * Do not cascade header colors when using non-global color scheme
  * kstyle/breezetoolsareamanger.cpp: menu bar colors from header
  * breezedecoration: Take frameradius to account in no-side-borders border size
  * Fix Qt6 build regression with MinGW (kde#500106)
  * Fix crash in some non-KDE apps (kde#499960)
  * CI: Add linux-qt6-next build
  * Add xml/yaml linting
  * kdecoration: Update titlebar when borders change (kde#499222)
  * colors: make Breeze Dark darker
  * kcursorgen: Add QDebug include
  * Add missing includes
  * kdecoration: port away from DecorationWindow scale helpers
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * kstyle: Fix radio button animation</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2</changelog>
</package>
<package pkgid="c726b15ffba6c34035dfc66694eb36d5db5247bebf2b98ade044789e7cfcc78b1b6e071eb9219e0cc516052d1979a8fdd4c7e9202c3f4888301d50f8a8191576" name="brial-devel" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Initial package (version 1.2.8) for build.opensuse.org,
  this replaces polybori-0.8.3.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600776000">- Update ax_boost_base.m4 during build with riscv64 support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601035200">- Update to release 1.2.9
  * Build changes only: ax_*.m4 was updated</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.2.10
  * No user-visible changes (build system only)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1659096000">- Update to release 1.2.11
  * Remove unary_function and binary_function which are
    deprecated in c++11 and removed in c++17.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Update to release 1.2.12
  * Address testing problems with boost 1.81.0</changelog>
</package>
<package pkgid="3a60ac28a9b9cccf36baf7954e835581250ef3a87a84731a0ef5bbc22b0f035f88e30b9e1e22baaac9d797c182b4563581ea786cd0b4d5937d6b9f11eb62e182" name="brickd" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="bp160.1.9"/>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1578225600">- Update to new upstream version 2.4.1:
- Rename bundled libusb to avoid potential collision with system libusb on macOS
- Add missing network dependency to systemd service on Linux
- Make sleep time between SPI reads for HAT (Zero) Brick configurable
- Add experimental support for HAT (Zero) Brick (SPI connected Bricklets) on
  Windows 10 IoT Core, disabled by default due to missing HAT detection
- Notarize Brick Daemon app to make it ready for macOS 10.15
- remove integrated upstream patches
  0001-Makefile-Support-DESTDIR-variable.patch
  0001-use-RPM_OPT_FLAGS-in-rpm-package-builds.patch
  0001-systemd-unit-files-are-always-in-prefix-lib-systemd.patch</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1607601600">- Update to new upstream version 2.4.3:
- Properly shutdown subsystems on Ctrl+C instead of abruptly exiting on Windows
- Rotate persistent log file on Windows and limit its total size to 25 MB
- Add commandline options to override log and config file location on Windows
- Colorize Log Viewer live log messages on Windows
- Reword Log Viewer messages to be less ambiguous on Windows
- Add build option to work without a device file manager such as udevd on Linux
- Allow to handle more then 6 USB devices on Windows
- Use BCM2835 library for SPI connected Bricklets on Raspberry Pi to improve
  performance and work around SPI chip select conflict between Linux kernel 5.4
  and HAT Brick firmware &lt; 2.0.2
- Improve log messages related to HAT (Zero) Brick on Linux
- Fix SPI hardware chip select usage on Linux
- Allow to fully static link brickd for Docker container usage on Linux
- Switch Debian package build to debhelper and drop SysV init support
- Improve USB transfer error logging and stall error recovery
- Fix SPI clock for HAT (Zero) Brick on Linux, if core_freq differs from 250 MHz
- Add config option to override SPI backend detection</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629892800">- Added hardening to systemd service(s). Added patch(es):
  * harden_brickd-resume.service.patch
  * harden_brickd.service.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1645617600">- add a679ca31b8dbd412e5f379b624200e3a96dda0ce.patch for RISCV support
- spec-cleaner</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1674648000">- New Version 2.4.4
  - Add menu entry to clear Live Log in Windows Log Viewer
  - Abort delayed USB stall recovery if device was removed in the meantime
  - Add rate limit for Bricklet error messages
  - Increase libusb requirement from 1.0.6 to 1.0.20
  - Allow to disable mesh gateway
  - Update bundled libusb to 1.0.26.11755 on Windows (Windows Vista or newer
    required) and macOS</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1674734400">- Fixed brickd-rpmlintrc source reference in spec file
  removed upstream patch a679ca31b8dbd412e5f379b624200e3a96dda0ce.patch</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1692619200">- Fix build error with conflicting strcasestr definition</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1701432000">- New Version 2.4.5
  - Add Raspberry Pi 5 support for HAT (Zero) Brick
  - Fix rare crash in initial USB device scan</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1720008000">- New Version 2.4.6
  - Adapt to Raspberry Pi 5 GPIO pin numbering changes
  - Use libgpiod for GPIO pin access on Linux
  - Change runstatedir default from /var/run to /run on Linux</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1722340800">- New Version 2.4.7
  - Fix Raspberry Pi 1-4 SPI backend detection</changelog>
</package>
<package pkgid="6e2b84c5e5960e7f0b2ede3c994d75e45afac638a355f581498e50af0628295a0a574cff7aabd4833ea65cd0753b7bc80fc1ab2d4e54f523185e11c597165c25" name="brickv" arch="noarch">
  <version epoch="0" ver="2.4.26" rel="bp160.1.12"/>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1607601600">- Update to new upstream version 2.4.16:
  - Add support for IMU Bricklet 3.0 and Industrial Dual AC Relay Bricklet
  - Improve error handling and reporting
  - Support running on integrated GPU on macOS
  - Reduce Qt requirement to 5.11 to fix crash on macOS</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1611144000">- Adapt build recipe to python 3 parallel installation support
- Update to new upstream version 2.4.17:
  - Add support for Performance DC Bricklet and Servo Bricklet 2.0</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1620993600">- Update to new upstream version 2.4.19:
  - Add support for DC 2.0, Industrial PTC and Silent Stepper Bricklet 2.0
  - Add Data Logger support for DC 2.0, Industrial PTC and Silent Stepper Bricklet 2.0
  - Fix Healthmonitor error handling
  - Filter Updates/Flashing and RED Brick Console serial port selection based on
    USB product- and vendor-ID
  version 2.4.18:
  - Add minimal health monitor dialog
  - Fix state handling for untabbed plugins
  - Force correct UI state after aborting autoreconnect on error
  - Handle errors while opening Data Logger debug log file
  - Update download.tinkerforge.com certificate chain to fix update autodetection
  - Autoselect download directory for Brick Viewer downloads
  - Check if NFC Bricklet is in correct state to start cardemu discovery</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1631016000">- Fix shebang
- Add patch to fix udev rule warning
  0001-udev-rules-Fix-ATTR-assignment.patch</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1636459200">- Update to new upstream version 2.4.20
  - Hide unused custom line ending controls in hex mode in RS485 Bricklet plugin
  - Reuse thread in Data Logger timer to avoid slow memory leak
  - Fix Data Logger device list clearing on config loading
  - Fix slow memory leak in Data Logger data tab
  - Add firmware version column to Health Monitor dialog
  - Improve udev rule compatibility on Linux
  - Add support for RTC driver config to HAT Brick plugin
  - Add support for simple mode to NFC Bricklet plugin
  - Increase required PySerial version to 3.0
  - Add support for flashing ESP32 (Ethernet) Bricks
- remove upstream patch 0001-udev-rules-Fix-ATTR-assignment.patch</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1641643200">- Update to new upstream version 2.4.21
  - Fix serial port listing on Apple M1 Macs
  - Truncate RED Brick log file view to 10MB
  - Improve hex input mode for RS232 Bricklet 2.0
  - Improve compatibility with Python 3.10
  - Fix OpenGL problems on macOS 12</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1660824000">- Update to new upstream version 2.4.22
  - Add support for GPS Bricklet 3.0 and ESP32 (Ethernet) Brick
  - Add Data Logger support for GPS Bricklet 3.0
  - Improve plot color palette for dark themes
  - Rework plot timing logic to greatly reduce jitter
  - Draw a vertical line to indicate time jumps in plots
  - Fix driver installation on Windows
  - Upgrade bundled Python to 3.9 on Windows (Windows 8.1 required)
  - added 0001-red-Handle-service-provider-country-codes-missing-in.patch to fix build</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1674648000">- Update to new upstream version 2.4.23
  - Allow saving config when Modbus master timeout is changed for RS485 Bricklet
  - Enable Python development mode when running from source
  - Fix socket leak on connect error
  - Add manual y-axis scaling for plot widget
  - Remove all driver files for Windows 7 and earlier
  - Fix calibration dialog title for Compass Bricklet plugin
  - Fix Galileo satellite numbers for GPS Bricklet 3.0
  - Add support for IPv6 connections
  - Add commandline options to specify host, port and secret
  - Add tab select menu that stays in the top left corner
  - Fix corner cases in IMU Brick(let) plugin untab handling
  - Add manual firmware list update button if auto-search for updates is disabled
  - remove upstream patch 0001-red-Handle-service-provider-country-codes-missing-in.patch</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676462400">- Update to new upstream version 2.4.25
  - Fix Python dev-mode default handling
  - Do not touch /usr/lib/python3/dist-packages on Debian Linux
  - Convert Debian Linux package build to debhelper
  - Disable ADC calibration for 7p Bricks
  - Add missing pkg_resources dependency on Linux
  - Update all temperature readings with 10 Hz
  - Stop callback emulator from delivering results to destroyed plugins
  - Avoid crash while loading the 3D model in all IMU plugins
  - Avoid PyQt5 import problem with the Qt module
  - Fix accidental dependency on newer PyQt5 version on Linux</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1709985600">- Update to new upstream version 2.4.26
  - Add support for Industrial Dual AC In Bricklet
  - Add Data Logger support for Industrial Dual AC In Bricklet
  - Only use Python dev-mode if available
  - Fix health monitor metric errors for ESP32 (Ethernet) Brick
  - Add "@ host:port" to window title if connected
  - Avoid crash when closing Brick Viewer
  - Add function code to Modbus master function selection in RS485 Bricklet plugin</changelog>
</package>
<package pkgid="46ab09e103485533029100aa9a5b1844953ffca9bb1dbccd631a2d56516fd903c01871cc6162465be5743ee8b84ad0fd34c3904bfe0695c750174f73e18b93d2" name="bridge-utils" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="bp160.1.12"/>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="rschweikert@suse.com" date="1328184000">- Create -devel package to fix rpmlint errors
- Keep the binary in /usr/sbin, create link to /sbin (UsrMerge project)
  This does not effect resolution of #707837 as /sbin/brctl can still be
  found. systemd properly supports separate /usr</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mhrusecky@suse.cz" date="1369656000">- added missing include to fix build in factory
  bridge-utils-1.5-ip6.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1449144000">- Cleanup with spec-cleaner
- Remove the /sbin/ link, it should not be needed.
  Lets see what breaks, people should migrate to bridge anwyay</changelog>
  <changelog author="tchvatal@suse.com" date="1476792000">- Version update to 1.6:
  * Various tiny fixes, nothing ground breaking
- Refresh patch bridge-utils-1.5-ip6.patch (fuzz)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- This utility is DEPRECATED. No new features will ever be added.
  Instead use the bridge command from the iproute2 package which
  supports more features.
- Update to version 1.7
  * Replace references to enslave
  * Remove out of date TODO
  * brctl: fix signed/unsigned comparison warnings
  * libbridge: add missing sys/time.h include in header
  * libbridge: Include the configured CFLAGS when compiling
- Update project URLs
- Rebase patches:
  * bridge-utils-1.5-ip6.patch
  * bridge-utils-1.5-optflags.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- Update to version 1.7.1
  * fix string overflow warnings
  * brctl: fix spelling on man page</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="9067b7d28f329cef311bcc08b1368d15a107b800a01c9107c8fb196f3cb055600384ce739c3af8db0716550f7a6044e6c9d7ab696d4586467592d7009d0b2b71" name="bridge-utils-devel" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="bp160.1.12"/>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="rschweikert@suse.com" date="1328184000">- Create -devel package to fix rpmlint errors
- Keep the binary in /usr/sbin, create link to /sbin (UsrMerge project)
  This does not effect resolution of #707837 as /sbin/brctl can still be
  found. systemd properly supports separate /usr</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mhrusecky@suse.cz" date="1369656000">- added missing include to fix build in factory
  bridge-utils-1.5-ip6.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1449144000">- Cleanup with spec-cleaner
- Remove the /sbin/ link, it should not be needed.
  Lets see what breaks, people should migrate to bridge anwyay</changelog>
  <changelog author="tchvatal@suse.com" date="1476792000">- Version update to 1.6:
  * Various tiny fixes, nothing ground breaking
- Refresh patch bridge-utils-1.5-ip6.patch (fuzz)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- This utility is DEPRECATED. No new features will ever be added.
  Instead use the bridge command from the iproute2 package which
  supports more features.
- Update to version 1.7
  * Replace references to enslave
  * Remove out of date TODO
  * brctl: fix signed/unsigned comparison warnings
  * libbridge: add missing sys/time.h include in header
  * libbridge: Include the configured CFLAGS when compiling
- Update project URLs
- Rebase patches:
  * bridge-utils-1.5-ip6.patch
  * bridge-utils-1.5-optflags.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- Update to version 1.7.1
  * fix string overflow warnings
  * brctl: fix spelling on man page</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="8cd9a570c869db60dd29ecae7b9399ae6be64884b02fc31002e131e10f12eff65786226b18a8f7bf3a7dadd62de29f0b550bf8cf8f5712b81dbd71672ffc7921" name="brightnessctl" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="bp160.1.3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt;" date="1506254400">- Upgrade to 0.3</changelog>
  <changelog author="R. Tyler Croy &lt;rtyler@brokenco.de&gt;" date="1550923200">- Package 0.4 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1556625600">- Clean spec
- Add SUSE copyright</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556712000">- Use noun phrase in summary.
- Remove redundant DESTDIR= from %make_install.
- Require systemd-rpm-macros for %_udevrulesdir.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1580385600">- Add support for using logind mode for recent distributions
  cherry pick patches from upstream:
  * 0001-Fixed-inconsistency-in-README-thanks-AJGQ.patch
  * 0002-Support-the-new-SetBrightness-logind-API.patch
  * 0003-Make-the-use-of-SetBrightness-dynamic.patch
  * 0004-Use-non-suid-permissions-when-logind-is-used.patch</changelog>
  <changelog author="R. Tyler Croy &lt;rtyler@brokenco.de&gt;" date="1580644800">-  Upgrade to the recently released 0.5.1, which includes previously applied
  patches
  Removed patches (adding this for the bot):
  0001-Fixed-inconsistency-in-README-thanks-AJGQ.patch
  0002-Support-the-new-SetBrightness-logind-API.patch
  0003-Make-the-use-of-SetBrightness-dynamic.patch
  0004-Use-non-suid-permissions-when-logind-is-used.patch</changelog>
</package>
<package pkgid="cf26ba976c838d89b73e1e2fdb4b7144b5998b71b81741a2a447e251159b997c401317b80ea1538f98ee7814308a22296559b7f37e011c32da39256c22b67eba" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="942ad5e47e8de20515fb5f3bf3cd67a3d05a37e04f59d0b255418585004545c17aeaa0598e7f3d101f7f52d0f17135ce40a7a77d9d476d25ab537cfe6aa18f18" name="brlapi-java" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="1eeeee019f2c39510a817f67abfe60f3104124946bd77d6a047877e25e05880f84327842919ad64d72f3bb651ef6d388df4d801c1a2740316b601d3c94f6b610" name="brlemu" arch="x86_64">
  <version epoch="0" ver="0.1" rel="bp160.1.13"/>
  <changelog author="seife@suse.de" date="1202299200">- initial package submission</changelog>
  <changelog author="marco@suse.de" date="1207310400">- added version number 0.1
- added author and GPL note to brlemu.c/brlemu.h/Makefile
- added COPYINg file (GPL2)
- added install section to Makefile
- modified spec-file</changelog>
  <changelog author="seife@suse.de" date="1208952000">- add the "--fake" option to allow usage with Qemu, update README</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496750400">- add brlemu-0.1-gcc7.diff to fix build with gcc 7
- add brlemu-0.1-nostrip.diff to fix debuginfo package generation</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1697112000">- fix patch application with newer rpm
- use %license instead of %doc for COPYING file
- fix invalid URL</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1723550400">- add "-I/usr/include/ncurses" to work around ncurses breakage</changelog>
</package>
<package pkgid="567a0075f61d24bee1bf85f3411867acb9bb529f158b99d6f1598abfa739a00d142a9424074079717e21147332c20f2f8576174c5f88718b5cae3085960aed4d" name="brlist" arch="noarch">
  <version epoch="0" ver="0.2" rel="bp160.1.2"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736510400">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1736769600">- Version 0.2
  * Add full OVS support
  * List bridges with no interfaces attached</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1738411200">- Use no macros in url in .spec for packtrack</changelog>
</package>
<package pkgid="8c3bcd2372df8f368f092135c2ad15391cc09954c350a8e76663b06f67e76706388871d97535641d42ab6254021fce71c40aa2db2e52916285b212ea56dbb254" name="brltty" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="d26c0a4db027fe8b1d303692c942416dd25a9cf7a0906dc82fa44dcee69ba6e4195eef8db0c373a70f44d1361d3eb1c8438ad3d1304ede0eb5dd0a86c604ee3e" name="brltty-driver-at-spi2" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="a0dd8d9b9a5be64f9c1761afce8122b9b275d55b02096805fb86a28cd590ae6f33abc967444522830ccd60d1c417bf4da95879e92a571aa8a1014f398e61615e" name="brltty-driver-brlapi" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="1c7eb90a29daeca6241ee4cbd4c9ca26d2fce59395086dd81b3090682d64dcc11b6cedef9c3e92ef631fb225c82614de2c5e054b5a868d8c25c1b860fa8145c6" name="brltty-driver-espeak" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="62cf583436a01f865d6e11a03501690c4286726b611d9a5ce94b9c60a9978ef25a895ae4a29b110ddaa30768c54f81d76f582d2637603c8db598bcc4169b2c06" name="brltty-driver-speech-dispatcher" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="9a74d8a948b99e3041cb2fd57db3a12e5396cda406d16c374c2b2ed103d0c2aa010ae8362cc017ec55343ef5c32240bab7f41437eaf8e6abbb45d0ad927c72a2" name="brltty-driver-xwindow" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="abaeb2d3710f1b0598b401fd6a91f959ccea507f99550c241cf6f90752606efc799afda53b13aceb5210f3c6cb6e85ae7e4ab3820371e2e60adb8052a9eb3672" name="brltty-lang" arch="noarch">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="bc1e5fe8c7ead4ca4e1f0243658ad9948b2809816a1ab8234f25c434c18dacaad8479724c6a73e8355b0d2439517e705cef001a98f44f9b6067c5fc12c1644bc" name="brltty-udev-generic" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="1fa6a1d9b1d1faccb65e7406e25393e56bb30d6f39c35ccb62eceb68a8917e5832e169c800ba637ffd076c340ad2836caa188c99e0e8528ed3791afc3eaca899" name="brltty-utils" arch="x86_64">
  <version epoch="0" ver="6.8" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mcepl@cepl.eu" date="1718020800">- Add %python3_fix_shebang_path to fix binaries dependency on
  /usr/bin/python3</changelog>
  <changelog author="max@suse.com" date="1727179200">- Work around a syntactic change to TCL_PACKAGE_PATH to fix build
  with Tcl 8.6.15.</changelog>
  <changelog author="max@suse.com" date="1727265600">- For the correct generation of pkgIndex.tcl it is required that
  libbrlapi_tcl can runtime-link to libbrlapi at install time.
  Set LD_LIBRARY_PATH to allow that.</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * brltty-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 6.7:
  + Too many changes; please read ChangeLog
- Drop e6707d5e.patch: fixed upstream.
- API version is now 0.8.6.</changelog>
  <changelog author="mgorse@suse.com" date="1746446400">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Drop libbraille plugin. Libbraille is unmaintained and unlikely
  to be used nowadays, and it links against an old version of
  libusb (jsc#PED-10531).</changelog>
  <changelog author="mgorse@suse.com" date="1751803200">- Update to version 6.8:
  + Too many changes; please read ChangeLog
- API version is now 0.8.6.</changelog>
</package>
<package pkgid="94214d8bab4d9bff14726a67243d2842bbf40022279960c221f05efab43e8beefe58d8ec72e131a9cc13042b6fcadf94ae9f59d19fb24b0ab190b4b66703572b" name="broadvoice16" arch="x86_64">
  <version epoch="0" ver="1.2" rel="bp160.1.13"/>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1633348800">- Initial packaging</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1633521600">- Remove old specfile constructs.
- Wrap description and trim software history.</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1635508800">- Added baselibs.conf</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1636200000">- Correct endian selection</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for Source0 tarball.</changelog>
</package>
<package pkgid="589160de9e6ce1fd7433c8982404016acd404a3be3e45e795fc3dd78f5d4cb8233ef6af6864ed0beddf10a31f8a957359c553dcb6869f5589748b44e8c7bf2bd" name="broadvoice16-devel" arch="x86_64">
  <version epoch="0" ver="1.2" rel="bp160.1.13"/>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1633348800">- Initial packaging</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1633521600">- Remove old specfile constructs.
- Wrap description and trim software history.</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1635508800">- Added baselibs.conf</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1636200000">- Correct endian selection</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for Source0 tarball.</changelog>
</package>
<package pkgid="e095d9116089481ad2dff614e83ff7fdd531b4fad8d0dc5cc1031242268e3f6a32342b8ce242e430e36553c4fc773e9ef34224f8efcd93684d4480b58ec2292e" name="broadvoice32" arch="x86_64">
  <version epoch="0" ver="1.2" rel="bp160.1.12"/>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1633348800">- Initial packaging</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1633521600">- Remove old specfile constructs.
- Wrap description and trim software history.</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1636286400">- Correct endian selection
- Added baselibs.conf</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for Source0.</changelog>
</package>
<package pkgid="b581e80da6cc56faef9c0edf53a3dc9d2995c6055687cce816e5e3d14885221e71da2cd3f455337a6df56fdd594eca77afb2e4fb3eb23456c6390d33a8429fe9" name="broadvoice32-devel" arch="x86_64">
  <version epoch="0" ver="1.2" rel="bp160.1.12"/>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1633348800">- Initial packaging</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1633521600">- Remove old specfile constructs.
- Wrap description and trim software history.</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt; - 1.2" date="1636286400">- Correct endian selection
- Added baselibs.conf</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Use full URL for Source0.</changelog>
</package>
<package pkgid="019d20c24c0cd5a76c09e38ee787f5a79e9acc3aa04ecac8e7789a50e32a1acfb1519a22ebf772fbbc2ea567f1948211d0a68055675c1f2a00e3dd93214b8ae5" name="broot" arch="x86_64">
  <version epoch="0" ver="1.39.0" rel="bp160.1.14"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579780800">- Initial commmit of v0.12.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1651492800">- Update to v1.11.1 (see CHANGELOG.md)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1657281600">- Remove dependency on unmaintained rust-packaging</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1668686400">- Update to 1.16.2:
  * you can restrict the panels in which verbs apply with the verb configuration panels parameter
  * fixes ctrl-left not usable anymore to remove filtering in preview
  * status messages now displayed on toggling (for example showing hidden files)
  * New escaping rules let you skip many \, especially when building regexes
  * --sort-by-type-dirs-first and --sort-by-type-dirs-last - Fix
  * modal: in intput mode, uppercase letters don't trigger verbs anymore
  * selecting lines up or down with the mouse wheel now wraps in both direction
  * Terminal background luma determination now works on all tested unixes, including MacOS
  * Major Feature: imports (A configuration file can now import one or several other ones)
  * advice to hit alt-i and|or alt-h when no file is visible
  * examples on search modes in help screen
  * close the staging area when it's emptied with a verb (e.g. on :rm)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1679572800">- Update to 1.21.0:
  * better nushell integration (no need to quote arguments anymore,
    fix path extension broken by new version of nushell)
  * don't show modal-only keys in help page when modal mode isn't enabled
- Update to 1.20.2:
  * fix debug statement printed in some cases (mostly on Windows)
- Update to 1.20.1:
  * fix status line not always displaying the hint of the input's verb
- Update to 1.20.0:
  * unless overriden, /proc is now no-enter, which solves freezes
    when searchin on / in some system
  * SVG files now rendered as images in the preview panel
  * new version of the nushell function. You should be prompted for an update
  * no-hide special paths
  * preview can now be opened on directories, showing their first level
  * better determine whether the terminal is white or dark in some (probably rare) cases
- Update to 1.19.0:
  * Nushell support
- Update to 1.18.0:
  * Hjson configuration file can now omit outside braces (it's
    "braceless Hjson"), making it much cleaner
  * allow opening the help screen with just the ? key on Windows (as for other systems)
  * fix a crash in some cases of input being cleaned with a selection
- Update to 1.17.1:
  * Windows specific implementation of :cpp
- Update to 1.17.0:
  * max file size for content search now configurable (default is now 10MB)
  * file summing now avoids /proc and /run
  * default configuration sets /media as not entered by default
    (can be commented out, of course)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1686916800">- Update to 1.22.1:
  * allow dir computations in /run/media
  * fix included solarized-dark.hjson skin file
- Update to 1.22.0:
  * define disk space availability colors in skin
  * left elision of path when path/name doesn't fit
- Update to 1.21.3:
  * `switch_terminal` verb parameter
  * on Windows, when using `-c`, clear events after delay
- Update to 1.21.2:
  * update dependencies because of some yanked ones
- Update to 1.21.1:
  * resolve `~` in special paths
  * better clipboard support on MacOS</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Adjust package license based on the legaldb scan</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1719489600">- Update to v1.39.0
  * `:open_trash` shows the content of the trash. Other new internals &amp; verbs: `:delete_trashed_file`, `:restore_trashed_file`, `:purge_trash`
  * it's now possible to remove a default keybinding by defining a verb with no execution
  * fix build on Android - thanks @dead10ck
- Update to v1.38.0
  * `-{flags}` verb lets you change the state the same way you do it at start, eg `:-sd` to show sizes and dates
  * calling `:focus` on the tree root now goes up the tree (experimental)
- Update to v1.37.0
  * optionally display lines surrounding a matching line in preview, with `lines_before_match_in_preview` and  `lines_after_match_in_preview`
  * filtered preview: jump between matches with `:next_match` (default: `tab`) and `:previous_match` (default `shift-tab`)
  * display setuid, setgid and sticky bits in permission
- Update to v1.36.1
  * fix ANSI code leaking to the input on start on Mac
- Update to v1.36.0
  * releases at github should be more `cargo binstall` friendly
  * improved `--help`
  * new `:stage_all_directories` internal
  * `:print_tree` is one line shorter, so as to let the original shell command visible without scroll
  * fix and document the "kitty-csi-check" optional feature which can be enabled at compilation
- Update to v1.35.0
  * Nerdfont icon theme
- Update to v1.34.0
  * new `--verb-output` launch argument, dedicated to the new `:clear_output` and `:write_output` internals
  * verb sequences (based on `cmd`) can take arguments from the verb invocation
  * don't fail launch in case of bad verb configuration, more helpful error message in such case
  * faster kitty image rendering by default
  * `{file-git-relative}` verb argument
  * modify nushell function import: `use` instead of `source`
  * fix some resizing and flickering problems on Windows (appeared with 1.33.0)
  * write `installed` flag file on `--install`
- Update to v1.33.1
  * fix the release's version
- Update to v1.33.0
  * on terminals supporting the kitty keyboard protocol, you can now define and use key combinations like `space-n`, `ctrl-alt-a-b`, `shift-space-c`, `ctrl-enter`, etc.
  * new syntax for special paths
- Update to v1.32.0
  * with "modal" enabled, `initial_mode` setting lets you choose whether to start in `input` mode or `command` mode (default)
- Update to v1.31.0
  * keep broot's work dir synchronized with the root of the current panel. Can be disabled in conf with `update_work_dir: false`
  * fix `:trash` internal not working on staged files
- Update to v1.30.2
  * don't canonicalize paths on windows on new panels
- Update to v1.30.1
  * nushell script: replace the deprecated `def-env` with `def --env`
- Update to v1.30.0
  * `:trash` internal - I'd like feedback on this one
  * solve symlinks on `:panel_right` to display the dest path and the dest filesystem
  * `:panel_right` on a directory now removes the filter
  * more '~' expansion in verb arguments
- Update to v1.29.0
  * `terminal_title` option in configuration
  * `:toggle_tree` internal and `--tree` and `--no-tree` launch flags (experimental, feedback welcome)
  * `{git-name}` verb argument
- Update to v1.28.1
  * fix a regression in handling of rooted gitignore patterns
- Update to v1.28.0
  * left and right keys bound to verbs can be used when the input isn't empty, if they would have no effect to the input
  * default_flags now accept long parameters, including --cmd
  * gitignore: fix relative patterns with several tokens
- Update to v1.27.0
  * the `apply_to` verb filter accepts new values: `text_file` and `binary_file`. Broot users editing files in their terminal (vi, emacs, etc.) should configure broot to open their text editor on `enter`: see https://dystroy.org/broot/tricks/#change-standard-file-opening
  * small breaking change: `:stage_all_files` now stages also symlinks
  * new `{git-root}` verb argument
  * fix a freeze on windows when launching a search with `-c`
  * fix automatic preview pattern not escaping spaces and colons
- Update to v1.26.1
  * improved status line
- Update to v1.26.0
  * when given a path to a file at launch, broot now selects it in the tree and opens it in preview
  * allow rebinding of the 'tab' and 'esc' keys with the `:next_match` and `:escape` internals
  * fix fuzzy patterns not case insensitive on some characters
- Update to v1.25.2
  * optional BROOT_CONFIG_DIR env var - the site now shows all env variables: https://dystroy.org/broot/launch/#environment-variables
  * `--only-folders` now longer allows symlinks to non directories
- Update to v1.25.1
  * fix shift-char in input extending the selection
- Update to v1.25.0
  * allow unescaped '::' in pattern position, experimental (might be removed)
  * allow hexa color notation in skins (eg `#fb0` or `#FFD700`)
- Update to v1.24.2
  * fix a case of br script installation failing on Windows/Powershell
- Update to v1.24.1
  * slightly better `--help`
- Update to v1.24.0
  * installer for the powershell br script on windows
  * new `--help`, more compact
  * allow extra spaces before the verb
  * updated man page, now distributed in releases as /man/broot.1
- Update to v1.23.0
  * prettier, faster SVG rendering
  * reorganize default conf files, with a "skins" subfolder
- Remove cargo_config, which is now part of the vendor-tarball</changelog>
</package>
<package pkgid="ce42ad82596486359f1701aa80b5a1aa1351d742a88d5f1f07315603e6a537dfe16c9293e55e984006a40be3859f28b506b454993c969adeac1ab13e385b3d21" name="brotli" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1544788800">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="sflees@suse.de" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andythe_great@pm.me" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="jengelh@inai.de" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="meissner@suse.com" date="1677326400">- add 32bit devel package for Wine development.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="jengelh@inai.de" date="1693483200">- Update to release 1.1
  * CLI: added a --dictionary option
- Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
  <changelog author="dmueller@suse.com" date="1697544000">- build with optflags again</changelog>
</package>
<package pkgid="e35a3b4446c132e6666c8806aabac128cb5c9ad5e7b75be01f8739c2b50af864044f94492c2582e65c5d6b92c94784a7c0d61c81057ecf614b4f9fa2167de634" name="brotli-java" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1669377600">- Initial packaging with v1.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1694520000">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1743076800">- Fix build with both xmvn-mojo:javadoc and javadoc:aggregate</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to version 1.2.0
  * Added
    + decoder: BrotliDecoderAttachDictionary
    + decoder: BrotliDecoderOnFinish callback behind
    BROTLI_REPORTING
    + decoder: BrotliDecoderSetMetadataCallbacks
    + encoder: BrotliEncoderPrepareDictionary,
    BrotliEncoderDestroyPreparedDictionary,
    BrotliEncoderAttachPreparedDictionary
    + decoder: BrotliEncoderOnFinish callback behind
    BROTLI_REPORTING
    + decoder / encoder: added static initialization to reduce
    binary size
    + common: BrotliSharedDictionaryCreateInstance,
    BrotliSharedDictionaryDestroyInstance,
    BrotliSharedDictionaryAttach
    + java: encoder wrapper: Parameters.mode
    + java: Brotli{Input|Output}Stream.attachDictionary
    + java: wrapper: partial byte array input
  * Removed
    + java: dropped finalize() for native entities
  * Fixed
    + java: JNI decoder failed sometimes on power of 2 payloads
    + java: in compress pass correct length to native encoder
  * Improved
    + java / js: smaller decoder footprint
    + decoder: faster decoding
    + encoder: faster encoding
    + encoder: smaller stack frames
  * Changed
    + decoder / encoder: static tables use "small" model (allows
    2GiB+ binaries)
- Rewrite build system to use ant in order to build this early</changelog>
</package>
<package pkgid="0749c6336b3f843064d57d788816a1b076afd45d96904aca364a17ea27fe5f2148e7838c024b6dcb2c2f8aed1002e38059796e21a134d0e4f8dd0d8b1b745520" name="brotli-java-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1669377600">- Initial packaging with v1.0.9</changelog>
  <changelog author="fstrba@suse.com" date="1694520000">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="fstrba@suse.com" date="1743076800">- Fix build with both xmvn-mojo:javadoc and javadoc:aggregate</changelog>
  <changelog author="fstrba@suse.com" date="1778500800">- Update to version 1.2.0
  * Added
    + decoder: BrotliDecoderAttachDictionary
    + decoder: BrotliDecoderOnFinish callback behind
    BROTLI_REPORTING
    + decoder: BrotliDecoderSetMetadataCallbacks
    + encoder: BrotliEncoderPrepareDictionary,
    BrotliEncoderDestroyPreparedDictionary,
    BrotliEncoderAttachPreparedDictionary
    + decoder: BrotliEncoderOnFinish callback behind
    BROTLI_REPORTING
    + decoder / encoder: added static initialization to reduce
    binary size
    + common: BrotliSharedDictionaryCreateInstance,
    BrotliSharedDictionaryDestroyInstance,
    BrotliSharedDictionaryAttach
    + java: encoder wrapper: Parameters.mode
    + java: Brotli{Input|Output}Stream.attachDictionary
    + java: wrapper: partial byte array input
  * Removed
    + java: dropped finalize() for native entities
  * Fixed
    + java: JNI decoder failed sometimes on power of 2 payloads
    + java: in compress pass correct length to native encoder
  * Improved
    + java / js: smaller decoder footprint
    + decoder: faster decoding
    + encoder: faster encoding
    + encoder: smaller stack frames
  * Changed
    + decoder / encoder: static tables use "small" model (allows
    2GiB+ binaries)
- Rewrite build system to use ant in order to build this early</changelog>
</package>
<package pkgid="d09475ffcf69a8032e73a402b45418bed72dc0c1069c9f5bc608f6d7a3bdfca46e204acfd4a2cc6da747c75c6d5be3d55988a33ba4dd6fba50ef96f3414aafe6" name="browserpass-native" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp160.1.12"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1569844800">- Initial build for browserpass-native 3.0.6</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1570190400">- Avoid double %setup.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1594382400">- Update to version 3.0.7
  * Updated dependencies
  * Lots of small documentation updates
- Use go &gt;= 1.14 like upstream</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1598702400">- Fix %{_libexecdir} misuse</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1644321600">- Update to version 3.0.8
  * Added make target for librewolf
- Exclude ppc64, build fails due to pie not being supported</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1646136000">- Update to version 3.0.9
  * No functional changes
  * Compile without cgo to remove libc dependency</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1659787200">- Update to 3.0.10:
  - No functional changes
  - Explicitly use cgo-free function to get user's home dir (was
    already the case since 3.0.9 if your browserpass was compiled
    without cgo as per our Makefile)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678017600">- Update to 3.1.0
  * Implement add/edit/delete password functionality
    (pending new browser extension release)
    (gh#browserpass/browserpass-native#99,
    gh#browserpass/browserpass-native#129)
  * Add Edge browser support (gh#browserpass/browserpass-native#122,
    gh#browserpass/browserpass-native#130)
  * Add Yandex browser (gh#browserpass/browserpass-native#133)
- Update vendor.tar.gz</changelog>
</package>
<package pkgid="644ff9c2b948e0637dfd1abfaefaa4fb89b79a32049e4d323a7b57b946017a1ede395f7fa869accbe6288c9e45234fca0a5bd32f3e46f75ce185ac85b3a96458" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20230324.8680ce4" rel="160000.2.2"/>
  <changelog author="ro@suse.de" date="1618833600">- Update to version 84.87+git20210419.bf6495b:
  * add brp-50-fipscheck for bsc#1184555</changelog>
  <changelog author="ro@suse.de" date="1618920000">- Update to version 84.87+git20210420.a4765d7:
  * rename brp-50-fipscheck to brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1621252800">- Update to version 84.87+git20210517.7005a76:
  * support cross arch builds
  * Makefile only set CXXFLAGS and CXX if not set in env yet
  * brp-25-symlink: Follow deeper symlinks to avoid false positives</changelog>
  <changelog author="lnussel@suse.de" date="1623067200">- Update to version 84.87+git20210607.252083e:
  * Let symlinks from /lib/modules to /usr/src be absolute (boo#1186710)</changelog>
  <changelog author="coolo@suse.com" date="1624363200">- Update to version 84.87+git20210622.18841ca:
  * Extend symlinks in buildroot (and test them)
  * Move the exception handling of absolute links to C++
  * Revert "brp-25-symlink: Follow deeper symlinks to avoid false positives"</changelog>
  <changelog author="coolo@suse.com" date="1625572800">- Update to version 84.87+git20210706.41c04c1:
  * Fix /etc/alternatives being white listed</changelog>
  <changelog author="coolo@suse.com" date="1637064000">- Update to version 84.87+git20211116.6c5fe09:
  * brp-25-symlink: don't fail if the symlink target starts with a dash
  * Revert "Let symlinks from /lib/modules to /usr/src be absolute"</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- use https:// for urls</changelog>
  <changelog author="dmueller@suse.com" date="1668513600">- Update to version 84.87+git20221115.2f7add6:
  * fallback to the libkcapi fipscheck
  * Remove legacy checks that are part of rpmlint 2.x.
  * brp-25-symlink: don't fail if the symlink target starts with a dash
  * Revert "Let symlinks from /lib/modules to /usr/src be absolute"
  * Fix /etc/alternatives being white listed</changelog>
  <changelog author="dmueller@suse.com" date="1679659200">- Update to version 84.87+git20230324.8680ce4:
  * Remove __patchable_function_entries from .a objects</changelog>
</package>
<package pkgid="591c1e45257b41d0fe357d757cc0f9b927d170f794d491089ebc86318cd45a76fe97703d812b57d2b940ea5af27f1deb668c0e3800ec87b8dce7af720e6b85a9" name="brp-extract-translations" arch="noarch">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1416657600">- Fix bad variable access for --genericname
- replace ^M pattern with \r in sed pattern</changelog>
  <changelog author="coolo@suse.com" date="1445688000">- go back to a specific directory list instead of all in /usr/share
  (boo#904524)</changelog>
  <changelog author="fvogt@suse.com" date="1489492800">- Replace brp-trim-desktopfiles with brp-trim-translations:
  * Supports various kinds of source files, not only desktop files
  * Generates various tar archives instead of monolithic .desktopfiles file
- Currently trims desktop file translations only, as polkit/mime/appstream
    do not support gettext translations yet</changelog>
  <changelog author="fvogt@suse.com" date="1500033600">- Remove translations for Name,GenericName and Comment only in the
  [Desktop Entry] section to avoid breaking desktop action translations</changelog>
  <changelog author="lnussel@suse.de" date="1521115200">- create separate subpackage that extracts translations from desktop
  files but does not actually strip them. Needed for SLE.</changelog>
  <changelog author="fvogt@suse.com" date="1529496000">- Update map-desktop-category.sh to include updated Education, Science
  and Graphics categories (boo#1074711)</changelog>
  <changelog author="dimstar@opensuse.org" date="1559822400">- Move rpm macros to %_rpmmacrodir.</changelog>
  <changelog author="code@bnavigator.de" date="1568116800">- Add ComputerScience, sort Science and Education alphabetically
  (boo#1074711)</changelog>
  <changelog author="sbrabec@suse.com" date="1593518400">- Remove GNOME 1 and KDE 3 support (boo#1062631, rpmlint#437).</changelog>
  <changelog author="dimstar@opensuse.org" date="1670328000">- Do not ever use "%setup -n .": rpm 4.18 tries to be cleaner and
  remove stuff it extraced, which would lead to 'rm -rf .', which
  rm does not like. Use "%setup -c" instead, which creates the
  appropriate %{name}-%{version} directory expected.</changelog>
</package>
<package pkgid="58b47df6fbee9657d5340a9f3a60c79cdf166fc68a405b9cbe6f69ddbcbc80785c471190ea94f77473e6022fa2066989321190c9c0a15faa9e7b4ff6567804a1" name="brp-trim-translations" arch="noarch">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1416657600">- Fix bad variable access for --genericname
- replace ^M pattern with \r in sed pattern</changelog>
  <changelog author="coolo@suse.com" date="1445688000">- go back to a specific directory list instead of all in /usr/share
  (boo#904524)</changelog>
  <changelog author="fvogt@suse.com" date="1489492800">- Replace brp-trim-desktopfiles with brp-trim-translations:
  * Supports various kinds of source files, not only desktop files
  * Generates various tar archives instead of monolithic .desktopfiles file
- Currently trims desktop file translations only, as polkit/mime/appstream
    do not support gettext translations yet</changelog>
  <changelog author="fvogt@suse.com" date="1500033600">- Remove translations for Name,GenericName and Comment only in the
  [Desktop Entry] section to avoid breaking desktop action translations</changelog>
  <changelog author="lnussel@suse.de" date="1521115200">- create separate subpackage that extracts translations from desktop
  files but does not actually strip them. Needed for SLE.</changelog>
  <changelog author="fvogt@suse.com" date="1529496000">- Update map-desktop-category.sh to include updated Education, Science
  and Graphics categories (boo#1074711)</changelog>
  <changelog author="dimstar@opensuse.org" date="1559822400">- Move rpm macros to %_rpmmacrodir.</changelog>
  <changelog author="code@bnavigator.de" date="1568116800">- Add ComputerScience, sort Science and Education alphabetically
  (boo#1074711)</changelog>
  <changelog author="sbrabec@suse.com" date="1593518400">- Remove GNOME 1 and KDE 3 support (boo#1062631, rpmlint#437).</changelog>
  <changelog author="dimstar@opensuse.org" date="1670328000">- Do not ever use "%setup -n .": rpm 4.18 tries to be cleaner and
  remove stuff it extraced, which would lead to 'rm -rf .', which
  rm does not like. Use "%setup -c" instead, which creates the
  appropriate %{name}-%{version} directory expected.</changelog>
</package>
<package pkgid="048558af83dc6214dd9ea022e1ea672336d9e2dae11f87d5fc5f5ff0f79bd762e038d0c964bcd61872cc1c72df94b5eaf54bb54ac6f92455015a716eaabacaf2" name="bs2b-tools" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="160000.2.2"/>
  <changelog author="reddwarf@opensuse.org" date="1279627200">- Initial package</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="zaitor@opensuse.org" date="1471521600">- Add baselibs.conf to build 32-bit support. Also add to sources.</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- add libbs2b-security.patch to prevent format-security issues
- spec-cleaner fixes</changelog>
  <changelog author="gmbr3@opensuse.org" date="1655294400">- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error
- Use %autosetup</changelog>
</package>
<package pkgid="a3dec2a742f857c6969acaeb4ab819bd8d21ac08d04b9f2e42422420e405e1ed33d5e5c48cff6bf840907e84fc8496629ed00d83572550b2439e66d95de11d69" name="bscalc" arch="noarch">
  <version epoch="0" ver="2.10" rel="160000.2.2"/>
  <changelog author="luc14n0@linuxmail.org" date="1517918400">- Add a %{name}-lang Recommends tag in the preamble and a %{name}
  Provides tag under the lib subpackage so the lang subpackge can
  be installable.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 1.3:
  + Do not segfault when trying to bs_size_free NULL.
- Cleanup specfile removing deprecations.
- Update LGPL License tag appending '-only' to comply with SPDX
  3.0.
- Add gcc BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 1.4:
  + There are only small changes in this release.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 2.4:
  * remove msgcat dependency
  * Translated using Weblate (Bengali (India))
  * Add Travis build status badge
  * Update translation files
  * add translation platform widget
  * Translated using Weblate (Turkish)
  * Fix memory leak in bs_size_new_from_str
  * Update translation files
  * src/gettext: fix warning if gettext is already present
  * fix build on shells where test == fails
  * Require the same version of python3-bytesize in libbytesize-tools
  * New minor release of the libbytesize library. There are only two bugfixes in this release.
  * Full list of changes
  * fix out of tree build failure
  * Fix return value for round_to_nearest when using Size
  * New bytesize calculator bssize has been added.
  * Code has been ported from PCRE to PCRE2.
  * Python 2 support has been removed.
  * Run all libbytesize tests from one script
  * Add all "public" python API symbols to __init__.py
  * Allow running tests using installed library
  * Remove Python 2 support
  * Port to pcre2
  * Add support for floor division by a non-integer number in Python
  * Add a simple bytesize calculator tool
  * Add tools to autotools and packaging
  * Exit with 1 from configure if there were failures
  * Add a summary to the end of ./configure output
  * Only support modulo between two Size instances
  * Fix parsing of exponential representations of real numbers
  * Add the '--version' option to bs_calc.py
  * Add a man page for the bscalc tool
  * Assume the given expression is in bytes if no unit is given</changelog>
  <changelog author="dmueller@suse.com" date="1612008000">- update to 2.5:
  * translation updates
  * tools: Read input from stdin when not running in a tty
  * Add support to ppc64le for debian build
  * testsuite fixes</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.6:
  * Make sure Size can be interpreted as integer in Python 3.10
  * Translation updates</changelog>
  <changelog author="dmueller@suse.com" date="1657800000">- update to 2.7:
  * Fix skipping tests when required locale is missing
  * Remove Travis CI configuration
  * Fix some warnings and typos in docstrings and comments
  * Fix warnings dicovered by the GCC analyzer
  * build: avoid bashisms in configure
  * Update translation files
  * Do not use distutils to get Python library path</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 2.8:
  * Added translation using Weblate
  * configure.ac: Remove invalid email address for bug reports
  * spec: Bump release to 21 for Packit daily builds
  * spec: Fix source archive URL
  * Make use of error optional
  * Replace C++ style comments with C style
  * Various docstring fixes
  * docs: Remove information about Python 2 support
  * Remove unused test dependencies variables from Makefile
  * Do not hardcode pylint executable name in Makefile</changelog>
  <changelog author="luc14n0@opensuse.org" date="1683374400">- Drop lang sub-package recommendation. It's not needed anymore now
  that lang packages provide package supplementation instead.
- Make bscalc sub-package 'noarch', since it doesn't contain any
  binaries, only a Python script and its manpage.</changelog>
  <changelog author="thomas.blume@suse.com" date="1739534400">- Add NEWS.rst to source documentation
- Add %python3_fix_shebang to fix binaries dependency on
  /usr/bin/python3
- Update to release 2.10
  * remove dependency on python3-six
- Rename python3-libbytesize sub-package to python3-bytesize. This
  is the expected name by its consumers.
- Update to version 2.9:
  * This release contains fixes for some small issues.
  * Updated translations.</changelog>
</package>
<package pkgid="8d2affad16e9250aa5ee2f4e38b3bb504abc37b2849d22acdce15ddd4bb9b97d2596d47a76d407243e48498f5e0109945cc064370ce352339cc1663fdc547e28" name="bsd-games" arch="x86_64">
  <version epoch="0" ver="2.17" rel="bp160.1.13"/>
  <changelog author="varkoly@suse.com" date="1370001600">- Rename monop to monopoly to avoid conflict with mono-devel</changelog>
  <changelog author="idonmez@suse.com" date="1379937600">- Create games user/group on demand. fate#314560</changelog>
  <changelog author="sleep_walker@suse.cz" date="1380283200">- fix rot13 (bnc#827521)
- rework /usr/games/ --&gt; /usr/bin move</changelog>
  <changelog author="sleep_walker@suse.cz" date="1380888000">- remove /usr/games also from package description</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1399032000">- fix word list location for hangman and boggle</changelog>
  <changelog author="mailaender@opensuse.org" date="1417348800">- - Rename fish to fish-game to avoid conflict with fish (shell)</changelog>
  <changelog author="dimstar@opensuse.org" date="1448452800">- Hack it up to get it to build:
  + Drop cribbage mille robots
- Do not build factor instead of building and then deleting it.</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Replace %pre section with prerequires of user and group games</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1546603200">- Switch to ncurses 6 wide char ABI</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="1d02eee63831a8dd1842825c4b4a27339b117bd30199d2d074f263566e4423f5a3f824c5b938bc9363e9980fe2d4390cee437a3a3e1712d7eb410a2cbaa7ce24" name="bsdiff" arch="x86_64">
  <version epoch="0" ver="4.3" rel="bp160.1.12"/>
  <changelog author="sor.alexei@meowr.ru" date="1398168000">- Initial package.</changelog>
  <changelog author="mpluskal@suse.com" date="1449489600">- Tiny spec file cleanup</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1469534400">- Add bsdiff-fix-makefile.patch: patch Makefile instead of working
  around it in the spec file.
- Add bsdiff-fix-heap-vul.patch: fix heap vulnerability in bspatch
  (bsc#990660, CVE-2014-9862), taken from
  https://security.freebsd.org/patches/SA-16:25/bspatch.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686312000">- Spec file modernisation</changelog>
</package>
<package pkgid="29cee270d56e2922096ae8763e143790a74be9f1bd6a27d9af94b3a08de5b79e93a38afcf67b02da88f5cdcd59d76137fd2f6c7fdff2289457b6849d740cba52" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Update to 3.7.4:
  * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911)
  * zip: Fix out of boundary access
  * 7zip: Limit amount of properties
  * bsdtar: Fix error handling around strtol() usages
  * passphrase: Improve newline handling on Windows
  * passphrase: Never allow empty passwords
  * rar: Fix "File CRC Error" when extracting specific rar4 archives
  * xar: Avoid infinite link loop
  * zip: Update AppleDouble support for directories
  * zstd: Implement core detection
- Update to 3.7.3:
  * PCRE2 support
  * add trailing letter b to bsdtar(1) substitute pattern
  * add support for long options "--group" and "--owner" to tar(1)
  * Fix possible vulnerability in tar error reporting introduced in f27c173
  * ISO9660: preserve the natural order of links
  * rar5: fix decoding unicode filenames on Windows
  * rar5: fix infinite loop if during rar5 decompression the last block produced no data
  * xz filter: fix incorrect eof at the end of an lzip member
  * zip: fix end-of-data marker processing when decompressing zip archives
  * multiple bsdunzip(1) fixes
  * filetime truncation fix on Windows
- Fix rpmlint warning about summary being too long</changelog>
  <changelog author="danilo.spinella@suse.com" date="1716379200">- Fix bsdunzip test failing due to a locale issue
  * fix-bsdunzip-test.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update lib-suffix.patch
  * Add LIB_SUFFIX to libdir path in the pkg-config file</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1727438400">- Update to 3.7.6:
  * tar: clean up linkpath between entries
  * tar: fix memory leaks when processing symlinks or parsing pax headers
  * iso: be more cautious about parsing ISO-9660 timestamps
- Version 3.7.5 changes:
  * fix multiple vulnerabilities identified by SAST
  * cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing
  * lzop: prevent integer overflow
  * rar4: protect copy_from_lzss_window_to_unp() (CVE-2024-20696, bsc#1225971)
  * rar4: fix CVE-2024-26256 (CVE-2024-26256, bsc#1225972)
  * rar4: fix OOB in delta and audio filter
  * rar4: fix out of boundary access with large files
  * rar4: add boundary checks to rgb filter
  * rar4: fix OOB access with unicode filenames
  * rar5: clear 'data ready' cache on window buffer reallocs
  * rpm: calculate huge header sizes correctly
  * unzip: unify EOF handling
  * util: fix out of boundary access in mktemp functions
  * uu: stop processing if lines are too long
  * 7zip: fix issue when skipping first file in 7zip archive that is a multiple
    of 65536 bytes
  * ar: fix archive entries having no type
  * lha: do not allow negative file sizes
  * lha: fix integer truncation on 32-bit systems
  * shar: check strdup return value
  * rar5: don't try to read rediculously long names
  * xar: fix another infinite loop and expat error handling
  * many Windows fixes, cleanups and improvements
- Drop fix-soversion.patch, fix-bsdunzip-test.patch
  * Fixed upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1729166400">- Update to 3.7.7:
  * gzip: prevent a hang when processing a malformed gzip inside a gzip
  * tar: don't crash on truncated tar archives
  * tar: fix two leaks in tar header parsing
  * 7-zip: read/write symlink paths as UTF-8
  * cpio: exit with an error code if an entry could not be extracted
  * rar5: report encrypted entries
  * tar: fix truncation of entry pathnames in specific archives</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1740484800">- Fix CVE-2024-57970, heap-based buffer over-read in header_gnu_longlink
  because it mishandles truncation (CVE-2024-57970, bsc#1237233)
  * CVE-2024-57970.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742731200">- Update to 3.7.8:
  * 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors
  * tar reader: Ignore ustar size when pax size is present
  * tar writer: Fix bug when -s/a/b/ used more than once with b flag
  * libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
  * libarchive: Adding missing seeker function to archive_read_open_FILE()
- inludes the previously patched security fixes, dropping:
  CVE-2025-1632.patch, CVE-2025-25724.patch, CVE-2024-57970.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743854400">- Update to 3.7.9:
  * fix regression regarding GNU sparse entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1749124800">- update to 3.8.1:
  * libarchive: fix FILE_skip regression
  * compress: Prevent call stack overflow
  * iso9660: always check archive_string_ensure return value
  * tar: Support negative time values with pax
  * tar: Reset accumulated header state after reading macOS metadata blob
  * tar: Keep block alignment after pax error
  * tar: Handle extra bytes after sparse entries
- includes changes from 3.8.0:
  * bsdtar: support --mtime and --clamp-mtime
  * 7-zip reader: improve self-extracting archive detection
  * xar: xmllite support for the XAR reader and writer
  * zip writer: added XZ, LZMA, ZSTD and BZIP2 support
  * zip writer: added LZMA + RISCV BCJ filter
  * rar: do not skip past EOF while reading (boo#1244159)
  * rar: fix double free with over 4 billion nodes (boo#1244160)
  * rar: fix heap-buffer-overflow (boo#1244161)
  * warc: prevent signed integer overflow (boo#1244162)
  * tar: fix overflow in build_ustar_entry (boo#1244163)
  * bsdtar: don't hardlink negative inode files together
  * gz: allow setting the original filename for gzip compressed files
  * lib: improve lseek handling
  * lib: support @-prefixed Unix epoch timestamps as date strings
  * rar: support large headers on 32 bit systems
  * tar reader: Improve LFS support on 32 bit systems
- drop lib-suffix.patch, different implementation upstream
- spec file clean-up, removing currently unused -static</changelog>
</package>
<package pkgid="ab83c6e7692d40298f4dfa916b39d3e8b213232005175aad2aed1cbe5c122531cfb2bcd6fda3c759664b01b8914b2bc792ffa8cc93ab2795369112b359490f1e" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.3.1"/>
  <changelog author="danilo.spinella@suse.com" date="1716379200">- Fix bsdunzip test failing due to a locale issue
  * fix-bsdunzip-test.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update lib-suffix.patch
  * Add LIB_SUFFIX to libdir path in the pkg-config file</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1727438400">- Update to 3.7.6:
  * tar: clean up linkpath between entries
  * tar: fix memory leaks when processing symlinks or parsing pax headers
  * iso: be more cautious about parsing ISO-9660 timestamps
- Version 3.7.5 changes:
  * fix multiple vulnerabilities identified by SAST
  * cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing
  * lzop: prevent integer overflow
  * rar4: protect copy_from_lzss_window_to_unp() (CVE-2024-20696, bsc#1225971)
  * rar4: fix CVE-2024-26256 (CVE-2024-26256, bsc#1225972)
  * rar4: fix OOB in delta and audio filter
  * rar4: fix out of boundary access with large files
  * rar4: add boundary checks to rgb filter
  * rar4: fix OOB access with unicode filenames
  * rar5: clear 'data ready' cache on window buffer reallocs
  * rpm: calculate huge header sizes correctly
  * unzip: unify EOF handling
  * util: fix out of boundary access in mktemp functions
  * uu: stop processing if lines are too long
  * 7zip: fix issue when skipping first file in 7zip archive that is a multiple
    of 65536 bytes
  * ar: fix archive entries having no type
  * lha: do not allow negative file sizes
  * lha: fix integer truncation on 32-bit systems
  * shar: check strdup return value
  * rar5: don't try to read rediculously long names
  * xar: fix another infinite loop and expat error handling
  * many Windows fixes, cleanups and improvements
- Drop fix-soversion.patch, fix-bsdunzip-test.patch
  * Fixed upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1729166400">- Update to 3.7.7:
  * gzip: prevent a hang when processing a malformed gzip inside a gzip
  * tar: don't crash on truncated tar archives
  * tar: fix two leaks in tar header parsing
  * 7-zip: read/write symlink paths as UTF-8
  * cpio: exit with an error code if an entry could not be extracted
  * rar5: report encrypted entries
  * tar: fix truncation of entry pathnames in specific archives</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1740484800">- Fix CVE-2024-57970, heap-based buffer over-read in header_gnu_longlink
  because it mishandles truncation (CVE-2024-57970, bsc#1237233)
  * CVE-2024-57970.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742731200">- Update to 3.7.8:
  * 7zip reader: add SPARC and POWERPC filter support for non-LZMA compressors
  * tar reader: Ignore ustar size when pax size is present
  * tar writer: Fix bug when -s/a/b/ used more than once with b flag
  * libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
  * libarchive: Adding missing seeker function to archive_read_open_FILE()
- inludes the previously patched security fixes, dropping:
  CVE-2025-1632.patch, CVE-2025-25724.patch, CVE-2024-57970.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743854400">- Update to 3.7.9:
  * fix regression regarding GNU sparse entries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1749124800">- update to 3.8.1:
  * libarchive: fix FILE_skip regression
  * compress: Prevent call stack overflow
  * iso9660: always check archive_string_ensure return value
  * tar: Support negative time values with pax
  * tar: Reset accumulated header state after reading macOS metadata blob
  * tar: Keep block alignment after pax error
  * tar: Handle extra bytes after sparse entries
- includes changes from 3.8.0:
  * bsdtar: support --mtime and --clamp-mtime
  * 7-zip reader: improve self-extracting archive detection
  * xar: xmllite support for the XAR reader and writer
  * zip writer: added XZ, LZMA, ZSTD and BZIP2 support
  * zip writer: added LZMA + RISCV BCJ filter
  * rar: do not skip past EOF while reading (boo#1244159)
  * rar: fix double free with over 4 billion nodes (boo#1244160)
  * rar: fix heap-buffer-overflow (boo#1244161)
  * warc: prevent signed integer overflow (boo#1244162)
  * tar: fix overflow in build_ustar_entry (boo#1244163)
  * bsdtar: don't hardlink negative inode files together
  * gz: allow setting the original filename for gzip compressed files
  * lib: improve lseek handling
  * lib: support @-prefixed Unix epoch timestamps as date strings
  * rar: support large headers on 32 bit systems
  * tar reader: Improve LFS support on 32 bit systems
- drop lib-suffix.patch, different implementation upstream
- spec file clean-up, removing currently unused -static</changelog>
  <changelog author="marius.grossu@suse.com" date="1778846400">- Fix CVE-2026-4424, 257-byte heap memory leak when processing a 170-byte RAR3
  (CVE-2026-4424, bsc#1259928)
  * CVE-2026-4424.patch
- Fix CVE-2026-4426, undefined behavior due to unvalidated operand in shift expression of the zisofs decompression code 3.8.1 in function apply_substitution in file tar/subst.c
  (CVE-2026-4426, bsc#1259931)
  * CVE-2026-4426.patch
- Fix CVE-2026-4111, logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop and DoS
  (CVE-2026-4111, bsc#1259635)
  * CVE-2026-4111.patch
- Fix CVE-2026-5121, missing validation check for pz_log2_bs can a heap buffer overflow write
  (CVE-2026-5121, bsc#1261186)
  * CVE-2026-5121.patch</changelog>
</package>
<package pkgid="9f1e46556b43b4118bb669bf7f4c22a5fced811211ce9aafe71686ddc0b5bc6a2fa23e0b71bc69c6931f6878f5ed69146e16f3d7820010442842fea1e4c218a7" name="bsf" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1504785600">- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force using of java-1_8_0-openjdk-devel, since javadoc errors are
  fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Fix javadoc errors with jdk9: use build-jar-repository instead
  of system-wide CLASSPATH environmental variable
- Clean spec file and run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1513944000">- Assure that we build with java source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to anticipate a possible removal
  of 1.6 compatibility
- Modified patch:
  * build.properties.patch
    + specify source level 8</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * build-file.patch
    + Fix build of script providers</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- Clean the spec file and sanitize dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1549972800">- BuildIgnore jline to avoid a build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to parent pom, since we do not use Maven to
  build this package</changelog>
  <changelog author="fstrba@suse.com" date="1578484800">- BuildIgnore jline1 instead of jline, since the dependency of
  rhino changed</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="69275ea51af1fde12ba470583235cd4698ce330a8aee8b70d9dda6f473f21a3eba707f4680a64a14191fbfeac7d2c13ec6128552cf61ed5755693d5f4c375de3" name="bsf-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1504785600">- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force using of java-1_8_0-openjdk-devel, since javadoc errors are
  fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Fix javadoc errors with jdk9: use build-jar-repository instead
  of system-wide CLASSPATH environmental variable
- Clean spec file and run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1513944000">- Assure that we build with java source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to anticipate a possible removal
  of 1.6 compatibility
- Modified patch:
  * build.properties.patch
    + specify source level 8</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * build-file.patch
    + Fix build of script providers</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- Clean the spec file and sanitize dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1549972800">- BuildIgnore jline to avoid a build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to parent pom, since we do not use Maven to
  build this package</changelog>
  <changelog author="fstrba@suse.com" date="1578484800">- BuildIgnore jline1 instead of jline, since the dependency of
  rhino changed</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="02a7107c724a41d4485af0d3bfe1e4bd68fc24e67cdaf4b9b7d3ba59ba1f7353f2d3a046794b7168527fef1e0c4582c40f0d178c61cdb4e90066eef8d5e9039e" name="bsh2" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update package dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * beanshell-2.0b6-target.patch
  - Force java target level to 1.6
- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force building with java-1_8_0-openjdk-devel since javadoc errors
  are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Build with whatever is the default java-devel provider
- Modified patch:
  * beanshell-2.0b6-target.patch
    + specify target and source consistently
    + fix classpath issue with javadoc generation
- Added patch:
  * beanshell-2.0b6-getpeer.patch
    + fix build with jdk9
  + access the inacessible APIs by reflection</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * beanshell-2.0b6-target.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Use the pom.xml file from the sources to generate maven provides</changelog>
  <changelog author="fstrba@suse.com" date="1541073600">- Do not build against an old system asm, but use the few shaded
  files source files distributed in the tarball.
- Removed patches:
  * bsh2-ClassGeneratorUtil.patch
  * bsh2-asm.patch
  - not needed after the above change
- Modified patch:
  * beanshell-2.0b6-target.patch
  - fix source level to correspond to the target</changelog>
  <changelog author="fstrba@suse.com" date="1549540800">- Build against javacc and glassfish-servlet-api instead of
  javacc3 and servlet4</changelog>
  <changelog author="jengelh@inai.de" date="1555329600">- Replace find -exec rm by just -delete.
- Trim BSH 2.x changelog from description, and trim "In other
  words" description repetition. Trim leftover filler wording
  from description.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Update to version 2.1.1
  * Changes of 2.1.1
    + Fix src/bsh/util/AWTConsole.java breakage with newer Java
    versions
  * Changes of 2.1.0
    + This release formalizes the merge of 2.0b6 with suitable
    backports from the development version of BeanShell. Also
    included are are some ALv2 contributions to the BeanShell2
    fork that had not been folded into BeanShell but are still
    applicable to this version. For backwards compatibility
    purposes, the 2.x branch of BeanShell still supports a minimum
    Java version of 1.6.
- Modified patch:
  * beanshell-2.0b6-target.patch -&gt; 0000-source-target-1.8.patch
    + rediff to changed context and clean up
- Added patches:
  * beanshell-2.0b6-getpeer.patch
    + fixed in 2.1.1
  * bsh2-fix-tests.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="020562fddf921c1c8fffaaa395a0a6e46fb4cddae1ba9e822820a132b897e783bb5dcdf31dc333736d791dee39ebefcb43220618914ce98f076cc17561face85" name="bsh2-bsf" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update package dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * beanshell-2.0b6-target.patch
  - Force java target level to 1.6
- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force building with java-1_8_0-openjdk-devel since javadoc errors
  are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Build with whatever is the default java-devel provider
- Modified patch:
  * beanshell-2.0b6-target.patch
    + specify target and source consistently
    + fix classpath issue with javadoc generation
- Added patch:
  * beanshell-2.0b6-getpeer.patch
    + fix build with jdk9
  + access the inacessible APIs by reflection</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * beanshell-2.0b6-target.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Use the pom.xml file from the sources to generate maven provides</changelog>
  <changelog author="fstrba@suse.com" date="1541073600">- Do not build against an old system asm, but use the few shaded
  files source files distributed in the tarball.
- Removed patches:
  * bsh2-ClassGeneratorUtil.patch
  * bsh2-asm.patch
  - not needed after the above change
- Modified patch:
  * beanshell-2.0b6-target.patch
  - fix source level to correspond to the target</changelog>
  <changelog author="fstrba@suse.com" date="1549540800">- Build against javacc and glassfish-servlet-api instead of
  javacc3 and servlet4</changelog>
  <changelog author="jengelh@inai.de" date="1555329600">- Replace find -exec rm by just -delete.
- Trim BSH 2.x changelog from description, and trim "In other
  words" description repetition. Trim leftover filler wording
  from description.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Update to version 2.1.1
  * Changes of 2.1.1
    + Fix src/bsh/util/AWTConsole.java breakage with newer Java
    versions
  * Changes of 2.1.0
    + This release formalizes the merge of 2.0b6 with suitable
    backports from the development version of BeanShell. Also
    included are are some ALv2 contributions to the BeanShell2
    fork that had not been folded into BeanShell but are still
    applicable to this version. For backwards compatibility
    purposes, the 2.x branch of BeanShell still supports a minimum
    Java version of 1.6.
- Modified patch:
  * beanshell-2.0b6-target.patch -&gt; 0000-source-target-1.8.patch
    + rediff to changed context and clean up
- Added patches:
  * beanshell-2.0b6-getpeer.patch
    + fixed in 2.1.1
  * bsh2-fix-tests.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3b3956d749fbb32b6c66f0b38caaeb191d8e5babf4d3026b7a0129aa92504474fb1d11b136d031da2400f5a17ccb357413ae0f6ca72480da0cc9311b7e2a62c3" name="bsh2-classgen" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update package dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * beanshell-2.0b6-target.patch
  - Force java target level to 1.6
- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force building with java-1_8_0-openjdk-devel since javadoc errors
  are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Build with whatever is the default java-devel provider
- Modified patch:
  * beanshell-2.0b6-target.patch
    + specify target and source consistently
    + fix classpath issue with javadoc generation
- Added patch:
  * beanshell-2.0b6-getpeer.patch
    + fix build with jdk9
  + access the inacessible APIs by reflection</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * beanshell-2.0b6-target.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Use the pom.xml file from the sources to generate maven provides</changelog>
  <changelog author="fstrba@suse.com" date="1541073600">- Do not build against an old system asm, but use the few shaded
  files source files distributed in the tarball.
- Removed patches:
  * bsh2-ClassGeneratorUtil.patch
  * bsh2-asm.patch
  - not needed after the above change
- Modified patch:
  * beanshell-2.0b6-target.patch
  - fix source level to correspond to the target</changelog>
  <changelog author="fstrba@suse.com" date="1549540800">- Build against javacc and glassfish-servlet-api instead of
  javacc3 and servlet4</changelog>
  <changelog author="jengelh@inai.de" date="1555329600">- Replace find -exec rm by just -delete.
- Trim BSH 2.x changelog from description, and trim "In other
  words" description repetition. Trim leftover filler wording
  from description.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Update to version 2.1.1
  * Changes of 2.1.1
    + Fix src/bsh/util/AWTConsole.java breakage with newer Java
    versions
  * Changes of 2.1.0
    + This release formalizes the merge of 2.0b6 with suitable
    backports from the development version of BeanShell. Also
    included are are some ALv2 contributions to the BeanShell2
    fork that had not been folded into BeanShell but are still
    applicable to this version. For backwards compatibility
    purposes, the 2.x branch of BeanShell still supports a minimum
    Java version of 1.6.
- Modified patch:
  * beanshell-2.0b6-target.patch -&gt; 0000-source-target-1.8.patch
    + rediff to changed context and clean up
- Added patches:
  * beanshell-2.0b6-getpeer.patch
    + fixed in 2.1.1
  * bsh2-fix-tests.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6be7d3c05996bd9e598fa17254210547a2e383c4b42bfab45b057cc3c6196b5932489e2013710a5496fc6253e87783f9eecfb53c165374c22ebb158329b1f2fd" name="bsh2-demo" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update package dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * beanshell-2.0b6-target.patch
  - Force java target level to 1.6
- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force building with java-1_8_0-openjdk-devel since javadoc errors
  are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Build with whatever is the default java-devel provider
- Modified patch:
  * beanshell-2.0b6-target.patch
    + specify target and source consistently
    + fix classpath issue with javadoc generation
- Added patch:
  * beanshell-2.0b6-getpeer.patch
    + fix build with jdk9
  + access the inacessible APIs by reflection</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * beanshell-2.0b6-target.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Use the pom.xml file from the sources to generate maven provides</changelog>
  <changelog author="fstrba@suse.com" date="1541073600">- Do not build against an old system asm, but use the few shaded
  files source files distributed in the tarball.
- Removed patches:
  * bsh2-ClassGeneratorUtil.patch
  * bsh2-asm.patch
  - not needed after the above change
- Modified patch:
  * beanshell-2.0b6-target.patch
  - fix source level to correspond to the target</changelog>
  <changelog author="fstrba@suse.com" date="1549540800">- Build against javacc and glassfish-servlet-api instead of
  javacc3 and servlet4</changelog>
  <changelog author="jengelh@inai.de" date="1555329600">- Replace find -exec rm by just -delete.
- Trim BSH 2.x changelog from description, and trim "In other
  words" description repetition. Trim leftover filler wording
  from description.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Update to version 2.1.1
  * Changes of 2.1.1
    + Fix src/bsh/util/AWTConsole.java breakage with newer Java
    versions
  * Changes of 2.1.0
    + This release formalizes the merge of 2.0b6 with suitable
    backports from the development version of BeanShell. Also
    included are are some ALv2 contributions to the BeanShell2
    fork that had not been folded into BeanShell but are still
    applicable to this version. For backwards compatibility
    purposes, the 2.x branch of BeanShell still supports a minimum
    Java version of 1.6.
- Modified patch:
  * beanshell-2.0b6-target.patch -&gt; 0000-source-target-1.8.patch
    + rediff to changed context and clean up
- Added patches:
  * beanshell-2.0b6-getpeer.patch
    + fixed in 2.1.1
  * bsh2-fix-tests.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="70fd6e2b946b8c34c1b921ba0e279676e3833d870bcb49e1030e731e88d9fb5c1660a7c5084c9ba9d4ec729077276976023f5dd1045251d99e548358cdc2980f" name="bsh2-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update package dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * beanshell-2.0b6-target.patch
  - Force java target level to 1.6
- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force building with java-1_8_0-openjdk-devel since javadoc errors
  are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Build with whatever is the default java-devel provider
- Modified patch:
  * beanshell-2.0b6-target.patch
    + specify target and source consistently
    + fix classpath issue with javadoc generation
- Added patch:
  * beanshell-2.0b6-getpeer.patch
    + fix build with jdk9
  + access the inacessible APIs by reflection</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * beanshell-2.0b6-target.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Use the pom.xml file from the sources to generate maven provides</changelog>
  <changelog author="fstrba@suse.com" date="1541073600">- Do not build against an old system asm, but use the few shaded
  files source files distributed in the tarball.
- Removed patches:
  * bsh2-ClassGeneratorUtil.patch
  * bsh2-asm.patch
  - not needed after the above change
- Modified patch:
  * beanshell-2.0b6-target.patch
  - fix source level to correspond to the target</changelog>
  <changelog author="fstrba@suse.com" date="1549540800">- Build against javacc and glassfish-servlet-api instead of
  javacc3 and servlet4</changelog>
  <changelog author="jengelh@inai.de" date="1555329600">- Replace find -exec rm by just -delete.
- Trim BSH 2.x changelog from description, and trim "In other
  words" description repetition. Trim leftover filler wording
  from description.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Update to version 2.1.1
  * Changes of 2.1.1
    + Fix src/bsh/util/AWTConsole.java breakage with newer Java
    versions
  * Changes of 2.1.0
    + This release formalizes the merge of 2.0b6 with suitable
    backports from the development version of BeanShell. Also
    included are are some ALv2 contributions to the BeanShell2
    fork that had not been folded into BeanShell but are still
    applicable to this version. For backwards compatibility
    purposes, the 2.x branch of BeanShell still supports a minimum
    Java version of 1.6.
- Modified patch:
  * beanshell-2.0b6-target.patch -&gt; 0000-source-target-1.8.patch
    + rediff to changed context and clean up
- Added patches:
  * beanshell-2.0b6-getpeer.patch
    + fixed in 2.1.1
  * bsh2-fix-tests.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="7ef888d2238db6cd498ddd29cdf230561b2b8ae1e00d49b9779f27ba2c962913ec0f3c8b25424ec8c6e99bfe22d404dedeca0d6e8d04ba567a879bb2df4149df" name="bsh2-manual" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update package dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * beanshell-2.0b6-target.patch
  - Force java target level to 1.6
- Force java source and target levels to 1.6 in order to allow
  building with jdk9
- Force building with java-1_8_0-openjdk-devel since javadoc errors
  are fatal in jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505908800">- Build with whatever is the default java-devel provider
- Modified patch:
  * beanshell-2.0b6-target.patch
    + specify target and source consistently
    + fix classpath issue with javadoc generation
- Added patch:
  * beanshell-2.0b6-getpeer.patch
    + fix build with jdk9
  + access the inacessible APIs by reflection</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * beanshell-2.0b6-target.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Use the pom.xml file from the sources to generate maven provides</changelog>
  <changelog author="fstrba@suse.com" date="1541073600">- Do not build against an old system asm, but use the few shaded
  files source files distributed in the tarball.
- Removed patches:
  * bsh2-ClassGeneratorUtil.patch
  * bsh2-asm.patch
  - not needed after the above change
- Modified patch:
  * beanshell-2.0b6-target.patch
  - fix source level to correspond to the target</changelog>
  <changelog author="fstrba@suse.com" date="1549540800">- Build against javacc and glassfish-servlet-api instead of
  javacc3 and servlet4</changelog>
  <changelog author="jengelh@inai.de" date="1555329600">- Replace find -exec rm by just -delete.
- Trim BSH 2.x changelog from description, and trim "In other
  words" description repetition. Trim leftover filler wording
  from description.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Update to version 2.1.1
  * Changes of 2.1.1
    + Fix src/bsh/util/AWTConsole.java breakage with newer Java
    versions
  * Changes of 2.1.0
    + This release formalizes the merge of 2.0b6 with suitable
    backports from the development version of BeanShell. Also
    included are are some ALv2 contributions to the BeanShell2
    fork that had not been folded into BeanShell but are still
    applicable to this version. For backwards compatibility
    purposes, the 2.x branch of BeanShell still supports a minimum
    Java version of 1.6.
- Modified patch:
  * beanshell-2.0b6-target.patch -&gt; 0000-source-target-1.8.patch
    + rediff to changed context and clean up
- Added patches:
  * beanshell-2.0b6-getpeer.patch
    + fixed in 2.1.1
  * bsh2-fix-tests.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3f00ce5cb877e806ecf46d247eaac6efc1d0926c2d06805e33b521db591ac5bbf5af9c514e1a8f04fefd6723dc9e295add0f0fcb8422cf3a6a794328a6f71799" name="bstone" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1592481600">- Update to version 1.2.6
  Added
  * Option snd_resampling_interpolation to specify interpolation
    method for resampling.
  * Option snd_resampling_lpf to toggle low-pass filter for
    resampling.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1594123200">- Update to version 1.2.7
  Fixed
  * Extraction of compressed texts.
  * Same texture for door type BIO.
  * Player radius for item pickup.
  * Missing test for pushwall in CheckLine.
  * Fix sfx turning off when in-game sounds paused.
  * Show option "Game Options -&gt; Video -&gt; Stretch UI".
  Changed
  * Replaced almost all fixed-point arithmetic with a
    floating-point one.
  * Relay on CMake's PCH support if available.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1594382400">- Update to version 1.2.8
  Fixed
  * Disabled episodes 5 and 6 in static build.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1605355200">- Update to version 1.2.9
  Added
  * Option vid_filler_color_index to select filler color.
  Fixed
  * Enable sfx and music by default for first startup.
  * Lives counter.
  * Input floor panel visual glitches.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1613304000">- Update to version 1.2.10
  Added
  * Support for external textures (bmp, png).
  * Configuration for external textures (vid_external_textures).
  * OpenAL 3D audio driver.
  * Configuration for OpenAL driver (snd_driver, snd_oal_library,
    snd_oal_device_name).
  Fixed
  * Search path with provided data_dir.
  * Double fading on new game or load game when using hw renderer.
  * Fade whole screen when in widescreen and 3D view is showing.
  * Next map number for level transition.
  * Support for lowercase resource file names.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1616328000">- Update to version 1.2.11
  * Bindings to take screenshots (default F5).
  * Option to control weapon bobbing (actual for Planet Strike
    only).
  * PC Speaker SFX.
  * Option snd_sfx_type to switch between AdLib and PC Speaker
    audio.
  * Option snd_is_sfx_digitized to toggle SFX digitization.
  * Extracting unprocessed audio (*.data).
  * Extracting PC Speaker audio.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1643457600">- Fix license tags (statically linked libraries)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1663502400">- Update to version 1.2.12
  Added
  * Support Nuked OPL3 emulator.
  * Option to control OPL3 emulator type (snd_opl3_type).
  * [README] "Known issues" section.
  Fixed
  * Cancel strafe movement if both keys are pressed.
  * Clear damage effects after loading the game, etc.
  * Fix GOG / Steam content detection.
  * Fix checking if the level is official.
  * Fix crash after changing audio driver via the menu.
  * Match audio attenuation to vanilla as close as possible.
  * Option vid_renderer now works in command-line.
  * Render 3D scene behind "You are jamming" cheat message box.
  * Use SDL 2.0.5+ functions only if available.
  * [AOG] Conditions to complete the episode.
  * [AOG] Fix "N/A" font size and color in the floor input panel.
  * [AOG] Interact with elevator controls on east-west side only.
  * [AOG] Match transporting behavior between floors to original.
  * [AOG] Render ouch frame only on damage for Plasma Sphere.
  * [AOG] Reverse textures for charge packs.
  * [HWR] Render enter-only door size without lock as unlocked.
  * [OAL] List only available extensions.
  * [OAL] Load AL symbols within context.
  * [SDL] Error "Renderer already associated with window".
  * [SDL] Reduce CPU usage for digitized low-pass filtering.
  Changed
  * Limit stream I/O to 32 bit.
  * [OAL] List devices with ALC_ENUMERATE_ALL_EXT if available.
  * [VIDEO] Rename vid_windowed_height to vid_height.
  * [VIDEO] Rename vid_windowed_width to vid_width.
  * [VIDEO] Rename vid_windowed_x to vid_x.
  * [VIDEO] Rename vid_windowed_y to vid_y.
  Removed
  * Exclusive fullscreen mode.
  * Option vid_is_windowed.
  * Resampling low-pass filter and it's options
    (snd_resampling_interpolation, snd_resampling_lpf).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1681041600">- Add patch:
  * bstone-fix-build-with-gcc13.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="c90febdaf9151f86eab6194e33b92f2e44b300b8ae3805c126da12ad36797bfbb598859508fca54052452c10026f82a6ff696c0056c8439e3ad87fa72711d323" name="btcflash" arch="x86_64">
  <version epoch="0" ver="2022.10.16" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="91d5b0db9f31d9c59bf88f26625b7130fee4519b9decb6583ed27a4b1fa5d40be70b25d2020ab08b71ee440a3b90f4b0a1de958a8ac6b4a5015aa6bd1ab44530" name="btfdump" arch="x86_64">
  <version epoch="0" ver="0.0.4~0" rel="bp160.1.13"/>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1734264000">- Add initial btfdump package</changelog>
</package>
<package pkgid="b17dca4a9f74c142fad8fadcf9f840b1476e4a8bc7d37afd65b4f128dd7e331366050b359fcc399f2af877b81805b8a13dba8f8103013b73dbd922c6a0bbeb22" name="btfs" arch="x86_64">
  <version epoch="0" ver="2.24" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1505131200">- 2.17
  * Adjust to libtorrent 1.2 API changes
    + Session flags changed type.
    + Remove flags changed type.
  * Silence warning about deprecated flags in libtorrent 1.2
  * Tweak configure.ac
  * Handle read_piece_alert errors
    + Fixes segfault, upstream bug #42
  * Set request timeout</changelog>
  <changelog author="9@cirno.systems" date="1511784000">- 2.18
  * Force DHT announce when bootstrap completes
  * Don't set file priority to 0 at start
  * Fix delete-on-unmount
  * Remove unneeded debug prints
  * Fix a potential null pointer deref
  * Silence warning on libtorrent 1.2</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1555243200">- Modernize spec file
- 2.19
  * Add option to set data directory</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1566993600">- 2.20
  * btplay: Change shebang to python3</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- 2.22
  * bug fixes</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1599825600">- Fix build with libtorrent v2.
- Spec cleanup</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1606046400">- 2.23
  * Add --utp-only flag to disable TCP</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1613304000">- 2.24
  * use XDG_DATA_HOME if defined</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1713528000">- Build against boost 1.75 on Leap 15 to match the one used by
  libtorrent-rasterbar (code-o-o#leap/features/issue/155)</changelog>
</package>
<package pkgid="de6b3ca12e4c4fd973da0f0768d849bbf4bfd10c78bf260eb0b3e8885a91b1daca749f31e4917d7dafe5f07ca4ab11e0e01c1843362f4fdc98998418a769ffc4" name="btop" arch="x86_64">
  <version epoch="0" ver="1.4.0+git20240922.6c0cedd" rel="bp160.1.12"/>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1714564800">- Adjusting btop_collect.cpp.diff to follow suggestion from
  https://github.com/aristocratos/btop/issues/837</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1714564801">- Using '-pie' for 15.5 and 15.6 causes errors in the linking stage, removing.
- Adding btop-rpmlintrc</changelog>
  <changelog author="scott.bradnick@suse.com" date="1714564802">- Removing btop_collect.cpp.diff since it was fixed upstream
- Update to version 1.3.2+git20240501.dd4ada7:
  * Fixed missing definition for ROCm static build</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1715256000">- Adding btop-rpmlintrc as Source99</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1715688000">- Adding 'BuildRequires: lowdown' for manpage generation.
  * Currently TW only since lowdown isn't present in Leap</changelog>
  <changelog author="scott.bradnick@suse.com" date="1717243200">- Update to version 1.3.2+git20240601.516979b:
  * Fixed missing CPU core temps when too small to show core temp graphs, issues #792 #867
  * Fixed missing IO graphs in IO mode, issue #867
  * V1 of Phoenix Night theme
  * Add missing linker flag for static links on FreeBSD
  * Fix comments in theme files
  * fix zero temp (#467)</changelog>
  <changelog author="Scott Bradnick &lt;scott.bradnick@suse.com&gt;" date="1717675200">- Updating ROCm to v6.1.2
  * Adding note about RSMI_STATIC=true not working for gcc-14
  * Possibly https://github.com/ROCm/rocm_smi_lib/issues/170 has a fix?</changelog>
  <changelog author="scott.bradnick@suse.com" date="1721995200">- Update to version 1.3.2+git20240624.e4f69cd:
  * Updated soon to be deprecated actions to latest versions
  * Removed macos-14 for now due to XCode bug when compiling with gcc
  * Removed deprecated macos-11 and add macos-13 and macos-14
  * Update spacing
  * fix io_graph_speeds parsing
  * fix divide 0 error when caculating disk usage percentage (#791)</changelog>
  <changelog author="scott.bradnick@suse.com" date="1723809600">- Updating ROCm to v6.2.0
- Update to version 1.3.2+git20240805.00c9088:
  * fix: include missed out utility header.
  * Switch macos continuous build from gcc to clang
  * Add fix for disk used and free percent #791
  * Beautify command line error output and help message
  * Disable STATIC build for cmake.
  * Fix the pkg_add command in README.
  * Bump NetBSD to 10.0 in CI.
  * Update README.md with NetBSD details.
  * Ignore netbsd folder in other builds.
  * Use kvm and ifaddr defs from shared.hpp.
  * Simplify the CI command.
  * Add support for reading thermal stats.
  * Add support for reading battery stats.
  * Get the 64 bit value of physmem.
  * Add CMake build support for NetBSD.
  * Attempt to fix the CI.
  * Fix some of the memory stats.
  * Add build files for NetBSD.
  * Add NetBSD Support.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1727006400">- Updating ROCm to v6.2.1
- Update to version 1.4.0+git20240922.6c0cedd:
  * v1.4.0 Intel GPU support &amp; NetBSD support
  * Added documentation for Intel GPU support and setcap command to Makefile
  * Set Intel GPU baseline max power at 10W
  * Added warnings when toggling boxes and terminal size is to small
  * Fix missing core percentages, issue #792
  * GPU fixes
  * Fix missing headers headers for GPU build on Alpine
  * Fixed includes for CC
  * Fixed Makefile and added workaround for missing asprintf with Clang
  * intel gpu frequency
  * don't namespace on x64
  * add stdio
  * intel gpu power consumption
  * intel igpu support</changelog>
</package>
<package pkgid="2ac3d8796b51ebe44ac277e5693d66faf7aab73533f177c7e0f523503912ff5b41ff60a9e680a3acefb6b15bad963cea03f306c90645968d8f7c9b22781deb9b" name="btrfs-extent-same" arch="x86_64">
  <version epoch="0" ver="0.15" rel="160000.1.2"/>
  <changelog author="mpluskal@suse.com" date="1592136000">- Fix building with gcc10</changelog>
  <changelog author="nborisov@suse.com" date="1604577600">- Update to v0.11.2
  - Improved detection of hyperthreading
  - Multiple minor fixes and cleanups
  - Updated xxhash algorithm to latest release
  - Fixed extent collision handling
  - Fix overflow scanning in extents</changelog>
  <changelog author="mvetter@suse.com" date="1643889600">- Update to 0.11.3:
  * Increase open file limit. (#269)
  * Create hash database file with 600 permission for improved
    security. (#262)
  * Read more data per pread, for v2 hashfile format this reduces
    the overall number of syscalls made which in turns results
    in better performance.
  * Fix truncated file handling, eliminating a an infinite
    loop case. (#255)</changelog>
  <changelog author="mvetter@suse.com" date="1689595200">- Update to 0.12:
  * Duplication lookup is now based on extents. This leads to a
    massive increase of the performances. Block-based lookup is
    still possible via --dedupe-options=partial.
  * Following that change, a new hashfile format has been introduced.
    Previous hashfile format is still supported when extents lookup
    are disabled, this is not recommended.
  * Batching has been implemented. When enabled with the -B &lt;batchsize&gt;
    option, duperemove will run the deduplication phase every &lt;batchsize&gt;
    scanned files. This is meant to help running duperemove on large
    dataset, with small blocksize, or on memory-constrained systems.
  * All hash algorithm has been removed and replaced by xxh128. This
    variant is as robust as murmur3 while being faster. Choosing a
    hash function via the --hash option has been removed. Hashfiles
    built with other algorithm must be removed.</changelog>
  <changelog author="pgajdos@suse.com" date="1694692800">- build for 15</changelog>
  <changelog author="mvetter@suse.com" date="1695988800">- Update to 0.13:
  * Add a new dedupe option: [no]rescan_files. It will increase
    performance in some use cases.
  * New behaviors from v0.12 has been consolidated. Extent-based
    lookup is always enabled, as is fiemap. The v2
    hashfile is no longer supported.
  * Hashfile are now updated after deduplication, to reflect the
    new physical offsets. This avoid (re)deduplicating extents
    in some cases.
  * Partial mode has been enhanced to support batching. The
    overall performance of this mode (which was previously known
    as "block-based mode") has been improved.
  * All files are now open in readonly mode.
  * Hashfile version has been increased to reflect the new
    database behaviors. Previous hashfiles are not compatible.
  * Always compute a hash for the entire file. This let us
    deduplicate same files easily, regardless of their
    extents mappings.
  * Deduplicating only parts of a file can be disabled using
    the [no]only_whole_files dedupe option.
  * Hashfiles with unsupported features or hash algorithm are
    now recreated transparently. Migration of the old content
    is not implemented.
  * Relative exclude patterns are no longer silently ingested.
    Such patterns are now rebuilt on top of the current
    working directory.
  * Batching is now set to 1024 by default.</changelog>
  <changelog author="mvetter@suse.com" date="1700395200">- Update to 0.14:
  * Batching has been reimplemented on top of the dedupe_seq.
  * The "scan" phase has been reimplemented (see 8264336 for details).
  * Filesystem locking has been implemented. See f3947e9 for details.</changelog>
  <changelog author="mvetter@suse.com" date="1701000000">- Update to 0.14.1:
  * file_scan: satisfy clang CFI
  * file_scan: walk_dir: improve rootfs support
  * dbfile: get_duplicate_files: exclude inlined files before
    looking for duplicates
  * filerec: fiemap_scan_extent: fix typo: we must check the
    return from get_extent</changelog>
  <changelog author="pgajdos@suse.com" date="1731585600">- force newer gcc version in sync (isc rq #353372)</changelog>
  <changelog author="mvetter@suse.com" date="1738756800">- Update to 0.15:
  * Files are no longer invalidated when renamed.
  * The scan phase now reports both files and bytes in its progress,
    which is especially useful when processing large files.
- Add duperemove-0.15-buildfail.patch:
  To fix the build. See #367.
- Add subpackage for zsh completions</changelog>
</package>
<package pkgid="9e108456273d82babf0dd0b100fc1bff8b86b00cb81e55722a31629ad16f30a2b6d54538139300cc0315cec79086881b7ca2ab124a6bfd9a5ee3faf054422c44" name="btrfsmaintenance" arch="noarch">
  <version epoch="0" ver="0.5" rel="160000.2.2"/>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="dsterba@suse.cz" date="1560254401">- spec: fix typo in macro name</changelog>
  <changelog author="dsterba@suse.cz" date="1596024000">- update to version 0.5
  - sysconfig:
  - change defaults of MUSAGE and DUSAGE for balance task to do less work,
    with a script to switch from existing unmodified defaults to new ones
  - document systemd.timer syntax
  - make balance, scrub, and trim mutually exclusive tasks
  - service file updates:
  - delete Install section
  - defrag-plugin:
  - switch to python3
  - add alternative shell implementation of the plugin
  - installation docs update
- Removed patches (upstream):
  - 0001-README-document-impact-of-balance-quota-groups.patch
  - 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  - 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  - 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  - 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="kukuk@suse.com" date="1612958400">- Require libzypp plugin only if zypper is used (Required for e.g.
  image based systems).</changelog>
</package>
<package pkgid="76715b5dcce102e25c4cd2b3616e857c7e6586aa3d042c425b3a1491d61ae1520c15fb7e66b017384a1dae30fcacd97265f1f4f9cdf61f1cc46ffb5f024c13ee" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="66ce6f5693b9f60f77d575ffe9321c0f0a064daa152092cfbc5a618cd5fb39f57aabca0c5b4b0565cdee0ec0011d2486b3ac94d2d15a5c36967e35e04b167761" name="btrfsprogs-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="627852f7ae770339fe657cd10c7e60583220f8042b648330eff149510a25d2b141734843375067dbc7db81f2535c422860110c0b80c89fe10a9206f20bdc8f4a" name="btrfsprogs-static" arch="x86_64">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="db902a1d0bd8897c48c9550269c0efa199cf2301be1048af3beb9d114c26a5ed6339f7f9d7ddfd25571fe3bc47e7f5aa8536027b0ecca1d081fd4878728e5d20" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="6.14" rel="160000.2.2"/>
  <changelog author="ddiss@suse.com" date="1711540800">- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)</changelog>
  <changelog author="dsterba@suse.cz" date="1714651200">- update to 6.8.1
  * mkfs: fix writing on zoned device when block-group-tree is selected
  * tune: fix writing on zoned device with option --convert-to-block-group-tree
  * check:
  * more progress and error messages
  * unify handling of unknown command line options with other commands
  * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
    (added in 6.6.3), qgroup deletion does not always work due to delayed
    background processing of subvolume or set value in
    sysfs:ggroup/drop_subtree_threshold
  * other:
  * misc refactoring
  * error handling fixes reported by gcc -fanalyzer
  * documentation updates
  * new and updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1718798400">- update to 6.9
  * mkfs:
  * if --force used, don't continue if the mount status cannot be
    determined (e.g. due to permissions)
  * fix minimum size calculation on zoned devices, make it work with option -b
  * check:
  * option --clear-ino-cache removed (functionality still provided in
    'rescue' command group)
  * detect and repair wrong file extent item ram_bytes value
  * qgroup clear-stale:
  * sync the filesystem before search to read the up to date state
  * handle cases where qgroup cannot be deleted due to uncleaned subvolume
    or when squota is enabled
  * qgroup show: display status of qgroup regarding the cleaning of the
    subvolume or if it's squota
  * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
  * tune change-csum: fix check of dev-replace status item, continue if no
    dev-replace in progress
  * dump-tree: print contents of dev-replace status item
  * convert: fix extent iteration to handle prealloc/unwritten extents
  * libbtrfsutil:
  * patchlevel version update 1.3.1
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * libbtrfs:
  * patchlevel version update 0.1.3
  * fix potentially unaligned access to send stream
  * create library links to all version levels
  * build:
  * fix compatibility with e2fsprogs 1.47.1
  * fix header file dependency tracking
  * other:
  * documentation updates</changelog>
  <changelog author="dheidler@suse.de" date="1718971200">- Let btrfsprogs-bash-completion require btrfsprogs with same version
  as there is a file conflict with the bash completion scripts
  still being bundled with btrfsprogs in older versions shipped with 15.6</changelog>
  <changelog author="dsterba@suse.cz" date="1720094400">- update to 6.9.2
  * subvol list: fix accidental trimming of subvolume name
  * check: revert checking file extent item 'ram_bytes'
  * libbtrfsutil:
  * patchlevel version update 1.3.2
  * fix accidentally closing fd passed to subvolume iterator
- update to 6.9.1
  * fix detection of intermediate super block flags (e.g. csum change and
    other conversions)
  * raid-stripe-tree support (still experimental):
  * moved under experimental build flags (mkfs, convert)
  * format change, removed encoding type; backward incompatible
  * receive dump: escape special chars in xattr names and values, and clone
    source path
  * tune change csum: fix reservation size when starting a transaction
  * other:
  * new and updated tests
  * updated CI images, new reference build targets
  * cleanups and refactoring</changelog>
  <changelog author="dsterba@suse.cz" date="1722427200">- update to 6.10
  * inspect:
  * list-chunks: new command to print information about chunks (i.e.
    the physical chunks as stored on devices), sortable; requires root as
    it's using SEARCH_TREE ioctl
  * tree-stats:
  * new option -t to print only the given tree
  * add long options for size units
  * filesystem df: with increased verbosity print per-type information from sysfs
  * version: print a line with built-in features or options (+FEATURE1 -FEATURE2)
  * image: document option -s and its potential problems
  * fixes:
  * scrub status: user selected base for Rate values
  * receive: escape special characters in paths and xattrs
  * dump-tree: escape special characters in paths and xattrs
  * image: sanitizing filenames did not work properly in all cases
  * convert: fix displayed restored image path on rollback
  * tune change csum: do conversion in smaller batches
  * other:
  * build fixes for uClibc
  * build fix for python 3.13
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1723723200">- update to 6.10.1
  * mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
    instead, also warn about them, this did not work as expected and will be
    fixed in the future
  * receive: search in older trees for UUIDs when detecting clone sources
  * libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
  * libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
  * other: documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1736164800">- update to 6.12
  * subvolume delete: add new option to do recursive subvolume deletion (for
    regular user delete only accessible subvolumes)
  * mkfs:
  * new option --subvol to create subvolumes in given paths, read-write,
    read-only and default
  * add hard link detection support for --rootdir option
  * fixes:
  * receive: message verbosity fixes
  * check: fix false positive report of missing checksum for extent holes
  * check: handle compressed extents when checking tree log
  * when asking Y/N user questions, flush the terminal so the question is
    displayed (e.g. btrfstune -S)
  * other
  * code refactoring, error handling
  * python packaging fixes
  * documentation updates
  * new tests
- update to 6.11
  * check:
  * check items in tree-log
  * detect invalid file extent items for symlinks
  * properly detect inode cache and suggest removal by 'clear-ino-cache'
  * convert: fix symlink length checks
  * fi show: remove stray newline at the end of the output
  * fixes:
  * open devices in write-exclusive mode in most commands, prevent
    concurrent mount by other programs
  * rescue clear-ino-cache: fix subvolume iteration that can fail in some cases
  * map-logical: fix first extent searching condition
  * fi resize: warn if new size is below 256M
  * tree-checker:
  * slightly stricter file type validation
  * verify device extent items
  * other:
  * documentation updates
  * ship btrfs-ioctl manual page (incomplete)</changelog>
  <changelog author="dsterba@suse.cz" date="1743422400">- update to 6.13
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec: package btrfs-find-root unconditionally (bsc#1239992)
- Refresh patches: mkfs-default-features.patch (context)</changelog>
  <changelog author="dsterba@suse.cz" date="1743681600">- update to 6.14
  * mkfs:
  * allow --sectorsize to be 2K for testing purposes of subpage mode (needs
    the same block size supported by kernel)
  * fix false error when no compression is requested and lzo is not compiled in
  * convert: support 2K block size in the source filesystem
  * defrag: new parameter -L/--level to specify compression levels (kernel 6.15),
    also supports the realtime levels
  * subvol delete: show names of recursively deleted child subvolumes
  * qgroup show: use sysfs to detect up to date consistency status
  * zoned mode: support zone capacity tracking
  * other:
  * CI new and updated workflows
  * documentation updates
- spec file:
  - update subpackage descriptions
  - drop conditional build of documentation, always use source
  - drop pre-systemd udev workarounds (version 190)</changelog>
</package>
<package pkgid="215c6c68a90dbed31a86c9e9c00e698d4463353b1d73a48db02799bae9bce0823c909f252da84028a6f8d4dad98ba04bf3dfeabd1b55c72eddd94de1b634ae7c" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="160000.2.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1712059200">- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink already
    exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1723636800">- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1730462400">- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature</changelog>
  <changelog author="sebix@sebix.at" date="1731844800">- fix shebang in demos/flatpak-run.sh</changelog>
</package>
<package pkgid="e103a82724f33181d61777f4891bda4e270a33f41c155ad91b7a803d4d6aded945f2808416a8166a7c6fe5c707c8ea9875891b8276b5145207a5929782ce88db" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1712059200">- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink already
    exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1723636800">- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1730462400">- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature</changelog>
  <changelog author="sebix@sebix.at" date="1731844800">- fix shebang in demos/flatpak-run.sh</changelog>
  <changelog author="mgorse@suse.com" date="1777464000">- Fix CVE-2026-41163 (bsc#1263113):
  + bubblewrap-dont-run-privilege-separated-code-bumpable.patch
  + bubblewrap-harden-privsep-parent.patch</changelog>
</package>
<package pkgid="8b30a040f73397b3de86cae5582d5d4356975d7ba42ebba4616625813b5101ad244ebe9c51def368979d112a883964eff4812562cc98b000b6eca4c1cecfd1dd" name="bubblewrap-zsh-completion" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="160000.2.2"/>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1712059200">- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink already
    exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1723636800">- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1730462400">- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature</changelog>
  <changelog author="sebix@sebix.at" date="1731844800">- fix shebang in demos/flatpak-run.sh</changelog>
</package>
<package pkgid="178a63a9315bfdd2cc2a2adfccc497683abe68aa10db0fbf7d75fa3cb9c5102c5f4926058809ff7626f94adad76ea335d58e8ed73d987fdd3f44128933bdb8ab" name="bubblewrap-zsh-completion" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1712059200">- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink already
    exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1723636800">- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1730462400">- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature</changelog>
  <changelog author="sebix@sebix.at" date="1731844800">- fix shebang in demos/flatpak-run.sh</changelog>
  <changelog author="mgorse@suse.com" date="1777464000">- Fix CVE-2026-41163 (bsc#1263113):
  + bubblewrap-dont-run-privilege-separated-code-bumpable.patch
  + bubblewrap-harden-privsep-parent.patch</changelog>
</package>
<package pkgid="741b7b04ab5d624c71b2e737082610ecc7cd3580d6198aedfb487795569ce95a43d81c09daa0aa116050f8ea1a4b314431cabb24fce13d2c22f42182d53eb661" name="budgie-app-launcher-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="8919b2f8e805c8f6909836603e2fe4a698a61f1d19bb51d934efdcd85b9b4270d27da439a31caf51d50568163e29d36400a544fc993c0e60f4959c31899f77f9" name="budgie-applications-menu-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="0be1bd8e1f06677f590045ab8ac20b5acd3acbac38614a13a606768f988463d28d059dc2aabb4a985d0cee55ae9070895065e3ad5495e0d9bc290797d7a50176" name="budgie-backgrounds" arch="noarch">
  <version epoch="0" ver="3.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1669118400">- Initial packaging version 0.1+9</changelog>
  <changelog author="gmbr3@opensuse.org" date="1675598400">- Update to version 1.0+0:
  * Added various material style wallpapers.
  * Add Amidst the Tea Gardens picture from Wikimedia Commons
  * Add picture of High Trestle Trail from Wikimedia Commons
  * Slightly increase contrast of Roman Colosseum background
  * Add picture of Piazza Gae Aulenti from Wikimedia Commons
  * Add image of Roman Colosseum from Wikimedia Commons
  * Add Accelerated Green wallpaper from Wikimedia Commons
  * Add 'A Kitten On The Lawn' wallpaper
  * Sort backgrounds by type
  * Add abstract spiral from Wikimedia Commons
  * Add Oakland Zoo otters from the Wikimedia Commons
  * Add canyon wren from Wikimedia Commons
  * Add image of perched osprey</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 2.0+0:
  * Add picture of Orange Hallway from Wikimedia Commons
  * Add picture of Singaporean Cityscape from Flickr
  * Add picture of Ocean Waves from rawpixel
  * Add picture of Extreme Desert Hike from Wikimedia Commons
  * Add picture of Casa Milá from Wikimedia Commons
  * Add picture of Dragonfly on Lavender from Wikimedia Commons
  * Add picture of Motherboard Circuits from Negative Space
  * Add picture of Blue Periwinkle from Wikimedia Commons
  * Add picture of Solaris Grapes from Wikimedia Commons
  * Avoid to install bash for build stage</changelog>
  <changelog author="gmbr3@opensuse.org" date="1712750400">- Update to version 3.0:
  * Bump version to v3.0
  * Cull a bunch of backgrounds
  * Add CODEOWNERS for budgie-backgrounds</changelog>
</package>
<package pkgid="3beb76e90dd85aad51b21de2feb5e901ea4a1b12cc4272e29a9ee70a1e95c00af183b64be4a1f2ab8c9f42da3f901d9b90deab1576c99bb4feb7349b5d928ce4" name="budgie-brightness-controller-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="05bd1d1b68d8b404b5e2e15b47d8a26b689677f58b46e5644a23ebcf28d2e27c28c0d929ad9a4ccff3e4a79bb3f529b4689cb06531946e53a4929de35814494f" name="budgie-clockworks-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="79ed1ebc2eb9cdb7ffc26d906056c329c8797ae7a61c2ffe8c1b1d91154e57087e0cc88c58d68cec34689d67a77f6a88d2590544d8bf8684edd0d5e66d4dc3fc" name="budgie-control-center" arch="x86_64">
  <version epoch="0" ver="1.4.0+2" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1653652800">- Update to version 1.0.2+0:
  * Add missing systemd-service file for vnc sharing
  * v1.0.2 version bump
  * Rework VNC screensharing to work with GNOME 42 version of
    GNOME Remote Desktop
  * Rework fractional scaling to disable the lock-screen
    GNOME/Budgie screensaver goes into a flash loop when
    fractional scaling options are used.
  * Move some items out to fix some fallback.
  * Enable setting a dark distributor logo for Fedora.
  * build: Bump required gsettings-desktop-schemas version
  * small typo
  * Ensure buddies gresource includes sound test icons
  * Correct build issues with documentation meson option/disable
    wayland building as a default
  * Bump microrelease
  * Reorganize directories to match budgie-desktop
  * Port: Add individual app icons
  * Fix lintian reported typo
  * network: Fix OWE settings</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659960000">- Update to version 1.1.0+0:
  * Update GLib dependency to 2.70
  * power: Remove support for power-profiles-daemon &lt; 0.9.0
  * build: Add script to detect files in XDG_DATA_DIRS
  * sharing: Turn off VNC gsettings key when turning off VNC (CVE-2022-1736, lp#1971415)
  * sharing: Turn off RDP gsettings key when turning off RDP (lp#1971415)
  * applications: Switch to g_spawn_check_wait_status()
  * applications: Properly protect against NULL app_id
  * wacom: Explicitly discard input from touchscreens
  * wacom: Allow NULL monitors in calibration
  * wwan: Make sure secrets are set when querying connection APN password
  * display: Always show refresh rate
  * network: Fix saving passwords for non-wifi connections
  * build: Bump required gsettings-desktop-schemas version
  * ua: Use the new high contrast key
  * datetime: Remove tzname_daylight
  * keyboard-shortcut-editor: fix leak of accel string
  * keyboard-item: fix leak on unused CcKeyCombo
  * keyboard-manager: fix leak of section list store
  * common: Fix leak of GUdevDevice
  * network: fix critical when opening VPN details page
  * wacom: Add scenario tester
  * wacom: Add a fake stylus when mocking a tablet
  * wacom: Split off notebook switching for detected stylus
  * wacom: Print errors for libwacom_new_from_*() calls
  * info-overview: Allow changing "Device Name" by pressing "Enter"
  * small typo
  * Ensure buddies gresource includes sound test icons
  * Remove Python from dependencies
  * Fix typo in feature template
  * Edit typo in bug_report template</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665057600">- Update to version 1.1.1+0:
  * Update background preview to look more like Budgie
  * Ensure VNC/RDP remote control settings is honored
  * Handle keybindings extraction
  * More comprehensive C string extraction
  * panels: wwan: Add WWAN 5G connection support</changelog>
  <changelog author="gmbr3@opensuse.org" date="1675598400">- Update to version 1.2.0+0:
  * thunderbolt: Ensure client and devices exist when setting
    visibility
  * thunderbolt: Hide panel if there's no thunderbolt hardware
  * info-overview: Remove "Mesa" prefix for Intel Iris driver
  * wwan: wait for apn_list to exist to add SIM providers
  * wwan: Set apn access method before adding to list
  * wwan: Update apn list only if device is available
  * wwan: Track apn list updates
  * Better english for the duplicate fingerprint
  * user-account: Return duplicate notification when the finger is
    exist
  * info-overview: Add "Kernel Version" row
  * info: Make get_hardware_model use a hostnamed property getter
  * net-device-ethernet: Don't check device iface name
  * net-device-ethernet: Prevent double free
  * network: Fixed Network profiles shown on wrong device
  * network: Fix an assertion failure
  * cc-printers-panel: don't show two Add Printer buttons at once</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 1.3.0+0:
  * shell: fix visibility check for rows and avoid empty searches
  * shell: avoid activating panel from an empty search
  * Set last-panel only for noncrashing panels
  * network: Increase maximum MTU value from 10000 to 65536
  * display: Removed the loop from the snapping function
  * display: Try snapping all the displays after a config change
  * sound: Prevent duplicate sound device entries
  * common: hostname-entry: Update hostname only after apply is
    clicked
  * usage: Fix confirmation dialog when clearing history
  * thunderbold: Don't cast CcBoltPanel when cancelled
  * user-accounts: close CcAvatarChooser before showing
    GtkFileChooser
  * user-accounts: disallow commas in real name
  * printers: Use CUPS dest API for printing test page
    instead CUPS IPP API
  * keyboard: country matches should not be shown under a
    language name.
  * display: Add 32:9 to known aspect ratios
  * sound: Add a "None" option to the alert chooser
  * sound: Update sounds directory mtime when changing alert
  * sound: Don't flip the balance and fade sliders in RTL
  * Rework cc-usage-panel.c to display dialog on history
    clearance
  * Update POT for the latest translatables
  * Add support for switching the file manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700222400">- Dependencies changed for 15.6 (boo#1217233):
  * BR pkgconfig(krb5)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- GNOME Bluetooth v1 will stick around until we can remove it
  from here - hopefully very soon</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708344000">- Add LGPL-3.0-or-later based on legaldb review
  cc-tls-certificate.c/.h are under LGPL-3.0+</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 1.4.0+2:
  * fix: FTBFS with incompatible-pointer-types
  * Bump version
  * Latest translations
  * Add code and compilation option to support socket
    SSH based connections
  * Disable gnome-online-accounts due to latest upstream GOA
  * support both sshd socket and services for remote login
  * Hide remote desktop sharing support
  * Latest translations
  * Update to gvc version to resolve occasional pipewire crashes
    when mute/unmute of microphone volume
  * subprojects: Update gvc
  * Replace deprecated license format
  * Add the ability to toggle disabling touchpad whilst typing
  * Update appdata fields
  * Update wacom tester to actually launch budgie-control-center</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove cheese dependency for 16.0</changelog>
</package>
<package pkgid="f82f297b88292bee95a512d2f5d86895d02726fc2da1b840ae4419b6b4da475de511c72dc2f7ff1594bb8c239bb0e494b085e595b155a002a405b74e6cd9e000" name="budgie-control-center-bash-completion" arch="x86_64">
  <version epoch="0" ver="1.4.0+2" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1653652800">- Update to version 1.0.2+0:
  * Add missing systemd-service file for vnc sharing
  * v1.0.2 version bump
  * Rework VNC screensharing to work with GNOME 42 version of
    GNOME Remote Desktop
  * Rework fractional scaling to disable the lock-screen
    GNOME/Budgie screensaver goes into a flash loop when
    fractional scaling options are used.
  * Move some items out to fix some fallback.
  * Enable setting a dark distributor logo for Fedora.
  * build: Bump required gsettings-desktop-schemas version
  * small typo
  * Ensure buddies gresource includes sound test icons
  * Correct build issues with documentation meson option/disable
    wayland building as a default
  * Bump microrelease
  * Reorganize directories to match budgie-desktop
  * Port: Add individual app icons
  * Fix lintian reported typo
  * network: Fix OWE settings</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659960000">- Update to version 1.1.0+0:
  * Update GLib dependency to 2.70
  * power: Remove support for power-profiles-daemon &lt; 0.9.0
  * build: Add script to detect files in XDG_DATA_DIRS
  * sharing: Turn off VNC gsettings key when turning off VNC (CVE-2022-1736, lp#1971415)
  * sharing: Turn off RDP gsettings key when turning off RDP (lp#1971415)
  * applications: Switch to g_spawn_check_wait_status()
  * applications: Properly protect against NULL app_id
  * wacom: Explicitly discard input from touchscreens
  * wacom: Allow NULL monitors in calibration
  * wwan: Make sure secrets are set when querying connection APN password
  * display: Always show refresh rate
  * network: Fix saving passwords for non-wifi connections
  * build: Bump required gsettings-desktop-schemas version
  * ua: Use the new high contrast key
  * datetime: Remove tzname_daylight
  * keyboard-shortcut-editor: fix leak of accel string
  * keyboard-item: fix leak on unused CcKeyCombo
  * keyboard-manager: fix leak of section list store
  * common: Fix leak of GUdevDevice
  * network: fix critical when opening VPN details page
  * wacom: Add scenario tester
  * wacom: Add a fake stylus when mocking a tablet
  * wacom: Split off notebook switching for detected stylus
  * wacom: Print errors for libwacom_new_from_*() calls
  * info-overview: Allow changing "Device Name" by pressing "Enter"
  * small typo
  * Ensure buddies gresource includes sound test icons
  * Remove Python from dependencies
  * Fix typo in feature template
  * Edit typo in bug_report template</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665057600">- Update to version 1.1.1+0:
  * Update background preview to look more like Budgie
  * Ensure VNC/RDP remote control settings is honored
  * Handle keybindings extraction
  * More comprehensive C string extraction
  * panels: wwan: Add WWAN 5G connection support</changelog>
  <changelog author="gmbr3@opensuse.org" date="1675598400">- Update to version 1.2.0+0:
  * thunderbolt: Ensure client and devices exist when setting
    visibility
  * thunderbolt: Hide panel if there's no thunderbolt hardware
  * info-overview: Remove "Mesa" prefix for Intel Iris driver
  * wwan: wait for apn_list to exist to add SIM providers
  * wwan: Set apn access method before adding to list
  * wwan: Update apn list only if device is available
  * wwan: Track apn list updates
  * Better english for the duplicate fingerprint
  * user-account: Return duplicate notification when the finger is
    exist
  * info-overview: Add "Kernel Version" row
  * info: Make get_hardware_model use a hostnamed property getter
  * net-device-ethernet: Don't check device iface name
  * net-device-ethernet: Prevent double free
  * network: Fixed Network profiles shown on wrong device
  * network: Fix an assertion failure
  * cc-printers-panel: don't show two Add Printer buttons at once</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 1.3.0+0:
  * shell: fix visibility check for rows and avoid empty searches
  * shell: avoid activating panel from an empty search
  * Set last-panel only for noncrashing panels
  * network: Increase maximum MTU value from 10000 to 65536
  * display: Removed the loop from the snapping function
  * display: Try snapping all the displays after a config change
  * sound: Prevent duplicate sound device entries
  * common: hostname-entry: Update hostname only after apply is
    clicked
  * usage: Fix confirmation dialog when clearing history
  * thunderbold: Don't cast CcBoltPanel when cancelled
  * user-accounts: close CcAvatarChooser before showing
    GtkFileChooser
  * user-accounts: disallow commas in real name
  * printers: Use CUPS dest API for printing test page
    instead CUPS IPP API
  * keyboard: country matches should not be shown under a
    language name.
  * display: Add 32:9 to known aspect ratios
  * sound: Add a "None" option to the alert chooser
  * sound: Update sounds directory mtime when changing alert
  * sound: Don't flip the balance and fade sliders in RTL
  * Rework cc-usage-panel.c to display dialog on history
    clearance
  * Update POT for the latest translatables
  * Add support for switching the file manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700222400">- Dependencies changed for 15.6 (boo#1217233):
  * BR pkgconfig(krb5)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- GNOME Bluetooth v1 will stick around until we can remove it
  from here - hopefully very soon</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708344000">- Add LGPL-3.0-or-later based on legaldb review
  cc-tls-certificate.c/.h are under LGPL-3.0+</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 1.4.0+2:
  * fix: FTBFS with incompatible-pointer-types
  * Bump version
  * Latest translations
  * Add code and compilation option to support socket
    SSH based connections
  * Disable gnome-online-accounts due to latest upstream GOA
  * support both sshd socket and services for remote login
  * Hide remote desktop sharing support
  * Latest translations
  * Update to gvc version to resolve occasional pipewire crashes
    when mute/unmute of microphone volume
  * subprojects: Update gvc
  * Replace deprecated license format
  * Add the ability to toggle disabling touchpad whilst typing
  * Update appdata fields
  * Update wacom tester to actually launch budgie-control-center</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove cheese dependency for 16.0</changelog>
</package>
<package pkgid="165e24d5cd9e319225998cbd18998a224dd737580c881b2a2ab7dfad8acd71a96c6434c7d899f799d4910b482abc68d06fcc0ef26186f7030fd7d23bffd2c47b" name="budgie-control-center-lang" arch="noarch">
  <version epoch="0" ver="1.4.0+2" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1653652800">- Update to version 1.0.2+0:
  * Add missing systemd-service file for vnc sharing
  * v1.0.2 version bump
  * Rework VNC screensharing to work with GNOME 42 version of
    GNOME Remote Desktop
  * Rework fractional scaling to disable the lock-screen
    GNOME/Budgie screensaver goes into a flash loop when
    fractional scaling options are used.
  * Move some items out to fix some fallback.
  * Enable setting a dark distributor logo for Fedora.
  * build: Bump required gsettings-desktop-schemas version
  * small typo
  * Ensure buddies gresource includes sound test icons
  * Correct build issues with documentation meson option/disable
    wayland building as a default
  * Bump microrelease
  * Reorganize directories to match budgie-desktop
  * Port: Add individual app icons
  * Fix lintian reported typo
  * network: Fix OWE settings</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659960000">- Update to version 1.1.0+0:
  * Update GLib dependency to 2.70
  * power: Remove support for power-profiles-daemon &lt; 0.9.0
  * build: Add script to detect files in XDG_DATA_DIRS
  * sharing: Turn off VNC gsettings key when turning off VNC (CVE-2022-1736, lp#1971415)
  * sharing: Turn off RDP gsettings key when turning off RDP (lp#1971415)
  * applications: Switch to g_spawn_check_wait_status()
  * applications: Properly protect against NULL app_id
  * wacom: Explicitly discard input from touchscreens
  * wacom: Allow NULL monitors in calibration
  * wwan: Make sure secrets are set when querying connection APN password
  * display: Always show refresh rate
  * network: Fix saving passwords for non-wifi connections
  * build: Bump required gsettings-desktop-schemas version
  * ua: Use the new high contrast key
  * datetime: Remove tzname_daylight
  * keyboard-shortcut-editor: fix leak of accel string
  * keyboard-item: fix leak on unused CcKeyCombo
  * keyboard-manager: fix leak of section list store
  * common: Fix leak of GUdevDevice
  * network: fix critical when opening VPN details page
  * wacom: Add scenario tester
  * wacom: Add a fake stylus when mocking a tablet
  * wacom: Split off notebook switching for detected stylus
  * wacom: Print errors for libwacom_new_from_*() calls
  * info-overview: Allow changing "Device Name" by pressing "Enter"
  * small typo
  * Ensure buddies gresource includes sound test icons
  * Remove Python from dependencies
  * Fix typo in feature template
  * Edit typo in bug_report template</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665057600">- Update to version 1.1.1+0:
  * Update background preview to look more like Budgie
  * Ensure VNC/RDP remote control settings is honored
  * Handle keybindings extraction
  * More comprehensive C string extraction
  * panels: wwan: Add WWAN 5G connection support</changelog>
  <changelog author="gmbr3@opensuse.org" date="1675598400">- Update to version 1.2.0+0:
  * thunderbolt: Ensure client and devices exist when setting
    visibility
  * thunderbolt: Hide panel if there's no thunderbolt hardware
  * info-overview: Remove "Mesa" prefix for Intel Iris driver
  * wwan: wait for apn_list to exist to add SIM providers
  * wwan: Set apn access method before adding to list
  * wwan: Update apn list only if device is available
  * wwan: Track apn list updates
  * Better english for the duplicate fingerprint
  * user-account: Return duplicate notification when the finger is
    exist
  * info-overview: Add "Kernel Version" row
  * info: Make get_hardware_model use a hostnamed property getter
  * net-device-ethernet: Don't check device iface name
  * net-device-ethernet: Prevent double free
  * network: Fixed Network profiles shown on wrong device
  * network: Fix an assertion failure
  * cc-printers-panel: don't show two Add Printer buttons at once</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 1.3.0+0:
  * shell: fix visibility check for rows and avoid empty searches
  * shell: avoid activating panel from an empty search
  * Set last-panel only for noncrashing panels
  * network: Increase maximum MTU value from 10000 to 65536
  * display: Removed the loop from the snapping function
  * display: Try snapping all the displays after a config change
  * sound: Prevent duplicate sound device entries
  * common: hostname-entry: Update hostname only after apply is
    clicked
  * usage: Fix confirmation dialog when clearing history
  * thunderbold: Don't cast CcBoltPanel when cancelled
  * user-accounts: close CcAvatarChooser before showing
    GtkFileChooser
  * user-accounts: disallow commas in real name
  * printers: Use CUPS dest API for printing test page
    instead CUPS IPP API
  * keyboard: country matches should not be shown under a
    language name.
  * display: Add 32:9 to known aspect ratios
  * sound: Add a "None" option to the alert chooser
  * sound: Update sounds directory mtime when changing alert
  * sound: Don't flip the balance and fade sliders in RTL
  * Rework cc-usage-panel.c to display dialog on history
    clearance
  * Update POT for the latest translatables
  * Add support for switching the file manager</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700222400">- Dependencies changed for 15.6 (boo#1217233):
  * BR pkgconfig(krb5)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- GNOME Bluetooth v1 will stick around until we can remove it
  from here - hopefully very soon</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708344000">- Add LGPL-3.0-or-later based on legaldb review
  cc-tls-certificate.c/.h are under LGPL-3.0+</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 1.4.0+2:
  * fix: FTBFS with incompatible-pointer-types
  * Bump version
  * Latest translations
  * Add code and compilation option to support socket
    SSH based connections
  * Disable gnome-online-accounts due to latest upstream GOA
  * support both sshd socket and services for remote login
  * Hide remote desktop sharing support
  * Latest translations
  * Update to gvc version to resolve occasional pipewire crashes
    when mute/unmute of microphone volume
  * subprojects: Update gvc
  * Replace deprecated license format
  * Add the ability to toggle disabling touchpad whilst typing
  * Update appdata fields
  * Update wacom tester to actually launch budgie-control-center</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove cheese dependency for 16.0</changelog>
</package>
<package pkgid="537e59d53195783383b41f9393aaa6ccb9db9cd640d9ee961ec3aeca735285e7902e98841a6e1653aa6b34943e687347151ab401c44ce07014093425677ce4b5" name="budgie-countdown-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="9441a6712229bc88b4044cd3ca569ab1a987eb061ecd47bee7143a8bdcfab2d742d2193a1142758e3ab3433f2c96c4cec00bb9039861ad4b359473ddea9d4897" name="budgie-desktop" arch="x86_64">
  <version epoch="0" ver="10.9.2+3" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Update to version 10.7.2+0:
  * Just have a use-old-zenity option to avoid issues with
    zenity version detection
  * Bump to 10.7.2
  * Remove comment related to GTK_CHECK_VERSION that causes
    faux error noise during compile
  * fix: check of zenity on OSes with older Meson
  * add detection of zenity version and use different flags for
    old vs new zenity
  * budgie-menu: Make category buttons keyboard navigable
  * Fix screenshot for libmutter-12
  * budgie-menu: Change the selection policy from NONE to SINGLE
  * Fix panel growing memory consumption over increasing numbers
    of notifications
  * Use correct C header for meta_keybindings_set_custom_handler
  * Added code to manage max_notifications_per_group
  * Minor optimizations, edited comments
  * Limited the number of notifications to prevent infinit
    accumulation, causing raven to choke
  * feat: ensure Budgie Menu application lists height
    allocation accounts for GTK scaling factor
  * Fix Gtk gdk_x11_window_get_frame_extents
  - change since Gtk version 3…
  * Fix SoundOutput and Calendar widget settings schemas
  * Relevancy algorithm refinements</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 10.8+0:
  * Drop libmutter-12 support in favor of magpie-0
  * Polkit dialog will now show the action description
    and action ID when graphical privilege escalation is requested
  * Status applet now provides the ability to control the
    Performance / Power profile modes offered by
    power-profiles-daemon.
  * System Tray has adopted the Status Notifier specification
  * Application Indexer's fuzzy scoring function has been
    ported to C
  * Default colour is now green
  * Kvantum and Murrine themes are now hidden in
    Budgie Desktop Settings
  * We now search for plugins in both /usr and /usr/local</changelog>
  <changelog author="gmbr3@opensuse.org" date="1700827200">- Update to version 10.8.2+0:
  * Use user-space variables to pass temporary screenshot data
  * notifications: Try to guess app id if getting from hints fails
  * Fix oversight in custom icon theme path reading
  * Fix initial tray icon scaling
  * Simplify Raven notification group
  * Update translations
  * fix compilation errors against latest gcc
  * Unbox primitives for DBusMenu nodes
  * Add setting for tray icon scaling
  * Make dark theme switch apply to color scheme pref
  * Include keywords when performing fuzzy searches
  * Add xdg-desktop-portal config
  * Work around more SN/dbusmenu quirks
  * Move below initialization of radio buttons
  * Update README for 10.8 assets
- Trash applet not needed for 10.8</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706529600">- Update to version 10.9+0:
  * Release 10.9
  * Update translations
  * Implement a new Bluetooth indicator
    (goodbye GNOME Bluetooth v1 :) )
  * Start requiring budgie-session
  * Port TabSwitcher &amp; Workspace applets over to libxfce4windowing
- Move autostart back to %_distconfdir as aaa_base is fixed
- Add more specific dependencies for required userspace tools</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706788800">- Update to version 10.9+2:
  * fix: multiple tabswitcher bugs
  * sendto: Use stateless XDG autostart directory if stateless is
    set</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1707998400">- Use magpie on Leap 15.6 aswell
- Adjust upower-glib requires to minimum version
- Unversion trash applet obsoletes (1.7.1 still has it if used
  with older budgie)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 10.9.1+9:
  * Disable C compiler warnings entirely
  * daemon/notifications: Fix default notification action being
    performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * Work around even more SNI noncompliance
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar
  * Update to 10.9.1
  * Update translations for 10.9.1 release
  * Create a man page for the sendto executable</changelog>
  <changelog author="asdhio &lt;asdhio@tuta.io&gt;" date="1737374400">- budgie-desktop-view is not a hard dependency
  it should be possible to remove it if the user chooses
  to use nemo-desktop or desktopfolder instead</changelog>
  <changelog author="gmbr3@opensuse.org" date="1742558400">- Update to version 10.9.2+3:
  * Add override for overlay-key to prevent crash with
    mutter-common v48-rc
  * Resolve vala 0.56.18 compact class inheritance removal
  * Adapt to libxfce4windowing v4.19.7 which includes Window
    activate API break
  * chore: update default background for 10.9.2 to
    piazza-gae-aulenti from budgie-backgrounds
  * icons: Use the correct name for the reboot icon
  * Fix end session dialog blocking authentication dialog
  * Don't show tabswitcher if window is empty
  * budgie-menu: Show terminal applications in the menu
  * feat: cli option for focus_quit field
  * Disable C compiler warnings entirely
  * Fix default notification action being performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742990400">- No longer conflict gnome-shell: Issues have been resolved
- BR xdg-desktop-portal to provide needed package directory
- Correct budgie-desktop-view requires versioning</changelog>
</package>
<package pkgid="d585df697662bcad365e5cb1d8aa6deed4b59532f9c0cd8c99e5d03e2bc95ae7fba88c8531af96d62186867d817f4e27a5c171d9a4447a4a82f2d81323c78ed8" name="budgie-desktop-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="20250305.1" rel="lp160.4.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1641556800">- Update to version 20220107.1:
  * add default cursor definition</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642161600">- Update to version 20220114.1:
  * fix screensaver background being incorrect</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1647432000">- Require systemd-icon-branding for LOGO in Budgie Control Center</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1647432001">- Update to version 20220316.1:
  * fix inclusion of screensaver files in meson.build</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656331200">- Update to version 20220627.1:
  * make upstream what it should be
  * use Papirus icon theme everywhere</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1657368000">- Update to version 20220709.1:
  * update Greybird name</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1661774400">- Update to version 20220829.3:
  * fix Gnome Terminal color issues</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Update to version 20240412.1:
  * Switch upstream to the new version
  * TW background: use PNG instead of JPG</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Update to version 20250305.1:
  * Update TW background path again</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1754568000">- Use Requires: distribution-logos-branding-SLE for Backports/SLE build
  * All files from distribution-logos-SLE has been merged into
    distribution-logos-branding-SLE including the icons, and it is
    no longer providing systemd-icon-branding capacity</changelog>
</package>
<package pkgid="fecc7872e4f5d488bbd5404553d1c2b96f9813b753c191df29112cb204b3f05ce50ea1f7a45d0081f5c62f98fcfa578ed6e43a5a58a414529139962d686453bf" name="budgie-desktop-branding-upstream" arch="noarch">
  <version epoch="0" ver="20250305.1" rel="lp160.4.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1641556800">- Update to version 20220107.1:
  * add default cursor definition</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642161600">- Update to version 20220114.1:
  * fix screensaver background being incorrect</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1647432000">- Require systemd-icon-branding for LOGO in Budgie Control Center</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1647432001">- Update to version 20220316.1:
  * fix inclusion of screensaver files in meson.build</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656331200">- Update to version 20220627.1:
  * make upstream what it should be
  * use Papirus icon theme everywhere</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1657368000">- Update to version 20220709.1:
  * update Greybird name</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1661774400">- Update to version 20220829.3:
  * fix Gnome Terminal color issues</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Update to version 20240412.1:
  * Switch upstream to the new version
  * TW background: use PNG instead of JPG</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Update to version 20250305.1:
  * Update TW background path again</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1754568000">- Use Requires: distribution-logos-branding-SLE for Backports/SLE build
  * All files from distribution-logos-SLE has been merged into
    distribution-logos-branding-SLE including the icons, and it is
    no longer providing systemd-icon-branding capacity</changelog>
</package>
<package pkgid="b2eae501a2f02e87206f7d1ed5b7e311900ee9602e6956ae6d32b6200d7074f5ee64a18abc6142a2bfe04723de720b6ce03449aa910a32c2cb5d62768f69243d" name="budgie-desktop-devel" arch="x86_64">
  <version epoch="0" ver="10.9.2+3" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Update to version 10.7.2+0:
  * Just have a use-old-zenity option to avoid issues with
    zenity version detection
  * Bump to 10.7.2
  * Remove comment related to GTK_CHECK_VERSION that causes
    faux error noise during compile
  * fix: check of zenity on OSes with older Meson
  * add detection of zenity version and use different flags for
    old vs new zenity
  * budgie-menu: Make category buttons keyboard navigable
  * Fix screenshot for libmutter-12
  * budgie-menu: Change the selection policy from NONE to SINGLE
  * Fix panel growing memory consumption over increasing numbers
    of notifications
  * Use correct C header for meta_keybindings_set_custom_handler
  * Added code to manage max_notifications_per_group
  * Minor optimizations, edited comments
  * Limited the number of notifications to prevent infinit
    accumulation, causing raven to choke
  * feat: ensure Budgie Menu application lists height
    allocation accounts for GTK scaling factor
  * Fix Gtk gdk_x11_window_get_frame_extents
  - change since Gtk version 3…
  * Fix SoundOutput and Calendar widget settings schemas
  * Relevancy algorithm refinements</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 10.8+0:
  * Drop libmutter-12 support in favor of magpie-0
  * Polkit dialog will now show the action description
    and action ID when graphical privilege escalation is requested
  * Status applet now provides the ability to control the
    Performance / Power profile modes offered by
    power-profiles-daemon.
  * System Tray has adopted the Status Notifier specification
  * Application Indexer's fuzzy scoring function has been
    ported to C
  * Default colour is now green
  * Kvantum and Murrine themes are now hidden in
    Budgie Desktop Settings
  * We now search for plugins in both /usr and /usr/local</changelog>
  <changelog author="gmbr3@opensuse.org" date="1700827200">- Update to version 10.8.2+0:
  * Use user-space variables to pass temporary screenshot data
  * notifications: Try to guess app id if getting from hints fails
  * Fix oversight in custom icon theme path reading
  * Fix initial tray icon scaling
  * Simplify Raven notification group
  * Update translations
  * fix compilation errors against latest gcc
  * Unbox primitives for DBusMenu nodes
  * Add setting for tray icon scaling
  * Make dark theme switch apply to color scheme pref
  * Include keywords when performing fuzzy searches
  * Add xdg-desktop-portal config
  * Work around more SN/dbusmenu quirks
  * Move below initialization of radio buttons
  * Update README for 10.8 assets
- Trash applet not needed for 10.8</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706529600">- Update to version 10.9+0:
  * Release 10.9
  * Update translations
  * Implement a new Bluetooth indicator
    (goodbye GNOME Bluetooth v1 :) )
  * Start requiring budgie-session
  * Port TabSwitcher &amp; Workspace applets over to libxfce4windowing
- Move autostart back to %_distconfdir as aaa_base is fixed
- Add more specific dependencies for required userspace tools</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706788800">- Update to version 10.9+2:
  * fix: multiple tabswitcher bugs
  * sendto: Use stateless XDG autostart directory if stateless is
    set</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1707998400">- Use magpie on Leap 15.6 aswell
- Adjust upower-glib requires to minimum version
- Unversion trash applet obsoletes (1.7.1 still has it if used
  with older budgie)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 10.9.1+9:
  * Disable C compiler warnings entirely
  * daemon/notifications: Fix default notification action being
    performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * Work around even more SNI noncompliance
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar
  * Update to 10.9.1
  * Update translations for 10.9.1 release
  * Create a man page for the sendto executable</changelog>
  <changelog author="asdhio &lt;asdhio@tuta.io&gt;" date="1737374400">- budgie-desktop-view is not a hard dependency
  it should be possible to remove it if the user chooses
  to use nemo-desktop or desktopfolder instead</changelog>
  <changelog author="gmbr3@opensuse.org" date="1742558400">- Update to version 10.9.2+3:
  * Add override for overlay-key to prevent crash with
    mutter-common v48-rc
  * Resolve vala 0.56.18 compact class inheritance removal
  * Adapt to libxfce4windowing v4.19.7 which includes Window
    activate API break
  * chore: update default background for 10.9.2 to
    piazza-gae-aulenti from budgie-backgrounds
  * icons: Use the correct name for the reboot icon
  * Fix end session dialog blocking authentication dialog
  * Don't show tabswitcher if window is empty
  * budgie-menu: Show terminal applications in the menu
  * feat: cli option for focus_quit field
  * Disable C compiler warnings entirely
  * Fix default notification action being performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742990400">- No longer conflict gnome-shell: Issues have been resolved
- BR xdg-desktop-portal to provide needed package directory
- Correct budgie-desktop-view requires versioning</changelog>
</package>
<package pkgid="cb564609c05b009447fb136409ce5f3685e6c61a8112ffa60c25583bf65dc76a976a276a99f1d74ec92d4a88b4ef2b7ad5cab6b6c65aace4657542192766cc04" name="budgie-desktop-doc" arch="x86_64">
  <version epoch="0" ver="10.9.2+3" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Update to version 10.7.2+0:
  * Just have a use-old-zenity option to avoid issues with
    zenity version detection
  * Bump to 10.7.2
  * Remove comment related to GTK_CHECK_VERSION that causes
    faux error noise during compile
  * fix: check of zenity on OSes with older Meson
  * add detection of zenity version and use different flags for
    old vs new zenity
  * budgie-menu: Make category buttons keyboard navigable
  * Fix screenshot for libmutter-12
  * budgie-menu: Change the selection policy from NONE to SINGLE
  * Fix panel growing memory consumption over increasing numbers
    of notifications
  * Use correct C header for meta_keybindings_set_custom_handler
  * Added code to manage max_notifications_per_group
  * Minor optimizations, edited comments
  * Limited the number of notifications to prevent infinit
    accumulation, causing raven to choke
  * feat: ensure Budgie Menu application lists height
    allocation accounts for GTK scaling factor
  * Fix Gtk gdk_x11_window_get_frame_extents
  - change since Gtk version 3…
  * Fix SoundOutput and Calendar widget settings schemas
  * Relevancy algorithm refinements</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 10.8+0:
  * Drop libmutter-12 support in favor of magpie-0
  * Polkit dialog will now show the action description
    and action ID when graphical privilege escalation is requested
  * Status applet now provides the ability to control the
    Performance / Power profile modes offered by
    power-profiles-daemon.
  * System Tray has adopted the Status Notifier specification
  * Application Indexer's fuzzy scoring function has been
    ported to C
  * Default colour is now green
  * Kvantum and Murrine themes are now hidden in
    Budgie Desktop Settings
  * We now search for plugins in both /usr and /usr/local</changelog>
  <changelog author="gmbr3@opensuse.org" date="1700827200">- Update to version 10.8.2+0:
  * Use user-space variables to pass temporary screenshot data
  * notifications: Try to guess app id if getting from hints fails
  * Fix oversight in custom icon theme path reading
  * Fix initial tray icon scaling
  * Simplify Raven notification group
  * Update translations
  * fix compilation errors against latest gcc
  * Unbox primitives for DBusMenu nodes
  * Add setting for tray icon scaling
  * Make dark theme switch apply to color scheme pref
  * Include keywords when performing fuzzy searches
  * Add xdg-desktop-portal config
  * Work around more SN/dbusmenu quirks
  * Move below initialization of radio buttons
  * Update README for 10.8 assets
- Trash applet not needed for 10.8</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706529600">- Update to version 10.9+0:
  * Release 10.9
  * Update translations
  * Implement a new Bluetooth indicator
    (goodbye GNOME Bluetooth v1 :) )
  * Start requiring budgie-session
  * Port TabSwitcher &amp; Workspace applets over to libxfce4windowing
- Move autostart back to %_distconfdir as aaa_base is fixed
- Add more specific dependencies for required userspace tools</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706788800">- Update to version 10.9+2:
  * fix: multiple tabswitcher bugs
  * sendto: Use stateless XDG autostart directory if stateless is
    set</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1707998400">- Use magpie on Leap 15.6 aswell
- Adjust upower-glib requires to minimum version
- Unversion trash applet obsoletes (1.7.1 still has it if used
  with older budgie)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 10.9.1+9:
  * Disable C compiler warnings entirely
  * daemon/notifications: Fix default notification action being
    performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * Work around even more SNI noncompliance
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar
  * Update to 10.9.1
  * Update translations for 10.9.1 release
  * Create a man page for the sendto executable</changelog>
  <changelog author="asdhio &lt;asdhio@tuta.io&gt;" date="1737374400">- budgie-desktop-view is not a hard dependency
  it should be possible to remove it if the user chooses
  to use nemo-desktop or desktopfolder instead</changelog>
  <changelog author="gmbr3@opensuse.org" date="1742558400">- Update to version 10.9.2+3:
  * Add override for overlay-key to prevent crash with
    mutter-common v48-rc
  * Resolve vala 0.56.18 compact class inheritance removal
  * Adapt to libxfce4windowing v4.19.7 which includes Window
    activate API break
  * chore: update default background for 10.9.2 to
    piazza-gae-aulenti from budgie-backgrounds
  * icons: Use the correct name for the reboot icon
  * Fix end session dialog blocking authentication dialog
  * Don't show tabswitcher if window is empty
  * budgie-menu: Show terminal applications in the menu
  * feat: cli option for focus_quit field
  * Disable C compiler warnings entirely
  * Fix default notification action being performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742990400">- No longer conflict gnome-shell: Issues have been resolved
- BR xdg-desktop-portal to provide needed package directory
- Correct budgie-desktop-view requires versioning</changelog>
</package>
<package pkgid="51e32f2a6516d68e2178adeb448eeb929a51eed743ea44a10e6bf9754133bd0c70b95f577ed5612cd04568aeeae563c8895c5c204e5dd968a3e717a90ede75e6" name="budgie-desktop-lang" arch="noarch">
  <version epoch="0" ver="10.9.2+3" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1684238400">- Update to version 10.7.2+0:
  * Just have a use-old-zenity option to avoid issues with
    zenity version detection
  * Bump to 10.7.2
  * Remove comment related to GTK_CHECK_VERSION that causes
    faux error noise during compile
  * fix: check of zenity on OSes with older Meson
  * add detection of zenity version and use different flags for
    old vs new zenity
  * budgie-menu: Make category buttons keyboard navigable
  * Fix screenshot for libmutter-12
  * budgie-menu: Change the selection policy from NONE to SINGLE
  * Fix panel growing memory consumption over increasing numbers
    of notifications
  * Use correct C header for meta_keybindings_set_custom_handler
  * Added code to manage max_notifications_per_group
  * Minor optimizations, edited comments
  * Limited the number of notifications to prevent infinit
    accumulation, causing raven to choke
  * feat: ensure Budgie Menu application lists height
    allocation accounts for GTK scaling factor
  * Fix Gtk gdk_x11_window_get_frame_extents
  - change since Gtk version 3…
  * Fix SoundOutput and Calendar widget settings schemas
  * Relevancy algorithm refinements</changelog>
  <changelog author="gmbr3@opensuse.org" date="1693310400">- Update to version 10.8+0:
  * Drop libmutter-12 support in favor of magpie-0
  * Polkit dialog will now show the action description
    and action ID when graphical privilege escalation is requested
  * Status applet now provides the ability to control the
    Performance / Power profile modes offered by
    power-profiles-daemon.
  * System Tray has adopted the Status Notifier specification
  * Application Indexer's fuzzy scoring function has been
    ported to C
  * Default colour is now green
  * Kvantum and Murrine themes are now hidden in
    Budgie Desktop Settings
  * We now search for plugins in both /usr and /usr/local</changelog>
  <changelog author="gmbr3@opensuse.org" date="1700827200">- Update to version 10.8.2+0:
  * Use user-space variables to pass temporary screenshot data
  * notifications: Try to guess app id if getting from hints fails
  * Fix oversight in custom icon theme path reading
  * Fix initial tray icon scaling
  * Simplify Raven notification group
  * Update translations
  * fix compilation errors against latest gcc
  * Unbox primitives for DBusMenu nodes
  * Add setting for tray icon scaling
  * Make dark theme switch apply to color scheme pref
  * Include keywords when performing fuzzy searches
  * Add xdg-desktop-portal config
  * Work around more SN/dbusmenu quirks
  * Move below initialization of radio buttons
  * Update README for 10.8 assets
- Trash applet not needed for 10.8</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706529600">- Update to version 10.9+0:
  * Release 10.9
  * Update translations
  * Implement a new Bluetooth indicator
    (goodbye GNOME Bluetooth v1 :) )
  * Start requiring budgie-session
  * Port TabSwitcher &amp; Workspace applets over to libxfce4windowing
- Move autostart back to %_distconfdir as aaa_base is fixed
- Add more specific dependencies for required userspace tools</changelog>
  <changelog author="gmbr3@opensuse.org" date="1706788800">- Update to version 10.9+2:
  * fix: multiple tabswitcher bugs
  * sendto: Use stateless XDG autostart directory if stateless is
    set</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1707998400">- Use magpie on Leap 15.6 aswell
- Adjust upower-glib requires to minimum version
- Unversion trash applet obsoletes (1.7.1 still has it if used
  with older budgie)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712750400">- Update to version 10.9.1+9:
  * Disable C compiler warnings entirely
  * daemon/notifications: Fix default notification action being
    performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * Work around even more SNI noncompliance
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar
  * Update to 10.9.1
  * Update translations for 10.9.1 release
  * Create a man page for the sendto executable</changelog>
  <changelog author="asdhio &lt;asdhio@tuta.io&gt;" date="1737374400">- budgie-desktop-view is not a hard dependency
  it should be possible to remove it if the user chooses
  to use nemo-desktop or desktopfolder instead</changelog>
  <changelog author="gmbr3@opensuse.org" date="1742558400">- Update to version 10.9.2+3:
  * Add override for overlay-key to prevent crash with
    mutter-common v48-rc
  * Resolve vala 0.56.18 compact class inheritance removal
  * Adapt to libxfce4windowing v4.19.7 which includes Window
    activate API break
  * chore: update default background for 10.9.2 to
    piazza-gae-aulenti from budgie-backgrounds
  * icons: Use the correct name for the reboot icon
  * Fix end session dialog blocking authentication dialog
  * Don't show tabswitcher if window is empty
  * budgie-menu: Show terminal applications in the menu
  * feat: cli option for focus_quit field
  * Disable C compiler warnings entirely
  * Fix default notification action being performed
  * Use Enum DOWN instead of LEFT to scroll in a left-wards
    direction
  * Add am_cflags to ignore poorly generated C code from vala
  * vapi: Update libxfce4windowing to 4.19.3
  * fix: workspace applet window icon click not performing
    workspace switch
  * fix: set budgie run dialog to skip pager and taskbar</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742990400">- No longer conflict gnome-shell: Issues have been resolved
- BR xdg-desktop-portal to provide needed package directory
- Correct budgie-desktop-view requires versioning</changelog>
</package>
<package pkgid="584d6df193bcd8db65b31dfc09cc2826265fb82bfeec2c58203a053b12ccf0e37f22224d5eedc0913d82e7c50a13cc6d6eed1a8a68aa688f48aad01d9716166e" name="budgie-desktop-view" arch="x86_64">
  <version epoch="0" ver="1.3+0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608724800">- Update to version 1.1:
  * Drag and Drop support
  * Keyboard-assisted navigation
  * Add Move to Trash button
  * Changed max thumbnail size from 1MB to 10MB</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608897600">- Update to version 1.1.1:
  * Check if it is a special item before deleting</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- clean spec file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1641556800">- Update to version 1.1.1+5:
  * Rename schemas
  * Rebrand.
  * Update README to point to Open Collective and libera IRC
    channels
  * Enable application and key files to be moved to trash.
  * Update copyright to 2021</changelog>
  <changelog author="gmbr3@opensuse.org" date="1646740800">- Update to version 1.2+0:
  * Tag 1.2 stable release
  * Set up directory for translations
  * Add FUNDING.yml
  * Link to releases page from release badge
  * Add Matrix and backer badges
  * Add GitHub Actions pipeline
  * Update comment and warning
  * Update to Budgie Control Center
  * Remove "GTK4 Port" from TODO
  * Fix launching of some file types.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1661774400">- Move autostart back to /etc until aaa_base is fixed</changelog>
  <changelog author="gmbr3@opensuse.org" date="1675598400">- Update to version 1.2.1+0:
  * Handle the new BDS desktop file naming in B-D master
  * Use arrow instead of HAND1
  * Remove unused gtk-update-icon-cache
  * Implement translations support using the budgie-desktop-view
    transifex project
  * Add updatePot and updateTranslations scripts
  * Move mkrelease.sh to scripts/mkRelease.sh
  * Add editorconfig</changelog>
  <changelog author="gmbr3@opensuse.org" date="1700827200">- Update to version 1.3+0:
  * Bump to 1.3
  * Update translations
  * Make hover selection more obvious, tie in loading cursor.
  * Ensure Budgie Desktop View updates position
    and geometry on root window workarea change.
  * Add CODEOWNERS
  * Set focus to first VISIBLE item on arrow key press
  * Don't specify the file manager for trash icon
  * meson: Remove non standard optimization logic
  * Add translation support for trash icon
  * mesonPostInstall.sh: make update-desktop-database's
    target directory explicit
  * drop all support code for creating config.h
  * Use correct path for building xdg_appdir value.
  * Rename amd64 builds
  * Enable dependency caching, only do Ubuntu multiarch builds
  * Try to fix risc-v matrix</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- Move autostart back to %_distconfdir as aaa_base is fixed</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
</package>
<package pkgid="748ccd2f68a06a5e8ac2148e1d16718e3bb2ec57318a1baaea752a5b319ebd3c0fc55831a253a46e2c0a818efbe4a15e855e40c2b6d8de369210bc669f4d1e11" name="budgie-desktop-view-lang" arch="noarch">
  <version epoch="0" ver="1.3+0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608724800">- Update to version 1.1:
  * Drag and Drop support
  * Keyboard-assisted navigation
  * Add Move to Trash button
  * Changed max thumbnail size from 1MB to 10MB</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608897600">- Update to version 1.1.1:
  * Check if it is a special item before deleting</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- clean spec file</changelog>
  <changelog author="gmbr3@opensuse.org" date="1641556800">- Update to version 1.1.1+5:
  * Rename schemas
  * Rebrand.
  * Update README to point to Open Collective and libera IRC
    channels
  * Enable application and key files to be moved to trash.
  * Update copyright to 2021</changelog>
  <changelog author="gmbr3@opensuse.org" date="1646740800">- Update to version 1.2+0:
  * Tag 1.2 stable release
  * Set up directory for translations
  * Add FUNDING.yml
  * Link to releases page from release badge
  * Add Matrix and backer badges
  * Add GitHub Actions pipeline
  * Update comment and warning
  * Update to Budgie Control Center
  * Remove "GTK4 Port" from TODO
  * Fix launching of some file types.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1661774400">- Move autostart back to /etc until aaa_base is fixed</changelog>
  <changelog author="gmbr3@opensuse.org" date="1675598400">- Update to version 1.2.1+0:
  * Handle the new BDS desktop file naming in B-D master
  * Use arrow instead of HAND1
  * Remove unused gtk-update-icon-cache
  * Implement translations support using the budgie-desktop-view
    transifex project
  * Add updatePot and updateTranslations scripts
  * Move mkrelease.sh to scripts/mkRelease.sh
  * Add editorconfig</changelog>
  <changelog author="gmbr3@opensuse.org" date="1700827200">- Update to version 1.3+0:
  * Bump to 1.3
  * Update translations
  * Make hover selection more obvious, tie in loading cursor.
  * Ensure Budgie Desktop View updates position
    and geometry on root window workarea change.
  * Add CODEOWNERS
  * Set focus to first VISIBLE item on arrow key press
  * Don't specify the file manager for trash icon
  * meson: Remove non standard optimization logic
  * Add translation support for trash icon
  * mesonPostInstall.sh: make update-desktop-database's
    target directory explicit
  * drop all support code for creating config.h
  * Use correct path for building xdg_appdir value.
  * Rename amd64 builds
  * Enable dependency caching, only do Ubuntu multiarch builds
  * Try to fix risc-v matrix</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- Move autostart back to %_distconfdir as aaa_base is fixed</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
</package>
<package pkgid="4dbb9ac785439ab518251dba22b6b264d2422bd3219138944b8243390b6e760732b469acacb30732f01c676d30ce9c7155e6eeab37c1636c9ee399342fd96bcc" name="budgie-dropby-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="4d9518d31e40725778aaf8ae38d33086c3a97edc356455b41d36473be70d1b7dd87c9cdc31b5cdf1a604077b62a2f873bd70ec97bcdc51332fb5266d4c8c2490" name="budgie-extras" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="f00c69b252f8a2a8f0ab2b74798f4b98c255eddeef98d1e78e6a53416c5f6b42f230367f9c88358bd6c360c2ecbba5d1472d4d9498bd9a989eed327edea98fe5" name="budgie-extras-daemon" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="988e7d27c90b8bf4544eaac097f03fc2d94f0293aa9492cf7f2e59891b4e92a4062b673fa871b13efed2f45da16b1bf672b42e54c43ee38e21c14ee997812bbf" name="budgie-extras-lang" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="f317117191107ae404f197c655c90669deb60cf2a22a28ffb6999ab567fea3ea71745ac151a044946fa436cfd5ae0a63dfd65bc3fb6e56c9167b75f623bb85ba" name="budgie-fuzzyclock-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="0f70762e5bd47fe9b04611801bcc661a1d3229c5df369261bf5bedfc2cad88af96fb9fd5e6d2cc630d7bbe35bf848ac1643fa74179699d60e03b35c426351d96" name="budgie-hotcorners-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="eb9321d506d446c9e27819341fc3d03111fa77b382031f77f8b9146bce950b215b5ab2b3ebb33af073dee7beabc3dda67bb66618750478bc29941c7425e5205a" name="budgie-kangaroo-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="1c79f643bb3e28935c4307479ba2513c2f318608807a3e9f6119e28fb30f75ad833f1cf6767ffb509e6c769944a7c3e3153124d0ceadc8230be0ab2f277d8f09" name="budgie-keyboard-autoswitch-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="37697985299527ccd919a4be09c865ed1bb493924ff97b1021fc1f7cf2a753589cb0b863e5e246813baa8b67f39ee2b3088b7a478f299d114b37b941b8d1efcb" name="budgie-network-manager-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="7f57231ccc74d76b6bfc9bb2e91384d236c069b27d167cccad322a74e244fd4cbfdf0b8091ac2100c93ae33896c761b339c9d45bb35fe489c353427c84dae4d2" name="budgie-previews" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="b0a0aa83642fd063fd3577bd2d46bfab6c33ccb9541071f65dda4b513420c6dce9753182db9c69fe96cf752e76cc0145c985c3105d14d6fcf6176b5a35a842d9" name="budgie-quickchar" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="7a98941c079f622fdb8842bdda41aefe3b6b6185ae02e9d8000da6d3fe9875ec868fe930c1ed903da01e6d3749943aaf6c84f04a1e35ee439c2a6fad25de707d" name="budgie-quicknote-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="700e54c6d2c0979d14c25ce7db3abdac5eaa3122fc7c1bd80ff9d8f4feb94791c8f281de299c538636bfe36fbce9cd1d2c9d23c485e0dd818cb04945620e39d2" name="budgie-recentlyused-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="0a427522b34bef117ca188ceb709ec4da942b71216bf0d28b106953a62203cbe6dda1cb3fbe2f4a0485b390b09f695e578fe54369378a22c01533e8be6e24d70" name="budgie-rotation-lock-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="3a0f2f871ac370e4cd810382fb9aeb9ba9f99f2f0c7e67cd9e8d6b768134d6ddc80c986ce00251363ec3fee4693d48b0eece8db847977f5b46ae4d52cb20990c" name="budgie-screensaver" arch="x86_64">
  <version epoch="0" ver="5.1.0+0" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1641556800">- Update to version 4.0+2:
  * Sort out renames
  * Have a couple deferred re-attempts to kill gjs.
  * Remove dbus service file as it results in a race condition with
    gnome-settings-daemon that can cause double prompts.
  * Fix Makefile for distcheck + dist</changelog>
  <changelog author="gmbr3@opensuse.org" date="1646740800">- Update to version 5.0+0:
  * Unalign versioning with budgie-desktop
  * Format header files using clang-format
  * Update indentation from 8 spaces to tabs
  * Add FUNDING.yml
  * Add badges to README and update header
  * Implement GitHub Actions pipeline
  * Use S_ISDIR for PAM auth
  * Change C STD to C11 from GNU11
  * Remove spurious directive in Meson, add comment
  * Update README compiling instructions
  * Remove unused test C files
  * Remove unused files
  * Convert to Meson
- Remove GNU autotools and add meson BRs
- Removed old patches:
  * remove-old-automake-macros.patch
  * gnome-screensaver-helper.patch
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653652800">- Update to version 5.0.1+0:
  * Version bump
  * Fix musl build
  * Add our mkrelease script that we use on budgie-desktop-view
    and budgie-desktop itself</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657800000">- Update to version 5.0.2+0:
  * Bump version
  * Clarify that Meson is used, not Autotools
  * Add libgnomekbd-dev to Actions workflow
  * Re-add build option to disable keyboard layout indicator</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1661774400">- Move autostart back to /etc until aaa_base is fixed</changelog>
  <changelog author="gmbr3@opensuse.org" date="1669291200">- Update to version 5.1.0+0:
  * Bump version
  * Move mkrelease.sh to scripts folder
  * Use GdkSeat to grab input
  * Resolve most compiler warnings
  * Add back options for xf86gamma, no-locking, and consolekit
  * Use bullet for invisible char in entry.
  * Add History section to README</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Remove unused %chkpwd</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Use new budgie namespace for XDG autostart</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- Move autostart back to %_distconfdir as aaa_base is fixed
- Use new budgie namespace for desktop file aswell</changelog>
</package>
<package pkgid="3c87e0fab08304d29ae1a68bbe7ac01cbbe22f1f703ba4daf676b98eda5d2d866405d57d3e2143d68688bcd9bff2f05c24df5df1ad106880e7864a7a76f0be40" name="budgie-screensaver-lang" arch="noarch">
  <version epoch="0" ver="5.1.0+0" rel="bp160.1.2"/>
  <changelog author="gmbr3@opensuse.org" date="1641556800">- Update to version 4.0+2:
  * Sort out renames
  * Have a couple deferred re-attempts to kill gjs.
  * Remove dbus service file as it results in a race condition with
    gnome-settings-daemon that can cause double prompts.
  * Fix Makefile for distcheck + dist</changelog>
  <changelog author="gmbr3@opensuse.org" date="1646740800">- Update to version 5.0+0:
  * Unalign versioning with budgie-desktop
  * Format header files using clang-format
  * Update indentation from 8 spaces to tabs
  * Add FUNDING.yml
  * Add badges to README and update header
  * Implement GitHub Actions pipeline
  * Use S_ISDIR for PAM auth
  * Change C STD to C11 from GNU11
  * Remove spurious directive in Meson, add comment
  * Update README compiling instructions
  * Remove unused test C files
  * Remove unused files
  * Convert to Meson
- Remove GNU autotools and add meson BRs
- Removed old patches:
  * remove-old-automake-macros.patch
  * gnome-screensaver-helper.patch
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1653652800">- Update to version 5.0.1+0:
  * Version bump
  * Fix musl build
  * Add our mkrelease script that we use on budgie-desktop-view
    and budgie-desktop itself</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657800000">- Update to version 5.0.2+0:
  * Bump version
  * Clarify that Meson is used, not Autotools
  * Add libgnomekbd-dev to Actions workflow
  * Re-add build option to disable keyboard layout indicator</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1661774400">- Move autostart back to /etc until aaa_base is fixed</changelog>
  <changelog author="gmbr3@opensuse.org" date="1669291200">- Update to version 5.1.0+0:
  * Bump version
  * Move mkrelease.sh to scripts folder
  * Use GdkSeat to grab input
  * Resolve most compiler warnings
  * Add back options for xf86gamma, no-locking, and consolekit
  * Use bullet for invisible char in entry.
  * Add History section to README</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Remove unused %chkpwd</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Use new budgie namespace for XDG autostart</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706788800">- Move autostart back to %_distconfdir as aaa_base is fixed
- Use new budgie namespace for desktop file aswell</changelog>
</package>
<package pkgid="cb3390a94f36c0260011e539bb12bd25c126c05ff36380c823f408766fc017cabf1aa07ad547eb72fbcac8d5ba233b0e9c943865c4c704636dc6745470d7100a" name="budgie-session" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706529600">- initial package version 0.9.1</changelog>
</package>
<package pkgid="cfda7d976b39b54e48e467e8e7b49faed4ec2cd754848c84515521918cd7edfa722dfa1b7b04f8ec5938a12dac3c9b49748bbc3a3c39e25470836366c75d1732" name="budgie-session-lang" arch="noarch">
  <version epoch="0" ver="0.9.1" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1706529600">- initial package version 0.9.1</changelog>
</package>
<package pkgid="f10d995a0cc9ad6f0cacac39601c899da59fd693f5f15924b99789ac6aecc5bf55c48f74c038f8d7839ba0062b03a9732fabc734897a992f724fda28424a4692" name="budgie-showtime-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="4f65de2ec2f92f7477fd080ce11420e15247bdffeb13e5f94f4df266a529df7287af271afe7d61c5b86a9efbf1dea5fa8476b8cfc209cac78862ee087d14dfee" name="budgie-takeabreak-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="05800c7bfdc100e827c753e5a39ca640fa29bf544617549b87df64f3f5d24cac8ae92dabd0ad7197a6d1bc67dddcb7c5e7ffcc03ed33b5b9e8cfef9f632e8818" name="budgie-visualspace-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="13e76e1c56088ad1f538938bdce4442a517fe44e45dbe432ca9df3ffb7bc9571ea62e413596ecb573245f30876a10550637e291df95fb6e41e98d65c4fc9acfd" name="budgie-wallstreet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="e21e198010671c449d1e0a6a26a773aec1b7211604b65f583b20ac2249eb29cfd6558a55693351bd1e4cdfc8220e651a5769e27dd99d5efbf0bc6a2d18b9c37f" name="budgie-wayland-session" arch="x86_64">
  <version epoch="0" ver="0.0.0+10" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1738497600">- initial packaging version 0.0.0+10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1748347200">- Drop Qt5 support - old and it's supposed to run with Qt6 anyways</changelog>
</package>
<package pkgid="3831832a53356793d2e92721f03e5df1f04e701efd44601977f525efa2d2f6f9412d84f31137f5d16eb0ccc6e7db359dfd6c28c38a92f4afe348b9d0fbe45b0d" name="budgie-weathershow-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="a1998116098c37ee15b221a1f75768a6360f0a8b6d0abe5a5d42a2c4e910263d2e9702480df749b601c5923bd5281b528805e3943c5c71a816c9d8d72793bfaf" name="budgie-window-shuffler" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="7e4982dc651ef1b04ef23e90e997a24bf5f1fa68d2831325fc1f984a154e631500ec2f5698663d350d52a17239d4ac36f031620aea6501c06ed92024feed8a85" name="budgie-workspace-stopwatch-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="b5def542abb2dd35b02267c73686f678bb9964479104171fd1a7cb7a7d163f19ec453849bab73e99875e848fe23ede088b2f621844268d0b807f3ddc7564eb9f" name="budgie-workspace-wallpaper-applet" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="bp160.1.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1675944000">- Budgie Extras 1.5.0 "Breathing Space"
  * Lots of new and updated translations from the wonderful
    translations team
  * traditional layout now reflects the budgie desktop v10.7
    default layout.
  * bug-fix - reset key-grabs (overlays) where there is not a
    custom defined key combination
  * code-cleanup don't hard-code /tmp in various applets
  * bug-fix - wallstreet accepts custom folder with spaces
  * Trash Applet has been updated as follows:
  * support multiple file drag and drop to panel icon
  * show trash full icon when there are items in trash
  * open trash folder instead of popup when &gt; 100 items
  * fix paths with certain characters not restoring correctly</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1680091200">- Budgie Extras 1.6.0 "Snap Fantastic"
  * Shuffler
    Better place windows in rows and columns across multi-monitors
    DragSnap - quarter, half tiling with previews when dragging
    to edges
    DragSnap - Revamped Window Shuffler Control window with new
    DragSnap options and descriptions
    DragSnap - tiling snap also takes into account Control and
    Alt keys to tile 2/5 and 3/5 of the screen
  * Hotcorners
    Integration with Shuffler to ensure dragging windows work
    correctly when hotcorners is enabled
    Hotcorner settings is now a separate application accessible
    from the applet settings as well as the menu.
    Hotcorners similar to DragSnap can now be executed by both
    corners and center edge
  * WeatherShow
    brand new icons to work with both light and dark themes
    city search now matches locale characters to make it easier
    finding towns &amp; cities e.g. so ç matches searches with c</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1700827200">- Budgie Extras 1.7.0 "TLC"
  * Lots of new and updated translations
  * Support compiling WeatherShow with either libsoup3
    (recommended) or the legacy libsoup2.4
  * Quicknote - add graphical copy and paste buttons to complement
    equivalent shortcut keys
  * Visualspace - add an applet setting to reverse hover-icon
    scrolling through workspaces
  * Screen Brightness - don't override Nightlight colour when
    opening the applet popover
  * Wallstreet - default to changing wallpapers in alphabetical
    file-order
- Trash applet not needed for 10.8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1702555200">- Budgie Extras 1.7.1 "Tinker Tailor..."
  * CVE-2023-49347: budgie-wpreviews: use of fixed paths in /tmp
    (bsc#1213341)
  * CVE-2023-49344: windowshufflerdaemon: uses various fixed /tmp
    file paths (bsc#1213342)
  * CVE-2023-49345: budgie-takeabreak: fixed /tmp path use in
    /tmp/nextbreak_&lt;user&gt; (bsc#1216281)
  * CVE-2023-49346: budgie-weathershow: use of fixed path in
    /tmp/&lt;username&gt;_weatherdata (bsc#1216282)
  * CVE-2023-49342: budgie-clockworks: uses fixed temporary files
    in /tmp/&lt;user&gt;_clockworks (bsc#1217595)
  * CVE-2023-49343: budgie-dropby: use of fixed paths in
    /tmp/&lt;user&gt;_call_dropby and /tmp/&lt;user&gt;_dropby_icon_copy
    (bsc#1217597)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1712923200">- Fixes for vala building code incompatible with Werror</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741262400">- Budgie Extras 1.9.0 "Stepping Stone"
  * Start porting applets to Wayland
- In an attempt to keep packages during migration - store a
  README in currently unsupported applets</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1741694400">- Add patches to fix typelib requires parsing errors:
  * typelib-requires-v1-only.patch
  * typelib-requires-v2-only.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1742558400">- Wayland only from Budgie Desktop 10.10 onwards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752580800">- Remove plank dependency for 16.0</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1752753600">- Changes for 16.0:
  * Downgrade python3-svgwrite, xsetpointer, xsetmode to
    Recommends</changelog>
</package>
<package pkgid="f840d1d7c1b8e0652480cf509797a4480aa943324f28e6a13b5857dd91d422e69c7c177dd5262284fa4469ee68fcd3c535ece03fdeeccc0e3db626a448ea404d" name="bugzilla" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="bp160.1.9"/>
  <changelog author="ecsos@opensuse.org" date="1520251200">- update to 5.0.4
  This release fixes one security issue.
  See the Security Advisory for details.
  - checksetup.pl would fail to update Chart storage during
    pre-3.6 to 5.0 upgrade. (Bug 1273846)
  - editflagtypes.cgi would crash when classifications are enabled
    and the user did not have global editcomponents privileges.
    (Bug 1310728)
  - The File::Slurp would trigger warnings on perl 5.24.
    (Bug 1301887)
  - All the time entries in the 'when' column had the correct date
    but the time was fixed to 00:00 when using Sqlite.
    (Bug 1303702)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521806400">- update german language to 5.0.4
- Add patch bugzilla-de-tagfix.patch to fix "missing closing tag
  in german language pack" (boo#1015765).
  Thanks voorburg@gmx.net.</changelog>
  <changelog author="ecsos@opensuse.org" date="1563364800">- Update to 5.0.6
  This release contains a schema change to the flagtypes table,
  allowing for many more flagtypes.
  - The flagtypes table should have been using a mediumint for
    several releases, but due to a bug in the schema migration code
    this never happened.
- Changes from 5.0.5
  This release reformats the code according to the same
  conventions as the popular Mojolicious product and includes a
  .perltidyrc to do the same. You may use whatever coding style you
  want, but all files commited to the repo must be reformatted
  according to those rules.
  Additionally, we no longer follow the same release process as
  before. Releases will be more frequent.
  - As it is now 2019, the bugs_fulltext table is now InnoDB instead
    of MyISAM. This may cause upgrade headaches.
- Update german language to 5.0.4-2.
- Drop bugzilla-de-tagfix.patch because now in upstream language.
- Run spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607860800">- Use apache-rpm-macros.
- Put apache configuration files in separate subpackage.
- Remove %service_add_post and %server_del_postun apache2.service
  from spec.
- Fix two rpmlint errors.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1630411200">- Add modernize-bugzilla-submit.patch:
  - Port bugzilla-submit to Python 3.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1681819200">- Port jb2bz.py to python3
  * Add bugzilla-py3-jb2bz.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727524800">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1727524801">- Fix installcheck failure from obs staging-bot after last change
  of [bsc#1231027]:
  /srv/www [mode mismatch: d755 wwwrun:root, d755 root:root]</changelog>
</package>
<package pkgid="327b15a8a06b5a2ca63dcc2214342f9949bb8f87582d510bfda2e40f2bb8fc39418830eb75a1aed8e59ba99d97ca85629d161d3879013685ed7706c9f2e68adb" name="bugzilla-apache" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="bp160.1.9"/>
  <changelog author="ecsos@opensuse.org" date="1520251200">- update to 5.0.4
  This release fixes one security issue.
  See the Security Advisory for details.
  - checksetup.pl would fail to update Chart storage during
    pre-3.6 to 5.0 upgrade. (Bug 1273846)
  - editflagtypes.cgi would crash when classifications are enabled
    and the user did not have global editcomponents privileges.
    (Bug 1310728)
  - The File::Slurp would trigger warnings on perl 5.24.
    (Bug 1301887)
  - All the time entries in the 'when' column had the correct date
    but the time was fixed to 00:00 when using Sqlite.
    (Bug 1303702)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521806400">- update german language to 5.0.4
- Add patch bugzilla-de-tagfix.patch to fix "missing closing tag
  in german language pack" (boo#1015765).
  Thanks voorburg@gmx.net.</changelog>
  <changelog author="ecsos@opensuse.org" date="1563364800">- Update to 5.0.6
  This release contains a schema change to the flagtypes table,
  allowing for many more flagtypes.
  - The flagtypes table should have been using a mediumint for
    several releases, but due to a bug in the schema migration code
    this never happened.
- Changes from 5.0.5
  This release reformats the code according to the same
  conventions as the popular Mojolicious product and includes a
  .perltidyrc to do the same. You may use whatever coding style you
  want, but all files commited to the repo must be reformatted
  according to those rules.
  Additionally, we no longer follow the same release process as
  before. Releases will be more frequent.
  - As it is now 2019, the bugs_fulltext table is now InnoDB instead
    of MyISAM. This may cause upgrade headaches.
- Update german language to 5.0.4-2.
- Drop bugzilla-de-tagfix.patch because now in upstream language.
- Run spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607860800">- Use apache-rpm-macros.
- Put apache configuration files in separate subpackage.
- Remove %service_add_post and %server_del_postun apache2.service
  from spec.
- Fix two rpmlint errors.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1630411200">- Add modernize-bugzilla-submit.patch:
  - Port bugzilla-submit to Python 3.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1681819200">- Port jb2bz.py to python3
  * Add bugzilla-py3-jb2bz.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727524800">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1727524801">- Fix installcheck failure from obs staging-bot after last change
  of [bsc#1231027]:
  /srv/www [mode mismatch: d755 wwwrun:root, d755 root:root]</changelog>
</package>
<package pkgid="9df8b8ddaf0ffc108e8197ad8d0f5329df58b1424b620e96e53e2d6a24392b4b838fb2d114b11478f7acbd6189d4a9249d9bf0051a821a0f4cb287244c18a366" name="bugzilla-lang-de" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="bp160.1.9"/>
  <changelog author="ecsos@opensuse.org" date="1520251200">- update to 5.0.4
  This release fixes one security issue.
  See the Security Advisory for details.
  - checksetup.pl would fail to update Chart storage during
    pre-3.6 to 5.0 upgrade. (Bug 1273846)
  - editflagtypes.cgi would crash when classifications are enabled
    and the user did not have global editcomponents privileges.
    (Bug 1310728)
  - The File::Slurp would trigger warnings on perl 5.24.
    (Bug 1301887)
  - All the time entries in the 'when' column had the correct date
    but the time was fixed to 00:00 when using Sqlite.
    (Bug 1303702)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521806400">- update german language to 5.0.4
- Add patch bugzilla-de-tagfix.patch to fix "missing closing tag
  in german language pack" (boo#1015765).
  Thanks voorburg@gmx.net.</changelog>
  <changelog author="ecsos@opensuse.org" date="1563364800">- Update to 5.0.6
  This release contains a schema change to the flagtypes table,
  allowing for many more flagtypes.
  - The flagtypes table should have been using a mediumint for
    several releases, but due to a bug in the schema migration code
    this never happened.
- Changes from 5.0.5
  This release reformats the code according to the same
  conventions as the popular Mojolicious product and includes a
  .perltidyrc to do the same. You may use whatever coding style you
  want, but all files commited to the repo must be reformatted
  according to those rules.
  Additionally, we no longer follow the same release process as
  before. Releases will be more frequent.
  - As it is now 2019, the bugs_fulltext table is now InnoDB instead
    of MyISAM. This may cause upgrade headaches.
- Update german language to 5.0.4-2.
- Drop bugzilla-de-tagfix.patch because now in upstream language.
- Run spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607860800">- Use apache-rpm-macros.
- Put apache configuration files in separate subpackage.
- Remove %service_add_post and %server_del_postun apache2.service
  from spec.
- Fix two rpmlint errors.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1630411200">- Add modernize-bugzilla-submit.patch:
  - Port bugzilla-submit to Python 3.</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1681819200">- Port jb2bz.py to python3
  * Add bugzilla-py3-jb2bz.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1718280000">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727524800">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1727524801">- Fix installcheck failure from obs staging-bot after last change
  of [bsc#1231027]:
  /srv/www [mode mismatch: d755 wwwrun:root, d755 root:root]</changelog>
</package>
<package pkgid="0425c285311ebc4d76f25b26865b2a5312c3a0a01bb31e8add6fe07ece5d9290e1a0214a14039e0507b59975ecaa13f768d1a3171f999026c4d14adfcc06e3eb" name="build" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="3e78df0b3a497f963fa81193157157406fc0625b6f2572fcf92d4eb54e054d2ea550cf998463dd7e4eae243fe7f8488a286c3ec984bd8d01223ed8d6b43c49cb" name="build" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="9d1b3163d88ba0c8a0004179323bf011dac92845c430844235c68ef42a0e760c0fc55aa8d50f359c485f2fbc24ad7ce94a0291faef132728205238aa7aa53e57" name="build" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="a1d0f0290c78aa39051ca3e236bd49463696fb324c291bba2f56f1a9bd67017205373161a32de9d506c6c81f83a5347d01fdf191e64dc1c745da195e38bb2e29" name="build-compare" arch="noarch">
  <version epoch="0" ver="20240801T083050.024a3a7" rel="160000.2.2"/>
  <changelog author="olaf@aepfle.de" date="1655726400">- fix objdump parsing for non-executable sections (#53)</changelog>
  <changelog author="martin.kampas@jolla.com" date="1661256000">- handle more setuid/setgid ELF variants (#54)</changelog>
  <changelog author="martin.kampas@jolla.com" date="1662120000">- fix compatibility with older sed (#55)</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- move license to licensedir
- spec file cleanups</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1669377600">- Trim "PROVIDES" from source rpms (#59, bsc#1205998)</changelog>
  <changelog author="ol@infoserver.lv" date="1680955200">- Ignore more sections when comparing ELF executable files</changelog>
  <changelog author="olaf@aepfle.de" date="1682683200">- remove timestamps from png files</changelog>
  <changelog author="ol@infoserver.lv" date="1683115200">- Fix filtering compiled Python modules to handle Python &gt;= 3.7</changelog>
  <changelog author="olaf@aepfle.de" date="1687003200">- Filter dune language version in dune-package files</changelog>
  <changelog author="olaf@aepfle.de" date="1722513600">- Remove also date:timestamp from png files</changelog>
</package>
<package pkgid="863912d653bb52d79d8c3ee1396f573517a7c6d7fa0fe7bfe84c827e2508dc9b528ac1bf338b01f4b65092e3a4cced88b1b075b1e5d62dd5df5a0c431a5c65fb" name="build-helper-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1554465600">- Initial packaging of maven-plugin-build-helper 1.9.1</changelog>
  <changelog author="fstrba@suse.com" date="1599566400">- Upgrade to upstream version 3.2.0
  * Integrated pull requests:
    + Set a property based on the maven.build.timestamp
    + rootlocation does not correctly work
    + Add profile to avoid showing warnings for maven plugin
    plugin goals not supported in m2e
    + Site: Properly showing 'value' tag on regex-properties usage
    page
    + Integration test reserve-ports-with-urls fails on windows
    + IllegalArgumentException when using goal released-version with
    maven 3.6.2
    + NPE in 3.1.0-SNAPSHOT when no qualifier is present
    + parse-version goal fails when build number is greater than
    Integer.MAX_VALUE enhancement
    + Create directory before writing file in reserve-network-port
    bug
    + released-version does not allow access to the build number
    + Qualifier Prefix</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Build javadoc with source level 8</changelog>
  <changelog author="fstrba@suse.com" date="1718107200">- Rename package:
  maven-plugin-build-helper -&gt; build-helper-maven-plugin
  + corresponds to the source name</changelog>
  <changelog author="fstrba@suse.com" date="1718107201">- Upgrade to upsteam version 3.6.0
  * New features and improvements
    + Provide the Mojos logger as variable in the Interpreter context
    + Get rid of ArtifactRepository - ${localRepository}
    + Added a property name to the "sources" parameter for CLI usage
    + Add skipIfMissing flag
    + Add skip flags
    + Deprecate maven-version goal
    + Deprecate remove-project-artifact goal
    + Parallel execution of uptodate-properties
  * Bug Fixes
    + Fixes #108, released-version does not detect version if maven
    repository is not configured to look for snapshot
    + Add missing whitespace to output of reserve-network-port
    + Use UTF-8 for the pom</changelog>
</package>
<package pkgid="433c44d95f1b6b32cae7162ec2016f72c7260268907f0dea24dcc8df02174e4953ebe75e9a50d162597211dc0c26e7277ceba009f93194650b4471d38140b2ad" name="build-helper-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1554465600">- Initial packaging of maven-plugin-build-helper 1.9.1</changelog>
  <changelog author="fstrba@suse.com" date="1599566400">- Upgrade to upstream version 3.2.0
  * Integrated pull requests:
    + Set a property based on the maven.build.timestamp
    + rootlocation does not correctly work
    + Add profile to avoid showing warnings for maven plugin
    plugin goals not supported in m2e
    + Site: Properly showing 'value' tag on regex-properties usage
    page
    + Integration test reserve-ports-with-urls fails on windows
    + IllegalArgumentException when using goal released-version with
    maven 3.6.2
    + NPE in 3.1.0-SNAPSHOT when no qualifier is present
    + parse-version goal fails when build number is greater than
    Integer.MAX_VALUE enhancement
    + Create directory before writing file in reserve-network-port
    bug
    + released-version does not allow access to the build number
    + Qualifier Prefix</changelog>
  <changelog author="fstrba@suse.com" date="1698321600">- Build javadoc with source level 8</changelog>
  <changelog author="fstrba@suse.com" date="1718107200">- Rename package:
  maven-plugin-build-helper -&gt; build-helper-maven-plugin
  + corresponds to the source name</changelog>
  <changelog author="fstrba@suse.com" date="1718107201">- Upgrade to upsteam version 3.6.0
  * New features and improvements
    + Provide the Mojos logger as variable in the Interpreter context
    + Get rid of ArtifactRepository - ${localRepository}
    + Added a property name to the "sources" parameter for CLI usage
    + Add skipIfMissing flag
    + Add skip flags
    + Deprecate maven-version goal
    + Deprecate remove-project-artifact goal
    + Parallel execution of uptodate-properties
  * Bug Fixes
    + Fixes #108, released-version does not detect version if maven
    repository is not configured to look for snapshot
    + Add missing whitespace to output of reserve-network-port
    + Use UTF-8 for the pom</changelog>
</package>
<package pkgid="30a6e2720b7c5b6a9e491ccea6681684a939438d7d89efd9ba71562dc684bb1aa5b766644ea8c832d405835ecd1f45f10be859e266615e9e460516489c4b569d" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="0143811630b9e4b0c08c5a7e1d870a75b5d352c9cbbf09e54d58bde7c64f171dd37b164e4ab911fbbd910f679a2a2e45bf55633231c9a2344fcfa19ec75c92b0" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="cc8ef9b4fcee4336ab2c9951c0584bfd1a096703acc61ebcb119f074c6ab4ef7323c5cb70f6e7b6617abfe9781ed0ea08851ca491b122d03f6fe9520b8a6f1cd" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="490f407fe4f9abb5dc5d3f941b465ea940323eaf656f304ed6e6387848fdefa8043797d8bbafe57a3ec5acf44e78be1c26ab0f40a17c2de6e8412bbd05fe72d3" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="9636afbd742e72a55ef9c7aaa4130ad1e1e110912f6af1660540b3400e75b1da235de539809657fb3a3f77345a9a7c625940660d8e4a3b77b27322da86027b49" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="872a125b5597c6ecdbb2c133d865dc0064edb9f450b5f73bb1232c8ba09d549c01b01b0a33aecd173156d7abb58bac4ab98cf81f3479b51bbee5ea01ee128efb" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="41256e6d773892ff32009183556192f1ef8a41833d5ebee13e37310df3e2fa2d719659d61d014c479b18b44c9c448b639b98bc0661128aeeb4d1509f644d2ac1" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="31ae81e23413ff6923aba70647b699d1095c0952dcd27591bd3db8ea3ac8f7695925dbf9d9642551a045680bf8215fe4eaaf9de043becfa56c92fcc625f24d9a" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="2a1fdaad11867aa8c09514e47eddb28dbbd9e9c033ba1b5cd93898c44686e35ee297020a6263c63eb2601a07d98a9cad7334236ef7398f687b28aacec4ddd016" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="8880d1ffe06d57e3c5ac1c97cdea74e51f50b5bcf3945e913b598990c7afe07372c08d5155dc144f2a708dd374aea6683654e44b2cef873fb27976bb165b5f33" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="aaafe6cfa7d4b9e741ae7f00f454eb5ef8d6fa6038a4e3d5edb6f094b55fadde219a1fbc53297b66600c7685a0603d790efa97452e7f9c0afc9482b36cd28081" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="dc4e091a0d41e6afcab39bf3884fabab4507172f44ad9fbf9197f5c22b59a0d6e2832b6aa782c360be546f70b5c11e9ec4f38d6bc648933d68c0a0b1229842aa" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="a1ad7fbd42a72381675fe991f68b20b6cd6633c0d00ed80c9a5a5c6c69818b491a9422aa650dadeb62e3823b69435f9821ce0637866beae216830a71deb11278" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="1469731fe3b5c9b81f6ef801d3c3c0001584755a8b48fd94cc0f418d2360d71bf6c33a7344c5649c2d64bc6c5da154c45e505f723183740295c9627f285ab6a1" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="a88579e8c60adacd3041d3c4e268cf5cd01953db3256c2328c6e3a66d84cef18c9f5da69a829791c18375937ee14bbce36ead57386c3123341e9ef062db21b1f" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="9d3cfa39ddf2506bd83e37bd5d026df0eb1dd11cee21e08d937164deef41252d78d446001ad3562adeb5a619422ec281b5b8b22fe33113c2f20be01fc2c77bc7" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20250708" rel="160000.3.2"/>
  <changelog author="adrian@suse.de" date="1738843200">- mkosi: drop most systemd/build-packages deps and use obs_scm
    directory as source if present
- improve source copy handling
- Introduce --repos-directory and --containers-directory options</changelog>
  <changelog author="adrian@suse.de" date="1741089600">- fixes for POSIX compatibility for obs-docker-support adn
  mkbaselibs
- Add support for apk in docker/podman builds
- Add support for 'wget' in Docker images
- Fix debian support for Dockerfile builds
- Fix preinstallimages in containers
- mkosi: add back system-packages used by build-recipe directly
- pbuild: parse the Release files for debian repos</changelog>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed behaviour when using "--shell" aka "osc shell" option
  in a VM build. Startup is faster and permissions stay intact
  now.</changelog>
  <changelog author="adrian@suse.de" date="1741348801">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
</package>
<package pkgid="636ff5e4483fe7e3f823f2cdd93d48bf00706903f6e6a0b8660cb6f13ad205750bd898716950d07bb9f5d7bc7a36bff08d5370a8f884bb53f855dd00a6a1d8ae" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20260202" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1741348800">- Fixed --shell option for container builds</changelog>
  <changelog author="adrian@suse.de" date="1741953600">- Support reprobudicble builds using jobs/smp_mflags handling
- expanddeps (plain build script usage):
  * Add support for build-time services
  * Support apk version comparison
- Sync tumbleweed build config
- Delete createrepomddeps and createyastdeps tooling, not used anymore
- large amount of code refactoring</changelog>
  <changelog author="adrian@suse.de" date="1742558400">- RemoteAsset support:
  * Implement automatic packaging of directories into tar balls
  * Support a 'keepmeta' query parameter in git assets
  * Support git checkout by commit like with the obs scm bridge</changelog>
  <changelog author="adrian@suse.de" date="1742990400">- Supporting automatic tar ball creation also when just
  provided via git (no need for RemoteAsset in that case)</changelog>
  <changelog author="adrian@suse.de" date="1743422400">- SLE 15 SP7 config
- RemoteAsset code cleanup</changelog>
  <changelog author="adrian@localhost" date="1748865600">- fix slfo 1.2 build config
- Disable selinuxfs mount during builds (bsc#1231252)
- productcomposer: support version 0.6.0 extensions
- mkosi: also fetch InitrdPackages= dependencies
- qemu 10.0 compability fix
- rpm
  * Fix querying the pkgid from rpm packages
  * Support new %span macro
  * Fall back to the sha256 signature header if there is no md5 header
    for rpm v6
- pbuild: define _is_this_project/_is_in_project macros
- support the "nouseforbuild" buildflag
- Use Compress::Stream::Zstd for zstd decompression of debian binaries
- Fix parsing of remoteasseturls with digests
- provenance data handling:
  * extend SLSA provenance data with buildfalvor, distul and vcs
  * Fix handling of replaced golang modules</changelog>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
</package>
<package pkgid="92b9e55ba6c930d111ce3cc57d5badeebee9505ee36913c539fb424c2c87d49be1203d2955b7e91a4de5126bc78f59162092931d442d7513a0f7a1fe6da8f5ad" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20260415" rel="160000.1.1"/>
  <changelog author="adrian@suse.de" date="1751976000">- Make CreateArchive reproducible
- Adapt to new product composer package set handling
- Add support for '--format json' option to queryrecipe
- LiveBuild: drop unused @args from the parse function
- Support options in the recipe parsers
- Support the new FromScratch: directive
- vm-type=qemu: use cpu=max on x86_64
- generate_sbom: make sure that no package is listed twice in product mode</changelog>
  <changelog author="adrian@suse.de" date="1756468800">- Set the source mtime to the commit timestamp for git (boo#1248776)
- calculate goname for fedora assets
- Make spec2changelog more resiliant to 3rd party spefiles
- pbuild:
  * Fix url construction in remoteurl handling
  * Fix xz decompression
- rpm:
  * Allow to set extra macros when parsing a specfile
  * genbuildrequs: set HOME before querying the specfile</changelog>
  <changelog author="adrian@suse.de" date="1762516800">- Helm: Use bool type for 'deprecated'
- Distribution config updates
- rpm: take package name from filename if no name is defined
- ARM: qemu emulation uses -cpu max now
- Add BuildFlags for changelogfulltimestamps
- Fixes for lookaside store download
- Create a symlink in /etc/localtime before calling zic
- createarchive: implement fallback for old tar versions
- Be more strict about the weird [qualifier] dependency extension
- Implement bcond_override_default
- Make substitutedeps work on the expanded dependencies
- Docker: support COPY --from=image
- Support an experimental "BuildFlags: cgroup2"
- Support an experimental #!BuildTargetStage directive
- Support "BuildFlags: rpm-nodebugmagic"
- mkosi: Don't include preinstall packages
- mkosi: Don't attempt to publish directory artifacts
- Fix excluding /dev, /sys, etc. from preinstallimages</changelog>
  <changelog author="adrian@suse.de" date="1770033600">- pbuild: support for _manifest files
- VM builds: fix export of mtime out of the build env
- config:
  * tumbleweed syncing
  * slfo 1.2 updates
  * Re-create SLE 15 SP7 config (bsc#1251920)
- oci-archive
  * Support package list introspection
  * Support sbom generation
- Docker.pm: Also handle 'zypper update'
- obs-docker-support: Pass --no-refresh to zypper
- fail if PKGID can not be queried
- Add a workaround to fix builds on debian aarch64 with old systemd versions
- Add gzip retry for the sidestore downloads
- Revert VCS indenting change to fix reproducible builds</changelog>
  <changelog author="adrian@suse.de" date="1773144000">- Implement cmssign support in signdummy
- pbuild: mark git assets with a fixed commit as immutable
- mkosi
  * check if old parameters are supported before passing them
  * support old bash version
- Do not crash on small files that start with the PE magic</changelog>
  <changelog author="adrian@suse.de" date="1773316800">- added leap-16.0 and leap-16.1 build configs.
  (not named sl16.0 anymore, but using same string as the git branch)</changelog>
  <changelog author="adrian@suse.de" date="1774267200">- Support --cms-nocerts and --cms-keyid in the signdummy
- Support chroot builds inside of containers
- runservice tool, allow to specify the modes. Can be
  used on plain git source now also
- Support --mtime option for cpio creation
- generate_sbom:
  * Support also unzck compressed repomd files
  * Fail when given --product directory is missing
  * support zstd compressed repomd data
- build-vm-lxc: support lxc &gt;= 5
- vc: Hide an annoying error message when not using NIS</changelog>
  <changelog author="adrian@suse.de" date="1774699200">- container:
  * Add microdnf package manager support
  * Add experimental support for the container-timestamp build option
- sbom:
  * allow to create v1 intoto data
  * spdx: connect OPERATING-SYSTEM package to the root package
  * Transfer product vcs and disturl
- Ubuntu 26.04 hack</changelog>
  <changelog author="adrian@suse.de" date="1776081600">- config: Add slfo-main build configuration
- drop the inner quotes, not needed on bash 4 and breaks on bash 3
- build: in the ccache case, after test -e also accept -L</changelog>
  <changelog author="adrian@suse.de" date="1776254400">- Support a new "IgnoreRebuild" config.
- build-recipe-kiwi:
  * Add support for oci containers
  * Avoid needlessly compressing container images
  * Detect container images based on build result file name
- Fix queryrecipe to use the summary and the description from the main package</changelog>
</package>
<package pkgid="0fb3f4d4a7aa8cd75a492580190526097b25bbb4fdabc9e64b16e884e9d27115bf4224ac7e9de3c2fc35c17e5b37aa9dc2ddb3653e90864e6787f3f0aa7a2226" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.39.4" rel="160000.2.2"/>
  <changelog author="danish.prakash@suse.com" date="1715342400">- Update to version 1.35.4:
  * [release-1.35] Bump to Buildah v1.35.4
  * [release-1.35] CVE-2024-3727 updates (bsc#1224117)
  * integration test: handle new labels in "bud and test --unsetlabel"
  * [release-1.35] Bump go-jose CVE-2024-28180
  * [release-1.35] Bump ocicrypt and go-jose CVE-2024-28180</changelog>
  <changelog author="dcermak@suse.com" date="1727870400">- Add patches for CVE-2024-9407 and CVE-2024-9341:
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch (bsc#1231208
    aka CVE-2024-9407)
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch (bsc#1231230
    aka CVE-2024-9341)</changelog>
  <changelog author="danish.prakash@suse.com" date="1729080000">- Add patch for CVE-2024-9675 (bsc#1231499):
  * 0003-Properly-validate-cache-IDs-and-sources.patch
- Rebase patches:
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1729598400">- Add patch for CVE-2024-9676 (bsc#1231698):
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Rebase patches:
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1737979200">- Update to version 1.35.5 (fix for CVE-2024-11218; bsc#1236272):
  * Tag v1.35.5
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * Properly validate cache IDs and sources
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * Allow cache mounts to be stages or additional build contexts
  * Integration tests: switch some base images
  * Disable most packit copr targets
  * Cross-build on Fedora
- Rename patches:
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch =&gt;
    0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch =&gt;
    0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Removed patches(merged upstream):
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="dcermak@suse.com" date="1739361600">- Add patch for CVE-2023-45288 (bsc#1236507)
  Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
  Added patch:
  * 0004-http2-close-connections-when-receiving-too-many-head.patch
    (CVE-2023-45288 - bsc#1236531)</changelog>
  <changelog author="danish.prakash@suse.com" date="1741262400">- Add patch for CVE-2025-27144 (bsc#1237681):
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Removed patches(merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
  * 0004-http2-close-connections-when-receiving-too-many-head.patch
- Update to version 1.37.6:
  * Tag v1.37.6
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * Allow cache mounts to be stages or additional build contexts
  * [release-1.37][CI:DOCS] Touch up changelogs
  * [release-1.37][CI:DOCS] touchup changelog
  * Update CHANGELOG.md
  * [release-1.37] Bump Buildah to v1.37.5
  * Bump the containers/storage library to v1.55.1
  * Properly validate cache IDs and sources
  * Packit: constrain koji job to fedora package to avoid dupes
  * Tag v1.37.4
  * vendor: update c/common to v0.60.4
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * [release-1.37] Bump to Buildah v1.37.3
  * Do not error on trying to write IMA xattr as rootless
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * Use Epoch: 2 and respect the epoch in dependencies.
  * [release-1.37] Bump Buildah to v1.37.2
  * [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
  * [release-1.37] Bump to Buildah v1.37.1
  * [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
  * Buildah v1.37.0
  * Bump c/storage, c/image, c/common for v1.37.0
  * "build with basename resolving user arg" tests: correct ARG use
  * bud-multiple-platform-no-run test: correct ARG use
  * imagebuildah: always have default values for $TARGET... args ready
  * bump github.com/openshift/imagebuilder to v1.2.14
  * fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * CI: use local registry, part 2 of 2
  * CI: use local registry, part 1 of 2
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
  * Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
  * Replace libimage.LookupReferenceFunc with the manifests version
  * conformance tests: enable testing CompatVolumes
  * conformance tests: add a test that tries to chown a volume
  * imagebuildah: make traditional volume handling not the default
  * StageExecutor.prepare(): mark base image volumes for preservation
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * Vendor in latest containers/(common, storage, image)
  * fix(deps): update module golang.org/x/term to v0.22.0
  * fix(deps): update module golang.org/x/sys to v0.22.0
  * fix(deps): update golang.org/x/exp digest to 7f521ea
  * fix(deps): update github.com/containers/luksy digest to a8846e2
  * imagebuildah.StageExecutor.Copy(): reject new flags for now
  * bump github.com/openshift/imagebuilder to v1.2.11
  * Rework parsing of --pull flags
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * imagebuildah.StageExecutor.prepare(): log the --platform flag
  * CI VMs: bump
  * buildah copy: preserve owner info with --from= a container or image
  * conformance tests: enable testing CompatSetParent
  * containerImageRef.NewImageSource(): move the FROM comment to first
  * commit: set "parent" for docker format only when requested
  * Update godoc for Builder.EnsureContainerPathAs
  * fix(deps): update module github.com/spf13/cobra to v1.8.1
  * fix(deps): update module github.com/containernetworking/cni to v1.2.0
  * fix(deps): update module github.com/opencontainers/runc to v1.1.13
  * Change default for podman build to --pull missing
  * fix(deps): update module github.com/containers/common to v0.59.1
  * Clarify definition of --pull options
  * buildah: fix a nil pointer reference on FreeBSD
  * Use /var/tmp for $TMPDIR for vfs conformance jobs
  * Cirrus: run `df` during job setup
  * conformance: use quay.io/libpod/centos:7 instead of centos:8
  * Stop setting "parent" in docker format
  * conformance: check if workdir trims path separator suffixes
  * push integration test: pass password to docker login via stdin
  * Re-enable the "copy with chown" conformance test
  * healthcheck: Add support for `--start-interval`
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/containerd/containerd to v1.7.18
  * tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
  * Cross-build on Fedora
  * Drop copyStringSlice() and copyStringStringMap()
  * fix(deps): update module golang.org/x/crypto to v0.24.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * Provide an uptime_netbsd.go
  * Spell unix as "!windows"
  * Add netbsd to lists-of-OSes
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [skip-ci] Packit: enable c10s downstream sync
  * CI VMs: bump, to debian with cgroups v2
  * Document when BlobDirectory is overridden
  * fix secret mounts for env vars when using chroot isolation
  * Change to take a types.ImageReference arg
  * imagebuildah: Support custom image reference lookup for cache push/pull
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump to v1.37.0-dev
  * Bump to v1.36.0
  * build: be more selective about specifying the default OS
  * Bump to c/common v0.59.0
  * Fix buildah prune --help showing the same example twice
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * fix(deps): update module github.com/containers/image/v5 to v5.31.0
  * CI: Clarify Debian use for conformance tests
  * bud tests: fix breakage when vendoring into podman
  * Integration tests: fake up a replacement for nixery.dev/shell
  * copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
  * Don't expand RUN heredocs ourselves, let the shell do it
  * Don't leak temp files on failures
  * Add release note template to split dependency chores
  * fix CentOS/RHEL build - no BATS there
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
  * Address CVE-2024-3727
  * chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
  * Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
  * Setting --arch should set the TARGETARCH build arg
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * [CI:DOCS] Add link to Buildah image page to README.md
  * Don't set GOTOOLCHAIN=local
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Makefile: set GOTOOLCHAIN=local
  * Integration tests: switch some base images
  * containerImageRef.NewImageSource: merge the tar filters
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
  * Disable packit builds for centos-stream+epel-next-8
  * Makefile: add missing files to $(SOURCES)
  * CI VMs: bump to new versions with tmpfs /tmp
  * chore(deps): update module golang.org/x/net to v0.23.0 [security]
  * integration test: handle new labels in "bud and test --unsetlabel"
  * Switch packit configuration to use epel-9-$arch ...
  * Give unit tests a bit more time
  * Integration tests: remove a couple of duplicated tests
  * Integration tests: whitespace tweaks
  * Integration tests: don't remove images at start or end of test
  * Integration tests: use cached images more
  * Integration tests _prefetch: use registry configs
  * internal: use fileutils.(Le|E)xists
  * pkg/parse: use fileutils.(Le|E)xists
  * buildah: use fileutils.(Le|E)xists
  * chroot: use fileutils.(Le|E)xists
  * vendor: update containers/(common|storage)
  * Fix issue/pr lock workflow
  * [CI:DOCS] Add golang 1.21 update warning
  * heredoc: honor inline COPY irrespective of ignorefiles
  * Update install.md
  * source-push: add support for --digestfile
  * Fix caching when mounting a cached stage with COPY/ADD
  * fix(deps): update github.com/containers/luksy digest to 3d2cf0e
  * Makefile: softcode `strip`, use it from env var
  * Man page updates
  * Add support for passing CDI specs to --device
  * Update comments on some API objects
  * pkg/parse.DeviceFromPath(): dereference src symlinks
  * Makefile - instead of calling `as` directly, use it from env var
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * CI: bump VMs
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
  * Change RUN to comment in bud.bats
  * Stop rebasing renovate PRs automatically
  * Update renovate validation image
  * CVE-2024-1753 container escape fix
  * correctly configure /etc/hosts and resolv.conf when using network
  * buildah: refactor resolv/hosts setup.
  * rename the hostFile var to reflect the value better
  * vendor latest c/common
  * [skip-ci] rpm: use go-rpm-macros supported vendoring
  * Update docs/buildah-add.1.md
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
  * fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * Bump google.golang.org/protobuf to v1.33.0
  * fix links to containerignore doc
  * [skip-ci] Makefile: update rpm target
  * pr-should-include-tests: use GitHub label, not commit text
  * tests: enable pasta tests
  * [CI:DOCS] Migrate buildah container image
  * Update .gitignore
  * Bump to v1.36.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1742817600">- Add patch for CVE-2025-22869 - bsc#1239339
  Add patch:
  * 0002-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
    (CVE-2025-22869 - bsc#1239339)
  Rebase patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1747224000">- Rebase patch:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Removed patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0002-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Update to version 1.39.4:
  * [release-1.39] Bump to Buildah v1.39.4
  * [release-1.39] Bump c/image to v5.34.3, c/common v0.62.3
  * createPlatformContainer: drop MS_REMOUNT|MS_BIND
  * [release-1.39] Bump to Buildah v1.39.3
  * [release-1.39] Bump c/storage to v1.57.2, c/image v5.34.2,...
  * [release-1.39] Bump to Buildah v1.39.2
  * [release-1.39] tests/conformance/testdata/Dockerfile.add:...
  * [release-1.39] Bump c/image to v5.34.1, c/common v0.62.1
  * Tag v1.39.1
  * CI config: post-branch update
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * chroot createPlatformContainer: use MS_REMOUNT
  * Bump to Buildah v1.39.0
  * Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
  * Update module github.com/containers/storage to v1.57.0
  * CI, .cirrus: parallelize containerized integration
  * ed's comment: cleanup
  * use seperate blobinfocache for flaky test
  * bump CI VMs to 4 CPUs (was: 2) for integration tests
  * cleanup, debug, and disable parallel in blobcache tests
  * bats tests - parallelize
  * pkg/overlay: cleanups
  * RPM: include check section to silence rpmlint
  * RPM: use default gobuild macro on RHEL
  * tests: remove masked /sys/dev/block check
  * vendor to latest c/{common,image,storage}
  * build, run: record hash or digest in image history
  * Accept image names as sources for cache mounts
  * Run(): always clean up options.ExternalImageMounts
  * refactor: replace golang.org/x/exp with stdlib
  * Update to c/image @main
  * fix broken doc link
  * run_freebsd.go: only import runtime-spec once
  * fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
  * bump github.com/vbatts/tar-split
  * Add more checks to the --mount flag parsing logic
  * chroot mount flags integration test: copy binaries
  * fix(deps): update module github.com/moby/buildkit to v0.19.0
  * relabel(): correct a misleading parameter name
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * fix(deps): update module github.com/containers/common to v0.61.1
  * fix(deps): update module github.com/containers/image/v5 to v5.33.1
  * [CI:DOCS] Touch up changelogs
  * fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
  * copy-preserving-extended-attributes: use a different base image
  * fix(deps): update github.com/containers/luksy digest to a3a812d
  * chore(deps): update module golang.org/x/net to v0.33.0 [security]
  * fix(deps): update module golang.org/x/crypto to v0.32.0
  * New VM Images
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.1
  * Add support for --security-opt mask and unmask
  * Allow cache mounts to be stages or additional build contexts
  * [skip-ci] RPM: cleanup changelog conditionals
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
  * fix(deps): update module github.com/moby/buildkit to v0.18.2
  * Fix an error message in the chroot unit test
  * copier: use .PAXRecords instead of .Xattrs
  * chroot: on Linux, try to pivot_root before falling back to chroot
  * manifest add: add --artifact-annotation
  * Add context to an error message
  * Update module golang.org/x/crypto to v0.31.0
  * Update module github.com/opencontainers/runc to v1.2.3
  * Update module github.com/docker/docker to v27.4.0+incompatible
  * Update module github.com/cyphar/filepath-securejoin to v0.3.5
  * CI: don't build a binary in the unit tests task
  * CI: use /tmp for $GOCACHE
  * CI: remove dependencies on the cross-build task
  * CI: run cross-compile task with make -j
  * Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
  * Update module github.com/moby/buildkit to v0.18.1
  * Update module golang.org/x/crypto to v0.30.0
  * Update golang.org/x/exp digest to 2d47ceb
  * Update github.com/opencontainers/runtime-tools digest to f7e3563
  * [skip-ci] Packit: remove rhel copr build jobs
  * [skip-ci] Packit: switch to fedora-all for copr
  * Update module github.com/stretchr/testify to v1.10.0
  * Update module github.com/moby/buildkit to v0.17.2
  * Makefile: use `find` to detect source files
  * Tests: make _prefetch() parallel-safe
  * Update module github.com/opencontainers/runc to v1.2.2
  * executor: allow to specify --no-pivot-root
  * Update module github.com/moby/sys/capability to v0.4.0
  * Makefile: mv codespell config to .codespellrc
  * Fix some codespell errors
  * Makefile,install.md: rm gopath stuff
  * Makefile: rm targets working on ..
  * build: rm exclude_graphdriver_devicemapper tag
  * Makefile: rm unused var
  * Finish updating to go 1.22
  * CI VMs: bump again
  * Bump to Buidah v1.39.0-dev
  * Bump to Buildah v1.38.0
  * Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.1
  * fix(deps): update module github.com/containers/storage to v1.56.0
  * tests: skip two ulimit tests
  * CI VMs: bump f40 -&gt; f41
  * tests/tools: rebuild tools when we change versions
  * tests/tools: update golangci-lint to v1.61.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.0
  * Handle RUN --mount with relative targets and no configured workdir
  * tests: bud: make parallel-safe
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * tests: blobcache: use unique image name
  * tests: sbom: never write to cwd
  * tests: mkcw: bug fixes, refactor
  * deps: bump runc to v1.2.0
  * deps: switch to moby/sys/userns
  * tests/test_runner.sh: remove some redundancies
  * Integration tests: run git daemon on a random-but-bind()able port
  * fix(deps): update module github.com/opencontainers/selinux to v1.11.1
  * go.mod: remove unnecessary replace
  * Document more buildah build --secret options
  * Add support for COPY --exclude and ADD --exclude options
  * fix(deps): update github.com/containers/luksy digest to e2530d6
  * chore(deps): update dependency containers/automation_images to v20241010
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * Properly validate cache IDs and sources
  * [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
  * Audit and tidy OWNERS
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * tests: add quotes to names
  * vendor: update c/common to latest
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * vendor: switch to moby/sys/capability
  * Don't set ambient capabilities
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * buildah-manifest-create.1: Fix manpage section
  * chore(deps): update dependency ubuntu to v24
  * Make `buildah manifest push --all` true by default
  * chroot: add newlines at the end of printed error messages
  * Do not error on trying to write IMA xattr as rootless
  * fix: remove duplicate conditions
  * fix(deps): update module github.com/moby/buildkit to v0.16.0
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Document how entrypoint is configured in buildah config
  * In a container, try to register binfmt_misc
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * build: fall back to parsing a TARGETPLATFORM build-arg
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * tests/bud.bats: add git source
  * add: add support for git source
  * Add support for the new c/common pasta options
  * vendor latest c/common
  * fix(deps): update module golang.org/x/term to v0.24.0
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
  * packit: update fedora and epel targets
  * cirrus: disable f39 testing
  * cirrus: fix fedora names
  * update to go 1.22
  * Vendor c/common:9d025e4cb348
  * copier: handle globbing with "**" path components
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * fix(deps): update github.com/containers/luksy digest to 2e7307c
  * imagebuildah: make scratch config handling toggleable
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Add a validation script for Makefile $(SOURCES)
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
  * New VMs
  * Update some godocs, use 0o to prefix an octal in a comment
  * buildah-build.1.md: expand the --layer-label description
  * fix(deps): update module github.com/containers/common to v0.60.2
  * stage_executor: set avoidLookingCache only if mounting stage
  * imagebuildah: additionalContext is not a local built stage
  * run: fix a nil pointer dereference on FreeBSD
  * CI: enable the whitespace linter
  * Fix some govet linter warnings
  * Commit(): retry committing to local storage on storage.LayerUnknown
  * CI: enable the gofumpt linter
  * conformance: move weirdly-named files out of the repository
  * fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
  * fix(deps): update module github.com/containers/common to v0.60.1
  * *: use gofmt -s, add gofmt linter
  * *: fix build tags
  * fix(deps): update module github.com/containers/image/v5 to v5.32.1
  * Add(): re-escape any globbed items that included escapes
  * conformance tests: use mirror.gcr.io for most images
  * unit tests: use test-specific policy.json and registries.conf
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Update to spun-out "github.com/containerd/platforms"
  * Bump github.com/containerd/containerd
  * test/tools/Makefile: duplicate the vendor-in-container target
  * linters: unchecked error
  * linters: don't end loop iterations with "else" when "then" would
  * linters: unused arguments shouldn't have names
  * linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
  * linters: don't name variables "cap"
  * `make lint`: use --timeout instead of --deadline
  * Drop the e2e test suite
  * fix(deps): update module golang.org/x/crypto to v0.26.0
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * `make vendor-in-container`: use the caller's Go cache if it exists
  * fix(deps): fix test/tools ginkgo typo
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Update to keep up with API changes in storage
  * fix(deps): update github.com/containers/luksy digest to 1f482a9
  * install: On Debian/Ubuntu, add installation of libbtrfs-dev
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * fix(deps): update golang.org/x/exp digest to 8a7402a
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
  * Use Epoch: 2 and respect the epoch in dependencies.
  * Bump to Buildah v1.38.0-dev
  * AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
  * Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
  * integration tests: teach starthttpd() about TLS and pid files</changelog>
  <changelog author="danish.prakash@suse.com" date="1749729600">- Add patch to fix bsc#1242445 (https://github.com/containers/buildah/issues/6071)
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
- Rebase patch:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
</package>
<package pkgid="aca5b567f779613a451598db5fe9962a9e1b7b9dd17801229de675509470cf24cb0d47550d88e79074ae0a46444eb563d81a77d04f817623600203b4ece2f0be" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.39.5" rel="160000.1.1"/>
  <changelog author="danish.prakash@suse.com" date="1729080000">- Add patch for CVE-2024-9675 (bsc#1231499):
  * 0003-Properly-validate-cache-IDs-and-sources.patch
- Rebase patches:
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1729598400">- Add patch for CVE-2024-9676 (bsc#1231698):
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Rebase patches:
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1737979200">- Update to version 1.35.5 (fix for CVE-2024-11218; bsc#1236272):
  * Tag v1.35.5
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * Properly validate cache IDs and sources
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * Allow cache mounts to be stages or additional build contexts
  * Integration tests: switch some base images
  * Disable most packit copr targets
  * Cross-build on Fedora
- Rename patches:
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch =&gt;
    0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch =&gt;
    0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Removed patches(merged upstream):
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="dcermak@suse.com" date="1739361600">- Add patch for CVE-2023-45288 (bsc#1236507)
  Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
  Added patch:
  * 0004-http2-close-connections-when-receiving-too-many-head.patch
    (CVE-2023-45288 - bsc#1236531)</changelog>
  <changelog author="danish.prakash@suse.com" date="1741262400">- Add patch for CVE-2025-27144 (bsc#1237681):
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Removed patches(merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
  * 0004-http2-close-connections-when-receiving-too-many-head.patch
- Update to version 1.37.6:
  * Tag v1.37.6
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * Allow cache mounts to be stages or additional build contexts
  * [release-1.37][CI:DOCS] Touch up changelogs
  * [release-1.37][CI:DOCS] touchup changelog
  * Update CHANGELOG.md
  * [release-1.37] Bump Buildah to v1.37.5
  * Bump the containers/storage library to v1.55.1
  * Properly validate cache IDs and sources
  * Packit: constrain koji job to fedora package to avoid dupes
  * Tag v1.37.4
  * vendor: update c/common to v0.60.4
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * [release-1.37] Bump to Buildah v1.37.3
  * Do not error on trying to write IMA xattr as rootless
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * Use Epoch: 2 and respect the epoch in dependencies.
  * [release-1.37] Bump Buildah to v1.37.2
  * [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
  * [release-1.37] Bump to Buildah v1.37.1
  * [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
  * Buildah v1.37.0
  * Bump c/storage, c/image, c/common for v1.37.0
  * "build with basename resolving user arg" tests: correct ARG use
  * bud-multiple-platform-no-run test: correct ARG use
  * imagebuildah: always have default values for $TARGET... args ready
  * bump github.com/openshift/imagebuilder to v1.2.14
  * fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * CI: use local registry, part 2 of 2
  * CI: use local registry, part 1 of 2
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
  * Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
  * Replace libimage.LookupReferenceFunc with the manifests version
  * conformance tests: enable testing CompatVolumes
  * conformance tests: add a test that tries to chown a volume
  * imagebuildah: make traditional volume handling not the default
  * StageExecutor.prepare(): mark base image volumes for preservation
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * Vendor in latest containers/(common, storage, image)
  * fix(deps): update module golang.org/x/term to v0.22.0
  * fix(deps): update module golang.org/x/sys to v0.22.0
  * fix(deps): update golang.org/x/exp digest to 7f521ea
  * fix(deps): update github.com/containers/luksy digest to a8846e2
  * imagebuildah.StageExecutor.Copy(): reject new flags for now
  * bump github.com/openshift/imagebuilder to v1.2.11
  * Rework parsing of --pull flags
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * imagebuildah.StageExecutor.prepare(): log the --platform flag
  * CI VMs: bump
  * buildah copy: preserve owner info with --from= a container or image
  * conformance tests: enable testing CompatSetParent
  * containerImageRef.NewImageSource(): move the FROM comment to first
  * commit: set "parent" for docker format only when requested
  * Update godoc for Builder.EnsureContainerPathAs
  * fix(deps): update module github.com/spf13/cobra to v1.8.1
  * fix(deps): update module github.com/containernetworking/cni to v1.2.0
  * fix(deps): update module github.com/opencontainers/runc to v1.1.13
  * Change default for podman build to --pull missing
  * fix(deps): update module github.com/containers/common to v0.59.1
  * Clarify definition of --pull options
  * buildah: fix a nil pointer reference on FreeBSD
  * Use /var/tmp for $TMPDIR for vfs conformance jobs
  * Cirrus: run `df` during job setup
  * conformance: use quay.io/libpod/centos:7 instead of centos:8
  * Stop setting "parent" in docker format
  * conformance: check if workdir trims path separator suffixes
  * push integration test: pass password to docker login via stdin
  * Re-enable the "copy with chown" conformance test
  * healthcheck: Add support for `--start-interval`
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/containerd/containerd to v1.7.18
  * tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
  * Cross-build on Fedora
  * Drop copyStringSlice() and copyStringStringMap()
  * fix(deps): update module golang.org/x/crypto to v0.24.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * Provide an uptime_netbsd.go
  * Spell unix as "!windows"
  * Add netbsd to lists-of-OSes
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [skip-ci] Packit: enable c10s downstream sync
  * CI VMs: bump, to debian with cgroups v2
  * Document when BlobDirectory is overridden
  * fix secret mounts for env vars when using chroot isolation
  * Change to take a types.ImageReference arg
  * imagebuildah: Support custom image reference lookup for cache push/pull
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump to v1.37.0-dev
  * Bump to v1.36.0
  * build: be more selective about specifying the default OS
  * Bump to c/common v0.59.0
  * Fix buildah prune --help showing the same example twice
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * fix(deps): update module github.com/containers/image/v5 to v5.31.0
  * CI: Clarify Debian use for conformance tests
  * bud tests: fix breakage when vendoring into podman
  * Integration tests: fake up a replacement for nixery.dev/shell
  * copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
  * Don't expand RUN heredocs ourselves, let the shell do it
  * Don't leak temp files on failures
  * Add release note template to split dependency chores
  * fix CentOS/RHEL build - no BATS there
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
  * Address CVE-2024-3727
  * chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
  * Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
  * Setting --arch should set the TARGETARCH build arg
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * [CI:DOCS] Add link to Buildah image page to README.md
  * Don't set GOTOOLCHAIN=local
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Makefile: set GOTOOLCHAIN=local
  * Integration tests: switch some base images
  * containerImageRef.NewImageSource: merge the tar filters
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
  * Disable packit builds for centos-stream+epel-next-8
  * Makefile: add missing files to $(SOURCES)
  * CI VMs: bump to new versions with tmpfs /tmp
  * chore(deps): update module golang.org/x/net to v0.23.0 [security]
  * integration test: handle new labels in "bud and test --unsetlabel"
  * Switch packit configuration to use epel-9-$arch ...
  * Give unit tests a bit more time
  * Integration tests: remove a couple of duplicated tests
  * Integration tests: whitespace tweaks
  * Integration tests: don't remove images at start or end of test
  * Integration tests: use cached images more
  * Integration tests _prefetch: use registry configs
  * internal: use fileutils.(Le|E)xists
  * pkg/parse: use fileutils.(Le|E)xists
  * buildah: use fileutils.(Le|E)xists
  * chroot: use fileutils.(Le|E)xists
  * vendor: update containers/(common|storage)
  * Fix issue/pr lock workflow
  * [CI:DOCS] Add golang 1.21 update warning
  * heredoc: honor inline COPY irrespective of ignorefiles
  * Update install.md
  * source-push: add support for --digestfile
  * Fix caching when mounting a cached stage with COPY/ADD
  * fix(deps): update github.com/containers/luksy digest to 3d2cf0e
  * Makefile: softcode `strip`, use it from env var
  * Man page updates
  * Add support for passing CDI specs to --device
  * Update comments on some API objects
  * pkg/parse.DeviceFromPath(): dereference src symlinks
  * Makefile - instead of calling `as` directly, use it from env var
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * CI: bump VMs
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
  * Change RUN to comment in bud.bats
  * Stop rebasing renovate PRs automatically
  * Update renovate validation image
  * CVE-2024-1753 container escape fix
  * correctly configure /etc/hosts and resolv.conf when using network
  * buildah: refactor resolv/hosts setup.
  * rename the hostFile var to reflect the value better
  * vendor latest c/common
  * [skip-ci] rpm: use go-rpm-macros supported vendoring
  * Update docs/buildah-add.1.md
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
  * fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * Bump google.golang.org/protobuf to v1.33.0
  * fix links to containerignore doc
  * [skip-ci] Makefile: update rpm target
  * pr-should-include-tests: use GitHub label, not commit text
  * tests: enable pasta tests
  * [CI:DOCS] Migrate buildah container image
  * Update .gitignore
  * Bump to v1.36.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1742817600">- Add patch for CVE-2025-22869 - bsc#1239339
  Add patch:
  * 0002-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
    (CVE-2025-22869 - bsc#1239339)
  Rebase patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1747224000">- Rebase patch:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Removed patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0002-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Update to version 1.39.4:
  * [release-1.39] Bump to Buildah v1.39.4
  * [release-1.39] Bump c/image to v5.34.3, c/common v0.62.3
  * createPlatformContainer: drop MS_REMOUNT|MS_BIND
  * [release-1.39] Bump to Buildah v1.39.3
  * [release-1.39] Bump c/storage to v1.57.2, c/image v5.34.2,...
  * [release-1.39] Bump to Buildah v1.39.2
  * [release-1.39] tests/conformance/testdata/Dockerfile.add:...
  * [release-1.39] Bump c/image to v5.34.1, c/common v0.62.1
  * Tag v1.39.1
  * CI config: post-branch update
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * chroot createPlatformContainer: use MS_REMOUNT
  * Bump to Buildah v1.39.0
  * Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
  * Update module github.com/containers/storage to v1.57.0
  * CI, .cirrus: parallelize containerized integration
  * ed's comment: cleanup
  * use seperate blobinfocache for flaky test
  * bump CI VMs to 4 CPUs (was: 2) for integration tests
  * cleanup, debug, and disable parallel in blobcache tests
  * bats tests - parallelize
  * pkg/overlay: cleanups
  * RPM: include check section to silence rpmlint
  * RPM: use default gobuild macro on RHEL
  * tests: remove masked /sys/dev/block check
  * vendor to latest c/{common,image,storage}
  * build, run: record hash or digest in image history
  * Accept image names as sources for cache mounts
  * Run(): always clean up options.ExternalImageMounts
  * refactor: replace golang.org/x/exp with stdlib
  * Update to c/image @main
  * fix broken doc link
  * run_freebsd.go: only import runtime-spec once
  * fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
  * bump github.com/vbatts/tar-split
  * Add more checks to the --mount flag parsing logic
  * chroot mount flags integration test: copy binaries
  * fix(deps): update module github.com/moby/buildkit to v0.19.0
  * relabel(): correct a misleading parameter name
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * fix(deps): update module github.com/containers/common to v0.61.1
  * fix(deps): update module github.com/containers/image/v5 to v5.33.1
  * [CI:DOCS] Touch up changelogs
  * fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
  * copy-preserving-extended-attributes: use a different base image
  * fix(deps): update github.com/containers/luksy digest to a3a812d
  * chore(deps): update module golang.org/x/net to v0.33.0 [security]
  * fix(deps): update module golang.org/x/crypto to v0.32.0
  * New VM Images
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.1
  * Add support for --security-opt mask and unmask
  * Allow cache mounts to be stages or additional build contexts
  * [skip-ci] RPM: cleanup changelog conditionals
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
  * fix(deps): update module github.com/moby/buildkit to v0.18.2
  * Fix an error message in the chroot unit test
  * copier: use .PAXRecords instead of .Xattrs
  * chroot: on Linux, try to pivot_root before falling back to chroot
  * manifest add: add --artifact-annotation
  * Add context to an error message
  * Update module golang.org/x/crypto to v0.31.0
  * Update module github.com/opencontainers/runc to v1.2.3
  * Update module github.com/docker/docker to v27.4.0+incompatible
  * Update module github.com/cyphar/filepath-securejoin to v0.3.5
  * CI: don't build a binary in the unit tests task
  * CI: use /tmp for $GOCACHE
  * CI: remove dependencies on the cross-build task
  * CI: run cross-compile task with make -j
  * Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
  * Update module github.com/moby/buildkit to v0.18.1
  * Update module golang.org/x/crypto to v0.30.0
  * Update golang.org/x/exp digest to 2d47ceb
  * Update github.com/opencontainers/runtime-tools digest to f7e3563
  * [skip-ci] Packit: remove rhel copr build jobs
  * [skip-ci] Packit: switch to fedora-all for copr
  * Update module github.com/stretchr/testify to v1.10.0
  * Update module github.com/moby/buildkit to v0.17.2
  * Makefile: use `find` to detect source files
  * Tests: make _prefetch() parallel-safe
  * Update module github.com/opencontainers/runc to v1.2.2
  * executor: allow to specify --no-pivot-root
  * Update module github.com/moby/sys/capability to v0.4.0
  * Makefile: mv codespell config to .codespellrc
  * Fix some codespell errors
  * Makefile,install.md: rm gopath stuff
  * Makefile: rm targets working on ..
  * build: rm exclude_graphdriver_devicemapper tag
  * Makefile: rm unused var
  * Finish updating to go 1.22
  * CI VMs: bump again
  * Bump to Buidah v1.39.0-dev
  * Bump to Buildah v1.38.0
  * Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.1
  * fix(deps): update module github.com/containers/storage to v1.56.0
  * tests: skip two ulimit tests
  * CI VMs: bump f40 -&gt; f41
  * tests/tools: rebuild tools when we change versions
  * tests/tools: update golangci-lint to v1.61.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.0
  * Handle RUN --mount with relative targets and no configured workdir
  * tests: bud: make parallel-safe
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * tests: blobcache: use unique image name
  * tests: sbom: never write to cwd
  * tests: mkcw: bug fixes, refactor
  * deps: bump runc to v1.2.0
  * deps: switch to moby/sys/userns
  * tests/test_runner.sh: remove some redundancies
  * Integration tests: run git daemon on a random-but-bind()able port
  * fix(deps): update module github.com/opencontainers/selinux to v1.11.1
  * go.mod: remove unnecessary replace
  * Document more buildah build --secret options
  * Add support for COPY --exclude and ADD --exclude options
  * fix(deps): update github.com/containers/luksy digest to e2530d6
  * chore(deps): update dependency containers/automation_images to v20241010
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * Properly validate cache IDs and sources
  * [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
  * Audit and tidy OWNERS
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * tests: add quotes to names
  * vendor: update c/common to latest
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * vendor: switch to moby/sys/capability
  * Don't set ambient capabilities
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * buildah-manifest-create.1: Fix manpage section
  * chore(deps): update dependency ubuntu to v24
  * Make `buildah manifest push --all` true by default
  * chroot: add newlines at the end of printed error messages
  * Do not error on trying to write IMA xattr as rootless
  * fix: remove duplicate conditions
  * fix(deps): update module github.com/moby/buildkit to v0.16.0
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Document how entrypoint is configured in buildah config
  * In a container, try to register binfmt_misc
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * build: fall back to parsing a TARGETPLATFORM build-arg
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * tests/bud.bats: add git source
  * add: add support for git source
  * Add support for the new c/common pasta options
  * vendor latest c/common
  * fix(deps): update module golang.org/x/term to v0.24.0
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
  * packit: update fedora and epel targets
  * cirrus: disable f39 testing
  * cirrus: fix fedora names
  * update to go 1.22
  * Vendor c/common:9d025e4cb348
  * copier: handle globbing with "**" path components
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * fix(deps): update github.com/containers/luksy digest to 2e7307c
  * imagebuildah: make scratch config handling toggleable
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Add a validation script for Makefile $(SOURCES)
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
  * New VMs
  * Update some godocs, use 0o to prefix an octal in a comment
  * buildah-build.1.md: expand the --layer-label description
  * fix(deps): update module github.com/containers/common to v0.60.2
  * stage_executor: set avoidLookingCache only if mounting stage
  * imagebuildah: additionalContext is not a local built stage
  * run: fix a nil pointer dereference on FreeBSD
  * CI: enable the whitespace linter
  * Fix some govet linter warnings
  * Commit(): retry committing to local storage on storage.LayerUnknown
  * CI: enable the gofumpt linter
  * conformance: move weirdly-named files out of the repository
  * fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
  * fix(deps): update module github.com/containers/common to v0.60.1
  * *: use gofmt -s, add gofmt linter
  * *: fix build tags
  * fix(deps): update module github.com/containers/image/v5 to v5.32.1
  * Add(): re-escape any globbed items that included escapes
  * conformance tests: use mirror.gcr.io for most images
  * unit tests: use test-specific policy.json and registries.conf
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Update to spun-out "github.com/containerd/platforms"
  * Bump github.com/containerd/containerd
  * test/tools/Makefile: duplicate the vendor-in-container target
  * linters: unchecked error
  * linters: don't end loop iterations with "else" when "then" would
  * linters: unused arguments shouldn't have names
  * linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
  * linters: don't name variables "cap"
  * `make lint`: use --timeout instead of --deadline
  * Drop the e2e test suite
  * fix(deps): update module golang.org/x/crypto to v0.26.0
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * `make vendor-in-container`: use the caller's Go cache if it exists
  * fix(deps): fix test/tools ginkgo typo
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Update to keep up with API changes in storage
  * fix(deps): update github.com/containers/luksy digest to 1f482a9
  * install: On Debian/Ubuntu, add installation of libbtrfs-dev
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * fix(deps): update golang.org/x/exp digest to 8a7402a
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
  * Use Epoch: 2 and respect the epoch in dependencies.
  * Bump to Buildah v1.38.0-dev
  * AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
  * Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
  * integration tests: teach starthttpd() about TLS and pid files</changelog>
  <changelog author="danish.prakash@suse.com" date="1749729600">- Add patch to fix bsc#1242445 (https://github.com/containers/buildah/issues/6071)
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
- Rebase patch:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1762430400">- Add patch for CVE-2025-52881 (bsc#1253096):
  * 0003-CVE-2025-52881-backport-subset-of-patch-from-runc.patch
- Rebase patches:
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Update to version 1.39.5:
  * [release-1.39] Bump to Buildah v1.39.5
  * [release-1.39] Bump x/tools to v0.26.0
  * [release-1.39] replace deprecated selinux/label calls
  * [release-1.39] Bump runc to v1.2.8 - CVE-2025-52881
  * Builder.sbomScan(): don't break non-root scanners
  * [release-1.39] Bump to Buildah v1.39.4
  * [release-1.39] Bump c/image to v5.34.3, c/common v0.62.3
  * createPlatformContainer: drop MS_REMOUNT|MS_BIND
  * [release-1.39] Bump to Buildah v1.39.3
  * [release-1.39] Bump c/storage to v1.57.2, c/image v5.34.2,...
  * [release-1.39] Bump to Buildah v1.39.2
  * [release-1.39] tests/conformance/testdata/Dockerfile.add:...
  * [release-1.39] Bump c/image to v5.34.1, c/common v0.62.1
  * Tag v1.39.1
  * CI config: post-branch update
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * chroot createPlatformContainer: use MS_REMOUNT
  * Bump to Buildah v1.39.0
  * Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
  * Update module github.com/containers/storage to v1.57.0
  * CI, .cirrus: parallelize containerized integration
  * ed's comment: cleanup
  * use seperate blobinfocache for flaky test
  * bump CI VMs to 4 CPUs (was: 2) for integration tests
  * cleanup, debug, and disable parallel in blobcache tests
  * bats tests - parallelize
  * pkg/overlay: cleanups
  * RPM: include check section to silence rpmlint
  * RPM: use default gobuild macro on RHEL
  * tests: remove masked /sys/dev/block check
  * vendor to latest c/{common,image,storage}
  * build, run: record hash or digest in image history
  * Accept image names as sources for cache mounts
  * Run(): always clean up options.ExternalImageMounts
  * refactor: replace golang.org/x/exp with stdlib
  * Update to c/image @main
  * fix broken doc link
  * run_freebsd.go: only import runtime-spec once
  * fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
  * bump github.com/vbatts/tar-split
  * Add more checks to the --mount flag parsing logic
  * chroot mount flags integration test: copy binaries
  * fix(deps): update module github.com/moby/buildkit to v0.19.0
  * relabel(): correct a misleading parameter name
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * fix(deps): update module github.com/containers/common to v0.61.1
  * fix(deps): update module github.com/containers/image/v5 to v5.33.1
  * [CI:DOCS] Touch up changelogs
  * fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
  * copy-preserving-extended-attributes: use a different base image
  * fix(deps): update github.com/containers/luksy digest to a3a812d
  * chore(deps): update module golang.org/x/net to v0.33.0 [security]
  * fix(deps): update module golang.org/x/crypto to v0.32.0
  * New VM Images
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.1
  * Add support for --security-opt mask and unmask
  * Allow cache mounts to be stages or additional build contexts
  * [skip-ci] RPM: cleanup changelog conditionals
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
  * fix(deps): update module github.com/moby/buildkit to v0.18.2
  * Fix an error message in the chroot unit test
  * copier: use .PAXRecords instead of .Xattrs
  * chroot: on Linux, try to pivot_root before falling back to chroot
  * manifest add: add --artifact-annotation
  * Add context to an error message
  * Update module golang.org/x/crypto to v0.31.0
  * Update module github.com/opencontainers/runc to v1.2.3
  * Update module github.com/docker/docker to v27.4.0+incompatible
  * Update module github.com/cyphar/filepath-securejoin to v0.3.5
  * CI: don't build a binary in the unit tests task
  * CI: use /tmp for $GOCACHE
  * CI: remove dependencies on the cross-build task
  * CI: run cross-compile task with make -j
  * Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
  * Update module github.com/moby/buildkit to v0.18.1
  * Update module golang.org/x/crypto to v0.30.0
  * Update golang.org/x/exp digest to 2d47ceb
  * Update github.com/opencontainers/runtime-tools digest to f7e3563
  * [skip-ci] Packit: remove rhel copr build jobs
  * [skip-ci] Packit: switch to fedora-all for copr
  * Update module github.com/stretchr/testify to v1.10.0
  * Update module github.com/moby/buildkit to v0.17.2
  * Makefile: use `find` to detect source files
  * Tests: make _prefetch() parallel-safe
  * Update module github.com/opencontainers/runc to v1.2.2
  * executor: allow to specify --no-pivot-root
  * Update module github.com/moby/sys/capability to v0.4.0
  * Makefile: mv codespell config to .codespellrc
  * Fix some codespell errors
  * Makefile,install.md: rm gopath stuff
  * Makefile: rm targets working on ..
  * build: rm exclude_graphdriver_devicemapper tag
  * Makefile: rm unused var
  * Finish updating to go 1.22
  * CI VMs: bump again
  * Bump to Buidah v1.39.0-dev
  * Bump to Buildah v1.38.0
  * Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.1
  * fix(deps): update module github.com/containers/storage to v1.56.0
  * tests: skip two ulimit tests
  * CI VMs: bump f40 -&gt; f41
  * tests/tools: rebuild tools when we change versions
  * tests/tools: update golangci-lint to v1.61.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.0
  * Handle RUN --mount with relative targets and no configured workdir
  * tests: bud: make parallel-safe
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * tests: blobcache: use unique image name
  * tests: sbom: never write to cwd
  * tests: mkcw: bug fixes, refactor
  * deps: bump runc to v1.2.0
  * deps: switch to moby/sys/userns
  * tests/test_runner.sh: remove some redundancies
  * Integration tests: run git daemon on a random-but-bind()able port
  * fix(deps): update module github.com/opencontainers/selinux to v1.11.1
  * go.mod: remove unnecessary replace
  * Document more buildah build --secret options
  * Add support for COPY --exclude and ADD --exclude options
  * fix(deps): update github.com/containers/luksy digest to e2530d6
  * chore(deps): update dependency containers/automation_images to v20241010
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * Properly validate cache IDs and sources
  * [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
  * Audit and tidy OWNERS
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * tests: add quotes to names
  * vendor: update c/common to latest
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * vendor: switch to moby/sys/capability
  * Don't set ambient capabilities
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * buildah-manifest-create.1: Fix manpage section
  * chore(deps): update dependency ubuntu to v24
  * Make `buildah manifest push --all` true by default
  * chroot: add newlines at the end of printed error messages
  * Do not error on trying to write IMA xattr as rootless
  * fix: remove duplicate conditions
  * fix(deps): update module github.com/moby/buildkit to v0.16.0
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Document how entrypoint is configured in buildah config
  * In a container, try to register binfmt_misc
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * build: fall back to parsing a TARGETPLATFORM build-arg
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * tests/bud.bats: add git source
  * add: add support for git source
  * Add support for the new c/common pasta options
  * vendor latest c/common
  * fix(deps): update module golang.org/x/term to v0.24.0
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
  * packit: update fedora and epel targets
  * cirrus: disable f39 testing
  * cirrus: fix fedora names
  * update to go 1.22
  * Vendor c/common:9d025e4cb348
  * copier: handle globbing with "**" path components
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * fix(deps): update github.com/containers/luksy digest to 2e7307c
  * imagebuildah: make scratch config handling toggleable
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Add a validation script for Makefile $(SOURCES)
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
  * New VMs
  * Update some godocs, use 0o to prefix an octal in a comment
  * buildah-build.1.md: expand the --layer-label description
  * fix(deps): update module github.com/containers/common to v0.60.2
  * stage_executor: set avoidLookingCache only if mounting stage
  * imagebuildah: additionalContext is not a local built stage
  * run: fix a nil pointer dereference on FreeBSD
  * CI: enable the whitespace linter
  * Fix some govet linter warnings
  * Commit(): retry committing to local storage on storage.LayerUnknown
  * CI: enable the gofumpt linter
  * conformance: move weirdly-named files out of the repository
  * fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
  * fix(deps): update module github.com/containers/common to v0.60.1
  * *: use gofmt -s, add gofmt linter
  * *: fix build tags
  * fix(deps): update module github.com/containers/image/v5 to v5.32.1
  * Add(): re-escape any globbed items that included escapes
  * conformance tests: use mirror.gcr.io for most images
  * unit tests: use test-specific policy.json and registries.conf
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Update to spun-out "github.com/containerd/platforms"
  * Bump github.com/containerd/containerd
  * test/tools/Makefile: duplicate the vendor-in-container target
  * linters: unchecked error
  * linters: don't end loop iterations with "else" when "then" would
  * linters: unused arguments shouldn't have names
  * linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
  * linters: don't name variables "cap"
  * `make lint`: use --timeout instead of --deadline
  * Drop the e2e test suite
  * fix(deps): update module golang.org/x/crypto to v0.26.0
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * `make vendor-in-container`: use the caller's Go cache if it exists
  * fix(deps): fix test/tools ginkgo typo
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Update to keep up with API changes in storage
  * fix(deps): update github.com/containers/luksy digest to 1f482a9
  * install: On Debian/Ubuntu, add installation of libbtrfs-dev
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * fix(deps): update golang.org/x/exp digest to 8a7402a
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
  * Use Epoch: 2 and respect the epoch in dependencies.
  * Bump to Buildah v1.38.0-dev
  * Buildah v1.37.0
  * Bump c/storage, c/image, c/common for v1.37.0
  * AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
  * Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
  * integration tests: teach starthttpd() about TLS and pid files
  * "build with basename resolving user arg" tests: correct ARG use
  * bud-multiple-platform-no-run test: correct ARG use
  * imagebuildah: always have default values for $TARGET... args ready
  * bump github.com/openshift/imagebuilder to v1.2.14
  * fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * CI: use local registry, part 2 of 2
  * CI: use local registry, part 1 of 2
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
  * Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
  * Replace libimage.LookupReferenceFunc with the manifests version
  * conformance tests: enable testing CompatVolumes
  * conformance tests: add a test that tries to chown a volume
  * imagebuildah: make traditional volume handling not the default
  * StageExecutor.prepare(): mark base image volumes for preservation
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * Vendor in latest containers/(common, storage, image)
  * fix(deps): update module golang.org/x/term to v0.22.0
  * fix(deps): update module golang.org/x/sys to v0.22.0
  * fix(deps): update golang.org/x/exp digest to 7f521ea
  * fix(deps): update github.com/containers/luksy digest to a8846e2
  * imagebuildah.StageExecutor.Copy(): reject new flags for now
  * bump github.com/openshift/imagebuilder to v1.2.11
  * Rework parsing of --pull flags
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * imagebuildah.StageExecutor.prepare(): log the --platform flag
  * CI VMs: bump
  * buildah copy: preserve owner info with --from= a container or image
  * conformance tests: enable testing CompatSetParent
  * containerImageRef.NewImageSource(): move the FROM comment to first
  * commit: set "parent" for docker format only when requested
  * Update godoc for Builder.EnsureContainerPathAs
  * fix(deps): update module github.com/spf13/cobra to v1.8.1
  * fix(deps): update module github.com/containernetworking/cni to v1.2.0
  * fix(deps): update module github.com/opencontainers/runc to v1.1.13
  * Change default for podman build to --pull missing
  * fix(deps): update module github.com/containers/common to v0.59.1
  * Clarify definition of --pull options
  * buildah: fix a nil pointer reference on FreeBSD
  * Use /var/tmp for $TMPDIR for vfs conformance jobs
  * Cirrus: run `df` during job setup
  * conformance: use quay.io/libpod/centos:7 instead of centos:8
  * Stop setting "parent" in docker format
  * conformance: check if workdir trims path separator suffixes
  * push integration test: pass password to docker login via stdin
  * Re-enable the "copy with chown" conformance test
  * healthcheck: Add support for `--start-interval`
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/containerd/containerd to v1.7.18
  * tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
  * Cross-build on Fedora
  * Drop copyStringSlice() and copyStringStringMap()
  * fix(deps): update module golang.org/x/crypto to v0.24.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * Provide an uptime_netbsd.go
  * Spell unix as "!windows"
  * Add netbsd to lists-of-OSes
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [skip-ci] Packit: enable c10s downstream sync
  * CI VMs: bump, to debian with cgroups v2
  * Document when BlobDirectory is overridden
  * fix secret mounts for env vars when using chroot isolation
  * Change to take a types.ImageReference arg
  * imagebuildah: Support custom image reference lookup for cache push/pull
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump to v1.37.0-dev
  * Bump to v1.36.0
  * build: be more selective about specifying the default OS
  * Bump to c/common v0.59.0
  * Fix buildah prune --help showing the same example twice
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * fix(deps): update module github.com/containers/image/v5 to v5.31.0
  * CI: Clarify Debian use for conformance tests
  * bud tests: fix breakage when vendoring into podman
  * Integration tests: fake up a replacement for nixery.dev/shell
  * copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
  * Don't expand RUN heredocs ourselves, let the shell do it
  * Don't leak temp files on failures
  * Add release note template to split dependency chores
  * fix CentOS/RHEL build - no BATS there
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
  * Address CVE-2024-3727
  * chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
  * Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
  * Setting --arch should set the TARGETARCH build arg
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * [CI:DOCS] Add link to Buildah image page to README.md
  * Don't set GOTOOLCHAIN=local
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Makefile: set GOTOOLCHAIN=local
  * Integration tests: switch some base images
  * containerImageRef.NewImageSource: merge the tar filters
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
  * Disable packit builds for centos-stream+epel-next-8
  * Makefile: add missing files to $(SOURCES)
  * CI VMs: bump to new versions with tmpfs /tmp
  * chore(deps): update module golang.org/x/net to v0.23.0 [security]
  * integration test: handle new labels in "bud and test --unsetlabel"
  * Switch packit configuration to use epel-9-$arch ...
  * Give unit tests a bit more time
  * Integration tests: remove a couple of duplicated tests
  * Integration tests: whitespace tweaks
  * Integration tests: don't remove images at start or end of test
  * Integration tests: use cached images more
  * Integration tests _prefetch: use registry configs
  * internal: use fileutils.(Le|E)xists
  * pkg/parse: use fileutils.(Le|E)xists
  * buildah: use fileutils.(Le|E)xists
  * chroot: use fileutils.(Le|E)xists
  * vendor: update containers/(common|storage)
  * Fix issue/pr lock workflow
  * [CI:DOCS] Add golang 1.21 update warning
  * heredoc: honor inline COPY irrespective of ignorefiles
  * Update install.md
  * source-push: add support for --digestfile
  * Fix caching when mounting a cached stage with COPY/ADD
  * fix(deps): update github.com/containers/luksy digest to 3d2cf0e
  * Makefile: softcode `strip`, use it from env var
  * Man page updates
  * Add support for passing CDI specs to --device
  * Update comments on some API objects
  * pkg/parse.DeviceFromPath(): dereference src symlinks
  * Makefile - instead of calling `as` directly, use it from env var
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * CI: bump VMs
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
  * Change RUN to comment in bud.bats
  * Stop rebasing renovate PRs automatically
  * Update renovate validation image
  * CVE-2024-1753 container escape fix
  * correctly configure /etc/hosts and resolv.conf when using network
  * buildah: refactor resolv/hosts setup.
  * rename the hostFile var to reflect the value better
  * vendor latest c/common
  * [skip-ci] rpm: use go-rpm-macros supported vendoring
  * Update docs/buildah-add.1.md
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
  * fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * Bump google.golang.org/protobuf to v1.33.0
  * fix links to containerignore doc
  * [skip-ci] Makefile: update rpm target
  * pr-should-include-tests: use GitHub label, not commit text
  * tests: enable pasta tests
  * [CI:DOCS] Migrate buildah container image
  * Update .gitignore
  * Bump to v1.36.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1766491200">- Add patch for CVE-2025-47914 (bsc#1254054), CVE-2025-47913 (bsc#1253598):
  * 0004-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Rebase patches:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
  * 0003-CVE-2025-52881-backport-subset-of-patch-from-runc.patch</changelog>
</package>
<package pkgid="ad7b673b8634d190e03789059061176b90a29266192e9ccd8680426eb72bd409753209f5687377c7f160bee84414edcef4719e1c37ba49aa0ea05bb36aa7935c" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.39.5" rel="160000.2.1"/>
  <changelog author="danish.prakash@suse.com" date="1729598400">- Add patch for CVE-2024-9676 (bsc#1231698):
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Rebase patches:
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1737979200">- Update to version 1.35.5 (fix for CVE-2024-11218; bsc#1236272):
  * Tag v1.35.5
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * Properly validate cache IDs and sources
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * Allow cache mounts to be stages or additional build contexts
  * Integration tests: switch some base images
  * Disable most packit copr targets
  * Cross-build on Fedora
- Rename patches:
  * 0002-conmon-pkg-subscriptions-use-securejoin-for-the-cont.patch =&gt;
    0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0004-Use-securejoin.SecureJoin-when-forming-userns-paths.patch =&gt;
    0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
- Removed patches(merged upstream):
  * 0001-CVE-2024-9407-validate-bind-propagation-flag-setting.patch
  * 0003-Properly-validate-cache-IDs-and-sources.patch</changelog>
  <changelog author="dcermak@suse.com" date="1739361600">- Add patch for CVE-2023-45288 (bsc#1236507)
  Rebase patches:
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
  Added patch:
  * 0004-http2-close-connections-when-receiving-too-many-head.patch
    (CVE-2023-45288 - bsc#1236531)</changelog>
  <changelog author="danish.prakash@suse.com" date="1741262400">- Add patch for CVE-2025-27144 (bsc#1237681):
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
- Removed patches(merged upstream):
  * 0001-pkg-subscriptions-use-securejoin-for-the-container-p.patch
  * 0002-Use-securejoin.SecureJoin-when-forming-userns-paths.patch
  * 0004-http2-close-connections-when-receiving-too-many-head.patch
- Update to version 1.37.6:
  * Tag v1.37.6
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * Allow cache mounts to be stages or additional build contexts
  * [release-1.37][CI:DOCS] Touch up changelogs
  * [release-1.37][CI:DOCS] touchup changelog
  * Update CHANGELOG.md
  * [release-1.37] Bump Buildah to v1.37.5
  * Bump the containers/storage library to v1.55.1
  * Properly validate cache IDs and sources
  * Packit: constrain koji job to fedora package to avoid dupes
  * Tag v1.37.4
  * vendor: update c/common to v0.60.4
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * [release-1.37] Bump to Buildah v1.37.3
  * Do not error on trying to write IMA xattr as rootless
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * Use Epoch: 2 and respect the epoch in dependencies.
  * [release-1.37] Bump Buildah to v1.37.2
  * [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
  * [release-1.37] Bump to Buildah v1.37.1
  * [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
  * Buildah v1.37.0
  * Bump c/storage, c/image, c/common for v1.37.0
  * "build with basename resolving user arg" tests: correct ARG use
  * bud-multiple-platform-no-run test: correct ARG use
  * imagebuildah: always have default values for $TARGET... args ready
  * bump github.com/openshift/imagebuilder to v1.2.14
  * fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * CI: use local registry, part 2 of 2
  * CI: use local registry, part 1 of 2
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
  * Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
  * Replace libimage.LookupReferenceFunc with the manifests version
  * conformance tests: enable testing CompatVolumes
  * conformance tests: add a test that tries to chown a volume
  * imagebuildah: make traditional volume handling not the default
  * StageExecutor.prepare(): mark base image volumes for preservation
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * Vendor in latest containers/(common, storage, image)
  * fix(deps): update module golang.org/x/term to v0.22.0
  * fix(deps): update module golang.org/x/sys to v0.22.0
  * fix(deps): update golang.org/x/exp digest to 7f521ea
  * fix(deps): update github.com/containers/luksy digest to a8846e2
  * imagebuildah.StageExecutor.Copy(): reject new flags for now
  * bump github.com/openshift/imagebuilder to v1.2.11
  * Rework parsing of --pull flags
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * imagebuildah.StageExecutor.prepare(): log the --platform flag
  * CI VMs: bump
  * buildah copy: preserve owner info with --from= a container or image
  * conformance tests: enable testing CompatSetParent
  * containerImageRef.NewImageSource(): move the FROM comment to first
  * commit: set "parent" for docker format only when requested
  * Update godoc for Builder.EnsureContainerPathAs
  * fix(deps): update module github.com/spf13/cobra to v1.8.1
  * fix(deps): update module github.com/containernetworking/cni to v1.2.0
  * fix(deps): update module github.com/opencontainers/runc to v1.1.13
  * Change default for podman build to --pull missing
  * fix(deps): update module github.com/containers/common to v0.59.1
  * Clarify definition of --pull options
  * buildah: fix a nil pointer reference on FreeBSD
  * Use /var/tmp for $TMPDIR for vfs conformance jobs
  * Cirrus: run `df` during job setup
  * conformance: use quay.io/libpod/centos:7 instead of centos:8
  * Stop setting "parent" in docker format
  * conformance: check if workdir trims path separator suffixes
  * push integration test: pass password to docker login via stdin
  * Re-enable the "copy with chown" conformance test
  * healthcheck: Add support for `--start-interval`
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/containerd/containerd to v1.7.18
  * tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
  * Cross-build on Fedora
  * Drop copyStringSlice() and copyStringStringMap()
  * fix(deps): update module golang.org/x/crypto to v0.24.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * Provide an uptime_netbsd.go
  * Spell unix as "!windows"
  * Add netbsd to lists-of-OSes
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [skip-ci] Packit: enable c10s downstream sync
  * CI VMs: bump, to debian with cgroups v2
  * Document when BlobDirectory is overridden
  * fix secret mounts for env vars when using chroot isolation
  * Change to take a types.ImageReference arg
  * imagebuildah: Support custom image reference lookup for cache push/pull
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump to v1.37.0-dev
  * Bump to v1.36.0
  * build: be more selective about specifying the default OS
  * Bump to c/common v0.59.0
  * Fix buildah prune --help showing the same example twice
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * fix(deps): update module github.com/containers/image/v5 to v5.31.0
  * CI: Clarify Debian use for conformance tests
  * bud tests: fix breakage when vendoring into podman
  * Integration tests: fake up a replacement for nixery.dev/shell
  * copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
  * Don't expand RUN heredocs ourselves, let the shell do it
  * Don't leak temp files on failures
  * Add release note template to split dependency chores
  * fix CentOS/RHEL build - no BATS there
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
  * Address CVE-2024-3727
  * chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
  * Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
  * Setting --arch should set the TARGETARCH build arg
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * [CI:DOCS] Add link to Buildah image page to README.md
  * Don't set GOTOOLCHAIN=local
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Makefile: set GOTOOLCHAIN=local
  * Integration tests: switch some base images
  * containerImageRef.NewImageSource: merge the tar filters
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
  * Disable packit builds for centos-stream+epel-next-8
  * Makefile: add missing files to $(SOURCES)
  * CI VMs: bump to new versions with tmpfs /tmp
  * chore(deps): update module golang.org/x/net to v0.23.0 [security]
  * integration test: handle new labels in "bud and test --unsetlabel"
  * Switch packit configuration to use epel-9-$arch ...
  * Give unit tests a bit more time
  * Integration tests: remove a couple of duplicated tests
  * Integration tests: whitespace tweaks
  * Integration tests: don't remove images at start or end of test
  * Integration tests: use cached images more
  * Integration tests _prefetch: use registry configs
  * internal: use fileutils.(Le|E)xists
  * pkg/parse: use fileutils.(Le|E)xists
  * buildah: use fileutils.(Le|E)xists
  * chroot: use fileutils.(Le|E)xists
  * vendor: update containers/(common|storage)
  * Fix issue/pr lock workflow
  * [CI:DOCS] Add golang 1.21 update warning
  * heredoc: honor inline COPY irrespective of ignorefiles
  * Update install.md
  * source-push: add support for --digestfile
  * Fix caching when mounting a cached stage with COPY/ADD
  * fix(deps): update github.com/containers/luksy digest to 3d2cf0e
  * Makefile: softcode `strip`, use it from env var
  * Man page updates
  * Add support for passing CDI specs to --device
  * Update comments on some API objects
  * pkg/parse.DeviceFromPath(): dereference src symlinks
  * Makefile - instead of calling `as` directly, use it from env var
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * CI: bump VMs
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
  * Change RUN to comment in bud.bats
  * Stop rebasing renovate PRs automatically
  * Update renovate validation image
  * CVE-2024-1753 container escape fix
  * correctly configure /etc/hosts and resolv.conf when using network
  * buildah: refactor resolv/hosts setup.
  * rename the hostFile var to reflect the value better
  * vendor latest c/common
  * [skip-ci] rpm: use go-rpm-macros supported vendoring
  * Update docs/buildah-add.1.md
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
  * fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * Bump google.golang.org/protobuf to v1.33.0
  * fix links to containerignore doc
  * [skip-ci] Makefile: update rpm target
  * pr-should-include-tests: use GitHub label, not commit text
  * tests: enable pasta tests
  * [CI:DOCS] Migrate buildah container image
  * Update .gitignore
  * Bump to v1.36.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1742817600">- Add patch for CVE-2025-22869 - bsc#1239339
  Add patch:
  * 0002-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
    (CVE-2025-22869 - bsc#1239339)
  Rebase patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1747224000">- Rebase patch:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Removed patch:
  * 0001-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch
  * 0002-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Update to version 1.39.4:
  * [release-1.39] Bump to Buildah v1.39.4
  * [release-1.39] Bump c/image to v5.34.3, c/common v0.62.3
  * createPlatformContainer: drop MS_REMOUNT|MS_BIND
  * [release-1.39] Bump to Buildah v1.39.3
  * [release-1.39] Bump c/storage to v1.57.2, c/image v5.34.2,...
  * [release-1.39] Bump to Buildah v1.39.2
  * [release-1.39] tests/conformance/testdata/Dockerfile.add:...
  * [release-1.39] Bump c/image to v5.34.1, c/common v0.62.1
  * Tag v1.39.1
  * CI config: post-branch update
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * chroot createPlatformContainer: use MS_REMOUNT
  * Bump to Buildah v1.39.0
  * Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
  * Update module github.com/containers/storage to v1.57.0
  * CI, .cirrus: parallelize containerized integration
  * ed's comment: cleanup
  * use seperate blobinfocache for flaky test
  * bump CI VMs to 4 CPUs (was: 2) for integration tests
  * cleanup, debug, and disable parallel in blobcache tests
  * bats tests - parallelize
  * pkg/overlay: cleanups
  * RPM: include check section to silence rpmlint
  * RPM: use default gobuild macro on RHEL
  * tests: remove masked /sys/dev/block check
  * vendor to latest c/{common,image,storage}
  * build, run: record hash or digest in image history
  * Accept image names as sources for cache mounts
  * Run(): always clean up options.ExternalImageMounts
  * refactor: replace golang.org/x/exp with stdlib
  * Update to c/image @main
  * fix broken doc link
  * run_freebsd.go: only import runtime-spec once
  * fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
  * bump github.com/vbatts/tar-split
  * Add more checks to the --mount flag parsing logic
  * chroot mount flags integration test: copy binaries
  * fix(deps): update module github.com/moby/buildkit to v0.19.0
  * relabel(): correct a misleading parameter name
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * fix(deps): update module github.com/containers/common to v0.61.1
  * fix(deps): update module github.com/containers/image/v5 to v5.33.1
  * [CI:DOCS] Touch up changelogs
  * fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
  * copy-preserving-extended-attributes: use a different base image
  * fix(deps): update github.com/containers/luksy digest to a3a812d
  * chore(deps): update module golang.org/x/net to v0.33.0 [security]
  * fix(deps): update module golang.org/x/crypto to v0.32.0
  * New VM Images
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.1
  * Add support for --security-opt mask and unmask
  * Allow cache mounts to be stages or additional build contexts
  * [skip-ci] RPM: cleanup changelog conditionals
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
  * fix(deps): update module github.com/moby/buildkit to v0.18.2
  * Fix an error message in the chroot unit test
  * copier: use .PAXRecords instead of .Xattrs
  * chroot: on Linux, try to pivot_root before falling back to chroot
  * manifest add: add --artifact-annotation
  * Add context to an error message
  * Update module golang.org/x/crypto to v0.31.0
  * Update module github.com/opencontainers/runc to v1.2.3
  * Update module github.com/docker/docker to v27.4.0+incompatible
  * Update module github.com/cyphar/filepath-securejoin to v0.3.5
  * CI: don't build a binary in the unit tests task
  * CI: use /tmp for $GOCACHE
  * CI: remove dependencies on the cross-build task
  * CI: run cross-compile task with make -j
  * Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
  * Update module github.com/moby/buildkit to v0.18.1
  * Update module golang.org/x/crypto to v0.30.0
  * Update golang.org/x/exp digest to 2d47ceb
  * Update github.com/opencontainers/runtime-tools digest to f7e3563
  * [skip-ci] Packit: remove rhel copr build jobs
  * [skip-ci] Packit: switch to fedora-all for copr
  * Update module github.com/stretchr/testify to v1.10.0
  * Update module github.com/moby/buildkit to v0.17.2
  * Makefile: use `find` to detect source files
  * Tests: make _prefetch() parallel-safe
  * Update module github.com/opencontainers/runc to v1.2.2
  * executor: allow to specify --no-pivot-root
  * Update module github.com/moby/sys/capability to v0.4.0
  * Makefile: mv codespell config to .codespellrc
  * Fix some codespell errors
  * Makefile,install.md: rm gopath stuff
  * Makefile: rm targets working on ..
  * build: rm exclude_graphdriver_devicemapper tag
  * Makefile: rm unused var
  * Finish updating to go 1.22
  * CI VMs: bump again
  * Bump to Buidah v1.39.0-dev
  * Bump to Buildah v1.38.0
  * Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.1
  * fix(deps): update module github.com/containers/storage to v1.56.0
  * tests: skip two ulimit tests
  * CI VMs: bump f40 -&gt; f41
  * tests/tools: rebuild tools when we change versions
  * tests/tools: update golangci-lint to v1.61.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.0
  * Handle RUN --mount with relative targets and no configured workdir
  * tests: bud: make parallel-safe
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * tests: blobcache: use unique image name
  * tests: sbom: never write to cwd
  * tests: mkcw: bug fixes, refactor
  * deps: bump runc to v1.2.0
  * deps: switch to moby/sys/userns
  * tests/test_runner.sh: remove some redundancies
  * Integration tests: run git daemon on a random-but-bind()able port
  * fix(deps): update module github.com/opencontainers/selinux to v1.11.1
  * go.mod: remove unnecessary replace
  * Document more buildah build --secret options
  * Add support for COPY --exclude and ADD --exclude options
  * fix(deps): update github.com/containers/luksy digest to e2530d6
  * chore(deps): update dependency containers/automation_images to v20241010
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * Properly validate cache IDs and sources
  * [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
  * Audit and tidy OWNERS
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * tests: add quotes to names
  * vendor: update c/common to latest
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * vendor: switch to moby/sys/capability
  * Don't set ambient capabilities
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * buildah-manifest-create.1: Fix manpage section
  * chore(deps): update dependency ubuntu to v24
  * Make `buildah manifest push --all` true by default
  * chroot: add newlines at the end of printed error messages
  * Do not error on trying to write IMA xattr as rootless
  * fix: remove duplicate conditions
  * fix(deps): update module github.com/moby/buildkit to v0.16.0
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Document how entrypoint is configured in buildah config
  * In a container, try to register binfmt_misc
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * build: fall back to parsing a TARGETPLATFORM build-arg
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * tests/bud.bats: add git source
  * add: add support for git source
  * Add support for the new c/common pasta options
  * vendor latest c/common
  * fix(deps): update module golang.org/x/term to v0.24.0
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
  * packit: update fedora and epel targets
  * cirrus: disable f39 testing
  * cirrus: fix fedora names
  * update to go 1.22
  * Vendor c/common:9d025e4cb348
  * copier: handle globbing with "**" path components
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * fix(deps): update github.com/containers/luksy digest to 2e7307c
  * imagebuildah: make scratch config handling toggleable
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Add a validation script for Makefile $(SOURCES)
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
  * New VMs
  * Update some godocs, use 0o to prefix an octal in a comment
  * buildah-build.1.md: expand the --layer-label description
  * fix(deps): update module github.com/containers/common to v0.60.2
  * stage_executor: set avoidLookingCache only if mounting stage
  * imagebuildah: additionalContext is not a local built stage
  * run: fix a nil pointer dereference on FreeBSD
  * CI: enable the whitespace linter
  * Fix some govet linter warnings
  * Commit(): retry committing to local storage on storage.LayerUnknown
  * CI: enable the gofumpt linter
  * conformance: move weirdly-named files out of the repository
  * fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
  * fix(deps): update module github.com/containers/common to v0.60.1
  * *: use gofmt -s, add gofmt linter
  * *: fix build tags
  * fix(deps): update module github.com/containers/image/v5 to v5.32.1
  * Add(): re-escape any globbed items that included escapes
  * conformance tests: use mirror.gcr.io for most images
  * unit tests: use test-specific policy.json and registries.conf
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Update to spun-out "github.com/containerd/platforms"
  * Bump github.com/containerd/containerd
  * test/tools/Makefile: duplicate the vendor-in-container target
  * linters: unchecked error
  * linters: don't end loop iterations with "else" when "then" would
  * linters: unused arguments shouldn't have names
  * linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
  * linters: don't name variables "cap"
  * `make lint`: use --timeout instead of --deadline
  * Drop the e2e test suite
  * fix(deps): update module golang.org/x/crypto to v0.26.0
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * `make vendor-in-container`: use the caller's Go cache if it exists
  * fix(deps): fix test/tools ginkgo typo
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Update to keep up with API changes in storage
  * fix(deps): update github.com/containers/luksy digest to 1f482a9
  * install: On Debian/Ubuntu, add installation of libbtrfs-dev
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * fix(deps): update golang.org/x/exp digest to 8a7402a
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
  * Use Epoch: 2 and respect the epoch in dependencies.
  * Bump to Buildah v1.38.0-dev
  * AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
  * Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
  * integration tests: teach starthttpd() about TLS and pid files</changelog>
  <changelog author="danish.prakash@suse.com" date="1749729600">- Add patch to fix bsc#1242445 (https://github.com/containers/buildah/issues/6071)
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
- Rebase patch:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1762430400">- Add patch for CVE-2025-52881 (bsc#1253096):
  * 0003-CVE-2025-52881-backport-subset-of-patch-from-runc.patch
- Rebase patches:
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Update to version 1.39.5:
  * [release-1.39] Bump to Buildah v1.39.5
  * [release-1.39] Bump x/tools to v0.26.0
  * [release-1.39] replace deprecated selinux/label calls
  * [release-1.39] Bump runc to v1.2.8 - CVE-2025-52881
  * Builder.sbomScan(): don't break non-root scanners
  * [release-1.39] Bump to Buildah v1.39.4
  * [release-1.39] Bump c/image to v5.34.3, c/common v0.62.3
  * createPlatformContainer: drop MS_REMOUNT|MS_BIND
  * [release-1.39] Bump to Buildah v1.39.3
  * [release-1.39] Bump c/storage to v1.57.2, c/image v5.34.2,...
  * [release-1.39] Bump to Buildah v1.39.2
  * [release-1.39] tests/conformance/testdata/Dockerfile.add:...
  * [release-1.39] Bump c/image to v5.34.1, c/common v0.62.1
  * Tag v1.39.1
  * CI config: post-branch update
  * chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
  * chroot createPlatformContainer: use MS_REMOUNT
  * Bump to Buildah v1.39.0
  * Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
  * Update module github.com/containers/storage to v1.57.0
  * CI, .cirrus: parallelize containerized integration
  * ed's comment: cleanup
  * use seperate blobinfocache for flaky test
  * bump CI VMs to 4 CPUs (was: 2) for integration tests
  * cleanup, debug, and disable parallel in blobcache tests
  * bats tests - parallelize
  * pkg/overlay: cleanups
  * RPM: include check section to silence rpmlint
  * RPM: use default gobuild macro on RHEL
  * tests: remove masked /sys/dev/block check
  * vendor to latest c/{common,image,storage}
  * build, run: record hash or digest in image history
  * Accept image names as sources for cache mounts
  * Run(): always clean up options.ExternalImageMounts
  * refactor: replace golang.org/x/exp with stdlib
  * Update to c/image @main
  * fix broken doc link
  * run_freebsd.go: only import runtime-spec once
  * fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
  * bump github.com/vbatts/tar-split
  * Add more checks to the --mount flag parsing logic
  * chroot mount flags integration test: copy binaries
  * fix(deps): update module github.com/moby/buildkit to v0.19.0
  * relabel(): correct a misleading parameter name
  * Fix TOCTOU error when bind and cache mounts use "src" values
  * define.TempDirForURL(): always use an intermediate subdirectory
  * internal/volume.GetBindMount(): discard writes in bind mounts
  * pkg/overlay: add a MountLabel flag to Options
  * pkg/overlay: add a ForceMount flag to Options
  * Add internal/volumes.bindFromChroot()
  * Add an internal/open package
  * fix(deps): update module github.com/containers/common to v0.61.1
  * fix(deps): update module github.com/containers/image/v5 to v5.33.1
  * [CI:DOCS] Touch up changelogs
  * fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
  * copy-preserving-extended-attributes: use a different base image
  * fix(deps): update github.com/containers/luksy digest to a3a812d
  * chore(deps): update module golang.org/x/net to v0.33.0 [security]
  * fix(deps): update module golang.org/x/crypto to v0.32.0
  * New VM Images
  * fix(deps): update module github.com/opencontainers/runc to v1.2.4
  * fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.2.1
  * Add support for --security-opt mask and unmask
  * Allow cache mounts to be stages or additional build contexts
  * [skip-ci] RPM: cleanup changelog conditionals
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
  * fix(deps): update module github.com/moby/buildkit to v0.18.2
  * Fix an error message in the chroot unit test
  * copier: use .PAXRecords instead of .Xattrs
  * chroot: on Linux, try to pivot_root before falling back to chroot
  * manifest add: add --artifact-annotation
  * Add context to an error message
  * Update module golang.org/x/crypto to v0.31.0
  * Update module github.com/opencontainers/runc to v1.2.3
  * Update module github.com/docker/docker to v27.4.0+incompatible
  * Update module github.com/cyphar/filepath-securejoin to v0.3.5
  * CI: don't build a binary in the unit tests task
  * CI: use /tmp for $GOCACHE
  * CI: remove dependencies on the cross-build task
  * CI: run cross-compile task with make -j
  * Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
  * Update module github.com/moby/buildkit to v0.18.1
  * Update module golang.org/x/crypto to v0.30.0
  * Update golang.org/x/exp digest to 2d47ceb
  * Update github.com/opencontainers/runtime-tools digest to f7e3563
  * [skip-ci] Packit: remove rhel copr build jobs
  * [skip-ci] Packit: switch to fedora-all for copr
  * Update module github.com/stretchr/testify to v1.10.0
  * Update module github.com/moby/buildkit to v0.17.2
  * Makefile: use `find` to detect source files
  * Tests: make _prefetch() parallel-safe
  * Update module github.com/opencontainers/runc to v1.2.2
  * executor: allow to specify --no-pivot-root
  * Update module github.com/moby/sys/capability to v0.4.0
  * Makefile: mv codespell config to .codespellrc
  * Fix some codespell errors
  * Makefile,install.md: rm gopath stuff
  * Makefile: rm targets working on ..
  * build: rm exclude_graphdriver_devicemapper tag
  * Makefile: rm unused var
  * Finish updating to go 1.22
  * CI VMs: bump again
  * Bump to Buidah v1.39.0-dev
  * Bump to Buildah v1.38.0
  * Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
  * fix(deps): update module golang.org/x/crypto to v0.29.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.1
  * fix(deps): update module github.com/containers/storage to v1.56.0
  * tests: skip two ulimit tests
  * CI VMs: bump f40 -&gt; f41
  * tests/tools: rebuild tools when we change versions
  * tests/tools: update golangci-lint to v1.61.0
  * fix(deps): update module github.com/moby/buildkit to v0.17.0
  * Handle RUN --mount with relative targets and no configured workdir
  * tests: bud: make parallel-safe
  * fix(deps): update module github.com/opencontainers/runc to v1.2.1
  * fix(deps): update golang.org/x/exp digest to f66d83c
  * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
  * tests: blobcache: use unique image name
  * tests: sbom: never write to cwd
  * tests: mkcw: bug fixes, refactor
  * deps: bump runc to v1.2.0
  * deps: switch to moby/sys/userns
  * tests/test_runner.sh: remove some redundancies
  * Integration tests: run git daemon on a random-but-bind()able port
  * fix(deps): update module github.com/opencontainers/selinux to v1.11.1
  * go.mod: remove unnecessary replace
  * Document more buildah build --secret options
  * Add support for COPY --exclude and ADD --exclude options
  * fix(deps): update github.com/containers/luksy digest to e2530d6
  * chore(deps): update dependency containers/automation_images to v20241010
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
  * Properly validate cache IDs and sources
  * [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
  * Audit and tidy OWNERS
  * fix(deps): update module golang.org/x/crypto to v0.28.0
  * tests: add quotes to names
  * vendor: update c/common to latest
  * CVE-2024-9407: validate "bind-propagation" flag settings
  * vendor: switch to moby/sys/capability
  * Don't set ambient capabilities
  * Document that zstd:chunked is downgraded to zstd when encrypting
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
  * buildah-manifest-create.1: Fix manpage section
  * chore(deps): update dependency ubuntu to v24
  * Make `buildah manifest push --all` true by default
  * chroot: add newlines at the end of printed error messages
  * Do not error on trying to write IMA xattr as rootless
  * fix: remove duplicate conditions
  * fix(deps): update module github.com/moby/buildkit to v0.16.0
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
  * Document how entrypoint is configured in buildah config
  * In a container, try to register binfmt_misc
  * imagebuildah.StageExecutor: clean up volumes/volumeCache
  * build: fall back to parsing a TARGETPLATFORM build-arg
  * `manifest add --artifact`: handle multiple values
  * Packit: split out ELN jobs and reuse fedora downstream targets
  * Packit: Enable sidetags for bodhi updates
  * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
  * tests/bud.bats: add git source
  * add: add support for git source
  * Add support for the new c/common pasta options
  * vendor latest c/common
  * fix(deps): update module golang.org/x/term to v0.24.0
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
  * packit: update fedora and epel targets
  * cirrus: disable f39 testing
  * cirrus: fix fedora names
  * update to go 1.22
  * Vendor c/common:9d025e4cb348
  * copier: handle globbing with "**" path components
  * fix(deps): update golang.org/x/exp digest to 9b4947d
  * fix(deps): update github.com/containers/luksy digest to 2e7307c
  * imagebuildah: make scratch config handling toggleable
  * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
  * Add a validation script for Makefile $(SOURCES)
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
  * New VMs
  * Update some godocs, use 0o to prefix an octal in a comment
  * buildah-build.1.md: expand the --layer-label description
  * fix(deps): update module github.com/containers/common to v0.60.2
  * stage_executor: set avoidLookingCache only if mounting stage
  * imagebuildah: additionalContext is not a local built stage
  * run: fix a nil pointer dereference on FreeBSD
  * CI: enable the whitespace linter
  * Fix some govet linter warnings
  * Commit(): retry committing to local storage on storage.LayerUnknown
  * CI: enable the gofumpt linter
  * conformance: move weirdly-named files out of the repository
  * fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
  * fix(deps): update module github.com/containers/common to v0.60.1
  * *: use gofmt -s, add gofmt linter
  * *: fix build tags
  * fix(deps): update module github.com/containers/image/v5 to v5.32.1
  * Add(): re-escape any globbed items that included escapes
  * conformance tests: use mirror.gcr.io for most images
  * unit tests: use test-specific policy.json and registries.conf
  * fix(deps): update module golang.org/x/sys to v0.24.0
  * Update to spun-out "github.com/containerd/platforms"
  * Bump github.com/containerd/containerd
  * test/tools/Makefile: duplicate the vendor-in-container target
  * linters: unchecked error
  * linters: don't end loop iterations with "else" when "then" would
  * linters: unused arguments shouldn't have names
  * linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
  * linters: don't name variables "cap"
  * `make lint`: use --timeout instead of --deadline
  * Drop the e2e test suite
  * fix(deps): update module golang.org/x/crypto to v0.26.0
  * fix(deps): update module github.com/onsi/gomega to v1.34.1
  * `make vendor-in-container`: use the caller's Go cache if it exists
  * fix(deps): fix test/tools ginkgo typo
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
  * Update to keep up with API changes in storage
  * fix(deps): update github.com/containers/luksy digest to 1f482a9
  * install: On Debian/Ubuntu, add installation of libbtrfs-dev
  * fix(deps): update module golang.org/x/sys to v0.23.0
  * fix(deps): update golang.org/x/exp digest to 8a7402a
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
  * Use Epoch: 2 and respect the epoch in dependencies.
  * Bump to Buildah v1.38.0-dev
  * Buildah v1.37.0
  * Bump c/storage, c/image, c/common for v1.37.0
  * AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
  * Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
  * integration tests: teach starthttpd() about TLS and pid files
  * "build with basename resolving user arg" tests: correct ARG use
  * bud-multiple-platform-no-run test: correct ARG use
  * imagebuildah: always have default values for $TARGET... args ready
  * bump github.com/openshift/imagebuilder to v1.2.14
  * fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
  * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
  * CI: use local registry, part 2 of 2
  * CI: use local registry, part 1 of 2
  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
  * Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
  * Replace libimage.LookupReferenceFunc with the manifests version
  * conformance tests: enable testing CompatVolumes
  * conformance tests: add a test that tries to chown a volume
  * imagebuildah: make traditional volume handling not the default
  * StageExecutor.prepare(): mark base image volumes for preservation
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * Vendor in latest containers/(common, storage, image)
  * fix(deps): update module golang.org/x/term to v0.22.0
  * fix(deps): update module golang.org/x/sys to v0.22.0
  * fix(deps): update golang.org/x/exp digest to 7f521ea
  * fix(deps): update github.com/containers/luksy digest to a8846e2
  * imagebuildah.StageExecutor.Copy(): reject new flags for now
  * bump github.com/openshift/imagebuilder to v1.2.11
  * Rework parsing of --pull flags
  * fix(deps): update module github.com/containers/image/v5 to v5.31.1
  * imagebuildah.StageExecutor.prepare(): log the --platform flag
  * CI VMs: bump
  * buildah copy: preserve owner info with --from= a container or image
  * conformance tests: enable testing CompatSetParent
  * containerImageRef.NewImageSource(): move the FROM comment to first
  * commit: set "parent" for docker format only when requested
  * Update godoc for Builder.EnsureContainerPathAs
  * fix(deps): update module github.com/spf13/cobra to v1.8.1
  * fix(deps): update module github.com/containernetworking/cni to v1.2.0
  * fix(deps): update module github.com/opencontainers/runc to v1.1.13
  * Change default for podman build to --pull missing
  * fix(deps): update module github.com/containers/common to v0.59.1
  * Clarify definition of --pull options
  * buildah: fix a nil pointer reference on FreeBSD
  * Use /var/tmp for $TMPDIR for vfs conformance jobs
  * Cirrus: run `df` during job setup
  * conformance: use quay.io/libpod/centos:7 instead of centos:8
  * Stop setting "parent" in docker format
  * conformance: check if workdir trims path separator suffixes
  * push integration test: pass password to docker login via stdin
  * Re-enable the "copy with chown" conformance test
  * healthcheck: Add support for `--start-interval`
  * fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
  * fix(deps): update module github.com/containerd/containerd to v1.7.18
  * tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
  * Cross-build on Fedora
  * Drop copyStringSlice() and copyStringStringMap()
  * fix(deps): update module golang.org/x/crypto to v0.24.0
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
  * Provide an uptime_netbsd.go
  * Spell unix as "!windows"
  * Add netbsd to lists-of-OSes
  * fix(deps): update golang.org/x/exp digest to fd00a4e
  * [skip-ci] Packit: enable c10s downstream sync
  * CI VMs: bump, to debian with cgroups v2
  * Document when BlobDirectory is overridden
  * fix secret mounts for env vars when using chroot isolation
  * Change to take a types.ImageReference arg
  * imagebuildah: Support custom image reference lookup for cache push/pull
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
  * Bump to v1.37.0-dev
  * Bump to v1.36.0
  * build: be more selective about specifying the default OS
  * Bump to c/common v0.59.0
  * Fix buildah prune --help showing the same example twice
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
  * fix(deps): update module github.com/containers/image/v5 to v5.31.0
  * CI: Clarify Debian use for conformance tests
  * bud tests: fix breakage when vendoring into podman
  * Integration tests: fake up a replacement for nixery.dev/shell
  * copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
  * Don't expand RUN heredocs ourselves, let the shell do it
  * Don't leak temp files on failures
  * Add release note template to split dependency chores
  * fix CentOS/RHEL build - no BATS there
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
  * Address CVE-2024-3727
  * chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
  * Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
  * Setting --arch should set the TARGETARCH build arg
  * fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
  * [CI:DOCS] Add link to Buildah image page to README.md
  * Don't set GOTOOLCHAIN=local
  * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
  * Makefile: set GOTOOLCHAIN=local
  * Integration tests: switch some base images
  * containerImageRef.NewImageSource: merge the tar filters
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
  * fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
  * Disable packit builds for centos-stream+epel-next-8
  * Makefile: add missing files to $(SOURCES)
  * CI VMs: bump to new versions with tmpfs /tmp
  * chore(deps): update module golang.org/x/net to v0.23.0 [security]
  * integration test: handle new labels in "bud and test --unsetlabel"
  * Switch packit configuration to use epel-9-$arch ...
  * Give unit tests a bit more time
  * Integration tests: remove a couple of duplicated tests
  * Integration tests: whitespace tweaks
  * Integration tests: don't remove images at start or end of test
  * Integration tests: use cached images more
  * Integration tests _prefetch: use registry configs
  * internal: use fileutils.(Le|E)xists
  * pkg/parse: use fileutils.(Le|E)xists
  * buildah: use fileutils.(Le|E)xists
  * chroot: use fileutils.(Le|E)xists
  * vendor: update containers/(common|storage)
  * Fix issue/pr lock workflow
  * [CI:DOCS] Add golang 1.21 update warning
  * heredoc: honor inline COPY irrespective of ignorefiles
  * Update install.md
  * source-push: add support for --digestfile
  * Fix caching when mounting a cached stage with COPY/ADD
  * fix(deps): update github.com/containers/luksy digest to 3d2cf0e
  * Makefile: softcode `strip`, use it from env var
  * Man page updates
  * Add support for passing CDI specs to --device
  * Update comments on some API objects
  * pkg/parse.DeviceFromPath(): dereference src symlinks
  * Makefile - instead of calling `as` directly, use it from env var
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
  * CI: bump VMs
  * fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
  * Change RUN to comment in bud.bats
  * Stop rebasing renovate PRs automatically
  * Update renovate validation image
  * CVE-2024-1753 container escape fix
  * correctly configure /etc/hosts and resolv.conf when using network
  * buildah: refactor resolv/hosts setup.
  * rename the hostFile var to reflect the value better
  * vendor latest c/common
  * [skip-ci] rpm: use go-rpm-macros supported vendoring
  * Update docs/buildah-add.1.md
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
  * fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
  * fix(deps): update module github.com/containers/ocicrypt to v1.1.10
  * chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
  * chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
  * Bump google.golang.org/protobuf to v1.33.0
  * fix links to containerignore doc
  * [skip-ci] Makefile: update rpm target
  * pr-should-include-tests: use GitHub label, not commit text
  * tests: enable pasta tests
  * [CI:DOCS] Migrate buildah container image
  * Update .gitignore
  * Bump to v1.36.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1766491200">- Add patch for CVE-2025-47914 (bsc#1254054), CVE-2025-47913 (bsc#1253598):
  * 0004-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Rebase patches:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
  * 0003-CVE-2025-52881-backport-subset-of-patch-from-runc.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1782907200">- Add patch for CVE-2026-39829, CVE-2026-39830, CVE-2026-46598 (bsc#1266191)
  * 0005-CVE-2026-39829-CVE-2026-39830-CVE-2026-46598-golang..patch
- Add patch for CVE-2026-39821 (bsc#1266648)
  * 0006-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- Rebase patches:
  * 0001-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0002-run-handle-relabeling-bind-mounts-ourselves.patch
  * 0003-CVE-2025-52881-backport-subset-of-patch-from-runc.patch
  * 0004-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch</changelog>
</package>
<package pkgid="0d8382243e69384d890b4588d7a77ca85e80a9c14a6ee082d4b8b625cf60f33f84cfb5d235a0983af4c00318a050375d33bfd13a3c4a7ce37205c802182bbc0b" name="buildkit" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="160000.2.2"/>
  <changelog author="rbrown@suse.com" date="1637755200">- Initial Packaging</changelog>
  <changelog author="dmueller@suse.com" date="1675166400">- update to 0.11.2:
  * Update containerd patches to fix regression in handling push errors
  * Multiple fixes for History API #3530
  * Fix issue with parallel build requests using local cache imports #3493
  * Builtin Dockerfile frontend has been updated to 1.5.1, fixing possible
    panic in certain warning condition #3505
  * Fix possible hang when closing down the SSH forwarding socket in v0.11.0
  * Fix typo in an environment variable used to configure OpenTelemetry
    endpoints #3508
  * Builtin Dockerfile frontend has been updated to v1.5.0
    https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.5.0
  * BuildKit and compatible frontends can now produce SBOM (Software Bill of
    Materials) attestations for the build results to show the dependencies
    of the build. These attestations can be added to images and locally
    exported files. Using Dockerfiles, SBOM information can be configured to
    be produced also based on files in intermediate build stages or build
    context, or run processes that manually define the SBOM dependencies.
    When exporting an image, layer mapping is also produced that allows
    tracing a SBOM package to a specific build step. #3258 #3290 #3249 #2983
    [#3358] #3312 #3407 #3408 #3410 #3414 #3422
  * BuildKit can now produce a Provenance attestation for the build result
    in SLSA format. Provenance attestations describe how a build was
    produced, and what sources/parameters were used. In addition to fields
    part of the SLSA specification, Buildkit's provenance also exports
    BuildKit-specific metadata like LLB steps with their source- and layer
    mapping. Provenance attestation will capture all the build sources
    visible to BuildKit, for example, not only the Git repository where the
    project's source is coming from but also the digests of all the
    container images used during the build. #3240 #3428 #3428 #3462
  * BuildKit now supports reproducible builds by setting `SOURCE_DATE_EPOCH`
    build argument or `source-date-epoch` exporter attribute. This
    deterministic date will be used in image metadata instead of the current
    time. #2918 #3262 #3152 Read documentation
  * OCI annotations can now be set to build results exported as images or
    OCI layouts. Annotations can be set on both image manifests and indexes,
    as well as descriptors to them. #3283 #3061 #2975 #2879 Read
    documentation
  * New Build History API allows listening to events about builds starting
    and completing, and streaming progress of active builds. New commands
    `buildctl debug monitor`, `buildctl debug logs` and `buildctl debug get`
    have been added to use this API. Build records also keep OpenTelemetry
    traces, provenance attestations, and image manifests if they were
    created by the build. #3294 #3339 #3440
  * Build results exported with image, local or tar exporters now support
    attestations. In addition to builtin SBOM and Provenance attestations,
    frontends can produce custom attestations in in-toto format #3197 #3070
    [#3129] #3073 #3063 #2935 #3289 #3389 #3321 #3342 #3461 Read documentation
  * New Source type `oci-layout://` allows builds to import images from OCI
    directory structure on the client side. This allows using local versions
    of the image. #3112 #3300 #3122 #3034 #2971 #2827 #3397
  * Build requests now support sending a Source policy definition. A policy
    can be used to deny access to specific sources (e.g. images or URLs) or
    only allow access to specific image namespaces. Policies can also be
    used to modify sources when they are requested by the build, for
    example, pin a tag requested by the build to a specific digest even if
    it has already changed in the registry. #3332
  * New remote cache backend: Azure Blob Storage #3010
  * New remote cache backend: S3 #2824 #3065
  * BuildKit now supports Nydus compression type #2581
  * OCI exporter now supports attribute `tar=false` to export OCI layout
    into a directory instead of downloading a tarball. #3162
  * Setting multiple cache exporters for a single build is now supported
    [#3024] #3271
  * Cache exporters can now be configured to ignore exporting errors #3430
  * Remote cache import/export to client-side local files now supports tag
    parameter for scoping cache #3111
  * CNI network namespaces are now provisioned from a pool for increased
    performance #3107
  * New Info service has been added to control API for asking BuildKit
    daemon's version #2725
  * Gateway API now has a new `Evaluate` method to control the lazy solve
    behavior #3137
  * Allow mounting secrets with empty contents #3081
  * New RemoveMountStubsRecursive option has been added to LLB ExecOp to
    control the cleanup behavior of mounts. By default, empty mount stubs
    are now cleaned up recursively in new frontends. #3314
  * LLB Image source now allows pulling partial layer chains from image
  * Allow hostname to be set by network provider (K8S_POD_NAME) #3044
  * Improve handling and logging of API health checks #2998
  * RegistryToken auth from Docker config is now allowed as authentication
    input #2868
  * Image exporter with containerd worker now allows skipping adding image
    to containerd image store with `store=false`. If not set then images
    stored images are now guaranteed to be unlazied and unpacked. #2800
  * `buildctl` now loads Github runtime environment when using GHA remote
    cache #2707
  * Support for `conflist` when configuring CNI networking #3029
  * Platform info has been added to the build result descriptor metadata
  * Allow sourcemaps to link single LLB vertex to multiple source locations
  * Support for SSH connection helper #2843
  * Empty stub paths created by mount points when build container runs are
    now cleaned up and do not remain in the final image. #3307 #3149
  * Improve performance on BoltDB commits #3261
  * Indentation of some of the image manifests has been fixed to use double
    spaces #3259
  * Fix caching checksum error on copying files with custom UID/GID #3295
  * Fix cases where copy operation left behind nondeterministic timestamps
    for better support for reproducible builds #3298
  * Fix SSH forwarding incompatibility with OpenSSH &gt;= 8.9 #3274
  * Stargz has been updated to v0.13.0 #3280
  * Embedded QEMU emulators have been updated to v7.1.0 with new patches for
    path handling. #3386
  * Fix unpacking images with no layers #3251
  * Fix possible nil pointer exception in LLB bridge #3233 #3169 #3066
  * Fix cleanup of containerd tasks if a start fails #3253
  * Fix handling Windows paths in content checksums #3227
  * Fix possible missing newline in progress output #3072
  * Fix possible early EOF on SSH forwarding #3431
  * Fix possible panic in concurrent OpenTelemetry access #3058
  * Previously deprecated old cache options have been removed #2982
  * Daemonless script has been updated to handle already stopped process
    [#3005]
  * Fix closing session if shared by multiple clients #2995
  * `buildctl du` command now supports JSON formatting #2992
  * Registry push errors now show additional context #2981
  * Improve default description of FileOp vertexes #2932
  * Make sure progress from exporting is properly keyed on parallel requests
  * Terminal colors are now configurable #2954
  * Build errors now always print stacktraces to daemon logs in debug mode
- switch packaging to zstd
- include ldflags to set the version number in the binaries correctly</changelog>
  <changelog author="elimat@opensuse.org" date="1690977600">- Update to version 0.12.1:
  * executor: fix resource sampler goroutine leak
  * [v0.11] make tracing socket forward error non-fatal
  * integration: missing env var to check feature compat
  * test: update pinned busybox image to 1.36
  * test: update pinned alpine image to 3.18
  * vendor: github.com/docker/docker 8e51b8b59cb8 (master, v25.0.0-dev)
  * executor/resource: stub out NewSysSampler on Windows
  * vendor: github.com/docker/cli v24.0.4
  * testutil: move CheckContainerdVersion to a separate package
  * llbsolver: fix policy rule ordering
  * filesync: fix backward compatibility with encoding + and %
  * hack: allow to set GO_VERSION during tests
  * test: always disable tls for dockerd worker
  * buildctl: set max backoff delay to 1 second
  * contenthash: data race
  * filesync: escape special query characters
  * applier: add hack to support docker zstd layers
  * Fix various nits
  * pullprogress data race
  * use sampler lock instead
  * Fix ResolveImageConfig to evaluate source policy
  * sampler data race fix
  * update cgroup parent test to work with cgroupns
  * Revert "specify a `ResponseHeaderTimeout` value"
  * oci: make sure cgroupns is enabled if supported
  * bash lint fix
  * rename BUILDFLAGS to GOBUILDFLAGS
  * allow ENOTSUP for PSI cgroup files
  * containerimage: use platform matcher to detect platform to unpack
  * exporter: silently skip unpacking unknown reference
  * improve error handling in ReadFile
  * dockerfile: arg for controlling go build flags
  * dockerfile: arg to enable go race detection
  * Add support for health start interval
  * Re-vendor moby/moby
  * filesync: mark if options have been encoded to detect old versions
  * dockerfile: heredoc should use 0644 permissions
  * docs: update README to reference OpenTelemetry instead of OpenTracing
  * gateway: restore original filename in ReadFile error message
  * Dockerfile: update containerd to v1.7.2
  * Use system.ToSlash() instead of filepath.ToSlash()
  * Revert most changes to client/llb
  * Remove Architecture
  * Default to linux in client
  * Ensure we use proper path separators
  * Set default platform
  * Add nil pointer check in dispatchWorkdir
  * Remove nil pointer check and extra NormalizePath
  * Rename variable, remove superfluous check
  * Use current OS as a default
  * Handle file paths base on target platform
  * exporter: unlazy references in parallel
  * exporter: simplify unlazy references to reduce duplication
  * exporter: allow unpack on multi-platform images
  * tests: add unpack to scratch export test
  * overlay: set whiteout timestamps to 1970-01-01 (not to SOURCE_DATE_EPOCH)
  * dockerfile: graduate `ADD --checksum=&lt;checksum&gt;` from labs
  * dockerfile: graduate `ADD &lt;git ref&gt;` from labs
  * dockerfile: mod-outdated target to check modules updates
  * dockerfile: use xx in dnsname stage
  * dockerfile: install musl-dev to fix compilation issue
  * dockerfile: update Alpine to 3.18
  * vendor: update fsutil to 36ef4d8
  * export(local): split opt
  * buildctl: Provide --wait option
  * containerimage: support SOURCE_DATE_EPOCH for CreatedAt
  * move flightcontrol to use generics
  * containerimage: keep layer labels for exported images
  * shell: start shell from cmd, not entrypoint
  * sbom: propogate image-resolve-mode for generator image
  * client: add extra debug to tests
  * handle missing provenance for non-evaluated result
  * tests: add provenance test for duplicate platform
  * tests: add provenance test for when context directory does not exist
  * forward: make BridgeClient public for lint
  * gateway: enable named contexts for gateway frontend
  * vendor: update vt100 with resize panic fix
  * docs: dockerfile: remove "known issues" related to AuFS
  * docs: add running instruction to CONTRIBUTING.md
  * tests: add worker close method to interface
  * add and check for gateway.exec.secretenv cap
  * move Secretenv from Meta to InitMessage
  * support passing SecretEnv to gateway containers
  * Add comment, update from review
  * Fix issue with digest merge (inconsistent graph state)
  * docs: add helper commands section to CONTRIBUTING.md
  * docs: update CONTRIBUTING.md whitespace formatting
  * integration: fix not deleting dockerd workdir
  * remove uses of deprecated ResolverOptions.Client
  * filesync: fix handling non-ascii in file paths
  * tests: add test for unicode filenames
  * Adding more docs to client/llb
  * Add special case for rw bind mounts
  * vendor: github.com/docker/cli v24.0.2
  * vendor: github.com/docker/docker v24.0.2
  * progressui: fix index printing on partial rows
  * gateway: wrap ExecProcessServer Send calls with a mutex
  * resources: make maxsamples configurable
  * llbsolver: add systemusage samples to provenance attestation
  * resources: store sys cpu usage per step
  * resources: add sampler for periodic stat reads
  * resources: CNI network usage sampling support
  * resources: add build step resource tracking via cgroups
  * solver: lock before using actives
  * Emulate "bind" mounts using the bind filter
  * Fix mount layers on host
  * llbsolver: set temporary lease in Commit context
  * Update containerd dependency
  * exporter: Add exptypes with Common exporter keys
  * exporter/image/exptypes: Make strongly typed
  * solver: move AddBuildConfig into llbsolver package
  * tests: add test to check url format for image loaded from oci layout
  * solver: mark locally loaded images as such
  * solver: merge local and remote images into single list
  * purl: allow RefToPURL to take a type parameter
  * tests: don't use purl code to test itself
  * Use linux as a default for inputOS
  * Add path handling functions
  * response to comments
  * containerimage: Export option keys
  * vendor: update spdx/tools-golang to v0.5.1
  * exporter: remove non dist options from tar exporter
  * exporter: move fs opt parsing to method
  * tests: fixup attestation tar to not panic when file not found
  * git: set umask without reexec
  * add language property for sourcemap
  * dockerfile/docs: add set -ex to heredoc #3870
  * authprovider: fix a bug where registry-1.docker.io auth was always a cache miss
  * response to comments
  * tracing: fix buildx tracing delegation
  * Update continuity and fsutil
  * cache: add a few more fields to ref trace logs.
  * vendor: github.com/containerd/go-runc v1.1.0
  * provenance: fix possible empty digest access
  * vendor: fix broken vendoring
  * dockerfile: bump up nerdctl to v1.4.0
  * bump nydus-snapshotter dependence to v0.8.2
  * vendor: github.com/docker/cli v24.0.1
  * vendor: github.com/docker/docker v24.0.1
  * vendor: github.com/containerd/containerd v1.7.1
  * vendor: github.com/Microsoft/hcsshim v0.10.0-rc.8
  * vendor: github.com/Microsoft/go-winio v0.6.1
  * vendor: golang.org/x/sys v0.7.0
  * vendor: github.com/containerd/typeurl/v2 v2.1.1
  * chore: bump spdx tools
  * Fix typo in attestation-storage.md
  * vendor: github.com/docker/cli v24.0.0
  * vendor: github.com/docker/docker v24.0.0
  * vendor: github.com/opencontainers/runc v1.1.7
  * vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2
  * vendor: github.com/klauspost/compress v1.16.3
  * Dockerfile: CONTAINERD_VERSION=v1.7.1
  * Dockerfile: CONTAINERD_ALT_VERSION_16=v1.6.21
  * Dockerfile: RUNC_VERSION=v1.1.7
  * session: avoid logging healthcheck error on canceled connection
  * session: fix run and close synchronization
  * testutil: update ReadImages to fallback to reading manifest
  * Add trace logs for cache leaks.
  * Add some doc strings for LLB functions
  * attestations: move containerd media type warnings
  * update generated proto files
  * attestations: replace intoto media type with vendored const
  * nydus: bump nydus versions in Dockerfile and doc
  * feedback changes for moby/buildkit #2251
  * testutil: expose underlying docker address for supported workers
  * testutil: expose integration workers as public
  * remove type aliases for leasemanager/contentstore
  * llbsolver: move history blobs to a separate namespace
  * build(deps): bump github.com/docker/distribution
  * added import/export support for OCI compatible image manifest version of cache manifest (opt-in on export, inferred on import) moby/buildkit #2251
  * llb: carry platform from inputs for merge/diff
  * llb: don't include platform in fileop
  * control: fix possible deadlock on network error
  * exporter/containerimage: remove redundant type for var declaration
  * Fix not to set the value on empty vertex
  * Fix to import as digest
  * cache: always release ref when getting size in usage.
  * Drop unneeded variable
  * ssh: add fallback to ensure conn is closed in all cases.
  * vendor: github.com/opencontainers/image-spec v1.1.0-rc3
  * vendor: github.com/docker/cli v23.0.5
  * vendor: github.com/docker/docker v23.0.5
  * nydus: update nydus-snapshotter dependency to v0.8.0
  * progressui: fix possible zero prefix numbers in logs
  * llbsolver: send active event only to current client
  * llbsolver: send delete status event
  * llbsolver: filter out records marked deleted from list responses
  * Add Windows service support
  * docs: fixup build repro doc with updated policy format
  * test: use appropriate snapshotter service to walk snapshots
  * overlay: use function to check for overlay-based mounts
  * Update uses of Image platform fields in OCI image-spec
  * allow setting user agent products
  * Bump up golangci-lint to v1.52.2
  * chore: tidy up duplicated imports
  * solver: Release unused refs in LoadWithParents
  * Avoid panic on parallel walking on DefinitionOp
  * solver: skip sbom post processor if result is nil
  * vendor: github.com/docker/docker v23.0.4
  * vendor: github.com/docker/cli v23.0.4
  * vendor: golang.org/x/time v0.3.0
  * vendor: github.com/docker/cli v23.0.2
  * vendor: github.com/docker/docker v23.0.2
  * test: don't hang if a process doesn't run
  * ci: put worker name first for better UX in actions
  * go.mod: remove github.com/kr/pretty
  * Revert "Problem: can't use anonymous S3 credentials"
  * go.mod: bump up runc to v1.1.6
  * go.mod: Bump up stargz-snapshotter to v0.14.3
  * dockerfile: bump up stargz-snapshotter to v0.14.3
  * dockerfile: bump up runc to v1.1.6
  * buildkitd: add grpc reflection
  * Bump up nerdctl to 1.3.0
  * Bump up containerd 1.6.20
  * Fix gzip decoding of HTTP sources.
  * ci: update runner os to ubuntu 22.04
  * Fix bearer token expiration check (fixes #3779)
  * docs: update buildkitd.toml with new field info
  * buildkitd: allow durations for gc config
  * buildkitd: allow multiple units for gc config
  * dockerui: expose context detection functions as public
  * Prevent overflow of runc exit code.
  * Upgrade to latest go-runc.
  * runc worker: fix sigkill handling
  * Dockerfile: RUNC_VERSION=v1.1.5
  * client: add client opts to enable system certificates
  * Make ClientOpts type safe
  * build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
  * fileop: create new fileOpSolver instance per Exec call
  * Provide CacheManager to Controller instead of CacheKeyManager.
  * http: ensure HEAD and GET requests have same headers
  * docs: add auto-generated sections to buildctl.md
  * client: allow grpc dial option passthrough
  * cni: simplify netns creation
  * add Bass to list of LLB languages
  * llbsolver: fix sorting of history records
  * llbsolver: Fix performance of recomputeDigests
  * solve: use comparables instead of reflection in result struct
  * vendor: github.com/docker/cli v23.0.1
  * vendor: github.com/docker/docker v23.0.1
  * client: create oci-layout file in StoreIndex
  * ci: output annotations for failures
  * test: set mod vendor
  * test: use gotestsum to generate reports
  * fix gateway exec tty cleanup on context.Canceled
  * fix process termination handling for runc exec
  * Register builds before recording build history
  * docs(dockerfile): minimal Dockerfile version support for chmod
  * Update builder.md to document newly supported --chmod features in both ADD and COPY statements.
  * use bklog.G(ctx) instead of logrus directly
  * integration: missing mergeDiff compat check
  * chore: `translateLegacySolveRequest` does not need to return error checking.
  * integration: split feature compat check for subtests
  * integration: missing feature compat check for cache
  * dockerfile: fix reproducible digest test for non-amd64
  * integration: add FeatureMergeDiff compat
  * integration: add FeatureCacheBackend* compat
  * integration: enforce features compat through env vars
  * ci: upstream docs conformance validation
  * dockerfile(docs): fix liquid syntax
  * Problem: can't use anonymous S3 credentials
  * hack: remove build_ci_first_pass script
  * hack: binaries and cross bake targets
  * go.mod: update to go 1.20
  * Dockerfile: CONTAINERD_VERSION=v1.7.0
  * go.mod: github.com/containerd/containerd v1.7.0
  * Add Namespace to list of buildkit users.
  * remove buildinfo
  * buildinfo: add BUILDKIT_BUILDINFO build arg
  * buildinfo: mark as deprecated
  * docs: deprecated features page
  * rootless: guide for Bottlerocket OS (`sysctl -w user.max_user_namespaces=N`)
  * rootless: fix up unprivileged mount opts
  * Dockerfile: CONTAINERD_VERSION=v1.7.0-rc.3, CONTAINERD_ALT_VERSION_16=v1.6.19
  * go.mod: github.com/containerd/containerd v1.7.0-rc.3
  * version: add "v" prefix to version for tagging convention consistency
  * remove context name validation from kubepod connhelper
  * gateway: add hostname option to NewContainer API
  * fix error message typo
  * provenance: ensure URLs are redacted before written
  * test/client: Close buildkit client
  * docs: missing security policy markdown file
  * diffapply: do chown before xattrs
  * Add test for merge of files with capabilities.
  * fix a possible panic on cache
  * Update cmd/buildkitd/main_windows.go
  * ci(validate): use bake
  * hack: shfmt bake target
  * hack: generated-files bake target
  * hack: doctoc bake target
  * hack: lint bake target
  * hack: authors Dockerfile and bake target
  * hack: bake definition with vendor targets
  * Fix buildkitd panic when frontend input is nil.
  * ci: trigger workflows on push to release branches
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * ci: create GitHub Release for frontend as well
  * ci: make release depends on image job
  * lint: fix issues with go 1.20
  * remove deprecated golangci-lint linters
  * update golangci-lint to v1.51.1
  * update to go 1.20
  * Allow DefinitionOp to track sources
  * specify a `ResponseHeaderTimeout` value
  * Ensures that the primary GID is also included in the additional GIDs
  * ci: fix missing TESTFLAGS env var in test-os workflow
  * Dockerfile: update containerd to v1.7.0-beta.4, v1.6.18
  * go.mod: github.com/containerd/containerd v1.7.0-beta.4
  * ci: update softprops/action-gh-release to v0.1.15
  * ci: remove unused vars in dockerd workflow
  * ci: split cross job
  * Dockerfile: remove binaries-linux-helper stage
  * ci: rename unclear env vars
  * readme: fix and update badges
  * ci: rename build workflow to buildkit
  * ci: reusable test workflow
  * ci: move test-os to a dedicated workflow
  * ci: move frontend integration tests and build to a dedicated workflow
  * stargz-snapshotter: graduate from experimental
  * Bump up stargz-snapshotter to v0.14.1
  * set osversion in index descriptor from base image
  * progress: solve status description
  * ci: update buildx to latest
  * Dockerfile: update xx to 1.2.1
  * integration: make sure registry directory exists
  * gha: avoid range requests with too big offset
  * ci: merge test-nydus job in test one
  * ci: remove branch restriction on pull request event
  * client: add tests for layerID in comment field
  * exporter: fix sbom supplement core detection
  * exporter: fix supplement sboms on empty scratch layer
  * exporter: fix file layer finder whiteout detection
  * exporter: canonicalize sbom file paths during search
  * Add platform tracing socket paths and mounts
  * integration: log dockerd cmd
  * integration: set custom flags for dockerd worker
  * remotecache: proper exporter naming for gha, s3 and azblob
  * remotecache: explicit names for registry and local
  * exporter: use compression.ParseAttributes func
  * remotecache: mutualize compression parsing attrs
  * lex: add support for optional colon in variable expansion
  * test: rework TestProcessWithMatches to use a matrix
  * dockerfile: update to use dockerui pkg
  * dockerui: separate docker frontend params to reusable package
  * cache: add fallback for snapshotID
  * exporter: remove wrappers for oci data types
  * vendor: github.com/docker/cli v23.0.0
  * vendor: github.com/docker/docker v23.0.0
  * hack: do not cache some stages on release
  * hack: do not set attest flags when exporting to docker
  * git: override the locale to ensure consistent output
  * fix support for empty git ref with subdir
  * gitutil: use subtests
  * source: more tests cases for git identifier
  * source: use subtests cases for git identifier
  * otel: bump dependencies to v1.11.2/v0.37.0
  * hack: treat unset variables as an error
  * frontend: fix typo in release script
  * ci: create matrix for building frontend image
  * inline cache: fix blob indexes by uncompressed digest
  * Skip configuring cache exporter if it is nil.
  * docs: update syntax for labs channel in examples
  * integration: remove wrong compat condition
  * integration: fix compat check for CNI DNS test
  * cache: don’t link blobonly based on chainid
  * do not mount secrets that are optional and missing from solve opts
  * SOURCE_DATE_EPOCH: drop timezone
  * sbom: create tmp directory for scanner image
  * progress: keep color enabled with NO_COLOR empty
  * hack: remove azblob_test
  * integration: basic azblob cache test
  * test: add proxy build args when existed
  * vendor: github.com/docker/cli v23.0.0-rc.3
  * vendor: github.com/docker/docker v23.0.0-rc.3
  * vendor: golang.org/x/net v0.5.0
  * vendor: golang.org/x/text v0.6.0
  * vendor: golang.org/x/sys v0.4.0
  * Dockerfile: CNI plugins v1.2.0
  * Dockerfile: CONTAINERD_VERSION=v1.7.0-beta.3, CONTAINERD_ALT_VERSION_16=v1.6.16
  * Fix tracing listener on Windows
  * go.mod: github.com/containerd/containerd v1.7.0-beta.3
  * control: send current timestamp header with event streams
  * vendor: update containerd to v1.6.16-0.1709cfe273d9
  * buildctl: add ref-file to get history record for a build
  * client: make sure ref is configurable for the history API
  * history: save completed steps with cache stats
  * history: fix exporter key not being passed
  * history: fix logs and traces are saving on canceled builds
  * hack: add correct entrypoint to shell script
  * ci: use moby/buildkit:latest in build action
  * dockerfile: add testReproSourceDateEpoch
  * Fix cache cannot reuse lazy layers
  * Correct manifests_prefix documentation for S3 cache
  * Use golang.org/x/sys/windows instead of syscall
  * dockerfile: release frontend for i386 platform
  * Add get-user-info utility
  * optimize --dry-run flag
  * fix(tracing): spelling of OTEL_TRACES_EXPORTER value
  * Propagate sshforward send side connection close
  * buildctl: add `buildctl debug histories, buildctl prune-histories`
  * dockerfile: fix panic on warnings with multi-platform
  * vendor: github.com/docker/cli v23.0.0-rc.2
  * vendor: github.com/docker/docker v23.0.0-rc.2
  * vendor: github.com/containerd/containerd v1.6.15
  * cache: add registry.insecure option to registry exporter
  * Make local cache non-lazy
  * docs/build-repro.md: add the SOURCE_DATE_EPOCH section
  * docs: clarified build argument example by changing the variable name
  * azblob cache: account_name attribute
  * docs: master -&gt; 0.11
  * ci: fix dockerd workflow with latest changes from moby
  * integration: set mirrors and entitlements with dockerd worker
  * github: update CI to buildkit version
  * exporter: ensure spdx order prioritizes primary sbom
  * hack: remove s3_test
  * integration: basic s3 cache test
  * integration: add runCmd and randomString utils
  * integration: expose backend logs in sandbox interface
  * azblob_test: pin busybox to avoid "Illegal instruction" error
  * docs: add nerdctl container buildkitd address docs
  * feat: add namespace support for nerdctl container
  * ci: add ci to check README toc
  * testutil: pin busybox and alpine used in releases
  * exporter: allow configuring inline attestations for image exporters
  * exporter: force enabling inline attestations for image export
  * docs: change semicolons to double ampersands
  * llbsolver: fix panic when requesting provenance on nil result
  * vendor: update fsutil to fb43384
  * attestation: only supplement file data for the core scan
  * docs: add index page for attestations
  * docs: move attestation docs to dedicated directory
  * docs: rename slsa.md to slsa-provenance.md
  * docs: tidy up json examples for slsa definitions
  * docs: add cross-linking between slsa pages
  * Flakiness in azblob test job
  * vendor: update spdx/tools-golang to d6f58551be3f
  * feat: add nerdctl-container support for client
  * docs: slsa review updates
  * docs: moved slsa definitions to a separate page
  * docs: slsa editorial fixes
  * docs: add filename to provenance attestation
  * docs: update hermetic field after it was moved in implementation
  * docs: update provenance docs
  * docs: add slsa provenance documentation
  * progress: fix clean context cancelling
  * fix: updated_at -&gt; updated-at
  * Solve panic due to concurrent access to ExportSpans
  * feat: allow ignoring remote cache-export error if failing
  * add cache stats to the build history API
  * vendor: github.com/docker/cli v23.0.0-rc.1
  * vendor: github.com/docker/docker v23.0.0-rc.1
  * vendor: github.com/containerd/containerd v1.6.14
  * frontend: fix testMultiStageImplicitFrom to account for busybox changes
  * sshforward: skip conn close on stream CloseSend.
  * chore: update buildkitd.toml docs with mirror path example
  * feat: handle mirror url with path
  * provenance: fix the order of the build steps
  * provenance: move hermetic field into a correct struct
  * add possibility to override filename for provenance
  * Fix typo in CapExecMountBindReadWriteNoOutput.
  * Use SkipOutput instead of -1 for output indexes to clarify semantics.
  * fix indentation for in-toto and traces
  * attestation: forbid provenance attestations from frontend
  * attestation: validate attestations before unbundling as well
  * exporter: make attestation validation public
  * result: change reason types to strings
  * attestations: ignore spdx parse errors
  * attestations: propogate metadata through unbundling
  * gateway: add addition check to prevent content func from being forwarded
  * ociindex: add utility method for getting a single manifest from the index
  * ociindex: refactor to hide implementation internally
  * cache: test gha cache exporter
  * containerdexecutor: add network namespace callback
  * frontend/dockerfile: BFlags.Parse(): use strings.Cut()
  * frontend/dockerfile: parseExtraHosts(): use strings.Cut()
  * frontend/dockerfile: parseMount() use strings.Cut(), and some minor cleanup
  * frontend/dockerfile: move check for cache-sharing
  * frontend/dockerfile: provide suggestions for mount share mode
  * frontend/dockerfile: define types for enums
  * frontend/dockerfile/shell: use strings.Equalfold
  * frontend/dockerfile/parser: remove redundant concat
  * frontend/dockerfile: parseBuildStageName(): pre-compile regex
  * frontend/dockerfile: remove isSSHMountsSupported, isSecretMountsSupported
  * docs: Enable rootless for stargz-snapshotter
  * executor/oci: GetResolvConf(): simplify handling of resolv.conf
- fix rpmlint errors
  * systemd units should not have execute permissions
  * add missing %service_add_pre for the systemd units</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1701691200">- Update to version 0.12.4:
  * Fix possible concurrent map access on remote cache export
  * Fix hang on debug server listener
  * Fix possible deadlock in History API under high number of parallel builds
  * Fix possible panic on handling deleted records in History API
  * Fix possible data corruption in zstd library
- Update to version 0.12.3:
  * Fix possible duplicate source files in provenance attestation for chained builds
  * Fix possible negative step time in progressbar for step shared with other build request
  * Fix properly closing history and cache DB on shutdown to avoid corruption
  * Fix incorrect error handling for invalid HTTP source URLs
  * Fix fallback cases for ambiguous insecure configuration provided for registry used as push target.
  * Fix possible data race with parallel image config resolves
  * Fix regression in v0.12 for clients waiting on buildkitd to become available
  * Fix Cgroup NS handling for hosts supporting only CgroupV1
- Update to version 0.12.2:
  * Fix possible discarded network error when exporting result to client
  * Avoid unnecessary memory allocations when writing build progress</changelog>
  <changelog author="dcermak@suse.com" date="1706788800">- Update to version 0.12.5:
  * update runc to v1.1.12
  * exec: add extra validation for submount sources (fixes CVE-2024-23651, bsc#1219267)
  * oci: fix error handling on submount calls
  * executor: recheck mount stub path within root after container run (fixes CVE-2024-23652, bsc#1219268)
  * llbsolver: make sure interactive container API validates entitlements (fixes CVE-2024-23653, bsc#1219438)
  * gateway: pass executor with build and not access worker directly
  * pb: add extra validation to protobuf types
  * sourcepolicy: add validations for nil values
  * exporter: add validation for platforms key value
  * exporter: add validation for invalid platorm
  * exporter: validate null config metadata from gateway
  * ci: disable push if not upstream repo
  * hack: use git context only for upstream repo
  * hack/test: allow ALPINE_VERSION to be set from env
  * hack: align syntax
  * vendor: github.com/cyphar/filepath-securejoin v0.2.4
  * tracing: allow the `Resource` to be set externally</changelog>
</package>
<package pkgid="273b704e7192418b77ec9b084281d4e1ed18e5e52fe3824be336aa4183e0581da17fa748436414d5f06c807f068565dbd3932090b9079451c1b72afa92dcdf75" name="buildpacks-cli" arch="x86_64">
  <version epoch="0" ver="0.35.1" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1721649600">- new package buildpacks-cli: CLI for building apps using Cloud
  Native Buildpacks</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1721649601">- Update to version 0.35.0:
  * Log a warning (once) when PACK_VOLUME_KEY is unset and running in a container
  * Validate build image name
  * Try to fix wcow
  * Fix macos by not requiring real docker client for lifecycle execution unit tests
  * Launch build containers in a separate ephemeral Docker bridge network
  * Resolve some TODOs
  * Initial implementation (still has TODOs)
  * Warn if NOT --pull-policy=always in container</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722945600">- Update to version 0.35.1:
  * Add retries for docker network remove
  * Fix ephemeral bridge network name for podman
  * Fix the helper script for testing the GitHub Action workflows
    on forked repositories.
  * Add ${{ matrix.suffix }} to the source tag for retagging.
  * Fix buildpacks#2237: consider /workspace as a sensitive dir
  * Support OCI layouts with
    application/vnd.oci.image.manifest.v1+json media type
  * Bump default lifecycle binary version from 0.19.6 to 0.20.0
  * Fix variable name.
  * Fix variable name.
  * Update the DEVELOPMENT.md
  * Fix variable name mismatch.
  * Finish the helper script for testing GitHub Action workflows on
    forked repository.
  * Add a draft helper script for testing GitHub Action workflows
    on forked repository.
  * Add --trust-extra-buildpacks option
  * Trust buildpacks in addition to those on the builder</changelog>
</package>
<package pkgid="5a890393e02705e8d24c7b8f1937a94c640f493035c6f203866384bb308701a04dc64d6eaa315124c2423238f10b26e877f9f8b2b7b24040b4bb76ddd2284765" name="buildpacks-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="0.35.1" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1721649600">- new package buildpacks-cli: CLI for building apps using Cloud
  Native Buildpacks</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1721649601">- Update to version 0.35.0:
  * Log a warning (once) when PACK_VOLUME_KEY is unset and running in a container
  * Validate build image name
  * Try to fix wcow
  * Fix macos by not requiring real docker client for lifecycle execution unit tests
  * Launch build containers in a separate ephemeral Docker bridge network
  * Resolve some TODOs
  * Initial implementation (still has TODOs)
  * Warn if NOT --pull-policy=always in container</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722945600">- Update to version 0.35.1:
  * Add retries for docker network remove
  * Fix ephemeral bridge network name for podman
  * Fix the helper script for testing the GitHub Action workflows
    on forked repositories.
  * Add ${{ matrix.suffix }} to the source tag for retagging.
  * Fix buildpacks#2237: consider /workspace as a sensitive dir
  * Support OCI layouts with
    application/vnd.oci.image.manifest.v1+json media type
  * Bump default lifecycle binary version from 0.19.6 to 0.20.0
  * Fix variable name.
  * Fix variable name.
  * Update the DEVELOPMENT.md
  * Fix variable name mismatch.
  * Finish the helper script for testing GitHub Action workflows on
    forked repository.
  * Add a draft helper script for testing GitHub Action workflows
    on forked repository.
  * Add --trust-extra-buildpacks option
  * Trust buildpacks in addition to those on the builder</changelog>
</package>
<package pkgid="6e501a5976579b0f6d7b728bf13ede4f4faa1edac050fb6ca93cba1f2a6576c562e9534478aa8486d2d56c1dcce518fa21c2bec886b078d20702ab853bacedf3" name="buildpacks-cli-fish-completion" arch="noarch">
  <version epoch="0" ver="0.35.1" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1721649600">- new package buildpacks-cli: CLI for building apps using Cloud
  Native Buildpacks</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1721649601">- Update to version 0.35.0:
  * Log a warning (once) when PACK_VOLUME_KEY is unset and running in a container
  * Validate build image name
  * Try to fix wcow
  * Fix macos by not requiring real docker client for lifecycle execution unit tests
  * Launch build containers in a separate ephemeral Docker bridge network
  * Resolve some TODOs
  * Initial implementation (still has TODOs)
  * Warn if NOT --pull-policy=always in container</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722945600">- Update to version 0.35.1:
  * Add retries for docker network remove
  * Fix ephemeral bridge network name for podman
  * Fix the helper script for testing the GitHub Action workflows
    on forked repositories.
  * Add ${{ matrix.suffix }} to the source tag for retagging.
  * Fix buildpacks#2237: consider /workspace as a sensitive dir
  * Support OCI layouts with
    application/vnd.oci.image.manifest.v1+json media type
  * Bump default lifecycle binary version from 0.19.6 to 0.20.0
  * Fix variable name.
  * Fix variable name.
  * Update the DEVELOPMENT.md
  * Fix variable name mismatch.
  * Finish the helper script for testing GitHub Action workflows on
    forked repository.
  * Add a draft helper script for testing GitHub Action workflows
    on forked repository.
  * Add --trust-extra-buildpacks option
  * Trust buildpacks in addition to those on the builder</changelog>
</package>
<package pkgid="4f2a4b51acdf2f13c285cdedf81f36fceeef7cd036490bc61cdd49195529a7e1d10fde6997409c08e628e3d8849b25234fd96c10603c532f5226cb854fec7f87" name="buildpacks-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.35.1" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1721649600">- new package buildpacks-cli: CLI for building apps using Cloud
  Native Buildpacks</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1721649601">- Update to version 0.35.0:
  * Log a warning (once) when PACK_VOLUME_KEY is unset and running in a container
  * Validate build image name
  * Try to fix wcow
  * Fix macos by not requiring real docker client for lifecycle execution unit tests
  * Launch build containers in a separate ephemeral Docker bridge network
  * Resolve some TODOs
  * Initial implementation (still has TODOs)
  * Warn if NOT --pull-policy=always in container</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722945600">- Update to version 0.35.1:
  * Add retries for docker network remove
  * Fix ephemeral bridge network name for podman
  * Fix the helper script for testing the GitHub Action workflows
    on forked repositories.
  * Add ${{ matrix.suffix }} to the source tag for retagging.
  * Fix buildpacks#2237: consider /workspace as a sensitive dir
  * Support OCI layouts with
    application/vnd.oci.image.manifest.v1+json media type
  * Bump default lifecycle binary version from 0.19.6 to 0.20.0
  * Fix variable name.
  * Fix variable name.
  * Update the DEVELOPMENT.md
  * Fix variable name mismatch.
  * Finish the helper script for testing GitHub Action workflows on
    forked repository.
  * Add a draft helper script for testing GitHub Action workflows
    on forked repository.
  * Add --trust-extra-buildpacks option
  * Trust buildpacks in addition to those on the builder</changelog>
</package>
<package pkgid="37a305a9a374df06f9701e340f65dfc2aa96697096f59334dea597875273e7a37a2d41f228f2778275622dba2cba1a3f562111f26df405dca06fcdc8d54bece5" name="buildstream" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="bp160.1.9"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647086400">- Update to version 1.6.4:
  + BuildElement classes now support `create-dev-shm`
  + script element plugin now supports `create-dev-shm`
  + Python 3.6 is no longer tested in CI but support is maintained
    on best effort level.
  + New fatal warnings for unaliased sources.
  + New errors raised when using an unresolved source alias.
  + Add support for .netrc in remote/tar/zip sources.
  + Bugfixes and better stability in fuse layer.
  + Drop CI support for EOL python 3.6 (although BuildStream should
    still work when installed in python 3.6 environments).
  + Various bug fixes, documentation updates and CI related
    cleanup.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647604800">- Update to version 1.6.5:
  + Make it easier to override parameters to `make` in the `make`
    element.
  + ostree: Remove `--mirror` parameter which has been causing some
    issues.
  + Fix test suite to work on some CI runners which hang while
    resolving localhost when trying to open a port for the CAS
    server.</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1652875200">- Prepare for Python 3.10 by correcting sitelib install path.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1660996800">- Update to version 1.6.7:
  + Some documentation updates.
  + Support newer versions of ruamel.yam.
- Changes from version 1.6.6:
  + BuildStream git tests have always assumed default git branch is
    master. This is now explicit with test helpers.
  + project.refs of subprojects are properly taken into account.
  + ostree regressed as part of migrating to command-line that it
    left whitespace into ref when tracking. Any whitespace around
    ref is now removed.
  + pb2 files are regenerated with protobuf 3.20.1 to mitigate
    forward compatibility issues. This has the implication that
    protobuf 3.19.0 or higher.
- Build as noarch.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1665662400">- Update to version 1.6.8:
  + Only test remote CAS push capabilities if push is enabled. This
    improves compatibility with new grpcio releases.
  + Dummy sandbox for checking out from dirrefernt arches. Ability
    to check out build artifacts with incompatible arch assuming no
    commands need to be run.
  + Backport regex flags fix to support newer versions of Python.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1677067200">- Update to version 1.6.9:
  + Further Python 3.11 fixes to regex flags.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695556800">- Update to version 2.1.0:
  + Support new architecture name "la64v100"
  + Fix race condition when downloading sources
  + Properly handle partial download errors
  + Fix regressed ETag handling to prevent redundant file downloads
  + Fix parsing remotes specified on the command line
  + Fix bug when tracking ref-less sources (like local sources)
    when using project.refs
  + Follow semantic versioning more strictly
  + New `bst build --retry-failed` feature
  + Fix parsing override-project-caches configuration
  + Fix crashes when instructed to only download from mirrors, and
    some sources have no mirrors defined
  + Drop unnecessary dependency on dateutil
  + Fix severe hangs when can occur when running out of disk
    space specifically when attempting to open and write to a new
    log file
- Update to version 2.0.0:
  + Please see the include NEWS file for all the changes during
    development.
- Add python3-Cython BuildRequires: New dependency.
- Drop the 's:pytest-runner::' setup.py sed call, merged upstream.
- Drop noarch BuildArch: Package is no longer noarch.
- Add missing Requires: python3-Jinja2, python3-pluginbase,
  python3-protobuf, python3-ruamel.yaml.clib, python3-setuptools
  and python3-ujson
- Add disabled python3-pyroaring Requires: Needed, but not yet
  available in openSUSE.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726142400">- Update to version 2.3.0:
  + Proxy remote asset and remote execution requests via
    buildbox-casd
  + Optimize bst show when no cached state is needed
  + Support %{description} in bst show commands
  + Support HTTP Bearer authentication for remote API servers
  + Drop support for Python 3.7
  + downloadablefilesource: Add 10 minutes timeout
  + tar.py: Always check member paths
  + Ensure blobs are available locally when using storage-service
  + Support loading source mirror plugins from pip and junction
    origins
  + Restore terminal after exiting a bst shell
  + Fail early if buildbox-run is present but non-functional
- Changes from version 2.2.1:
  + Fix parsing of keepalive time
  + Fix alias mapping when using source mirror plugins
  + Fix typing of SourceFetcher.fetch() and Source.translate_url():
    the `alias_override` parameter should be considered opaque.
  + Update documentation regarding the buildbox merge
- Changes from version 2.2.0:
  + Support Python 3.12
  + Add suffix parameter to `Source.translate_url()`
  + Error out if a YAML mapping has duplicate keys
  + New configuration option to set the grpc keepalive time
  + Add SourceMirror plugins to allow more flexibility when
    defining mirrors
  + Use system-installed buildbox components over bundled ones if
    available
  + Support bearer authentication in DownloadableFileSource
  + Support mapping aliases from subprojects to parent project to
    ease mirroring</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1735041600">- Update to version 2.4.0:
  + Add new user configuration for the cache
  + docs: fix link to docker install instructions
  + Fix console warnings in newer python versions
  + Update github CI workflow actions
  + Fix `bst artifact show --long` for artifacts with symlinks
  + Fix race condition in public data handling
  + Cleanup deadcode
  + Make remote execution directory fetching more robust
  + Disable logging for frequent cache query jobs
  + Improve performance when using `storage-service`
  + Fixed issues with nested junctions
  + Drop support for Python 3.8 and add support for Python 3.13
  + Load time optimization for commands which don't require cache
    queries
  + Address deprecation warnings from deprecated pkg_resources</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742731200">- Update to version 2.4.1:
  + Update default min-version for bst init to 2.4
  + Use subprocess umask support
  + Don't use `preexec_fn` on Python 3.11+
  + contrib/bst-graph: Escape names when using as node_id
  + _loader: Use the sort algorithm from Python 3.12 for
    dependencies</changelog>
</package>
<package pkgid="3557ee39d10c8d794e239f49177e1a033c169c7d84e885a15aebe4dfddee2d1c5ef6edce5d66ef5544c535a7813c4b142cc6e0c2ecc59bab89afcfc0f39b68ac" name="bulk_extractor" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="bp160.1.14"/>
  <changelog author="Greg.Freemyer@gmail.com" date="1378900800">- update to v1.4.0
  * There is a long list of bug fixes and improvements, see ChangeLog and be-1.4.0-announcement.pdf in /usr/share folder
  * added support for lightgrep library which greatly improves keyword search speed
  * src/scan_accts.flex (dob): DOBs, Fedex#s, and SSNs are now recorded to a feature recorder called 'pii.txt'.
  * src/scan_net.cpp (scan_net): the -S variable carve_tcp is now implemented by the scan_net scanner to enable or disable TCP/IP memory structure carving. It is disabled by default.
  * src/scan_zip.cpp (scan_zip_component): now prints mtime in ISO8601 format
  * src/bulk_extractor.h: removed all global options; replaced with the be config system
  * src/bulk_extractor.cpp (main): -S now sets options; -s now sets sampling fraction.
  * src/bulk_extractor.cpp (usage): The -B option for specifying the blocksize for bulk data analysis has been removed. Instead specify it with -S block_size=NN.
- commented out be-1.3.1-cpuid.patch.  It is unclear how to rebase.
- rebase ppc-cpuid.patch, ppc build still broken possibly because of missing be-1.3.1-cpuid patch
- delete be-1.3.1-remove-date-time.patch
- add be-1.4.0-remove-date-time.patch  (it is in a different source file, so this is not just a rebase)
- add BuildRequires lightgrep shared library
  * This is not mandatory and could be conditioned out for architectures that don't have it
- add patch to prevent a new test program from being packaged
  * PATCH-FIX-OPENSUSE be-1.3.1-remove-debug-program [/usr/bin/plugin_test should not be installed]
- Add BuildRequires java-devel.  This allows the BEViewer to build and install
- BEViewer.jar is installing to /usr/bin.   Move it to /usr/share/bulk_extractor.
- use sed to update BEViewer to reference the jar in /usr/share/bulk_extractor, not /usr/bin
- Add BEViewer script and jar file to %files section
- Add the announcement email as a standalone PDF as documentation
- Add requires: sleuthkit so that identify_filenames.py works properly</changelog>
  <changelog author="dvaleev@suse.com" date="1379332800">- fixes CPUID used on non-x86 architectures (dfxml_nonx86.patch)
  upstream commint dd05ebf2db10f5a737bc53b9c0396025a951e022
- replaces be-1.3.1-cpuid.patch.</changelog>
  <changelog author="dvaleev@suse.com" date="1379332801">- fix powerpc32 build (have_atomic.patch)</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1381838400">- remove BuildRequires libaff - The format never got popular, and
  libewf is now recommended
- libaff is being dropped from factory</changelog>
  <changelog author="p.drouand@gmail.com" date="1420459200">- Update to version 1.5.5
  * The NEWS and the ChangeLog files sound not updated for a while
- Package 2014-07-17_BE15.pdf into doc directory; this is the version
  1.5.5 announcement
- Remove upstreamed patches
  * dfxml_nonx86.patch
  * have_atomic.patch</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1478260800">- add the User Manual as a separate Source file</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1654862400">- update to version 2.0.0
  * 6 years since the last release!
  * bulk_extractor 2.0 has:
  * a dramatically improved carver over version 1.6
  * is generally more reliable,
  * is optimized for use on systems with many cores</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655121600">- Disable LTO on aarch64 and %arm until fixed upstream
  https://github.com/simsong/bulk_extractor/issues/360</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680523200">- Add gcc13.diff</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1690804800">- cpuid-check.patch: robustify cpuid check
- Don't disable LTO</changelog>
</package>
<package pkgid="9ae41133492c236edafd69aba23749941d55b5abafe751aad8b2c1f85d3c63606b64fe52f757dd6b5939d858cacc33d9743d4a81b8d4d7eb5945a97f67d07a1c" name="bup" arch="x86_64">
  <version epoch="0" ver="0.33.4" rel="bp160.1.12"/>
  <changelog author="ecsos@opensuse.org" date="1572177600">- update to 0.30
  - See https://github.com/bup/bup/blob/master/note/0.29.2-from-0.30.md</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1591185600">- Update to 0.30.1
  - See https://github.com/bup/bup/blob/master/note/0.30-from-0.30.1.md</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1599998400">- Update to 0.31
  - See https://github.com/bup/bup/blob/master/note/0.30.1-from-0.31.md
- Insert check section.
- Switch to python3.
- Run spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605614400">- Add bup-i586.patch: Fix build on 32bit archs.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1610625600">- Update to 0.32
  - See https://github.com/bup/bup/blob/master/note/0.32-from-0.31.md
- Drop bup-python.patch, because now in upstream.
- Drop bup-i586.patch, because needed pandoc was not build for i586.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1631275200">- Do not build documentation/man pages on ix86, as pandoc is not
  available.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1687435200">- Update to 0.32.1
  - See https://github.com/bup/bup/blob/master/note/0.32.1-from-0.32.md</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1693569600">- Update to 0.33.2
  - See https://github.com/bup/bup/blob/main/note/0.33.2-from-0.33.1.md
- New version require python &gt;= 3.7,
  therefore "%define pythons python311" is needed for Leap.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1723118400">- Update to 0.33.3
  - See https://github.com/bup/bup/blob/main/note/0.33.3-from-0.33.2.md
- Use BuildRequire perl(Time:HiRes) instead of
  BuildRequire perl-Time-HiRes
  to fix build error under Tumbleweed.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1728302400">- Update to 0.33.4
  - See https://github.com/bup/bup/blob/main/note/0.33.4-from-0.33.3.md</changelog>
</package>
<package pkgid="da6081d053c8a779dbe1aac6d7556ea710377024992882f2daeb88c34169bcbe33977aaecfa56fcd0d5a9f3267b72c6b550f2d0238f0761db74ef47762033784" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
</package>
<package pkgid="98feff1bd7ffe0f6bda3c6c57b4889329f37aae94e9dae9436990c172561efd5e14427cc7b824b39e46c55b198915d64a701611b8dee1e260dd30d9168667298" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.3.1"/>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
</package>
<package pkgid="75d0bf0353f96dae840a585ceb00531a1b107e34c94cf32d176d8d5e4571126ae8173ba276b9fab03e30aa53557542ff07d836ca814ec6bde55771e9a4e635fe" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.4.1"/>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="cf1816929082a71f730b038d83a2a85dbde0f70a09e02b6858e315fe9ab0f290763888ed48c7cae24ed9416286e6e27494f57eeb1d5add5c12026bccbd1c6992" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.5.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="e49badcddb812b5ccab005aba33cab2fa958fbbd746477cc5e16f5cad154a0f04b9a0c700ba10136487a2c52b892b4e1ae54fc64a5903437b278a7a8ef01dc0c" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.6.1"/>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1778241600">- Fix heap buffer overflow vulnerability in the DHCPv6 client
  (CVE-2026-29004, bsc#1263989)
  * 0001-udhcpc6-fix-buffer-overflow.patch
  * 0002-udhcpc6-check-the-size-of-D6_OPT_IAPREFIX-option.patch</changelog>
</package>
<package pkgid="ba708676ac08ed2952c86b66faaebca917aa34455cf8853c77edf22270941583289731499a0f49721e185df9810d760dd2a21508b5272efab02c36fef3e05d0b" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
</package>
<package pkgid="3cf8f0f01da6876057cccfda1c255013d144558697b21bc62e0de9d35dd145f5d61543fc8cc61d569e77e0be2f05f46e698e997292edd4b8c5e58236be146267" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.3.1"/>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
</package>
<package pkgid="2ca5556f83c380978e42559eb2be2097eab2d4caad86dd13a05e89fac19a8b23449c35d0ba1ceb41dade048a066835046c4ef2b4fd00291d217e29e102d6982d" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.4.1"/>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="20316baac4b03cd352de08823946050e0c4cd9a2610a2b9e4c194100f1f0cb2e5fb334b3a4aa18133db097d7b4ec24c089016161fb0240788928e501d41053de" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.5.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="95ae00a5a4a5da7f23a6f13384469e9fbebfd67121475d7d07e3956b23bde98375a5ef31e17fafd3e569e35ab102143e5f099aa397a68c4c23836725a8354d6b" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.6.1"/>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1778241600">- Fix heap buffer overflow vulnerability in the DHCPv6 client
  (CVE-2026-29004, bsc#1263989)
  * 0001-udhcpc6-fix-buffer-overflow.patch
  * 0002-udhcpc6-check-the-size-of-D6_OPT_IAPREFIX-option.patch</changelog>
</package>
<package pkgid="c331e3af6286b07a9f41926c423cb5820835a16620507b568aa94b3905135d3a542dcb5922e1f52f394770071700db668153e78173b8305e8bc85e07153cc5b1" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.2.2"/>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
</package>
<package pkgid="5a3e0d0184f569d50aeacfa178361528bf4ce4458e8fff32115a4f668cb52deb0ce736caea4e176ac03a9ddfc73705e92825cc15c84ecc57c1192e6ca0234b91" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.3.1"/>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
</package>
<package pkgid="02427362414789e3334c12a7e1cfd245d705243d62819cc67dbf34956dfc69a7269146440e036ca5b6d084b5632f57bdfc9ad0ab299f888f2c24a18751b4497c" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.4.1"/>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="78cb1c2524bce9ee8d07adb4297529ca23156af5f9799bd88ef0ea5d3f46d293e3bc126a5ceb28c0e6f4bc5eecca510f225dfafad9e16c55d47ca877380e45de" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.5.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="927f8be65f0b0d5a5f1b003eeae8ad720f65ddb853c4d84b3ab0b479a391775debc1b220f18dc3f0ce345e2fcbb2c9f1e8c000658029d1a3c4c3be0dfbe43de6" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="160000.6.1"/>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1778241600">- Fix heap buffer overflow vulnerability in the DHCPv6 client
  (CVE-2026-29004, bsc#1263989)
  * 0001-udhcpc6-fix-buffer-overflow.patch
  * 0002-udhcpc6-check-the-size-of-D6_OPT_IAPREFIX-option.patch</changelog>
</package>
<package pkgid="7fbfb4a65a4ce6ce0532e919505a15c455315e5373ea47c005f4ee3479be647f03100adf8313a1a05fbb8d90a597a7d007837df64c218a45c380fb396ec878e1" name="butane" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp160.1.13"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1617969600">- Initial package to replace ignition-config-transpiler/fcct</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1647518400">- Update to version 0.14.0
  - Correctly fail on validation warnings if --strict is specified
  - Drop support for Go 1.13 and 1.14
  - Support none filesystem format
  - Fix incorrect config paths in validation reports on 386 architecture
- Drop obsolete butane-0.11.0-fix-vcontext-report-copy.patch</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676548800">- Update to version 0.17.0
  - Add RHEL for Edge (r4e) spec 1.0.0 and 1.1.0-experimental,
    targeting
  - Ignition spec 3.3.0 and 3.4.0-experimental respectively
  - Fix version string in release container
- Changes in version 0.16.0
  - Stabilize OpenShift spec 4.12.0, targeting Ignition spec 3.2.0
  - Add OpenShift spec 4.13.0-experimental, targeting Ignition
    spec 3.4.0-experimental
  - Ship aarch64 macOS binary in GitHub release artifacts
  - Roll back to Ignition spec 3.2.0 (openshift 4.12.0)
  - Require Go 1.17+
  - test: Check docs on macOS and Windows if dependencies are available
  - Document passwd.users.should_exist and passwd.groups.should_exist
    fields (fcos 1.2.0+, flatcar, rhcos)
  - Clarify spec docs for files/directories/links group fields
  - Document that user/group fields aren't applied to hard links
- Changes in version 0.15.0
  - Return selected compression field value from MakeDataURL() (Go API)
  - Add Flatcar spec 1.0.0 and 1.1.0-experimental, targeting Ignition
    spec 3.3.0 and 3.4.0-experimental respectively
  - Stabilize OpenShift spec 4.11.0, targeting Ignition spec 3.2.0
  - Add OpenShift spec 4.12.0-experimental, targeting Ignition
    spec 3.4.0-experimental
  - Add arm64 support to container
  - Add GRUB password support (fcos 1.5.0-exp, openshift 4.12.0-exp)
  - Add TranslationSet AddFromCommonObject() and Map() methods (Go API)
  - Set compression field for uncompressed inline/local resources, fixing
    provisioning failure when merged with a compressed parent resource
  - Fix local file inclusion on Windows
  - Fix build script on Windows
  - Derive container from Fedora image to support use in multi-stage builds
  - Fail if setuid/setgid/sticky mode bits specified (openshift 4.10.0+)
  - Update to Ignition 2.14.0
  - Roll back to Ignition spec 3.2.0 (openshift 4.11.0)
  - Support arn URL scheme (fcos 1.5.0-exp, openshift 4.12.0-exp)
  - Document support status of setuid/setgid/sticky mode bits in each spec
  - Document support for gs URLs (openshift 4.8.0+)
  - Document support for compression field (openshift 4.8.0 - 4.9.0)
  - Correctly document supported URL schemes (openshift 4.10.0)
  - examples: Use containerized mkpasswd
  - Convert NEWS to Markdown and move to docs site</changelog>
  <changelog author="Osama Alrifai &lt;osamaalrifai18@gmail.com&gt;" date="1687348800">- update to version 0.18.0
  Breaking changes
    Remove deprecated rhcos variant
  Features
    Support offline Tang provisioning via pre-shared advertisement (fcos 1.5.0+,
    openshift 4.14.0-exp)
    Support local file embedding for SSH keys and systemd units (fcos 1.5.0+,
    flatcar 1.1.0+, openshift 4.14.0-exp, r4e 1.1.0+)
    Allow enabling discard passthrough on LUKS devices (fcos 1.5.0+,
    flatcar 1.1.0+, openshift 4.14.0-exp)
    Allow specifying arbitrary LUKS open options (fcos 1.5.0+,
    flatcar 1.1.0+, openshift 4.14.0-exp)
    Allow specifying user password hash (openshift 4.13.0+)
    Stabilize Fedora CoreOS spec 1.5.0, targeting Ignition spec 3.4.0
    Stabilize Flatcar spec 1.1.0, targeting Ignition spec 3.4.0
    Stabilize OpenShift spec 4.13.0, targeting Ignition spec 3.2.0
    Stabilize RHEL for Edge spec 1.1.0, targeting Ignition spec 3.4.0
    Add Fedora CoreOS spec 1.6.0-experimental, targeting Ignition spec
    3.5.0-experimental
    Add Flatcar spec 1.2.0-experimental, targeting Ignition spec
    3.5.0-experimental
    Add OpenShift spec 4.14.0-experimental, targeting Ignition spec
    3.5.0-experimental
    Add RHEL for Edge spec 1.2.0-experimental, targeting Ignition spec
    3.5.0-experimental
  Bug fixes
    Use systemd default dependencies in mount units for Tang-backed LUKS volumes
    Allow setting storage.trees.local to the --files-dir directory
  Misc. changes
    Roll back to Ignition spec 3.2.0 (openshift 4.13.0)
    Drop extensions section (fcos 1.5.0+, openshift 4.13.0+)
    Drop LuksOption and RaidOption types (Go API for fcos 1.5.0+,
    flatcar 1.1.0+, openshift 4.14.0-experimental)
    Require Go 1.18+
  Docs changes
    Document that hash fields describe decompressed data
    Clarify spec docs for files/luks hash fields
    Document SSH key file path used by OpenShift 4.13+ (openshift)
    Document command to generate GRUB password hashes</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1705752000">- update to version 0.19.0
  * Spec implementations require a FieldFilters() method
  * Reports from Unvalidated functions can now include json paths
  * Add -c/--check option to check config without producing output
  * Warn if config attempts to reuse partition by label
  * Require storage.filesystems.path to start with /etc or /var if
    with_mount_unit is true
  * Stabilize OpenShift spec 4.14.0, targeting Ignition spec 3.4.0
  * Add OpenShift spec 4.15.0-experimental, targeting Ignition spec
    3.5.0-experimental
  * Fix line/column reporting for http_headers errors
  * Fix line/column reporting for unsupported field errors
  * Add error structs for YAML unmarshal errors, unknown config versions
  * Roll back to Ignition spec 3.4.0
  * Various documentation improvements</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1708344000">- clean up the install step, so less commands are used
- update to version 0.20.0
  * Support s390x layouts in boot_device section
  * Stabilize OpenShift spec 4.15.0, targeting Ignition spec 3.4.0
  * Add OpenShift spec 4.16.0-experimental, targeting Ignition spec
    3.5.0-experimental
  * Require Go 1.20+</changelog>
  <changelog author="Frantisek Simorda &lt;frantisek.simorda@suse.com&gt;" date="1720612800">- Update to 0.21.0
  * Support storage.luks.clevis (flatcar 1.2.0-exp)
  * Stabilize OpenShift spec 4.16.0, targeting Ignition spec 3.4.0
  * Add OpenShift spec 4.17.0-experimental, targeting Ignition spec
  * 3.5.0-experimental</changelog>
</package>
<package pkgid="c6d92c39f18a6cfdd906d05448b60f94d4dc72cc362379f97ba105f446149e2172e2a106e8095c9d0f7293aa89838cec032829363d4bfe11c0db151a495db3ca" name="bvi" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="bp160.1.13"/>
  <changelog author="Dominique Leuenberger &lt;dominique-rpm@leuenberger.net&gt;" date="1161345600">- Initial release of 1.3.2 in the BuildService</changelog>
  <changelog author="mpluskal@suse.com" date="1462449600">- Update to 1.4.0
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="aloisio@gmx.com" date="1488801600">- Use GPL-2.0+ license</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1575115200">- Update to 1.4.1
  * Compile warning: implicit declaration of function ‘save_chk’
  * fixed bmore seg fault on file not found
  * set columns prevents filename display on the commandline
  * bmore new option -r
  * bvi new setting: set reverse
  * Characters between 160 - 254 are displayed as "reverse video
    text" as used in some legacy systems (Atari, Commodore,
    Apple II, etc).
  * castings fixed in comm.c
- cleanup with spec-cleaner</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1681646400">- update to 1.4.2:
  * :wq bug fixed
  * Error-message if input no terminal
  * Mixed licenses (SF bug #10)
  * Segmentation fault occurs on undo (SF bug #11)
  * Segmentation fault occurs on substitution in 32-bit systems
  * ncursesw support
  * Handling inputs larger than 2^31 bytes (SF bug #13)
  * Some incorrect function prototypes in ANSI mode fixed (SF bug
  * Minor fixes</changelog>
</package>
<package pkgid="eeb162d95cc58fe11f7421046f952043ae1fb3242f5b41691704bf8a783c9abe8d885c0a706d2d572b96d7a71b6e53dac3a8ca472ee357ff19a2f39c457ca926" name="byacc" arch="x86_64">
  <version epoch="0" ver="20240109" rel="bp160.1.13"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620475200">- update to 20210328:
  * reader.c: ignore bison's "%empty" extension
  * reader.c, defs.h:
    %debug was a trivial bison "extension", mark it as such
  * yacc.1: use italics in a few places where bold was inappropriate
  * reader.c:
    add union tag to YYSTYPE structure for compatibility with a feature which
    bison copied from Solaris yacc (request by Ella Stanforth)
  * closure.c, warshall.c:
    fix undefined-behavior diagnosed with gcc -fsanitize=undefined (report by
    Alexander Richardson)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1627387200">- update to 20210619:
  * btyaccpar.skel, yaccpar.skel: cancel unused assignments
  * output.c: fix gcc warning
  * test/run_test.sh, test/run_lint.sh, test/run_make.sh:
    shellcheck-warnings
  * test/run_test.sh: changes suggested at
    https://github.com/jannick0/byacc-snapshots/tree/YYINT-fix-20210520
  * autotools update</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1634385600">- update to 20210808:
  * main.c: account for a memory-leak
  * fix memory-leak when replacing $$'s in destructor code
  * main.c, yacc.1: add "-h" option
  * line number reporting fixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1656158400">- update to 20220128:
  * change a few malloc's to calloc's so clang analyzer can see initialized data
  * modify address computation in closure.c to avoid undefined behavior on
    machines which do not support large offsets (analysis/patch by Jessica Clarke,
    cf: 2014-09-17)
  * testsuite and autotools/build script fixes</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 20221106:
  * test/run_test.sh: use context diff, to work with AIX
  * defs.h:
    fprintf_lineno might be passed a null, when reading from stdin - show "(null)"
  * makefile.in, test/run_make.sh, test/run_test.sh, test/run_lint.sh:
    fgrep-fixes
  * yacc.1: mention use of stderr/stdout for usage/debugging
  * yacc.1: document %empty
  * yacc.1: document %debug
  * yacc.1: minor fixes with check-manpage</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 20221229:
  * autoconf update
  * configure.in:
    correct help-message for --disable-btyacc option, and fix the reporting of
    the selected option value in the configure script's output</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1676635200">- update to 20230201:
  * configure.in: initialize $ac_includes_default
  * aclocal.m4: resync with my-autoconf</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678190400">- update to 20230219:
  * maintenance updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 20230521:
  * error.c, defs.h, reader.c:
    allow @1 or $@ with a warning if no %locations was given
  * reader.c: clear pointer in end_ainfo() after freeing it.
  * reader.c: report errors in %define as "unexpected value"
    add/use macros begin_ainfo() and end_ainfo() to reduce clutter
  * defs.h, error.c: add function unexpected_value()
  * add %nterm as an alias for %type, since bison made that confusion.
  * reader.c:
    ensure that filler_buf and prefix_buf are initialized for the special case
    where they are empty (report by Martin Jansa, cf: 20230219)
  * output.c:
    make test-differences smaller when compiling with YY_NO_LEAKS by replacing
    a blank line with the generated #define rather than adding 3 lines.
  * reader.c:
    correct a use-after-free in more_curly, which could occur if a %lex-param
    or %parse-param was multi-line (Redhat #2183006).
  * main.c: rename no_space() to on_error()
  * error.c: rename no_space() to no_error(), handling any errno
  * defs.h: rename no_space() to on_error()</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710676800">- update to 20240109:
  * maintenance updates</changelog>
</package>
<package pkgid="0eadc6ca247680b800998b174e72eb6095915b5dd8a86369952119321d60ff8f6eb44d8f0729f057999126814438c7477093ed0b950ce1b4e0b47fc88259f59b" name="byaccj" arch="x86_64">
  <version epoch="0" ver="1.15" rel="160000.2.2"/>
  <changelog author="mvyskocil@suse.cz" date="1240660800">- created package</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Build with $RPM_OPT_FLAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1612353600">- Update the spec file
  * Simplify the docs installation
  * Remove mac and arch specifics</changelog>
  <changelog author="pmonreal@suse.com" date="1612353601">- Update to 1.15
  * Fix: stack corruption when generating a java parser
  * Fix: Targets with empty right-hand side problematic in Java mode</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Define %%make_build for systems that don't have it defined in
  rpm macros</changelog>
  <changelog author="fstrba@suse.com" date="1710849600">- Added patch:
  * byaccj-gcc14.patch
    + add missing include to fix build with gcc 14 (bsc#1221696)</changelog>
</package>
<package pkgid="2e91ff15fb5b291151a5f6afd10540600e72e99a736b5038799852dc8b90146a6938f22580370a0906b4b7c213ccb4d7b6fbe2d6c342f5441b6881a385b071a2" name="byaccj" arch="x86_64">
  <version epoch="0" ver="1.15" rel="160000.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1240660800">- created package</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="schwab@suse.de" date="1389096000">- Build with $RPM_OPT_FLAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1612353600">- Update the spec file
  * Simplify the docs installation
  * Remove mac and arch specifics</changelog>
  <changelog author="pmonreal@suse.com" date="1612353601">- Update to 1.15
  * Fix: stack corruption when generating a java parser
  * Fix: Targets with empty right-hand side problematic in Java mode</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Define %%make_build for systems that don't have it defined in
  rpm macros</changelog>
  <changelog author="fstrba@suse.com" date="1710849600">- Added patch:
  * byaccj-gcc14.patch
    + add missing include to fix build with gcc 14 (bsc#1221696)</changelog>
  <changelog author="hsk17@mail.de" date="1744027200">- add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to
  still allow build on SLE / Leap 15</changelog>
</package>
<package pkgid="e96cd3c1f57bff2eb5ce811c3faecd868b4b1e56880463a2d77395c2db9dbbfe3cae1c8e3f19891bf8b607d29b35b41e8244dc248d34b5a55d41ab0603f0269e" name="byobu" arch="noarch">
  <version epoch="0" ver="6.12" rel="bp160.1.11"/>
  <changelog author="tejas.guruswamy@opensuse.org" date="1534161600">- update to 5.127. key changes:
  * usr/share/byobu/profiles/bashrc:
  - Googley PS1 for non-Ubuntu distros
  * usr/lib/byobu/include/shutil, usr/lib/byobu/Makefile.am,
    usr/lib/byobu/rcs_cost, usr/share/byobu/status/status,
    usr/share/man/man1/byobu.1,
    usr/lib/byobu/ec2_cost,
    usr/lib/byobu/include/ec2instancespricing.py,
    usr/lib/byobu/include/Makefile.am, usr/lib/byobu/include/shutil,
    usr/lib/byobu/Makefile.am, usr/share/byobu/status/status,
    usr/share/man/man1/byobu.1,
  * usr/bin/byobu-janitor.in:
  - deprecate unmaintained ec2/rcs pricing functionality
  - this never really worked well, and these prices are constantly changing
  - clear out stale status cache
  * debian/control, usr/lib/byobu/ip_address, usr/lib/byobu/network,
    usr/share/man/man1/wifi-status.1: LP: #1748956
  - switch entirely to iproute2, away from net-tools and ifconfig
  - only remaining ifconfig is fall-back logic, in case /sbin/ip is
    not found
  * usr/bin/byobu-select-profile.in, usr/share/man/man1/byobu-select-
    profile.1: LP: #1717746
  - deprecate interactive mode for byobu-select-profile
  * usr/lib/byobu/include/toggle-utf8.in: LP: #1696546
  - try to support zsh and other shells in addition to bash
  * usr/share/byobu/profiles/bashrc:
  - fix missing bash 256 ps1 colors
  * usr/lib/byobu/include/constants, usr/share/byobu/keybindings/f-
    keys.screen, usr/share/byobu/keybindings/f-keys.tmux:
  - create a $BYOBU_EDITOR variable, using "sensible-editor" if found
    (it will be on Debian/Ubuntu systems), or $EDITOR if not, and falling
    back to "vim" in the case where none are found
  - use $BYOBU_EDITOR with Shift-F7 to open the printscreen buffer in
    a new window;  this fixes a bug on some distros where $EDITOR might
    be undefined
  * usr/lib/byobu/session:
  - don't count sessions that start with _ BUG: #892489
  * usr/lib/byobu/updates_available:
  - Fix rare race condition for update_needed and cache file (#26)
  - https://github.com/dustinkirkland/byobu/pull/26
  * byobu.desktop:
  - give some hints for GNOME Shell to correctly match byobu desktop file
    (LP: #1718482); partial fix, not entirely working yet</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1547553600">- Require python3-newt, fixes bsc#1121502</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1566648000">- Update to 5.129
  + see https://bazaar.launchpad.net/~kirkland/byobu/trunk/view/head:/debian/changelog</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1580817600">- Update to 5.130
  * usr/lib/byobu/logo:
  - add Raspbian colors / logo
  * usr/lib/byobu/include/select-session.py:
  - Force UTF-8 when attaching in `select-session.py`
  * debian/rules:
  - ignore new pep8 rules around hard tabs and whitespaces, related
    to bug 1843729
  * AUTHORS, CONTRIBUTING, NEWS, README, README.md:
  - Flatten these files into a single README.md
  - Minor updates in the process
- Remove unnecessary python-devel BuildRequires.
- Replace shebang for two env-using scripts.</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1581854400">- Update to 5.131
  * debian/control: Closes: #949941
  - build-depend on python3-pep8, rather than pep8 transitional package
  * usr/lib/byobu/disk:
  - change disk status to white on darker magenta/purple, helps with
    readability on some terminals
  * usr/lib/byobu/include/select-session.py: LP: #1750430
  - commit edeae41 fixed the excessive creation of sessions by not
    creating different sessions. This commit adjust the behavior in a way
    that having .reuse-sessions enabled tmux will properly attach and remove
    sessions when dettaching and will also kill the last session available
  - When more than two sessions exist, tmux asks which session to use
  * usr/share/byobu/keybindings/f-keys.tmux: LP: #1861555
  - Update usage of tmux swap-window so that focus stays with the
    original window.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1585483200">- update to version 5.133:
  * debian/docs: Closes: #951455
  - fix FTBFS on README
  byobu (5.132-0ubuntu1) focal; urgency=medium
  * debian/control, debian/rules:
  - pep8 binary is gone from Debian, disable for now</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1598702400">- Fix build after libexec change in distribution</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1704888000">- Update to version 6.5:
  * Move sources to GitHub (https://github.com/dustinkirkland/byobu)
  * usr/share/byobu/profiles/bashrc:
  - drop debian chroot from wolfi ps1
  - drastically simplify the conditional logic
  * usr/bin/byobu-shell.in:
  - need a -l login shell to source profiles and colorize PS1
  * usr/lib/byobu/packages:
  - add missing trailing whitespace
  * usr/bin/byobu-janitor.in:
  - enable colorized prompt for Wolfi ash shells
  * usr/bin/byobu-janitor.in, usr/share/byobu/status/status:
  - within Wolfi, default to our 2nd status line
  * usr/lib/byobu/updates_available:
  - silence apk update
  * usr/share/byobu/profiles/bashrc:
  - support ash for colorized prompt
  * add a package count status item, useful for minimal containers
  * added support for apk / Wolfi in updates_available
  * added a status line customized for containers
  * add wolfi color schemed PS1 prompt
  * usr/lib/byobu/include/shutil:
  - fix distro getting from /etc/os-release
  * usr/lib/byobu/disk:
  - drop the -P from df which is breaking MacOS
    not sure where this came from
  * byobu.txt, usr/bin/whats-my-public-ip,
    usr/share/byobu/pixmaps/byobu_backup.svg:
  - copy over a couple of missing changes from bzr to git
  * debian/control, debian/copyright, README.md, usr/bin/byobu-
    export.in, usr/share/man/man1/byobu-export.1:
  - moving upstream Byobu from Launchpad.net to Github.com
  * README.md:
  - bumped date
  * usr/bin/byobu-select-profile.in: LP: #1828296
  - add missing listprofiles logic
  * usr/lib/byobu/include/select-session.py:
  - fix inverted logic on session reuse
  * usr/lib/byobu/logo:
  - added a logo for Wolfi
  * usr/lib/byobu/include/shutil, usr/lib/byobu/release:
  - Wolfi doesn't really have versions, so just use the distro
    name rather than version id</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1717848000">- Update to version 6.12
  * usr/share/byobu/profiles/bashrc:
  - export PS1
  * usr/bin/byobu-janitor.in:
  - add byobu prompt to .bashrc in Wolfi
  * usr/share/byobu/profiles/bashrc, usr/share/man/man1/byobu-prompt.1:
  - add a bash timer, that shows the runtime of the previous command
    at the beginning of the prompt
  * usr/bin/byobu.in:
  - if we're in a busybox/ash shell, but real bash is available, use bash
  * usr/share/byobu/keybindings/f-keys.tmux:
  - have F1 pull up the keybindings text
  * usr/share/byobu/profiles/bashrc:
  - fix timer string logic
  * usr/share/byobu/profiles/bashrc:
  - fix BYOBU_RUN_DIR and BYOBU_PREFIX issue
  - https://github.com/dustinkirkland/byobu/pull/62
  - https://launchpad.net/bugs/2051995 LP: #2051995
  * usr/bin/byobu-launcher-install.in:
  - Fix for VSCode, fish and byobu installations
  - https://github.com/dustinkirkland/byobu/commit/f917d2169afdec623f5b32723d93bfd91d34b92f#commitcomment-137955113
  * usr/lib/byobu/updates_available:
  - added support for dnf package manager
  - https://code.launchpad.net/~sanjay-ankur/byobu/byobu/+merge/415959
  * usr/share/byobu/profiles/bashrc:
  - added git branch to bash ps1 prompt</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1736856000">- Remove Requires on snack, this removes sound support.</changelog>
</package>
<package pkgid="1d6cf5ffc908f99debf5c48a8fa447330b65dd7d475041ea0cb2a26c08bdc0c04023e9c4591da8bbeae1bef8a94abcc7a63443994e0a4f20d1fb772d6bcc22ad" name="byobu-doc" arch="noarch">
  <version epoch="0" ver="6.12" rel="bp160.1.11"/>
  <changelog author="tejas.guruswamy@opensuse.org" date="1534161600">- update to 5.127. key changes:
  * usr/share/byobu/profiles/bashrc:
  - Googley PS1 for non-Ubuntu distros
  * usr/lib/byobu/include/shutil, usr/lib/byobu/Makefile.am,
    usr/lib/byobu/rcs_cost, usr/share/byobu/status/status,
    usr/share/man/man1/byobu.1,
    usr/lib/byobu/ec2_cost,
    usr/lib/byobu/include/ec2instancespricing.py,
    usr/lib/byobu/include/Makefile.am, usr/lib/byobu/include/shutil,
    usr/lib/byobu/Makefile.am, usr/share/byobu/status/status,
    usr/share/man/man1/byobu.1,
  * usr/bin/byobu-janitor.in:
  - deprecate unmaintained ec2/rcs pricing functionality
  - this never really worked well, and these prices are constantly changing
  - clear out stale status cache
  * debian/control, usr/lib/byobu/ip_address, usr/lib/byobu/network,
    usr/share/man/man1/wifi-status.1: LP: #1748956
  - switch entirely to iproute2, away from net-tools and ifconfig
  - only remaining ifconfig is fall-back logic, in case /sbin/ip is
    not found
  * usr/bin/byobu-select-profile.in, usr/share/man/man1/byobu-select-
    profile.1: LP: #1717746
  - deprecate interactive mode for byobu-select-profile
  * usr/lib/byobu/include/toggle-utf8.in: LP: #1696546
  - try to support zsh and other shells in addition to bash
  * usr/share/byobu/profiles/bashrc:
  - fix missing bash 256 ps1 colors
  * usr/lib/byobu/include/constants, usr/share/byobu/keybindings/f-
    keys.screen, usr/share/byobu/keybindings/f-keys.tmux:
  - create a $BYOBU_EDITOR variable, using "sensible-editor" if found
    (it will be on Debian/Ubuntu systems), or $EDITOR if not, and falling
    back to "vim" in the case where none are found
  - use $BYOBU_EDITOR with Shift-F7 to open the printscreen buffer in
    a new window;  this fixes a bug on some distros where $EDITOR might
    be undefined
  * usr/lib/byobu/session:
  - don't count sessions that start with _ BUG: #892489
  * usr/lib/byobu/updates_available:
  - Fix rare race condition for update_needed and cache file (#26)
  - https://github.com/dustinkirkland/byobu/pull/26
  * byobu.desktop:
  - give some hints for GNOME Shell to correctly match byobu desktop file
    (LP: #1718482); partial fix, not entirely working yet</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1547553600">- Require python3-newt, fixes bsc#1121502</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1566648000">- Update to 5.129
  + see https://bazaar.launchpad.net/~kirkland/byobu/trunk/view/head:/debian/changelog</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1580817600">- Update to 5.130
  * usr/lib/byobu/logo:
  - add Raspbian colors / logo
  * usr/lib/byobu/include/select-session.py:
  - Force UTF-8 when attaching in `select-session.py`
  * debian/rules:
  - ignore new pep8 rules around hard tabs and whitespaces, related
    to bug 1843729
  * AUTHORS, CONTRIBUTING, NEWS, README, README.md:
  - Flatten these files into a single README.md
  - Minor updates in the process
- Remove unnecessary python-devel BuildRequires.
- Replace shebang for two env-using scripts.</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1581854400">- Update to 5.131
  * debian/control: Closes: #949941
  - build-depend on python3-pep8, rather than pep8 transitional package
  * usr/lib/byobu/disk:
  - change disk status to white on darker magenta/purple, helps with
    readability on some terminals
  * usr/lib/byobu/include/select-session.py: LP: #1750430
  - commit edeae41 fixed the excessive creation of sessions by not
    creating different sessions. This commit adjust the behavior in a way
    that having .reuse-sessions enabled tmux will properly attach and remove
    sessions when dettaching and will also kill the last session available
  - When more than two sessions exist, tmux asks which session to use
  * usr/share/byobu/keybindings/f-keys.tmux: LP: #1861555
  - Update usage of tmux swap-window so that focus stays with the
    original window.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1585483200">- update to version 5.133:
  * debian/docs: Closes: #951455
  - fix FTBFS on README
  byobu (5.132-0ubuntu1) focal; urgency=medium
  * debian/control, debian/rules:
  - pep8 binary is gone from Debian, disable for now</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1598702400">- Fix build after libexec change in distribution</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1704888000">- Update to version 6.5:
  * Move sources to GitHub (https://github.com/dustinkirkland/byobu)
  * usr/share/byobu/profiles/bashrc:
  - drop debian chroot from wolfi ps1
  - drastically simplify the conditional logic
  * usr/bin/byobu-shell.in:
  - need a -l login shell to source profiles and colorize PS1
  * usr/lib/byobu/packages:
  - add missing trailing whitespace
  * usr/bin/byobu-janitor.in:
  - enable colorized prompt for Wolfi ash shells
  * usr/bin/byobu-janitor.in, usr/share/byobu/status/status:
  - within Wolfi, default to our 2nd status line
  * usr/lib/byobu/updates_available:
  - silence apk update
  * usr/share/byobu/profiles/bashrc:
  - support ash for colorized prompt
  * add a package count status item, useful for minimal containers
  * added support for apk / Wolfi in updates_available
  * added a status line customized for containers
  * add wolfi color schemed PS1 prompt
  * usr/lib/byobu/include/shutil:
  - fix distro getting from /etc/os-release
  * usr/lib/byobu/disk:
  - drop the -P from df which is breaking MacOS
    not sure where this came from
  * byobu.txt, usr/bin/whats-my-public-ip,
    usr/share/byobu/pixmaps/byobu_backup.svg:
  - copy over a couple of missing changes from bzr to git
  * debian/control, debian/copyright, README.md, usr/bin/byobu-
    export.in, usr/share/man/man1/byobu-export.1:
  - moving upstream Byobu from Launchpad.net to Github.com
  * README.md:
  - bumped date
  * usr/bin/byobu-select-profile.in: LP: #1828296
  - add missing listprofiles logic
  * usr/lib/byobu/include/select-session.py:
  - fix inverted logic on session reuse
  * usr/lib/byobu/logo:
  - added a logo for Wolfi
  * usr/lib/byobu/include/shutil, usr/lib/byobu/release:
  - Wolfi doesn't really have versions, so just use the distro
    name rather than version id</changelog>
  <changelog author="Tejas Guruswamy &lt;tejas.guruswamy@opensuse.org&gt;" date="1717848000">- Update to version 6.12
  * usr/share/byobu/profiles/bashrc:
  - export PS1
  * usr/bin/byobu-janitor.in:
  - add byobu prompt to .bashrc in Wolfi
  * usr/share/byobu/profiles/bashrc, usr/share/man/man1/byobu-prompt.1:
  - add a bash timer, that shows the runtime of the previous command
    at the beginning of the prompt
  * usr/bin/byobu.in:
  - if we're in a busybox/ash shell, but real bash is available, use bash
  * usr/share/byobu/keybindings/f-keys.tmux:
  - have F1 pull up the keybindings text
  * usr/share/byobu/profiles/bashrc:
  - fix timer string logic
  * usr/share/byobu/profiles/bashrc:
  - fix BYOBU_RUN_DIR and BYOBU_PREFIX issue
  - https://github.com/dustinkirkland/byobu/pull/62
  - https://launchpad.net/bugs/2051995 LP: #2051995
  * usr/bin/byobu-launcher-install.in:
  - Fix for VSCode, fish and byobu installations
  - https://github.com/dustinkirkland/byobu/commit/f917d2169afdec623f5b32723d93bfd91d34b92f#commitcomment-137955113
  * usr/lib/byobu/updates_available:
  - added support for dnf package manager
  - https://code.launchpad.net/~sanjay-ankur/byobu/byobu/+merge/415959
  * usr/share/byobu/profiles/bashrc:
  - added git branch to bash ps1 prompt</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1736856000">- Remove Requires on snack, this removes sound support.</changelog>
</package>
<package pkgid="e60a853752788471d048673ef4a67509019b313ca004742318ec0a0110955621a0e2ee612e27c2e04eb35039dd1b8b614f422f6534f2551e4290955e204bbaae" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1727352000">- Update to v1.15.3
  * Changes of v1.15.3
    + Treat multi-release class files that are newer than the
    supported version as regular resources.
    + Allow overriding the multi-release class file version from
    Maven and Gradle plugin.
    + Correctly resolve multi-release class files in Android.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1728734400">- Update to v1.15.4
  * Add non-experimental support for Java 24.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729166400">- Update to v1.15.5
  * Changes of v1.15.5
    + Publish Byte Buddy and Byte Buddy agent artifacts as
    multi-release jars to support CDS and faster validation.
- Remove Windows-specific resources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729684800">- Update to v1.15.7
  * Changes of v1.15.7
    + Additional release after time out during previous Gradle
    plugin release.
  * Changes of v1.15.6
    + Add ConstructorResolver to Super annotation for
    MethodDelegation to allow for dynamic constructor resolution.
    + Add Java 8 versions of shaded ASM to allow for faster class
    file validation and CDS support.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730548800">- Update to v1.15.8
  * Changes of v1.15.8
    + Extend ClassInjector API to support lazy resolution of class
    files.
    + Extend DynamicType API to support lazy resolution of
    auxiliary types.
    + Extend AgentBuilder.Transformer.ForAdvice to support
    injection of new classes by their name.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730635200">- Update to v1.15.10
  * Changes of v1.15.10
    + Fix Java 8 patterns for multi-release jars to avoid that
    inner classes are excluded.
  * Changes of v1.15.9
    + Additional release after time out during previous Gradle
    plugin release.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1734264000">- Update to v1.15.11
  * Changes of v1.15.11
    + Avoid dependency of CachedReturnPlugin on precompiled class
    files.
    + Add NOP instruction when Advice is used on void methods as
    those might be empty which results on a frame being written
    to the same offset, causing an exception.
    + Allow Plugin.Enging to link files instead of copying.
    + Adjust validator code to avoid compiler bug that was reported
    by multiple users.
    + Allow injection of class path as File[] to Plugin
    constructors.
    + Allow for configuring variants when using the Android Gradle
    plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
</package>
<package pkgid="561caca4be7c9539229260f655ca81fad72f10b28972a4798b89a3b131588a4b92549846a6da7c68c2b6e3bd0ca1ed2ba3a388dd2e61ddc8379b5af318c0120d" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
</package>
<package pkgid="2249628a5c8ccc53492e9b2252e569327fb80b19172483d7df96268e6640c99a37044324a235043747920a348bcc42f1c293805b5306ddf0e07650f2a4bb78b1" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
</package>
<package pkgid="f5b796ea06353bfaa9bb2a4da99b427a642a007dd468bd920d2dcb78ba2115973a55525282fe5f3c8e5ff31dc15170b277b1a9e41111cca9f59b7c840ddfd27b" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.2.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
</package>
<package pkgid="1ee9ea484fdba2d001729e61080a7691ddf655a5d4f01444b431043c857edb4ea82bbefab46b4c21c4d7ceafc5a26b535d79a0e56242dbb515e1c0ff0374dd9a" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.18.8" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
  <changelog author="fstrba@suse.com" date="1776686400">- Update to v1.18.8
  * Changes of v1.18.8
    + Improve support for repeatable builds
    + Fix reordering of exception table in type initializers when
    instrumenting
  * Changes of v1.18.7
    + Introduce new versioning concept with -jdk5 suffix for
    backwards-compatible jar and Java 8 baseline for regular jar
  * No tag v1.18.6
  * Changes of v1.18.5
    + Eagerly resolve of canonical files during attach emulation to
    avoid failure when process ends before file can be deleted
    + Add super classes to hash code / equals computation in Advice
    that were missing
  * Changes of v1.18.4
    + Add support for new build description in Android 9</changelog>
</package>
<package pkgid="e31f7c05c6760e9d33520e4b2e2a344a7598f499faf03adfdf55c6cb272b968c87b2bc806870f7cc9520407e566b0ab38bfd9751a9bbff237fe3ba98b1f40280" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1727352000">- Update to v1.15.3
  * Changes of v1.15.3
    + Treat multi-release class files that are newer than the
    supported version as regular resources.
    + Allow overriding the multi-release class file version from
    Maven and Gradle plugin.
    + Correctly resolve multi-release class files in Android.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1728734400">- Update to v1.15.4
  * Add non-experimental support for Java 24.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729166400">- Update to v1.15.5
  * Changes of v1.15.5
    + Publish Byte Buddy and Byte Buddy agent artifacts as
    multi-release jars to support CDS and faster validation.
- Remove Windows-specific resources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729684800">- Update to v1.15.7
  * Changes of v1.15.7
    + Additional release after time out during previous Gradle
    plugin release.
  * Changes of v1.15.6
    + Add ConstructorResolver to Super annotation for
    MethodDelegation to allow for dynamic constructor resolution.
    + Add Java 8 versions of shaded ASM to allow for faster class
    file validation and CDS support.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730548800">- Update to v1.15.8
  * Changes of v1.15.8
    + Extend ClassInjector API to support lazy resolution of class
    files.
    + Extend DynamicType API to support lazy resolution of
    auxiliary types.
    + Extend AgentBuilder.Transformer.ForAdvice to support
    injection of new classes by their name.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730635200">- Update to v1.15.10
  * Changes of v1.15.10
    + Fix Java 8 patterns for multi-release jars to avoid that
    inner classes are excluded.
  * Changes of v1.15.9
    + Additional release after time out during previous Gradle
    plugin release.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1734264000">- Update to v1.15.11
  * Changes of v1.15.11
    + Avoid dependency of CachedReturnPlugin on precompiled class
    files.
    + Add NOP instruction when Advice is used on void methods as
    those might be empty which results on a frame being written
    to the same offset, causing an exception.
    + Allow Plugin.Enging to link files instead of copying.
    + Adjust validator code to avoid compiler bug that was reported
    by multiple users.
    + Allow injection of class path as File[] to Plugin
    constructors.
    + Allow for configuring variants when using the Android Gradle
    plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
</package>
<package pkgid="c81360d69c41a863f5dd9c004efc0c7fff661b412e86eaf3c88694cc3d4e3b391269fbc5986670cbb62969582c1bdb18dd59c42c403b8e14bf7aacbe4e7acf78" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
</package>
<package pkgid="c7fbfbb85ff3016b4f4fa88354ec69d1b69bd708e6cf366a045e94ec90c39e9dddf4373f923bb5b9582125b44eda3c2dd4f337ba123e276462dda20174379a63" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
</package>
<package pkgid="8e221031b309e6ef1b211cc2659d416b96f5dd13f94b3f8f3ba2c89f8efd922756511a0effa50f957c50d30e3c29b48a2658f8497f1486b56569ce66be6922d4" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.2.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
</package>
<package pkgid="9a40c2914536ae6b4a4958fdfa60634066489622c86994b19ec02f7131e55beda27e29f3a8b8a68267ea994c88798b19eb1d0657a638dba6ab1a0ec6d4d3786a" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.18.8" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
  <changelog author="fstrba@suse.com" date="1776686400">- Update to v1.18.8
  * Changes of v1.18.8
    + Improve support for repeatable builds
    + Fix reordering of exception table in type initializers when
    instrumenting
  * Changes of v1.18.7
    + Introduce new versioning concept with -jdk5 suffix for
    backwards-compatible jar and Java 8 baseline for regular jar
  * No tag v1.18.6
  * Changes of v1.18.5
    + Eagerly resolve of canonical files during attach emulation to
    avoid failure when process ends before file can be deleted
    + Add super classes to hash code / equals computation in Advice
    that were missing
  * Changes of v1.18.4
    + Add support for new build description in Android 9</changelog>
</package>
<package pkgid="11e9971af9de3c9c36a2d830945b9b14b88a8e4ffc109e139559d3e7e319b15561d3f2571516cc8d5d42f3e6e897f2900fcee06818cb7359e02375d1089aebc2" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1727352000">- Update to v1.15.3
  * Changes of v1.15.3
    + Treat multi-release class files that are newer than the
    supported version as regular resources.
    + Allow overriding the multi-release class file version from
    Maven and Gradle plugin.
    + Correctly resolve multi-release class files in Android.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1728734400">- Update to v1.15.4
  * Add non-experimental support for Java 24.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729166400">- Update to v1.15.5
  * Changes of v1.15.5
    + Publish Byte Buddy and Byte Buddy agent artifacts as
    multi-release jars to support CDS and faster validation.
- Remove Windows-specific resources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729684800">- Update to v1.15.7
  * Changes of v1.15.7
    + Additional release after time out during previous Gradle
    plugin release.
  * Changes of v1.15.6
    + Add ConstructorResolver to Super annotation for
    MethodDelegation to allow for dynamic constructor resolution.
    + Add Java 8 versions of shaded ASM to allow for faster class
    file validation and CDS support.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730548800">- Update to v1.15.8
  * Changes of v1.15.8
    + Extend ClassInjector API to support lazy resolution of class
    files.
    + Extend DynamicType API to support lazy resolution of
    auxiliary types.
    + Extend AgentBuilder.Transformer.ForAdvice to support
    injection of new classes by their name.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730635200">- Update to v1.15.10
  * Changes of v1.15.10
    + Fix Java 8 patterns for multi-release jars to avoid that
    inner classes are excluded.
  * Changes of v1.15.9
    + Additional release after time out during previous Gradle
    plugin release.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1734264000">- Update to v1.15.11
  * Changes of v1.15.11
    + Avoid dependency of CachedReturnPlugin on precompiled class
    files.
    + Add NOP instruction when Advice is used on void methods as
    those might be empty which results on a frame being written
    to the same offset, causing an exception.
    + Allow Plugin.Enging to link files instead of copying.
    + Adjust validator code to avoid compiler bug that was reported
    by multiple users.
    + Allow injection of class path as File[] to Plugin
    constructors.
    + Allow for configuring variants when using the Android Gradle
    plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
</package>
<package pkgid="e1e90f84718df3a163edc34a22ba8a5fcbde2d02f7094129a2ba4333f3dc45dd69eb22fa1d4064ff1c40c17d4c16ee71f6e23f3c2472b23ea7776a23c8b0fbfb" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
</package>
<package pkgid="84def3409742055633c65193129cadd1e498fd467da087b86c3e056415ca76b97a3eaa316af7da0e9ea904799e81c3d0367d96626a6d7a85f433a44f85494a74" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
</package>
<package pkgid="282a93b5168d262afa25f643faa88c5e316d52f44b4580d3a38ce1065bf81bdc8e3e1fb9aa4d4dbe9ed193b9a15c2b46afd83d11d6abaa159cc32c079b291d01" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.2.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
</package>
<package pkgid="221f8db2c9251a153fcee07cac5d78215da068943d4527dbc3c575b6adf602b1fe1a39dec3b19cb4e00e219b978e08b6d8619f1d9383b4c1a42087e05473347d" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.18.8" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
  <changelog author="fstrba@suse.com" date="1776686400">- Update to v1.18.8
  * Changes of v1.18.8
    + Improve support for repeatable builds
    + Fix reordering of exception table in type initializers when
    instrumenting
  * Changes of v1.18.7
    + Introduce new versioning concept with -jdk5 suffix for
    backwards-compatible jar and Java 8 baseline for regular jar
  * No tag v1.18.6
  * Changes of v1.18.5
    + Eagerly resolve of canonical files during attach emulation to
    avoid failure when process ends before file can be deleted
    + Add super classes to hash code / equals computation in Advice
    that were missing
  * Changes of v1.18.4
    + Add support for new build description in Android 9</changelog>
</package>
<package pkgid="aa4de781304f415f5ddc68055fe12fc6f87024c881afac8b4048d9b79c143d2f6e453f9be397df75f0f4fa170edff3f5597ddf58b8b65f17dc3d448d9b1b65f6" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="160000.2.2"/>
  <changelog author="shvetz.anton@gmail.com" date="1727352000">- Update to v1.15.3
  * Changes of v1.15.3
    + Treat multi-release class files that are newer than the
    supported version as regular resources.
    + Allow overriding the multi-release class file version from
    Maven and Gradle plugin.
    + Correctly resolve multi-release class files in Android.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1728734400">- Update to v1.15.4
  * Add non-experimental support for Java 24.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729166400">- Update to v1.15.5
  * Changes of v1.15.5
    + Publish Byte Buddy and Byte Buddy agent artifacts as
    multi-release jars to support CDS and faster validation.
- Remove Windows-specific resources</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1729684800">- Update to v1.15.7
  * Changes of v1.15.7
    + Additional release after time out during previous Gradle
    plugin release.
  * Changes of v1.15.6
    + Add ConstructorResolver to Super annotation for
    MethodDelegation to allow for dynamic constructor resolution.
    + Add Java 8 versions of shaded ASM to allow for faster class
    file validation and CDS support.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730548800">- Update to v1.15.8
  * Changes of v1.15.8
    + Extend ClassInjector API to support lazy resolution of class
    files.
    + Extend DynamicType API to support lazy resolution of
    auxiliary types.
    + Extend AgentBuilder.Transformer.ForAdvice to support
    injection of new classes by their name.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1730635200">- Update to v1.15.10
  * Changes of v1.15.10
    + Fix Java 8 patterns for multi-release jars to avoid that
    inner classes are excluded.
  * Changes of v1.15.9
    + Additional release after time out during previous Gradle
    plugin release.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1734264000">- Update to v1.15.11
  * Changes of v1.15.11
    + Avoid dependency of CachedReturnPlugin on precompiled class
    files.
    + Add NOP instruction when Advice is used on void methods as
    those might be empty which results on a frame being written
    to the same offset, causing an exception.
    + Allow Plugin.Enging to link files instead of copying.
    + Adjust validator code to avoid compiler bug that was reported
    by multiple users.
    + Allow injection of class path as File[] to Plugin
    constructors.
    + Allow for configuring variants when using the Android Gradle
    plugin.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
</package>
<package pkgid="b5bb6772865f7741dfcbb247a4783bf6799b8b387226931f4049756a240e355b6555fbc638b75e3956ed7c0fabe9baaabc502e60ac5b328780975bd54326c0e0" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1737201600">- Update to v1.16.0
  * Changes of v1.16.0
    + Allow for erasure of types of bootstrapped methods in Advice
    within instrumented class.
    + Rework Advice post-processing to allow for erasure of
    bootstrapped methods.
    + Fix missing application of hashCode/equals plugin for Java 8
    code.
    + Include support for JDK Class File API.
    + Allow Plugin.Engine to retain folders.
- Rebase/update patch:
  * 0001-Avoid-bundling-asm.patch</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1737288000">- Update to v1.16.1
  * Changes of v1.16.1
    + Correct reflective activation of Class File API.
    + Reject array descriptors that are not well-formed in
    TypePool.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1738152000">- Update to v1.17.0
  * Changes of v1.17.0
    + Assure that implicit choice for class reader and class writer
    are always symmetric with regard to internal representation.
    + Retrofit MemberSubstitution to also allow for intercepting
    invokedynamic instructions.
    + Introduce @Handle annotations to allow for injecting constant
    pool-stored method handle in Advice, MemberSubstitution and
    MethodDelegation.
    + Introduce @DynamicConstant annotations to allow for injecting
    constant pool-stored dynamic constants in Advice,
    MemberSubstitution and MethodDelegation.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
</package>
<package pkgid="97ffe2af04c9184c8a66569bd97fb8c9f94aef19b4385eeef0d8633104d14686a6f606da86fa79c983be71fd1f7c6a907bc42ae0161fb4031085c1a9d574f819" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1739534400">- Update to v1.17.1
  * Changes of v1.17.1
    + Fix bug in MemberSubstitution were argument indices were
    resolved by one digit off.
    + Update Class File API integration to avoid that parameter
    annotations are lost.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
</package>
<package pkgid="befb638e054175a79282925653fa255577743db6ff9aca149d640dd7357beb11bbc1600c04f62a3f0071ba7238c9af12220723ae3aaa7de4bf918e967bbf4f01" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.18.3" rel="160000.2.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1741089600">- Update to v1.17.2
  * Changes of v1.17.2
    + Update Class File API integration to include support for
    several omitted byte codes.
    + Adjust attach API emulation for OpenJ9 to not create
    subfolder if temporary folder is set explicitly.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
</package>
<package pkgid="fa211714032f36485d56142b59eda7e0022c0bf2dd1a67b66b580683623701145d2d5ac43cc52497144270197c95b2a37e767fb73b63d369c781a52faa788414" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.18.8" rel="160000.1.1"/>
  <changelog author="shvetz.anton@gmail.com" date="1742644800">- Update to v1.17.3
  * Changes of v1.17.3
    + Fix bug in ASM to Class File API bridge handling tableswitch
    instructions.
    + Add plugin for adding SafeVarargs annotations.
    + Further generify MemberSubstitution API.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1742817600">- Update to v1.17.4
  * Changes of v1.17.4
    + Add SafeVarargs plugin.
    + Fix OSGi declaration for byte-buddy-agent.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1743595200">- Update to v1.17.5
  * Changes of v1.17.5
    + Update ASM to version 9.8 to support Java 25 using ASM reader
    and writer.
    + Include AnnotationRemoval visitor for removing or replacing
    annotations.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1750075200">- Update to v1.17.6
  * Changes of v1.17.6
    + Add convenience wrapper for ResettableClassFileTransformer
    that implicitly delegates to correct transformer method.
    + Add filter for deduplicate fields and methods in class file.
    + Add missing static requirement of Spotbugs annotations to
    module descriptors.
    + Add LazinessMode for TypePool and add convenience support to
    AgentBuilder.
    + Fix source jars for multi-version release to contain
    duplicated source.</changelog>
  <changelog author="fstrba@suse.com" date="1750680000">- Fix build with maven 4</changelog>
  <changelog author="fstrba@suse.com" date="1763726400">- Require for build objectweb-asm &gt;= 9.8 for Opcodes.V25</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1763985600">- Update to v1.18.1
  * Changes of v1.18.1
    + Fix generated module-info to include new package.
  * Changes of v1.18.0
    + Add support for module-info class files and
    ModuleDescriptions.
    + Allow for manipulating module information using the ByteBuddy
    API.
  * Changes of v1.17.8
    + Avoid use of types that are deprecated as of Java 26.
    + Include ASM 9.9 that offers ASM support for Java 26.
    + Make sure that generated code internal to Byte Buddy supports
    CDS if available.
    + Update version of ASM to JDK Class File API bridge to fix
    some minor bugs related to type annotations.
  * Changes of v1.17.7
    + Specify correct JVM environment for Android builds when using
    the Gradle plugin.
    + Avoid recomputing the size of a parameter list for
    performance reasons after measuring the significant impact.
    + Correct validation of JVM names to avoid breaking when Java
    names are not allowed while JVM names are, with Kotlin and
    others.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1766145600">- Update to v1.18.3
  * Changes of v1.18.3
    + Avoid using Class File API when Byte Buddy is loaded on the
    boot loader where multi-release jars are not available.
    + Add additional safety when processing class files with
    illegally formed parameters.
    + Update to latest ASM.
  * Changes of v1.18.2
    + Support modifiers for value classes in Valhalla builds.
    + Improve use of build cache in Gradle.</changelog>
  <changelog author="fstrba@suse.com" date="1771416000">- Removed patch:
  * 0001-Avoid-bundling-asm.patch
    + needed for migration of uyuni to hibernate 7 which imports the
    shaded asm classes</changelog>
  <changelog author="fstrba@suse.com" date="1776686400">- Update to v1.18.8
  * Changes of v1.18.8
    + Improve support for repeatable builds
    + Fix reordering of exception table in type initializers when
    instrumenting
  * Changes of v1.18.7
    + Introduce new versioning concept with -jdk5 suffix for
    backwards-compatible jar and Java 8 baseline for regular jar
  * No tag v1.18.6
  * Changes of v1.18.5
    + Eagerly resolve of canonical files during attach emulation to
    avoid failure when process ends before file can be deleted
    + Add super classes to hash code / equals computation in Advice
    that were missing
  * Changes of v1.18.4
    + Add support for new build description in Android 9</changelog>
</package>
<package pkgid="79cf419fcf3cc5e866376ac1282761b8c67ea3c79b5c2a667efa471cfbd4dfe1d4a49f5b4b53624d0375d16067c83a72dc5319335b21838105c33d51a2cd700e" name="bytelist" arch="noarch">
  <version epoch="0" ver="1.0.15" rel="bp160.1.12"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 1.0.12
  + No changelog available
- Clean-up specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Spec-cleanify for factory update :)</changelog>
  <changelog author="p.drouand@gmail.com" date="1449921600">- Update to version 1.0.14
  * No changelog available</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patch:
  * bytelist-sourcetarget.patch
  - Specify java source and target 1.6 to allow build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * bytelist-sourcetarget.patch
  - Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622721600">- DEPRECATED: JRuby no longer maintains org.jruby.util.ByteList as
  a separate library
- Update to version 1.0.15
  * Update to latest jcodings</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="79b7f1faf93b652a8aa2c0a4f4205e960cbfc4663bbf4b0d3c3b9e16278618905ae74f4e8a3bc429af37f3a563a847fd01c15f9205a86823c4addb84bdeaea57" name="bzflag" arch="x86_64">
  <version epoch="0" ver="2.4.30" rel="bp160.1.8"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553515200">- Add %systemd_ordering for %service_*.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1558180800">- Update to version 2.4.16
  * Send MsgFlagGrab before API event is called
  * Correctly unmuted when paused and killed by server
  * Format codebase to allman style
  * Use GLEW for obtaining OpenGL entry points and checking for
    extensions
  * Revert a80ab87 (truncation warning fix) as that generated broken
    replay file headers. Detect and work around that bad header.
  * Use pkg-config, if available, to detect ncurses
- Update to version 2.4.14
  * Add new bz_eAllowServerShotFiredEvent to the API
  * Fix antialiasing when starting the client windowed
  * Update the Windows icon file to include larger icons
  * Treat the number pad keys uniquely for key mapping with SDL2
  * Better cpu selection for x86_64
  * Fix build with enable-profile
  * Add safety check when getting flags (bzfs)
  * Add min/../max to drawTime - Alfredo Tupone
  * Fix the -configdir option for the client
  * Improve support for custom BZDB vars in plug-ins
  * Fix truncation warnings
  * Add new bz_ePermissionModificationEvent to the API
  * Introduce new 'showMotto' permission
  * Fix gcc warnings and code formatting
  * Remove old BitmapFont renderer
  * Add new bz_eServerShotFiredEvent to the API
  * Revamp the world weapon API entirely
  * Add PLAYER-MOTTO output to logDetail plugin
  * Display remaining ban time when a banned player connects
  * Punitive messages no longer display admin callsigns
  * Slash commands in the API now know destination channel
  * Fix ability to bind a key with a modifier through menu
  * Disallow -helpmsg from world files</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1592913600">- Update to 2.4.20
  * Reorganization of the menus to improve usability - Scott Wichser
  * Add bz_isWithinWorldBoundaries to API - Vladimir Jimenez
  * Use teleporter names in /saveworld .obj exports - Vladimir Jimenez
  * Add bz_getSpawnPointWithin to API - Vladimir Jimenez
  * Fix NetHandler compiler errors on Alpine Linux - Jim Melton
  * Significantly improve platform-dependent header imports - Jim Melton
  * Only perform texture conversion to internal format once - Alfredo Tupone, Scott Wichser
  * Removal of never used logic for expiring builds - Zehra
  * Radar size and console height are controlled with BZDB variables - The Noah
  * Add bz_getNearestFlagSafetyZone to the API - Vladimir Jimenez
  * Don't allow hunt to be used when not connected to a server - Zehra
  * Improve vsync settings with SDL2 - Joshua Bodine
  * Ignore the -NSDocumentRevisionsDebugMode YES option in Xcode - Joshua Bodine
  * Add Slovak translation - Jose Riha, Scott Wichser
  * Use a greyscale color scale based on relative height when colored radar shots are disabled - Alfredo Tupone
  * Sort locally discovered servers to the top of the server list - Scott Wichser
  * Add the Open Free For All mode to the Start Server menu - Scott Wichser
  * Remove ineffective performance tests and just default to "modern" settings - Scott Wichser
  * Change default settings to better suit first time players - Scott Wichser
  * Standardize the rabbit game mode name to "Rabbit Chase" - Scott Wichser
  * Do not scale NPOT textures when OpenGL supports them - Alfredo Tupone
  * Generate mipmaps with OpenGL 1.4 extension - Alfredo Tupone
  * Fixed SDL 1.2 builds on macOS - Joshua Bodine
  * Force zbuffer for Experimental quality - Alfredo Tupone
  * Use GLEW to detect GL_EXT_texture_edge_clamp - Alfredo Tupone
  * Add support for storing arbitrary data in API player records - Jeff Myers
  * Fix API string utility functions sometimes losing values - Vladimir Jimenez
  * Add new bz_ePlayerDeathFinalizedEvent API event - Vladimir Jimenez
  * Display Time-per-Frame with 2 decimal digits and averaged over time - Alfredo Tupone
  * Output correct error when loading a nonexistent bzfs plugin - Vladimir Jimenez
  * Remove obsolete bzfs option from Start Server menu on Windows - Scott Wichser</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614513600">- Update to 2.4.22
  * Fix many issues with SDL 2 window management.
  * The playHistoryTracker plugin now tracks kills correctly.
  * Local shotID was not being set in bz_eShotFiredEvent.
  * Send active autopilot statuses to a joining player.
  * Fix solo bots being kicked when rejoining to a server.
  * Fix the backspace key not working on the bzadmin Curses menu.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629979200">- Added hardening to systemd service(s). Modified:
  * bzflagserver.service</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1647086400">- Update to 2.4.24
  * Don't crash when removing the BZFS Cron server-side player
  * Announce who adjusted the countdown with /modcount
  * Add support for Apple silicon builds
  * Work around an SDL 2.0.20 event handling regression
  * Do not explicitly link to X11 when using SDL
- Run spec-cleaner
- Fix encoding of rc.bzflagserver, changed to UTF8
- Fix obsolete-suse-version-check warning</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1667995200">- BuildRequre sdl2 stuff via pkgconfig(*).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1668945600">- Update to version 2.4.26
  * Audio pops should be fixed.
  * Positional audio in observer mode now uses the camera direction
  * Fixed a regression that caused some textures to render skewed.
  * Fixed the Machine Gun firing continuously when the mouse wheel
    is used to fire.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1745064000">- Update to 2.4.30
  * Revert a change that caused menu transparency issues in medium quality
- Update to 2.4.28
  * Improved joystick support
  * Remove non-SDL2 platform code and add SDL2 controller rumble support
  * Fix authentication when behind CGNAT (requires updated client and server)
  * Fix libcurl deprecation warnings
  * Fix c-ares deprecation warnings
  * Add Dockerfile for bzfs container
  * Fix various memory leaks, crashes, buffer overflows, divide by zero errors
  * Fix skewed textures that occurred when the window size changed
  * Add support for pasting text into text inputs
  * Kick all replay viewers when an incompatible replay is loaded</changelog>
</package>
<package pkgid="df0b0f4807289fdded8abe59e2552b4483dbb6b96e95ff64b15489df50b8c34134c82cbc0955264a7d57724f3af51d8639516cc6aa1c18faa0fb275a45dd9903" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534852800">- Replace the URL. The bzip.org owner changed [bsc#1104445].
- Remove the URL from the 'Source' line. The 1.0.6 version is not
  available.
- Run spec-cleaner.</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561636800">- Update to version 1.0.7:
  * Fix undefined behavior in the macros SET_BH, CLEAR_BH, &amp;
    ISSET_BH.
  * bzip2: Fix return value when combining --test,-t and -q.
  * bzip2recover: Fix buffer overflow for large argv[0].
  * bzip2recover: Fix use after free issue with outFile
    (CVE-2016-3189).
  * Make sure nSelectors is not out of range (CVE-2019-12900
    bsc#1139083)
- Drop patches fixed upstream:
  * bzip2-unsafe_strcpy.patch.
  * bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.</changelog>
  <changelog author="mpluskal@suse.com" date="1561723200">- Update bug reference
- Fix downloaded patches</changelog>
  <changelog author="kstreitova@suse.com" date="1563796800">- Update to version 1.0.8:
  * Accept as many selectors as the file format allows.
    This relaxes the fix for CVE-2019-12900 from 1.0.7
    so that bzip2 allows decompression of bz2 files that
    use (too) many selectors again.
  * Fix handling of large (&gt; 4GB) files on Windows.
  * Cleanup of bzdiff and bzgrep scripts so they don't use
    any bash extensions and handle multiple archives correctly.
- remove (applied upstream)
  * bzip2-1.0.6-fix-bashisms.patch
  * bzip2-1.0.6-bzgrep_return_value.patch
- use a new Source url</changelog>
  <changelog author="suse+build@de-korte.org" date="1572436800">- Use correct version in autotools patchset
  M bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Use %autosetup (rediff bzip2-1.0.6.2-autoconfiscated.patch to p1)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Port rpmlintrc format to rpmlint 2.x.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="c59563dce680a0eec6367c557643f9939c758581d1b61bf1987ad299a1e3509ff5ce0162b024bbd1a43f6185b4c86b9340cd84cbf1e8c0a0f14f3fcc40506698" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="christophe@krop.fr" date="1534852800">- Replace the URL. The bzip.org owner changed [bsc#1104445].
- Remove the URL from the 'Source' line. The 1.0.6 version is not
  available.
- Run spec-cleaner.</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561636800">- Update to version 1.0.7:
  * Fix undefined behavior in the macros SET_BH, CLEAR_BH, &amp;
    ISSET_BH.
  * bzip2: Fix return value when combining --test,-t and -q.
  * bzip2recover: Fix buffer overflow for large argv[0].
  * bzip2recover: Fix use after free issue with outFile
    (CVE-2016-3189).
  * Make sure nSelectors is not out of range (CVE-2019-12900
    bsc#1139083)
- Drop patches fixed upstream:
  * bzip2-unsafe_strcpy.patch.
  * bzip2-1.0.6-CVE-2016-3189.patch.
- Refresh patches with quilt.</changelog>
  <changelog author="mpluskal@suse.com" date="1561723200">- Update bug reference
- Fix downloaded patches</changelog>
  <changelog author="kstreitova@suse.com" date="1563796800">- Update to version 1.0.8:
  * Accept as many selectors as the file format allows.
    This relaxes the fix for CVE-2019-12900 from 1.0.7
    so that bzip2 allows decompression of bz2 files that
    use (too) many selectors again.
  * Fix handling of large (&gt; 4GB) files on Windows.
  * Cleanup of bzdiff and bzgrep scripts so they don't use
    any bash extensions and handle multiple archives correctly.
- remove (applied upstream)
  * bzip2-1.0.6-fix-bashisms.patch
  * bzip2-1.0.6-bzgrep_return_value.patch
- use a new Source url</changelog>
  <changelog author="suse+build@de-korte.org" date="1572436800">- Use correct version in autotools patchset
  M bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Drop --with-pic (no effect with --disable-static)
- Use %autosetup (rediff bzip2-1.0.6.2-autoconfiscated.patch to p1)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Port rpmlintrc format to rpmlint 2.x.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
</package>
<package pkgid="6d49d02e6fa1b8d0a69d67f9d79f0d5c015f8e799ad4ce9f85fbe7d891b777e5c6272898e26d24358b075d5ef26e3fc8f2959b4804140112a15547c7fa493fce" name="bzip3" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.13"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683028800">- Initial package (1.3.0)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683115200">- Cleanup spec file for factory submission
- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1683115201">- Update descriptions with an outline of performance
  to support the user comparing similar packages, per
  https://en.opensuse.org/openSUSE:Package_description_guidelines</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 1.3.1:
  * Verbose mode in the tool now prints the extra statistics also
    during testing, not just encoding or decoding.
  * Update the CI pipeline to Debian Bullseye.
  * Fix a minor issue with side effects in RLE decoding.
  * Explicitly disable `-march=native` for releases.
  * Fix a bug in the tool reported by Adam Borowski regarding
  - t/-d input buffer checks.
  * Fix an issue with the current input offset not being taken
    into account in bz3_compress.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1692705600">- update to 1.3.2:
  * Add the `-r` option ("recovery"). If a file fails to decompress fully (e.g. due to a CRC error), ignore it and write the file regardless.
  * Add preliminary CMake support.
  * Fix the include guard macro name to work with pedantic compilers.
  * Fix the shift direction in the crc32 check function. Because of a programming mistake, v1.3.0 and v1.3.1
    introduced a breaking change to the CRC calculation code. The change has been reverted in this release.
    While the archives created with these versions of bzip3 will fail to regularly decompress due to a checksum
    error, using the recovery option as `bzip3 -rd` to decompress will
    restore their original contents.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1702900800">- update to 1.4.0:
  * support for linking with C++
  * improvements on CMake build</changelog>
</package>
<package pkgid="f37839d8a18a745bb2f365a0fd90cb23c2f2e67bdf82d34394f4712d20c2fb6a62b8437eb523da63ba337b453708799bb5f353e8a0f7a2fa2132eda3e95876fc" name="bzip3-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="bp160.1.13"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683028800">- Initial package (1.3.0)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683115200">- Cleanup spec file for factory submission
- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1683115201">- Update descriptions with an outline of performance
  to support the user comparing similar packages, per
  https://en.opensuse.org/openSUSE:Package_description_guidelines</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 1.3.1:
  * Verbose mode in the tool now prints the extra statistics also
    during testing, not just encoding or decoding.
  * Update the CI pipeline to Debian Bullseye.
  * Fix a minor issue with side effects in RLE decoding.
  * Explicitly disable `-march=native` for releases.
  * Fix a bug in the tool reported by Adam Borowski regarding
  - t/-d input buffer checks.
  * Fix an issue with the current input offset not being taken
    into account in bz3_compress.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1692705600">- update to 1.3.2:
  * Add the `-r` option ("recovery"). If a file fails to decompress fully (e.g. due to a CRC error), ignore it and write the file regardless.
  * Add preliminary CMake support.
  * Fix the include guard macro name to work with pedantic compilers.
  * Fix the shift direction in the crc32 check function. Because of a programming mistake, v1.3.0 and v1.3.1
    introduced a breaking change to the CRC calculation code. The change has been reverted in this release.
    While the archives created with these versions of bzip3 will fail to regularly decompress due to a checksum
    error, using the recovery option as `bzip3 -rd` to decompress will
    restore their original contents.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1702900800">- update to 1.4.0:
  * support for linking with C++
  * improvements on CMake build</changelog>
</package>
<package pkgid="d1b32f1e7c000c2d396e81dbcd53233b13546cf9c037755a5d75db18d77056e75766e61134094b0a989507b67da05af40841b7e3383c5bea0755cb5cce06393a" name="bzrtp-devel" arch="x86_64">
  <version epoch="0" ver="5.3.105" rel="bp160.1.4"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1680868800">- Update to 5.2.49 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1687953600">- Update to 5.2.73 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693224000">- Update to 5.2.98 (no changelog)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1702468800">- Enable post quantum cryptography on Tumbleweed.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1705320000">- Update to 5.3.7 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1709812800">- Update to 5.3.26 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1711713600">- Update to 5.3.37 (no changelog).</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1731326400">- Update to 5.3.95 (no changelog).</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1738929600">- Update to 5.3.96 (no changelog).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1739793600">- Update to 5.3.105 (no changelog).</changelog>
</package>
<package pkgid="b05439b8b2bd6dfd4542a515733d5833c5753cc5dd81f5a04c1683b5c1c5b4b46a97693de9ddba5b3db6646c902d901e652ab61aba064b3bdf18c39e42abcd18" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.34.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Ensure multibuild flavors result in different src names.</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
  <changelog author="adam.majer@suse.de" date="1712059200">- c-ares 1.28.1
  Features:
  * Emit warnings when deprecated c-ares functions are used.
    This can be disabled by passing a compiler definition of
    `CARES_NO_DEPRECATED`. [PR #732]
  * Add function `ares_search_dnsrec()` to search for records
    using the new DNS record data structures. [PR #719]
  * Rework internals to pass around `ares_dns_record_t` instead of
    binary data, this introduces new public functions of
    `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]
  Changes:
  * tests: when performing simulated queries, reduce timeouts
    to make tests run faster
  * Replace configuration file parsers with memory-safe parser. [PR #725]
  * Remove `acountry` completely, the manpage might still get
    installed otherwise. [Issue #718]
  Bugfixes:
  * CMake: don't overwrite global required libraries/definitions/includes
    which could cause build errors for projects chain building c-ares.
    [Issue #729]
  * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h`
    and needs to be included separately. [PR #728]
  * Fix a potential memory leak in `ares_init()`. [Issue #724]
  * Some platforms don't have the `isascii()` function.
    Implement as a macro. [PR #721]
  * CMake: Fix Chain building if CMAKE runtime paths not set
  * NDots configuration should allow a value of zero. [PR #735]</changelog>
  <changelog author="jgwang@suse.com" date="1717329600">- c-ares 1.29.0
  Features:
  * When using ARES_OPT_EVENT_THREAD, automatically reload
    system configuration when network conditions change.
    [PR #759]
  * Apple: reimplement DNS configuration reading to more
    accurately pull DNS settings. [PR #750]
  * Add observability into DNS server health via a server state
    callback, invoked whenever a query finishes. [PR #744]
  * Add server failover retry behavior, where failed servers are
    retried with small probability after a minimum delay.
    [PR #731]
  Changes:
  * Mark ares_channel_t * as const in more places in the public
    API. [PR #758]
  Bugfixes:
  * Due to a logic flaw dns name compression writing was not
    properly implemented which would result in the name prefix not
    being written for a partial match. This could cause issues in
    various record types such as MX records when using the
    deprecated API. Regression introduced in 1.28.0. [Issue #757]
  * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say
    it does and causes c-ares to become non-functional. [PR #754]
  * ares_getnameinfo(): loosen validation on salen parameter.
    [Issue #752]
  * cmake: Android requires C99. [PR #748]
  * ares_queue_wait_empty() does not honor timeout_ms &gt;= 0.
    [Issue #742]</changelog>
  <changelog author="adam.majer@suse.de" date="1718020800">- c-ares 1.30.0
  Features:
  * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]
  Changes:
  * Validation that DNS strings can only consist of printable ascii characters
  otherwise will trigger a parse failure. [75de16c] and [40fb125]
  Bugfixes:
  * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6]
- updated dowload URLs to point to github
- updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA</changelog>
  <changelog author="adam.majer@suse.de" date="1718712000">- c-ares 1.31.0
  Changes:
  * Enable Query Cache by default. [PR #786]
  Bugfixes:
  * Enhance Windows DNS configuration change detection to also
  detect manual DNS configuration changes. [PR #785]
  * Various legacy MacOS Build fixes. [Issue #782]
  * Ndots value of zero in resolv.conf was not being honored. [852a60a]
  * Watt-32 build support had been broken for some time. [PR #781]
  * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]</changelog>
  <changelog author="adam.majer@suse.de" date="1730203200">- c-ares 1.34.2
  Features:
  * adig: read arguments from adigrc. [PR #856]
  * Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]
  * New function `ares_process_fds()`. [PR #875]
  * Failed servers should be probed rather than redirecting queries which could
  cause unexpected latency. [PR #877]
  * adig: rework command line arguments to mimic dig from bind. [PR #890]
  * Add new method for overriding network functions
  `ares_set_socket_function_ex()` to properly support all new functionality.
  [PR #894]
  * Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]
  * ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887]
  * URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882]
  Changes:
  * Connection handling modularization. [PR #857], [PR #876]
  * Expose library/utility functions to tools. [PR #860]
  * Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]
  Bugfixes:
  * fix: potential WIN32_LEAN_AND_MEAN redefinition.
  [PR #869]
  * Fix googletest v1.15 compatibility.
  [PR #874]
  * Fix pkgconfig thread dependencies.
  [PR #884]
  Features in 1.33.0:
  * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache
  poisoning attacks. [PR #833]
  * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
  on supported systems. [PR #840]
  Changes:
  * Reorganize source tree. [PR #822]
  * Refactoring of connection handling to prevent code duplication. [PR #839]
  * New dynamic array data structure to prevent simple logic flaws in array
  handling in various code paths. [PR #841]
  Bugfixes:
  * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]
  Features in 1.32:
  * Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
  by specifying `ARES_FLAG_DNS0x20`.  Disabled by default. [PR #800]
  * Rework query timeout logic to automatically adjust timeouts based on network
  conditions.  The timeout specified now is only used as a hint until there
  is enough history to calculate a more valid timeout. [PR #794]
  Changes:
  * DNS RR TXT strings should not be automatically concatenated as there are use
  cases outside of RFC 7208.  In order to maintain ABI compliance, the ability
  to retrieve TXT strings concatenated is retained as well as a new API to
  retrieve the individual strings.  This restores behavior from c-ares 1.20.0.
  [PR #801]
  * Clean up header inclusion logic to make hacking on code easier. [PR #797]
  * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]
  Bugfixes:
  * Tests: Fix thread race condition in test cases for EventThread. [PR #803]
  * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]</changelog>
  <changelog author="adam.majer@suse.de" date="1735560000">- c-ares 1.34.4
  This is a bugfix release.
  Changes:
    QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
  Bugfixes:
    Empty TXT records were not being preserved. PR #922
    docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
    license: some files weren't properly updated. PR #920
    Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
    CMake: set policy version to prevent deprecation warnings. PR #932
    CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
    Update to latest autoconf archive macros for enhanced system compatibility. PR #936
  In version 1.34.3
  This is a bugfix release.
  Changes:
    Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
  Bugfixes:
    Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
    TSAN warns on missing lock, but lock isn't actually necessary. PR #915
    ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
    ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
    Fix typos in man pages. PR #905
- skip-test.patch: fix failing tests</changelog>
  <changelog author="adam.majer@suse.de" date="1735905600">- skip-test.patch replaced with upstream unit test fix
  a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1744113600">- c-ares version 1.34.5
  * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that
    was introduced in v1.32.3 (bsc#1240955)
- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed</changelog>
</package>
<package pkgid="54ea4464c17fc84258a66150c8d6a25c69cf50464eeba8c289cc3fb93e77c1d776ccd2f2792dc03c44b077a023334e495a4cb63f04e711819c3280b93fd5187c" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
  <changelog author="adam.majer@suse.de" date="1712059200">- c-ares 1.28.1
  Features:
  * Emit warnings when deprecated c-ares functions are used.
    This can be disabled by passing a compiler definition of
    `CARES_NO_DEPRECATED`. [PR #732]
  * Add function `ares_search_dnsrec()` to search for records
    using the new DNS record data structures. [PR #719]
  * Rework internals to pass around `ares_dns_record_t` instead of
    binary data, this introduces new public functions of
    `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]
  Changes:
  * tests: when performing simulated queries, reduce timeouts
    to make tests run faster
  * Replace configuration file parsers with memory-safe parser. [PR #725]
  * Remove `acountry` completely, the manpage might still get
    installed otherwise. [Issue #718]
  Bugfixes:
  * CMake: don't overwrite global required libraries/definitions/includes
    which could cause build errors for projects chain building c-ares.
    [Issue #729]
  * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h`
    and needs to be included separately. [PR #728]
  * Fix a potential memory leak in `ares_init()`. [Issue #724]
  * Some platforms don't have the `isascii()` function.
    Implement as a macro. [PR #721]
  * CMake: Fix Chain building if CMAKE runtime paths not set
  * NDots configuration should allow a value of zero. [PR #735]</changelog>
  <changelog author="jgwang@suse.com" date="1717329600">- c-ares 1.29.0
  Features:
  * When using ARES_OPT_EVENT_THREAD, automatically reload
    system configuration when network conditions change.
    [PR #759]
  * Apple: reimplement DNS configuration reading to more
    accurately pull DNS settings. [PR #750]
  * Add observability into DNS server health via a server state
    callback, invoked whenever a query finishes. [PR #744]
  * Add server failover retry behavior, where failed servers are
    retried with small probability after a minimum delay.
    [PR #731]
  Changes:
  * Mark ares_channel_t * as const in more places in the public
    API. [PR #758]
  Bugfixes:
  * Due to a logic flaw dns name compression writing was not
    properly implemented which would result in the name prefix not
    being written for a partial match. This could cause issues in
    various record types such as MX records when using the
    deprecated API. Regression introduced in 1.28.0. [Issue #757]
  * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say
    it does and causes c-ares to become non-functional. [PR #754]
  * ares_getnameinfo(): loosen validation on salen parameter.
    [Issue #752]
  * cmake: Android requires C99. [PR #748]
  * ares_queue_wait_empty() does not honor timeout_ms &gt;= 0.
    [Issue #742]</changelog>
  <changelog author="adam.majer@suse.de" date="1718020800">- c-ares 1.30.0
  Features:
  * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]
  Changes:
  * Validation that DNS strings can only consist of printable ascii characters
  otherwise will trigger a parse failure. [75de16c] and [40fb125]
  Bugfixes:
  * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6]
- updated dowload URLs to point to github
- updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA</changelog>
  <changelog author="adam.majer@suse.de" date="1718712000">- c-ares 1.31.0
  Changes:
  * Enable Query Cache by default. [PR #786]
  Bugfixes:
  * Enhance Windows DNS configuration change detection to also
  detect manual DNS configuration changes. [PR #785]
  * Various legacy MacOS Build fixes. [Issue #782]
  * Ndots value of zero in resolv.conf was not being honored. [852a60a]
  * Watt-32 build support had been broken for some time. [PR #781]
  * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]</changelog>
  <changelog author="adam.majer@suse.de" date="1730203200">- c-ares 1.34.2
  Features:
  * adig: read arguments from adigrc. [PR #856]
  * Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]
  * New function `ares_process_fds()`. [PR #875]
  * Failed servers should be probed rather than redirecting queries which could
  cause unexpected latency. [PR #877]
  * adig: rework command line arguments to mimic dig from bind. [PR #890]
  * Add new method for overriding network functions
  `ares_set_socket_function_ex()` to properly support all new functionality.
  [PR #894]
  * Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]
  * ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887]
  * URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882]
  Changes:
  * Connection handling modularization. [PR #857], [PR #876]
  * Expose library/utility functions to tools. [PR #860]
  * Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]
  Bugfixes:
  * fix: potential WIN32_LEAN_AND_MEAN redefinition.
  [PR #869]
  * Fix googletest v1.15 compatibility.
  [PR #874]
  * Fix pkgconfig thread dependencies.
  [PR #884]
  Features in 1.33.0:
  * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache
  poisoning attacks. [PR #833]
  * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
  on supported systems. [PR #840]
  Changes:
  * Reorganize source tree. [PR #822]
  * Refactoring of connection handling to prevent code duplication. [PR #839]
  * New dynamic array data structure to prevent simple logic flaws in array
  handling in various code paths. [PR #841]
  Bugfixes:
  * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]
  Features in 1.32:
  * Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
  by specifying `ARES_FLAG_DNS0x20`.  Disabled by default. [PR #800]
  * Rework query timeout logic to automatically adjust timeouts based on network
  conditions.  The timeout specified now is only used as a hint until there
  is enough history to calculate a more valid timeout. [PR #794]
  Changes:
  * DNS RR TXT strings should not be automatically concatenated as there are use
  cases outside of RFC 7208.  In order to maintain ABI compliance, the ability
  to retrieve TXT strings concatenated is retained as well as a new API to
  retrieve the individual strings.  This restores behavior from c-ares 1.20.0.
  [PR #801]
  * Clean up header inclusion logic to make hacking on code easier. [PR #797]
  * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]
  Bugfixes:
  * Tests: Fix thread race condition in test cases for EventThread. [PR #803]
  * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]</changelog>
  <changelog author="adam.majer@suse.de" date="1735560000">- c-ares 1.34.4
  This is a bugfix release.
  Changes:
    QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
  Bugfixes:
    Empty TXT records were not being preserved. PR #922
    docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
    license: some files weren't properly updated. PR #920
    Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
    CMake: set policy version to prevent deprecation warnings. PR #932
    CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
    Update to latest autoconf archive macros for enhanced system compatibility. PR #936
  In version 1.34.3
  This is a bugfix release.
  Changes:
    Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
  Bugfixes:
    Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
    TSAN warns on missing lock, but lock isn't actually necessary. PR #915
    ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
    ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
    Fix typos in man pages. PR #905
- skip-test.patch: fix failing tests</changelog>
  <changelog author="adam.majer@suse.de" date="1735905600">- skip-test.patch replaced with upstream unit test fix
  a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1744113600">- c-ares version 1.34.5
  * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that
    was introduced in v1.32.3 (bsc#1240955)
- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1767268800">- c-ares 1.35.6:
  * CVE-2025-62408: use-after-free in read_answers() (boo#1254738)
  * Ignore Windows IDN Search Domains until proper IDN support is
    added
  * Various bug fixes</changelog>
</package>
<package pkgid="560ec5a0f420e86663839b4477136c4348581501ffd1ee1737435a205892571e900a7a075280d9dd8570818017f6272dad3910893eebfff42aef0b2195de9457" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.34.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1707480000">- Ensure multibuild flavors result in different src names.</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
  <changelog author="adam.majer@suse.de" date="1712059200">- c-ares 1.28.1
  Features:
  * Emit warnings when deprecated c-ares functions are used.
    This can be disabled by passing a compiler definition of
    `CARES_NO_DEPRECATED`. [PR #732]
  * Add function `ares_search_dnsrec()` to search for records
    using the new DNS record data structures. [PR #719]
  * Rework internals to pass around `ares_dns_record_t` instead of
    binary data, this introduces new public functions of
    `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]
  Changes:
  * tests: when performing simulated queries, reduce timeouts
    to make tests run faster
  * Replace configuration file parsers with memory-safe parser. [PR #725]
  * Remove `acountry` completely, the manpage might still get
    installed otherwise. [Issue #718]
  Bugfixes:
  * CMake: don't overwrite global required libraries/definitions/includes
    which could cause build errors for projects chain building c-ares.
    [Issue #729]
  * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h`
    and needs to be included separately. [PR #728]
  * Fix a potential memory leak in `ares_init()`. [Issue #724]
  * Some platforms don't have the `isascii()` function.
    Implement as a macro. [PR #721]
  * CMake: Fix Chain building if CMAKE runtime paths not set
  * NDots configuration should allow a value of zero. [PR #735]</changelog>
  <changelog author="jgwang@suse.com" date="1717329600">- c-ares 1.29.0
  Features:
  * When using ARES_OPT_EVENT_THREAD, automatically reload
    system configuration when network conditions change.
    [PR #759]
  * Apple: reimplement DNS configuration reading to more
    accurately pull DNS settings. [PR #750]
  * Add observability into DNS server health via a server state
    callback, invoked whenever a query finishes. [PR #744]
  * Add server failover retry behavior, where failed servers are
    retried with small probability after a minimum delay.
    [PR #731]
  Changes:
  * Mark ares_channel_t * as const in more places in the public
    API. [PR #758]
  Bugfixes:
  * Due to a logic flaw dns name compression writing was not
    properly implemented which would result in the name prefix not
    being written for a partial match. This could cause issues in
    various record types such as MX records when using the
    deprecated API. Regression introduced in 1.28.0. [Issue #757]
  * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say
    it does and causes c-ares to become non-functional. [PR #754]
  * ares_getnameinfo(): loosen validation on salen parameter.
    [Issue #752]
  * cmake: Android requires C99. [PR #748]
  * ares_queue_wait_empty() does not honor timeout_ms &gt;= 0.
    [Issue #742]</changelog>
  <changelog author="adam.majer@suse.de" date="1718020800">- c-ares 1.30.0
  Features:
  * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]
  Changes:
  * Validation that DNS strings can only consist of printable ascii characters
  otherwise will trigger a parse failure. [75de16c] and [40fb125]
  Bugfixes:
  * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6]
- updated dowload URLs to point to github
- updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA</changelog>
  <changelog author="adam.majer@suse.de" date="1718712000">- c-ares 1.31.0
  Changes:
  * Enable Query Cache by default. [PR #786]
  Bugfixes:
  * Enhance Windows DNS configuration change detection to also
  detect manual DNS configuration changes. [PR #785]
  * Various legacy MacOS Build fixes. [Issue #782]
  * Ndots value of zero in resolv.conf was not being honored. [852a60a]
  * Watt-32 build support had been broken for some time. [PR #781]
  * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]</changelog>
  <changelog author="adam.majer@suse.de" date="1730203200">- c-ares 1.34.2
  Features:
  * adig: read arguments from adigrc. [PR #856]
  * Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]
  * New function `ares_process_fds()`. [PR #875]
  * Failed servers should be probed rather than redirecting queries which could
  cause unexpected latency. [PR #877]
  * adig: rework command line arguments to mimic dig from bind. [PR #890]
  * Add new method for overriding network functions
  `ares_set_socket_function_ex()` to properly support all new functionality.
  [PR #894]
  * Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]
  * ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887]
  * URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882]
  Changes:
  * Connection handling modularization. [PR #857], [PR #876]
  * Expose library/utility functions to tools. [PR #860]
  * Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]
  Bugfixes:
  * fix: potential WIN32_LEAN_AND_MEAN redefinition.
  [PR #869]
  * Fix googletest v1.15 compatibility.
  [PR #874]
  * Fix pkgconfig thread dependencies.
  [PR #884]
  Features in 1.33.0:
  * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache
  poisoning attacks. [PR #833]
  * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
  on supported systems. [PR #840]
  Changes:
  * Reorganize source tree. [PR #822]
  * Refactoring of connection handling to prevent code duplication. [PR #839]
  * New dynamic array data structure to prevent simple logic flaws in array
  handling in various code paths. [PR #841]
  Bugfixes:
  * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]
  Features in 1.32:
  * Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
  by specifying `ARES_FLAG_DNS0x20`.  Disabled by default. [PR #800]
  * Rework query timeout logic to automatically adjust timeouts based on network
  conditions.  The timeout specified now is only used as a hint until there
  is enough history to calculate a more valid timeout. [PR #794]
  Changes:
  * DNS RR TXT strings should not be automatically concatenated as there are use
  cases outside of RFC 7208.  In order to maintain ABI compliance, the ability
  to retrieve TXT strings concatenated is retained as well as a new API to
  retrieve the individual strings.  This restores behavior from c-ares 1.20.0.
  [PR #801]
  * Clean up header inclusion logic to make hacking on code easier. [PR #797]
  * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]
  Bugfixes:
  * Tests: Fix thread race condition in test cases for EventThread. [PR #803]
  * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]</changelog>
  <changelog author="adam.majer@suse.de" date="1735560000">- c-ares 1.34.4
  This is a bugfix release.
  Changes:
    QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
  Bugfixes:
    Empty TXT records were not being preserved. PR #922
    docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
    license: some files weren't properly updated. PR #920
    Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
    CMake: set policy version to prevent deprecation warnings. PR #932
    CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
    Update to latest autoconf archive macros for enhanced system compatibility. PR #936
  In version 1.34.3
  This is a bugfix release.
  Changes:
    Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
  Bugfixes:
    Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
    TSAN warns on missing lock, but lock isn't actually necessary. PR #915
    ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
    ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
    Fix typos in man pages. PR #905
- skip-test.patch: fix failing tests</changelog>
  <changelog author="adam.majer@suse.de" date="1735905600">- skip-test.patch replaced with upstream unit test fix
  a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1744113600">- c-ares version 1.34.5
  * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that
    was introduced in v1.32.3 (bsc#1240955)
- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed</changelog>
</package>
<package pkgid="ece441be31acc51bb7b9da65b7eaac79f63ef6f4190dee5de43603d5484da0c000d5b9ca3711966dc84d8681a1c26dc5106100829b9ba0a5d8460aced7f0d601" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1708948800">- c-ares 1.27.0
  Security:
  * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
    /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
    GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
  Features:
  * New function ares_queue_active_queries() to retrieve number of in-flight
    queries. PR #712
  * New function ares_queue_wait_empty() to wait for the number of in-flight
    queries to reach zero. PR #710
  * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
    no DNS servers can be found rather than attempting to use 127.0.0.1. This
    also introduces a new ares status code of ARES_ENOSERVER. PR #713
  Changes:
  * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
  Bugfixes:
  * Fix warning due to ignoring return code of write(). PR #709
  * CMake: don't override target output locations if not top-level. Issue #708
  * Fix building c-ares without thread support. PR #700</changelog>
  <changelog author="adam.majer@suse.de" date="1712059200">- c-ares 1.28.1
  Features:
  * Emit warnings when deprecated c-ares functions are used.
    This can be disabled by passing a compiler definition of
    `CARES_NO_DEPRECATED`. [PR #732]
  * Add function `ares_search_dnsrec()` to search for records
    using the new DNS record data structures. [PR #719]
  * Rework internals to pass around `ares_dns_record_t` instead of
    binary data, this introduces new public functions of
    `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]
  Changes:
  * tests: when performing simulated queries, reduce timeouts
    to make tests run faster
  * Replace configuration file parsers with memory-safe parser. [PR #725]
  * Remove `acountry` completely, the manpage might still get
    installed otherwise. [Issue #718]
  Bugfixes:
  * CMake: don't overwrite global required libraries/definitions/includes
    which could cause build errors for projects chain building c-ares.
    [Issue #729]
  * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h`
    and needs to be included separately. [PR #728]
  * Fix a potential memory leak in `ares_init()`. [Issue #724]
  * Some platforms don't have the `isascii()` function.
    Implement as a macro. [PR #721]
  * CMake: Fix Chain building if CMAKE runtime paths not set
  * NDots configuration should allow a value of zero. [PR #735]</changelog>
  <changelog author="jgwang@suse.com" date="1717329600">- c-ares 1.29.0
  Features:
  * When using ARES_OPT_EVENT_THREAD, automatically reload
    system configuration when network conditions change.
    [PR #759]
  * Apple: reimplement DNS configuration reading to more
    accurately pull DNS settings. [PR #750]
  * Add observability into DNS server health via a server state
    callback, invoked whenever a query finishes. [PR #744]
  * Add server failover retry behavior, where failed servers are
    retried with small probability after a minimum delay.
    [PR #731]
  Changes:
  * Mark ares_channel_t * as const in more places in the public
    API. [PR #758]
  Bugfixes:
  * Due to a logic flaw dns name compression writing was not
    properly implemented which would result in the name prefix not
    being written for a partial match. This could cause issues in
    various record types such as MX records when using the
    deprecated API. Regression introduced in 1.28.0. [Issue #757]
  * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say
    it does and causes c-ares to become non-functional. [PR #754]
  * ares_getnameinfo(): loosen validation on salen parameter.
    [Issue #752]
  * cmake: Android requires C99. [PR #748]
  * ares_queue_wait_empty() does not honor timeout_ms &gt;= 0.
    [Issue #742]</changelog>
  <changelog author="adam.majer@suse.de" date="1718020800">- c-ares 1.30.0
  Features:
  * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]
  Changes:
  * Validation that DNS strings can only consist of printable ascii characters
  otherwise will trigger a parse failure. [75de16c] and [40fb125]
  Bugfixes:
  * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6]
- updated dowload URLs to point to github
- updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA</changelog>
  <changelog author="adam.majer@suse.de" date="1718712000">- c-ares 1.31.0
  Changes:
  * Enable Query Cache by default. [PR #786]
  Bugfixes:
  * Enhance Windows DNS configuration change detection to also
  detect manual DNS configuration changes. [PR #785]
  * Various legacy MacOS Build fixes. [Issue #782]
  * Ndots value of zero in resolv.conf was not being honored. [852a60a]
  * Watt-32 build support had been broken for some time. [PR #781]
  * Distribute `ares_dns_rec_type_tostr` manpage. [PR #778]</changelog>
  <changelog author="adam.majer@suse.de" date="1730203200">- c-ares 1.34.2
  Features:
  * adig: read arguments from adigrc. [PR #856]
  * Add new pending write callback optimization via `ares_set_pending_write_cb`. [PR #857]
  * New function `ares_process_fds()`. [PR #875]
  * Failed servers should be probed rather than redirecting queries which could
  cause unexpected latency. [PR #877]
  * adig: rework command line arguments to mimic dig from bind. [PR #890]
  * Add new method for overriding network functions
  `ares_set_socket_function_ex()` to properly support all new functionality.
  [PR #894]
  * Fix regression with custom socket callbacks due to DNS cookie support. [PR #895]
  * ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets [PR #887]
  * URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). [PR #882]
  Changes:
  * Connection handling modularization. [PR #857], [PR #876]
  * Expose library/utility functions to tools. [PR #860]
  * Remove `ares__` prefix, just use `ares_` for internal functions. [PR #872]
  Bugfixes:
  * fix: potential WIN32_LEAN_AND_MEAN redefinition.
  [PR #869]
  * Fix googletest v1.15 compatibility.
  [PR #874]
  * Fix pkgconfig thread dependencies.
  [PR #884]
  Features in 1.33.0:
  * Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache
  poisoning attacks. [PR #833]
  * Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
  on supported systems. [PR #840]
  Changes:
  * Reorganize source tree. [PR #822]
  * Refactoring of connection handling to prevent code duplication. [PR #839]
  * New dynamic array data structure to prevent simple logic flaws in array
  handling in various code paths. [PR #841]
  Bugfixes:
  * `ares_destroy()` race condition during shutdown due to missing lock. [PR #831]
  Features in 1.32:
  * Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
  by specifying `ARES_FLAG_DNS0x20`.  Disabled by default. [PR #800]
  * Rework query timeout logic to automatically adjust timeouts based on network
  conditions.  The timeout specified now is only used as a hint until there
  is enough history to calculate a more valid timeout. [PR #794]
  Changes:
  * DNS RR TXT strings should not be automatically concatenated as there are use
  cases outside of RFC 7208.  In order to maintain ABI compliance, the ability
  to retrieve TXT strings concatenated is retained as well as a new API to
  retrieve the individual strings.  This restores behavior from c-ares 1.20.0.
  [PR #801]
  * Clean up header inclusion logic to make hacking on code easier. [PR #797]
  * GCC/Clang: Enable even more strict warnings to catch more coding flaws. [253bdee]
  Bugfixes:
  * Tests: Fix thread race condition in test cases for EventThread. [PR #803]
  * Thread Saftey: `ares_timeout()` was missing lock. [74a64e4]</changelog>
  <changelog author="adam.majer@suse.de" date="1735560000">- c-ares 1.34.4
  This is a bugfix release.
  Changes:
    QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
  Bugfixes:
    Empty TXT records were not being preserved. PR #922
    docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
    license: some files weren't properly updated. PR #920
    Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
    CMake: set policy version to prevent deprecation warnings. PR #932
    CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
    Update to latest autoconf archive macros for enhanced system compatibility. PR #936
  In version 1.34.3
  This is a bugfix release.
  Changes:
    Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
  Bugfixes:
    Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
    TSAN warns on missing lock, but lock isn't actually necessary. PR #915
    ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
    ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
    Fix typos in man pages. PR #905
- skip-test.patch: fix failing tests</changelog>
  <changelog author="adam.majer@suse.de" date="1735905600">- skip-test.patch replaced with upstream unit test fix
  a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1744113600">- c-ares version 1.34.5
  * CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that
    was introduced in v1.32.3 (bsc#1240955)
- a531524a3d085fcd9a5e25d5f6cbdb953082c2b9.patch: upstreamed, removed</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1767268800">- c-ares 1.35.6:
  * CVE-2025-62408: use-after-free in read_answers() (boo#1254738)
  * Ignore Windows IDN Search Domains until proper IDN support is
    added
  * Various bug fixes</changelog>
</package>
<package pkgid="3bb199a712540e5eaf1f6f6dddaef4251e428919d3776d7e748156fd191bf22f32fed6c8d5d86d007b479558098c5319192032b8bd614877a162cd7ba931c23d" name="c-toxcore" arch="x86_64">
  <version epoch="0" ver="0.2.19" rel="bp160.1.12"/>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1561550400">- update to 0.2.10
  * #1320 add undef guard in tox_many_tcp_test
  * #1314 Fix bazel build version at 0.22.0 for CI.
  * #1311 Disable failing TCP server test
  * #1310 Do not send the same packet to the same node twice
  * #1309 add configurable limit on number of stored frozen peers
  * #1305 Expose api functions for enabling and disabling AV in AV groups
  * #1302 Specify that buffer size for tox_conference_peer_get_name is given by $size
  * #1313 CirrusCI is failing and blocking PRs
  * #1312 Onion client review
  * #1306 Persistent conference's offline peer list always grows and never decreases
  * #1303 Loaded persistent groups fail to send audio
  * #1298 How to make libtox4j-c.so for android?
  * #1261 Bump so version
  * #1116 Message length is too large log spam</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1584964800">- update to 0.2.11
  * #1403 Install libsodium from apt instead of from source.
  * #1402 Remove bazel build from Travis.
  * #1400 Disable bazel remote cache on CI.
  * #1399 Periodically try to send direct packets when connected by TCP.
  * #1398 Minor cleanup: use assoc_timeout function where possible.
  * #1397 Check that LOGGER macros are only called with string literals.
  * #1396 Make function defns match their decls regarding storage class.
  * #1395 Mark file-local function definitions as static.
  * #1394 Enable remote cache for bazel builds.
  * #1393 Add another bootstrap node to the bootstrap test.
  * #1392 Clear out old conference connections.
  * #1391 Minor cleanups in network code.
  * #1390 Avoid casting back and forth between void-ptr.
  * #1389 Standardise on having a comma at the end of enums.
  * #1388 Fix up comments a bit to start being more uniform.
  * #1387 Use rules_cc instead of native cc_library rules.
  * #1386 Use spdx license identifier instead of GPL blurb.
  * #1383 Pass packet ID to custom packet handlers.
  * #1382 Add a mutex lock/unlock inside every public API function.
  * #1381 Use net_pack instead of casting bytes to ints.
  * #1380 Disable FreeBSD travis build until it is fixed.
  * #1379 Update and fix FreeBSD setup on Travis-CI
  * #1378 Use ninja build system for the cmake-linux build.
  * #1376 Remove testing/av_test.c.
  * #1375 Add "cimple_test" to the bazel build.
  * #1374 Handle invite to existing conference
  * #1372 Upgrade bazel to 2.1.1.
  * #1371 Bump to astyle-3.1 in travis build.
  * #1370 use -1 rather than ~0 in unsigned integer types
  * #1362 Workaround for message number saving
  * #1358 Allow Bazel to rerun tests marked as flaky
  * #1352 Update tests to use a working bootstrap node
  * #1349 Fix tox-bootstrapd's README and update Dockerfile
  * #1347 Fix pthread_mutex_destroy getting too many arguments
  * #1346 Fix most TSAN failures
  * #1345 fix concurrency issues in mono_time
  * #1343 Fix TSAN failures in tests
  * #1334 fix missing group title length check
  * #1330 Force IPv4 for cirrus-ci tests
  * #1329 bump libsodium version in appveyor.yml
  * #1322 Clean-up of group.c code
  * #1321 Some small fixes to groups.
  * #1299 Add VScode folder to .gitignore
  * #1297 Use net_pack/unpack instead of host_to_net.
  * #1373 handle crashes after group invites
  * #1368 Are tox clients also open source
  * #1366 Generate a link for websites (Friendship and proxy)
  * #1354 Unstable Tests
  * #1316 Documentation claims toxav_iteration_interval is threadsafe but it's not
  * #1274 build error
  * #850 GPG App Usage</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1589112000">- Update to 0.2.12
  * Merged PRs:
  - #1457 Disable non-hermetic tests by default.
  - #1456 Limit the number of friends you can have to ~4 billion.
  - #1452 Add execution trace option for debugging.
  - #1447 Udp dht group chats
  - #1444 Set up release-drafter to automatically draft the next release.
  - #1443 Allow test coverage to fluctuate 2% up and down, but not below 80%.
  - #1442 Add CODEOWNERS and settings.yml files.
  - #1441 [ImgBot] Optimize images
  - #1439 Fix continuous integration builds.
  - #1437 Rework the toxchat/bootstrap-node Docker image.
  - #1435 Enable TCP relay test in Bazel and autotools build.
  - #1434 Skip invalid TCP relays and DHT nodes when loading save data.
  - #1433 Fix saving of combination of loaded and connected TCP relays
  - #1430 Invert not_valid functions and name them is_valid.
  - #1429 Fix things not being initialized if creating a TCP-only network
  - #1426 Remove tokstyle exemptions from build files.
  - #1425 Stop using the "inline namespace" feature of apidsl.
  - #1424 Add new semi-private API functions to set per-packet-id custom handlers.
  - #1423 Give CI workflow a better name: clang-sanitizers
  - #1422 Use public API for sending in RTP
  - #1421 Install ci-tools and get tokstyle via the script it provides.
  - #1420 Use tox public API for sending packets in toxav BWController
  - #1419 Remove newlines from the end of LOGGER format strings.
  - #1418 Change ToxAVCall struct mutex to a more distinct name
  - #1417 Create own instance of Mono_Time for ToxAV
  - #1416 Stop using Messenger's mono_time in bandwidth controller.
  - #1415 Fix 2 memory leaks in ToxAV.
  - #1414 Show function names in asan/tsan stack traces on CircleCI.
  - #1413 Make afl_toxsave.c a bit more portable; fix memory leak.
  - #1411 Fixes towards building on MSVC.
  - #1409 Mark conference test as small.
  - #1407 Add minimal save generator
  - #1406 Migrate format-source script to new apidsl web app.
  - #1404 Smarter setup of bazel remote cache on Cirrus CI.
  - #1331 Add basic test adapter for AFL
  * Closed issues:
  - #1365 Add the option to use LAN discovery even when using a proxy for remote connections
  - #1353 libtoxdns.a and libtoxav.a
  - #86 Freenet as Offline Messaging Backend</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1639051200">- Update to 0.2.13
  * Merged PRs:
  - #1725 cleanup: add some missing null checks
  - #1723 chore: Run infer static analyser on circle ci builds.
  - #1718 fix: Sec/fix crypto size compute
  - #1716 chore: Use toktok-stack docker image with built third_party.
  - #1713 test: Add some unit tests for important internal DHT functions.
  - #1708 perf: reduce calling into Mono_Time in DHT
  - #1706 chore: Enable cimple tests on cirrus build.
  - #1705 fix: issue with save_load autotest
  - #1703 chore: Upgrade to toktok-stack:0.0.11.
  - #1699 fix: some friend connection issues
  - #1698 fix: bug causing API to report wrong self connection status
  - #1693 chore: Update IRC info
  - #1691 chore: Fix Appveyor and add workarounds for Cirrus CI
  - #1686 chore: Enable c-toxcore conan packaging
  - #1684 cleanup: Update INSTALL.md instructions
  - #1679 cleanup: Trivial cleanup
  - #1674 cleanup: filetransfer code
  - #1672 docs: Add instructions for building unit tests to INSTALL.md
  - #1667 chore: Update tox-bootstrapd checksum due to newer packages in Alpine
  - #1664 cleanup: use heap memory instead of stack for large variables
  - #1663 fix: Fix file tests on windows
  - #1633 fix: AppVeyor failing due to conan remote being added twice
  - #1602 fix: Fix buffer over-read when a peer leaves a conference
  - #1586 test: Fix tcp_relay_test by adding a second bootstrap node.
  - #1580 style: Format comments according to tokstyle's requirements.
  - #1557 chore: Add conan support
  - #1537 chore: Cygwin build
  - #1516 cleanup: Make pylint and mypy happy with bootstrap_node_info.py.
  - #1515 style: Run restyled on Travis and Circle CI scripts.
  - #1514 refactor: Remove multi-declarators entirely.
  - #1513 refactor: Disallow multiple initialised declarators per decl.
  - #1510 chore: Don't build pushes to branches, only to tags.
  - #1504 chore: Remove release-drafter configuration in favour of global one.
  - #1498 refactor: Limit scope of loop iterators.
  - #1497 refactor: Use bash arrays instead of strings for static analysis scripts.
  - #1496 cleanup: Stop hard-coding packet IDs in tests.
  - #1495 chore: Exclude imported libsodium sources from restyled.
  - #1493 feat: Add logging to TCP and onion client.
  - #1489 cleanup: NAC_LIBS -&gt; NACL_LIBS.
  - #1487 chore: Add autotools build to localbuild docker images.
  - #1473 chore: Add a script to run Travis CI locally.
  - #1467 fix: Fix a bug in savedata loading when malloc fails.
  - #1464 fix: Fix errors on error paths found by oomer.
  - #1463 cleanup: Add a check that we don't have any unused functions.
  - #1462 cleanup: Include &lt;string.h&gt; for explicit_bzero.
  - #1436 chore: Enable cimple tests by default but allow disabling them.
  * Closed issues:
  - #1598 ERROR: heap-buffer-overflow in group.c found with AddressSanitizer
  - #1326 the cause is great, but this thing is completely unusable
  - #1319 Is this new application is safe &amp; trusted ??
  - #1236 Ruby Extension?
  - #1149 uTox aborts on toxcore restart
  - #886 Maybe need to set the stacksize for musl-libc</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644148800">- Update to 0.2.14
  * Features
  - Add WASM build for toxcore and websocket bootstrap node. @iphydf (#1950)
  - Add programs for creating savedata &amp; bootstrap keys @nurupo (#1818)
  - Add automatic fuzz testing for c-toxcore @sudden6 (#1720)
  * Performance improvements
  - Make the key cracker a bit faster @sudden6 (#1622)
  * Bug Fixes
  - potential freeing of an immutable static buffer @nurupo (#1948)
  - Fix bootstrap on emscripten/wasm. @iphydf (#1945)
  - unintentional integer down-casts @JFreegman (#1928)
  - corruption in key files, making it unable to load when node starts. @Tha14 (#1923)
  - group av memory leak @JFreegman (#1926)
  - vbuffer overwrite in bootstrap config @JFreegman (#1917)
  - Fix toxav_basic_test buffer overflow. @iphydf (#1879)
  - don't count filetransfer as sending until accepted @sudden6 (#1878)
  - Fix some uninitialised memory errors found by valgrind. @iphydf (#1877)
  - a double-unlocking mutex in toxav @nurupo (#1832)
  - use correct sample size in toxav_basic_test @sudden6 (#1845)
  - possible unintended negative loop bound @JFreegman (#1836)
  - Fix file permission issue with toxchat/bootstrap-node Docker container @nurupo (#1765)
  - off-by-one error caused by integer division without proper cast @JFreegman (#1754)
  - Fixed uninitialised value copy. @iphydf (#1751)
  * Documentation
  - Add doxygen configuration and netlify publishing. @iphydf (#1974)
  * Maintenance (Grunt tasks)
  - Make the last few remaining top level comments doxygen style. @iphydf (#1972)
  - Sync all comments between header and source files. @iphydf (#1971)
  - Make run-infer script use docker. @iphydf (#1958)
  - Properly copy Node_format using serialized format @JFreegman (#1955)
  - Disable some cimple warnings for now. @iphydf (#1956)
  - use latest toktok-stack msan version @JFreegman (#1943)
  - Use latest instead of versioned toktok-stack image. @iphydf (#1940)
  - Rename bazel-release to -opt and -debug to -dbg. @iphydf (#1939)
  - Don't run sonar scan on pull requests. @iphydf (#1922)
  - Add a Bazel Buildifier CI job @robinlinden (#1933)
  - Add cpplint to the CI. @iphydf (#1914)
  - Run sonar scan on pull requests. @iphydf (#1918)
  - Add a make_single_file script, used for CI. @iphydf (#1916)
  - Expose public API headers as files in bazel. @iphydf (#1909)
  - Mark unsafe code as testonly. @iphydf (#1905)
  - Add mypy Python type check. @iphydf (#1884)
  - Add sonar-scan analysis on pushes. @iphydf (#1883)
  - Run static analysers in multiple variants. @iphydf (#1880)
  - Ignore some failures in bazel-tsan. @iphydf (#1876)
  - Add asan/tsan bazel builds. @iphydf (#1875)
  - Run tokstyle with 3 cores. @iphydf (#1866)
  - Enable layering check in all c-toxcore build files. @iphydf (#1873)
  - Enable compiler layering check. @iphydf (#1871)
  - Disable the OpenMP cracker in bazel for now. @iphydf (#1870)
  - Retry asan/tsan tests a few more times. @iphydf (#1867)
  - Get all* autotests working with MSVC @robinlinden (#1857)
  - Remove all references to Travis CI. @iphydf (#1862)
  - Add a GH Actions code coverage job @robinlinden (#1850)
  - Remove old travis docker scripts. @iphydf (#1840)
  - Add bazel-debug build. @iphydf (#1837)
  - Add "tcc" and "compcert" compiler targets. @iphydf (#1830)
  - Add macOS build. @iphydf (#1820)
  - Login to dockerhub before trying to push to dockerhub. @iphydf (#1813)
  - Only push versioned docker image on tag builds. @iphydf (#1812)
  - Add bootstrap daemon docker image build. @iphydf (#1811)
  - Remove apidsl comment from tox.h. @iphydf (#1810)
  - Don't run CI on master branch pushes. @iphydf (#1807)
  - merge friend_connections from NGC fork @JFreegman (#1798)
  - Fix up a few source code comment and style issues. @iphydf (#1801)
  - Move cmake-freebsd-stage2 back into the toxcore repo. @iphydf (#1794)
  - Add FreeBSD build to CI. @iphydf (#1793)
  - Add cross compilation CI targets. @iphydf (#1792)
  - Update toktok-stack version. @iphydf (#1779)
  - Tie down the use of doxygen comments. @iphydf (#1778)
  - Remove config.h. @iphydf (#1774)
  - merge tcp_connection changes from new groupchats fork @JFreegman (#1769)
  - Fix gen-file.sh: it wasn't globbing properly. @iphydf (#1773)
  - Add .cc files to the static analysis. @iphydf (#1772)
  - merge DHT changes from new groupchats fork @JFreegman (#1768)
  - Use docker for the autotools ci build. @iphydf (#1766)
  - Add autotools build; exempt crypto_pwhash from tokstyle. @iphydf (#1762)
  - Use an incrementing version number for coverity scans. @iphydf (#1752)
  - Add missing sudo to coverity apt-get calls. @iphydf (#1738)
  - Add clang-tidy review github workflow. @iphydf (#1746)
  - Minor cleanups of warnings given by cppcheck. @iphydf (#1743)
  - Add workflow for running coverity scan. @iphydf (#1736)
  - Add logger to onion and onion announce objects @JFreegman (#1734)
  * Maintenance (Code cleanup)
  - Ensure we limit the system headers included in .h files. @iphydf (#1968)
  - Don't pass the whole DHT object to lan discovery. @iphydf (#1964)
  - make functions take const pointer to IP_Port wherever possible @JFreegman (#1954)
  - Properly copy Node_format using serialized format @JFreegman (#1955)
  - Add some toxav bounds/sanity checks @JFreegman (#1942)
  - small refactor of DHT getnodes function @JFreegman (#1938)
  - remove brackets from ip_ntoa ipv6 formatting @JFreegman (#1937)
  - make some non-const pointers const @JFreegman (#1929)
  - unintentional integer down-casts @JFreegman (#1928)
  - refactor group audio packet data handling @JFreegman (#1920)
  - replace magic numbers with appropriately named constants @JFreegman (#1915)
  - Remove our only use of flexible array members in toxcore. @iphydf (#1910)
  - Remove uses of strcpy and sprintf. @iphydf (#1912)
  - Split large switch statement into functions. @iphydf (#1906)
  - Even more pointer-to-const parameters. @iphydf (#1903)
  - Remove old check Suite compat layer. @iphydf (#1900)
  - Make parameters pointers-to-const where possible. @iphydf (#1901)
  - Make Networking_Core pointer-to-const where possible. @iphydf (#1899)
  - Use pointer cast instead of memcpy in qsort callback. @iphydf (#1898)
  - Deduplicate a somewhat complex loop in DHT.c. @iphydf (#1894)
  - Merge crypto_core and crypto_core_mem. @iphydf (#1881)
  - Stop using strerror directly. @iphydf (#1889)
  - Remove our only use of sprintf. @iphydf (#1891)
  - refactor toxav_call_control @JFreegman (#1841)
  - replace all instances of atoi with strtol @JFreegman (#1874)
  - Remove extra parens around function arguments. @iphydf (#1865)
  - Don't use memcpy where assignment can be used. @iphydf (#1864)
  - Use calloc instead of malloc for struct allocations. @iphydf (#1861)
  - Fix calloc argument order. @iphydf (#1860)
  - Remove useless parentheses. @iphydf (#1853)
  - make struct typedefs have the same name as their struct @JFreegman (#1844)
  - remove dead code @JFreegman (#1835)
  - Reduce the scope of for-loop iterator variables. @iphydf (#1834)
  - Remove hardening code from DHT @zugz (#1673)
  - put breaks inside case braces @JFreegman (#1816)
  - Sync doc comments in a few more .c/.h files. @iphydf (#1802)
  - Move sodium.h include to front of network.c. @iphydf (#1797)
  - remove redundant (and incorrect) comments @JFreegman (#1790)
  - Remove apidsl; remove crypto_memcmp. @iphydf (#1786)
  - fix format-source @JFreegman (#1783)
  - Remove apidsl for everything except the public API. @iphydf (#1775)
  - remove unused function argument from set_tcp_connection_status() @JFreegman (#1776)
  - Remove crypto_pwhash import. @iphydf (#1777)
  - merge onion.c changes from new groupchats fork @JFreegman (#1770)
  - Don't include "config.h" unless needed. @iphydf (#1761)
  - address some unused return values @JFreegman (#1759)
  - use crypto_memzero to wipe secret keys when no longer in use @JFreegman (#1753)
  - Fix some clang-tidy warnings and make them errors. @iphydf (#1747)
  - Put fatal errors where API return values should be impossible @JFreegman (#1740)
  - Enforce for loop consistency. @iphydf (#1744)
  - Use static_assert instead of preprocessor #error. @iphydf (#1735)
  - Avoid endian-specific code in crypto_core. @iphydf (#1727)
  - Minor fixes in test code. @iphydf (#1733)
  - Refactor kill_nonused_tcp() @JFreegman (#1732)
  - Ensure that error codes are always initialised. @iphydf (#1729)
  - Fix last instance of -Wcast-align and enable the warning. @iphydf (#1730)
  * Maintenance (Refactoring)
  - use proper method for generating random numbers in a range @JFreegman (#1975)
  - Deduplicate a bunch of code in TCP client/server. @iphydf (#1897)
  - Extract some functions from the big run_auto_test function. @iphydf (#1819)
  - rename variable to clarify purpose @sudden6 (#1789)
  - Split toxav_iterate into audio and video part @sudden6 (#1307)
  - Clean up friend loading. @sudden6 (#1333)
  - Fix previous refactor @nurupo (#1737)
  * Maintenance (Tests)
  - separate run_auto_tests into a library (revival of #1505) @JFreegman (#1932)
  - refactor autotest live network bootstrapping @JFreegman (#1924)
  - Add two more bootstrap/TCP nodes to autotests @JFreegman (#1887)
  - add ability for autotests to use TCP connections @JFreegman (#1815)
  - Make ERROR logging fatal in tests. @iphydf (#1758)
  - Add a simple test for ip_ntoa. @iphydf (#1742)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644840000">- Update to 0.2.15
  * Bug Fixes
  - Reduce logging verbosity even more. @iphydf (#1984)
  - Reduce logging verbosity in TCP server. @iphydf (#1980)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656244800">- Update to 0.2.18
  * Features
  - Merge group announce portion of new groupchats implementation @JFreegman (#2230)
  - Allow overriding mono_time in tox_new. @iphydf (#2206)
  - Store announcements @zugz (#2147)
  - Add support for custom random number generator. @iphydf (#2190)
  - Merge moderation portion of new groupchats codebase @JFreegman (#2169)
  - Add support for overriding network functions. @iphydf (#2177)
  - Merge onion_announce changes from new groupchats fork @JFreegman (#2164)
  * Performance improvements
  - Make time move a lot faster in fuzzing runs. @iphydf (#2193)
  * Bug Fixes
  - remove the assert because buffer can be larger than UINT16_MAX. @zoff99 (#2299)
  - Don't allow onion paths to be built from real friends. @iphydf (#2287)
  - Fix potential array out-of-bounds in DHT onion path building. @iphydf (#2282)
  - Allow onion paths to be built from more random nodes. @iphydf (#2283)
  - Really fix overrun added in e49a477 @zugz (#2273)
  - Add missing return on error @JFreegman (#2272)
  - Fixed leak and overrun added in e49a477 @zugz (#2266)
  - Format IP as string again in error log. @iphydf (#2257)
  - Fix a stack overflow triggered by small DHT packets. @iphydf (#2255)
  - Don't crash if RNG init failed. @iphydf (#2246)
  - fix typo in git command in INSTALL.md @zugz (#2225)
  - Correct calculation of packet sent time @zugz (#2195)
  - Eliminate memory leak in toxav. @iphydf (#2155)
  - Allow port range in DHT_bootstrap.c. @iphydf (#2143)
  * Documentation
  - Add information regarding git submodules, cmp to INSTALL.md @Tha14 (#2201)
  - Put all the tox public api into a fake "tox" namespace. @iphydf (#2153)
  * Maintenance (Grunt tasks)
  - Release 0.2.18 @robinlinden (#2300)
  - Downgrade C++ version to 17 @JFreegman (#2275)
  - Upgrade to C++20 in CMake build. @iphydf (#2263)
  - Add initial ESP32 docker build. @iphydf (#2243)
  - Add MISRA-2012 check using cppcheck's misra addon. @iphydf (#2251)
  - Support producing shared libraries on Windows @robinlinden (#2204)
  - Add dependabot config. @iphydf (#2236)
  - Fix path to fuzzer binaries in clusterfuzz build. @iphydf (#2228)
  - Add uint8_t version of bin_pack for numbers. @iphydf (#2223)
  - Clone submodules in clusterfuzzlite Dockerfile. @iphydf (#2210)
  - Remove valgrind build. @iphydf (#2208)
  - Add third_party to toxcore-sources docker image. @iphydf (#2189)
  - Use "master" as the branch in toktok-fuzzer. @iphydf (#2173)
  - Enable memory sanitizer build. @iphydf (#2163)
  - Update the Appveyor build to VS2019 to work around conan issues @robinlinden (#2159)
  - Be even more explicit about integer range bounds. @iphydf (#2145)
  - Add testing/Dockerfile to the CI build. @iphydf (#2146)
  * Maintenance (Code cleanup)
  - remove unused field last_seen from Onion_Friend @zugz (#2297)
  - Avoid goto in msi.c. @iphydf (#2281)
  - Replace a series of if statements with a switch. @iphydf (#2233)
  - remove populate_path_nodes_tcp @zugz (#2250)
  - Use static_assert instead of assert where possible. @iphydf (#2242)
  - Make *_free and kill_* functions nullable. @iphydf (#2238)
  - Remove layers in the cmake build. @iphydf (#2229)
  - Add Network object parameter for addr_resolve. @iphydf (#2217)
  - Remove unused random_testing program. @iphydf (#2213)
  - Remove all uses of TOX_*_MAX_SIZE macros. @iphydf (#2214)
  - Add include for assert.h for the fuzzing build. @iphydf (#2224)
  - Move definitions of tox_private.h functions to tox_private.c. @iphydf (#2211)
  - Expand CONST_FUNCTION and remove the macro. @iphydf (#2212)
  - Mark Mono_Time const where possible. @iphydf (#2199)
  - Avoid name clash between struct field and function. @iphydf (#2202)
  - Add more null checks in tox_new. @iphydf (#2200)
  - Make addr_resolve a private function. @iphydf (#2188)
  - Use _Static_assert in gcc/clang. @iphydf (#2186)
  - improve CMakeLists.txt structure @sudden6 (#2101)
  - Expose struct Tox to internal code. @iphydf (#2158)
  - Reduce scope of array-typed variables where possible. @iphydf (#2167)
  - Reduce scope of variables as requested by cimple. @iphydf (#2166)
  - Avoid memset on structs. @iphydf (#2149)
  - Split the huge TCP client packet handler. @iphydf (#2157)
  - Sync doc comments between .h and .c files. @iphydf (#2156)
  - Move all the group.h structs into group.c. @iphydf (#2150)
  - Minor cleanups in TCP_connection.c. @iphydf (#2144)
  - Count re-adding an existing bootstrap node as success. @iphydf (#2142)
  - Disable LAN discovery in TCP-only mode. @iphydf (#2141)
  - Add assertion for decrypted data length. @iphydf (#2140)
  * Maintenance (Dependencies)
  - Use upstream cmp directly instead of our fork. @iphydf (#2240)
  * Maintenance (Refactoring)
  - Move crypto utilities from util to crypto_core. @iphydf (#2284)
  - Avoid static_cast in Fuzz_System functions. @iphydf (#2277)
  - Protect array unpacking against invalid lengths. @iphydf (#2261)
  - Rename announce functions into their own namespace. @iphydf (#2258)
  - Use a struct for the ip_ntoa buffer. @iphydf (#2248)
  - Allow NULL logger; make it no-op in NDEBUG. @iphydf (#2244)
  - Rename bin_pack/unpack functions the same as cmp funcs. @iphydf (#2219)
  - Use cmp instead of msgpack-c for events packing. @iphydf (#2175)
  * Maintenance (Tests)
  - Improve test hermeticity by using local TCP relay. @iphydf (#2280)
  - Add a Null_System used in toxsave_harness. @iphydf (#2289)
  - enable additional sanitizers for fuzzing @sudden6 (#2288)
  - Enable fuzzing for TCP. @iphydf (#2279)
  - Don't abort fuzz test when tox_new fails. @iphydf (#2285)
  - Improve error messages in toxav_basic_test. @iphydf (#2270)
  - Add more functionality to the bootstrap fuzz harness. @iphydf (#2234)
  - Improve stability of forwarding_test. @iphydf (#2249)
  - Add fuzzer support functions for internal toxcore objects. @iphydf (#2232)
  - Add DHT and tox_events fuzz tests to the cmake build. @iphydf (#2187)
  - Remove save_load_test from autotools build. @iphydf (#2196)
  - Enable more tests for msan. @iphydf (#2183)
  - Add some support functions to make writing fuzzers easier. @iphydf (#2184)
  - Improve stability of tox_many_tcp_test. @iphydf (#2182)
  - try to save the fuzzed save file again @sudden6 (#2176)
  - Add fuzzer tests to the bazel build. @iphydf (#2170)
  - Improve the stability of the save_load test @robinlinden (#2160)
  - Speed up toxav_many_test by using fake mono_time. @iphydf (#2154)
- Changes from 0.2.17
  * Performance improvements
  - Refactor onion_client.c do_friends() to reduce network traffic @JFreegman (#2078)
  - fix issue with friend finding taking too long after disconnects. @JFreegman (#2092)
  * Bug Fixes
  - Report failure to DHT bootstrap back to the client. @iphydf (#2104)
  - Null function pointer dereference. @iphydf (#2094)
  - out-of-memory condition by corrupted save file @sudden6 (#2084)
  - toxsave memory leak while loading groups @sudden6 (#2064)
  * Documentation
  - Clean up doxygen comments to be more doxygen-like. @iphydf (#2136)
  * Maintenance (Grunt tasks)
  - Enable a bunch more warnings in GCC builds. @iphydf (#2122)
  - remove cpufeatures.c @sudden6 (#2100)
  - remove DHT_test.c since it's unused @sudden6 (#2098)
  - Add a .clang-format that mostly agrees with astyle. @iphydf (#2075)
  - Make coverity scan a nightly job. @iphydf (#2074)
  - Simplify and speed up windows builds using docker image. @iphydf (#2072)
  - Fix build-args in win32/win64 docker build. @iphydf (#2073)
  - Add docker image builds for windows cross compiler. @iphydf (#2070)
  * Maintenance (Code cleanup)
  - Add explicit callback setters for MSI callbacks. @iphydf (#2134)
  - Split util.c out of the network library. @iphydf (#2131)
  - Remove redundant () around return expression. @iphydf (#2130)
  - Move test-only functions into tests. @iphydf (#2135)
  - Remove redundant Messenger and DHT tests. @iphydf (#2133)
  - Remove EAGAIN from the list of ignored errors. @iphydf (#2127)
  - Remove port from Broadcast_Info. @iphydf (#2126)
  - Don't reference local variables in macro bodies. @iphydf (#2125)
  - Remove some more implicit bool conversions. @iphydf (#2123)
  - Log at ERROR level when connect() fails. @iphydf (#2115)
  - Remove all boolean-int conversions. @iphydf (#2120)
  - Remove more boolean conversions (and a bugfix). @iphydf (#2116)
  - Comply with strict include ordering. @iphydf (#2117)
  - Avoid creating invalid enum values. @iphydf (#2114)
  - Remove superfluous parentheses on the rhs of assignments. @iphydf (#2113)
  - Change valid status of onion friend to bool. @iphydf (#2105)
  - Remove more implicit bool conversions. @iphydf (#2103)
  - Mark all local non-pointers as const where possible. @iphydf (#2102)
  - Reduce name shadowing; remove ptr-to-bool conversions. @iphydf (#2099)
  - Remove implicit conversions from uint32_t to bool. @iphydf (#2097)
  - Return boolean constants, not ints from bool functions. @iphydf (#2096)
  - Remove any disallowed casts. @iphydf (#2093)
  - Avoid casting function pointers. @iphydf (#2091)
  - Enable most cppcheck warnings as errors. @iphydf (#2086)
  - Remove all implicit bool conversions in if-conditions. @iphydf (#2088)
  - Remove unused execution trace library. @iphydf (#2079)
  * Maintenance (Refactoring)
  - Move tox_new_log to auto_test_support. @iphydf (#2090)
  * Maintenance (Tests)
  - Add unit test for create/handle request packets. @iphydf (#2128)
  - Add mallocfail and proxy test to our coverage runs. @iphydf (#2108)
  - Add test coverage docker build for local tests. @iphydf (#2106)
- Changes from 0.2.16
  * Features
  - Improve how we share TCP relays with friends @JFreegman (#2047)
  - add DHT queries to private API @JFreegman (#1935)
  - add bash-completion for tox-bootstrapd @nurupo (#2007)
  - Add unpacker functions for events structures. @iphydf (#1996)
  - Add binary packing functions for tox events. @iphydf (#1993)
  - Add async event handling (callbacks) code. @iphydf (#1952)
  * Performance improvements
  - Take advantage of fast networks for file transfers @zugz (#1668)
  - Reduce minimal encoding size of packed events. @iphydf (#2024)
  * Bug Fixes
  - properly deallocate frozen peers @sudden6 (#2058)
  - Fix return type of functions returning uint64_t. @iphydf (#2052)
  - file transfer bug introduced in commit 2073d02 @JFreegman (#2041)
  - remove bogus asserts in fuzzer harness @sudden6 (#2031)
  - syntax error introduced in 8bf3799 @sudden6 (#2028)
  - add continous fuzzing @sudden6 (#2027)
  - Coverty scan @nurupo (#2018)
  - shared toxcore autotools build failing @nurupo (#2015)
  - Conan build link failures @robinlinden (#2011)
  * Documentation
  - Add libmsgpack dependency in INSTALL.md @cryptogospod (#2016)
  * Maintenance (Grunt tasks)
  - Simplify and speed up nacl build using toxchat/nacl. @iphydf (#2069)
  - Add BUILD file for websockify. @iphydf (#2036)
  - fine tune fuzzing settings @sudden6 (#2035)
  - update the list of CMake options &amp; Windows Docker build deps @nurupo (#2032)
  - expand fuzzing to toxsave @sudden6 (#2030)
  - Fix implicit declaration warning in fuzz build @robinlinden (#2026)
  - add continous fuzzing to our CI @sudden6 (#2025)
  - Set up an Android CI job @robinlinden (#1992)
  - Disable non-null attributes by default. @iphydf (#2021)
  - Silence clang compile warnings causing circle-ci/asan to fail @JFreegman (#2019)
  - Coverty scan @nurupo (#2018)
  - get skeletons out of the closet @nurupo (#2008)
  - shared toxcore autotools build failing @nurupo (#2015)
  - Remove duplicate source file in autotools build. @iphydf (#2010)
  - Add an undefined behaviour/integer sanitizer build. @iphydf (#2001)
  - Speed up cmake builds with UNITY_BUILD. @iphydf (#1999)
  - Add an easy way to run autotools and circleci builds locally. @iphydf (#1982)
  - Update readme header @robinlinden (#1979)
  * Maintenance (Code cleanup)
  - Enable tokstyle's -Wlarge-struct-params. @iphydf (#2053)
  - Avoid implicit bool conversions in logical operators. @iphydf (#2055)
  - Avoid implicit boolean and floating point conversions in decls. @iphydf (#2056)
  - Apply stronger type checks and fix errors. @iphydf (#2049)
  - Avoid implicit pointer-to-bool conversion in if in toxav. @iphydf (#2046)
  - Add some more error path logging to TCP server code. @iphydf (#2033)
  - Add wrapper library for msgpack pack functions @JFreegman (#2023)
  - Don't use VLAs for huge allocations. @iphydf (#2013)
  - Split tox_unpack into two smaller libs @JFreegman (#2022)
  - get skeletons out of the closet @nurupo (#2008)
  - Add more nonnull and nullable annotations. @iphydf (#2006)
  - Add nonnull annotations to function definitions. @iphydf (#2002)
  - Make LAN discovery thread-safe without data races. @iphydf (#1988)
  - Comply with new cimple callback rules. @iphydf (#1987)
  - Split msi callback array into 1 member per callback @robinlinden (#1985)
  * Maintenance (Refactoring)
  - Compare pointers in if conditions to nullptr. @iphydf (#2043)
  - Add a bit more logging; change WARNING to ERROR. @iphydf (#2039)
  * Maintenance (Tests)
  - Add a profiling script and Dockerfile. @iphydf (#2066)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Remove build dependency on msgpack (this was dropped
  and replaced by "cmp" in the 0.2.18 release)
- Use standardized cmake build macros</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1707134400">- Use sysuser-tools to generate c-toxcore user and group.</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1712923200">- Update to 0.2.19
  - Add cmake flag to disable unit tests. @iphydf (#2742)
  - Document that group topic lock is default on. @iphydf (#2744)
  - Add missing param docs for callbacks. @iphydf (#2743)
  - Don't expose Tox_System in the public API @nurupo (#2741)
  - Small API doc fixes @nurupo (#2735)
  - Rename out parameters to out_$something. @iphydf (#2726)
  - event length naming inconsistencies @Green-Sky (#2732)
  - flaky tcp test @Green-Sky (#2369)
  - Update and improve the Windows cross-compilation @nurupo (#2713)
  - Use a specific non-broken slimcc version. @iphydf (#2718)
  - Update github actions. @iphydf (#2712)
  - Update the list of CMake options @nurupo (#2710)
  - Rename Queries to Query to align with other enums. @iphydf (#2705)
  - Correct type for conference offline peer numbers. @iphydf (#2704)
  - Add pkgsrc build. @iphydf (#2699)
  - Add FreeBSD VM action on GitHub. @iphydf (#2700)
  - Build toxcore on NetBSD (VM). @iphydf (#2697)
  - Only install tox_private.h on request. @iphydf (#2698)
  - Don't serve files from websockify. @iphydf (#2695)
  - Correctly pass extended public keys to group moderation code. @iphydf (#2689)
  - Use structs for extended public/secret keys. @iphydf (#2672)
  - Compile libsodium reference implementation with compcert. @iphydf (#2686)
  - Don't use memcpy to cast arbitrary structs to uint8_t[]. @iphydf (#2684)
  - Pass array, not array pointer, to memcmp. @iphydf (#2683)
  - Never pass void* directly to memcpy. @iphydf (#2682)
  - Use tox rng to seed the keypair generation. @iphydf (#2671)
  - Small improvements found by PVS Studio. @iphydf (#2666)
  - Disable NGC saving by default, enable through Tox_Options. @iphydf (#2678)
  - Replace pointer arithmetic with explicit &amp;arr[i]. @iphydf (#2675)
  - Use strong typedef for NGC peer id. @iphydf (#2643)
  - Simplify custom packet length check in NGC. @iphydf (#2659)
  - Correct a few potential null derefs in bootstrap daemon. @iphydf (#2662)
  - Add missing memunlock of local variable when it goes out of scope. @iphydf (#2660)
  - Zero out stack-allocated secret key before return. @iphydf (#2661)
  - Make prune_gc_sanctions_list more obviously correct. @iphydf (#2658)
  - Add static analysis tool list to README. @iphydf (#2656)
  - Run prettier-markdown on markdown files. @iphydf (#2664)
  - Use strong typedef instead of struct for Socket. @iphydf (#2640)
  - Fix some false positive from PVS Studio. @iphydf (#2657)
  - Check that WINXP macro exists before comparing it. @iphydf (#2655)
  - Make tox mutex non-recursive. @iphydf (#2652)
  - Fix up doxyfile. @iphydf (#2647)
  - Add more documentation to crypto_core. @iphydf (#2648)
  - Remove Tox * from tox_dispatch. @iphydf (#2645)
  - Don't rely on tox_dispatch passing tox in tests. @iphydf (#2644)
  - Use C++ mode for clang-tidy. @iphydf (#2642)
  - Check that both gtest and gmock exist for tests. @iphydf (#2637)
  - Add slimcc compiler compatibility test. @iphydf (#2624)
  - Add some comments to the astyle config. @iphydf (#2634)
  - Remove implicit bool conversions. @iphydf (#2621)
  - Rename C++ headers to .hh suffixes. @iphydf (#2626)
  - Further #include cleanups. @iphydf (#2617)
  - Only check the bootstrap daemon checksum on release. @iphydf (#2620)
  - Add more const where possible. @iphydf (#2622)
  - Use Bazel modules to enforce proper #include hygiene. @iphydf (#2614)
  - Move pack/unpack IP_Port from DHT into network module. @iphydf (#2612)
  - Really fix coverage docker image build. @iphydf (#2611)
  - Fix post-submit coverage image. @iphydf (#2610)
  - Don't use memcmp to compare IP_Ports. @iphydf (#2605)
  - Fix rpm build; add a CI check for it. @iphydf (#2604)
  - Speed up docker builds a bit by reducing layer count. @iphydf (#2603)
  - Add const where possible in auto tests. @iphydf (#2602)
  - Minor cleanup of event unpack code. @iphydf (#2580)
  - Rename system_{memory,...} to os_{memory,...}. @iphydf (#2598)
  - Remove all uses of SIZEOF_VLA. @iphydf (#2592)
  - Add goblint static analyser. @iphydf (#2597)
  - Use memzero(x, s) instead of memset(x, 0, s). @iphydf (#2594)
  - Use explicit 0 instead of PACKET_ID_PADDING. @iphydf (#2593)
  - Expand the Tox_Options accessor macros. @iphydf (#2591)
  - Remove plan9 support. @iphydf (#2588)
  - Add a simple new/delete test for Tox. @iphydf (#2590)
  - Add comment after every #endif. @iphydf (#2587)
  - Fix comment I broke in the events test PR. @iphydf (#2583)
  - Migrate auto_tests to new events API. @iphydf (#2559)
  - Add common msgpack array packer with callback. @iphydf (#2577)
  - Rename group to conference in groupav documentation. @iphydf (#2582)
  - Ensure handler params are named after callback params. @iphydf (#2581)
  - Pass this pointer as first param to s11n callbacks. @iphydf (#2575)
  - Allow NULL pointers for byte arrays in events. @iphydf (#2578)
  - Remove bin_pack_{new,free}. @iphydf (#2572)
  - Add dht_get_nodes_response event to the events system. @iphydf (#2568)
  - Use enum-specific pack functions for enum values. @iphydf (#2567)
  - Factor out union pack switch from event packer. @iphydf (#2565)
  - Move the 2-element array pack out of individual events. @iphydf (#2564)
  - Remove empty test doing nothing. @iphydf (#2566)
  - Add printf log statement to group_moderation_test. @iphydf (#2563)
  - Make event dispatch ordered by receive time. @iphydf (#2392)
  - tests use ipv6 by default, even with USE_IPV6 set to 0 @Green-Sky (#2468)
  - add clangd files to .gitignore @Green-Sky (#2562)
  - Move file streaming test to its own file. @iphydf (#2561)
  - window builds now build in parallel @Green-Sky (#2560)
  - Add C++ classes wrapping system interfaces. @iphydf (#2557)
  - Make all the fuzzers work again, and add a test for protodump. @iphydf (#2554)
  - Factor out malloc+memcpy into memdup. @iphydf (#2538)
  - Make sure there's enough space for CONSUME1 in fuzzers. @iphydf (#2552)
  - Add fuzz tests to the coverage run. @iphydf (#2547)
  - Move from gcov to llvm source-based coverage. @iphydf (#2551)
  - Use operator== for equality tests of Node_format. @iphydf (#2545)
  - Slightly nicer C++ interface to tox Random. @iphydf (#2543)
  - Minor refactoring of get_close_nodes functions. @iphydf (#2539)
  - Some more test cleanups, removing overly smart code. @iphydf (#2536)
  - Assign malloc return to a local variable first. @iphydf (#2530)
  - Add more unit tests for add_to_list. @iphydf (#2531)
  - Add "infer" CI check to github, remove from circle. @iphydf (#2529)
  - Add dynamically derived array sizes to the API. @iphydf (#2525)
  - Add explicit array sizes to toxencryptsave. @iphydf (#2524)
  - Add Toxav alias for ToxAV. @iphydf (#2527)
  - Make Tox_Options a typedef. @iphydf (#2526)
  - Simplify msvc build using vcpkg. @iphydf (#2498)
  - Move tox_get_system out of the public API. @iphydf (#2523)
  - Align group message sending with other send functions. @iphydf (#2519)
  - Make setters take non-const Tox *. @iphydf (#2522)
  - Mark arrays in the tox API as [] instead of *. @iphydf (#2520)
  - Make array params in toxav [] instead of *. @iphydf (#2521)
  - Add typedefs for public API int identifiers. @iphydf (#2518)
  - Add fetch-sha256 script to update bootstrap node hash. @iphydf (#2513)
  - Remove settings.yml in favour of hs-github-tools. @iphydf (#2516)
  - Use GPL license with https. @iphydf (#2515)
  - Move all vptr-to-ptr casts to the beginning of a function. @iphydf (#2512)
  - Use github actions matrix to simplify CI. @iphydf (#2510)
  - Use QueryPerformanceCounter on windows for monotonic time. @iphydf (#2509)
  - Add net_(new|kill)_strerror to cppcheck's allocators. @iphydf (#2508)
  - Run clang-tidy on headers, as well. @iphydf (#2507)
  - Make TCP connection failures a warning instead of error. @iphydf (#2506)
  - Make all .c files include the headers they need. @iphydf (#2505)
  - Upgrade to clang-tidy-17 and fix some warnings. @iphydf (#2503)
  - Upgrade cppcheck, fix some warnings. @iphydf (#2504)
  - Use pkg_search_module directly in cmake. @iphydf (#2502)
  - Use target_link_libraries directly in cmake. @iphydf (#2499)
  - Add IMPORTED_TARGET to pkg-config packages. @iphydf (#2501)
  - Remove NaCl support. @iphydf (#2497)
  - unpack enum function names in event impl generator @Green-Sky (#2494)
  - Disable targets for cross-compilation. @iphydf (#2493)
  - Build a docker image with coverage info in it. @iphydf (#2491)
  - Some portability/warning fixes for Windows builds. @iphydf (#2490)
  - Correct a use-after-free and fix some memory leaks. @iphydf (#2488)
  - Change all enum-like #define sequences into enums. @iphydf (#2487)
  - Fix make_single_file to support core-only. @iphydf (#2484)
  - Change the TCP_PACKET_* defines into an enum. @iphydf (#2486)
  - event generation tool for reorder pr @Green-Sky (#2485)
  - Give enum-from-int functions the ability to report errors. @iphydf (#2475)
  - Update github actions uses. @iphydf (#2481)
  - Make esp32 build actually try to instantiate tox. @iphydf (#2439)
  - Remove test net support. @iphydf (#2474)
  - add ngc related unpack functions @Green-Sky (#2480)
  - Add to_string functions for all public enums. @iphydf (#2479)
  - add real timeout test @Green-Sky (#2477)
  - Move s390x build to post-merge. @iphydf (#2476)
  - Slightly reduce bandwidth usage when there are few nodes. @iphydf (#2442)
  - Enable ubsan on bootstrap nodes. @iphydf (#2472)
  - Add check-c run to bazel build. @iphydf (#2470)
  - increase NGC lossy custom packet size @Green-Sky (#2384)
  - replace memset with a loop @nurupo (#2465)
  - also Install header for private/experimental API functions with autotools @zoff99 (#2458)
  - Enable debug flag for ubsan. @iphydf (#2459)
  - memory leaks @nurupo (#2454)
  - replace DEFAULT_TCP_RELAY_PORTS_COUNT with a compile-time calculation @nurupo (#2452)
  - clarify disabling of static assert checks @nurupo (#2451)
  - Use Bin_Pack for packing Node_format. @iphydf (#2420)
  - replace tabs with spaces @nurupo (#2449)
  - Docker tox-bootstrapd hash update failing when using BuildKit @nurupo (#2447)
  - Remove explicit layering_check feature. @iphydf (#2438)
  - Upgrade sonar-scan jvm to java 17. @iphydf (#2437)
  - Add missing htons call when adding configured TCP relay. @iphydf (#2436)
  - Cancel old PR builds on docker and sonar-scan workflows. @iphydf (#2434)
  - Retry freebsd tests 2 times. @iphydf (#2430)
  - Use C99 on MSVC instead of C11. @iphydf (#2432)
  - Add an s390x build (on alpine) for CI. @iphydf (#2429)
  - Add a compcert docker run script. @iphydf (#2428)
  - Use tcc docker image for CI. @iphydf (#2427)
  - allow for larger incoming NGC packets @zoff99 (#2380)
  - Fix memory leak in the error path of loading savedata. @iphydf (#2424)
  - get the number of close dht nodes with announce/store support @Green-Sky (#2357)
  - Add a bin_unpack_bin_max for max-length arrays. @iphydf (#2415)
  - Add more logging to loading conferences from savedata. @iphydf (#2416)
  - Fix GCC compatibility. @iphydf (#2413)
  - Ensure we have allocators available for the error paths. @iphydf (#2408)
  - Remove redundant -DSODIUM_EXPORT from definitions. @iphydf (#2407)
  - Fix a few more clang-tidy warnings. @iphydf (#2406)
  - Fix a few more clang-tidy warnings. @iphydf (#2405)
  - Enforce stricter identifier naming using clang-tidy. @iphydf (#2404)
  - Add mem module to allow tests to override allocators. @iphydf (#2393)
  - Add devcontainer setup for codespaces. @iphydf (#2396)
  - Fix doxygen config and remove some redundant comments. @iphydf (#2391)
  - Fix the Android CI job @robinlinden (#2390)
  - Add missing #include &lt;array&gt;. @iphydf (#2389)
  - add missing ngc constants getter declarations and definitions @Green-Sky (#2383)
  - Add missing module dependencies. @iphydf (#2388)
  - fix group_peer_exit_cb @Green-Sky (#2371)
  - resolve_bootstrap_node() not checking net_getipport() returned count correctly @Green-Sky (#2361)
  - fuzz support for TCP server @sudden6 (#2367)
  - potential endless loop under extremely high load @sudden6 (#2364)
  - enable tcp relay for bootstrap fuzzing @sudden6 (#2362)
  * Breaking changes
  - A more descriptive error for group invite accept function @JFreegman (#2736)
  - align group send err enum order @Green-Sky (#2731)
  - packet broadcast functions now return errors @JFreegman (#2542)
  - tox_new() should return null when savedata loading fails @JFreegman (#1944)
  - Increase max group message length by four bytes @JFreegman (#2351)
  - behaviour of group api function @JFreegman (#2370)
  - group custom packet size limits @JFreegman (#2355)
  * Features
  - add message IDs to private group messages @JFreegman (#2727)
  - Add groupchat API function that returns an IP address string for a peer @JFreegman (#2446)
  - group connection queries now return our own connection type @JFreegman (#2448)
  - Merge the remainder of the new groupchats implementation @JFreegman (#2269)
  * Bug Fixes
  - partially fix a bug that prevented group part messages from sending @JFreegman (#2609)
  - a few off by one errors in group autotests @JFreegman (#2601)
  - issues with packet broadcast error reporting @JFreegman (#2549)
  - DHTBootstrap should always respond to version packets with toxcore version @Tha14 (#2354)
  - inversed return values @JFreegman (#2414)
  - Increase max group message length by four bytes @JFreegman (#2351)
  - #1144 by forcing misc_tools to be a static lib @Green-Sky (#2341)
  - group custom packet size limits @JFreegman (#2355)
  - Remove cmake cache files after copying to container build directory @Tha14 (#2325)
  - missing net to host conversion of port in logging in group_chat.c @Green-Sky (#2340)
  - bug causing friend group invites to sometimes fail &amp; improve logging @JFreegman (#2338)
  - missing net to host conversion of port in logging @Green-Sky (#2339)
  - unlock correct dht_friend @sudden6 (#2327)
  * Documentation
  - add the experimental api build option to INSTALL.md @JFreegman (#2708)
  - Remove defunct IRC channel from README.md @JFreegman (#2456)
  - incorrect documentation @JFreegman (#2381)
  - Update README for bootstrap node docker @Tha14 (#2333)
  - Update README.md to include cmp submodule info @Tha14 (#2323)
  * Maintenance (Grunt tasks)
  - Remove "mod" and "founder" from group API naming scheme @JFreegman (#2709)
  - Spellcheck tox-bootstrapd @nurupo (#2517)
  - tox_new() should return null when savedata loading fails @JFreegman (#1944)
  - Migrate from Appveyor to Azure Pipelines @robinlinden (#2271)
  - disable warning about pre C99 code @sudden6 (#2318)
  * Maintenance (Code cleanup)
  - A more descriptive error for group invite accept function @JFreegman (#2736)
  - use typedef for private message ID's in callback @JFreegman (#2729)
  - correct a few nullable annotations @JFreegman (#2685)
  - make some improvements to group moderation test @JFreegman (#2576)
  - skip a do_gc iteration before removing peers marked for deletion @JFreegman (#2573)
  - Make group packet entry creation less error-prone @JFreegman (#2540)
  - don't pass garbage data buffer to packet send functions @JFreegman (#2541)
  - Make group saving/loading more forgiving with data errors @JFreegman (#2466)
  - make it more clear that assert and uint32_t increment both only exist if NDEBUG is not defined @zoff99 (#2311)
  * Maintenance (Refactoring)
  - Observers/ignored peers can now send and receive custom packets @JFreegman (#2728)
  - Remove "mod" and "founder" from group API naming scheme @JFreegman (#2709)
  - packet broadcast functions now return errors @JFreegman (#2542)
  - Install header for private/experimental API functions @JFreegman (#2453)
  - Store time in Mono_Time in milliseconds. @iphydf (#2203)
  - Make some improvements to how often/when we announce a group @JFreegman (#2348)
  - Refactor: Extract shared key cache into separate file @sudden6 (#2317)
  - extract each case in handle packet in messenger @Green-Sky (#2329)
  * Maintenance (Tests)
  - save_compatibility_test failing on big-endian systems @nurupo (#2696)
  - Add a protocol dump test to generate initial fuzzer input. @iphydf (#2291)</changelog>
</package>
<package pkgid="4d19a9edddee09b9d86d1e932ffd548291fcc5a78b92088bdd2564b4e8680d7f60123372491ceb2fbb10762acc8da3cf8b0ce3a79e19d456bef2d43c6a8b3ee1" name="c-toxcore-daemon" arch="x86_64">
  <version epoch="0" ver="0.2.19" rel="bp160.1.12"/>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1561550400">- update to 0.2.10
  * #1320 add undef guard in tox_many_tcp_test
  * #1314 Fix bazel build version at 0.22.0 for CI.
  * #1311 Disable failing TCP server test
  * #1310 Do not send the same packet to the same node twice
  * #1309 add configurable limit on number of stored frozen peers
  * #1305 Expose api functions for enabling and disabling AV in AV groups
  * #1302 Specify that buffer size for tox_conference_peer_get_name is given by $size
  * #1313 CirrusCI is failing and blocking PRs
  * #1312 Onion client review
  * #1306 Persistent conference's offline peer list always grows and never decreases
  * #1303 Loaded persistent groups fail to send audio
  * #1298 How to make libtox4j-c.so for android?
  * #1261 Bump so version
  * #1116 Message length is too large log spam</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1584964800">- update to 0.2.11
  * #1403 Install libsodium from apt instead of from source.
  * #1402 Remove bazel build from Travis.
  * #1400 Disable bazel remote cache on CI.
  * #1399 Periodically try to send direct packets when connected by TCP.
  * #1398 Minor cleanup: use assoc_timeout function where possible.
  * #1397 Check that LOGGER macros are only called with string literals.
  * #1396 Make function defns match their decls regarding storage class.
  * #1395 Mark file-local function definitions as static.
  * #1394 Enable remote cache for bazel builds.
  * #1393 Add another bootstrap node to the bootstrap test.
  * #1392 Clear out old conference connections.
  * #1391 Minor cleanups in network code.
  * #1390 Avoid casting back and forth between void-ptr.
  * #1389 Standardise on having a comma at the end of enums.
  * #1388 Fix up comments a bit to start being more uniform.
  * #1387 Use rules_cc instead of native cc_library rules.
  * #1386 Use spdx license identifier instead of GPL blurb.
  * #1383 Pass packet ID to custom packet handlers.
  * #1382 Add a mutex lock/unlock inside every public API function.
  * #1381 Use net_pack instead of casting bytes to ints.
  * #1380 Disable FreeBSD travis build until it is fixed.
  * #1379 Update and fix FreeBSD setup on Travis-CI
  * #1378 Use ninja build system for the cmake-linux build.
  * #1376 Remove testing/av_test.c.
  * #1375 Add "cimple_test" to the bazel build.
  * #1374 Handle invite to existing conference
  * #1372 Upgrade bazel to 2.1.1.
  * #1371 Bump to astyle-3.1 in travis build.
  * #1370 use -1 rather than ~0 in unsigned integer types
  * #1362 Workaround for message number saving
  * #1358 Allow Bazel to rerun tests marked as flaky
  * #1352 Update tests to use a working bootstrap node
  * #1349 Fix tox-bootstrapd's README and update Dockerfile
  * #1347 Fix pthread_mutex_destroy getting too many arguments
  * #1346 Fix most TSAN failures
  * #1345 fix concurrency issues in mono_time
  * #1343 Fix TSAN failures in tests
  * #1334 fix missing group title length check
  * #1330 Force IPv4 for cirrus-ci tests
  * #1329 bump libsodium version in appveyor.yml
  * #1322 Clean-up of group.c code
  * #1321 Some small fixes to groups.
  * #1299 Add VScode folder to .gitignore
  * #1297 Use net_pack/unpack instead of host_to_net.
  * #1373 handle crashes after group invites
  * #1368 Are tox clients also open source
  * #1366 Generate a link for websites (Friendship and proxy)
  * #1354 Unstable Tests
  * #1316 Documentation claims toxav_iteration_interval is threadsafe but it's not
  * #1274 build error
  * #850 GPG App Usage</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1589112000">- Update to 0.2.12
  * Merged PRs:
  - #1457 Disable non-hermetic tests by default.
  - #1456 Limit the number of friends you can have to ~4 billion.
  - #1452 Add execution trace option for debugging.
  - #1447 Udp dht group chats
  - #1444 Set up release-drafter to automatically draft the next release.
  - #1443 Allow test coverage to fluctuate 2% up and down, but not below 80%.
  - #1442 Add CODEOWNERS and settings.yml files.
  - #1441 [ImgBot] Optimize images
  - #1439 Fix continuous integration builds.
  - #1437 Rework the toxchat/bootstrap-node Docker image.
  - #1435 Enable TCP relay test in Bazel and autotools build.
  - #1434 Skip invalid TCP relays and DHT nodes when loading save data.
  - #1433 Fix saving of combination of loaded and connected TCP relays
  - #1430 Invert not_valid functions and name them is_valid.
  - #1429 Fix things not being initialized if creating a TCP-only network
  - #1426 Remove tokstyle exemptions from build files.
  - #1425 Stop using the "inline namespace" feature of apidsl.
  - #1424 Add new semi-private API functions to set per-packet-id custom handlers.
  - #1423 Give CI workflow a better name: clang-sanitizers
  - #1422 Use public API for sending in RTP
  - #1421 Install ci-tools and get tokstyle via the script it provides.
  - #1420 Use tox public API for sending packets in toxav BWController
  - #1419 Remove newlines from the end of LOGGER format strings.
  - #1418 Change ToxAVCall struct mutex to a more distinct name
  - #1417 Create own instance of Mono_Time for ToxAV
  - #1416 Stop using Messenger's mono_time in bandwidth controller.
  - #1415 Fix 2 memory leaks in ToxAV.
  - #1414 Show function names in asan/tsan stack traces on CircleCI.
  - #1413 Make afl_toxsave.c a bit more portable; fix memory leak.
  - #1411 Fixes towards building on MSVC.
  - #1409 Mark conference test as small.
  - #1407 Add minimal save generator
  - #1406 Migrate format-source script to new apidsl web app.
  - #1404 Smarter setup of bazel remote cache on Cirrus CI.
  - #1331 Add basic test adapter for AFL
  * Closed issues:
  - #1365 Add the option to use LAN discovery even when using a proxy for remote connections
  - #1353 libtoxdns.a and libtoxav.a
  - #86 Freenet as Offline Messaging Backend</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1639051200">- Update to 0.2.13
  * Merged PRs:
  - #1725 cleanup: add some missing null checks
  - #1723 chore: Run infer static analyser on circle ci builds.
  - #1718 fix: Sec/fix crypto size compute
  - #1716 chore: Use toktok-stack docker image with built third_party.
  - #1713 test: Add some unit tests for important internal DHT functions.
  - #1708 perf: reduce calling into Mono_Time in DHT
  - #1706 chore: Enable cimple tests on cirrus build.
  - #1705 fix: issue with save_load autotest
  - #1703 chore: Upgrade to toktok-stack:0.0.11.
  - #1699 fix: some friend connection issues
  - #1698 fix: bug causing API to report wrong self connection status
  - #1693 chore: Update IRC info
  - #1691 chore: Fix Appveyor and add workarounds for Cirrus CI
  - #1686 chore: Enable c-toxcore conan packaging
  - #1684 cleanup: Update INSTALL.md instructions
  - #1679 cleanup: Trivial cleanup
  - #1674 cleanup: filetransfer code
  - #1672 docs: Add instructions for building unit tests to INSTALL.md
  - #1667 chore: Update tox-bootstrapd checksum due to newer packages in Alpine
  - #1664 cleanup: use heap memory instead of stack for large variables
  - #1663 fix: Fix file tests on windows
  - #1633 fix: AppVeyor failing due to conan remote being added twice
  - #1602 fix: Fix buffer over-read when a peer leaves a conference
  - #1586 test: Fix tcp_relay_test by adding a second bootstrap node.
  - #1580 style: Format comments according to tokstyle's requirements.
  - #1557 chore: Add conan support
  - #1537 chore: Cygwin build
  - #1516 cleanup: Make pylint and mypy happy with bootstrap_node_info.py.
  - #1515 style: Run restyled on Travis and Circle CI scripts.
  - #1514 refactor: Remove multi-declarators entirely.
  - #1513 refactor: Disallow multiple initialised declarators per decl.
  - #1510 chore: Don't build pushes to branches, only to tags.
  - #1504 chore: Remove release-drafter configuration in favour of global one.
  - #1498 refactor: Limit scope of loop iterators.
  - #1497 refactor: Use bash arrays instead of strings for static analysis scripts.
  - #1496 cleanup: Stop hard-coding packet IDs in tests.
  - #1495 chore: Exclude imported libsodium sources from restyled.
  - #1493 feat: Add logging to TCP and onion client.
  - #1489 cleanup: NAC_LIBS -&gt; NACL_LIBS.
  - #1487 chore: Add autotools build to localbuild docker images.
  - #1473 chore: Add a script to run Travis CI locally.
  - #1467 fix: Fix a bug in savedata loading when malloc fails.
  - #1464 fix: Fix errors on error paths found by oomer.
  - #1463 cleanup: Add a check that we don't have any unused functions.
  - #1462 cleanup: Include &lt;string.h&gt; for explicit_bzero.
  - #1436 chore: Enable cimple tests by default but allow disabling them.
  * Closed issues:
  - #1598 ERROR: heap-buffer-overflow in group.c found with AddressSanitizer
  - #1326 the cause is great, but this thing is completely unusable
  - #1319 Is this new application is safe &amp; trusted ??
  - #1236 Ruby Extension?
  - #1149 uTox aborts on toxcore restart
  - #886 Maybe need to set the stacksize for musl-libc</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644148800">- Update to 0.2.14
  * Features
  - Add WASM build for toxcore and websocket bootstrap node. @iphydf (#1950)
  - Add programs for creating savedata &amp; bootstrap keys @nurupo (#1818)
  - Add automatic fuzz testing for c-toxcore @sudden6 (#1720)
  * Performance improvements
  - Make the key cracker a bit faster @sudden6 (#1622)
  * Bug Fixes
  - potential freeing of an immutable static buffer @nurupo (#1948)
  - Fix bootstrap on emscripten/wasm. @iphydf (#1945)
  - unintentional integer down-casts @JFreegman (#1928)
  - corruption in key files, making it unable to load when node starts. @Tha14 (#1923)
  - group av memory leak @JFreegman (#1926)
  - vbuffer overwrite in bootstrap config @JFreegman (#1917)
  - Fix toxav_basic_test buffer overflow. @iphydf (#1879)
  - don't count filetransfer as sending until accepted @sudden6 (#1878)
  - Fix some uninitialised memory errors found by valgrind. @iphydf (#1877)
  - a double-unlocking mutex in toxav @nurupo (#1832)
  - use correct sample size in toxav_basic_test @sudden6 (#1845)
  - possible unintended negative loop bound @JFreegman (#1836)
  - Fix file permission issue with toxchat/bootstrap-node Docker container @nurupo (#1765)
  - off-by-one error caused by integer division without proper cast @JFreegman (#1754)
  - Fixed uninitialised value copy. @iphydf (#1751)
  * Documentation
  - Add doxygen configuration and netlify publishing. @iphydf (#1974)
  * Maintenance (Grunt tasks)
  - Make the last few remaining top level comments doxygen style. @iphydf (#1972)
  - Sync all comments between header and source files. @iphydf (#1971)
  - Make run-infer script use docker. @iphydf (#1958)
  - Properly copy Node_format using serialized format @JFreegman (#1955)
  - Disable some cimple warnings for now. @iphydf (#1956)
  - use latest toktok-stack msan version @JFreegman (#1943)
  - Use latest instead of versioned toktok-stack image. @iphydf (#1940)
  - Rename bazel-release to -opt and -debug to -dbg. @iphydf (#1939)
  - Don't run sonar scan on pull requests. @iphydf (#1922)
  - Add a Bazel Buildifier CI job @robinlinden (#1933)
  - Add cpplint to the CI. @iphydf (#1914)
  - Run sonar scan on pull requests. @iphydf (#1918)
  - Add a make_single_file script, used for CI. @iphydf (#1916)
  - Expose public API headers as files in bazel. @iphydf (#1909)
  - Mark unsafe code as testonly. @iphydf (#1905)
  - Add mypy Python type check. @iphydf (#1884)
  - Add sonar-scan analysis on pushes. @iphydf (#1883)
  - Run static analysers in multiple variants. @iphydf (#1880)
  - Ignore some failures in bazel-tsan. @iphydf (#1876)
  - Add asan/tsan bazel builds. @iphydf (#1875)
  - Run tokstyle with 3 cores. @iphydf (#1866)
  - Enable layering check in all c-toxcore build files. @iphydf (#1873)
  - Enable compiler layering check. @iphydf (#1871)
  - Disable the OpenMP cracker in bazel for now. @iphydf (#1870)
  - Retry asan/tsan tests a few more times. @iphydf (#1867)
  - Get all* autotests working with MSVC @robinlinden (#1857)
  - Remove all references to Travis CI. @iphydf (#1862)
  - Add a GH Actions code coverage job @robinlinden (#1850)
  - Remove old travis docker scripts. @iphydf (#1840)
  - Add bazel-debug build. @iphydf (#1837)
  - Add "tcc" and "compcert" compiler targets. @iphydf (#1830)
  - Add macOS build. @iphydf (#1820)
  - Login to dockerhub before trying to push to dockerhub. @iphydf (#1813)
  - Only push versioned docker image on tag builds. @iphydf (#1812)
  - Add bootstrap daemon docker image build. @iphydf (#1811)
  - Remove apidsl comment from tox.h. @iphydf (#1810)
  - Don't run CI on master branch pushes. @iphydf (#1807)
  - merge friend_connections from NGC fork @JFreegman (#1798)
  - Fix up a few source code comment and style issues. @iphydf (#1801)
  - Move cmake-freebsd-stage2 back into the toxcore repo. @iphydf (#1794)
  - Add FreeBSD build to CI. @iphydf (#1793)
  - Add cross compilation CI targets. @iphydf (#1792)
  - Update toktok-stack version. @iphydf (#1779)
  - Tie down the use of doxygen comments. @iphydf (#1778)
  - Remove config.h. @iphydf (#1774)
  - merge tcp_connection changes from new groupchats fork @JFreegman (#1769)
  - Fix gen-file.sh: it wasn't globbing properly. @iphydf (#1773)
  - Add .cc files to the static analysis. @iphydf (#1772)
  - merge DHT changes from new groupchats fork @JFreegman (#1768)
  - Use docker for the autotools ci build. @iphydf (#1766)
  - Add autotools build; exempt crypto_pwhash from tokstyle. @iphydf (#1762)
  - Use an incrementing version number for coverity scans. @iphydf (#1752)
  - Add missing sudo to coverity apt-get calls. @iphydf (#1738)
  - Add clang-tidy review github workflow. @iphydf (#1746)
  - Minor cleanups of warnings given by cppcheck. @iphydf (#1743)
  - Add workflow for running coverity scan. @iphydf (#1736)
  - Add logger to onion and onion announce objects @JFreegman (#1734)
  * Maintenance (Code cleanup)
  - Ensure we limit the system headers included in .h files. @iphydf (#1968)
  - Don't pass the whole DHT object to lan discovery. @iphydf (#1964)
  - make functions take const pointer to IP_Port wherever possible @JFreegman (#1954)
  - Properly copy Node_format using serialized format @JFreegman (#1955)
  - Add some toxav bounds/sanity checks @JFreegman (#1942)
  - small refactor of DHT getnodes function @JFreegman (#1938)
  - remove brackets from ip_ntoa ipv6 formatting @JFreegman (#1937)
  - make some non-const pointers const @JFreegman (#1929)
  - unintentional integer down-casts @JFreegman (#1928)
  - refactor group audio packet data handling @JFreegman (#1920)
  - replace magic numbers with appropriately named constants @JFreegman (#1915)
  - Remove our only use of flexible array members in toxcore. @iphydf (#1910)
  - Remove uses of strcpy and sprintf. @iphydf (#1912)
  - Split large switch statement into functions. @iphydf (#1906)
  - Even more pointer-to-const parameters. @iphydf (#1903)
  - Remove old check Suite compat layer. @iphydf (#1900)
  - Make parameters pointers-to-const where possible. @iphydf (#1901)
  - Make Networking_Core pointer-to-const where possible. @iphydf (#1899)
  - Use pointer cast instead of memcpy in qsort callback. @iphydf (#1898)
  - Deduplicate a somewhat complex loop in DHT.c. @iphydf (#1894)
  - Merge crypto_core and crypto_core_mem. @iphydf (#1881)
  - Stop using strerror directly. @iphydf (#1889)
  - Remove our only use of sprintf. @iphydf (#1891)
  - refactor toxav_call_control @JFreegman (#1841)
  - replace all instances of atoi with strtol @JFreegman (#1874)
  - Remove extra parens around function arguments. @iphydf (#1865)
  - Don't use memcpy where assignment can be used. @iphydf (#1864)
  - Use calloc instead of malloc for struct allocations. @iphydf (#1861)
  - Fix calloc argument order. @iphydf (#1860)
  - Remove useless parentheses. @iphydf (#1853)
  - make struct typedefs have the same name as their struct @JFreegman (#1844)
  - remove dead code @JFreegman (#1835)
  - Reduce the scope of for-loop iterator variables. @iphydf (#1834)
  - Remove hardening code from DHT @zugz (#1673)
  - put breaks inside case braces @JFreegman (#1816)
  - Sync doc comments in a few more .c/.h files. @iphydf (#1802)
  - Move sodium.h include to front of network.c. @iphydf (#1797)
  - remove redundant (and incorrect) comments @JFreegman (#1790)
  - Remove apidsl; remove crypto_memcmp. @iphydf (#1786)
  - fix format-source @JFreegman (#1783)
  - Remove apidsl for everything except the public API. @iphydf (#1775)
  - remove unused function argument from set_tcp_connection_status() @JFreegman (#1776)
  - Remove crypto_pwhash import. @iphydf (#1777)
  - merge onion.c changes from new groupchats fork @JFreegman (#1770)
  - Don't include "config.h" unless needed. @iphydf (#1761)
  - address some unused return values @JFreegman (#1759)
  - use crypto_memzero to wipe secret keys when no longer in use @JFreegman (#1753)
  - Fix some clang-tidy warnings and make them errors. @iphydf (#1747)
  - Put fatal errors where API return values should be impossible @JFreegman (#1740)
  - Enforce for loop consistency. @iphydf (#1744)
  - Use static_assert instead of preprocessor #error. @iphydf (#1735)
  - Avoid endian-specific code in crypto_core. @iphydf (#1727)
  - Minor fixes in test code. @iphydf (#1733)
  - Refactor kill_nonused_tcp() @JFreegman (#1732)
  - Ensure that error codes are always initialised. @iphydf (#1729)
  - Fix last instance of -Wcast-align and enable the warning. @iphydf (#1730)
  * Maintenance (Refactoring)
  - use proper method for generating random numbers in a range @JFreegman (#1975)
  - Deduplicate a bunch of code in TCP client/server. @iphydf (#1897)
  - Extract some functions from the big run_auto_test function. @iphydf (#1819)
  - rename variable to clarify purpose @sudden6 (#1789)
  - Split toxav_iterate into audio and video part @sudden6 (#1307)
  - Clean up friend loading. @sudden6 (#1333)
  - Fix previous refactor @nurupo (#1737)
  * Maintenance (Tests)
  - separate run_auto_tests into a library (revival of #1505) @JFreegman (#1932)
  - refactor autotest live network bootstrapping @JFreegman (#1924)
  - Add two more bootstrap/TCP nodes to autotests @JFreegman (#1887)
  - add ability for autotests to use TCP connections @JFreegman (#1815)
  - Make ERROR logging fatal in tests. @iphydf (#1758)
  - Add a simple test for ip_ntoa. @iphydf (#1742)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644840000">- Update to 0.2.15
  * Bug Fixes
  - Reduce logging verbosity even more. @iphydf (#1984)
  - Reduce logging verbosity in TCP server. @iphydf (#1980)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656244800">- Update to 0.2.18
  * Features
  - Merge group announce portion of new groupchats implementation @JFreegman (#2230)
  - Allow overriding mono_time in tox_new. @iphydf (#2206)
  - Store announcements @zugz (#2147)
  - Add support for custom random number generator. @iphydf (#2190)
  - Merge moderation portion of new groupchats codebase @JFreegman (#2169)
  - Add support for overriding network functions. @iphydf (#2177)
  - Merge onion_announce changes from new groupchats fork @JFreegman (#2164)
  * Performance improvements
  - Make time move a lot faster in fuzzing runs. @iphydf (#2193)
  * Bug Fixes
  - remove the assert because buffer can be larger than UINT16_MAX. @zoff99 (#2299)
  - Don't allow onion paths to be built from real friends. @iphydf (#2287)
  - Fix potential array out-of-bounds in DHT onion path building. @iphydf (#2282)
  - Allow onion paths to be built from more random nodes. @iphydf (#2283)
  - Really fix overrun added in e49a477 @zugz (#2273)
  - Add missing return on error @JFreegman (#2272)
  - Fixed leak and overrun added in e49a477 @zugz (#2266)
  - Format IP as string again in error log. @iphydf (#2257)
  - Fix a stack overflow triggered by small DHT packets. @iphydf (#2255)
  - Don't crash if RNG init failed. @iphydf (#2246)
  - fix typo in git command in INSTALL.md @zugz (#2225)
  - Correct calculation of packet sent time @zugz (#2195)
  - Eliminate memory leak in toxav. @iphydf (#2155)
  - Allow port range in DHT_bootstrap.c. @iphydf (#2143)
  * Documentation
  - Add information regarding git submodules, cmp to INSTALL.md @Tha14 (#2201)
  - Put all the tox public api into a fake "tox" namespace. @iphydf (#2153)
  * Maintenance (Grunt tasks)
  - Release 0.2.18 @robinlinden (#2300)
  - Downgrade C++ version to 17 @JFreegman (#2275)
  - Upgrade to C++20 in CMake build. @iphydf (#2263)
  - Add initial ESP32 docker build. @iphydf (#2243)
  - Add MISRA-2012 check using cppcheck's misra addon. @iphydf (#2251)
  - Support producing shared libraries on Windows @robinlinden (#2204)
  - Add dependabot config. @iphydf (#2236)
  - Fix path to fuzzer binaries in clusterfuzz build. @iphydf (#2228)
  - Add uint8_t version of bin_pack for numbers. @iphydf (#2223)
  - Clone submodules in clusterfuzzlite Dockerfile. @iphydf (#2210)
  - Remove valgrind build. @iphydf (#2208)
  - Add third_party to toxcore-sources docker image. @iphydf (#2189)
  - Use "master" as the branch in toktok-fuzzer. @iphydf (#2173)
  - Enable memory sanitizer build. @iphydf (#2163)
  - Update the Appveyor build to VS2019 to work around conan issues @robinlinden (#2159)
  - Be even more explicit about integer range bounds. @iphydf (#2145)
  - Add testing/Dockerfile to the CI build. @iphydf (#2146)
  * Maintenance (Code cleanup)
  - remove unused field last_seen from Onion_Friend @zugz (#2297)
  - Avoid goto in msi.c. @iphydf (#2281)
  - Replace a series of if statements with a switch. @iphydf (#2233)
  - remove populate_path_nodes_tcp @zugz (#2250)
  - Use static_assert instead of assert where possible. @iphydf (#2242)
  - Make *_free and kill_* functions nullable. @iphydf (#2238)
  - Remove layers in the cmake build. @iphydf (#2229)
  - Add Network object parameter for addr_resolve. @iphydf (#2217)
  - Remove unused random_testing program. @iphydf (#2213)
  - Remove all uses of TOX_*_MAX_SIZE macros. @iphydf (#2214)
  - Add include for assert.h for the fuzzing build. @iphydf (#2224)
  - Move definitions of tox_private.h functions to tox_private.c. @iphydf (#2211)
  - Expand CONST_FUNCTION and remove the macro. @iphydf (#2212)
  - Mark Mono_Time const where possible. @iphydf (#2199)
  - Avoid name clash between struct field and function. @iphydf (#2202)
  - Add more null checks in tox_new. @iphydf (#2200)
  - Make addr_resolve a private function. @iphydf (#2188)
  - Use _Static_assert in gcc/clang. @iphydf (#2186)
  - improve CMakeLists.txt structure @sudden6 (#2101)
  - Expose struct Tox to internal code. @iphydf (#2158)
  - Reduce scope of array-typed variables where possible. @iphydf (#2167)
  - Reduce scope of variables as requested by cimple. @iphydf (#2166)
  - Avoid memset on structs. @iphydf (#2149)
  - Split the huge TCP client packet handler. @iphydf (#2157)
  - Sync doc comments between .h and .c files. @iphydf (#2156)
  - Move all the group.h structs into group.c. @iphydf (#2150)
  - Minor cleanups in TCP_connection.c. @iphydf (#2144)
  - Count re-adding an existing bootstrap node as success. @iphydf (#2142)
  - Disable LAN discovery in TCP-only mode. @iphydf (#2141)
  - Add assertion for decrypted data length. @iphydf (#2140)
  * Maintenance (Dependencies)
  - Use upstream cmp directly instead of our fork. @iphydf (#2240)
  * Maintenance (Refactoring)
  - Move crypto utilities from util to crypto_core. @iphydf (#2284)
  - Avoid static_cast in Fuzz_System functions. @iphydf (#2277)
  - Protect array unpacking against invalid lengths. @iphydf (#2261)
  - Rename announce functions into their own namespace. @iphydf (#2258)
  - Use a struct for the ip_ntoa buffer. @iphydf (#2248)
  - Allow NULL logger; make it no-op in NDEBUG. @iphydf (#2244)
  - Rename bin_pack/unpack functions the same as cmp funcs. @iphydf (#2219)
  - Use cmp instead of msgpack-c for events packing. @iphydf (#2175)
  * Maintenance (Tests)
  - Improve test hermeticity by using local TCP relay. @iphydf (#2280)
  - Add a Null_System used in toxsave_harness. @iphydf (#2289)
  - enable additional sanitizers for fuzzing @sudden6 (#2288)
  - Enable fuzzing for TCP. @iphydf (#2279)
  - Don't abort fuzz test when tox_new fails. @iphydf (#2285)
  - Improve error messages in toxav_basic_test. @iphydf (#2270)
  - Add more functionality to the bootstrap fuzz harness. @iphydf (#2234)
  - Improve stability of forwarding_test. @iphydf (#2249)
  - Add fuzzer support functions for internal toxcore objects. @iphydf (#2232)
  - Add DHT and tox_events fuzz tests to the cmake build. @iphydf (#2187)
  - Remove save_load_test from autotools build. @iphydf (#2196)
  - Enable more tests for msan. @iphydf (#2183)
  - Add some support functions to make writing fuzzers easier. @iphydf (#2184)
  - Improve stability of tox_many_tcp_test. @iphydf (#2182)
  - try to save the fuzzed save file again @sudden6 (#2176)
  - Add fuzzer tests to the bazel build. @iphydf (#2170)
  - Improve the stability of the save_load test @robinlinden (#2160)
  - Speed up toxav_many_test by using fake mono_time. @iphydf (#2154)
- Changes from 0.2.17
  * Performance improvements
  - Refactor onion_client.c do_friends() to reduce network traffic @JFreegman (#2078)
  - fix issue with friend finding taking too long after disconnects. @JFreegman (#2092)
  * Bug Fixes
  - Report failure to DHT bootstrap back to the client. @iphydf (#2104)
  - Null function pointer dereference. @iphydf (#2094)
  - out-of-memory condition by corrupted save file @sudden6 (#2084)
  - toxsave memory leak while loading groups @sudden6 (#2064)
  * Documentation
  - Clean up doxygen comments to be more doxygen-like. @iphydf (#2136)
  * Maintenance (Grunt tasks)
  - Enable a bunch more warnings in GCC builds. @iphydf (#2122)
  - remove cpufeatures.c @sudden6 (#2100)
  - remove DHT_test.c since it's unused @sudden6 (#2098)
  - Add a .clang-format that mostly agrees with astyle. @iphydf (#2075)
  - Make coverity scan a nightly job. @iphydf (#2074)
  - Simplify and speed up windows builds using docker image. @iphydf (#2072)
  - Fix build-args in win32/win64 docker build. @iphydf (#2073)
  - Add docker image builds for windows cross compiler. @iphydf (#2070)
  * Maintenance (Code cleanup)
  - Add explicit callback setters for MSI callbacks. @iphydf (#2134)
  - Split util.c out of the network library. @iphydf (#2131)
  - Remove redundant () around return expression. @iphydf (#2130)
  - Move test-only functions into tests. @iphydf (#2135)
  - Remove redundant Messenger and DHT tests. @iphydf (#2133)
  - Remove EAGAIN from the list of ignored errors. @iphydf (#2127)
  - Remove port from Broadcast_Info. @iphydf (#2126)
  - Don't reference local variables in macro bodies. @iphydf (#2125)
  - Remove some more implicit bool conversions. @iphydf (#2123)
  - Log at ERROR level when connect() fails. @iphydf (#2115)
  - Remove all boolean-int conversions. @iphydf (#2120)
  - Remove more boolean conversions (and a bugfix). @iphydf (#2116)
  - Comply with strict include ordering. @iphydf (#2117)
  - Avoid creating invalid enum values. @iphydf (#2114)
  - Remove superfluous parentheses on the rhs of assignments. @iphydf (#2113)
  - Change valid status of onion friend to bool. @iphydf (#2105)
  - Remove more implicit bool conversions. @iphydf (#2103)
  - Mark all local non-pointers as const where possible. @iphydf (#2102)
  - Reduce name shadowing; remove ptr-to-bool conversions. @iphydf (#2099)
  - Remove implicit conversions from uint32_t to bool. @iphydf (#2097)
  - Return boolean constants, not ints from bool functions. @iphydf (#2096)
  - Remove any disallowed casts. @iphydf (#2093)
  - Avoid casting function pointers. @iphydf (#2091)
  - Enable most cppcheck warnings as errors. @iphydf (#2086)
  - Remove all implicit bool conversions in if-conditions. @iphydf (#2088)
  - Remove unused execution trace library. @iphydf (#2079)
  * Maintenance (Refactoring)
  - Move tox_new_log to auto_test_support. @iphydf (#2090)
  * Maintenance (Tests)
  - Add unit test for create/handle request packets. @iphydf (#2128)
  - Add mallocfail and proxy test to our coverage runs. @iphydf (#2108)
  - Add test coverage docker build for local tests. @iphydf (#2106)
- Changes from 0.2.16
  * Features
  - Improve how we share TCP relays with friends @JFreegman (#2047)
  - add DHT queries to private API @JFreegman (#1935)
  - add bash-completion for tox-bootstrapd @nurupo (#2007)
  - Add unpacker functions for events structures. @iphydf (#1996)
  - Add binary packing functions for tox events. @iphydf (#1993)
  - Add async event handling (callbacks) code. @iphydf (#1952)
  * Performance improvements
  - Take advantage of fast networks for file transfers @zugz (#1668)
  - Reduce minimal encoding size of packed events. @iphydf (#2024)
  * Bug Fixes
  - properly deallocate frozen peers @sudden6 (#2058)
  - Fix return type of functions returning uint64_t. @iphydf (#2052)
  - file transfer bug introduced in commit 2073d02 @JFreegman (#2041)
  - remove bogus asserts in fuzzer harness @sudden6 (#2031)
  - syntax error introduced in 8bf3799 @sudden6 (#2028)
  - add continous fuzzing @sudden6 (#2027)
  - Coverty scan @nurupo (#2018)
  - shared toxcore autotools build failing @nurupo (#2015)
  - Conan build link failures @robinlinden (#2011)
  * Documentation
  - Add libmsgpack dependency in INSTALL.md @cryptogospod (#2016)
  * Maintenance (Grunt tasks)
  - Simplify and speed up nacl build using toxchat/nacl. @iphydf (#2069)
  - Add BUILD file for websockify. @iphydf (#2036)
  - fine tune fuzzing settings @sudden6 (#2035)
  - update the list of CMake options &amp; Windows Docker build deps @nurupo (#2032)
  - expand fuzzing to toxsave @sudden6 (#2030)
  - Fix implicit declaration warning in fuzz build @robinlinden (#2026)
  - add continous fuzzing to our CI @sudden6 (#2025)
  - Set up an Android CI job @robinlinden (#1992)
  - Disable non-null attributes by default. @iphydf (#2021)
  - Silence clang compile warnings causing circle-ci/asan to fail @JFreegman (#2019)
  - Coverty scan @nurupo (#2018)
  - get skeletons out of the closet @nurupo (#2008)
  - shared toxcore autotools build failing @nurupo (#2015)
  - Remove duplicate source file in autotools build. @iphydf (#2010)
  - Add an undefined behaviour/integer sanitizer build. @iphydf (#2001)
  - Speed up cmake builds with UNITY_BUILD. @iphydf (#1999)
  - Add an easy way to run autotools and circleci builds locally. @iphydf (#1982)
  - Update readme header @robinlinden (#1979)
  * Maintenance (Code cleanup)
  - Enable tokstyle's -Wlarge-struct-params. @iphydf (#2053)
  - Avoid implicit bool conversions in logical operators. @iphydf (#2055)
  - Avoid implicit boolean and floating point conversions in decls. @iphydf (#2056)
  - Apply stronger type checks and fix errors. @iphydf (#2049)
  - Avoid implicit pointer-to-bool conversion in if in toxav. @iphydf (#2046)
  - Add some more error path logging to TCP server code. @iphydf (#2033)
  - Add wrapper library for msgpack pack functions @JFreegman (#2023)
  - Don't use VLAs for huge allocations. @iphydf (#2013)
  - Split tox_unpack into two smaller libs @JFreegman (#2022)
  - get skeletons out of the closet @nurupo (#2008)
  - Add more nonnull and nullable annotations. @iphydf (#2006)
  - Add nonnull annotations to function definitions. @iphydf (#2002)
  - Make LAN discovery thread-safe without data races. @iphydf (#1988)
  - Comply with new cimple callback rules. @iphydf (#1987)
  - Split msi callback array into 1 member per callback @robinlinden (#1985)
  * Maintenance (Refactoring)
  - Compare pointers in if conditions to nullptr. @iphydf (#2043)
  - Add a bit more logging; change WARNING to ERROR. @iphydf (#2039)
  * Maintenance (Tests)
  - Add a profiling script and Dockerfile. @iphydf (#2066)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Remove build dependency on msgpack (this was dropped
  and replaced by "cmp" in the 0.2.18 release)
- Use standardized cmake build macros</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1707134400">- Use sysuser-tools to generate c-toxcore user and group.</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1712923200">- Update to 0.2.19
  - Add cmake flag to disable unit tests. @iphydf (#2742)
  - Document that group topic lock is default on. @iphydf (#2744)
  - Add missing param docs for callbacks. @iphydf (#2743)
  - Don't expose Tox_System in the public API @nurupo (#2741)
  - Small API doc fixes @nurupo (#2735)
  - Rename out parameters to out_$something. @iphydf (#2726)
  - event length naming inconsistencies @Green-Sky (#2732)
  - flaky tcp test @Green-Sky (#2369)
  - Update and improve the Windows cross-compilation @nurupo (#2713)
  - Use a specific non-broken slimcc version. @iphydf (#2718)
  - Update github actions. @iphydf (#2712)
  - Update the list of CMake options @nurupo (#2710)
  - Rename Queries to Query to align with other enums. @iphydf (#2705)
  - Correct type for conference offline peer numbers. @iphydf (#2704)
  - Add pkgsrc build. @iphydf (#2699)
  - Add FreeBSD VM action on GitHub. @iphydf (#2700)
  - Build toxcore on NetBSD (VM). @iphydf (#2697)
  - Only install tox_private.h on request. @iphydf (#2698)
  - Don't serve files from websockify. @iphydf (#2695)
  - Correctly pass extended public keys to group moderation code. @iphydf (#2689)
  - Use structs for extended public/secret keys. @iphydf (#2672)
  - Compile libsodium reference implementation with compcert. @iphydf (#2686)
  - Don't use memcpy to cast arbitrary structs to uint8_t[]. @iphydf (#2684)
  - Pass array, not array pointer, to memcmp. @iphydf (#2683)
  - Never pass void* directly to memcpy. @iphydf (#2682)
  - Use tox rng to seed the keypair generation. @iphydf (#2671)
  - Small improvements found by PVS Studio. @iphydf (#2666)
  - Disable NGC saving by default, enable through Tox_Options. @iphydf (#2678)
  - Replace pointer arithmetic with explicit &amp;arr[i]. @iphydf (#2675)
  - Use strong typedef for NGC peer id. @iphydf (#2643)
  - Simplify custom packet length check in NGC. @iphydf (#2659)
  - Correct a few potential null derefs in bootstrap daemon. @iphydf (#2662)
  - Add missing memunlock of local variable when it goes out of scope. @iphydf (#2660)
  - Zero out stack-allocated secret key before return. @iphydf (#2661)
  - Make prune_gc_sanctions_list more obviously correct. @iphydf (#2658)
  - Add static analysis tool list to README. @iphydf (#2656)
  - Run prettier-markdown on markdown files. @iphydf (#2664)
  - Use strong typedef instead of struct for Socket. @iphydf (#2640)
  - Fix some false positive from PVS Studio. @iphydf (#2657)
  - Check that WINXP macro exists before comparing it. @iphydf (#2655)
  - Make tox mutex non-recursive. @iphydf (#2652)
  - Fix up doxyfile. @iphydf (#2647)
  - Add more documentation to crypto_core. @iphydf (#2648)
  - Remove Tox * from tox_dispatch. @iphydf (#2645)
  - Don't rely on tox_dispatch passing tox in tests. @iphydf (#2644)
  - Use C++ mode for clang-tidy. @iphydf (#2642)
  - Check that both gtest and gmock exist for tests. @iphydf (#2637)
  - Add slimcc compiler compatibility test. @iphydf (#2624)
  - Add some comments to the astyle config. @iphydf (#2634)
  - Remove implicit bool conversions. @iphydf (#2621)
  - Rename C++ headers to .hh suffixes. @iphydf (#2626)
  - Further #include cleanups. @iphydf (#2617)
  - Only check the bootstrap daemon checksum on release. @iphydf (#2620)
  - Add more const where possible. @iphydf (#2622)
  - Use Bazel modules to enforce proper #include hygiene. @iphydf (#2614)
  - Move pack/unpack IP_Port from DHT into network module. @iphydf (#2612)
  - Really fix coverage docker image build. @iphydf (#2611)
  - Fix post-submit coverage image. @iphydf (#2610)
  - Don't use memcmp to compare IP_Ports. @iphydf (#2605)
  - Fix rpm build; add a CI check for it. @iphydf (#2604)
  - Speed up docker builds a bit by reducing layer count. @iphydf (#2603)
  - Add const where possible in auto tests. @iphydf (#2602)
  - Minor cleanup of event unpack code. @iphydf (#2580)
  - Rename system_{memory,...} to os_{memory,...}. @iphydf (#2598)
  - Remove all uses of SIZEOF_VLA. @iphydf (#2592)
  - Add goblint static analyser. @iphydf (#2597)
  - Use memzero(x, s) instead of memset(x, 0, s). @iphydf (#2594)
  - Use explicit 0 instead of PACKET_ID_PADDING. @iphydf (#2593)
  - Expand the Tox_Options accessor macros. @iphydf (#2591)
  - Remove plan9 support. @iphydf (#2588)
  - Add a simple new/delete test for Tox. @iphydf (#2590)
  - Add comment after every #endif. @iphydf (#2587)
  - Fix comment I broke in the events test PR. @iphydf (#2583)
  - Migrate auto_tests to new events API. @iphydf (#2559)
  - Add common msgpack array packer with callback. @iphydf (#2577)
  - Rename group to conference in groupav documentation. @iphydf (#2582)
  - Ensure handler params are named after callback params. @iphydf (#2581)
  - Pass this pointer as first param to s11n callbacks. @iphydf (#2575)
  - Allow NULL pointers for byte arrays in events. @iphydf (#2578)
  - Remove bin_pack_{new,free}. @iphydf (#2572)
  - Add dht_get_nodes_response event to the events system. @iphydf (#2568)
  - Use enum-specific pack functions for enum values. @iphydf (#2567)
  - Factor out union pack switch from event packer. @iphydf (#2565)
  - Move the 2-element array pack out of individual events. @iphydf (#2564)
  - Remove empty test doing nothing. @iphydf (#2566)
  - Add printf log statement to group_moderation_test. @iphydf (#2563)
  - Make event dispatch ordered by receive time. @iphydf (#2392)
  - tests use ipv6 by default, even with USE_IPV6 set to 0 @Green-Sky (#2468)
  - add clangd files to .gitignore @Green-Sky (#2562)
  - Move file streaming test to its own file. @iphydf (#2561)
  - window builds now build in parallel @Green-Sky (#2560)
  - Add C++ classes wrapping system interfaces. @iphydf (#2557)
  - Make all the fuzzers work again, and add a test for protodump. @iphydf (#2554)
  - Factor out malloc+memcpy into memdup. @iphydf (#2538)
  - Make sure there's enough space for CONSUME1 in fuzzers. @iphydf (#2552)
  - Add fuzz tests to the coverage run. @iphydf (#2547)
  - Move from gcov to llvm source-based coverage. @iphydf (#2551)
  - Use operator== for equality tests of Node_format. @iphydf (#2545)
  - Slightly nicer C++ interface to tox Random. @iphydf (#2543)
  - Minor refactoring of get_close_nodes functions. @iphydf (#2539)
  - Some more test cleanups, removing overly smart code. @iphydf (#2536)
  - Assign malloc return to a local variable first. @iphydf (#2530)
  - Add more unit tests for add_to_list. @iphydf (#2531)
  - Add "infer" CI check to github, remove from circle. @iphydf (#2529)
  - Add dynamically derived array sizes to the API. @iphydf (#2525)
  - Add explicit array sizes to toxencryptsave. @iphydf (#2524)
  - Add Toxav alias for ToxAV. @iphydf (#2527)
  - Make Tox_Options a typedef. @iphydf (#2526)
  - Simplify msvc build using vcpkg. @iphydf (#2498)
  - Move tox_get_system out of the public API. @iphydf (#2523)
  - Align group message sending with other send functions. @iphydf (#2519)
  - Make setters take non-const Tox *. @iphydf (#2522)
  - Mark arrays in the tox API as [] instead of *. @iphydf (#2520)
  - Make array params in toxav [] instead of *. @iphydf (#2521)
  - Add typedefs for public API int identifiers. @iphydf (#2518)
  - Add fetch-sha256 script to update bootstrap node hash. @iphydf (#2513)
  - Remove settings.yml in favour of hs-github-tools. @iphydf (#2516)
  - Use GPL license with https. @iphydf (#2515)
  - Move all vptr-to-ptr casts to the beginning of a function. @iphydf (#2512)
  - Use github actions matrix to simplify CI. @iphydf (#2510)
  - Use QueryPerformanceCounter on windows for monotonic time. @iphydf (#2509)
  - Add net_(new|kill)_strerror to cppcheck's allocators. @iphydf (#2508)
  - Run clang-tidy on headers, as well. @iphydf (#2507)
  - Make TCP connection failures a warning instead of error. @iphydf (#2506)
  - Make all .c files include the headers they need. @iphydf (#2505)
  - Upgrade to clang-tidy-17 and fix some warnings. @iphydf (#2503)
  - Upgrade cppcheck, fix some warnings. @iphydf (#2504)
  - Use pkg_search_module directly in cmake. @iphydf (#2502)
  - Use target_link_libraries directly in cmake. @iphydf (#2499)
  - Add IMPORTED_TARGET to pkg-config packages. @iphydf (#2501)
  - Remove NaCl support. @iphydf (#2497)
  - unpack enum function names in event impl generator @Green-Sky (#2494)
  - Disable targets for cross-compilation. @iphydf (#2493)
  - Build a docker image with coverage info in it. @iphydf (#2491)
  - Some portability/warning fixes for Windows builds. @iphydf (#2490)
  - Correct a use-after-free and fix some memory leaks. @iphydf (#2488)
  - Change all enum-like #define sequences into enums. @iphydf (#2487)
  - Fix make_single_file to support core-only. @iphydf (#2484)
  - Change the TCP_PACKET_* defines into an enum. @iphydf (#2486)
  - event generation tool for reorder pr @Green-Sky (#2485)
  - Give enum-from-int functions the ability to report errors. @iphydf (#2475)
  - Update github actions uses. @iphydf (#2481)
  - Make esp32 build actually try to instantiate tox. @iphydf (#2439)
  - Remove test net support. @iphydf (#2474)
  - add ngc related unpack functions @Green-Sky (#2480)
  - Add to_string functions for all public enums. @iphydf (#2479)
  - add real timeout test @Green-Sky (#2477)
  - Move s390x build to post-merge. @iphydf (#2476)
  - Slightly reduce bandwidth usage when there are few nodes. @iphydf (#2442)
  - Enable ubsan on bootstrap nodes. @iphydf (#2472)
  - Add check-c run to bazel build. @iphydf (#2470)
  - increase NGC lossy custom packet size @Green-Sky (#2384)
  - replace memset with a loop @nurupo (#2465)
  - also Install header for private/experimental API functions with autotools @zoff99 (#2458)
  - Enable debug flag for ubsan. @iphydf (#2459)
  - memory leaks @nurupo (#2454)
  - replace DEFAULT_TCP_RELAY_PORTS_COUNT with a compile-time calculation @nurupo (#2452)
  - clarify disabling of static assert checks @nurupo (#2451)
  - Use Bin_Pack for packing Node_format. @iphydf (#2420)
  - replace tabs with spaces @nurupo (#2449)
  - Docker tox-bootstrapd hash update failing when using BuildKit @nurupo (#2447)
  - Remove explicit layering_check feature. @iphydf (#2438)
  - Upgrade sonar-scan jvm to java 17. @iphydf (#2437)
  - Add missing htons call when adding configured TCP relay. @iphydf (#2436)
  - Cancel old PR builds on docker and sonar-scan workflows. @iphydf (#2434)
  - Retry freebsd tests 2 times. @iphydf (#2430)
  - Use C99 on MSVC instead of C11. @iphydf (#2432)
  - Add an s390x build (on alpine) for CI. @iphydf (#2429)
  - Add a compcert docker run script. @iphydf (#2428)
  - Use tcc docker image for CI. @iphydf (#2427)
  - allow for larger incoming NGC packets @zoff99 (#2380)
  - Fix memory leak in the error path of loading savedata. @iphydf (#2424)
  - get the number of close dht nodes with announce/store support @Green-Sky (#2357)
  - Add a bin_unpack_bin_max for max-length arrays. @iphydf (#2415)
  - Add more logging to loading conferences from savedata. @iphydf (#2416)
  - Fix GCC compatibility. @iphydf (#2413)
  - Ensure we have allocators available for the error paths. @iphydf (#2408)
  - Remove redundant -DSODIUM_EXPORT from definitions. @iphydf (#2407)
  - Fix a few more clang-tidy warnings. @iphydf (#2406)
  - Fix a few more clang-tidy warnings. @iphydf (#2405)
  - Enforce stricter identifier naming using clang-tidy. @iphydf (#2404)
  - Add mem module to allow tests to override allocators. @iphydf (#2393)
  - Add devcontainer setup for codespaces. @iphydf (#2396)
  - Fix doxygen config and remove some redundant comments. @iphydf (#2391)
  - Fix the Android CI job @robinlinden (#2390)
  - Add missing #include &lt;array&gt;. @iphydf (#2389)
  - add missing ngc constants getter declarations and definitions @Green-Sky (#2383)
  - Add missing module dependencies. @iphydf (#2388)
  - fix group_peer_exit_cb @Green-Sky (#2371)
  - resolve_bootstrap_node() not checking net_getipport() returned count correctly @Green-Sky (#2361)
  - fuzz support for TCP server @sudden6 (#2367)
  - potential endless loop under extremely high load @sudden6 (#2364)
  - enable tcp relay for bootstrap fuzzing @sudden6 (#2362)
  * Breaking changes
  - A more descriptive error for group invite accept function @JFreegman (#2736)
  - align group send err enum order @Green-Sky (#2731)
  - packet broadcast functions now return errors @JFreegman (#2542)
  - tox_new() should return null when savedata loading fails @JFreegman (#1944)
  - Increase max group message length by four bytes @JFreegman (#2351)
  - behaviour of group api function @JFreegman (#2370)
  - group custom packet size limits @JFreegman (#2355)
  * Features
  - add message IDs to private group messages @JFreegman (#2727)
  - Add groupchat API function that returns an IP address string for a peer @JFreegman (#2446)
  - group connection queries now return our own connection type @JFreegman (#2448)
  - Merge the remainder of the new groupchats implementation @JFreegman (#2269)
  * Bug Fixes
  - partially fix a bug that prevented group part messages from sending @JFreegman (#2609)
  - a few off by one errors in group autotests @JFreegman (#2601)
  - issues with packet broadcast error reporting @JFreegman (#2549)
  - DHTBootstrap should always respond to version packets with toxcore version @Tha14 (#2354)
  - inversed return values @JFreegman (#2414)
  - Increase max group message length by four bytes @JFreegman (#2351)
  - #1144 by forcing misc_tools to be a static lib @Green-Sky (#2341)
  - group custom packet size limits @JFreegman (#2355)
  - Remove cmake cache files after copying to container build directory @Tha14 (#2325)
  - missing net to host conversion of port in logging in group_chat.c @Green-Sky (#2340)
  - bug causing friend group invites to sometimes fail &amp; improve logging @JFreegman (#2338)
  - missing net to host conversion of port in logging @Green-Sky (#2339)
  - unlock correct dht_friend @sudden6 (#2327)
  * Documentation
  - add the experimental api build option to INSTALL.md @JFreegman (#2708)
  - Remove defunct IRC channel from README.md @JFreegman (#2456)
  - incorrect documentation @JFreegman (#2381)
  - Update README for bootstrap node docker @Tha14 (#2333)
  - Update README.md to include cmp submodule info @Tha14 (#2323)
  * Maintenance (Grunt tasks)
  - Remove "mod" and "founder" from group API naming scheme @JFreegman (#2709)
  - Spellcheck tox-bootstrapd @nurupo (#2517)
  - tox_new() should return null when savedata loading fails @JFreegman (#1944)
  - Migrate from Appveyor to Azure Pipelines @robinlinden (#2271)
  - disable warning about pre C99 code @sudden6 (#2318)
  * Maintenance (Code cleanup)
  - A more descriptive error for group invite accept function @JFreegman (#2736)
  - use typedef for private message ID's in callback @JFreegman (#2729)
  - correct a few nullable annotations @JFreegman (#2685)
  - make some improvements to group moderation test @JFreegman (#2576)
  - skip a do_gc iteration before removing peers marked for deletion @JFreegman (#2573)
  - Make group packet entry creation less error-prone @JFreegman (#2540)
  - don't pass garbage data buffer to packet send functions @JFreegman (#2541)
  - Make group saving/loading more forgiving with data errors @JFreegman (#2466)
  - make it more clear that assert and uint32_t increment both only exist if NDEBUG is not defined @zoff99 (#2311)
  * Maintenance (Refactoring)
  - Observers/ignored peers can now send and receive custom packets @JFreegman (#2728)
  - Remove "mod" and "founder" from group API naming scheme @JFreegman (#2709)
  - packet broadcast functions now return errors @JFreegman (#2542)
  - Install header for private/experimental API functions @JFreegman (#2453)
  - Store time in Mono_Time in milliseconds. @iphydf (#2203)
  - Make some improvements to how often/when we announce a group @JFreegman (#2348)
  - Refactor: Extract shared key cache into separate file @sudden6 (#2317)
  - extract each case in handle packet in messenger @Green-Sky (#2329)
  * Maintenance (Tests)
  - save_compatibility_test failing on big-endian systems @nurupo (#2696)
  - Add a protocol dump test to generate initial fuzzer input. @iphydf (#2291)</changelog>
</package>
<package pkgid="4dd81fef0e8d163beae65a1a7c867c0d957e21e17e29d24397dff0c93fe7cd361153a604e5c5afa32d97c8fbe8b1c74e0a854fd4aef190357e48ab220fea3a02" name="c-toxcore-devel" arch="x86_64">
  <version epoch="0" ver="0.2.19" rel="bp160.1.12"/>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1561550400">- update to 0.2.10
  * #1320 add undef guard in tox_many_tcp_test
  * #1314 Fix bazel build version at 0.22.0 for CI.
  * #1311 Disable failing TCP server test
  * #1310 Do not send the same packet to the same node twice
  * #1309 add configurable limit on number of stored frozen peers
  * #1305 Expose api functions for enabling and disabling AV in AV groups
  * #1302 Specify that buffer size for tox_conference_peer_get_name is given by $size
  * #1313 CirrusCI is failing and blocking PRs
  * #1312 Onion client review
  * #1306 Persistent conference's offline peer list always grows and never decreases
  * #1303 Loaded persistent groups fail to send audio
  * #1298 How to make libtox4j-c.so for android?
  * #1261 Bump so version
  * #1116 Message length is too large log spam</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1584964800">- update to 0.2.11
  * #1403 Install libsodium from apt instead of from source.
  * #1402 Remove bazel build from Travis.
  * #1400 Disable bazel remote cache on CI.
  * #1399 Periodically try to send direct packets when connected by TCP.
  * #1398 Minor cleanup: use assoc_timeout function where possible.
  * #1397 Check that LOGGER macros are only called with string literals.
  * #1396 Make function defns match their decls regarding storage class.
  * #1395 Mark file-local function definitions as static.
  * #1394 Enable remote cache for bazel builds.
  * #1393 Add another bootstrap node to the bootstrap test.
  * #1392 Clear out old conference connections.
  * #1391 Minor cleanups in network code.
  * #1390 Avoid casting back and forth between void-ptr.
  * #1389 Standardise on having a comma at the end of enums.
  * #1388 Fix up comments a bit to start being more uniform.
  * #1387 Use rules_cc instead of native cc_library rules.
  * #1386 Use spdx license identifier instead of GPL blurb.
  * #1383 Pass packet ID to custom packet handlers.
  * #1382 Add a mutex lock/unlock inside every public API function.
  * #1381 Use net_pack instead of casting bytes to ints.
  * #1380 Disable FreeBSD travis build until it is fixed.
  * #1379 Update and fix FreeBSD setup on Travis-CI
  * #1378 Use ninja build system for the cmake-linux build.
  * #1376 Remove testing/av_test.c.
  * #1375 Add "cimple_test" to the bazel build.
  * #1374 Handle invite to existing conference
  * #1372 Upgrade bazel to 2.1.1.
  * #1371 Bump to astyle-3.1 in travis build.
  * #1370 use -1 rather than ~0 in unsigned integer types
  * #1362 Workaround for message number saving
  * #1358 Allow Bazel to rerun tests marked as flaky
  * #1352 Update tests to use a working bootstrap node
  * #1349 Fix tox-bootstrapd's README and update Dockerfile
  * #1347 Fix pthread_mutex_destroy getting too many arguments
  * #1346 Fix most TSAN failures
  * #1345 fix concurrency issues in mono_time
  * #1343 Fix TSAN failures in tests
  * #1334 fix missing group title length check
  * #1330 Force IPv4 for cirrus-ci tests
  * #1329 bump libsodium version in appveyor.yml
  * #1322 Clean-up of group.c code
  * #1321 Some small fixes to groups.
  * #1299 Add VScode folder to .gitignore
  * #1297 Use net_pack/unpack instead of host_to_net.
  * #1373 handle crashes after group invites
  * #1368 Are tox clients also open source
  * #1366 Generate a link for websites (Friendship and proxy)
  * #1354 Unstable Tests
  * #1316 Documentation claims toxav_iteration_interval is threadsafe but it's not
  * #1274 build error
  * #850 GPG App Usage</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1589112000">- Update to 0.2.12
  * Merged PRs:
  - #1457 Disable non-hermetic tests by default.
  - #1456 Limit the number of friends you can have to ~4 billion.
  - #1452 Add execution trace option for debugging.
  - #1447 Udp dht group chats
  - #1444 Set up release-drafter to automatically draft the next release.
  - #1443 Allow test coverage to fluctuate 2% up and down, but not below 80%.
  - #1442 Add CODEOWNERS and settings.yml files.
  - #1441 [ImgBot] Optimize images
  - #1439 Fix continuous integration builds.
  - #1437 Rework the toxchat/bootstrap-node Docker image.
  - #1435 Enable TCP relay test in Bazel and autotools build.
  - #1434 Skip invalid TCP relays and DHT nodes when loading save data.
  - #1433 Fix saving of combination of loaded and connected TCP relays
  - #1430 Invert not_valid functions and name them is_valid.
  - #1429 Fix things not being initialized if creating a TCP-only network
  - #1426 Remove tokstyle exemptions from build files.
  - #1425 Stop using the "inline namespace" feature of apidsl.
  - #1424 Add new semi-private API functions to set per-packet-id custom handlers.
  - #1423 Give CI workflow a better name: clang-sanitizers
  - #1422 Use public API for sending in RTP
  - #1421 Install ci-tools and get tokstyle via the script it provides.
  - #1420 Use tox public API for sending packets in toxav BWController
  - #1419 Remove newlines from the end of LOGGER format strings.
  - #1418 Change ToxAVCall struct mutex to a more distinct name
  - #1417 Create own instance of Mono_Time for ToxAV
  - #1416 Stop using Messenger's mono_time in bandwidth controller.
  - #1415 Fix 2 memory leaks in ToxAV.
  - #1414 Show function names in asan/tsan stack traces on CircleCI.
  - #1413 Make afl_toxsave.c a bit more portable; fix memory leak.
  - #1411 Fixes towards building on MSVC.
  - #1409 Mark conference test as small.
  - #1407 Add minimal save generator
  - #1406 Migrate format-source script to new apidsl web app.
  - #1404 Smarter setup of bazel remote cache on Cirrus CI.
  - #1331 Add basic test adapter for AFL
  * Closed issues:
  - #1365 Add the option to use LAN discovery even when using a proxy for remote connections
  - #1353 libtoxdns.a and libtoxav.a
  - #86 Freenet as Offline Messaging Backend</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1639051200">- Update to 0.2.13
  * Merged PRs:
  - #1725 cleanup: add some missing null checks
  - #1723 chore: Run infer static analyser on circle ci builds.
  - #1718 fix: Sec/fix crypto size compute
  - #1716 chore: Use toktok-stack docker image with built third_party.
  - #1713 test: Add some unit tests for important internal DHT functions.
  - #1708 perf: reduce calling into Mono_Time in DHT
  - #1706 chore: Enable cimple tests on cirrus build.
  - #1705 fix: issue with save_load autotest
  - #1703 chore: Upgrade to toktok-stack:0.0.11.
  - #1699 fix: some friend connection issues
  - #1698 fix: bug causing API to report wrong self connection status
  - #1693 chore: Update IRC info
  - #1691 chore: Fix Appveyor and add workarounds for Cirrus CI
  - #1686 chore: Enable c-toxcore conan packaging
  - #1684 cleanup: Update INSTALL.md instructions
  - #1679 cleanup: Trivial cleanup
  - #1674 cleanup: filetransfer code
  - #1672 docs: Add instructions for building unit tests to INSTALL.md
  - #1667 chore: Update tox-bootstrapd checksum due to newer packages in Alpine
  - #1664 cleanup: use heap memory instead of stack for large variables
  - #1663 fix: Fix file tests on windows
  - #1633 fix: AppVeyor failing due to conan remote being added twice
  - #1602 fix: Fix buffer over-read when a peer leaves a conference
  - #1586 test: Fix tcp_relay_test by adding a second bootstrap node.
  - #1580 style: Format comments according to tokstyle's requirements.
  - #1557 chore: Add conan support
  - #1537 chore: Cygwin build
  - #1516 cleanup: Make pylint and mypy happy with bootstrap_node_info.py.
  - #1515 style: Run restyled on Travis and Circle CI scripts.
  - #1514 refactor: Remove multi-declarators entirely.
  - #1513 refactor: Disallow multiple initialised declarators per decl.
  - #1510 chore: Don't build pushes to branches, only to tags.
  - #1504 chore: Remove release-drafter configuration in favour of global one.
  - #1498 refactor: Limit scope of loop iterators.
  - #1497 refactor: Use bash arrays instead of strings for static analysis scripts.
  - #1496 cleanup: Stop hard-coding packet IDs in tests.
  - #1495 chore: Exclude imported libsodium sources from restyled.
  - #1493 feat: Add logging to TCP and onion client.
  - #1489 cleanup: NAC_LIBS -&gt; NACL_LIBS.
  - #1487 chore: Add autotools build to localbuild docker images.
  - #1473 chore: Add a script to run Travis CI locally.
  - #1467 fix: Fix a bug in savedata loading when malloc fails.
  - #1464 fix: Fix errors on error paths found by oomer.
  - #1463 cleanup: Add a check that we don't have any unused functions.
  - #1462 cleanup: Include &lt;string.h&gt; for explicit_bzero.
  - #1436 chore: Enable cimple tests by default but allow disabling them.
  * Closed issues:
  - #1598 ERROR: heap-buffer-overflow in group.c found with AddressSanitizer
  - #1326 the cause is great, but this thing is completely unusable
  - #1319 Is this new application is safe &amp; trusted ??
  - #1236 Ruby Extension?
  - #1149 uTox aborts on toxcore restart
  - #886 Maybe need to set the stacksize for musl-libc</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644148800">- Update to 0.2.14
  * Features
  - Add WASM build for toxcore and websocket bootstrap node. @iphydf (#1950)
  - Add programs for creating savedata &amp; bootstrap keys @nurupo (#1818)
  - Add automatic fuzz testing for c-toxcore @sudden6 (#1720)
  * Performance improvements
  - Make the key cracker a bit faster @sudden6 (#1622)
  * Bug Fixes
  - potential freeing of an immutable static buffer @nurupo (#1948)
  - Fix bootstrap on emscripten/wasm. @iphydf (#1945)
  - unintentional integer down-casts @JFreegman (#1928)
  - corruption in key files, making it unable to load when node starts. @Tha14 (#1923)
  - group av memory leak @JFreegman (#1926)
  - vbuffer overwrite in bootstrap config @JFreegman (#1917)
  - Fix toxav_basic_test buffer overflow. @iphydf (#1879)
  - don't count filetransfer as sending until accepted @sudden6 (#1878)
  - Fix some uninitialised memory errors found by valgrind. @iphydf (#1877)
  - a double-unlocking mutex in toxav @nurupo (#1832)
  - use correct sample size in toxav_basic_test @sudden6 (#1845)
  - possible unintended negative loop bound @JFreegman (#1836)
  - Fix file permission issue with toxchat/bootstrap-node Docker container @nurupo (#1765)
  - off-by-one error caused by integer division without proper cast @JFreegman (#1754)
  - Fixed uninitialised value copy. @iphydf (#1751)
  * Documentation
  - Add doxygen configuration and netlify publishing. @iphydf (#1974)
  * Maintenance (Grunt tasks)
  - Make the last few remaining top level comments doxygen style. @iphydf (#1972)
  - Sync all comments between header and source files. @iphydf (#1971)
  - Make run-infer script use docker. @iphydf (#1958)
  - Properly copy Node_format using serialized format @JFreegman (#1955)
  - Disable some cimple warnings for now. @iphydf (#1956)
  - use latest toktok-stack msan version @JFreegman (#1943)
  - Use latest instead of versioned toktok-stack image. @iphydf (#1940)
  - Rename bazel-release to -opt and -debug to -dbg. @iphydf (#1939)
  - Don't run sonar scan on pull requests. @iphydf (#1922)
  - Add a Bazel Buildifier CI job @robinlinden (#1933)
  - Add cpplint to the CI. @iphydf (#1914)
  - Run sonar scan on pull requests. @iphydf (#1918)
  - Add a make_single_file script, used for CI. @iphydf (#1916)
  - Expose public API headers as files in bazel. @iphydf (#1909)
  - Mark unsafe code as testonly. @iphydf (#1905)
  - Add mypy Python type check. @iphydf (#1884)
  - Add sonar-scan analysis on pushes. @iphydf (#1883)
  - Run static analysers in multiple variants. @iphydf (#1880)
  - Ignore some failures in bazel-tsan. @iphydf (#1876)
  - Add asan/tsan bazel builds. @iphydf (#1875)
  - Run tokstyle with 3 cores. @iphydf (#1866)
  - Enable layering check in all c-toxcore build files. @iphydf (#1873)
  - Enable compiler layering check. @iphydf (#1871)
  - Disable the OpenMP cracker in bazel for now. @iphydf (#1870)
  - Retry asan/tsan tests a few more times. @iphydf (#1867)
  - Get all* autotests working with MSVC @robinlinden (#1857)
  - Remove all references to Travis CI. @iphydf (#1862)
  - Add a GH Actions code coverage job @robinlinden (#1850)
  - Remove old travis docker scripts. @iphydf (#1840)
  - Add bazel-debug build. @iphydf (#1837)
  - Add "tcc" and "compcert" compiler targets. @iphydf (#1830)
  - Add macOS build. @iphydf (#1820)
  - Login to dockerhub before trying to push to dockerhub. @iphydf (#1813)
  - Only push versioned docker image on tag builds. @iphydf (#1812)
  - Add bootstrap daemon docker image build. @iphydf (#1811)
  - Remove apidsl comment from tox.h. @iphydf (#1810)
  - Don't run CI on master branch pushes. @iphydf (#1807)
  - merge friend_connections from NGC fork @JFreegman (#1798)
  - Fix up a few source code comment and style issues. @iphydf (#1801)
  - Move cmake-freebsd-stage2 back into the toxcore repo. @iphydf (#1794)
  - Add FreeBSD build to CI. @iphydf (#1793)
  - Add cross compilation CI targets. @iphydf (#1792)
  - Update toktok-stack version. @iphydf (#1779)
  - Tie down the use of doxygen comments. @iphydf (#1778)
  - Remove config.h. @iphydf (#1774)
  - merge tcp_connection changes from new groupchats fork @JFreegman (#1769)
  - Fix gen-file.sh: it wasn't globbing properly. @iphydf (#1773)
  - Add .cc files to the static analysis. @iphydf (#1772)
  - merge DHT changes from new groupchats fork @JFreegman (#1768)
  - Use docker for the autotools ci build. @iphydf (#1766)
  - Add autotools build; exempt crypto_pwhash from tokstyle. @iphydf (#1762)
  - Use an incrementing version number for coverity scans. @iphydf (#1752)
  - Add missing sudo to coverity apt-get calls. @iphydf (#1738)
  - Add clang-tidy review github workflow. @iphydf (#1746)
  - Minor cleanups of warnings given by cppcheck. @iphydf (#1743)
  - Add workflow for running coverity scan. @iphydf (#1736)
  - Add logger to onion and onion announce objects @JFreegman (#1734)
  * Maintenance (Code cleanup)
  - Ensure we limit the system headers included in .h files. @iphydf (#1968)
  - Don't pass the whole DHT object to lan discovery. @iphydf (#1964)
  - make functions take const pointer to IP_Port wherever possible @JFreegman (#1954)
  - Properly copy Node_format using serialized format @JFreegman (#1955)
  - Add some toxav bounds/sanity checks @JFreegman (#1942)
  - small refactor of DHT getnodes function @JFreegman (#1938)
  - remove brackets from ip_ntoa ipv6 formatting @JFreegman (#1937)
  - make some non-const pointers const @JFreegman (#1929)
  - unintentional integer down-casts @JFreegman (#1928)
  - refactor group audio packet data handling @JFreegman (#1920)
  - replace magic numbers with appropriately named constants @JFreegman (#1915)
  - Remove our only use of flexible array members in toxcore. @iphydf (#1910)
  - Remove uses of strcpy and sprintf. @iphydf (#1912)
  - Split large switch statement into functions. @iphydf (#1906)
  - Even more pointer-to-const parameters. @iphydf (#1903)
  - Remove old check Suite compat layer. @iphydf (#1900)
  - Make parameters pointers-to-const where possible. @iphydf (#1901)
  - Make Networking_Core pointer-to-const where possible. @iphydf (#1899)
  - Use pointer cast instead of memcpy in qsort callback. @iphydf (#1898)
  - Deduplicate a somewhat complex loop in DHT.c. @iphydf (#1894)
  - Merge crypto_core and crypto_core_mem. @iphydf (#1881)
  - Stop using strerror directly. @iphydf (#1889)
  - Remove our only use of sprintf. @iphydf (#1891)
  - refactor toxav_call_control @JFreegman (#1841)
  - replace all instances of atoi with strtol @JFreegman (#1874)
  - Remove extra parens around function arguments. @iphydf (#1865)
  - Don't use memcpy where assignment can be used. @iphydf (#1864)
  - Use calloc instead of malloc for struct allocations. @iphydf (#1861)
  - Fix calloc argument order. @iphydf (#1860)
  - Remove useless parentheses. @iphydf (#1853)
  - make struct typedefs have the same name as their struct @JFreegman (#1844)
  - remove dead code @JFreegman (#1835)
  - Reduce the scope of for-loop iterator variables. @iphydf (#1834)
  - Remove hardening code from DHT @zugz (#1673)
  - put breaks inside case braces @JFreegman (#1816)
  - Sync doc comments in a few more .c/.h files. @iphydf (#1802)
  - Move sodium.h include to front of network.c. @iphydf (#1797)
  - remove redundant (and incorrect) comments @JFreegman (#1790)
  - Remove apidsl; remove crypto_memcmp. @iphydf (#1786)
  - fix format-source @JFreegman (#1783)
  - Remove apidsl for everything except the public API. @iphydf (#1775)
  - remove unused function argument from set_tcp_connection_status() @JFreegman (#1776)
  - Remove crypto_pwhash import. @iphydf (#1777)
  - merge onion.c changes from new groupchats fork @JFreegman (#1770)
  - Don't include "config.h" unless needed. @iphydf (#1761)
  - address some unused return values @JFreegman (#1759)
  - use crypto_memzero to wipe secret keys when no longer in use @JFreegman (#1753)
  - Fix some clang-tidy warnings and make them errors. @iphydf (#1747)
  - Put fatal errors where API return values should be impossible @JFreegman (#1740)
  - Enforce for loop consistency. @iphydf (#1744)
  - Use static_assert instead of preprocessor #error. @iphydf (#1735)
  - Avoid endian-specific code in crypto_core. @iphydf (#1727)
  - Minor fixes in test code. @iphydf (#1733)
  - Refactor kill_nonused_tcp() @JFreegman (#1732)
  - Ensure that error codes are always initialised. @iphydf (#1729)
  - Fix last instance of -Wcast-align and enable the warning. @iphydf (#1730)
  * Maintenance (Refactoring)
  - use proper method for generating random numbers in a range @JFreegman (#1975)
  - Deduplicate a bunch of code in TCP client/server. @iphydf (#1897)
  - Extract some functions from the big run_auto_test function. @iphydf (#1819)
  - rename variable to clarify purpose @sudden6 (#1789)
  - Split toxav_iterate into audio and video part @sudden6 (#1307)
  - Clean up friend loading. @sudden6 (#1333)
  - Fix previous refactor @nurupo (#1737)
  * Maintenance (Tests)
  - separate run_auto_tests into a library (revival of #1505) @JFreegman (#1932)
  - refactor autotest live network bootstrapping @JFreegman (#1924)
  - Add two more bootstrap/TCP nodes to autotests @JFreegman (#1887)
  - add ability for autotests to use TCP connections @JFreegman (#1815)
  - Make ERROR logging fatal in tests. @iphydf (#1758)
  - Add a simple test for ip_ntoa. @iphydf (#1742)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1644840000">- Update to 0.2.15
  * Bug Fixes
  - Reduce logging verbosity even more. @iphydf (#1984)
  - Reduce logging verbosity in TCP server. @iphydf (#1980)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1656244800">- Update to 0.2.18
  * Features
  - Merge group announce portion of new groupchats implementation @JFreegman (#2230)
  - Allow overriding mono_time in tox_new. @iphydf (#2206)
  - Store announcements @zugz (#2147)
  - Add support for custom random number generator. @iphydf (#2190)
  - Merge moderation portion of new groupchats codebase @JFreegman (#2169)
  - Add support for overriding network functions. @iphydf (#2177)
  - Merge onion_announce changes from new groupchats fork @JFreegman (#2164)
  * Performance improvements
  - Make time move a lot faster in fuzzing runs. @iphydf (#2193)
  * Bug Fixes
  - remove the assert because buffer can be larger than UINT16_MAX. @zoff99 (#2299)
  - Don't allow onion paths to be built from real friends. @iphydf (#2287)
  - Fix potential array out-of-bounds in DHT onion path building. @iphydf (#2282)
  - Allow onion paths to be built from more random nodes. @iphydf (#2283)
  - Really fix overrun added in e49a477 @zugz (#2273)
  - Add missing return on error @JFreegman (#2272)
  - Fixed leak and overrun added in e49a477 @zugz (#2266)
  - Format IP as string again in error log. @iphydf (#2257)
  - Fix a stack overflow triggered by small DHT packets. @iphydf (#2255)
  - Don't crash if RNG init failed. @iphydf (#2246)
  - fix typo in git command in INSTALL.md @zugz (#2225)
  - Correct calculation of packet sent time @zugz (#2195)
  - Eliminate memory leak in toxav. @iphydf (#2155)
  - Allow port range in DHT_bootstrap.c. @iphydf (#2143)
  * Documentation
  - Add information regarding git submodules, cmp to INSTALL.md @Tha14 (#2201)
  - Put all the tox public api into a fake "tox" namespace. @iphydf (#2153)
  * Maintenance (Grunt tasks)
  - Release 0.2.18 @robinlinden (#2300)
  - Downgrade C++ version to 17 @JFreegman (#2275)
  - Upgrade to C++20 in CMake build. @iphydf (#2263)
  - Add initial ESP32 docker build. @iphydf (#2243)
  - Add MISRA-2012 check using cppcheck's misra addon. @iphydf (#2251)
  - Support producing shared libraries on Windows @robinlinden (#2204)
  - Add dependabot config. @iphydf (#2236)
  - Fix path to fuzzer binaries in clusterfuzz build. @iphydf (#2228)
  - Add uint8_t version of bin_pack for numbers. @iphydf (#2223)
  - Clone submodules in clusterfuzzlite Dockerfile. @iphydf (#2210)
  - Remove valgrind build. @iphydf (#2208)
  - Add third_party to toxcore-sources docker image. @iphydf (#2189)
  - Use "master" as the branch in toktok-fuzzer. @iphydf (#2173)
  - Enable memory sanitizer build. @iphydf (#2163)
  - Update the Appveyor build to VS2019 to work around conan issues @robinlinden (#2159)
  - Be even more explicit about integer range bounds. @iphydf (#2145)
  - Add testing/Dockerfile to the CI build. @iphydf (#2146)
  * Maintenance (Code cleanup)
  - remove unused field last_seen from Onion_Friend @zugz (#2297)
  - Avoid goto in msi.c. @iphydf (#2281)
  - Replace a series of if statements with a switch. @iphydf (#2233)
  - remove populate_path_nodes_tcp @zugz (#2250)
  - Use static_assert instead of assert where possible. @iphydf (#2242)
  - Make *_free and kill_* functions nullable. @iphydf (#2238)
  - Remove layers in the cmake build. @iphydf (#2229)
  - Add Network object parameter for addr_resolve. @iphydf (#2217)
  - Remove unused random_testing program. @iphydf (#2213)
  - Remove all uses of TOX_*_MAX_SIZE macros. @iphydf (#2214)
  - Add include for assert.h for the fuzzing build. @iphydf (#2224)
  - Move definitions of tox_private.h functions to tox_private.c. @iphydf (#2211)
  - Expand CONST_FUNCTION and remove the macro. @iphydf (#2212)
  - Mark Mono_Time const where possible. @iphydf (#2199)
  - Avoid name clash between struct field and function. @iphydf (#2202)
  - Add more null checks in tox_new. @iphydf (#2200)
  - Make addr_resolve a private function. @iphydf (#2188)
  - Use _Static_assert in gcc/clang. @iphydf (#2186)
  - improve CMakeLists.txt structure @sudden6 (#2101)
  - Expose struct Tox to internal code. @iphydf (#2158)
  - Reduce scope of array-typed variables where possible. @iphydf (#2167)
  - Reduce scope of variables as requested by cimple. @iphydf (#2166)
  - Avoid memset on structs. @iphydf (#2149)
  - Split the huge TCP client packet handler. @iphydf (#2157)
  - Sync doc comments between .h and .c files. @iphydf (#2156)
  - Move all the group.h structs into group.c. @iphydf (#2150)
  - Minor cleanups in TCP_connection.c. @iphydf (#2144)
  - Count re-adding an existing bootstrap node as success. @iphydf (#2142)
  - Disable LAN discovery in TCP-only mode. @iphydf (#2141)
  - Add assertion for decrypted data length. @iphydf (#2140)
  * Maintenance (Dependencies)
  - Use upstream cmp directly instead of our fork. @iphydf (#2240)
  * Maintenance (Refactoring)
  - Move crypto utilities from util to crypto_core. @iphydf (#2284)
  - Avoid static_cast in Fuzz_System functions. @iphydf (#2277)
  - Protect array unpacking against invalid lengths. @iphydf (#2261)
  - Rename announce functions into their own namespace. @iphydf (#2258)
  - Use a struct for the ip_ntoa buffer. @iphydf (#2248)
  - Allow NULL logger; make it no-op in NDEBUG. @iphydf (#2244)
  - Rename bin_pack/unpack functions the same as cmp funcs. @iphydf (#2219)
  - Use cmp instead of msgpack-c for events packing. @iphydf (#2175)
  * Maintenance (Tests)
  - Improve test hermeticity by using local TCP relay. @iphydf (#2280)
  - Add a Null_System used in toxsave_harness. @iphydf (#2289)
  - enable additional sanitizers for fuzzing @sudden6 (#2288)
  - Enable fuzzing for TCP. @iphydf (#2279)
  - Don't abort fuzz test when tox_new fails. @iphydf (#2285)
  - Improve error messages in toxav_basic_test. @iphydf (#2270)
  - Add more functionality to the bootstrap fuzz harness. @iphydf (#2234)
  - Improve stability of forwarding_test. @iphydf (#2249)
  - Add fuzzer support functions for internal toxcore objects. @iphydf (#2232)
  - Add DHT and tox_events fuzz tests to the cmake build. @iphydf (#2187)
  - Remove save_load_test from autotools build. @iphydf (#2196)
  - Enable more tests for msan. @iphydf (#2183)
  - Add some support functions to make writing fuzzers easier. @iphydf (#2184)
  - Improve stability of tox_many_tcp_test. @iphydf (#2182)
  - try to save the fuzzed save file again @sudden6 (#2176)
  - Add fuzzer tests to the bazel build. @iphydf (#2170)
  - Improve the stability of the save_load test @robinlinden (#2160)
  - Speed up toxav_many_test by using fake mono_time. @iphydf (#2154)
- Changes from 0.2.17
  * Performance improvements
  - Refactor onion_client.c do_friends() to reduce network traffic @JFreegman (#2078)
  - fix issue with friend finding taking too long after disconnects. @JFreegman (#2092)
  * Bug Fixes
  - Report failure to DHT bootstrap back to the client. @iphydf (#2104)
  - Null function pointer dereference. @iphydf (#2094)
  - out-of-memory condition by corrupted save file @sudden6 (#2084)
  - toxsave memory leak while loading groups @sudden6 (#2064)
  * Documentation
  - Clean up doxygen comments to be more doxygen-like. @iphydf (#2136)
  * Maintenance (Grunt tasks)
  - Enable a bunch more warnings in GCC builds. @iphydf (#2122)
  - remove cpufeatures.c @sudden6 (#2100)
  - remove DHT_test.c since it's unused @sudden6 (#2098)
  - Add a .clang-format that mostly agrees with astyle. @iphydf (#2075)
  - Make coverity scan a nightly job. @iphydf (#2074)
  - Simplify and speed up windows builds using docker image. @iphydf (#2072)
  - Fix build-args in win32/win64 docker build. @iphydf (#2073)
  - Add docker image builds for windows cross compiler. @iphydf (#2070)
  * Maintenance (Code cleanup)
  - Add explicit callback setters for MSI callbacks. @iphydf (#2134)
  - Split util.c out of the network library. @iphydf (#2131)
  - Remove redundant () around return expression. @iphydf (#2130)
  - Move test-only functions into tests. @iphydf (#2135)
  - Remove redundant Messenger and DHT tests. @iphydf (#2133)
  - Remove EAGAIN from the list of ignored errors. @iphydf (#2127)
  - Remove port from Broadcast_Info. @iphydf (#2126)
  - Don't reference local variables in macro bodies. @iphydf (#2125)
  - Remove some more implicit bool conversions. @iphydf (#2123)
  - Log at ERROR level when connect() fails. @iphydf (#2115)
  - Remove all boolean-int conversions. @iphydf (#2120)
  - Remove more boolean conversions (and a bugfix). @iphydf (#2116)
  - Comply with strict include ordering. @iphydf (#2117)
  - Avoid creating invalid enum values. @iphydf (#2114)
  - Remove superfluous parentheses on the rhs of assignments. @iphydf (#2113)
  - Change valid status of onion friend to bool. @iphydf (#2105)
  - Remove more implicit bool conversions. @iphydf (#2103)
  - Mark all local non-pointers as const where possible. @iphydf (#2102)
  - Reduce name shadowing; remove ptr-to-bool conversions. @iphydf (#2099)
  - Remove implicit conversions from uint32_t to bool. @iphydf (#2097)
  - Return boolean constants, not ints from bool functions. @iphydf (#2096)
  - Remove any disallowed casts. @iphydf (#2093)
  - Avoid casting function pointers. @iphydf (#2091)
  - Enable most cppcheck warnings as errors. @iphydf (#2086)
  - Remove all implicit bool conversions in if-conditions. @iphydf (#2088)
  - Remove unused execution trace library. @iphydf (#2079)
  * Maintenance (Refactoring)
  - Move tox_new_log to auto_test_support. @iphydf (#2090)
  * Maintenance (Tests)
  - Add unit test for create/handle request packets. @iphydf (#2128)
  - Add mallocfail and proxy test to our coverage runs. @iphydf (#2108)
  - Add test coverage docker build for local tests. @iphydf (#2106)
- Changes from 0.2.16
  * Features
  - Improve how we share TCP relays with friends @JFreegman (#2047)
  - add DHT queries to private API @JFreegman (#1935)
  - add bash-completion for tox-bootstrapd @nurupo (#2007)
  - Add unpacker functions for events structures. @iphydf (#1996)
  - Add binary packing functions for tox events. @iphydf (#1993)
  - Add async event handling (callbacks) code. @iphydf (#1952)
  * Performance improvements
  - Take advantage of fast networks for file transfers @zugz (#1668)
  - Reduce minimal encoding size of packed events. @iphydf (#2024)
  * Bug Fixes
  - properly deallocate frozen peers @sudden6 (#2058)
  - Fix return type of functions returning uint64_t. @iphydf (#2052)
  - file transfer bug introduced in commit 2073d02 @JFreegman (#2041)
  - remove bogus asserts in fuzzer harness @sudden6 (#2031)
  - syntax error introduced in 8bf3799 @sudden6 (#2028)
  - add continous fuzzing @sudden6 (#2027)
  - Coverty scan @nurupo (#2018)
  - shared toxcore autotools build failing @nurupo (#2015)
  - Conan build link failures @robinlinden (#2011)
  * Documentation
  - Add libmsgpack dependency in INSTALL.md @cryptogospod (#2016)
  * Maintenance (Grunt tasks)
  - Simplify and speed up nacl build using toxchat/nacl. @iphydf (#2069)
  - Add BUILD file for websockify. @iphydf (#2036)
  - fine tune fuzzing settings @sudden6 (#2035)
  - update the list of CMake options &amp; Windows Docker build deps @nurupo (#2032)
  - expand fuzzing to toxsave @sudden6 (#2030)
  - Fix implicit declaration warning in fuzz build @robinlinden (#2026)
  - add continous fuzzing to our CI @sudden6 (#2025)
  - Set up an Android CI job @robinlinden (#1992)
  - Disable non-null attributes by default. @iphydf (#2021)
  - Silence clang compile warnings causing circle-ci/asan to fail @JFreegman (#2019)
  - Coverty scan @nurupo (#2018)
  - get skeletons out of the closet @nurupo (#2008)
  - shared toxcore autotools build failing @nurupo (#2015)
  - Remove duplicate source file in autotools build. @iphydf (#2010)
  - Add an undefined behaviour/integer sanitizer build. @iphydf (#2001)
  - Speed up cmake builds with UNITY_BUILD. @iphydf (#1999)
  - Add an easy way to run autotools and circleci builds locally. @iphydf (#1982)
  - Update readme header @robinlinden (#1979)
  * Maintenance (Code cleanup)
  - Enable tokstyle's -Wlarge-struct-params. @iphydf (#2053)
  - Avoid implicit bool conversions in logical operators. @iphydf (#2055)
  - Avoid implicit boolean and floating point conversions in decls. @iphydf (#2056)
  - Apply stronger type checks and fix errors. @iphydf (#2049)
  - Avoid implicit pointer-to-bool conversion in if in toxav. @iphydf (#2046)
  - Add some more error path logging to TCP server code. @iphydf (#2033)
  - Add wrapper library for msgpack pack functions @JFreegman (#2023)
  - Don't use VLAs for huge allocations. @iphydf (#2013)
  - Split tox_unpack into two smaller libs @JFreegman (#2022)
  - get skeletons out of the closet @nurupo (#2008)
  - Add more nonnull and nullable annotations. @iphydf (#2006)
  - Add nonnull annotations to function definitions. @iphydf (#2002)
  - Make LAN discovery thread-safe without data races. @iphydf (#1988)
  - Comply with new cimple callback rules. @iphydf (#1987)
  - Split msi callback array into 1 member per callback @robinlinden (#1985)
  * Maintenance (Refactoring)
  - Compare pointers in if conditions to nullptr. @iphydf (#2043)
  - Add a bit more logging; change WARNING to ERROR. @iphydf (#2039)
  * Maintenance (Tests)
  - Add a profiling script and Dockerfile. @iphydf (#2066)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699012800">- Remove build dependency on msgpack (this was dropped
  and replaced by "cmp" in the 0.2.18 release)
- Use standardized cmake build macros</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1707134400">- Use sysuser-tools to generate c-toxcore user and group.</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1712923200">- Update to 0.2.19
  - Add cmake flag to disable unit tests. @iphydf (#2742)
  - Document that group topic lock is default on. @iphydf (#2744)
  - Add missing param docs for callbacks. @iphydf (#2743)
  - Don't expose Tox_System in the public API @nurupo (#2741)
  - Small API doc fixes @nurupo (#2735)
  - Rename out parameters to out_$something. @iphydf (#2726)
  - event length naming inconsistencies @Green-Sky (#2732)
  - flaky tcp test @Green-Sky (#2369)
  - Update and improve the Windows cross-compilation @nurupo (#2713)
  - Use a specific non-broken slimcc version. @iphydf (#2718)
  - Update github actions. @iphydf (#2712)
  - Update the list of CMake options @nurupo (#2710)
  - Rename Queries to Query to align with other enums. @iphydf (#2705)
  - Correct type for conference offline peer numbers. @iphydf (#2704)
  - Add pkgsrc build. @iphydf (#2699)
  - Add FreeBSD VM action on GitHub. @iphydf (#2700)
  - Build toxcore on NetBSD (VM). @iphydf (#2697)
  - Only install tox_private.h on request. @iphydf (#2698)
  - Don't serve files from websockify. @iphydf (#2695)
  - Correctly pass extended public keys to group moderation code. @iphydf (#2689)
  - Use structs for extended public/secret keys. @iphydf (#2672)
  - Compile libsodium reference implementation with compcert. @iphydf (#2686)
  - Don't use memcpy to cast arbitrary structs to uint8_t[]. @iphydf (#2684)
  - Pass array, not array pointer, to memcmp. @iphydf (#2683)
  - Never pass void* directly to memcpy. @iphydf (#2682)
  - Use tox rng to seed the keypair generation. @iphydf (#2671)
  - Small improvements found by PVS Studio. @iphydf (#2666)
  - Disable NGC saving by default, enable through Tox_Options. @iphydf (#2678)
  - Replace pointer arithmetic with explicit &amp;arr[i]. @iphydf (#2675)
  - Use strong typedef for NGC peer id. @iphydf (#2643)
  - Simplify custom packet length check in NGC. @iphydf (#2659)
  - Correct a few potential null derefs in bootstrap daemon. @iphydf (#2662)
  - Add missing memunlock of local variable when it goes out of scope. @iphydf (#2660)
  - Zero out stack-allocated secret key before return. @iphydf (#2661)
  - Make prune_gc_sanctions_list more obviously correct. @iphydf (#2658)
  - Add static analysis tool list to README. @iphydf (#2656)
  - Run prettier-markdown on markdown files. @iphydf (#2664)
  - Use strong typedef instead of struct for Socket. @iphydf (#2640)
  - Fix some false positive from PVS Studio. @iphydf (#2657)
  - Check that WINXP macro exists before comparing it. @iphydf (#2655)
  - Make tox mutex non-recursive. @iphydf (#2652)
  - Fix up doxyfile. @iphydf (#2647)
  - Add more documentation to crypto_core. @iphydf (#2648)
  - Remove Tox * from tox_dispatch. @iphydf (#2645)
  - Don't rely on tox_dispatch passing tox in tests. @iphydf (#2644)
  - Use C++ mode for clang-tidy. @iphydf (#2642)
  - Check that both gtest and gmock exist for tests. @iphydf (#2637)
  - Add slimcc compiler compatibility test. @iphydf (#2624)
  - Add some comments to the astyle config. @iphydf (#2634)
  - Remove implicit bool conversions. @iphydf (#2621)
  - Rename C++ headers to .hh suffixes. @iphydf (#2626)
  - Further #include cleanups. @iphydf (#2617)
  - Only check the bootstrap daemon checksum on release. @iphydf (#2620)
  - Add more const where possible. @iphydf (#2622)
  - Use Bazel modules to enforce proper #include hygiene. @iphydf (#2614)
  - Move pack/unpack IP_Port from DHT into network module. @iphydf (#2612)
  - Really fix coverage docker image build. @iphydf (#2611)
  - Fix post-submit coverage image. @iphydf (#2610)
  - Don't use memcmp to compare IP_Ports. @iphydf (#2605)
  - Fix rpm build; add a CI check for it. @iphydf (#2604)
  - Speed up docker builds a bit by reducing layer count. @iphydf (#2603)
  - Add const where possible in auto tests. @iphydf (#2602)
  - Minor cleanup of event unpack code. @iphydf (#2580)
  - Rename system_{memory,...} to os_{memory,...}. @iphydf (#2598)
  - Remove all uses of SIZEOF_VLA. @iphydf (#2592)
  - Add goblint static analyser. @iphydf (#2597)
  - Use memzero(x, s) instead of memset(x, 0, s). @iphydf (#2594)
  - Use explicit 0 instead of PACKET_ID_PADDING. @iphydf (#2593)
  - Expand the Tox_Options accessor macros. @iphydf (#2591)
  - Remove plan9 support. @iphydf (#2588)
  - Add a simple new/delete test for Tox. @iphydf (#2590)
  - Add comment after every #endif. @iphydf (#2587)
  - Fix comment I broke in the events test PR. @iphydf (#2583)
  - Migrate auto_tests to new events API. @iphydf (#2559)
  - Add common msgpack array packer with callback. @iphydf (#2577)
  - Rename group to conference in groupav documentation. @iphydf (#2582)
  - Ensure handler params are named after callback params. @iphydf (#2581)
  - Pass this pointer as first param to s11n callbacks. @iphydf (#2575)
  - Allow NULL pointers for byte arrays in events. @iphydf (#2578)
  - Remove bin_pack_{new,free}. @iphydf (#2572)
  - Add dht_get_nodes_response event to the events system. @iphydf (#2568)
  - Use enum-specific pack functions for enum values. @iphydf (#2567)
  - Factor out union pack switch from event packer. @iphydf (#2565)
  - Move the 2-element array pack out of individual events. @iphydf (#2564)
  - Remove empty test doing nothing. @iphydf (#2566)
  - Add printf log statement to group_moderation_test. @iphydf (#2563)
  - Make event dispatch ordered by receive time. @iphydf (#2392)
  - tests use ipv6 by default, even with USE_IPV6 set to 0 @Green-Sky (#2468)
  - add clangd files to .gitignore @Green-Sky (#2562)
  - Move file streaming test to its own file. @iphydf (#2561)
  - window builds now build in parallel @Green-Sky (#2560)
  - Add C++ classes wrapping system interfaces. @iphydf (#2557)
  - Make all the fuzzers work again, and add a test for protodump. @iphydf (#2554)
  - Factor out malloc+memcpy into memdup. @iphydf (#2538)
  - Make sure there's enough space for CONSUME1 in fuzzers. @iphydf (#2552)
  - Add fuzz tests to the coverage run. @iphydf (#2547)
  - Move from gcov to llvm source-based coverage. @iphydf (#2551)
  - Use operator== for equality tests of Node_format. @iphydf (#2545)
  - Slightly nicer C++ interface to tox Random. @iphydf (#2543)
  - Minor refactoring of get_close_nodes functions. @iphydf (#2539)
  - Some more test cleanups, removing overly smart code. @iphydf (#2536)
  - Assign malloc return to a local variable first. @iphydf (#2530)
  - Add more unit tests for add_to_list. @iphydf (#2531)
  - Add "infer" CI check to github, remove from circle. @iphydf (#2529)
  - Add dynamically derived array sizes to the API. @iphydf (#2525)
  - Add explicit array sizes to toxencryptsave. @iphydf (#2524)
  - Add Toxav alias for ToxAV. @iphydf (#2527)
  - Make Tox_Options a typedef. @iphydf (#2526)
  - Simplify msvc build using vcpkg. @iphydf (#2498)
  - Move tox_get_system out of the public API. @iphydf (#2523)
  - Align group message sending with other send functions. @iphydf (#2519)
  - Make setters take non-const Tox *. @iphydf (#2522)
  - Mark arrays in the tox API as [] instead of *. @iphydf (#2520)
  - Make array params in toxav [] instead of *. @iphydf (#2521)
  - Add typedefs for public API int identifiers. @iphydf (#2518)
  - Add fetch-sha256 script to update bootstrap node hash. @iphydf (#2513)
  - Remove settings.yml in favour of hs-github-tools. @iphydf (#2516)
  - Use GPL license with https. @iphydf (#2515)
  - Move all vptr-to-ptr casts to the beginning of a function. @iphydf (#2512)
  - Use github actions matrix to simplify CI. @iphydf (#2510)
  - Use QueryPerformanceCounter on windows for monotonic time. @iphydf (#2509)
  - Add net_(new|kill)_strerror to cppcheck's allocators. @iphydf (#2508)
  - Run clang-tidy on headers, as well. @iphydf (#2507)
  - Make TCP connection failures a warning instead of error. @iphydf (#2506)
  - Make all .c files include the headers they need. @iphydf (#2505)
  - Upgrade to clang-tidy-17 and fix some warnings. @iphydf (#2503)
  - Upgrade cppcheck, fix some warnings. @iphydf (#2504)
  - Use pkg_search_module directly in cmake. @iphydf (#2502)
  - Use target_link_libraries directly in cmake. @iphydf (#2499)
  - Add IMPORTED_TARGET to pkg-config packages. @iphydf (#2501)
  - Remove NaCl support. @iphydf (#2497)
  - unpack enum function names in event impl generator @Green-Sky (#2494)
  - Disable targets for cross-compilation. @iphydf (#2493)
  - Build a docker image with coverage info in it. @iphydf (#2491)
  - Some portability/warning fixes for Windows builds. @iphydf (#2490)
  - Correct a use-after-free and fix some memory leaks. @iphydf (#2488)
  - Change all enum-like #define sequences into enums. @iphydf (#2487)
  - Fix make_single_file to support core-only. @iphydf (#2484)
  - Change the TCP_PACKET_* defines into an enum. @iphydf (#2486)
  - event generation tool for reorder pr @Green-Sky (#2485)
  - Give enum-from-int functions the ability to report errors. @iphydf (#2475)
  - Update github actions uses. @iphydf (#2481)
  - Make esp32 build actually try to instantiate tox. @iphydf (#2439)
  - Remove test net support. @iphydf (#2474)
  - add ngc related unpack functions @Green-Sky (#2480)
  - Add to_string functions for all public enums. @iphydf (#2479)
  - add real timeout test @Green-Sky (#2477)
  - Move s390x build to post-merge. @iphydf (#2476)
  - Slightly reduce bandwidth usage when there are few nodes. @iphydf (#2442)
  - Enable ubsan on bootstrap nodes. @iphydf (#2472)
  - Add check-c run to bazel build. @iphydf (#2470)
  - increase NGC lossy custom packet size @Green-Sky (#2384)
  - replace memset with a loop @nurupo (#2465)
  - also Install header for private/experimental API functions with autotools @zoff99 (#2458)
  - Enable debug flag for ubsan. @iphydf (#2459)
  - memory leaks @nurupo (#2454)
  - replace DEFAULT_TCP_RELAY_PORTS_COUNT with a compile-time calculation @nurupo (#2452)
  - clarify disabling of static assert checks @nurupo (#2451)
  - Use Bin_Pack for packing Node_format. @iphydf (#2420)
  - replace tabs with spaces @nurupo (#2449)
  - Docker tox-bootstrapd hash update failing when using BuildKit @nurupo (#2447)
  - Remove explicit layering_check feature. @iphydf (#2438)
  - Upgrade sonar-scan jvm to java 17. @iphydf (#2437)
  - Add missing htons call when adding configured TCP relay. @iphydf (#2436)
  - Cancel old PR builds on docker and sonar-scan workflows. @iphydf (#2434)
  - Retry freebsd tests 2 times. @iphydf (#2430)
  - Use C99 on MSVC instead of C11. @iphydf (#2432)
  - Add an s390x build (on alpine) for CI. @iphydf (#2429)
  - Add a compcert docker run script. @iphydf (#2428)
  - Use tcc docker image for CI. @iphydf (#2427)
  - allow for larger incoming NGC packets @zoff99 (#2380)
  - Fix memory leak in the error path of loading savedata. @iphydf (#2424)
  - get the number of close dht nodes with announce/store support @Green-Sky (#2357)
  - Add a bin_unpack_bin_max for max-length arrays. @iphydf (#2415)
  - Add more logging to loading conferences from savedata. @iphydf (#2416)
  - Fix GCC compatibility. @iphydf (#2413)
  - Ensure we have allocators available for the error paths. @iphydf (#2408)
  - Remove redundant -DSODIUM_EXPORT from definitions. @iphydf (#2407)
  - Fix a few more clang-tidy warnings. @iphydf (#2406)
  - Fix a few more clang-tidy warnings. @iphydf (#2405)
  - Enforce stricter identifier naming using clang-tidy. @iphydf (#2404)
  - Add mem module to allow tests to override allocators. @iphydf (#2393)
  - Add devcontainer setup for codespaces. @iphydf (#2396)
  - Fix doxygen config and remove some redundant comments. @iphydf (#2391)
  - Fix the Android CI job @robinlinden (#2390)
  - Add missing #include &lt;array&gt;. @iphydf (#2389)
  - add missing ngc constants getter declarations and definitions @Green-Sky (#2383)
  - Add missing module dependencies. @iphydf (#2388)
  - fix group_peer_exit_cb @Green-Sky (#2371)
  - resolve_bootstrap_node() not checking net_getipport() returned count correctly @Green-Sky (#2361)
  - fuzz support for TCP server @sudden6 (#2367)
  - potential endless loop under extremely high load @sudden6 (#2364)
  - enable tcp relay for bootstrap fuzzing @sudden6 (#2362)
  * Breaking changes
  - A more descriptive error for group invite accept function @JFreegman (#2736)
  - align group send err enum order @Green-Sky (#2731)
  - packet broadcast functions now return errors @JFreegman (#2542)
  - tox_new() should return null when savedata loading fails @JFreegman (#1944)
  - Increase max group message length by four bytes @JFreegman (#2351)
  - behaviour of group api function @JFreegman (#2370)
  - group custom packet size limits @JFreegman (#2355)
  * Features
  - add message IDs to private group messages @JFreegman (#2727)
  - Add groupchat API function that returns an IP address string for a peer @JFreegman (#2446)
  - group connection queries now return our own connection type @JFreegman (#2448)
  - Merge the remainder of the new groupchats implementation @JFreegman (#2269)
  * Bug Fixes
  - partially fix a bug that prevented group part messages from sending @JFreegman (#2609)
  - a few off by one errors in group autotests @JFreegman (#2601)
  - issues with packet broadcast error reporting @JFreegman (#2549)
  - DHTBootstrap should always respond to version packets with toxcore version @Tha14 (#2354)
  - inversed return values @JFreegman (#2414)
  - Increase max group message length by four bytes @JFreegman (#2351)
  - #1144 by forcing misc_tools to be a static lib @Green-Sky (#2341)
  - group custom packet size limits @JFreegman (#2355)
  - Remove cmake cache files after copying to container build directory @Tha14 (#2325)
  - missing net to host conversion of port in logging in group_chat.c @Green-Sky (#2340)
  - bug causing friend group invites to sometimes fail &amp; improve logging @JFreegman (#2338)
  - missing net to host conversion of port in logging @Green-Sky (#2339)
  - unlock correct dht_friend @sudden6 (#2327)
  * Documentation
  - add the experimental api build option to INSTALL.md @JFreegman (#2708)
  - Remove defunct IRC channel from README.md @JFreegman (#2456)
  - incorrect documentation @JFreegman (#2381)
  - Update README for bootstrap node docker @Tha14 (#2333)
  - Update README.md to include cmp submodule info @Tha14 (#2323)
  * Maintenance (Grunt tasks)
  - Remove "mod" and "founder" from group API naming scheme @JFreegman (#2709)
  - Spellcheck tox-bootstrapd @nurupo (#2517)
  - tox_new() should return null when savedata loading fails @JFreegman (#1944)
  - Migrate from Appveyor to Azure Pipelines @robinlinden (#2271)
  - disable warning about pre C99 code @sudden6 (#2318)
  * Maintenance (Code cleanup)
  - A more descriptive error for group invite accept function @JFreegman (#2736)
  - use typedef for private message ID's in callback @JFreegman (#2729)
  - correct a few nullable annotations @JFreegman (#2685)
  - make some improvements to group moderation test @JFreegman (#2576)
  - skip a do_gc iteration before removing peers marked for deletion @JFreegman (#2573)
  - Make group packet entry creation less error-prone @JFreegman (#2540)
  - don't pass garbage data buffer to packet send functions @JFreegman (#2541)
  - Make group saving/loading more forgiving with data errors @JFreegman (#2466)
  - make it more clear that assert and uint32_t increment both only exist if NDEBUG is not defined @zoff99 (#2311)
  * Maintenance (Refactoring)
  - Observers/ignored peers can now send and receive custom packets @JFreegman (#2728)
  - Remove "mod" and "founder" from group API naming scheme @JFreegman (#2709)
  - packet broadcast functions now return errors @JFreegman (#2542)
  - Install header for private/experimental API functions @JFreegman (#2453)
  - Store time in Mono_Time in milliseconds. @iphydf (#2203)
  - Make some improvements to how often/when we announce a group @JFreegman (#2348)
  - Refactor: Extract shared key cache into separate file @sudden6 (#2317)
  - extract each case in handle packet in messenger @Green-Sky (#2329)
  * Maintenance (Tests)
  - save_compatibility_test failing on big-endian systems @nurupo (#2696)
  - Add a protocol dump test to generate initial fuzzer input. @iphydf (#2291)</changelog>
</package>
<package pkgid="4c19e309b09a03c4f5cf60eb75f7c0d450ff8717c4c96e14964b45ffed01b94281c84fc58f084e6067e9913acd66bf24c9c8d18842a15cbba9eef2f5cfce4272" name="c2hs" arch="x86_64">
  <version epoch="0" ver="0.28.8" rel="bp160.1.13"/>
  <changelog author="psimons@suse.com" date="1591704000">- Add c2hs at version 0.28.6.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1599652800">- Relax over-specified constraint on language-c.</changelog>
  <changelog author="psimons@suse.com" date="1607256000">- Add c2hs at version 0.28.7.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1623844800">- Add c2hs at version 0.28.8.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1644062400">- Update c2hs to version 0.28.8 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1674734400">- Update c2hs to version 0.28.8 revision 2.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680782400">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
</package>
<package pkgid="8712d3c610f01494c0cba26a84971c51b3bbf2dd2b4ab48167777ab27c6786ac83c019d5d635cbfd31c31cdecb93675b5af27e7f6d62aacd5f46a8665bb7f701" name="cJSON-devel" arch="x86_64">
  <version epoch="0" ver="1.7.18" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1607169600">- Initial package, version 1.7.14
- Add patch:
  * cJSON-fix-cmake-include-path.patch
    Align CMake include path with the one provided by pkg-config</changelog>
  <changelog author="mardnh@gmx.de" date="1609156800">- Set proper library path via LD_LIBRARY_PATH for ctest</changelog>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.7.15
  * Fix potential core dumped for strrchr.
  * Fix null pointer crash in cJSON_CreateXxArray.
  * Fix several null pointer problems on allocation failure.
  * Fix a possible dereference of null pointer.</changelog>
  <changelog author="dmueller@suse.com" date="1689508800">- update to 1.7.16:
  * Add an option for ENABLE_CJSON_VERSION_SO in CMakeLists.txt
  * Add cmake_policy to CMakeLists.txt
  * Add cJSON_SetBoolValue
  * Add meson documentation
  * Fix memory leak in merge_patch
  * Fix conflicting target names 'uninstall'
  * Bump cmake version to 3.0 and use new version syntax
  * Print int without decimal places
  * Fix 'cjson_utils-static' target not exist
  * Add allocate check for replace_item_in_object
  * Fix a null pointer crash in cJSON_ReplaceItemViaPointer</changelog>
  <changelog author="mardnh@gmx.de" date="1703592000">- Update to version 1.7.17 (bsc#1218098, CVE-2023-50472,
    bsc#1218099, CVE-2023-50471):
  * Fix null reference in cJSON_SetValuestring (CVE-2023-50472).
  * Fix null reference in cJSON_InsertItemInArray (CVE-2023-50471).</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716465600">- update to 1.7.18:
  * CVE-2024-31755: NULL pointer dereference via
    cJSON_SetValuestring() (boo#1223420)
  * Remove non-functional list handling of compiler flags
  * Fix heap buffer overflow
  * remove misused optimization flag -01
  * Set free'd pointers to NULL whenever they are not reassigned
    immediately after
- revert tests for NULL pointers that fail on Leap 15.5
  cJSON-1.7.18-misc_tests.patch</changelog>
  <changelog author="dmueller@suse.com" date="1717588800">- unconditionally apply the revert NULL pointer test</changelog>
</package>
<package pkgid="991e7454723e782654712fc7f206002dbf4e9b2b4139a30ded8d69e57eff24787d29271aa1294e0cf4f120219c0a305a97758c95fa4cccd052172caaab40799c" name="cJSON-devel" arch="x86_64">
  <version epoch="0" ver="1.7.19" rel="160000.1.1"/>
  <changelog author="mardnh@gmx.de" date="1607169600">- Initial package, version 1.7.14
- Add patch:
  * cJSON-fix-cmake-include-path.patch
    Align CMake include path with the one provided by pkg-config</changelog>
  <changelog author="mardnh@gmx.de" date="1609156800">- Set proper library path via LD_LIBRARY_PATH for ctest</changelog>
  <changelog author="mardnh@gmx.de" date="1629892800">- Update to version 1.7.15
  * Fix potential core dumped for strrchr.
  * Fix null pointer crash in cJSON_CreateXxArray.
  * Fix several null pointer problems on allocation failure.
  * Fix a possible dereference of null pointer.</changelog>
  <changelog author="dmueller@suse.com" date="1689508800">- update to 1.7.16:
  * Add an option for ENABLE_CJSON_VERSION_SO in CMakeLists.txt
  * Add cmake_policy to CMakeLists.txt
  * Add cJSON_SetBoolValue
  * Add meson documentation
  * Fix memory leak in merge_patch
  * Fix conflicting target names 'uninstall'
  * Bump cmake version to 3.0 and use new version syntax
  * Print int without decimal places
  * Fix 'cjson_utils-static' target not exist
  * Add allocate check for replace_item_in_object
  * Fix a null pointer crash in cJSON_ReplaceItemViaPointer</changelog>
  <changelog author="mardnh@gmx.de" date="1703592000">- Update to version 1.7.17 (bsc#1218098, CVE-2023-50472,
    bsc#1218099, CVE-2023-50471):
  * Fix null reference in cJSON_SetValuestring (CVE-2023-50472).
  * Fix null reference in cJSON_InsertItemInArray (CVE-2023-50471).</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716465600">- update to 1.7.18:
  * CVE-2024-31755: NULL pointer dereference via
    cJSON_SetValuestring() (boo#1223420)
  * Remove non-functional list handling of compiler flags
  * Fix heap buffer overflow
  * remove misused optimization flag -01
  * Set free'd pointers to NULL whenever they are not reassigned
    immediately after
- revert tests for NULL pointers that fail on Leap 15.5
  cJSON-1.7.18-misc_tests.patch</changelog>
  <changelog author="dmueller@suse.com" date="1717588800">- unconditionally apply the revert NULL pointer test</changelog>
  <changelog author="mardnh@gmx.de" date="1758456000">- Update to version 1.7.19
  * Check for NULL in cJSON_DetachItemViaPointer.
  * Check overlap before calling strcpy in cJSON_SetValuestring.
  * Fix Max recursion depth for cJSON_Duplicate to prevent stack
    exhaustion.
  * Allocate memory for the temporary buffer when paring numbers.
    This fixes CVE-2023-26819 (bsc#1241502).
  * Fix the incorrect check in decode_array_index_from_pointer.
    This fixes CVE-2025-57052 (bsc#1249112)
- Remove not longer needed patch:
  * cJSON-1.7.18-misc_tests.patch</changelog>
</package>
<package pkgid="523a70d306851e902ce881e898cfb0c4fcdc9d01f323f21b20f709811b68247bf2f258f5c3e5c4da9e62d78ffacd4e00cee56d3c130a5d2691e262323a69041b" name="c_count" arch="x86_64">
  <version epoch="0" ver="7.23" rel="bp160.1.12"/>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 7.14:
  * cross compiling support
  * configure script updates
  * minor fix to Quoted</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 7.15
  + ensure that parse-state returns to "code" after a comment is
  completed.  Extend parsing for numbers to improve error-checking.
  + updated configure macros
  + update config.guess and config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 7.16
  * add configure option --with-man2html
  * updated configure macros
  * update config.guess and config.sub
- Add gpg signature
- Cleanup spec file with spec-cleaner
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1446724800">- Update to 7.17
  * fix breakage in configure script from 7.16
  * updated configure macros</changelog>
  <changelog author="mpluskal@suse.com" date="1531310400">- Update to version 7.18:
  * updated configure macros
  * update config.guess and config.sub</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1607342400">- Update to version 7.19:
  + remove obsolete makefile-rules
  + updated configure macros
  + update config.guess and config.sub</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Update to version 7.20:
  * updated configure macros
  * update config.guess and config.sub</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687435200">- Update to version 7.22
  * see provided CHANGES for list of changes
- Refresh source url and gpg keyring</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1717329600">- Update to version 7.23
  * improve style/formatting of manpage
  * updated configure macros
  * update config.guess and config.sub</changelog>
</package>
<package pkgid="4a51621573f481d6a9ab5dfa7bb70fc661aff485310966255d4a119bc8e8ff7ddd16c38f01cdeaba1727006c36f537c7e05a1b3b9e55ec14f6a8c8457394611e" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20240805.fd24d50" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1610366400">- Update to version 2+git20210111.eeae41c:
  * Make certbundle.run container friendly</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- Update to version 2+git20210309.8214505:
  * Make sure to trigger in transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl command line tools are no longer required, p11-kit does
  the job.</changelog>
  <changelog author="lnussel@suse.de" date="1623240000">- Update to version 2+git20210609.a4969d7:
  * Restore /etc/ssl/ca-bundle.pem if it doesn't exist
  * Get rid of ls
  * Fix indent inconsistencies
  * Create /var/lib/ca-certificates if needed
  * Install hooks with correct number
  * Remove legacy files
  * Remove find from update-ca-certificates</changelog>
  <changelog author="lnussel@suse.de" date="1627041600">- Update to version 2+git20210723.27a0476:
  * Don't trigger path unit on /usr/share
  * Use flock to serialize calls (boo#1188500)
  * Add --root &lt;directory&gt; option</changelog>
  <changelog author="lnussel@suse.de" date="1633348800">- Update to version 2+git20211004.3efbea9:
  * Ensure --root option propagates prefix properly to other scripts</changelog>
  <changelog author="lnussel@suse.de" date="1680782400">- Update to version 2+git20230406.2dae8b7:
  * Build in place support
  * Fix up argument parsing
  * merge spec file into git</changelog>
  <changelog author="kukuk@suse.com" date="1714392000">- Update to version 2+git20240415.3fe9324:
  * Add ca-certificates-setup.service
  * typo: differnt/different</changelog>
  <changelog author="kukuk@suse.com" date="1722859200">- Update to version 2+git20240805.fd24d50:
  * Remove rc symlink [jsc#PED-266]</changelog>
  <changelog author="kukuk@suse.com" date="1724241600">- Fix source archive</changelog>
</package>
<package pkgid="ad5afb330c0233f6c5e95f61319d873b48675bd0609d0d27da30036ea701ab603fdc0b588c259c555b7070766545666bf4fc3d2f5703f472e849dcd1970b6004" name="ca-certificates-cacert" arch="noarch">
  <version epoch="0" ver="1" rel="bp160.1.9"/>
  <changelog author="lnussel@suse.de" date="1269432000">- new package</changelog>
  <changelog author="lnussel@suse.de" date="1336651200">- include root distribution license (bnc#761554)</changelog>
  <changelog author="lnussel@suse.de" date="1371729600">- adjust to new filesytem location</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="meissner@suse.com" date="1406721600">- replaced the "Class 3 PKI Key" by the current version. Changes its
  signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884)</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Use urls for sources
- Simplify spec file</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1621512000">- update Class 3 certificate from https://www.cacert.org/class3.crt
  (the old one expired today)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621684800">- spec-cleaner run (bsc#1186362)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1621771200">- Update class3.crt to the new one expiring 2031 again</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1654603200">- remove CAcert.pem (md5 based, super outdated)
- added CAcert_class1.pem (new class1 cert)</changelog>
</package>
<package pkgid="72f2767950484e7c92f73110737caf611aed2728f1d3d7aafc73740318bb28b4bdc1a526d9b9c46cc99554690913ecc7f714573c6e747fb07fc47f67f0f124b5" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.74" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1708948800">- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
- remove-trustcor.patch: removed, now upstream
- do a versioned obsoletes of "openssl-certs".</changelog>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
  <changelog author="dmueller@suse.com" date="1734264000">- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737633600">- Define two macros to break a build cycle with p11-kit.</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- remove extensive signature printing in comments of the cert
  bundle</changelog>
  <changelog author="dmueller@suse.com" date="1738670401">- update to 2.74 state of Mozilla SSL root CAs:
  Removed:
  * SwissSign Silver CA - G2
  Added:
  * D-TRUST BR Root CA 2 2023
  * D-TRUST EV Root CA 2 2023</changelog>
  <changelog author="meissner@suse.com" date="1742904000">- pass file argument to awk (bsc#1240009)</changelog>
  <changelog author="eroca@suse.com" date="1742904001">- Fix awk to compare (missing a =) and give the following output:
  [#] NSS_BUILTINS_LIBRARY_VERSION "2.74"</changelog>
  <changelog author="meissner@suse.com" date="1743422400">- explit remove distruted certs, as the distrust does not get exported
  correctly and the SSL certs are still trusted. (bsc#1240343)
  - Entrust.net Premium 2048 Secure Server CA
  - Entrust Root Certification Authority
  - AffirmTrust Commercial
  - AffirmTrust Networking
  - AffirmTrust Premium
  - AffirmTrust Premium ECC
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - GlobalSign Root E46
  - GLOBALTRUST 2020
- remove-distrusted.patch: apply to certdata.txt</changelog>
  <changelog author="meissner@suse.com" date="1744372800">- reenable the distrusted certs again. the distrust is only for certs
  issued after the distrust date, not for all certs of a CA.
  remove: remove-distrusted.patch</changelog>
</package>
<package pkgid="563559b3285a16a066dba472c7cb524562225c76658f5113b07059fa3639b97f04dc51e3cc81934232693e03c96b3f0d8d7570cac3768adf1bf36644805a29e9" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.84" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
  <changelog author="dmueller@suse.com" date="1734264000">- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737633600">- Define two macros to break a build cycle with p11-kit.</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- remove extensive signature printing in comments of the cert
  bundle</changelog>
  <changelog author="dmueller@suse.com" date="1738670401">- update to 2.74 state of Mozilla SSL root CAs:
  Removed:
  * SwissSign Silver CA - G2
  Added:
  * D-TRUST BR Root CA 2 2023
  * D-TRUST EV Root CA 2 2023</changelog>
  <changelog author="meissner@suse.com" date="1742904000">- pass file argument to awk (bsc#1240009)</changelog>
  <changelog author="eroca@suse.com" date="1742904001">- Fix awk to compare (missing a =) and give the following output:
  [#] NSS_BUILTINS_LIBRARY_VERSION "2.74"</changelog>
  <changelog author="meissner@suse.com" date="1743422400">- explit remove distruted certs, as the distrust does not get exported
  correctly and the SSL certs are still trusted. (bsc#1240343)
  - Entrust.net Premium 2048 Secure Server CA
  - Entrust Root Certification Authority
  - AffirmTrust Commercial
  - AffirmTrust Networking
  - AffirmTrust Premium
  - AffirmTrust Premium ECC
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - GlobalSign Root E46
  - GLOBALTRUST 2020
- remove-distrusted.patch: apply to certdata.txt</changelog>
  <changelog author="meissner@suse.com" date="1744372800">- reenable the distrusted certs again. the distrust is only for certs
  issued after the distrust date, not for all certs of a CA.
  remove: remove-distrusted.patch</changelog>
  <changelog author="meissner@suse.com" date="1770724800">- Updated to 2.84 state (bsc#1258002)
  - Removed:
  - Baltimore CyberTrust Root
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - DigiNotar Root CA
  - Added:
  - e-Szigno TLS Root CA 2023
  - OISTE Client Root ECC G1
  - OISTE Client Root RSA G1
  - OISTE Server Root ECC G1
  - OISTE Server Root RSA G1
  - SwissSign RSA SMIME Root CA 2022 - 1
  - SwissSign RSA TLS Root CA 2022 - 1
  - TrustAsia SMIME ECC Root CA
  - TrustAsia SMIME RSA Root CA
  - TrustAsia TLS ECC Root CA
  - TrustAsia TLS RSA Root CA</changelog>
</package>
<package pkgid="c56a34688b5ea7718fd2fb975b569e9bc77db431e6a1c2643395acb12480137659f0524c89cb6c0d420e8522e5adadeeb66487a6e3ea7e610fe43ae09a4a83fd" name="ca-certificates-mozilla-prebuilt" arch="noarch">
  <version epoch="0" ver="2.74" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661860800">- Create /var/lib/ca-certificates during build to ensure rpm gives
  the %ghost'ed directory proper mode attributes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1681214400">- Also mark /usr/share/factory/var/lib/ca-certificates/ as writable
  by the user during install: allow rpm to properly execute %clean
  when completed.</changelog>
  <changelog author="bwiedemann@suse.com" date="1723118400">- Re-create java-cacerts with SOURCE_DATE_EPOCH set
  for reproducible builds (boo#1229003)</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- test for a concretely missing certificate rather than
  just the directory, as the latter is now also provided by
  openssl-3</changelog>
</package>
<package pkgid="56ae1230b9baa22e4e050ed726167f9b67ef53f767f9ee0f82cba62aa4e4dcac07effe91b4c3468aa6ecf100c7d8785712b199cf8ad8c7be274a066908de9c35" name="ca-certificates-mozilla-prebuilt" arch="noarch">
  <version epoch="0" ver="2.84" rel="160000.1.2"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
  <changelog author="dimstar@opensuse.org" date="1661860800">- Create /var/lib/ca-certificates during build to ensure rpm gives
  the %ghost'ed directory proper mode attributes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1681214400">- Also mark /usr/share/factory/var/lib/ca-certificates/ as writable
  by the user during install: allow rpm to properly execute %clean
  when completed.</changelog>
  <changelog author="bwiedemann@suse.com" date="1723118400">- Re-create java-cacerts with SOURCE_DATE_EPOCH set
  for reproducible builds (boo#1229003)</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- test for a concretely missing certificate rather than
  just the directory, as the latter is now also provided by
  openssl-3</changelog>
</package>
<package pkgid="2a3ded27e55ac004d3a4c2ec80d04218513e7d4994e35fd0fe33847cb84ed35e1ac1218d5ef9c133da8eb155996f4231495e76e1e6305c47c1a2020358412692" name="cabal-install" arch="x86_64">
  <version epoch="0" ver="3.10.3.0" rel="bp160.1.13"/>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1629201600">- relax dependency on random</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1634126400">- Add _constraints</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1641384000">- Update cabal-install to version 3.2.0.0 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1666267200">- Update cabal-install to version 3.8.1.0 revision 2.
  3.8.1.0 Mikolaj Konarski &lt;mikolaj@well-typed.com&gt; August 2022
  * See https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.8.1.0.md
  3.6.2.0 Emily Pillmore &lt;emilypi@cohomolo.gy&gt; October 2021
  * See https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.2.0.md
  3.6.0.0 Emily Pillmore &lt;emilypi@cohomolo.gy&gt; August 2021
  * See https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.6.0.0.md
  3.4.1.0 Emily Pillmore &lt;emilypi@cohomolo.gy&gt; October 2021
  * See https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.4.1.0.md
  3.4.0.0 Oleg Grenrus &lt;oleg.grenrus@iki.fi&gt; February 2021
  * See https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.4.0.0.md
- Remove obsolete "ghc-8.10-support-for-3.2.patch".
- Remove obsolete "base16-bytestring.patch".</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1677412800">- Update cabal-install to version 3.8.1.0 revision 3.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177600">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1690372800">- Update cabal-install to version 3.8.1.0 revision 4.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1699358400">- Update cabal-install to version 3.10.2.1.
  Upstream has edited the change log file since the last release in
  a non-trivial way, i.e. they did more than just add a new entry
  at the top. You can review the file at:
  http://hackage.haskell.org/package/cabal-install-3.10.2.1/src/changelog</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1707825600">- Update cabal-install to version 3.10.2.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1711022400">- Update cabal-install to version 3.10.3.0 revision 1.
  3.10.3.0 Hécate &lt;hecate+github@glitchbra.in&gt; January 2024
  * See https://github.com/haskell/cabal/blob/master/release-notes/cabal-install-3.10.3.0.md</changelog>
</package>
<package pkgid="d7174eeff4cb2a83540006ce7464120f321591d19177d429c720a8105ad46b183af33d2d7784d409eb6f7a1689408135b1ccdb6638e57ae2f5703bfcf9287cef" name="cabal-plan" arch="x86_64">
  <version epoch="0" ver="0.7.4.0" rel="bp160.1.13"/>
  <changelog author="psimons@suse.com" date="1633867200">- Update cabal-plan to version 0.7.2.1.
  [#]# 0.7.2.1
  * Support Cabal-3.6
  * Support aeson-2.0.0.0
  * Drop support for GHC prior 8.2</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1641384000">- Update cabal-plan to version 0.7.2.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1663934400">- Update cabal-plan to version 0.7.2.3.
  [#]# 0.7.2.3
  * Fix issue in previous release (license generation didn't work at all)
  [#]# 0.7.2.2
  * Use Cabal-syntax-3.8.1.0</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177600">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1682510400">- Update cabal-plan to version 0.7.3.0.
  Upstream has not updated the file "ChangeLog.md" since the last
  release.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1687348800">- Update cabal-plan to version 0.7.3.0 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1688904000">- Update cabal-plan to version 0.7.3.0 revision 2.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1710244800">- Jailbreak build for ghc-9.8.x.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1712664000">- Update cabal-plan to version 0.7.3.0 revision 3.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1717848000">- Update cabal-plan to version 0.7.4.0.
  [#]# 0.7.4.0
  * Use Cabal-syntax-3.12
  * Support GHC-8.6.5...9.10.1
  [#]# 0.7.3.0
  * Use Cabal-syntax-3.10</changelog>
</package>
<package pkgid="98f23caad4191d005aafd9a73240c7dac383edc1d4834a1d8d494230f63380a873bd490b651b1abda19fc2be0bc293fe805be9d411a097c14d925683d20d62b4" name="cabal2spec" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="bp160.1.13"/>
  <changelog author="psimons@suse.com" date="1591790400">- Update cabal2spec to version 2.6.1.
  Upstream does not provide a change log file.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="psimons@suse.com" date="1597752001">- Update cabal2spec to version 2.6.2.
  Upstream does not provide a change log file.</changelog>
  <changelog author="psimons@suse.com" date="1603195200">- Update cabal2spec to version 2.6.2 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1675339200">- Update cabal2spec to version 2.6.4.
  Upstream does not provide a change log file.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177600">- Update cabal2spec to version 2.7.0.
  Upstream does not provide a change log file.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177601">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1711454400">- Update cabal2spec to version 2.7.1.
  Upstream does not provide a change log file.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1730030400">- Update cabal2spec to version 2.7.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="3f50d5f5a30fb52757c26d5d1cd91d5b85a8f46597976a6294658a2a4ba12fee10a79105a9a053bbd076e2bd1e79064f05badae290c629db87407cf20aa19191" name="cabextract" arch="x86_64">
  <version epoch="0" ver="1.11" rel="bp160.1.12"/>
  <changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.6:
  * further UTF-8 fixes
  * sanitize file names
- Add -fno-strict-aliasing for md5.c: 114, 115.</changelog>
  <changelog author="mpluskal@suse.com" date="1454241600">- Tiny spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1532606400">- Update to version 1.7:
  * Few bug fixes
  * New "--encoding" option
  * Properly handle lowercase conversion for non-ASCII characters.</changelog>
  <changelog author="sbrabec@suse.com" date="1540296000">- Update to version 1.8:
  * Improves ability to extract damaged files with the "-f" option.
  * cabinfo command has been rewritten.
  * If a CAB file has a Quantum-compressed datablock with exactly
    38912 compressed bytes, cabextract will write exactly one byte
    beyond its input buffer.</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Update to version 1.9:
  * Fix invisibly wrong results in cabextract -F (1.8 regression).
  * Fix ./configure --with-external-libmspack.
  * Build system cleanup
  * Testsuite available</changelog>
  <changelog author="Berthold Gunreben &lt;azouhr@opensuse.org&gt;" date="1568980800">- Update to version 1.9.1
  * Rerelease of 1.9 with some packaging issues fixed</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1568980801">- Modernise spec file</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1675684800">- Update to version 1.10
  * Multiple -F filters can be given. cabextract will extract
    files matching any of the filters.
  * cabextract now overwrites symlinks by default. This is to be
    consistent with other archive tools. Use the new -k option for
    the old behaviour of keeping symlinks. This does not affect
    symlinks in the -d dirpath option.
  * New -n option to never overwrite files.
  * New -i option to interactively prompt if you want to overwrite
    files.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1678190400">- update to 1.11:
  * Fixed bug in creating directories given in archives, e.g.
    extracting file</changelog>
</package>
<package pkgid="b4837763b28ecd7d38080078540873fc669665d72ae12a0d0c7d4f7a731dcc210257e6420ebdb4641d67218e7ea49fdc02eb32ed0615c383320a14bc66aac682" name="caca-utils" arch="x86_64">
  <version epoch="0" ver="0.99.beta20" rel="160000.2.2"/>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1614340800">- More overflow prevention of multiplying large ints
  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1618574400">- The problem is due to the fact that the images in the POC have
  a size of 0x0 and thus, when exporting, no data is written for
  the image bits.
  However, space is allocated for the header only, not taking
  into account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647259200">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668427200">- Upgrade to 0.99.beta20
  * IPv6 support in cacaserver
  * fixed a bug from 2004 that caused PDF documentation generation to fail
  * memory allocation functions are now more robust
  * numerous fixes for memory leaks and invalid memory accesses:
  * CVE-2021-30498
  * CVE-2021-30499
  * CVE-2021-3410
  * CVE-2018-20546
  * CVE-2018-20547
  * CVE-2018-20545
  * CVE-2018-20548
  * CVE-2018-20549
- Dropped upstream fixed patches
  * libcaca-bsc1182731-prevent-overflow.patch
  * libcaca-variable-type.patch
  * Bug1120502-add_cast_to_prevent_overflow.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668427201">- add patch [libcaca-autoconf-2.69.patch]
  * Don't force autoconf to be at version 2.71</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708689600">- Use %autosetup, prepare for RPM 4.20.
  * Rewrote patches so that they are applied uniformly via %autosetup.
  * Correctly reorder the patches in specfile declaration.</changelog>
  <changelog author="mjambor@suse.com" date="1718625600">- Added file libcaca-0.99.beta20-gcc14.patch (boo#1225795).</changelog>
  <changelog author="ilya@ilya.top" date="1718625601">- Updated spec-file with manual optimizations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1740657600">- Drop pkgconfig(ftgl) BuildRequires: ftgl is unmaintained and
  libcaca does not actually link to it, despite configure checking
  for it and finding it. This was originally added to configure in
  2008 (commit 9752e82) to be used 'later'.</changelog>
</package>
<package pkgid="e3ecace0538e2cc59aed38817eece0ca634b8e4f51ff1113c3f8c29cb6d7688ccd0d43251e29a21ccd0b88bc06f508eb7a26c6369cb8a6414211fce5a08307e1" name="caca-utils" arch="x86_64">
  <version epoch="0" ver="0.99.beta20" rel="160000.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1618574400">- The problem is due to the fact that the images in the POC have
  a size of 0x0 and thus, when exporting, no data is written for
  the image bits.
  However, space is allocated for the header only, not taking
  into account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647259200">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668427200">- Upgrade to 0.99.beta20
  * IPv6 support in cacaserver
  * fixed a bug from 2004 that caused PDF documentation generation to fail
  * memory allocation functions are now more robust
  * numerous fixes for memory leaks and invalid memory accesses:
  * CVE-2021-30498
  * CVE-2021-30499
  * CVE-2021-3410
  * CVE-2018-20546
  * CVE-2018-20547
  * CVE-2018-20545
  * CVE-2018-20548
  * CVE-2018-20549
- Dropped upstream fixed patches
  * libcaca-bsc1182731-prevent-overflow.patch
  * libcaca-variable-type.patch
  * Bug1120502-add_cast_to_prevent_overflow.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668427201">- add patch [libcaca-autoconf-2.69.patch]
  * Don't force autoconf to be at version 2.71</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708689600">- Use %autosetup, prepare for RPM 4.20.
  * Rewrote patches so that they are applied uniformly via %autosetup.
  * Correctly reorder the patches in specfile declaration.</changelog>
  <changelog author="mjambor@suse.com" date="1718625600">- Added file libcaca-0.99.beta20-gcc14.patch (boo#1225795).</changelog>
  <changelog author="ilya@ilya.top" date="1718625601">- Updated spec-file with manual optimizations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1740657600">- Drop pkgconfig(ftgl) BuildRequires: ftgl is unmaintained and
  libcaca does not actually link to it, despite configure checking
  for it and finding it. This was originally added to configure in
  2008 (commit 9752e82) to be used 'later'.</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1778587200">- Prevent undefined behaviour in overflow check.
  [Prevent-undefined-behaviour-in-overflow-check.patch,
  bsc#1264984, CVE-2026-42046]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1778673600">- Improve the fix of CVE-2026-42046 for 32bit system.
  [Fix-32-bit-overflow-in-CVE-2026-42046-patch.patch,
  bsc#1264984, CVE-2026-42046]</changelog>
</package>
<package pkgid="84c10b161ff02e79f052e07e8b898ac32a67ec424d49a3fcf50e62ee941dca588f068bfd9dc34d59d22871c6ebae418c628eeffac7dc35e4fd9d5b6e57aa0456" name="cachefilesd" arch="x86_64">
  <version epoch="0" ver="0.10.10" rel="bp160.1.12"/>
  <changelog author="crrodriguez@opensuse.org" date="1341921600">- Update to version 0.10.5, no changelog found.
- Add systemd units.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1341921601">- Use autotools to build the package.
- Fix the configuration files not to enforce a selinux policy.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351771200">- IF the user starts the daemon he/she expects it to work
  with no fiddling, load the cachefiles kernel module
  directly from the daemon using libkmod so it just works.</changelog>
  <changelog author="dmair@suse.com" date="1362398400">- Added a modification to the howto that reflects the current
  location and material in the cachefilesd monitoring facility.
  From text by bking@suse.com (bnc#804834)</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Use real systemd service file instead of sysvinit converted file</changelog>
  <changelog author="nfbrown@suse.com" date="1394539200">- fix-cpu-spin.patch - Fix problem were cachefilesd
  would sometimes enter a tight loop wasting CPU time.
  bnc#843575</changelog>
  <changelog author="mpluskal@suse.com" date="1432900800">- Use url for source
- Update dependencies
  * don't depend on whole systemd
- Move autoreconf to %prepare section
- Add rcservice symlink</changelog>
  <changelog author="bmwiedemann@suse.de" date="1443960000">- replace sources with compressed tarball</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.10.10:
  * no changelog available
  - remove fix-cpu-spin.patch (solved differently upstream)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="144bac7e254d634aab666b706821c886977ae637c061049705152699a61d9394b650ebf3d0d1a07f4ef98291aed0baa0ad190e0337e7aa224396af0a665cf7f9" name="caddy" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="bp160.1.8"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="60e101af2aaee2fe789b71d4c508f4fd8bd8b67e07ed817ecf09b14666462a0fe4ba16b3574f47bc577cbf59d7e6b6bf38cbeb159b4cb5c45c61141eb8620ff0" name="caddy-bash-completion" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp160.1.8"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="c3626ad53d59a7b02b786be234e29a042cf0c277e1a48306e61630ecc05dee1a9f0bd28321b75ff5c64843b8b99dcf9a116e57fc11239b9c1c6d7a99381bfac3" name="caddy-fish-completion" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp160.1.8"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="c9be479634c5fd5084ea87ed251686320cdd032bccb29be53946692ca2dfd9e0edfc282e29a345b96267c7aaf82f65d8ddd01f38dd37415b4a9a7868b076c79a" name="caddy-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp160.1.8"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1716897600">- Update to version 2.8.0:
  * acmeserver: Add `sign_with_root` for Caddyfile (#6345)
  * caddyfile: Reject global request matchers earlier (#6339)
  * core: Fix bug in AppIfConfigured (fix #6336)
  * fix a typo (#6333)
  * autohttps: Move log WARN to INFO, reduce confusion (#6185)
  * reverseproxy: Support HTTP/3 transport to backend (#6312)
  * context: AppIfConfigured returns error; consider not-yet-provisioned modules (#6292)
  * Fix lint error about deprecated method in smallstep/certificates/authority
  * go.mod: Upgrade dependencies
  * caddytls: fix permission requirement with AutomationPolicy (#6328)
  * caddytls: remove ClientHelloSNICtxKey (#6326)
  * caddyhttp: Trace individual middleware handlers (#6313)
  * templates: Add `pathEscape` template function and use it in file browser (#6278)
  * caddytls: set server name in context (#6324)
  * chore: downgrade minimum Go version in go.mod (#6318)
  * caddytest: normalize the JSON config (#6316)
  * caddyhttp: New experimental handler for intercepting responses (#6232)
  * httpcaddyfile: Set challenge ports when http_port or https_port are used
  * logging: Add support for additional logger filters other than hostname (#6082)
  * caddyhttp: Log 4xx as INFO; 5xx as ERROR (close #6106)
  * Second half of 6dce493
  * caddyhttp: Alter log message when request is unhandled (close #5182)
  * chore: Bump Go version in CI (#6310)
  * go.mod: go 1.22.3
  * Fix typos (#6311)
  * reverseproxy: Pointer to struct when loading modules; remove LazyCertPool (#6307)
  * tracing: add trace_id var (`http.vars.trace_id` placeholder) (#6308)
  * go.mod: CertMagic v0.21.0
  * reverseproxy: Implement health_follow_redirects (#6302)
  * caddypki: Allow use of root CA without a key. Fixes #6290 (#6298)
  * go.mod: Upgrade to quic-go v0.43.1
  * reverseproxy: HTTP transport: fix PROXY protocol initialization (#6301)
  * caddytls: Ability to drop connections (close #6294)
  * build(deps): bump golangci/golangci-lint-action from 4 to 5 (#6289)
  * httpcaddyfile: Fix expression matcher shortcut in snippets (#6288)
  * caddytls: Evict internal certs from cache based on issuer (#6266)
  * chore: add warn logs when using deprecated fields (#6276)
  * caddyhttp: Fix linter warning about deprecation
  * go.mod: Upgrade to quic-go v0.43.0
  * fileserver: Set "Vary: Accept-Encoding" header (see #5849)
  * events: Add debug log
  * reverseproxy: handle buffered data during hijack (#6274)
  * ci: remove `android` and `plan9` from cross-build workflow (#6268)
  * run `golangci-lint run --fix --fast` (#6270)
  * caddytls: Option to configure certificate lifetime (#6253)
  * replacer: Implement `file.*` global replacements (#5463)
  * caddyhttp: Address some Go 1.20 features (#6252)
  * Quell linter (false positive)
  * reverse_proxy: Add grace_period for SRV upstreams to Caddyfile (#6264)
  * doc: add `verifier` in `ClientAuthentication` caddyfile marshaler doc (#6263)
  * caddytls: Add Caddyfile support for on-demand permission module (close #6260)
  * reverseproxy: Remove long-deprecated buffering properties
  * reverseproxy: Reuse buffered request body even if partially drained
  * reverseproxy: Accept EOF when buffering
  * logging: Fix default access logger (#6251)
  * fileserver: Improve Vary handling (#5849)
  * cmd: Only validate config is proper JSON if config slice has data (#6250)
  * staticresp: Use the evaluated response body for sniffing JSON content-type (#6249)
  * encode: Slight fix for the previous commit
  * encode: Improve Etag handling (fix #5849)
  * httpcaddyfile: Skip automate loader if disable_certs is specified (fix #6148)
  * caddyfile: Populate regexp matcher names by default (#6145)
  * caddyhttp: record num. bytes read when response writer is hijacked (#6173)
  * caddyhttp: Support multiple logger names per host (#6088)
  * chore: fix some typos in comments (#6243)
  * encode: Configurable compression level for zstd (#6140)
  * caddytls: Remove shim code supporting deprecated lego-dns (#6231)
  * connection policy: add `local_ip`  matcher (#6074)
  * reverseproxy: Wait for both ends of websocket to close (#6175)
  * caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229)
  * caddytls: Still provision permission module if ask is specified
  * fileserver: read etags from precomputed files (#6222)
  * fileserver: Escape # and ? in img src (fix #6237)
  * reverseproxy: Implement modular CA provider for TLS transport (#6065)
  * caddyhttp: Apply auto HTTPS redir to all interfaces (fix #6226)
  * cmd: Fix panic related to config filename (fix #5919)
  * cmd: Assume Caddyfile based on filename prefix and suffix (#5919)
  * admin: Make `Etag` a header, not a trailer (#6208)
  * caddyhttp: remove duplicate strings.Count in path matcher (fixes #6233) (#6234)
  * caddyconfig: Use empty struct instead of bool in map (close #6224) (#6227)
  * gitignore: Add rule for caddyfile.go (#6225)
  * chore: Fix broken links in README.md (#6223)
  * chore: Upgrade some dependencies (#6221)
  * caddyhttp: Add plaintext response to `file_server browse` (#6093)
  * admin: Use xxhash for etag (#6207)
  * modules: fix some typo in conments (#6206)
  * caddyhttp: Replace sensitive headers with REDACTED (close #5669)
  * caddyhttp: close quic connections when server closes (#6202)
  * reverseproxy: Use xxhash instead of fnv32 for LB (#6203)
  * caddyhttp: add http.request.local{,.host,.port} placeholder (#6182)
  * chore: upgrade deps (#6198)
  * chore: remove repetitive word (#6193)
  * Added a null check to avoid segfault on rewrite query ops (#6191)
  * rewrite: `uri query` replace operation (#6165)
  * logging: support `ms` duration format and add docs (#6187)
  * replacer: use RWMutex to protect static provider (#6184)
  * caddyhttp: Allow `header` replacement with empty string (#6163)
  * vars: Make nil values act as empty string instead of `"&lt;nil&gt;"` (#6174)
  * chore: Update quic-go to v0.42.0 (#6176)
  * caddyhttp: Accept XFF header values with ports, when parsing client IP (#6183)
  * reverseproxy: configurable active health_passes and health_fails (#6154)
  * reverseproxy: Configurable forward proxy URL (#6114)
  * caddyhttp: upgrade to cel v0.20.0 (#6161)
  * chore: Bump Chroma to v2.13.0, includes new Caddyfile lexer (#6169)
  * caddyhttp: suppress flushing if the response is being buffered (#6150)
  * chore: encode: use FlushError instead of Flush (#6168)
  * encode: write status immediately when status code is informational (#6164)
  * httpcaddyfile: Keep deprecated `skip_log` in directive order (#6153)
  * httpcaddyfile: Add `RegisterDirectiveOrder` function for plugin authors (#5865)
  * rewrite: Implement `uri query` operations (#6120)
  * fix struct names (#6151)
  * fileserver: Preserve query during canonicalization redirect (#6109)
  * logging: Implement `log_append` handler (#6066)
  * httpcaddyfile: Allow nameless regexp placeholder shorthand (#6113)
  * logging: Implement `append` encoder, allow flatter filters config (#6069)
  * ci: fix the integration test `TestLeafCertLoaders` (#6149)
  * vars: Allow overriding `http.auth.user.id` in replacer as a special case (#6108)
  * caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)
  * cmd: Adjust config load logs/errors (#6032)
  * reverseproxy: SRV dynamic upstream failover (#5832)
  * ci: bump golangci/golangci-lint-action from 3 to 4 (#6141)
  * core: OnExit hooks (#6128)
  * cmd: fix the output of the `Usage` section (#6138)
  * caddytls: verifier: caddyfile: re-add Caddyfile support (#6127)
  * acmeserver: add policy field to define allow/deny rules (#5796)
  * reverseproxy: cookie should be Secure and SameSite=None when TLS (#6115)
  * caddytest: Rename adapt tests to `*.caddyfiletest` extension (#6119)
  * tests: uses testing.TB interface for helper to be able to use test server in benchmarks. (#6103)
  * caddyfile: Assert having a space after heredoc marker to simply check (#6117)
  * chore: Update Chroma to get the new Caddyfile lexer (#6118)
  * reverseproxy: use context.WithoutCancel (#6116)
  * caddyfile: Reject directives in the place of site addresses (#6104)
  * caddyhttp: Register post-shutdown callbacks (#5948)
  * caddyhttp: Only attempt to enable full duplex for HTTP/1.x (#6102)
  * caddyauth: Drop support for `scrypt` (#6091)
  * Revert "caddyfile: Reject long heredoc markers (#6098)" (#6100)
  * caddyauth: Rename `basicauth` to `basic_auth` (#6092)
  * logging: Inline Caddyfile syntax for `ip_mask` filter (#6094)
  * caddyfile: Reject long heredoc markers (#6098)
  * chore: Rename CI jobs, run on M1 mac (#6089)
  * update comment
  * improved list
  * fix: add back text/*
  * fix: add more media types to the compressed by default list
  * acmeserver: support specifying the allowed challenge types (#5794)
  * matchers: Drop `forwarded` option from `remote_ip` matcher (#6085)
  * caddyhttp: Test cases for `%2F` and `%252F` (#6084)
  * bump to golang 1.22 (#6083)
  * fileserver: Browse can show symlink target if enabled (#5973)
  * core: Support NO_COLOR env var to disable log coloring (#6078)
  * build(deps): bump peter-evans/repository-dispatch from 2 to 3 (#6080)
  * Update comment in setcap helper script
  * caddytls: Make on-demand 'ask' permission modular (#6055)
  * core: Add `ctx.Slogger()` which returns an `slog` logger (#5945)
  * chore: Update quic-go to v0.41.0, bump Go minimum to 1.21 (#6043)
  * chore: enabling a few more linters (#5961)
  * caddyfile: Correctly close the heredoc when the closing marker appears immediately (#6062)
  * caddyfile: Switch to slices.Equal for better performance (#6061)
  * tls: modularize trusted CA providers (#5784)
  * logging: Automatic `wrap` default for `filter` encoder (#5980)
  * caddyhttp: Fix panic when request missing ClientIPVarKey (#6040)
  * caddyfile: Normalize &amp; flatten all unmarshalers (#6037)
  * cmd: reverseproxy: log: use caddy logger (#6042)
  * matchers: `query` now ANDs multiple keys (#6054)
  * caddyfile: Add heredoc support to `fmt` command (#6056)
  * refactor: move automaxprocs init in caddycmd.Main()
  * caddyfile: Allow heredoc blank lines (#6051)
  * httpcaddyfile: Add optional status code argument to `handle_errors` directive (#5965)
  * httpcaddyfile: Rewrite `root` and `rewrite` parsing to allow omitting matcher (#5844)
  * fileserver: Implement caddyfile.Unmarshaler interface (#5850)
  * reverseproxy: Add `tls_curves` option to HTTP transport (#5851)
  * caddyhttp: Security enhancements for client IP parsing (#5805)
  * replacer: Fix escaped closing braces (#5995)
  * filesystem: Globally declared filesystems, `fs` directive (#5833)
  * ci/cd: use the build tag `nobadger` to exclude badgerdb (#6031)
  * httpcaddyfile: Fix redir &lt;to&gt; html (#6001)
  * httpcaddyfile: Support client auth verifiers (#6022)
  * tls: add reuse_private_keys (#6025)
  * reverseproxy: Only change Content-Length when full request is buffered (#5830)
  * Switch Solaris-derivatives away from listen_unix (#6021)
  * build(deps): bump actions/upload-artifact from 3 to 4 (#6013)
  * build(deps): bump actions/setup-go from 4 to 5 (#6012)
  * chore: check against errors of `io/fs` instead of `os` (#6011)
  * caddyhttp: support unix sockets in `caddy respond` command (#6010)
  * fileserver: Add total file size to directory listing (#6003)
  * httpcaddyfile: Fix cert file decoding to load multiple PEM in one file (#5997)
  * build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#5994)
  * cmd: use automaxprocs for better perf in containers (#5711)
  * logging: Add `zap.Option` support (#5944)
  * httpcaddyfile: Sort skip_hosts for deterministic JSON (#5990)
  * metrics: Record request metrics on HTTP errors (#5979)
  * go.mod: Updated quic-go to v0.40.1 (#5983)
  * fileserver: Enable compression for command by default (#5855)
  * fileserver: New --precompressed flag (#5880)
  * caddyhttp: Add `uuid` to access logs when used (#5859)
  * proxyprotocol: use github.com/pires/go-proxyproto (#5915)
  * cmd: Preserve LastModified date when exporting storage (#5968)
  * core: Always make AppDataDir for InstanceID (#5976)
  * chore: cross-build for AIX (#5971)
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.21 matching go.mod
- CVEs:
  * CVE-2024-22189 (bsc#1222468)
  * CVE-2023-45142</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717070400">- Update to version 2.8.1:
  * caddyhttp: Fix merging consecutive `client_ip` or `remote_ip` matchers (#6350)
  * core: MkdirAll appDataDir in InstanceID with 0o700 (#6340)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329600">- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1717329601">- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718107200">- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1718366400">- Add OBS manual service download_files</changelog>
  <changelog author="Alexandre Vicenzi &lt;alexandre.vicenzi@suse.com&gt;" date="1718798400">- Revert buildable-artifact change, fetch tarball with tar_scm
- Downgrade golang(API) version to match go.mod
- Override Caddy version during build time as suggested in caddy.go</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683200">- Update to version 2.9.0:
  * go.mod: Upgrade CertMagic to v0.21.5
  * testing: sort force-automated hosts (#6756)
  * httpcaddyfile: Implement experimental `force_automate` option (#6712)
  * encode: try to use sendfile when compression is not used (#6749)
  * caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  * go.mod: Upgrade ACMEz to v3; and upgrade CertMagic
  * cmd: Disable go1.23 tlskyber=1 experiment
  * Update SECURITY.md
  * fastcgi: check for CONTENT_LENGTH when sending requests (#6661)
  * reverseproxy: Set Content-Length when body is fully buffered (#6638)
  * core: Change ListenerFunc signature (#6651)
  * reverseproxy: Only handle websocket protocol (#6740)
  * encode: write status immediate for success response for CONNECT requests (#6738)
  * encode: good defaults (#6737)
  * fileserver: add a test for precompressed defaults (#6743)
  * fileserver: good default for precompressed (#6736)
  * chore: fix some typo in HTTPLoader comment (#6735)
  * reverseproxy: Rewrite requests and responses for websocket over http2 (#6567)
  * chore: bump golang.org/x/net to v0.32.0 (#6728)
  * fileserver: Fix policy `Validate()` oversight (#6727)
  * cmd: Reject multiple configs for fmt command (#6717)
  * fileserver: Add `first_exist_fallback` strategy for `try_files` (#6699)
  * caddyhttp: Add `{?query}` placeholder (#6714)
  * ci: prevent jobs running on PRs from forks (#6720)
  * go.mod: Upgrade quic-go to 0.48.2
  * metrics: add `go` and `process` collectors (#6704)
  * requestbody: Type-based error handling for `MaxBytesError` (#6701)
  * fastcgi: remove dir redirection when useless in php_fastcgi (#6698)
  * caddyhttp: Set default ReadHeaderTimeout (1 min)
  * cmd: ignore missing keys during storage export (#6697)
  * chore: make FastAbs comment more easy to understand (#6692)
  * chore: Add `provides` to `.deb` releases (#6691)
  * core: Implement FastAbs to avoid repeated os.Getwd calls (#6687)
  * reverseproxy: Revert #4952 - don't ignore context cancellation in stream mode
  * httpcaddyfile: Implement log `sampling` config (#6682)
  * reverseproxy: Allow `0` as weights for `weighted_round_robin` (#6681)
  * ci: use commit sha in goreleaser-check (#6677)
  * go.mod: Update certmagic
  * caddytls: Allow disabling storage cleaning, avoids writing two files (#6593)
  * rewrite: Don't add / in Caddyfile, do it after replacer (#6662)
  * fileserver: Add `file_limit` option for browse (to be experimental) (#6648)
  * go.mod: upgrade only some otel deps (#6676)
  * caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596)
  * Fix tests
  * forwardauth: Skip copying missing response headers (#6608)
  * go.mod: Update dependencies
  * events: Use `WithLazy` to prevent eager serialization of the event data (#6671)
  * fileserver: Fix Caddyfile parsing
  * httpcaddyfile: Fixes for `prefer_wildcard` mode (#6636)
  * cmd: Allow `add-package` to select version of package (#6665)
  * chore: compile without nosql's support for Postgres and MySQL (#6655)
  * chore: Bump quic-go to 0.48.1, fixing a panic (#6654)
  * reverseproxy: Sync changes from stdlib for 1xx handling (#6656)
  * reverseproxy: Fix log message
  * tracing: Add `spanID` field to access logs and `http.vars.span_id` placeholder (#6646)
  * core: addresses.go funcs renames (#6622)
  * chore: fix some function names in comment (#6650)
  * fileserver: fix try_policy when instantiating file matcher from CEL (#6624)
  * sigtrap: always ignore SIGPIPE (#6645)
  * metrics: move `metrics`  up, outside `servers` (#6606)
  * caddyhttp: Close http3 server gracefully (#6213)
  * chore: update quic-go to v0.48.0 (#6627)
  * reverseproxy: Use correct cases for websocket related headers (#6621)
  * caddyfile: Fix comma edgecase in address parsing (#6616)
  * docs: expand proxy protocol docs (#6620)
  * tests: fix caddyfile adapt warnings (#6619)
  * caddytls: Drop `rate_limit` and `burst`, has been deprecated (#6611)
  * caddyhttp: Use internal issuer for IPs when no APs configured
  * go.mod: Upgrade some dependencies
  * ci: install xcaddy to fix release flow (#6602)
  * metrics: scope metrics to active config, add optional per-host metrics (#6531)
  * caddyhttp: Implement `auto_https prefer_wildcard` option (#6146)
  * caddyhttp: Escaping placeholders in CEL, add `vars` and `vars_regexp` (#6594)
  * cmd: Better error handling when reloading (#6601)
  * caddytls: Support new tls.context module (#6369)
  * http: ReponseWriter prefer ReadFrom if available (#6565)
  * chore: Adjust incorrect `reverse_proxy` Caddyfile comment (#6598)
  * caddyhttp: Fix listener wrapper regression from #6573 (#6599)
  * core: Implement socket activation listeners (#6573)
  * doc: remove docs of deprecated directives (#6566)
  * caddyhttp: Optimize logs using zap's WithLazy() (#6590)
  * chore: Use slices package where possible (#6585)
  * caddytls: Give a better error message when given encrypted private keys (#6591)
  * caddyhttp: enable qlog, controlled by QLOGDIR env (#6581)
  * update quic-go to v0.47.0 (#6582)
  * ci: update the linter action version (#6575)
  * perf: use zap's Check() to prevent useless allocs (#6560)
  * rewrite: Avoid panic on bad arg count for `uri` (#6571)
  * caddytls: Add sni_regexp matcher (#6569)
  * caddyhttp: Make route provisioning idempotent (#6558)
  * reverse_proxy: add placeholder http.reverse_proxy.retries (#6553)
  * fileserver: browse: Configurable default sort (#6502)
  * rewrite: Only serialize request if necessary (#6541)
  * ci: prepare syso files for windows embedding in release (#6406)
  * tls: use Go default kex for the moment that include PQC (#6542)
  * ci: build and test with Go 1.23 (#6526)
  * reverseproxy: allow user to define source address (#6504)
  * caddyhttp: run `error` (msg) through replacer (#6536)
  * chore: Fix a typo (#6534)
  * cmd: Use a factory to create the caddy root command (#6533)
  * reverseproxy: Change errors writing the response to warning. (#6532)
  * reverseproxy: Active health checks request body option (#6520)
  * ci: don't exit early on error in remote CI machine (#6519)
  * cmd: ignore exec.ErrDot when starting caddy in background (#6512)
  * Move PrivateRangesCIDR() back: add a pass-through function (#6514)
  * matchers: fix a regression in #6480 (#6510)
  * reverseproxy: Disable keep alive for h2c requests (#6343)
  * go.mod: update update golang/x/net (#6500)
  * replacer: `{file.*}` global placeholder strips trailing newline (#6411)
  * caddytls,caddyhttp: Placeholders for some TLS and HTTP matchers (#6480)
  * go.mod: update quic-go package (#6498)
  * browse: Customizable default sort options (#6468)
  * proxyprotocol: Update WrapListener to use ConnPolicyFunc for PROXY protocol (#6485)
  * encode: flush already compressed data from the encoder (#6471)
  * chore: update golangci config (#6479)
  * caddytls: Caddyfile support for TLS conn and cert sel policies (#6462)
  * caddytls: Caddyfile support for TLS handshake matchers (#6461)
  * ci: correct `-tags nobadger` on binary build (#6470)
  * reverseproxy: Fix panic when using header-related flags (fix #6464)
  * reverseproxy: add health_upstream subdirective (#6451)
  * reverseproxy: Caddyfile support for health_method (#6454)
  * reverseproxy: Configurable method for active health checks (#6453)
  * reverseproxy: Add placeholder for networkAddr in active health check headers (#6450)
  * fixed bug in resolving ip version in dynamic upstreams (#6448)
  * browse: Exclude symlink target size from total, show arrow on size (#6412)
  * browse: fix Content-Security-Policy warnings in Firefox (#6443)
  * browse: add Content-Security-Policy w/ nonce (#6425)
  * reverseproxy: Add placeholder for host in active health check headers (#6440)
  * caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427)
  * encode: Don't compress already-compressed fonts (#6432)
  * reverseproxy: Only log host is up status on change (fixes #6415) (#6419)
  * intercept: fix http.intercept.header.* placeholder (#6429)
  * reverseproxy: Wire up TLS options for H3 transport
  * fileserver: Remove newline characters from precomputed etags (#6394)
  * caddyhttp: Convert IDNs to ASCII when provisioning Host matcher
  * reverseproxy: add Max-Age option to sticky cookie (#6398)
  * caddyfile: Pass blocks to `import` for snippets (#6130)
  * logging: set file mode when the file already exist (#6391)
  * logging: Customizable zap cores (#6381)
  * go.mod: update tscert package (#6384)
  * logging: fix file mode configuration parsing (#6383)
  * caddyhttp: Write header if needed in responseRecorder.WriteResponse (#6380)
  * core: Split `run` into a public `ProvisionContext` and a private method (#6378)
  * logging: Customize log file permissions (#6314)
  * events: Getters for event info (close #6377)
  * ci: add version key for .goreleaser.yml (#6376)
  * cmd: remove zealous check of Caddyfile auto-detection (#6370)
  * caddyhttp: Add test cases to corpus (#6374)
  * Make it possible to configure the `DisableStorageCheck` setting for certmagic (#6368)</changelog>
  <changelog author="eric.torres@its-et.me" date="1736683201">- Update to version 2.9.1:
  * go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  * header: `match` subdirective for response matching (#6765)
  * log: Only chmod if permission bits differ; make log dir (#6761)
  * fix: disable h3 for unix domain socket (#6769)
  * reverseproxy: buffer requests for fastcgi by default (#6759)
  * core: Only initiate exit once (should fix #6707)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1744977600">- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
  * caddytls: Add remote_ip to HTTP cert manager (close #6952)
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#6960)
  * caddyauth: Set authentication provider error in placeholder (#6932)
  * go.mod: Upgrade acmez and certmagic
  * admin: Remove host checking for UDS (close #6832)
  * reverseproxy: Add valid Upstream to DialInfo in active health checks (#6949)
  * Fix the incorrect parameter order (#6951)
  * chore: fix comment (#6950)
  * caddyhttp: Document side effect of HTTP/3 early data (close #6936)
  * go.mod: Upgrade to libdns 1.0 beta APIs (requires upgraded DNS providers)
  * events: Refactor; move Event into core, so core can emit events (#6930)
  * caddytls: Temporarily treat "" and "@" as equivalent for DNS publication
  * go.mod: Upgrade CertMagic
  * go.mod: Minor dependency upgrades
  * caddytls: Don't publish HTTPS record for CNAME'd domain (fix #6922)
  * core: add modular `network_proxy` support (#6399)
  * update quic-go to v0.50.1 (#6918)
  * chore: Modernize a couple for loops
  * caddytls: Initialize permission module earlier (fix #6901)
  * caddyfile: Fix formatting for backquote wrapped braces (#6903)
  * caddytls: Convert AP subjects to punycode
  * caddytls: Don't publish ECH configs if other records don't exist
  * requestbody: Fix ContentLength calculation after body replacement (#6896)
  * requestbody: Add set option to replace request body (#5795)
  * headers: Allow nil HeaderOps (fix #6893)
  * caddytls: Minor fixes for ECH
  * caddytls: Fix TrustedCACerts backwards compatibility (#6889)
  * caddytls: Pointer receiver (fix #6885)
  * caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884)
  * reverseproxy: more comments about buffering and add new tests (#6778)
  * chore: Remove unnecessary explicit type parameters
  * caddytls: Reorder provisioning steps (fix #6877)
  * ci: fix Go matrix (#6846)
  * caddytls: Only make DNS solver if not already set (fix #6880)
  * cmd: Promote undo maxProcs func to caller
  * cmd: Only set memory/CPU limits on run (fix #6879)
  * caddypki: Remove lifetime check at Caddyfile parse (fix #6878)
  * go.mod: Upgrade dependencies
  * caddytls: Fix broken refactor
  * caddytls: Enhance ECH documentation
  * Update min go version in readme
  * readme: update Twitter name and link (#6874)
  * build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876)
  * caddytls: Encrypted ClientHello (ECH) (#6862)
  * build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871)
  * chore: upgrade cobra (#6868)
  * Fix typo in TLS group x25519mlkem768
  * caddytest: Support configuration defaults override (#6850)
  * chore: update quic-go to v0.50.0 (#6854)
  * go.mod: remove glog dependency (#6838)
  * chore: ci: upgrade Go version to 1.24 (#6839)
  * tests: tests for error handling &amp; metrics in admin endpoints (#6805)
  * caddytls: Support post-quantum key exchange mechanism X25519MLKEM768
  * file_server: use the UTC timezone for modified time (#6830)
  * Revert "logging: Always set fields func; fix #6829"
  * logging: Always set fields func; fix #6829
  * admin: fix index validation for PUT requests (#6824)
  * reverseproxy: ignore duplicate collector registration error (#6820)
  * build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814)
  * fix: update broken link to Ardan Labs (#6800)
  * reverse_proxy: re-add healthy upstreams metric (#6806)
  * caddytls: Refactor sni matcher (#6812)
  * cmd: automatically set GOMEMLIMIT (#6809)
  * caddyhttp: ResponseRecorder sets stream regardless of 1xx
  * caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804)
  * chore: don't use deprecated `archives.format_overrides.format` (#6807)
  * chore: update quic-go to v0.49.0 (#6803)
  * go.mod: Upgrade CertMagic to v0.21.7
  * reverseproxy: Via header (#6275)
  * logging: Fix crash if logging error is not HandlerError (#6777)
  * caddytls: Initial support for ACME profiles
  * fastcgi: improve parsePHPFastCGI docs (#6779)
- Packaging improvements:
  * Update to BuildRequires: golang(API) &gt;= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) &gt;= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.</changelog>
</package>
<package pkgid="b6613abc85b16a4a40f8f4e5d957393115493b0f1e54b3ae3ca2d8a404a3fbbe660f57ad45333afc0b992f658a71e7c949c1bb6f8a45a478dd1c39b75fafeae4" name="cadvisor" arch="x86_64">
  <version epoch="0" ver="0.49.1" rel="bp160.1.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
</package>
<package pkgid="fc03a6407babd503bc95e71476fc83176d0c47d0cf9043cd6f1ab3d7bc0ef27fc3b6a83e09cf4d7cc0b907318fa72aad1d4bb33cebd73a15433f4dec8f75a2d8" name="cadvisor" arch="x86_64">
  <version epoch="0" ver="0.60.3" rel="bp160.1.1"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671710400">- Initial package (0.46.0)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1718884800">- update description from Holden Fried (bsc#1222192)</changelog>
  <changelog author="dmueller@suse.com" date="1720699200">- Update to version 0.49.1:
  * build docker - add --provenance=false flag
  * Remove s390x support
  * Disable libipmctl in build
  * Ugrade base image to 1.22 and alpine 3.18
  * fix type of C.malloc in cgo
  * Bump golang.org/x/net
  * Bump grpc
  * Update docker
  * Bump runc to v1.1.12
  * Bump to bullseye
  * Bump golang to 1.22
  * Remove section about canary image
  * Add note about WebUI auth
  * Remove mentions of accelerator from the docs
  * reduce_logs_for_kubelet_use_crio
  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
  * add cadvisor and crio upstream changes
  * Avoid using container/podman in manager.go
  * container: skip checking for files in non-existent directories.
  * Adjust the log level of Initialize Plugins
  * add ignored device
  * fix: variable naming
  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
  * manager: require higher verbosity level for container info misses
  * Information should be logged on increased verbosity only
  * Running do mod tidy
  * Running go mod tidy
  * Running go mod tidy
  * container/libcontainer: Improve limits file parsing perf
  * container/libcontainer: Add limit parsing benchmark
  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
  * build(deps): bump github.com/cyphar/filepath-securejoin
  * Set verbosity after flag definition
  * fix: error message typo
  * vendor: bump runc to 1.1.9
  * Switch to use busybox from registry.k8s.io
  * Bump golang ci lint to v1.54.1
  * Bump github.com/docker/docker in /cmd
  * Bump github.com/docker/docker
  * Bump github.com/docker/distribution in /cmd
  * Bump github.com/docker/distribution
  * Update genproto dependency to isolated submodule
  * remove the check for the existence of NFS files, which will cause unnecessary requests.
  * reduce inotify watch
  * fix performance degradation of NFS
  * fix: fix type issue
  * fix: fix cgo memory leak
  * ft: export memory kernel usage
  * sysinfo: Ignore "hidden" sysfs device entries
  * Increasing required verbosity level
  * Patch to fix issue 2341
  * podman support: Enable Podman support.
  * podman support: Create Podman handler.
  * podman support: Changes in Docker handler.
  * unit test: machine_swap_bytes
  * Add documentation for machine_swap_bytes metric
  * Add a machine_swap_bytes metric
  * fix: add space trimming for label allowlist
  * Upgrade to blang/semver/v4 v4.0.0
  * docs(deploy/k8s): remote build for kustomize
  * Update dependencies
  * Change filepaths to detect online CPUs
  * Update actions/checkout to v3
  * Fix flags typo
  * Updating location of kubernetes/pause image
  * Using t.TempDir() in tests
  * Unit test: MachineInfo Clone() method
  * Bugfix: MachineInfo Clone() - clone SwapCapacity
  * Optimize network metrics collection
  * Removing calls to deprecates io/ioutil package
  * Updating minimum Go version to 1.19
  * Request the pid of another container if current pid is not longer valid
  * Restructure
  * Add CRI-O client timeout setting
  * Set containerd grpc.MaxCallRecvMsgSize to 16MB
  * Fix asset build
  * feat(logging): add verbosity to non-NUMA node warning
  * add nerdctl to ignoredDevices
  * nvm: Change the "no NVM devices" log.
  * nvm: Fix typo.
  * Fix CVE-2022-27664 (#3248)
  * resctrl: Reduce size and mode files check (#3264)
  * readme: Update Creatone contributor info. (#3265)
  * Fix comment to refer to correct client
  * build: bump golang to 1.20
  * ci: Update golang ci-lint to v1.51.2
  * build: Update shebang to python3
  * Revert "dockerfile: Fix typo in go build tags."
  * Decreasing verbosity level for "Cannot read vendor id correctly, set empty"
  * dockerfile: Fix typo in go build tags.
  * deps: Move from cloud.google.com/go/compute -&gt; cloud.google.com/go
  * use memory.min for reservation memory instead of high
  * Mark GOPATH as git safe.directory to fix CI build
  * switch to gomodule/redigo from garyburd/redigo
  * update go.mod/sum both in root and cmd/
  * Drop accelerator metrics and nvidia integration
  * Add s390x support for docker image
  * typo in MachineInfo spec for SwapCapacity
  * add support for swap in machine/info</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1742212800">- update to 0.52.1:
  * Make resctrl optional/pluggable
- update to 0.52.0:
  * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
    ttrpc v1.2.6
  * chore: Update Prometheus libraries
  * ci: golangci-lint bump, fixes, and cleanups
  * bump runc to v1.2.4
  * Add Pressure Stall Information Metrics
  * Switch to opencontainers/cgroups repository (includes update
    from golang 1.22 to 1.24)
  * Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
  * Cp fix test
  * Revert "reduce_logs_for_kubelet_use_crio"
- add CVE-2025-22868.patch (CVE-2025-22868, bsc#1239291)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1782648000">- update to 0.53.0 (bsc#1257429, CVE-2024-45310,
    bsc#1267788, CVE-2026-10722):
  * fix potential hang on containerd client.LoadContainer
  * Bump dependencies to latest (June 2, 2025)
  * fix: fix call Errorf with wrong err
  * Fixed possible data race
  * Use built-in error wrapping instead of pkg/errors
- drop CVE-2025-22868.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1782648001">- update to 0.55.1:
  * manager: fix race condition in Stop() using sync.Once
  * manager: fix race condition in Stop() using sync.Once
- update to 0.55.0:
  * Reduce lock contention in manager package
  * container/podman: fix `zfsFilesystem` and `zfsParent` being
    swapped.
  * devicemapper: use atomic.Value for lock-free cache reads
  * Reduce lock contention in cache/memory package
  * zfs: use atomic.Value for lock-free cache reads
  * fix: docker health check status not updating
  * align docker and podman implementations
  * disable CGO for fully static binaries
  * close stale PRs and Issues
  * refactor(container): Migrate to std lib context package
  * add workflow_dispatch to stale github action
  * plugin factory: remove useless RegisterPlugin log output
  * feat(summary): add count in percentiles
  * machine: fixes for unix.Uname use
  * feat: add LoadTaskProcess api in containerd client
  * feat: add exit code in container deletion events
  * feat: add CRI-O integration tests
  * test: reorganize integration tests and add CRI-O test
    coverage
  * refactor: remove duplicate tests from api package and add
    missing CRI-O tests
  * fix: update golang.org/x/crypto to v0.45.0 to fix security
    vulnerabilities
  * container/(docker|podman): rewrite obtaining IP-address
  * Upgrade GitHub Actions to latest versions
  * Upgrade GitHub Actions for Node 24 compatibility
  * feat: add fs io cost metrics
  * go.mod: github.com/docker/go-connections v0.6.0
  * fs: introduce pluggable filesystem architecture
  * Apply build tags liberally for supported environments (linux)
  * Replace godirwalk with os.ReadDir from standard library
  * feat: add cpu burst metrics
- update to 0.54.1:
  * chore: update cAdvisor image registry and version in
    DaemonSet
  * ci: update Ubuntu version to 24.04 in GitHub Actions
    workflows
  * chore: re-enable golangci-lint checks and fix violations
  * container/docker: GetStats: prevent nil-pointer
- update to 0.54.0:
  * Let us try to use ghcr.io for container images
  * Add a GH action to create release binaries
  * use qemu/docker to build arch specific binaries
  * add -buildvcs=false to GH action
  * fix(3643) add containerd-snapshotter support
  * Update README.md with latest Docker image version and
    registry
  * Rebase to alpine 3.22, install thin-provisioning-tools from
    main repo
  * feat: add metric for container health check status  (DOCKER-
    Specific!)
  * Update golang and deps
- update to version 0.54.1:
  * container/docker: GetStats: prevent nil-pointer
  * chore: re-enable golangci-lint checks and fix violations
  * fix: use Docker-embedded containerd socket in integration tests
  * refactor: remove Mesos container support
  * ci: add diagnostic logging for docker/containerd debugging
  * fix: persist containerd client error to prevent nil pointer dereference
  * ci: update Ubuntu version to 24.04 in GitHub Actions workflows
  * chore: update cAdvisor image registry and version in DaemonSet
  * fix: handle nil Health state in docker container handler
  * ci: update Go version to 1.25 in GitHub Actions workflows
  * fix: update dependencies to address security vulnerabilities
  * add health status tests
  * feat: Update docker container handler to include health status in stats
  * Rebase to alpine 3.22, install thin-provisioning-tools from main repo
  * Update README.md Docker image reference
  * fix(3643) add containerd-snapshotter support
  * add -buildvcs=false to GH action
  * use qemu/docker to build arch specific binaries
  * Add a GH action to create release binaries
  * Let us try to use ghcr.io for container images (#3699)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1782648002">- Update to version 0.56.2:
  * docker: fix nil pointer dereference when GraphDriver is nil
  * Update healthcheck.sh
  * Update entrypoint.sh
  * docker: migrate to github.com/moby/moby modules
  * Update containerd, docker, moby, and opencontainers dependencies
  * update README
  * Update copyright year in healthcheck.sh
  * Update copyright year in entrypoint.sh
  * Added cadvisor boilerplate header to deploy/entrypoint.sh
  * Added cadvisor boilerplate header to deploy/healthcheck.sh
  * Add EXPOSE 8080 to document default port
  * Fix healthcheck to respect custom port flag
  * Add entrypoint wrapper to preserve -logtostderr flag
  * add std in summary
  * fix formatting
  * Update container/docker/factory.go
  * Update factory.go
  * Update factory.go
  * Update factory.go
  * Fix for issue #3772
  * docs: replace references to docker registry `gcr.io` with `ghcr.io`
  * Expose s390x CPU Topology to Prometheus</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1782648003">- update to 0.57.0 (bsc#1260305, CVE-2026-33186):
  * integration: add more Docker container handler tests
  * integration: add containerd container handler tests
  * integration: add Prometheus metrics endpoint tests
  * fix: support podman `volatile-containers.json` and/or
    `containers.json`
  * proposed roadmap for cAdvisor
  * remove log message when you can't read productName
  * Refactor Github Action per b/485167538
  * fix crio deadlock in getting crio sandbox containers
  * Add container_creation_time_seconds (previously:
    container_start_time_seconds); use runtime start time for
    container_start_time_seconds (podman &amp; docker)
  * deps: github.com/moby/moby/client v0.4.0, moby/api v1.54.1,
    containerd/ttrpc v1.2.8
  * fix(build): update k8s-staging-test-infra image in integ
    tests
  * feat(manager/container): add configurable initial splay and
    max jitter factors
  * feat(manager): add constraint data in OOM events
  * fix: add v-prefixed GHCR image tags for release consistency
  * build(deps): bump the go_modules group across 2 directories
    with 1 update
  * Expose cgroup v2 memory.events as Prometheus metrics
  * deploy: bump base images to Alpine 3.23</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1782648004">- update to 0.60.3:
  * Move OOM watching out of the lib module into the binary
  * lib/model: make ContainerStats sub-stats pointers to convey
    collection presence
- update to 0.60.1:
  * cpuload/netlink: report the real error and skip the reader on
    cgroup v2
  * deploy: add lib/go.mod to the image build's dependency cache
- update to 0.60.0:
  * Exposing additional cgroup v2 memory.stat metrics
  * lib: introduce github.com/google/cadvisor/lib — a lean,
    kubelet-focused library module
- bump x/net to 0.55 (bsc#1266645, CVE-2026-39821)</changelog>
</package>
<package pkgid="36d33022a2356baf3c8ce415011d6470fef9c947f467a772901803aefddaea8536616e17c66ae90d52c3764c7f9cde30428f09f03603da87c217f5fa60726b2a" name="cage" arch="x86_64">
  <version epoch="0" ver="0.2.0+0.e128a9f" rel="bp160.1.14"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1618574400">- Update to 0.1.3:
  * compatibility release to track wlroots 0.13.0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1624536000">- Add cage-wlroots-0140.patch: make compatible with wlroots 0.14.0</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1624795200">- Update to 1.4:
  * Compatibility release to track wlroots 0.14.0
- Drop cage-wlroots-0140.patch: upstreamed</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1669896000">- Update to 0.1.4+39.a81ab70
  We asked in https://github.com/Hjdskes/cage/issues/232
  for a long time for a wlroots 0.15.0 compat release
  * Compatibility with wlroots 0.15.0
  * Fix count_surface_iterator
  * Set xdg_toplevel geometry for fullscreen clients
  * Restore direct libm dependency (#222)
  * Several more fixes
- Add cage-wlroots-016-compat.patch:
  Add compat with wlroots 0.16.0. See PR 244.
- Switch to service file to generate tarball</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804800">- Update to 0.1.5:
  * Implement the following protocols: wlr-output-management-unstable-v1,
    virtual-keyboard-unstable-v1, wlr-virtual-pointer-unstable-v1,
    single-pixel-buffer-v1, presentation-time, viewporter.
  * Use wlroots' scene-graph API, which should improve performance.
  * Fall back to lower resolutions when the preferred output
    mode cannot be used.
- Drop cage-wlroots-016-compat.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Update repo URL
- Switch to git e7d8780 to fix build with wlroots
- Add changesgenerate to service file
- Switch from disabled to manual service
- Update to version 0.1.5+36.e7d8780:
  * Add support for primary selection
  * Add .editorconfig
  * output: fix assert when re-adding output to layout
  * output: use wlr_output_head_v1_state_apply()
  * xwayland: fix double wl_list_remove
  * output: Transition to wlr_output_state
  * output: Add scene output layout helper manually
  * output: Implement request_state event listener
  * meson: Bump minimum wlroots to 0.17
  * ci: Upgrade wlroots to 0.17</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1723550400">- BuildRequire pkgconfig(wlroots) instead of wlroots-devel: ensure
  we get a devel package that has the correct .pc file (latest
  wlroots has the pc file renamed to wlroots-0.18.pc, not matching
  the name anymore).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1723550401">- Cleanup up _service:
  + tar and compress services should be 'buildtime' in combination
    with obs_scm.
  + Remove the .tar.xz tarball, only eep the .obscpio archive as
    source.
  + Drop stale cage-0.1.5+0.83ffc57.obscpio archive, add
    cage-0.1.5+36.e7d8780.obscpio instead: This is the same version
    as previously packages as tar.xz.</changelog>
  <changelog author="mvetter@suse.com" date="1728302400">- Update to version 0.2.0+0.e128a9f:
  * build: bump to version 0.2.0
  * ci: drop libwayland C23 workaround
  * xdg_shell: wait for initial commit to unconstrain popups
  * cage: fix abort on shutdown
  * xdg_shell: wait for initial commit to set xdg-decoration mode
  * xdg_shell: configure surface on initial commit
  * ci: workaround libwayland C23 bug
  * seat: rename WLR_INPUT_DEVICE_TABLET_TOOL to WLR_INPUT_DEVICE_TABLET
  * xdg_shell: use new lifecycle events
  * cage: drop wlr_scene_set_presentation()
  * cage: create backend with wl_event_loop and output layout with wl_display
  * seat: pass relative direction to wlr_seat_pointer_notify_axis()
  * Bump wlroots requirement to v0.18
  * cage: fix SIGINT/SIGTERM handler data
  * ci: turn on --fatal-meson-warnings
  * readme: update meson commands
  * readme: update wlroots dependency version
  * build: drop xwayland option</changelog>
  <changelog author="Soc Virnyl Estela &lt;obs@uncomfyhalomacro.pl&gt;" date="1728302401">- Fix name for BuildRequire of wlroots
  * wlroots is very explicit with versions. It now has a suffix added based
    version format &lt;major&gt;.&lt;minor&gt; i.e. wlroots-0.18 to refer to the 0.18.x
    series</changelog>
</package>
<package pkgid="70a3b351d495f6264d11e184721eb0ccda3e4d2898cb6e875c5404c9c366a6d47b7460df8be71e170e484a66a6769774450ddd36f9450adec670ad2c78ceeb95" name="cagebreak" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp160.1.4"/>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1722945600">- Initial cagebreak package for openSUSE</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1723377600">- Add keyring to sources list</changelog>
</package>
<package pkgid="a0b52f3bbdb48781c59dcba985c3a379bffa99b2416d50c919afaa11fe1ca7db810015287c26419b17e277033f131435195a256ffd067cc0cd2dad5fad6d6042" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
</package>
<package pkgid="8a9a6e33f9c49d9c5ca9d0e78d0f060b2cfa9454eb6a3f52c9e82aea2ade65a2295c760eafea5ab0faa1731e5a6e5f28e6f2c269d538b3bb7736f40e427bae27" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
  <changelog author="dimstar@opensuse.org" date="1774267200">- Migrate to xz compression and manual service run</changelog>
</package>
<package pkgid="f489bf10e9c1eba3aa062121d2a88980a1b0a643ebf439daa7230a032eb3ddd0d5d1f6363de9659f1ef908b455882f8f9b764d79524de3803c9be0fa3c3a214c" name="cairo-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
  <changelog author="dimstar@opensuse.org" date="1774267200">- Migrate to xz compression and manual service run</changelog>
</package>
<package pkgid="5ccb5f77801fde3c93cc8d9612a4501751f0483b0a2188445af079666930b34609cd5918788665414d78d1621f477bc0b1d11b690e9f8fccd0b29245bf6804f0" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
</package>
<package pkgid="28481ba8b2d743e3a9225778c74dcae55be646857a7414be95b6c90d6d9c8c524e3f1b2ad984ef5c910184708ddb871bfd6163fbe7ba4e953206118ad31ad119" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="160000.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
  <changelog author="dimstar@opensuse.org" date="1774267200">- Migrate to xz compression and manual service run</changelog>
</package>
<package pkgid="72dfe3e5e0ec8233c6c53e49bcd1d635bfead8a52492242dfaf5042e4153cd6eee608c5fccd34d0b3754169d937dfda927daa8748f44dabc3d7324a94138c783" name="cairomm-devel" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="bp160.1.7"/>
  <changelog author="luc14n0@linuxmail.org" date="1504526400">- Update to version 1.15.5:
  + enums.h: Guard the FT-specific include and the enum with an
    ifdef (fdo#100894).
  + Build: configure.ac: Require C++14, because libsigc++-3.0 does
    (fdo#100884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Export CXXFLAGS="-std=c++17" until upstream fixes this. Requires,
  as libsigc++-3.0 moved to C++17.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Description updates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1604318400">- Update to version 1.16.0:
  + This is the first stable release in the cairomm-1.16 ABI
    series. It is parallel-installable with the cairomm-1.0 ABI.
  + Cairo:
  - Add Context::get_source_for_surface()
  - Fix a memory leak in RefPtr
  + Build:
  - Require C++17
  - Add NMake Makefiles. Remove the Visual Studio projects
  - Add support for building with Meson
  - Use __declspec(dllexport) when building cairomm on Visual
    Studio. Stop using gendef.exe
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Tests:
  - Update the source code
  - Don't include deprecated Boost header files. Fix tests in
    Autotools builds
  + Documentation: README: Update with instructions for building
    cairomm.
- Add meson BuildRequires and macros following upstreams port.
- Add graphviz BuildRequires, needed now for building
  documentation.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1625054400">- Update to version 1.16.1
  + Only build system related changes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671451200">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1727092800">- update to version 1.16.2:
  * meson.build: Avoid configuration warnings
  * MSVC build: Support VS2022 builds
    (Chun-wei Fan) Merge request !20
  * Meson build: When mm-common &gt;= 1.0.4 is used, Perl is not required
  * Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
    Require Meson &gt;= 0.55.0
  * Meson build: Avoid unnecessary configuration warnings
    (Kjell Ahlstedt)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742212800">- Update to version 1.18.0:
  + Meson build: The boost-shared option defaults to true
- Changes from version 1.17.1 (unstable):
  + Add SaveGuard save/restore object
  + Add Surface::set/get_device_scale()
  + ScaledFont: Add get_text_extents() and get_glyph_extents()
  + Use callback functions with C linkage
  + Documentation:
  - Surface: Use cairomm names where possible
  - Context: Fix some typos
  - Update Visual Studio build docs
  - Remove AUTHORS and MAINTAINERS; add info to README.md
  + Build:
  - Meson build: Re-organize warnings-related compiler flags for
    MSVC
  - Autotools build: Add --disable-deprecated-api
  - Require cairo &gt;= 1.14.0
  - Meson build: Detect if we build from a git subtree
  - Meson build: Don't copy files with configure_file()
  - Meson build: Fix the evaluation of is_git_build on Windows
- Drop obsolete update-desktop-files BuildRequires.
- Replace gcc-c++ with generic c++_compiler BuildRequries.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742385600">- Cleanup spec, build doc subpackage as noarch.</changelog>
</package>
<package pkgid="404de6796e5e8a8daa9d5ce2c164d6a6e5ca284f612f9a179fe1d05b7574550af52c6f6f6e14faa3eb02ee51d29866fc83f321031825e3afe818cbd568fa9641" name="cairomm-doc" arch="noarch">
  <version epoch="0" ver="1.18.0" rel="bp160.1.7"/>
  <changelog author="luc14n0@linuxmail.org" date="1504526400">- Update to version 1.15.5:
  + enums.h: Guard the FT-specific include and the enum with an
    ifdef (fdo#100894).
  + Build: configure.ac: Require C++14, because libsigc++-3.0 does
    (fdo#100884).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Export CXXFLAGS="-std=c++17" until upstream fixes this. Requires,
  as libsigc++-3.0 moved to C++17.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Description updates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1604318400">- Update to version 1.16.0:
  + This is the first stable release in the cairomm-1.16 ABI
    series. It is parallel-installable with the cairomm-1.0 ABI.
  + Cairo:
  - Add Context::get_source_for_surface()
  - Fix a memory leak in RefPtr
  + Build:
  - Require C++17
  - Add NMake Makefiles. Remove the Visual Studio projects
  - Add support for building with Meson
  - Use __declspec(dllexport) when building cairomm on Visual
    Studio. Stop using gendef.exe
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Tests:
  - Update the source code
  - Don't include deprecated Boost header files. Fix tests in
    Autotools builds
  + Documentation: README: Update with instructions for building
    cairomm.
- Add meson BuildRequires and macros following upstreams port.
- Add graphviz BuildRequires, needed now for building
  documentation.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1625054400">- Update to version 1.16.1
  + Only build system related changes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671451200">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1727092800">- update to version 1.16.2:
  * meson.build: Avoid configuration warnings
  * MSVC build: Support VS2022 builds
    (Chun-wei Fan) Merge request !20
  * Meson build: When mm-common &gt;= 1.0.4 is used, Perl is not required
  * Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
    Require Meson &gt;= 0.55.0
  * Meson build: Avoid unnecessary configuration warnings
    (Kjell Ahlstedt)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742212800">- Update to version 1.18.0:
  + Meson build: The boost-shared option defaults to true
- Changes from version 1.17.1 (unstable):
  + Add SaveGuard save/restore object
  + Add Surface::set/get_device_scale()
  + ScaledFont: Add get_text_extents() and get_glyph_extents()
  + Use callback functions with C linkage
  + Documentation:
  - Surface: Use cairomm names where possible
  - Context: Fix some typos
  - Update Visual Studio build docs
  - Remove AUTHORS and MAINTAINERS; add info to README.md
  + Build:
  - Meson build: Re-organize warnings-related compiler flags for
    MSVC
  - Autotools build: Add --disable-deprecated-api
  - Require cairo &gt;= 1.14.0
  - Meson build: Detect if we build from a git subtree
  - Meson build: Don't copy files with configure_file()
  - Meson build: Fix the evaluation of is_git_build on Windows
- Drop obsolete update-desktop-files BuildRequires.
- Replace gcc-c++ with generic c++_compiler BuildRequries.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742385600">- Cleanup spec, build doc subpackage as noarch.</changelog>
</package>
<package pkgid="47dc8ebe7c3c4808838b7ecb050962573cb53e03b6edf58a111a76d9b57607de6faaba7d96b824230ef56099fa7ec70a1ba74eb6a75198564648f4072b0baa26" name="cairomm1_0-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Add baselibs.conf to source list.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439726400">- Update to version 1.11.4:
  + Use (and require) C++11.
  + Add Script and ScriptSurface.
  + Context: get_surface_wrapper(): Handle
    CAIRO_SURFACE_TYPE_SCRIPT, returning a ScriptSurface.
  + Surface: get_device(): Handle CAIRO_SURFACE_TYPE_SCRIPT,
    returning a Script.
  + Wrap cairo script device and script surface APIs.
  + FtFontFace: Add get/set/unset_synthesize().
  + Update MSVC.Net 2010 project files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 1.12.0:
  + Cairo::RefPtr: Add move constructors and move operator=().
  + MSVC build fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="jengelh@inai.de" date="1464782400">- Remove unnecessary INSTALL file (resolves rpmlint warning)</changelog>
  <changelog author="zaitor@opensuse.org" date="1479643200">- Update to version 1.12.2:
  + Remove new API that was not meant to be added in 1.12.1.
- Changes from version 1.12.1:
  + C++11:
  - Use nullptr instead of 0.
  - Use override keyword on destructors.
  - Make operator bool() explicit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to cairomm1_0: legacy package with the 1.0 API. The
  existing package 'cairomm' will remain to be the 'latest'
  version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Remove --with-pic which has no effect with --disable-static.
- Update descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
</package>
<package pkgid="50b62f2c0f0085877060d77e7ffd2e9dadcbcfc9ac7a5b1e025c26a6d376f5cf131d30213d35972d476d2d296300b08cedd38055c3c04ae00b89ea1e01827124" name="cairomm1_0-doc" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Add baselibs.conf to source list.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439726400">- Update to version 1.11.4:
  + Use (and require) C++11.
  + Add Script and ScriptSurface.
  + Context: get_surface_wrapper(): Handle
    CAIRO_SURFACE_TYPE_SCRIPT, returning a ScriptSurface.
  + Surface: get_device(): Handle CAIRO_SURFACE_TYPE_SCRIPT,
    returning a Script.
  + Wrap cairo script device and script surface APIs.
  + FtFontFace: Add get/set/unset_synthesize().
  + Update MSVC.Net 2010 project files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 1.12.0:
  + Cairo::RefPtr: Add move constructors and move operator=().
  + MSVC build fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="jengelh@inai.de" date="1464782400">- Remove unnecessary INSTALL file (resolves rpmlint warning)</changelog>
  <changelog author="zaitor@opensuse.org" date="1479643200">- Update to version 1.12.2:
  + Remove new API that was not meant to be added in 1.12.1.
- Changes from version 1.12.1:
  + C++11:
  - Use nullptr instead of 0.
  - Use override keyword on destructors.
  - Make operator bool() explicit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to cairomm1_0: legacy package with the 1.0 API. The
  existing package 'cairomm' will remain to be the 'latest'
  version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Remove --with-pic which has no effect with --disable-static.
- Update descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
</package>
<package pkgid="c4bca0531583c047ec58fb2ad029501b3d43c223cc3f23c84b305c93ef9b99aebb8fd7851f6f8260ee0ac9144f573d475f360f3a103e67932ab8056f6f769647" name="caja" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.15"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * Avoid deprecated GtkStock.
  * Avoid deprecated GtkImageMenuItem.
  * libcaja-private/caja-recent.c: gvfs-open is a deprecated tool,
    switch to "gio open" from libglib2.0-bin.
  * caja-query-editor.c: Add "#include &lt;eel/eel-stock-dialogs.h&gt;".
  * caja-file-management-properties.ui: Avoid deprecated GtkVBox
    and GtkHBox.
  * caja-bookmarks-window.ui: Avoid deprecated functions.
  * Rename mate_dialog_add_button to eel_dialog_add_button.
  * caja-spatial-window.c: Avoid deprecated GtkVBox.
  * Eliminate accessible children-changed event flood on container
    repopulation.
  * Eliminate accessible children-changed event flood during update
    all.
  * Emit accessible-name-change signal for icons only when icons
    are renamed.
  * sidebar popup menu: Show "media-eject" icon in the "unmount"
    items.
  * pathbar: Fix random segfaults on opening mounts from Desktop.
  * fm-icon-view: Show size on disc as sort criterion.
  * sidebar popup menu: Show "media-eject" icon.
  * Add sort criterion by reversed extension segments.
  * fm-tree-view.c: Drop unused variable.
  * Rename "mate_image_menu_item..." to
    "eel_image_menu_item_new_from_icon".
  * eel-gtk-extensions: Show icons in right-click menus only if
    "menus-have-icons" is set.
  * caja-sidebar-title: Fix: images broken in sidebar.
  * caja-progress-info.c: Show notifications in begin/end of
    progress.
  * caja-progress-info.c: Avoid deprecated
    "gtk_status_icon_get_visible".
  * caja-sidebar-title: Fix a -Wmaybe-uninitialized warning.
  * caja-desktop-window.c: Fix: caja crashes unexpectedly.
  * Avoid deprecated "gtk_widget_override_font".
  * Avoid deprecated "gtk_window_set_wmclass".
  * caja-bookmark.c: Drop unused variable.
  * caja-bookmark.c: Fix icons in bookmarks.
  * icon-container: Avoid deprecated
    "gtk_style_context_get_border_color".
  * Avoid deprecated "gtk_dialog_get_action_area".
  * Pathbar button: Fix poor response to right-click.
  * editable-label: Avoid deprecated
    "gtk_im_multicontext_append_menuitems".
  * Use NULL instead of an uninitialised variable.
  * eel-editable-label.c: Avoid deprecated gdk_keymap_get_default.
  * eel-editable-label: Avoid deprecated
    gtk_style_context_set_background.
  * zoom-control: Don't use the eel_pop_up_context_menu function.
  * Replace deprecated gtk_menu_popup.
  * libcaja-private: Replace deprecated gdk_error_trap functions.
  * fm-desktop-icon-view: Replace deprecated
    gdk_error_trap_push/pop functions.
  * Replace deprecated gdk_flush.
  * libcaja-private: Fix -Wlogical-not-parentheses build warning.
  * Avoid deprecated gtk_style_context_get_background_color.
  * GSettings should init before use it.
  * monitor: Fix a crash on unmounting remote filesystems.
  * CajaFile: Fix a crash in modify_link_hash_table.
  * connect-server-dialog: Respect password save setting.
  * properties-window: Fix checking inconsistent state.
  * monitor: Watch for removal of non-native mounts on
    GVolumeMonitor.
  * Add "Configurable" interface and add support to
    caja-file-management-properties.
  * caja-application.c: Remove redundant empty lines.
  * Update caja manpage with info about "--force-desktop" option.
  * Caja-icon-info: Optimise icon lookups by GIcon.
  * fm-directory-view.c:  Decrease minimum update interval.
  * Remove dead code, fix a memory leak.
  * Add option to open multiple uri in tabs at startup.
  * Add the ability to switch tabs using [ctrl+tab] and
    [ctrl+shift+tab].
  * caja-desktop-directory: Stop segfaults in
    directory_ready_callback.
  * caja-directory.c: Fix a build warning.
  * pathbar: Increase reference count of path in
    update_button_types.
  * Fix some issues found by static analysis.
  * pathbar: Fix crash when accessing drive root.
  * libcaja-private: Remove redundant prefs application to hash
    table.
  * [desktop-bg] Fix a memory leak during background change events.
  * caja-location-bar: Fix: change background colour based on
    activity state.
  * Avoid deprecated g_type_class_add_private under src.
  * Fix incompatible pointer types.
  * Avoid deprecated g_type_class_add_private under src.
  * Avoid deprecated g_type_class_add_private under
    libcaja-private.
  * Fix compile warning.
  * Let file size units follow the users preference.
  * Fixed the value of 6 month and 1 year.
  * Support querying files by modification time and size.
  * Avoid deprecated g_type_class_add_private.
  * CajaApplication: Avoid deprecated g_type_class_add_private.
  * caja-menu: Avoid deprecated g_type_class_add_private.
  * eel, libegg: Use G_DEFINE_TYPE_WITH_PRIVATE macro.
  * configure.ac: Add check for PKG_CONFIG being set.
  * caja-application: Check for smclient before trying to load
    session.
  * eel: Avoid deprecated g_type_class_add_private.
  * libegg: Avoid deprecated g_type_class_add_private.
  * libcaja-private: Re-check file MIME type before picking an
    application.
  * file-manager: Fix apparent bug in context menu updating code.
  * Revert "fm-directory-view.c:  Decrease minimum update interval.".
  * Fix: weird item in bookmarks if the directory was removed.
  * Minor code-quality enhancements.
  * Forgot to initialise is_backup field.
  * Change show/hide backup files shortcut.
  * Remove useless comments, correct description string.
  * Skip hidden files only, not backups.
  * Add independent show/hide backup files.
  * Deleting an unused nautilus icon.
  * caja-progress-info: New behaviour with notifications.
  * caja-progress-info: Show notifications with the gsettings key.
  * Move AppStream files to the metainfo/ directory.
  * caja-places-sidebar: Replace two other uses of
    g_drive_poll_for_media_finish.
  * caja-bookmark: Fix memory leak.
  * eel-gtk-extensions: Fix memory leaks.
  * Add update-authors.pl script which helps to update caja.about.
  * Read authors and documenters fom caja.about file.
  * Ensure proper translation of the about dialogue title
  * Add --disable-self-check for configure.
  * Update translations.
- Rebase caja-gtk-3.20.patch.
- Add caja-missing-include.patch: Add a missing include.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * caja-progress-info: Make sure argument is initialised.
  * Fix invocation with --geometry from the command line.
  * Pass "NULL" for keyboard event.
  * caja-file: Fix incomplete file replacement dialogue.
  * eel-gdk-pixbuf-extensions: Fix division by zero.
  * caja-file: Fix use of memory after it is freed.
  * caja-icon-container: Fix use of memory after it is freed.
  * fm-tree-model: Fix use of memory after it is freed.
  * caja-information-panel: Fix use of memory after it is freed.
  * fm-directory-view: Fix use of memory after it is freed.
  * caja-tree-view-drag-dest: Fix memory leak.
  * [Security] eel-string: Use "g_strlcat" instead of "strcat".
  * [Security] Use "g_strlcpy" instead of "strcpy".
  * Update translations.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563364800">- Update to version 1.23.1 (changes since 1.22.1):
  * desktop: Always draw the items label frame
  * suppress GtkAction deprecations warnings
  * src: reduce the scope of some variables
  * caja-open-with-dialog: cppcheck: Redundant condition
  * eel-canvas: cppcheck: Local variable 'allocation' shadows outer variable
  * caja-progress-info: add tooltips to file transfer dialog
  * Add accessible names for buttons in file transfer operations dialog
  * libegg: reduce the scope of some variables
  * libcaja-private: reduce the scope of some variables
  * eel: remove date &amp; time functions
  * caja-spatial-window: Unused variable i
  * eel: reduce the scope of some variables
  * caja-location-dialog: Fix 'cppcheck' and 'clang' warnings
  * update translations
  * caja-property-browser: Fix cast from non-struct type to struct type
  * eggsmclient-xsmp: Fix cast from non-struct type to struct type
  * caja-file-utilities: Fix cast from non-struct type to struct type
  * local #include files who are libraries inside &lt;&gt; instead ""
  * eel-string: Use 'va_copy' instead of 'G_VA_COPY'
  * eel-editable-label: Use 'memmove' instead of 'memcpy'
  * eel: remove eel_g_object_list_ref
  * drop functions defined but not used
  * local #include files inside "" instead &lt;&gt;
  * caja-icon-canvas-item: avoid 'cppcheck' warning
  * caja-file: avoid shifting signed 32-bit value by 31 bits
  * caja-icon-canvas-item: initialize variable 'scale'
  * caja-application: avoid NULL inside 'g_object_unref'
  * fm-desktop-icon-view: remove dead code
  * caja-file-operations: make sure 'error' isn't NULL
  * caja-open-with-dialog: make sure there is error before showing it
  * eel-string: Fix: 'memcpy' overflows destination buffer
  * eel-string: avoid 'memcpy' with NULL argument
  * caja-progress-info: make sure argument is initialized
  * eel: replace eel_ref_str with GRefString
  * eel: remove g_object_list_copy
  * caja-sidebar-title: avoid 'NULL' inside 'setup_gc_with_fg'
  * caja-file: Fix incomplete file replacement dialog
  * caja-autorun: avoid NULL in 'memcpy'
  * eel-editable-label: call argument with initialized value
  * caja-file: Fix: true and false branches are identical
  * caja-file-operations: add comment with false positive warning:
  * configure.ac: fix portability issue with test
  * eel: remove g_str_list_copy
  * Remove USE_MATE2_MACROS from autogen.sh (legacy)
  * eel: remove g_list_free_deep_custom
  * avoid variables set but not used
  * eel-canvas: Fix warning: Undefined or garbage value returned to caller
  * caja-window: Fix garbage value
  * eel-gdk-pixbuf-extensions: Fix division by zero
  * Fix use of memory after it is freed.
  * Fix attempt to free released memory
  * drop unused variables
- remove patches:
  * caja-missing-include.patch: builds fine without it
  * caja-gtk-3.20.patch: we don't support gtk3.20 anymore
- build require gtk &gt;= 3.22, glib &gt;= 2.50 and gio &gt;= 2.50</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.1):
  * caja-progress-info: Use NotifyNotification instead of
    GNotification.
  * Copy file and keep timestamps of original file including
    remotes.
  * Fix Caja crashes on file move in Korean.
  * Support querying files by contained text.
  * Use show icons option in views tab.
  * Add preference option to hide icons in list view.
  * fm-directory-view: Add icon to "empty trash" into "File" menu.
  * gla11y: Use version 0.3 which already defaults to using
    python3.
  * caja-places-sidebar: Add icon to "empty trash".
  * spatial-window: Replace geprecated gtk_menu_popup.
  * property-browser: Replace deprecated gtk_drag_begin.
  * fm-list-view: Replace deprecated gtk_drag_begin.
  * Show thumbnails in list view.
  * file-manager: Reduce the scope of some variables.
  * preferences: Render extension icons as cairo_surfaces.
  * preferences: Render media icons as cairo_surface.
  * Replace gdkpixbuf with cairo_surfaces in a few more places.
  * sidebar: Render info icon as vector.
  * desktop: Add specific CSS for ContrastHigh and
    ContrastHighInverse.
  * desktop: Add specific CSS for HighContrast and
    HighContrastInverse.
  * Add support for loading theme-specific caja-desktop CSS.
  * Refactor custom CSS loading into a separate function.
  * Add support for checking .ui accessibility with gla11y.
  * Render file-conflict icons as cairo_surface vectors.
  * file-conflict-dialog: Don't scale icons twice on hidpi monitors.
  * eel-string: Fix "make check".
  * Restore transparent background on icon view labels.
  * desktop icon view: Disconnect callback from correct GSettings
    instance.
  * Add scroll tabs with mouse wheel for File's properties and
    caja's preferences windows.
  * hidpi: Ensure all icons are properly scaled.
  * Use GETTEXTDATADIRS replace GETTEXTDATADIR.
  * Create msgstr for data/browser.xml.
  * Add gettext ITS.
  * Migrate intltool to gettext.
  * fm-properties: Remove use of mate-desktop-thumbnail helper.
  * Make device ejection notifications translatable.
  * Keep path same when opening new window from an existing one.
  * editable-label: Don't hyphenate filenames.
  * libcaja-private/caja-file: Redundant condition.
  * Avoid redundant redeclarations.
  * canvas-item: Don't hyphenate filenames.
  * change name from caja.{its,loc} to mimeinfo.{its,loc}.
  * caja-window-slot: "folder-saved-search" icon instead
    "text-x-generic".
  * Let some strings be translatable.
  * Add document for CajaWidgetViewProvider api.
  * Add new interface.
  * Add CajaWidgetViewProvider docs.
  * Add new extension for widget view.
  * Hide menu and toolbutton when view is only one.
  * Set FmWidgetView is single view.
  * Add new FmWidgetView object.
  * Fix build error about autoptr clean.
  * Use absolute path of binary on desktop files.
  * build: Fix wrong executing dir in caja.desktop.
  * Set a real title on the desktop window (as provided to ATK).
  * Drop GLIB version check.
  * build: Show compiler flags on configuration summary.
  * Fix build using the -fno-common flag.
  * Update translations.
- Drop support for old openSUSE versions.
- Add caja-glib-2.54.patch: restore GLib 2.54 support.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1594814400">- Replace pkgconfig(gail) with pkgconfig(gail-3.0) BuildRequires:
  align with what configure checks for, and no longer pull in
  unneeded nor used gtk2-devel.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to 1.24.1
  * update translations
  * file-operations: don't attempt to move into the source dir
  * keep one .desktop suffix on desktop file renaming
  * fix runtime warning from newly unused code
  * Confirm before deleting during an undo operation
  * Updating the link of caja</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * Update copyright to 2021</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1658145600">- Update to upstream version 1.26.1:
  * tx: sync with transifex
  * Fix Caja does not show icons of application launchers
  * caja-mime-actions: fix memory leak
  * caja-bookmark: fix memory leak
  * caja-bookmark: drop create_image_cairo_for_bookmark
  * caja-file-conflict-dialog: Move to automatic signal
    disconnection
  * caja-file-conflict-dialog: Properly release references on
    dispose()
  * caja-file-conflict-dialog: update the icons once
  * caja-module: fix memory leak
  * caja-sidebar-title: fix memory leak
  * fm-directory-view: fix memory leak
  * eel-background: fix memory leak
  * caja-application: avoid SEGV when profiling/debugging code
  * caja-places-sidebar: fix right-click menu height
- No packaging changes necessary.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1700136000">- Update version to 1.26.3
  * update translations
  * caja-file: fix future informal date bug
  * caja-file: fix yesterday/today informal date bug
  * Replace deprecated code from xrandr
  * caja-desktop-window: Fix the xrandr error</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 1.28.0
  * Translation update
  * Wl bgleaks fixes (#1763)
  * wayland-background-dialog: fix two issues found by cppcheck
  * wayland-background-dialog: ensure style provider is added only once
  * eel-background: fix logic error in x11/wayland detection
  * wayland-background-dialog: Preview images at original aspect ratio
  * wayland-background-dialog: fix memory leaks
  * wayland background dialog: fix build warning
  * Make wayland background dialog more intuitive
  * Manage desktop backgrounds when running in wayland
  * wayland desktop: suppress spatial window warning
  * Do not show "Organize Desktop by Name" when desktop icons are locked
  * fix building with libxml 2.12.0
- Drop caja-glib-2.54.patch</changelog>
</package>
<package pkgid="4f02a62767675a98a48dd16333e327d0ff037fc19abb547c6264fb65a1c7777f984b15f016c851513f58e6683fe7c10b1c4d37ad34104e52d71e65d1f9916f9e" name="caja-devel" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.15"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * Avoid deprecated GtkStock.
  * Avoid deprecated GtkImageMenuItem.
  * libcaja-private/caja-recent.c: gvfs-open is a deprecated tool,
    switch to "gio open" from libglib2.0-bin.
  * caja-query-editor.c: Add "#include &lt;eel/eel-stock-dialogs.h&gt;".
  * caja-file-management-properties.ui: Avoid deprecated GtkVBox
    and GtkHBox.
  * caja-bookmarks-window.ui: Avoid deprecated functions.
  * Rename mate_dialog_add_button to eel_dialog_add_button.
  * caja-spatial-window.c: Avoid deprecated GtkVBox.
  * Eliminate accessible children-changed event flood on container
    repopulation.
  * Eliminate accessible children-changed event flood during update
    all.
  * Emit accessible-name-change signal for icons only when icons
    are renamed.
  * sidebar popup menu: Show "media-eject" icon in the "unmount"
    items.
  * pathbar: Fix random segfaults on opening mounts from Desktop.
  * fm-icon-view: Show size on disc as sort criterion.
  * sidebar popup menu: Show "media-eject" icon.
  * Add sort criterion by reversed extension segments.
  * fm-tree-view.c: Drop unused variable.
  * Rename "mate_image_menu_item..." to
    "eel_image_menu_item_new_from_icon".
  * eel-gtk-extensions: Show icons in right-click menus only if
    "menus-have-icons" is set.
  * caja-sidebar-title: Fix: images broken in sidebar.
  * caja-progress-info.c: Show notifications in begin/end of
    progress.
  * caja-progress-info.c: Avoid deprecated
    "gtk_status_icon_get_visible".
  * caja-sidebar-title: Fix a -Wmaybe-uninitialized warning.
  * caja-desktop-window.c: Fix: caja crashes unexpectedly.
  * Avoid deprecated "gtk_widget_override_font".
  * Avoid deprecated "gtk_window_set_wmclass".
  * caja-bookmark.c: Drop unused variable.
  * caja-bookmark.c: Fix icons in bookmarks.
  * icon-container: Avoid deprecated
    "gtk_style_context_get_border_color".
  * Avoid deprecated "gtk_dialog_get_action_area".
  * Pathbar button: Fix poor response to right-click.
  * editable-label: Avoid deprecated
    "gtk_im_multicontext_append_menuitems".
  * Use NULL instead of an uninitialised variable.
  * eel-editable-label.c: Avoid deprecated gdk_keymap_get_default.
  * eel-editable-label: Avoid deprecated
    gtk_style_context_set_background.
  * zoom-control: Don't use the eel_pop_up_context_menu function.
  * Replace deprecated gtk_menu_popup.
  * libcaja-private: Replace deprecated gdk_error_trap functions.
  * fm-desktop-icon-view: Replace deprecated
    gdk_error_trap_push/pop functions.
  * Replace deprecated gdk_flush.
  * libcaja-private: Fix -Wlogical-not-parentheses build warning.
  * Avoid deprecated gtk_style_context_get_background_color.
  * GSettings should init before use it.
  * monitor: Fix a crash on unmounting remote filesystems.
  * CajaFile: Fix a crash in modify_link_hash_table.
  * connect-server-dialog: Respect password save setting.
  * properties-window: Fix checking inconsistent state.
  * monitor: Watch for removal of non-native mounts on
    GVolumeMonitor.
  * Add "Configurable" interface and add support to
    caja-file-management-properties.
  * caja-application.c: Remove redundant empty lines.
  * Update caja manpage with info about "--force-desktop" option.
  * Caja-icon-info: Optimise icon lookups by GIcon.
  * fm-directory-view.c:  Decrease minimum update interval.
  * Remove dead code, fix a memory leak.
  * Add option to open multiple uri in tabs at startup.
  * Add the ability to switch tabs using [ctrl+tab] and
    [ctrl+shift+tab].
  * caja-desktop-directory: Stop segfaults in
    directory_ready_callback.
  * caja-directory.c: Fix a build warning.
  * pathbar: Increase reference count of path in
    update_button_types.
  * Fix some issues found by static analysis.
  * pathbar: Fix crash when accessing drive root.
  * libcaja-private: Remove redundant prefs application to hash
    table.
  * [desktop-bg] Fix a memory leak during background change events.
  * caja-location-bar: Fix: change background colour based on
    activity state.
  * Avoid deprecated g_type_class_add_private under src.
  * Fix incompatible pointer types.
  * Avoid deprecated g_type_class_add_private under src.
  * Avoid deprecated g_type_class_add_private under
    libcaja-private.
  * Fix compile warning.
  * Let file size units follow the users preference.
  * Fixed the value of 6 month and 1 year.
  * Support querying files by modification time and size.
  * Avoid deprecated g_type_class_add_private.
  * CajaApplication: Avoid deprecated g_type_class_add_private.
  * caja-menu: Avoid deprecated g_type_class_add_private.
  * eel, libegg: Use G_DEFINE_TYPE_WITH_PRIVATE macro.
  * configure.ac: Add check for PKG_CONFIG being set.
  * caja-application: Check for smclient before trying to load
    session.
  * eel: Avoid deprecated g_type_class_add_private.
  * libegg: Avoid deprecated g_type_class_add_private.
  * libcaja-private: Re-check file MIME type before picking an
    application.
  * file-manager: Fix apparent bug in context menu updating code.
  * Revert "fm-directory-view.c:  Decrease minimum update interval.".
  * Fix: weird item in bookmarks if the directory was removed.
  * Minor code-quality enhancements.
  * Forgot to initialise is_backup field.
  * Change show/hide backup files shortcut.
  * Remove useless comments, correct description string.
  * Skip hidden files only, not backups.
  * Add independent show/hide backup files.
  * Deleting an unused nautilus icon.
  * caja-progress-info: New behaviour with notifications.
  * caja-progress-info: Show notifications with the gsettings key.
  * Move AppStream files to the metainfo/ directory.
  * caja-places-sidebar: Replace two other uses of
    g_drive_poll_for_media_finish.
  * caja-bookmark: Fix memory leak.
  * eel-gtk-extensions: Fix memory leaks.
  * Add update-authors.pl script which helps to update caja.about.
  * Read authors and documenters fom caja.about file.
  * Ensure proper translation of the about dialogue title
  * Add --disable-self-check for configure.
  * Update translations.
- Rebase caja-gtk-3.20.patch.
- Add caja-missing-include.patch: Add a missing include.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * caja-progress-info: Make sure argument is initialised.
  * Fix invocation with --geometry from the command line.
  * Pass "NULL" for keyboard event.
  * caja-file: Fix incomplete file replacement dialogue.
  * eel-gdk-pixbuf-extensions: Fix division by zero.
  * caja-file: Fix use of memory after it is freed.
  * caja-icon-container: Fix use of memory after it is freed.
  * fm-tree-model: Fix use of memory after it is freed.
  * caja-information-panel: Fix use of memory after it is freed.
  * fm-directory-view: Fix use of memory after it is freed.
  * caja-tree-view-drag-dest: Fix memory leak.
  * [Security] eel-string: Use "g_strlcat" instead of "strcat".
  * [Security] Use "g_strlcpy" instead of "strcpy".
  * Update translations.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563364800">- Update to version 1.23.1 (changes since 1.22.1):
  * desktop: Always draw the items label frame
  * suppress GtkAction deprecations warnings
  * src: reduce the scope of some variables
  * caja-open-with-dialog: cppcheck: Redundant condition
  * eel-canvas: cppcheck: Local variable 'allocation' shadows outer variable
  * caja-progress-info: add tooltips to file transfer dialog
  * Add accessible names for buttons in file transfer operations dialog
  * libegg: reduce the scope of some variables
  * libcaja-private: reduce the scope of some variables
  * eel: remove date &amp; time functions
  * caja-spatial-window: Unused variable i
  * eel: reduce the scope of some variables
  * caja-location-dialog: Fix 'cppcheck' and 'clang' warnings
  * update translations
  * caja-property-browser: Fix cast from non-struct type to struct type
  * eggsmclient-xsmp: Fix cast from non-struct type to struct type
  * caja-file-utilities: Fix cast from non-struct type to struct type
  * local #include files who are libraries inside &lt;&gt; instead ""
  * eel-string: Use 'va_copy' instead of 'G_VA_COPY'
  * eel-editable-label: Use 'memmove' instead of 'memcpy'
  * eel: remove eel_g_object_list_ref
  * drop functions defined but not used
  * local #include files inside "" instead &lt;&gt;
  * caja-icon-canvas-item: avoid 'cppcheck' warning
  * caja-file: avoid shifting signed 32-bit value by 31 bits
  * caja-icon-canvas-item: initialize variable 'scale'
  * caja-application: avoid NULL inside 'g_object_unref'
  * fm-desktop-icon-view: remove dead code
  * caja-file-operations: make sure 'error' isn't NULL
  * caja-open-with-dialog: make sure there is error before showing it
  * eel-string: Fix: 'memcpy' overflows destination buffer
  * eel-string: avoid 'memcpy' with NULL argument
  * caja-progress-info: make sure argument is initialized
  * eel: replace eel_ref_str with GRefString
  * eel: remove g_object_list_copy
  * caja-sidebar-title: avoid 'NULL' inside 'setup_gc_with_fg'
  * caja-file: Fix incomplete file replacement dialog
  * caja-autorun: avoid NULL in 'memcpy'
  * eel-editable-label: call argument with initialized value
  * caja-file: Fix: true and false branches are identical
  * caja-file-operations: add comment with false positive warning:
  * configure.ac: fix portability issue with test
  * eel: remove g_str_list_copy
  * Remove USE_MATE2_MACROS from autogen.sh (legacy)
  * eel: remove g_list_free_deep_custom
  * avoid variables set but not used
  * eel-canvas: Fix warning: Undefined or garbage value returned to caller
  * caja-window: Fix garbage value
  * eel-gdk-pixbuf-extensions: Fix division by zero
  * Fix use of memory after it is freed.
  * Fix attempt to free released memory
  * drop unused variables
- remove patches:
  * caja-missing-include.patch: builds fine without it
  * caja-gtk-3.20.patch: we don't support gtk3.20 anymore
- build require gtk &gt;= 3.22, glib &gt;= 2.50 and gio &gt;= 2.50</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.1):
  * caja-progress-info: Use NotifyNotification instead of
    GNotification.
  * Copy file and keep timestamps of original file including
    remotes.
  * Fix Caja crashes on file move in Korean.
  * Support querying files by contained text.
  * Use show icons option in views tab.
  * Add preference option to hide icons in list view.
  * fm-directory-view: Add icon to "empty trash" into "File" menu.
  * gla11y: Use version 0.3 which already defaults to using
    python3.
  * caja-places-sidebar: Add icon to "empty trash".
  * spatial-window: Replace geprecated gtk_menu_popup.
  * property-browser: Replace deprecated gtk_drag_begin.
  * fm-list-view: Replace deprecated gtk_drag_begin.
  * Show thumbnails in list view.
  * file-manager: Reduce the scope of some variables.
  * preferences: Render extension icons as cairo_surfaces.
  * preferences: Render media icons as cairo_surface.
  * Replace gdkpixbuf with cairo_surfaces in a few more places.
  * sidebar: Render info icon as vector.
  * desktop: Add specific CSS for ContrastHigh and
    ContrastHighInverse.
  * desktop: Add specific CSS for HighContrast and
    HighContrastInverse.
  * Add support for loading theme-specific caja-desktop CSS.
  * Refactor custom CSS loading into a separate function.
  * Add support for checking .ui accessibility with gla11y.
  * Render file-conflict icons as cairo_surface vectors.
  * file-conflict-dialog: Don't scale icons twice on hidpi monitors.
  * eel-string: Fix "make check".
  * Restore transparent background on icon view labels.
  * desktop icon view: Disconnect callback from correct GSettings
    instance.
  * Add scroll tabs with mouse wheel for File's properties and
    caja's preferences windows.
  * hidpi: Ensure all icons are properly scaled.
  * Use GETTEXTDATADIRS replace GETTEXTDATADIR.
  * Create msgstr for data/browser.xml.
  * Add gettext ITS.
  * Migrate intltool to gettext.
  * fm-properties: Remove use of mate-desktop-thumbnail helper.
  * Make device ejection notifications translatable.
  * Keep path same when opening new window from an existing one.
  * editable-label: Don't hyphenate filenames.
  * libcaja-private/caja-file: Redundant condition.
  * Avoid redundant redeclarations.
  * canvas-item: Don't hyphenate filenames.
  * change name from caja.{its,loc} to mimeinfo.{its,loc}.
  * caja-window-slot: "folder-saved-search" icon instead
    "text-x-generic".
  * Let some strings be translatable.
  * Add document for CajaWidgetViewProvider api.
  * Add new interface.
  * Add CajaWidgetViewProvider docs.
  * Add new extension for widget view.
  * Hide menu and toolbutton when view is only one.
  * Set FmWidgetView is single view.
  * Add new FmWidgetView object.
  * Fix build error about autoptr clean.
  * Use absolute path of binary on desktop files.
  * build: Fix wrong executing dir in caja.desktop.
  * Set a real title on the desktop window (as provided to ATK).
  * Drop GLIB version check.
  * build: Show compiler flags on configuration summary.
  * Fix build using the -fno-common flag.
  * Update translations.
- Drop support for old openSUSE versions.
- Add caja-glib-2.54.patch: restore GLib 2.54 support.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1594814400">- Replace pkgconfig(gail) with pkgconfig(gail-3.0) BuildRequires:
  align with what configure checks for, and no longer pull in
  unneeded nor used gtk2-devel.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to 1.24.1
  * update translations
  * file-operations: don't attempt to move into the source dir
  * keep one .desktop suffix on desktop file renaming
  * fix runtime warning from newly unused code
  * Confirm before deleting during an undo operation
  * Updating the link of caja</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * Update copyright to 2021</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1658145600">- Update to upstream version 1.26.1:
  * tx: sync with transifex
  * Fix Caja does not show icons of application launchers
  * caja-mime-actions: fix memory leak
  * caja-bookmark: fix memory leak
  * caja-bookmark: drop create_image_cairo_for_bookmark
  * caja-file-conflict-dialog: Move to automatic signal
    disconnection
  * caja-file-conflict-dialog: Properly release references on
    dispose()
  * caja-file-conflict-dialog: update the icons once
  * caja-module: fix memory leak
  * caja-sidebar-title: fix memory leak
  * fm-directory-view: fix memory leak
  * eel-background: fix memory leak
  * caja-application: avoid SEGV when profiling/debugging code
  * caja-places-sidebar: fix right-click menu height
- No packaging changes necessary.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1700136000">- Update version to 1.26.3
  * update translations
  * caja-file: fix future informal date bug
  * caja-file: fix yesterday/today informal date bug
  * Replace deprecated code from xrandr
  * caja-desktop-window: Fix the xrandr error</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 1.28.0
  * Translation update
  * Wl bgleaks fixes (#1763)
  * wayland-background-dialog: fix two issues found by cppcheck
  * wayland-background-dialog: ensure style provider is added only once
  * eel-background: fix logic error in x11/wayland detection
  * wayland-background-dialog: Preview images at original aspect ratio
  * wayland-background-dialog: fix memory leaks
  * wayland background dialog: fix build warning
  * Make wayland background dialog more intuitive
  * Manage desktop backgrounds when running in wayland
  * wayland desktop: suppress spatial window warning
  * Do not show "Organize Desktop by Name" when desktop icons are locked
  * fix building with libxml 2.12.0
- Drop caja-glib-2.54.patch</changelog>
</package>
<package pkgid="b1032d617eb7d899be6c9d70720ac543dd8453000970afdf45b54eb7845dc4cac432a9bf236ad2a227c156c0c162348f95719ca3cb2373e50144001b54e24e03" name="caja-dropbox-lang" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="bp160.1.11"/>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Fix Changelog generation.
- Rebase caja-dropbox_no-dropbox-bin.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Some code cleanups.
- Extend caja-dropbox_no-dropbox-bin.patch to dependency check.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: require libcaja-extension 1.17.1 and GLib 2.36.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
- Add caja-dropbox_glib-2.48.patch -- Restore GLib 2.48 support.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * Python 3 update for dropbox-cli.
  * Add Keywords entry to desktop file.
  * Use cross-compilation-safe pkg-config macro.
  * Remove deprecated glib2.0 API calls.
  * Use GIR bindings instead of pygtk.
  * Fix UnicodeWarning when exclude command is used with non-latin
    args.
  * Update to redesigned icons.
  * small caja-dropbox.in fixes.
  * Add a new "dropbox update" command.
  * Unlink files that are going to be replaced by the unpack.
  * Validate that Dropbox runs after downloading it.
  * Use python-gpg instead of python-gpgme.
  * Explicitly load using python2 interpreter.
  * Refer to .dropbox-dist in only one place.
  * Fixed 'exclude command raise UnicodeDecodeError'.
  * Avoid reading or writing invalid memory addresses.
  * Display link url on status.
  * Update dropbox.py with shmodel, proxy, and throttle features.
  * Fix distcheck about caja_extension_dir.
  * Use only Python 3 during the build to complete the migration.
  * Migrate from python2 to python3 of rst2man.py.
  * Remove more -u modifier for dropbox-cli.
- Rebase caja-dropbox_no-dropbox-bin.patch.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * Use CAJA_EXTENSION_DIR_SYS to save and show system
    caja extension dir.
  * Show full path of caja-extension-dir.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563451200">- Update to version 1.23.0:
  * Change url project's website
  * Use CAJA_EXTENSION_DIR_SYS to save and show system caja extension dir
  * show full path of caja-extension-dir
- remove patch:
  * caja-dropbox_glib-2.48.patch: we don't support gtk3.20 anymore
- build require glib &gt;= 2.50</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0:
  * Update copyright to 2020.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628942400">- Update version to 1.26.0
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translations
  * Fix -Wmissing-field-initializers</changelog>
</package>
<package pkgid="0cc288212cd0e715a0c05cac6b8bfba07f3ee33cb0346fdf7752c751ea79db2c8f521dc4fa001dc4ad8ce328a78dcb64f641f87173ac373eb910be49acafea47" name="caja-engrampa" arch="x86_64">
  <version epoch="0" ver="1.28.1" rel="bp160.1.13"/>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1572868800">- Fix build error complaining about conflicting types for
  g_ptr_array_copy by updating to 1.23.1.
- Update to version 1.23.1:
  * Update translations
  * glib-utils: Remove unused function - g_ptr_array_copy
  * Remove some unused/deprecated functions
  * Various smaller fixes</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1578052800">- Update to version 1.23.2
  * tx: sync with transifex
  * LHA: add test for checking compressed file integrity
  * Add application/(x-compress|x-rpm|x-lzh-compressed) in local magic
  * Show archive type in properties dialog
  * Zstandard: read .tar.zst files
  * Zstandard: add test for checking compressed file integrity
  * Zstandard: Update MIME type
  * Ar: Update MIME type and add magic numbers
  * fr-command-ar: fetch dates with strptime
  * Remove internal mkdtemp and define feature test macro
  * fr-command-tar: fetch dates with strptime
  * Use mate-compiler-flags.m4 provided by mate-common
  * ar: don't remove leading whitespaces in filename field
  * i18n caja extension copyright
  * LHA: make compatible with content-type response from gio file query
  * fr-command-dpkg: fetch dates with strptime
  * dlg-prop: set property label in ui file
  * Add extract-dialog-options.ui
  * LHA: Fix internet media type
  * Use g_list_free_full and g_slist_free_full
  * dlg-prop: show the exact number of bytes as part of the size
  * dlg-prop: allow to open the archive's folder
  * remove warnings: ‘gtk_image_new_from_stock’ is deprecated
  * glib-utils &amp; gtk-utils: Remove unused functions
  * dlg-package-installer: show icons in error dialog buttons
  * dlg-package-installer: remove warning ‘GtkStock’ is deprecated
  * gio-utils: Remove unused functions
  * glib-utils: Remove get_time_string()
  * unace 2.5: Don't show archive summary in file listing
  * tar: don't remove leading whitespaces in filename field
  * Initialization discards ‘const’ qualifier from pointer target type
  * remove warnings: "ENABLE_MAGIC" is not defined, evaluates to 0
  * comparison of integer expressions of different signedness: ‘size_t’
  * Missing initializer for struct field
  * remove warnings: cast from function call [-Wbad-function-cast]
  * remove build warning: local variable shadows another variable</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.2):
  * fr-command-rpm: Use rpm2cpio binary shipped with rpm package.
  * Add source rpm to supported mime-types.
  * Use cpio if no binary is found.
  * Add a configure environment variable to select the cpio path.
  * 7z: Don't set the work directory, i.e. use temporary directory.
  * Check if a mime-type is an alias in
    compute_supported_archive_types.
  * Define LOCALEDIR for bindtextdomain().
  * Migrate from intltool to gettext.
  * Clean file type selection in the new archive dialogue.
  * Automatically sets the maximum size of static arrays.
  * Fix localised pause UI logic.
  * dlg-extract: GtkFileChooserDialog instead of set extra widget.
  * dlg-batch-add: Set dialog image from icon-name instead of
    pixbuf.
  * Fix build using the -fno-common flag.
  * fr-process: Do not override LC_CTYPE.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * Avoid memory leak in java utils.
  * build: Silent build warnings for distcheck.
  * engrampa.appdata.xml: Recursive acronyms for .iso, .rpm
    filetypes.
  * autoconf: Get zstd mime type using libmagic if enabled.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * ar: fix filename in file list
  * rar 6.00: fix listing archive content with encrypted file list
  * fr-archive: Fix memory leak</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * fr-process: Fix memory leak.
  * Fix archive file save as function.
  * file-data: Fix memory leak.
  * fr-window: Fix memory leak.
  * dlg-package-installer: Fix memory leak.
  * Update translations.
- Add engrampa-1.26.1-add-7zip-support.patch: Add new 7-zip
  (7zz and 7zzs) project support (commit 6f49d2c7).</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1707825600">- CVE-2023-52138:
  Add patch: engrampa-1.26.1-use-unar-instead-of-cpio-for-CPIO-archives.patch,
  Use unar instead of cpio for CPIO archives (upstream commit 8cd485a5).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.1
  * update translations
  * Use unar instead of cpio for CPIO archives
  * Add correct jar mime type
  * Fix double URI escaping
  * Escapes a string for use in a URI. replace special "# and ?" characters in
    uri
  * rar: Actually accept unrar-free as the executable name
  * rar: Add support for unrar-free
  * rar: Fix out of bounds read on malformed output
  * rar: Simplify and merge duplicate code
  * zip: Fix crashes on buggy zip output
  * 7z: Fix accepting RAR archives when unar-open-zip=true
  * correct translation string
  * Fix Segfault on opening .deb files after recent Debian Unstable updates
  * fix warning in Japanese translations
  * Distribute Meson build system (but don't use on openSUSE)
- Drop engrampa-1.26.1-add-7zip-support.patch and
  engrampa-1.26.1-use-unar-instead-of-cpio-for-CPIO-archives.patch, merged by
  Upstream</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1718107200">- Support building on SUSE version 1550: instead of pkgconfig(libmagic)
  build-depend on file-devel for older versions of SUSE.
- Build with --enable-magic configure option set.</changelog>
</package>
<package pkgid="709443202b66019c41e2d88436aeb2510beca0a6c751413019b016e2b7c545d6a4692bce94b5b76cd26c83ef0415e2b3fb538e14f0f7daa1a40cae964cbf2ea9" name="caja-extension-atril" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.16"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1569326400">-  Replace BuildRequires: libxml2-python by python3-libxml2
  as libxml2 updated.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * ev-view: Remove unused variables and assignment
  * Avoid g_type_class_add_private.
  * tiff: Handle failure from TIFFReadRGBAImageOriented.
  * view-presentation: Use monitor instead of screen.
  * shell: Use monitor instead of screen to determine window size.
  * shell: Fix get_monitor_dpi when widget’s window is not
    realized.
  * DPI: Compute monitor resolution or get screen resolution.
  * Prevent segfaults when no document loaded.
  * Require GLib 2.54.0.
  * Fix build warning on marshalling.
  * Suppress GtkAction warnings.
  * document: Replace deprecated gdk_color_equal.
  * Fix buffer overflow in backend/tiff-document.c.
  * Fix atril.desktop file.
  * Fix memory leak ev_sidebar_thumbnails_document_changed_cb().
  * pdf: Fix memory leak when adding new text annotations.
  * libview: Fix a memory leak.
  * Revert "First page should not reloaded"
  * Avoid redundant redeclarations.
  * libview: Reset "pressed_button" when starting Drag and Drop.
  * Show SyncTeX version in the About dialogue.
  * Add a hint for translators.
  * Migrate from intltool to gettext.
  * Add accelerator 'o' for toggling Odd Pages Left.
  * Add accelerator 't' for toggling visibility of the toolbar.
  * Remove synctex internally, work with external library instead.
  * build: Require webkit2gtk-4.0 &gt;= 2.6.0.
  * End the va_list before returning from _synctex_merge_strings.
  * build: Use synctex system library if available.
  * Remove synctex warning.
  * Bump synctex to 1.21.
  * thumbnailer: Fix a memory leak.
  * Fix year 2038 issue with signed 32-bit integers.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1585569600">- Add atril-synctex-1.18.patch: Restore SyncTeX 1.18 support.
- Add atril-glib-2.54.patch: Restore GLib 2.54 support.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.1
  * update translations
  * epub backend: Escape link text to display &amp; in index content
  * Fix segfault on empty navMap
  * thumbnailer: fix typo in the option description
  * Use int64_t for g_date_time_to_unix even word size is 32-bit wide
- Split doc package</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
</package>
<package pkgid="200199f87ed4946a9bfe1b2949af320f3ec67c27b0a862bfd199ce16903b868d6acf5bfd3f8c9bfd6066728b508795f149e79ab1865f810999cbd33ad45ce99d" name="caja-extension-atril" arch="x86_64">
  <version epoch="0" ver="1.28.4" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629374400">- Update version to 1.26.0
  * update translations
  * ev-window.c: only create a EvWebView if needed
  * ev-sidebar-links: Optimize reverse link lookup for a page
  * introspection: Fix bogus --library arguments.
  * libdocument: remove _ev_g_mkdtemp function
  * epub: declaration of ‘uL’ shadows a previous local [-Wshadow]
  * ev-window: missing initializer for a field of ‘GtkActionEntry’
  * epub: fix typo</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Make documentation noarch. Remove --with-pic because it has no
  effect in conjunction with --disable-static. Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * epub: Add fallback for malformed epub files in check_mime_type.
  * epub: Fix index loading for certain documents.
  * Accessibility: Add button description.
  * Preserve compatibility with older GLib versions.
  * Update translations.
- Drop atril-glib-2.54.patch, atril-synctex-1.18.patch.</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1704110400">- Fix CVE-2023-51698: comics: Use libarchive to unpack documents.
  * Add patch: atril-Use-a-blank-line-at-most.patch (required to let
    the actual CVE fix patch apply). Cherry-picked from upstream's
    1.26 branch.
  * Add patch: atril-comics-Use-libarchive-to-unpack-documents.patch.
    Fix for CVE-2023-51698. Cherry-picked from upstream's 1.26 branch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translation
  * Fix bugs
- Drop atril-comics-Use-libarchive-to-unpack-documents.patch and
  atril-Use-a-blank-line-at-most.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1737288000">- Update to version 1.28.1:
  * Update CBR library to libarchive in README.md
  * ci: fix travis build failures caused by recent travis changes
  * Cleanup icons Makefile
  * icons: Include higher resolution icons
  * Updated translations.
- Drop pkgconfig(libpst) BuildRequires: No longer required nor used</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746187200">- Update to version 1.28.2:
  * epub: Disable thumbnailing sidebar
  * Fix .cbr mimetype
  * Wayland: stop segfaults on some systems
  * replace deprecated gtk_menu_tool_button_new_from_stock
  * libview/ev-document-model.c remove one more deprecation warning
  * replace ev_document_model_get_dual_page with
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires following upstream changes.
- Switch to git checkout via source service, stable tag.
- Add gtk-doc BuildRequires and pass enable-gtk-doc to configure,
  needed now that we are using source service.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Replace obsolete update-desktop-files with desktop-file-utils
  BuildRequires.
- Drop obsolete glib2_gsettings_schema_requires macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1775217600">- Drop python3-libxml2 BuildRequires: No longer available in
  Tumbleweed, nor is it needed for build.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1779278400">- Update to version 1.28.4 (bsc#1265880 CVE-2026-46519):
  * Build fixes
  * Fix tests imported from XReader
  * Fix tests with AT-SPI2 &gt;= 2.53
  * Improve search system
  * pdf: Always use poppler_document_save to avoid data loss
  * Use properties for can-zoom-in and -out
  * libview: Allow zooming to the limits of the scale
  * shell: Fix Max zoom in UI
- Migrate to xz compression and manual service run.</changelog>
</package>
<package pkgid="ed6e7c9b1b988e65a744b31e8a6a15be6e52875156b9f61b0048bca1a51ce825f3187f8d3bb1af78ba0655915c6b5556502f83a3d81eb3fc35273b21c88082ff" name="caja-extension-dropbox" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.11"/>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Fix Changelog generation.
- Rebase caja-dropbox_no-dropbox-bin.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Some code cleanups.
- Extend caja-dropbox_no-dropbox-bin.patch to dependency check.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: require libcaja-extension 1.17.1 and GLib 2.36.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GLib 2.50.
- Add caja-dropbox_glib-2.48.patch -- Restore GLib 2.48 support.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * Python 3 update for dropbox-cli.
  * Add Keywords entry to desktop file.
  * Use cross-compilation-safe pkg-config macro.
  * Remove deprecated glib2.0 API calls.
  * Use GIR bindings instead of pygtk.
  * Fix UnicodeWarning when exclude command is used with non-latin
    args.
  * Update to redesigned icons.
  * small caja-dropbox.in fixes.
  * Add a new "dropbox update" command.
  * Unlink files that are going to be replaced by the unpack.
  * Validate that Dropbox runs after downloading it.
  * Use python-gpg instead of python-gpgme.
  * Explicitly load using python2 interpreter.
  * Refer to .dropbox-dist in only one place.
  * Fixed 'exclude command raise UnicodeDecodeError'.
  * Avoid reading or writing invalid memory addresses.
  * Display link url on status.
  * Update dropbox.py with shmodel, proxy, and throttle features.
  * Fix distcheck about caja_extension_dir.
  * Use only Python 3 during the build to complete the migration.
  * Migrate from python2 to python3 of rst2man.py.
  * Remove more -u modifier for dropbox-cli.
- Rebase caja-dropbox_no-dropbox-bin.patch.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * Use CAJA_EXTENSION_DIR_SYS to save and show system
    caja extension dir.
  * Show full path of caja-extension-dir.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563451200">- Update to version 1.23.0:
  * Change url project's website
  * Use CAJA_EXTENSION_DIR_SYS to save and show system caja extension dir
  * show full path of caja-extension-dir
- remove patch:
  * caja-dropbox_glib-2.48.patch: we don't support gtk3.20 anymore
- build require glib &gt;= 2.50</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0:
  * Update copyright to 2020.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628942400">- Update version to 1.26.0
  * Update translations</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711368000">- Update version to 1.28.0
  * Update translations
  * Fix -Wmissing-field-initializers</changelog>
</package>
<package pkgid="9d4004822403a071ff28f7fbe3eedb9ec93660886eeea39782ab09f282f589bbcf5279be73384b444f5c4de80b23051752dece4bba4b54cfa4914f06886c6ee4" name="caja-extension-nextcloud" arch="noarch">
  <version epoch="0" ver="3.16.6" rel="bp160.1.1"/>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1734436800">- Update to version 3.15.2:
  * chore(i18n): Corrected spelling and improved grammar
    (gh#nextcloud/desktop#7666)
  * improvement of error message (gh#nextcloud/desktop#7671)
  * Fix a bug preventing sync root in folder on drive roots
    (gh#nextcloud/desktop#7672)
  * Bugfix/lnk folder virtual files (gh#nextcloud/desktop#7673)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1736251200">- Update to version 3.15.3:
  * Bugfix/catch exceptions to prevent crash
    (gh#nextcloud/desktop#7705)
  * Bugfix/elidedtext (gh#nextcloud/desktop#7706)
  * Call setDesktopFileName without `.desktop` suffix
    (gh#nextcloud/desktop#7707)
  * add a simple github action workflow to build test the
    documentation (gh#nextcloud/desktop#7709)
  * Fix filename of fix-macosvfs-file-sharing.png
    (gh#nextcloud/desktop#7712)
  * Fix .netrc parsing (gh#nextcloud/desktop#7714)
  * Bugfix/do not always free up storage windows shortcuts
    (gh#nextcloud/desktop#7715)
  * fix dev application name to keep a consitant migration
    behaviour for the dev and prod build
    (gh#nextcloud/desktop#7722)
  * ensure proper read write access to root folder and db files
    (gh#nextcloud/desktop#7726)
  * gui/tray: Fix colour for secondary text items being too pale
    (gh#nextcloud/desktop#7727)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1741608000">- Update to version 3.16.0:
  * fix spelling os UserStatus qml type when setting user status
    (gh#nextcloud/desktop#7558)
  * gui/tray: Dark mode switch (gh#nextcloud/desktop#7561)
  * no transparent background for main ApplicationWindow
    (gh#nextcloud/desktop#7564)
  * fix regressions in automated tests for bulk upload
    (gh#nextcloud/desktop#7580)
  * when updating a virtual file after lock/unlock: avoid setting
    modtime (gh#nextcloud/desktop#7572)
  * enable reversed locale layout (RTL) in QML
    (gh#nextcloud/desktop#4240)
  * Fix text strings (gh#nextcloud/desktop#3792)
  * l10n: Change to a capital letter (gh#nextcloud/desktop#4953)
  * mac-crafter: Fix codesigning of app bundle when auto-updater
    is excluded (gh#nextcloud/desktop#7605)
  * when locking a file set If-Match header to ensure etag is
    correct (gh#nextcloud/desktop#7595)
  * gui/tray: Fix tray window corners (gh#nextcloud/desktop#7566)
  * gui/tray: Fix activity icon colours (gh#nextcloud/desktop#7567)
  * Bugfix/handle windows directory junction
    (gh#nextcloud/desktop#7609)
  * gui: Remove content margins account settings subsections
    (gh#nextcloud/desktop#7568)
  * Disable legacy import dialog (gh#nextcloud/desktop#7623)
  * chore(i18n): Aligned error messages (gh#nextcloud/desktop#7612)
  * gui/tray: Ensure colour of featured app icon is consistent with
    other header buttons (gh#nextcloud/desktop#7604)
  * doc: Rename first header on macos vfs doc entry, fixing title
    in index (gh#nextcloud/desktop#7576)
  * mac-crafter: Close isExecutable command outpipe file handle
    after use (gh#nextcloud/desktop#7585)
  * Bug fix import of unbranded account (gh#nextcloud/desktop#7635)
  * improve definition of MIRALL_VERSION_SUFFIX and
    MIRALL_VERSION_BUILD (gh#nextcloud/desktop#7625)
  * dehydrate placeholder files using CfDehydratePlaceholder
    (gh#nextcloud/desktop#7602)
  * use modern non deprecated hash algorithm and parameters
    (gh#nextcloud/desktop#7642)
  * optionally install PDB files when building them
    (gh#nextcloud/desktop#7626)
  * Include folders when displaying the local metadata about a
    conflict. (gh#nextcloud/desktop#7639)
  * Fix: correctly detects network drive.
    (gh#nextcloud/desktop#7636)
  * chore(i18n): Corrected spelling and improved grammar
    (gh#nextcloud/desktop#7655)
  * remove NC17 support (gh#nextcloud/desktop#7656)
  * improvement of error message (gh#nextcloud/desktop#7667)
  * Fix a bug preventing sync root in folder on drive roots
    (gh#nextcloud/desktop#7662)
  * Bugfix/lnk folder virtual files (gh#nextcloud/desktop#7670)
  * Add authors file (gh#nextcloud/desktop#7680)
  * Bump cpp-linter/cpp-linter-action from 2.13.3 to 2.13.4
    (gh#nextcloud/desktop#7675)
  * all: Fix deprecation warnings when building with Qt 6.8.0
    (gh#nextcloud/desktop#7584)
  * Bugfix/catch exceptions to prevent crash
    (gh#nextcloud/desktop#7684)
  * Bugfix/elidedtext (gh#nextcloud/desktop#7679)
  * Remove assert for when the timestamp is not empty.
    (gh#nextcloud/desktop#7641)
  * url update in readme (gh#nextcloud/desktop#7704)
  * Call setDesktopFileName without .desktop suffix
    (gh#nextcloud/desktop#7699)
  * add a simple github action workflow to build test the
    documentation (gh#nextcloud/desktop#7708)
  * Fix filename of fix-macosvfs-file-sharing.png
    (gh#nextcloud/desktop#7691)
  * Fix .netrc parsing (gh#nextcloud/desktop#7698)
  * Bugfix/do not always free up storage windows shortcuts
    (gh#nextcloud/desktop#7713)
  * fix dev application name to keep a consitant migration
    behaviour for the dev and prod build
    (gh#nextcloud/desktop#7683)
  * ensure proper read write access to root folder and db files
    (gh#nextcloud/desktop#7724)
  * Make extraction of ETag header independent of capitalisation
    (gh#nextcloud/desktop#7720)
  * gui/tray: Fix colour for secondary text items being too pale
    (gh#nextcloud/desktop#7725)
  * Fix "open local or group folders" menu not showing
    (gh#nextcloud/desktop#7730)
  * improve feedback from documentation generation workflow
    (gh#nextcloud/desktop#7743)
  * gui/tray: Remove BasicComboBox QML component, prefer native
    component (gh#nextcloud/desktop#7583)
  * Update macosvfs.rst (gh#nextcloud/desktop#7742)
  * chore(i18n): Improved grammar (gh#nextcloud/desktop#7749)
  * update runwizard introduction screen
    (gh#nextcloud/desktop#7737)
  * updater: Upgrade to Sparkle 2 (gh#nextcloud/desktop#7750)
  * gui/tray: Fix sync state icon showing paused state when using
    macOS VFS with no standard sync folders
    (gh#nextcloud/desktop#7741)
  * fix window resize on DPI changes (gh#nextcloud/desktop#7735)
  * github: Implement issue types in issue templates
    (gh#nextcloud/desktop#7766)
  * Use normal MenuSeparator instead of custom code
    (gh#nextcloud/desktop#7770)
  * update legal notice copyright years for Nextcloud
    (gh#nextcloud/desktop#7773)
  * add some missing doc images in a valid path
    (gh#nextcloud/desktop#7774)
  * Avoid converting string to color (gh#nextcloud/desktop#7769)
  * Bugfix/read only classical sync lnk shortcuts windows
    (gh#nextcloud/desktop#7779)
  * fix the if check for invalid virtual LNK files
    (gh#nextcloud/desktop#7781)
  * Make Brander QT selection dynamic (gh#nextcloud/desktop#7754)
  * sync: Respect maximum chunk size provided in server capabilities
    (gh#nextcloud/desktop#7772)
  * switch client side encryption to use sha256 hash algorithm
    (gh#nextcloud/desktop#7780)
  * Log path strings directly instead of accumulating
    (gh#nextcloud/desktop#7718)
  * modify AppImage build script to work with an EL8 base
    (gh#nextcloud/desktop#7782)
  * notifications: Do not assume root activity link is the correct
    "join call" link (gh#nextcloud/desktop#7786)
  * fix "Resolve conflicts" dialog not showing up
    (gh#nextcloud/desktop#7789)
  * persist credentials retrieved through the wizard
    (gh#nextcloud/desktop#7768)
  * use new in Qt6.8 windows fluent style
    (gh#nextcloud/desktop#7416)
  * fix wrong if condition (gh#nextcloud/desktop#7799)
  * Add Ubuntu Plucky (gh#nextcloud/desktop#7801)
  * Link to new documentation (gh#nextcloud/desktop#7810)
  * Update doc link in issue template (gh#nextcloud/desktop#7811)
  * fix colours in dark mode (gh#nextcloud/desktop#7755)
  * refactor: replace QString() with QStringLiteral() for better
    performance in (gh#nextcloud/desktop#7422)
  * use correct qml style on Windows (gh#nextcloud/desktop#7812)
  * craft: Upgrade to binary cache 25.01 (gh#nextcloud/desktop#7825)
  * only use debug log level for discovery traces to decrease cost
    (gh#nextcloud/desktop#7819)
  * shell_integration/macOS: Upgrade to NextcloudFileProviderKit 2.0
    (gh#nextcloud/desktop#7824)
  * Adds some extra info when throwing exception with setting folder
    permissions. (gh#nextcloud/desktop#7809)
  * Feature/e2ee use hardware token secure storage
    (gh#nextcloud/desktop#5877)
  * Fetch "shared with me" information separately
    (gh#nextcloud/desktop#7744)
  * gui/tray: Fix defaulting to "problem" state in sync tray icon
    when using macOS VFS (gh#nextcloud/desktop#7827)
  * set the parent folder read/write always when downloading a new
    file (gh#nextcloud/desktop#7808)
  * fix deletion of .lnk files on Windows with paths containing
    special characters (gh#nextcloud/desktop#7828)
  * shell_integration/macOS: Add ability to share macOS VFS files
    via internal link shares (gh#nextcloud/desktop#7787)
  * gui/macOS: Improve/fix illegal File Provider domain handling
    for macOS VFS (gh#nextcloud/desktop#7835)
  * shell_integration/macOS: Do not try to lock macOS VFS file if
    locking is unavailable on the server (gh#nextcloud/desktop#7833)
  * fix: Nautilus integration conflicts with ownCloud
    (gh#nextcloud/desktop#6418)
  * Add button to scroll to top when activity list is long.
    (gh#nextcloud/desktop#7823)
  * UI: Improves texts displayed to the user when picking the wrong
    location for syncing (gh#nextcloud/desktop#7596)
  * skip attempt to install updates at launch when update checks are
    disabled (gh#nextcloud/desktop#7838)
  * gui/tray: Prevent talk reply text field being too wide and
    breaking layout (gh#nextcloud/desktop#7839)
  * Bugfix. E2EE. Always migrate from 1.2 to 2.0, even with nested
    folders. (gh#nextcloud/desktop#6695)
  * Bugfix migration from legacy clients. (gh#nextcloud/desktop#7807)
  * Fix Height for Resolve Conflicts Dialog (gh#nextcloud/desktop#7815)
  * add test skeleton for OCC::FolderStatusModel
    (gh#nextcloud/desktop#7842)
  * Attempt to detect if client is running in a Vmware to disable
    graphic acceleration (gh#nextcloud/desktop#7687)
  * [stable-3.16] fix rounded corners in the call notification
    (gh#nextcloud/desktop#7851)
  * [stable-3.16] Fix looks of share note text field
    (gh#nextcloud/desktop#7858)
  * [stable-3.16] chore(i18n): Remove blank (gh#nextcloud/desktop#7866)
  * [stable-3.16] vfs: fix root folder detection regression
    (gh#nextcloud/desktop#7878)
  * [stable-3.16] Hide update channels options when needed.
    (gh#nextcloud/desktop#7879)
  * [stable-3.16] Small improvements in Folder.
    (gh#nextcloud/desktop#7882)
  * [stable-3.16] Feature/automate windows file name compatibility
    (gh#nextcloud/desktop#7884)
  * [stable-3.16] provide consistent version info including human
    readable version (gh#nextcloud/desktop#7885)
  * [stable-3.16] Change three dots to an ellipsis
    (gh#nextcloud/desktop#7888)
  * [stable-3.16] Check if folder exists before deleting sync db and
    VFS sync root conection. (gh#nextcloud/desktop#7892)
  * [stable-3.16] prevent infinite sync loop: delay retry after many
    errors (gh#nextcloud/desktop#7893)
  * [stable-3.16] improve ToS handling (gh#nextcloud/desktop#7895)
  * [stable-3.16] fixed html formatting on encrypted warning message
    (gh#nextcloud/desktop#7896)
  * [stable-3.16] FolderStatusModel: only create a single
    QFileIconProvider object (gh#nextcloud/desktop#7900)
  * [stable-3.16] UserStatusSelector: set focusPolicy on accept
    button (gh#nextcloud/desktop#7907)
  * [stable-3.16] Bugfix/delete read only remnants
    (gh#nextcloud/desktop#7909)
  * [stable-3.16] Added plural forms handling correction to
    notification message (gh#nextcloud/desktop#7912)
  * [stable-3.16] Added space between sentences
    (gh#nextcloud/desktop#7913)
  * [stable-3.16] Removed deprecated Qt macros/functions
    (gh#nextcloud/desktop#7915)
  * [stable-3.16] chore(i18n): Use correct plural syntax
    (gh#nextcloud/desktop#7917)
  * [stable-3.16] Improve UI of settings (gh#nextcloud/desktop#7921)
  * [stable-3.16] do not display encrypt action for external folders
    (gh#nextcloud/desktop#7922)
  * [stable-3.16] craft: Use Qt 6.8.2 (gh#nextcloud/desktop#7923)
  * [stable-3.16] Added customize option for sync interval
    (gh#nextcloud/desktop#7929)
  * [stable-3.16] Increased default limit of free space and critical
    free space (gh#nextcloud/desktop#7936)
  * [stable-3.16] Added hiding remotePollInterval selector in
    settings if notify push available (gh#nextcloud/desktop#7944)
  * [stable-3.16] gui/tray: Do not generate JPEG images in async
    image response for macOS (gh#nextcloud/desktop#7947)
  * [stable-3.16] gui/tray: Remove unused thumbnailjob class
    (gh#nextcloud/desktop#7948)
  * [stable-3.16] when deleting a remote locked file, provide needed
    lock headers (gh#nextcloud/desktop#7952)
  * [stable-3.16] gui/macOS: Remove "advanced settings" section for
    macOS VFS settings (gh#nextcloud/desktop#7953)
  * [stable-3.16] update AppImage builds to Qt 6.8.2
    (gh#nextcloud/desktop#7954)
  * [stable-3.16] gui/tray: Fix some tray view papercuts
    (gh#nextcloud/desktop#7955)
  * [stable-3.16] gui: do not allow MainWindow to be resized
    (gh#nextcloud/desktop#7957)
  * [stable-3.16] Revert "gui: do not allow MainWindow to be resized"
    (gh#nextcloud/desktop#7963)
  * [stable-3.16] Remove aditional text when error occurs.
    (gh#nextcloud/desktop#7968)
  * [stable-3.16] gui/macOS: Fix emitted signal in file provider sync
    status GUI component (gh#nextcloud/desktop#7972)
  * [stable-3.16] make use of the new x-nc-skip-trashbin header
    (gh#nextcloud/desktop#7975)
  * [stable-3.16] always set a user if we got asked for one
    (gh#nextcloud/desktop#7976)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1741608001">- Added build requirement `libp11`</changelog>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1741953600">- Update to version 3.16.1:
  * remove unused capture of this in one lambda
    (gh#nextcloud/desktop#7985)
  * fix setups that use basic auth (gh#nextcloud/desktop#7993)
  * use our own Craft cache for macOS builds
    (gh#nextcloud/desktop#8003)
  * Bugfix/do not warn about invalid files in not synced folders
    (gh#nextcloud/desktop#8001)
  * Fix version detection by the Ubuntu/Debian build script
    (gh#nextcloud/desktop#8008)
  * gui/wizard: Integrate macOS VFS (File Provider) configuration
    into account wizard (gh#nextcloud/desktop#8006)
  * gui/tray: Hide resume all menu item when no local sync folders
    are configured (gh#nextcloud/desktop#8011)
  * display reshares in sharing dialog (gh#nextcloud/desktop#8013)
  * Add option to disable virtual files syncing on Windows.
    (gh#nextcloud/desktop#8002)
  * Fix build when BUILD_WEBENGINE=OFF (gh#nextcloud/desktop#8015)
  * ensure user receiving an encrypted share maintain
    proper state (gh#nextcloud/desktop#8017)</changelog>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1742385600">- Update to version 3.16.2:
  * make version.cmake more readable (gh#nextcloud/desktop#7986)
  * remove gcc and clang build checks (gh#nextcloud/desktop#8025)
  * Bugfix/input pin title too wide (gh#nextcloud/desktop#8042)
  * explicitly set colours for header items
    (gh#nextcloud/desktop#8049)
  * Bugfix/highlight too bright appimage
    (gh#nextcloud/desktop#8051)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1744804800">- Update to version 3.16.3:
  * Bugfix/input pin title too wide (gh#nextcloud/desktop#8055)
  * use standard way to find the checkum type and really send it
    to server (gh#nextcloud/desktop#8057)
  * fix Windows build (gh#nextcloud/desktop#8068)
  * use our own craft cache on windows (gh#nextcloud/desktop#8069)
  * gui/macOS: Do not assume accountState will always be valid in
    socket controller (gh#nextcloud/desktop#8074)
  * gui/macOS: Fix broken file provider domain progress reporting
    in settings window (gh#nextcloud/desktop#8079)
  * gui/tray: change the status icon background colour again
    (gh#nextcloud/desktop#8082)
  * set `CFBundleDevelopmentRegion` to `"en"` and set
    `CFBundleAllowMixedLocalizations` (gh#nextcloud/desktop#8085)
  * gui/macOS: Fix memory issues in Objective-C++ code for
    FileProvider support (gh#nextcloud/desktop#8089)
  * fix(mac): bump deployment target to 12.0
    (gh#nextcloud/desktop#8115)
  * fix(gui): remove ignored file notifications from Activity
    list (gh#nextcloud/desktop#8116)
  * fix(mac-crafter): Work around broken consecutive shell
    integration builds (gh#nextcloud/desktop#8117)
  * Bugfix/delete errors (gh#nextcloud/desktop#8124)
  * remove costly availability check that is never used
    (gh#nextcloud/desktop#8123)
  * fix crash within FolderStatusModelTest
    (gh#nextcloud/desktop#8125)
  * fix: move array to correct value in dict
    (gh#nextcloud/desktop#8126)
  * remove bogus check that tried to check for existing case
    clash conflict (gh#nextcloud/desktop#8129)
  * stop using QFile api to delete a single local file
    (gh#nextcloud/desktop#8130)
  * fix: try to correct mtime on upsyncs
    (gh#nextcloud/desktop#8131)
  * Bugfix/use newer bulk upload checksum header
    (gh#nextcloud/desktop#8137)
  * Bugfix/slow bulk upload (gh#nextcloud/desktop#8139)
  * disable use of bulk upload for small files
    (gh#nextcloud/desktop#8141)
  * simplify deletions of invalid read-only items: do not
    interrupt sync (gh#nextcloud/desktop#8153)
  * fix(PinState): don't trigger sync when file's PinState
    changed to Unspecified. (gh#nextcloud/desktop#8157)
  * skip single test or whole test file for macOS: they are
    broken (gh#nextcloud/desktop#8163)
  * Exclude NavigationPaneHelper from non-Windows compile
    (gh#nextcloud/desktop#8158)
  * Use AccountPtr in Account signals instead of raw pointer
    (gh#nextcloud/desktop#8159)
  * fix(theme): correct dark/light mode check on Win10
    (gh#nextcloud/desktop#8162)
  * fix(msi): allow custom installation directory
    (gh#nextcloud/desktop#8166)
  * fix(migration): import proxy and general settings from legacy
    config. (gh#nextcloud/desktop#8169)
  * use specific revision for KDE blueprints that matches the
    craft cache (gh#nextcloud/desktop#8172)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1745841600">- Update to version 3.16.4:
  * pin Craft revision to a specific commit
    (gh#nextcloud/desktop#8194)
  * Bugfix/filesystem remove file not working
    (gh#nextcloud/desktop#8197)
  * revert to QFile::remove to remove single files
    (gh#nextcloud/desktop#8198)
  * Bugfix/do not crash when propagating changes with move or
    rename (gh#nextcloud/desktop#8199)
  * fix(assert): remove runtime assert that could crash production
    builds (gh#nextcloud/desktop#8211)
  * fix(gui): resize sharee search results list dependent on
    required space (gh#nextcloud/desktop#8214)</changelog>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1748952000">- Update to version 3.16.5:
  * revert: remove duplicated code when copying legacy config
    to new path. (gh#nextcloud/desktop#8233)
  * fix(migration): migrate general network settings.
    (gh#nextcloud/desktop#8308)
  * fix(delete): fix move to trash in read-only folders
    (gh#nextcloud/desktop#8312)
  * fix(AppImage): bundle client translations
    (gh#nextcloud/desktop#8313)
  * fix(appimage): move VFS plugins to AppDir
    (gh#nextcloud/desktop#8317)
  * feat(mac-crafter): retry code-signing attempts
    (gh#nextcloud/desktop#8316)
  * fix(rename): avoid failing hard when rename is rejected
    by server (gh#nextcloud/desktop#8323)
  * fix(readonly): enable MOVE rollback when folder is
    read-only (gh#nextcloud/desktop#8324)
  * fix(readonly): apply ACL also to files inside read-only
    folders (gh#nextcloud/desktop#8325)
  * fix(permissions): handle properly CanRead permission from
    server (gh#nextcloud/desktop#8327)
  * fix(filesystem): only change folder permissions if required
    (gh#nextcloud/desktop#8328)
  * fix(lockfilejobs): ensure using correct file path
    (gh#nextcloud/desktop#8332)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1750334400">- Update to version 3.16.6:
  * fix(activitylistmodel): fix activities for e2ee files
    (gh#nextcloud/desktop#8378).
  * fix(accountmanager): use defaults from configFile if setting
    was not present (gh#nextcloud/desktop#8380).
  * fix(crash): debug builds would not try to remove a not found
    job (gh#nextcloud/desktop#8381).
- Do not force GCC 9 for Leap 16.</changelog>
</package>
<package pkgid="dd74d99286046bd4a8739c5a86c0a29fadb72f47326f86f1addef186ee5a1981556f8a55e7eecdd389f1c6ce1f267adb2d7ba49757ec7e353f0ef83e745ef70e" name="caja-extension-rename" arch="x86_64">
  <version epoch="0" ver="24.5.1" rel="bp160.1.14"/>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1656072000">- Initial packaging of version 21.11.24.</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1656504000">- Update to new upstream version 22.6.29:
  + Translated using Weblate (Chinese (Simplified))
  + Added translation using Weblate (Arabic)
  + Translated using Weblate (Arabic)
  + Update translation files
  + Translated using Weblate (German)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 22.10.31:
  * translation updates</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 24.2.1
  * Rewrite in C</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1718107200">- Update version to 24.5.1
  * Translated using Weblate (Hungarian) (f4635f9)
  * Added translation using Weblate (Hungarian) (4b56629)
- Update version to 24.4.1
  * Translated using Weblate (Chinese (Simplified)) (a0e4550)
- Add caja-rename-pre-glib2-74-compat.patch. Gracefully continue when building
  against glib-2.0 &lt;&lt; 2.74.0.
- Add caja-rename-pre-glib2-76-compat.patch. Gracefully continue when building
  against glib-2.0 &lt;&lt; 2.76.0.</changelog>
</package>
<package pkgid="5a9b872f2915c1fb5a644e5053124d99b6b5b25417e6464b5be9b4afa70bebd3c147d0c7dd30cf0b46354fa830c5ff1bfd2123d3f3be595504c6a4d0298ef063" name="caja-extension-sendto-blueman" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.1"/>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (bsc#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622635200">- Update to version 2.2.1
  * New Desktop notifications on connect / disconnect
  * New notifications with battery level for connecting devices
  * Allow cancelling device connection attempts
  * Allow opening device menus via keyboard (Shift+F10 or menu key)
  * Add Ctrl+Q and Ctrl+W accelerators for closing blueman-manager
  * Stop discovery and retry connection for broken adapter drivers
  * Improved passkey handling
  * Auto-connect settings for supported services
  * Fix hide devices with no name
  * Fix disconnecting NMDevice
  * Fix DiscvManager plugin showed its icon unreliably
  * Drop blueman-report, and blueman-assistant
- Add subpackages for caja, nautilus, and nemo sendto extensions</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1636804800">- Update to version 2.2.3
  * Recent connections disabled after suspend and resume
  * Service authorization notifications did not respond
  * Passkeys did not get displayed
- Updates from version 2.2.2
  * Issues with power level bars
  * Error message in blueman-mechanism</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1638100800">- Disable agent startup on Pantheon desktop</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1646740800">- Update to version 2.2.4:
  * Dropped the PIN database.
  * Fix that blueman-mechanism accepted arbitrary file paths and
    returned the errors from trying to open them,
    see https://github.com/blueman-project/blueman/security/advisories/GHSA-3r9p-m5c8-8mw8
- Add blueman-2.2.4-ayatana-appindicator.patch: Support
  Ayatana AppIndicators.
- Require dbus(org.freedesktop.Notifications) instead of
  notification-daemon.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1649678400">- Added iproute2 build dependency to satisfy ip requirement</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1649678401">- Do not recommend -lang package: the auto-generated -lang package
  already contains relevant supplements.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1676030400">- Update to version 2.3.5:
  * Right click menu was pointing to the wrong list row
  * Double click to connect
- Changes from version 2.3.4:
  * Errors when connected to a device with the DisconnectItems plugin enabled
- Changes from version 2.3.3:
  * Issues with NM PANU connections of equally named devices
  * Submenus in KDE Plasma tray
  * Avoid using StatusNotifierItem and GtkStatusIcon icons in parallel
  * Do not re-use dbusmenu item identifiers; avoids issues at least with
    gnome-shell-extension-appindicator
- Changes from version 2.3.2:
  * StatusNotifierItem submenus did not work in lxqt-panel (@niknah)
  * StatusNotifierItem vanished on panel restarts
  * StatusNotifierItem compatibility issues with libdbusmenu used at least
    by xfce4-panel and Waybar
  * StatusNotifierItem showed the menu on left click in xfce4-panel
- Changes from version 2.3.1:
  * StatusNotifierItem sent an incomplete NewStatus signal.
  * Avoid statusbar resize when showing progressbar
- Changes from version 2.3.0:
  * Blocked emblem was not visible for scales other than 1
  * Audio profile switcher in applet menu (@abhijeetviswa)
  * Symbolic tray icon option (GSettings switch symbolic-status-icons in
    org.blueman.general)
  * Replace AppIndicator with DBus StatusNotifierItem
  * Use a GtkTreeModelFilter to show/hide unnamed devices
  * Replace sigint hack with GLib to catch it
  * Port meson from deprecated python3 module
  * Rework battery handling
  * Merge Battery applet plugin into ConnectionNotifier
  * Symbolic icons and small UI improvements
- Changes from version 2.2.5:
  * Fix network interface iteration on 32 bit systems
  * Manager: Fix cancel button in send-note dialog
  * Fix battery and signals bars
- Removed blueman-2.2.4-ayatana-appindicator.patch as Appindicator
  has been replaced with DBus StatusNotifierItem
- Dependencies.md file is no longer packaged</changelog>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1721304000">- Update to version 2.4.2:
  * Broken audio profile applet menu items
  * Missing manager window title
  * Teardown of DBus mock server in tests
  * Only a single battery notification
  * Renamed recent connections header in applet menu
  * Translation updates
  * An option to toggle the manager window with the tray icon (the 2.3 behavior
    useful when there are no window decorations for closing it)
- Update to version 2.4.1:
  * Fallback for missing icons
  * Correct Bluetooth state tracking in manager window
  * Sporadic error on battery data (Note that there was a regression
    in Linux 6.8.2, 6.7.11 and 6.6.23 that causes it and lots of other trouble)
  * Active state on tray icon
  * Broken markup in tray menu
  * Translation updates
  * Handle incompabilities with kded6 running on desktops without
    StatusNotifierItem support
- Update to version 2.4:
  * Fix device-selected handlers
  * Fix deprecations in tests
  * Fix showing -1 seconds when discovering @kuraga
  * Tray: Let dbus call end and reply to caller
  * Get the image-missing icon if lookup failed to avoid crash
  * Raise minimum Python version to 3.8
  * Raise minumum Gtk+ version to 3.24
  * Hide recent connections associated with unavailable adapters
  * Store network configuration in GSettings instead of
    /var/lib/blueman/network.state.
  * Replace custom MessageArea widget with regular Gtk.InfoBar
  * Drop auto-power feature. BlueZ now has the AutoEnable setting for even
    better auto-powering.
  * Do not use pointless link quality value
  * Recent connections in toplevel applet menu
  * Never hide keyboard and combos, see #1954 for more info
  * Do not close blueman-manager from applet
  * Add Switch to blueman-manager to set bluetooth on/off
  * Remove broken check for bluetooth status
  * PluginDialog: Replace custom list with Gtk.ListBox
  * Ignore double-click for connect when unpowered
  * Drop homgeneous from statusbar
  * PulseAudioUtils: Use python enums in several places
  * Use operator convenience functions
  * Cleanup PluginDialog UI
  * Show HCI device in blueman-adapers tabs
  * Show different icon for the active audio profile @localevil
  * Make blueman-services a notebook
  * Use the TypedDict as constructor
  * Audio profile switcher in applet menu (@abhijeetviswa)
  * Set router address as DNS server instead of loopback addresses
  * Enable dnsmasq DNS service if possible and add DNS servers otherwise
  * Reconfigure DHCP service on local nameserver changes
  * Support for systemd-resolved for getting nameservers for NAP clients
  * List connected devices in status icon tooltip
  * Support for nautilus 43 and later
  * Copy bleutooth address to clipboard in devicelist
  * Add battery levels to status icon tooltip</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1754913600">- Fix build on Leap 16.0 that has no nemo-extensions package
  (bsc#1247915)</changelog>
</package>
<package pkgid="267d323a7f050b2236e51b07a5df9d363abd791748abfdc1670115cac880e9a96b4ffd337699017aec79f43a5a5bcfc8fed828e678001acc5df353eb496a2489" name="caja-gschemas" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.15"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * Avoid deprecated GtkStock.
  * Avoid deprecated GtkImageMenuItem.
  * libcaja-private/caja-recent.c: gvfs-open is a deprecated tool,
    switch to "gio open" from libglib2.0-bin.
  * caja-query-editor.c: Add "#include &lt;eel/eel-stock-dialogs.h&gt;".
  * caja-file-management-properties.ui: Avoid deprecated GtkVBox
    and GtkHBox.
  * caja-bookmarks-window.ui: Avoid deprecated functions.
  * Rename mate_dialog_add_button to eel_dialog_add_button.
  * caja-spatial-window.c: Avoid deprecated GtkVBox.
  * Eliminate accessible children-changed event flood on container
    repopulation.
  * Eliminate accessible children-changed event flood during update
    all.
  * Emit accessible-name-change signal for icons only when icons
    are renamed.
  * sidebar popup menu: Show "media-eject" icon in the "unmount"
    items.
  * pathbar: Fix random segfaults on opening mounts from Desktop.
  * fm-icon-view: Show size on disc as sort criterion.
  * sidebar popup menu: Show "media-eject" icon.
  * Add sort criterion by reversed extension segments.
  * fm-tree-view.c: Drop unused variable.
  * Rename "mate_image_menu_item..." to
    "eel_image_menu_item_new_from_icon".
  * eel-gtk-extensions: Show icons in right-click menus only if
    "menus-have-icons" is set.
  * caja-sidebar-title: Fix: images broken in sidebar.
  * caja-progress-info.c: Show notifications in begin/end of
    progress.
  * caja-progress-info.c: Avoid deprecated
    "gtk_status_icon_get_visible".
  * caja-sidebar-title: Fix a -Wmaybe-uninitialized warning.
  * caja-desktop-window.c: Fix: caja crashes unexpectedly.
  * Avoid deprecated "gtk_widget_override_font".
  * Avoid deprecated "gtk_window_set_wmclass".
  * caja-bookmark.c: Drop unused variable.
  * caja-bookmark.c: Fix icons in bookmarks.
  * icon-container: Avoid deprecated
    "gtk_style_context_get_border_color".
  * Avoid deprecated "gtk_dialog_get_action_area".
  * Pathbar button: Fix poor response to right-click.
  * editable-label: Avoid deprecated
    "gtk_im_multicontext_append_menuitems".
  * Use NULL instead of an uninitialised variable.
  * eel-editable-label.c: Avoid deprecated gdk_keymap_get_default.
  * eel-editable-label: Avoid deprecated
    gtk_style_context_set_background.
  * zoom-control: Don't use the eel_pop_up_context_menu function.
  * Replace deprecated gtk_menu_popup.
  * libcaja-private: Replace deprecated gdk_error_trap functions.
  * fm-desktop-icon-view: Replace deprecated
    gdk_error_trap_push/pop functions.
  * Replace deprecated gdk_flush.
  * libcaja-private: Fix -Wlogical-not-parentheses build warning.
  * Avoid deprecated gtk_style_context_get_background_color.
  * GSettings should init before use it.
  * monitor: Fix a crash on unmounting remote filesystems.
  * CajaFile: Fix a crash in modify_link_hash_table.
  * connect-server-dialog: Respect password save setting.
  * properties-window: Fix checking inconsistent state.
  * monitor: Watch for removal of non-native mounts on
    GVolumeMonitor.
  * Add "Configurable" interface and add support to
    caja-file-management-properties.
  * caja-application.c: Remove redundant empty lines.
  * Update caja manpage with info about "--force-desktop" option.
  * Caja-icon-info: Optimise icon lookups by GIcon.
  * fm-directory-view.c:  Decrease minimum update interval.
  * Remove dead code, fix a memory leak.
  * Add option to open multiple uri in tabs at startup.
  * Add the ability to switch tabs using [ctrl+tab] and
    [ctrl+shift+tab].
  * caja-desktop-directory: Stop segfaults in
    directory_ready_callback.
  * caja-directory.c: Fix a build warning.
  * pathbar: Increase reference count of path in
    update_button_types.
  * Fix some issues found by static analysis.
  * pathbar: Fix crash when accessing drive root.
  * libcaja-private: Remove redundant prefs application to hash
    table.
  * [desktop-bg] Fix a memory leak during background change events.
  * caja-location-bar: Fix: change background colour based on
    activity state.
  * Avoid deprecated g_type_class_add_private under src.
  * Fix incompatible pointer types.
  * Avoid deprecated g_type_class_add_private under src.
  * Avoid deprecated g_type_class_add_private under
    libcaja-private.
  * Fix compile warning.
  * Let file size units follow the users preference.
  * Fixed the value of 6 month and 1 year.
  * Support querying files by modification time and size.
  * Avoid deprecated g_type_class_add_private.
  * CajaApplication: Avoid deprecated g_type_class_add_private.
  * caja-menu: Avoid deprecated g_type_class_add_private.
  * eel, libegg: Use G_DEFINE_TYPE_WITH_PRIVATE macro.
  * configure.ac: Add check for PKG_CONFIG being set.
  * caja-application: Check for smclient before trying to load
    session.
  * eel: Avoid deprecated g_type_class_add_private.
  * libegg: Avoid deprecated g_type_class_add_private.
  * libcaja-private: Re-check file MIME type before picking an
    application.
  * file-manager: Fix apparent bug in context menu updating code.
  * Revert "fm-directory-view.c:  Decrease minimum update interval.".
  * Fix: weird item in bookmarks if the directory was removed.
  * Minor code-quality enhancements.
  * Forgot to initialise is_backup field.
  * Change show/hide backup files shortcut.
  * Remove useless comments, correct description string.
  * Skip hidden files only, not backups.
  * Add independent show/hide backup files.
  * Deleting an unused nautilus icon.
  * caja-progress-info: New behaviour with notifications.
  * caja-progress-info: Show notifications with the gsettings key.
  * Move AppStream files to the metainfo/ directory.
  * caja-places-sidebar: Replace two other uses of
    g_drive_poll_for_media_finish.
  * caja-bookmark: Fix memory leak.
  * eel-gtk-extensions: Fix memory leaks.
  * Add update-authors.pl script which helps to update caja.about.
  * Read authors and documenters fom caja.about file.
  * Ensure proper translation of the about dialogue title
  * Add --disable-self-check for configure.
  * Update translations.
- Rebase caja-gtk-3.20.patch.
- Add caja-missing-include.patch: Add a missing include.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * caja-progress-info: Make sure argument is initialised.
  * Fix invocation with --geometry from the command line.
  * Pass "NULL" for keyboard event.
  * caja-file: Fix incomplete file replacement dialogue.
  * eel-gdk-pixbuf-extensions: Fix division by zero.
  * caja-file: Fix use of memory after it is freed.
  * caja-icon-container: Fix use of memory after it is freed.
  * fm-tree-model: Fix use of memory after it is freed.
  * caja-information-panel: Fix use of memory after it is freed.
  * fm-directory-view: Fix use of memory after it is freed.
  * caja-tree-view-drag-dest: Fix memory leak.
  * [Security] eel-string: Use "g_strlcat" instead of "strcat".
  * [Security] Use "g_strlcpy" instead of "strcpy".
  * Update translations.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563364800">- Update to version 1.23.1 (changes since 1.22.1):
  * desktop: Always draw the items label frame
  * suppress GtkAction deprecations warnings
  * src: reduce the scope of some variables
  * caja-open-with-dialog: cppcheck: Redundant condition
  * eel-canvas: cppcheck: Local variable 'allocation' shadows outer variable
  * caja-progress-info: add tooltips to file transfer dialog
  * Add accessible names for buttons in file transfer operations dialog
  * libegg: reduce the scope of some variables
  * libcaja-private: reduce the scope of some variables
  * eel: remove date &amp; time functions
  * caja-spatial-window: Unused variable i
  * eel: reduce the scope of some variables
  * caja-location-dialog: Fix 'cppcheck' and 'clang' warnings
  * update translations
  * caja-property-browser: Fix cast from non-struct type to struct type
  * eggsmclient-xsmp: Fix cast from non-struct type to struct type
  * caja-file-utilities: Fix cast from non-struct type to struct type
  * local #include files who are libraries inside &lt;&gt; instead ""
  * eel-string: Use 'va_copy' instead of 'G_VA_COPY'
  * eel-editable-label: Use 'memmove' instead of 'memcpy'
  * eel: remove eel_g_object_list_ref
  * drop functions defined but not used
  * local #include files inside "" instead &lt;&gt;
  * caja-icon-canvas-item: avoid 'cppcheck' warning
  * caja-file: avoid shifting signed 32-bit value by 31 bits
  * caja-icon-canvas-item: initialize variable 'scale'
  * caja-application: avoid NULL inside 'g_object_unref'
  * fm-desktop-icon-view: remove dead code
  * caja-file-operations: make sure 'error' isn't NULL
  * caja-open-with-dialog: make sure there is error before showing it
  * eel-string: Fix: 'memcpy' overflows destination buffer
  * eel-string: avoid 'memcpy' with NULL argument
  * caja-progress-info: make sure argument is initialized
  * eel: replace eel_ref_str with GRefString
  * eel: remove g_object_list_copy
  * caja-sidebar-title: avoid 'NULL' inside 'setup_gc_with_fg'
  * caja-file: Fix incomplete file replacement dialog
  * caja-autorun: avoid NULL in 'memcpy'
  * eel-editable-label: call argument with initialized value
  * caja-file: Fix: true and false branches are identical
  * caja-file-operations: add comment with false positive warning:
  * configure.ac: fix portability issue with test
  * eel: remove g_str_list_copy
  * Remove USE_MATE2_MACROS from autogen.sh (legacy)
  * eel: remove g_list_free_deep_custom
  * avoid variables set but not used
  * eel-canvas: Fix warning: Undefined or garbage value returned to caller
  * caja-window: Fix garbage value
  * eel-gdk-pixbuf-extensions: Fix division by zero
  * Fix use of memory after it is freed.
  * Fix attempt to free released memory
  * drop unused variables
- remove patches:
  * caja-missing-include.patch: builds fine without it
  * caja-gtk-3.20.patch: we don't support gtk3.20 anymore
- build require gtk &gt;= 3.22, glib &gt;= 2.50 and gio &gt;= 2.50</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.1):
  * caja-progress-info: Use NotifyNotification instead of
    GNotification.
  * Copy file and keep timestamps of original file including
    remotes.
  * Fix Caja crashes on file move in Korean.
  * Support querying files by contained text.
  * Use show icons option in views tab.
  * Add preference option to hide icons in list view.
  * fm-directory-view: Add icon to "empty trash" into "File" menu.
  * gla11y: Use version 0.3 which already defaults to using
    python3.
  * caja-places-sidebar: Add icon to "empty trash".
  * spatial-window: Replace geprecated gtk_menu_popup.
  * property-browser: Replace deprecated gtk_drag_begin.
  * fm-list-view: Replace deprecated gtk_drag_begin.
  * Show thumbnails in list view.
  * file-manager: Reduce the scope of some variables.
  * preferences: Render extension icons as cairo_surfaces.
  * preferences: Render media icons as cairo_surface.
  * Replace gdkpixbuf with cairo_surfaces in a few more places.
  * sidebar: Render info icon as vector.
  * desktop: Add specific CSS for ContrastHigh and
    ContrastHighInverse.
  * desktop: Add specific CSS for HighContrast and
    HighContrastInverse.
  * Add support for loading theme-specific caja-desktop CSS.
  * Refactor custom CSS loading into a separate function.
  * Add support for checking .ui accessibility with gla11y.
  * Render file-conflict icons as cairo_surface vectors.
  * file-conflict-dialog: Don't scale icons twice on hidpi monitors.
  * eel-string: Fix "make check".
  * Restore transparent background on icon view labels.
  * desktop icon view: Disconnect callback from correct GSettings
    instance.
  * Add scroll tabs with mouse wheel for File's properties and
    caja's preferences windows.
  * hidpi: Ensure all icons are properly scaled.
  * Use GETTEXTDATADIRS replace GETTEXTDATADIR.
  * Create msgstr for data/browser.xml.
  * Add gettext ITS.
  * Migrate intltool to gettext.
  * fm-properties: Remove use of mate-desktop-thumbnail helper.
  * Make device ejection notifications translatable.
  * Keep path same when opening new window from an existing one.
  * editable-label: Don't hyphenate filenames.
  * libcaja-private/caja-file: Redundant condition.
  * Avoid redundant redeclarations.
  * canvas-item: Don't hyphenate filenames.
  * change name from caja.{its,loc} to mimeinfo.{its,loc}.
  * caja-window-slot: "folder-saved-search" icon instead
    "text-x-generic".
  * Let some strings be translatable.
  * Add document for CajaWidgetViewProvider api.
  * Add new interface.
  * Add CajaWidgetViewProvider docs.
  * Add new extension for widget view.
  * Hide menu and toolbutton when view is only one.
  * Set FmWidgetView is single view.
  * Add new FmWidgetView object.
  * Fix build error about autoptr clean.
  * Use absolute path of binary on desktop files.
  * build: Fix wrong executing dir in caja.desktop.
  * Set a real title on the desktop window (as provided to ATK).
  * Drop GLIB version check.
  * build: Show compiler flags on configuration summary.
  * Fix build using the -fno-common flag.
  * Update translations.
- Drop support for old openSUSE versions.
- Add caja-glib-2.54.patch: restore GLib 2.54 support.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1594814400">- Replace pkgconfig(gail) with pkgconfig(gail-3.0) BuildRequires:
  align with what configure checks for, and no longer pull in
  unneeded nor used gtk2-devel.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to 1.24.1
  * update translations
  * file-operations: don't attempt to move into the source dir
  * keep one .desktop suffix on desktop file renaming
  * fix runtime warning from newly unused code
  * Confirm before deleting during an undo operation
  * Updating the link of caja</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * Update copyright to 2021</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1658145600">- Update to upstream version 1.26.1:
  * tx: sync with transifex
  * Fix Caja does not show icons of application launchers
  * caja-mime-actions: fix memory leak
  * caja-bookmark: fix memory leak
  * caja-bookmark: drop create_image_cairo_for_bookmark
  * caja-file-conflict-dialog: Move to automatic signal
    disconnection
  * caja-file-conflict-dialog: Properly release references on
    dispose()
  * caja-file-conflict-dialog: update the icons once
  * caja-module: fix memory leak
  * caja-sidebar-title: fix memory leak
  * fm-directory-view: fix memory leak
  * eel-background: fix memory leak
  * caja-application: avoid SEGV when profiling/debugging code
  * caja-places-sidebar: fix right-click menu height
- No packaging changes necessary.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1700136000">- Update version to 1.26.3
  * update translations
  * caja-file: fix future informal date bug
  * caja-file: fix yesterday/today informal date bug
  * Replace deprecated code from xrandr
  * caja-desktop-window: Fix the xrandr error</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 1.28.0
  * Translation update
  * Wl bgleaks fixes (#1763)
  * wayland-background-dialog: fix two issues found by cppcheck
  * wayland-background-dialog: ensure style provider is added only once
  * eel-background: fix logic error in x11/wayland detection
  * wayland-background-dialog: Preview images at original aspect ratio
  * wayland-background-dialog: fix memory leaks
  * wayland background dialog: fix build warning
  * Make wayland background dialog more intuitive
  * Manage desktop backgrounds when running in wayland
  * wayland desktop: suppress spatial window warning
  * Do not show "Organize Desktop by Name" when desktop icons are locked
  * fix building with libxml 2.12.0
- Drop caja-glib-2.54.patch</changelog>
</package>
<package pkgid="2331516f1d0d38a7f229ca237674aa983499ce0bfd4ad4886fffb53eb4eabac54c60efc35e14394c6c159b32321629b8fb76f5960bd8696b40eeaa46b675a780" name="caja-lang" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="bp160.1.15"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * Avoid deprecated GtkStock.
  * Avoid deprecated GtkImageMenuItem.
  * libcaja-private/caja-recent.c: gvfs-open is a deprecated tool,
    switch to "gio open" from libglib2.0-bin.
  * caja-query-editor.c: Add "#include &lt;eel/eel-stock-dialogs.h&gt;".
  * caja-file-management-properties.ui: Avoid deprecated GtkVBox
    and GtkHBox.
  * caja-bookmarks-window.ui: Avoid deprecated functions.
  * Rename mate_dialog_add_button to eel_dialog_add_button.
  * caja-spatial-window.c: Avoid deprecated GtkVBox.
  * Eliminate accessible children-changed event flood on container
    repopulation.
  * Eliminate accessible children-changed event flood during update
    all.
  * Emit accessible-name-change signal for icons only when icons
    are renamed.
  * sidebar popup menu: Show "media-eject" icon in the "unmount"
    items.
  * pathbar: Fix random segfaults on opening mounts from Desktop.
  * fm-icon-view: Show size on disc as sort criterion.
  * sidebar popup menu: Show "media-eject" icon.
  * Add sort criterion by reversed extension segments.
  * fm-tree-view.c: Drop unused variable.
  * Rename "mate_image_menu_item..." to
    "eel_image_menu_item_new_from_icon".
  * eel-gtk-extensions: Show icons in right-click menus only if
    "menus-have-icons" is set.
  * caja-sidebar-title: Fix: images broken in sidebar.
  * caja-progress-info.c: Show notifications in begin/end of
    progress.
  * caja-progress-info.c: Avoid deprecated
    "gtk_status_icon_get_visible".
  * caja-sidebar-title: Fix a -Wmaybe-uninitialized warning.
  * caja-desktop-window.c: Fix: caja crashes unexpectedly.
  * Avoid deprecated "gtk_widget_override_font".
  * Avoid deprecated "gtk_window_set_wmclass".
  * caja-bookmark.c: Drop unused variable.
  * caja-bookmark.c: Fix icons in bookmarks.
  * icon-container: Avoid deprecated
    "gtk_style_context_get_border_color".
  * Avoid deprecated "gtk_dialog_get_action_area".
  * Pathbar button: Fix poor response to right-click.
  * editable-label: Avoid deprecated
    "gtk_im_multicontext_append_menuitems".
  * Use NULL instead of an uninitialised variable.
  * eel-editable-label.c: Avoid deprecated gdk_keymap_get_default.
  * eel-editable-label: Avoid deprecated
    gtk_style_context_set_background.
  * zoom-control: Don't use the eel_pop_up_context_menu function.
  * Replace deprecated gtk_menu_popup.
  * libcaja-private: Replace deprecated gdk_error_trap functions.
  * fm-desktop-icon-view: Replace deprecated
    gdk_error_trap_push/pop functions.
  * Replace deprecated gdk_flush.
  * libcaja-private: Fix -Wlogical-not-parentheses build warning.
  * Avoid deprecated gtk_style_context_get_background_color.
  * GSettings should init before use it.
  * monitor: Fix a crash on unmounting remote filesystems.
  * CajaFile: Fix a crash in modify_link_hash_table.
  * connect-server-dialog: Respect password save setting.
  * properties-window: Fix checking inconsistent state.
  * monitor: Watch for removal of non-native mounts on
    GVolumeMonitor.
  * Add "Configurable" interface and add support to
    caja-file-management-properties.
  * caja-application.c: Remove redundant empty lines.
  * Update caja manpage with info about "--force-desktop" option.
  * Caja-icon-info: Optimise icon lookups by GIcon.
  * fm-directory-view.c:  Decrease minimum update interval.
  * Remove dead code, fix a memory leak.
  * Add option to open multiple uri in tabs at startup.
  * Add the ability to switch tabs using [ctrl+tab] and
    [ctrl+shift+tab].
  * caja-desktop-directory: Stop segfaults in
    directory_ready_callback.
  * caja-directory.c: Fix a build warning.
  * pathbar: Increase reference count of path in
    update_button_types.
  * Fix some issues found by static analysis.
  * pathbar: Fix crash when accessing drive root.
  * libcaja-private: Remove redundant prefs application to hash
    table.
  * [desktop-bg] Fix a memory leak during background change events.
  * caja-location-bar: Fix: change background colour based on
    activity state.
  * Avoid deprecated g_type_class_add_private under src.
  * Fix incompatible pointer types.
  * Avoid deprecated g_type_class_add_private under src.
  * Avoid deprecated g_type_class_add_private under
    libcaja-private.
  * Fix compile warning.
  * Let file size units follow the users preference.
  * Fixed the value of 6 month and 1 year.
  * Support querying files by modification time and size.
  * Avoid deprecated g_type_class_add_private.
  * CajaApplication: Avoid deprecated g_type_class_add_private.
  * caja-menu: Avoid deprecated g_type_class_add_private.
  * eel, libegg: Use G_DEFINE_TYPE_WITH_PRIVATE macro.
  * configure.ac: Add check for PKG_CONFIG being set.
  * caja-application: Check for smclient before trying to load
    session.
  * eel: Avoid deprecated g_type_class_add_private.
  * libegg: Avoid deprecated g_type_class_add_private.
  * libcaja-private: Re-check file MIME type before picking an
    application.
  * file-manager: Fix apparent bug in context menu updating code.
  * Revert "fm-directory-view.c:  Decrease minimum update interval.".
  * Fix: weird item in bookmarks if the directory was removed.
  * Minor code-quality enhancements.
  * Forgot to initialise is_backup field.
  * Change show/hide backup files shortcut.
  * Remove useless comments, correct description string.
  * Skip hidden files only, not backups.
  * Add independent show/hide backup files.
  * Deleting an unused nautilus icon.
  * caja-progress-info: New behaviour with notifications.
  * caja-progress-info: Show notifications with the gsettings key.
  * Move AppStream files to the metainfo/ directory.
  * caja-places-sidebar: Replace two other uses of
    g_drive_poll_for_media_finish.
  * caja-bookmark: Fix memory leak.
  * eel-gtk-extensions: Fix memory leaks.
  * Add update-authors.pl script which helps to update caja.about.
  * Read authors and documenters fom caja.about file.
  * Ensure proper translation of the about dialogue title
  * Add --disable-self-check for configure.
  * Update translations.
- Rebase caja-gtk-3.20.patch.
- Add caja-missing-include.patch: Add a missing include.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * caja-progress-info: Make sure argument is initialised.
  * Fix invocation with --geometry from the command line.
  * Pass "NULL" for keyboard event.
  * caja-file: Fix incomplete file replacement dialogue.
  * eel-gdk-pixbuf-extensions: Fix division by zero.
  * caja-file: Fix use of memory after it is freed.
  * caja-icon-container: Fix use of memory after it is freed.
  * fm-tree-model: Fix use of memory after it is freed.
  * caja-information-panel: Fix use of memory after it is freed.
  * fm-directory-view: Fix use of memory after it is freed.
  * caja-tree-view-drag-dest: Fix memory leak.
  * [Security] eel-string: Use "g_strlcat" instead of "strcat".
  * [Security] Use "g_strlcpy" instead of "strcpy".
  * Update translations.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563364800">- Update to version 1.23.1 (changes since 1.22.1):
  * desktop: Always draw the items label frame
  * suppress GtkAction deprecations warnings
  * src: reduce the scope of some variables
  * caja-open-with-dialog: cppcheck: Redundant condition
  * eel-canvas: cppcheck: Local variable 'allocation' shadows outer variable
  * caja-progress-info: add tooltips to file transfer dialog
  * Add accessible names for buttons in file transfer operations dialog
  * libegg: reduce the scope of some variables
  * libcaja-private: reduce the scope of some variables
  * eel: remove date &amp; time functions
  * caja-spatial-window: Unused variable i
  * eel: reduce the scope of some variables
  * caja-location-dialog: Fix 'cppcheck' and 'clang' warnings
  * update translations
  * caja-property-browser: Fix cast from non-struct type to struct type
  * eggsmclient-xsmp: Fix cast from non-struct type to struct type
  * caja-file-utilities: Fix cast from non-struct type to struct type
  * local #include files who are libraries inside &lt;&gt; instead ""
  * eel-string: Use 'va_copy' instead of 'G_VA_COPY'
  * eel-editable-label: Use 'memmove' instead of 'memcpy'
  * eel: remove eel_g_object_list_ref
  * drop functions defined but not used
  * local #include files inside "" instead &lt;&gt;
  * caja-icon-canvas-item: avoid 'cppcheck' warning
  * caja-file: avoid shifting signed 32-bit value by 31 bits
  * caja-icon-canvas-item: initialize variable 'scale'
  * caja-application: avoid NULL inside 'g_object_unref'
  * fm-desktop-icon-view: remove dead code
  * caja-file-operations: make sure 'error' isn't NULL
  * caja-open-with-dialog: make sure there is error before showing it
  * eel-string: Fix: 'memcpy' overflows destination buffer
  * eel-string: avoid 'memcpy' with NULL argument
  * caja-progress-info: make sure argument is initialized
  * eel: replace eel_ref_str with GRefString
  * eel: remove g_object_list_copy
  * caja-sidebar-title: avoid 'NULL' inside 'setup_gc_with_fg'
  * caja-file: Fix incomplete file replacement dialog
  * caja-autorun: avoid NULL in 'memcpy'
  * eel-editable-label: call argument with initialized value
  * caja-file: Fix: true and false branches are identical
  * caja-file-operations: add comment with false positive warning:
  * configure.ac: fix portability issue with test
  * eel: remove g_str_list_copy
  * Remove USE_MATE2_MACROS from autogen.sh (legacy)
  * eel: remove g_list_free_deep_custom
  * avoid variables set but not used
  * eel-canvas: Fix warning: Undefined or garbage value returned to caller
  * caja-window: Fix garbage value
  * eel-gdk-pixbuf-extensions: Fix division by zero
  * Fix use of memory after it is freed.
  * Fix attempt to free released memory
  * drop unused variables
- remove patches:
  * caja-missing-include.patch: builds fine without it
  * caja-gtk-3.20.patch: we don't support gtk3.20 anymore
- build require gtk &gt;= 3.22, glib &gt;= 2.50 and gio &gt;= 2.50</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.1):
  * caja-progress-info: Use NotifyNotification instead of
    GNotification.
  * Copy file and keep timestamps of original file including
    remotes.
  * Fix Caja crashes on file move in Korean.
  * Support querying files by contained text.
  * Use show icons option in views tab.
  * Add preference option to hide icons in list view.
  * fm-directory-view: Add icon to "empty trash" into "File" menu.
  * gla11y: Use version 0.3 which already defaults to using
    python3.
  * caja-places-sidebar: Add icon to "empty trash".
  * spatial-window: Replace geprecated gtk_menu_popup.
  * property-browser: Replace deprecated gtk_drag_begin.
  * fm-list-view: Replace deprecated gtk_drag_begin.
  * Show thumbnails in list view.
  * file-manager: Reduce the scope of some variables.
  * preferences: Render extension icons as cairo_surfaces.
  * preferences: Render media icons as cairo_surface.
  * Replace gdkpixbuf with cairo_surfaces in a few more places.
  * sidebar: Render info icon as vector.
  * desktop: Add specific CSS for ContrastHigh and
    ContrastHighInverse.
  * desktop: Add specific CSS for HighContrast and
    HighContrastInverse.
  * Add support for loading theme-specific caja-desktop CSS.
  * Refactor custom CSS loading into a separate function.
  * Add support for checking .ui accessibility with gla11y.
  * Render file-conflict icons as cairo_surface vectors.
  * file-conflict-dialog: Don't scale icons twice on hidpi monitors.
  * eel-string: Fix "make check".
  * Restore transparent background on icon view labels.
  * desktop icon view: Disconnect callback from correct GSettings
    instance.
  * Add scroll tabs with mouse wheel for File's properties and
    caja's preferences windows.
  * hidpi: Ensure all icons are properly scaled.
  * Use GETTEXTDATADIRS replace GETTEXTDATADIR.
  * Create msgstr for data/browser.xml.
  * Add gettext ITS.
  * Migrate intltool to gettext.
  * fm-properties: Remove use of mate-desktop-thumbnail helper.
  * Make device ejection notifications translatable.
  * Keep path same when opening new window from an existing one.
  * editable-label: Don't hyphenate filenames.
  * libcaja-private/caja-file: Redundant condition.
  * Avoid redundant redeclarations.
  * canvas-item: Don't hyphenate filenames.
  * change name from caja.{its,loc} to mimeinfo.{its,loc}.
  * caja-window-slot: "folder-saved-search" icon instead
    "text-x-generic".
  * Let some strings be translatable.
  * Add document for CajaWidgetViewProvider api.
  * Add new interface.
  * Add CajaWidgetViewProvider docs.
  * Add new extension for widget view.
  * Hide menu and toolbutton when view is only one.
  * Set FmWidgetView is single view.
  * Add new FmWidgetView object.
  * Fix build error about autoptr clean.
  * Use absolute path of binary on desktop files.
  * build: Fix wrong executing dir in caja.desktop.
  * Set a real title on the desktop window (as provided to ATK).
  * Drop GLIB version check.
  * build: Show compiler flags on configuration summary.
  * Fix build using the -fno-common flag.
  * Update translations.
- Drop support for old openSUSE versions.
- Add caja-glib-2.54.patch: restore GLib 2.54 support.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1594814400">- Replace pkgconfig(gail) with pkgconfig(gail-3.0) BuildRequires:
  align with what configure checks for, and no longer pull in
  unneeded nor used gtk2-devel.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to 1.24.1
  * update translations
  * file-operations: don't attempt to move into the source dir
  * keep one .desktop suffix on desktop file renaming
  * fix runtime warning from newly unused code
  * Confirm before deleting during an undo operation
  * Updating the link of caja</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * Update copyright to 2021</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1658145600">- Update to upstream version 1.26.1:
  * tx: sync with transifex
  * Fix Caja does not show icons of application launchers
  * caja-mime-actions: fix memory leak
  * caja-bookmark: fix memory leak
  * caja-bookmark: drop create_image_cairo_for_bookmark
  * caja-file-conflict-dialog: Move to automatic signal
    disconnection
  * caja-file-conflict-dialog: Properly release references on
    dispose()
  * caja-file-conflict-dialog: update the icons once
  * caja-module: fix memory leak
  * caja-sidebar-title: fix memory leak
  * fm-directory-view: fix memory leak
  * eel-background: fix memory leak
  * caja-application: avoid SEGV when profiling/debugging code
  * caja-places-sidebar: fix right-click menu height
- No packaging changes necessary.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1700136000">- Update version to 1.26.3
  * update translations
  * caja-file: fix future informal date bug
  * caja-file: fix yesterday/today informal date bug
  * Replace deprecated code from xrandr
  * caja-desktop-window: Fix the xrandr error</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 1.28.0
  * Translation update
  * Wl bgleaks fixes (#1763)
  * wayland-background-dialog: fix two issues found by cppcheck
  * wayland-background-dialog: ensure style provider is added only once
  * eel-background: fix logic error in x11/wayland detection
  * wayland-background-dialog: Preview images at original aspect ratio
  * wayland-background-dialog: fix memory leaks
  * wayland background dialog: fix build warning
  * Make wayland background dialog more intuitive
  * Manage desktop backgrounds when running in wayland
  * wayland desktop: suppress spatial window warning
  * Do not show "Organize Desktop by Name" when desktop icons are locked
  * fix building with libxml 2.12.0
- Drop caja-glib-2.54.patch</changelog>
</package>
<package pkgid="67602f70a2455b2d0c36de0fb7ece7da189e4ed2ba5a7eeaa87d98bb5a9b306fd490e7647151b7fc169f202824ec10f27b404c7c1738865eba4222d8f3d63e9f" name="caja-rename" arch="x86_64">
  <version epoch="0" ver="24.5.1" rel="bp160.1.14"/>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1656072000">- Initial packaging of version 21.11.24.</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1656504000">- Update to new upstream version 22.6.29:
  + Translated using Weblate (Chinese (Simplified))
  + Added translation using Weblate (Arabic)
  + Translated using Weblate (Arabic)
  + Update translation files
  + Translated using Weblate (German)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 22.10.31:
  * translation updates</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 24.2.1
  * Rewrite in C</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1718107200">- Update version to 24.5.1
  * Translated using Weblate (Hungarian) (f4635f9)
  * Added translation using Weblate (Hungarian) (4b56629)
- Update version to 24.4.1
  * Translated using Weblate (Chinese (Simplified)) (a0e4550)
- Add caja-rename-pre-glib2-74-compat.patch. Gracefully continue when building
  against glib-2.0 &lt;&lt; 2.74.0.
- Add caja-rename-pre-glib2-76-compat.patch. Gracefully continue when building
  against glib-2.0 &lt;&lt; 2.76.0.</changelog>
</package>
<package pkgid="0203ae8d4c0656667c171671a85cf0105d7a4207af058d953587705104db0122998d4ffa89c526496f03f4e15adc7200846421b3b049e73b8d3f437831086ec5" name="caja-rename-lang" arch="noarch">
  <version epoch="0" ver="24.5.1" rel="bp160.1.14"/>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1656072000">- Initial packaging of version 21.11.24.</changelog>
  <changelog author="Mihai Moldovan &lt;ionic@ionic.de&gt;" date="1656504000">- Update to new upstream version 22.6.29:
  + Translated using Weblate (Chinese (Simplified))
  + Added translation using Weblate (Arabic)
  + Translated using Weblate (Arabic)
  + Update translation files
  + Translated using Weblate (German)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 22.10.31:
  * translation updates</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Update version to 24.2.1
  * Rewrite in C</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1718107200">- Update version to 24.5.1
  * Translated using Weblate (Hungarian) (f4635f9)
  * Added translation using Weblate (Hungarian) (4b56629)
- Update version to 24.4.1
  * Translated using Weblate (Chinese (Simplified)) (a0e4550)
- Add caja-rename-pre-glib2-74-compat.patch. Gracefully continue when building
  against glib-2.0 &lt;&lt; 2.74.0.
- Add caja-rename-pre-glib2-76-compat.patch. Gracefully continue when building
  against glib-2.0 &lt;&lt; 2.76.0.</changelog>
</package>
<package pkgid="38022e724b70d9fa5fbe80012d68c507446a382afc3806a9748b512bcade1535c467bf836cf857fa48b068a0d53dde1f58caec53d463e89e086c8d06356e8291" name="cal10n" arch="noarch">
  <version epoch="0" ver="0.8.1.12" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.7.7
  + Correctly read escaped ':', '#', '!', '=' characters. The behavior
  is documented in the Properties javadocs (http://tinyurl.com/bprdgnk).
  This fixes CAL-37 (http://jira.qos.ch/browse/CAL-37)
- Update build.xml.tar.bz2, rename it to build.xml-$VERSION and
  recompress it in xz format
- Add a requirement to xz</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * cal10n-0.7.7-sourcetarget.patch
  - Force java source and target levels to 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * cal10n-0.7.7-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install the maven pom files in order to generate correctly the
  mvn(...) provides.</changelog>
  <changelog author="david.anes@suse.com" date="1650542400">- Update to 0.8.1:
  * This release adds JSR-269 support. In other words, verification
    of bundles can be performed at compilation time. See the related
    documentation for more details.
  * Fix issue with Eclipse not finding existing resources. With
    release 0.8.1, Eclipse will find bundles located under
    "src/main/resources" but still fail to find bundles located
    under "src/test/resources/".
  * When reading in bundles, the verify method in MessageKeyVerifier
    now uses the locale passed as parameter instead of always
    Locale.FR. This bug was reported by Dale Wijnand who also
    provided the releavant patch.
- Update build.xml-0.7.7.tar.xz to build.xml-0.8.1.tar.xz with
  references to version 0.8.1 to build correctly versioned jar
  files.</changelog>
  <changelog author="fstrba@suse.com" date="1652270400">- Fetch sources using source service from ch.qos git
- Upgrade to the 10th commit after 0.8.1 calling it 0.8.1.10
- Redo completely the packaging including the possibility to run
  tests if --with tests is specified
- Add the cal10n-ant-task to built artifacts
- Removed patch:
  * cal10n-0.7.7-sourcetarget.patch
    + changes factored into the build system</changelog>
  <changelog author="fstrba@suse.com" date="1714651200">- Fetch the latest git revision: 12th commit after 0.8.1 calling
  it 0.8.1.12
- Add a multibuild flavour to build the maven plugins
- Added patch:
  * Fix-SupportedSourceVersion-warning.patch
    + fix the following: [WARNING] Supported source version
    'RELEASE_5' from annotation processor
    'ch.qos.cal10n.verifier.processor.CAL10NAnnotationProcessor'
    less than -source '1.7'
    + uncommitted change from the following pull request:
    https://github.com/qos-ch/cal10n/pull/10</changelog>
  <changelog author="fstrba@suse.com" date="1743076800">- Added patch:
  * cal10n-mpt4.patch
    + port the maven-plugin to java-annotations extractor instead
    of the deprecated java-javadoc one</changelog>
</package>
<package pkgid="1a528cc65f095e50529dbee0fd5a582a89b64e5572d56d56cd98cfec2581253e62e9119a7ce7dd26e7b49b0ca59d79c8c769e0340968859afc1b982f63609fef" name="cal10n-javadoc" arch="noarch">
  <version epoch="0" ver="0.8.1.12" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.7.7
  + Correctly read escaped ':', '#', '!', '=' characters. The behavior
  is documented in the Properties javadocs (http://tinyurl.com/bprdgnk).
  This fixes CAL-37 (http://jira.qos.ch/browse/CAL-37)
- Update build.xml.tar.bz2, rename it to build.xml-$VERSION and
  recompress it in xz format
- Add a requirement to xz</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * cal10n-0.7.7-sourcetarget.patch
  - Force java source and target levels to 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * cal10n-0.7.7-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install the maven pom files in order to generate correctly the
  mvn(...) provides.</changelog>
  <changelog author="david.anes@suse.com" date="1650542400">- Update to 0.8.1:
  * This release adds JSR-269 support. In other words, verification
    of bundles can be performed at compilation time. See the related
    documentation for more details.
  * Fix issue with Eclipse not finding existing resources. With
    release 0.8.1, Eclipse will find bundles located under
    "src/main/resources" but still fail to find bundles located
    under "src/test/resources/".
  * When reading in bundles, the verify method in MessageKeyVerifier
    now uses the locale passed as parameter instead of always
    Locale.FR. This bug was reported by Dale Wijnand who also
    provided the releavant patch.
- Update build.xml-0.7.7.tar.xz to build.xml-0.8.1.tar.xz with
  references to version 0.8.1 to build correctly versioned jar
  files.</changelog>
  <changelog author="fstrba@suse.com" date="1652270400">- Fetch sources using source service from ch.qos git
- Upgrade to the 10th commit after 0.8.1 calling it 0.8.1.10
- Redo completely the packaging including the possibility to run
  tests if --with tests is specified
- Add the cal10n-ant-task to built artifacts
- Removed patch:
  * cal10n-0.7.7-sourcetarget.patch
    + changes factored into the build system</changelog>
  <changelog author="fstrba@suse.com" date="1714651200">- Fetch the latest git revision: 12th commit after 0.8.1 calling
  it 0.8.1.12
- Add a multibuild flavour to build the maven plugins
- Added patch:
  * Fix-SupportedSourceVersion-warning.patch
    + fix the following: [WARNING] Supported source version
    'RELEASE_5' from annotation processor
    'ch.qos.cal10n.verifier.processor.CAL10NAnnotationProcessor'
    less than -source '1.7'
    + uncommitted change from the following pull request:
    https://github.com/qos-ch/cal10n/pull/10</changelog>
  <changelog author="fstrba@suse.com" date="1743076800">- Added patch:
  * cal10n-mpt4.patch
    + port the maven-plugin to java-annotations extractor instead
    of the deprecated java-javadoc one</changelog>
</package>
<package pkgid="d32495c157a03c3775ba705944f32e7a6cb3fddbd14eda89fc7873056ea9dbc38dbf5f1e5bfb43857812bcbb6d4d1f3a9fc4373d6a64fe7bf06daf434655ce75" name="cal10n-maven-plugins" arch="noarch">
  <version epoch="0" ver="0.8.1.12" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.7.7
  + Correctly read escaped ':', '#', '!', '=' characters. The behavior
  is documented in the Properties javadocs (http://tinyurl.com/bprdgnk).
  This fixes CAL-37 (http://jira.qos.ch/browse/CAL-37)
- Update build.xml.tar.bz2, rename it to build.xml-$VERSION and
  recompress it in xz format
- Add a requirement to xz</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * cal10n-0.7.7-sourcetarget.patch
  - Force java source and target levels to 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * cal10n-0.7.7-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install the maven pom files in order to generate correctly the
  mvn(...) provides.</changelog>
  <changelog author="david.anes@suse.com" date="1650542400">- Update to 0.8.1:
  * This release adds JSR-269 support. In other words, verification
    of bundles can be performed at compilation time. See the related
    documentation for more details.
  * Fix issue with Eclipse not finding existing resources. With
    release 0.8.1, Eclipse will find bundles located under
    "src/main/resources" but still fail to find bundles located
    under "src/test/resources/".
  * When reading in bundles, the verify method in MessageKeyVerifier
    now uses the locale passed as parameter instead of always
    Locale.FR. This bug was reported by Dale Wijnand who also
    provided the releavant patch.
- Update build.xml-0.7.7.tar.xz to build.xml-0.8.1.tar.xz with
  references to version 0.8.1 to build correctly versioned jar
  files.</changelog>
  <changelog author="fstrba@suse.com" date="1652270400">- Fetch sources using source service from ch.qos git
- Upgrade to the 10th commit after 0.8.1 calling it 0.8.1.10
- Redo completely the packaging including the possibility to run
  tests if --with tests is specified
- Add the cal10n-ant-task to built artifacts
- Removed patch:
  * cal10n-0.7.7-sourcetarget.patch
    + changes factored into the build system</changelog>
  <changelog author="fstrba@suse.com" date="1714651200">- Fetch the latest git revision: 12th commit after 0.8.1 calling
  it 0.8.1.12
- Add a multibuild flavour to build the maven plugins
- Added patch:
  * Fix-SupportedSourceVersion-warning.patch
    + fix the following: [WARNING] Supported source version
    'RELEASE_5' from annotation processor
    'ch.qos.cal10n.verifier.processor.CAL10NAnnotationProcessor'
    less than -source '1.7'
    + uncommitted change from the following pull request:
    https://github.com/qos-ch/cal10n/pull/10</changelog>
  <changelog author="fstrba@suse.com" date="1743076800">- Added patch:
  * cal10n-mpt4.patch
    + port the maven-plugin to java-annotations extractor instead
    of the deprecated java-javadoc one</changelog>
</package>
<package pkgid="d0663201cf1c5a0d6e9b4cd61a915a66b80c173c440e5dc95a4e8ce7bc703a414c50c183340f995ad73778c9b1813c565a08a1a149af68748f856b29f7a895e6" name="cal10n-maven-plugins-javadoc" arch="noarch">
  <version epoch="0" ver="0.8.1.12" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.7.7
  + Correctly read escaped ':', '#', '!', '=' characters. The behavior
  is documented in the Properties javadocs (http://tinyurl.com/bprdgnk).
  This fixes CAL-37 (http://jira.qos.ch/browse/CAL-37)
- Update build.xml.tar.bz2, rename it to build.xml-$VERSION and
  recompress it in xz format
- Add a requirement to xz</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Added patch:
  * cal10n-0.7.7-sourcetarget.patch
  - Force java source and target levels to 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Modified patch:
  * cal10n-0.7.7-sourcetarget.patch
    + Build with source and target 8 to prepare for a possible
    removal of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="fstrba@suse.com" date="1539864000">- Install the maven pom files in order to generate correctly the
  mvn(...) provides.</changelog>
  <changelog author="david.anes@suse.com" date="1650542400">- Update to 0.8.1:
  * This release adds JSR-269 support. In other words, verification
    of bundles can be performed at compilation time. See the related
    documentation for more details.
  * Fix issue with Eclipse not finding existing resources. With
    release 0.8.1, Eclipse will find bundles located under
    "src/main/resources" but still fail to find bundles located
    under "src/test/resources/".
  * When reading in bundles, the verify method in MessageKeyVerifier
    now uses the locale passed as parameter instead of always
    Locale.FR. This bug was reported by Dale Wijnand who also
    provided the releavant patch.
- Update build.xml-0.7.7.tar.xz to build.xml-0.8.1.tar.xz with
  references to version 0.8.1 to build correctly versioned jar
  files.</changelog>
  <changelog author="fstrba@suse.com" date="1652270400">- Fetch sources using source service from ch.qos git
- Upgrade to the 10th commit after 0.8.1 calling it 0.8.1.10
- Redo completely the packaging including the possibility to run
  tests if --with tests is specified
- Add the cal10n-ant-task to built artifacts
- Removed patch:
  * cal10n-0.7.7-sourcetarget.patch
    + changes factored into the build system</changelog>
  <changelog author="fstrba@suse.com" date="1714651200">- Fetch the latest git revision: 12th commit after 0.8.1 calling
  it 0.8.1.12
- Add a multibuild flavour to build the maven plugins
- Added patch:
  * Fix-SupportedSourceVersion-warning.patch
    + fix the following: [WARNING] Supported source version
    'RELEASE_5' from annotation processor
    'ch.qos.cal10n.verifier.processor.CAL10NAnnotationProcessor'
    less than -source '1.7'
    + uncommitted change from the following pull request:
    https://github.com/qos-ch/cal10n/pull/10</changelog>
  <changelog author="fstrba@suse.com" date="1743076800">- Added patch:
  * cal10n-mpt4.patch
    + port the maven-plugin to java-annotations extractor instead
    of the deprecated java-javadoc one</changelog>
</package>
<package pkgid="e07d6e58a750a4a54af585c79f366691c92cd5b6822508c13e7a47dcb2b3236bc57eecb06771244bf2052208461ed9fc8677273452dfa74661653fdcee824e5b" name="calamares" arch="x86_64">
  <version epoch="0" ver="3.2.62" rel="bp160.1.14"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1590667200">- Correct license</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1591185600">- Add patch Qt515_QPainterPath.patch to add missing includes
  (QPainterPath) for Qt 5.15 compatibility.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591531200">- Update to version 3.2.25:
  - Slideshow improvements
  - Welcome QML module is now pretty much complete.
- Removed Qt515_QPainterPath.patch: contained in upstream</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1594468800">- calamares.keyring updated (gh#calamares/calamares#1450)
- Changed 3.2-packages.conf.patch: updated for new version
- Update to version 3.2.27:
  - locale put some more places into the correct timezone visually;
  for instance Norfolk Island gave up UTC+11.5 in 2015 and is now
  UTC+11, but Calamares still showed it in a zone separate from UTC+11.
  - localeq can now properly switch between on &amp; offline mode,
  it detects internet status through js.
  - tracking now supports kuserfeedback configuration.
  - welcomeq added the GEOIP configuration option, so locale can be
  initially set according to IP address.
  - Welcome to Azerbaijani translations. These are available
  in two variations, Azerbaijani and Azerbaijani (Azerbaijan).
  - Warnings while building with Qt 5.15 have been much reduced.
  - partitioning has one case of undefined behavior (UB) due
  to a missing integer-initialization.
  - keyboardq QML module now works correctly.
  - QML modules with no surrounding navigation -- this is basically a
  special case for full-screen Calamares -- now have margins suitable
  for full-screen use.
  - PythonQt modules are increasingly on the way out.
  - The netinstall module has had some minor UI tweaks.
  - Partitioning now tries harder to avoid floppy drives.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1598270400">- Split -lang package</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1605873600">- Update to version 3.2.34.
  * Modules
  * The *keyboard* module had a regression in which it no-longer
    painted the keycaps in the keyboard preview.
  * The *plasmalnf* module did not set all of the look-and-feel
    values in the target system. (reported by Bluestar Linux)
  * In the *users* module, warnings about the strength of the
    password are now correctly pluralized when possible.
  * In the *users* module, if ICU is installed, the user's full
    name is automatically transliterated to US-ASCII
    (for some locales; this will need tweaking) so that the login
    name is acceptable.
- Rebase 3.2.15-unpackfs.conf_Leap15.patch
- Fix spec file, license file move to LICENSES/GPL-3.0-or-later.txt</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1610712000">- Add compatibility with qml-autoreqprov</changelog>
  <changelog author="&lt;opensuse.lietuviu.kalba@gmail.com&gt;" date="1612094400">- Update to version 3.2.35.1:
  * The partition module now supports a not-full-disk-encryption setup,
    where /boot is not encrypted, but the rest of the system is.
  * Fixed issue then the initcpiocfg module would sometimes configure
    the system to ask for a passphrase, when none is needed.
  * The plasmalnf module has been substantially rewritten, so that
    it can support a QML version of the module in future. The UI has
    changed a little, and now displays more themes than before.
- Add patch 3.2-networkcfg.patch to prevent writing
    /etc/resolv.conf as a regular file – let openSUSE to create it as
    a symlink automatically.
- Set default source directory to "/run/overlay/rootfsbase" as
    it is with Kiwi from 9.21.18 (in older Kiwi was "/run/rootfsbase").
    See https://github.com/OSInside/kiwi/issues/1558</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1612785600">- Update to version 3.2.36.
  * It is now possible to hide the *next* and *back* buttons during
    the "exec" phase of installation. Thanks Anubhav.
  * The Calamares CI has migrated to GitHub actions. Thanks Jonas.
  * *bootloader* now uses the current file names for the UEFI Secure
    Boot shim instead of obsolete ones.
  * The *mount* module creates swap in its own subvolume, if btrfs
    is used.
  * *partition* includes more information about what it will do,
    including GPT partition types (in human-readable format, if
    possible).
  * Some edge-cases with overlay filesystems have been resolved in
    the *partition* module.
  * During the creation of filesystems and partitions, automounting
    is turned off (if DBus is available, and the host system supports
    KDE Solid automount control). This should reduce the number of
    failed installations if automount grabs partitions while they
    are being created. The code is prepared to handle other ways
    to control automount-behavior as well.</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1685707200">- Update to version 3.2.62
  * See changelog at https://github.com/calamares/calamares/blob/calamares/CHANGES-3.2
- Refresh patches
- Remove obsolete rpmlintrc entries
- Update obsolete field Supplements using packageand</changelog>
</package>
<package pkgid="8cb5bdee182ee26e1b7f0ef0765284830a7a76929752bff2c3aaa438ce5ad2cd654f87285caf2f5d3df56bff205cb86b882b8817ba73041206c8f8d3b1bbf950" name="calamares-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.2.62" rel="bp160.1.14"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1590667200">- Correct license</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1591185600">- Add patch Qt515_QPainterPath.patch to add missing includes
  (QPainterPath) for Qt 5.15 compatibility.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591531200">- Update to version 3.2.25:
  - Slideshow improvements
  - Welcome QML module is now pretty much complete.
- Removed Qt515_QPainterPath.patch: contained in upstream</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1594468800">- calamares.keyring updated (gh#calamares/calamares#1450)
- Changed 3.2-packages.conf.patch: updated for new version
- Update to version 3.2.27:
  - locale put some more places into the correct timezone visually;
  for instance Norfolk Island gave up UTC+11.5 in 2015 and is now
  UTC+11, but Calamares still showed it in a zone separate from UTC+11.
  - localeq can now properly switch between on &amp; offline mode,
  it detects internet status through js.
  - tracking now supports kuserfeedback configuration.
  - welcomeq added the GEOIP configuration option, so locale can be
  initially set according to IP address.
  - Welcome to Azerbaijani translations. These are available
  in two variations, Azerbaijani and Azerbaijani (Azerbaijan).
  - Warnings while building with Qt 5.15 have been much reduced.
  - partitioning has one case of undefined behavior (UB) due
  to a missing integer-initialization.
  - keyboardq QML module now works correctly.
  - QML modules with no surrounding navigation -- this is basically a
  special case for full-screen Calamares -- now have margins suitable
  for full-screen use.
  - PythonQt modules are increasingly on the way out.
  - The netinstall module has had some minor UI tweaks.
  - Partitioning now tries harder to avoid floppy drives.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1598270400">- Split -lang package</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1605873600">- Update to version 3.2.34.
  * Modules
  * The *keyboard* module had a regression in which it no-longer
    painted the keycaps in the keyboard preview.
  * The *plasmalnf* module did not set all of the look-and-feel
    values in the target system. (reported by Bluestar Linux)
  * In the *users* module, warnings about the strength of the
    password are now correctly pluralized when possible.
  * In the *users* module, if ICU is installed, the user's full
    name is automatically transliterated to US-ASCII
    (for some locales; this will need tweaking) so that the login
    name is acceptable.
- Rebase 3.2.15-unpackfs.conf_Leap15.patch
- Fix spec file, license file move to LICENSES/GPL-3.0-or-later.txt</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1610712000">- Add compatibility with qml-autoreqprov</changelog>
  <changelog author="&lt;opensuse.lietuviu.kalba@gmail.com&gt;" date="1612094400">- Update to version 3.2.35.1:
  * The partition module now supports a not-full-disk-encryption setup,
    where /boot is not encrypted, but the rest of the system is.
  * Fixed issue then the initcpiocfg module would sometimes configure
    the system to ask for a passphrase, when none is needed.
  * The plasmalnf module has been substantially rewritten, so that
    it can support a QML version of the module in future. The UI has
    changed a little, and now displays more themes than before.
- Add patch 3.2-networkcfg.patch to prevent writing
    /etc/resolv.conf as a regular file – let openSUSE to create it as
    a symlink automatically.
- Set default source directory to "/run/overlay/rootfsbase" as
    it is with Kiwi from 9.21.18 (in older Kiwi was "/run/rootfsbase").
    See https://github.com/OSInside/kiwi/issues/1558</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1612785600">- Update to version 3.2.36.
  * It is now possible to hide the *next* and *back* buttons during
    the "exec" phase of installation. Thanks Anubhav.
  * The Calamares CI has migrated to GitHub actions. Thanks Jonas.
  * *bootloader* now uses the current file names for the UEFI Secure
    Boot shim instead of obsolete ones.
  * The *mount* module creates swap in its own subvolume, if btrfs
    is used.
  * *partition* includes more information about what it will do,
    including GPT partition types (in human-readable format, if
    possible).
  * Some edge-cases with overlay filesystems have been resolved in
    the *partition* module.
  * During the creation of filesystems and partitions, automounting
    is turned off (if DBus is available, and the host system supports
    KDE Solid automount control). This should reduce the number of
    failed installations if automount grabs partitions while they
    are being created. The code is prepared to handle other ways
    to control automount-behavior as well.</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1685707200">- Update to version 3.2.62
  * See changelog at https://github.com/calamares/calamares/blob/calamares/CHANGES-3.2
- Refresh patches
- Remove obsolete rpmlintrc entries
- Update obsolete field Supplements using packageand</changelog>
</package>
<package pkgid="3baa14b42a1d601bb8b4b4f2c110438f4f2869fcbd672cac23890eb98c9886acb1873f04c4d3ed985b218cc5ce95f355e4b992cf57b9c2da27987699a726f9b7" name="calamares-lang" arch="noarch">
  <version epoch="0" ver="3.2.62" rel="bp160.1.14"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1590667200">- Correct license</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1591185600">- Add patch Qt515_QPainterPath.patch to add missing includes
  (QPainterPath) for Qt 5.15 compatibility.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591531200">- Update to version 3.2.25:
  - Slideshow improvements
  - Welcome QML module is now pretty much complete.
- Removed Qt515_QPainterPath.patch: contained in upstream</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1594468800">- calamares.keyring updated (gh#calamares/calamares#1450)
- Changed 3.2-packages.conf.patch: updated for new version
- Update to version 3.2.27:
  - locale put some more places into the correct timezone visually;
  for instance Norfolk Island gave up UTC+11.5 in 2015 and is now
  UTC+11, but Calamares still showed it in a zone separate from UTC+11.
  - localeq can now properly switch between on &amp; offline mode,
  it detects internet status through js.
  - tracking now supports kuserfeedback configuration.
  - welcomeq added the GEOIP configuration option, so locale can be
  initially set according to IP address.
  - Welcome to Azerbaijani translations. These are available
  in two variations, Azerbaijani and Azerbaijani (Azerbaijan).
  - Warnings while building with Qt 5.15 have been much reduced.
  - partitioning has one case of undefined behavior (UB) due
  to a missing integer-initialization.
  - keyboardq QML module now works correctly.
  - QML modules with no surrounding navigation -- this is basically a
  special case for full-screen Calamares -- now have margins suitable
  for full-screen use.
  - PythonQt modules are increasingly on the way out.
  - The netinstall module has had some minor UI tweaks.
  - Partitioning now tries harder to avoid floppy drives.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1598270400">- Split -lang package</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1605873600">- Update to version 3.2.34.
  * Modules
  * The *keyboard* module had a regression in which it no-longer
    painted the keycaps in the keyboard preview.
  * The *plasmalnf* module did not set all of the look-and-feel
    values in the target system. (reported by Bluestar Linux)
  * In the *users* module, warnings about the strength of the
    password are now correctly pluralized when possible.
  * In the *users* module, if ICU is installed, the user's full
    name is automatically transliterated to US-ASCII
    (for some locales; this will need tweaking) so that the login
    name is acceptable.
- Rebase 3.2.15-unpackfs.conf_Leap15.patch
- Fix spec file, license file move to LICENSES/GPL-3.0-or-later.txt</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1610712000">- Add compatibility with qml-autoreqprov</changelog>
  <changelog author="&lt;opensuse.lietuviu.kalba@gmail.com&gt;" date="1612094400">- Update to version 3.2.35.1:
  * The partition module now supports a not-full-disk-encryption setup,
    where /boot is not encrypted, but the rest of the system is.
  * Fixed issue then the initcpiocfg module would sometimes configure
    the system to ask for a passphrase, when none is needed.
  * The plasmalnf module has been substantially rewritten, so that
    it can support a QML version of the module in future. The UI has
    changed a little, and now displays more themes than before.
- Add patch 3.2-networkcfg.patch to prevent writing
    /etc/resolv.conf as a regular file – let openSUSE to create it as
    a symlink automatically.
- Set default source directory to "/run/overlay/rootfsbase" as
    it is with Kiwi from 9.21.18 (in older Kiwi was "/run/rootfsbase").
    See https://github.com/OSInside/kiwi/issues/1558</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1612785600">- Update to version 3.2.36.
  * It is now possible to hide the *next* and *back* buttons during
    the "exec" phase of installation. Thanks Anubhav.
  * The Calamares CI has migrated to GitHub actions. Thanks Jonas.
  * *bootloader* now uses the current file names for the UEFI Secure
    Boot shim instead of obsolete ones.
  * The *mount* module creates swap in its own subvolume, if btrfs
    is used.
  * *partition* includes more information about what it will do,
    including GPT partition types (in human-readable format, if
    possible).
  * Some edge-cases with overlay filesystems have been resolved in
    the *partition* module.
  * During the creation of filesystems and partitions, automounting
    is turned off (if DBus is available, and the host system supports
    KDE Solid automount control). This should reduce the number of
    failed installations if automount grabs partitions while they
    are being created. The code is prepared to handle other ways
    to control automount-behavior as well.</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1685707200">- Update to version 3.2.62
  * See changelog at https://github.com/calamares/calamares/blob/calamares/CHANGES-3.2
- Refresh patches
- Remove obsolete rpmlintrc entries
- Update obsolete field Supplements using packageand</changelog>
</package>
<package pkgid="e32754371b79d64d86f7ffe7feab2e029cb4ec9a91d4555967af3aa9a0fd76132866d2f4ffb042198d5149ba4fbe50340aa935b5efbbb951365c4e58870367c0" name="calamares-webview" arch="x86_64">
  <version epoch="0" ver="3.2.62" rel="bp160.1.14"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1590667200">- Correct license</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1591185600">- Add patch Qt515_QPainterPath.patch to add missing includes
  (QPainterPath) for Qt 5.15 compatibility.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1591531200">- Update to version 3.2.25:
  - Slideshow improvements
  - Welcome QML module is now pretty much complete.
- Removed Qt515_QPainterPath.patch: contained in upstream</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1594468800">- calamares.keyring updated (gh#calamares/calamares#1450)
- Changed 3.2-packages.conf.patch: updated for new version
- Update to version 3.2.27:
  - locale put some more places into the correct timezone visually;
  for instance Norfolk Island gave up UTC+11.5 in 2015 and is now
  UTC+11, but Calamares still showed it in a zone separate from UTC+11.
  - localeq can now properly switch between on &amp; offline mode,
  it detects internet status through js.
  - tracking now supports kuserfeedback configuration.
  - welcomeq added the GEOIP configuration option, so locale can be
  initially set according to IP address.
  - Welcome to Azerbaijani translations. These are available
  in two variations, Azerbaijani and Azerbaijani (Azerbaijan).
  - Warnings while building with Qt 5.15 have been much reduced.
  - partitioning has one case of undefined behavior (UB) due
  to a missing integer-initialization.
  - keyboardq QML module now works correctly.
  - QML modules with no surrounding navigation -- this is basically a
  special case for full-screen Calamares -- now have margins suitable
  for full-screen use.
  - PythonQt modules are increasingly on the way out.
  - The netinstall module has had some minor UI tweaks.
  - Partitioning now tries harder to avoid floppy drives.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1598270400">- Split -lang package</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1605873600">- Update to version 3.2.34.
  * Modules
  * The *keyboard* module had a regression in which it no-longer
    painted the keycaps in the keyboard preview.
  * The *plasmalnf* module did not set all of the look-and-feel
    values in the target system. (reported by Bluestar Linux)
  * In the *users* module, warnings about the strength of the
    password are now correctly pluralized when possible.
  * In the *users* module, if ICU is installed, the user's full
    name is automatically transliterated to US-ASCII
    (for some locales; this will need tweaking) so that the login
    name is acceptable.
- Rebase 3.2.15-unpackfs.conf_Leap15.patch
- Fix spec file, license file move to LICENSES/GPL-3.0-or-later.txt</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1610712000">- Add compatibility with qml-autoreqprov</changelog>
  <changelog author="&lt;opensuse.lietuviu.kalba@gmail.com&gt;" date="1612094400">- Update to version 3.2.35.1:
  * The partition module now supports a not-full-disk-encryption setup,
    where /boot is not encrypted, but the rest of the system is.
  * Fixed issue then the initcpiocfg module would sometimes configure
    the system to ask for a passphrase, when none is needed.
  * The plasmalnf module has been substantially rewritten, so that
    it can support a QML version of the module in future. The UI has
    changed a little, and now displays more themes than before.
- Add patch 3.2-networkcfg.patch to prevent writing
    /etc/resolv.conf as a regular file – let openSUSE to create it as
    a symlink automatically.
- Set default source directory to "/run/overlay/rootfsbase" as
    it is with Kiwi from 9.21.18 (in older Kiwi was "/run/rootfsbase").
    See https://github.com/OSInside/kiwi/issues/1558</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1612785600">- Update to version 3.2.36.
  * It is now possible to hide the *next* and *back* buttons during
    the "exec" phase of installation. Thanks Anubhav.
  * The Calamares CI has migrated to GitHub actions. Thanks Jonas.
  * *bootloader* now uses the current file names for the UEFI Secure
    Boot shim instead of obsolete ones.
  * The *mount* module creates swap in its own subvolume, if btrfs
    is used.
  * *partition* includes more information about what it will do,
    including GPT partition types (in human-readable format, if
    possible).
  * Some edge-cases with overlay filesystems have been resolved in
    the *partition* module.
  * During the creation of filesystems and partitions, automounting
    is turned off (if DBus is available, and the host system supports
    KDE Solid automount control). This should reduce the number of
    failed installations if automount grabs partitions while they
    are being created. The code is prepared to handle other ways
    to control automount-behavior as well.</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1685707200">- Update to version 3.2.62
  * See changelog at https://github.com/calamares/calamares/blob/calamares/CHANGES-3.2
- Refresh patches
- Remove obsolete rpmlintrc entries
- Update obsolete field Supplements using packageand</changelog>
</package>
<package pkgid="ae318bfd225b8e596ca5f6476f9da1b785318cca613d18c4119ae8e809532eb7354b330b2fa71fe8a12efbf909d955f144705ea0b8671ffdf4521110faac4030" name="calamaris" arch="noarch">
  <version epoch="0" ver="2.59" rel="bp160.1.9"/>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="tcrhak@suse.cz" date="1045483200">- update to version 2.57</changelog>
  <changelog author="tcrhak@suse.cz" date="1059480000">- update to version 2.58</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
  <changelog author="tcrhak@suse.cz" date="1091793600">- update to 2.59</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update download url
- Clenup spec file with spec-cleaner
- Build as noarch</changelog>
  <changelog author="mpluskal@suse.com" date="1529409600">- More spec file modernisations</changelog>
  <changelog author="Kasimir _ &lt;kasimir_@outlook.de&gt;" date="1566820800">- Fix generation of reports with Perl &gt;= 5.12 (boo#1145328)
  + 0001_perl.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="3ce73967613c81983586e1e1c932a73fc4e7625bece5585c4a2c4622367965bdfaa7d47507350af1f3d62838b04c11aea313dfeed515a79a74a45f3fb847bf1e" name="calc" arch="x86_64">
  <version epoch="0" ver="2.15.0.1" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Update to 2.14.1.5:
  * Fixed FUNCPTR typedef in hist.c to fix deprecated compiler warnings.
  * Fixed when USE_READLINE, READLINE_LIB, READLINE_EXTRAS, and
    READLINE_INCLUDE are set to empty (disable use of the GNU-readline
    facility).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1685620800">- Update to 2.14.1.6:
  * Fixed version numbers in two cases in CHANGES that referred
    to the 2.14.2.x instead of 2.14.1.x.
  * Rename MINGW Makefile variable (a holdover from MINGW32_NT-5.0)
    to OSNAME.
  * Fixed FUNCPTR typedef in hist.c to fix deprecated compiler warnings.
  * Fixed when USE_READLINE, READLINE_LIB, READLINE_EXTRAS, and
    READLINE_INCLUDE are set to empty (disable use of the GNU-readline
    facility).
  * Fix cases of spaces before tabs in Makefile and Makefile.simple.
  * Fixed obsolete references to the atoz() in LIBRARY to use the
    correct internal function name of str2z().
  * Fixed obsolete references to the atoq() in LIBRARY to use the
    correct internal function name of str2q().
  * Document in help/unexpected that * operator has has a higher
    precedence than &lt;&lt; in calc, which differs from C.</changelog>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1690027200">- Update to 2.14.2.0:
  * Ported calc to the s390x IBM Mainframe</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690459200">- Update to 2.14.2.1:
  * Added cal/fnv_tool.cal, a calc resource file defining:
    find_fnv_prime(bits)
    deprecated_fnv0(bits,fnv_prime,string)
    fnv_offset_basis(bits,fnv_prime)
    fnv1a_style_hash(bits,fnv_prime,prev_hash,string)
  * Fixed sorted order of cal/README.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804800">- Update to 2.14.2.2:
  * Removed references to obsolete Email addresses.
  * macOS Darwin defaults LCC to "cc".</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1691064000">- Update to 2.14.3.0:
  * The Darwin specific ${DARWIN_ARCH}, thay by default was unset,
    is now the ${ARCH_CFLAGS} Makefile variable.  Comments about
    various "-arch name" have been moved to the ${ARCH_CFLAGS} area.
  * Improved the output of the calcinfo rule by adding echos
    of various uname values as well as some top Makefile variables.
  * Fixed the BUGS file with respect to using `make debug`.
  * Added a final ls of `debug.out` for `make debug`.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1692100800">- Update to 2.14.3.4:
  * Fix typo in the make debug Makefile rule.
  * Fix install of statically linked calc under macOS
  * Update comments in Makefile.local about using -fsanitize
  * Add Makefile.local comments for macOS reduce dependency chains
  * Fix calc when CUSTOM is undefined, remove PASSDOWN values
  * Fix use of -dead_strip_dylibs for macOS linker</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1692360000">- Update to 2.14.3.5:
  * Under macOS, to reduce dependency chains, we remove functions
    and data that are unreachable by the entry point or exported
    symbols.  In particular, the macOS linker is used with both
    "-dead_strip" and "-dead_strip_dylibs".
  * The libcalc shared library is now linked with libcustcalc.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696420800">- Update to 2.15.0.0:
  * Added the several new trigonometric functions
  * Added log2(x [,eps]) builtin function
  * The sign element in a ZVALUE is now of type SIGN, which is either
    SB32 when MAJOR_VER &lt; 3, or a bool otherwise
  * Added new logn(x, n [,eps]) builtin to compute logarithms to base n.
- Add calc-2.15.0.0-versionh.patch to fix build
  See gh/lcn2/calc#112</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696507200">- Update to 2.15.0.1:
  * The tarball for calc version 2.15.0.0 was missing version.h.
    The version.h is now listed as part of the calc distribution.
    See gh/lcn2/calc#112</changelog>
</package>
<package pkgid="7755df5a9251012366732e8c3fdec7058f56cf70cfc5589a003e45e38b7540e8b5d6afeec290e73df50531be72dcf8983842b4f13c99f96b23d0fd68d8807619" name="calc-devel" arch="x86_64">
  <version epoch="0" ver="2.15.0.1" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1678795200">- Update to 2.14.1.5:
  * Fixed FUNCPTR typedef in hist.c to fix deprecated compiler warnings.
  * Fixed when USE_READLINE, READLINE_LIB, READLINE_EXTRAS, and
    READLINE_INCLUDE are set to empty (disable use of the GNU-readline
    facility).</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1685620800">- Update to 2.14.1.6:
  * Fixed version numbers in two cases in CHANGES that referred
    to the 2.14.2.x instead of 2.14.1.x.
  * Rename MINGW Makefile variable (a holdover from MINGW32_NT-5.0)
    to OSNAME.
  * Fixed FUNCPTR typedef in hist.c to fix deprecated compiler warnings.
  * Fixed when USE_READLINE, READLINE_LIB, READLINE_EXTRAS, and
    READLINE_INCLUDE are set to empty (disable use of the GNU-readline
    facility).
  * Fix cases of spaces before tabs in Makefile and Makefile.simple.
  * Fixed obsolete references to the atoz() in LIBRARY to use the
    correct internal function name of str2z().
  * Fixed obsolete references to the atoq() in LIBRARY to use the
    correct internal function name of str2q().
  * Document in help/unexpected that * operator has has a higher
    precedence than &lt;&lt; in calc, which differs from C.</changelog>
  <changelog author="Sarah Kriesch &lt;sarah.kriesch@opensuse.org&gt;" date="1690027200">- Update to 2.14.2.0:
  * Ported calc to the s390x IBM Mainframe</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690459200">- Update to 2.14.2.1:
  * Added cal/fnv_tool.cal, a calc resource file defining:
    find_fnv_prime(bits)
    deprecated_fnv0(bits,fnv_prime,string)
    fnv_offset_basis(bits,fnv_prime)
    fnv1a_style_hash(bits,fnv_prime,prev_hash,string)
  * Fixed sorted order of cal/README.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804800">- Update to 2.14.2.2:
  * Removed references to obsolete Email addresses.
  * macOS Darwin defaults LCC to "cc".</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1691064000">- Update to 2.14.3.0:
  * The Darwin specific ${DARWIN_ARCH}, thay by default was unset,
    is now the ${ARCH_CFLAGS} Makefile variable.  Comments about
    various "-arch name" have been moved to the ${ARCH_CFLAGS} area.
  * Improved the output of the calcinfo rule by adding echos
    of various uname values as well as some top Makefile variables.
  * Fixed the BUGS file with respect to using `make debug`.
  * Added a final ls of `debug.out` for `make debug`.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1692100800">- Update to 2.14.3.4:
  * Fix typo in the make debug Makefile rule.
  * Fix install of statically linked calc under macOS
  * Update comments in Makefile.local about using -fsanitize
  * Add Makefile.local comments for macOS reduce dependency chains
  * Fix calc when CUSTOM is undefined, remove PASSDOWN values
  * Fix use of -dead_strip_dylibs for macOS linker</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1692360000">- Update to 2.14.3.5:
  * Under macOS, to reduce dependency chains, we remove functions
    and data that are unreachable by the entry point or exported
    symbols.  In particular, the macOS linker is used with both
    "-dead_strip" and "-dead_strip_dylibs".
  * The libcalc shared library is now linked with libcustcalc.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696420800">- Update to 2.15.0.0:
  * Added the several new trigonometric functions
  * Added log2(x [,eps]) builtin function
  * The sign element in a ZVALUE is now of type SIGN, which is either
    SB32 when MAJOR_VER &lt; 3, or a bool otherwise
  * Added new logn(x, n [,eps]) builtin to compute logarithms to base n.
- Add calc-2.15.0.0-versionh.patch to fix build
  See gh/lcn2/calc#112</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1696507200">- Update to 2.15.0.1:
  * The tarball for calc version 2.15.0.0 was missing version.h.
    The version.h is now listed as part of the calc distribution.
    See gh/lcn2/calc#112</changelog>
</package>
<package pkgid="c3ae085fafcc598010320b8cba4f6032192ef1fe04ecec899e2823f35264ee6fa1b3f791ac68d5aab84b89bbc0636dc28a42ac92cd4f0e613781236316cd18c3" name="calcurse" arch="x86_64">
  <version epoch="0" ver="4.8.1" rel="bp160.1.13"/>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 4.2.0
  * In the calendar panel, days with non-recurrent items now have
    another color as days containing recurrent items only.
  * Automatically select new appointments/events after creation.
  * Support for (optional) dates when specifying the start/end time of items.
    Allows for easily moving items and adding appointments without switching
    the selected day beforehand.
  * Encoding fixes in calcurse-caldav
  * Avoid notification bar artifacts after leaving calcurse.
  * Fixes to the key binding pagination
  * Do not change selection unexpectedly after modifying items.
- Remove useless dependencies
  * autoconf
  * automake
  * gcc
  * gettext
  * make</changelog>
  <changelog author="rpm@fthiessen.de" date="1490270400">- Update to version 4.2.2
  * Prevent free-before-init of timstr
  * Prevent segfault when all todo items are hidden
  * Fix visible region after loading list box items
  * calcurse-caldav: Fix scrambled comment
- Added keyring and asc file for verification.</changelog>
  <changelog author="avindra@opensuse.org" date="1516968000">- Update to version 4.3.0
  * Compatibility notes:
  - Month names and abbreviated day names now honor the locale
    setting
  - The phase of moon feature was removed
  * New features:
  - The selected day in the calendar now stands out
  - Both the position and the date format used for the heading in
    the appointments panel are configurable
  - Support for CTRL-U and CTRL-G in prompts
  - Support for using all keys recognized by ncurses,
    particularly UTF-8 keys, in key bindings
  - Support for CALCURSE_EDITOR, CALCURSE_PAGER and
    CALCURSE_MERGETOOL environment variables to override the
    default editor, pager and merge tool
  - Several improvements to the reload and save routines. The
    save routine now detects external changes to the data files
    and no longer blindly overwrites data which was edited
    externally. In case of external changes, different options
    are offered, one of them being the execution of the merge
    tool to merge external changes and changes done from the
    running calcurse instance. The reload routine also no longer
    performs a reload if both the external data files and the
    local data are unchanged.
  - Several improvements to the CalDAV synchronization script,
    including OAuth2 support and instructions on how to
    synchronize calcurse with Google Calendar
  - Support for passing the password as a command-line argument
    to the CalDAV synchronization script
  - A new utility, called calcurse-dateutil, which can be used
    to create "extended recurrent events" such as events
    occurring on the third Thursday of each month
  * Bug Fixes:
  - Gracefully parse iCal parameters with colons
  - Fixes to the notification feature affecting recurrent
    appointments
  - Do not crash when changing colors
  - Avoid fatal error when using the help command
  - Avoid empty warning box when key is already in use
  - Several fixes to the calcurse-caldav synchronization script
    to allow for synchronizing with NextCloud servers
  - Proper support for punctual appointments starting at 00:00
  - Proper ISO 8601 week numbering
  - The delete key no longer acts as backspace
  - Proper parsing of date-time strings
- cleanup with spec-cleaner
- remove chmod line, no longer needed</changelog>
  <changelog author="mvetter@suse.com" date="1559044800">- Update to 4.4.0:
  Compatibility notes:
  * The -F option is superseded by -P which can be used to remove certain entries from the data file (instead of keeping them). Please consult the man page for details.
  New features:
  * Major overhaul of the input routines in interactive mode (implemented by Lars Henriksen).
  * Support for separate data and configuration file directories (partly implemented by Quentin Hibon).
  * A --filter-invert option which inverts the other filter options (implemented by Lars Henriksen).
  * Support for negative date ranges when using the -d command line option.
  New calcurse-caldav features:
  * The SyncFilter configuration option which allows for specifying the types of items synced from/to the server (implemented by Satvik Sharma).
  * Support for a CALCURSE_CALDAV_PASSWORD environment variable which can be used to pass a password securely from another program (implemented by Randy Ramos).
  * HTTP support (implemented by Dino Macri).
  * Authorization removed from debug logs by default.
  Bug fixes:
  * Fix for an appointment becoming an event when entering an invalid start time (implemented by Lars Henriksen).
  * Fix for the deletion of a multi-day recurrent appointment (implemented by Lars Henriksen).
  * Fixes for potential database inconsistencies caused by appointments which end before they begin (implemented by Lars Henriksen).
  * Several fixes dealing with DST (implemented by Lars Henriksen).
  * Fixes for date range queries (implemented by Lars Henriksen).
  * Fix for segmentation fault with recent ncurses implementations.
  * Fix for potential segmentation fault in mutex handling.
  * RFC5545-compliant DTSTART in iCal exports (patch by Quentin Hibon).
  * Fix for not closing the stream after exporting iCal items (patch by crvs).
  * Fix for priority parsing in iCal imports (patch by dott).
  * Various improvements to the change detection and save conflict resolution code (implemented by Lars Henriksen).
  * Several improvements to concurrency control (implemented by Lars Henriksen).
  * Various fixes to the scrollbar (implemented by Lars Henriksen).
  * Various potential buffer overflow fixes.
  * A more robust command line argument parser (implemented by Lars Henriksen).
  * Various improvements to the UTF-8 handling code (implemented by Lars Henriksen).
  * Several stability and portability fixes (partly provided by Mikolaj Kucharski).
  * Several stability fixes in the calcurse-caldav script.</changelog>
  <changelog author="mvetter@suse.com" date="1560859200">- Update to 4.5.0:
  Compatibility notes:
  * The --conf command line option has been renamed to --confdir and the --directory option has been renamed to --datadir.
  New features:
  * Multiple days support
  * Experimental vdir support: For details, refer to contrib/vdir/README.md in the calcurse source tree.
  * Support for editing recurrence exceptions (implemented by Lars Henriksen).
  New calcurse-caldav features:
  * Custom data directory support (implemented by vxid).
  * A new Troubleshooting section in the calcurse-caldav README.md (added by Randy Ramos).
  Bug fixes:
  * Various fixes in the notification system (implemented by Lars Henriksen).
  * Fix for a calendar redraw issue (implemented by Lars Henriksen).
  * Fix a potential deadlock (implemented by Lars Henriksen).
  * Use ICALDATETIMEFMT for EXDATE in iCal exports (implemented by Henrik Grimler).
  * Fix for the compile-time AsciiDoc check (implemented by Brandon Munger).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 4.6.0:
  * XDG base directory support: While using ~/.calcurse/ is still supported for
  backwards compatibility, we recommend putting your configuration files in
  ~/.config/calcurse/ and your data files in ~/.local/share/calcurse/ instead
  (implemented by Nitroretro).
  * Configurable text for empty days
  * Support RET to set the todo item priority to 0
  * Various improvements in iCal imports
  * Escape necessary characters in SUMMARY on export (implemented by Kelvin Jackson).
  * Update notification bar properly when certain recurrent appointments are deleted (implemented by Lars Henriksen).
  * Fix save of interactively imported data (implemented by Lars Henriksen).
  * Restore ability to edit recurrent items without exceptions (reported and fixed by Lars Henriksen).
  * Fix monthly and yearly recurrence algorithms for frequencies greater than one (reported and fixed by Lars Henriksen).
  * Fix DST issues (reported by Lars Henriksen and others, fixed by Lars Henriksen).</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1612699200">- Update to version 4.7.0
  * Compatibility notes
  - Note file contents are now exported as DESCRIPTION in iCal exports
  - The item deletion menu has been redesigned
  - The systemdialogs option has been removed from the configuration
  * New features:
  - Support for advanced recurrence rules
  - Repeat counts are accepted in the UI as an alternative to repetition
    end dates for recurrent items
  - The :previous and :next commands can be used to jump to the previous/next
    occurrence of the currently selected recurrent item.
  - Various improvements in iCal imports
  - Notes are now displayed in the item view dialog
  * Bug fixes
  - Fixed formatting of DTSTART for recurrent events
  - Improvements in hook execution
  - Checks to make sure the config and data dirs exist</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618401600">- Update to version 4.7.1
  * Bug fixes:
  - Multiple iCal import fixes: Make iCal event import independent
    of property ordering. Return failure if an item is skipped.
    Avoid double free on import errors. Fix parsing of UNTIL.
  - Do not remove an empty note file after edit session.
  - Keep internal linked list sorted when moving items.
  - Prevent external hook/notification commands
    from interacting with the UI.
  * calcurse-caldav bug fixes:
  - Allow non-ASCII characters in username and password
  - Improved error handling for the configuration file.
    Unknown keys are now reported as errors instead of ignored.
  - Always request href from server after pushing a new object to prevent
    items from being erroneously deleted or created when path contains
    characters that need to be URL-encoded.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1658404800">- Update to version 4.8.0
  * New features:
  - Support any weekday as first day of week; previously, only Sunday and
    Monday were allowed.
  - Configuration of the format in which appointment time is displayed.
  - Actions without key bindings.
  - generic-prev-view key binding to cycle backwards through windows.
  - Support for Home/End keys in text input mode.
  * Bug fixes:
  - Support compilation on big-endian systems.
  - Fixed --docdir support.
  - Allow newlines in iCal SUMMARY by replacing them with blanks.
  - Fixed sidebar configuration sometimes not increasing width.
  - Layout change recognizes changed appointment space; before this change,
    a layout change did not update the maximum number of appointments visible
    until the config menu was left.
  * calcurse-caldav bug fixes:
  - Fixed InsecureSSL support.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 4.8.1:
  * Fixed characters in weekly view.
  * Fixed import for iCal files with empty description
  * Fixed handling of note files edited outside calcurse
  * Fixed handling of recurrent open-ended appointments
  * Default description for items with empty descriptions
  * The PasswordCommand option can now be used to manage passwords
    in an external program and is the new recommended way of
    storing passwords for calcurse-caldav</changelog>
</package>
<package pkgid="7785744a168a14d9cebb4c500deed34dad0e1814671ff6027b53b007354540bfefb9a24c7e71ce9f72bb3fde4bb51976ff517a78a76a141d38f282bd0780588a" name="calcurse-lang" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="bp160.1.13"/>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 4.2.0
  * In the calendar panel, days with non-recurrent items now have
    another color as days containing recurrent items only.
  * Automatically select new appointments/events after creation.
  * Support for (optional) dates when specifying the start/end time of items.
    Allows for easily moving items and adding appointments without switching
    the selected day beforehand.
  * Encoding fixes in calcurse-caldav
  * Avoid notification bar artifacts after leaving calcurse.
  * Fixes to the key binding pagination
  * Do not change selection unexpectedly after modifying items.
- Remove useless dependencies
  * autoconf
  * automake
  * gcc
  * gettext
  * make</changelog>
  <changelog author="rpm@fthiessen.de" date="1490270400">- Update to version 4.2.2
  * Prevent free-before-init of timstr
  * Prevent segfault when all todo items are hidden
  * Fix visible region after loading list box items
  * calcurse-caldav: Fix scrambled comment
- Added keyring and asc file for verification.</changelog>
  <changelog author="avindra@opensuse.org" date="1516968000">- Update to version 4.3.0
  * Compatibility notes:
  - Month names and abbreviated day names now honor the locale
    setting
  - The phase of moon feature was removed
  * New features:
  - The selected day in the calendar now stands out
  - Both the position and the date format used for the heading in
    the appointments panel are configurable
  - Support for CTRL-U and CTRL-G in prompts
  - Support for using all keys recognized by ncurses,
    particularly UTF-8 keys, in key bindings
  - Support for CALCURSE_EDITOR, CALCURSE_PAGER and
    CALCURSE_MERGETOOL environment variables to override the
    default editor, pager and merge tool
  - Several improvements to the reload and save routines. The
    save routine now detects external changes to the data files
    and no longer blindly overwrites data which was edited
    externally. In case of external changes, different options
    are offered, one of them being the execution of the merge
    tool to merge external changes and changes done from the
    running calcurse instance. The reload routine also no longer
    performs a reload if both the external data files and the
    local data are unchanged.
  - Several improvements to the CalDAV synchronization script,
    including OAuth2 support and instructions on how to
    synchronize calcurse with Google Calendar
  - Support for passing the password as a command-line argument
    to the CalDAV synchronization script
  - A new utility, called calcurse-dateutil, which can be used
    to create "extended recurrent events" such as events
    occurring on the third Thursday of each month
  * Bug Fixes:
  - Gracefully parse iCal parameters with colons
  - Fixes to the notification feature affecting recurrent
    appointments
  - Do not crash when changing colors
  - Avoid fatal error when using the help command
  - Avoid empty warning box when key is already in use
  - Several fixes to the calcurse-caldav synchronization script
    to allow for synchronizing with NextCloud servers
  - Proper support for punctual appointments starting at 00:00
  - Proper ISO 8601 week numbering
  - The delete key no longer acts as backspace
  - Proper parsing of date-time strings
- cleanup with spec-cleaner
- remove chmod line, no longer needed</changelog>
  <changelog author="mvetter@suse.com" date="1559044800">- Update to 4.4.0:
  Compatibility notes:
  * The -F option is superseded by -P which can be used to remove certain entries from the data file (instead of keeping them). Please consult the man page for details.
  New features:
  * Major overhaul of the input routines in interactive mode (implemented by Lars Henriksen).
  * Support for separate data and configuration file directories (partly implemented by Quentin Hibon).
  * A --filter-invert option which inverts the other filter options (implemented by Lars Henriksen).
  * Support for negative date ranges when using the -d command line option.
  New calcurse-caldav features:
  * The SyncFilter configuration option which allows for specifying the types of items synced from/to the server (implemented by Satvik Sharma).
  * Support for a CALCURSE_CALDAV_PASSWORD environment variable which can be used to pass a password securely from another program (implemented by Randy Ramos).
  * HTTP support (implemented by Dino Macri).
  * Authorization removed from debug logs by default.
  Bug fixes:
  * Fix for an appointment becoming an event when entering an invalid start time (implemented by Lars Henriksen).
  * Fix for the deletion of a multi-day recurrent appointment (implemented by Lars Henriksen).
  * Fixes for potential database inconsistencies caused by appointments which end before they begin (implemented by Lars Henriksen).
  * Several fixes dealing with DST (implemented by Lars Henriksen).
  * Fixes for date range queries (implemented by Lars Henriksen).
  * Fix for segmentation fault with recent ncurses implementations.
  * Fix for potential segmentation fault in mutex handling.
  * RFC5545-compliant DTSTART in iCal exports (patch by Quentin Hibon).
  * Fix for not closing the stream after exporting iCal items (patch by crvs).
  * Fix for priority parsing in iCal imports (patch by dott).
  * Various improvements to the change detection and save conflict resolution code (implemented by Lars Henriksen).
  * Several improvements to concurrency control (implemented by Lars Henriksen).
  * Various fixes to the scrollbar (implemented by Lars Henriksen).
  * Various potential buffer overflow fixes.
  * A more robust command line argument parser (implemented by Lars Henriksen).
  * Various improvements to the UTF-8 handling code (implemented by Lars Henriksen).
  * Several stability and portability fixes (partly provided by Mikolaj Kucharski).
  * Several stability fixes in the calcurse-caldav script.</changelog>
  <changelog author="mvetter@suse.com" date="1560859200">- Update to 4.5.0:
  Compatibility notes:
  * The --conf command line option has been renamed to --confdir and the --directory option has been renamed to --datadir.
  New features:
  * Multiple days support
  * Experimental vdir support: For details, refer to contrib/vdir/README.md in the calcurse source tree.
  * Support for editing recurrence exceptions (implemented by Lars Henriksen).
  New calcurse-caldav features:
  * Custom data directory support (implemented by vxid).
  * A new Troubleshooting section in the calcurse-caldav README.md (added by Randy Ramos).
  Bug fixes:
  * Various fixes in the notification system (implemented by Lars Henriksen).
  * Fix for a calendar redraw issue (implemented by Lars Henriksen).
  * Fix a potential deadlock (implemented by Lars Henriksen).
  * Use ICALDATETIMEFMT for EXDATE in iCal exports (implemented by Henrik Grimler).
  * Fix for the compile-time AsciiDoc check (implemented by Brandon Munger).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 4.6.0:
  * XDG base directory support: While using ~/.calcurse/ is still supported for
  backwards compatibility, we recommend putting your configuration files in
  ~/.config/calcurse/ and your data files in ~/.local/share/calcurse/ instead
  (implemented by Nitroretro).
  * Configurable text for empty days
  * Support RET to set the todo item priority to 0
  * Various improvements in iCal imports
  * Escape necessary characters in SUMMARY on export (implemented by Kelvin Jackson).
  * Update notification bar properly when certain recurrent appointments are deleted (implemented by Lars Henriksen).
  * Fix save of interactively imported data (implemented by Lars Henriksen).
  * Restore ability to edit recurrent items without exceptions (reported and fixed by Lars Henriksen).
  * Fix monthly and yearly recurrence algorithms for frequencies greater than one (reported and fixed by Lars Henriksen).
  * Fix DST issues (reported by Lars Henriksen and others, fixed by Lars Henriksen).</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1612699200">- Update to version 4.7.0
  * Compatibility notes
  - Note file contents are now exported as DESCRIPTION in iCal exports
  - The item deletion menu has been redesigned
  - The systemdialogs option has been removed from the configuration
  * New features:
  - Support for advanced recurrence rules
  - Repeat counts are accepted in the UI as an alternative to repetition
    end dates for recurrent items
  - The :previous and :next commands can be used to jump to the previous/next
    occurrence of the currently selected recurrent item.
  - Various improvements in iCal imports
  - Notes are now displayed in the item view dialog
  * Bug fixes
  - Fixed formatting of DTSTART for recurrent events
  - Improvements in hook execution
  - Checks to make sure the config and data dirs exist</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1618401600">- Update to version 4.7.1
  * Bug fixes:
  - Multiple iCal import fixes: Make iCal event import independent
    of property ordering. Return failure if an item is skipped.
    Avoid double free on import errors. Fix parsing of UNTIL.
  - Do not remove an empty note file after edit session.
  - Keep internal linked list sorted when moving items.
  - Prevent external hook/notification commands
    from interacting with the UI.
  * calcurse-caldav bug fixes:
  - Allow non-ASCII characters in username and password
  - Improved error handling for the configuration file.
    Unknown keys are now reported as errors instead of ignored.
  - Always request href from server after pushing a new object to prevent
    items from being erroneously deleted or created when path contains
    characters that need to be URL-encoded.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1658404800">- Update to version 4.8.0
  * New features:
  - Support any weekday as first day of week; previously, only Sunday and
    Monday were allowed.
  - Configuration of the format in which appointment time is displayed.
  - Actions without key bindings.
  - generic-prev-view key binding to cycle backwards through windows.
  - Support for Home/End keys in text input mode.
  * Bug fixes:
  - Support compilation on big-endian systems.
  - Fixed --docdir support.
  - Allow newlines in iCal SUMMARY by replacing them with blanks.
  - Fixed sidebar configuration sometimes not increasing width.
  - Layout change recognizes changed appointment space; before this change,
    a layout change did not update the maximum number of appointments visible
    until the config menu was left.
  * calcurse-caldav bug fixes:
  - Fixed InsecureSSL support.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 4.8.1:
  * Fixed characters in weekly view.
  * Fixed import for iCal files with empty description
  * Fixed handling of note files edited outside calcurse
  * Fixed handling of recurrent open-ended appointments
  * Default description for items with empty descriptions
  * The PasswordCommand option can now be used to manage passwords
    in an external program and is the new recommended way of
    storing passwords for calcurse-caldav</changelog>
</package>
<package pkgid="2faf2f91cad81a23d4a7b1cf0aa23a14bb5298f3f2e599e7fce7b5d349d035351880bc5d0d3b7413360e53f31295e13bef69bc6d0217d2592b982030231485b0" name="calendarsupport" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Fix kde#501637: untranslated strings in preferences dialogue
  * Require test on all system
  * calprintpluginbase condition 'subtodo' is always true
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="d1be74c13a990234567c06fe9728b921066ec37fec89f54d129078a00c0f48d12bd669617a000dcb4796869fc8b105013d29c919e52ef353a4956f2d8be4cb8f" name="calendarsupport-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Fix kde#501637: untranslated strings in preferences dialogue
  * Require test on all system
  * calprintpluginbase condition 'subtodo' is always true
  * Add xml/yaml linting
  * Remove FeatureSummary as we use ECMFeatureSummary</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="cc17e3d3766357ac9c9c38a49f4ab1980de3acd177094a18b4491d068f4333c498f226a1bcfb44e8acd6176d74ed109bb9a05dd5b1c948a70e8777fc22d865c8" name="calibre" arch="x86_64">
  <version epoch="0" ver="8.7.0" rel="bp160.1.2"/>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1743163200">- Update to 8.1.1
  - Version 8.1.1 fixes a regression causing an error that does not
    affect functionality on startup on macOS</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1743768000">- Update to 8.2.0
  * New Features
  - Kobo driver: Add support for new Tolino firmware
  - Kindle driver: Allow using a value of * in
    Preferences-&gt;Output options-&gt;MOBI Output to have the driver
    mark all books sent to the device as personal documents
  * Bug Fixes
  - Kobo driver: Fix hyphenation and extra CSS added to KEPUB
    files being ignored by the renderer on the Kobo
  - macOS: Fix opening book folder or PDF files for books with
    square brackets in the title not working
  - Quickview: Fix a long standing bug with syncing of columns
    in the presence of hidden/re-ordered columns
  - E-book viewer: Show an error message when an invalid nearby
    search expression is used
  - KEPUB Output: Fix incorrect encoding detection for some HTML
    files without an encoding declaration
  - macOS: Fix a regression in the previous release that caused
    failures in the E-book viewer when updating annotations for
    books with a large number of annotations</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1743768001">- Update to 8.2.1
  - Version 8.2.1 fixes an error when clicking on format links in
    the book details panel</changelog>
  <changelog author="Eric Schirra &lt;ecsos@schirra.net&gt;" date="1744372800">- Update to 8.2.100
  No changelog from upstream. But see:
  https://github.com/kovidgoyal/calibre/compare/v8.2.1...v8.2.100</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1744977600">- Uptate to 8.3.0
  * New Features
  - Cover grid: Allow configuring different backgrounds for light
    and dark mode in Preferences-&gt;Look &amp; feel-&gt;Cover grid
  - E-book viewer: Further speedup first open of large EPUB files
    by another 30%
  - Metadata review dialog: Add merge comments action
  * Bug Fixes
  - Kobo driver: Fix viewing of KEPUB files from the device view
    in calibre not working
  - Fix a regression in 8.1 that broke displaying of the debug
    log when running in debug mode
  - E-book viewer: Fix a regression in 8.0 that caused the clock
    to display an extra p after the time
- Fix build error for Leap 16.0.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1746792000">- Update to 8.4.0
  * New Features
  - KEPUB Output: Add an option to generate KEPUB files that have
    better text justification at the cost of gaps in highlighting
    when used on the Kobo
  - E-book viewer: Allow the background image specified in the
    Style section of the viewer preferences to extend under the
    page margins as well
  * Bug Fixes
  - E-book viewer: Fix a regression that broke the "show book in
    main calibre program" link
  - News download: Fix Next/Previous links not working when the
    pointed to article failed to download
  - E-book viewer: Handle links to missing internal files with
    an error popup rather than becoming non-functional
  - E-book viewer: Fix some links not being processed correctly
    for very large EPUB files with many internal HTML files
  - Get books: Update ebooks.com plugin for website changes
  - Metadata review dialog: Fix merging of tags not working
    correctly
  - Wayland: Workaround Qt/Wayland bug that prevents the menu of
    the Layout button from showing
  - Prevent recursion when creating base temporary folder if
    something on system deletes the created temporary folder</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1750420800">- Update to 8.5.0
  * New Features
  - The scrollbars used in calibre in light mode are now the same
    style as the ones in dark mode, this improves the contrast
    making the scrollbar more accessible
  - Kobo driver: add an option to change the how the Kobo
    displays series numbers using a template.
  - Manage data files dialog: Add a button to cancel remaining
    books when managing multiple books
  - Kobo driver: add support for new Tolino firmware
  * Bug Fixes
  - Prevent Windows 11 from starting a conhost.exe process for
    every calibre worker process
  - E-book viewer: Improve highlight grouping with recurring
    chapter names
  - When sending emails to amazon and pocketbook use random
    English text instead of UUIDs for subject/body.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1751716800">- Add missing require libjpeg-turbo.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt; - 8.6.0" date="1752235200">- Update to 8.6.0
  * New Features
  - Content server: Add a checkbox in content server user
    preferences to prevent a user account from changing its own
    password via the web interface
  - Restoring database: Improve performance by an order of
    magnitude
  - Add a tweak to Preferences-&gt;Tweaks to permit displaying
    the sort value for series in the Tag browser
  - Welcome wizard: Change default output format to AZW3 for
    Kindle as MOBI is obsolete and all Kindles released within
    the last decade plus support AZW3
  - Add 'Search "not in"' and 'Filter "not in'" buttons to
    Manage authors and Manage Items
  * Bug Fixes
  - Windows: Fix a regression in the previous release that caused
    terminal windows to popup momentarily when adding PDF files
    or converting them
  - E-book viewer: Fix a regression in 8.4 that broke fading of
    the background image
  - Tag browser: Fix clicking on categories to search for books
    by first letter of series not working correctly for
    non-English language books
  - Edit metadata individually: Ensure Next/Previous buttons work
    even if something re-orders the books in the book list.
    They will now iterate over the books as they were at the time
    the dialog is created
  - Windows: Generate catalog: Workaround for systems where
    a broken antivirus or similar holds open files in the catalog
    library causing a permission denied error</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt; - 8.7.0" date="1752840000">- Update to 8.7.0
  * New Features
  - Kindle driver: Add support for generating page number files
    (APNX) on 2024 and newer MTP based Kindles
  - When finding similar books by author ignore "et al." suffix
    on author names
  * Bug Fixes
  - Fix a regression in the previous release that broke
    configuring Sending of books to device
  - Kobo driver: Fix a regression that caused ancient, pre-Touch
    kobo devices to no longer work with calibre
  - MTP driver: Workaround for LibMTP no longer returning device
    serial numbers on some systems
  - Edit book: Fix the next/previous buttons in the Text search
    tool not working
  - Fix series and publisher mapping rules not handling commas
    correctly when downloading metadata one book at a time
  - Edit metadata dialog: When there are only a few cusotm
    comments like fields stretch them vertically to take up
    unused psace</changelog>
</package>
<package pkgid="339fe7c79005a7117be30bb43fa049aaee4cbc33488b097d31f3ec6e2efc3c8931b78268f9a5cffd53753e8fbd4b74257160a0bbb125fad3f106a3d19b11d64a" name="calindori" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Switch back to list view after editing or deleting an incidence
  * Fix placeholder message
  * Set window icon
  * Add icon for F-droid store listing
  * Use the KAboutData singleton from KCoreAddons
  * Port to AboutKDEPage from AboutKDE</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="9c9e65e4e18da84da170812556f1eea965764a3ca16cc03bade263a9da95ee1f7c9e0e0a58fad8142e0cd7de0d7e5d3257c0fe88432163f012506d9b89dc4d6b" name="calindori-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Switch back to list view after editing or deleting an incidence
  * Fix placeholder message
  * Set window icon
  * Add icon for F-droid store listing
  * Use the KAboutData singleton from KCoreAddons
  * Port to AboutKDEPage from AboutKDE</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="c41141d6e7a748cbe53a33202a2480e5d42bf3d6f99ed8ab523debd53d5501b870164a3211897f76f4e5101da90ff9ff3564489ac883c55b571869e9443b8024" name="callaudiod" arch="x86_64">
  <version epoch="0" ver="0.1.9" rel="bp160.1.18"/>
  <changelog author="Adrian Campos Garrido &lt;adriancampos@teachelp.com&gt;" date="1614081600">- Update to 0.1.0</changelog>
  <changelog author="Andr&#xE9;s B.S. &lt;andresbs@opensuse.org&gt;" date="1618142400">- Improve packaging: split devel files, remove unnecesary buildreqs
  and build API docs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update to version 0.1.3:
  * cad-pulse: don't switch ports on non-default sink/source
  * cad-pulse: consider "Handset" port as "Earpiece"
  * cad-pulse: fix card retry timer
  * cad-pulse: make new sink/source the default one
  * cad-pulse: filter out monitor sources
- Changes from version 0.1.2:
  * cad-pulse: filter card based on available ports
  * cad-pulse: add additional check for discarding the modem
- Changes from version 0.1.1:
  * cad-pulse: don't assume card bus path is exactly
    "platform-sound"
- Change service to use buildtime tarball generation, use
  cpioformat for source, and enable changes generated from gitlog,
  as upstream do not produce NEWS or release notes. Also switch to
  explicit set release tag for revision, we like to know what we
  pulling down, and be sure it will be the same each time.
- Split out shared library in own package, name it after its
  soname, follow the SLPP!
- Use generic names for compilers BuildRequired, and generally tidy
  up the specfile.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 0.1.4:
  * cad-pulse:
  - Fix possible NULL dereference
  - Improve monitor source identification
  - Make sure speaker state is reset between calls
  - Set D-Bus object properties on state change
  - Simplify mic mute operation
  - Track current state
  * cli: Add --status flag to query current status
  * dbus: Add properties to track the current state
  * gitlab-ci: add `debian` folder for CI use
  * libcallaudio:
  - Add API to query current state
  - Don't leak async data
  - Improve documentation and fix more leaks
  - Register enums as GType
  - Use G_DBUS_PROXY_FLAGS_NONE instead of "0"
  * manager:
  - Add DBus properties
  - Remove unused code
  - Track state of operations
  * src: make backend responsible for tracking current state
- Package doc sub-package as noarch.
- Add apiver define, ease future changes.</changelog>
  <changelog author="andrea.manzini@suse.com" date="1677844800">- Update to version 0.1.7:
  * Release version 0.1.7
  * libcallaudio: Properly handle successful return code
  * Release version 0.1.6
  * libcallaudio: Set error in sync API if unsuccessful
  * libcallaudio: Drop DBus method return value in sync and async functions
  * libcallaudio: Make logging consistent between sync and async API
  * libcallaudio: Distinguish DBus error from unsuccessful operations
  * libcallaudio: Prefer using FALSE instead of 0
  * Release version 0.1.5
  * cad-pulse: relax card filtering even more
  * cad-pulse: stop polling for new cards
  * cad-pulse: relax card filtering
  * cad-pulse: fix segfault when there is no target port
  * cad-manager: Don't return error on unsuccessful operations
  * cad-manager: Return TRUE when returning error for DBus method invocation
  * libcallaudio: Fix typo in documentation
  * build: Enable more warnings
  * cad-manager: Avoid magic constant
  * cli: return non zero exit status on failure</changelog>
  <changelog author="andrea.manzini@suse.com" date="1693569600">- Update to version 0.1.9:
  * Release version 0.1.9
  * cad-pulse: don't filter input ports based on type
  * Release version 0.1.8
  * cad-pulse: also accept "Handset" type input ports</changelog>
</package>
<package pkgid="33a37de1b43c679241630513dc125e3f7ab7e515f2db97636f764d01ca7ac43bf28ea3eaaccf692943efef34974f852d2e9fd4bd660f45ffc88038d0b7a410be" name="callaudiod-devel" arch="x86_64">
  <version epoch="0" ver="0.1.9" rel="bp160.1.18"/>
  <changelog author="Adrian Campos Garrido &lt;adriancampos@teachelp.com&gt;" date="1614081600">- Update to 0.1.0</changelog>
  <changelog author="Andr&#xE9;s B.S. &lt;andresbs@opensuse.org&gt;" date="1618142400">- Improve packaging: split devel files, remove unnecesary buildreqs
  and build API docs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update to version 0.1.3:
  * cad-pulse: don't switch ports on non-default sink/source
  * cad-pulse: consider "Handset" port as "Earpiece"
  * cad-pulse: fix card retry timer
  * cad-pulse: make new sink/source the default one
  * cad-pulse: filter out monitor sources
- Changes from version 0.1.2:
  * cad-pulse: filter card based on available ports
  * cad-pulse: add additional check for discarding the modem
- Changes from version 0.1.1:
  * cad-pulse: don't assume card bus path is exactly
    "platform-sound"
- Change service to use buildtime tarball generation, use
  cpioformat for source, and enable changes generated from gitlog,
  as upstream do not produce NEWS or release notes. Also switch to
  explicit set release tag for revision, we like to know what we
  pulling down, and be sure it will be the same each time.
- Split out shared library in own package, name it after its
  soname, follow the SLPP!
- Use generic names for compilers BuildRequired, and generally tidy
  up the specfile.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 0.1.4:
  * cad-pulse:
  - Fix possible NULL dereference
  - Improve monitor source identification
  - Make sure speaker state is reset between calls
  - Set D-Bus object properties on state change
  - Simplify mic mute operation
  - Track current state
  * cli: Add --status flag to query current status
  * dbus: Add properties to track the current state
  * gitlab-ci: add `debian` folder for CI use
  * libcallaudio:
  - Add API to query current state
  - Don't leak async data
  - Improve documentation and fix more leaks
  - Register enums as GType
  - Use G_DBUS_PROXY_FLAGS_NONE instead of "0"
  * manager:
  - Add DBus properties
  - Remove unused code
  - Track state of operations
  * src: make backend responsible for tracking current state
- Package doc sub-package as noarch.
- Add apiver define, ease future changes.</changelog>
  <changelog author="andrea.manzini@suse.com" date="1677844800">- Update to version 0.1.7:
  * Release version 0.1.7
  * libcallaudio: Properly handle successful return code
  * Release version 0.1.6
  * libcallaudio: Set error in sync API if unsuccessful
  * libcallaudio: Drop DBus method return value in sync and async functions
  * libcallaudio: Make logging consistent between sync and async API
  * libcallaudio: Distinguish DBus error from unsuccessful operations
  * libcallaudio: Prefer using FALSE instead of 0
  * Release version 0.1.5
  * cad-pulse: relax card filtering even more
  * cad-pulse: stop polling for new cards
  * cad-pulse: relax card filtering
  * cad-pulse: fix segfault when there is no target port
  * cad-manager: Don't return error on unsuccessful operations
  * cad-manager: Return TRUE when returning error for DBus method invocation
  * libcallaudio: Fix typo in documentation
  * build: Enable more warnings
  * cad-manager: Avoid magic constant
  * cli: return non zero exit status on failure</changelog>
  <changelog author="andrea.manzini@suse.com" date="1693569600">- Update to version 0.1.9:
  * Release version 0.1.9
  * cad-pulse: don't filter input ports based on type
  * Release version 0.1.8
  * cad-pulse: also accept "Handset" type input ports</changelog>
</package>
<package pkgid="9011c1a577dd8c20a3c21aa924524580468d57d652847109fae0af121c59e902b8deb2cf65bade9fc4e01d3641cf4b6844d8b22f12cdba44b7f6236a70b747fa" name="callaudiod-doc" arch="noarch">
  <version epoch="0" ver="0.1.9" rel="bp160.1.18"/>
  <changelog author="Adrian Campos Garrido &lt;adriancampos@teachelp.com&gt;" date="1614081600">- Update to 0.1.0</changelog>
  <changelog author="Andr&#xE9;s B.S. &lt;andresbs@opensuse.org&gt;" date="1618142400">- Improve packaging: split devel files, remove unnecesary buildreqs
  and build API docs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update to version 0.1.3:
  * cad-pulse: don't switch ports on non-default sink/source
  * cad-pulse: consider "Handset" port as "Earpiece"
  * cad-pulse: fix card retry timer
  * cad-pulse: make new sink/source the default one
  * cad-pulse: filter out monitor sources
- Changes from version 0.1.2:
  * cad-pulse: filter card based on available ports
  * cad-pulse: add additional check for discarding the modem
- Changes from version 0.1.1:
  * cad-pulse: don't assume card bus path is exactly
    "platform-sound"
- Change service to use buildtime tarball generation, use
  cpioformat for source, and enable changes generated from gitlog,
  as upstream do not produce NEWS or release notes. Also switch to
  explicit set release tag for revision, we like to know what we
  pulling down, and be sure it will be the same each time.
- Split out shared library in own package, name it after its
  soname, follow the SLPP!
- Use generic names for compilers BuildRequired, and generally tidy
  up the specfile.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Update to version 0.1.4:
  * cad-pulse:
  - Fix possible NULL dereference
  - Improve monitor source identification
  - Make sure speaker state is reset between calls
  - Set D-Bus object properties on state change
  - Simplify mic mute operation
  - Track current state
  * cli: Add --status flag to query current status
  * dbus: Add properties to track the current state
  * gitlab-ci: add `debian` folder for CI use
  * libcallaudio:
  - Add API to query current state
  - Don't leak async data
  - Improve documentation and fix more leaks
  - Register enums as GType
  - Use G_DBUS_PROXY_FLAGS_NONE instead of "0"
  * manager:
  - Add DBus properties
  - Remove unused code
  - Track state of operations
  * src: make backend responsible for tracking current state
- Package doc sub-package as noarch.
- Add apiver define, ease future changes.</changelog>
  <changelog author="andrea.manzini@suse.com" date="1677844800">- Update to version 0.1.7:
  * Release version 0.1.7
  * libcallaudio: Properly handle successful return code
  * Release version 0.1.6
  * libcallaudio: Set error in sync API if unsuccessful
  * libcallaudio: Drop DBus method return value in sync and async functions
  * libcallaudio: Make logging consistent between sync and async API
  * libcallaudio: Distinguish DBus error from unsuccessful operations
  * libcallaudio: Prefer using FALSE instead of 0
  * Release version 0.1.5
  * cad-pulse: relax card filtering even more
  * cad-pulse: stop polling for new cards
  * cad-pulse: relax card filtering
  * cad-pulse: fix segfault when there is no target port
  * cad-manager: Don't return error on unsuccessful operations
  * cad-manager: Return TRUE when returning error for DBus method invocation
  * libcallaudio: Fix typo in documentation
  * build: Enable more warnings
  * cad-manager: Avoid magic constant
  * cli: return non zero exit status on failure</changelog>
  <changelog author="andrea.manzini@suse.com" date="1693569600">- Update to version 0.1.9:
  * Release version 0.1.9
  * cad-pulse: don't filter input ports based on type
  * Release version 0.1.8
  * cad-pulse: also accept "Handset" type input ports</changelog>
</package>
<package pkgid="c8b86270f56fd129a23a14f683f0e0f180057219ff79fa321324d2a64df8dcd6c7facbcaf9cf1a5932fdcee6c1af07d83e3383f857b19d3cc76180b5c57abd14" name="calls" arch="x86_64">
  <version epoch="0" ver="47.0" rel="bp160.1.17"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678190400">- Update to version 44.alpha.1:
  + **Really** fix endless ringing bug
  + Fixed a crash
  + Database closed correctly on shutdown
  + Updated translations.
- Changes from version 44.alpha.0:
  + Fixed rare endless ringing bug (requires feedbackd 0.0.1)
  + SIP: Honour remote port in INVITE
  + SIP: Reenable G722 codec
  + Shuts down gracefully on SIGTERM/SIGINT
  + Flatpak build improvements
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 44.0:
  + New features:
  - Sort favourite contacts at the top.
  - Support for emergency calls in "dummy" provider.
  + Maybe noteworthy:
  - Fixed a couple of memory leaks.
  - Higher code coverage.
  - Disable call waiting.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1682164800">- Update to version 44.1:
  + Don't crash on empty/NULL call id
  + Properly unregister SIP account on shutdown
  + A couple of memory leaks
  + Updated libcall-ui to bring in latest fixes
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1686484800">- Update to version 44.2:
  + Fix origin being unrefed making calling impossible after a few
    of calls.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1693828800">- Update to version 45.rc.0:
  + New SIP feature: Support for AES 256 bit crypto suites.
  + Fixed object life cycle of CallsMMOrigin.
  + Updated translations.
- Changes from version 45.alpha.0:
  + New features:
  - Emergency call numbers provided through ModemManager.
  - Resolve emergency number types using hardcoded table.
  + Don't crash on empty/NULL call id.
  + Properly unregister SIP account on shutdown.
  + A couple of memory leaks.
  + Updated libcall-ui to bring in latest fixes and translation
    updates.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695988800">- Update to version 45.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710504000">- Update to version 46.0:
  + Metainfo improvements.
  + Add available emergency numbers by location (country code).
  + Fix call back button being insensitive.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1719662400">- Update to version 46.3:
  + Fix crash when Modem has no location services.
  + Fix crash when SIP handles have never gotten set up.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726401600">- Update to version 47.0:
  + Clear number and address entries when closing the application
    window
  + Fix crash on mobile when placing outgoing call
  + Fix keypad layout in RTL locales
  + Updated translations.
- Changes from version 47.rc:
  + Now uses AdwAboutDialog, requiring Adwaita 1.5
  + Improved style sheets
  + Actually shipping translated metainfo
- Changes from version 47.beta:
  + Add systemd unit file
  + Emit phone-hangup event
  + libpeas-2 port
- Changes from version 47.alpha:
  + GTK4 Port
  + Fix crash when Modem has no location services
  + Fix crash when SIP handles have never gotten set up
- Changes in BuildRequires following upstreams porting:
  + Add pkgconfig(libadwaita-1), pkgconfig(libpeas-2) and
    pkgconfig(gtk4)
  + Drop pkgconfig(gtk+-3.0), pkgconfig(libhandy-1) and
    pkgconfig(libpeas-1.0)</changelog>
</package>
<package pkgid="ce95ada8d925fb9cdf036a10b9c05f677cd0da820c9eee1c353191e26c01a180d96ad6c54545326bf76dbd20d1f0e9bb5be18125dcaec43de5c6849e1c752d7f" name="calls-lang" arch="noarch">
  <version epoch="0" ver="47.0" rel="bp160.1.17"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678190400">- Update to version 44.alpha.1:
  + **Really** fix endless ringing bug
  + Fixed a crash
  + Database closed correctly on shutdown
  + Updated translations.
- Changes from version 44.alpha.0:
  + Fixed rare endless ringing bug (requires feedbackd 0.0.1)
  + SIP: Honour remote port in INVITE
  + SIP: Reenable G722 codec
  + Shuts down gracefully on SIGTERM/SIGINT
  + Flatpak build improvements
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 44.0:
  + New features:
  - Sort favourite contacts at the top.
  - Support for emergency calls in "dummy" provider.
  + Maybe noteworthy:
  - Fixed a couple of memory leaks.
  - Higher code coverage.
  - Disable call waiting.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1682164800">- Update to version 44.1:
  + Don't crash on empty/NULL call id
  + Properly unregister SIP account on shutdown
  + A couple of memory leaks
  + Updated libcall-ui to bring in latest fixes
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1686484800">- Update to version 44.2:
  + Fix origin being unrefed making calling impossible after a few
    of calls.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1693828800">- Update to version 45.rc.0:
  + New SIP feature: Support for AES 256 bit crypto suites.
  + Fixed object life cycle of CallsMMOrigin.
  + Updated translations.
- Changes from version 45.alpha.0:
  + New features:
  - Emergency call numbers provided through ModemManager.
  - Resolve emergency number types using hardcoded table.
  + Don't crash on empty/NULL call id.
  + Properly unregister SIP account on shutdown.
  + A couple of memory leaks.
  + Updated libcall-ui to bring in latest fixes and translation
    updates.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695988800">- Update to version 45.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710504000">- Update to version 46.0:
  + Metainfo improvements.
  + Add available emergency numbers by location (country code).
  + Fix call back button being insensitive.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1719662400">- Update to version 46.3:
  + Fix crash when Modem has no location services.
  + Fix crash when SIP handles have never gotten set up.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726401600">- Update to version 47.0:
  + Clear number and address entries when closing the application
    window
  + Fix crash on mobile when placing outgoing call
  + Fix keypad layout in RTL locales
  + Updated translations.
- Changes from version 47.rc:
  + Now uses AdwAboutDialog, requiring Adwaita 1.5
  + Improved style sheets
  + Actually shipping translated metainfo
- Changes from version 47.beta:
  + Add systemd unit file
  + Emit phone-hangup event
  + libpeas-2 port
- Changes from version 47.alpha:
  + GTK4 Port
  + Fix crash when Modem has no location services
  + Fix crash when SIP handles have never gotten set up
- Changes in BuildRequires following upstreams porting:
  + Add pkgconfig(libadwaita-1), pkgconfig(libpeas-2) and
    pkgconfig(gtk4)
  + Drop pkgconfig(gtk+-3.0), pkgconfig(libhandy-1) and
    pkgconfig(libpeas-1.0)</changelog>
</package>
<package pkgid="8adeeade8fce5a90823fb3e86cdc858481e025fc36f4dc5757a9512287248f671bee2c7bd1b9e33857753275412e31115184ba8dba1b99dd7ce6f3c73ee951f1" name="calls-ofono" arch="x86_64">
  <version epoch="0" ver="47.0" rel="bp160.1.17"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678190400">- Update to version 44.alpha.1:
  + **Really** fix endless ringing bug
  + Fixed a crash
  + Database closed correctly on shutdown
  + Updated translations.
- Changes from version 44.alpha.0:
  + Fixed rare endless ringing bug (requires feedbackd 0.0.1)
  + SIP: Honour remote port in INVITE
  + SIP: Reenable G722 codec
  + Shuts down gracefully on SIGTERM/SIGINT
  + Flatpak build improvements
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 44.0:
  + New features:
  - Sort favourite contacts at the top.
  - Support for emergency calls in "dummy" provider.
  + Maybe noteworthy:
  - Fixed a couple of memory leaks.
  - Higher code coverage.
  - Disable call waiting.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1682164800">- Update to version 44.1:
  + Don't crash on empty/NULL call id
  + Properly unregister SIP account on shutdown
  + A couple of memory leaks
  + Updated libcall-ui to bring in latest fixes
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1686484800">- Update to version 44.2:
  + Fix origin being unrefed making calling impossible after a few
    of calls.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1693828800">- Update to version 45.rc.0:
  + New SIP feature: Support for AES 256 bit crypto suites.
  + Fixed object life cycle of CallsMMOrigin.
  + Updated translations.
- Changes from version 45.alpha.0:
  + New features:
  - Emergency call numbers provided through ModemManager.
  - Resolve emergency number types using hardcoded table.
  + Don't crash on empty/NULL call id.
  + Properly unregister SIP account on shutdown.
  + A couple of memory leaks.
  + Updated libcall-ui to bring in latest fixes and translation
    updates.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695988800">- Update to version 45.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710504000">- Update to version 46.0:
  + Metainfo improvements.
  + Add available emergency numbers by location (country code).
  + Fix call back button being insensitive.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1719662400">- Update to version 46.3:
  + Fix crash when Modem has no location services.
  + Fix crash when SIP handles have never gotten set up.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726401600">- Update to version 47.0:
  + Clear number and address entries when closing the application
    window
  + Fix crash on mobile when placing outgoing call
  + Fix keypad layout in RTL locales
  + Updated translations.
- Changes from version 47.rc:
  + Now uses AdwAboutDialog, requiring Adwaita 1.5
  + Improved style sheets
  + Actually shipping translated metainfo
- Changes from version 47.beta:
  + Add systemd unit file
  + Emit phone-hangup event
  + libpeas-2 port
- Changes from version 47.alpha:
  + GTK4 Port
  + Fix crash when Modem has no location services
  + Fix crash when SIP handles have never gotten set up
- Changes in BuildRequires following upstreams porting:
  + Add pkgconfig(libadwaita-1), pkgconfig(libpeas-2) and
    pkgconfig(gtk4)
  + Drop pkgconfig(gtk+-3.0), pkgconfig(libhandy-1) and
    pkgconfig(libpeas-1.0)</changelog>
</package>
<package pkgid="a56d87bac86f7664021e1191b8850bc99f2c6122615649e5acea9e7b8e08e5e4783f5e5a251b2ff7ebf84002dccace93f6c6b0179fc598d535add4b223331fd0" name="camsource" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="bp160.1.12"/>
  <changelog author="crrodriguez@suse.de" date="1238068800">- do not include static libraries</changelog>
  <changelog author="idonmez@novell.com" date="1310040000">- Add camsource-v4l-2.6.38.patch: use new v4l interface</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="mhrusecky@suse.com" date="1358596800">- used example as a default configuration file
- added wrapper around libv4l to make it work again (bnc#714439)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1358856000">- An alternative fix for bnc#714439, we don't need any wrappers while
  we can recompile apps from the sources
- Add camsource-v4l1.patch
- Drop camsource-v4l-2.6.38.patch
- Drop camsource-rename.patch</changelog>
  <changelog author="meissner@suse.com" date="1417435200">- updated to 0.7.1
  - Upgrade the internal v4l driver connection to v4l2
  - Now able to build correkt Makefile, no manuel action in this case
    required.
  - Now runs under Raspbian Wheezy in Raspberry PI!
  - Added function Browser Refresh, configurable via camsource.conf
  - Add function sharpen (source pencam-2-0.67, via "The Gimp"),
    configuarable via camsource.conf
  - Add function saturate (same source), configurable via
    camsource.conf
- dropped camsource-v4l1.patch: upstream
- dropped camsource-no_label_at_end.diff: upstream</changelog>
  <changelog author="meissner@suse.com" date="1436270400">- updated to final 0.7.1 version
  - new automatic gamma correction
- camsource-no_implicit_decls.diff: refreshed</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1581076800">- The camsource v4l1 module has logic errors opening the video
  device that incorrectly perform a channel set when a grab window
  set (frame size, fps, etc) is intended. The error handling from
  the invalid channel set causes the configuration frame size and
  fps settings to be discarded and replaced with the current
  settings active on the video device. The result is that running a
  v4l(1/2) application on a given camera before using camsource on
  the same camera means camsource has the grab window attributes
  from the other application not the one specified in camsource
  configuration
- camsource-v4l-conf-video_window-overwrite.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Remove obsolete version check for 1210
- Make devel subpackage noarch
- Use %license</changelog>
</package>
<package pkgid="4f94aff1bb5b7fd571a33f7f28e6836982c3b33636e5221e57500cb1ae7d79e342ae5472d90f00680171af697eaa42855662c1e57ab796e233f01f07e0df2d0d" name="camsource-devel" arch="noarch">
  <version epoch="0" ver="0.7.1" rel="bp160.1.12"/>
  <changelog author="crrodriguez@suse.de" date="1238068800">- do not include static libraries</changelog>
  <changelog author="idonmez@novell.com" date="1310040000">- Add camsource-v4l-2.6.38.patch: use new v4l interface</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="mhrusecky@suse.com" date="1358596800">- used example as a default configuration file
- added wrapper around libv4l to make it work again (bnc#714439)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1358856000">- An alternative fix for bnc#714439, we don't need any wrappers while
  we can recompile apps from the sources
- Add camsource-v4l1.patch
- Drop camsource-v4l-2.6.38.patch
- Drop camsource-rename.patch</changelog>
  <changelog author="meissner@suse.com" date="1417435200">- updated to 0.7.1
  - Upgrade the internal v4l driver connection to v4l2
  - Now able to build correkt Makefile, no manuel action in this case
    required.
  - Now runs under Raspbian Wheezy in Raspberry PI!
  - Added function Browser Refresh, configurable via camsource.conf
  - Add function sharpen (source pencam-2-0.67, via "The Gimp"),
    configuarable via camsource.conf
  - Add function saturate (same source), configurable via
    camsource.conf
- dropped camsource-v4l1.patch: upstream
- dropped camsource-no_label_at_end.diff: upstream</changelog>
  <changelog author="meissner@suse.com" date="1436270400">- updated to final 0.7.1 version
  - new automatic gamma correction
- camsource-no_implicit_decls.diff: refreshed</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1581076800">- The camsource v4l1 module has logic errors opening the video
  device that incorrectly perform a channel set when a grab window
  set (frame size, fps, etc) is intended. The error handling from
  the invalid channel set causes the configuration frame size and
  fps settings to be discarded and replaced with the current
  settings active on the video device. The result is that running a
  v4l(1/2) application on a given camera before using camsource on
  the same camera means camsource has the grab window attributes
  from the other application not the one specified in camsource
  configuration
- camsource-v4l-conf-video_window-overwrite.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Remove obsolete version check for 1210
- Make devel subpackage noarch
- Use %license</changelog>
</package>
<package pkgid="ed375ab09bc6b9a3f515a0ec758b91b8b8736ba484403144229f7545e3a9b21c245a77d31e2c94e9da2b8d8d5c0a3f02350e5188faab78a47ffaa41b10b927eb" name="canberra-gtk-play" arch="x86_64">
  <version epoch="0" ver="0.30+2" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1452772800">- Do not require sound-theme-freedesktop by libcanberra0: if this
  is wanted on a default install, it is up to the DE pattern to
  recommend/require this - it is not needed for the libraries
  proper functioning.</changelog>
  <changelog author="sreeves@suse.com" date="1464177600">- Update to GNOME 3.20.2 Fate#318572</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482148800">- Remove the lynx build dependency: of questionable need.
- Build for Gtk3 unconditionally.
- Spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Stabilize build:
  + Pass --disable-oss to configure: alsa is enabled and used
    already.
  + Pass --enable-udev to configure: ensure it is not accidentally
    being disabled.
  + Add pkgconfig(libudev) BuildRequires: used to be pulled in
    indirectly.</changelog>
  <changelog author="fvogt@suse.com" date="1712232000">- Don't recommend the gtk modules unconditionally. They already have
  conditional supplements.
- Switch from packageand(x:y) to boolean dependencies
- Use %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1734609600">- Update to version v0.30+2:
  + gtk: Don't assume all GdkDisplays are GdkX11Displays.
- Migrate package to obs_scm: we don't expect changes in git to
  happen anymore, but it's the line used across all GNOME packages.
- Call autogen.sh in build section: the git checkout is not
  bootstrapped.
- Drop libcanberra-broadway-fix.patch: part of the upstream git
  tree.
- Pass --with-systemdunitdir=no to configure: dbus-broker newly
  pulls in systemd, but we have been running without those service
  files for like ever. With libcanberra being in maintenance only
  mode, there seems to be no justification to change this now.
- Do not package documentation: building them requires lynx, which
  seems a bit exaggerated.</changelog>
  <changelog author="mgorse@suse.com" date="1742299200">- Change license to LGPL-2.1-or-later, per legal review.</changelog>
</package>
<package pkgid="9d922baafca555519fe3829d7180ca07ac0db5be53a816c010c698e429f6be59a9b2186d0af8dff855dfff79dfc6e31d0a425e60af3e6515542148c2c4550900" name="canberra-gtk-play-gnome" arch="x86_64">
  <version epoch="0" ver="0.30+2" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1452772800">- Do not require sound-theme-freedesktop by libcanberra0: if this
  is wanted on a default install, it is up to the DE pattern to
  recommend/require this - it is not needed for the libraries
  proper functioning.</changelog>
  <changelog author="sreeves@suse.com" date="1464177600">- Update to GNOME 3.20.2 Fate#318572</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482148800">- Remove the lynx build dependency: of questionable need.
- Build for Gtk3 unconditionally.
- Spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Stabilize build:
  + Pass --disable-oss to configure: alsa is enabled and used
    already.
  + Pass --enable-udev to configure: ensure it is not accidentally
    being disabled.
  + Add pkgconfig(libudev) BuildRequires: used to be pulled in
    indirectly.</changelog>
  <changelog author="fvogt@suse.com" date="1712232000">- Don't recommend the gtk modules unconditionally. They already have
  conditional supplements.
- Switch from packageand(x:y) to boolean dependencies
- Use %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1734609600">- Update to version v0.30+2:
  + gtk: Don't assume all GdkDisplays are GdkX11Displays.
- Migrate package to obs_scm: we don't expect changes in git to
  happen anymore, but it's the line used across all GNOME packages.
- Call autogen.sh in build section: the git checkout is not
  bootstrapped.
- Drop libcanberra-broadway-fix.patch: part of the upstream git
  tree.
- Pass --with-systemdunitdir=no to configure: dbus-broker newly
  pulls in systemd, but we have been running without those service
  files for like ever. With libcanberra being in maintenance only
  mode, there seems to be no justification to change this now.
- Do not package documentation: building them requires lynx, which
  seems a bit exaggerated.</changelog>
  <changelog author="mgorse@suse.com" date="1742299200">- Change license to LGPL-2.1-or-later, per legal review.</changelog>
</package>
<package pkgid="6bd7d93994e09ceba3dbf54a4476cf98d2b30b1edd1b8c1ea0e0d6647f23e57e711edce14b4d60971e29b93dc648319c27df9af3d6b3ccec192eafb19dd3be00" name="canlock" arch="x86_64">
  <version epoch="0" ver="3.3.0" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1606478400">- Initial package, version 3.2.0</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1606564800">- Run testsuite
- Add patch:
  * libcanlock-fix-testsuite.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1606651200">- Update to version 3.2.1
  * Bugfix: off-by-one heap buffer overflow fixed in canlock-mhp
  * Bugfix: canlock-mhp end of header detection fixed
- Drop patch:
  * libcanlock-fix-testsuite.patch (fixed by upstream)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1610107200">- Update to version 3.2.2
  * Bugfix: Header field name is not found by canlock-mhp if there
    is another header field for which only the prefix differs (and
    that other field is processed first)
  * Test suite for canlock-mhp parser extended: It now tests headers
    larger than 4 KiByte and for the field prefix bug fixed in this
    version
  * Test suite for canlock-hfp parser extended to test comments harder
  * Namespace clash of internal library functions with libc on NetBSD
    + Changed internal API function names hmac* to RFC2104Hmac*
    + Changed internal API function names hkdf* to RFC5869Hkdf*
    + Library API and ABI are fully compatible if no undocumented
    functions are used
  * libcanlock-3.pc: Changed protocol in URL from http to https</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1653739200">- Update to version 3.3.0
  * Bugfixes:
    + canlock-mhp utility no longer hangs if field name was not
    found.
    + Potential NULL-pointer dereference fixed in canlock utility.
    + Two memory leaks fixed in canlock-hfp utility.j
    + Multiple bugs in test suite fixed, where return values from
    + library functions were not handled correctly.
    + Two memory leaks fixed in test suite for legacy API
    + NAME sections of cl_clear_secret(), cl_get_lock(), cl_split()
    and cl_verify() man pages fixed.
  * Separate library libcanlock-hp added to execute the header
    parsers (for operating systems with POSIX API).
  * New libcanlock-hp API function to unfold header fields added
  * Test suite extended for the new library. Tests for parser.
    functions are skipped by default (because they require the
    installed parser utilities).
  * New libcanlock API function cl_verify_multi() added to check
    multiple keys against multiple locks.
  * Library API and ABI are backward compatible
  * Test suite extended: It now tests cl_verify_multi() too
  * canlock utility now supports the option "-m" to check multiple
    keys against multiple locks.
  * Option "-m" added to SYNOPSIS section of canlock man page.
  * Example programs added to the "examples" and "hp/examples"
    subdirectories.</changelog>
</package>
<package pkgid="5642e0c08bb65632e6e8e471cdec434c80e8addef4338f18bae668048eed47902f0f4cce4efa46e90842e8a8983bbe2f8e4c917cf1cde5eb303e08688d43da99" name="canokey-qemu" arch="x86_64">
  <version epoch="0" ver="0.0+git20230606.151568c" rel="bp160.1.12"/>
  <changelog author="Jan Loeser &lt;jan.loeser@posteo.de&gt;" date="1701086400">- Initial package</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1701259200">- Add _service file and update to current git</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1705665600">- Ignore underlinking errors/warnings, libcanokey-qemu directly
  calls functions provided by qemu (without linking to it),
  (boo#1218620).
- Move unversioned libcanokey-qemu.so to devel package
- Add missing ldconfig post/postun calls</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1706184000">- Fix static library build (added canokey-core-static.diff)</changelog>
</package>
<package pkgid="ae9083bccaf47013ca208d164e0bea202e9c8ecba91b2555a41df19559bde5dcb4be869f456e32bde6eb84af52a6c401982ae3801215f6995d70261d18c414c5" name="canokey-qemu-devel" arch="x86_64">
  <version epoch="0" ver="0.0+git20230606.151568c" rel="bp160.1.12"/>
  <changelog author="Jan Loeser &lt;jan.loeser@posteo.de&gt;" date="1701086400">- Initial package</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1701259200">- Add _service file and update to current git</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1705665600">- Ignore underlinking errors/warnings, libcanokey-qemu directly
  calls functions provided by qemu (without linking to it),
  (boo#1218620).
- Move unversioned libcanokey-qemu.so to devel package
- Add missing ldconfig post/postun calls</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1706184000">- Fix static library build (added canokey-core-static.diff)</changelog>
</package>
<package pkgid="1112421838b61ee1db626741e07e7d77237d57d589f33a51f3cb61cab12342645053aaaef1b47830adfcfac85a1fdec590b86857369b4e992993f55df2faba0d" name="cantarell-fonts" arch="noarch">
  <version epoch="0" ver="0.303.1" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 0.0.25:
  + Outline and spacing on C,G.
  + Improved terminals on numerous glyphs.
  + Weight/stem width fixes (k,G).
  + Port imrpovements from regular to bold.
  + Improved metrics.
  + Fixes to f-ligatures.
  + Shape fixes to some numerals.
  + Fixes to anchors &gt; composited glyphs.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518177600">- Update to version 0.100:
  + Redesigned from scratch to interpolate cleanly from thin to
    extra bold. Currently targets the Google Fonts Latin Core and
    Pro glyph sets.
- Update Url tag to https://wiki.gnome.org/Projects/CantarellFonts:
  current Cantarell Fonts' web page.
- Add meson BuildRequires, replace configure/make/make_install
  macros with meson/meson_build/meson_install and remove call for
  gnome-autogen.sh. All of these changes reflect the upstream port
  to Meson build system.
- Drop dos2unix BuildRequires: it's no longer required.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521115200">- Update to version 0.101:
  + Several small improvements.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 0.111:
  + Fix the wrongly assigned OS/2 weight class values that e.g. led
    to Extra Bold being selected when Bold was requested.
- Changes from version 0.110:
  + Space everything a little bit tighter.
  + Scale down whiteCircle and blackCircle by 50%, makes password
    dots smaller.
  + Tweak feet of one.lf slightly for a more even appearance.
  + Revise lcaron, dcaron and tcaron for collision-free rendering
    even at bold weight. Will need kerning later.
  + Add draft of Cyrillic (GF Cyrillic Plus set), to be improved.
  + Equalize advance width of period, comma, colon, semicolon.
  + Build packages with prebuilt fonts baked in.
  + New contributed AppStream metadata translations for Slovak.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 0.200:
  + Respacing of uppercase letters in the regular master and
    complete thin and extra bold masters. Uppercase letters space
    better next to lowercase letters now. Cyrillics are more
    consistently spaced.
  + Tweak numerals some. Especially the "one" and fractions.
  + Various tweaks to various shapes across the board, especially
    symbols. Braces are curlier now. Detail tweaks to Cyrillics.
  + Basic mathy symbols and currency symbols now have tabular
    number width. I found no advantage to having proportional
    variants.
  + Removed .tosf numerals. Fiddly work without clear purpose.
  + Experimental alternative form of "l" without the tail.
    Accessible via the ss01 feature.
  + Added variable font, CFF2 flavor. postscriptBlueFuzz is set to
    1 explicitly to avoid rounding issues with blue zone coverage
    in FreeType.
  + Removed f-ligatures without their own Unicode code points, as
    the design doesn't currently need them. They were mainly added
    to fill up the Google glyph set.
  + The following glyphs now represent more than one Unicode code
    point to keep the glyph view tidier:
  - emdash: U+2014, U+2015
  - emspace: U+2001, U+2003
  - enspace: U+2000, U+2002
  - hyphen: U+002D, U+00AD, U+2010, U+2011
  - space: U+0020, U+00A0
  + In PDFs where the generator removed the text stream, copy-paste
    may lead to the others turning into the first.
  + Filled in hryvnia (U+20B4), tugrik (U+20AE) and tenge (U+20B8).
  + Static fonts use same rounding method as varLib uses for the
    variable font.
  + Fixed Ustraight-cy (U+04AE), ustraight-cy (U+04AF),
    Ustraightstroke-cy (U+04B0), ustraightstroke-cy (U+04B1), they
    didn't have a proper production name before and may not have
    been properly accessible.
  + Removed some building components that made it into the final
    font.
  + Limited anchor propagation to letters, excluding ligatures.
    Generate GDEF table properly.
  + Set one simple `gasp` table for hinted display for e.g.
    Windows.
  + Removed `ccmp` from the `aalt` lookup.
  + The OS/2 table fsType now says that no Digital Rights
    Management is applied to the fonts, the name table now says the
    fonts are OFL 1.1 licensed.
  + Internal housekeeping: Sources are stored in the open UFO and
    Designspace format now, with various cleanups like removed
    unused layers.
  + Internal housekeeping: Removed composite diacritics that served
    no design purpose.
- Stop passing -Dconfigdir=%%{_fontsconfavaildir} to meson, no
  longer recognized.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578571200">- Update to version 0.201:
  + Oopsie-release: The last one was missing pre-built binaries in
    the release tarball.
  + Use AFDKO's tx to compress the variable font in roughly half.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 0.300:
  + Import Greek glyph set designed by Florian Fecher for GSoC
    2018. No kerning, might need a slight respacing. Imported
    anyway because someting is better than nothing.
  + Correct positioning of dotaccentcomb.case.
  + Correct mark positioning in caroncomb.case.
  + Correct appearance of ustraightstroke in variable font, the
    overlap became visible at smaller, autohinted sizes.
  + Correct bar positioning in Ustraightstroke and
    ustraightstroke.
  + Correct anchor positioning in Y.
  + Internal: Consolidate various anchors in composites into the
    base outline glyphs, to reduce the chance they get out sync.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608724800">- Update to version 0.301:
  + Oopsie-release: The last one was missing PostScript names for
    the new glyphs. Only relevant for when extracting text from
    PDFs where the generator omitted the text stream.
  + Rounded coordinates of macronbelowcomb.narrow and
    macroncomb.narrow.case. Leftovers from when they were scaled
    components.
  + Internal: Removed stale layers and data, added normalization
    script to prune unnecessary data. import-glyphs.py also imports
    PostScript names now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639137600">- Update to version 0.303.1:
  + Add missing font.
- Changes from version 0.303:
  + Actually update the version number in the fonts.
- Changes from version 0.302:
  + Maintenance release: Make the variable font the default, only
    build statics on demand. Also build two packages with variable
    and static fonts. Packagers can chose the statics package if
    they run into problems with the variable font, but you should
    probably not install both at the same time.
  + Amended OS/2 super- and subscript values so that new Pango can
    use them properly.
  + Update production names for Jacute, bulletoperator,
    commercialMinusSign, divisionslash, notidentical,
    ringcomb_acutecomb and ringcomb_acutecomb.case.
  + Updated appstream translations.</changelog>
</package>
<package pkgid="1f8de9600c60d861517d446e9d02fc54afe11a8c0edd95d1bbe2730fd5e5378f29184f49ecd8f580e79747772f4075de95675f365103aa7d1e73772ecd92e8ea" name="cantata" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="bp160.1.2"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Use libvlc for MPD http stream playback.
  QtMultimedia is too old on Leap 15.3 to build Cantata 2.5.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.cf&gt;" date="1693051200">- Reverted to QtMultimedia.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708430400">- Remove the taglib-extras build dependency, it fails to build
  with taglib 2 and will be removed.
- Add patch to fix build with taglib 2:
  * 0001-Update-for-tablib-2.0-compatibility.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1724155200">- Add ffmpeg 7 compatibility patch:
  * cantata-2.5.0-ffmpeg7.patch</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1729080000">- Changed vendor due to deprecated project
- Version 3.2.1:
  Changed
  * Fix now-playing notification being persistent.
  * Respect environment settings for showing icons in app menus.
  * Improve GUI responsiveness when changing tracks &amp; now-playing
    notifications are enabled.
  * Notifications when running in Flatpak now update properly.
  * Fix in-app HTTP stream playback.
  * fix: (gh#nullobsi/cantata#17) non-persistent notifications
    (gh#nullobsi/cantata#19)
  * fix: relinquish control of DontShowIconsInMenus
    (gh#nullobsi/cantata#20)
  * Update issue templates (gh#nullobsi/cantata#21)
  * fix: GUI responsiveness when changing tracks (gh#nullobsi/cantata#23)
  * fix: #24 flatpak notification updates (gh#nullobsi/cantata#25)
  * fix: #15 update QMediaPlayer handling (gh#nullobsi/cantata#26)
  * fix: #14 update QNetworkReply signals (gh#nullobsi/cantata#27)
  * git: remove UCRT64 action (gh#nullobsi/cantata#28)
  * git: Version 3.2.1 (gh#nullobsi/cantata#29)
- Version 3.2.0:
  Minor
  * Fix menu options having incorrect keybindings.
  * Fix radio stream favorites button not working on search.
  * Enable menu icons on macOS.
  * Update icons to FontAwesome 6.
  * Improve palette change handling.
  Changed
  * git: linux flatpak action (gh#nullobsi/cantata#8)
  * feat: FA6 icons &amp; proper palette changes
    (gh#nullobsi/cantata#7)
  * fix: use after free segfault (gh#nullobsi/cantata#10)
  * fix: (gh#nullobsi/cantata#6) enable favorites action for
    stream search (gh#nullobsi/cantata#11)
  * Release v3.2.0 by @nullobsi in (gh#nullobsi/cantata#12)
  * fix: metainfo description tag by @nullobsi in fix:
    (gh#nullobsi/cantata#13)
- Version 3.1.0:
  Bugfix release
  * Fix crash when enabling notifications.
  * Fix Qt warnings.
  * Fix notifications on Flatpak.
  * Fix tray icon image not showing up
- Version 3.0.1:
  * Prebuilds for the 3 major OSes.
  * Linux: use the flatpak YAML config to build, or install the
    flatpak. Needs KDE platform 6.7.
  * Windows: use MSYS2's MINGW environments to build for the best
    results. This one is built with the CLANG64 environment. If you
    want the WiX installer, you need to install WiX v3.
  * macOS: Universal builds are easy with Qt's binary distributions,
    as Homebrew doesn't distribute universal binaries. CPack
    generates a working DMG.
  * Hopefully this will make Cantata a little easier to run on
    modern distros. There are probably bugs with the Qt6 upgrade or
    pre-existing bugs.
- Ported to Qt6
- Deleted `%suse_update_desktop_file` due it's deprecated
- Changed Recommended mpd to Required.
- Dropped patches that are no longer needed:
  * 0001-Update-for-tablib-2.0-compatibility.patch
  * cantata-2.5.0-ffmpeg7.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1729166400">- Better not to recommend lang package, so removed it</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1729598400">- Added qt6-sql-sqlite dependency.</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1732795200">- Update to version 3.3.0:
  * Migrate data from older Cantata versions
  * Fix libVLC build
  * Fix MPRIS desktopEntry property
  * Fix deprecated FFMPEG function call
  * Fix podcast saving and date retrieval
  * Use embedded cover art from MPD server when needed</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1746878400">- Add cantata-add-missing-qregularexpression-include.patch,
  https://github.com/nullobsi/cantata/pull/54/</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1749470400">- Update to version 3.3.1:
  * build: Link to libmusicbrainzcc, not libmusicbrainz
    (gh#nullobsi/cantata#46)
  * build: update flatpak workflow (gh#nullobsi/cantata#53)
  * Add missing QRegularExpression include (gh#nullobsi/cantata#54)
  * fix FindCDParanoia.cmake (gh#nullobsi/cantata#51)
  * git: bump version by (gh#nullobsi/cantata#60)
  * fix: fill tags from filename if tag is empty in metadata
    (gh#nullobsi/cantata#64)
  * build: fix musicbrainz (gh#nullobsi/cantata#65)
  * rc: v3.3.1 (2) (gh#nullobsi/cantata#66)
- Superseded cantata-add-missing-qregularexpression-include.patch</changelog>
</package>
<package pkgid="59f29eea91fd02a14af6846866ecdeb02e954d8b9e03934766862d1ab392bd7b52d794572d06c47b802e9bf577d4d5ea7466c3572acd25424dcdd16f87b106af" name="cantata-lang" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="bp160.1.2"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1648555200">- Use libvlc for MPD http stream playback.
  QtMultimedia is too old on Leap 15.3 to build Cantata 2.5.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.cf&gt;" date="1693051200">- Reverted to QtMultimedia.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708430400">- Remove the taglib-extras build dependency, it fails to build
  with taglib 2 and will be removed.
- Add patch to fix build with taglib 2:
  * 0001-Update-for-tablib-2.0-compatibility.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1724155200">- Add ffmpeg 7 compatibility patch:
  * cantata-2.5.0-ffmpeg7.patch</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1729080000">- Changed vendor due to deprecated project
- Version 3.2.1:
  Changed
  * Fix now-playing notification being persistent.
  * Respect environment settings for showing icons in app menus.
  * Improve GUI responsiveness when changing tracks &amp; now-playing
    notifications are enabled.
  * Notifications when running in Flatpak now update properly.
  * Fix in-app HTTP stream playback.
  * fix: (gh#nullobsi/cantata#17) non-persistent notifications
    (gh#nullobsi/cantata#19)
  * fix: relinquish control of DontShowIconsInMenus
    (gh#nullobsi/cantata#20)
  * Update issue templates (gh#nullobsi/cantata#21)
  * fix: GUI responsiveness when changing tracks (gh#nullobsi/cantata#23)
  * fix: #24 flatpak notification updates (gh#nullobsi/cantata#25)
  * fix: #15 update QMediaPlayer handling (gh#nullobsi/cantata#26)
  * fix: #14 update QNetworkReply signals (gh#nullobsi/cantata#27)
  * git: remove UCRT64 action (gh#nullobsi/cantata#28)
  * git: Version 3.2.1 (gh#nullobsi/cantata#29)
- Version 3.2.0:
  Minor
  * Fix menu options having incorrect keybindings.
  * Fix radio stream favorites button not working on search.
  * Enable menu icons on macOS.
  * Update icons to FontAwesome 6.
  * Improve palette change handling.
  Changed
  * git: linux flatpak action (gh#nullobsi/cantata#8)
  * feat: FA6 icons &amp; proper palette changes
    (gh#nullobsi/cantata#7)
  * fix: use after free segfault (gh#nullobsi/cantata#10)
  * fix: (gh#nullobsi/cantata#6) enable favorites action for
    stream search (gh#nullobsi/cantata#11)
  * Release v3.2.0 by @nullobsi in (gh#nullobsi/cantata#12)
  * fix: metainfo description tag by @nullobsi in fix:
    (gh#nullobsi/cantata#13)
- Version 3.1.0:
  Bugfix release
  * Fix crash when enabling notifications.
  * Fix Qt warnings.
  * Fix notifications on Flatpak.
  * Fix tray icon image not showing up
- Version 3.0.1:
  * Prebuilds for the 3 major OSes.
  * Linux: use the flatpak YAML config to build, or install the
    flatpak. Needs KDE platform 6.7.
  * Windows: use MSYS2's MINGW environments to build for the best
    results. This one is built with the CLANG64 environment. If you
    want the WiX installer, you need to install WiX v3.
  * macOS: Universal builds are easy with Qt's binary distributions,
    as Homebrew doesn't distribute universal binaries. CPack
    generates a working DMG.
  * Hopefully this will make Cantata a little easier to run on
    modern distros. There are probably bugs with the Qt6 upgrade or
    pre-existing bugs.
- Ported to Qt6
- Deleted `%suse_update_desktop_file` due it's deprecated
- Changed Recommended mpd to Required.
- Dropped patches that are no longer needed:
  * 0001-Update-for-tablib-2.0-compatibility.patch
  * cantata-2.5.0-ffmpeg7.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1729166400">- Better not to recommend lang package, so removed it</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1729598400">- Added qt6-sql-sqlite dependency.</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1732795200">- Update to version 3.3.0:
  * Migrate data from older Cantata versions
  * Fix libVLC build
  * Fix MPRIS desktopEntry property
  * Fix deprecated FFMPEG function call
  * Fix podcast saving and date retrieval
  * Use embedded cover art from MPD server when needed</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1746878400">- Add cantata-add-missing-qregularexpression-include.patch,
  https://github.com/nullobsi/cantata/pull/54/</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1749470400">- Update to version 3.3.1:
  * build: Link to libmusicbrainzcc, not libmusicbrainz
    (gh#nullobsi/cantata#46)
  * build: update flatpak workflow (gh#nullobsi/cantata#53)
  * Add missing QRegularExpression include (gh#nullobsi/cantata#54)
  * fix FindCDParanoia.cmake (gh#nullobsi/cantata#51)
  * git: bump version by (gh#nullobsi/cantata#60)
  * fix: fill tags from filename if tag is empty in metadata
    (gh#nullobsi/cantata#64)
  * build: fix musicbrainz (gh#nullobsi/cantata#65)
  * rc: v3.3.1 (2) (gh#nullobsi/cantata#66)
- Superseded cantata-add-missing-qregularexpression-include.patch</changelog>
</package>
<package pkgid="8aa9d96796991a2139ce837283b88f21a5c124d381a501eddbfb76fef7fdb0738df85d3ace2f407f0b1744a7e3ecd565ded1dad6c004cda2937c37eadff5f073" name="cantor" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Set the current working directory to the directory of the project file for
    Maxima, R, Scilab and Julia projects and updated the ChangeLog file.
  * Fix cantor_config export usage
  * (Re-)Enable the embedded documentation, set it to ON on default.
  * Fix plugin loading (kde#496355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix build with cmake 4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Fixed warnings related to size_z vs int comparisons in worksheet.cpp and remove the usage of deprecated functions in libxml2. (kde#496946)
  * Addressed a couple of compiler warnings. (kde#496944, kde#496945)
  * Fix plugin loading (kde#496355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * Use `sage --version` instead of `sage -v`</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * add missing include to fix LaTeX typesetting (kde#490644)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="0d8f25b9c53ebe4ce5493c648184932d6c467f02e1219fb6379f665fcb527de7fa6ec4c1bed7363dd9a5bf22f9faf3f9b47a126cf7d73d16588c727e9a35f794" name="cantor-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Set the current working directory to the directory of the project file for
    Maxima, R, Scilab and Julia projects and updated the ChangeLog file.
  * Fix cantor_config export usage
  * (Re-)Enable the embedded documentation, set it to ON on default.
  * Fix plugin loading (kde#496355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix build with cmake 4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Fixed warnings related to size_z vs int comparisons in worksheet.cpp and remove the usage of deprecated functions in libxml2. (kde#496946)
  * Addressed a couple of compiler warnings. (kde#496944, kde#496945)
  * Fix plugin loading (kde#496355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * Use `sage --version` instead of `sage -v`</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * add missing include to fix LaTeX typesetting (kde#490644)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="e38b71f00d3b3b7fe44d47519267b098f550975bbf40640b1d5ddccc897fc366f2dca20ff20de9ec2ab797f7055abadc926c94af6c91e10ddcdf39b9d9f3d72c" name="cantor-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- Changes since 24.11.80:
  * Set the current working directory to the directory of the project file for
    Maxima, R, Scilab and Julia projects and updated the ChangeLog file.
  * Fix cantor_config export usage
  * (Re-)Enable the embedded documentation, set it to ON on default.
  * Fix plugin loading (kde#496355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix build with cmake 4</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Fixed warnings related to size_z vs int comparisons in worksheet.cpp and remove the usage of deprecated functions in libxml2. (kde#496946)
  * Addressed a couple of compiler warnings. (kde#496944, kde#496945)
  * Fix plugin loading (kde#496355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * Use `sage --version` instead of `sage -v`</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * add missing include to fix LaTeX typesetting (kde#490644)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="82b0b9503cf86871a9c48a450f5c83b46fef45f92b3971d36dcb3c0e8da8516b331c0dfeae8c0aba3d7c2e69e06404bf4ff0ed76424131e79488eff6d229f0c4" name="canutils" arch="x86_64">
  <version epoch="0" ver="2025.01" rel="160000.2.2"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1598270400">- Update to version v2020.04.02
  * jcat: provide errqueue support
  * jcat: add repeat support
  * Add uds output functionality
  * cangw: add new command line option -X to handle CAN FD rules
  * cangw: add CAN FD support
- Drop 0001-fix-include-to-find-SIOCGSTAMP-with-latest-kernel.patch</changelog>
  <changelog author="jengelh@inai.de" date="1598961600">- Update to version 2020.04.02.g119 (ea844bdc5e)
  * Rename jcat et al to j1939cat
  * j1939cat: add broadcast support</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to snapshot 2020.04.02.g192 (4573e852f9)
  * isotpsend: add support for blocking write flag
  * add cansequence tool</changelog>
  <changelog author="jengelh@inai.de" date="1605614400">- Update to release 2020.11.0
  * No further changes to prior snapshot, just version bump.</changelog>
  <changelog author="jengelh@inai.de" date="1606737600">- Add "can-utils" provides, add documentation.</changelog>
  <changelog author="jengelh@inai.de" date="1609243200">- Update to release 2020.12.0
  * candump: Enable zero relative timestamps to be used in
    log files.
  * "-tz" and "-ta" are now valid options for the logfile format.</changelog>
  <changelog author="jengelh@inai.de" date="1629374400">- Update to release 2021.08.0
  * Support for new kernel features:
  * Add len8_dlc support for Classical CAN frames (Linux v5.11+)
  * Add ISOTP SF_BROADCAST support (Linux v5.11+)</changelog>
  <changelog author="jengelh@inai.de" date="1678881600">- Update to release 2023.03
  * cangen: add support for SO_TXTIME
  * canfdtest: Add extended frame format / message length / FD /
    BRS support
  * can-calc-bit-timing: add support for calculation of CAN-FD
    bit timings
  * cangen: new generation mode - partially randomized payload
    (-D)
  * cansniffer: add CAN FD support</changelog>
  <changelog author="pgajdos@suse.com" date="1739188800">- version update to 2025.01
  * Support of new kernel features:
  * Full CAN XL support for candump, canplayer, cangen, log2asc,
    asc2log, lib
  * cangen: support socket priority
  * Improvements and features:
  * ISOBUS (ISO11783-13) File Server Interface (isobusfs-srv,
    isobusfs-cli)
  * Add j1939_datatime_cli
  * cansequence: allow to bind on "any" interface
  * cansequence: add support to send and receive CAN-FD
  * canfdtest: add support for loopback testing
  * isotpdump: option to capture functional addressing traffic
  * isotpdump: add color support for functional addressing traffic
  * isotprecv: add option to enable dynamic flow control
    parameters (Linux 6.9+)
  * cangen: add missing long CAN frame view for len8_dlc and eff
  * canbusload: add auto detection of CAN interfaces
  * canbusload: show RX/TX direction in bargraph
  * canbusload: support busload statistic and busload visualization</changelog>
  <changelog author="jengelh@inai.de" date="1739880000">- Add 0001-build-give-libisobusfs-a-version.patch</changelog>
</package>
<package pkgid="821ba55927e35cf77e32aa1c4bf57247fe10160ddd53300661eddb61a23409f2645defe53660bfaa321ae99066debb70d662776e00971be678b2b5e88ade8111" name="capnproto" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="160000.1.2"/>
  <changelog author="aloisio@gmx.com" date="1669809600">- Update to version 0.10.3
  * Fix CVE-2022-46149: Possible out-of-bounds read related to
    list-of-pointers</changelog>
  <changelog author="aloisio@gmx.com" date="1681387200">- Update to version 0.10.4
  * Clarify doc on absolute path imports</changelog>
  <changelog author="shanipribadi@gmail.com" date="1709985600">- Update to version 1.0.2
  * Fix compilation error for c++14 and c++17 and add tests (#1898)
  * Fix stat overflow on x86_32bit (#1830)
- Update to version 1.0.1.1
  * Fix inconsistent decision about whether a WebSocket message
    is compressed
- Update to version 1.0.1
  * blob.h: Fix invalid operands to binary expression
- Update to version 1.0.0
  * A number of optimizations were made to improve performance
    of Cap’n Proto RPC
  * Breaking change: opting into cancellation is accomplished
    using an annotation on the schema
  * KJ’s HTTP client and server implementations now support
    the CONNECT method.
  * capnp::RevocableServer was introduced to assist in exporting
    RPC wrappers around objects whose lifetimes are not controlled
    by the wrapper</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608000">- change compiler to clang, to avoid GCC bugs in coroutines</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608001">- update to 1.1.0:
  no changelog found</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608002">- set CXXFLAGS to build the coroutine library</changelog>
  <changelog author="andrea.manzini@suse.com" date="1745064000">- Update to version 1.1.0
  * Set release branch version to 1.1.0</changelog>
  <changelog author="schwab@suse.de" date="1747828800">- Remove unused build dependency</changelog>
  <changelog author="aloisio@gmx.com" date="1750075200">- Update to version 1.2.0 (no changelog)</changelog>
  <changelog author="qzhao@suse.com" date="1753099200">- Update capnproto.spec:
  Change 0%{?suse_version} macro to 1599 to enable build constraintion
  include SLFO:Main and other folked from openSUSE. If not, some ibus
  engine need capnproto, and it will introduce too many irrelevant
  build dependencies.
  (bsc#1246569)</changelog>
</package>
<package pkgid="adaf7f59d8831d6908ac2d9dbef921efa728f13da03674e3aef2fc079d0cac3a2357b52054e559042d37cf1a0ebec34fd7d86341d1661a8e8e3ef2e95a405107" name="capnproto" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="160000.1.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608000">- change compiler to clang, to avoid GCC bugs in coroutines</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608001">- update to 1.1.0:
  no changelog found</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608002">- set CXXFLAGS to build the coroutine library</changelog>
  <changelog author="andrea.manzini@suse.com" date="1745064000">- Update to version 1.1.0
  * Set release branch version to 1.1.0</changelog>
  <changelog author="schwab@suse.de" date="1747828800">- Remove unused build dependency</changelog>
  <changelog author="aloisio@gmx.com" date="1750075200">- Update to version 1.2.0 (no changelog)</changelog>
  <changelog author="qzhao@suse.com" date="1753099200">- Update capnproto.spec:
  Change 0%{?suse_version} macro to 1599 to enable build constraintion
  include SLFO:Main and other folked from openSUSE. If not, some ibus
  engine need capnproto, and it will introduce too many irrelevant
  build dependencies.
  (bsc#1246569)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- switch to cmake for building which will actually provide the last
  missing file for the cmake files CapnProtoTargets-relwithdebinfo.cmake
- properly set CC/CXX based on the compiler used
- shared library naming changes from libsomething-%{version}.so to
  libsomething.so.%{version}</changelog>
  <changelog author="aloisio@gmx.com" date="1765972800">- Update to version 1.3.0 (no changelog)</changelog>
  <changelog author="aloisio@gmx.com" date="1773316800">- Update to version 1.4.0
  * have stdcoro use ::std namespace
  * disable stack check when HWASan is used
  * Fix benign(?) buffer overrun in async readMessage().
  * Fix HTTP body size integer overflow bugs.
    (CVE-2026-32239, bsc#1259638, CVE-2026-32240, bsc#1259639)</changelog>
</package>
<package pkgid="bc5440fad44568aac348bff70a799abee82726337b2d1056a151a6aedca3fac8bd584d4eb90609597a2a67880d0ebd6f3006b5e0e1aae165a649134b5f1a2de5" name="capstone" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="160000.2.2"/>
  <changelog author="duwe@suse.com" date="1429185600">- initial version</changelog>
  <changelog author="mardnh@gmx.de" date="1514462400">- Specfile cleanup</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1518436800">- Correct the license tag, Capstone is BSD-3-Clause
- Provide python3 bindings
- Rename bindings subpackage to docs, it does not contain any
  bindings but documentation
- Package some more documentation
- Build with %{optflags}</changelog>
  <changelog author="afaerber@suse.de" date="1523793600">- Update to 3.0.5-rc2
  * Package cstool
- Adopt %license</changelog>
  <changelog author="brogers@suse.com" date="1534334400">- Update to 3.0.5
  * build static library (but still don't install), since build
  explicitly links cstool against it</changelog>
  <changelog author="aloisio@gmx.com" date="1586433600">- Update to version 4.0.1
  [ Core ]
  * Fix some issues for packaging (Debian, Gentoo).
  * Better support for building with Mingw.
  * cstool has new option -s to turn on skipdata mode.
  * cstool -v now report build settings of the core.
  * Add suite/capstone_get_setup.c so users can integrate with
    their own code
  * to retrieve Capstone settings at build time.
  [ Arm ]
  * Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction
    sets the operand.shift.value back again.
  * Remove ARM_REG_PC group for BX instruction.
  [ X86 ]
  * Fix: endbr32 and endbr64 instructions are now properly
    decoded in both CS_MODE_32 and CS_MODE_64.
  [ M680X ]
  * Fix some issues reported by clang-analyzer.
  [ Python ]
  * Fix skipdata setup.
  * Add getter/setter for skipdata_mnem, skipdata_callback.
  version 4.0:
  [ Core ]
  * New APIs: cs_regs_access()
  * Add new options for cs_option(): CS_OPT_MNEMONIC &amp;
    CS_OPT_UNSIGNED &amp; CS_OPT_SYNTAX_MASM.
  * Various updates &amp; bugfixes for all architectures.
  * Add 4 new architectures: EVM, M68K, M680X &amp; TMS320C64x.
  * Add new group types: CS_GRP_PRIVILEGE &amp;
    CS_GRP_BRANCH_RELATIVE.
  * Add new error types: CS_ERR_X86_MASM.
  [ X86 ]
  * Add XOP code condition type in x86_xop_cc.
  * Add some info on encoding to cs_x86 in cs_x86_encoding.
  * Add register flags update in cs_x86.{eflags, fpu_flags}
  * Change cs_x86.disp type from int32_t to int64_t.
  * Add new groups: X86_GRP_VM &amp; X86_GRP_FPU.
  * Lots of new instructions (AVX)
  [ ARM64 ]
  * Add instruction ARM64_INS_NEGS &amp; ARM64_INS_NGCS.
  [ Mips ]
  * Add mode CS_MODE_MIPS2.
  [ PPC ]
  * Change cs_ppc_op.imm type from int32_t to int64_t.
  * Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC,
    PPC_GRP_P8VECTOR &amp; PPC_GRP_QPX.
  * Lots of new instructions (QPX among them)
  [ Sparc ]
  * Change cs_sparc_op.imm type from int32_t to int64_t.
  [ Binding ]
  * New bindings: PowerShell &amp; VB6
- Bumped sover to 4
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1590408000">- Rename -docs subpackage to -doc to follow openSUSE practices.
- Descriptions: say what the package is, not what it wants to be.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 4.0.2
  Windows kernel-mode driver support
  - Add armv8, ppc32 &amp; thumbv8 modes
  - Print instruction ID
  - Support CS_OPT_UNSIGNED for ATT syntax
  - Fix operand size for some instructions
  - Fix LOCK prefixes
  - Recognize xacquire/xrelease prefix
  - Fix call/jmp access mode of mem operand
  - Add ENDBR32, ENDBR64 to reduce mode
  - Other minor fixes
  - Support CS_OPT_UNSIGNED
  - Fix register access flags for memory instructions
  - Fix UMOV vess
  - Update writeback for STR_POST_REG
  - Store correct register value in op.reg_pair
  - BDZLA is absolute branch
  - Fix truncated 64bit imm operand
  - Fix base/index printing
  - Fix skipdata struct being destroyed
  - Add __repr__ for capstone.CsInsn
  - Fix Java bindings to use pointers instead of longs
  - Fix x86_op record</changelog>
  <changelog author="mwilck@suse.com" date="1672747200">- Enable static library, and add libcapstone-devel-static subpackage
  (this is helpful for qemu-linux-user)</changelog>
</package>
<package pkgid="d527ea78ae2aae75535fb3b431b8a654c2a2c761658e77ce38a713ade1197c0ff7f275be5174ec5141394cbfd6cdb4dc915a9cbca3155fedd3812b461bb2e14b" name="capstone-doc" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="160000.2.2"/>
  <changelog author="duwe@suse.com" date="1429185600">- initial version</changelog>
  <changelog author="mardnh@gmx.de" date="1514462400">- Specfile cleanup</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1518436800">- Correct the license tag, Capstone is BSD-3-Clause
- Provide python3 bindings
- Rename bindings subpackage to docs, it does not contain any
  bindings but documentation
- Package some more documentation
- Build with %{optflags}</changelog>
  <changelog author="afaerber@suse.de" date="1523793600">- Update to 3.0.5-rc2
  * Package cstool
- Adopt %license</changelog>
  <changelog author="brogers@suse.com" date="1534334400">- Update to 3.0.5
  * build static library (but still don't install), since build
  explicitly links cstool against it</changelog>
  <changelog author="aloisio@gmx.com" date="1586433600">- Update to version 4.0.1
  [ Core ]
  * Fix some issues for packaging (Debian, Gentoo).
  * Better support for building with Mingw.
  * cstool has new option -s to turn on skipdata mode.
  * cstool -v now report build settings of the core.
  * Add suite/capstone_get_setup.c so users can integrate with
    their own code
  * to retrieve Capstone settings at build time.
  [ Arm ]
  * Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction
    sets the operand.shift.value back again.
  * Remove ARM_REG_PC group for BX instruction.
  [ X86 ]
  * Fix: endbr32 and endbr64 instructions are now properly
    decoded in both CS_MODE_32 and CS_MODE_64.
  [ M680X ]
  * Fix some issues reported by clang-analyzer.
  [ Python ]
  * Fix skipdata setup.
  * Add getter/setter for skipdata_mnem, skipdata_callback.
  version 4.0:
  [ Core ]
  * New APIs: cs_regs_access()
  * Add new options for cs_option(): CS_OPT_MNEMONIC &amp;
    CS_OPT_UNSIGNED &amp; CS_OPT_SYNTAX_MASM.
  * Various updates &amp; bugfixes for all architectures.
  * Add 4 new architectures: EVM, M68K, M680X &amp; TMS320C64x.
  * Add new group types: CS_GRP_PRIVILEGE &amp;
    CS_GRP_BRANCH_RELATIVE.
  * Add new error types: CS_ERR_X86_MASM.
  [ X86 ]
  * Add XOP code condition type in x86_xop_cc.
  * Add some info on encoding to cs_x86 in cs_x86_encoding.
  * Add register flags update in cs_x86.{eflags, fpu_flags}
  * Change cs_x86.disp type from int32_t to int64_t.
  * Add new groups: X86_GRP_VM &amp; X86_GRP_FPU.
  * Lots of new instructions (AVX)
  [ ARM64 ]
  * Add instruction ARM64_INS_NEGS &amp; ARM64_INS_NGCS.
  [ Mips ]
  * Add mode CS_MODE_MIPS2.
  [ PPC ]
  * Change cs_ppc_op.imm type from int32_t to int64_t.
  * Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC,
    PPC_GRP_P8VECTOR &amp; PPC_GRP_QPX.
  * Lots of new instructions (QPX among them)
  [ Sparc ]
  * Change cs_sparc_op.imm type from int32_t to int64_t.
  [ Binding ]
  * New bindings: PowerShell &amp; VB6
- Bumped sover to 4
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1590408000">- Rename -docs subpackage to -doc to follow openSUSE practices.
- Descriptions: say what the package is, not what it wants to be.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 4.0.2
  Windows kernel-mode driver support
  - Add armv8, ppc32 &amp; thumbv8 modes
  - Print instruction ID
  - Support CS_OPT_UNSIGNED for ATT syntax
  - Fix operand size for some instructions
  - Fix LOCK prefixes
  - Recognize xacquire/xrelease prefix
  - Fix call/jmp access mode of mem operand
  - Add ENDBR32, ENDBR64 to reduce mode
  - Other minor fixes
  - Support CS_OPT_UNSIGNED
  - Fix register access flags for memory instructions
  - Fix UMOV vess
  - Update writeback for STR_POST_REG
  - Store correct register value in op.reg_pair
  - BDZLA is absolute branch
  - Fix truncated 64bit imm operand
  - Fix base/index printing
  - Fix skipdata struct being destroyed
  - Add __repr__ for capstone.CsInsn
  - Fix Java bindings to use pointers instead of longs
  - Fix x86_op record</changelog>
  <changelog author="mwilck@suse.com" date="1672747200">- Enable static library, and add libcapstone-devel-static subpackage
  (this is helpful for qemu-linux-user)</changelog>
</package>
<package pkgid="a574cbe7b071795a1aa0089a139e49ba840346c9263c54dfd8519796891fd440a158e0a42120316cbcc92fdbb152fd30a808c3537e1d3fc65c9f6bad9045c18d" name="carat" arch="x86_64">
  <version epoch="0" ver="2.1b1+g132.21bfdb5" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650888000">- Initial package (version 2.1b1.g131) (fd0b757) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687608000">- Update to snapshot 2.1b1+g132 (21bfdb5)
  * Avoid a use-after-free</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1726228800">- Switch _service to an explicit revision hash to facilitate
  tarball verification.</changelog>
</package>
<package pkgid="7656349f12040f6cba12038740b847acc8d0b63bf6ed609a5b204732db813d843d4719811eeb72ccf38146524a9fdacc570fc51e8439378b9402206f690b87dc" name="cardpeek" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="bp160.1.12"/>
  <changelog author="sbrabec@suse.cz" date="1377172800">- New package.</changelog>
  <changelog author="prusnak@opensuse.org" date="1392206400">- updated to 0.8.2
- drop obsoleted patches (included upstream)</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.3
  + Added initial OpenPGP card support
  + Added clipboard copy in text format (with ctrl-c)
  + Added compatibility with FreeBSD
  + Added optional block signature computation to tachogrpah cards
  + Added Gironde/Grenoble Calypso French network data
  + Introduce experimental online secure script update, with RSA signature
  + Updated documentation
  + Minor change in XML cardpeek format
  + Many bugfixes and improvements</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- Update to version 0.8.4:
  + Works with Homebrew on OS X out of the box on Yosemite.
  + Has now a 'console' mode, as an alternative to the GTK+ GUI.
  + New and improved mifare classic 1k/4k script.
  + EMV script enhancements (thanks to A. Kozlik) and some minor
    bug fixes.
  + Improvements in GSM script.
  + Enable minimal "app bundling" on Mac OSX.
  + Many bug fixes and improvements.
- BuildRequire lua52-devel on openSUSE &gt; 13.2 (current Tumbleweed):
  cardpeek has not been ported to LUA 5.3 yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Explicitly package files installed by make install into _docdir:
  rpm 4.13 no longer implicitly packages those files.</changelog>
  <changelog author="tchvatal@suse.com" date="1503403200">- Add patch to build with lua5.3 (upstream merged in git):
  * cardpeek-lua5.3.patch
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="bwiedemann@suse.com" date="1528891200">- Add reproducible.patch to not have the embedded tarball vary
  across builds</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1573214400">- Fix reproducible.patch to add --mtime @1 to not break the tar call</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="58bd58776627c05c34d357fd8495cfa508dc8c879c6aab547d6869502d85050a18a4710554a2d20dcb3b82efa0c7bf329545fecd0f6b2669bb92d058dc941dcc" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.88.0" rel="160000.2.2"/>
  <changelog author="xiaoguang.wang@suse.com" date="1718366400">- Update to version 1.79.0 - for details see the rust1.79 package</changelog>
  <changelog author="william.brown@suse.com" date="1721995200">- Update to version 1.80.0 - for details see the rust1.80 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725883200">- Update to version 1.81.0 - for details see the rust1.81 package</changelog>
  <changelog author="william.brown@suse.com" date="1729252800">- Update to version 1.82.0 - for details see the rust1.82 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1733227200">- Update to version 1.83.0 - for details see the rust1.83 package</changelog>
  <changelog author="william.brown@suse.com" date="1736510400">- Update to version 1.84.0 - for details see the rust1.84 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1740398400">- Update to version 1.85.0 - for details see the rust1.85 package</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 1.86.0 - for details see the rust1.86 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1747656000">- Update to version 1.87.0 - for details see the rust1.87 package</changelog>
  <changelog author="william.brown@suse.com" date="1751025600">- Update to version 1.88.0 - for details see the rust1.88 package</changelog>
</package>
<package pkgid="41b0471fc96a7ad06e9794c553156d438a77fc25ecd12f7b45d81c920807a221449618cd33ee92eef9643914cbb28ffb4fbe6161f976ee81454c97398ce61934" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.94.0" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 1.86.0 - for details see the rust1.86 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1747656000">- Update to version 1.87.0 - for details see the rust1.87 package</changelog>
  <changelog author="william.brown@suse.com" date="1751025600">- Update to version 1.88.0 - for details see the rust1.88 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1754913600">- Update to version 1.89.0 - for details see the rust1.89 package</changelog>
  <changelog author="william.brown@suse.com" date="1758283200">- Update to version 1.90.0 - for details see the rust1.90 package</changelog>
  <changelog author="william.brown@suse.com" date="1761825600">- Update to version 1.91.0 - for details see the rust1.91 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1765800000">- Update to version 1.92.0 - for details see the rust1.92 package</changelog>
  <changelog author="william.brown@suse.com" date="1769169600">- Update to version 1.93.0 - for details see the rust1.93 package</changelog>
  <changelog author="tiwai@suse.com" date="1770292800">- Provide rust-src meta package, too; it may be useful for building
  Rust support in Linux kernel</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1773230400">- Update to version 1.94.0 - for details see the rust1.94 package</changelog>
</package>
<package pkgid="83db38cdcc7acba8d41d33e1dc3b9b4b1c485563c3df47ab77a8cd1299dd058d68de5ce3c8b3e18ed63dd1fa2159bacb1ca334267237d3aacc77edfbf81ce12d" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.95.0" rel="160000.1.1"/>
  <changelog author="xiaoguang.wang@suse.com" date="1747656000">- Update to version 1.87.0 - for details see the rust1.87 package</changelog>
  <changelog author="william.brown@suse.com" date="1751025600">- Update to version 1.88.0 - for details see the rust1.88 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1754913600">- Update to version 1.89.0 - for details see the rust1.89 package</changelog>
  <changelog author="william.brown@suse.com" date="1758283200">- Update to version 1.90.0 - for details see the rust1.90 package</changelog>
  <changelog author="william.brown@suse.com" date="1761825600">- Update to version 1.91.0 - for details see the rust1.91 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1765800000">- Update to version 1.92.0 - for details see the rust1.92 package</changelog>
  <changelog author="william.brown@suse.com" date="1769169600">- Update to version 1.93.0 - for details see the rust1.93 package</changelog>
  <changelog author="tiwai@suse.com" date="1770292800">- Provide rust-src meta package, too; it may be useful for building
  Rust support in Linux kernel</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1773230400">- Update to version 1.94.0 - for details see the rust1.94 package</changelog>
  <changelog author="william.brown@suse.com" date="1776427200">- Update to version 1.95.0 - for details see the rust1.95 package</changelog>
</package>
<package pkgid="62d73151256448d261c1face205ac7a1585ec6ea36e690ac948c06ac341438bb7af5a2686ea8241b3b775291ed53206cee64de305bc6045bc913d64d7d3837be" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.96.0" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1751025600">- Update to version 1.88.0 - for details see the rust1.88 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1754913600">- Update to version 1.89.0 - for details see the rust1.89 package</changelog>
  <changelog author="william.brown@suse.com" date="1758283200">- Update to version 1.90.0 - for details see the rust1.90 package</changelog>
  <changelog author="william.brown@suse.com" date="1761825600">- Update to version 1.91.0 - for details see the rust1.91 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1765800000">- Update to version 1.92.0 - for details see the rust1.92 package</changelog>
  <changelog author="william.brown@suse.com" date="1769169600">- Update to version 1.93.0 - for details see the rust1.93 package</changelog>
  <changelog author="tiwai@suse.com" date="1770292800">- Provide rust-src meta package, too; it may be useful for building
  Rust support in Linux kernel</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1773230400">- Update to version 1.94.0 - for details see the rust1.94 package</changelog>
  <changelog author="william.brown@suse.com" date="1776427200">- Update to version 1.95.0 - for details see the rust1.95 package</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1780315200">- Update to version 1.96.0 - for details see the rust1.96 package</changelog>
</package>
<package pkgid="5f57e6aaa16056fbcb57c3289073ea94e260ee6b1d63e941061e7ba1061f8ab1b473215f0af5d8239eb279e7d20a128dcb3a4a9ba35455b71403ccef62633a93" name="cargo-audit" arch="x86_64">
  <version epoch="0" ver="0.21.2~git0.18e58c2" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1704369600">- bsc#1218227 - update vendored dependencies for ssh terrapin attack</changelog>
  <changelog author="william.brown@suse.com" date="1707307200">- Update to version 0.19.0~git0.c9d1fbe:
  * Bump version to 0.19.0
  * Update changelog to 0.19
  * Fill in link URLs
  * Bump version
  * populate changelog
  * bump version
  * Update changelog
  * Bump gix to 0.58
  * Revert "Merge pull request #1094 from rustsec/revert-1081-gix-upgrade"
  * build(deps): bump comrak from 0.18.0 to 0.21.0 (#1090)
  * build(deps): bump rust-embed from 6.8.1 to 8.2.0 (#1080)
  * Cargo.toml: use `resolver = "2"` (#1095)
  * Update abscissa_core and clap; MSRV 1.70 (#1092)
  * Revert "gix upgrade to v0.56"
  * Fix "error: the borrowed expression implements the required traits" lint
  * build(deps): bump actions/cache from 3.0.11 to 4.0.0 (#1088)
  * thanks clippy
  * upgrade `gix` to v0.56 and `tame-index` to v0.9 to match it
  * Bump platforms version to 3.3.0
  * Regenerate platforms crate
  * build(deps): bump url from 2.4.1 to 2.5.0 (#1071)
  * Add a `source` field to `rustsec::Error`, and use it in simple cases. (#1067)
  * build(deps): bump fs-err from 2.10.0 to 2.11.0 (#1069)
  * Bump rustsec version
  * Update changelog
  * Turn link into an automatic link
  * Display the chain of sources for errors in `cargo audit`
  * bump cargo-lock msrv in another place too
  * bump cargo-lock msrv again from 1.66 to 1.67
  * bump cargo-lock msrv from 1.65 to 1.66
  * cargo update
  * Update to tame-index 0.8.x and gix 0.55.x
  * build(deps): bump rustix from 0.37.21 to 0.37.27
  * fix typo html in advisory scores (#1059)
  * https://github.com/rustsec/rustsec/pull/1057#pullrequestreview-1714037690
  * fix https://github.com/rustsec/rustsec/issues/503
  * bump version
  * regenerate platforms crate</changelog>
  <changelog author="william.brown@suse.com" date="1716897600">- Update to version 0.20.0~git0.6f4ca87:
  * Bump version numbers
  * Mention enterprise firewall issue in cargo-audit changelog too
  * Fill in cargo-audit changelog
  * Expand upon the rewrite description in rustsec changelog
  * Fill in rustsec changelog
  * Fix link
  * build(deps): bump softprops/action-gh-release (#1114)
  * build(deps): bump toml_edit from 0.21.1 to 0.22.5 (#1123)
  * Bump askama to 0.12
  * Update yanked package
  * Drop libgit2 advisory from ignore list now that we got rid of libgit2
  * build(deps): bump toml_edit from 0.19.15 to 0.21.1
  * build(deps): bump chrono from 0.4.33 to 0.4.34
  * build(deps): bump is-terminal from 0.4.11 to 0.4.12
  * Improve fixer documentation
  * Move Cargo path detection out of rustsec and into cargo-audit, to make rustsec more flexible
  * Remove rustsec `fix` feature and always enable the fixer, now that it doesn't pull in additional dependencies
  * Fix syntax
  * Apply review suggestion (style)
  * Update cargo-audit/src/commands/audit/fix.rs
  * Run `cargo update` in the same dir as Cargo.lock
  * Revert 'fix' being a default feature
  * Placate clippy
  * Print a nice summary at the end
  * Better wording
  * Remove extraneous newline
  * prettier printing
  * More detailed reporting
  * Set the correct(ish) exit status in dry run mode
  * Keep track of unpatchable vulns and failures
  * Warn about vulnerabilities without patched versions and do not attempt to upgrade those crates
  * Only attempt to upgrade vulnerable versions of a given package
  * Fix: run `cargo update`, not just `cargo`
  * Add a note that `fix` is experimental
  * Update cargo.lock in the wake of cargo-edit removal
  * Drop the now-unused dependency cargo-edit
  * Drop obsolete Cargo.toml locating logic that breaks in presence of workspaces
  * Do not require passing manifest path
  * Drop unused imports
  * Adapt `cargo audit fix` to the changed rustsec fix api
  * Simplify rustsec part of `cargo audit fix`
  * cargo fmt
  * WIP
  * No need to generate lockfile explicitly now that we call `cargo update`, remove that code
  * WIP conversion of cargo-audit to the new rustsec fixer API
  * cargo fmt
  * Do not run `cargo update` when auditing
  * Better docs on fixer
  * Drop lifetimes from the fixer struct; they are a pointless flex - the cost of cloning is absolutely dwarfed by the cost of calling a subprocess.
  * Implement initial prototype of `cargo update`-based package upgrading
  * .cargo/audit.toml: ignore RUSTSEC-2024-0013 (#1111)
  * WIP
  * WIP
  * Accept a &amp;Path without allocating for giggles
  * Comment out soon-to-be-removed code and make lifetimes work out
  * Fix pkgid function signature to accept an immutable borrow
  * Bump rustsec to 0.28.6
  * Add pkgid function
  * Temporarily make 'fix' feature default to ease development
  * build(deps): bump is-terminal from 0.4.10 to 0.4.11 (#1105)
  * Bump rustsec-admin to 0.8.9
  * Rebase
  * Remove PYSEC ids
  * Update sync for various changes
  * HTTPS download for OSV export
  * Improve output format
  * Add a command to synchronize advisory data from osv.dev/GHSA
  * build(deps): bump tame-index from 0.9.2 to 0.9.3</changelog>
  <changelog author="william.brown@suse.com" date="1716897601">- Update to version 0.20.0~git66.972ac93:
  * build(deps): bump comrak from 0.21.0 to 0.24.1 (#1193)
  * build(deps): bump softprops/action-gh-release (#1192)
  * build(deps): bump atom_syndication from 0.12.2 to 0.12.3 (#1191)
  * build(deps): bump rust-embed from 8.3.0 to 8.4.0 (#1190)
  * build(deps): bump petgraph from 0.6.4 to 0.6.5 (#1189)
  * update `gix` to v0.63 for security fixes
  * Upgrade to auditable-info 0.7.2
  * build(deps): bump rust-embed from 8.2.0 to 8.3.0
  * build(deps): bump semver from 1.0.21 to 1.0.23
  * Fix typo `then` -&gt; `them` in index.html
  * Drop unused import
  * Fix typos
  * Use clap to properly parse --color argument
  * Remove duplicated arguments from bin subcommand
  * Support specifying multiple target arches and oses in cargo-audit
  * Make Query's target arch &amp; os a Vec&lt;T&gt; instead of Option&lt;T&gt;
  * build(deps): bump tame-index from 0.11.0 to 0.11.1
  * Apply clippy suggestions
  * Adjust binary type filter for WASM
  * WIP WASM auditing support
  * Fix warnings added in Rust 1.78
  * Regenerate Cargo.lock
  * Bump rustsec version
  * Drop is-terminal line from rustsec changelog; it's a cargo-audit only change
  * Update changelog
  * build(deps): bump chrono from 0.4.34 to 0.4.38
  * build(deps): bump time from 0.3.34 to 0.3.36
  * fix after gix update
  * update gix and tame-index
  * fix cargo clippy warning and error
  * cargo-audit: remove is-terminal dep
  * build(deps): bump regex from 1.10.3 to 1.10.4
  * Regenerate Cargo.lock
  * Bump tame-index and gix versions
  * chore: regenerate platform support and bump to platforms@3.4.0
  * Document to use cargo install with --locked (fixes #1152)
  * Release `rustsec` 0.29.1
  * Revert rustsec-admin Cargo.toml entirely
  * Bump required tame-index version in admin as well
  * Upgrade to gix 0.60 to fix build
  * build(deps): bump actions/cache from 4.0.0 to 4.0.1 (#1135)
  * build(deps): bump auditable-serde from 0.6.0 to 0.6.1
  * build(deps): bump toml_edit from 0.22.5 to 0.22.6
  * build(deps): bump time from 0.3.32 to 0.3.34</changelog>
  <changelog author="william.brown@suse.com" date="1725969600">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1727179200">- Update vendor.tar.zst: gix-path improper path resolution
  (bsc#1230688 CVE-2024-45405).</changelog>
  <changelog author="william.brown@suse.com" date="1730289600">- Update to version 0.21.0~git0.78f9859:
  * cargo-audit v0.21.0 (#1277)
  * README.md(s): fix crate badges (#1276)
  * rustsec v0.30.0 (#1275)
  * Cargo.lock: bump dependencies (#1274)
  * Cargo.toml: bump `cargo-lock` to v10.0.1 (#1272)
  * cargo-lock v10.0.1 (#1271)
  * cargo-lock: fix issue with v4 lockfiles (#1270)
  * cargo-audit v0.21.0-rc.0 (#1267)
  * rustsec v0.30.0-rc.1 (#1266)
  * Cargo.toml(s): fix `repository` links (#1265)
  * cargo-lock v10.0.0 (#1264)
  * cargo-lock: use `doc_auto_cfg` (#1263)
  * cargo-audit: bump `abscissa` to v0.8 (#1262)
  * Bump auditable-extract in Cargo.lock for the WASM bugfix
  * build(deps): bump actions/cache from 4.1.0 to 4.1.1 (#1259)
  * V4 is supported now (#1260)
  * rustsec v0.30.0-rc.0 (#1258)
  * cargo-lock v10.0.0-rc.0 (#1257)
  * cargo-lock: add support for V4 lockfiles (#1206)
  * Cargo.lock: bump dependencies (#1256)
  * build(deps): bump actions/cache from 4.0.2 to 4.1.0 (#1252)
  * bump gix to 0.66 and fwe others (#1251)
  * .github: install target in release workflow
  * build(deps): bump regex from 1.10.5 to 1.10.6 (#1234)
  * build(deps): bump xml-rs from 0.8.20 to 0.8.21 (#1236)
  * cargo-audit: make `cargo-lock` a hard dependency (#1239)
  * build(deps): bump tame-index from 0.13.0 to 0.13.1
  * cargo-audit v0.21.0-pre.0 (#1233)
  * rustsec v0.30.0-pre.0 (#1232)
  * Bump `gix` =&gt; v0.64; `tame-index` =&gt; v0.13 (#1230)
  * rustsec: fix test name (#1231)
  * Bump `auditable-info` =&gt; 0.8; `auditable-serde` =&gt; v0.7 (#1229)
  * Use cargo-lock v10.0.0-pre.0 branch for `auditable-serde` (#1228)
  * cargo-lock v10.0.0-pre.0 (#1227)
  * cargo-lock: remove `toml` from the public API (#1226)
  * Bump `toml` to v0.8 (#1225)
  * Bump versions to prepare for breaking changes (#1224)
  * CI: re-enable self-audit (#1223)
  * Cargo.lock: bump dependencies (#1222)
  * build(deps): bump actions/cache from 4.0.1 to 4.0.2 (#1154)
  * build(deps): bump xml-rs from 0.8.19 to 0.8.20 (#1163)
  * build(deps): bump rust-embed from 8.4.0 to 8.5.0 (#1210)
  * build(deps): bump tame-index from 0.12.0 to 0.12.2 (#1215)
  * rustsec: re-enable happy path test (#1221)
  * build(deps): bump regex from 1.10.4 to 1.10.5 (#1199)
  * build(deps): bump gix-attributes from 0.22.2 to 0.22.3 (#1220)
  * build(deps): bump mio from 0.8.10 to 0.8.11 (#1219)
  * rustsec: Rust 1.80 fixes (#1218)
  * deps: bump libc from 0.2.153 to 0.2.155 (#1197)
  * build(deps): bump url from 2.5.0 to 2.5.2 (#1201)
  * build(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.8 (#1214)
  * chore: leverage workspace inheritance (#1209)
  * chore: cargo fmt
  * tweak help to still show default
  * feat(cli): Honor CARGO_TERM_COLOR if found for cargo-audit
  * chore: regenerate platform support and bump to platforms@3.4.1</changelog>
  <changelog author="william.brown@suse.com" date="1736251200">- add 0001-Skip-warnings.patch to allow building on rust 1.83</changelog>
  <changelog author="william.brown@suse.com" date="1738670400">- Remove 0001-Skip-warnings.patch
- Update to version 0.21.1~git0.bd6fb0f:
  * bump cargo-audit version in cargo toml, I forgot
  * Bump minor version of cargo-lock according to the msrv policy of the crate
  * Populate changelogs
  * Bump versions of crates to be published
  * Documentation tweaks
  * Move binary scanning into its own top-level module, improve documentation
  * More informative doc strings on BinaryFormat variants
  * Fix conditional compilation by always exposing binary format struct in rustsec
  * cfg-out binary format type only available with binary scanning enabled
  * Remove binary scanning from rustsec default features
  * Correctly pass through the binary-scanning feature to rustsec crate
  * Do not assert in tests that there are no vulnerabilities in our own Cargo.lock
  * lower cargo-lock MSRV to 1.73, that's all that our locked dependencies require
  * Bump cargo-lock MSRV to 1.74 following the bump in dependency versions
  * Bump other dependencies with vulns, preserving MSRV
  * Upgrade url crate to fix self-audit issue
  * cargo fmt
  * Comment out hanging test
  * allow(lint) for allow(lint), how deep does the rabbit hole go?
  * Fix typo
  * Don't fail the build if something in acceptance test code is missing documentation
  * Suppress useless warnings that break the build due to deny(warnings)
  * fix: formatting for `*.rs` files
  * style: simplify some statements for readability
  * cargo fmt
  * Fix handling of the database.fetch option
  * fix(cargo-lock): normalize everything for git-ref in dependencies
  * test(cargo-lock): show tag in dependencies is not normalized
  * test(cargo-lock): show branch in dependencies is normalized
  * test(cargo-lock): make lockfile loading inline
  * update
  * move binary-scanning to rustsec api
  * Additionnal clippy and fmt fixes
  * Make cargo-audit's binary_deps module public
  * Do not serialize schema version as 'null' if not set to fix OSV JSON schema compliance
  * Fix links to CVSS calculator
  * Wording tweak in README
  * Document recursive scanning recipe in README.md
  * Nicer link
  * Document the changes for 0.20.1
  * Populate cargo-audit v0.21 changelog
  * Commit Cargo.lock changes
  * Bump platforms to v3.5.0 following #1278
  * chore: regenerate platform support and bump to platforms@3.4.2</changelog>
  <changelog author="william.brown@suse.com" date="1741089600">- Update to version 0.21.2~git0.18e58c2:
  * Bump date in changelog
  * Reference the incompat issue in changelogs
  * Populate cargo-audit changelog
  * Bump cargo-audit version
  * bump rustsec version requirement in Cargo.toml
  * Populate changelog for rustsec
  * bump rustsec crate to 0.30.2
  * build(deps): bump tame-index from 0.18.0 to 0.18.1
  * Bump tame-index to 0.18 to gain support for Rust 1.85
  * Suppress Clippy complaint
  * Update MSRV in Cargo.toml files
  * Try 1.73 MSRV to see if that fixes cvss crate
  * Don't bump MSRV on crates that don't depend on gix
  * bluntly bump the MSRV to 1.81 as it seems to be required by `tame-index`s dependencies.
  * update `gix` to v0.70 and `tame-index` index to 0.17.
  * Cargo.lock: bump Abscissa to v0.8.2 (#1326)
  * Temporarily ignore RUSTSEC-2025-0001 (#1325)</changelog>
</package>
<package pkgid="87a0c6d51403e58fd182216d623e5834e5f7c7fc8528e67aefaaae50fbde26228b7e53fda0ae5e74edd405116c93c0a25432ccf803522509d11f04143aacfefa" name="cargo-audit-advisory-db" arch="x86_64">
  <version epoch="0" ver="20250304" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1696680000">- Update to version 20231007:
  * Assigned RUSTSEC-2023-0066 to pleaser (#1799)
  * Document the privilege-escalation vulnerability in pleaser. (#1798)
  * Update webpki RUSTSEC-2023-0052 advisory. (#1797)
  * Assigned RUSTSEC-2023-0065 to tungstenite (#1796)
  * Create advisory for tungstenite DoS (#1795)
  * Add patch version (#1794)
  * Update info about CVE-2023-5129 (#1793)
  * Bump rustsec-admin to 0.8.8 (#1791)
  * Assigned RUSTSEC-2023-0064 to gix-transport (#1790)
  * Add notice to gix-transport crate (#1789)</changelog>
  <changelog author="william.brown@suse.com" date="1698408000">- Update to version 20231027:
  * Assigned RUSTSEC-2023-0068 to cocoon (#1810)
  * cocoon: sequential calls of encryption API result in nonce reuse (&lt;=0.3.3) (#1805)
  * Updating information about replacements (#1803)
  * Assigned RUSTSEC-2023-0067 to fehler (#1801)
  * fehler is unmaintained (#1800)
  * Assigned RUSTSEC-2023-0066 to pleaser (#1799)
  * Document the privilege-escalation vulnerability in pleaser. (#1798)
  * Update webpki RUSTSEC-2023-0052 advisory. (#1797)
  * Assigned RUSTSEC-2023-0065 to tungstenite (#1796)
  * Create advisory for tungstenite DoS (#1795)</changelog>
  <changelog author="william.brown@suse.com" date="1702987200">- Update to version 20231219:
  * Assigned RUSTSEC-2023-0074 to zerocopy (#1839)
  * zerocopy: Some Ref methods are unsound with some type params (#1837)
  * Update CVSS score of RUSTSEC-2023-0071 (#1838)
  * Assigned RUSTSEC-2023-0073 to candid (#1835)
  * Add advisory for candid library decoding DoS vulnerability (#1834)
  * RUSTSEC-2023-0071: add CVE-2023-49092 as alias (#1830)
  * RUSTSEC-2023-0071.md: use '###' section headers (#1829)
  * RUSTSEC-2023-0071: add CVSS, aliases, and new wording (#1828)
  * Assigned RUSTSEC-2023-0072 to openssl (#1827)
  * `openssl` `X509StoreRef::objects` is unsound (#1824)</changelog>
  <changelog author="william.brown@suse.com" date="1711800000">- Update to version 20240330:
  * Assigned (#1924)
  * Add an unmaintained crate advisory for yaml-rust (#1922)
  * Assigned RUSTSEC-2023-0085 to hpack (#1920)
  * Add hpack panics (#1919)
  * Assigned RUSTSEC-2024-0021 to eyre, RUSTSEC-2023-0084 to hpack (#1916)
  * eyre: Parts of Report are dropped as the wrong type during downcast (#1918)
  * Add security advisory for unmaintained hpack crate (#1915)
  * update RUSTSEC-2024-0020 with additional information (#1913)
  * Assigned RUSTSEC-2024-0020 to whoami (#1912)
  * Add advisory for stack buffer overflow with whoami (#1911)</changelog>
  <changelog author="william.brown@suse.com" date="1716897600">- Update to version 20240528:
  * Add some civility language to HOWTO_UNMAINTAINED.md (#1972)
  * Synchronize IDs (2024-05-21) (#1966)
  * Assigned RUSTSEC-2024-0342 to vodozemac (#1965)
  * Add CVE-2024-34063 for vodozemac (#1955)
  * Assigned RUSTSEC-2024-0341 to tls-listener (#1964)
  * Assigned RUSTSEC-2024-0340 to tor-circmgr (#1963)
  * add CVE-2024-28854 for tls-listener (#1926)
  * Add advisory for tor-circmgr TROVE-2024-004 (#1958)
  * Assigned RUSTSEC-2024-0339 to tor-circmgr (#1962)
  * Add advisory for tor-circmgr TROVE-2024-003 (#1957)</changelog>
  <changelog author="william.brown@suse.com" date="1722340800">- Update to version 20240730:
  * Assigned RUSTSEC-2024-0360 to xmp_toolkit (#2030)
  * Unsoundness notice for xmp_toolkit &lt; 1.9.0 (#2029)
  * Assigned RUSTSEC-2024-0359 to gix-attributes (#2028)
  * Unsoundness notice for gix-attributes (kstring integration) (#2027)
  * Assigned RUSTSEC-2024-0358 to object_store (#2026)
  * Add advisory for object_store credentials leak via logs (#2025)
  * Assigned RUSTSEC-2024-0357 to openssl (#2022)
  * Added advisory for undefined behavior in openssl (#2021)
  * Assigned RUSTSEC-2024-0356 to matrix-sdk-crypto (#2019)
  * Add CVE-2024-40648 for matrix-sdk-crypto (#2018)</changelog>
  <changelog author="william.brown@suse.com" date="1725451200">- Update to version 20240904:
  * Make small readability improvements in RUSTSEC-2023-0064 (#2064)
  * Add global GHSA reference for RUSTSEC-2024-0367 (config scopes) (#2063)
  * Assigned RUSTSEC-2024-0368 to olm-sys (#2062)
  * Add advisory for olm-sys (unmaintained, crypto failure) (#2060)
  * Add CVE number for RUSTSEC-2024-0367 (config scopes) (#2061)
  * Assigned RUSTSEC-2024-0367 to gix-path (#2058)
  * Advisory for GHSA-v26r-4c9c-h3j6 (config scopes) in gix-path (#2055)
  * Assigned RUSTSEC-2024-0366 to cosmwasm-vm (#2053)
  * Add cosmwasm-vm advisory CWA-2023-004 (#2052)
  * update resolution for RUSTSEC-2024-0363 (sqlx) (#2050)</changelog>
  <changelog author="william.brown@suse.com" date="1730289600">- Update to version 20241030:
  * Fix incorrect fixed version for may_queue (#2106)
  * Add missing information about fixed versions (#2105)
  * Assigned RUSTSEC-2024-0378 to pyo3 (#2102)
  * risk of use-after-free in PyO3 borrowing from weak refrences (#2101)
  * Assigned RUSTSEC-2024-0377 to dbn (#2099)
  * Dbn heap buffer overflow (#2097)
  * Update RUSTSEC-2024-0376 affected versions (#2094)
  * Assigned RUSTSEC-2024-0376 to tonic (#2092)
  * Add advisory for CVE-2024-47609 in tonic (#2091)
  * Assigned RUSTSEC-2024-0375 to atty (#2090)</changelog>
  <changelog author="william.brown@suse.com" date="1738670400">- Update to version 20250204:
  * Assigned RUSTSEC-2025-0004 to openssl (#2218)
  * Add advisory for `openssl ssl::select_next_proto` UAF (#2217)
  * Add patch version for RUSTSEC-2021-0087.md (#2216)
  * Assigned RUSTSEC-2025-0002 to fast-float2, RUSTSEC-2025-0003 to fast-float (#2213)
  * Add advisory for segmentation fault in fast-float and fast-float2 (#2192)
  * Add global GHSA and references to RUSTSEC-2025-0001 (#2207)
  * README.md: bump database maintenance year to 2025 (#2208)
  * Assigned RUSTSEC-2024-0434 to matrix-sdk-crypto (#2205)
  * Remove listing of unix-likes from advisory (#2206)
  * Add CVE-2024-52813 for matrix-sdk-crypto (#2204)</changelog>
  <changelog author="william.brown@suse.com" date="1741089600">- Update to version 20250304:
  * openh264-sys is not a notice, it's a vuln (#2234)
  * Assigned RUSTSEC-2025-0008 to openh264-sys2 (#2232)
  * `openh264-sys2` upstream heap overflow. (#2231)
  * *ring* is maintained again, withdraw 2025-0007. (#2230)
  * Assigned RUSTSEC-2025-0007 to ring (#2229)
  * Add unmaintained advisory for *ring* (#2228)
  * Assigned RUSTSEC-2024-0435 to fyrox-core (#2224)
  * Report unsoundness and patch in fyrox-core (#2172)
  * vec-const is gone from crates.io, update linter to fix CI (#2223)
  * Assigned RUSTSEC-2025-0006 to hickory-proto (#2222)</changelog>
</package>
<package pkgid="83f7726e41cff192b2cec143773f11a9fa37ddfd8e43ff9a89a78876074bfbd05f9837dcd0c364908fb9a4ae0bc3eea730c01a1a4380d2faac0d93d70a770e15" name="cargo-auditable" arch="x86_64">
  <version epoch="0" ver="0.6.6~0" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1667476800">- Initial commit</changelog>
  <changelog author="andrea.manzini@suse.com" date="1677153600">- Update to version 0.6.0~0:
  * README and documentation improvements
  * Read the rustc path passed by Cargo; fixes #90
  * Read location of Cargo from the environment variable Cargo sets for third-party subcommands
  * Add a note on sccache version compatibility to CHANGELOG.md
  * Panic on compilation commands where we fail to parse the arguments instead of silently ignoring the error
  * Specifying the binary-scanning feature is no longer needed
  * Pass options such as --offline to `cargo metadata`
  * Pass on arguments from `cargo auditable` invocation to the rustc wrapper; prep work towards fixing #83
  * Bump rust-audit-info to 0.5.2
  * Bump auditable-serde version to 0.5.2
  * Correctly fill in the source even in dependency entries when converting to cargo-lock data format
  * Drop the roundtrip through &amp;str in semver::Version; now that semver 1.0 has shipped the versions are API-compatible and this is no longer necessary
  * Release auditable-info 0.6.1
  * Bump all the version requirements for things depending on auditable-info
  * Fix audit_info_from_slice function signature</changelog>
  <changelog author="uncomfy+openbuildservice@uncomfyhalomacro.pl" date="1709640000">- Update specfile:
  * remove cargo_config file
- Update service file:
  * replace obsoleted "disabled" mode with "manual"
- Update to version 0.6.2~0:
  * Update the lockfile
  * New releases of cargo-auditable and auditable-serde
  * Use a separate project for the custom rustc path tests. Fixes intermittent test failures due to race conditions
  * Revert "add commit hashes to git sources"
  * Fix cyclic dependency graph being encoded
  * Revert "An unsuccessful attempt to fix cycles caused by dev-dependencies"
  * An unsuccessful attempt to fix cycles caused by dev-dependencies
  * Fix typo
  * Add comment
  * Add a test for an issue with cyclic dependencies reported at https://github.com/rustsec/rustsec/issues/1043
  * Fix auditable-serde example not building
  * upgrade dependency miniz_oxide to 0.6.0
  * fix formatting errors
  * apply clippy lints for --all-features
  * improve the internal docs and comments
  * apply clippy lints
  * add missing sources for one of test fixtures
  * add commit hashes to git sources
  * Run all tests on CI
  * cargo fmt
  * Run `cargo clean` in tests to get rid of stale binaries
  * Fix date in changelog
  * Populate changelog
  * Bump auditable-info version in rust-audit-info
  * Add auditable-info changelog
  * Bump versions following cargo-lock bump
  * auditable-serde: bump `cargo-lock` to v9
  * switch to UNRELEASED
  * Update CHANGELOG.md
  * Print a better error if calling rustc fails
  * Drop unused import
  * placate Clippy
  * Don't inject audit info if --print argument is passed to rustc
  * Reflect the version change in Cargo.lock
  * Remove space from keywords
  * bump version to 0.6.1
  * Fix date in changelog
  * Update CHANGELOG.md
  * Add publish=false
  * Commit the generated manpage
  * Add the code for generating a manpage; rather rudimentary so far, but it's a starting point
  * Explain relation to supply chain attacks
  * Add keywords to the Cargo manifest
  * Revert "generate a man page for cargo auditable"
  * fix formatting
  * fix review feedback, relocate file to under OUT_DIR, don't use anyhow and also commit the lock file
  * generate a man page for cargo auditable
  * Add Clippy suppression
  * placate clippy
  * commit Cargo.lock
  * Sync to latest object file writing code from rustc
  * Fix examples in docs
  * Allow redundant field names
  * Apply clippy suggestion: match -&gt; if let
  * Check for clippy and format in CI
  * Apply clippy suggestions
  * Run CI with --locked</changelog>
  <changelog author="william.brown@suse.com" date="1716897600">- Update to version 0.6.4~0:
  * Release cargo-auditable v0.6.4
  * Correctly attribute changelog file addition in changelog
  * Add changelog for auditable-extract
  * Verify various feature combinations in CI
  * Upgrade wasmparser to remove dependencies with `unsafe`
  * Add LoongArch support
  * cargo fmt
  * Move doc headers to README.md and point rustdoc to them, so that we have nice crates.io pages
  * Expand on the note about WebAssembly parsing
  * Populate changelogs
  * Resume bragging about all dependencies being safe, now that there is a caveat below
  * drop fuzz Cargo.lock to always fuzz against latest versions
  * Bump `cargo auditable` version
  * Mention WASM support in README
  * Revert "Be super duper extra sure both MinGW and MSVC are tested on CI"
  * Be super duper extra sure both MinGW and MSVC are tested on CI
  * Add wasm32 targets to CI for more platforms
  * Don't pass --target twice in tests
  * Install WASM toolchain in CI
  * cargo fmt
  * Add WASM end-to-end test
  * cargo fmt
  * Update documentation to mention the WASM feature
  * cargo fmt
  * Plumb WASM parsing feature through the whole stack
  * Make WASM parsing an optional, non-default feature
  * Add a fuzzing harness for WASM parsing
  * Rewritten WASM parsing to avoid heap allocations
  * Initial WASM extraction support
  * Nicer assertion
  * Drop obsolete comment
  * Clarify that embedding the compiler version has shipped.
  * Fixed section name for WASM
  * Unified and more robust platform detection. Fixed wasm build process
  * Initial WASM support
  * More robust platform detection for picking the binary format
  * Fix Windows CI to run both -msvc and -gnu
  * Use the correct link.exe flag for preserving the specified symbol even if it is unused
  * Fix Windows
  * Fix tests on Rust 1.77
  * Placate clippy
  * Oopps, I meant components field
  * Also remove the dependencies field if empty
  * Use serde_json with order preservation feature to get a more compressible JSON after workarounds
  * Work around cyclonedx-bom limitations to produce minified JSON
  * Also record the dependency kind
  * cyclonedx-bom: also record PURL
  * Also write the dependency tree
  * Clear the serial number in the minimal CycloneDX variant
  * Prototype impl of auditable2cdx
  * Fill in auditable2cdx dependencies
  * Initial auditable2cdx boilerplace
  * add #![forbid(unsafe_code)]
  * Initial implementation of auditable-to-cyclonedx conversion
  * Add the necessary dependencies to auditable-cyclonedx
  * Initial dummy package for auditable-cyclonedx</changelog>
  <changelog author="william.brown@suse.com" date="1721390400">- Depend on provides of rust to allow older compiler version usage</changelog>
  <changelog author="william.brown@suse.com" date="1721390401">- Resolve build failure when backported to 15-SP3</changelog>
  <changelog author="william.brown@suse.com" date="1732881600">- Update to version 0.6.6~0:
  * Bump version in Cargo.toml
  * Note the `object` upgrade in the changelog
  * Upgrade cyclonedx-bom from 0.5 to 0.8 in auditable-cyclonedx
  * Upgrade object crate from 0.30 to 0.36 to reduce dependency footprint
  * Update dependencies in the lock file
  * Populate changelog
  * apply clippy lint
  * add another --emit parsing test
  * shorter code with cargo fmt
  * Actually fix cargo-c compatibility
  * Attempt to fix cargo-capi incompatibility
  * Refactoring in preparation for fixes
  * Also read the --emit flag to rustc
  * Fill in changelogs
  * Bump versions
  * Drop cfg'd out tests
  * Drop obsolete doc line
  * Move dependency cycle tests from auditable-serde to cargo-auditable crate
  * Remove cargo_metadata from auditable-serde API surface. I can expose it as a separate crate if anyone tells me they need it.
  * Apply clippy lint
  * Upgrade miniz_oxide to 0.8.0
  * Insulate our semver from miniz_oxide semver
  * Add support for Rust 2024 edition
  * Update tests
  * More robust OS detection for riscv feature detection
  * bump version
  * update changelog for auditable-extract 0.3.5
  * Fix wasm component auditable data extraction
  * Update blocker description in README.md
  * Add openSUSE to adopters
  * Update list of know adopters
  * Fix detection of `riscv64-linux-android` target features
  * Silence noisy lint
  * Bump version requirement in rust-audit-info
  * Fill in changelogs
  * Bump semver of auditable-info
  * Drop obsolete comment now that wasm is enabled by default
  * Remove dependency on cargo-lock
  * Brag about adoption in the README
  * Don't use LTO for cargo-dist builds to make them consistent with `cargo install` etc
  * Also build musl binaries
  * dist: update dist config for future releases
  * dist(cargo-auditable): ignore auditable2cdx for now
  * chore: add cargo-dist</changelog>
</package>
<package pkgid="bcafe4ea59757c782165dbcd401d0d1a5794705a24e3537699f23c95bd5114bf2a72abdd41bc577c84048a161f257d76fb8d6b64c98237c479fe5ee283989712" name="cargo-c" arch="x86_64">
  <version epoch="0" ver="0.10.15" rel="160000.1.1"/>
  <changelog author="dmueller@suse.com" date="1678795200">- add constraints to avoid out of disk space errors</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697544000">- Update to version 0.9.27~git0.54774e0:
  * Complete the soversion granularity
  * Bump cbindgen
  * Make sure the version variables are consistent
  * Fix sover detection for 0-based versioning
  * Bump cargo version
  * Bump cbindgen
  * Do not pass the token to clippy-check
- Switch _service to manual.</changelog>
  <changelog author="david.mulder@suse.com" date="1717502400">- Update to version 0.9.32~git0.56dfe34:
  * Prepare for release
  * Bump cargo version
  * Use clone_from/clone_into
  * Do not install the versioned links and lib on Android
  * docs: add rustls-ffi to README users list
  * Bump the msrv again
  * Bump msrv
  * Bump cargo version
  * Match the beaviour of meson regarding relative paths in the install directories
  * Bump cargo version</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1724760000">- Update to version 0.10.3~git0.ee7d7ef:
  * Wire in the heuristics
  * Implement heuristics for target-specific install paths
  * Fix the generated header fingerprinting logic
  * Make notice about missing windows debug files verbose-only
  * Update dependencies
  * Require cargo 0.80.0
- Use macros from cargo-packaging
- Remove cargo_config: contained in vendor.tar
- Remove cargo_audit service: now part of cargo_vendor
- Remove custom rustflags and let the macros set them instead</changelog>
  <changelog author="william.brown@suse.com" date="1726833600">- bsc#1230683 - CVE-2024-45405 - gix-path improper path resolution</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- bsc#1242675 - CVE-2025-3416 - openssl use after free</changelog>
  <changelog author="william.brown@suse.com" date="1749729600">- bsc#1243179 - CVE-2025-4574 - double free in crossbeam channel drop
- bsc#1243851 - CVE-2024-12224 - idna accepts invalid punycode</changelog>
  <changelog author="william.brown@suse.com" date="1757505600">- bsc#1249012 - CVE-2025-58160 - tracing subscriber ansi escapes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1757592000">- Update to version 0.10.15~git0.3e178d5:
  * Bump actions/download-artifact from 4 to 5
  * Update implib requirement from 0.3.5 to 0.4.0
  * Add rlib to the targets when building tests
  * Allow disabling emission of library version constants in header files
  * Bump to cargo 0.90
  * Fix static_libraries swallowing sequence of -framework flags
  * Fix non-POSIX paths in Libdir under Windows
  * Bump actions-rs-plus/clippy-check from 2.2.1 to 2.3.0
  * Fix clippy lints
  * Bump cargo-0.89, object-0.37.1, cbindgen-0.29</changelog>
  <changelog author="dimstar@opensuse.org" date="1757764800">- Fix _service file to have proper versioning:
  + Do not use ~ in versions: ~ implies 'older than';
    @PARENT_OFFSET@ is always ahead of PARENT_TAG; the proper sign
    for this is +
  + Adjust the rewrite rule to strip +git0.* - when we are ON the
    tag, without any offset, we can just use the tag as version.</changelog>
</package>
<package pkgid="78f4ec3a81a0a86ac215a54b1377b4b641ff8f8afdc1e5afa14253af5d72c4c1894b4e547af1b84f685dc02b4d910e31212c90d9f7bfcbd7da1d086b1b53bc11" name="cargo-c" arch="x86_64">
  <version epoch="0" ver="0.10.3~git0.ee7d7ef" rel="160000.2.2"/>
  <changelog author="asn@cryptomilk.org" date="1641816000">- Update to version 0.9.6~git0.68e65ad:
  * Prepare for release
  * Bump cargo
  * Support custom paths for data files as it is available for includes
  * Fix the datadir description
  * Change the configuration paths for datadir
  * Add datadir destination path customization
  * Suppress warning about dead code for Common
  * Add datadir support
  * Make sure the right rust is used on deploy
  * Bump the edition in the examples</changelog>
  <changelog author="william.brown@suse.com" date="1646222400">- Update vendored libraries to resolve security issues.</changelog>
  <changelog author="asn@cryptomilk.org" date="1656936000">- Update to version 0.9.11~git0.41f5562:
  * Prepare for release
  * Fix clippy warnings
  * Versions bump
  * Add back the deps.rs badge
  * Increase the regex requirement
  * Prepare for release
  * Bump cargo
  * Add support for Haiku Operating System
  * Add udbserver to users
  * Extend the coverage further
  * Fix the code coverage script
  * Fix subcommand fallback support
  * Print the issued commands
  * Fix testing cross compilation
  * Bump cargo-metadata
  * Bump cbindgen
  * Support rustc-1.60 and following
  * Update to clap-3.1 and cargo-0.61
  * Prepare for release
  * Do not use the patch version in macOS -install_name
  * Add Android to the build targets supported by LibType
  * Make nightly clippy happy
  * Simplify a writln
  * Prepare for release
  * Bump cargo version
  * Remove newlines from the description
  * Make the default destdir None
  * CI: use MSYS2 cargo package for example project
  * Print the PKG_CONFIG_PATH in verbose mode</changelog>
  <changelog author="asn@cryptomilk.org" date="1672660800">- Update to version 0.9.15~git0.2d3044b:
  * Prepare for release
  * Update to cargo-0.67 and clap-4
  * macos: Allow larger install_name entries
  * Fix the new clippy lints
  * Don't include version in soname ELF header if versioning is disabled
  * Use get_many instead of values_of_lossy
  * Use macos-12 for the macos runner
  * Add job deps
  * Generate paths relative to ${prefix} in the pkg-config file even if --libdir or --includedir are given
  * Compact the main CI
  * Fix more warnings in the main CI
  * Use a custom release profile to strip binaries
  * ci(deploy): Use musl abi for aarch64 linux binary, add i686 linux
  * Remove msys2 test
  * Update the example-project CI
  * Make sure the supported rustc version is evident
  * Use the default compiler to build a static binary for musl
  * Save all the linux binaries
  * Prepare for release
  * Add pre-built ppc64le and aarch64 linux binaries
  * Simplify the deploy script
  * Fix new clippy lints
  * Update to cargo-0.66
  * Use dtolnay/rust-toolchain
  * Remove actions-rs/cargo
  * Prepare for release
  * add support for illumos
  * Bump cargo version
  * Prepare for release
  * Bump cargo to 0.64
  * Install the windows DLL in the libdir if it is custom
  * Fix typo on readme
  * Bump the codecov action
  * Add sonames on musl</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- add constraints to avoid out of disk space errors</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697544000">- Update to version 0.9.27~git0.54774e0:
  * Complete the soversion granularity
  * Bump cbindgen
  * Make sure the version variables are consistent
  * Fix sover detection for 0-based versioning
  * Bump cargo version
  * Bump cbindgen
  * Do not pass the token to clippy-check
- Switch _service to manual.</changelog>
  <changelog author="david.mulder@suse.com" date="1717502400">- Update to version 0.9.32~git0.56dfe34:
  * Prepare for release
  * Bump cargo version
  * Use clone_from/clone_into
  * Do not install the versioned links and lib on Android
  * docs: add rustls-ffi to README users list
  * Bump the msrv again
  * Bump msrv
  * Bump cargo version
  * Match the beaviour of meson regarding relative paths in the install directories
  * Bump cargo version</changelog>
  <changelog author="kilgore.trout@idesmi.eu" date="1724760000">- Update to version 0.10.3~git0.ee7d7ef:
  * Wire in the heuristics
  * Implement heuristics for target-specific install paths
  * Fix the generated header fingerprinting logic
  * Make notice about missing windows debug files verbose-only
  * Update dependencies
  * Require cargo 0.80.0
- Use macros from cargo-packaging
- Remove cargo_config: contained in vendor.tar
- Remove cargo_audit service: now part of cargo_vendor
- Remove custom rustflags and let the macros set them instead</changelog>
  <changelog author="william.brown@suse.com" date="1726833600">- bsc#1230683 - CVE-2024-45405 - gix-path improper path resolution</changelog>
  <changelog author="william.brown@suse.com" date="1746619200">- bsc#1242675 - CVE-2025-3416 - openssl use after free</changelog>
</package>
<package pkgid="7b6c7fc1854828b3fb53e69567ea8b9f8904a170bb07ed380e1a8620ec16039f75a6b2bea6dc15f206719f41c9233c8e9981df0f8f66e9a5b60879ca50f1dea7" name="cargo-packaging" arch="x86_64">
  <version epoch="0" ver="1.2.0+7" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1676721600">- Update to version 1.2.0+0:
  * marcos.cargo: add path parameter in cargo_install (#3)</changelog>
  <changelog author="william.brown@suse.com" date="1677844800">- Update vendored dependencies
- Add supporting sources for cargo metadata extraction
  * cargo-packaging-1.2.0+0.tar.xz
  * cargo_config
  * vendor.tar.xz</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212226 - add rust-packaging compat
- Update to version 1.2.0+2:
  * Default flags
  * Add buildflags</changelog>
  <changelog author="william.brown@suse.com" date="1687176000">- Update to version 1.2.0+3:
  * rename variable for bitwarden</changelog>
  <changelog author="william.brown@suse.com" date="1692014400">- Update to version 1.2.0+4:
  * macros.cargo: Drop bashisms (#4)</changelog>
  <changelog author="william.brown@suse.com" date="1712232000">- bsc#1222175 - prevent stripping debug info
- Update to version 1.2.0+5:
  * Prevent stripping debuginfo in release by default (#7)</changelog>
  <changelog author="william.brown@suse.com" date="1712318400">- Remove cargo_config that is now part of vendor.tar</changelog>
  <changelog author="william.brown@suse.com" date="1721390400">- Depend on provides of rust to allow older compiler version usage</changelog>
  <changelog author="william.brown@suse.com" date="1721390401">- Resolve build failure when backported to 15-SP3</changelog>
  <changelog author="william.brown@suse.com" date="1736164800">- Update to version 1.2.0+7:
  * Correct incremental build flags (#10)
  * Doc custom build flags (#9)</changelog>
</package>
<package pkgid="251b520a68eadcd4d25d45f81dfb023a2d19c3dff805bb6a248b6d23875b1ad948123887771f8964d680ac289a57fbe88da12c8f3333b2adb82a33d62fe0876c" name="cargo-vendor-filterer" arch="x86_64">
  <version epoch="0" ver="0.5.16" rel="bp160.1.1"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1694433600">- Initial spec for cargo-vendor-filterer 0.5.11</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1709121600">- Update to 0.5.12
  * Warn about unknown keys in Cargo.toml
  * Correctly handle filtered-out latest versions</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1711627200">- Update to 0.5.13
  * Add --respect-source-config option
  * Implement --sync
- Use filtered vendor-tarball
- Remove cargo_config, which is now part of the vendor-tarball</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1715169600">- Update to 0.5.14:
  * improvement: add option `--no-default-features` and `--features`
  * change fieldname types of feature and no-default-features to Vec&lt;String&gt; and bool, respectively
  * fix: use clap and serde default for new fieldnames
  * cleanup: replace Option&lt;bool&gt; with default values with bool for all-features
  * cleanup: add the if-elses for the new cli and config options on add_packages_for_platform too
  * ci: update nushell to 0.91.0 for vendor tests
- Update service file:
  * use glob so we don't need to edit versions in the _service file.</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1725969600">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfyhalomacro@opensuse.org&gt;" date="1730462400">- Update to version 0.5.16:
  * Fix wrongly filtered out packages when using --versioned-dirs
  * feat: add optional dep-kind parameter</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1746705600">- Update dependencies to fix bsc#1242681</changelog>
</package>
<package pkgid="de0d622f3dbf47df0e389d6cd78eb45984f09fde7facdf6abc798c78f6c3c2e6bbc71a39eebead47a6f5eb21e4a847550730315a3057c5dbaa1c0c452ded2da4" name="cargo1.78" arch="x86_64">
  <version epoch="0" ver="1.78.0" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1715688000">Version 1.78.0 (2024-05-02)
  [#]# Language
- [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
- [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
- [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
- [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
- [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
- [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
- [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
- [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
  This lint currently only works when using Cargo.
- [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
- [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
- [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
- [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
- [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
- [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
  [#]# Compiler
- [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
- [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
- [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
- [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
  Target changes:
- [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
  - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
- [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
- [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
- [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
- [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
- [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
- [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  [#]# Libraries
- [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
- [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
- [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
- [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
- [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
- [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
- [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
  [#]# Stabilized APIs
- [`impl Read for &amp;Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
- [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
- [Make `impl&lt;Fd: AsFd&gt;` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
- [`impl From&lt;TryReserveError&gt; for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
  These APIs are now stable in const contexts:
- [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
  [#]# Cargo
- [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
- [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
- [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
- [Support `target.&lt;triple&gt;.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
- [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
  [#]# Misc
- [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
  [#]# Compatibility Notes
- [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
- [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
- [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
- [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
- [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
- [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
- [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.</changelog>
  <changelog author="william.brown@suse.com" date="1715947200">- Update incorrect tumbleweed version check.</changelog>
  <changelog author="william.brown@suse.com" date="1719489600">- Add src, rustfmt and clippy for the Linux Kernel CI tooling.</changelog>
  <changelog author="william.brown@suse.com" date="1719576000">- Fix incorrect test conditional</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1741262400">- Fix test failed.</changelog>
  <changelog author="william.brown@suse.com" date="1750852800">- bsc#1243588 - Disable failing wasm tests</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1243588 - Update changelog to remove hyphen as a line break for source validator</changelog>
</package>
<package pkgid="2b25fa3cf2c34f1d3eb088aeead5f658137202abc3cb11cfb65db3aac4129c436aabb5c680f24a9f6016d3c50c7819ea640e168e40a253bc3bc318011f58ffd7" name="cargo1.80" arch="x86_64">
  <version epoch="0" ver="1.80.1" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1721995200">Version 1.80.0 (2024-07-25)
  Language
--------
- [Document maximum allocation size](https://github.com/rust-lang/rust/pull/116675/)
- [Allow zero-byte offsets and ZST read/writes on arbitrary pointers](https://github.com/rust-lang/rust/pull/117329/)
- [Support C23's variadics without a named parameter](https://github.com/rust-lang/rust/pull/124048/)
- [Stabilize `exclusive_range_pattern` feature](https://github.com/rust-lang/rust/pull/124459/)
- [Guarantee layout and ABI of `Result` in some scenarios](https://github.com/rust-lang/rust/pull/124870)
  Compiler
--------
- [Update cc crate to v1.0.97 allowing additional spectre mitigations on MSVC targets](https://github.com/rust-lang/rust/pull/124892/)
- [Allow field reordering on types marked `repr(packed(1))`](https://github.com/rust-lang/rust/pull/125360/)
- [Add a lint against never type fallback affecting unsafe code](https://github.com/rust-lang/rust/pull/123939/)
- [Disallow cast with trailing braced macro in let-else](https://github.com/rust-lang/rust/pull/125049/)
- [Expand `for_loops_over_fallibles` lint to lint on fallibles behind references.](https://github.com/rust-lang/rust/pull/125156/)
- [self-contained linker: retry linking without `-fuse-ld=lld` on CCs that don't support it](https://github.com/rust-lang/rust/pull/125417/)
- [Do not parse CVarArgs (`...`) as a type in trait bounds](https://github.com/rust-lang/rust/pull/125863/)
- Improvements to LLDB formatting [#124458](https://github.com/rust-lang/rust/pull/124458) [#124500](https://github.com/rust-lang/rust/pull/124500)
- [For the wasm32-wasip2 target default to PIC and do not use `-fuse-ld=lld`](https://github.com/rust-lang/rust/pull/124858/)
- [Add x86_64-unknown-linux-none as a tier 3 target](https://github.com/rust-lang/rust/pull/125023/)
- [Lint on `foo.into_iter()` resolving to `&amp;Box&lt;[T]&gt;: IntoIterator`](https://github.com/rust-lang/rust/pull/124097/)
  Libraries
---------
- [Add `size_of` and `size_of_val` and `align_of` and `align_of_val` to the prelude](https://github.com/rust-lang/rust/pull/123168/)
- [Abort a process when FD ownership is violated](https://github.com/rust-lang/rust/pull/124210/)
- [io::Write::write_fmt: panic if the formatter fails when the stream does not fail](https://github.com/rust-lang/rust/pull/125012/)
- [Panic if `PathBuf::set_extension` would add a path separator](https://github.com/rust-lang/rust/pull/125070/)
- [Add assert_unsafe_precondition to unchecked_{add,sub,neg,mul,shl,shr} methods](https://github.com/rust-lang/rust/pull/121571/)
- [Update `c_char` on AIX to use the correct type](https://github.com/rust-lang/rust/pull/122986/)
- [`offset_of!` no longer returns a temporary](https://github.com/rust-lang/rust/pull/124484/)
- [Handle sigma in `str.to_lowercase` correctly](https://github.com/rust-lang/rust/pull/124773/)
- [Raise `DEFAULT_MIN_STACK_SIZE` to at least 64KiB](https://github.com/rust-lang/rust/pull/126059/)
  Stabilized APIs
- [`impl Default for Rc&lt;CStr&gt;`](https://doc.rust-lang.org/beta/alloc/rc/struct.Rc.html#impl-Default-for-Rc%3CCStr%3E)
- [`impl Default for Rc&lt;str&gt;`](https://doc.rust-lang.org/beta/alloc/rc/struct.Rc.html#impl-Default-for-Rc%3Cstr%3E)
- [`impl Default for Rc&lt;[T]&gt;`](https://doc.rust-lang.org/beta/alloc/rc/struct.Rc.html#impl-Default-for-Rc%3C%5BT%5D%3E)
- [`impl Default for Arc&lt;str&gt;`](https://doc.rust-lang.org/beta/alloc/sync/struct.Arc.html#impl-Default-for-Arc%3Cstr%3E)
- [`impl Default for Arc&lt;CStr&gt;`](https://doc.rust-lang.org/beta/alloc/sync/struct.Arc.html#impl-Default-for-Arc%3CCStr%3E)
- [`impl Default for Arc&lt;[T]&gt;`](https://doc.rust-lang.org/beta/alloc/sync/struct.Arc.html#impl-Default-for-Arc%3C%5BT%5D%3E)
- [`impl IntoIterator for Box&lt;[T]&gt;`](https://doc.rust-lang.org/beta/alloc/boxed/struct.Box.html#impl-IntoIterator-for-Box%3C%5BI%5D,+A%3E)
- [`impl FromIterator&lt;String&gt; for Box&lt;str&gt;`](https://doc.rust-lang.org/beta/alloc/boxed/struct.Box.html#impl-FromIterator%3CString%3E-for-Box%3Cstr%3E)
- [`impl FromIterator&lt;char&gt; for Box&lt;str&gt;`](https://doc.rust-lang.org/beta/alloc/boxed/struct.Box.html#impl-FromIterator%3Cchar%3E-for-Box%3Cstr%3E)
- [`LazyCell`](https://doc.rust-lang.org/beta/core/cell/struct.LazyCell.html)
- [`LazyLock`](https://doc.rust-lang.org/beta/std/sync/struct.LazyLock.html)
- [`Duration::div_duration_f32`](https://doc.rust-lang.org/beta/std/time/struct.Duration.html#method.div_duration_f32)
- [`Duration::div_duration_f64`](https://doc.rust-lang.org/beta/std/time/struct.Duration.html#method.div_duration_f64)
- [`Option::take_if`](https://doc.rust-lang.org/beta/std/option/enum.Option.html#method.take_if)
- [`Seek::seek_relative`](https://doc.rust-lang.org/beta/std/io/trait.Seek.html#method.seek_relative)
- [`BinaryHeap::as_slice`](https://doc.rust-lang.org/beta/std/collections/struct.BinaryHeap.html#method.as_slice)
- [`NonNull::offset`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.offset)
- [`NonNull::byte_offset`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.byte_offset)
- [`NonNull::add`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.add)
- [`NonNull::byte_add`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.byte_add)
- [`NonNull::sub`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.sub)
- [`NonNull::byte_sub`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.byte_sub)
- [`NonNull::offset_from`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.offset_from)
- [`NonNull::byte_offset_from`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.byte_offset_from)
- [`NonNull::read`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.read)
- [`NonNull::read_volatile`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.read_volatile)
- [`NonNull::read_unaligned`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.read_unaligned)
- [`NonNull::write`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.write)
- [`NonNull::write_volatile`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.write_volatile)
- [`NonNull::write_unaligned`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.write_unaligned)
- [`NonNull::write_bytes`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.write_bytes)
- [`NonNull::copy_to`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.copy_to)
- [`NonNull::copy_to_nonoverlapping`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.copy_to_nonoverlapping)
- [`NonNull::copy_from`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.copy_from)
- [`NonNull::copy_from_nonoverlapping`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.copy_from_nonoverlapping)
- [`NonNull::replace`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.replace)
- [`NonNull::swap`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.swap)
- [`NonNull::drop_in_place`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.drop_in_place)
- [`NonNull::align_offset`](https://doc.rust-lang.org/beta/std/ptr/struct.NonNull.html#method.align_offset)
- [`&lt;[T]&gt;::split_at_checked`](https://doc.rust-lang.org/beta/std/primitive.slice.html#method.split_at_checked)
- [`&lt;[T]&gt;::split_at_mut_checked`](https://doc.rust-lang.org/beta/std/primitive.slice.html#method.split_at_mut_checked)
- [`str::split_at_checked`](https://doc.rust-lang.org/beta/std/primitive.str.html#method.split_at_checked)
- [`str::split_at_mut_checked`](https://doc.rust-lang.org/beta/std/primitive.str.html#method.split_at_mut_checked)
- [`str::trim_ascii`](https://doc.rust-lang.org/beta/std/primitive.str.html#method.trim_ascii)
- [`str::trim_ascii_start`](https://doc.rust-lang.org/beta/std/primitive.str.html#method.trim_ascii_start)
- [`str::trim_ascii_end`](https://doc.rust-lang.org/beta/std/primitive.str.html#method.trim_ascii_end)
- [`&lt;[u8]&gt;::trim_ascii`](https://doc.rust-lang.org/beta/core/primitive.slice.html#method.trim_ascii)
- [`&lt;[u8]&gt;::trim_ascii_start`](https://doc.rust-lang.org/beta/core/primitive.slice.html#method.trim_ascii_start)
- [`&lt;[u8]&gt;::trim_ascii_end`](https://doc.rust-lang.org/beta/core/primitive.slice.html#method.trim_ascii_end)
- [`Ipv4Addr::BITS`](https://doc.rust-lang.org/beta/core/net/struct.Ipv4Addr.html#associatedconstant.BITS)
- [`Ipv4Addr::to_bits`](https://doc.rust-lang.org/beta/core/net/struct.Ipv4Addr.html#method.to_bits)
- [`Ipv4Addr::from_bits`](https://doc.rust-lang.org/beta/core/net/struct.Ipv4Addr.html#method.from_bits)
- [`Ipv6Addr::BITS`](https://doc.rust-lang.org/beta/core/net/struct.Ipv6Addr.html#associatedconstant.BITS)
- [`Ipv6Addr::to_bits`](https://doc.rust-lang.org/beta/core/net/struct.Ipv6Addr.html#method.to_bits)
- [`Ipv6Addr::from_bits`](https://doc.rust-lang.org/beta/core/net/struct.Ipv6Addr.html#method.from_bits)
- [`Vec::&lt;[T; N]&gt;::into_flattened`](https://doc.rust-lang.org/beta/alloc/vec/struct.Vec.html#method.into_flattened)
- [`&lt;[[T; N]]&gt;::as_flattened`](https://doc.rust-lang.org/beta/core/primitive.slice.html#method.as_flattened)
- [`&lt;[[T; N]]&gt;::as_flattened_mut`](https://doc.rust-lang.org/beta/core/primitive.slice.html#method.as_flattened_mut)
  These APIs are now stable in const contexts:
- [`&lt;[T]&gt;::last_chunk`](https://doc.rust-lang.org/beta/core/primitive.slice.html#method.last_chunk)
- [`BinaryHeap::new`](https://doc.rust-lang.org/beta/std/collections/struct.BinaryHeap.html#method.new)
  Cargo
-----
- [Stabilize `-Zcheck-cfg` as always enabled](https://github.com/rust-lang/cargo/pull/13571/)
- [Warn, rather than fail publish, if a target is excluded](https://github.com/rust-lang/cargo/pull/13713/)
- [Add special `check-cfg` lint config for the `unexpected_cfgs` lint](https://github.com/rust-lang/cargo/pull/13913/)
- [Stabilize `cargo update --precise &lt;yanked&gt;`](https://github.com/rust-lang/cargo/pull/13974/)
- [Don't change file permissions on `Cargo.toml` when using `cargo add`](https://github.com/rust-lang/cargo/pull/13898/)
- [Support using `cargo fix` on IPv6-only networks](https://github.com/rust-lang/cargo/pull/13907/)
  Rustdoc
-----
- [Allow searching for references](https://github.com/rust-lang/rust/pull/124148/)
- [Stabilize `custom_code_classes_in_docs` feature](https://github.com/rust-lang/rust/pull/124577/)
- [fix: In cross-crate scenarios show enum variants on type aliases of enums](https://github.com/rust-lang/rust/pull/125300/)
  Compatibility Notes
- [rustfmt estimates line lengths differently when using non-ascii characters](https://github.com/rust-lang/rustfmt/issues/6203)
- [Type aliases are now handled correctly in orphan check](https://github.com/rust-lang/rust/pull/117164/)
- [Allow instructing rustdoc to read from stdin via `-`](https://github.com/rust-lang/rust/pull/124611/)
- [`std::env::{set_var, remove_var}` can no longer be converted to safe function pointers and no longer implement the `Fn` family of traits](https://github.com/rust-lang/rust/pull/124636)
- [Warn (or error) when `Self` constructor from outer item is referenced in inner nested item](https://github.com/rust-lang/rust/pull/124187/)
- [Turn `indirect_structural_match` and `pointer_structural_match` lints into hard errors](https://github.com/rust-lang/rust/pull/124661/)
- [Make `where_clause_object_safety` lint a regular object safety violation](https://github.com/rust-lang/rust/pull/125380/)
- [Turn `proc_macro_back_compat` lint into a hard error.](https://github.com/rust-lang/rust/pull/125596/)
- [Detect unused structs even when implementing private traits](https://github.com/rust-lang/rust/pull/122382/)
- [`std::sync::ReentrantLockGuard&lt;T&gt;` is no longer `Sync` if `T: !Sync`](https://github.com/rust-lang/rust/pull/125527) which means [`std::io::StdoutLock` and `std::io::StderrLock` are no longer Sync](https://github.com/rust-lang/rust/issues/127340)
  Internal Changes
  These changes do not affect any public interfaces of Rust, but they represent
  significant improvements to the performance or internals of rustc and related
  tools.
- Misc improvements to size of generated html by rustdoc e.g. [#124738](https://github.com/rust-lang/rust/pull/124738/) and [#123734](https://github.com/rust-lang/rust/pull/123734/)
- [MSVC targets no longer depend on libc](https://github.com/rust-lang/rust/pull/124050/)</changelog>
  <changelog author="william.brown@suse.com" date="1723204800">Version 1.80.1 (2024-08-08)
- [Fix miscompilation in the jump threading MIR optimization when comparing floats](https://github.com/rust-lang/rust/pull/128271)
- [Revert changes to the `dead_code` lint from 1.80.0](https://github.com/rust-lang/rust/pull/128618)</changelog>
</package>
<package pkgid="6d32c4bdc6526602ab9ba6824649bd25372e4cae96e7918902cad6fd76bcb7fc1cec3a764d6902184b947a7038847eb114914eaf74d9d8a6d7ff429104f28680" name="cargo1.81" arch="x86_64">
  <version epoch="0" ver="1.81.0" rel="160000.2.2"/>
  <changelog author="xiaoguang.wang@suse.com" date="1725883200">Version 1.81.0 (2024-09-05)
  Language
--------
- [Abort on uncaught panics in `extern "C"` functions.](https://github.com/rust-lang/rust/pull/116088/)
- [Fix ambiguous cases of multiple `&amp;` in elided self lifetimes.](https://github.com/rust-lang/rust/pull/117967/)
- [Stabilize `#[expect]` for lints (RFC 2383),](https://github.com/rust-lang/rust/pull/120924/) like `#[allow]` with a warning if the lint is _not_ fulfilled.
- [Change method resolution to constrain hidden types instead of rejecting method candidates.](https://github.com/rust-lang/rust/pull/123962/)
- [Bump `elided_lifetimes_in_associated_constant` to deny.](https://github.com/rust-lang/rust/pull/124211/)
- [`offset_from`: always allow pointers to point to the same address.](https://github.com/rust-lang/rust/pull/124921/)
- [Allow constraining opaque types during subtyping in the trait system.](https://github.com/rust-lang/rust/pull/125447/)
- [Allow constraining opaque types during various unsizing casts.](https://github.com/rust-lang/rust/pull/125610/)
- [Deny keyword lifetimes pre-expansion.](https://github.com/rust-lang/rust/pull/126762/)
  Compiler
--------
- [Make casts of pointers to trait objects stricter.](https://github.com/rust-lang/rust/pull/120248/)
- [Check alias args for well-formedness even if they have escaping bound vars.](https://github.com/rust-lang/rust/pull/123737/)
- [Deprecate no-op codegen option `-Cinline-threshold=...`.](https://github.com/rust-lang/rust/pull/124712/)
- [Re-implement a type-size based limit.](https://github.com/rust-lang/rust/pull/125507/)
- [Properly account for alignment in `transmute` size checks.](https://github.com/rust-lang/rust/pull/125740/)
- [Remove the `box_pointers` lint.](https://github.com/rust-lang/rust/pull/126018/)
- [Ensure the interpreter checks bool/char for validity when they are used in a cast.](https://github.com/rust-lang/rust/pull/126265/)
- [Improve coverage instrumentation for functions containing nested items.](https://github.com/rust-lang/rust/pull/127199/)
- Target changes:
  - [Add Tier 3 `no_std` Xtensa targets:](https://github.com/rust-lang/rust/pull/125141/) `xtensa-esp32-none-elf`, `xtensa-esp32s2-none-elf`, `xtensa-esp32s3-none-elf`
  - [Add Tier 3 `std` Xtensa targets:](https://github.com/rust-lang/rust/pull/126380/) `xtensa-esp32-espidf`, `xtensa-esp32s2-espidf`, `xtensa-esp32s3-espidf`
  - [Add Tier 3 i686 Redox OS target:](https://github.com/rust-lang/rust/pull/126192/) `i686-unknown-redox`
  - [Promote `arm64ec-pc-windows-msvc` to Tier 2.](https://github.com/rust-lang/rust/pull/126039/)
  - [Promote `loongarch64-unknown-linux-musl` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/126298/)
  - [Enable full tools and profiler for LoongArch Linux targets.](https://github.com/rust-lang/rust/pull/127078/)
  - [Unconditionally warn on usage of `wasm32-wasi`.](https://github.com/rust-lang/rust/pull/126662/) (see compatibility note below)
  - Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support.
  Libraries
---------
- [Split core's `PanicInfo` and std's `PanicInfo`.](https://github.com/rust-lang/rust/pull/115974/) (see compatibility note below)
- [Generalize `{Rc,Arc}::make_mut()` to unsized types.](https://github.com/rust-lang/rust/pull/116113/)
- [Replace sort implementations with stable `driftsort` and unstable `ipnsort`.](https://github.com/rust-lang/rust/pull/124032/) All `slice::sort*` and `slice::select_nth*` methods are expected to see significant performance improvements. See the [research project](https://github.com/Voultapher/sort-research-rs) for more details.
- [Document behavior of `create_dir_all` with respect to empty paths.](https://github.com/rust-lang/rust/pull/125112/)
- [Fix interleaved output in the default panic hook when multiple threads panic simultaneously.](https://github.com/rust-lang/rust/pull/127397/)
  Stabilized APIs
- [`core::error`](https://doc.rust-lang.org/stable/core/error/index.html)
- [`hint::assert_unchecked`](https://doc.rust-lang.org/stable/core/hint/fn.assert_unchecked.html)
- [`fs::exists`](https://doc.rust-lang.org/stable/std/fs/fn.exists.html)
- [`AtomicBool::fetch_not`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicBool.html#method.fetch_not)
- [`Duration::abs_diff`](https://doc.rust-lang.org/stable/core/time/struct.Duration.html#method.abs_diff)
- [`IoSlice::advance`](https://doc.rust-lang.org/stable/std/io/struct.IoSlice.html#method.advance)
- [`IoSlice::advance_slices`](https://doc.rust-lang.org/stable/std/io/struct.IoSlice.html#method.advance_slices)
- [`IoSliceMut::advance`](https://doc.rust-lang.org/stable/std/io/struct.IoSliceMut.html#method.advance)
- [`IoSliceMut::advance_slices`](https://doc.rust-lang.org/stable/std/io/struct.IoSliceMut.html#method.advance_slices)
- [`PanicHookInfo`](https://doc.rust-lang.org/stable/std/panic/struct.PanicHookInfo.html)
- [`PanicInfo::message`](https://doc.rust-lang.org/stable/core/panic/struct.PanicInfo.html#method.message)
- [`PanicMessage`](https://doc.rust-lang.org/stable/core/panic/struct.PanicMessage.html)
  These APIs are now stable in const contexts:
- [`char::from_u32_unchecked`](https://doc.rust-lang.org/stable/core/char/fn.from_u32_unchecked.html) (function)
- [`char::from_u32_unchecked`](https://doc.rust-lang.org/stable/core/primitive.char.html#method.from_u32_unchecked) (method)
- [`CStr::count_bytes`](https://doc.rust-lang.org/stable/core/ffi/c_str/struct.CStr.html#method.count_bytes)
- [`CStr::from_ptr`](https://doc.rust-lang.org/stable/core/ffi/c_str/struct.CStr.html#method.from_ptr)
  Cargo
-----
- [Generated `.cargo_vcs_info.json` is always included, even when `--allow-dirty` is passed.](https://github.com/rust-lang/cargo/pull/13960/)
- [Disallow `package.license-file` and `package.readme` pointing to non-existent files during packaging.](https://github.com/rust-lang/cargo/pull/13921/)
- [Disallow passing `--release`/`--debug` flag along with the `--profile` flag.](https://github.com/rust-lang/cargo/pull/13971/)
- [Remove `lib.plugin` key support in `Cargo.toml`. Rust plugin support has been deprecated for four years and was removed in 1.75.0.](https://github.com/rust-lang/cargo/pull/13902/)
  Compatibility Notes
  * Usage of the `wasm32-wasi` target will now issue a compiler warning and request users switch to the `wasm32-wasip1` target instead. Both targets are the same, `wasm32-wasi` is only being renamed, and this [change to the WASI target](https://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets.html) is being done to enable removing `wasm32-wasi` in January 2025.
  * We have renamed `std::panic::PanicInfo` to `std::panic::PanicHookInfo`. The old name will continue to work as an alias, but will result in a deprecation warning starting in Rust 1.82.0.
  `core::panic::PanicInfo` will remain unchanged, however, as this is now a *different type*.
  The reason is that these types have different roles: `std::panic::PanicHookInfo` is the argument to the [panic hook](https://doc.rust-lang.org/stable/std/panic/fn.set_hook.html) in std context (where panics can have an arbitrary payload), while `core::panic::PanicInfo` is the argument to the [`#[panic_handler]`](https://doc.rust-lang.org/nomicon/panic-handler.html) in no_std context (where panics always carry a formatted *message*). Separating these types allows us to add more useful methods to these types, such as `std::panic::PanicHookInfo::payload_as_str()` and `core::panic::PanicInfo::message()`.
  * The new sort implementations may panic if a type's implementation of [`Ord`](https://doc.rust-lang.org/std/cmp/trait.Ord.html) (or the given comparison function) does not implement a [total order](https://en.wikipedia.org/wiki/Total_order) as the trait requires. `Ord`'s supertraits (`PartialOrd`, `Eq`, and `PartialEq`) must also be consistent. The previous implementations would not "notice" any problem, but the new implementations have a good chance of detecting inconsistencies, throwing a panic rather than returning knowingly unsorted data.
  * [In very rare cases, a change in the internal evaluation order of the trait
  solver may result in new fatal overflow errors.](https://github.com/rust-lang/rust/pull/126128)
  Internal Changes
  These changes do not affect any public interfaces of Rust, but they represent
  significant improvements to the performance or internals of rustc and related
  tools.
- [Add a Rust-for Linux `auto` CI job to check kernel builds.](https://github.com/rust-lang/rust/pull/125209/)</changelog>
  <changelog author="william.brown@suse.com" date="1725969600">- Resolve wasm32-wasi build issues</changelog>
  <changelog author="william.brown@suse.com" date="1727179200">- Fix specification of cmake version for SLE15SP3 and SP4</changelog>
  <changelog author="william.brown@suse.com" date="1734004800">- add patch: 0001-Disable-pidfs-tests-for-15SP3.patch
- bsc#1232667 - SLFO:Main requires changes for gcc version detection</changelog>
</package>
<package pkgid="57730d6940e9367c0a032fb84884beecd4de5c44977917f49f4ca05aff7555f09acafcbc7aa8c32db62b0806dd928a4989770436c893c586d64f8849ed75920b" name="cargo1.82" arch="x86_64">
  <version epoch="0" ver="1.82.0" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1729598400">Version 1.82.0 (2024-10-17)
  Language
--------
- [Don't make statement nonterminals match pattern nonterminals](https://github.com/rust-lang/rust/pull/120221/)
- [Patterns matching empty types can now be omitted in common cases](https://github.com/rust-lang/rust/pull/122792)
- [Enforce supertrait outlives obligations when using trait impls](https://github.com/rust-lang/rust/pull/124336)
- [`addr_of(_mut)!` macros and the newly stabilized `&amp;raw (const|mut)` are now safe to use with all static items](https://github.com/rust-lang/rust/pull/125834)
- [size_of_val_raw: for length 0 this is safe to call](https://github.com/rust-lang/rust/pull/126152/)
- [Reorder trait bound modifiers *after* `for&lt;...&gt;` binder in trait bounds](https://github.com/rust-lang/rust/pull/127054/)
- [Stabilize opaque type precise capturing (RFC 3617)](https://github.com/rust-lang/rust/pull/127672)
- [Stabilize `&amp;raw const` and `&amp;raw mut` operators (RFC 2582)](https://github.com/rust-lang/rust/pull/127679)
- [Stabilize unsafe extern blocks (RFC 3484)](https://github.com/rust-lang/rust/pull/127921)
- [Stabilize nested field access in `offset_of!`](https://github.com/rust-lang/rust/pull/128284)
- [Do not require `T` to be live when dropping `[T; 0]`](https://github.com/rust-lang/rust/pull/128438)
- [Stabilize `const` operands in inline assembly](https://github.com/rust-lang/rust/pull/128570)
- [Stabilize floating-point arithmetic in `const fn`](https://github.com/rust-lang/rust/pull/128596)
- [Stabilize explicit opt-in to unsafe attributes](https://github.com/rust-lang/rust/pull/128771)
- [Document NaN bit patterns guarantees](https://github.com/rust-lang/rust/pull/129559)
  Compiler
--------
- [Promote riscv64gc-unknown-linux-musl to tier 2](https://github.com/rust-lang/rust/pull/122049)
- [Promote Mac Catalyst targets `aarch64-apple-ios-macabi` and `x86_64-apple-ios-macabi` to Tier 2, and ship them with rustup](https://github.com/rust-lang/rust/pull/126450)
- [Add tier 3 NuttX based targets for RISC-V and ARM](https://github.com/rust-lang/rust/pull/127755)
- [Add tier 3 powerpc-unknown-linux-muslspe target](https://github.com/rust-lang/rust/pull/127905)
- [Improved diagnostics to explain why a pattern is unreachable](https://github.com/rust-lang/rust/pull/128034)
- [The compiler now triggers the unreachable code warning properly for async functions that don't return/are `-&gt; !`](https://github.com/rust-lang/rust/pull/128443)
- [Promote `aarch64-apple-darwin` to Tier 1](https://github.com/rust-lang/rust/pull/128592)
- [Add Trusty OS target `aarch64-unknown-trusty` and `armv7-unknown-trusty` as tier 3 targets](https://github.com/rust-lang/rust/pull/129490)
- [Promote `wasm32-wasip2` to Tier 2.](https://github.com/rust-lang/rust/pull/126967/)
  Libraries
---------
- [Generalize `{Rc,Arc}::make_mut()` to `Path`, `OsStr`, and `CStr`.](https://github.com/rust-lang/rust/pull/126877)
  Stabilized APIs
- [`std::thread::Builder::spawn_unchecked`](https://doc.rust-lang.org/stable/std/thread/struct.Builder.html#method.spawn_unchecked)
- [`std::str::CharIndices::offset`](https://doc.rust-lang.org/nightly/std/str/struct.CharIndices.html#method.offset)
- [`std::option::Option::is_none_or`](https://doc.rust-lang.org/nightly/std/option/enum.Option.html#method.is_none_or)
- [`[T]::is_sorted`](https://doc.rust-lang.org/nightly/std/primitive.slice.html#method.is_sorted)
- [`[T]::is_sorted_by`](https://doc.rust-lang.org/nightly/std/primitive.slice.html#method.is_sorted_by)
- [`[T]::is_sorted_by_key`](https://doc.rust-lang.org/nightly/std/primitive.slice.html#method.is_sorted_by_key)
- [`Iterator::is_sorted`](https://doc.rust-lang.org/nightly/std/iter/trait.Iterator.html#method.is_sorted)
- [`Iterator::is_sorted_by`](https://doc.rust-lang.org/nightly/std/iter/trait.Iterator.html#method.is_sorted_by)
- [`Iterator::is_sorted_by_key`](https://doc.rust-lang.org/nightly/std/iter/trait.Iterator.html#method.is_sorted_by_key)
- [`std::future::Ready::into_inner`](https://doc.rust-lang.org/nightly/std/future/struct.Ready.html#method.into_inner)
- [`std::iter::repeat_n`](https://doc.rust-lang.org/nightly/std/iter/fn.repeat_n.html)
- [`impl&lt;T: Clone&gt; DoubleEndedIterator for Take&lt;Repeat&lt;T&gt;&gt;`](https://doc.rust-lang.org/nightly/std/iter/struct.Take.html#impl-DoubleEndedIterator-for-Take%3CRepeat%3CT%3E%3E)
- [`impl&lt;T: Clone&gt; ExactSizeIterator for Take&lt;Repeat&lt;T&gt;&gt;`](https://doc.rust-lang.org/nightly/std/iter/struct.Take.html#impl-ExactSizeIterator-for-Take%3CRepeat%3CT%3E%3E)
- [`impl&lt;T: Clone&gt; ExactSizeIterator for Take&lt;RepeatWith&lt;T&gt;&gt;`](https://doc.rust-lang.org/nightly/std/iter/struct.Take.html#impl-ExactSizeIterator-for-Take%3CRepeatWith%3CF%3E%3E)
- [`impl Default for std::collections::binary_heap::Iter`](https://doc.rust-lang.org/nightly/std/collections/binary_heap/struct.Iter.html#impl-Default-for-Iter%3C'_,+T%3E)
- [`impl Default for std::collections::btree_map::RangeMut`](https://doc.rust-lang.org/nightly/std/collections/btree_map/struct.RangeMut.html#impl-Default-for-RangeMut%3C'_,+K,+V%3E)
- [`impl Default for std::collections::btree_map::ValuesMut`](https://doc.rust-lang.org/nightly/std/collections/btree_map/struct.ValuesMut.html#impl-Default-for-ValuesMut%3C'_,+K,+V%3E)
- [`impl Default for std::collections::vec_deque::Iter`](https://doc.rust-lang.org/nightly/std/collections/vec_deque/struct.Iter.html#impl-Default-for-Iter%3C'_,+T%3E)
- [`impl Default for std::collections::vec_deque::IterMut`](https://doc.rust-lang.org/nightly/std/collections/vec_deque/struct.IterMut.html#impl-Default-for-IterMut%3C'_,+T%3E)
- [`Rc&lt;T&gt;::new_uninit`](https://doc.rust-lang.org/nightly/std/rc/struct.Rc.html#method.new_uninit)
- [`Rc&lt;T&gt;::assume_init`](https://doc.rust-lang.org/nightly/std/rc/struct.Rc.html#method.assume_init)
- [`Rc&lt;[T]&gt;::new_uninit_slice`](https://doc.rust-lang.org/nightly/std/rc/struct.Rc.html#method.new_uninit_slice)
- [`Rc&lt;[MaybeUninit&lt;T&gt;]&gt;::assume_init`](https://doc.rust-lang.org/nightly/std/rc/struct.Rc.html#method.assume_init-1)
- [`Arc&lt;T&gt;::new_uninit`](https://doc.rust-lang.org/nightly/std/sync/struct.Arc.html#method.new_uninit)
- [`Arc&lt;T&gt;::assume_init`](https://doc.rust-lang.org/nightly/std/sync/struct.Arc.html#method.assume_init)
- [`Arc&lt;[T]&gt;::new_uninit_slice`](https://doc.rust-lang.org/nightly/std/sync/struct.Arc.html#method.new_uninit_slice)
- [`Arc&lt;[MaybeUninit&lt;T&gt;]&gt;::assume_init`](https://doc.rust-lang.org/nightly/std/sync/struct.Arc.html#method.assume_init-1)
- [`Box&lt;T&gt;::new_uninit`](https://doc.rust-lang.org/nightly/std/boxed/struct.Box.html#method.new_uninit)
- [`Box&lt;T&gt;::assume_init`](https://doc.rust-lang.org/nightly/std/boxed/struct.Box.html#method.assume_init)
- [`Box&lt;[T]&gt;::new_uninit_slice`](https://doc.rust-lang.org/nightly/std/boxed/struct.Box.html#method.new_uninit_slice)
- [`Box&lt;[MaybeUninit&lt;T&gt;]&gt;::assume_init`](https://doc.rust-lang.org/nightly/std/boxed/struct.Box.html#method.assume_init-1)
- [`core::arch::x86_64::_bextri_u64`](https://doc.rust-lang.org/stable/core/arch/x86_64/fn._bextri_u64.html)
- [`core::arch::x86_64::_bextri_u32`](https://doc.rust-lang.org/stable/core/arch/x86_64/fn._bextri_u32.html)
- [`core::arch::x86::_mm_broadcastsi128_si256`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_broadcastsi128_si256.html)
- [`core::arch::x86::_mm256_stream_load_si256`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm256_stream_load_si256.html)
- [`core::arch::x86::_tzcnt_u16`](https://doc.rust-lang.org/stable/core/arch/x86/fn._tzcnt_u16.html)
- [`core::arch::x86::_mm_extracti_si64`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_extracti_si64.html)
- [`core::arch::x86::_mm_inserti_si64`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_inserti_si64.html)
- [`core::arch::x86::_mm_storeu_si16`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_storeu_si16.html)
- [`core::arch::x86::_mm_storeu_si32`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_storeu_si32.html)
- [`core::arch::x86::_mm_storeu_si64`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_storeu_si64.html)
- [`core::arch::x86::_mm_loadu_si16`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_loadu_si16.html)
- [`core::arch::x86::_mm_loadu_si32`](https://doc.rust-lang.org/stable/core/arch/x86/fn._mm_loadu_si32.html)
- [`core::arch::wasm32::u8x16_relaxed_swizzle`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u8x16_relaxed_swizzle.html)
- [`core::arch::wasm32::i8x16_relaxed_swizzle`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i8x16_relaxed_swizzle.html)
- [`core::arch::wasm32::i32x4_relaxed_trunc_f32x4`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_trunc_f32x4.html)
- [`core::arch::wasm32::u32x4_relaxed_trunc_f32x4`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_trunc_f32x4.html)
- [`core::arch::wasm32::i32x4_relaxed_trunc_f64x2_zero`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_trunc_f64x2_zero.html)
- [`core::arch::wasm32::u32x4_relaxed_trunc_f64x2_zero`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_trunc_f64x2_zero.html)
- [`core::arch::wasm32::f32x4_relaxed_madd`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_madd.html)
- [`core::arch::wasm32::f32x4_relaxed_nmadd`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_nmadd.html)
- [`core::arch::wasm32::f64x2_relaxed_madd`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_madd.html)
- [`core::arch::wasm32::f64x2_relaxed_nmadd`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_nmadd.html)
- [`core::arch::wasm32::i8x16_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i8x16_relaxed_laneselect.html)
- [`core::arch::wasm32::u8x16_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u8x16_relaxed_laneselect.html)
- [`core::arch::wasm32::i16x8_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i16x8_relaxed_laneselect.html)
- [`core::arch::wasm32::u16x8_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u16x8_relaxed_laneselect.html)
- [`core::arch::wasm32::i32x4_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_laneselect.html)
- [`core::arch::wasm32::u32x4_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_laneselect.html)
- [`core::arch::wasm32::i64x2_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i64x2_relaxed_laneselect.html)
- [`core::arch::wasm32::u64x2_relaxed_laneselect`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u64x2_relaxed_laneselect.html)
- [`core::arch::wasm32::f32x4_relaxed_min`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_min.html)
- [`core::arch::wasm32::f32x4_relaxed_max`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f32x4_relaxed_max.html)
- [`core::arch::wasm32::f64x2_relaxed_min`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_min.html)
- [`core::arch::wasm32::f64x2_relaxed_max`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.f64x2_relaxed_max.html)
- [`core::arch::wasm32::i16x8_relaxed_q15mulr`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i16x8_relaxed_q15mulr.html)
- [`core::arch::wasm32::u16x8_relaxed_q15mulr`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u16x8_relaxed_q15mulr.html)
- [`core::arch::wasm32::i16x8_relaxed_dot_i8x16_i7x16`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i16x8_relaxed_dot_i8x16_i7x16.html)
- [`core::arch::wasm32::u16x8_relaxed_dot_i8x16_i7x16`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u16x8_relaxed_dot_i8x16_i7x16.html)
- [`core::arch::wasm32::i32x4_relaxed_dot_i8x16_i7x16_add`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.i32x4_relaxed_dot_i8x16_i7x16_add.html)
- [`core::arch::wasm32::u32x4_relaxed_dot_i8x16_i7x16_add`](https://doc.rust-lang.org/nightly/core/arch/wasm32/fn.u32x4_relaxed_dot_i8x16_i7x16_add.html)
  These APIs are now stable in const contexts:
- [`std::task::Waker::from_raw`](https://doc.rust-lang.org/nightly/std/task/struct.Waker.html#method.from_raw)
- [`std::task::Context::from_waker`](https://doc.rust-lang.org/nightly/std/task/struct.Context.html#method.from_waker)
- [`std::task::Context::waker`](https://doc.rust-lang.org/nightly/std/task/struct.Context.html#method.waker)
- [`$integer::from_str_radix`](https://doc.rust-lang.org/nightly/std/primitive.u32.html#method.from_str_radix)
- [`std::num::ParseIntError::kind`](https://doc.rust-lang.org/nightly/std/num/struct.ParseIntError.html#method.kind)
  Cargo
-----
- [feat: Add `info` cargo subcommand](https://github.com/rust-lang/cargo/pull/14141/)
  Compatibility Notes
  - We now [disallow setting some built-in cfgs via the command-line](https://github.com/rust-lang/rust/pull/126158) with the newly added [`explicit_builtin_cfgs_in_flags`](https://doc.rust-lang.org/rustc/lints/listing/deny-by-default.html#explicit-builtin-cfgs-in-flags) lint in order to prevent incoherent state, eg. `windows` cfg active but target is Linux based. The appropriate [`rustc` flag](https://doc.rust-lang.org/rustc/command-line-arguments.html) should be used instead.
- The standard library has a new implementation of `binary_search` which is significantly improves performance ([#128254](https://github.com/rust-lang/rust/pull/128254)). However when a sorted slice has multiple values which compare equal, the new implementation may select a different value among the equal ones than the old implementation.
- [illumos/Solaris now sets `MSG_NOSIGNAL` when writing to sockets](https://github.com/rust-lang/rust/pull/128259). This avoids killing the process with SIGPIPE when writing to a closed socket, which matches the existing behavior on other UNIX targets.
- [Removes a problematic hack that always passed the --whole-archive linker flag for tests, which may cause linker errors for code accidentally relying on it.](https://github.com/rust-lang/rust/pull/128400)
- The WebAssembly target features `multivalue` and `reference-types` are now
  both enabled by default. These two features both have subtle changes implied
  for generated WebAssembly binaries. For the `multivalue` feature, WebAssembly
  target support has changed when upgrading to LLVM 19. Support for generating
  functions with multiple returns no longer works and
  `-Ctarget-feature=+multivalue` has a different meaning than it did in LLVM 18
  and prior. There is no longer any supported means to generate a module that has
  a function with multiple returns in WebAssembly from Rust source code. For the
  `reference-types` feature the encoding of immediates in the `call_indirect`, a
  commonly used instruction by the WebAssembly backend, has changed. Validators
  and parsers which don't understand the `reference-types` proposal will no
  longer accept modules produced by LLVM due to this change in encoding of
  immediates. Additionally these features being enabled are encoded in the
  `target_features` custom section and may affect downstream tooling such as
  `wasm-opt` consuming the module. Generating a WebAssembly module that disables
  default features requires `-Zbuild-std` support from Cargo and more information
  can be found at
  [rust-lang/rust#128511](https://github.com/rust-lang/rust/pull/128511).
- [Rust now raises unsafety errors for union patterns in parameter-position](https://github.com/rust-lang/rust/pull/130531)</changelog>
  <changelog author="william.brown@suse.com" date="1730808000">- Resolve build failure on PPC64LE due to invalid float cast
  * ppc64le-float.patch</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232667 - SLFO:Main requires changes for gcc version detection</changelog>
  <changelog author="william.brown@suse.com" date="1733832000">- add patch: 0001-Disable-pidfs-tests-for-15SP3.patch</changelog>
</package>
<package pkgid="a983997203b65f1db0637e69abad7bd99c5d43825c11211bec1b0e470654bbc9be7a940772bc0f65ebcc4addf5591569c3ae07ed9e3116b0655c7290d844d1eb" name="cargo1.83" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="160000.2.2"/>
  <changelog author="xiaoguang.wang@suse.com" date="1732968000">Version 1.83.0 (2024-11-28)
  Language
--------
- [Stabilize `&amp;mut`, `*mut`, `&amp;Cell`, and `*const Cell` in const.](https://github.com/rust-lang/rust/pull/129195)
- [Allow creating references to statics in `const` initializers.](https://github.com/rust-lang/rust/pull/129759)
- [Implement raw lifetimes and labels (`'r#ident`).](https://github.com/rust-lang/rust/pull/126452)
- [Define behavior when atomic and non-atomic reads race.](https://github.com/rust-lang/rust/pull/128778)
- [Non-exhaustive structs may now be empty.](https://github.com/rust-lang/rust/pull/128934)
- [Disallow implicit coercions from places of type `!`](https://github.com/rust-lang/rust/pull/129392)
- [`const extern` functions can now be defined for other calling conventions.](https://github.com/rust-lang/rust/pull/129753)
- [Stabilize `expr_2021` macro fragment specifier in all editions.](https://github.com/rust-lang/rust/pull/129972)
- [The `non_local_definitions` lint now fires on less code and warns by default.](https://github.com/rust-lang/rust/pull/127117)
  Compiler
--------
- [Deprecate unsound `-Csoft-float` flag.](https://github.com/rust-lang/rust/pull/129897)
- Add many new tier 3 targets:
  - [`aarch64_unknown_nto_qnx700`](https://github.com/rust-lang/rust/pull/127897)
  - [`arm64e-apple-tvos`](https://github.com/rust-lang/rust/pull/130614)
  - [`armv7-rtems-eabihf`](https://github.com/rust-lang/rust/pull/127021)
  - [`loongarch64-unknown-linux-ohos`](https://github.com/rust-lang/rust/pull/130750)
  - [`riscv32-wrs-vxworks` and `riscv64-wrs-vxworks`](https://github.com/rust-lang/rust/pull/130549)
  - [`riscv32{e|em|emc}-unknown-none-elf`](https://github.com/rust-lang/rust/pull/130555)
  - [`x86_64-unknown-hurd-gnu`](https://github.com/rust-lang/rust/pull/128345)
  - [`x86_64-unknown-trusty`](https://github.com/rust-lang/rust/pull/130453)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Implement `PartialEq` for `ExitCode`.](https://github.com/rust-lang/rust/pull/127633)
- [Document that `catch_unwind` can deal with foreign exceptions without UB, although the exact behavior is unspecified.](https://github.com/rust-lang/rust/pull/128321)
- [Implement `Default` for `HashMap`/`HashSet` iterators that don't already have it.](https://github.com/rust-lang/rust/pull/128711)
- [Bump Unicode to version 16.0.0.](https://github.com/rust-lang/rust/pull/130183)
- [Change documentation of `ptr::add`/`sub` to not claim equivalence with `offset`.](https://github.com/rust-lang/rust/pull/130229)
  Stabilized APIs
- [`BufRead::skip_until`](https://doc.rust-lang.org/stable/std/io/trait.BufRead.html#method.skip_until)
- [`ControlFlow::break_value`](https://doc.rust-lang.org/stable/core/ops/enum.ControlFlow.html#method.break_value)
- [`ControlFlow::continue_value`](https://doc.rust-lang.org/stable/core/ops/enum.ControlFlow.html#method.continue_value)
- [`ControlFlow::map_break`](https://doc.rust-lang.org/stable/core/ops/enum.ControlFlow.html#method.map_break)
- [`ControlFlow::map_continue`](https://doc.rust-lang.org/stable/core/ops/enum.ControlFlow.html#method.map_continue)
- [`DebugList::finish_non_exhaustive`](https://doc.rust-lang.org/stable/core/fmt/struct.DebugList.html#method.finish_non_exhaustive)
- [`DebugMap::finish_non_exhaustive`](https://doc.rust-lang.org/stable/core/fmt/struct.DebugMap.html#method.finish_non_exhaustive)
- [`DebugSet::finish_non_exhaustive`](https://doc.rust-lang.org/stable/core/fmt/struct.DebugSet.html#method.finish_non_exhaustive)
- [`DebugTuple::finish_non_exhaustive`](https://doc.rust-lang.org/stable/core/fmt/struct.DebugTuple.html#method.finish_non_exhaustive)
- [`ErrorKind::ArgumentListTooLong`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.ArgumentListTooLong)
- [`ErrorKind::Deadlock`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.Deadlock)
- [`ErrorKind::DirectoryNotEmpty`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.DirectoryNotEmpty)
- [`ErrorKind::ExecutableFileBusy`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.ExecutableFileBusy)
- [`ErrorKind::FileTooLarge`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.FileTooLarge)
- [`ErrorKind::HostUnreachable`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.HostUnreachable)
- [`ErrorKind::IsADirectory`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.IsADirectory)
- [`ErrorKind::NetworkDown`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.NetworkDown)
- [`ErrorKind::NetworkUnreachable`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.NetworkUnreachable)
- [`ErrorKind::NotADirectory`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.NotADirectory)
- [`ErrorKind::NotSeekable`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.NotSeekable)
- [`ErrorKind::ReadOnlyFilesystem`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.ReadOnlyFilesystem)
- [`ErrorKind::ResourceBusy`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.ResourceBusy)
- [`ErrorKind::StaleNetworkFileHandle`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.StaleNetworkFileHandle)
- [`ErrorKind::StorageFull`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.StorageFull)
- [`ErrorKind::TooManyLinks`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.TooManyLinks)
- [`Option::get_or_insert_default`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.get_or_insert_default)
- [`Waker::data`](https://doc.rust-lang.org/stable/core/task/struct.Waker.html#method.data)
- [`Waker::new`](https://doc.rust-lang.org/stable/core/task/struct.Waker.html#method.new)
- [`Waker::vtable`](https://doc.rust-lang.org/stable/core/task/struct.Waker.html#method.vtable)
- [`char::MIN`](https://doc.rust-lang.org/stable/core/primitive.char.html#associatedconstant.MIN)
- [`hash_map::Entry::insert_entry`](https://doc.rust-lang.org/stable/std/collections/hash_map/enum.Entry.html#method.insert_entry)
- [`hash_map::VacantEntry::insert_entry`](https://doc.rust-lang.org/stable/std/collections/hash_map/struct.VacantEntry.html#method.insert_entry)
  These APIs are now stable in const contexts:
- [`Cell::into_inner`](https://doc.rust-lang.org/stable/core/cell/struct.Cell.html#method.into_inner)
- [`Duration::as_secs_f32`](https://doc.rust-lang.org/stable/core/time/struct.Duration.html#method.as_secs_f32)
- [`Duration::as_secs_f64`](https://doc.rust-lang.org/stable/core/time/struct.Duration.html#method.as_secs_f64)
- [`Duration::div_duration_f32`](https://doc.rust-lang.org/stable/core/time/struct.Duration.html#method.div_duration_f32)
- [`Duration::div_duration_f64`](https://doc.rust-lang.org/stable/core/time/struct.Duration.html#method.div_duration_f64)
- [`MaybeUninit::as_mut_ptr`](https://doc.rust-lang.org/stable/core/mem/union.MaybeUninit.html#method.as_mut_ptr)
- [`NonNull::as_mut`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.as_mut)
- [`NonNull::copy_from`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.copy_from)
- [`NonNull::copy_from_nonoverlapping`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.copy_from_nonoverlapping)
- [`NonNull::copy_to`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.copy_to)
- [`NonNull::copy_to_nonoverlapping`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.copy_to_nonoverlapping)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`NonNull::write`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.write)
- [`NonNull::write_bytes`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.write_bytes)
- [`NonNull::write_unaligned`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.write_unaligned)
- [`OnceCell::into_inner`](https://doc.rust-lang.org/stable/core/cell/struct.OnceCell.html#method.into_inner)
- [`Option::as_mut`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.as_mut)
- [`Option::expect`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.expect)
- [`Option::replace`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.replace)
- [`Option::take`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.take)
- [`Option::unwrap`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.unwrap)
- [`Option::unwrap_unchecked`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.unwrap_unchecked)
- [`Option::&lt;&amp;_&gt;::copied`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.copied)
- [`Option::&lt;&amp;mut _&gt;::copied`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.copied-1)
- [`Option::&lt;Option&lt;_&gt;&gt;::flatten`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.flatten)
- [`Option::&lt;Result&lt;_, _&gt;&gt;::transpose`](https://doc.rust-lang.org/stable/core/option/enum.Option.html#method.transpose)
- [`RefCell::into_inner`](https://doc.rust-lang.org/stable/core/cell/struct.RefCell.html#method.into_inner)
- [`Result::as_mut`](https://doc.rust-lang.org/stable/core/result/enum.Result.html#method.as_mut)
- [`Result::&lt;&amp;_, _&gt;::copied`](https://doc.rust-lang.org/stable/core/result/enum.Result.html#method.copied)
- [`Result::&lt;&amp;mut _, _&gt;::copied`](https://doc.rust-lang.org/stable/core/result/enum.Result.html#method.copied-1)
- [`Result::&lt;Option&lt;_&gt;, _&gt;::transpose`](https://doc.rust-lang.org/stable/core/result/enum.Result.html#method.transpose)
- [`UnsafeCell::get_mut`](https://doc.rust-lang.org/stable/core/cell/struct.UnsafeCell.html#method.get_mut)
- [`UnsafeCell::into_inner`](https://doc.rust-lang.org/stable/core/cell/struct.UnsafeCell.html#method.into_inner)
- [`array::from_mut`](https://doc.rust-lang.org/stable/core/array/fn.from_mut.html)
- [`char::encode_utf8`](https://doc.rust-lang.org/stable/core/primitive.char.html#method.encode_utf8)
- [`{float}::classify`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.classify)
- [`{float}::is_finite`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_finite)
- [`{float}::is_infinite`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_infinite)
- [`{float}::is_nan`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_nan)
- [`{float}::is_normal`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_normal)
- [`{float}::is_sign_negative`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_sign_negative)
- [`{float}::is_sign_positive`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_sign_positive)
- [`{float}::is_subnormal`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.is_subnormal)
- [`{float}::from_bits`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.from_bits)
- [`{float}::from_be_bytes`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.from_be_bytes)
- [`{float}::from_le_bytes`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.from_le_bytes)
- [`{float}::from_ne_bytes`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.from_ne_bytes)
- [`{float}::to_bits`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.to_bits)
- [`{float}::to_be_bytes`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.to_be_bytes)
- [`{float}::to_le_bytes`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.to_le_bytes)
- [`{float}::to_ne_bytes`](https://doc.rust-lang.org/stable/core/primitive.f64.html#method.to_ne_bytes)
- [`mem::replace`](https://doc.rust-lang.org/stable/core/mem/fn.replace.html)
- [`ptr::replace`](https://doc.rust-lang.org/stable/core/ptr/fn.replace.html)
- [`ptr::slice_from_raw_parts_mut`](https://doc.rust-lang.org/stable/core/ptr/fn.slice_from_raw_parts_mut.html)
- [`ptr::write`](https://doc.rust-lang.org/stable/core/ptr/fn.write.html)
- [`ptr::write_unaligned`](https://doc.rust-lang.org/stable/core/ptr/fn.write_unaligned.html)
- [`&lt;*const _&gt;::copy_to`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.copy_to)
- [`&lt;*const _&gt;::copy_to_nonoverlapping`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.copy_to_nonoverlapping)
- [`&lt;*mut _&gt;::copy_from`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.copy_from)
- [`&lt;*mut _&gt;::copy_from_nonoverlapping`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.copy_from_nonoverlapping)
- [`&lt;*mut _&gt;::copy_to`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.copy_to-1)
- [`&lt;*mut _&gt;::copy_to_nonoverlapping`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.copy_to_nonoverlapping-1)
- [`&lt;*mut _&gt;::write`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.write)
- [`&lt;*mut _&gt;::write_bytes`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.write_bytes)
- [`&lt;*mut _&gt;::write_unaligned`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.write_unaligned)
- [`slice::from_mut`](https://doc.rust-lang.org/stable/core/slice/fn.from_mut.html)
- [`slice::from_raw_parts_mut`](https://doc.rust-lang.org/stable/core/slice/fn.from_raw_parts_mut.html)
- [`&lt;[_]&gt;::first_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.first_mut)
- [`&lt;[_]&gt;::last_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.last_mut)
- [`&lt;[_]&gt;::first_chunk_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.first_chunk_mut)
- [`&lt;[_]&gt;::last_chunk_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.last_chunk_mut)
- [`&lt;[_]&gt;::split_at_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_at_mut)
- [`&lt;[_]&gt;::split_at_mut_checked`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_at_mut_checked)
- [`&lt;[_]&gt;::split_at_mut_unchecked`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_at_mut_unchecked)
- [`&lt;[_]&gt;::split_first_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_first_mut)
- [`&lt;[_]&gt;::split_last_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_last_mut)
- [`&lt;[_]&gt;::split_first_chunk_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_first_chunk_mut)
- [`&lt;[_]&gt;::split_last_chunk_mut`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_last_chunk_mut)
- [`str::as_bytes_mut`](https://doc.rust-lang.org/stable/core/primitive.str.html#method.as_bytes_mut)
- [`str::as_mut_ptr`](https://doc.rust-lang.org/stable/core/primitive.str.html#method.as_mut_ptr)
- [`str::from_utf8_unchecked_mut`](https://doc.rust-lang.org/stable/core/str/fn.from_utf8_unchecked_mut.html)
  Cargo
-----
- [Introduced a new `CARGO_MANIFEST_PATH` environment variable, similar to `CARGO_MANIFEST_DIR` but pointing directly to the manifest file.](https://github.com/rust-lang/cargo/pull/14404/)
- [Added `package.autolib` to the manifest, allowing `[lib]` auto-discovery to be disabled.](https://github.com/rust-lang/cargo/pull/14591/)
- [Declare support level for each crate in Cargo's Charter / crate docs.](https://github.com/rust-lang/cargo/pull/14600/)
- [Declare new Intentional Artifacts as 'small' changes.](https://github.com/rust-lang/cargo/pull/14599/)
  Rustdoc
-------
- [The sidebar / hamburger menu table of contents now includes the `# headers` from the main item's doc comment](https://github.com/rust-lang/rust/pull/120736). This is similar to a third-party feature provided by the rustdoc-search-enhancements browser extension.
  Compatibility Notes
- [Warn against function pointers using unsupported ABI strings.](https://github.com/rust-lang/rust/pull/128784)
- [Check well-formedness of the source type's signature in fn pointer casts.](https://github.com/rust-lang/rust/pull/129021) This partly closes a soundness hole that comes when casting a function item to function pointer
- [Use equality instead of subtyping when resolving type dependent paths.](https://github.com/rust-lang/rust/pull/129073)
- Linking on macOS now correctly includes Rust's default deployment target. Due to a linker bug, you might have to pass `MACOSX_DEPLOYMENT_TARGET` or fix your `#[link]` attributes to point to the correct frameworks. See &lt;https://github.com/rust-lang/rust/pull/129369&gt;.
- [Rust will now correctly raise an error for `repr(Rust)` written on non-`struct`/`enum`/`union` items, since it previous did not have any effect.](https://github.com/rust-lang/rust/pull/129422)
- The future incompatibility lint `deprecated_cfg_attr_crate_type_name` [has been made into a hard error](https://github.com/rust-lang/rust/pull/129670). It was used to deny usage of `#![crate_type]` and `#![crate_name]` attributes in `#![cfg_attr]`, which required a hack in the compiler to be able to change the used crate type and crate name after cfg expansion.
  Users can use `--crate-type` instead of `#![cfg_attr(..., crate_type = "...")]` and `--crate-name` instead of `#![cfg_attr(..., crate_name = "...")]` when running `rustc`/`cargo rustc` on the command line.
  Use of those two attributes outside of `#![cfg_attr]` continue to be fully supported.
- Until now, paths into the sysroot were always prefixed with `/rustc/$hash` in diagnostics, codegen, backtrace, e.g.
    ```
    thread 'main' panicked at 'hello world', map-panic.rs:2:50
    stack backtrace:
    0: std::panicking::begin_panic
    at /rustc/a55dd71d5fb0ec5a6a3a9e8c27b2127ba491ce52/library/std/src/panicking.rs:616:12
    1: map_panic::main::{{closure}}
    at ./map-panic.rs:2:50
    2: core::option::Option&lt;T&gt;::map
    at /rustc/a55dd71d5fb0ec5a6a3a9e8c27b2127ba491ce52/library/core/src/option.rs:929:29
    3: map_panic::main
    at ./map-panic.rs:2:30
    4: core::ops::function::FnOnce::call_once
    at /rustc/a55dd71d5fb0ec5a6a3a9e8c27b2127ba491ce52/library/core/src/ops/function.rs:248:5
    note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace.
    ```
    [RFC 3127 said](https://rust-lang.github.io/rfcs/3127-trim-paths.html#changing-handling-of-sysroot-path-in-rustc)
    &gt; We want to change this behaviour such that, when `rust-src` source files can be discovered, the virtual path is discarded and therefore the local path will be embedded, unless there is a `--remap-path-prefix` that causes this local path to be remapped in the usual way.
    [#129687](https://github.com/rust-lang/rust/pull/129687) implements this behaviour, when `rust-src` is present at compile time, `rustc` replaces `/rustc/$hash` with a real path into the local `rust-src` component with best effort.
    To sanitize this, users must explicitly supply `--remap-path-prefix=&lt;path to rust-src&gt;=foo` or not have the `rust-src` component installed.
  - The allow-by-default `missing_docs` lint used to disable itself when invoked through `rustc --test`/`cargo test`, resulting in `#[expect(missing_docs)]` emitting false positives due to the expectation being wrongly unfulfilled. This behavior [has now been removed](https://github.com/rust-lang/rust/pull/130025), which allows `#[expect(missing_docs)]` to be fulfilled in all scenarios, but will also report new `missing_docs` diagnostics for publicly reachable `#[cfg(test)]` items, [integration test](https://doc.rust-lang.org/cargo/reference/cargo-targets.html#integration-tests) crate-level documentation, and publicly reachable items in integration tests.
- [The `armv8r-none-eabihf` target now uses the Armv8-R required set of floating-point features.](https://github.com/rust-lang/rust/pull/130295)
- [Fix a soundness bug where rustc wouldn't detect unconstrained higher-ranked lifetimes in a `dyn Trait`'s associated types that occur due to supertraits.](https://github.com/rust-lang/rust/pull/130367)
- [Update the minimum external LLVM version to 18.](https://github.com/rust-lang/rust/pull/130487)
- [Remove `aarch64-fuchsia` and `x86_64-fuchsia` target aliases in favor of `aarch64-unknown-fuchsia` and `x86_64-unknown-fuchsia` respectively.](https://github.com/rust-lang/rust/pull/130657)
- [The ABI-level exception class of a Rust panic is now encoded with native-endian bytes, so it is legible in hex dumps.](https://github.com/rust-lang/rust/pull/130897)
- [Visual Studio 2013 is no longer supported for MSVC targets.](https://github.com/rust-lang/rust/pull/131070)
- [The sysroot no longer contains the `std` dynamic library in its top-level `lib/` dir.](https://github.com/rust-lang/rust/pull/131188)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1732968001">- Add tests-run-make-compiler-builtins-failed.patch: test failed on
  run-make/compiler-builtins.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1733227200">- Add support for loongarch64</changelog>
  <changelog author="william.brown@suse.com" date="1733832000">- add patch: 0001-Disable-pidfs-tests-for-15SP3.patch</changelog>
  <changelog author="william.brown@suse.com" date="1733918400">- bsc#1232667 - SLFO:Main requires changes for gcc version detection</changelog>
</package>
<package pkgid="9015e772dfa18cb3854ae3b96a60d141973fe0209f3f9c9b16c6986b6f489899f8bc08b7eff183f42179b631b333828e8f4256fc2a34a0b3dad196f85e1d9a4c" name="cargo1.84" arch="x86_64">
  <version epoch="0" ver="1.84.1" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1736856000">Version 1.84.0 (2025-01-09)
  Language
--------
- [Allow `#[deny]` inside `#[forbid]` as a no-op](https://github.com/rust-lang/rust/pull/121560/)
- [Show a warning when `-Ctarget-feature` is used to toggle features that can lead to unsoundness due to ABI mismatches](https://github.com/rust-lang/rust/pull/129884)
- [Use the next-generation trait solver in coherence](https://github.com/rust-lang/rust/pull/130654)
- [Allow coercions to drop the principal of trait objects](https://github.com/rust-lang/rust/pull/131857)
- [Support `/` as the path separator for `include!()` in all cases on Windows](https://github.com/rust-lang/rust/pull/125205)
- [Taking a raw ref (`raw (const|mut)`) of a deref of a pointer (`*ptr`) is now safe](https://github.com/rust-lang/rust/pull/129248)
- [Stabilize s390x inline assembly](https://github.com/rust-lang/rust/pull/131258)
- [Stabilize Arm64EC inline assembly](https://github.com/rust-lang/rust/pull/131781)
- [Lint against creating pointers to immediately dropped temporaries](https://github.com/rust-lang/rust/pull/128985)
- [Execute drop glue when unwinding in an `extern "C"` function](https://github.com/rust-lang/rust/pull/129582)
  Compiler
--------
- [Add `--print host-tuple` flag to print the host target tuple and affirm the "target tuple" terminology over "target triple"](https://github.com/rust-lang/rust/pull/125579)
- [Declaring functions with a calling convention not supported on the current target now triggers a hard error](https://github.com/rust-lang/rust/pull/129935)
- [Set up indirect access to external data for `loongarch64-unknown-linux-{musl,ohos}`](https://github.com/rust-lang/rust/pull/131583)
- [Enable XRay instrumentation for LoongArch Linux targets](https://github.com/rust-lang/rust/pull/131818)
- [Extend the `unexpected_cfgs` lint to also warn in external macros](https://github.com/rust-lang/rust/pull/132577)
- [Stabilize WebAssembly `multivalue`, `reference-types`, and `tail-call` target features](https://github.com/rust-lang/rust/pull/131080)
- [Added Tier 2 support for the `wasm32v1-none` target](https://github.com/rust-lang/rust/pull/131487)
  Libraries
---------
- [Implement `From&lt;&amp;mut {slice}&gt;` for `Box/Rc/Arc&lt;{slice}&gt;`](https://github.com/rust-lang/rust/pull/129329)
- [Move `&lt;float&gt;::copysign`, `&lt;float&gt;::abs`, `&lt;float&gt;::signum` to `core`](https://github.com/rust-lang/rust/pull/131304)
- [Add `LowerExp` and `UpperExp` implementations to `NonZero`](https://github.com/rust-lang/rust/pull/131377)
- [Implement `FromStr` for `CString` and `TryFrom&lt;CString&gt;` for `String`](https://github.com/rust-lang/rust/pull/130608)
- [`std::os::darwin` has been made public](https://github.com/rust-lang/rust/pull/123723)
  Stabilized APIs
- [`Ipv6Addr::is_unique_local`](https://doc.rust-lang.org/stable/core/net/struct.Ipv6Addr.html#method.is_unique_local)
- [`Ipv6Addr::is_unicast_link_local`](https://doc.rust-lang.org/stable/core/net/struct.Ipv6Addr.html#method.is_unicast_link_local)
- [`core::ptr::with_exposed_provenance`](https://doc.rust-lang.org/stable/core/ptr/fn.with_exposed_provenance.html)
- [`core::ptr::with_exposed_provenance_mut`](https://doc.rust-lang.org/stable/core/ptr/fn.with_exposed_provenance_mut.html)
- [`&lt;ptr&gt;::addr`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.addr)
- [`&lt;ptr&gt;::expose_provenance`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.expose_provenance)
- [`&lt;ptr&gt;::with_addr`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.with_addr)
- [`&lt;ptr&gt;::map_addr`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.map_addr)
- [`&lt;int&gt;::isqrt`](https://doc.rust-lang.org/stable/core/primitive.i32.html#method.isqrt)
- [`&lt;int&gt;::checked_isqrt`](https://doc.rust-lang.org/stable/core/primitive.i32.html#method.checked_isqrt)
- [`&lt;uint&gt;::isqrt`](https://doc.rust-lang.org/stable/core/primitive.u32.html#method.isqrt)
- [`NonZero::isqrt`](https://doc.rust-lang.org/stable/core/num/struct.NonZero.html#impl-NonZero%3Cu128%3E/method.isqrt)
- [`core::ptr::without_provenance`](https://doc.rust-lang.org/stable/core/ptr/fn.without_provenance.html)
- [`core::ptr::without_provenance_mut`](https://doc.rust-lang.org/stable/core/ptr/fn.without_provenance_mut.html)
- [`core::ptr::dangling`](https://doc.rust-lang.org/stable/core/ptr/fn.dangling.html)
- [`core::ptr::dangling_mut`](https://doc.rust-lang.org/stable/core/ptr/fn.dangling_mut.html)
- [`Pin::as_deref_mut`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.as_deref_mut)
- [`AtomicBool::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicBool.html#method.from_ptr)
- [`AtomicPtr::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicPtr.html#method.from_ptr)
- [`AtomicU8::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicU8.html#method.from_ptr)
- [`AtomicU16::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicU16.html#method.from_ptr)
- [`AtomicU32::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicU32.html#method.from_ptr)
- [`AtomicU64::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicU64.html#method.from_ptr)
- [`AtomicUsize::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicUsize.html#method.from_ptr)
- [`AtomicI8::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicI8.html#method.from_ptr)
- [`AtomicI16::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicI16.html#method.from_ptr)
- [`AtomicI32::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicI32.html#method.from_ptr)
- [`AtomicI64::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicI64.html#method.from_ptr)
- [`AtomicIsize::from_ptr`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicIsize.html#method.from_ptr)
- [`&lt;ptr&gt;::is_null`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.is_null-1)
- [`&lt;ptr&gt;::as_ref`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.as_ref-1)
- [`&lt;ptr&gt;::as_mut`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.as_mut)
- [`Pin::new`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.new)
- [`Pin::new_unchecked`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.new_unchecked)
- [`Pin::get_ref`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.get_ref)
- [`Pin::into_ref`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.into_ref)
- [`Pin::get_mut`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.get_mut)
- [`Pin::get_unchecked_mut`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.get_unchecked_mut)
- [`Pin::static_ref`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.static_ref)
- [`Pin::static_mut`](https://doc.rust-lang.org/stable/core/pin/struct.Pin.html#method.static_mut)
  Cargo
-----
- [Stabilize MSRV-aware resolver config](https://github.com/rust-lang/cargo/pull/14639/)
- [Stabilize resolver v3](https://github.com/rust-lang/cargo/pull/14754/)
  Rustdoc
-------
- [rustdoc-search: improve type-driven search](https://github.com/rust-lang/rust/pull/127589)
  Compatibility Notes
- [Enable by default the `LSX` target feature for LoongArch Linux targets](https://github.com/rust-lang/rust/pull/132140)
- [The unstable `-Zprofile` flag (“gcov-style” coverage instrumentation) has been removed.](https://github.com/rust-lang/rust/pull/131829) This does not affect the stable flags for coverage instrumentation (`-Cinstrument-coverage`) and profile-guided optimization (`-Cprofile-generate`, `-Cprofile-use`), which are unrelated and remain available.
- Support for the target named `wasm32-wasi` has been removed as the target is now named `wasm32-wasip1`. This completes the [transition](https://github.com/rust-lang/compiler-team/issues/607) [plan](https://github.com/rust-lang/compiler-team/issues/695) for this target following [the introduction of `wasm32-wasip1`](https://github.com/rust-lang/rust/pull/120468) in Rust 1.78. Compiler warnings on [use of `wasm32-wasi`](https://github.com/rust-lang/rust/pull/126662) introduced in Rust 1.81 are now gone as well as the target is removed.
- [The syntax `&amp;pin (mut|const) T` is now parsed as a type which in theory could affect macro expansion results in some edge cases](https://github.com/rust-lang/rust/pull/130635#issuecomment-2375462821)
- [Legacy syntax for calling `std::arch` functions is no longer permitted to declare items or bodies (such as closures, inline consts, or async blocks).](https://github.com/rust-lang/rust/pull/130443#issuecomment-2445678945)
- [Declaring functions with a calling convention not supported on the current target now triggers a hard error](https://github.com/rust-lang/rust/pull/129935)
- [The next-generation trait solver is now enabled for coherence, fixing multiple soundness issues](https://github.com/rust-lang/rust/pull/130654)</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738843200">- Fix build for loongarch64</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1741348800">Version 1.84.1 (2025-01-30)
- [Fix ICE 132920 in duplicate-crate diagnostics.](https://github.com/rust-lang/rust/pull/133304/)
- [Fix errors for overlapping impls in incremental rebuilds.](https://github.com/rust-lang/rust/pull/133828/)
- [Fix slow compilation related to the next-generation trait solver.](https://github.com/rust-lang/rust/pull/135618/)
- [Fix debuginfo when LLVM's location discriminator value limit is exceeded.](https://github.com/rust-lang/rust/pull/135643/)
- Fixes for building Rust from source:
  - [Only try to distribute `llvm-objcopy` if llvm tools are enabled.](https://github.com/rust-lang/rust/pull/134240/)
  - [Add Profile Override for Non-Git Sources.](https://github.com/rust-lang/rust/pull/135433/)
  - [Resolve symlinks of LLVM tool binaries before copying them.](https://github.com/rust-lang/rust/pull/135585/)
  - [Make it possible to use ci-rustc on tarball sources.](https://github.com/rust-lang/rust/pull/135722/)</changelog>
</package>
<package pkgid="31125dcf1262853fb921cc92c82bc5162520efd8f11879ff5e13100594138ff4b99f44266602ce7f2a433bd529583da3602f5bd277749b541afeec49bbc8a461" name="cargo1.85" arch="x86_64">
  <version epoch="0" ver="1.85.1" rel="160000.2.2"/>
  <changelog author="xiaoguang.wang@suse.com" date="1740139200">Version 1.85.0 (2025-02-20)
  Language
--------
- [The 2024 Edition is now stable.](https://github.com/rust-lang/rust/pull/133349)
  See [the edition guide](https://doc.rust-lang.org/nightly/edition-guide/rust-2024/index.html) for more details.
- [Stabilize async closures](https://github.com/rust-lang/rust/pull/132706)
  See [RFC 3668](https://rust-lang.github.io/rfcs/3668-async-closures.html) for more details.
- [Stabilize `#[diagnostic::do_not_recommend]`](https://github.com/rust-lang/rust/pull/132056)
- [Add `unpredictable_function_pointer_comparisons` lint to warn against function pointer comparisons](https://github.com/rust-lang/rust/pull/118833)
- [Lint on combining `#[no_mangle]` and `#[export_name]` attributes.](https://github.com/rust-lang/rust/pull/131558)
  Compiler
--------
- [The unstable flag `-Zpolymorphize` has been removed](https://github.com/rust-lang/rust/pull/133883), see https://github.com/rust-lang/compiler-team/issues/810 for some background.
  Platform Support
- [Promote `powerpc64le-unknown-linux-musl` to tier 2 with host tools](https://github.com/rust-lang/rust/pull/133801)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Panics in the standard library now have a leading `library/` in their path](https://github.com/rust-lang/rust/pull/132390)
- [`std::env::home_dir()` on Windows now ignores the non-standard `$HOME` environment variable](https://github.com/rust-lang/rust/pull/132515)
  It will be un-deprecated in a subsequent release.
- [Add `AsyncFn*` to the prelude in all editions.](https://github.com/rust-lang/rust/pull/132611)
  Stabilized APIs
- [`BuildHasherDefault::new`](https://doc.rust-lang.org/stable/std/hash/struct.BuildHasherDefault.html#method.new)
- [`ptr::fn_addr_eq`](https://doc.rust-lang.org/std/ptr/fn.fn_addr_eq.html)
- [`io::ErrorKind::QuotaExceeded`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.QuotaExceeded)
- [`io::ErrorKind::CrossesDevices`](https://doc.rust-lang.org/stable/std/io/enum.ErrorKind.html#variant.CrossesDevices)
- [`{float}::midpoint`](https://doc.rust-lang.org/core/primitive.f32.html#method.midpoint)
- [Unsigned `{integer}::midpoint`](https://doc.rust-lang.org/std/primitive.u64.html#method.midpoint)
- [`NonZeroU*::midpoint`](https://doc.rust-lang.org/std/num/type.NonZeroU32.html#method.midpoint)
- [impl `std::iter::Extend` for tuples with arity 1 through 12](https://doc.rust-lang.org/stable/std/iter/trait.Extend.html#impl-Extend%3C(A,)%3E-for-(EA,))
- [`FromIterator&lt;(A, ...)&gt;` for tuples with arity 1 through 12](https://doc.rust-lang.org/stable/std/iter/trait.FromIterator.html#impl-FromIterator%3C(EA,)%3E-for-(A,))
- [`std::task::Waker::noop`](https://doc.rust-lang.org/stable/std/task/struct.Waker.html#method.noop)
  These APIs are now stable in const contexts:
- [`mem::size_of_val`](https://doc.rust-lang.org/stable/std/mem/fn.size_of_val.html)
- [`mem::align_of_val`](https://doc.rust-lang.org/stable/std/mem/fn.align_of_val.html)
- [`Layout::for_value`](https://doc.rust-lang.org/stable/std/alloc/struct.Layout.html#method.for_value)
- [`Layout::align_to`](https://doc.rust-lang.org/stable/std/alloc/struct.Layout.html#method.align_to)
- [`Layout::pad_to_align`](https://doc.rust-lang.org/stable/std/alloc/struct.Layout.html#method.pad_to_align)
- [`Layout::extend`](https://doc.rust-lang.org/stable/std/alloc/struct.Layout.html#method.extend)
- [`Layout::array`](https://doc.rust-lang.org/stable/std/alloc/struct.Layout.html#method.array)
- [`std::mem::swap`](https://doc.rust-lang.org/stable/std/mem/fn.swap.html)
- [`std::ptr::swap`](https://doc.rust-lang.org/stable/std/ptr/fn.swap.html)
- [`NonNull::new`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.new)
- [`HashMap::with_hasher`](https://doc.rust-lang.org/stable/std/collections/struct.HashMap.html#method.with_hasher)
- [`HashSet::with_hasher`](https://doc.rust-lang.org/stable/std/collections/struct.HashSet.html#method.with_hasher)
- [`BuildHasherDefault::new`](https://doc.rust-lang.org/stable/std/hash/struct.BuildHasherDefault.html#method.new)
- [`&lt;float&gt;::recip`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.recip)
- [`&lt;float&gt;::to_degrees`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.to_degrees)
- [`&lt;float&gt;::to_radians`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.to_radians)
- [`&lt;float&gt;::max`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.max)
- [`&lt;float&gt;::min`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.min)
- [`&lt;float&gt;::clamp`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.clamp)
- [`&lt;float&gt;::abs`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.abs)
- [`&lt;float&gt;::signum`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.signum)
- [`&lt;float&gt;::copysign`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.copysign)
- [`MaybeUninit::write`](https://doc.rust-lang.org/stable/std/mem/union.MaybeUninit.html#method.write)
  Cargo
-----
- [Add future-incompatibility warning against keywords in cfgs and add raw-idents](https://github.com/rust-lang/cargo/pull/14671/)
- [Stabilize higher precedence trailing flags](https://github.com/rust-lang/cargo/pull/14900/)
- [Pass `CARGO_CFG_FEATURE` to build scripts](https://github.com/rust-lang/cargo/pull/14902/)
  Rustdoc
-----
- [Doc comment on impl blocks shows the first line, even when the impl block is collapsed](https://github.com/rust-lang/rust/pull/132155)
  Compatibility Notes
- [`rustc` no longer treats the `test` cfg as a well known check-cfg](https://github.com/rust-lang/rust/pull/131729), instead it is up to the build systems and users of `--check-cfg`[^check-cfg] to set it as a well known cfg using `--check-cfg=cfg(test)`.
  This is done to enable build systems like Cargo to set it conditionally, as not all source files are suitable for unit tests.
  [Cargo (for now) unconditionally sets the `test` cfg as a well known cfg](https://github.com/rust-lang/cargo/pull/14963).
  [^check-cfg]: https://doc.rust-lang.org/nightly/rustc/check-cfg.html
- [Disable potentially incorrect type inference if there are trivial and non-trivial where-clauses](https://github.com/rust-lang/rust/pull/132325)
- `std::env::home_dir()` has been deprecated for years, because it can give surprising results in some Windows configurations if the `HOME` environment variable is set (which is not the normal configuration on Windows). We had previously avoided changing its behavior, out of concern for compatibility with code depending on this non-standard configuration. Given how long this function has been deprecated, we're now fixing its behavior as a bugfix. A subsequent release will remove the deprecation for this function.
- [Make `core::ffi::c_char` signedness more closely match that of the platform-default `char`](https://github.com/rust-lang/rust/pull/132975)
  This changed `c_char` from an `i8` to `u8` or vice versa on many Tier 2 and 3
  targets (mostly Arm and RISC-V embedded targets). The new definition may
  result in compilation failures but fixes compatibility issues with C.
  The `libc` crate matches this change as of its 0.2.169 release.
- [When compiling a nested `macro_rules` macro from an external crate, the content of the inner `macro_rules` is now built with the edition of the external crate, not the local crate.](https://github.com/rust-lang/rust/pull/133274)
- [Increase `sparcv9-sun-solaris` and `x86_64-pc-solaris` Solaris baseline to 11.4.](https://github.com/rust-lang/rust/pull/133293)
- [Show `abi_unsupported_vector_types` lint in future breakage reports](https://github.com/rust-lang/rust/pull/133374)
- [Error if multiple super-trait instantiations of `dyn Trait` need associated types to be specified but only one is provided](https://github.com/rust-lang/rust/pull/133392)
- [Change `powerpc64-ibm-aix` default `codemodel` to large](https://github.com/rust-lang/rust/pull/133811)
  Internal Changes
  These changes do not affect any public interfaces of Rust, but they represent
  significant improvements to the performance or internals of rustc and related
  tools.
- [Build `x86_64-unknown-linux-gnu` with LTO for C/C++ code (e.g., `jemalloc`)](https://github.com/rust-lang/rust/pull/134690)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1742817600">Version 1.85.1 (2025-03-18)
- [Fix the doctest-merging feature of the 2024 Edition.](https://github.com/rust-lang/rust/pull/137899/)
- [Relax some `target_feature` checks when generating docs.](https://github.com/rust-lang/rust/pull/137632/)
- [Fix errors in `std::fs::rename` on Windows 10, version 1607.](https://github.com/rust-lang/rust/pull/137528/)
- [Downgrade bootstrap `cc` to fix custom targets.](https://github.com/rust-lang/rust/pull/137460/)
- [Skip submodule updates when building Rust from a source tarball.](https://github.com/rust-lang/rust/pull/137338/)</changelog>
</package>
<package pkgid="d2aec1abbd35c111781d876cab1b7880bf328c91b7539f04ff436e9d4f7461568cfdd1051d933df3f0a8d663e32510d4ebbfdf34100fda03e8f539e77f6e0760" name="cargo1.86" arch="x86_64">
  <version epoch="0" ver="1.86.0" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1743768000">Version 1.86.0 (2025-04-03)
  Language
--------
- [Stabilize upcasting trait objects to supertraits.](https://github.com/rust-lang/rust/pull/134367)
- [Allow safe functions to be marked with the `#[target_feature]` attribute.](https://github.com/rust-lang/rust/pull/134090)
- [The `missing_abi` lint now warns-by-default.](https://github.com/rust-lang/rust/pull/132397)
- Rust now lints about double negations, to catch cases that might have intended to be a prefix decrement operator (`--x`) as written in other languages. This was previously a clippy lint, `clippy::double_neg`, and is [now available directly in Rust as `double_negations`.](https://github.com/rust-lang/rust/pull/126604)
- [More pointers are now detected as definitely not-null based on their alignment in const eval.](https://github.com/rust-lang/rust/pull/133700)
- [Empty `repr()` attribute applied to invalid items are now correctly rejected.](https://github.com/rust-lang/rust/pull/133925)
- [Inner attributes `#![test]` and `#![rustfmt::skip]` are no longer accepted in more places than intended.](https://github.com/rust-lang/rust/pull/134276)
  Compiler
--------
- [Debug-assert that raw pointers are non-null on access.](https://github.com/rust-lang/rust/pull/134424)
- [Change `-O` to mean `-C opt-level=3` instead of `-C opt-level=2` to match Cargo's defaults.](https://github.com/rust-lang/rust/pull/135439)
- [Fix emission of `overflowing_literals` under certain macro environments.](https://github.com/rust-lang/rust/pull/136393)
  Platform Support
- [Replace `i686-unknown-redox` target with `i586-unknown-redox`.](https://github.com/rust-lang/rust/pull/136698)
- [Increase baseline CPU of `i686-unknown-hurd-gnu` to Pentium 4.](https://github.com/rust-lang/rust/pull/136700)
- New tier 3 targets:
  - [`{aarch64-unknown,x86_64-pc}-nto-qnx710_iosock`](https://github.com/rust-lang/rust/pull/133631).
    For supporting Neutrino QNX 7.1 with `io-socket` network stack.
  - [`{aarch64-unknown,x86_64-pc}-nto-qnx800`](https://github.com/rust-lang/rust/pull/133631).
    For supporting Neutrino QNX 8.0 (`no_std`-only).
  - [`{x86_64,i686}-win7-windows-gnu`](https://github.com/rust-lang/rust/pull/134609).
    Intended for backwards compatibility with Windows 7. `{x86_64,i686}-win7-windows-msvc` are the Windows MSVC counterparts that already exist as Tier 3 targets.
  - [`amdgcn-amd-amdhsa`](https://github.com/rust-lang/rust/pull/134740).
  - [`x86_64-pc-cygwin`](https://github.com/rust-lang/rust/pull/134999).
  - [`{mips,mipsel}-mti-none-elf`](https://github.com/rust-lang/rust/pull/135074).
    Initial bare-metal support.
  - [`m68k-unknown-none-elf`](https://github.com/rust-lang/rust/pull/135085).
  - [`armv7a-nuttx-{eabi,eabihf}`, `aarch64-unknown-nuttx`, and `thumbv7a-nuttx-{eabi,eabihf}`](https://github.com/rust-lang/rust/pull/135757).
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- The type of `FromBytesWithNulError` in `CStr::from_bytes_with_nul(bytes: &amp;[u8]) -&gt; Result&lt;&amp;Self, FromBytesWithNulError&gt;` was [changed from an opaque struct to an enum](https://github.com/rust-lang/rust/pull/134143), allowing users to examine why the conversion failed.
- [Remove `RustcDecodable` and `RustcEncodable`.](https://github.com/rust-lang/rust/pull/134272)
- [Deprecate libtest's `--logfile` option.](https://github.com/rust-lang/rust/pull/134283)
- [On recent versions of Windows, `std::fs::remove_file` will now remove read-only files.](https://github.com/rust-lang/rust/pull/134679)
  Stabilized APIs
- [`{float}::next_down`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.next_down)
- [`{float}::next_up`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.next_up)
- [`&lt;[_]&gt;::get_disjoint_mut`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.get_disjoint_mut)
- [`&lt;[_]&gt;::get_disjoint_unchecked_mut`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.get_disjoint_unchecked_mut)
- [`slice::GetDisjointMutError`](https://doc.rust-lang.org/stable/std/slice/enum.GetDisjointMutError.html)
- [`HashMap::get_disjoint_mut`](https://doc.rust-lang.org/std/collections/hash_map/struct.HashMap.html#method.get_disjoint_mut)
- [`HashMap::get_disjoint_unchecked_mut`](https://doc.rust-lang.org/std/collections/hash_map/struct.HashMap.html#method.get_disjoint_unchecked_mut)
- [`NonZero::count_ones`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.count_ones)
- [`Vec::pop_if`](https://doc.rust-lang.org/std/vec/struct.Vec.html#method.pop_if)
- [`sync::Once::wait`](https://doc.rust-lang.org/stable/std/sync/struct.Once.html#method.wait)
- [`sync::Once::wait_force`](https://doc.rust-lang.org/stable/std/sync/struct.Once.html#method.wait_force)
- [`sync::OnceLock::wait`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html#method.wait)
  These APIs are now stable in const contexts:
- [`hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`io::Cursor::get_mut`](https://doc.rust-lang.org/stable/std/io/struct.Cursor.html#method.get_mut)
- [`io::Cursor::set_position`](https://doc.rust-lang.org/stable/std/io/struct.Cursor.html#method.set_position)
- [`str::is_char_boundary`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.is_char_boundary)
- [`str::split_at`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.split_at)
- [`str::split_at_checked`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.split_at_checked)
- [`str::split_at_mut`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.split_at_mut)
- [`str::split_at_mut_checked`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.split_at_mut_checked)
  Cargo
-----
- [When merging, replace rather than combine configuration keys that refer to a program path and its arguments.](https://github.com/rust-lang/cargo/pull/15066/)
- [Error if both `--package` and `--workspace` are passed but the requested package is missing.](https://github.com/rust-lang/cargo/pull/15071/) This was previously silently ignored, which was considered a bug since missing packages should be reported.
- [Deprecate the token argument in `cargo login` to avoid shell history leaks.](https://github.com/rust-lang/cargo/pull/15057/)
- [Simplify the implementation of `SourceID` comparisons.](https://github.com/rust-lang/cargo/pull/14980/) This may potentially change behavior if the canonicalized URL compares differently in alternative registries.
  Rustdoc
-----
- [Add a sans-serif font setting.](https://github.com/rust-lang/rust/pull/133636)
  Compatibility Notes
- [The `wasm_c_abi` future compatibility warning is now a hard error.](https://github.com/rust-lang/rust/pull/133951)
  Users of `wasm-bindgen` should upgrade to at least version 0.2.89, otherwise compilation will fail.
- [Remove long-deprecated no-op attributes `#![no_start]` and `#![crate_id]`.](https://github.com/rust-lang/rust/pull/134300)
- [The future incompatibility lint `cenum_impl_drop_cast` has been made into a hard error.](https://github.com/rust-lang/rust/pull/135964) This means it is now an error to cast a field-less enum to an integer if the enum implements `Drop`.
- [SSE2 is now required for "i686" 32-bit x86 hard-float targets; disabling it causes a warning that will become a hard error eventually.](https://github.com/rust-lang/rust/pull/137037)
  To compile for pre-SSE2 32-bit x86, use a "i586" target instead.
  Internal Changes
  These changes do not affect any public interfaces of Rust, but they represent
  significant improvements to the performance or internals of rustc and related
  tools.
- [Build the rustc on AArch64 Linux with ThinLTO + PGO.](https://github.com/rust-lang/rust/pull/133807)
  The ARM 64-bit compiler (AArch64) on Linux is now optimized with ThinLTO and PGO, similar to the optimizations we have already performed for the x86-64 compiler on Linux. This should make it up to 30% faster.</changelog>
  <changelog author="william.brown@suse.com" date="1744286400">- Ignore broken platform test</changelog>
</package>
<package pkgid="f61993362bf38e494926ad2884c5770887fbd242d8d0b1d24da67e00ec1d3d99b16b46db03acca05d07ef8106504180e7c22720f78139ff68cf766059263990e" name="cargo1.87" arch="x86_64">
  <version epoch="0" ver="1.87.0" rel="160000.2.2"/>
  <changelog author="xiaoguang.wang@suse.com" date="1747396800">Version 1.87.0 (2025-05-15)
  Language
--------
- [Stabilize `asm_goto` feature](https://github.com/rust-lang/rust/pull/133870)
- [Allow parsing open beginning ranges (`..EXPR`) after unary operators `!`, `-`, and `*`](https://github.com/rust-lang/rust/pull/134900).
- [Don't require method impls for methods with `Self: Sized` bounds in `impl`s for unsized types](https://github.com/rust-lang/rust/pull/135480)
- [Stabilize `feature(precise_capturing_in_traits)` allowing `use&lt;...&gt;` bounds on return position `impl Trait` in `trait`s](https://github.com/rust-lang/rust/pull/138128)
  Compiler
--------
- [x86: make SSE2 required for i686 targets and use it to pass SIMD types](https://github.com/rust-lang/rust/pull/135408)
  Platform Support
- [Remove `i586-pc-windows-msvc` target](https://github.com/rust-lang/rust/pull/137957)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  [platform-support-doc]: https://doc.rust-lang.org/rustc/platform-support.html
  Libraries
---------
- [Stabilize the anonymous pipe API](https://github.com/rust-lang/rust/issues/127154)
- [Add support for unbounded left/right shift operations](https://github.com/rust-lang/rust/issues/129375)
- [Print pointer metadata in `Debug` impl of raw pointers](https://github.com/rust-lang/rust/pull/135080)
- [`Vec::with_capacity` guarantees it allocates with the amount requested, even if `Vec::capacity` returns a different number.](https://github.com/rust-lang/rust/pull/135933)
- Most `std::arch` intrinsics which don't take pointer arguments can now be called from safe code if the caller has the appropriate target features already enabled (https://github.com/rust-lang/stdarch/pull/1714, https://github.com/rust-lang/stdarch/pull/1716, https://github.com/rust-lang/stdarch/pull/1717)
- [Undeprecate `env::home_dir`](https://github.com/rust-lang/rust/pull/137327)
- [Denote `ControlFlow` as `#[must_use]`](https://github.com/rust-lang/rust/pull/137449)
- [Macros such as `assert_eq!` and `vec!` now support `const {...}` expressions](https://github.com/rust-lang/rust/pull/138162)
  Stabilized APIs
- [`Vec::extract_if`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.extract_if)
- [`vec::ExtractIf`](https://doc.rust-lang.org/stable/std/vec/struct.ExtractIf.html)
- [`LinkedList::extract_if`](https://doc.rust-lang.org/stable/std/collections/struct.LinkedList.html#method.extract_if)
- [`linked_list::ExtractIf`](https://doc.rust-lang.org/stable/std/collections/linked_list/struct.ExtractIf.html)
- [`&lt;[T]&gt;::split_off`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_off)
- [`&lt;[T]&gt;::split_off_mut`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_off_mut)
- [`&lt;[T]&gt;::split_off_first`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_off_first)
- [`&lt;[T]&gt;::split_off_first_mut`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_off_first_mut)
- [`&lt;[T]&gt;::split_off_last`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_off_last)
- [`&lt;[T]&gt;::split_off_last_mut`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_off_last_mut)
- [`String::extend_from_within`](https://doc.rust-lang.org/stable/alloc/string/struct.String.html#method.extend_from_within)
- [`os_str::Display`](https://doc.rust-lang.org/stable/std/ffi/os_str/struct.Display.html)
- [`OsString::display`](https://doc.rust-lang.org/stable/std/ffi/struct.OsString.html#method.display)
- [`OsStr::display`](https://doc.rust-lang.org/stable/std/ffi/struct.OsStr.html#method.display)
- [`io::pipe`](https://doc.rust-lang.org/stable/std/io/fn.pipe.html)
- [`io::PipeReader`](https://doc.rust-lang.org/stable/std/io/struct.PipeReader.html)
- [`io::PipeWriter`](https://doc.rust-lang.org/stable/std/io/struct.PipeWriter.html)
- [`impl From&lt;PipeReader&gt; for OwnedHandle`](https://doc.rust-lang.org/stable/std/os/windows/io/struct.OwnedHandle.html#impl-From%3CPipeReader%3E-for-OwnedHandle)
- [`impl From&lt;PipeWriter&gt; for OwnedHandle`](https://doc.rust-lang.org/stable/std/os/windows/io/struct.OwnedHandle.html#impl-From%3CPipeWriter%3E-for-OwnedHandle)
- [`impl From&lt;PipeReader&gt; for Stdio`](https://doc.rust-lang.org/stable/std/process/struct.Stdio.html)
- [`impl From&lt;PipeWriter&gt; for Stdio`](https://doc.rust-lang.org/stable/std/process/struct.Stdio.html#impl-From%3CPipeWriter%3E-for-Stdio)
- [`impl From&lt;PipeReader&gt; for OwnedFd`](https://doc.rust-lang.org/stable/std/os/fd/struct.OwnedFd.html#impl-From%3CPipeReader%3E-for-OwnedFd)
- [`impl From&lt;PipeWriter&gt; for OwnedFd`](https://doc.rust-lang.org/stable/std/os/fd/struct.OwnedFd.html#impl-From%3CPipeWriter%3E-for-OwnedFd)
- [`Box&lt;MaybeUninit&lt;T&gt;&gt;::write`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#method.write)
- [`impl TryFrom&lt;Vec&lt;u8&gt;&gt; for String`](https://doc.rust-lang.org/stable/std/string/struct.String.html#impl-TryFrom%3CVec%3Cu8%3E%3E-for-String)
- [`&lt;*const T&gt;::offset_from_unsigned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from_unsigned)
- [`&lt;*const T&gt;::byte_offset_from_unsigned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.byte_offset_from_unsigned)
- [`&lt;*mut T&gt;::offset_from_unsigned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from_unsigned-1)
- [`&lt;*mut T&gt;::byte_offset_from_unsigned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.byte_offset_from_unsigned-1)
- [`NonNull::offset_from_unsigned`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.offset_from_unsigned)
- [`NonNull::byte_offset_from_unsigned`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.byte_offset_from_unsigned)
- [`&lt;uN&gt;::cast_signed`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.cast_signed)
- [`NonZero::&lt;uN&gt;::cast_signed`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.cast_signed-5).
- [`&lt;iN&gt;::cast_unsigned`](https://doc.rust-lang.org/stable/std/primitive.isize.html#method.cast_unsigned).
- [`NonZero::&lt;iN&gt;::cast_unsigned`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html#method.cast_unsigned-5).
- [`&lt;uN&gt;::is_multiple_of`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.is_multiple_of)
- [`&lt;uN&gt;::unbounded_shl`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.unbounded_shl)
- [`&lt;uN&gt;::unbounded_shr`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.unbounded_shr)
- [`&lt;iN&gt;::unbounded_shl`](https://doc.rust-lang.org/stable/std/primitive.isize.html#method.unbounded_shl)
- [`&lt;iN&gt;::unbounded_shr`](https://doc.rust-lang.org/stable/std/primitive.isize.html#method.unbounded_shr)
- [`&lt;iN&gt;::midpoint`](https://doc.rust-lang.org/stable/std/primitive.isize.html#method.midpoint)
- [`&lt;str&gt;::from_utf8`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.from_utf8)
- [`&lt;str&gt;::from_utf8_mut`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.from_utf8_mut)
- [`&lt;str&gt;::from_utf8_unchecked`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.from_utf8_unchecked)
- [`&lt;str&gt;::from_utf8_unchecked_mut`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.from_utf8_unchecked_mut)
  These previously stable APIs are now stable in const contexts:
- [`core::str::from_utf8_mut`](https://doc.rust-lang.org/stable/std/str/fn.from_utf8_mut.html)
- [`&lt;[T]&gt;::copy_from_slice`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.copy_from_slice)
- [`SocketAddr::set_ip`](https://doc.rust-lang.org/stable/std/net/enum.SocketAddr.html#method.set_ip)
- [`SocketAddr::set_port`](https://doc.rust-lang.org/stable/std/net/enum.SocketAddr.html#method.set_port),
- [`SocketAddrV4::set_ip`](https://doc.rust-lang.org/stable/std/net/struct.SocketAddrV4.html#method.set_ip)
- [`SocketAddrV4::set_port`](https://doc.rust-lang.org/stable/std/net/struct.SocketAddrV4.html#method.set_port),
- [`SocketAddrV6::set_ip`](https://doc.rust-lang.org/stable/std/net/struct.SocketAddrV6.html#method.set_ip)
- [`SocketAddrV6::set_port`](https://doc.rust-lang.org/stable/std/net/struct.SocketAddrV6.html#method.set_port)
- [`SocketAddrV6::set_flowinfo`](https://doc.rust-lang.org/stable/std/net/struct.SocketAddrV6.html#method.set_flowinfo)
- [`SocketAddrV6::set_scope_id`](https://doc.rust-lang.org/stable/std/net/struct.SocketAddrV6.html#method.set_scope_id)
- [`char::is_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.is_digit)
- [`char::is_whitespace`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.is_whitespace)
- [`&lt;[[T; N]]&gt;::as_flattened`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.as_flattened)
- [`&lt;[[T; N]]&gt;::as_flattened_mut`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.as_flattened_mut)
- [`String::into_bytes`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.into_bytes)
- [`String::as_str`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.as_str)
- [`String::capacity`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.capacity)
- [`String::as_bytes`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.as_bytes)
- [`String::len`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.len)
- [`String::is_empty`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.is_empty)
- [`String::as_mut_str`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.as_mut_str)
- [`String::as_mut_vec`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.as_mut_vec)
- [`Vec::as_ptr`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.as_ptr)
- [`Vec::as_slice`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.as_slice)
- [`Vec::capacity`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.capacity)
- [`Vec::len`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.len)
- [`Vec::is_empty`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.is_empty)
- [`Vec::as_mut_slice`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.as_mut_slice)
- [`Vec::as_mut_ptr`](https://doc.rust-lang.org/stable/std/vec/struct.Vec.html#method.as_mut_ptr)
  Cargo
-----
- [Add terminal integration via ANSI OSC 9;4 sequences](https://github.com/rust-lang/cargo/pull/14615/)
- [chore: bump openssl to v3](https://github.com/rust-lang/cargo/pull/15232/)
- [feat(package): add --exclude-lockfile flag](https://github.com/rust-lang/cargo/pull/15234/)
  Compatibility Notes
- [Rust now raises an error for macro invocations inside the `#![crate_name]` attribute](https://github.com/rust-lang/rust/pull/127581)
- [Unstable fields are now always considered to be inhabited](https://github.com/rust-lang/rust/pull/133889)
- [Macro arguments of unary operators followed by open beginning ranges may now be matched differently](https://github.com/rust-lang/rust/pull/134900)
- [Make `Debug` impl of raw pointers print metadata if present](https://github.com/rust-lang/rust/pull/135080)
- [Warn against function pointers using unsupported ABI strings in dependencies](https://github.com/rust-lang/rust/pull/135767)
- [Associated types on `dyn` types are no longer deduplicated](https://github.com/rust-lang/rust/pull/136458)
- [Forbid attributes on `..` inside of struct patterns (`let Struct { #[attribute] .. }) =`](https://github.com/rust-lang/rust/pull/136490)
- [Make `ptr_cast_add_auto_to_object` lint into hard error](https://github.com/rust-lang/rust/pull/136764)
- Many `std::arch` intrinsics are now safe to call in some contexts, there may now be new `unused_unsafe` warnings in existing codebases.
- [Limit `width` and `precision` formatting options to 16 bits on all targets](https://github.com/rust-lang/rust/pull/136932)
- [Turn order dependent trait objects future incompat warning into a hard error](https://github.com/rust-lang/rust/pull/136968)
- [Denote `ControlFlow` as `#[must_use]`](https://github.com/rust-lang/rust/pull/137449)
- [Windows: The standard library no longer links `advapi32`, except on win7.](https://github.com/rust-lang/rust/pull/138233) Code such as C libraries that were relying on this assumption may need to explicitly link advapi32.
- [Proc macros can no longer observe expanded `cfg(true)` attributes.](https://github.com/rust-lang/rust/pull/138844)
- [Start changing the internal representation of pasted tokens](https://github.com/rust-lang/rust/pull/124141). Certain invalid declarative macros that were previously accepted in obscure circumstances are now correctly rejected by the compiler. Use of a `tt` fragment specifier can often fix these macros.
- [Don't allow flattened format_args in const.](https://github.com/rust-lang/rust/pull/139624)
  Internal Changes
  These changes do not affect any public interfaces of Rust, but they represent
  significant improvements to the performance or internals of rustc and related
  tools.
- [Update to LLVM 20](https://github.com/rust-lang/rust/pull/135763)</changelog>
</package>
<package pkgid="23b8c50026d8b7cd0c97ba8e440394bd07f294b4410e04181df44ef3245ed6c533323ae9755688c5e7e827b58a8c4c7bb7d1f7423cacd7fac56e85068b96d6f1" name="cargo1.88" arch="x86_64">
  <version epoch="0" ver="1.88.0" rel="160000.2.2"/>
  <changelog author="william.brown@suse.com" date="1751025600">Version 1.88.0 (2025-06-26)
  [#]# Language
- [Stabilize `#![feature(let_chains)]` in the 2024 edition.](https://github.com/rust-lang/rust/pull/132833)
  This feature allows `&amp;&amp;`-chaining `let` statements inside `if` and `while`, allowing intermixture with boolean expressions. The patterns inside the `let` sub-expressions can be irrefutable or refutable.
- [Stabilize `#![feature(naked_functions)]`.](https://github.com/rust-lang/rust/pull/134213)
  Naked functions allow writing functions with no compiler-generated epilogue and prologue, allowing full control over the generated assembly for a particular function.
- [Stabilize `#![feature(cfg_boolean_literals)]`.](https://github.com/rust-lang/rust/pull/138632)
  This allows using boolean literals as `cfg` predicates, e.g. `#[cfg(true)]` and `#[cfg(false)]`.
- [Fully de-stabilize the `#[bench]` attribute](https://github.com/rust-lang/rust/pull/134273). Usage of `#[bench]` without `#![feature(custom_test_frameworks)]` already triggered a deny-by-default future-incompatibility lint since Rust 1.77, but will now become a hard error.
- [Add warn-by-default `dangerous_implicit_autorefs` lint against implicit autoref of raw pointer dereference.](https://github.com/rust-lang/rust/pull/123239)
  The lint [will be bumped to deny-by-default](https://github.com/rust-lang/rust/pull/141661) in the next version of Rust.
- [Add `invalid_null_arguments` lint to prevent invalid usage of null pointers.](https://github.com/rust-lang/rust/pull/119220)
  This lint is uplifted from `clippy::invalid_null_ptr_usage`.
- [Change trait impl candidate preference for builtin impls and trivial where-clauses.](https://github.com/rust-lang/rust/pull/138176)
- [Check types of generic const parameter defaults](https://github.com/rust-lang/rust/pull/139646)
  [#]# Compiler
- [Stabilize `-Cdwarf-version` for selecting the version of DWARF debug information to generate.](https://github.com/rust-lang/rust/pull/136926)
  [#]# Platform Support
- [Demote `i686-pc-windows-gnu` to Tier 2.](https://blog.rust-lang.org/2025/05/26/demoting-i686-pc-windows-gnu/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  [platform-support-doc]: https://doc.rust-lang.org/rustc/platform-support.html
  [#]# Libraries
- [Remove backticks from `#[should_panic]` test failure message.](https://github.com/rust-lang/rust/pull/136160)
- [Guarantee that `[T; N]::from_fn` is generated in order of increasing indices.](https://github.com/rust-lang/rust/pull/139099), for those passing it a stateful closure.
- [The libtest flag `--nocapture` is deprecated in favor of the more consistent `--no-capture` flag.](https://github.com/rust-lang/rust/pull/139224)
- [Guarantee that `{float}::NAN` is a quiet NaN.](https://github.com/rust-lang/rust/pull/139483)
  [#]# Stabilized APIs
- [`Cell::update`](https://doc.rust-lang.org/stable/std/cell/struct.Cell.html#method.update)
- [`impl Default for *const T`](https://doc.rust-lang.org/nightly/std/primitive.pointer.html#impl-Default-for-*const+T)
- [`impl Default for *mut T`](https://doc.rust-lang.org/nightly/std/primitive.pointer.html#impl-Default-for-*mut+T)
- [`HashMap::extract_if`](https://doc.rust-lang.org/stable/std/collections/struct.HashMap.html#method.extract_if)
- [`HashSet::extract_if`](https://doc.rust-lang.org/stable/std/collections/struct.HashSet.html#method.extract_if)
- [`proc_macro::Span::line`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.line)
- [`proc_macro::Span::column`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.column)
- [`proc_macro::Span::start`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.start)
- [`proc_macro::Span::end`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.end)
- [`proc_macro::Span::file`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.file)
- [`proc_macro::Span::local_file`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.local_file)
  These previously stable APIs are now stable in const contexts:
- [`NonNull&lt;T&gt;::replace`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.replace)
- [`&lt;*mut T&gt;::replace`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.replace)
- [`std::ptr::swap_nonoverlapping`](https://github.com/rust-lang/rust/pull/137280)
- [`Cell::{replace, get, get_mut, from_mut, as_slice_of_cells}`](https://github.com/rust-lang/rust/pull/137928)
  [#]# Cargo
- [Stabilize automatic garbage collection.](https://github.com/rust-lang/cargo/pull/14287/)
- [use `zlib-rs` for gzip compression in rust code](https://github.com/rust-lang/cargo/pull/15417/)
  [#]# Rustdoc
- [Doctests can be ignored based on target names using `ignore-*` attributes.](https://github.com/rust-lang/rust/pull/137096)
- [Stabilize the `--test-runtool` and `--test-runtool-arg` CLI options to specify a program (like qemu) and its arguments to run a doctest.](https://github.com/rust-lang/rust/pull/137096)
  [#]# Compatibility Notes
- [Finish changing the internal representation of pasted tokens](https://github.com/rust-lang/rust/pull/124141). Certain invalid declarative macros that were previously accepted in obscure circumstances are now correctly rejected by the compiler. Use of a `tt` fragment specifier can often fix these macros.
- [Fully de-stabilize the `#[bench]` attribute](https://github.com/rust-lang/rust/pull/134273). Usage of `#[bench]` without `#![feature(custom_test_frameworks)]` already triggered a deny-by-default future-incompatibility lint since Rust 1.77, but will now become a hard error.
- [Fix borrow checking some always-true patterns.](https://github.com/rust-lang/rust/pull/139042)
  The borrow checker was overly permissive in some cases, allowing programs that shouldn't have compiled.
- [Update the minimum external LLVM to 19.](https://github.com/rust-lang/rust/pull/139275)
- [Make it a hard error to use a vector type with a non-Rust ABI without enabling the required target feature.](https://github.com/rust-lang/rust/pull/139309)</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1243588 - Update changelog to remove hyphen as a line break for source validator</changelog>
</package>
<package pkgid="a22d84dfdc0325ec078021672e5422fe19f96552176fabc92214753edc0bad211881511f19c7078160dc2aac00e43c08ccf639b301fce9a4e4ccd2db2c7c9605" name="cargo1.89" arch="x86_64">
  <version epoch="0" ver="1.89.0" rel="160000.1.1"/>
  <changelog author="xiaoguang.wang@suse.com" date="1754913600">Version 1.89.0 (2025-08-07)
  [#]# Language
- [Stabilize explicitly inferred const arguments (`feature(generic_arg_infer)`)](https://github.com/rust-lang/rust/pull/141610)
- [Add a warn-by-default `mismatched_lifetime_syntaxes` lint.](https://github.com/rust-lang/rust/pull/138677)
  This lint detects when the same lifetime is referred to by different syntax categories between function arguments and return values, which can be confusing to read, especially in unsafe code.
  This lint supersedes the warn-by-default `elided_named_lifetimes` lint.
- [Expand `unpredictable_function_pointer_comparisons` to also lint on function pointer comparisons in external macros](https://github.com/rust-lang/rust/pull/134536)
- [Make the `dangerous_implicit_autorefs` lint deny-by-default](https://github.com/rust-lang/rust/pull/141661)
- [Stabilize the avx512 target features](https://github.com/rust-lang/rust/pull/138940)
- [Stabilize `kl` and `widekl` target features for x86](https://github.com/rust-lang/rust/pull/140766)
- [Stabilize `sha512`, `sm3` and `sm4` target features for x86](https://github.com/rust-lang/rust/pull/140767)
- [Stabilize LoongArch target features `f`, `d`, `frecipe`, `lasx`, `lbt`, `lsx`, and `lvz`](https://github.com/rust-lang/rust/pull/135015)
- [Remove `i128` and `u128` from `improper_ctypes_definitions`](https://github.com/rust-lang/rust/pull/137306)
- [Stabilize `repr128` (`#[repr(u128)]`, `#[repr(i128)]`)](https://github.com/rust-lang/rust/pull/138285)
- [Allow `#![doc(test(attr(..)))]` everywhere](https://github.com/rust-lang/rust/pull/140560)
- [Extend temporary lifetime extension to also go through tuple struct and tuple variant constructors](https://github.com/rust-lang/rust/pull/140593)
- [`extern "C"` functions on the `wasm32-unknown-unknown` target now have a standards compliant ABI](https://blog.rust-lang.org/2025/04/04/c-abi-changes-for-wasm32-unknown-unknown/)
  [#]# Compiler
- [Default to non-leaf frame pointers on aarch64-linux](https://github.com/rust-lang/rust/pull/140832)
- [Enable non-leaf frame pointers for Arm64EC Windows](https://github.com/rust-lang/rust/pull/140862)
- [Set Apple frame pointers by architecture](https://github.com/rust-lang/rust/pull/141797)
  [#]# Platform Support
- [Add new Tier-3 targets `loongarch32-unknown-none` and `loongarch32-unknown-none-softfloat`](https://github.com/rust-lang/rust/pull/142053)
- [`x86_64-apple-darwin` is in the process of being demoted to Tier 2 with host tools](https://github.com/rust-lang/rfcs/pull/3841)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  [platform-support-doc]: https://doc.rust-lang.org/rustc/platform-support.html
  [#]# Libraries
- [Specify the base path for `file!`](https://github.com/rust-lang/rust/pull/134442)
- [Allow storing `format_args!()` in a variable](https://github.com/rust-lang/rust/pull/140748)
- [Add `#[must_use]` to `[T; N]::map`](https://github.com/rust-lang/rust/pull/140957)
- [Implement `DerefMut` for `Lazy{Cell,Lock}`](https://github.com/rust-lang/rust/pull/129334)
- [Implement `Default` for `array::IntoIter`](https://github.com/rust-lang/rust/pull/141574)
- [Implement `Clone` for `slice::ChunkBy`](https://github.com/rust-lang/rust/pull/138016)
- [Implement `io::Seek` for `io::Take`](https://github.com/rust-lang/rust/pull/138023)
  [#]# Stabilized APIs
- [`NonZero&lt;char&gt;`](https://doc.rust-lang.org/stable/std/num/struct.NonZero.html)
- Many intrinsics for x86, not enumerated here
  - [AVX512 intrinsics](https://github.com/rust-lang/rust/issues/111137)
  - [`SHA512`, `SM3` and `SM4` intrinsics](https://github.com/rust-lang/rust/issues/126624)
- [`File::lock`](https://doc.rust-lang.org/stable/std/fs/struct.File.html#method.lock)
- [`File::lock_shared`](https://doc.rust-lang.org/stable/std/fs/struct.File.html#method.lock_shared)
- [`File::try_lock`](https://doc.rust-lang.org/stable/std/fs/struct.File.html#method.try_lock)
- [`File::try_lock_shared`](https://doc.rust-lang.org/stable/std/fs/struct.File.html#method.try_lock_shared)
- [`File::unlock`](https://doc.rust-lang.org/stable/std/fs/struct.File.html#method.unlock)
- [`NonNull::from_ref`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.from_ref)
- [`NonNull::from_mut`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.from_mut)
- [`NonNull::without_provenance`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.without_provenance)
- [`NonNull::with_exposed_provenance`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.with_exposed_provenance)
- [`NonNull::expose_provenance`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.expose_provenance)
- [`OsString::leak`](https://doc.rust-lang.org/stable/std/ffi/struct.OsString.html#method.leak)
- [`PathBuf::leak`](https://doc.rust-lang.org/stable/std/path/struct.PathBuf.html#method.leak)
- [`Result::flatten`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.flatten)
- [`std::os::linux::net::TcpStreamExt::quickack`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.TcpStreamExt.html#tymethod.quickack)
- [`std::os::linux::net::TcpStreamExt::set_quickack`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.TcpStreamExt.html#tymethod.set_quickack)
  These previously stable APIs are now stable in const contexts:
- [`&lt;[T; N]&gt;::as_mut_slice`](https://doc.rust-lang.org/stable/std/primitive.array.html#method.as_mut_slice)
- [`&lt;[u8]&gt;::eq_ignore_ascii_case`](https://doc.rust-lang.org/stable/std/primitive.slice.html#impl-%5Bu8%5D/method.eq_ignore_ascii_case)
- [`str::eq_ignore_ascii_case`](https://doc.rust-lang.org/stable/std/primitive.str.html#impl-str/method.eq_ignore_ascii_case)
  [#]# Cargo
- [`cargo fix` and `cargo clippy --fix` now default to the same Cargo target selection as other build commands.](https://github.com/rust-lang/cargo/pull/15192/) Previously it would apply to all targets (like binaries, examples, tests, etc.). The `--edition` flag still applies to all targets.
- [Stabilize doctest-xcompile.](https://github.com/rust-lang/cargo/pull/15462/) Doctests are now tested when cross-compiling. Just like other tests, it will use the [`runner` setting](https://doc.rust-lang.org/cargo/reference/config.html#targettriplerunner) to run the tests. If you need to disable tests for a target, you can use the [ignore doctest attribute](https://doc.rust-lang.org/rustdoc/write-documentation/documentation-tests.html#ignoring-targets) to specify the targets to ignore.
  [#]# Rustdoc
- [On mobile, make the sidebar full width and linewrap](https://github.com/rust-lang/rust/pull/139831). This makes long section and item names much easier to deal with on mobile.
  [#]# Compatibility Notes
- [Make `missing_fragment_specifier` an unconditional error](https://github.com/rust-lang/rust/pull/128425)
- [Enabling the `neon` target feature on `aarch64-unknown-none-softfloat` causes a warning](https://github.com/rust-lang/rust/pull/135160) because mixing code with and without that target feature is not properly supported by LLVM
- [Sized Hierarchy: Part I](https://github.com/rust-lang/rust/pull/137944)
  - Introduces a small breaking change affecting `?Sized` bounds on impls on recursive types which contain associated type projections. It is not expected to affect any existing published crates. Can be fixed by refactoring the involved types or opting into the `sized_hierarchy` unstable feature. See the [FCP report](https://github.com/rust-lang/rust/pull/137944#issuecomment-2912207485) for a code example.
- The warn-by-default `elided_named_lifetimes` lint is [superseded by the warn-by-default `mismatched_lifetime_syntaxes` lint.](https://github.com/rust-lang/rust/pull/138677)
- [Error on recursive opaque types earlier in the type checker](https://github.com/rust-lang/rust/pull/139419)
- [Type inference side effects from requiring element types of array repeat expressions are `Copy` are now only available at the end of type checking](https://github.com/rust-lang/rust/pull/139635)
- [The deprecated accidentally-stable `std::intrinsics::{copy,copy_nonoverlapping,write_bytes}` are now proper intrinsics](https://github.com/rust-lang/rust/pull/139916). There are no debug assertions guarding against UB, and they cannot be coerced to function pointers.
- [Remove long-deprecated `std::intrinsics::drop_in_place`](https://github.com/rust-lang/rust/pull/140151)
- [Make well-formedness predicates no longer coinductive](https://github.com/rust-lang/rust/pull/140208)
- [Remove hack when checking impl method compatibility](https://github.com/rust-lang/rust/pull/140557)
- [Remove unnecessary type inference due to built-in trait object impls](https://github.com/rust-lang/rust/pull/141352)
- [Lint against "stdcall", "fastcall", and "cdecl" on non-x86-32 targets](https://github.com/rust-lang/rust/pull/141435)
- [Future incompatibility warnings relating to the never type (`!`) are now reported in dependencies](https://github.com/rust-lang/rust/pull/141937)
- [Ensure `std::ptr::copy_*` intrinsics also perform the static self-init checks](https://github.com/rust-lang/rust/pull/142575)
- [`extern "C"` functions on the `wasm32-unknown-unknown` target now have a standards compliant ABI](https://blog.rust-lang.org/2025/04/04/c-abi-changes-for-wasm32-unknown-unknown/)
  [#]# Internal Changes
  These changes do not affect any public interfaces of Rust, but they represent
  significant improvements to the performance or internals of rustc and related
  tools.
- [Correctly un-remap compiler sources paths with the `rustc-dev` component](https://github.com/rust-lang/rust/pull/142377)</changelog>
</package>
<package pkgid="051e4f0c9943ce474ac42835bf4a6a919460c11ac0b846c4ff23ed60fcdaae6aca68c14c05cd6b0113d9fc9b46dde2f29779e4c60a8416831bc47d0f1044bda8" name="cargo1.90" arch="x86_64">
  <version epoch="0" ver="1.90.0" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1758283200">Version 1.90.0 (2025-09-18)
  [#] Language
- [Split up the `unknown_or_malformed_diagnostic_attributes` lint](https://github.com/rust-lang/rust/pull/140717). This lint has been split up into four finer-grained lints, with `unknown_or_malformed_diagnostic_attributes` now being the lint group that contains these lints:
    1. `unknown_diagnostic_attributes`: unknown to the current compiler
    2. `misplaced_diagnostic_attributes`: placed on the wrong item
    3. `malformed_diagnostic_attributes`: malformed attribute syntax or options
    4. `malformed_diagnostic_format_literals`: malformed format string literal
- [Allow constants whose final value has references to mutable/external memory, but reject such constants as patterns](https://github.com/rust-lang/rust/pull/140942)
- [Allow volatile access to non-Rust memory, including address 0](https://github.com/rust-lang/rust/pull/141260)
  [#] Compiler
- [Use `lld` by default on `x86_64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/140525).
- [Tier 3 `musl` targets now link dynamically by default](https://github.com/rust-lang/rust/pull/144410). Affected targets:
  - `mips64-unknown-linux-muslabi64`
  - `powerpc64-unknown-linux-musl`
  - `powerpc-unknown-linux-musl`
  - `powerpc-unknown-linux-muslspe`
  - `riscv32gc-unknown-linux-musl`
  - `s390x-unknown-linux-musl`
  - `thumbv7neon-unknown-linux-musleabihf`
  [#] Platform Support
- [Demote `x86_64-apple-darwin` to Tier 2 with host tools](https://github.com/rust-lang/rust/pull/145252)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  [platform-support-doc]: https://doc.rust-lang.org/rustc/platform-support.html
  [#] Libraries
- [Stabilize `u*::{checked,overflowing,saturating,wrapping}_sub_signed`](https://github.com/rust-lang/rust/issues/126043)
- [Allow comparisons between `CStr`, `CString`, and `Cow&lt;CStr&gt;`](https://github.com/rust-lang/rust/pull/137268)
- [Remove some unsized tuple impls since unsized tuples can't be constructed](https://github.com/rust-lang/rust/pull/138340)
- [Set `MSG_NOSIGNAL` for `UnixStream`](https://github.com/rust-lang/rust/pull/140005)
- [`proc_macro::Ident::new` now supports `$crate`.](https://github.com/rust-lang/rust/pull/141996)
- [Guarantee the pointer returned from `Thread::into_raw` has at least 8 bytes of alignment](https://github.com/rust-lang/rust/pull/143859)
  [#] Stabilized APIs
- [`u{n}::checked_sub_signed`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.checked_sub_signed)
- [`u{n}::overflowing_sub_signed`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.overflowing_sub_signed)
- [`u{n}::saturating_sub_signed`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.saturating_sub_signed)
- [`u{n}::wrapping_sub_signed`](https://doc.rust-lang.org/stable/std/primitive.usize.html#method.wrapping_sub_signed)
- [`impl Copy for IntErrorKind`](https://doc.rust-lang.org/stable/std/num/enum.IntErrorKind.html#impl-Copy-for-IntErrorKind)
- [`impl Hash for IntErrorKind`](https://doc.rust-lang.org/stable/std/num/enum.IntErrorKind.html#impl-Hash-for-IntErrorKind)
- [`impl PartialEq&lt;&amp;CStr&gt; for CStr`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#impl-PartialEq%3C%26CStr%3E-for-CStr)
- [`impl PartialEq&lt;CString&gt; for CStr`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#impl-PartialEq%3CCString%3E-for-CStr)
- [`impl PartialEq&lt;Cow&lt;CStr&gt;&gt; for CStr`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#impl-PartialEq%3CCow%3C'_,+CStr%3E%3E-for-CStr)
- [`impl PartialEq&lt;&amp;CStr&gt; for CString`](https://doc.rust-lang.org/stable/std/ffi/struct.CString.html#impl-PartialEq%3C%26CStr%3E-for-CString)
- [`impl PartialEq&lt;CStr&gt; for CString`](https://doc.rust-lang.org/stable/std/ffi/struct.CString.html#impl-PartialEq%3CCStr%3E-for-CString)
- [`impl PartialEq&lt;Cow&lt;CStr&gt;&gt; for CString`](https://doc.rust-lang.org/stable/std/ffi/struct.CString.html#impl-PartialEq%3CCow%3C'_,+CStr%3E%3E-for-CString)
- [`impl PartialEq&lt;&amp;CStr&gt; for Cow&lt;CStr&gt;`](https://doc.rust-lang.org/stable/std/borrow/enum.Cow.html#impl-PartialEq%3C%26CStr%3E-for-Cow%3C'_,+CStr%3E)
- [`impl PartialEq&lt;CStr&gt; for Cow&lt;CStr&gt;`](https://doc.rust-lang.org/stable/std/borrow/enum.Cow.html#impl-PartialEq%3CCStr%3E-for-Cow%3C'_,+CStr%3E)
- [`impl PartialEq&lt;CString&gt; for Cow&lt;CStr&gt;`](https://doc.rust-lang.org/stable/std/borrow/enum.Cow.html#impl-PartialEq%3CCString%3E-for-Cow%3C'_,+CStr%3E)
  These previously stable APIs are now stable in const contexts:
- [`&lt;[T]&gt;::reverse`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.reverse)
- [`f32::floor`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.floor)
- [`f32::ceil`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.ceil)
- [`f32::trunc`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.trunc)
- [`f32::fract`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.fract)
- [`f32::round`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.round)
- [`f32::round_ties_even`](https://doc.rust-lang.org/stable/std/primitive.f32.html#method.round_ties_even)
- [`f64::floor`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.floor)
- [`f64::ceil`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.ceil)
- [`f64::trunc`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.trunc)
- [`f64::fract`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.fract)
- [`f64::round`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.round)
- [`f64::round_ties_even`](https://doc.rust-lang.org/stable/std/primitive.f64.html#method.round_ties_even)
  [#] Cargo
- [Add `http.proxy-cainfo` config for proxy certs](https://github.com/rust-lang/cargo/pull/15374/)
- [Use `gix` for `cargo package`](https://github.com/rust-lang/cargo/pull/15534/)
- [feat(publish): Stabilize multi-package publishing](https://github.com/rust-lang/cargo/pull/15636/)
  [#] Rustdoc
- [Add ways to collapse all impl blocks](https://github.com/rust-lang/rust/pull/141663). Previously the "Summary" button and "-" keyboard shortcut would never collapse `impl` blocks, now they do when shift is held
- [Display unsafe attributes with `unsafe()` wrappers](https://github.com/rust-lang/rust/pull/143662)
  [#] Compatibility Notes
- [Use `lld` by default on `x86_64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/140525).
  See also &lt;https://blog.rust-lang.org/2025/09/01/rust-lld-on-1.90.0-stable/&gt;.
- [Make `core::iter::Fuse`'s `Default` impl construct `I::default()` internally as promised in the docs instead of always being empty](https://github.com/rust-lang/rust/pull/140985)
- [Set `MSG_NOSIGNAL` for `UnixStream`](https://github.com/rust-lang/rust/pull/140005)
  This may change program behavior but results in the same behavior as other primitives (e.g., stdout, network sockets).
  Programs relying on signals to terminate them should update handling of sockets to handle errors on write by exiting.
- [On Unix `std::env::home_dir` will use the fallback if the `HOME` environment variable is empty](https://github.com/rust-lang/rust/pull/141840)
- We now [reject unsupported `extern "{abi}"`s consistently in all positions](https://github.com/rust-lang/rust/pull/142134). This primarily affects the use of implementing traits on an `extern "{abi}"` function pointer, like `extern "stdcall" fn()`, on a platform that doesn't support that, like aarch64-unknown-linux-gnu. Direct usage of these unsupported ABI strings by declaring or defining functions was already rejected, so this is only a change for consistency.
- [const-eval: error when initializing a static writes to that static](https://github.com/rust-lang/rust/pull/143084)
- [Check that the `proc_macro_derive` macro has correct arguments when applied to the crate root](https://github.com/rust-lang/rust/pull/143607)</changelog>
  <changelog author="william.brown@suse.com" date="1759320000">- bsc#1242170 - raise gcc requirement to version 14
- resolve linker test failures</changelog>
  <changelog author="william.brown@suse.com" date="1759492800">- Work around broken server side OBS source validator rules</changelog>
</package>
<package pkgid="dd1a50a1cb2c85a0820a2e861ba2595433d1516d2aae81dbb032952d55d811f9ff7860e37a95c23a3e4992c5e1455e81dfc3c23b6329edb60456b3d5ae44a4d9" name="cargo1.91" arch="x86_64">
  <version epoch="0" ver="1.91.0" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1761825600">- Add rust1.91
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.91.0</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- switch to use gcc15, as SLFO 1.2 does not have gcc14.
- fix cmake problems on SLE15</changelog>
  <changelog author="william.brown@suse.com" date="1763035200">- bsc#1253321 - resolve issue during linking due to missing requires
- update gcc version requirements due to slfo issues</changelog>
  <changelog author="william.brown@suse.com" date="1763467200">- Resolve bootstrap incorrectly using lld</changelog>
</package>
<package pkgid="99332a66fb8311ab52bead1865118b017f6f1e7997bf0b3499ac8f56d96782ecdf8f259d63cb577d00a8e21995c36926bfc9bd227e4a8815cfe7f2296aa34f70" name="cargo1.92" arch="x86_64">
  <version epoch="0" ver="1.92.0" rel="160000.1.1"/>
  <changelog author="xiaoguang.wang@suse.com" date="1765540800">- Add rust1.92
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.92.0</changelog>
</package>
<package pkgid="b4f6f632e4631f32ead04f20489ca3df12c3977c528bb3b1997fb4615493a26dee5bdedde9f528956ec4b4a8611c10d89dd62d4b12bd4835c04141a0d9e82363" name="cargo1.93" arch="x86_64">
  <version epoch="0" ver="1.93.0" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1769169600">- Add rust1.93
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.93.0</changelog>
</package>
<package pkgid="73337d25d8bbc828234aa3815533d414131d2e2c38f03ff5b042de655875db0df7ba364d54078630b48136f95adaf95236dfaa2edd5e15fe25ea70579da8aa7a" name="cargo1.93" arch="x86_64">
  <version epoch="0" ver="1.93.0" rel="160000.2.1"/>
  <changelog author="william.brown@suse.com" date="1769169600">- Add rust1.93
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.93.0</changelog>
  <changelog author="william.brown@suse.com" date="1771070400">- bsc#1253321 - Resolve missing gcc requirement that may affect some crate building</changelog>
</package>
<package pkgid="15909b77dcf028e67af9307058737a9690b3bca0b29116320d94536b13a0452a8a30fc9008be504a1479c689073ef41779ea3ca8e1123ec9ad1ddec747cc7b35" name="cargo1.94" arch="x86_64">
  <version epoch="0" ver="1.94.0" rel="160000.1.1"/>
  <changelog author="xiaoguang.wang@suse.com" date="1772798400">- Add rust1.94
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.93.0
- 0001-Disable-pidfs-tests-for-15SP3.patch: pidfs is not working on 15 sp3 buildhost
- 0001-Disable-broken-linker-tests.patch
- ignore-Wstring-conversion.patch: avoid using this warning, fails with gcc</changelog>
</package>
<package pkgid="d891850dfd01d9bda8d4617dd68c9410dc20d7ef2160a4abb469e88201e6edd7be741c02ea4671bbe82f0b4068edc0fadbda52b4803d35c9b60b2a252b4bfea3" name="cargo1.94" arch="x86_64">
  <version epoch="0" ver="1.94.1" rel="160000.1.1"/>
  <changelog author="xiaoguang.wang@suse.com" date="1772798400">- Add rust1.94
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.0</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1773662400">- Add 0001-proto-avoid-unwrapping-varint-decoding-during-parame.patch:
  avoid unwrapping varint decoding during parameters parsing
  (bsc#1259623 CVE-2026-31812).
- 0001-Disable-pidfs-tests-for-15SP3.patch: pidfs is not working on 15 sp3 buildhost
- 0001-Disable-broken-linker-tests.patch
- ignore-Wstring-conversion.patch: avoid using this warning, fails with gcc</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1774612800">- Update to rust1.94.1
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1</changelog>
  <changelog author="william.brown@suse.com" date="1776254400">- bsc#1261876 - Don't force gcc-15 on SLE-16 and higher</changelog>
</package>
<package pkgid="0c9b67b5bc18fca902836fdd6b50256e7403bf283f35d1a046e3b73cd7ed45a32df352f6c632c85bea20ca016b5d301d8415bf135f87acd42c3210487215fcc5" name="cargo1.95" arch="x86_64">
  <version epoch="0" ver="1.95.0" rel="160000.1.1"/>
  <changelog author="william.brown@suse.com" date="1776427200">- Add rust1.95
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.95.0
- patches included for building inherited from older versions:
  - 0001-Disable-broken-linker-tests.patch
  - 0001-Disable-pidfs-tests-for-15SP3.patch
  - 0001-proto-avoid-unwrapping-varint-decoding-during-parame.patch
  - ignore-Wstring-conversion.patch</changelog>
</package>
<package pkgid="b64bbe092331aa61b666d742835ce71d4c56ec8553969c60f5163619509504e23f9757139b24e937005d9e06624930cc8a1589bc5885e970753aefd3e6799e6a" name="cargo1.96" arch="x86_64">
  <version epoch="0" ver="1.96.0" rel="160000.1.1"/>
  <changelog author="xiaoguang.wang@suse.com" date="1780056000">- Add rust1.96
- Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.96.0</changelog>
</package>
<package pkgid="722b5e2d5cedf67c01a73e2fa0e91a7b975dc481d92ec73e7ee232fda703daad506094460876e928a2ac4a59ba7aac65e5203bf807e572293c26ac1e9403931f" name="caribou" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="d2f7828b798cf01d833812d8efe376feacf1cff7eda01b1a3afee2a16c50c0da8241df9c6f177a9b5a24c6a8a7199b098b1f57fdd66aabfc67876fe6cc83e6a7" name="caribou-common" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="6724e30cc867f2b1db7fbf2bd7cba38777c4a96d85e56141f992e26e2665ee5bfe09b290b131223c8fcd919a1b8ef38df6bc9e70b6378f646741ad5147c69f72" name="caribou-devel" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="d0402acb54c4b66f74808c575d6301a86b0e88b83374e09f1fa529c6ef3e76bc6811bfd7753cdfbbd3212ba66db4b57316f062eee31d56ac130fe09820758121" name="caribou-gtk-module-common" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="50078622b50c9debe3b238088d4e9723f5f7016a037d4426046ccc7ee7a02525ebbacc544f0cde9721bd4929d524d3d403f497755d9980ba08c6dccd8d48ba3b" name="caribou-gtk2-module" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="5f189f6340d97e8b9ae40504a437d34374ed5e1f835b6d5b10d42803d1b81d38348b53b4b24f97ed7959e182f6048e3585743f102012d509008c5a91344303d2" name="caribou-gtk3-module" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="6d621388a4d5dd8998bd27d6a2ee85631b24734482818e753b479acf00e1615bba39a51598b093ecb72ee6cd8f65910ad015352d509e8338429a2ac80b4edc3c" name="caribou-lang" arch="noarch">
  <version epoch="0" ver="0.4.21" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-stop-patching-gir.patch: stop patching the GIR.
  Taken from upstream; the build now fails without this. Also add
  libtool to BuildRequires.
- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1642420800">- Add python-rpm-macros BuildRequires in case some build
  environment does not pull it automatically. This is needed by
  macros like %{python3_sitelib}.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1724155200">- Pass -Wno-error=incompatible-pointer-types. Suppresses error on
  gcc 14.</changelog>
</package>
<package pkgid="3958a34fa56a2139c3f579dd1492fe994e05fd70c117242cf73bfa426432beab38aead7fb9afd8bfeb52dde4852341906a79feb207175b617892b76cbfac3853" name="cartridges" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="bp160.1.10"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1695556800">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1708257600">- Update to version 2.7.3
  * Updated Lutris locations so importing works again
  * Other miscellaneous bug fixes</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1711540800">- Update to version 2.8.1
  * The app features new adaptive widgets taking advantage of
    developments in GNOME 46
  * Fixes an issue with Lutris games not importing
  * Fixes an issue with file chooser buttons being unresponsive</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1711713600">- Update to version 2.8.2
  * Improved notifications for launching games via the GNOME search
    provider
  * Updated app metadata
  * Fixed an issue with translations</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1712491200">- Update to version 2.8.3
  * Fixed an issue with the preferences dialog</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1714305600">- Update to version 2.8.4
  * Fixed an issue with the import dialog not closing
  * Fixed an issue with Lutris games not importing</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1716638400">- Update to version 2.8.5
  * Steam runtimes and Proton should stop being imported again</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1728648000">- Update to version 2.10.1
  * Fixed an issue with manually changing game cover art
- add meson_test to validate files</changelog>
</package>
<package pkgid="774526c1c3637361dcbf2a6d6ed74cbc0853e705ed72309d697d89b7d82fd336e4a7ca353f169719c7732adfb93fe7742526e8d20f8684ee45b89a4b5b3a93d5" name="cartridges-lang" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="bp160.1.10"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1695556800">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1708257600">- Update to version 2.7.3
  * Updated Lutris locations so importing works again
  * Other miscellaneous bug fixes</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1711540800">- Update to version 2.8.1
  * The app features new adaptive widgets taking advantage of
    developments in GNOME 46
  * Fixes an issue with Lutris games not importing
  * Fixes an issue with file chooser buttons being unresponsive</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1711713600">- Update to version 2.8.2
  * Improved notifications for launching games via the GNOME search
    provider
  * Updated app metadata
  * Fixed an issue with translations</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1712491200">- Update to version 2.8.3
  * Fixed an issue with the preferences dialog</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1714305600">- Update to version 2.8.4
  * Fixed an issue with the import dialog not closing
  * Fixed an issue with Lutris games not importing</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1716638400">- Update to version 2.8.5
  * Steam runtimes and Proton should stop being imported again</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1728648000">- Update to version 2.10.1
  * Fixed an issue with manually changing game cover art
- add meson_test to validate files</changelog>
</package>
<package pkgid="3618ba091daa00940df53605999cd1521b5979069253d604bf3fdd57d5757b31f497ae50848a73c5c79b12a13c7d5c2803717e832f597cec184799c46d817903" name="casacore" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1614254400">- Update to version 3.4.0:
  * Major modernization of Arrays, bringing it more in line with
    C++11 (gh#casacore/casacore#1012).
  * Use std::regex (gh#casacore/casacore#1072).
  * Remove many warnings (gh#casacore/casacore#1024,
    gh#casacore/casacore#1036, gh#casacore/casacore#1062).
  * Use FFTW as default FFT provider (gh#casacore/casacore#1029,
    gh#casacore/casacore#1047, gh#casacore/casacore#1049).
  * UVFITS improvements (gh#casacore/casacore#1033,
    gh#casacore/casacore#1040, gh#casacore/casacore#1064,
    gh#casacore/casacore#1066, gh#casacore/casacore#1067).
  * Support for 64-bit row numbers.
- Drop patches incorporated upstream:
  * casacore-drop-fftpak.patch
  * casacore-lawson_f-fortran-errors.patch
- Bump so version in shared lib name.
- 32-bit builds not supported, use ExcludeArch to prevent build
  failures.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1647000000">- Add upstream patch to fix build on 32-bit architectures:
  * 1129.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651060800">- Add an rpmlintrc for shlib-policy-name-error</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651233600">- Add casacore-link-math.patch: Explicitly link to math library
  when building mirlab [gh#casacore/casacore#1190].
- Drop ExcludeArch: %ix86 to allow building for related 32-bit
  systems in light of previous commit (Fri Mar 11 10:04:22 UTC
  2022).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657022400">- Update to version 3.5.0:
  * TaQL now supports copying columns to new columns (e.g. to make
    a backup of the FLAG column)
  * Non-zero coordinates in JPL frames, e.g. the SUN frame, are
    now interpreted as an offset in right ascension and
    declination. Previously, coordinates in a JPL coordinate frame
    were ignored.
  * The Dysco storage manager is now built by default as part of
    casacore.
  * General:
  - Modernizations: remove Mutex (gh#casacore/casacore#1095,
    gh#casacore/casacore#1127, gh#casacore/casacore#1128),
    typing system (gh#casacore/casacore#1172,
    gh#casacore/casacore#1176).
  - Allow building with newer compilers
    (gh#casacore/casacore#1134, gh#casacore/casacore#1137,
    gh#casacore/casacore#1145, gh#casacore/casacore#1206,
    gh#casacore/casacore#1208, gh#casacore/casacore#1210,
    gh#casacore/casacore#1211).
  - Build python3 by default, not python2
    (gh#casacore/casacore#1209).
  * MeasurementSet:
  - Improve reading of DataDescriptionId
    (gh#casacore/casacore#1103).
  - Compute feed information (gh#casacore/casacore#1104) and
    field attributes (gh#casacore/casacore#1109) on demand.
  - UVFits improvements: support X-Y mounts
    (gh#casacore/casacore#1115), allow large antenna numbers
    (gh#casacore/casacore#1144), fix handling FITS-IDI
    GAIN_CURVE (gh#casacore/casacore#1151).
  - Fix precision in T+dT syntax (gh#casacore/casacore#1118).
  * Measures Allow offsets to JPL coordinates
    (gh#casacore/casacore#1160).
  * Tables:
  - Cache iteration boundaries while sorting tables
    (gh#casacore/casacore#1106).
  - Use RefTable for iteration (gh#casacore/casacore#1108).
  - Adios2 related changes: gh#casacore/casacore#1110,
    gh#casacore/casacore#1116, gh#casacore/casacore#1121,
    gh#casacore/casacore#1148.
  - Make Dysco part of casacore (gh#casacore/casacore#1117,
    gh#casacore/casacore#1125, gh#casacore/casacore#1146,
    gh#casacore/casacore#1166).
  - Add TaQL commands LIKE, COPYCOLUMN and DROPTABLE
    (gh#casacore/casacore#1154, gh#casacore/casacore#1169).
  - Fix one bug in rownr_t migration for TiledDataStMan
    (gh#casacore/casacore#1156).
  - Improve documentation (gh#casacore/casacore#1192).
  * Images:
  - Support CARTA opening images with a custom handler
    (gh#casacore/casacore#1158).
  - Allow easier python handling of beams
    (gh#casacore/casacore#1184).
- Drop upstreamed patches:
  * 1129.patch.
  * casacore-link-math.patch.
- New BuildRequires: gsl-devel and libboost_headers-devel.
- Move installed pkgconfig file to correct arch dependent
  location.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658232000">- Avoid compile-time CPU-detection (boo#1100677)</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714651200">- Add casacore-drop-mirlib.patch: drop unused mirlib library,
  patch taken from upstream PR. Fixes build failures against
  GCC-14 (gh#casacore/casacore#1344).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1716379200">- Drop casacore-drop-mirlib.patch: Superseded in favour of better
  patch casacore-mirlib-gcc14-compat.patch already committed
  upstream.
- Add casacore-mirlib-gcc14-compat.patch: Resolve issues compiling
  mirlib with gcc 14 (gh#casacore/casacore#1344,
  gh#casacore/casacore#1353).</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1724846400">- Update to version 3.6.1:
  * Version 3.6.1 fixes numpy 2.0 compatibility for the binary
    wheels of python-casacore. Otherwise it is identical to
    version 3.6.0
- Update to version 3.6.0:
  * Improvements on FITS import and export
    (gh#casacore/casacore#1215, gh#casacore/casacore#1229,
    gh#casacore/casacore#1251, gh#casacore/casacore#1267,
    gh#casacore/casacore#1268, gh#casacore/casacore#1304,
    gh#casacore/casacore#1318, gh#casacore/casacore#1341)
  * Small improvements to Dysco (gh#casacore/casacore#1305,
    gh#casacore/casacore#1313, gh#casacore/casacore#1337,
    gh#casacore/casacore#1343)
  * C++ modernizations (gh#casacore/casacore#1185,
    gh#casacore/casacore#1199, gh#casacore/casacore#1271,
    gh#casacore/casacore#1280, gh#casacore/casacore#1284,
    gh#casacore/casacore#1288, gh#casacore/casacore#1289,
    gh#casacore/casacore#1294, gh#casacore/casacore#1296,
    gh#casacore/casacore#1298, gh#casacore/casacore#1309,
    gh#casacore/casacore#1316, gh#casacore/casacore#1353,
    gh#casacore/casacore#1355)
  * Build system and CI improvements (gh#casacore/casacore#1219,
    gh#casacore/casacore#1236, gh#casacore/casacore#1252,
    gh#casacore/casacore#1315, gh#casacore/casacore#1328,
    gh#casacore/casacore#1330, gh#casacore/casacore#1334,
    gh#casacore/casacore#1335, gh#casacore/casacore#1349)
  * Code cleanup (gh#casacore/casacore#1204,
    gh#casacore/casacore#1245, gh#casacore/casacore#1269,
    gh#casacore/casacore#1277, gh#casacore/casacore#1279,
    gh#casacore/casacore#1300, gh#casacore/casacore#1301,
    gh#casacore/casacore#1302)
  * TaQL improvements (gh#casacore/casacore#1221,
    gh#casacore/casacore#1232, gh#casacore/casacore#1244,
    gh#casacore/casacore#1247, gh#casacore/casacore#1259,
    gh#casacore/casacore#1260, gh#casacore/casacore#1263,
    gh#casacore/casacore#1270, gh#casacore/casacore#1276,
    gh#casacore/casacore#1299)
  * Add new SI prefixes quetta, ronna, ronto and quecto
    (gh#casacore/casacore#1257)
  * Fix several issues that arose in CASA use
    (gh#casacore/casacore#1200, gh#casacore/casacore#1227,
    gh#casacore/casacore#1246, gh#casacore/casacore#1262,
    gh#casacore/casacore#1290, gh#casacore/casacore#1291,
    gh#casacore/casacore#1292, gh#casacore/casacore#1329,
    gh#casacore/casacore#1323)
  * Fix data race in images toWord / toPixel
    (gh#casacore/casacore#1235)
  * Update e-mail address (gh#casacore/casacore#1339)
- Removed casacore-mirlib-gcc14-compat.patch because no longer
  needed</changelog>
</package>
<package pkgid="6805cb661529aea8bf4ed68083493df7063363c9b7a9555b561a73b607df391e528d224cc44354efbea024a3c5745b972fe78fc8553595a8fbe3f931f3c9a443" name="casacore-devel" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1614254400">- Update to version 3.4.0:
  * Major modernization of Arrays, bringing it more in line with
    C++11 (gh#casacore/casacore#1012).
  * Use std::regex (gh#casacore/casacore#1072).
  * Remove many warnings (gh#casacore/casacore#1024,
    gh#casacore/casacore#1036, gh#casacore/casacore#1062).
  * Use FFTW as default FFT provider (gh#casacore/casacore#1029,
    gh#casacore/casacore#1047, gh#casacore/casacore#1049).
  * UVFITS improvements (gh#casacore/casacore#1033,
    gh#casacore/casacore#1040, gh#casacore/casacore#1064,
    gh#casacore/casacore#1066, gh#casacore/casacore#1067).
  * Support for 64-bit row numbers.
- Drop patches incorporated upstream:
  * casacore-drop-fftpak.patch
  * casacore-lawson_f-fortran-errors.patch
- Bump so version in shared lib name.
- 32-bit builds not supported, use ExcludeArch to prevent build
  failures.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1647000000">- Add upstream patch to fix build on 32-bit architectures:
  * 1129.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651060800">- Add an rpmlintrc for shlib-policy-name-error</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651233600">- Add casacore-link-math.patch: Explicitly link to math library
  when building mirlab [gh#casacore/casacore#1190].
- Drop ExcludeArch: %ix86 to allow building for related 32-bit
  systems in light of previous commit (Fri Mar 11 10:04:22 UTC
  2022).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657022400">- Update to version 3.5.0:
  * TaQL now supports copying columns to new columns (e.g. to make
    a backup of the FLAG column)
  * Non-zero coordinates in JPL frames, e.g. the SUN frame, are
    now interpreted as an offset in right ascension and
    declination. Previously, coordinates in a JPL coordinate frame
    were ignored.
  * The Dysco storage manager is now built by default as part of
    casacore.
  * General:
  - Modernizations: remove Mutex (gh#casacore/casacore#1095,
    gh#casacore/casacore#1127, gh#casacore/casacore#1128),
    typing system (gh#casacore/casacore#1172,
    gh#casacore/casacore#1176).
  - Allow building with newer compilers
    (gh#casacore/casacore#1134, gh#casacore/casacore#1137,
    gh#casacore/casacore#1145, gh#casacore/casacore#1206,
    gh#casacore/casacore#1208, gh#casacore/casacore#1210,
    gh#casacore/casacore#1211).
  - Build python3 by default, not python2
    (gh#casacore/casacore#1209).
  * MeasurementSet:
  - Improve reading of DataDescriptionId
    (gh#casacore/casacore#1103).
  - Compute feed information (gh#casacore/casacore#1104) and
    field attributes (gh#casacore/casacore#1109) on demand.
  - UVFits improvements: support X-Y mounts
    (gh#casacore/casacore#1115), allow large antenna numbers
    (gh#casacore/casacore#1144), fix handling FITS-IDI
    GAIN_CURVE (gh#casacore/casacore#1151).
  - Fix precision in T+dT syntax (gh#casacore/casacore#1118).
  * Measures Allow offsets to JPL coordinates
    (gh#casacore/casacore#1160).
  * Tables:
  - Cache iteration boundaries while sorting tables
    (gh#casacore/casacore#1106).
  - Use RefTable for iteration (gh#casacore/casacore#1108).
  - Adios2 related changes: gh#casacore/casacore#1110,
    gh#casacore/casacore#1116, gh#casacore/casacore#1121,
    gh#casacore/casacore#1148.
  - Make Dysco part of casacore (gh#casacore/casacore#1117,
    gh#casacore/casacore#1125, gh#casacore/casacore#1146,
    gh#casacore/casacore#1166).
  - Add TaQL commands LIKE, COPYCOLUMN and DROPTABLE
    (gh#casacore/casacore#1154, gh#casacore/casacore#1169).
  - Fix one bug in rownr_t migration for TiledDataStMan
    (gh#casacore/casacore#1156).
  - Improve documentation (gh#casacore/casacore#1192).
  * Images:
  - Support CARTA opening images with a custom handler
    (gh#casacore/casacore#1158).
  - Allow easier python handling of beams
    (gh#casacore/casacore#1184).
- Drop upstreamed patches:
  * 1129.patch.
  * casacore-link-math.patch.
- New BuildRequires: gsl-devel and libboost_headers-devel.
- Move installed pkgconfig file to correct arch dependent
  location.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658232000">- Avoid compile-time CPU-detection (boo#1100677)</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714651200">- Add casacore-drop-mirlib.patch: drop unused mirlib library,
  patch taken from upstream PR. Fixes build failures against
  GCC-14 (gh#casacore/casacore#1344).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1716379200">- Drop casacore-drop-mirlib.patch: Superseded in favour of better
  patch casacore-mirlib-gcc14-compat.patch already committed
  upstream.
- Add casacore-mirlib-gcc14-compat.patch: Resolve issues compiling
  mirlib with gcc 14 (gh#casacore/casacore#1344,
  gh#casacore/casacore#1353).</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1724846400">- Update to version 3.6.1:
  * Version 3.6.1 fixes numpy 2.0 compatibility for the binary
    wheels of python-casacore. Otherwise it is identical to
    version 3.6.0
- Update to version 3.6.0:
  * Improvements on FITS import and export
    (gh#casacore/casacore#1215, gh#casacore/casacore#1229,
    gh#casacore/casacore#1251, gh#casacore/casacore#1267,
    gh#casacore/casacore#1268, gh#casacore/casacore#1304,
    gh#casacore/casacore#1318, gh#casacore/casacore#1341)
  * Small improvements to Dysco (gh#casacore/casacore#1305,
    gh#casacore/casacore#1313, gh#casacore/casacore#1337,
    gh#casacore/casacore#1343)
  * C++ modernizations (gh#casacore/casacore#1185,
    gh#casacore/casacore#1199, gh#casacore/casacore#1271,
    gh#casacore/casacore#1280, gh#casacore/casacore#1284,
    gh#casacore/casacore#1288, gh#casacore/casacore#1289,
    gh#casacore/casacore#1294, gh#casacore/casacore#1296,
    gh#casacore/casacore#1298, gh#casacore/casacore#1309,
    gh#casacore/casacore#1316, gh#casacore/casacore#1353,
    gh#casacore/casacore#1355)
  * Build system and CI improvements (gh#casacore/casacore#1219,
    gh#casacore/casacore#1236, gh#casacore/casacore#1252,
    gh#casacore/casacore#1315, gh#casacore/casacore#1328,
    gh#casacore/casacore#1330, gh#casacore/casacore#1334,
    gh#casacore/casacore#1335, gh#casacore/casacore#1349)
  * Code cleanup (gh#casacore/casacore#1204,
    gh#casacore/casacore#1245, gh#casacore/casacore#1269,
    gh#casacore/casacore#1277, gh#casacore/casacore#1279,
    gh#casacore/casacore#1300, gh#casacore/casacore#1301,
    gh#casacore/casacore#1302)
  * TaQL improvements (gh#casacore/casacore#1221,
    gh#casacore/casacore#1232, gh#casacore/casacore#1244,
    gh#casacore/casacore#1247, gh#casacore/casacore#1259,
    gh#casacore/casacore#1260, gh#casacore/casacore#1263,
    gh#casacore/casacore#1270, gh#casacore/casacore#1276,
    gh#casacore/casacore#1299)
  * Add new SI prefixes quetta, ronna, ronto and quecto
    (gh#casacore/casacore#1257)
  * Fix several issues that arose in CASA use
    (gh#casacore/casacore#1200, gh#casacore/casacore#1227,
    gh#casacore/casacore#1246, gh#casacore/casacore#1262,
    gh#casacore/casacore#1290, gh#casacore/casacore#1291,
    gh#casacore/casacore#1292, gh#casacore/casacore#1329,
    gh#casacore/casacore#1323)
  * Fix data race in images toWord / toPixel
    (gh#casacore/casacore#1235)
  * Update e-mail address (gh#casacore/casacore#1339)
- Removed casacore-mirlib-gcc14-compat.patch because no longer
  needed</changelog>
</package>
<package pkgid="23fe6879102a093e9c60d6335717dea0ff926a5d5ebf2eb7df04132a84d6570af208a8de80b294e0cfca75811b7b70d0666a3db7984aa4c1357cf55ac99ffacc" name="casacore-openmpi4" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp160.1.15"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1614254400">- Update to version 3.4.0:
  * Major modernization of Arrays, bringing it more in line with
    C++11 (gh#casacore/casacore#1012).
  * Use std::regex (gh#casacore/casacore#1072).
  * Remove many warnings (gh#casacore/casacore#1024,
    gh#casacore/casacore#1036, gh#casacore/casacore#1062).
  * Use FFTW as default FFT provider (gh#casacore/casacore#1029,
    gh#casacore/casacore#1047, gh#casacore/casacore#1049).
  * UVFITS improvements (gh#casacore/casacore#1033,
    gh#casacore/casacore#1040, gh#casacore/casacore#1064,
    gh#casacore/casacore#1066, gh#casacore/casacore#1067).
  * Support for 64-bit row numbers.
- Drop patches incorporated upstream:
  * casacore-drop-fftpak.patch
  * casacore-lawson_f-fortran-errors.patch
- Bump so version in shared lib name.
- 32-bit builds not supported, use ExcludeArch to prevent build
  failures.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1647000000">- Add upstream patch to fix build on 32-bit architectures:
  * 1129.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651060800">- Add an rpmlintrc for shlib-policy-name-error</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651233600">- Add casacore-link-math.patch: Explicitly link to math library
  when building mirlab [gh#casacore/casacore#1190].
- Drop ExcludeArch: %ix86 to allow building for related 32-bit
  systems in light of previous commit (Fri Mar 11 10:04:22 UTC
  2022).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657022400">- Update to version 3.5.0:
  * TaQL now supports copying columns to new columns (e.g. to make
    a backup of the FLAG column)
  * Non-zero coordinates in JPL frames, e.g. the SUN frame, are
    now interpreted as an offset in right ascension and
    declination. Previously, coordinates in a JPL coordinate frame
    were ignored.
  * The Dysco storage manager is now built by default as part of
    casacore.
  * General:
  - Modernizations: remove Mutex (gh#casacore/casacore#1095,
    gh#casacore/casacore#1127, gh#casacore/casacore#1128),
    typing system (gh#casacore/casacore#1172,
    gh#casacore/casacore#1176).
  - Allow building with newer compilers
    (gh#casacore/casacore#1134, gh#casacore/casacore#1137,
    gh#casacore/casacore#1145, gh#casacore/casacore#1206,
    gh#casacore/casacore#1208, gh#casacore/casacore#1210,
    gh#casacore/casacore#1211).
  - Build python3 by default, not python2
    (gh#casacore/casacore#1209).
  * MeasurementSet:
  - Improve reading of DataDescriptionId
    (gh#casacore/casacore#1103).
  - Compute feed information (gh#casacore/casacore#1104) and
    field attributes (gh#casacore/casacore#1109) on demand.
  - UVFits improvements: support X-Y mounts
    (gh#casacore/casacore#1115), allow large antenna numbers
    (gh#casacore/casacore#1144), fix handling FITS-IDI
    GAIN_CURVE (gh#casacore/casacore#1151).
  - Fix precision in T+dT syntax (gh#casacore/casacore#1118).
  * Measures Allow offsets to JPL coordinates
    (gh#casacore/casacore#1160).
  * Tables:
  - Cache iteration boundaries while sorting tables
    (gh#casacore/casacore#1106).
  - Use RefTable for iteration (gh#casacore/casacore#1108).
  - Adios2 related changes: gh#casacore/casacore#1110,
    gh#casacore/casacore#1116, gh#casacore/casacore#1121,
    gh#casacore/casacore#1148.
  - Make Dysco part of casacore (gh#casacore/casacore#1117,
    gh#casacore/casacore#1125, gh#casacore/casacore#1146,
    gh#casacore/casacore#1166).
  - Add TaQL commands LIKE, COPYCOLUMN and DROPTABLE
    (gh#casacore/casacore#1154, gh#casacore/casacore#1169).
  - Fix one bug in rownr_t migration for TiledDataStMan
    (gh#casacore/casacore#1156).
  - Improve documentation (gh#casacore/casacore#1192).
  * Images:
  - Support CARTA opening images with a custom handler
    (gh#casacore/casacore#1158).
  - Allow easier python handling of beams
    (gh#casacore/casacore#1184).
- Drop upstreamed patches:
  * 1129.patch.
  * casacore-link-math.patch.
- New BuildRequires: gsl-devel and libboost_headers-devel.
- Move installed pkgconfig file to correct arch dependent
  location.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658232000">- Avoid compile-time CPU-detection (boo#1100677)</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714651200">- Add casacore-drop-mirlib.patch: drop unused mirlib library,
  patch taken from upstream PR. Fixes build failures against
  GCC-14 (gh#casacore/casacore#1344).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1716379200">- Drop casacore-drop-mirlib.patch: Superseded in favour of better
  patch casacore-mirlib-gcc14-compat.patch already committed
  upstream.
- Add casacore-mirlib-gcc14-compat.patch: Resolve issues compiling
  mirlib with gcc 14 (gh#casacore/casacore#1344,
  gh#casacore/casacore#1353).</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1724846400">- Update to version 3.6.1:
  * Version 3.6.1 fixes numpy 2.0 compatibility for the binary
    wheels of python-casacore. Otherwise it is identical to
    version 3.6.0
- Update to version 3.6.0:
  * Improvements on FITS import and export
    (gh#casacore/casacore#1215, gh#casacore/casacore#1229,
    gh#casacore/casacore#1251, gh#casacore/casacore#1267,
    gh#casacore/casacore#1268, gh#casacore/casacore#1304,
    gh#casacore/casacore#1318, gh#casacore/casacore#1341)
  * Small improvements to Dysco (gh#casacore/casacore#1305,
    gh#casacore/casacore#1313, gh#casacore/casacore#1337,
    gh#casacore/casacore#1343)
  * C++ modernizations (gh#casacore/casacore#1185,
    gh#casacore/casacore#1199, gh#casacore/casacore#1271,
    gh#casacore/casacore#1280, gh#casacore/casacore#1284,
    gh#casacore/casacore#1288, gh#casacore/casacore#1289,
    gh#casacore/casacore#1294, gh#casacore/casacore#1296,
    gh#casacore/casacore#1298, gh#casacore/casacore#1309,
    gh#casacore/casacore#1316, gh#casacore/casacore#1353,
    gh#casacore/casacore#1355)
  * Build system and CI improvements (gh#casacore/casacore#1219,
    gh#casacore/casacore#1236, gh#casacore/casacore#1252,
    gh#casacore/casacore#1315, gh#casacore/casacore#1328,
    gh#casacore/casacore#1330, gh#casacore/casacore#1334,
    gh#casacore/casacore#1335, gh#casacore/casacore#1349)
  * Code cleanup (gh#casacore/casacore#1204,
    gh#casacore/casacore#1245, gh#casacore/casacore#1269,
    gh#casacore/casacore#1277, gh#casacore/casacore#1279,
    gh#casacore/casacore#1300, gh#casacore/casacore#1301,
    gh#casacore/casacore#1302)
  * TaQL improvements (gh#casacore/casacore#1221,
    gh#casacore/casacore#1232, gh#casacore/casacore#1244,
    gh#casacore/casacore#1247, gh#casacore/casacore#1259,
    gh#casacore/casacore#1260, gh#casacore/casacore#1263,
    gh#casacore/casacore#1270, gh#casacore/casacore#1276,
    gh#casacore/casacore#1299)
  * Add new SI prefixes quetta, ronna, ronto and quecto
    (gh#casacore/casacore#1257)
  * Fix several issues that arose in CASA use
    (gh#casacore/casacore#1200, gh#casacore/casacore#1227,
    gh#casacore/casacore#1246, gh#casacore/casacore#1262,
    gh#casacore/casacore#1290, gh#casacore/casacore#1291,
    gh#casacore/casacore#1292, gh#casacore/casacore#1329,
    gh#casacore/casacore#1323)
  * Fix data race in images toWord / toPixel
    (gh#casacore/casacore#1235)
  * Update e-mail address (gh#casacore/casacore#1339)
- Removed casacore-mirlib-gcc14-compat.patch because no longer
  needed</changelog>
</package>
<package pkgid="4e0764019ae6f79c0a8f3d925ff35c10c1dc79507087ec0d3e1cbbf2233933f999ca234032aa0fe40620326ea0aad8f82d8b0019fe8df5817d50bc31d2440ea6" name="casacore-openmpi4-devel" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="bp160.1.15"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1614254400">- Update to version 3.4.0:
  * Major modernization of Arrays, bringing it more in line with
    C++11 (gh#casacore/casacore#1012).
  * Use std::regex (gh#casacore/casacore#1072).
  * Remove many warnings (gh#casacore/casacore#1024,
    gh#casacore/casacore#1036, gh#casacore/casacore#1062).
  * Use FFTW as default FFT provider (gh#casacore/casacore#1029,
    gh#casacore/casacore#1047, gh#casacore/casacore#1049).
  * UVFITS improvements (gh#casacore/casacore#1033,
    gh#casacore/casacore#1040, gh#casacore/casacore#1064,
    gh#casacore/casacore#1066, gh#casacore/casacore#1067).
  * Support for 64-bit row numbers.
- Drop patches incorporated upstream:
  * casacore-drop-fftpak.patch
  * casacore-lawson_f-fortran-errors.patch
- Bump so version in shared lib name.
- 32-bit builds not supported, use ExcludeArch to prevent build
  failures.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1647000000">- Add upstream patch to fix build on 32-bit architectures:
  * 1129.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1651060800">- Add an rpmlintrc for shlib-policy-name-error</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651233600">- Add casacore-link-math.patch: Explicitly link to math library
  when building mirlab [gh#casacore/casacore#1190].
- Drop ExcludeArch: %ix86 to allow building for related 32-bit
  systems in light of previous commit (Fri Mar 11 10:04:22 UTC
  2022).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657022400">- Update to version 3.5.0:
  * TaQL now supports copying columns to new columns (e.g. to make
    a backup of the FLAG column)
  * Non-zero coordinates in JPL frames, e.g. the SUN frame, are
    now interpreted as an offset in right ascension and
    declination. Previously, coordinates in a JPL coordinate frame
    were ignored.
  * The Dysco storage manager is now built by default as part of
    casacore.
  * General:
  - Modernizations: remove Mutex (gh#casacore/casacore#1095,
    gh#casacore/casacore#1127, gh#casacore/casacore#1128),
    typing system (gh#casacore/casacore#1172,
    gh#casacore/casacore#1176).
  - Allow building with newer compilers
    (gh#casacore/casacore#1134, gh#casacore/casacore#1137,
    gh#casacore/casacore#1145, gh#casacore/casacore#1206,
    gh#casacore/casacore#1208, gh#casacore/casacore#1210,
    gh#casacore/casacore#1211).
  - Build python3 by default, not python2
    (gh#casacore/casacore#1209).
  * MeasurementSet:
  - Improve reading of DataDescriptionId
    (gh#casacore/casacore#1103).
  - Compute feed information (gh#casacore/casacore#1104) and
    field attributes (gh#casacore/casacore#1109) on demand.
  - UVFits improvements: support X-Y mounts
    (gh#casacore/casacore#1115), allow large antenna numbers
    (gh#casacore/casacore#1144), fix handling FITS-IDI
    GAIN_CURVE (gh#casacore/casacore#1151).
  - Fix precision in T+dT syntax (gh#casacore/casacore#1118).
  * Measures Allow offsets to JPL coordinates
    (gh#casacore/casacore#1160).
  * Tables:
  - Cache iteration boundaries while sorting tables
    (gh#casacore/casacore#1106).
  - Use RefTable for iteration (gh#casacore/casacore#1108).
  - Adios2 related changes: gh#casacore/casacore#1110,
    gh#casacore/casacore#1116, gh#casacore/casacore#1121,
    gh#casacore/casacore#1148.
  - Make Dysco part of casacore (gh#casacore/casacore#1117,
    gh#casacore/casacore#1125, gh#casacore/casacore#1146,
    gh#casacore/casacore#1166).
  - Add TaQL commands LIKE, COPYCOLUMN and DROPTABLE
    (gh#casacore/casacore#1154, gh#casacore/casacore#1169).
  - Fix one bug in rownr_t migration for TiledDataStMan
    (gh#casacore/casacore#1156).
  - Improve documentation (gh#casacore/casacore#1192).
  * Images:
  - Support CARTA opening images with a custom handler
    (gh#casacore/casacore#1158).
  - Allow easier python handling of beams
    (gh#casacore/casacore#1184).
- Drop upstreamed patches:
  * 1129.patch.
  * casacore-link-math.patch.
- New BuildRequires: gsl-devel and libboost_headers-devel.
- Move installed pkgconfig file to correct arch dependent
  location.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658232000">- Avoid compile-time CPU-detection (boo#1100677)</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]
- Prepare support for openmpi5</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714651200">- Add casacore-drop-mirlib.patch: drop unused mirlib library,
  patch taken from upstream PR. Fixes build failures against
  GCC-14 (gh#casacore/casacore#1344).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1716379200">- Drop casacore-drop-mirlib.patch: Superseded in favour of better
  patch casacore-mirlib-gcc14-compat.patch already committed
  upstream.
- Add casacore-mirlib-gcc14-compat.patch: Resolve issues compiling
  mirlib with gcc 14 (gh#casacore/casacore#1344,
  gh#casacore/casacore#1353).</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1724846400">- Update to version 3.6.1:
  * Version 3.6.1 fixes numpy 2.0 compatibility for the binary
    wheels of python-casacore. Otherwise it is identical to
    version 3.6.0
- Update to version 3.6.0:
  * Improvements on FITS import and export
    (gh#casacore/casacore#1215, gh#casacore/casacore#1229,
    gh#casacore/casacore#1251, gh#casacore/casacore#1267,
    gh#casacore/casacore#1268, gh#casacore/casacore#1304,
    gh#casacore/casacore#1318, gh#casacore/casacore#1341)
  * Small improvements to Dysco (gh#casacore/casacore#1305,
    gh#casacore/casacore#1313, gh#casacore/casacore#1337,
    gh#casacore/casacore#1343)
  * C++ modernizations (gh#casacore/casacore#1185,
    gh#casacore/casacore#1199, gh#casacore/casacore#1271,
    gh#casacore/casacore#1280, gh#casacore/casacore#1284,
    gh#casacore/casacore#1288, gh#casacore/casacore#1289,
    gh#casacore/casacore#1294, gh#casacore/casacore#1296,
    gh#casacore/casacore#1298, gh#casacore/casacore#1309,
    gh#casacore/casacore#1316, gh#casacore/casacore#1353,
    gh#casacore/casacore#1355)
  * Build system and CI improvements (gh#casacore/casacore#1219,
    gh#casacore/casacore#1236, gh#casacore/casacore#1252,
    gh#casacore/casacore#1315, gh#casacore/casacore#1328,
    gh#casacore/casacore#1330, gh#casacore/casacore#1334,
    gh#casacore/casacore#1335, gh#casacore/casacore#1349)
  * Code cleanup (gh#casacore/casacore#1204,
    gh#casacore/casacore#1245, gh#casacore/casacore#1269,
    gh#casacore/casacore#1277, gh#casacore/casacore#1279,
    gh#casacore/casacore#1300, gh#casacore/casacore#1301,
    gh#casacore/casacore#1302)
  * TaQL improvements (gh#casacore/casacore#1221,
    gh#casacore/casacore#1232, gh#casacore/casacore#1244,
    gh#casacore/casacore#1247, gh#casacore/casacore#1259,
    gh#casacore/casacore#1260, gh#casacore/casacore#1263,
    gh#casacore/casacore#1270, gh#casacore/casacore#1276,
    gh#casacore/casacore#1299)
  * Add new SI prefixes quetta, ronna, ronto and quecto
    (gh#casacore/casacore#1257)
  * Fix several issues that arose in CASA use
    (gh#casacore/casacore#1200, gh#casacore/casacore#1227,
    gh#casacore/casacore#1246, gh#casacore/casacore#1262,
    gh#casacore/casacore#1290, gh#casacore/casacore#1291,
    gh#casacore/casacore#1292, gh#casacore/casacore#1329,
    gh#casacore/casacore#1323)
  * Fix data race in images toWord / toPixel
    (gh#casacore/casacore#1235)
  * Update e-mail address (gh#casacore/casacore#1339)
- Removed casacore-mirlib-gcc14-compat.patch because no longer
  needed</changelog>
</package>
<package pkgid="8cfd4ee65f31e384453c8ccb2d50861ecf7816539a6c2fc3b71e1f054e5955d2c6e887c42472dd02d8ed530d49767b6820e687c0557e6ee16a690b3cf357aca0" name="casync" arch="x86_64">
  <version epoch="0" ver="2+git20201210.bd8898e" rel="bp160.1.14"/>
  <changelog author="sebix+novell.com@sebix.at" date="1517832000">- specfile: remove manual manpage build, done by meson</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1517832001">- specfile:
  - remove test condition
  - remove LANG export for test, done by meson</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1552737600">- add fix-gcc9-renameat.patch from upstream PR#160 to fix boo#1121387</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1558353600">- Add the missing zlib requirement.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1564315200">- Update to revision a8f6c841 because of build errors on Tumbleweed.
  - No changelog available.
- remove fix-gcc9-renameat.patch</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1579348800">- fix build by adding build requirement on c++ compiler</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: Allow OBS to
  shortcut through the -minif lavors.
- Drop libudev-devel BuildRequires: we already have the aequivalent
  pkgconfig(libudev) in place.</changelog>
  <changelog author="kukuk@suse.com" date="1615550400">- Update to version 2+git20201210.bd8898e:
  * docs: fix simple typo, distuingish -&gt; distinguish
  * caprotocol: fix typo in protocol description
  * Call stat again after changing ownership of created files, so we detect reset setuid/setgid bits and reset them.
  * We erroneously use the st_dev value in place of the magic value if the st_dev value is cached. This causes problems extracting trees containing subvolumes.
  * Update to Fedora31</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1615550401">- Cleanup build dependencies</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="0bcf5c87d6a14c5204fdb221c2344c1287a65b4fedd6311b38e7e292c3a51eb1063f5c783b34f426778f076fefef5586d11c7de58b7022b6313e1b659b76d047" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="6f1fb2bdf2ecc403ab379688b6ccc3dead9222a3e9625281847361efc9d96840589853021a5688eef3e97aeab3a65e7bf81a04adab4b60947257f857c1ac462c" name="catfish" arch="noarch">
  <version epoch="0" ver="4.20.1" rel="bp160.1.2"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="e4823b9e458033329c1ed96f3f6d3340918cf11c63a4deab275d73ac49550271fff02d142742f6e35645180fd276fa3449343ac97803b7dc8e7be2ef06b8c98a" name="catfish-lang" arch="noarch">
  <version epoch="0" ver="4.20.1" rel="bp160.1.2"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1627732800">- Update to version 4.16.2
  * Use standard icon name application-x-executable-symbolic
    instead of applications-other-symbolic
  * Fix install with rpm/pkgbuild/pip
    (gxo#apps/catfish#58, gxo#apps/catfish#59)
  * Added keyboard hotkeys for search entry, new open dialog
  * Fix Thunar "Show in FM" bug, better FM support
    (gxo#apps/catfish#43)
  * Stops freezes with special files when zip search enabled
  * Better and safer refreshing of selected results
    (gxo#apps/catfish#48)
  * Enable sidebar by default (gxo#apps/catfish#45)
  * Enable installation using pip (local source)
    (gxo#apps/catfish!20)
  * Add support for searching compressed files (gxo#apps/catfish#29)
  * Add persistent settings for searching file contents
    (gxo#apps/catfish#10)
  * Add persistent settings for thumbnail view (gxo#apps/catfish#14)
  * Add message and troff mimetypes to fulltext search
    (gxo#apps/catfish!22)
  * Add PDF support to fulltext search (gxo#apps/catfish#37)
  * Fix loading in Wayland (gxo#apps/catfish#50)
  * Stop current search when new one starts (gxo#apps/catfish!28)
  * Use local MIME database info (gxo#apps/catfish!21)
  * Translation Updates</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1629806400">- Fixed package sources that disappeared</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1632657600">- Update to version 4.16.3
  * Update "Searching..." Cursor
  * Sidebar background color bugfix
  * Fixes for syntax, fulltext zip search, special files
    (gxo#apps/catfish#62)
  * Adds symbolic link icons, better icon updating
    (gxo#apps/catfish#46)
  * Translation Updates</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1658059200">- Update to version 4.16.4
  * Add "Open with" right click item and dialog
    (gxo#apps/catfish#12)
  * Add a command-line option for setting default sort method
  * Add Ctrl+A accelerator for the treeview (gxo#apps/catfish#64)
  * Add option to show file size in binary or decimal
  * Cosmetic changes for search entry and delete dialog
  * Fix Ctrl+H not always toggling hidden files
  * Fix DE detection when launched from Electron apps
  * Fix exo file manager lookup for non-existent keys
    (gxo#apps/catfish#64)
  * Fix file manager lookup outside of Xfce
  * Fix GNOME DE detection in Ubuntu
  * Improve application menu appearance
  * Improve default width for the sidebar
  * Prepend the project root directory to sys.path
  * Support running without Xfconf (no preference saving)
  * Switch to using the super() method
  * Use correct executable for elementary Files
  * Translation Updates</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1691323200">- Update to version 4.18.0
  * Filters: Add Archives, Other, update Apps
  * Use Gio to open files, fix "no default app" issue
  * Add symlink emblem to thumbnails in thumbnail mode
  * config: Prefer plocate over mlocate if available
  * window: Avoid IndexError on right click when selection is empty
  * Create shared filetype lists for searching and filtering
  * Ensure site-packages directory is prepended to sys.path
  * Fix double border between sidebar and results area
  * window: Fix and refactor new_column()
  * window: Fix markup warnings in thumbnail view
  * Fix GtkBuilder warnings
  * Revert "Suppress the various GTK warnings GtkBuilder outputs"
  * Fix crash and translations when install prefix != /usr
  * Update `.gitignore`
  * Remove generated file po/catfish.pot
  * Performance improvements (fix #79)
  * Translation Updates
- Refresh 0001-Force-disable-Zeitgeist-support.patch
- Remove _service file</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1700049600">- Use %%{python_module ...} to specify required Python modules to
  build this package.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1706961600">- Skip python312 for now until all required Python modules have been
  built.</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220800">- Don't use %%{python_module ...} as we only build for the default
  Python interpreter. python312 still needs to be skipped due to
  python3-distutils!</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1707220801">- As long as a new Python version does not ship a broken
  python3-distutils, like python311 did in its early days, there is
  no need to deal with or skip a specific python version at all.
  Disable all %%{python_module ...} and skip_python... stuff again.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1747915200">- Update to version 4.20.1
  - build: Require defs.py
  - build: Relax meson requirements
  - build: Document dependency version requirements
  - Prevent selection change on right-click
  - Support opening multiple files with enter key
  - Improve TreeView performance
  - Deprecated exo with libxfce4ui 4.21.0
  - Update files found in real time
  - Display search time in status bar
  - Fix unintended search
  - Add hotkey for copy location
  - Add delete hotkey
  - Rename Files
  - Add a context menu option to send selected files to a folder
  - Complete copyright in about dialog
  - Translation Updates
- Do not use 0001-Force-disable-Zeitgeist-support.patch on Tumbleweed
  as we can now use zeitgeist support
- Added relax-python-requirement.patch needed to relax Python3 version
  on Leap 15.6</changelog>
</package>
<package pkgid="630edeb3d5fdaac910e0388198ce47e47fd566459c9c549752e8e30ac5d2ebd399722543464cfd603b9b1d3b733d2d53706c163ba587d4aae317e41c164e737d" name="catimg" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="bp160.1.12"/>
  <changelog author="JL K &lt;jlk@fsfe.org&gt;" date="1588593600">- Init project</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963200">- Use macros instead of commands
- Remove unnecessary specfile components
- Use macros for paths</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963201">- Refit into graphics viewer group</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649332800">- Format spec file via osc service</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649332801">- Correct source URL</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649505600">- Use cmake via macro
- Package zsh completion on its own</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649592000">- Do not strip binary on build</changelog>
</package>
<package pkgid="49db7ecc6c0daad90b8a1ef44e8eba44d535cc88a3e1f50c59b42ad4c5de1935e03ae5655a3f26ff69314600d929361f910e1ac38aa88f7ee2c6e930feaff8fb" name="catimg-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.7.0" rel="bp160.1.12"/>
  <changelog author="JL K &lt;jlk@fsfe.org&gt;" date="1588593600">- Init project</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963200">- Use macros instead of commands
- Remove unnecessary specfile components
- Use macros for paths</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963201">- Refit into graphics viewer group</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649332800">- Format spec file via osc service</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649332801">- Correct source URL</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649505600">- Use cmake via macro
- Package zsh completion on its own</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649592000">- Do not strip binary on build</changelog>
</package>
<package pkgid="c08e1c36482214b11820ab76807401df088b548dd5ec83205a7cfec48b2df8e1ae391f974724508d2ed5f4892e95178410a36d33bcc8ddbb08380769e37ca2b0" name="cava" arch="x86_64">
  <version epoch="0" ver="0.10.2" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649764800">- Update to 0.8.0:
  breaking changes:
  * split out core functionality in separate library cavacore
    see CAVACORE.md for details
  * removed ignore config option
  * merge gravity and integral config option to "noise reduction"
  improvements:
  * use double precision all the way, improves details in visualization.
  * increase buffer sizes for large sample rates 96k++
  * noise filters should now scale better with resolution and framerate
  * embed default config file and populate on first launch instead of installing it
  * Add new output format, noritake VFD bitmap
  bugfixes:
  * fixed some potential buffer overflows
  * fix some bugs in sdl output</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650456000">- Update to 0.8.1:
  * fix critical bug where default config value caused always maxed
    out bars #447</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1650888000">- Update to 0.8.2:
  bugfixes:
  * fix buffer overflow in audio buffer when calling reset_buffer
    (used in fifo input)
  * cavacore: fix segfault when setting 0Hz lower cut off
  * framerate &lt;= 1 msec wait was multiplied by 1000 instead of divided
    improvements:
  * cavacore: don't print to stdout or call exit, use error status
    flag in cava_plan instead
  * cavacore: add extern C construct for c++ compilers
  * add license in cavacore header file
  * remove build dependency on xxd, use incbin instead</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1667563200">- Update to 0.8.3:
  bugfixes:
  * fix some calculations on x-axis label
  * cavacore: channels where sorted wrong according to doc
  * fix autosensing sometimes not working
  improvements:
  * improved response time by decreasing audio buffer size
  * add support for alacritty synchronized updates
  * brought EQ back by popular demand
  * added support for hex colors and gradient in noncurses mode
  * add configurable orientation of bars</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1691323200">- Update to 0.9.0:
  new:
  * glsl shader output
  * windows operating system support
  * gradient support in sdl output
  breaking:
  * some config options are now 0-100 instead of 0-1 due to windows
    ini not supporting floats</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1691928000">- Update to 0.9.1:
  * hardcoded pipewire include flags #519
  * default input wrongly set to alsa instead of pulseaudio/pipewire #518</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1692964800">- bsc#1214255: Additionally to libpulse-devel also buildrequire
  pipewire-devel to enable build with pipewire support</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 0.10.0:
  * OSS input backend and general improved FreeBSD support
  * pipewire default if supported
  * noncurses is now default</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1706875200">- Update to 0.10.1:
  * JACK support
  * default to pulseaudio before sndio</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1715688000">- Update to 0.10.2:
  * fix source being ignored when using pipewire #557
  * fix stdlib.h not being included after iniparser upgrade #560
  * add waveform visualization #484
  * exit with error if pipewire loop creation fails #561</changelog>
</package>
<package pkgid="1596da93366a782d51dc9b0f96e65c203d71fdfacb032d7934508ca847f2b9b08d9121f95228569b3e6b443d3c7c9e99df1a248a2cfda0fc83b81267f514e09c" name="cblas-devel" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1676030400">- Fix missing symbols for deprecated functions in LAPACK, add
  Restore_missing_deprecated_prototypes.patch
- Add -Wl,--no-undefined when creating shared libraries,
  to catch missing symbols during build
- Test fixes:
  * Build test binaries during %build, run in %check
  * Fix incorrect path for test output, to actually catch
    any test failures
- Spec file cleanup:
  * Do not rename blaslib, it is used for test binaries
  * Use same commands for building lapacke as for other libs
  * Remove unused FFLAGS_NOOP for test binaries</changelog>
  <changelog author="eich@suse.com" date="1676462400">- As a configurable option add tmglib code to the LAPACK librarly
  and enable TMG in LAPACKE as the header files provide its API
  (boo#1207989 &amp; bsc#1087426).
- Fix update-alternatives for lapacke (bsc#1207358).
- Restore generic link for update-alternatives. This is usually
  set by the update-alternatives and it is '%ghost'ed but rpmlint
  complains.
- Move update-alternatives --remove to %%postun to stop rpmlint
  from complaining.
- Removed useless - because never executed - %%postrans scriptlets.
- Added missing _%%{_arch} to update-alternative names.
- rpmlint complains anyway - this time about alternative-link-missing
  - as it does not understand the _%%{_arch} endings: muffle with
  rpmlintrc.
- Make arch-dependent generic names conditional.</changelog>
  <changelog author="eich@suse.com" date="1677153600">- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1710158400">- Add Fix-testing-input.patch to remove stray ';' in the input data
  for TESTING/dgebal.in now rejected with the GFortran 14 runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1714824000">- Update to version 3.12.0 (boo#1223783):
  * Long list of changes, see
    &lt;https://netlib.org/lapack/lapack-3.12.0.html&gt;.
- Drop all upstreamed or otherwise fixed patches:
  * lapack-3.2.2.patch
  * Fix-MinGW-build-error.patch
  * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
  * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
  * Fix-out-of-bounds-read.patch
  * Restore_missing_deprecated_prototypes.patch
  * Fix-testing-input.patch
- Use cmake for configure and ninja for build.
- Package pkgconf and cmake scripts for -devel pkgs.
- Drop multibuild flavour for man files.
- Add multibuild flavour for static libs (also used to build man
  files).
- Build man files using doxygen instead of using pre-built files.
- Explicitly symlink library to relocated shared libs in
  baselibs.conf (boo#1207563).
- Recommend lapack-man package from
  {blas,lapack,lapacke,cblas}-devel packages.</changelog>
  <changelog author="badshah400@gmail.com" date="1718366400">- Rename isnan man file to avoid conflict with libm's isnan (from
  package man-pages).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720094400">- Add fix-lapack-testing.patch to fix tests
  gh#Reference-LAPACK/lapack@5b0687f429cf</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721600">- Add -ffp-contract=off flag for aarch64 to avoid precision issues
  https://github.com/scipy/scipy/issues/21475#issuecomment-2454203196</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721601">- Fix previous commit for static build on aarch64
- Run %fdupes on man folder as suggested by rpmlint</changelog>
</package>
<package pkgid="9163cea86c71a404a6c88e2330c0b0f59547451ceeea23b478e8dabd445fa55692a430bd688b6ac90e96e5dfee1b577b5cc83f9a341d6c000b214c7993cd6d11" name="cblas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1676030400">- Fix missing symbols for deprecated functions in LAPACK, add
  Restore_missing_deprecated_prototypes.patch
- Add -Wl,--no-undefined when creating shared libraries,
  to catch missing symbols during build
- Test fixes:
  * Build test binaries during %build, run in %check
  * Fix incorrect path for test output, to actually catch
    any test failures
- Spec file cleanup:
  * Do not rename blaslib, it is used for test binaries
  * Use same commands for building lapacke as for other libs
  * Remove unused FFLAGS_NOOP for test binaries</changelog>
  <changelog author="eich@suse.com" date="1676462400">- As a configurable option add tmglib code to the LAPACK librarly
  and enable TMG in LAPACKE as the header files provide its API
  (boo#1207989 &amp; bsc#1087426).
- Fix update-alternatives for lapacke (bsc#1207358).
- Restore generic link for update-alternatives. This is usually
  set by the update-alternatives and it is '%ghost'ed but rpmlint
  complains.
- Move update-alternatives --remove to %%postun to stop rpmlint
  from complaining.
- Removed useless - because never executed - %%postrans scriptlets.
- Added missing _%%{_arch} to update-alternative names.
- rpmlint complains anyway - this time about alternative-link-missing
  - as it does not understand the _%%{_arch} endings: muffle with
  rpmlintrc.
- Make arch-dependent generic names conditional.</changelog>
  <changelog author="eich@suse.com" date="1677153600">- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1710158400">- Add Fix-testing-input.patch to remove stray ';' in the input data
  for TESTING/dgebal.in now rejected with the GFortran 14 runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1714824000">- Update to version 3.12.0 (boo#1223783):
  * Long list of changes, see
    &lt;https://netlib.org/lapack/lapack-3.12.0.html&gt;.
- Drop all upstreamed or otherwise fixed patches:
  * lapack-3.2.2.patch
  * Fix-MinGW-build-error.patch
  * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
  * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
  * Fix-out-of-bounds-read.patch
  * Restore_missing_deprecated_prototypes.patch
  * Fix-testing-input.patch
- Use cmake for configure and ninja for build.
- Package pkgconf and cmake scripts for -devel pkgs.
- Drop multibuild flavour for man files.
- Add multibuild flavour for static libs (also used to build man
  files).
- Build man files using doxygen instead of using pre-built files.
- Explicitly symlink library to relocated shared libs in
  baselibs.conf (boo#1207563).
- Recommend lapack-man package from
  {blas,lapack,lapacke,cblas}-devel packages.</changelog>
  <changelog author="badshah400@gmail.com" date="1718366400">- Rename isnan man file to avoid conflict with libm's isnan (from
  package man-pages).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720094400">- Add fix-lapack-testing.patch to fix tests
  gh#Reference-LAPACK/lapack@5b0687f429cf</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721600">- Add -ffp-contract=off flag for aarch64 to avoid precision issues
  https://github.com/scipy/scipy/issues/21475#issuecomment-2454203196</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721601">- Fix previous commit for static build on aarch64
- Run %fdupes on man folder as suggested by rpmlint</changelog>
</package>
<package pkgid="e5e5c8e715b392dc587fc45fb6090a5f36fa8da0fce1b5b0dfd1f883bb4d18d7f26bb0befb7793e2f0cdb29d2e70c111a9bb2b7b0a8e87be5979e907a275e166" name="cblas-devel-static" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1676030400">- Fix missing symbols for deprecated functions in LAPACK, add
  Restore_missing_deprecated_prototypes.patch
- Add -Wl,--no-undefined when creating shared libraries,
  to catch missing symbols during build
- Test fixes:
  * Build test binaries during %build, run in %check
  * Fix incorrect path for test output, to actually catch
    any test failures
- Spec file cleanup:
  * Do not rename blaslib, it is used for test binaries
  * Use same commands for building lapacke as for other libs
  * Remove unused FFLAGS_NOOP for test binaries</changelog>
  <changelog author="eich@suse.com" date="1676462400">- As a configurable option add tmglib code to the LAPACK librarly
  and enable TMG in LAPACKE as the header files provide its API
  (boo#1207989 &amp; bsc#1087426).
- Fix update-alternatives for lapacke (bsc#1207358).
- Restore generic link for update-alternatives. This is usually
  set by the update-alternatives and it is '%ghost'ed but rpmlint
  complains.
- Move update-alternatives --remove to %%postun to stop rpmlint
  from complaining.
- Removed useless - because never executed - %%postrans scriptlets.
- Added missing _%%{_arch} to update-alternative names.
- rpmlint complains anyway - this time about alternative-link-missing
  - as it does not understand the _%%{_arch} endings: muffle with
  rpmlintrc.
- Make arch-dependent generic names conditional.</changelog>
  <changelog author="eich@suse.com" date="1677153600">- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1710158400">- Add Fix-testing-input.patch to remove stray ';' in the input data
  for TESTING/dgebal.in now rejected with the GFortran 14 runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1714824000">- Update to version 3.12.0 (boo#1223783):
  * Long list of changes, see
    &lt;https://netlib.org/lapack/lapack-3.12.0.html&gt;.
- Drop all upstreamed or otherwise fixed patches:
  * lapack-3.2.2.patch
  * Fix-MinGW-build-error.patch
  * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
  * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
  * Fix-out-of-bounds-read.patch
  * Restore_missing_deprecated_prototypes.patch
  * Fix-testing-input.patch
- Use cmake for configure and ninja for build.
- Package pkgconf and cmake scripts for -devel pkgs.
- Drop multibuild flavour for man files.
- Add multibuild flavour for static libs (also used to build man
  files).
- Build man files using doxygen instead of using pre-built files.
- Explicitly symlink library to relocated shared libs in
  baselibs.conf (boo#1207563).
- Recommend lapack-man package from
  {blas,lapack,lapacke,cblas}-devel packages.</changelog>
  <changelog author="badshah400@gmail.com" date="1718366400">- Rename isnan man file to avoid conflict with libm's isnan (from
  package man-pages).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720094400">- Add fix-lapack-testing.patch to fix tests
  gh#Reference-LAPACK/lapack@5b0687f429cf</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721600">- Add -ffp-contract=off flag for aarch64 to avoid precision issues
  https://github.com/scipy/scipy/issues/21475#issuecomment-2454203196</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1730721601">- Fix previous commit for static build on aarch64
- Run %fdupes on man folder as suggested by rpmlint</changelog>
</package>
<package pkgid="bc152ca37466c8c385f61abed875acada52bf38ab2c5634a2c292b596fe825b9219899b0f7b1c60aec61765cb32ae475b2a037f33eb6f30f3713b777037dc5f3" name="cc-tool" arch="x86_64">
  <version epoch="0" ver="0.27" rel="bp160.1.12"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540900800">- initial package of version 0.26</changelog>
  <changelog author="Wang Jun &lt;badboywj@gmail.com&gt;" date="1702900800">- Update to version 0.27
  * changes from https://github.com/dashesy/cc-tool/commits/v0.27/
  * remove obsolete patch fix-flashing.patch</changelog>
</package>
<package pkgid="c16168d518b5b17ce0060eb94a4701a67f13b9fd96cda1739b11418bb1d385388a642ead35fa179aed89eea406050393d59ba4e5f2f1e790f7db0678e2a77fab" name="ccache" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="160000.2.2"/>
  <changelog author="mli@suse.com" date="1709035200">- Update to 4.9.1:
  * Improved detection of bad remote storage URLs gracefully. This also fixes
    crashes seen in ccache’s own test suite.
  * Made caching completely disabled when modification of a source or include
    file is detected during ccache invocation. Previously this was only done for the direct mode.
  * Fixed an MSVC crash when using /Zi with many concurrent compilations.
  * Fixed a crash when -arch is the last compiler option.
- Drop no longer needed fix2038.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1719403200">- Update to version 4.10:
  * chore: Update authors
  * chore: Update NEWS
  * ci: Disable Ubuntu 24.04 builds temporarily
  * build: Fix zstd build for older CMake versions
  * chore: Juggle some include headers
  * build: Fix MSVC /Zc:preprocessor warning (#1461)
  * chore: Remove unused headers (#1460)
  * refactor: Use tl::expected for process_args return value
  * chore: Fix some Cppcheck warnings
  * chore: Remove obsolete os_path helper in test_storage_local_util
  * chore: Improve cast and avoid repeating types (#1459)
  * feat: Add argument handling for Emscripten's --em-config (#1458)
  * feat: Add support for -fdump-ipa-clones (#1449)
  * fix: Force run_second_cpp=true when generating profiling information
  * fix: Hash "apparent real path" of object file when using -fprofile-arcs
  * test: Improve verbose printing of test names
  * refactor: Add more Hash::hash overloads
  * docs: Improve documentation of gcno_cwd sloppiness
  * fix: Handle -fdiagnostics-color for Clang again
  * chore: Clean up comment and debug log string
  * test: Improve printing of test suite
  * chore: Fix typo</changelog>
  <changelog author="dmueller@suse.com" date="1719835200">- update to 4.10.1:
  * Fixed prefix command lookup from `PATH`.
  * Fixed detection and usage of system blake3.
  * Find CppHttplib named libhttplib.so as well.
  * Removed Xcode assembly workaround for zstd.
  * Added bundled subset of Fmt again for convenience.
  * Removed no longer needed workaround when building downloaded
    Zstd</changelog>
  <changelog author="ana.guerrero@suse.com" date="1721304000">-  Add patch to fix build with fmt 11: fmt_fix.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721995200">- Update to 4.10.2:
  * Fixed detection of Fmt version 11 and newer.
  * Made the “-fprofile-update=atomic” test only run when that
    option is supported by the compiler.
  * Made the color diagnostics tests work when the user running the
    tests has a non-POSIX login shell.
- Remove fmt_fix.patch
  * Already included in 4.10.2 upstream release</changelog>
  <changelog author="dmueller@suse.com" date="1726142400">- use unversioned gcc also for SLE16</changelog>
  <changelog author="dmueller@suse.com" date="1728475200">- avoid optional dependency on doctest on SLE16 and older
- unbundle cpp-httplib for new enough distributions</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728561600">- Really run tests and Unit tests in %check</changelog>
  <changelog author="marius.grossu@suse.com" date="1748347200">- Added BuildRequires: gcc11-PIE
  (bsc#1239963)</changelog>
  <changelog author="marius.grossu@suse.com" date="1748952000">- Update to 4.11.3:
  * Fixed handling of Apple Clang `-Xpreprocessor -fopenmp` options (regression in
  ccache 4.10).
  * Adapted unit test code to compile with doctest 2.4.12.
  * Silenced benign compiler warning in the profiling_gcc_10+ suite.
  * Reset signal mask and signal defaults when executing compiler. This fixes a
  problem where interrupting the compilation (e.g. with Ctrl+C) wouldn't kill
  the compiler (regression in ccache 4.11).
  * Fixed erroneous log file locking on Windows (regression in ccache 4.11).
  * Added ability to send arbitrary HTTP headers to HTTP storage.
  * Added support for MSVC's `/TC` and `/TP` options.
  * Made the `absolute_paths_in_stderr` feature also handle MSVC diagnostics
    messages.
  * Absolute paths in MSVC diagnostics messages are now rewritten to relative if
  `base_dir` is in effect.
  * Added support for NVCC's `--compile` option.
  * `posix_spawn` is now used instead `execv` to execute the compiler on POSIX
  systems.
  * Added support for GCC's `-fprofile-prefix-path` option.
  * Added `response_file_format` config option to control response file format.
  * Added support for Clang `-frandomize-layout-seed-file` option.
  * Improved `absolute_paths_in_stderr` to recognize more paths patterns.
  * Added support for the clang-cl option `/showIncludes:user`.
  * Added support for Intel's LLVM-based compilers `icx` and `icx-cl`.
  * A stat call for `~/.ccache` is now avoided if `CCACHE_DIR` is set.
  * Added Support for `.bat` and `.cmd` scripts as the compiler on Windows.
  * Added support for Clang's `-f{debug,file}-compilation-dir` options.
  * Added knowledge about Clang's `--offload-compress` option. This will avoid
  errors when ccache runs the compiler in preprocessor mode.
  * Added knowledge about Clang options `-fmodules-cache-path`,
  `-fmodule-map-file` and `-fbuild-session-file`.
  * Improved handling of paths internally, thereby fixing some issues on Windows
  (for example when using non-ASCII paths).
  * Fixed interpretation of non-ASCII paths in environment variables on Windows.
  * Made sure that remote storage `keep-alive` can be overridden as expected.
  * Fixed detection of compiler type for hard-linked generic compiler name.
  * Fixed problems with matching a path with `base_dir` if either ends with a
  slash.
  * The `-fprofile-abs-path` option is now correctly passed through to GCC.
  * Writes to the log file are now synchronized.
  * Command line config options ending with "`/ccache`" are now handled properly.
  * Made `--trim-method mtime` actually use mtime instead of atime. +
  * Fixed a bug where ccache failed to rename raw files correctly for large caches
  that have more than two cache levels.
  * Instructed MSVC to accept UTF-8 characters in ccache's own source code.
  * Fixed binary patching of `sysconfdir` for the prebuilt Linux binary.
  * Added an `HTTP_STORAGE_BACKEND` build option to make it possible to turn off
  the http storage backend.
  * Fixed call to `sha256sum` on macOS.
  * Made tests pass in year 2038.
  * Refreshed some Dockerfiles.</changelog>
</package>
<package pkgid="d14990666cb32179f0f4190e7daaa727da85a094fa88da6a0142b14f84e94236dfccf7e01490b4f2e1e891ab0eb243033f41a4aaab9b3cb21e4491ec14cd4a2a" name="ccls" arch="x86_64">
  <version epoch="0" ver="0.20240505" rel="bp160.1.13"/>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1598270400">- Require only 500MB per core.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1604318400">- New upstream release 0.20201025
  Remove patches:
  * 0001-cmake-support-CLANG_LINK_CLANG_DYLIB.patch
  * 0002-Adapt-llvmorg-10-init-12036-g3b9715cb2193-handleDecl.patch
  This release supports Clang 7~11.
  [#] LSP conformance
  * Support 3.15.0 `serverInfo`
  [#] Misc
  * Infer -target and --driver-mode from argv[0] #511
  * Support CMake variable `CLANG_LINK_CLANG_DYLIB` (some distributions use this to provide `libclang-cpp.so` instead of `libclang*.a` or `libclang*.so`. This option is needed to link against `libclang-cpp.so`)
  * `textDocument/documentSymbol`: support unopened files #548</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620043200">- Update to version 0.20210330
  * Fix short_name_size when getNameAsString does not return
    a prefix
- Update to version 0.20201219
  * Supports Clang 7~11
  * Support 3.15.0 serverInfo
  * Report index status via $/progress
  * Better recursive .ccls files
  * New initialization option completion.placeholder:
    change client.snippetSupport: false to drop ( and &lt;
  * Infer -target and --driver-mode from argv[0]
  * indexer: log the number of errors and the first diagnostic
  * indexer: set the kind of static data members to Field
    instead of Var
- Fixed gcc dependency for upcoming Leap 15.3</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1654344000">- Port back upstream patches to fix build with LLVM 14:
  * llvm14-refactor-isIdentifierBody.patch
  * llvm14-braced-constructor-call.patch
  * llvm14-include-STLExtras.patch
- Fix build with older LLVMs by setting CLANG_LINK_CLANG_DYLIB=ON
  only for versions &gt;= 9.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1659182400">- Update to version 0.20220729.
- Drop obsolete patches:
  * llvm14-braced-constructor-call.patch
  * llvm14-include-STLExtras.patch
  * llvm14-refactor-isIdentifierBody.patch</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1680177600">- Backport upstream patch llvm16-optional-deprecation.patch to fix
  build with LLVM 16.
- Relax runtime requirements with Clang 16 and newer: the resource
  directory doesn't depend on the patch-level version anymore.
- Relax build requirements.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1696075200">- Backport upstream patch llvm17-precompiled-preamble-build.patch
  to fix build with LLVM 17.
- Remove explicit runtime dependency libclang-cpp* when we don't
  need an exact version, because it will be derived automatically.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1713700800">- Update to version 0.20240202.
  * Compatibility with LLVM 18.
  * Disable -include b.hh =&gt; -include b.hh.{gch,pch} transition.
    See https://maskray.me/blog/2023-07-16-precompiled-headers for
    the behavior.
- Remove obsolete patches:
  * llvm16-optional-deprecation.patch
  * llvm17-precompiled-preamble-build.patch
- Thanks to Björn Bidar for the original patch!</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1727870400">- Update to version 0.20240505.
  * For LLVM 19.</changelog>
</package>
<package pkgid="b0a9567fd9130f879320d21414ea2016795717d6508b5ec53043fc49516cedcd77cce02446c1f9c8788f81243232a0dfb86015076b370322fe9c2a82d972afeb" name="ccze" arch="x86_64">
  <version epoch="0" ver="0.2.1.2" rel="bp160.1.11"/>
  <changelog author="sebix+novell.com@sebix.at" date="1483099200">- first package
- use license-fsf.diff to fix fsf postal address in license texts
- use patches from debian package:
  * 288834_FTBFS_unrecognized_command_line_option_-Wmulticharacter.patch
  * doc___ccze.1.in.patch
  * fix_capitalization_typo.patch
  * fix_passing_LDFLAGS_for_ccze-cssdump.patch
  * src___ccze.c.patch
  * src___ccze-wordcolor.c_positive-numbers.patch
  * src___ccze-wordcolor.c_virus+clean.patch
  * src___mod_syslog.c.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Abandon unnecessary %__-type macro indirections.
  Trim description.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1742558400">- GitHub repository have been removed:
  * switch to upstream's archived repository as homepage.
  * do not download tarball from GitHub
- Add directly patches from Debian that aren't applid already,
  they include PCRE2 porting:
  * fix_passing_LDFLAGS_for_ccze-cssdump.patch
  * fix_capitalization_typo.patch
  * fix-national-encoding.patch
  * cross.patch
  * pcre2.patch
  * memory-leak.patch
  * uninitialised-value.patch
- Switch to PCRE2
- Only run updated tests
- Spec cleanup</changelog>
</package>
<package pkgid="0bf16336684230b32e6b68d08cc24e539e392e210c341440bb3ad6a62dc9dc34417bb4df933e4b82d1eba066701df4e71cbe2d8b3a4e0be5e6a4b5379da457b9" name="ccze-devel" arch="x86_64">
  <version epoch="0" ver="0.2.1.2" rel="bp160.1.11"/>
  <changelog author="sebix+novell.com@sebix.at" date="1483099200">- first package
- use license-fsf.diff to fix fsf postal address in license texts
- use patches from debian package:
  * 288834_FTBFS_unrecognized_command_line_option_-Wmulticharacter.patch
  * doc___ccze.1.in.patch
  * fix_capitalization_typo.patch
  * fix_passing_LDFLAGS_for_ccze-cssdump.patch
  * src___ccze.c.patch
  * src___ccze-wordcolor.c_positive-numbers.patch
  * src___ccze-wordcolor.c_virus+clean.patch
  * src___mod_syslog.c.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Abandon unnecessary %__-type macro indirections.
  Trim description.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Ana Guerrero &lt;ana.guerrero@suse.com&gt;" date="1742558400">- GitHub repository have been removed:
  * switch to upstream's archived repository as homepage.
  * do not download tarball from GitHub
- Add directly patches from Debian that aren't applid already,
  they include PCRE2 porting:
  * fix_passing_LDFLAGS_for_ccze-cssdump.patch
  * fix_capitalization_typo.patch
  * fix-national-encoding.patch
  * cross.patch
  * pcre2.patch
  * memory-leak.patch
  * uninitialised-value.patch
- Switch to PCRE2
- Only run updated tests
- Spec cleanup</changelog>
</package>
<package pkgid="f2d4417c9cb72dec24a33f2d0548cbcef92d9b9b26d6397fa2f0e78967ddb507ede18b86045e48726514d34894f1308111a02fd9d85ce17ab5ef76382e86fba6" name="cd-discid" arch="x86_64">
  <version epoch="0" ver="1.4" rel="bp160.1.12"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Initial release (version 1.4)</changelog>
</package>
<package pkgid="eac03638bd75a164ec6a6b88083823c21d58c64bc5dbae1798c0d90ba81f6322ba5be02fe51b88893dcb18f326722ec3f7e0f08a6aa105c11aa288edfce6745d" name="cd-paranoia" arch="x86_64">
  <version epoch="0" ver="10.2+2.0.1" rel="160000.3.2"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Created libcdio-paranoia which used to be part of the libcdio
  package. see bnc#756564.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to version 10.2+0.90
  * First stable version
- Add libcdio-paranoia-10.2+0.90-include_path.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 10.2+0.93+1
  * Add cdio_cddap_free_messages function
  * Start using Coverty Static analysis
  * Update OS versions we recognize
  * Upgrade libcdio-paranoia to paranoia version 10.2
  * Bug fixes on MS Windows and other bug fixes
  * Redo license so everything is GPL3
- Fix license tag; now released under GPL-3.0
- Remove libcdio-paranoia-10.2+0.90-include_path.patch; fixed on
  upstream
- Bump sonum to 2</changelog>
  <changelog author="olaf@aepfle.de" date="1423224000">- Include all detected libs in pkg-config --libs output
  to fix build of ffmpeg in SLE_11
  libcdio-paranoia.libcdio_cddda-libs.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Fix baselibs.conf: with the update to 10.2+0.93+1, the sonum was
  bumped to 2, but baselibs was forgotten.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
  <changelog author="kbabioch@suse.de" date="1548676800">- version 10.2+2.0.0 (2019-01-26)
  * Now works with audio CD's that start on a track greater than 1.
  * typos in manual page and README
  * Do not attempt to call a NULL callback from mskamp
- version 10.2+0.94+2 (2017-08-22)
  * Add --force-overread
    Force overreading into the lead-out portion of the disc. This option
    is only applicable when using the "-O" option with a positive sample
    offset value. Many drives are not capable of reading into this
    portion of the disc and attempting to do so on those drives will
    produce read errors and possibly hard lockups
- version 10.2+0.94+1 (2017-03-25)
  * Fix problem where end of span seems to default to last track.
  * Fix NULL pointer dereference that occurs when byte swapping is needed.
  * Re-silence recently added gcc -Wunused-result warnings
  * Use @LIBS@ figured out by autoconf when linking (for -lrt on Linux).
  * Incorrect track was getting used in matching.
- Added sig file along with keyring for source verification
- Make use of %license macro
- Adopted for change of README to README.md</changelog>
  <changelog author="jengelh@inai.de" date="1624017600">- Drop --with-pic (no effect with --disable-static)
- Trim old rpm macros/constructs
- Update descriptions</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625659200">- version 10.2+2.0.1 (2019-09-16)
  * cdda toc routines now included
  * "make distcheck" broken in 2.0.0 works properly again
  * Remove some gcc/clang warnings
- Use %find_lang
- Use correct License</changelog>
</package>
<package pkgid="aa285eb87b4a1bafa65cc37af7c1853e9f65d5070f5d4a16947c8a819f47f2ec68029de5935c0afb843c91562e35e500c00b970fb84cce72760c0ed253600dac" name="cdda2wav" arch="x86_64">
  <version epoch="0" ver="3.02~a10" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="89f8b3dbd3937dc4e0241a827e9c8f1008542033e01f5646da2c0ec7e0d911c8cd6e55cb1bb9e9b4ff0abfd20363b9cc97e905eba4a12f441df10132f96dbca4" name="cddlib-devel" arch="x86_64">
  <version epoch="0" ver="0.94m" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1413028800">- Use source URLs</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 0.94h
  * One unspecified minor bugfix</changelog>
  <changelog author="jengelh@inai.de" date="1467633600">- Update cddlib-automake.diff to add -no-undefined</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update homepage URL</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Switch include directory to /usr/include/cdd as that seems to be
  expected by downstream programs (like gfan).</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Update to new upstream release 0.94i
  * The missing definition of dd_set_d function (in the
  - DGMPRATIONAL case) was added.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540036800">- Update to new upstream release 0.94j
  * Introduced cddexec as a replacement of cdd_both_reps that many
    distributions packaged.
- Remove cddlib-flags.diff, cddlib-automake.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Update to release 0.94k
  * Header files are now installed to PREFIX/include/cddlib to
    avoid clashes with other libraries.
  * pkg-config cddlib.pc file added.
- Add 0001-build-extend-extern-C-block-in-header-files.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Update to release 0.94l
  * Merged 0001-build-extend-extern-C-block-in-header-files.patch
- Split command-line programs to new package cddlib-tools.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1607428800">- Update to release 0.94m
  * Fix and error, where a non-redundant linearity could be
    considered redundant.
  * Fix an optimization error in ViaShooting code so that the linear
    programs are now much smaller.
  * Fixed memory leaks in the redundancy code.</changelog>
</package>
<package pkgid="844ea8678c99693077e006174164ab93d6275b502905c1ff3ce79544329861a839cc8d23357576e79a3269722acbf61d9003c71e2bc43111e498f245e2d08b8d" name="cddlib-devel" arch="x86_64">
  <version epoch="0" ver="0.94n" rel="bp160.1.1"/>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 0.94h
  * One unspecified minor bugfix</changelog>
  <changelog author="jengelh@inai.de" date="1467633600">- Update cddlib-automake.diff to add -no-undefined</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update homepage URL</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Switch include directory to /usr/include/cdd as that seems to be
  expected by downstream programs (like gfan).</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Update to new upstream release 0.94i
  * The missing definition of dd_set_d function (in the
  - DGMPRATIONAL case) was added.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540036800">- Update to new upstream release 0.94j
  * Introduced cddexec as a replacement of cdd_both_reps that many
    distributions packaged.
- Remove cddlib-flags.diff, cddlib-automake.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Update to release 0.94k
  * Header files are now installed to PREFIX/include/cddlib to
    avoid clashes with other libraries.
  * pkg-config cddlib.pc file added.
- Add 0001-build-extend-extern-C-block-in-header-files.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Update to release 0.94l
  * Merged 0001-build-extend-extern-C-block-in-header-files.patch
- Split command-line programs to new package cddlib-tools.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1607428800">- Update to release 0.94m
  * Fix and error, where a non-redundant linearity could be
    considered redundant.
  * Fix an optimization error in ViaShooting code so that the linear
    programs are now much smaller.
  * Fixed memory leaks in the redundancy code.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1757592000">- Update to release 0.94n
  * Fixed a potential dd_MatrixCanonicalize segfault.
  * cddlib.pc file now points to the non-GMP version, and
    cddgmp.pc has been added for the GMP version.
  * Copy certificate and handle errors correctly in dd_SRedundant
    for the V-representation code path.
  * cddlib is now thread-safe.</changelog>
</package>
<package pkgid="972b20061af10bdef9a468410ea6bcf92ce22abd7c75077e401e12040184e7f98c6ca7b5c268b50e443ceeddb2548d877440a44196ee70f243821faf0ac64b32" name="cddlib-doc" arch="noarch">
  <version epoch="0" ver="0.94m" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1413028800">- Use source URLs</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 0.94h
  * One unspecified minor bugfix</changelog>
  <changelog author="jengelh@inai.de" date="1467633600">- Update cddlib-automake.diff to add -no-undefined</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update homepage URL</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Switch include directory to /usr/include/cdd as that seems to be
  expected by downstream programs (like gfan).</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Update to new upstream release 0.94i
  * The missing definition of dd_set_d function (in the
  - DGMPRATIONAL case) was added.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540036800">- Update to new upstream release 0.94j
  * Introduced cddexec as a replacement of cdd_both_reps that many
    distributions packaged.
- Remove cddlib-flags.diff, cddlib-automake.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Update to release 0.94k
  * Header files are now installed to PREFIX/include/cddlib to
    avoid clashes with other libraries.
  * pkg-config cddlib.pc file added.
- Add 0001-build-extend-extern-C-block-in-header-files.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Update to release 0.94l
  * Merged 0001-build-extend-extern-C-block-in-header-files.patch
- Split command-line programs to new package cddlib-tools.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1607428800">- Update to release 0.94m
  * Fix and error, where a non-redundant linearity could be
    considered redundant.
  * Fix an optimization error in ViaShooting code so that the linear
    programs are now much smaller.
  * Fixed memory leaks in the redundancy code.</changelog>
</package>
<package pkgid="9dd1deaff08ef4cf030af27bc7498bbca2b930af9921a395e4cb8e2f57f6f3f5c7b9219511a1f7fff42934ec7b599287accb922c1e44d777fa570038fbf31778" name="cddlib-doc" arch="noarch">
  <version epoch="0" ver="0.94n" rel="bp160.1.1"/>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 0.94h
  * One unspecified minor bugfix</changelog>
  <changelog author="jengelh@inai.de" date="1467633600">- Update cddlib-automake.diff to add -no-undefined</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update homepage URL</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Switch include directory to /usr/include/cdd as that seems to be
  expected by downstream programs (like gfan).</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Update to new upstream release 0.94i
  * The missing definition of dd_set_d function (in the
  - DGMPRATIONAL case) was added.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540036800">- Update to new upstream release 0.94j
  * Introduced cddexec as a replacement of cdd_both_reps that many
    distributions packaged.
- Remove cddlib-flags.diff, cddlib-automake.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Update to release 0.94k
  * Header files are now installed to PREFIX/include/cddlib to
    avoid clashes with other libraries.
  * pkg-config cddlib.pc file added.
- Add 0001-build-extend-extern-C-block-in-header-files.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Update to release 0.94l
  * Merged 0001-build-extend-extern-C-block-in-header-files.patch
- Split command-line programs to new package cddlib-tools.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1607428800">- Update to release 0.94m
  * Fix and error, where a non-redundant linearity could be
    considered redundant.
  * Fix an optimization error in ViaShooting code so that the linear
    programs are now much smaller.
  * Fixed memory leaks in the redundancy code.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1757592000">- Update to release 0.94n
  * Fixed a potential dd_MatrixCanonicalize segfault.
  * cddlib.pc file now points to the non-GMP version, and
    cddgmp.pc has been added for the GMP version.
  * Copy certificate and handle errors correctly in dd_SRedundant
    for the V-representation code path.
  * cddlib is now thread-safe.</changelog>
</package>
<package pkgid="e7077ea785d05671753aed34c05c3de577b2eaf90194654179d2e74bee57a02b04782da12210c62a10c8bcb69afebc9b7fd428ef0b252dd2d96b5b11fa0b510e" name="cddlib-tools" arch="x86_64">
  <version epoch="0" ver="0.94m" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1413028800">- Use source URLs</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 0.94h
  * One unspecified minor bugfix</changelog>
  <changelog author="jengelh@inai.de" date="1467633600">- Update cddlib-automake.diff to add -no-undefined</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update homepage URL</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Switch include directory to /usr/include/cdd as that seems to be
  expected by downstream programs (like gfan).</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Update to new upstream release 0.94i
  * The missing definition of dd_set_d function (in the
  - DGMPRATIONAL case) was added.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540036800">- Update to new upstream release 0.94j
  * Introduced cddexec as a replacement of cdd_both_reps that many
    distributions packaged.
- Remove cddlib-flags.diff, cddlib-automake.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Update to release 0.94k
  * Header files are now installed to PREFIX/include/cddlib to
    avoid clashes with other libraries.
  * pkg-config cddlib.pc file added.
- Add 0001-build-extend-extern-C-block-in-header-files.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Update to release 0.94l
  * Merged 0001-build-extend-extern-C-block-in-header-files.patch
- Split command-line programs to new package cddlib-tools.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1607428800">- Update to release 0.94m
  * Fix and error, where a non-redundant linearity could be
    considered redundant.
  * Fix an optimization error in ViaShooting code so that the linear
    programs are now much smaller.
  * Fixed memory leaks in the redundancy code.</changelog>
</package>
<package pkgid="8a9680ec208c3d93a1655bb84c34ac9656d731b4f2cac33708dbc93b319b91f31a88693f26c4ce4af457a2a5857a953b8e19a028b12f2bcef73a8edf3d544ff0" name="cddlib-tools" arch="x86_64">
  <version epoch="0" ver="0.94n" rel="bp160.1.1"/>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 0.94h
  * One unspecified minor bugfix</changelog>
  <changelog author="jengelh@inai.de" date="1467633600">- Update cddlib-automake.diff to add -no-undefined</changelog>
  <changelog author="jengelh@inai.de" date="1487592000">- Update homepage URL</changelog>
  <changelog author="jengelh@inai.de" date="1514203200">- Switch include directory to /usr/include/cdd as that seems to be
  expected by downstream programs (like gfan).</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Update to new upstream release 0.94i
  * The missing definition of dd_set_d function (in the
  - DGMPRATIONAL case) was added.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540036800">- Update to new upstream release 0.94j
  * Introduced cddexec as a replacement of cdd_both_reps that many
    distributions packaged.
- Remove cddlib-flags.diff, cddlib-automake.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Update to release 0.94k
  * Header files are now installed to PREFIX/include/cddlib to
    avoid clashes with other libraries.
  * pkg-config cddlib.pc file added.
- Add 0001-build-extend-extern-C-block-in-header-files.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Update to release 0.94l
  * Merged 0001-build-extend-extern-C-block-in-header-files.patch
- Split command-line programs to new package cddlib-tools.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1607428800">- Update to release 0.94m
  * Fix and error, where a non-redundant linearity could be
    considered redundant.
  * Fix an optimization error in ViaShooting code so that the linear
    programs are now much smaller.
  * Fixed memory leaks in the redundancy code.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1757592000">- Update to release 0.94n
  * Fixed a potential dd_MatrixCanonicalize segfault.
  * cddlib.pc file now points to the non-GMP version, and
    cddgmp.pc has been added for the GMP version.
  * Copy certificate and handle errors correctly in dd_SRedundant
    for the V-representation code path.
  * cddlib is now thread-safe.</changelog>
</package>
<package pkgid="7c019cb9e05863e858d42d5fe2ff9fc1f7bb804f20980a7bd5127dc19d239b22200f540fea836b2199932638ef9dd8c1b5e9d27cb5197aa8e2d20b3b2a8a76fc" name="cdecl" arch="x86_64">
  <version epoch="0" ver="18.4" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1706616000">- Update to release 16.2
  * Partial typeof support</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1713268800">- Update to release 16.3
  * Better destructor parameter error message
  * Support for defining a type more than once
  * Support for multiple conflicting declarations</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716897600">- Update to release 16.4.1
  * Echoing commands short option
  * Improved error messages for predefined types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718280000">- Update to release 17.0
  * Support abbreviated function template parameter packs
  * Added ``help`` option suggestions
  * Support ``auto`` parameters in typedefs
  * Recognize structured binding declarations</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718712000">- Update to release 17.0.1
  * Functions returning parameter packs is now correctly illegal.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720267200">- Update to release 18
  * Allowing blocks &amp; user-defined literals in multi-declarations
  * cast &amp; declare command executable name support
  * New --lineno, -L option</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721476800">- Update to release 18.1
  * Alignments can now have names to denote the number of bytes.
  * In C89, implicit int is now warned about in more cases.
  * To match gibberish output, K&amp;R C typeless parameters now print
    ``as integer`` in pseudo-English.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1722427200">- Update to release 18.2
  * Unknown names are now always permitted as types in
    pseudo-English. Hence, the --permissive-types option now only
    additionally allows keywords in language versions other than
    the current language as types.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1723723200">- Update to release 18.3
  * Autocompletion for `set no-&lt;TAB&gt;`
  * Enhancements for preprocessor __VA macros</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1725364800">- Update to release 18.4
  * Initial support for C++26 has been added, specifically =
    delete("reason") is now supported.
  * Support placemarkers for empty macro argument.</changelog>
</package>
<package pkgid="aaf719bda1c00e35aaf3d0efb6bd4236ff36dafacc61a2b6d54c6f0fed854a17796a5f9ad51cf1b870ec003a3ed8b0803c6db4fee3a24eab4780ea5f5a1e8208" name="cdemu-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="lp160.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1562155200">- Update to new upstream release 3.2.1
  * Added initial support for BluRay profile
  * Added initial support for BluRay writing
  * Extended READ DISC STRUCTURE for BluRay support
  * Moved the fabrication of disc structures from libMirage
    to cdemu-daemon.
  * Implemented READ DISC STRUCTURE format 0xFF (list of
    supported structures).
  * Removed the "dvd-report-css" flag as parser parameter and
    implemented it as device option.
  * Improved GET PERFORMANCE implementation: better argument
    checking, updated descriptors, and added BluRay support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1571918400">- Update to release 3.2.3
  * Updated the list of MMC commands that interrupt audio play.</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1588334400">- Update to release 3.2.4
  * Updated the list of commands that interrupt audio play.
  * Generate device serial number using global device number
    instead of local one.
  * Delay emulation: removed the use of deprecated GTimeVal.
  * Tweak default device identifier in standard INQUIRY response.
  * Implemented INQUIRY EVPD 0x83 page.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1618920000">- Update to release 3.2.5
  * Updated ISRC validation to match crdao documentation.
  * Remove bundled DBus activation scripts.
- Remove logfile.diff (no longer applicable)</changelog>
  <changelog author="Yaroslav Kurlaev &lt;yaroslav.kurlaev@gmail.com&gt;" date="1630238400">- Add systemd and D-Bus .service files
- Fix .spec file warning</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644062400">- Update to release 3.2.6
  * No user visible changes, just packaging-related.</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt;" date="1709035200">- Fix cdemu-daemon startup failing for regular users due to not
  being able to trigger the load of the vhba kernel module.
  (boo#958517)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1710158400">- Revert Feb 27 addition of static_node; this does not seemingly
  do anything.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1710417600">- Add an explanation to the use of static_node</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1723982400">- Update to release 3.2.7
  * ``READ SUBCHANNEL`` command fixes
  * Implement ``SEEK`` command
  * Adjust error codes returned by read commands</changelog>
</package>
<package pkgid="4cc38b5d84b623649c5db2d7b05a34f4a25e8da2fe6f67700adedefc42ab1c464c53ec82870b7c23d6cfb2c5514f504780e125a87f0cfca2bdaa69f6f77e8c33" name="cdi-api" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1553688000">- Initial packaging of cdi-api 1.2
- Generate and customize the ant build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1553688001">- Replace summary by something that speaks more than two
  acronyms.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Generate the tarball and pack only the api part, to avoid
  distributing non-distribuable content</changelog>
  <changelog author="jengelh@inai.de" date="1554552000">- Use _service instead of custom create-tarball.sh.
- Avoid double-shipping license file.</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1649073600">- Update to upsteam release 2.0.2
  * No changelog was made available.
- Added patch:
  * 0001-Remove-dependency-on-glassfish-el.patch
    + patch out the two el wrapper functions that are unused</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1717761600">- Use the javax.inject artifact</changelog>
</package>
<package pkgid="5c5780b9dba5c3b0c795b58e7a565a3721bd0d6a17ae8d94b62a56936f6d091ef5a71aa13fa3661e81939e41273999df120ab36aa10ed7e832d8c6483e63a1b7" name="cdi-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1553688000">- Initial packaging of cdi-api 1.2
- Generate and customize the ant build.xml file</changelog>
  <changelog author="jengelh@inai.de" date="1553688001">- Replace summary by something that speaks more than two
  acronyms.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Generate the tarball and pack only the api part, to avoid
  distributing non-distribuable content</changelog>
  <changelog author="jengelh@inai.de" date="1554552000">- Use _service instead of custom create-tarball.sh.
- Avoid double-shipping license file.</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1649073600">- Update to upsteam release 2.0.2
  * No changelog was made available.
- Added patch:
  * 0001-Remove-dependency-on-glassfish-el.patch
    + patch out the two el wrapper functions that are unused</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1717761600">- Use the javax.inject artifact</changelog>
</package>
<package pkgid="578eef633bc20fa8ef4fa15a1f9c1d47e1c055c2be5148ccba4bb6f5d1a1afdd8bae52a9a5101073503f372aef1dc42ce3d13b8e5641c4d74e931adb1ceac6a7" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="160000.2.2"/>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="kbabioch@suse.com" date="1528718400">- Update to version 2.0.0
  - Fixed several memory leaks
- Applied spec-cleaner
- Require newer vcdimager</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="4790e06420fcb2cf8fb1b2253ce4c4e7368aa611d551cb33ddc6baac2cccfadd713be672e9d936ea23d7417bd6190add5de96a4353ad857ace42767bafdd824c" name="cdk-devel" arch="x86_64">
  <version epoch="0" ver="5.0.20230201" rel="bp160.1.13"/>
  <changelog author="meissner@suse.com" date="1419854400">- fixed url, added .asc and keyring</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 5.0.20150928
  * build ".deb" test-package with ncurses6, using versioned symbols.
  * modifications from ncurses/xterm to allow alternate to /bin/sh for
    configure-shell, while dropping support for non-POSIX shell such
    as Solaris.
  * updated/integrated changes for versioned symbols from ncurses6.
  * CF_DISABLE_LIBTOOL_VERSION when using -version-info (the native
    libtool mode), get the ABI_VERSION value from $VERSION (which comes
    from CF_VERSION_INFO)
  * CF_ADD_INCDIR fix an infinite loop when the include-directory to be
    added does not exist (bdo#786436)
  * CF_WITH_NCURSES_ETC add --with-screen option
  * CF_SUBDIR_PATH change this to a loop, adding /usr/pkg (NetBSD) and
    /opt/local (Mac OSX)
  * update config.guess, config.sub</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550836800">- Update to version 5.0.20190220
  * 2019/02/20
    + updated rpm spec-file, for test-builds.
    + added pkgsrc files, for test-builds.
    + updated FreeBSD port-files, for test-builds.
    + add getCdkTitle, which uses new display encoding "&lt;#10&gt;" for newline
    in the example which demonstrates it, mentry_ex2 (prompted by
    discussion with Stéphane Goujet).
    + fix similar memory leaks in setCDKRadioItems and setCDKSelectionItems
    + fix memory leak in setCDKScrollItems (report by Stéphane Goujet).
    + make functionKey parameter to getchCDKObject optional
    (suggested by Stéphane Goujet).
    + modify test-packages to adjust includes in cdk.h when using test
    package for ncurses6 which would confuse test-package for cdk-perl.
    + change shlib-version in test-package to "abi", for better
    compatibility with the test-package for cdk-perl.
    + add manpage for cdk5-config
    + documentation improvements (report by Stéphane Goujet).
    + add check in drawCDKScrollCurrent() in case the list is not
    initialized (report by Stéphane Goujet).
    + modify writeCharAttrib to replace the color in the target cell rather
    than OR'ing it from the source-attribute (patch by Aarian P. Aleahmad)
    + add a null-pointer check in viewer.c's PatternNotFound() function
    (report by "c").
    + improve macros/markup in manpages.
    + updated configure macros, from lynx and ncurses development:
    CF_ADD_INCDIR, CF_CC_ENV_FLAGS, CF_CURSES_CPPFLAGS, CF_CURSES_LIBS,
    CF_FIND_LINKAGE, CF_GCC_WARNINGS, CF_GNU_SOURCE, CF_LD_RPATH_OPT,
    CF_NCURSES_CONFIG, CF_PDCURSES_X11, CF_POSIX_C_SOURCE, CF_PROG_EXT,
    CF_SHARED_OPTS, CF_TRY_XOPEN_SOURCE, CF_WITH_VERSIONED_SYMS,
    CF_XOPEN_CURSES, CF_XOPEN_SOURCE, CF_X_ATHENA_CPPFLAGS
    + update config.guess, config.sub
  * 2018/03/06
    + update versioned-symbol list for reRegisterCDKObject (prompted by
    Debian #892114, which adopted a different set of symbol versions
    such as "5.0.20161120", cf: 2014/11/06).
    + updated configure macros, from lynx development:  CF_CURSES_FUNCS,
    CF_CURSES_LIBS, CF_MAKEFLAGS, CF_NCURSES_CONFIG, CF_SHARED_OPTS
    + update config.guess, config.sub
  * 2017/12/09
    + updated ftp url in test-packages, etc.
    + updated configure macros CF_CC_ENV_FLAGS, CF_SHARED_OPTS
    + update config.guess, config.sub
  * 2017/09/18
    + updated configure macros:
    + CF_ADD_CFLAGS improve formatting of generated lists using
    CF_APPEND_TEXT
    + CF_CC_ENV_FLAGS - two changes
    a) revise the expression generating $cf_flags to actually work when
    there is more than one option.
    b) correct the parameter passed to CF_ADD_CFLAGS, which was the
    whole list rather than the current parameter.
    + CF_CURSES_LIBS reorganize to handle the case where initscr is a
    macro.
    + CF_NCURSES_CONFIG add check for term.h when using pkg-config
    + CF_NCURSES_VERSION use prototype for main
    + CF_SHARED_OPTS workaround for PGI compiler
    + CF_WITH_LIBTOOL use SIGQUIT(3) rather than SIGTRAP(5) in trap
    commands.  Fix a few places in configure/build scripts where
    DESTDIR and rpath were combined.
    + update config.guess, config.sub
  * 2016/12/10
    + improve formatting of manpages, using bullets
    + add -C and -R options to matrix_ex.c to exercise the col/row spacing
    features of matrix widget.
    + modify matrix widget to highlight the current cell for the cases
    when col/row spacing are greater than zero.
  * 2016/12/04
    + cleanup change for color pairs in 2016/11/20
    + modify initCDKScreen() to simplify initialization of curses by
    calling initscr() in this function after initializing the locale.
    That fixes a problem using PuTTY with CDK when built using ncurses
    (report by Marc Smith).
  * 2016/11/20
    + fix warnings from cppcheck 1.76.1
    + updated configure macros:
    + CF_CC_ENV_FLAGS don't limit the check to -I, -U and -D options,
    since the added options can include various compiler options before
    and after preprocessor options.
    + CF_GNU_SOURCE recent glibc (Debian 2.23-4 for example) has
    misordered ifdef/checks for new symbol _DEFAULT_SOURCE, producing
    warning messages when only _GNU_SOURCE is defined.  Add a followup
    check to define _DEFAULT_SOURCE.
    + CF_LD_RPATH_OPT change FreeBSD to use -Wl,-rpath rather than -rpath
    option.  According to FreeBSD #178732, either works since FreeBSD
    4.x; however scons does not accept anything except the -Wl,-rpath
    form.
    + CF_PROG_LINT add cpplint to programs to use; drop ad hoc tdlint and
    alint.
    + CF_WITH_NCURSES_ETC add check for ncurses pthreads
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's and use
    _GNU_SOURCE for cygwin headers, tested with cygwin 2.3, 2.5
    + CF__ADD_SHLIB_RULES improve scripting for ldconfig to avoid warning
    messages if no permissions
    + update config.guess, config.sub
    &gt; patches by Aarian P. Aleahmad:
    + modify encodeAttribute() to allow up to 256 color pairs.
    + corrected assignment in scroller_SetPosition(), to show highlighted
    member.
    + improve the way attributes are applied to Mentry widgets.
    + improve Entry widget by using newwin rather than subwin, as well
    as passing arguments to callback function.
  * 2016/11/19
    + add reRegisterCDKObject()
  * 2016/01/31
    + fix a few of the lintian errors in package/debian
    + fix some too-wide tables in manpages, which caused Debian lintian
    errors.
    + take lower-limit's formatted length into account in slider, etc.,
    (patch by Guido Meusch).
    + make similar repainting-fixes for radio.c and marquee.c
    + fix repainting of Scroll widget when it has no box-outline
    (patch by Manuel Schmitz).
    + add highlight and callbackData members to CDKBUTTON, as well as
    macros for setting/getting the highlight value.  Use the highlight to
    override the default A_REVERSE used in CDK button (patch by Aarian P.
    Aleahmad).
    + fix two bugs in template.c (patch by Aarian P. Aleahmad):
    + in cleanCDKTemplate, fill all of the info string with nulls
    + in setCDKTemplateValue, call cleanCDKTemplate whether or not
    the pointer for newValue passed by the caller was a null.
    + updated configure macros:
    + CF_LIB_PREFIX, CF_WITH_LIBTOOL, and CF_XOPEN_SOURCE, build-fixes
    for OS/2
    + CF_XOPEN_CURSES, improve check, making it define NCURSES_WIDECHAR
    if we happen to be building on a platform (such as OSX) where we do
    not define _XOPEN_SOURCE or _XOPEN_SOURCE_EXTENDED
    + CF_WITH_VERSIONED_SYMS, avoid ncurses build error on ppc64
    architecture the nm tool is reporting _is_missing in Data section
    for ppc64 (by comparison ppc64le is reporting it in Text section)
    + update config.guess, config.sub
  * 2015/09/28
    + build ".deb" test-package with ncurses6, using versioned symbols.
    + updated configure macros:
    + modifications from ncurses/xterm to allow alternate to /bin/sh for
    configure-shell, while dropping support for non-POSIX shell such
    as Solaris.
    + updated/integrated changes for versioned symbols from ncurses6.
    + CF_DISABLE_LIBTOOL_VERSION when using -version-info (the native
    libtool mode), get the ABI_VERSION value from $VERSION (which comes
    from CF_VERSION_INFO)
    + CF_ADD_INCDIR fix an infinite loop when the include-directory to be
    added does not exist (Debian #786436)
    + CF_WITH_NCURSES_ETC add --with-screen option
    + CF_SUBDIR_PATH change this to a loop, adding /usr/pkg (NetBSD) and
    /opt/local (Mac OSX)
    + update config.guess, config.sub
  * 2015/01/03
    + modify cdk-config.in to work with systems where libdir is /usr/lib64
    (patch by Peter Hyman).
    + corrected example for cdk_display.3 manpage (patch by Loïc
    work in non-POSIX locales (report by Mart Stöör).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1551182400">- Update to version 5.0.20190224
  + use HDR_ROOTNAME rather than PACKAGE in top-level makefile, to
    simplify building cdk and cdkw packages with non-conflicting paths.
  + add "check" rule to top-level makefile, for testing Arch Linux
    package.
  + modify test-package for RPMs to work with SUSE and Mageia.
- Enable wide version of libcdk(w)
- Enable ABI soname of the shared libraries
  + Somehow strange ABI 6.2.4 but RELEASE version is still 5.0</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1551268800">- Remove debugging code from spec file</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1551787200">- Update to version 5.0.20190303
  + deprecate installCDKLibrary rule by install.libs, which is used in
    the newer shared-library macros.
  + conditionally-comment action lines for the part of install-rules
    which conflict with the newer shared-library rules (report by Tom
    Brownridge).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620043200">- Update to version 5.0.20210324
  * Spelling fixes, per codespell
  * Updated build system</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650974400">- Resolve rpmlint report "libcdk5.x86_64: E:
  shlib-policy-name-error SONAME: libcdk.so.6.2.4, expected
  package suffix: 6_2_4"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1687521600">- Update to version 5.0.20230201
  + improve compiler-warnings in configure-checks.
  + change library dependencies in rpm spec-file.
  + update license in test-packages.
  + relicense as MIT-X11
  + reduce shellcheck warnings in support-scripts
  + updated configure script to work around regression in GNU grep 3.8
  + updated configure macros from xterm and ncurses development
  + update config.guess, config.sub
  + fix cppcheck style-warnings.
  + improve makefile header-dependencies by accounting for all generated
    headers (report/patch by Sergei Trofimovich).
  + updated configure macros from xterm and ncurses development:
    CF_ADD_INCDIR CF_APPEND_CFLAGS CF_DISABLE_ECHO CF_MAKEFLAGS
    CF_NCURSES_CONFIG CF_NCURSES_LIBS CF_PKG_CONFIG CF_REMOVE_CFLAGS
    CF_SHARED_OPTS CF_TRY_XOPEN_SOURCE CF_XOPEN_SOURCE
  + build-fix for HP-UX curses, which provides only part of the ACS_xxx
    definitions compatible with chtype's.
  + correct calls on SetViewSize in scroll.c, overlooked in 2005/04/24
    (report by Brad Hines).
  + updated configure macros from xterm and ncurses development:
    CF_C11_NORETURN CF_CHECK_LIBTOOL_VERSION CF_CONST_X_STRING
    CF_DISABLE_LEAKS CF_FUNC_LSTAT CF_GETOPT_HEADER CF_NCURSES_CONFIG
    CF_NO_LEAKS_OPTION CF_SHARED_OPTS CF_UTF8_LIB CF_XOPEN_CURSES
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
  + updated configure script, for _Noreturn and exit_curses checks.
  + spelling fixes, per codespell.
  + updated configure script, for quoting/escaping fixes
  + update config.guess, config.sub
  + updated configure script, for compiler-warnings
  + update config.guess, config.sub
  + updated configure script, to work around ncurses 6.2 vs xcode's c99
    "-W" option.
  + update config.guess, config.sub
  + fix issues found with check-manpage
  + updated configure macros, from xterm and ncurses development:
    CF_ADD_LIBS CF_GCC_VERSION CF_GCC_WARNINGS CF_PROG_CC CF_PROG_LINT
    CF_X_TOOLKIT
  + update config.guess, config.sub</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1687521601">- Let libcdk6_3_4 conflict with older libcdk6_2_4</changelog>
</package>
<package pkgid="9a749a275ec64be8c38b49bae38422d44adb61057918ba03d9c758da0af8ae86a32c15691f2a7e9ea2d808fdb19fdfb274f47cf75a4514b080e94870aad47877" name="cdparanoia" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="f92fc82d004eff9b316a245f5ff1508364a2920db57019bc4a26565dc67397b8e143e38d28878689762e3e66803b33700fbafe7736ff9d96e830a29b89745436" name="cdparanoia-devel" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
  <changelog author="schwab@suse.de" date="1523966400">- config-guess-sub-update.diff: update for RISC-V support</changelog>
  <changelog author="adam.majer@suse.de" date="1524052800">- Adjust licenses to be installed with %license not %doc
- libraries are covered by LGPL-2.1-or-greater and the command-line
  tool is GPL-2.0-or-greater</changelog>
  <changelog author="tchvatal@suse.com" date="1524052801">- Do not bother to talk about it being beta release as we
  are shipping this since 2008</changelog>
  <changelog author="jengelh@inai.de" date="1524052802">- Update descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e4515dd935dc4af91d1a5343ca0e470fbb2d098aba4ff49c82d7ec2b465cac982ce4ca79dbf514a249da7a1db5bdde37d1df5c3108baebdced16bafe964a379d" name="cdrdao" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="bp160.1.13"/>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1315051200">- update to 1.2.3:
  * By default, cdrdao tries to build with a native SCSI interface.
  * Complete rewrite of native Linux SG driver.
  * Added support for new FIRST_TRACK_NO keyword to allow a CD to start with a
    track number other than 1.
  * Added native interfaces for Irix, Mac OSX and NetBSD.
  * Fixed old pregap length off-by-one error, see bug #604751.
  * Fixed bug in Toc file parser track length computation.
  * Man page typo fixes.
  * Cygwin compilation fixes. Other various compilation warning fixes.
  * Some scsilib fixes for FreeBSD, 32-bit and 64-bit SPARC.
  * Some makefile changes to avoid conflict with installed system libs.
  * Added patch to fix ARM and MIPS scsilib compile.
  * Added man pages for toc2cue and toc2cddb, from Debian.
  * Move privilege drop earlier in main flow.
  * Commited Gentoo patch for CD-TEXT track check fix.
  GCDMaster changes:
  * Preferences now stored in GConf, exports schema file.
  * Added simple Preferences dialog to change temporary file directory.
  * Fixed GCC 4.3 compilation issues.
- Spec file updates:
  * Changed License: to GPL-2.0+.
  * Added description for the patches based on openSUSE Patches Guidelines.
  * Added gtkmm2-devel, libsigc++2-devel, pkg-config in BuildRequires:.
  * Removed wodim-devel from BuildRequires: (the package now uses a native SCSI
    interface).
  * Added mimeinfo scriptlet for the mime file installed by the package.
  * Minor other updates.
- Rebased cdrdao-build.patch, cdrdao-1.2.2-scan.patch and cdrdao-fixes.patch to
  apply cleanly.
- Removed cdrdao-1.2.2-include.patch, cdrdao-1.2.2-sigc.patch and
  cdrdao-1.2.2-libnsl.patch (fixed upstream).
- Removed cdrdao-1.2.2-usal.patch (the package now uses a native SCSI
  interface).
- Added cdrdao-1.2.3-stat.patch (taken from Fedora) to fix missing includes
  that cause failure build.
- Added cdrdao-1.2.2-desktop.patch (taken from Fedora) to make the desktop file
  XDG compatible and add MimeType entries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1366113600">- Drop gcdmaster: gcdmaster depends on no longer maintained GUI
  libraries from GNOME 2.
  + Obsolete gcdmaster from cdrdao.
  + Drop gtkmm2-devel, libgnomeuimm-devel and update-desktop-files
    BuildRequires: they were only needed for gcdmaster.
  + Drop cdrdao-1.2.2-desktop.patch: we won't install the .desktop
    file, so we don't need to fix it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Add cdrdao-gcc6-fixes.patch: Fix build with gcc6.</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for lame and mad</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1556107200">- Run autoreconf to fix build with LTO (bsc#1133112)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Use noun phrase in summary.
- Remove redundant %clean section.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567166400">- Add cdrdao-drop-gconf-dep.patch: Drop dependency on gconf2.
  Patch taken from debian.
- Following the above, drop gconf2-devel BuildRequires.
- Refresh patches with quilt.
- Run spec-cleaner, use modern macros.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585915200">- Update to version 1.2.4:
  * Fixed autocon warnings (Denis Leroy)
  * Ported to lame 3.100 (from Fedora)
  * G++ compile fixes (Nick Bailey)
  * Renamed xdao folder to gcdmaster (Denis Leroy)
  * pccts format security patch (from Fedora)
  * Fixed compile issues with glibc &gt;= 2.12
  * Gcdmaster segfault fix (Adrian Knoth)
  * Prevent a FTBFS on kfreebsd (Christoph Egger)
  * Also look in /etc/default/cdrdao config (Andrew Suffield)
  * Fix printf format security issues (Frantisek Kluknavsky Fedora)
  * Add missing options to man page (Honza Horák)
  * CD_TEXT fix for HL-DT-ST (Kees Cook)
  * Man page hyphen fixes (Markus Koschany)
  * Some updates to the old scsilib smake files (Ubuntu patches)
- Drop no longer needed patches:
  * cdrdao-1.2.2-scan.patch
  * cdrdao-gcc6-fixes.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1702036800">- Update to version 1.2.5:
  * gcdmaster port to GTK 3 (Stefan Roellin)
  * Support to specify encoding in TOC (Denis Leroy):
  * one of ENCODING_ISO_8859_1, ENCODING_ASCII, ENCODING_MS_JIS, ENCODING_KOREAN, ENCODING_MANDARIN
    may be specified on LANGUAGE section.
  * TOC always dumped in UTF-8, unless --no-utf8 is specified
  * Fix --swap argument with generic-mmc-raw driver (Alex Free)
  * cdrdao:
    + new cdtext command to dump CD-TEXT disc content
    + deprecate 0x10 driver option by checking device configuration
  * toc2cue: (Jonathan Simpson)
    + add option to convert bin file, removing subchannel data that isn't supported by cue/bin files
    + add option to swap byte order when creating new bin file
  * toc2mp3: (DL)
    + -J option to force specific text decoding
    + support for character encoding in filenames and id3v2 tags
    + Fix eject by first issuing PREVENT ALLOW MEDIUM REMOVAL (DL)
    + Removed scsilib snapshot from old cdrecord project, only use native interface. RIP Jörg Schilling.
    + Misc compile and warning fixes for newer C++ compilers (Fedora)
    + Cddb server updates.</changelog>
</package>
<package pkgid="e556948f3ed7489cc5cf9185e69424ba1650b19b8194c54949b01a801aae5324a1a9e15a74cd75184c6ccece708370a5e94a86251798e6f6ba475105bfa60184" name="cdrecord" arch="x86_64">
  <version epoch="0" ver="3.02~a10" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1606392000">- Update to release 2020.11.25
  * libhfs_iso: changed malloc() to calloc() to avoid
    uninitialized data.
  * ved: A new colon command (ESC : vhelp) has been added.
- Remove fix_junk_in_partition.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1620129600">- Update to release 2021.04.21
  * Bourne Shell: The new version no longer aborts with an
    illegal multi byte sequence as "no match". As a result, the
    "*" now again matches any filename - even if the filename
    contains an illegal multi-byte sequence.
  * SunPro Make: The new operators :::= and +:= have been
    introduced.</changelog>
  <changelog author="jengelh@inai.de" date="1621512000">- Update to release 2021.05.19
  * Bourne Shell: The "ERR" trap is now also triggered in case that
    the error is of type "command not found" or "cannot execute".
  * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
    way as ksh does and refers to the current command. Before, only
    "fc -l -1" did work to select the previous command.</changelog>
  <changelog author="jengelh@inai.de" date="1623153600">- Update to release 2021.06.07
  * Manpage updates</changelog>
  <changelog author="jengelh@inai.de" date="1627732800">- Update to release 2021.07.29
  * Bourne Shell: "cd -" now prints the new directory,
    required by POSIX.
  * star: A single Linux xattr entry with a zero length value did
    disable all Linux xattrs for the related file. This is now
    handled correctly.
  * ved: ved maxll=79 now checks whether the cursor is &gt; column 79
    before entering a new line character.
  * ved: ved now aborts the startup if it turns out to be connected to
    a hardcopy terminal.</changelog>
  <changelog author="jengelh@inai.de" date="1629028800">- Update to release 2021.08.14
  * A new test was added to check whether SIGSTKSZ is a constant.
  * smake: While expanding the right side of a macro assignment with
    the operators :::= and +:=, smake no longer expands $$ to $, but
    rather leaves $$ untouched.
  * smake: The dynamic macros $? and $^ now work for implicit rules
    as well.
- Add schily-stksz.diff</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2021.09.01
  * smake: The man page now better describes pattern macro
    replacement.
- Drop schily-stksz.diff (resolved upstream)</changelog>
  <changelog author="kukuk@suse.com" date="1661601600">- Fix update-alternatives for rmt.1</changelog>
  <changelog author="kukuk@suse.com" date="1661947200">- pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1</changelog>
  <changelog author="jengelh@inai.de" date="1668686400">- Update to release 2022.10.16
  * bsh: Implement ^L support
  * libmdigest: Add support for BLAKE2 digests
  * mkisofs: No longer warn about Joliet being nonstandard. With
    the 2019 revision of ECMA 119, Joliet has been added as an
    annex to the standard.</changelog>
</package>
<package pkgid="3a98d5412756a6d3a91d325f7dad192419e608069cadb3ef78b82491c346a698be442b926387aacc23653e7350a9c58a0eac77ac7993282adaacc09ff0855d50" name="cdrskin" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1425816000">- Update to 1.3.8
  * Bug fix: Wrong stack usage caused SIGBUS on sparc when
    compiled by gcc -O2
  * Bug fix: Minimum drive buffer fill was measured by cdrskin
    before the buffer could get full
  * Bug fix: A failed MMC BLANK command did not cause error
    indication by libburn
  * Bug fix: A final fsync(2) was performed with stdio drives,
    even if not desired</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1432555200">- Update to 1.4.0:
  libburn:
  * Bug fix: Wrong read access to memory.
  cdrskin:
  * Bug fix: Double free with cdrskin -vvv. Introduced with
    rev 5065, version 1.3.1.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1466942400">- Update to 1.4.2.pl01:
  cdrskin:
  * Bug fix: cdrskin "failed to attach fifo" when burning from
    stdin. Regression of 1.4.2, rev 5522.
  From 1.4.2:
  libburn:
  * Bug fix: burn_disc_get_media_id() returned BD identifiers 2
    chars too long
  * Bug fix: burn_disc_get_multi_caps() returned 2048 bytes too
    many in caps.start_range_high
  * Bug fix: Media summary session count of blank and closed media
    was short by 1
  * Bug fix: Endless loop if transport error occurs while waiting
    for drive ready
  * New API calls burn_drive_get_serial_no() and
    burn_drive_get_media_sno()
  * Result of a Coverity audit: 40+ code changes, but no
    easy-to-trigger bugs
  cdrskin:
  * New -toc line "Drive id" tells the drive's individual serial
    number</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1469620800">- Update to 1.4.4:
  * Bug fix: Option drive_scsi_dev_family=sg did not convert
    /dev/sr* to /dev/sg*
  * Bug fix: burn_make_input_sheet_v07t() falsly recognized double
    byte encoding. Affected cdrskin option: cdtext_to_v07t=
  * Bug fix: Double free at end of run if
    burn_write_opts_set_leadin_text() is used. Affected cdrskin
    option: textfile=
  * Bug fix: DVD book type of DVD+RW DL and DVD+R DL was reported
    wrong.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1485691200">- Update to 1.4.6:
  * Bug fix: SAO CD could be perceived 2 blocks to short.
    Regression in 1.4.4 by rev 5672.
  * New API call burn_drive_set_immed()
  * New cdrskin option use_immed_bit=</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1518091200">- Update to 1.4.8:
  * Bug fix: Option -dummy did not affect writing by
    direct_write_amount=
  * New API call burn_drive_reset_simulate()
  * New API call burn_drive_get_bd_r_pow()
  * Refusing to write to BD-R if formatted to Pseudo Overwrite</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to 1.5.0:
  * User defined padding was moved after appended partitions
  * xorriso and libisoburn make user of the new xattr capability of libisofs
  * libburn got some rarely triggered bugs fixed</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 1.5.2.pl01
  * Bug fix
  + cdrskin multi-track burning was slow and stalled after track 1.
    Regression introduced in version 1.5.0, O_DIRECT is now
    disabled for track sources.
  version 1.5.2:
  * Bug fixes
    + No lock was obtained for setting up a fifo object
    + Stream recording was applied regardless whether the drive
    offers it. This caused Xfburn failures with some MATSHITA
    laptop drives.
    + TDK Corporation was not recognized as manufacturer of
    DVD-R "TTH02"
  * Made libburn ready for building out-of-source.
  * New API calls burn_drive_get_feature_codes(),
    burn_drive_get_feature()
  * New cdrskin option --list_features
- Added signature file and keyring as sources
- Spec cleanup</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 1.5.4:
  * Bug fix: Early SCSI commands from sg-linux.c were not logged
  * New API call burn_drive_set_speed_exact()
  * New API call burn_nominal_slowdown()</changelog>
  <changelog author="davejplater@gmail.com" date="1687780800">- Update to 1.5.6 (jsc#PED-5018)
  * Bug fix: Overburning with cdrskin option -force ended by a
    libburn error
  * New API call burn_write_opts_set_bdr_obs_exempt()
  * New cdrskin option --bdr_obs_exempt
  * Officially enabled overburning with burn_write_opts_set_force(,1)</changelog>
</package>
<package pkgid="31ccb5db8e97181f12576bf201cea94b7fc021e1a05fa657fb453b658694a9d8897807f094e36c5e0349c7ae715daf37e33e09ddd036ccaffe2f90855a8e334f" name="cec-client" arch="x86_64">
  <version epoch="0" ver="7.0.0" rel="bp160.1.2"/>
  <changelog author="sagiben@gmail.com" date="1487505600">- Rebase libcec-cmake_install_lib_dir.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Cleanup spec file
- Switch to python3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546257600">- Update to version 4.0.4:
  * fixed: only prevent TV polls when a Samsung TV is detected
    instead of suppressing all logical addresses. issue #424 #444
- Changes for version 4.0.3:
  * fixed:
    + detect debian based distros properly when installing python. closes #314
    + don't filter out broadcast in HandleDeviceVendorCommandWithId(). issue
    [#309]
    + send an active source message when a routing change has been received with
    libCEC's address as new route and no active source message has been sent
    yet. issue #309 #205 #233
    + vs2015 c++ redistributables
    + fix missing tinfo linking in cec-client. #341
    + set wrong variable. #343 #352
    + LG - don't activate the source when receiving vendor command 0xB. #344
    + LG TV always changing input when turned on #307
    + Fix menu language string. #360
    + correct python lib path for python 2.7+/3+. #356
    + Fix build if tinfo library is not present. #398
    + disable autonomous mode when a Samsung TV is connected. Samsung 2017+ TVs
    will power on randomly (Samsung bug). don't poll the TV. #424
    + CRPiCECAdapterMessageQueue::Write() accessed the queue without locking.
    [#423]
    + use sig_atomic_t for shared object between sig handler and main. #425
    + python 3.5+ import. #356
    + TDA995x: Fix logical address readback. #303
    + TDA995x: Handle physical address change, optimize logical address setup.
    [#303]
    + Pulse-Eight USB CEC adapter detection on macOS Mojave. #434
    + Fix broken Python version check and failure to build on cmake &lt; 3.7. #409
    + 13 char device name got truncated
  * changed:
    + log a warning when we detect that RPi's CEC service is used by something
    else, blocking libCEC. issue #191
    + const IAdapterCommunication::GetLogicalAddresses(), making the mutex
    mutable for now without changing the platform lib. closes #259
    + Add a Reinitialze action.  Useful for after the device has been powered
    down. #299
    + Panasonic media control info to the readme
    + detect WIN64 in cmake automatically. #322
    + README.developers.md. #330
    + instructions for hdmi_force_hotplug=1 on the pi
    + eventghost plugin install/create. #375
    + Include C version of libCEC loader when installing. #397
    + Explicitly use python3 in pyCecClient. #433
    + build with vs 2015
- Refresh patches:
  * libcec-cmake_install_lib_dir.patch
  * libcec-build-compare.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Use noun phrase in summary. Generalize description.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1549886400">- Fix dependency handling for python3</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610625600">- Update to version 6.0.2:
  * See provided changelog.in for detailed list of changes
- Drop no longer applying libcec-build-compare.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613044800">- Add reproducible.patch to drop build host name (boo#1084909)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1687953600">- Don't buildrequire lockdev, it's not actually used</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687953601">- Small packaging cleanup</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741867200">- Update to 7.0.0:
  * modernise CMakeLists.txt
  * Use cmake TIMESTAMP function to be more portable and to allow for
    reproducible builds
  * fixed: potential null deref.
  * python 3.13 compatibility
  * added: vs2022 support
  * fixed: nsis installer not creating start menu icons and uninstaller
  * bump to .net framework 4.5 and .net 8.0
  * fixed: null terminate .net device language field. added
    CecLogicalAddresses::Unset()
  * fixed: don't call the config updated callback if nothing has changed.
    auto set wake devices or activate source so these values match what
    happens on the tv
  * fixed: tv would power on even if the options to power on were disabled in
    cec-tray
  * changed/fixed: windows installer, eventghost plugin, .net libraries,
    python imports, debug builds
  * fixed: use input() for python3 and raw_input() for python2
  * changed: debian python install to match arch specific too
  * fixed: libusb0.dll wasn't included in the installer
  * fixed: remove call to PyEcal_InitThreads(). swig already includes
    SWIG_PYTHON_INITIALIZE_THREADS in SWIG_init()
  * CheckPlatformSupport.cmake: various improvements
  * Ease copy-paste by invoking apt noninteractively
  * Rename COPYING to LICENSE.md so follow standard naming conversion
  * cecloader.h: fix null return
  * Mark all devices as inactive when new active source is unknown
  * Fix use after free in callbacks with results.
  * Add a commandHandler callback to allow external libs to handle CEC
    commands themselves.
  * Remove debug printfs.
  * Attempt to fix race condition when freeing the callback wrapper.
  * Allow command handler callback to intercept broadcast messages and fix
    inconsistent callback wrapper deletion again.
  * Remove useless mutex.
  * Remove useless 'keepResult' parameter and make sure the CCallbackWrap is
    only deleted once even in case of timeout.
  * Fix Python module import
  * fix assert issue with systemd udev
  * tegra-cec support.
  * Add support for Windows ARM64.
- Remove reproducible.patch, now included upstream.
- Rebase libcec-cmake_install_lib_dir.patch</changelog>
</package>
<package pkgid="08669c63d4cb940b362791dc965a6ec65bd53de19dbe057cd509cb416cfbc5d8c9a5b1574c57355ecfae50001563615c408a220b7fbe32333ef194dde7e1783b" name="cecilia" arch="noarch">
  <version epoch="0" ver="5.4.1" rel="bp160.1.10"/>
  <changelog author="tiwai@suse.de" date="1057665600">- initial version: 2.0.5.</changelog>
  <changelog author="hmacht@suse.de" date="1075896000">- added option # norootforbuild in specfile</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="max@suse.de" date="1211371200">- Remove bogus version check that handled temp files insecurely
  (bnc#380502, CVE-2008-1832).</changelog>
  <changelog author="vgorobets@suse.de" date="1221652800">- added %fdupes macro, because the package contained some
  duplicate files</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1573905600">- Software entirely rewritten in python
  version 5.3.5:
  * Upgraded to python version 3.6.4, wxPython-4.0.1 and pyo
    0.9.0.
  * Better error handling when loading or running a cecilia5
    module.
  version 5.3.4:
  * Upgraded to python version 3.6.3, wxPython-4.0.0b2 and pyo
    0.8.8.
  * Fixed preferences path encoding on Windows.
  * Fixed unicode paths on MacOS when running as an application.
  version 5.3.3:
  * Upgraded to python version 3.6.2, wxPython-4.0.0b1 and pyo
    0.8.7.
  version 5.3.2:
  * Build against wxPython-4.0.0a2.
  version 5.3.1:
  * Better handling of non-ascii characters in preferences file.
  * Fixed standalone packaging on OSX.
  * Fixed curved line not showing on module initialization.
  * UltimateGrainer now allows a grain duration up to 10 seconds.
  version 5.3.0:
  * Migration of the application code to python3 and wxpython
    3.0.3 (phoenix) completed.
  * Source code cleanup (refactoring, removed dead and/or
    duplicated code).
  * Lot of fixed bugs.
  * Automatic saving of the module after creating or deleting a
    preset.
  * Warning to save on quit.
  * The app now opens with the last used module (instead of the
    random chooser).
  * Revisited tooltip and html documentation.
  * On Windows, default preferences for input/output devices
    should be set to WASAPI devices.
  * Added ChenLee attractor to the ChaosMod plugin.
  * Added various modulation waveforms to BinModulator.c5
  * All modules have been tested and cleaned.
    New modules:
  * UltimateGrainer - A state-of-the-art granulation processing
    module.
  * RandomAccumulator - Variable speed recording accumulator
    module.
  * UpDistoRes - Arctangent distortion module with upsampling
    and resonant lowpass filter.
  version 5.0.8:
  * Record button now records in realtime (offline rendering is
    now triggered with Menubar-&gt;Action-&gt;Bounce to Disk.
  * User can set the starting point by moving the cursor above
    the grapher.
  * Drag and Drop file or folder on the input sound popup to
    loads sounds.
  * Right-click on sound popup opens a "Recent audio files"
    popup.
  * Sliders can be controlled with MIDI or Open Sound Control
    messages.
  * When moving a point on the graph, Alt key clipped the
    position on the horizontal axis while Shift-Alt keys clipped the
    position on the vertical axis.
  * Added two batch processing modes. Either every presets
    applied on the selected sound, or the current preset applied to
    every sounds in the folder.
  * Midi notes are automatically assigned to the sampler
    transposition and controller 7 to the master gain. Must be
    activated in the preferences.
  version 5.0.7:
  * Disabled duration slider while playing.
  * Fixed segmentation fault on preset changes.
  * Added a DropFileTarget on the Grapher (for .c5 or .py files).
  * Fixed opening soundfile player/editor on Windows and OSX.
  * Changed delay time before a popup close itself (when loosing
    focus) from 500 ms to 1000 ms.
  version 5.0.6:
  * Fixed memory leak occuring on each run play/stop (need pyo
    [revision
    974](https://code.google.com/p/cecilia5/source/detail?r=974)).
  * Allow fraction notation in cgen (list entry in the
    interface).
  version 5.0.5:
  * Disabled printing sound info for all sounds in the selected
    folder.
  * Added new filter module, Vocoder. (need pyo to be up-to-date
    with sources).
  * Fixed wrong executable path generated by py2app (OSX app).
  * Removed Jack and Coreaudio from driver's list in bundled app
    on OSX (leaved them when running from sources).
  * Fixed bug: The red button doesn't turn off at the end of
    recording.
  * cgen ignores trailing coma in poup entry.
  * Fixed bug: Do not quiery for the control panel if the
    interface doesn't exist yet.
  * Fixed bug in ListEntry widget when loading from a preset.
  version 5.0.3:
  * List in cgen popup window can now be entered as 'comma' or
    'space' separated values.
  * Fixed number of channels used by the audio Server.
  * Wait for the audio Server releasing soundcard's stream
    before allowing to play again.
  * Fixed saving .c5 file on Windows.
  * Added 2 filter modules: BrickWall.c5 and BandBrickWall.c5.
  version 5.0.2:
  * Automatically save a preset named "last save" when saving a
    module. On module loading, if "last save" preset exists, it is
    activated.
  * Fixed display of the Channels menu.
  * Fixed bugs in sliders automation recording.
  version 5.0.1:
  * Fixed audio input/output selection.
  * Fixed BaseModule.addSampler "pitch" argument.
  version 5.0.0:
  * First beta release.
- Dropped cecilia-path-fix.dif and cecilia-CVE-2008-1832.patch
  (they no longer apply to new codebase)
- Added cecilia-setup.patch (courtesy of debian)
- Spec cleanup</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1574510400">- Use convert -strip to not include build time in png (boo#1047218)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620043200">- Update to version 5.4.1
  * Support WxPython version 4.1.0.
  * Support pyo version 1.0.3.
  * Removed presets from cecilia5 files.
    Moved them to ~/.cecilia5/presets folder
  * Added filter per grain in StochGrains.c5 an StochGrains2.c5
  * Allow the user to add a point on a line, without alteration,
    with Shift-Click.
  * NEW MODULE: AutoModFilter – Filter auto-modulated by an audio
    feature of its input sound
  * NEW MODULE: Binaural – Binaural 3D spatialization
  * NEW MODULE: MatrixReverb – Delay-line rotating-matrix reverb
  * NEW MODULE: StateVar2 – State Variable Filter with user-defined
    filter types
  * NEW MODULE: Stutterer – Read segments extracted from a sound
    loaded in memory
  * NEW MODULE: WaveScanSynth – Synthesis where the waveform is a
    small portion extracted from an audio signal
- Updated cecilia-setup.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="0a06699e507b957f0a0f61d369aa226ff7702a19b4b6ddc8a656847f78e4e05b14a1cf7a0b60532100cc36e7f3c4f6a5dcafb3c187f191e05de76fafdd226cf7" name="cedilla" arch="noarch">
  <version epoch="0" ver="0.7" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1092744000">- adjust "Requires:"
  XFree86-fonts-scalable --&gt; xorg-x11-fonts-scalable</changelog>
  <changelog author="mfabian@suse.de" date="1104321600">- update to 0.5.</changelog>
  <changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mfabian@suse.de" date="1153396800">- update to 0.6
  • Fixed support for ZapfDingbats and the Omega fonts.
  • Updated AFM paths to point at the new version of teTeX.
  • Added Symbol and ZapfDingbats to the Omega fontsets.
  • Added Delta as an alternate name for Deltagreek.
  • More complete support for OmegaSerif Cyrillic.
  • Added entries for the Nimbus fonts to the config file.
  • Implemented magic types :lowercase, :rotate-right and :simplify.
  • Added /whitesquare to the built-in font.
  • Added a number of new fallbacks, including Kalaallisut kra.</changelog>
  <changelog author="mfabian@suse.de" date="1153396801">- fix paths to the TeX fonts.</changelog>
  <changelog author="ro@suse.de" date="1177329600">- require texlive instead of tetex</changelog>
  <changelog author="i@marguerite.su" date="1375444800">- update version 0.7
  • Changed the format of data.lisp so it doesn't depend on the syntax
    of characters.
  • Ported to CCL; this involved fixing a number of minor bugs caught
    by CCL's compiler.
  • Regenerated data.lisp against Unicode 6.1.
  • Implemented search paths for resources.
  • Rewrote the sample config file to use search paths and to be
    compatible with the latest version of Debian's TeTeX.
- rework cedilla-config.lisp.patch to cedilla-0.7-resources-path.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1459166400">- ExcludeArch POWER64 architecture, no clisp available</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6a740fe1888915258e42299db6b9825351fba69b28451762814722bf9c90e6ae1a83573551f85e537b7e21e14a43c0b8978c30751c4ba10a68843a0d2cef4c1f" name="celluloid" arch="x86_64">
  <version epoch="0" ver="0.27" rel="bp160.1.12"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1636113600">- Update to version 0.22
  * Migrate to GTK4.
  * Add Greek, Korean, Norwegian Bokmål, Occidental, Arabic and
    Urdu translations
  * Add option to show title buttons in fullscreen mode.
  * Add option to present the window when opening files.
  * Change default screenshot filename template to
    FILENAME-TIMESTAMP (%f-%P).
  * Fix inaccurate timestamp preview.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1646654400">- Update to version 0.23
  * Fix autofit triggering regardless of settings.
  * Fix window size shrinking across sessions.
  * Fix crash when playing files with names containing invalid
    encoding.
  * Fix drag-and-drop not working with some file managers.
  * Fix playback starting when the last playlist item is removed.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1647518400">- Updated build requirements</changelog>
  <changelog author="Kirill Kirillov &lt;kkirill@opensuse.org&gt;" date="1660996800">- Update to version 0.24
  * Add Malay translation by @dinazmi.
  * Use libadwaita.
  * Fix on_load hook in scripts not triggering.
  * Add option to make the video area draggable.
  * Fix autofit breaking when playing small videos.
  * Make controls layout adaptive.
  * Display chapter marks in the seek bar.
  * Display chapter titles in the seek bar popover.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1661256000">- Fix source URL</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Replace youtube-dl with yt-dlp Recommends: youtube-dl is dead
  upstream, and celluloid/mpv upstream switched to yt-dlp. See:
  https://github.com/celluloid-player/celluloid/issues/702</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1679918400">- Update to version 0.25
  * Fix crash when using multiple windows.
  * Port the about dialog to libadwaita.
  * Fix cursor not autohiding on KDE.
  * Fix mouse presses/releases becoming unreliable during
    playback.
  * Add Estonian, Georgian, Lithuanian, Occitan and Tamil
    translations.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1693656000">- Set version requirement for libadwaita-1</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1694865600">- Update to version 0.26
  * Fix a bug where the header bar keeps hiding even when a menu
    is open.
  * Use toasts instead of dialog to report mpv errors.
  * Change default screenshot format to PNG.
  * Fix crash that happens when the mpv-config-file key in
    GSettings contains a path rather than a URI.
  * Expose the Position MPRIS property.
  * Use the numeric style class for the time/duration label,
    which stops it from jumping around as it changes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1719230400">- Update to version 0.27
  * Add a loading screen that gets displayed during
    initialization and buffering.
  * Reduce the time it takes for the main window to get
    displayed after launching.
  * Opening and closing the preferences dialog will no longer
    trigger an mpv reset unless options that require it are
    changed.
  * Update the look for controls and header bar in floating mode.
  * Update some of the deprecated GTK API usage.
  * Add support for multi-file user scripts.</changelog>
</package>
<package pkgid="24d979e3b3747a83b55c0f79fc2fd6f92ec73d4d965abb2d45bc8c23d672ec2da6df1ebcc6392b838d99fb1f3ad6598310913f49825eabedc9731d74d5fba6ff" name="celluloid-lang" arch="noarch">
  <version epoch="0" ver="0.27" rel="bp160.1.12"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1636113600">- Update to version 0.22
  * Migrate to GTK4.
  * Add Greek, Korean, Norwegian Bokmål, Occidental, Arabic and
    Urdu translations
  * Add option to show title buttons in fullscreen mode.
  * Add option to present the window when opening files.
  * Change default screenshot filename template to
    FILENAME-TIMESTAMP (%f-%P).
  * Fix inaccurate timestamp preview.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1646654400">- Update to version 0.23
  * Fix autofit triggering regardless of settings.
  * Fix window size shrinking across sessions.
  * Fix crash when playing files with names containing invalid
    encoding.
  * Fix drag-and-drop not working with some file managers.
  * Fix playback starting when the last playlist item is removed.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1647518400">- Updated build requirements</changelog>
  <changelog author="Kirill Kirillov &lt;kkirill@opensuse.org&gt;" date="1660996800">- Update to version 0.24
  * Add Malay translation by @dinazmi.
  * Use libadwaita.
  * Fix on_load hook in scripts not triggering.
  * Add option to make the video area draggable.
  * Fix autofit breaking when playing small videos.
  * Make controls layout adaptive.
  * Display chapter marks in the seek bar.
  * Display chapter titles in the seek bar popover.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1661256000">- Fix source URL</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Replace youtube-dl with yt-dlp Recommends: youtube-dl is dead
  upstream, and celluloid/mpv upstream switched to yt-dlp. See:
  https://github.com/celluloid-player/celluloid/issues/702</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1679918400">- Update to version 0.25
  * Fix crash when using multiple windows.
  * Port the about dialog to libadwaita.
  * Fix cursor not autohiding on KDE.
  * Fix mouse presses/releases becoming unreliable during
    playback.
  * Add Estonian, Georgian, Lithuanian, Occitan and Tamil
    translations.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1693656000">- Set version requirement for libadwaita-1</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1694865600">- Update to version 0.26
  * Fix a bug where the header bar keeps hiding even when a menu
    is open.
  * Use toasts instead of dialog to report mpv errors.
  * Change default screenshot format to PNG.
  * Fix crash that happens when the mpv-config-file key in
    GSettings contains a path rather than a URI.
  * Expose the Position MPRIS property.
  * Use the numeric style class for the time/duration label,
    which stops it from jumping around as it changes.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1719230400">- Update to version 0.27
  * Add a loading screen that gets displayed during
    initialization and buffering.
  * Reduce the time it takes for the main window to get
    displayed after launching.
  * Opening and closing the preferences dialog will no longer
    trigger an mpv reset unless options that require it are
    changed.
  * Update the look for controls and header bar in floating mode.
  * Update some of the deprecated GTK API usage.
  * Add support for multi-file user scripts.</changelog>
</package>
<package pkgid="51b6f01b97a7234b3b803277101be6bfc227d2fbfe7a3e73f125e08d12d32e1a415ed6c33aff1c222dadeb00727344a5a39b53efb68c850fd03a421d102bf2ef" name="cellwriter" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="bp160.1.12"/>
  <changelog author="dkukawka@suse.de" date="1201780800">- updated to v1.3.3</changelog>
  <changelog author="dkukawka@suse.de" date="1213099200">- updated to v1.3.4:
  - stroke.c, averages.c: Fixed two memory leak</changelog>
  <changelog author="beineri@opensuse.org" date="1249214400">- fix capitalization of GenericName in .desktop file</changelog>
  <changelog author="pgajdos@suse.com" date="1315569600">- build with --no-copy-dt-needed-entries
  * no-copy-dt-needed-entries.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- updated to v1.3.6:
  - includes fixes from 1.3.5
  - see ChangeLog for all changes
- clean with spec-cleaner
- drop cellwriter-no-copy-dt-needed-entries.patch, fixed upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1512388800">- Convert to pkgconfig() style buildrequires
- Do not buildrequire xorg-x11-devel metapackage.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1600344000">- Add patch to fix build with GCC10:
  * 0001-Fix-build-failure-with-GCC10.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1651147200">- fix homepage url</changelog>
</package>
<package pkgid="a3e75861c73ce74cd522725c1e2d6de34bf9ea0ed2896146731ff2aa69719555929ad1e29f69e277ecf6375a9fcaa1fa2e0ae3d76a75bdc76d57240f0d27c408" name="celt" arch="x86_64">
  <version epoch="0" ver="0.11.3" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1265803200">- remove suffix patch. rename lib package instead
- add baselibs.conf</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Upgrade to 0.9.1.x
  * improves the packet loss concealment.
  * high-frequency artefacts have been reduced.</changelog>
  <changelog author="davejplater@gmail.com" date="1308657600">- Added source services to update to 0.11.1.
- libcelt0-1 bumped to libcelt0-2 due to "current" increment.
- Upstream changes :
  * fixes two minor bugs with 0.11 that affect the bit-stream.
  The quality should improve (very) slightly, but not enough to be
  noticeable in most cases. Several Opus-related bugs have also
  been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real tar</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel building
- Add celt-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="i@marguerite.su" date="1332590400">- fixed "no dependecies on libcelt*" warning.</changelog>
  <changelog author="cfarrell@suse.com" date="1348142400">- license update: BSD-2-Clause
  See COPYING file</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Update to 0.11.3
  * no upstream changelog provided
- Cleanup spec file with spec-cleaner
- Update baselibs.conf</changelog>
</package>
<package pkgid="741eb88762226c3dd5bc471cfe00dee162e233a53162cd430a0ecdd876301eadc392780481768d666897ce688398a8962639621431969d1ae78344d53970b2f5" name="cepces" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="160000.2.2"/>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmueller@suse.com" date="1652184000">- add b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch</changelog>
  <changelog author="dmulder@suse.com" date="1654084800">Release v0.3.5:
- Added polling_interval which tells certmonger how long to wait in seconds before retrying.
- Implemented Certificate authentication method.
- Python 3.10 compatible.</changelog>
  <changelog author="dmulder@suse.com" date="1666267200">Release v0.3.6:
- Fix Bug #15 cepces.conf.dist: server should be pointed to actual CEP host
- Replace old requests_kerberos with requests_gssapi
- setup: Do not install example configs
- setup: Respect the prefix the user specifies
- Delete the spec file
- Make Kerberos delegation configurable
- Fix Bug #24 cepces-submit 'TypeError: option values must be strings'
- Removed b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch because
  it is now upstream.</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">Release v0.3.7:
- Make the openssl security level configurable</changelog>
  <changelog author="dmulder@suse.com" date="1705924800">- Update to version 0.3.8:
  * Fix WSTEP BinarySecurityToken attribute namespaces
  * Migrate to SPNEGO auth mech</changelog>
  <changelog author="dmulder@suse.com" date="1710763200">- Update to version 0.3.9:
  * Fix failure to parse DER encoded cert; (bsc#1196658).
- Also disable selinux in 15.6, since it is still not supported.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
</package>
<package pkgid="44fdb35ccb242e59ecfe680d2a5b104dcbd86a3e2220d1b8735cc98c15f75842597366c73ba8628aefc8e10514614f14778a13691c2d437885ff752260a96061" name="cepces-certmonger" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="160000.2.2"/>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmueller@suse.com" date="1652184000">- add b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch</changelog>
  <changelog author="dmulder@suse.com" date="1654084800">Release v0.3.5:
- Added polling_interval which tells certmonger how long to wait in seconds before retrying.
- Implemented Certificate authentication method.
- Python 3.10 compatible.</changelog>
  <changelog author="dmulder@suse.com" date="1666267200">Release v0.3.6:
- Fix Bug #15 cepces.conf.dist: server should be pointed to actual CEP host
- Replace old requests_kerberos with requests_gssapi
- setup: Do not install example configs
- setup: Respect the prefix the user specifies
- Delete the spec file
- Make Kerberos delegation configurable
- Fix Bug #24 cepces-submit 'TypeError: option values must be strings'
- Removed b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch because
  it is now upstream.</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">Release v0.3.7:
- Make the openssl security level configurable</changelog>
  <changelog author="dmulder@suse.com" date="1705924800">- Update to version 0.3.8:
  * Fix WSTEP BinarySecurityToken attribute namespaces
  * Migrate to SPNEGO auth mech</changelog>
  <changelog author="dmulder@suse.com" date="1710763200">- Update to version 0.3.9:
  * Fix failure to parse DER encoded cert; (bsc#1196658).
- Also disable selinux in 15.6, since it is still not supported.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
</package>
<package pkgid="fdd9e3608109caa81045c88b68f496e86e9bf814f5173df16d735213fe24df12818b0649c8022a35ef31303487a4ae15851e29e21cba9cd3eb4846627cc7ac01" name="cepces-selinux" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="160000.2.2"/>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmueller@suse.com" date="1652184000">- add b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch</changelog>
  <changelog author="dmulder@suse.com" date="1654084800">Release v0.3.5:
- Added polling_interval which tells certmonger how long to wait in seconds before retrying.
- Implemented Certificate authentication method.
- Python 3.10 compatible.</changelog>
  <changelog author="dmulder@suse.com" date="1666267200">Release v0.3.6:
- Fix Bug #15 cepces.conf.dist: server should be pointed to actual CEP host
- Replace old requests_kerberos with requests_gssapi
- setup: Do not install example configs
- setup: Respect the prefix the user specifies
- Delete the spec file
- Make Kerberos delegation configurable
- Fix Bug #24 cepces-submit 'TypeError: option values must be strings'
- Removed b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch because
  it is now upstream.</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">Release v0.3.7:
- Make the openssl security level configurable</changelog>
  <changelog author="dmulder@suse.com" date="1705924800">- Update to version 0.3.8:
  * Fix WSTEP BinarySecurityToken attribute namespaces
  * Migrate to SPNEGO auth mech</changelog>
  <changelog author="dmulder@suse.com" date="1710763200">- Update to version 0.3.9:
  * Fix failure to parse DER encoded cert; (bsc#1196658).
- Also disable selinux in 15.6, since it is still not supported.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
</package>
<package pkgid="b68bde791097d086c759894c95e81830736c7bb40af8073f2a416c8c43bcc592d70f0b9f1835198068ef714b6710f3a3e72395f9ee0cb34baba720bfc5afa348" name="ceph" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="68ce2621d498844fc86f4020948461e399070ff3bb7419db93a5f739354783fe467fbc858d656b4dd8be334762fffda21c7e5a8e9e8be8218ea4bdf9bc092d48" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="4873610993bbb2d476cde9489634f49fc47043c1da59f91ecf6b1a6800d7b21d2dbd76696fedef419836ba536e01ee183126361f24d44c637446325164bad965" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="58df51de72b9b0c64d78ab1f891eb39dafae0a2e19f38d1ac0556314ec35cbe7bbf21665021d4c1de25412402b7ad75c4251e60052f6dd26fa846f5816c989eb" name="ceph-exporter" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="36f7d9ae11bee39baf74feaf097591adae7738e91addf6d4c0748f875f346e6bc70b12011ba93910d81822b7883b5c66c494d7dee6ca6de96d09086f82f3e25f" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="764a42ade63b71d105773cb3660541b55866827a0cb0c3ed30e60c33bb2d917d371d2e1f337639bd1de9dec22cb625965db2c16bc79eb7366a211b915ffbfe94" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="b4c7a0c52ed10df249cd9b241040a464fb30c9fa5bc8c7a3965e4adea5c7172ba0e8cf057cecf067c6769a72587073b8d0e4e4c7b44853014eac18aeb1428869" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="c90169513a6de41dbbb890424bd48c0638f64bfb9f1b1f008a4ce81ed8493436eebac671a49e460204ab2dea7b6f31bd932b0f252f879a489ac38a825af04a2a" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="210cd8d83ea4d6d5c84efbbd0de17e792a37fbb4e6ac41305cf31f9999c3b719efc2ce32cf1b5fa8b60e31df715fb2c284e327d536197f9416bca8daa2e049cb" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="19750e0046b36b923c66b5778576bcef2f67ff0c8539d089954f5eeca158c99bdd0f93df593ac4e8c4eb5894a72616163662717f556be56dc531c01811d292a6" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="18944efbc73d0f7050d664b7198e563f657f3f2e4384e0bfd850118526832b9d65b9d37acf2b0140480e17952f11a78572d107ba278a46858848b93f1c75abda" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="d26820b8a8cdc7ce4c66ffcefe7f4df3fecc67d6442714559e8f570b58dbea31375233017feb53f0f1640ccb08c4dc8976ffcac826524335e5bf8d74977b4957" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="1ba24b5e15ab0cf1f2e24ef169dbcd80358e49716bb0802aa85348f7eb3054a00886130be16873c3c961ae9d1978eee656f38424e77af9e513433e96c745891e" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="f62063a5bed3a8579ad5161dd84fa2865b28680de2854d6c182a18598e4da8e1c2d4456f3f532e341c8c9316120f7193a645317a80b7c5021ff9219dcf7bc45c" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="bece2656716a45e8ce2419b2bcd52589bd34081b5296d99b4b59b6c2634f9bf803341e120421901c12c6ca8d4e288a831d1ad19ac6430e364cf62a65a4793680" name="ceph-mib" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="7784afbe05a8797deb95dc7e284e722e960a8019f165a53fc0c582381150302b9d36231e9e211dd02c999c648edbb178f43272430c8a7941ae2200d569bef23d" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="ded0a9232f2c7b70c0a12bcae753fe62f3bc2bb941556a5b707e4c50d25d6dafcf46a8c2ff4eb93677a8f519f25e64542cf8a264bf186df108bf6f3ed9af2b67" name="ceph-node-proxy" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="ed2c50cd16081cd8d64d1f5cefd410473f76b0ac05d680fc6dabd14505b9665caa12f06368ee48445cc68688cb8531c002d53571069620b2aafc62b3da8d2574" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="703f838368a0e365065f9277947bf41e6d2f269f314f618f6a4b23e4173e9f1a16bcb1e60b3da1d78cd55b9fceeefcf8f7464c4f04083fa814c2ff3761641563" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="82bcb3e474b2ad56a1dcf6eb8e816e1c22c4741d1cf71b132d5fa5bf67de77b12cb9b48851ad55ecd21315775e2ef813e144c86e2c3171e23ddde6f5e76db486" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="c616555430015da45bc3fc3405114599af3bcfabf77ad1b2e503b74361ad1dc852297292cb8b789b1afa15b065a3687a3e7c0f295907c5b6c497afc3973ab7f4" name="ceph-volume" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="8ba853b1a2b6a214ad39bdb3557c2e33a19dc46a51ff1538f09dd1541560a3531608a8e7e88e3af7d312a74bf0821a8a58cd6ae9bcf5daa3bc0aa88be92e1dee" name="cephadm" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="e77f687de6fd0ea7f246f39e104dee3274ac573364c331967f2cd5ae430bacd8585fac10724344f76064791969351267c88d7e23b2e36a18755aeced31b798c9" name="cephfs-mirror" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="244e52d09de1fc332f70d436a76bf7d976986071efecf1c9e1b333575924c63d4eeaae2f93cdaeecd86972b43ef9a829ec5997e89f600c58386351894b18a437" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="1c476066cb466d75c90b1ff1177ad9abd5f985ac5baa6d34a10544079eb3cc22465dc2a42aff30460d41d8b09589c385b1a2583c61bbadf14e506f18d2daf664" name="cephfs-top" arch="noarch">
  <version epoch="0" ver="18.2.7" rel="160000.1.2"/>
  <changelog author="tserong@suse.com" date="1712750400">- Update to 16.2.15-74-gc5dd01a91d8:
  + Fix FTBFS on GCC 14 (boo#1222493)</changelog>
  <changelog author="tserong@suse.com" date="1741003200">- Update to 16.2.15-82-gc12b9a96bd8:
  + ceph.spec.in: remove "Obsoletes: libcephfs1" (boo#1237420)
  + Suport Python 3.13</changelog>
  <changelog author="tserong@suse.com" date="1744372800">- Update to 16.2.15-83-g635361e68c0:
  + Fix FTBFS on GCC 15 (bsc#1239885)</changelog>
  <changelog author="tserong@suse.com" date="1744804800">- Update to 16.2.15-84-gb9c09b69575:
  + ceph.spec.in: Fix cephfs-{top,shell} shebangs with setuptools &gt;= 76</changelog>
  <changelog author="jfunk@opensuse.org" date="1748779200">- Update to 18.2.7 (Reef):
  + RADOS
  * FileStore is not supported in Reef.
  * RocksDB has been upgraded to version 7.9.2.
  * There have been significant improvements to RocksDB iteration overhead
    and performance.
  * The `perf dump` and `perf schema` commands have been deprecated in favor
    of the new `counter dump` and `counter schema` commands.
  * Cache tiering is now deprecated.
  * A new feature, the "read balancer", is now available, which allows users
    to balance primary PGs per pool on their clusters.
  * A POOL_APP_NOT_ENABLED health warning will now be reported if the
    application is not enabled for the pool whether the pool is in use or
    not.
  * The get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due
    to being prone to false negative results. Its safer replacement is
    pool_is_in_selfmanaged_snaps_mode.
  * A new command, `ceph osd rm-pg-upmap-primary-all`, has been added that
    allows users to clear all pg-upmap-primary mappings in the osdmap when
    desired.
  * A bug related to IPv6 support is now fixed.
  + RGW
  * Bucket resharding is now supported for multi-site configurations.
  * There have been significant improvements to the stability and
    consistency of multi-site replication.
  * Compression is now supported for objects uploaded with Server-Side
    Encryption.
  * S3 multipart uploads using Server-Side Encryption now replicate
    correctly in a multi-site deployment.
  * New tools have been added to `radosgw-admin` for identifying and
    correcting issues with versioned bucket indexes.
  + Dashboard
  * There is a new Dashboard page with improved layout. Active alerts and
    some important charts are now displayed inside cards.
  * An overview page for RGW to show the overall status of RGW components.
  * Added management support for RGW Multi-site and CephFS Subvolumes and
    groups.
  * Fixed several issues in Ceph dashboard on Rook-backed clusters, and
    improved the user experience on the Rook environment.
  + RBD
  * Support for layered client-side encryption has been added.
  * When diffing against the beginning of time (fromsnapname == NULL) in
    fast-diff mode (whole_object == true with fast-diff image feature
    enabled and valid), diff-iterate is now guaranteed to execute locally if
    exclusive lock is available. This brings a dramatic performance
    improvement for QEMU live disk synchronization and backup use cases.
  * The option --image-id has been added to `rbd children` CLI command, so
    it can be run for images in the trash.
  * The try-netlink mapping option for rbd-nbd has become the default and is
    now deprecated.
  + Telemetry
  * Users can now opt in to participate in a leaderboard in the telemetry
    public dashboards.
  + CEPHFS
  * MDS now evicts clients which are not advancing their request tids.
  + mgr
  * For clusters with multiple CephFS file systems, all the snap-schedule
    commands now expect the ‘--fs’ argument.
  * Refine the orchestrator availability check to prevent against crashes in
    the prometheus module during startup.
  + ceph-volume
  * A bug related to cryptsetup version handling has been fixed.
- Switched to managing the spec directly with a pristine source and set of
  patches
- Removed ceph-test
- Removed checkin scripts
- Added ceph-mgr-stop-using-deprecated-api-to-initialize-python.patch
- Added ceph-mgr-set-argv-for-python.patch
- Added ceph-mgr-add-site-packages-paths.patch
- Added ceph-librbd-fix-atomic-shared-pointer.patch
- Added ceph-cmake-ensure-git-exists-before-executing-it.patch
- Added ceph-build-fix-fmt-version-check.patch
- Added ceph-tracing-fix-c-type-errors-in-librados-tracing.patch
- Added ceph-pybind-fix-c-type-errors-in-cython-generated-python-bindings.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1748952000">- Add ceph-volume-fix-importlib.metadata-compat.patch
- Added ceph-mgr-python-avoid-pyo3-errors.patch
- Added ceph-mgr-do-not-require-NOTIFY_TYPES-in-python-modules.patch
- Added ceph-mgr-workaround-numpy-28271.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750248000">- Added cephadm-fix-get_cluster_count_when_data_dir_is_missing.patch
- Add ceph-rocksdb-gcc15.patch</changelog>
  <changelog author="jfunk@opensuse.org" date="1750766400">- Disable ceph-mgr-cephadm in ring1</changelog>
  <changelog author="schwab@suse.de" date="1751371200">- Enable build on riscv64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752840000">- Drop cryptopp as potential dependency [jsc#PED-13011] and use gnutls as upstream seastar.
  * Remove cryptopp and use gnutls instead.
  * Add ceph-replace-CryptoPP-calls-with-GnuTLS.patch</changelog>
</package>
<package pkgid="ecbea007c9504ccc6da6b66657f5b16105be6a1ea0cb3752af3aa99dc06624f354e56c2ef9da718a3c4466f45544abdba0a6bfdea209e0c72f2e82ee9946d2b8" name="cereal-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="160000.2.2"/>
  <changelog author="junghans@votca.org" date="1472644800">- Initial version 1.2.1</changelog>
  <changelog author="junghans@votca.org" date="1472817600">- disable PORTABILITY_TEST to support arm</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="junghans@votca.org" date="1487160000">- update to version 1.2.2</changelog>
  <changelog author="junghans@votca.org" date="1487246400">- added 8b8f5814e292e03bb5b07333a0e634ef0481c85b.patch from upsteam
  to fix unstable test</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 1.3.0:
  * Deferred serialization for smart pointers (#185)
  * Initial support for C++17 standard library variant and optional (thanks to @arximboldi, #448)
  * Support for std::atomic (thanks to @bluescarni, #277)
  * Vastly improved continuous integration testing (#568, #569)
  * Fixed several issues related to compilation on newer compilers (#579, #587, #515)
  * Fixed warnings with -Wconversion and -Wdocumentation (thanks to @WSoptics, #423)
  * Performance improvements for polymorphic serialization (#354)
  * Fixed a bug related to CEREAL_REGISTER_DYNAMIC_INIT with shared libraries (thanks to @M2tM, #523)
  * Avoid unnecessary undefined behavior with StaticObject (thanks to @erichkeane, #470)
  * New version.hpp file describes cereal version (#444)
  * Ability to disable size=dynamic attribute in the XML archive (thanks to @hoensr, #401)
  remove 8b8f5814e292e03bb5b07333a0e634ef0481c85b.patch: upstream</changelog>
  <changelog author="christophe@krop.fr" date="1633348800">- Add patch to fix build with glibc 2.34:
  * d7b68df.patch</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1657368000">- Update to version 1.3.2:
  * Make doxygen docs reproducible by @mr-c in #740
  * Add CMake options for building doc and sandbox by @AzothAmmo in #751
  * Correct patch version for 1.3.2 by @AzothAmmo in #750
- Changes from version 1.3.1:
  * Github actions in place of Travis CI (thanks to @isuruf, #727)
  * Doctest updates (and upstream patches!) to support all targeted compilers (#714, #736)
  * Cmake modernization (thanks to @ClausKlein, #659)
  * Fix typo in docs by @tankorsmash in #597
  * Add MSVC 2019 to build, default ctor for static object by @AzothAmmo in #593
  * Fix json.hpp compilation issue when int32_t is a long by @bblackham in #621
  * [cpp20] explicitly capture 'this' as copy by @lukaszgemborowski in #640
  * Fix rapidjson for Clang 10 by @groscoe2 in #645
  * Fixes to prevent clang-diagnostic errors by @johngladp in #643
  * cleanup cmake files to be a little more moderen by @ClausKlein in #659
  * CVE-2020-11105: Store a copy of each serialized shared_ptr within the archive to prevent the shared_ptr to be freed to early. by @serpedon in #667
  * add license files for components of cereal by @miartad in #676
  * Catch short documents in JSON input by @johnkeeping in #677
  * C++17: use inline globals for StaticObjects by @InBetweenNames in #657
  * Use std::variant::emplace when loading by @kepler-5 in #699
  * Use std::optional::emplace() when loading non-empty optional by @kepler-5 in #698
  * Fix itsNextName not clearing when not found + style change by @AzothAmmo in #715
  * Update doctest to 2.4.6 + local fixes slated for upstream by @AzothAmmo in #716
  * Fixed loading of std::vector by @Darred in #732
  * Update license to match BSD template by @AzothAmmo in #735
  * Update doctest to 2.4.7 by @AzothAmmo in #736
  * Use GNUInstallDirs instead of hard wiring install directories by @antonblanchard in #710
- Remove d7b68df.patch: Fixed upstream.
- Refresh spec file:
  * Use more cmake macros.
  * Drop obsolete conditionals.</changelog>
</package>
<package pkgid="e8328e3256638c39f71e2932c575464bcde6f0d939f0e9c87f4edb4bbda9e14e2a50cf20cc206f17a3ff15f6d9a7646d324cd5a097cc6c1e882cb2587be0b1ae" name="certbot-systemd-timer" arch="noarch">
  <version epoch="0" ver="0.0" rel="bp160.1.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1536148800">- optional systemd timer to handle certbot certificate renewals
  borrowed from Fedora</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1538740800">- specfile now respects SUSE installation process</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553256000">- Use noun phrase in summary.
- Add systemd-rpm-macros BuildRequirement for %service_*.
- Add systemd as a runtime dependency, as the package's main
  purpose is the timer unit.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1583236800">- Require the python3 certbot package instead of the python2 one.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1738584000">- Fix build with RPM 4.20: referencing ../ in %doc/%license is not
  guaranteed.</changelog>
</package>
<package pkgid="970341b9dc2b0b5a5d785343a226a07d483d517609866084d2856316a80ceb82973d3ee2dc26195f149453883c5d6c7068cf537a37d63c6a3566cd1b55f8c223" name="certgen" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1721131200">- new package certgen: a dead simple tool to generate self signed
  certificates (for MinIO TLS deployments)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1721131201">- Update to version 1.3.0:
  * update go-releaser with latest changes
  * upgrade vulncheck min-go-version (#6)
  * Remove duplicated `Install` section (#5)
  * adding vulncheck github workflow action (#4)
  * add common-name support for client certs
  * update README.md binaries
  * fix generating certs, default to ecdsa-prime256v1
  * update certgen docs
  * add support for generating client certs
  * update goreleaser and format certgen.go</changelog>
</package>
<package pkgid="e37181ae6e9063d553280073c75e46155a64ed5a8af0a4752d18c1f86394911c7597dbc803ced83550fd89df1f546a263e0ff36418eb84687a9a020f3e3dba96" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.79.19" rel="160000.2.2"/>
  <changelog author="stasiek@michalski.cc" date="1586692800">- Initial package</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="hel@lcp.world" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="william.brown@suse.com" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="ngompa13@gmail.com" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
  <changelog author="novell@virtual.drop.net" date="1655467200">- Updated to version 0.79.15
- Added minimum libjansson version requirement.</changelog>
  <changelog author="novell@virtual.drop.net" date="1655467201">- Added 0001-Disable-DSA-in-the-RPM-spec.patch
- Removed 0002-certmonger-return-type.patch.</changelog>
  <changelog author="sflees@suse.de" date="1697025600">- dbus-daemon is now split out into a separate package.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702468800">- Update to 0.79.19
  * getcert: add-scep-ca: fix help for --ca-cert and --ra-cert
  * Don't restrict tokens to CKM_RSA_X_509
  * Updated translations from Weblate
- Update to 0.79.18
  * Rename DBus service and conf files to match canonical name
  * Add missing .TP tags in getcert-resubmit man page
  * migrated to SPDX license
  * Include owner and perms in getcert list output
  * Don't require an NSS database in cm_certread_n_parse
  * Add new certs to internal token, try harder to remove on renewal
- Update to 0.79.17
  * Respect LDFLAGS settings defined by user
  * Switch to CA user when saving NSS certificates
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
- Update to 0.79.16
  * Add a PEM validity checker and validate SCEP CA files
  * Fix implicit declaration of function ‘PEM_read_bio_X509’
  * Don't include "NEW" in certificate signing requests
  * Verify that the AES-128 is used for encrypting the local CA
  * Replace DER-encoded test file with a base64-encoded one
  * Correct a bad date in the spec changelog
  * Switch to https URLs for Sources, etc.
  * Remove dependency on SHA-1
  * tests: Test that the CA constraint DER encoding is correct
  * Disable DSA in the RPM spec
  * Manually build the srpm for the copr CI
  * Require jansson &gt;= 2.12
  * Mark the current directory as a safe git directory
  * Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Chinese (Simplified) (zh_CN))
  * Translated using Weblate (Hungarian)
- Removed 0001-Disable-DSA-in-the-RPM-spec.patch
- Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch</changelog>
</package>
<package pkgid="c244b7ff83b3357c74826b3e4ed411153b7cf96bd8cd5b4aeac51003f2ebe4a5632a064d0407a69123654151a816eb25e4ba9e0fb7278d3c5fb76003992851eb" name="cervisia" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * cmake: remove two old variables
  * slots, signals, emit -&gt; Q_SLOTS, Q_SIGNALS, Q_EMIT
  * cervisiapart: port to modern JSON plugin definition
  * Remove the kinit dependency</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="1ea12b5d50a71cdcaead46328d4fd9e8abaa15224a0dcf9979e9a95b2cf942811fd1ca665e2296ceadfe846b9808890f3271b911793f77b00d0b6b8d21b2bb19" name="cervisia-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * cmake: remove two old variables
  * slots, signals, emit -&gt; Q_SLOTS, Q_SIGNALS, Q_EMIT
  * cervisiapart: port to modern JSON plugin definition
  * Remove the kinit dependency</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="71195fed33b9541985f262d397c4731a2e06f1a3ff241fe9a128c252b296eaaa0a3e11917a295eecb8f40bd63e82b9a158f4dfd33655c5ad3ebec493eeb961ab" name="cfitsio" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="bp160.1.8"/>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1594036800">- Update to version 3.480:
  * Now can handle parentheses in path names rather than
    automatically interpreting them as output file specifiers.
  * Fixed bug in imcompress.c that wasn't properly handling
    conversion between float and double types when reading from a
    gzip compressed float or double image.
  * Fixed bug that was preventing use of bracket and parentheses
    symbols in pathnames when opening multiple READWRITE files,
    even when requesting no-extended-syntax usage. *This fix
    necessitates a library interface version number change.
  * Fixed bug in ffmnhd / fits_movnam_hdu to properly handle
    wildcard syntax.
  * Fixed bug in fits_open_extlist to handle filename[EXT] syntax
    properly.  The hdutype parameter may now be null.  More
    documentaion for this function is in cfitsio.tex.
  * Added new function fits_copy_hdutab to create a new table with
    the same structure as an existing table.
  * fits_copy_col / ffcpcl handles long long integer data types
    more natively to prevent precision loss.
  * histo.c routines now recognize integer columns that have been
    scaled by TSCALn keywords and may be closer to floating point
    type.
  * Added backward compatibility for very old Rice compressed files
    which were not using the ZVAL2 keyword in the way that later
    became standard.
  * Change made to cfitsio.pc.in to prevent forcing downstream
    libraries to link against cfitsio's dependencies when using
    pkgconfig.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 3.490:
  - Fix to imcompress.c.  It now turns off quantization if ZSCALE
    and ZZERO columns are missing.  Treatment will be the same as
    if ZQUANTIZ were set to 'NONE', even if ZQUANTIZ is present
    and set to something else.
  - Added mutex to fits_execute_template() function so that the
    creation of files using ASCII templates will be thread safe.
  - In fpack when using -table flag, replaced warning message with a
    more detailed description mentioning FITS format update.
  - Added flag to CMake builds to disable curl dependency.  Also
    only add CURL_LIBRARIES to CMake link target if curl is found.
  - Minor adjustment to download progress output.</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1627819200">- Update to version 4.0.0:
  - Removed separate directory for zlib/gzip code, and updated
    configuration to check for zlib on the user's system
    (required). When use of cURL is enabled, it may also pull in
    zlib such that user applications may not need to link with it
    separately.
  - Changed version numbering to 3-field format.
  - Added new calculator functions SETNULL(x,y) to allow
    substitution of NULL values into tables, and GTIOVERLAP() for
    calculating the amount of GTI overlap exposure for a time bin.
  - Fix added for proper handling of string columns with zero
    repeat count.
  - Fix to column filtering expressions which write #NULL values to
    columns of type (J) format.
  - Fix to memory clearing when using polygon shapes in region
    files.
  - Fix to fits_str2time function so that it now flags a particular
    case of bad syntax which was previously getting through.
  - In ffgclb and ffpclb (read/write byte columns), the
    "undocumented" feature of being able to transfer columns 'A'
    string columnss as byte arrays is now handled correctly, with
    improved error checking via updates to ffgcprll.  More
    documentation on string handling is in cfitsio.tex.
  - Fix bug in 'colfilter' functionality.  When performing a
    column deletion of the form -COLNAM*, and multiple matches
    existed, then none of the matches got deleted.  Now the
    first is deleted as expected.
  - Improved handling of corner case in ffpkn functions.
  - In ffgky, modified TULONG case to allow it to read unsigned
    values greater than the 8-byte signed limit.
  - Fix to parsing of corner case of extended file syntax.
  - Major updates to CMake configuration.
- Removed cfitsio-zlib.patch (not needed anynore).</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1648555200">- Update to version 4.1.0:
  * Calls to the zlib inflate() function in zcompress.c now handle
    the Z_BUF_ERROR return value rather than exiting.
  * The SUBTRACTIVE_DITHER_2 option has been removed when using the
    HCOMPRESS algorithm.
  * Updated fits_get_version function to return a float calculated
    from 3 version fields.
  * Added handling of SBYTE_IMG and ULONGLONG_IMG types to the
    fits_resize_img function.
  * Updates made to C/Fortran interfacing in cfortran.h and
    f77_wrap.h specifically driven by new Mac/ARM architecture.
  * Fix to the fits_insert_col functions to handle columns with
    TULONGLONG data.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670760000">- Update to version 4.2.0:
  - This release includes patches to security vulnerabilities.
    We strongly encourage this upgrade, particularly for those
    running CFITSIO in web accessible applications.
  - Fix to fits_read_key function, which was failing to properly
    read keywords declared type TUINT on compilers where
    sizeof(int) = sizeof(long).
  - Added new functions fits_read_cols and fits_write_cols to
    efficiently read or write multiple columns in a single
    function call
  - Added new function fits_copy_selrows to copy only selected
    rows, such as the selected rows returned by fits_find_rows
  - Added new calculator functions ERF(X), ERFC(X) and GAMMA(X),
    which are mathematical special functions of the same name
  - Added new calculator function GTIFIND() which reports which
    GTI row brackets a given time sample
  - Added new calculator functions which operate upon vector table
    values NAXIS(V), NAXES(V,n), ELEMENTNUM(V) and AXISELEM(V,n),
    and ARRAY(X,d) which promotes scalar X to a vector or array
    with given dimensions.
  - The CFITSIO histogramming code now handles binning by any
    arbitrary calculator expression rather than just a column name.
    Both the binned columns as well as the optional weights may be
    calculator expressions, enclosed in parentheses.
  - Binning of vector columns or expressions is now supported, as
    long as all binned inputs (as well as the optional weighting)
    have the same vector dimensions. Binning of variable-length
    columns remains unsupported.
  - A bug that caused histogram weights from columns that are null
    values to be tallied along with non-null values has been fixed.
  - The CFITSIO calculator and histogramming functionality is now
    fully reentrant and does not require multithreading interlocks.
  - A long-standing segmentation fault bug in the histogramming
    code related to binning any value using the "reciprocal" /XXXX
    notation has been fixed.
  - Added mutex locks for thread safety in ftgiou and ftfiou.
  - Added several Fortran wrappers to support image read/write when
    'fpixel' and 'nelements' are 8-byte integers.
  - Fixed bug which was adding spaces to some cases of long string
    key value output.
- Enable SSE2 on x86_64
- Package fitscopy util
- Enable bzip2 support</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1690372800">- Update to version 4.3.0:
  * Bug fix to fits_make_hist[d] that was introduced in 4.2.0.
  * Added overflow checking for case of reading images with 8-byte
    float values into 4-byte float arrays.
  * fits_write_key_longstr now handles case of writing a long
    keyword in combination with a long keyword value string.
  * Add conversion of French locale comma-to-period in corner
    cases appearing in ffr2e and ffd2e functions.
  * Increased the precision when writing version number to
    User-Agent strings for http connections.  This is needed to
    fully conform to 3-field version string format.
  * Bug fix to GTIOVERLAP() calculator function, which was being
    treated as a boolean value in expressions, and is now
    correctly treated as a floating point result.
  * Bug fix to ARRAY() calculator function, which caused a memory
    overflow error
  * Enhancement to the ARRAY function, such that ARRAY(V,d) can
    apply new dimensions to V, as long as the total number of
    array/vector elements does not change.
  * Enhancement of long string keyword read/write functions to
    fully conform with FITS standard specifications for multi-line
    value and comment strings. Two new functions have been added
    to implement this: fits_get_key_com_strlen and
    fits_read_string_key_com.
- Make doc package noarch.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 4.3.1:
  * Improve longstring keyword functions</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718280000">- Update to version 4.4.0:
  * Reorganization of helper utility code; added fitsverify
  * CMakeLists.txt: Changed install location of
    cfitsio-targets.cmake to conform with the one listed in
    cfitsio-config.cmake.in (i.e.  including the extra "cfitsio"
    subdir of lib/cmake).
  * calculator functions that read GTIs do more correct validity
    checking of GTI input files
  * fits_insert_rows now works if input table starts with both no
    rows and no columns
  * Can now write internal memory files of size &gt; 2^32 directly to
    a gzip-compressed output file.
  * Added support for unsigned long long types to fits_update_key.
  * Added ability for Windows builds to handle UTF-8 needed for
    reading filenames with non-ASCII characters.
  * Added 2-byte int test to speed.c utility.
  * Made fix to http file handler to expand the allowed URL
    length.
- Change License tag to NASA-1.3 in keeping with upstream.
- Switch to cmake+ninja for build.
- Switch BuildRequires to pkgconfig based packages where possible.
- Add a bunch of cmake build related patches to make the output
  close to that generated by autotools:
  * cfitsio-cmake-devel-scripts-destination.patch: Fix destination of
    pkgconfig and cmake scripts from /usr/lib to %{_libdir}.
  * cfitsio-cmake-allow-user-specified-incdir.patch: Allow specifying
    user-defined include dir into which to install header files.
  * cfitsio-cmake-lowercase-util-names.patch: Use lowercase
    names for utility binaries when building using cmake (same as
    autotools)
  * cfitsio-cmake-match-autotools-soversion.patch: Same so
    number as used in configure.in.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1734696000">- Update to version 4.5.0:
  * Conversion of CFITSIO configure/build files to better conform
    with automake and libtool.
  * Bug fix for case of bit column output in string format on
    clang compilers with high optimization.
  * Added compiler macro support to improve builds on loongarch64
    and on Gnu/Hurd kernels.
  * Bug fix to fitsverify utility.
- Drop upstreamed patches:
  * cfitsio-cmake-allow-user-specified-incdir.patch
  * cfitsio-cmake-lowercase-util-names.patch
  * cfitsio-cmake-match-autotools-soversion.patch</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1742558400">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS on cmake4</changelog>
</package>
<package pkgid="2d90329bc660f97330f1e93e3d403277ea9fcd96d2f481afaf95a089d2ed382677742cded34efaa0445f033934460d4ebb9ec82d731c5be3f0f71803b01c1c75" name="cfitsio-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="bp160.1.8"/>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1594036800">- Update to version 3.480:
  * Now can handle parentheses in path names rather than
    automatically interpreting them as output file specifiers.
  * Fixed bug in imcompress.c that wasn't properly handling
    conversion between float and double types when reading from a
    gzip compressed float or double image.
  * Fixed bug that was preventing use of bracket and parentheses
    symbols in pathnames when opening multiple READWRITE files,
    even when requesting no-extended-syntax usage. *This fix
    necessitates a library interface version number change.
  * Fixed bug in ffmnhd / fits_movnam_hdu to properly handle
    wildcard syntax.
  * Fixed bug in fits_open_extlist to handle filename[EXT] syntax
    properly.  The hdutype parameter may now be null.  More
    documentaion for this function is in cfitsio.tex.
  * Added new function fits_copy_hdutab to create a new table with
    the same structure as an existing table.
  * fits_copy_col / ffcpcl handles long long integer data types
    more natively to prevent precision loss.
  * histo.c routines now recognize integer columns that have been
    scaled by TSCALn keywords and may be closer to floating point
    type.
  * Added backward compatibility for very old Rice compressed files
    which were not using the ZVAL2 keyword in the way that later
    became standard.
  * Change made to cfitsio.pc.in to prevent forcing downstream
    libraries to link against cfitsio's dependencies when using
    pkgconfig.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 3.490:
  - Fix to imcompress.c.  It now turns off quantization if ZSCALE
    and ZZERO columns are missing.  Treatment will be the same as
    if ZQUANTIZ were set to 'NONE', even if ZQUANTIZ is present
    and set to something else.
  - Added mutex to fits_execute_template() function so that the
    creation of files using ASCII templates will be thread safe.
  - In fpack when using -table flag, replaced warning message with a
    more detailed description mentioning FITS format update.
  - Added flag to CMake builds to disable curl dependency.  Also
    only add CURL_LIBRARIES to CMake link target if curl is found.
  - Minor adjustment to download progress output.</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1627819200">- Update to version 4.0.0:
  - Removed separate directory for zlib/gzip code, and updated
    configuration to check for zlib on the user's system
    (required). When use of cURL is enabled, it may also pull in
    zlib such that user applications may not need to link with it
    separately.
  - Changed version numbering to 3-field format.
  - Added new calculator functions SETNULL(x,y) to allow
    substitution of NULL values into tables, and GTIOVERLAP() for
    calculating the amount of GTI overlap exposure for a time bin.
  - Fix added for proper handling of string columns with zero
    repeat count.
  - Fix to column filtering expressions which write #NULL values to
    columns of type (J) format.
  - Fix to memory clearing when using polygon shapes in region
    files.
  - Fix to fits_str2time function so that it now flags a particular
    case of bad syntax which was previously getting through.
  - In ffgclb and ffpclb (read/write byte columns), the
    "undocumented" feature of being able to transfer columns 'A'
    string columnss as byte arrays is now handled correctly, with
    improved error checking via updates to ffgcprll.  More
    documentation on string handling is in cfitsio.tex.
  - Fix bug in 'colfilter' functionality.  When performing a
    column deletion of the form -COLNAM*, and multiple matches
    existed, then none of the matches got deleted.  Now the
    first is deleted as expected.
  - Improved handling of corner case in ffpkn functions.
  - In ffgky, modified TULONG case to allow it to read unsigned
    values greater than the 8-byte signed limit.
  - Fix to parsing of corner case of extended file syntax.
  - Major updates to CMake configuration.
- Removed cfitsio-zlib.patch (not needed anynore).</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1648555200">- Update to version 4.1.0:
  * Calls to the zlib inflate() function in zcompress.c now handle
    the Z_BUF_ERROR return value rather than exiting.
  * The SUBTRACTIVE_DITHER_2 option has been removed when using the
    HCOMPRESS algorithm.
  * Updated fits_get_version function to return a float calculated
    from 3 version fields.
  * Added handling of SBYTE_IMG and ULONGLONG_IMG types to the
    fits_resize_img function.
  * Updates made to C/Fortran interfacing in cfortran.h and
    f77_wrap.h specifically driven by new Mac/ARM architecture.
  * Fix to the fits_insert_col functions to handle columns with
    TULONGLONG data.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670760000">- Update to version 4.2.0:
  - This release includes patches to security vulnerabilities.
    We strongly encourage this upgrade, particularly for those
    running CFITSIO in web accessible applications.
  - Fix to fits_read_key function, which was failing to properly
    read keywords declared type TUINT on compilers where
    sizeof(int) = sizeof(long).
  - Added new functions fits_read_cols and fits_write_cols to
    efficiently read or write multiple columns in a single
    function call
  - Added new function fits_copy_selrows to copy only selected
    rows, such as the selected rows returned by fits_find_rows
  - Added new calculator functions ERF(X), ERFC(X) and GAMMA(X),
    which are mathematical special functions of the same name
  - Added new calculator function GTIFIND() which reports which
    GTI row brackets a given time sample
  - Added new calculator functions which operate upon vector table
    values NAXIS(V), NAXES(V,n), ELEMENTNUM(V) and AXISELEM(V,n),
    and ARRAY(X,d) which promotes scalar X to a vector or array
    with given dimensions.
  - The CFITSIO histogramming code now handles binning by any
    arbitrary calculator expression rather than just a column name.
    Both the binned columns as well as the optional weights may be
    calculator expressions, enclosed in parentheses.
  - Binning of vector columns or expressions is now supported, as
    long as all binned inputs (as well as the optional weighting)
    have the same vector dimensions. Binning of variable-length
    columns remains unsupported.
  - A bug that caused histogram weights from columns that are null
    values to be tallied along with non-null values has been fixed.
  - The CFITSIO calculator and histogramming functionality is now
    fully reentrant and does not require multithreading interlocks.
  - A long-standing segmentation fault bug in the histogramming
    code related to binning any value using the "reciprocal" /XXXX
    notation has been fixed.
  - Added mutex locks for thread safety in ftgiou and ftfiou.
  - Added several Fortran wrappers to support image read/write when
    'fpixel' and 'nelements' are 8-byte integers.
  - Fixed bug which was adding spaces to some cases of long string
    key value output.
- Enable SSE2 on x86_64
- Package fitscopy util
- Enable bzip2 support</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1690372800">- Update to version 4.3.0:
  * Bug fix to fits_make_hist[d] that was introduced in 4.2.0.
  * Added overflow checking for case of reading images with 8-byte
    float values into 4-byte float arrays.
  * fits_write_key_longstr now handles case of writing a long
    keyword in combination with a long keyword value string.
  * Add conversion of French locale comma-to-period in corner
    cases appearing in ffr2e and ffd2e functions.
  * Increased the precision when writing version number to
    User-Agent strings for http connections.  This is needed to
    fully conform to 3-field version string format.
  * Bug fix to GTIOVERLAP() calculator function, which was being
    treated as a boolean value in expressions, and is now
    correctly treated as a floating point result.
  * Bug fix to ARRAY() calculator function, which caused a memory
    overflow error
  * Enhancement to the ARRAY function, such that ARRAY(V,d) can
    apply new dimensions to V, as long as the total number of
    array/vector elements does not change.
  * Enhancement of long string keyword read/write functions to
    fully conform with FITS standard specifications for multi-line
    value and comment strings. Two new functions have been added
    to implement this: fits_get_key_com_strlen and
    fits_read_string_key_com.
- Make doc package noarch.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 4.3.1:
  * Improve longstring keyword functions</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718280000">- Update to version 4.4.0:
  * Reorganization of helper utility code; added fitsverify
  * CMakeLists.txt: Changed install location of
    cfitsio-targets.cmake to conform with the one listed in
    cfitsio-config.cmake.in (i.e.  including the extra "cfitsio"
    subdir of lib/cmake).
  * calculator functions that read GTIs do more correct validity
    checking of GTI input files
  * fits_insert_rows now works if input table starts with both no
    rows and no columns
  * Can now write internal memory files of size &gt; 2^32 directly to
    a gzip-compressed output file.
  * Added support for unsigned long long types to fits_update_key.
  * Added ability for Windows builds to handle UTF-8 needed for
    reading filenames with non-ASCII characters.
  * Added 2-byte int test to speed.c utility.
  * Made fix to http file handler to expand the allowed URL
    length.
- Change License tag to NASA-1.3 in keeping with upstream.
- Switch to cmake+ninja for build.
- Switch BuildRequires to pkgconfig based packages where possible.
- Add a bunch of cmake build related patches to make the output
  close to that generated by autotools:
  * cfitsio-cmake-devel-scripts-destination.patch: Fix destination of
    pkgconfig and cmake scripts from /usr/lib to %{_libdir}.
  * cfitsio-cmake-allow-user-specified-incdir.patch: Allow specifying
    user-defined include dir into which to install header files.
  * cfitsio-cmake-lowercase-util-names.patch: Use lowercase
    names for utility binaries when building using cmake (same as
    autotools)
  * cfitsio-cmake-match-autotools-soversion.patch: Same so
    number as used in configure.in.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1734696000">- Update to version 4.5.0:
  * Conversion of CFITSIO configure/build files to better conform
    with automake and libtool.
  * Bug fix for case of bit column output in string format on
    clang compilers with high optimization.
  * Added compiler macro support to improve builds on loongarch64
    and on Gnu/Hurd kernels.
  * Bug fix to fitsverify utility.
- Drop upstreamed patches:
  * cfitsio-cmake-allow-user-specified-incdir.patch
  * cfitsio-cmake-lowercase-util-names.patch
  * cfitsio-cmake-match-autotools-soversion.patch</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1742558400">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS on cmake4</changelog>
</package>
<package pkgid="82df95f8940f90a49dce69c9b8f992df38fd36c31bbf545fb7f55ba456f7ca54deb30dca50617151984df09be1c55a1e1e290eaf359f5d2768fb3e086c1e163c" name="cfitsio-devel-doc" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="bp160.1.8"/>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1594036800">- Update to version 3.480:
  * Now can handle parentheses in path names rather than
    automatically interpreting them as output file specifiers.
  * Fixed bug in imcompress.c that wasn't properly handling
    conversion between float and double types when reading from a
    gzip compressed float or double image.
  * Fixed bug that was preventing use of bracket and parentheses
    symbols in pathnames when opening multiple READWRITE files,
    even when requesting no-extended-syntax usage. *This fix
    necessitates a library interface version number change.
  * Fixed bug in ffmnhd / fits_movnam_hdu to properly handle
    wildcard syntax.
  * Fixed bug in fits_open_extlist to handle filename[EXT] syntax
    properly.  The hdutype parameter may now be null.  More
    documentaion for this function is in cfitsio.tex.
  * Added new function fits_copy_hdutab to create a new table with
    the same structure as an existing table.
  * fits_copy_col / ffcpcl handles long long integer data types
    more natively to prevent precision loss.
  * histo.c routines now recognize integer columns that have been
    scaled by TSCALn keywords and may be closer to floating point
    type.
  * Added backward compatibility for very old Rice compressed files
    which were not using the ZVAL2 keyword in the way that later
    became standard.
  * Change made to cfitsio.pc.in to prevent forcing downstream
    libraries to link against cfitsio's dependencies when using
    pkgconfig.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 3.490:
  - Fix to imcompress.c.  It now turns off quantization if ZSCALE
    and ZZERO columns are missing.  Treatment will be the same as
    if ZQUANTIZ were set to 'NONE', even if ZQUANTIZ is present
    and set to something else.
  - Added mutex to fits_execute_template() function so that the
    creation of files using ASCII templates will be thread safe.
  - In fpack when using -table flag, replaced warning message with a
    more detailed description mentioning FITS format update.
  - Added flag to CMake builds to disable curl dependency.  Also
    only add CURL_LIBRARIES to CMake link target if curl is found.
  - Minor adjustment to download progress output.</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1627819200">- Update to version 4.0.0:
  - Removed separate directory for zlib/gzip code, and updated
    configuration to check for zlib on the user's system
    (required). When use of cURL is enabled, it may also pull in
    zlib such that user applications may not need to link with it
    separately.
  - Changed version numbering to 3-field format.
  - Added new calculator functions SETNULL(x,y) to allow
    substitution of NULL values into tables, and GTIOVERLAP() for
    calculating the amount of GTI overlap exposure for a time bin.
  - Fix added for proper handling of string columns with zero
    repeat count.
  - Fix to column filtering expressions which write #NULL values to
    columns of type (J) format.
  - Fix to memory clearing when using polygon shapes in region
    files.
  - Fix to fits_str2time function so that it now flags a particular
    case of bad syntax which was previously getting through.
  - In ffgclb and ffpclb (read/write byte columns), the
    "undocumented" feature of being able to transfer columns 'A'
    string columnss as byte arrays is now handled correctly, with
    improved error checking via updates to ffgcprll.  More
    documentation on string handling is in cfitsio.tex.
  - Fix bug in 'colfilter' functionality.  When performing a
    column deletion of the form -COLNAM*, and multiple matches
    existed, then none of the matches got deleted.  Now the
    first is deleted as expected.
  - Improved handling of corner case in ffpkn functions.
  - In ffgky, modified TULONG case to allow it to read unsigned
    values greater than the 8-byte signed limit.
  - Fix to parsing of corner case of extended file syntax.
  - Major updates to CMake configuration.
- Removed cfitsio-zlib.patch (not needed anynore).</changelog>
  <changelog author="Asterios Dramis &lt;asterios.dramis@gmail.com&gt;" date="1648555200">- Update to version 4.1.0:
  * Calls to the zlib inflate() function in zcompress.c now handle
    the Z_BUF_ERROR return value rather than exiting.
  * The SUBTRACTIVE_DITHER_2 option has been removed when using the
    HCOMPRESS algorithm.
  * Updated fits_get_version function to return a float calculated
    from 3 version fields.
  * Added handling of SBYTE_IMG and ULONGLONG_IMG types to the
    fits_resize_img function.
  * Updates made to C/Fortran interfacing in cfortran.h and
    f77_wrap.h specifically driven by new Mac/ARM architecture.
  * Fix to the fits_insert_col functions to handle columns with
    TULONGLONG data.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1670760000">- Update to version 4.2.0:
  - This release includes patches to security vulnerabilities.
    We strongly encourage this upgrade, particularly for those
    running CFITSIO in web accessible applications.
  - Fix to fits_read_key function, which was failing to properly
    read keywords declared type TUINT on compilers where
    sizeof(int) = sizeof(long).
  - Added new functions fits_read_cols and fits_write_cols to
    efficiently read or write multiple columns in a single
    function call
  - Added new function fits_copy_selrows to copy only selected
    rows, such as the selected rows returned by fits_find_rows
  - Added new calculator functions ERF(X), ERFC(X) and GAMMA(X),
    which are mathematical special functions of the same name
  - Added new calculator function GTIFIND() which reports which
    GTI row brackets a given time sample
  - Added new calculator functions which operate upon vector table
    values NAXIS(V), NAXES(V,n), ELEMENTNUM(V) and AXISELEM(V,n),
    and ARRAY(X,d) which promotes scalar X to a vector or array
    with given dimensions.
  - The CFITSIO histogramming code now handles binning by any
    arbitrary calculator expression rather than just a column name.
    Both the binned columns as well as the optional weights may be
    calculator expressions, enclosed in parentheses.
  - Binning of vector columns or expressions is now supported, as
    long as all binned inputs (as well as the optional weighting)
    have the same vector dimensions. Binning of variable-length
    columns remains unsupported.
  - A bug that caused histogram weights from columns that are null
    values to be tallied along with non-null values has been fixed.
  - The CFITSIO calculator and histogramming functionality is now
    fully reentrant and does not require multithreading interlocks.
  - A long-standing segmentation fault bug in the histogramming
    code related to binning any value using the "reciprocal" /XXXX
    notation has been fixed.
  - Added mutex locks for thread safety in ftgiou and ftfiou.
  - Added several Fortran wrappers to support image read/write when
    'fpixel' and 'nelements' are 8-byte integers.
  - Fixed bug which was adding spaces to some cases of long string
    key value output.
- Enable SSE2 on x86_64
- Package fitscopy util
- Enable bzip2 support</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1690372800">- Update to version 4.3.0:
  * Bug fix to fits_make_hist[d] that was introduced in 4.2.0.
  * Added overflow checking for case of reading images with 8-byte
    float values into 4-byte float arrays.
  * fits_write_key_longstr now handles case of writing a long
    keyword in combination with a long keyword value string.
  * Add conversion of French locale comma-to-period in corner
    cases appearing in ffr2e and ffd2e functions.
  * Increased the precision when writing version number to
    User-Agent strings for http connections.  This is needed to
    fully conform to 3-field version string format.
  * Bug fix to GTIOVERLAP() calculator function, which was being
    treated as a boolean value in expressions, and is now
    correctly treated as a floating point result.
  * Bug fix to ARRAY() calculator function, which caused a memory
    overflow error
  * Enhancement to the ARRAY function, such that ARRAY(V,d) can
    apply new dimensions to V, as long as the total number of
    array/vector elements does not change.
  * Enhancement of long string keyword read/write functions to
    fully conform with FITS standard specifications for multi-line
    value and comment strings. Two new functions have been added
    to implement this: fits_get_key_com_strlen and
    fits_read_string_key_com.
- Make doc package noarch.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704542400">- Update to version 4.3.1:
  * Improve longstring keyword functions</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718280000">- Update to version 4.4.0:
  * Reorganization of helper utility code; added fitsverify
  * CMakeLists.txt: Changed install location of
    cfitsio-targets.cmake to conform with the one listed in
    cfitsio-config.cmake.in (i.e.  including the extra "cfitsio"
    subdir of lib/cmake).
  * calculator functions that read GTIs do more correct validity
    checking of GTI input files
  * fits_insert_rows now works if input table starts with both no
    rows and no columns
  * Can now write internal memory files of size &gt; 2^32 directly to
    a gzip-compressed output file.
  * Added support for unsigned long long types to fits_update_key.
  * Added ability for Windows builds to handle UTF-8 needed for
    reading filenames with non-ASCII characters.
  * Added 2-byte int test to speed.c utility.
  * Made fix to http file handler to expand the allowed URL
    length.
- Change License tag to NASA-1.3 in keeping with upstream.
- Switch to cmake+ninja for build.
- Switch BuildRequires to pkgconfig based packages where possible.
- Add a bunch of cmake build related patches to make the output
  close to that generated by autotools:
  * cfitsio-cmake-devel-scripts-destination.patch: Fix destination of
    pkgconfig and cmake scripts from /usr/lib to %{_libdir}.
  * cfitsio-cmake-allow-user-specified-incdir.patch: Allow specifying
    user-defined include dir into which to install header files.
  * cfitsio-cmake-lowercase-util-names.patch: Use lowercase
    names for utility binaries when building using cmake (same as
    autotools)
  * cfitsio-cmake-match-autotools-soversion.patch: Same so
    number as used in configure.in.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1734696000">- Update to version 4.5.0:
  * Conversion of CFITSIO configure/build files to better conform
    with automake and libtool.
  * Bug fix for case of bit column output in string format on
    clang compilers with high optimization.
  * Added compiler macro support to improve builds on loongarch64
    and on Gnu/Hurd kernels.
  * Bug fix to fitsverify utility.
- Drop upstreamed patches:
  * cfitsio-cmake-allow-user-specified-incdir.patch
  * cfitsio-cmake-lowercase-util-names.patch
  * cfitsio-cmake-match-autotools-soversion.patch</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1742558400">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS on cmake4</changelog>
</package>
<package pkgid="f55a3ddcc953129991a5d0298609608aa781d1c483f920780d78c5cfd41f3349636deaec6a2d344d7747b2164498c2100456093f208f21199bca0922875bc6a8" name="cg3" arch="x86_64">
  <version epoch="0" ver="1.4.6" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1410350400">- Initial package for build.opensuse.org (version 0.9.8+svn10138)
- Add libcg-private.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602676800">- Update to snapshot 1.3.1+svn14806
- Remove libcg-private.diff (obsolete)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1635422400">- Update to release 1.3.2
  * No changelog provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649592000">- Update to release 1.3.6
  * No changelog provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Update to release 1.3.7
  * Don't hardcode Perl path</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1665144000">- Update to release 1.3.9
  * Add cg-sort and untrace man pages</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685620800">- Update to release 1.4.5
  * Nested rules keyword "With"
  * Added rule flags NoMapped and NoParent which will cause the
    rule to skip mapped readings or cohorts with a dependency
    parent.
  * Cmdline flag --dep-absolute will cause dependency to be
    written with globally unique cohort IDs
  * Section headers can now have rule flags, which will then
    apply to all rules in that section.
  * Cmdline flag -B will inhibit and trim whitespace
    between/after cohorts.
  * Cmdline flag -T will delimit based on a regex of non-CG data.
  * Environment variables CG3_DEFAULT and CG3_OVERRIDE can set
    and override CG-3 cmdline parameters.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691150400">- Update to release 1.4.6
  * Use FindPython instead of FindPythonInterp for CMake &gt;= 3.12.0</changelog>
</package>
<package pkgid="7e65a69fb91be9e42fef08da01f65dfad3f7f681551ad416bdf5c70cc5b1893e140fd1b23552ec7824282ec698c21664e8782de59ec87663d50fd0ef3d7e386f" name="cg3-devel" arch="x86_64">
  <version epoch="0" ver="1.4.6" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1410350400">- Initial package for build.opensuse.org (version 0.9.8+svn10138)
- Add libcg-private.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602676800">- Update to snapshot 1.3.1+svn14806
- Remove libcg-private.diff (obsolete)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1635422400">- Update to release 1.3.2
  * No changelog provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649592000">- Update to release 1.3.6
  * No changelog provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Update to release 1.3.7
  * Don't hardcode Perl path</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1665144000">- Update to release 1.3.9
  * Add cg-sort and untrace man pages</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685620800">- Update to release 1.4.5
  * Nested rules keyword "With"
  * Added rule flags NoMapped and NoParent which will cause the
    rule to skip mapped readings or cohorts with a dependency
    parent.
  * Cmdline flag --dep-absolute will cause dependency to be
    written with globally unique cohort IDs
  * Section headers can now have rule flags, which will then
    apply to all rules in that section.
  * Cmdline flag -B will inhibit and trim whitespace
    between/after cohorts.
  * Cmdline flag -T will delimit based on a regex of non-CG data.
  * Environment variables CG3_DEFAULT and CG3_OVERRIDE can set
    and override CG-3 cmdline parameters.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691150400">- Update to release 1.4.6
  * Use FindPython instead of FindPythonInterp for CMake &gt;= 3.12.0</changelog>
</package>
<package pkgid="8966386bf9f4c3ae1efddc0ae173d8b01cb6bcb7e16c93bd46105a7de8a4dc7b9a8feb5b779f373ccb72916a9fa1fd71da72db4d80ea5a8ae817ca6dc6b3c090" name="cgal-demo-examples-devel" arch="noarch">
  <version epoch="0" ver="5.6.1" rel="bp160.1.10"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629288000">- Update to 5.2.3:
  See https://github.com/CGAL/cgal/issues?q=label%3AMerged_in_5.2.3+-label%3AMerged_in_5.2.2</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629288001">- Update to 5.3:
  General changes:
  * The support for the compiled version of CGAL is dropped.
    Only the header-only version is supported.
  Quadtrees, Octrees, and Orthtrees (new package):
  * This package implements a tree data structure in which each
    node encloses a hypercubic section of space and each non-leave
    node has hypercubic children whose edge lengths are half its
    edge length.  Such a data structure is known as a quadtree in 2D,
    an octree in 3D, and is generalized as an "orthtree" in higher dimensions.
  Triangulations on the Sphere (new package):
  * This package enables the construction and manipulation of Delaunay
    triangulations on the 2-sphere.  Triangulations are built incrementally
    and can be modified by insertion or removal of vertices.  Point location
    querying and primitives to build the dual Voronoi diagram are provided.
  File Input / Output:
  * Point set, polygon soup, and polygon mesh file I/O functions have been
    harmonized and documented:
  * Point set I/O functions can be found in the packages Point_set_processing_3,
    and Point_set_3.
  * Polygon mesh I/O functions can be found in the package BGL.
  * Polygon soup I/O can be found in the package Stream_support.
  * A comprehensive list of the supported file formats is available in the
    Stream_support package here; inversely, the following page can be used to
    find out which CGAL data structures can be used given a specific file format.
  2D and 3D Linear Geometry Kernel:
  * Added is_translation(), is_scaling(), is_reflection(), and is_rotation()
    to the classes Aff_transformation_2 and Aff_transformation_3, which enable
    determining if the transformations use a specialized representation internally.
  2D Regularized Boolean Set-Operations:
  * Added documentation for the free functions oriented_side(const Point_2&amp; p, ....)
    that accept a point and a polygon.
  * Documentation has been improved across the whole package.
  Polygon Mesh Processing:
  * Added the class CGAL::Polyhedral_envelope,
    providing a way to quickly check if a primitive (point, segment, or triangle)
    is within a polyhedral envelope around a set of triangles. It is based on the work of
    Bolun Wang, Teseo Schneider, Yixin Hu, Marco Attene, and Daniele Panozzo.
    "Exact and efficient polyhedral envelope containment check." (ACM Trans. Graph., 39-4, July 2020).
  * Added more functions in the visitor of the corefinement based methods
    to track all edge creations.
  Surface Mesh Topology:
  * Added the function CGAL::Surface_mesh_topology::Curves_on_surface_topology::
    is_homotopic_to_simple_cycle(), which can be used to determine whehter
    a closed path on a surface mesh can be continously
    transformed to a cycle without self intersection.
  Surface Mesh Simplification:
  * Added a filtering mechanism so that costly tests get only applied to the
    next candidate for the edge collapse.
  * Added the class Polyhedral_envelope_filter, which enables to perform
    mesh simplification inside a polyhedral envelope of the input mesh.
  2D Polyline Simplification:
  * When polylines have common subsequences of vertices, these subsequences
    may now be simplifified simultaneously.
  dD Triangulations:
  * Added the function insert_if_in_star() to the class
    CGAL::Regular_triangulation, which enables users to insert a point p
    in a regular triangulation on the condition that p appears post-insertion
    in the star of a user-specified, existing vertex.
  2D and 3D Alpha Shapes:
  * Breaking change: The following deprecated classes have been removed:
    Alpha_shape_euclidean_traits_2, Weighted_alpha_shape_euclidean_traits_2,
    Alpha_shape_euclidean_traits_3, and Weighted_alpha_shape_euclidean_traits_3.
    All CGAL kernel can be used directly as models of the concepts of the
    2D and 3D Alpha Shape packages.
  Classification:
  * Breaking change: the support for TensorFlow has been dropped; the
    classifier CGAL::TensorFlow::Neural_network_classifier has been removed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 5.4:
  See https://github.com/CGAL/cgal/releases/tag/v5.4</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654603200">- Update to 5.4.1:
  See https://github.com/CGAL/cgal/pulls?utf8=%E2%9C%93&amp;q=label%3AMerged_in_5.4.1</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1669291200">- Update to 5.5.1
  * bug fix release compared to 5.5.0
  * https://github.com/CGAL/cgal/pulls?q=label%3AMerged_in_5.4.3+-label%3AMerged_in_5.4.2
- Release 5.5.0
  * The CGAL Open Source Project is pleased to announce the release
    5.5 of CGAL, the Computational Geometry Algorithms Library.
  [#]# 3D Alpha Wrapping (new package)
  * This component takes a 3D triangle mesh, soup, or point set as
    input, and generates a valid (watertight, intersection-free,
    and combinatorially 2-manifold) surface triangle mesh that
    contains the input. The algorithm proceeds by shrink-wrapping
    and refining a 3D Delaunay triangulation, starting from a loose
    bounding box of the input. Two user-defined parameters, alpha
    and offset, offer control over the maximum size of cavities
    where the shrink-wrapping process can enter, and the tightness
    of the final surface mesh to the input, respectively. Once
    combined, these parameters provide a means to trade fidelity to
    the input for complexity of the output.
  * See also the announcement page.
    https://www.cgal.org/2022/05/18/alpha_wrap/
  [#]# 2D Straight Skeleton and Polygon Offsetting (breaking change)
  * Fix the output of the function
    CGAL::create_exterior_skeleton_and_offset_polygons_with_holes_2()
    to not take into account the offset of the outer frame.
  * Fix the computation of the exterior offset of a polygon with
    holes that was not computing the offset of the holes
  [#]# 3D Convex Hulls
  * Added an overload of the function CGAL::convex_hull_3(), which
    writes the result in an indexed triangle set.
  [#]# 2D Polygons
  * Add vertex, edge, and hole ranges.
  * The concept GeneralPolygonWithHoles_2 now requires the nested
    type Polygon_2 instead of General_polygon_2.
  [#]# 2D Regularized Boolean Set-Operations
  * The concept GeneralPolygonSetTraits_2 now requires the nested
    type Construct_polygon_with_holes_2 instead of
    Construct_general_polygon_with_holes_2.
  [#]# Combinatorial Maps
  * Removed old code deprecated in CGAL 4.9 and 4.10 (global
    functions, and information associated with darts).
  [#]# 2D Arrangements
  * Fixed the intersect_2, compare_y_at_x_right, and
    compare_y_at_x_left function objects of the traits class
    template Arr_geodesic_arc_on_sphere_traits_2 that handles
    geodesic arcs on sphere and applied a small syntactical fix to
    the tracing traits.
  [#]# Tetrahedral Mesh Generation
  * Added the function remove_isolated_vertices() as a
    post-processing step for the tetrahedral mesh generation.
  [#]# Polygon Mesh Processing
  * Added the function
    CGAL::Polygon_mesh_processing::orient_triangle_soup_with_reference_triangle_soup(),
    which enables re-orienting the faces of a triangle soup based
    on the orientation of the nearest face in a   reference
    triangle soup.
  * Added the function
    CGAL::Polygon_mesh_processing::compatible_orientations(), which
    enables to retrieve the (in)compatibility of orientations of
    faces from different connected components.
  * Added the function
    CGAL::Polygon_mesh_processing::tangential_relaxation(), which
    applies an area-based tangential mesh smoothing to the vertices
    of a surface triangle mesh.
  * Added the named parameter visitor to the function
    triangulate_hole(), which enables to track progress with
    callbacks.
  * Added more functions in the visitor of the corefinement based
    methods to track progress.
  [#]# Surface Mesh Simplification
  * Introduced four variations of the Garland-Heckbert
    simplification algorithm based on the probabilistic approach of
    Trettner and Kobbelt (Fast and Robust QEF Minimization using
    Probabilistic Quadrics):   GarlandHeckbert_plane_policies,
    GarlandHeckbert_probabilistic_plane_policies,
    GarlandHeckbert_triangle_policies, and
    GarlandHeckbert_probabilistic_triangle_policies.
  * The class GarlandHeckbert_policies has been deprecated,
    GarlandHeckbert_plane_policies replaces it.
  [#]# Point Set Processing
  * A new optional named parameter, min_points_per_cell has been
    added to grid_simplify_point_set(). By adding a minimal number
    of points in a cell such that a point is retained, one can also
    filter out low   density areas and outliers: in the case of
    densely sampled point clouds, this yields better results than
    using grid simplification and then outlier removal, while being
    very vast. The default value is 1 to   keep the previous
    behavior as default.
  [#]# dD Spatial Searching
  * Added the member function write_graphviz() to the class Kd_tree
    that writes the tree in a stream in the Graphviz format.
  [#]# CGAL and the Boost Graph Library (BGL)
  * Added the function invert_selection() in the class
    Face_filtered_graph, which toggles the selected status of a
    graph: selected faces are deselected, and unselected faces are
    selected.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1677672000">- Update to 5.5.2:
  * https://github.com/CGAL/cgal/issues?q=sort%3Aupdated-desc+label%3AMerged_in_5.5.2+-label%3AMerged_in_5.5.1</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1680436800">- Use gcc11-c++ for openSUSE Leap, enables building</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804800">- Update to 5.5.3:
  * https://github.com/CGAL/cgal/issues?q=sort%3Aupdated-desc+label%3AMerged_in_5.5.2+-label%3AMerged_in_5.5.1</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804801">- Update to 5.6:
  * See https://github.com/CGAL/cgal/releases/tag/v5.6</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1709121600">- Update to 5.6.1
  * CGAL-5.6.1 is a bug-fix release.
    See on Github the list of bugs that were solved since CGAL-5.6.
    https://github.com/CGAL/cgal/releases/tag/v5.6.1
- Fix documentation packaging: Tumbleweed uses a different default
  destination than older distributions now. Force doc subdir.</changelog>
</package>
<package pkgid="df7b7dbd36336bc47a629b305b1e32f09ef502e60276dd015d818c7ea8cfab5fa2049020ac26330eab5212f7af6b0bc5d24b018ee2700f03b77f24b67116f2ce" name="cgal-devel" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="bp160.1.10"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629288000">- Update to 5.2.3:
  See https://github.com/CGAL/cgal/issues?q=label%3AMerged_in_5.2.3+-label%3AMerged_in_5.2.2</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629288001">- Update to 5.3:
  General changes:
  * The support for the compiled version of CGAL is dropped.
    Only the header-only version is supported.
  Quadtrees, Octrees, and Orthtrees (new package):
  * This package implements a tree data structure in which each
    node encloses a hypercubic section of space and each non-leave
    node has hypercubic children whose edge lengths are half its
    edge length.  Such a data structure is known as a quadtree in 2D,
    an octree in 3D, and is generalized as an "orthtree" in higher dimensions.
  Triangulations on the Sphere (new package):
  * This package enables the construction and manipulation of Delaunay
    triangulations on the 2-sphere.  Triangulations are built incrementally
    and can be modified by insertion or removal of vertices.  Point location
    querying and primitives to build the dual Voronoi diagram are provided.
  File Input / Output:
  * Point set, polygon soup, and polygon mesh file I/O functions have been
    harmonized and documented:
  * Point set I/O functions can be found in the packages Point_set_processing_3,
    and Point_set_3.
  * Polygon mesh I/O functions can be found in the package BGL.
  * Polygon soup I/O can be found in the package Stream_support.
  * A comprehensive list of the supported file formats is available in the
    Stream_support package here; inversely, the following page can be used to
    find out which CGAL data structures can be used given a specific file format.
  2D and 3D Linear Geometry Kernel:
  * Added is_translation(), is_scaling(), is_reflection(), and is_rotation()
    to the classes Aff_transformation_2 and Aff_transformation_3, which enable
    determining if the transformations use a specialized representation internally.
  2D Regularized Boolean Set-Operations:
  * Added documentation for the free functions oriented_side(const Point_2&amp; p, ....)
    that accept a point and a polygon.
  * Documentation has been improved across the whole package.
  Polygon Mesh Processing:
  * Added the class CGAL::Polyhedral_envelope,
    providing a way to quickly check if a primitive (point, segment, or triangle)
    is within a polyhedral envelope around a set of triangles. It is based on the work of
    Bolun Wang, Teseo Schneider, Yixin Hu, Marco Attene, and Daniele Panozzo.
    "Exact and efficient polyhedral envelope containment check." (ACM Trans. Graph., 39-4, July 2020).
  * Added more functions in the visitor of the corefinement based methods
    to track all edge creations.
  Surface Mesh Topology:
  * Added the function CGAL::Surface_mesh_topology::Curves_on_surface_topology::
    is_homotopic_to_simple_cycle(), which can be used to determine whehter
    a closed path on a surface mesh can be continously
    transformed to a cycle without self intersection.
  Surface Mesh Simplification:
  * Added a filtering mechanism so that costly tests get only applied to the
    next candidate for the edge collapse.
  * Added the class Polyhedral_envelope_filter, which enables to perform
    mesh simplification inside a polyhedral envelope of the input mesh.
  2D Polyline Simplification:
  * When polylines have common subsequences of vertices, these subsequences
    may now be simplifified simultaneously.
  dD Triangulations:
  * Added the function insert_if_in_star() to the class
    CGAL::Regular_triangulation, which enables users to insert a point p
    in a regular triangulation on the condition that p appears post-insertion
    in the star of a user-specified, existing vertex.
  2D and 3D Alpha Shapes:
  * Breaking change: The following deprecated classes have been removed:
    Alpha_shape_euclidean_traits_2, Weighted_alpha_shape_euclidean_traits_2,
    Alpha_shape_euclidean_traits_3, and Weighted_alpha_shape_euclidean_traits_3.
    All CGAL kernel can be used directly as models of the concepts of the
    2D and 3D Alpha Shape packages.
  Classification:
  * Breaking change: the support for TensorFlow has been dropped; the
    classifier CGAL::TensorFlow::Neural_network_classifier has been removed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 5.4:
  See https://github.com/CGAL/cgal/releases/tag/v5.4</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654603200">- Update to 5.4.1:
  See https://github.com/CGAL/cgal/pulls?utf8=%E2%9C%93&amp;q=label%3AMerged_in_5.4.1</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1669291200">- Update to 5.5.1
  * bug fix release compared to 5.5.0
  * https://github.com/CGAL/cgal/pulls?q=label%3AMerged_in_5.4.3+-label%3AMerged_in_5.4.2
- Release 5.5.0
  * The CGAL Open Source Project is pleased to announce the release
    5.5 of CGAL, the Computational Geometry Algorithms Library.
  [#]# 3D Alpha Wrapping (new package)
  * This component takes a 3D triangle mesh, soup, or point set as
    input, and generates a valid (watertight, intersection-free,
    and combinatorially 2-manifold) surface triangle mesh that
    contains the input. The algorithm proceeds by shrink-wrapping
    and refining a 3D Delaunay triangulation, starting from a loose
    bounding box of the input. Two user-defined parameters, alpha
    and offset, offer control over the maximum size of cavities
    where the shrink-wrapping process can enter, and the tightness
    of the final surface mesh to the input, respectively. Once
    combined, these parameters provide a means to trade fidelity to
    the input for complexity of the output.
  * See also the announcement page.
    https://www.cgal.org/2022/05/18/alpha_wrap/
  [#]# 2D Straight Skeleton and Polygon Offsetting (breaking change)
  * Fix the output of the function
    CGAL::create_exterior_skeleton_and_offset_polygons_with_holes_2()
    to not take into account the offset of the outer frame.
  * Fix the computation of the exterior offset of a polygon with
    holes that was not computing the offset of the holes
  [#]# 3D Convex Hulls
  * Added an overload of the function CGAL::convex_hull_3(), which
    writes the result in an indexed triangle set.
  [#]# 2D Polygons
  * Add vertex, edge, and hole ranges.
  * The concept GeneralPolygonWithHoles_2 now requires the nested
    type Polygon_2 instead of General_polygon_2.
  [#]# 2D Regularized Boolean Set-Operations
  * The concept GeneralPolygonSetTraits_2 now requires the nested
    type Construct_polygon_with_holes_2 instead of
    Construct_general_polygon_with_holes_2.
  [#]# Combinatorial Maps
  * Removed old code deprecated in CGAL 4.9 and 4.10 (global
    functions, and information associated with darts).
  [#]# 2D Arrangements
  * Fixed the intersect_2, compare_y_at_x_right, and
    compare_y_at_x_left function objects of the traits class
    template Arr_geodesic_arc_on_sphere_traits_2 that handles
    geodesic arcs on sphere and applied a small syntactical fix to
    the tracing traits.
  [#]# Tetrahedral Mesh Generation
  * Added the function remove_isolated_vertices() as a
    post-processing step for the tetrahedral mesh generation.
  [#]# Polygon Mesh Processing
  * Added the function
    CGAL::Polygon_mesh_processing::orient_triangle_soup_with_reference_triangle_soup(),
    which enables re-orienting the faces of a triangle soup based
    on the orientation of the nearest face in a   reference
    triangle soup.
  * Added the function
    CGAL::Polygon_mesh_processing::compatible_orientations(), which
    enables to retrieve the (in)compatibility of orientations of
    faces from different connected components.
  * Added the function
    CGAL::Polygon_mesh_processing::tangential_relaxation(), which
    applies an area-based tangential mesh smoothing to the vertices
    of a surface triangle mesh.
  * Added the named parameter visitor to the function
    triangulate_hole(), which enables to track progress with
    callbacks.
  * Added more functions in the visitor of the corefinement based
    methods to track progress.
  [#]# Surface Mesh Simplification
  * Introduced four variations of the Garland-Heckbert
    simplification algorithm based on the probabilistic approach of
    Trettner and Kobbelt (Fast and Robust QEF Minimization using
    Probabilistic Quadrics):   GarlandHeckbert_plane_policies,
    GarlandHeckbert_probabilistic_plane_policies,
    GarlandHeckbert_triangle_policies, and
    GarlandHeckbert_probabilistic_triangle_policies.
  * The class GarlandHeckbert_policies has been deprecated,
    GarlandHeckbert_plane_policies replaces it.
  [#]# Point Set Processing
  * A new optional named parameter, min_points_per_cell has been
    added to grid_simplify_point_set(). By adding a minimal number
    of points in a cell such that a point is retained, one can also
    filter out low   density areas and outliers: in the case of
    densely sampled point clouds, this yields better results than
    using grid simplification and then outlier removal, while being
    very vast. The default value is 1 to   keep the previous
    behavior as default.
  [#]# dD Spatial Searching
  * Added the member function write_graphviz() to the class Kd_tree
    that writes the tree in a stream in the Graphviz format.
  [#]# CGAL and the Boost Graph Library (BGL)
  * Added the function invert_selection() in the class
    Face_filtered_graph, which toggles the selected status of a
    graph: selected faces are deselected, and unselected faces are
    selected.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1677672000">- Update to 5.5.2:
  * https://github.com/CGAL/cgal/issues?q=sort%3Aupdated-desc+label%3AMerged_in_5.5.2+-label%3AMerged_in_5.5.1</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1680436800">- Use gcc11-c++ for openSUSE Leap, enables building</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804800">- Update to 5.5.3:
  * https://github.com/CGAL/cgal/issues?q=sort%3Aupdated-desc+label%3AMerged_in_5.5.2+-label%3AMerged_in_5.5.1</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804801">- Update to 5.6:
  * See https://github.com/CGAL/cgal/releases/tag/v5.6</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1709121600">- Update to 5.6.1
  * CGAL-5.6.1 is a bug-fix release.
    See on Github the list of bugs that were solved since CGAL-5.6.
    https://github.com/CGAL/cgal/releases/tag/v5.6.1
- Fix documentation packaging: Tumbleweed uses a different default
  destination than older distributions now. Force doc subdir.</changelog>
</package>
<package pkgid="f90e2563b83ebc9b9245d58278eb9f8ded0a5c673d148f242b5c050060e8e3a3e71f96d2c505b38653b433bc88d9149643ba5e6e0856ea975884cea9f3179a48" name="cgal-doc" arch="noarch">
  <version epoch="0" ver="5.6.1" rel="bp160.1.10"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629288000">- Update to 5.2.3:
  See https://github.com/CGAL/cgal/issues?q=label%3AMerged_in_5.2.3+-label%3AMerged_in_5.2.2</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629288001">- Update to 5.3:
  General changes:
  * The support for the compiled version of CGAL is dropped.
    Only the header-only version is supported.
  Quadtrees, Octrees, and Orthtrees (new package):
  * This package implements a tree data structure in which each
    node encloses a hypercubic section of space and each non-leave
    node has hypercubic children whose edge lengths are half its
    edge length.  Such a data structure is known as a quadtree in 2D,
    an octree in 3D, and is generalized as an "orthtree" in higher dimensions.
  Triangulations on the Sphere (new package):
  * This package enables the construction and manipulation of Delaunay
    triangulations on the 2-sphere.  Triangulations are built incrementally
    and can be modified by insertion or removal of vertices.  Point location
    querying and primitives to build the dual Voronoi diagram are provided.
  File Input / Output:
  * Point set, polygon soup, and polygon mesh file I/O functions have been
    harmonized and documented:
  * Point set I/O functions can be found in the packages Point_set_processing_3,
    and Point_set_3.
  * Polygon mesh I/O functions can be found in the package BGL.
  * Polygon soup I/O can be found in the package Stream_support.
  * A comprehensive list of the supported file formats is available in the
    Stream_support package here; inversely, the following page can be used to
    find out which CGAL data structures can be used given a specific file format.
  2D and 3D Linear Geometry Kernel:
  * Added is_translation(), is_scaling(), is_reflection(), and is_rotation()
    to the classes Aff_transformation_2 and Aff_transformation_3, which enable
    determining if the transformations use a specialized representation internally.
  2D Regularized Boolean Set-Operations:
  * Added documentation for the free functions oriented_side(const Point_2&amp; p, ....)
    that accept a point and a polygon.
  * Documentation has been improved across the whole package.
  Polygon Mesh Processing:
  * Added the class CGAL::Polyhedral_envelope,
    providing a way to quickly check if a primitive (point, segment, or triangle)
    is within a polyhedral envelope around a set of triangles. It is based on the work of
    Bolun Wang, Teseo Schneider, Yixin Hu, Marco Attene, and Daniele Panozzo.
    "Exact and efficient polyhedral envelope containment check." (ACM Trans. Graph., 39-4, July 2020).
  * Added more functions in the visitor of the corefinement based methods
    to track all edge creations.
  Surface Mesh Topology:
  * Added the function CGAL::Surface_mesh_topology::Curves_on_surface_topology::
    is_homotopic_to_simple_cycle(), which can be used to determine whehter
    a closed path on a surface mesh can be continously
    transformed to a cycle without self intersection.
  Surface Mesh Simplification:
  * Added a filtering mechanism so that costly tests get only applied to the
    next candidate for the edge collapse.
  * Added the class Polyhedral_envelope_filter, which enables to perform
    mesh simplification inside a polyhedral envelope of the input mesh.
  2D Polyline Simplification:
  * When polylines have common subsequences of vertices, these subsequences
    may now be simplifified simultaneously.
  dD Triangulations:
  * Added the function insert_if_in_star() to the class
    CGAL::Regular_triangulation, which enables users to insert a point p
    in a regular triangulation on the condition that p appears post-insertion
    in the star of a user-specified, existing vertex.
  2D and 3D Alpha Shapes:
  * Breaking change: The following deprecated classes have been removed:
    Alpha_shape_euclidean_traits_2, Weighted_alpha_shape_euclidean_traits_2,
    Alpha_shape_euclidean_traits_3, and Weighted_alpha_shape_euclidean_traits_3.
    All CGAL kernel can be used directly as models of the concepts of the
    2D and 3D Alpha Shape packages.
  Classification:
  * Breaking change: the support for TensorFlow has been dropped; the
    classifier CGAL::TensorFlow::Neural_network_classifier has been removed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1646049600">- Update to 5.4:
  See https://github.com/CGAL/cgal/releases/tag/v5.4</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1654603200">- Update to 5.4.1:
  See https://github.com/CGAL/cgal/pulls?utf8=%E2%9C%93&amp;q=label%3AMerged_in_5.4.1</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1669291200">- Update to 5.5.1
  * bug fix release compared to 5.5.0
  * https://github.com/CGAL/cgal/pulls?q=label%3AMerged_in_5.4.3+-label%3AMerged_in_5.4.2
- Release 5.5.0
  * The CGAL Open Source Project is pleased to announce the release
    5.5 of CGAL, the Computational Geometry Algorithms Library.
  [#]# 3D Alpha Wrapping (new package)
  * This component takes a 3D triangle mesh, soup, or point set as
    input, and generates a valid (watertight, intersection-free,
    and combinatorially 2-manifold) surface triangle mesh that
    contains the input. The algorithm proceeds by shrink-wrapping
    and refining a 3D Delaunay triangulation, starting from a loose
    bounding box of the input. Two user-defined parameters, alpha
    and offset, offer control over the maximum size of cavities
    where the shrink-wrapping process can enter, and the tightness
    of the final surface mesh to the input, respectively. Once
    combined, these parameters provide a means to trade fidelity to
    the input for complexity of the output.
  * See also the announcement page.
    https://www.cgal.org/2022/05/18/alpha_wrap/
  [#]# 2D Straight Skeleton and Polygon Offsetting (breaking change)
  * Fix the output of the function
    CGAL::create_exterior_skeleton_and_offset_polygons_with_holes_2()
    to not take into account the offset of the outer frame.
  * Fix the computation of the exterior offset of a polygon with
    holes that was not computing the offset of the holes
  [#]# 3D Convex Hulls
  * Added an overload of the function CGAL::convex_hull_3(), which
    writes the result in an indexed triangle set.
  [#]# 2D Polygons
  * Add vertex, edge, and hole ranges.
  * The concept GeneralPolygonWithHoles_2 now requires the nested
    type Polygon_2 instead of General_polygon_2.
  [#]# 2D Regularized Boolean Set-Operations
  * The concept GeneralPolygonSetTraits_2 now requires the nested
    type Construct_polygon_with_holes_2 instead of
    Construct_general_polygon_with_holes_2.
  [#]# Combinatorial Maps
  * Removed old code deprecated in CGAL 4.9 and 4.10 (global
    functions, and information associated with darts).
  [#]# 2D Arrangements
  * Fixed the intersect_2, compare_y_at_x_right, and
    compare_y_at_x_left function objects of the traits class
    template Arr_geodesic_arc_on_sphere_traits_2 that handles
    geodesic arcs on sphere and applied a small syntactical fix to
    the tracing traits.
  [#]# Tetrahedral Mesh Generation
  * Added the function remove_isolated_vertices() as a
    post-processing step for the tetrahedral mesh generation.
  [#]# Polygon Mesh Processing
  * Added the function
    CGAL::Polygon_mesh_processing::orient_triangle_soup_with_reference_triangle_soup(),
    which enables re-orienting the faces of a triangle soup based
    on the orientation of the nearest face in a   reference
    triangle soup.
  * Added the function
    CGAL::Polygon_mesh_processing::compatible_orientations(), which
    enables to retrieve the (in)compatibility of orientations of
    faces from different connected components.
  * Added the function
    CGAL::Polygon_mesh_processing::tangential_relaxation(), which
    applies an area-based tangential mesh smoothing to the vertices
    of a surface triangle mesh.
  * Added the named parameter visitor to the function
    triangulate_hole(), which enables to track progress with
    callbacks.
  * Added more functions in the visitor of the corefinement based
    methods to track progress.
  [#]# Surface Mesh Simplification
  * Introduced four variations of the Garland-Heckbert
    simplification algorithm based on the probabilistic approach of
    Trettner and Kobbelt (Fast and Robust QEF Minimization using
    Probabilistic Quadrics):   GarlandHeckbert_plane_policies,
    GarlandHeckbert_probabilistic_plane_policies,
    GarlandHeckbert_triangle_policies, and
    GarlandHeckbert_probabilistic_triangle_policies.
  * The class GarlandHeckbert_policies has been deprecated,
    GarlandHeckbert_plane_policies replaces it.
  [#]# Point Set Processing
  * A new optional named parameter, min_points_per_cell has been
    added to grid_simplify_point_set(). By adding a minimal number
    of points in a cell such that a point is retained, one can also
    filter out low   density areas and outliers: in the case of
    densely sampled point clouds, this yields better results than
    using grid simplification and then outlier removal, while being
    very vast. The default value is 1 to   keep the previous
    behavior as default.
  [#]# dD Spatial Searching
  * Added the member function write_graphviz() to the class Kd_tree
    that writes the tree in a stream in the Graphviz format.
  [#]# CGAL and the Boost Graph Library (BGL)
  * Added the function invert_selection() in the class
    Face_filtered_graph, which toggles the selected status of a
    graph: selected faces are deselected, and unselected faces are
    selected.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1677672000">- Update to 5.5.2:
  * https://github.com/CGAL/cgal/issues?q=sort%3Aupdated-desc+label%3AMerged_in_5.5.2+-label%3AMerged_in_5.5.1</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1680436800">- Use gcc11-c++ for openSUSE Leap, enables building</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804800">- Update to 5.5.3:
  * https://github.com/CGAL/cgal/issues?q=sort%3Aupdated-desc+label%3AMerged_in_5.5.2+-label%3AMerged_in_5.5.1</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1690804801">- Update to 5.6:
  * See https://github.com/CGAL/cgal/releases/tag/v5.6</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1709121600">- Update to 5.6.1
  * CGAL-5.6.1 is a bug-fix release.
    See on Github the list of bugs that were solved since CGAL-5.6.
    https://github.com/CGAL/cgal/releases/tag/v5.6.1
- Fix documentation packaging: Tumbleweed uses a different default
  destination than older distributions now. Force doc subdir.</changelog>
</package>
<package pkgid="760f276b50eaa47293f1af3c3b0a7a9cb06260da54a26acc730f3174f9ae3e4acd54c678c83bc7def79364397c2f6f3c051c53f537833a7e41ae6cedf6bbd45a" name="cgdb" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="bp160.1.13"/>
  <changelog author="puzel@novell.com" date="1293019200">- clean up specfile</changelog>
  <changelog author="puzel@suse.com" date="1315396800">- update to cgdb-0.6.6
  - Fixed a segfault on 64-bit systems in rline.c due to a missing
    prototype of cgdb_malloc. Thanks to Pietro Cerutti for
    reporting and diagnosing this one!
  - Fixed a bug in the file dialog. When searching for a file, and
    you hit enter to select it, CGDB would sometimes skip to the
    next file that matches and open that file instead.
  - No longer set the prompt to (gdb) on startup.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
  <changelog author="puzel@suse.com" date="1329220800">- fix build on sle11-sp1</changelog>
  <changelog author="nevion@gmail.com" date="1371211200">-update to 0.6.7
  - Changed documentation license from GFDL to GPL (github #6).
  - Fixed a hang on MacOS when quitting cgdb while inferior is
    running (github #1 and #5).
  - Fixed a crash when pressing 'n' in source window (github #5).
  - Fixed a bug opening files (and toggling breakpoints in files)
    with special characters (e.g. space) in their names.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update project and download url
- Update dependencies
- Cleanup spec file with spec-cleaner
- Update to 0.6.8
  * Fix issue #40, the map commands were adding additional new lines
    to the mappings. For instance, 'imap a b' in the ~/.cgdb/cgdbrc
    file would cause a to map to 'b&lt;cr&gt;' instead of just 'b'.
  * Added feature from issue #29, added 'until' command to CGDB.
  * Updated autotools configuration files to satisfy warnings and
    recommendations produced by autotools when run.
  * Fix issue #49, a gcc compiler warning.
  * Fixed a hang consuming 100% CPU usage on OS X Mavericks (github #48).
  * Fixed a hang when quitting cgdb while inferior is running
    (github #1 and #5 and #46). This was believed to be fixed in the last
    release but I've finally reproduced the issue and fixed it for good.</changelog>
  <changelog author="avindra@opensuse.org" date="1515672000">- Update to 0.7.0
  * Support for curses was removed (only ncurses is supported)
  * Remove help2man dependency
  * hlsearch option added (off by default). Improves searching
    and displaying of searching functionality within CGDB. If
    enabled, and previous search exists, CGDB will display search
    results using the Search highlighting group. The IncSearch
    highlighting group is used to display the active search. The
    hlsearch option highlights previous searches in the source
    window, the gdb window when in scroll mode and the file dialog
    window.
  * Assembly code support.  Assembly code will be shown when no
    source code is available. The option 'set disasm' allows you
    to show mixed source/assembly when both are available.
  * Add support to enable/disable showing assembly code in CGDB.
    Disabled by default. The 'set disasm' enables showing mixed
    assembly mode by default. See the documentation for more
    information.
  * Add the :logo command to cgdb. This tells CGDB to display a
    logo in the source window.
  * Initial Rust syntax highlighter.
  * Support vi type &lt;digit&gt;j and &lt;digit&gt;k motions. Previously only
    typing j or k with out a number was supported.
  * Support for vim like marks. Showmarks option was introduced
    to show the marks in the source window. Default is true.
    You can disable the viewing of marks using 'set noshowmarks'.
  * Color support. Default is enabled.
  * Ansi escape codes representing color will show correctly.
    Configurable with the `set debugwincolor` option.
  * Add the winminwidth option- it controls the minimum width that
    a window can be resized.
  * Support for vertical or horizontal splitting of the CGDB/GDB
    windows. You can change the window orientation by using the
    command 'set winsplitorientation=horizontal or vertical'.
    horizontal is the default orientation. Type Ctrl-w to switch
    between vertical and horizontal viewing.
  * Remove the TTY mode and TTY window. It is now recommended to
    attach to your program from a separate terminal.
  * -w command line option. CGDB will wait to start until either
    a debugger is attached to it, or until a key is written to it's
    stdin. Useful for debugging CGDB itself.
  * Added scroll mode in addition to the existing GDB command mode.
    To enter scroll mode, type 'page up' when in GDB mode and to
    exit type 'q', 'i' or 'Enter'. In scroll mode, you can scroll
    through the GDB output. You can also search the GDB output with
    the /, ?, n and N keys. Vim marks are also supported.
  * Extended support for the vim G command when in CGDB mode.
    [&lt;number&gt;]G works as it does in vim now.
  * Support for 'executinglinedisplay' and 'selectedlinedisplay'
    configuration options. It allows you to configure how CGDB
    displays both the currently executing line and the currently
    selected line. Default for executing line is set to
    longarrow. Default for selected line is set to block. The
    'arrowstyle' option has been deprecated (but still supported).
    Use 'executinglinedisplay' instead.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597838400">- update to 0.7.1:
  * Status bar messages are now displayed properly in veritical mode.
    The message is now truncated according to the status bar width instead
    of the width of the terminal.
  * Fix spurious error from CGDB on shutdown. You may have seen,
    CGDB had unexpected results. Search the logs for more details.
    In the log there was a waitpid error. CGDB was using the API wrong.
  * Fix issue #161 - CGDB would lock up when doing a regex search from
    the status bar if the file was just opened from the file dialog and
    the search did not match any text in the file. Now the search fails
    to match text as expected.
  * Status bar commands and gdb console commands now both show gdb
    output in the gdb window (instead of only the gdb console commands).
    This fixed issue #154 on github.
  * Fixed issue where typing F8 would do a 'next', 'step' and
    screen refresh instead of just doing a 'next' command.
  * Fix issue #139 - Show appropriate logos when color disabled
    Previously, if the user had colors disabled, CGDB would still show
    logos that had ansi escape color sequences in them.
  * Fixed :highlight regression introduced in 0.7.0.
    In 0.6.8, if the user entered a :highlight command from the CGDB
    status bar, for instance:
    :highlight Comment ctermfg=Blue
    CGDB would updated the currently displayed source file
    with the requested highlighting changes. In 0.7.0 this would not occur.
    Both versions honored :highlight in the .cgdbrc file.
  * Fix issue #125 - CGDB can cross compile again.
  * The rust syntax highlighter is now case sensitive instead of case
    insensitive.
  * Fix issue #129. CGDB with old versions of ncurses (5.6 or before)
    would not display colors. Now it will display colors, but will
    not support ansi colors in the GDB window.
  * Fix issue #137. rustlexer.lpp fails to compile with some versions
    of GNU autotools.
  * Fix issue #135. CGDB would "freeze" when opening the file
    dialog if the number of files was very large. Updating the
    gdbwire parser resolved the issue.
  * Add support for readline's backward-kill-word and kill-word at gdb prompt</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to 0.8.0:
  * CGDB now exits when gdb exits, previously if gdb exited but the
    inferior, or child of the inferior was still running, cgdb would
    possibly continue running in a non responsive state.
    Now cgdb exits when gdb does.
  * Single stepping through disassembly without debug symbols does not
    move arrow in source window. Now the arrow moves in the source
    window as expected.
  * Fix CGDB freezes when pressing "o" to open the file dialog
  * Fix breakpoint handling is broken in disasembly view
  * Fix CGDB would not process commands after F5, F6, etc
  * CGDB implements a virtual terminal in the GDB window
  * The GDB scroller is now a virtual terminal (using libvterm)
  * The scrollback buffer has been reimplemented using libvterm
    The cursor row/col position is now known, rather than just the row
  * Searching in the scrollback buffer is improved
  * The scrollback buffer size is configurable with a new option,
    scrollbackbuffersize (sbbs) and is defaulted to 10000.
  * Mark commands in the GDB scroller have been removed
  * Unicode is now fully supported in the gdb window
  * libvterm does not support reflow yet, so resizing the terminal or
    switching the window orientation (winsplitorientation) after startup
    may cause the text in the GDB window to not be as expected
  * Colors in the GDB window are not fully supported yet.
    Ncurses is difficult to work with, considering switching.
    RGB vterm colors are unsupported at the moment.
  * CGDB implements GDB/MI in favor of GDB/Annotations
  * Add the nexti and stepi configuration commands
  * Fix ANSI escape issues with GDB-9
  * Fix auto source reload issue
  * CGDB works again with newer versions of GDB (gdb 8.3 and above)
  * CGDB now supports a configurable home directory.</changelog>
</package>
<package pkgid="52aca1ebd983e32ddb9a13f0c7100bc0cf18d95a6aaf5d6cd0288cc6ad712fdb30f7b6f89c8c6b1e676bde1e569a941c95d36c0b64e7e3202d9abcbed0f39612" name="cgit" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="bp160.1.12"/>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097600">- Create a /var/cache/cgit [boo#1116567]
- Update bundled git to 2.18.1
- Remove cgit-optflags.diff</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1558353600">- Add the missing zlib requirement.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584446400">- Update to new upstream release 1.2.3
  * Offer lzip and zstd as compression methods through the webui.
  * ui-tree: allow per repository override for enable-blame.
- Bump git to latest upstream release 2.25.1</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1727265600">- Add /srv/www directories to filelist [bsc#1231027]</changelog>
</package>
<package pkgid="96134c88478137828c77cadbd5016b3e10e8c0432972658b35dc16d9308d646ba3b92dcb1a26f4e3b322256a8dd6e63f4a0fb080b193382b24e438d130f145bc" name="cglib" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1528891200">- Depend on asm3 and not objectweb-asm, since the binaries
  are equivalent.</changelog>
  <changelog author="fstrba@suse.com" date="1540814400">- Add aliases to the maven artifact</changelog>
  <changelog author="fstrba@suse.com" date="1540814401">- Upgrade to version 3.1, the last one buildable with ant
- Depend on asm5
- Modified patch:
  * cglib-build_xml.patch
    + rediff to changed context
- Added patch:
  * fix-javadoc.patch
    + Do not import with wildcards a package that has no classes
    + Fixes javadoc generation</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Build with objectweb-asm &gt;= 5 in order not get stuck on a
  particular asmN dependency</changelog>
  <changelog author="fstrba@suse.com" date="1551787200">- Upgrade to upstream 3.2.4
- Generate and customize ant build system
- Removed patches:
  * cglib-build_xml.patch
  * fix-javadoc.patch
    + Not needed any more</changelog>
  <changelog author="david.anes@suse.com" date="1640606400">- Update to upstream 3.3.0
  * emits code compatible with java 1.8, so we can call static
    interface methods.
  * minor fix for allowing a fastclass to call static interface
    methods.
  * update to asm 7.1
  * make ant dependency optional
  * add Automatic Module Names
  * Expose non-bridge methods more frequently.
  * Drop support for Java6. (It may continue to work, but continuous
    integration tests will no longer validate it does.)
  * Fix #115: Release resources eagerly.
  * Deprecated TinyBitSet.
  * Add workarounds for changes coming from Jigsaw.
  * Fix #89 / #90 (generated incorrect code for bridge methods sometimes)
- Update project url to new github site (old one redirects there)</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Don't inject &lt;optional&gt;true&lt;/optional&gt; in cglib pom, as 3.3.0
  already provides that option and it makes the POM xml incorrect.</changelog>
  <changelog author="fstrba@suse.com" date="1651060800">- Remove links between artifacts and their parent since we are
  not building with maven</changelog>
  <changelog author="fstrba@suse.com" date="1694520000">- Simplify and clean-up the spec file</changelog>
</package>
<package pkgid="8f99a98af3e7a8f7eeb3ec5833fcf1a76a91b23201e54e34a05b8290cfd599a65472c123ca1d85efa6508b65f8095ea77c979ba585f2356167036886f1644cd3" name="cglib-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1528891200">- Depend on asm3 and not objectweb-asm, since the binaries
  are equivalent.</changelog>
  <changelog author="fstrba@suse.com" date="1540814400">- Add aliases to the maven artifact</changelog>
  <changelog author="fstrba@suse.com" date="1540814401">- Upgrade to version 3.1, the last one buildable with ant
- Depend on asm5
- Modified patch:
  * cglib-build_xml.patch
    + rediff to changed context
- Added patch:
  * fix-javadoc.patch
    + Do not import with wildcards a package that has no classes
    + Fixes javadoc generation</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Build with objectweb-asm &gt;= 5 in order not get stuck on a
  particular asmN dependency</changelog>
  <changelog author="fstrba@suse.com" date="1551787200">- Upgrade to upstream 3.2.4
- Generate and customize ant build system
- Removed patches:
  * cglib-build_xml.patch
  * fix-javadoc.patch
    + Not needed any more</changelog>
  <changelog author="david.anes@suse.com" date="1640606400">- Update to upstream 3.3.0
  * emits code compatible with java 1.8, so we can call static
    interface methods.
  * minor fix for allowing a fastclass to call static interface
    methods.
  * update to asm 7.1
  * make ant dependency optional
  * add Automatic Module Names
  * Expose non-bridge methods more frequently.
  * Drop support for Java6. (It may continue to work, but continuous
    integration tests will no longer validate it does.)
  * Fix #115: Release resources eagerly.
  * Deprecated TinyBitSet.
  * Add workarounds for changes coming from Jigsaw.
  * Fix #89 / #90 (generated incorrect code for bridge methods sometimes)
- Update project url to new github site (old one redirects there)</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Don't inject &lt;optional&gt;true&lt;/optional&gt; in cglib pom, as 3.3.0
  already provides that option and it makes the POM xml incorrect.</changelog>
  <changelog author="fstrba@suse.com" date="1651060800">- Remove links between artifacts and their parent since we are
  not building with maven</changelog>
  <changelog author="fstrba@suse.com" date="1694520000">- Simplify and clean-up the spec file</changelog>
</package>
<package pkgid="77f31c51822e9e9c5f0b1ce3dde8b3242840660b6e2707268a0f8321aaf2069c9c6805dc36fec42916c0cb89454b3362c637c0824808591ec75e43f43cfacb9d" name="cglm-devel" arch="x86_64">
  <version epoch="0" ver="0.9.4" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1620129600">- Trim boasting from description.
- Run fdupes.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620734400">- Exclude ix86, as it will fail</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622808000">- Update to version 0.8.3
  * cglm now supports different clipspace configurations.
  * new: nlerp for quaternions
  * simd, and sse optimizations
  * arm, and neon: improvements
  * style: rename nearVal, farVal to nearZ and farZ
  * many other improvements
- Drop cglm-set-soversion.patch, upstream fixed</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 0.8.5
  * update GLM_FLT_EPSILON to use 1e-5 instead of 1e-
  * implement a few complex routines
  * set PACKAGE_VERSION so it gets substituted in cglm.pc.in by cmake
  * header containing sse3 intrinsics is pmmintrin.h
  * add missing ivec types
  * fix a bug in glm_lookat_lh and view_lh.h
- Update to version 0.8.4
  * Now there are _no and _zo vesions of project / unproject functions.
  * If CGLM_CLIPSPACE_INCLUDE_ALL is defined then all clipspace
    headers are icluded in project.h or related main headers
  * add ZERO_TO_ONE support to glm_unprojecti
  * add ZERO_TO_ONE support to glm_project
  * new function: glm_pickmatrix() aka gluPickMatrix()
  * fix vec3_ortho
  * fix cross product when an operand is also dest
  * compute quaternion rotating a vector into another</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1668945600">- Update to version 0.8.7
  * fix build: add missing struct affine functions and headers
- Changes in 0.8.6:
  New features:
  * new affine transform and project functions
    gh#recp/cglm#260
  * add basic ivec functions
    gh#recp/cglm#251
  Bugfixes and improvements:
  * added missing include in io.h which adds GLM_MAX macro
    gh#recp/cglm#257
  * update README to show that integer types are supported
    gh#recp/cglm#254
  * fix grammatical errors in docs index
    gh#recp/cglm#247
  * some improvements including build files
- Changes in 0.8.5:
  * update GLM_FLT_EPSILON to use 1e-5 instead of 1e-
  * implement a few complex routines
  * header containing sse3 intrinsics is pmmintrin.h
  * add missing ivec types
  * extend unions for struct api
  * fix glm_pickmatrix()'s param type
  * fix a bug in glm_lookat_lh
  * fix bug in view_lh.h
  * some improvements including build files</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671796800">- update to v0.8.8:
  New features:
  * new abs functions for vec2, ivec2, ivec3, ivec4
  Bugfixes and Improvements:
  * fix assertion in test_clamp on x86
  * fix missing abs declaration on Emscripten
  * switch CMAKE_BINARY_DIR to CMAKE_CURRENT_BINARY_DIR for cmake.pc
  * see previous releases for more</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1676462400">- Update to version 0.8.9
  * Adding initialization macros for ivec types
  * Make implicit double promotion/casting explicit</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699531200">- update to 0.9.1:
  * Now we have **mat2x3**, **mat2x4**, **mat3x2**, **mat3x4**,
  * *mat4x2** and **mat4x3** types and its functions
  * README: add build docs for WebAssembly
  * io: fix test runner.c implicit declaration glm_arch_print
  * https://github.com/recp/cglm/pull/309: fix and improve
    CGLM_USE_ANONYMOUS_STRUCT definition with more robust
    compiler version check
  * suppress sign conversion warnings
  * Implement missing 3D
    Affine Transforms in the Struct API
  * drop "-Werror" to allow skip warnings on production build
  * more robust __builtin_assume_aligned detection
  * reduce glms_mat[4|3|2]_make()'s dest parameter
  * fix and improve printing arch name in tests
  * make GLM_TESTS_NO_COLORFUL_OUTPUT work on non-test print
    colors too
  * Now we have WASM 128 SIMD support
  * `CGLM_OMIT_NS_FROM_STRUCT_API`, omits CGLM_STRUCT_API_NS
    (glms_) namespace  completely if there is sub namespace e.g
    mat4_, vec4_ ... **DEFAULT** is not defined
  * `CGLM_STRUCT_API_NS`: define name space for struct api,
  * *DEFAULT** is `glms`
  * `CGLM_STRUCT_API_NAME_SUFFIX`: define name suffix,
  * *DEFAULT** is empty e.g `defining it as #define
    CGLM_STRUCT_API_NAME_SUFFIX  s` will add `s` suffix to
    `mat4_mul -&gt; mat4s_mul`</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 0.9.2:
  * aabb2d and euler to quat
  * new subtraction family of vector functions
  * and many others improvements and bugfixes</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1712577600">- Update to version 0.9.4
  + Changes from 0.9.4
  * #402: Struct API glms_ray_at incorrect dir param
  * dont use I macro defined in standard(fixes #404)
  * #403: mat2x3: fix multiplication functions
  * #405: mat2x4: fix multiplication functions
  * #407: mat3x2: fix multiplication functions
  * #408: mat3x4: fix multiplication functions
  * #410: mat4x2: fix multiplication functions
  * #411: mat4x3: fix multiplication functions
  * docs: improve docs
  * #412: separate SSE and SSE2
  * make Fasth math work both on SSE and SSE2, make -0.0f run
    on SSE + fast math
  * make some failing test pass when fast math is on
  * tests: dont validate nan and inf on fast math
  * docs: add note to enable config where may not work is some
    environments
  * docs: alignment
  * fix some doc typos &amp; warnings
  + Changes from 0.9.2
  * #378: win32, simd: ensure we are on msvc when checking
    MSVC specific headers
  * win32, tests: fix drand48() error on mingw
  * #379: simd: min / max helpers
  * docs: update read the docs package versions
  * #381: add new functions for ivec2 and ivec3
    (dot, norm, norm2, div, divs, mod...)
  * #383: implement struct API for ivec2, ivec3, and ivec4
  * #384: docs, fix typos
  * #386: add additional CI via GitHub Actions
  * #388: ci: Remove appveyor
  * #387: suppress warnings
  * #389: aabb2d: fix struct api
  * #390: doc improvements
  * #391: ci: Add ARM64 UWP for WindowsStore
  * #392: aabb2d_zero, aabb2d_diagonal and aabb2d_size
  * #395: use NDEBUG to check DEBUG mode, update cmake to
    respect DEBUG
  * suppress warnings: C4244: 'function': conversion from
    'int' to 'float'
  * test: fix ivec2 and ivec3 comparison and suppress warnings
  * #398: allow passing const float* to make functions
  * #397: clarify some rotation rules, update docs to explain
    rotate() a bit more
  * #399: some missing ray functions
  * improving handling of very small vectors to prevent
    instability and overflow
  * build: add missing files
  * fix some doc typos &amp; warnings</changelog>
</package>
<package pkgid="cffe8ce08d5cf9cfcb5f18838dbfcf5b66a9442a37339fb8eff58c97c1b40c6d8a7427242ba8198d447b384accb25871b4bab023ec66f3339cab7e68aa5e2a0a" name="cglm-devel-doc" arch="noarch">
  <version epoch="0" ver="0.9.4" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1620129600">- Trim boasting from description.
- Run fdupes.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1620734400">- Exclude ix86, as it will fail</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622808000">- Update to version 0.8.3
  * cglm now supports different clipspace configurations.
  * new: nlerp for quaternions
  * simd, and sse optimizations
  * arm, and neon: improvements
  * style: rename nearVal, farVal to nearZ and farZ
  * many other improvements
- Drop cglm-set-soversion.patch, upstream fixed</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 0.8.5
  * update GLM_FLT_EPSILON to use 1e-5 instead of 1e-
  * implement a few complex routines
  * set PACKAGE_VERSION so it gets substituted in cglm.pc.in by cmake
  * header containing sse3 intrinsics is pmmintrin.h
  * add missing ivec types
  * fix a bug in glm_lookat_lh and view_lh.h
- Update to version 0.8.4
  * Now there are _no and _zo vesions of project / unproject functions.
  * If CGLM_CLIPSPACE_INCLUDE_ALL is defined then all clipspace
    headers are icluded in project.h or related main headers
  * add ZERO_TO_ONE support to glm_unprojecti
  * add ZERO_TO_ONE support to glm_project
  * new function: glm_pickmatrix() aka gluPickMatrix()
  * fix vec3_ortho
  * fix cross product when an operand is also dest
  * compute quaternion rotating a vector into another</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1668945600">- Update to version 0.8.7
  * fix build: add missing struct affine functions and headers
- Changes in 0.8.6:
  New features:
  * new affine transform and project functions
    gh#recp/cglm#260
  * add basic ivec functions
    gh#recp/cglm#251
  Bugfixes and improvements:
  * added missing include in io.h which adds GLM_MAX macro
    gh#recp/cglm#257
  * update README to show that integer types are supported
    gh#recp/cglm#254
  * fix grammatical errors in docs index
    gh#recp/cglm#247
  * some improvements including build files
- Changes in 0.8.5:
  * update GLM_FLT_EPSILON to use 1e-5 instead of 1e-
  * implement a few complex routines
  * header containing sse3 intrinsics is pmmintrin.h
  * add missing ivec types
  * extend unions for struct api
  * fix glm_pickmatrix()'s param type
  * fix a bug in glm_lookat_lh
  * fix bug in view_lh.h
  * some improvements including build files</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671796800">- update to v0.8.8:
  New features:
  * new abs functions for vec2, ivec2, ivec3, ivec4
  Bugfixes and Improvements:
  * fix assertion in test_clamp on x86
  * fix missing abs declaration on Emscripten
  * switch CMAKE_BINARY_DIR to CMAKE_CURRENT_BINARY_DIR for cmake.pc
  * see previous releases for more</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1676462400">- Update to version 0.8.9
  * Adding initialization macros for ivec types
  * Make implicit double promotion/casting explicit</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1699531200">- update to 0.9.1:
  * Now we have **mat2x3**, **mat2x4**, **mat3x2**, **mat3x4**,
  * *mat4x2** and **mat4x3** types and its functions
  * README: add build docs for WebAssembly
  * io: fix test runner.c implicit declaration glm_arch_print
  * https://github.com/recp/cglm/pull/309: fix and improve
    CGLM_USE_ANONYMOUS_STRUCT definition with more robust
    compiler version check
  * suppress sign conversion warnings
  * Implement missing 3D
    Affine Transforms in the Struct API
  * drop "-Werror" to allow skip warnings on production build
  * more robust __builtin_assume_aligned detection
  * reduce glms_mat[4|3|2]_make()'s dest parameter
  * fix and improve printing arch name in tests
  * make GLM_TESTS_NO_COLORFUL_OUTPUT work on non-test print
    colors too
  * Now we have WASM 128 SIMD support
  * `CGLM_OMIT_NS_FROM_STRUCT_API`, omits CGLM_STRUCT_API_NS
    (glms_) namespace  completely if there is sub namespace e.g
    mat4_, vec4_ ... **DEFAULT** is not defined
  * `CGLM_STRUCT_API_NS`: define name space for struct api,
  * *DEFAULT** is `glms`
  * `CGLM_STRUCT_API_NAME_SUFFIX`: define name suffix,
  * *DEFAULT** is empty e.g `defining it as #define
    CGLM_STRUCT_API_NAME_SUFFIX  s` will add `s` suffix to
    `mat4_mul -&gt; mat4s_mul`</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 0.9.2:
  * aabb2d and euler to quat
  * new subtraction family of vector functions
  * and many others improvements and bugfixes</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1712577600">- Update to version 0.9.4
  + Changes from 0.9.4
  * #402: Struct API glms_ray_at incorrect dir param
  * dont use I macro defined in standard(fixes #404)
  * #403: mat2x3: fix multiplication functions
  * #405: mat2x4: fix multiplication functions
  * #407: mat3x2: fix multiplication functions
  * #408: mat3x4: fix multiplication functions
  * #410: mat4x2: fix multiplication functions
  * #411: mat4x3: fix multiplication functions
  * docs: improve docs
  * #412: separate SSE and SSE2
  * make Fasth math work both on SSE and SSE2, make -0.0f run
    on SSE + fast math
  * make some failing test pass when fast math is on
  * tests: dont validate nan and inf on fast math
  * docs: add note to enable config where may not work is some
    environments
  * docs: alignment
  * fix some doc typos &amp; warnings
  + Changes from 0.9.2
  * #378: win32, simd: ensure we are on msvc when checking
    MSVC specific headers
  * win32, tests: fix drand48() error on mingw
  * #379: simd: min / max helpers
  * docs: update read the docs package versions
  * #381: add new functions for ivec2 and ivec3
    (dot, norm, norm2, div, divs, mod...)
  * #383: implement struct API for ivec2, ivec3, and ivec4
  * #384: docs, fix typos
  * #386: add additional CI via GitHub Actions
  * #388: ci: Remove appveyor
  * #387: suppress warnings
  * #389: aabb2d: fix struct api
  * #390: doc improvements
  * #391: ci: Add ARM64 UWP for WindowsStore
  * #392: aabb2d_zero, aabb2d_diagonal and aabb2d_size
  * #395: use NDEBUG to check DEBUG mode, update cmake to
    respect DEBUG
  * suppress warnings: C4244: 'function': conversion from
    'int' to 'float'
  * test: fix ivec2 and ivec3 comparison and suppress warnings
  * #398: allow passing const float* to make functions
  * #397: clarify some rotation rules, update docs to explain
    rotate() a bit more
  * #399: some missing ray functions
  * improving handling of very small vectors to prevent
    instability and overflow
  * build: add missing files
  * fix some doc typos &amp; warnings</changelog>
</package>
<package pkgid="33987a7f1a53baec53edf00828b50ca96b57d0a04fcd469de68ce81cea8b1d639ee66381b0071b437da8aa3a9663212b5cd4787dcd9bdeaff40b960edf11f7a1" name="cgns" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564228800">- Update to 3.4.0
  For a list of changes between 3.3.1 and 3.4.0, see included Release.txt
- Set License tag SPDX "Zlib", attribution is appreciated but not required
- Spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564747200">- Split static library into separate package.
- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Update to version 3.4.1:
  * Restore backward compatibility by removing CPEX 41 NGON
    modification made in version 3.4.0.
- Update shlib package name to respect upstream's so version.
- Pass CMAKE_SKIP_INSTALL_RPATH=ON to cmake to disable setting
  rpath on installed libs; prevents build failures on Leap 15.2.
- Use %{name}-%{version} naming scheme for source tarball.
- Use %cmake_build instead of invoking make directly.
- Minor cleanups using spec-cleaner.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1585915200">- Update to version 4.1.1:
  * (CGNS-196) Fixed the compilation of cgnstools, which still
    made use the Removed APIs in 4.1.0
- Update to version 4.1.0:
  * Added CPEX42 Storing bounding box of a grid (CGNS-149).
  * Added CPEX43 Family hierarchy as a tree (CGNS-180).
- Update to version 4.1.0:
  * Added CPEX 41 NGON modification proposal (CGNS-121).
- The removal of CPEX 41 NGON in 3.4.1 broke gmsh and Paraview</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Handle all architectures with %_lib != lib</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1586260801">- Fix last change (typo in spec file, should be %_lib not %lib).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1605182400">- Update to version 4.1.2:
  * Fixed the Compatibility issue between v3.4.0 and v4.1.1 (CGNS-214).
  * Change a wrong check in cg_poly_element_read to load older CGNS
    file section with CGNS 4.x API (CGNS-219).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 4.3.0:
  * Add a context structure to handle cleanly cgio/hdf5 state
  * When opening a CGNS file with MLL the whole file is parsed.
  * Fix an uninitialized local array by copying m_dimvals to dimvals.
  * Set the default file_type in cg_open only when in write mode
  * Multiplication result converted to larger type fixes
- Update to version 4.2.0:
  * New C and Fortran APIs that allows for reading/writing datatypes
    that are different from cgsize_t
  * Added a diskless option for creating a CGNS file in memory and
    then to optionally persist the memory to disk.
  * Mapping of X4/X8 was lost when moving from ADF to HDF5.
    This fix reintroduces it as an experimental feature.
  * Tuned the parallel library algorithms to improve metadata type operations
  * Experimental support for conversion of FamilySpecified BC for
    AFLR3 file format, PR#247
  * Added check on node names according to SIDS
  * added warning if ZoneBC_t is missing while zone surfaces are
    present in a 3D mesh.</changelog>
  <changelog author="Wang Jun &lt;badboywj@gmail.com&gt;" date="1702900800">- Update to version 4.4.0
  * Removed possible overflow in cgi_error, #343 #701
  * Increased maximum open file limit default
  * Added control for HDF5 tuning routine
    "H5Pset_elink_file_cache_size," which is useful when many
    external links are used, #351
  * Fixed backward compatibility issues #702
  * Removed "NULL" and "UserDefined" Fortran parameters #349
  * More details: https://github.com/CGNS/CGNS/releases/tag/v4.4.0</changelog>
  <changelog author="Dmitry Roshchin &lt;dmitry_r@opensuse.org&gt;" date="1703764800">- Fix library package name</changelog>
</package>
<package pkgid="b459c832abb0f23a9224f8f5918708ac7b1088a2ecc50145f433050f7f96e78e11b998f9343c596967f4eea57feccb0d2190dfa128011c2d88accce7de8b3f47" name="cgns-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564228800">- Update to 3.4.0
  For a list of changes between 3.3.1 and 3.4.0, see included Release.txt
- Set License tag SPDX "Zlib", attribution is appreciated but not required
- Spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564747200">- Split static library into separate package.
- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Update to version 3.4.1:
  * Restore backward compatibility by removing CPEX 41 NGON
    modification made in version 3.4.0.
- Update shlib package name to respect upstream's so version.
- Pass CMAKE_SKIP_INSTALL_RPATH=ON to cmake to disable setting
  rpath on installed libs; prevents build failures on Leap 15.2.
- Use %{name}-%{version} naming scheme for source tarball.
- Use %cmake_build instead of invoking make directly.
- Minor cleanups using spec-cleaner.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1585915200">- Update to version 4.1.1:
  * (CGNS-196) Fixed the compilation of cgnstools, which still
    made use the Removed APIs in 4.1.0
- Update to version 4.1.0:
  * Added CPEX42 Storing bounding box of a grid (CGNS-149).
  * Added CPEX43 Family hierarchy as a tree (CGNS-180).
- Update to version 4.1.0:
  * Added CPEX 41 NGON modification proposal (CGNS-121).
- The removal of CPEX 41 NGON in 3.4.1 broke gmsh and Paraview</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Handle all architectures with %_lib != lib</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1586260801">- Fix last change (typo in spec file, should be %_lib not %lib).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1605182400">- Update to version 4.1.2:
  * Fixed the Compatibility issue between v3.4.0 and v4.1.1 (CGNS-214).
  * Change a wrong check in cg_poly_element_read to load older CGNS
    file section with CGNS 4.x API (CGNS-219).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 4.3.0:
  * Add a context structure to handle cleanly cgio/hdf5 state
  * When opening a CGNS file with MLL the whole file is parsed.
  * Fix an uninitialized local array by copying m_dimvals to dimvals.
  * Set the default file_type in cg_open only when in write mode
  * Multiplication result converted to larger type fixes
- Update to version 4.2.0:
  * New C and Fortran APIs that allows for reading/writing datatypes
    that are different from cgsize_t
  * Added a diskless option for creating a CGNS file in memory and
    then to optionally persist the memory to disk.
  * Mapping of X4/X8 was lost when moving from ADF to HDF5.
    This fix reintroduces it as an experimental feature.
  * Tuned the parallel library algorithms to improve metadata type operations
  * Experimental support for conversion of FamilySpecified BC for
    AFLR3 file format, PR#247
  * Added check on node names according to SIDS
  * added warning if ZoneBC_t is missing while zone surfaces are
    present in a 3D mesh.</changelog>
  <changelog author="Wang Jun &lt;badboywj@gmail.com&gt;" date="1702900800">- Update to version 4.4.0
  * Removed possible overflow in cgi_error, #343 #701
  * Increased maximum open file limit default
  * Added control for HDF5 tuning routine
    "H5Pset_elink_file_cache_size," which is useful when many
    external links are used, #351
  * Fixed backward compatibility issues #702
  * Removed "NULL" and "UserDefined" Fortran parameters #349
  * More details: https://github.com/CGNS/CGNS/releases/tag/v4.4.0</changelog>
  <changelog author="Dmitry Roshchin &lt;dmitry_r@opensuse.org&gt;" date="1703764800">- Fix library package name</changelog>
</package>
<package pkgid="6ee183e8dab100688aebce5bee9b4d48b448cc7e2333b350aa624eaf57e9fadc7090cab5a006fee7fb04e23017a855624d4919ec235bd004704d962f55add933" name="cgns-devel-static" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564228800">- Update to 3.4.0
  For a list of changes between 3.3.1 and 3.4.0, see included Release.txt
- Set License tag SPDX "Zlib", attribution is appreciated but not required
- Spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1564747200">- Split static library into separate package.
- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Update to version 3.4.1:
  * Restore backward compatibility by removing CPEX 41 NGON
    modification made in version 3.4.0.
- Update shlib package name to respect upstream's so version.
- Pass CMAKE_SKIP_INSTALL_RPATH=ON to cmake to disable setting
  rpath on installed libs; prevents build failures on Leap 15.2.
- Use %{name}-%{version} naming scheme for source tarball.
- Use %cmake_build instead of invoking make directly.
- Minor cleanups using spec-cleaner.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1585915200">- Update to version 4.1.1:
  * (CGNS-196) Fixed the compilation of cgnstools, which still
    made use the Removed APIs in 4.1.0
- Update to version 4.1.0:
  * Added CPEX42 Storing bounding box of a grid (CGNS-149).
  * Added CPEX43 Family hierarchy as a tree (CGNS-180).
- Update to version 4.1.0:
  * Added CPEX 41 NGON modification proposal (CGNS-121).
- The removal of CPEX 41 NGON in 3.4.1 broke gmsh and Paraview</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Handle all architectures with %_lib != lib</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1586260801">- Fix last change (typo in spec file, should be %_lib not %lib).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1605182400">- Update to version 4.1.2:
  * Fixed the Compatibility issue between v3.4.0 and v4.1.1 (CGNS-214).
  * Change a wrong check in cg_poly_element_read to load older CGNS
    file section with CGNS 4.x API (CGNS-219).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 4.3.0:
  * Add a context structure to handle cleanly cgio/hdf5 state
  * When opening a CGNS file with MLL the whole file is parsed.
  * Fix an uninitialized local array by copying m_dimvals to dimvals.
  * Set the default file_type in cg_open only when in write mode
  * Multiplication result converted to larger type fixes
- Update to version 4.2.0:
  * New C and Fortran APIs that allows for reading/writing datatypes
    that are different from cgsize_t
  * Added a diskless option for creating a CGNS file in memory and
    then to optionally persist the memory to disk.
  * Mapping of X4/X8 was lost when moving from ADF to HDF5.
    This fix reintroduces it as an experimental feature.
  * Tuned the parallel library algorithms to improve metadata type operations
  * Experimental support for conversion of FamilySpecified BC for
    AFLR3 file format, PR#247
  * Added check on node names according to SIDS
  * added warning if ZoneBC_t is missing while zone surfaces are
    present in a 3D mesh.</changelog>
  <changelog author="Wang Jun &lt;badboywj@gmail.com&gt;" date="1702900800">- Update to version 4.4.0
  * Removed possible overflow in cgi_error, #343 #701
  * Increased maximum open file limit default
  * Added control for HDF5 tuning routine
    "H5Pset_elink_file_cache_size," which is useful when many
    external links are used, #351
  * Fixed backward compatibility issues #702
  * Removed "NULL" and "UserDefined" Fortran parameters #349
  * More details: https://github.com/CGNS/CGNS/releases/tag/v4.4.0</changelog>
  <changelog author="Dmitry Roshchin &lt;dmitry_r@opensuse.org&gt;" date="1703764800">- Fix library package name</changelog>
</package>
<package pkgid="34a7ea7d7cceec0571b2761215bde97741cd4166bc3a023a36127b16d82abe430f266eedbb1bd62942974c29c34d9b67682fcb3a29dde91bb1585acd4534650e" name="ch341eepromtool" arch="x86_64">
  <version epoch="0" ver="0.5" rel="bp160.1.12"/>
  <changelog author="sbrabec@suse.cz" date="1426852800">- New package, version 0.5.
- Add ch341eepromtool-printf.patch fixing printf() usage.</changelog>
  <changelog author="Dmitry Roshchin &lt;dmitry_r@opensuse.org&gt;" date="1669377600">- Fix Tumbleweed build
  * ch341eepromtool-extern_readbuf.patch
- Drop source extraction script</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="8652a85b175c0be24f5da2b6100556f0c676f0e8306af1cc9a4a9a7cb46ffd8571b9887a892db14a16c4b79ad635d91a6d93c5d7338d1867b21399c650047f41" name="chafa" arch="x86_64">
  <version epoch="0" ver="1.14.4" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
</package>
<package pkgid="0f22f2ad88ca105ef366c2aa5483d0a8abc730ffcdadea7b40654bf9c6f96391d82d28101830427b63ba9e19373d19b935cae95fe42d843a0c16db6e287036d7" name="chafa-devel" arch="x86_64">
  <version epoch="0" ver="1.14.4" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
</package>
<package pkgid="9ec19cfbb95945bfcaeaebe24a3da0f2376443fbb636921ca27f094f6b65ee575836b6a70d9ade2cd02255922e94da679d739b13179c817ce8222eaf5290d922" name="chafa-doc" arch="noarch">
  <version epoch="0" ver="1.14.4" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936000">- Update to 1.12.2:
  * Made everything compile for the x86_64-w64-mingw32 target using gcc.
  * Added support for the Windows 10 Command Prompt.
  * Improved error reporting.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1656936001">- Update to 1.12.3:
  * Increased GLib minimum version to 2.26.
  * Enabled a few compiler warnings not included in -Wall -Wextra
    in order to catch more potential issues early. Also started
    using -Werror selectively.
  * Silenced deprecation warnings for older GLib APIs that we
    would like to keep using a bit longer.
  * Fix #96 Regression: Fails to build on Linux/Debian</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1668340800">- Update to 1.12.4:
  * MS Windows: Added support for Unicode command-line arguments.
  * MS Windows: Enabled support for building a DLL.
  * Improved quality of accelerated symbol picking (the default
    with -w 6 and lower), especially along sharp edges.
  * The XWD loader now supports unaligned image data, which can
    occur when the header is of an uneven length. Such images
    will no longer be rejected.
  * Bug fixes:
  - #100[1] Reading image data from stdin fails on Windows
  - #104[3] Artifacts with transparent animations on Kitty
  - #108[5] Bad interaction with lolcat
  - #112[7] Bad documentation for -c default
  - #113[9] Autogen/build fails on CentOS 7 (partial solution)
  - huntr.dev: Uncontrolled memory allocation in lodepng
  - [unfiled] -lm should not be in pkg-config Libs: list
  - [unfiled] The --watch switch was broken with the
    introduction of --animate.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1684756800">- Update to 1.12.5:
  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
  * Fix #141 distortion when rowstride is not a multiple of 4
  * Fix missing comma in --help output</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704715200">- Update to 1.14.0:
  * Removed ImageMagick loader support. Packagers can now remove
    this dependency
  * Polite mode is now off by default. The new default eliminates
    cursor flicker and makes the output more robust against unusual
    terminal settings. The old behavior can be restored with
  - -polite on.
  * Added image loaders for the AVIF and QOI formats.
  * sRGB gamma is now handled correctly in scaling operations.
  * New option: --passthrough=&lt;auto|none|screen|tmux&gt;. This allows
    passing graphics protocols like Sixels, iTerm and Kitty through
    a terminal multiplexer. It will be enabled automatically for
    Kitty, and can be enabled manually for other protocols with
    more limited support
  * New option: --view-size=&lt;WxH&gt;. Specifies width and height of
    the viewport, overriding the detected terminal size
  * New option: --fit-width. Fits images to the width of the
    viewport, allowing them to be taller than the viewport's height
  * New option: --relative=&lt;bool&gt;. Enables relative cursor
    positioning. Useful if you've pre-positioned the cursor at a
    particular offset where you want frames to appear, but tends to
    make the output illegible in pagers, e.g. less -R
  * New option: --exact-size=&lt;auto|on|off&gt;. Preserves the input
    pixel size when possible. Useful to avoid artifacts caused
    by resampling
  * New symbol selector: imported. This selects glyphs loaded with
  - -glyph-file
  * Fontgen: Added a BDF font writer
  * Fontgen: Cleanup and modernization
  * The help text and manual page were overhauled for readability,
    and the API documentation now includes symbol indexes by version
    and deprecation status.
  * Added a zsh completion script
  * Fix "unknown file format" when using AVIF on stdin
  * Fix broken linking with libwebp-1.3.1
  * Fix make check with --without-tools
  * Fix --duration not working well with still images
  * Fix sixel rendering of animations
  * Fix operator precedence in geometry calculation</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1716292800">- Enable optional image formats
  * jpeg
  * svg
  * tiff
  * webp</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718712000">- Update to 1.14.1:
  * A JPEG XL (.jxl) loader was added using libjxl (#188).
  * Added detection of the Eat "Emulate a Terminal" Emacs terminal.
  * Symbols mode was sped up significantly on AVX2-capable platforms.
  * Tests: A new test driver was added. It will log the specifics
    of any failures, which aids debugging of CI builds.
  * Bug fixes:
    [#189] Fix installation of zsh completions.
    [#190] Fix a small memory leak in ChafaCanvas.
    [#192] Wrong sixel padding in some circumstances.
    [#195] tmux passthrough enabled when already set.
    [#196] iTerm mode not enabled automatically.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1721995200">- Update to 1.14.2:
  * #203 Chafa 1.14.1 fails to build on i686
  * #205 Symbols mode not working since 1.14.1
  * #206 Crash when importing more than 32767 glyphs
  * Fix erroneous base64 encoding of final byte in some circumstances</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.14.3:
  * Sixel transparency has been reenabled for still frames. Animations
    will be pre-composited on an opaque background to prevent flicker/glitchiness (#211)
  * Now supports the Ghostty terminal, defaulting to the Kitty graphics protocol there.
  * Bug fixes:
    [#185] Chafa version 1.14 breaks image preview on lf.
    [#210] Crash with -f sixels.
    [#211] Sixels are too small in Windows Terminal.
    [#212] Aspect-preserving calculations are off in some cases.
    [unfiled] Inconsistent fraction parsing in CLI arguments.
    [unfiled] A few small memory leaks in the JPEG XL loader.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725969600">- Update to 1.14.4:
  * Bug fixes:
    [#216] Dither intensity does not work properly</changelog>
</package>
<package pkgid="537622019c92ffbd7c296d632c0c1effe5f0ae113fbcc6fe416f6b27d494ef4f5cc67ccb80a726d50a7aa7bf4ac48b7b4727d43efce65df4d67aa88f3494cb94" name="chayang" arch="x86_64">
  <version epoch="0" ver="git20230209.61ad53b" rel="bp160.1.13"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1685620800">- Package initial version</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1686052800">- Use noun phrase for descriptions</changelog>
</package>
<package pkgid="f6e7b1df93cd4b840206ee4c436cfe045ea9c1621b732bd27ba9c9313a70b4d38e94beac10d3b2616429c730b02e5a29b84295fa028b174eefa4f190a795163e" name="cheat" arch="x86_64">
  <version epoch="0" ver="4.4.2" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
</package>
<package pkgid="b34d4f3416fdfaca1caff55196889f6958a308866cb7e3b9246ec0c5f14e43ff5d099727e252248a0f81ffff7ba3d066934776635f6d4b93c3b62099efeabb8b" name="cheat" arch="x86_64">
  <version epoch="0" ver="4.4.2" rel="bp160.2.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673352000">- Initial package of cheat 4.4.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673611200">- Only build manpage using pandoc when on x86_64.
  Pandoc seems to not be available on all archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673870400">- Remove dependency on pandoc:
  Upsteam ships a man page. Lets assume they update it upon each
  release and take it without generating ourselves</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702468800">- Update to 4.4.1:
  * Update dependencies
  * Make minor changes to appease revive (linter)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1702728000">- Update to 4.4.2:
  * Bump chroma to newest version
  * Remove plan9 support due to build failure
  * Upgrade to yaml.v3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1755777600">- bsc#1247629 (CVE-2025-21613):
  * Use go-git 5.13.0 via replace in _service</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755777601">- Packaging improvements:
  * Service go_modules replace dependencies with CVEs
  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
  * Replace golang.org/x/net=golang.org/x/net@v0.36.0
    Fixes GO-2025-3503 CVE-2025-22870
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0
    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8
    Fixes GO-2025-3487 CVE-2025-22869
  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0
    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4
    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m
  * Service tar_scm set mode manual from disabled
  * Service tar_scm create archive from git so we can exclude
    vendor directory upstream committed to git. Committed vendor
    directory contents have build issues even after go mod tidy.
  * Service tar_scm exclude dir vendor
  * Service set_version set mode manual from disabled
  * Service set_version remove param basename not needed</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1755864000">- Packaging improvements:
  * Drop Requires: golang-packaging. The recommended Go toolchain
    dependency expression is BuildRequires: golang(API) &gt;= 1.x or
    optionally the metapackage BuildRequires: go
  * Use BuildRequires: golang(API) &gt;= 1.19 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove go build -o output binary location and name. Default
    binary has the same name as package of func main() and is
    placed in the top level of the build directory.
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1764244800">- Security:
  * CVE-2025-47913: Fix client process termination (bsc#1253593)
  * CVE-2025-58181: Fix potential unbounded memory consumption
    (bsc#1253922)
  * CVE-2025-47914: Fix panic due to an out of bounds read
    (bsc#1254051)
  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
  * Replace golang.org/x/net=golang.org/x/net@v0.47.0
  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0</changelog>
</package>
<package pkgid="f24190a7fbbc527c5bdb27d890af9b8a0f3083644e2313a325a16c723e6eb3776dab21f2abc73043ded70a9652b54ee6490b56af913fddf58b6278fe8a2843d7" name="check-devel" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1404216000">- Update to version 0.9.13:
  + When a test assertion fails, exit() was invoked. This results
    in any registered exit handlers being invoked. A test should
    not be relied upon to clean up if it fails. Instead, _exit()
    will be used to signal a test failure, to prevent exit handlers
    from being invoked.
  + Fix issue with string formatting in ck_assert_(u)int_* calls,
    where using the % operator would be interpreted as a string
    formatter.
  + If the LOG/XML/TAP file name is set to "-" either through the
    srunner_set_log() srunner_set_xml() or srunner_set_tap() calls
    or through the related environment variables, the logged data
    will be printed to stdout instead of a file. This is mainly to
    support using TAP for fixtures which expect the results to be
    reported via stdout. However, it is available via all of
    Check's logging modalities.
  + For CMake builds, check_stdint.h was not being installed. This
    is now fixed.
  + Check's example under doc/example now also works for CMake
    projects using Visual Studios and MSVC. This includes an
    example CMake configuration.
- Drop check-missing-includes.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Update to version 0.9.14:
  + Changes to (unofficially for now) support Solaris and AIX
    platforms.
  + Fix issue with checked teardown functions in CK_NOFORK mode.
  + Allow checked fixtures when compiled without fork().
  + Various code cleanup, including changes for compiling Check on
    c++ compilers Clang and g++.
  + Re-enable internal unit tests.</changelog>
  <changelog author="jengelh@inai.de" date="1425470400">- Implement shared library naming guidelines: move the library to
  libcheck0. The new package obsoletes 'check', as there is no
  other content.
- Do not pass --enable-pic to configure: only static libs profit
  from this.
- Add fdupes BuildRequires to eliminate the couple duplicates.
- Move %install_info_delete from postun to preun: access to the
  .info files is required for successful execution.</changelog>
  <changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 0.10.0:
  + CMake on MinGW and MSVC was unable to find time related types
    because time.h was not included. This header is now included
    for the checks.
  + If the test runner process catches a SIGTERM or SIGINT signal
    the running tests are now also killed.
  + If Check is compiled without support for fork(), the behavior
    of functions which require fork() to be useful have been
    changed. Functions that attempt to set CK_FORK mode are no-ops,
    check_fork() returns in failure, and check_waitpid_and_exit()
    exits in failure.
  + Add space around operators in assert messages for readability.
  + Use mkstemp() if available instead of tmpfile() or tempnam().
  + Fix issue with string formatting in ck_assert(), where using
    the % operator would be interpreted as a string formatter.
  + In nofork mode, the location of a failed assertion within a
    test case was lost if that test case has a checked teardown
    fixture (even if that fixture function is empty). This is now
    fixed.</changelog>
  <changelog author="avvissu@yandex.by" date="1505908800">- Update to version 0.11.0:
  + Avoid issue in unit test output checking where a shell's
    built-in printf command does not work properly, but the printf
    program itself is correct.
  + Emit only valid XML characters in XML logging.
  + Add LGPL header to files where it was missing.
  + Strip timestamps from examples using filterdiff if available.
  + Fix potential SIGSEGV in Check related to the disk filling up
    during a test.
  + Support added for applying tags to test cases and selectively
    running test cases based on tags.
  + Macros for comparing memory regions
    (ck_assert_mem_eq, ck_assert_mem_ne) have been added.
  + Macros for comparing floating point numbers have been added.
  + Macros for comparing string, but allowing for NULL
    (ck_assert_pstr_eq,ck_assert_pstr_ne) have been added.
  + Macros for checking if a pointer is NULL or not have been
    added.
- Update the homepage and source Url to current location.
- Add libtool and makeinfo BuildRequires and use autoreconf when
  building, needed as package is not bootstraped.
- Add NEWS file.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518782400">- Update to version 0.12.0:
  + Fix out-of-tree builds with CMake (gh#libcheck/check#86).
  + Fix issue found with Clang regarding invalid suffix on a
    literal (gh#libcheck/check#110).
  + Check now responds to a few errors in a more clear way when
    it cannot run tests (gh#libcheck/check#122 and
    gh#libcheck/check#123).
  + The maximum message size of check assertions is now
    configurable (gh#libcheck/check#127).
  + Check support added for Visual Studios 2010, 2012, 2013, 2015,
    and 2017 both for x86/64 and ARM (gh#libcheck/check#129 and
    gh#libcheck/check#125).
- Adopt the use of %make_build and %make_install rather than raw
  make commands, following the best practices. And pass docdir
  to configure instead of passing directly to make.
- Add automake, autoconf and sed BuildRequires to avoid implicit
  dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="info@paolostivanin.com" date="1588680000">- Update to 0.14.0:
  * Add support for FetchContent in CMake
  * Rename CMake project from 'check' to 'Check'
  * Fix for checking for wrong tool when building docs in Autotools
  * Fix compiler warning with printf format
  * missing &lt;unistd.h&gt; in some files
  * Various documentation improvements
  * END_TEST is now optional, as how START_TEST works has been redone
  * Various CMake related changes</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 0.15.2:
  * Fix fail* APIs, regression from 0.15.1
  * Fix warning in ptr macros with pointer to integer cast
  * Fix various warnings in Check's unit tests
  * Replace gnu_printf with printf in format __attribute__
  * Fix warnings from Check's macros: "warning: too many arguments for format"
  * Fix format specifiers that do not match the argument types
  * Define CK_ATTRIBUTE_FORMAT for GCC &gt;= 2.95.3, to make use of
  ‘gnu_printf’ format attribute
  * Refactor tests to fix signed - unsigned conversions
  * Refactor some Check internals to use proper interger types
  * Implement missing mutual exclusion for Windows hosts</changelog>
  <changelog author="dimstar@opensuse.org" date="1621425600">- Drop baselibs.conf: multilib support is only generated for libs
  that have consumers.</changelog>
</package>
<package pkgid="a35f3c4960671ce04b09eaf4e174a8ac7f4a078d944e7cb2ab7a50837a37b2b5dd4fe5f1e2d619b1b953d229a17d8021f3f5900d9ec02f702b8d55283a9f7fcd" name="check_postgres" arch="noarch">
  <version epoch="0" ver="2.26.0" rel="bp160.1.13"/>
  <changelog author="darin@darins.net" date="1376049600">- update to 2.20.1
- removed perl-marcro from .spec</changelog>
  <changelog author="lars@linux-schulserver.de" date="1383048000">- update to 2.21.0
- remove perl-macros dependency
- add check_postgres.pl man page (and script to generate it
  from source)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1406721600">- rename subpackage to monitoring-plugins-postgres</changelog>
  <changelog author="aj@ajaissle.de" date="1489838400">- BuildRequire perl-macros to fix SLE_11_SP4 build</changelog>
  <changelog author="aj@ajaissle.de" date="1489838401">- Update to 2.22.0</changelog>
  <changelog author="lars@linux-schulserver.de" date="1521633600">- Update to 2.23.0:
  + added support for PostgreSQL 10
  + Change table_size to use pg_table_size() on 9.0+
  + Connection errors are now always critical, not unknown
  + New action replication_slots checking if logical or physical
    replication slots have accumulated too much data
  + Multiple same_schema improvements
  + Add Spanish message translations
  + Allow a wrapper function to run wal_files and archive_ready
    actions as non-superuser
  + Add some defensive casting to the bloat query
  + Invoke psql with option -X
  + check_txn_idle: Don't fail when query contains 'disabled' word
  + check_txn_idle: Use state_change instead of query_start.
  + check_hot_standby_delay: Correct extra space in perfdata
  + Remove \r from psql output as it can confuse some regexes
  + Sort failed jobs in check_pgagent_jobs for stable output
- run spec cleaner
- use %%license for newer distributions</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553774400">- Update to version 2.24.0
  * Support new_version_pg for PG10
  * Option to skip CYCLE sequences in action sequence
  * Output per-database perfdata for pgbouncer pool checks
  * German message translations
  * Consider only client backends in query_time and friends
- Use github Source URL</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580817600">- Update to version 2.25.0
  * Allow same_schema objects to be included or excluded with
  - -object and --skipobject
  * Fix to allow mixing service names and other connection
    parameters for same_schema</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1646740800">- added /etc/nrpe.d/check_postgres.cfg, containing some pre-configured
  nrpe checks for the different check options</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1680868800">- Update to version 2.26.0
  * Add new action "pgbouncer_maxwait".
  * For the bloat check, add option to populate all known databases,
    as well as includsion and exclusion regexes.
  * Add Partman premake check.
  * Add --role flag to explicitly set the role of the user after
    connecting.
  * Fix check_replication_slots on recently promoted servers.
  * Allow the check_disk_space action to handle relative
    log_directory paths.
  * Fix MINPAGES and MINIPAGES in the "check_bloat" action.
  * Replace 'which' with 'command -v'.
  * Fix check_replication_slots on recently promoted servers.
  * Fix undefined variable warning.
  * In the tests, force log_destination to stderr.
  * Add to docs how to exclude all items in the 'pg_temp_nnn'
    per-session temporary schemas.
  * Various improvements to the tests.</changelog>
</package>
<package pkgid="68c67119c1690c3f6e68d9fc5c90841e8a0b44bfc9436bbd49f5ac5608655ab3cc7b3eba84e34cc859e6689037b7fba5ba578304a9903414e2c70bf6c69f34bb" name="checkbashisms" arch="noarch">
  <version epoch="0" ver="2.22.2" rel="160000.2.2"/>
  <changelog author="mwilck@suse.com" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="tchvatal@suse.com" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
  <changelog author="mliska@suse.cz" date="1606132800">- Add backport from master devscripts-checkbashisms-early-fail.patch.</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1651492800">- Add missing uscan dependencies perl-{File-HomeDir,IPC-Run,Moo}</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- update to 2.22.2:
  * who-permits-upload:
    + Fix fingerprint lookup, so it actually finds the user id
  * debsnap:
    + Add a -l option as the short version of --list.  Closes: #1006904
  * sadt:
    + Run autodep8 when looking for autopkgtests to run.
  * deprepro:
    + Add new options, to make it easier to debrepro against arbitrary source
    directories (i.e. not Debian packages):
  - -B, --build-command: specify custom build command
  - -a, --artifact-pattern: specify custom artifacts to be compared
    across builds
  - --no-copy: run commands against the source tree directly, i.e. don't
    copy it to a temporary build directory.
  * mk-origtargz:
    + Apply patch from Vasyl Gello to make Files-Included-&lt;component&gt; work.
  * Include the updated Portuguese translation.  Closes: #1011316
    Thanks to Américo Monteiro &lt;a_monteiro@gmx.com&gt;.
  * Run perltidy with the newer 20220217.
  * Bump Standards-Version to 4.6.1, no changes needed.
  * mk-origtargz:
    + Display compression/tar errors
  * wrap-and-sort:
    + Introduce an experimental mode using the RTS parser available with
    python-debian &gt;= 0.1.43.  This will let wrap-and-sort retain comments.
    This feature is opt-in with a new flag.  MR: !237
    + Futher improvements to the RTS mode, now also supporting short indent
    (-s) among others.  MR: !263
  * deb-janitor:
    + Add a new 'review' subcommand.  MR: !261
  * wnpp-check:
    + Replace HTTP URLs with HTTPS.  Closes: #1002311, #902242; MR: !256
  * rc-alert, wnpp-alert, wnpp-check:
    + Allow curl to follow HTTP redirections.  MR: !257
  * wnpp-check:
    + Document -e,--exact in the --help output.  Closes: #1003254
  * Make pristine-tar a Suggests in Ubuntu, as it's not in main so it can't be
    a Recommends.  LP: #1885766
  * Don't build-depend on subversion on i386, skipping the test_uscan_svn
    test; this is to avoid a delta with Ubuntu, that doesn't have svn on i386.
  * debrebuild:
    + Use the new field_parse_binary_source() from libdpkg-perl &gt;= 1.21.0
    if available.  MR: !249
  * test_uscan_mangle:
    + Use MGZREPACK to specify the expected file extension when necessary;
    otherwise, use the default file extension.
    + Add a workaround for testWatch4WebNonNativeMUT0(). MR: !258
    + Test use of filenamemangle with single and multiple upstream tarballs.
    + Modify helperWatch() to accept filenamemangled filenames.
    + Allow filenamemangling with multiple upstream tarballs.
  * Fix some spelling errors in code comments.  MR: !243
  * hardening-check:
    + Handle emtpy symble table by returning an unknown result for the
    stack-protector check.  MR: !223
  * salsa:
    + Add a new last_ci_status subcommand.  MR: !226
- drop devscripts-checkbashisms-early-fail.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1701172800">- Move checkbashisms to a separate multibuild flavor, reduce
  build cycle when only checkbashisms is needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716292800">- Mark %{buildroot}%{_bindir}/checkbashisms executable: sed … &gt;
  %{buildroot}%{_bindir}/checkbashisms creates a non-executable,
  regular file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716552000">- Fix minor issues:
  + Do not build devscripts main package (empty) in checkbashisms
    flavor.
  + Ensure the two flavors have different .src.rpm names, not
    overwriting each other.</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">-  remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
</package>
<package pkgid="8587a2454dda2fc74881c14e5a71ea0f138863653d7c5e9c2cc45e6c16860c881529f57007da3b33ac275c9c9b009d32300f9580b8d901f8f8e89d1fc86bc070" name="checker-qual" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1652788800">- Initial packaging of checkerframework's checker-qual annotations
  3.22.0</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="d9aa1e719ed5d8d912a3de2259787a4e78ef70087a27c876ece5447e7fa5eaafeea209cb9fba0e0d2581837abe3048d8d9f7c7f041791008e60dc248b6f6f630" name="checker-qual-javadoc" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1652788800">- Initial packaging of checkerframework's checker-qual annotations
  3.22.0</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
</package>
<package pkgid="b01aa978195918f826a6676c7132ccde6bd110ac2692d0bd2ffddc82b924f9cbea7bd0e1d683ca5b893f3c09810a52526a08af87fbe2c0b07d1394a3c4da574a" name="checkmedia" arch="x86_64">
  <version epoch="0" ver="6.3" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
</package>
<package pkgid="b547a958aa29836e468982b540e50612e4884ae0a05a5529f1265af3cddb3e2d0ce7e1e6bf272eb2b58fff57b314a86fe801103ea74183808b6b811e8682b0c4" name="checkmedia" arch="x86_64">
  <version epoch="0" ver="6.6" rel="160000.1.1"/>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612800">- merge gh#openSUSE/checkmedia#22
- Add support for GPT partitions</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612801">- merge gh#openSUSE/checkmedia#23
- include pre-built documentation (bsc#1260860)
- simplify spec file
- 6.6</changelog>
</package>
<package pkgid="d3a9c85c3449a7e0e09c3137bb04a1e833bf166c22f032c5a42a9e839b2194f6faff35f90c1ccf9db7880149e4871547e556c376b3cbe1aa61e65a5b1d31c8cc" name="checkpolicy" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="160000.2.2"/>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2
  * Fix a memleak and an integer overflow</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3
  * When reading a binary policy by checkpolicy, do not automatically change the version
    to the max policy version supported by libsepol or, if specified, the value given
    using the "-c" flag.
  * Updated documentation
  * Prints the reason why opening a source policy file failed</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4
  * warn on bogus IP address or netmask in nodecon statement
  * allow wildcard permissions in constraints
  * mention class name on invalid permission</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="cathy.hu@suse.com" date="1702987200">- Update to version 3.6
  https://github.com/SELinuxProject/selinux/releases/tag/3.6
  * checkpolicy: Add the command line argument -N, --disable-neverallow
  * dispol: add option to display users, drop duplicate option to display booleans,
  show number of entries before listing them
  * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies
  * dispol: add options: --actions ACTIONS, --help
  * dismod: add options: --actions ACTIONS, --help
  * Add notself support for neverallow rules
  * Improve man pages
  * man pages: Remove the Russian translations
  * Add notself and other support to CIL
  * Add support for deny rules
  * Translations updated from
    https://translate.fedoraproject.org/projects/selinux/
  * Bug fixes
- Remove keys from keyring since they expired:
  - E853C1848B0185CF42864DF363A8AD4B982C4373
    Petr Lautrbach &lt;plautrba@redhat.com&gt;
  - 63191CE94183098689CAB8DB7EF137EC935B0EAF
    Jason Zaman &lt;jasonzaman@gmail.com&gt;
- Add key to keyring:
  - B8682847764DF60DF52D992CBC3905F235179CF1
    Petr Lautrbach &lt;lautrbach@redhat.com&gt;</changelog>
  <changelog author="cathy.hu@suse.com" date="1719835200">- Update to version 3.7
  https://github.com/SELinuxProject/selinux/releases/tag/3.7
  * User-visible changes:
  * checkpolicy: support CIDR notation for nodecon statements
  * checkpolicy: provide more descriptive error messages and improve error handling
  * Bugfixes:
  * checkpolicy: handle unprintable token
  * checkpolicy: avoid assigning garbage values
  * checkpolicy: free temporary bounds type
  * checkpolicy: perform contiguous check in host byte order
  * checkpolicy: include &lt;ctype.h&gt; for isprint(3)
  * oss-fuzz fixes:
  * checkpolicy: add libfuzz based fuzzer
  * checkpolicy: free complete role_allow_rule on error
  * checkpolicy: free identifiers on invalid typebounds
  * checkpolicy: return YYerror on invalid character
  * checkpolicy: clone level only once</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- Update to version 3.8
  https://github.com/SELinuxProject/selinux/releases/tag/3.8
  * Code improvements and bug fixes
- For a more in depth list of changes see
  https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
- keyring: Update Petr Lautrbach &lt;lautrbach@redhat.com&gt;
  * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
  * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)</changelog>
  <changelog author="cathy.hu@suse.com" date="1741348800">- Update to version 3.8.1
  https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
  * no source change</changelog>
</package>
<package pkgid="e206ced14477d89e864c26c1c4d185f814538cc5e55d9116a0df915bb21f7c0f461fdb2be5588cf1d023bb2269b1f8794e0e8e7ef588e1a6872d4e9393412140" name="checksec" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="bp160.1.9"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1616673600">- Initial package (derived from Fedora spec)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1623240000">- add missing gawk dependency</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640001600">- update to 2.5.0:
  * split checksec into multiple files for easier maintenance and debugging
  * remove space between options and only support `=` until refactor can happen
  * update License.txt to include BSD license
  * Check journalctl -k for NX protection
  * improve debug formatting
  * Fix shellcheck warnings and style issues
  * Make --dir option follow symlinks</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1647432000">- add procps dependency for sysctl</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- update to 2.6.0:
  * fix missing sysctl on fedora
  * remove extra parenthesis
  * add missing libc on LoongArch-64</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715256000">- update to 2.7.1:
  * checksec FORTIFY detection (#236)
  * libc cleanup
  * Added github pages
  * Check kernel for YAMA
  * Fix Nx checks
  * Move github primary branch from master to main
  * Update gitattributes
  * Allow setting a libc file
  * Add tests for listfile
  * Fix trailing comma with listfile
  * Several shellcheck fixes
  * If no header is present, return N/A for Relro and nx
  * Remove superfluous -W flags
  * Fix broken Nx checks
  * change default libc search path from / to /lib
  * Cleanup grep
  * Rewrite man page in mdoc
  * Remove s_readelf
  * Fix stack protection and full relro check
  * Add tests suite for hardening checks
  * Speed up FS_comparison by 10x
  * Make shellcheck only run on final script
  * Fix debug exit check
  * Use Dynamic Section if there is no symbols table
  * Check foritfy vs fortified</changelog>
</package>
<package pkgid="a2f89a7e095a0508741086daf28249b25a9effca67aacbfef3a6e4edfb703ec0f29d04eaa9f1481cd6baded63a7f7b5466ed6c73e987c25b910d5d4be5062960" name="chemical-mime-data" arch="noarch">
  <version epoch="0" ver="0.1.94" rel="bp160.1.10"/>
  <changelog author="lars@linux-schulserver.de" date="1222084800">- moved to Education base repository</changelog>
  <changelog author="lars@linux-schulserver.de" date="1273838400">- added librsvg-devel to BuildRequires</changelog>
  <changelog author="lars@linux-schulserver.de" date="1275912000">- require rsvg-view and gnome-mime-data
- recommend gnome-icon-theme</changelog>
  <changelog author="mailaender@opensuse.org" date="1486382400">- disable kde3 libs
- use https://en.opensuse.org/SourceUrls
- let the system update the mime database</changelog>
  <changelog author="jengelh@inai.de" date="1486382401">- Limit fdupes to each partition</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726400">- Add reproducible.patch to use convert -strip to not have timestamps
  in png files to make build fully reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1508500800">- Drop gnome-mime-data BuildRequires and Requires: there was
  already --without-gnome-mime passed to configure.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572264000">- Drop rsvg-view BuildRequires and requires: none of the binaries
  provided by this package are referenced in the tarball.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1572350400">- Some more cleanup of build and runtime requires, drop unneeded ones
  (libxsltproc-devel, python).
- Adjust URL - canonical upstream URL is defunct, but the historical
  https://www.ch.ic.ac.uk/chemime/ still works and has useful links.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="67b19bfcaab1823bd79ddccf17f62ae15a1601f2b66bec521efd35041bcc049375aabc60045aaceb46dba48da18df9d8eda8ab6bd4a7c162e29ddbeada75e5a8" name="cherrytree" arch="x86_64">
  <version epoch="0" ver="1.1.4+18" rel="bp160.1.16"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693310400">- Update to 1.0.1:
  + Fixed overwrite confirmation not working when saving as new
    multifile storage (#2333).
  + Fixed crash on close (#2302).
  + Fixed xorg crash / wayland warning caused by popup menus
    without a parent (#2328).
  + Fixed paste content copied from column edit mode not working
    in codeboxes.
  + Highlight current text line to be disabled when the text loses
    focus or when the text is in column mode.
  + Reverted 'on windows, paste image from clipboard to take
    priority over html target ...' causing paste from spreadsheet
    cells generating a picture instead of a table.
  + Default keyboard shortcut for increase/decrease table column
    changed to Ctrl+Alt+&gt; Ctrl+Alt+&lt; as Ctrl+) isn't working
    on windows (#2336).
  + Added new stock icon light bulb / internet of things IoT.
  + Added option 'recent_docs' in config.cfg to be set to false
    in order to not remember the recent documents (#2330).
  + Incomplete languages: ar, el, fi, hi_IN, hr, ja, lt, pt.</changelog>
  <changelog author="gumsley_6@hotmail.com" date="1695988800">- Update to version v1.0.2:
  + fixed single click on line number to select line, double click
    for pargraph (#1363)
  + multi pages support to all matches dialog, added arrows icons
    for navigation buttons
  + fixed crash when searching with all matches option and the
    text line containing the pattern is very long
  + modified colour of arrow in stock icon ct_download
  + added 42 stock icons
  + added multi pages support to all matches dialog with a limit
    of 50 matches per page (#2019)
  + improved performance of search/replace with option
    'all matches' (#272, #1830, #2019)
  + changed a couple of keyboard accelerators in pl.po</changelog>
  <changelog author="gumsley_6@hotmail.com" date="1702814400">- Cumulative update to version 1.0.4:
  + fixed crash when displaying search results dialog (#2398,
    [#2399], #2404, #2405)
  + preferences dialog, keyboard shortcuts, now emphasizing with
    bold the overridden/non default shortcuts (#2397)
  + preferences dialog, keyboard shortcuts, added possibility to
    reset an individual shortcut to the default value
  + changed default keyboard shortcuts to move tree nodes From
    Shift+Arrows to Shift+Alt+Arrows as disrupting the
    functionality of text selection (#2397, #2400)
  + fixed crash when losing access to open document (#2120)
  + fixed crash sorting table (#2391)
  + fixed issues with search/replace and option 'all matches'
  + fixed corrupted export to pdf on mac os with non ascii links
    to files/folders (#2388)
  + multi page search results increased default limit 50-&gt;500 and
    configurable in config.cfg 'max_matches_in_page' (#2370)
  + changed all the default keyboard shortcuts using Ctrl+Alt for
    issues on windows with AltGr key (#2341, #2324, #2316, #2124,
    [#2069], #1944)
  + fixed progress bar of search hardly visible on windows (#2373)
  + nodes in bookmark menu to have the correct icon rather the
    anonymous pin icon (#206)
  + fixed node name in bookmarks menu not updated if node renamed
    (#2393)
  + export to pdf, now hiding anchor character (#2379)
  + changed codebox border colour with theme cobalt-darkened as
    hardly visible
  + added option in config.cfg to disable tree, menus and toolbar
    tooltips 'tree_tooltips', 'menus_tooltips',
    'toolbar_tooltips' (#2169)
  + fixed paste of code selection to rich text target adding
    unwanted newline with
  + fixed issue when changing theme in preferences dialog, style
    scheme editor, the change was only applied to the current node</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1711368000">- Update to version 1.1.0+7:
  + Fixed regression import nodes from cherrytree not importing
    anything, (gh#giuspen/cherrytree#2463).
  + Fixed unwanted nodes expansion with auto reload from external
    doc edit and enabled option to show bookmarked nodes at start,
    (gh#giuspen/cherrytree#2464).
  + Changed default value of option to automatically focus the text
    at new tree node clicked, from false to true
  + Fixed regression vertical scroll and cursor position of
    previous nodes not remembered, (gh#giuspen/cherrytree#2460).
  + Fixed regression searching in multiple nodes, only nodes names
    and tags, not working, (gh#giuspen/cherrytree#2461 and
    gh#giuspen/cherrytree#2408).
  + Fixed double click on word in table cell, heavy implementation,
    not selecting word.
  + Find dialog to show selected text also in codebox and table.
  + Adding support for replace in tables/codeboxes.
  + Find matches results dialog fixed line numbers.
  + Fix iterative find in multiple nodes not focusing correctly
    results in tables and codeboxes.
  + Fix regression in all matches dialog after latest changes.
  + Improved search in tables and codeboxes to list and select all
    the instances, (gh#giuspen/cherrytree#2155 and
    gh#giuspen/cherrytree#2444).
  + Icon save on the menu is now greyed out when save is not
    needed.
  + Fixed tooltip on search results dialog, expected to display the
    node hierarchical name.
  + Fixed regression find next not scrolling correctly after minor
    rework.
  + Fixed regression in search/replace, first replace, after allow
    text selection with search/replace dialog open,
    (gh#giuspen/cherrytree#2426).
  + Fixed issue with find and presence of anchored widgets,
    (gh#giuspen/cherrytree#2444).
  + Removed workaround to old GTK issue no longer relevant (called
    newline trick).
  + Added stock icon of postman app.
  + Added in preferences dialog control of text margins left/right.
  + Added in preferences dialog control of max search results per
    page.
  + Added in preferences dialog enable/disable tooltips on tree,
    menus, toolbar.
  + Added in preferences dialog control of scrollbar slider minimum
    size.
  + Added in preferences dialog control of whether the scrollbar
    overlays the text editor.
  + Added also in preferences dialog control of the toolbar icons
    size.
  + Added also in preferences dialog option to enable/disable the
    menubar in titlebar, (gh#giuspen/cherrytree#2443).
  + Moved some preferences dialog settings from tab 'miscellanous'
    to tab 'fonts' that has been renamed 'interface'.
  + Codeboxes can be configured with or without toolbar in
    preferences dialog, tab rich text.
  + Improved vertical toolbar in codeboxes supporting code exec,
    code copy, edit properties.
  + Implemented vertical toolbar in codeboxes supporting code exec,
    code copy, edit properties
  + Fixed error print when drag from empty tree.
  + Fixed error print when unmiximising window with empty tree.
  + Fixed error prints when reloading last used document but file
    no longer available.
  + Shared nodes, updated unit tests.
  + Fixed compilation error on linux.
  + Shared nodes, tree info summary dialog to count the shared data
    only once.
  + Shared nodes, print group information in node properties dialog.
  + Implemented support for so called shared nodes that all point
    to the same data - create with right click on node,
    (gh#giuspen/cherrytree#1222).
  + Fixed warning while running unit tests for empty
    curr_tree_iter().
  + Changed 6 default keyboard shortcuts using {,},[,] as
    problematic on German/Norwegian keyboards,
    (gh#giuspen/cherrytree#2423).
  + Fixed zoom not working with Ctrl+ on english keyboard (key + is
    on shift)
  + Add gruvbox style themes, (gh#giuspen/cherrytree#2435).
  + Allow text selection with search/replace dialog open,
    (gh#giuspen/cherrytree#2426).
  + Separated search/replace dialog code from action after the ok
    is clicked so that will be possible to make the dialog non
    modal, (gh#giuspen/cherrytree#2426).
  + Added options in config.cfg 'txt_margin_left',
    'txt_margin_right' to control the text margins,
    (gh#giuspen/cherrytree#2425).
  + Added option in config.cfg 'scroll_slider_min' to allow control
    of the minimum size of the scrollbar slider, default 16px,
    (gh#giuspen/cherrytree#2427).
  + Added option in config.cfg 'overlay_scroll' to allow to
    override the system setting for scrollbar overlay/auto hide -
    2=system, 1=on, 0=off, (gh#giuspen/cherrytree#2427).
  + Increased scrollbars size on windows,
    (gh#giuspen/cherrytree#2427).
  + Saving RGB for custom user colours with format rgb24 #abcdef.
  + Added up to 18 custom user colours in the colour picker
    palette, (gh#giuspen/cherrytree#2422).
  + Added ABAP syntax highlighting, (gh#giuspen/cherrytree#2430).
  + Debugging issue with colour picker,
    (gh#giuspen/cherrytree#2422).
  + Reset autosave when manually saving; autosave used counter that
    suspended time doesn't count, (gh#giuspen/cherrytree#2120).
  + Fixed crash when rapidly moving node in tree via keyboard
    shortcuts, (gh#giuspen/cherrytree#2409).
  + Fixed crash when rapidly moving node in tree via keyboard
    shortcuts, (gh#giuspen/cherrytree#2409).
  + Fixed regression in speed when searching in nodes names and
    tags, no nodes contents, after v1.0.2,
    (gh#giuspen/cherrytree#2408).
  + Updated translations.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1711368001">- Fix source version error and _service file.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1711713600">- Update to version 1.1.1+2:
  + Fixed regression after one search with replace, all subsequent
    searches open replace dialog, (gh#giuspen/cherrytree#2468).
  + Fixed regression searching in multiple nodes, only nodes names
    and tags, not working, (gh#giuspen/cherrytree#2461 and
    gh#giuspen/cherrytree#2408).
  + fixed import from cherrytree sqlite document having shared
    nodes.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1712318400">- Update to version 1.1.2+0:
  + Fixed regression crash when deleting a node with children,
    (gh#giuspen/cherrytree#2476).
  + Fixed regression issue with search,
    (gh#giuspen/cherrytree#2469).
  + Fixed drop position of dragged text wrongly one position to the
    left.
  + Fixed html paste, (gh#giuspen/cherrytree#2474).
  + README updated: Languages status.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1718452800">- Update to version 1.1.3+1:
  + Position (row,column) of the cursor in statusbar - improved.
  + Added in statusbar the position (row,column) of the cursor.
  + Added in config.cfg the group [proxy] to support downloading.
    data/checking for new version available from behind a proxy,
    (gh#giuspen/cherrytree#2522).
  + Reworked CtConfig to ensure single instance during whole life
    of the app.
  + Added support for moving cursor to table cell previous/next
    when key left pressed before first character/right pressed
    after the last character, (gh#giuspen/cherrytree#2523).
  + Added support for moving cursor to table cell above/below when
    key up pressed on first line/down pressed on the last line,
    (gh#giuspen/cherrytree#2523).
  + Fixed right click -&gt; copy link not working if there is a text
    selection, (gh#giuspen/cherrytree#2362).
  + Temporary workaround for crash in Gsv::Init() -&gt; [gtk]
    [critical] Class::register_derived_type(): base_query.type_name
    is NULL, (gh#giuspen/cherrytree#2518).
  + Removed 'Set the global C++ locale to the user-specified
    locale'.
  + Minor rework in g_log_set_default_handler,
    (gh#giuspen/cherrytree#2518).
  + Fix typos in bug_report.md, (gh#giuspen/cherrytree#2519).
  + Fixed drag and drop of text when line numbers visible.
  + Replaced regular expression help dead url,
    (gh#giuspen/cherrytree#2511).
  + Support for drag and drop of text with copy instead of move.
  + New multifile data storage, in case of corruption all backups
    are looked for data recovery starting from the most recent,
    (gh#giuspen/cherrytree#2505).
  + Added checks to prevent a save as or export overwriting the
    currently open document (as t as unsupported,
    (gh#giuspen/cherrytree#2504).
  + Updated supporters record.
  + Fixed crash when importing text file for incorrect detection of
    encoding, (gh#giuspen/cherrytree#2492).
  + Removed all noexcept operators.
  + Do not allow in the preferences dialog, toolbar configurator,
    to add a button twice, (gh#giuspen/cherrytree#2482).
  + Fixed crash in case of a duplicated button configured in the
    toolbar, (gh#giuspen/cherrytree#2482).
  + Fixed unit test after new library png encoding.
  + Updated translations.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1719835200">- Update to version 1.1.4+1:
  + Fixed msys2 script.
  + Fixed syntax error in latex wrongly detected as failure to
    access latex executable, (gh#giuspen/cherrytree#2534).
  + Copy link to node and copy anchor link to include absolute path
    to the cherrytree document and hierarchical path to node,
    (gh#giuspen/cherrytree#2452).
  + Implemented reset of zoom with Ctrl+0,
    (gh#giuspen/cherrytree#1835).
  + Improved extraction from a password protected archive (.ctz,
    .ctx) to distinguish incorrect password from a corrupted
    archive / not an archive.
  + Removed message instructing the user how to manually recover
    using the backups as cherrytree will do it itself automatically
    after asking the user.
  + Added auto recovery from a backup (after asking the user) in
    case of corrupted document.
  + Added warning message in case an automatic restore from backup
    was necessary for the new multifile data storage document.
  + Debugging issue with locale, (gh#giuspen/cherrytree#2529).</changelog>
  <changelog author="dimstar@opensuse.org" date="1726142400">- Update to version 1.1.4+18:
  * added support for new language Slovak
  * fixed msys2_prepare_standalone.sh for new libgtksourceview4;
  * dropped unmantained and outdated libgtksourceviewmm3 for
    libgtksourceview4
  * Fix formatting issues with fmt 11
  * removed fmt custom formatter for Glib::ustring
  * starting work on collapsable headers
  * changed default keyboard shortcut to open codebox properties
    dialog to Shift+Alt+U as the previous shortcut was causing
    problems to german layout keyboards
  * default keyboard shortcut to Ctrl+Shift+G for new quick-select
    node dialog
  * (feat): Adding new quick-select dialog
  * link to outstanding third party android project SourCherry
  * fix fonts stretch property not supported
  * fix italic fonts not supported
  * fix bold fonts not supported
- Replace pkgconfig(gtksourceviewmm-3.0) BuildRequies with
  pkgconfig(gtksourcevie-4.0): follow upstream.</changelog>
</package>
<package pkgid="7ae29a4249c83177ba8f1157397ccc866ba1b2db41a099d0014fb971d8db073a7808c5c0adff56d154a9c982bd7e6180d26aca7aad1d626687fb6ecfa9a1cc47" name="cherrytree-lang" arch="noarch">
  <version epoch="0" ver="1.1.4+18" rel="bp160.1.16"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1693310400">- Update to 1.0.1:
  + Fixed overwrite confirmation not working when saving as new
    multifile storage (#2333).
  + Fixed crash on close (#2302).
  + Fixed xorg crash / wayland warning caused by popup menus
    without a parent (#2328).
  + Fixed paste content copied from column edit mode not working
    in codeboxes.
  + Highlight current text line to be disabled when the text loses
    focus or when the text is in column mode.
  + Reverted 'on windows, paste image from clipboard to take
    priority over html target ...' causing paste from spreadsheet
    cells generating a picture instead of a table.
  + Default keyboard shortcut for increase/decrease table column
    changed to Ctrl+Alt+&gt; Ctrl+Alt+&lt; as Ctrl+) isn't working
    on windows (#2336).
  + Added new stock icon light bulb / internet of things IoT.
  + Added option 'recent_docs' in config.cfg to be set to false
    in order to not remember the recent documents (#2330).
  + Incomplete languages: ar, el, fi, hi_IN, hr, ja, lt, pt.</changelog>
  <changelog author="gumsley_6@hotmail.com" date="1695988800">- Update to version v1.0.2:
  + fixed single click on line number to select line, double click
    for pargraph (#1363)
  + multi pages support to all matches dialog, added arrows icons
    for navigation buttons
  + fixed crash when searching with all matches option and the
    text line containing the pattern is very long
  + modified colour of arrow in stock icon ct_download
  + added 42 stock icons
  + added multi pages support to all matches dialog with a limit
    of 50 matches per page (#2019)
  + improved performance of search/replace with option
    'all matches' (#272, #1830, #2019)
  + changed a couple of keyboard accelerators in pl.po</changelog>
  <changelog author="gumsley_6@hotmail.com" date="1702814400">- Cumulative update to version 1.0.4:
  + fixed crash when displaying search results dialog (#2398,
    [#2399], #2404, #2405)
  + preferences dialog, keyboard shortcuts, now emphasizing with
    bold the overridden/non default shortcuts (#2397)
  + preferences dialog, keyboard shortcuts, added possibility to
    reset an individual shortcut to the default value
  + changed default keyboard shortcuts to move tree nodes From
    Shift+Arrows to Shift+Alt+Arrows as disrupting the
    functionality of text selection (#2397, #2400)
  + fixed crash when losing access to open document (#2120)
  + fixed crash sorting table (#2391)
  + fixed issues with search/replace and option 'all matches'
  + fixed corrupted export to pdf on mac os with non ascii links
    to files/folders (#2388)
  + multi page search results increased default limit 50-&gt;500 and
    configurable in config.cfg 'max_matches_in_page' (#2370)
  + changed all the default keyboard shortcuts using Ctrl+Alt for
    issues on windows with AltGr key (#2341, #2324, #2316, #2124,
    [#2069], #1944)
  + fixed progress bar of search hardly visible on windows (#2373)
  + nodes in bookmark menu to have the correct icon rather the
    anonymous pin icon (#206)
  + fixed node name in bookmarks menu not updated if node renamed
    (#2393)
  + export to pdf, now hiding anchor character (#2379)
  + changed codebox border colour with theme cobalt-darkened as
    hardly visible
  + added option in config.cfg to disable tree, menus and toolbar
    tooltips 'tree_tooltips', 'menus_tooltips',
    'toolbar_tooltips' (#2169)
  + fixed paste of code selection to rich text target adding
    unwanted newline with
  + fixed issue when changing theme in preferences dialog, style
    scheme editor, the change was only applied to the current node</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1711368000">- Update to version 1.1.0+7:
  + Fixed regression import nodes from cherrytree not importing
    anything, (gh#giuspen/cherrytree#2463).
  + Fixed unwanted nodes expansion with auto reload from external
    doc edit and enabled option to show bookmarked nodes at start,
    (gh#giuspen/cherrytree#2464).
  + Changed default value of option to automatically focus the text
    at new tree node clicked, from false to true
  + Fixed regression vertical scroll and cursor position of
    previous nodes not remembered, (gh#giuspen/cherrytree#2460).
  + Fixed regression searching in multiple nodes, only nodes names
    and tags, not working, (gh#giuspen/cherrytree#2461 and
    gh#giuspen/cherrytree#2408).
  + Fixed double click on word in table cell, heavy implementation,
    not selecting word.
  + Find dialog to show selected text also in codebox and table.
  + Adding support for replace in tables/codeboxes.
  + Find matches results dialog fixed line numbers.
  + Fix iterative find in multiple nodes not focusing correctly
    results in tables and codeboxes.
  + Fix regression in all matches dialog after latest changes.
  + Improved search in tables and codeboxes to list and select all
    the instances, (gh#giuspen/cherrytree#2155 and
    gh#giuspen/cherrytree#2444).
  + Icon save on the menu is now greyed out when save is not
    needed.
  + Fixed tooltip on search results dialog, expected to display the
    node hierarchical name.
  + Fixed regression find next not scrolling correctly after minor
    rework.
  + Fixed regression in search/replace, first replace, after allow
    text selection with search/replace dialog open,
    (gh#giuspen/cherrytree#2426).
  + Fixed issue with find and presence of anchored widgets,
    (gh#giuspen/cherrytree#2444).
  + Removed workaround to old GTK issue no longer relevant (called
    newline trick).
  + Added stock icon of postman app.
  + Added in preferences dialog control of text margins left/right.
  + Added in preferences dialog control of max search results per
    page.
  + Added in preferences dialog enable/disable tooltips on tree,
    menus, toolbar.
  + Added in preferences dialog control of scrollbar slider minimum
    size.
  + Added in preferences dialog control of whether the scrollbar
    overlays the text editor.
  + Added also in preferences dialog control of the toolbar icons
    size.
  + Added also in preferences dialog option to enable/disable the
    menubar in titlebar, (gh#giuspen/cherrytree#2443).
  + Moved some preferences dialog settings from tab 'miscellanous'
    to tab 'fonts' that has been renamed 'interface'.
  + Codeboxes can be configured with or without toolbar in
    preferences dialog, tab rich text.
  + Improved vertical toolbar in codeboxes supporting code exec,
    code copy, edit properties.
  + Implemented vertical toolbar in codeboxes supporting code exec,
    code copy, edit properties
  + Fixed error print when drag from empty tree.
  + Fixed error print when unmiximising window with empty tree.
  + Fixed error prints when reloading last used document but file
    no longer available.
  + Shared nodes, updated unit tests.
  + Fixed compilation error on linux.
  + Shared nodes, tree info summary dialog to count the shared data
    only once.
  + Shared nodes, print group information in node properties dialog.
  + Implemented support for so called shared nodes that all point
    to the same data - create with right click on node,
    (gh#giuspen/cherrytree#1222).
  + Fixed warning while running unit tests for empty
    curr_tree_iter().
  + Changed 6 default keyboard shortcuts using {,},[,] as
    problematic on German/Norwegian keyboards,
    (gh#giuspen/cherrytree#2423).
  + Fixed zoom not working with Ctrl+ on english keyboard (key + is
    on shift)
  + Add gruvbox style themes, (gh#giuspen/cherrytree#2435).
  + Allow text selection with search/replace dialog open,
    (gh#giuspen/cherrytree#2426).
  + Separated search/replace dialog code from action after the ok
    is clicked so that will be possible to make the dialog non
    modal, (gh#giuspen/cherrytree#2426).
  + Added options in config.cfg 'txt_margin_left',
    'txt_margin_right' to control the text margins,
    (gh#giuspen/cherrytree#2425).
  + Added option in config.cfg 'scroll_slider_min' to allow control
    of the minimum size of the scrollbar slider, default 16px,
    (gh#giuspen/cherrytree#2427).
  + Added option in config.cfg 'overlay_scroll' to allow to
    override the system setting for scrollbar overlay/auto hide -
    2=system, 1=on, 0=off, (gh#giuspen/cherrytree#2427).
  + Increased scrollbars size on windows,
    (gh#giuspen/cherrytree#2427).
  + Saving RGB for custom user colours with format rgb24 #abcdef.
  + Added up to 18 custom user colours in the colour picker
    palette, (gh#giuspen/cherrytree#2422).
  + Added ABAP syntax highlighting, (gh#giuspen/cherrytree#2430).
  + Debugging issue with colour picker,
    (gh#giuspen/cherrytree#2422).
  + Reset autosave when manually saving; autosave used counter that
    suspended time doesn't count, (gh#giuspen/cherrytree#2120).
  + Fixed crash when rapidly moving node in tree via keyboard
    shortcuts, (gh#giuspen/cherrytree#2409).
  + Fixed crash when rapidly moving node in tree via keyboard
    shortcuts, (gh#giuspen/cherrytree#2409).
  + Fixed regression in speed when searching in nodes names and
    tags, no nodes contents, after v1.0.2,
    (gh#giuspen/cherrytree#2408).
  + Updated translations.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1711368001">- Fix source version error and _service file.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1711713600">- Update to version 1.1.1+2:
  + Fixed regression after one search with replace, all subsequent
    searches open replace dialog, (gh#giuspen/cherrytree#2468).
  + Fixed regression searching in multiple nodes, only nodes names
    and tags, not working, (gh#giuspen/cherrytree#2461 and
    gh#giuspen/cherrytree#2408).
  + fixed import from cherrytree sqlite document having shared
    nodes.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1712318400">- Update to version 1.1.2+0:
  + Fixed regression crash when deleting a node with children,
    (gh#giuspen/cherrytree#2476).
  + Fixed regression issue with search,
    (gh#giuspen/cherrytree#2469).
  + Fixed drop position of dragged text wrongly one position to the
    left.
  + Fixed html paste, (gh#giuspen/cherrytree#2474).
  + README updated: Languages status.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1718452800">- Update to version 1.1.3+1:
  + Position (row,column) of the cursor in statusbar - improved.
  + Added in statusbar the position (row,column) of the cursor.
  + Added in config.cfg the group [proxy] to support downloading.
    data/checking for new version available from behind a proxy,
    (gh#giuspen/cherrytree#2522).
  + Reworked CtConfig to ensure single instance during whole life
    of the app.
  + Added support for moving cursor to table cell previous/next
    when key left pressed before first character/right pressed
    after the last character, (gh#giuspen/cherrytree#2523).
  + Added support for moving cursor to table cell above/below when
    key up pressed on first line/down pressed on the last line,
    (gh#giuspen/cherrytree#2523).
  + Fixed right click -&gt; copy link not working if there is a text
    selection, (gh#giuspen/cherrytree#2362).
  + Temporary workaround for crash in Gsv::Init() -&gt; [gtk]
    [critical] Class::register_derived_type(): base_query.type_name
    is NULL, (gh#giuspen/cherrytree#2518).
  + Removed 'Set the global C++ locale to the user-specified
    locale'.
  + Minor rework in g_log_set_default_handler,
    (gh#giuspen/cherrytree#2518).
  + Fix typos in bug_report.md, (gh#giuspen/cherrytree#2519).
  + Fixed drag and drop of text when line numbers visible.
  + Replaced regular expression help dead url,
    (gh#giuspen/cherrytree#2511).
  + Support for drag and drop of text with copy instead of move.
  + New multifile data storage, in case of corruption all backups
    are looked for data recovery starting from the most recent,
    (gh#giuspen/cherrytree#2505).
  + Added checks to prevent a save as or export overwriting the
    currently open document (as t as unsupported,
    (gh#giuspen/cherrytree#2504).
  + Updated supporters record.
  + Fixed crash when importing text file for incorrect detection of
    encoding, (gh#giuspen/cherrytree#2492).
  + Removed all noexcept operators.
  + Do not allow in the preferences dialog, toolbar configurator,
    to add a button twice, (gh#giuspen/cherrytree#2482).
  + Fixed crash in case of a duplicated button configured in the
    toolbar, (gh#giuspen/cherrytree#2482).
  + Fixed unit test after new library png encoding.
  + Updated translations.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1719835200">- Update to version 1.1.4+1:
  + Fixed msys2 script.
  + Fixed syntax error in latex wrongly detected as failure to
    access latex executable, (gh#giuspen/cherrytree#2534).
  + Copy link to node and copy anchor link to include absolute path
    to the cherrytree document and hierarchical path to node,
    (gh#giuspen/cherrytree#2452).
  + Implemented reset of zoom with Ctrl+0,
    (gh#giuspen/cherrytree#1835).
  + Improved extraction from a password protected archive (.ctz,
    .ctx) to distinguish incorrect password from a corrupted
    archive / not an archive.
  + Removed message instructing the user how to manually recover
    using the backups as cherrytree will do it itself automatically
    after asking the user.
  + Added auto recovery from a backup (after asking the user) in
    case of corrupted document.
  + Added warning message in case an automatic restore from backup
    was necessary for the new multifile data storage document.
  + Debugging issue with locale, (gh#giuspen/cherrytree#2529).</changelog>
  <changelog author="dimstar@opensuse.org" date="1726142400">- Update to version 1.1.4+18:
  * added support for new language Slovak
  * fixed msys2_prepare_standalone.sh for new libgtksourceview4;
  * dropped unmantained and outdated libgtksourceviewmm3 for
    libgtksourceview4
  * Fix formatting issues with fmt 11
  * removed fmt custom formatter for Glib::ustring
  * starting work on collapsable headers
  * changed default keyboard shortcut to open codebox properties
    dialog to Shift+Alt+U as the previous shortcut was causing
    problems to german layout keyboards
  * default keyboard shortcut to Ctrl+Shift+G for new quick-select
    node dialog
  * (feat): Adding new quick-select dialog
  * link to outstanding third party android project SourCherry
  * fix fonts stretch property not supported
  * fix italic fonts not supported
  * fix bold fonts not supported
- Replace pkgconfig(gtksourceviewmm-3.0) BuildRequies with
  pkgconfig(gtksourcevie-4.0): follow upstream.</changelog>
</package>
<package pkgid="7f0ed40d78598f8a7588363f80e9ae5ac9509d5c6a36774294f4ad2e2d3a5c1c1e4ffd525df606311419433d9eb156315f913b63a1136018535998efc7c8d5a4" name="chewing-cli" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="160000.1.2"/>
  <changelog author="i@marguerite.su" date="1440417600">- Update to version 0.4.0+git20150820.285b47d:
  + fix resource leak
  + Add notification_email
  + Update build_command_prepend
  + Do not write last element of phone_array
  + Prevent fclose null file handler
  + Check return value for ftell
  + Check return value of UserGetPhraseFirst before use
  + testhelper.c: clean_userphase() ignore ENOENT
  + init_database.c: Fix strtoul error checking
  + init_database: make integer comparison 64-bit safe
  + Fix Coverity error "Buffer not null terminated"
  + Fix Coverity error "Copy into fixed size buffer"
  + Fix Coverity error "Explicit null dereferenced"
  + init_database.c: Resolve queue-full exception
  + gen_keystroke.c: Use static APIs
  + genkeystroke.c: Fix buffer usage
  + Disable selection keys out of the reasonable range
  + dump_database: utilize plat_mmap for file operations
  + Fix ChewingKillChar which is disabling OpenSymbolChoice
  + Use chewing_delete to delete ChewingContext
  + Detect attribute existence by hasattr, not __dict__</changelog>
  <changelog author="i@marguerite.su" date="1441108800">- move %install_info_delete to %preun</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511524800">- Update to version 0.4.0+git20171114.3df07c9:
  * CMakeLists.txt: Add stress
  * sort data/tsi.sr
  * Add Carpalx keyboard layout support
  * Fix warning in GCC
  * Let CHEWING_DATA_PREFIX and TEST_DATA_DIR be absolute
  * Fix wrong CHEWING_DATADIR definition in CMake build
  * Fix jk_selection
  * an API to convert phone to bopomofo
  * Test chewing_phone_to_bopomofo with invalid phone
  * Implement has_userphrase with chewing_userphrase_lookup
  * libchewing.texi: Fix format tweaks
  * Adjust behavior of chewing_phone_to_bopomofo
  * Fix array index out of bound error in stress.c
  * Make stress.c less verbose
  * Prefer https for web links
  * stress.c: Don't force set data path
  * Fix #235: Unable to input some Bopomofos with ET26 layout
  * prevent memory leak in error case of GetDefaultUserPhrasePath
  * stress: clean_userphrase before each test
  * stress: clean up temp ~userphrase after test
  * stress: fix -extra argument parsing
  * refactoring key tables in chewing test
  * simplify simulate.c
  * testchewing: support read input from file
  * stress: support read input from file
  * Fix PinYinData keySeq buffer overflow in PinYinInput()
  * Fix trying to allocate buffer of negative size
  * Fix access violation due to negative cursor position
  * stress.c: more verbose output
  * Fix heap-buffer-overflow when read wordSeq
  * Use strncmp to avoid buffer overflow
  * tree: avoid undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)
  * pinyin: avoid null-pointer dereference
  * chewingutil: fix dead assignment
  * Revert "libchewing.texi: Add chewing_bopomofo_String"
  * Fix memory leak in Discard2
  * Fix memory leak in UserUpdatePhrase().
  * code clean up, use new DestroyUserPhraseData()
  * userphrase-hash: avoid double free in TerminateUserphrase
  * test-userphrase: add test_userphrase_double_free
  * hash: fix hash item offset calculating in uhash.dat
  * hash: fix memory leak in HashFileOffsetWithUserPhrase
  * hash: fix memory access alignment
  * Fix ChoiceEndChoice expression always true
  * hash: follow consistent coding style
  * Update jvc-convert of KB layout Hsu
  * Auto learn phrases only after committing
  * Implement chewing_set_autoLearn() and chewing_get_autoLearn()
  * Fix indent in test/stress.c
  * Fix build with internal sqlite3
  * Fix: chewing_handle_Space() cannot input space when buffer is empty
  * hash: remove goto statement
  * Remove API changes/compatibility report link
  * hash: follow consistent coding style</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Remove pointless ldconfig call from chewing-utils subpackage.
- Specfile update: remove implicit BuildRoot and defattrs.
- Properly fulfill SLPP requirement that only the library file
  is in the library subpackage.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1632484800">- Remove unneeded BuildRequires on python-devel, and the conflicting
  old py_* macros.
- Remove references to "Python 2", the module supports Python 3.
- Mark COPYING as license.</changelog>
  <changelog author="mcepl@suse.com" date="1632916800">- Update to version 0.5.1+git20200627.452f622:
  * chewing.py supports platforms with 64bit pointer
  * Change ︰ to ：
  * Don't run tests in parallel
  * Try Ubuntu 16.04 Xenial
  * autotools: Build with -fPIC like the CMake-based one does
  * Show compilation commands if the build system is autotools
  * Tolerate unused const warnings
  * Fix LSan
  * Use internal-sqlite instead of static-sqlite, following 570ab6be</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1711281600">- move the %install_info macros to the subpackage where they belong</changelog>
  <changelog author="i@marguerite.su" date="1736078400">- update version 0.9.1
- drop unneeded patch:
  * libchewing-0.4.0-simple-select-rpath.patch
  * chewing-utils-abuild.patch</changelog>
  <changelog author="i@marguerite.su" date="1738152000">- fix search path for dictionaries</changelog>
</package>
<package pkgid="d333efee61a33b748feb4da302619b27f3183983e1995c2c54a582ec002087e2e223a82eeb9d2c2cf111af82fce159b63efa8a0c45f03e3d131229127be900b8" name="chewing-data" arch="noarch">
  <version epoch="0" ver="0.9.1" rel="160000.1.2"/>
  <changelog author="i@marguerite.su" date="1440417600">- Update to version 0.4.0+git20150820.285b47d:
  + fix resource leak
  + Add notification_email
  + Update build_command_prepend
  + Do not write last element of phone_array
  + Prevent fclose null file handler
  + Check return value for ftell
  + Check return value of UserGetPhraseFirst before use
  + testhelper.c: clean_userphase() ignore ENOENT
  + init_database.c: Fix strtoul error checking
  + init_database: make integer comparison 64-bit safe
  + Fix Coverity error "Buffer not null terminated"
  + Fix Coverity error "Copy into fixed size buffer"
  + Fix Coverity error "Explicit null dereferenced"
  + init_database.c: Resolve queue-full exception
  + gen_keystroke.c: Use static APIs
  + genkeystroke.c: Fix buffer usage
  + Disable selection keys out of the reasonable range
  + dump_database: utilize plat_mmap for file operations
  + Fix ChewingKillChar which is disabling OpenSymbolChoice
  + Use chewing_delete to delete ChewingContext
  + Detect attribute existence by hasattr, not __dict__</changelog>
  <changelog author="i@marguerite.su" date="1441108800">- move %install_info_delete to %preun</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511524800">- Update to version 0.4.0+git20171114.3df07c9:
  * CMakeLists.txt: Add stress
  * sort data/tsi.sr
  * Add Carpalx keyboard layout support
  * Fix warning in GCC
  * Let CHEWING_DATA_PREFIX and TEST_DATA_DIR be absolute
  * Fix wrong CHEWING_DATADIR definition in CMake build
  * Fix jk_selection
  * an API to convert phone to bopomofo
  * Test chewing_phone_to_bopomofo with invalid phone
  * Implement has_userphrase with chewing_userphrase_lookup
  * libchewing.texi: Fix format tweaks
  * Adjust behavior of chewing_phone_to_bopomofo
  * Fix array index out of bound error in stress.c
  * Make stress.c less verbose
  * Prefer https for web links
  * stress.c: Don't force set data path
  * Fix #235: Unable to input some Bopomofos with ET26 layout
  * prevent memory leak in error case of GetDefaultUserPhrasePath
  * stress: clean_userphrase before each test
  * stress: clean up temp ~userphrase after test
  * stress: fix -extra argument parsing
  * refactoring key tables in chewing test
  * simplify simulate.c
  * testchewing: support read input from file
  * stress: support read input from file
  * Fix PinYinData keySeq buffer overflow in PinYinInput()
  * Fix trying to allocate buffer of negative size
  * Fix access violation due to negative cursor position
  * stress.c: more verbose output
  * Fix heap-buffer-overflow when read wordSeq
  * Use strncmp to avoid buffer overflow
  * tree: avoid undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)
  * pinyin: avoid null-pointer dereference
  * chewingutil: fix dead assignment
  * Revert "libchewing.texi: Add chewing_bopomofo_String"
  * Fix memory leak in Discard2
  * Fix memory leak in UserUpdatePhrase().
  * code clean up, use new DestroyUserPhraseData()
  * userphrase-hash: avoid double free in TerminateUserphrase
  * test-userphrase: add test_userphrase_double_free
  * hash: fix hash item offset calculating in uhash.dat
  * hash: fix memory leak in HashFileOffsetWithUserPhrase
  * hash: fix memory access alignment
  * Fix ChoiceEndChoice expression always true
  * hash: follow consistent coding style
  * Update jvc-convert of KB layout Hsu
  * Auto learn phrases only after committing
  * Implement chewing_set_autoLearn() and chewing_get_autoLearn()
  * Fix indent in test/stress.c
  * Fix build with internal sqlite3
  * Fix: chewing_handle_Space() cannot input space when buffer is empty
  * hash: remove goto statement
  * Remove API changes/compatibility report link
  * hash: follow consistent coding style</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Remove pointless ldconfig call from chewing-utils subpackage.
- Specfile update: remove implicit BuildRoot and defattrs.
- Properly fulfill SLPP requirement that only the library file
  is in the library subpackage.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1632484800">- Remove unneeded BuildRequires on python-devel, and the conflicting
  old py_* macros.
- Remove references to "Python 2", the module supports Python 3.
- Mark COPYING as license.</changelog>
  <changelog author="mcepl@suse.com" date="1632916800">- Update to version 0.5.1+git20200627.452f622:
  * chewing.py supports platforms with 64bit pointer
  * Change ︰ to ：
  * Don't run tests in parallel
  * Try Ubuntu 16.04 Xenial
  * autotools: Build with -fPIC like the CMake-based one does
  * Show compilation commands if the build system is autotools
  * Tolerate unused const warnings
  * Fix LSan
  * Use internal-sqlite instead of static-sqlite, following 570ab6be</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1711281600">- move the %install_info macros to the subpackage where they belong</changelog>
  <changelog author="i@marguerite.su" date="1736078400">- update version 0.9.1
- drop unneeded patch:
  * libchewing-0.4.0-simple-select-rpath.patch
  * chewing-utils-abuild.patch</changelog>
  <changelog author="i@marguerite.su" date="1738152000">- fix search path for dictionaries</changelog>
</package>
<package pkgid="434a9e4f6a5c17f7d72b27b2db7d00e0ce6a8fc8ea9fa0f42b80fc3876a0395d31b3133852bbe814d94e88a4d66989244f3c91e26a2b793ea199a12f1d98148e" name="chezdav" arch="x86_64">
  <version epoch="0" ver="3.0" rel="bp160.1.14"/>
  <changelog author="badshah400@gmail.com" date="1526558400">- Initial package.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552132800">- Update to version 2.3:
  + Replace autotools with meson.
  + spice-webdavd: switch to GTask.
  + chezdav: add --local &amp; --public to specify interfaces to listen
    on.
  + Updated translations.
- Switch to meson BuildSystem, add meson BuildRequires and macros.
- Drop intltool BuildRequires, no longer needed.
- Add pkgconfig(systemd) and pkgconfig(udev) BuildRequires: New
  dependencies.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553515200">- Add %systemd_ordering for %service_*.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583409600">- Update to version 2.4:
  + Added udev option to meson.
  + spice-webdavd:
  - Several improvements and fixes including some leaks.
  - Disconnect the client gracefully.
  - Code refcatory to improve performance and error handling.
  - Avahi fixes on registering and unregistering service.
  - Fixes DAV:quota-used-bytes in resource is not in root fs.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1588593600">- Use proper macro %_udevrulesdir instead of hoping for udevrules.d
  to ever live below libexecdir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1598529600">- Update to version 2.5:
  + Add PhodavVirtualDir &amp; related API.
  + Various misc build and code fixes.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634644800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_spice-webdavd.service.patch</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1656936000">- Updated to version 3.0:
  + Port to libsoup3.
  + Forbid PUT method on read-only shared folder.
  + Add chezdav --realm runtime flag.
  + Add chezdav --nomdns runtime flag.
  + Build on OSX/Darwin.
  + Allow specifying systemd/udev directories.
  + Man page updates.
  + CI, testing and build fixes.
  + Translation updates.
- Updated libsoup version to 3.0 in BuildRequires,
  shlib package name to 3.x.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="0b3c8e87fb9532662545302e78d62fc44be20c55796df42abf6363f3b48ab276eb425ba2d5d302de3ef6da12a47e34caffe24b41d64c6eee8927c4e2002c4cd1" name="chezmoi" arch="x86_64">
  <version epoch="0" ver="2.52.3" rel="bp160.1.13"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714478400">- Update to version 2.48.0:
  - Features
  * feat: Add --tree flag to unmanaged command
  * feat: Add --tree flag to managed command
  * feat: Add --tree flag to ignored command
  * feat: Include name of target in error message
  - Fixes
  * fix: Apply .chezmoiignore to dirs in external archives
  * fix: Remove unmanaged files from exact_ directories containing external files
  * fix: Better detect username on Android/Termux systems
  - Documentation updates
  * docs: Document --tree flag</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1717416000">- Update to version 2.48.2:
  - Fixes
  * fix: Don't panic on unexpected bubbletea messages
  * fix: Respect umask when creating files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1718107200">- Update to version 2.49.0:
  - Features
  * feat: Add stub for removed remove command
  * feat: Rename remove command to destroy
  - Fixes
  * fix: Fix panic when parsing some commands
  - Documentation updates
  * docs: Update comparison-table.md</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1719230400">- Update to version 2.49.1:
  - Fixes
  * fix: Accept line-endings template directive as well as line-ending</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1720526400">- Update to version 2.50.0:
  - Features
  * feat: Add tempDir configuration variable
  * feat: Allow private_ and readonly_ attrs to be set for externals
  * feat: Add --no-network flag to doctor command
  * feat: Embed fallback X.509 trusted roots
  - Fixes
  * fix: Prevent chezmoi add from adding chezmoi's own executable</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1721131200">- Update to version 2.51.0:
  - Features
  * feat: Add 1Password SDK template funcs
  * feat: Add decompression of file externals
  - Fixes
  * fix: keep initFuncs when using 'includeTemplate' in config
  * fix: Use scriptTempDir for modify_ scripts</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1723118400">- Update to version 2.52.0:
  - Features
  * feat: Add gitHubRelease and gitHubReleaseAssetURL template functions
  - Fixes
  * fix: Don't modify ciphertext in edit command if plaintext did not change</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1724760000">- Update to version 2.52.1:
  - Fixes
    cba7e40 fix: Set User-Agent header to chezmoi.io/version on all HTTP requests
- Bump go version to 1.22 as per upstream go.mod</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1725969600">- Update to version 2.52.2:
  - Features
  * feat: Support YubiKeys in KeePassXC open mode
  - Documentation updates
  * docs: Add FAQ entry on using delta as the diff tool
  * docs: Add FAQ entry on running scripts periodically
  * docs: Add FAQ entry on running a script when a git-repo external changes
  * docs: Add FAQ entry on literal {{ and }} in templates
  * docs: Add warning on using externals for large files or archives
  * docs: Add how to use VSCode as the diff and merge tool</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1727697600">- Update to version 2.52.3:
  - Features
  * feat: Set GOMAXPROCS based on available resources
  - Documentation updates
  * docs: Improve developer documentation
  * docs: Use uv for managing Python and dependencies
  * docs: Add note on reporting viruses or trojans on Windows
  * docs: Add sequence diagram for chezmoi init
  * docs: Add daily usage entry on editing files</changelog>
</package>
<package pkgid="5f8983b8c12183f0246e41aafeb00078d275a7853f6018121b68200690c4eaba503f7b93695dc15eea203cb93e17976de91aa00e2e12d6faaf4a327b1050d61d" name="chezmoi-bash-completion" arch="noarch">
  <version epoch="0" ver="2.52.3" rel="bp160.1.13"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714478400">- Update to version 2.48.0:
  - Features
  * feat: Add --tree flag to unmanaged command
  * feat: Add --tree flag to managed command
  * feat: Add --tree flag to ignored command
  * feat: Include name of target in error message
  - Fixes
  * fix: Apply .chezmoiignore to dirs in external archives
  * fix: Remove unmanaged files from exact_ directories containing external files
  * fix: Better detect username on Android/Termux systems
  - Documentation updates
  * docs: Document --tree flag</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1717416000">- Update to version 2.48.2:
  - Fixes
  * fix: Don't panic on unexpected bubbletea messages
  * fix: Respect umask when creating files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1718107200">- Update to version 2.49.0:
  - Features
  * feat: Add stub for removed remove command
  * feat: Rename remove command to destroy
  - Fixes
  * fix: Fix panic when parsing some commands
  - Documentation updates
  * docs: Update comparison-table.md</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1719230400">- Update to version 2.49.1:
  - Fixes
  * fix: Accept line-endings template directive as well as line-ending</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1720526400">- Update to version 2.50.0:
  - Features
  * feat: Add tempDir configuration variable
  * feat: Allow private_ and readonly_ attrs to be set for externals
  * feat: Add --no-network flag to doctor command
  * feat: Embed fallback X.509 trusted roots
  - Fixes
  * fix: Prevent chezmoi add from adding chezmoi's own executable</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1721131200">- Update to version 2.51.0:
  - Features
  * feat: Add 1Password SDK template funcs
  * feat: Add decompression of file externals
  - Fixes
  * fix: keep initFuncs when using 'includeTemplate' in config
  * fix: Use scriptTempDir for modify_ scripts</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1723118400">- Update to version 2.52.0:
  - Features
  * feat: Add gitHubRelease and gitHubReleaseAssetURL template functions
  - Fixes
  * fix: Don't modify ciphertext in edit command if plaintext did not change</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1724760000">- Update to version 2.52.1:
  - Fixes
    cba7e40 fix: Set User-Agent header to chezmoi.io/version on all HTTP requests
- Bump go version to 1.22 as per upstream go.mod</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1725969600">- Update to version 2.52.2:
  - Features
  * feat: Support YubiKeys in KeePassXC open mode
  - Documentation updates
  * docs: Add FAQ entry on using delta as the diff tool
  * docs: Add FAQ entry on running scripts periodically
  * docs: Add FAQ entry on running a script when a git-repo external changes
  * docs: Add FAQ entry on literal {{ and }} in templates
  * docs: Add warning on using externals for large files or archives
  * docs: Add how to use VSCode as the diff and merge tool</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1727697600">- Update to version 2.52.3:
  - Features
  * feat: Set GOMAXPROCS based on available resources
  - Documentation updates
  * docs: Improve developer documentation
  * docs: Use uv for managing Python and dependencies
  * docs: Add note on reporting viruses or trojans on Windows
  * docs: Add sequence diagram for chezmoi init
  * docs: Add daily usage entry on editing files</changelog>
</package>
<package pkgid="4116532f4fa65402eeb1af974c89c591c281b257371105c8e967c7d17a748baf855fda595ee62f96ace80ea38b8b3d8eeacb36c261f17dea58b272e3d358f719" name="chezmoi-fish-completion" arch="noarch">
  <version epoch="0" ver="2.52.3" rel="bp160.1.13"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714478400">- Update to version 2.48.0:
  - Features
  * feat: Add --tree flag to unmanaged command
  * feat: Add --tree flag to managed command
  * feat: Add --tree flag to ignored command
  * feat: Include name of target in error message
  - Fixes
  * fix: Apply .chezmoiignore to dirs in external archives
  * fix: Remove unmanaged files from exact_ directories containing external files
  * fix: Better detect username on Android/Termux systems
  - Documentation updates
  * docs: Document --tree flag</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1717416000">- Update to version 2.48.2:
  - Fixes
  * fix: Don't panic on unexpected bubbletea messages
  * fix: Respect umask when creating files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1718107200">- Update to version 2.49.0:
  - Features
  * feat: Add stub for removed remove command
  * feat: Rename remove command to destroy
  - Fixes
  * fix: Fix panic when parsing some commands
  - Documentation updates
  * docs: Update comparison-table.md</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1719230400">- Update to version 2.49.1:
  - Fixes
  * fix: Accept line-endings template directive as well as line-ending</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1720526400">- Update to version 2.50.0:
  - Features
  * feat: Add tempDir configuration variable
  * feat: Allow private_ and readonly_ attrs to be set for externals
  * feat: Add --no-network flag to doctor command
  * feat: Embed fallback X.509 trusted roots
  - Fixes
  * fix: Prevent chezmoi add from adding chezmoi's own executable</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1721131200">- Update to version 2.51.0:
  - Features
  * feat: Add 1Password SDK template funcs
  * feat: Add decompression of file externals
  - Fixes
  * fix: keep initFuncs when using 'includeTemplate' in config
  * fix: Use scriptTempDir for modify_ scripts</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1723118400">- Update to version 2.52.0:
  - Features
  * feat: Add gitHubRelease and gitHubReleaseAssetURL template functions
  - Fixes
  * fix: Don't modify ciphertext in edit command if plaintext did not change</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1724760000">- Update to version 2.52.1:
  - Fixes
    cba7e40 fix: Set User-Agent header to chezmoi.io/version on all HTTP requests
- Bump go version to 1.22 as per upstream go.mod</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1725969600">- Update to version 2.52.2:
  - Features
  * feat: Support YubiKeys in KeePassXC open mode
  - Documentation updates
  * docs: Add FAQ entry on using delta as the diff tool
  * docs: Add FAQ entry on running scripts periodically
  * docs: Add FAQ entry on running a script when a git-repo external changes
  * docs: Add FAQ entry on literal {{ and }} in templates
  * docs: Add warning on using externals for large files or archives
  * docs: Add how to use VSCode as the diff and merge tool</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1727697600">- Update to version 2.52.3:
  - Features
  * feat: Set GOMAXPROCS based on available resources
  - Documentation updates
  * docs: Improve developer documentation
  * docs: Use uv for managing Python and dependencies
  * docs: Add note on reporting viruses or trojans on Windows
  * docs: Add sequence diagram for chezmoi init
  * docs: Add daily usage entry on editing files</changelog>
</package>
<package pkgid="2579ebe29737f8c03d8baf204e569c2984f7b32a04c27bc06e9484f12be7bc08c33eeab8728362a728f9f7e11248161fefe004fdada8f5722645ccd2d10497a4" name="chezmoi-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.52.3" rel="bp160.1.13"/>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1714478400">- Update to version 2.48.0:
  - Features
  * feat: Add --tree flag to unmanaged command
  * feat: Add --tree flag to managed command
  * feat: Add --tree flag to ignored command
  * feat: Include name of target in error message
  - Fixes
  * fix: Apply .chezmoiignore to dirs in external archives
  * fix: Remove unmanaged files from exact_ directories containing external files
  * fix: Better detect username on Android/Termux systems
  - Documentation updates
  * docs: Document --tree flag</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1717416000">- Update to version 2.48.2:
  - Fixes
  * fix: Don't panic on unexpected bubbletea messages
  * fix: Respect umask when creating files</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1718107200">- Update to version 2.49.0:
  - Features
  * feat: Add stub for removed remove command
  * feat: Rename remove command to destroy
  - Fixes
  * fix: Fix panic when parsing some commands
  - Documentation updates
  * docs: Update comparison-table.md</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1719230400">- Update to version 2.49.1:
  - Fixes
  * fix: Accept line-endings template directive as well as line-ending</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1720526400">- Update to version 2.50.0:
  - Features
  * feat: Add tempDir configuration variable
  * feat: Allow private_ and readonly_ attrs to be set for externals
  * feat: Add --no-network flag to doctor command
  * feat: Embed fallback X.509 trusted roots
  - Fixes
  * fix: Prevent chezmoi add from adding chezmoi's own executable</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1721131200">- Update to version 2.51.0:
  - Features
  * feat: Add 1Password SDK template funcs
  * feat: Add decompression of file externals
  - Fixes
  * fix: keep initFuncs when using 'includeTemplate' in config
  * fix: Use scriptTempDir for modify_ scripts</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1723118400">- Update to version 2.52.0:
  - Features
  * feat: Add gitHubRelease and gitHubReleaseAssetURL template functions
  - Fixes
  * fix: Don't modify ciphertext in edit command if plaintext did not change</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1724760000">- Update to version 2.52.1:
  - Fixes
    cba7e40 fix: Set User-Agent header to chezmoi.io/version on all HTTP requests
- Bump go version to 1.22 as per upstream go.mod</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1725969600">- Update to version 2.52.2:
  - Features
  * feat: Support YubiKeys in KeePassXC open mode
  - Documentation updates
  * docs: Add FAQ entry on using delta as the diff tool
  * docs: Add FAQ entry on running scripts periodically
  * docs: Add FAQ entry on running a script when a git-repo external changes
  * docs: Add FAQ entry on literal {{ and }} in templates
  * docs: Add warning on using externals for large files or archives
  * docs: Add how to use VSCode as the diff and merge tool</changelog>
  <changelog author="Filippo Bonazzi &lt;filippo.bonazzi@suse.com&gt;" date="1727697600">- Update to version 2.52.3:
  - Features
  * feat: Set GOMAXPROCS based on available resources
  - Documentation updates
  * docs: Improve developer documentation
  * docs: Use uv for managing Python and dependencies
  * docs: Add note on reporting viruses or trojans on Windows
  * docs: Add sequence diagram for chezmoi init
  * docs: Add daily usage entry on editing files</changelog>
</package>
<package pkgid="bbd389a99b01c1263ed92bb05073fb777f50168dedba4b7d9c3edc6506970d09714cf728367d8b963dcd4bcc192795c0659b25240b91f2e9435a48e11cf10976" name="chezscheme" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="bp160.1.29"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1547380800">- updated version to 9.5
- updated release notes and fixed user's guide overfull hbox.
  * release-notes.stex, syntax.stex
- updated install target to do something more sensible release_notes/Makefile</changelog>
  <changelog author="Rony Reis &lt;reis@sapo.pt&gt;" date="1557748800">- updated version to 9.5.2</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1605528000">- update to version 9.5.4</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1648555200">- update to version 9.5.6</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1653912000">- update to version 9.5.8</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1690113600">- update to version 9.5.8a
  * Updates and bug fixes since November 5, 2021.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1694433600">- update to version 9.6.2
  * Updates and bug fixes since April 25, 2022.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1697457600">- License correction based on legaldb review</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1707739200">- update to version 10.0.0
  * Updates and bug fixes since October 16, 2023.
- add new dependency zuo</changelog>
</package>
<package pkgid="b1f34f31a19e7221e59e1e570c54711f3deb95675bd894a1b7b43a69ba813db31a906e919e2078b187b89de7ebd5b25f071c2ebb6bade9c42e38c43472addf42" name="chezscheme-petite" arch="x86_64">
  <version epoch="0" ver="10.0.0" rel="bp160.1.29"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1547380800">- updated version to 9.5
- updated release notes and fixed user's guide overfull hbox.
  * release-notes.stex, syntax.stex
- updated install target to do something more sensible release_notes/Makefile</changelog>
  <changelog author="Rony Reis &lt;reis@sapo.pt&gt;" date="1557748800">- updated version to 9.5.2</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1605528000">- update to version 9.5.4</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1648555200">- update to version 9.5.6</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1653912000">- update to version 9.5.8</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1690113600">- update to version 9.5.8a
  * Updates and bug fixes since November 5, 2021.</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1694433600">- update to version 9.6.2
  * Updates and bug fixes since April 25, 2022.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1697457600">- License correction based on legaldb review</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1707739200">- update to version 10.0.0
  * Updates and bug fixes since October 16, 2023.
- add new dependency zuo</changelog>
</package>
<package pkgid="192f960c31a2868b46ddb85df6f6fad1da3d8bfb1e33c3a1b1254a7a059b7847c03274f3a0fc4a78460d64d359a56b86b738fdc927e2984d3cde51c3a94fdaa9" name="chirp" arch="noarch">
  <version epoch="0" ver="20250808" rel="bp160.1.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1746273600">- Update to version 20250502:
  * Raise a specific error for fixed banks with link
  * Unify handling of RadioSpecificError in common</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1746792000">- Update to version 20250509:
  * Modify TIDRADIO TD-H8 and TD-H3 Driver for consistency and
    New Settings
  * tdh3: Fix invalid brightness setting in test image
  * Add a link in the about box to open online documentation
  * update translations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747396800">- Update to version 20250516:
  * Correct P15UV model alias to UV-13Pro
  * Remove a bunch of overly verbose yaesu_clone logging
  * Fix hardware flow flag for TH-K2,TM-271/281, etc
  * Updated Italian Translation
  * Updated Spanish Translation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1748606400">- Update to version 20250530:
  * rt470: Add v1.27A firmware version
  * Fix TD-H8 SHORT_KEY_TOP not saving
  * Inverted FM Allow Receive setting
  * Inverted FM VFO/CH setting
  * Update french translations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1749211200">- Update to version 20250606:
  * Add MaxTalker MT-5RM
  * New Model Retevis RA25, Radioddity DB-20, AnyTone 779UV</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1750852800">- Update to version 20250620:
  * tk272g: Allow full-range entry on both models
  * Add Radioddity GM-30
  * h777: Convert to using ignore bits on BCD tones
  * Add ignore_bits to bcdDataType</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1751716800">- Update to version 20250704:
  * tk760g: Fix deprecated current value settings
  * tk760g: Add Off-hook-decode setting
  * Unify modern kenwood commercial step handling
  * tk3140: Fix tuning step selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752840000">- Update to version 20250718:
  * Revise UV-5R8W alias
  * Add Baofeng UV-5R8W alias
  * Fix stuck clone dialogs after failure
  * id51: Disable callsign list settings
  * icf: Filter D-STAR callsigns to valid chars
  * icf: Gracefully handle invalid bank index mappings
  * Improve setting load failure error messages</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754049600">- Update to version 20250801:
  * Add fingerprint for RT-630 V0.09
  * btech: Fix block size for non-8900D models
  * Add Baofeng UV-5G Pro
  * btech: Fix download for QYT KT-8900D radios
  * ft4: Format different ID messages for better readability
  * rt21: Add new fingerprint for RT29UHF</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1754654400">- Update to version 20250808:
  * Add Support for Retevis H777 V4.0
  * uvk5: Fix band limits
  * Remove legacy radio detection module</changelog>
</package>
<package pkgid="a8cc1dc44f88219fd944312a745dcfc1c6830d5aeeefd83646aed204fa0d7dcf69a27de7c88ec1762ecdb426669615be0589622caa8ff1be808541b30b710b33" name="chmlib-devel" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp160.1.8"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1696507200">- drop chmlib-0.39.diff - superseded by
  chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch
- add
  chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch,
  chmlib-0002-Fix-for-extract_chmLib-confusing-empty-files-with-di.patch,
  chm_http-port-shortopt.patch, chm_http-bind-localhost.patch,
  chm_http-output-server-address.patch, chmlib-c99.patch: restrict
  access to localhost to somewhat reduce reach</changelog>
</package>
<package pkgid="aeeb6c031dd34a9e6a2096ff16c4f996dfc6232b60db846c4be595121475b58543a566572a1bd330b1cb68b656b06dc88c11c5e2e803c21e66b25183b141d0fe" name="chmlib-examples" arch="x86_64">
  <version epoch="0" ver="0.40" rel="bp160.1.8"/>
  <changelog author="stbinner@suse.de" date="1170072000">- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)</changelog>
  <changelog author="dmueller@suse.de" date="1170936000">- fix -devel requir'ing release number</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files</changelog>
  <changelog author="vuntz@novell.com" date="1243166400">- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.</changelog>
  <changelog author="beineri@opensuse.org" date="1248523200">- build examples to an -examples sub-package (bnc#488307)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1623672000">- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1696507200">- drop chmlib-0.39.diff - superseded by
  chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch
- add
  chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch,
  chmlib-0002-Fix-for-extract_chmLib-confusing-empty-files-with-di.patch,
  chm_http-port-shortopt.patch, chm_http-bind-localhost.patch,
  chm_http-output-server-address.patch, chmlib-c99.patch: restrict
  access to localhost to somewhat reduce reach</changelog>
</package>
<package pkgid="63aefe202adaf6d7830b059ba392217a28be8550b58ac6219c7dda002cfc3f1315551adbca431317a2f4e2dd6d9d4e9b0086bc1d039000fcfd6424cfe15eef3d" name="chntpw" arch="x86_64">
  <version epoch="0" ver="1.0" rel="bp160.1.12"/>
  <changelog author="sebix@sebix.at" date="1514721600">- initial package for version 140201
- add chntpw_1.0-1.diff.gz all patches from debian, fixes build and runtime bugs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1708948801">- Fix URL to debian diff file</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1725192000">- add libsam_hexdump_type.patch to fix type conversion, fixing build on tumbleweed
- extract chntpw_1.0-1.1.diff.gz to chntpw_1.0-1.1.diff, remove the hacky patch application</changelog>
</package>
<package pkgid="6247d971b49b01498c7abdd715d762d68f2e74c7c9af1ccd3b18ecaf00b2ea8294d3f3aec087820e1b43fafe3921467fccd20fdca54084fcd74d38d59c93a490" name="chocolate-doom" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="bp160.1.11"/>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624708800">- Add 0001-build-use-python3-exclusively.patch so we can build
  without python2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680091200">- Switch from packageand() to modern rpm conditionals
- Avoid conflict with crispy-doom manpages</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1725969600">- Update to release 3.1.0
  * WAD file autoloading was added
  * Music pack configuration was simplified. Copy .flac/.ogg
    music files into a directory and they will be automatically
    detected by filename and so used.
  * Music packs can now be used with OPL as a fallback, and music
    pack config files can have any name ending in `.cfg`.
  * MP3 music packs are now supported.
  * Network synchronization now uses a PID controller by default,
    which makes games more smooth and more stable, especially for
    Internet play.
  * UDP hole punching is now used to make servers behind NAT
    gateways automatically accessible to the Internet.
  * Allow simultaneous PC speaker emulation and OPL emulation.
  * The 0 and 5 keys on the number pad can now be bound
    independently of any other keyboard key.
  * With aspect ratio correction disabled, the game can scale to
    any arbitrary size and remove all black borders in full
    screen mode.
  * It is now possible to use -response to load response files.
  * Mouse movement is no longer read when the game window is
    inactive.
  * The Freedoom single-player IWAD files are now officially
    supported, as recent versions changed all levels to be
    vanilla compatible.
  * Add native support for the FluidSynth MIDI synthesizer.
  * Add improved gamepad support via the SDL_GameController
    interface. This includes support for analog triggers, modern
    dual-stick default bindings, descriptive button names for
    common controller types, and configurable dead zones for
    stick axes.
  * The -display parameter was added to specify the display
    number on which to show the screen.
- Delete 0001-build-use-python3-exclusively.patch (merged)</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1749556800">- Add declare_code_as_C99_compliant.patch so that the package builds
  with GCC 15. [boo#1244418]</changelog>
</package>
<package pkgid="a30c7dd619d2749d40219b27ace64a49f4b2d08e000f61a677fb1366620a4c9f5d2be435de2d49a5154661d580d75145c9412afbd563380a331f2731a2123235" name="choose" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1673438400">- Initial version of choose 1.3.4 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1727784000">- Update to 1.3.5:
  * Added several new build artifacts
  * Upgraded to rust 2021
  * Applied clippy suggestions</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1727870400">- Update to 1.3.6:
  * Fix windows asset name
  * Move linker flag to github workflow</changelog>
</package>
<package pkgid="17495caa4bb63c1eae79ce1910782c35b573d331ffeff6d3d8d95b69c2001c22d297f4ce7a6699b606e1f118f95bd9d6e671695bd8d5d1a54c19488a4e771817" name="chromaprint-fpcalc" arch="x86_64">
  <version epoch="0" ver="1.5.1+git.20221217" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 1.5.1:
  * No functional source code changes.
  * Fixed some compiler warnings.
  * Rebuilt the fpcalc binaries with FFmpeg 4.4.1.
  * Added support for fat binaries on macOS, with support for both Intel and Apple silicon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1668168000">- Add 8ccad69.patch: Upgrade code to FFmpeg 5.x APIs. Following
  this, drop pkgconfig(libavresample) BuildRequires: No longer
  used.
  * https://github.com/acoustid/chromaprint/commit/8ccad69.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1682596800">- Add 82781d02.patch: FFmpeg 5.x: Some files return error codes
  when scanning.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1683115200">- Drop 8ccad69.patch and 82781d02.patch, and add back
  pkgconfig(libavresample) BuildRequires. Also limit package to
  build against ffmpeg-4 and older.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697803200">- Drop fftw3-devel BuildRequires and Requires, pass DFFT_LIB=avfft
  to cmake, use the already present ffmpeg lib.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Drop unused libtag-devel BuildRequires.
- Use cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1699444800">- Drop unused and unneeded libtag-devel Requires from devel package</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1733918400">- Use kissfft for shared library, ffmpeg is only needed for the
  standalone fpcalc tool.</changelog>
  <changelog author="davejplater@gmail.com" date="1737720000">- Update to git snapshot 1.5.1+git.20221217 to allow build against
  ffmpeg-5 libraries. No other major changes.</changelog>
  <changelog author="davejplater@gmail.com" date="1737806400">- Add 0005-Fix-compatibility-with-ffmpeg-7.0.patch and force build
  with ffmpeg-7 libraries</changelog>
</package>
<package pkgid="642523537c8685b9fa11113677b660b73c58cd24ba73bb0493d73349d714f473dcb62df9e37aba3df034ddbb31e8d94881205748f904ac8ddf3fa622fadc9dd9" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="140.0.7339.185" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1754481600">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="697bf05d20d073a5ce44d6a552bb62eca5f2a79b515dbb8351530600bc3287badae0913c3b33aee682a3f456062096af59f7b270cf2de77b3c2f1ee211cfcd61" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.107" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="c578c04be226a5e8cc65ae3858609c91be3a9ae84b077b94b2ca4d133ab1f93651bf6f8ff41d574147ca77b876be66cc9aae605eb7dcba4de59fd998032de224" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.122" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="51862c0c91d5f741901f754331219a583ba52eb2fb8f83452d3f756a77d90674cf784b5126353b0ccae23f6b91bf14203f237594243be94476f2260cf80ab673" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="141.0.7390.76" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="350150c3a7633e13af89417078a19e80c2aa6d1878b5c8470c61ad10a5678c5ca21d61b5f92a163f1e5474a39c411bf46f2162089f69c7a4ebb9ffe5d1115e5a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.162" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="fca6da3d9318518109f5b2c8131dbd177f993006f00201cdc4c2fc2d644a46dc6bf4eb41d85a2ccfd749c0bb9c5f93eb96393cba68183787f750ba5a0eb5ad1a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="142.0.7444.59" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="b128637090f039158ecf804923ce38bd66cd4fa5a8100c839e0e0e40c393229aefa48b84bf5d0b9f960099b420a8a113f2569749181541a22a0f9e624d488905" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.146" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="7c5b3a4b2a8ee69d6e6a5b7fcf6cfa25aac33aa67944499e33c885b8b2c023fc47b2665bec9a6e3ff1abc437d9b5b6806ba1d6a5d2afbdd0af5dcde37ef65ca6" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.192" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="5a2d7016e17a94abfa814851a118949fac3724b4d7951da5dc0ea644a4bb7245ae67d2672d9e2ca069b189afea6a8d0fbc82517e7ccd879dfe94b06e10c5affd" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="143.0.7499.40" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="2e0f5a74dd2fe065be4b4d98cfe5c45a51fa832fd79ac4ca5c9b7797931641553c942a5ce5860a2d9de11ec0baf83e57a7c9e2f48aba6ebe72a0c29811f77ba0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.109" rel="bp160.1.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="136a48d9fe72bf111882867105e04b370a7122597dc89836fc068108c54293e475034acf33a8fd450da00a711b276ee74dee84344b1130d6ff484278b518c351" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.132" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="92c5035f5721762f22c8c37e9d5e7f19e92222ce37e8dc41aca2f66abd199be4604fd34ef8d950c2194b0d019df459cce1c4a131ccd5a00ef8fa42ef016f1475" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.59" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="ae789e068c160ebdd7163c93e464d480d1af0a267e4a01c67a0a2e2f6c0ba88989b2160232c40b7886941593a76795969cd19d89ce6dc127e79959859d38cbd0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="144.0.7559.96" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="8bfa858b1ac1383ff09e79fa461da9abc479c7e5af10aa211a58a59f84670917d647b7aa5c6bd0a00a533089107d8971a0fe986e228e7b1f5cbb33dbd397f4a1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="145.0.7632.109" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
</package>
<package pkgid="20244ed2711d8b39f7d05fa42ccd1588ccd0c2ae6124b67262d72dcf5ae801076f776d3d72defd9668e7a8640ddce4da4021ab9cd0f2f5c192c5beb919a0d9a1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="145.0.7632.116" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
</package>
<package pkgid="43c64aae23feb5523e748add13322c9367422cb15b4a409af517a72d552acb3f9c0c8d2a16a8934e65ab4d246d26bc1e8ca937e4ccb05218201f1b9159ad181c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="145.0.7632.159" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="4d58b8d739efe7f856f23aedd00e1c7010783569c767145bf339ac9298004915be05b95250a8738403a4f396e86ef899ca655abc643fea2c5e726cc13af52a18" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="145.0.7632.75" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="21df6bbf8fb5f26a6c33f122a5d2bce3171daacf7205aa865e9e34dc703a7b279aea1afef751ec3c5b0f72c94b563a886d84c7aa705e113a6e3a4d53abf1a409" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="146.0.7680.153" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
</package>
<package pkgid="e1fce74b5d56bc0bd3b31c828e0ee4231386f6aaf1574810cc0f9a2e54f493f0fffdb94fea51e1bc376459ce4ecb5ac8cfcc1f372ea33669f9aca43d11913042" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="146.0.7680.164" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
</package>
<package pkgid="e0ff9b341bc06cef57daf84dc5ba84439dc99d42e9b5ff2fdf96fa3637f8e794d4bd5bdf83c59ff157eb61bcb21e03b2743b0f24bb81ecc76268655c67b89d24" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="146.0.7680.177" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
</package>
<package pkgid="ee9af00c387e89a05b389a3c0010a3e0834b894dca12bde9ebb3ed113435e842dded308aad3a42b581fcedde7cec739801606bcce47a295d8800248f3950ee2a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="146.0.7680.80" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
</package>
<package pkgid="2ece3c24b7c9e9c151590a3a4c5749276a69284335888ac06801efa6ddb1b1af4130227fe80070a854a3414b12d8bb7949d9af0b37ad23ddc2b354209a8d96d2" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="147.0.7727.101" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
</package>
<package pkgid="53d394173a674cadde42ce5d12414f2ea4f9cda2df20a1855e03dfb8c6223c90818a4d938a2aa62777b3534e1bfd0f1a428887034955d12241b063651bdc69df" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="147.0.7727.116" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)</changelog>
</package>
<package pkgid="1362f63abe188fe8b61b0d734d94284527b3522cfd92e481fdf13db8d3c0fbb7edc907eabda502de6573ec49a2f2f24d8569200219b89a45926f7d2df25b528e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="147.0.7727.137" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
</package>
<package pkgid="abb14b5c76150cb5d4b45d0932741ed2a8b9c2946ef40e81fa15950997f8081da73cf53371d9cc61a895d27dc9c88658d65e2744b70eb864058375b551d94152" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="147.0.7727.55" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
</package>
<package pkgid="e8193be31d91c912d2e1c63ee0b41dd38b31963f2750cf06a06ae8b7866a4b8b6394fb2e5d2f224266c45ab2ff2e0edfdfe38bded7b77eb660afacb788465f86" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="148.0.7778.167" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)</changelog>
</package>
<package pkgid="4855bf0b894e211a14f07b35256d324ccd79271cd5bd14d2c773f5725cc86dca2629914fdc960310c5cbe550b5c60845b97d0bb005dcee4f696ba6b396761cc5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="148.0.7778.178" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
</package>
<package pkgid="b46f28ab03f8cfadb5174e5fb49424528450bbff59e052f17b98173e01ffd8d2b4fdbcc4f55788bbc335ad0032c85feffa29a73e95c7c50fa2affb6b734f6aba" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="148.0.7778.215" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
</package>
<package pkgid="87bd931cd75eed3f8332cb2f1b12cd87f9b6b84ff5caf49f68729f825147f000a22a3a0ef42a08f74f171d6272305a98cb0eb5bd9176633bfae9e361f6f70f63" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="149.0.7827.102" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1781006400">- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View</changelog>
</package>
<package pkgid="1270f6f8f02cb7d10a35375cc85743df3c9bcd47794c588b6e59f9af6f8f6cb262bc2f681550a10b601b0d05ba46207aa0a3fec55d8824448edc1824df835774" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="149.0.7827.114" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1781006400">- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781265600">- Chromium 149.0.7827.114 (boo#1268158):
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views</changelog>
</package>
<package pkgid="a1b6baf77450366bbc181e234a8aea34ba776fca7ba1083e3c564550f0d639fa2dd9270d248e2d5e9a0318d9c9b04b2ad9fa002a3a44924185ac369fbfdefe51" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="149.0.7827.155" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1781006400">- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781265600">- Chromium 149.0.7827.114 (boo#1268158):
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1781352000">- added patches:
  * disable-ai.patch (re-add since now ported to 149)
- added configs:
  * disable-ai.json
  (both parts taken from fedora package)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781697600">- Chromium 149.0.7827.155 (boo#1268373):
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781697601">- Use version suffix for llvm/clang commands</changelog>
</package>
<package pkgid="a17cd04d3c7a47a4529cd2b9ddcf39b5580d3a6fd8a8e83f268fbf6d75424d569f210228ded5a7a370f00ff68e126a82c40120134e0a49b9be00d93abad79ce3" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="149.0.7827.53" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
</package>
<package pkgid="d8eb2b3104d2386803e7daebc54c694e98d76f75b4e6f21abcd718b14a49679c58b4e560452132f15ebc2c028d34b3cfb5fff7554684c41f1d9794eaceeeacdb" name="chromium" arch="x86_64">
  <version epoch="0" ver="140.0.7339.185" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1754481600">- add patch:
  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg</changelog>
  <changelog author="ro@suse.de" date="1754568000">- really install libffmpeg.so if using the bundled one
  and block the extra dependency</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755086400">- Chromium 139.0.7258.127 (boo#1247981):
  * CVE-2025-8879: Heap buffer overflow in libaom
  * CVE-2025-8880: Race in V8
  * CVE-2025-8901: Out of bounds write in ANGLE
  * CVE-2025-8881: Inappropriate implementation in File Picker
  * CVE-2025-8882: Use after free in Aura
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1755604800">- Chromium 139.0.7258.138 (boo#1248315):
  * CVE-2025-9132: Out of bounds write in V8</changelog>
  <changelog author="ro@suse.de" date="1756296000">- Chromium 139.0.7258.154 (boo#1248769)
  * CVE-2025-9478: Use after free in ANGLE</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756382400">- Chromium 140.0.7339.41
  (early stable released 2025-08-27)
- modified patches:
  chromium-125-compiler.patch
  chromium-libusb_interrupt_event_handler.patch
  gcc-enable-lto.patch
  ppc-fedora-fix-unknown-warning-option-messages.diff
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  chromium-102-regex_pattern-array.patch
  gtk-414.patch
  ppc-fedora-fix-study-crash.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
- added patches:
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  (revert of upstream patch
  8393b61ba876c8e1614275c97767f9b06b889f48)
  chromium-140-old-flac.patch (applied for flac &lt; 1.5.0)
- change rust_version to 1.86
- keeplibs:
  removed buildtools/third_party/eu-strip (gone upstream)
  removed wasm_tts_engine (gone upstream)
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken</changelog>
  <changelog author="ro@suse.de" date="1756814400">- modified patches:
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  (updated from debian)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756900800">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758196800">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
</package>
<package pkgid="f04f37d69f5f3c8a6b3c1412c9fb7ce5588a39ae8f8a586ea31557c695eea21aba933b0c820d6caa8042846b7e5e8e49a21d9ad91ececdc58bb00836f06be506" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.107" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
</package>
<package pkgid="e23b6aeefa5e76c524d414d533c92c3950c88738d53e559861024cbdcd2ece303d2566c5853fccdd41c09387cc4ca5ae843d915e452e94c6786268810fd89185" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.122" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
</package>
<package pkgid="d67f7431535d8a98fc6c31b963c7824ea047099e89b12fe3e7116edb6ea9a35333a891114325fb3ca061e056f90eec16b15760e99cc2107e54273ece99837931" name="chromium" arch="x86_64">
  <version epoch="0" ver="141.0.7390.76" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1756814400">- Chromium 140.0.7339.80 (boo#1249093):
  * new permission prompt for local network access
  * CVE-2025-9864: Use after free in V8
  * CVE-2025-9865: Inappropriate implementation in Toolbar
  * CVE-2025-9866: Inappropriate implementation in Extensions
  * CVE-2025-9867: Inappropriate implementation in Downloads
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1757505600">- Chromium 140.0.7339.127 (boo#1249388)
  * CVE-2025-10200: Use after free in Serviceworker
  * CVE-2025-10201: Inappropriate implementation in Mojo</changelog>
  <changelog author="ro@suse.de" date="1758110400">- Chromium 140.0.7339.185 (stable released 2025-09-17) boo#1249999
  * CVE-2025-10585: Type Confusion in V8
  * CVE-2025-10500: Use after free in Dawn
  * CVE-2025-10501: Use after free in WebRTC
  * CVE-2025-10502: Heap buffer overflow in ANGLE</changelog>
  <changelog author="ro@suse.de" date="1758542400">- use the same llvm version on recent distros,
  build currently fails with lvm21</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
</package>
<package pkgid="59589edf3d410967e8ccb03be0ddb5a44576595aa13c9c430816876aa88aeb088c155011d72e3a3a7062420dca73c2edcda516a8aabd62321fb4cddaa5443532" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.162" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="1e120b48aabac1d4dd0f237ca9393189cf9e667039d52c30a84875137b126564bae54cff25c35758109338835e293107e462c4d1867fd42d84bbcf38186b0e8e" name="chromium" arch="x86_64">
  <version epoch="0" ver="142.0.7444.59" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715200">- Chromium 140.0.7339.207 (boo#1250472)
  * CVE-2025-10890: Side-channel information leakage in V8
  * CVE-2025-10891: Integer overflow in V8
  * CVE-2025-10892: Integer overflow in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1758715201">- Chromium 141.0.7390.37
  (beta released 2025-09-24)
- modified patches:
  chromium-125-compiler.patch
  chromium-133-bring_back_and_disable_allowlist.patch
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
- dropped patches:
  ppc-fedora-fix-rustc.patch (obsolete)
  chromium-135-add_map_droppable.patch</changelog>
  <changelog author="ro@suse.de" date="1759320000">- Chromium 141.0.7390.54
  (stable released 2025-09-30) (boo#1250780)
  * CVE-2025-11205: Heap buffer overflow in WebGPU
  * CVE-2025-11206: Heap buffer overflow in Video
  * CVE-2025-11207: Side-channel information leakage in Storage
  * CVE-2025-11208: Inappropriate implementation in Media
  * CVE-2025-11209: Inappropriate implementation in Omnibox
  * CVE-2025-11210: Side-channel information leakage in Tab
  * CVE-2025-11211: Out of bounds read in Media
  * CVE-2025-11212: Inappropriate implementation in Media
  * CVE-2025-11213: Inappropriate implementation in Omnibox
  * CVE-2025-11215: Off by one error in V8
  * CVE-2025-11216: Inappropriate implementation in Storage
  * CVE-2025-11219: Use after free in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- added patches:
  chromium-141-csss_style_sheet.patch (from fedora)
  chromium-141-use_libcxx_modules.patch (from fedora)
  chromium-141-no_cxx_modules.patch
  (one more fallout from clang modules)
- modified patches: (context)
  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
  ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
  (updated from debian)
  chromium-121-rust-clang_lib.patch (redone)
- keeplibs:
  added third_party/federated_compute (pulled in)
  added third_party/oak (needed by federated_compute)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1759924800">- Chromium 141.0.7390.65 (boo#1251334):
  * CVE-2025-11458: Heap buffer overflow in Sync
  * CVE-2025-11460: Use after free in Storage
  * CVE-2025-11211: Out of bounds read in WebCodecs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1760011200">- exclude the main tarball from the src.rpm to reduce size
  (it is anyway fully referenced, so no supply chain concern)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011201">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
</package>
<package pkgid="d155c47b99bb50414e9705702768e098a664b613308043f026332302211095624ea42a62e722a1f07ef729ecfb6c5e8a7a01beaf9d57cc1e904587a6569852e0" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.146" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
</package>
<package pkgid="9e8a5618f67f30b9587f778d4f41832e94e36a8262e7ea7e709ffb5ff9cf649e39bfd8dc7c6a0ffdf4576e72b637a49e47123be6bff5b69f304abd0a1818d3c7" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.192" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
</package>
<package pkgid="76f9dd8ac83c4bd86572807e95e1a65c7465652e64408166f050e3ce3cd46019a6664286fa8e2389bce9f8e5f18a8d82040fd3203bccd841a36612596b17fcf7" name="chromium" arch="x86_64">
  <version epoch="0" ver="143.0.7499.40" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760011200">- Chromium 141.0.7390.76:
  * Do not send URLs as AIM input. This is to resolve a privacy
    concern, around passing urls to AI Mode.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1760529600">- Chromium 141.0.7390.107:
  * CVE-2025-11756: Use after free in Safe Browsing (boo#1252013)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761048000">- Chromium 141.0.7390.122:
  * CVE-2025-12036: Inappropriate implementation in V8 (boo#1252402)</changelog>
  <changelog author="ro@suse.de" date="1761566400">- Chromium 142.0.7444.52
- added patches:
  chromium-142-rust-revert_should_panic.patch
  re-add __rust_alloc_error_handler_should_panic
  to fix unresolved symbol
  chromium-142-dawn_commit_hash.patch:
  create gpu/webgpu/dawn_commit_hash.h which should be in tarball
  chromium-142-rust_no_sanitize.patch:
  revert rust change no_sanitize to sanitize=off
  chromium-142-iwyu-field-form-data.patch
- drop chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
- update ppc patches
  modified patches:
  ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch#
  ppc-fedora-0001-third-party-hwy-wrong-include.patch
  ppc-fedora-0002-regenerate-xnn-buildgn.patch
  ppc-fedora-add-ppc64-architecture-to-extensions.diff
  removed patches:
  ppc-fedora-fix-ppc64-rust_png-build-error.patch (obsolete)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1761739200">- Chromium 142.0.7444.59, the stable channel promotion of 142
  Security fixes (boo#1252881):
  * CVE-2025-12428: Type Confusion in V8
  * CVE-2025-12429: Inappropriate implementation in V8
  * CVE-2025-12430: Object lifecycle issue in Media
  * CVE-2025-12431: Inappropriate implementation in Extensions
  * CVE-2025-12432: Race in V8
  * CVE-2025-12433: Inappropriate implementation in V8
  * CVE-2025-12434: Race in Storage
  * CVE-2025-12435: Incorrect security UI in Omnibox
  * CVE-2025-12436: Policy bypass in Extensions
  * CVE-2025-12437: Use after free in PageInfo
  * CVE-2025-12438: Use after free in Ozone
  * CVE-2025-12439: Inappropriate implementation in App-Bound Encryption
  * CVE-2025-12440: Inappropriate implementation in Autofill
  * CVE-2025-12441: Out of bounds read in V8
  * CVE-2025-12443: Out of bounds read in WebXR
  * CVE-2025-12444: Incorrect security UI in Fullscreen UI
  * CVE-2025-12445: Policy bypass in Extensions
  * CVE-2025-12446: Incorrect security UI in SplitView
  * CVE-2025-12447: Incorrect security UI in Omnibox
- drop chromium-142-dawn_commit_hash.patch, the generation of the
  header was included in the tarball genration</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
</package>
<package pkgid="adf9280cf2e6c4dcee39ba6c54dcec784037307f2772f65b73eb429efc8eb4f0313407023b896abe46e2a7d82d711a4004fcdc98e6be4080c65216323c7e774c" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.109" rel="bp160.1.1"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
</package>
<package pkgid="7ec5bd4af239908c4668df2bbf8bc7e26e2205c3ff87d04810bf451001d4f5532d225dab5e854107f9dc1ede2a6259575198de7305f8bf3bc67bbc998eaaadae" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.132" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1769601600">- Chromium 144.0.7559.109 (boo#1257404)
  * CVE-2026-1504: Inappropriate implementation in Background Fetch API</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
</package>
<package pkgid="8b51797f9f27add70cf911300b7990e941431edd1d699c23031e9fa1b236746dff2774005272e1dd299b56774226744f635f9f052f9877e12314b6cd476431ce" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.59" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762430400">- Chromium 142.0.7444.134 (boo#1253089):
  * CVE-2025-12725: Out of bounds write in WebGPU
  * CVE-2025-12726: Inappropriate implementation in Views
  * CVE-2025-12727: Inappropriate implementation in V8
  * CVE-2025-12728: Inappropriate implementation in Omnibox
  * CVE-2025-12729: Inappropriate implementation in Omnibox</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1762862400">- Chromium 142.0.7444.162 (boo#1253267):
  * CVE-2025-13042: Inappropriate implementation in V8</changelog>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
</package>
<package pkgid="c15bc6181f2ba42e0518919c6f0ea1483dfd3b665c7a2a2c3b3abe3a0fd212843dc7ad9b181a4e72eb9fdc528407b4938243b9a10d4d1cc527642d7803ce9f07" name="chromium" arch="x86_64">
  <version epoch="0" ver="144.0.7559.96" rel="bp160.1.1"/>
  <changelog author="ro@suse.de" date="1763380800">- Chromium 142.0.7444.175 (boo#1253698):
  * CVE-2025-13223: Type Confusion in V8
  * CVE-2025-13224: Type Confusion in V8</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1763899200">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1764676800">- Chromium 143.0.7499.40 (boo#1254429):
  * CVE-2025-13630: Type Confusion in V8
  * CVE-2025-13631: Inappropriate implementation in Google Updater
  * CVE-2025-13632: Inappropriate implementation in DevTools
  * CVE-2025-13633: Use after free in Digital Credentials
  * CVE-2025-13634: Inappropriate implementation in Downloads
  * CVE-2025-13720: Bad cast in Loader
  * CVE-2025-13721: Race in v8
  * CVE-2025-13635: Inappropriate implementation in Downloads
  * CVE-2025-13636: Inappropriate implementation in Split View
  * CVE-2025-13637: Inappropriate implementation in Downloads
  * CVE-2025-13638: Use after free in Media Stream
  * CVE-2025-13639: Inappropriate implementation in WebRTC
  * CVE-2025-13640: Inappropriate implementation in Passwords
- added patches:
  chromium-143-libpng-unbundle.patch
  (workaround broken libpng unbundle)
  chromium-143-cookie_string_view.patch
  (use string_view also for the const_iterator after type change)
  chromium-143-revert_rust_is_multiple_of.patch
  (revert added calls to is_multiple_of rejected as unstable feature)
- modified patches:
  gcc-enable-lto.patch (updated context)
  chromium-127-constexpr.patch (file moved)
  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch (add unsafe)
  ppc-fedora-fix-clang-selection.patch (updated context)
  ppc-fedora-0002-regenerate-xnn-buildgn.patch (reduced to stub,
  will need updating)
- dropped patches:
  chromium-142-iwyu-field-form-data.patch (upstream)
- bump buildrequires for rust-bindgen to 0.71 minimum as we need
  the unsafe_extern_blocks
- updated ppc-fedora-0002-regenerate-xnn-buildgn.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1765368000">- Chromium 143.0.7499.109 (boo#1254776):
  * CVE-2025-14372: Use after free in Password Manager
  * CVE-2025-14373: Inappropriate implementation in Toolbar
  * CVE-2025-14174: Out of bounds memory access in ANGLE
- added patch gtk-414-2.patch
  (also revert upstream cdc2a57272589f9522689500838e889b88b3f9d4
  for older gtk versions)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1765972800">- Chromium 143.0.7499.146 (boo#1255115):
  * CVE-2025-14765: Use after free in WebGPU
  * CVE-2025-14766: Out of bounds read and write in V8</changelog>
  <changelog author="ro@suse.de" date="1766145600">- Chromium 143.0.7499.169 (stable released 2025-12-18)
  * no cve listed yet</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1767700800">- Chromium 143.0.7499.192 (boo#1256067):
  * CVE-2026-0628: Insufficient policy enforcement in WebView tag</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- Chromium 144.0.7559.59 (boo#1256614)
  * CVE-2026-0899: Out of bounds memory access in V8
  * CVE-2026-0900: Inappropriate implementation in V8
  * CVE-2026-0901: Inappropriate implementation in Blink
  * CVE-2026-0902: Inappropriate implementation in V8
  * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  * CVE-2026-0904: Incorrect security UI in Digital Credentials
  * CVE-2026-0905: Insufficient policy enforcement in Network
  * CVE-2026-0906: Incorrect security UI
  * CVE-2026-0907: Incorrect security UI in Split View
  * CVE-2026-0908: Use after free in ANGLE
- added patches:
  * chromium-144-rust-adler2.patch
    (with system rust-1.86, we still have adler2)
  * chromium-144-revert_gfx_value_or.patch
    (looks like third_party/skia is outdated)
  * chromium-144-revert-libxml-2.13.patch
    (conditionally applied if libxml &lt; 2.13)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-127-bindgen.patch
  * chromium-127-rust-clanglib.patch
    (rust nightly features are now guarded, drop hunk)
  * gcc-enable-lto.patch
  * ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
    (regenerated)
- dropped patches:
  * ppc-fedora-fix-clang-selection.patch (upstream)
  * chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
  * chromium-142-rust-revert_should_panic.patch
- keeplibs:
  added third_party/perfetto/protos/third_party/pprof (pulled in)
- gn buildflags:
  * drop duplicate "use_sysroot=false"
  * add "chrome_pgo_phase=0" as in debian and fedora
- use noopenh264 where available</changelog>
  <changelog author="ro@suse.de" date="1768910400">- update INSTALL.sh to handle the addded tags in the
  desktop file (boo#1256938)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1768996800">- Chromium 144.0.7559.96 (boo#1257011)
  * CVE-2026-1220: Race in V8</changelog>
</package>
<package pkgid="8e631755f5ca7128aa4bbd0c951c1ddf189b07d00c6f49af6b81c40495ba25bd8ab98b76616b6f6a0010d72fc6611635f4b13b7ee03d5c0f137bcdf19c3fc9fa" name="chromium" arch="x86_64">
  <version epoch="0" ver="145.0.7632.109" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
</package>
<package pkgid="b909e20c431765b2615b1544c07ff0e69b187ed70e59062207b433d6fe14fc49577d7446ad0b63cdf5cc09f692e2eed8a3b21f019d763e04b908e2332bca6004" name="chromium" arch="x86_64">
  <version epoch="0" ver="145.0.7632.116" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
</package>
<package pkgid="67e081f8536c58e8d4b524307cc7e4cdd0545f7f1575fb017e1301924b23687f757ca72fcc4783e7aeedcf9cedaaca7a5a6e41c3776267ac56b012c49a27b279" name="chromium" arch="x86_64">
  <version epoch="0" ver="145.0.7632.159" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
</package>
<package pkgid="332538a8bb06bbcdbe5f85a351d67bfa379d15a58a445584dfd9090e8750f0093975b68e245156a72b3e8b7015b7da45553af3095214963bce3515b45e7f0973" name="chromium" arch="x86_64">
  <version epoch="0" ver="145.0.7632.75" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1769688000">- use nodejs-common and use the version from /usr/bin/node
- but use nodejs22 for code15 (while nodejs-common still
  points to nodejs14 there)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206400">- Chromium 144.0.7559.132 (boo#1257650)
  * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome
    prior to 144.0.7559.132 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page.
  * CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to
    144.0.7559.132 allowed a remote attacker to potentially exploit
    heap corruption via a crafted HTML page.
- removed patches:
  * chromium-134-revert-rust-adler2.patch
  * chromium-144-rust-adler2.patch
    (obsolete, automatic if rust_nightly is set properly)
- added patches:
  * force-rust-nightly.patch
- try rust1.93 for tumbleweed, 1.92 for older
- gn flags:
  add toolchain_supports_rust_thin_lto=false to be able to build
  with a llvm older than the one vendored in rust
- use llvm21 for tumbleweed
- drop qt5 parts from spec, not used</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1770206401">- Chromium 145.0.7632.45 (boo#1258116)
  * jpeg-xl support has been readded
  * CVE-2026-2313: Use after free in CSS
  * CVE-2026-2314: Heap buffer overflow in Codecs
  * CVE-2026-2315: Inappropriate implementation in WebGPU
  * CVE-2026-2316: Insufficient policy enforcement in Frames
  * CVE-2026-2317: Inappropriate implementation in Animation
  * CVE-2026-2318: Inappropriate implementation in PictureInPicture
  * CVE-2026-2319: Race in DevTools
  * CVE-2026-2320: Inappropriate implementation in File input
  * CVE-2026-2321: Use after free in Ozone
  * CVE-2026-2322: Inappropriate implementation in File input
  * CVE-2026-2323: Inappropriate implementation in Downloads
- modified patches:
  * chromium-127-rust-clanglib.patch (context)
  * chromium-144-revert-libxml-2.13.patch (context)
  * ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    (context)
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
    (drop ref to ppc/lossless_audiodsp_altivec.o, dropped upstream)
  * chromium-141-no_cxx_modules.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch (context)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * system-libdrm.patch (context)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- added patches:
  * chromium-145-blink_missing_include.patch
  * chromium-145-use_unrar.patch
    (properly respect disabling unrar in recent code changes)
  * ppc-fedora-0009-sandbox-ignore-byte-span-error.patch
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
    (revert spanification for jpeg_parser ending in compile error)
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
    (also to revert jpeg_encoder spanification for older llvm)
- bump BR for gn to 0.20251217
  * need the string_hash function for rust gni
- add rollup binaries for arm64 and powerpc64le, missing upstream
  using tarballs from npm.skia.org</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984000">- Chromium 145.0.7632.67:
  * Revert a change in url_fixer that may have caused crashes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1770984001">- Chromium 145.0.7632.75:
  * CVE-2026-2441: Use after free in CSS (boo#1258185)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243200">- fix INSTALL.sh again to replace the tags in desktop file,
  appdata and manpage (boo#1258199)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243201">- update/resync ppc64le patches from fedora:
  * modified patches:
    ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
    ppc-fedora-0001-Add-ppc64-target-to-libaom.patch
    ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    ppc-fedora-0001-Enable-ppc64-pointer-compression.patch
    ppc-fedora-0001-Force-baseline-POWER8-AltiVec-VSX-CPU-features-when-.patch
    ppc-fedora-0001-Implement-support-for-PPC64-on-Linux.patch
    ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
    ppc-fedora-0001-add-xnn-ppc64el-support.patch
    ppc-fedora-0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
    ppc-fedora-0001-swiftshader-fix-build.patch
    ppc-fedora-0001-third_party-angle-Include-missing-header-cstddef-in-.patch
    ppc-fedora-0001-third_party-libvpx-Properly-generate-gni-on-ppc64.patch
    ppc-fedora-0001-third_party-pffft-Include-altivec.h-on-ppc64-with-SI.patch
    ppc-fedora-0002-Add-PPC64-generated-files-for-boringssl.patch
    ppc-fedora-0002-Add-ppc64-trap-instructions.patch
    ppc-fedora-0002-regenerate-xnn-buildgn.patch
    ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    ppc-fedora-0002-third_party-lss-kernel-structs.patch
    ppc-fedora-0003-third_party-libvpx-Add-ppc64-generated-config.patch
    ppc-fedora-0004-third_party-crashpad-port-curl-transport-ppc64.patch
    ppc-fedora-0004-third_party-libvpx-work-around-ambiguous-vsx.patch
    ppc-fedora-HACK-debian-clang-disable-base-musttail.patch
    ppc-fedora-HACK-third_party-libvpx-use-generic-gnu.patch
    ppc-fedora-Rtc_base-system-arch.h-PPC.patch
    ppc-fedora-add-ppc64-architecture-string.patch
    ppc-fedora-add-ppc64-architecture-to-extensions.diff
    ppc-fedora-add-ppc64-pthread-stack-size.patch
    ppc-fedora-dawn-fix-ppc64le-detection.patch
    ppc-fedora-fix-breakpad-compile.patch
    ppc-fedora-fix-different-data-layouts.patch
    ppc-fedora-fix-partition-alloc-compile.patch
    ppc-fedora-fix-rust-linking.patch
    ppc-fedora-fix-study-crash.patch
    ppc-fedora-fix-unknown-warning-option-messages.diff
    ppc-fedora-skia-vsx-instructions.patch
  * removed patches:
    ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
    ppc-fedora-0001-services-service_manager-sandbox-linux-Fix-TCGETS-de.patch
    ppc-fedora-0001-sandbox-linux-bpf_dsl-Update-syscall-ranges-for-ppc6.patch
    ppc-fedora-0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
    ppc-fedora-0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
    ppc-fedora-0002-sandbox-linux-bpf_dsl-Modify-seccomp_macros-to-add-s.patch
    ppc-fedora-0003-sandbox-linux-system_headers-Update-linux-seccomp-he.patch
    ppc-fedora-0004-sandbox-linux-system_headers-Update-linux-signal-hea.patch
    ppc-fedora-0005-sandbox-linux-seccomp-bpf-Add-ppc64-syscall-stub.patch
    ppc-fedora-0005-sandbox-linux-update-unit-test-for-ppc64.patch
    ppc-fedora-0006-sandbox-linux-disable-timedwait-time64-ppc64.patch
    ppc-fedora-0007-sandbox-linux-add-ppc64-stat.patch
    ppc-fedora-Sandbox-linux-services-credentials.cc-PPC.patch
    ppc-fedora-0008-sandbox-fix-ppc64le-glibc234.patch
    ppc-fedora-0002-Include-cstddef-to-fix-build.patch
    ppc-fedora-0001-third-party-hwy-wrong-include.patch
    ppc-fedora-fix-ppc64-linux-syscalls-headers.patch
    ppc-fedora-use-sysconf-page-size-on-ppc64.patch
  * added patches:
    ppc-fedora-HACK-debian-clang-disable-pa-musttail.patch
    ppc-fedora-fix-rustc.patch
    ppc-fedora-fix-page-allocator-overflow.patch
    chromium-143-swiftshader-llvm-16.0.patch
    chromium-145-swiftshader-missing-include.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243202">- drop use of rollup binaries and use rollup-3.x which does not
  use prebuilt binaries (that fail at least on older ppc64le)
  follow the approach of the debian packaging
  * added patches:
    rollup.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771243203">- also copy rollup into third_party/node/node_modules
- stay on llvm-10 for swiftshader but bring a similar patch
  * added patches:
    0001-swiftshader-fix-build-llvm10.patch
  * removed patches:
    chromium-143-swiftshader-llvm-16.0.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
</package>
<package pkgid="37f5c097327524632eee68a879bac81d5d6bfecd7123d659177fd7a04d5cbd9f9b8e5d14fb164f9318cf8af08b58654878788c8e016eef9b1fd937e5605786e3" name="chromium" arch="x86_64">
  <version epoch="0" ver="146.0.7680.153" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
</package>
<package pkgid="8546236cde79a43129480ba3da459385d073fc3dc6c9f472d91ec632dd4274621fe06c8dd0a02e460880c0bfa5fe3a7ec2ed5a0a8f435d15715faa280f829dce" name="chromium" arch="x86_64">
  <version epoch="0" ver="146.0.7680.164" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
</package>
<package pkgid="1cda9cf8411f6b3f66d1894436bf9d95e74e97e785684bac25dfadb6dcfe638e5b6ac8bff1005c2512d48de467dbd85fe0075a7b8e1e6f8974d28611012de0dd" name="chromium" arch="x86_64">
  <version epoch="0" ver="146.0.7680.177" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
</package>
<package pkgid="e8bc7d0f77fc92fbeb70f7ed55ae64180bfa2d7e742dbf3e1a1478750d755eb59d19d89023636276af539e897d3539610ccf308d354f931e4275bbe0a6a7a4a3" name="chromium" arch="x86_64">
  <version epoch="0" ver="146.0.7680.80" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1771329600">- more fixes for desktop file, some variables were lowercased,
  further adaptions in INSTALL script (boo#1258199)
- modified patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
    (trigger only with glibc-2.43)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771416000">- Chromium 145.0.7632.109 (boo#1258438):
  * CVE-2026-2648: Heap buffer overflow in PDFium
  * CVE-2026-2649: Integer overflow in V8
  * CVE-2026-2650: Heap buffer overflow in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1771934400">- Chromium 145.0.7632.116 (boo#1258733):
  * CVE-2026-3061: Out of bounds read in Media
  * CVE-2026-3062: Out of bounds read and write in Tint
  * CVE-2025-3063: Inappropriate implementation in DevTools</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1772625600">- Chromium 145.0.7632.159 (boo#1259213)
  * CVE-2026-3536: Integer overflow in ANGLE
  * CVE-2026-3537: Object lifecycle issue in PowerVR
  * CVE-2026-3538: Integer overflow in Skia
  * CVE-2026-3539: Object lifecycle issue in DevTools
  * CVE-2026-3540: Inappropriate implementation in WebAudio
  * CVE-2026-3541: Inappropriate implementation in CSS
  * CVE-2026-3542: Inappropriate implementation in WebAssembly
  * CVE-2026-3543: Inappropriate implementation in V8
  * CVE-2026-3544: Heap buffer overflow in WebCodecs
  * CVE-2026-3545: Insufficient data validation in Navigation</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316800">- Chromium 146.0.7680.71 (released 2026-03-11) (boo#1259530)
  * CVE-2026-3913: Heap buffer overflow in WebML
  * CVE-2026-3914: Integer overflow in WebML
  * CVE-2026-3915: Heap buffer overflow in WebML
  * CVE-2026-3916: Out of bounds read in Web Speech
  * CVE-2026-3917: Use after free in Agents
  * CVE-2026-3918: Use after free in WebMCP
  * CVE-2026-3919: Use after free in Extensions
  * CVE-2026-3920: Out of bounds memory access in WebML
  * CVE-2026-3921: Use after free in TextEncoding
  * CVE-2026-3922: Use after free in MediaStream
  * CVE-2026-3923: Use after free in WebMIDI
  * CVE-2026-3924: Use after free in WindowDialog
  * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  * CVE-2026-3926: Out of bounds read in V8
  * CVE-2026-3927: Incorrect security UI in PictureInPicture
  * CVE-2026-3928: Insufficient policy enforcement in Extensions
  * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  * CVE-2026-3930: Unsafe navigation in Navigation
  * CVE-2026-3931: Heap buffer overflow in Skia
  * CVE-2026-3932: Insufficient policy enforcement in PDF
  * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  * CVE-2026-3936: Use after free in WebView
  * CVE-2026-3937: Incorrect security UI in Downloads
  * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  * CVE-2026-3939: Insufficient policy enforcement in PDF
  * CVE-2026-3940: Insufficient policy enforcement in DevTools
  * CVE-2026-3941: Insufficient policy enforcement in DevTools
  * CVE-2026-3942: Incorrect security UI in PictureInPicture
- added patches:
  * chromium-146-mojo_chmod_mode.patch
    (fix typo/pythonism in c code)
  * chromium-146-value_or.patch
    (error: no matching member function for call to 'value_or')
  * chromium-146-has_no_clone.patch
  * chromium-146-clang-19-crash.patch (from debian)
  * chromium-146-keyfactory.patch (from debian)
  * chromium-146-static-assert.patch (from debian)
  * chromium-146-ignore-for-ubsan.patch (from debian)
  * chromium-146-bytemuck.patch (from debian)
- modified patches:
  * chromium-125-compiler.patch
  * chromium-133-bring_back_and_disable_allowlist.patch
  * chromium-134-type-mismatch-error.patch
  * chromium-145-use_unrar.patch
  * force-rust-nightly.patch
  * rollup.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-fix-study-crash.patch
- removed patches:
  * chromium-4f46f03a6c6d4c6efc1ad5d0d78030d02326f967.patch
- keeplibs:
  drop third_party/skia/third_party/vulkan (gone)
  add  third_party/catapult/third_party/typ
  (needed by base/tracing/protos/chrome_track_event_resources_grit)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773316801">- modified patches:
  * chromium-146-value_or.patch (from debian)
- removed patches:
  * chromium-144-revert_gfx_value_or.patch (contained above)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
</package>
<package pkgid="24b5c97a3bc0a1c3ecee2096eedf9f160c41f8f58c82ba22964c7b2bd8b790ce77300f653eb3f2ed29adc20b194eb08387e6406ec91bc51d68b8f45e8ad4cfa9" name="chromium" arch="x86_64">
  <version epoch="0" ver="147.0.7727.101" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
</package>
<package pkgid="398977fc05cef0541371375f21dcd4f2d5cd9a5c6ad76531a417037d45116bcff8d9e6f4ec3abe691c9e7cef86c215554ea92ae523c2798577997a1aed153606" name="chromium" arch="x86_64">
  <version epoch="0" ver="147.0.7727.116" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)</changelog>
</package>
<package pkgid="72342ad82a35155294b2e26f4da6e6c0116c88bede8f657b6ffd814c684bd0fa81a3684bea8b21d63f0807d287e29ab380dfa5d83167c831f7e825c8ac85d6cd" name="chromium" arch="x86_64">
  <version epoch="0" ver="147.0.7727.137" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
</package>
<package pkgid="11f8f3a9de6fe14572784b3d6ce4de30fcb5d55b69dece2f950c06202fcd96f3bc431c575c5dc6c4df4ad07b054f7e877c7c2c39dbf07150c18273f97f391f1c" name="chromium" arch="x86_64">
  <version epoch="0" ver="147.0.7727.55" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403200">- fix ffmpeg build on ppc64le
- modified patches:
  * ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773403201">- Chromium 146.0.7680.75:
  * CVE-2026-3910: Inappropriate implementation in V8 (boo#1259648)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773489600">- Chromium 146.0.7680.80:
  * CVE-2026-3909: Out of bounds write in Skia (boo#1259659)</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1773662400">- fix INSTALL.sh (upstream changed CHANNEL to channel in wrapper)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1773835200">- Chromium 146.0.7680.153 (boo#1259964):
  * CVE-2026-4439: Out of bounds memory access in WebGL
  * CVE-2026-4440: Out of bounds read and write in WebGL
  * CVE-2026-4441: Use after free in Base
  * CVE-2026-4442: Heap buffer overflow in CSS
  * CVE-2026-4443: Heap buffer overflow in WebAudio
  * CVE-2026-4444: Stack buffer overflow in WebRTC
  * CVE-2026-4445: Use after free in WebRTC
  * CVE-2026-4446: Use after free in WebRTC
  * CVE-2026-4447: Inappropriate implementation in V8
  * CVE-2026-4448: Heap buffer overflow in ANGLE
  * CVE-2026-4449: Use after free in Blink
  * CVE-2026-4450: Out of bounds write in V8
  * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  * CVE-2026-4452: Integer overflow in ANGLE
  * CVE-2026-4453: Integer overflow in Dawn
  * CVE-2026-4454: Use after free in Network
  * CVE-2026-4455: Heap buffer overflow in PDFium
  * CVE-2026-4456: Use after free in Digital Credentials API
  * CVE-2026-4457: Type Confusion in V8
  * CVE-2026-4458: Use after free in Extensions
  * CVE-2026-4459: Out of bounds read and write in WebAudio
  * CVE-2026-4460: Out of bounds read in Skia
  * CVE-2026-4461: Inappropriate implementation in V8
  * CVE-2026-4462: Out of bounds read in Blink
  * CVE-2026-4463: Heap buffer overflow in WebRTC
  * CVE-2026-4464: Integer overflow in ANGLE</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1774267200">- Chromium 146.0.7680.164 (boo#1260376)
  * CVE-2026-4673: Heap buffer overflow in WebAudio
  * CVE-2026-4674: Out of bounds read in CSS
  * CVE-2026-4675: Heap buffer overflow in WebGL
  * CVE-2026-4676: Use after free in Dawn
  * CVE-2026-4677: Out of bounds read in WebAudio
  * CVE-2026-4678: Use after free in WebGPU
  * CVE-2026-4679: Integer overflow in Fonts
  * CVE-2026-4680: Use after free in FedCM
- added patches:
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
    (upstream compile fix for blink on non-x86,non-arm)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
</package>
<package pkgid="dad7242dceeea429b84e30a0ac578192a1e882b2d969e1ce663ee8a3bc949205b2d17a4db31e6dd2c3ea2b44d75842a7c49e69b616524a426633dad68606e799" name="chromium" arch="x86_64">
  <version epoch="0" ver="148.0.7778.167" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1774958400">- Chromium 146.0.7680.177 (boo#1261249)
  * CVE-2026-5273: Use after free in CSS
  * CVE-2026-5272: Heap buffer overflow in GPU
  * CVE-2026-5274: Integer overflow in Codecs
  * CVE-2026-5275: Heap buffer overflow in ANGLE
  * CVE-2026-5276: Insufficient policy enforcement in WebUSB
  * CVE-2026-5277: Integer overflow in ANGLE
  * CVE-2026-5278: Use after free in Web MIDI
  * CVE-2026-5279: Object corruption in V8
  * CVE-2026-5280: Use after free in WebCodecs
  * CVE-2026-5281: Use after free in Dawn
  * CVE-2026-5282: Out of bounds read in WebCodecs
  * CVE-2026-5283: Inappropriate implementation in ANGLE
  * CVE-2026-5284: Use after free in Dawn
  * CVE-2026-5285: Use after free in WebGL
  * CVE-2026-5286: Use after free in Dawn
  * CVE-2026-5287: Use after free in PDF
  * CVE-2026-5288: Use after free in WebView
  * CVE-2026-5289: Use after free in Navigation
  * CVE-2026-5290: Use after free in Compositing
  * CVE-2026-5291: Inappropriate implementation in WebGL
  * CVE-2026-5292: Out of bounds read in WebCodecs
- drop chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch
  (included)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- ccache experiement: show stats</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131201">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)</changelog>
</package>
<package pkgid="f3849b7ff1d803a82091c3d3395c4108fba519585e614a49d082a4d12f1e7119c45de350b2e3b3cda1ade5ee15166a30de104c4ca5e781b4ed466138522d1e65" name="chromium" arch="x86_64">
  <version epoch="0" ver="148.0.7778.178" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775131200">- Chromium 147.0.7727.49 (early stable released 2026-04-01)
- added patches:
  * chromium-147-comment_safe_assert.patch
    (ignore requirement for local libc++ for now, system copy
    has to be good enough)
  * chromium-147-ffmpeg_includes.patch
  * chromium-bafd7d217b9e26edf3be8d20b1ff56bcea4b16ee.patch
    (revert spanification for llvm-19 for now)
  * chromium-147-blink_renderer_need_ffmpeg.patch
    (only seen with using system ffmpeg)
- modified patches:
  * chromium-24264eefbfd3464161764f31a2752c5327719452.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
- removed patches:
  * chromium-145-use_unrar.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
</package>
<package pkgid="5013fb59bf4b1cc6d0ed8ed55036ddbf1cbf8077fcbfe27cb88fa3fca223f614fa454f3e5690b02b18c90869cb53cb308072fa50e59ddbbc68e76672c2c05d99" name="chromium" arch="x86_64">
  <version epoch="0" ver="148.0.7778.215" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1775649600">- Chromium 147.0.7727.55 (boo#1261758):
  * CVE-2026-5858: Heap buffer overflow in WebML
  * CVE-2026-5859: Integer overflow in WebML
  * CVE-2026-5860: Use after free in WebRTC
  * CVE-2026-5861: Use after free in V8
  * CVE-2026-5862: Inappropriate implementation in V8
  * CVE-2026-5863: Inappropriate implementation in V8
  * CVE-2026-5864: Heap buffer overflow in WebAudio
  * CVE-2026-5865: Type Confusion in V8
  * CVE-2026-5866: Use after free in Media
  * CVE-2026-5867: Heap buffer overflow in WebML
  * CVE-2026-5868: Heap buffer overflow in ANGLE
  * CVE-2026-5869: Heap buffer overflow in WebML
  * CVE-2026-5870: Integer overflow in Skia
  * CVE-2026-5871: Type Confusion in V8
  * CVE-2026-5872: Use after free in Blink
  * CVE-2026-5873: Out of bounds read and write in V8
  * CVE-2026-5874: Use after free in PrivateAI
  * CVE-2026-5875: Policy bypass in Blink
  * CVE-2026-5876: Side-channel information leakage in Navigation
  * CVE-2026-5877: Use after free in Navigation
  * CVE-2026-5878: Incorrect security UI in Blink
  * CVE-2026-5879: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-5880: Incorrect security UI in browser UI
  * CVE-2026-5881: Policy bypass in LocalNetworkAccess
  * CVE-2026-5882: Incorrect security UI in Fullscreen
  * CVE-2026-5883: Use after free in Media
  * CVE-2026-5884: Insufficient validation of untrusted input in Media
  * CVE-2026-5885: Insufficient validation of untrusted input in WebML
  * CVE-2026-5886: Out of bounds read in WebAudio
  * CVE-2026-5887: Insufficient validation of untrusted input in Downloads
  * CVE-2026-5888: Uninitialized Use in WebCodecs
  * CVE-2026-5889: Cryptographic Flaw in PDFium
  * CVE-2026-5890: Race in WebCodecs
  * CVE-2026-5891: Insufficient policy enforcement in browser UI
  * CVE-2026-5892: Insufficient policy enforcement in PWAs
  * CVE-2026-5893: Race in V8
  * CVE-2026-5894: Inappropriate implementation in PDF
  * CVE-2026-5895: Incorrect security UI in Omnibox
  * CVE-2026-5896: Policy bypass in Audio
  * CVE-2026-5897: Incorrect security UI in Downloads
  * CVE-2026-5898: Incorrect security UI in Omnibox
  * CVE-2026-5899: Incorrect security UI in History Navigation
  * CVE-2026-5900: Policy bypass in Downloads
  * CVE-2026-5901: Policy bypass in DevTools
  * CVE-2026-5902: Race in Media
  * CVE-2026-5903: Policy bypass in IFrameSandbox
  * CVE-2026-5904: Use after free in V8
  * CVE-2026-5905: Incorrect security UI in Permissions
  * CVE-2026-5906: Incorrect security UI in Omnibox
  * CVE-2026-5907: Insufficient data validation in Media
  * CVE-2026-5908: Integer overflow in Media
  * CVE-2026-5909: Integer overflow in Media
  * CVE-2026-5910: Integer overflow in Media
  * CVE-2026-5911: Policy bypass in ServiceWorkers
  * CVE-2026-5912: Integer overflow in WebRTC
  * CVE-2026-5913: Out of bounds read in Blink
  * CVE-2026-5914: Type Confusion in CSS
  * CVE-2026-5915: Insufficient validation of untrusted input in WebML
  * CVE-2026-5918: Inappropriate implementation in Navigation
  * CVE-2026-5919: Insufficient validation of untrusted input in WebSockets
  * enforce a num,ber of new Local Area Network (LAN) restrictions
  * New Web Printing API
  * vertical tabs support (trial)
- new in 147 (for developers):
  * Element-scoped view transitions exposes startViewTransition on arbitrary HTML elements.
  * CSS contrast-color() helps meet accessibility requirements
  * The CSS border-shape property lets you create non-rectangular borders</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776254400">- Chromium 147.0.7727.101 (boo#1262174)
  * CVE-2026-6296: Heap buffer overflow in ANGLE
  * CVE-2026-6297: Use after free in Proxy
  * CVE-2026-6298: Heap buffer overflow in Skia
  * CVE-2026-6299: Use after free in Prerender
  * CVE-2026-6358: Use after free in XR
  * CVE-2026-6359: Use after free in Video
  * CVE-2026-6300: Use after free in CSS
  * CVE-2026-6301: Type Confusion in Turbofan
  * CVE-2026-6302: Use after free in Video
  * CVE-2026-6303: Use after free in Codecs
  * CVE-2026-6304: Use after free in Graphite
  * CVE-2026-6305: Heap buffer overflow in PDFium
  * CVE-2026-6306: Heap buffer overflow in PDFium
  * CVE-2026-6307: Type Confusion in Turbofan
  * CVE-2026-6308: Out of bounds read in Media
  * CVE-2026-6309: Use after free in Viz
  * CVE-2026-6360: Use after free in FileSystem
  * CVE-2026-6310: Use after free in Dawn
  * CVE-2026-6311: Uninitialized Use in Accessibility
  * CVE-2026-6312: Insufficient policy enforcement in Passwords
  * CVE-2026-6313: Insufficient policy enforcement in CORS
  * CVE-2026-6314: Out of bounds write in GPU
  * CVE-2026-6315: Use after free in Permissions
  * CVE-2026-6316: Use after free in Forms
  * CVE-2026-6361: Heap buffer overflow in PDFium
  * CVE-2026-6362: Use after free in Codecs
  * CVE-2026-6317: Use after free in Cast
  * CVE-2026-6363: Type Confusion in V8
  * CVE-2026-6318: Use after free in Codecs
  * CVE-2026-6319: Use after free in Payments
  * CVE-2026-6364: Out of bounds read in Skia
- try sloppiness=gcno_cwd in local ccache config</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
</package>
<package pkgid="f38634bb0b7d5e5f0c95b0d2cc788795c24f896b7419ab4baa3eaa88c1354a03eeebf5b8a2a393aec637acc1bd6cfdb5ab120a80ed4cbf00ac8cde6a660987b3" name="chromium" arch="x86_64">
  <version epoch="0" ver="149.0.7827.102" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1781006400">- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View</changelog>
</package>
<package pkgid="4f1ea08d7c9aef135797ace1c44fc36c83b2349063ebf1ce790299a0744a0e93a51b7d4b63842b1c633f77c43dbec17129cda23d8f749b05326455e37994513a" name="chromium" arch="x86_64">
  <version epoch="0" ver="149.0.7827.114" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1781006400">- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781265600">- Chromium 149.0.7827.114 (boo#1268158):
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views</changelog>
</package>
<package pkgid="8e5f9e556ca8d8cf73bb8b58a4886d0c542252f75de952486dfb398bd52879decded45bbec26686b91b3e95ced0900f7f894e8a586da7dd54ed6d1b7736de4d7" name="chromium" arch="x86_64">
  <version epoch="0" ver="149.0.7827.155" rel="bp160.1.1"/>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1781006400">- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781265600">- Chromium 149.0.7827.114 (boo#1268158):
  * CVE-2026-12007: Use after free  Core
  * CVE-2026-12008: Use after free  DigitalCredentials
  * CVE-2026-12009: Insufficient validation of untrusted input  Accessibility
  * CVE-2026-12010: Heap buffer overflow  GPU
  * CVE-2026-12011: Use after free  WebMIDI
  * CVE-2026-12012: Use after free  Network
  * CVE-2026-12013: Use after free  Media
  * CVE-2026-12014: Use after free  Cast
  * CVE-2026-12015: Use after free  Autofill
  * CVE-2026-12016: Insufficient validation of untrusted input  DevTools
  * CVE-2026-12017: Insufficient validation of untrusted input  Extensions
  * CVE-2026-12018: Inappropriate implementation  Mojo
  * CVE-2026-12019: Out of bounds write  Codecs
  * CVE-2026-12020: Use after free  Autofill
  * CVE-2026-12022: Race  Safe Browsing
  * CVE-2026-12023: Use after free  GPU
  * CVE-2026-12024: Insufficient policy enforcement  DevTools
  * CVE-2026-12025: Insufficient validation of untrusted input  Network
  * CVE-2026-12026: Out of bounds read  Video
  * CVE-2026-12027: Insufficient policy enforcement  Headless
  * CVE-2026-12028: Use after free  GPU
  * CVE-2026-12029: Use after free  Video
  * CVE-2026-12030: Heap buffer overflow  GPU
  * CVE-2026-12031: Inappropriate implementation  Views
  * CVE-2026-12032: Inappropriate implementation  Passwords
  * CVE-2026-12033: Out of bounds read  VideoCapture
  * CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming
  * CVE-2026-12035: Use after free  Views</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1781352000">- added patches:
  * disable-ai.patch (re-add since now ported to 149)
- added configs:
  * disable-ai.json
  (both parts taken from fedora package)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781697600">- Chromium 149.0.7827.155 (boo#1268373):
  * CVE-2026-12437: Use after free in WebShare
  * CVE-2026-12438: Inappropriate implementation in WebView
  * CVE-2026-12439: Use after free in Digital Credentials
  * CVE-2026-12440: Use after free in DigitalCredentials
  * CVE-2026-12441: Use after free in File Input
  * CVE-2026-12442: Use after free in Passwords
  * CVE-2026-12443: Use after free in Web Authentication
  * CVE-2026-12444: Out of bounds read in Chromoting
  * CVE-2026-12445: Use after free in Extensions
  * CVE-2026-12446: Insufficient data validation in Passwords
  * CVE-2026-12447: Heap buffer overflow in WebRTC
  * CVE-2026-12448: Inappropriate implementation in WebView
  * CVE-2026-12449: Use after free in Chromoting
  * CVE-2026-12450: Inappropriate implementation in Media
  * CVE-2026-12451: Use after free in DigitalCredentials
  * CVE-2026-12452: Use after free in Downloads
  * CVE-2026-12453: Insufficient validation of untrusted input in Input
  * CVE-2026-12454: Race in Safe Browsing
  * CVE-2026-12455: Use after free in Tab Strip
  * CVE-2026-12456: Insufficient validation of untrusted input in Extensions
  * CVE-2026-12457: Insufficient data validation in Extensions
  * CVE-2026-12458: Incorrect security UI in Passwords
  * CVE-2026-12459: Inappropriate implementation in Serial
  * CVE-2026-12460: Insufficient policy enforcement in File System Access
  * CVE-2026-12461: Out of bounds read in WebRTC
  * CVE-2026-12462: Use after free in Media
  * CVE-2026-12463: Inappropriate implementation in Views
  * CVE-2026-12464: Use after free in Browser
  * CVE-2026-12465: Insufficient validation of untrusted input in Metrics
  * CVE-2026-12466: Heap buffer overflow in WebRTC
  * CVE-2026-12467: Use after free in Extensions
  * CVE-2026-12468: Inappropriate implementation in Updater
  * CVE-2026-12469: Uninitialized Use in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1781697601">- Use version suffix for llvm/clang commands</changelog>
</package>
<package pkgid="4f8336c8557da962e98a93d5ac18d53f035044e6f08fccef4db0c51f8c183032629ea2e18a3cc0246f8b20f8ba91e7b0763d15296199f66e97cf23bd28be5047" name="chromium" arch="x86_64">
  <version epoch="0" ver="149.0.7827.53" rel="bp160.1.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1776859200">- Chromium 147.0.7727.116 (boo#1262586)
  * CVE-2026-6919: Use after free in DevTools
  * CVE-2026-6920: Out of bounds read in GPU
  * CVE-2026-6921: Race in GPU
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1777377600">- Chromium 147.0.7727.137 (boo#1263158)
  * CVE-2026-7363: Use after free in Canvas
  * CVE-2026-7361: Use after free in iOS
  * CVE-2026-7344: Use after free in Accessibility
  * CVE-2026-7343: Use after free in Views
  * CVE-2026-7333: Use after free in GPU
  * CVE-2026-7360: Insufficient validation of untrusted input in Compositing
  * CVE-2026-7359: Use after free in ANGLE
  * CVE-2026-7358: Use after free in Animation
  * CVE-2026-7334: Use after free in Views
  * CVE-2026-7357: Use after free in GPU
  * CVE-2026-7356: Use after free in Navigation
  * CVE-2026-7354: Out of bounds read and write in Angle
  * CVE-2026-7353: Heap buffer overflow in Skia
  * CVE-2026-7352: Use after free in Media
  * CVE-2026-7351: Race in MHTML
  * CVE-2026-7350: Use after free in WebMIDI
  * CVE-2026-7349: Use after free in Cast
  * CVE-2026-7348: Use after free in Codecs
  * CVE-2026-7335: Use after free in media
  * CVE-2026-7336: Use after free in WebRTC
  * CVE-2026-7337: Type Confusion in V8
  * CVE-2026-7347: Use after free in Chromoting
  * CVE-2026-7346: Inappropriate implementation in Tint
  * CVE-2026-7345: Insufficient validation of untrusted input in Feedback
  * CVE-2026-7338: Use after free in Cast
  * CVE-2026-7342: Use after free in WebView
  * CVE-2026-7341: Use after free in WebRTC
  * CVE-2026-7339: Heap buffer overflow in WebRTC
  * CVE-2026-7340: Integer overflow in ANGLE
  * CVE-2026-7355: Use after free in Media</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778068800">- Chromium 148 (148.0.7778.96) promoted to stable (boo#1264175)
  * CVE-2026-7896: Integer overflow in Blink
  * CVE-2026-7897: Use after free in Mobile
  * CVE-2026-7898: Use after free in Chromoting
  * CVE-2026-7899: Out of bounds read and write in V8
  * CVE-2026-7900: Heap buffer overflow in ANGLE
  * CVE-2026-7901: Use after free in ANGLE
  * CVE-2026-7902: Out of bounds memory access in V8
  * CVE-2026-7903: Integer overflow in ANGLE
  * CVE-2026-7904: Out of bounds read in Fonts
  * CVE-2026-7905: Insufficient validation of untrusted input in Media
  * CVE-2026-7906: Use after free in SVG
  * CVE-2026-7907: Use after free in DOM
  * CVE-2026-7908: Use after free in Fullscreen
  * CVE-2026-7909: Inappropriate implementation in ServiceWorker
  * CVE-2026-7910: Use after free in Views
  * CVE-2026-7911: Use after free in Aura
  * CVE-2026-7912: Integer overflow in GPU
  * CVE-2026-7913: Insufficient policy enforcement in DevTools
  * CVE-2026-7914: Type Confusion in Accessibility
  * CVE-2026-7915: Insufficient data validation in DevTools
  * CVE-2026-7916: Insufficient data validation in InterestGroups
  * CVE-2026-7917: Use after free in Fullscreen
  * CVE-2026-7918: Use after free in GPU
  * CVE-2026-7919: Use after free in Aura
  * CVE-2026-7920: Use after free in Skia
  * CVE-2026-7921: Use after free in Passwords
  * CVE-2026-7922: Use after free in ServiceWorker
  * CVE-2026-7923: Out of bounds write in Skia
  * CVE-2026-7924: Uninitialized Use in Dawn
  * CVE-2026-7925: Use after free in Chromoting
  * CVE-2026-7926: Use after free in PresentationAPI
  * CVE-2026-7927: Type Confusion in Runtime
  * CVE-2026-7928: Use after free in WebRTC
  * CVE-2026-7929: Use after free in MediaRecording
  * CVE-2026-7930: Insufficient validation of untrusted input in Cookies
  * CVE-2026-7931: Insufficient validation of untrusted input in iOS
  * CVE-2026-7932: Insufficient policy enforcement in Downloads
  * CVE-2026-7933: Out of bounds read in WebCodecs
  * CVE-2026-7934: Insufficient validation of untrusted input in Popup Blocker
  * CVE-2026-7935: Inappropriate implementation in Speech
  * CVE-2026-7936: Object lifecycle issue in V8
  * CVE-2026-7937: Insufficient policy enforcement in DevTools
  * CVE-2026-7938: Use after free in CSS
  * CVE-2026-7939: Inappropriate implementation in SanitizerAPI
  * CVE-2026-7940: Use after free in V8
  * CVE-2026-7941: Insufficient validation of untrusted input in Mobile
  * CVE-2026-7942: Integer overflow in ANGLE
  * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-7944: Insufficient validation of untrusted input in Persistent Cache
  * CVE-2026-7945: Insufficient validation of untrusted input in COOP
  * CVE-2026-7946: Insufficient policy enforcement in WebUI
  * CVE-2026-7947: Insufficient validation of untrusted input in Network
  * CVE-2026-7948: Race in Chromoting
  * CVE-2026-7949: Out of bounds read in Skia
  * CVE-2026-7950: Out of bounds read and write in GFX
  * CVE-2026-7951: Out of bounds write in WebRTC
  * CVE-2026-7952: Insufficient policy enforcement in Extensions
  * CVE-2026-7953: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-7954: Race in Shared Storage
  * CVE-2026-7955: Uninitialized Use in GPU
  * CVE-2026-7956: Use after free in Navigation
  * CVE-2026-7957: Out of bounds write in Media
  * CVE-2026-7958: Inappropriate implementation in ServiceWorker
  * CVE-2026-7959: Inappropriate implementation in Navigation
  * CVE-2026-7960: Race in Speech
  * CVE-2026-7961: Insufficient validation of untrusted input in Permissions
  * CVE-2026-7962: Insufficient policy enforcement in DirectSockets
  * CVE-2026-7963: Inappropriate implementation in ServiceWorker
  * CVE-2026-7964: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-7965: Insufficient validation of untrusted input in DevTools
  * CVE-2026-7966: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-7967: Insufficient validation of untrusted input in Navigation
  * CVE-2026-7968: Insufficient validation of untrusted input in CORS
  * CVE-2026-7969: Integer overflow in Network
  * CVE-2026-7970: Use after free in TopChrome
  * CVE-2026-7971: Inappropriate implementation in ORB
  * CVE-2026-7972: Uninitialized Use in GPU
  * CVE-2026-7973: Integer overflow in Dawn
  * CVE-2026-7974: Use after free in Blink
  * CVE-2026-7975: Use after free in DevTools
  * CVE-2026-7976: Use after free in Views
  * CVE-2026-7977: Inappropriate implementation in Canvas
  * CVE-2026-7978: Inappropriate implementation in Companion
  * CVE-2026-7979: Inappropriate implementation in Media
  * CVE-2026-7980: Use after free in WebAudio
  * CVE-2026-7981: Out of bounds read in Codecs
  * CVE-2026-7982: Uninitialized Use in WebCodecs
  * CVE-2026-7983: Out of bounds read in Dawn
  * CVE-2026-7984: Use after free in ReadingMode
  * CVE-2026-7985: Use after free in GPU
  * CVE-2026-7986: Insufficient policy enforcement in Autofill
  * CVE-2026-7987: Use after free in WebRTC
  * CVE-2026-7988: Type Confusion in WebRTC
  * CVE-2026-7989: Insufficient data validation in DataTransfer
  * CVE-2026-7990: Insufficient validation of untrusted input in Updater
  * CVE-2026-7991: Use after free in UI
  * CVE-2026-7992: Insufficient validation of untrusted input in UI
  * CVE-2026-7993: Insufficient validation of untrusted input in Payments
  * CVE-2026-7994: Inappropriate implementation in Chromoting
  * CVE-2026-7995: Out of bounds read in AdFilter
  * CVE-2026-7996: Insufficient validation of untrusted input in SSL
  * CVE-2026-7997: Insufficient validation of untrusted input in Updater
  * CVE-2026-7998: Insufficient validation of untrusted input in Dialog
  * CVE-2026-7999: Inappropriate implementation in V8
  * CVE-2026-8000: Insufficient validation of untrusted input in ChromeDriver
  * CVE-2026-8001: Use after free in Printing
  * CVE-2026-8002: Use after free in Audio
  * CVE-2026-8003: Insufficient validation of untrusted input in TabGroups
  * CVE-2026-8004: Insufficient policy enforcement in DevTools
  * CVE-2026-8005: Insufficient validation of untrusted input in Cast
  * CVE-2026-8006: Insufficient policy enforcement in DevTools
  * CVE-2026-8007: Insufficient validation of untrusted input in Cast
  * CVE-2026-8008: Inappropriate implementation in DevTools
  * CVE-2026-8009: Inappropriate implementation in Cast
  * CVE-2026-8010: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8011: Insufficient policy enforcement in Search
  * CVE-2026-8012: Inappropriate implementation in MHTML
  * CVE-2026-8013: Insufficient validation of untrusted input in FedCM
  * CVE-2026-8014: Inappropriate implementation in Preload
  * CVE-2026-8015: Inappropriate implementation in Media
  * CVE-2026-8016: Use after free in WebRTC
  * CVE-2026-8017: Side-channel information leakage in Media
  * CVE-2026-8018: Insufficient policy enforcement in DevTools
  * CVE-2026-8019: Insufficient policy enforcement in WebApp
  * CVE-2026-8020: Uninitialized Use in GPU
  * CVE-2026-8021: Script injection in UI
  * CVE-2026-8022: Inappropriate implementation in MHTML
- Fix build failure in seccomp_bpf sandbox
  previously chromium-fix-sandbox-with-glibc-2.43.patch
  add chromium-148-sandbox-glibc-2.43.patch
- bump version in buildrequires for gn (0.20260331)
  (needs variable inputs added in March 2026)
- added patches:
  * chromium-148-revert_std_ranges_iota.patch
    (revert for llvm &lt; 20,
    error: no member named 'iota' in namespace 'std::ranges')
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (from upstream, add missing implementation for ppc)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
    (do not depend on intree binary of rustc)
- added patches:
  * chromium-148-only_address_sanitizer.patch
  (prevent undefined symbol __sanitizer_set_death_callback)
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
  (revert upstream change)
  * ppc-chromium-v8-3d60e0915e8a0caec994a400627f9dfa00e717d0.patch
    (obsolete, upstream)
- removed patches:
  * chromium-147-ffmpeg_includes.patch (upstream)
  * chromium-3bccbdead3efa7e91f7c9d4078106dedaed84fb8.patch (upstream)
- modified patches:
  * ppc-fedora-fix-different-data-layouts.patch
  * ppc-fedora-skia-vsx-instructions.patch
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch
  * chromium-146-ignore-for-ubsan.patch
  * chromium-f14702bb2b25c940cc95eb772110e715618bd069.patch
    adjust context for changes made in 7120cf7
  * chromium-146-value_or.patch (one more place in v8)
  * chromium-147-blink_renderer_need_ffmpeg.patch (new hunk added)
- keeplibs:
  added: third_party/gperf
  (needed by blink/renderer/core/css/parser/at_rule_descriptors.cc)
  change: third_party/harfbuzz-ng to third_party/harfbuzz
  drop: third_party/libaom/source/libaom/third_party/SVT-AV1
- force link to system gperf binary instead of hardcoded x86
  in tree copy</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1778500800">- added patches:
  * disable-ai.patch
    (do not attempt to download AI code behind the users back)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1778587200">- Chromium 148.0.7778.167 (boo#1265159)
  * CVE-2026-8509: Heap buffer overflow in WebML
  * CVE-2026-8510: Integer overflow in Skia
  * CVE-2026-8511: Use after free in UI
  * CVE-2026-8512: Use after free in FileSystem
  * CVE-2026-8513: Use after free in Input
  * CVE-2026-8514: Use after free in Aura
  * CVE-2026-8515: Use after free in HID
  * CVE-2026-8516: Insufficient validation of untrusted input in DataTransfer
  * CVE-2026-8517: Object lifecycle issue in WebShare
  * CVE-2026-8518: Use after free in Blink
  * CVE-2026-8519: Integer overflow in ANGLE
  * CVE-2026-8520: Race in Payments
  * CVE-2026-8521: Use after free in Tab Groups
  * CVE-2026-8522: Use after free in Downloads
  * CVE-2026-8523: Use after free in Mojo
  * CVE-2026-8558: Out of bounds write in Fonts
  * CVE-2026-8524: Out of bounds write in WebAudio
  * CVE-2026-8525: Heap buffer overflow in ANGLE
  * CVE-2026-8526: Out of bounds write in WebRTC
  * CVE-2026-8527: Insufficient validation of untrusted input in Downloads
  * CVE-2026-8528: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-8529: Heap buffer overflow in Codecs
  * CVE-2026-8530: Use after free in Network
  * CVE-2026-8531: Heap buffer overflow in WebML
  * CVE-2026-8532: Integer overflow in XML
  * CVE-2026-8533: Use after free in Accessibility
  * CVE-2026-8534: Integer overflow in GPU
  * CVE-2026-8535: Out of bounds read in Media
  * CVE-2026-8536: Insufficient validation of untrusted input in ReadingMode
  * CVE-2026-8537: Insufficient policy enforcement in ViewTransitions
  * CVE-2026-8538: Insufficient validation of untrusted input in GPU
  * CVE-2026-8539: Script injection in SanitizerAPI
  * CVE-2026-8540: Type Confusion in V8
  * CVE-2026-8541: Out of bounds read in UI
  * CVE-2026-8542: Use after free in Core
  * CVE-2026-8543: Out of bounds read in FileSystem
  * CVE-2026-8544: Use after free in Media
  * CVE-2026-8545: Object corruption in Compositing
  * CVE-2026-8546: Out of bounds read in GPU
  * CVE-2026-8547: Insufficient policy enforcement in Passwords
  * CVE-2026-8548: Out of bounds write in Media
  * CVE-2026-8549: Use after free in Media
  * CVE-2026-8550: Use after free in Google Lens
  * CVE-2026-8551: Use after free in Downloads
  * CVE-2026-8552: Heap buffer overflow in GPU
  * CVE-2026-8553: Use after free in GPU
  * CVE-2026-8554: Type Confusion in ANGLE
  * CVE-2026-8555: Use after free in GTK
  * CVE-2026-8556: Inappropriate implementation in ANGLE
  * CVE-2026-8557: Use after free in Accessibility
  * CVE-2026-8559: Integer overflow in Internationalization
  * CVE-2026-8560: Heap buffer overflow in SwiftShader
  * CVE-2026-8561: Incorrect security UI in Fullscreen
  * CVE-2026-8562: Side-channel information leakage in Navigation
  * CVE-2026-8563: Insufficient policy enforcement in IFrame Sandbox
  * CVE-2026-8564: Incorrect security UI in Downloads
  * CVE-2026-8565: Inappropriate implementation in Downloads
  * CVE-2026-8566: Insufficient policy enforcement in Payments
  * CVE-2026-8567: Integer overflow in ANGLE
  * CVE-2026-8568: Insufficient policy enforcement in AI
  * CVE-2026-8569: Out of bounds write in Codecs
  * CVE-2026-8570: Type Confusion in V8
  * CVE-2026-8571: Insufficient policy enforcement in GPU
  * CVE-2026-8572: Insufficient policy enforcement in Network
  * CVE-2026-8573: Integer overflow in Codecs
  * CVE-2026-8574: Use after free in Core
  * CVE-2026-8575: Use after free in UI
  * CVE-2026-8576: Inappropriate implementation in CORS
  * CVE-2026-8577: Integer overflow in Fonts
  * CVE-2026-8578: Out of bounds read in GPU
  * CVE-2026-8579: Insufficient validation of untrusted input in Skia
  * CVE-2026-8580: Use after free in Mojo
  * CVE-2026-8581: Use after free in GPU
  * CVE-2026-8582: Object lifecycle issue in Dawn
  * CVE-2026-8583: Insufficient policy enforcement in WebXR
  * CVE-2026-8584: Inappropriate implementation in Views
  * CVE-2026-8585: Inappropriate implementation in Media
  * CVE-2026-8586: Inappropriate implementation in Chromoting
  * CVE-2026-8587: Use after free in Extensions</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.com&gt;" date="1779105600">- add system-wide chromium.conf as in fedora package
  enable several features by default and disable ai features
  allow to override via setting CHROMIUM_USER_FLAGS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779192000">- Chromium 148.0.7778.178 (boo#1265848)
  * CVE-2026-9111: Use after free in WebRTC
  * CVE-2026-9110: Inappropriate implementation in UI
  * CVE-2026-9112: Use after free in GPU
  * CVE-2026-9113: Out of bounds read in GPU
  * CVE-2026-9114: Use after free in QUIC
  * CVE-2026-9115: Insufficient policy enforcement in Service Worker
  * CVE-2026-9116: Insufficient policy enforcement in ServiceWorker
  * CVE-2026-9117: Type Confusion in GFX
  * CVE-2026-9118: Use after free in XR
  * CVE-2026-9119: Heap buffer overflow in WebRTC
  * CVE-2026-9120: Use after free in WebRTC
  * CVE-2026-9126: Use after free in DOM
  * CVE-2026-9121: Out of bounds read in GPU
  * CVE-2026-9122: Out of bounds read in GPU
  * CVE-2026-9123: Heap buffer overflow in Chromecast
  * CVE-2026-9124: Insufficient validation of untrusted input in Input</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1779883200">- Chromium 148.0.7778.215 (boo#1266471):
  * CVE-2026-9872: Out of bounds write in GPU
  * CVE-2026-9873: Use after free in Network
  * CVE-2026-9874: Use after free in Dawn
  * CVE-2026-9875: Out of bounds read in WebGL
  * CVE-2026-9876: Use after free in WebGL
  * CVE-2026-9877: Use after free in ANGLE
  * CVE-2026-9878: Use after free in ANGLE
  * CVE-2026-9879: Out of bounds write in ANGLE
  * CVE-2026-9880: Insufficient validation of untrusted input in WebGL
  * CVE-2026-9881: Use after free in Bluetooth
  * CVE-2026-9882: Integer overflow in ANGLE
  * CVE-2026-9883: Use after free in Base
  * CVE-2026-9884: Use after free in Browser
  * CVE-2026-9885: Insufficient validation of untrusted input in UI
  * CVE-2026-9886: Use after free in Base
  * CVE-2026-9887: Use after free in Proxy
  * CVE-2026-9888: Use after free in WebView
  * CVE-2026-9889: Out of bounds read and write in Dawn
  * CVE-2026-9890: Use after free in XR
  * CVE-2026-9891: Use after free in Extensions
  * CVE-2026-9892: Inappropriate implementation in Skia
  * CVE-2026-9893: Use after free in Skia
  * CVE-2026-9894: Use after free in GPU
  * CVE-2026-9895: Out of bounds read in GPU
  * CVE-2026-9896: Out of bounds write in V8
  * CVE-2026-9897: Use after free in DOM
  * CVE-2026-9898: Insufficient validation of untrusted input in GPU
  * CVE-2026-9899: Use after free in ANGLE
  * CVE-2026-9900: Out of bounds write in ANGLE
  * CVE-2026-9901: Use after free in ANGLE
  * CVE-2026-9902: Use after free in Accessibility
  * CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation
  * CVE-2026-9904: Use after free in ANGLE
  * CVE-2026-9905: Use after free in Accessibility
  * CVE-2026-9906: Out of bounds write in GPU
  * CVE-2026-9907: Out of bounds read in Dawn
  * CVE-2026-9908: Out of bounds read in ANGLE
  * CVE-2026-9909: Integer overflow in Skia
  * CVE-2026-9910: Out of bounds memory access in ANGLE
  * CVE-2026-9911: Integer overflow in ANGLE
  * CVE-2026-9912: Inappropriate implementation in GPU
  * CVE-2026-9913: Inappropriate implementation in ANGLE
  * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9915: Heap buffer overflow in ANGLE
  * CVE-2026-9916: Out of bounds write in ANGLE
  * CVE-2026-9917: Uninitialized Use in WebGL
  * CVE-2026-9918: Inappropriate implementation in Tint
  * CVE-2026-9919: Out of bounds read in WebGL
  * CVE-2026-9920: Uninitialized Use in GPU
  * CVE-2026-9921: Uninitialized Use in WebGL
  * CVE-2026-9922: Use after free in GPU
  * CVE-2026-9923: Use after free in Skia
  * CVE-2026-9924: Heap buffer overflow in ANGLE
  * CVE-2026-9925: Use after free in ANGLE
  * CVE-2026-9926: Heap buffer overflow in ANGLE
  * CVE-2026-9927: Use after free in ANGLE
  * CVE-2026-9928: Out of bounds read in ANGLE
  * CVE-2026-9929: Inappropriate implementation in WebGL
  * CVE-2026-9930: Out of bounds write in Dawn
  * CVE-2026-9931: Use after free in GPU
  * CVE-2026-9932: Use after free in ANGLE
  * CVE-2026-9933: Use after free in Input
  * CVE-2026-9934: Use after free in Aura
  * CVE-2026-9935: Uninitialized Use in ANGLE
  * CVE-2026-9936: Use after free in GFX
  * CVE-2026-9937: Use after free in UI
  * CVE-2026-9938: Inappropriate implementation in V8
  * CVE-2026-9939: Heap buffer overflow in WebCodecs
  * CVE-2026-9940: Heap buffer overflow in ANGLE
  * CVE-2026-9941: Use after free in ANGLE
  * CVE-2026-9942: Uninitialized Use in ANGLE
  * CVE-2026-9943: Out of bounds read in WebGL
  * CVE-2026-9944: Uninitialized Use in ANGLE
  * CVE-2026-9945: Use after free in Media
  * CVE-2026-9946: Use after free in ANGLE
  * CVE-2026-9947: Use after free in XML
  * CVE-2026-9948: Use after free in Views
  * CVE-2026-9949: Use after free in Core
  * CVE-2026-9950: Insufficient validation of untrusted input in iOS
  * CVE-2026-9951: Use after free in UI
  * CVE-2026-9952: Use after free in WebAudio
  * CVE-2026-9953: Out of bounds read in ANGLE
  * CVE-2026-9954: Use after free in TabStrip
  * CVE-2026-9955: Inappropriate implementation in iOS
  * CVE-2026-9956: Use after free in iOS
  * CVE-2026-9957: Use after free in PDF
  * CVE-2026-9958: Use after free in PDFium
  * CVE-2026-9959: Race in WebRTC
  * CVE-2026-9960: Integer overflow in PDFium
  * CVE-2026-9961: Use after free in SurfaceCapture
  * CVE-2026-9962: Use after free in WebRTC
  * CVE-2026-9963: Uninitialized Use in iOS
  * CVE-2026-9964: Use after free in Bluetooth
  * CVE-2026-9965: Out of bounds write in ANGLE
  * CVE-2026-9966: Integer overflow in XML
  * CVE-2026-9967: Out of bounds write in GPU
  * CVE-2026-9968: Integer overflow in V8
  * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9970: Use after free in WebGL
  * CVE-2026-9971: Inappropriate implementation in iOS
  * CVE-2026-9972: Uninitialized Use in Gamepad
  * CVE-2026-9973: Out of bounds write in V8
  * CVE-2026-9974: Out of bounds write in GPU
  * CVE-2026-9975: Out of bounds read and write in ANGLE
  * CVE-2026-9976: Inappropriate implementation in USB
  * CVE-2026-9977: Insufficient validation of untrusted input in WebShare
  * CVE-2026-9978: Use after free in Glic
  * CVE-2026-9979: Insufficient validation of untrusted input in Input
  * CVE-2026-9980: Insufficient validation of untrusted input in Printing
  * CVE-2026-9981: Inappropriate implementation in Skia
  * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-9983: Type Confusion in Skia
  * CVE-2026-9984: Use after free in UI
  * CVE-2026-9985: Insufficient validation of untrusted input in Media
  * CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide
  * CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-9988: Use after free in WebRTC
  * CVE-2026-9989: Inappropriate implementation in Media
  * CVE-2026-9990: Use after free in WebAppInstalls
  * CVE-2026-9991: Inappropriate implementation in Media
  * CVE-2026-9992: Use after free in Network
  * CVE-2026-9993: Use after free in Views
  * CVE-2026-9994: Use after free in Core
  * CVE-2026-9995: Use after free in WebXR
  * CVE-2026-9996: Out of bounds read in WebRTC
  * CVE-2026-9997: Use after free in Input
  * CVE-2026-9998: Integer overflow in Skia
  * CVE-2026-9999: Inappropriate implementation in ANGLE
  * CVE-2026-10000: Use after free in Passwords
  * CVE-2026-10001: Use after free in PerformanceManager
  * CVE-2026-10002: Use after free in PDFium
  * CVE-2026-10003: Use after free in Views
  * CVE-2026-10004: Insufficient validation of untrusted input in Passwords
  * CVE-2026-10005: Use after free in WebAppInstalls
  * CVE-2026-10006: Race in WebAudio
  * CVE-2026-10007: Use after free in SVG
  * CVE-2026-10008: Uninitialized Use in GPU
  * CVE-2026-10009: Integer overflow in Skia
  * CVE-2026-10010: Inappropriate implementation in Input
  * CVE-2026-10011: Inappropriate implementation in Skia
  * CVE-2026-10012: Use after free in Skia
  * CVE-2026-10013: Use after free in WebCodecs
  * CVE-2026-10014: Use after free in WebMIDI
  * CVE-2026-10015: Integer overflow in WTF
  * CVE-2026-10016: Use after free in DOM
  * CVE-2026-10017: Out of bounds read in Headless
  * CVE-2026-10018: Integer overflow in ANGLE
  * CVE-2026-10019: Integer overflow in ANGLE
  * CVE-2026-10020: Insufficient validation of untrusted input in Skia
  * CVE-2026-10021: Insufficient validation of untrusted input in USB
  * CVE-2026-10022: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780056000">- Chromium 149.0.7827.53
- added patches:
  * chromium-149-profile_no_const.patch
    try to complete deconstifying the use of Profile*
    started in upstream 2ac4e0f090a26f86e9ffa4bc6c22743911b9be35
  * ppc-fedora-0003-third_party-libvpx-Add-ppc64-vsx-files.patch
  * ppc-libvpx-add-missing-prototype.patch
- removed patches:
  * chromium-141-glibc-2.42-SYS_SECCOMP.patch
  * fix_building_widevinecdm_with_chromium.patch
  * disable-ai.patch: known rebase conflicts on 149
- modified patches:
  * chromium-125-compiler.patch (context)
  * chromium-143-revert_rust_is_multiple_of.patch (drop one hunk)
  * chromium-146-value_or.patch (drop one hunk, add one hunk)
  * ppc-fedora-0002-third_party-libvpx-Remove-bad-ppc64-config.patch
    (regenerated)
  * ppc-fedora-0002-regenerate-xnn-buildgn.patch (regenerated)
  * chromium-146-ignore-for-ubsan.patch (redone)
  * chromium-148-no_dep_on_intree_rustc_binary.patch
  * ppc-fedora-0001-Implement-support-for-ppc64-on-Linux.patch
  * ppc-fedora-0001-Add-PPC64-support-for-boringssl.patch
  * ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
    (regenerated, disable code to regenerate at build for now)
- changed patch ranges, global patches up to 449,
  ppc patches from 450-599 now
- keeplibs:
  added: third_party/devtools-frontend/src/front_end/third_party/puppeteer/package/lib/esm/third_party/urlpattern-polyfill
- bump BR for gn to 0.20260429 for expand_directory
- fixes reading mode (boo#1265854)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1780315200">- Chromium 149 (149.0.7827.53) stable (boo#1267706):
  * CVE-2026-10881: Out of bounds read and write in ANGLE
  * CVE-2026-10882: Use after free in Network
  * CVE-2026-10883: Out of bounds write in ANGLE
  * CVE-2026-10884: Use after free in Chromecast
  * CVE-2026-10885: Use after free in Chrome for iOS
  * CVE-2026-10886: Use after free in FileSystem
  * CVE-2026-10887: Use after free in Chromoting
  * CVE-2026-10888: Use after free in Cast Streaming
  * CVE-2026-10889: Out of bounds read in ANGLE
  * CVE-2026-10890: Use after free in Cast
  * CVE-2026-10891: Use after free in GFX
  * CVE-2026-10892: Out of bounds write in GPU
  * CVE-2026-10893: Use after free in Chromoting
  * CVE-2026-10894: Use after free in Printing
  * CVE-2026-10895: Use after free in Ozone
  * CVE-2026-10896: Use after free in Chrome for iOS
  * CVE-2026-10897: Out of bounds write in GPU
  * CVE-2026-10898: Stack buffer overflow in GPU
  * CVE-2026-10899: Use after free in Ozone
  * CVE-2026-10900: Use after free in Passwords
  * CVE-2026-10901: Use after free in Passwords
  * CVE-2026-10902: Use after free in Ozone
  * CVE-2026-10903: Use after free in WebRTC
  * CVE-2026-10904: Inappropriate implementation in V8
  * CVE-2026-10905: Use after free in Network
  * CVE-2026-10906: Use after free in WebAuthentication
  * CVE-2026-10907: Out of bounds write in ANGLE
  * CVE-2026-10908: Use after free in FullScreen
  * CVE-2026-10909: Use after free in Dawn
  * CVE-2026-10910: Type Confusion in V8
  * CVE-2026-10911: Insufficient validation of untrusted input in Media
  * CVE-2026-10912: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10913: Use after free in ANGLE
  * CVE-2026-10914: Use after free in ANGLE
  * CVE-2026-10915: Use after free in Core
  * CVE-2026-10916: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10917: Insufficient validation of untrusted input in Media
  * CVE-2026-10918: Use after free in Viz
  * CVE-2026-10919: Use after free in ANGLE
  * CVE-2026-10920: Insufficient validation of untrusted input in WebShare
  * CVE-2026-10921: Integer overflow in Dawn
  * CVE-2026-10922: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10923: Use after free in WebAppInstalls
  * CVE-2026-10924: Integer overflow in Chromecast
  * CVE-2026-10925: Out of bounds write in Skia
  * CVE-2026-10926: Use after free in Cast
  * CVE-2026-10927: Out of bounds read in Dawn
  * CVE-2026-10928: Script injection in Headless
  * CVE-2026-10929: Heap buffer overflow in ANGLE
  * CVE-2026-10930: Out of bounds read in ANGLE
  * CVE-2026-10931: Use after free in FileSystem
  * CVE-2026-10932: Use after free in UI
  * CVE-2026-10933: Use after free in Audio
  * CVE-2026-10934: Use after free in Autofill
  * CVE-2026-10935: Inappropriate implementation in V8
  * CVE-2026-10936: Type Confusion in V8
  * CVE-2026-10937: Inappropriate implementation in Passwords
  * CVE-2026-10938: Insufficient validation of untrusted input in Input
  * CVE-2026-10939: Use after free in WebRTC
  * CVE-2026-10940: Race in Codecs
  * CVE-2026-10941: Out of bounds memory access in Skia
  * CVE-2026-10942: Insufficient validation of untrusted input in UI
  * CVE-2026-10943: Use after free in WebRTC
  * CVE-2026-10944: Insufficient policy enforcement in Autofill
  * CVE-2026-10945: Use after free in PDF
  * CVE-2026-10946: Heap buffer overflow in Media
  * CVE-2026-10947: Use after free in WebRTC
  * CVE-2026-10948: Use after free in WebRTC
  * CVE-2026-10949: Heap buffer overflow in Video
  * CVE-2026-10950: Insufficient policy enforcement in Autofill
  * CVE-2026-10951: Use after free in Autofill
  * CVE-2026-10952: Use after free in Chrome for iOS
  * CVE-2026-10953: Use after free in Core
  * CVE-2026-10954: Use after free in Actor
  * CVE-2026-10955: Type Confusion in ANGLE
  * CVE-2026-10956: Use after free in MimeHandlerView
  * CVE-2026-10957: Use after free in Glic
  * CVE-2026-10958: Use after free in Chrome for iOS
  * CVE-2026-10959: Use after free in Input
  * CVE-2026-10960: Uninitialized Use in Codecs
  * CVE-2026-10961: Use after free in Chrome for iOS
  * CVE-2026-10962: Type Confusion in Media
  * CVE-2026-10963: Integer overflow in V8
  * CVE-2026-10964: Integer overflow in V8
  * CVE-2026-10965: Integer overflow in DevTools
  * CVE-2026-10966: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10967: Use after free in SurfaceCapture
  * CVE-2026-10968: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10969: Insufficient validation of untrusted input in Extensions
  * CVE-2026-10970: Insufficient validation of untrusted input in InterestGroups
  * CVE-2026-10971: Insufficient validation of untrusted input in Printing
  * CVE-2026-10972: Use after free in Ozone
  * CVE-2026-10973: Uninitialized Use in Dawn
  * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-10975: Use after free in WebRTC
  * CVE-2026-10976: Uninitialized Use in Dawn
  * CVE-2026-10977: Uninitialized Use in Skia
  * CVE-2026-10978: Use after free in Chromoting
  * CVE-2026-10979: Out of bounds read in ANGLE
  * CVE-2026-10980: Insufficient validation of untrusted input in DevTools
  * CVE-2026-10981: Insufficient validation of untrusted input in Codecs
  * CVE-2026-10982: Use after free in WebXR
  * CVE-2026-10983: Insufficient validation of untrusted input in Dawn
  * CVE-2026-10984: Inappropriate implementation in Accessibility
  * CVE-2026-10985: Out of bounds read in Skia
  * CVE-2026-10986: Integer overflow in Media
  * CVE-2026-10987: Integer overflow in V8
  * CVE-2026-10988: Use after free in Views
  * CVE-2026-10989: Inappropriate implementation in V8
  * CVE-2026-10990: Use after free in Glic
  * CVE-2026-10991: Use after free in V8
  * CVE-2026-10992: Insufficient data validation in Animation
  * CVE-2026-10993: Heap buffer overflow in Skia
  * CVE-2026-10994: Uninitialized Use in ANGLE
  * CVE-2026-10995: Heap buffer overflow in TabStrip
  * CVE-2026-10996: Inappropriate implementation in Workers
  * CVE-2026-10997: Insufficient policy enforcement in Extensions
  * CVE-2026-10998: Out of bounds read in Media
  * CVE-2026-10999: Out of bounds memory access in ANGLE
  * CVE-2026-11000: Use after free in Fonts
  * CVE-2026-11001: Incorrect security UI in Payments
  * CVE-2026-11002: Use after free in Autofill
  * CVE-2026-11003: Use after free in WebRTC
  * CVE-2026-11004: Out of bounds read in ANGLE
  * CVE-2026-11005: Out of bounds read in ANGLE
  * CVE-2026-11006: Out of bounds read in Dawn
  * CVE-2026-11007: Insufficient validation of untrusted input in WebView
  * CVE-2026-11008: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11009: Use after free in USB
  * CVE-2026-11010: Use after free in WebShare
  * CVE-2026-11011: Insufficient policy enforcement in Password Manager
  * CVE-2026-11012: Use after free in Serial
  * CVE-2026-11013: Insufficient validation of untrusted input in Network
  * CVE-2026-11014: Insufficient policy enforcement in Extensions
  * CVE-2026-11015: Out of bounds read in WebGPU
  * CVE-2026-11016: Insufficient validation of untrusted input in Network
  * CVE-2026-11017: Inappropriate implementation in Link Preview
  * CVE-2026-11018: Insufficient policy enforcement in Actor
  * CVE-2026-11019: Inappropriate implementation in Payments
  * CVE-2026-11020: Inappropriate implementation in Extensions
  * CVE-2026-11021: Insufficient validation of untrusted input in GPU
  * CVE-2026-11022: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11023: Insufficient validation of untrusted input in WebAppInstalls
  * CVE-2026-11024: Stack buffer overflow in Skia
  * CVE-2026-11025: Insufficient policy enforcement in Navigation
  * CVE-2026-11026: Insufficient policy enforcement in Extensions
  * CVE-2026-11027: Insufficient validation of untrusted input in Glic
  * CVE-2026-11028: Use after free in Media
  * CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop
  * CVE-2026-11030: Use after free in Network
  * CVE-2026-11031: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11032: Insufficient data validation in Password Manager
  * CVE-2026-11033: Uninitialized Use in WebML
  * CVE-2026-11034: Insufficient validation of untrusted input in Tab Group Sync
  * CVE-2026-11035: Insufficient validation of untrusted input in Custom Tabs
  * CVE-2026-11036: Inappropriate implementation in DOM
  * CVE-2026-11037: Out of bounds write in Codecs
  * CVE-2026-11038: Insufficient validation of untrusted input in Subresource Integrity
  * CVE-2026-11039: Uninitialized Use in Skia
  * CVE-2026-11040: Use after free in ANGLE
  * CVE-2026-11041: Insufficient validation of untrusted input in Media
  * CVE-2026-11042: Use after free in Views
  * CVE-2026-11043: Out of bounds write in ANGLE
  * CVE-2026-11044: Integer overflow in ANGLE
  * CVE-2026-11045: Insufficient validation of untrusted input in GPU
  * CVE-2026-11046: Insufficient validation of untrusted input in Media
  * CVE-2026-11047: Insufficient validation of untrusted input in Base
  * CVE-2026-11048: Inappropriate implementation in Extensions
  * CVE-2026-11049: Use after free in Password Manager
  * CVE-2026-11050: Use after free in V8
  * CVE-2026-11051: Out of bounds read in ANGLE
  * CVE-2026-11052: Type Confusion in GPU
  * CVE-2026-11053: VULNERABILITY in WebRTC
  * CVE-2026-11054: Use after free in WebRTC
  * CVE-2026-11055: Use after free in ANGLE
  * CVE-2026-11056: Insufficient validation of untrusted input in SiteIsolation
  * CVE-2026-11057: Uninitialized Use in Skia
  * CVE-2026-11058: Integer overflow in CredentialProvider
  * CVE-2026-11059: Use after free in Blink
  * CVE-2026-11060: Use after free in Media
  * CVE-2026-11061: Out of bounds read in ANGLE
  * CVE-2026-11062: Insufficient policy enforcement in Extensions
  * CVE-2026-11063: Insufficient validation of untrusted input in WebNN
  * CVE-2026-11064: Uninitialized Use in GPU
  * CVE-2026-11065: Use after free in ANGLE
  * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11067: Uninitialized Use in Dawn
  * CVE-2026-11068: Use after free in WebSockets
  * CVE-2026-11069: Insufficient validation of untrusted input in Cast
  * CVE-2026-11070: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11071: Use after free in Base
  * CVE-2026-11072: Use after free in WebView
  * CVE-2026-11073: Use after free in WebGL
  * CVE-2026-11074: Use after free in WebRTC
  * CVE-2026-11075: Out of bounds read in V8
  * CVE-2026-11076: Type Confusion in CSS
  * CVE-2026-11077: Out of bounds read in Dawn
  * CVE-2026-11078: Insufficient validation of untrusted input in FileSystem
  * CVE-2026-11079: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11080: Use after free in WebView
  * CVE-2026-11081: Policy bypass in Canvas
  * CVE-2026-11082: Use after free in GPU
  * CVE-2026-11083: Inappropriate implementation in Password Manager
  * CVE-2026-11084: Inappropriate implementation in Password Manager
  * CVE-2026-11085: Integer overflow in GPU
  * CVE-2026-11086: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11087: Uninitialized Use in ANGLE
  * CVE-2026-11088: Integer overflow in ANGLE
  * CVE-2026-11089: Uninitialized Use in Media
  * CVE-2026-11090: Uninitialized Use in ANGLE
  * CVE-2026-11091: Inappropriate implementation in Dawn
  * CVE-2026-11092: Insufficient policy enforcement in DevTools
  * CVE-2026-11093: Insufficient validation of untrusted input in Printing
  * CVE-2026-11094: Use after free in Codecs
  * CVE-2026-11095: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11096: Out of bounds read in WebRTC
  * CVE-2026-11097: Inappropriate implementation in WebView
  * CVE-2026-11098: Insufficient validation of untrusted input in GPU
  * CVE-2026-11099: Vulnerability in Skia
  * CVE-2026-11100: Use after free in File Input
  * CVE-2026-11101: Uninitialized Use in Dawn
  * CVE-2026-11102: Inappropriate implementation in Isolated Web Apps
  * CVE-2026-11103: Inappropriate implementation in Installer
  * CVE-2026-11104: Uninitialized Use in ANGLE
  * CVE-2026-11105: Insufficient validation of untrusted input in WebUI
  * CVE-2026-11106: Inappropriate implementation in Media
  * CVE-2026-11107: Inappropriate implementation in Downloads
  * CVE-2026-11108: Inappropriate implementation in NFC
  * CVE-2026-11109: Uninitialized Use in ANGLE
  * CVE-2026-11110: Uninitialized Use in ANGLE
  * CVE-2026-11111: Out of bounds read in ANGLE
  * CVE-2026-11112: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE
  * CVE-2026-11114: Use after free in Device Trust
  * CVE-2026-11115: Use after free in Updater
  * CVE-2026-11116: Use after free in Chromoting
  * CVE-2026-11117: Use after free in Views
  * CVE-2026-11118: Use after free in WebRTC
  * CVE-2026-11119: Insufficient validation of untrusted input in GPU
  * CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting
  * CVE-2026-11121: Insufficient validation of untrusted input in Skia
  * CVE-2026-11122: Inappropriate implementation in Keyboard
  * CVE-2026-11123: Uninitialized Use in ANGLE
  * CVE-2026-11124: Heap buffer overflow in Skia
  * CVE-2026-11125: Use after free in Compositing
  * CVE-2026-11126: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11127: Inappropriate implementation in WebAPKs
  * CVE-2026-11128: Insufficient validation of untrusted input in Web Share
  * CVE-2026-11129: Inappropriate implementation in Extensions
  * CVE-2026-11130: Use after free in Media
  * CVE-2026-11131: Use after free in Autofill
  * CVE-2026-11132: Policy bypass in Paint
  * CVE-2026-11133: Insufficient policy enforcement in Paint
  * CVE-2026-11134: Insufficient data validation in Media
  * CVE-2026-11135: Insufficient policy enforcement in Autofill
  * CVE-2026-11136: Use after free in Canvas
  * CVE-2026-11137: Uninitialized Use in ANGLE
  * CVE-2026-11138: Uninitialized Use in ANGLE
  * CVE-2026-11139: Policy bypass in Paint
  * CVE-2026-11140: Insufficient validation of untrusted input in Chromecast
  * CVE-2026-11141: Uninitialized Use in Audio
  * CVE-2026-11142: Policy bypass in Paint
  * CVE-2026-11143: Heap buffer overflow in Extensions
  * CVE-2026-11144: Use after free in Media
  * CVE-2026-11145: Race in Geolocation
  * CVE-2026-11146: Insufficient validation of untrusted input in Chromoting
  * CVE-2026-11147: Use after free in WebML
  * CVE-2026-11148: Inappropriate implementation in Payments
  * CVE-2026-11149: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11150: Inappropriate implementation in XML
  * CVE-2026-11151: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11152: Object lifecycle issue in Dawn
  * CVE-2026-11153: Side-channel information leakage in Forms
  * CVE-2026-11154: Use after free in Dawn
  * CVE-2026-11155: Insufficient policy enforcement in CSS
  * CVE-2026-11156: Inappropriate implementation in CSS
  * CVE-2026-11157: Script injection in Accessibility
  * CVE-2026-11158: Insufficient validation of untrusted input in Downloads
  * CVE-2026-11159: Uninitialized Use in Skia
  * CVE-2026-11160: Out of bounds read in Input
  * CVE-2026-11161: Insufficient data validation in DataTransfer
  * CVE-2026-11162: Insufficient policy enforcement in CSS
  * CVE-2026-11163: Use after free in Messages
  * CVE-2026-11164: Use after free in Blink
  * CVE-2026-11165: Use after free in WebMIDI
  * CVE-2026-11166: Inappropriate implementation in SVG
  * CVE-2026-11167: Inappropriate implementation in WebView
  * CVE-2026-11168: Insufficient policy enforcement in Extensions
  * CVE-2026-11169: Inappropriate implementation in XML
  * CVE-2026-11170: Inappropriate implementation in Chromoting
  * CVE-2026-11171: Integer overflow in Blink
  * CVE-2026-11172: Incorrect security UI in Contact Picker
  * CVE-2026-11173: Out of bounds write in V8
  * CVE-2026-11174: Insufficient policy enforcement in Site Isolation
  * CVE-2026-11175: Incorrect security UI in Messages
  * CVE-2026-11176: Inappropriate implementation in Media
  * CVE-2026-11177: Use after free in Omnibox
  * CVE-2026-11178: Policy bypass in WebView
  * CVE-2026-11179: Inappropriate implementation in ORB
  * CVE-2026-11180: Policy bypass in SVG
  * CVE-2026-11181: Inappropriate implementation in Media Session
  * CVE-2026-11182: Inappropriate implementation in SVG
  * CVE-2026-11183: Out of bounds read in GWP-ASan
  * CVE-2026-11184: Insufficient policy enforcement in Actor
  * CVE-2026-11185: Use after free in V8
  * CVE-2026-11186: Inappropriate implementation in CSS
  * CVE-2026-11187: Insufficient policy enforcement in Glic
  * CVE-2026-11188: Use after free in USB
  * CVE-2026-11189: Insufficient validation of untrusted input in DevTools
  * CVE-2026-11190: Insufficient policy enforcement in Extensions
  * CVE-2026-11191: Out of bounds memory access in ANGLE
  * CVE-2026-11192: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11193: Insufficient policy enforcement in Password Manager
  * CVE-2026-11194: Inappropriate implementation in Network
  * CVE-2026-11195: Inappropriate implementation in MHTML
  * CVE-2026-11196: Type Confusion in XML
  * CVE-2026-11197: Insufficient policy enforcement in Workers
  * CVE-2026-11198: Insufficient validation of untrusted input in Codecs
  * CVE-2026-11199: Insufficient validation of untrusted input in WebRTC
  * CVE-2026-11200: Inappropriate implementation in WebRTC
  * CVE-2026-11201: Use after free in ServiceWorker
  * CVE-2026-11202: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11203: Policy bypass in GPU
  * CVE-2026-11204: Inappropriate implementation in Signin
  * CVE-2026-11205: Insufficient validation of untrusted input in Chrome for iOS
  * CVE-2026-11206: Policy bypass in ServiceWorker
  * CVE-2026-11207: Insufficient validation of untrusted input in Autofill
  * CVE-2026-11208: Use after free in Codecs
  * CVE-2026-11209: Insufficient policy enforcement in Passwords
  * CVE-2026-11210: Insufficient policy enforcement in Safe Browsing
  * CVE-2026-11211: Integer overflow in V8
  * CVE-2026-11212: Insufficient policy enforcement in DevTools
  * CVE-2026-11213: Insufficient validation of untrusted input in Reading Mode
  * CVE-2026-11214: Inappropriate implementation in Chrome for iOS
  * CVE-2026-11215: Inappropriate implementation in Cronet
  * CVE-2026-11216: Incorrect security UI in File Input
  * CVE-2026-11217: Insufficient policy enforcement in Fenced Frames
  * CVE-2026-11218: Inappropriate implementation in PlatformIntegration
  * CVE-2026-11219: Insufficient data validation in Navigation
  * CVE-2026-11220: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11221: Insufficient validation of untrusted input in PointerLock
  * CVE-2026-11222: Incorrect security UI in Tab Strip
  * CVE-2026-11223: Insufficient validation of untrusted input in Network
  * CVE-2026-11224: Use after free in Chromoting
  * CVE-2026-11225: Incorrect security UI in WebUI
  * CVE-2026-11226: Insufficient policy enforcement in PreviewTab
  * CVE-2026-11227: Incorrect security UI in Tab Hover Cards
  * CVE-2026-11228: Incorrect security UI in File Input
  * CVE-2026-11229: Insufficient policy enforcement in Enterprise
  * CVE-2026-11230: Use after free in Extensions
  * CVE-2026-11231: Inappropriate implementation in Safe Browsing
  * CVE-2026-11232: Inappropriate implementation in TabGroups
  * CVE-2026-11233: Insufficient validation of untrusted input in FoldableAPIs
  * CVE-2026-11234: Insufficient policy enforcement in FoldableAPIs
  * CVE-2026-11235: Insufficient validation of untrusted input in Compositing
  * CVE-2026-11236: Insufficient policy enforcement in Web Bluetooth
  * CVE-2026-11237: Insufficient validation of untrusted input in Media
  * CVE-2026-11238: Inappropriate implementation in DevTools
  * CVE-2026-11239: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11240: Insufficient validation of untrusted input in Loader
  * CVE-2026-11241: Insufficient validation of untrusted input in Cast
  * CVE-2026-11242: Insufficient validation of untrusted input in Plugins
  * CVE-2026-11243: Incorrect security UI in Downloads
  * CVE-2026-11244: Insufficient validation of untrusted input in WebAuthentication
  * CVE-2026-11245: Inappropriate implementation in Payments
  * CVE-2026-11246: Insufficient validation of untrusted input in IndexedDB
  * CVE-2026-11247: Insufficient policy enforcement in CustomTabs
  * CVE-2026-11248: Policy bypass in Google Lens
  * CVE-2026-11249: Use after free in Network
  * CVE-2026-11250: Inappropriate implementation in DevTools
  * CVE-2026-11251: Insufficient validation of untrusted input in Password Manager
  * CVE-2026-11252: Policy bypass in Content Settings
  * CVE-2026-11253: Race in Permissions
  * CVE-2026-11254: Inappropriate implementation in Permissions
  * CVE-2026-11255: Insufficient validation of untrusted input in Storage Access API
  * CVE-2026-11256: Out of bounds read in GPU
  * CVE-2026-11257: Inappropriate implementation in Browser
  * CVE-2026-11258: Inappropriate implementation in File System Access
  * CVE-2026-11259: Insufficient validation of untrusted input in Cast
  * CVE-2026-11260: Policy bypass in Permissions
  * CVE-2026-11261: Insufficient validation of untrusted input in PDF
  * CVE-2026-11262: Use after free in TabStrip
  * CVE-2026-11263: Insufficient policy enforcement in WebAuthentication
  * CVE-2026-11264: Policy bypass in Content Security Policy
  * CVE-2026-11265: Insufficient data validation in Autofill
  * CVE-2026-11266: Policy bypass in SafeBrowsing
  * CVE-2026-11267: Insufficient policy enforcement in Extensions
  * CVE-2026-11268: Uninitialized Use in ANGLE
  * CVE-2026-11269: Inappropriate implementation in Extensions
  * CVE-2026-11270: Inappropriate implementation in UI
  * CVE-2026-11271: Incorrect security UI in Passwords
  * CVE-2026-11272: Insufficient validation of untrusted input in Reading List
  * CVE-2026-11273: Insufficient validation of untrusted input in Omnibox
  * CVE-2026-11274: Inappropriate implementation in DOM Distiller
  * CVE-2026-11275: Insufficient policy enforcement in Page Info
  * CVE-2026-11276: Inappropriate implementation in Cast
  * CVE-2026-11277: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11278: Inappropriate implementation in CustomTabs
  * CVE-2026-11279: Out of bounds read in DevTools
  * CVE-2026-11280: Insufficient validation of untrusted input in Signin
  * CVE-2026-11281: Integer overflow in Chromoting
  * CVE-2026-11282: Policy bypass in Sandbox
  * CVE-2026-11283: Policy bypass in Shortcuts
  * CVE-2026-11284: Side-channel information leakage in PerformanceAPIs
  * CVE-2026-11285: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11286: Insufficient validation of untrusted input in Wallet
  * CVE-2026-11287: Insufficient validation of untrusted input in Navigation
  * CVE-2026-11288: Policy bypass in CSS
  * CVE-2026-11289: Side-channel information leakage in Paint
  * CVE-2026-11290: Integer overflow in WebView
  * CVE-2026-11291: Policy bypass in Android Autofill
  * CVE-2026-11292: Policy bypass in Blink
  * CVE-2026-11293: Use after free in Input
  * CVE-2026-11294: Inappropriate implementation in Passwords
  * CVE-2026-11295: Inappropriate implementation in WebView
  * CVE-2026-11296: Inappropriate implementation in ImageCapture
  * CVE-2026-11297: Insufficient validation of untrusted input in Reader Mode
  * CVE-2026-11298: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11299: Out of bounds read in Fonts
  * CVE-2026-11300: Inappropriate implementation in Permissions
  * CVE-2026-11301: Out of bounds read in LiveCaption
  * CVE-2026-11302: Insufficient policy enforcement in Chrome for iOS
  * CVE-2026-11303: Use after free in PDFium
  * CVE-2026-11304: Use after free in PDFium
  * CVE-2026-11305: Use after free in PDFium
  * CVE-2026-11306: Use after free in PDFium
  * CVE-2026-11307: Use after free in PDFium
  * CVE-2026-11308: Inappropriate implementation in Extensions
  * CVE-2026-11309: Insufficient policy enforcement in History</changelog>
</package>
<package pkgid="d89462ebe5716b495b61dba148c39e2a987018d1283d5491c338d489026d88715766087b124839e1b31af8ed54b293fb34060d621d6d28efd8d2831912da4d77" name="chronic" arch="noarch">
  <version epoch="0" ver="0.68" rel="bp160.1.13"/>
  <changelog author="aloisio@gmx.com" date="1495454400">- Update to version 0.61
  * chronic: Flush output more often to better preserve stdout,err
    ordering. Thanks, Miroslav Šustek</changelog>
  <changelog author="aloisio@gmx.com" date="1519819200">- Update to version 0.62
  * ts: Add -m option to use monotonic clock.
    Thanks, Ben Leinweber
  * ts: Added %.T format like %T but with hi-res.
    Thanks, Matt Koscica
  * pee: Ignore SIGPIPE and write errors caused by the command
    not consuming all its input. Closes: #697052
    Thanks, Ole Jørgen Brønner
  * chronic: document return value semantics of -e option.
    Closes: #867167
    Thanks, Daniel Shahaf
  * vidir: reword man page to more explicit mention 'file' args.
    Closes: #885221
    Thanks, Daniel Shahaf
  * pee: Don't buffer input, bringing behavior into line with tee.
    Thanks, Sauerbeck Tilman</changelog>
  <changelog author="aloisio@gmx.com" date="1524571200">- Added missing runtime requirement for chronic</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1555675200">- Update to version 0.63
  * vipe: Clean up temp file even when it exits with an error.
    Thanks, Stig Palmquist.
  * ts: Fix ts -m %.s to not output negative microseconds.
    Thanks, Dima Kogan
  * sponge: Fix bug in -a mode that doubled original content of
    file when the temp file is located on a different filesystem.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1602331200">- update to 0.64:
  * parallel: fix typo in usage message.
  * Makefile: Propagate compiler and linker flags when building is_utf8.
  * ts: Fix parsing of ISO-8601 dates.
  * parallel: Allow compiling with uClibc-ng, which does not have getloadavg.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612785600">- update to 0.65:
  * vipe: Added --suffix option.
  * ifdata: fail when -ph is given but no hwaddr is available</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1632916800">- update to 0.66:
  * vipe: When no output is piped into vipe, and stdin is connected to
    the terminal, don't read from stdin before opening the editor.
    This allows eg: vipe | command
  * chronic: With -v, flush stdout after printing "STDERR" header.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653825600">- update to 0.67:
  * README: Formalize that I am not adding new tools to moreutils,
    and have not for a long while. This package needs someone new to
    take over editorial responsibility.
  * Makefile: Install man pages without executable bit.
    Thanks, meator
  * ifne.1: Improve example that pipes to mail to avoid escape
    sequences.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1661515200">- Do not strip debuginfo
  * makefile.patch
- Do not make parallel require the main package, the utilities are standalone.
- Split the programs with additional requirements (Perl) to a separate subpackage.</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1701259200">- New upstream release 0.68
  * popen: Use pclose, fixing compile warning.
  * vidir: Zero pad line numbers to work better when used with a small tab size such as 2.</changelog>
</package>
<package pkgid="dfcb297cd4a6b4b442f73f4c16f5d4ef69cf6708d2e82127b13b567c5e822d320786728b39cf2c2e149b0ca195b51f842edbf3eeb98994393e57a93917467082" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.6.1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="fvogt@suse.com" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
</package>
<package pkgid="19e93d4e88647baa04d72aaab0242f84bb3c534031ef298728989f9e0aa984c8fabbcc02933e9b9c7714e3d1c7688ee961ef41ccc3b4df448000f85b0d0b6837" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.8" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="bb492f2340a1b1cd62e4e701abbd513a114f7fc7a3d60bc36c08961080ca7c773a00d9f26346cafed8c4289f8faf041de71df72259f6ee2f917cf0eb4f35cdb4" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="4.6.1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="fvogt@suse.com" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
</package>
<package pkgid="47fcd68455d61d76e684af76a3b709eb1746bd23505cad519ed54761571cd5082fef76c0fa8ff422576c5bd538be218fba804fec4036040085f8a7288f531a11" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="4.8" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="d1d6297dc5503969fe37d4aac3faabb9f6f26b9de3d78da4b0d50982235b4e39b111386507dc958111eca197a61b34633c6d15dee2a89911204b61181a109e72" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="4.6.1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="fvogt@suse.com" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
</package>
<package pkgid="e52a17443fcd741b7449463e2e37a51d5a1288e1ec7116673b06b2b6f9f1c50731901644ed402010bd70b9bc052bed215455742a76a8bb06f9821ed814f4c2d0" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="4.8" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="4100f2ae94bac8b591684ece90993b254885a24d43f28195ead84a36fd41e34e2e2b488ab6334c6973af50c8cb20748969e0371a7ab366698b3417c647634451" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.6.1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1691582400">- Update to 4.4:
  * Add support for AES-GCM-SIV with Nettle &gt;= 3.9 to shorten NTS
    cookies to avoid some length-specific blocking of NTP on
    Internet.
  * Add support for multiple refclocks using extpps option on one
    PHC.
  * Add maxpoll option to hwtimestamp directive to improve PHC
    tracking with low packet rates
  * Add hwtstimeout directive to configure timeout for late
    timestamps.
  * Handle late hardware transmit timestamps of NTP requests on
    all sockets.
  * Handle mismatched 32/64-bit time_t in SOCK refclock samples
  * Improve source replacement
  * Log important changes made by command requests (chronyc)
  * Refresh address of NTP sources periodically
  * Set DSCP for IPv6 packets
  * Shorten NTS-KE retry interval when network is down
  * Update seccomp filter for musl
  * Warn if loading keys from file with unexpected permissions
  * Warn if source selection fails or falseticker is detected
  * Add selectopts command to modify source-specific selection
    options.
  * Add timestamp sources to serverstats report and make its fields
    64-bit.
  * Add -e option to chronyc to indicate end of response
- Update clknetsim to snapshot ef2a7a9.</changelog>
  <changelog author="fvogt@suse.com" date="1693569600">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1705320000">- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
</package>
<package pkgid="254d3a20482ce6ee02e0b1b0408e00151dd344a04f43cdd44bcd6b5c04fea0df724285fd7533fee7b0cfc2eed1db53333f2af5281cfc71877d8a90f376ccee8f" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.8" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Update clknetsim to snapshot 0a11a35.</changelog>
  <changelog author="max@suse.com" date="1717502400">- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1722427200">- Update clknetsim to snapshot 633a0be: fix missing stat/fstat with
  latest glibc.</changelog>
  <changelog author="max@suse.com" date="1726660800">- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts
  * Obsoletes chrony-124-tai.patch
- The project's new home is https://chrony-project.org/ .</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="max@suse.com" date="1738756800">- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.</changelog>
  <changelog author="max@suse.com" date="1751457600">- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads
- Update clknetsim to snapshot 530d1a5.</changelog>
  <changelog author="max@suse.com" date="1754049600">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Update clknetsim to snapshot a2eb0b25.</changelog>
  <changelog author="max@suse.com" date="1757073600">- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates
  * Obsoletes chrony-unix-socket.patch
  * Obsoletes chrony-remove-chmod.patch</changelog>
</package>
<package pkgid="5fbf0095b8c5c7a2c052d1e16eabcd351b0b2416bd69847f01bff276de4bd88effa757941ad917754543543952fb1b7c67f989e8b76d5758e8cb94ea42f3c01f" name="chrpath" arch="x86_64">
  <version epoch="0" ver="0.17" rel="160000.2.2"/>
  <changelog author="jw@suse.de" date="1138881600">- initial version 0.13
  used for fixing MainActor-5</changelog>
  <changelog author="schwab@suse.de" date="1153396800">- Don't call autoconf.</changelog>
  <changelog author="dmueller@suse.de" date="1161950400">- don't build as root</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc, %configure macros</changelog>
  <changelog author="i@marguerite.su" date="1399204800">- update version 0.16
  * Fixed all minor bugs discovered by Coverity.
  * Updated config.sub and config.guess from the GNU project.
  * Mention new project mailing list in the documentation.</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Shorten summary a bit
- Do not build tests
  * they are not executed during build
  * they fail anyway
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1584446400">- Modernise spec file</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715515200">- Update to version 0.17:
  * Moved project to Codeberg
  * Fix lookup of string table
  * End stderr output with a newline</changelog>
</package>
<package pkgid="2dba9c0ecd06333aef83030cdb392d0c0e182744d92a081b3284e5e155a084240e8fa3320d87439501e4834cef9bca685a25f3ddd63cf6c01ea78a160d612f16" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="7.4" rel="160000.2.2"/>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
  <changelog author="scabrero@suse.de" date="1738065600">- Require a cifs.idmap plugin, suggest wb-cifs-idmap-plugin as
  default (idmapwb.so)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1743595200">- Update cifs-utils to 7.3
  * Fix regression in mount.cifs with guest mount option
  * resolve_host.c: Initialize site_name
  * cldap_ping: Fix socket fd leak
  * getcifsacl: fix return code check for getting full ACL
  * cifs-utils: add documentation for upcall_target
  * cifs-utils: avoid using mktemp when updating mtab
  * cldap_ping.c: add missing &lt;sys/types.h&gt; include
  * configure.ac: libtalloc is now mandatory
  * cifscreds: allow user to set the key's timeout
  * cifscreds: use continue instead of break when matching commands
  * Do not pass passwords with sec=none and sec=krb5
  * docs: add esize description
  * docs: add max_cached_dirs description
  * docs: update actimeo description
  * Fix compiler warnings in mount.cifs
  * CIFS.upcall to accomodate new namespace mount opt
  * cifs-utils: Skip TGT check if valid service ticket is already available
  * use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions
  * cifs-utils: support and document password2 mount option
  * smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Update cifs-utils to 7.4
  * mount.cifs: retry mount on -EINPROGRESS
  * cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  * cifs.upcall: fix memory leaks in check_service_ticket_exits()
  * cifs-utils: bump version to 7.4
  * getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
  * cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="3b91a5fcafd96dec4adf43b5c1f19940dfe1323b251bf3d82b7f6a24e3e05bf9fe6212a9b33e38762b988aa5c8b9eb5b9a12c89f6896b56ab8aa20b6f6035ada" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="7.4" rel="160000.2.2"/>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call.
  * mount.cifs: fix verbose messages on option parsing</changelog>
  <changelog author="palcantara@suse.de" date="1666008000">- Update cifs-utils to 7.0
  * cifs-utils: don't return uninitialized value in cifs_gss_get_req
  * cifs-utils: make GSSAPI usage compatible with Heimdal
  * cifs-utils: work around missing krb5_free_string in Heimdal
  * fix warnings for -Waddress-of-packed-member
  * setcifsacl: fix memory allocation for struct cifs_ace
  * setcifsacl: fix comparison of actions reported by covscan
  * cifs.upcall: remove unused variable and fix syslog message
  * cifs.upcall: Switch to RFC principal type naming
  * man-pages: Update cifs.upcall to mention GSS_USE_PROXY
  * cifs.upcall: fix compiler warning
  * cifs.upcall: add gssproxy support
  * remove cifs-utils-6.15.tar.bz2
  * remove cifs-utils-6.15.tar.bz2.asc
  * add cifs-utils-7.0.tar.bz2
  * add cifs-utils-7.0.tar.bz2.asc</changelog>
  <changelog author="lnussel@suse.com" date="1672833600">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mmachova@suse.com" date="1718280000">- remove dependency on /usr/bin/python3 (bsc#1212476)</changelog>
  <changelog author="ematsumiya@suse.com" date="1728648000">- Update to version 7.1:
  * cifs: update documentation for sloppy mount option
  * docs: add closetimeo description
  * docs: add compress description
  * checkopts: update it to work with latest kernel version
  * cifs-utils: add documentation for multichannel and max_channels
  * cifs-utils: smbinfo: add gettconinfo command
  * Implement CLDAP Ping to find the closest site
  * mount.cifs.rst: update section about xattr/acl support
  * mount.cifs.rst: add missing reference for sssd
  * getcifsacl, setcifsacl: add missing &lt;endian.h&gt; include for le32toh
  * getcifsacl, setcifsacl: add missing &lt;linux/limits.h&gt; include for XATTR_SIZE_MAX
  * cifs-utils: Make automake treat /sbin as exec, not data
  * pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
  * cifs.upcall: fix UAF in get_cachename_from_process_env()
  * cifs-utils: add documentation for acregmax and acdirmax
  * setcifsacl: Fix uninitialized value.
  * Use explicit "#!/usr/bin/python3"</changelog>
  <changelog author="scabrero@suse.de" date="1737460800">- Migrate away from update-alternatives, replaced by package
  conflicts (bsc#1235788);</changelog>
  <changelog author="scabrero@suse.de" date="1738065600">- Require a cifs.idmap plugin, suggest wb-cifs-idmap-plugin as
  default (idmapwb.so)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1743595200">- Update cifs-utils to 7.3
  * Fix regression in mount.cifs with guest mount option
  * resolve_host.c: Initialize site_name
  * cldap_ping: Fix socket fd leak
  * getcifsacl: fix return code check for getting full ACL
  * cifs-utils: add documentation for upcall_target
  * cifs-utils: avoid using mktemp when updating mtab
  * cldap_ping.c: add missing &lt;sys/types.h&gt; include
  * configure.ac: libtalloc is now mandatory
  * cifscreds: allow user to set the key's timeout
  * cifscreds: use continue instead of break when matching commands
  * Do not pass passwords with sec=none and sec=krb5
  * docs: add esize description
  * docs: add max_cached_dirs description
  * docs: update actimeo description
  * Fix compiler warnings in mount.cifs
  * CIFS.upcall to accomodate new namespace mount opt
  * cifs-utils: Skip TGT check if valid service ticket is already available
  * use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions
  * cifs-utils: support and document password2 mount option
  * smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Update cifs-utils to 7.4
  * mount.cifs: retry mount on -EINPROGRESS
  * cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
  * cifs.upcall: fix memory leaks in check_service_ticket_exits()
  * cifs-utils: bump version to 7.4
  * getcifsacl, setcifsacl: use &lt;libgen.h&gt; for basename
  * cifscreds: use &lt;libgen.h&gt; for basename</changelog>
</package>
<package pkgid="dc8655ea8719b3c52feaaa19baaabab8165a5335c3c0772e8731a783191bda1d4db72eb1f0465be9744e88b77ebb66869ca328f4768a5c648209815b5de0c56b" name="cinnamon" arch="x86_64">
  <version epoch="0" ver="6.4.6" rel="lp160.3.1"/>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1683115200">- Update to version 5.6.8.
  * New upstream bugfix version 5.6.8 (Closes: deb#1032912)</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1686225600">- Update to version 5.8.1.
  * Revert "l10n: Generate module files"
  * Update generate_cs_module_desktop_files.py script
  * l10n: Generate module files
  * l10n: Generate additional files</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1689422400">- Building on Dead Mozay's packaging work; update to version 5.8.4.
  * theme: Don't force too large a minimum size of PopupSliderMenuItem.
  * cs_gestures.py: Cleaning up Python
  * gestures: Fix EXEC actions not completing.
  * sound applet: Fix alignment of icons in 'Launch player' submenu when a player is active.
  * To fix the error of referencing a non-existent variable.
  * popupMenu: restore minimum slider width, override sound slider only
  * grouped window list: fix drag and move app icon on the app list
  * cinnamon-close-dialog: Fix dialog text
  * Align labels in rows in the preffered applications to center
  * cinnamon ui: improve overview animation
  * color-scheme follow simplified themes
  * l10n: Update POT</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696507200">- Drop cinnamon-meson-0.61.patch: Fixed upstream.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1701432000">- Update to version 6.0.0:
  * settings: Replace PIL.Image.ANTIALIAS with PIL.Image.LANCZOS.
  * gestures: Adjust to amplified max volume, not normal.
  * cs_themes: Finish removing tinycss support.
  * cs_themes.py: Fix navigation/stack issue.
  * cinnamon.css: Center text in .applet-box
  * lightbox: Reduce color banding with dithering...
  * sound@cinnamon.org: Word wrap for artist and title labels
  * bug report: Mention crashes.
  * Fix thumbnails not appearing for windows created while menu is open
  * cinnamon-menu-editor: Fix window type to enable window resizing.
  * keybindings: Make Above_Tab displayable.
  * Looking glass: Fix log text colors.
  * gesturesManager.js: Ignore gestures when the screensaver is active.
  * Updated write-applet.xml for Cinnamon 4.6 to 5.8+
  * Update issue template with a link to open and closed issues for convenience.
  * window-list/gwl: Simplify window focus updates.
  * applet.js: Improve code comments.
  * gwl: Track the getThumbnail timeout source id.
  * Show all batteries as "primary" batteries, removing set_device_battery_additional()
  * Menu applet: Fix bug where menu is partly behind panel
  * gestures: Remove device detection.
  * Fix issue #11810
  * Emphasize checking for duplicate existing issues in the bug report form.
  * Updated cs_info module
  * sound applet: Add telegram-desktop to players without seek support
  * Fix various typos
  * js: Use string instead of regexp
  * cinnamon-subprocess-wrapper: Handle invalid utf8, fix error message.
  * Replace misc/util.js polyfills with js natives...
  * Replace util.js polyfills with JS natives...
  * state.js: replace polyfills with js natives..
  * Fix meson.build deprecations up to 0.56.0
  * cs_backgrounds: Recognize .avif files.
  * misc: Use locale.getlocale() instead of locale.getdefaultlocale().
  * calendar eventView.js: Try to cancel scroll-to-row callback when set_events() is called.
  * cs_info.py: Don't freeze when 'Copy to clipboard' is clicked.
  * Fixed calculate a sidePage height when it comes as standalone
  * Update cinnamon-settings.py
  * Require soup 3.0.
  * Ensure settings window expands to fit toolbar
  * Adds a shift-middle click action to the sound applet.
  * Adds option to always show the input switch in the sound applet. (Closes #11232)
  * wayland: Add session files
  * Clean up build deps and some unused imports
  * wayland: Don't use Gtk/Gdk anywhere in core/startup code
  * st-texture-cache: Make our own GtkIconTheme instead of trying to get it from a GdkScreen (which won't be able to exist until Cinnamon completes startup)
  * Disable/avoid things that don't currently work in Wayland
  * Extensions: Block certain x11-only xlets from trying to load
  * dbus: Add monitor labeler
  * Restore system background
  * Log the backend at Cinnamon start, add a row for it in cs_info.py
  * cs_themes: Don't use a GtkPlug/Socket for overview-scrollbar previews
  * cs_display: Add scale-monitor-framebuffer for Wayland fractional scaling
  * Remove some leftovers from main.c, adjust a string in cs_themes.py
  * power applet: Wait for csd-power's dbus presence before trying to connect to it
  * cinnamon-launcher: Launch cinnamon immediately under Wayland
  * session: Use a separate desktop file for Wayland sessions.
  * cinnamon-settings: Suppress/hide some x11-only elements.
  * modalDialog.js: Fix sync call in x11.
  * melange: convert to GApplication, cleanup, fix launch-as-inspector mode.
  * lookingGlass.js: Initialize melange interface at startup.
  * Add .git-blame-ignore-revs for commits
  * Adding an option for notification screen selection
  * Fix whitespace
  * Fix GLib exception:
  * meson: Re-add dbus dependency
  * Gestures: Allow the user to specify when an action is triggered.
  * Gestures: Add a desktop zoom action.
  * Rename Wayland session
  * cinnamon-launcher: Remove wayland handling.
  * cinnamon-global.c: Restore cinnamon_global_set_pointer.
  * Fix xlet-settings TreeListWidget's handling of columns with option lists
  * Use menu for window list hover tooltip choice
  * Fix the power applet battery status when the seconds var is 3600
  * Spices.py: Fix desklet reload after update when there are multiple instances
  * gesturesManager.js: Fix a couple small issues
  * Add Actions module
  * debian/control: Update soup version.
  * Remove .settings folder
  * Added menu details option
  * menu applet: Add some safety to the right-click properties item.
  * screenshot service: Add color picker support.
  * add xdg-portal conf
  * l10n: Update POT</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1723377600">- update to 6.2.9:
  * cs_default.py: Disable mousewheel selection in the default app comboboxes.
- update to 6.2.8:
  * x-cinnamon-portals.conf: Add gnome-keyring as the Secret provider.
- update to 6.2.7:
  * Dns.js: Revert bug workaround
- update to 6.2.6:
  * cinnamon-settings-users: Don't use w -hs
  * Set clip_to_allocation to true for menu and notification applets
- update to 6.2.5:
  * ExtensionCore.py - Adds update subject
  * Revert "cs_themes: Restrain picture button heights."
- update to 6.2.4:
  * windowMenu.js: Fix warning flood when moving a window to another workspace.
  * cs_themes: Restrain picture button heights.
  * user applet: Fix updating the avatar icon size when the panel height changes.
  * cs-info: Better parsing of the graphics card lspci output
- update to 6.2.3:
  * cinnamon-settings.py: Use the nvidia icon for nvidia-settings.
  * ExtensionCore.py: Check for display names in translations
  * cs_themes: Frame App and Cinnamon themes, move user themes to the top.
  * xapp status: Make sure the recording icon size is set, disconnect the recording signal when the applet is removed.
- update to 6.2.2:
  * Revert "xdg-desktop-portal: Don't ship the x-cinnamon-portals.conf file."
- update to 6.2.1:
  * Fix extensions automatically enabling on download
- update to 6.2.0:
  * sound applet: Fixes #12035
  * Add a fix for webkit dev's failure to care about breaking online-accounts for nvidia users
  * window lists: don't attention flash focused window
  * Remove dynamic text direction for table
  * cinnamon-xlet-makepot: Don't assume xgettext calls actually generate a potfile.
  * Restore polkit agent.
  * Fix lmde6 build.
  * polkit-dialog: Clean up the styling a bit
  * debian/control: Don't remove policykit-1-gnome yet.
  * Add greeter badges for Cinnamon sessions
  * Show search bar by default in AppChooserDialog
  * cs_panel.py: Set the step amount to 1 for panel heights.
  * power applet: Fix reported battery status
  * panel.js: Don't re-declare x_mon when converting panel defs.
  * cs_panel.py: Fix behavior when there are overlapping definitions.
  * panel.js: Improve handling of invalid/duplicate panel definitions.
  * notifications@cinnamon.org: Append the locale's date format to notifications
  * cs_screensaver.py: Add screen lock delay options for 5 and 10 seconds
  * cs_keyboard.py, cinnamon-desktop-editor.py: Fix some python 3.12- related warnings.
  * cs_keyboard.py: Update the custom list visually as well as internally when a keybinding changes.
  * calendar@cinnamon.org: Fix garbage collection of stale events.
  * Fix mapping flatpak windows to flatpak app
  * Switch to GNOME Online Accounts GTK
  * l10n: Update POT
  * cs_info: Add 'about' as a keyword for System Info
  * cs_keyboard: Enable configuration of bindings for Spices
  * cs_themes: Fix the stack switcher sensitivity
  * inhibit@cinnamon.org: Add unique applet icons for notification toggles
  * Show battery pending charge/discharge states in Power Management
  * cinnamon-settings.py: Additional modules when Mint modules are absent
  * cinnamon-settings: Forbid synaptic if mintsources is present.
  * Fix linuxmint#11313
  * Add userWidget.js
  * lightbox.js: Port to Clutter animations
  * modalDialog.js: Port to Clutter animations
  * desklet.js: Port to Clutter animations
  * Add interface for xdg portal requests.
  * doc generation: Fix strings with invalid escape codes.
  * placesManager.js: Remove "Connect to..." item.
  * New action icon for Mint-X theme
  * cs_themes: Blacklist Adwaita and HighContrast
  * cs_themes: Blacklist a few more themes
  * cs_themes: Blacklist adwaita-dark
  * user applet: Allow to display the profile picture on the panel
  * userWidget.js: Fix AccountsService icon changes.
  * user@cinnamon.org: Use UserWidget.Avatar for the panel user icon.
  * cs_user.py: Use XApp.IconChooserDialog for "Browse for more...".
  * Update Show information on date format syntax URL to working one
  * workspace switcher: remove the workspace the cursor is hovering on middle click
  * cs_keyboard.py and KeybindingWidgets.py: Add support for search by binding
  * cornerbar applet: add shift + click actions settings
  * cornerbar: Properly filter windows not to transparentize on peek blur/opacity effects
  * show desktop applet: Fix desktop peek
  * Remove unused js overrides
  * Prevent window randomization on connecting a monitor
  * Preserve file permissions of downloaded spices
  * cinnamon theme: fix expo-workspaces-name-entry
  * cornerbar: Port to Clutter animations
  * show-desktop: Port to Clutter animations
  * gwl: Port to Clutter animations
  * Adds toggle switch to on-screen-keyboard@cinnamon applet to enable/disable keyboard.
  * util.js: remove unused utility function latinise()
  * userWidget: Back to using the theme to load the face image.
  * user applet: handle the symbolic panel icon correctly.
  * gwl: Fix thumbnails resize on scaled monitors
  * Show "wired with a padlock" or "wireless with a padlock" icons when a VPN is connected
  * Add a Science category to the menu.
  * sound@cinnamon.org: Prevent Muffin from creating sound streams in volume mixer in sound applet
  * cinnamon-app-system.c: Don't remove an app from running_apps until after emitting the changed signal.
  * userWidget: Simplify a bit
  * Embed nemo's layout editor into cinnamon-settings' Actions module.
  * Prevents Cvc.MixerControl from being loaded more than once
  * l10n: Generate additional files
  * l10n: Generate CS module desktop files
  * l10n: Update POT
  * xdg-desktop-portal: Don't ship the x-cinnamon-portals.conf file.
  * PopupSliderMenuItem: Don't track the hover state
  * window-list: Remove indicators for minimized and tiled windows
- update to 6.0.4:
  * Move gir files to private path
  * fixing applet tooltips clipping out the top as well.=
- update to 6.0.3:
  * fix for applet tooltips clipping outside the screen when they're too close to the bottom.
  * Show secure connection icon when WireGuard is active
- update to 6.0.2:
  * menu: Don't resize if the OSK is visible
  * Check for a workarea collision during actor.show() and shrink or restore to the user size when appropriate.
  * cs-info: increase inxi verbosity
  * README.Debian: fix typo
  * Update .git-blame-ignore-revs
- update to 6.0.1:
  * main.js: Don't initialize monitorLabeler in an x11 session.
  * Update bug report template with Wayland issue tracker
  * cinnamon-global/clipboard: use the MetaDisplay's selection object.
  * fix: install actions from the correct folder
  * improve xlet download and autostart run icons
  * Fix Main.activateWindow() for windows with normal transient children
  * actions: Ignore miscellaneous files in the install folder.
  * l10n: Update cs modules
  * cinnamon-settings-users: Fix special characters in pango markup
  * Update Actions module to show non-Spice Actions
  * Spices.py: Skip actions when they contain the 'Active' key and its value is false.
  * Spices.py: catch some possible exceptions when loading legacy actions.
  * ExtensionCore.py: Render spice-supplied icons correctly in hidpi.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">* Changes to the RPM .spec file for proper dependency versions of other Cinnamon components at different version numbers</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.6
  * see github commits for details</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1745668800">- remove v2l-tools runtime depends</changelog>
</package>
<package pkgid="a0d65d317a21034573b13a57a519076d35bd8595ba26842b7f860878157434a378b9d0a108915e0a1ee92f4983143c06fa3c41181005cb859b34a2fb1ff5ffe5" name="cinnamon-control-center" arch="x86_64">
  <version epoch="0" ver="6.4.1" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622376000">- Update to version 5.0.0.
  * Add ifdefs to prevent undefined reference to modem functions in
    network panel
  * network: Add support for displaying DNS6 parameters
  * l10n: Update POT
  * l10n: Generate files
- Update for version 4.8.2.
  * Network: Don't prevent hotspot capability unless NM specifically
    rules it out</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1629806400">- Update to version 5.0.2.
  * Remove calibrate button from UI
  * cc-color-panel.c: Remove references to removed calibrate button.
- Update for version 5.0.1.
  * build: Add a build option to ignore deprecation warnings during
    the build, and enable it by default.
  * display panel: Hide the fractional scaling controls by default.
  * display panel: Forgot to git add the gsettings schema file and
    install script.
  * l10n: Update POT</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1648468800">- Update to version 5.2.1:
  * wacom: Fix column layout in button-mapping dialog.
  * l10n: Generate files</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1664712000">- FTBFS with libgnomekbd 3.28.1
  * add cinnamon-control-center-5.2.1-libgnomekbd-3.28.1.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 5.6.1:
  * l10n: Update POT
  * Fix build when the color panel is disabled.
  * fix a spelling error
  * update and improve d/copyright
  * Remove cinnamon-settings-daemon as a dependency.
  * l10n: respect localedir option from meson again
  * Desktop files: Fix keywords translations
  * l10n: Update POT
  * cinnamon-control-center (5.4.7) vanessa; urgency=medium
  * region panel: add keys removed from libgnomekbd's API
  * display panel: fallback if no preferred mode is set
  * cinnamon-control-center (5.4.6) vanessa; urgency=medium
  * wacom: Bring in line with changes in muffin to fix support.
  * cinnamon-control-center (5.4.5) vanessa; urgency=medium
  * build: add missing gio-unix-2.0 dependency
  * cinnamon-control-center (5.4.4) vanessa; urgency=medium
  * meson: fix regression in installing with some panels disabled
  * small debian packaging improve
  * cinnamon-control-center (5.4.3) vanessa; urgency=medium
  * meson: fix installation of symlinks
  * meson: reimplement the symlink creation install script using builtin features
  * circleci: Fix mint21 build installation step.
  * Fix desktop files
  * cinnamon-control-center (5.4.2) vanessa; urgency=medium
  * packaging: Install correct desktop files to usr/share/applications instead of in the panel definition folder.
  * cinnamon-control-center (5.4.1) vanessa; urgency=medium
  * cc-display-config: Check other monitors' capabilities when deciding which scales to offer for the selected one.
  * display: Keep monitors visible when disabled.
  * display: Select a different active monitor when the current selection is disabled.
  * display: Clean up dead code.
  * makepot: Include some missed files in the network panel.
  * l10n: Update POT
  * network/panel-common.c: Use null-safe g_strdup.
  * cinnamon-control-center (5.4.0) vanessa; urgency=medium
  * Adapt to muffin rebase.
  * network: Remove old workaround for openvpn widgets.
  * network: Add support for displaying IPv6 gateway and all IPv6 addresses
  * CI: Update targets
  * l10n: Update POT
  * l10n: Update files
- drop cinnamon-control-center-5.2.1-libgnomekbd-3.28.1.patch (obsolete)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Fix memleaks
  * network/net-device.c: net_device_get_valid_connections -
    don't return early if there's no active connection.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * display: Increase the number of available fractional scale
    buttons to allow 75 - 200
  * Fix meson.build deprecations up to 0.56.0
  * wacom: Add "disabled" to stylus button actions.
  * display: Add wayland compatibility
  * display module: Fix color selection for monitor labels.
  * display module: Fix some memory leaks.
  * l10n: Update files
  * Mark fractional scaling settings key obsolete.
  * Delete cs-online-accounts icons.
  * l10n: Generate additional files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715947200">- Drop gnome-online-accounts dependency: not compatible with GOA
  from GNOME 46.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">- update to 6.2.0:
  * Fix optional wayland handling in cc-display-panel
  * cc-display-panel.c: Use correct type for dbus label colors.
  * Remove Online Accounts panel
  * l10n: Update POT
  * Remove gnome-online-accounts dependency
  * Update cc-wacom-panel.c: Fix name
  * Apply edits from Codespell
  * network: better default settings for cellular connections
  * network: fix crash when adding cellular connection
  * l10n: Update files</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.1
  * L10n change
- update to 6.4.0
  * network: Could not load editor VPN plugin warning
  * color-panel: Replace broken package-kit installation of
    gnome-color-manager with apturl (if available)
  * network: prevent redefinition error when building with
    musl libc</changelog>
</package>
<package pkgid="a0895b23221763578034c9f792b184d24ef850568db7dbe6566a13292c9c40cfac7e2ddb0fbafb2e5888b13fa0fa81881bfe294d2a2e8d2059985f3a67097fea" name="cinnamon-control-center-common" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622376000">- Update to version 5.0.0.
  * Add ifdefs to prevent undefined reference to modem functions in
    network panel
  * network: Add support for displaying DNS6 parameters
  * l10n: Update POT
  * l10n: Generate files
- Update for version 4.8.2.
  * Network: Don't prevent hotspot capability unless NM specifically
    rules it out</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1629806400">- Update to version 5.0.2.
  * Remove calibrate button from UI
  * cc-color-panel.c: Remove references to removed calibrate button.
- Update for version 5.0.1.
  * build: Add a build option to ignore deprecation warnings during
    the build, and enable it by default.
  * display panel: Hide the fractional scaling controls by default.
  * display panel: Forgot to git add the gsettings schema file and
    install script.
  * l10n: Update POT</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1648468800">- Update to version 5.2.1:
  * wacom: Fix column layout in button-mapping dialog.
  * l10n: Generate files</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1664712000">- FTBFS with libgnomekbd 3.28.1
  * add cinnamon-control-center-5.2.1-libgnomekbd-3.28.1.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 5.6.1:
  * l10n: Update POT
  * Fix build when the color panel is disabled.
  * fix a spelling error
  * update and improve d/copyright
  * Remove cinnamon-settings-daemon as a dependency.
  * l10n: respect localedir option from meson again
  * Desktop files: Fix keywords translations
  * l10n: Update POT
  * cinnamon-control-center (5.4.7) vanessa; urgency=medium
  * region panel: add keys removed from libgnomekbd's API
  * display panel: fallback if no preferred mode is set
  * cinnamon-control-center (5.4.6) vanessa; urgency=medium
  * wacom: Bring in line with changes in muffin to fix support.
  * cinnamon-control-center (5.4.5) vanessa; urgency=medium
  * build: add missing gio-unix-2.0 dependency
  * cinnamon-control-center (5.4.4) vanessa; urgency=medium
  * meson: fix regression in installing with some panels disabled
  * small debian packaging improve
  * cinnamon-control-center (5.4.3) vanessa; urgency=medium
  * meson: fix installation of symlinks
  * meson: reimplement the symlink creation install script using builtin features
  * circleci: Fix mint21 build installation step.
  * Fix desktop files
  * cinnamon-control-center (5.4.2) vanessa; urgency=medium
  * packaging: Install correct desktop files to usr/share/applications instead of in the panel definition folder.
  * cinnamon-control-center (5.4.1) vanessa; urgency=medium
  * cc-display-config: Check other monitors' capabilities when deciding which scales to offer for the selected one.
  * display: Keep monitors visible when disabled.
  * display: Select a different active monitor when the current selection is disabled.
  * display: Clean up dead code.
  * makepot: Include some missed files in the network panel.
  * l10n: Update POT
  * network/panel-common.c: Use null-safe g_strdup.
  * cinnamon-control-center (5.4.0) vanessa; urgency=medium
  * Adapt to muffin rebase.
  * network: Remove old workaround for openvpn widgets.
  * network: Add support for displaying IPv6 gateway and all IPv6 addresses
  * CI: Update targets
  * l10n: Update POT
  * l10n: Update files
- drop cinnamon-control-center-5.2.1-libgnomekbd-3.28.1.patch (obsolete)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Fix memleaks
  * network/net-device.c: net_device_get_valid_connections -
    don't return early if there's no active connection.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * display: Increase the number of available fractional scale
    buttons to allow 75 - 200
  * Fix meson.build deprecations up to 0.56.0
  * wacom: Add "disabled" to stylus button actions.
  * display: Add wayland compatibility
  * display module: Fix color selection for monitor labels.
  * display module: Fix some memory leaks.
  * l10n: Update files
  * Mark fractional scaling settings key obsolete.
  * Delete cs-online-accounts icons.
  * l10n: Generate additional files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715947200">- Drop gnome-online-accounts dependency: not compatible with GOA
  from GNOME 46.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">- update to 6.2.0:
  * Fix optional wayland handling in cc-display-panel
  * cc-display-panel.c: Use correct type for dbus label colors.
  * Remove Online Accounts panel
  * l10n: Update POT
  * Remove gnome-online-accounts dependency
  * Update cc-wacom-panel.c: Fix name
  * Apply edits from Codespell
  * network: better default settings for cellular connections
  * network: fix crash when adding cellular connection
  * l10n: Update files</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.1
  * L10n change
- update to 6.4.0
  * network: Could not load editor VPN plugin warning
  * color-panel: Replace broken package-kit installation of
    gnome-color-manager with apturl (if available)
  * network: prevent redefinition error when building with
    musl libc</changelog>
</package>
<package pkgid="65f636d36a2e68e32b5774fdc839c5bdd2f248d5cbe5a16bbcc9034c434a2871018d2cc69fdf60a083c6c85d354ff8badba80d73ccd2afef3a3c43dba5e6ab59" name="cinnamon-control-center-devel" arch="x86_64">
  <version epoch="0" ver="6.4.1" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622376000">- Update to version 5.0.0.
  * Add ifdefs to prevent undefined reference to modem functions in
    network panel
  * network: Add support for displaying DNS6 parameters
  * l10n: Update POT
  * l10n: Generate files
- Update for version 4.8.2.
  * Network: Don't prevent hotspot capability unless NM specifically
    rules it out</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1629806400">- Update to version 5.0.2.
  * Remove calibrate button from UI
  * cc-color-panel.c: Remove references to removed calibrate button.
- Update for version 5.0.1.
  * build: Add a build option to ignore deprecation warnings during
    the build, and enable it by default.
  * display panel: Hide the fractional scaling controls by default.
  * display panel: Forgot to git add the gsettings schema file and
    install script.
  * l10n: Update POT</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1648468800">- Update to version 5.2.1:
  * wacom: Fix column layout in button-mapping dialog.
  * l10n: Generate files</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1664712000">- FTBFS with libgnomekbd 3.28.1
  * add cinnamon-control-center-5.2.1-libgnomekbd-3.28.1.patch</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 5.6.1:
  * l10n: Update POT
  * Fix build when the color panel is disabled.
  * fix a spelling error
  * update and improve d/copyright
  * Remove cinnamon-settings-daemon as a dependency.
  * l10n: respect localedir option from meson again
  * Desktop files: Fix keywords translations
  * l10n: Update POT
  * cinnamon-control-center (5.4.7) vanessa; urgency=medium
  * region panel: add keys removed from libgnomekbd's API
  * display panel: fallback if no preferred mode is set
  * cinnamon-control-center (5.4.6) vanessa; urgency=medium
  * wacom: Bring in line with changes in muffin to fix support.
  * cinnamon-control-center (5.4.5) vanessa; urgency=medium
  * build: add missing gio-unix-2.0 dependency
  * cinnamon-control-center (5.4.4) vanessa; urgency=medium
  * meson: fix regression in installing with some panels disabled
  * small debian packaging improve
  * cinnamon-control-center (5.4.3) vanessa; urgency=medium
  * meson: fix installation of symlinks
  * meson: reimplement the symlink creation install script using builtin features
  * circleci: Fix mint21 build installation step.
  * Fix desktop files
  * cinnamon-control-center (5.4.2) vanessa; urgency=medium
  * packaging: Install correct desktop files to usr/share/applications instead of in the panel definition folder.
  * cinnamon-control-center (5.4.1) vanessa; urgency=medium
  * cc-display-config: Check other monitors' capabilities when deciding which scales to offer for the selected one.
  * display: Keep monitors visible when disabled.
  * display: Select a different active monitor when the current selection is disabled.
  * display: Clean up dead code.
  * makepot: Include some missed files in the network panel.
  * l10n: Update POT
  * network/panel-common.c: Use null-safe g_strdup.
  * cinnamon-control-center (5.4.0) vanessa; urgency=medium
  * Adapt to muffin rebase.
  * network: Remove old workaround for openvpn widgets.
  * network: Add support for displaying IPv6 gateway and all IPv6 addresses
  * CI: Update targets
  * l10n: Update POT
  * l10n: Update files
- drop cinnamon-control-center-5.2.1-libgnomekbd-3.28.1.patch (obsolete)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Fix memleaks
  * network/net-device.c: net_device_get_valid_connections -
    don't return early if there's no active connection.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * display: Increase the number of available fractional scale
    buttons to allow 75 - 200
  * Fix meson.build deprecations up to 0.56.0
  * wacom: Add "disabled" to stylus button actions.
  * display: Add wayland compatibility
  * display module: Fix color selection for monitor labels.
  * display module: Fix some memory leaks.
  * l10n: Update files
  * Mark fractional scaling settings key obsolete.
  * Delete cs-online-accounts icons.
  * l10n: Generate additional files</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715947200">- Drop gnome-online-accounts dependency: not compatible with GOA
  from GNOME 46.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">- update to 6.2.0:
  * Fix optional wayland handling in cc-display-panel
  * cc-display-panel.c: Use correct type for dbus label colors.
  * Remove Online Accounts panel
  * l10n: Update POT
  * Remove gnome-online-accounts dependency
  * Update cc-wacom-panel.c: Fix name
  * Apply edits from Codespell
  * network: better default settings for cellular connections
  * network: fix crash when adding cellular connection
  * l10n: Update files</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.1
  * L10n change
- update to 6.4.0
  * network: Could not load editor VPN plugin warning
  * color-panel: Replace broken package-kit installation of
    gnome-color-manager with apturl (if available)
  * network: prevent redefinition error when building with
    musl libc</changelog>
</package>
<package pkgid="7d93f5205d15130c58d07b7e72783e7e4539ce2af5c0fc2768e3b8b5c639d097df8a74041c2fc2a10110a8f17d00d944034654abd19f9334b620e2eb85178d5c" name="cinnamon-control-center-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="lp160.3.1"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.0.
  * Version bump with no change.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.1.
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 5.6.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Updated translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 5.8.2:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 6.0.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715601600">- update to 6.0.2:
  * Update translations</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.2
  * Update translations</changelog>
</package>
<package pkgid="4c4c581e367522d8101e5294f03dcf246b463d331549ded2085b9f6338da5374862e549f4a9d602d733d9b0668624d5f96b6109deb03bff1194bc92172651001" name="cinnamon-gschemas" arch="x86_64">
  <version epoch="0" ver="6.4.6" rel="lp160.3.1"/>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1683115200">- Update to version 5.6.8.
  * New upstream bugfix version 5.6.8 (Closes: deb#1032912)</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1686225600">- Update to version 5.8.1.
  * Revert "l10n: Generate module files"
  * Update generate_cs_module_desktop_files.py script
  * l10n: Generate module files
  * l10n: Generate additional files</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1689422400">- Building on Dead Mozay's packaging work; update to version 5.8.4.
  * theme: Don't force too large a minimum size of PopupSliderMenuItem.
  * cs_gestures.py: Cleaning up Python
  * gestures: Fix EXEC actions not completing.
  * sound applet: Fix alignment of icons in 'Launch player' submenu when a player is active.
  * To fix the error of referencing a non-existent variable.
  * popupMenu: restore minimum slider width, override sound slider only
  * grouped window list: fix drag and move app icon on the app list
  * cinnamon-close-dialog: Fix dialog text
  * Align labels in rows in the preffered applications to center
  * cinnamon ui: improve overview animation
  * color-scheme follow simplified themes
  * l10n: Update POT</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696507200">- Drop cinnamon-meson-0.61.patch: Fixed upstream.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1701432000">- Update to version 6.0.0:
  * settings: Replace PIL.Image.ANTIALIAS with PIL.Image.LANCZOS.
  * gestures: Adjust to amplified max volume, not normal.
  * cs_themes: Finish removing tinycss support.
  * cs_themes.py: Fix navigation/stack issue.
  * cinnamon.css: Center text in .applet-box
  * lightbox: Reduce color banding with dithering...
  * sound@cinnamon.org: Word wrap for artist and title labels
  * bug report: Mention crashes.
  * Fix thumbnails not appearing for windows created while menu is open
  * cinnamon-menu-editor: Fix window type to enable window resizing.
  * keybindings: Make Above_Tab displayable.
  * Looking glass: Fix log text colors.
  * gesturesManager.js: Ignore gestures when the screensaver is active.
  * Updated write-applet.xml for Cinnamon 4.6 to 5.8+
  * Update issue template with a link to open and closed issues for convenience.
  * window-list/gwl: Simplify window focus updates.
  * applet.js: Improve code comments.
  * gwl: Track the getThumbnail timeout source id.
  * Show all batteries as "primary" batteries, removing set_device_battery_additional()
  * Menu applet: Fix bug where menu is partly behind panel
  * gestures: Remove device detection.
  * Fix issue #11810
  * Emphasize checking for duplicate existing issues in the bug report form.
  * Updated cs_info module
  * sound applet: Add telegram-desktop to players without seek support
  * Fix various typos
  * js: Use string instead of regexp
  * cinnamon-subprocess-wrapper: Handle invalid utf8, fix error message.
  * Replace misc/util.js polyfills with js natives...
  * Replace util.js polyfills with JS natives...
  * state.js: replace polyfills with js natives..
  * Fix meson.build deprecations up to 0.56.0
  * cs_backgrounds: Recognize .avif files.
  * misc: Use locale.getlocale() instead of locale.getdefaultlocale().
  * calendar eventView.js: Try to cancel scroll-to-row callback when set_events() is called.
  * cs_info.py: Don't freeze when 'Copy to clipboard' is clicked.
  * Fixed calculate a sidePage height when it comes as standalone
  * Update cinnamon-settings.py
  * Require soup 3.0.
  * Ensure settings window expands to fit toolbar
  * Adds a shift-middle click action to the sound applet.
  * Adds option to always show the input switch in the sound applet. (Closes #11232)
  * wayland: Add session files
  * Clean up build deps and some unused imports
  * wayland: Don't use Gtk/Gdk anywhere in core/startup code
  * st-texture-cache: Make our own GtkIconTheme instead of trying to get it from a GdkScreen (which won't be able to exist until Cinnamon completes startup)
  * Disable/avoid things that don't currently work in Wayland
  * Extensions: Block certain x11-only xlets from trying to load
  * dbus: Add monitor labeler
  * Restore system background
  * Log the backend at Cinnamon start, add a row for it in cs_info.py
  * cs_themes: Don't use a GtkPlug/Socket for overview-scrollbar previews
  * cs_display: Add scale-monitor-framebuffer for Wayland fractional scaling
  * Remove some leftovers from main.c, adjust a string in cs_themes.py
  * power applet: Wait for csd-power's dbus presence before trying to connect to it
  * cinnamon-launcher: Launch cinnamon immediately under Wayland
  * session: Use a separate desktop file for Wayland sessions.
  * cinnamon-settings: Suppress/hide some x11-only elements.
  * modalDialog.js: Fix sync call in x11.
  * melange: convert to GApplication, cleanup, fix launch-as-inspector mode.
  * lookingGlass.js: Initialize melange interface at startup.
  * Add .git-blame-ignore-revs for commits
  * Adding an option for notification screen selection
  * Fix whitespace
  * Fix GLib exception:
  * meson: Re-add dbus dependency
  * Gestures: Allow the user to specify when an action is triggered.
  * Gestures: Add a desktop zoom action.
  * Rename Wayland session
  * cinnamon-launcher: Remove wayland handling.
  * cinnamon-global.c: Restore cinnamon_global_set_pointer.
  * Fix xlet-settings TreeListWidget's handling of columns with option lists
  * Use menu for window list hover tooltip choice
  * Fix the power applet battery status when the seconds var is 3600
  * Spices.py: Fix desklet reload after update when there are multiple instances
  * gesturesManager.js: Fix a couple small issues
  * Add Actions module
  * debian/control: Update soup version.
  * Remove .settings folder
  * Added menu details option
  * menu applet: Add some safety to the right-click properties item.
  * screenshot service: Add color picker support.
  * add xdg-portal conf
  * l10n: Update POT</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1723377600">- update to 6.2.9:
  * cs_default.py: Disable mousewheel selection in the default app comboboxes.
- update to 6.2.8:
  * x-cinnamon-portals.conf: Add gnome-keyring as the Secret provider.
- update to 6.2.7:
  * Dns.js: Revert bug workaround
- update to 6.2.6:
  * cinnamon-settings-users: Don't use w -hs
  * Set clip_to_allocation to true for menu and notification applets
- update to 6.2.5:
  * ExtensionCore.py - Adds update subject
  * Revert "cs_themes: Restrain picture button heights."
- update to 6.2.4:
  * windowMenu.js: Fix warning flood when moving a window to another workspace.
  * cs_themes: Restrain picture button heights.
  * user applet: Fix updating the avatar icon size when the panel height changes.
  * cs-info: Better parsing of the graphics card lspci output
- update to 6.2.3:
  * cinnamon-settings.py: Use the nvidia icon for nvidia-settings.
  * ExtensionCore.py: Check for display names in translations
  * cs_themes: Frame App and Cinnamon themes, move user themes to the top.
  * xapp status: Make sure the recording icon size is set, disconnect the recording signal when the applet is removed.
- update to 6.2.2:
  * Revert "xdg-desktop-portal: Don't ship the x-cinnamon-portals.conf file."
- update to 6.2.1:
  * Fix extensions automatically enabling on download
- update to 6.2.0:
  * sound applet: Fixes #12035
  * Add a fix for webkit dev's failure to care about breaking online-accounts for nvidia users
  * window lists: don't attention flash focused window
  * Remove dynamic text direction for table
  * cinnamon-xlet-makepot: Don't assume xgettext calls actually generate a potfile.
  * Restore polkit agent.
  * Fix lmde6 build.
  * polkit-dialog: Clean up the styling a bit
  * debian/control: Don't remove policykit-1-gnome yet.
  * Add greeter badges for Cinnamon sessions
  * Show search bar by default in AppChooserDialog
  * cs_panel.py: Set the step amount to 1 for panel heights.
  * power applet: Fix reported battery status
  * panel.js: Don't re-declare x_mon when converting panel defs.
  * cs_panel.py: Fix behavior when there are overlapping definitions.
  * panel.js: Improve handling of invalid/duplicate panel definitions.
  * notifications@cinnamon.org: Append the locale's date format to notifications
  * cs_screensaver.py: Add screen lock delay options for 5 and 10 seconds
  * cs_keyboard.py, cinnamon-desktop-editor.py: Fix some python 3.12- related warnings.
  * cs_keyboard.py: Update the custom list visually as well as internally when a keybinding changes.
  * calendar@cinnamon.org: Fix garbage collection of stale events.
  * Fix mapping flatpak windows to flatpak app
  * Switch to GNOME Online Accounts GTK
  * l10n: Update POT
  * cs_info: Add 'about' as a keyword for System Info
  * cs_keyboard: Enable configuration of bindings for Spices
  * cs_themes: Fix the stack switcher sensitivity
  * inhibit@cinnamon.org: Add unique applet icons for notification toggles
  * Show battery pending charge/discharge states in Power Management
  * cinnamon-settings.py: Additional modules when Mint modules are absent
  * cinnamon-settings: Forbid synaptic if mintsources is present.
  * Fix linuxmint#11313
  * Add userWidget.js
  * lightbox.js: Port to Clutter animations
  * modalDialog.js: Port to Clutter animations
  * desklet.js: Port to Clutter animations
  * Add interface for xdg portal requests.
  * doc generation: Fix strings with invalid escape codes.
  * placesManager.js: Remove "Connect to..." item.
  * New action icon for Mint-X theme
  * cs_themes: Blacklist Adwaita and HighContrast
  * cs_themes: Blacklist a few more themes
  * cs_themes: Blacklist adwaita-dark
  * user applet: Allow to display the profile picture on the panel
  * userWidget.js: Fix AccountsService icon changes.
  * user@cinnamon.org: Use UserWidget.Avatar for the panel user icon.
  * cs_user.py: Use XApp.IconChooserDialog for "Browse for more...".
  * Update Show information on date format syntax URL to working one
  * workspace switcher: remove the workspace the cursor is hovering on middle click
  * cs_keyboard.py and KeybindingWidgets.py: Add support for search by binding
  * cornerbar applet: add shift + click actions settings
  * cornerbar: Properly filter windows not to transparentize on peek blur/opacity effects
  * show desktop applet: Fix desktop peek
  * Remove unused js overrides
  * Prevent window randomization on connecting a monitor
  * Preserve file permissions of downloaded spices
  * cinnamon theme: fix expo-workspaces-name-entry
  * cornerbar: Port to Clutter animations
  * show-desktop: Port to Clutter animations
  * gwl: Port to Clutter animations
  * Adds toggle switch to on-screen-keyboard@cinnamon applet to enable/disable keyboard.
  * util.js: remove unused utility function latinise()
  * userWidget: Back to using the theme to load the face image.
  * user applet: handle the symbolic panel icon correctly.
  * gwl: Fix thumbnails resize on scaled monitors
  * Show "wired with a padlock" or "wireless with a padlock" icons when a VPN is connected
  * Add a Science category to the menu.
  * sound@cinnamon.org: Prevent Muffin from creating sound streams in volume mixer in sound applet
  * cinnamon-app-system.c: Don't remove an app from running_apps until after emitting the changed signal.
  * userWidget: Simplify a bit
  * Embed nemo's layout editor into cinnamon-settings' Actions module.
  * Prevents Cvc.MixerControl from being loaded more than once
  * l10n: Generate additional files
  * l10n: Generate CS module desktop files
  * l10n: Update POT
  * xdg-desktop-portal: Don't ship the x-cinnamon-portals.conf file.
  * PopupSliderMenuItem: Don't track the hover state
  * window-list: Remove indicators for minimized and tiled windows
- update to 6.0.4:
  * Move gir files to private path
  * fixing applet tooltips clipping out the top as well.=
- update to 6.0.3:
  * fix for applet tooltips clipping outside the screen when they're too close to the bottom.
  * Show secure connection icon when WireGuard is active
- update to 6.0.2:
  * menu: Don't resize if the OSK is visible
  * Check for a workarea collision during actor.show() and shrink or restore to the user size when appropriate.
  * cs-info: increase inxi verbosity
  * README.Debian: fix typo
  * Update .git-blame-ignore-revs
- update to 6.0.1:
  * main.js: Don't initialize monitorLabeler in an x11 session.
  * Update bug report template with Wayland issue tracker
  * cinnamon-global/clipboard: use the MetaDisplay's selection object.
  * fix: install actions from the correct folder
  * improve xlet download and autostart run icons
  * Fix Main.activateWindow() for windows with normal transient children
  * actions: Ignore miscellaneous files in the install folder.
  * l10n: Update cs modules
  * cinnamon-settings-users: Fix special characters in pango markup
  * Update Actions module to show non-Spice Actions
  * Spices.py: Skip actions when they contain the 'Active' key and its value is false.
  * Spices.py: catch some possible exceptions when loading legacy actions.
  * ExtensionCore.py: Render spice-supplied icons correctly in hidpi.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">* Changes to the RPM .spec file for proper dependency versions of other Cinnamon components at different version numbers</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.6
  * see github commits for details</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1745668800">- remove v2l-tools runtime depends</changelog>
</package>
<package pkgid="d96412361142f7f53a832ed91efb528c7fe518167aa1c2ecf10664325e5fecfbf6f97c7315e02f38a059d30df1248de4259ba17e23947749103aadb0c72c0e31" name="cinnamon-gschemas-branding-upstream" arch="noarch">
  <version epoch="0" ver="6.4.6" rel="lp160.3.1"/>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1683115200">- Update to version 5.6.8.
  * New upstream bugfix version 5.6.8 (Closes: deb#1032912)</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1686225600">- Update to version 5.8.1.
  * Revert "l10n: Generate module files"
  * Update generate_cs_module_desktop_files.py script
  * l10n: Generate module files
  * l10n: Generate additional files</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1689422400">- Building on Dead Mozay's packaging work; update to version 5.8.4.
  * theme: Don't force too large a minimum size of PopupSliderMenuItem.
  * cs_gestures.py: Cleaning up Python
  * gestures: Fix EXEC actions not completing.
  * sound applet: Fix alignment of icons in 'Launch player' submenu when a player is active.
  * To fix the error of referencing a non-existent variable.
  * popupMenu: restore minimum slider width, override sound slider only
  * grouped window list: fix drag and move app icon on the app list
  * cinnamon-close-dialog: Fix dialog text
  * Align labels in rows in the preffered applications to center
  * cinnamon ui: improve overview animation
  * color-scheme follow simplified themes
  * l10n: Update POT</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696507200">- Drop cinnamon-meson-0.61.patch: Fixed upstream.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1701432000">- Update to version 6.0.0:
  * settings: Replace PIL.Image.ANTIALIAS with PIL.Image.LANCZOS.
  * gestures: Adjust to amplified max volume, not normal.
  * cs_themes: Finish removing tinycss support.
  * cs_themes.py: Fix navigation/stack issue.
  * cinnamon.css: Center text in .applet-box
  * lightbox: Reduce color banding with dithering...
  * sound@cinnamon.org: Word wrap for artist and title labels
  * bug report: Mention crashes.
  * Fix thumbnails not appearing for windows created while menu is open
  * cinnamon-menu-editor: Fix window type to enable window resizing.
  * keybindings: Make Above_Tab displayable.
  * Looking glass: Fix log text colors.
  * gesturesManager.js: Ignore gestures when the screensaver is active.
  * Updated write-applet.xml for Cinnamon 4.6 to 5.8+
  * Update issue template with a link to open and closed issues for convenience.
  * window-list/gwl: Simplify window focus updates.
  * applet.js: Improve code comments.
  * gwl: Track the getThumbnail timeout source id.
  * Show all batteries as "primary" batteries, removing set_device_battery_additional()
  * Menu applet: Fix bug where menu is partly behind panel
  * gestures: Remove device detection.
  * Fix issue #11810
  * Emphasize checking for duplicate existing issues in the bug report form.
  * Updated cs_info module
  * sound applet: Add telegram-desktop to players without seek support
  * Fix various typos
  * js: Use string instead of regexp
  * cinnamon-subprocess-wrapper: Handle invalid utf8, fix error message.
  * Replace misc/util.js polyfills with js natives...
  * Replace util.js polyfills with JS natives...
  * state.js: replace polyfills with js natives..
  * Fix meson.build deprecations up to 0.56.0
  * cs_backgrounds: Recognize .avif files.
  * misc: Use locale.getlocale() instead of locale.getdefaultlocale().
  * calendar eventView.js: Try to cancel scroll-to-row callback when set_events() is called.
  * cs_info.py: Don't freeze when 'Copy to clipboard' is clicked.
  * Fixed calculate a sidePage height when it comes as standalone
  * Update cinnamon-settings.py
  * Require soup 3.0.
  * Ensure settings window expands to fit toolbar
  * Adds a shift-middle click action to the sound applet.
  * Adds option to always show the input switch in the sound applet. (Closes #11232)
  * wayland: Add session files
  * Clean up build deps and some unused imports
  * wayland: Don't use Gtk/Gdk anywhere in core/startup code
  * st-texture-cache: Make our own GtkIconTheme instead of trying to get it from a GdkScreen (which won't be able to exist until Cinnamon completes startup)
  * Disable/avoid things that don't currently work in Wayland
  * Extensions: Block certain x11-only xlets from trying to load
  * dbus: Add monitor labeler
  * Restore system background
  * Log the backend at Cinnamon start, add a row for it in cs_info.py
  * cs_themes: Don't use a GtkPlug/Socket for overview-scrollbar previews
  * cs_display: Add scale-monitor-framebuffer for Wayland fractional scaling
  * Remove some leftovers from main.c, adjust a string in cs_themes.py
  * power applet: Wait for csd-power's dbus presence before trying to connect to it
  * cinnamon-launcher: Launch cinnamon immediately under Wayland
  * session: Use a separate desktop file for Wayland sessions.
  * cinnamon-settings: Suppress/hide some x11-only elements.
  * modalDialog.js: Fix sync call in x11.
  * melange: convert to GApplication, cleanup, fix launch-as-inspector mode.
  * lookingGlass.js: Initialize melange interface at startup.
  * Add .git-blame-ignore-revs for commits
  * Adding an option for notification screen selection
  * Fix whitespace
  * Fix GLib exception:
  * meson: Re-add dbus dependency
  * Gestures: Allow the user to specify when an action is triggered.
  * Gestures: Add a desktop zoom action.
  * Rename Wayland session
  * cinnamon-launcher: Remove wayland handling.
  * cinnamon-global.c: Restore cinnamon_global_set_pointer.
  * Fix xlet-settings TreeListWidget's handling of columns with option lists
  * Use menu for window list hover tooltip choice
  * Fix the power applet battery status when the seconds var is 3600
  * Spices.py: Fix desklet reload after update when there are multiple instances
  * gesturesManager.js: Fix a couple small issues
  * Add Actions module
  * debian/control: Update soup version.
  * Remove .settings folder
  * Added menu details option
  * menu applet: Add some safety to the right-click properties item.
  * screenshot service: Add color picker support.
  * add xdg-portal conf
  * l10n: Update POT</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1723377600">- update to 6.2.9:
  * cs_default.py: Disable mousewheel selection in the default app comboboxes.
- update to 6.2.8:
  * x-cinnamon-portals.conf: Add gnome-keyring as the Secret provider.
- update to 6.2.7:
  * Dns.js: Revert bug workaround
- update to 6.2.6:
  * cinnamon-settings-users: Don't use w -hs
  * Set clip_to_allocation to true for menu and notification applets
- update to 6.2.5:
  * ExtensionCore.py - Adds update subject
  * Revert "cs_themes: Restrain picture button heights."
- update to 6.2.4:
  * windowMenu.js: Fix warning flood when moving a window to another workspace.
  * cs_themes: Restrain picture button heights.
  * user applet: Fix updating the avatar icon size when the panel height changes.
  * cs-info: Better parsing of the graphics card lspci output
- update to 6.2.3:
  * cinnamon-settings.py: Use the nvidia icon for nvidia-settings.
  * ExtensionCore.py: Check for display names in translations
  * cs_themes: Frame App and Cinnamon themes, move user themes to the top.
  * xapp status: Make sure the recording icon size is set, disconnect the recording signal when the applet is removed.
- update to 6.2.2:
  * Revert "xdg-desktop-portal: Don't ship the x-cinnamon-portals.conf file."
- update to 6.2.1:
  * Fix extensions automatically enabling on download
- update to 6.2.0:
  * sound applet: Fixes #12035
  * Add a fix for webkit dev's failure to care about breaking online-accounts for nvidia users
  * window lists: don't attention flash focused window
  * Remove dynamic text direction for table
  * cinnamon-xlet-makepot: Don't assume xgettext calls actually generate a potfile.
  * Restore polkit agent.
  * Fix lmde6 build.
  * polkit-dialog: Clean up the styling a bit
  * debian/control: Don't remove policykit-1-gnome yet.
  * Add greeter badges for Cinnamon sessions
  * Show search bar by default in AppChooserDialog
  * cs_panel.py: Set the step amount to 1 for panel heights.
  * power applet: Fix reported battery status
  * panel.js: Don't re-declare x_mon when converting panel defs.
  * cs_panel.py: Fix behavior when there are overlapping definitions.
  * panel.js: Improve handling of invalid/duplicate panel definitions.
  * notifications@cinnamon.org: Append the locale's date format to notifications
  * cs_screensaver.py: Add screen lock delay options for 5 and 10 seconds
  * cs_keyboard.py, cinnamon-desktop-editor.py: Fix some python 3.12- related warnings.
  * cs_keyboard.py: Update the custom list visually as well as internally when a keybinding changes.
  * calendar@cinnamon.org: Fix garbage collection of stale events.
  * Fix mapping flatpak windows to flatpak app
  * Switch to GNOME Online Accounts GTK
  * l10n: Update POT
  * cs_info: Add 'about' as a keyword for System Info
  * cs_keyboard: Enable configuration of bindings for Spices
  * cs_themes: Fix the stack switcher sensitivity
  * inhibit@cinnamon.org: Add unique applet icons for notification toggles
  * Show battery pending charge/discharge states in Power Management
  * cinnamon-settings.py: Additional modules when Mint modules are absent
  * cinnamon-settings: Forbid synaptic if mintsources is present.
  * Fix linuxmint#11313
  * Add userWidget.js
  * lightbox.js: Port to Clutter animations
  * modalDialog.js: Port to Clutter animations
  * desklet.js: Port to Clutter animations
  * Add interface for xdg portal requests.
  * doc generation: Fix strings with invalid escape codes.
  * placesManager.js: Remove "Connect to..." item.
  * New action icon for Mint-X theme
  * cs_themes: Blacklist Adwaita and HighContrast
  * cs_themes: Blacklist a few more themes
  * cs_themes: Blacklist adwaita-dark
  * user applet: Allow to display the profile picture on the panel
  * userWidget.js: Fix AccountsService icon changes.
  * user@cinnamon.org: Use UserWidget.Avatar for the panel user icon.
  * cs_user.py: Use XApp.IconChooserDialog for "Browse for more...".
  * Update Show information on date format syntax URL to working one
  * workspace switcher: remove the workspace the cursor is hovering on middle click
  * cs_keyboard.py and KeybindingWidgets.py: Add support for search by binding
  * cornerbar applet: add shift + click actions settings
  * cornerbar: Properly filter windows not to transparentize on peek blur/opacity effects
  * show desktop applet: Fix desktop peek
  * Remove unused js overrides
  * Prevent window randomization on connecting a monitor
  * Preserve file permissions of downloaded spices
  * cinnamon theme: fix expo-workspaces-name-entry
  * cornerbar: Port to Clutter animations
  * show-desktop: Port to Clutter animations
  * gwl: Port to Clutter animations
  * Adds toggle switch to on-screen-keyboard@cinnamon applet to enable/disable keyboard.
  * util.js: remove unused utility function latinise()
  * userWidget: Back to using the theme to load the face image.
  * user applet: handle the symbolic panel icon correctly.
  * gwl: Fix thumbnails resize on scaled monitors
  * Show "wired with a padlock" or "wireless with a padlock" icons when a VPN is connected
  * Add a Science category to the menu.
  * sound@cinnamon.org: Prevent Muffin from creating sound streams in volume mixer in sound applet
  * cinnamon-app-system.c: Don't remove an app from running_apps until after emitting the changed signal.
  * userWidget: Simplify a bit
  * Embed nemo's layout editor into cinnamon-settings' Actions module.
  * Prevents Cvc.MixerControl from being loaded more than once
  * l10n: Generate additional files
  * l10n: Generate CS module desktop files
  * l10n: Update POT
  * xdg-desktop-portal: Don't ship the x-cinnamon-portals.conf file.
  * PopupSliderMenuItem: Don't track the hover state
  * window-list: Remove indicators for minimized and tiled windows
- update to 6.0.4:
  * Move gir files to private path
  * fixing applet tooltips clipping out the top as well.=
- update to 6.0.3:
  * fix for applet tooltips clipping outside the screen when they're too close to the bottom.
  * Show secure connection icon when WireGuard is active
- update to 6.0.2:
  * menu: Don't resize if the OSK is visible
  * Check for a workarea collision during actor.show() and shrink or restore to the user size when appropriate.
  * cs-info: increase inxi verbosity
  * README.Debian: fix typo
  * Update .git-blame-ignore-revs
- update to 6.0.1:
  * main.js: Don't initialize monitorLabeler in an x11 session.
  * Update bug report template with Wayland issue tracker
  * cinnamon-global/clipboard: use the MetaDisplay's selection object.
  * fix: install actions from the correct folder
  * improve xlet download and autostart run icons
  * Fix Main.activateWindow() for windows with normal transient children
  * actions: Ignore miscellaneous files in the install folder.
  * l10n: Update cs modules
  * cinnamon-settings-users: Fix special characters in pango markup
  * Update Actions module to show non-Spice Actions
  * Spices.py: Skip actions when they contain the 'Active' key and its value is false.
  * Spices.py: catch some possible exceptions when loading legacy actions.
  * ExtensionCore.py: Render spice-supplied icons correctly in hidpi.</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">* Changes to the RPM .spec file for proper dependency versions of other Cinnamon components at different version numbers</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.6
  * see github commits for details</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1745668800">- remove v2l-tools runtime depends</changelog>
</package>
<package pkgid="47cdc8a570ae9461d2af71601d2bb8909e1144a6ce6f0f2d7452131f393c27a2620adcbdccf688260c5478bc7edb25dac634e4b97028d41f8db141f2dd2fe218" name="cinnamon-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="lp160.3.1"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.0.
  * Version bump with no change.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.1.
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 5.6.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Updated translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 5.8.2:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 6.0.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715601600">- update to 6.0.2:
  * Update translations</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.2
  * Update translations</changelog>
</package>
<package pkgid="74b9f9b6d00a30b0e6bb8a1617703c0d19e9b03f222b9714c0f671e82b3f8a8b87f5972af46be2eaf3e3c3cdd7da9e8be0179397f29f87977a24c2798f9ad750" name="cinnamon-menus-doc" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="bp160.1.7"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1591790400">- Update to version 4.6.0.
  * Version bump with no change.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1600430400">- Update to version 4.6.1.
  * gmenu-tree.c: Return a basename if no appinfo is available when
    sorting.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607169600">- Update to version 4.8.1.
  * Fix handling of malformed desktop files.
  * Improve integration of flatpak apps.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1610625600">- Update to version 4.8.2.
  * Fix loading of desktop files in subdirectories</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622116800">- Update to version 5.0.0.
  * No changelog.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.0:
  * Use github instead of circleci.
  * Restore and update debian/ symbols file.
  * update packaging (#53)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * github workflow: Add optional ssh session.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Fix meson.build deprecations up to 0.56.0</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1723550400">- update to 6.2.0:
  * packaging: Forbid compilation if the symbols file is outdated
- generate the documentation and create a new subpackage
- adapt spec file to newer standards</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.0
  * no changelog available</changelog>
</package>
<package pkgid="f913228c1028f3b43ae8a301ee48e55797ea3949a963537063980896b1a608809eb084b23b347e4dcb21aca79306c8176699ff5c3491514564af454960de7bf8" name="cinnamon-screensaver" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="bp160.1.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.2:
  * Fix makepot for the backup locker, don't translate its command-line arguments.
  * backup-locker: Simplify translations.
  * l10n: Update POT
  * muffinClient.py: Fix behavior when muffin isn't available,
  * fix a typing error
  * muffinClient.py: Remove leftover debugging line.
  * Rework behavior surrounding sleep, display changes, fractional scaling.
  * Rework stack management, separate backup locker lifecycle from main screensaver's.
  * logging: Skip buffering for most log output, clean up debug logging.
  * remove trailing semicolons (#419)
  * replace equality None check with identity None check (#420)
  * Add option to disable the backup locker.
  * libcscreensaver: add missing gio-unix-2.0 dependency (#411)
  * Improve signal handler tracking.
  * grabs: Use the original (cs-)event-grabber for everything, not just the backup locker.
  * cs-auth-pam.c: Use GMainloop instead of Gtk.
  * Cleanup, fix some build warnings.
  * unlock: Don't listen to the AccountsService is-loaded after startup.
  * backup locker: Clean up quit sequence.
  * Rework screensaver refreshing during suspend, lock, user-switch activities.
  * authentication: improve interaction between the main process and the pam helper.
  * Use xdo to feed escape keycodes into the focused window prior to attempting mouse and keyboard grabs.
  * event-grabber: Better debugging.
  * Increase the inactivity-timeout from 10s to 30s and get the screensaver to respect it.
  * stage.py: Delay initialization of certain components during startup.
  * cinnamon-screensaver-main.py: Add a 'hold' flag for debugging.
  * stage.py: Reset the fallback window when a compositor change is detected.
  * keybindings: Allow enter/return to activate the unlock and switch- user buttons.
  * updated trackname and albumartist to use more suitable fonts (ubuntu font family).
  * css: Make album info label larger
  * journal fix (#398)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673179200">- update to 5.6.3:
  * manager.py:  Don't try to access self.grab_helper if it was never initialized.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Prioritize Playing Audio over other players.
  * remove redundant parentheses
  * utils.py: Add gdm3 to the switch user function.
  * use Gio flags instead of ints
  * stage: Multiply the stage window by the global scale.
  * Fix stacking issue with the backup window.
  * Add missing dependency on x11-util</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Don't use libaccountsservice, which can block startup.
  * Update issue templates.
  * Fix meson.build deprecations up to 0.56.0
  * Disable screensaver in wayland sessions
  * muffinClient.py: Fix typo and clean up Python
  * cinnamon-screensaver-command: Only try an action if the proxy
    activation was successful.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 6.0.3:
  * Use a shell script to launch, where the environment can be
    checked before x11 resources are loaded in python.
  * binfile.in: Enclose arguments in quotes.
  * Revert "backup locker: Restore stack management when not
    activated."
  * backup locker: Restore stack management when not activated.
  * cinnamon-screensaver-main.py: Fix application theme provider.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1723723200">- update to 6.2.0:
  * nothing relevant for openSUSE
- create seperate packages for devel, typelib and library files, so
  people who want to actually use these files, don't have to compile it
  themselves
- remove support for older Leap releases than 1500</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.0
  * libscreensaver: fix detection of monitor hotplug
  * keybindings: Ignore shift-f10
  * fix executable libraries
  * Simplify authClient.py pam helper path
  * unlock dialog: Allow password visibility to be toggled
  * cs-backup-locker.c: Exit gracefully if incorrect arguments are given</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1737374400">- move typelib back to the right location</changelog>
</package>
<package pkgid="f7734118f2397cf67e53f3b6cf4cf9b57c0bf8c104222d4a5738b0669b6151be24e3801c1fe9bc0d94b27072409c447ac63a1b5afd2a2d39fe95cf899b1a0671" name="cinnamon-screensaver-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="bp160.1.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.2:
  * Fix makepot for the backup locker, don't translate its command-line arguments.
  * backup-locker: Simplify translations.
  * l10n: Update POT
  * muffinClient.py: Fix behavior when muffin isn't available,
  * fix a typing error
  * muffinClient.py: Remove leftover debugging line.
  * Rework behavior surrounding sleep, display changes, fractional scaling.
  * Rework stack management, separate backup locker lifecycle from main screensaver's.
  * logging: Skip buffering for most log output, clean up debug logging.
  * remove trailing semicolons (#419)
  * replace equality None check with identity None check (#420)
  * Add option to disable the backup locker.
  * libcscreensaver: add missing gio-unix-2.0 dependency (#411)
  * Improve signal handler tracking.
  * grabs: Use the original (cs-)event-grabber for everything, not just the backup locker.
  * cs-auth-pam.c: Use GMainloop instead of Gtk.
  * Cleanup, fix some build warnings.
  * unlock: Don't listen to the AccountsService is-loaded after startup.
  * backup locker: Clean up quit sequence.
  * Rework screensaver refreshing during suspend, lock, user-switch activities.
  * authentication: improve interaction between the main process and the pam helper.
  * Use xdo to feed escape keycodes into the focused window prior to attempting mouse and keyboard grabs.
  * event-grabber: Better debugging.
  * Increase the inactivity-timeout from 10s to 30s and get the screensaver to respect it.
  * stage.py: Delay initialization of certain components during startup.
  * cinnamon-screensaver-main.py: Add a 'hold' flag for debugging.
  * stage.py: Reset the fallback window when a compositor change is detected.
  * keybindings: Allow enter/return to activate the unlock and switch- user buttons.
  * updated trackname and albumartist to use more suitable fonts (ubuntu font family).
  * css: Make album info label larger
  * journal fix (#398)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673179200">- update to 5.6.3:
  * manager.py:  Don't try to access self.grab_helper if it was never initialized.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Prioritize Playing Audio over other players.
  * remove redundant parentheses
  * utils.py: Add gdm3 to the switch user function.
  * use Gio flags instead of ints
  * stage: Multiply the stage window by the global scale.
  * Fix stacking issue with the backup window.
  * Add missing dependency on x11-util</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Don't use libaccountsservice, which can block startup.
  * Update issue templates.
  * Fix meson.build deprecations up to 0.56.0
  * Disable screensaver in wayland sessions
  * muffinClient.py: Fix typo and clean up Python
  * cinnamon-screensaver-command: Only try an action if the proxy
    activation was successful.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1710763200">- update to 6.0.3:
  * Use a shell script to launch, where the environment can be
    checked before x11 resources are loaded in python.
  * binfile.in: Enclose arguments in quotes.
  * Revert "backup locker: Restore stack management when not
    activated."
  * backup locker: Restore stack management when not activated.
  * cinnamon-screensaver-main.py: Fix application theme provider.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1723723200">- update to 6.2.0:
  * nothing relevant for openSUSE
- create seperate packages for devel, typelib and library files, so
  people who want to actually use these files, don't have to compile it
  themselves
- remove support for older Leap releases than 1500</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.0
  * libscreensaver: fix detection of monitor hotplug
  * keybindings: Ignore shift-f10
  * fix executable libraries
  * Simplify authClient.py pam helper path
  * unlock dialog: Allow password visibility to be toggled
  * cs-backup-locker.c: Exit gracefully if incorrect arguments are given</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1737374400">- move typelib back to the right location</changelog>
</package>
<package pkgid="4047f912870a99397347ad8b0769a78d3162cb2e7f4a051a59c994c1a62024aa4edc7bfbfbc0008e9f93a1b3f1a9ea0eac842d47ef512a82617e972dbc14dcea" name="cinnamon-screensaver-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="lp160.3.1"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.0.
  * Version bump with no change.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.1.
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 5.6.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Updated translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 5.8.2:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 6.0.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715601600">- update to 6.0.2:
  * Update translations</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.2
  * Update translations</changelog>
</package>
<package pkgid="8f67e32160f27f10f77d15dc399324599630e03d72086e8061711b31aefc2b1b8983d9daceede87e721d1a0e0cc4e23f0102295edce04f8582614a094374f38c" name="cinnamon-session" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="lp160.3.1"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.0.
  * implement suspend-then-hibernate
  * respect suspend-then-hibernate setting when suspending from
    menu</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622116800">- Update to version 5.0.0.
  * Accept Desktop Entry Specification v1.4
  * util: Blacklist some session-specific variables
  * util: Blacklist NOTIFY_SOCKET
  * Fix libexec path for cinnamon-session-check-accelerated-helper</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1642420800">- Update to version 5.2.0.
  * util: Unset LC_* variables (#145)
- Update to version 5.0.1.
  * csm-logout-dialog.c: Grab focus after the widget is shown.
- Fix build fail, fix meson build flag.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644408000">- Drop pkgconfig(gconf-2.0) BuildRequires: We are already passing
  gconf=false to meson, so this BuildRequires is unused and
  unneeded.
- Drop conditional post(un) handling for no longer supported
  versions of openSUSE.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1701518400">- update to 6.0.0:
  * Fix meson.build deprecations up to 0.56.0
  * wayland: Don't use egg library
  * wayland: Replace cs-idle-monitor with gnome-idle-monitor
  * wayland: Add compatibility
  * wayland: Add DisplayServer phase
  * wayland: Reimplement logout/inhibit dialogs as a separate
    process
  * Clean up and unify logging for session failures
  * More cleanup - leftover includes, unused files
  * Fix build.
  * Don't make a required component failure fatal.
  * On required app failure, log both the app and startup ID.
  * csm-manager: Remove maybe_restart_user_bus.
  * main.c: Don't direct logging to the journal.
  * csm-manager: Terminate the logout dialog at the beginning of
    the session end phase, not the end.
  * cinnamon-session-quit: Set modal.
  * l10n: Update POT
  * cinnamon-session (5.8.1) victoria; urgency=medium
  * Block touchegg from autostarting.
  * cinnamon-session (5.8.0) victoria; urgency=medium
  * main.c: Don't set GTK_OVERLAY_SCROLLING.
  * github workflow: Add optional ssh session.
  * cinnamon-session (5.6.0) vera; urgency=medium
  * Fix .gitignore for builds
  * Accept Desktop Entry Specification v1.5
  * Use github instead of circleci.
  * cinnamon-session (5.4.0) vanessa; urgency=medium
  * Remove gconf code, disable docs, remove doc dependencies.
  * CI: Update targets</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 6.0.1:
  * autostart-app: don't try to add child watch to dbus activated
  * util: Unset some environment variables on systemd</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 6.0.4:
  * cinnamon-session-quit.py: Set logout window to keep-above and
    all- workspaces.
  * csm-manager.c: Use the /tmp dir for the dialog server's
    socket file when logged in to a guest account.
  * Packaging: Add missing build-dep on cinnamon-desktop
  * session-quit: Use a unique dialog server address for each
    session.
  * cinnamon-session-quit.py: Try the old fixed server address if
    the session manager doesn't provide the "sm-bus-id" argument.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1723550400">- update to 6.2.1:
  * Fix restart and shutdown
- update to 6.2.0:
  * cinnamon-session-quit.py: add missing window icon
  * csm-manager.c: Unset WAYLAND_DISPLAY during shutdown in a wayland
  * main.c: Reset the activation environment at the end of the
  * csm-manager.c: Stop the user dbus-daemon at the end of the session
  * cs-presence.c: Fix CsmPresence idle handling
  * cinnamon-session-quit.py: Set logout window to keep-above and all
  * Remove orphaned include
  * cinnamon-session: make sure wayland sessions get a login shell</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731067200">- Require /usr/bin/dbus-launch instead of dbus-1-x11: the latter is
  supposed to be removed after the move to dbus-broker.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.0
  * Refactor/simplify end-session dialog handling to use a native-
    Cinnamon dialog if available
  * autostart: Blacklist nm-applet</changelog>
</package>
<package pkgid="0211d4d54a5cef90a7737f04a4460eb774248b631978fee6dbc140aecdd836bea3b83a706e18ff41d664cd04b293e71bcf3ee4213459e8e5e54d352fa6ed56d7" name="cinnamon-session-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="lp160.3.1"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.0.
  * Version bump with no change.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.1.
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 5.6.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Updated translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 5.8.2:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 6.0.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715601600">- update to 6.0.2:
  * Update translations</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.2
  * Update translations</changelog>
</package>
<package pkgid="07dd4d29e289422d1fa0c1cfe64301ed105ea395bd668abe56dd4c4d892abaf26f8511d81af3378f42c31f32cacc90a58cc3bd61f8a2ee3dd6f38768c0ca29a3" name="cinnamon-settings-daemon" arch="x86_64">
  <version epoch="0" ver="6.4.3" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.2.
  * media-keys/bus-watch-namespace.c: Fix media player shortcuts.
- Fix spec file.
- Updates for 4.8.1.
  * meson.build: Disable deprecated warnings (you can enable with
    a build flag).
  * csd-media-keys: Check for the availability of a mouse/keyboard
    grab when running screenshot commands.
- Updates for 4.8.0.
  * implement suspend-then-hibernate (issue #237)
  * typo
  * Port to meson
  * Use libexec dir for plugins.
  * Make bin links part of the meson build.
  * Clean up some files.
  * Revert "csd-automount-manager.c: Add a small delay to folder
    opening after (#290)"</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1610625600">- Update to version 4.8.5.
  * do not delete programs and replace them with broken symlinks to
    themselves
- Updates for version 4.8.4.
  * plugins: Add symbolic links from the old to the new binary
    locations. (#320)
  * meson: Always install binary links
  * xdg autostart: Refer directly to the executable name</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623412800">- Update to version 5.0.1.
  * csd-power-manager.c: Remove percentage from mouse and keyboard
    'warning' notifications.
  * csd-power-manager.c: Make sure to propagate the icon and/or state
    properties immediately when they change.
  * power/gpm-common.c: Prefer more specific battery level icons if
    they're available in the theme.
  * gpm-common.c: Adjust thresholds for battery-level icon changes.
  * datetime: use full path for d-bus service Exec
  * build: Add missing defines. Fix optional wacom build.
    Make build options behave consistently.
  * csd-xrandr-manager.c: Fix some build warnings.
  * csd-power-manager.c: Manage idle activation of cinnamon-screensaver
    instead of making the screensaver itself handle it.
  * wacom: Fix a crash from assertion failures
  * csd-power-manager.c: Remove percentage from non-battery
    critical notifications.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625054400">- Update to version 5.0.3.
  * EDID strings can be up to 13 bytes
  * color: Correct the transposed bits in the EDID parser
  * csd-power-manager.c: Use a different method to determine
    whether or not the system is on battery.
  * power: Increase the critical and action thresholds
    so they are higher than the upower default.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1629806400">- Update to version 5.0.4.
  * csd-power-manager.c: Reset the timers when the idle-delay
    changes.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.0.
  * Add trackball support (#341)
  * wacom: Drop LED helper (#337)</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1642420800">- Fix build failed, unknown option, use default settings.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Fix meson.build deprecations up to 0.56.0
  * Add wayland support
  * optimization: Only initialize libnotify for plugins that need
    it
  * wayland: Add a plugin to sync cinnamon/gnome settings
  * csd-background: Make wayland-compatible
  * xsettings: Add gtk-keynav-use-caret setting
  * daemon-skeleton.h: Make sure the GMainLoop is accessible
    everywhere it's needed.
  * xsettings: Round the Xft.dpi setting to an integer
  * power: Fix free order
  * xsettings: Override the active icon and gtk theme when 'high-
    contrast' is enabled.
  * build: don't hardcode files install dir as /
  * power: Allow the minimum display brightness to be overridden.
  * csd-xsettings-manager.c: Manage "gtk-overlay-scrolling".
  * power: Add settings to disable low battery warnings for
    connected devices
  * github workflow: Add optional ssh session.
  * fixed a spelling error spotted with lintian
  * xsettings: Connect Gtk/EnablePrimaryPaste to gsettings.
  * meson options: Set debug flag back to false.
  * Fix broken rpath
  * wacom: Don't set an rpath for led helpers.
  * Small packaging improvements
  * csd-wacom: Remove unused functionality.
  * schemas: Fix wacom schema names for migrate_check.
  * schemas: Add missing desktop schema for migration.
  * cinnamon-settings-daemon (5.4.3) vanessa; urgency=medium
  * build: add missing gio-unix-2.0 dependency
  * backlighting: Return monitor coordinates instead of a Gdk-
    provided monitor index.
  * power manager: Prevent turning the backlight completely off
    when adjusting brightness.
  * media keys: Get rid of deliberate delay when taking a
    screenshot to ensure a grab.
  * cinnamon-settings-daemon (5.4.1) vanessa; urgency=medium
  * csd-xsettings: Fix dbus names.
  * cinnamon-settings-daemon (5.4.0) vanessa; urgency=medium
  * Remove sounds plugin, Cinnamon now use muffin sound player.
  * Remove obsolete plugins: a11y-keyboard, cursor, mouse, xrandr
  * Remove dh_dwz build warnings.
  * datetime: Use Gio's dbus implementation.
  * Fix MPRIS issues with disconnecting clients
  * print notifications: Fix build warning.
  * csd-power-manager.c: Ensure that dbus message "g-properties-
    changed" is emitted in all relevant places
  * csd-media-keys-manager.c: Fix volume level 5% snap
  * CI: Update targets</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">- update to 6.2.0:
  * Fixes and readability improvements
  * print notifications: Don't send repeated printer-added notifications.
  * notifications manager: Fix compiler warnings.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.3
  * no openSUSE related change
- update to 6.4.0
  * csd-color-calibrate: Fix GNOME refs following plugin rebase
  * csd-media-keys: Show device description on volume OSD
  * csd-power: Refactoring display backlight code.
  * backport cinnamon-desktop changes, nightlight
  * media-keys: Add support for an audio device selection dialog
  * csd-media-keys: Adapt to new overamplification setting
  * csd-power-manager: Assume a keyboard backlight max-value of 0
    to mean that adjustment is unsupported
  * csd-settings-remap-manager.c: Only report on missing schemas
    and keys when debugging.</changelog>
</package>
<package pkgid="6ba41440839c1dd6d4c9b980128d4f50b1df2c012d47435b6192dfd407e02d5dae6d4bf3212316b829ce00b3a27785f9c4c647963e7478fe5d19a40f852a10fb" name="cinnamon-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="6.4.3" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.2.
  * media-keys/bus-watch-namespace.c: Fix media player shortcuts.
- Fix spec file.
- Updates for 4.8.1.
  * meson.build: Disable deprecated warnings (you can enable with
    a build flag).
  * csd-media-keys: Check for the availability of a mouse/keyboard
    grab when running screenshot commands.
- Updates for 4.8.0.
  * implement suspend-then-hibernate (issue #237)
  * typo
  * Port to meson
  * Use libexec dir for plugins.
  * Make bin links part of the meson build.
  * Clean up some files.
  * Revert "csd-automount-manager.c: Add a small delay to folder
    opening after (#290)"</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1610625600">- Update to version 4.8.5.
  * do not delete programs and replace them with broken symlinks to
    themselves
- Updates for version 4.8.4.
  * plugins: Add symbolic links from the old to the new binary
    locations. (#320)
  * meson: Always install binary links
  * xdg autostart: Refer directly to the executable name</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1623412800">- Update to version 5.0.1.
  * csd-power-manager.c: Remove percentage from mouse and keyboard
    'warning' notifications.
  * csd-power-manager.c: Make sure to propagate the icon and/or state
    properties immediately when they change.
  * power/gpm-common.c: Prefer more specific battery level icons if
    they're available in the theme.
  * gpm-common.c: Adjust thresholds for battery-level icon changes.
  * datetime: use full path for d-bus service Exec
  * build: Add missing defines. Fix optional wacom build.
    Make build options behave consistently.
  * csd-xrandr-manager.c: Fix some build warnings.
  * csd-power-manager.c: Manage idle activation of cinnamon-screensaver
    instead of making the screensaver itself handle it.
  * wacom: Fix a crash from assertion failures
  * csd-power-manager.c: Remove percentage from non-battery
    critical notifications.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1625054400">- Update to version 5.0.3.
  * EDID strings can be up to 13 bytes
  * color: Correct the transposed bits in the EDID parser
  * csd-power-manager.c: Use a different method to determine
    whether or not the system is on battery.
  * power: Increase the critical and action thresholds
    so they are higher than the upower default.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1629806400">- Update to version 5.0.4.
  * csd-power-manager.c: Reset the timers when the idle-delay
    changes.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.0.
  * Add trackball support (#341)
  * wacom: Drop LED helper (#337)</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1642420800">- Fix build failed, unknown option, use default settings.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Fix meson.build deprecations up to 0.56.0
  * Add wayland support
  * optimization: Only initialize libnotify for plugins that need
    it
  * wayland: Add a plugin to sync cinnamon/gnome settings
  * csd-background: Make wayland-compatible
  * xsettings: Add gtk-keynav-use-caret setting
  * daemon-skeleton.h: Make sure the GMainLoop is accessible
    everywhere it's needed.
  * xsettings: Round the Xft.dpi setting to an integer
  * power: Fix free order
  * xsettings: Override the active icon and gtk theme when 'high-
    contrast' is enabled.
  * build: don't hardcode files install dir as /
  * power: Allow the minimum display brightness to be overridden.
  * csd-xsettings-manager.c: Manage "gtk-overlay-scrolling".
  * power: Add settings to disable low battery warnings for
    connected devices
  * github workflow: Add optional ssh session.
  * fixed a spelling error spotted with lintian
  * xsettings: Connect Gtk/EnablePrimaryPaste to gsettings.
  * meson options: Set debug flag back to false.
  * Fix broken rpath
  * wacom: Don't set an rpath for led helpers.
  * Small packaging improvements
  * csd-wacom: Remove unused functionality.
  * schemas: Fix wacom schema names for migrate_check.
  * schemas: Add missing desktop schema for migration.
  * cinnamon-settings-daemon (5.4.3) vanessa; urgency=medium
  * build: add missing gio-unix-2.0 dependency
  * backlighting: Return monitor coordinates instead of a Gdk-
    provided monitor index.
  * power manager: Prevent turning the backlight completely off
    when adjusting brightness.
  * media keys: Get rid of deliberate delay when taking a
    screenshot to ensure a grab.
  * cinnamon-settings-daemon (5.4.1) vanessa; urgency=medium
  * csd-xsettings: Fix dbus names.
  * cinnamon-settings-daemon (5.4.0) vanessa; urgency=medium
  * Remove sounds plugin, Cinnamon now use muffin sound player.
  * Remove obsolete plugins: a11y-keyboard, cursor, mouse, xrandr
  * Remove dh_dwz build warnings.
  * datetime: Use Gio's dbus implementation.
  * Fix MPRIS issues with disconnecting clients
  * print notifications: Fix build warning.
  * csd-power-manager.c: Ensure that dbus message "g-properties-
    changed" is emitted in all relevant places
  * csd-media-keys-manager.c: Fix volume level 5% snap
  * CI: Update targets</changelog>
  <changelog author="sb56637 &lt;mxoo28j7@duck.com&gt;" date="1724068800">- update to 6.2.0:
  * Fixes and readability improvements
  * print notifications: Don't send repeated printer-added notifications.
  * notifications manager: Fix compiler warnings.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.3
  * no openSUSE related change
- update to 6.4.0
  * csd-color-calibrate: Fix GNOME refs following plugin rebase
  * csd-media-keys: Show device description on volume OSD
  * csd-power: Refactoring display backlight code.
  * backport cinnamon-desktop changes, nightlight
  * media-keys: Add support for an audio device selection dialog
  * csd-media-keys: Adapt to new overamplification setting
  * csd-power-manager: Assume a keyboard backlight max-value of 0
    to mean that adjustment is unsupported
  * csd-settings-remap-manager.c: Only report on missing schemas
    and keys when debugging.</changelog>
</package>
<package pkgid="2cf8d91eea6f0480f27a69fd7974a8bf1473a8627091d9f8480f826a181425da421c4f204cf0c1f4900260ae8ae07cca2c2ca9a8d33b184e48df550dac6795ed" name="cinnamon-settings-daemon-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="lp160.3.1"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1607428800">- Update to version 4.8.0.
  * Version bump with no change.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1639051200">- Update to version 5.2.1.
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 5.6.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1685707200">- update to 5.8.0:
  * Updated translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 5.8.2:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703073600">- update to 6.0.1:
  * Update translations</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1715601600">- update to 6.0.2:
  * Update translations</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1736683200">- update to 6.4.2
  * Update translations</changelog>
</package>
<package pkgid="97739e34bcb7d1501ef3e69525f4b4a191e4bbd5fa8ebc44e60150131e15474776b9a2a945925ab20d18e12278627e225c04a52479ab1fbbe2f1493b962b7d28" name="cinnamon-theme-dracula" arch="noarch">
  <version epoch="0" ver="3.0+git94.9840b6b" rel="lp160.3.1"/>
  <changelog author="maurizio.galli@gmail.com" date="1604404800">- Update to version 2.0+git8.9dde49c:
  * Gnome-shell: Fix calendar issues in gnome v3.38 related to #82
  * KDE: Improve logout screen appearance
  * Gnome: Fix dark background in gnucash entries
  * Xfce: Fix panel background issue
  * KDE: Fix misplaced password input on lockscreen
  * Feat: add icons download link
  * Cinnamon: Fix invisible screenshot area grab related to #77
  * Add cinnamon DE support
  * Pantheon desktop: Redefine color variables to avoid issues with some apps</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1609848000">- Update to version 2.0+git17.d3b3d53:
  * Xfce: Improve thunar appearance
  * Cinnamon: Fix top border appearing when window is maximized
  * Gnome-shell: Improve searchbar appearance
  * KDE: Update logout screen buttons appearance
  * Gnome-shell: Fix color of month back/forward arrows
  * KDE: Update full screen preview
  * Mate: Fix active indicator in volume and brightness popup
  * Gnome: Fix shell log because of double values for box-shadow
  * Gnome-shell: Fix calendar and workspace-switcher issues in gnome v3.38</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1623153600">- Update to version 2.0+git34.2413487:
  * Cinnamon: Add visual differentiation for inactive pane in Nemo
  * KDE: Update splashscreen preview
  * Move thumbnail
  * Cinnamon: Add gtk-3.0 thumbnail to show theme preview
  * Gnome: Fix weird font in context menus
  * Mate: Improve caja fle manager appearance
  * KDE: Improve lockscreen input appearance
  * KDE: Fix color inconsistency in checkboxes
  * Fix css warning
  * Mate: Fix text cursor color while renaming file in caja
  * Revert b99589e
  * Gnome: Fix low text contrast in calendar events widget
  * Gnome-shell: Theme now uses system font related to #84
  * Gnome: Fix transparent separator in headerbar
  * KDE: Update splasscreen appearance
  * Cinnamon: Improve nemo file manager appearance
  * Gnome: Fix odd shadow appearing when headerbar button is selected</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1635854400">- Update to version 2.0+git59.cf9d6aa:
  * Gnome-shell: Fix no hover effect in search results item
  * KDE: Improve input appearance
  * Gnome: Fix tabs color in chrome, fixes #126
  * KDE: Improve sddm input appearance
  * Gnome-shell: Fix dark text in entries placeholders, fixes #48
  * KDE: Update sddm theme
  * KDE: Remove unnecessary file in sddm theme
  * Gnome-shell: Fix white popups on shell theme, fixes #137, fixes #119, fixes #97
  * Gnome-shell: Fix color of horizontal workspace switcher, fix #133
  * KDE: Fix KeyboardLayoutButton in LockScreen
  * KDE: Update osd tyle, fixes #114
  * Gnome-shell v40: Fix visual glithes in calendar and icon grid
  * Rebuild gtk theme
  * Fix missing bracket
  * KDE: Colorscheme -  Improve alternate background color
  * Update _xfce.scss
  * Update _xfce.scss
  * Update _thunar.scss
  * Gnome-shell: Add syles for pop-os/cosmic
  * KDE: Fix low contrast in logout screen
  * Gnome-shell v40: Improve window caption appearance
  * KDE: Fix color inconsistency in some widgets
  * Gnome-shell: Fix padding bug on selected window preview at activities window
  * Gnome: Add initial support to v40</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1643976000">- Update to version 3.0+git9.18bb561:
  * Gnome-shell: Fix switch button appearance
  * Gnome-shell: Improve text entry appearance
  * KDE: Kvantum - Fix appearance of sliders in active state
  * Gnome: Fix cut text in header bar buttons, fixes #169
  * Gnome-shell v40+: Increase font size to avoid blurry icons, fix #150
  * KDE: LAF - Improve logout screen appearance
  * Gnome-shell v40+: Fix misaligned 'Do no disturb' button
  * KDE: LAF - Update splashscreen preview
  * Remove extra space
  * KDE: LAF - Update splash screen appearance
  * KDE: LAF - Add cursors theme as dependencie
  * KDE: Add cursors theme
  * Gtk-4.0: Fix extra padding inside maximized windows
  * Gtk-4.0: Fix extra gap in search bars, fixes #160
  * KDE: Plasma - Improve highlight color to be easy on the eyes
  * Gnome: Fix theme parsing errors, Fix #157
  * Gtk-4.0: Fix overshoot indicator color
  * Gtk-4: Fix popovers style
  * Gtk-4: Fix theme parsing erros and warnings
  * Gtk-4: Fix missing separator in lists rows
  * Gtk-4: Fix no visual separation between windows
  * Gtk-4: Fix border-color of focused entries
  * Gtk-4: Fix menubar item style
  * Gtk-4: Fix error buttons style
  * Gtk-4: Fix window control buttons appearance
  * Gtk-4: Fix outlined style in all elements
  * Gtk-4.0: Add initial support to gtk v4
  * Cinnamon: Fix panel icons squished and background issue with transparent panels
  * KDE: Plasma - Update scrollbars appearance
  * Gnome-shell: Improve levelbar color in osd
  * KDE: Plasma - Enable adaptive transparency
  * Elementary: Fix appearance of colors in file-menager context menu, Fixes #61
  * KDE: Plasma -  Update checkbox style
  * Gnome-shell: Improve hover color in icon grid
  * KDE: Update lockscreen input to match plasma theme</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1649937600">- Update to version 3.0+git32.3029205:
  * Rebuild cinnamon theme
  * Cinnamon: Improve popups/menus appearance
  * Cinnamon: Improve slider appearance
  * Cinnamon: Change highlight color in grouped windows list
  * KDE: LAF- Update full screen preview
  * Gnome-shell: Improve entries appearance
  * Gnome-shell: Improve modal dialogs appearance
  * Cinnamon: Theme now uses system font family/size
  * Update theme name to avoid issues in mate DE
  * KDE: Kvantum - Update entries appearance
  * :memo: Update readme
  * Gnome: Fix sharp window corners
  * Gnome: Improve sidebar items appearance
  * Gnome-shell: Improve window close button appearance
  * KDE: LAF -  Optimize image files
  * Gnome-shell: Improve sliders appearance
  * Gnome-shell: Improve notifications appearance
  * Gnome-shell: Improve buttons appearance
  * Gnome-shell: Improve some widgets appearance
  * KDE: Sddm - Improve  user list appearance
  * Gnome-shell: Add popup separators, related to #171
  * Gnome-shell: Remove weird border inside popup sub menus
  * KDE: Plasma - Improve entries visibility</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1664020800">- Update to version 3.0+git72.2452278:
  * Cinnamon: Fix workspace switcher (as buttons) appearance
  * Cinnamon: Fix cutted text in search bar
  * Elementary OS: Fix missing highlight color in task switcher
  * feature request added
  * bug report added
  * Gnome-shell v42: Improve notifications appearance on hover state
  * Gnome-shell v42: Remove odd shadow in calendar area
  * KDE: Sddm - Improve focused text entries appearance
  * Update min_prelight
  * Restore shell theme
  * Gnome: Improve window control buttons visibility
  * Gnome-shell v42: Improve prompt dialog appearance
  * Gnome-shell v42: Fix media control buttons appearance
  * Gnome: Fix flickering above Chrome URL bar, Fix #201. Fix #195
  * KDE: Sddm - Improve general appearance
  * Xfce: Fix thunar appearance
  * Cinnamon: Fix grouped window list visibility issue
  * KDE: Sddm - Fix missing spacing around text entries
  * Gnome-shell v42: Improve notifications appearance
  * Gnome-shell v42: Fix some visual issues
  * KDE: Sddm - Improve input appearance
  * Fix background hovering effect on Dash to Dock
  * Gnome-shell v42: Improve calendar area appearance
  * Gnome-shell:  Add specific styles for dash-to-dock
  * Gnome-shell v42: Fix wasted space in calendar area
  * Gnome-shell v42: Fix styling issues in popups
  * KDE: Sddm - Fix shrink buttons/entries
  * Gnome-shell: Improve popups appearance
  * KDE: SDDM - Improve button appearance
  * Gnome-shell-v42: Fix issue with app folders
  * Gnome-shell-v42: Remove odd border in message list
  * Gnome-shell-v42: Fix issue with calendar
  * Gnome-shell-v42: Fix issue with popovers
  * Gnome-shell: Fix issue with page indicator
  * Gnome-shell: Update text entries appearance
  * KDE: Sddm - Fix small font size
  * Gnome: Fix appearance of linked buttons in headerbar</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@suse.com&gt;" date="1664020801">- Split dracula-gtk-theme into flavours subpackages:
  * metatheme-dracula-common
  * kde-theme-dracula
  * gtk2-metatheme-dracula
  * gtk3-metatheme-dracula
  * gtk4-metatheme-dracula
  * gnome-shell-theme-dracula
  * cinnamon-theme-dracula
  * metacity-theme-dracula
  * xfwm4-theme-dracula</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1673265600">- Update to version 3.0+git88.b64d36a:
  * Xfce v4.18: Fix invisible items in thunar sidebar
  * Gnome 43: Fix background color of tab bar and action bar
  * Gnome-shell v43: Quick-settings - Improve toggle buttons appearance
  * Gnome-shell: Fix page navigation arrow appearance
  * Gnome 43: Fix nautilus sidebar appearance
  * Gnome 43: Fix nautilus pathbar appearance
  * Gnome-shell v43: Add styles for quick settings menu
  * Gnome 42: Fix nautilus path bar buttons appearance in hover state
  * KDE: Plasma-solid - Update tasks indicator appearance
  * Gnome 42: Fix nautilus path bar buttons appearance
  * Xfce: Thunar - Reduce padding in sidebar items to prevent scrolling
  * KDE: Plasma - Update tasks indicator appearance
  * Cinnamon: Nemo -  Improve appearance of highlighted items in sidebar
  * Gnome-shell: Fix app folders dialog appearance in Zorin OS
  * KDE: Kvantum - Update sliders color
  * Gnome-shell: Fix visual issues in Zorin OS
- Define explicit Provides/Obsoletes for the various subpackages</changelog>
  <changelog author="maurizio.galli@suse.com" date="1676116800">- Update to version 3.0+git94.9840b6b:
  * Gnome 43: Improve popovers appearance
  * Gnome 43: Fix treeviews header appearance
  * Gnome 43: Improve nautilus pathbar appearance
  * Gnome 43: Fix spacing in nautilus list rows
  * Xfce v4.18: Fix odd transparency in panel items
  * Gnome-shell v43: Improve sliders appearance
  * Xfce v4.18: Fix invisible items in thunar sidebar
  * Gnome 43: Fix background color of tab bar and action bar
  * Gnome-shell v43: Quick-settings - Improve toggle buttons appearance
  * Gnome-shell: Fix page navigation arrow appearance</changelog>
</package>
<package pkgid="1248ed6de1d81eb8bd10d8ab40681fe29599b20a04835370b74d8eeb12e8a9a3bcbf0dc35e4b7c4f10604a6c2f37cd2975a5ad7f965f79323f3a6fcb1c663a06" name="cint-devel" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="bp160.1.12"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1598961600">- Initial package release.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1599134400">- Fix devel dependency.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1599220800">- Clean up spec file.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1605182400">- Update to version 4.0.6.
  * Fix return value bug in rysroots
- Update since 3.1.1.
  * Fix prescreening bug in int3c2e
  * Fix cache size bug in int3c1e
  * Fix memory allocation bug in int3c1e
  * Improve macro MALLOC_INSTACK
  * Fix function typedef bug in include/cint_funcs.h
  * Update cmake configs and docs
  * API Change. PTR_LIGHT_SPEED is replaced with PTR_EXPCUTOFF.
    Integral screening parameter can be passed through
    env[PTR_EXPCUTOFF]
  * Add short-range integrals for range-separation
  * Handle linear dependency in Rys polynomial
  * Avoid calling exit function</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1610452800">- Update to version 4.0.7.
  * Fix bug in rys_roots when R_dsmit fails to find all roots.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1623931200">- Update to version 4.4.1.
  * Fix bugs in int1e_grids for attenuated Coulomb operators
- Updates for version 4.4.0.
  * Fix bugs in c2s transfomration for int1e_grids
  * Fix bugs int1e_grids code generator
  * Refactor cart2sph
  * Refactor int1e drivers
- Updates for version 4.3.0.
  * Add new integral type int1e_grids
  * Fix cache size type
- Updates for version 4.1.3.
  * Fix memory address int32 overflow for heavily contracted basis
- Updates for version 4.1.2 .
  * Fix a bug due to significant digits of float128 in the core Fmt integrals
- Updates for version 4.1.1.
  * Fix bug in short-range Coulomb core integrals
- Updates for version 4.1.0.
  * Add new Rys roots and weights algorithm
  * Improve integral accuracy for high angular momentum basis
  * Improve integral accuracy for short-range Coulomb integrals
  * Add supports of 2-e integrals up to l=15
- Add patch fix_control_reaches_end_of_non-void_function.patch
  Fix error control reaches end of non-void function in int3c2e.c
  Patch fixed upsteam.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700049600">- update to 5.5.0:
  * Fix memory leak issue in int4c1e
  * Add polynomial root finder with eigenvalue algorithm
  * Fitting Rys roots of SR integrals with Chebyshev polynomials
  * New integrals related to LRESC
  * Supports Gaussian model for int1e_grids
  * Add constant PTR_FRAC_CHARGE for QM/MM interface in pyscf
  * Improves rys-roots numerical stability in the near-zero limit
  * Improves rys-roots finder accuracy
  * Improve error handling for SR-ERI integrals
  * Optimize SR-ERI integral screening
  * Fix approx_log bug for non-x86 architecture
  * Fix integer overflow error in cintopt initialization
  * Boundary check when initializing CINTOpt
  * Add 4-center 1-electron intergral int4c1e
  * New integral int3c1e_ip1
  * New integral int1e_r4
  * Missing cart2sph function for l=15
  * Fix cint3c1e_cart integral
  * Fix integer overflow in gto_norm function
  * Update cint.h to make CINTEnvVars closed to the definition in
    qcint
  * Improve the cartesian-spinor transformation
  * Remove the dependency to BLAS library
  * Update the header file cint.h
  * Update the drivers for cint2e, cint3c2e, cint3c1e, cint2c2e
  * Fix uninitialized variables in rys_roots
  * Fix Cartesian-spherical and Cartesian-spinor transformation
    coefficients
  * Fix divide-by-0 bug
  * Improve performance of quadruple precision rys-roots function
  * Improve short-range rys-roots accuracy
- drop fix_control_reaches_end_of_non-void_function.patch
  (upstream)</changelog>
</package>
<package pkgid="f510e4b6e55a6cf71c7a29e759b6d030958f2a63fa6b52c406cb5e322753be5ec9da5f401a4f2cf6b6670dc2e14a63a28148b8fe73d71ac591417849ad846f68" name="civetweb" arch="x86_64">
  <version epoch="0" ver="1.16" rel="bp160.1.13"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545480000">- Initial build at version 1.11.
  Thanks to malcolmlewis for helping with the specfile</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add fix-libpath.patch to fix library install directory</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1594382400">- version 1.12
  * fix-libpath.patch removed
  * See https://github.com/civetweb/civetweb/releases/tag/v1.12 for detailed changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604491200">- version 1.13
  * Add arguments for CGI interpreters
  * Support multiple CGi interpreters
  * Buffering HTTP response headers, including API functions mg_response_header_* in C and Lua
  * Additional C API functions
  * Fix some memory leaks
  * Extended use of atomic operations (e.g., for server stats)
  * Add fuzz tests
  * Set OpenSSL 1.1 API as default (from 1.0)
  * Add Lua 5.4 support and deprecate Lua 5.1
  * Provide additional Lua API functions
  * Fix Lua websocket memory leak when closing the server
  * Remove obsolete "file in memory" implementation
  * Improvements and fixes in documentation
  * Fixes from static source code analysis
  * Additional unit tests
  * Various small bug fixes
  * Experimental support for some HTTP2 features (not ready for production)
  * Experimental support for websocket compression
  * Remove legacy interfaces declared obsolete since more than 3 years</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.14
  * Change SSL default setting to use TLS 1.2 as minimum (set config if you need an earlier version)
  * Add local_uri_raw field (not sanitized URI) to request_info
  * Additional API functions and a callback after closing connections
  * Allow mbedTLS as OpenSSL alternative (basic functionality)
  * Add OpenSSL 3.0 support (OpenSSL 3.0 Alpha 13)
  * Support UNIX/Linux domain sockets
  * Fuzz tests and ossfuzz integration
  * Compression for websockets
  * Restructure some source files
  * Improve documentation
  * Fix HTTP range requests
  * Add some functions for Lua scripts/LSP
  * Build system specific fixes (CMake, MinGW)
  * Update 3rd party components (Lua, lfs, sqlite)
  * Allow Lua background script to use timers, format and filter logs
  * Remove WinCE code
  * Update version number</changelog>
  <changelog author="Perry Werneck &lt;perry.werneck@gmail.com&gt;" date="1620648000">- Enabling cmake control file and cpp library.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634904000">- version 1.15
  * Security update boo#1191938
  * New configuration for URL decoding
  * Sanitize filenames in handle form
  * Example “embedded_c.c”: Do not overwrite files (possible security issue)
  * Remove obsolete examples
  * Remove “experimental” label for some features
  * Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or earlier
  * Modifications to build scripts, required due to changes in the test environment
  * Unix domain socket support fixed
  * Fixes for NO_SSL_DL
  * Fixes for some warnings / static code analysis</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651752000">- do not load libcrypto/libssl dynamically, just link against them (bsc#1199047)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684324800">- Update to version 1.16:
  * Enable IPv6 as default when using CMake
  * Define error codes for mg_start2, mg_start_domain2, mg_connect_client2
  * Fixes for OpenSSL 3.0 support
  * Add support for Mbed TLS v3.0.0
  * WebDAV should understand Windows File Explorer (experimental)
  * Accept HTTP basic authentication
  * Make pattern matching function availible in the public interface
  * Make base64 encoding and decoding functions available
  * Various fixes for HTTP/2 support
  * Additional examples
  * Fixes and updates to existing examples
  * Fix spelling errors in code and documentation
  * Remove Conan support
  * Known Issues:
    The WebDAV support when using the Windows Explorer as client has various limitations when renaming or moving files and folders.
    In particular file names in non-latin characters may break when running the server on Linux and connecting with the Windows Explorer.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1702900800">- explicit compiler options for websockets, zlib, ssl and ssl v3 added</changelog>
</package>
<package pkgid="0d6cc29fa5a72b7ea1b6c5f1c58526ecfbb3ddfd33fda6677399c22ce9096465aeaa3c5d8aab6a12d3cc71c44e3d9c015e093d5e9c6df419652da9aae48d5066" name="civetweb-devel" arch="x86_64">
  <version epoch="0" ver="1.16" rel="bp160.1.13"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545480000">- Initial build at version 1.11.
  Thanks to malcolmlewis for helping with the specfile</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add fix-libpath.patch to fix library install directory</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1594382400">- version 1.12
  * fix-libpath.patch removed
  * See https://github.com/civetweb/civetweb/releases/tag/v1.12 for detailed changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604491200">- version 1.13
  * Add arguments for CGI interpreters
  * Support multiple CGi interpreters
  * Buffering HTTP response headers, including API functions mg_response_header_* in C and Lua
  * Additional C API functions
  * Fix some memory leaks
  * Extended use of atomic operations (e.g., for server stats)
  * Add fuzz tests
  * Set OpenSSL 1.1 API as default (from 1.0)
  * Add Lua 5.4 support and deprecate Lua 5.1
  * Provide additional Lua API functions
  * Fix Lua websocket memory leak when closing the server
  * Remove obsolete "file in memory" implementation
  * Improvements and fixes in documentation
  * Fixes from static source code analysis
  * Additional unit tests
  * Various small bug fixes
  * Experimental support for some HTTP2 features (not ready for production)
  * Experimental support for websocket compression
  * Remove legacy interfaces declared obsolete since more than 3 years</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.14
  * Change SSL default setting to use TLS 1.2 as minimum (set config if you need an earlier version)
  * Add local_uri_raw field (not sanitized URI) to request_info
  * Additional API functions and a callback after closing connections
  * Allow mbedTLS as OpenSSL alternative (basic functionality)
  * Add OpenSSL 3.0 support (OpenSSL 3.0 Alpha 13)
  * Support UNIX/Linux domain sockets
  * Fuzz tests and ossfuzz integration
  * Compression for websockets
  * Restructure some source files
  * Improve documentation
  * Fix HTTP range requests
  * Add some functions for Lua scripts/LSP
  * Build system specific fixes (CMake, MinGW)
  * Update 3rd party components (Lua, lfs, sqlite)
  * Allow Lua background script to use timers, format and filter logs
  * Remove WinCE code
  * Update version number</changelog>
  <changelog author="Perry Werneck &lt;perry.werneck@gmail.com&gt;" date="1620648000">- Enabling cmake control file and cpp library.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634904000">- version 1.15
  * Security update boo#1191938
  * New configuration for URL decoding
  * Sanitize filenames in handle form
  * Example “embedded_c.c”: Do not overwrite files (possible security issue)
  * Remove obsolete examples
  * Remove “experimental” label for some features
  * Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or earlier
  * Modifications to build scripts, required due to changes in the test environment
  * Unix domain socket support fixed
  * Fixes for NO_SSL_DL
  * Fixes for some warnings / static code analysis</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651752000">- do not load libcrypto/libssl dynamically, just link against them (bsc#1199047)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684324800">- Update to version 1.16:
  * Enable IPv6 as default when using CMake
  * Define error codes for mg_start2, mg_start_domain2, mg_connect_client2
  * Fixes for OpenSSL 3.0 support
  * Add support for Mbed TLS v3.0.0
  * WebDAV should understand Windows File Explorer (experimental)
  * Accept HTTP basic authentication
  * Make pattern matching function availible in the public interface
  * Make base64 encoding and decoding functions available
  * Various fixes for HTTP/2 support
  * Additional examples
  * Fixes and updates to existing examples
  * Fix spelling errors in code and documentation
  * Remove Conan support
  * Known Issues:
    The WebDAV support when using the Windows Explorer as client has various limitations when renaming or moving files and folders.
    In particular file names in non-latin characters may break when running the server on Linux and connecting with the Windows Explorer.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1702900800">- explicit compiler options for websockets, zlib, ssl and ssl v3 added</changelog>
</package>
<package pkgid="20a032e5e3d02ed8c4815c3d64b940247259ffc01a1557d610730cab5ebfe7ee300a74432066403574a3ab85108b3fab0b8fde3683b00a05bd82d412e19ccc91" name="cjs" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1608984000">- Update to version 4.8.1.
  * No important changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1609416000">- Do not add RPM dependencies for installed-tests: some tests there
  are intentionally crafted to 'fail' with missing deps. The dep
  scanner would not know though.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1610625600">- Update to version 4.8.2.
  * Rebase on gjs 1.66.1.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622116800">- Update to version 5.0.0.
  * fix readline build on certain systems
  * overrides/Gtk: Set BuilderScope in class init
  * gi/wrapperutils: Move gjs_get_string_id() into resolve()
    implementations
  * Revert "arg-cache: Save space by not caching GType"
  * Fixed error in _init() that prevented GType objects from being
    created. Improved the regression test, implementing Marco T's
    feedback.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1693310400">- update to version 5.8.0
  * GObject: Handle versions of GLib without GBindingGroup
  * switch to mozjs102</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * fix(build, tests): move `have_gtk4` to the appropriate place
  * Fix meson.build deprecations up to 0.56.0</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1706875200">- Use BuildRequires readline-devel for Leap15
  * SLE15's readline-devel doesn't have pkgconfig file, readline-devel
    should be used at the buildtime</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1723550400">- update to 6.2.0:
  * packaging: Forbid compilation if the symbols file is outdated
  * Port to mozjs115
- update spec file to reflect newer standards</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724673600">- Drop cmake and libtool BuildRequires: the package uses meson to
  build and has no need for the additional two build systems.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732708800">- update to 6.4.0:
  * gjs-util: Backport private closure annotations patch
  * Fix meson.build deprecations up to 0.56.0</changelog>
</package>
<package pkgid="218077285fce3627de4ed766a3d05551f5558f15b81b3fa60f6fc8fc958576b0edfa900abfe1566bbe0236c015c8198c9b777e4a233ccb1de0fc7ea2cdeeeac6" name="cjs-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="bp160.1.6"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1608984000">- Update to version 4.8.1.
  * No important changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1609416000">- Do not add RPM dependencies for installed-tests: some tests there
  are intentionally crafted to 'fail' with missing deps. The dep
  scanner would not know though.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1610625600">- Update to version 4.8.2.
  * Rebase on gjs 1.66.1.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1622116800">- Update to version 5.0.0.
  * fix readline build on certain systems
  * overrides/Gtk: Set BuilderScope in class init
  * gi/wrapperutils: Move gjs_get_string_id() into resolve()
    implementations
  * Revert "arg-cache: Save space by not caching GType"
  * Fixed error in _init() that prevented GType objects from being
    created. Improved the regression test, implementing Marco T's
    feedback.</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1693310400">- update to version 5.8.0
  * GObject: Handle versions of GLib without GBindingGroup
  * switch to mozjs102</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 6.0.0:
  * fix(build, tests): move `have_gtk4` to the appropriate place
  * Fix meson.build deprecations up to 0.56.0</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1706875200">- Use BuildRequires readline-devel for Leap15
  * SLE15's readline-devel doesn't have pkgconfig file, readline-devel
    should be used at the buildtime</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1723550400">- update to 6.2.0:
  * packaging: Forbid compilation if the symbols file is outdated
  * Port to mozjs115
- update spec file to reflect newer standards</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724673600">- Drop cmake and libtool BuildRequires: the package uses meson to
  build and has no need for the additional two build systems.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732708800">- update to 6.4.0:
  * gjs-util: Backport private closure annotations patch
  * Fix meson.build deprecations up to 0.56.0</changelog>
</package>
<package pkgid="7f07fe686549380df2138dbe3a51dc7fab8bcd36f316b4b179bdb2b779f6f57cb346be1f509ed3b18a3d0ad9ae04f026a70facb473c9bf7f8490a7fc1c0d8f8c" name="ck-devel" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="bp160.1.9"/>
  <changelog author="mrueckert@suse.de" date="1453896000">- include license file
- explain why we don't use the configure macro</changelog>
  <changelog author="mpluskal@suse.com" date="1493208000">- Update to version 0.6.0</changelog>
  <changelog author="mpluskal@suse.com" date="1493208001">- Disable s390 building as it is not supported architecture</changelog>
  <changelog author="mpluskal@suse.com" date="1495022400">- Add _constraints to avoid test failures</changelog>
  <changelog author="mpluskal@suse.com" date="1524052800">- Small packaging changes</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1560859200">- Add ck-fix-j1.patch to fix build with -j1</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570622400">- Disable tests as they fail with gcc9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1572350400">- Fix symbol name clash between glibc 2.30 and ck, add
  ck-fix-gettid-glibc-clash.patch
- Reenable tests again</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1625400000">- Update to version 0.7.1
  * Add s390x support
  * ck_hs: add convenience hash function wrapper ck_hs_hash
  * ck_backoff: avoid dead store to ceiling
  * ck_ring: add two new utility functions for persistent rings
  * ck_sequence: reduce thread count to account for writer
  * ck_queue: fix logic inversion in CK_STAILQ_CONCAT
  * ck_epoch: allow record sharing and reentrancy for write-side operations
- Drop upstream merged patches: ck-fix-gettid-glibc-clash.patch,
  ck-fix-j1.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1722340800">- Update to version 0.7.2:
  * This release adds support for riscv, as provided by Mitchell Horne, as well a miscellaneous bug fixes and improvments
- Enable building for all architectures</changelog>
</package>
<package pkgid="e9e04ac3d10bcbb2a12f0ad8595d2131a13105e4a68ea55c1426ea834c329052a40b4245af2fe98051919a19c3254a55482ef88d271bf24ed7812cae4ff66b4d" name="ckb-next" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="bp160.1.13"/>
  <changelog author="Jannik Seiler &lt;seil0@mosad.xyz&gt;" date="1598702400">- Adjust ckb-next-systemd.patch to the change for %_libexecdir</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1608292800">* Update to version 0.4.3
  Support for new devices:
  * Scimitar RGB Elite
  * Nightsword RGB
  Important bugfixes:
  * Fixed delay when shutting down with K95 RGB
  * Fixed freezing when updating indicator LEDs
  * Indicator LEDs are now more responsive when an animation is
    playing
  * GUI now starts hidden in tray on KDE
  * The pipe animation now works consistently between mode
    changes
  * The pipe animation now handles input commands sent in rapid
    succession before the device is updated
  * Input works on wayland again after recent updates
  * libgdx based games no longer crash on mouse input
  * Mouse settings are now correctly restored when resuming from
    suspend
  * Fixed a bug where some devices would not be initialised on
    daemon start and would require a replug
  * Fixed layouts for K68, K65, K63, M95
  New features:
  * Under X11 only, lights can now automatically turn off after
    a user-set time
  * Macros now loop when the key is held down
  * Macro UI has been redesigned and supports recording from non
    ckb-next managed keyboards
  * Modes can now be changed automatically based on the current
    focused application (X11/XWayland Only)
  * Translations are now supported
  Notes for packagers:
  * The systemd unit directory can be overriden with
  - DSYSTEMD_UNIT_INSTALL_DIR
  * libappindicator is no longer used
  * Minimum Qt version has been bumped up to 5.5.1 (xenial)
  * cmake now checks for quazip 1.0
  * The following new dependencies have been introduced: Qt5
    X11Extras, xcb, xcb-screensaver, xcb-ewmh, Qt5 translation
    tools, dbusmenu-qt5
- Refresh ckb-next-use-run.patch, ckb-next-systemd.patch and
  422.patch
- Drop ckb-next-gcc10.patch (merged upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1616068800">- Update to version 0.4.4
  Important bugfixes:
  * Fixed a crash when creating a new profile
  * Fixed lights turning off unexpectedly or not being restored
    correctly
  * Macros can now be repeated quickly by repeatedly pressing
    the keys
  * Fixed various deadlocks when resuming from suspend or during
    device initialisation
  * Fixed devices not functioning during system boot requiring a
    daemon restart
- Refreshed ckb-next-use-run.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1623067200">- Fix fix double slash in //bin/bash requirement</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1629979200">- Added hardening to systemd service(s). Added patch(es):
  * harden_ckb-next-daemon.service.patch</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1630065600">- Re-labeled 422.patch
- Updated harden_ckb-next-daemon.service.patch to fix
  gh#ckb-next/ckb-next#740</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1653652800">- Update to version 0.5.0
  Support for new devices:
  * Katar Pro
  * Katar Pro XT
  * Glaive Pro
  * M55
  * K60 Pro RGB
  * K60 Pro RGB Low Profile
  * K60 Pro RGB SE
  Important bugfixes:
  * Scroll wheels are now treated as axes (Responsiveness should
    be improved for specific mice)
  * The lights on the K95 RGB Platinum top bar are now updated
    correctly
  * An infinite loop is prevented if certain USB information can
    not be read
  * GUI no longer crashes on exit under certain conditions
  * Mouse scrolling works again when combined with specific
    libinput versions
  * The daemon no longer hangs when quitting due to LED keyboard
    indicators
  * The lighting programming key can now be rebound on K95 Legacy
  * Animations won't break due to daylight savings / system time
    changes
  * GUI doesn't crash when switching to a hardware mode on a
    fresh installation
  * Daemon no longer causes a kernel Oops on resume under
    certain conditions (Devices now resume correctly from sleep)
  * Window detection is more reliable and works correctly on
    system boot
  * Settings tab now stretches correctly
  * Profile switch button can now be bound correctly on mice
  * ISO Enter key is now aligned correctly
  * Bindings are now consistent between demo and new modes
  * Firmware update dialog is no longer cut off and can be
    resized
  * RGB data won't be sent to the daemon when brightness is set
    to 0%
  New features:
  * German translation
  * 66 service (not installed automatically)
  * Device previews are now resizable
- Refresh ckb-next-use-run.patch</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1681128000">- Add fix_buffer_overflow_FORTIFY_SOURCE.patch (see
  gh#ckb-next/ckb-next/issues#940)</changelog>
  <changelog author="Jannik Seiler &lt;seil0@mosad.xyz&gt;" date="1687694400">- Update to version 0.6.0
  Support for new devices:
  * K55 RGB PRO
  * K55 RGB PRO XT
  * K60 PRO (Monochrome)
  * K60 PRO TKL RGB
  * Dark Core RGB Pro (experimental)
  * Dark Core RGB Pro SE (experimental)
  * Slipstream wireless dongle (when paired with a single supported device)
  Important bugfixes:
  * The Fn key now behaves as expected on the K65
  * The GUI now accepts macros containing the ISO backslash key
  * A workaround is now implemented to prevent the media keys on the Strafe from getting stuck pressed
  * The daemon no longer crashes with a buffer overflow detected message on start under certain conditions
  * The WinLock LED now functions on the K55 RGB and K55 RGB Pro XT
  * The GUI no longer crashes under certain conditions when the sound server is being restarted
  * The battery states are now reported correctly in the GUI
  * The brightness is now correctly set for newer devices (and the lights now turn off instantly)
  New features:
  * The device previews are now rendered using the GPU
  * Horizontal scrolling is now available for binding
  * The mute indicator can now indicate either the default output or input audio device
  * The music visualizer now supports automatic gain control, automatically adapting to volume changes
  * It is now possible to pair wireless devices with dongles (not in GUI yet)
- Refresh ckb-next-use-run.patch
- Refresh 422.patch
- Drop fix_buffer_overflow_FORTIFY_SOURCE.patch, fixed upstream</changelog>
</package>
<package pkgid="fbcd5cd0c86be3718552decfd8290d19d45dc6dfc91eacc6d7b5f42c7cccf6a4e451327c499ea62fe84ebc1d32abda0a5cc0c0f1b97491baec351cfae59876be" name="ckermit" arch="x86_64">
  <version epoch="0" ver="9.0.302" rel="bp160.1.1"/>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="Joop Boonen &lt;joop.boonen@opensuse.org&gt;" date="1551960000">- Fixed time and file failure via time_and_file_failure.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1688990400">- drop lockdev support (boo#1212801)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1698235200">- Drop termcap BuildRequires: no longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1734609600">- Add patch:
  * gcc14.patch
- Run spec-cleaner</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1749556800">- respect %optflags
- create and set lock directory in a way, that dialout members can use tty</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1760961600">- remove unused variables CFLAGS and CXXFLAGS
- add option -std=gnu11 to KFLAGS
  * fix build with gcc15</changelog>
  <changelog author="Michal Hrusecky &lt;michal@hrusecky.net&gt;" date="1767614400">- pass -std=gnu89 to fix compilation issues</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- add patches from debian:
  * default-transfer-mode.patch (default to manual mode, binary)
  * remote-security.patch (CVE-2025-68920)
    Malicious remote can overwrite and exfiltrate local files
    (bsc#1255718)</changelog>
</package>
<package pkgid="a9fe022f449f3facb27b98af218a978e4adf5a3f118596ce7bb9f0857756efb175849f484d366b4c1f52cc19b03575503e93240de29cfc38183f47a2e98661f8" name="ckermit-doc" arch="noarch">
  <version epoch="0" ver="9.0.302" rel="bp160.1.1"/>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="Joop Boonen &lt;joop.boonen@opensuse.org&gt;" date="1551960000">- Fixed time and file failure via time_and_file_failure.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1688990400">- drop lockdev support (boo#1212801)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1698235200">- Drop termcap BuildRequires: no longer needed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1734609600">- Add patch:
  * gcc14.patch
- Run spec-cleaner</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1749556800">- respect %optflags
- create and set lock directory in a way, that dialout members can use tty</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1760961600">- remove unused variables CFLAGS and CXXFLAGS
- add option -std=gnu11 to KFLAGS
  * fix build with gcc15</changelog>
  <changelog author="Michal Hrusecky &lt;michal@hrusecky.net&gt;" date="1767614400">- pass -std=gnu89 to fix compilation issues</changelog>
  <changelog author="Ruediger Oertel &lt;ro@suse.de&gt;" date="1768392000">- add patches from debian:
  * default-transfer-mode.patch (default to manual mode, binary)
  * remote-security.patch (CVE-2025-68920)
    Malicious remote can overwrite and exfiltrate local files
    (bsc#1255718)</changelog>
</package>
<package pkgid="4718bffb6b5570da34b7690083810683e1e46aca4eb94951649529db63380ac102c02d9bb84bea2eafecc0e70e7710f01518014879681d354009d46ce276e121" name="clBLAS-devel" arch="x86_64">
  <version epoch="0" ver="2.12+git.20170323.cf91139" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1701259200">- Initial package.</changelog>
</package>
<package pkgid="1f6d4a029b32786091caeaba443388897e9e6596abd99de8ab53c5add9f57011a650f07adab38a6c1b9adf8cd8ac49a40a770a5989233e496fe945ac7a33c01b" name="clFFT" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="bp160.1.12"/>
  <changelog author="mardnh@gmx.de" date="1499947200">- Initial package, version 2.12.2</changelog>
  <changelog author="mpluskal@suse.com" date="1500379200">- Split shared libraries
- Do not build on unsupported (32-bit) architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1500638400">- Update rpm group</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1507723200">- Do not pull boost-devel on Factory (bsc#1062774)</changelog>
  <changelog author="mardnh@gmx.de" date="1508673600">- Add patch:
  * clFFT-fix-aarm64.patch (Fix build for aarch64)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574251200">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1625140800">- Add clFFT-avoid-rvalue-address.patch: Fix building with gcc11
  (which is stricter about referencing rvalue addresses) by using
  ostringstream object directly rather its pointer
  [gh#clMathLibraries/clFFT#237].
- Add opencl-headers and pkgconfig(OpenCL) to -devel package
  Requires as these are referenced by clFFT headers and library.
- Use %license for LICENSE file.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1653307200">- clFFT-fix-aarm64.patch: also needed for riscv64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="c3a5be321f698808e929d4ed78a7dd40aa9fed8546ab55db22c2b2031e0da0c44b06a3d82cda813c24bad46d17992d95087748c21e1b6c9cafaed8ab2f747649" name="clFFT-devel" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="bp160.1.12"/>
  <changelog author="mardnh@gmx.de" date="1499947200">- Initial package, version 2.12.2</changelog>
  <changelog author="mpluskal@suse.com" date="1500379200">- Split shared libraries
- Do not build on unsupported (32-bit) architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1500638400">- Update rpm group</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1507723200">- Do not pull boost-devel on Factory (bsc#1062774)</changelog>
  <changelog author="mardnh@gmx.de" date="1508673600">- Add patch:
  * clFFT-fix-aarm64.patch (Fix build for aarch64)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574251200">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1625140800">- Add clFFT-avoid-rvalue-address.patch: Fix building with gcc11
  (which is stricter about referencing rvalue addresses) by using
  ostringstream object directly rather its pointer
  [gh#clMathLibraries/clFFT#237].
- Add opencl-headers and pkgconfig(OpenCL) to -devel package
  Requires as these are referenced by clFFT headers and library.
- Use %license for LICENSE file.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1653307200">- clFFT-fix-aarm64.patch: also needed for riscv64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b3a528165745e5f7bd70991fa031d280ac3f0b2d669b49a49a1bf2c4b279833ddfd9ac3336bf535cc3201aadebbddbf7004343e49ca60526902b3e7a0a7cef11" name="clagrange" arch="x86_64">
  <version epoch="0" ver="1.18.5" rel="bp160.1.5"/>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1699099200">- update to 1.17.3
  - Fixed activating a pinned identity when opening a bookmark via the Bookmarks
    menu.
  - Fixed initial scope of a created identity when using the default selection.
  - Fixed issues with dropdown menus when the menu appears as a popup window.
  - Fixed clearing the pinned identity of a bookmark.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1700481600">- update to 1.17.4
  - Removed automatic horizontal scrolling of wide preformatted blocks. Instead,
    hold down the Shift key to scroll horizontally with the mouse wheel.
  - Fixed an event processing issue where some events were not handled as
    expected, for instance when opening a link into split view the opened link
    was not highlighted.
  - Fixed links not reacting to mouse hover after jumping to a heading from the
    Outline.
  - Fixed input prompt behaving strangely after changing font size. (Lines are
    now forced to rewrap after changing the font.)
  - Fixed mouse cursor not changing its shape in all open windows.
  - Updated UI translations.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1702382400">- update to 1.17.5
  - Fixed a few small memory leaks.
  - Fixed unnecessary copying of data while waiting for an audio buffer to
    become playable.
  - Gopher: Detect audio media type from file extension with the s item type
    (it's not always WAV).
  - Content that uses charset=utf-8 is checked for validity. If the encoding is
    invalid, the content is instead decoded as CP437 (if it has ANSI escapes;
    possibly it's ASCII art) or just Latin-1.
  - Remove ANSI escapes from window titles.
  - Modified rule for when 'text/plain' is assumed to actually be 'text/gemini'
    based on the file extension.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1705406400">- update to 1.17.6
  - Fixed memory leak: fetched pages were not always released from memory
    (reference miscount).
  - Fixed minor memory leak in list widgets.
  - Gopher: Autodetect Gemtext files based on file extension.
  - Updated UI translations.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1726920000">- update to 1.18.0
  - New features:
  - Support for sending Misfin messages. "misfin://" links are opened in the
    upload dialog. You must import a Misfin identity before you can send a
    message.
  - Misfin: Identity sidebar indicates which identities are for Misfin.
  - Support for the Guppy protocol. Contributed by Dima Krasner.
  - Titan: Support for the "edit" parameter in opened Titan links. The
    target's contents are downloaded and displayed in the upload dialog's text
    editor. After editing the contents are uploaded back to the server.
  - Option to disable all TLS security warnings.
  - Opus audio playback using libopusfile (optional dependency). Contributed
    by Martin Chang.
  - Changes and enhancements:
  - The Curses-based clagrange can be built in addition to the GUI, not only
    separately. Removed the TUI build script.
  - Improved UI focus navigation: arrow keys move focus to an adjacent widget.
  - Context menus are keyboard-navigable with arrow keys, and the first letter
    of labels acts as a shortcut key to move focus on the item.
  - Bookmarked URLs are automatically updated after permanent redirection.
    (The original URL is still saved in bookmarks.ini.)
  - Line width expands dynamically (up to window size) to account for wide
    content like preformatted blocks and plain text lines.
  - The file path can be entered manually in the upload dialog. Previously
    only drag-and-drop was supported.
  - Right-clicking on the site banner shows a link context menu. (Linking to
    the capsule's root URL.)
  - Show a confirmation popup when saving something to the downloads folder.
  - Menubar: When opened via keyboard, reopen the most recently opened menu
    instead of "File".
  - The Return key is now a (hardcoded) keyboard shortcut for focusing the
    navbar URL field.
  - Page Information: Clarified meaning of "fingerprint". The type of hash
    (SHA-256) and what it was calculated from are specified (full certificate
    or just the public key).
  - Updated UI symbols for "Go to Root", remote bookmarks, and the navbar
    bookmark indicator/button.
  - Gopher: Proper parsing of Telnet line types 8 and T.
  - Noto Emoji font updated to support Unicode 15.1.
  - TUI: Often needed keyboard shortcuts are shown in place of menubar when
    the menubar is inactive, to make the UI more approachable.
  - TUI: Improved UI layout, targeting a minimum resolution of 80x25.
  - TUI: Improved text-mode rendering of various widgets.
  - Fixes:
  - Titan URLs were incorrectly opening the upload dialog when navigating
    through history.
  - Titan request in an open tab was resubmitted with empty content when
    launching the app.
  - Default Titan upload identity was sometimes chosen incorrectly; should
    match the active Gemini identity.
  - Upload dialog was missing a couple of UI strings for drag-and-drop errors.
  - Gopher: Gemtext formatting (headings, quotes, etc.) found on Gopher menu
    pages is now escaped so it doesn't unintentionally affect the visual
    presentation.
  - Gopher: Allow port number to be blank on i lines.
  - Query shortcuts (bang snippets) that already contain a ? character were
    prefixed by a redundant ?.
  - Link ordinals/letters (when navigating with Alt/Option or home row keys)
    now start at the actual top of the view.
  - Incorrect event handling order with multiple windows when there is a
    focused widget.
  - macOS: Navigating with trackpad on a non-focused window would cause the
    navigation to occur in another window, if the other window had focus.
  - Missing focus indication in empty lists and the Snippets list.
  - Holding down Alt/Option (link number modifier key) while opening a query
    link would prevent the prompt dialog from having input focus.
  - Incorrect glyph spacing in a mixed-font preformatted block (fallback
    glyphs from different fonts).
  - Lede paragraph highlighting was misbehaving with monospace body font; now
    gets disabled.
  - Glyphs were sometimes partially cut off due to excessive background
    clearing on adjacent lines.
  - TUI: Color escapes were not applied when rendering.
  - TUI: Submenu chevron symbols were missing.
  - TUI: Potential hang when wrapping text.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1727784000">- update to 1.18.1
  - TUI: Fixed potentially garbled output.
  - TUI: Only link Curses statically when using CMake option ENABLE_STATIC.
  - Updated UI translations.
- created clagrange subpackage</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1728907200">- update to 1.18.3
  - TUI: Fixed background colors in reduced color modes (less than 256 colors).
- update to 1.18.2
  - Misfin: URI format has changed to "misfin:address?message" instead of the
    previously used "misfin://address". The optional query string ("message") is
    used as the initial message contents if the upload dialog's text editor is
    empty.
  - Increased number of concurrent feed subscription requests (now 10, was 4).
  - Potential workaround for a crash during feed refresh.
  - Fixed redirection counting (and related warnings) when requesting Titan
    URIs.
  - Fixed perpetual load spinner animation when redirected to a Titan URL.
  - TUI: Fixed Identities sidebar not responding to the context menu action.
  - TUI: Fixed screen not being refreshed when a key is held down.
  - TUI: Fixed black cursor on empty regions of the screen, regardless of text
    color.
  - TUI: Fixed footer button shortcut keys for trusting the server certificate
    and showing Identities sidebar.
  - TUI: Fixed dimensions of the New Identity dialog.
  - TUI: Fixed first-run bookmarks getting re-added on every launch.
  - Updated UI translations.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1733918400">- update to 1.18.4
  - Added option to disable page width expansion to fit long lines.
  - Limited page width expansion to 33% so room is left for the current title in
    the margin.
  - Audio player UI shows number of downloaded bytes if length of audio is still
    unknown.
  - Strip CR characters in content pasted to input fields. Line breaks are
    expected to be just LFs.
  - Fixed use of non-Gemini search URLs. (Do not force-prepend "gemini://".)
  - Fixed handling of the reserved : character in URL paths.
  - TUI: Fixed possible crash at launch.
  - Updated UI translations.</changelog>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1741521600">- update to 1.18.5
  - Fixed a potential crash when browsing to a bookmarked page due to
    inadvertent ID number overflow. (Courtesy of @cthulhu.)
  - Erase possible link icon leftovers after toggling link numbering.
  - Fixed hang when encountering the U+FDFD character.
  - Fixed layout issue with empty list widgets (focus border only partially
    visible).
  - Updated UI translations.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742817600">- build with pcre2</changelog>
</package>
<package pkgid="a91b8bf0f80243174fa88335e95721dad1addfbb988302ef11d1169c35f248141c34fa826b5b3bd3a718215401bfcd0733a244b6f8ee9a93333156c76ecb5320" name="clair" arch="x86_64">
  <version epoch="0" ver="4.7.4" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- new package clair: Vulnerability Static Analysis for Containers,
  including the clairctl CLI</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156801">- Update to version 4.7.4:
  * chore: 4.7.4 changelog bump
  * chore: Add merge step when creating release binaries
  * chore: update go version for release
  * chore: update claircore to v1.5.27
  * chore: update go version
  * Dockerfile: remove sh loop
  * cicd: add container version skew check
  * cicd: update testing workflow
  * cicd: don't upload workspace on failure
  * cicd: change version specifiers to be major-version only</changelog>
</package>
<package pkgid="64dea1a890c176347578e078901cdb8b6c632a9f6cb65af87e900f56bf3f1451ac72493996b8c38d4169d6efd5affedd9632eb5e407648156802c943ef8cb028" name="clairctl" arch="x86_64">
  <version epoch="0" ver="4.7.4" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- new package clair: Vulnerability Static Analysis for Containers,
  including the clairctl CLI</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156801">- Update to version 4.7.4:
  * chore: 4.7.4 changelog bump
  * chore: Add merge step when creating release binaries
  * chore: update go version for release
  * chore: update claircore to v1.5.27
  * chore: update go version
  * Dockerfile: remove sh loop
  * cicd: add container version skew check
  * cicd: update testing workflow
  * cicd: don't upload workspace on failure
  * cicd: change version specifiers to be major-version only</changelog>
</package>
<package pkgid="1f014c1c66b982a59fcc329af1039aef50588eb2b165de23a54e8d87420802d2344a18936c30bdac50658e7beaaf514aba2960bd076cf0e4b9c80422025b4736" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="f1d7a36597c349bc500e01a2732cacdf583a8d1b2fc18a9c6eff3fa8bb51ad5dc531a9e6ce2b3dc4bddb02de9b3e353a7ed7dfb1b071c07fe9952550dbe9ccba" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
</package>
<package pkgid="99c227afd059d0f5b832276b340925ceb334ac29a52f920843a6b81d50236048f4f203eaed1e6296561b4fedf8d17f4f2c626aa5dd52af5822a0ef22853b8478" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="d95fe19dede47d9e2581d5390b1bc151e1099fa9434732b3ab7eb826a353004689564060c5b06090f849408646a7c5476722f7d515162e5f67a43eacd7e95952" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
  <changelog author="suse+build@de-korte.org" date="1782907200">- update to 1.5.3
  ClamAV 1.5.3 is a patch release with the following fixes:
  * bsc#1270091, CVE-2026-20217:
    Fixed a bug in the PESpin unpacker cleanup path that could free pointers
    into the scanned file buffer and crash the scanner.
  * bsc#1270107, CVE-2026-20213:
    Fixed an integer overflow in PE rebuild size calculations that could be
    reached through a malformed Aspack-packed PE file and lead to a heap buffer
    overflow write.
  * bsc#1270089, CVE-2026-20216:
    Fixed an InstallShield archive extraction limit bypass that could write far
    more temporary data than intended and exhaust temporary storage.
  * bsc#1270085, CVE-2026-20214:
    Fixed an FSG unpacker loop underflow that could write past the section array
    while scanning a malformed PE file.
  * bsc#1270092, CVE-2026-20243:
    Fixed ALZ parser size handling bugs that could cause malformed ALZ archives
    to panic, abort the scanner, or skip expected scan-limit handling.
  * bsc#1270088, CVE-2026-20215:
    Fixed a 7z parser substream count overflow that could under-allocate parser
    metadata arrays and write past them while reading a malformed archive.
  * bsc#1270106, CVE-2026-20244:
    Fixed 32-bit DMG parser size checks that could let a short mish stripe table
    pass validation and crash 32-bit scanner builds.
  * Hardened clamscan, clamdscan, and clamonacc quarantine actions against
    time-of-check/time-of-use races that could redirect copied, moved, or removed
    files under unsafe quarantine directory configurations.
  * Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and
    RUSTSEC-2026-0068 advisories, and upgraded the Rust openssl dependency to
    resolve CVE-2026-41676, bsc#1270138.
  * Raised the minimum required CMake version to 3.17 to fix Linux builds with
    libcurl v8.21.0 when linking static library dependencies.
  * Metadata preclass scans now run before the final scan verdict.
  * ClamOnAcc: Fixed errors when recursively excluded paths are children of an
    included path.
  * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide
    in the same bucket.</changelog>
</package>
<package pkgid="8383c5c0eb090f6c1840decc2e2a0010e7c8835ff71465a04a7ec5537f110a44cb475d713e0c7239066d7109f862ec38f928dd59b25648afc7c57454487d7874" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="3739a4805e039b8cae864fbff223f448c792e845b0ad5b1d40dc563a749374d11d930cb1d9a13db8d971a1b7ac03c188ef17b253e4b688359622cd5b58fadd79" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
</package>
<package pkgid="541de0ff5ca8b5e58d11d35e54e6bb625db66fadd2a59302087a6eb58678ef6e64d541d4695d132bdebd5650fca475d55e8a92597d07291f1621f2bc3f16986a" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="23a25fccff458c8fbd8a2ce35b3b313ad9fa490360247cb45e0225ab672185b12d07361cb2dfe5f4a588bf1db133e9ebfe5be5eb145d9e5ade90ff5cfa0abbf1" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
  <changelog author="suse+build@de-korte.org" date="1782907200">- update to 1.5.3
  ClamAV 1.5.3 is a patch release with the following fixes:
  * bsc#1270091, CVE-2026-20217:
    Fixed a bug in the PESpin unpacker cleanup path that could free pointers
    into the scanned file buffer and crash the scanner.
  * bsc#1270107, CVE-2026-20213:
    Fixed an integer overflow in PE rebuild size calculations that could be
    reached through a malformed Aspack-packed PE file and lead to a heap buffer
    overflow write.
  * bsc#1270089, CVE-2026-20216:
    Fixed an InstallShield archive extraction limit bypass that could write far
    more temporary data than intended and exhaust temporary storage.
  * bsc#1270085, CVE-2026-20214:
    Fixed an FSG unpacker loop underflow that could write past the section array
    while scanning a malformed PE file.
  * bsc#1270092, CVE-2026-20243:
    Fixed ALZ parser size handling bugs that could cause malformed ALZ archives
    to panic, abort the scanner, or skip expected scan-limit handling.
  * bsc#1270088, CVE-2026-20215:
    Fixed a 7z parser substream count overflow that could under-allocate parser
    metadata arrays and write past them while reading a malformed archive.
  * bsc#1270106, CVE-2026-20244:
    Fixed 32-bit DMG parser size checks that could let a short mish stripe table
    pass validation and crash 32-bit scanner builds.
  * Hardened clamscan, clamdscan, and clamonacc quarantine actions against
    time-of-check/time-of-use races that could redirect copied, moved, or removed
    files under unsafe quarantine directory configurations.
  * Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and
    RUSTSEC-2026-0068 advisories, and upgraded the Rust openssl dependency to
    resolve CVE-2026-41676, bsc#1270138.
  * Raised the minimum required CMake version to 3.17 to fix Linux builds with
    libcurl v8.21.0 when linking static library dependencies.
  * Metadata preclass scans now run before the final scan verdict.
  * ClamOnAcc: Fixed errors when recursively excluded paths are children of an
    included path.
  * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide
    in the same bucket.</changelog>
</package>
<package pkgid="df1dbffae935ab6a6b68163c6e918663289ec2bddb154fb32507c5219a5f01ad47a2c83b1cd06c987b94078332be5d8715cfdc39280326ba14fe783ac372e03d" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="f764e724f9e4c4fcd8aea08641988b89053cc02b1366a3381941b63e11db42490afd4a60c8157c66e9e75969d5462c467820e1b8aaed968abcd55524a1b7a1b7" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
</package>
<package pkgid="17aaee2a8e3e17b15b8176826fd993a7c0d6164e44cbf582b5a8fccd106d0c0088e8b9d027cfb0d3836a3ac170b004e2762c1bc6bfb9ab3b285b5418f89fd315" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="46802403ecb1c1f9503e7cf1101df55cf059a1ee66c75d63be7c8a1f9baec679e81c4914d4b04fed633908ff584b29889381b4d3d7dd95606393deb2e8d7b17b" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
  <changelog author="suse+build@de-korte.org" date="1782907200">- update to 1.5.3
  ClamAV 1.5.3 is a patch release with the following fixes:
  * bsc#1270091, CVE-2026-20217:
    Fixed a bug in the PESpin unpacker cleanup path that could free pointers
    into the scanned file buffer and crash the scanner.
  * bsc#1270107, CVE-2026-20213:
    Fixed an integer overflow in PE rebuild size calculations that could be
    reached through a malformed Aspack-packed PE file and lead to a heap buffer
    overflow write.
  * bsc#1270089, CVE-2026-20216:
    Fixed an InstallShield archive extraction limit bypass that could write far
    more temporary data than intended and exhaust temporary storage.
  * bsc#1270085, CVE-2026-20214:
    Fixed an FSG unpacker loop underflow that could write past the section array
    while scanning a malformed PE file.
  * bsc#1270092, CVE-2026-20243:
    Fixed ALZ parser size handling bugs that could cause malformed ALZ archives
    to panic, abort the scanner, or skip expected scan-limit handling.
  * bsc#1270088, CVE-2026-20215:
    Fixed a 7z parser substream count overflow that could under-allocate parser
    metadata arrays and write past them while reading a malformed archive.
  * bsc#1270106, CVE-2026-20244:
    Fixed 32-bit DMG parser size checks that could let a short mish stripe table
    pass validation and crash 32-bit scanner builds.
  * Hardened clamscan, clamdscan, and clamonacc quarantine actions against
    time-of-check/time-of-use races that could redirect copied, moved, or removed
    files under unsafe quarantine directory configurations.
  * Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and
    RUSTSEC-2026-0068 advisories, and upgraded the Rust openssl dependency to
    resolve CVE-2026-41676, bsc#1270138.
  * Raised the minimum required CMake version to 3.17 to fix Linux builds with
    libcurl v8.21.0 when linking static library dependencies.
  * Metadata preclass scans now run before the final scan verdict.
  * ClamOnAcc: Fixed errors when recursively excluded paths are children of an
    included path.
  * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide
    in the same bucket.</changelog>
</package>
<package pkgid="7fb5268066a33f529a35ce8cbbd843aaf9c079b8d66cf1cb268ea0dbe8b7c0c4e784c44458ed6b01c07e2228bcd02128d93ab0ce37b140d5b4cb7cf4023a3dfd" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="160000.2.2"/>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="6804c22cf27b1004f9746fb0ca60aedb9338beba01efaf0c8ecda3e190d1b52df72e13a6f6d18a5f0d42f219baccd2514d6cac7f3f83db79b0438bf0657469b2" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
</package>
<package pkgid="f7e4f719980d4dfc52067ddfdef17b2d0e197d7ed93cd7819d744a5023f2af3c5e2a414ef9a589aaaa4115a789d128bf146f4ffe18ca51d3ee344bdfc5ab5239" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="90d42bb13cb1857a1a4b1dc2c4b90797955b4b033fcd3262f7f62ab0f0e8602dc2248d717c387e438f2ca9cc5ae629c0b0dd311b6759b39aea140fdafb32a7e4" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
  <changelog author="suse+build@de-korte.org" date="1782907200">- update to 1.5.3
  ClamAV 1.5.3 is a patch release with the following fixes:
  * bsc#1270091, CVE-2026-20217:
    Fixed a bug in the PESpin unpacker cleanup path that could free pointers
    into the scanned file buffer and crash the scanner.
  * bsc#1270107, CVE-2026-20213:
    Fixed an integer overflow in PE rebuild size calculations that could be
    reached through a malformed Aspack-packed PE file and lead to a heap buffer
    overflow write.
  * bsc#1270089, CVE-2026-20216:
    Fixed an InstallShield archive extraction limit bypass that could write far
    more temporary data than intended and exhaust temporary storage.
  * bsc#1270085, CVE-2026-20214:
    Fixed an FSG unpacker loop underflow that could write past the section array
    while scanning a malformed PE file.
  * bsc#1270092, CVE-2026-20243:
    Fixed ALZ parser size handling bugs that could cause malformed ALZ archives
    to panic, abort the scanner, or skip expected scan-limit handling.
  * bsc#1270088, CVE-2026-20215:
    Fixed a 7z parser substream count overflow that could under-allocate parser
    metadata arrays and write past them while reading a malformed archive.
  * bsc#1270106, CVE-2026-20244:
    Fixed 32-bit DMG parser size checks that could let a short mish stripe table
    pass validation and crash 32-bit scanner builds.
  * Hardened clamscan, clamdscan, and clamonacc quarantine actions against
    time-of-check/time-of-use races that could redirect copied, moved, or removed
    files under unsafe quarantine directory configurations.
  * Upgraded the Rust tar dependency to resolve the RUSTSEC-2026-0067 and
    RUSTSEC-2026-0068 advisories, and upgraded the Rust openssl dependency to
    resolve CVE-2026-41676, bsc#1270138.
  * Raised the minimum required CMake version to 3.17 to fix Linux builds with
    libcurl v8.21.0 when linking static library dependencies.
  * Metadata preclass scans now run before the final scan verdict.
  * ClamOnAcc: Fixed errors when recursively excluded paths are children of an
    included path.
  * ClamOnAcc: Fixed hash bucket list corruption when two watched paths collide
    in the same bucket.</changelog>
</package>
<package pkgid="de20ba3fb7d99f967e293a908d3f91ebba578a760beeec24e2ee5b98277da5ba89c8cfbae0a9db764ba4d91ff1d3379c3718a5b4745fcb19b546f91aaddc37a6" name="clamsap" arch="x86_64">
  <version epoch="0" ver="0.104.3" rel="160000.2.2"/>
  <changelog author="markus.strehle@sap.com" date="1620302400">- Increase Version because tested with latest clam engine
- Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="markus.strehle@sap.com" date="1624276800">- Limit pcre calls</changelog>
  <changelog author="markus.strehle@sap.com" date="1626782400">- Remove own default settings from VsaGetConfig and rely on clamav defaults
- Change default virusname in case clamav does not return any virus name.</changelog>
  <changelog author="markus.strehle@sap.com" date="1648123200">- Fix SAR file content scan
- Add option for PDF active content</changelog>
  <changelog author="markus.strehle@sap.com" date="1648555200">- Wildcard support for MIME type lists</changelog>
  <changelog author="meissner@suse.com" date="1651060800">- use https source url, also https URL</changelog>
  <changelog author="markus.strehle@sap.com" date="1653134400">- Relax javascript check in PDF</changelog>
  <changelog author="markus.strehle@sap.com" date="1659960000">- Fix XML MIME type detection using libmagic</changelog>
  <changelog author="varkoly@suse.com" date="1737979200">- Fix spec. Adapt architectures to SAP</changelog>
  <changelog author="varkoly@suse.com" date="1742904000">- Add LICENSE</changelog>
</package>
<package pkgid="952fd5dc3084d480cc934a9b222e7c2195e939e8264886ced0a85105c417f0abd8fb1115fcba166da6047058df00ae75237a5a4064d823dc3d2134f5a3b11e88" name="clamtk" arch="noarch">
  <version epoch="0" ver="6.18" rel="bp160.1.4"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1580731200">- Update to version 6.0.2
  * No changelog upstream
- Cleanup spec file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.05:
  * Exclude Timeshift directory (Github #121)
  * Added Help button in Analysis to explain its purpose
    (Github #122)
  * Updated language files: English (en_UK), Galician (gl),
    Ukrainian (uk), French (fr), Afrikans (af), Hebrew (he),
    Chinese (zh_TW)
  * Add Encrypted.PDF as clean (Github #120). Also, remove alert-
    encrypted-* options
  * Add set LC_TIME (Gitlab commit a7b3a31c)
  * More README cleanup
  * Updated language files: Dutch (nl), Afrikans (af),
    Indonesian (id), English (en_UK)
  * Bug fix affecting manual updates
  * Update year (2019 -&gt; 2020)
  * Clean up man page
  * Heuristic scanning made an option rather than a default
  * Fix icon mismatch in the Scheduler
  * Fix icon glitch in Update
  * Updated language files: English (en_UK), Indonesian (id),
    Swedish (sv) (Launchpad #1688469)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601035200">- update to 6.06:
  * Fix for 'Show Hidden Files' checkbox automatically
  * Remove env from clamtk startup for correct
    dependency detection (rpmlint)
  * Minor language updates to desktop file
  * Updated language files: Japanese (ja), English (en_AU),
    Mon (mnw_MM), Finnish (fi), Malay (ms)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1613131200">- Update to version 6.07:
  + Update to look for additional information during update to know
    when finished.
  + Update dates to 2021.
- Add 0001-Do-not-inject-no-separator-into-window-decoration.patch:
  Do not add no-separator to window decoration (boo#1182151).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619524800">- Update to version 6.11:
  * Clamtk and Clamav do not update automatically
  * Add appdata.xml file
  * Remove code referencing old repo.
  * Bug: app doesn't scan files/folders on demand
  * Bug: Do not inject 'no-separator' into window decoration
  * Add --alert-broken-media option for versions &gt;= 103.1
  * Remove older repo (clamtk-gtk3), use clamtk only
- Remove 0001-Do-not-inject-no-separator-into-window-decoration.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1628078400">- Update to version 6.13:
  * Fixes for appdata.xml
  * Partially work Github #129 (engine version, date of sigs, title)
  * Update translations in clamtk.desktop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to version 6.14
  * Fix for context-menu scanning image issues</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1686657600">- Update to version 6.16
  * Fix for Virustotal privacy warning before upload or sending file hash only
  * Remove (hopefully) no longer needed lines; improve a few others (Scan.pm)
  * Updated language files: Dutch (nl)
  * Update README and site links for updated GPG key
- Update to version 6.15
  * Fix for Unable to delete previous analysis result
  * Updated language files: Indonesian (id), Swedish (sv), German (de), Chinese (zh_CN), Burmese (my)
  * Fix to German language string in clamtk.desktop
  * Update DISCLAIMER to use markdown (DISCLAIMER.md)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720612800">- Update to 6.18:
  * Remove unnecessary line from #154 fix in App.pm
  * Change default clamtk user directory to .config/clamtk (Github #161)
  * Fix for scanned directories not showing in logs
  * Update App.pm to support $XDG_CONFIG_HOME environnement variable (Github #154)</changelog>
</package>
<package pkgid="01732fbaaadc2d1fdc7a411d53a559408591b3775d27f826ad6962d44b50a5b47d3acfd42dd344121d200ffa5e32cddd9431d76e31c4433adf57dcb1b8984ee6" name="clamtk-lang" arch="noarch">
  <version epoch="0" ver="6.18" rel="bp160.1.4"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1580731200">- Update to version 6.0.2
  * No changelog upstream
- Cleanup spec file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 6.05:
  * Exclude Timeshift directory (Github #121)
  * Added Help button in Analysis to explain its purpose
    (Github #122)
  * Updated language files: English (en_UK), Galician (gl),
    Ukrainian (uk), French (fr), Afrikans (af), Hebrew (he),
    Chinese (zh_TW)
  * Add Encrypted.PDF as clean (Github #120). Also, remove alert-
    encrypted-* options
  * Add set LC_TIME (Gitlab commit a7b3a31c)
  * More README cleanup
  * Updated language files: Dutch (nl), Afrikans (af),
    Indonesian (id), English (en_UK)
  * Bug fix affecting manual updates
  * Update year (2019 -&gt; 2020)
  * Clean up man page
  * Heuristic scanning made an option rather than a default
  * Fix icon mismatch in the Scheduler
  * Fix icon glitch in Update
  * Updated language files: English (en_UK), Indonesian (id),
    Swedish (sv) (Launchpad #1688469)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601035200">- update to 6.06:
  * Fix for 'Show Hidden Files' checkbox automatically
  * Remove env from clamtk startup for correct
    dependency detection (rpmlint)
  * Minor language updates to desktop file
  * Updated language files: Japanese (ja), English (en_AU),
    Mon (mnw_MM), Finnish (fi), Malay (ms)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1613131200">- Update to version 6.07:
  + Update to look for additional information during update to know
    when finished.
  + Update dates to 2021.
- Add 0001-Do-not-inject-no-separator-into-window-decoration.patch:
  Do not add no-separator to window decoration (boo#1182151).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1619524800">- Update to version 6.11:
  * Clamtk and Clamav do not update automatically
  * Add appdata.xml file
  * Remove code referencing old repo.
  * Bug: app doesn't scan files/folders on demand
  * Bug: Do not inject 'no-separator' into window decoration
  * Add --alert-broken-media option for versions &gt;= 103.1
  * Remove older repo (clamtk-gtk3), use clamtk only
- Remove 0001-Do-not-inject-no-separator-into-window-decoration.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1628078400">- Update to version 6.13:
  * Fixes for appdata.xml
  * Partially work Github #129 (engine version, date of sigs, title)
  * Update translations in clamtk.desktop</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1639051200">- Update to version 6.14
  * Fix for context-menu scanning image issues</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1686657600">- Update to version 6.16
  * Fix for Virustotal privacy warning before upload or sending file hash only
  * Remove (hopefully) no longer needed lines; improve a few others (Scan.pm)
  * Updated language files: Dutch (nl)
  * Update README and site links for updated GPG key
- Update to version 6.15
  * Fix for Unable to delete previous analysis result
  * Updated language files: Indonesian (id), Swedish (sv), German (de), Chinese (zh_CN), Burmese (my)
  * Fix to German language string in clamtk.desktop
  * Update DISCLAIMER to use markdown (DISCLAIMER.md)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1720612800">- Update to 6.18:
  * Remove unnecessary line from #154 fix in App.pm
  * Change default clamtk user directory to .config/clamtk (Github #161)
  * Fix for scanned directories not showing in logs
  * Update App.pm to support $XDG_CONFIG_HOME environnement variable (Github #154)</changelog>
</package>
<package pkgid="3e3f84de09d1eefb8254f88c37eee1b9716216a24963f23a3ed2270d66813b95929682496c408429ed461464b796e95a967a311f3993221b27186f159b3820fc" name="clang" arch="x86_64">
  <version epoch="0" ver="19" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1684324800">- Update to version 16.0.4.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1685793600">- Update to version 16.0.5.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1686830400">- Update to version 16.0.6.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1695124800">- Update to version 17.0.1.
  * For details, see the release notes:
  - https://releases.llvm.org/17.0.1/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/lld/docs/ReleaseNotes.html</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1696680000">- Update to version 17.0.2.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697889600">- Strip minor version and patch-level, so that we don't need to
  update this package for every patch-level update.
- Remove support for openSUSE 13.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709985600">- Update to version 18.
  * For details, see the release notes:
  - https://releases.llvm.org/18.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/lld/docs/ReleaseNotes.html
- Add metapackage for libomp-devel.
- Update packaging guidelines for new versioning scheme.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710676800">- Drop libomp-devel and python3-lldb where the versioned package is
  not being built.
- Let llvm-devel require libomp-devel only where it is built.
- Let lldb recommend python3-lldb only where it is built.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
</package>
<package pkgid="e90d0bbb1913ee1d1312c8f4e96a7fac815d8c8072e19a2953947ebf5788a7d5e55caeee91f0a1373fd50ff4eee02785a609f999e7d4cde670acd02ab319d168" name="clang-devel" arch="x86_64">
  <version epoch="0" ver="19" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1684324800">- Update to version 16.0.4.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1685793600">- Update to version 16.0.5.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1686830400">- Update to version 16.0.6.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1695124800">- Update to version 17.0.1.
  * For details, see the release notes:
  - https://releases.llvm.org/17.0.1/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/lld/docs/ReleaseNotes.html</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1696680000">- Update to version 17.0.2.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697889600">- Strip minor version and patch-level, so that we don't need to
  update this package for every patch-level update.
- Remove support for openSUSE 13.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709985600">- Update to version 18.
  * For details, see the release notes:
  - https://releases.llvm.org/18.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/lld/docs/ReleaseNotes.html
- Add metapackage for libomp-devel.
- Update packaging guidelines for new versioning scheme.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710676800">- Drop libomp-devel and python3-lldb where the versioned package is
  not being built.
- Let llvm-devel require libomp-devel only where it is built.
- Let lldb recommend python3-lldb only where it is built.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
</package>
<package pkgid="a9c4789091115ba82ef2d706f5cf262e6156ba2da34dc1a6372edde2d74e141d1127cf2136aacd7d2103d84d8bdc51756767b3db53cd3622928460789363107f" name="clang-doc" arch="x86_64">
  <version epoch="0" ver="19" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1684324800">- Update to version 16.0.4.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1685793600">- Update to version 16.0.5.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1686830400">- Update to version 16.0.6.
  * This release contains bug-fixes for the LLVM 16.0.0 release.
    This release is API and ABI compatible with 16.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1695124800">- Update to version 17.0.1.
  * For details, see the release notes:
  - https://releases.llvm.org/17.0.1/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/17.0.1/tools/lld/docs/ReleaseNotes.html</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1696680000">- Update to version 17.0.2.
  * This release contains bug-fixes for the LLVM 17.0.0 release.
    This release is API and ABI compatible with 17.0.0.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697889600">- Strip minor version and patch-level, so that we don't need to
  update this package for every patch-level update.
- Remove support for openSUSE 13.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709985600">- Update to version 18.
  * For details, see the release notes:
  - https://releases.llvm.org/18.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/18.1.0/tools/lld/docs/ReleaseNotes.html
- Add metapackage for libomp-devel.
- Update packaging guidelines for new versioning scheme.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710676800">- Drop libomp-devel and python3-lldb where the versioned package is
  not being built.
- Let llvm-devel require libomp-devel only where it is built.
- Let lldb recommend python3-lldb only where it is built.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
</package>
<package pkgid="e862579ab280a4ac57631c6ab0152cdc5b62bb0a532f3bacd7eea6eca47ee7957d12aa2add57bac8186e30ea4047326af61675c098f4d84a0149cb7732e942a9" name="clang-extract" arch="x86_64">
  <version epoch="0" ver="0~20241220.8344124" rel="bp160.1.11"/>
  <changelog author="mvetter@suse.com" date="1721736000">- Update to version 0~20240722.a998e91:
  * Fix clang-extract discarding struct-partial definition in nested record
  * Add (failing) testcase
  * Fix clang-extract dropping complete definition of struct when a copy is necessary
  * Fix struct being redefined if defined in variable type
  * Extend parent RecordDecl analysis for EnumDecls
  * Remove redundant leftmost decl from closure
  * Avoid adding every previous decl of a global variable
  * Force TagDecl as needing fulldefiniton if is a return type of a function
  * Deference pointer types when searching for decomposed typedef-struct
  * Analyze CleanupAttr
  * Avoid adding previous declarations of typedefs into closure
  * SymbolExternalizer: Check KLP_ macros only if there was externzalized syms</changelog>
  <changelog author="mvetter@suse.com" date="1722254400">- Update to version 0~20240726.4309abc:
  * Fix closure missing TypedefDecl because not being referenced by type</changelog>
  <changelog author="mvetter@suse.com" date="1722513600">- Update to version 0~20240731.94276b7:
  * Remove functions body from Closure.hh
  * Analyze Decls with same BeginLoc
  * LLVMMisc.cpp: Check if identifier exists in SymbolTable
  * Fix failing testcase if system compiler is gcc-14</changelog>
  <changelog author="mvetter@suse.com" date="1722600000">- Update to version 0~20240801.6cf5b73:
  * libcextract: Passes: Drop attributes when creating the KLP_RELOC entries
  * SymbolExternalizer: Drop initializer from expanded macros
  * libcextract: ArgvParser: Use vmlinux on PatchObject when DEBUGINFO is different
  * libcextract: Passes.cpp: Use vmlinux if sym_mod is empty
  * Drop klpe_ prefix for extern function symbols</changelog>
  <changelog author="mvetter@suse.com" date="1723636800">- Update to version 0~20240813.82f77f7:
  * libcextract: Add support to zstd
  * Add support to read zlib compressed files, like vmlinux.gz
  * NonLLVMMisc: Add FileHandling class
  * Passes: Drop comments about ibt tail content
- Add new BuildRequires: zlib-devel libzstd-devel</changelog>
  <changelog author="mvetter@suse.com" date="1723723200">- Update to version 0~20240814.272ac2e:
  * Drop VectorRef in favor of ArrayRef
  * Fix copyright headers
  * Drop use of `dynamic_cast` in favor of `dyn_cast`
  * ElfCXX: Convert decompress_gz to use DecompressedObj attribute
  * ElfCXX: Make decompress methods access ElfFd directly</changelog>
  <changelog author="mvetter@suse.com" date="1725451200">- Update to version 0~20240902.0a13816:
  * libcextract: Passes: Adjust KLP_RELOC_SYMBOL_POS format
  * testsuite: inline: inlined-into-1: Fix noinline and implicit-int
  * Add option to pass two debuginfos
  * Fix symbol visibility
  * Disable const propagation on externalized vars
  * libcextract: ArgvParser: Use basename instead of std::filename
  * Fix Late Externalization when variable is declared as macro expansion
  * Dump includetree together with passes dump
  * libcextract: ExpansionPolicy: Check for abs and rel path differences
  * Remove redundant decls
  * Workaround ';' being output at incorrect location when decl ends with #endif
  * Fix CompleteDefinition of struct being dragged into output because of union field
  * libcextract: ArgvParser: Disable Wduplicate-decl-specifier error
  * Disable Precompiled Headers
  * libcextract: Add support for Weak symbols for kernel mode</changelog>
  <changelog author="mvetter@suse.com" date="1728302400">- Update to version 0~20241002.ec46efd:
  * Allow clang-extract to ignore errors pointed by clang
  * SymbolExternalizer: Make sure we pass a valid location when searching identifiers
  * SymbolExternalizer: Add ! to TOKEN_VECTOR</changelog>
  <changelog author="mvetter@suse.com" date="1734696000">- Update to version 0~20241002.ec46efd:
  * Allow clang-extract to ignore errors pointed by clang
  * SymbolExternalizer: Make sure we pass a valid location when searching identifiers
  * SymbolExternalizer: Add ! to TOKEN_VECTOR
  * libcextract: Passes: Adjust KLP_RELOC_SYMBOL_POS format
  * testsuite: inline: inlined-into-1: Fix noinline and implicit-int
  * Add option to pass two debuginfos
  * Fix symbol visibility
  * Disable const propagation on externalized vars
  * libcextract: ArgvParser: Use basename instead of std::filename</changelog>
  <changelog author="mvetter@suse.com" date="1734696001">- Update to version 0~20241220.8344124:
  * Add support to llvm-19</changelog>
</package>
<package pkgid="dbeea725d30108375db20cfe678d44f1945a478ca4950e26675d668e684285f8c4bc32d173f642d992bce301c06918f323f6e2f8062921ea8a5490e02aaeb6ce" name="clang-tools" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
  <changelog author="rguenther@suse.com" date="1748260800">- Use generic python3 for SLES 16 as python 3.11 is dropped there.
  [bsc#1243630]</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="e2f41af511ceb7f082010cee71e97986f91e3d361918ad09515af663b12219cdb0ac62d3609cb3e0dfd6b876450d2ec1d19ca8d5a3aafc863c9f27a2cddeb803" name="clang15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697716800">- Disable zstd support for now regardless of whether libzstd-devel
  is installed. (boo#1216121)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.</changelog>
  <changelog author="fvogt@suse.com" date="1704974400">- Use %_target_* for determining the compiler host triple (boo#1218701)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709553600">- Fix PowerPC triples: use powerpc[64[le]] instead of ppc[64[le]].
- Require 8 GB memory for 64-bit architectures to prevent OOM.
- Disable test that fails on ppc64le.</changelog>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741262400">- Add patches, to actually fix the build with Python 3.13:
  * libcxx-use-shlex-quote.patch
  * libcxx-remove-unused-imports.patch
  * lldb-support-python-3.13.patch
  * use-shlex-quote.patch</changelog>
</package>
<package pkgid="f51acace61554ccd8fcda7093960260c2a229c6672a06155ef60965e799ff9fadeacdd55af8bff1670e4bc27af4bf61efb9eb8eae8d5535d1d011bc1987d369a" name="clang15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="160000.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709553600">- Fix PowerPC triples: use powerpc[64[le]] instead of ppc[64[le]].
- Require 8 GB memory for 64-bit architectures to prevent OOM.
- Disable test that fails on ppc64le.</changelog>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741262400">- Add patches, to actually fix the build with Python 3.13:
  * libcxx-use-shlex-quote.patch
  * libcxx-remove-unused-imports.patch
  * lldb-support-python-3.13.patch
  * use-shlex-quote.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1750507200">- Add llvm-fix-gcc15-build.patch to fix build with GCC 15.</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="bwiedemann@suse.de" date="1753358400">- Disable ASLR during build to make libomp.so reproducible (boo#1199076)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1754395200">- Add compiler-rt-remove-termio-interceptors.patch to fix build
  with glibc 2.42. (boo#1247576)</changelog>
</package>
<package pkgid="f505c2d84450b12cbc39f4282a7e9596cfe27aee7b64ab2e7d7be8f14a1d363a0c8aa6081302f4c77b6e97b4e746e97037066b539691a65c4d33bee51e9b891c" name="clang15-devel" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697716800">- Disable zstd support for now regardless of whether libzstd-devel
  is installed. (boo#1216121)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.</changelog>
  <changelog author="fvogt@suse.com" date="1704974400">- Use %_target_* for determining the compiler host triple (boo#1218701)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709553600">- Fix PowerPC triples: use powerpc[64[le]] instead of ppc[64[le]].
- Require 8 GB memory for 64-bit architectures to prevent OOM.
- Disable test that fails on ppc64le.</changelog>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741262400">- Add patches, to actually fix the build with Python 3.13:
  * libcxx-use-shlex-quote.patch
  * libcxx-remove-unused-imports.patch
  * lldb-support-python-3.13.patch
  * use-shlex-quote.patch</changelog>
</package>
<package pkgid="bd2d4913a6571f3fb8a52f38367058314be8787b81c7b251d2a5c4d85631a58a324f440dd4da641287aaa379875fff676ffa339b88638fcb74b5e0440adb00f2" name="clang15-devel" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="160000.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709553600">- Fix PowerPC triples: use powerpc[64[le]] instead of ppc[64[le]].
- Require 8 GB memory for 64-bit architectures to prevent OOM.
- Disable test that fails on ppc64le.</changelog>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741262400">- Add patches, to actually fix the build with Python 3.13:
  * libcxx-use-shlex-quote.patch
  * libcxx-remove-unused-imports.patch
  * lldb-support-python-3.13.patch
  * use-shlex-quote.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1750507200">- Add llvm-fix-gcc15-build.patch to fix build with GCC 15.</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="bwiedemann@suse.de" date="1753358400">- Disable ASLR during build to make libomp.so reproducible (boo#1199076)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1754395200">- Add compiler-rt-remove-termio-interceptors.patch to fix build
  with glibc 2.42. (boo#1247576)</changelog>
</package>
<package pkgid="a754bf0dbb16c474a75e91daa5b51ce31a27090a97e9db2a9c1de19aed50de2e028f897d2ff3f33a2312cf4eff1c781614033fed9b96d206d7befc8d33d5ceeb" name="clang15-doc" arch="noarch">
  <version epoch="0" ver="15.0.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1697716800">- Disable zstd support for now regardless of whether libzstd-devel
  is installed. (boo#1216121)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.</changelog>
  <changelog author="fvogt@suse.com" date="1704974400">- Use %_target_* for determining the compiler host triple (boo#1218701)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709553600">- Fix PowerPC triples: use powerpc[64[le]] instead of ppc[64[le]].
- Require 8 GB memory for 64-bit architectures to prevent OOM.
- Disable test that fails on ppc64le.</changelog>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741262400">- Add patches, to actually fix the build with Python 3.13:
  * libcxx-use-shlex-quote.patch
  * libcxx-remove-unused-imports.patch
  * lldb-support-python-3.13.patch
  * use-shlex-quote.patch</changelog>
</package>
<package pkgid="a9146549d3b8416478fa226c25ff6edb4928af30c92b035248195953f0b3217905e6db86b5b175cfd9aba34833e90e5a017ffdc56484137f8f02463052323f76" name="clang15-doc" arch="noarch">
  <version epoch="0" ver="15.0.7" rel="160000.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1709553600">- Fix PowerPC triples: use powerpc[64[le]] instead of ppc[64[le]].
- Require 8 GB memory for 64-bit architectures to prevent OOM.
- Disable test that fails on ppc64le.</changelog>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1741262400">- Add patches, to actually fix the build with Python 3.13:
  * libcxx-use-shlex-quote.patch
  * libcxx-remove-unused-imports.patch
  * lldb-support-python-3.13.patch
  * use-shlex-quote.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1750507200">- Add llvm-fix-gcc15-build.patch to fix build with GCC 15.</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="bwiedemann@suse.de" date="1753358400">- Disable ASLR during build to make libomp.so reproducible (boo#1199076)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1754395200">- Add compiler-rt-remove-termio-interceptors.patch to fix build
  with glibc 2.42. (boo#1247576)</changelog>
</package>
<package pkgid="244f62218a0e6a6cca4b03828e64eb6caf2f36c40ade09265b766ae303e47e8ec20ff762460a0a02d84085106980b8847d5ac6e94d85077a76950f7d3ed77acc" name="clang17" arch="x86_64">
  <version epoch="0" ver="17.0.6" rel="160000.2.3"/>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1725105600">- Add clang-Fix-build-with-GCC-14-on-ARM.patch to fix build with
  GCC 14 on aarch64. (boo#1229868, gh#llvm/llvm-project#78691)</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="msuchanek@suse.de" date="1730980800">- Correct target name for libomptarget in file list (backport from llvm18)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731326400">- Require libffi when we build openmp for offloading.
- Update llvm17.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- add libcxx-use-shlex-quote.patch to fix build with python 3.13</changelog>
  <changelog author="steven.kowalik@suse.com" date="1739448000">- Add patches, to actually fix the build with Python 3.13:
  * lldb-support-python-3.13.patch
  * libcxx-remove-unused-imports.patch</changelog>
</package>
<package pkgid="44ca1fcdf3a9f1fe3cb9a3ebe2e6e764828bac661a633e1277349d8eb067ae12fcbc8c3e831134c6697aacb1d9b030dc33ae7f4508b08dcb52fd89d90979cdba" name="clang17" arch="x86_64">
  <version epoch="0" ver="17.0.6" rel="160000.3.1"/>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="msuchanek@suse.de" date="1730980800">- Correct target name for libomptarget in file list (backport from llvm18)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731326400">- Require libffi when we build openmp for offloading.
- Update llvm17.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- add libcxx-use-shlex-quote.patch to fix build with python 3.13</changelog>
  <changelog author="steven.kowalik@suse.com" date="1739448000">- Add patches, to actually fix the build with Python 3.13:
  * lldb-support-python-3.13.patch
  * libcxx-remove-unused-imports.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1750507200">- Add llvm-fix-gcc15-build.patch to fix build with GCC 15.</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="bwiedemann@suse.de" date="1753358400">- Disable ASLR during build to make libomp.so reproducible (boo#1199076)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1754395200">- Add compiler-rt-remove-termio-interceptors.patch to fix build
  with glibc 2.42. (boo#1247576)</changelog>
</package>
<package pkgid="1451d147ab5fa8dce5bd4fcff6a916c7050e587785e9f608c97938d1d1c99d1350a7f9932ff15c1b688f79762e515cb94a6d796dbafac9596602533d1de80a81" name="clang17-devel" arch="x86_64">
  <version epoch="0" ver="17.0.6" rel="160000.2.3"/>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1725105600">- Add clang-Fix-build-with-GCC-14-on-ARM.patch to fix build with
  GCC 14 on aarch64. (boo#1229868, gh#llvm/llvm-project#78691)</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="msuchanek@suse.de" date="1730980800">- Correct target name for libomptarget in file list (backport from llvm18)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731326400">- Require libffi when we build openmp for offloading.
- Update llvm17.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- add libcxx-use-shlex-quote.patch to fix build with python 3.13</changelog>
  <changelog author="steven.kowalik@suse.com" date="1739448000">- Add patches, to actually fix the build with Python 3.13:
  * lldb-support-python-3.13.patch
  * libcxx-remove-unused-imports.patch</changelog>
</package>
<package pkgid="9c53e5f14a62dd239775537f3534f9f72e8e4c424f24bc65ccc14d3d83f40dafe93f14a4f1ab44beb0102ab8ef93c5f4cc24515beb0a9af3f58b01de6d56eb6e" name="clang17-devel" arch="x86_64">
  <version epoch="0" ver="17.0.6" rel="160000.3.1"/>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="msuchanek@suse.de" date="1730980800">- Correct target name for libomptarget in file list (backport from llvm18)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731326400">- Require libffi when we build openmp for offloading.
- Update llvm17.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- add libcxx-use-shlex-quote.patch to fix build with python 3.13</changelog>
  <changelog author="steven.kowalik@suse.com" date="1739448000">- Add patches, to actually fix the build with Python 3.13:
  * lldb-support-python-3.13.patch
  * libcxx-remove-unused-imports.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1750507200">- Add llvm-fix-gcc15-build.patch to fix build with GCC 15.</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="bwiedemann@suse.de" date="1753358400">- Disable ASLR during build to make libomp.so reproducible (boo#1199076)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1754395200">- Add compiler-rt-remove-termio-interceptors.patch to fix build
  with glibc 2.42. (boo#1247576)</changelog>
</package>
<package pkgid="39c6db1ce088edcf49b2e4e81b92796ae79570c0a920904c8c57db38d4e2eff4603db0618247b88c3fa3e62cb3e6bfdb6a8c5568ce953a1f258a5dde428b9a81" name="clang17-doc" arch="noarch">
  <version epoch="0" ver="17.0.6" rel="160000.2.3"/>
  <changelog author="mgorse@suse.com" date="1709726400">- Explicitly define PYTHON3_EXECUTABLE, since python 3.11 is being
  pulled in by cmake in SLE-15-SP6.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1712145600">- Use old conflicts/provides for python3-clang on Leap.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1725105600">- Add clang-Fix-build-with-GCC-14-on-ARM.patch to fix build with
  GCC 14 on aarch64. (boo#1229868, gh#llvm/llvm-project#78691)</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="msuchanek@suse.de" date="1730980800">- Correct target name for libomptarget in file list (backport from llvm18)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731326400">- Require libffi when we build openmp for offloading.
- Update llvm17.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- add libcxx-use-shlex-quote.patch to fix build with python 3.13</changelog>
  <changelog author="steven.kowalik@suse.com" date="1739448000">- Add patches, to actually fix the build with Python 3.13:
  * lldb-support-python-3.13.patch
  * libcxx-remove-unused-imports.patch</changelog>
</package>
<package pkgid="3f1c688fd8bf9d22c0823a4dcb92213ccab5558d386c8762d3e99a364eab6938aec753c10e5d2e762c6480b0a606695e0dc9cfaaeb2172ef2f5ee5d8aa7b76e2" name="clang17-doc" arch="noarch">
  <version epoch="0" ver="17.0.6" rel="160000.3.1"/>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="msuchanek@suse.de" date="1730980800">- Correct target name for libomptarget in file list (backport from llvm18)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731326400">- Require libffi when we build openmp for offloading.
- Update llvm17.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="dmueller@suse.com" date="1732276800">- add libcxx-use-shlex-quote.patch to fix build with python 3.13</changelog>
  <changelog author="steven.kowalik@suse.com" date="1739448000">- Add patches, to actually fix the build with Python 3.13:
  * lldb-support-python-3.13.patch
  * libcxx-remove-unused-imports.patch</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1750507200">- Add llvm-fix-gcc15-build.patch to fix build with GCC 15.</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
  <changelog author="bwiedemann@suse.de" date="1753358400">- Disable ASLR during build to make libomp.so reproducible (boo#1199076)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1754395200">- Add compiler-rt-remove-termio-interceptors.patch to fix build
  with glibc 2.42. (boo#1247576)</changelog>
</package>
<package pkgid="a57934fcaf8e98c6cc6261d2ebf2645ad93058142b74ac509963394a94544a981a4f903764eb640530275aa8968f3521d904d85380bd62f5e144a0c082737eef" name="clang19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
  <changelog author="rguenther@suse.com" date="1748260800">- Use generic python3 for SLES 16 as python 3.11 is dropped there.
  [bsc#1243630]</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="6bf7a3a20b65bfc4837aa87873c084b33d2cac5639fe70d322d32b3eac3b6c2bdbddaf2c926db1f9411568f7cb8f60ca04fd44f001427b33bb0002a3d436c6e2" name="clang19-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
  <changelog author="rguenther@suse.com" date="1748260800">- Use generic python3 for SLES 16 as python 3.11 is dropped there.
  [bsc#1243630]</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="24132c8c3f90bb08fc1c769f217bccef18f4da6b58e2398c00b3eb9766ba8a7068177e3085cc3ffd6045ae399748bbc73a9fb9fca6bb11219a162ba147073cf4" name="clang19-doc" arch="noarch">
  <version epoch="0" ver="19.1.7" rel="160000.2.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731758400">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733400000">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
  <changelog author="rguenther@suse.com" date="1748260800">- Use generic python3 for SLES 16 as python 3.11 is dropped there.
  [bsc#1243630]</changelog>
  <changelog author="bwiedemann@suse.com" date="1752235200">- Add reproducible.patch to make libomp.so reproducible (boo#1199076)
- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="4628e02084a02cd9045e56e8c4c4458bd8de4617ca0d4a2005c0c4a68c54fa57e83a00f0f7c2ad5ed876e809ba811c8a8f328cf83cd61522abd20dfe5a43a604" name="clap-lsp-plugins" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="bp160.1.12"/>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1695902400">- Add 01-Fixed-double-free-of-generated-port-metadata.patch
  from upstream fixing crashes</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1697198400">- Remove 01-Fixed-double-free-of-generated-port-metadata.patch
  now upstream
- update to 1.2.12
  * Implemented Autogain plugin series for controlling the loudness
    of the signal according to the ITU-R BS.1770-4 specificaions.
  * Implemented SIMD-optimized curve and gain calculation functions
    for compressors which allow to lower the CPU consumption by
    compressor plugins.
  * More AVX-512 optimized functions added to the low-level DSP code.
  * Additional SIMD-optimized functions added to DSP library.
  * Fixed VST2 plugin crash on UI close in OBS Studio.
  * Fixed invalid default values of parameters for CLAP plugin format.
  * Fixed double memory free of generated port metadata in CLAP,
    VST2 and LV2 wrappers.
  * Fixed HPF/LPF knob activity in the UI for multiband dynamics
    plugins.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1698580800">- update to 1.2.13
  * Fixed bug in Multiband Limiter plugin series caused by invalid
    processing of large input buffers.
  * Fixed bug in Compensation Delay plugin series caused by invalid
    processing of large input buffers.
  * Fixed crackling sound caused by small buffer gaps in Autogain
    plugin series.
  * Fixed bug introduced in 1.2.11 version related to improper
    optimized function for AVX-512 instruction set that could cause
    dynamic processing plugins (like Compressor, Expander, Gate, etc)
    work improperly.
  * Several optimizations of DSP library with AVX and AVX2 instruction sets.
  * Many additional optimizations of DSP library with AVX-512 instruction set.
  * Optimizations of compressor, expander and gate modules with SIMD instructions.
  * Gate module now uses lsp-dsp-lib for low-level gain and curve optimizations.
  * Reduced the gain curve refresh rate for all multiband plugins
    which may reduce CPU usage for small input buffer sizes.
  * Optimized common gain curve calculation for all multiband plugins.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1703419200">- update to 1.2.14
  * Implemented Clipper plugins series.
  * Implemented Multiband Clipper plugin series.
  * Implemented Parametric Equalizer x8 plugin series.
  * Updated VST 2.x plugin naming to fit the maximum possible length
    of 31 characters.
  * Added tracking of maximum values option for Spectrum Analyzer
    plugin series.
  * Added possibility to change frequency values by double click for
    GOTT Compressor.
  * Improved performance of expression language in the UI.
  * Implemented separate input and output signal spectrum analysis
    for Filter, Graphic Equalizer and Parametric Equalizer plugin series.
  * Updated default value and extended range of the zoom fader for
    Filter, Graphic Equalizer and Parametric Equalizer plugin series.
  * Added possibility to globally adjust filter point size for Filter,
    Graphic Equalizer and Parametric Equalizer plugin series.
  * Added gain level display for filter info of the Parametric
    Equalizer and Filter plugin series.
  * Added missing inline display to the Autogain plugin series.
  * Threshold markers are now editable for all dynamics and
    multiband dynamics plugins.
  * Implemented switch that controls automatic scaling of spectrum
    graph for plugin series:
  * Beat Breather.
  * Filter.
  * GOTT Compressor.
  * Graphic Equalizer.
  * Multiband Compressor.
  * Multiband Dynamic Processor.
  * Multiband Gate.
  * Multiband Expander.
  * Multiband Limiter.
  * Noise Generator.
  * Parametric Equalizer.
  * Many code updates that could cause potential problems related
    to using another decimal point for floating-point number formatting.
  * Added frequency and note displaying for band splits for all
    multiband plugin series.
  * Added support of storing current file type selection in
    file dialogs of UI.
  * Optimization of compressor and gate functions using AVX-512
    instruction set.
  * Fixed bug in Mid/Side conversion functions for AArch64
    architecture (contributed by marcan at GitHub).
  * Introduced SIMD-optimized expander curve and gain functions.
  * Improved performance of logarithmic values calculations for
    DSP modules.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1709726400">- update to 1.2.15
  * Added experimental VST3 plugin format support.
  * Added built-in presets for Compressor plugin series.
  * Fixed bug in smoothing mode of Parametric Equalizer and Filter
    plugins that could be caused when using large buffer sizes.
    Additional optimizations to reduce CPU resources when processing
    in smoothing mode.
  * Updated behaviour of band frequency splits in the UI for Multiband
    Compressor, Multiband Expander, Multiband Gate Multiband Dynamic
    Processor and Crossover plugin series.
  * Several bugfixes and improvements in implementations of VST2, LV2 and CLAP formats.
  * Added possibility to manually enter channel name in Mixer plugin series.
  * Added MIDI velocity control code display in Sampler and Multisampler plugin series.
  * Added support of LR2 (12 dB/oct) filters by the Crossover plugins series.
  * Added S/M Apply switch to Crossover plugin series that applies
    effect of Solo/Mute buttons to corresponding frequency band's outputs.
  * Improved grid color and visibility for the Spectrum analyzer plugin
    series in Spectralizer mode.
  * Implemented Hold option for Compressor, Dynamics Processor, Expander
    and Gate plugin series.
  * Implemented Hold option for Multiband Compressor, Dynamics Processor,
    Expander and Gate plugin series.
  * Added Dry/Wet balance control for Compressor, Dynamics Processor,
    Expander, Gate and Trigger plugin series.
  * Added Dry/Wet balance control for Multiband Compressor, Dynamics Processor,
    Expander, Gate and GOTT Compressor plugin series.
  * Fixed phasing issue between dry and wet signal for GOTT Compressor in Linear Phase mode.
  * Fixed invalid curve markers display in Multiband Gate plugin series.
  * Re-implemented allpass filters for Equalizer that could yield to high frequency pitch buildup.
  * Updated split editing behaviour for Multiband plugin series and Crossover plugin series.
  * Added basic UI design guidelines to the documentation.
  * Several bugfixes in graphic toolkit library.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1711454400">- fix post(un) in .spec</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1716379200">- update to 1.2.16
  * Implemented Chorus plugin series.
  * Implemented advanced internal buffer cleanup algorithm that does
    not cause high CPU load for Slap-Back Delay plugin.
  * Added stereo correlometer to the Spectrum Analyzer plugin series.
  * Added feedback to the Slap-Back delay plugin.
  * Implemented Dry/Wet balance knob for the following plugin series:
  - Artistic Delay;
  - Beat Breather;
  - Compensation Delay;
  - Flanger;
  - Impulse Responses;
  - Impulse Reverb;
  - Room Builder;
  - Sampler;
  - Multisampler;
  - Slap-Back delay.
  * Removed 'Amount' knob in Flanger plugin series as it can be fully
    replaced by Dry/Wet/DryWet knobs.
  * Several fixes related to window position of VST3 plugin format.
  * Workaround for Bitwig Studio DAW memory leak when VST3 plugins
    extensively use messaging.
  * Fixed bug related to improper loading of RIFF files with 32-bit
    float sample format.
  * Fixed configuration export for LV2 format where plugins exported
    paths mapped by a DAW instead of real file paths.
  * Fixed improper numpad key handling in UI for Windows.
  * Fixed Artistic Delay which could generate audio garbage on
    session startup.
  * Improved precision of bilinear transform for filters which could
    blow up signal when using steep-curved filters.
  * Fixed jumping UI controls issues caused by variable widths of
    diffrent parameters.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1722772800">- update to 1.2.17
- change source tarball to 7z
- update dependencies in spec
- add gstreamer plugins subpackage
  * Changed the binary distribution of plugins. Plugins of different
    formats are now packed together into a 7-zip archive. The same is
    related to documentation and source code. This allows to gain the
    economy on the overall size of the compressed data and number of
    archives required to download.
  * Added basic GStreamer plugin format support.
  * Plugins now can be built without UI support if the 'ui' option is
    omitted at the configuration stage.
  * Added ISO-226:2023 loudness compensation curves to Loudness
    Compensator plugin series.
  * Added balance knobs to LSP Slap-back Delay Stereo plugin.
  * Added Suntory Hall Tokyo 3D model to Room Builder presets
    (contributed by Fowly).
  * Updated makefile scripts related to Git checkout (contributed by
    Johannes Lorenz).
  * Improved build tools: UI resources are now built-in only for shared
  * objects/libraries that actually need them.
  * Several AVX-512 optimizations of DSP library.
  * Fixed not working MIDI channel setup for the Trigger MIDI plugin series.
  * Fixed regression: improper port bindings for Compensation Delay x2
    Stereo plugin.
  * Fixed several issues related to plugin window sizing for LV2 format.
  * Fixed possible access to uninitialized memory when loading built-in
    resources.
  * Fixed improper phase compensation between Dry and Wet channels
    in Linear Phase mode for multiband plugin series:
    Multiband Compressor;
    Multiband Dynamics Processor;
    Multiband Expander;
    Multiband Gate.
    Several bugfixes for VST3 wrapper.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1728475200">- update to 1.2.18
  * Implemented Send Mono and Send Stereo plugins for sending audio
    streams to named connection points stored in shared memory.
  * Implemented Return Mono and Return Stereo plugins for receiving
    audio streams from named connection points stored in shared memory.
  * Added inter-communication between Parametric and Graphic Equalizers
    using new send/return communication primitives which allows to show
    the spectrogram of another Equalizer's output on the graph.
  * Added Reverse button for Impulse Responses plugin series that allows
    to reverse the impulse response.
  * Added support of sidechain passed by shared memory link for
    Autogain plugin series.
  * Added support of sidechain passed by shared memory link for
    single-band dynamics processing plugin series:
  * Compressor;
  * Dynamics Processor;
  * Expander;
  * Gate;
  * Limiter.
  * Added support of sidechain passed by shared memory link for multi-band
    dynamics processing plugin series:
  * GOTT Compressor;
  * Multiband Compressor;
  * Multiband Dynamics Processor;
  * Multiband Expander;
  * Multiband Gate;
  * Multiband Limiter.
  * Mono samples are now played as stereo samples with duplicated left
    channel for Trigger, Sampler and Multisampler plugin series.
  * Added pre-reverse button to apply sample reversal before cuts,
    stretches and fades being applied in Sampler and Multisampler
    plugin series.
  * Several UI improvements related to instrument names in Multisampler
    plugin series: instrument name is now displayed in drop-down list
    and heading of the drop-down group.
  * Added documentation_path parameter in user configuration file which
    allows to configure the path to the offline documentation installation.
  * Update makefiles to simplify cross-compiling, added cross compiling
    instructions to README.
  * Added LUFS meters to the Loudness Compensator plugin series.
  * Added reference Pink noise generator of different standard loudness
    levels to the Loudness Compensator plugin series.
  * Added directory contents view and navigation of currently loaded
    sample for following plugin series:
  * Impulse Responses;
  * Impulse Reverb;
  * Multsampler;
  * Sampler;
  * Trigger.
  * Fixed random crashes when navigating file dialog in Windows.
  * Fixed invalid UI draw issue on Windows when using larger desktop DPI.
  * Fixed regression in offline documentation build.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1728734400">- update to 1.2.19
- update .spec for tar.gz source
  * Rollback of source code distribution to tar.gz archive format.
  * Fixed unneeded resource object deletion and use-after-free in
    VST plugin wrapper.
  * Fixed window sizing for CLAP plugin format.
  * Updated CLAP SDK to 1.2.2.
  * Updated VST3 SDK to 3.7.12, may be breaking changes related to
    parameter identifiers as Steinberg has twice reduced the set of
    valid paremeter identifiers.
  * Several fixes in build scripts.</changelog>
</package>
<package pkgid="17e8dfd75298961f35a87279ae14e50c97a2d727cdf94a0d01012eb00652270600fb98f92d3f1c32b0bc3784d667ebcd1dcfdc86120119176253fcea409996fb" name="clap-zam-plugins" arch="x86_64">
  <version epoch="0" ver="4.3" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1562414400">- Trim blurry claims, bias and conjecture from description. Stop
  mentioning features that are not even build-enabled.
- Use find {} + over find {} ;</changelog>
  <changelog author="Giordano Boschetti &lt;geekosdaw@gmail.com&gt;" date="1569067200">- separate plugins in specific packages with the conventional Linux names</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1591358400">- Update to version 3.12
  * Bugfixes and DSP improvements
    + ZamCompX2: Fix bug with left channel using right side
    + Compressors: 5% speedup
    + ZaMultiCompX2: 15% Speed up - remove averaging every
    cycle
    + ZaMultiCompX2: Fix averaging
    + ZamTube: Fix uninitialised bugs
- Spec cleanup</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1595246400">- Update to version 3.13
  * ZamTube: Add labels for tonestack styles
  * All: Fix narrowing of double to float math
  * Fix glibc compat for finite math ABI change (-lm)
- Drop zam-plugins-verbose_build.patch (no longer necessary)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618488000">- Update to version 3.14
  + ZamTube DSP overhaul
  + Virtual circuit redesigned for realistic tube emulation
  + Two modes - 60's version and Gridleak version
  + Optimised slightly for lower DSP load without losing quality</changelog>
  <changelog author="kv@kott.no-ip.biz" date="1671624000">- Update to version 4.1:
  * Version 4.1
  * Makefile compat with non-GNU extensions, install clap and vst3
  * Fix inline processing
  * Handle dynamic buffer size and sample rate changes
  * Version 4.0
  * Update DPF
  * Fix invalid use of dpf states
  * ZamHeadX2: Fix bad initial state
  * ZamVerb: Fix uninitialised values
  * Delete samplerate converter state when done (fix memleak)</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1699185600">- Add 01-fix-shell-in-make-for-leap.patch fix build in Leap
- Update to version 4.2:
  * Version 4.2
  * Update dpf to latest main
  * ZamHeadX2: Fix mapping of FIR filter selection
  * ZamTube: Tweak input gain on gridleaking tube to distinguish modes better
  * ZamTube: Make gridleak mode produce less muddy bass
  * ZamTube: Make insane mode less harsh, adds more bass by fixing gridleak
  * ZamTube: Use two tube stages with tonestack in between
  * ZamTube: Use 20dB max of tube drive and scale output better
  * ZamTube: Move tonestack post tube again, shapes wave better.
  * ZaMultiCompX2: Use detection switch for mono LF when averaging</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1699444800">- fix conditional patch in .spec</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jgwang@suse.com" date="1725796800">- Update to version 4.3:
  * Version 4.3
  * AU: Enable new plugin type
  * dpf: Update submodule to latest main
  * ZamEQ2: Adjust ranges on controls to be similar to SSL 9000 strip
  * ZamNoise: Try again
  * ZamNoise: Try again
  * ZamNoise: Try to fix leak detected by valgrind
  * ZamNoise: Add missing fftw_cleanup()
  * ZamNoise: Fix uninitialised values
  * ZamNoise: Ship new plugin and update UI with new control
  * ZamNoise: Add reduction amount control
  * ZamNoise: Clean up unused code paths
  * ZamNoise: Increase amount of noise reduction without compromising sound
  * ZamNoise: Stronger noise reduction using windowed noise
  * ZamNoise: Use EM algorithm variation with smaller FFT
  * ZaMaximX2: Fix threshold and change ceiling to gain</changelog>
</package>
<package pkgid="e98dc9efcebeb56225bd01cbc9839d0701603c7827729c81bd56fbe6366b8456f0df7e2a1cc6cc10585e1bb291e2d77b8b15105f7b5c38cbe16bc72696a8a790" name="clapper" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="bp160.1.12"/>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1618833600">- Update to version 0.2.1:
  * Fix missing top left menu buttons on some system configurations
  * Fix potential video sink deadlock
  * Do not show mobile controls transition on launch
  * Show tooltip with full playlist item text on hover
  * Auto select best matching resolution for used monitor
  * Added some YouTube related preferences
  * Added support for live HLS videos
  * Added support for non-adaptive live HLS streaming</changelog>
  <changelog author="Dead Mozay &lt;dead-mozay@opensuse.org&gt;" date="1624017600">- Update to version 0.3.0:
  * Added MPRIS support.
  * Added repeat modes: single video, whole playlist and shuffle.
  * Support opening folders with media files.
  * Append playlist items by holding Ctrl while doing Drag and Drop.
  * Improved handling of keyboard shortcuts.
  * Added more keyboard shortcuts.
  * Added window that shows available keyboard shortcuts.
  * Show black screen by default after playback
    (make showing last frame optional instead).
  * Added ability to export playlist to file.
  * Improve handling of changing displays with different resolutions.
  * Added support for EGL under x11 with GTK 4.3.1 or later.
  * Added missing symbolic app icon.
  * Some misc bug fixes and code cleanups.</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1631534400">- Update to version 0.4.0:
  * New and adaptive preferences window.
  * Improved open URI dialog.
  * Few small tweaks to fullscreen UI design.
  * Show current video and audio decoders in popovers
    (easy way to check if HW accel is used).
  * Enabled NVDEC hardware acceleration by default
    (requires Nvidia proprietary drivers).
  * Added option to use PipeWire for audio output (experimental).
  * Added option to use playbin3 element (experimental).
  * Improved performance on devices running OpenGL ES.
  * Translations support.
  * New keyboard shortcuts:
  - Leave fullscreen with Escape key.
  - Toggle mute with Ctrl+M.
  * More touchscreen gestures:
  - Toggle playback with a long press.
  - Switch playlist items via double tap on screen side.
  * New translations:
  - Catalan.
  - Dutch.
  - German.
  - Italian.
  - Polish.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633348800">- Fix typelib name to follow standard in openSUSE.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645876800">- Update to version 0.4.1:
  * Compatibility with more recent libadwaita versions
  * Toggle mute with M button alone
  * Allow handling YouTube with external GStreamer plugins
  * Fix catching errors when reading clipboard
  * Fix missing translator-credits
  * Fix missing gio-unix-2.0 dep
  * Fix playback pausing when entering fullscreen with touchscreen
  * Fix GST_PLUGIN_FEATURE_RANK env usage
  * Fix video/audio decoder change detection
  * Merge global video tags instead replacing them
  * Few other misc bug fixes
  * Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1654776000">- Update to version 0.5.1:
  * A quick hotfix release. Fixes problems with new video sink on
    displays with non-100% scaling applied.
- Changes from version 0.5.0:
  * Clapper now includes an all new and improved GStreamer video
    sink. With it, we are moving away from GLArea into using
    GdkPaintable. This already gives us slight performance
    improvement in some cases and opens new possibilities to
    improve it further at a later time. New sink now also handles
    overlaying and displaying subtitles on the GTK side of things
    (as a separate GdkTextures instead of drawing them into
    framebuffer). Old, now called "legacy" sink is still included.
    If there are any problems with the new one, you can set
    CLAPPER_USE_LEGACY_SINK=1 env to use the old one.
  * Networking was ported into libsoup3. The built-in, unfinished
    web application was removed.
  * Additionally, app now supports D-Bus launching
    (DBusActivatable).
  * Some other misc fixes and few small UI changes were also done.
  * Updated translations.
- Update libnames define to align with soname.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 0.5.2:
  + Fix time labels display on RTL languages
  + Improved GL/GLES context automatic selection
  + Updated translations.</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;sp1rit@disroot.org&gt;" date="1713873600">- Update to version 0.6.0:
  + Clapper was basically rewritten from scratch, but the most
    significant changes to the Clapper application itself include:
  - Brand new, simplified and consistent UI
  - Player now operates on playback queue model
  - Multiple queue progression modes to choose from (consecutive,
    repeat item, carousel, shuffle)
  - New media info window (shows media information and GStreamer
    elements used to play it)
  - More dialogs and windows use libadwaita
  - Multiple new status/info overlays showing what is going and
    other messages
  - Added video buffering animation
  - Clapper will now inform users about missing GStreamer plugins
    needed for playback
  - Video chapters now appear throughout the seek bar on hover and
    while dragging slider
  - Vastly expanded MPRIS implementation
  - Integrated media discovery (see titles of queued items instead
    of URIs)
  - Expanded WebSocket server functionality (for remote playback
    control)
  - Increased maximum volume amplification level to 200%
  - Added some new keyboard shortcuts
  - In addition to volume, now also speed and queue progression
    mode are restored on launch
  - Fixed keyboard shortcuts not being reversed (e.g. seek) in RTL
    languages
  - Toggle play moved to left mouse button, right one now opens
    context menu (which was previously hard to access)
  - Many bug fixes and QoL improvements
  + Developers using libclapper, might want to read the main
    paragraphs of the changelog, as the internals have changed
    completely: https://github.com/Rafostar/clapper/releases/tag/0.6.0</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1719835200">- Update to version 0.6.1:
  + Updated metainfo summary and colors
  + Complemented metainfo categories
  + Fixed wrong MARKER_NO_END value in Clapper API GIR
  + Fixed GtkWindowControls style when used within ClapperGtkVideo
    as OSD
  + Fixed crashes after GL context is destroyed
  + Fixed missing signals disconnections after dispose of
    ClapperGtkVideo
  + Fixed playback of media with missing plugins for metadata
  + Few small documentation fixes
  + Fixed problems building clapper-gtk documentation on a clean
    system
  + Fixed info window not closing when pressing "Esc" key
  + Fixed opened file content type detection (used for determining
    subtitle files)
  + Few fixes and additional checks for meson build script
  + Ensured private types before template init in ClapperGtk API
  + Enabled audio pitch correction for non-normal speed in
    ClapperGtkVideo (use "scaletempo" audio filter by default)
  + Fixed invisible status message in ClapperGtkVideo when used in
    light theme apps
  + Made transitions time in ClapperGtkBillboard widget a tad
    faster
  + Updated translations.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1720785600">- add the forgotten typelib packages to devel (as a requirement)</changelog>
</package>
<package pkgid="bdff7cfe3cacc8d3705e149dd05bfa07d6f91da299a156f1e25ef07ae992265348cc1687470b90e4ff4d01817e5e74c1378bf6a72680354e7838ab2a4376f2c4" name="clapper-devel" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="bp160.1.12"/>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1618833600">- Update to version 0.2.1:
  * Fix missing top left menu buttons on some system configurations
  * Fix potential video sink deadlock
  * Do not show mobile controls transition on launch
  * Show tooltip with full playlist item text on hover
  * Auto select best matching resolution for used monitor
  * Added some YouTube related preferences
  * Added support for live HLS videos
  * Added support for non-adaptive live HLS streaming</changelog>
  <changelog author="Dead Mozay &lt;dead-mozay@opensuse.org&gt;" date="1624017600">- Update to version 0.3.0:
  * Added MPRIS support.
  * Added repeat modes: single video, whole playlist and shuffle.
  * Support opening folders with media files.
  * Append playlist items by holding Ctrl while doing Drag and Drop.
  * Improved handling of keyboard shortcuts.
  * Added more keyboard shortcuts.
  * Added window that shows available keyboard shortcuts.
  * Show black screen by default after playback
    (make showing last frame optional instead).
  * Added ability to export playlist to file.
  * Improve handling of changing displays with different resolutions.
  * Added support for EGL under x11 with GTK 4.3.1 or later.
  * Added missing symbolic app icon.
  * Some misc bug fixes and code cleanups.</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1631534400">- Update to version 0.4.0:
  * New and adaptive preferences window.
  * Improved open URI dialog.
  * Few small tweaks to fullscreen UI design.
  * Show current video and audio decoders in popovers
    (easy way to check if HW accel is used).
  * Enabled NVDEC hardware acceleration by default
    (requires Nvidia proprietary drivers).
  * Added option to use PipeWire for audio output (experimental).
  * Added option to use playbin3 element (experimental).
  * Improved performance on devices running OpenGL ES.
  * Translations support.
  * New keyboard shortcuts:
  - Leave fullscreen with Escape key.
  - Toggle mute with Ctrl+M.
  * More touchscreen gestures:
  - Toggle playback with a long press.
  - Switch playlist items via double tap on screen side.
  * New translations:
  - Catalan.
  - Dutch.
  - German.
  - Italian.
  - Polish.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633348800">- Fix typelib name to follow standard in openSUSE.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645876800">- Update to version 0.4.1:
  * Compatibility with more recent libadwaita versions
  * Toggle mute with M button alone
  * Allow handling YouTube with external GStreamer plugins
  * Fix catching errors when reading clipboard
  * Fix missing translator-credits
  * Fix missing gio-unix-2.0 dep
  * Fix playback pausing when entering fullscreen with touchscreen
  * Fix GST_PLUGIN_FEATURE_RANK env usage
  * Fix video/audio decoder change detection
  * Merge global video tags instead replacing them
  * Few other misc bug fixes
  * Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1654776000">- Update to version 0.5.1:
  * A quick hotfix release. Fixes problems with new video sink on
    displays with non-100% scaling applied.
- Changes from version 0.5.0:
  * Clapper now includes an all new and improved GStreamer video
    sink. With it, we are moving away from GLArea into using
    GdkPaintable. This already gives us slight performance
    improvement in some cases and opens new possibilities to
    improve it further at a later time. New sink now also handles
    overlaying and displaying subtitles on the GTK side of things
    (as a separate GdkTextures instead of drawing them into
    framebuffer). Old, now called "legacy" sink is still included.
    If there are any problems with the new one, you can set
    CLAPPER_USE_LEGACY_SINK=1 env to use the old one.
  * Networking was ported into libsoup3. The built-in, unfinished
    web application was removed.
  * Additionally, app now supports D-Bus launching
    (DBusActivatable).
  * Some other misc fixes and few small UI changes were also done.
  * Updated translations.
- Update libnames define to align with soname.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 0.5.2:
  + Fix time labels display on RTL languages
  + Improved GL/GLES context automatic selection
  + Updated translations.</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;sp1rit@disroot.org&gt;" date="1713873600">- Update to version 0.6.0:
  + Clapper was basically rewritten from scratch, but the most
    significant changes to the Clapper application itself include:
  - Brand new, simplified and consistent UI
  - Player now operates on playback queue model
  - Multiple queue progression modes to choose from (consecutive,
    repeat item, carousel, shuffle)
  - New media info window (shows media information and GStreamer
    elements used to play it)
  - More dialogs and windows use libadwaita
  - Multiple new status/info overlays showing what is going and
    other messages
  - Added video buffering animation
  - Clapper will now inform users about missing GStreamer plugins
    needed for playback
  - Video chapters now appear throughout the seek bar on hover and
    while dragging slider
  - Vastly expanded MPRIS implementation
  - Integrated media discovery (see titles of queued items instead
    of URIs)
  - Expanded WebSocket server functionality (for remote playback
    control)
  - Increased maximum volume amplification level to 200%
  - Added some new keyboard shortcuts
  - In addition to volume, now also speed and queue progression
    mode are restored on launch
  - Fixed keyboard shortcuts not being reversed (e.g. seek) in RTL
    languages
  - Toggle play moved to left mouse button, right one now opens
    context menu (which was previously hard to access)
  - Many bug fixes and QoL improvements
  + Developers using libclapper, might want to read the main
    paragraphs of the changelog, as the internals have changed
    completely: https://github.com/Rafostar/clapper/releases/tag/0.6.0</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1719835200">- Update to version 0.6.1:
  + Updated metainfo summary and colors
  + Complemented metainfo categories
  + Fixed wrong MARKER_NO_END value in Clapper API GIR
  + Fixed GtkWindowControls style when used within ClapperGtkVideo
    as OSD
  + Fixed crashes after GL context is destroyed
  + Fixed missing signals disconnections after dispose of
    ClapperGtkVideo
  + Fixed playback of media with missing plugins for metadata
  + Few small documentation fixes
  + Fixed problems building clapper-gtk documentation on a clean
    system
  + Fixed info window not closing when pressing "Esc" key
  + Fixed opened file content type detection (used for determining
    subtitle files)
  + Few fixes and additional checks for meson build script
  + Ensured private types before template init in ClapperGtk API
  + Enabled audio pitch correction for non-normal speed in
    ClapperGtkVideo (use "scaletempo" audio filter by default)
  + Fixed invisible status message in ClapperGtkVideo when used in
    light theme apps
  + Made transitions time in ClapperGtkBillboard widget a tad
    faster
  + Updated translations.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1720785600">- add the forgotten typelib packages to devel (as a requirement)</changelog>
</package>
<package pkgid="c9a661cea4dfd7e8c16c8115b8f3062a1a1ee4bcc491fce2ea5f9e34117184ce17e51bf9314a166b8817395afaa329971fcf4381f70d83b3635d4933be3bba06" name="clapper-lang" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="bp160.1.12"/>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1618833600">- Update to version 0.2.1:
  * Fix missing top left menu buttons on some system configurations
  * Fix potential video sink deadlock
  * Do not show mobile controls transition on launch
  * Show tooltip with full playlist item text on hover
  * Auto select best matching resolution for used monitor
  * Added some YouTube related preferences
  * Added support for live HLS videos
  * Added support for non-adaptive live HLS streaming</changelog>
  <changelog author="Dead Mozay &lt;dead-mozay@opensuse.org&gt;" date="1624017600">- Update to version 0.3.0:
  * Added MPRIS support.
  * Added repeat modes: single video, whole playlist and shuffle.
  * Support opening folders with media files.
  * Append playlist items by holding Ctrl while doing Drag and Drop.
  * Improved handling of keyboard shortcuts.
  * Added more keyboard shortcuts.
  * Added window that shows available keyboard shortcuts.
  * Show black screen by default after playback
    (make showing last frame optional instead).
  * Added ability to export playlist to file.
  * Improve handling of changing displays with different resolutions.
  * Added support for EGL under x11 with GTK 4.3.1 or later.
  * Added missing symbolic app icon.
  * Some misc bug fixes and code cleanups.</changelog>
  <changelog author="Dead Mozay &lt;dead_mozay@opensuse.org&gt;" date="1631534400">- Update to version 0.4.0:
  * New and adaptive preferences window.
  * Improved open URI dialog.
  * Few small tweaks to fullscreen UI design.
  * Show current video and audio decoders in popovers
    (easy way to check if HW accel is used).
  * Enabled NVDEC hardware acceleration by default
    (requires Nvidia proprietary drivers).
  * Added option to use PipeWire for audio output (experimental).
  * Added option to use playbin3 element (experimental).
  * Improved performance on devices running OpenGL ES.
  * Translations support.
  * New keyboard shortcuts:
  - Leave fullscreen with Escape key.
  - Toggle mute with Ctrl+M.
  * More touchscreen gestures:
  - Toggle playback with a long press.
  - Switch playlist items via double tap on screen side.
  * New translations:
  - Catalan.
  - Dutch.
  - German.
  - Italian.
  - Polish.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633348800">- Fix typelib name to follow standard in openSUSE.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1645876800">- Update to version 0.4.1:
  * Compatibility with more recent libadwaita versions
  * Toggle mute with M button alone
  * Allow handling YouTube with external GStreamer plugins
  * Fix catching errors when reading clipboard
  * Fix missing translator-credits
  * Fix missing gio-unix-2.0 dep
  * Fix playback pausing when entering fullscreen with touchscreen
  * Fix GST_PLUGIN_FEATURE_RANK env usage
  * Fix video/audio decoder change detection
  * Merge global video tags instead replacing them
  * Few other misc bug fixes
  * Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1654776000">- Update to version 0.5.1:
  * A quick hotfix release. Fixes problems with new video sink on
    displays with non-100% scaling applied.
- Changes from version 0.5.0:
  * Clapper now includes an all new and improved GStreamer video
    sink. With it, we are moving away from GLArea into using
    GdkPaintable. This already gives us slight performance
    improvement in some cases and opens new possibilities to
    improve it further at a later time. New sink now also handles
    overlaying and displaying subtitles on the GTK side of things
    (as a separate GdkTextures instead of drawing them into
    framebuffer). Old, now called "legacy" sink is still included.
    If there are any problems with the new one, you can set
    CLAPPER_USE_LEGACY_SINK=1 env to use the old one.
  * Networking was ported into libsoup3. The built-in, unfinished
    web application was removed.
  * Additionally, app now supports D-Bus launching
    (DBusActivatable).
  * Some other misc fixes and few small UI changes were also done.
  * Updated translations.
- Update libnames define to align with soname.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 0.5.2:
  + Fix time labels display on RTL languages
  + Improved GL/GLES context automatic selection
  + Updated translations.</changelog>
  <changelog author="Florian &quot;sp1rit&quot; &lt;sp1rit@disroot.org&gt;" date="1713873600">- Update to version 0.6.0:
  + Clapper was basically rewritten from scratch, but the most
    significant changes to the Clapper application itself include:
  - Brand new, simplified and consistent UI
  - Player now operates on playback queue model
  - Multiple queue progression modes to choose from (consecutive,
    repeat item, carousel, shuffle)
  - New media info window (shows media information and GStreamer
    elements used to play it)
  - More dialogs and windows use libadwaita
  - Multiple new status/info overlays showing what is going and
    other messages
  - Added video buffering animation
  - Clapper will now inform users about missing GStreamer plugins
    needed for playback
  - Video chapters now appear throughout the seek bar on hover and
    while dragging slider
  - Vastly expanded MPRIS implementation
  - Integrated media discovery (see titles of queued items instead
    of URIs)
  - Expanded WebSocket server functionality (for remote playback
    control)
  - Increased maximum volume amplification level to 200%
  - Added some new keyboard shortcuts
  - In addition to volume, now also speed and queue progression
    mode are restored on launch
  - Fixed keyboard shortcuts not being reversed (e.g. seek) in RTL
    languages
  - Toggle play moved to left mouse button, right one now opens
    context menu (which was previously hard to access)
  - Many bug fixes and QoL improvements
  + Developers using libclapper, might want to read the main
    paragraphs of the changelog, as the internals have changed
    completely: https://github.com/Rafostar/clapper/releases/tag/0.6.0</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1719835200">- Update to version 0.6.1:
  + Updated metainfo summary and colors
  + Complemented metainfo categories
  + Fixed wrong MARKER_NO_END value in Clapper API GIR
  + Fixed GtkWindowControls style when used within ClapperGtkVideo
    as OSD
  + Fixed crashes after GL context is destroyed
  + Fixed missing signals disconnections after dispose of
    ClapperGtkVideo
  + Fixed playback of media with missing plugins for metadata
  + Few small documentation fixes
  + Fixed problems building clapper-gtk documentation on a clean
    system
  + Fixed info window not closing when pressing "Esc" key
  + Fixed opened file content type detection (used for determining
    subtitle files)
  + Few fixes and additional checks for meson build script
  + Ensured private types before template init in ClapperGtk API
  + Enabled audio pitch correction for non-normal speed in
    ClapperGtkVideo (use "scaletempo" audio filter by default)
  + Fixed invisible status message in ClapperGtkVideo when used in
    light theme apps
  + Made transitions time in ClapperGtkBillboard widget a tad
    faster
  + Updated translations.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1720785600">- add the forgotten typelib packages to devel (as a requirement)</changelog>
</package>
<package pkgid="046a8ffca5e627780978bd45759ce56ba5fd60448f73dddc9832a6740b535d079dce9a29c18d06551731afb78e55e2771982e506c9a55f4d0aa1d0a0bdcc77e8" name="clash" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="bp160.1.15"/>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1564056000">- Features
  * make the proxies order the same as the order in the config file
  * local socks5/http(s) auth
  * support DoH
  * custom dns use ipv4/ipv6 dual stack when ipv6: true
  * improve the directly connect experience for someone who has ipv6 network
- Changes
  * use recommend extension .yaml and forward compatibility before 1.0 release
  * proxy server host now resolve ip through custom dns
  * check target is valid in rules
  * adjust fake-ip ttl
  * add mutex for fake-ip pool
  * use dns for ALPN in tcp-tls nameserver
  * log output to stdout
- Bugfixes
  * UDP crash in tunnel
  * incorrect fake-ip dns ttl
  * DNS server not recreate correctly
  * strict ss obfs config check</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1570968000">- Update to version 0.16.0
  * Features
  - Logs and traffic API support websocket
  - Support custom hosts
  - Support customizing bind-address when allow-Ian is true (#255)
  - Trace adapters when dialing (#170)
  - Allow arbitrary order in proxy group (#89)
  - Add read clash version API
  - Add DNS fallback filters (#105)
  - V2ray-plugin support disable mux
  - Proxy group use correctly last speed test record
  - Experimental support shell
  * Changes
  - Use lru cache-store fake-ip to avoid outdate
  - Set servername to vmess with providing host in wss
  - Speedtest with HEAD instead of GET (#259)
  - URL-test retry behavior (#283)
  - Throw error when CONNECT return 5xx
  * Bugfixes
  - Fully udp associate support (#233)
  - Don't read yml if yaml exist and yml not exist (#253)
  - Some udp issue (#265)
  - Socks5 small-probability crash
  - HTTP handle 100 Continue request correctly (#288)
  - TCP dual-stack dial behavior (#307 #311 #325)
  - API cors config
  - Fakeip small-probability missing record</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1583496000">- Update to version 0.18.0 (20200221)
  * Features
  - improve udp NAT type
  - add default-nameserver and outbound interface
  * Changes
  - increase DNS timeout (#464)
  - initial config with port
  - make ping api GET / under authentication
  * Bugfixes
  - log display in DIRECT or GLOBAL
  - provider should fallback to reading remote when local
    file invalid
  - vmessUDPConn should return a correctly address
  - socks5 inbound return remote udp addr for identity</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1591963200">- Update to version 0.20.0 (20200507)
  * Features
  - add vmess http network
  - `hosts` `fake-ip-filter` support dot dot wildcard
  - add basic auth support for provider URL (#645)
  * Changes
  - recycle buffer after packet used
  - verify mmdb on initial
  - improve pool buffer alloc
  * Bugfixes
  - dns request panic
  - udp traffic track
  - set SO_REUSEADDR for UDP listeners on linux
  - dns tcp-tls correctly sni</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1598443200">- Update to version 1.1.0 (20200815)
  * Features
  - support PROCESS-NAME
  - add ssr support
  - dns server could lookup hosts
  * Changes
  - optimized DNS cache logic
  - add rule payload in log
  - fix go test race detect
  - protect alive with atomic value
  * Bugfixes
  - ss simple-obfs host should not have 80 port
  - ticker leak
  - should not write file on file provider
  - handle snell server reported error message properly
- Update to version 1.0.0 (20200627)
  * Features
  - add Mixed(http+socks5) proxy (#685)
  - domain trie support wildcard alias
  - add tolerance for utl-test
  * Changes
  - `mode` use lower case
  - API for connections add rule payload
  - dns ipv6 logic
  * Bugfixes
  - provider initial return the current error
  - panic of socks5 client when missing auth</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1638705600">- Update to version 1.8.0:
  * Fix: windows arm7 build
  * Chore: update dependencies and rename profile props
  * Feature: mark on socket (#1705)
  * Fix: parse dial interface option
  * Fix: codeql alerts
  * Feature: dial different NIC for all proxies (#1714)
  * Chore: adjust all udp alloc size
  * Chore: use uber max procs
  * Fix: remove ResponseHeaderTimeout limitation (#1690)
  * Chore: use alpn http 1.1 only on trojan websocket by default</changelog>
  <changelog author="Orville Q. Song &lt;orville@anislet.dev&gt;" date="1641211200">- Update to version 1.9.0:
  * Chore: update dependencies
  * Fix: multiple port string parsing overflow (#1868)
  * Chore: remove forward compatible code
  * Chore: ReCreate* do side effect job (#1849)
  * Chore: remove reduce regex compile (#1855)
  * Fix: when both providers and proxies are present, use the health check configuration for proxies (#1821)
  * Chore: builtin right mime of .js (#1808)
  * Feature: add linux/arm/v6 for the container image (#1771)
  * Fix: fakeip pool cycle used
  * Fix: provider filter potential panic
  * Feature: add filter on proxy provider (#1511)
  * Fix: should return io.EOF immediately
  * Change: use nop packet conn for reject
  * Fix: revert ssr udp fix
  * Fix: bind iface should throw control error</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1670500800">- Update to version 1.12.0:
  * add tunnels (like SSH local forwarding)
  * fix fake ip pool offset calculated
  * migration to go1.19
  * reduce dhcp dns client cost
  * fix: query string parse on ws-opts
  * fix: handle parse socks5 udp address correctly
  * satisfy RFC4343 - DNS case insensitivity
  * custom-specific interface can be set on nameserver
  * support snell v3
  * ignore empty dns server error</changelog>
</package>
<package pkgid="bb94b45c779d0cb608da2a9bfe501121590227f01d2f92a541f8d67242db4285545eda15bdb9bad42d4fd0205aaa33d30398bbf962e457b0585c5a9ca9856c94" name="clatd" arch="noarch">
  <version epoch="0" ver="1.6" rel="bp160.1.6"/>
  <changelog author="mardnh@gmx.de" date="1543752000">- Initial package, version 1.4</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1558353600">- Update to version 1.5
  * Fixes compatibility with recent Linux kernels in get_plat_dev().
- Drop patches (included in upstream release):
  * 0001-nm-dispatcher-only-act-on-iface-up-down-events.patch
  * 0002-Update-siit-dc-eam-I-D-references-to-RFC-numbers.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1678017600">- Update to version 1.6
  * Replace usage of obsolete IO::Socket::INET6 for IO::Socket::IP.
  * Make interaction wth NetworkManager and systemd more robust.</changelog>
</package>
<package pkgid="269e6528889f03e1eb6db19d95e069ae27274a7ed5470120d1097f12f8355a18a3d9fd24e5343ac7b12f84d1cff273fdb585ad6cca94c9842b9fffea8432aaa6" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="bp160.1.5"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 4.1.0:
  * Text zooming in the Message View is now possible, using CTRL+mouse
    wheel up/down, CRTL+touchpad two-fingered vertical swiping, or
    the Message View's right-click menu.
  * GtkColorChooser is now used in the Spell Checking preferences,
    Colour Label preferences, and the folder Properties pages.
  * 'Default From:' has been added to the Compose page of the folder
    Properties. This allows setting an email address which will
    override the Account's email address.
  * An option has been added to the 'General' page of the folder
    Properties, 'Skip folder when searching for unread or new
    messages', so that the folder can be skipped when using Go To
    next/previous unread/new message.
  * 'By Sender' has been added to '/Tools/Create filtering rule/...'
    and '/Tools/Create processing rule/...'
  * The option 'Run processing rules before marking all messages in a
    folder as read or unread' has been added to
    '/Configuration/Preferences/Display/Summaries'.
  * It is now possible to add a toolbar button to 'Run folder
    processing rules'.
  * The Actions configuration list now has 'Top' and 'Bottom' buttons.
  * In '/Tools/List URLs' it is now possible to CTRL+c or right-click
    a list item and 'Copy URL'; copying multiple selections is also
    possible.
    Phishing URLs are now indicated in red by default. This uses the
    colour defined in the hidden preference, log_error_color.
  * The method of handling Tags has been improved.
  * When using the separate Message View the Enter key will open the
    currently selected message in the Message List. So, for example,
    if you delete the current message, pressing Enter will open the
    next message without having to leave the separate Message View.
  * The quicksearch type-ahead keypress delay is now customizable
    using a hidden preference ("qs_press_timeout").
  * Improvements to the storage of OAuth2 refresh tokens.
  * A "View all" button has been added to the Themes preferences page
    in order to preview all icons of a theme.
  * The term 'master passphrase' has been replaced in the UI with
    'primary passphrase'.
  * The label 'SSL/TLS' has been replaced with 'TLS' in the UI.
  * chmod 0600 is set on log files, history files, saved parts, etc.
  * "Keyword Warner" plugin has been added. This shows a warning when
    sending or queueing a message and a reference to one or more
    user-defined keywords are found in the message text.
  * Adding a new RSSyl feed or subscribing to a Webcal will
    automatically suggest using any suitable URI found on the
    clipboard.
  * The user manuals have been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, French, Indonesian, Polish, Romanian, Russian,
    Slovak, Spanish, Turkish.
  * bug fixes:
  + bug 4312, 'litehtml plugin loops (hangup)'
  + bug 4346, 'Error: Certificate is for invalid2.invalid, but
    connection is to imap.gmail.com'
  + bug 4442, 'vcalendar segfault if in invitation email and
    switch to another folder'
  + bug 4495, 'Improve text strings for OAuth2'
  + bug 4496, 'Fancy crashes when opening an email'
  + bug 4511, 'Uses deprecated ghostscript operator'
  + bug 4513, 'msg window too small in 3 column layout'
  + bug 4517, 'Thread safety issues in signature checking code'
  + bug 4524, 'Problems exiting/closing Claws Mail'
  + bug 4534, 'Address book causing claws to terminate unexpectedly'
  + bug 4535, 'Setting msgview_date_format=1 does not work'
  + bug 4536, 'Tab for address selects second entry'
  + bug 4556, 'Filesize in kilobytes versus kibibytes'
  + bug 4577, 'Fancy plugin with GTK3 seems to ignore content encoding'
  + when using 'hide_timezone' use UTC when generating MessageID
  + non-translation of some button labels
  + the initial position of the (X-)Face image
  + return receipts from accounts without a name
  + folderview pixmaps not being updated after icon theme change
    until restart
  + spell checker underlining when black is chosen
  + text on various buttons
  + scrolling in a message's attachments bar (scrolling left or
    right were scrolling down).
  + scrolling not working when GTK smooth scroll is set
  + scroll to next/prev page in pdf_viewer
  + build error with -Werror=format-security
  + invalid crypto engine (gpgme_op_verify failed)
  + vCalendar tooltip in Day View showed the wrong month.
  + View Log button
  + when closing Compose window dialogue requesting choice from
    user is not shown and some options are lost in drafted copy
  + weird logic with the 'Edit filter action' dialog
  + resource leaks; memory corruption</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1649160000">- Disable pilot-link also on openSUSE Leap &gt;= 15.4
- The intree ca-certificates file was removed upstream. Remove our
  cleanup code for it.</changelog>
  <changelog author="&lt;d_werner@gmx.net&gt;" date="1655985600">- claws-mail 4.x.x with GTK 3 ignores the plugin setting in the
  clawsrc file in range [Plugins_GTK2] - change it to
  [Plugins_GTK3] in the skel/.claws-mail/clawsrc file (bnc#1200880)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657800000">- Backport 5fee50c54a370fdfb5241bd4c4c16281a741762e.patch:
  This fixes building with newer perl.
- Switch package to autosetup.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666353600">- Update to 4.1.1:
  * Marked messages in the Message List can now be displayed with bold
    text by setting the hidden preference "bold_marked".
  * The confirmation dialogue when saving all the attachments of a
    message can now be disabled.
  * The Message List tooltip for the From column now shows name and
    address.
  * OAuth2: various fixes and improvements.
  * The user manuals have been updated.
  * Updated translations: Brazilian Portuguese, Catalan, Czech, Dutch,
    French, Polish, Russian, Slovak, Spanish, Swedish, Traditional
    Chinese, Turkish.
  * Build system: GLib version 2.50 or greater is required; autoconf
    version 2.69 or greater is required; pkgconfig support for GPGME
    and libgpg-error has been added; GnuTLS is required for OAuth2;
    OAuth2 support can be removed with --disable-oauth2.
  * bug 4547, '--enable-tests makes compilation fail'
  * bug 4583, 'Compose window 'Discard message' dialog is
  * even though draft is already saved'
  * bug 4584, 'Compose window causing Claws to terminate
  * '
  * bug 4589, 'Edit Group Details panel wording unclear.'
  * bug 4615, 'Compilation fails with --disable-gnutls'
  * bug 4620, 'German translation of Content-Transfer-Encoding
  * unwanted colon'
  * bug 4628, 'typos in the README file'
  * bug 4630, 'Fancy loads remote images when remote content
  * disabled'
  * bug 4636, 'Handle non-ascii characters in server response'
  * AddressKeeper plugin: not saving addresses.
  * Perl plugin: building with perl v5.35.2 or greater.
  * AttRemover plugin: filenames would not be shown and corrupt
  * output
  * OAuth2: Use the user-configured timeout
  * 'save all' dialogues' logic.
  * Make custom headers compliant with RFC 2822 § 3.6.
  * correctly set modified flag after auto-save
  * NNTP account's SMTP server wasn't used
  * building with older GLibs
- Remove 5fee50c54a370fdfb5241bd4c4c16281a741762e.patch: contained</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678104000">- Deactive litehtml/gumbo as gumbo will be deleted [boo#1208381]</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1700568000">- Update to 4.2.0:
  * An easy way to open any folder on start-up has been added:
    Right-click a folder and choose 'Open on start-up'.
    This can also be configured on the 'Folder list' tab of the
    /Configuration/Preferences/Display/Summaries page.
  * Spam statistics have been added to the session statistics.
  * It is now possible to save message attachments only, without the
    other message parts.
  * QuickSearch: support for a "v H V" search expression has been added
    and the 'y S' expression has been removed ('v X-Label S' can be
    used instead).
  * font/* and chemical/* MIME types are now recognised.
  * The image viewer now works correctly when not auto-loading images.
  * Icon Themes: it is no longer possible to install or remove system
    themes.
  * IMAP: Support for SCRAM-SHA-{224,256,384,512} authentication
    mechanisms has been added.
  * IMAP: The statusbar now shows that expunge is happening.
  * The GData plugin has been removed.
  * The Fancy plugin no longer requires libsoup or libsoup-gnome.
  * The LiteHTML Viewer plugin has been synchronised with litehtml 0.7.
  * The LiteHTML viewer plugin will now only be built automatically if
    libgumbo 0.12 or newer is available. Building with libgumbo 0.10
    must be explicitly requested using --enable-litehtml_viewer-plugin.
  * For extra debug output use --enable-more-addressbook-debug and
  - -enable-more-ldap-debug.
  * Added translation: Portuguese
  * Updated translations: Brazilian Portuguese, Catalan, Czech, French,
    Polish, Russian, Slovak, Spanish, Swedish, Traditional Chinese,
    Turkish.
  * bug 4491, 'address autocompletion list does not expand in
    height with the number of matches'
  * bug 4618, 'Rate limit by remote breaks queued/marked
    actions (Delete/Move)'
  * bug 4631, 'Embedding external editor crashes Claws-Mail on Wayland'
  * bug 4637, 'Segmentation fault when using SUMMARY is empty'
  * bug 4645, 'fails to check for perl-ExtUtils::Embed'
  * bug 4648, 'fails to build with gcc 13'
  * bug 4658, 'Headers unfolded incorrectly in message view'
  * bug 4664, 'OAUTH2 overwrites passwords even for plaintext logins'
  * bug 4666, 'fancy plugin doesn't build with libwebkit2gtk-4.1'
  * bug 4670, 'To/CC incorrectly escaped with a trailing backslash'
  * bug 4679, 'The correct date header is interpreted incorrectly to display strange date.'
  * bug 4693, 'Hang and crash when enable disable SVG Rendering prefs'
  * when starting with msgview hidden, toggling msgview to show it
    would use incorrect height
  * update quicksearch history list when changing type
  * wrong message which is shown when mail can't be sent
  * when redirecting, disable queueing
  * arbitrary paste restriction
  * when queueing or drafting a msg with an attachment which no longer
    exists, use the correct label on the button of the warning dialogue * using
    a custom header in found_in_addressbook match expressions
  * URIs may contain the '$' dollar sign
  * OAuth2, Update on-disk tokens as well when in-memory tokens are updated
  * Microsoft POP3 OAuth2 protocol</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718020800">- Update to 4.3.0:
  * Compose window: when the focus is in the message text, copied files
    can be pasted as attachments using /Edit/paste or Ctrl+V.
    (The context menu's Paste will still insert the list of files into
    the message body.)
  * '/Mark/Mark all read in folder' and 'Mark/Mark all unread in
    folder' have been re-added to the Message List context menu.
  * It is now possible to use '/Tools/Remove references' when
    forwarding mail.
  * Keyboard shortcuts: The "Choose preset keyboard shortcuts" selector
    has been integrated into the main preferences page.
    When 'Current' is the selected preset, Apply/OK will keep the
    existing settings.
  * An MBOX file can now be imported from the command line using
    `claws-mail --import-mbox %f` where %f is the full path to the
    MBOX file.
  * OAUTH2 support for Microsoft 365 GCC High has been added.
  * LiteHTML Viewer plugin: Updated to LiteHTML 0.9.
  * The menurc file is now backed-up on startup.
  * Removed support for the obsolete Avant Window Navigator.
  * Various code cleanups.
  * The manual has been updated.
  * New translation: Albanian.
  * Updated translations: Catalan, Czech, French, Hungarian, Indonesian,
    Polish, Romanian, Slovak, Spanish, Swedish, Turkish.
  * bug 4668, 'Sometimes, at program start, message list takes
    all the vertical space'
  * bug 4720, 'matcher: release regex_t in
    matcherprop_string_match'
  * bug 4724, 'set proper availability status to sign/encrypt
    toolbar buttons'
  * bug 4725, 'oauth2: remove trailing zero from transmit
    buffer in oauth2_contact_server'
  * bug 4728, 'socket: handle GNUTLS_E_PREMATURE_TERMINATION in
    ssl_read'
  * bug 4730, 'oauth2: fix string handling in
    oauth2_contact_server'
  * bug 4733, 'Line breaks lost in headers'
  * bug 4734, 'ssl_certificate: remove unhelpful warnings from
    certificate check'
  * bug 4746, 'matcher: remove incorrect condition in
    matcherprop_free'
  * bug 4747, 'matcher: simplify matcherprop_new'
  * bug 4749, 'release regex_t in
    summary_compile_simplify_regexp'
  * bug 4750, 'remove regcomp wrapper and call regcomp
    directly'
  * bug 4752, 'Adjust incorrect debug_printf call in pgp
    plugins'
  * bug 4754, 'text/enriched literal less-than sign sequence
    handled incorrectly
  * bug 4757, 'remove AX_FUNC_MKDIR'
  * bug 4758, 'remove unused check for bind_textdomain_codeset'
  * bug 4759, 'remove unused function checks from
    AC_CHECK_FUNCS'
  * bug 4760, 'use correct type for move_bar_id'
  * bug 4762, 'oauth2: preserve an existing refresh token'
  * bug 4765, 'only store smtp auth if authorization method is
    OAUTH2'
  * bug 4766, 'preserve the expiry value of SMTP auth type is
    not OAUTH2'
  * bug 4768, 'Adjust logic while evaluating enable_avatars'
  * bug 4770, 'remove intl from list of include directories'
  * bug 4773, 'remove obsolescent AC_C_CONST'
  * bug 4780, 'use proper prototype for two archiver functions'
  * bug 4781, 'use correct prototype for
    privacy_free_signature_data'
  * bug 4782, 'use correct prototype for stop_archiving'
  * bug 4786, 'remove type confusion in getsockopt call in
    sock_connect_async_cb'
  * bug 4787, 'Use correct function for memory transfer in
    crypt_cfb_buf'
  * bug 4788, '"Change primary passphrase" disabled status
    handling'
  * bug 4790, 'widget spacing in "Changing primary passphrase"
    dialog'
  * bug 4791, 'remove obsolete glib version check'
  * bug 4795, 'Please remove -no-cpp-precomp flag for Apple'
  * bug 4796, 'URL with wide character doesn't work'
  * bug 4798, 'Quoting wrong when format=flowed and
    respect_flowed_format is set'
  * CIDs 1220325, 1491306 and 1491315, 'Explicit null
    dereferenced (FORWARD_NULL)'
  * CIDs 1491064, 1491074, 1491211, 1491105, 1491139, 1491164,
    1491166, 1491168, 1491169, 1491178, 1491232, 1491242,
    1492281 and 1591844 'Use after free (USE_AFTER_FREE)'
  * CID 1491137 'Out-of-bounds access (OVERRUN)'
  * CID 1591952 values overwritten before being used
  * CID 1596594 (CHECKED_RETURN)
  * CID 1596595 'Resource leak'
  * errors caused by invalid MIME viewer command-line
  * building on non-X11 systems
  * Use CFLAGS provided by nettle.pc
  * Fancy plugin, recognise mid and data embedded images</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738756800">- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires. Current version support webkit built against soup 3.
- Drop pkgconfig(libsoup-2.4) BuildRequires: No longer needed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1740484800">- Update to 4.3.1:
  * The configuration option, "Don't popup error dialog on receive error"
    has been changed to "Show error dialog on receive error". Your previous
    choice will be automatically changed to the new format.
  * The option "Warn when pasting files as attachments" has been added to
    the Compose/Writing preferences page. This option was previously
    hidden.
  * chmod 0600 is now set on *history files in the configuration directory.
  * A new preference has been added to enable setting the chmod value of
    saved attachments: "Save attachments with chmod [   ]", found on the
    Other/Miscelleanous preferences page. The default value is 600.
  * The creation and updating of .mh_sequences files in MH mailbox folders
    is now optional and disabled by default. This is controlled by a new
    hidden preference, mh_compat_mode. If you were previously relying on
    this feature, set mh_compat_mode=1 in clawsrc before running this
    version.
  * A new hidden preference has been added, passphrase_dialog_msg_title_switch.
    This switches the placement of the dialogue message with the dialogue
    title in the passphrase dialogue. This can be useful for interacting with
    third-party programs such as KeePassXC.
  * The top-level 'Mark' menu item has been renamed to 'Marks'. If you have
    set custom hotkeys for any items in this menu you will need to re-set
    them.
  * New accounts now have all secure options activated by default,
    including TLS connections and SMTP AUTH.
  * The option to accept valid TLS certificates is now activated by default
    on new accounts.
  * Notification plugin: support for Ayatana indicator has been added.
  * PDF Viewer plugin: support for image/x-eps (encapsulated postscript)
    images has been added.
  * Libravatar plugin: the https URL, https://seccdn.libravatar.org/avatar,
    is now used by default.
  * vCalendar plugin: CREATED/LAST_MODIFIED are correctly handled, and the
    VTIMEZONE component is used when present
  * Various code cleanups.
  * The English, Spanish and French manuals have been updated.
  * Updated translations: Albanian, Brazilian Portuguese, British English,
    Catalan, Czech, Dutch, French, Polish, Portuguese, Romanian, Russian,
    Simplified Chinese, Slovak, Spanish, Swedish, Turkish.
  * bug fixes:
  * bug 3964, 'Attachment icon doesn't show in message list unless
    the message is clicked and then disappears later'
  * bug 4658, 'Headers unfolded incorrectly in message view'
  * bug 4817, 'Edit button in Messages view-&gt;Text settings not
    translatable'
  * bug 4818, 'Your Claws Mail configuration is from a newer...'
    dialog is shown more than once'
  * bug 4819, 'Text wrapping broken when text contains an URL'
  * bug 4821, 'If the Mail folder is on another partition, folder
    chmod settings are not applied to draft and queue'
  * bug 4824, 'No syntax highlighting after exiting external editor'
  * bug 4828, '"Mark" not translated anymore'
  * bug 4835, 'Disallow a forward slash in (IMAP) account names'
  * bug 4840, 'core dump unsubscribing from newsgroups'
  * CID 1491093: attrib leaked if attvalue is null
  * CID 1491370: unchecked return value.
  * archive plugin build in debug mode.
  * keep newsgroup subscription window on top when 'subscribe to
    newsgroup...' fails and newsgroup list can't be retrieved
  * don't silently fail to save a sent msg
  * IMAP: show the clip icon in the message list as soon as
    possible
  * stop needlessly checking which folders want sycnhronising every
    time we select a msg in an MH mailbox</changelog>
</package>
<package pkgid="b06463e67c6c5bf6fe7e0b7faa7539eb4bec758f380b5c3dd7d838523bde34da7b68ab51189501ab29d6e025d9ac45cbcec4cc4cdc519e61adc29feb149ab134" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="bp160.1.5"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 4.1.0:
  * Text zooming in the Message View is now possible, using CTRL+mouse
    wheel up/down, CRTL+touchpad two-fingered vertical swiping, or
    the Message View's right-click menu.
  * GtkColorChooser is now used in the Spell Checking preferences,
    Colour Label preferences, and the folder Properties pages.
  * 'Default From:' has been added to the Compose page of the folder
    Properties. This allows setting an email address which will
    override the Account's email address.
  * An option has been added to the 'General' page of the folder
    Properties, 'Skip folder when searching for unread or new
    messages', so that the folder can be skipped when using Go To
    next/previous unread/new message.
  * 'By Sender' has been added to '/Tools/Create filtering rule/...'
    and '/Tools/Create processing rule/...'
  * The option 'Run processing rules before marking all messages in a
    folder as read or unread' has been added to
    '/Configuration/Preferences/Display/Summaries'.
  * It is now possible to add a toolbar button to 'Run folder
    processing rules'.
  * The Actions configuration list now has 'Top' and 'Bottom' buttons.
  * In '/Tools/List URLs' it is now possible to CTRL+c or right-click
    a list item and 'Copy URL'; copying multiple selections is also
    possible.
    Phishing URLs are now indicated in red by default. This uses the
    colour defined in the hidden preference, log_error_color.
  * The method of handling Tags has been improved.
  * When using the separate Message View the Enter key will open the
    currently selected message in the Message List. So, for example,
    if you delete the current message, pressing Enter will open the
    next message without having to leave the separate Message View.
  * The quicksearch type-ahead keypress delay is now customizable
    using a hidden preference ("qs_press_timeout").
  * Improvements to the storage of OAuth2 refresh tokens.
  * A "View all" button has been added to the Themes preferences page
    in order to preview all icons of a theme.
  * The term 'master passphrase' has been replaced in the UI with
    'primary passphrase'.
  * The label 'SSL/TLS' has been replaced with 'TLS' in the UI.
  * chmod 0600 is set on log files, history files, saved parts, etc.
  * "Keyword Warner" plugin has been added. This shows a warning when
    sending or queueing a message and a reference to one or more
    user-defined keywords are found in the message text.
  * Adding a new RSSyl feed or subscribing to a Webcal will
    automatically suggest using any suitable URI found on the
    clipboard.
  * The user manuals have been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, French, Indonesian, Polish, Romanian, Russian,
    Slovak, Spanish, Turkish.
  * bug fixes:
  + bug 4312, 'litehtml plugin loops (hangup)'
  + bug 4346, 'Error: Certificate is for invalid2.invalid, but
    connection is to imap.gmail.com'
  + bug 4442, 'vcalendar segfault if in invitation email and
    switch to another folder'
  + bug 4495, 'Improve text strings for OAuth2'
  + bug 4496, 'Fancy crashes when opening an email'
  + bug 4511, 'Uses deprecated ghostscript operator'
  + bug 4513, 'msg window too small in 3 column layout'
  + bug 4517, 'Thread safety issues in signature checking code'
  + bug 4524, 'Problems exiting/closing Claws Mail'
  + bug 4534, 'Address book causing claws to terminate unexpectedly'
  + bug 4535, 'Setting msgview_date_format=1 does not work'
  + bug 4536, 'Tab for address selects second entry'
  + bug 4556, 'Filesize in kilobytes versus kibibytes'
  + bug 4577, 'Fancy plugin with GTK3 seems to ignore content encoding'
  + when using 'hide_timezone' use UTC when generating MessageID
  + non-translation of some button labels
  + the initial position of the (X-)Face image
  + return receipts from accounts without a name
  + folderview pixmaps not being updated after icon theme change
    until restart
  + spell checker underlining when black is chosen
  + text on various buttons
  + scrolling in a message's attachments bar (scrolling left or
    right were scrolling down).
  + scrolling not working when GTK smooth scroll is set
  + scroll to next/prev page in pdf_viewer
  + build error with -Werror=format-security
  + invalid crypto engine (gpgme_op_verify failed)
  + vCalendar tooltip in Day View showed the wrong month.
  + View Log button
  + when closing Compose window dialogue requesting choice from
    user is not shown and some options are lost in drafted copy
  + weird logic with the 'Edit filter action' dialog
  + resource leaks; memory corruption</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1649160000">- Disable pilot-link also on openSUSE Leap &gt;= 15.4
- The intree ca-certificates file was removed upstream. Remove our
  cleanup code for it.</changelog>
  <changelog author="&lt;d_werner@gmx.net&gt;" date="1655985600">- claws-mail 4.x.x with GTK 3 ignores the plugin setting in the
  clawsrc file in range [Plugins_GTK2] - change it to
  [Plugins_GTK3] in the skel/.claws-mail/clawsrc file (bnc#1200880)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657800000">- Backport 5fee50c54a370fdfb5241bd4c4c16281a741762e.patch:
  This fixes building with newer perl.
- Switch package to autosetup.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666353600">- Update to 4.1.1:
  * Marked messages in the Message List can now be displayed with bold
    text by setting the hidden preference "bold_marked".
  * The confirmation dialogue when saving all the attachments of a
    message can now be disabled.
  * The Message List tooltip for the From column now shows name and
    address.
  * OAuth2: various fixes and improvements.
  * The user manuals have been updated.
  * Updated translations: Brazilian Portuguese, Catalan, Czech, Dutch,
    French, Polish, Russian, Slovak, Spanish, Swedish, Traditional
    Chinese, Turkish.
  * Build system: GLib version 2.50 or greater is required; autoconf
    version 2.69 or greater is required; pkgconfig support for GPGME
    and libgpg-error has been added; GnuTLS is required for OAuth2;
    OAuth2 support can be removed with --disable-oauth2.
  * bug 4547, '--enable-tests makes compilation fail'
  * bug 4583, 'Compose window 'Discard message' dialog is
  * even though draft is already saved'
  * bug 4584, 'Compose window causing Claws to terminate
  * '
  * bug 4589, 'Edit Group Details panel wording unclear.'
  * bug 4615, 'Compilation fails with --disable-gnutls'
  * bug 4620, 'German translation of Content-Transfer-Encoding
  * unwanted colon'
  * bug 4628, 'typos in the README file'
  * bug 4630, 'Fancy loads remote images when remote content
  * disabled'
  * bug 4636, 'Handle non-ascii characters in server response'
  * AddressKeeper plugin: not saving addresses.
  * Perl plugin: building with perl v5.35.2 or greater.
  * AttRemover plugin: filenames would not be shown and corrupt
  * output
  * OAuth2: Use the user-configured timeout
  * 'save all' dialogues' logic.
  * Make custom headers compliant with RFC 2822 § 3.6.
  * correctly set modified flag after auto-save
  * NNTP account's SMTP server wasn't used
  * building with older GLibs
- Remove 5fee50c54a370fdfb5241bd4c4c16281a741762e.patch: contained</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678104000">- Deactive litehtml/gumbo as gumbo will be deleted [boo#1208381]</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1700568000">- Update to 4.2.0:
  * An easy way to open any folder on start-up has been added:
    Right-click a folder and choose 'Open on start-up'.
    This can also be configured on the 'Folder list' tab of the
    /Configuration/Preferences/Display/Summaries page.
  * Spam statistics have been added to the session statistics.
  * It is now possible to save message attachments only, without the
    other message parts.
  * QuickSearch: support for a "v H V" search expression has been added
    and the 'y S' expression has been removed ('v X-Label S' can be
    used instead).
  * font/* and chemical/* MIME types are now recognised.
  * The image viewer now works correctly when not auto-loading images.
  * Icon Themes: it is no longer possible to install or remove system
    themes.
  * IMAP: Support for SCRAM-SHA-{224,256,384,512} authentication
    mechanisms has been added.
  * IMAP: The statusbar now shows that expunge is happening.
  * The GData plugin has been removed.
  * The Fancy plugin no longer requires libsoup or libsoup-gnome.
  * The LiteHTML Viewer plugin has been synchronised with litehtml 0.7.
  * The LiteHTML viewer plugin will now only be built automatically if
    libgumbo 0.12 or newer is available. Building with libgumbo 0.10
    must be explicitly requested using --enable-litehtml_viewer-plugin.
  * For extra debug output use --enable-more-addressbook-debug and
  - -enable-more-ldap-debug.
  * Added translation: Portuguese
  * Updated translations: Brazilian Portuguese, Catalan, Czech, French,
    Polish, Russian, Slovak, Spanish, Swedish, Traditional Chinese,
    Turkish.
  * bug 4491, 'address autocompletion list does not expand in
    height with the number of matches'
  * bug 4618, 'Rate limit by remote breaks queued/marked
    actions (Delete/Move)'
  * bug 4631, 'Embedding external editor crashes Claws-Mail on Wayland'
  * bug 4637, 'Segmentation fault when using SUMMARY is empty'
  * bug 4645, 'fails to check for perl-ExtUtils::Embed'
  * bug 4648, 'fails to build with gcc 13'
  * bug 4658, 'Headers unfolded incorrectly in message view'
  * bug 4664, 'OAUTH2 overwrites passwords even for plaintext logins'
  * bug 4666, 'fancy plugin doesn't build with libwebkit2gtk-4.1'
  * bug 4670, 'To/CC incorrectly escaped with a trailing backslash'
  * bug 4679, 'The correct date header is interpreted incorrectly to display strange date.'
  * bug 4693, 'Hang and crash when enable disable SVG Rendering prefs'
  * when starting with msgview hidden, toggling msgview to show it
    would use incorrect height
  * update quicksearch history list when changing type
  * wrong message which is shown when mail can't be sent
  * when redirecting, disable queueing
  * arbitrary paste restriction
  * when queueing or drafting a msg with an attachment which no longer
    exists, use the correct label on the button of the warning dialogue * using
    a custom header in found_in_addressbook match expressions
  * URIs may contain the '$' dollar sign
  * OAuth2, Update on-disk tokens as well when in-memory tokens are updated
  * Microsoft POP3 OAuth2 protocol</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718020800">- Update to 4.3.0:
  * Compose window: when the focus is in the message text, copied files
    can be pasted as attachments using /Edit/paste or Ctrl+V.
    (The context menu's Paste will still insert the list of files into
    the message body.)
  * '/Mark/Mark all read in folder' and 'Mark/Mark all unread in
    folder' have been re-added to the Message List context menu.
  * It is now possible to use '/Tools/Remove references' when
    forwarding mail.
  * Keyboard shortcuts: The "Choose preset keyboard shortcuts" selector
    has been integrated into the main preferences page.
    When 'Current' is the selected preset, Apply/OK will keep the
    existing settings.
  * An MBOX file can now be imported from the command line using
    `claws-mail --import-mbox %f` where %f is the full path to the
    MBOX file.
  * OAUTH2 support for Microsoft 365 GCC High has been added.
  * LiteHTML Viewer plugin: Updated to LiteHTML 0.9.
  * The menurc file is now backed-up on startup.
  * Removed support for the obsolete Avant Window Navigator.
  * Various code cleanups.
  * The manual has been updated.
  * New translation: Albanian.
  * Updated translations: Catalan, Czech, French, Hungarian, Indonesian,
    Polish, Romanian, Slovak, Spanish, Swedish, Turkish.
  * bug 4668, 'Sometimes, at program start, message list takes
    all the vertical space'
  * bug 4720, 'matcher: release regex_t in
    matcherprop_string_match'
  * bug 4724, 'set proper availability status to sign/encrypt
    toolbar buttons'
  * bug 4725, 'oauth2: remove trailing zero from transmit
    buffer in oauth2_contact_server'
  * bug 4728, 'socket: handle GNUTLS_E_PREMATURE_TERMINATION in
    ssl_read'
  * bug 4730, 'oauth2: fix string handling in
    oauth2_contact_server'
  * bug 4733, 'Line breaks lost in headers'
  * bug 4734, 'ssl_certificate: remove unhelpful warnings from
    certificate check'
  * bug 4746, 'matcher: remove incorrect condition in
    matcherprop_free'
  * bug 4747, 'matcher: simplify matcherprop_new'
  * bug 4749, 'release regex_t in
    summary_compile_simplify_regexp'
  * bug 4750, 'remove regcomp wrapper and call regcomp
    directly'
  * bug 4752, 'Adjust incorrect debug_printf call in pgp
    plugins'
  * bug 4754, 'text/enriched literal less-than sign sequence
    handled incorrectly
  * bug 4757, 'remove AX_FUNC_MKDIR'
  * bug 4758, 'remove unused check for bind_textdomain_codeset'
  * bug 4759, 'remove unused function checks from
    AC_CHECK_FUNCS'
  * bug 4760, 'use correct type for move_bar_id'
  * bug 4762, 'oauth2: preserve an existing refresh token'
  * bug 4765, 'only store smtp auth if authorization method is
    OAUTH2'
  * bug 4766, 'preserve the expiry value of SMTP auth type is
    not OAUTH2'
  * bug 4768, 'Adjust logic while evaluating enable_avatars'
  * bug 4770, 'remove intl from list of include directories'
  * bug 4773, 'remove obsolescent AC_C_CONST'
  * bug 4780, 'use proper prototype for two archiver functions'
  * bug 4781, 'use correct prototype for
    privacy_free_signature_data'
  * bug 4782, 'use correct prototype for stop_archiving'
  * bug 4786, 'remove type confusion in getsockopt call in
    sock_connect_async_cb'
  * bug 4787, 'Use correct function for memory transfer in
    crypt_cfb_buf'
  * bug 4788, '"Change primary passphrase" disabled status
    handling'
  * bug 4790, 'widget spacing in "Changing primary passphrase"
    dialog'
  * bug 4791, 'remove obsolete glib version check'
  * bug 4795, 'Please remove -no-cpp-precomp flag for Apple'
  * bug 4796, 'URL with wide character doesn't work'
  * bug 4798, 'Quoting wrong when format=flowed and
    respect_flowed_format is set'
  * CIDs 1220325, 1491306 and 1491315, 'Explicit null
    dereferenced (FORWARD_NULL)'
  * CIDs 1491064, 1491074, 1491211, 1491105, 1491139, 1491164,
    1491166, 1491168, 1491169, 1491178, 1491232, 1491242,
    1492281 and 1591844 'Use after free (USE_AFTER_FREE)'
  * CID 1491137 'Out-of-bounds access (OVERRUN)'
  * CID 1591952 values overwritten before being used
  * CID 1596594 (CHECKED_RETURN)
  * CID 1596595 'Resource leak'
  * errors caused by invalid MIME viewer command-line
  * building on non-X11 systems
  * Use CFLAGS provided by nettle.pc
  * Fancy plugin, recognise mid and data embedded images</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738756800">- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires. Current version support webkit built against soup 3.
- Drop pkgconfig(libsoup-2.4) BuildRequires: No longer needed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1740484800">- Update to 4.3.1:
  * The configuration option, "Don't popup error dialog on receive error"
    has been changed to "Show error dialog on receive error". Your previous
    choice will be automatically changed to the new format.
  * The option "Warn when pasting files as attachments" has been added to
    the Compose/Writing preferences page. This option was previously
    hidden.
  * chmod 0600 is now set on *history files in the configuration directory.
  * A new preference has been added to enable setting the chmod value of
    saved attachments: "Save attachments with chmod [   ]", found on the
    Other/Miscelleanous preferences page. The default value is 600.
  * The creation and updating of .mh_sequences files in MH mailbox folders
    is now optional and disabled by default. This is controlled by a new
    hidden preference, mh_compat_mode. If you were previously relying on
    this feature, set mh_compat_mode=1 in clawsrc before running this
    version.
  * A new hidden preference has been added, passphrase_dialog_msg_title_switch.
    This switches the placement of the dialogue message with the dialogue
    title in the passphrase dialogue. This can be useful for interacting with
    third-party programs such as KeePassXC.
  * The top-level 'Mark' menu item has been renamed to 'Marks'. If you have
    set custom hotkeys for any items in this menu you will need to re-set
    them.
  * New accounts now have all secure options activated by default,
    including TLS connections and SMTP AUTH.
  * The option to accept valid TLS certificates is now activated by default
    on new accounts.
  * Notification plugin: support for Ayatana indicator has been added.
  * PDF Viewer plugin: support for image/x-eps (encapsulated postscript)
    images has been added.
  * Libravatar plugin: the https URL, https://seccdn.libravatar.org/avatar,
    is now used by default.
  * vCalendar plugin: CREATED/LAST_MODIFIED are correctly handled, and the
    VTIMEZONE component is used when present
  * Various code cleanups.
  * The English, Spanish and French manuals have been updated.
  * Updated translations: Albanian, Brazilian Portuguese, British English,
    Catalan, Czech, Dutch, French, Polish, Portuguese, Romanian, Russian,
    Simplified Chinese, Slovak, Spanish, Swedish, Turkish.
  * bug fixes:
  * bug 3964, 'Attachment icon doesn't show in message list unless
    the message is clicked and then disappears later'
  * bug 4658, 'Headers unfolded incorrectly in message view'
  * bug 4817, 'Edit button in Messages view-&gt;Text settings not
    translatable'
  * bug 4818, 'Your Claws Mail configuration is from a newer...'
    dialog is shown more than once'
  * bug 4819, 'Text wrapping broken when text contains an URL'
  * bug 4821, 'If the Mail folder is on another partition, folder
    chmod settings are not applied to draft and queue'
  * bug 4824, 'No syntax highlighting after exiting external editor'
  * bug 4828, '"Mark" not translated anymore'
  * bug 4835, 'Disallow a forward slash in (IMAP) account names'
  * bug 4840, 'core dump unsubscribing from newsgroups'
  * CID 1491093: attrib leaked if attvalue is null
  * CID 1491370: unchecked return value.
  * archive plugin build in debug mode.
  * keep newsgroup subscription window on top when 'subscribe to
    newsgroup...' fails and newsgroup list can't be retrieved
  * don't silently fail to save a sent msg
  * IMAP: show the clip icon in the message list as soon as
    possible
  * stop needlessly checking which folders want sycnhronising every
    time we select a msg in an MH mailbox</changelog>
</package>
<package pkgid="b882be0cb12880781bf6a382886f9ce7235e3492ebe167622a0f0a59b28cfd3b42ab914769508b2f0788aee983f4c3c7970d4d746940f75ee61732df17ea2f46" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="4.3.1" rel="bp160.1.5"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1649073600">- Update to 4.1.0:
  * Text zooming in the Message View is now possible, using CTRL+mouse
    wheel up/down, CRTL+touchpad two-fingered vertical swiping, or
    the Message View's right-click menu.
  * GtkColorChooser is now used in the Spell Checking preferences,
    Colour Label preferences, and the folder Properties pages.
  * 'Default From:' has been added to the Compose page of the folder
    Properties. This allows setting an email address which will
    override the Account's email address.
  * An option has been added to the 'General' page of the folder
    Properties, 'Skip folder when searching for unread or new
    messages', so that the folder can be skipped when using Go To
    next/previous unread/new message.
  * 'By Sender' has been added to '/Tools/Create filtering rule/...'
    and '/Tools/Create processing rule/...'
  * The option 'Run processing rules before marking all messages in a
    folder as read or unread' has been added to
    '/Configuration/Preferences/Display/Summaries'.
  * It is now possible to add a toolbar button to 'Run folder
    processing rules'.
  * The Actions configuration list now has 'Top' and 'Bottom' buttons.
  * In '/Tools/List URLs' it is now possible to CTRL+c or right-click
    a list item and 'Copy URL'; copying multiple selections is also
    possible.
    Phishing URLs are now indicated in red by default. This uses the
    colour defined in the hidden preference, log_error_color.
  * The method of handling Tags has been improved.
  * When using the separate Message View the Enter key will open the
    currently selected message in the Message List. So, for example,
    if you delete the current message, pressing Enter will open the
    next message without having to leave the separate Message View.
  * The quicksearch type-ahead keypress delay is now customizable
    using a hidden preference ("qs_press_timeout").
  * Improvements to the storage of OAuth2 refresh tokens.
  * A "View all" button has been added to the Themes preferences page
    in order to preview all icons of a theme.
  * The term 'master passphrase' has been replaced in the UI with
    'primary passphrase'.
  * The label 'SSL/TLS' has been replaced with 'TLS' in the UI.
  * chmod 0600 is set on log files, history files, saved parts, etc.
  * "Keyword Warner" plugin has been added. This shows a warning when
    sending or queueing a message and a reference to one or more
    user-defined keywords are found in the message text.
  * Adding a new RSSyl feed or subscribing to a Webcal will
    automatically suggest using any suitable URI found on the
    clipboard.
  * The user manuals have been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, French, Indonesian, Polish, Romanian, Russian,
    Slovak, Spanish, Turkish.
  * bug fixes:
  + bug 4312, 'litehtml plugin loops (hangup)'
  + bug 4346, 'Error: Certificate is for invalid2.invalid, but
    connection is to imap.gmail.com'
  + bug 4442, 'vcalendar segfault if in invitation email and
    switch to another folder'
  + bug 4495, 'Improve text strings for OAuth2'
  + bug 4496, 'Fancy crashes when opening an email'
  + bug 4511, 'Uses deprecated ghostscript operator'
  + bug 4513, 'msg window too small in 3 column layout'
  + bug 4517, 'Thread safety issues in signature checking code'
  + bug 4524, 'Problems exiting/closing Claws Mail'
  + bug 4534, 'Address book causing claws to terminate unexpectedly'
  + bug 4535, 'Setting msgview_date_format=1 does not work'
  + bug 4536, 'Tab for address selects second entry'
  + bug 4556, 'Filesize in kilobytes versus kibibytes'
  + bug 4577, 'Fancy plugin with GTK3 seems to ignore content encoding'
  + when using 'hide_timezone' use UTC when generating MessageID
  + non-translation of some button labels
  + the initial position of the (X-)Face image
  + return receipts from accounts without a name
  + folderview pixmaps not being updated after icon theme change
    until restart
  + spell checker underlining when black is chosen
  + text on various buttons
  + scrolling in a message's attachments bar (scrolling left or
    right were scrolling down).
  + scrolling not working when GTK smooth scroll is set
  + scroll to next/prev page in pdf_viewer
  + build error with -Werror=format-security
  + invalid crypto engine (gpgme_op_verify failed)
  + vCalendar tooltip in Day View showed the wrong month.
  + View Log button
  + when closing Compose window dialogue requesting choice from
    user is not shown and some options are lost in drafted copy
  + weird logic with the 'Edit filter action' dialog
  + resource leaks; memory corruption</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1649160000">- Disable pilot-link also on openSUSE Leap &gt;= 15.4
- The intree ca-certificates file was removed upstream. Remove our
  cleanup code for it.</changelog>
  <changelog author="&lt;d_werner@gmx.net&gt;" date="1655985600">- claws-mail 4.x.x with GTK 3 ignores the plugin setting in the
  clawsrc file in range [Plugins_GTK2] - change it to
  [Plugins_GTK3] in the skel/.claws-mail/clawsrc file (bnc#1200880)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657800000">- Backport 5fee50c54a370fdfb5241bd4c4c16281a741762e.patch:
  This fixes building with newer perl.
- Switch package to autosetup.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1666353600">- Update to 4.1.1:
  * Marked messages in the Message List can now be displayed with bold
    text by setting the hidden preference "bold_marked".
  * The confirmation dialogue when saving all the attachments of a
    message can now be disabled.
  * The Message List tooltip for the From column now shows name and
    address.
  * OAuth2: various fixes and improvements.
  * The user manuals have been updated.
  * Updated translations: Brazilian Portuguese, Catalan, Czech, Dutch,
    French, Polish, Russian, Slovak, Spanish, Swedish, Traditional
    Chinese, Turkish.
  * Build system: GLib version 2.50 or greater is required; autoconf
    version 2.69 or greater is required; pkgconfig support for GPGME
    and libgpg-error has been added; GnuTLS is required for OAuth2;
    OAuth2 support can be removed with --disable-oauth2.
  * bug 4547, '--enable-tests makes compilation fail'
  * bug 4583, 'Compose window 'Discard message' dialog is
  * even though draft is already saved'
  * bug 4584, 'Compose window causing Claws to terminate
  * '
  * bug 4589, 'Edit Group Details panel wording unclear.'
  * bug 4615, 'Compilation fails with --disable-gnutls'
  * bug 4620, 'German translation of Content-Transfer-Encoding
  * unwanted colon'
  * bug 4628, 'typos in the README file'
  * bug 4630, 'Fancy loads remote images when remote content
  * disabled'
  * bug 4636, 'Handle non-ascii characters in server response'
  * AddressKeeper plugin: not saving addresses.
  * Perl plugin: building with perl v5.35.2 or greater.
  * AttRemover plugin: filenames would not be shown and corrupt
  * output
  * OAuth2: Use the user-configured timeout
  * 'save all' dialogues' logic.
  * Make custom headers compliant with RFC 2822 § 3.6.
  * correctly set modified flag after auto-save
  * NNTP account's SMTP server wasn't used
  * building with older GLibs
- Remove 5fee50c54a370fdfb5241bd4c4c16281a741762e.patch: contained</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1678104000">- Deactive litehtml/gumbo as gumbo will be deleted [boo#1208381]</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1700568000">- Update to 4.2.0:
  * An easy way to open any folder on start-up has been added:
    Right-click a folder and choose 'Open on start-up'.
    This can also be configured on the 'Folder list' tab of the
    /Configuration/Preferences/Display/Summaries page.
  * Spam statistics have been added to the session statistics.
  * It is now possible to save message attachments only, without the
    other message parts.
  * QuickSearch: support for a "v H V" search expression has been added
    and the 'y S' expression has been removed ('v X-Label S' can be
    used instead).
  * font/* and chemical/* MIME types are now recognised.
  * The image viewer now works correctly when not auto-loading images.
  * Icon Themes: it is no longer possible to install or remove system
    themes.
  * IMAP: Support for SCRAM-SHA-{224,256,384,512} authentication
    mechanisms has been added.
  * IMAP: The statusbar now shows that expunge is happening.
  * The GData plugin has been removed.
  * The Fancy plugin no longer requires libsoup or libsoup-gnome.
  * The LiteHTML Viewer plugin has been synchronised with litehtml 0.7.
  * The LiteHTML viewer plugin will now only be built automatically if
    libgumbo 0.12 or newer is available. Building with libgumbo 0.10
    must be explicitly requested using --enable-litehtml_viewer-plugin.
  * For extra debug output use --enable-more-addressbook-debug and
  - -enable-more-ldap-debug.
  * Added translation: Portuguese
  * Updated translations: Brazilian Portuguese, Catalan, Czech, French,
    Polish, Russian, Slovak, Spanish, Swedish, Traditional Chinese,
    Turkish.
  * bug 4491, 'address autocompletion list does not expand in
    height with the number of matches'
  * bug 4618, 'Rate limit by remote breaks queued/marked
    actions (Delete/Move)'
  * bug 4631, 'Embedding external editor crashes Claws-Mail on Wayland'
  * bug 4637, 'Segmentation fault when using SUMMARY is empty'
  * bug 4645, 'fails to check for perl-ExtUtils::Embed'
  * bug 4648, 'fails to build with gcc 13'
  * bug 4658, 'Headers unfolded incorrectly in message view'
  * bug 4664, 'OAUTH2 overwrites passwords even for plaintext logins'
  * bug 4666, 'fancy plugin doesn't build with libwebkit2gtk-4.1'
  * bug 4670, 'To/CC incorrectly escaped with a trailing backslash'
  * bug 4679, 'The correct date header is interpreted incorrectly to display strange date.'
  * bug 4693, 'Hang and crash when enable disable SVG Rendering prefs'
  * when starting with msgview hidden, toggling msgview to show it
    would use incorrect height
  * update quicksearch history list when changing type
  * wrong message which is shown when mail can't be sent
  * when redirecting, disable queueing
  * arbitrary paste restriction
  * when queueing or drafting a msg with an attachment which no longer
    exists, use the correct label on the button of the warning dialogue * using
    a custom header in found_in_addressbook match expressions
  * URIs may contain the '$' dollar sign
  * OAuth2, Update on-disk tokens as well when in-memory tokens are updated
  * Microsoft POP3 OAuth2 protocol</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1718020800">- Update to 4.3.0:
  * Compose window: when the focus is in the message text, copied files
    can be pasted as attachments using /Edit/paste or Ctrl+V.
    (The context menu's Paste will still insert the list of files into
    the message body.)
  * '/Mark/Mark all read in folder' and 'Mark/Mark all unread in
    folder' have been re-added to the Message List context menu.
  * It is now possible to use '/Tools/Remove references' when
    forwarding mail.
  * Keyboard shortcuts: The "Choose preset keyboard shortcuts" selector
    has been integrated into the main preferences page.
    When 'Current' is the selected preset, Apply/OK will keep the
    existing settings.
  * An MBOX file can now be imported from the command line using
    `claws-mail --import-mbox %f` where %f is the full path to the
    MBOX file.
  * OAUTH2 support for Microsoft 365 GCC High has been added.
  * LiteHTML Viewer plugin: Updated to LiteHTML 0.9.
  * The menurc file is now backed-up on startup.
  * Removed support for the obsolete Avant Window Navigator.
  * Various code cleanups.
  * The manual has been updated.
  * New translation: Albanian.
  * Updated translations: Catalan, Czech, French, Hungarian, Indonesian,
    Polish, Romanian, Slovak, Spanish, Swedish, Turkish.
  * bug 4668, 'Sometimes, at program start, message list takes
    all the vertical space'
  * bug 4720, 'matcher: release regex_t in
    matcherprop_string_match'
  * bug 4724, 'set proper availability status to sign/encrypt
    toolbar buttons'
  * bug 4725, 'oauth2: remove trailing zero from transmit
    buffer in oauth2_contact_server'
  * bug 4728, 'socket: handle GNUTLS_E_PREMATURE_TERMINATION in
    ssl_read'
  * bug 4730, 'oauth2: fix string handling in
    oauth2_contact_server'
  * bug 4733, 'Line breaks lost in headers'
  * bug 4734, 'ssl_certificate: remove unhelpful warnings from
    certificate check'
  * bug 4746, 'matcher: remove incorrect condition in
    matcherprop_free'
  * bug 4747, 'matcher: simplify matcherprop_new'
  * bug 4749, 'release regex_t in
    summary_compile_simplify_regexp'
  * bug 4750, 'remove regcomp wrapper and call regcomp
    directly'
  * bug 4752, 'Adjust incorrect debug_printf call in pgp
    plugins'
  * bug 4754, 'text/enriched literal less-than sign sequence
    handled incorrectly
  * bug 4757, 'remove AX_FUNC_MKDIR'
  * bug 4758, 'remove unused check for bind_textdomain_codeset'
  * bug 4759, 'remove unused function checks from
    AC_CHECK_FUNCS'
  * bug 4760, 'use correct type for move_bar_id'
  * bug 4762, 'oauth2: preserve an existing refresh token'
  * bug 4765, 'only store smtp auth if authorization method is
    OAUTH2'
  * bug 4766, 'preserve the expiry value of SMTP auth type is
    not OAUTH2'
  * bug 4768, 'Adjust logic while evaluating enable_avatars'
  * bug 4770, 'remove intl from list of include directories'
  * bug 4773, 'remove obsolescent AC_C_CONST'
  * bug 4780, 'use proper prototype for two archiver functions'
  * bug 4781, 'use correct prototype for
    privacy_free_signature_data'
  * bug 4782, 'use correct prototype for stop_archiving'
  * bug 4786, 'remove type confusion in getsockopt call in
    sock_connect_async_cb'
  * bug 4787, 'Use correct function for memory transfer in
    crypt_cfb_buf'
  * bug 4788, '"Change primary passphrase" disabled status
    handling'
  * bug 4790, 'widget spacing in "Changing primary passphrase"
    dialog'
  * bug 4791, 'remove obsolete glib version check'
  * bug 4795, 'Please remove -no-cpp-precomp flag for Apple'
  * bug 4796, 'URL with wide character doesn't work'
  * bug 4798, 'Quoting wrong when format=flowed and
    respect_flowed_format is set'
  * CIDs 1220325, 1491306 and 1491315, 'Explicit null
    dereferenced (FORWARD_NULL)'
  * CIDs 1491064, 1491074, 1491211, 1491105, 1491139, 1491164,
    1491166, 1491168, 1491169, 1491178, 1491232, 1491242,
    1492281 and 1591844 'Use after free (USE_AFTER_FREE)'
  * CID 1491137 'Out-of-bounds access (OVERRUN)'
  * CID 1591952 values overwritten before being used
  * CID 1596594 (CHECKED_RETURN)
  * CID 1596595 'Resource leak'
  * errors caused by invalid MIME viewer command-line
  * building on non-X11 systems
  * Use CFLAGS provided by nettle.pc
  * Fancy plugin, recognise mid and data embedded images</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738756800">- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
  BuildRequires. Current version support webkit built against soup 3.
- Drop pkgconfig(libsoup-2.4) BuildRequires: No longer needed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1740484800">- Update to 4.3.1:
  * The configuration option, "Don't popup error dialog on receive error"
    has been changed to "Show error dialog on receive error". Your previous
    choice will be automatically changed to the new format.
  * The option "Warn when pasting files as attachments" has been added to
    the Compose/Writing preferences page. This option was previously
    hidden.
  * chmod 0600 is now set on *history files in the configuration directory.
  * A new preference has been added to enable setting the chmod value of
    saved attachments: "Save attachments with chmod [   ]", found on the
    Other/Miscelleanous preferences page. The default value is 600.
  * The creation and updating of .mh_sequences files in MH mailbox folders
    is now optional and disabled by default. This is controlled by a new
    hidden preference, mh_compat_mode. If you were previously relying on
    this feature, set mh_compat_mode=1 in clawsrc before running this
    version.
  * A new hidden preference has been added, passphrase_dialog_msg_title_switch.
    This switches the placement of the dialogue message with the dialogue
    title in the passphrase dialogue. This can be useful for interacting with
    third-party programs such as KeePassXC.
  * The top-level 'Mark' menu item has been renamed to 'Marks'. If you have
    set custom hotkeys for any items in this menu you will need to re-set
    them.
  * New accounts now have all secure options activated by default,
    including TLS connections and SMTP AUTH.
  * The option to accept valid TLS certificates is now activated by default
    on new accounts.
  * Notification plugin: support for Ayatana indicator has been added.
  * PDF Viewer plugin: support for image/x-eps (encapsulated postscript)
    images has been added.
  * Libravatar plugin: the https URL, https://seccdn.libravatar.org/avatar,
    is now used by default.
  * vCalendar plugin: CREATED/LAST_MODIFIED are correctly handled, and the
    VTIMEZONE component is used when present
  * Various code cleanups.
  * The English, Spanish and French manuals have been updated.
  * Updated translations: Albanian, Brazilian Portuguese, British English,
    Catalan, Czech, Dutch, French, Polish, Portuguese, Romanian, Russian,
    Simplified Chinese, Slovak, Spanish, Swedish, Turkish.
  * bug fixes:
  * bug 3964, 'Attachment icon doesn't show in message list unless
    the message is clicked and then disappears later'
  * bug 4658, 'Headers unfolded incorrectly in message view'
  * bug 4817, 'Edit button in Messages view-&gt;Text settings not
    translatable'
  * bug 4818, 'Your Claws Mail configuration is from a newer...'
    dialog is shown more than once'
  * bug 4819, 'Text wrapping broken when text contains an URL'
  * bug 4821, 'If the Mail folder is on another partition, folder
    chmod settings are not applied to draft and queue'
  * bug 4824, 'No syntax highlighting after exiting external editor'
  * bug 4828, '"Mark" not translated anymore'
  * bug 4835, 'Disallow a forward slash in (IMAP) account names'
  * bug 4840, 'core dump unsubscribing from newsgroups'
  * CID 1491093: attrib leaked if attvalue is null
  * CID 1491370: unchecked return value.
  * archive plugin build in debug mode.
  * keep newsgroup subscription window on top when 'subscribe to
    newsgroup...' fails and newsgroup list can't be retrieved
  * don't silently fail to save a sent msg
  * IMAP: show the clip icon in the message list as soon as
    possible
  * stop needlessly checking which folders want sycnhronising every
    time we select a msg in an MH mailbox</changelog>
</package>
<package pkgid="3602e0bbea39df4cb8517638e92df064ab13f36f465ac4cafd1614908dc3659395b132b8bdbbb5297eb40c92dfa4e375659b03bf12c68f63d61519a983db6ee9" name="clazy" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="bp160.1.13"/>
  <changelog author="christophe@krop.fr" date="1708862400">- Update to version 1.11git.20240225T163906~f353355:
  * Fix build with older CMake versions
  * connect-non-signal: Fix not finding method from PMF connect
    when signal is declared in variable
  * Remove Qt4 compatibility mode and last remaining check
  * qstring-incasesensitive-allocation: Make initializer list
    usage slightly more consistent
  * qstring-incasesensitive-allocation: Remove unneeded FWD in
    C++ file
  * Clean up some further unneeded includes
  * qstring-ref: Simplify initializer usage
  * Do not include SourceCompatibilityHelpers in checkbase.h file
  * qrequiredresults-candidated: Move helper method to single file
  * Remove clazy::DiagnosticFix compat helper
  * Remove some no longer needed version checks
  * Remove clazy::getLocStart and clazy::getLocEnd helpers
  * Remove clazy::isFinal compat helper
  * Remove compat ifdef in clazy::hasUnusedResultAttr
  * Remove clazy::getImmediateExpansionRange compat code
  * Make std::regex and std::filesyste support mandatory
  * Bump clang/llvm requirements to 11.0
  * qgetenv: Add note in case qEnvironmentVariableIntValue
    fixit allows for base autodetection
  * qgetenv: Do not include base parameter when it is a nullptr
  * qgetenv: Limit scope to variables to if-statement if possible
  * qgetenv: Fix wrong fixit being provided for
    qEnvironmentVariableIntValue, ignore wontfix case
  * Avoid unneeded std::string -&gt; char* conversion and back
  * adapt usage of CXXMethodDecl::isPure for LLVM&gt;=18
  * Add SPDX info for fully-qualified-moc-types tests
  * fully-qualified-moc-types: Fix fixit for pointer/reference type
    return values
  * fully-qualified-moc-types: Remove fixit snippet from message,
    add fixit test
  * fully-qualified-moc-types: Provide fixit for slot/invokable
    return types and improve warning range
  * fully-qualified-moc-types: Provide fixit for slot arguments
    and improve source range for warning
  * fully-qualified-moc-types: Deduplicate logic for creating
    template string
  * fully-qualified-moc-types: Fix templates not being resolved
    recursively
  * fully-qualified-moc-types: Show issues of current implementation
    in testcase
  * Add fixit for QFileInfo::exists
  * Fix false positive in qdatetime-utc
  * Fix unused variable warning in range-loop-detach
  * Remove warning and promise of a rewrite, that ship has sailed
  * qstring-allocations: turn s == "" into s.isEmpty()
  * empty-qstringliteral: Be more precise about non-null string creation,
    mention QString() possibility
  * empty-qstringliteral: Make check work with Qt6 and ignore files from
    QML plugins
  * wrong-qglobalstatic: Make check work properly with Qt6
  * Make clazy tests run with Qt5 and Qt6, run as part of ctest
  * run_tests.py: Do not add qmake header paths twice
  * no-module-include: Fix test compilation with Qt6, ignore internal
    include of QtQmlIntegrationDepends file
  * Remove compat code for specifying only one major version for test
  * reserve-candidate: Fix operator call expressions being counted as
    compex expressons in Qt6
  * connect-3arg-lambda: Fix message for QMenu and adapt check/test for Qt6
  * connect-non-signal: Fix compilation with Qt6 and enable tests
  * qt6-qhash-signature: Enable tests or Qt6
  * old-style-connect: Make tests work with Qt6
  * run_tests: Use Qt6 libraries for linking and adapt to state machine
    being own lib in Qt6
  * old-style-connect: Adapt to QMenu::addAction being an alias to
    QWidget::addAction
  * Add clazy-standalone test to generated ClazyTests and fix running it
  * thread-with-slots: Enable test for Qt6
  * use-chrono-in-qtimer: Remove unneeded explicit setting of Qt
    major versions
  * qdatetime-utc: Fix porting in fixit from QDateTime::toTime_t to
    undeprecated method
  * qdatetime-utc: Rework docs to include more examples, some practical
    benchmark-results and reference the fixits
  * qdatetime-utc: Extend check to also cover toSecsSinceEpoc
  * qdatetime-utc: Warn when QDateTime::currentDateTimeUtc().toMSecsSinceEpoch()
    is used
  * qdatetime-utc: Use QDateTime::currentMSecsSinceEpoch which is again
    significantly faster
  * qdatetime-utc: Add explanitory note to warning explaining why one
    should use replacement
  * qdatetime-utc: Also take QDateTime::toMSecsSinceEpoch into
    consideration and make test pass with Qt6
  * use-static-qregularexpression: Make check and tests work properly
    with Qt6
  * unused-result: Silence false positive in Qt headers
  * function-args-by-ref: Prefer emitting warning for non-trivial
    copying rather than size
  * Mark docs with CC-BY-SA-4.0 license
  * qcolor-from-literal: Update documentation to includes more prescise
    checks and fixits
  * qcolor-from-literal: Slightly adjust messages for invalid patterns
  * range-loop-detach: Update docuentation with C+17 specific fixit
  * detaching-temporary: Adjust tests for changed Qt6 semantics
  * QtUtils: Avoid transient includes, de-inline some not critical
    functions, move code when used only once
  * Clean up a bunch of unused includes
  * qstring-allocations: Fix checks/fixits not working with Qt6
  * Fix parsing Q_PROPERTY declarations with spaces
  * connect-not-normalized: Clean up comments about code apparently not
    having worked 6 years ago
  * const-signal-or-slot: Enable test for Qt6
  * fully-qualified-moc-types: Remove explicit major version value
  * qstring-arg: Enable relevant tests for Qt6, avoid ambiguity
  * container-anti-pattern: Emit warning for QVector::toList even with
    Qt6 alias
  * lambda-unique-connection: Fix duplicate object key in config
  * qdeleteall: Fix test for Qt6 and make even Qt5 messages more proper
  * qdeleteall: Fix false positive/Qt6 compile error
  * connect-not-normalized: Fix Q_ARG/Q_RETURN_ARG checks in Qt6
  * Fix dumping of AST due to mismatching arguments
  * detaching-member: Make test work with Qt6
  * qcolor-from-literal: Report invalid patterns as warning
  * range-loop-detach: Fix QList check and proper output for Qt6
  * range-loop-detach: Improve presentation of fixit in compiler output
  * range-loop-detach: Use std::as_const for C++17
  * Utilize better clang-format results with trailing comma in more places
  * fully-qualified-moc-types: Create string manually instead of
    using overcomplicated clang APIs
  * fully-qualified-moc-types: Clarify comments
  * fully-qualified-moc-types: Fix issues with typedefs as generic
    parameters
  * fully-qualified-moc-types: Fix issues with LLVM17
  * fully-qualified-moc-types: Fix Qt5 issues with varadic template args
  * fully-qualified-moc-types: Fix warnings in case typedefs are used
  * Try to improve checks for generics
  * QtUtils: Make trivial nullptr checks more concise
  * fully-qualified-moc-types: Do not warn for QStringList in Qt6
  * fully-qualified-mock-types: Make test run with Qt6
  * fully-qualified-moc-types: Ignore QDBusPendingReply statements
  * Don't report iterator conversion for mutating container member functions
  * run_tests.py: Add missing flags also for clazy-standalone
  * run_tests.py: Clean up concatenation of test command args
  * Only add Qt module includes when needed
  * Do not add no-module-include specific flag to all tests
  * Add qcolor-from-literal check for Qt6 QColor::fromString method
  * strict-iterators: Also check QJsonObject iterators
  * QtUtils: Document java style iterators list
  * detaching-temporary: Add config for QJsonObject
  * Enable Qt6 by default, except for currently failing tests
  * qt6-header-fixes can only build with Qt5
  * Fix lambda-unique-connection for Qt6
  * Don't run clang-apply-replacements if the test was completely skipped
  * Add support for running tests with Qt5 and/or Qt6
  * Adjust indentation of license textx in generate.py
  * Mark some trivial files with CC0-1.0 license
  * Remove old COPYING-LGPL2.txt file
  * Replace Author tags with SPDX-FileContributor
  * Add license info to recently touched files of mine
  * Fix broken license info for BSD-2 licenses
  * Re-run licensedigger with prettyheader option
  * Remove unneeded statements about files being part of clazy
  * Require tests to pass on all platforms
  * Fix strict-iterators with llvm17
  * Fix LLVM bug tracker URL
  * Make lamba-unique-connection's tests closer to reality
  * Fix returning-data-from-temporary (with clang 17)
  * Disable c++17 for qt6-qlatin1stringchar-to-u for now.
  * Run all tests with C++14 and with C++17
  * qt6-qlatin1stringchar-to-u: cleanups
  * Remove .uncrustify file
  * No longer recommend editing Checks.h file directly
  * Rename generated files and add note
  * Add qcolor-from-literal fixit to checks.json
  * dev-scripts/generate.py: Format file after generating it
  * Move setup of CXX standard cmake variables before try_compile statements
  * Speed up subsequent cmake runs
  * Optimize checks for filesystem in tests
  * Minor: avoid printing empty lines for nothing
  * Fix use-static-qregularexpression with C++17
  * Adapt qstring-allocations to C++17's eliding of constructor calls
  * Adapt the user-literal-for-QLatin1String case to C++17
  * Adapt container-anti-pattern to C++17 (Q_FOREACH is very different then)
  * Adapt detaching-member to the C++17 AST
  * Switch to C++17 in preparation for Qt6 support
  * run_tests.py: Do not report clang/clazy-standalone command twice
  * run_tests.py: Clean up some unused expressions
  * Silence all cppcheck warnings for tests
  * use-static-qregularexpression: Fix issues when running against
    llvm 17
  * fully-qualified-mock-types: Resolve fully qualified name based on
    underlying record
  * heap-allocated-small-trivial-type: Provide LangOptions context for
    string conversion
  * function-args-by-value: Specify LangOptions and adjust values
  * qt6-deprecated-api-fixes: Adjust param checks for QDate replacements
  * qt6-deprecated-api-fixes: Adjust helper to check function args directly
  * qt6-deprecated-api-fixes: Create helper for checking QString param type
  * qt6-deprecated-api-fixes: Simplify replacementForQSignalMapper and use
    consistent getAsString params
  * qt6-deprecated-api-fixes: Provide LangOptions for more calls
  * detaching-member: Compare record declaration names instead of
    pretty-printed version
  * qt6-deprecated-api-fixes: Provide LangOptions and slim down string
    comparisons
  * qstring-comparison-to-implicit-char: Provide explicit LangOptions
    for string conversion
  * Avoid doing string checks for class in Qt6QLatin1StringCharToU
  * Make sure function-args-by-ref works the same as in later llvm version
  * Add -fno-diagnostics-show-line-numbers flag for clang &gt;= 17
  * Remove linux-qt6 for now since we don't run tests there
  * Remove reserve-candidates test that has been failing and is obsolete
  * run_tests: Fix missing space resulting in weird compile/linking errors
  * Use ClazyPlugin and clazy-standalone from builddir in ctest
  * Update test genertion to use utility-cmake macro
  * Add CLAZYPLUGIN_CXX env variable to tests
  * strict-iterators: Remove unused compat header
  * unused-non-trivial-variable: Also warn for unused QJsonValue
  * unused-non-trivial-variable: Silence warning for unused QScopeGuard
  * readme, add missing doc for no-module-include check
  * readme, remove pre-built binaries link as kdab does not provide
    them anymore
  * Fix (gcc) warning about code doing if (uint &lt; 0)
  * Download SPDX licenses
  * Add dep5 file containing license info for tests
  * Improve qcolor-from-literal warning for QRgba64 value, extend test
  * Update tests and improve fixit
  * Add fixit for QColor
  * use-static-qregularexpression: Also add testcase for QString::mid
  * Fix false positive for static regex in case QString::arg is used
    in variable
  * Fix false positives for static-qregularxpression check
  * Convert license headers to SPDX identifiers
  * use-chrono-in-qtimer: fix author info in license header
  * function-args-by-value: Add trailing commas
  * RuleOfBase: Use better formatting with trailing comma
  * unused-non-trivial-variable: Improve formatting
  * Revert "Fix clazy-fully-qualified-moc-types check for ActionReply"
  * Revert "Added a comment explaining the KAuth special case"
  * Improve qenums documentation
  * no-module-include.cpp: Fix warning about assigning m_modulesList
    in constructor body, make it const
  * no-module-include: Add a test for qdbusxml2cpp generated files
  * Add NetworkAuth module include check
  * Avoid warnings for QtDBus include in autogenerated files
  * TemporaryIterator: Fix compile error with gcc
  * NoModuleInclude: Properly format list
  * Reduce false-positives in `isempty-vs-count` check
- Fix build on factory</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708948800">- Add a _constraints file for PowerPC. It needs more memory
  for Leap builds</changelog>
  <changelog author="christophe@krop.fr" date="1710158400">- Update to version 1.11git.20240311T110110~ebf99de:
  * Fix false positives when using a typedef in combination with a generic
  * Add fitit for qstring-arg check
  * [cmake] Increase mimimum required CMake version to 3.8</changelog>
  <changelog author="christophe@krop.fr" date="1716292800">- Update to version 1.11git.20240520T014559~87b83e3:
  * no-module-include: Fix test with Qt6, ignore internal include
    of QtQmlBuiltinsDepends file
  * lambda-in-connect test: remove unused and confusing member
    variable
  * Fix false positive from lambda-in-connect when the receiver
    is on the stack</changelog>
  <changelog author="christophe@krop.fr" date="1720094400">- Update to version 1.12git.20240630T203330~f3fb82c:
  * docs: update HOWTO.md
  * Update ChangeLog for 1.12
  * docs: Update HOWTO to include release instructions
  * Don't hardcode version in ClazyStandaloneMain.cpp
  * docs: Bump minimum LLVM to 11
  * docs: Don't hardcode current version in README
  * no-module-include: Fix on Windows as line endings can have \r\n
  * ci: Fix build on ubuntu 24.04
  * ci: Bump to Qt 6.7
  * tests: Remove ubuntu-18.04 and 20.04 Dockerfiles</changelog>
  <changelog author="christophe@krop.fr" date="1731067200">- Update to version 1.13git.20240928T115050~ef4fa16:
  * Fix clang deprecations by porting to FileEntryRef
  * Use clazy helper to avoid startsWith-&gt;starts_with deprecation
  * [cmake] Adjust for non-installed LLVM
  * rule-of-three: Fix destructor not being found and thus causing false positive
  * Add test for qca clazy false positive
  * Fail if no Qt installation was found at all
  * Add Qt6 BSD CI
  * Only look for Qt5/Qt6 installs if respective CI job is running
  * Verbose ctest
  * Make tests work when clang library is different from system default
  * Move used-qunused to manuallevel for now
  * Add used-qunused check for identifying unneeded/wrong Q_UNUSED/void casts
  * Bump master to 1.13</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731585600">- Update runtime requirements
- Keep using LLVM 18 on Tumbleweed until upstream fixes
  compatibility with LLVM 19</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732017600">- Harden runtime dependencies and tweak CLANGXX to point to the
  clang executable matching libraries used to build clazy.</changelog>
  <changelog author="christophe@krop.fr" date="1732017601">- Update to version 1.13git.20241119T221149~560bdc1:
  * Make string-allocations logic for handling two different cases more clear and efficient
  * Fix string-allocations check looking not deep enough in hierarchy to find StringLiteral for fixit
  * Fix string-allocations test not recognizing operator macro magic of Qt 6.8
  * Add ifdefs for compatibility with LLVM 19
  * Adjust additional argument in InclusionDirective
  * Fix typo in todo
  * Revert overeager cleanups to usageg OptionalFileEntryRef, GET_LEXER
  * remove the llvm/clang version sepecific macros
  * Remove guards for no longer necessary CLAZY_DISABLE_AST_MATCHERS
  * Update LLVM/Clang support to 14.0+, add LLVM 19 handling
  * Fix note on which qstring-arg checks are run by default and which need to be enabled
  * Remove unneeded FWD</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1735560000">- Update to 1.13
  * New Checks: used-qunused-variable
  * qstring-arg check provides a fix-it
  * Fixed unused-non-trivial-variable to not warn when
    [[maybe_unused]] set
  * Fixed qstring-arg for upcoming Qt 6.9
  * Fixed fully-qualified-moc-types false positive for const
    modifiers of generic arguments
  * Silence false positive non-pod-global-static warning for QML
    module initialization
  * Fix function-args-by-value false positive that would cause
    compile error in copy constructors, assignment operators
    and equal checks
  * False positives for `Q_EMIT(someSignal())` are now fixed</changelog>
</package>
<package pkgid="6581aaf2dcd92f04acbf202c48f13d54fa31fd42f1f4f64b5e2dcc267ac51bd39ed949a0194ba54e4a315906fb1438092171870991b9bd4c7e5085d9364cbd4e" name="cld2-devel" arch="x86_64">
  <version epoch="0" ver="20150820" rel="bp160.1.12"/>
  <changelog author="astieger@suse.com" date="1432728000">- initial version</changelog>
  <changelog author="astieger@suse.com" date="1466510400">- fix build with gcc6 in Factory, build with -std=c++98 boo#985158</changelog>
  <changelog author="astieger@suse.com" date="1502452800">- Update to version 20150820:
  * upstream moved to git(hub)
  * Some unused code removed</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1595851200">- add pkgconfig file
- cleanup spec file
  * remove stuff for compatibility below SLE 12
  * use license tag in files section</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1596283200">- add 0001-fix-hebrew-iso-code.patch to change obsolete hebrew language
  code from iw to he</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1608120000">- change include paths in pkgconfig file to the values used by
  cyrus imap</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1608120001">- fix generating cld2_full library by adding common source files
  in CMakeLists.txt</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1616500800">- include GNUInstallDirs into CMakeLists.txt and use CMAKE_INSTALL_FULL_LIBDIR
  variable in pkgconfig file to set corret library path also on Tumbleweed</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt; - 20150820" date="1708948800">- use autosetup in prep section</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt; - 20150820" date="1708948801">- cleanup spec file</changelog>
</package>
<package pkgid="80dc8c293fc866c9e6a3f85c5c4dc025afcb11ed178e2a7b95574bc8b73e4d827725a73891e6df8eb47f678af93f7682fa9a0d3e90b4226fa6261e8876af9ab8" name="cldr-emoji-annotation" arch="noarch">
  <version epoch="0" ver="36.12.120191002_0" rel="160000.2.2"/>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Ininial package.</changelog>
  <changelog author="alarrosa@suse.com" date="1583928000">- Replace BuildRequires: gnome-common with the actual required package:
  libtool, automake/conf and pkg-config</changelog>
  <changelog author="alarrosa@suse.com" date="1584360000">- Update to 36.12.120191002_0
  * No changelog provided by upstream</changelog>
</package>
<package pkgid="861adf6bc480d8fbe7268bc5c258683a88004ee072ebd484eebcfcc7fc8c345b7bd7c76adc09284753ab5c7b88f889cb0e70397599ca70ae1fbf80ac52c79ee3" name="cldr-emoji-annotation-devel" arch="noarch">
  <version epoch="0" ver="36.12.120191002_0" rel="160000.2.2"/>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Ininial package.</changelog>
  <changelog author="alarrosa@suse.com" date="1583928000">- Replace BuildRequires: gnome-common with the actual required package:
  libtool, automake/conf and pkg-config</changelog>
  <changelog author="alarrosa@suse.com" date="1584360000">- Update to 36.12.120191002_0
  * No changelog provided by upstream</changelog>
</package>
<package pkgid="3ffae29354fef900db2bda34f5522224a68191b76803f6d634f828a1f2da954adf1571cfd562893c869a29a3d088a21deeceab0cecee5d2c137379bcaecdd41c" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.4.0~rc2" rel="bp160.1.2"/>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1594296000">- Add _constraints for PowerPC to avoid "No space left" build error</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1601467200">- update to 1.3.99 (tagged as 1.4.0rc1-343-gb49afcc5b)
  * a lot of features and fixes, see the changes:
    https://github.com/clementine-player/Clementine/compare/eeb9f7e30311...b49afcc5b731
- remove 0001-Adds-missing-QPainterPath-include.patch
  It's upstream now.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1607947200">- Clementine only needs taglib newer than 1.11.1 so it contains
  a fix for a bug which we have patched in SLE/Leap 15 (check
  CMakeLists.txt and boo#1179817 for more information). So we
  can allow taglib 1.11.1 too.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1617883200">- Update to git snapshot 1.3.99.20210304 to fix build against the
  new taglib.
- For upstream changes go to:
  https://github.com/clementine-player/Clementine/compare/1.4.0rc1-343-gb49afcc5b...1.4.0rc1-548-g354f6a23e</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1623412800">- update to 1.3.99.20210609
  * For upstream changes go to:
    https://github.com/clementine-player/Clementine/compare/354f6a23e0ce...612767c87822</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1660046400">- Update to version 1.4.0~rc2
- Remove unneeded patch clementine-hidden-systray-icon.patch
- Many bug fixes and new features since the last git snapshot</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1688990400">- Fix build on tumbleweed with clementine-cpp17-force.patch by
  forcing -std=c++17 on protobuf-using subdirectories.
- Add clementine-ix86-build-fix.patch to fix ix86 build
  (missing protobuf link libs).</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1709121600">- Allow use of internal taglib until taglib2 build issue is solved
  see https://github.com/clementine-player/Clementine/issues/7313</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1709812800">- Fix build error with protobuf 25 in Leap 15.6
  * Apply clementine-cpp17-force.patch and clementine-ix86-build-fix.patch
    to Leap 15.6 build</changelog>
  <changelog author="Jonas Kvinge &lt;jonaski@opensuse.org&gt;" date="1710676800">- Add clementine-cpp17.patch:
  * Fixes build with TagLib and Protobuf now requiring C++17.
- Add clementine-protobuf.patch:
  * Fixes build with protobuf 22 and higher.
- Add clementine-taglib2.patch:
  * Fixes build with TagLib 2.
- Removed clementine-ix86-build-fix.patch and
  clementine-cpp17-force.patch.</changelog>
</package>
<package pkgid="1e304b9b89d2affcfb7df6458487e558bacd78f610fca3811767f465cb5fce87e4c9b022c057810a973677b2715b66ba4546d73e3ba81cb25ca1003735eae86f" name="clevis" arch="x86_64">
  <version epoch="0" ver="19" rel="bp160.1.13"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673956800">- ship clevis v18, a unattended disk encryption unlocker, via either
  a server or TPM2. (jsc#PED-3009, jsc#PM-3627, jsc#PM-2793)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681214400">- updated to v19
  - Add external token id for existing passphrase (71869cb)
  - luks-edit: remove unnecessary 2&gt;/dev/null (6e48a1c)
  - Avoid invalid message for clevis command (3f879a3)
  - Notify error url on server connect fail (f5786d3)
  - Improve boot performance by removing key check (47b01ab)
  - systemd: account for unlocking failures in clevis-luks-askpass (92b09c9)
  - luks: enable debugging in clevis scripts when rd.debug is set (8c9e020)
  - luks: explicitly specify pbkdf iterations to cryptsetup (7159630)
  - tpm2: improve validation of PCRs in clevis-encrypt-tpm2 (4eb1980)
  - luks: define max entropy bits for pwmake (3bb852b)
  - luks: ignore empty &amp; comment lines in crypttab (0589c14)
  - Avoid luksmeta corruption on clevis bind (d8a25e3)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1684756800">- drop ncat requirement from clevis-systemd (boo#1211580)</changelog>
</package>
<package pkgid="c185846ad68caaef4d159c4c64c30e109bece2ba0bbd9c1f811b70437b12d4892a52c550f1e0c752f722263810a7c5f58f564b20dc4217c1c3de6db4e1299683" name="clevis-bash-completion" arch="x86_64">
  <version epoch="0" ver="19" rel="bp160.1.13"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673956800">- ship clevis v18, a unattended disk encryption unlocker, via either
  a server or TPM2. (jsc#PED-3009, jsc#PM-3627, jsc#PM-2793)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681214400">- updated to v19
  - Add external token id for existing passphrase (71869cb)
  - luks-edit: remove unnecessary 2&gt;/dev/null (6e48a1c)
  - Avoid invalid message for clevis command (3f879a3)
  - Notify error url on server connect fail (f5786d3)
  - Improve boot performance by removing key check (47b01ab)
  - systemd: account for unlocking failures in clevis-luks-askpass (92b09c9)
  - luks: enable debugging in clevis scripts when rd.debug is set (8c9e020)
  - luks: explicitly specify pbkdf iterations to cryptsetup (7159630)
  - tpm2: improve validation of PCRs in clevis-encrypt-tpm2 (4eb1980)
  - luks: define max entropy bits for pwmake (3bb852b)
  - luks: ignore empty &amp; comment lines in crypttab (0589c14)
  - Avoid luksmeta corruption on clevis bind (d8a25e3)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1684756800">- drop ncat requirement from clevis-systemd (boo#1211580)</changelog>
</package>
<package pkgid="8917ffbec5b3651456e7bf447b6f65eefc94356752ff0a82f3ed0105d80bb65adfc75399a03ddbab8e350d00b73d1be4b9c418d84075baa5b1b59a8f9c28052d" name="clevis-dracut" arch="x86_64">
  <version epoch="0" ver="19" rel="bp160.1.13"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673956800">- ship clevis v18, a unattended disk encryption unlocker, via either
  a server or TPM2. (jsc#PED-3009, jsc#PM-3627, jsc#PM-2793)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681214400">- updated to v19
  - Add external token id for existing passphrase (71869cb)
  - luks-edit: remove unnecessary 2&gt;/dev/null (6e48a1c)
  - Avoid invalid message for clevis command (3f879a3)
  - Notify error url on server connect fail (f5786d3)
  - Improve boot performance by removing key check (47b01ab)
  - systemd: account for unlocking failures in clevis-luks-askpass (92b09c9)
  - luks: enable debugging in clevis scripts when rd.debug is set (8c9e020)
  - luks: explicitly specify pbkdf iterations to cryptsetup (7159630)
  - tpm2: improve validation of PCRs in clevis-encrypt-tpm2 (4eb1980)
  - luks: define max entropy bits for pwmake (3bb852b)
  - luks: ignore empty &amp; comment lines in crypttab (0589c14)
  - Avoid luksmeta corruption on clevis bind (d8a25e3)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1684756800">- drop ncat requirement from clevis-systemd (boo#1211580)</changelog>
</package>
<package pkgid="0025853125d9f92f7c799af0897672f4b4c1b38d2fd934a2927c87346db8ccd1eee770db129ab83f9a51e680b1b886d317b1ac2ae9c5d7155aa12724e4ca2f45" name="clevis-luks" arch="x86_64">
  <version epoch="0" ver="19" rel="bp160.1.13"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673956800">- ship clevis v18, a unattended disk encryption unlocker, via either
  a server or TPM2. (jsc#PED-3009, jsc#PM-3627, jsc#PM-2793)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681214400">- updated to v19
  - Add external token id for existing passphrase (71869cb)
  - luks-edit: remove unnecessary 2&gt;/dev/null (6e48a1c)
  - Avoid invalid message for clevis command (3f879a3)
  - Notify error url on server connect fail (f5786d3)
  - Improve boot performance by removing key check (47b01ab)
  - systemd: account for unlocking failures in clevis-luks-askpass (92b09c9)
  - luks: enable debugging in clevis scripts when rd.debug is set (8c9e020)
  - luks: explicitly specify pbkdf iterations to cryptsetup (7159630)
  - tpm2: improve validation of PCRs in clevis-encrypt-tpm2 (4eb1980)
  - luks: define max entropy bits for pwmake (3bb852b)
  - luks: ignore empty &amp; comment lines in crypttab (0589c14)
  - Avoid luksmeta corruption on clevis bind (d8a25e3)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1684756800">- drop ncat requirement from clevis-systemd (boo#1211580)</changelog>
</package>
<package pkgid="80a27e14a2d65c4a52b7f9b3a8316ba6b24d673718884be6e278de9dba8153212874bce2bdf7733c3a8bb2cd290bdbb60069dea70ce4f23d35a6fc6706bd7ba0" name="clevis-systemd" arch="x86_64">
  <version epoch="0" ver="19" rel="bp160.1.13"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673956800">- ship clevis v18, a unattended disk encryption unlocker, via either
  a server or TPM2. (jsc#PED-3009, jsc#PM-3627, jsc#PM-2793)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681214400">- updated to v19
  - Add external token id for existing passphrase (71869cb)
  - luks-edit: remove unnecessary 2&gt;/dev/null (6e48a1c)
  - Avoid invalid message for clevis command (3f879a3)
  - Notify error url on server connect fail (f5786d3)
  - Improve boot performance by removing key check (47b01ab)
  - systemd: account for unlocking failures in clevis-luks-askpass (92b09c9)
  - luks: enable debugging in clevis scripts when rd.debug is set (8c9e020)
  - luks: explicitly specify pbkdf iterations to cryptsetup (7159630)
  - tpm2: improve validation of PCRs in clevis-encrypt-tpm2 (4eb1980)
  - luks: define max entropy bits for pwmake (3bb852b)
  - luks: ignore empty &amp; comment lines in crypttab (0589c14)
  - Avoid luksmeta corruption on clevis bind (d8a25e3)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1684756800">- drop ncat requirement from clevis-systemd (boo#1211580)</changelog>
</package>
<package pkgid="2ba63200c41ce504b8eab4458eca65cf88f483aa4365005becfdd1ef8d5312e060b272f137e653d2904b80e5dfcfc1a0ac4dee2c4549364a0a58d4f15ff358bf" name="clevis-udisks2" arch="x86_64">
  <version epoch="0" ver="19" rel="bp160.1.13"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1673956800">- ship clevis v18, a unattended disk encryption unlocker, via either
  a server or TPM2. (jsc#PED-3009, jsc#PM-3627, jsc#PM-2793)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1681214400">- updated to v19
  - Add external token id for existing passphrase (71869cb)
  - luks-edit: remove unnecessary 2&gt;/dev/null (6e48a1c)
  - Avoid invalid message for clevis command (3f879a3)
  - Notify error url on server connect fail (f5786d3)
  - Improve boot performance by removing key check (47b01ab)
  - systemd: account for unlocking failures in clevis-luks-askpass (92b09c9)
  - luks: enable debugging in clevis scripts when rd.debug is set (8c9e020)
  - luks: explicitly specify pbkdf iterations to cryptsetup (7159630)
  - tpm2: improve validation of PCRs in clevis-encrypt-tpm2 (4eb1980)
  - luks: define max entropy bits for pwmake (3bb852b)
  - luks: ignore empty &amp; comment lines in crypttab (0589c14)
  - Avoid luksmeta corruption on clevis bind (d8a25e3)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1684756800">- drop ncat requirement from clevis-systemd (boo#1211580)</changelog>
</package>
<package pkgid="e557ab3e2463d8fa8ff17f0db542d75e107a23235b90b3aff708ccc5f4f42ba0ba716c9a385c880a5c9ae64d8799cf1f39cc6e6b486125f167f994cf7768a720" name="clhep-Cast-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="36897677343d1f5e7ea8d560715a488f7119dad77e80c5c2970e7dff98db60f640fc0d9e59a382f8c0056ba490cf2d47276296c1b035893d6b291dd471daa593" name="clhep-Evaluator-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="2a6d3087f8eebce49b91610cb3ec97fc15a72f12ea8669b406c62b649a07ea8311b86c52f906126a076dec501d0716532dedd71bc14455c68622cabf4375c82a" name="clhep-Exceptions-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="eec9bfd379a0db372582a36fba27585d82a34b993fbf0de8aa0924283587abc73bebf7c6ec378c98eb44baa37c68ccd1a9fad7d7aa075aee333cece84b24f91a" name="clhep-GenericFunctions-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="5d0dd32f9a3ade08f6a77eb625a9308b52490b355b15bb1552ddff45932b819eb5084258873392e3d1542bd45686215d2a6244caa1f778f7088d3765275a5778" name="clhep-Geometry-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="6c31b4ebf20bc2c23bd69815680597311b0ca5e86fb75017640dd0471b3b5830b7a032855b0d6c3fc7b4e794567453063775ffcec146977ec76b0d86d7ac9b0a" name="clhep-Matrix-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="c46d607732788e211b5af0d360549a1c41c71b229343cf914eb6496b866c7c371db25428b5414a98ed568f26de0d8e0a6b5dee5e7b12c4a94149f663d57df8d9" name="clhep-Random-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="53e477a9eab6be8e458a35ba2e66b37dee8c66be4a55da6d8dabe8e0e2ebf0cb993c5dbefea0d33d1e245f69ef67f70bc71e5bb655ed4f7963a9168128027050" name="clhep-RandomObjects-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="1e1b675eda1345aa3fc1624c78a8243a2adc15a1ca4faaa6fc96f5cce3dde6226e2fc33bac982fb09a94b0407c1ccf8cbb1b08eb1a2dd984ddacfb28f11dd20a" name="clhep-RefCount-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="a4cfb80c2f7807d80dc1d9d6a7453f16d16da87f1b8f4ca14f5b5b6817e4125a4bbc6204af1fe04d167cd9cf7ce12a8013ac5b1a2a2c5f53d880862cc5b80043" name="clhep-Units-devel" arch="noarch">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="d7240a834b29c0710de1c9ad229198c1d8e1432280f4f2796cc29b30e5037da950fd0d0392adafe433ec983ed0d2ced6d8978ac604c8aca7208392d514755a42" name="clhep-Utility-devel" arch="noarch">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="5da8f04cd59f141a626461aa56c0f7853ec719f9c221741a46c646ab95b5672d6c5fe53e44d9b54d5cf2e082883b313d33ff5403a17f22ae56369413b9b01a99" name="clhep-Vector-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="9618bde4e657882a34b7b5770e86d710e57bdb7fe0acc2e85df5ab9c0b5af50df73333c92706211ce657b0b76dfafaa9c4176c435f38430ab5c15320af33df1d" name="clhep-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="4d80c8ef00c24341ef49c8ba7eab2fbe24c5e564b3a1c368421f468278312cc6cae102936e0f41b5008c3413e71a5d5acfc77954814158c816166fbedf52076f" name="clhep-doc" arch="noarch">
  <version epoch="0" ver="2.4.7.1" rel="bp160.1.12"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586088000">- Update to version 2.4.1.3:
  * Vector/Vector/*.h: added move constructor and move assignment.
  * Geometry/Geometry/*.h: added move constructor and move
    assignment.
- Changes from previous versions: See ChangeLog file.
- Drop clhep-thread_local-header-location.patch: incorporated
  upstream.
- Use cmake macros for configuring, building, and installing.
- Use %license to install license file.
- Update Source URL.
- Add clhep-randomobjects-pkgconfig-requires.patch to remove a
  spurious '=' sign copied into clhep-randomobjects.pc pkgconfig
  file.
- Add clhep-respect-build_static_libs.patch: Don't install static
  libs and don't refer to them in installed cmake scripts if
  BUILD_STATIC_LIBS is turned OFF; drop static libs package.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1664539200">- Update to version 2.4.5.3:
  For details, see include ChangeLog or
  https://gitlab.cern.ch/CLHEP/CLHEP/-/blob/CLHEP_2_4_5_3/ChangeLog
- Drop obsolete clhep-randomobjects-pkgconfig-requires.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1667995200">- Update to version 2.4.6.0:
  * Evaluator: Resolve worrying GCC 12 warnings
  * Random: Resolve worrying GCC 12 warnings
- Drop no longer needed clhep-rpmlintrc file.
- Minor offset changes to clhep-respect-build_static_libs.patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1672660800">- Update to version 2.4.6.3:
  * Fix compilation warnings on XCode 14.1 for implicit type
    conversions.
- Changes from version 2.4.6.2:
  * Evaluator/test/testEvaluator.output: match change in e_SI.
- Changes from version 2.4.6.1:
  * Evaluator/src/setSystemOfUnits.cc: update units to match
    Units/SystemOfUnits.h.
  * Random: add the cstdint header where uint32_t and uint64_t are
    used.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681128000">- Update to version 2.4.6.4:
  * Add support for -std=c++20 and -std=c++2a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1696075200">- Update to version 2.6.7.0:
  * Random: MIXMAX update for performance</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697112000">- Update to version 2.6.7.1:
  * Random: add missing shootArray implementations
  * Random: mixmax_skip_N8.icc and mixmax_skip_N240.icc were
    removed as no longer necessary
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702814400">- Split out individual subpackages for different CLHEP libraries,
  in keeping with dependency chart here:
  https://proj-clhep.web.cern.ch/proj-clhep/packages.html.
  * clhep-devel now drags in all the clhep-*-devel subpackages.
- Add clhep-docdir.patch to get documentation to install to a
  user configurable dir.
- Split out doc package and install doxygen generated HTML
  documentation to it; add as Recommends to clhep-devel.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Split out complex helper macros into clhep.macros.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704628800">- Add BuildRequires: graphviz for dot, needed by doxygen when
  generating docs.</changelog>
</package>
<package pkgid="fc5a8837528d32f31e4af6c96e49872700958b7be1a0868ea726daef98af5609961d683a7df6f323155e5b3db4d494e598f34c513d2b778d8c6e5d0b76e5ddcb" name="cli11-devel" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1601035200">- Initial import of CLI11 1.9.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Trim conjecture from description and supply actual limits.</changelog>
  <changelog author="Haochuan Chen &lt;yjcoshc@mail.nankai.edu.cn&gt;" date="1637582400">- Build doc package
- Include pkgconfig file
- Disable the build of examples
- Change the directory of cmake files to %{_datadir}/cmake
- Use the upstream name for source and building, and keep the
  package name lowercase
- Update to version 2.1.2
  * Use main for the main branch of the repository
  * Bugfix(cmake): Enforce at least C++11 when using CMake target
  * Build: Don't run doxygen and CTest includes if a submodule
  * Build: Avoid a warning on CMake 3.22
  * Build: Support compiling the tests with an external copy of Catch2</changelog>
  <changelog author="Haochuan Chen &lt;yjcoshc@mail.nankai.edu.cn&gt;" date="1649851200">- Update to version 2.2.0
  * Add `MultiOptionPolicy::Sum`  and refactor the `add_flag` to fix a bug when using `std::optional&lt;bool&gt;` as type.
  * Add support for an empty vector result in TOML and as a default string.
  * Add `.validate_optional_arguments()` to support discriminating positional arguments from vector option arguments.
  * Add `CLI::FileOnDefaultPath` to check for files on a specified default path.
  * Change default value display in help messages from `=XXXX` to `[XXXXX]` to make it clearer.
  * Modify the Range Validator to support additional types and clean up the error output.
  * Bugfix: The trigger on parse modifier did not work on positional argument.s
  * Bugfix: The single header file generation was missing custom namespace generation.
  * Bugfix: Clean up File Error handling in the argument processing.
  * Bugfix: Fix a stack overflow error if nameless commands had fallthrough.
  * Bugfix: A subcommand callback could be executed multiple times if it was a member of an option group.
  * Bugfix: Fix an issue with vectors of multi argument types where partial argument sets did not result in an error.
  * Bugfix: Fix an issue with type the template matching on C++20 and add some CI builds for C++20.
  * Bugfix: Fix typo in C++20 detection on MSVC.
  * Bugfix: An issue where the detection of RTTI being disabled on certain MSVC platforms did not disable the use of dynamic cast calls.
  * Bugfix: Resolve strict-overflow warning on some GCC compilers.
  * Backend: Add additional tests concerning the use of aliases for option groups in config files.
  * Build: Add support for testing in meson and cleanup symbolic link generation.
  * Build: Support building in WebAssembly.</changelog>
  <changelog author="Haochuan Chen &lt;haochuan.chen@univ-lorraine.fr&gt;" date="1666612800">- Although the pre-compiled mode has been introduced upstream, it is still not
  able to build shared libs, so CLI11_PRECOMPILED is default to be disabled.
  The package is then still header-only, and the build architecture is changed
  to noarch.
- Tests are enabled during building.
- Upstream changes: update to version 2.3.0
  * Add CLI11_PRECOMPILED as an option. #762
  * Bugfix: Include &lt;functional&gt; in FormatterFwd #727
  * Bugfix: Add missing Macros.hpp to Error.hpp #755
  * Bugfix: Fix subcommand callback trigger #733
  * Bugfix: Variable rename to avoid warning #734
  * Bugfix: split_program_name single file name error #740
  * Bugfix: Better support for min/max overrides on MSVC #741
  * Bugfix: Support MSVC 2022 #748
  * Bugfix: Support negated flag in config file #775
  * Bugfix: Better errors for some confusing config file situations #781
  * Backend: Restore coverage testing (lost with Travis CI) #747</changelog>
  <changelog author="Haochuan Chen &lt;haochuan.chen@univ-lorraine.fr&gt;" date="1666612801">- Disable tests for %{?sle_version} &lt;= 150300 due to possible issues of old
  cmake versions</changelog>
  <changelog author="Haochuan Chen &lt;haochuan.chen@univ-lorraine.fr&gt;" date="1673092800">- Update to version 2.3.2:
  * Bugfix: Consistently use ADL for lexical_cast, making it easier to extend for custom template types #820
  * Bugfix: Tweak the parsing of files for flags with disable_flag_override #800]
  * Bugfix: Handle out of bounds long long #807
  * Bugfix: Spacing of make_description min option output #808
  * Bugfix: Print last parsed subcommand's help message #822
  * Bugfix: Avoid floating point warning in GCC 12 #803
  * Bugfix: Fix a few gcc warnings #813
  * Backend: Max CMake tested 3.22 -&gt; 3.24 #823
- Update to version 2.3.1:
  * Bugfix: App::get_option_group implementation missing #793
  * Bugfix: Fix spacing when setting an empty footer #796
  * Bugfix: Address Klocwork static analysis checking issues #785</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1711108800">- Update to version 2.4.1:
  * Bugfix: Include cstdint (gh#CLIUtils/CLI11#996).
  * Bugfix: Fix change in operation of config_ptr with unused
    default in the count method (gh#CLIUtils/CLI11#1003).
  * Tests: Include libatomic if required for fuzzing test
    (gh#CLIUtils/CLI11#1000).
- Changes from version 2.4.0:
  * Add Unicode support and bug fixes (gh#CLIUtils/CLI11#804,
    gh#CLIUtils/CLI11#923, gh#CLIUtils/CLI11#876,
    gh#CLIUtils/CLI11#848, gh#CLIUtils/CLI11#832,
    gh#CLIUtils/CLI11#987).
  * Match TOML standard for string and numerical entries,
    multiline strings (gh#CLIUtils/CLI11#968,
    gh#CLIUtils/CLI11#967,gh#CLIUtils/CLI11#964,
    gh#CLIUtils/CLI11#935).
  * Add validation for environmental variables
    (gh#CLIUtils/CLI11#926).
  * Add an escape string transform (gh#CLIUtils/CLI11#970).
  * Add A REVERSE multi-option policy to support multiple config
    files and other applications (gh#CLIUtils/CLI11#918).
  * Add usage message replacement (gh#CLIUtils/CLI11#768).
  * Allow using dot notation for subcommand arguments such as
  - -sub1.field (gh#CLIUtils/CLI11#789).
  * Bugfix: Fuzzing tests and fixes (gh#CLIUtils/CLI11#930,
    gh#CLIUtils/CLI11#905, gh#CLIUtils/CLI11#874,
    gh#CLIUtils/CLI11#846).
  * Bugfix: Missing coverage tests (gh#CLIUtils/CLI11#928).
  * Bugfix: CMake package and package config tests and fixes
    (gh#CLIUtils/CLI11#916).
  * Bugfix: Environmental variable checks in non-triggered
    subcommands (gh#CLIUtils/CLI11#904).
  * Bugfix: Environmental variables were not being correctly
    process by config pointer (gh#CLIUtils/CLI11#891).
  * Bugfix: Undefined behavior in sum_string_vector
    (gh#CLIUtils/CLI11#893).
  * Bugfix: Warnings and updates for CUDA 11 support
    (gh#CLIUtils/CLI11#851).
  * Backend: Add tests for newer compilers (lost with Travis CI)
    (gh#CLIUtils/CLI11#972).
  * Backend: Increase minimum CMake to 3.5
    (gh#CLIUtils/CLI11#898).
  * Backend: Remove integrated Conan support (provided now by
    Conan center) (gh#CLIUtils/CLI11#853).
  * Tests: Support Catch2 Version 3 (gh#CLIUtils/CLI11#896,
    gh#CLIUtils/CLI11#980).
- Package is no longer noarch as it installs pkgconfig file to
  %_libdir.
- Drop conditionals supporting EOL openSUSE versions.</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1722513600">- Update to version 2.4.2:
  This version improves support for alternative build systems, like
  Meson and Bazel. The single-include file now is in its own
  subdirectory. Several smaller fixes as well.
  + Meson: fixes, cleanups, and modernizations #1024 &amp; #1025
  + Support building with Bazel #1033
  + Restore non-arch dependent path for the pkgconfig file #1012
  + Add get_subcommand_no_throw #1016
  + Move single file to single-include folder #1030 &amp; #1036
  + Fixed app.set_failure_message(...) -&gt; app.failure_message(...) #1018
  + Add IWYU pragmas #1008
  + Fix internal header include paths #1011
  + Improved clarity in RequiredError #1029
  + Added ability to use lexical_cast overloads constrained with enable_if #1021
  + Bug fixes in latest release related to environmental variable
    parsing from option groups and unrecognized fields in a config file #1005
- Packaging:
  + move cli11.pc to _datadir
  + change -devel package to build noarch</changelog>
</package>
<package pkgid="ef38ed85ca6e35bbac0f93aeb6c5b0e1f3d0ba5607276f971ad172580fe43e5850916e57a8c75dac07a4cfa2280ea27ca788d7a43b521a4a3ea3931c6e336f00" name="cli11-doc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1601035200">- Initial import of CLI11 1.9.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Trim conjecture from description and supply actual limits.</changelog>
  <changelog author="Haochuan Chen &lt;yjcoshc@mail.nankai.edu.cn&gt;" date="1637582400">- Build doc package
- Include pkgconfig file
- Disable the build of examples
- Change the directory of cmake files to %{_datadir}/cmake
- Use the upstream name for source and building, and keep the
  package name lowercase
- Update to version 2.1.2
  * Use main for the main branch of the repository
  * Bugfix(cmake): Enforce at least C++11 when using CMake target
  * Build: Don't run doxygen and CTest includes if a submodule
  * Build: Avoid a warning on CMake 3.22
  * Build: Support compiling the tests with an external copy of Catch2</changelog>
  <changelog author="Haochuan Chen &lt;yjcoshc@mail.nankai.edu.cn&gt;" date="1649851200">- Update to version 2.2.0
  * Add `MultiOptionPolicy::Sum`  and refactor the `add_flag` to fix a bug when using `std::optional&lt;bool&gt;` as type.
  * Add support for an empty vector result in TOML and as a default string.
  * Add `.validate_optional_arguments()` to support discriminating positional arguments from vector option arguments.
  * Add `CLI::FileOnDefaultPath` to check for files on a specified default path.
  * Change default value display in help messages from `=XXXX` to `[XXXXX]` to make it clearer.
  * Modify the Range Validator to support additional types and clean up the error output.
  * Bugfix: The trigger on parse modifier did not work on positional argument.s
  * Bugfix: The single header file generation was missing custom namespace generation.
  * Bugfix: Clean up File Error handling in the argument processing.
  * Bugfix: Fix a stack overflow error if nameless commands had fallthrough.
  * Bugfix: A subcommand callback could be executed multiple times if it was a member of an option group.
  * Bugfix: Fix an issue with vectors of multi argument types where partial argument sets did not result in an error.
  * Bugfix: Fix an issue with type the template matching on C++20 and add some CI builds for C++20.
  * Bugfix: Fix typo in C++20 detection on MSVC.
  * Bugfix: An issue where the detection of RTTI being disabled on certain MSVC platforms did not disable the use of dynamic cast calls.
  * Bugfix: Resolve strict-overflow warning on some GCC compilers.
  * Backend: Add additional tests concerning the use of aliases for option groups in config files.
  * Build: Add support for testing in meson and cleanup symbolic link generation.
  * Build: Support building in WebAssembly.</changelog>
  <changelog author="Haochuan Chen &lt;haochuan.chen@univ-lorraine.fr&gt;" date="1666612800">- Although the pre-compiled mode has been introduced upstream, it is still not
  able to build shared libs, so CLI11_PRECOMPILED is default to be disabled.
  The package is then still header-only, and the build architecture is changed
  to noarch.
- Tests are enabled during building.
- Upstream changes: update to version 2.3.0
  * Add CLI11_PRECOMPILED as an option. #762
  * Bugfix: Include &lt;functional&gt; in FormatterFwd #727
  * Bugfix: Add missing Macros.hpp to Error.hpp #755
  * Bugfix: Fix subcommand callback trigger #733
  * Bugfix: Variable rename to avoid warning #734
  * Bugfix: split_program_name single file name error #740
  * Bugfix: Better support for min/max overrides on MSVC #741
  * Bugfix: Support MSVC 2022 #748
  * Bugfix: Support negated flag in config file #775
  * Bugfix: Better errors for some confusing config file situations #781
  * Backend: Restore coverage testing (lost with Travis CI) #747</changelog>
  <changelog author="Haochuan Chen &lt;haochuan.chen@univ-lorraine.fr&gt;" date="1666612801">- Disable tests for %{?sle_version} &lt;= 150300 due to possible issues of old
  cmake versions</changelog>
  <changelog author="Haochuan Chen &lt;haochuan.chen@univ-lorraine.fr&gt;" date="1673092800">- Update to version 2.3.2:
  * Bugfix: Consistently use ADL for lexical_cast, making it easier to extend for custom template types #820
  * Bugfix: Tweak the parsing of files for flags with disable_flag_override #800]
  * Bugfix: Handle out of bounds long long #807
  * Bugfix: Spacing of make_description min option output #808
  * Bugfix: Print last parsed subcommand's help message #822
  * Bugfix: Avoid floating point warning in GCC 12 #803
  * Bugfix: Fix a few gcc warnings #813
  * Backend: Max CMake tested 3.22 -&gt; 3.24 #823
- Update to version 2.3.1:
  * Bugfix: App::get_option_group implementation missing #793
  * Bugfix: Fix spacing when setting an empty footer #796
  * Bugfix: Address Klocwork static analysis checking issues #785</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1711108800">- Update to version 2.4.1:
  * Bugfix: Include cstdint (gh#CLIUtils/CLI11#996).
  * Bugfix: Fix change in operation of config_ptr with unused
    default in the count method (gh#CLIUtils/CLI11#1003).
  * Tests: Include libatomic if required for fuzzing test
    (gh#CLIUtils/CLI11#1000).
- Changes from version 2.4.0:
  * Add Unicode support and bug fixes (gh#CLIUtils/CLI11#804,
    gh#CLIUtils/CLI11#923, gh#CLIUtils/CLI11#876,
    gh#CLIUtils/CLI11#848, gh#CLIUtils/CLI11#832,
    gh#CLIUtils/CLI11#987).
  * Match TOML standard for string and numerical entries,
    multiline strings (gh#CLIUtils/CLI11#968,
    gh#CLIUtils/CLI11#967,gh#CLIUtils/CLI11#964,
    gh#CLIUtils/CLI11#935).
  * Add validation for environmental variables
    (gh#CLIUtils/CLI11#926).
  * Add an escape string transform (gh#CLIUtils/CLI11#970).
  * Add A REVERSE multi-option policy to support multiple config
    files and other applications (gh#CLIUtils/CLI11#918).
  * Add usage message replacement (gh#CLIUtils/CLI11#768).
  * Allow using dot notation for subcommand arguments such as
  - -sub1.field (gh#CLIUtils/CLI11#789).
  * Bugfix: Fuzzing tests and fixes (gh#CLIUtils/CLI11#930,
    gh#CLIUtils/CLI11#905, gh#CLIUtils/CLI11#874,
    gh#CLIUtils/CLI11#846).
  * Bugfix: Missing coverage tests (gh#CLIUtils/CLI11#928).
  * Bugfix: CMake package and package config tests and fixes
    (gh#CLIUtils/CLI11#916).
  * Bugfix: Environmental variable checks in non-triggered
    subcommands (gh#CLIUtils/CLI11#904).
  * Bugfix: Environmental variables were not being correctly
    process by config pointer (gh#CLIUtils/CLI11#891).
  * Bugfix: Undefined behavior in sum_string_vector
    (gh#CLIUtils/CLI11#893).
  * Bugfix: Warnings and updates for CUDA 11 support
    (gh#CLIUtils/CLI11#851).
  * Backend: Add tests for newer compilers (lost with Travis CI)
    (gh#CLIUtils/CLI11#972).
  * Backend: Increase minimum CMake to 3.5
    (gh#CLIUtils/CLI11#898).
  * Backend: Remove integrated Conan support (provided now by
    Conan center) (gh#CLIUtils/CLI11#853).
  * Tests: Support Catch2 Version 3 (gh#CLIUtils/CLI11#896,
    gh#CLIUtils/CLI11#980).
- Package is no longer noarch as it installs pkgconfig file to
  %_libdir.
- Drop conditionals supporting EOL openSUSE versions.</changelog>
  <changelog author="Bruno Friedmann &lt;bruno@ioda-net.ch&gt;" date="1722513600">- Update to version 2.4.2:
  This version improves support for alternative build systems, like
  Meson and Bazel. The single-include file now is in its own
  subdirectory. Several smaller fixes as well.
  + Meson: fixes, cleanups, and modernizations #1024 &amp; #1025
  + Support building with Bazel #1033
  + Restore non-arch dependent path for the pkgconfig file #1012
  + Add get_subcommand_no_throw #1016
  + Move single file to single-include folder #1030 &amp; #1036
  + Fixed app.set_failure_message(...) -&gt; app.failure_message(...) #1018
  + Add IWYU pragmas #1008
  + Fix internal header include paths #1011
  + Improved clarity in RequiredError #1029
  + Added ability to use lexical_cast overloads constrained with enable_if #1021
  + Bug fixes in latest release related to environmental variable
    parsing from option groups and unrecognized fields in a config file #1005
- Packaging:
  + move cli11.pc to _datadir
  + change -devel package to build noarch</changelog>
</package>
<package pkgid="1df8e88cb6b483e22338e379492c358c95722e044f49170bbf69f490eec8d6ad928912970b4cabd23057cefd3f4b6bb2978ab63a1c3a276730bc23f2530183f5" name="clinfo" arch="x86_64">
  <version epoch="0" ver="3.0.23.01.25" rel="bp160.1.12"/>
  <changelog author="mardnh@gmx.de" date="1452081600">- Update to version 2.1.16.01.06
  - Upstream does not provide a changelog</changelog>
  <changelog author="mpluskal@suse.com" date="1453809600">- Update to 2.1.16.01.12
  * no upstream changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.1.17.02.09:
  * no upstream changelog provided</changelog>
  <changelog author="mardnh@gmx.de" date="1500724800">- Update to version 2.2.17.06.14
  * Version 2.2.17.06.14
  * OpenCL 2.2 support
  * Add "size" to "cache line" info
  * Add NMAKE makefile
  * Update Windows support
  * Avoid possible narrowing warnings
  * Use PRIuS to print size_t
  * Make UNUSED macro function-style
  * Also check default devices in clCreateContextFromType</changelog>
  <changelog author="mardnh@gmx.de" date="1506859200">- Update to version 2.2.17.08.25
  * Version 2.2.17.08.25
  * Switch to annotated tags
  * Provide a `make install` target
  * Check for extra bits in some bitfields
  * Preliminary support for cl_khr_terminate_context
  * Declare support for OpenCL 2.x experimental
  * Actually add support for cl_khr_subgroup_named_barrier property
  * Add tentative missing defines for cl_khr_terminate_context
  * Defines for cl_khr_subgroup_named_barrier
- Add patch:
  * 0001-fix-manpage-target.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1508932800">- Update to version 2.2.17.10.25
  * Warnings as errors
  * Correctly-rounded div and sqrt is only a flag for fp32
  * Fix CL_DEVICE_IMAGE_PITCH_ALIGNMENT unit to pixels.
  * fix manpage target
- Remove patch:
  * 0001-fix-manpage-target.patch (fixed upstream)</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 2.2.18.04.06:
  * No upstream documentation of changes.
- Use %%license macro to package LICENSE file.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1607601600">- Update to version 3.0.20.11.20:
  * No upstream list of changes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1614254400">- Update to version 3.0.21.02.21:
  * No upstream release notes.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1674734400">- Update to version 3.0.23.01.25
  * No upstream release notes.</changelog>
</package>
<package pkgid="48613032c2fd34b84e6e10fb6ec419f07e9dce7d4e1df26a4cf79d289e32c4996698527965bbcdba855aba2df213daf291b33086f7c05e555b82ac2d5e692701" name="clingo" arch="x86_64">
  <version epoch="0" ver="5.6.2" rel="bp160.1.3"/>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1637236800">- create a sub lib package</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1662033600">- Do not use python_module macro, which requires other macros to fire
  correctly (bsc#1212554).
- Mark the license file using %license macro.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.2:
  * fix AST comparison
  * fix handling of n-ary comparisons in AST
  * fix symbolic atom iterator
  * build wheels using cibuildwheel
  * add support for parsing files in ASPIF format
  * add theory related functions to backend
  * add support for comparisons with more than one relation
  * extend safety by computing intervals from comparisons
  * add and ground base part by default in Python API
  * remove experimental CSP extensions
  * require at least MSVC 15.0 to build on Windows
  * large code refactoring
  * replace internal hash set implementation by external one
  * fix `parse_files` in C++ API
  * fix adding clauses during enumeration
  * fix incremental projection with backend
  * update to clasp version 3.3.8
  * extend theory class to get version information
  * improve performance of `Model.symbol`
  * tidy up `clingo.hh` header regarding C++17 deprecations
  * fix error handling while solving in Python API
  * fix various outher bugs</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1741694400">- BuildRequire python3-setuptools to fix build on python 3.13</changelog>
</package>
<package pkgid="7a5dc6f943de2141e9890349e107e88f5d5f308519ca4b04cba4024860c897c9d69075f5f44e9aee1e613ec979b5f9f7e7227b3db9ea45f88dd52a67eab14f2f" name="clingo-devel" arch="x86_64">
  <version epoch="0" ver="5.6.2" rel="bp160.1.3"/>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1637236800">- create a sub lib package</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1662033600">- Do not use python_module macro, which requires other macros to fire
  correctly (bsc#1212554).
- Mark the license file using %license macro.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670241600">- update to 5.6.2:
  * fix AST comparison
  * fix handling of n-ary comparisons in AST
  * fix symbolic atom iterator
  * build wheels using cibuildwheel
  * add support for parsing files in ASPIF format
  * add theory related functions to backend
  * add support for comparisons with more than one relation
  * extend safety by computing intervals from comparisons
  * add and ground base part by default in Python API
  * remove experimental CSP extensions
  * require at least MSVC 15.0 to build on Windows
  * large code refactoring
  * replace internal hash set implementation by external one
  * fix `parse_files` in C++ API
  * fix adding clauses during enumeration
  * fix incremental projection with backend
  * update to clasp version 3.3.8
  * extend theory class to get version information
  * improve performance of `Model.symbol`
  * tidy up `clingo.hh` header regarding C++17 deprecations
  * fix error handling while solving in Python API
  * fix various outher bugs</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1741694400">- BuildRequire python3-setuptools to fix build on python 3.13</changelog>
</package>
<package pkgid="8a1bc2291f9f76863b88183c89b72eeb2e378743e9f65a98bb0ea651bbc8b45d451507bef1392b3eed65a11c0b3238f0ff2fa658392ec1c716b5f9eacb109415" name="clipgrab" arch="x86_64">
  <version epoch="0" ver="3.9.10" rel="bp160.1.13"/>
  <changelog author="bwiedemann@suse.com" date="1498305600">- use convert -strip to not add timestamps to .png files</changelog>
  <changelog author="aloisio@gmx.com" date="1502971200">- Update to version 3.6.5</changelog>
  <changelog author="ecsos@opensuse.org" date="1523793600">- Update to version 3.6.8 (no changelog supplied)
- Rebase clipgrab-qt5.patch</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540641600">- Update to version 3.7.1 (no changelog supplied)
- Refreshed clipgrab-qt5.patch
- Spec cleanup</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1545739200">- Update to version 3.7.2 (no changelog supplied)
- Fix build with Qt 5.12
- Refreshed clipgrab-qt5.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1548244800">- Update to version 3.8.0 (no changelog supplied)
- Dropped clipgrab-qt5.patch (now builds natively against Qt5)</changelog>
  <changelog author="ecsos@opensuse.org" date="1557316800">- Update to version 3.8.2 (no changelog supplied)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1605614400">- Update to version 3.9.2 (no changelog supplied)</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1634558400">- Update to version 3.9.7 (no changelog supplied)
- Run spec-cleaner
- Drop post/postun for desktop_database</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1707393600">- Update to version 3.9.10 (no changelog supplied)</changelog>
</package>
<package pkgid="1d04eb9092c967a665d85787536af17845e2c99b7192a488ac5c7ad41c42162b94c6e65a2c9ce039646d26aeb6b1eafe1af73322c56c80e8f5724c08d11c2e7c" name="clipman" arch="x86_64">
  <version epoch="0" ver="1.6.4" rel="bp160.1.13"/>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1612008000">- Initial packaging effort to package 1.5.2.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612094400">- Trim filler wording from descriptions.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1647950400">- Update to 1.6.1:
  - properly deal with Windows-style newlines
  - improve man pages
  - --unix option to normalize all line endings to LF
  - --primary option to serve the selection to primary instead
    than clipboard
  - show-history command to obtain a json representation of the
    clipboard's history
  - when using the bemenu tool we don't forcefully set it to
    bottom position anymore</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1685880000">- Update to 1.6.2:
  - Small improvements to the man page.</changelog>
  <changelog author="andrea.manzini@suse.com" date="1714305600">- Update to version 1.6.4:
  * Update module name and dependencies (#2)
  * Document new options (#1)
  * add min-char flags
  * rename to --err-on-no-selection from --errorOnNoSelection
- changed source repository, project has new maintainer
- Added _service file</changelog>
</package>
<package pkgid="c23c6da9b922b7b372738a169ecf6f2daab67bd37fa1f0be4cd11953e0d4d5bd02548f7b58b43b6d9dd6c8e4d719baef681608be8e82b560c2c02e921708173f" name="clipscreen" arch="x86_64">
  <version epoch="0" ver="0+git.20241113" rel="bp160.1.12"/>
  <changelog author="Adam Mizerski &lt;adam@mizerski.pl&gt;" date="1732708800">- new package</changelog>
</package>
<package pkgid="de562103f469e604626529746e56f2492a6e0f88cfb005a13383b7df6a3031530727fe0083118fd3986571ec0698a710bf87c3d8b3b4696fe90b48b5936096f2" name="cliquer" arch="x86_64">
  <version epoch="0" ver="1.22" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Initial package (version 1.22) for build.opensuse.org</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Change Conflicts: pythomn3-cl to python3dist(cl): we need to
  conflict with all python-variants of cl, as they all provide
  /usr/bin/cl.</changelog>
</package>
<package pkgid="90ee4443325d5b89b8689846b95ac271cbe82f75e6bd1b038469db0ffabfd641b15fc9a13a0282502c44f612ca344116e8ec3045c09de219f1d2fb461c08d5ac" name="cliquer-devel" arch="x86_64">
  <version epoch="0" ver="1.22" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600603200">- Initial package (version 1.22) for build.opensuse.org</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646654400">- Change Conflicts: pythomn3-cl to python3dist(cl): we need to
  conflict with all python-variants of cl, as they all provide
  /usr/bin/cl.</changelog>
</package>
<package pkgid="ae9f81223fb1f061da517e1aaedd9e7a3eac9b0a4d7893973f1a50df751336612e72ba07714b3109dbf0fc8965973b809e2608ab7d8cfd9890ce8984c1ac2dd7" name="clisp" arch="x86_64">
  <version epoch="0" ver="2.49.93" rel="bp160.1.33"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568030400">- Do not use LTO for clisp images</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1666353600">- Depends on gzip as CLISP memory image data are compressed
  with gzip (boo#1132118).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1724846400">- Add patch clisp-gcc14.patch to make it build again</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1724932800">- Update to latest commit f5acef38 of devel version 2.49.93+ from 20240704
- Add modules libsvm and pari as well as feature ffcall
- Add source clhs.el as upstream has skipped this
- Drop patch
  * clisp-2.49-rpath.dif
  * clisp-2.49.92.tar.bz2
- Port patches
  * clisp-2.49-configure.dif
  * clisp-2.49-gctoken.dif
  * clisp-gcc14.patch
  * clisp-link.dif</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1725278400">- Refresh clisp.spec and make it build on s390x as well by avoiding
  Position Independent Executables at compile and link time.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1725364800">- Choose lto settings depending on architecture as otherwise
  we might see crashing clisp</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1732536000">- Make it build with latest pari version</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1739793600">- Shorten path of screen configuration to shorten socket path as
  otherwise bind(2) used by screen(1) fails with invalid argument
  due shorten path of 108 chracters of sun_path used in glibc
  (note that kernel use UNIX_PATH_MAX)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742472000">- disable pcre module (boo#1201805)</changelog>
</package>
<package pkgid="0252d8187f56f77c7ecb73cdb1c38f05738ea648cbe263836be3d1302d3d275fb8f32acdf06f2cfc027e6cd0e198c3d38c9078efb7a1d5ef8066cf40dfc2c549" name="clisp-doc" arch="noarch">
  <version epoch="0" ver="2.49.93" rel="bp160.1.33"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568030400">- Do not use LTO for clisp images</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1666353600">- Depends on gzip as CLISP memory image data are compressed
  with gzip (boo#1132118).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1724846400">- Add patch clisp-gcc14.patch to make it build again</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1724932800">- Update to latest commit f5acef38 of devel version 2.49.93+ from 20240704
- Add modules libsvm and pari as well as feature ffcall
- Add source clhs.el as upstream has skipped this
- Drop patch
  * clisp-2.49-rpath.dif
  * clisp-2.49.92.tar.bz2
- Port patches
  * clisp-2.49-configure.dif
  * clisp-2.49-gctoken.dif
  * clisp-gcc14.patch
  * clisp-link.dif</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1725278400">- Refresh clisp.spec and make it build on s390x as well by avoiding
  Position Independent Executables at compile and link time.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1725364800">- Choose lto settings depending on architecture as otherwise
  we might see crashing clisp</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1732536000">- Make it build with latest pari version</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1739793600">- Shorten path of screen configuration to shorten socket path as
  otherwise bind(2) used by screen(1) fails with invalid argument
  due shorten path of 108 chracters of sun_path used in glibc
  (note that kernel use UNIX_PATH_MAX)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742472000">- disable pcre module (boo#1201805)</changelog>
</package>
<package pkgid="3ffb0a90ec0dd517014a27288be3dc032ff931fd7e90cf98a0ea9f33542cbbcd8d9d7119856563054137f24c16fc8f2c3e2dcca2443b1439f14e7b73d62a687a" name="clknetsim" arch="x86_64">
  <version epoch="0" ver="0+git.20240610" rel="bp160.1.8"/>
  <changelog author="mpluskal@suse.com" date="1478174400">- Update to version 0+git.20161031:
  * support multiple SHM refclocks
  * fix recv functions with new glibc headers
  * interleave refclock offsets with multiple SHM refclocks
  * fix packet stats with reordered packets
  * add recvmmsg()
  * bash: extend generate_config3 to allow asymmetric delay
  * start refclock generator when SHM is attached
  * allow multiple control messages in recvmsg()
  * set ipi_addr in struct in_pktinfo
  * use correct subnet for address in struct in_pktinfo</changelog>
  <changelog author="mpluskal@suse.com" date="1479988800">- Update to version 0+git.20161118:
  * fix compilation with older glibc headers</changelog>
  <changelog author="mpluskal@suse.com" date="1518609600">- Update to version 0+git.20170921:
  * set ifindex in IP_PKTINFO control message
  * add ioctl(PTP_SYS_OFFSET_PRECISE)
  * fix rx_filters in ioctl(SIOCETHTOOL)
  * initialize unused timestamps in timestamping message
  * improve support for timestamping options
  * fix client random seed initialization
  * set and adjust TAI-UTC offset
  * add getrandom()
  * fix compiler warning
  * bash: allow configuration of temp directory
  * fix crash with new OpenSSL
  * add support for SW timestamping in chrony
  * add fileno()</changelog>
  <changelog author="mpluskal@suse.com" date="1532088000">- Update to version 0+git.20180618:
  * fix nanosleep() to handle interrupts
  * add support for delayed reading of transmit timestamp
  * add support for nsm from linuxptp</changelog>
  <changelog author="olaf@aepfle.de" date="1600171200">- Update to version 0+git.20200817</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687867200">- Update to version 0+git.20230612:
  * add __realpath_chk()
  * add RTC support
  * handle read() on timer fd
  * permit TFD_NONBLOCK flag on timerfd_create() call
  * fix debug message format
  * allow sending packets to nonexisting nodes and subnets
  * add client option to dump network traffic to pcap
  * fill more fields in generated ethernet frames
  * provide PHC index as device minor in stat
  * avoid init recursion via dlsym()
  * add delay and jitter to PTP_SYS_OFFSET readings
  * provide frequency error to clients
  * add ioctl(PTP_SYS_OFFSET_EXTENDED)
  * allow sending to port 0
  * fix sequence number in duplicated PPS samples
  * handle NUMERIC* flags in getnameinfo()
  * add __syslog_chkieee128()
  * drop assertion for number of open sockets
  * don't allow connecting to broadcast and network address
  * add __recv_chk()
  * limit maximum time which can be set
  * advance time in none fuzz mode
  * handle unknown addresses in fuzz mode
  * add refclocks based on node clocks
  * add option to swap PHC devices
  * bash: remove default options for phc2sys
  * include linux/limits.h for PATH_MAX
  * add realpath()
  * accept SO_TIMESTAMPING with new so_timestamping struct
  * init symbols in stat()
  * disable debuginfod for valgrind
  * add support for strace
  * bash: allow custom client library preload
  * fix undefined behavior in clock IDs
  * update comments
  * fix clock_gettime() for some clocks
  * add support for Unix domain sockets
  * avoid searching for nonexisting fstat
  * fix __fxstat to call correct function
  * add workaround for redirected adjtimex and fopen
  * use __fxstat if available
  * fix crash with missing refclock configuration
  * add fstat() and __fxstat()
  * init symbols in open()
  * allow trailing dot in getaddrinfo()
  * fix getaddrinfo() to not read outside buffer
  * split initialization
  * add __fread_chk()
  * bash: redirect and check valgrind output
  * bash: rename wrapper variables
  * avoid uninitialized data in adjtimex request
  * add support for valgrind
  * add PPS support</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1694520000">- Update to version 0+git.20230905:
  * fix compatibility with old make
  * save message in select() if fd is not polled
  * don't read /usr/include/sys/time.h directly</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1702900800">- Update to version 0+git.20231005:
  * fuzz: provide refclock offsets
  * add client option for link speed
  * add PTP one-step E2E transparent clock</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1717761600">- Update to version 0+git.20240424:
  * fix parsing of 64-bit CLKNETSIM_START_DATE on 32-bit systems
  * add support for 64-bit-time_t variants of fstat/stat
  * bash: remove linker error from logs with valgrind
  * ignore PTP transportSpecific field in transparent clock</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1724846400">- Update to version 0+git.20240610:
  * fix missing stat/fstat with latest glibc</changelog>
</package>
<package pkgid="959acc19d21e1d358382741d6bfe84687ed0166f7c54040a24613b4e7a567cbb07692b2a07f6ce24a7d442290cc0ba6b7facbc6b610adccf0de4b2ca2fd0c20b" name="cln" arch="x86_64">
  <version epoch="0" ver="1.3.7" rel="bp160.1.13"/>
  <changelog author="crrodriguez@opensuse.org" date="1327060800">- build with -fvisibility-inlines-hidden, in the unlikely
  case this cause trouble, drop me a note (the test suite passes
  so I expect none) . This reduces the exported symbol table
  in around 200(!!) symbols.</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix the SLES build (%make_install is not expanded)
- Install the license file</changelog>
  <changelog author="schwab@suse.de" date="1362571200">- cln-aarch64.patch: add support for aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1378728000">- updated to 1.3.3:
  * Fix integer input of leading zeros in power-of-two base.
  * Fix several floating-poing conversion bugs involving huge
    numbers.
  * Fix bug that would set input stream fail state when reading
    a number at EOF.
- removed upstreamed s390x.patch
- refreshed aarch64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416312000">- updated to 1.3.4:
  * Fix input of huge floats.
  * Support the AArch64 and the Mips64 ABIs.
    =&gt; dropped cln-aarch64.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1552305600">- riscv.patch: Add support for riscv64 platform
- Use %license</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 1.3.5:
  * Fix bug in scale_float() throwing underflow_exception.
- Drop riscv.patch. Fixed upstream.</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 1.3.6
  * fix build errors
- run tests</changelog>
  <changelog author="pgajdos@suse.com" date="1600689600">- remove -fvisibility-inlines-hidden for now [bsc#1176710]</changelog>
  <changelog author="pgajdos@suse.com" date="1707393600">- version update to 1.3.7
  * Fixed compilation on ARM platforms.
  * Add support for LoongArch.</changelog>
</package>
<package pkgid="3b0c6ef69c10ca3cd0b7dfdea346c9de689dd1c21203f3e775f38032aa113c6e75c0b83e521ee335f48b552f891c62461d9145a7777eeb82bbcbe33ecb5b1a17" name="cln-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7" rel="bp160.1.13"/>
  <changelog author="crrodriguez@opensuse.org" date="1327060800">- build with -fvisibility-inlines-hidden, in the unlikely
  case this cause trouble, drop me a note (the test suite passes
  so I expect none) . This reduces the exported symbol table
  in around 200(!!) symbols.</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix the SLES build (%make_install is not expanded)
- Install the license file</changelog>
  <changelog author="schwab@suse.de" date="1362571200">- cln-aarch64.patch: add support for aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1378728000">- updated to 1.3.3:
  * Fix integer input of leading zeros in power-of-two base.
  * Fix several floating-poing conversion bugs involving huge
    numbers.
  * Fix bug that would set input stream fail state when reading
    a number at EOF.
- removed upstreamed s390x.patch
- refreshed aarch64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1416312000">- updated to 1.3.4:
  * Fix input of huge floats.
  * Support the AArch64 and the Mips64 ABIs.
    =&gt; dropped cln-aarch64.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1552305600">- riscv.patch: Add support for riscv64 platform
- Use %license</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1574251200">- Update to 1.3.5:
  * Fix bug in scale_float() throwing underflow_exception.
- Drop riscv.patch. Fixed upstream.</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 1.3.6
  * fix build errors
- run tests</changelog>
  <changelog author="pgajdos@suse.com" date="1600689600">- remove -fvisibility-inlines-hidden for now [bsc#1176710]</changelog>
  <changelog author="pgajdos@suse.com" date="1707393600">- version update to 1.3.7
  * Fixed compilation on ARM platforms.
  * Add support for LoongArch.</changelog>
</package>
<package pkgid="619a8c07e59f4e3956d973f84884fc2b37ea243bf695bb1dade266b3faae14615a97ba57ffcfdc1007da97f65123813bac938b9a150ce75ebae524d502353ff5" name="clojure" arch="noarch">
  <version epoch="0" ver="1.12.0.1479" rel="bp160.1.6"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1692792000">- Update to 1.11.1.1405:
  * GitHub releases now contain .sha256 files for binaries</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1693137600">- Update to 1.11.1.1413:
  * No changes from prior</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1701691200">- Update to 1.11.1.1420:
  * TDEPS-119 Unable to start CLI in write-protected project directory
  * Update to tools.tools 0.3.2</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1701777600">- Update to 1.11.1.1429:
  * No changes from prior</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1703937600">- Update to 1.11.1.1435:
  * Update to tools.deps 1.18.1394</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710072000">- Update to 1.11.2.1446:
  * Clojure -X:deps programs that create a basis now take a :dir
    option for the directory context to use
  * Updated tools.deps, tools.deps.cli to latest
  * Fix for CVE-2024-22871 detailed in GHSA-vr64-r9qj-h27f:
    CLJ-2839 - iterate, cycle, repeat - infinite seqs have infinite
    hashCode() (bsc#1220666)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1714392000">- Update to 1.11.3.1456:
  * CLJ-2843 - Reflective calls to Java methods that take primitive
    long or double now work when passed a narrower boxed number at
    runtime (Integer, Short, Byte, Float). Previously, these methods
    were not matched during reflection and an error was thrown.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1714737600">- Update to 1.11.3.1463:
  * update to latest tools.deps, tools.deps.cli, tools.build
  * update list of :deps programs in help</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1722859200">- Update to 1.11.4.1474:
  * CLJ-2145 - Fix clearing of closed overs in ^:once fns
  * CLJ-2317 - recur to head of :once fn cancels once</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1725883200">- Update to 1.12.0.1479:
  See https://clojure.org/news/2024/09/05/clojure-1-12-0</changelog>
</package>
<package pkgid="cd03e59730c1b9d59e27c020d93e0cd5cabcb722e2026a8577b420548335434e765299b7b7ffc7d287ffaa5960bbed6fcf2cbe0bd91bf9d120c8ba042cb2448e" name="clone-master-clean-up" arch="noarch">
  <version epoch="0" ver="1.12" rel="bp160.1.9"/>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1565179200">- Install README.md and license file, fix build warnings.
- Fix _service-file:
  * Replace 'HEAD' version by 'master' branch:
    Right now, this project has just one single branch - track
    this as the release branch.
  * Add &lt;versionformat&gt;.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Use noun phrase in descriptions.</changelog>
  <changelog author="abriel@suse.com" date="1570536000">- Bump version to 1.5
- Don't show output from pushd/popd
- Make snapper snapshot removal more generic
  The output format is not really meant for machine reading, it's
  format has changed thus the simple parser broke.
  This now makes the parser more generic (using data from d-bus),
  also now it is ensured the snapshots are deleted in the correct
  order.
  (bsc#1149322)</changelog>
  <changelog author="abriel@suse.com" date="1597233600">- Bump version to 1.6
- cleanup salt client ID and osad authentication configuration
  file and the system ID
  (bsc#1174147)
- change the path of the template file in the comments of
  custom_remove.template and clone-master-clean-up.sh
  (jsc#TEAM-490)</changelog>
  <changelog author="abriel@suse.com" date="1661860800">- Bump version to 1.7
- CVE-2021-32000: fix some potentially dangerous file system
  operations
  (bsc#1181050)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1663848000">- Bump version to 1.8
- clone-master-clean-up fails to remove btrfs snapshots
  (bsc#1203651)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1663934400">- Bump version to 1.9
- [clone-master-clean-up] Cleannup initiatorname.iscsi
  Remove all no comment files
  (bsc#1203024)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1666958400">- Bump version to 1.10
- clone-master-clean-up fails if postfix is not installed (bsc#1204835)
  Check if the directory does exists.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1675771200">- Bump version to 1.11
- clone-master-clean-up fails when /etc/iscsi/initiatorname.iscsi doesn't exist
  The entire section is wrapped in a test for the existence of this file.
  (bsc#1207993)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1710849600">- Error message about 'journald.conf' (bsc#1221533)
  Check if journald.conf does exist.
- 1.12</changelog>
</package>
<package pkgid="8f4173ae9a3a766b5aa54a14b9a6b3b69a12b650f82e4d319fed3ce9b2a7820a198094597a54acf041fd55b3f5c8e897a2052c45ae1d0654b9061d057660b0d8" name="cloud-hypervisor" arch="x86_64">
  <version epoch="0" ver="42.0" rel="bp160.1.13"/>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1729771200">- initial packaging</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1733918400">- restrict building only for arches which are supported</changelog>
</package>
<package pkgid="bc42d8a11ea6f0687ea8420e49caa40a8fba02fa4d6896754b824e9325da7f6672e99711efa8245c81438c9798d4946cb5993e34b7516027824c63339d2c108f" name="cloud-hypervisor-remote" arch="x86_64">
  <version epoch="0" ver="42.0" rel="bp160.1.13"/>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1729771200">- initial packaging</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1733918400">- restrict building only for arches which are supported</changelog>
</package>
<package pkgid="5860824d90911c64ce43b1762a8a1f0ac687f6b31e5716c66274a834adb30fe80310678f6aa3e0070c0f4969ea7e7e54f1dc399cc055ebc304ad05a33f044edc" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.1.2"/>
  <changelog author="rjschwei@suse.com" date="1712318400">- Add cloud-init-no-nmcfg-needed.patch (bsc#1221726)
  + Do not require a NetworkManager config file in order to detect
    NetworkManager as the renderer</changelog>
  <changelog author="rjschwei@suse.com" date="1712664000">- Update cloud-init-no-openstack-guess.patch
  + Do not enable cloud-init on systems where there is no DMI just
    because no data source has been found. No data source means
    cloud-init will not run.</changelog>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
</package>
<package pkgid="bed78a01d09b77fac42a7ed4f152532ab0ba8d437989b77dd4433677ed850171c29655178a013191114c60e2813cedb32a1e961b7be4a5352643ab95eaba32ac" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.2.1"/>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245401,bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
  <changelog author="mmachova@suse.com" date="1759233600">- Drop unneeded test dependency on httpretty, fixed long ago
  * https://github.com/canonical/cloud-init/pull/1720</changelog>
  <changelog author="rjschwei@suse.com" date="1762862400">- Fix dependency replace -serial with -pyserial</changelog>
</package>
<package pkgid="b5b8a16f01b929969b02b846e8c8922cb00083859eca004462eb78cd0549cd1c16bdde7d40226761ade4e165d756a3a7533c00596af0689c1609bfcd063be5c6" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.1.2"/>
  <changelog author="rjschwei@suse.com" date="1712318400">- Add cloud-init-no-nmcfg-needed.patch (bsc#1221726)
  + Do not require a NetworkManager config file in order to detect
    NetworkManager as the renderer</changelog>
  <changelog author="rjschwei@suse.com" date="1712664000">- Update cloud-init-no-openstack-guess.patch
  + Do not enable cloud-init on systems where there is no DMI just
    because no data source has been found. No data source means
    cloud-init will not run.</changelog>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
</package>
<package pkgid="c9e8155e322248be81c594982de040d2852d439f37ff9973ad03f7765991acf68288a23a2aca8a861a6102d27dea5c908258c5beaeeedbacdaac227eda9dfccf" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.2.1"/>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245401,bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
  <changelog author="mmachova@suse.com" date="1759233600">- Drop unneeded test dependency on httpretty, fixed long ago
  * https://github.com/canonical/cloud-init/pull/1720</changelog>
  <changelog author="rjschwei@suse.com" date="1762862400">- Fix dependency replace -serial with -pyserial</changelog>
</package>
<package pkgid="7e380555f9c7781f912d83d7af5c031de40ad0b5542f97ce6e007f5d14954795d487c5af50f8283806d1c081a3af362657291aaa9d99a146c4d895dfee000c36" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.1.2"/>
  <changelog author="rjschwei@suse.com" date="1712318400">- Add cloud-init-no-nmcfg-needed.patch (bsc#1221726)
  + Do not require a NetworkManager config file in order to detect
    NetworkManager as the renderer</changelog>
  <changelog author="rjschwei@suse.com" date="1712664000">- Update cloud-init-no-openstack-guess.patch
  + Do not enable cloud-init on systems where there is no DMI just
    because no data source has been found. No data source means
    cloud-init will not run.</changelog>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
</package>
<package pkgid="870fdb48e90c429909ff095ea1443303f49bba306c7e1982a73cd86d6d67e90a7ee1a185661d188c4e37a45d51fc55409143afb3fba5ba1582d8784c63fb9ea5" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="25.1.3" rel="160000.2.1"/>
  <changelog author="rjschwei@suse.com" date="1714392000">- Add cloud-init-usr-sudoers.patch (bsc#1223469)
  + Handle the existence of /usr/etc/sudoers to search for the expected
    include location</changelog>
  <changelog author="rjschwei@suse.com" date="1717416000">- Add cloud-init-skip-rename.patch (bsc#1219680)
  + Brute force approach to skip renames if the device is already present</changelog>
  <changelog author="mmachova@suse.com" date="1718366400">- remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)</changelog>
  <changelog author="rjschwei@suse.com" date="1736164800">- Add cloud-init-wait-for-net.patch (bsc#1227237)
  + Wait for udev once if we cannot find the expected MAC</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737374400">- Support python 3.13 (bsc#1233649):
  + pep-594-drop-pipes.patch, gh#canonical/cloud-init#4392
  + cloud-init-fix-python313.patch, gh#canonical/cloud-init#4669
  + cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch gh#canonical/cloud-init#5052</changelog>
  <changelog author="rjschwei@suse.com" date="1738670400">- Add cloud-init-direxist.patch (bsc#1236720)
  + Make sure the directory exists, if not create it, before writing in that
    location.</changelog>
  <changelog author="rjschwei@suse.com" date="1747310400">- Update to version 25.1.1 (bsc#1239715,jsc#PED-8680,bsc#1228414)
  + Removed included upstream
  - pep-594-drop-pipes.patch
  - cloud-init-fix-python313.patch
  - cloud-init-dont-assume-ordering-of-ThreadPoolExecutor.patch
  - cloud-init-direxist.patch
  - cloud-init-wait-for-net.patch
  - cloud-init-usr-sudoers.patch
  - cloud-init-no-nmcfg-needed.patch
  - cloud-init-keep-flake.patch
  - cloud-init-lint-fixes.patch
  - cloud-init-pckg-reboot.patch
  - cloud-init-ds-deterministic.patch
  - cloud-init-write-routes.patch
  - cloud-init-skip-empty-conf.patch
  + Forward port
  - cloud-init-no-tempnet-oci.patch
  - cloud-init-no-openstack-guess.patch
  - cloud-init-lint-set-interpreter.patch
  + Add
  - cloud-init-ssh-usrmerge.patch (bsc#1237764)
  - cloud-init-lint-set-interpreter.patch
  - cloud-init-lint-fix.patch
  - cloud-init-no-single-process.patch
  - cloud-init-needs-action.patch
  + Drop hidesensitivedata in 16 &amp; greater
  + test: pytestify cc_chef tests, add migration test
  + chef: migrate files in old config directories for backups and cache
  + fix: correct the path for Chef's backups (#5994)
  + fix(Azure): don't reraise FileNotFoundError during ephemeral setup (#6113)
  + fix(azure): handle unexpected exceptions during obtain_lease() (#6092)
  [Ksenija Stanojevic]
  + Allow to set mac_address for VLAN subinterface (#6081)
  [jumpojoy] (GH: 5364)
  + fix: Remove erroneous EC2 reference from 503 warning (#6077)
  + fix: NM reload and bring up individual network conns (#6073) [Ani Sinha]
  + fix: stop warning on dual-stack request failure (#6044)
  + fix: install_method: pip cannot find ansible-pull command path (#6021)
  [Hasan Aliyev] (GH: 5720)
  + fix: Fix DataSourceAliYun exception_cb signature (#6068) (GH: 6066)
  + fix: Update OauthUrlHelper to use readurl exception_cb signature
  (GH: 6065)
  + test: add OauthUrlHelper tests
  + test: Remove CiTestCase from test_url_helper.py
  + test: pytestify test_url_helper.py
  + fix: track more removed modules (#6043)
- From 25.1
  + ci: fix post-merge packaging CI (#6038)
  + feat(azure): Fix imds-based ssh_pwauth (#6002) [Ksenija Stanojevic]
  + ci: check for sorted patches (#6036)
  + feat: aliyun datasource support crawl metadata at once (#5942)
  [jinkangkang]
  + docs: document /usr merge breaking change (#6032)
  + test: Add integration test for /var mounts (#6033)
  + test: Ensure pre-24.2 custom modules work (#6034)
  + doc: Update references to older keys (#6022) [Pedro Ribeiro]
  + fix: untyped-defs in tests/unittests/{config, net, sources} (#6023)
  [Romain]
  + fix: don't reference PR in post-merged CI (#6019)
  + chore: explicitly skip broken ansible integration tests (#5996) [a-dubs]
  + tests(oracle): fix test_install_missing_deps apt race condition (#5996)
  [a-dubs]
  + test(oracle): fix test_ubuntu_drivers_installed (#5996) [a-dubs]
  + test(oracle): fix test_frequency_override integration test (#5996)
  [a-dubs]
  + chore: add type hint to IntegrationCloud's cloud_instance field (#5996)
  [a-dubs]
  + test(oracle): fix modules/test_lxd.py::test_storage_lvm on noble (#5996)
  [a-dubs]
  + commit 9e591fff266be9d4c83f74ec02a717b74993304d [a-dubs]
  + net/sysconfig: do not remove all existing settings of
  /etc/sysconfig/network (#5991) [Ani Sinha] (GH: 5990)
  + fix: remove wrong return when checking if network necessary (#6013)
  + fix: typing for rsyslog, ubuntu_pro, power_state_change (#5985)
  [MostafaTarek124eru]
  + fix: Retry on OpenStack HTTP status codes (#5943) [weiyang] (GH: 5687)
  + fix: Ensure fqdn is treated as string in get_hostname_fqdn (#5993)
  [MKhatibzadeh] (GH: 5989)
  + feat(vmware): Convert imc network config to v2 (#5937) [PengpengSun]
  + ci: add upstream post-merge test
  + ci: check if upstream commit causes ubuntu patch conflicts
  + ci: organize cla tests together
  + test: eliminate obsolete cases, add non-error case
  + chore: remove redundant manual schema validation
  + doc: clarify subiquity docs
  + chore: cleanup `len' usage (#5956) [Shreenidhi Shedi]
  + Fix: GCE _get_data crashes if DHCP lease fails (#5998) [Bryan Fraschetti]
  + Fixes GH-5997
  + fix: correct the path for Chef's cache (#5994)
  [MostafaTarek124eru] (GH: 5090)
  + fix: Run ansible with run_user instead of root for distro install_method
  (#5986) [Amirhossein Shaerpour] (GH: 4092)
  + fix: retry AWS hotplug for async IMDS (#5995) (GH: 5373)
  + feat(integration_tests): add optional INSTANCE_TYPE setting (#5988)
  [Alec Warren]
  + feat(integration-tests): set boto3 and botocore to INFO to prevent
  log spamming [a-dubs]
  + ci: add 'tox -e integration-tests-fast' command [a-dubs]
  + chore: Add feature flag for manual network waiting (#5977)
  + Release 24.4.1
  + fix: Use /usr/lib/ rather than /lib in packaging code (#5970)
  + Use log_with_downgradable_level for user password warnings (#5927)
  [Ani Sinha]
  + doc: change to hyphenated keys (#5909) (GH: 5555)
  + fix: Wait for udev on openstack (#5947) [Robert Schweikert] (GH: 4125)
  + test: disambiguate resource cleanup from test failure (#5926)
  + fix: use program name of netcat as installed by upstream, "nc" (#5933)
  (#5933) [Andreas K. Hüttel]
  + ci: bump canonical/setup-lxd to version v0.1.2 (#5948)
  + feat(cc_chef): Allow change of Chef configuration file (#5925)
  [Sean Smith]
  + docs: fix typo in generated file in LXD tutorial (#5941) [Pavel Shpak]
  + feat: Identify Samsung Cloud Platform as OpenStack (#5924) [us0310306]
  + fix: don't deadlock when starting network service with systemctl (#5935)
  + feat: Custom keys for apt archives (#5828) [Bryan Fraschetti] (GH: 5473)
  + test: improve test initialization error path (#5920)
  + chore: improve logging when lxd detection fails (#5919)
  + fix: Add "manual" to allowed subnet types  (#5875)
  [Math Marchand] (GH: 5769)
  + fix: remove bad ssh_svcname setting for Gentoo/OpenRC (#5918)
  [Andreas K. Hüttel]
  + feat(gentoo): Add compatibility for Gentoo with systemd (#5918)
  [Andreas K. Hüttel]
  + fix(ovf): no warning should be log when rpctool found no value (#5915)
  [PengpengSun] (GH: 5914)
  + Move DS VMware to be in front of DS OVF (#5912) [PengpengSun] (GH: 4030)
  + ci: Add proper 'Breaks: ' to integration testing simple deb (#5923)
  + chore: Add akhuettel to CLA signers file (#5917) [Andreas K. Hüttel]
  + chore: eliminate calls at import time (#5889) (GH: 5344)
  + test: Add pyserial to test-requirements.txt (#5907)
  + test: Allow unknown size in growpart test (#5876)
  + doc: Update tutorials [Sally]
  + fix: bump azure key size to 3072 (#5841)
  24.4.1
  + fix: Ensure _should_wait_via_user_data() handles all user data types (#5976)
  + fix: Don't log error in wait_for_url (#5972)
  + feat(url_helper): Retry on 503 error (#5938)
  + fix: Don't break modules that use get_meta_doc() (#5953)
  + refactor: Pass deprecation log args as tuple (#5953)
  + fix: uninstall custom signal handlers before shutdown (#5913)
  24.4
  + test: Ensure unit ordering in ftp tests includes downstream units (#5892)
  + test: re-decrement expected webhook events (#5894)
  + test: allow relative path in apt-get test (#5891)
  + Fix metric setting of nmconnection for rhel (#5878) [Amy Chen]
  + chore: remove unused code(#5887)
  + feat(ephemeral): replace old has_url_connectivity() with new
  _check_connectivity_to_imds() [a-dubs]
  + feat(oracle): add true single stack ipv6 support [a-dubs]
  + feat(ephemeral): refactor ephemeralIP and add ipv6 connectivity check
  [a-dubs]
  + test: Decrement expected webhook events (#5888)
  + chore: remove `--docs` option from `cloud-init schema` (#5857) (GH: 5756)
  + test: pytestify "tests/unittests/config/test_cc_timezone.py" (#5885)
  [Mahesh Ghumare]
  + ci: bump integration tests to use plucky
  + test: add grub_dpkg to inactive modules
  + test: move default behavior tests into their own module
  + test(apt): add plucky version for hello pkg (#5883)
  + Docs: improved mermaid diagram for better visibility. Add "MaheshG11"
  as contributor (#5874) [Mahesh Ghumare] (GH: 5837)
  + fix(ntp): Fix RockyLinux OS support  (#5864) [Sid Shukla]
  + chore(jsonschema): migrate from deprecated Validator.iter_errors (#5856)
  + chore: remove deprecation warning getting jsonschema's version (#5856)
  + chore: use filter arg for tar.extractall (#5856)
  + chore: remove __init__ from pytest test class (#5856)
  + chore: do not test element's truth value directly (#5856)
  + chore: migrate from deprecated datetime.datetime.utcfromtimestamp (#5856)
  + chore: migrate from deprecated datetime.datetime.utcnow() (#5856)
  + chore: set recursive=False for ensure_dir if parent path is "/" (#5816)
  [sxt1001]
  + ci: fix broken daily dependencies (#5867)
  + ci: fix packaging tests (#5865)
  + feat(vultr): add override for network interface detection (#5847)
  [Andrew Davis]
  + feat(networkd): Support RequiredForOnline option (#5852) [Dan McGregor]
  + Prevent NM from handling DNS when network interfaces have DNS config
  (#5846) [Ani Sinha]
  + fix(smartos): Add `addrconf` IPv6 support (#5831)
  [blackhelicoptersdotnet]
  + freebsd: adjust to match the new pyyaml package name (#5844)
  [Gonéri Le Bouder]
  + fix: disable grub-dpkg by default (#5840)
  + fix(openbsd): Enable sysv init scripts in OpenBSD build script (#5790)
  [Hyacinthe Cartiaux] (LP: 4036, #1992853)
  + test: Fix duplicate judgment conditions in password generation (#5835)
  [sxt1001]
  + chore: don't render non-templated unit files (#5830)
  + chore: simplify and standardize cloud-final.service (#5830)
  + chore: simplify Conflicts=shutdown.target (#5830)
  + chore: remove redundant Before=NetworkManager.service (#5830)
  + chore: remove unnecessary systemd settings (#5830)
  + chore: eliminate redundant ordering dependencies (#5819)
  + fix: fix ordering cycle for distros with default deps (#5819) (GH: 5755)
  + test: unbreak pytest-xdist (#5829)
  + feat: Conditionally remove networkd online dependency on Ubuntu (#5772)
  + feat: Ensure random passwords contain multiple character types (#5815)
  [sxt1001] (GH: 5814)
  + docs: split example page into example library (#5645) [Sally]
  + doc: clarify workarounds required for single process changes (#5817)
  + chore: add 3.13 to PR CI runs, 3.14 to scheduled (#5825)
  + fix: Render v2 bridges correctly on network-manager with set-name
  (#5740) (GH: 5717)
  + test: add no_thinpool unit test (#5802)
  + chore: split lxd init config into separate function (#5802)
  + test: pytestify test_cc_lxd.py (#5802)
  + fix: Correctly handle missing thinpool in cc_lxd (#5802)
  + fix: Render bridges correctly for v2 on sysconfig with set-name (#5674)
  (GH: 5574)
  + tests(minimal): rsyslog not in minimal images expect warning (#5811)
  + tests(lxd): avoid failure on multiple calls to --show-log (#5811)
  + chore: update netplan import semantics and related tests (#5805)
  (GH: 5804)
  + lint: fix untyped-defs on /tests/unittest/cmd (#5800) [iru]
  + test: actually use devel release and verify_clean_boot enhancements
  (#5801)
  + feat(locale): locales install on minimal images when cfg requests (#5799)
  + feat(byobu): support byobu install on minimal images when cfg requests
  (#5799)
  + chore: Use devel release and no sbuild in integration CI (#5798)
  + test: Update integration tests from netplan backport (#5796)
  + test: add get_syslog_or_console for minimal images without syslog (#5793)
  + chore: Remove resize_root_tmp from cloud.cfg.tmpl (#5795) (GH: 5786)
  + docs: Fix field name from `contents` to `content` (#5787) [Igor Akkerman]
  + chore: bump pycloudlib to required version (#5792)
  + fix: avoid deprecation logs for calling cli stages (#5770) (GH: 5726)
  + tests: bump pycloudlib deps to include gce bug fix for id str (#5783)
  + fix(test): convert use p.gce.instance.id instead of instance_id (#5783)
  + fix(network-manager): bond properties and network schema (#5768)
  [Denis Kadyshev]
  + Fix metric setting for ifcfg network connections for rhel (#5777)
  [Ani Sinha] (GH: 5776)
  + fix(akamai): handle non-string user data in base64 decoding (#5751)
  [Jesse Alter]
  + fix(ci): do not auto stale issues (#5775)
  + Make pytest more verbose for easier debugging (#5778) [Ani Sinha]
  + ci: fix tox.ini pytest cmd to use cloudinit dir for coverage reporting
  (#5774) [Alec Warren]
  + tests: add OS_IMAGE_TYPE setting to allow for minimal tests (#5682)
  + test(hotplug): Simplify test_multi_nic_hotplug (#5763)
  + test(hotplug): increase nc timeout (#5763)
  + test: pytestify test_main.py (#5758)
  + test(ec2-dual-stack): fix int-test (#5762)
  + test: make verify_clean_boot really respect return code (#5761)
  + test: bump timeout in test_order (#5759)
  + docs: Properly document the cc_ubuntu_autoinstall module (#5757)
  + docs: fix WSL tutorial (#5752) (GH: 5746)
  + test: make verify_clean_boot respect return code by environment (#5754)
  + feat(integration_test): add CLOUD_INIT_PKG setting (#5739)
  + fix(ci): fix packaging check merge operation (#5750)
  + doc: do not document user.meta-data key (#5745)
  + test: avoid undocumented lxd key (#5748)
  + test: Refactor test_cc_set_hostname.py and test_cc_ntp.py (#5727)
  + chore: update docs URLs to cloud-init.io (#5741)
  + test: fix timer logging change expected logs (#5734)
  + fix: type annotations for several modules (#5733)
  + chore: add timer to io and string manipulation code
  + feat: add log package and performance module
  + remove newline injected for cloud-init status --wait (#5700)
  [Andrew Nelson] (GH: 5863)
  + test: webhook require_deprecation msg on 24.3 (#5731)
  + test: fix test_nocloud message typo introduced by 313390f8 (#5731)
  + test: Fix test_log_message_on_missing_version_file (#5730)
  + tests: assert info level warnings instead of require_deprecation
  + tests: fix test to ignore_warnings not require Used fallback ds
  + chore: clean up pytest warnings (#5721)
  + tests(pro): bump pycloudlib add noble release to pro tests (#5719)
  + fix(hotplugd.socket): remove basic.target as dependency (#5722)
  (LP: #2081124)
  + ci: fix integration test positional argument (#5718)
  + Create datasource for CloudCIX (#1351) [BrianKelleher]
  + ci: colorize output (#5716)
  + fix(schema): Allow for locale: false in schema add tests (#5647)
  + ci: fix packaging patch check (#5713)
  + chore: clean up old pickle workaround (#5714)
  + fix: force sftp cleanup when done with instance (#5698)
  + test(hotplug): reenable vpc test in focal (#5492)
  + chore: fix typing of userdata_raw (#5710)
  + fix(NetworkManager): Fix network activator (#5620)
  + fix: lxd do not check for thinpool kernel module (#5709)
  + docs: fix typo in docstring (#5708)
  + Scaleway: Force on-link: true for static networks (#5654)
  [Louis Bouchard] (LP: 5523, #2073869)
  + fix: Invalid "seedfrom" in NoCloud system configuration (#5701)
  + tests: pytestify test_nocloud.py (#5701)
  + test: make verify_clean_boot respect return code by series (#5695)
  + fix: use cross-distro netcat name (#5696)
  + ci: fix labeler (#5697)
  + chore(actions): add packaging label for any branches modifying debian/*
  + (#5693)
  + test: add verify_clean_boot() calls alongside verify_clean_log() (#5671)
  + test: add deprecation support to verify_clean_boot (#5671)
  + doc: remove misleading warning (#5681)
  + chore: Prefer other methods over $INSTANCE_ID (#5661)
  + ci: fix packaging test when no patches (#5680)
  + chore: fix tip-ruff and update to latest version (#5676)
  + chore: make ansible test serial (#5677)
  + feat(ec2): Bump url_max_timeout to 240s from 120s. (#5565)
  [Robert Nickel]
  + chore: fix typo in requirements.txt (#5637)
  + feat: make pyserial an optional dependency (#5637)
  + chore: bump ci dependency versions (#5660)
  + chore: drop broken optimization (#5666)
  24.3.1
  + test: add test coverage for iproute2 commands (#5651)
  + fix(netops): fix ip addr flush command (#5651) (GH: 5648)
  24.3
  + docs: Clarify v2 set-name behavior (#5639)
  + fix: properly handle blank lines in fstab (#5643)
  + fix: cc_user_groups incorrectly assumes "useradd" never locks password
  field (#5355) [dermotbradley]
  + tests: assert cloud-init user-data cert is the only root cert (#5641)
  + feat: add automation for ubuntu/* branches asserting quilt patches apply
  (#5622)
  + fix(sources/wsl): no error with empty .cloud-init dir (SC-1862) (#5633)
  + feat(azure): add PPS support for azure-proxy-agent (#5601)
  [Ksenija Stanojevic]
  + fix(tests): use instance.clean/restart instead of clean --reboot (#5636)
  + test: fix cmd/test_schema int test (#5629)
  + test: fix test_honor_cloud_dir int test (#5627)
  + docs: alphabetize dsname lookup table. update comment to create the csv
  (#5624)
  + docs: new datasources should update reference/ds_dsname_map (#5624)
  + test: fix ca_certs int test (#5626)
  + chore: update schema docs to use RST bold for config key names (#5562)
  + fix(doc): italics around deprecation prefix, description bolds key names
  (#5562)
  + feat(doc): add env vars to debug config module doc builds (#5562)
  + fix(doc): doc of nested objects under JSON schema items.oneOf (#5562)
  + fix(doc): object type check if patternProperties or properties (#5562)
  + doc(schema): schema descriptions should end with trailing stop (#5562)
  + fix(wsl): Properly assemble multipart data (#5538) [Carlos Nihelton]
  + feat: collect-logs improvements (#5619)
  + tests: fix test_ca_certs.py for gcp (#5621)
  + fix(nm): Ensure bond property name formatting matches schema definition
  (#5383) [Curt Moore]
  + Update behavior of base bond interface with NetworkManager (#5385)
  [Curt Moore]
  + ci: Drop Python 3.6 and 3.7 (#5607)
  + chore(black): Bump version (#5607)
  + chore(mypy): Fix failures on newer versions of mypy (#5607)
  + chore(tox.ini): Simplify configuration, fix minor bugs (#5607)
  + chore(mypy): Lint log module (#5607)
  + fix(systemd): Correct location of installed drop-in files(#5615)
  [Noah Meyerhans]
  + fix(btrfs): Version parsing (#5618)
  + docs: Remove unnecessary section, add feature flag page (#5617)
  + docs: Drop Python 3.6 and 3.7 support (#5617)
  + chore: explain other use of oauth (#5616)
  + chore(actions): add doc label for any doc related subdir file matches
  (#5602)
  + doc: Add misc links, improve wording (#5595)
  + doc(boot): Make first boot a dedicated page (#5595)
  + doc: Describe all stages in a single process (#5595)
  + chore: Deprecate old commands in help output (#5595)
  + chore: add comment explaining the NetworkManager may-fail setting
  (#5598) [Ani Sinha]
  + Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr
  (#5471)" (#5596) [PengpengSun]
  + fix: read_optional_seed to set network-config when present (#5593)
  + feat(snap): avoid refresh on package_upgrade: true and refresh.hold
  (#5426)
  + fix: Fix tests which have outdated strings (#5585)
  + fix: Fix ftp failures (#5585)
  + doc: improve integration testing configuration instructions (#5556)
  [Alec Warren]
  + azure: check azure-proxy-agent status (#5138) [Ksenija Stanojevic]
  + refactor: refactor and fix mypy in DataSourceIBMCloud.py (#5509)
  [Alec Warren]
  + fix: Update default LXD meta-data with user meta-data (#5584)
  + chore: Fix log message in url_helper.py (#5583)
  + fix: nocloud no fail when network-config absent (#5580)
  + feat: Single process optimization (#5489)
  + chore: Add helper, refactor utilities into separate module (#5573)
  + refactor: update handle function of cc_mounts (#5498)
  + fix: Integration tests (#5576)
  + fix(NoCloudNet): Add network-config support (#5566)
  + feat: Eliminate redundant configuration reads (#5536)
  + fix(actions): correct typo in cloudinit/config/schemas/ match (#5570)
  + fix: add host template for AOSC (#5557) [Yuanhang Sun]
  + chore(debian): Remove vestigial postinst and preinst code (#5569)
  + fix(actions): doc labeler needs all clause instead of default any (#5568)
  + docs: Overhaul user data formats documentation (#5551)
  + chore: Deprecate ENI as an input configuration format (#5561)
  + doc: improve drop-in custom modules (#5548)
  + doc(NoCloud): Categorize the different configuration types (#5521)
  + doc(autoinstall): Remove incorrect statements, be more direct (#5545)
  + chore: remove unneeded doc-lint tox env config (#5547)
  + fix(doc-spelling): config spelling_word_list_filename (#5547)
  + doc(modules): add section to wrap modules' doc (#5550)
  + doc: Update docs on boothooks (#5546)
  + fix: doc auto label to consider schema json changes as doc PRs (#5543)
  + feat(schema): add chef_license schema enum (#5543)
  + doc: add diagram with boot stages (#5539)
  + docs: improve qemu command line (#5540) [Christian Ehrhardt]
  + fix: auto label doc PRs (#5542)
  + fix(wsl): Put back the "path" argument to wsl_path in ds-identify
  + (#5537) [Carlos Nihelton]
  + test: fix test_kernel_command_line_match (#5529)
  + test: fix no ds cache tests (#5529)
  + fix(azurelinux): Change default usr_lib_exec path (#5526) [Minghe Ren]
  + feat: Support URI sources in `write_files` module (#5505)
  [Lucas Ritzdorf]
  + add openeuler to distros in cc_spacewalk.py (#5530) [sxt1001]
  + feat(wsl): Special handling Landscape client config tags (#5460)
  [Carlos Nihelton]
  + chore: Deprecate partially supported system config (#5515)
  + chore: Improve detection logging for user clarity (#5515)
  + fix(ds-identify): Detect nocloud when seedfrom url exists (#5515)
  + refactor: logs.py add typing and small misc refactors (#5414)
  + refactor: logs.py pathlib changes (#5414)
  + refactor: replace verbosity with log levels in logs.py (#5414)
  + feat: Add trace-level logger (#5414)
  + chore(formatting): fix squashed commit test formatting (#5524)
  + fix: Clean cache if no datasource fallback (#5499)
  + Support setting mirrorlist in yum repository config (#5522) [Ani Sinha]
  + doc(OFV): Document how to configure cloud-init (#5519)
  + fix: Update DNS behavior for NetworkManager interfaces (#5496)
  [Curt Moore]
  + Fix configuration of DNS servers via OpenStack (#5384) [Curt Moore]
  + test: Unconditionally skip test_multi_nic_hotplug_vpc (#5503)
  + tests: revert expectation of exit 2 from cloud-init init --local (#5504)
  + fix(test): Fix ip printer for non-lxd (#5488)
  + feat(systemd): convert warning level message to deprecation (#5209)
  + test: allow verify_clean_boot to ignore all or specific tracebacks
  (#5209)
  + test: Don't fail tests which call cloud-init as a command (#5209)
  + feat(systemd): Warn user of unexpected run mode (#5209)
  + fix: add schema rules for 'baseurl' and 'metalink' in yum repo config
  (#5501) [Ani Sinha]
  + Set MTU for bond parent interface (#5495) [Curt Moore]
  + refactor: util.mounts to handle errors (#5490)
  + refactor: util.get_proc_env to work with strs (#5490)
  + typing: fix check_untyped_defs in cloudinit.util (#5490)
  + test: Add missing assert to test_status.py (#5494)
  + test: Ensure mkcert executable in ftp tests (#5493)
  + test: pytestify and cleanup test_cc_mounts.py (#5459)
  + fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)
  [PengpengSun]
  + fix(openbsd): fix mtu on newline in hostname files (#5412) [Tobias Urdin]
  + feat(aosc): Add 'AOSC OS' support (#5310) [Yuanhang Sun]
  24.2
  + test: Fix no default user in test_status.py (#5478)
  + fix: correct deprecated_version=22.2 for users.sudo
  + test: Add jsonschema guard in test_cc_ubuntu_pro.py (#5479)
  + fix(test): Fix pycloudlib types in integration tests (#5350)
  + fix(test): Fix ip printing for non-lxd instances (#5350)
  + chore(mypy): Drop unused missing import exclusions (#5350)
  + type: Add stub types for network v1/v2 config (#5350)
  + chore: Auto-format network jsonschema in ci (#5350)
  + fix(tox): Update tox.ini (#5350)
  + chore(typing): Remove type ignores and casts (#5350)
  + refactor(typing): Remove unused code paths (#5350)
  + fix(typing): Add / update type annotations (#5350)
  + fix(typing): Remove type annotation for unused variable (#5350)
  + fix(typing): Remove invalid type annotations (#5350)
  + ci(mypy): Set default follow_imports value (#5350)
  + test: Update integration tests to pass on focal (#5476)
  + tests: update ubuntu_pro test to account for info-level deprecations
  (#5475)
  + tests: update nocloud deprecation test for boundary version (#5474)
  + fix(rh_subscription): add string type to org (#5453)
  + tests: integration tests aware of features.DEPRECATION_INFO_BOUNDARY
  + tests: update keyserver PPA key fur curtin-dev (#5472)
  + test: Fix deprecation test failures (#5466)
  + chore: fix schema.py formatting (#5465)
  + fix: dont double-log deprecated INFOs (#5465)
  + fix(test): Mock version boundary (#5464)
  + fix(schema): Don't report changed keys as deprecated (#5464)
  + test: fix unit test openstack vlan mac_address (#5367)
  + fix: Ensure properties for bonded interfaces are properly translated
  (#5367) [Curt Moore]
  + fix(schema): permit deprecated hyphenated keys under users key (#5456)
  + fix: Do not add the vlan_mac_address field into the VLAN object (#5365)
  [Curt Moore]
  + doc(refactor): Convert module docs to new system (#5427) [Sally]
  + test: Add unit tests for features.DEPRECATION_INFO_BOUNDARY (#5411)
  + feat: Add deprecation boundary support to schema validator (#5411)
  + feat: Add deprecation boundary to logger (#5411)
  + fix: Gracefully handle missing files (#5397) [Curt Moore]
  + test(openstack): Test bond mac address (#5369)
  + fix(openstack): Fix bond mac_address (#5369) [Curt Moore]
  + test: Add ds-identify integration test coverage (#5394)
  + chore(cmdline): Update comments (#5458)
  + fix: Add get_connection_with_tls_context() for requests 2.32.2+ (#5435)
  [eaglegai]
  + fix(net): klibc ipconfig PROTO compatibility (#5437)
  [Alexsander de Souza] (LP: #2065787)
  + Support metalink in yum repository config (#5444) [Ani Sinha]
  + tests: hard-code curtin-dev ppa instead of canonical-kernel-team (#5450)
  + ci: PR update checklist GH- anchors to align w/ later template (#5449)
  + test: update validate error message in test_networking (#5436)
  + ci: Add PR checklist (#5446)
  + chore: fix W0105 in t/u/s/h/test_netlink.py (#5409)
  + chore(pyproject.toml): migrate to booleans (#5409)
  + typing: add check_untyped_defs (#5409)
  + fix(openstack): Append interface / scope_id for IPv6 link-local metadata
  address (#5419) [Christian Rohmann]
  + test: Update validation error in test_cli.py test (#5430)
  + test: Update schema validation error in integration test (#5429)
  + test: bump pycloudlib to get azure oracular images (#5428)
  + fix(azure): fix discrepancy for monotonic() vs time() (#5420)
  [Chris Patterson]
  + fix(pytest): Fix broken pytest gdb flag (#5415)
  + fix: Use monotonic time (#5423)
  + docs: Remove mention of resolv.conf (#5424)
  + perf(netplan): Improve network v1 -&gt; network v2 performance (#5391)
  + perf(set_passwords): Run module in Network stage (#5395)
  + fix(test): Remove temporary directory side effect (#5416)
  + Improve schema validator warning messages (#5404) [Ani Sinha]
  + feat(sysconfig): Add DNS from interface config to resolv.conf (#5401)
  [Ani Sinha]
  + typing: add no_implicit_optional lint (#5408)
  + doc: update examples to reflect alternative ways to provide `sudo`
  option (#5418) [Ani Sinha]
  + fix(jsonschema): Add missing sudo definition (#5418)
  + chore(doc): migrate cc modules i through r to templates (#5313)
  + chore(doc): migrate grub_dpkg to tmpl add changed/deprecation (#5313)
  + chore(json): migrate cc_apt_configure and json schema indents (#5313)
  + chore(doc): migrate ca_certs/chef to template, flatten schema (#5313)
  + chore(doc): migrate cc_byobu to templates (#5313)
  + chore(doc): migrate cc_bootcmd to templates (#5313)
  + fix(apt): Enable calling apt update multiple times (#5230)
  + chore(VMware): Modify section of instance-id in the customization config
  (#5356) [PengpengSun]
  + fix(treewide): Remove dead code (#5332) [Shreenidhi Shedi]
  + doc: network-config v2 ethernets are of type object (#5381) [Malte Poll]
  + Release 24.1.7 (#5375)
  + fix(azure): url_helper: specify User-Agent when using headers_cb with
  readurl() (#5298) [Ksenija Stanojevic]
  + fix: Stop attempting to resize ZFS in cc_growpart on Linux (#5370)
  + doc: update docs adding YAML 1.1 spec and jinja template references
  + fix(final_message): do not warn on datasourcenone when single ds
  + fix(growpart): correct growpart log message to include value of mode
  + feat(hotplug): disable hotplugd.socket (#5058)
  + feat(hotlug): trigger hotplug after cloud-init.service (#5058)
  + test: add function to push and enable systemd units (#5058)
  + test(util): fix wait_until_cloud_init exit code 2 (#5058)
  + test(hotplug): fix race getting ipv6 (#5271)
  + docs: Adjust CSS to increase font weight across the docs (#5363) [Sally]
  + fix(ec2): Correctly identify netplan renderer (#5361)
  + tests: fix expect logging from growpart on devent with partition (#5360)
  + test: Add v2 test coverage to test_net.py (#5247)
  + refactor: Simplify collect_logs() in logs.py (#5268)
  + fix: Ensure no subp from logs.py import (#5268)
  + tests: fix integration tests for ubuntu pro 32.3 release (#5351)
  + tests: add oracular's hello package for pkg upgrade test (#5354)
  + growpart: Fix behaviour for ZFS datasets (#5169) [Mina Galić]
  + device_part_info: do not recurse if we did not match anything (#5169)
  [Mina Galić]
  + feat(alpine): add support for Busybox adduser/addgroup (#5176)
  [dermotbradley]
  + ci: Move lint tip and py3-dev jobs to daily (#5347)
  + fix(netplan): treat netplan warnings on stderr as debug for cloud-init
  (#5348)
  + feat(disk_setup): Add support for nvme devices (#5263)
  + fix(log): Do not warn when doing requested operation (#5263)
  + Support sudoers in the "/usr/usr merge" location (#5161)
  [Robert Schweikert]
  + doc(nocloud): Document network-config file (#5204)
  + fix(netplan): Fix predictable interface rename issue (#5339)
  + cleanup: Don't execute code on import (#5295)
  + fix(net): Make duplicate route add succeed. (#5343)
  + fix(freebsd): correct configuration of IPv6 routes (#5291) [Théo Bertin]
  + fix(azure): disable use-dns for secondary nics (#5314)
  + chore: fix lint failure (#5320)
  + Update pylint version to support python 3.12 (#5338) [Ani Sinha]
  + fix(tests): use regex to avoid focal whitespace in jinja debug test
  (#5335)
  + chore: Add docstrings and types to Version class (#5262)
  + ci(mypy): add type-jinja2 stubs (#5337)
  + tests(alpine): github trust lxc mounted source dir cloud-init-ro (#5329)
  + test: Add oracular release to integration tests (#5328)
  + Release 24.1.6 (#5326)
  + test: Fix failing test_ec2.py test (#5324)
  + fix: Check renderer for netplan-specific code (#5321)
  + docs: Removal of top-level --file breaking change (#5308)
  + fix: typo correction of delaycompress (#5317)
  + docs: Renderers/Activators have downstream overrides (#5322)
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix(lxd): Properly handle unicode from LXD socket (#5309)
  + docs: Prefer "artifact" over "artefact" (#5311) [Arthur Le Maitre]
  + chore(doc): migrate cc_byobu to templates
  + chore(doc): migrate cc_bootcmd to templates
  + chore(doc): migrate apt_pipelining and apk_configure to templates
  + tests: in_place mount module-docs into lxd vm/container
  + feat(docs): generate rtd module schema from rtd/module-docs
  + feat: Set RH ssh key permissions when no 'ssh_keys' group (#5296)
  [Ani Sinha]
  + test: Avoid circular import in Azure tests (#5280)
  + test: Fix test_failing_userdata_modules_exit_codes (#5279)
  + chore: Remove CPY check from ruff (#5281)
  + chore: Clean up docstrings
  + chore(ruff): Bump to version 0.4.3
  + feat(systemd): Improve AlmaLinux OS and CloudLinux OS support (#5265)
  [Elkhan Mammadli]
  + feat(ca_certs): Add AlmaLinux OS and CloudLinux OS support (#5264)
  [Elkhan Mammadli]
  + docs: cc_apt_pipelining docstring typo fix (#5273) [Alex Ratner]
  + feat(azure): add request identifier to IMDS requests (#5218)
  [Ksenija Stanojevic]
  + test: Fix TestFTP integration test (#5237) [d1r3ct0r]
  + feat(ifconfig): prepare for CIDR output (#5272) [Mina Galić]
  + fix: stop manually dropping dhcp6 key in integration test (#5267)
  [Alec Warren]
  + test: Remove some CiTestCase tests (#5256)
  + fix: Warn when signal is handled (#5186)
  + fix(snapd): ubuntu do not snap refresh when snap absent (LP: #2064300)
  + feat(landscape-client): handle already registered client (#4784)
  [Fabian Lichtenegger-Lukas]
  + doc: Show how to debug external services blocking cloud-init (#5255)
  + fix(pdb): Enable running cloud-init under pdb (#5217)
  + chore: Update systemd description (#5250)
  + fix(time): Harden cloud-init to system clock changes
  + fix: Update analyze timestamp uptime
  + fix(schema): no network validation on netplan systems without API
  + fix(mount): Don't run cloud-init.service if cloud-init disabled (#5226)
  + fix(ntp): Fix AlmaLinux OS and CloudLinux OS support (#5235)
  [Elkhan Mammadli]
  + tests: force version of cloud-init from PPA regardless of version (#5251)
  + ci: Print isort diff (#5242)
  + test: Fix integration test dependencies (#5248)
  + fix(ec2): Fix broken uuid match with other-endianness (#5236)
  + fix(schema): allow networkv2 schema without top-level key (#5239)
  [Cat Red]
  + fix(cmd): Do not hardcode reboot command (#5208)
  + test: Run Alpine tests without network (#5220)
  + docs: Add base config reference from explanation (#5241)
  + docs: Remove preview from WSL tutorial (#5225)
  + chore: Remove broken maas code (#5219)
  + feat(WSL): Add support for Ubuntu Pro configs (#5116) [Ash]
  + chore: sync ChangeLog and version.py from 24.1.x (#5228)
  + bug(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  + ci: Skip package build on tox runs (#5210)
  + chore: Fix test skip message
  + test(ec2): adopt pycloudlib public ip creation while launching instances
  + test(ec2): add ipv6 testing for multi-nic instances
  + test(ec2): adopt pycloudlib enable_ipv6 while launching instances
  + feat: tool to print diff between netplan and networkv2 schema (#5200)
  [Cat Red]
  + test: mock internet access in test_upgrade (#5212)
  + ci: Add timezone for alpine unit tests (#5216)
  + fix: Ensure dump timestamps parsed as UTC (#5214)
  + docs: Add WSL tutorial (#5206)
  + feature(schema): add networkv2 schema (#4892) [Cat Red]
  + Add alpine unittests to ci (#5121)
  + test: Fix invalid openstack datasource name (#4905)
  + test: Fix MAAS test and mark xfail (#4905)
  + chore(ds-identify): Update shellcheck ignores (#4905)
  + fix(ds-identify): Prevent various false positives and false negatives
  (#4905)
  + Use grep for faster parsing of cloud config in ds-identify (#4905)
  [Scott Moser] (LP: #2030729)
  + tests: validate netplan API YAML instead of strict content (#5195)
  + chore(templates): update ubuntu universe wording (#5199)
  + Deprecate the users ssh-authorized-keys property (#5162)
  [Anders Björklund]
  + doc(nocloud): Describe ftp and ftp over tls implementation (#5193)
  + feat(net): provide network config to netplan.State for render (#4981)
  + docs: Add breaking datasource identification changes (#5171)
  + fix(openbsd): Update build-on-openbsd python dependencies (#5172)
  [Hyacinthe Cartiaux]
  + fix: Add subnet ipv4/ipv6  to network schema (#5191)
  + docs: Add deprecated system_info to schema (#5168)
  + docs: Add DataSourceNone documentation (#5165)
  + test: Skip test if console log is None (#5188)
  + fix(dhcp): Enable interactively running cloud-init init --local (#5166)
  + test: Update message for netplan apply dbus issue
  + test: install software-properties-common if absent during PPA setup
  + test: bump pycloudlib to use latest version
  + test: Update version of hello package installed on noble
  + test: universally ignore netplan apply dbus issue (#5178)
  + chore: Remove obsolete nose workaround
  + feat: Add support for FTP and FTP over TLS (#4834)
  + feat(opennebula): Add support for posix shell
  + test: Make analyze tests not depend on GNU date
  + test: Eliminate bash dependency from subp tests
  + docs: Add breaking changes section to reference docs (#5147) [Cat Red]
  + util: add log_level kwarg for logexc() (#5125) [Chris Patterson]
  + refactor: Make device info part of distro definition (#5067)
  + refactor: Distro-specific growpart code (#5067)
  + test(ec2): fix mocking with responses==0.9.0 (focal) (#5163)
  + chore(safeyaml): Remove unicode helper for Python2 (#5142)
  + Revert "test: fix upgrade dhcp6 on ec2 (#5131)" (#5148)
  + refactor(net): Reuse netops code
  + refactor(iproute2): Make expressions multi-line for legibility
  + feat(freebsd): support freebsd find part by gptid and ufsid (#5122)
  [jinkangkang]
  + feat: Determining route metric based on NIC name (#5070) [qidong.ld]
  + test: Enable profiling in integration tests (#5130)
  + dhcp: support configuring static routes for dhclient's unknown-121
  option (#5146) [Chris Patterson]
  + feat(azure): parse ProvisionGuestProxyAgent as bool (#5126)
  [Ksenija Stanojevic]
  + fix(url_helper): fix TCP connection leak on readurl() retries (#5144)
  [Chris Patterson]
  + test: pytest-ify t/u/sources/test_ec2.py
  + Revert "ec2: Do not enable dhcp6 on EC2 (#5104)" (#5145) [Major Hayden]
  + fix: Logging sensitive data
  + test: Mock ds-identify systemd path (#5119)
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + test: fix upgrade dhcp6 on ec2 (#5131)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + ci: fix linkcheck.yml invalid yaml (#5123)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + ec2: Do not enable dhcp6 on EC2 (#5104) [Major Hayden]
  + fix: Fall back to cached local ds if no valid ds found (#4997)
  [PengpengSun]
  + ci: Make linkcheck a scheduled job (#5118)
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + Release 24.1.3
  + chore: Handle all level 1 TiCS security violations (#5103)
  + fix: Always use single datasource if specified (#5098)
  + fix(tests): Leaked mocks (#5097)
  + fix(rhel)!: Fix network boot order in upstream cloud-init
  + fix(rhel): Fix network ordering in sysconfig
  + feat: Use NetworkManager renderer by default in RHEL family
  + fix: Allow caret at the end of apt package (#5099)
  + test: Add missing mocks to prevent bleed through (#5082)
  [Robert Schweikert]
  + fix: Ensure network config in DataSourceOracle can be unpickled (#5073)
  + docs: set the home directory using homedir, not home (#5101)
  [Olivier Gayot] (LP: #2047796)
  + fix(cacerts): Correct configuration customizations for Photon (#5077)
  [Christopher McCann]
  + fix(test): Mock systemd fs path for non-systemd distros
  + fix(tests): Leaked subp.which mock
  + fix(networkd): add GatewayOnLink flag when necessary (#4996) [王煎饼]
  + Release 24.1.2
  + test: fix `disable_sysfs_net` mock (#5065)
  + refactor: don't import subp function directly (#5065)
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  + ds-identify: Improve ds-identify testing flexibility (#5047)
  + fix(ansible): Add verify_commit and inventory to ansible.pull schema
  (#5032) [Fionn Fitzmaurice]
  + doc: Explain breaking change in status code (#5049)
  + gpg: Handle temp directory containing files (#5063)
  + distro(freebsd): add_user: respect homedir (#5061) [Mina Galić]
  + doc: Install required dependencies (#5054)
  + networkd: Always respect accept-ra if set (#4928) [Phil Sphicas]
  + chore: ignore all cloud-init_*.tar.gz in .gitignore (#5059)
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + feat: Add new distro 'azurelinux' for Microsoft Azure Linux. (#4931)
  [Dan Streetman]
  + fix(gpg): Make gpg resilient to host configuration changes (#5026)
  + Sync 24.1.1 changelog and version
  + DS VMware: Fix ipv6 addr converter from netinfo to netifaces (#5029)
  [PengpengSun]
  + packages/debian: remove dependency on isc-dhcp-client (#5041)
  [Chris Patterson]
  + test: Allow fake_filesystem to work with TemporaryDirectory (#5035)
  + tests: Don't wait for GCE instance teardown (#5037)
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle
  (#5021) (LP: #2056439)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix(atomic_helper.py): ensure presence of parent directories (#4938)
  [Shreenidhi Shedi]
  + fix: Add "broadcast" to network v1 schema (#5034) (LP: #2056460)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022) [Chris Patterson]
  + fix: Make wait_for_url respect explicit arguments
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues
  (#5025) (LP: #2056194)
  + chore(cmd-modules): fix exit code when --mode init (#5017)
  + feat: pylint: enable W0201 - attribute-defined-outside-init
  + refactor: Ensure no attributes defined outside __init__
  + chore: disable attribute-defined-outside-init check in tests
  + refactor: Use _unpickle rather than hasattr() in sources
  + chore: remove unused vendordata "_pure" variables
  + chore(cmd-modules): deprecate --mode init (#5005)
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: log correct disabled path in ds-identify (#5016)
  + tests: ec2 dont spend &gt; 1 second retrying 19 times when 3 times will do
  + tests: openstack mock expected ipv6 IMDS
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  (LP: #2055077)
  + feat(run-container): Run from arbitrary commitish (#5015)
  + tests: Fix wsl test (#5008)
  + feat(ds-identify): Don't run unnecessary systemd-detect-virt (#4633)
  + chore(ephemeral): add debug log when bringing up ephemeral network
  (#5010) [Alec Warren]
  + release: sync changelog and version (#5011)
  + Cleanup test_net.py (#4840)
  + refactor: remove dependency on netifaces (#4634) [Cat Red]
  + feat: make lxc binary configurable (#5000)
  + docs: update 404 page for new doc site and bug link
  + test(aws): local network connectivity on multi-nics (#4982)
  + test: Make integration test output more useful (#4984)
  From 24.1.7
  + fix(ec2): Correctly identify netplan renderer (#5361)
  From 24.1.6
  + fix(ec2): Ensure metadata exists before configuring PBR (#5287)
  + fix: Check renderer for netplan-specific code (#5321)
  + test: Fix failing test_ec2.py test (#5324)
  From 24.1.5
  + fix(package_update): avoid snap refresh in images without snap command
  (LP: #2064132)
  From 24.1.4
  + fix(dhcpcd): Make lease parsing more robust (#5129)
  + net/dhcp: raise InvalidDHCPLeaseFileError on error parsing dhcpcd lease
  + (#5128) [Chris Patterson]
  + fix: Fix runtime file locations for cloud-init (#4820)
  + net/dhcp: bump dhcpcd timeout to 300s (#5127) [Chris Patterson]
  + net: Warn when interface rename fails
  + ephemeral(dhcpcd): Set dhcpcd interface down
  + test: Remove side effects from tests (#5074)
  + refactor: Import log module rather than functions (#5074)
  From 24.1.3
  + fix: Always use single datasource if specified (#5098)
  + fix: Allow caret at the end of apt package (#5099)
  From 24.1.2
  + test: Don't assume ordering of ThreadPoolExecutor submissions (#5052)
  + refactor(ec2): simplify convert_ec2_metadata_network_config
  + tests: drop CiTestCase and convert to pytest
  + bug(tests): mock reads of host's /sys/class/net via get_sys_class_path
  + fix: Fix breaking changes in package install (#5069)
  + fix: Undeprecate 'network' in schema route definition (#5072)
  + fix(ec2): fix ipv6 policy routing
  + fix: document and add 'accept-ra' to network schema (#5060)
  + bug(maas): register the correct DatasourceMAASLocal in init-local
  (#5068) (LP: #2057763)
  From 24.1.1
  + fix: Include DataSourceCloudStack attribute in unpickle test (#5039)
  + bug(vmware): initialize new DataSourceVMware attributes at unpickle (#5021)
  + fix(apt): Don't warn on apt 822 source format (#5028)
  + fix: Add "broadcast" to network v1 schema (#5034)
  + pro: honor but warn on custom ubuntu_advantage in /etc/cloud/cloud.cfg
  (#5030)
  + net/dhcp: handle timeouts for dhcpcd (#5022)
  + fix: Make wait_for_url respect explicit arguments
  + bug(wait_for_url): when exceptions occur url is unset, use url_exc
  + test: Fix scaleway retry assumptions
  + fix: Make DataSourceOracle more resilient to early network issues (#5025)
  + tests: Fix wsl test (#5008)
  From 24.1
  + fix: Don't warn on vendor directory (#4986)
  + apt: kill spawned keyboxd after gpg cmd interaction
  + tests: upgrade tests should only validate current boot log
  + net/dhcp: fix maybe_perform_dhcp_discovery check for interface=None
  [Chris Patterson]
  + doc(network-v2): fix section nesting levels
  + fix(tests): don't check for clean log on minimal image (#4965) [Cat Red]
  + fix(cc_resize): Don't warn if zpool command not found (#4969)
  (LP: #2055219)
  + feat(subp): Make invalid command warning more user-friendly (#4972)
  + docs: Remove statement about device path matching (#4966)
  + test: Fix xfail to check the dhcp client name (#4971)
  + tests: avoid console prompts when removing gpg on Noble
  + test: fix test_get_status_systemd_failure
  + fix: Remove hardcoded /var/lib/cloud hotplug path (#4940)
  + refactor: Refactor status.py (#4864)
  + test: Use correct lxd network-config keys (#4950)
  + test: limit temp dhcp6 changes to &lt; NOBLE (#4942)
  + test: allow downgrades when install debs (#4941)
  + tests: on noble, expect default /etc/apt/sources.list
  + tests: lxd_vm early boot status test ordered After=systemd-remount-fs
  (#4936)
  + tests: pro integration tests supply ubuntu_advantage until pro v32
  (#4935)
  + feat(hotplug): add cmd to enable hotplug (#4821)
  + test: fix test_combined_cloud_config_json (#4925)
  + test: xfail udhcpc on azure (#4924)
  + feat: Implement the WSL datasource (#4786) [Carlos Nihelton]
  + refactor(openrc):  Improve the OpenRC files (#4916) [dermotbradley]
  + tests: use apt install instead of dpkg -i to install pkg deps
  + tests: inactive module rename ubuntu_advantage to ubuntu_pro
  + test: fix tmpdir in test_cc_apk_configure (#4914)
  + test: fix jsonschema version checking in pro test (#4915)
  + feat(dhcp): Make dhcpcd the default dhcp client (#4912)
  + feat(Alpine) cc_growpart.py: fix handling of /dev/mapper devices (#4876)
  [dermotbradley]
  + test: Retry longer in test_status.py integration test (#4910)
  + test: fix kernel override test (#4913)
  + chore: Rename sysvinit/gentoo directory to sysvinit/openrc (#4906)
  [dermotbradley]
  + doc: update ubuntu_advantage references to pro
  + chore: rename cc_ubuntu_advantage to cc_ubuntu_pro (SC-1555)
  + feat(ubuntu pro): deprecate ubuntu_pro key in favor of ubuntu_advantage
  + feat(schema): support ubuntu_pro key and deprecate ubuntu_advantage
  + test: fix verify_clean_log (#4903)
  + test: limit test_no_hotplug_triggered_by_docker to stable releases
  + tests: generalize warning Open vSwitch warning from netplan apply (#4894)
  + fix(hotplug): remove literal quotes in args
  + feat(apt): skip known /etc/apt/sources.list content
  + feat(apt): use APT deb822 source format by default
  + test(ubuntu-pro): change livepatch to esm-infra
  + doc(ec2): fix metadata urls (#4880)
  + fix: unpin jsonschema and update tests (#4882)
  + distro: add eject FreeBSD code path (#4838) [Mina Galić]
  + feat(ec2): add hotplug as a default network update event (#4799)
  + feat(ec2): support instances with repeated device-number (#4799)
  + feat(cc_install_hotplug): trigger hook on known ec2 drivers (#4799)
  + feat(ec2): support multi NIC/IP setups (#4799)
  + feat(hotplug): hook-hotplug is now POSIX shell add OpenRC init script
  [dermotbradley]
  + test: harden test_dhcp.py::test_noble_and_newer_force_client
  + test: fix test_combined_cloud_config_json (#4868)
  + feat(apport): Disable hook when disabled (#4874)
  + chore: Add pyright ignore comments (#4874)
  + bug(apport): Fix invalid typing (#4874)
  + refactor: Move general apport hook to main branch (#4874)
  + feat(bootspeed)!: cloud-config.service drop After=snapd.seeded
  + chore: update CI package build to oldest supported Ubuntu release focal
  (#4871)
  + test: fix test_cli.test_valid_userdata
  + feat: handle error when log file is empty (#4859) [Hasan]
  + test: fix test_ec2_ipv6
  + fix: Address TIOBE abstract interpretation issues (#4866)
  + feat(dhcp): Make udhcpc use same client id (#4830)
  + feat(dhcp): Support InfiniBand with dhcpcd (#4830)
  + feat(azure): Add ProvisionGuestProxyAgent OVF setting (#4860)
  [Ksenija Stanojevic]
  + test: Bring back dhcp6 integration test changes (#4855)
  + tests: add status --wait blocking test from early boot
  + tests: fix retry decorator to return the func value
  + docs: add create_hostname_file to all hostname user-data examples
  (#4727) [Cat Red]
  + fix: Fix typos (#4850) [Viktor Szépe]
  + feat(dhcpcd): Read dhcp option 245 for azure wireserver (#4835)
  + tests(dhcp): Add udhcpc client to test matrix (#4839)
  + fix: Add types to network v1 schema (#4841)
  + docs(vmware): fixed indentation on example userdata yaml (#4854)
  [Alec Warren]
  + tests: Remove invalid keyword from method call
  + fix: Handle systemctl when dbus not ready (#4842) (LP: #2046483)
  + fix(schema cli): avoid netplan validation on net-config version 1
  + tests: reduce expected reports due to dropped rightscale module
  + tests(net-config): add awareness of netplan on stable Ubuntu
  [Gilbert Gilb's]
  + feat: fall back to cdrom_id eject if eject is not available (#4769)
  [Cat Red]
  + fix(packages/bddeb): restrict debhelper-compat to 12 in focal (#4831)
  + tests: Add kernel commandline test (#4833)
  + fix: Ensure NetworkManager renderer works without gateway (#4829)
  + test: Correct log parsing in schema test (#4832)
  + refactor: Remove cc_rightscale_userdata (#4813)
  + refactor: Replace load_file with load_binary_file to simplify typing
  (#4823)
  + refactor: Add load_text_file function to simplify typing (#4823)
  + refactor: Change variable name for consistent typing (#4823)
  + feat(dhcp): Add support for dhcpcd (#4746)
  + refactor: Remove unused networking code (#4810)
  + test: Add more DNS net tests
  + BREAKING CHANGE: Stop adding network v2 DNS to global DNS
  + doc: update DataSource.default_update_events doc (#4815)
  + chore: do not modify instance attribute (#4815)
  + test: fix mocking leaks (#4815)
  + Revert "ci: Pin pytest&lt;8.0.0. (#4816)" (#4815)
  + test: Update tests for passlib (#4818)
  + fix(net-schema): no warn when skipping schema check on non-netplan
  + feat(SUSE): reboot marker file is written as /run/reboot-needed (#4788)
  [Robert Schweikert]
  + test: Cleanup unwanted logger setup calls (#4817)
  + refactor(cloudinit.util): Modernize error handling, add better warnings
  (#4812)
  + ci: Pin pytest&lt;8.0.0. (#4816)
  + fix(tests): fixing KeyError on integrations tests (#4811) [Cat Red]
  + tests: integration for network schema on netplan systems (#4767)
  + feat(schema): use netplan API to validate network-config (#4767)
  + chore: define CLOUDINIT_NETPLAN_FILE static var (#4767)
  + fix: cli schema config-file option report network-config type (#4767)
  + refactor(azure): replace BrokenAzureDataSource with reportable errors
  (#4807) [Chris Patterson]
  + Fix Alpine and Mariner /etc/hosts templates (#4780) [dermotbradley]
  + tests: revert #4792 as noble images no longer return 2 (#4809) [Cat Red]
  + tests: use client fixture instead of class_client in cleantest (#4806)
  + tests: enable ds-idenitfy xfail test LXD-kvm-not-MAAS-1 (#4808)
  + fix(tests): failing integration tests due to missing ua token (#4802)
  [Cat Red]
  + Revert "Use grep for faster parsing of cloud config in ds-identify
  (#4327)"
  + tests: Demonstrate ds-identify yaml parsing broken
  + tests: add exit 2 on noble from cloud-init status (#4792)
  + fix: linkcheck for ci to ignore scaleway anchor URL (#4793)
  + feat: Update cacerts to support VMware Photon (#4763)
  [Christopher McCann]
  + fix: netplan rendering integrations tests (#4795) [Cat Red]
  + azure: remove cloud-init.log reporting via KVP (#4715) [Chris Patterson]
  + feat(Alpine): Modify ds-identify for Alpine support and add OpenRC
  init.d script (#4785) [dermotbradley]
  + doc: Add DatasourceScaleway documentation (#4773) [Louis Bouchard]
  + fix: packaged logrotate file lacks suffix on ubuntu (#4790)
  + feat(logrotate): config flexibility more backups (#4790)
  + fix(clean): stop warning when running clean command (#4761) [d1r3ct0r]
  + feat: network schema v1 strict on nic name length 15 (#4774)
  + logrotate config (#4721) [Fabian Lichtenegger-Lukas]
  + test: Enable coverage in integration tests (#4682)
  + test: Move unit test helpers to global test helpers (#4682)
  + test: Remove snapshot option from install_new_cloud_init (#4682)
  + docs: fix cloud-init single param docs (#4682)
  + Alpine: fix location of dhclient leases file (#4782) [dermotbradley]
  + test(jsonschema): Pin jsonschema version (#4781)
  + refactor(IscDhclient): discover DHCP leases at distro-provided location
  (#4683) [Phsm Qwerty]
  + feat: datasource check for WSL (#4730) [Carlos Nihelton]
  + test: Update hostname integration tests (#4744)
  + test: Add mantic and noble releases to integration tests (#4744)
  + refactor: Ensure internal DNS state same for v1 and v2 (#4756)
  + feat: Add v2 route mtu rendering to NetworkManager (#4748)
  + tests: stable ubuntu releases will not exit 2 on warnings (#4757)
  + doc(ds-identify): Describe ds-identify irrespective of distro (#4742)
  + fix: relax NetworkManager renderer rules (#4745)
  + fix: fix growpart race (#4618)
  + feat: apply global DNS to interfaces in network-manager  (#4723)
  [Florian Apolloner]
  + feat(apt): remove /etc/apt/sources.list when deb22 preferred (#4740)
  + chore: refactor schema data as enums and namedtuples (#4585)
  + feat(schema): improve CLI message on unprocessed data files (#4585)
  + fix(config): relocate /run to /var/run on BSD (canonical#4677)
  [Mina Galić]
  + fix(ds-identify): relocate /run on *BSD (#4677) [Mina Galić]
  + fix(sysvinit): make code a bit more consistent (#4677) [Mina Galić]
  + doc: Document how cloud-init is, not how it was (#4737)
  + tests: add expected exit 2 on noble from cloud-init status (#4738)
  + test(linkcheck): ignore github md and rst link headers (#4734)
  + test: Update webhook test due to removed cc_migrator module (#4726)
  + fix(ds-identify): Return code 2 is a valid result, use cached value
  + fix(cloudstack): Use parsed lease file for virtual router in cloudstack
  + fix(dhcp): Guard against FileNotFoundError and NameError exceptions
  + fix(apt_configure): disable sources.list if rendering deb822 (#4699)
  (LP: #2045086)
  + docs: Add link to contributing to docs (#4725) [Cat Red]
  + chore: remove commented code (#4722)
  + chore: Add log message when create_hostname_file key is false (#4724)
  [Cat Red]
  + fix: Correct v2 NetworkManager route rendering (#4637)
  + azure/imds: log http failures as warnings instead of info (#4714)
  [Chris Patterson]
  + fix(setup): Relocate libexec on OpenBSD (#4708) [Mina Galić]
  + feat(jinja): better jinja feedback and error catching (#4629)
  [Alec Warren]
  + test: Fix silent swallowing of unexpected subp error (#4702)
  + fix: Move cloud-final.service after time-sync.target (#4610)
  [Dave Jones] (LP: #1951639)
  + feat(log): Make logger name more useful for __init__.py
  + chore: Remove cc_migrator module (#4690)
  + fix(tests): make cmd/devel/tests work on non-GNU [Mina Galić]
  + chore: Remove cmdline from spelling list (#4670)
  + doc: Document boot status meaning (#4670)
  + doc: Set expectations for new datasources (#4670)
  + ci: Show linkcheck broken links in job output (#4670)
  + dmi: Add support for OpenBSD (#4654) [Mina Galić]
  + ds-identify: fake dmidecode support on OpenBSD (#4654) [Mina Galić]
  + ds-identify: add OpenBSD support in uname (#4654) [Mina Galić]
  + refactor: Ensure '_cfg' in Init class is dict (#4674)
  + refactor: Make event scope required in stages.py (#4674)
  + refactor: Remove unused argument (#4674)
  + chore: Move from lintian to a sphinx spelling plugin (#3639)
  + fix(doc): Fix spelling errors found by sphinxcontrib-spelling (#3639)
  + ci: Add Python 3.13 (#4567)
  + Add AlexSv04047 to CLA signers file (#4671) [AlexSv04047]
  + fix(openbsd): services &amp; build tool (#4660) [CodeBleu]
  + tests/unittests: add a new unit test for network manager net activator
  (#4672) [Ani Sinha]
  + Implement DataSourceCloudStack.get_hostname() (#4433) [Phsm Qwerty]
  + net/nm: check for presence of ifcfg files when nm connection files
  are absent (#4645) [Ani Sinha]
  + doc: Overhaul debugging documentation (#4578)
  + doc: Move dangerous commands to dev docs (#4578)
  + doc: Relocate file location docs (#4578)
  + doc: Remove the debugging page (#4578)
  + fix(util): Fix boottime to work on OpenBSD (#4667) [Mina Galić]
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  [Ani Sinha]
  + net/network_manager: do not set "may-fail" to False for both ipv4 and
  ipv6 dhcp [Ani Sinha]
  + feat(subp): Measure subprocess command time (#4606)
  + fix(python3.13): Fix import error for passlib on Python 3.13 (#4669)
  + style(brpm/bddeb): add black and ruff for packages build scripts (#4666)
  + copr: remove TODO.rst from spec file
  + fix(packages/brpm): correct syntax error and typo
  + style(ruff): fix tip target
  + config: Module documentation updates (#4599)
  + refactor(subp): Remove redundant parameter 'env' (#4555)
  + refactor(subp): Remove unused parameter 'target' (#4555)
  + refactor: Remove 'target' boilerplate from cc_apt_configure (#4555)
  + refactor(subp): Re-add return type to subp() (#4555)
  + refactor(subp): Add type information to args (#4555)
  + refactor(subp): Use subprocess.DEVNULL (#4555)
  + refactor(subp): Remove parameter 'combine_capture' (#4555)
  + refactor(subp): Remove unused parameter 'status_cb' (#4555)
  + fix(cli): fix parsing of argparse subcommands (#4559)
  [Calvin Mwadime] (LP: #2040325)
  + chore!: drop support for dsa ssh hostkeys in docs and schema (#4456)
  + chore!: do not generate ssh dsa host keys (#4456) [shixuantong]
  From 23.4.4
  + fix(nocloud): smbios datasource definition
  + tests: Check that smbios seed works
  + fix(source): fix argument boundaries when parsing cmdline (#4825)
  From 23.4.3
  + fix: Handle systemctl when dbus not ready (#4842)
  (LP: #2046483)
  From 23.4.2
  + fix: Handle invalid user configuration gracefully (#4797)
  (LP: #2051147)
  From 23.4.1
  + fix: Handle systemctl commands when dbus not ready (#4681)
  From 23.4
  + tests: datasourcenone use client.restart to block until done (#4635)
  + tests: increase number of retries across reboot to 90 (#4651)
  + fix: Add schema for merge types (#4648)
  + feat: Allow aliyun ds to fetch data in init-local (#4590) [qidong.ld]
  + azure: report failure to eject as error instead of debug (#4643)
  [Chris Patterson]
  + bug(schema): write network-config if instance dir present (#4635)
  + test: fix schema fuzzing test (#4639)
  + Update build-on-openbsd dependencies (#4644) [CodeBleu]
  + fix(test): Fix expected log for ipv6-only ephemeral network (#4641)
  + refactor: Remove metaclass from network_state.py (#4638)
  + schema: non-root fallback to default paths on perm errors (# 4631)
  + fix: Don't loosen the permissions of the log file (#4628)
  + Revert "logging: keep current file mode of log file if its stricter
  than the new mode (#4250)"
  + ephemeral: Handle link up failure for both ipv4 and ipv6  (#4547)
  + fix(main): Don't call logging too early (#4595)
  + fix: Remove Ubuntu-specific kernel naming convention assertion (#4617)
  + fix(log): Do not implement handleError with a self parameter (#4617)
  + fix(log): Don't try to reuse stderr logger (#4617)
  + feat: Standardize logging output to stderr (#4617)
  + chore: Sever unmaintained TODO.rst (#4625)
  + test: Skip failing tests
  + distros: Add suse
  + test: Add default hello package version (#4614)
  + fix(net): Improve DHCPv4 SUSE code, add test
  + net: Fix DHCPv4 not enabled on SUSE in some cases [bin456789]
  + fix(schema): Warn if missing dependency (#4616)
  + fix(cli): main source cloud_config for schema validation (#4562)
  + feat(schema): annotation path for invalid top-level keys (#4562)
  + feat(schema): top-level additionalProperties: false (#4562)
  + test: ensure top-level properties tests will pass (#4562)
  + fix(schema): Add missing schema definitions (#4562)
  + test: Fix snap tests (#4562)
  + azure: Check for stale pps data from IMDS (#4596) [Ksenija Stanojevic]
  + test: Undo dhcp6 integration test changes (#4612)
  + azure: update diagnostic from warning level to debug [Chris Patterson]
  + azure/imds: remove limit for connection errors if route present (#4604)
  + [Chris Patterson]
  + [enhancement]: Add shellcheck to CI (#4488) [Aviral Singh]
  + chore: add conventional commits template (#4593)
  + Revert "net: allow dhcp6 configuration from
  generate_fallback_configuration()" (#4607)
  + azure: workaround to disable reporting IMDS failures on Azure Stack
  [Chris Patterson]
  + cc_apt_pipelining: Update docs, deprecate options (#4571)
  + test: add gh workflows on push to main, update status badges (#4597)
  + util: Remove function abs_join() (#4587)
  + url_helper: Remove unused function retry_on_url_exc() (#4587)
  + cc_resizefs: Add bcachefs resize support (#4594)
  + integration_tests: Support non-Ubuntu distros (#4586)
  + fix(cmdline): fix cmdline parsing with MAC containing cc:
  + azure/errors: include http code in reason for IMDS failure
  [Chris Patterson]
  + tests: cloud-init schema --system does not return exit code 2
  + github: allow pull request to specify desired rebase and merge
  + tests: fix integration test expectations of exit 2 on schema warning
  + tests: fix schema test expected cli output Valid schema &lt;type&gt;
  + fix(schema cli): check raw userdata when processed cloud-config empty
  + azure: report failure to host if ephemeral DHCP secondary NIC (#4558)
  [Chris Patterson]
  + man: Document cloud-init error codes (#4500)
  + Add support for cloud-init "degraded" state (#4500)
  + status.json: Don't override detail key with error condition (#4500)
  + status: Remove duplicated data (#4500)
  + refactor: Rename exported_errors in status.json (#4500)
  + test: Remove stale status.json value (#4500)
  + tools/render-template: Make yaml loading opt-in, fix setup.py (#4564)
  + Add summit digest/trip report to docs (#4561) [Sally]
  + doc: Fix incorrect statement about `cloud-init analyze`
  + azure/imds: ensure new errors are logged immediately when retrying
  (#4468) [Chris Patterson]
  + Clarify boothook docs (#4543)
  + boothook: allow stdout/stderr to emit to cloud-init-output.log
  + summit-notes: add 2023 notes for reference in mailinglist/discourse
  + fix: added mock to stop leaking journalctl that slows down unit test
  (#4556) [Alec Warren]
  + tests: maas test for DataSourceMAASLocal get_data
  + maas tests: avoid using CiTest case and prefer pytest.tmpdir fixture
  + MAAS: Add datasource to init-local timeframe
  + Ensure all tests passed and/or are skipped
  + Support QEMU in integration tests
  + fix(read-dependencies): handle version specifiers containing [~!]
  + test: unpin pytest
  + schema: network-config optional network key. route uses oneOf (#4482)
  + schema: add cloud_init_deepest_matches for best error message (#4482)
  + network: warn invalid cfg add /run/cloud-init/network-config  (#4482)
  + schema: add network-config support to schema subcommand (#4482)
  + Update version number and merge ChangeLog from 23.3.3 into main (#4553)
  + azure: check for primary interface when performing DHCP (#4465)
  [Chris Patterson]
  + Fix hypothesis failure
  + subp: add a log when skipping a file for execution for lack of exe
  permission (#4506) [Ani Sinha]
  + azure/imds: refactor max_connection_errors definition (#4467)
  [Chris Patterson]
  + chore: fix PR template rendering (#4526)
  + fix(cc_apt_configure): avoid unneeded call to apt-install (#4519)
  + comment difference between sysconfig and NetworkManager renderer (#4517)
  [Ani Sinha]
  + Set Debian's default locale to be c.UTF-8 (#4503) (LP: #2038945)
  + Convert test_debian.py to pytest (#4503)
  + doc: fix cloudstack link
  + doc: fix development/contributing.html references
  + doc: hide duplicated links
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen
  (#4281)" (#4511) (LP: #2039453)
  + Fix the missing mcopy argument [Vladimir Pouzanov]
  + tests: Add logging fix (#4499)
  + Update upgrade test to account for dhcp6
  + Remove logging of PPID path (#4502)
  + Make Python 3.12 CI test non-experimental (#4498)
  + ds-identify: exit 2 on disabled state from marker or cmdline (#4399)
  + cloud-init-generator: Various performance optimizations (#4399)
  + systemd: Standardize cloud-init systemd enablement (#4399)
  + benchmark: benchmark cloud-init-generator independent of ds-identify
  (#4399)
  + tests/integration_tests: add cloud-init disablement coverage (#4399)
  + doc: Describe disabling cloud-init using an environment variable (#4399)
  + fix: cloud-init status --wait broken with KERNEL_CMDLINE (#4399)
  + azure/imds: retry on 429 errors for reprovisiondata (#4470)
  [Chris Patterson]
  + cmd: Don't write json status files for non-boot stages (#4478)
  + ds-identify: Allow disable service and override environment (#4485)
  [Mina Galić]
  + Update DataSourceNWCS.py (#4496) [shell-skrimp]
  + Add r00ta to CLA signers file
  + Fix override of systemd_locale_conf in rhel [Jacopo Rota]
  + ci(linkcheck): minor fixes (#4495)
  + integration test fix for deb822 URI format (#4492)
  + test: use a mantic-compatible tz in t/i/m/test_combined.py (#4494)
  + ua: shift CLI command from ua to pro for all interactions
  + pro: avoid double-dash when enabling inviddual services on CLI
  + net: allow dhcp6 configuration from generate_fallback_configuration()
  (#4474) [Ani Sinha]
  + tests: apt re.search to match alternative ordering of installed pkgs
  + apt: doc apt_pkg performance improvement over subp apt-config dump
  + Tidy up contributing docs (#4469) [Sally]
  + [enhancement]: Automatically linkcheck in CI (#4479) [Aviral Singh]
  + Revert allowing pro service warnings (#4483)
  + Export warning logs to status.json (#4455)
  + Fix regression in package installation (#4466)
  + schema: cloud-init schema in early boot or in dev environ (#4448)
  + schema: annotation of nested dicts lists in schema marks (#4448)
  + feat(apport): collect ubuntu-pro logs if ubuntu-advantage.log present
  (#4443)
  + apt_configure: add deb822 support for default sources file (#4437)
  + net: remove the word "on instance boot" from cloud-init generated config
  (#4457) [Ani Sinha]
  + style: Make cloudinit.log functions use snake case (#4449)
  + Don't recommend using cloud-init as a library (#4459)
  + vmware: Fall back to vmtoolsd if vmware-rpctool errs (#4444)
  [Andrew Kutz]
  + azure: add option to enable/disable secondary ip config (#4432)
  + [Ksenija Stanojevic]
  + Allow installing snaps via package_update_upgrade_install module (#4202)
  + docs: Add cloud-init overview/introduction (#4440) [Sally]
  + apt: install software-properties-common when absent but needed (#4441)
  + sources/Azure: Ignore system volume information folder while scanning
  for files in the ntfs resource disk (#4446) [Anh Vo]
  + refactor: Remove unnecessary __main__.py file
  + style: Drop vi format comments
  + cloudinit.log: Use more appropriate exception (#4435)
  + cloudinit.log: Don't configure NullHandler (#4435)
  + commit 6bbbfbbb030831c72b5aa2bba9cb8492f19d56f4
  + cloudinit.log: Remove unnecessary module function and variables (#4435)
  + cloudinit.log: Remove unused getLogger wrapper (#4435)
  + cloudinit.log: Standardize use of cloudinit's logging module (#4435)
  + Remove unnecessary logging wrapper in Cloud class (#4435)
  + integration test: allow pro service warnings (#4447)
  + integration tests: fix mount indentation (#4445)
  + sources/Azure: fix for conflicting reports to platform (#4434)
  [Chris Patterson]
  + docs: link the cloud-config validation service (#4442)
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  + Install gnupg if gpg not found (#4431)
  + Add "phsm" as contributor (#4429) [Phsm Qwerty]
  + cc_ubuntu_advantage: do not rely on uaclient.messages module (#4397)
  [Grant Orndorff]
  + tools/ds-identify: match Azure datasource's ds_detect() behavior (#4430)
  [Chris Patterson]
  + Refactor test_apt_source_v1.py to use pytest (#4427)
  + sources: do not override datasource detection if None is in list (#4426)
  [Chris Patterson]
  + feat: check for create_hostname_file key before writing /etc/hostname
  (SC-1588) (#4330) [Cat Red]
  + Pytestify apt config test modules (#4424)
  + upstream gentoo patch (#4422)
  + Work around no instance ip (#4419)
  + Fix typing issues in subp module (#4401)
  + net: fix ipv6_dhcpv6_stateful/stateless/slaac configuration for rhel
  (#4395) [Ani Sinha]
  + Release 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: fix mount indentation (#4405)
  + Use grep for faster parsing of cloud config in ds-identify (#4327)
  [Scott Moser] (LP: #2030729)
  + doc: fix instructions on how to disable cloud-init from kernel command
  line (#4406) [Ani Sinha]
  + doc/vmware: Update contents relevant to disable_vmware_customization
  [PengpengSun]
  + Bring back flake8 for python 3.6 (#4394)
  + integration tests: Fix cgroup parsing (#4402)
  + summary: Update template parameter descriptions in docs [MJ Moshiri]
  + Log PPID for better debugging (#4398)
  + integration tests: don't clean when KEEP_* flags true (#4400)
  + clean: add a new option to clean generated config files [Ani Sinha]
  + pep-594: drop deprecated pipes module import
  From 23.3.3
  + Fix pip-managed ansible on pip &lt; 23.0.1 (#4403)
  From 23.3.2
  + Revert "ds-identify/CloudStack: $DS_MAYBE if vm running on vmware/xen"
  (#4281) (#4511) (LP: #2039453)
  From 23.3.1
  + apt: kill dirmngr/gpg-agent without gpgconf dependency (LP: #2034273)
  + integration tests: Fix cgroup parsing (#4402)</changelog>
  <changelog author="rjschwei@suse.com" date="1753185600">- Update to version 25.1.3 (bsc#1245401,bsc#1245403)
  + Forward port
  - cloud-init-no-openstack-guess.patch
  + docs: provide example3 for PAM and ssh_pwauth behavior (#27)
  + fix: Make hotplug socket writable only by root (#25) (CVE-2024-11584)
  + fix: Don't attempt to identify non-x86 OpenStack instances (LP: #2069607)
    (CVE-2024-6174)
  From 25.1.2
  + fix: ensure MAAS datasource retries on failure (#6167)</changelog>
  <changelog author="mmachova@suse.com" date="1759233600">- Drop unneeded test dependency on httpretty, fixed long ago
  * https://github.com/canonical/cloud-init/pull/1720</changelog>
  <changelog author="rjschwei@suse.com" date="1762862400">- Fix dependency replace -serial with -pyserial</changelog>
</package>
<package pkgid="103338f3d620bdc59a06bfaa3af1359d46664062733976224c221b8e0c1d17ecdceba59e1b6ef46669afb42172049d331c1203dcdbd833d169de37071b1f08e5" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.15" rel="160000.2.2"/>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
</package>
<package pkgid="795ad6def3e346f8ea67119b5fdef514dfffeceaa97c98c9b476a9be3754d0ad2019ce84bd6d35de11292a2f375cc3c2850c0de4c57ac7cf2c054bdb69f6bea5" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.16" rel="160000.1.1"/>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
  <changelog author="jgleissner@suse.com" date="1762948800">- Update to version 1.16
  + Fix query of default CLOUD_NETCONFIG_MANAGE (bsc#1253223
  + Fix variable names in the README</changelog>
</package>
<package pkgid="c6ab874d566195bc6e0ac487b63bb20e0f92169b73e5ef006aabd6e8557246a807f9a3ef9d903694a7fc4c79f86d5463d28c85788920c35c967216c30295e782" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.20" rel="160000.1.1"/>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
  <changelog author="jgleissner@suse.com" date="1762948800">- Update to version 1.16
  + Fix query of default CLOUD_NETCONFIG_MANAGE (bsc#1253223
  + Fix variable names in the README</changelog>
  <changelog author="jgleissner@suse.com" date="1771502400">- Update to version 1.17
  + Do not set broadcast address explicitly (bsc#1258406)</changelog>
  <changelog author="jgleissner@suse.com" date="1772107200">- Update to version 1.18
  +  Fix issue with link-local address routing (bsc#1258730)</changelog>
  <changelog author="jgleissner@suse.com" date="1772798400">- Update to version 1.19
  + Make sure IPADDR variable is stripped of netmask</changelog>
  <changelog author="jgleissner@suse.com" date="1773748800">- Update to version 1.20
  + Fix %suse_version use in spec file (jsc#PED-15774)</changelog>
</package>
<package pkgid="1156f3816aa18a5cdc84e0bce2488dce858d55e3a6f0a227cd35a6b19f0fe990dbe489227e4134f9cbb9e86e33affad1af2992fe6b83fc241cd354cddcbbe2aa" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.15" rel="160000.2.2"/>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
</package>
<package pkgid="549410b5ccc46a7c95a95196862fa7689469d4fde7c0da438ab9c63782cde0b7b256fea52aa915610fff2b90aed0c74d96c57629e52e36ddf8561a5c17d998b3" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.16" rel="160000.1.1"/>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
  <changelog author="jgleissner@suse.com" date="1762948800">- Update to version 1.16
  + Fix query of default CLOUD_NETCONFIG_MANAGE (bsc#1253223
  + Fix variable names in the README</changelog>
</package>
<package pkgid="f4deab79324a81616cf7a938f973408ee8f3674a43bd90b6d20d89b9d4f9a1fa84bf1e6c5923da159be86700e528e4dec0e6a7130b7817bcbf3a27d22e808084" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.20" rel="160000.1.1"/>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
  <changelog author="jgleissner@suse.com" date="1762948800">- Update to version 1.16
  + Fix query of default CLOUD_NETCONFIG_MANAGE (bsc#1253223
  + Fix variable names in the README</changelog>
  <changelog author="jgleissner@suse.com" date="1771502400">- Update to version 1.17
  + Do not set broadcast address explicitly (bsc#1258406)</changelog>
  <changelog author="jgleissner@suse.com" date="1772107200">- Update to version 1.18
  +  Fix issue with link-local address routing (bsc#1258730)</changelog>
  <changelog author="jgleissner@suse.com" date="1772798400">- Update to version 1.19
  + Make sure IPADDR variable is stripped of netmask</changelog>
  <changelog author="jgleissner@suse.com" date="1773748800">- Update to version 1.20
  + Fix %suse_version use in spec file (jsc#PED-15774)</changelog>
</package>
<package pkgid="9bc0a4530d401a09be66db951cdd05661c9e54d721bf14d351b5c1ec00546320b9d928864dc5d2556663f2f64fd4a9df723c8d3ce88f3487dde60f8bfff205b7" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.15" rel="160000.2.2"/>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
</package>
<package pkgid="605ebc3b5768302e616d4cf7d365850edc018e55afdbc56b2212958ea35341b4bdf1b12db1ba3484e18177c2f628743864749e2089a6cf249a9863bd71870498" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.16" rel="160000.1.1"/>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
  <changelog author="jgleissner@suse.com" date="1762948800">- Update to version 1.16
  + Fix query of default CLOUD_NETCONFIG_MANAGE (bsc#1253223
  + Fix variable names in the README</changelog>
</package>
<package pkgid="526cafdcffe06ffdad5a04bb7b0d50757327cb419bfb90de396dfc7db75d4108de0f3d2fa9d098bdef1c229f2258927deef01140447e0ff89144be633e9e6b56" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.20" rel="160000.1.1"/>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
  <changelog author="jgleissner@suse.com" date="1747396800">- Update to version 1.15
  + Add support for creating IPv6 default route in GCE (bsc#1240869)
  + Minor fix when looking up IPv6 default route</changelog>
  <changelog author="jgleissner@suse.com" date="1762948800">- Update to version 1.16
  + Fix query of default CLOUD_NETCONFIG_MANAGE (bsc#1253223
  + Fix variable names in the README</changelog>
  <changelog author="jgleissner@suse.com" date="1771502400">- Update to version 1.17
  + Do not set broadcast address explicitly (bsc#1258406)</changelog>
  <changelog author="jgleissner@suse.com" date="1772107200">- Update to version 1.18
  +  Fix issue with link-local address routing (bsc#1258730)</changelog>
  <changelog author="jgleissner@suse.com" date="1772798400">- Update to version 1.19
  + Make sure IPADDR variable is stripped of netmask</changelog>
  <changelog author="jgleissner@suse.com" date="1773748800">- Update to version 1.20
  + Fix %suse_version use in spec file (jsc#PED-15774)</changelog>
</package>
<package pkgid="e7736c4ca4b4b343b8469c9d4e697e51bd4cd4fbc33fa2a7ad9ca83558caad1109371658a5fe036e3991caeb7c831135e732244a82590877002cd555ff681a1b" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
</package>
<package pkgid="501b0e3d4ae421c848cdffa2bc6aac2f3e50b52f886fb79846e44049e2b977e7ae06cecb73dd1488eabf1ea448050584e41800f392f40a8e2f5d2f8f35133e67" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.5.2" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="8cf8bd518ca4601582bc68b33173a65d864cf28fb09ea72fc04aa8270f91a961d52e1dfafbc9f4bd78e7ffaca193fc68d8f220417950e99c6ddbd51c042ae91b" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="11.0.2" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
</package>
<package pkgid="95865407980b361cb436dde9d0f6c9f3e76c8cf1ff9cec35a81a954ee53f9fda908d7eba6b53e2e7b97ec19d2bf00d17d9cbc64e03e419eadb6f055bbd47d440" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="11.0.3" rel="160000.5.1"/>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
  <changelog author="jesus.bv@suse.com" date="1781006400">- Update to version 11.0.3
  + Write instance data cache file after
  cleaning the cache when the update server fails (bsc#1265930)
  + Create the cache directory when populating the cache (bsc#1267739)</changelog>
</package>
<package pkgid="4c50055058c461ef12991d41479829442fb57f4d7db597de090931b858e84726ab9fea869763c720c703662a2897adc37e5564478861c4020a016ddba1901f24" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
</package>
<package pkgid="367bb47ec0814c746b4884f00693adcb1cd7b2531cb0df384f089fa110108776a30052388daa980331f1caa4b95bf5390fd99dab93cfcace27a10b5cfed5e99e" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="5f746d2d105207d892eb15c37faa4fa7442b7059cbc49d63ab9eccdc92fdace8d61e4c049bf50e95c42f74be2872db1572e18d0167934312063f524e32eba049" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
</package>
<package pkgid="af70acc48b7980d76915b601c7dbd0d8736cbab3858393b4418ee15ff103810723141d683dcb93c38d1a332180f86a7d3bd8cb849cd2fb29a9ea156499dbc570" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.5.1"/>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
  <changelog author="jesus.bv@suse.com" date="1781006400">- Update to version 11.0.3
  + Write instance data cache file after
  cleaning the cache when the update server fails (bsc#1265930)
  + Create the cache directory when populating the cache (bsc#1267739)</changelog>
</package>
<package pkgid="7ae0a7b72605b9f5db0aff1b818dad5a079f11775c70d7e4ab1c1bec139449a251d647b846d643f7db01acf2e6088da51741964a9a1a768592a7a0d2d6b0a516" name="cloud-regionsrv-client-license-watcher" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
</package>
<package pkgid="97a7c83a3457cde7ea5d8db0c7019d1e257aca17c8662459e713cc760d1d1b8fa073cf254d32aa0f2a6f5b0ae40cc7fc3ad0eeac6c665ea24698b86224123df4" name="cloud-regionsrv-client-license-watcher" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="72ce502d8bcb35308442626cefe657e22226d39675bfea3533b334138199becc816e025a3a66c0d3b508e07ea67aa9a933d5f59512e3935baa31b6b5363698b4" name="cloud-regionsrv-client-license-watcher" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
</package>
<package pkgid="85c560b4e968cb9cfcbf167ca3174742f4402ae9ed9d3ca71fe2dcc5cf262afc018c10d69fd27f4f0c414c8e1bdc7a35548bb43689ad0030a32f8eae1eb96cd4" name="cloud-regionsrv-client-license-watcher" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.5.1"/>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
  <changelog author="jesus.bv@suse.com" date="1781006400">- Update to version 11.0.3
  + Write instance data cache file after
  cleaning the cache when the update server fails (bsc#1265930)
  + Create the cache directory when populating the cache (bsc#1267739)</changelog>
</package>
<package pkgid="5875efe8743db4d6530418d31dd0da41f92a676bfd63c5f25f0cbb6f61c713eb2095f00e284afd30f38138c447a80271cba167c65d409180361dd6a3627ca11e" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
</package>
<package pkgid="b0333455913810417ac7bbd44874e318d9ef4e1af8330648c91e68b9a4e68d0b22faa3bc1c7187199436130d9ebdc5af7e8f978271873bff01c9bf580b6afb18" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="5cf2b514938575f44f1f077e53458190d1df1108c21a5a97306962ce98578a69002a8e82cc18a9176af2acbc78fa72854dbd4c375c8f97f9b6455ea313c95a23" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
</package>
<package pkgid="af6386a1fd3612a6f0607db199cdc6df928b96e940f0e22dc247169efa5e67e42beb9a2251e9f1c681368860637d8d8c4b8756051c787875c8cee594498a9b12" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="160000.5.1"/>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
  <changelog author="jesus.bv@suse.com" date="1781006400">- Update to version 11.0.3
  + Write instance data cache file after
  cleaning the cache when the update server fails (bsc#1265930)
  + Create the cache directory when populating the cache (bsc#1267739)</changelog>
</package>
<package pkgid="589368ae1859bc3a8006179397d190b75ef782b6d237986e2a62ab981a29b46d64e6458664e92fe1135eccf15c5728deaf2a545c2554ec5ff3b010bada6fc0d4" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
</package>
<package pkgid="064104145f2b578078632871ee178f45523c5526663562544dfb372dec1a707489b6ce0f9a9dae3337970b989b352d929b337e4d69837bb94d98799e68be71d3" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="a397ca7b5190b85db1a30d9adb1c7a2a500e5f33c91df485980e996e04475cf36003c5c48d2a05466dd80f4cfcc71788444a8b080c7f5e96a4e591b784ca70aa" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
</package>
<package pkgid="da618fcc75e27b5f84d3218b6945ba7a6d3e4bdbea3ee715a5e13f6567b4b3cc532a203b164c52ecd47f031c7406251227b24b7e0d2bfaaa720ec0b52ba624c6" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.5.1"/>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
  <changelog author="jesus.bv@suse.com" date="1781006400">- Update to version 11.0.3
  + Write instance data cache file after
  cleaning the cache when the update server fails (bsc#1265930)
  + Create the cache directory when populating the cache (bsc#1267739)</changelog>
</package>
<package pkgid="697c231eb9984ad7351bdb1cf57cb18319dc7508a5b53ed53aca96b84153731c9161e2ccd19acea57428de24e1ab0a233eefddbd984e85a912d31ef6061f7bba" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.2.2"/>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
</package>
<package pkgid="c5d5ef2209033371431a66d15c718786aba0f6fd8b59ebc6577f9e50bc40f1fdf6ce6046a60df8d0218bc5728fea4cca2549d9d9f14c677b7529dafcdb7d1305" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="160000.3.1"/>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
  <changelog author="rjschwei@suse.com" date="1726056000">- Update to 10.3.5
  + Update spec file to build in all code streams,
    SLE 12, SLE 15, ALP, and SLFO and have proper dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1730203200">- Update to 10.3.6 (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix-for-sles12-disable-registry.patch
    ~ fix-for-sles12-no-trans_update.patch
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone</changelog>
  <changelog author="rjschwei@suse.com" date="1730808000">- Update to 10.3.7 (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
</package>
<package pkgid="b14502ad2e7fbc9878532f6750a17a75fafc66a3ac57baffdfe1afbfa7174ef2552d875297a3fcb23c7426243c1557049c84e5e10fce6b4e0cdd03af0c4d1ef9" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.4.1"/>
  <changelog author="marcus.schaefer@suse.com" date="1731931200">- Update to 10.3.8 (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr</changelog>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
</package>
<package pkgid="11e08cf99b438bb94cd1cfabb51feae205cd057ab1947b4d21346c947d58515ae8cfea17757f80c75b15f384b65f6961e2d29e068e8a69e913c461bf0b3bdee0" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="160000.5.1"/>
  <changelog author="jesus.bv@suse.com" date="1733227200">- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product</changelog>
  <changelog author="rjschwei@suse.com" date="1745928000">- Update version to 10.4.0
  + Remove repositories when the package is being removed
    We do not want to leave repositories behind refering to the plugin that
    is being removed when the package gets removed (bsc#1240310, bsc#1240311)
  + Turn docker into an optional setup (jsc#PCT-560)
    Change the Requires into a Recommends and adapt the code accordingly
  + Support flexible licenses in GCE (jsc#PCT-531)
  + Drop the azure-addon package it is geting replaced by the
    license-watcher package which has a generic implementation of the
    same functionality.
  + Handle cache inconsistencies (bsc#1218345)
  + Properly handle the zypper root target argument (bsc#1240997)</changelog>
  <changelog author="rjschwei@suse.com" date="1753272000">- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)</changelog>
  <changelog author="rjschwei@suse.com" date="1753444800">- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service</changelog>
  <changelog author="rjschwei@suse.com" date="1755864000">- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requiring manual intervention prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1758110400">- Update to version 10.5.3
  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
  * Add handler and formatter for the logfile containing more
    information about function and position in code for the message
  * Add handler for stdout (INFO and WARNING)
  * Add handler for stderr (ERROR).
  * Implement Logger class providing the logging setup and methods
  * Drop the start_logging() method.
  * Fix and refactor all unit tests around the use of logging
    with a proper fixture and place all tests for registerutils
    into its own class TestRegisterUtils.
  * Add --debug switch for registercloudguest. Allow to increase
    logfile information. All messages produced via log.debug(...)
    in code will be part of the logfile. Debug messages will not
    be shown on the console
  * Update SLE12 patches due to logging refactor
  * Use --debug flag in guestregister service
    This Fixes #188</changelog>
  <changelog author="rjschwei@suse.com" date="1773144000">- Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)
  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices</changelog>
  <changelog author="rjschwei@suse.com" date="1774008000">- Update to version 11.0.1
  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.</changelog>
  <changelog author="rjschwei@suse.com" date="1774008001">- Update to version 11.0.2 (bsc#1260421)
  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work</changelog>
  <changelog author="jesus.bv@suse.com" date="1781006400">- Update to version 11.0.3
  + Write instance data cache file after
  cleaning the cache when the update server fails (bsc#1265930)
  + Create the cache directory when populating the cache (bsc#1267739)</changelog>
</package>
<package pkgid="718896bedf761fa8f2e74a790fd3756b8bf5cf5592af33dd9970bcfc757fca77e8639946b2f7a743db9338bbd8f2f0f972d34491b377e0e86f64be7a60085c5e" name="cloudflared" arch="x86_64">
  <version epoch="0" ver="2024.9.1" rel="bp160.1.13"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1718625600">- Initial package for version 2024.6.0
- Add 001-skip-test.patch and 002-use-pie.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1720094400">- Add 003-support-ppc64le.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1720440000">- Define GOARCH
- Remove 003-support-ppc64le.patch.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1721217600">- Add reproducible.patch to not include the build date (boo#1047218)</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1722340800">- Update version to 2024.7.1
  * Add user-agent for quick-tunnel requests
  * Add default noop logger for capnprpc
  * cloudflared uses new PQ curve ID
  * use -p flag to create intermediate directories</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1722859200">- Update version to 2024.7.3
  * TUN-8546: Fix final artifacts paths</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1726228800">- Update version to 2024.9.1
  * TUN-8546: Fix final artifacts paths
  * TUN-8583: change final directory of artifacts
  * TUN-8585: Avoid creating GH client when dry-run is true
  * TUN-8591 login command without extra text
  * TUN-8592: Use metadata from the edge to determine if request body is
    empty for QUIC transport
  * TUN-8484: Print response when QuickTunnel can't be unmarshalled
  * TUN-8621: Prevent QUIC connection from closing before grace period after
    unregistering
  * PPIP-2310: Update quick tunnel disclaimer</changelog>
</package>
<package pkgid="04aec6792752661560a684a83340dcb1831bd3fc15af6b166c564e8af27f49c6091ff6656cfbeda655381274ed91f3e91fcbb5000e0f465a43d8abcbfc40c0fb" name="cloudflared" arch="x86_64">
  <version epoch="0" ver="2026.5.2" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1722340800">- Update version to 2024.7.1
  * Add user-agent for quick-tunnel requests
  * Add default noop logger for capnprpc
  * cloudflared uses new PQ curve ID
  * use -p flag to create intermediate directories</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1722859200">- Update version to 2024.7.3
  * TUN-8546: Fix final artifacts paths</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1726228800">- Update version to 2024.9.1
  * TUN-8546: Fix final artifacts paths
  * TUN-8583: change final directory of artifacts
  * TUN-8585: Avoid creating GH client when dry-run is true
  * TUN-8591 login command without extra text
  * TUN-8592: Use metadata from the edge to determine if request body is
    empty for QUIC transport
  * TUN-8484: Print response when QuickTunnel can't be unmarshalled
  * TUN-8621: Prevent QUIC connection from closing before grace period after
    unregistering
  * PPIP-2310: Update quick tunnel disclaimer</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1732536000">- Update version to 2024.11.1
  * Add cloudflared tunnel health command
  * PPIP-2310: Update quick tunnel disclaimer
  * TUN-8621: Prevent QUIC connection from closing before grace period
    after unregistering
  * TUN-8484: Print response when QuickTunnel can't be unmarshalled
  * TUN-8592: Use metadata from the edge to determine if request body is
    empty for QUIC transport
  * TUN-8621: Fix cloudflared version in change notes to account for
    release date
  * TUN-8638: Add datagram v3 serializers and deserializers
  * TUN-8685: Bump coredns dependency
  * TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS
  * TUN-8694: Fix github release script
  * TUN-8694: Rework release script
  * TUN-8661: Refactor connection methods to support future different
    datagram muxing methods
  * TUN-8692: remove dashes from session id
  * TUN-8708: Bump python min version to 3.10
  * TUN-8667: Add datagram v3 session manager
  * TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1
  * TUN-8700: Add datagram v3 muxer
  * TUN-8646: Allow experimental feature support for datagram v3
  * TUN-8641: Expose methods to simplify V3 Datagram parsing on the edge
  * VULN-66059: remove ssh server tests
  * TUN-8709: Add session migration for datagram v3
  * TUN-8701: Add metrics and adjust logs for datagram v3
  * add: new go-fuzz targets
  * TUN-8701: Simplify flow registration logs for datagram v3</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1734177600">- Update version to 2024.12.1
  * TUN-8748: Migrated datagram V3 flows to use migrated context
  * TUN-8737: update metrics server port selection
  * TUN-8731: Implement diag/system endpoint
  * TUN-8728: implement diag/tunnel endpoint
  * TUN-8730: implement diag/configuration
  * TUN-8735: add managed/local log collection
  * TUN-8733: add log collection for docker
  * TUN-8734: add log collection for kubernetes
  * TUN-8640: Refactor ICMPRouter to support new ICMPResponders
  * TUN-8729: implement network collection for diagnostic procedure
  * TUN-8727: implement metrics, runtime, system, and tunnelstate in diagnostic
    http client
  * TUN-8726: implement compression routine to be used in diagnostic procedure
  * TUN-8732: implement port selection algorithm
  * TUN-8762: fix argument order when invoking tracert and modify network info
    output parsing
  * TUN-8769: fix k8s log collector arguments
  * TUN-8727: extend client to include function to get cli configuration
    and tunnel configuration
  * TUN-8725: implement diagnostic procedure
  * TUN-8767: include raw output from network collector in diagnostic zip file
  * TUN-8770: add cli configuration and tunnel configuration to diagnostic zipfile
  * TUN-8768: add job report to diagnostic zipfile
  * TUN-8775: Make sure the session Close can only be called once
  * TUN-8781: Add Trixie, drop Buster. Default to Bookworm
  * TUN-8640: Add ICMP support for datagram V3
  * TUN-8789: make python package installation consistent
  * TUN-8795: update createrepo to createrepo_c to fix the release_pkgs.py
    script
- Add update-vendor.patch, fix CVE-2024-45337 and boo#1234582</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1746360000">- Update version to 2025.4.2
  * emit explicit errors for the service command on unsupported OSes
  * Fix some issues
- Drop update-vendor.patch and reproducible.patch</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1749643200">- Update version to 2025.6.0
  * Remove dynamic reloading of features for datagram v3
  * Add metric for unsupported RPC commands for datagram v3
  * Add dynamic loading of features to connections via ConnectionOptionsSnapshot
  * Use is_default_network instead of is_default to create vnet's
  * Update go to 1.24</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1763985600">- Update version to 2025.11.1
  * bump coredns to solve CVE
  * add vulncheck to cloudflared
  * Remove references to cloudflare-go
  * Add logging format as JSON
  * Centralize UDP origin proxy dialing as ingress service
  * Add virtual DNS service
  * Add OriginDialerService to include TCP
  * Add --dns-resolver-addrs flag
  * Remove P256Kyber768Draft00PQKex curve from nonFips curve preferences
  * Bump go-boring from 1.24.2 to 1.24.4
  * Add metrics for virtual DNS origin
  * set proper url and hostname for cloudflared tail command
  * Add support for login interstitial auto closure
  * update fed callback url for login helper
  * Correct QUIC connection management for datagram handlers
  * Set endpoint in tunnel credentials when generating locally managed tunnel
    with a Fed token
  * Migrate cloudflared-ci pipelines to Gitlab CI
  * Add support for FedRAMP in originRequest Access config
  * Add buffers for UDP and ICMP datagrams in datagram v3
  * Add write deadline for UDP origin writes
  * Improve metrics for datagram v3
  * Force usage of go-boring 1.24
  * Fix import of GPG keys when two keys are provided
  * Fix parameter order when uploading RPM .repo file to R2
  * Add new datagram v3 feature flag
  * Bump datagram v3 write channel capacity
  * Fix upload of RPM repo file during double signing
  * Fix the cloudflared binary path used in the component test
  * Fix typo causing r2-release-next deployment to fail
  * Update from go1.24.6 to go1.24.9
  * Fix systemd service installation hanging
  * Add cf-proxy-* to control response headers
  * Add pipelines for linux packaging
  * Prefix gitlab steps with operating system
  * Fix docker hub push step
- Add update-crypto.patch, update crypto to 0.45 to fix CVE issues
  * Fix CVE-2025-58181 boo#1253918
  * Fix CVE-2025-22869 boo#1239422</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1770552000">- Update version to 2026.2.0
  * Fix bugs</changelog>
  <changelog author="Hillwood Yang &lt;hillwoodroc@gmail.com&gt;" date="1780056000">- Update version to 2026.5.2
  * Add more information to proxy-dns removal message
  * Update tail command to use /management/logs endpoint
  * Add cloudflared management token command
  * Fix bugs
  * Update golang.org/x/net to 0.55.0 (boo#1266794, boo#1265920, CVE-2026-39821
    CVE-2026-33814)
- Drop update-crypto.patch, fixed by upstream</changelog>
</package>
<package pkgid="ceec714e7ada9ee661550ef4a3fc0caa7b590a6e7a4b368bfee91a0d37d464bbcf3e20ad0ae3e6657e3c2f8a1367749414cf44bbe7edcd7c4ddade9c9f0dabb8" name="cloudproviders-extension-nextcloud" arch="noarch">
  <version epoch="0" ver="3.16.6" rel="bp160.1.1"/>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1734436800">- Update to version 3.15.2:
  * chore(i18n): Corrected spelling and improved grammar
    (gh#nextcloud/desktop#7666)
  * improvement of error message (gh#nextcloud/desktop#7671)
  * Fix a bug preventing sync root in folder on drive roots
    (gh#nextcloud/desktop#7672)
  * Bugfix/lnk folder virtual files (gh#nextcloud/desktop#7673)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1736251200">- Update to version 3.15.3:
  * Bugfix/catch exceptions to prevent crash
    (gh#nextcloud/desktop#7705)
  * Bugfix/elidedtext (gh#nextcloud/desktop#7706)
  * Call setDesktopFileName without `.desktop` suffix
    (gh#nextcloud/desktop#7707)
  * add a simple github action workflow to build test the
    documentation (gh#nextcloud/desktop#7709)
  * Fix filename of fix-macosvfs-file-sharing.png
    (gh#nextcloud/desktop#7712)
  * Fix .netrc parsing (gh#nextcloud/desktop#7714)
  * Bugfix/do not always free up storage windows shortcuts
    (gh#nextcloud/desktop#7715)
  * fix dev application name to keep a consitant migration
    behaviour for the dev and prod build
    (gh#nextcloud/desktop#7722)
  * ensure proper read write access to root folder and db files
    (gh#nextcloud/desktop#7726)
  * gui/tray: Fix colour for secondary text items being too pale
    (gh#nextcloud/desktop#7727)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1741608000">- Update to version 3.16.0:
  * fix spelling os UserStatus qml type when setting user status
    (gh#nextcloud/desktop#7558)
  * gui/tray: Dark mode switch (gh#nextcloud/desktop#7561)
  * no transparent background for main ApplicationWindow
    (gh#nextcloud/desktop#7564)
  * fix regressions in automated tests for bulk upload
    (gh#nextcloud/desktop#7580)
  * when updating a virtual file after lock/unlock: avoid setting
    modtime (gh#nextcloud/desktop#7572)
  * enable reversed locale layout (RTL) in QML
    (gh#nextcloud/desktop#4240)
  * Fix text strings (gh#nextcloud/desktop#3792)
  * l10n: Change to a capital letter (gh#nextcloud/desktop#4953)
  * mac-crafter: Fix codesigning of app bundle when auto-updater
    is excluded (gh#nextcloud/desktop#7605)
  * when locking a file set If-Match header to ensure etag is
    correct (gh#nextcloud/desktop#7595)
  * gui/tray: Fix tray window corners (gh#nextcloud/desktop#7566)
  * gui/tray: Fix activity icon colours (gh#nextcloud/desktop#7567)
  * Bugfix/handle windows directory junction
    (gh#nextcloud/desktop#7609)
  * gui: Remove content margins account settings subsections
    (gh#nextcloud/desktop#7568)
  * Disable legacy import dialog (gh#nextcloud/desktop#7623)
  * chore(i18n): Aligned error messages (gh#nextcloud/desktop#7612)
  * gui/tray: Ensure colour of featured app icon is consistent with
    other header buttons (gh#nextcloud/desktop#7604)
  * doc: Rename first header on macos vfs doc entry, fixing title
    in index (gh#nextcloud/desktop#7576)
  * mac-crafter: Close isExecutable command outpipe file handle
    after use (gh#nextcloud/desktop#7585)
  * Bug fix import of unbranded account (gh#nextcloud/desktop#7635)
  * improve definition of MIRALL_VERSION_SUFFIX and
    MIRALL_VERSION_BUILD (gh#nextcloud/desktop#7625)
  * dehydrate placeholder files using CfDehydratePlaceholder
    (gh#nextcloud/desktop#7602)
  * use modern non deprecated hash algorithm and parameters
    (gh#nextcloud/desktop#7642)
  * optionally install PDB files when building them
    (gh#nextcloud/desktop#7626)
  * Include folders when displaying the local metadata about a
    conflict. (gh#nextcloud/desktop#7639)
  * Fix: correctly detects network drive.
    (gh#nextcloud/desktop#7636)
  * chore(i18n): Corrected spelling and improved grammar
    (gh#nextcloud/desktop#7655)
  * remove NC17 support (gh#nextcloud/desktop#7656)
  * improvement of error message (gh#nextcloud/desktop#7667)
  * Fix a bug preventing sync root in folder on drive roots
    (gh#nextcloud/desktop#7662)
  * Bugfix/lnk folder virtual files (gh#nextcloud/desktop#7670)
  * Add authors file (gh#nextcloud/desktop#7680)
  * Bump cpp-linter/cpp-linter-action from 2.13.3 to 2.13.4
    (gh#nextcloud/desktop#7675)
  * all: Fix deprecation warnings when building with Qt 6.8.0
    (gh#nextcloud/desktop#7584)
  * Bugfix/catch exceptions to prevent crash
    (gh#nextcloud/desktop#7684)
  * Bugfix/elidedtext (gh#nextcloud/desktop#7679)
  * Remove assert for when the timestamp is not empty.
    (gh#nextcloud/desktop#7641)
  * url update in readme (gh#nextcloud/desktop#7704)
  * Call setDesktopFileName without .desktop suffix
    (gh#nextcloud/desktop#7699)
  * add a simple github action workflow to build test the
    documentation (gh#nextcloud/desktop#7708)
  * Fix filename of fix-macosvfs-file-sharing.png
    (gh#nextcloud/desktop#7691)
  * Fix .netrc parsing (gh#nextcloud/desktop#7698)
  * Bugfix/do not always free up storage windows shortcuts
    (gh#nextcloud/desktop#7713)
  * fix dev application name to keep a consitant migration
    behaviour for the dev and prod build
    (gh#nextcloud/desktop#7683)
  * ensure proper read write access to root folder and db files
    (gh#nextcloud/desktop#7724)
  * Make extraction of ETag header independent of capitalisation
    (gh#nextcloud/desktop#7720)
  * gui/tray: Fix colour for secondary text items being too pale
    (gh#nextcloud/desktop#7725)
  * Fix "open local or group folders" menu not showing
    (gh#nextcloud/desktop#7730)
  * improve feedback from documentation generation workflow
    (gh#nextcloud/desktop#7743)
  * gui/tray: Remove BasicComboBox QML component, prefer native
    component (gh#nextcloud/desktop#7583)
  * Update macosvfs.rst (gh#nextcloud/desktop#7742)
  * chore(i18n): Improved grammar (gh#nextcloud/desktop#7749)
  * update runwizard introduction screen
    (gh#nextcloud/desktop#7737)
  * updater: Upgrade to Sparkle 2 (gh#nextcloud/desktop#7750)
  * gui/tray: Fix sync state icon showing paused state when using
    macOS VFS with no standard sync folders
    (gh#nextcloud/desktop#7741)
  * fix window resize on DPI changes (gh#nextcloud/desktop#7735)
  * github: Implement issue types in issue templates
    (gh#nextcloud/desktop#7766)
  * Use normal MenuSeparator instead of custom code
    (gh#nextcloud/desktop#7770)
  * update legal notice copyright years for Nextcloud
    (gh#nextcloud/desktop#7773)
  * add some missing doc images in a valid path
    (gh#nextcloud/desktop#7774)
  * Avoid converting string to color (gh#nextcloud/desktop#7769)
  * Bugfix/read only classical sync lnk shortcuts windows
    (gh#nextcloud/desktop#7779)
  * fix the if check for invalid virtual LNK files
    (gh#nextcloud/desktop#7781)
  * Make Brander QT selection dynamic (gh#nextcloud/desktop#7754)
  * sync: Respect maximum chunk size provided in server capabilities
    (gh#nextcloud/desktop#7772)
  * switch client side encryption to use sha256 hash algorithm
    (gh#nextcloud/desktop#7780)
  * Log path strings directly instead of accumulating
    (gh#nextcloud/desktop#7718)
  * modify AppImage build script to work with an EL8 base
    (gh#nextcloud/desktop#7782)
  * notifications: Do not assume root activity link is the correct
    "join call" link (gh#nextcloud/desktop#7786)
  * fix "Resolve conflicts" dialog not showing up
    (gh#nextcloud/desktop#7789)
  * persist credentials retrieved through the wizard
    (gh#nextcloud/desktop#7768)
  * use new in Qt6.8 windows fluent style
    (gh#nextcloud/desktop#7416)
  * fix wrong if condition (gh#nextcloud/desktop#7799)
  * Add Ubuntu Plucky (gh#nextcloud/desktop#7801)
  * Link to new documentation (gh#nextcloud/desktop#7810)
  * Update doc link in issue template (gh#nextcloud/desktop#7811)
  * fix colours in dark mode (gh#nextcloud/desktop#7755)
  * refactor: replace QString() with QStringLiteral() for better
    performance in (gh#nextcloud/desktop#7422)
  * use correct qml style on Windows (gh#nextcloud/desktop#7812)
  * craft: Upgrade to binary cache 25.01 (gh#nextcloud/desktop#7825)
  * only use debug log level for discovery traces to decrease cost
    (gh#nextcloud/desktop#7819)
  * shell_integration/macOS: Upgrade to NextcloudFileProviderKit 2.0
    (gh#nextcloud/desktop#7824)
  * Adds some extra info when throwing exception with setting folder
    permissions. (gh#nextcloud/desktop#7809)
  * Feature/e2ee use hardware token secure storage
    (gh#nextcloud/desktop#5877)
  * Fetch "shared with me" information separately
    (gh#nextcloud/desktop#7744)
  * gui/tray: Fix defaulting to "problem" state in sync tray icon
    when using macOS VFS (gh#nextcloud/desktop#7827)
  * set the parent folder read/write always when downloading a new
    file (gh#nextcloud/desktop#7808)
  * fix deletion of .lnk files on Windows with paths containing
    special characters (gh#nextcloud/desktop#7828)
  * shell_integration/macOS: Add ability to share macOS VFS files
    via internal link shares (gh#nextcloud/desktop#7787)
  * gui/macOS: Improve/fix illegal File Provider domain handling
    for macOS VFS (gh#nextcloud/desktop#7835)
  * shell_integration/macOS: Do not try to lock macOS VFS file if
    locking is unavailable on the server (gh#nextcloud/desktop#7833)
  * fix: Nautilus integration conflicts with ownCloud
    (gh#nextcloud/desktop#6418)
  * Add button to scroll to top when activity list is long.
    (gh#nextcloud/desktop#7823)
  * UI: Improves texts displayed to the user when picking the wrong
    location for syncing (gh#nextcloud/desktop#7596)
  * skip attempt to install updates at launch when update checks are
    disabled (gh#nextcloud/desktop#7838)
  * gui/tray: Prevent talk reply text field being too wide and
    breaking layout (gh#nextcloud/desktop#7839)
  * Bugfix. E2EE. Always migrate from 1.2 to 2.0, even with nested
    folders. (gh#nextcloud/desktop#6695)
  * Bugfix migration from legacy clients. (gh#nextcloud/desktop#7807)
  * Fix Height for Resolve Conflicts Dialog (gh#nextcloud/desktop#7815)
  * add test skeleton for OCC::FolderStatusModel
    (gh#nextcloud/desktop#7842)
  * Attempt to detect if client is running in a Vmware to disable
    graphic acceleration (gh#nextcloud/desktop#7687)
  * [stable-3.16] fix rounded corners in the call notification
    (gh#nextcloud/desktop#7851)
  * [stable-3.16] Fix looks of share note text field
    (gh#nextcloud/desktop#7858)
  * [stable-3.16] chore(i18n): Remove blank (gh#nextcloud/desktop#7866)
  * [stable-3.16] vfs: fix root folder detection regression
    (gh#nextcloud/desktop#7878)
  * [stable-3.16] Hide update channels options when needed.
    (gh#nextcloud/desktop#7879)
  * [stable-3.16] Small improvements in Folder.
    (gh#nextcloud/desktop#7882)
  * [stable-3.16] Feature/automate windows file name compatibility
    (gh#nextcloud/desktop#7884)
  * [stable-3.16] provide consistent version info including human
    readable version (gh#nextcloud/desktop#7885)
  * [stable-3.16] Change three dots to an ellipsis
    (gh#nextcloud/desktop#7888)
  * [stable-3.16] Check if folder exists before deleting sync db and
    VFS sync root conection. (gh#nextcloud/desktop#7892)
  * [stable-3.16] prevent infinite sync loop: delay retry after many
    errors (gh#nextcloud/desktop#7893)
  * [stable-3.16] improve ToS handling (gh#nextcloud/desktop#7895)
  * [stable-3.16] fixed html formatting on encrypted warning message
    (gh#nextcloud/desktop#7896)
  * [stable-3.16] FolderStatusModel: only create a single
    QFileIconProvider object (gh#nextcloud/desktop#7900)
  * [stable-3.16] UserStatusSelector: set focusPolicy on accept
    button (gh#nextcloud/desktop#7907)
  * [stable-3.16] Bugfix/delete read only remnants
    (gh#nextcloud/desktop#7909)
  * [stable-3.16] Added plural forms handling correction to
    notification message (gh#nextcloud/desktop#7912)
  * [stable-3.16] Added space between sentences
    (gh#nextcloud/desktop#7913)
  * [stable-3.16] Removed deprecated Qt macros/functions
    (gh#nextcloud/desktop#7915)
  * [stable-3.16] chore(i18n): Use correct plural syntax
    (gh#nextcloud/desktop#7917)
  * [stable-3.16] Improve UI of settings (gh#nextcloud/desktop#7921)
  * [stable-3.16] do not display encrypt action for external folders
    (gh#nextcloud/desktop#7922)
  * [stable-3.16] craft: Use Qt 6.8.2 (gh#nextcloud/desktop#7923)
  * [stable-3.16] Added customize option for sync interval
    (gh#nextcloud/desktop#7929)
  * [stable-3.16] Increased default limit of free space and critical
    free space (gh#nextcloud/desktop#7936)
  * [stable-3.16] Added hiding remotePollInterval selector in
    settings if notify push available (gh#nextcloud/desktop#7944)
  * [stable-3.16] gui/tray: Do not generate JPEG images in async
    image response for macOS (gh#nextcloud/desktop#7947)
  * [stable-3.16] gui/tray: Remove unused thumbnailjob class
    (gh#nextcloud/desktop#7948)
  * [stable-3.16] when deleting a remote locked file, provide needed
    lock headers (gh#nextcloud/desktop#7952)
  * [stable-3.16] gui/macOS: Remove "advanced settings" section for
    macOS VFS settings (gh#nextcloud/desktop#7953)
  * [stable-3.16] update AppImage builds to Qt 6.8.2
    (gh#nextcloud/desktop#7954)
  * [stable-3.16] gui/tray: Fix some tray view papercuts
    (gh#nextcloud/desktop#7955)
  * [stable-3.16] gui: do not allow MainWindow to be resized
    (gh#nextcloud/desktop#7957)
  * [stable-3.16] Revert "gui: do not allow MainWindow to be resized"
    (gh#nextcloud/desktop#7963)
  * [stable-3.16] Remove aditional text when error occurs.
    (gh#nextcloud/desktop#7968)
  * [stable-3.16] gui/macOS: Fix emitted signal in file provider sync
    status GUI component (gh#nextcloud/desktop#7972)
  * [stable-3.16] make use of the new x-nc-skip-trashbin header
    (gh#nextcloud/desktop#7975)
  * [stable-3.16] always set a user if we got asked for one
    (gh#nextcloud/desktop#7976)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1741608001">- Added build requirement `libp11`</changelog>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1741953600">- Update to version 3.16.1:
  * remove unused capture of this in one lambda
    (gh#nextcloud/desktop#7985)
  * fix setups that use basic auth (gh#nextcloud/desktop#7993)
  * use our own Craft cache for macOS builds
    (gh#nextcloud/desktop#8003)
  * Bugfix/do not warn about invalid files in not synced folders
    (gh#nextcloud/desktop#8001)
  * Fix version detection by the Ubuntu/Debian build script
    (gh#nextcloud/desktop#8008)
  * gui/wizard: Integrate macOS VFS (File Provider) configuration
    into account wizard (gh#nextcloud/desktop#8006)
  * gui/tray: Hide resume all menu item when no local sync folders
    are configured (gh#nextcloud/desktop#8011)
  * display reshares in sharing dialog (gh#nextcloud/desktop#8013)
  * Add option to disable virtual files syncing on Windows.
    (gh#nextcloud/desktop#8002)
  * Fix build when BUILD_WEBENGINE=OFF (gh#nextcloud/desktop#8015)
  * ensure user receiving an encrypted share maintain
    proper state (gh#nextcloud/desktop#8017)</changelog>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1742385600">- Update to version 3.16.2:
  * make version.cmake more readable (gh#nextcloud/desktop#7986)
  * remove gcc and clang build checks (gh#nextcloud/desktop#8025)
  * Bugfix/input pin title too wide (gh#nextcloud/desktop#8042)
  * explicitly set colours for header items
    (gh#nextcloud/desktop#8049)
  * Bugfix/highlight too bright appimage
    (gh#nextcloud/desktop#8051)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1744804800">- Update to version 3.16.3:
  * Bugfix/input pin title too wide (gh#nextcloud/desktop#8055)
  * use standard way to find the checkum type and really send it
    to server (gh#nextcloud/desktop#8057)
  * fix Windows build (gh#nextcloud/desktop#8068)
  * use our own craft cache on windows (gh#nextcloud/desktop#8069)
  * gui/macOS: Do not assume accountState will always be valid in
    socket controller (gh#nextcloud/desktop#8074)
  * gui/macOS: Fix broken file provider domain progress reporting
    in settings window (gh#nextcloud/desktop#8079)
  * gui/tray: change the status icon background colour again
    (gh#nextcloud/desktop#8082)
  * set `CFBundleDevelopmentRegion` to `"en"` and set
    `CFBundleAllowMixedLocalizations` (gh#nextcloud/desktop#8085)
  * gui/macOS: Fix memory issues in Objective-C++ code for
    FileProvider support (gh#nextcloud/desktop#8089)
  * fix(mac): bump deployment target to 12.0
    (gh#nextcloud/desktop#8115)
  * fix(gui): remove ignored file notifications from Activity
    list (gh#nextcloud/desktop#8116)
  * fix(mac-crafter): Work around broken consecutive shell
    integration builds (gh#nextcloud/desktop#8117)
  * Bugfix/delete errors (gh#nextcloud/desktop#8124)
  * remove costly availability check that is never used
    (gh#nextcloud/desktop#8123)
  * fix crash within FolderStatusModelTest
    (gh#nextcloud/desktop#8125)
  * fix: move array to correct value in dict
    (gh#nextcloud/desktop#8126)
  * remove bogus check that tried to check for existing case
    clash conflict (gh#nextcloud/desktop#8129)
  * stop using QFile api to delete a single local file
    (gh#nextcloud/desktop#8130)
  * fix: try to correct mtime on upsyncs
    (gh#nextcloud/desktop#8131)
  * Bugfix/use newer bulk upload checksum header
    (gh#nextcloud/desktop#8137)
  * Bugfix/slow bulk upload (gh#nextcloud/desktop#8139)
  * disable use of bulk upload for small files
    (gh#nextcloud/desktop#8141)
  * simplify deletions of invalid read-only items: do not
    interrupt sync (gh#nextcloud/desktop#8153)
  * fix(PinState): don't trigger sync when file's PinState
    changed to Unspecified. (gh#nextcloud/desktop#8157)
  * skip single test or whole test file for macOS: they are
    broken (gh#nextcloud/desktop#8163)
  * Exclude NavigationPaneHelper from non-Windows compile
    (gh#nextcloud/desktop#8158)
  * Use AccountPtr in Account signals instead of raw pointer
    (gh#nextcloud/desktop#8159)
  * fix(theme): correct dark/light mode check on Win10
    (gh#nextcloud/desktop#8162)
  * fix(msi): allow custom installation directory
    (gh#nextcloud/desktop#8166)
  * fix(migration): import proxy and general settings from legacy
    config. (gh#nextcloud/desktop#8169)
  * use specific revision for KDE blueprints that matches the
    craft cache (gh#nextcloud/desktop#8172)</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1745841600">- Update to version 3.16.4:
  * pin Craft revision to a specific commit
    (gh#nextcloud/desktop#8194)
  * Bugfix/filesystem remove file not working
    (gh#nextcloud/desktop#8197)
  * revert to QFile::remove to remove single files
    (gh#nextcloud/desktop#8198)
  * Bugfix/do not crash when propagating changes with move or
    rename (gh#nextcloud/desktop#8199)
  * fix(assert): remove runtime assert that could crash production
    builds (gh#nextcloud/desktop#8211)
  * fix(gui): resize sharee search results list dependent on
    required space (gh#nextcloud/desktop#8214)</changelog>
  <changelog author="Natasha Ament &lt;stacheldrahtje@gmail.com&gt;" date="1748952000">- Update to version 3.16.5:
  * revert: remove duplicated code when copying legacy config
    to new path. (gh#nextcloud/desktop#8233)
  * fix(migration): migrate general network settings.
    (gh#nextcloud/desktop#8308)
  * fix(delete): fix move to trash in read-only folders
    (gh#nextcloud/desktop#8312)
  * fix(AppImage): bundle client translations
    (gh#nextcloud/desktop#8313)
  * fix(appimage): move VFS plugins to AppDir
    (gh#nextcloud/desktop#8317)
  * feat(mac-crafter): retry code-signing attempts
    (gh#nextcloud/desktop#8316)
  * fix(rename): avoid failing hard when rename is rejected
    by server (gh#nextcloud/desktop#8323)
  * fix(readonly): enable MOVE rollback when folder is
    read-only (gh#nextcloud/desktop#8324)
  * fix(readonly): apply ACL also to files inside read-only
    folders (gh#nextcloud/desktop#8325)
  * fix(permissions): handle properly CanRead permission from
    server (gh#nextcloud/desktop#8327)
  * fix(filesystem): only change folder permissions if required
    (gh#nextcloud/desktop#8328)
  * fix(lockfilejobs): ensure using correct file path
    (gh#nextcloud/desktop#8332)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1750334400">- Update to version 3.16.6:
  * fix(activitylistmodel): fix activities for e2ee files
    (gh#nextcloud/desktop#8378).
  * fix(accountmanager): use defaults from configFile if setting
    was not present (gh#nextcloud/desktop#8380).
  * fix(crash): debug builds would not try to remove a not found
    job (gh#nextcloud/desktop#8381).
- Do not force GCC 9 for Leap 16.</changelog>
</package>
<package pkgid="40246172430b535fa73a990585a293cdcbb973cc477e58eef68c603a264ef7be46c3f2effe491ca2bd25853a710965a07b7399e4b56f406ec5d520c03c68e9ef" name="clpeak" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="bp160.1.9"/>
  <changelog author="mpluskal@suse.com" date="1479038400">- Update to version 1.0+git.20160805:
  * Add Galaxy S7 (Adreno 530) results
  * migrate to android studio
  * add missing x86 dummy folder
  * cosmetic ui layout changes
  * fix jumpdown list index
  * gpus only for snapdragon
  * update android.mk for new half-precision
  * add dummy folders for release
  * update android build files
- Change naming scheme
- Some small spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1485086400">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update to version 1.0+git.20170525:
  * Add GTX 1080 Ti results
  * Remove non printable chars from log file
  * Add One Plus 3T results
  * Macbook pro results submitted by Harry Mallon
  * Rename Macbook_Pro_2013.log to Mac_Pro_Late_2013_.log
  * Not passing half as kernel argument
  * Fix uninitialized variable
  * Ignore ignored-attributes warning in g++, clang++
  * Enable support for FreeBSD.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521720000">- Update to 1.0+git.20170625 to fix build on AArch64:
  * Remove march native flag
  * Always define OS_NAME even for unknown architectures
  * Add AMD_Ryzen_5_1600.log</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1576238400">- Update to version 1.0+git.20191206:
  * enqueueWriteBuffer: Initialize host buffer to obtain accurate measurement
  * Move jetson result to pocl folder
  * [snap] use new cmake file for versions
  * Add AMD Ryzen 7 3700X
  * Bump rc
  * [travis] remove explicit branch
  * [src] auto format cpp files
  * Bump version to rc1
  * [android] cosmetic changes
  * [travis] add deploy section
  * [travis] use cmake to invoke cpack
  * [travis] explicitly specify configuration to cpack
  * Update travis file
  * [cmake] fix a string in set
  * Add cpack
  * Add suffix to version
  * remove int kernel restriction for apple
  * [cmake] fix extra libs for static version
  * [travis] add arm64
  * skip exit code for no platform error
  * [travis] call ctest
  * [cmake] add a test run
  * Create Jeston Nano (Tegra X1)
  * Undo disabling of int kernels for intel
  * Reduce register usage in kernels
  * [android] update cmake to include version
  * Create Intel_UHD_Graphics_620.log
  * Update README.md
  * Print half-precision with a capital letter
  * Add results for Radeon RX 570
  * Add version info
  * [travis] use generator instead of platform type for windows
  * Revert "[cmake] pass CMAKE_GENERATOR_PLATFORM to external project build"
  * Revert "[cmake] fix error in prev commit"
  * [cmake] fix error in prev commit
  * [cmake] pass CMAKE_GENERATOR_PLATFORM to external project build
  * [travis] try other method of forcing win64
  * [travis] force x64 on windows
  * Update readme
  * [travis] trim os list
  * [travis] add more os in matrix
  * [travis] specify xenial
  * [yml] Rename to yml
  * [travis] add initial yaml file
  * [cmake] install LICENSE file
  * Delete STATUS file
  * [cmake] fix typo in prev commit
  * [cmake] windows specific changes
  * [cmake] Build ICD if not present
  * [results] remove bin symbols
  * Add results for GeForce RTX 2080 Ti
  * Add snapcraft file
  * [cmake] add an install target
  * Remove exception for snapdragon platform
  * trim fn: check before call
  * [android] upgrade to latest sdk
  * Place max transfer bw size in common
  * Place max global bw size in common
  * Add a seperate multiplier for DP
  * some more warn fixes
  * [cmake] throw warning on conversion loss
  * Use higher size datatypes for memory size
  * Add an unused macro
  * Disable depcration warn on windows
  * Flush the queue after every run iteration
  * Disable integer kernel in intel only on windows
  * Revert "Allow int tests on intel"
  * fix global bw test to use right multiplier
  * Allow int tests on intel
  * Global size now is multiple of local size
  * Trim strings returned by cl APIs
  * fix warnings
  * set OPENCL target version
  * Stop using cl.hpp from deps
  * Add a gitignore
  * [cmake] OPENCL_ROOT is not required
  * Use ulong for alloc vars
  * Reduce load on integer kernel
  * Use FindOpenCL rather than custom OpenCL finders
  * Added result for RTX2080</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1585656000">- Update to upstream release 1.1.0
  * All the kernels are now de-unrolled
  * Prior to this, all mad or fetch operations were manually
    unrolled which created register pressure on low-end devices.
    Now the operations are put in a for loop and left for the
    compiler to unroll
  * General improvements</changelog>
  <changelog author="mardnh@gmx.de" date="1644235200">- Update to version 1.1.1:
  * Add non-blocking read/write transfers.
  * Added 24bit fast MAD Integer Compute test.
  * Updated results with various Intel, AMD and NVidia hardware.
  * Use opencl.hpp instead of cl.hpp
  * Fix icd build issue.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683115200">- Update to version 1.1.2:
  * [cmake] Bump patch version
  * [snap] fix yaml for latest version of snapcraft
  * [snap] move to core20</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1732622400">- Update to version 1.1.3
  * Add a few more parameters.
  * Add 24-bit integer compute to RX 5500XT results.
  * [cmake] use GNUInstallDirs to get canonical paths.
  * Add log files for additional devices.
  * Fix compute integer unit reported in xml files.
  * add profiling for char &amp; short integer types.
  * Adding results for Tesla P40.
  * Adding results for MTT S80.
  * Use stricter host buffer alignment (64B) required by modern
    CPUs.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1735041600">- Update to version 1.1.4:
  * Add Tesla T4 results
  * Create GeForce_GTX_1660_Ti.log</changelog>
</package>
<package pkgid="774628c638e46c82abe24c2964ba7a9035fc817f2f6d0cd451095585271f364a5ae81e655f6828ff82f3daf6fbf7e745dec0dd6b2bf325bc510863072e79d4e5" name="clthreads-devel" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.3"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588507200">- Initial package, version 2.4.2
- Add patch:
  * fix-build.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591704000">- Fix installation on non-x86 architectures</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="68411066752daa641a5d0d21e32e9f829c25ceac1e9fb41578581c22643e4535b7064ab090870a653ca0a359fbcf45433781861f8c875613bea2e096864ed37d" name="clucene-core-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3.4" rel="bp160.1.13"/>
  <changelog author="saschpe@suse.de" date="1322222400">- Avoid line continuation in last cmake parameter</changelog>
  <changelog author="dvaleev@suse.com" date="1331812800">- fix ppc64 build</changelog>
  <changelog author="tchvatal@suse.cz" date="1332331200">- build contrib libs too</changelog>
  <changelog author="ro@suse.de" date="1355745600">- fix build on s390x which also uses lib64</changelog>
  <changelog author="jengelh@inai.de" date="1359115200">- Replace wrong shlib package name "libclucene2" (the SONAME is
  libclucene*.so.1, not .2) by libclucene-{core,shared}1
- Use more robust make install command
- Add patch clucene-kill-ext-includes.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1429617600">- Use url for source
- Use fdupes to reduce amount of duplicate files
- Cleanup spec-file with spec-cleaner
- Do not install empty NEWS file</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch clucene-new-gcc.patch to fix visibility issues
- Use %cmake macros
- Remove few obsolete codepaths</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1656590400">- Add gcc12-header-files.patch in order to fix build
  with GCC 12.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1721304000">- Add clucene-reprobuild.patch to allow libreoffice
  reproducible builds (boo#1047218)
  =&gt; New Provides for libclucene2(setStartVersion)</changelog>
</package>
<package pkgid="0543dc05c3facce5b27f8c5c3cf9a4b6c4f57f2d7b5072ac0d8ee1c0e4d466d01dfd388b02d54d5fb8630648e8f4d924f19dd4b6cddb2d7b0f15c393a03cdd42" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="jgross@suse.com" date="1752840000">- vsock/vmci: Clear the vmci transport packet properly when
  initializing it (git-fixes).
- commit ec91da1</changelog>
  <changelog author="jgross@suse.com" date="1752926400">- vsock: Fix transport_{g2h,h2g} TOCTOU (git-fixes).
- commit 3024c81</changelog>
  <changelog author="jgross@suse.com" date="1752926401">- vsock: Fix transport_* TOCTOU (git-fixes).
- commit 704674f</changelog>
  <changelog author="jgross@suse.com" date="1752926402">- vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also
  `transport_local` (git-fixes).
- commit 615e0f1</changelog>
  <changelog author="jgross@suse.com" date="1752926403">- virtio-net: fix recursived rtnl_lock() during probe()
  (git-fixes).
- commit 0bc7aff</changelog>
  <changelog author="tiwai@suse.de" date="1753012800">- hwmon: (corsair-cpro) Validate the size of the received input
  buffer (git-fixes).
- drm/mediatek: only announce AFBC if really supported
  (git-fixes).
- drm/mediatek: Add wait_event_timeout when disabling plane
  (git-fixes).
- drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
  (git-fixes).
- drm/nouveau: check ioctl command codes better (git-fixes).
- soundwire: amd: fix for clearing command status register
  (git-fixes).
- dmaengine: nbpfaxi: Fix memory corruption in probe()
  (git-fixes).
- phy: tegra: xusb: Fix unbalanced regulator disable in UTMI
  PHY mode (git-fixes).
- memstick: core: Zero initialize id_reg in
  h_memstick_read_dev_id() (git-fixes).
- mmc: bcm2835: Fix dma_unmap_sg() nents value (git-fixes).
- mmc: sdhci_am654: Workaround for Errata i2312 (git-fixes).
- mmc: sdhci-pci: Quirk for broken command queuing on Intel
  GLK-based Positivo models (git-fixes).
- commit f4e7d99</changelog>
  <changelog author="tiwai@suse.de" date="1753099200">- i2c: stm32f7: unmap DMA mapped buffer (git-fixes).
- i2c: stm32: fix the device used for the DMA map (git-fixes).
- usb: hub: Don't try to recover devices lost during warm reset
  (git-fixes).
- usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY
  (git-fixes).
- usb: musb: fix gadget state on disconnect (git-fixes).
- thunderbolt: Fix bit masking in tb_dp_port_set_hops()
  (git-fixes).
- thunderbolt: Fix wake on connect at runtime (git-fixes).
- pch_uart: Fix dma_sync_sg_for_device() nents value (git-fixes).
- serial: core: fix OF node leak (git-fixes).
- comedi: Fix initialization of data for instructions that write
  to subdevice (git-fixes).
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  (git-fixes).
- comedi: das6402: Fix bit shift out of bounds (git-fixes).
- comedi: aio_iiro_16: Fix bit shift out of bounds (git-fixes).
- comedi: pcl812: Fix bit shift out of bounds (git-fixes).
- comedi: das16m1: Fix bit shift out of bounds (git-fixes).
- comedi: Fix some signed shift left operations (git-fixes).
- comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
  (git-fixes).
- interconnect: icc-clk: destroy nodes in case of memory
  allocation failures (git-fixes).
- interconnect: exynos: handle node name allocation failure
  (git-fixes).
- interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1
  node (git-fixes).
- iio: adc: ad7949: use spi_is_bpw_supported() (git-fixes).
- iio: accel: fxls8962af: Fix use after free in
  fxls8962af_fifo_flush (git-fixes).
- iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC
  channel maps (git-fixes).
- iio: adc: stm32-adc: Fix race in installing chained IRQ handler
  (git-fixes).
- iio: backend: fix out-of-bound write (git-fixes).
- spi: Add check for 8-bit transfer with 8 IO mode support
  (git-fixes).
- regmap: fix potential memory leak of regmap_bus (git-fixes).
- Input: xpad - set correct controller type for Acer NGR200
  (git-fixes).
- commit efa1e54</changelog>
  <changelog author="ohering@suse.de" date="1753099201">- tools/hv: fcopy: Fix irregularities with size of ring buffer
  (git-fixes).
- PCI: hv: Use the correct hypercall for unmasking interrupts
  on nested (git-fixes).
- x86/hyperv: Expose hv_map_msi_interrupt() (git-fixes).
- Drivers: hv: Use nested hypercall for post message and signal
  event (git-fixes).
- x86/hyperv: Clean up hv_map/unmap_interrupt() return values
  (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
  (git-fixes).
- PCI: hv: Don't load the driver for baremetal root partition
  (git-fixes).
- net: mana: Fix warnings for missing export.h header inclusion
  (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header
  inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- Drivers: hv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR
  (git-fixes).
- tools/hv: fcopy: Fix incorrect file path conversion (git-fixes).
- Drivers: hv: Select CONFIG_SYSFB only if EFI is enabled
  (git-fixes).
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open
  to prevent IPv6 addrconf (git-fixes).
- commit 6fce57d</changelog>
  <changelog author="tiwai@suse.de" date="1753099202">- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  (CVE-2025-38250 bsc#1246182).
- commit 7979f02</changelog>
  <changelog author="tiwai@suse.de" date="1753099203">- kABI workaround for bluetooth hci_dev changes (CVE-2025-38250
  bsc#1246182).
- commit 9363e74</changelog>
</package>
<package pkgid="eacc997e28118332d3ebaf3fb4403e82768c23bf3f4dddb50ed981b6d48de1c0a7c40fac55f487c7144ee5a164d9782339282e57eae734923cab927aa9d1c872" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.26.1"/>
  <changelog author="msuchanek@suse.de" date="1770120000">- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5</changelog>
  <changelog author="msuchanek@suse.de" date="1770120001">- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b</changelog>
  <changelog author="wqu@suse.com" date="1770206400">- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b</changelog>
  <changelog author="jgross@suse.com" date="1770206401">- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d</changelog>
  <changelog author="tiwai@suse.de" date="1770206402">- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7</changelog>
  <changelog author="jgross@suse.com" date="1770206403">- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91</changelog>
  <changelog author="jgross@suse.com" date="1770206404">- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8</changelog>
  <changelog author="jgross@suse.com" date="1770206405">- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb</changelog>
  <changelog author="jgross@suse.com" date="1770206406">- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e</changelog>
  <changelog author="sjaeckel@suse.de" date="1770206407">- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef</changelog>
</package>
<package pkgid="f63a71a91c82895552a67c7c004ec3e356f0d569b583a3bf77355b3efed3d13789e3da9c4b8a0a2df9f93caf8bae0c1481b220dbe7dc95be1986bde0d6332287" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1"/>
  <changelog author="petr.pavlu@suse.com" date="1772798400">- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09</changelog>
  <changelog author="tiwai@suse.de" date="1772884800">- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327</changelog>
  <changelog author="tiwai@suse.de" date="1772971200">- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773057600">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613</changelog>
  <changelog author="iivanov@suse.de" date="1773057601">- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21</changelog>
  <changelog author="wqu@suse.com" date="1773057602">- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61</changelog>
  <changelog author="ohering@suse.de" date="1773057603">- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057604">- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d</changelog>
  <changelog author="mwilck@suse.com" date="1773057605">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea</changelog>
  <changelog author="mwilck@suse.com" date="1773057606">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6</changelog>
</package>
<package pkgid="32a5d071797b8f4b92e3c58ced076581b307a4bba63bd2e086464fc242803af69f67a1afa4078ec2f30d6d768cb56830e3a4ed768968296038ca87221c8cc949" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="4f1bd1fdf57541f4f3c70076a7843506449c81c85efdc1de5820cb92c46c850fd8e21952507d6e83fe5fd3ec5bc7969709e2f47f0e7b64c3f72c59c44ff6e65d" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.29.1"/>
  <changelog author="pfalcato@suse.de" date="1775649600">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573 CVE-2026-31431).
- commit 429a54b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
</package>
<package pkgid="6b0bd92440e41adc38bd0630e0f8a0604e53fafccac4f01d7dc78ff4c94f56f425752aa8ff1f833211ec44cec18649974cef9849a0c0d9d85aaee407aa553b37" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.30.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
</package>
<package pkgid="29e882bda887a91eb042cd3159f4879a2e0949947952357e80278395b4da9252019f7b35ae609036222b8f3bdcf0c700cac68da9be10d93461667b53fc6a8838" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.31.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
</package>
<package pkgid="443fc3d8f33634b058bdf42cd4d87852ac9cce13ccbcb43bbc168b8910f70b03707e69230e9b4d113ed0ff9bd471998e6d2edc1a2bf466130d895b9ca2a425d5" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.32.1"/>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit f8f4ca2</changelog>
</package>
<package pkgid="3141cd0ba8e77a560967ac87130283f023a56241ebedb2da80a40e906b71c85c939e5b96952ec2cb7ae881c119cf169585186913997a1f8f025ffa2d0f5e41aa" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.33.1"/>
  <changelog author="tiwai@suse.de" date="1779278400">- drivers/base/memory: fix memory block reference leak in poison
  accounting (git-fixes).
- commit c0de598</changelog>
  <changelog author="tonyj@suse.de" date="1779278401">- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
  race (bsc#1260018 CVE-2026-23271).
- commit 1c3b58a</changelog>
  <changelog author="msuchanek@suse.de" date="1779364800">- Kernel-binary: Do not truncate vmlinux when it's the boot image
  Some architectures use vmlinux to boot. Truncating vmlinux on those
  architectures causes signing failure during build. Also if the signing
  was disabled a brokne kernel would be produced.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603</changelog>
  <changelog author="ohering@suse.de" date="1779364801">- net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
- net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
- net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
- net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Validate rx_hash_key_len (git-fixes).
- hv_sock: fix ARM64 support (git-fixes).
- mshv: Fix error handling in mshv_region_pin (CVE-2026-43045 bsc#1263942).
- mshv: Refactor and rename memory region handling functions (CVE-2026-43045 bsc#1263942).
- commit 6cbd7cb</changelog>
  <changelog author="ykaukab@suse.de" date="1779364802">- Refresh
  patches.suse/io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch.
- commit 033df25</changelog>
  <changelog author="alnovak@suse.com" date="1779364803">- scsi: target: iscsi: validate CHAP_R length before base64 decode
  (bsc#1265449).
- commit 04f607e</changelog>
  <changelog author="msuchanek@suse.de" date="1779364804">- kernel-binary: Only apply vmlinux workaround on SLE15 and later
  To create debuginfo for vmlinux the file needs to be present even if
  it's not packaged because a compressed file is packaged insteand.
  To accomplish that the file is marked as ghost in the file list. Then
  rpm does not complain that the file exists but does not package it.
  However, rpm still reserves space for ghost files when installing a
  package. To avoid reserving space for a file that is not used the file
  is truncated.
  That works on SLE 15 but on SLE 12 rpm then fails packaging the
  debuginfo complaiing that extra debuginfo files are present. Limit the
  workaround to SLE 15 and later.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451</changelog>
  <changelog author="ykaukab@suse.de" date="1779451200">- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi-assert.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.suse/ptrace-slightly-saner-get_dumpable-logic.patch
  (CVE-2026-46333 bsc#1265308).
- commit 493e3ed</changelog>
  <changelog author="pfalcato@suse.de" date="1779710400">- Revert "net: skbuff: propagate shared-frag marker through pskb_copy()"
  This reverts commit f71c96250de20f4edf1c4beeb9d8b973a9ad6943.
- commit aaf0bdb</changelog>
  <changelog author="pfalcato@suse.de" date="1779710401">- net: gro: don't merge zcopy skbs (git-fixes).
- net: skbuff: propagate shared-frag marker through frag-transfer
  helpers (CVE-2026-43503 bsc#1265960).
- net: skbuff: preserve shared-frag marker during coalescing
  (CVE-2026-46300 bsc#1265209).
- commit 68f8e8b</changelog>
</package>
<package pkgid="f5664c4a5aaf3d5e0f267be780c5c3fe1980b51d8c612169f597dc0c28d2155961adf98662cd99568181e8b069cce2e4381af2b745e0c39e7f8500115fc94ec1" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.34.1"/>
  <changelog author="tiwai@suse.de" date="1780228800">- USB: serial: cypress_m8: validate interrupt packet headers
  (git-fixes).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (git-fixes).
- USB: serial: omninet: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (git-fixes).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (git-fixes).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (git-fixes).
- USB: serial: belkin_sa: validate interrupt status length
  (git-fixes).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (git-fixes).
- usb: dwc2: Fix use after free in debug code (git-fixes).
- usb: chipidea: core: convert ci_role_switch to local variable
  (git-fixes).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (git-fixes).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (git-fixes).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (git-fixes).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (git-fixes).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (git-fixes).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (git-fixes).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (git-fixes).
- usb: gadget: net2280: Fix double free in probe error path
  (git-fixes).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (git-fixes).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (git-fixes).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (git-fixes).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (git-fixes).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (git-fixes).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (git-fixes).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (git-fixes).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (git-fixes).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (git-fixes).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (git-fixes).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (git-fixes).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (git-fixes).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (git-fixes).
- parport: Fix race between port and client registration
  (git-fixes).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (git-fixes).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (git-fixes).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (git-fixes).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (git-fixes).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (git-fixes).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (git-fixes).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (git-fixes).
- iio: dac: ad5686: fix input raw value check (git-fixes).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (git-fixes).
- iio: dac: max5821: fix return value check in powerdown sync
  (git-fixes).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (git-fixes).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (git-fixes).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (git-fixes).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (git-fixes).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (git-fixes).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (git-fixes).
- iio: gyro: adis16260: fix division by zero in write_raw
  (git-fixes).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback
  (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (git-fixes).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (git-fixes).
- drm/i915: Fix potential UAF in TTM object purge (git-fixes).
- commit b935350</changelog>
  <changelog author="wqu@suse.com" date="1780315200">- btrfs: do not mark inode incompressible after inline attempt
  fails (git-fixes).
- commit b9ec6e8</changelog>
  <changelog author="tiwai@suse.de" date="1780315201">- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (git-fixes).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (git-fixes).
- Input: xpad - fix out-of-bounds access for Share button
  (git-fixes).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (git-fixes).
- commit d66e959</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315202">- net: stmmac: Prevent NULL deref when RX memory exhausted
  (CVE-2026-46110 bsc#1266759).
- net: stmmac: rename STMMAC_GET_ENTRY() -&gt; STMMAC_NEXT_ENTRY()
  (CVE-2026-46110 bsc#1266759).
- net/mlx5: Fix switchdev mode rollback in case of failure
  (CVE-2026-43012 bsc#1264016).
- net/mlx5: lag: Check for LAG device before creating debugfs
  (CVE-2026-43013 bsc#1264011).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  (CVE-2026-31736 bsc#1263908).
- commit 5178a8b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315203">- team: avoid NETDEV_CHANGEMTU event when unregistering slave
  (CVE-2026-43234 bsc#1264409).
- commit 0f4d02d</changelog>
  <changelog author="lduncan@suse.com" date="1780315204">- dm: fix a buffer overflow in ioctl processing (git-fixes).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
  (git-fixes).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
  (git-fixes).
- scsi: mpi3mr: Clear reset history on ready and recheck state
  after timeout (git-fixes).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  (git-fixes).
- commit e61e502</changelog>
  <changelog author="ohering@suse.de" date="1780401600">- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- commit 36776be</changelog>
  <changelog author="tiwai@suse.de" date="1780401601">- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (git-fixes).
- security/keys: fix missed RCU read section on lookup
  (stable-fixes).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
  probe (git-fixes).
- drm/amd/display: Validate payload length and link_index in
  dc_process_dmub_aux_transfer_async (stable-fixes).
- drm/amd/display: Validate GPIO pin LUT table size before
  iterating (stable-fixes).
- drm/amd/display: Fix integer overflow in bios_get_image()
  (stable-fixes).
- drm/amdgpu/vpe: Force collaborate sync after TRAP
  (stable-fixes).
- ALSA: asihpi: Fix potential OOB array access at reading cache
  (stable-fixes).
- HID: quirks: really enable the intended work around for
  appledisplay (git-fixes).
- HID: uclogic: Fix regression of input name assignment
  (git-fixes).
- commit 5fdf340</changelog>
  <changelog author="tiwai@suse.de" date="1780401602">- Bluetooth: serialize accept_q access (git-fixes).
- Refresh
  patches.suse/Bluetooth-fix-UAF-in-l2cap_sock_cleanup_listen-vs-l2.patch.
- commit 649e53f</changelog>
  <changelog author="vkarasulli@suse.de" date="1780401603">- Update
  patches.suse/smb-client-reject-userspace-cifs-spnego-descriptions.patch
  (bsc#1266238 CVE-2026-46243).
- commit 9550304</changelog>
</package>
<package pkgid="6aa23ec85e1f645a43125315961dbb7d67e7c13a606a569311f4374f95d8e68d51e3a627bef02039489f812ca32c0328b978084f197c0298d4ff3fdda1289054" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.35.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780660800">- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (CVE-2026-43026 bsc#1263932).
- commit 8e1a72c</changelog>
  <changelog author="tiwai@suse.de" date="1780920000">- Input: atkbd - skip deactivate for HONOR BCC-N's internal
  keyboard (git-fixes).
- ALSA: seq: dummy: fix UMP event stack overread (git-fixes).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
  on linked streams (git-fixes).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
  (git-fixes).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
  (git-fixes).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
  (git-fixes).
- accel/ivpu: Add bounds checks for firmware log indices
  (git-fixes).
- drm/xe: Clear pending_disable before signaling suspend fence
  (git-fixes).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
  on GFX11 (git-fixes).
- drm/amdkfd: fix NULL dereference in get_queue_ids() (git-fixes).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  (git-fixes).
- drm/amd/display: Reject gpio_bitshift &gt;= 32 in
  bios_parser_get_gpio_pin_info() (git-fixes).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
  (git-fixes).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
  debugfs (git-fixes).
- commit 83128fd</changelog>
  <changelog author="tiwai@suse.de" date="1780920001">- drm/amd/display: Bound VBIOS record-chain walk loops
  (git-fixes).
- commit ec5fd83</changelog>
  <changelog author="iivanov@suse.de" date="1780920002">- perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415 CVE-2026-43150)
- commit 100fc92</changelog>
  <changelog author="tiwai@suse.de" date="1780920003">- ALSA: aloop: Fix peer runtime UAF during format-change stop
  (CVE-2026-46090 bsc#1267531).
- ALSA: aloop: Use guard() for spin locks (CVE-2026-46090
  bsc#1267531).
- commit fedd5b0</changelog>
  <changelog author="jgross@suse.com" date="1780920004">- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (git-fixes).
- commit 02c6192</changelog>
  <changelog author="jgross@suse.com" date="1780920005">- KVM: arm64: Reassign nested_mmus array behind mmu_lock (git-fixes).
- commit e33b225</changelog>
  <changelog author="jgross@suse.com" date="1780920006">- KVM: arm64: Take the SRCU lock for page table walks in fault
  injection and AT emulation (git-fixes).
- commit b3cd8ff</changelog>
  <changelog author="ykaukab@suse.de" date="1780920007">- config: remove DEBUG_FS_DISALLOW_MOUNT
  DEBUG_FS_DISALLOW_MOUNT was removed by the following SUSE commit:
  5697d6916a00 debugfs: Remove broken no-mount mode (bsc#1265186)
  Clean up config files by deleting CONFIG_DEBUG_FS_DISALLOW_MOUNT
- commit 3cc7250</changelog>
  <changelog author="vkarasulli@suse.de" date="1781092800">- Update
  patches.suse/KVM-arm64-Reassign-nested_mmus-array-behind-mmu_lock.patch
  (git-fixes CVE-2026-46317 bsc#1268018).
- Update
  patches.suse/KVM-arm64-vgic-its-Drop-the-translation-cache-refere.patch
  (git-fixes CVE-2026-46316 bsc#1267875).
- commit c70d539</changelog>
</package>
<package pkgid="2ee26e3a2215378335fb1915bad9c85a6957081820fb61e7f7e9d2b57fa4ba208e693cf4a1c571f06a553af0ede485056da898c6ded0d757e8a53b2f0696efb6" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.9.1"/>
  <changelog author="jslaby@suse.cz" date="1768478400">- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b</changelog>
  <changelog author="jslaby@suse.cz" date="1768478401">- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b</changelog>
  <changelog author="nmorey@suse.com" date="1768478402">- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234</changelog>
  <changelog author="mkoutny@suse.com" date="1768478403">- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478404">- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478405">- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478406">- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478407">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27</changelog>
  <changelog author="tiwai@suse.de" date="1768564800">- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b</changelog>
  <changelog author="vkarasulli@suse.de" date="1768564801">- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9</changelog>
</package>
<package pkgid="d71237025e3214d328a344920e26faffe52fce9f681bb722893b75d5ccd715759e154b7457f2528de8370b933a6cf459ce6796dee8ffd90bcaeac05c360d10b0" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.26.1"/>
  <changelog author="msuchanek@suse.de" date="1770120000">- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5</changelog>
  <changelog author="msuchanek@suse.de" date="1770120001">- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b</changelog>
  <changelog author="wqu@suse.com" date="1770206400">- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b</changelog>
  <changelog author="jgross@suse.com" date="1770206401">- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d</changelog>
  <changelog author="tiwai@suse.de" date="1770206402">- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7</changelog>
  <changelog author="jgross@suse.com" date="1770206403">- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91</changelog>
  <changelog author="jgross@suse.com" date="1770206404">- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8</changelog>
  <changelog author="jgross@suse.com" date="1770206405">- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb</changelog>
  <changelog author="jgross@suse.com" date="1770206406">- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e</changelog>
  <changelog author="sjaeckel@suse.de" date="1770206407">- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef</changelog>
</package>
<package pkgid="763d3f256e350ffb904b83b61cdb55e590053bfa1de3d180e7cf4024002fc5fbc08195e1dd76145549aa1ff3dbc5baf7a27d3f7e4b181823f6ef96fbfc701d76" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1"/>
  <changelog author="petr.pavlu@suse.com" date="1772798400">- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09</changelog>
  <changelog author="tiwai@suse.de" date="1772884800">- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327</changelog>
  <changelog author="tiwai@suse.de" date="1772971200">- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773057600">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613</changelog>
  <changelog author="iivanov@suse.de" date="1773057601">- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21</changelog>
  <changelog author="wqu@suse.com" date="1773057602">- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61</changelog>
  <changelog author="ohering@suse.de" date="1773057603">- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057604">- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d</changelog>
  <changelog author="mwilck@suse.com" date="1773057605">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea</changelog>
  <changelog author="mwilck@suse.com" date="1773057606">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6</changelog>
</package>
<package pkgid="ad4ddf6239f4d0a6ed73e59ddc2d8a3cc4f733296af1f22cb35a4143eb37a195a24373262ae77ad3b7f2f9e5581b971fb97d62d98d57fafc5e57f099b81b965b" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="1ac583373f849f8c326adc40962909218e419590f7fd903571c3cfaed54202ccb80d62eab98c913d8b55760596f7f3f1cd2d874e3b7817ce40fe4b393eb1fa65" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.29.1"/>
  <changelog author="pfalcato@suse.de" date="1775649600">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573 CVE-2026-31431).
- commit 429a54b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
</package>
<package pkgid="e4c6f8e864da52b4dd0a6f215945f0d60e0e99fa9207060101d02341b7f14228c673b17fbe921b8107105e009c1362c3c39ef5e027ac6c993d3f70befd21ca52" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.30.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
</package>
<package pkgid="0ad934e6745118401a5f241b0f364732150bad2ea8d01a2f0ad2df0cc664b15c9c4bc0535a91115502590b074d05e7421cb755a9cbaf52a4f946c68686be24f9" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.31.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
</package>
<package pkgid="f28213186bf2ceaf69e8d3de5908b2aa4c6b27b685117064efca6a5bb88c4267b158a6da48530e26094a61b84d1a74710980b5b8237f2bd375809be53e0ff194" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.32.1"/>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit f8f4ca2</changelog>
</package>
<package pkgid="fe4fd717ac306ad0b2a1e1e07a90e33a79b6d72f2484537a740067fd4fb5c127c5eddf40c79b80abdbd104d06e727cd3a9e76e60bd2e2eb18ca78526c8f921e9" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.33.1"/>
  <changelog author="tiwai@suse.de" date="1779278400">- drivers/base/memory: fix memory block reference leak in poison
  accounting (git-fixes).
- commit c0de598</changelog>
  <changelog author="tonyj@suse.de" date="1779278401">- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
  race (bsc#1260018 CVE-2026-23271).
- commit 1c3b58a</changelog>
  <changelog author="msuchanek@suse.de" date="1779364800">- Kernel-binary: Do not truncate vmlinux when it's the boot image
  Some architectures use vmlinux to boot. Truncating vmlinux on those
  architectures causes signing failure during build. Also if the signing
  was disabled a brokne kernel would be produced.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603</changelog>
  <changelog author="ohering@suse.de" date="1779364801">- net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
- net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
- net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
- net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Validate rx_hash_key_len (git-fixes).
- hv_sock: fix ARM64 support (git-fixes).
- mshv: Fix error handling in mshv_region_pin (CVE-2026-43045 bsc#1263942).
- mshv: Refactor and rename memory region handling functions (CVE-2026-43045 bsc#1263942).
- commit 6cbd7cb</changelog>
  <changelog author="ykaukab@suse.de" date="1779364802">- Refresh
  patches.suse/io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch.
- commit 033df25</changelog>
  <changelog author="alnovak@suse.com" date="1779364803">- scsi: target: iscsi: validate CHAP_R length before base64 decode
  (bsc#1265449).
- commit 04f607e</changelog>
  <changelog author="msuchanek@suse.de" date="1779364804">- kernel-binary: Only apply vmlinux workaround on SLE15 and later
  To create debuginfo for vmlinux the file needs to be present even if
  it's not packaged because a compressed file is packaged insteand.
  To accomplish that the file is marked as ghost in the file list. Then
  rpm does not complain that the file exists but does not package it.
  However, rpm still reserves space for ghost files when installing a
  package. To avoid reserving space for a file that is not used the file
  is truncated.
  That works on SLE 15 but on SLE 12 rpm then fails packaging the
  debuginfo complaiing that extra debuginfo files are present. Limit the
  workaround to SLE 15 and later.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451</changelog>
  <changelog author="ykaukab@suse.de" date="1779451200">- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi-assert.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.suse/ptrace-slightly-saner-get_dumpable-logic.patch
  (CVE-2026-46333 bsc#1265308).
- commit 493e3ed</changelog>
  <changelog author="pfalcato@suse.de" date="1779710400">- Revert "net: skbuff: propagate shared-frag marker through pskb_copy()"
  This reverts commit f71c96250de20f4edf1c4beeb9d8b973a9ad6943.
- commit aaf0bdb</changelog>
  <changelog author="pfalcato@suse.de" date="1779710401">- net: gro: don't merge zcopy skbs (git-fixes).
- net: skbuff: propagate shared-frag marker through frag-transfer
  helpers (CVE-2026-43503 bsc#1265960).
- net: skbuff: preserve shared-frag marker during coalescing
  (CVE-2026-46300 bsc#1265209).
- commit 68f8e8b</changelog>
</package>
<package pkgid="ba1d3bf4cd68e79ed0548920c04d97b13d3d94e3fe1be86b9d178d3a3ebd2f9825921ee0b4b44ff3810d106dc36d1def0afabfab97e2c31812f172a0402a7338" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.34.1"/>
  <changelog author="tiwai@suse.de" date="1780228800">- USB: serial: cypress_m8: validate interrupt packet headers
  (git-fixes).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (git-fixes).
- USB: serial: omninet: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (git-fixes).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (git-fixes).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (git-fixes).
- USB: serial: belkin_sa: validate interrupt status length
  (git-fixes).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (git-fixes).
- usb: dwc2: Fix use after free in debug code (git-fixes).
- usb: chipidea: core: convert ci_role_switch to local variable
  (git-fixes).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (git-fixes).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (git-fixes).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (git-fixes).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (git-fixes).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (git-fixes).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (git-fixes).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (git-fixes).
- usb: gadget: net2280: Fix double free in probe error path
  (git-fixes).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (git-fixes).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (git-fixes).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (git-fixes).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (git-fixes).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (git-fixes).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (git-fixes).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (git-fixes).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (git-fixes).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (git-fixes).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (git-fixes).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (git-fixes).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (git-fixes).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (git-fixes).
- parport: Fix race between port and client registration
  (git-fixes).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (git-fixes).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (git-fixes).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (git-fixes).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (git-fixes).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (git-fixes).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (git-fixes).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (git-fixes).
- iio: dac: ad5686: fix input raw value check (git-fixes).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (git-fixes).
- iio: dac: max5821: fix return value check in powerdown sync
  (git-fixes).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (git-fixes).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (git-fixes).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (git-fixes).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (git-fixes).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (git-fixes).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (git-fixes).
- iio: gyro: adis16260: fix division by zero in write_raw
  (git-fixes).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback
  (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (git-fixes).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (git-fixes).
- drm/i915: Fix potential UAF in TTM object purge (git-fixes).
- commit b935350</changelog>
  <changelog author="wqu@suse.com" date="1780315200">- btrfs: do not mark inode incompressible after inline attempt
  fails (git-fixes).
- commit b9ec6e8</changelog>
  <changelog author="tiwai@suse.de" date="1780315201">- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (git-fixes).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (git-fixes).
- Input: xpad - fix out-of-bounds access for Share button
  (git-fixes).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (git-fixes).
- commit d66e959</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315202">- net: stmmac: Prevent NULL deref when RX memory exhausted
  (CVE-2026-46110 bsc#1266759).
- net: stmmac: rename STMMAC_GET_ENTRY() -&gt; STMMAC_NEXT_ENTRY()
  (CVE-2026-46110 bsc#1266759).
- net/mlx5: Fix switchdev mode rollback in case of failure
  (CVE-2026-43012 bsc#1264016).
- net/mlx5: lag: Check for LAG device before creating debugfs
  (CVE-2026-43013 bsc#1264011).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  (CVE-2026-31736 bsc#1263908).
- commit 5178a8b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315203">- team: avoid NETDEV_CHANGEMTU event when unregistering slave
  (CVE-2026-43234 bsc#1264409).
- commit 0f4d02d</changelog>
  <changelog author="lduncan@suse.com" date="1780315204">- dm: fix a buffer overflow in ioctl processing (git-fixes).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
  (git-fixes).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
  (git-fixes).
- scsi: mpi3mr: Clear reset history on ready and recheck state
  after timeout (git-fixes).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  (git-fixes).
- commit e61e502</changelog>
  <changelog author="ohering@suse.de" date="1780401600">- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- commit 36776be</changelog>
  <changelog author="tiwai@suse.de" date="1780401601">- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (git-fixes).
- security/keys: fix missed RCU read section on lookup
  (stable-fixes).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
  probe (git-fixes).
- drm/amd/display: Validate payload length and link_index in
  dc_process_dmub_aux_transfer_async (stable-fixes).
- drm/amd/display: Validate GPIO pin LUT table size before
  iterating (stable-fixes).
- drm/amd/display: Fix integer overflow in bios_get_image()
  (stable-fixes).
- drm/amdgpu/vpe: Force collaborate sync after TRAP
  (stable-fixes).
- ALSA: asihpi: Fix potential OOB array access at reading cache
  (stable-fixes).
- HID: quirks: really enable the intended work around for
  appledisplay (git-fixes).
- HID: uclogic: Fix regression of input name assignment
  (git-fixes).
- commit 5fdf340</changelog>
  <changelog author="tiwai@suse.de" date="1780401602">- Bluetooth: serialize accept_q access (git-fixes).
- Refresh
  patches.suse/Bluetooth-fix-UAF-in-l2cap_sock_cleanup_listen-vs-l2.patch.
- commit 649e53f</changelog>
  <changelog author="vkarasulli@suse.de" date="1780401603">- Update
  patches.suse/smb-client-reject-userspace-cifs-spnego-descriptions.patch
  (bsc#1266238 CVE-2026-46243).
- commit 9550304</changelog>
</package>
<package pkgid="552a1b25df7296d960fe6baab5c627d3d5dae2958549489373b1f9f1f4a898ac0a19c5fd5e380464109e880e5c087f92135a2900cce46a3debcbf9dd98db4225" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.35.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780660800">- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (CVE-2026-43026 bsc#1263932).
- commit 8e1a72c</changelog>
  <changelog author="tiwai@suse.de" date="1780920000">- Input: atkbd - skip deactivate for HONOR BCC-N's internal
  keyboard (git-fixes).
- ALSA: seq: dummy: fix UMP event stack overread (git-fixes).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
  on linked streams (git-fixes).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
  (git-fixes).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
  (git-fixes).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
  (git-fixes).
- accel/ivpu: Add bounds checks for firmware log indices
  (git-fixes).
- drm/xe: Clear pending_disable before signaling suspend fence
  (git-fixes).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
  on GFX11 (git-fixes).
- drm/amdkfd: fix NULL dereference in get_queue_ids() (git-fixes).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  (git-fixes).
- drm/amd/display: Reject gpio_bitshift &gt;= 32 in
  bios_parser_get_gpio_pin_info() (git-fixes).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
  (git-fixes).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
  debugfs (git-fixes).
- commit 83128fd</changelog>
  <changelog author="tiwai@suse.de" date="1780920001">- drm/amd/display: Bound VBIOS record-chain walk loops
  (git-fixes).
- commit ec5fd83</changelog>
  <changelog author="iivanov@suse.de" date="1780920002">- perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415 CVE-2026-43150)
- commit 100fc92</changelog>
  <changelog author="tiwai@suse.de" date="1780920003">- ALSA: aloop: Fix peer runtime UAF during format-change stop
  (CVE-2026-46090 bsc#1267531).
- ALSA: aloop: Use guard() for spin locks (CVE-2026-46090
  bsc#1267531).
- commit fedd5b0</changelog>
  <changelog author="jgross@suse.com" date="1780920004">- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (git-fixes).
- commit 02c6192</changelog>
  <changelog author="jgross@suse.com" date="1780920005">- KVM: arm64: Reassign nested_mmus array behind mmu_lock (git-fixes).
- commit e33b225</changelog>
  <changelog author="jgross@suse.com" date="1780920006">- KVM: arm64: Take the SRCU lock for page table walks in fault
  injection and AT emulation (git-fixes).
- commit b3cd8ff</changelog>
  <changelog author="ykaukab@suse.de" date="1780920007">- config: remove DEBUG_FS_DISALLOW_MOUNT
  DEBUG_FS_DISALLOW_MOUNT was removed by the following SUSE commit:
  5697d6916a00 debugfs: Remove broken no-mount mode (bsc#1265186)
  Clean up config files by deleting CONFIG_DEBUG_FS_DISALLOW_MOUNT
- commit 3cc7250</changelog>
  <changelog author="vkarasulli@suse.de" date="1781092800">- Update
  patches.suse/KVM-arm64-Reassign-nested_mmus-array-behind-mmu_lock.patch
  (git-fixes CVE-2026-46317 bsc#1268018).
- Update
  patches.suse/KVM-arm64-vgic-its-Drop-the-translation-cache-refere.patch
  (git-fixes CVE-2026-46316 bsc#1267875).
- commit c70d539</changelog>
</package>
<package pkgid="05e7bfed8f4f9f45206330ee0714843e367d01a95e7528bc7ea58ddbad8ca821cc9eec38cebe34af9aaab9f16d59157e03e6b867f8428edd69715ab90e7e8988" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.5.1"/>
  <changelog author="pfalcato@suse.de" date="1754481600">- nvme-tcp: fix selinux denied when calling sock_sendmsg
  (bsc#1247497).
- commit 6082643</changelog>
  <changelog author="dsterba@suse.com" date="1754568000">- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374)
- commit cb82edb</changelog>
  <changelog author="sjaeckel@suse.de" date="1754654400">- smc: Fix various oops due to inet_sock type confusion
  (CVE-2025-38475 bsc#1247308).
- commit 05e8074</changelog>
  <changelog author="pfalcato@suse.de" date="1754654401">- tls: always refresh the queue when reading sock (CVE-2025-38471
  bsc#1247450).
- commit 2bcb640</changelog>
  <changelog author="krisman@suse.de" date="1754654402">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
  (CVE-2025-38453 bsc#1247234).
- commit 171360a</changelog>
  <changelog author="krisman@suse.de" date="1754913600">- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred
  (CVE-2025-38453 bsc#1247234).
  Conflicts:
  series.conf
- commit 909d7fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913601">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 5c830c5</changelog>
  <changelog author="msuchanek@suse.de" date="1755172800">- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41</changelog>
  <changelog author="tiwai@suse.de" date="1755518400">- sched/psi: Fix psi_seq initialization (bsc#1248155).
- commit 2dd3707</changelog>
  <changelog author="tzimmermann@suse.com" date="1757332800">- Fix OOB access in "drm/amdgpu: read back register after written for VCN v4.0.5" (bsc#1249251)
- commit 3545bbd</changelog>
</package>
<package pkgid="b6b63070745fb846686d207ab1178d678b4370e31cc17249267e71417cb9ac08126bc549d5ec7a13bbb7310e71e4e482db62942eb809a045857332756a186f42" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.6.1"/>
  <changelog author="vkarasulli@suse.de" date="1760616000">- iommu/amd: Fix alias device DTE setting (git-fixes).
- iommu/arm-smmu-v3: Fix smmu_domain-&gt;nr_ats_masters decrement
  (git-fixes).
- iommu/amd: Enable PASID and ATS capabilities in the correct
  order (git-fixes).
- commit 6e3bf58</changelog>
  <changelog author="lduncan@suse.com" date="1760616001">- scsi: mpi3mr: Update driver version to 8.15.0.5.50
  (bsc#1251186).
- scsi: mpi3mr: Fix premature TM timeouts on virtual drives
  (bsc#1251186).
- scsi: mpi3mr: Update MPI headers to revision 37 (bsc#1251186).
- scsi: mpi3mr: Fix I/O failures during controller reset
  (bsc#1251186).
- scsi: mpi3mr: Fix controller init failure on fault during
  queue creation (bsc#1251186).
- scsi: mpi3mr: Fix device loss during enclosure reboot due to
  zero link speed (bsc#1251186).
- scsi: mpi3mr: Event processing debug improvement (bsc#1251186).
- commit 15f7129</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1760702400">- skmsg: Return copied bytes in sk_msg_memcopy_from_iter
  (bsc#1250650).
- commit 6650ce1</changelog>
  <changelog author="trenn@suse.de" date="1760702401">- cpufreq: intel_pstate: Fix object lifecycle issue in
  update_qos_request() (git-fixes).
- commit 330c599</changelog>
  <changelog author="trenn@suse.de" date="1760702402">- cpufreq: sun50i: prevent out-of-bounds access (git-fixes).
- commit 815165b</changelog>
  <changelog author="trenn@suse.de" date="1760702403">- cpufreq: armada-8k: make both cpu masks static (git-fixes).
- commit 3ab6135</changelog>
  <changelog author="trenn@suse.de" date="1760702404">- cpufreq: armada-8k: Fix off by one in
  armada_8k_cpufreq_free_table() (stable-fixes).
- commit 1b00366</changelog>
  <changelog author="trenn@suse.de" date="1760702405">- cpufreq: scmi: Account for malformed DT in
  scmi_dev_used_by_cpus() (git-fixes).
- commit e9a9ed4</changelog>
  <changelog author="trenn@suse.de" date="1760702406">- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
  (stable-fixes).
- commit 4f5afab</changelog>
  <changelog author="trenn@suse.de" date="1760702407">- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition
  latency (stable-fixes git-fixes).
- commit 41821ef</changelog>
</package>
<package pkgid="d5651c6975f8d05277feabfa4610674f0f5d0a9ecb520df3e091faed11502eeecbd2180bf29bb2ed6194c0cad4c98bc3f6662fdb584bd03c98b06940f0dc8c81" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.7.1"/>
  <changelog author="nmorey@suse.com" date="1762344000">- RDMA/irdma: Fix SD index calculation (git-fixes)
- commit 0aad166</changelog>
  <changelog author="nmorey@suse.com" date="1762344001">- RDMA/irdma: Set irdma_cq cq_num field during CQ create (git-fixes)
- commit be2c8f8</changelog>
  <changelog author="nmorey@suse.com" date="1762344002">- RDMA/hns: Fix recv CQ and QP cache affinity (git-fixes)
- commit 61f6ae6</changelog>
  <changelog author="nmorey@suse.com" date="1762344003">- RDMA/hns: Fix the modification of max_send_sge (git-fixes)
- commit f143d8d</changelog>
  <changelog author="nmorey@suse.com" date="1762344004">- RDMA/hns: Fix wrong WQE data when QP wraps around (git-fixes)
- commit 6ea0097</changelog>
  <changelog author="msuchanek@suse.de" date="1762344005">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
  <changelog author="jack@suse.cz" date="1762344006">- nbd: restrict sockets to TCP and UDP (bsc#1252774
  CVE-2025-40080).
- commit 3fbbb49</changelog>
  <changelog author="mkoutny@suse.com" date="1762344007">- cpuset: fix failure to enable isolated partition when containing
  isolcpus (bsc#1241166).
- commit 9093c25</changelog>
  <changelog author="mkoutny@suse.com" date="1762344008">- cpuset: Use new excpus for nocpu error check when enabling
  root partition (bsc#1241166).
- cgroup/cpuset: Remove remote_partition_check() &amp; make
  update_cpumasks_hier() handle remote partition (bsc#1241166).
- commit d4c3a1b</changelog>
  <changelog author="vbabka@suse.cz" date="1762430400">- mm/ksm: fix flag-dropping behavior in ksm_madvise
  (CVE-2025-40040 bsc#1252780).
- commit 095dc3d</changelog>
</package>
<package pkgid="41feab542b37913156672df09afc7dc329f5f772e29d151b4e26c45884d6c4ff374a9a05a08820288ffccd79b9f71e1c10b9371be0f9b8aef776781734715ec1" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.8.1"/>
  <changelog author="iivanov@suse.de" date="1765281600">- arm64: zynqmp: Disable coresight by default (git-fixes)
- commit 11d63c1</changelog>
  <changelog author="iivanov@suse.de" date="1765281601">- arm64: zynqmp: Revert usb node drive strength and slew rate for (git-fixes)
- commit 2f61b01</changelog>
  <changelog author="iivanov@suse.de" date="1765281602">- arm64: mte: Do not warn if the page is already tagged in (git-fixes)
- commit 52c9758</changelog>
  <changelog author="osalvador@suse.de" date="1765281603">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431
  CVE-2025-38085 bsc#1245499).
- commit 50d9103</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281604">- smb: Log an error when close_all_cached_dirs fails (bsc#1246328,
  CVE-2025-38321).
- commit c5a4d00</changelog>
  <changelog author="dsterba@suse.com" date="1765281605">- mount: handle NULL values in mnt_ns_release() (bsc#1254308)
- commit 08256f9</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281606">- smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256,
  CVE-2025-38728).
- commit 0f61287</changelog>
  <changelog author="tiwai@suse.de" date="1765368000">- i2c: amd-mp2: fix reference leak in MP2 PCI device (git-fixes).
- i2c: i2c.h: fix a bad kernel-doc line (git-fixes).
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd
  led (git-fixes).
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
  (git-fixes).
- commit 73f17dd</changelog>
  <changelog author="osalvador@suse.de" date="1765368001">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431 CVE-2025-38084 bsc#1245498).
- commit ae3cd1c</changelog>
  <changelog author="ailiop@suse.com" date="1765368002">- exfat: fix refcount leak in exfat_find (git-fixes).
- commit eb1ffd0</changelog>
</package>
<package pkgid="8df32bb3ed95657b0b2136abc9b2b73062ccc0dcf68572cb74d029da45f3ecd2eb4cc7b26cee22410f49f9d53f938d67ae7ed8df62773a1c38fc5a62ad7a0863" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.9.1"/>
  <changelog author="jslaby@suse.cz" date="1768478400">- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b</changelog>
  <changelog author="jslaby@suse.cz" date="1768478401">- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b</changelog>
  <changelog author="nmorey@suse.com" date="1768478402">- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234</changelog>
  <changelog author="mkoutny@suse.com" date="1768478403">- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478404">- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478405">- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478406">- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478407">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27</changelog>
  <changelog author="tiwai@suse.de" date="1768564800">- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b</changelog>
  <changelog author="vkarasulli@suse.de" date="1768564801">- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9</changelog>
</package>
<package pkgid="2c0eb5f7dab034d43410b26b226da06d2d11dd3682a779ea104a22303f30c7ae13da1a005ecba40c1553cbd9409d775b1e0ab4f3061baa34137a471bdd6801c4" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.26.1"/>
  <changelog author="msuchanek@suse.de" date="1770120000">- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5</changelog>
  <changelog author="msuchanek@suse.de" date="1770120001">- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b</changelog>
  <changelog author="wqu@suse.com" date="1770206400">- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b</changelog>
  <changelog author="jgross@suse.com" date="1770206401">- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d</changelog>
  <changelog author="tiwai@suse.de" date="1770206402">- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7</changelog>
  <changelog author="jgross@suse.com" date="1770206403">- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91</changelog>
  <changelog author="jgross@suse.com" date="1770206404">- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8</changelog>
  <changelog author="jgross@suse.com" date="1770206405">- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb</changelog>
  <changelog author="jgross@suse.com" date="1770206406">- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e</changelog>
  <changelog author="sjaeckel@suse.de" date="1770206407">- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef</changelog>
</package>
<package pkgid="dbdb31f20805e42ab05cce6f31999864198980feafaf88eea3c290cc780dac83751d3980dce62345f5260964cb7b3eaf9488ae530be79245980f69931e53ff52" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1"/>
  <changelog author="petr.pavlu@suse.com" date="1772798400">- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09</changelog>
  <changelog author="tiwai@suse.de" date="1772884800">- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327</changelog>
  <changelog author="tiwai@suse.de" date="1772971200">- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773057600">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613</changelog>
  <changelog author="iivanov@suse.de" date="1773057601">- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21</changelog>
  <changelog author="wqu@suse.com" date="1773057602">- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61</changelog>
  <changelog author="ohering@suse.de" date="1773057603">- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057604">- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d</changelog>
  <changelog author="mwilck@suse.com" date="1773057605">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea</changelog>
  <changelog author="mwilck@suse.com" date="1773057606">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6</changelog>
</package>
<package pkgid="9af174b456dcbe0e6b96cf886e97dbde456e8fa8b0c1731bc9aa81f647325f0cc3c8fb60683e38ea3cbdb76e74bb8492d20e53a844870294088b5c9b1550e827" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="b2be7badf313f59d3b2cb98330ebacbea84cd9b9aca9f4f5f91f525205bdd06a278aec92293c459b2c84b67ff848b30c831a2a5e6b852e6755fe16a7153ade74" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.29.1"/>
  <changelog author="pfalcato@suse.de" date="1775649600">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573 CVE-2026-31431).
- commit 429a54b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
</package>
<package pkgid="e3d24a4fff4c4a660192e08881d373fa949adea293910903ba02421c9591a17ecd032f395e85c5274e652cdde76fb15112d0dcffef2ab725b19b0202b48aa414" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.30.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
</package>
<package pkgid="35d8e38d15d9c6eeba98f05f862e5dd3db85eafe6e391f4c39912aab5923720f25c83dd906a43c3242736fcb31bec15690f63be7c749ee40a091d4a1d8bf28fb" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.31.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
</package>
<package pkgid="21568218e85debe3db9f5f11d2739dedb1f0094847080d8ccab5458b781bd4a6a73eeb2b44df86e5d3ed55aa925f1fa50388459c47b5aa15a757a8d8db2eb438" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.32.1"/>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit f8f4ca2</changelog>
</package>
<package pkgid="42819aca3e90bbec2ed3746a32d463c0b33a3b70f038875e34d388918f80e3f11658f80ace8774a5f08e4175218237598e54282841b19cd358e6ba8ae389ba57" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.33.1"/>
  <changelog author="tiwai@suse.de" date="1779278400">- drivers/base/memory: fix memory block reference leak in poison
  accounting (git-fixes).
- commit c0de598</changelog>
  <changelog author="tonyj@suse.de" date="1779278401">- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
  race (bsc#1260018 CVE-2026-23271).
- commit 1c3b58a</changelog>
  <changelog author="msuchanek@suse.de" date="1779364800">- Kernel-binary: Do not truncate vmlinux when it's the boot image
  Some architectures use vmlinux to boot. Truncating vmlinux on those
  architectures causes signing failure during build. Also if the signing
  was disabled a brokne kernel would be produced.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603</changelog>
  <changelog author="ohering@suse.de" date="1779364801">- net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
- net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
- net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
- net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Validate rx_hash_key_len (git-fixes).
- hv_sock: fix ARM64 support (git-fixes).
- mshv: Fix error handling in mshv_region_pin (CVE-2026-43045 bsc#1263942).
- mshv: Refactor and rename memory region handling functions (CVE-2026-43045 bsc#1263942).
- commit 6cbd7cb</changelog>
  <changelog author="ykaukab@suse.de" date="1779364802">- Refresh
  patches.suse/io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch.
- commit 033df25</changelog>
  <changelog author="alnovak@suse.com" date="1779364803">- scsi: target: iscsi: validate CHAP_R length before base64 decode
  (bsc#1265449).
- commit 04f607e</changelog>
  <changelog author="msuchanek@suse.de" date="1779364804">- kernel-binary: Only apply vmlinux workaround on SLE15 and later
  To create debuginfo for vmlinux the file needs to be present even if
  it's not packaged because a compressed file is packaged insteand.
  To accomplish that the file is marked as ghost in the file list. Then
  rpm does not complain that the file exists but does not package it.
  However, rpm still reserves space for ghost files when installing a
  package. To avoid reserving space for a file that is not used the file
  is truncated.
  That works on SLE 15 but on SLE 12 rpm then fails packaging the
  debuginfo complaiing that extra debuginfo files are present. Limit the
  workaround to SLE 15 and later.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451</changelog>
  <changelog author="ykaukab@suse.de" date="1779451200">- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi-assert.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.suse/ptrace-slightly-saner-get_dumpable-logic.patch
  (CVE-2026-46333 bsc#1265308).
- commit 493e3ed</changelog>
  <changelog author="pfalcato@suse.de" date="1779710400">- Revert "net: skbuff: propagate shared-frag marker through pskb_copy()"
  This reverts commit f71c96250de20f4edf1c4beeb9d8b973a9ad6943.
- commit aaf0bdb</changelog>
  <changelog author="pfalcato@suse.de" date="1779710401">- net: gro: don't merge zcopy skbs (git-fixes).
- net: skbuff: propagate shared-frag marker through frag-transfer
  helpers (CVE-2026-43503 bsc#1265960).
- net: skbuff: preserve shared-frag marker during coalescing
  (CVE-2026-46300 bsc#1265209).
- commit 68f8e8b</changelog>
</package>
<package pkgid="c9c07de5970f6fe9f652680e2488208ede41f8cff96c7967ecf5b2f7363b17acd8cd07eb6b79bb3d5f88cb23a23c8bab7341d60509b32037b3c1c3779af58f67" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.34.1"/>
  <changelog author="tiwai@suse.de" date="1780228800">- USB: serial: cypress_m8: validate interrupt packet headers
  (git-fixes).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (git-fixes).
- USB: serial: omninet: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (git-fixes).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (git-fixes).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (git-fixes).
- USB: serial: belkin_sa: validate interrupt status length
  (git-fixes).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (git-fixes).
- usb: dwc2: Fix use after free in debug code (git-fixes).
- usb: chipidea: core: convert ci_role_switch to local variable
  (git-fixes).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (git-fixes).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (git-fixes).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (git-fixes).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (git-fixes).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (git-fixes).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (git-fixes).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (git-fixes).
- usb: gadget: net2280: Fix double free in probe error path
  (git-fixes).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (git-fixes).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (git-fixes).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (git-fixes).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (git-fixes).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (git-fixes).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (git-fixes).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (git-fixes).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (git-fixes).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (git-fixes).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (git-fixes).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (git-fixes).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (git-fixes).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (git-fixes).
- parport: Fix race between port and client registration
  (git-fixes).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (git-fixes).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (git-fixes).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (git-fixes).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (git-fixes).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (git-fixes).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (git-fixes).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (git-fixes).
- iio: dac: ad5686: fix input raw value check (git-fixes).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (git-fixes).
- iio: dac: max5821: fix return value check in powerdown sync
  (git-fixes).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (git-fixes).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (git-fixes).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (git-fixes).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (git-fixes).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (git-fixes).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (git-fixes).
- iio: gyro: adis16260: fix division by zero in write_raw
  (git-fixes).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback
  (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (git-fixes).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (git-fixes).
- drm/i915: Fix potential UAF in TTM object purge (git-fixes).
- commit b935350</changelog>
  <changelog author="wqu@suse.com" date="1780315200">- btrfs: do not mark inode incompressible after inline attempt
  fails (git-fixes).
- commit b9ec6e8</changelog>
  <changelog author="tiwai@suse.de" date="1780315201">- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (git-fixes).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (git-fixes).
- Input: xpad - fix out-of-bounds access for Share button
  (git-fixes).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (git-fixes).
- commit d66e959</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315202">- net: stmmac: Prevent NULL deref when RX memory exhausted
  (CVE-2026-46110 bsc#1266759).
- net: stmmac: rename STMMAC_GET_ENTRY() -&gt; STMMAC_NEXT_ENTRY()
  (CVE-2026-46110 bsc#1266759).
- net/mlx5: Fix switchdev mode rollback in case of failure
  (CVE-2026-43012 bsc#1264016).
- net/mlx5: lag: Check for LAG device before creating debugfs
  (CVE-2026-43013 bsc#1264011).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  (CVE-2026-31736 bsc#1263908).
- commit 5178a8b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315203">- team: avoid NETDEV_CHANGEMTU event when unregistering slave
  (CVE-2026-43234 bsc#1264409).
- commit 0f4d02d</changelog>
  <changelog author="lduncan@suse.com" date="1780315204">- dm: fix a buffer overflow in ioctl processing (git-fixes).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
  (git-fixes).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
  (git-fixes).
- scsi: mpi3mr: Clear reset history on ready and recheck state
  after timeout (git-fixes).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  (git-fixes).
- commit e61e502</changelog>
  <changelog author="ohering@suse.de" date="1780401600">- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- commit 36776be</changelog>
  <changelog author="tiwai@suse.de" date="1780401601">- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (git-fixes).
- security/keys: fix missed RCU read section on lookup
  (stable-fixes).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
  probe (git-fixes).
- drm/amd/display: Validate payload length and link_index in
  dc_process_dmub_aux_transfer_async (stable-fixes).
- drm/amd/display: Validate GPIO pin LUT table size before
  iterating (stable-fixes).
- drm/amd/display: Fix integer overflow in bios_get_image()
  (stable-fixes).
- drm/amdgpu/vpe: Force collaborate sync after TRAP
  (stable-fixes).
- ALSA: asihpi: Fix potential OOB array access at reading cache
  (stable-fixes).
- HID: quirks: really enable the intended work around for
  appledisplay (git-fixes).
- HID: uclogic: Fix regression of input name assignment
  (git-fixes).
- commit 5fdf340</changelog>
  <changelog author="tiwai@suse.de" date="1780401602">- Bluetooth: serialize accept_q access (git-fixes).
- Refresh
  patches.suse/Bluetooth-fix-UAF-in-l2cap_sock_cleanup_listen-vs-l2.patch.
- commit 649e53f</changelog>
  <changelog author="vkarasulli@suse.de" date="1780401603">- Update
  patches.suse/smb-client-reject-userspace-cifs-spnego-descriptions.patch
  (bsc#1266238 CVE-2026-46243).
- commit 9550304</changelog>
</package>
<package pkgid="4174066ebe1adef017c475eb923582c1047a2ed73ff56e9f5cdd2b6a84a55359a2e599178f263dc93fbb78748c50d112968299e3ae499beb192023f2e461f776" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.35.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780660800">- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (CVE-2026-43026 bsc#1263932).
- commit 8e1a72c</changelog>
  <changelog author="tiwai@suse.de" date="1780920000">- Input: atkbd - skip deactivate for HONOR BCC-N's internal
  keyboard (git-fixes).
- ALSA: seq: dummy: fix UMP event stack overread (git-fixes).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
  on linked streams (git-fixes).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
  (git-fixes).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
  (git-fixes).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
  (git-fixes).
- accel/ivpu: Add bounds checks for firmware log indices
  (git-fixes).
- drm/xe: Clear pending_disable before signaling suspend fence
  (git-fixes).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
  on GFX11 (git-fixes).
- drm/amdkfd: fix NULL dereference in get_queue_ids() (git-fixes).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  (git-fixes).
- drm/amd/display: Reject gpio_bitshift &gt;= 32 in
  bios_parser_get_gpio_pin_info() (git-fixes).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
  (git-fixes).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
  debugfs (git-fixes).
- commit 83128fd</changelog>
  <changelog author="tiwai@suse.de" date="1780920001">- drm/amd/display: Bound VBIOS record-chain walk loops
  (git-fixes).
- commit ec5fd83</changelog>
  <changelog author="iivanov@suse.de" date="1780920002">- perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415 CVE-2026-43150)
- commit 100fc92</changelog>
  <changelog author="tiwai@suse.de" date="1780920003">- ALSA: aloop: Fix peer runtime UAF during format-change stop
  (CVE-2026-46090 bsc#1267531).
- ALSA: aloop: Use guard() for spin locks (CVE-2026-46090
  bsc#1267531).
- commit fedd5b0</changelog>
  <changelog author="jgross@suse.com" date="1780920004">- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (git-fixes).
- commit 02c6192</changelog>
  <changelog author="jgross@suse.com" date="1780920005">- KVM: arm64: Reassign nested_mmus array behind mmu_lock (git-fixes).
- commit e33b225</changelog>
  <changelog author="jgross@suse.com" date="1780920006">- KVM: arm64: Take the SRCU lock for page table walks in fault
  injection and AT emulation (git-fixes).
- commit b3cd8ff</changelog>
  <changelog author="ykaukab@suse.de" date="1780920007">- config: remove DEBUG_FS_DISALLOW_MOUNT
  DEBUG_FS_DISALLOW_MOUNT was removed by the following SUSE commit:
  5697d6916a00 debugfs: Remove broken no-mount mode (bsc#1265186)
  Clean up config files by deleting CONFIG_DEBUG_FS_DISALLOW_MOUNT
- commit 3cc7250</changelog>
  <changelog author="vkarasulli@suse.de" date="1781092800">- Update
  patches.suse/KVM-arm64-Reassign-nested_mmus-array-behind-mmu_lock.patch
  (git-fixes CVE-2026-46317 bsc#1268018).
- Update
  patches.suse/KVM-arm64-vgic-its-Drop-the-translation-cache-refere.patch
  (git-fixes CVE-2026-46316 bsc#1267875).
- commit c70d539</changelog>
</package>
<package pkgid="19abc95e6f8c216eeeb59433c5164fd363b66e9548f6e16f0b5f754ae63958cd2cc53a3a36b8f5bb21906b1403256668331b7bdc920c00a771e6b341d197c26f" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.5.1"/>
  <changelog author="pfalcato@suse.de" date="1754481600">- nvme-tcp: fix selinux denied when calling sock_sendmsg
  (bsc#1247497).
- commit 6082643</changelog>
  <changelog author="dsterba@suse.com" date="1754568000">- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374)
- commit cb82edb</changelog>
  <changelog author="sjaeckel@suse.de" date="1754654400">- smc: Fix various oops due to inet_sock type confusion
  (CVE-2025-38475 bsc#1247308).
- commit 05e8074</changelog>
  <changelog author="pfalcato@suse.de" date="1754654401">- tls: always refresh the queue when reading sock (CVE-2025-38471
  bsc#1247450).
- commit 2bcb640</changelog>
  <changelog author="krisman@suse.de" date="1754654402">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
  (CVE-2025-38453 bsc#1247234).
- commit 171360a</changelog>
  <changelog author="krisman@suse.de" date="1754913600">- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred
  (CVE-2025-38453 bsc#1247234).
  Conflicts:
  series.conf
- commit 909d7fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913601">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 5c830c5</changelog>
  <changelog author="msuchanek@suse.de" date="1755172800">- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41</changelog>
  <changelog author="tiwai@suse.de" date="1755518400">- sched/psi: Fix psi_seq initialization (bsc#1248155).
- commit 2dd3707</changelog>
  <changelog author="tzimmermann@suse.com" date="1757332800">- Fix OOB access in "drm/amdgpu: read back register after written for VCN v4.0.5" (bsc#1249251)
- commit 3545bbd</changelog>
</package>
<package pkgid="33d4c11ee2874aea0ee289f4c3f0856f02ebbd1f1acdc06f6ea28ac5b17035d39e704aaadfb3bbbefd366fae07b1d82eb489b32084ecfb081576ea089d381f72" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.6.1"/>
  <changelog author="vkarasulli@suse.de" date="1760616000">- iommu/amd: Fix alias device DTE setting (git-fixes).
- iommu/arm-smmu-v3: Fix smmu_domain-&gt;nr_ats_masters decrement
  (git-fixes).
- iommu/amd: Enable PASID and ATS capabilities in the correct
  order (git-fixes).
- commit 6e3bf58</changelog>
  <changelog author="lduncan@suse.com" date="1760616001">- scsi: mpi3mr: Update driver version to 8.15.0.5.50
  (bsc#1251186).
- scsi: mpi3mr: Fix premature TM timeouts on virtual drives
  (bsc#1251186).
- scsi: mpi3mr: Update MPI headers to revision 37 (bsc#1251186).
- scsi: mpi3mr: Fix I/O failures during controller reset
  (bsc#1251186).
- scsi: mpi3mr: Fix controller init failure on fault during
  queue creation (bsc#1251186).
- scsi: mpi3mr: Fix device loss during enclosure reboot due to
  zero link speed (bsc#1251186).
- scsi: mpi3mr: Event processing debug improvement (bsc#1251186).
- commit 15f7129</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1760702400">- skmsg: Return copied bytes in sk_msg_memcopy_from_iter
  (bsc#1250650).
- commit 6650ce1</changelog>
  <changelog author="trenn@suse.de" date="1760702401">- cpufreq: intel_pstate: Fix object lifecycle issue in
  update_qos_request() (git-fixes).
- commit 330c599</changelog>
  <changelog author="trenn@suse.de" date="1760702402">- cpufreq: sun50i: prevent out-of-bounds access (git-fixes).
- commit 815165b</changelog>
  <changelog author="trenn@suse.de" date="1760702403">- cpufreq: armada-8k: make both cpu masks static (git-fixes).
- commit 3ab6135</changelog>
  <changelog author="trenn@suse.de" date="1760702404">- cpufreq: armada-8k: Fix off by one in
  armada_8k_cpufreq_free_table() (stable-fixes).
- commit 1b00366</changelog>
  <changelog author="trenn@suse.de" date="1760702405">- cpufreq: scmi: Account for malformed DT in
  scmi_dev_used_by_cpus() (git-fixes).
- commit e9a9ed4</changelog>
  <changelog author="trenn@suse.de" date="1760702406">- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
  (stable-fixes).
- commit 4f5afab</changelog>
  <changelog author="trenn@suse.de" date="1760702407">- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition
  latency (stable-fixes git-fixes).
- commit 41821ef</changelog>
</package>
<package pkgid="ab222b572b0fba0469b90b37315151f24758bf7e28d73a90da89b2bdf24d0448300b161ebd002a27c3b39e8fd1f4417e349e26defa53ffc4a1dd0159138dab53" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.7.1"/>
  <changelog author="nmorey@suse.com" date="1762344000">- RDMA/irdma: Fix SD index calculation (git-fixes)
- commit 0aad166</changelog>
  <changelog author="nmorey@suse.com" date="1762344001">- RDMA/irdma: Set irdma_cq cq_num field during CQ create (git-fixes)
- commit be2c8f8</changelog>
  <changelog author="nmorey@suse.com" date="1762344002">- RDMA/hns: Fix recv CQ and QP cache affinity (git-fixes)
- commit 61f6ae6</changelog>
  <changelog author="nmorey@suse.com" date="1762344003">- RDMA/hns: Fix the modification of max_send_sge (git-fixes)
- commit f143d8d</changelog>
  <changelog author="nmorey@suse.com" date="1762344004">- RDMA/hns: Fix wrong WQE data when QP wraps around (git-fixes)
- commit 6ea0097</changelog>
  <changelog author="msuchanek@suse.de" date="1762344005">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
  <changelog author="jack@suse.cz" date="1762344006">- nbd: restrict sockets to TCP and UDP (bsc#1252774
  CVE-2025-40080).
- commit 3fbbb49</changelog>
  <changelog author="mkoutny@suse.com" date="1762344007">- cpuset: fix failure to enable isolated partition when containing
  isolcpus (bsc#1241166).
- commit 9093c25</changelog>
  <changelog author="mkoutny@suse.com" date="1762344008">- cpuset: Use new excpus for nocpu error check when enabling
  root partition (bsc#1241166).
- cgroup/cpuset: Remove remote_partition_check() &amp; make
  update_cpumasks_hier() handle remote partition (bsc#1241166).
- commit d4c3a1b</changelog>
  <changelog author="vbabka@suse.cz" date="1762430400">- mm/ksm: fix flag-dropping behavior in ksm_madvise
  (CVE-2025-40040 bsc#1252780).
- commit 095dc3d</changelog>
</package>
<package pkgid="93e57ecf6cb89fadf2f3851508d1233c1349583f5f5deb7c2dff9bc91d451a7a9995052ca4d94bec4f092de87b3e1797d963f4aa58b065a1ba3d09d22c12127d" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.8.1"/>
  <changelog author="iivanov@suse.de" date="1765281600">- arm64: zynqmp: Disable coresight by default (git-fixes)
- commit 11d63c1</changelog>
  <changelog author="iivanov@suse.de" date="1765281601">- arm64: zynqmp: Revert usb node drive strength and slew rate for (git-fixes)
- commit 2f61b01</changelog>
  <changelog author="iivanov@suse.de" date="1765281602">- arm64: mte: Do not warn if the page is already tagged in (git-fixes)
- commit 52c9758</changelog>
  <changelog author="osalvador@suse.de" date="1765281603">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431
  CVE-2025-38085 bsc#1245499).
- commit 50d9103</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281604">- smb: Log an error when close_all_cached_dirs fails (bsc#1246328,
  CVE-2025-38321).
- commit c5a4d00</changelog>
  <changelog author="dsterba@suse.com" date="1765281605">- mount: handle NULL values in mnt_ns_release() (bsc#1254308)
- commit 08256f9</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281606">- smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256,
  CVE-2025-38728).
- commit 0f61287</changelog>
  <changelog author="tiwai@suse.de" date="1765368000">- i2c: amd-mp2: fix reference leak in MP2 PCI device (git-fixes).
- i2c: i2c.h: fix a bad kernel-doc line (git-fixes).
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd
  led (git-fixes).
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
  (git-fixes).
- commit 73f17dd</changelog>
  <changelog author="osalvador@suse.de" date="1765368001">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431 CVE-2025-38084 bsc#1245498).
- commit ae3cd1c</changelog>
  <changelog author="ailiop@suse.com" date="1765368002">- exfat: fix refcount leak in exfat_find (git-fixes).
- commit eb1ffd0</changelog>
</package>
<package pkgid="ce2feccdf29d929f606d5b4a6be9fa91d756eab97b77f65e3f22139ace739d71000c87e9d74b714e42c19e851ee3db6a7f42164cebc2400996abd136ee5c0b16" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.9.1"/>
  <changelog author="jslaby@suse.cz" date="1768478400">- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b</changelog>
  <changelog author="jslaby@suse.cz" date="1768478401">- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b</changelog>
  <changelog author="nmorey@suse.com" date="1768478402">- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234</changelog>
  <changelog author="mkoutny@suse.com" date="1768478403">- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478404">- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478405">- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478406">- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478407">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27</changelog>
  <changelog author="tiwai@suse.de" date="1768564800">- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b</changelog>
  <changelog author="vkarasulli@suse.de" date="1768564801">- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9</changelog>
</package>
<package pkgid="57f1fcfeb3228006b778e5bf050303913fe43d6c44831d22b36e1aafd4e6310a824bc0a0a78d8d1b9bbdabfe7c3329090d8d1264ecfc05332c924f2d6621f70a" name="clustershell" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="bp160.1.10"/>
  <changelog author="Stephane Thiell &lt;sthiell@stanford.edu&gt;" date="1543233600">- Update to upstream release 1.8.1:
  * support offline gateways in Tree mode
  * CLI: added --conf and --groupsconf command line options
  * NodeSet: speed-up nodeset parsing
  * EventHandler: reinstate ev_error and ev_timeout as deprecated
  * nodeset/cluset CLI: allow litteral new line in -S
  * nodeset/cluset CLI: handle multiline shell arguments in options</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1575028800">- Update to upstream release 1.8.2:
  * clush: support UTF-8 string encoding with --diff
  * in some cases, timers were too fast due to an issue in EngineTimer
  * fix issue in the Slurm group bindings where job ids were used
    instead of user names
  * performance update for xCAT group bindings
- Update Source to download from GitHub directly
- Use %license and %fdupes</changelog>
  <changelog author="Stephane Thiell &lt;sthiell@stanford.edu&gt;" date="1575115200">- The correct license is LGPL-2.1-or-later</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1596024000">- Update to upstream release 1.8.3:
  * Worker/ScpClient: always put remote into brackets (#424)
  * RangeSetND: fix padding info when slicing using __getitem__() (#429)
  * Defaults: Allow out-of-tree worker modules
- Resync spec file with upstream, disable Python2 where not supported
  any more.
- Obsolete python2 package that may be installed when building for
  python3 only.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1599566400">- Grab updated spec file from upstream to fix Python2 handling.</changelog>
  <changelog author="Stephane Thiell &lt;sthiell@stanford.edu&gt;" date="1636372800">- Update to upstream release 1.8.4:
  * RangeSetND: fix padding info when slicing using __getitem__()
  * Defaults: Allow out-of-tree worker modules
  * NodeUtils: allow YAML list to declare node groups
  * Tree: Use default local_worker and allow overriding Defaults
  * Worker/Rsh: return maxrc properly for Rsh Worker
  * xCAT binding: add support for spaces in group names
  * CLI/Clush: Avoid python3 error with no stdin
  * CLI/Clush: use os.read() in stdin thread
  * CLI/Clush: Add maxrc option to clush.conf
  * CLI/Display: Add support for NO_COLOR and CLICOLOR</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1652875200">- Prepare for Python 3.10 by correcting sitelib install paths.</changelog>
  <changelog author="Stephane Thiell &lt;sthiell@stanford.edu&gt;" date="1669636800">- Update to upstream release 1.9:
  * clush: add --mode support with sudo and sshpass examples
  * clush: add options '--outdir=OUTDIR' and '--errdir=ERRDIR'
  * clush: always close stdin stream of worker when it is not used
  * clush: use daemon attribute instead of deprecated setDaemon()
  * slurm.conf.example: filter out more Slurm node state flags
  * NodeSet: add special notation @@source to expand group names
  * RangeSet: nD folding optimization
  * RangeSet: support ranges with zero padding of mixed lengths
  * RangeSet: add explicit intiter() method to iterate over integers
  * EngineClient: EnginePort improvements, add event ev_port_start()
  * Tree: fix start and bufferize early writes
  * Tree: fix error with intermediate gateways
  * Defaults: Introduce CLUSTERSHELL_CFGDIR
  * Fix for python-3.10
  * Worker: deprecate old EventHandler method signatures
  * Worker: remove old last_*() methods</changelog>
  <changelog author="Stephane Thiell &lt;sthiell@stanford.edu&gt;" date="1676116800">- Update to upstream release 1.9.1:
  * clush: select proper last parsed config file
  * setup.py: update download url and remove python 2.6 support
  * setup.py: improvements for pip install and venv
  * doc: correct typo 'sterr'
  * Fix typos found with codespell
  * RangeSet: support negative ranges
  * RangeSet: remove duplicate intiter() definition</changelog>
  <changelog author="Stephane Thiell &lt;sthiell@stanford.edu&gt;" date="1696248000">- Update to upstream release 1.9.2:
  * clush/clubak: fix line buffering with Python 3
  * clush: fix --[r]copy dest when --dest is omitted
  * NodeUtils: allow null values in cluster.yaml
  * Topology: check that node groups/wildcards are non-empty
  * packaging: fix missing xcat.conf.example</changelog>
</package>
<package pkgid="9c802b16fba248a220a1a58e316baa787b8f3854db9aba18e33cad2e3da6d0c5c8043b9abb17e927403fe760615b39c19a65f435306f8873b19b01d5168f9991" name="clutter-devel" arch="x86_64">
  <version epoch="0" ver="1.26.4" rel="bp160.1.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update descriptions, RPM groups and old macros.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133118).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582545600">- Add clutter-handle-8-10-bits.patch: Handle 8 and 10 bits colour
  depth in picking code (glgo#GNOME/clutter!10).
- Add clutter-ensure-surface-buffer-set.patch: gdk: Ensure surface
  buffer scale is set (glgo#GNOME/clutter!7).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583841600">- Update to version 1.26.4:
  + Require GLib 2.54
  + Build fixes
  + Add an experimental Meson build
  + Documentation fixes
  + Handle 8 and 10 bits colour depth in picking code
  + Bugs fixed: bgo#792716, bgo#772213, bgo769190,
    glgo#GNOME/clutter#8, glgo#GNOME/clutter#11,
    glgo#GNOME/clutter!8, glgo#GNOME/clutter!9,
    glgo#GNOME/clutter!11.
  + Updated translations.
- Drop patches fixed upstream:
  + clutter-handle-8-10-bits.patch
  + clutter-ensure-surface-buffer-set.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600430400">- Make documentation build reproducible</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1608033600">- Enable LTO (boo#1133118) as it works now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1640260800">- Add cd4c50db38ea9421deb83f25935a27531aa756a9.patch: wayland:
  Protect against enter events for empty surfaces.</changelog>
</package>
<package pkgid="007012240db75cbcaf3748505bd06e5b2106b824cd25b8cf89b945d980246f294693794df65f95959f734300fac9008a28998cdde4ae442ba32d4266d05eb951" name="clutter-gst-devel" arch="x86_64">
  <version epoch="0" ver="3.0.27" rel="bp160.1.13"/>
  <changelog author="zaitor@opensuse.org" date="1473336000">- Update to version 3.0.20:
  + Build cleanups and improvments.
  + Fix BT.2020 YUV to RGB conversion.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481025600">- Update to version 3.0.22:
  + A couple of video sink fixes (crashes &amp; not up-to-date data).
  + A bunch of content fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1483963200">- Add clutter-gst-mem-leak-fixes.patch: Fix various memory leaks in
  video-sink, patches from upstream git.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups</changelog>
  <changelog author="zaitor@opensuse.org" date="1490875200">- Update to version 3.0.24:
  + Enable inspection of gstreamer plugin without connecting to
    display servers.
  + Fix issue with RGBx/BGRx formats not showing.
  + Fix memory leaks.
- Drop clutter-gst-mem-leak-fixes.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add clutter-gst-video-sink-fix-compilation-error.patch:
  video-sink: Fix compilation error.
- Clean up spec with spec-cleaner, use modern macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.0.26:
  + Fix compilation error with -Werror=format-nonliteral.
  + Rename plugin to avoid dash in the name.
- Drop clutter-gst-video-sink-fix-compilation-error.patch: fixed
  upstream.
- Rename gstreamer-plugin-gstclutter-3_0 subpackage to
  gstreamer-plugin-cluttergst3, following upstream. Since some
  software might refer to the old name, there is no obsoletes
  added, allowing users to keep the old package. As there is no
  conflict, this is acceptable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549540800">- Update to version 3.0.27:
  + Explicitly link to gdk-pixbuf.
- Add explicit pkgconfig(gdk-pixbuf-2.0) BuildRequires following
  upstream changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1660132800">- Add 0001-video-sink-Remove-RGBx-BGRx-support.patch: video-sink:
  Remove RGBx/BGRx support. The rgb24 renderer uses the wrong pixel
  stride and the rgb32 renderer assumes alpha is meaningful. We can
  use neither.
  Fixes: https://gitlab.gnome.org/GNOME/cheese/-/issues/51
- Update Supplements to current standard.</changelog>
</package>
<package pkgid="4447ac030a234a3676cc638c9b8007955a90bf09a5d503be64a4aef9460d3d9c889fe6b43422f0425ed933fd7e7130259fc600f55b12c844c33413b7ad4d541a" name="clutter-gtk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="bp160.1.1"/>
  <changelog author="zaitor@opensuse.org" date="1459339200">- Update to version 1.8.0:
  + Correctly handle HiDPI displays.
  + Bump dependency of GTK.
  + Bugs fixed: bgo#759375, bgo#758937.
- Drop upstream fixed/applied patches:
  + cg-Actor-fix-incorrect-allocation-logic.patch.
  + cg-Actor-propagate-scale-factor.patch.
  + cg-Silence-deprecation-warnings.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472472000">- Add clutter-gtk-fix-double-buffer.patch: embed: remove non double
  buffer setting. This started causing problems with Gtk+ 3.21. As
  the documentation explains, disabling double buffering might
  trigger rendering issues (bgo#769097).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474200000">- Update to version 1.8.2:
  + Ensure that embedding works when using GTK+ 3.22.
  + Bump dependency of GTK+.
  + Bugs fixed: bgo#767627, bgo#769097.
  + Updated translations.
- Drop clutter-gtk-fix-double-buffer.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.8.4:
  + Add Meson build, in parallel with Autotools.
  + Fix cruft in the Autotools build.
  + Fix a snafu in the name of the getter for the
    GtkClutterEmbed:use-layout-size property; the ABI is preserved.
  + Bugs fixed: bgo#783431.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280001">- Switch to meson build:
  + Drop libtool BuildRequires.
  + Add meson BuildRequires.
  + Replace autotools macros for meson ones.
  + Temporary disable check as it is missing from meson build.
- Run spec-cleaner, modernize spec, pkgconfig BuildRequires added.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545912000">- Add upstream bug fix patches:
  + clutter-gtk-Add-private-header.patch: Add private header for
    GtkClutterEmbed.
  + clutter-gtk-Declare-private-callbacks-static.patch: Declare
    private callbacks as static.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
</package>
<package pkgid="b8335e13fc0b4bfbf5e057d70af3eee6a6c618135abc836d45472d66aef64d1a6ba34007f9a88b89af1512246e5ebe3ce10ef39ad12c8779bccce6e3095a83e3" name="clutter-gtk-lang" arch="noarch">
  <version epoch="0" ver="1.8.4" rel="bp160.1.1"/>
  <changelog author="zaitor@opensuse.org" date="1459339200">- Update to version 1.8.0:
  + Correctly handle HiDPI displays.
  + Bump dependency of GTK.
  + Bugs fixed: bgo#759375, bgo#758937.
- Drop upstream fixed/applied patches:
  + cg-Actor-fix-incorrect-allocation-logic.patch.
  + cg-Actor-propagate-scale-factor.patch.
  + cg-Silence-deprecation-warnings.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472472000">- Add clutter-gtk-fix-double-buffer.patch: embed: remove non double
  buffer setting. This started causing problems with Gtk+ 3.21. As
  the documentation explains, disabling double buffering might
  trigger rendering issues (bgo#769097).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474200000">- Update to version 1.8.2:
  + Ensure that embedding works when using GTK+ 3.22.
  + Bump dependency of GTK+.
  + Bugs fixed: bgo#767627, bgo#769097.
  + Updated translations.
- Drop clutter-gtk-fix-double-buffer.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.8.4:
  + Add Meson build, in parallel with Autotools.
  + Fix cruft in the Autotools build.
  + Fix a snafu in the name of the getter for the
    GtkClutterEmbed:use-layout-size property; the ABI is preserved.
  + Bugs fixed: bgo#783431.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280001">- Switch to meson build:
  + Drop libtool BuildRequires.
  + Add meson BuildRequires.
  + Replace autotools macros for meson ones.
  + Temporary disable check as it is missing from meson build.
- Run spec-cleaner, modernize spec, pkgconfig BuildRequires added.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545912000">- Add upstream bug fix patches:
  + clutter-gtk-Add-private-header.patch: Add private header for
    GtkClutterEmbed.
  + clutter-gtk-Declare-private-callbacks-static.patch: Declare
    private callbacks as static.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
</package>
<package pkgid="71ef25f7257998fe227ecf31d60b2e305816f0b95bab0b68d35782946c03942b8f99303ef7a3e2f57f105884affb03a4fcc0f51f8d0ba617a3a75d7ba87e93e8" name="clutter-lang" arch="noarch">
  <version epoch="0" ver="1.26.4" rel="bp160.1.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update descriptions, RPM groups and old macros.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133118).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582545600">- Add clutter-handle-8-10-bits.patch: Handle 8 and 10 bits colour
  depth in picking code (glgo#GNOME/clutter!10).
- Add clutter-ensure-surface-buffer-set.patch: gdk: Ensure surface
  buffer scale is set (glgo#GNOME/clutter!7).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583841600">- Update to version 1.26.4:
  + Require GLib 2.54
  + Build fixes
  + Add an experimental Meson build
  + Documentation fixes
  + Handle 8 and 10 bits colour depth in picking code
  + Bugs fixed: bgo#792716, bgo#772213, bgo769190,
    glgo#GNOME/clutter#8, glgo#GNOME/clutter#11,
    glgo#GNOME/clutter!8, glgo#GNOME/clutter!9,
    glgo#GNOME/clutter!11.
  + Updated translations.
- Drop patches fixed upstream:
  + clutter-handle-8-10-bits.patch
  + clutter-ensure-surface-buffer-set.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600430400">- Make documentation build reproducible</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1608033600">- Enable LTO (boo#1133118) as it works now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1640260800">- Add cd4c50db38ea9421deb83f25935a27531aa756a9.patch: wayland:
  Protect against enter events for empty surfaces.</changelog>
</package>
<package pkgid="5149068882b7ec1c866a1a45157a9c72677e10ff8904cbfe4837ee6bd4c44e114c1e26c50b74a0d9dbc6d21909b7dd160aedf25b0d42f914f5c7ccbc5f18c560" name="clxclient-devel" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="bp160.1.3"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588507200">- Initial package, version 3.9.2
- Add patch:
  * fix-build.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597838400">- Fix installation on non-x86 architectures</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="24d31adac0113d02bed67e9998d9ab558b175b8fdeaaa79f9cb00dfcfa5e0208cf4c5608e5c34f921370cc4fc3210659770994de529eb2a394319200b3ad44e9" name="clzip" arch="x86_64">
  <version epoch="0" ver="1.14" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1412164800">- Update to new upstream release 1.6
  * Compression ratio of option -9 has been slightly increased.
  * Copying of file dates, permissions, and ownership now behaves
  like `cp -p`. (If the user ID or the group ID cannot be
  duplicated, the file permission bits S_ISUID and S_ISGID are
  cleared).
  * The license has been changed to GPL version 2 or later.</changelog>
  <changelog author="jengelh@inai.de" date="1438862400">- Update to new upstream release 1.7
  * The option "-0", which produces a compression speed and ratio
  comparable to those of gzip, has been ported from lzip.</changelog>
  <changelog author="mpluskal@suse.com" date="1464436800">- Update to version 1.8:
  * main.c: Added new option '-a, --trailing-error'.
  * main.c (decompress): Print up to 6 bytes of trailing data
    when '-vvvv' is specified.
  * decoder.c (LZd_verify_trailer): Removed test of final code.
  * main.c (main): Delete '--output' file if infd is a terminal.
  * main.c (main): Don't use stdin more than once.
  * lzip.texi: Added chapter 'Trailing data'.
  * configure: Avoid warning on some shells when testing for gcc.
  * Makefile.in: Detect the existence of install-info.
  * testsuite/check.sh: A POSIX shell is required to run the tests.
  * testsuite/check.sh: Don't check error messages.
- Run internal testsuite</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 1.9:
  * The option '-l, --list' has been ported from lziprecover.
  * It is now an error to specify two or more different operations
    in the command line (--decompress, --list or --test).
  * Compression time of option '-0' has been reduced by 6%.
  * Compression time of options '-1' to '-9' has been reduced by 1%.
  * Decompression time has been reduced by 7%.
  * In test mode, clzip now continues checking the rest of the
    files if any input file is a terminal.
  * Trailing data are now shown both in hexadecimal and as a string
    of printable ASCII characters.
  * Three missing chapters have been added to the manual, which
    now contains all the chapters of the lzip manual.</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.10
  * The option "--loose-trailing" has been added.
  * The test used by clzip to discriminate trailing data from a
    corrupt header in multimember or concatenated files has been
    improved to a Hamming distance of 3.
  * The "-S" option now keeps input files unchanged.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788800">- Update to new upstream release 1.11~rc1
  * Detection of forbidden combinations of characters in trailing
    data has been improved.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552564800">- Update to new upstream release 1.11
  * No changes; just a version bump.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1615550400">- Update to release 1.12
  * Make -o behave like -c, but writing to file instead of stdout.
  * Make -c and -o check whether the output is a terminal
    only once.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to release 1.13
  * Decompression time has been reduced by 5-12% depending on the
    file.
  * In case of error in a numerical argument to a command line
    option, clzip now shows the name of the option and the range
    of valid values.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1707393600">- Update to release 1.14
  * Added the command-line switches --empty-error and
  - -marking-error
  * The option -o/--output now preserves dates, permissions, and
    ownership of the file when (de)compressing exactly one file.
  * The option -o/--output now creates missing intermediate
    directories when writing to a file.</changelog>
</package>
<package pkgid="859221223e8e4fd2bfae32142587331ca265add3b32d03eb1759a4aa7ab1d91595c9c80a61877c58eb80f1d6f0a4cc0c483b7a8fe478cc8ecb2a618bd5b60398" name="cm" arch="x86_64">
  <version epoch="0" ver="0.4.3" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Initial package (version 0.3) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601294400">- Update to release 0.3.1
  * Correct a bug in computing powers of 2.
    (fixed: "left shift count &gt;= width of type")</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655380800">- Update to release 0.4.0
  * Add a decomposition of the class field into a tower of prime
    degree extensions following the algorithm described in A.
    Enge and F. Morain, Fast Decomposition of Polynomials with
    Known Galois Group.
  * Add an implementation of the fastECPP primality proving
    algorithm, complete with a version running over MPI.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1661601600">- Update to snapshot 0.4.0+gb2b8d4bd
  * Fix 32-bit testsuite run</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687608000">- Update to release 0.4.2
  * When ECPP certificates are output to a file, a second file in
    Primo format is created automatically.
  * ECPP certificate creation uses class field towers
    unconditionally.
  * An optional primality test is carried out before starting ECPP.
  * For larger numbers, the BPSW primality test of GMP is replaced
    by a Miller-Rabin test to base 2.
  * New command line options make it possible to compute only the
    first or only the second phase.
  * Phase 2 results are stored in any order as they come in, which
    requires the file format to change. Checkpoint files ending in
    .cert2 from previous releases are not compatible.
  * Add an optional dependency on FLINT to speed up root finding
    in the second ECPP phase.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697976000">- Add flint3.diff to have the build succeed with flint-3.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1712836800">- Update to release 0.4.3
  * FLINT3 support
  * Add an upper bound on the permitted class number in ECPP, to
    avoid choosing discriminants for which class polynomials
    cannot be computed in reasonable time and with reasonable
    memory.
- Delete flint3.diff (obsolete)</changelog>
</package>
<package pkgid="8362490e79a4c4ae548f9adabc22c6c1a1a4b7f5c99d421cae2c55a8424edb1af7b79e67f2c48ea1b8fdc423724681c5f95c4bef1618e97327ad8b696b207d1a" name="cm-devel" arch="x86_64">
  <version epoch="0" ver="0.4.3" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Initial package (version 0.3) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601294400">- Update to release 0.3.1
  * Correct a bug in computing powers of 2.
    (fixed: "left shift count &gt;= width of type")</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655380800">- Update to release 0.4.0
  * Add a decomposition of the class field into a tower of prime
    degree extensions following the algorithm described in A.
    Enge and F. Morain, Fast Decomposition of Polynomials with
    Known Galois Group.
  * Add an implementation of the fastECPP primality proving
    algorithm, complete with a version running over MPI.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1661601600">- Update to snapshot 0.4.0+gb2b8d4bd
  * Fix 32-bit testsuite run</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1687608000">- Update to release 0.4.2
  * When ECPP certificates are output to a file, a second file in
    Primo format is created automatically.
  * ECPP certificate creation uses class field towers
    unconditionally.
  * An optional primality test is carried out before starting ECPP.
  * For larger numbers, the BPSW primality test of GMP is replaced
    by a Miller-Rabin test to base 2.
  * New command line options make it possible to compute only the
    first or only the second phase.
  * Phase 2 results are stored in any order as they come in, which
    requires the file format to change. Checkpoint files ending in
    .cert2 from previous releases are not compatible.
  * Add an optional dependency on FLINT to speed up root finding
    in the second ECPP phase.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697976000">- Add flint3.diff to have the build succeed with flint-3.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1712836800">- Update to release 0.4.3
  * FLINT3 support
  * Add an upper bound on the permitted class number in ECPP, to
    avoid choosing discriminants for which class polynomials
    cannot be computed in reasonable time and with reasonable
    memory.
- Delete flint3.diff (obsolete)</changelog>
</package>
<package pkgid="a5f3505559001b130d957ce05dc5c08e470b0374b6257e0c4d01172949e97c69283d82d839595f931e9637c0f502799aa2c584cff9f6b9952244681e9fc3a151" name="cmake" arch="x86_64">
  <version epoch="0" ver="3.31.7" rel="160000.2.2"/>
  <changelog author="foss@grueninger.de" date="1734782400">- update to 3.31.3
  * cmLocalUnixMakefileGenerator3: Simplify progress command
    generation
  * Makefile: Fix per-directory codegen target
  * Makefile: Enable progress messages for codegen target
  * cmGlobalNinjaGenerator: Fixes and improvements</changelog>
  <changelog author="foss@grueninger.de" date="1736856000">- update to 3.31.4
  * LFortran: Remove hard-coded --generate-object-code flag
  * FindBoost: Add support for Boost 1.87</changelog>
  <changelog author="solomoncyj@gmail.com" date="1739966400">- make %cmake_{build, install} call cmake directly
  to auto set generator so that %global
  are no longer needed to set generators</changelog>
  <changelog author="foss@grueninger.de" date="1740484800">- update to 3.31.6
  * cmGeneratorExpressionDAGChecker: Construct with initializer
    list syntax, De-duplicate constructor signature, Construct
    with initializer list syntax
  * GenEx: Restore evaluation context for conditional transitive
    properties, Fix evaluation of LINK_LIBRARIES as custom
    transitive property
  * GoogleTest: Restore support for spaces in explicit
    WORKING_DIRECTORY</changelog>
  <changelog author="dmueller@suse.com" date="1740744000">- temporarily revert "make %cmake_{build, install} call cmake
  directly" as the fall out is too large. will be restored once
  fallout can be mitigated</changelog>
  <changelog author="badshah400@gmail.com" date="1741694400">- Add cmake-findhdf5-prefer-hl-compilers.patch -- FindHDF5: Prefer
  h5hl* compilers for HDF5_FIND_HL; patch submitted upstream
  [https://gitlab.kitware.com/cmake/cmake/-/merge_requests/10450.patch].
  This fixes hdf5_hl detection issues when building hdf5 &gt;= 1.14
  using cmake instead of autotools.</changelog>
  <changelog author="badshah400@gmail.com" date="1742990400">- Switch cmake-gui builds to Qt6.
- Add BuildRequires: qt6-macro to locate qhelpgenerator (in
  %_qt6_libexecdir) and add corresponding path to env PATH.
- Drop use of deprecated %suse_update_desktop_file macro and
  BuildRequires: update-desktop-files needed solely for this.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- update to 3.31.7:
  * fix FindCUDAToolkit doesn't find CUPTI in CUDA installations
    from runfile
  * fix file(MAKE_DIRECTORY): creates RESULT and &lt;variable&gt; folders
  * fix Wrong detection of LINKER_PUSHPOP_STATE_SUPPORTED
  * fix cmake-gui: Invalid error message "Error: could not load cache"
  * fix build with curl 8.13.0 (boo#1241036)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1747742400">- fix GUI build on openSUSE Leap 15.x</changelog>
  <changelog author="bwiedemann@suse.com" date="1748433600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="44fa480616b4cd891827c0157baaed8a8bd1e0013b1b0785e6b4528c0260549aa1618c24ba8606beccf1bcc7c8d84f1e277a5c3a995f7e607ca965f95dc71be2" name="cmake-doc-qhelp" arch="x86_64">
  <version epoch="0" ver="3.31.7" rel="160000.2.2"/>
  <changelog author="foss@grueninger.de" date="1734782400">- update to 3.31.3
  * cmLocalUnixMakefileGenerator3: Simplify progress command
    generation
  * Makefile: Fix per-directory codegen target
  * Makefile: Enable progress messages for codegen target
  * cmGlobalNinjaGenerator: Fixes and improvements</changelog>
  <changelog author="foss@grueninger.de" date="1736856000">- update to 3.31.4
  * LFortran: Remove hard-coded --generate-object-code flag
  * FindBoost: Add support for Boost 1.87</changelog>
  <changelog author="solomoncyj@gmail.com" date="1739966400">- make %cmake_{build, install} call cmake directly
  to auto set generator so that %global
  are no longer needed to set generators</changelog>
  <changelog author="foss@grueninger.de" date="1740484800">- update to 3.31.6
  * cmGeneratorExpressionDAGChecker: Construct with initializer
    list syntax, De-duplicate constructor signature, Construct
    with initializer list syntax
  * GenEx: Restore evaluation context for conditional transitive
    properties, Fix evaluation of LINK_LIBRARIES as custom
    transitive property
  * GoogleTest: Restore support for spaces in explicit
    WORKING_DIRECTORY</changelog>
  <changelog author="dmueller@suse.com" date="1740744000">- temporarily revert "make %cmake_{build, install} call cmake
  directly" as the fall out is too large. will be restored once
  fallout can be mitigated</changelog>
  <changelog author="badshah400@gmail.com" date="1741694400">- Add cmake-findhdf5-prefer-hl-compilers.patch -- FindHDF5: Prefer
  h5hl* compilers for HDF5_FIND_HL; patch submitted upstream
  [https://gitlab.kitware.com/cmake/cmake/-/merge_requests/10450.patch].
  This fixes hdf5_hl detection issues when building hdf5 &gt;= 1.14
  using cmake instead of autotools.</changelog>
  <changelog author="badshah400@gmail.com" date="1742990400">- Switch cmake-gui builds to Qt6.
- Add BuildRequires: qt6-macro to locate qhelpgenerator (in
  %_qt6_libexecdir) and add corresponding path to env PATH.
- Drop use of deprecated %suse_update_desktop_file macro and
  BuildRequires: update-desktop-files needed solely for this.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- update to 3.31.7:
  * fix FindCUDAToolkit doesn't find CUPTI in CUDA installations
    from runfile
  * fix file(MAKE_DIRECTORY): creates RESULT and &lt;variable&gt; folders
  * fix Wrong detection of LINKER_PUSHPOP_STATE_SUPPORTED
  * fix cmake-gui: Invalid error message "Error: could not load cache"
  * fix build with curl 8.13.0 (boo#1241036)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1747742400">- fix GUI build on openSUSE Leap 15.x</changelog>
  <changelog author="bwiedemann@suse.com" date="1748433600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="14ef48a9abe83316f94a4f6f46bb8ce848c11dd1715a836958266a0f396e0452cad15ae6c9ba7a34f00a816c1cb19b23b9457899ac2efb7080f264a114f1b7d0" name="cmake-extras" arch="noarch">
  <version epoch="0" ver="1.7" rel="bp160.1.9"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Initial package for version 1.7</changelog>
</package>
<package pkgid="a475abab5a3aae3487508d09c1a5e6eebd36f2e2778bf76ec2964903125c47204d05a45b083c645c8417f46e27f8eef5a6ce4fbfc31c66e42a569e11c70c9960" name="cmake-extras" arch="noarch">
  <version epoch="0" ver="1.9" rel="bp160.1.1"/>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711281600">- Initial package for version 1.7</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1742817600">- upate to 1.8
  * GMock: wire dependencies between GMock step and library files
  * QmlPlugins: Crude support for qt6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1744891200">- fix build with cmake4 (boo#1239788) cmake-extras-1.8-cmake4.patch</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1759924800">- update to 1.9
  * add support for CMake 4.0
- drop cmake-extras-1.8-cmake4.patch as it is part of the release</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1764936000">- Fix filename and path of qmlplugindump-qt5 for openSUSE</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1765022400">- Add fix-filename-and-path-of-qmlplugindump.patch, support both qmlplugindump-qt5
  and qmlplugindump-qt6 (boo#1254531)</changelog>
</package>
<package pkgid="6b39837e5651eff6cb93eef9ce9080c48635103a2ab56086c2e9ca36c6d28955d14d716a2fb463353cd3e3e1155d1f73b58fc3ecee79298ff7c21a2e672f20cf" name="cmake-full" arch="x86_64">
  <version epoch="0" ver="3.31.7" rel="160000.2.2"/>
  <changelog author="foss@grueninger.de" date="1734782400">- update to 3.31.3
  * cmLocalUnixMakefileGenerator3: Simplify progress command
    generation
  * Makefile: Fix per-directory codegen target
  * Makefile: Enable progress messages for codegen target
  * cmGlobalNinjaGenerator: Fixes and improvements</changelog>
  <changelog author="foss@grueninger.de" date="1736856000">- update to 3.31.4
  * LFortran: Remove hard-coded --generate-object-code flag
  * FindBoost: Add support for Boost 1.87</changelog>
  <changelog author="solomoncyj@gmail.com" date="1739966400">- make %cmake_{build, install} call cmake directly
  to auto set generator so that %global
  are no longer needed to set generators</changelog>
  <changelog author="foss@grueninger.de" date="1740484800">- update to 3.31.6
  * cmGeneratorExpressionDAGChecker: Construct with initializer
    list syntax, De-duplicate constructor signature, Construct
    with initializer list syntax
  * GenEx: Restore evaluation context for conditional transitive
    properties, Fix evaluation of LINK_LIBRARIES as custom
    transitive property
  * GoogleTest: Restore support for spaces in explicit
    WORKING_DIRECTORY</changelog>
  <changelog author="dmueller@suse.com" date="1740744000">- temporarily revert "make %cmake_{build, install} call cmake
  directly" as the fall out is too large. will be restored once
  fallout can be mitigated</changelog>
  <changelog author="badshah400@gmail.com" date="1741694400">- Add cmake-findhdf5-prefer-hl-compilers.patch -- FindHDF5: Prefer
  h5hl* compilers for HDF5_FIND_HL; patch submitted upstream
  [https://gitlab.kitware.com/cmake/cmake/-/merge_requests/10450.patch].
  This fixes hdf5_hl detection issues when building hdf5 &gt;= 1.14
  using cmake instead of autotools.</changelog>
  <changelog author="badshah400@gmail.com" date="1742990400">- Switch cmake-gui builds to Qt6.
- Add BuildRequires: qt6-macro to locate qhelpgenerator (in
  %_qt6_libexecdir) and add corresponding path to env PATH.
- Drop use of deprecated %suse_update_desktop_file macro and
  BuildRequires: update-desktop-files needed solely for this.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- update to 3.31.7:
  * fix FindCUDAToolkit doesn't find CUPTI in CUDA installations
    from runfile
  * fix file(MAKE_DIRECTORY): creates RESULT and &lt;variable&gt; folders
  * fix Wrong detection of LINKER_PUSHPOP_STATE_SUPPORTED
  * fix cmake-gui: Invalid error message "Error: could not load cache"
  * fix build with curl 8.13.0 (boo#1241036)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1747742400">- fix GUI build on openSUSE Leap 15.x</changelog>
  <changelog author="bwiedemann@suse.com" date="1748433600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="f4ab37e1f56f8cf0d226449339667fba19d612809fb4cff8e6d6563c115f179e2cf53d4fd3e029720e0296e867d90139e54fb0bb08bc62f351e4f7fd9a78d6fe" name="cmake-gui" arch="x86_64">
  <version epoch="0" ver="3.31.7" rel="160000.2.2"/>
  <changelog author="foss@grueninger.de" date="1734782400">- update to 3.31.3
  * cmLocalUnixMakefileGenerator3: Simplify progress command
    generation
  * Makefile: Fix per-directory codegen target
  * Makefile: Enable progress messages for codegen target
  * cmGlobalNinjaGenerator: Fixes and improvements</changelog>
  <changelog author="foss@grueninger.de" date="1736856000">- update to 3.31.4
  * LFortran: Remove hard-coded --generate-object-code flag
  * FindBoost: Add support for Boost 1.87</changelog>
  <changelog author="solomoncyj@gmail.com" date="1739966400">- make %cmake_{build, install} call cmake directly
  to auto set generator so that %global
  are no longer needed to set generators</changelog>
  <changelog author="foss@grueninger.de" date="1740484800">- update to 3.31.6
  * cmGeneratorExpressionDAGChecker: Construct with initializer
    list syntax, De-duplicate constructor signature, Construct
    with initializer list syntax
  * GenEx: Restore evaluation context for conditional transitive
    properties, Fix evaluation of LINK_LIBRARIES as custom
    transitive property
  * GoogleTest: Restore support for spaces in explicit
    WORKING_DIRECTORY</changelog>
  <changelog author="dmueller@suse.com" date="1740744000">- temporarily revert "make %cmake_{build, install} call cmake
  directly" as the fall out is too large. will be restored once
  fallout can be mitigated</changelog>
  <changelog author="badshah400@gmail.com" date="1741694400">- Add cmake-findhdf5-prefer-hl-compilers.patch -- FindHDF5: Prefer
  h5hl* compilers for HDF5_FIND_HL; patch submitted upstream
  [https://gitlab.kitware.com/cmake/cmake/-/merge_requests/10450.patch].
  This fixes hdf5_hl detection issues when building hdf5 &gt;= 1.14
  using cmake instead of autotools.</changelog>
  <changelog author="badshah400@gmail.com" date="1742990400">- Switch cmake-gui builds to Qt6.
- Add BuildRequires: qt6-macro to locate qhelpgenerator (in
  %_qt6_libexecdir) and add corresponding path to env PATH.
- Drop use of deprecated %suse_update_desktop_file macro and
  BuildRequires: update-desktop-files needed solely for this.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- update to 3.31.7:
  * fix FindCUDAToolkit doesn't find CUPTI in CUDA installations
    from runfile
  * fix file(MAKE_DIRECTORY): creates RESULT and &lt;variable&gt; folders
  * fix Wrong detection of LINKER_PUSHPOP_STATE_SUPPORTED
  * fix cmake-gui: Invalid error message "Error: could not load cache"
  * fix build with curl 8.13.0 (boo#1241036)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1747742400">- fix GUI build on openSUSE Leap 15.x</changelog>
  <changelog author="bwiedemann@suse.com" date="1748433600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="590951a7da3e3950f81541d1b879c36afa58a7d2bc569c4ac25387b295248c99ba8338dbd174e172e55ddf595dfeb8e095f5dfd8a0e21d1b96704e2b239b40ee" name="cmake-man" arch="x86_64">
  <version epoch="0" ver="3.31.7" rel="160000.2.2"/>
  <changelog author="foss@grueninger.de" date="1734782400">- update to 3.31.3
  * cmLocalUnixMakefileGenerator3: Simplify progress command
    generation
  * Makefile: Fix per-directory codegen target
  * Makefile: Enable progress messages for codegen target
  * cmGlobalNinjaGenerator: Fixes and improvements</changelog>
  <changelog author="foss@grueninger.de" date="1736856000">- update to 3.31.4
  * LFortran: Remove hard-coded --generate-object-code flag
  * FindBoost: Add support for Boost 1.87</changelog>
  <changelog author="solomoncyj@gmail.com" date="1739966400">- make %cmake_{build, install} call cmake directly
  to auto set generator so that %global
  are no longer needed to set generators</changelog>
  <changelog author="foss@grueninger.de" date="1740484800">- update to 3.31.6
  * cmGeneratorExpressionDAGChecker: Construct with initializer
    list syntax, De-duplicate constructor signature, Construct
    with initializer list syntax
  * GenEx: Restore evaluation context for conditional transitive
    properties, Fix evaluation of LINK_LIBRARIES as custom
    transitive property
  * GoogleTest: Restore support for spaces in explicit
    WORKING_DIRECTORY</changelog>
  <changelog author="dmueller@suse.com" date="1740744000">- temporarily revert "make %cmake_{build, install} call cmake
  directly" as the fall out is too large. will be restored once
  fallout can be mitigated</changelog>
  <changelog author="badshah400@gmail.com" date="1741694400">- Add cmake-findhdf5-prefer-hl-compilers.patch -- FindHDF5: Prefer
  h5hl* compilers for HDF5_FIND_HL; patch submitted upstream
  [https://gitlab.kitware.com/cmake/cmake/-/merge_requests/10450.patch].
  This fixes hdf5_hl detection issues when building hdf5 &gt;= 1.14
  using cmake instead of autotools.</changelog>
  <changelog author="badshah400@gmail.com" date="1742990400">- Switch cmake-gui builds to Qt6.
- Add BuildRequires: qt6-macro to locate qhelpgenerator (in
  %_qt6_libexecdir) and add corresponding path to env PATH.
- Drop use of deprecated %suse_update_desktop_file macro and
  BuildRequires: update-desktop-files needed solely for this.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- update to 3.31.7:
  * fix FindCUDAToolkit doesn't find CUPTI in CUDA installations
    from runfile
  * fix file(MAKE_DIRECTORY): creates RESULT and &lt;variable&gt; folders
  * fix Wrong detection of LINKER_PUSHPOP_STATE_SUPPORTED
  * fix cmake-gui: Invalid error message "Error: could not load cache"
  * fix build with curl 8.13.0 (boo#1241036)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1747742400">- fix GUI build on openSUSE Leap 15.x</changelog>
  <changelog author="bwiedemann@suse.com" date="1748433600">- Replace usage of %jobs for reproducible builds (boo#1237231)</changelog>
</package>
<package pkgid="f87a52af61997d801a150b1cf0c08be5e538a85df9c71110604126fed69e9baaf52be30764d468a39471bf8de60ebafe4cd424aef01580c7a1bd81f396f302db" name="cmark" arch="x86_64">
  <version epoch="0" ver="0.31.0" rel="160000.2.2"/>
  <changelog author="mimi.vx@gmail.com" date="1505995200">- update to 0.28.0
  * Update spec.
  * Use unsigned integer when shifting
  * Avoid memcpy'ing NULL pointers
  * DeMorgan simplification of some tests in emphasis parser.
  * Fixed undefined shift in commonmark writer
  * latex writer:  fix memory overflow
  * Check for NULL pointer in get_link_type
  * Move fuzzing dictionary into single file
  * Reset bytes after UTF8 proc
  * Don't scan past an EOL
  * Document cases where `get_` functions return `NULL`
  * Properly handle backslashes in link destinations
  * Fixed `cmark_node_get_list_start` to return 0 for bullet lists,
    as documented
  * Use `CMARK_NO_DELIM` for bullet lists
  * Fixed code for freeing delimiter stack
  * Removed abort outside of conditional (typo).
  * Removed coercion in error message when aborting from buffer.
  * Print message to stderr when we abort due to memory demands
  * `libcmark.pc`: use `CMAKE_INSTALL_LIBDIR`
  * Fixed buffer overflow error in `S_parser_feed`
  * Update emphasis parsing for spec change.
  * Fixes for the LaTeX renderer
    + Don't double-output the link in latex-rendering.
    + Prevent ligatures in dashes sensibly when rendering latex.
    `\-` is a hyphenation, so it doesn't get displayed at all.
  * Added a test for NULL when freeing `subj-&gt;last_delim`.
  * Cleaned up setting of lower bounds for openers.
  * Fix #178, quadratic parsing bug.  Add pathological test.
  * Slight improvement of clarity of logic in emph matching.
  * Fix "multiple of 3" determination in emph/strong parsing.
  * Correctly initialize chunk in S_process_line
  * Added 'make newbench'.
  * `scanners.c` generated with re2c 0.16
  * `scanners.re` - fixed warnings; use `*` for fallback.
  * Fixed some warnings in `scanners.re`.
  * Update CaseFolding to latest
  * Allow balanced nested parens in link destinations
  * Allocate enough bytes for backticks array.
  * Inlines: Ensure that the delimiter stack is freed in subject.
  * Fixed pathological cases with backtick code spans:
  - Removed recursion in scan_to_closing_backticks
  - Added an array of pointers to potential backtick closers
    to subject
  - This array is used to avoid traversing the subject again
    when we've already seen all the potential backtick closers.
  - Added a max bound of 1000 for backtick code span delimiters.
  - Added pathological test case.
  * Remove redundant cmake_minimum_required
  * Make shared and static libraries optional
  * Added support for built-in `${LIB_SUFFIX}` feature
  * Add Makefile target and harness to fuzz with libFuzzer
  * Advertise `--validate-utf8` in usage information
  * Makefile: use warnings with re2c.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add cmark-install_libdir_is_abs.patch: CMAKE_INSTALL_LIBDIR is an
  absolute path (if -DLIBDIR=%{_libdir} is being passed.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1509710400">- update to 0.28.3
  * -smart: open quote can never occur right after ] or )
  * Include GNUInstallDirs in src/CMakeLists.txt
  * Fix quadratic behavior in finalize
  * Don't use CMAKE_INSTALL_LIBDIR to create libcmark.pc
  - drop cmark-install_libdir_is_abs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1565092800">- update to 0.29.0
  * Update spec to 0.29.
  * Make rendering safe by default (#239, #273).
    Adds `CMARK_OPT_UNSAFE` and make `CMARK_OPT_SAFE` a no-op (for API
    compatibility).  The new default behavior is to suppress raw HTML and
    potentially dangerous links.  The `CMARK_OPT_UNSAFE` option has to be set
    explicitly to prevent this.
  * *NOTE:** This change will require modifications in bindings for cmark
    and in most libraries and programs that use cmark.
    Borrows heavily from @kivikakk's patch in github/cmark-gfm#123.
  * Add sourcepos info for inlines (Yuki Izumi).
  * Disallow more than 32 nested balanced parens in a link (Yuki Izumi).
  * Resolve link references before creating setext header.
    A setext header line after a link reference should not
    create a header, according to the spec.
  * commonmark renderer: improve escaping.
    URL-escape special characters when escape mode is URL, and not otherwise.
    Entity-escape control characters (&lt; 0x20) in non-literal escape modes.
  * render:  only emit actual newline when escape mode is LITERAL.
    For markdown content, e.g., in other contexts we want some
    kind of escaping, not a literal newline.
  * Update code span normalization to conform with spec change.
  * Allow empty `&lt;&gt;` link destination in reference link.
  * Remove leftover includes of `memory.h` (#290).
  * A link destination can't start with `&lt;` unless it is
    an angle-bracket link that also ends with `&gt;` (#289).
    (If your URL really starts with `&lt;`, URL-escape it.)
  * Allow internal delimiter runs to match if both have lengths that are
    multiples of 3.  See commonmark/commonmark#528.
  * Include `references.h` in `parser.h` (#287).
  * Fix `[link](&lt;foo\&gt;)`.
  * Use hand-rolled scanner for thematic break (see #284).
    Keep track of the last position where a thematic break
    failed to match on a line, to avoid rescanning unnecessarily.
  * Rename `ends_with_blank_line` with `S_` prefix.
  * Add `CMARK_NODE__LAST_LINE_CHECKED` flag (#284).
    Use this to avoid unnecessary recursion in `ends_with_blank_line`.
  * In `ends_with_blank_line`, call `S_set_last_line_blank`
    to avoid unnecessary repetition (#284).  Once we settle whether a list
    item ends in a blank line, we don't need to revisit this in considering
    parent list items.
  * Disallow unescaped `(` in parenthesized link title.
  * Copy line/col info straight from opener/closer (Ashe Connor).
    We can't rely on anything in `subj` since it's been modified while parsing
    the subject and could represent line info from a future line.  This is
    simple and works.
  * `render.c`: reset `last_breakable` after cr.  Fixes jgm/pandoc#5033.
  * Fix a typo in `houdini_href_e.c` (Felix Yan).
  * commonmark writer: use `~~~` fences if info string contains backtick.
    This is needed for round-trip tests.
  * Update scanners for new info string rules.
  * Add XSLT stylesheet to convert cmark XML back to Commonmark
    (Nick Wellnhofer, #264).  Initial version of an XSLT stylesheet that
    converts the XML format produced by `cmark -t xml` back to Commonmark.
  * Check for whitespace before reference title (#263).
  * Bump CMake to version 3 (Jonathan Müller).
  * Build: Remove deprecated call to `add_compiler_export_flags()`
    (Jonathan Müller).  It is deprecated in CMake 3.0, the replacement is to
    set the `CXX_VISIBILITY_PRESET` (or in our case `C_VISIBILITY_PRESET`) and
    `VISIBILITY_INLINES_HIDDEN` properties of the target.  We're already
    setting them by setting the CMake variables anyway, so the call can be
    removed.
  * Build: only attempt to install MSVC system libraries on Windows
    (Saleem Abdulrasool).  Newer versions of CMake attempt to query the system
    for information about the VS 2017 installation.  Unfortunately, this query
    fails on non-Windows systems when cross-compiling:
    `cmake_host_system_information does not recognize &lt;key&gt; VS_15_DIR`.
    CMake will not find these system libraries on non-Windows hosts anyways,
    and we were silencing the warnings, so simply omit the installation when
    cross-compiling to Windows.
  * Simplify code normalization, in line with spec change.
  * Implement code span spec changes.  These affect both parsing and writing
    commonmark.
  * Add link parsing corner cases to regressions (Ashe Connor).
  * Add `xml:space="preserve"` in XML output when appropriate
    (Nguyễn Thái Ngọc Duy).
    (For text, code, code_block, html_inline and html_block tags.)
  * Removed meta from list of block tags.  Added regression test.
    See commonmark/CommonMark#527.
  * `entity_tests.py` - omit noisy success output.
  * `pathological_tests.py`: make tests run faster.
    Commented out the (already ignored) "many references" test, which
    times out.  Reduced the iterations for a couple other tests.
  * `pathological_tests.py`: added test for deeply nested lists.
  * Optimize `S_find_first_nonspace`.  We were needlessly redoing things we'd
    already done.  Now we skip the work if the first nonspace is greater than
    the current offset.  This fixes pathological slowdown with deeply nested
    lists (#255).  For N = 3000, the time goes from over 17s to about 0.7s.
    Thanks to Martin Mitas for diagnosing the problem.
  * Allow spaces in link destination delimited with pointy brackets.
  * Adjust max length of decimal/numeric entities.
    See commonmark/CommonMark#487.
  * Fix inline raw HTML parsing.
    This fixes a recently added failing spec test case.  Previously spaces
    were being allowed in unquoted attribute values; no we forbid them.
  * Don't allow list markers to be indented &gt;= 4 spaces.
    See commonmark/CommonMark#497.
  * Check for empty buffer when rendering (Phil Turnbull).
    For empty documents, `-&gt;size` is zero so
    `renderer.buffer-&gt;ptr[renderer.buffer-&gt;size - 1]` will cause an
    out-of-bounds read. Empty buffers always point to the global
    `cmark_strbuf__initbuf` buffer so we read `cmark_strbuf__initbuf[-1]`.
  * Also run API tests with `CMARK_SHARED=OFF` (Nick Wellnhofer).
  * Rename roundtrip and entity tests (Nick Wellnhofer).
    Rename the tests to reflect that they use the library, not the
    executable.
  * Generate export header for static-only build (#247, Nick Wellnhofer).
  * Fuzz width parameter too (Phil Turnbull).  Allow the `width` parameter to
    be generated too so we get better fuzz-coverage.
  * Don't discard empty fuzz test-cases (Phil Turnbull).  We currently discard
    fuzz test-cases that are empty but empty inputs are valid markdown. This
    improves the fuzzing coverage slightly.
  * Fixed exit code for pathological tests.
  * Add allowed failures to `pathological_tests.py`.
    This allows us to include tests that we don't yet know how to pass.
  * Add timeout to `pathological_tests.py`.
    Tests must complete in 8 seconds or are errors.
  * Add more pathological tests (Martin Mitas).
    These tests target the issues #214, #218, #220.
  * Use pledge(2) on OpenBSD (Ashe Connor).
  * Update the Racket wrapper (Eli Barzilay).
  * Makefile: For afl target, don't build tests.</changelog>
  <changelog author="sflees@suse.de" date="1620993600">-  %cmake_build is now the recommended way to build cmake projects</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624276800">- update to 0.30.0
  * Use official 0.30 spec.txt.
  * Add `cmark_get_default_mem_allocator()` (#330).  API change: this
    adds a new exported function in cmark.h.
  * Fix #383.  An optimization we used for emphasis parsing was
    too aggressive, causing us to miss some emphasis that was legal
    according to the spec.  We fix this by indexing the `openers_bottom`
    table not just by the type of delimiter and the length of the
    closing delimiter mod 3, but by whether the closing delimiter
    can also be an opener.  (The algorithm for determining emphasis
    matching depends on all these factors.)  Add regression test.
  * Fix quadratic behavior with inline HTML (#299, Nick Wellnhofer).
    Repeated starting sequences like `&lt;?`, `&lt;!DECL ` or `&lt;![CDATA[` could
    lead to quadratic behavior if no matching ending sequence was found.
    Separate the inline HTML scanners. Remember if scanning the whole input
    for a specific ending sequence failed and skip subsequent scans.
  * Speed up hierarchy check in tree manipulation API (Nick Wellnhofer).
    Skip hierarchy check in the common case that the inserted child has
    no children.
  * Fix quadratic behavior when parsing inlines (#373, Nick Wellnhofer).
    The inline parsing code would call `cmark_node_append_child` to append
    nodes. This public function has a sanity check which is linear in the
    depth of the tree. Repeated calls could show quadratic behavior in
    degenerate trees. Use a special function to append nodes without this
    check.  (Issue found by OSS-Fuzz.)
  * Replace invalid characters in XML output (#365, Nick wellnhofer).
    Control characters, U+FFFE and U+FFFF aren't allowed in XML 1.0, so
    replace them with U+FFFD (replacement character). This doesn't solve
    the problem how to roundtrip these characters, but at least we don't
    produce invalid XML.
  * Avoid quadratic output growth with reference links (#354, Nick Wellnhofer).
    Keep track of the number bytes added through expansion of reference
    links and limit the total to the size of the input document. Always
    allow a minimum of 100KB.  Unfortunately, cmark has no error handling,
    so all we can do is to stop expanding reference links without returning
    an error. This should never be an issue in practice though. The 100KB
    minimum alone should cover all real-world cases.
  * Fix issue with type-7 HTML blocks interrupting paragraphs
    (see commonmark/commonmark.js#213).
  * Treat `textarea` like `script`, `style`, `pre` (type 1 HTML block),
    in accordance with spec change.
  * Define whitespace per spec (Asherah Conor).
  * Add `MAX_INDENT` for xml (#355).  Otherwise we can get quadratic
    increase in size with deeply nested structures.
  * Fix handling of empty strings when creating XML/HTML output
    (Steffen Kieß).
  * Commonmark renderer: always use fences for code (#317).
    This solves problems with adjacent code blocks being merged.
  * Improve rendering of commonmark code spans with spaces (#316).
  * Cleaner approach to max digits for numeric entities.
    This modifies unescaping in `houdini_html_u.c` rather than
    the entity handling in `inlines.c`.  Unlike the other,
    this approach works also in e.g. link titles.
  * Fix entity parser (and api test) to respect length limit on
    numeric entities.
  * Don't allow link destinations with unbalanced unescaped parentheses.
    See commonmark/commonmark.js#177.
  * `print_usage()`: Minor grammar fix, swap two words (#305, Øyvind A. Holm).
  * Don't call `memcpy` with `NULL` as first parameter.
    This is illegal according to the C standard, sec. 7.1.4.
    See &lt;https://www.imperialviolet.org/2016/06/26/nonnull.html&gt;.
  * Add needed include in `blocks.c`.
  * Fix unnecessary variable assignment.
  * Skip UTF-8 BOM if present at beginning of buffer (#334).
  * Fix URL check in `is_autolink` (Nick Wellnhofer).  In a recent commit,
    the check was changed to `strcmp`, but we really have to use `strncmp`.
  * Fix null pointer deref in `is_autolink` (Nick Wellnhofer).
    Introduced by a recent commit. Found by OSS-Fuzz.
  * Rearrange struct cmark_node (Nick Wellnhofer).  Introduce multi-purpose
    data/len members in struct cmark_node. This is mainly used to store
    literal text for inlines, code and HTML blocks.
    Move the content strbuf for blocks from `cmark_node` to `cmark_parser`.
    When finalizing nodes that allow inlines (paragraphs and headings),
    detach the strbuf and store the block content in the node's data/len
    members. Free the block content after processing inlines.
    Reduces size of struct `cmark_node` by 8 bytes.
  * Improve packing of `struct cmark_list` (Nick Wellnhofer).
  * Use C string instead of chunk in a number of contexts (Nick Wellnhofer,
    [#309]).  The node struct never references memory of other nodes now.
    Node accessors don't have to check for delayed creation of C strings,
    so parsing and iterating all literals using the public API should
    actually be faster than before.  These changes also reduce the size
    of `struct cmark_node`.
  * Add casts for MSVC10 (from kivikakk in cmark-cfm).
  * commonmark renderer:  better escaping in smart mode.  When
    `CMARK_OPT_SMART` is enabled, we escape literal `-`, `.`, and quote
    characters when needed to avoid their being "smartified."
  * Add options field to `cmark_renderer`.
  * commonmark.c - use `size_t` instead of `int`.
  * Include `string.h` in `cmark-fuzz.c`.
  * Fix #220 (hash collisions for references) (Vicent Marti via cmark-gfm).
    Reimplemented reference storage as follows:
    1. New references are always inserted at the end of a linked list. This
    is an O(1) operation, and does not check whether an existing (duplicate)
    reference with the same label already exists in the document.
    2. Upon the first call to `cmark_reference_lookup` (when it is expected
    that no further references will be added to the reference map), the
    linked list of references is written into a fixed-size array.
    3. The fixed size array can then be efficiently sorted in-place in O(n
    log n). This operation only happens once. We perform this sort in a
    _stable_ manner to ensure that the earliest link reference in the
    document always has preference, as the spec dictates. To accomplish
    this, every reference is tagged with a generation number when initially
    inserted in the linked list.
    4. The sorted array is then compacted in O(n). Since it was sorted in a
    stable way, the first reference for each label is preserved and the
    duplicates are removed, matching the spec.
    5. We can now simply perform a binary search for the current
    `cmark_reference_lookup` query in O(log n). Any further lookup calls
    will also be O(log n), since the sorted references table only needs to
    be generated once.
    The resulting implementation is notably simple (as it uses standard
    library builtins `qsort` and `bsearch`), whilst performing better than
    the fixed size hash table in documents that have a high number of
    references and never becoming pathological regardless of the input.
  * Comment out unused function `cmark_strbuf_cstr` in `buffer.h`.
  * Re-add `--safe` command-line option as a no-op (#344), for backwards
    compatibility.
  * Update to Unicode 13.0
  * Generate and install cmake-config file (Reinhold Gschweicher).
    Add full cmake support. The project can either be used with
    `add_subdirectory` or be installed into the system (or some other
    directory) and be found with `find_package(cmark)`. In both cases the
    cmake target `cmark::cmark` and/or `cmark::cmark_static` is all that
    is needed to be linked.  Previously the `cmarkConfig.cmake` file
    was generated, but not installed.  As additional bonus of generation
    by cmake we get a generated `cmake-config-version.cmake` file for
    `find_package()` to search for the same major version.
    The generated config file is position independent, allowing the
    installed directory to be copied or moved and still work.
    The following four files are generated and installed:
    `lib/cmake/cmark/cmark-config.cmake`,
    `lib/cmake/cmark/cmark-config-version.cmake`,
    `lib/cmake/cmark/cmark-targets.cmake`,
    `lib/cmake/cmark/cmark-targets-release.cmake`.
  * Adjust the MinGW paths for MinGW64 (Daniil Baturin).
  * Fix CMake generator expression checking for MSVC (Nick Wellnhofer).
  * Fix `-Wconst-qual` warning (Saleem Abdulrasool).  This enables building
    with `/Zc:strictString` with MSVC as well.
  * Improve and modernize cmake build (Saleem Abdulrasool).
    + Build: add exports targets for build tree usage (#307).
    + Uuse target properties for include paths.
    + Remove the unnecessary execute permission on CMakeLists.txt.
    + Reduce property computation in CMake.
    + Use `CMAKE_INCLUDE_CURRENT_DIRECTORY`.
    + Improve man page installation.
    + Only include `GNUInstallDirs` once.
    + Replace `add_compile_definitions` with `add_compile_options`
    since the former was introduced in 3.12 (#321).
    + Cleanup CMake (#319).
    + Inline a variable.
    + Use `LINKER_LANGUAGE` property for C++ runtime.
    + Use CMake to control C standard.
    + Use the correct variable.
    + Loosen the compiler check
    + Hoist shared flags to top-level CMakeLists
    + Remove duplicated flags.
    + Use `add_compile_options` rather than modify `CMAKE_C_FLAGS`.
    + Hoist sanitizer flags to global state.
    + Hoist `-fvisibilty` flags to top-level.
    + Hoist the debug flag handling.
    + Hoist the profile flag handling.
    + Remove incorrect variable handling.
    + Remove unused CMake includes.
  * Remove "-rdynamic" flag for static builds (#300, Eric Pruitt).
  * Fixed installation on other than Ubuntu GNU/Linux distributions
    (Vitaly Zaitsev).
  * Link executable with static or shared library (Nick Wellnhofer).
    If `CMARK_STATIC` is on (default), link the executable with the static
    library. This produces exactly the same result as compiling the library
    sources again and linking with the object files.
    If `CMARK_STATIC` is off, link the executable with the shared library.
    This wasn't supported before and should be the preferred way to
    package cmark on Linux distros.
    Building only a shared library and a statically linked executable
    isn't supported anymore but this doesn't seem useful.
  * Reintroduce version check for MSVC /TP flag (Nick Wellnhofer).
    The flag is only required for old MSVC versions.
  * normalize.py: use `html.escape` instead of `cgi.escape` (#313).
  * Fix pathological_tests.py on Windows (Nick Wellnhofer).
    When using multiprocessing on Windows, the main program must be
    guarded with a `__name__` check.
  * Remove useless `__name__` check in test scripts (Nick Wellnhofer).
  * Add CIFuzz (Leo Neat).
  * cmark.1 - Document --unsafe instead of --safe (#332).
  * cmark.1: remove docs for `--normalize` which no longer exists (#332).
  * Add lint target to Makefile.
  * Add uninstall target to Makefile.
  * Update benchmarks (#338).
  * Fix typo in documentation (Tim Gates).
  * Increase timeout for pathological tests to avoid CI failure.
  * Update the Racket wrapper with the safe -&gt; unsafe flag change (Eli
    Barzilay).</changelog>
  <changelog author="mimi.vx@gmail.com" date="1633694400">- update to 0.30.2
  * Fix parsing of emphasis before links (#424, Nick Wellnhofer).
    Fixes a regression introduced with commit ed0a4bf.
  * Update to Unicode 14.0 (data-man).
  * Add `~` to safe href character set (#394, frogtile).
  * Update CMakeLists.txt (Saleem Abdulrasool).  Bump the minimum required
    CMake to 3.7. Imperatively define output name for static library.
  * Fix install paths in libcmark.pc (Sebastián Mancilla).
    `CMAKE_INSTALL_&lt;dir&gt;` can be relative or absolute path, so it is wrong to
    prefix CMAKE_INSTALL_PREFIX because if CMAKE_INSTALL_&lt;dir&gt; is set to an
    absolute path it will result in a malformed path with two absolute paths
    joined together.  Instead, use `CMAKE_INSTALL_FULL_&lt;dir&gt;` from
    GNUInstallDirs.
  * Properly indent block-level contents of list items in man (#258).
    This handles nested lists as well as items with multiple paragraphs.
    The change requires addition of a new field block_number_in_list_item
    to cmark_renderer, but this does not change the public API.
  * Fix quadratic behavior when parsing emphasis (#389, Nick
    Wellnhofer).  Delimiters can be deleted, so store delimiter positions
    instead of pointers in `openers_bottom`. Besides causing undefined
    behavior when reading a dangling pointer, this could also result
    in quadratic behavior when parsing emphasis.
  * Fix quadratic behavior when parsing smart quotes (#388, Nick Wellnhofer).
    Remove matching smart quote delimiters.  Otherwise, the same opener
    could be found over and over, preventing the `openers_bottom`
    optimization from kicking in and leading to quadratic behavior when
    processing lots of quotes.
  * Modify CMake configuration so that the project can be built with
    older versions of CMake (#384, Saleem Abdulrasool).  (In 0.30.0,
    some features were used that require CMake &gt;= 3.3.) The cost of this
    backwards compatibility is that developers must now explicitly invoke
    `cmark_add_compile_options` when a new compilation target is added.
  * Remove a comma at the end of an enumerator list, which was flagged
    by clang as a C++11 extension.
  * make_man_page.py: use absolute path with CDLL. This avoids the error
    "file system relative paths not allowed in hardened programs."
  * Include cmark version in cmark(3) man page (instead of LOCAL).</changelog>
  <changelog author="christophe@krop.fr" date="1638273600">- Fix dependencies.
  cmark-targets-*.cmake creates a 'cmark::cmark_exe' target. The
  cmark executable is required.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679140800">- update to 0.30.3:
  * CVE-2023-22486: quadratic complexity bug with repeated `![[]()`
    (boo#1207674)
  * Allow declarations with no space, as per spec
  * Set `enumi*` counter correctly in LaTeX output
  * Allow `&lt;!DOCTYPE` to be case-insensitive
    existing spec
  * Fixed HTML comment scanning
  * CVE-2023-22484: quadratic parsing issue with repeated `&lt;!--`
    (boo#1207438) - not in a released version
  * Fix quadratic behavior involving `get_containing_block`</changelog>
  <changelog author="lujianhua000@gmail.com" date="1711972800">- update to 0.31.0
  * Update to 0.31.2 spec.txt.
  * Treat unicode Symbols like Punctuation, as per the 0.31 spec.
  * Add a new function to `utf8.h`:
    `int cmark_utf8proc_is_punctuation_or_symbol(int32_t uc)`.
    The old `cmark_utf8proc_is_punctuation` has been kept for
    now, but it is no longer used.
  * Add new exported function `cmark_parser_new_with_mem_into_root`
    (API change) (John Ericson).
  * Avoid repeated `language-` in info string (commonmark/commonmark.js#277).
  * Fix quadratic behavior in `S_insert_emph` (Nick Wellnhofer).
    Fixes part of GHSA-66g8-4hjf-77xh.
  * Fix quadratic behavior in `check_open_blocks` (Nick Wellnhofer).
    Fixes part of GHSA-66g8-4hjf-77xh.
  * Track underscore bottom separately mod 3, like asterisk (Michael
    Howell). This was already implemented correctly for asterisks,
    but not for underscore.
  * Use `fwrite` instead of `printf` to print results in main (#523).
    This avoids a massive slowdown in MSYS2.
  * commonmark writer: less aggressive escaping for `!` (#131).
  * Update libFuzzer build (Nick Wellnhofer):
    + Move fuzzing files into their own directory.
    + Use libFuzzer the modern way by compiling and linking with
    `-fsanitize=fuzzer(-no-link)` without requiring `LIB_FUZZER_PATH`.
    + Update the `libFuzzer` rule in Makefile and the README.md.
  * CMake build changes (Saleem Abdulrasool).
    + Inline multiple variables in CMake, following CMake recommendations.
    + Simplify the version computation.
    + Remove the `CMARK_STATIC` and `CMARK_SHARED` options as one of the two
    must be enabled always as the cmark executable depends on the library.
    Instead of having a custom flag to discern between the
    library type, use the native CMake option `BUILD_SHARED_LIBS`,
    allowing the user to control which library to build. This matches
    CMake recommendations to only build a single copy of the library.
    + Introduce an author warning for the use of `CMARK_SHARED` and
    `CMARK_STATIC` to redirect the author of the dependent package to
    `BUILD_SHARED_LIBS`.
    + Permit incremental linking on Windows. Although incremental linking
    does introduce padding in the binary for incremental links, that
    should not matter for release mode builds in theory as `/OPT:REF`
    and `/OPT:ICF` will trigger full links, which is the default in
    release mode.
    + Hoist the CMake module inclusion to the top level.
    + Minor tweaks for speeding up the configure phase.
    Restructure the file layout to place the custom modules into the
    `cmake/modules` directory that is the common layout for CMake based
    projects.
    + Squelch C4232 warnings on MSVC builds.
    + Remove check for `__builtin_expect`. Use `__has_builtin` to check
    at compile time if the feature is supported.
    This macro is supported by both clang and GCC (as of 10).
    In the case that the compiler in use is not new enough, we still
    provide the fallback so that the code will compile but without the
    additional hints for the branch probability. `config.h` has been
    removed from the code base as it is no longer needed.
    + Remove `/TP` usage on MSVC and replace `CMARK_INLINE` with `inline`.
    These were workarounds for pre-VS2015 compilers, which are no longer
    supported.
    + Hoist the C visibility settings to top level
    + Clean up C4267 warnings on MSVC builds.
    + Remove some compiler compatibility checks that are no longer
    needed because VS 2013 is no longer supported (#498).
    + Adjust the policy to silence warnings on MSVC builds
    CMake 3.15+ remove `/W3` from the language flags under MSVC with
    CMP0092.  Set the policy to new to avoid the D9025 warning.
    + Reflow some text to match CMake documentation style
    + Use generator expression for path computation.
    + Use CMake to propagate `CMARK_STATIC_DEFINE`.
    + Clean up an obsoleted variable (NFC).
    + Hoist the policy settings. Policy settings may impact how
    `project` functions.  They should be set immediately after
    `cmake_minimum_required` (which implicitly sets policies).
    Use the `POLICY` check to see if a policy is defined rather
    than using a version check.
    + Replace `CMARK_TESTS` with CMake sanctioned `BUILD_TESTING`.
    + Correct typo and adjust command invocation. Use the proper
    generator expression for the python interpreter and adjust
    a typo in the component name.
    + Add an upgrade path for newer CMake.
    CMake 3.12 deprecated `FindPythonInterp`, and with CMake 3.27, were
    obsoleted with CMP0148.  Add a version check and switch to the new
    behaviour to allow building with newer releases.
  * Fix regex syntax warnings in `pathological_tests.py` (Nick Wellnhofer).
  * `test/cmark.py`: avoid star imports (Jakub Wilk).
  * `spec_tests.py`: Add option to generate fuzz corpus (Nick Wellnhofer).
    Add an option `--fuzz-corpus` that writes the test cases to separate
    files including the options header, so they can be used as seed corpus
    for fuzz testing.
  * Fix some cmark.3 man rendering issues so we can do a clean regen
    (John Ericson).
  * Update Windows compilation instructions (Pomax, #525).</changelog>
</package>
<package pkgid="7960b7280ae8e2172094ec200c08df0cbe6f822577c22971b767319778eaed7d815bb64e02abf1dcc61fef566b45010ddc3651fefe73da03c58acdb9344d297b" name="cmark-devel" arch="x86_64">
  <version epoch="0" ver="0.31.0" rel="160000.2.2"/>
  <changelog author="mimi.vx@gmail.com" date="1505995200">- update to 0.28.0
  * Update spec.
  * Use unsigned integer when shifting
  * Avoid memcpy'ing NULL pointers
  * DeMorgan simplification of some tests in emphasis parser.
  * Fixed undefined shift in commonmark writer
  * latex writer:  fix memory overflow
  * Check for NULL pointer in get_link_type
  * Move fuzzing dictionary into single file
  * Reset bytes after UTF8 proc
  * Don't scan past an EOL
  * Document cases where `get_` functions return `NULL`
  * Properly handle backslashes in link destinations
  * Fixed `cmark_node_get_list_start` to return 0 for bullet lists,
    as documented
  * Use `CMARK_NO_DELIM` for bullet lists
  * Fixed code for freeing delimiter stack
  * Removed abort outside of conditional (typo).
  * Removed coercion in error message when aborting from buffer.
  * Print message to stderr when we abort due to memory demands
  * `libcmark.pc`: use `CMAKE_INSTALL_LIBDIR`
  * Fixed buffer overflow error in `S_parser_feed`
  * Update emphasis parsing for spec change.
  * Fixes for the LaTeX renderer
    + Don't double-output the link in latex-rendering.
    + Prevent ligatures in dashes sensibly when rendering latex.
    `\-` is a hyphenation, so it doesn't get displayed at all.
  * Added a test for NULL when freeing `subj-&gt;last_delim`.
  * Cleaned up setting of lower bounds for openers.
  * Fix #178, quadratic parsing bug.  Add pathological test.
  * Slight improvement of clarity of logic in emph matching.
  * Fix "multiple of 3" determination in emph/strong parsing.
  * Correctly initialize chunk in S_process_line
  * Added 'make newbench'.
  * `scanners.c` generated with re2c 0.16
  * `scanners.re` - fixed warnings; use `*` for fallback.
  * Fixed some warnings in `scanners.re`.
  * Update CaseFolding to latest
  * Allow balanced nested parens in link destinations
  * Allocate enough bytes for backticks array.
  * Inlines: Ensure that the delimiter stack is freed in subject.
  * Fixed pathological cases with backtick code spans:
  - Removed recursion in scan_to_closing_backticks
  - Added an array of pointers to potential backtick closers
    to subject
  - This array is used to avoid traversing the subject again
    when we've already seen all the potential backtick closers.
  - Added a max bound of 1000 for backtick code span delimiters.
  - Added pathological test case.
  * Remove redundant cmake_minimum_required
  * Make shared and static libraries optional
  * Added support for built-in `${LIB_SUFFIX}` feature
  * Add Makefile target and harness to fuzz with libFuzzer
  * Advertise `--validate-utf8` in usage information
  * Makefile: use warnings with re2c.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add cmark-install_libdir_is_abs.patch: CMAKE_INSTALL_LIBDIR is an
  absolute path (if -DLIBDIR=%{_libdir} is being passed.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1509710400">- update to 0.28.3
  * -smart: open quote can never occur right after ] or )
  * Include GNUInstallDirs in src/CMakeLists.txt
  * Fix quadratic behavior in finalize
  * Don't use CMAKE_INSTALL_LIBDIR to create libcmark.pc
  - drop cmark-install_libdir_is_abs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1565092800">- update to 0.29.0
  * Update spec to 0.29.
  * Make rendering safe by default (#239, #273).
    Adds `CMARK_OPT_UNSAFE` and make `CMARK_OPT_SAFE` a no-op (for API
    compatibility).  The new default behavior is to suppress raw HTML and
    potentially dangerous links.  The `CMARK_OPT_UNSAFE` option has to be set
    explicitly to prevent this.
  * *NOTE:** This change will require modifications in bindings for cmark
    and in most libraries and programs that use cmark.
    Borrows heavily from @kivikakk's patch in github/cmark-gfm#123.
  * Add sourcepos info for inlines (Yuki Izumi).
  * Disallow more than 32 nested balanced parens in a link (Yuki Izumi).
  * Resolve link references before creating setext header.
    A setext header line after a link reference should not
    create a header, according to the spec.
  * commonmark renderer: improve escaping.
    URL-escape special characters when escape mode is URL, and not otherwise.
    Entity-escape control characters (&lt; 0x20) in non-literal escape modes.
  * render:  only emit actual newline when escape mode is LITERAL.
    For markdown content, e.g., in other contexts we want some
    kind of escaping, not a literal newline.
  * Update code span normalization to conform with spec change.
  * Allow empty `&lt;&gt;` link destination in reference link.
  * Remove leftover includes of `memory.h` (#290).
  * A link destination can't start with `&lt;` unless it is
    an angle-bracket link that also ends with `&gt;` (#289).
    (If your URL really starts with `&lt;`, URL-escape it.)
  * Allow internal delimiter runs to match if both have lengths that are
    multiples of 3.  See commonmark/commonmark#528.
  * Include `references.h` in `parser.h` (#287).
  * Fix `[link](&lt;foo\&gt;)`.
  * Use hand-rolled scanner for thematic break (see #284).
    Keep track of the last position where a thematic break
    failed to match on a line, to avoid rescanning unnecessarily.
  * Rename `ends_with_blank_line` with `S_` prefix.
  * Add `CMARK_NODE__LAST_LINE_CHECKED` flag (#284).
    Use this to avoid unnecessary recursion in `ends_with_blank_line`.
  * In `ends_with_blank_line`, call `S_set_last_line_blank`
    to avoid unnecessary repetition (#284).  Once we settle whether a list
    item ends in a blank line, we don't need to revisit this in considering
    parent list items.
  * Disallow unescaped `(` in parenthesized link title.
  * Copy line/col info straight from opener/closer (Ashe Connor).
    We can't rely on anything in `subj` since it's been modified while parsing
    the subject and could represent line info from a future line.  This is
    simple and works.
  * `render.c`: reset `last_breakable` after cr.  Fixes jgm/pandoc#5033.
  * Fix a typo in `houdini_href_e.c` (Felix Yan).
  * commonmark writer: use `~~~` fences if info string contains backtick.
    This is needed for round-trip tests.
  * Update scanners for new info string rules.
  * Add XSLT stylesheet to convert cmark XML back to Commonmark
    (Nick Wellnhofer, #264).  Initial version of an XSLT stylesheet that
    converts the XML format produced by `cmark -t xml` back to Commonmark.
  * Check for whitespace before reference title (#263).
  * Bump CMake to version 3 (Jonathan Müller).
  * Build: Remove deprecated call to `add_compiler_export_flags()`
    (Jonathan Müller).  It is deprecated in CMake 3.0, the replacement is to
    set the `CXX_VISIBILITY_PRESET` (or in our case `C_VISIBILITY_PRESET`) and
    `VISIBILITY_INLINES_HIDDEN` properties of the target.  We're already
    setting them by setting the CMake variables anyway, so the call can be
    removed.
  * Build: only attempt to install MSVC system libraries on Windows
    (Saleem Abdulrasool).  Newer versions of CMake attempt to query the system
    for information about the VS 2017 installation.  Unfortunately, this query
    fails on non-Windows systems when cross-compiling:
    `cmake_host_system_information does not recognize &lt;key&gt; VS_15_DIR`.
    CMake will not find these system libraries on non-Windows hosts anyways,
    and we were silencing the warnings, so simply omit the installation when
    cross-compiling to Windows.
  * Simplify code normalization, in line with spec change.
  * Implement code span spec changes.  These affect both parsing and writing
    commonmark.
  * Add link parsing corner cases to regressions (Ashe Connor).
  * Add `xml:space="preserve"` in XML output when appropriate
    (Nguyễn Thái Ngọc Duy).
    (For text, code, code_block, html_inline and html_block tags.)
  * Removed meta from list of block tags.  Added regression test.
    See commonmark/CommonMark#527.
  * `entity_tests.py` - omit noisy success output.
  * `pathological_tests.py`: make tests run faster.
    Commented out the (already ignored) "many references" test, which
    times out.  Reduced the iterations for a couple other tests.
  * `pathological_tests.py`: added test for deeply nested lists.
  * Optimize `S_find_first_nonspace`.  We were needlessly redoing things we'd
    already done.  Now we skip the work if the first nonspace is greater than
    the current offset.  This fixes pathological slowdown with deeply nested
    lists (#255).  For N = 3000, the time goes from over 17s to about 0.7s.
    Thanks to Martin Mitas for diagnosing the problem.
  * Allow spaces in link destination delimited with pointy brackets.
  * Adjust max length of decimal/numeric entities.
    See commonmark/CommonMark#487.
  * Fix inline raw HTML parsing.
    This fixes a recently added failing spec test case.  Previously spaces
    were being allowed in unquoted attribute values; no we forbid them.
  * Don't allow list markers to be indented &gt;= 4 spaces.
    See commonmark/CommonMark#497.
  * Check for empty buffer when rendering (Phil Turnbull).
    For empty documents, `-&gt;size` is zero so
    `renderer.buffer-&gt;ptr[renderer.buffer-&gt;size - 1]` will cause an
    out-of-bounds read. Empty buffers always point to the global
    `cmark_strbuf__initbuf` buffer so we read `cmark_strbuf__initbuf[-1]`.
  * Also run API tests with `CMARK_SHARED=OFF` (Nick Wellnhofer).
  * Rename roundtrip and entity tests (Nick Wellnhofer).
    Rename the tests to reflect that they use the library, not the
    executable.
  * Generate export header for static-only build (#247, Nick Wellnhofer).
  * Fuzz width parameter too (Phil Turnbull).  Allow the `width` parameter to
    be generated too so we get better fuzz-coverage.
  * Don't discard empty fuzz test-cases (Phil Turnbull).  We currently discard
    fuzz test-cases that are empty but empty inputs are valid markdown. This
    improves the fuzzing coverage slightly.
  * Fixed exit code for pathological tests.
  * Add allowed failures to `pathological_tests.py`.
    This allows us to include tests that we don't yet know how to pass.
  * Add timeout to `pathological_tests.py`.
    Tests must complete in 8 seconds or are errors.
  * Add more pathological tests (Martin Mitas).
    These tests target the issues #214, #218, #220.
  * Use pledge(2) on OpenBSD (Ashe Connor).
  * Update the Racket wrapper (Eli Barzilay).
  * Makefile: For afl target, don't build tests.</changelog>
  <changelog author="sflees@suse.de" date="1620993600">-  %cmake_build is now the recommended way to build cmake projects</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624276800">- update to 0.30.0
  * Use official 0.30 spec.txt.
  * Add `cmark_get_default_mem_allocator()` (#330).  API change: this
    adds a new exported function in cmark.h.
  * Fix #383.  An optimization we used for emphasis parsing was
    too aggressive, causing us to miss some emphasis that was legal
    according to the spec.  We fix this by indexing the `openers_bottom`
    table not just by the type of delimiter and the length of the
    closing delimiter mod 3, but by whether the closing delimiter
    can also be an opener.  (The algorithm for determining emphasis
    matching depends on all these factors.)  Add regression test.
  * Fix quadratic behavior with inline HTML (#299, Nick Wellnhofer).
    Repeated starting sequences like `&lt;?`, `&lt;!DECL ` or `&lt;![CDATA[` could
    lead to quadratic behavior if no matching ending sequence was found.
    Separate the inline HTML scanners. Remember if scanning the whole input
    for a specific ending sequence failed and skip subsequent scans.
  * Speed up hierarchy check in tree manipulation API (Nick Wellnhofer).
    Skip hierarchy check in the common case that the inserted child has
    no children.
  * Fix quadratic behavior when parsing inlines (#373, Nick Wellnhofer).
    The inline parsing code would call `cmark_node_append_child` to append
    nodes. This public function has a sanity check which is linear in the
    depth of the tree. Repeated calls could show quadratic behavior in
    degenerate trees. Use a special function to append nodes without this
    check.  (Issue found by OSS-Fuzz.)
  * Replace invalid characters in XML output (#365, Nick wellnhofer).
    Control characters, U+FFFE and U+FFFF aren't allowed in XML 1.0, so
    replace them with U+FFFD (replacement character). This doesn't solve
    the problem how to roundtrip these characters, but at least we don't
    produce invalid XML.
  * Avoid quadratic output growth with reference links (#354, Nick Wellnhofer).
    Keep track of the number bytes added through expansion of reference
    links and limit the total to the size of the input document. Always
    allow a minimum of 100KB.  Unfortunately, cmark has no error handling,
    so all we can do is to stop expanding reference links without returning
    an error. This should never be an issue in practice though. The 100KB
    minimum alone should cover all real-world cases.
  * Fix issue with type-7 HTML blocks interrupting paragraphs
    (see commonmark/commonmark.js#213).
  * Treat `textarea` like `script`, `style`, `pre` (type 1 HTML block),
    in accordance with spec change.
  * Define whitespace per spec (Asherah Conor).
  * Add `MAX_INDENT` for xml (#355).  Otherwise we can get quadratic
    increase in size with deeply nested structures.
  * Fix handling of empty strings when creating XML/HTML output
    (Steffen Kieß).
  * Commonmark renderer: always use fences for code (#317).
    This solves problems with adjacent code blocks being merged.
  * Improve rendering of commonmark code spans with spaces (#316).
  * Cleaner approach to max digits for numeric entities.
    This modifies unescaping in `houdini_html_u.c` rather than
    the entity handling in `inlines.c`.  Unlike the other,
    this approach works also in e.g. link titles.
  * Fix entity parser (and api test) to respect length limit on
    numeric entities.
  * Don't allow link destinations with unbalanced unescaped parentheses.
    See commonmark/commonmark.js#177.
  * `print_usage()`: Minor grammar fix, swap two words (#305, Øyvind A. Holm).
  * Don't call `memcpy` with `NULL` as first parameter.
    This is illegal according to the C standard, sec. 7.1.4.
    See &lt;https://www.imperialviolet.org/2016/06/26/nonnull.html&gt;.
  * Add needed include in `blocks.c`.
  * Fix unnecessary variable assignment.
  * Skip UTF-8 BOM if present at beginning of buffer (#334).
  * Fix URL check in `is_autolink` (Nick Wellnhofer).  In a recent commit,
    the check was changed to `strcmp`, but we really have to use `strncmp`.
  * Fix null pointer deref in `is_autolink` (Nick Wellnhofer).
    Introduced by a recent commit. Found by OSS-Fuzz.
  * Rearrange struct cmark_node (Nick Wellnhofer).  Introduce multi-purpose
    data/len members in struct cmark_node. This is mainly used to store
    literal text for inlines, code and HTML blocks.
    Move the content strbuf for blocks from `cmark_node` to `cmark_parser`.
    When finalizing nodes that allow inlines (paragraphs and headings),
    detach the strbuf and store the block content in the node's data/len
    members. Free the block content after processing inlines.
    Reduces size of struct `cmark_node` by 8 bytes.
  * Improve packing of `struct cmark_list` (Nick Wellnhofer).
  * Use C string instead of chunk in a number of contexts (Nick Wellnhofer,
    [#309]).  The node struct never references memory of other nodes now.
    Node accessors don't have to check for delayed creation of C strings,
    so parsing and iterating all literals using the public API should
    actually be faster than before.  These changes also reduce the size
    of `struct cmark_node`.
  * Add casts for MSVC10 (from kivikakk in cmark-cfm).
  * commonmark renderer:  better escaping in smart mode.  When
    `CMARK_OPT_SMART` is enabled, we escape literal `-`, `.`, and quote
    characters when needed to avoid their being "smartified."
  * Add options field to `cmark_renderer`.
  * commonmark.c - use `size_t` instead of `int`.
  * Include `string.h` in `cmark-fuzz.c`.
  * Fix #220 (hash collisions for references) (Vicent Marti via cmark-gfm).
    Reimplemented reference storage as follows:
    1. New references are always inserted at the end of a linked list. This
    is an O(1) operation, and does not check whether an existing (duplicate)
    reference with the same label already exists in the document.
    2. Upon the first call to `cmark_reference_lookup` (when it is expected
    that no further references will be added to the reference map), the
    linked list of references is written into a fixed-size array.
    3. The fixed size array can then be efficiently sorted in-place in O(n
    log n). This operation only happens once. We perform this sort in a
    _stable_ manner to ensure that the earliest link reference in the
    document always has preference, as the spec dictates. To accomplish
    this, every reference is tagged with a generation number when initially
    inserted in the linked list.
    4. The sorted array is then compacted in O(n). Since it was sorted in a
    stable way, the first reference for each label is preserved and the
    duplicates are removed, matching the spec.
    5. We can now simply perform a binary search for the current
    `cmark_reference_lookup` query in O(log n). Any further lookup calls
    will also be O(log n), since the sorted references table only needs to
    be generated once.
    The resulting implementation is notably simple (as it uses standard
    library builtins `qsort` and `bsearch`), whilst performing better than
    the fixed size hash table in documents that have a high number of
    references and never becoming pathological regardless of the input.
  * Comment out unused function `cmark_strbuf_cstr` in `buffer.h`.
  * Re-add `--safe` command-line option as a no-op (#344), for backwards
    compatibility.
  * Update to Unicode 13.0
  * Generate and install cmake-config file (Reinhold Gschweicher).
    Add full cmake support. The project can either be used with
    `add_subdirectory` or be installed into the system (or some other
    directory) and be found with `find_package(cmark)`. In both cases the
    cmake target `cmark::cmark` and/or `cmark::cmark_static` is all that
    is needed to be linked.  Previously the `cmarkConfig.cmake` file
    was generated, but not installed.  As additional bonus of generation
    by cmake we get a generated `cmake-config-version.cmake` file for
    `find_package()` to search for the same major version.
    The generated config file is position independent, allowing the
    installed directory to be copied or moved and still work.
    The following four files are generated and installed:
    `lib/cmake/cmark/cmark-config.cmake`,
    `lib/cmake/cmark/cmark-config-version.cmake`,
    `lib/cmake/cmark/cmark-targets.cmake`,
    `lib/cmake/cmark/cmark-targets-release.cmake`.
  * Adjust the MinGW paths for MinGW64 (Daniil Baturin).
  * Fix CMake generator expression checking for MSVC (Nick Wellnhofer).
  * Fix `-Wconst-qual` warning (Saleem Abdulrasool).  This enables building
    with `/Zc:strictString` with MSVC as well.
  * Improve and modernize cmake build (Saleem Abdulrasool).
    + Build: add exports targets for build tree usage (#307).
    + Uuse target properties for include paths.
    + Remove the unnecessary execute permission on CMakeLists.txt.
    + Reduce property computation in CMake.
    + Use `CMAKE_INCLUDE_CURRENT_DIRECTORY`.
    + Improve man page installation.
    + Only include `GNUInstallDirs` once.
    + Replace `add_compile_definitions` with `add_compile_options`
    since the former was introduced in 3.12 (#321).
    + Cleanup CMake (#319).
    + Inline a variable.
    + Use `LINKER_LANGUAGE` property for C++ runtime.
    + Use CMake to control C standard.
    + Use the correct variable.
    + Loosen the compiler check
    + Hoist shared flags to top-level CMakeLists
    + Remove duplicated flags.
    + Use `add_compile_options` rather than modify `CMAKE_C_FLAGS`.
    + Hoist sanitizer flags to global state.
    + Hoist `-fvisibilty` flags to top-level.
    + Hoist the debug flag handling.
    + Hoist the profile flag handling.
    + Remove incorrect variable handling.
    + Remove unused CMake includes.
  * Remove "-rdynamic" flag for static builds (#300, Eric Pruitt).
  * Fixed installation on other than Ubuntu GNU/Linux distributions
    (Vitaly Zaitsev).
  * Link executable with static or shared library (Nick Wellnhofer).
    If `CMARK_STATIC` is on (default), link the executable with the static
    library. This produces exactly the same result as compiling the library
    sources again and linking with the object files.
    If `CMARK_STATIC` is off, link the executable with the shared library.
    This wasn't supported before and should be the preferred way to
    package cmark on Linux distros.
    Building only a shared library and a statically linked executable
    isn't supported anymore but this doesn't seem useful.
  * Reintroduce version check for MSVC /TP flag (Nick Wellnhofer).
    The flag is only required for old MSVC versions.
  * normalize.py: use `html.escape` instead of `cgi.escape` (#313).
  * Fix pathological_tests.py on Windows (Nick Wellnhofer).
    When using multiprocessing on Windows, the main program must be
    guarded with a `__name__` check.
  * Remove useless `__name__` check in test scripts (Nick Wellnhofer).
  * Add CIFuzz (Leo Neat).
  * cmark.1 - Document --unsafe instead of --safe (#332).
  * cmark.1: remove docs for `--normalize` which no longer exists (#332).
  * Add lint target to Makefile.
  * Add uninstall target to Makefile.
  * Update benchmarks (#338).
  * Fix typo in documentation (Tim Gates).
  * Increase timeout for pathological tests to avoid CI failure.
  * Update the Racket wrapper with the safe -&gt; unsafe flag change (Eli
    Barzilay).</changelog>
  <changelog author="mimi.vx@gmail.com" date="1633694400">- update to 0.30.2
  * Fix parsing of emphasis before links (#424, Nick Wellnhofer).
    Fixes a regression introduced with commit ed0a4bf.
  * Update to Unicode 14.0 (data-man).
  * Add `~` to safe href character set (#394, frogtile).
  * Update CMakeLists.txt (Saleem Abdulrasool).  Bump the minimum required
    CMake to 3.7. Imperatively define output name for static library.
  * Fix install paths in libcmark.pc (Sebastián Mancilla).
    `CMAKE_INSTALL_&lt;dir&gt;` can be relative or absolute path, so it is wrong to
    prefix CMAKE_INSTALL_PREFIX because if CMAKE_INSTALL_&lt;dir&gt; is set to an
    absolute path it will result in a malformed path with two absolute paths
    joined together.  Instead, use `CMAKE_INSTALL_FULL_&lt;dir&gt;` from
    GNUInstallDirs.
  * Properly indent block-level contents of list items in man (#258).
    This handles nested lists as well as items with multiple paragraphs.
    The change requires addition of a new field block_number_in_list_item
    to cmark_renderer, but this does not change the public API.
  * Fix quadratic behavior when parsing emphasis (#389, Nick
    Wellnhofer).  Delimiters can be deleted, so store delimiter positions
    instead of pointers in `openers_bottom`. Besides causing undefined
    behavior when reading a dangling pointer, this could also result
    in quadratic behavior when parsing emphasis.
  * Fix quadratic behavior when parsing smart quotes (#388, Nick Wellnhofer).
    Remove matching smart quote delimiters.  Otherwise, the same opener
    could be found over and over, preventing the `openers_bottom`
    optimization from kicking in and leading to quadratic behavior when
    processing lots of quotes.
  * Modify CMake configuration so that the project can be built with
    older versions of CMake (#384, Saleem Abdulrasool).  (In 0.30.0,
    some features were used that require CMake &gt;= 3.3.) The cost of this
    backwards compatibility is that developers must now explicitly invoke
    `cmark_add_compile_options` when a new compilation target is added.
  * Remove a comma at the end of an enumerator list, which was flagged
    by clang as a C++11 extension.
  * make_man_page.py: use absolute path with CDLL. This avoids the error
    "file system relative paths not allowed in hardened programs."
  * Include cmark version in cmark(3) man page (instead of LOCAL).</changelog>
  <changelog author="christophe@krop.fr" date="1638273600">- Fix dependencies.
  cmark-targets-*.cmake creates a 'cmark::cmark_exe' target. The
  cmark executable is required.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679140800">- update to 0.30.3:
  * CVE-2023-22486: quadratic complexity bug with repeated `![[]()`
    (boo#1207674)
  * Allow declarations with no space, as per spec
  * Set `enumi*` counter correctly in LaTeX output
  * Allow `&lt;!DOCTYPE` to be case-insensitive
    existing spec
  * Fixed HTML comment scanning
  * CVE-2023-22484: quadratic parsing issue with repeated `&lt;!--`
    (boo#1207438) - not in a released version
  * Fix quadratic behavior involving `get_containing_block`</changelog>
  <changelog author="lujianhua000@gmail.com" date="1711972800">- update to 0.31.0
  * Update to 0.31.2 spec.txt.
  * Treat unicode Symbols like Punctuation, as per the 0.31 spec.
  * Add a new function to `utf8.h`:
    `int cmark_utf8proc_is_punctuation_or_symbol(int32_t uc)`.
    The old `cmark_utf8proc_is_punctuation` has been kept for
    now, but it is no longer used.
  * Add new exported function `cmark_parser_new_with_mem_into_root`
    (API change) (John Ericson).
  * Avoid repeated `language-` in info string (commonmark/commonmark.js#277).
  * Fix quadratic behavior in `S_insert_emph` (Nick Wellnhofer).
    Fixes part of GHSA-66g8-4hjf-77xh.
  * Fix quadratic behavior in `check_open_blocks` (Nick Wellnhofer).
    Fixes part of GHSA-66g8-4hjf-77xh.
  * Track underscore bottom separately mod 3, like asterisk (Michael
    Howell). This was already implemented correctly for asterisks,
    but not for underscore.
  * Use `fwrite` instead of `printf` to print results in main (#523).
    This avoids a massive slowdown in MSYS2.
  * commonmark writer: less aggressive escaping for `!` (#131).
  * Update libFuzzer build (Nick Wellnhofer):
    + Move fuzzing files into their own directory.
    + Use libFuzzer the modern way by compiling and linking with
    `-fsanitize=fuzzer(-no-link)` without requiring `LIB_FUZZER_PATH`.
    + Update the `libFuzzer` rule in Makefile and the README.md.
  * CMake build changes (Saleem Abdulrasool).
    + Inline multiple variables in CMake, following CMake recommendations.
    + Simplify the version computation.
    + Remove the `CMARK_STATIC` and `CMARK_SHARED` options as one of the two
    must be enabled always as the cmark executable depends on the library.
    Instead of having a custom flag to discern between the
    library type, use the native CMake option `BUILD_SHARED_LIBS`,
    allowing the user to control which library to build. This matches
    CMake recommendations to only build a single copy of the library.
    + Introduce an author warning for the use of `CMARK_SHARED` and
    `CMARK_STATIC` to redirect the author of the dependent package to
    `BUILD_SHARED_LIBS`.
    + Permit incremental linking on Windows. Although incremental linking
    does introduce padding in the binary for incremental links, that
    should not matter for release mode builds in theory as `/OPT:REF`
    and `/OPT:ICF` will trigger full links, which is the default in
    release mode.
    + Hoist the CMake module inclusion to the top level.
    + Minor tweaks for speeding up the configure phase.
    Restructure the file layout to place the custom modules into the
    `cmake/modules` directory that is the common layout for CMake based
    projects.
    + Squelch C4232 warnings on MSVC builds.
    + Remove check for `__builtin_expect`. Use `__has_builtin` to check
    at compile time if the feature is supported.
    This macro is supported by both clang and GCC (as of 10).
    In the case that the compiler in use is not new enough, we still
    provide the fallback so that the code will compile but without the
    additional hints for the branch probability. `config.h` has been
    removed from the code base as it is no longer needed.
    + Remove `/TP` usage on MSVC and replace `CMARK_INLINE` with `inline`.
    These were workarounds for pre-VS2015 compilers, which are no longer
    supported.
    + Hoist the C visibility settings to top level
    + Clean up C4267 warnings on MSVC builds.
    + Remove some compiler compatibility checks that are no longer
    needed because VS 2013 is no longer supported (#498).
    + Adjust the policy to silence warnings on MSVC builds
    CMake 3.15+ remove `/W3` from the language flags under MSVC with
    CMP0092.  Set the policy to new to avoid the D9025 warning.
    + Reflow some text to match CMake documentation style
    + Use generator expression for path computation.
    + Use CMake to propagate `CMARK_STATIC_DEFINE`.
    + Clean up an obsoleted variable (NFC).
    + Hoist the policy settings. Policy settings may impact how
    `project` functions.  They should be set immediately after
    `cmake_minimum_required` (which implicitly sets policies).
    Use the `POLICY` check to see if a policy is defined rather
    than using a version check.
    + Replace `CMARK_TESTS` with CMake sanctioned `BUILD_TESTING`.
    + Correct typo and adjust command invocation. Use the proper
    generator expression for the python interpreter and adjust
    a typo in the component name.
    + Add an upgrade path for newer CMake.
    CMake 3.12 deprecated `FindPythonInterp`, and with CMake 3.27, were
    obsoleted with CMP0148.  Add a version check and switch to the new
    behaviour to allow building with newer releases.
  * Fix regex syntax warnings in `pathological_tests.py` (Nick Wellnhofer).
  * `test/cmark.py`: avoid star imports (Jakub Wilk).
  * `spec_tests.py`: Add option to generate fuzz corpus (Nick Wellnhofer).
    Add an option `--fuzz-corpus` that writes the test cases to separate
    files including the options header, so they can be used as seed corpus
    for fuzz testing.
  * Fix some cmark.3 man rendering issues so we can do a clean regen
    (John Ericson).
  * Update Windows compilation instructions (Pomax, #525).</changelog>
</package>
<package pkgid="da7510848c3787c5421e23aaf7d94982e0944b2191b3b92fb2f5acfef1cba6016a1493c176258dc9bba179f77ce0f8377aeb20b6b42a3a0ba8f7b1555ee28444" name="cmh" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Initial package (version 1.0g83) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600689600">- Add large-stack.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600948800">- Update to 1.0g87 (53bba6332)
  * FPLLL 5.x support
  * Avoid testsuite failure when a 32-bit /usr/bin/gp is used
- Drop large-stack.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 1.1
  * Overhaul of the recognition of quadratic coefficients using LLL:
  * Choose FPLLL-4, FPLLL-5 or PARI/GP according to availability.
  * For PARI/GP versions from 2.13 on, use the half-gcd function for
    preconditioning the matrix passed to LLL.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657195200">- Apply patch from FreeBSD to fix build:
  * patch-src_lll_cpp.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668772800">- Update to release 1.1.1
  * No changelog was provided
- Delete patch-src_lll_cpp.patch (merged)</changelog>
</package>
<package pkgid="ba3c86e795e60313829236add0ab3a97c6934c2fb02571aa516428762959c04182e18e5d7880ce4ab8561159c4f48565b12875b53b2816bea70ba9605a6f5c15" name="cmh-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Initial package (version 1.0g83) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600689600">- Add large-stack.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600948800">- Update to 1.0g87 (53bba6332)
  * FPLLL 5.x support
  * Avoid testsuite failure when a 32-bit /usr/bin/gp is used
- Drop large-stack.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614513600">- Update to release 1.1
  * Overhaul of the recognition of quadratic coefficients using LLL:
  * Choose FPLLL-4, FPLLL-5 or PARI/GP according to availability.
  * For PARI/GP versions from 2.13 on, use the half-gcd function for
    preconditioning the matrix passed to LLL.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1657195200">- Apply patch from FreeBSD to fix build:
  * patch-src_lll_cpp.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668772800">- Update to release 1.1.1
  * No changelog was provided
- Delete patch-src_lll_cpp.patch (merged)</changelog>
</package>
<package pkgid="dff58107e5ed076684d9ef290c202f357aba2a8ab1aff308def5eb3773ebf36e46aabf7bccbaa096a320b3971b5eabcc7b242e4376a6aa0bd24b9aa76933fefe" name="cmis-client" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="bp160.1.13"/>
  <changelog author="tchvatal@suse.com" date="1462708800">- Simplify autoreconf call and add patch to mark Makefile as foreign:
  * declare-automake-foreign.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Description updates
- Rename %soname to %sover to better reflect its use</changelog>
  <changelog author="adam.majer@suse.de" date="1534507200">- use %license to install licenses
- spec file cleanup
- boost_168.patch: fix build with Boost 1.68 where the compatibility
  header for Uuid's sha1 header was removed. (boo#1105173)</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562587200">- Update to 0.5.2:
  * Fixed Google Drive login, broken by Google's new 2-page login sequence
  * Added support for Google Drive two-factor authentication
  * Fixed access to SharePoint root folder (tdf#101385)
  * Limited the maximal number of redirections to 20 (rhbz#1410197)
  * Switched library implementation to C++11 (the API remains C++98-compatible)
  * Fixed build with boost &gt;= 1.68.0 (#19)
  * Fixed encoding of OAuth2 credentials
  * Dropped cppcheck run from "make check". A new "make cppcheck" target was created for it
  * Added proper API symbol exporting
  * Speeded up building of tests a bit
  * Fixed a few issues found by coverity and cppcheck
- Remove merged patches:
  * boost_168.patch
  * declare-automake-foreign.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712059200">- version update to 0.6.2
  * Merged outstanding LibreOffice, etc. modifications
  * add a callback that can be used to configure libcurl
  * fix up version-info</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1725451200">- Add 68.patch: fix build against Boost 1.86.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726228800">- Add 69.patch: fix regression building against Boost &lt; 1.86</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726488000">- Add 70.patch: fix build with Boost &lt; 1.66</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1726488001">- Add 71.patch: fix comment and harmonise the version branches</changelog>
</package>
<package pkgid="6bdcb9880f63c042c2027453b6f200149d3a99944b61ee8ac385086e95a3f6ad763dfcbfbad0b7e2f96b47436db323872afe0b30aebe54c85496cf12127a1454" name="cmuclmtk" arch="x86_64">
  <version epoch="0" ver="0.7" rel="160000.2.2"/>
  <changelog author="i@marguerite.su" date="1343044800">- initial version 0.7
  * see NEWS for detail changelog.</changelog>
  <changelog author="i@marguerite.su" date="1343649600">- finished license investigation (#bnc773622) under
  * https://bugzilla.novell.com/show_bug.cgi?id=773622</changelog>
  <changelog author="i@marguerite.su" date="1347969600">- add cmuclmtk requires to libcmuclmtk-devel.</changelog>
  <changelog author="schwab@suse.de" date="1393675200">- decl-mismatch.patch: fix mismatching declaration</changelog>
  <changelog author="ro@suse.de" date="1394539200">- add patch 0002-Fix-includes.patch from upstream
- add patch 0003-Fix-endian-check.patch
- add patch 0004-Fix-vocab_size.patch
- run testsuite (but ignore errors for now, completes only
  on little-endian 64bit)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1518091200">- Remove Buildrequires: gdb and vim. As the latter is build with
  gvim support, this adds all of gtk and rust (librsvg) to the
  build dependency chain. Via presage -&gt; fcitx this also creates a
  huge build dependency loop.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="48fffd5bc57940345289ab71f6c6040b44666425d492e635595c4b970eb3f89808df4a0d5872cc822e1340a03ae80f96c4781999255811bfa33c8ee2e2c1473b" name="cmus" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="b4cc8d983dd6a96b7f83beff038ff693f16f6623783896d0b6e57b72cdbe8965ad283270b66a8a69722af4304fc9af5dc3ca40000c00e6d84f77b551c42ba584" name="cmus-plugin-cdio" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="2c328950168672ba24fcb9fce68f2e440e34f8f969ddc7e6d05bc7ccf307b11ae58cd97324c7c0fbe565ea2c4c6c93690018a80f52480421c06f7cdfe7e6c64f" name="cmus-plugin-cue" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="de6f0a9252b0fb1c9b78eff5da5b608927850ace63cdffdaf144c41d84328d14c4c949c9cd834c8d2bc30562ca5af46265c4833aa5952dc667913ee8eee68bcc" name="cmus-plugin-ffmpeg" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="b7e9ba04eec32ca351eefc4763cc8c37956b753cdf0857ca92094c3fe52ded146ad019816f1e22630d5d7600462ed1c2220a83049aea4e6a35e38e64c5d150b7" name="cmus-plugin-flac" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="ca868ed3fabd02d7b6e46fde4a1dca735a8f85c90ba4197f3e7b9f7e9d2fc0d020ce971e4b2aca1b70d6595baff9616070e318da8edd2e686e87bac50b1abc61" name="cmus-plugin-jack" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="3d01bc67a439aff9f2dac72747ad81fcb060c6aed8414bbaa1bf82265231ece31fa77093e1f4778ffa54ed84aab763af4f6f1a63cac8841da5c3b26e6a19a42f" name="cmus-plugin-libao" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="752b4637ebc4726bdc7252f7f3e6418232197f9133b1eade4d480e8746946bf597f1196e5742bcfcaff9b61a32b9bef6b83deb8bc7279e015c9d4d2823dee8c8" name="cmus-plugin-mikmod" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="1b9f171b4702d769b33ef2710f8a58e0a2b275acb582ac1076c38a6da1002ed0cf54add574709c8d90de52681b17027e9a3714d6ab01bd09a5be478da89bf277" name="cmus-plugin-modplug" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="baa4341d70e79532401278cff66214957c5fb4ed8977c97d0a6832d2839afcb31276303599bee7e2e601cd65a8afcb0c178006c28473763e7efc65d59a78ea75" name="cmus-plugin-mpc" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="a5728be7bc27484d96b14f43a46455877f6e6e10e084d57718e95a2b1337852c73acfa7c508c4db36aa6860a8f9da796d0ced59060dadd48222e9379121e73ca" name="cmus-plugin-opus" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="b36d6504c5e833eb2f8cb4ae6c632e6e2fdc3a5883ff98de6c21abd253f72f99bca6767f30945ca2e950247fe18aa1b8e0f061437a309dd0669d8823dd4fdbd5" name="cmus-plugin-pulse" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="b89c6c3cdd48c5ad697aa4e6d92da550495ba1cf145c6d0c9f802aae069f179c2fee03e938c354f7d5ce0b61caef22bf965e1e5408daf3d909417f1b82532df6" name="cmus-plugin-sndio" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="89d4f80c4769fab94245736ca9cc0a261a60921cb7d23edfdadf6ca0b23213b18f038789597b32f0b7b313b6bce07f8f28282c9be3fe32fb76261977ac1862b1" name="cmus-plugin-vorbis" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="5574b899a5096fbdcd4631e46b89b3213f98c75adc53ca37039ff1ccdd796d8412e286258de9abf980bddb8fe9670743a0d7f64b2dcdaabed660bb6b2fa8aac4" name="cmus-plugin-wavpack" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="6a8b0e64515e6593c010999aa3f84fc6747162d7424e235e983846b0e074a3e6de44aca982b04bda2a23ae51703aa17b7379056051bda758717f6d36e86eddda" name="cmus-plugins-all" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="bp160.1.7"/>
  <changelog author="9@cirno.systems" date="1544011200">- Update to version 2.8.0~20181120.gf5a442a:
  * Change to get_non_empty_env for CMUS_PLAYLIST_DIR. (#836)
  * Add support for CMUS_PLAYLIST_DIR. (#830)
  * Add documentation for passwd option (#824)
  * Accept PARTOFACOMPILATION tag (#807)</changelog>
  <changelog author="9@cirno.systems" date="1550923200">- Update to version 2.8.0~20190219.ge27e813:
  * Ensures all data sent on dbus is in utf8 (#847) (#871)
  * bits-per-sample fixes (#870)
  * Fixes incorect bit rate declaration for 24bit flac (#867)
  * Changes yes_no_query to signal error on cmus exit (#858)
  * Add support for elogind (#846)
  * ip/ffmpeg: enable opus support (#865)
  * Add note about overriding keybindings using rc (closes #742) (#866)
  * Avoid -I$(pwd) (#820)
  * Fixes ffmpeg deprecations (#861)
  * Add *.lo to clean in Makefile (#864)
  * Fixes various compiler warning (#862)
  * added "exiting" player status (#648)
  * Makes save -p consistent with documentation (#859)
  * Make cmus-update*.py use env python and fix pidgin with py3 (#857)
  * cmus 2.8.0
  * README: note that cmus is not actively maintained
  * Fix CI build by specifying gcc version for Linux. Add OSX to CI test (#854)
  * Increasing print buffer to fix crashes on ultra wide screens (#853)</changelog>
  <changelog author="9@cirno.systems" date="1574769600">- Clean up spec file
- Update to version 2.8.0~20191105.g354625c:
  * Allow push to accept no arguments (#937)
  * mute/unmute command (#934)
  * Add `continue_album` option (#927)
  * Fix a crash when moving all tracks in a view (#916)
  * fixed playlist name searching (#906)
  * misc_init: remove variable user_name (#898)
  * Makes :quit only prompt if -i is given (#888)
  * ip/mp4: add metadata support for bpm/tempo (#878)</changelog>
  <changelog author="9@cirno.systems" date="1586520000">- Update to version 2.8.0~20200120.gd1290d5:
  * Fix bug on ppc64 caused by narrowing cast (#941)
  * Fix typo: it's-&gt;its (#947)</changelog>
  <changelog author="9@cirno.systems" date="1608120000">- Update to version 2.8.0~20201215.gba1c3f0:
  * Implement mouse events for status bar (#1013)
  * Add tree width options (#1018)
  * Stop after queue (resolves #696) (#1006)
  * play pregaps of songs by adding them at the end of the previous song (#983)
  * properly calculate size of print string (#987)
  * Support R128_TRACK_GAIN / R128_ALBUM_GAIN tags (#994)
  * Adding "--server SOCKET --passwd PASSWORD" section (#958)
  * Add -n option to win-add-{l,p,Q,q} to prevent selecting the next item (#1017)
  * Add support for 'DISCNUMBER' REM-field in CUE-sheets (#982)
  * Add -f, --file to cmus-remote (#984)
  * Add gruvbox-warm.theme (#1014)
  * Update zsh completion (#985) (#1019)
  * Make mouse behavior on playlist window consistent with library (#1011)
  * Fix type of MPRIS2 fields title and album (#972)
  * docs: fix simple typo, speacial -&gt; special (#1002)</changelog>
  <changelog author="9@cirno.systems" date="1609675200">- Update to version 2.8.0~20210101.gcef5ea4:
  * Switch to GitHub Actions (#1026)
  * Shuffle first track (#893) (#1008)
  * Implement mouse events for title bar (#1025)
  * Fix whitespace issues (#1021)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 2.9.1:
  * Documentation improvements for keybindings and some commands
  * Spelling, grammar, and other improvements
  * Add comments about fg/bg color to gruvbox-warm.theme
  * Increase help view keybinding width
  * pgaskin and flyingmutant committed 11 days ago
  * ip/cdio.c: only declare track_comments_found if
  * Remove unused functions in op/sndio.c
  * Fixes truncation warnings by replacing %s with %.s
  * add amazon.theme (#975)
  * Fix playlist track selection</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1657281600">- Update to 2.10.0
  * Implement smart ReplayGain setting
    (gh#cmus/cmus#1049)
  * Start from end on player-prev with no current track
  * Add reshuffle when current track has disappeared
  * Make tracks hold shuffle info
  * Use a direct album reference in AAA filter
  * Add an album shuffle mode
  * Add "player-next-album" and "player-prev-album" commands
  * Rename "shuffle" command to "reshuffle"
  * Reset position in shuffle list after a manual reshuffle
  * Fixes channel map for multichannel flac files
    (gh#cmus/cmus#1072)
  * Replaces improper fcntl with ioctl in op/oss
    (gh#cmus/cmus#1104)
  * Initialize active to zero in print_editable
    (gh#cmus/cmus#1093 gh#cmus/cmus#1094)
  * Allow output plugins to have multiple mixer FD lists
  * Preserve compatibility with ABI v1 output plugins
  * Implement pause_on_output_change option
    (gh#cmus/cmus#1139)
  * Implement MIXER_FDS_OUTPUT for pulse
    (gh#cmus/cmus#1139)
  * Handle colors in active windows correctly
    (gh#cmus/cmus#1120)
  * Initialize window size in init_curses
    (gh#cmus/cmus#1119)
  * ip/ffmpeg.c: fix send/receive API usage
    (gh#cmus/cmus#1080)
  * Indicate elided text with "…" &amp; related formatting tweaks
    (gh#cmus/cmus#1051)
  * Limit max draw width to 1023 columns
    (gh#cmus/cmus#1065)
  * spotify.theme
    (gh#cmus/cmus#1123)
  * A few typo/style fixes to the manpages
    (gh#cmus/cmus#1150)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1684929600">- Add ffmpeg-6-compat.patch
  See https://github.com/cmus/cmus/pull/1254</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1716638400">- Update to 2.11.0
  * Add support for .nomedia file
    gh#cmus/cmus#1190
  * Fix a typo in an error message
    gh#cmus/cmus#1206
  * Take opus output gain into account when checking
    replaygain_limit peak
    gh#cmus/cmus#1201
  * #1219: Update Unofficial IRC channel
    gh#cmus/cmus#1220
  * Recognize artist/album sort keys from ffmpeg plugin
    gh#cmus/cmus#1165
  * Fix missing combining marks on last character in a field
    gh#cmus/cmus#1151
  * Use wcwidth for u_char_width
    gh#cmus/cmus#1198
  * Fix under-allocation when many zero-width characters are
    present
    gh#cmus/cmus#1152
  * Draw title and command lines on first update
    gh#cmus/cmus#1257
  * Switch to -latest os in build workflow
    gh#cmus/cmus#1265
  * ip/mp4: Use MP4FindTrackId() rather than assuming it's "1"
    gh#cmus/cmus#1255
  * Remove AV_CODEC_{CAP,FLAG}_TRUNCATED for FFmpeg 6 compatibility
    gh#cmus/cmus#1254
  * Introduce basu as an option for MPRIS control
    gh#cmus/cmus#1221
  * Add auto_hide_playlists_panel option
    gh#cmus/cmus#1238
  * Fixed zsh autocompletion for --query/-Q
    gh#cmus/cmus#1244
  * Search should only try filename when there are no tags
    gh#cmus/cmus#1263
  * Ignore duplicates when adding tracks to the library
    gh#cmus/cmus#1052
  * Implement pl_env_vars option for library/playlist/cache
    relocation
    gh#cmus/cmus#1085
  * pulse: don't drain the stream
    gh#cmus/cmus#1268
  * Fixed function detection. check_function failed to compile due
    to clang -Wint-conversion warning became error.
    gh#cmus/cmus#1269
  * Support italic text
    gh#cmus/cmus#1179
  * Flag to prevent cycling with left-view / right-view
    gh#cmus/cmus#1275
  * Add mouse bindings for right third of status bar
    gh#cmus/cmus#1272
  * Implement option to ignore pasted text in normal mode
    gh#cmus/cmus#1271
  * Add option to sort albums
    gh#cmus/cmus#1276
  * Check only title in track title replacement
    gh#cmus/cmus#1281
  * Add %{totaldiscs} to available format string
    gh#cmus/cmus#1294
  * [FFmpeg] Switch to new channel layout api
    gh#cmus/cmus#1292
  * Reduce R128 gain precision to 2 places of decimal
    gh#cmus/cmus#1291
  * Fix formatting of whole number doubles
    gh#cmus/cmus#1290
  * Fix unmute when using softvol
    gh#cmus/cmus#1279
  * Allow cue plugin to parse cue sheet with multiple files.
    gh#cmus/cmus#1300
  * Add commands for external playlist management
    gh#cmus/cmus#1297
  * Fix gbuf to account for print width of control characters
    gh#cmus/cmus#1289
  * Fix player-next-album / player-prev-album with play_sorted
    gh#cmus/cmus#1277
  * Fix ignore_duplicates missing filtered tracks
    gh#cmus/cmus#1288
  * Parse LAME header when mp3 was created with libavcodec
    gh#cmus/cmus#1321
  * Support 384kHz sample rates
    gh#cmus/cmus#1314
- Drop ffmpeg-6-compat.patch</changelog>
</package>
<package pkgid="82f4ac95138440544cca8818ec1401c108df5c3e6fa5db68668808de0f2cf99a7e4b39b5140378056d35e2ae2047d774e30914d21fe7dc9f9077a74ed3d83c61" name="cnf" arch="x86_64">
  <version epoch="0" ver="0.7.1~0" rel="160000.2.2"/>
  <changelog author="michal.vyskocil@gmail.com" date="1695038400">- add Obsoletes back to please the Factory staginh installcheck</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1695297600">- install binary as /usr/bin/cnf
  * openQA fail boo#1215546
  * https://github.com/vyskocilm/cnf-rs/issues/21</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1699876800">- Update to version 0.6.0~0:
  * Problem: non idiomatic code can be merged
  * Problem: non idiomatic code
  * easy fixes by clippy
  * Problem: drop the rest of unwrap
  * Problem: print_debug is again not idiomatic Rust</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1700481600">- Packaging cleanup
  * Drop Group, even for Leap packaging
  * Use most recent cargo_vendor service version
  * Use spec cleaner
  * Drop manual Provides
  * Use mode=manual in _service
  * Drop cargo_config from spec sources
  * Explain clang build dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700827200">- Enable build on 32-bit arm</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Enable build on riscv64</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742731200">- Update to version 0.7.1~0:
  * Leap 15.6 compatibility
- Update to version 0.7.0~0:
  * added esperanto translations (#16)
  * Problem: dependabot alert for shlex (#9)
  * Powershell note (#11)
  * Problem #14: es (Esperanto) file is in Greek language (#15)
  * fix all clippy warnings (#17)
  * Update dependencies and raise version (#18)
  * Update README.md (#12)</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742990400">- do not auto update vendored dependencies - fixes Leap 15.6 build problem</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1745323200">- Fix Obsolete of a scout-command-not-found to &lt;= 0.2.9</changelog>
  <changelog author="nico.krapp@suse.com" date="1749643200">- enable build for all rust architectures</changelog>
</package>
<package pkgid="41ed179a201ddcf30a0d9f8fc933c993addbeb0042ec7935519ba5e9b1c30cdf0835c4c9b31d565c163dffc7f16453fa8ba2bb1b463611ff37798b2117e361e4" name="cnf-bash" arch="noarch">
  <version epoch="0" ver="0.7.1~0" rel="160000.2.2"/>
  <changelog author="michal.vyskocil@gmail.com" date="1695038400">- add Obsoletes back to please the Factory staginh installcheck</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1695297600">- install binary as /usr/bin/cnf
  * openQA fail boo#1215546
  * https://github.com/vyskocilm/cnf-rs/issues/21</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1699876800">- Update to version 0.6.0~0:
  * Problem: non idiomatic code can be merged
  * Problem: non idiomatic code
  * easy fixes by clippy
  * Problem: drop the rest of unwrap
  * Problem: print_debug is again not idiomatic Rust</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1700481600">- Packaging cleanup
  * Drop Group, even for Leap packaging
  * Use most recent cargo_vendor service version
  * Use spec cleaner
  * Drop manual Provides
  * Use mode=manual in _service
  * Drop cargo_config from spec sources
  * Explain clang build dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700827200">- Enable build on 32-bit arm</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Enable build on riscv64</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742731200">- Update to version 0.7.1~0:
  * Leap 15.6 compatibility
- Update to version 0.7.0~0:
  * added esperanto translations (#16)
  * Problem: dependabot alert for shlex (#9)
  * Powershell note (#11)
  * Problem #14: es (Esperanto) file is in Greek language (#15)
  * fix all clippy warnings (#17)
  * Update dependencies and raise version (#18)
  * Update README.md (#12)</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742990400">- do not auto update vendored dependencies - fixes Leap 15.6 build problem</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1745323200">- Fix Obsolete of a scout-command-not-found to &lt;= 0.2.9</changelog>
  <changelog author="nico.krapp@suse.com" date="1749643200">- enable build for all rust architectures</changelog>
</package>
<package pkgid="f83a69427253e66f7fc42f1dcfc8832255e21f19d12f8a100771cfdc04ec55df49d508fe77e7c5ef76857b3decaecf2b31fc26b28748de2486b911415eaedd22" name="cnf-locale" arch="noarch">
  <version epoch="0" ver="0.7.1~0" rel="160000.2.2"/>
  <changelog author="michal.vyskocil@gmail.com" date="1695038400">- add Obsoletes back to please the Factory staginh installcheck</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1695297600">- install binary as /usr/bin/cnf
  * openQA fail boo#1215546
  * https://github.com/vyskocilm/cnf-rs/issues/21</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1699876800">- Update to version 0.6.0~0:
  * Problem: non idiomatic code can be merged
  * Problem: non idiomatic code
  * easy fixes by clippy
  * Problem: drop the rest of unwrap
  * Problem: print_debug is again not idiomatic Rust</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1700481600">- Packaging cleanup
  * Drop Group, even for Leap packaging
  * Use most recent cargo_vendor service version
  * Use spec cleaner
  * Drop manual Provides
  * Use mode=manual in _service
  * Drop cargo_config from spec sources
  * Explain clang build dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700827200">- Enable build on 32-bit arm</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Enable build on riscv64</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742731200">- Update to version 0.7.1~0:
  * Leap 15.6 compatibility
- Update to version 0.7.0~0:
  * added esperanto translations (#16)
  * Problem: dependabot alert for shlex (#9)
  * Powershell note (#11)
  * Problem #14: es (Esperanto) file is in Greek language (#15)
  * fix all clippy warnings (#17)
  * Update dependencies and raise version (#18)
  * Update README.md (#12)</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742990400">- do not auto update vendored dependencies - fixes Leap 15.6 build problem</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1745323200">- Fix Obsolete of a scout-command-not-found to &lt;= 0.2.9</changelog>
  <changelog author="nico.krapp@suse.com" date="1749643200">- enable build for all rust architectures</changelog>
</package>
<package pkgid="b23b2f698da00b8e45fcb7d09b9f252d5496fb74fac17b94e9074996218e197d1b2f82f629d088e8db3a7df58ccc8aaca531060519cc8fa79b2378a0005b501d" name="cnf-zsh" arch="noarch">
  <version epoch="0" ver="0.7.1~0" rel="160000.2.2"/>
  <changelog author="michal.vyskocil@gmail.com" date="1695038400">- add Obsoletes back to please the Factory staginh installcheck</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1695297600">- install binary as /usr/bin/cnf
  * openQA fail boo#1215546
  * https://github.com/vyskocilm/cnf-rs/issues/21</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1699876800">- Update to version 0.6.0~0:
  * Problem: non idiomatic code can be merged
  * Problem: non idiomatic code
  * easy fixes by clippy
  * Problem: drop the rest of unwrap
  * Problem: print_debug is again not idiomatic Rust</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1700481600">- Packaging cleanup
  * Drop Group, even for Leap packaging
  * Use most recent cargo_vendor service version
  * Use spec cleaner
  * Drop manual Provides
  * Use mode=manual in _service
  * Drop cargo_config from spec sources
  * Explain clang build dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1700827200">- Enable build on 32-bit arm</changelog>
  <changelog author="schwab@suse.de" date="1701691200">- Enable build on riscv64</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742731200">- Update to version 0.7.1~0:
  * Leap 15.6 compatibility
- Update to version 0.7.0~0:
  * added esperanto translations (#16)
  * Problem: dependabot alert for shlex (#9)
  * Powershell note (#11)
  * Problem #14: es (Esperanto) file is in Greek language (#15)
  * fix all clippy warnings (#17)
  * Update dependencies and raise version (#18)
  * Update README.md (#12)</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1742990400">- do not auto update vendored dependencies - fixes Leap 15.6 build problem</changelog>
  <changelog author="michal.vyskocil@gmail.com" date="1745323200">- Fix Obsolete of a scout-command-not-found to &lt;= 0.2.9</changelog>
  <changelog author="nico.krapp@suse.com" date="1749643200">- enable build for all rust architectures</changelog>
</package>
<package pkgid="039bbc9b7833c76bdaefea51c29de6b59f4aadb5a7731e6c1732dfefb0d5974ccbb008ea7cc829e931476705307216ee6653683e7c2f64ea333c7bba835774f1" name="cntlm" arch="x86_64">
  <version epoch="0" ver="0.92.3" rel="bp160.1.13"/>
  <changelog author="mpluskal@suse.com" date="1428840000">- Cleanup spec file with spec-cleaner
- Use url for source
- Correct unit file permissions, scriplet and rcservice
  symlink</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1456920000">- Revert to state without conflicts</changelog>
  <changelog author="mpluskal@suse.com" date="1458820800">- Correct typo in changelog
- Fixed boo#914157</changelog>
  <changelog author="dimstar@opensuse.org" date="1495195200">- Don't hide errors while creating users, and do not mask failures:
  if there is a problem creating the user there is no reason to
  believe the application would work afterwards.
- Add group(nogroup) to Requires(pre): the user to be created joins
  that group.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630065600">- Added hardening to systemd service(s). Modified:
  * cntlm.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708344000">- Provide user(cntlm): the user is created by the pre script.
  Advertise this capability of the package.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="858122ba30491a14e900a8b099f9e6e6232871277a76625389b7d82c034943ca5612f616efd774de072fe048f5f360795736fd9f7d790aa1a66e3a4329378007" name="coccigrep" arch="noarch">
  <version epoch="0" ver="1.21" rel="bp160.1.8"/>
  <changelog author="jslaby@suse.com" date="1410782400">- update to latest snapshot (20140913)
  * see ChangeLog for changes</changelog>
  <changelog author="jslaby@suse.com" date="1421323200">- update to 20150112
  * python3 support added
- clean up .spec
  * switch to python3</changelog>
  <changelog author="jslaby@suse.com" date="1477915200">- Update to version 20160815:
  * forcing a type to be present was arbitrary
  * vim plugin: fix interactive mode
  * document void option usage in vim plugin
  * Add python3 support
  * Add support for python 3.4
  * setup: use and complete install_requires
  * Fix syntax error in python3 environment.</changelog>
  <changelog author="jslaby@suse.com" date="1477915201">- package also LICENSE</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1529323200">- Update to version 1.17+git.20180322:
  * grep mode: fix multiline case
  * fix typo in comment
  * used: fix equality match
  * allow multiple match on the same line
  * fix grep mode display
  * Update version to 1.17
  * set only color in grep mode for tty
  * color attribute in grep mode
  * add grep mode for color</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- update to 1.20:
  - Fix a python3 comptability issue
  - Add grep color mode
  - Fix multiple matches on one line
  - This release fixes #19 and improve matching capabilities
  - Address a issue with pygments installation on Python 2 and fix parallel execution
  - Some light fixes on the documentation and a cleaner setup.py so the project looks decent on Pypi.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1648641600">- Use ExclusiveArch the same as coccinelle</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1649246400">- Use python build macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1681214400">- Update ExclusiveArch list</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1742385600">- update to 1.21:
  core: python 3.12 support
- package vim plugin
- %check section added
- cleanup</changelog>
</package>
<package pkgid="f5502e7bc056f78028fdfe8a213a7cf9ca617f02856aef7ad995206893ab9eec221075b759a1b47d39c0a290c8ea48206b3dbf20fabfc797c8d2a45a5f254521" name="coccigrep-vim-plugin" arch="noarch">
  <version epoch="0" ver="1.21" rel="bp160.1.8"/>
  <changelog author="jslaby@suse.com" date="1410782400">- update to latest snapshot (20140913)
  * see ChangeLog for changes</changelog>
  <changelog author="jslaby@suse.com" date="1421323200">- update to 20150112
  * python3 support added
- clean up .spec
  * switch to python3</changelog>
  <changelog author="jslaby@suse.com" date="1477915200">- Update to version 20160815:
  * forcing a type to be present was arbitrary
  * vim plugin: fix interactive mode
  * document void option usage in vim plugin
  * Add python3 support
  * Add support for python 3.4
  * setup: use and complete install_requires
  * Fix syntax error in python3 environment.</changelog>
  <changelog author="jslaby@suse.com" date="1477915201">- package also LICENSE</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1529323200">- Update to version 1.17+git.20180322:
  * grep mode: fix multiline case
  * fix typo in comment
  * used: fix equality match
  * allow multiple match on the same line
  * fix grep mode display
  * Update version to 1.17
  * set only color in grep mode for tty
  * color attribute in grep mode
  * add grep mode for color</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- update to 1.20:
  - Fix a python3 comptability issue
  - Add grep color mode
  - Fix multiple matches on one line
  - This release fixes #19 and improve matching capabilities
  - Address a issue with pygments installation on Python 2 and fix parallel execution
  - Some light fixes on the documentation and a cleaner setup.py so the project looks decent on Pypi.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1648641600">- Use ExclusiveArch the same as coccinelle</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1649246400">- Use python build macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1681214400">- Update ExclusiveArch list</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1742385600">- update to 1.21:
  core: python 3.12 support
- package vim plugin
- %check section added
- cleanup</changelog>
</package>
<package pkgid="392770f5576d6e6dd6aa7e91c6df50b7be55dfe9e66806e4ba81c252a81f1c40d5410f88ce979450d673b740eb6b151b51d7d6c05edc494c005dcd907141bdb6" name="coccinelle" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="160000.2.2"/>
  <changelog author="ohering@suse.de" date="1618315200">- update to version 1.1.0
  See included changes.txt for details</changelog>
  <changelog author="jengelh@inai.de" date="1621944000">- Add wrapper script to set COCCINELLE_HOME [boo#1184563]</changelog>
  <changelog author="ohering@suse.de" date="1631361600">- build with VERBOSE=yes</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1632225600">- Fix totally broken python support, set the correct python3
  interpreter, otherwise it defaults to python, which in our case
  is python 2.7. (changed kill-env.diff, spec)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1632484800">- Further testing shows that grep, which and findutils are also
  required.</changelog>
  <changelog author="ohering@suse.de" date="1639137600">- update to version 1.1.1
  See included changes.txt for details
- install ocaml support, add coccinelle.rpmlintrc (bsc#1192695)</changelog>
  <changelog author="ohering@suse.de" date="1640779200">- trim list of supported archs to aarch64 ppc64le s390x x86_64</changelog>
  <changelog author="schwab@suse.de" date="1669723200">- Enable build on riscv64
- Increase stack size</changelog>
  <changelog author="ohering@suse.de" date="1720785600">- update to version 1.2
  See included changes.txt for details</changelog>
  <changelog author="ohering@suse.de" date="1741003200">- update to version 1.3.0 (027b625f9)
  See included changes.txt for details
- use coccinelle.patch to link to ocaml-pcre2
- remove unused kill-env.diff
- add optional testsuite package</changelog>
</package>
<package pkgid="edee57a3a8ca26901c45fd027565b432a017dc40df7b510f61804998eda0f88551d14759142d43d2cdc959f6db9cface52c35f52eeb01eb063517c7ff5e3e84f" name="cockpit" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="4b8a81dac70ccf2f37fef9252e9cf85be43ae182b0054922fc363c0b5a4a6d458e77491b511fe895d06d4360f090bcabd80417bc6757d16dee256264b44d885d" name="cockpit" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="39c140d0d87deafe7d4756c1c4723009da670333181d157179eec657fd78fa715d1f3fc710d6f2e29b20c45b9eeeca11c21b77bd1830e2e6b96d2e3a2fffa84b" name="cockpit" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="78765a4cb2663215e60c9e63edfa3e6553313d9eee6275b9bb125fef366c3a745b59441970b9ba09b9c9d4864da8a07c61684a8474b35f6ba77dc1587eb2430a" name="cockpit" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="86bc1e21efe11593e26c4a3141afbf90282856114ff9a05aff09810035ee0f0055ccd3ada4d0fca02442af9ec454ae8b7eb37b686ab38488ece3467eaa5f4996" name="cockpit" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="7dfaa27e31c4f41c16d0255f2a1307edfe0b2fc96a3f924cf2aa527538703799808256bb7d9bc2376200331a6051390cffc5db26f87134c2e730debcdd5a304c" name="cockpit" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="a094efb42653744ba32b9a097b0d7910db79478f1f0258e1b93c76ffcc48c9ff89db751a0a51cb89796a5621710f5569c32247511eec004e90b8e700030a783d" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="1cc9ac3dc492a423950eb32c7eb7ec937493a28b663a7c18a331c887d48f83e3a3f2a37a66f50f977c996b1ed4fa786161474b9dbec2ea2bbc9819ef1284ee47" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="0987873d257c32f74274d3c28a7d7efab4ec03f672d92b1790ce5c62772ed27e887f1cd64d551dca75e2e7e3e4ebc73985ef2161759e87f9b36e3557265c5bd9" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="8b9dd7341379119cd8538bdbf0ed3dfe1ae3c48ab0c2ef1b25fe1e873c1f38d8ba965e88356acf85620127489789a5525d75a76e4aeac540430496d7a7da3ab6" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="09bdafb6d6e355e17d1f695eb7f19c87b31a608b14853764443d2645e04b296d23cc1665217aeea9bf8f4c22d575a80ab08febedf6b3eea0694570a12eadacdc" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="5f63dc7512892ba2df9e176dbfc6601516db184e4a63abcb4a6b62781a06440088d9c6fdcae696db11372b8f453d37702d60b20f75c0b0a5d6178ddf4233488a" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="fb09b25a9f6757514cb71b8517c3c6da42310977675512a37d95e6eeb0f9556d9ef62b2a68ae383afef644b7f73327570078cdecbddf6414dbc5bd12fe7c1680" name="cockpit-client-launcher" arch="noarch">
  <version epoch="0" ver="356" rel="bp160.1.1"/>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1772107200">- Initial packaging of cockpit-client-launcher for Cockpit 356
- Add org.cockpit_project.CockpitClient.desktop based
  desktop file which uses cockpit-client-launcher
- Add launcher that connects to locally installed cockpit-ws and
  auto-detects the listening port from cockpit.socket</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1772107201">- A true YaST_logo.svg inspired logo to differentiate icon from
  flatpak launcher</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1772452800">- Add zenity dialog for starting cockpit if it's not running
  friendly ask user for the firwall configuration.
  Related to jsc#CPT-148</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1772452801">- Mention multiple password prompts in the zenity dialog.
  Once for cockpit.socket enablement and once for firewall config</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1772712000">- Rename cockpit-client.changes to cockpit-client-launcher.changes
  Found by factory-auto</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1772712001">- Add dependency on a cockpit-system
  Required in case that patterns-cockpit is not installed</changelog>
</package>
<package pkgid="499be0c8600a578f65cae2311bc82e66af5432f0a0c4fde7c854f47a0ae5f318cb2809bbb6a02c25fbfa9ada25f172ea7e389e116895960e0de2f502bfde3198" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="a87698eecf09295409bf8edeb04cf7ef3916ece7d13cf5e80058d39a31dd377936739e54ababb8c4ab5f1c3ae0cfa92f1d766397073ba87cd874270346913477" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="90ca78c42cd68e3b28454450473b238e6e14415956c2134382342ab19433dd4caa31bae40e506e86e1f4521679aa9b2c1da44caaf9f93e128e7eadae76d8593b" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="526d59aff697da9b543f5a82f6d2ba485e54031281c5e9b357b1734c7e9c22a512814b35f475fc7f0bea73cd882cea4332eeaf538d6ff27552eac2a70d3aeb38" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="d88dc1842b5909370915344a447c05e4595092a36b5afda908548ad5a0035e0e3be1250e1b84d54e4162d05c8d3effe389c355b6bf655a766567924031247886" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="081d50c4656fbd677d6d9089acd11964c90d9ca3cb4b1c0ae4bbf2b4f7efa405a69af7dfd320275421720c21a0f01795e932d3dd418b880fc91b6c167bafe09e" name="cockpit-devel" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="29abaf1535562f1c205e6d7a22e1560c65a16442096ff85c7ed75ac598632c34febbf7a073d6fdf21ba6c3d506078ee0b025221a19e69cd9f9579d5cca204345" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="7e14ec42967e4562698b2bf82a05bfe95645ae8df3700de823f57cd99853c82286e388b4e168d7dbdefee0360c320b9cb753ab5b6787181a0fabfb3beff1cd65" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="e338f408b5b3f6c97463e6b23aadf79c9dfd1e5d5ba92aa8ea0238c358abb71ef2d32798908e280738cffa75632ffeeaa8cc82737798c21667e7f0677e6e92e2" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="6208ebcb91ccc1e73d6557245f76ca29012f3978e692482ce822fe42355ee62c34fc85bbdd597972040d3ed616dcbb7ef6b6fa8073c8ff7c012af34230b465e4" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="0111090980cf5ce4db2d3d86410f3820e715d1f15bc9d9524438e50ceca565abbd82a74bce00112d35c6ca518eec235aacd00f45009cf794d7c503511064be0f" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="2818ba1a46a71e3274d373e453a2cf018d81d7b47380911dfb2bbf7c8a438ff7bd70c0b0c3334fc540c961efe2815412faf9238c725917fb78f4c3390dc8021f" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="69edf52154ec6b87eda5ccaef678629183cab726d809c409c11fec9dd6e3426613f1085c1f89aef5aaae5a0101aeec5ee2133c429b532a1d33542531acb72b0d" name="cockpit-firewalld" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="dd6eb69397464cc1afad9451aee6cac9284d1f76d4d13feb68d7fdc85ad1eff35ddb172cbee372f5b53ab7094803ce20db6ef03fb1c2860e0cbbd0415024fa17" name="cockpit-firewalld" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="bd9459d0627c40b31206e263473bfd1eb78c5e2ad63278d390a0f7530580d3269f82082c97432bb87bc21bcf56ad2a68d1fb96eb4b8024a9a9ffb2ae22917bd5" name="cockpit-firewalld" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="0f682b0665b8d0ef95f4b1b63403b51a9166fff35b78d87c3467b2ea56e36b12a04122bc5c472ab58995147423cf75e1b602aeceb13b3b4b6c4d9a90be984b7b" name="cockpit-firewalld" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="d17a1cfa8a0a9dacd7f0b1cd45e1598c249d349f547103dc4ce3218ad542ffa088e779febc846d876284cb01a2dd34b5165465e5d35a5252da67a87034e6d6fc" name="cockpit-firewalld" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="74ef7c7e45829772eee4e7d8a367f7279c0c120bb168448f9047700536d99360e192fb77b146b465eb592efcb5ca951a42857a831fcedc76195e97a3659fed43" name="cockpit-firewalld" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="42aa25dca00d9e5201bc2328b328acc54918212a589737368ae8159edde855f740f51744acd2b26d52512b720ad898455b42729623e19abc7e21cc636cef8d3f" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="1cb5661aa949c9ea4442edf788307e35790c8eab3b3627dd28d166da1c491313198b5cc0c33b8e0ad621cb6f4376475838cf1ea03b470dbd2f7c63950570530c" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="fcf0cf99c6c9dc663258139cd692c1ab0820c2a6f131071e86bbf9244b7d138d052ded73f541126fcc3b84b6f3071a9742ff3f9ebfaa261abdf46bb1c2461560" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="08f051040ab658c0cfd9fe8d737c59044e52b036839d9f60a44e1748ea502963b030469c086c69dafd37d2c8be43dec28a7b19c8448ab0cee453b433011819c5" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="58e695d9f0269b3c6db23ad1a19e3c899165c76da748ac69cb371130a07cf7aca8be8b1ddfe51532b60f796af81c4990bfc5b0f9c307b38ab8a6775195c3d71f" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="8da92adea4d2e2accd462dbd32cba2115023721ca969b8dc6b0bb575ba70bbbfeec4ffd589c9350c5abaae7dc726f79f59b8141a9dc3fc461ff63a4c23198e00" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="451d80b009953b024773ce260a02d8a5da5d3d3d9dff605ddbb682e7cdf7a4dd618dcbb004e4d9ceeac51fa429bd083954e5b6790ece4087a2c56ce04061b6b1" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="333" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1722427200">- update_version.sh: add script for auto-updates
- switch to upstream package-lock.json
- do not run scripts during npm install
- switch to source package instead of precombined upstream release</changelog>
  <changelog author="luna.dragon@suse.com" date="1733227200">- Update to 324:
  * Limit size of descriptions
- Changes from 323:
  * Action to add a TPM
- Changes from 322:
  * Bug fixes and translation updates
- Changes form 321:
  * Drop usage of virtinterfaced
- Changes from 320:
  * Improve snapshot memory path handling
  * Add support for VM descriptions
- Changes from 319:
  * Translation updates
  * Bug fixes
- Changes from 318.1:
  * Translation updates
- Changes from 318:
  * Translation updates
  * Test fixes
- Changes from 317:
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1739966400">- Update to 327:
  * Translation updates
- Changes from 326:
  * Download and install unsupported and older operating systems
- Changes from 325:
  * Improve rendering of VM descriptions
  * Translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1741608000">- Remove qemu-spice from SLFO_16 (bsc#1238723)</changelog>
  <changelog author="alice.brooks@suse.com" date="1741608001">- Update to 328
  * Translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1741953600">- Patch cockpit-machines to use UEFI as default firmware
  * added uefi-default-firmware.patch</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- update to 330
  * Upgraded to Patternfly 6
- changes from 329
  * Fix launching remote viewer
  * Translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1750075200">- Update to 333
  * Bug fixes
  * The "shareable" attribute of disks is no longer modified by Cockpit
  * Virtual network interfaces can now select source mode</changelog>
  <changelog author="miika.alikirri@suse.com" date="1750939200">- Patch cockpit-machines to ignore domain not found errors
  when domain is deleted (bsc#1236383)
  * added nic-domain-not-found.patch</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752062400">- Explicitly set uefi as default firmware (bsc#1245145)</changelog>
</package>
<package pkgid="8554e69dfbf5a9b2bd0d457c8c4011d099021bff96091ff450fec4f8585a797c56ebd10fc0fed80391d4e5cb590b2c3284cbf422ad002eecfc17d87e9005a388" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="346" rel="160000.1.1"/>
  <changelog author="miika.alikirri@suse.com" date="1750939200">- Patch cockpit-machines to ignore domain not found errors
  when domain is deleted (bsc#1236383)
  * added nic-domain-not-found.patch</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752062400">- Explicitly set uefi as default firmware (bsc#1245145)</changelog>
  <changelog author="alice.brooks@suse.com" date="1755691200">- Update to 337
  * 337
  - Bug fixes and translation updates
  * 336
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates
  * 335
  - Bug fixes and translation updates
  * 334
  - Bug fixes and translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757592000">- Update to 339
  * 339
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions
  * 338
  - Translation and dependency updates
  - Detachable VNC console
- removed nic-domain-not-found.patch that is now part of upstream</changelog>
  <changelog author="luna.dragon@suse.com" date="1758024000">- add hostadd-allow-device-form-to-overflow-on-X-axis.patch fixes bsc#1248250</changelog>
  <changelog author="alice.brooks@suse.com" date="1758024001">- Add a hard require on libvirt bsc#1236149</changelog>
  <changelog author="miika.alikirri@suse.com" date="1758110400">- Don't set UEFI as default firmware for ppc64le and s390x
  * Fixes bsc#1249828 and bsc#1249830</changelog>
  <changelog author="alice.brooks@suse.com" date="1760961600">- Update to 342
  * 342
  - Bug fixes and translation updates
  * 341
  - Improved UX for Disks and Network interface tables
  - Bug fixes and translation updates
  * 340
  - Use exclusive VNC connections with "Remote resizing"
- Drop hostadd-allow-device-form-to-overflow-on-X-axis.patch as this has
  been upstreamed</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 344
  * 344
  - Port forwarding for user session VMs
  - "Shutdown and restart" action
  - Faster startup
  * 343
  - Memory usage now shows numbers reported by the guest (RHEL-116731)</changelog>
  <changelog author="alice.brooks@suse.com" date="1769515200">- Update dependencies for bsc#1257325/CVE-2025-13465
- Update to 346
  * 346
  - Performance improvements
  - Translation updates
  * 345
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates</changelog>
</package>
<package pkgid="d03c37e06f0d3afec6255e0f9319f6a705e83c17d254e4101e8ac7050209d56167dea8553c42bd83960586add5667ca9c346551c7bc614d6222f0a587ca126e9" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="346" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752062400">- Explicitly set uefi as default firmware (bsc#1245145)</changelog>
  <changelog author="alice.brooks@suse.com" date="1755691200">- Update to 337
  * 337
  - Bug fixes and translation updates
  * 336
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates
  * 335
  - Bug fixes and translation updates
  * 334
  - Bug fixes and translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757592000">- Update to 339
  * 339
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions
  * 338
  - Translation and dependency updates
  - Detachable VNC console
- removed nic-domain-not-found.patch that is now part of upstream</changelog>
  <changelog author="luna.dragon@suse.com" date="1758024000">- add hostadd-allow-device-form-to-overflow-on-X-axis.patch fixes bsc#1248250</changelog>
  <changelog author="alice.brooks@suse.com" date="1758024001">- Add a hard require on libvirt bsc#1236149</changelog>
  <changelog author="miika.alikirri@suse.com" date="1758110400">- Don't set UEFI as default firmware for ppc64le and s390x
  * Fixes bsc#1249828 and bsc#1249830</changelog>
  <changelog author="alice.brooks@suse.com" date="1760961600">- Update to 342
  * 342
  - Bug fixes and translation updates
  * 341
  - Improved UX for Disks and Network interface tables
  - Bug fixes and translation updates
  * 340
  - Use exclusive VNC connections with "Remote resizing"
- Drop hostadd-allow-device-form-to-overflow-on-X-axis.patch as this has
  been upstreamed</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 344
  * 344
  - Port forwarding for user session VMs
  - "Shutdown and restart" action
  - Faster startup
  * 343
  - Memory usage now shows numbers reported by the guest (RHEL-116731)</changelog>
  <changelog author="alice.brooks@suse.com" date="1769515200">- Update dependencies for bsc#1257325/CVE-2025-13465
- Update to 346
  * 346
  - Performance improvements
  - Translation updates
  * 345
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="ed6f2fbdb2c796686b9f1fec57486288def20e6cdb0806c2f5db0772bdf37eeb73de7ab86115084c8690723792a88201bfcb71a2d36213b0dc3bfe5193667089" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="24e089834df1688caa55f52e88c8ed2aae6c3482473facdd53ccce3a0527be55acebb0e210e693c825580778ec2cfed5159764f5b81cd0c64c76732a4fab219a" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="b30deb8e53e83f48f269de4f81f1e8564b42781db7d73f4eefaf1e4aaafb918cdac6fc9f4af37179f62f6190267e1374602e19beceb017aaf1467e581efc459c" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="b248d1d19581b3a8a7efcee2cc197825d0837966eead94c7bb6c77dc7fc44c1f473f0c597e18259eb384388f75b10fc62c651cde6571143dce4f2356bb8c4435" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="7b3708e90a51ec24701f9ff0583ac7422062f021b2d53a4f2123ede02f4eeb59442ce32b91da3e317267c10556bdd7f7548aa647e0b9a212916e4bf0ea24f813" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="91b17959f4bb74911b283bb197fafc73acdac2b5ae7de43a6989d2d856607a77f3e79ac8e94f58959b7603e74161a6c03c21d86c2ecd28f0d16aff102334e527" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="3dd8a37c7ae8a5953e08dca485003b3be798b38892d2cc6ba816a8948495e0305443deff87197eefc1b4776a1c177a120bdefcdc958faf3172553af3112729f2" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="75035baa6c970af93ae9f7e6ed066bf23021abf778a6e641859c9ba79dcb0db9211e485deab7a4f237ec259f93924c95e588c412f57eb04d53edfaa3204bef6e" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="e99b28e9f9f0be4ef29681baf292f2061a2bd02ad523fc6e71026357a1c60508bb87fee4789575f30adfdb8cff86be075aca61810975246f80525570007e7107" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="58831b5685fd888d38e3c733eed86611989b6417910d3c465d9416e0040ebb88c0a7f927d7baf29812afb065d51b7092e8f4a21ea6830d510e68b64cd1878b13" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="8d09cd214bf8538f7bcaace5aeee856ee5debf1b477b734f8033d60b7a1418e130715d9e2d14a5d9cd56030ee728ec279242f666c08d359187107579357762e1" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="dd18b58408e8dfc68b1060bf15535f3650a294c692f2da9e701558829a9966d32a4c98806bb2f6885380628287a3ecfa41a70c3a17ac38b10968ce797709bdf1" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="13be90e365e7e3d25bbb9617b8f6433b66bb99f7efc25da77717ab7b862c3310fd075977d484438f626a87a35f8923a6b3b631490c36a9414a6aafb35c041589" name="cockpit-packages" arch="noarch">
  <version epoch="0" ver="3" rel="160000.2.2"/>
  <changelog author="miika.alikirri@suse.com" date="1740052800">- Initial cockpit-packages package</changelog>
  <changelog author="miika.alikirri@suse.com" date="1740052801">- Update to version 1:
  * pkg: Add packages spec file
  * misc: Display app as Packages instead of Starter Kit</changelog>
  <changelog author="miika.alikirri@suse.com" date="1741262400">- Update to version 2:
  * pkg: Release version 2
  * pkg: Add copyright to spec file
  * misc: Updated README
  * pkg: Remove unused spec file
  * src: Add translation to Uninstall word
  * src: Show loading indicator while searching packages
  * src: Require superuser to view the page
  * src: Make search more responsive
  * src: Show "Reinstall" button on already installed pacakges
  * pkg: Add packages spec file</changelog>
  <changelog author="luna.dragon@suse.com" date="1747310400">- Update to version 3:
  * build(deps-dev): bump @typescript-eslint/eslint-plugin
  * build(deps-dev): bump the stylelint group across 1 directory with 2 updates
  * ci: run typecheck on pullrequests
  * misc: Add a script for checking types
  * build(deps-dev): bump the esbuild group with 2 updates
  * build(deps-dev): bump @typescript-eslint/eslint-plugin
  * build(deps-dev): bump stylelint-config-recommended-scss
  * build(deps): bump the patternfly group with 4 updates
  * pkg: bump cockpit-devel dependency version to 337
  * src: Fix UI issues
  * src: Fix patternfly 6 dependencies
  * misc: Update dependencies to patternfly 6
  * build(deps-dev): bump @typescript-eslint/eslint-plugin
  * Update remove.tsx
  * build(deps-dev): bump stylelint in the stylelint group
  * build(deps-dev): bump the esbuild group with 2 updates
  * build(deps-dev): bump stylelint in the stylelint group
  * build(deps-dev): bump glob from 11.0.1 to 11.0.2
  * build(deps-dev): bump the types group with 2 updates
  * build(deps-dev): bump the stylelint group with 3 updates
  * build(deps-dev): bump qunit from 2.23.1 to 2.24.1
  * build(deps-dev): bump eslint-plugin-react
  * build(deps): bump the patternfly group across 1 directory with 2 updates
  * build(deps-dev): bump the esbuild group with 2 updates
  * ci: Add ci for pull request
  * misc: add pot for translations
  * build(deps-dev): bump esbuild from 0.24.2 to 0.25.0
  * misc: Add .git-blame-ignore-revs
  * src: Fix all eslint rules
  * misc: update eslint rules</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch so we can add custom styling</changelog>
</package>
<package pkgid="018746b42a113dca795fded7657c20c21d5ed3dde89a3e8ec3783ad905ba09cb4890b9d30f870eea201febfb1be1d90d3cf817d9a82eaa41eb805536b7fb4611" name="cockpit-packages" arch="noarch">
  <version epoch="0" ver="3" rel="160000.3.1"/>
  <changelog author="miika.alikirri@suse.com" date="1740052800">- Initial cockpit-packages package</changelog>
  <changelog author="miika.alikirri@suse.com" date="1740052801">- Update to version 1:
  * pkg: Add packages spec file
  * misc: Display app as Packages instead of Starter Kit</changelog>
  <changelog author="miika.alikirri@suse.com" date="1741262400">- Update to version 2:
  * pkg: Release version 2
  * pkg: Add copyright to spec file
  * misc: Updated README
  * pkg: Remove unused spec file
  * src: Add translation to Uninstall word
  * src: Show loading indicator while searching packages
  * src: Require superuser to view the page
  * src: Make search more responsive
  * src: Show "Reinstall" button on already installed pacakges
  * pkg: Add packages spec file</changelog>
  <changelog author="luna.dragon@suse.com" date="1747310400">- Update to version 3:
  * build(deps-dev): bump @typescript-eslint/eslint-plugin
  * build(deps-dev): bump the stylelint group across 1 directory with 2 updates
  * ci: run typecheck on pullrequests
  * misc: Add a script for checking types
  * build(deps-dev): bump the esbuild group with 2 updates
  * build(deps-dev): bump @typescript-eslint/eslint-plugin
  * build(deps-dev): bump stylelint-config-recommended-scss
  * build(deps): bump the patternfly group with 4 updates
  * pkg: bump cockpit-devel dependency version to 337
  * src: Fix UI issues
  * src: Fix patternfly 6 dependencies
  * misc: Update dependencies to patternfly 6
  * build(deps-dev): bump @typescript-eslint/eslint-plugin
  * Update remove.tsx
  * build(deps-dev): bump stylelint in the stylelint group
  * build(deps-dev): bump the esbuild group with 2 updates
  * build(deps-dev): bump stylelint in the stylelint group
  * build(deps-dev): bump glob from 11.0.1 to 11.0.2
  * build(deps-dev): bump the types group with 2 updates
  * build(deps-dev): bump the stylelint group with 3 updates
  * build(deps-dev): bump qunit from 2.23.1 to 2.24.1
  * build(deps-dev): bump eslint-plugin-react
  * build(deps): bump the patternfly group across 1 directory with 2 updates
  * build(deps-dev): bump the esbuild group with 2 updates
  * ci: Add ci for pull request
  * misc: add pot for translations
  * build(deps-dev): bump esbuild from 0.24.2 to 0.25.0
  * misc: Add .git-blame-ignore-revs
  * src: Fix all eslint rules
  * misc: update eslint rules</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch so we can add custom styling</changelog>
  <changelog author="alice.brooks@suse.com" date="1770292800">- Dependency updates fixes bsc#1257325/CVE-2025-13465</changelog>
</package>
<package pkgid="707a25df2266ff52f50077833edf86508eb35fb4dabc333a2382d3e04c66dbc0259a31e771e1c5e048abe9ce316ff667ce3cc0e8d8d9bd3bdf04f511746b9b6b" name="cockpit-packages" arch="noarch">
  <version epoch="0" ver="4" rel="160000.1.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757678400">- Update to version 4:
  * Translation updates
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1774353600">- Update dependencies to fix bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="5af5d13fc4780fbdab3bf3e592870c54a798b50c2c8e64ba471d89d10e4bfd1528dfcdf9f38f4e2dbbe4fc409c393486fe8c18931ee46f3dc1b66eb6bb808c5b" name="cockpit-podman" arch="noarch">
  <version epoch="0" ver="107" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1706702400">- New version 83:
  * bug fixes and library updates</changelog>
  <changelog author="ecsos@opensuse.org" date="1708257600">- New version 84:
  * Bug fixes and stability improvements</changelog>
  <changelog author="adam.majer@suse.de" date="1722427200">- New version 91. Changes since 84:
  * Implement pull option for existing images
  * Use binary http channel for podman socket for non-UTF-8 robustness
  * Stop using obsolete cockpit.utf8_{de,en}coder() API
  * Translation updates
  * Bug fixes and performance improvements
- update_version.sh: fetch package-lock.json from upstream
  instead of regenerating.</changelog>
  <changelog author="herbert@graeber-clan.de" date="1723204800">- Fix systemd units folder for leap and sle (Similar issue like boo#1226541)</changelog>
  <changelog author="alice.brooks@suse.com" date="1730808000">- correct-container-search.patch: Fixes issues searching containers
  bsc#1232687</changelog>
  <changelog author="luna.dragon@suse.com" date="1733486400">- New version 99, updates since 91:
  * Update to translations
  * Bug fixes
  * pull images from registries without search API
  * Render ports are ranges in container integration tab</changelog>
  <changelog author="alice.brooks@suse.com" date="1739534400">- Update to version 100
  * dropped: correct-container-search.patch as this behaviour is
    fixed upstream</changelog>
  <changelog author="alice.brooks@suse.com" date="1741608000">- Update to version 102
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- New version 104, updates since 102:
  * drop correct-container-search.patch: upstreamed
  * Upgraded to Patternfly 6
  * Link service containers to service pages
  * Connect to other accounts
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1750075200">- Update to 107
  * Bug fixes
  * Translation updates</changelog>
</package>
<package pkgid="d0523083ef4fa533c0f58e27a7a67a67edbfb1abce7ea0f24ffa00f3b7724ae7d98c3d1f8815192bfd670527f3af644ad4453cbfb2b021a8646f5cc81503f9d2" name="cockpit-podman" arch="noarch">
  <version epoch="0" ver="117" rel="160000.1.1"/>
  <changelog author="luna.dragon@suse.com" date="1733486400">- New version 99, updates since 91:
  * Update to translations
  * Bug fixes
  * pull images from registries without search API
  * Render ports are ranges in container integration tab</changelog>
  <changelog author="alice.brooks@suse.com" date="1739534400">- Update to version 100
  * dropped: correct-container-search.patch as this behaviour is
    fixed upstream</changelog>
  <changelog author="alice.brooks@suse.com" date="1741608000">- Update to version 102
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- New version 104, updates since 102:
  * drop correct-container-search.patch: upstreamed
  * Upgraded to Patternfly 6
  * Link service containers to service pages
  * Connect to other accounts
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1750075200">- Update to 107
  * Bug fixes
  * Translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1755691200">- Update to 112
  * 112
  - Translation and dependency updates
  * 111
  - Bug fixes and translation updates
  * 110
  - Bug fixes and translation updates
  * 109
  - Bug fixes and translation updates
  * 108
  - Bug fixes and translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757419200">- Update to 113
  * Sortable Images table</changelog>
  <changelog author="alice.brooks@suse.com" date="1760961600">- Update to 115
  * 115
  - List stopped quadlets
  - Translations and dependency updates
  * 114
  - Bug fixes and translation updates
  * 113
  - Sortable Images table</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 117
  * 117
  - Performance and stability improvements
  * 116
  - Support stopping/starting/restart quadlets</changelog>
  <changelog author="alice.brooks@suse.com" date="1770120000">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="6db2f04b199de5f770c0be3662247fd414ed4146fb336fb4daac88f8414c0f41ff8d91e1b678a1d1a2487cad0691f797cb0f8388fb21434ef077ffebf123bf66" name="cockpit-podman" arch="noarch">
  <version epoch="0" ver="117" rel="160000.2.1"/>
  <changelog author="alice.brooks@suse.com" date="1739534400">- Update to version 100
  * dropped: correct-container-search.patch as this behaviour is
    fixed upstream</changelog>
  <changelog author="alice.brooks@suse.com" date="1741608000">- Update to version 102
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- New version 104, updates since 102:
  * drop correct-container-search.patch: upstreamed
  * Upgraded to Patternfly 6
  * Link service containers to service pages
  * Connect to other accounts
  * Translation updates
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1750075200">- Update to 107
  * Bug fixes
  * Translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1755691200">- Update to 112
  * 112
  - Translation and dependency updates
  * 111
  - Bug fixes and translation updates
  * 110
  - Bug fixes and translation updates
  * 109
  - Bug fixes and translation updates
  * 108
  - Bug fixes and translation updates</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757419200">- Update to 113
  * Sortable Images table</changelog>
  <changelog author="alice.brooks@suse.com" date="1760961600">- Update to 115
  * 115
  - List stopped quadlets
  - Translations and dependency updates
  * 114
  - Bug fixes and translation updates
  * 113
  - Sortable Images table</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 117
  * 117
  - Performance and stability improvements
  * 116
  - Support stopping/starting/restart quadlets</changelog>
  <changelog author="alice.brooks@suse.com" date="1770120000">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775736000">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="d010e955757f503fb5a1fe81c685569054931876edf9e9ef85bf349c357545838e704e036a0f1082b4874351ae612b5433a7112c5db0c0823230363ff832efef" name="cockpit-repos" arch="noarch">
  <version epoch="0" ver="4.3" rel="160000.2.2"/>
  <changelog author="alice.brooks@suse.com" date="1738843200">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1741348800">- Update to version 2
  * Complete rewrite of error handling
  * Handle non-superuser cases
  * Add handling for noncockpit repo modifications
  * Add update_version.sh to automate version upgrades</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 3
  * Better handling of repository refreshes
  * Improve error handling when deleting repositories
  * Update node_modules</changelog>
  <changelog author="alice.brooks@suse.com" date="1747310400">- Update to version 4.3:
  * misc: remove @ts-expect-error as upstream types contain addEventListener
  * Makefile: Update Cockpit lib to c3930d9078a11407265af3972911f147
  * cockpit-ci: Update container to 2025-05-10
  * build(deps-dev): bump the stylelint group across 1 directory with 2 updates
  * build(deps-dev): bump typescript-eslint/eslint-plugin
  * Makefile: Update Cockpit lib to 2d99a737603637846d296fb2627ebedf
  * build(deps): bump the patternfly group with 3 updates
  * src: fix all off the typescript warnings
  * ci: run typecheck on pullrequests
  * misc: Add a script for checking types</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
</package>
<package pkgid="c40b1c4abfeaaaeb76c2cb30425faf093d6d05d63e80d65d5809663e199e103c943ca344162581032574dd5cbacf3bf2a38411ca33372113bc52bd85b99333f1" name="cockpit-repos" arch="noarch">
  <version epoch="0" ver="4.7" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1738843200">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1741348800">- Update to version 2
  * Complete rewrite of error handling
  * Handle non-superuser cases
  * Add handling for noncockpit repo modifications
  * Add update_version.sh to automate version upgrades</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 3
  * Better handling of repository refreshes
  * Improve error handling when deleting repositories
  * Update node_modules</changelog>
  <changelog author="alice.brooks@suse.com" date="1747310400">- Update to version 4.3:
  * misc: remove @ts-expect-error as upstream types contain addEventListener
  * Makefile: Update Cockpit lib to c3930d9078a11407265af3972911f147
  * cockpit-ci: Update container to 2025-05-10
  * build(deps-dev): bump the stylelint group across 1 directory with 2 updates
  * build(deps-dev): bump typescript-eslint/eslint-plugin
  * Makefile: Update Cockpit lib to 2d99a737603637846d296fb2627ebedf
  * build(deps): bump the patternfly group with 3 updates
  * src: fix all off the typescript warnings
  * ci: run typecheck on pullrequests
  * misc: Add a script for checking types</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757678400">- Update to version 4.4:
  * Translation updates
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1767873600">- Update to version 4.5 fixes bsc#1255425 (CVE-2025-64718):
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1768305600">- Update to version 4.6
  * Translation updates
  * Dependency updates
  * Fix translations pot file not being update</changelog>
  <changelog author="alice.brooks@suse.com" date="1769774400">- Update to version 4.7
  * Translation updates
  * Dependency updates for bsc#1257325/CVE-2025-13465</changelog>
</package>
<package pkgid="5171dc19c76cf5d89b461736f69fc16f1c56f7301629f49224e85556449b9bb0b72bc3ca970ccd9536889a96f1d5e7dd180146a249898eca2205f2fcea1acf3a" name="cockpit-repos" arch="noarch">
  <version epoch="0" ver="4.7" rel="160000.2.1"/>
  <changelog author="alice.brooks@suse.com" date="1738843200">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1741348800">- Update to version 2
  * Complete rewrite of error handling
  * Handle non-superuser cases
  * Add handling for noncockpit repo modifications
  * Add update_version.sh to automate version upgrades</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 3
  * Better handling of repository refreshes
  * Improve error handling when deleting repositories
  * Update node_modules</changelog>
  <changelog author="alice.brooks@suse.com" date="1747310400">- Update to version 4.3:
  * misc: remove @ts-expect-error as upstream types contain addEventListener
  * Makefile: Update Cockpit lib to c3930d9078a11407265af3972911f147
  * cockpit-ci: Update container to 2025-05-10
  * build(deps-dev): bump the stylelint group across 1 directory with 2 updates
  * build(deps-dev): bump typescript-eslint/eslint-plugin
  * Makefile: Update Cockpit lib to 2d99a737603637846d296fb2627ebedf
  * build(deps): bump the patternfly group with 3 updates
  * src: fix all off the typescript warnings
  * ci: run typecheck on pullrequests
  * misc: Add a script for checking types</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757678400">- Update to version 4.4:
  * Translation updates
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1767873600">- Update to version 4.5 fixes bsc#1255425 (CVE-2025-64718):
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1768305600">- Update to version 4.6
  * Translation updates
  * Dependency updates
  * Fix translations pot file not being update</changelog>
  <changelog author="alice.brooks@suse.com" date="1769774400">- Update to version 4.7
  * Translation updates
  * Dependency updates for bsc#1257325/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1774008000">- Update dependencies to fix bsc#1258637/CVE-2026-26996</changelog>
</package>
<package pkgid="d84986b0072af24ae831248ec2275d6882530a7d06138fbda7657e79f138272ed715f2aaa9f01dc6b68e3f2a4211c236a478888bfcd7b87c0f33b3debdc04ca9" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="877e0ae18f4c693c722f816c78728d79120371a39e5f2bae010c4cb3208be454d0ccb8031fb45859985444393c2af4f14dbd0ccd2da12e1fda73fcc42b75de16" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="cf87e69d0ce5757f7cc54bc71a1c6df5559eedcac9ed78324ee8ca2726977c5c804b261ea7537b07361bb18e353d24e79982206e27dd753687570c60e95748e1" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="6a09426a8114e3774be4bf652cca87cfc9a58667f07c3d62fac4637d32c328da77f5026b69681005d9591ce6381ed6febbf6f8045835f59f160b9e42c5700c53" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="435649b807353bf211fc59db1b4c77e314ac254cf90258b05e1d4a55fa9fcc5cdbce6b8d4cbbc0eafe5e11c50e2cfa482808553071d2a1a9d2818fdb7907137f" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="9018cd1ae46b707d8054f7fe35f6169c78dd64cd1765858e2abe7a43275d72b466831f85a244eaed623be9464dc398ebdb9136e17a23a6f7089c18caea241fb6" name="cockpit-selinux" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="c7ad1bf197aaf69acd8558147afcde0f386b9aea421be25b49686b9239406fd7407d043fb39b458c55d45f830ce75d5faa6ee504393268707f1ea6ff06b4d401" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="0124a5bad5e183fcd22b8142bbb25845be8d910df3c5e7fa507368ee58d58713a15ea2c78b703d67923d12cad36db6030ba7c35d1ce3df9962d6b59f6900c621" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="c6947b5a848eeae386c7b2120bd61b22317304c797d791950b48d7f164c745244c4c181a77cea8aece7beef63aefae3077101156e5592594ec221ec77cb3d6c2" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="ed0011e693bc5914079d1e79d35dfee630c558f1b5ca2854c5e0b07dc8f32ec709a6fcec1e01187f067df9c77ad3ac05c15b22297e561d52d150b446cf5939d8" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="d667eb0b751661686e3baa38606a0290f55eda0a1d66e2feaffe75328b439495ecb5546f2387ec034bf94d1f89c6689c35bcdab77d40d0e535a19f6030857290" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="4d229c6862b4bcc4818f3d4c4ec873a77a4882a9085ab3ade8f182e630533164cdc0154683e17e47fc6bece0ceefeb2cb6b1f98055b7aec5a5237dd963aadf9c" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="84ee4be9ba961ec5912f5d1c3039c9b5be67325740f9070819fbab1ae2ba0f0ec749020f4189981fe96b86cd1ebd29c663212f8d1ecc5774b900ff30736ee66e" name="cockpit-subscriptions" arch="noarch">
  <version epoch="0" ver="12" rel="160000.2.2"/>
  <changelog author="alice.brooks@suse.com" date="1736164800">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 8
  * Correct handling for non-superuser cases
  * Various usability and workflow improvements
  * Add a confirm dialog before deactivating a subscription
  * Update node_modules</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- Upgrade to patternfly 6
  * Update dependencies
  * Update translations
  * Bug fixes
  * Better handling of non-superuser transitions</changelog>
  <changelog author="luna.dragon@suse.com" date="1746705600">- update to version 10:
  * Update node_modules
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
  <changelog author="alice.brooks@suse.com" date="1749124800">- Update to version 11
  * Translation updates
  * Fix transactional-update handling of system deregistration
    fixes bsc#1244034
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1751025600">- Update to version 12
  * Translation updates
  * Fix state not updating between superuser state changes bsc#1243212</changelog>
</package>
<package pkgid="465c6b47967a69e47e936f8d1c4962182ea881e8ebae728c9f7a9c12be50757a0158a2dd381c1302ee06c746253c582c004352e596f3454c083321e1e1a37b81" name="cockpit-subscriptions" arch="noarch">
  <version epoch="0" ver="12.1" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1736164800">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 8
  * Correct handling for non-superuser cases
  * Various usability and workflow improvements
  * Add a confirm dialog before deactivating a subscription
  * Update node_modules</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- Upgrade to patternfly 6
  * Update dependencies
  * Update translations
  * Bug fixes
  * Better handling of non-superuser transitions</changelog>
  <changelog author="luna.dragon@suse.com" date="1746705600">- update to version 10:
  * Update node_modules
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
  <changelog author="alice.brooks@suse.com" date="1749124800">- Update to version 11
  * Translation updates
  * Fix transactional-update handling of system deregistration
    fixes bsc#1244034
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1751025600">- Update to version 12
  * Translation updates
  * Fix state not updating between superuser state changes bsc#1243212</changelog>
  <changelog author="alice.brooks@suse.com" date="1767873600">- Update to version 12.1
  * Update js-yaml to backpatch bsc#1255425/CVE-2025-64718</changelog>
</package>
<package pkgid="83fc599e48bedf2f15eac2d7df0e8da7de48adcaa14f4776663584250dabd83a1aca459daca4c50b308bd82390734089994646dc3c5d651c4fc0223ff346405c" name="cockpit-subscriptions" arch="noarch">
  <version epoch="0" ver="12.1" rel="160000.2.1"/>
  <changelog author="alice.brooks@suse.com" date="1736164800">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 8
  * Correct handling for non-superuser cases
  * Various usability and workflow improvements
  * Add a confirm dialog before deactivating a subscription
  * Update node_modules</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- Upgrade to patternfly 6
  * Update dependencies
  * Update translations
  * Bug fixes
  * Better handling of non-superuser transitions</changelog>
  <changelog author="luna.dragon@suse.com" date="1746705600">- update to version 10:
  * Update node_modules
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
  <changelog author="alice.brooks@suse.com" date="1749124800">- Update to version 11
  * Translation updates
  * Fix transactional-update handling of system deregistration
    fixes bsc#1244034
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1751025600">- Update to version 12
  * Translation updates
  * Fix state not updating between superuser state changes bsc#1243212</changelog>
  <changelog author="alice.brooks@suse.com" date="1767873600">- Update to version 12.1
  * Update js-yaml to backpatch bsc#1255425/CVE-2025-64718</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="1cf2191d292b0b41bfe2a9769ba7a9d190580d9eef5af271a80a02c0ede7342be1b032a7eb60073fcc9ddaa8960bf83e6740b564447d643bf26e1a3115fd8dd2" name="cockpit-subscriptions" arch="noarch">
  <version epoch="0" ver="12.1" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1736164800">- Initial build of the package</changelog>
  <changelog author="alice.brooks@suse.com" date="1742558400">- Update to version 8
  * Correct handling for non-superuser cases
  * Various usability and workflow improvements
  * Add a confirm dialog before deactivating a subscription
  * Update node_modules</changelog>
  <changelog author="luna.dragon@suse.com" date="1746187200">- Upgrade to patternfly 6
  * Update dependencies
  * Update translations
  * Bug fixes
  * Better handling of non-superuser transitions</changelog>
  <changelog author="luna.dragon@suse.com" date="1746705600">- update to version 10:
  * Update node_modules
  * Bug fixes</changelog>
  <changelog author="alice.brooks@suse.com" date="1748001600">- Add load-css-overrides.patch to add branding styling</changelog>
  <changelog author="alice.brooks@suse.com" date="1749124800">- Update to version 11
  * Translation updates
  * Fix transactional-update handling of system deregistration
    fixes bsc#1244034
  * Dependency updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1751025600">- Update to version 12
  * Translation updates
  * Fix state not updating between superuser state changes bsc#1243212</changelog>
  <changelog author="alice.brooks@suse.com" date="1767873600">- Update to version 12.1
  * Update js-yaml to backpatch bsc#1255425/CVE-2025-64718</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775563200">- Update dependencies to fix bsc#1258637/CVE-2026-26996</changelog>
</package>
<package pkgid="2622c381718facdfa8994d040e5325b1f952df53c047d73352fdab1697af4e7401ca7e30c74963182530998a6e276f114e816e07fe0c3730763c64f1bfa9ee38" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="f08a95e43f84a866db5169432b92f99afd0509ef7986e3b022ba27076db95a3d4f78d10feb4ac2f2a81abf00c89640ee9c3d328b855cda0c996ca0520da6ba7e" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="c0937fdd5b758f0c5f3ab38bb51354887ce21c7a148ec527c3e81b37cf420f75fdab08fa5742e4013570040c741998651e4d2f347ef165cd4c1c4edfc75a60d0" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="ceced1288fdbf096904a7467b13a185ba2faad757e9e1ea117ca4616ca5fa474675bd3d7f2bf4607d0b4ea45956ed8b4b98c1e50070a2999fb2785d864f62ae1" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="63848c371fd6556941958e67ca6cf409aaf358d48239ea15d376e4d92cba5619025897f3b9f9242b3c9ff290243b034d807739ac403067085ac90859635a4204" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="ee3003966ea0eab9ac8ed7ac380b4d35e7a1e3dc7217fa5a097de7f28ab6021132e3b7dcba2c7d437d6bad40d4eb96c645b80cae1b83b5ac9f6f091a17810100" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="060f78db54e4ee34e15480be5a4531f0e38ed8c357d6339cbe3976aaf27d99f9c5152b81385932fe88b14059363c8f6f7b5c53d0e3047ccf5db49df3f3907341" name="cockpit-tukit" arch="noarch">
  <version epoch="0" ver="0.1.4~git0.6eacfc1" rel="160000.2.2"/>
  <changelog author="jtomasiak@suse.com" date="1655726400">- Update to version 0.0.3~git10.d8579a3:
  * Update to cockpit 271
  * Add translation template
  * Update translations
  * Add load-css-overrides.patch to start loading a custom CSS file</changelog>
  <changelog author="jtomasiak@suse.com" date="1659700800">- Update to version 0.0.3~git28.b446f50:
  * Add missing plurals
  * Added translation using Weblate (Portuguese)
  * Translated using Weblate (Polish)
  * Add Swedish Translation
  * added/corrected de.po for german
  * initial version of czech translation
  * Add support for dict-format snapshots List
  * Fix URIError: malformed URI sequence
  * Reformat spec to match Factory</changelog>
  <changelog author="miika.alikirri@suse.com" date="1690459200">- Update to version 0.0.8~git0.a915cfd:
  * Fixed arch specific esbuild depedency issues
  * remove wasm check
  * add deps for release
  * use esbuild by default and update spec
  * Port to typescript
  * Support global cockpit dark theme
  * Updated sources to work with the new dependencies
  * Update dependencies and build process to match latest cockpit
  * Translated using Weblate (Georgian)
  * Added translation using Weblate (Georgian)
  * Fix name in metainfo (bsc#1203653)
  * Add mapping for more patch levels
  * Handle tukitd service problems
  * Fix pot/po generation
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Japanese)</changelog>
  <changelog author="miika.alikirri@suse.com" date="1691582400">- Update to version 0.0.9~git0.81662cf:
  * Handle non-existing update descriptions</changelog>
  <changelog author="miika.alikirri@suse.com" date="1696420800">- Update to version 0.1.0~git0.8c6c01a:
  * Automatically update UI when user gets admin access
  * Updated minimum cockpit version in spec file
  * Updated the version to 0.1.0 so it's closer to semver</changelog>
  <changelog author="luna.dragon@suse.com" date="1705406400">- Update to version 0.1.2~git0.647b3e3:
  * Update dependencies to fix building against latest versions of Cockpit
  * Forcefully reload the whole page when getting/limitin admin access
  * Update @babel/traverse to avoid security issues</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="adam.majer@suse.de" date="1723204800">- 38.patch: pending build fixes against newer cockpit</changelog>
  <changelog author="luna.dragon@suse.com" date="1744718400">- Update to version 0.1.3~git0.41f9fbc:
  * FEAT: add ci
  * FEAT: drop rome and use styelint and eslint
  * FIX: update makefile to support updated translation utils
  * FEAT: explicitly specify cockpit-tukit is only supported on transacional systems
  * use typescript types provided by upstream
  * drop 38.patch</changelog>
  <changelog author="luna.dragon@suse.com" date="1747137600">- Update to version 0.1.4~git0.6eacfc1:
  * Display message for user if they aren't superuser (bsc#1242139)
  * UI Fixes
  * FEAT: Patternfly 6 support
  * BUMP deps to patternfly-6 and update COCKPIT_REPO_COMMIT
  * fix: Properly handle superuser.allowed
  * Bump @typescript-eslint/eslint-plugin in the types group
  * Bump qunit from 2.19.4 to 2.24.1
  * Bump the stylelint group across 1 directory with 2 updates
  * Bump ts-loader from 9.4.4 to 9.5.2
  * Bump glob from 11.0.1 to 11.0.2
  * Bump the stylelint group with 2 updates
  * Bump @typescript-eslint/eslint-plugin in the types group
  * Bump @babel/preset-typescript from 7.22.5 to 7.27.1
  * Chore: With dependabot now enabled, lets update insecure npm packages
  * Bump the react group with 2 updates
  * Bump esbuild from 0.25.2 to 0.25.4 in the esbuild group
  * ci: Add in dependabot and automated updates to cockpit-lib
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Chinese (Traditional Han script))
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (French)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Italian)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Chinese (Traditional Han script))
  * Translated using Weblate (French)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Spanish)
  * Update tukit.pot
  * Added translation using Weblate (Italian)
  * Added translation using Weblate (French)
  * Added translation using Weblate (Spanish)
  * Translated using Weblate (German)
  * Added translation using Weblate (Chinese (Traditional Han script))</changelog>
</package>
<package pkgid="cd52598355467e49adc785d89bed1d30ff1643473cab0c4358cb0ad89ebaed9ae0e598d3ebf25a977cb04d4f1aa1a5c7243ab70250097e52671bfd3c0bb8a0f4" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="2e41fc8e8d21384782c9487719e9d72ec7475adee1fcc5fd53d65041db8eeda707a34351112e6461cdf53a24c9485f4cde0d86cc4281b1d96256a78bdeda6b4d" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="20158fa8646c5e8c897ff14ede99ea8aeba69ba473e26787b898f31cd0aaf197c4a06f239d198985a9a33f18daf60243d8f23f42364348afa6a16853529501ca" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="78d8b6908421841c851149b5c9e2631af1b661dbbc32820ae89335305dc15c1099cb3cd3386bac5c89697215282990d7521657231cde34da566117b1b94663e1" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="da9a0be952d7c56b1a476158fac849240ff0ca123b221bf90136a4bd3e0889b8d787793b5776a59e64e48b96a52702cecee53ca8bc8bfd26c126f86672eb6d81" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="ce173b89486b51f202c827299d85d04f2e0b9e59028c95887ae336982f8d743d2ee46bfb21c295a7a633b94650b0342294ccb709c69719ec3abcb9841c5879e3" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="f4099061fc72e47de5af60d46109eb0bcab7851b9bec44e804ae9bebccc645ff12678bfadc7acb0cc7b28bce4f1d426693517860a3e5c6b030316774361e65ef" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.3.2"/>
  <changelog author="alice.brooks@suse.com" date="1750334400">- Add kdump-nfs-fixes.patch to fix bsc#1241949</changelog>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
</package>
<package pkgid="4486fc41a56e74ea5afd166f0499bc6d6a33acfb2ecd9840003c98a6fa19451bc4f3430774277165eb7daebe1dfde866824981c3412f93c51cd74867f2bf9df2" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="340" rel="160000.4.1"/>
  <changelog author="miika.alikirri@suse.com" date="1752148800">- Show reboot nofication after updates in packagekit
  * Add 0009-packagekit-reboot-notification.patch</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235200">- add libzypp-plugin-appdata dependency to cockpit-packagekit as
  this will generate the swcatalog which it depends on for calculating
  various cockpit packages</changelog>
  <changelog author="alice.brooks@suse.com" date="1752235201">- add a requirement on /usr/sbin/kdumptool for cockpit-kdump (bsc#1227402)</changelog>
  <changelog author="luna.dragon@suse.com" date="1752494400">- update check_cockpit_users to only check for systemd support in /etc/nsswitch.conf bsc#1246408</changelog>
  <changelog author="luna.dragon@suse.com" date="1752580800">- add 0001-cockpit-overview-support-SUSE_SUPPORT_PRODUCT-keys.patch
- add 0002-cockpit-kdump-support-SLE-micro-6.2.patch
- add 0003-branding-use-SUSE_SUPPORT_PRODUCT-and-SUSE_SUPPORT_P.patch to fix bsc#1241003</changelog>
  <changelog author="alice.brooks@suse.com" date="1753099200">- Add cockpit-firewalld package for easily configuring the users
  firewall jsc#PED-13228</changelog>
  <changelog author="alice.brooks@suse.com" date="1753272000">- Add %postun for firewalld package to ensure the firewall state
  remains as expected</changelog>
  <changelog author="luna.dragon@suse.com" date="1753876800">- drop duplicate %changelog macro</changelog>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="alice.brooks@suse.com" date="1770206400">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="bcdcaef2a370dde1c7c3f7644774bed1fd78f698ee139cd90bdf6fe7689cd24b2221c5dd3cc026ae1649d30144fac33b1a53656d448b93e360fcde47bb107c99" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.1.1"/>
  <changelog author="alice.brooks@suse.com" date="1755172800">- Update to 344
  * Changes since 340
  - 344
  * Bug fixes and translation updates
  - 343
  * login: Improve error message for unsupported shells
  * cockpit: Handle file access issues with files in machines.d
  * Translation updates
  - 342
  * systemd: ensure update() is called at least once for tuned-dialog
  * Translation updates
  - 341
  * services: show link to podman page for quadlets
  * Bug fixes and translation updates
- Remove kdump-nfs-fixes.patch as this was upstreamed
- Fix not falling back to PRETTY_NAME in SUSE_PRETTY_NAME patches bsc#1248446</changelog>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
</package>
<package pkgid="ebc6cfcae5d62080e07a795553fb5c746f5e668208c816b4bab7cf3651618688e6319896e3fa4e392f6315e931805b32ddb1d28bb5acd82bda62641644dacb95" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.2.1"/>
  <changelog author="miika.alikirri@suse.com" date="1757332800">- Update to 346
  * Changes since 344
  - 346
  * Support branding Cockpit pages
  * Storage: Support for Stratis "V2" pools
  - 345
  * Translation and dependency updates
  * Shorter IPv6 addresses
  * IPv6 addresses for WireGuard</changelog>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
</package>
<package pkgid="f2e2511a8e302742109db907656c02d29bdeb393ce9f3edcad269ec7d1aabed3fbdb7bf43d3518a7de14d681ee2c01e70a7e0c4f34bbc0a29bdf4c945b021783" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.3.1"/>
  <changelog author="alice.brooks@suse.com" date="1758196800">- Rewrite hide-pcp.patch to apply to SLFO based versions of micro</changelog>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
</package>
<package pkgid="1a99ad2ad8ff5908317e4b3b81f23be01bdf056a53f66248c2d66d59f8b9b8dd88ade28a1810a698b5a1cbf13ca77eb08283dd796817617f7e5da18b031307c2" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="354" rel="160000.4.1"/>
  <changelog author="luna.dragon@suse.com" date="1758628800">- add requirement on python3-pcp if pcp is installed bsc#1239759</changelog>
  <changelog author="alice.brooks@suse.com" date="1760702400">- Update to 349
  * Changes since 346
  - 349
  * Package manifests: add any test
  * Bug fixes and translation updates
  - 348
  * Bug fixes and translation updates
  - 347
  * Site-specific branding support</changelog>
  <changelog author="alice.brooks@suse.com" date="1763035200">- Update to 351
  * Changes since 349
  - 351
  * Firewall ports can be deleted individually
  - 350
  * networking: fix renaming of bridges and other groups (RHEL-117883)
  * bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from /var/lib/selinux
  to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="alice.brooks@suse.com" date="1765368000">- Add 0010-add-onExpand-prop-to-ListingTable.patch to backport a feature</changelog>
  <changelog author="alice.brooks@suse.com" date="1768564800">- Drop 0010-add-onExpand-prop-to-ListingTable.patch: Has been upstreamed
- Update to 354
  * changes since 351
  - 354
  * Convert documentation to AsciiDoc
  * Work around Firefox 146/147 bug (rhbz#2422331)
  * Bug fixes
  - 353
  * Networking: Suggest prefix length and gateway address
  * Bug fixes and translation updates
  - 352
  * Shown a warning if the last shutdown/reboot was unclean
  * Bug fixes and translation updates</changelog>
  <changelog author="alice.brooks@suse.com" date="1769601600">- Update dependencies for bsc#1257324/CVE-2025-13465</changelog>
  <changelog author="alice.brooks@suse.com" date="1775649600">- Update dependencies to fix bsc#1257836/CVE-2026-25547 bsc#1258641/CVE-2026-26996</changelog>
  <changelog author="alice.brooks@suse.com" date="1776081600">- Add fix-CVE-2026-4631.patch to backport upstream fix for bsc#1261829/CVE-2026-4631</changelog>
  <changelog author="alice.brooks@suse.com" date="1779278400">- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802</changelog>
</package>
<package pkgid="dca775cdd4f0c05dd1df0edf1940f1efb9405dd0fcef15cbf4184a00151a787ac28d0e07d235eb1a2dcb2aabf538a2dd727cc71da1436c9b3811205192b4c3e3" name="codec2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1531828800">- Update to version 0.8.1:
  * No upstream changelog provided
- Add codec2-no_return_random.patch
- Add baselibs.conf</changelog>
  <changelog author="tchvatal@suse.com" date="1533988800">- Apply upstream patch to fix ambiguous license situation:
  * codec2-licensed-stuff.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1583755200">- Update to version 0.9.2:
  * No upstream changelog available
- Drop no longer needed patches:
  * codec2-licensed-stuff.patch</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1629115200">- Update to version 1.0.0:
  * No upstream changelog available
  * Added new mode 700E
- Test binaries not installed now, so package codec2 dropped,
  license and doc files moved to libcodec2 library.
- Patch codec2-no_return_random.patch rebased.</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1629201600">- Update baselib.conf</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1632744000">- Update to version 1.0.1:
  * Release to support freedv-gui 1.6.1</changelog>
  <changelog author="mardnh@gmx.de" date="1633176000">- Drop handcrafted generation of the pkgconfig file
- Remove "-Wno-dev"</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1633435200">- Added a patch moved-freedv_callback_rx_sym-into-internal-header.patch
  to fix building gnuradio (patch taken from upstream)</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version 1.0.3:
  * Internal changes only
- Drop no longer needed patches:
  * moved-freedv_callback_rx_sym-into-internal-header.patch
  * codec2-no_return_random.patch
- Disable unit tests as they were not run anyways and require octave</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1658059200">- Update to version 1.0.5
  * Bump version to 1.0.5 to clearly delineate from various 1.0.4
    tags, otherwise the same as 1.0.4_rc2
- Update to version 1.0.4
  * 2020B,
  * build system and tools maintenance.
  * This RC fixes FreeDV API backwards compatibility issue in v1.0.4</changelog>
</package>
<package pkgid="849e9d087349d83bc85c38135fef4933aae08d75a5619a6bb44637af23214936949a64d185139e374693a74030e45b6f6d58502866c9ddf4359ab032dc815f10" name="codec2-examples" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1531828800">- Update to version 0.8.1:
  * No upstream changelog provided
- Add codec2-no_return_random.patch
- Add baselibs.conf</changelog>
  <changelog author="tchvatal@suse.com" date="1533988800">- Apply upstream patch to fix ambiguous license situation:
  * codec2-licensed-stuff.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1583755200">- Update to version 0.9.2:
  * No upstream changelog available
- Drop no longer needed patches:
  * codec2-licensed-stuff.patch</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1629115200">- Update to version 1.0.0:
  * No upstream changelog available
  * Added new mode 700E
- Test binaries not installed now, so package codec2 dropped,
  license and doc files moved to libcodec2 library.
- Patch codec2-no_return_random.patch rebased.</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1629201600">- Update baselib.conf</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1632744000">- Update to version 1.0.1:
  * Release to support freedv-gui 1.6.1</changelog>
  <changelog author="mardnh@gmx.de" date="1633176000">- Drop handcrafted generation of the pkgconfig file
- Remove "-Wno-dev"</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1633435200">- Added a patch moved-freedv_callback_rx_sym-into-internal-header.patch
  to fix building gnuradio (patch taken from upstream)</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version 1.0.3:
  * Internal changes only
- Drop no longer needed patches:
  * moved-freedv_callback_rx_sym-into-internal-header.patch
  * codec2-no_return_random.patch
- Disable unit tests as they were not run anyways and require octave</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1658059200">- Update to version 1.0.5
  * Bump version to 1.0.5 to clearly delineate from various 1.0.4
    tags, otherwise the same as 1.0.4_rc2
- Update to version 1.0.4
  * 2020B,
  * build system and tools maintenance.
  * This RC fixes FreeDV API backwards compatibility issue in v1.0.4</changelog>
</package>
<package pkgid="06921a11a506f7de20434d460ca489d4442a287f395990300283d59bbf190a4f6c96ae726a96dc4989ffed9ad6e15c2ae1466b023d556317728edacca67f79ec" name="codespell" arch="noarch">
  <version epoch="0" ver="2.2.4" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1548936000">- Update to 1.14.0:
  * No upstream changelog
- Fix build under python 3.7</changelog>
  <changelog author="mvetter@suse.com" date="1568376000">- Update to 1.16.0:
  * Add several more spelling corrections
  * Fix typos</changelog>
  <changelog author="mardnh@gmx.de" date="1590148800">- Update to version 1.17.1:
  * Upstream does not provide a changelog
- Update patch:
  * help2man-run-needs-utf8-locale.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1606651200">- Update to 2.0.0:
  * No upstream changelog</changelog>
  <changelog author="mardnh@gmx.de" date="1623326400">- Update to 2.1.0:
  * No upstream changelog</changelog>
  <changelog author="mvetter@suse.com" date="1660824000">- Update to 2.2.0:
  See https://github.com/codespell-project/codespell/compare/v2.1.0...v2.2.0</changelog>
  <changelog author="mvetter@suse.com" date="1660824001">- Update to 2.2.1:
  See https://github.com/codespell-project/codespell/compare/v2.2.0...v2.2.1</changelog>
  <changelog author="sebix@sebix.at" date="1679486400">- remove manpage as the build of the page no longer works
  it requires an executable file, which no longer is present
- add patch_version.patch to add the version to the lib
  - remove help2man-run-needs-utf8-locale.patch
- update to version 2.2.4:
  - BUG: Fix bug with toml triage (#2774)
- update to version 2.2.3:
  - Misspelling of sufficient, sufficiently by @vikivivi in #2531
  - insuffient-&gt;insufficient by @tkoyama010 in #2527
  - add anayltic(s|al|ally) -&gt; analytic(s|al|ally) by @robin-wayve in #2507
  - Ignore flake8 rule W503 by @DimitriPapadopoulos in #2069
  - Dead code found by vulture by @DimitriPapadopoulos in #2101
  - Move falsy and accreting to more appropriate files by @janosh in #2511
  - Add subtrate-&gt;substrate by @janosh in #2525
  - Add "subtask" by @int-y1 in #2537
  - Apply pyupgrade to project by @jdufresne in #2364
  - {speherical,sperhical}-&gt;spherical by @janosh in #2540
  - interepolation-&gt;interpolation by @tkoyama010 in #2512
  - Ignore .mypy_cache folder by @kianmeng in #2361
  - Fix uncaught exception on unreadable files by @DimitriPapadopoulos in #2196
  - Add constrainst to dictionary by @jonathanberthias in #2546
  - Add relative hidden directory and basic subdir tests by @peternewman in #2542
  - Add trignometric-&gt;trigonometric by @janosh in #2549
  - Add virtualied-&gt;virtualized, virtualised and friends by @peternewman in #2553
  - Add several spelling corrections by @luzpaz in #2521
  - Slightly simplify some boolean expressions by @jdufresne in #2556
  - MAINT: Add CODEOWNERS by @larsoner in #2535
  - positivie-&gt;positive by @janosh in #2558
  - DOC/ENH: Clarify usage or configuration files and log about it by @sappelhoff in #2552
  - Document required setuptools version by @DimitriPapadopoulos in #2560
  - Redundant wheel dependency in pyproject.toml by @DimitriPapadopoulos in #2562
  - Remove parameterizes-&gt;parametrizes by @int-y1 in #2563
  - Replace codecs.open with open by @jdufresne in #2378
  - Update subprocess usage to use modern subprocess.run() by @jdufresne in #2565
  - Fix produce typo by @DimitriPapadopoulos in #2561
  - Add a few corrections by @int-y1 in #2566
  - Migrate pytest config into pyproject.toml by @cclauss in #2554
  - Handle bad globs passed to if --skip/-S by @DimitriPapadopoulos in #2159
  - Isn't the mailing list obsolete? by @DimitriPapadopoulos in #2090
  - More CODEOWNERS by @peternewman in #2569
  - Remove unused attribute Misspelling.fixword by @jdufresne in #2557
  - Read config file without interpolation by @DimitriPapadopoulos in #2545
  - Add andriod-&gt;android and friends by @peternewman in #2570
  - Add total type GB to US by @peternewman in #2577
  - Catch all cases of missing pytest by @DimitriPapadopoulos in #2568
  - Fix typo in README pin → pip by @DimitriPapadopoulos in #2579
  - Keep GitHub Actions up to date with Dependabot by @DimitriPapadopoulos in #2578
  - decelaration could be deceleration by @DimitriPapadopoulos in #2576
  - Add isort to project by @jdufresne in #2564
  - Fix Deepsource issues by @DimitriPapadopoulos in #2085
  - Replace list()/dict() with literals by @jdufresne in #2380
  - Use major version @v1 of isort GitHub Action by @DimitriPapadopoulos in #2581
  - Add a spelling correction by @fxlb in #2572
  - Remove obsolete Python 2 workaround by @jdufresne in #2586
  - Add misspelling of Kafka by @vikivivi in #2589
  - Add testing and document support for Python 3.11 by @jdufresne in #2585
  - Add type annotations to the project and use mypy by @jdufresne in #2588
  - Add a few spelling corrections by @int-y1 in #2550
  - Add several spelling corrections by @luzpaz in #2582
  - quation-&gt;equation by @janosh in #2591
  - Document support for Python versions in pyproject.toml by @jdufresne in #2379
  - Use black to format Python files by @jdufresne in #2587
  - Move "upto" to code dictionary by @skangas in #2603
  - Move sudo-like command name "doas" to code dictionary by @skangas in #2600
  - enthapl(ies|y)-&gt;enthalp(ies|y) by @janosh in #2590
  - Add componoent(s)-&gt;component(s) by @cfi-gb in #2594
  - Move "spawnve" to code dictionary by @skangas in #2614
  - Move "MSDOS" to code dictionary by @skangas in #2615
  - Added informal words by @Paradact in #2575
  - Improve format of CC BY-SA 3.0 license link by @skangas in #2619
  - {assymthotic, assymtotic}-&gt;asymptotic by @janosh in #2597
  - Simplify some file reading in tests by opening in text mode by @jdufresne in #2624
  - Remove setup.py by @jdufresne in #2626
  - Normalize code block indicators in README by @waldyrious in #2621
  - PEP 517 by @DimitriPapadopoulos in #2595
  - Add spelling correction for 'alhpa' by @adrien-berchet in #2627
  - Move Windows CI from AppVeyor to GitHub Actions by @jdufresne in #2628
  - Add "token" as alternative for "toke" by @skangas in #2630
  - Add spelling corrections for version. by @cfi-gb in #2629
  - feat: Add cataalogue-&gt;catalogue to dictionary by @matthewfeickert in #2631
  - Add several spelling corrections found in personal projects by @jdufresne in #2623
  - Add several words for en-GB to en-US by @skangas in #2598
  - Add fixes from misspell-fixer's safe.1.dict by @skangas in #2611
  - Prefer "converter" to "convertor" by @skangas in #2613
  - Add pre-commit configuration by @mdeweerd in #2459
  - pre-commit: check toml, rst, yml and .in files by @mdeweerd in #2636
  - centriod-&gt;centroid by @janosh in #2637
  - Add operatin-&gt;operation, operating, correction. by @cfi-gb in #2640
  - README: Document how to use pre-commit by @WilliamJamieson in #2639
  - README: document simplest usage pattern by @waldyrious in #2638
  - Prefer HTTPS to HTTP in URLs by @skangas in #2641
  - Flush stdout when asking word fix by @adrien-berchet in #2642
  - Correct "3rt" to "3rd" by @skangas in #2634
- update to version 2.2.2:
  - MAINT: Bump to dev by @larsoner in #2463
  - Capitalize LessTif by @dforsi in #2471
  - Add several spelling corrections by @ydah in #2467
  - aexs-&gt;axes by @tkoyama010 in #2475
  - MAINT: Add tests as submodule by @larsoner in #2477
  - diffues-&gt;diffuse, defuse, by @tkoyama010 in #2476
  - conviencece-&gt;convenience by @tkoyama010 in #2474
  - htose-&gt;those, these, by @tkoyama010 in #2480
  - Add several spelling corrections by @adrien-berchet in #2461
  - move ro to code dictionary by @robin-wayve in #2468
  - Add ascconciated-&gt;associated by @peternewman in #2482
  - Fix various spelling corrections by @luzpaz in #2456
  - Add several spelling corrections by @luzpaz in #2481
  - Add sorkflow-&gt;workflow by @peternewman in #2485
  - Add spelling corrections for install and variants. by @cfi-gb in #2486
  - Capitalize all suggested fixes by @DimitriPapadopoulos in #2223
  - Add several spelling corrections and refinements by @luzpaz in #2484
  - Add knowladge-&gt;knowledge by @danielhoherd in #2493
  - Add several spelling corrections by @ydah in #2492
  - Change "circularly" to "circulary". by @vinc17fr in #2422
  - Use grep -E instead of egrep by @a1346054 in #2496
  - move warmup to code dictionary by @robin-wayve in #2495
  - downoload-&gt;download and friends by @DimitriPapadopoulos in #2494
  - Add some alternative line endings and whitespace checks by @peternewman in #2490
  - occulusion-&gt;occlusion by @tkoyama010 in #2502
  - Add another suggestion for relected by @vinc17fr in #2501
  - add dependendenc(y|ies)-&gt;dependenc(y|ies) by @robin-wayve in #2499
  - Add application(s) spelling corrections. by @cfi-gb in #2503
  - Add spelling correction for place by @adrien-berchet in #2500
  - Add spelling correction by @adrien-berchet in #2498
  - 'analyses' is the plural of 'analysis' by @quyykk in #2401
  - Add spelling corrections for dictionar(y|ies) by @cfi-gb in #2509
  - Add spelling correction for export by @adrien-berchet in #2506
  - Fix #2055: Add support for PEP 518 by @Freed-Wu in #2290
  - Add regresison-&gt;regression by @janosh in #2518
  - DOC: Better docs by @larsoner in #2515
  - Fix build_exclude_hashes fails: UnicodeDecodeError: 'charmap' codec can't decode byte 0x81 in position 2244: character maps to by @JoergAtGithub in #2520
  - Add alternative for 'bu' by @flyingdutchman23 in #2514
  - Add alternative for 'tooo' by @flyingdutchman23 in #2513
  - Fix uncaught exception on empty files by @DimitriPapadopoulos in #2195
  - Add combintaion(s)-&gt;combination(s) by @janosh in #2524
  - MAINT: Use pyproject and setuptools_scm by @larsoner in #2523</changelog>
  <changelog author="jsrain@suse.com" date="1684756800">- removed autogenerated _version.py</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="d59a01cb96c8b0d1282810aa015e16aa745315e8f03e777de50dd603c230b81a9182d2c57c705e3b28a73750ce66c96aeb30a9956b437eba3b13892c2e80ca59" name="coeurl-devel" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="bp160.1.3"/>
  <changelog author="Dead Mozay &lt;dead-mozay@opensuse.org&gt;" date="1637236800">- Initial package.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1640088000">- Update to v0.1.1
  * Add wrapper function to convert error codes to strings.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1674388800">- Update to v0.3.0
  * Support altsvc to properly detect http/3 across runs. You need
    to specify a path where the cache will be stored to enable this.
  * Error out when the project is built using CMake, since CMake is
    only supported for FetchContent purposes.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1704974400">- Add upstream patches to fix build: fix_fmt10_issues.patch,
  fix_unexpected_provides.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1717243200">- Use required versions as upstream use.
- Fix build error in Leap.</changelog>
  <changelog author="Loren Burkholder &lt;computersemiexpert@outlook.com&gt;" date="1718193600">- Update to v0.3.1
  * Allow configuring the verbosity of curl requests.
  * Don't rely on the deprecated `CURLOPT_PROTOCOLS` on newer curl versions.
  * Various build system fixes.
  * Compatibility with {fmt} version 10.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1743076800">- Fix for 16.0</changelog>
</package>
<package pkgid="c0c8d59bbd22a551e0857e310475ed562b2edf78c9c090d0c6bcb479805d724d05ba6bb2569e493a09c9f9b11c34708a696d4b298e25ea515e57bf6917368eb9" name="cog" arch="x86_64">
  <version epoch="0" ver="0.18.4" rel="bp160.1.8"/>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1688644800">- Init</changelog>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1701172800">- Update to version 0.18.1
  * core: Avoid leaking web views due to CogShell holding one reference
    too much on them.
  * drm: Fix touch region dimensions when the output is rotated by 90 or
    270 degrees.
  * meson: Fix configuration error when only the Wayland platform plug-in
    is selected.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1701864000">- cogctl does not look like a devel package; merge it with main
  package
- Install cogctl manpage
- Trim repeated "small" word from description.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Update to version 0.18.2:
  + drm: Fix crash on iMX.6 (and possibly others) by improving how
    the CRTC and encoder combination is chosen.
  + wl: Add support for Weston protocols version 13.
  + launcher: Handle GApplication activation to avoid a warning.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1712232000">- Properly tag patches.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1739966400">- Update to version 0.18.4:
  + meson: Fix the build in systems where the "ln" command cannot
    calculate relative symlink target paths.
  + wl:
  - Fix some items in popup menus not being rendered.
  - Add support for weston-protocols version 14.
- Changes from version 0.18.3:
  + drm: Fix handling of the scaling factor setting.
  + gtk4: Take scaling factor into account for pointer events.
  + launcher: Support toggling WebKit features with a new
  - -features/-F command line option, when built against WebKit
    2.42.0 or newer.
- Rebase cog-fix-load-backend-fdo-lib.patch.</changelog>
</package>
<package pkgid="750c1336df4a97aa2e68587307f3c902b8c4237ad2544dde231c7a5e261b17cdb9343217c0b02fbd779f922a1421b6d4b45dbac0de761da2c9d525dc4bb87072" name="cog-devel" arch="x86_64">
  <version epoch="0" ver="0.18.4" rel="bp160.1.8"/>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1688644800">- Init</changelog>
  <changelog author="Joan Torres &lt;joan.torres@suse.com&gt;" date="1701172800">- Update to version 0.18.1
  * core: Avoid leaking web views due to CogShell holding one reference
    too much on them.
  * drm: Fix touch region dimensions when the output is rotated by 90 or
    270 degrees.
  * meson: Fix configuration error when only the Wayland platform plug-in
    is selected.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1701864000">- cogctl does not look like a devel package; merge it with main
  package
- Install cogctl manpage
- Trim repeated "small" word from description.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704456000">- Update to version 0.18.2:
  + drm: Fix crash on iMX.6 (and possibly others) by improving how
    the CRTC and encoder combination is chosen.
  + wl: Add support for Weston protocols version 13.
  + launcher: Handle GApplication activation to avoid a warning.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1712232000">- Properly tag patches.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1739966400">- Update to version 0.18.4:
  + meson: Fix the build in systems where the "ln" command cannot
    calculate relative symlink target paths.
  + wl:
  - Fix some items in popup menus not being rendered.
  - Add support for weston-protocols version 14.
- Changes from version 0.18.3:
  + drm: Fix handling of the scaling factor setting.
  + gtk4: Take scaling factor into account for pointer events.
  + launcher: Support toggling WebKit features with a new
  - -features/-F command line option, when built against WebKit
    2.42.0 or newer.
- Rebase cog-fix-load-backend-fdo-lib.patch.</changelog>
</package>
<package pkgid="c4e61223080553912adfe495ce6bf423d63f19750089efcf93e6913ab427067a0dda0b4ac9886992b5d8fb9cf7ebe9fd368831d2f28d66b7d9e5f7b8da75c510" name="cogl-devel" arch="x86_64">
  <version epoch="0" ver="1.22.8" rel="bp160.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add cogl-support-automake-1.16.patch: Support bootstrapping with
  automake 1.16 (bgo#794720).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Remove --with-pic which has no effect with --disable-static.
- Trim metadata repetitions in the description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1556020800">- Update to version 1.22.4+20190423.9bc253e9:
  + cogl/deprecated/cogl-fixed.h: Use "static inline" instead
    G_INLINE_FUNC.
  + primitive: Fix syntax on annotations type.
  + wayland: do not require wl_shell.
  + Update MSGID_BUGS_ADDRESS in po/Makevars.
  + Updated translations.
- Drop cogl-support-automake-1.16.patch: Fixed upstream.
- Update url in _service to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Update to version 1.22.4+8:
  + Add fallback for semi-private symbols in Pango.
  + Updated translations.
- Use PARENT_TAG and TAG_OFFSET in service file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1582545600">- Add cogl-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688, glgo#GNOME/cogl!17).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583841600">- Update to version 1.22.6:
  + Build with newer versions of Pango
  + Fix the pkg-config files for cogl-gst and cogl-pango
- Drop usage of source services, back to regular tarball.
- Update content of cogl-fix-mesa20.patch to commit checked in
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1591272000">- Update to version 1.22.8:
  + Fix building against libglvnd-provided EGL headers.
  + Stop checking the Automake version.
  + Fix compiler warnings with GCC ≥ 9.
  + Ensure we don't close the same X display twice.
  + Test suite fixes.
  + Free pipeline state last.
- Drop cogl-fix-mesa20.patch: Fixed upstream. Following this, drop
  libtool BuildRequires and autoreconf call, no longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633003200">- Add 2bd3cbed45d633fb15625d58e6b7cb8721b0ba98.patch: cogl-gles2:
  Fix undefined references. Following this, add libtool
  BuildRequires and pass autoreconf call before configure as the
  patch touches the buildsystem.
- Add patches from fedora that should have gone upstream:
  + 0001-egl-Use-eglGetPlatformDisplay-not-eglGetDisplay.patch:
    egl: Use eglGetPlatformDisplay not eglGetDisplay.
  + 0002-add-GL_ARB_shader_texture_lod-support.patch: Add
    GL_ARB_shader_texture_lod support.
  + 0003-texture-support-copy_sub_image.patch: texture: Support
    copy_sub_image.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742990400">- Export -std=gnu17 to cflags, fix build with gcc 15. Cogl is
  deprecated upstream, and we can not expect this to be fixed from
  there, so use older gcc standard until we can remove the package
  from distro.
- Refresh patches from upstream, keep the bots happy.</changelog>
</package>
<package pkgid="5dc6fc399a2f3ebd6a932d2989d6644f25484c9ad60cab2ba2e28d4db164e25dd6ead99ece47d32178cb41a47bdd1146d9c6140298fb05ec7677017bc88429db" name="cogl-lang" arch="noarch">
  <version epoch="0" ver="1.22.8" rel="bp160.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add cogl-support-automake-1.16.patch: Support bootstrapping with
  automake 1.16 (bgo#794720).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Remove --with-pic which has no effect with --disable-static.
- Trim metadata repetitions in the description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1556020800">- Update to version 1.22.4+20190423.9bc253e9:
  + cogl/deprecated/cogl-fixed.h: Use "static inline" instead
    G_INLINE_FUNC.
  + primitive: Fix syntax on annotations type.
  + wayland: do not require wl_shell.
  + Update MSGID_BUGS_ADDRESS in po/Makevars.
  + Updated translations.
- Drop cogl-support-automake-1.16.patch: Fixed upstream.
- Update url in _service to new gitlab home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Update to version 1.22.4+8:
  + Add fallback for semi-private symbols in Pango.
  + Updated translations.
- Use PARENT_TAG and TAG_OFFSET in service file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1582545600">- Add cogl-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688, glgo#GNOME/cogl!17).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583841600">- Update to version 1.22.6:
  + Build with newer versions of Pango
  + Fix the pkg-config files for cogl-gst and cogl-pango
- Drop usage of source services, back to regular tarball.
- Update content of cogl-fix-mesa20.patch to commit checked in
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1591272000">- Update to version 1.22.8:
  + Fix building against libglvnd-provided EGL headers.
  + Stop checking the Automake version.
  + Fix compiler warnings with GCC ≥ 9.
  + Ensure we don't close the same X display twice.
  + Test suite fixes.
  + Free pipeline state last.
- Drop cogl-fix-mesa20.patch: Fixed upstream. Following this, drop
  libtool BuildRequires and autoreconf call, no longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633003200">- Add 2bd3cbed45d633fb15625d58e6b7cb8721b0ba98.patch: cogl-gles2:
  Fix undefined references. Following this, add libtool
  BuildRequires and pass autoreconf call before configure as the
  patch touches the buildsystem.
- Add patches from fedora that should have gone upstream:
  + 0001-egl-Use-eglGetPlatformDisplay-not-eglGetDisplay.patch:
    egl: Use eglGetPlatformDisplay not eglGetDisplay.
  + 0002-add-GL_ARB_shader_texture_lod-support.patch: Add
    GL_ARB_shader_texture_lod support.
  + 0003-texture-support-copy_sub_image.patch: texture: Support
    copy_sub_image.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742990400">- Export -std=gnu17 to cflags, fix build with gcc 15. Cogl is
  deprecated upstream, and we can not expect this to be fixed from
  there, so use older gcc standard until we can remove the package
  from distro.
- Refresh patches from upstream, keep the bots happy.</changelog>
</package>
<package pkgid="4411c58b7d45da47f7e4bc7ee4e5aaa516c8a0485e62a90f9eac9eafec584288a79aa5139b885dd3bb05b7814667aa2f7d9256b600f237138ab744238dc8423b" name="coin-or-Cbc" arch="x86_64">
  <version epoch="0" ver="2.10.11" rel="bp160.1.12"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (2.10.8)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704024000">- Update to 2.10.11:
  * Fix compiler warning and compilation with CBC_QUIET defined
  * remove or disable unused-but-set variables
- Update to 2.10.10:
  * Drop COIN_HAS_NTY from public header CbcModel.hpp</changelog>
</package>
<package pkgid="30a839fbcf7a0d463a81003fa99e54a335cc69c225ea773b569ce3862fa25dad5efc90db743a4da1fdb69a6600340e2fa6efda305a3dcf6af026627808cac6c1" name="coin-or-Cbc-devel" arch="x86_64">
  <version epoch="0" ver="2.10.11" rel="bp160.1.12"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (2.10.8)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704024000">- Update to 2.10.11:
  * Fix compiler warning and compilation with CBC_QUIET defined
  * remove or disable unused-but-set variables
- Update to 2.10.10:
  * Drop COIN_HAS_NTY from public header CbcModel.hpp</changelog>
</package>
<package pkgid="d65fbb654fe5a2e3b75d4b1bb23d543f1bfd14cbc17fc3e7597fe179efb2ecc34f93c1c8e1eedd698e82a84c40f92773c79ad2562df69e11dcb168f12bb9cb57" name="coin-or-Cgl-devel" arch="x86_64">
  <version epoch="0" ver="0.60.8" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (0.60.6)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704024000">- Update to 0.60.8, no changelog provided</changelog>
</package>
<package pkgid="e343717f37e1adba61219dc7aa3621b70baa5b90883ae81a95a20ce169d617095e514d256eb95a0af40a4661f90f4301a67deb2825ca092a09a3dcff6168a03f" name="coin-or-Clp" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (1.17.7)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704283200">- Update to 1.17.9, no changelog provided</changelog>
</package>
<package pkgid="79f0092088010c371e713098fb605b1688883c589c8e55c64bc10a3ef92c36f6dc38e78a7a41e1486a3d3760a398801b6ac09c3f27021a958b5efc910c8fb818" name="coin-or-Clp-devel" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (1.17.7)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704283200">- Update to 1.17.9, no changelog provided</changelog>
</package>
<package pkgid="6fa398102dda3cb123a4d8e6d06f943f4379ca384dc9eb34677aaddfeff69911879daced71b3955042926030a90f410618af7aaba7721d04def2b69b36259a5d" name="coin-or-CoinUtils-devel" arch="x86_64">
  <version epoch="0" ver="2.11.10" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (2.11.6)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 2.11.9:
  * fix for minor gzread bug
  * notice free format mps earlier
  * Fix minor bug in workflow
  * fix for OBJSENSE and min/max on same card
  * fix for multiple RHS
  * various code improvements</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704024000">- update to 2.11.10:
  * remove or disable more set-but-unused variables
- Add zlib build dependency, to support gzip'ed files at runtime.</changelog>
</package>
<package pkgid="bcde65d4a20e75c21a2ca6e4626f2e00f8a09dc9accb617551a5c086fd69f9fcd7ec7664c8aa3c84eeee25e066dfd9a2ed12d0a371a4c5641d3b45a0b166ffb3" name="coin-or-Osi-devel" arch="x86_64">
  <version epoch="0" ver="0.108.9" rel="bp160.1.13"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1660824000">- Initial package version (0.108.7)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1674734400">- Minor spec file cleanup</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1704024000">- Update to 0.108.9, no changelog provided</changelog>
</package>
<package pkgid="8153cdc9c7304e64d63beea6b4eb32b7454043715be983ba2226114615cc7a879a93a221ec5b6392cc695392237e92d7c53f0ca71d0e4fd1d5d04827207359a9" name="collada-dom-devel" arch="x86_64">
  <version epoch="0" ver="2.5.1+git20200104.c1e20b7" rel="bp160.1.9"/>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1710417600">- Initial version</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1711368000">- added more recent commit identifier as revision field in _service</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1711886400">- changed obs_scm service to manual for submission in Factory</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1714046400">- fixed compilation with boost 1.85.0</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1743249600">- remove unused pcre build dependency
- run tests</changelog>
</package>
<package pkgid="865e974025f906c3f590bb450df237bbad47985b8ae7e561ad2c0182bc2f8303ca584aff4a8e47c8de66e610334e427b71809281ada42a6bff3b8a2adcd1ef49" name="collectd" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="ddf334785f8e6edbaa91d1f804a454b3db26a2b77c78626aa363f48c05d0ab34b808fb14c873398bfed121a5312ae09d33c885eec6277b951aef1bab8880b211" name="collectd-plugin-amqp" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="02204f08449a20a39176bffae19c609255491a274b4ad9b7fb4258a195d1fd101fe70ef017cafe4ef787cc5f737dfbd07078f203079de7e699fae76252d63e79" name="collectd-plugin-buddyinfo" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="8882e039a6dec49943ee2ea6f60e034a0d66d69e0b651f8250113b8dab19c4a602b190f9711dc7fa031e96139a4a83c6d9a1710eafc7bd2bcd6bbfbf49580b51" name="collectd-plugin-connectivity" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="66a111fb7311b47fc93c247081360081db36825678f6a127480bc9ab59aff1204e006d01974728a62fb92336ec1bdc42231cb68d58ea2e673e947f91accce45f" name="collectd-plugin-dbi" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="e568bb23db561db66de2dbcafe5067b7c0b1261bc102e498602e7eb0a0c66f075c319a1845528c6d9756536c44b33859a4e6ca401677eb7a82ae33e16817e06a" name="collectd-plugin-dpdk" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="6fad5347a7b4427e8f0cefcbf60af5d34bcd46e13eb879019acde1d510b67d0694564aae95983de565b60e92cb2dfb435dca533c8dffda6b1eed1959af225f0f" name="collectd-plugin-gps" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="abc909e8c9e75ae693e5144a44b5c6bc47d0f8f484d54f82688b22e1ab362f866d97f22afe90776e56d02e30d08e2c787f0aac4ccff3a892bf8e742397c9026f" name="collectd-plugin-ipmi" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="c069d6c72e7a256d48cc89aacfbe9c9dc6e8d578eaa6e58e5cc80961546ef4274580a3151a9cd58419e6a27ba538ed08aaa112522034c9fcc27f869262efe40d" name="collectd-plugin-java" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="f0be18cf8b75e44719d1864dafe70a48f8c9bd0b5cbc559ef70583dcb2c3a098660a88707905493cc12039e421c608c564adabc8954663379a6864d75945a767" name="collectd-plugin-logparser" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="61955557468bf150698d79774801a146953bd0c9b7f23b9f62745e52d53c4fa6d2fee37ba158be4939fb9edae589be6cb8a6e071d68ade79418f98d6cc31d38d" name="collectd-plugin-lua" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="30604f8a6e715b550b0e0b39ecdc9d4d6f03cbbb1ad6d38e7b35b22b25f14f818afb2c6f314cf9cd0bdcc4acb053d5ee1d752483a1f38bb5dab557a104733b3c" name="collectd-plugin-mcelog" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="e06e1c8aaa8c28bf4599804f2531ed4b482beb514f1221bcd34fa373a034f4e05983f9c265f963da133a135682357d818e87199fcb28e0bf0ce3e25f7c7f8709" name="collectd-plugin-memcachec" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="aa598611098fb6359d8bfecfdadf4ee776a3218ff60b8a3a83d6f60a8baf36c807fd8f7dccdacedcdd4ce7d5c430f06ad59428db2bedc1e6638311cfb39dfacf" name="collectd-plugin-modbus" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="917dc3592ec0e4b6bdd11f17a54abc1ad92878ae93e40b267fcc4b03a8d843d5924460105416b03dbc24c0ceceb8e1c1143a914a0a724fb2df9103239db433aa" name="collectd-plugin-mqtt" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="da0255236fba3c51bb82d8803cc84c745368c841876b29eabb1f1e58958c4207849e20106484fe6391303c44a38092972fce6c6810d2022e18810398adac9f31" name="collectd-plugin-mysql" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="3051af3bdf3d9be615f677a5396c2cbf0aea8a1a1755acf6e6e83933a5f859d1e60bd4d7a41ccb59654989623976b036fc3ff329bb08779c75c07f1686fd5c11" name="collectd-plugin-notify-desktop" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="ed23e00728460528a63a7a073edc53a707f82d33f062c927982ef17a43fedc5f092b87745ba909407800043a8d029be11c65d4a5df682bede08971c0b2d6c3c5" name="collectd-plugin-openldap" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="6f65a116c95aa2f9dbc638765e46d5bab42b4086c355062c8228c43f86cac2e8eeca1b0b2d3bab284f30f9011df025b905f767aabf95662edf4863a498c78fc3" name="collectd-plugin-ovs" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="eafb2e436a03b50a265a3c48f95a44edda4453e8b8b234c3b879d6c575208b63e9de57463ec49b70a8fca245cecef3ad988dc979277931148c6c8f7a84a5f61d" name="collectd-plugin-pcie" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="e6b29de73a6e7df795b4be37e7d7e68163f130abbf513efcbe772b3cdc8c2f875fa10c1738ec419ebecdb1c12a92bcb14ba83aa05bc159ead341c0312706ebf3" name="collectd-plugin-pinba" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="e25f85a157a7b8c4b84a7ca4fe70a6cbf41193d9168f170ae954ca345486f7a5a7d6cabd16d5efb237ef5b78f218e72c8e583709c68017270267dd3be461b04e" name="collectd-plugin-postgresql" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="6a1d15281de222669d4e7ec9b1df9f577669d3e894cf2b872215c035b47bd19e831caef7cbdf3212eae1a5cd3f408bc1a64a9c62d817498416e72d3095fb8a09" name="collectd-plugin-procevent" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="d3488b5f377918b31dcfc5b4473858568a29b50e8922efa4153ad29e4aa6287a5cb79632f3cb396181fe3275e12dfa3893da4fa44176b8a8e1b5800db1bcfd4f" name="collectd-plugin-python3" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="a4e593d12e869de4095f83e3f0122e76576c834def42b58db1a004bbe6c1d8b4c05a64d8d81d7f237f8053198bc32f16d1af6361015885642bdf226de8d59a2e" name="collectd-plugin-sigrok" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="f1b5679ddd4adab6b75dad9b1cdfb43445a27c2cdac841f7b24858c21e87317cbf0f9eea405ebc2771fc37f5d6405775a8144c5d3b5d19c5ea24600995cfbb5d" name="collectd-plugin-smart" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="974b30ff23ff3dad7ff185a3ae1d1976ba5015f4b3e7924c8d9bc1988ff22947ca51898a7b4ba67eca805675eb9d749ca85047c66500781d96d6821e692be340" name="collectd-plugin-snmp" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="013a2515eff0b164fb0d7236adba5702019dde3c106b37c59e3f72e51f55b7ef215cf1bbf0893d9a21f65dee92a2ba885149dc4acb8f5990819ef005045216b1" name="collectd-plugin-synproxy" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="cb9701326cd6fafde6785941b9930c337fb8cb8f1f28ef989ae134bb9dcaa35e6926eb2ed5651d77545163ab9628eb2025733ce5ba0064426bd06ed97534a664" name="collectd-plugin-sysevent" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="9493d6fd0b44f3761332225d7aece54b236db96f9a78e2fa940ab42c82780d0eaf6e154e91e3e8c36f74e289af447e0277eaf30c3468fb70a374a6269c8d27f1" name="collectd-plugin-ubi" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="5ac332bacf3a37b189adc733fe6b8c5dc4d2c853c5a34f31f2f10d57819cfb911fb2ebf02b9e81c1468198797c5c34f0bdfa66a522c248e9ef5bf45074e07e68" name="collectd-plugin-uptime" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="d73b608a16cf2a240d78aed52ebf951184d1dacb0d2d4599aa66dd3f5847ee88d8304bb5a94206477a719ec6c09b954f2017465de3ef9e087c6771a16d411dc6" name="collectd-plugin-virt" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="be00136238244dfacb4a1f132c357bb000a0c0dfa2d828e5dc771135a213a48cdb4240ddbcfabb3ed4aae0389a9497a0e201e7b30dd11f9e569226f3a1347778" name="collectd-plugin-write_influxdb_udp" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="683215078c966002c60653eaafb38cbd35ae5831b701d4d3800fa32672361904aedfd3f910d3e80bc3b8dd3e592f26d7359aa4453a786926c673cd6655b75def" name="collectd-plugin-write_stackdriver" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="20a1d1fc179374d65585f06159145f1eaa0af192902783ab052151927f99af6f8d6af7136ffbe5331946a536973a453eb737761253aa8d7673f2857a42c2b7f9" name="collectd-plugin-write_syslog" arch="x86_64">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="0dc602f5537ab76c2e79127451a5f3ddc0540ff5e6b481654fd79d059e6563f0f543b153a13886db7187f489ab987cacb4fe8fafd00683b9f36cef61f4aa3aaa" name="collectd-plugins-all" arch="noarch">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="b97abae85929cf09d9ef480380f80746f3b0d281b164038c6b0ba799932679ff2329943a5229e723209d45e7f4c2436b9448eabbd1339a127d857d35ea2df39b" name="collectd-spamassassin" arch="noarch">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="abecb9c8396a71550bc307752adb224675bdcfb7ef1c6409b653c90b36bc41d79e6cd316f9436016fe00f4349b9fd30b28305bd576688249447f7a7a59766dd3" name="collectd-web" arch="noarch">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="3589789a7782188fb426e47d3abec20af2e2f8e98df9c4b027386bbef215db7c07e5733c192f11a7bec7690a02e14ce68207a2f84ebaf550ffad793f0c9a7cc4" name="collectd-web-js" arch="noarch">
  <version epoch="0" ver="5.12.0.348.g93f9bdcb" rel="bp160.1.1"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631102400">- add amqp plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1631793600">- Fix version mess introduced in previous changes.
  + rabbitmq-c package is available since SLES 15 SP3
    so amqp plugin can be enabled for Tumbleweed or Leap 15.3+
  + libmodbus package is available in SLES 15 SP4 Backports
    so modbus plugin can be enabled for Tumbleweed or Leap 15.4+</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1645012800">- Add (Build)Requirements for these plugins (jsc#SLE-23472):
  - dpdkevents
  - dpdkstat
  - dpdk_telemetry
  and build a new collected-plugin-dpdk rpm for them
- Enable and add intel_rdt and capabilities to general plugin rpm
- Remove an old configure paramter:
  configure: WARNING: unrecognized options: --without-included-ltdl</changelog>
  <changelog author="trenn@suse.de" date="1675166400">- Update to version 5.12.0.130.g2f3c12e:
  * Fix formatting in mdadm events table
  * Add new exec-borg script to contrib/
  * ChangeLog: v5.12 milestone: Fix issue #3127
  * use derive_t instead of int inside ovs_stats_get_port_stat_value
  * In macOS 12, `IOMasterPort` is deprecated in favor of `IOMainPort`
  * - allow alertmanager correlation and resolve - fix meta names with ':'
  * fix drop probability
  * add config option to write metadata
- Fix build issue if net-snmp has NETSNMP_DISABLE_MD5 set:
  A Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Use autosetup and adopt patches from -p0 to -p1:
  M    collectd-fix-config.patch
  M    collectd-fix_spamassassin_doc.patch
- Use obs_scm and others in _service file:
  A    _service
  A    _servicedata
  A    collectd.obsinfo</changelog>
  <changelog author="suse+build@de-korte.org" date="1678536000">- Update to version 5.12.0.134.g4cebbfc:
  * Hugepages plugin skips reading write-only file
  * Update the format of contrib/snmp-data.conf
  * [cleanup] Fix typo in comment and remove executable bits of config file
  * Remove upstreamed patch
  - Fix-compile-issue-if-net-snmp-has-NETSNMP_DISABLE_MD5-set.patch
- Change to %bcond style conditional builds
- Disable building NUT plugin in Tumbleweed (fails to build due to changes
  in NUT-2.8.0)
- Minor spec file fixes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1734177600">- Update to version 5.12.0.348.g93f9bdcb:
  * add MariaDB to README
  * Update README.md (#4318)
  * perl: fix compile on clang by ignoring a warning
  * intel_rdt: removed ifdefs
  * bind: fix warning for variable used only in DEBUG() calls
  * intel_rdt: Use pqos_mon_get_value api to obtain event values
  * intel_rdt: corrected returned value for llc_miss mertic
  * intel_rdt: Updated list of supported RDT events
  * intel_rdt: corrected reported value for llc_ref mertic
  * intel_rdt: corrected reported value for llc_miss mertic
  * intel_rdt: corrected reported value name
  * intel_rdt: added support for LLC misses monitoring event
  * lua: add missing test case for #3779, #4235
  * memory.c: workaround to let ValuesPercentage works again without "available"
  * epics: Fix potential deadlock in handle_label_event
  * ras plugin: Ensure each log message prints an appropriate prefix.
  * ras plugin: Use `sysconf(_SC_NPROCESSORS_CONF)` instead of `get_nprocs_conf()`.
  * FreeBSD's PF has a new interface so leverage libpfctl to access it so the right interface is used depending on the version
  * ras plugin: Remove unnecessary includes.
  * .github/workflows/release.yml: Import changes from `collectd-6.0`.
  * version-gen.sh: Add the `--tags` flag to `git describe`.
  * Add GitHub Action to automatically build and upload release assets.
  * ci: Remove the "statgrab" task from CirrusCI.
  * .cirrus.yml: Rename `checks_script` to `make_distcheck_script`.
  * .cirrus.yml: Upload `.log` files as artifacts.
  * write_redis plugin: Clean up allocated fields in `wr_config_free()`.
  * disk.c: add config options to support diskstats 15-20 in KERNEL_LINUX
  * interface plugin: Reorder implementations to put kstat above getifaddrs.
  * configure.ac: fix grpc build
  * disk plugin: Build `disk_submit_single` on Linux only.
  * disk: add /proc/diskstats fields 15 to 20 in KERNEL_LINUX
  * docs/CONTRIBUTING.md: Change formulation examples to discourage verbatim copying.
  * docs/CONTRIBUTING.md: Replace remaining use of "Unlisted Change".
  * docs/CONTRIBUTING.md: Document that PRs with features and fixes should be split.
  * docs/CONTRIBUTING.md: Rename "Unlisted Change" to "Maintenance".
  * write_riemann_threshold.c: fix switch-case fall through warning
  * Pass strcmp() to c_avl_create() as function pointer, not data one
  * turbostat, format_json: Satisfy clang-format CI check
  * Fix signedness mismatch GCC warnings in few of the plugins
  * daemon/utils_cache: remove unused functions and function args
  * Remove unused function arguments from few of the plugins
  * Attribute unused function args as such in few of the plugins
  * write_prometheus: annotate unused args and fix comments
  * format_json, network_parse: annotate unused args as unused
  * docs/CONTRIBUTING.md: Rename "Bug" to "Fix"; improve wording.
  * lua: update explanation about register_notification callback
  * lua: add missing notification callback
  * docs: Document important labels and how to interact with them.
  * .github/workflows/distcheck.yml: Run on Debian12 (current stable).
  * write_riemann plugin: Terminate `riemann_event_set` arguments with `RIEMANN_EVENT_FIELD_NONE`.
  * .cirrus.yml: Provide expected plugin list to `check-built-plugins.sh` if present.
  * .cirrus.yml: Rename container images.
  * .github/workflows/build.yml: Add "Check expected plugins" to "experimental".
  * .github/workflows/build.yml: Add a "Check expected plugins" step.
  * .github/workflows/: Rename container images.
  * .github/workflows/build.yml: Remove Ubuntu Bionic.
  * lua: Add functions to register some missing callbacks
  * lua: Use a global lock to call Lua's API
  * Initial implementation for epics plugin
  * lua: add fallback to detect LuaJIT
  * collection3: Fix inappropriate usage of CGI:param
  * common: Use `sstrncpy` to get around misinformed compiler error.
  * common: Fix compiler warning in unit test.
  * contrib/format.sh src/utils/common/common_test.c
  * cmds: Add a test for `cmd_parse_putval`.
  * cmds: Prevent `cmd_parse_putval` from modifying its `argv` argument.
  * common: Change `parse_values` so it doesn't modify the parsed string.
  * MySQL plugin: Fix incorrect WSREP/Galera metric types.
  * evaluate flush condition with oldest value in the buffer
  * Makefile.am: Build `test_virt_plugin` with the same `CFLAGS` as the *virt plugin*.
  * configure: Use `elif` instead of two separate `if` blocks.
  * configure: Improve the reporting when the "virt" plugin cannot be built.
  * procevent plugin: Consistently mention the unit in log message.
  * procevent plugin: Reference buffer sizing guideline.
  * write_log plugin: remove the "write_log values:" line when logging metrics.
  * procevent plugin: report errors in human readable form.
  * procevent plugin: ensure the ring buffer length is not zero.
  * procevent plugin: remove use of a nested flexible array member.
  * Build workflow: request that clang produce DWARF v4 debug symbols.
  * Disable "exit on error" when running `make check`.
  * procevent plugin: Disable the `-Wgnu-variable-sized-type-not-at-end` warning.
  * .cirrus.yml: Update list of compilers to match the `debian_unstable` container.
  * Build workflow: add builds for `--enable-debug` and `CC=clang`.
  * Workflows: rename "sid_amd64" to "debian_sid".
  * .cirrus.yml: Report failures from CentOS 9 and Fedora 39.
  * .cirrus.yml: Fix reporting of test failure.
  * .cirrus.yml: set parallelism to number of CPUs.
  * .cirrus.yml: Add task for FreeBSD builds.
  * .cirrus.yml: remove obsolete platforms, add recent ones.
  * .cirrus.yml: s/master/main/
  * NUT plugin: import `&lt;time.h&gt;` before `&lt;upsclient.h&gt;`.
  * gmond plugin: Improve `mc_handle_metadata_msg()`.
  * gmond plugin: Look for RPC headers in /usr/include/tirpc.
  * gmond plugin: Import `&lt;ganglia.h&gt;`.
  * Workflow build: upload `config.log` and other log files.
  * Notify upstart/systemd after initialization is complete.
  * SMART plugin: initialize struct passed to `ioctl(2)`.
  * Netlink plugin: complete initialize structs used for testing.
  * Build workflow: report the status of `make check` after the test log has been uploaded.
  * Build workflow: use all available CPUs.
  * Build workflow: Add Fedora 38 and 39, remove Fedora 36.
  * ./contrib/format.sh src/amqp.c
  * Update README.md
  * Add Ubuntu 22.04 ("Jammy Jellyfish") and Ubuntu 23.10 ("Mantic Minotaur").
  * Build workflow: also remove EL8 (based on CentOS 8).
  * Build workflow: remove old distros.
  * AMQP plugin: prefer the `rabbitmq-c/amqp.h` header if available.
  * Fix compile warning for amqp
  * Intel RDT plugin: use `pqos_mon_start_cores()` if available.
  * Intel RDT plugin: use `pqos_mon_start_pids2()` if available.
  * Python plugin: use `PyConfig` to set argv.
  * Write MongoDB plugin: fix format trunction errors.
  * Give the action and job better names.
  * Remove `make distcheck` from the regular "build" action.
  * Distcheck action: use Debian 11 ("Bullseye") for now.
  * Add new GitHub action for running `make distcheck`.
  * curl_stats: fix compatibility with new versions of cURL.
  * Build workflow: add Debian 12 ("Bookworm") and remove Debian 9 ("Stretch").
  * Add Valgrind suppression for libvirt memory leak.
  * Intel RDT: fix compilation with libpqos &lt; 4.4.
  * Revert "GitHub actions: upgrade to actions/checkout@v4"
  * GitHub actions: upgrade to actions/checkout@v4
  * GitHub actions: include job name in artifact name.
  * GitHub actions: continue on error and upload test logs.
  * clang format
  * Compare both PID and process start time to avoid issues with immediate PID reuse on Linux platform.
  * write_prometheus: don't use AI_ADDRCONFIG for resolving bind address
  * Convert src/collectdctl.pod to UTF-8.
  * Add .md to README in redhat specfile
  * Put README(.md) back in the dist
  * Ensure %perl_vendorlib in redhat specfile
  * Update IPTables plugin build-dep in redhat specfile
  * Add RAS plugin to redhat specfile
  * Add MMC plugin to redhat specfile
  * Removed extra call to swap_submit_usage.
  * Update README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * Update contrib/postgresql/README.md
  * contrib/postgresql: Second postgresql database layout.
  * intel_rdt: added support for LLC references monitoring event
  * intel_rdt: start only supported events
  * add questions metric for mysql plugin
  * plugin processes: fix doc typo
  * Change AMQP queue drops from DEBUG to WARNING
  * vmem: add metrics starting with `pgrefill`
  * 3052: Renamed README to README.md and added TOC.
  * processes: format array size def in read fork_rate &amp; ctxt
  * processes: fix prints &amp; remove useless comments
  * processes: simpler illustration in conf.pod
  * processes: eliminate hardcoded arraysize in read ctxt &amp; fork_rate
  * processes: determine if ctxt is enabled before read_sys_ctxt_switch
  * processes: format `/proc/stat` WARNING &amp; ERROR
  * processes: use buffer to read /proc/stat once according to procs_running
  * processes: remove running++ since we calc it in procs_running later
  * processes: make contextswitches configurable
  * Running contrib/format.sh.
  * Pass precise size of struct sockaddr, whichever type of struct sockaddr, to getnameinfo() on NetBSD.
  * cpufreq: init max_avail_freqs with 128
  * cpufreq: dynamically alloc max_avail_freqs according to time_in_state
  * cpufreq: format.sh cpufreq.c
  * cpufreq: make MAX_AVAIL_FREQS configurable in conf
  * Fix glibc feature macro handling for timegm
  * vmem: add "scan" metrics starting with "pgscan_"
  * vmem: add "pgscan_"
  * vmem: add metrics start with "pgscan_" in Kernel Linux
  * Fix a memory leak in the `write_stackdriver` plugin</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1734436800">- Add epics plugin</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1734523200">- Normalize jar mtimes for reproducible builds (boo#1134568)</changelog>
</package>
<package pkgid="548999598b496c083a7d0ef6c06a893823c2b8057688fd2456c1935473ac94deb503ce2c5044c4193821c2255d7c831a7b841ea07592e500c122065ac5704e7c" name="colm-devel" arch="x86_64">
  <version epoch="0" ver="0.14.7" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided
- Add shadow.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540555200">- Update to new upstream release 0.13.0.6
  * No changelog was provided, again.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Update to new upstream release 0.13.0.7
  * No changelog provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1588248000">- Add reproducible.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598443200">- Update Git URL. Trim old specfile constructs.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 0.14.7
  * fix: make string pointers from locals, not temp strings
  * fix vm_pop_type for big-endian systems
  * various refcount fixes
  * A lot other bugfixes and improvements
- Added fix-library.patch
- Dropped outdated shadow.diff</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1657281600">- Backport patches to fix signed/unsigned char usage on Arm:
  * e1f1c598.patch
  * 6895f7d1.patch
  * 9f0ac141.patch</changelog>
</package>
<package pkgid="4305b3be5e967cbdc5ce46b7948ab651cc0a2d3ff335da018b21aa6720e135451edcb686219ab94f27c39e29436ed93857c020414334aa5c7d298682493c5dab" name="colm-doc" arch="noarch">
  <version epoch="0" ver="0.14.7" rel="bp160.1.13"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided
- Add shadow.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540555200">- Update to new upstream release 0.13.0.6
  * No changelog was provided, again.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Update to new upstream release 0.13.0.7
  * No changelog provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1588248000">- Add reproducible.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598443200">- Update Git URL. Trim old specfile constructs.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 0.14.7
  * fix: make string pointers from locals, not temp strings
  * fix vm_pop_type for big-endian systems
  * various refcount fixes
  * A lot other bugfixes and improvements
- Added fix-library.patch
- Dropped outdated shadow.diff</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1657281600">- Backport patches to fix signed/unsigned char usage on Arm:
  * e1f1c598.patch
  * 6895f7d1.patch
  * 9f0ac141.patch</changelog>
</package>
<package pkgid="60a831edef434b81adb261b471bb59a4db1278f12547282766b425b9275aad2e8584d0e3cab1f40c959760a30cbb4409cab9f866910516e5bed2e396d2ea1856" name="colord" arch="x86_64">
  <version epoch="0" ver="1.4.6" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="3bc9ea9b6fd55fb8efc65347783a7f54695f903f051f774de96989c89373f33d33f1dcabc74909fbf739ff58f1182cbb5c64ebc91b8793dfd4cc6073dc161428" name="colord" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="160000.1.1"/>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="dimstar@opensuse.org" date="1756123200">- Update to version 1.4.8:
  + New Features:
  - Add AppStream metainfo XML with hardware provide info.
  - Add support for -Dsystemd_root_prefix to make local building
    easier.
  - Install sysusers.d config file if configured user is not
    root.
  + Bugfixes:
  - Add the source attribute for each man page.
  - Drop component type from AppStream metadata XML to avoid
    parsing error.
  - Fix a critical warning when running the self tests.
  - Fix USB scanners not working with RestrictAddressFamilies.
  - Fix writing to the database with ProtectSystem=strict.
  - Properly set the status to CD_SESSION_STATUS_RUNNING.
  - Use g_ascii_strtod instead of atof().
  - Use sqlite3_errmsg() to avoid getting a mutable error
    message.
- Changes from version 1.4.7:
  + Bugfixes:
  - Add various hardenings to the systemd service.
  - Always close the ICC profile when loading fails.
  - Avoid destructing LCMS plugin twice with lcms 2.14.
  - Do not make state files executable in tmpfiles.d/colord.conf.
  - Fix a double free spotted by Coverity.
  - Fix an error check when parsing the DTP94 data.
  - Fix a -Wincompatible-pointer-types warning.
  - Fix potential crash when reading from broken Huey hardware.
  - Set FILE_OFFSET_BITS explicitly.
  - Use a 64-bit time_t.
  - Use thread context for Gamut Alarm codes.
- Drop colord-CVE-2021-42523.patch and
  harden_colord.service.patch: fixed upstream.</changelog>
</package>
<package pkgid="e493329814682af5c59543ef313e0963327cc47ad791436cd71d738d835c7eada0442f54725bf2299354a91dcd59b45f789db83086a8a88a02b95aa455918be7" name="colord-color-profiles" arch="x86_64">
  <version epoch="0" ver="1.4.6" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="3e6a180c688f754bc5261d3a14a051d7ab01f099870d2a78702f93fd5ad8b60a03046e6079d51c55750f46a09ce98275d9395d927a191a8ae6d542c7834e96fc" name="colord-color-profiles" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="160000.1.1"/>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="dimstar@opensuse.org" date="1756123200">- Update to version 1.4.8:
  + New Features:
  - Add AppStream metainfo XML with hardware provide info.
  - Add support for -Dsystemd_root_prefix to make local building
    easier.
  - Install sysusers.d config file if configured user is not
    root.
  + Bugfixes:
  - Add the source attribute for each man page.
  - Drop component type from AppStream metadata XML to avoid
    parsing error.
  - Fix a critical warning when running the self tests.
  - Fix USB scanners not working with RestrictAddressFamilies.
  - Fix writing to the database with ProtectSystem=strict.
  - Properly set the status to CD_SESSION_STATUS_RUNNING.
  - Use g_ascii_strtod instead of atof().
  - Use sqlite3_errmsg() to avoid getting a mutable error
    message.
- Changes from version 1.4.7:
  + Bugfixes:
  - Add various hardenings to the systemd service.
  - Always close the ICC profile when loading fails.
  - Avoid destructing LCMS plugin twice with lcms 2.14.
  - Do not make state files executable in tmpfiles.d/colord.conf.
  - Fix a double free spotted by Coverity.
  - Fix an error check when parsing the DTP94 data.
  - Fix a -Wincompatible-pointer-types warning.
  - Fix potential crash when reading from broken Huey hardware.
  - Set FILE_OFFSET_BITS explicitly.
  - Use a 64-bit time_t.
  - Use thread context for Gamut Alarm codes.
- Drop colord-CVE-2021-42523.patch and
  harden_colord.service.patch: fixed upstream.</changelog>
</package>
<package pkgid="36233a33c555b3452e27b24cc5b60e17db2fbd2b80d3995828eb75393ee9fb0f01aac3514a069ee5cbd8492bd271d47db04f46b6464e9bf94e4dff8ec2baad32" name="colord-gtk" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1363694400">- Update to version 0.1.25:
  + New Feature: Give the sample widget slightly curved corners and
    a gray outline.
  + Bugfixes:
  - Do not use deprecated functions from libcolord.
  - Fix warnings when building ColordGtk-1.0.gir.
  - Fix up the licence boilerplate for CdSampleWidget.</changelog>
  <changelog author="dimstar@opensuse.org" date="1418731200">- Update to version 0.1.26:
  + New Features:
  - Actually install the cd-convert utility.
  - Provide an optional Gtk2 version of libcolord-gtk.
  + Bugfixes:
  - Do not link against the unused gio-unix-2.0.
  - Fix cd-convert to work with multiple sensors attached.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634904000">- Update to version 0.2.0:
  + New Features:
  - Migrate to gettext
  - Port to DocBook 5
  - Port to the Meson build system
  + Bugfixes:
  - Do not leak plug_name
  - Fix gtk-doc build when srcdir != builddir
- Add meson BuildRequires and macros following upstreams port to
  meson buildsystem.
- Add gtk-doc and docbook5-xsl-stylesheets BuildRequires, build
  gtk-doc development documentation and manpages. Following this
  split out new -doc sub-package.
- Drop intltool, no longer needed.
- Package COPYING as license, as this was somehow missed in the
  past.
- Modernize spec/cleanup.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 0.2.0+8:
  * trivial: Fix link to homepage
  * trivial: Use the right vala package
  * build: Make GTK3 build optional too
  * Add a GTK4 variant
  * build: Rename 'gtk' meson variable to 'gtk3'
  * Make introspection optional in meson
  * Update the example spec file
  * trivial: post release version bump
- Switch to git checkout.
- Add pkgconfig(gtk4) BuildRequires: Build the new gtk4 support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647950400">- Do not build libcolord-gtk4-1-32bit: there is no consumer and so
  far we avoid putting gtk4-32bit up.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651492800">- Update to stable release 0.3.0
  + Stable release
  + Sync spec file with downstream
- Use source signature</changelog>
  <changelog author="mkubecek@suse.cz" date="1688040000">- fix segfault when turning monitor back on (bsc#1212840):
  Fix-the-callback-signature-to-fix-a-crash.patch</changelog>
</package>
<package pkgid="6f5a8015161a78158f5b46ded7a38b46d291209daeff237cec7e2e71ed0534f5f83010b85bae825aba09811081044dc78cd271931813647e0c7dfbbbfdbec816" name="colord-gtk-doc" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1363694400">- Update to version 0.1.25:
  + New Feature: Give the sample widget slightly curved corners and
    a gray outline.
  + Bugfixes:
  - Do not use deprecated functions from libcolord.
  - Fix warnings when building ColordGtk-1.0.gir.
  - Fix up the licence boilerplate for CdSampleWidget.</changelog>
  <changelog author="dimstar@opensuse.org" date="1418731200">- Update to version 0.1.26:
  + New Features:
  - Actually install the cd-convert utility.
  - Provide an optional Gtk2 version of libcolord-gtk.
  + Bugfixes:
  - Do not link against the unused gio-unix-2.0.
  - Fix cd-convert to work with multiple sensors attached.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634904000">- Update to version 0.2.0:
  + New Features:
  - Migrate to gettext
  - Port to DocBook 5
  - Port to the Meson build system
  + Bugfixes:
  - Do not leak plug_name
  - Fix gtk-doc build when srcdir != builddir
- Add meson BuildRequires and macros following upstreams port to
  meson buildsystem.
- Add gtk-doc and docbook5-xsl-stylesheets BuildRequires, build
  gtk-doc development documentation and manpages. Following this
  split out new -doc sub-package.
- Drop intltool, no longer needed.
- Package COPYING as license, as this was somehow missed in the
  past.
- Modernize spec/cleanup.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 0.2.0+8:
  * trivial: Fix link to homepage
  * trivial: Use the right vala package
  * build: Make GTK3 build optional too
  * Add a GTK4 variant
  * build: Rename 'gtk' meson variable to 'gtk3'
  * Make introspection optional in meson
  * Update the example spec file
  * trivial: post release version bump
- Switch to git checkout.
- Add pkgconfig(gtk4) BuildRequires: Build the new gtk4 support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647950400">- Do not build libcolord-gtk4-1-32bit: there is no consumer and so
  far we avoid putting gtk4-32bit up.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651492800">- Update to stable release 0.3.0
  + Stable release
  + Sync spec file with downstream
- Use source signature</changelog>
  <changelog author="mkubecek@suse.cz" date="1688040000">- fix segfault when turning monitor back on (bsc#1212840):
  Fix-the-callback-signature-to-fix-a-crash.patch</changelog>
</package>
<package pkgid="c092734c0d793666c7bf55bf9316fe8346948f635429a1bf69d60d66bb9875fb9f8877a08adec2dd06101b2238fdc6f74d7ac7df6e888856c437d4ef37101846" name="colord-gtk-lang" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1363694400">- Update to version 0.1.25:
  + New Feature: Give the sample widget slightly curved corners and
    a gray outline.
  + Bugfixes:
  - Do not use deprecated functions from libcolord.
  - Fix warnings when building ColordGtk-1.0.gir.
  - Fix up the licence boilerplate for CdSampleWidget.</changelog>
  <changelog author="dimstar@opensuse.org" date="1418731200">- Update to version 0.1.26:
  + New Features:
  - Actually install the cd-convert utility.
  - Provide an optional Gtk2 version of libcolord-gtk.
  + Bugfixes:
  - Do not link against the unused gio-unix-2.0.
  - Fix cd-convert to work with multiple sensors attached.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634904000">- Update to version 0.2.0:
  + New Features:
  - Migrate to gettext
  - Port to DocBook 5
  - Port to the Meson build system
  + Bugfixes:
  - Do not leak plug_name
  - Fix gtk-doc build when srcdir != builddir
- Add meson BuildRequires and macros following upstreams port to
  meson buildsystem.
- Add gtk-doc and docbook5-xsl-stylesheets BuildRequires, build
  gtk-doc development documentation and manpages. Following this
  split out new -doc sub-package.
- Drop intltool, no longer needed.
- Package COPYING as license, as this was somehow missed in the
  past.
- Modernize spec/cleanup.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 0.2.0+8:
  * trivial: Fix link to homepage
  * trivial: Use the right vala package
  * build: Make GTK3 build optional too
  * Add a GTK4 variant
  * build: Rename 'gtk' meson variable to 'gtk3'
  * Make introspection optional in meson
  * Update the example spec file
  * trivial: post release version bump
- Switch to git checkout.
- Add pkgconfig(gtk4) BuildRequires: Build the new gtk4 support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647950400">- Do not build libcolord-gtk4-1-32bit: there is no consumer and so
  far we avoid putting gtk4-32bit up.</changelog>
  <changelog author="rpm@fthiessen.de" date="1651492800">- Update to stable release 0.3.0
  + Stable release
  + Sync spec file with downstream
- Use source signature</changelog>
  <changelog author="mkubecek@suse.cz" date="1688040000">- fix segfault when turning monitor back on (bsc#1212840):
  Fix-the-callback-signature-to-fix-a-crash.patch</changelog>
</package>
<package pkgid="6cf8432389cf86b7925891e06c7d8a65aac50f45e113d20d13c2752f4aa0571c0c2aefb7de015f9ee2b731e8bfce1e5a7a086d53d043f641307ee14b168e18ae" name="colord-kde" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Hide the KCM in the Wayland session</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="0e304db1b9d0402dd8e3b33d5654b7075a8cd5cdd0d2145c3b290a36af8b807063348cc21ebf8c051492f9697b73c92c066c365d2c9d6981e5f8d1b51a3b9d74" name="colord-kde-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * Hide the KCM in the Wayland session</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="eb0615a07f531eeb0ee2f6316fd32089443ef568346c0cacc6d5b4fc1d9f1efdd336f5e89da98cfa14486c5eeea212444bbc7c8152086cbf14ace9c44dc2230a" name="colord-lang" arch="noarch">
  <version epoch="0" ver="1.4.6" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="59801303b024fba17768ecf9a76678a9eebb1e452effe2eb6666f4ce98d17d17b8abcf8d4cdcf8c1085c113bc43851f0c1144b456324614575745802638de991" name="colord-lang" arch="noarch">
  <version epoch="0" ver="1.4.8" rel="160000.1.1"/>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1712232000">- Tag hardening patch as PATCH-FEATURE-OPENSUSE.</changelog>
  <changelog author="mjambor@suse.com" date="1721908800">- Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid
  wrong type being passed to gmtime_r on i586 (and perhaps other 32bit
  targets). [boo#1228331]</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="dimstar@opensuse.org" date="1756123200">- Update to version 1.4.8:
  + New Features:
  - Add AppStream metainfo XML with hardware provide info.
  - Add support for -Dsystemd_root_prefix to make local building
    easier.
  - Install sysusers.d config file if configured user is not
    root.
  + Bugfixes:
  - Add the source attribute for each man page.
  - Drop component type from AppStream metadata XML to avoid
    parsing error.
  - Fix a critical warning when running the self tests.
  - Fix USB scanners not working with RestrictAddressFamilies.
  - Fix writing to the database with ProtectSystem=strict.
  - Properly set the status to CD_SESSION_STATUS_RUNNING.
  - Use g_ascii_strtod instead of atof().
  - Use sqlite3_errmsg() to avoid getting a mutable error
    message.
- Changes from version 1.4.7:
  + Bugfixes:
  - Add various hardenings to the systemd service.
  - Always close the ICC profile when loading fails.
  - Avoid destructing LCMS plugin twice with lcms 2.14.
  - Do not make state files executable in tmpfiles.d/colord.conf.
  - Fix a double free spotted by Coverity.
  - Fix an error check when parsing the DTP94 data.
  - Fix a -Wincompatible-pointer-types warning.
  - Fix potential crash when reading from broken Huey hardware.
  - Set FILE_OFFSET_BITS explicitly.
  - Use a 64-bit time_t.
  - Use thread context for Gamut Alarm codes.
- Drop colord-CVE-2021-42523.patch and
  harden_colord.service.patch: fixed upstream.</changelog>
</package>
<package pkgid="a759c56fea9e9daaa3ed08ca3c489ffc05f3c58ef494a8b935ef0e23ceb93e51498a157cb3963cfeb43abd08886be9623240350e396da4367555295c71c3fffd" name="colordiff" arch="noarch">
  <version epoch="0" ver="1.0.21" rel="bp160.1.9"/>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 1.0.13
  * see attached CHANGES for details
- Cleanup spec-file with spec-cleaner
- Update project url
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 1.0.15
  * see attached CHANGES for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.0.16
  * see attached CHANGES for details
- Add gpg signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1505044800">- Update to 1.0.18:
  * Ensure --color=no is honoured where appropriate, add
  - -color-term-output-only plus minor fixes.
  * Fix regression which broke piping to less.
- Cleanup with spec-cleaner</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594641600">- Update to 1.0.19
  * Add 'difffile' color option, allowing more git-like coloring (separate
    color for header of each changed file).  Thanks Geraint Edwards.
  * Improved portability of Makefile, thanks Michael Osipov.
  * Provide support for 24-bit colour strings, thanks Stephen Wall.
- Run spec-cleaner
  * Drop package groups
- Drop patch colordiff-fix-permission.diff not needed anymore</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645790400">- update to 1.0.20:
  * Some improvements to reading command-line options
  * Support Octopus git/merge</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1671796800">- update to 1.0.21:
  * Support for Windows C:\ProgramData instead of /etc,
  * improved documentation for command-line options</changelog>
</package>
<package pkgid="5ad74c44515bbbacd57ed98d1e41337269b2f7a5fbe63061dc0681ba62ff9841bee58209b0726868ad4bd85a340f8496ce785949d2b2d063583ff7222da5d580" name="colormake" arch="noarch">
  <version epoch="0" ver="0.9.20140503" rel="bp160.1.8"/>
  <changelog author="tampakrap@opensuse.org" date="1405252800">- Initial commit</changelog>
  <changelog author="tampakrap@opensuse.org" date="1406548800">- Replace custom %perldir with already defined %perl_vendorlib</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="e6b3461190250da647100dbb4f5b49f71c2e476b5c2287f3ec383ed12595619c2b18bb08e2b4cf8b1c6893cc4517cf9c6410525400938ab1e02317341fffaaf0" name="combustion" arch="noarch">
  <version epoch="0" ver="1.5" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1700740800">- Update to version 1.3:
  * Add udev rule for VMware guestinfo
  * Read VMware guestinfo value as base64 encoded gzipped script
  * Support VMware guestinfo</changelog>
  <changelog author="fvogt@suse.com" date="1703160000">- Update to version 1.3+git3:
  * 30firstboot: Do not detect firstboot in the zipl initrd "initgrub" mode
    (bsc#1218065)
  * Handle absence of NM and wicked properly
  * Use dracut $hookdir instead of hardcoding</changelog>
  <changelog author="fvogt@suse.com" date="1706184000">- Update to version 1.3+git5:
  * Set the snapper snapshot as important=yes
  * Remove unnecessary chmod</changelog>
  <changelog author="fvogt@suse.com" date="1709294400">- Update to version 1.3+git7:
  * Only enable all existing DASDs if it's actually the first boot (bsc#1219849)
  * Use $dracutsysrootdir</changelog>
  <changelog author="fvogt@suse.com" date="1709726400">- Update to version 1.3+git9:
  * Explicitly install modules for config sources
  * Trigger udev rules on ACTION!="remove"</changelog>
  <changelog author="fvogt@suse.com" date="1720785600">- Switch _service to use mode="manual"
- Update to version 1.3+git11:
  * 30firstboot: Leave IPL DASD enablement to s390-tools (jsc#PED-8130)
  * Wait for tee to finish in example scripts (bsc#1222411)</changelog>
  <changelog author="fvogt@suse.com" date="1722945600">- Update to version 1.4:
  * Add support for remote config files using combustion.url (jsc#PED-8591)</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1.4+git4:
  * Add basic automated testing
  * Don't wait for other config sources if combustion.url is set
  * Improve documentation for config sources a bit
  * Stop gpg-agent before umounting /sysroot</changelog>
  <changelog author="fvogt@suse.com" date="1724241600">- Update to version 1.4+git8:
  * Avoid misleading "Application returned with exit status 1" message
  * CI: Add an ignition config which mounts /sysroot/home
  * Bind mount API filesystems individually
  * Check for leftover /sysroot mounts on combustion exit</changelog>
  <changelog author="fvogt@suse.com" date="1742558400">- Update to version 1.5:
  * Add support for nested /etc subvolumes
  * Log combustion-prepare.service to journal+console
  * CI: Verify combustion runs only on the first boot
  * CI: Add some missing SYSTEMD_IGNORE_CHROOT=1 to poweroff calls
  * CI: Add a test with Minimal-VM
  * Silence stderr of grep in /proc/*/mountinfo</changelog>
</package>
<package pkgid="341d189cc8411518af4a1bdd54eb53be11bc21b2429a2c70e52ef5ecb5ca58f863ea6f59a1c3228e609e08466392dce1bba73f26a069aa278c5addce37a2c856" name="commandergenius" arch="x86_64">
  <version epoch="0" ver="3.5.2" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656936000">- Update to release 3.1.3
  * No changes; version bump only</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1670673600">- Update to version 3.2.0
  * More collision fixes, especially relevant in Keen 2.
  * Improved the Video engine a bit. Changing resolutions on the
    fly now work better.
  * Fixed some ledge grabbing issues.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680004800">- Add 0001-build-resolve-compile-error-with-gcc-13.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1690459200">- Update to version 3.4.0
  * New Resolution system. You can configure a relative resolution
    for the launcher but also for every game.
- Update to version 3.3.0
  * Added Support for Keen 1 version 1.34
  * Added Support for Keen 6 version 1.50
- Drop not longer needed patch:
  * 0001-build-resolve-compile-error-with-gcc-13.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1693224000">- Update to release 3.4.9
  * No changelog was provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700308800">- Update to release 3.5.0
  * Build fixes for non-Linux systems</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1720612800">- Update to release 3.5.1
  * No changelog was provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1737115200">- Add gs.patch to fix FTBFS</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1737892800">- Update to release 3.5.2
  * No changelog was provided</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1745496000">- Add x11 to explicit BuildRequires, as we depended upon sdl2
  implicitly pulling it in previously.</changelog>
</package>
<package pkgid="85f5a905218e7b74a656a4475940a4e30fe6a437441a1833ba4995ef815a7eda8fe07bcb44ab7bbb3de716c10498b2922f16422b3c6e0403fb4afc250fd12eec" name="commons-compiler" arch="noarch">
  <version epoch="0" ver="3.1.10" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573560000">- Initial packaging of janino 2.7.8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647950400">- Upgrade to version 3.1.6
  * Fixed issue #151: Calcite tests fail with compiler error
  * Added a test case that reproduces issue #151.
  * #141 Class loader workaround so that Calcite doesn't need to
    change. (#150)
- Removed patch:
  * janino-2.7.8-remove-nullanalysis-annotations.patch
    + not needed any more
- Build with source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Upgrade to version 3.1.10
  * Fixed issue #205: Classpath: Class archive file naming: Removed
    the file name check for class file archives; previously: *.jar
    and *.zip
  * Fixed issue #201: A Stack overflow error: Catch
    StackOverflowError in all relevant API methods 8e.g. "cook()"
    and "guessParameterNames()") and convert it into a
    CompileException (bsc#1211923, CVE-2023-33546).
  * Fixed issue #204: Evaluate method is ambiguous: Changed method
    "evaluate(Object...)" back to "evaluate(Object[])", and added a
    method "evaluate()" for convenience.
  * Fixed issue #202: Gracefully degradation if loading system
    properties throws an SecurityException
  * Fixed issue #182: Incompatible return types, when there are
    multiple methods with different return type
  * Fixed issue #188: Some expressions are failing without explicit
    cast of null
  * C++-style comment before EOI caused an internal compiler error.
  * Fixed issue #195: "Redefinition of constructors and methods
    allowed".
  * AutoIndentWriter: flush() / close(): The "tabulatorBuffer" and
    the "lineBuffer" were flushed in the wrong order, leaving the
    tabulatorBuffer unflushed under some conditions.
  * Fixed issue #196: "First type argument in ReferenceType lose
    its type arguments".
  * Fixed issue #183: "Add Automatic-Module-Name to MANIFEST.MF".
- Upgrade to version 3.1.9
  * Merged pr #189 "Implement implicit conversions to Arrays with
    Annotations".
  * Reproduce issue #188 "Some expressions are failing without
    explicit cast of null".
  * Fixed issue #187 "Compilation of vars initialized in different
    if/else branches is failing".
  * Fixed issue #185 "InternalCompilerException while compiling
    variables initialized in while condition".
  * Added the "-benchmark" command line option.
  * Fixed issue #182 "Incompatible return types, when there are
    multiple methods with different return type".
  * Eliminated generation of empty StackMapTable attributes.
- Upgrade to version 3.1.8
  * Generation of the StackMapTable is finally correct! However,
    the default tar version is still 6.
  * Regression tests finally pass for target version 8!
  * Fixed an AccessControlException with JRE 7.
  * Fixed issue #172 "SimpleCompiler Variable Bug", and also for
    VOID return type. Added test cases for issue 172 "SimpleCompiler
    Variable Bug".
  * Added more test cases for the "ConstantValue" attribute.
  * Added fix and regression test case for issue #177
    "ClassFormatError when assigning integer to constant double".
    Added test cases.
  * Fixed issue #174: "Byte code is 350 times larger due to
    StackMapTable, JVM crashes when loading the class". Added test
    cases.
  * Implementing nested types didn't work (dollar signs in class
    name).
  * Added code for debugging the loading of .class file and source
    files.
  * Added fix and regression test case for issue #178 "Janino
    incorrectly thinks variables are uninitialized". Added
    regression test cases.
  * Issue #176: "String s = System.out.println();" throws an
    InternalCompilerException
  * Implemented a system property
    "org.codehaus.janino.CodeContext.suppressStackMapTable"
    (boolean).
  * Fixed Issue #168 "commons-compiler-jdk: Unable to load class".
  * Added JDISASM with scope "test" because some test cases now need
    JDISASM.
  * Fixed GITHUB PR #10: Replace if condition with literal if
    possible to simplify if statement
  * Allow variable declarators between the LV declaration and the IF
    statement iff none of the VDs modify the LV.
  * Added "-Xverify:all" to all run configuration to enforce the
    strictest bytecode verification possible.
  * Test case "JlsTest.test_9_7_1__Normal_Annotations2()" choked
    because of annotation-type element value (annotation type is
    described by an UTF8 CPE, not a CLASS CPE).
  * Fixed issue #167 "After a successful compilation, compiling
    identical (or similar) code fails with an assignment conversion
    error".
  * Moved the "getArrayIClass(...)" methods from "IClass" to
    "IClassLoader", and keep the array classes per-class-loader
    (which is important because arrays refer to java.lang.Object).
    Also added a test case.
  * Removed JUnit launch configurations for Java 12, 15 and 16,
    which are no longer supported.
- Upgrade to version 3.1.7
  * Merged PR #148 "Correct the logic to truncate Stack map in
    CodeContext.restoreLocalVariables".
  * Merged PR #163 "Add SUPER flag for package member types only
    (#163)".
  * Fixed issue #166 "Get generate method bytecode size".
  * Added a test case for issue #165.
  * Fixed issue #165 "Compilation failure when a class and package
    name match case insensitively".
  * Replaced "new (Byte|Short|Integer|Long|Float|Double|Character
    |Boolean)(...)" with "valueOf(...)".
  * Replaced types "Visitor.*Visitor" with "*Visitor".
  * Fixed issue #135 again; this time right.
  * Fixed Issue #155 "Enhanced FOR statement does not work with
    primitive variable".
  * Verified compatibility with Java 17.
  * Began to extend IClass and ClassFile for generics; specifically
    added IType and ITypeVariable. However generics are not yet
    supported; work in progress (although regression tested).
  * Implemented private interface methods (a Java 9 feature).
  * Further simplified the
    org.codehaus.commons.compiler.jdk.SimpleCompiler: It now uses a
    delegate o.c.c.c.j.Compiler, which saves a lot of duplicate
    code.
  * Major refactoring of org.codehaus.commons.compiler.jdk to get
    rid of duplicate code.
  * Fixed the error handling of the
    o.c.c.c.jdk.(Compiler|SimpleCompiler); added respective test
    cases.
  * Marking the SimpleCompiler as "cooked" was not reliable.
  * Static and default interface methods were still declared as "not
    implemented" on the home page, while they are already
    implemented! Updated the home page, added some test cases and
    fixed a minor bug.
  * Added a test for the "diamond operator".
  * Removed all "redundant type arguments", i.e. made use of the
    "diamond operator". This became possible because support was
    dropped for Java 6.
  * Also dropped support for "funny" intermediate Java versions 9
    and 10.
  * Dropped support for Java 6. Thus, Janino is now compiled against
    the JRE 7 runtime.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="395b5dfe0475c690c20408ef6bb013584e6d5063fda57490c2127385b3cb3bcf2cf8aba030bb23e89030ac38fee07bd4dd62d585fb7a57585a57c5c52a5286ac" name="commons-compiler-jdk" arch="noarch">
  <version epoch="0" ver="3.1.10" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573560000">- Initial packaging of janino 2.7.8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647950400">- Upgrade to version 3.1.6
  * Fixed issue #151: Calcite tests fail with compiler error
  * Added a test case that reproduces issue #151.
  * #141 Class loader workaround so that Calcite doesn't need to
    change. (#150)
- Removed patch:
  * janino-2.7.8-remove-nullanalysis-annotations.patch
    + not needed any more
- Build with source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1692100800">- Upgrade to version 3.1.10
  * Fixed issue #205: Classpath: Class archive file naming: Removed
    the file name check for class file archives; previously: *.jar
    and *.zip
  * Fixed issue #201: A Stack overflow error: Catch
    StackOverflowError in all relevant API methods 8e.g. "cook()"
    and "guessParameterNames()") and convert it into a
    CompileException (bsc#1211923, CVE-2023-33546).
  * Fixed issue #204: Evaluate method is ambiguous: Changed method
    "evaluate(Object...)" back to "evaluate(Object[])", and added a
    method "evaluate()" for convenience.
  * Fixed issue #202: Gracefully degradation if loading system
    properties throws an SecurityException
  * Fixed issue #182: Incompatible return types, when there are
    multiple methods with different return type
  * Fixed issue #188: Some expressions are failing without explicit
    cast of null
  * C++-style comment before EOI caused an internal compiler error.
  * Fixed issue #195: "Redefinition of constructors and methods
    allowed".
  * AutoIndentWriter: flush() / close(): The "tabulatorBuffer" and
    the "lineBuffer" were flushed in the wrong order, leaving the
    tabulatorBuffer unflushed under some conditions.
  * Fixed issue #196: "First type argument in ReferenceType lose
    its type arguments".
  * Fixed issue #183: "Add Automatic-Module-Name to MANIFEST.MF".
- Upgrade to version 3.1.9
  * Merged pr #189 "Implement implicit conversions to Arrays with
    Annotations".
  * Reproduce issue #188 "Some expressions are failing without
    explicit cast of null".
  * Fixed issue #187 "Compilation of vars initialized in different
    if/else branches is failing".
  * Fixed issue #185 "InternalCompilerException while compiling
    variables initialized in while condition".
  * Added the "-benchmark" command line option.
  * Fixed issue #182 "Incompatible return types, when there are
    multiple methods with different return type".
  * Eliminated generation of empty StackMapTable attributes.
- Upgrade to version 3.1.8
  * Generation of the StackMapTable is finally correct! However,
    the default tar version is still 6.
  * Regression tests finally pass for target version 8!
  * Fixed an AccessControlException with JRE 7.
  * Fixed issue #172 "SimpleCompiler Variable Bug", and also for
    VOID return type. Added test cases for issue 172 "SimpleCompiler
    Variable Bug".
  * Added more test cases for the "ConstantValue" attribute.
  * Added fix and regression test case for issue #177
    "ClassFormatError when assigning integer to constant double".
    Added test cases.
  * Fixed issue #174: "Byte code is 350 times larger due to
    StackMapTable, JVM crashes when loading the class". Added test
    cases.
  * Implementing nested types didn't work (dollar signs in class
    name).
  * Added code for debugging the loading of .class file and source
    files.
  * Added fix and regression test case for issue #178 "Janino
    incorrectly thinks variables are uninitialized". Added
    regression test cases.
  * Issue #176: "String s = System.out.println();" throws an
    InternalCompilerException
  * Implemented a system property
    "org.codehaus.janino.CodeContext.suppressStackMapTable"
    (boolean).
  * Fixed Issue #168 "commons-compiler-jdk: Unable to load class".
  * Added JDISASM with scope "test" because some test cases now need
    JDISASM.
  * Fixed GITHUB PR #10: Replace if condition with literal if
    possible to simplify if statement
  * Allow variable declarators between the LV declaration and the IF
    statement iff none of the VDs modify the LV.
  * Added "-Xverify:all" to all run configuration to enforce the
    strictest bytecode verification possible.
  * Test case "JlsTest.test_9_7_1__Normal_Annotations2()" choked
    because of annotation-type element value (annotation type is
    described by an UTF8 CPE, not a CLASS CPE).
  * Fixed issue #167 "After a successful compilation, compiling
    identical (or similar) code fails with an assignment conversion
    error".
  * Moved the "getArrayIClass(...)" methods from "IClass" to
    "IClassLoader", and keep the array classes per-class-loader
    (which is important because arrays refer to java.lang.Object).
    Also added a test case.
  * Removed JUnit launch configurations for Java 12, 15 and 16,
    which are no longer supported.
- Upgrade to version 3.1.7
  * Merged PR #148 "Correct the logic to truncate Stack map in
    CodeContext.restoreLocalVariables".
  * Merged PR #163 "Add SUPER flag for package member types only
    (#163)".
  * Fixed issue #166 "Get generate method bytecode size".
  * Added a test case for issue #165.
  * Fixed issue #165 "Compilation failure when a class and package
    name match case insensitively".
  * Replaced "new (Byte|Short|Integer|Long|Float|Double|Character
    |Boolean)(...)" with "valueOf(...)".
  * Replaced types "Visitor.*Visitor" with "*Visitor".
  * Fixed issue #135 again; this time right.
  * Fixed Issue #155 "Enhanced FOR statement does not work with
    primitive variable".
  * Verified compatibility with Java 17.
  * Began to extend IClass and ClassFile for generics; specifically
    added IType and ITypeVariable. However generics are not yet
    supported; work in progress (although regression tested).
  * Implemented private interface methods (a Java 9 feature).
  * Further simplified the
    org.codehaus.commons.compiler.jdk.SimpleCompiler: It now uses a
    delegate o.c.c.c.j.Compiler, which saves a lot of duplicate
    code.
  * Major refactoring of org.codehaus.commons.compiler.jdk to get
    rid of duplicate code.
  * Fixed the error handling of the
    o.c.c.c.jdk.(Compiler|SimpleCompiler); added respective test
    cases.
  * Marking the SimpleCompiler as "cooked" was not reliable.
  * Static and default interface methods were still declared as "not
    implemented" on the home page, while they are already
    implemented! Updated the home page, added some test cases and
    fixed a minor bug.
  * Added a test for the "diamond operator".
  * Removed all "redundant type arguments", i.e. made use of the
    "diamond operator". This became possible because support was
    dropped for Java 6.
  * Also dropped support for "funny" intermediate Java versions 9
    and 10.
  * Dropped support for Java 6. Thus, Janino is now compiled against
    the JRE 7 runtime.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="159702d8ca743454044850b7aee92138bbac0810e41b08cd2cd412b1e649c9d8883d522889a9a5159f7acef2f6907a6d5e84788c5f174d428e9a11e1ccaf9e92" name="compat-usrmerge" arch="x86_64">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1616673600">- catch boolean deps</changelog>
  <changelog author="obs@haasn.xyz" date="1622548800">- add fallback for filesystems without renameat2 (boo#1186637)</changelog>
  <changelog author="lnussel@suse.com" date="1622635200">- exit early if one of the affected directories has mountpoint
  beneath it</changelog>
  <changelog author="lnussel@suse.com" date="1623067200">- fix conversion with split /usr (boo#1186781)</changelog>
  <changelog author="fvogt@suse.com" date="1623153600">- Avoid dependency on mountpoint from util-linux
- Also check for availability of find</changelog>
  <changelog author="lnussel@suse.de" date="1623153601">- early exit in case of overlayfs (boo#1187027)</changelog>
  <changelog author="lnussel@suse.de" date="1623758400">- another fix for split /usr to avoid running out of space (boo#1186781)
- unsafe fallback also for ENOSYS on renameat2 as seen on WSL</changelog>
  <changelog author="lnussel@suse.de" date="1630065600">- statically link xmv to avoid glibc 2.34 dependency
  (__libc_start_main@GLIBC_2.34)
- turn on filetriggers in main package. Needed for single transaction upgrades
  (boo#1189788)</changelog>
  <changelog author="lnussel@suse.de" date="1630065601">- exit file triggers early if alread usrmerged</changelog>
  <changelog author="lnussel@suse.de" date="1633608000">- Fix logic for detecting conflicts with directories (boo#1191111)</changelog>
</package>
<package pkgid="2a1f3870d021183ec73dd480cd668fd38d075c47a6ab65a825b1943a30bf111c1e230fda4e238dce78f2bc82cf569dbda3114f3fd68831b64a9baf86170279df" name="compat-usrmerge-build" arch="x86_64">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1616673600">- catch boolean deps</changelog>
  <changelog author="obs@haasn.xyz" date="1622548800">- add fallback for filesystems without renameat2 (boo#1186637)</changelog>
  <changelog author="lnussel@suse.com" date="1622635200">- exit early if one of the affected directories has mountpoint
  beneath it</changelog>
  <changelog author="lnussel@suse.com" date="1623067200">- fix conversion with split /usr (boo#1186781)</changelog>
  <changelog author="fvogt@suse.com" date="1623153600">- Avoid dependency on mountpoint from util-linux
- Also check for availability of find</changelog>
  <changelog author="lnussel@suse.de" date="1623153601">- early exit in case of overlayfs (boo#1187027)</changelog>
  <changelog author="lnussel@suse.de" date="1623758400">- another fix for split /usr to avoid running out of space (boo#1186781)
- unsafe fallback also for ENOSYS on renameat2 as seen on WSL</changelog>
  <changelog author="lnussel@suse.de" date="1630065600">- statically link xmv to avoid glibc 2.34 dependency
  (__libc_start_main@GLIBC_2.34)
- turn on filetriggers in main package. Needed for single transaction upgrades
  (boo#1189788)</changelog>
  <changelog author="lnussel@suse.de" date="1630065601">- exit file triggers early if alread usrmerged</changelog>
  <changelog author="lnussel@suse.de" date="1633608000">- Fix logic for detecting conflicts with directories (boo#1191111)</changelog>
</package>
<package pkgid="0a36c467afb020e76b359768191f8e8e4f823f8d15af04b13b1a45fbe8a2d1fdaa5be4ee4beb3cb61e4b11967352d6dfc0a8714c52a9702209354db745554228" name="compat-usrmerge-tools" arch="x86_64">
  <version epoch="0" ver="84.87" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1616673600">- catch boolean deps</changelog>
  <changelog author="obs@haasn.xyz" date="1622548800">- add fallback for filesystems without renameat2 (boo#1186637)</changelog>
  <changelog author="lnussel@suse.com" date="1622635200">- exit early if one of the affected directories has mountpoint
  beneath it</changelog>
  <changelog author="lnussel@suse.com" date="1623067200">- fix conversion with split /usr (boo#1186781)</changelog>
  <changelog author="fvogt@suse.com" date="1623153600">- Avoid dependency on mountpoint from util-linux
- Also check for availability of find</changelog>
  <changelog author="lnussel@suse.de" date="1623153601">- early exit in case of overlayfs (boo#1187027)</changelog>
  <changelog author="lnussel@suse.de" date="1623758400">- another fix for split /usr to avoid running out of space (boo#1186781)
- unsafe fallback also for ENOSYS on renameat2 as seen on WSL</changelog>
  <changelog author="lnussel@suse.de" date="1630065600">- statically link xmv to avoid glibc 2.34 dependency
  (__libc_start_main@GLIBC_2.34)
- turn on filetriggers in main package. Needed for single transaction upgrades
  (boo#1189788)</changelog>
  <changelog author="lnussel@suse.de" date="1630065601">- exit file triggers early if alread usrmerged</changelog>
  <changelog author="lnussel@suse.de" date="1633608000">- Fix logic for detecting conflicts with directories (boo#1191111)</changelog>
</package>
<package pkgid="4daf3e774e09ee508721cbecdf52356ed494cb7f101f22c1e60567f8d66754799e2a47dcf4d69f73de735c108039d68e895d9699e79f61f9a3bb05e7ceecf110" name="compface" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="bp160.1.13"/>
  <changelog author="schwab@suse.de" date="1094904000">- Update to compface 1.4.</changelog>
  <changelog author="schwab@suse.de" date="1105358400">- Update to compface 1.5.</changelog>
  <changelog author="schwab@suse.de" date="1128513600">- Update to compface 1.5.2.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1148299200">- Don't strip binaries.</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1332849600">- license update: MIT
  Use SPDX license</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Grab patches from debian to actually work correctly
  * added compface-1.5.2-destdir.diff
  * added libcompface_1.5.2-5.diff.gz
  * modified compface-1.5.2.diff
- Create test to verify the thing works
  * added compface-test.xbm
- Use shared library
- Cleanup the specfile</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="2945e69218c7c496b78f213604625adf88b4cf465c118a7fb3e87e87abd6ba354f9f882fe1611e5f316e9ba0c9ba952536a479aa1b576183384e95ffafc11966" name="compface-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="bp160.1.13"/>
  <changelog author="schwab@suse.de" date="1094904000">- Update to compface 1.4.</changelog>
  <changelog author="schwab@suse.de" date="1105358400">- Update to compface 1.5.</changelog>
  <changelog author="schwab@suse.de" date="1128513600">- Update to compface 1.5.2.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1148299200">- Don't strip binaries.</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1332849600">- license update: MIT
  Use SPDX license</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Grab patches from debian to actually work correctly
  * added compface-1.5.2-destdir.diff
  * added libcompface_1.5.2-5.diff.gz
  * modified compface-1.5.2.diff
- Create test to verify the thing works
  * added compface-test.xbm
- Use shared library
- Cleanup the specfile</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="3b6826677a4811fb1a7e266754a31bcc22d13e88a57b37980e1461f7600607bcc0b0557b1e468d8859f4c9f0943e694c2975e063d82f7a7092ecf07759fce180" name="compiz" arch="x86_64">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="1b994bdd3f27ee20411b753168e7824f8f06ba4c49ac1b87acaccb3c5b12964b4b914fcd86885d5f1f25608e5bcbc289370b888053b180c110df8cd7781b6e3d" name="compiz-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="9196563eac212a50c4e1be344a3fc9273c9246c52c4eaafaa1bcf5d8a2c8b3447d868dc0340c57764e7503561724555a4f686fffa5d588ef44a76eeb142ae04c" name="compiz-branding-upstream" arch="x86_64">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="8fdd72ba50c761144af3c54f7f276bb2d352d8a632ef663009fa710f211486687aa0ec3a809582cd0d58254b65878f340ba86fbc51ff0051d02a565b96075341" name="compiz-devel" arch="x86_64">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="0fb76f01ec42fc4150b1520ae9a0d048fd40149cbaee999d8b304176c9e6354859bf1c76074ab49de2272a2a74cdcf9f86483cd8e835ef72ab6910f4a81ecbe0" name="compiz-gnome" arch="x86_64">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="151984a23465dc7905a6b83d2576bb8550546dc88ef0da87d15bb10474cd46ebd302c95f00bbe077a342f2d67662f3a6486e9fb3c0821fd46dde0774fe7e2972" name="compiz-lang" arch="noarch">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="1423456b6a4eb37107ff97f0a7fa31604d077262933fd9421e0cdaa3c6621ef4be88405855e98d88043ec98ff1c8e7954ff59e060dbfb375acea3db98a2786dd" name="compiz-manager" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="bp160.1.6"/>
  <changelog author="badshah400@gmail.com" date="1281441600">- Added the Place plugin to default configuration, configured to
  smart placing</changelog>
  <changelog author="dimstar@opensuse.org" date="1297598400">- Add shift switcher to default configuraiton (Alt-Tab)
- Disable audible bell in default coniguration
- Use zoom effect for open and close.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="dimstar@opensuse.org" date="1317643200">- Fix typo in patch tagline.</changelog>
  <changelog author="ku.b@gmx.de" date="1338465600">- Requires Compiz &lt; 0.9</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1413720000">- fix bashism
- update patches:
  * compiz-manager-setup.patch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1447070400">- Update and fix compiz-manager-setup.patch (Compiz 0.9.x stuff,
  lack of MATE compatibility, $XDG_CONFIG_HOME ignoring).
- Add Marco to compiz-manager-fallback_xterm.patch.
- Rebase and rename compiz-manager-bnc564536.patch to
  compiz-manager-sbin-lspci.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448020800">- Fix config.skel: was configured for Compiz 0.9.x.
- Remove Compiz 0.9.x plugins from compiz-manager-setup.patch.
- Enhance compiz-manager-detect-multiple-graphic-cards.patch:
  original regular expressions are faulty.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450526400">- Update to 0.7.0:
  * Add MATE support.
  * Add Marco fallback WM.
  * Do not use Emerald by default.
  * Remove blacklisting: deeply outdated.
  * Software rasteriser check (bsc#479060).
  * Other minor fixes.
- Rebase compiz-manager-setup.patch.
- Remove compiz-manager-detect-multiple-graphic-cards.patch,
  bug-469785-disable-loose-binding.diff,
  compiz-manager-avoid-sw-rast-bug-479060.diff,
  compiz-manager-dry_run.patch, compiz-manager-fallback_xterm.patch,
  compiz-manager-sbin-lspci.patch, compiz-manager-nouveau.patch,
  compiz-manager-sm-client-id.patch: fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="002b5b036cfc0052fe0adb96bacd7b8047f8deec42ba68c49d550d714565cc57676c9bfa873e8ce6f3c123ce32fddf911fdbe8a22b51f94c28b7af5adbf876d9" name="compiz-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.18" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1458820800">- Update to 0.8.12.2:
  * Include forgotten compiz-start.desktop.in into the tarball,
    needed for --enable-menu-entries.
- Solve libcompizconfig dependency loop.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460289600">- Update to version 0.8.12.3:
  * Drop glib-gettext dependency.
    This fixes usage of autogen.sh with newer glib.
  * Change default Blue filter to Gaussian.
  * Fix broken appearance on HiDPI with GTK+ 3.10+ (if scaling is on).
    For now scaling is just disabled completely.
  * Fix for some cases when cursor settings were ignored by
    applications.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1490184000">- Switch gtk-window-decorator to Gtk3 after Marco.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492516800">- Update to version 0.8.14:
  * Handle _NET_WM_MOVERESIZE ClientMessages.
    Fixes the whisker menu resize bug.
  * Improve horizontal and vertical maximizing.
  * Remove the "Number of Desktops" option.
  * Fix a crash when displaying special characters in gtk-window-decorator.
  * Set rotate and wall default flip bindings to None.
    Fixes a problem where edges of screen are unclickable by default.
  * Fix potential for skydome silently failing to render.
  * Don't fallback for exceeding max texture size.
  * Improve --button-layout behavior for gtk-window-decorator.
  * Update translations.
- Workaround /usr/@DATADIRNAME@/locale/ on openSUSE Leap 42.1 and
  older.
- Rebase compiz-suse-defaults.patch.
- Only switch gtk-window-decorator to Gtk3 on openSUSE Leap 42.3
  and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1541937600">- Update to version 0.8.16:
  * Fix cutoff tooltips.
  * Fix window display delays.
  * Support for gtk frame extents.
  * Introduce at-spi support for ezoom.
  * Maintenance updates and fixes.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542456000">- Update to version 0.8.16.1:
  * Bump core abi version.
  * Fix windows crawling when unfullscreened.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582372800">- Add compiz-gwd-marco-1.22.2.patch: Fix build against Marco 1.22.2
  or later (commits cc75be2e, bd67e080, c272018a, d2b57855,
  004d52d9, 8de1335f, cdfd6818, 18734772, 472eecac, 2431089c,
  feb113b8, 6520214d, f3ce70af, 6284ac84, c83d3cfb, 8d7516c0,
  c63bb0a1, e069210f, 43287478, 25d5513a).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1586001600">- Update to version 0.8.18:
  * Improve autoconf argument "default-plugins".
  * Clear metadata/Makefile.am of non-portable code.
  * Drop the dependency on intltool of metadata, src and mate.
  * Making show desktop feature more predictable: when a window is
    open always show the desktop.
  * Add support for XInput2 input events and for actions to bypass
    grabs (for accessibility purposes like zoom in/out for
    visual-impaired).
  * Xinput2 is not enabled by default because it could trigger
    issues on applications like Chromium or Electron-based
    applications.
  * Add a configure option to disable XI2 events support.
  * move: Make an option to let the  mouse wheel scroll windows
    when they are off-screen.
  * Avoid temporary focus back on the original window when
    switching windows.
  * Trigger a smooth migration from intltool to gettext.
  * Improve the build system for a better compatibility (the
    initial ambition was to port it to FreeBSD).
  * Initial support for setting _NET_WM_STATE_FOCUSED so CSD
    windows can follow focus/backdrop theme differences.
  * Fix build against marco 1.22.2+.
  * Update mouse cursor when it gets changed from outside (like
    MATE Appearance).
  * Add an option to only display apps icons in the Switcher
    plugin.
  * Add an option to adjust the switcher size in the Switcher
    plugin.
  * Add an option to make the commands plugin work even while a
    grab is in effect (disabled by default).
  * place: Avoid flickering when restoring windows.
  * place: Avoid round-trip restoring windows that don't fit the
    workspace.
  * Fix placement of vertically maximised windows that are too big
    to fit.
  * Don't show a start menu entry in MATE since it's already
    handled by mate-tweak.
  * HiDPI: Fix corners and menu icon.
  * Update translations.
- Rebase compiz-suse-defaults.patch.
- Remove compiz-gwd-marco-1.22.2.patch: fixed upstream.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1636804800">- Add compiz-0.8.18-fix-librsvg-2.51.patch: Fix building against
  librsvg 2.51+ (commits c0c605dd, 9f105a8b).</changelog>
  <changelog author="Kai-Uwe Behrmann &lt;ku.b@gmx.de&gt;" date="1717502400">- Add fix-compatibility-with-libxml-2.12.patch: Fix runtime
  libxml-2.12 (commit ea7b3731).
- Add fixed-compilation-with-gcc-14.patch: Fix compiling with
  gcc-14 (commit d4213fa4)</changelog>
</package>
<package pkgid="c840f9721d41409a481727344014b25337d72fbd04db32f79b3b848c3e8d7879387775281173802d6667500d78683a622e1d0f8fbe4d4525b500102a5cfeb7e8" name="compleat" arch="x86_64">
  <version epoch="0" ver="1.0+git.20220402.ec8fccc" rel="bp160.1.13"/>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1527854400">- Add license file
- Add rpm group
- Add description</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544097600">- Use _service</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544097601">- Use latest version</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1643889600">- Simplify spec file</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1643976000">- Create subpackages to install the setup scripts for fish and bash
- Include "git" in the version
- Install example *.usage files</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1649073600">- Update to 1.0+git.20220402.ec8fccc
  * Also read usage files from /usr/share/compleat.d
- Only build on architectures where ghc is built
- Correctly install the setup script for bash
- Use %autosetup</changelog>
</package>
<package pkgid="7b38d4e16fb72113ea6443cce81db111519399ae1951d7fb734e5281195a52d1bd2eb6dce7548917605e3e72ca5783f2f42d228e41b67fe40bd881ce6de54ca9" name="compleat-bash" arch="noarch">
  <version epoch="0" ver="1.0+git.20220402.ec8fccc" rel="bp160.1.13"/>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1527854400">- Add license file
- Add rpm group
- Add description</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544097600">- Use _service</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544097601">- Use latest version</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1643889600">- Simplify spec file</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1643976000">- Create subpackages to install the setup scripts for fish and bash
- Include "git" in the version
- Install example *.usage files</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1649073600">- Update to 1.0+git.20220402.ec8fccc
  * Also read usage files from /usr/share/compleat.d
- Only build on architectures where ghc is built
- Correctly install the setup script for bash
- Use %autosetup</changelog>
</package>
<package pkgid="9e198831da59d7f50d40f2da7a79422009b0e4d006c870c2c6753dde98b2491fb1afb228bc60c8846956a4e761d5c77757ccbfd9ac625c2dc335524dd1797b16" name="compleat-fish" arch="noarch">
  <version epoch="0" ver="1.0+git.20220402.ec8fccc" rel="bp160.1.13"/>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1527854400">- Add license file
- Add rpm group
- Add description</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544097600">- Use _service</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1544097601">- Use latest version</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1643889600">- Simplify spec file</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1643976000">- Create subpackages to install the setup scripts for fish and bash
- Include "git" in the version
- Install example *.usage files</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1649073600">- Update to 1.0+git.20220402.ec8fccc
  * Also read usage files from /usr/share/compleat.d
- Only build on architectures where ghc is built
- Correctly install the setup script for bash
- Use %autosetup</changelog>
</package>
<package pkgid="7578cb58ff274bf7086826fc109d2d3b866b74195c4119ee9435fa76fd7ed4dc9e45e86a785506fd178b10907ce2b6874980e6a28255d376eef349f1a4103a94" name="complexity" arch="x86_64">
  <version epoch="0" ver="1.13" rel="bp160.1.12"/>
  <changelog author="astieger@suse.com" date="1509710400">- GNU complexity 1.10</changelog>
  <changelog author="schwab@suse.de" date="1533038400">- Require pkgconfig(autoopts) for building</changelog>
  <changelog author="mpluskal@suse.com" date="1533038401">- Add gpg signature
- Run tests during build</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Use noun phrase in summary. Reduce description hype.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1581595200">- Small modernisation of spec file</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1643803200">- Override man page date (boo#1047218)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1704542400">- update to 1.13:
  * fix ignore pattern option (-I)
  * updates to tests and build tooling
- drop obsolete texinfo macros
- remove keyring and signature as they don't validate</changelog>
</package>
<package pkgid="9b1513a01150ba4aa364a10eeb799c98c698c85f31d3d53a599f4a9f17a5c7e21cf2dce2d28fb23e750108f74b347cad826caa59a5283278aef55e6e209641eb" name="composefs" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="smolsheep@opensuse.org" date="1721217600">- Initial package for bootc on openSUSE.</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726056000">- update to 1.0.5:
  * test: use correct composefs-info binary
  * rust: Some doc and misc tweaks
  * test: remove hardcoded /tmp
  * rust: Add mandatory description field, other misc changes
  * composefs-core: Drop incorrect include
  * rust: Two minor patches
  * composefs-info: specify locale to isgraph/isprint
  * Add meson as an alternative to autotools
  * info: Add missing terminator for longopts
  * mount: Consistently use composefs as source
  * meson.build: Allow use as a meson subproject
  * mkcompose: report close() errors
  * libcomposefs: do not override errno
  * libcomposefs: drop using "ro" option
  * Minor rust lints
  * Verify payload length early on
- switch to meson buildsystem
- switch (permanently?) to tags not releases, as they forgot to add
  meson build files in release files</changelog>
  <changelog author="rrahl0@opensuse.org" date="1727956800">- update to 1.0.6:
  * fix rust bindings
  * fix a potential CVE
  * Autotools build system dropped
  * mkcomposefs: Process last content in dumpfile without newline
  * dump: Support --filter
  * lib: Bail on xattr names &gt; XATTR_NAME_MAX
  * lib: Verify mode values
  * Reject an empty name
  * Two more testing improvements
  * More validation
  * rust/dumpfile: Minor optimization for unescape_to_path_canonical
  * rust: Attempt to fix build on docs.rs
  * rust: Add wrapping for composefs-info dump
  * Various fixes to the fsverity part of test-units.sh
  * Replace custom clang-format bits with stock meson targets
  * Add 64bit rdev APIs
  * libcomposefs: detect short erofs files
  * rust: Accept 64 bit values for rdev
  * A few cleanups around symlinks
  * tests: Move sha verification after other checks
  * dumpfile: Add some test code to convert to tar
  * mkcomposefs: Add a hidden CFS_PARSE_STRICT
  * Results from running honggfuzz, plus some more manual auditing
  * lib: Move validation out of lcfs_node_add_child()
  * writer: Clarifications around our usage of EROFS_NULL_ADDR
- fix licensing
- rename libcomposefs-devel to composefs-devel, as this is the opensuse way</changelog>
  <changelog author="rrahl0@opensuse.org" date="1734177600">- update to 1.0.7:
  * Relicense most code under GPL-2.0-or-later OR Apache-2.0
  * mkcomposefs: make it cpuset aware
  * README.md: Add a "tagline"
  * mkcomposefs: Document external sandboxing
  * meson.build: raise used C standard to C11
  * libcomposefs: include linux/limits.h to satisfy usage of XATTR_NAME_MAX
  * tests: Fix should-fail-self-hardlink to conform to latest syntax
  * Fix clang warnings
  * Add a libcomposefs-internal
  * internal: Rewrite byteswapping macros
  * tests: Add a flow for integration test with fsverity enabled
  * README.md: Link to community forums
  * Add a CONTRIBUTING.md
  * MAINTAINERS.md: New file
  * writer: Add O_DIRECTORY
  * writer: Use blocksize constant
  * Fixed typos in README.md
  * lib: Add expansion comments to header
- add tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1735473600">- require the main package for the devel package</changelog>
  <changelog author="rrahl0@opensuse.org" date="1735905600">- update to 1.0.8:
  * Add Containers Code of Conduct
  * rust: drop all Rust code from this repository
  * lib: Add lcfs_fd_measure_fsverity
  * Do not enable man page generation when it is disabled.
  * writer: Reject empty xattr names
  * writer: Fix return value of lcfs_node_unset_xattr
  * mount: Support EROFS file-backed mounts
  * mkcomposefs: Fix error message</changelog>
  <changelog author="rrahl0@opensuse.org" date="1736078400">- for some reason s390x times out on verifying checksums in the tests,
  let's disable it for now</changelog>
  <changelog author="rrahl0@opensuse.org" date="1739966400">- create an experimental package for things which are not yet stable
  * add patch 001-enable-experimental-tools.patch
- BR libcrypto rather than openssl directly
- fix leap builds by fixing the shebang (we need the newer python311 stack
  * add patch 002-fix-leap-tests.patch</changelog>
</package>
<package pkgid="897b2e60ff18144bcd62487b75d02a9f9ffc43a8014659a882c085c2e53c2f5bc5e5582ffbb14b59520a3af15b7606af4aa99e036c304496713acdab7f3a5e01" name="composefs-devel" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="smolsheep@opensuse.org" date="1721217600">- Initial package for bootc on openSUSE.</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726056000">- update to 1.0.5:
  * test: use correct composefs-info binary
  * rust: Some doc and misc tweaks
  * test: remove hardcoded /tmp
  * rust: Add mandatory description field, other misc changes
  * composefs-core: Drop incorrect include
  * rust: Two minor patches
  * composefs-info: specify locale to isgraph/isprint
  * Add meson as an alternative to autotools
  * info: Add missing terminator for longopts
  * mount: Consistently use composefs as source
  * meson.build: Allow use as a meson subproject
  * mkcompose: report close() errors
  * libcomposefs: do not override errno
  * libcomposefs: drop using "ro" option
  * Minor rust lints
  * Verify payload length early on
- switch to meson buildsystem
- switch (permanently?) to tags not releases, as they forgot to add
  meson build files in release files</changelog>
  <changelog author="rrahl0@opensuse.org" date="1727956800">- update to 1.0.6:
  * fix rust bindings
  * fix a potential CVE
  * Autotools build system dropped
  * mkcomposefs: Process last content in dumpfile without newline
  * dump: Support --filter
  * lib: Bail on xattr names &gt; XATTR_NAME_MAX
  * lib: Verify mode values
  * Reject an empty name
  * Two more testing improvements
  * More validation
  * rust/dumpfile: Minor optimization for unescape_to_path_canonical
  * rust: Attempt to fix build on docs.rs
  * rust: Add wrapping for composefs-info dump
  * Various fixes to the fsverity part of test-units.sh
  * Replace custom clang-format bits with stock meson targets
  * Add 64bit rdev APIs
  * libcomposefs: detect short erofs files
  * rust: Accept 64 bit values for rdev
  * A few cleanups around symlinks
  * tests: Move sha verification after other checks
  * dumpfile: Add some test code to convert to tar
  * mkcomposefs: Add a hidden CFS_PARSE_STRICT
  * Results from running honggfuzz, plus some more manual auditing
  * lib: Move validation out of lcfs_node_add_child()
  * writer: Clarifications around our usage of EROFS_NULL_ADDR
- fix licensing
- rename libcomposefs-devel to composefs-devel, as this is the opensuse way</changelog>
  <changelog author="rrahl0@opensuse.org" date="1734177600">- update to 1.0.7:
  * Relicense most code under GPL-2.0-or-later OR Apache-2.0
  * mkcomposefs: make it cpuset aware
  * README.md: Add a "tagline"
  * mkcomposefs: Document external sandboxing
  * meson.build: raise used C standard to C11
  * libcomposefs: include linux/limits.h to satisfy usage of XATTR_NAME_MAX
  * tests: Fix should-fail-self-hardlink to conform to latest syntax
  * Fix clang warnings
  * Add a libcomposefs-internal
  * internal: Rewrite byteswapping macros
  * tests: Add a flow for integration test with fsverity enabled
  * README.md: Link to community forums
  * Add a CONTRIBUTING.md
  * MAINTAINERS.md: New file
  * writer: Add O_DIRECTORY
  * writer: Use blocksize constant
  * Fixed typos in README.md
  * lib: Add expansion comments to header
- add tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1735473600">- require the main package for the devel package</changelog>
  <changelog author="rrahl0@opensuse.org" date="1735905600">- update to 1.0.8:
  * Add Containers Code of Conduct
  * rust: drop all Rust code from this repository
  * lib: Add lcfs_fd_measure_fsverity
  * Do not enable man page generation when it is disabled.
  * writer: Reject empty xattr names
  * writer: Fix return value of lcfs_node_unset_xattr
  * mount: Support EROFS file-backed mounts
  * mkcomposefs: Fix error message</changelog>
  <changelog author="rrahl0@opensuse.org" date="1736078400">- for some reason s390x times out on verifying checksums in the tests,
  let's disable it for now</changelog>
  <changelog author="rrahl0@opensuse.org" date="1739966400">- create an experimental package for things which are not yet stable
  * add patch 001-enable-experimental-tools.patch
- BR libcrypto rather than openssl directly
- fix leap builds by fixing the shebang (we need the newer python311 stack
  * add patch 002-fix-leap-tests.patch</changelog>
</package>
<package pkgid="302d5de8876dfb47e4706babd7cf1d1bff41a2665c4be429cb2d2c76c86404b2a96b44bed5fc138869655aa7ef90b6932b2b8a483c9e5ef0229504b8a9366ae7" name="composefs-experimental" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="160000.2.2"/>
  <changelog author="smolsheep@opensuse.org" date="1721217600">- Initial package for bootc on openSUSE.</changelog>
  <changelog author="rrahl0@opensuse.org" date="1726056000">- update to 1.0.5:
  * test: use correct composefs-info binary
  * rust: Some doc and misc tweaks
  * test: remove hardcoded /tmp
  * rust: Add mandatory description field, other misc changes
  * composefs-core: Drop incorrect include
  * rust: Two minor patches
  * composefs-info: specify locale to isgraph/isprint
  * Add meson as an alternative to autotools
  * info: Add missing terminator for longopts
  * mount: Consistently use composefs as source
  * meson.build: Allow use as a meson subproject
  * mkcompose: report close() errors
  * libcomposefs: do not override errno
  * libcomposefs: drop using "ro" option
  * Minor rust lints
  * Verify payload length early on
- switch to meson buildsystem
- switch (permanently?) to tags not releases, as they forgot to add
  meson build files in release files</changelog>
  <changelog author="rrahl0@opensuse.org" date="1727956800">- update to 1.0.6:
  * fix rust bindings
  * fix a potential CVE
  * Autotools build system dropped
  * mkcomposefs: Process last content in dumpfile without newline
  * dump: Support --filter
  * lib: Bail on xattr names &gt; XATTR_NAME_MAX
  * lib: Verify mode values
  * Reject an empty name
  * Two more testing improvements
  * More validation
  * rust/dumpfile: Minor optimization for unescape_to_path_canonical
  * rust: Attempt to fix build on docs.rs
  * rust: Add wrapping for composefs-info dump
  * Various fixes to the fsverity part of test-units.sh
  * Replace custom clang-format bits with stock meson targets
  * Add 64bit rdev APIs
  * libcomposefs: detect short erofs files
  * rust: Accept 64 bit values for rdev
  * A few cleanups around symlinks
  * tests: Move sha verification after other checks
  * dumpfile: Add some test code to convert to tar
  * mkcomposefs: Add a hidden CFS_PARSE_STRICT
  * Results from running honggfuzz, plus some more manual auditing
  * lib: Move validation out of lcfs_node_add_child()
  * writer: Clarifications around our usage of EROFS_NULL_ADDR
- fix licensing
- rename libcomposefs-devel to composefs-devel, as this is the opensuse way</changelog>
  <changelog author="rrahl0@opensuse.org" date="1734177600">- update to 1.0.7:
  * Relicense most code under GPL-2.0-or-later OR Apache-2.0
  * mkcomposefs: make it cpuset aware
  * README.md: Add a "tagline"
  * mkcomposefs: Document external sandboxing
  * meson.build: raise used C standard to C11
  * libcomposefs: include linux/limits.h to satisfy usage of XATTR_NAME_MAX
  * tests: Fix should-fail-self-hardlink to conform to latest syntax
  * Fix clang warnings
  * Add a libcomposefs-internal
  * internal: Rewrite byteswapping macros
  * tests: Add a flow for integration test with fsverity enabled
  * README.md: Link to community forums
  * Add a CONTRIBUTING.md
  * MAINTAINERS.md: New file
  * writer: Add O_DIRECTORY
  * writer: Use blocksize constant
  * Fixed typos in README.md
  * lib: Add expansion comments to header
- add tests</changelog>
  <changelog author="rrahl0@opensuse.org" date="1735473600">- require the main package for the devel package</changelog>
  <changelog author="rrahl0@opensuse.org" date="1735905600">- update to 1.0.8:
  * Add Containers Code of Conduct
  * rust: drop all Rust code from this repository
  * lib: Add lcfs_fd_measure_fsverity
  * Do not enable man page generation when it is disabled.
  * writer: Reject empty xattr names
  * writer: Fix return value of lcfs_node_unset_xattr
  * mount: Support EROFS file-backed mounts
  * mkcomposefs: Fix error message</changelog>
  <changelog author="rrahl0@opensuse.org" date="1736078400">- for some reason s390x times out on verifying checksums in the tests,
  let's disable it for now</changelog>
  <changelog author="rrahl0@opensuse.org" date="1739966400">- create an experimental package for things which are not yet stable
  * add patch 001-enable-experimental-tools.patch
- BR libcrypto rather than openssl directly
- fix leap builds by fixing the shebang (we need the newer python311 stack
  * add patch 002-fix-leap-tests.patch</changelog>
</package>
<package pkgid="9e77617ae18d61b3635a7760b4e162041e47914af8287f9415cbaf060fc0aef48b366670d6e71ba2338744266c1e5abc3ead6cf89d37acaf8d782ba6834135b1" name="compsize" arch="x86_64">
  <version epoch="0" ver="1.5" rel="bp160.1.12"/>
  <changelog author="antoine.belvire@opensuse.org" date="1540209600">- Initial package: compsize-1.2.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1551182400">- Update to version 1.3:
  * No changelog provided.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1611144000">- Update to version 1.4:
  * No changelog provided.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612785600">- Update to version 1.5:
  * Improve performances.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1733140800">- Add compsize-1.5-fix-build-btrfsprogs-0.6.1.patch: Fix build with
  recent btrfs-progs (gh#kilobyte/compsize#52,
  gh#kilobyte/compsize!54).</changelog>
</package>
<package pkgid="66b8294f61c24cec2c8034fa6c89c3c47a6443423b3637e4149a92d7030d876967f3ee515d1f82730665e030ee3248829e8281bee9bb25f3f7e0fb4c488db52f" name="conan" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="bp160.1.10"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1698408000">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1702728000">- Update to version 2.0.14:
  * Feature: Added riscv64, riscv32 architectures to default
    settings.yml and management of them in Meson and Autotools
    [gh#conan-io/conan#15053].
  * Feature: Allow only one simultaneous database connection
    [gh#conan-io/conan#15029].
  * Feature: Add conan cache backup-upload to upload all the
    backup sources in the cache, regardless of which references
    they are from [gh#conan-io/conan#15013].
  * Feature: New conan list --format=compact for better UX
    [gh#conan-io/conan#15011].
  * Feature: Ignore metadata upload by passing --metadata=""
    [gh#conan-io/conan#15007].
  * Feature: Better output messages in conan upload
    [gh#conan-io/conan#14984].
  * Feature: Add extra flags to CMakeToolchain
    [gh#conan-io/conan#14966].
  * Feature: Implement package load/restore from the cache, for CI
    workflows and moving packages over air-gaps
    [gh#conan-io/conan#14923].
  * Feature: Compute version-ranges intersection to avoid graph
    version conflicts for compatible ranges
    [gh#conan-io/conan#14912].
  * Feature: CMake helper can use multiple targets in target
    argument [gh#conan-io/conan#14883].
  * Feature: Add CMakeDeps and PkgConfigDeps generators listening
    to system_package_version property [gh#conan-io/conan#14808].
  * Feature: Add shorthand syntax in cli to specify host and build
    in 1 argument [gh#conan-io/conan#14727].
  * Feature: Implement cache LRU control for cleaning of unused
    artifacts [gh#conan-io/conan#14054].
  * Fix: Avoid CMakeToolchain overwriting user CMakePresets.json
    when no layout nor output-folder is defined
    [gh#conan-io/conan#15058].
  * Fix: Add astra, elbrus and altlinux as distribution using apt
    in SystemPackageManager [gh#conan-io/conan#15051].
  * Fix: Default to apt-get package manager in Linux Mint
    [gh#conan-io/conan#15026].
  * Fix: Make Git() check commits in remote server even for
    shallow clones [gh#conan-io/conan#15023].
  * Fix: Fix AutotoolsToolchain extraflags priority
    [gh#conan-io/conan#15005].
  * Fix: Remove colors from conan --version output
    [gh#conan-io/conan#15002].
  * Fix: Add an error message if the sqlite3 version is
    unsupported (less than 3.7.11 from 2012)
    [gh#conan-io/conan#14950].
  * Fix: Make cache DB always use forward slash for paths, to be
    uniform across Windows and Linux [gh#conan-io/conan#14940].
  * Fix: Solve re-build of an existing package revision (like
    forcing rebuild of a an existing header-only package), while
    previous folder was still used by other projects
    [gh#conan-io/conan#14938].
  * Fix: Avoid a recipe mutating a conf to affect other recipes
    [gh#conan-io/conan#14932].
  * Fix: The output of system packages via Apt.install() or
    PkgConfig.fill_cpp_info, like xorg/system was very noisy to
    the Conan output, making it more quiet
    [gh#conan-io/conan#14924].
  * Fix: Serialize the path information of python_requires,
    necessary for computing buildinfo [gh#conan-io/conan#14886].
  * Fix: Define remotes in conan source command in case recipe has
    python_requires that need to be downloaded from remotes
    [gh#conan-io/conan#14852].
  * Fix: Fix min target flag for xros and xros-simulator
    [gh#conan-io/conan#14776].
  * Bugfix: --build=missing was doing unnecessary builds of
    packages that were not needed and could be skipped, in the
    case of tool_requires having transitive dependencies
    [gh#conan-io/conan#15082].
  * BugFix: Add package revision to format=json in 'conan
    export-pkg' command [gh#conan-io/conan#15042].
  * Bugfix: tools.build:download_source=True will not fail when
    there are editable packages [gh#conan-io/conan#15004].
  * Bugfix: Transitive dependencies were incorrectly added to
    conandeps.xcconfig [gh#conan-io/conan#14898].
  * Bugfix: Fix integrity-check (upload --check or cache
    check-integrity) when the export_source has not been
    downloaded [gh#conan-io/conan#14850].
  * Bugfix: Properly lock release candidates of python requires
    [gh#conan-io/conan#14846].
  * BugFix: Version ranges ending with - do not automatically
    activate pre-releases resolution in the full range
    [gh#conan-io/conan#14814].
  * BugFix: Fix version ranges so pre-releases are correctly
    included in the lower bound and excluded in the upper bound
    [gh#conan-io/conan#14814].
- New Requires: python-distro.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1703764800">- Update to version 2.0.16:
  * Bugfix: Revert the default of source_buildenv, make it False
    by default [gh#conan-io/conan#15319].
- Changes from version 2.0.15:
  * Feature: New conan lock remove command to remove requires from
    lockfiles [gh#conan-io/conan#15284].
  * Feature: New CMake.ctest() helper method to launch directly
    ctest instead of via cmake --target=RUN_TEST
    [gh#conan-io/conan#15282].
  * Feature: Add tracking syntax in &lt;host_version&gt; for different
    references [gh#conan-io/conan#15274].
  * Feature: Add pkglist formatter for conan export command
    [gh#conan-io/conan#15266].
  * Feature: Define CONAN_LOG_LEVEL env-var to be able to change
    verbosity at a global level [gh#conan-io/conan#15263].
  * Feature: conan cache path xxx --folder xxxx raises an error if
    the folder requested does not exist [gh#conan-io/conan#15257].
  * Feature: Add in operator support for ConanFile's
    self.dependencies [gh#conan-io/conan#15221].
  * Feature: Make CMakeDeps generator create a conandeps.cmake
    that aggregates all direct dependencies in a cmake-like
    generator style [gh#conan-io/conan#15207].
  * Feature: Add build environment information to CMake configure
    preset and run environment information to CMake test presets
    [gh#conan-io/conan#15192].
  * Feature: Removed a warning about a potential issue with conan
    migration that would print every time a build failed
    [gh#conan-io/conan#15174].
  * Feature: New deploy() method in recipes for explicit
    per-recipe deployment [gh#conan-io/conan#15172].
  * Feature: Allow tool-requires to be used in source() method
    injecting environment [gh#conan-io/conan#15153].
  * Feature: Allow accessing the contents of settings.yml (and
    settings_user!) from ConfigAPI [gh#conan-io/conan#15151].
  * Feature: Add builtin conf access from ConfigAPI
    [gh#conan-io/conan#15151].
  * Feature: Add redirect_stdout to CMake integration methods
    [gh#conan-io/conan#15150].
  * Feature: Add core:warnings_as_errors configuration option to
    make Conan raise on warnings and errors
    [gh#conan-io/conan#15149].
  * Feature: Added FTP_TLS option using secure argument in
    ftp_download for secure communication
    [gh#conan-io/conan#15137].
  * Feature: New [replace_requires] and [replace_tool_requires] in
    profile for redefining requires, useful for package
    replacements like zlibng/zlib, to solve conflicts, and to
    replace some dependencies by system alternatives wrapped in
    another Conan package recipe [gh#conan-io/conan#15136].
  * Feature: Add stderr capture argument to conanfile's run()
    method [gh#conan-io/conan#15121].
  * Feature: New [platform_requires] profile definition to be able
    to replace Conan dependencies by platform-provided
    dependencies [gh#conan-io/conan#14871].
  * Feature: New conan graph explain command to search, compare
    and explain missing binaries [gh#conan-io/conan#14694].
  * Feature: Global cpp_info can be used to initialize components
    values [gh#conan-io/conan#13994].
  * Fix: Make core:warnings_as_errors accept a list
    [gh#conan-io/conan#15297].
  * Fix: Fix user confs package scoping when no separator was
    given [gh#conan-io/conan#15296].
  * Fix: Fix range escaping in conflict reports involving ranges
    [gh#conan-io/conan#15222].
  * Fix: Allow hard set_name() and set_version() to mutate name
    and version provided in command line
    [gh#conan-io/conan#15211].
  * Fix: Make conan graph info --format=text print to stdout
    [gh#conan-io/conan#15170].
  * Fix: Avoid warning in CMake output due to
    CMAKE_POLICY_DEFAULT_CMP0091 unused variable
    [gh#conan-io/conan#15127].
  * Fix: Deprecate [system_tools] in favor of
    [platform_tool_requires] to align with [platform_requires] for
    regular dependencies. Changed output from "System tool" to
    "Platform" [gh#conan-io/conan#14871].
  * Bugfix: Ensure user confs have at least 1 : separator
    [gh#conan-io/conan#15296].
  * Bugfix: Git.is_dirty() will use git status . -s to make sure
    it only process the current path, not the whole repo,
    similarly to other Git methods [gh#conan-io/conan#15289].
  * Bugfix: Make self.info.clear() and header-only packages to
    remove python_requires and tool_requires
    [gh#conan-io/conan#15285].
  * Bugfix: Make conan cache save/restore portable across Windows
    and other OSs [gh#conan-io/conan#15253].
  * Bugfix: Do not relativize absolute paths in deployers
    [gh#conan-io/conan#15244].
  * Bugfix: Add architecture to CMakePresets to avoid cmake
    ignoring toolchain definitions when using presets
    [gh#conan-io/conan#15215].
  * Bugfix: Fix conan graph info --format=html reporting
    misleading conflicting nodes [gh#conan-io/conan#15196].
  * Bugfix: Fix serialization of tool_requires in conan profile
    show --format=json [gh#conan-io/conan#15185].
  * Bugfix: Fix NMakeDeps quoting issues
    [gh#conan-io/conan#15140].
  * Bugfix: Fix the 2.0.14 migration to add LRU data to the cache
    when storage_path conf is defined [gh#conan-io/conan#15135].
  * Bugfix: Fix definition of package_metadata_folder for conan
    export-pkg command [gh#conan-io/conan#15126].
  * Bugfix: pyinstaller.py was broken for Python 3.12 due to a
    useless distutils import [gh#conan-io/conan#15116].
  * Bugfix: Fix backup sources error when no
    core.sources:download_cache is set [gh#conan-io/conan#15109].</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1704974400">- Update to version 2.0.17:
  * Fix: Automatically create folder if conan cache save
  - -file=subfolder/file.tgz subfolder doesn't exist
    (gh#conan-io/conan#15409).
  * Bugfix: Fix libcxx detection when using CC/CXX env vars
    (gh#conan-io/conan#15418).
  * Bugfix: Solve winsdk_version bug in CMakeToolchain generator
    for cmake_minimum_required(3.27) (gh#conan-io/conan#15373).
  * Bugfix: Fix visible trait propagation with build=True trait
    (gh#conan-io/conan#15357).
  * Bugfix: Fix package_id calculation when including conf values
    thru tools.info.package_id:confs (gh#conan-io/conan#15356).
  * Bugfix: Order conf items when dumping them to allow
    reproducible package_id independent of the order the confs
    were declared (gh#conan-io/conan#15356).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1708344000">- Update to version 2.1.0:
  * Long list of changes, see
    https://github.com/conan-io/conan/releases/tag/2.1.0</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 2.2.1:
  * Fix: Add `copytree_compat` method for compatibility with
    Python&gt;=3.12 after distutils removal.
- update to 2.2.0:
  * Feature: Raise for toolchains different than CMakeToolchain
    if using universal binary syntax.
  * Feature: Warn on misplaced requirement function calls
  * Feature: Print options conflicts in the graph caused by
    different branches recipes defining options values.
  * Feature: Add `--backup-sources` flag to `conan cache clean`.
  * Feature: Add `conan graph outdated` command that lists the
    dependencies that have newer versions in remotes
  * Feature: Add a parameter to `trim_conandata` to avoid raising
    an exception when conandata.yml file doesn't exist.
  * Feature: Added `build_context_folder ` to PkgConfigDeps.
  * Feature: Included `build.pkg_config_path ` in the built-in
    options section in the MesonToolchain template.
  * Feature: Update `_meson_cpu_family_map` to support `arm64ec`.
  * Feature: Added support for Clang 18.
  * Feature: Add basic support in CMakeToolchain for universal
    binaries.
  * Feature: New ``tools.cmake.cmake_layout:build_folder`` config
    that allows re-defining ``cmake_layout`` local build-folder.
  * Feature: New ``tools.cmake.cmake_layout:test_folder`` config
    that allows re-defining ``cmake_layout`` output build folder
    for ``test_package``, including a ``$TMP`` placeholder to
    create a temporary folder in system ``tmp``.
  * Feature: (Experimental) Add ``conan config install-pkg
    myconf/[*]`` new configuration inside Conan packages with new
    ``package_type = "configuration"``.
  * Feature: (Experimental) New ``core.package_id:config_mode``
    that allows configuration package reference to affect the
    ``package_id`` of all packages built with that configuration.
  * Feature: Make `cppstd_flag` public to return the
    corresponding C++ standard flag based on the settings.
  * Feature: Allow ``self.name`` and ``self.version`` in
    ``build_folder_vars`` attribute and conf.
  * Feature: Add ``conan list --filter-xxx`` arguments to list
    package binaries that match settings+options.
  * Feature: Add `detect_libc` to the `detect_api` to get the
    name and version of the C library.
  * Feature: New ``CommandAPI`` subapi in the ``ConanAPI`` that
    allows calling other commands.
  * Fix: Avoid unnecessary build of ``tool_requires`` when
    ``--build=missing`` and repeated ``tool_requires``.
  * Fix: Fix ``CMakeDeps`` ``set_property(... APPEND`` argument
    order.
  * Fix: Raising an error when an infinite loop is found in the
    install graph (ill-formed dependency graph with loops).
  * Fix: Make sure `detect_default_compiler()` always returns a
    3-tuple.
  * Fix: Print a clear message for ``conan graph explain`` when
    no binaries exist for one revision.
  * Fix: Add ``package_type="static-library"`` to the ``conan new
    msbuild_lib`` template.
  * Fix: Avoid ``platform_requires`` to fail when explicit
    options are being passed via ``requires(.., options={})``.
  * Fix: Make ``CMakeToolchain`` end with newline.
  * Fix: Do not allow ``conan list`` binary filters or package
    query if a binary pattern is not provided.
  * Fix: Avoid ``CMakeToolchain.preprocessor_definition``
    definitions to ``"None"`` literal string when it  has no
    value (Python ``None``).
  * Fix: Improved ``conan install  --deployer-package=*`` case
    that was crashing when using ``self.package_folder``.
  * Fix: Fix `conan graph info --format=html` for large
    dependency graphs.
  * Fix: Make all recipe and plugins python file ``print()`` to
    ``stderr``, so json outputs to ``stdout`` are not broken.
  * Fix: Fix getting the gnu triplet for Linux x86.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712232000">- Update to version 2.2.2:
  * Fix: Avoid issues with recipe `print(..., file=fileobj)`
    (gh#conan-io/conan#15934).
  * Fix: Fix broken calls to `print(x, file=y)` with duplicate
    keyword arguments (gh#conan-io/conan#15912).
  * Bugfix: Fix handling of `tools.build:defines` for multiconfig
    CMake (gh#conan-io/conan#15924).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 2.5.0:
  * Feature: New tools.cmake.cmaketoolchain:enabled_blocks
    configuration to define which blocks of CMakeToolchain should
    be active or not (gh#conan-io/conan#16563).
  * Feature: Allow --filter-options in conan list to use &amp;: scope
    to refer to all packages being listed
    (gh#conan-io/conan#16559).
  * Feature: Highlight missing or invalid requirements while
    computing dependency graph (gh#conan-io/conan#16520).
  * Feature: New conan lock update subcommand to remove + add a
    reference in the same command (gh#conan-io/conan#16511).
  * Feature: Add support for GCC 12.4 (gh#conan-io/conan#16506).
  * Feature: Honoring tools.android:ndk_path conf. Setting the
    needed flags to cross-build for Android
    (gh#conan-io/conan#16502).
  * Feature: Add os.ndk_version for Android
    (gh#conan-io/conan#16494).
  * Feature: Qbs helper now invokes Conan provider automatically
    (gh#conan-io/conan#16486).
  * Feature: Added force option to
    tools.cmake.cmaketoolchain:extra_variables
    (gh#conan-io/conan#16481).
  * Feature: Raising a ConanException if any section is duplicated
    in the same Conan profile file (gh#conan-io/conan#16454).
  * Feature: Added resolve() method to the Qbs toolchain
    (gh#conan-io/conan#16449).
  * Feature: Make MSBuildDeps generation with deployer relocatable
    (gh#conan-io/conan#16441).
  * Feature: Add QbsDeps class to be used with Qbs Conan module
    provider (gh#conan-io/conan#16334).
  * Feature: Add built in runtime_deploy deployer
    (gh#conan-io/conan#15382).
  * Fix: Fix provides conflict error message not showing
    conflicting provides when a named reference matches a provider
    (gh#conan-io/conan#16562).
  * Fix: Set correct testpaths for pytest
    (gh#conan-io/conan#16530).
  * Fix: Allow .conanrc file in the root of a filesystem
    (gh#conan-io/conan#16514).
  * Fix: Add support for non default docker hosts in conan runners
    (#16477)
  * Fix: Don't fail when we can't overwrite the summary file in
    the backup upload (gh#conan-io/conan#16452).
  * Fix: Make source_credentials.json do not apply to Conan server
    repos protocol (gh#conan-io/conan#16425).
  * Fix: Allow packages to have empty folders
    (gh#conan-io/conan#16424).
  * Bugfix: Fix detect_msvc_compiler() from detect_api to properly
    detect VS 17.10 with compiler.version=194
    (gh#conan-io/conan#16581).
  * Bugfix: Fix unexpected error when a recipe performs
    package_id() info erasure and is used as a compatibility
    candidate (gh#conan-io/conan#16575).
  * Bugfix: Ensure msvc cppstd compatibility fallback does not
    ignore 194 binaries (gh#conan-io/conan#16573).
  * Bugfix: XXXDeps generators did not include an absolute path in
    their generated files if --deployer-folder=xxxx param was used
    (gh#conan-io/conan#16552).
  * Bugfix: Fix conan list ... --format=compact for package
    revisions (gh#conan-io/conan#16490).
  * Bugfix: Fix XcodeToolchain when only defines are set
    (gh#conan-io/conan#16429).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1728475200">- Update to version 2.8.0:
  * New features:
  - Add Clang 19 support. (gh#conan-io/conan#17010)
  - conan config list &lt;pattern&gt; to filter available
    configurations. (gh#conan-io/conan#17000)
  - New auth_remote.py plugin for custom user authentication to
    Conan remotes. (gh#conan-io/conan#16942)
  - New auth_source.py plugin for custom user authentication for
    generic downloads of sources. (gh#conan-io/conan#16942)
  - Add --envs-generation={false} to conan install and conan
    build to disable the generation of virtualenvs
    (conanbuildenv.sh|bat and conanrunenv.sh|bat).
    (gh#conan-io/conan#16935)
  - New tools.files.unzip:filter conf that allows to define
    data, tar and fully_trusted extraction policies for tgz
    files. (gh#conan-io/conan#16918)
  - get() and unzip() tools for source() learned a new
    extract_filter argument to define data, tar and
    fully_trusted extraction policies for tgz files.
    (gh#conan-io/conan#16918)
  - Add progress updates for large uploads (&gt;100Mbs) every 10
    seconds. (gh#conan-io/conan#16913)
  - Implement conan config install-pkg --url=&lt;repo-url&gt; for
    initial definition of remote URL when no remotes are defined
    yet. (gh#conan-io/conan#16876)
  - Allow building a compatible package still of the current
    profile one. (gh#conan-io/conan#16871)
  - Allow bootstrapping (depending on another variant of
    yourself), even for the same version.
    (gh#conan-io/conan#16870)
  - Allow [replace_requires] to replace the package name and
    self.dependencies still works with the old name.
    (gh#conan-io/conan#16443)
  * Bugs fixed:
  - Let CMakeToolchain defining CMAKE_SYSTEM_XXX even if
    user_toolchain is defined, but protected in case the
    toolchain really defines them. (gh#conan-io/conan#17036)
  - Replace | character in generated CMake and Environment
    files. (gh#conan-io/conan#17024)
  - Redirect the PkgConfig stderr to the exception raised.
    (gh#conan-io/conan#17020)
  - Use always forward slashes in Windows subsystems bash path.
    (gh#conan-io/conan#16997)
  - Better error messages when conan list
  - -graph=&lt;graph-json-file&gt; file has issues.
    (gh#conan-io/conan#16936)
  - PkgConfigDeps.set_property() was not setting properly all
    the available properties. (gh#conan-io/conan#17051)
  - BazelDeps did not find DLL files as Conan does not model
    them in the Windows platform. (gh#conan-io/conan#17045)
  - Do not skip dependencies of a package if it is not going to
    be skipped due to tools.graph:skip_binaries=False.
    (gh#conan-io/conan#17033)
  - Allow requires(..., package_id_mode) trait in case of
    diamonds to always use the recipe defined one irrespective
    of requires() order. (gh#conan-io/conan#16987)
  - Propagate include_prerelease flag to intersection of
    VersionRange. (gh#conan-io/conan#16986)
  - Raise error if invalid value passed to
    conf.get(check_type=bool). (gh#conan-io/conan#16976)
  - Allow remote_login accept patterns.
    (gh#conan-io/conan#16942)</changelog>
</package>
<package pkgid="123844e597a27d7c60bd472e0266639eccb40628a16228cebe6e292354cb85216f3369fbfb0fe8db08e5896edb11945226f76604074f573fbba5b75a0f5eaa8b" name="conauto" arch="x86_64">
  <version epoch="0" ver="2.03" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600344000">- Initial package (version 2.03) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1730808000">- Add gcc14.patch</changelog>
</package>
<package pkgid="4351b461e1d65828ca636b590ca24aa4f771ff7cc0b7e6b306b015fd7e32f030e29cd28c21610e38cfd434187911386a2ff8d26454afe1b1e533c4888df3d586" name="conftest" arch="x86_64">
  <version epoch="0" ver="0.56.0" rel="bp160.1.13"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1704369600">- Update to version 0.48.0:
  * feat: Add show-builtin-errors flag for the verify command
    (#901)
  * build(deps): bump github.com/hashicorp/go-getter to v1.7.3
    (#899)
  * build(deps): bump github.com/open-policy-agent/opa from 0.59.0
    to 0.60.0 (#900)
  * misc: Clean up generics usage in parse_config builtins (#898)
  * fix: Fix regexp for Goreleaser groups (#892)
  * build(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine
    (#897)
  * build(deps): bump alpine from 3.18.4 to 3.19.0 (#896)
  * build(deps): bump cuelang.org/go from 0.6.0 to 0.7.0 (#894)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2
    to 0.8.0 (#895)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1706788800">- Update to version 0.49.0:
  * fix: Add tls flag to test command (#908)
  * build(deps): bump alpine from 3.19.0 to 3.19.1 (#910)
  * build(deps): bump github.com/open-policy-agent/opa from 0.60.0
    to 0.61.0 (#909)
  * build(deps): bump golang from 1.21.5-alpine to 1.21.6-alpine
    (#906)
  * feat: Raise error when problematic use of the if keyword is
    encountered (#902)
  * ci: s390x architecture added in the goarch list (#905)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1707393600">- Update to version 0.49.1:
  * chore: Update buildkit and allow dependabot (#911)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1710504000">- Update to version 0.50.0:
  * build(deps): bump github.com/moby/buildkit from 0.12.5 to
    0.13.0 (#926)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.0
    to 0.62.1 (#927)
  * build(deps): bump github.com/open-policy-agent/opa from 0.61.0
    to 0.62.0 (#925)
  * cmd(verify): Enable show-builtin-errors by default (#922)
  * fix: Catch Google Artifact Registry URL during OCI detection
    (#921)
  * docs: Use the right command to pull policies from OCI registry
    (#920)
  * feat: Use ORAS credentials (#917)
  * chore: Update setup-regal and golangci-lint actions to latest
    (#918)
  * build(deps): bump cuelang.org/go from 0.7.0 to 0.7.1 (#916)
  * build: Bump Go to 1.22.x (#915)
  * Update workflow action versions (#914)
  * build(deps): bump golang from 1.21.6-alpine to 1.22.0-alpine
    (#913)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1712145600">- Update to version 0.51.0:
  * fix: Only raise problematic if error when rule has no name set
    (#935)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.1
    to 0.63.0 (#933)
  * ci: Pin bats version to work around broken CI (#936)
  * build(deps): bump github.com/moby/buildkit from 0.13.0 to
    0.13.1 (#931)
  * build(deps): bump cuelang.org/go from 0.7.1 to 0.8.0 (#930)
  * build(deps): bump golang from 1.22.0-alpine to 1.22.1-alpine
    (#929)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1714478400">- Update to version 0.52.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.0
    to 0.64.1 (#947)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.3 to
    1.7.4 (#948)
  * ci: Allow Dependabot to update github.com/hashicorp/go-getter
    (#946)
  * build(deps): bump github.com/moby/buildkit from 0.13.1 to
    0.13.2 (#944)
  * build(deps): bump github.com/open-policy-agent/opa from 0.63.0
    to 0.64.0 (#943)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.3 to
    0.5.4 (#941)
  * build(deps): bump github.com/docker/docker from
    v25.0.3+incompatible to v25.0.5+incompatible (#932)
  * build(deps): bump golang from 1.22.1-alpine to 1.22.2-alpine
    (#938)
  * build(deps): bump cuelang.org/go from 0.8.0 to 0.8.1 (#937)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717761600">- Update to version 0.53.0:
  * tests: extend hcl cases: tag verification (#955)
  * build(deps): bump cuelang.org/go from 0.8.1 to 0.9.0 (#956)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.8.0
    to 0.9.0 (#954)
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.1
    to 0.65.0 (#953)
  * build(deps): bump alpine from 3.19.1 to 3.20.0 (#951)
  * build(deps): bump github.com/BurntSushi/toml from 1.3.2 to
    1.4.0 (#950)
  * build(deps): bump golang from 1.22.2-alpine to 1.22.3-alpine
    (#949)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720699200">- Update to version 0.54.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.65.0
    to 0.66.0 (#966)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.4 to
    0.5.5 (#965)
  * build(deps): bump cuelang.org/go from 0.9.1 to 0.9.2 (#964)
  * build(deps): bump alpine from 3.20.0 to 3.20.1 (#963)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.4 to
    1.7.5 (#962) (fix boo#1227012 CVE-2024-6257)
  * build(deps): bump github.com/moby/buildkit from 0.14.0 to
    0.14.1 (#961)
  * build(deps): bump cuelang.org/go from 0.9.0 to 0.9.1 (#960)
  * build(deps): bump github.com/moby/buildkit from 0.13.2 to
    0.14.0 (#959)
  * build(deps): bump golang from 1.22.3-alpine to 1.22.4-alpine
    (#958)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722081600">- Update to version 0.55.0:
  * build(deps): bump github.com/moby/buildkit from 0.14.1 to
    0.15.1 (#976)
  * build(deps): bump github.com/open-policy-agent/opa from 0.66.0
    to 0.67.0 (#977)
  * fix: update regex to excape the dot in it (#975)
  * ci: Bump golang-ci action to v6 (#974)
  * build(deps): bump golang from 1.22.4-alpine to 1.22.5-alpine
    (#970)
  * ci: Pin goreleaser to v1 (#969)
  * ci: Bump Docker login to v3 (#968)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1729166400">- Update to version 0.56.0:
  * build(deps): bump golang from 1.23.1-alpine to 1.23.2-alpine
    (#1012)
  * build(deps): bump github.com/open-policy-agent/opa from 0.68.0
    to 0.69.0 (#1010)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0
    to 0.9.1 (#1005)
  * chore: Bump Go to 1.23 (#1004)
  * build(deps): bump github.com/moby/buildkit from 0.15.2 to
    0.16.0 (#1003)
  * build(deps): bump alpine from 3.20.2 to 3.20.3 (#1002)
  * build(deps): bump golang from 1.23.0-alpine to 1.23.1-alpine
    (#1001)
  * build(deps): bump cuelang.org/go from 0.9.2 to 0.10.0 (#994)
  * build(deps): bump golang from 1.22.6-alpine to 1.23.0-alpine
    (#995)
  * bump: update go to 1.22 to get on par with toolchain (#1000)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.1
    to 0.68.0 (#996)
  * build(deps): bump github.com/moby/buildkit from 0.15.1 to
    0.15.2 (#993)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to
    1.7.6 (#992)
  * build(deps): bump golang from 1.22.5-alpine to 1.22.6-alpine
    (#990)
  * fix: missing space causing printing error on azuredevops (#988)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.0
    to 0.67.1 (#980)
  * build(deps): bump alpine from 3.20.1 to 3.20.2 (#978)</changelog>
</package>
<package pkgid="d7665a1e8e09381f0c2accba165c6757f4e5c5523c22e4199f32eeee9445eedc3cfa195d826b678e869a9a1d1dd9fca9a49e59ca3a23feef8e9d5a37114e46c3" name="conftest-bash-completion" arch="noarch">
  <version epoch="0" ver="0.56.0" rel="bp160.1.13"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1704369600">- Update to version 0.48.0:
  * feat: Add show-builtin-errors flag for the verify command
    (#901)
  * build(deps): bump github.com/hashicorp/go-getter to v1.7.3
    (#899)
  * build(deps): bump github.com/open-policy-agent/opa from 0.59.0
    to 0.60.0 (#900)
  * misc: Clean up generics usage in parse_config builtins (#898)
  * fix: Fix regexp for Goreleaser groups (#892)
  * build(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine
    (#897)
  * build(deps): bump alpine from 3.18.4 to 3.19.0 (#896)
  * build(deps): bump cuelang.org/go from 0.6.0 to 0.7.0 (#894)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2
    to 0.8.0 (#895)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1706788800">- Update to version 0.49.0:
  * fix: Add tls flag to test command (#908)
  * build(deps): bump alpine from 3.19.0 to 3.19.1 (#910)
  * build(deps): bump github.com/open-policy-agent/opa from 0.60.0
    to 0.61.0 (#909)
  * build(deps): bump golang from 1.21.5-alpine to 1.21.6-alpine
    (#906)
  * feat: Raise error when problematic use of the if keyword is
    encountered (#902)
  * ci: s390x architecture added in the goarch list (#905)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1707393600">- Update to version 0.49.1:
  * chore: Update buildkit and allow dependabot (#911)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1710504000">- Update to version 0.50.0:
  * build(deps): bump github.com/moby/buildkit from 0.12.5 to
    0.13.0 (#926)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.0
    to 0.62.1 (#927)
  * build(deps): bump github.com/open-policy-agent/opa from 0.61.0
    to 0.62.0 (#925)
  * cmd(verify): Enable show-builtin-errors by default (#922)
  * fix: Catch Google Artifact Registry URL during OCI detection
    (#921)
  * docs: Use the right command to pull policies from OCI registry
    (#920)
  * feat: Use ORAS credentials (#917)
  * chore: Update setup-regal and golangci-lint actions to latest
    (#918)
  * build(deps): bump cuelang.org/go from 0.7.0 to 0.7.1 (#916)
  * build: Bump Go to 1.22.x (#915)
  * Update workflow action versions (#914)
  * build(deps): bump golang from 1.21.6-alpine to 1.22.0-alpine
    (#913)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1712145600">- Update to version 0.51.0:
  * fix: Only raise problematic if error when rule has no name set
    (#935)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.1
    to 0.63.0 (#933)
  * ci: Pin bats version to work around broken CI (#936)
  * build(deps): bump github.com/moby/buildkit from 0.13.0 to
    0.13.1 (#931)
  * build(deps): bump cuelang.org/go from 0.7.1 to 0.8.0 (#930)
  * build(deps): bump golang from 1.22.0-alpine to 1.22.1-alpine
    (#929)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1714478400">- Update to version 0.52.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.0
    to 0.64.1 (#947)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.3 to
    1.7.4 (#948)
  * ci: Allow Dependabot to update github.com/hashicorp/go-getter
    (#946)
  * build(deps): bump github.com/moby/buildkit from 0.13.1 to
    0.13.2 (#944)
  * build(deps): bump github.com/open-policy-agent/opa from 0.63.0
    to 0.64.0 (#943)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.3 to
    0.5.4 (#941)
  * build(deps): bump github.com/docker/docker from
    v25.0.3+incompatible to v25.0.5+incompatible (#932)
  * build(deps): bump golang from 1.22.1-alpine to 1.22.2-alpine
    (#938)
  * build(deps): bump cuelang.org/go from 0.8.0 to 0.8.1 (#937)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717761600">- Update to version 0.53.0:
  * tests: extend hcl cases: tag verification (#955)
  * build(deps): bump cuelang.org/go from 0.8.1 to 0.9.0 (#956)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.8.0
    to 0.9.0 (#954)
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.1
    to 0.65.0 (#953)
  * build(deps): bump alpine from 3.19.1 to 3.20.0 (#951)
  * build(deps): bump github.com/BurntSushi/toml from 1.3.2 to
    1.4.0 (#950)
  * build(deps): bump golang from 1.22.2-alpine to 1.22.3-alpine
    (#949)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720699200">- Update to version 0.54.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.65.0
    to 0.66.0 (#966)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.4 to
    0.5.5 (#965)
  * build(deps): bump cuelang.org/go from 0.9.1 to 0.9.2 (#964)
  * build(deps): bump alpine from 3.20.0 to 3.20.1 (#963)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.4 to
    1.7.5 (#962) (fix boo#1227012 CVE-2024-6257)
  * build(deps): bump github.com/moby/buildkit from 0.14.0 to
    0.14.1 (#961)
  * build(deps): bump cuelang.org/go from 0.9.0 to 0.9.1 (#960)
  * build(deps): bump github.com/moby/buildkit from 0.13.2 to
    0.14.0 (#959)
  * build(deps): bump golang from 1.22.3-alpine to 1.22.4-alpine
    (#958)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722081600">- Update to version 0.55.0:
  * build(deps): bump github.com/moby/buildkit from 0.14.1 to
    0.15.1 (#976)
  * build(deps): bump github.com/open-policy-agent/opa from 0.66.0
    to 0.67.0 (#977)
  * fix: update regex to excape the dot in it (#975)
  * ci: Bump golang-ci action to v6 (#974)
  * build(deps): bump golang from 1.22.4-alpine to 1.22.5-alpine
    (#970)
  * ci: Pin goreleaser to v1 (#969)
  * ci: Bump Docker login to v3 (#968)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1729166400">- Update to version 0.56.0:
  * build(deps): bump golang from 1.23.1-alpine to 1.23.2-alpine
    (#1012)
  * build(deps): bump github.com/open-policy-agent/opa from 0.68.0
    to 0.69.0 (#1010)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0
    to 0.9.1 (#1005)
  * chore: Bump Go to 1.23 (#1004)
  * build(deps): bump github.com/moby/buildkit from 0.15.2 to
    0.16.0 (#1003)
  * build(deps): bump alpine from 3.20.2 to 3.20.3 (#1002)
  * build(deps): bump golang from 1.23.0-alpine to 1.23.1-alpine
    (#1001)
  * build(deps): bump cuelang.org/go from 0.9.2 to 0.10.0 (#994)
  * build(deps): bump golang from 1.22.6-alpine to 1.23.0-alpine
    (#995)
  * bump: update go to 1.22 to get on par with toolchain (#1000)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.1
    to 0.68.0 (#996)
  * build(deps): bump github.com/moby/buildkit from 0.15.1 to
    0.15.2 (#993)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to
    1.7.6 (#992)
  * build(deps): bump golang from 1.22.5-alpine to 1.22.6-alpine
    (#990)
  * fix: missing space causing printing error on azuredevops (#988)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.0
    to 0.67.1 (#980)
  * build(deps): bump alpine from 3.20.1 to 3.20.2 (#978)</changelog>
</package>
<package pkgid="c421d27f346a3670fa5a4bce41a9d6a1074570d31427ebeacfb189d6b3941124847e0bff22fcd6c7ff60e4c755d5a8acb8ee58480882d61d826d0cdd06f303ee" name="conftest-fish-completion" arch="noarch">
  <version epoch="0" ver="0.56.0" rel="bp160.1.13"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1704369600">- Update to version 0.48.0:
  * feat: Add show-builtin-errors flag for the verify command
    (#901)
  * build(deps): bump github.com/hashicorp/go-getter to v1.7.3
    (#899)
  * build(deps): bump github.com/open-policy-agent/opa from 0.59.0
    to 0.60.0 (#900)
  * misc: Clean up generics usage in parse_config builtins (#898)
  * fix: Fix regexp for Goreleaser groups (#892)
  * build(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine
    (#897)
  * build(deps): bump alpine from 3.18.4 to 3.19.0 (#896)
  * build(deps): bump cuelang.org/go from 0.6.0 to 0.7.0 (#894)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2
    to 0.8.0 (#895)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1706788800">- Update to version 0.49.0:
  * fix: Add tls flag to test command (#908)
  * build(deps): bump alpine from 3.19.0 to 3.19.1 (#910)
  * build(deps): bump github.com/open-policy-agent/opa from 0.60.0
    to 0.61.0 (#909)
  * build(deps): bump golang from 1.21.5-alpine to 1.21.6-alpine
    (#906)
  * feat: Raise error when problematic use of the if keyword is
    encountered (#902)
  * ci: s390x architecture added in the goarch list (#905)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1707393600">- Update to version 0.49.1:
  * chore: Update buildkit and allow dependabot (#911)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1710504000">- Update to version 0.50.0:
  * build(deps): bump github.com/moby/buildkit from 0.12.5 to
    0.13.0 (#926)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.0
    to 0.62.1 (#927)
  * build(deps): bump github.com/open-policy-agent/opa from 0.61.0
    to 0.62.0 (#925)
  * cmd(verify): Enable show-builtin-errors by default (#922)
  * fix: Catch Google Artifact Registry URL during OCI detection
    (#921)
  * docs: Use the right command to pull policies from OCI registry
    (#920)
  * feat: Use ORAS credentials (#917)
  * chore: Update setup-regal and golangci-lint actions to latest
    (#918)
  * build(deps): bump cuelang.org/go from 0.7.0 to 0.7.1 (#916)
  * build: Bump Go to 1.22.x (#915)
  * Update workflow action versions (#914)
  * build(deps): bump golang from 1.21.6-alpine to 1.22.0-alpine
    (#913)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1712145600">- Update to version 0.51.0:
  * fix: Only raise problematic if error when rule has no name set
    (#935)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.1
    to 0.63.0 (#933)
  * ci: Pin bats version to work around broken CI (#936)
  * build(deps): bump github.com/moby/buildkit from 0.13.0 to
    0.13.1 (#931)
  * build(deps): bump cuelang.org/go from 0.7.1 to 0.8.0 (#930)
  * build(deps): bump golang from 1.22.0-alpine to 1.22.1-alpine
    (#929)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1714478400">- Update to version 0.52.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.0
    to 0.64.1 (#947)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.3 to
    1.7.4 (#948)
  * ci: Allow Dependabot to update github.com/hashicorp/go-getter
    (#946)
  * build(deps): bump github.com/moby/buildkit from 0.13.1 to
    0.13.2 (#944)
  * build(deps): bump github.com/open-policy-agent/opa from 0.63.0
    to 0.64.0 (#943)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.3 to
    0.5.4 (#941)
  * build(deps): bump github.com/docker/docker from
    v25.0.3+incompatible to v25.0.5+incompatible (#932)
  * build(deps): bump golang from 1.22.1-alpine to 1.22.2-alpine
    (#938)
  * build(deps): bump cuelang.org/go from 0.8.0 to 0.8.1 (#937)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717761600">- Update to version 0.53.0:
  * tests: extend hcl cases: tag verification (#955)
  * build(deps): bump cuelang.org/go from 0.8.1 to 0.9.0 (#956)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.8.0
    to 0.9.0 (#954)
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.1
    to 0.65.0 (#953)
  * build(deps): bump alpine from 3.19.1 to 3.20.0 (#951)
  * build(deps): bump github.com/BurntSushi/toml from 1.3.2 to
    1.4.0 (#950)
  * build(deps): bump golang from 1.22.2-alpine to 1.22.3-alpine
    (#949)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720699200">- Update to version 0.54.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.65.0
    to 0.66.0 (#966)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.4 to
    0.5.5 (#965)
  * build(deps): bump cuelang.org/go from 0.9.1 to 0.9.2 (#964)
  * build(deps): bump alpine from 3.20.0 to 3.20.1 (#963)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.4 to
    1.7.5 (#962) (fix boo#1227012 CVE-2024-6257)
  * build(deps): bump github.com/moby/buildkit from 0.14.0 to
    0.14.1 (#961)
  * build(deps): bump cuelang.org/go from 0.9.0 to 0.9.1 (#960)
  * build(deps): bump github.com/moby/buildkit from 0.13.2 to
    0.14.0 (#959)
  * build(deps): bump golang from 1.22.3-alpine to 1.22.4-alpine
    (#958)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722081600">- Update to version 0.55.0:
  * build(deps): bump github.com/moby/buildkit from 0.14.1 to
    0.15.1 (#976)
  * build(deps): bump github.com/open-policy-agent/opa from 0.66.0
    to 0.67.0 (#977)
  * fix: update regex to excape the dot in it (#975)
  * ci: Bump golang-ci action to v6 (#974)
  * build(deps): bump golang from 1.22.4-alpine to 1.22.5-alpine
    (#970)
  * ci: Pin goreleaser to v1 (#969)
  * ci: Bump Docker login to v3 (#968)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1729166400">- Update to version 0.56.0:
  * build(deps): bump golang from 1.23.1-alpine to 1.23.2-alpine
    (#1012)
  * build(deps): bump github.com/open-policy-agent/opa from 0.68.0
    to 0.69.0 (#1010)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0
    to 0.9.1 (#1005)
  * chore: Bump Go to 1.23 (#1004)
  * build(deps): bump github.com/moby/buildkit from 0.15.2 to
    0.16.0 (#1003)
  * build(deps): bump alpine from 3.20.2 to 3.20.3 (#1002)
  * build(deps): bump golang from 1.23.0-alpine to 1.23.1-alpine
    (#1001)
  * build(deps): bump cuelang.org/go from 0.9.2 to 0.10.0 (#994)
  * build(deps): bump golang from 1.22.6-alpine to 1.23.0-alpine
    (#995)
  * bump: update go to 1.22 to get on par with toolchain (#1000)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.1
    to 0.68.0 (#996)
  * build(deps): bump github.com/moby/buildkit from 0.15.1 to
    0.15.2 (#993)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to
    1.7.6 (#992)
  * build(deps): bump golang from 1.22.5-alpine to 1.22.6-alpine
    (#990)
  * fix: missing space causing printing error on azuredevops (#988)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.0
    to 0.67.1 (#980)
  * build(deps): bump alpine from 3.20.1 to 3.20.2 (#978)</changelog>
</package>
<package pkgid="80b2eafa7c6da4374726d4b3c1b3c1502d52d73194f439e4edd8def5e0a20ec66249f8bca281b24d0b28723d1463e8858d6c55fe0c3b78bd23fabf4b614b92ce" name="conftest-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.56.0" rel="bp160.1.13"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1704369600">- Update to version 0.48.0:
  * feat: Add show-builtin-errors flag for the verify command
    (#901)
  * build(deps): bump github.com/hashicorp/go-getter to v1.7.3
    (#899)
  * build(deps): bump github.com/open-policy-agent/opa from 0.59.0
    to 0.60.0 (#900)
  * misc: Clean up generics usage in parse_config builtins (#898)
  * fix: Fix regexp for Goreleaser groups (#892)
  * build(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine
    (#897)
  * build(deps): bump alpine from 3.18.4 to 3.19.0 (#896)
  * build(deps): bump cuelang.org/go from 0.6.0 to 0.7.0 (#894)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2
    to 0.8.0 (#895)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1706788800">- Update to version 0.49.0:
  * fix: Add tls flag to test command (#908)
  * build(deps): bump alpine from 3.19.0 to 3.19.1 (#910)
  * build(deps): bump github.com/open-policy-agent/opa from 0.60.0
    to 0.61.0 (#909)
  * build(deps): bump golang from 1.21.5-alpine to 1.21.6-alpine
    (#906)
  * feat: Raise error when problematic use of the if keyword is
    encountered (#902)
  * ci: s390x architecture added in the goarch list (#905)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1707393600">- Update to version 0.49.1:
  * chore: Update buildkit and allow dependabot (#911)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1710504000">- Update to version 0.50.0:
  * build(deps): bump github.com/moby/buildkit from 0.12.5 to
    0.13.0 (#926)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.0
    to 0.62.1 (#927)
  * build(deps): bump github.com/open-policy-agent/opa from 0.61.0
    to 0.62.0 (#925)
  * cmd(verify): Enable show-builtin-errors by default (#922)
  * fix: Catch Google Artifact Registry URL during OCI detection
    (#921)
  * docs: Use the right command to pull policies from OCI registry
    (#920)
  * feat: Use ORAS credentials (#917)
  * chore: Update setup-regal and golangci-lint actions to latest
    (#918)
  * build(deps): bump cuelang.org/go from 0.7.0 to 0.7.1 (#916)
  * build: Bump Go to 1.22.x (#915)
  * Update workflow action versions (#914)
  * build(deps): bump golang from 1.21.6-alpine to 1.22.0-alpine
    (#913)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1712145600">- Update to version 0.51.0:
  * fix: Only raise problematic if error when rule has no name set
    (#935)
  * build(deps): bump github.com/open-policy-agent/opa from 0.62.1
    to 0.63.0 (#933)
  * ci: Pin bats version to work around broken CI (#936)
  * build(deps): bump github.com/moby/buildkit from 0.13.0 to
    0.13.1 (#931)
  * build(deps): bump cuelang.org/go from 0.7.1 to 0.8.0 (#930)
  * build(deps): bump golang from 1.22.0-alpine to 1.22.1-alpine
    (#929)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1714478400">- Update to version 0.52.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.0
    to 0.64.1 (#947)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.3 to
    1.7.4 (#948)
  * ci: Allow Dependabot to update github.com/hashicorp/go-getter
    (#946)
  * build(deps): bump github.com/moby/buildkit from 0.13.1 to
    0.13.2 (#944)
  * build(deps): bump github.com/open-policy-agent/opa from 0.63.0
    to 0.64.0 (#943)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.3 to
    0.5.4 (#941)
  * build(deps): bump github.com/docker/docker from
    v25.0.3+incompatible to v25.0.5+incompatible (#932)
  * build(deps): bump golang from 1.22.1-alpine to 1.22.2-alpine
    (#938)
  * build(deps): bump cuelang.org/go from 0.8.0 to 0.8.1 (#937)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717761600">- Update to version 0.53.0:
  * tests: extend hcl cases: tag verification (#955)
  * build(deps): bump cuelang.org/go from 0.8.1 to 0.9.0 (#956)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.8.0
    to 0.9.0 (#954)
  * build(deps): bump github.com/open-policy-agent/opa from 0.64.1
    to 0.65.0 (#953)
  * build(deps): bump alpine from 3.19.1 to 3.20.0 (#951)
  * build(deps): bump github.com/BurntSushi/toml from 1.3.2 to
    1.4.0 (#950)
  * build(deps): bump golang from 1.22.2-alpine to 1.22.3-alpine
    (#949)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720699200">- Update to version 0.54.0:
  * build(deps): bump github.com/open-policy-agent/opa from 0.65.0
    to 0.66.0 (#966)
  * build(deps): bump github.com/spdx/tools-golang from 0.5.4 to
    0.5.5 (#965)
  * build(deps): bump cuelang.org/go from 0.9.1 to 0.9.2 (#964)
  * build(deps): bump alpine from 3.20.0 to 3.20.1 (#963)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.4 to
    1.7.5 (#962) (fix boo#1227012 CVE-2024-6257)
  * build(deps): bump github.com/moby/buildkit from 0.14.0 to
    0.14.1 (#961)
  * build(deps): bump cuelang.org/go from 0.9.0 to 0.9.1 (#960)
  * build(deps): bump github.com/moby/buildkit from 0.13.2 to
    0.14.0 (#959)
  * build(deps): bump golang from 1.22.3-alpine to 1.22.4-alpine
    (#958)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722081600">- Update to version 0.55.0:
  * build(deps): bump github.com/moby/buildkit from 0.14.1 to
    0.15.1 (#976)
  * build(deps): bump github.com/open-policy-agent/opa from 0.66.0
    to 0.67.0 (#977)
  * fix: update regex to excape the dot in it (#975)
  * ci: Bump golang-ci action to v6 (#974)
  * build(deps): bump golang from 1.22.4-alpine to 1.22.5-alpine
    (#970)
  * ci: Pin goreleaser to v1 (#969)
  * ci: Bump Docker login to v3 (#968)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1729166400">- Update to version 0.56.0:
  * build(deps): bump golang from 1.23.1-alpine to 1.23.2-alpine
    (#1012)
  * build(deps): bump github.com/open-policy-agent/opa from 0.68.0
    to 0.69.0 (#1010)
  * build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.0
    to 0.9.1 (#1005)
  * chore: Bump Go to 1.23 (#1004)
  * build(deps): bump github.com/moby/buildkit from 0.15.2 to
    0.16.0 (#1003)
  * build(deps): bump alpine from 3.20.2 to 3.20.3 (#1002)
  * build(deps): bump golang from 1.23.0-alpine to 1.23.1-alpine
    (#1001)
  * build(deps): bump cuelang.org/go from 0.9.2 to 0.10.0 (#994)
  * build(deps): bump golang from 1.22.6-alpine to 1.23.0-alpine
    (#995)
  * bump: update go to 1.22 to get on par with toolchain (#1000)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.1
    to 0.68.0 (#996)
  * build(deps): bump github.com/moby/buildkit from 0.15.1 to
    0.15.2 (#993)
  * build(deps): bump github.com/hashicorp/go-getter from 1.7.5 to
    1.7.6 (#992)
  * build(deps): bump golang from 1.22.5-alpine to 1.22.6-alpine
    (#990)
  * fix: missing space causing printing error on azuredevops (#988)
  * build(deps): bump github.com/open-policy-agent/opa from 0.67.0
    to 0.67.1 (#980)
  * build(deps): bump alpine from 3.20.1 to 3.20.2 (#978)</changelog>
</package>
<package pkgid="c4715718a128b1e1956057e250b9301fa8ce1c6c9387d6ebf40a5373f33e8a1f4d1e280ebaf980a43d5f5e296f0ef2e7cdacad46c15a38a2c5ebba2b39b74165" name="conky" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp160.1.3"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1585915200">- Fix negative ram reporting #877 #878 #909 fix-negative-memory.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.com&gt;" date="1586865600">- Don't require nano with the nano completions, conky shouldn't
  pull in nano just for completions.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1595937600">- Update to 1.11.6:
  * Fix negative RAM usage (#878)
  * Add nvidia driverversion variable (#889)
  * properly format PIDs longer than 5 digits
  * linux: update statistics based on newer kernel interface (#859)
  * Fix segfault on pulseaudio tunnel sinks
  * Added lower_case and upper_case commands
- Remove fix-negative-memory.patch: upstreamed</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614859200">- Updated to version 1.12.1:
  * Fix an issue in the AppImage build. There are no other changes
    from v1.12.0, and so v1.12.0 and v1.12.1 are otherwise
    equivalent.
- Changes from version 1.12.0:
  * No changelog foumd(?), for full details see:
    https://github.com/brndnmtthws/conky/compare/v1.12.0...v1.12.1
- Rebase conky.timestamp.patch and drop Conky.cmake part as this is
  upstreamed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1619438400">- Update to 1.12.2:
  * Add support for Intel backlight
  * Fix non-IPV6 build (#1033)
  * Code cleanup</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1663761600">- Update to 1.13.0:
  * Add units_spacer #1094
  * Fixes #1068: Added custom uninstall target
  * fix typo in in lua_parse description #1121
  * Fix SEGFAULT caused by out-of-bounds write #1124
  * Document unimplemented weather features #1170
  * make gw_iface work with net stat #1104
  * Include hsv_gradient.h even if BUILTIN_CONFIG is disabled #1141
  * Correct dependencies on generated header files #1207
  * GUI backends phase 1 #664
  * Http port config #1205
  * Add syntax keyword for http_port config setting #1209
  * fix #1165 by applying the padding function to nvidia objects #1166</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1663761601">- Update to 1.13.1:
  * Add units_spacer #1094
  * Fixes #1068 : Added custom uninstall target #1103
  * fix typo in in lua_parse description #1121
  * Fix SEGFAULT caused by out-of-bounds write #1124
  * Document unimplemented weather features #1170
  * make gw_iface work with net stat #1104
  * Include hsv_gradient.h even if BUILTIN_CONFIG is disabled #1141
  * Correct dependencies on generated header files #1207
  * GUI backends phase 1 #664
  * Http port config #1205
  * Add syntax keyword for http_port config setting #1209
  * fix #1165 by applying the padding function to nvidia objects #1166</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Adjust package name of libXNVCtrl
- Enable conditionals libXNVCtrl and cmus, they are available in Factory</changelog>
  <changelog author="olaf@aepfle.de" date="1679400000">- Remove support for xmms2, which was dropped long ago
- Add constraints for librsvg-2.0</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1697112000">- Add reproducible.patch for deterministic output of toluapp (boo#1047218)</changelog>
</package>
<package pkgid="b98ae42bdec6f776286532f9f0d202dc30b6db922f67b023850b04e8c17674cfc5e95bc2ada3b84db66e55a62c35bf4f579d1f36713ca876cc0187f63a53a449" name="conky-doc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp160.1.3"/>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1585915200">- Fix negative ram reporting #877 #878 #909 fix-negative-memory.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.com&gt;" date="1586865600">- Don't require nano with the nano completions, conky shouldn't
  pull in nano just for completions.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1595937600">- Update to 1.11.6:
  * Fix negative RAM usage (#878)
  * Add nvidia driverversion variable (#889)
  * properly format PIDs longer than 5 digits
  * linux: update statistics based on newer kernel interface (#859)
  * Fix segfault on pulseaudio tunnel sinks
  * Added lower_case and upper_case commands
- Remove fix-negative-memory.patch: upstreamed</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1614859200">- Updated to version 1.12.1:
  * Fix an issue in the AppImage build. There are no other changes
    from v1.12.0, and so v1.12.0 and v1.12.1 are otherwise
    equivalent.
- Changes from version 1.12.0:
  * No changelog foumd(?), for full details see:
    https://github.com/brndnmtthws/conky/compare/v1.12.0...v1.12.1
- Rebase conky.timestamp.patch and drop Conky.cmake part as this is
  upstreamed.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1619438400">- Update to 1.12.2:
  * Add support for Intel backlight
  * Fix non-IPV6 build (#1033)
  * Code cleanup</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1663761600">- Update to 1.13.0:
  * Add units_spacer #1094
  * Fixes #1068: Added custom uninstall target
  * fix typo in in lua_parse description #1121
  * Fix SEGFAULT caused by out-of-bounds write #1124
  * Document unimplemented weather features #1170
  * make gw_iface work with net stat #1104
  * Include hsv_gradient.h even if BUILTIN_CONFIG is disabled #1141
  * Correct dependencies on generated header files #1207
  * GUI backends phase 1 #664
  * Http port config #1205
  * Add syntax keyword for http_port config setting #1209
  * fix #1165 by applying the padding function to nvidia objects #1166</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1663761601">- Update to 1.13.1:
  * Add units_spacer #1094
  * Fixes #1068 : Added custom uninstall target #1103
  * fix typo in in lua_parse description #1121
  * Fix SEGFAULT caused by out-of-bounds write #1124
  * Document unimplemented weather features #1170
  * make gw_iface work with net stat #1104
  * Include hsv_gradient.h even if BUILTIN_CONFIG is disabled #1141
  * Correct dependencies on generated header files #1207
  * GUI backends phase 1 #664
  * Http port config #1205
  * Add syntax keyword for http_port config setting #1209
  * fix #1165 by applying the padding function to nvidia objects #1166</changelog>
  <changelog author="olaf@aepfle.de" date="1677844800">- Adjust package name of libXNVCtrl
- Enable conditionals libXNVCtrl and cmus, they are available in Factory</changelog>
  <changelog author="olaf@aepfle.de" date="1679400000">- Remove support for xmms2, which was dropped long ago
- Add constraints for librsvg-2.0</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1697112000">- Add reproducible.patch for deterministic output of toluapp (boo#1047218)</changelog>
</package>
<package pkgid="3c208daa4d2e7684962d8a1f815e4b5f98b23f51307db52c44ff238a61c9e8fd3baf9b5b239374db932af2d975466375f3db5cc81a298e4ac9d3b6b800266a2d" name="conman" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="bp160.1.13"/>
  <changelog author="eich@suse.com" date="1531915200">- If-connect-fails-let-other-side-accept-connection-and-come-back.patch:
  Make sure conmand connects to a newly created UNIX socket with
  minimal delay. The implementation uses inotify, however this triggers
  when the other side bind()s to the socket, however a connection is
  not possible until the other side calls listen().
  Thus if the connection fails, reset the poll() timeout to return to
  connect() as soon as possible (bsc#1101647).
- Support %license in a backward compatible way.</changelog>
  <changelog author="eich@suse.com" date="1535025600">- Replace
  If-connect-fails-let-other-side-accept-connection-and-come-back.patch
  by:
  Reset-delay-for-unixsock-connect-from-inotify.patch:
  Upstream chose to fix bsc#1101647 slightly differently.</changelog>
  <changelog author="eich@suse.com" date="1535025601">- Update to version 0.2.9:
  - Allowed IPMI defaults to be overridden via libipmiconsole.conf. (#27)
  - Updated recognized strings for IPMI workaround-flags (FATE#326641).</changelog>
  <changelog author="eich@suse.com" date="1537617600">- Add Requires(post): %fillup_prereq sed.</changelog>
  <changelog author="eich@suse.com" date="1537876800">- Update to conman-0.3.0 (2018-09-15): (jsc#SLE-8514)
  * Fixed slow connects to Unix socket consoles triggered from
    inotify. (#28,#29).
  * Obsoletes: Reset-delay-for-unixsock-connect-from-inotify.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1633003200">- Utilize sysuser infrastructure to set user/group conman.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1634299200">- Typo fix to sysuser file.</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1670846400">- update to version 0.3.1:
  * Fixed username/password use in libipmiconsole.conf. (e59f5e4)
  * Added more console logfile conversion specifiers. (96ede96, 5a189f6)
  * Added conmen '-T' cmdline opt to specify terminal emulator. (a11c6f4)
  * Added rpm source file verification. (f86c123)
  * Revamped autotools config. (547db3c)
  * Added configure opts for systemd/sysvinit. (3e303e6)
  * Added configure runstatedir support. (bb415e0)
  * Fixed installation directory variable substitution. (7642609)
  * Removed autotools-generated files from version control. (44168a4)
  * general move of files from /usr/lib/conman to /usr/share/conman</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="c5c0ded81e04454bc1d52016c8fbb3d31cd5f7c43254284e04db551decdbd4c299043e1953b1d924528596a38346d239f7eef09b5de2117a8a133c4e33b162f8" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.13" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
  <changelog author="dcermak@suse.com" date="1714478400">- New upstream release 2.1.11
  * docs/Makefile: softcode GOMD2MAN by @rahilarious
  * chore(deps): update dependency containers/automation_images to v20231208 by @renovate
  * drop --tty on exec by @haircommander
  * update packit config, enable downstream tasks by @lsm5
  * Remove checks for (long)deprecated libsystemd-journal for libsystemd by @rahilarious
  * Add support for s390x by @saschagrunert
  * Build s390x binaries using musl libc by @saschagrunert</changelog>
  <changelog author="dcermak@suse.com" date="1715947200">- New upstream release 2.1.12
  * Packit: enable downstream sync to CentOS Stream 10
  * Make 'docs' target not depend on 'install.tools' if GOMD2MAN is set</changelog>
  <changelog author="dcermak@suse.com" date="1740571200">- New upstream release 2.1.13
  [#]## Bug fixes
  * Make timestamp generation never fail.
  * Change permissions of logs from 0600 to 0640
  * Avoid bogus journal filling errors
  * Fix typos and clarify man page.
  * conmon: do not create oom file under cwd
  * logging: remove unuseful fsync</changelog>
</package>
<package pkgid="f7c81742c80961298b6c21b0bd9fa20cfff6f3d985aa1988a39df5c817feca664560767ce2d6c62cbc58146d4413c903e127c3b700912a76fea0695720f90c6d" name="connman" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="7744965f63f0dd56b691d48b76ee98adf613f6e7aff59daf7d5eb792ec6ef36e308b33a155c7890cb5f89ef1d269d330909abfd6fb5924a8b0afaff285669353" name="connman-client" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="d8bc5e5ed90899cdbab18d13362d7330a01f617467050b7432a2744e3459d3e87c99eb8d77d761a5bf18ae1887e9a220b9501537279b4f442ee5cac58ddd3d47" name="connman-devel" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="7fd52cb253efd1c2f3d135e13f9e41549fde32c7049166cb14e1845ef5eb57a7cdb408b5042297c7c486444e147dd5e68681ebc05064c71136a610ca061acebe" name="connman-doc" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="5d55481368e87163490a9082dfde5ad45556ebc7ca9edf8437a762d4bce636bc035773385b2b0becb49ee48762fd674efce84bef885ee6dcc4753d9044347503" name="connman-nmcompat" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="e0dab2deec0a44c9d53ee0a83f34f41f6daebf658e58a88345501179629e618c1d74cba9ad5e4a8bb638c7dbd97b4a730e61cfc6d07d1077d8f434b4c958a14b" name="connman-plugin-hh2serial-gps" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="5b3bf18593dbb53b1f0561a92920478245439b7abbb041825c4b1998a01dae80811cf38fcca6463d61dcb9f1b7cb5da109d2e43a716092e64c6ad70fa8347a62" name="connman-plugin-iospm" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="d6f33f92a6c8590d8b9d337c6164c6559016076702c94cbc9f1bab02e54a19a5ee03af2c2a0c01bede42e28da180b3bd8577e9ae52aa0164a4ee52c35cd9c3a6" name="connman-plugin-l2tp" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="da036f1cdeaaecd2bd074754191c51d11030c366acddf2039d8544b1b4fe06b08cce63a705c38c7b24b3d4b4c523a2303d65913db884559bdfb6688dcc4d15ff" name="connman-plugin-openconnect" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="200b6ca3ea9c6ad6423cd4e2377b15781a6279b30757e33196e3e6b67d7bdd3b82e6b573341fbf2259971f35d8e20f9539b734b09dbb2a0cf4f109292ed15394" name="connman-plugin-openvpn" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="d9af8b6d1fb49586935495aa1b8bf4bee7594fd346a4fa33994c1de4cd4812c57baba116f2ea92b05365cd827625b8cddee45cf332d765ecb8d79c709afdc691" name="connman-plugin-polkit" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="e1763455bc3df7332700eb09ec047e40f4bb7025f0c92123bbe4fd1d3e3676b824cb577d9e5bc85ccf4357da96aeec09514ccfaecdd38d310e9ce3c3d42881c8" name="connman-plugin-pptp" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="dda3342025be6786361807d34b110d72243714a41c8af2512f581d2a83b30cd95edace0c45a1a27a7b6d70f8d2d792562d2aa563825dcf2ef2ec159c6955c031" name="connman-plugin-tist" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="efb309de989fc9c35a71b6f6067cf1be63c5b7f1407cbc870ae531a91c72ac772eec1a2dd0390a370fb42604b3befc67eccc638f2ee90a020f5a0dd6c3ea6ef2" name="connman-plugin-vpnc" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="4ffb5ffa1a1283ae35f29cfd421313dfafa42f189a49e6c4ec769a40ffc6513b2ad11fa0ecb281c7fdebbd9cd5fe4da5903cc6872bcb7f171c3323c18a3945ff" name="connman-plugin-wireguard" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="36b92192be28e34f84f2a48fa55e74e9a5691c59b57a4ae454089327150d9ce9a9ef2a52d5584f96ecfa4efd60b3f436ae264c770eb9b2c116451b0603001948" name="connman-test" arch="x86_64">
  <version epoch="0" ver="1.42" rel="bp160.1.40"/>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1629720000">- Update to 1.40:
  * Fix issue with handling WiFi disconnecting status.
  * Fix issue with handling WiFi auto-connect and iwd backend.
  * Drop 0002-dnsproxy-Check-the-length-of-buffers-before-memcpy.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_connman-vpn.service.patch
  * harden_connman-wait-online.service.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1637928000">- connman-nmcompat manages D-Bus permissions for NetworkManager service.
  However, these rules are different than the ones NetworkManager setup.
  Allow the installation of only either of them. Fixes bsc#1192827</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1643716800">- Update to 1.41: (bsc#1194177, bsc#1194176, bsc#1194175)
  * Fix issue with RTNL netlink message alignment.
  * Fix issue with dnsproxy and timeout for TCP feature. (CVE-2022-23097, CVE-2022-23096)
  * Fix issue with dnsproxy and busy loop in TCP server. (CVE-2022-23098)
  * Fix issue with WiFi connection with no passphrase.
  * Add support for wpa_supplicant and WPA3-SAE functionality.
  * Add support for D-Bus ObjectManager interface.
- Renamed downstream patches to separate them from upstream patches
  * Rename 0001-connman-1.35-service.patch to 0100-connman-1.35-service.patch
  * Rename harden_connman-vpn.service.patch to 0101-harden_connman-vpn.service.patch
  * Rename harden_connman-wait-online.service.patch to 0102-harden_connman-wait-online.service.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652356800">- Explicitly BuildRequire openconnect: configure is looking for the
  binaries, not only the devel parts. The devel package though does
  not pull in the daemon (which is not used in most cases to
  develop).</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1657800000">- Switch from iptables to nftables.</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1659355200">- Add refcounting to wispr portal detection (bsc#1200190)
  * add 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * add 0002-wispr-Ignore-NULL-proxy.patch
  * add 0003-wispr-Add-reference-counter-to-portal-context.patch (CVE-2022-32293)
  * add 0004-wispr-Update-portal-context-references.patch (CVE-2022-32293)
- Fix OOB write in received_data (bsc#1200189)
  * add 0005-gweb-Fix-OOB-write-in-received_data.patch (CVE-2022-32292)</changelog>
  <changelog author="Daniel Wagner &lt;daniel.wagner@suse.com&gt;" date="1699876800">- Update to 1.42
  * Fix issue with iwd and signal strength calculation.
  * Fix issue with iwd and handling service removal.
  * Fix issue with iwd and handling new connections.
  * Fix issue with handling default online check URL.
  * Fix issue with handling nameservers refresh.
  * Fix issue with handling proxy from DHCP lease. (bsc#1210395 CVE-2023-28488)
  * Fix issue with handling multiple proxies from PAC.
  * Fix issue with handling manual time update changes.
  * Fix issue with handling invalid gateway routes.
  * Fix issue with handling hidden WiFi agent requests.
  * Fix issue with handling WiFi SAE authentication failure.
  * Fix issue with handling DNS Proxy and TCP server replies.
  * Add support for regulatory domain following timezone.
  * Add support for localtime configuration option.
  * add 0001-scripts-add-missing-header-file.patch
- remove patches
  * remove 0001-wispr-Rename-wispr_portal_list-to-wispr_portal_hash.patch
  * remove 0002-wispr-Ignore-NULL-proxy.patch
  * remove 0003-wispr-Add-reference-counter-to-portal-context.patch
  * remove 0004-wispr-Update-portal-context-references.patch
  * remove 0005-gweb-Fix-OOB-write-in-received_data.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707393600">- Change all hashbangs of test scripts from /usr/bin/python to
  /usr/bin/python3: the code is py3 ready (boo#1219309, commit
  55965561).</changelog>
</package>
<package pkgid="775f534006b0b8482c0fd8bc898e637a26722222a1800371c4ad74323f29790b5a320777fce19e807372c39ccdebc2696890422eee858a3cc67e1a348f06b333" name="conntrack-tools" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="c00228f2ff17dc57626d60d36414cbe048b712943db88f75a8d08c15d995530e0d0083a7859f855b3a690b586271f8180fc06f931678a21ef88764690203d905" name="conntrackd" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.4.6
  * conntrackd: fix UDP IPv6 destination address not being usable
  * conntrack: Allow protocol number zero
  * conntrackd: cthelper: Add new SLP helper
- Drop conntrackd-Use-strdup-in-lexer.patch,
  conntrackd-use-strncpy-to-unix-path.patch,
  conntrackd-cthelper-Add-new-SLP-helper.patch,
  conntrackd-use-correct-max-unix-path-length.patch (merged)
- Drop require on systemd, since it can run in a namespace without.</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Modified:
  * conntrackd.service</changelog>
  <changelog author="jengelh@inai.de" date="1665057600">- Update to release 1.4.7
  * Changes to the "conntrack" program:
  * "clash_resolve" and "chaintoolong" stats counters
  * Defaults to the `unspec` family if the `-f` flag is absent,
    so as to improve support for dual-stack setups.
  * Support filtering events by IP address family.
  * Support flushing per IP address family.
  * Added the `save` output format representing data in conntrack
    parameters, and support for loading such files back.
  * Remove the `-o userspace` flag and always tag user space
    triggered events.
  * Introduce the `-A` flags, a variant of `-I` which does not
    fail if the entry exists already.</changelog>
  <changelog author="jengelh@inai.de" date="1695988800">- Update to release 1.4.8
  * Fix spurious EOPNOSUPP and ENOBUFS errors with -U/--update
    command.
  * Fix spurious ENOENT -D/--delete.</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Remove rc* symlinks</changelog>
</package>
<package pkgid="2b9798cdb3916ead3b96e87331621543d6bb7fa05d860ee25e439a743c66a0f3b4cbfbed475f769e9e2016c6ec5cce73146cf436151ab335d572c3df354f6603" name="console-setup" arch="noarch">
  <version epoch="0" ver="1.223" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 1.134</changelog>
  <changelog author="sndirsch@suse.com" date="1453982400">- removed unneeded requires to kbd in order to resolve build cycle
  kbd &lt;-&gt; console-setup (bnc#963942)</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add console-setup-1.134-perl526.patch to work with perl 5.26,
  fixed upstream in 1.143</changelog>
  <changelog author="bwiedemann@suse.com" date="1515153600">- Add console-setup-1.134-reproducible.patch to make package build
  reproducible (boo#1062303)</changelog>
  <changelog author="sndirsch@suse.com" date="1548331200">- u_fix-iso-left-tab.patch
  * fix Shift-Tab mapping (bsc#1122361)</changelog>
  <changelog author="fvogt@suse.com" date="1670846400">- Add patch to fix Caps_Lock mapping for us.map and others (bsc#1202853):
  * 0001-ckbcomp-Fix-check-for-non-ascii.patch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672401600">- Update to version 1.215:
  * See https://salsa.debian.org/installer-team/console-setup/-/blob/debian/1.215/debian/changelog
- Make a bdf2psf package like in Fedora.
- Suggest xkeyboard-config.
- Replace console-setup-1.76-paths.patch with
  console-setup-paths.patch.
- Move the fonts to /usr/share/kbd/ to be discoverable by vconsole.
- Drop console-setup-1.134-perl526.patch,
  console-setup-1.134-reproducible.patch, u_fix-iso-left-tab.patch,
  0001-ckbcomp-Fix-check-for-non-ascii.patch: fixed upstream.
- Fix the RPM Group.</changelog>
  <changelog author="sndirsch@suse.com" date="1672574400">- removed buildrequires to kbd to resolve kbd/console-setup build
  cycle</changelog>
  <changelog author="fcrozat@suse.com" date="1684238400">- Update to version 1.220:
  * updated translations</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1696161600">- Update to version 1.223:
  * Updated translations</changelog>
</package>
<package pkgid="474ef750cdcc049f44b8eab239cf00d078fddc67a9c4340299c7d4d61f9e2135bb089e3ea6fcf42f7f80169ce8ba0de5abd5a5181729bda67a75d9cc515f1966" name="consoleet-fixedsys-fonts" arch="noarch">
  <version epoch="0" ver="3.02.9.1" rel="bp160.1.9"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1662206400">- Initial package for build.opensuse.org (version 3.02.9)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1693828800">- Update to release 3.02.9.1
  * Added "Fixedsys 1S" and "Fixedsys 1T" fonts.</changelog>
</package>
<package pkgid="47d3e634941dcbbb8082508be1c1241e88249f322d269c3607313fa00a757f9783e0e03d0a47abb6b1e90a2dae2cc3f8fb4d2fc337da9b06c3c3f2e2a125f337" name="consoleet-kbd-fonts" arch="noarch">
  <version epoch="0" ver="1.3" rel="bp160.1.9"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1633694400">- Initial package for build.opensuse.org (version 1.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685102400">- Update to release 1.1
  * Add consoleet_ami and consoleet_lat1 (the latter
    with curious 'S' and '/' forms)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685707200">- Update to release 1.2
  * consoleet_ami was separated again since no longer built
    from kbd</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1691582400">- Update to relase 1.3
  * Fonts are provided with 8x16 and 9x16 cell-sizes now.
    As a result, the names have changed.</changelog>
</package>
<package pkgid="da8350b14be44e92920a04202f6539d837731aa4f456774f8a1dd3454d6fcb5ddbf52fd333ff296e869b015870040254002aa1c0cff8cde780d5cc716c09f9be" name="consoleet-oldschoolpc-fonts" arch="noarch">
  <version epoch="0" ver="2.2.1" rel="bp160.1.9"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Initial package for build.opensuse.org (version 2.2)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1692100800">- Update to release 2.2.1
  * OTF versions of int10h base fonts (better antialias in Freetype)
  * Renamed smooth variants to have a "Smooth" suffix in the name</changelog>
</package>
<package pkgid="40abc72f473a1b243cd9d53a4c12ff9a2d78f4d7b6050a2fd8dd610f5b28422e30704df892cc4a522234d2b5040a25f76d0868c6d3de03fa6cd63d6c77e8dacf" name="consoleet-utils" arch="x86_64">
  <version epoch="0" ver="1.7" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1669032000">- Initial package (version 1.1) for build.opensuse.org
- It's a split from hxtools (20221119/20221120)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1669896000">- Add libhx.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1690113600">- Update to release 1.2
  * palcomp: support for tint via new "hsltint", "lchtint" or
    "hueset" subcommands (this allows for generating Amber/Green
    CRT looks and then some)
  * palcomp: brightness manipulatino support with "litadd",
    "litmul", "litset"
  * palcomp: auxiliary helper commands: "b0", "fg", "bg", "stat"
  * palcomp: new starting palette "win"
- Drop libhx.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1692014400">- Update to release 1.3
  * palcomp: delete ``rgb`` and ``lch`` subcommands (make them implicit)
  * palcomp: add ``ct`` and ``ct256`` subcommands to display the color table
  * palcomp: add ``cxl`` and ``cxr`` subcommands for contrast analysis
  * palcomp: add ``loeq`` subcommand for contrast adjustment</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1695556800">- Update to release 1.4
  * vfontas: add an -overstrike option
  * palcomp: have the "ct" command exercise AIX color codes too
  * palcomp: compute "cxl" and "cxr" tables for bright background
    colors as well</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697889600">- Unbreak Leap 15.x build</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716033600">- Update to release 1.5
  * palcomp: add XFCE4/Termux palette file loader
    (`palcomp loadpal=somexfce4.theme`)
  * palcomp: rename commands "emit"-&gt;"xfce", "stat"-&gt;"lch"
  * palcomp: add "eq" and "loeq" commands for brightness
    equalization
  * palcomp: replace "cxr" command by a APCA-based contrast
    derivation ("cxa" command)
  * cp437x: delete wrong mapping from U+25B6,25B7 to 0x1e</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1719489600">- Update to release 1.6
  * Recognize more of the files from the termux-styling repository</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1727784000">- Update to release 1.7
  * palcomp: add "blend", "loadreg", "savereg" commands</changelog>
</package>
<package pkgid="5e0318462c26704afaa672ec7a569bb5628a2ee111d59f69f76c68200b5d5617b01756a1df691ef5e11936d6eaf9cb6dc36aa25f5546df48d6036abd6ea0439d" name="consoleet-xorg-fonts" arch="noarch">
  <version epoch="0" ver="7.6.1" rel="bp160.1.9"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657195200">- Initial package for build.opensuse.org (version 7.6)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1693828800">- Update to release 7.6.1
  * Added a remake of Sony Fixed, with new bold variants</changelog>
</package>
<package pkgid="9802a27e381bf45098c0869df8a5bde269ce38b197041ecab988b2ef4c979f75e1363081694b25a3e69c1ed6f034d571a73a2acda883f2a035b71027911dbc71" name="container-build-checks" arch="noarch">
  <version epoch="0" ver="1723452932.412e7f6" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1639483200">- Update to version 1639489705.a4c5a3ab2a75:
  * Don't error out when the release field is empty
  * Add simple gitpod configuration</changelog>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
</package>
<package pkgid="514c55dc2ecf95bdb3746f2c37bbd83fe6cc71aee874e359e139c82e8824344945ea68c6b7eeb108fb84242c8139e08b2ba966aa2d39c31eced9d584cd154d24" name="container-build-checks" arch="noarch">
  <version epoch="0" ver="1779450556.9feaecd" rel="160000.1.1"/>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
  <changelog author="fvogt@suse.com" date="1779451200">- Update to version 1779450556.9feaecd:
  * Mention oci-archive support in README.md
  * Support nested indexes and multiple manifests in OCI archives
  * GitHub workflow: Run in Leap 15.6, BCI 16.0 and TW container images</changelog>
</package>
<package pkgid="47e0e50f45cbbd96e5bd00763d17ed28fe8ff7d8bc324573dfff9db5c9c096d3504083a56733e1b0e514a796f99f4831634945d27bde1538376deb689a4c6312" name="container-build-checks-strict" arch="noarch">
  <version epoch="0" ver="1723452932.412e7f6" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1639483200">- Update to version 1639489705.a4c5a3ab2a75:
  * Don't error out when the release field is empty
  * Add simple gitpod configuration</changelog>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
</package>
<package pkgid="41d740bd075efd670d736a349b73e0e912bdf24d6d962d1776b42f3735cf73736e6294cc7db1c98299eddedd5b8b7d91a54cb09e82316acc78a2d75b882d2066" name="container-build-checks-strict" arch="noarch">
  <version epoch="0" ver="1779450556.9feaecd" rel="160000.1.1"/>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
  <changelog author="fvogt@suse.com" date="1779451200">- Update to version 1779450556.9feaecd:
  * Mention oci-archive support in README.md
  * Support nested indexes and multiple manifests in OCI archives
  * GitHub workflow: Run in Leap 15.6, BCI 16.0 and TW container images</changelog>
</package>
<package pkgid="77bedb38ee0f4a94f45e235ae8c9834512cd64f4b2ef3d4d50cbaa1510508cfb2c21491bbd3c53db5eaebcb8b81a5a80b6bfcc7c92f6dbf74f088c8020682fe2" name="container-build-checks-vendor-SUSE" arch="noarch">
  <version epoch="0" ver="1723452932.412e7f6" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1639483200">- Update to version 1639489705.a4c5a3ab2a75:
  * Don't error out when the release field is empty
  * Add simple gitpod configuration</changelog>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
</package>
<package pkgid="e06f9794259103002c0a671203af4605dda546da1cfc788068379acf7893942c1cf90f2b8b23ada49ab1c27bbbb9094d98bcc6c584f8675800942e6cf283355d" name="container-build-checks-vendor-SUSE" arch="noarch">
  <version epoch="0" ver="1779450556.9feaecd" rel="160000.1.1"/>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
  <changelog author="fvogt@suse.com" date="1779451200">- Update to version 1779450556.9feaecd:
  * Mention oci-archive support in README.md
  * Support nested indexes and multiple manifests in OCI archives
  * GitHub workflow: Run in Leap 15.6, BCI 16.0 and TW container images</changelog>
</package>
<package pkgid="b88adf79bfcb3a4f44a9de2168e02d25e21513aa2b7fb1834945748e0d7c6c17378d91af1f2152f9d37f3c2cd56c0ec1496432909fec73b4199bd00c820abb0b" name="container-build-checks-vendor-openSUSE" arch="noarch">
  <version epoch="0" ver="1723452932.412e7f6" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1639483200">- Update to version 1639489705.a4c5a3ab2a75:
  * Don't error out when the release field is empty
  * Add simple gitpod configuration</changelog>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
</package>
<package pkgid="9b998d37042420960703cca5d721b8812c70bb2ea269560d21093e43a97a21544f85ca1fc4ca94d24962eb7cf963416da6a709af2e169c4e966355546721f693" name="container-build-checks-vendor-openSUSE" arch="noarch">
  <version epoch="0" ver="1779450556.9feaecd" rel="160000.1.1"/>
  <changelog author="fvogt@suse.com" date="1643889600">- Update to version 1643874076.3d0e13c:
  * Avoid crash on local builds</changelog>
  <changelog author="moio@suse.com" date="1646654400">- Adding Uyuni prefix for https://www.uyuni-project.org/</changelog>
  <changelog author="fvogt@suse.com" date="1650456000">- Update to version 1650464301.a198cf9:
  * Detect and treat local builds specially</changelog>
  <changelog author="fvogt@suse.com" date="1657195200">- openSUSE.conf: Allow bci/* as prefix</changelog>
  <changelog author="fvogt@suse.com" date="1659960000">- Make the URL point to GitHub</changelog>
  <changelog author="fvogt@suse.com" date="1682683200">- Update to version 1682595397.5ce6d2f:
  * Handle OCI style images as well
  * Makefile: Add missing dependency of broken-derived on proper-base
  * GitHub workflow: Update action versions
  * GitHub workflow: Test python 3.6 and 3.10</changelog>
  <changelog author="fvogt@suse.com" date="1721649600">- Switch _service to mode="manual"
- Update to version 1721653643.19092fe:
  * Use generic name for the python setup step
  * Allow specifying more than one registry
  * Use Pathlib for resolving containerinfo
  * Switch to test Python 3.11</changelog>
  <changelog author="dmueller@suse.com" date="1721649601">- update SUSE.conf: allow dp.rancher.apps.io</changelog>
  <changelog author="fvogt@suse.com" date="1723464000">- Update to version 1723452932.412e7f6:
  * add test for missing substitutions
  * Reject labels that are missing a substitution</changelog>
  <changelog author="fvogt@suse.com" date="1779451200">- Update to version 1779450556.9feaecd:
  * Mention oci-archive support in README.md
  * Support nested indexes and multiple manifests in OCI archives
  * GitHub workflow: Run in Leap 15.6, BCI 16.0 and TW container images</changelog>
</package>
<package pkgid="33c3878db69981ac2fdf31fe184b7b9441bfcc5783ed84c5cc623026bb55b52dc846328a1c090e082317cff391f1f4d42b22860b22963c982dacd8432b478c0c" name="container-selinux" arch="noarch">
  <version epoch="0" ver="2.239.0" rel="160000.2.2"/>
  <changelog author="cathy.hu@suse.com" date="1730980800">- Update to version 2.233.0:
  * container_engine_t: small change to allow non root exec in a container
  * RPM: explicitly list ghosted paths and skip mode verification
  * container-selinux install on non selinux-policy-targeted systems (#332)
  * set container_log_t type for /var/log/kube-apiserver
  * Allow kubelet_t to create a sock file kubelet_var_lib_t
  * dontaudit spc_t to mmap_zero
  * Packit: update targets (#330)
  * container_engine_t: another round of small improvements (#327)
  * Allow container_device_plugin_t to use the network (#325)
  * RPM: cleanup changelog (#324)
  * TMT: Simplify tests</changelog>
  <changelog author="cathy.hu@suse.com" date="1736424000">- Add BuildRequires selinux-policy-%{selinuxtype} to enable building
  for SLFO. Might be removed in the future again when 1231252
  is fixed.</changelog>
  <changelog author="rfrohl@suse.com" date="1736510400">- Update to version 2.234.2:
  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- OBS service file: use the tagged commit for archive versioning and don't
  just archive the latest changes from the main branch using the latest tag</changelog>
  <changelog author="cathy.hu@suse.com" date="1741176000">- Update to version 2.235.0:
  * Bump to v2.235.0
  * OWNERS: add wrabcak and zpytela
  * OWNERS: initial commit
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio</changelog>
  <changelog author="jsegitz@suse.com" date="1743422400">- Update to version 2.236.0:
  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store</changelog>
  <changelog author="jsegitz@suse.com" date="1745928000">- Update to version 2.237.0:
  * bootc/install_t: allow transition to container_runtime_t
  * Allow containers to mask parts of their /proc</changelog>
  <changelog author="jsegitz@suse.com" date="1748865600">- Update to version 2.238.0:
  * label /run/sysctl.d correctly on creation</changelog>
  <changelog author="jsegitz@suse.com" date="1751889600">- Update to version 2.239.0:
  * Allow containers to use hsa devices for ROCM</changelog>
  <changelog author="rfrohl@suse.com" date="1753358400">- Add workaround for rootless docker iptables AVCs (bsc#1246348)
  adding rootless-docker_iptables.patch</changelog>
</package>
<package pkgid="db61771b8864c61fb0845cb536b109150e0d9afd2f4d527c1d439578c5536ea644a3e1e6525451b837ff4a21e177524f1efe90e2a8e1dcc85d7dbe2310adae34" name="container-suseconnect" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="160000.2.2"/>
  <changelog author="dmueller@suse.com" date="1616846400">- strip binaries (removes 4MB/25% of the uncompressed size) (bsc#1186827)</changelog>
  <changelog author="dmueller@suse.com" date="1670328000">- update to 2.4.0 (jsc#PED-1710):
  * Fix docker build example for non-SLE hosts
  * Minor fixes to --help and README
  * Improve documentation when building with podman on non-SLE host
  * Add flag --log-credentials-errors
  * Add GitHub actions
  * Remove vendor/ dir
  * Cleanup tests
  * Update capture to the 1.0.0 release
  * Bump cli to 2.34.4
  * Update cli to 2.23.5
  * Add dependabot
  * Use URL.Redacted() to avoid security scanner warning
  * Regcode fix</changelog>
  <changelog author="dmueller@suse.com" date="1696507200">- spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1709121600">- update to 2.5.0:
  * Upgrade to go 1.21
  * Allow setting of SCC credentials via environment variables
  * Bump github.com/urfave/cli/v2 from 2.25.7 to 2.27.1
  * Use switch instead of else if construction
  * Add system token header to query SCC subscriptions
    (bsc#1219855)
- run tests</changelog>
  <changelog author="dmueller@suse.com" date="1709640000">- remove unnecessary packaging buildrequires</changelog>
  <changelog author="dmueller@suse.com" date="1745409600">- update to 2.5.1:
  * Bump github.com/mssola/capture from 1.0.0 to 1.1.0
  * Log everything to stderr
  * Code formatting
  * Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Also allow optionally to pass down the system_token
  * Various golangci-lint v2.1x warnings fixed
  * Remove use of urfave/cli and replace it with flag</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1747742400">- Update to version 2.5.2:
  * Prepare for new release
  * Fix default behavior
  * Use comma-separated lists for case in switch
  * Switch to go stable and update mod to 1.24.0
  * Remove use of urfave/cli and replace it with flag
  * Various golangci-lint v2.1x warnings fixed
  * Bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6
  * Also allow optionally to pass down the system_token
  * Bump github.com/stretchr/testify from 1.9.0 to 1.10.0</changelog>
  <changelog author="dmueller@suse.com" date="1747742401">- Update to version 2.5.3 (bsc#1243360):
  * only handle command line options for the default arg0 case
  * parse and ignore the previously removed log-credentials-errors
  * Restore usage output on unhandled command line options</changelog>
  <changelog author="dmueller@suse.com" date="1749556800">- Update to version 2.5.4:
  * Switch to sha256 from md5
- use go's native fips module on tumbleweed</changelog>
  <changelog author="dmueller@suse.com" date="1752840000">- Update to version 2.5.5:
  * Do not log credentials errors
- switch to the go native fips 140-3 module
  (https://go.dev/blog/fips140)</changelog>
</package>
<package pkgid="5fe9b10bc2330a136e44233cfccbdd5463ece860dbd1ade06105159a82e62b8d1342a7f848086525ec63f24ae7500221034d3a12988325abb445655604158171" name="container-suseconnect" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="160000.1.1"/>
  <changelog author="dmueller@suse.com" date="1670328000">- update to 2.4.0 (jsc#PED-1710):
  * Fix docker build example for non-SLE hosts
  * Minor fixes to --help and README
  * Improve documentation when building with podman on non-SLE host
  * Add flag --log-credentials-errors
  * Add GitHub actions
  * Remove vendor/ dir
  * Cleanup tests
  * Update capture to the 1.0.0 release
  * Bump cli to 2.34.4
  * Update cli to 2.23.5
  * Add dependabot
  * Use URL.Redacted() to avoid security scanner warning
  * Regcode fix</changelog>
  <changelog author="dmueller@suse.com" date="1696507200">- spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1709121600">- update to 2.5.0:
  * Upgrade to go 1.21
  * Allow setting of SCC credentials via environment variables
  * Bump github.com/urfave/cli/v2 from 2.25.7 to 2.27.1
  * Use switch instead of else if construction
  * Add system token header to query SCC subscriptions
    (bsc#1219855)
- run tests</changelog>
  <changelog author="dmueller@suse.com" date="1709640000">- remove unnecessary packaging buildrequires</changelog>
  <changelog author="dmueller@suse.com" date="1745409600">- update to 2.5.1:
  * Bump github.com/mssola/capture from 1.0.0 to 1.1.0
  * Log everything to stderr
  * Code formatting
  * Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  * Also allow optionally to pass down the system_token
  * Various golangci-lint v2.1x warnings fixed
  * Remove use of urfave/cli and replace it with flag</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1747742400">- Update to version 2.5.2:
  * Prepare for new release
  * Fix default behavior
  * Use comma-separated lists for case in switch
  * Switch to go stable and update mod to 1.24.0
  * Remove use of urfave/cli and replace it with flag
  * Various golangci-lint v2.1x warnings fixed
  * Bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6
  * Also allow optionally to pass down the system_token
  * Bump github.com/stretchr/testify from 1.9.0 to 1.10.0</changelog>
  <changelog author="dmueller@suse.com" date="1747742401">- Update to version 2.5.3 (bsc#1243360):
  * only handle command line options for the default arg0 case
  * parse and ignore the previously removed log-credentials-errors
  * Restore usage output on unhandled command line options</changelog>
  <changelog author="dmueller@suse.com" date="1749556800">- Update to version 2.5.4:
  * Switch to sha256 from md5
- use go's native fips module on tumbleweed</changelog>
  <changelog author="dmueller@suse.com" date="1752840000">- Update to version 2.5.5:
  * Do not log credentials errors
- switch to the go native fips 140-3 module
  (https://go.dev/blog/fips140)</changelog>
  <changelog author="dmueller@suse.com" date="1753185600">- Update to version 2.5.6:
  * Change the version logic
  * Fix FIPS environment variable in CI
  * Test in fips mode</changelog>
</package>
<package pkgid="f586ba9c203ab99069d27344b048bb06c1a98172faf2111f96546882b833067f5f3cf9408af82486de8d25e5c9a0514d9f8d6c32500e9c2a652290e0d1c092ed" name="container-suseconnect" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="160000.2.1"/>
  <changelog author="dmueller@suse.com" date="1770638400">- switch to go 1.25</changelog>
</package>
<package pkgid="d02308f0e2eb465d9cdf2089ff206f025b0b72d58c0ada31f3a842f745328f894ae014cf5479465955f0df94d92ee585d3f5a1e6a075e282e5e401f03ec33c24" name="container-suseconnect" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="160000.2.3"/>
  <changelog author="dmueller@suse.com" date="1770638400">- switch to go 1.25</changelog>
</package>
<package pkgid="c09199508738233e616ee6c1ab0ea3f237ce10faeb881a32b5900d45f95494e2aa07be6fb3eaebd205be35f75473eb1cab292c8502dbaf49ce9877a3346ec4f9" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.27" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="b73a768b518f0e9da37f8212d868292b0a31cb8d7abef5de1af0f2a1448c14897da74b8b603a24646f7da1180b5924b7e233b11b83f319a632603e605075deec" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.33" rel="160000.1.1"/>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1777550400">- Add patch for CVE-2026-33186 (bsc#1260296):
  * 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- Add patch for CVE-2026-34986 (bsc#1262948)
  * 0003-CVE-2026-34986-Bump-go-jose-to-v3.0.5.patch
- Add patch for CVE-2026-39821 (bsc#1266640)
  * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- Add patch for CVE-2026-33814 (bsc#1265794)
  * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch</changelog>
  <changelog author="dmueller@suse.com" date="1782129600">- update to 1.7.33 (bsc#1262266, CVE-2026-35469,
    bsc#1268355, CVE-2026-46680,
    bsc#1268430, CVE-2026-53488,
    bsc#1268441, CVE-2026-47262):
  * https://github.com/containerd/containerd/releases/tag/v1.7.33
  * https://github.com/containerd/containerd/releases/tag/v1.7.32
  * https://github.com/containerd/containerd/releases/tag/v1.7.31
  * https://github.com/containerd/containerd/releases/tag/v1.7.30
- drop 0003-CVE-2026-34986-Bump-go-jose-to-v3.0.5.patch (upstream)</changelog>
</package>
<package pkgid="95dd429adb716ac93649de13030151361e78d62cd9e762ea17091860b62d9e1cb5b3f5adb97caf095853b23c5da0bf5001a582badb9ca9672c4aba774ac02650" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.7.27" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="5c8a0eb8bcac8b119b443e91a402dff7e339024ca742c6df2fa2214739b50a5d05127b05499ee5f93e8fcd2ae0395105903686855a482f0e19ba250b055064ba" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.7.33" rel="160000.1.1"/>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1777550400">- Add patch for CVE-2026-33186 (bsc#1260296):
  * 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- Add patch for CVE-2026-34986 (bsc#1262948)
  * 0003-CVE-2026-34986-Bump-go-jose-to-v3.0.5.patch
- Add patch for CVE-2026-39821 (bsc#1266640)
  * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- Add patch for CVE-2026-33814 (bsc#1265794)
  * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch</changelog>
  <changelog author="dmueller@suse.com" date="1782129600">- update to 1.7.33 (bsc#1262266, CVE-2026-35469,
    bsc#1268355, CVE-2026-46680,
    bsc#1268430, CVE-2026-53488,
    bsc#1268441, CVE-2026-47262):
  * https://github.com/containerd/containerd/releases/tag/v1.7.33
  * https://github.com/containerd/containerd/releases/tag/v1.7.32
  * https://github.com/containerd/containerd/releases/tag/v1.7.31
  * https://github.com/containerd/containerd/releases/tag/v1.7.30
- drop 0003-CVE-2026-34986-Bump-go-jose-to-v3.0.5.patch (upstream)</changelog>
</package>
<package pkgid="322e08e22390bed6231c0da3ec70cc61eeb3e905dfa2ace72fd0188d3b57702faff075905faac00eb8087792d4ec5ddf6eb6c686ce31a20e425018c78265eb92" name="containerd-devel" arch="noarch">
  <version epoch="0" ver="1.7.27" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="c67f02a3432961d5493f13f7060b62da6c2fec3284155f1e43e222f853116f5499b4460c875c5804a4fa8fe983b899fc0c7444332bb514ffb891f208872fc288" name="containerd-devel" arch="noarch">
  <version epoch="0" ver="1.7.33" rel="160000.1.1"/>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1777550400">- Add patch for CVE-2026-33186 (bsc#1260296):
  * 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- Add patch for CVE-2026-34986 (bsc#1262948)
  * 0003-CVE-2026-34986-Bump-go-jose-to-v3.0.5.patch
- Add patch for CVE-2026-39821 (bsc#1266640)
  * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- Add patch for CVE-2026-33814 (bsc#1265794)
  * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch</changelog>
  <changelog author="dmueller@suse.com" date="1782129600">- update to 1.7.33 (bsc#1262266, CVE-2026-35469,
    bsc#1268355, CVE-2026-46680,
    bsc#1268430, CVE-2026-53488,
    bsc#1268441, CVE-2026-47262):
  * https://github.com/containerd/containerd/releases/tag/v1.7.33
  * https://github.com/containerd/containerd/releases/tag/v1.7.32
  * https://github.com/containerd/containerd/releases/tag/v1.7.31
  * https://github.com/containerd/containerd/releases/tag/v1.7.30
- drop 0003-CVE-2026-34986-Bump-go-jose-to-v3.0.5.patch (upstream)</changelog>
</package>
<package pkgid="8416bbcf08e78ce1227fa224c109a51f772d3cda60580db25848a326873963a0b81ab48df6f4e867cfcdfc644318864f6368f5a910aa4434b9b75e7d58bc520c" name="containerized-data-importer-api" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="47ff329c4e7248de7823ab92a3695346f00d5ff8effa6db4ab6b4422fe83651fefe70cb24d14edd410daa0ab33716baa5ac9e6d149af8531ec8ba2e8d73a934a" name="containerized-data-importer-api" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="a6e32693c591a8f597c4c4ca1be3871efbe42b4433f6ad92ed93cea4971372e554020d99f2fbef5a9baffa9cee4231d265a548856f953fa10b5b6469faa98cc9" name="containerized-data-importer-cloner" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="d68caf83456239ddcc30826879846ceaaf717220d12e5069217add07ae55b02c55ba37728cf648974f654a20b945165fce7fb2289e4cde6a46ad15abc4f5ae7b" name="containerized-data-importer-cloner" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="b7b3d744800e6b98de6d6d4c695cc592b3cc6c5c6ad4e9688055f938ae53f441452d386e22281900b7b4eb55098f00b3268c33db75992bf3a15ea18a6d434b5a" name="containerized-data-importer-controller" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="80d7285f72d4066d196288c5462906a09d7c68bbfd36e816034515e786b769e7f694348718463be92f84cd55ecaaadcc44e57dfd5c7da2464905eecfb9f663b7" name="containerized-data-importer-controller" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="9ed47e9a6c9284e1ec5c6173e41eed19ac7f417adf17f8ddfeb8d8ae082d87809ffc5d4b413b77610366e4155a9a544e526c71d7f43d9adebce850da4ff9b3b1" name="containerized-data-importer-importer" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="c5ee3aeced8d0fffc1a2bac6bbc31e40ec0e6fcaea0b60d47c861ed8155dc9d10bf4234978adefebee8274d17b6440d1e949da3f3f34ce7ae3473a252511a332" name="containerized-data-importer-importer" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="c4f8a6daad8936de504a2e2933b736091bcdc1844d09f10ccc2af9b26295d7f78dc487cb9a446b68f8793f8bdbdf054645d0e087e70020f0f6b059c18fcf6a37" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="9320a618e5b08b7480a1b2e52adacbb8e39601a438be40f43cac125ac221df60383f6ae25b32d0b1487318d0dadd1cdf9956228f105beea13a2ad469aac22333" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="92a86e4c12d11b593ea6085d9e2f4ec702fa341efbfd8cd8e05408244e262beabb225579c35ec8a7fb3efa52cba1111efa2947b9d47278cd4a55c16e42558711" name="containerized-data-importer-operator" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="d7425dd567fa1c504dec6464b87d00c3975ed9b2a0d31fdd2ad9d937ea5d7e1aecece907e3386f6b2ad79461d182731b1d3cf1c270f384f71a8c5e2afc494524" name="containerized-data-importer-operator" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="d56f67cf9c8b8185b03a35dfe9efadeb28b60c57d96b4cc39e4786d7809bb494a494df45b4fe7f307c364f21113e84ccb27caee8a79d00d38e6acfb4d5682340" name="containerized-data-importer-uploadproxy" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="5e029a8e4eb10b310014f5d5633cdb23417b8c2f5d5b290e2858e51a5356b59ce196af6c781d7de29b236d576c16de640c0e2ed8cf635402002204118938862a" name="containerized-data-importer-uploadproxy" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="21e5ba2fb88fc9b17e6e88eff641537070d8d19583d7c85f64583517d482d3d69db96a313b90908ed152eac7f6b777011ef5f51f06bf8cb77a2e378c0e3586f6" name="containerized-data-importer-uploadserver" arch="x86_64">
  <version epoch="0" ver="1.60.1" rel="160000.2.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1689163200">- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
</package>
<package pkgid="8d6eec5108d08f9860763b75de0c27724d2d380bf41d3ee41cd0fa382e0d3ed6d8ba4dfbcf4aa92dcdb9efb86fa60bd43a4731ef51b24f967fc117e37e0867e9" name="containerized-data-importer-uploadserver" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="160000.1.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1692100800">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1707739200">- Overwrite container image references in the manifests: use the images
  based on SLE15 SP5 BCI</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1722427200">- Use the images based on SLE15 SP6 BCI: 1.59.0-150600.3.6.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1725624000">- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Drop upstreamed patch
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1</changelog>
  <changelog author="jfehlig@suse.com" date="1771329600">- Update to version 1.64.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.64.0
  bsc#1235204 (CVE-2024-28180), bsc#1235365 (CVE-2024-45338),
  bsc#1239205 (CVE-2025-22868)</changelog>
</package>
<package pkgid="50eeaf15b459d2bb7322a48d060870f4da4b0b013906127b201fcbdd54f6531c5c1f096816ebb729129780ed269bb63fa8d81072b9af052b31feedacc6d68b5a" name="containment-rpm" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="160000.2.2"/>
  <changelog author="containers-bugowner@suse.de" date="1516017600">- Commit 56cf72d by David Cassany dcassany@suse.com
  Exit if no tag defined
  This commit exits the kiwi_post_run hook script in case the config.xml file
  does not include any tag specification.</changelog>
  <changelog author="containers-bugowner@suse.de" date="1517572800">- Commit 1956b4f by Jordi Massaguer Pla jmassaguerpla@suse.de
  Add conflicts with other packages that provide the same hook
  /usr/lib/build/kiwi_post_run
  Signed-off-by: Jordi Massaguer Pla &lt;jmassaguerpla@suse.de&gt;</changelog>
  <changelog author="containers-bugowner@suse.de" date="1520251200">- Commit 229b3d2 by Fabian Vogt fvogt@suse.com
  Abort build if changelog found but changelog-generator not available
  Commit 8af17f6 by Fabian Vogt fabian@ritter-vogt.de
  Make changelog-generator optional for openSUSE
  Fixes #31
  feature#openSUSE_Kubic</changelog>
  <changelog author="containers-bugowner@suse.de" date="1522238400">- Commit c2e30cc by David Cassany dcassany@suse.com
  Make local builds possible
  This commit makes local OBS builds of images wrapped in RPMs possible.</changelog>
  <changelog author="containers-bugowner@suse.de" date="1526299200">- Commit fec546a by Jordi Massaguer Pla jmassaguerpla@suse.de
  recommend changelog generator data instead of requiring it
  Using the changelog generator data is not a hard requirement. You can build
  rpms containing containers without creating the changelogs.
  This way, it will create the changelogs only if the changelog-generator-data
  package is available
  Signed-off-by: Jordi Massaguer Pla &lt;jmassaguerpla@suse.de&gt;</changelog>
  <changelog author="containers-builds@suse.de" date="1528372800">- Commit 97bf8fc by Fabian Vogt fvogt@suse.com
  Use uname -m for ARCH and also pass to rpmbuild
  Otherwise we get into a mess where i386/i586/i686 are used in place of each
  other.
  Fixes #35</changelog>
  <changelog author="containers-builds@suse.de" date="1528804800">- Commit 4532982 by Sergio Lindo Mansilla SLindoMansilla@suse.com
  Fix plural on sentence</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- update to 2.0.0:
  * to Use uname -m for ARCH and also pass to rpmbuild
  * Fix plural on sentence by
  * adapt kiwi hook to new obs-build one and expand for docker build</changelog>
  <changelog author="dmueller@suse.com" date="1695211200">- update to 2.0.1:
  * More robust handling of tags</changelog>
  <changelog author="dmueller@suse.com" date="1698408000">- update to 2.0.2:
  * Handle better container name from kiwi</changelog>
</package>
<package pkgid="c46b5a107d2e265de1524982b953544ce4f943bf45afb6972797c50681d4695b97275cd9e45d2bde50675d67c126da48a484178dda70ac00a53d15641880449d" name="contrast" arch="x86_64">
  <version epoch="0" ver="0.0.11" rel="bp160.1.48"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1697716800">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1727092800">- Update to version 0.0.11
  * app: Use window groups
  * app: Do not hold reference to window
  * Port drawing to gsk::Path
  * Update zbus to v4.0
  * Update translations
- Remove pkgconfig(gdk-pixbuf-2.0) BuildRequires: unneeded anymore
  on version 0.0.11
- add meson_test to validate files</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1727265600">- Fix compilation with --nocheck (boo#1227364)</changelog>
</package>
<package pkgid="9a051b5ac6453bef4b4f23332122ad6cb902e5ea1db093ff9e932f94d4041efa911f6e13403dbba7b8b57c16f03d518af549b826fad787645e6f1f3c6170fa0b" name="contrast-lang" arch="noarch">
  <version epoch="0" ver="0.0.11" rel="bp160.1.48"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1697716800">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1727092800">- Update to version 0.0.11
  * app: Use window groups
  * app: Do not hold reference to window
  * Port drawing to gsk::Path
  * Update zbus to v4.0
  * Update translations
- Remove pkgconfig(gdk-pixbuf-2.0) BuildRequires: unneeded anymore
  on version 0.0.11
- add meson_test to validate files</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1727265600">- Fix compilation with --nocheck (boo#1227364)</changelog>
</package>
<package pkgid="093a6259f26638b5412e4df10aa6ef966c8d39f45f276d0dc4612efef93ae1176e6988f676da6e9620b5dd52a665c18e1a1ae2980428b8ca4883d28370964ad7" name="converseen" arch="x86_64">
  <version epoch="0" ver="0.9.11.1" rel="bp160.1.12"/>
  <changelog author="lazy.kent@opensuse.org" date="1485000000">- Update to 0.9.6.
  * Added support for ImageMagick 7.
  * Various code improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1490356800">- Update to 0.9.6.1.
  * Updated French Translation
  * Various bugfixes</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1491307200">- Update to 0.9.6.2.
  * Added Danish Translation.
  * Updated Italian Translation.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1539604800">- Update to 0.9.7.1.
  * Various bugfixes.
- Changes in 0.9.7.
  * Added Ukranian Traslation.
  * Updated Italian Traslation.
  * Removed Flattr links and buttons.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1541073600">- Update to 0.9.7.2.
  * Updated Japanese Localization.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1572868800">- Update to 0.9.8.0.
  * Fixed bug with TIF files.
  * Various Minor Updates.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1580817600">- Update to 0.9.8.1.
  * Added Swedish translation.
  * Various minor updates.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1615204800">- Update to 0.9.9.0.
  * Fixed random crash when all images are removed.
  * Some translation updates.
  * Various minor updates.
  * Various bugfixes.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651752000">- Update to version 0.9.9.5
  * Added scaling/support for HiDPI Displays
  * Various Bugfixes
  * Additional changes included in version 0.9.9.4
  * Fixed Overwrite Option
  * Updated Some Languages
  * Additional changes included in version 0.9.9.3
  * Added Simplified Chinese Translation
  * Additional changes included in version 0.9.9.2
  * Added PDF conversion instructions
  * Minor Updates
  * Additional changes included in version 0.9.9.1
  * Added JFIF support
  * Fixed settings data location
  * Various Minor Updates</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1682856000">- Update to 0.9.11.1
  * Added decimal values in scaling by percentage
  * Various improvements in the user interface
  * Various Bugfixes
- Changes in 0.9.11.0
  * Now, it’s possible to attempt to process corrupted images
  * Updated Turkish Translation
  * Updated Italian translation
  * Various Bugfixes
- Changes in 0.9.10.1
  * Fixed random crash that may happen when images are removed
    from the list
  * Updated Russian translation
  * Various Bugfixes
- Changes in 0.9.10.0
  * Added WebP support for quality, compression, etc
  * Added a feature to remove metadata when images are processed
  * Fixed a bug that inhibits the overwrite feature when the
    Rename option is checked
  * Various Bugfixes
- Changes in 0.9.9.8
  * Updated Russian, Turkish and Italian translations
  * Various Bugfixes
- Changes in 0.9.9.7
  * Added hicolor icons on Linux
  * The program is now adapted to be distributed as AppImage
  * The program is now adapted to be distributed as Snap Package
  * Various Bugfixes
- Changes in 0.9.9.6
  * Improved quality and compression settings for JPEG and PNG
    formats
  * Various Bugfixes</changelog>
</package>
<package pkgid="fe899af3964ac9ee19e3d64c3060195f4485ea104432e5bbdfff04617829535d094840fa98fe7dc70ac9288d1417cd954472ce59555c0119553f916c5857324a" name="converseen-lang" arch="noarch">
  <version epoch="0" ver="0.9.11.1" rel="bp160.1.12"/>
  <changelog author="lazy.kent@opensuse.org" date="1485000000">- Update to 0.9.6.
  * Added support for ImageMagick 7.
  * Various code improvements.</changelog>
  <changelog author="pgajdos@suse.com" date="1490356800">- Update to 0.9.6.1.
  * Updated French Translation
  * Various bugfixes</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1491307200">- Update to 0.9.6.2.
  * Added Danish Translation.
  * Updated Italian Translation.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1539604800">- Update to 0.9.7.1.
  * Various bugfixes.
- Changes in 0.9.7.
  * Added Ukranian Traslation.
  * Updated Italian Traslation.
  * Removed Flattr links and buttons.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1541073600">- Update to 0.9.7.2.
  * Updated Japanese Localization.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1572868800">- Update to 0.9.8.0.
  * Fixed bug with TIF files.
  * Various Minor Updates.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1580817600">- Update to 0.9.8.1.
  * Added Swedish translation.
  * Various minor updates.
  * Various bugfixes.</changelog>
  <changelog author="Kyrill Detinov &lt;lazy.kent@opensuse.org&gt;" date="1615204800">- Update to 0.9.9.0.
  * Fixed random crash when all images are removed.
  * Some translation updates.
  * Various minor updates.
  * Various bugfixes.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651752000">- Update to version 0.9.9.5
  * Added scaling/support for HiDPI Displays
  * Various Bugfixes
  * Additional changes included in version 0.9.9.4
  * Fixed Overwrite Option
  * Updated Some Languages
  * Additional changes included in version 0.9.9.3
  * Added Simplified Chinese Translation
  * Additional changes included in version 0.9.9.2
  * Added PDF conversion instructions
  * Minor Updates
  * Additional changes included in version 0.9.9.1
  * Added JFIF support
  * Fixed settings data location
  * Various Minor Updates</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1682856000">- Update to 0.9.11.1
  * Added decimal values in scaling by percentage
  * Various improvements in the user interface
  * Various Bugfixes
- Changes in 0.9.11.0
  * Now, it’s possible to attempt to process corrupted images
  * Updated Turkish Translation
  * Updated Italian translation
  * Various Bugfixes
- Changes in 0.9.10.1
  * Fixed random crash that may happen when images are removed
    from the list
  * Updated Russian translation
  * Various Bugfixes
- Changes in 0.9.10.0
  * Added WebP support for quality, compression, etc
  * Added a feature to remove metadata when images are processed
  * Fixed a bug that inhibits the overwrite feature when the
    Rename option is checked
  * Various Bugfixes
- Changes in 0.9.9.8
  * Updated Russian, Turkish and Italian translations
  * Various Bugfixes
- Changes in 0.9.9.7
  * Added hicolor icons on Linux
  * The program is now adapted to be distributed as AppImage
  * The program is now adapted to be distributed as Snap Package
  * Various Bugfixes
- Changes in 0.9.9.6
  * Improved quality and compression settings for JPEG and PNG
    formats
  * Various Bugfixes</changelog>
</package>
<package pkgid="9637c090d2dea9fbcb84d7e8e3b0cb740ed2a87973a5e4f4b5f302bceef6d3e8fa72f455bccd70a7ccf67baf7167f1123afe392ca113ce5d7ec9c99af95ee6f9" name="cookiecutter-doc" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="bp160.1.8"/>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1649073600">- add fix-setup-version.patch to fix the version in setup.py</changelog>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1650801600">- update fix-setup-version.patch to cookiecutter-fix-setup.patch
  gh#cookiecutter/cookiecutter#1656
- Sync rpm requirements metadata to setuptools generated metadata</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1655812800">- remove obsolete patch cookiecutter-fix-setup.patch
- update to version 2.1.1:
  - Documentation updates:
  - Fix local extensions documentation (#1686)
  - Bugfixes:
  - Sanitize Mercurial branch information before checkout. (#1689)
- update to version 2.1.0:
  - Changes:
  - Move contributors and backers to credits section (#1599)
  - test_generate_file_verbose_template_syntax_error fixed (#1671)
  - Removed changes related to setuptools_scm (#1629)
  - Feature/local extensions (#1240)
  - CI/CD and QA changes:
  - Check manifest: pre-commit, fixes, cleaning (#1683)
  - Follow PyPA guide to release package using GitHub Actions. (#1682)
  - Documentation updates:
  - Fix typo in dict_variables.rst (#1680)
  - Documentation overhaul (#1677)
  - Fixed incorrect link on docs. (#1649)
  - Bugfixes:
  - Restore accidentally deleted support for click 8.x (#1643)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1683720000">- add sle15_python_module_pythons</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1683806400">- fix leftover python3 BuildRequires and use the python_module
  macros. This allows builds on SLE15 with python3.11</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1689508800">- update to version 2.2.3:
  - Changes:
  - Minor Changes:
  - Add support for adding human-readable labels for choices when defining multiple choices questions (#1898) @vemonet
  - Prompt with replay file (#1758) @w1ndblow
  - CI/CD and QA changes:
  - Set cookiecutter/VERSION.txt as source of truth for version number (#1896) @ericof
  - [pre-commit.ci] pre-commit autoupdate (#1897) @pre-commit-ci
  - Bugfixes:
  - Fix issue where the prompts dict was not passed for yes_no questions (#1895) @vemonet
  - Set cookiecutter/VERSION.txt as source of truth for version number (#1896) @ericof
- update to version 2.2.2:
  - CI/CD and QA changes:
  - Improve gitignore (#1889) @audreyfeldroy
  - Add warning for jinja2_time (#1890) @henryiii
- update to version 2.2.0:
  - Changes:
  - Added timeout on request.get() for ensuring that if a recipient serve… (#1772) @openrefactory
  - Fixing Carriage Return Line Feed (CRLF) order in docs #1792 (#1793) @Lahiry
  - Reduce I/O (#1877) @kurtmckee
  - Remove a pre-commit hook special case (#1875) @kurtmckee
  - Remove universal bdist_wheel option; use "python -m build" (#1739) @mwtoews
  - Remove unused import from post-generate hook script example (#1795) @KAZYPinkSaurus
  - Standardize newlines for all platforms (#1870) @kurtmckee
  - feat: Add resolved template repository path as _repo_dir to the context (#1771) @tmeckel
  - Minor Changes:
  - Added support for providing human-readable prompts to the different variables (#1881) @vemonet
  - Added: Boolean variable support in JSON (#1626) @liortct
  - Added: CLI option to keep project files on failure. (#1669) @MaciejPatro
  - Added: Support partially overwrite keys in nested dict (#1692) @cksac
  - Added: Templates inheritance (#1485) @simobasso
  - Code quality: Tests upgrade: Use pathlib for files read/write (#1718) @insspb
  - Inline jinja2-time extension code (#1779) @tranzystorek-io
  - Support Python 3.11 (#1850) @kurtmckee
  - Support nested config files (#1770) @dariocurr
  - preserves original options in `_cookiecutter` (#1874) @kjaymiller
  - CI/CD and QA changes:
  - Add a Dependabot config to autoupdate GitHub workflow actions (#1851) @kurtmckee
  - Added: Readthedocs build config (#1707) @insspb
  - Bump actions/setup-python from 3 to 4 (#1854) @dependabot
  - Bump paambaati/codeclimate-action from 3.0.0 to 4.0.0 (#1853) @dependabot
  - CI/CD: Tox -&gt; Nox: Added nox configuration (#1706) @insspb
  - CI/CD: Tox -&gt; Nox: Github actions definition minimized + Sync nox and github actions (#1714) @insspb
  - CI/CD: Tox -&gt; Nox: Makefile update: Removed watchmedo and sed dependency, tox replaced with nox (#1713) @insspb
  - CI/CD: Updated .pre-commit-config.yaml to use latest hooks versions (#1712) @insspb
  - Code quality: Core files: Added exception reason reraise when exception class changed (PEP 3134) (#1719) @insspb
  - Code quality: Tests upgrade: Use pathlib for files read/write (#1718) @insspb
  - Code quality: core files: Format replaced with f-strings (#1716) @insspb
  - Code quality: find.py refactored and type annotated (#1721) @insspb
  - Code quality: tests files: Simplify statements fixes (#1717) @insspb
  - Code quality: utils.make_sure_path_exists refactored and type annotated (#1722) @insspb
  - Fixed: recommonmark replaced with myst, as recommonmark is deprecated (#1709) @insspb
  - Pretty-format JSON files (#1864) @kurtmckee
  - Rename `master` to `main` so CI runs correctly on merge (#1852) @kurtmckee
  - Standardize EOF newlines (#1876) @kurtmckee
  - Update `.gitignore` and cite where it was copied from (#1879) @kurtmckee
  - Update base docs, remove tox (#1858) @ericof
  - Update pre-commit hook versions (#1849) @kurtmckee
  - Updated: Release drafter configuration (#1704) @insspb
  - Use tox (#1866) @kurtmckee
  - Verify an expected warning is raised (#1869) @kurtmckee
  - fixed failing lint ci action by updating repo of flake8 (#1838) @Tamronimus
  - Documentation updates:
  - Add jinja env docs (#1872) @pamelafox
  - Documentation extension: Create a Cookiecutter From Scratch tutorial (#1592) @miro-jelaska
  - Easy PR! Fix typos and add minor doc updates (#1741) @Alex0Blackwell
  - Expand cli documentation relating to the no-input flag (#1543) (#1587) @jeremyswerdlow
  - Fix @audreyr to @audreyfeldroy github account rename (#1604) @ri0t
  - Fixed broken links to jinja docs (#1691) @insspb
  - Fixed minor typos in docs (#1753) @segunb
  - Fixed: Python code block in the replay documentation (#1715) @juhannc
  - Fixed: recommonmark replaced with myst, as recommonmark is deprecated (#1709) @insspb
  - Improve Docs Readability (#1690) @ryanrussell
  - Update base docs, remove tox (#1858) @ericof
  - Updated: Boolean Variables documentation and docstrings (#1705) @italomaia
  - docs: fix simple typo, shat -&gt; that (#1749) @timgates42
  - fixing badge display problem (#1798) @Paulokim1
  - Bugfixes:
  - Fixed the override not working with copy only dir #1650 (#1651) @zhongdai
  - Fixed: Removed mention of packages versions, to exclude dependabot warnings alerts (#1711) @insspb
  - cleanup files if panics during hooks - bugfix (#1760) @liortct</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1694088000">- Update to 2.3.0:
  * Improve style of prompts using `rich` (#1901) @vemonet
  * Fix replay (#1904) @vemonet
  * Support multichoice overwrite (#1903) @Meepit
- Switch to pyproject macro.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 2.6.0:
  * Support Python 3.12
  * Modifying Jinja2 start and end variable strings (#1997)
  * Fix regression #2009: Adding value to nested dicts broken
  * Fixed errors caused by invalid config files. (#1995)
  * Default values can be passed as a dict (#1924)
  * Implement new style for nested templates config (#1981)
  * Fix FileExistsError when using a relative template path
  * Fix recursive context overwrites
  * Gracefully handle files with mixed lined endings (#1942)
  * Implement a pre_prompt hook that will run before prompts
  * Implement a pre_prompt hook that will run before prompts
  * update main docstrings to include overwrite_if_exists and
    skip_if_file_exists
  * add checkout details to the context (fixes #1759) (#1923)
  * Fix nested templates in Git repository (#1922)
  * Fix prompt counter. (#1940)
  * Fix variables with null default not being required (#1919)</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1737115200">- Drop unneeded BuildRequires on recommonmark, it was dropped back in
  2.2.0.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1737374400">- Add python3-sphinx_rtd_theme as build dependency to fix the doc build fail.</changelog>
</package>
<package pkgid="980cc4f2f38d6876f7dec2491c54f419c0c518a777680e9cdef9e13bef1b4ca9f92d0f93efb23527df4061b7b44a837655b7912ad6a12509e6c3806fa396020c" name="cool-retro-term" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.12"/>
  <changelog author="mardnh@gmx.de" date="1450008000">- initial package, version 1.0.0</changelog>
  <changelog author="aavindraa@gmail.com" date="1509192000">- update to 1.0.1
  + Fixed issues with High Sierra
  + Font improvements
  + Misc fixes
- Lint .spec file
- Track version of qmltermwidget required in a variable</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Update to version 1.1.0
  * Fix frame rendering issues on Nvidia GPUs
  * Fix High DPI issues
  * Make burnin optimization optional
  * Fix issue with font scaling slider
- Update to version 1.1.0
  * Two years of upstream qtermwidget fixes
  * Shiny (literally) new frame
  * System fonts support
  * Lowered GPU and Memory usage
  * Faster and burn in effect
  * Improved colors support
  * Improved RGB shift effect
  * Improved colors support
  * Many other small tweaks and fixes
- Specfile cleanup</changelog>
  <changelog author="mardnh@gmx.de" date="1548158400">- Recommend int10h-oldschoolpc-fonts which has also a good
  reportoire of oldschool pc fonts.</changelog>
  <changelog author="mardnh@gmx.de" date="1548244800">- Package man page
- Use system-wide qmltermwidget
- Add patch:
  * cool-retro-term-disable-bundled-qmltermwidget.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651838400">- Update to version 1.2.0
  * Migrated QtQuickControls from 1.x to 2.x
  * Fixed a lot of issues with MacOS build
  * Added support for blinking cursor
  * Added sub-pixel rasteration
  * Updated qtermwidget engine
  * Updated many fonts to the latest version</changelog>
  <changelog author="Erico Mendonca &lt;erico.mendonca@suse.com&gt;" date="1682769600">- Removed cool-retro-term-disable-bundled-qmltermwidget.patch
- Recompiled with internal QmlTermWidget from author's repository.
- Removed unnecessary Requires statements that caused rpmlint warnings.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1685102400">- Require QtQuick at runtime (else c-r-t exits with
  "qrc:/SettingsWindow.qml:25:1: module QtQuick.Dialogs is not installed"
  "qrc:/main.qml:22:1: plugin cannot be loaded for module
  QtQuick.Controls: Cannot protect module QtQuick.Controls 2 [...]")</changelog>
</package>
<package pkgid="aed9fd8f1c89de32605a793eb782fc691d9e36136863470a3bbe6b4d6a12228308a4813cc62c9f85c932cab5f640881348e7a52836f1dc7c62d0ea91474478e2" name="coolkey" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1500638400">- Add nssdb installation scripts.
- Run spec-cleaner.
- Drop coolkey-1.1.0-evoandooo.patch: The patch does nothing now.
  Evolution and LibreOffice changed over time. They moved its
  directories and they don't use secmod.db any more.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Remove vision statement and development methods from description.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- light modernization of the spec file
- avoid bashism in post scripts (bsc#1195391)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="38288dfa0a3197bdd0652e053bf9b485ad99b8cd21b6ca93b07bae05b3e9df6eeccc018f16f7cdd44341c63f0bf8264229d2b3ce99cbf050a9f8d89ee8b76f3f" name="coolkey-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1500638400">- Add nssdb installation scripts.
- Run spec-cleaner.
- Drop coolkey-1.1.0-evoandooo.patch: The patch does nothing now.
  Evolution and LibreOffice changed over time. They moved its
  directories and they don't use secmod.db any more.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Remove vision statement and development methods from description.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- light modernization of the spec file
- avoid bashism in post scripts (bsc#1195391)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="04ad9be28f57d01fb96ecfe327c6dd07d2752ec9239ba821018b289a24f215ddeb4ace47d16940ab85fa23082d0622d7c4a8ff33e30ea06195b95568da8075fe" name="coppwr" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp160.1.14"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1703332800">- Initial package</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1704369600">- Update to version 1.5.1
  * ui: Move persistence and common to new util module
  * New icon</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1714996800">- Update to version 1.6.0
  * Added buttons for accessing global details in various parts of
    the app
  * Added waiting+busy charts in the process viewer
  * Added panning the Graph view using the secondary mouse button
  * Made process viewer show updated data strictly every 0.5s,
    instead of on every update like mouse movement
  * Improved Global Tracker's filtering performance
  * Enabled egui's parallel tessellation for better profiler
    performance
  * Several improvements from updating egui such as selectable text
    and smooth scrolling</changelog>
</package>
<package pkgid="4025dd8b2bb84c026b67965f8d69214e26226748d15b0916e59f12778c479de098bc17671cd76a26969e96d76b642f8ff32cd7a83b8f7accd8f7efaad0ac2d64" name="coreboot-utils" arch="x86_64">
  <version epoch="0" ver="4.22.01" rel="bp160.1.11"/>
  <changelog author="mardnh@gmx.de" date="1526558400">- Update to 4.8.1
  * Full changelog:
    https://www.coreboot.org/releases/coreboot-4.8.1-relnotes.txt
- Rebase patches:
  * no-pie.patch</changelog>
  <changelog author="mardnh@gmx.de" date="1545393600">- Update to 4.9
  * Full changelog:
    https://coreboot.org/releases/coreboot-4.9-relnotes.txt
- Rebase patches:
  * no-pie.patch
- Update coreboot-utils.keyring
  Old key 0x19796C2B3E4F7DF7 got superseeded by 0x269C04E1</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1569067200">- Update to 4.10
  * Full changelog:
    https://coreboot.org/releases/coreboot-4.10-relnotes.txt
- Update coreboot-utils.keyring
  Old key 0x269C04E1 got superseeded by 0xAA103F48728F5291</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1610971200">- Fix build with GCC 10
  * msrtool-fix-build-with-gcc-10.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1666440000">- Update to version 4.18
  Changes since 4.10
  * https://coreboot.org/releases/coreboot-4.18-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.17-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.16-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.15-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.14-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.13-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.12-relnotes.txt
  * https://coreboot.org/releases/coreboot-4.11-relnotes.txt
- Upstream removed some tools:
  * util/k8resdump
  * util/romcc
  * util/viatool
- Drop not longer needed patches:
  * k8resdump.diff
  * msrtool-fix-build-with-gcc-10.patch
- Update coreboot-utils.keyring
  - &gt; 574CE6F6855CFDEB7D368E9D19796C2B3E4F7DF7
    Martin Roth (coreboot developer) &lt;martin@coreboot.org&gt;</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1675512000">- Update to version 4.19
  * Full changelog:
  https://coreboot.org/releases/coreboot-4.19-relnotes.txt</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1693310400">- Update to version 4.21
  * Full changelog:
  https://coreboot.org/releases/coreboot-4.21-relnotes.txt
  https://coreboot.org/releases/coreboot-4.20-relnotes.txt</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1700827200">- Update to version 4.22
  * Full changelog:
  https://coreboot.org/releases/coreboot-4.22-relnotes.txt</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1701259200">- Update to version 4.22.01
  Bugfix release
  * fixed an uninitialized variable error on the
    sandybridge/ivybridge platforms.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="0097d84fcb268a0b9bcbf8e4920d859b2cf6949fafcce318a334044132360986eb9ad06d6ae6d89734b1e199a0952ff162a8ed77ac8bae309418c475fb07a499" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="bp160.1.13"/>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
</package>
<package pkgid="35315ee3a3f819325137ab943221d806bede09c5c7c510718199145a79e1087e4c78789f3fa54b44d9f0030094e2a230207395036a67837d17571fdf47a58fdc" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="bp160.1.1"/>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- fix CVE-2025-68161 bsc#1256411
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="43e08d734510782279bb3b6c94389dd124289464b45654315391a869f39952c7591cf7dde9e5b878e137b74cdd5399b2d779080203dbd016ed37a01d8a4fd9af" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp160.1.1"/>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515200">- Update to version 1.14.1:
  * This release primarily addresses security vulnerabilities affecting Go
    versions prior to Go 1.25.6 and Go 1.24.12
    (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
    CVE-2025-68119).
    It also includes performance improvements to the proxy plugin via
    multiplexed connections, along with various documentation updates.
- skip flaky tests</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515201">- address more unstable unstable tests under aarch64 and s390x</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1772884800">- Update to version 1.14.2:
  * plugin/reload: Allow disabling jitter with 0s
  * bump deps
  * plugin/forward: fix parsing error when handling TLS+IPv6 address
  * plugin/loop: use crypto/rand for query name generation
  * plugin: reorder rewrite before acl to prevent bypass
  * fix(rewrite): fix cname target rewrite for CNAME chains
  * fix(kubernetes): panic on empty ListenHosts
  * chore: bump minimum Go version to 1.25
  * feat(proxyproto): add proxy protocol support
  * refactor(cache): modernize with generics
  * Add metadata for response Type and Class to Log
  * docs: clarify kubernetes auth docs
  * fix: return SOA and NS records when queried for a record CNAMEd to origin
- fixes bsc#1259320 CVE-2026-26017
- fixes bsc#1259319 CVE-2026-26018</changelog>
</package>
<package pkgid="5b7d5e1cee7920cbcca65064626b4ccd67a7b430ecbb09a6bb096ee93470ab2906f154c2f0d8daa435e2852eda866ee941c546e2b0e226bf83024fc3e345bd0b" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.14.3" rel="bp160.1.1"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 https://bugzilla.suse.com/show_bug.cgi?id=1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515200">- Update to version 1.14.1:
  * This release primarily addresses security vulnerabilities affecting Go
    versions prior to Go 1.25.6 and Go 1.24.12
    (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
    CVE-2025-68119).
    It also includes performance improvements to the proxy plugin via
    multiplexed connections, along with various documentation updates.
- skip flaky tests</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515201">- address more unstable unstable tests under aarch64 and s390x</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1772884800">- Update to version 1.14.2:
  * plugin/reload: Allow disabling jitter with 0s
  * bump deps
  * plugin/forward: fix parsing error when handling TLS+IPv6 address
  * plugin/loop: use crypto/rand for query name generation
  * plugin: reorder rewrite before acl to prevent bypass
  * fix(rewrite): fix cname target rewrite for CNAME chains
  * fix(kubernetes): panic on empty ListenHosts
  * chore: bump minimum Go version to 1.25
  * feat(proxyproto): add proxy protocol support
  * refactor(cache): modernize with generics
  * Add metadata for response Type and Class to Log
  * docs: clarify kubernetes auth docs
  * fix: return SOA and NS records when queried for a record CNAMEd to origin
- fixes bsc#1259320 CVE-2026-26017
- fixes bsc#1259319 CVE-2026-26018</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1777809600">- Update to version 1.14.3:
  * This release introduces Windows service support, along with full TSIG
    verification across DoH, DoH3, QUIC, and gRPC transports, and improved
    TSIG propagation and DoH request validation.
  * It also adds optional TLS for the metrics endpoint.
  * Performance and stability are improved through cache prefetching, QUIC
    optimizations, and a new max_age option in the forward plugin.
  * Additional updates include enhanced SVCB/HTTPS support, improved zone
    transfer behavior, and various DNSSEC, PROXY protocol, and concurrency
    fixes.
  * The release is built with Go 1.26.2, which includes security
    fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810,
    CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283,
    and CVE-2026-27140, and also includes fixes for CVE-2026-32936,
    CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.</changelog>
</package>
<package pkgid="acaca2d52f2aa808b7d7c9e174a095236cceff1811a1c6f2f3e9b312ef735cff19b1145b401d2922e36523b2ebb2ff93eb9ccd5f46af795f0832bb00f3366f42" name="coredns" arch="x86_64">
  <version epoch="0" ver="1.14.4" rel="bp160.1.1"/>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 https://bugzilla.suse.com/show_bug.cgi?id=1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515200">- Update to version 1.14.1:
  * This release primarily addresses security vulnerabilities affecting Go
    versions prior to Go 1.25.6 and Go 1.24.12
    (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
    CVE-2025-68119).
    It also includes performance improvements to the proxy plugin via
    multiplexed connections, along with various documentation updates.
- skip flaky tests</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515201">- address more unstable unstable tests under aarch64 and s390x</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1772884800">- Update to version 1.14.2:
  * plugin/reload: Allow disabling jitter with 0s
  * bump deps
  * plugin/forward: fix parsing error when handling TLS+IPv6 address
  * plugin/loop: use crypto/rand for query name generation
  * plugin: reorder rewrite before acl to prevent bypass
  * fix(rewrite): fix cname target rewrite for CNAME chains
  * fix(kubernetes): panic on empty ListenHosts
  * chore: bump minimum Go version to 1.25
  * feat(proxyproto): add proxy protocol support
  * refactor(cache): modernize with generics
  * Add metadata for response Type and Class to Log
  * docs: clarify kubernetes auth docs
  * fix: return SOA and NS records when queried for a record CNAMEd to origin
- fixes bsc#1259320 CVE-2026-26017
- fixes bsc#1259319 CVE-2026-26018</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1777809600">- Update to version 1.14.3:
  * This release introduces Windows service support, along with full TSIG
    verification across DoH, DoH3, QUIC, and gRPC transports, and improved
    TSIG propagation and DoH request validation.
  * It also adds optional TLS for the metrics endpoint.
  * Performance and stability are improved through cache prefetching, QUIC
    optimizations, and a new max_age option in the forward plugin.
  * Additional updates include enhanced SVCB/HTTPS support, improved zone
    transfer behavior, and various DNSSEC, PROXY protocol, and concurrency
    fixes.
  * The release is built with Go 1.26.2, which includes security
    fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810,
    CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283,
    and CVE-2026-27140, and also includes fixes for CVE-2026-32936,
    CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1781352000">- Update to version 1.14.4:
  * plugin/proxyproto: Prevent nil pointer dereference when dropping malformed
    PROXY packets
  * Bump dependencies
  * plugin/cache: allow cache TTLs above default 3600s
  * plugin/dnssec: sign each RRset with the zone that owns its name, not the
    query zone
  * dnsserver: use http.LocalAddrContextKey for DoH local address
  * build: add loong64 arch support
  * core: bound HTTP/3 request header size for DoH3
  * fix: reject invalid any and local config
  * plugin/forward: add hostname resolution support for TO endpoints
  * fix(kubernetes): remove debug fmt.Println from multicluster zone validation
  * feat(core): expose TLS ConnectionState (SNI) for DoQ
  * fix: use descriptive error for unknown block options in health and log
    plugins
  * plugin/forward: Forward NODATA responses to Next handler
  * fix: reject unknown chaos block options
  * fix: reject unknown trace and dnstap block options
  * fix: reject unknown ready plugin properties
  * pkg/tls: remove duplicate cipher suites
  * fix(azure): apply `access` mode to every zone in the same block
  * feat(secondary): add fallthrough support
  * fix(cache): prefer positive cache over SERVFAIL in ncache
  * plugin/file: trigger reload of zones based on mtime
  * plugin/dnstap: feature: added incoming connection support
  * plugin/file: canonicalize escape form in owner names
  * feat(cache): add optional verify timeout to serve_stale</changelog>
</package>
<package pkgid="953987db4c7c9bbaf5a64d6d1a558d164b6eccbfe4691b0d6882c0e126f9bf9b33473ef91d0480ebc02a67c00a3a17666a31a0a141914eec00a2a887a9131be5" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.11.3" rel="bp160.1.13"/>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1585137600">- Update to version 1.6.7:
  * Required by Kubernetes 1.18
  * make -f Makefile.doc (#3633)
  * Update date on notes (#3632)
  * Remove all shell presubmits (#3631)
  * presubmit tests (#3630)
  * presubmit: add whitespace test in go (#3629)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.1 to 0.17.2 (#3621)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.5 to 1.28.9 (#3625)
  * build(deps): bump github.com/prometheus/common from 0.7.0 to 0.9.1 (#3622)</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1594728000">- fix vendoring to build against go 1.13+</changelog>
  <changelog author="rbrown@suse.com" date="1598875200">- Update to version 1.7.0:
  * Update release note date for 1.7.0 (#3950)
  * Bump version to 1.7.0 (#3782)
  * plugin/kubernetes: fix tombstone unwrapping (#3924)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.12 to 1.32.1 (#3948)
  * transfer deferred (#3949)
  * Update release note of 1.7.0 (#3947)
  * Regenerate man page (#3946)
  * weight for SRV records should be at least 1 (#3931)
  * update k8s version u=in circleci (#3942)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.7 to 1.31.12 (#3933)
  * build(deps): bump google.golang.org/api from 0.25.0 to 0.26.0 (#3932)
  * plugin/azure: Fix environment option (#3922)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.31.4 to 1.31.7 (#3921)
  * k8s_external can now resolve CNAME returned by AWS ELB/NLB (#3916)
  * plugin/forward/grpc: Revert forward/grpc policy dedup (#3919)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.0 to 1.24.1 (#3914)
  * build(deps): bump google.golang.org/api from 0.24.0 to 0.25.0 (#3912)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3910)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.2 to 0.18.3 (#3909)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.29 to 1.31.4 (#3908)
  * Improvements in the documentation (README.md) (#3907)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/common from 0.9.1 to 0.10.0 (#3894)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.24 to 1.30.29 (#3895)
  * build(deps): bump google.golang.org/api from 0.23.0 to 0.24.0 (#3896)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.2 to 1.24.0 (#3897)
  * build(deps): bump github.com/golang/protobuf from 1.4.1 to 1.4.2 (#3893)
  * plugin/kubernetes: handle tombstones in default processor (#3890)
  * plugin/kubernetes: Handle endpoint tombstones (#3887)
  * fix readme (#3889)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3884)
  * build(deps): bump github.com/golang/protobuf from 1.4.0 to 1.4.1 (#3883)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.19 to 1.30.24 (#3882)
  * build(deps): bump google.golang.org/api from 0.22.0 to 0.23.0 (#3881)
  * Fix query for SOA record for delegated zone (#3875)
  * Fix plugin forward fuzz target (#3877)
  * plugin/kubernetes: Mention remote IP requirement for autopath and metadata in README (#3876)
  * always add client metadata (#3874)
  * fix description of bufsize plugin (#3873)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.14 to 1.30.19 (#3872)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.23.1 to 1.23.2 (#3871)
  * build(deps): bump github.com/prometheus/client_golang (#3870)
  * plugin/kubernetes: Don't panic with metadata enabled and pods mode not verified (#3869)
  * Fix CIDR in example (#3864)
  * Fix NSID not being set on cached responses (#3822)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.20.0 to 0.22.0 (#3859)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.9 to 1.30.14 (#3858)
  * build(deps): bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#3857)
  * Run go generate (#3856)
  * Fix mixed indentation within tests (#3855)
  * not implemented yet (#3851)
  * Fix readme test by removing extra `~` (#3850)
  * auto make -f Makefile.doc
  * plugin/dns64: update readme and owners (#3848)
  * Fix to: (#3840)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.5 to 1.4.0 (#3845)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.7 to 1.30.9 (#3843)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.1 to 0.18.2 (#3841)
  * Remove grobie from maintainers (#3833)
  * introduce myself to some components (#3831)
  * remove ignored option at kubernetes plugin (#3737)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.0 to 0.18.1 (#3827)
  * auto go mod tidy
  * build(deps): bump google.golang.org/grpc from 1.28.0 to 1.28.1 (#3825)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.0 to 0.18.1 (#3826)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.30.4 to 1.30.7 (#3828)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.22.0 to 1.23.1 (#3829)
  * plugin/forward: crash if using https (#3817)
  * Remove all editor stuff from .gitignore (#3820)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.0 to 4.0.2 (#3813)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.33 to 1.30.4 (#3814)
  * correct metrics name of cache size (#3805)
  * Detail metrics name changes (#3798)
  * auto make -f Makefile.doc
  * Update more metrics names (#3799)
  * Change the recommened version to 1.14 (as we use 1.14 by default) (#3801)
  * auto make -f Makefile.doc
  * Move doc test to workflow (#3800)
  * auto go mod tidy
  * Update various vendor dependencies (#3785)
  * introduce metric naming test (#3789)
  * auto go mod tidy
  * Update k8s.io/[api|apimachinery|client-go] to v0.18.0 (#3796)
  * remove federation (#3794)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.29 to 1.29.34 (#3790)
  * Remove top level clutter: move fixup_file_mtime (#3786)
  * regitry reload metrics (#3784)
  * Fix plugin name in project README  (#3683)
  * Fix 1.7.0 notes. (#3781)
  * Add 1.7.0 notes already (#3779)
  * Add CI test for man page updates (#3729)
  * Documentation improvements for dns64 plugin (#3777)
  * Cleanup metrics (#3776)
  * add known issue (#3770)
  * Add dns64 plugin (#3534)
  * export config file hash in a metric (#3768)
  * Bump to version 1.6.9 (#3773)
  * release: up the version to 1.6.8 (#3772)
  * 1.6.8 release notes: set date to today (#3771)
  * Bumb travis Go version to 1.14 (#3716)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.24 to 1.29.29 (#3763)
  * build(deps): bump github.com/miekg/dns from 1.1.28 to 1.1.29 (#3762)
  * send token in the header instead of api call (#3764)
  * plugin/cache: fix negative cache masking cases (#3744)
  * register missing metric (#3756)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.17.3 to 0.17.4 (#3750)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.27 to 1.1.28 (#3748)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.4 to 1.3.5 (#3753)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.19 to 1.29.24 (#3752)
  * build(deps): bump github.com/prometheus/client_golang (#3749)
  * build(deps): bump google.golang.org/grpc from 1.27.1 to 1.28.0 (#3747)
  * build(deps): bump k8s.io/apimachinery from 0.17.3 to 0.17.4 (#3746)
  * parse.HostPortorFile: return error when 0 found (#3742)
  * Add missing PR to release notes (#3743)
  * Add private DNS support for azure plugin (#3516)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.14 to 1.29.19 (#3740)
  * build(deps): bump github.com/prometheus/client_golang (#3739)
  * build(deps): bump google.golang.org/api from 0.15.0 to 0.20.0 (#3738)
  * auto go mod tidy
  * Update etcd and grpc to latest version (#3733)
  * Initial set of release notes for 1.6.8 (#3728)
  * doc: regen man-pages (#3725)
  * Add configuration flag to set if RecursionDesired should be set on health checkers in Forward-plugin (#3679)
  * validate object implements the corresponding interface (#3724)
  * Update README.md (#3721)
  * fix link (#3719)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.8 to 1.29.14 (#3714)
  * auto go mod tidy
  * build(deps): bump github.com/golang/protobuf from 1.3.3 to 1.3.4 (#3713)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3711)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.21.0 to 1.22.0 (#3710)
  * auto go mod tidy
  * build(deps): bump github.com/caddyserver/caddy from 1.0.4 to 1.0.5 (#3712)
  * Fix placeholders in LICENSE (#3707)
  * explain drop metric (#3706)
  * auto go mod tidy
  * bump client-go and api (#3694)
  * plugin/hosts: Modifies NODATA handling (#3536)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3691)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.29.3 to 1.29.8 (#3692)
  * return all records with matching ip (#3687)
  * metrics: add type to latency as well (#3685)
  * Replacing 'HTTP' by 'HTTPS' for securing links (#3682)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.20.1 to 1.21.0 (#3675)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.13 to 1.29.3 (#3676)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 (#3674)
  * plugin/template: fix panic when missing next handler (#3672)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#3666)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.28.9 to 1.28.13 (#3667)
  * build(deps): bump github.com/prometheus/client_golang (#3665)
  * plugin/pkg/up: make default intervals shorter (#3651)
  * Update README.md (#3655)
  * Add exponential backoff to healthcheck (#3643)
  * plugins/forward: Add max_concurrent option (#3640)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3647)
  * build(deps): bump github.com/golang/protobuf from 1.3.2 to 1.3.3 (#3646)
  * plugin/kubernetes: fix metadata (#3642)
  * presubmit: test README.md sections (#3644)
  * presubmit: improve output (#3641)
  * presubmit: check import path ordering (#3636)
  * fix error formatting (#3639)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.8.0:
  * release: up version to 1.8.0 (#4225)
  * add default reviewers for circleci config (#4222)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.33 to 1.1.34 (#4217)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.7 to 1.35.9 (#4213)
  * build(deps): bump github.com/prometheus/client_golang (#4214)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.27.0 to 1.27.1 (#4212)
  * auto make -f Makefile.doc
  * plugin/autopath: slightly tweaks the docs (#4188)
  * cache: do the msg copy right (#4207)
  * reduce sleeps (#4205)
  * Add #4171 in notes (#4204)
  * notes: update with latest (#4203)
  * deps: bump miekg/dns to new version (#4201)
  * plugin/transfer: remove duplicate code (#4200)
  * plugin/cache: fix removing OPT (#4190)
  * notes: add dnstap PR (#4197)
  * [plugin][trace] - Have a consistent spanName (#4171)
  * auto make -f Makefile.doc
  * plugin/dnstap: various cleanups (#4179)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4195)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.35.2 to 1.35.7 (#4191)
  * auto go mod tidy
  * build(deps): bump github.com/cenkalti/backoff/v4 from 4.0.2 to 4.1.0 (#4192)
  * build(deps): bump github.com/miekg/dns from 1.1.31 to 1.1.32 (#4193)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4194)
  * notes: more PR and clarify backwards incompat changes (#4185)
  * core: fix crash with no plugins (#4184)
  * fix alpn for http/2 upgrade when using DoH (#4182)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.26.0 to 1.27.0 (#4177)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4176)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.32 to 1.35.2 (#4175)
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.1 to 0.2.2 (#4174)
  * fix lameduck docs (#4169)
  * More 1.8.0 notes updates: add latest merged PRs (#4168)
  * dont return 200 during shutdown (#4167)
  * plugins/auto: allow fallthrough if no zone match (#4166)
  * update README examples to use transfer plugins (#4163)
  * doh support: make no TLS config fatal (#4162)
  * Add proto and remote tags to trace plugin (#4159)
  * update 1.8.0 notes (#4156)
  * plugin/cache: Fix filtering (#4148)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.22 to 1.34.32 (#4153)
  * build(deps): bump k8s.io/client-go from 0.19.1 to 0.19.2 (#4150)
  * build(deps): bump github.com/prometheus/common from 0.13.0 to 0.14.0 (#4149)
  * Add notes for next 1.8.0 release (#4143)
  * auto make -f Makefile.doc
  * Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
  * auto go mod tidy
  * For caddy v1 in our org (#4018)
  * goreport card fixes (#4139)
  * coredns: bump version to 1.7.1 (#4136)
  * plugin/hosts: make hosts plugin cursive (#4131)
  * cache: default to DNSSEC (#4085)
  * notes: update 1.7.1 (#4128)
  * auto go mod tidy
  * bump prometheus with zipkin (#4109)
  * plugin/forward: fix panic when `expire` is configured as 0s (#4115)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.18 to 1.34.22 (#4118)
  * auto make -f Makefile.doc
  * plugin/forward: add hit/miss metrics for connection cache (#4114)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.19.0 to 0.19.1 (#4120)
  * auto go mod tidy
  * build(deps): bump github.com/farsightsec/golang-framestream (#4117)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4124)
  * plugin/trace: fix struct allignment (#4112)
  * plugin/forward: init ClientSessionCache in tls.Config (#4108)
  * auto go mod tidy
  * build(deps): bump github.com/dnstap/golang-dnstap from 0.2.0 to 0.2.1 (#4107)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.13 to 1.34.18 (#4105)
  * Fix trailing whitespace (#4103)
  * Fix some typos in comments. (#4100)
  * clouddns,route53: fix lingering goroutines after restart (#4096)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.5 to 1.34.13 (#4092)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.8 to 0.19.0 (#4095)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4090)
  * Update the 1.7.1 notes (#4086)
  * auto make -f Makefile.doc
  * Enable debug globally if enabled in any server config (#4007)
  * cleanup tempfiles for erratic_autopath_test (#4080)
  * fix misspell (#4081)
  * Update README.md (#4068)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.34.0 to 1.34.5 (#4072)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.6 to 0.18.8 (#4074)
  * auto go mod tidy
  * build(deps): bump k8s.io/api from 0.18.6 to 0.18.8 (#4073)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#4070)
  * pkg/upstream: set edns0 and Do when required (#4055)
  * Bump to golang 1.15 (#4064)
  * auto go mod tidy
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4052)
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.25.0 to 1.26.0 (#4050)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.17 to 1.34.0 (#4054)
  * auto make -f Makefile.doc
  * plugin/etcd: update documention (#4049)
  * auto make -f Makefile.doc
  * plugin/template: Add client IP data (#4034)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.30 to 1.1.31 (#4043)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.12 to 1.33.17 (#4041)
  * backend: fix root zone usage (#4039)
  * Fix wildcard records issue in rout53 plugin (#4038)
  * 1.7.x note fixes (#4033)
  * Update coredns-1.6.9.md (#4031)
  * Update coredns-1.7.0.md (#4030)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.7 to 1.33.12 (#4027)
  * Add initial notes for 1.7.1 (#4026)
  * auto go mod tidy
  * using promauto package to ensure all created metrics are properly registered (#4025)
  * register HealthcheckBrokenCount (#4021)
  * auto make -f Makefile.doc
  * Disable debug mode for tracing - removes extra logging (#4016)
  * ignore vendor when presubmit test (#3999)
  * fix metric naming test (#4017)
  * Manually update client-go to v0.18.6 (#4015)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.5 to 1.33.7 (#4011)
  * build(deps): bump k8s.io/apimachinery from 0.18.5 to 0.18.6 (#4012)
  * Improve gRPC Plugin when backend is not available (#3966)
  * Add DCO requirement in Contributing guidelines (#4008)
  * auto go mod tidy
  * build(deps): bump github.com/miekg/dns from 1.1.29 to 1.1.30 (#4004)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.33.1 to 1.33.5 (#4003)
  * build(deps): bump github.com/Azure/go-autorest/autorest (#4002)
  * build(deps): bump google.golang.org/api from 0.28.0 to 0.29.0 (#4001)
  * remove TestProxyClose (#4005)
  * Minor grammatical fixes to release notes (#3998)
  * Revert "Implement notifies for transfer plugin (#3972)" (#3995)
  * Implement notifies for transfer plugin (#3972)
  * auto go mod tidy
  * build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.24.1 to 1.25.0 (#3991)
  * build(deps): bump github.com/opentracing/opentracing-go (#3990)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.11 to 1.33.1 (#3992)
  * Add timeouts for http server (#3920)
  * Cleanup tempfiles (#3986)
  * complete nsid plugin test case (#3981)
  * complete transfer plugin  test case (#3967)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.4 to 0.18.5 (#3975)
  * auto go mod tidy
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.6 to 1.32.11 (#3976)
  * auto go mod tidy
  * build(deps): bump github.com/prometheus/client_golang (#3979)
  * build(deps): bump github.com/Azure/go-autorest/autorest/azure/auth (#3980)
  * auto go mod tidy
  * build(deps): bump k8s.io/apimachinery from 0.18.4 to 0.18.5 (#3978)
  * plugin/cache/forward: Clean up grammar/wording in forward &amp; cache metrics descriptions. (#3971)
  * plugin/forward: remove exp backoff stuff (#3970)
  * format and add newline (#3969)
  * auto make -f Makefile.doc
  * completed metrics of cache and forward (#3962)
  * add test case of remote ip (#3964)
  * auto go mod tidy
  * build(deps): bump google.golang.org/api from 0.26.0 to 0.28.0 (#3960)
  * auto go mod tidy
  * build(deps): bump k8s.io/client-go from 0.18.3 to 0.18.4 (#3956)
  * build(deps): bump github.com/prometheus/client_golang (#3957)
  * build(deps): bump github.com/aws/aws-sdk-go from 1.32.1 to 1.32.6 (#3961)
  * Update dns64 plugin bugs list (#3955)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667304000">- Update to version 1.10.0:
  * core: add log listeners for k8s_event plugin (#5451)
  * core: log DoH HTTP server error logs in CoreDNS format (#5457)
  * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
  * plugin/acl: add support for extended DNS errors (#5532)
  * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
  * plugin/cache: add cache disable option (#5540)
  * plugin/cache: add metadata for wildcard record responses (#5308)
  * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
  * plugin/cache: correct responses to Authenticated Data requests (#5191)
  * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
  * plugin/file: add metadata for wildcard record responses (#5308)
  * plugin/forward: enable multiple forward declarations (#5127)
  * plugin/forward: health_check needs to normalize a specified domain name (#5543)
  * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
  * plugin/header: add support for query modification (#5556)
  * plugin/health: bypass proxy in self health check (#5401)
  * plugin/health: don't go lameduck when reloading (#5472)
  * plugin/k8s_external: add support for PTR requests (#5435)
  * plugin/k8s_external: resolve headless services (#5505)
  * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
  * plugin/ready: reset list of readiness plugins on startup (#5492)
  * plugin/rewrite: add PTR records to supported types (#5565)
  * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
  * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
  * plugin/rewrite: support min and max TTL values (#5508)
  * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
  * plugin/trace: read trace context info from headers for DOH (#5439)
  * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
  * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
  * core: update golang.org/x/crypto to fix CVE-2022-27191
  * plugin/acl: adding a check to parse out zone info
  * plugin/dnstap: support FQDN TCP endpoint
  * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
  * plugin/template: return SERVFAIL for zone-match regex-no-match case</changelog>
  <changelog author="andrea.manzini@suse.com" date="1695124800">- Update to version 1.11.1:
  * Revert “plugin/forward: Continue waiting after receiving malformed responses
  * plugin/dnstap: add support for “extra” field in payload
  * plugin/cache: fix keepttl parsing
- Update to version 1.11.0:
  * Adds support for accepting DNS connections over QUIC (doq).
  * Adds CNAME target rewrites to the rewrite plugin.
  * Plus many bug fixes, and some security improvements.
  * This release introduces the following backward incompatible changes:
  + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,
    since all supported K8s versions now use Endpointslice.
  + The bufsize plugin changed its default size limit value to 1232
  + Some changes to forward plugin metrics.
- Update to version 1.10.1:
  * Corrected architecture labels in multi-arch image manifest
  * A new plugin timeouts that allows configuration of server listener timeout durations
  * acl can drop queries as an action
  * template supports creating responses with extended DNS errors
  * New weighted policy in loadbalance
  * Option to serve original record TTLs from cache</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706184000">- Added patch fix-CVE-2024-0874.patch to fix CVE-2024-0874: coredns: CD bit response is cached and served later</changelog>
  <changelog author="andrea.manzini@suse.com" date="1709035200">- Update to version 1.11.2:
  * bump dependencies
  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * fix: make the codeowners link relative (#6397)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
  * Add PITS Global Data Recovery Services as an adopter (#6304)
  * Handle UDP responses that overflow with TC bit with test case (#6277)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
- Dropped patch fix-CVE-2024-0874.patch as already included in upstream</changelog>
  <changelog author="andrea.manzini@suse.com" date="1712664000">- Update to upstream head (git commit #5a52707):
  * bump deps to address security issue CVE-2024-22189
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * add plusserver to adopters (#6565)
  * Change the log flags to be a variable that can be set prior to calling Run (#6546)
  * Enable Prometheus native histograms (#6524)
  * forward: respect context (#6483)
  * add client labels to k8s plugin metadata (#6475)
  * fix broken link in webpage (#6488)
  * Repo controlled Go version (#6526)
  * removed the mutex locks with atomic bool (#6525)
- testsuite run during build (2 tests are skipped due to network requirement)
- note: 1.11.2 was briefly tagged/released and then revoked https://github.com/coredns/coredns/issues/6454</changelog>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
</package>
<package pkgid="1936ee53a68b68147b168b3f2ab98712dda9dddb86fd12b65a526994a2a91c12b0eec4e2fb79dd219f94cb9ce734f7df2497ad2e040a87bb128ac0013034f8fc" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.14.0" rel="bp160.1.1"/>
  <changelog author="andrea.manzini@suse.com" date="1726747200">- Update to version 1.11.3:
  * optimize the performance for high qps (#6767)
  * bump deps
  * Fix zone parser error handling (#6680)
  * Add alternate option to forward plugin (#6681)
  * fix: plugin/file: return error when parsing the file fails (#6699)
  * [fix:documentation] Clarify autopath README (#6750)
  * Fix outdated test (#6747)
  * Bump go version from 1.21.8 to 1.21.11 (#6755)
  * Generate zplugin.go correctly with third-party plugins (#6692)
  * dnstap: uses pointer receiver for small response writer (#6644)
  * chore: fix function name in comment (#6608)
  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1730980800">- Update to version 1.11.3+git129.387f34d:
  * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)
    build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
  * core: set cache-control max-age as integer, not float (#6764)
  * Issue-6671: Fixed the order of plugins. (#6729)
  * `root`: explicit mark `dnssec` support (#6753)
  * feat: dnssec load keys from AWS Secrets Manager (#6618)
  * fuzzing: fix broken oss-fuzz build (#6880)
  * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
  * Update .go-version to 1.23.2 (#6920)
  * plugin/rewrite: Add "revert" parameter for EDNS0 options (#6893)
  * Added OpenSSF Scorecard Badge (#6738)
  * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
  * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
  * feature: log queue and buffer memory size configuration (#6591)
  * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
  * only create PTR records for endpoints with hostname defined (#6898)
  * fix: reverter should execute the reversion in reversed order (#6872)
  * plugin/etcd: fix etcd connection leakage when reload (#6646)
  * kubernetes: Add useragent (#6484)
  * Update build (#6836)
  * Update grpc library use (#6826)
  * Bump go version from 1.21.11 to 1.21.12 (#6800)
  * Upgrade antonmedv/expr to expr-lang/expr (#6814)
  * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
  * fix TestCorefile1 panic for nil handling (#6802)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1731672000">- Update to version 1.11.4:
  * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
  * dnssec plugin: new option to load keys from AWS Secrets Manager
  * rewrite plugin: new option to revert EDNS0 option rewrites in responses</changelog>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- fix CVE-2025-68161 bsc#1256411
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
</package>
<package pkgid="b551fb899aaa405c3420e2d0310cf84905b2493645b0132201707441e14fbf206a6a305b8a1f0590cd47df9ed6a867d8c0e8a4944627179c8e62f58425c59385" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="bp160.1.1"/>
  <changelog author="andrea.manzini@suse.com" date="1732276800">- Update to version 1.12.0:
  * New multisocket plugin - allows CoreDNS to listen on multiple sockets
  * bump deps</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 bsc#1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515200">- Update to version 1.14.1:
  * This release primarily addresses security vulnerabilities affecting Go
    versions prior to Go 1.25.6 and Go 1.24.12
    (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
    CVE-2025-68119).
    It also includes performance improvements to the proxy plugin via
    multiplexed connections, along with various documentation updates.
- skip flaky tests</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515201">- address more unstable unstable tests under aarch64 and s390x</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1772884800">- Update to version 1.14.2:
  * plugin/reload: Allow disabling jitter with 0s
  * bump deps
  * plugin/forward: fix parsing error when handling TLS+IPv6 address
  * plugin/loop: use crypto/rand for query name generation
  * plugin: reorder rewrite before acl to prevent bypass
  * fix(rewrite): fix cname target rewrite for CNAME chains
  * fix(kubernetes): panic on empty ListenHosts
  * chore: bump minimum Go version to 1.25
  * feat(proxyproto): add proxy protocol support
  * refactor(cache): modernize with generics
  * Add metadata for response Type and Class to Log
  * docs: clarify kubernetes auth docs
  * fix: return SOA and NS records when queried for a record CNAMEd to origin
- fixes bsc#1259320 CVE-2026-26017
- fixes bsc#1259319 CVE-2026-26018</changelog>
</package>
<package pkgid="610647198ca22612a7cd754221d2a987b4b3ebace4e99fdef7582e516c6bc274edc6801e7ee7671bb1dde69e2a7ead1c91ff06da502fb11eb42076c3c1594a16" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.14.3" rel="bp160.1.1"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1743508800">- Update to version 1.12.1:
  * core: Increase CNAME lookup limit from 7 to 10 (#7153)
  * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
  * plugin/kubernetes: Revert "only create PTR records for endpoints with
    hostname defined"
  * plugin/forward: added option failfast_all_unhealthy_upstreams to return
    servfail if all upstreams are down
  * bump dependencies, fixing bsc#1239294 and bsc#1239728
- dropped obscpio generation from _service</changelog>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 https://bugzilla.suse.com/show_bug.cgi?id=1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515200">- Update to version 1.14.1:
  * This release primarily addresses security vulnerabilities affecting Go
    versions prior to Go 1.25.6 and Go 1.24.12
    (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
    CVE-2025-68119).
    It also includes performance improvements to the proxy plugin via
    multiplexed connections, along with various documentation updates.
- skip flaky tests</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515201">- address more unstable unstable tests under aarch64 and s390x</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1772884800">- Update to version 1.14.2:
  * plugin/reload: Allow disabling jitter with 0s
  * bump deps
  * plugin/forward: fix parsing error when handling TLS+IPv6 address
  * plugin/loop: use crypto/rand for query name generation
  * plugin: reorder rewrite before acl to prevent bypass
  * fix(rewrite): fix cname target rewrite for CNAME chains
  * fix(kubernetes): panic on empty ListenHosts
  * chore: bump minimum Go version to 1.25
  * feat(proxyproto): add proxy protocol support
  * refactor(cache): modernize with generics
  * Add metadata for response Type and Class to Log
  * docs: clarify kubernetes auth docs
  * fix: return SOA and NS records when queried for a record CNAMEd to origin
- fixes bsc#1259320 CVE-2026-26017
- fixes bsc#1259319 CVE-2026-26018</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1777809600">- Update to version 1.14.3:
  * This release introduces Windows service support, along with full TSIG
    verification across DoH, DoH3, QUIC, and gRPC transports, and improved
    TSIG propagation and DoH request validation.
  * It also adds optional TLS for the metrics endpoint.
  * Performance and stability are improved through cache prefetching, QUIC
    optimizations, and a new max_age option in the forward plugin.
  * Additional updates include enhanced SVCB/HTTPS support, improved zone
    transfer behavior, and various DNSSEC, PROXY protocol, and concurrency
    fixes.
  * The release is built with Go 1.26.2, which includes security
    fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810,
    CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283,
    and CVE-2026-27140, and also includes fixes for CVE-2026-32936,
    CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.</changelog>
</package>
<package pkgid="d3d796dbefa29b6e8bb893aeb3942694a633d0d02d91cc73e044e470cab9017579cc5c244ded456ec658f63f909a1decc75f3ef03478ae7b6b2accfac472002b" name="coredns-extras" arch="noarch">
  <version epoch="0" ver="1.14.4" rel="bp160.1.1"/>
  <changelog author="Daniel Mulzer &lt;daniel.mulzer@gmail.com&gt;" date="1746014400">-  Backported quic-go PR #5094: Fix parsing of ifindex from packets
  to ensure compatibility with big-endian architectures
  (see quic-go/quic-go#4978, coredns/coredns#6682).
-  This patch can be removed with the next quic-go release.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1746446400">- Added patch fixquic-go.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1756641600">- Update to version 1.12.3:
  * chore: Minor changes to `Dockerfile` (#7428)
  * Properly create hostname from IPv6 (#7431)
  * Bump deps
  * fix: handle cached connection closure in forward plugin (#7427)
  * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
  * plugin/file: preserve case in SRV record names and targets per RFC 6763
  * fix(auto/file): return REFUSED when no next plugin is available (#7381)
  * Port to AWS Go SDK v2 (#6588)
  * fix(cache): data race when refreshing cached messages (#7398)
  * fix(cache): data race when updating the TTL of cached messages (#7397)
  * chore: fix docs incompatibility (#7390)
  * plugin/rewrite: Add EDNS0 Unset Action (#7380)
  * add args: startup_timeout for kubernetes plugin (#7068)
  * [plugin/cache] create a copy of a response to ensure original data is never
    modified
  * Add support for fallthrough to the grpc plugin (#7359)
  * view: Add IPv6 example match (#7355)
  * chore: enable more rules from revive (#7352)
  * chore: enable early-return and superfluous-else from revive (#7129)
  * test(plugin): improve tests for auto (#7348)
  * fix(proxy): flaky dial tests (#7349)
  * test: add t.Helper() calls to test helper functions (#7351)
  * fix(kubernetes): multicluster DNS race condition (#7350)
  * lint: enable wastedassign linter (#7340)
  * test(plugin): add tests for any (#7341)
  * Actually invoke make release -f Makefile.release during test (#7338)
  * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
  * lint: enable protogetter linter (#7336)
  * lint: enable nolintlint linter (#7332)
  * fix: missing intrange lint fix (#7333)
  * perf(kubernetes): optimize AutoPath slice allocation (#7323)
  * lint: enable intrange linter (#7331)
  * feat(plugin/file): fallthrough (#7327)
  * lint: enable canonicalheader linter (#7330)
  * fix(proxy): avoid Dial hang after Transport stopped (#7321)
  * test(plugin): add tests for pkg/rand (#7320)
  * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
  * fix: loop variable capture and linter (#7328)
  * lint: enable usetesting linter (#7322)
  * test: skip certain network-specific tests on non-Linux (#7318)
  * test(dnsserver): improve core/dnsserver test coverage (#7317)
  * fix(metrics): preserve request size from plugins (#7313)
  * fix: ensure DNS query name reset in plugin.NS error path (#7142)
  * feat: enable plugins via environment during build (#7310)
  * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
  * test(request): improve coverage across package (#7307)
  * test(coremain): Add unit tests (#7308)
  * ci(test-e2e): add Go version setup to workflow (#7309)
  * kubernetes: add multicluster support (#7266)
  * chore: Add new maintainer thevilledev (#7298)
  * Update golangci-lint (#7294)
  * feat: limit concurrent DoQ streams and goroutines (#7296)
  * docs: add man page for multisocket plugin (#7297)
  * Prepare for the k8s api upgrade (#7293)
  * fix(rewrite): truncated upstream response (#7277)
  * fix(plugin/secondary): make transfer property mandatory (#7249)
  * plugin/bind: remove macOS bug mention in docs (#7250)
  * Remove `?bla=foo:443` for `POST` DoH (#7257)
  * Do not interrupt querying readiness probes for plugins (#6975)
  * Added `SetProxyOptions` function for `forward` plugin (#7229)
- removed patch fixquic-go.patch  as already included in upstream</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1757592000">- fix CVE-2025-58063 https://bugzilla.suse.com/show_bug.cgi?id=1249389
- Update to version 1.12.4:
  * bump deps
  * fix(transfer): goroutine leak on axfr err (#7516)
  * plugin/etcd: fix import order for ttl test (#7515)
  * fix(grpc): check proxy list length in policies (#7512)
  * fix(https): propagate HTTP request context (#7491)
  * fix(plugin): guard nil lookups across plugins (#7494)
  * lint: add missing prealloc to backend lookup test (#7510)
  * fix(grpc): span leak on error attempt (#7487)
  * test(plugin): improve backend lookup coverage (#7496)
  * lint: enable prealloc (#7493)
  * lint: enable durationcheck (#7492)
  * Add Sophotech to adopters list (#7495)
  * plugin: Use %w to wrap user error (#7489)
  * fix(metrics): add timeouts to metrics HTTP server (#7469)
  * chore(ci): restrict token permissions (#7470)
  * chore(ci): pin workflow dependencies (#7471)
  * fix(forward): use netip package for parsing (#7472)
  * test(plugin): improve test coverage for pprof (#7473)
  * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
  * plugin/file: fix label offset problem in ClosestEncloser (#7465)
  * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
  * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
  * chore: update Go version to 1.24.6 (#7437)
  * plugin/header: Remove deprecated syntax (#7436)
  * plugin/loadbalance: support prefer option (#7433)
  * Improve caddy.GracefulServer conformance checks (#7416)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1767873600">- fix CVE-2025-68156 https://bugzilla.suse.com/show_bug.cgi?id=1255345
- Update to version 1.14.0:
  * core: Fix gosec G115 integer overflow warnings
  * core: Add regex length limit
  * plugin/azure: Fix slice init length
  * plugin/errors: Add optional show_first flag to consolidate directive
  * plugin/file: Fix for misleading SOA parser warnings
  * plugin/kubernetes: Rate limits to api server
  * plugin/metrics: Implement plugin chain tracking
  * plugin/sign: Report parser err before missing SOA
  * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7
- Update to version 1.13.2:
  * core: Add basic support for DoH3
  * core: Avoid proxy unnecessary alloc in Yield
  * core: Fix usage of sync.Pool to save an alloc
  * core: Fix data race with sync.RWMutex for uniq
  * core: Prevent QUIC reload panic by lazily initializing the listener
  * core: Refactor/use reflect.TypeFor
  * plugin/auto: Limit regex length
  * plugin/cache: Remove superfluous allocations in item.toMsg
  * plugin/cache: Isolate metadata in prefetch goroutine
  * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil
    packages
  * plugin/dnstap: Better error handling (redial &amp; logging) when Dnstap is busy
  * plugin/file: Performance finetuning
  * plugin/forward: Disallow NOERROR in failover
  * plugin/forward: Added support for per-nameserver TLS SNI
  * plugin/forward: Prevent busy loop on connection err
  * plugin/forward: Add max connect attempts knob
  * plugin/geoip: Add ASN schema support
  * plugin/geoip: Add support for subdivisions
  * plugin/kubernetes: Fix kubernetes plugin logging
  * plugin/multisocket: Cap num sockets to prevent OOM
  * plugin/nomad: Support service filtering
  * plugin/rewrite: Pre-compile CNAME rewrite regexp
  * plugin/secondary: Fix reload causing secondary plugin goroutine to leak
- Update to version 1.13.1:
  * core: Avoid string concatenation in loops
  * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
  * plugin/sign: Reject invalid UTF‑8 dbfile token
- Update to version 1.13.0:
  * core: Export timeout values in dnsserver.Server
  * core: Fix Corefile infinite loop on unclosed braces
  * core: Fix Corefile related import cycle issue
  * core: Normalize panics on invalid origins
  * core: Rely on dns.Server.ShutdownContext to gracefully stop
  * plugin/dnstap: Add bounds for plugin args
  * plugin/file: Fix data race in tree Elem.Name
  * plugin/forward: No failover to next upstream when receiving SERVFAIL or
    REFUSED response codes
  * plugin/grpc: Enforce DNS message size limits
  * plugin/loop: Prevent panic when ListenHosts is empty
  * plugin/loop: Avoid panic on invalid server block
  * plugin/nomad: Add a Nomad plugin
  * plugin/reload: Prevent SIGTERM/reload deadlock</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515200">- Update to version 1.14.1:
  * This release primarily addresses security vulnerabilities affecting Go
    versions prior to Go 1.25.6 and Go 1.24.12
    (CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
    CVE-2025-68119).
    It also includes performance improvements to the proxy plugin via
    multiplexed connections, along with various documentation updates.
- skip flaky tests</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1769515201">- address more unstable unstable tests under aarch64 and s390x</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1772884800">- Update to version 1.14.2:
  * plugin/reload: Allow disabling jitter with 0s
  * bump deps
  * plugin/forward: fix parsing error when handling TLS+IPv6 address
  * plugin/loop: use crypto/rand for query name generation
  * plugin: reorder rewrite before acl to prevent bypass
  * fix(rewrite): fix cname target rewrite for CNAME chains
  * fix(kubernetes): panic on empty ListenHosts
  * chore: bump minimum Go version to 1.25
  * feat(proxyproto): add proxy protocol support
  * refactor(cache): modernize with generics
  * Add metadata for response Type and Class to Log
  * docs: clarify kubernetes auth docs
  * fix: return SOA and NS records when queried for a record CNAMEd to origin
- fixes bsc#1259320 CVE-2026-26017
- fixes bsc#1259319 CVE-2026-26018</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1777809600">- Update to version 1.14.3:
  * This release introduces Windows service support, along with full TSIG
    verification across DoH, DoH3, QUIC, and gRPC transports, and improved
    TSIG propagation and DoH request validation.
  * It also adds optional TLS for the metrics endpoint.
  * Performance and stability are improved through cache prefetching, QUIC
    optimizations, and a new max_age option in the forward plugin.
  * Additional updates include enhanced SVCB/HTTPS support, improved zone
    transfer behavior, and various DNSSEC, PROXY protocol, and concurrency
    fixes.
  * The release is built with Go 1.26.2, which includes security
    fixes addressing CVE-2026-32282, CVE-2026-32289, CVE-2026-33810,
    CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283,
    and CVE-2026-27140, and also includes fixes for CVE-2026-32936,
    CVE-2026-33190, CVE-2026-33489, CVE-2026-32934, and CVE-2026-35579.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1781352000">- Update to version 1.14.4:
  * plugin/proxyproto: Prevent nil pointer dereference when dropping malformed
    PROXY packets
  * Bump dependencies
  * plugin/cache: allow cache TTLs above default 3600s
  * plugin/dnssec: sign each RRset with the zone that owns its name, not the
    query zone
  * dnsserver: use http.LocalAddrContextKey for DoH local address
  * build: add loong64 arch support
  * core: bound HTTP/3 request header size for DoH3
  * fix: reject invalid any and local config
  * plugin/forward: add hostname resolution support for TO endpoints
  * fix(kubernetes): remove debug fmt.Println from multicluster zone validation
  * feat(core): expose TLS ConnectionState (SNI) for DoQ
  * fix: use descriptive error for unknown block options in health and log
    plugins
  * plugin/forward: Forward NODATA responses to Next handler
  * fix: reject unknown chaos block options
  * fix: reject unknown trace and dnstap block options
  * fix: reject unknown ready plugin properties
  * pkg/tls: remove duplicate cipher suites
  * fix(azure): apply `access` mode to every zone in the same block
  * feat(secondary): add fallthrough support
  * fix(cache): prefer positive cache over SERVFAIL in ncache
  * plugin/file: trigger reload of zones based on mtime
  * plugin/dnstap: feature: added incoming connection support
  * plugin/file: canonicalize escape form in owner names
  * feat(cache): add optional verify timeout to serve_stale</changelog>
</package>
<package pkgid="bdba86d3205141893765272d42fbb4c92bb8c9cea5ee7de4a3219a78a953932684cc4fd066c4118a4b2765ab104d59cb4f565e89d7e2d98daa1cb9ac163b840e" name="coredns-for-k8s1.30" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="bp160.1.13"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1713441600">- Initial package version 1.11.1
  * Version specified in kubernetes v1.30.0 - https://github.com/kubernetes/kubernetes/blob/v1.30.0/build/dependencies.yaml#L32-L47</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1727179200">- Update to version 1.11.3:
  Noteworthy Changes: https://github.com/coredns/coredns/blob/v1.11.3/notes/coredns-1.11.3.md#noteworthy-changes
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * plugin/forward: Use the correct root domain name in the forward plugin's health checks (#6395)
  * plugin/forward: Handle UDP responses that overflow with TC bit (#6277)
  * plugin/rewrite: fix multi request concurrency issue in cname rewrite (#6407)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
  * plugin/dnstap: add support for "extra" field in payload (#6226)
  * plugin/cache: fix keepttl parsing (#6250)
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * Change the log flags to be a variable that can be set (#6546)
  * Bump go version to 1.21 (#6533)
  * replace the mutex locks in logging with atomic bool for the "on" flag (#6525)
  * Enable Prometheus native histograms (#6524)</changelog>
</package>
<package pkgid="55349bc8e32284137658eb96be7945a6b2c2a2b1f5c9c3bea0258d0fe0d7cc8bee00678a29562f95d9fe74b80978065728f4fe9dae98a05060c12bff1d594c2b" name="coredns-for-k8s1.30-extras" arch="noarch">
  <version epoch="0" ver="1.11.3" rel="bp160.1.13"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1713441600">- Initial package version 1.11.1
  * Version specified in kubernetes v1.30.0 - https://github.com/kubernetes/kubernetes/blob/v1.30.0/build/dependencies.yaml#L32-L47</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1727179200">- Update to version 1.11.3:
  Noteworthy Changes: https://github.com/coredns/coredns/blob/v1.11.3/notes/coredns-1.11.3.md#noteworthy-changes
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * plugin/forward: Use the correct root domain name in the forward plugin's health checks (#6395)
  * plugin/forward: Handle UDP responses that overflow with TC bit (#6277)
  * plugin/rewrite: fix multi request concurrency issue in cname rewrite (#6407)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
  * plugin/dnstap: add support for "extra" field in payload (#6226)
  * plugin/cache: fix keepttl parsing (#6250)
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * Change the log flags to be a variable that can be set (#6546)
  * Bump go version to 1.21 (#6533)
  * replace the mutex locks in logging with atomic bool for the "on" flag (#6525)
  * Enable Prometheus native histograms (#6524)</changelog>
</package>
<package pkgid="ca096ecd2102c0b1ead71a3fb41dc9392974c5e285f7d8d76df1889217b3c28c68f824983aa1da49404e688abf75b6975f638249885a1db8f307969c24191f1b" name="coredns-for-k8s1.31" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="bp160.1.13"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1723809600">- Initial package version 1.11.1
  * Version specified in kubernetes v1.31.0 - https://github.com/kubernetes/kubernetes/blob/v1.31.0/build/dependencies.yaml#L32-L34
  * Changelog – https://github.com/coredns/coredns/releases/tag/v1.11.3</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1727179200">- Update to version 1.11.3:
  Noteworthy Changes: https://github.com/coredns/coredns/blob/v1.11.3/notes/coredns-1.11.3.md#noteworthy-changes
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * plugin/forward: Use the correct root domain name in the forward plugin's health checks (#6395)
  * plugin/forward: Handle UDP responses that overflow with TC bit (#6277)
  * plugin/rewrite: fix multi request concurrency issue in cname rewrite (#6407)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
  * plugin/dnstap: add support for "extra" field in payload (#6226)
  * plugin/cache: fix keepttl parsing (#6250)
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * Change the log flags to be a variable that can be set (#6546)
  * Bump go version to 1.21 (#6533)
  * replace the mutex locks in logging with atomic bool for the "on" flag (#6525)
  * Enable Prometheus native histograms (#6524)</changelog>
</package>
<package pkgid="96044d884eab067d8c35a0af0d8ab3fa42bac53830f3a8e3ef9042c650eaddb70ca21e34689011905e413e44b75ed98fd90227ee243733f37dd31baa474558b1" name="coredns-for-k8s1.31-extras" arch="noarch">
  <version epoch="0" ver="1.11.3" rel="bp160.1.13"/>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1723809600">- Initial package version 1.11.1
  * Version specified in kubernetes v1.31.0 - https://github.com/kubernetes/kubernetes/blob/v1.31.0/build/dependencies.yaml#L32-L34
  * Changelog – https://github.com/coredns/coredns/releases/tag/v1.11.3</changelog>
  <changelog author="Priyanka Saggu &lt;priyanka.saggu@suse.com&gt;" date="1727179200">- Update to version 1.11.3:
  Noteworthy Changes: https://github.com/coredns/coredns/blob/v1.11.3/notes/coredns-1.11.3.md#noteworthy-changes
  * plugin/tls: respect the path specified by root plugin (#6138)
  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
  * plugin/forward: Use the correct root domain name in the forward plugin's health checks (#6395)
  * plugin/forward: Handle UDP responses that overflow with TC bit (#6277)
  * plugin/rewrite: fix multi request concurrency issue in cname rewrite (#6407)
  * plugin/rewrite: add rcode as a rewrite option (#6204)
  * plugin/dnstap: add support for "extra" field in payload (#6226)
  * plugin/cache: fix keepttl parsing (#6250)
  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
  * Change the log flags to be a variable that can be set (#6546)
  * Bump go version to 1.21 (#6533)
  * replace the mutex locks in logging with atomic bool for the "on" flag (#6525)
  * Enable Prometheus native histograms (#6524)</changelog>
</package>
<package pkgid="739fb67b041a378a4983921605742489b6393dad6913c1575078f585e2e8784977644c1753ccd804c3c96be2d5dd188d8eaa2d63b51995ba6af3bdc58e25496e" name="corepack-default" arch="x86_64">
  <version epoch="0" ver="6.1" rel="160000.3.2"/>
  <changelog author="adam.majer@suse.de" date="1641988800">- Use NodeJS 17 as default for TW</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- Use NodeJS 18 as default for TW and for SLE15 SP5</changelog>
  <changelog author="adam.majer@suse.de" date="1666353600">- Use NodeJS 19 as default for TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681905600">- Use NodeJS 20 as default for TW</changelog>
  <changelog author="jsrain@suse.com" date="1682424000">- Use NodeJS 18 as default for ALP</changelog>
  <changelog author="adam.majer@suse.de" date="1686830400">- Rework default versions and include specifics for ALP
- Default version for SLE-12 is set to be 16 - no further updates
  expected since W&amp;S module is not supported in LTSS
- 15 SP6 uses nodejs20 as default (PED-4819)</changelog>
  <changelog author="adam.majer@suse.de" date="1699531200">- Update default TW to nodejs21</changelog>
  <changelog author="xtexchooser@duck.com" date="1706356800">- Add corepack support</changelog>
  <changelog author="adam.majer@suse.de" date="1715860800">- Update TW to 22 and set 15.7 to use it as default</changelog>
  <changelog author="adam.majer@suse.de" date="1731499200">- Update SLFO to current LTS</changelog>
</package>
<package pkgid="6dee0082de5114987be7da1343b135b2fe957bc4adc626812cb02e109954373ef7b1e4a5c21dd978154aaaabe9efcdc211be2eb2c2e546c4b3ba3769e6fcb6a2" name="corepack22" arch="x86_64">
  <version epoch="0" ver="22.15.1" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1733313600">- Update to 22.12.0:
  * require(esm) is now enabled by default
  * Added resizable ArrayBuffer support in Buffer
- CVE-2024-21538.patch: fixes regular expression denial of service
  (bsc#1233856, CVE-2024-21538)
- icu76.1.patch: upstreamed, dropped
- linker_lto_jobs.patch, nodejs-libpath.patch, fix_ci_tests.patch: refreshed
- nodejs.keyring: updated with upstream releaser list
- old_cares.patch: fix with older c-ares</changelog>
  <changelog author="adam.majer@suse.de" date="1733400000">- add python3-setuptools requirements (needed for python 3.13+)</changelog>
  <changelog author="adam.majer@suse.de" date="1734696000">- fix_ci_tests.patch: skip wpt/test-webcrypto on s390x as it has
  unexpected differences between z13 and z15
- external sqlite support only on TW and SLFO</changelog>
  <changelog author="adam.majer@suse.de" date="1735560000">- test/report/test-report-exclude-network.js - removed unit tests that fail in staging</changelog>
  <changelog author="adam.majer@suse.de" date="1737028800">- Update to 22.13.0:
  * Upgrades the Permission Model status from Active Development to Stable.
  * Graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable
  * net: support blocklist in net.connect and net.Server
  * dgram: support blocklist in udp
  * deps updated:
    &gt; cares     -- '1.34.3' -&gt; '1.34.4'
    &gt; ngtcp2    -- '1.3.0' -&gt; '1.9.1'
    &gt; npm       -- '10.9.0' -&gt; '10.9.2'
    &gt; simdjson  -- '3.10.0' -&gt; '3.10.1'
    &gt; simdutf   -- '5.6.1' -&gt; '5.6.4'
    &gt; uv       -- '1.49.1' -&gt; '1.49.2'
- CVE-2024-21538.patch: upstreamed, dropped
- linker_lto_jobs.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1737547200">- Update to 22.13.1:
  * src,loader,permission: throw on InternalWorker use when
    permission model is enabled (bsc#1236251, CVE-2025-23083)
  * src: fix HTTP2 mem leak on premature close and ERR_PROTO
    (bsc#1236250, CVE-2025-23085)
  * deps: Use of Insufficiently Random Values in undici fetch()
    (bsc#1236258, CVE-2025-22150)</changelog>
  <changelog author="adam.majer@suse.de" date="1744286400">- Update to 22.14.0
  * fs: allow exclude option in globs to accept glob patterns
  * lib: add typescript support to STDIN eval
  * module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX
  * module: add findPackageJSON util
  * process: add process.ref() and process.unref() methods
  * sqlite: support TypedArray and DataView in StatementSync
  * src: add --disable-sigusr1 to prevent signal i/o thread
  * src,worker: add isInternalWorker
  * test_runner: add TestContext.prototype.waitFor()
  * test_runner: add t.assert.fileSnapshot()
  * test_runner: add assert.register() API
  * worker: add eval ts input
- openssl_binary_detection.patch fix_ci_tests.patch: refreshed
- Build with PIE (bsc#1239949)</changelog>
  <changelog author="adam.majer@suse.de" date="1744632000">- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: fix build with
  OpenSSL 3.5.0 (bsc#1241050)</changelog>
  <changelog author="adam.majer@suse.de" date="1745409600">- drop http2 priority checks as new nghttp2 dropped this
  unused feature</changelog>
  <changelog author="adam.majer@suse.de" date="1749124800">- Update to 22.15.1
  * fix error handling on async crypto operation (bsc#1243218, CVE-2025-23166)
  * add missing call to uv_fs_req_cleanup (bsc#1243217, CVE-2025-23165)
- changes since 22.15.0:
  * dns: add TLSA record query and parsing
  * assert: improve partialDeepStrictEqual
  * process: add execve
  * tls: implement tls.getCACertificates()
  * v8: add v8.getCppHeapStatistics() method
- old_cares.patch: dropped in favour of bundling until we can update SLE15 cares
- icu_732.patch: handle our ICU version in SLE15
- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: dropped, upstreamed</changelog>
</package>
<package pkgid="2a3a3636b15214f637b12770a72895cc8acab713e663e6f997f542235a749109f0c6c4bb70eb748ca263541577b1b88cc22eddc11fcbea445c7884a543389ded" name="corepack22" arch="x86_64">
  <version epoch="0" ver="22.22.0" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1737028800">- Update to 22.13.0:
  * Upgrades the Permission Model status from Active Development to Stable.
  * Graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable
  * net: support blocklist in net.connect and net.Server
  * dgram: support blocklist in udp
  * deps updated:
    &gt; cares     -- '1.34.3' -&gt; '1.34.4'
    &gt; ngtcp2    -- '1.3.0' -&gt; '1.9.1'
    &gt; npm       -- '10.9.0' -&gt; '10.9.2'
    &gt; simdjson  -- '3.10.0' -&gt; '3.10.1'
    &gt; simdutf   -- '5.6.1' -&gt; '5.6.4'
    &gt; uv       -- '1.49.1' -&gt; '1.49.2'
- CVE-2024-21538.patch: upstreamed, dropped
- linker_lto_jobs.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1737547200">- Update to 22.13.1:
  * src,loader,permission: throw on InternalWorker use when
    permission model is enabled (bsc#1236251, CVE-2025-23083)
  * src: fix HTTP2 mem leak on premature close and ERR_PROTO
    (bsc#1236250, CVE-2025-23085)
  * deps: Use of Insufficiently Random Values in undici fetch()
    (bsc#1236258, CVE-2025-22150)</changelog>
  <changelog author="adam.majer@suse.de" date="1744286400">- Update to 22.14.0
  * fs: allow exclude option in globs to accept glob patterns
  * lib: add typescript support to STDIN eval
  * module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX
  * module: add findPackageJSON util
  * process: add process.ref() and process.unref() methods
  * sqlite: support TypedArray and DataView in StatementSync
  * src: add --disable-sigusr1 to prevent signal i/o thread
  * src,worker: add isInternalWorker
  * test_runner: add TestContext.prototype.waitFor()
  * test_runner: add t.assert.fileSnapshot()
  * test_runner: add assert.register() API
  * worker: add eval ts input
- openssl_binary_detection.patch fix_ci_tests.patch: refreshed
- Build with PIE (bsc#1239949)</changelog>
  <changelog author="adam.majer@suse.de" date="1744632000">- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: fix build with
  OpenSSL 3.5.0 (bsc#1241050)</changelog>
  <changelog author="adam.majer@suse.de" date="1745409600">- drop http2 priority checks as new nghttp2 dropped this
  unused feature</changelog>
  <changelog author="adam.majer@suse.de" date="1749124800">- Update to 22.15.1
  * fix error handling on async crypto operation (bsc#1243218, CVE-2025-23166)
  * add missing call to uv_fs_req_cleanup (bsc#1243217, CVE-2025-23165)
- changes since 22.15.0:
  * dns: add TLSA record query and parsing
  * assert: improve partialDeepStrictEqual
  * process: add execve
  * tls: implement tls.getCACertificates()
  * v8: add v8.getCppHeapStatistics() method
- old_cares.patch: dropped in favour of bundling until we can update SLE15 cares
- icu_732.patch: handle our ICU version in SLE15
- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: dropped, upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1760443200">- Update to 22.20.0
  * doc: stabilize --disable-sigusr1
  * doc: mark path.matchesGlob as stable
  * http: add Agent.agentKeepAliveTimeoutBuffer option
  * http2: add support for raw header arrays in h2Stream.respond()
  * inspector: add http2 tracking support
  * sea: implement execArgvExtension
  * sea: support execArgv in sea config
  * stream: add brotli support to CompressionStream and DecompressionStream
  * test_runner: support object property mocking
  * worker: add cpu profile APIs for worker
- Update to 22.19.0
  * cli: add NODE_USE_SYSTEM_CA=1
  * cli: support ${pid} placeholder in --cpu-prof-name
  * crypto: add tls.setDefaultCACertificates()
  * dns: support max timeout
  * doc: update the instruction on how to verify releases
  * esm: unflag --experimental-wasm-modules
  * http: add server.keepAliveTimeoutBuffer option
  * lib: docs deprecate _http_*
  * net: update net.blocklist to allow file save and file management
  * process: add threadCpuUsage
  * zlib: add dictionary support to zstdCompress and zstdDecompress
- Update to 22.18.0:
  * deps: update amaro to 1.1.0
  * doc: add all watch-mode related flags to node.1
  * doc: add islandryu to collaborators
  * esm: implement import.meta.main
  * fs: allow correct handling of burst in fs-events with AsyncIterator
  * permission: propagate permission model flags on spawn
  * sqlite: add support for readBigInts option in db connection level
  * src,permission: add support to permission.has(addon)
  * url: add fileURLToPathBuffer API
  * watch: add --watch-kill-signal flag
  * worker: make Worker async disposable
- for older changes, please see https://nodejs.org/en/blog</changelog>
  <changelog author="adam.majer@suse.de" date="1763985600">- Update to 22.21.1:
  * src: avoid unnecessary string -&gt; char* -&gt; string round trips
  * src: remove unnecessary shadowed functions on Utf8Value &amp; BufferValue
  * process: fix hrtime fast call signatures
  * http: improve writeEarlyHints by avoiding for-of loop
- Update to 22.21.0:
  * cli: add --use-env-proxy
  * http: support http proxy for fetch under NODE_USE_ENV_PROXY
  * http: add shouldUpgradeCallback to let servers control HTTP upgrades
  * http,https: add built-in proxy support in http/https.request and Agent
  * src: add percentage support to --max-old-space-size
- fix_ci_tests.patch: disable geopoly and fts3 sqlite tests as our
  sqlite does not support these optional features. Use fts4 instead.</changelog>
  <changelog author="adam.majer@suse.de" date="1764244800">- icu_781.patch: Add support for ICU 78.1
- bundle nghttp2 for TW, as upstream is carrying a patch on-top
  due to changes in nghttp2. See:
  https://github.com/nodejs/node/issues/60661</changelog>
  <changelog author="adam.majer@suse.de" date="1768824000">- Update to 22.22.0:
  * deps: updated undici to 6.23.0 (bsc#1256848, CVE-2026-22036)
  * deps: updated bundled c-ares to 1.34.6 (if used)
  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)</changelog>
</package>
<package pkgid="a644519c6d71ef57d7336e002aca89a4fe5117eac9b41cb9da063bead335409352025e0751148d61125037c217a40f25f26b4dd848577f0b73bd754c24365d8d" name="corepack22" arch="x86_64">
  <version epoch="0" ver="22.23.0" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1744286400">- Update to 22.14.0
  * fs: allow exclude option in globs to accept glob patterns
  * lib: add typescript support to STDIN eval
  * module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX
  * module: add findPackageJSON util
  * process: add process.ref() and process.unref() methods
  * sqlite: support TypedArray and DataView in StatementSync
  * src: add --disable-sigusr1 to prevent signal i/o thread
  * src,worker: add isInternalWorker
  * test_runner: add TestContext.prototype.waitFor()
  * test_runner: add t.assert.fileSnapshot()
  * test_runner: add assert.register() API
  * worker: add eval ts input
- openssl_binary_detection.patch fix_ci_tests.patch: refreshed
- Build with PIE (bsc#1239949)</changelog>
  <changelog author="adam.majer@suse.de" date="1744632000">- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: fix build with
  OpenSSL 3.5.0 (bsc#1241050)</changelog>
  <changelog author="adam.majer@suse.de" date="1745409600">- drop http2 priority checks as new nghttp2 dropped this
  unused feature</changelog>
  <changelog author="adam.majer@suse.de" date="1749124800">- Update to 22.15.1
  * fix error handling on async crypto operation (bsc#1243218, CVE-2025-23166)
  * add missing call to uv_fs_req_cleanup (bsc#1243217, CVE-2025-23165)
- changes since 22.15.0:
  * dns: add TLSA record query and parsing
  * assert: improve partialDeepStrictEqual
  * process: add execve
  * tls: implement tls.getCACertificates()
  * v8: add v8.getCppHeapStatistics() method
- old_cares.patch: dropped in favour of bundling until we can update SLE15 cares
- icu_732.patch: handle our ICU version in SLE15
- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: dropped, upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1760443200">- Update to 22.20.0
  * doc: stabilize --disable-sigusr1
  * doc: mark path.matchesGlob as stable
  * http: add Agent.agentKeepAliveTimeoutBuffer option
  * http2: add support for raw header arrays in h2Stream.respond()
  * inspector: add http2 tracking support
  * sea: implement execArgvExtension
  * sea: support execArgv in sea config
  * stream: add brotli support to CompressionStream and DecompressionStream
  * test_runner: support object property mocking
  * worker: add cpu profile APIs for worker
- Update to 22.19.0
  * cli: add NODE_USE_SYSTEM_CA=1
  * cli: support ${pid} placeholder in --cpu-prof-name
  * crypto: add tls.setDefaultCACertificates()
  * dns: support max timeout
  * doc: update the instruction on how to verify releases
  * esm: unflag --experimental-wasm-modules
  * http: add server.keepAliveTimeoutBuffer option
  * lib: docs deprecate _http_*
  * net: update net.blocklist to allow file save and file management
  * process: add threadCpuUsage
  * zlib: add dictionary support to zstdCompress and zstdDecompress
- Update to 22.18.0:
  * deps: update amaro to 1.1.0
  * doc: add all watch-mode related flags to node.1
  * doc: add islandryu to collaborators
  * esm: implement import.meta.main
  * fs: allow correct handling of burst in fs-events with AsyncIterator
  * permission: propagate permission model flags on spawn
  * sqlite: add support for readBigInts option in db connection level
  * src,permission: add support to permission.has(addon)
  * url: add fileURLToPathBuffer API
  * watch: add --watch-kill-signal flag
  * worker: make Worker async disposable
- for older changes, please see https://nodejs.org/en/blog</changelog>
  <changelog author="adam.majer@suse.de" date="1763985600">- Update to 22.21.1:
  * src: avoid unnecessary string -&gt; char* -&gt; string round trips
  * src: remove unnecessary shadowed functions on Utf8Value &amp; BufferValue
  * process: fix hrtime fast call signatures
  * http: improve writeEarlyHints by avoiding for-of loop
- Update to 22.21.0:
  * cli: add --use-env-proxy
  * http: support http proxy for fetch under NODE_USE_ENV_PROXY
  * http: add shouldUpgradeCallback to let servers control HTTP upgrades
  * http,https: add built-in proxy support in http/https.request and Agent
  * src: add percentage support to --max-old-space-size
- fix_ci_tests.patch: disable geopoly and fts3 sqlite tests as our
  sqlite does not support these optional features. Use fts4 instead.</changelog>
  <changelog author="adam.majer@suse.de" date="1764244800">- icu_781.patch: Add support for ICU 78.1
- bundle nghttp2 for TW, as upstream is carrying a patch on-top
  due to changes in nghttp2. See:
  https://github.com/nodejs/node/issues/60661</changelog>
  <changelog author="adam.majer@suse.de" date="1768824000">- Update to 22.22.0:
  * deps: updated undici to 6.23.0 (bsc#1256848, CVE-2026-22036)
  * deps: updated bundled c-ares to 1.34.6 (if used)
  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)
- node-gyp-addon-gypi.patch: remove double createBuildDir()</changelog>
  <changelog author="adam.majer@suse.de" date="1775736000">- Update to 22.22.2:
  * use null prototype for headersDistinct/trailersDistinct (CVE-2026-21710, bsc#1260455)
  * wrap SNICallback invocation in try/catch (CVE-2026-21637, bsc#1256576)
  * test array index hash collision (CVE-2026-21717, bsc#1260494)
  * use timing-safe comparison in Web Cryptography HMAC and KMAC (CVE-2026-21713, bsc#1260463)
  * handle NGHTTP2_ERR_FLOW_CONTROL error code (CVE-2026-21714, bsc#1260480)
  * include permission check on lib/fs/promises (CVE-2026-21716, bsc#1260462)
  * add permission check to realpath.native (CVE-2026-21715, bsc#1260482)</changelog>
  <changelog author="adam.majer@suse.de" date="1782216000">- Update to 22.23.0
  (CVE-2026-48618, bsc#1268593) tls: normalize hostname for server identity checks
  (CVE-2026-48933, bsc#1268592) crypto: guard WebCrypto cipher output length
  (CVE-2026-48615, bsc#1268598) lib,test: redact proxy credentials in tunnel errors
  (CVE-2026-48619, bsc#1268618) http2: cap originSet size to prevent unbounded memory growth
  (CVE-2026-48928, bsc#1268605) tls: fix case-sensitive SNI context matching
  (CVE-2026-48930, bsc#1268606) dns,net: reject hostnames with embedded NUL bytes
  (CVE-2026-48934, bsc#1268608) tls: bind reusable sessions to authenticated host
  (CVE-2026-48617, bsc#1268554) permission: handle process.chdir on writereport
  (CVE-2026-48931, bsc#1268611) http: fix response queue poisoning in http.Agent
  (CVE-2026-48935, bsc#1268609) permission: disable FileHandle utimes with permission model
  (CVE-2026-48937, bsc#1268555) http2: servers keep accepting data even after sending a `GOAWAY` frame
  (CVE-2026-12151, bsc#1268482) undici: Denial of Service due to unbounded memory growth via WebSocket frames
  (CVE-2026-6733,  bsc#1268479) undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery
  (CVE-2026-9679,  bsc#1268477) undici: vulnerable to HTTP header injection via Set-Cookie percent-decoding
  (CVE-2026-11525, bsc#1268481) undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
  (CVE-2026-27135, bsc#1259853) nghttp2: assertion failure due to missing state validation can lead to DoS
- ngtcp2_bsc1262274.patch: (CVE-2026-40170, bsc#1262274) - ngtcp2: qlog parameters_set stack buffer overflow.
- pacote-bsc1266318.patch: (CVE-2026-9496,  bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS
- ip-address-bsc1268097.patch: (CVE-2026-42338, bsc#1268097) - ip-address: Cross-site scripting via improper HTML escaping of untrusted input
- fix update-alternatives calling when not being used</changelog>
</package>
<package pkgid="ad7f9ce7aac87e6db8fe7949b62bff33e9464d15273c42b084fd157c72f0004aed32b38b34fd5dbd75156aced09060de9aaebe9a2fb1e9ff1b3c0910288fbdf7" name="corepack22" arch="x86_64">
  <version epoch="0" ver="22.23.1" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1744632000">- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: fix build with
  OpenSSL 3.5.0 (bsc#1241050)</changelog>
  <changelog author="adam.majer@suse.de" date="1745409600">- drop http2 priority checks as new nghttp2 dropped this
  unused feature</changelog>
  <changelog author="adam.majer@suse.de" date="1749124800">- Update to 22.15.1
  * fix error handling on async crypto operation (bsc#1243218, CVE-2025-23166)
  * add missing call to uv_fs_req_cleanup (bsc#1243217, CVE-2025-23165)
- changes since 22.15.0:
  * dns: add TLSA record query and parsing
  * assert: improve partialDeepStrictEqual
  * process: add execve
  * tls: implement tls.getCACertificates()
  * v8: add v8.getCppHeapStatistics() method
- old_cares.patch: dropped in favour of bundling until we can update SLE15 cares
- icu_732.patch: handle our ICU version in SLE15
- fab6906c5d1c16b046187485a7cb136b3659d42b.patch: dropped, upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1760443200">- Update to 22.20.0
  * doc: stabilize --disable-sigusr1
  * doc: mark path.matchesGlob as stable
  * http: add Agent.agentKeepAliveTimeoutBuffer option
  * http2: add support for raw header arrays in h2Stream.respond()
  * inspector: add http2 tracking support
  * sea: implement execArgvExtension
  * sea: support execArgv in sea config
  * stream: add brotli support to CompressionStream and DecompressionStream
  * test_runner: support object property mocking
  * worker: add cpu profile APIs for worker
- Update to 22.19.0
  * cli: add NODE_USE_SYSTEM_CA=1
  * cli: support ${pid} placeholder in --cpu-prof-name
  * crypto: add tls.setDefaultCACertificates()
  * dns: support max timeout
  * doc: update the instruction on how to verify releases
  * esm: unflag --experimental-wasm-modules
  * http: add server.keepAliveTimeoutBuffer option
  * lib: docs deprecate _http_*
  * net: update net.blocklist to allow file save and file management
  * process: add threadCpuUsage
  * zlib: add dictionary support to zstdCompress and zstdDecompress
- Update to 22.18.0:
  * deps: update amaro to 1.1.0
  * doc: add all watch-mode related flags to node.1
  * doc: add islandryu to collaborators
  * esm: implement import.meta.main
  * fs: allow correct handling of burst in fs-events with AsyncIterator
  * permission: propagate permission model flags on spawn
  * sqlite: add support for readBigInts option in db connection level
  * src,permission: add support to permission.has(addon)
  * url: add fileURLToPathBuffer API
  * watch: add --watch-kill-signal flag
  * worker: make Worker async disposable
- for older changes, please see https://nodejs.org/en/blog</changelog>
  <changelog author="adam.majer@suse.de" date="1763985600">- Update to 22.21.1:
  * src: avoid unnecessary string -&gt; char* -&gt; string round trips
  * src: remove unnecessary shadowed functions on Utf8Value &amp; BufferValue
  * process: fix hrtime fast call signatures
  * http: improve writeEarlyHints by avoiding for-of loop
- Update to 22.21.0:
  * cli: add --use-env-proxy
  * http: support http proxy for fetch under NODE_USE_ENV_PROXY
  * http: add shouldUpgradeCallback to let servers control HTTP upgrades
  * http,https: add built-in proxy support in http/https.request and Agent
  * src: add percentage support to --max-old-space-size
- fix_ci_tests.patch: disable geopoly and fts3 sqlite tests as our
  sqlite does not support these optional features. Use fts4 instead.</changelog>
  <changelog author="adam.majer@suse.de" date="1764244800">- icu_781.patch: Add support for ICU 78.1
- bundle nghttp2 for TW, as upstream is carrying a patch on-top
  due to changes in nghttp2. See:
  https://github.com/nodejs/node/issues/60661</changelog>
  <changelog author="adam.majer@suse.de" date="1768824000">- Update to 22.22.0:
  * deps: updated undici to 6.23.0 (bsc#1256848, CVE-2026-22036)
  * deps: updated bundled c-ares to 1.34.6 (if used)
  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)
- node-gyp-addon-gypi.patch: remove double createBuildDir()</changelog>
  <changelog author="adam.majer@suse.de" date="1775736000">- Update to 22.22.2:
  * use null prototype for headersDistinct/trailersDistinct (CVE-2026-21710, bsc#1260455)
  * wrap SNICallback invocation in try/catch (CVE-2026-21637, bsc#1256576)
  * test array index hash collision (CVE-2026-21717, bsc#1260494)
  * use timing-safe comparison in Web Cryptography HMAC and KMAC (CVE-2026-21713, bsc#1260463)
  * handle NGHTTP2_ERR_FLOW_CONTROL error code (CVE-2026-21714, bsc#1260480)
  * include permission check on lib/fs/promises (CVE-2026-21716, bsc#1260462)
  * add permission check to realpath.native (CVE-2026-21715, bsc#1260482)</changelog>
  <changelog author="adam.majer@suse.de" date="1782216000">- Update to 22.23.0
  (CVE-2026-48618, bsc#1268593) tls: normalize hostname for server identity checks
  (CVE-2026-48933, bsc#1268592) crypto: guard WebCrypto cipher output length
  (CVE-2026-48615, bsc#1268598) lib,test: redact proxy credentials in tunnel errors
  (CVE-2026-48619, bsc#1268618) http2: cap originSet size to prevent unbounded memory growth
  (CVE-2026-48928, bsc#1268605) tls: fix case-sensitive SNI context matching
  (CVE-2026-48930, bsc#1268606) dns,net: reject hostnames with embedded NUL bytes
  (CVE-2026-48934, bsc#1268608) tls: bind reusable sessions to authenticated host
  (CVE-2026-48617, bsc#1268554) permission: handle process.chdir on writereport
  (CVE-2026-48931, bsc#1268611) http: fix response queue poisoning in http.Agent
  (CVE-2026-48935, bsc#1268609) permission: disable FileHandle utimes with permission model
  (CVE-2026-48937, bsc#1268555) http2: servers keep accepting data even after sending a `GOAWAY` frame
  (CVE-2026-12151, bsc#1268482) undici: Denial of Service due to unbounded memory growth via WebSocket frames
  (CVE-2026-6733,  bsc#1268479) undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery
  (CVE-2026-9679,  bsc#1268477) undici: vulnerable to HTTP header injection via Set-Cookie percent-decoding
  (CVE-2026-11525, bsc#1268481) undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
  (CVE-2026-27135, bsc#1259853) nghttp2: assertion failure due to missing state validation can lead to DoS
- ngtcp2_bsc1262274.patch: (CVE-2026-40170, bsc#1262274) - ngtcp2: qlog parameters_set stack buffer overflow.
- pacote-bsc1266318.patch: (CVE-2026-9496,  bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS
- ip-address-bsc1268097.patch: (CVE-2026-42338, bsc#1268097) - ip-address: Cross-site scripting via improper HTML escaping of untrusted input
- fix update-alternatives calling when not being used</changelog>
  <changelog author="amajer@suse.com" date="1782820800">- Update to 22.23.1:
  http: avoid stream listeners on idle agent sockets (bsc#1269825)</changelog>
</package>
<package pkgid="59aa170c620ec40667b598c45ddb1f159d3764f6b997cff550c54d97fe25e08bfc225c6ee4205e52648abcac01bd0edfa5eb7cae3ccd68b2099faacd5219feee" name="corepack24" arch="x86_64">
  <version epoch="0" ver="24.13.0" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1760443200">- Update to 22.20.0
  * doc: stabilize --disable-sigusr1
  * doc: mark path.matchesGlob as stable
  * http: add Agent.agentKeepAliveTimeoutBuffer option
  * http2: add support for raw header arrays in h2Stream.respond()
  * inspector: add http2 tracking support
  * sea: implement execArgvExtension
  * sea: support execArgv in sea config
  * stream: add brotli support to CompressionStream and DecompressionStream
  * test_runner: support object property mocking
  * worker: add cpu profile APIs for worker
- Update to 22.19.0
  * cli: add NODE_USE_SYSTEM_CA=1
  * cli: support ${pid} placeholder in --cpu-prof-name
  * crypto: add tls.setDefaultCACertificates()
  * dns: support max timeout
  * doc: update the instruction on how to verify releases
  * esm: unflag --experimental-wasm-modules
  * http: add server.keepAliveTimeoutBuffer option
  * lib: docs deprecate _http_*
  * net: update net.blocklist to allow file save and file management
  * process: add threadCpuUsage
  * zlib: add dictionary support to zstdCompress and zstdDecompress
- Update to 22.18.0:
  * deps: update amaro to 1.1.0
  * doc: add all watch-mode related flags to node.1
  * doc: add islandryu to collaborators
  * esm: implement import.meta.main
  * fs: allow correct handling of burst in fs-events with AsyncIterator
  * permission: propagate permission model flags on spawn
  * sqlite: add support for readBigInts option in db connection level
  * src,permission: add support to permission.has(addon)
  * url: add fileURLToPathBuffer API
  * watch: add --watch-kill-signal flag
  * worker: make Worker async disposable
- for older changes, please see https://nodejs.org/en/blog</changelog>
  <changelog author="adam.majer@suse.de" date="1763985600">- Update to 22.21.1:
  * src: avoid unnecessary string -&gt; char* -&gt; string round trips
  * src: remove unnecessary shadowed functions on Utf8Value &amp; BufferValue
  * process: fix hrtime fast call signatures
  * http: improve writeEarlyHints by avoiding for-of loop
- Update to 22.21.0:
  * cli: add --use-env-proxy
  * http: support http proxy for fetch under NODE_USE_ENV_PROXY
  * http: add shouldUpgradeCallback to let servers control HTTP upgrades
  * http,https: add built-in proxy support in http/https.request and Agent
  * src: add percentage support to --max-old-space-size
- fix_ci_tests.patch: disable geopoly and fts3 sqlite tests as our
  sqlite does not support these optional features. Use fts4 instead.</changelog>
  <changelog author="adam.majer@suse.de" date="1763985601">- Initial package for nodejs 24.11.1
  For changes since 22.x, please see https://nodejs.org/en/blog
  or documentation https://nodejs.org/docs/latest-v24.x/api/documentation.html
- Inherit patches form 22.21.1
  * fix_ci_tests.patch, flaky_test_rerun.patch, node-gyp-addon-gypi.patch,
    nodejs-libpath.patch, npm_search_paths.patch, versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1764676800">- v8_nameclash.patch: Backport fix</changelog>
  <changelog author="adam.majer@suse.de" date="1764676801">- icu_781.patch: Add support for ICU 78.1
- bundle nghttp2 for TW, as upstream is carrying a patch on-top
  due to changes in nghttp2. See:
  https://github.com/nodejs/node/issues/60661</changelog>
  <changelog author="adam.majer@suse.de" date="1765195200">- Add support for ICU 77.1</changelog>
  <changelog author="adam.majer@suse.de" date="1765454400">- Update to 24.12.0:
  * http: add optimizeEmptyRequests server option
  * lib: add options to util.deprecate
  * module: mark type stripping as stable
  * node-api: add napi_create_object_with_properties
  * sqlite: allow setting defensive flag
  * src: add watch config namespace
  * src: add an option to make compile cache portable
  * src,permission: add --allow-inspector ability
  * v8: add cpu profile
  for details, see https://nodejs.org/en/blog/release/v24.12.0
- nodejs-libpath.patch: refreshed
- fix_ci_tests.patch: add fix on 32bit platforms</changelog>
  <changelog author="adam.majer@suse.de" date="1765800000">- npm-path-normalization.patch: patch npm bug that causes build
  failure wit localhost-npm-registry</changelog>
  <changelog author="adam.majer@suse.de" date="1768478400">- Update to 24.13.0:
  * deps: updated undici to 7.18.2 (bsc#1256848, CVE-2026-22036)
  * deps: updated bundled c-ares to 1.34.6 (if used)
  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)</changelog>
  <changelog author="adam.majer@suse.de" date="1769083200">- 61008.patch: fix ppc64le build
- node-gyp-addon-gypi.patch: fix build of binary modules</changelog>
</package>
<package pkgid="ef925690df86eb9e8069dba9d07036f812722b5adf710258cb0575b21d44335c566de75e104dc0f620e74a10d740508352ecbc3bb95a9d9cc2e6cc500418e1f3" name="corepack24" arch="x86_64">
  <version epoch="0" ver="24.14.1" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1763985600">- Update to 22.21.1:
  * src: avoid unnecessary string -&gt; char* -&gt; string round trips
  * src: remove unnecessary shadowed functions on Utf8Value &amp; BufferValue
  * process: fix hrtime fast call signatures
  * http: improve writeEarlyHints by avoiding for-of loop
- Update to 22.21.0:
  * cli: add --use-env-proxy
  * http: support http proxy for fetch under NODE_USE_ENV_PROXY
  * http: add shouldUpgradeCallback to let servers control HTTP upgrades
  * http,https: add built-in proxy support in http/https.request and Agent
  * src: add percentage support to --max-old-space-size
- fix_ci_tests.patch: disable geopoly and fts3 sqlite tests as our
  sqlite does not support these optional features. Use fts4 instead.</changelog>
  <changelog author="adam.majer@suse.de" date="1763985601">- Initial package for nodejs 24.11.1
  For changes since 22.x, please see https://nodejs.org/en/blog
  or documentation https://nodejs.org/docs/latest-v24.x/api/documentation.html
- Inherit patches form 22.21.1
  * fix_ci_tests.patch, flaky_test_rerun.patch, node-gyp-addon-gypi.patch,
    nodejs-libpath.patch, npm_search_paths.patch, versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1764676800">- v8_nameclash.patch: Backport fix</changelog>
  <changelog author="adam.majer@suse.de" date="1764676801">- icu_781.patch: Add support for ICU 78.1
- bundle nghttp2 for TW, as upstream is carrying a patch on-top
  due to changes in nghttp2. See:
  https://github.com/nodejs/node/issues/60661</changelog>
  <changelog author="adam.majer@suse.de" date="1765195200">- Add support for ICU 77.1</changelog>
  <changelog author="adam.majer@suse.de" date="1765454400">- Update to 24.12.0 (bsc#1256572, CVE-2025-59464):
  * http: add optimizeEmptyRequests server option
  * lib: add options to util.deprecate
  * module: mark type stripping as stable
  * node-api: add napi_create_object_with_properties
  * sqlite: allow setting defensive flag
  * src: add watch config namespace
  * src: add an option to make compile cache portable
  * src,permission: add --allow-inspector ability
  * v8: add cpu profile
  for details, see https://nodejs.org/en/blog/release/v24.12.0
- nodejs-libpath.patch: refreshed
- fix_ci_tests.patch: add fix on 32bit platforms</changelog>
  <changelog author="adam.majer@suse.de" date="1765800000">- npm-path-normalization.patch: patch npm bug that causes build
  failure wit localhost-npm-registry</changelog>
  <changelog author="adam.majer@suse.de" date="1768478400">- Update to 24.13.0:
  * deps: updated undici to 7.18.2 (bsc#1256848, CVE-2026-22036)
  * deps: updated bundled c-ares to 1.34.6 (if used)
  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)</changelog>
  <changelog author="adam.majer@suse.de" date="1769083200">- 61008.patch: fix ppc64le build
- node-gyp-addon-gypi.patch: fix build of binary modules</changelog>
  <changelog author="adam.majer@suse.de" date="1774872000">- Update to 24.14.1:
  * use null prototype for headersDistinct/trailersDistinct (CVE-2026-21710, bsc#1260455)
  * wrap SNICallback invocation in try/catch (CVE-2026-21637, bsc#1256576)
  * test array index hash collision (CVE-2026-21717, bsc#1260494)
  * use timing-safe comparison in Web Cryptography HMAC and KMAC (CVE-2026-21713, bsc#1260463)
  * handle NGHTTP2_ERR_FLOW_CONTROL error code (CVE-2026-21714, bsc#1260480)
  * handle url crash on different url formats (CVE-2026-21712, bsc#1260460)
  * include permission check on lib/fs/promises (CVE-2026-21716, bsc#1260462)
  * add permission check to realpath.native (CVE-2026-21715, bsc#1260482)
- Changes in versino 24.14.0:
  * async_hooks: add trackPromises option to createHook()
  * build,deps: replace cjs-module-lexer with merve
  * deps: add LIEF as a dependency
  * events: repurpose events.listenerCount() to accept EventTargets
  * fs: add ignore option to fs.watch
  * http: add http.setGlobalProxyFromEnv()
  * module: allow subpath imports that start with #/
  * process: preserve AsyncLocalStorage in queueMicrotask only when needed
  * sea: split sea binary manipulation code
  * sqlite: enable defensive mode by default
  * sqlite: add sqlite prepare options args
  * src: add initial support for ESM in embedder API
  * stream: add bytes() method to node:stream/consumers
  * stream: do not pass readable.compose() output via Readable.from()
  * test: use fixture directories for sea tests
  * test_runner: add env option to run function
  * test_runner: support expecting a test-case to fail
  * util: add convertProcessSignalToExitCode utility
  for details, see https://nodejs.org/en/blog/release/v24.14.0
- npm-path-normalization.patch: upstreamed, dropped
- 61008.patch: upstreamed, dropped</changelog>
</package>
<package pkgid="c3f22583e647a100c060160c732ae89b9f4b19f0bb8048ee0e407a1ae585458d0b29e38c77a308c3c1499179ad89dec572343b7c86ea15fcde745da8ebc751c7" name="corepack24" arch="x86_64">
  <version epoch="0" ver="24.18.0" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1765454400">- Update to 24.12.0 (bsc#1256572, CVE-2025-59464):
  * http: add optimizeEmptyRequests server option
  * lib: add options to util.deprecate
  * module: mark type stripping as stable
  * node-api: add napi_create_object_with_properties
  * sqlite: allow setting defensive flag
  * src: add watch config namespace
  * src: add an option to make compile cache portable
  * src,permission: add --allow-inspector ability
  * v8: add cpu profile
  for details, see https://nodejs.org/en/blog/release/v24.12.0
- nodejs-libpath.patch: refreshed
- fix_ci_tests.patch: add fix on 32bit platforms</changelog>
  <changelog author="adam.majer@suse.de" date="1765800000">- npm-path-normalization.patch: patch npm bug that causes build
  failure wit localhost-npm-registry</changelog>
  <changelog author="adam.majer@suse.de" date="1768478400">- Update to 24.13.0:
  * deps: updated undici to 7.18.2 (bsc#1256848, CVE-2026-22036)
  * deps: updated bundled c-ares to 1.34.6 (if used)
  * add TLSSocket default error handler (bsc#1256573, CVE-2025-59465)
  * disable futimes when permission model is enabled (bsc#1256571, CVE-2025-55132)
  * require full read and write to symlink APIs (bsc#1256569, CVE-2025-55130)
  * rethrow stack overflow exceptions in async_hooks (bsc#1256574, CVE-2025-59466)
  * refactor unsafe buffer creation to remove zero-fill toggle (bsc#1256570, CVE-2025-55131)
  * route callback exceptions through error handlers (bsc#1256576, CVE-2026-21637)</changelog>
  <changelog author="adam.majer@suse.de" date="1769083200">- 61008.patch: fix ppc64le build
- node-gyp-addon-gypi.patch: fix build of binary modules</changelog>
  <changelog author="adam.majer@suse.de" date="1774872000">- Update to 24.14.1:
  * use null prototype for headersDistinct/trailersDistinct (CVE-2026-21710, bsc#1260455)
  * wrap SNICallback invocation in try/catch (CVE-2026-21637, bsc#1256576)
  * test array index hash collision (CVE-2026-21717, bsc#1260494)
  * use timing-safe comparison in Web Cryptography HMAC and KMAC (CVE-2026-21713, bsc#1260463)
  * handle NGHTTP2_ERR_FLOW_CONTROL error code (CVE-2026-21714, bsc#1260480)
  * handle url crash on different url formats (CVE-2026-21712, bsc#1260460)
  * include permission check on lib/fs/promises (CVE-2026-21716, bsc#1260462)
  * add permission check to realpath.native (CVE-2026-21715, bsc#1260482)
- Changes in versino 24.14.0:
  * async_hooks: add trackPromises option to createHook()
  * build,deps: replace cjs-module-lexer with merve
  * deps: add LIEF as a dependency
  * events: repurpose events.listenerCount() to accept EventTargets
  * fs: add ignore option to fs.watch
  * http: add http.setGlobalProxyFromEnv()
  * module: allow subpath imports that start with #/
  * process: preserve AsyncLocalStorage in queueMicrotask only when needed
  * sea: split sea binary manipulation code
  * sqlite: enable defensive mode by default
  * sqlite: add sqlite prepare options args
  * src: add initial support for ESM in embedder API
  * stream: add bytes() method to node:stream/consumers
  * stream: do not pass readable.compose() output via Readable.from()
  * test: use fixture directories for sea tests
  * test_runner: add env option to run function
  * test_runner: support expecting a test-case to fail
  * util: add convertProcessSignalToExitCode utility
  for details, see https://nodejs.org/en/blog/release/v24.14.0
- npm-path-normalization.patch: upstreamed, dropped
- 61008.patch: upstreamed, dropped</changelog>
  <changelog author="rguenther@suse.com" date="1776254400">- Add -fno-lifetime-dse to CXXFLAGS to avoid
  parallel/test-snapshot-reproducible testsuite failure with GCC 16</changelog>
  <changelog author="dimstar@opensuse.org" date="1776254401">- Explicitly BuildRequire update-alternatives and mark it as being
  used in post/postun: this was nicely masked by the fact that
  binutils, installed on every system, already dragged u-a in,
  which is no longer the case.</changelog>
  <changelog author="adam.majer@suse.de" date="1776772800">- Remove update-alternatives from scriptlets if not available.
  This code is only there to remove update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1782216000">- Update to 24.17.0
  (CVE-2026-48618, bsc#1268593) tls: normalize hostname for server identity checks
  (CVE-2026-48933, bsc#1268592) crypto: guard WebCrypto cipher output length
  (CVE-2026-48615, bsc#1268598) lib,test: redact proxy credentials in tunnel errors
  (CVE-2026-48619, bsc#1268618) http2: cap originSet size to prevent unbounded memory growth
  (CVE-2026-48928, bsc#1268605) tls: fix case-sensitive SNI context matching
  (CVE-2026-48930, bsc#1268606) dns,net: reject hostnames with embedded NUL bytes
  (CVE-2026-48934, bsc#1268608) tls: bind reusable sessions to authenticated host
  (CVE-2026-48617, bsc#1268554) permission: handle process.chdir on writereport
  (CVE-2026-48931, bsc#1268611) http: fix response queue poisoning in http.Agent
  (CVE-2026-48935, bsc#1268609) permission: disable FileHandle utimes with permission model
  (CVE-2026-48937, bsc#1268555) http2: servers keep accepting data even after sending a `GOAWAY` frame
  (CVE-2026-12151, bsc#1268482) undici: Denial of Service due to unbounded memory growth via WebSocket frames
  (CVE-2026-6733,  bsc#1268479) undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery
  (CVE-2026-9679,  bsc#1268477) undici: vulnerable to HTTP header injection via Set-Cookie percent-decoding
  (CVE-2026-11525, bsc#1268481) undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
  (CVE-2026-2581,  bsc#1268480) undici: Denial of Service due to uncontrolled resource consumption
  (CVE-2026-9678,  bsc#1268478) undici: Information disclosure due to improper cache-control header parsing
  (CVE-2026-27135, bsc#1259853) nghttp2: assertion failure due to missing state validation can lead to DoS
- ngtcp2_bsc1262274.patch: (CVE-2026-40170, bsc#1262274) - ngtcp2: qlog parameters_set stack buffer overflow.
- pacote-bsc1266318.patch: (CVE-2026-9496,  bsc#1266318) - pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec` value can lead to DoS
- ip-address-bsc1268097.patch: (CVE-2026-42338, bsc#1268097) - ip-address: Cross-site scripting via improper HTML escaping of untrusted input
- fix_ci_tests.patch: rebased
- For changes in older versions, see
  https://github.com/nodejs/node/releases</changelog>
  <changelog author="amajer@suse.com" date="1782820800">- Update to 24.18.0 (bsc#1269825)
  * doc: update blockList stability status to release candidate
  * fs: support caller-supplied readFile() buffers
  * http: close pre-request sockets in closeIdleConnections
  * loader: implement package maps
  * net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive
  * tls: add certificateCompression option
  * vfs: dispatch node:fs/promises to mounted VFS instances
  * vfs: add minimal node:vfs subsystem
- fix_ci_tests.patch: refreshed
- ip-address-bsc1268097.patch: dropped upstreamed</changelog>
</package>
<package pkgid="b6cd5265f04319c4ae3ab8338f4acc0baf746dccdc9e7e625d839812475ed5ff75004653883674642f1f7aa556b34b3dafa55faf4088b22c6171c5ba528dbdb0" name="coreutils" arch="x86_64">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="5d6313d402e75e34be2356bf4edfd2fe5b0febeb9845d8f06f11eb00da8779cc4fa15335c40c16a7b082cfd8976d797ac01db8d682003dc0785addcd2deff2e1" name="coreutils-doc" arch="noarch">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="7c022ef1f6053ed642a46fd92f5b69dabe3b6614527eb3fc08b1df9de13a356dceb8d2440c87b8f0c35c97010ff7dad9694988e341cd1315ae5fc247df51938e" name="coreutils-lang" arch="noarch">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="aad9f7df202bce55e454655f927c2fcd8cd1a98533b021e751c8fe23a5ed62d85db7a923930b840fb3965911b2ddcb38a7a5d340807fb5c365042feaf42b31fd" name="coreutils-single" arch="x86_64">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="4892575d7251c01212ff917f6ec3a2c609897b7e644bcdbf2628aea935a2418cc39041f1716e0c161ee216aa177e95d0498b1ff3a1469b083868b88c0daa2d9a" name="coreutils-systemd" arch="x86_64">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="6a4bc005deba407b517b8e6f4c48aeced73d991b4dd9c148cd9321f3181a4805d4741209e5abcfa7c36595639ffc077463457d5794033d74949a0868c246b280" name="coreutils-testsuite" arch="x86_64">
  <version epoch="0" ver="9.6" rel="160000.2.2"/>
  <changelog author="kukuk@suse.com" date="1693483200">- Update to 9.4:
  Bug fixes:
  * b2sum --check will no longer read unallocated memory when
    presented with malformed checksum lines.
    [bug introduced in coreutils-9.2]
  * cp --parents again succeeds when preserving mode for absolute directories.
    Previously it would have failed with a "No such file or directory" error.
    [bug introduced in coreutils-9.1]
  * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading,
    to ensure no holes present in the destination copy.
    [bug introduced in coreutils-9.0]
  * cksum again diagnoses read errors in its default CRC32 mode.
    [bug introduced in coreutils-9.0]
  * cksum --check now ensures filenames with a leading backslash character
    are escaped appropriately in the status output.
    This also applies to the standalone checksumming utilities.
    [bug introduced in coreutils-8.25]
  * dd again supports more than two multipliers for numbers.
    Previously numbers of the form '1024x1024x32' gave "invalid number" errors.
    [bug introduced in coreutils-9.1]
  * factor, numfmt, and tsort now diagnose read errors on the input.
    [This bug was present in "the beginning".]
  * install --strip now supports installing to files with a leading hyphen.
    Previously such file names would have caused the strip process to fail.
    [This bug was present in "the beginning".]
  * ls now shows symlinks specified on the command line that can't be traversed.
    Previously a "Too many levels of symbolic links" diagnostic was given.
    [This bug was present in "the beginning".]
  * pr --length=1 --double-space no longer enters an infinite loop.
    [This bug was present in "the beginning".]
  * tac now handles short reads on its input.  Previously it may have exited
    erroneously, especially with large input files with no separators.
    [This bug was present in "the beginning".]
  * uptime no longer incorrectly prints "0 users" on OpenBSD,
    and is being built again on FreeBSD and Haiku.
    [bugs introduced in coreutils-9.2]
  * wc -l and cksum no longer crash with an "Illegal instruction" error
    on x86 Linux kernels that disable XSAVE YMM.  This was seen on Xen VMs.
    [bug introduced in coreutils-9.0]
  Changes in behavior:
  * cp -v and mv -v will no longer output a message for each file skipped
    due to -i, or -u.  Instead they only output this information with --debug.
    I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3.
  * cksum -b no longer prints base64-encoded checksums.  Rather that
    short option is reserved to better support emulation of the standalone
    checksum utilities with cksum.
  * mv dir x now complains differently if x/dir is a nonempty directory.
    Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty",
    where it was unclear whether 'dir' or 'x/dir' was the problem.
    Now it says "mv: cannot overwrite 'x/dir': Directory not empty".
    Similarly for other renames where the destination must be the problem.
    [problem introduced in coreutils-6.0]
- Enable systemd-logind support
- Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617]
- Create -systemd flavor with binaries linked against libsystemd
- Drop coreutils-invalid-ids.patch to get consistent behavior, most tools
  where already removed from that patch.
- coreutils-misc.patch: adjust paths
- coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths
- coreutils-test_without_valgrind.patch: adjust paths
- coreutils-i18n.patch: update from Fedora</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1694952000">- gnulib-readutmp-under-gdm.patch: Add upstream gnulib patch to fix crash
  of who/uptime when gdm is in use. [bsc#1215361]
- gnulib-readutmp.patch: Update with upstream patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1705838400">- coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch:
  split: do not shrink hold buffer.  (CVE-2024-0684, bsc#1218982)
- coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1711972800">- Update to 9.5:
  Bug fixes:
  * chmod -R now avoids a race where an attacker may replace a traversed file
    with a symlink, causing chmod to operate on an unintended file.
    [This bug was present in "the beginning".]
  * cp, mv, and install no longer issue spurious diagnostics like "failed
    to preserve ownership" when copying to GNU/Linux CIFS file systems.
    They do this by working around some Linux CIFS bugs.
  * cp --no-preserve=mode will correctly maintain set-group-ID bits
    for created directories.  Previously on systems that didn't support ACLs,
    cp would have reset the set-group-ID bit on created directories.
    [bug introduced in coreutils-8.20]
  * join and uniq now support multi-byte characters better.
    For example, 'join -tX' now works even if X is a multi-byte character,
    and both programs now treat multi-byte characters like U+3000
    IDEOGRAPHIC SPACE as blanks if the current locale treats them so.
  * numfmt options like --suffix no longer have an arbitrary 127-byte limit.
    [bug introduced with numfmt in coreutils-8.21]
  * mktemp with --suffix now better diagnoses templates with too few X's.
    Previously it conflated the insignificant --suffix in the error.
    [bug introduced in coreutils-8.1]
  * sort again handles thousands grouping characters in single-byte locales
    where the grouping character is greater than CHAR_MAX.  For e.g. signed
    character platforms with a 0xA0 (aka &amp;nbsp) grouping character.
    [bug introduced in coreutils-9.1]
  * split --line-bytes with a mixture of very long and short lines
    no longer overwrites the heap (CVE-2024-0684).
    [bug introduced in coreutils-9.2]
  * tail no longer mishandles input from files in /proc and /sys file systems,
    on systems with a page size larger than the stdio BUFSIZ.
    [This bug was present in "the beginning".]
  * timeout avoids a narrow race condition, where it might kill arbitrary
    processes after a failed process fork.
    [bug introduced with timeout in coreutils-7.0]
  * timeout avoids a narrow race condition, where it might fail to
    kill monitored processes immediately after forking them.
    [bug introduced with timeout in coreutils-7.0]
  * wc no longer fails to count unprintable characters as parts of words.
    [bug introduced in textutils-2.1]
  Changes in behavior:
  * base32 and base64 no longer require padding when decoding.
    Previously an error was given for non padded encoded data.
  * base32 and base64 have improved detection of corrupted encodings.
    Previously encodings with non zero padding bits were accepted.
  * basenc --base16 -d now supports lower case hexadecimal characters.
    Previously an error was given for lower case hex digits.
  * cp --no-clobber, and mv -n no longer exit with failure status if
    existing files are encountered in the destination.  Instead they revert
    to the behavior from before v9.2, silently skipping existing files.
  * ls --dired now implies long format output without hyperlinks enabled,
    and will take precedence over previously specified formats or hyperlink
    mode.
  * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input,
    and uses lowercase 'k' when outputting such units in '--to=si' mode.
  * pinky no longer tries to canonicalize the user's login location by default,
    rather requiring the new --lookup option to enable this often slow feature.
  * wc no longer ignores encoding errors when counting words.
    Instead, it treats them as non white space.
  New features:
  * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files
    with matching current OWNER and/or GROUP, as already supported by chown(1).
  * chmod adds support for -h, -H,-L,-P, and --dereference options, providing
    more control over symlink handling.  This supports more secure handling of
    CLI arguments, and is more consistent with chown, and chmod on other
    systems.
  * cp now accepts the --keep-directory-symlink option (like tar), to preserve
    and follow existing symlinks to directories in the destination.
  * cp and mv now accept the --update=none-fail option, which is similar
    to the --no-clobber option, except that existing files are diagnosed,
    and the command exits with failure status if existing files.
    The -n,--no-clobber option is best avoided due to platform differences.
  * env now accepts the -a,--argv0 option to override the zeroth argument
    of the command being executed.
  * mv now accepts an --exchange option, which causes the source and
    destination to be exchanged.  It should be combined with
  - -no-target-directory (-T) if the destination is a directory.
    The exchange is atomic if source and destination are on a single
    file system that supports atomic exchange; --exchange is not yet
    supported in other situations.
  * od now supports printing IEEE half precision floating point with -t fH,
    or brain 16 bit floating point with -t fB, where supported by the compiler.
  * tail now supports following multiple processes, with repeated --pid options.
  Improvements:
  * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time.
    This was previously 128KiB and increasing to 256KiB was seen to increase
    throughput by 10-20% when reading cached files on modern systems.
  * env,kill,timeout now support unnamed signals. kill(1) for example now
    supports sending such signals, and env(1) will list them appropriately.
  * SELinux operations in file copy operations are now more efficient,
    avoiding unneeded MCS/MLS label translation.
  * sort no longer dynamically links to libcrypto unless -R is used.
    This decreases startup overhead in the typical case.
  * wc is now much faster in single-byte locales and somewhat faster in
    multi-byte locales.
- coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch.
- gnulib-readutmp-under-gdm.patch: Likewise.
- gnulib-readutmp.patch: Likewise.
- coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the
  upstream version now handles those tests.
  Pull in gnulib module mbchar manually, as it is a dependency of mbfile,
  but dropped out of the upstream dependency chain.
- coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h.
- coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip
  French test if TZ='Europe/Paris' does not work.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1720526400">- coreutils-i18n.patch: fold(1): fix exit code for non-existent file.
  The exit code of fold(1) was zero for non-existent file:
    $ fold badfile; echo $?
    fold: badfile: No such file or directory
    0
  The bug was introduced by the downstrean I18N patch. (rhbz#2296201)</changelog>
  <changelog author="schwab@suse.de" date="1721390400">- Avoid empty scriptlets</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1727611200">- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
  Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
  Original report: https://access.redhat.com/solutions/3459791</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1737115200">- Update to 9.6:
  Bug fixes
  * cp fixes support for --update=none-fail, which would have been
    rejected as an invalid option.
    [bug introduced in coreutils-9.5]
  * cp,mv --update no longer overrides --interactive or --force.
    [bug introduced in coreutils-9.3]
  * csplit no longer creates empty files given empty input.
    [This bug was present in "the beginning".]
  * ls and printf fix shell quoted output in the edge case of escaped
    first and last characters, and single quotes in the string.
    [bug introduced in coreutils-8.26]
  * ls -l no longer outputs "Permission denied" errors on NFS
    which may happen with files without read permission, and which resulted
    in inaccurate indication of ACLs (missing '+' flag after mode).
    [bug introduced in coreutils-9.4]
  * ls -l no longer outputs "Not supported" errors on virtiofs.
    [bug introduced in coreutils-9.4]
  * mv works again with macFUSE file systems.  Previously it would
    have exited with a "Function not implemented" error.
    [bug introduced in coreutils-8.28]
  * nproc gives more consistent results on systems with more than 1024 CPUs.
    Previously it would have ignored the affinity mask on such systems.
    [bug introduced with nproc in coreutils-8.1]
  * numfmt --from=iec-i now works with numbers without a suffix.
    Previously such numbers were rejected with an error.
    [bug introduced with numfmt in coreutils-8.21]
  * printf now diagnoses attempts to treat empty strings as numbers,
    as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
    and fails instead of silently succeeding.
    [This bug was present in "the beginning".]
  * pwd no longer outputs an erroneous double slash on systems
    where the system getcwd() was completely replaced.
    [bug introduced in coreutils-9.2]
  * 'shuf' generates more-random output when the output is small.
    [bug introduced in coreutils-8.6]
  * `tail --follow=name` no longer waits indefinitely for watched
    file names that are moved elsewhere within the same file system.
    [bug introduced in coreutils-8.24]
  * `tail --follow` without --retry, will consistently exit with failure status
    where inotify is not used, when all followed files become inaccessible.
    [This bug was present in "the beginning".]
  * `tail --follow --pid=PID` will now exit when the PID dies,
    even in the presence of blocking inputs like unopened fifos.
    [This bug was present in "the beginning".]
  * 'tail -c 4096 /dev/zero' no longer loops forever.
    [This bug was present in "the beginning".]
  Changes in behavior
  * 'factor' now buffers output more efficiently in some cases.
  * install -C now dereferences symlink sources when comparing,
    rather than always treating as different and performing the copy.
  * kill -l and -t now list signal 0, as it's a valid signal to send.
  * ls's -f option now simply acts like -aU, instead of also ignoring
    some earlier options.  For example 'ls -fl' and 'ls -lf' are now
    equivalent because -f no longer ignores an earlier -l.  The new
    behavior is more orthogonal and is compatible with FreeBSD.
  * stat -f -c%T now reports the "fuseblk" file system type as "fuse",
    given that there is no longer a distinct "ctl" fuse variant file system.
  New Features
  * cksum -a now supports the "crc32b" option, which calculates the CRC
    of the input as defined by ITU V.42, as used by gzip for example.
    For performance pclmul instructions are used where supported.
  * ls now supports the --sort=name option,
    to explicitly select the default operation of sorting by file name.
  * printf now supports indexed arguments, using the POSIX:2024 specified
    %&lt;i&gt;$ format, where '&lt;i&gt;' is an integer referencing a particular argument,
    thus allowing repetition or reordering of printf arguments.
  * test supports the POSIX:2024 specified '&lt;' and '&gt;' operators with strings,
    to compare the string locale collating order.
  * timeout now supports the POSIX:2024 specified -f, and -p short options,
    corresponding to --foreground, and --preserve-status respectively.
  Improvements
  * cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
    for time reductions of up to 40%, 60%, and 80% respectively.
  * 'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
    'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
    no longer fail merely because NUM stands for 2**64 or more.
  * sort operates more efficiently when used on pseudo files with
    an apparent size of 0, like those in /proc.
  * stat and tail now know about the "bcachefs", and "pidfs" file system types.
    stat -f -c%T now reports the file system type,
    and tail -f uses inotify for these file systems.
  * wc now reads a minimum of 256KiB at a time.
    This was previously 16KiB and increasing to 256KiB was seen to increase
    wc -l performance by about 10% when reading cached files on modern systems.
- coreutils-fix-gnulib-time_r-tests.patch: Remove now-upstream patch.
- coreutils-9.6-ls-Z-crash-fix.patch: Add upstream patch from after the release.
- coreutils.spec (Patch920): Exchange names of above patch files accordingly.
- coreutils-i18n.patch: Refresh patch, manually porting some upstream fixes
  into the i18n chunks for expand.c, fold.c and unexpand.c.
- Refresh all other patches:
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-tests-workaround-make-fdleak.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.6-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="9e290d466b91eca9fdf13562909e01829f0ba0c028546e13063f4d0bacb1536377e4a3112c8cfa2a135df6db4ea191a5b6c135526725df59ecb24253ec34441b" name="corosync" arch="x86_64">
  <version epoch="0" ver="3.1.9" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1622548800">- Update to version 2.4.5+git69.6236728a:
  * man: replace votequorum_poll for actually used fn
  * qnetd: sort by node_id when add new client
  * man: adjust description about interface section
  * qnetd: Simplify KAP Tie-breaker logic
  * qnetd: Fix NULL dereference of client
  * man: votequorum.5: use proper single quotes
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: More informative messages
- Remove patches:
  bug-1166899-quorumtool-Fix-exit-status-codes.patch
  bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="varkoly@suse.com" date="1629720000">- Update to version 2.4.5+git70.64010f57:
  * totem: Add cancel_hold_on_retransmit config option</changelog>
  <changelog author="emil.penchev@suse.com" date="1649678400">- Update to version corosync-2.4.5+git.5d625cef:
  * totemudpu: Don't block local socketpair
  * totemsrp: Switch totempg buffers at the right time
  * logsys: Unlock config mutex on error</changelog>
  <changelog author="emil.penchev@suse.com" date="1669032000">- Update to version 2.4.6:
  * totemsrp: More informative messages
  * icmap: fix the icmap_get_*_r functions
  * stats: Add basic schedule-miss stats to needle
  * icmap: icmap_init_r() leaks if trie_create() fails
  * test: Fix cpgtest
  * pkgconfig: Add libqb dependency
  * man: votequorum.5: use proper single quotes
  * cpg: Change downlist log level
  * totem: Increase ring_id seq after load
  * totempg: Check sanity (length) of received message
  * totemsrp: Reduce MTU to left room second mcast
  * qnetd: Rename qnetd-log.c to log.c
  * qnetd: Fix double -d description
  * qnetd: Check log initialization error
  * qnetd: Add function to set log target
  * qdevice: Use log instead of libqb log
  * qdevice: Import log instead of qdevice-log
  * qdevice: Merge msg_decode_error functions
  * qnetd: Use log-common for nodelist debug dump
  * qdevice: Configurable log priority bump
  * tests: Add utils_parse_bool_str test
  * qdevice: Free memory used by log
  * qdevice: Add log test
  * qdevice: Add header files to list of test sources
  * qdevice: Add chk variant of vsyslog to test-log
  * qdevice: Add prototype of __vsyslog_chk
  * votequorum: Ignore the icmap_get_* return value
  * logconfig: Remove double free of value
  * cmap: Assert copied string length
  * sync: Assert sync_callbacks.name length
  * votequorum: Assert copied strings length
  * cpghum: Remove unused time variables and functions
  * cfgtool: Remove unused callbacks
  * cmapctl: Free bin_value on error
  * quorumtool: Assert copied string length
  * votequorum: Reflect runtime change of 2Node to WFA
  * main: Add schedmiss timestamp into message
  * votequorum: Change check of expected_votes
  * quorumtool: Fix exit status codes
  * quorumtool: exit on invalid expected votes
  * votequorum: set wfa status only on startup
  * Revert "totemip: Add support for sin6_scope_id"
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * main: Make schedmiss in cmap and log equal
  * totemip: Add support for sin6_scope_id
  * qnetd: Do not call ffsplit_do on shutdown
  * qdevice: Fix connect heuristics result callback
  * qdevice: Fix connect heuristics result callback
  * qdevice: Log adds newline automatically
  * qnetd: Fix dpd timer
  * qnetd: Add support for keep active partition vote
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: Move token received callback
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * qnetd: Fix NULL dereference of client
  * qnetd: Simplify KAP Tie-breaker logic
  * totem: Add cancel_hold_on_retransmit config option
  * logsys: Unlock config mutex on error
  * totemsrp: Switch totempg buffers at the right time
  * totemudpu: Don't block local socketpair
  * configure.ac: fix pkgconfig issue of rdma
  * totemip: Add support for sin6_scope_id
  * totemip: compare sin6_scope_id and interface_num
  * qdevice: Change log level to NOTICE on PASS
  * cfgtool: output error messages to stderr
  * tools: use util_strtonum for options checking
  * cmapctl: return EXIT_FAILURE on failure
  * quorumtool: Help shouldn't require running service
  * quorumtool: strict check for -o option
  * cmapctl: check NULL for key type and value for -p
  * man: adjust description about interface section
  * qnetd: sort by node_id when add new client
  * man: replace votequorum_poll for actually used fn</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Provide user(coroqnetd) and group(coroqnetd) in the -qnetd
  package: user and group are generated by the pre script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="emil.penchev@suse.com" date="1715774400">- Update to version 3.1.8
  * Handling integer overflow issues
  * rust: Improve vector initialisation
  * man: Update the corosync_overview manpage
  * config: Fail to start if ping timers are invalid
  * rust: Remove some pointless casts
  * parser: Allow a non-breaking space as 'whitespace'
  * spec: Migrate to SPDX license
  * build: Fix rust make -j build dep for distcheck
  * rust: Remove tests from check scripts
  * Rust: Remove obsolete bindgen flag
  * knet: use knet TRACE logging level if available
  * Rust: 'fix' clippys for Rust 1.67
  * rust: Make it work on FreeBSD
  * bindings: Add Rust bindings
  * totemconfig: Add support for knet_mtu
  * configure: Modernize configure.ac a bit
  * log: Configure knet logging to the same as corosync
  * logrotate: Use copytruncate method by default
  * totemconfig: Check uname return value correctly
  * totempg: Fix alignment handling
  * pkgconfig: Export corosysconfdir
  * Remove bashism from configure script
  * totemudpu: Don't block local socketpair
  * build: Add explicit dependency for used libraries
  * totemsrp: Switch totempg buffers at the right time
  * cpghum: Allow to continue if corosync is restarted
  * man: Fix consensus timeout
  * logsys: Unlock config mutex on error
  * totem: Add cancel_hold_on_retransmit config option
  * totemconfig: Knet nodeid must be &lt; 65536
  * totemconfig: Ensure all knet hosts has a nodeid
  * cfgtool: Use CS_PRI_NODE_ID for formatting nodeid
  * cfgtool: Fix brief mode display of localhost
  * cfgtool: Set nodeid indexes after sort
  * totemconfig: Put autogenerated nodeid back to cmap
  * cfgtool: Check existence of at least one of nodeid
  * totemconfig: Do not process totem.nodeid
  * knet: Fix node status display
  * main: Add support for cgroup v2 and auto mode
  * stats: fix crash when iterating over deleted keys
  * man: Add note about single node configuration
  * Revert "main: Add support for cgroup v2"
  * Revert "man: Add info about cgroup v2 behavior"
  * man: Add info about cgroup v2 behavior
  * cfg: corosync_cfg_trackstop blocks forever
  * main: Add support for cgroup v2
  * main: Mark crypto_model key read only
  * totemconfig: Ensure strncpy is always terminated
  * config: Properly check crypto and compress models
  * man: corosync-cfgtool.8: use proper single quotes
  * knet: pass correct handle to knet_handle_compress
  * totemconfig: fix integer underflow and logic bug
  * totemconfig: change udp netmtu value as a constant
  * totemknet: retry knet_handle_new if it fails
  * main: Check memlock rlimit
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitize
  * configure: drop dead code
  * configure: detect and init pkg-config with macro
  * main: Close race condition when moving to statedir
  * init: Use corosync-cfgtool for shutdown
  * test: Add testcfg to exercise some cfg functions
  * cfg: Reinstate cfg tracking
  * cfg: Improve nodestatusget versioning
  * cfg: New API to get extended node/link infomation
  * totemknet: Check both cipher and hash for crypto
  * The ring id file needn't be executable
  * pkgconfig: export LOGDIR in corosync.pc
  * spec: Add isa version of corosync-devel provides
  * totemconfig: remove redundant nodeid error log
  * totemsrp: More informative messages
  * config: Increase default token timeout to 3000 ms
  * man: votequorum.5: use proper single quotes
  * man: fix typo: avaialable
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * quorum: Add support for nodelist callback
  * man: reload during rolling upgrade
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemconfig: improve linknumber checking
  * totemconfig: add interface number to the error str
  * cfg: enhance message_handler_req_lib_cfg_killnode
  * totemconfig: validate totem.transport value
  * cmapctl: return error on no result of print prefix
  * cmapctl: check NULL for key type and value for -p
  * quorumtool: strict check for -o option
  * quorumtool: Help shouldn't require running service
  * cfgtool: Return error when -i doesn't match
  * man: update output of -s and -b for cfgtool
  * cmapctl: return EXIT_FAILURE on failure
  * tools: use util_strtonum for options checking
  * cfgtool: enhancement -a option
  * cfgtool: output error messages to stderr
  * configure: Use default systemd path with prefix
  * build: Use git-version-gen during specfile build
  * build: Update git-version-gen
  * spec: Require at least knet 1.18 for crypto reload
  * config: Allow reconfiguration of crypto options
  * test: Fix cpgtest
  * config: Fix crash when a reload fails twice
  * config: Don't free pointers used by transports
  * config: don't reload vquorum if reload fails
  * cfg: Improve error return to cfgtool -R
  * config: Reorganise the config system
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * Revert "totemip: Add support for sin6_scope_id"
  * cfgtool: Fix error code as described in MP
  * icmap: icmap_init_r() leaks if trie_create() fails
  * votequorum: set wfa status only on startup
  * quorumtool: exit on invalid expected votes
  * votequorum: Change check of expected_votes
  * cfgtool: Simplify output a bit for link status
  * man: Enhance link_mode priority description
  * main: Add schedmiss timestamp into message
  * totemip: compare sin6_scope_id and interface_num
  * totemip: Really remove totemip_copy_endian_convert
  * totemip: Remove unused totemip_copy_endian_convert
  * totemip: Add support for sin6_scope_id
  * cfgtool: Improve link status display
  * totemknet: Change the initial value of the status
  * stats: Use nanoseconds from epoch for schedmiss
  * stats: Add stats for scheduler misses
  * votequorum: Reflect runtime change of 2Node to WFA
  * cpg: Change downlist log level
  * man: move cmap_keys man page from section 8 to 7
  * stats: Check return code of stats_map_get
  * quorumtool: Assert copied string length
  * notifyd: Check cmap_track_add result
  * cmapctl: Free bin_value on error
  * cfgtool: Remove unused callbacks
  * cpghum: Remove unused time variables and functions
  * votequorum: Assert copied strings length
  * totemknet: Assert strcpy length
  * totemknet: Check result of fcntl O_NONBLOCK call
  * totemconfig: Initialize warnings variable
  * sync: Assert sync_callbacks.name length
  * totemknet: Don't mix corosync and knet error codes
  * stats: Assert value_len when value is needed
  * cmap: Assert copied string length
  * totemconfig: Reuse already fetched pointer
  * logconfig: Remove double free of value
  * votequorum: Ignore the icmap_get_* return value
  * totemconfig: Free leaks found by coverity
  * icmap: fix the icmap_get_*_r functions
  * pkgconfig: Add libqb dependency
  * Initialize stack allocated memory
  * man: Fix corosync.conf knet pong count default
  * totemsrp: Reduce MTU to left room second mcast
  * totempg: Check sanity (length) of received message
  * build: add option for enabling sanitizer builds
  * totemknet: Add locking for log call
  * man: Fix link_mode priority description
  * notifyd: Don't dereference NULL key_name
  * totem: Increase ring_id seq after load
  * init: Use cpgtool instead of cfgtool
  * notifyd: Fix warning produced by 32-bit compiler
  * cfgtool: Remove unused code
  * logging: Add CS_PRI_NODE_ID and CS_PRI_RING_ID
  * vqsim: Fix gitignore
  * totemknet: Disable forwarding on shutdown
  * totemconfig: Fix compiler warning
  * totem: fix check if all nodes have same number of links
  * totem: fix check if all nodes have name attrs in multi-link setups
  * corosync-notifyd: Add option to disable DNS lookup
  * totemsrp: Fix warnings produced by gcc 9.1
  * cpg: Move filling of member_list to subfunction
  * cpg: Add more comments to notify_lib_joinlist
  * cpg: send single confchg event per group on joinlist
  * cpg: notify_lib_joinlist: drop conn parameter
  * vqsim: Check length of copied optarg
  * vqsim: Check result of icmap_set_uint32
  * vqsim: Remove unused total_nodes
  * vqsim: Free allocated newvq on error
  * vqsim: Check length of received message
  * vqsim: Check write result
  * vqsim: Do not access unitialized argv[0]
  * totemknet: Initialize return value in setup_nozzle
  * totemknet: macaddr_str is always set
  * totemknet: Ignore icmap_get_string result
  * totemknet: create_nozzle_device simplify check
  * totemip: Use res in totemip_sa_equal
  * totemconfig: ipaddr_equal use switch
  * configure: Fix GDB_CFLAGS typo
  * man: Add vqsim man page into distributed tarball
  * spec: Add support for user-flags configure option
  * man: Enahnce block_unlisted_ips description
  * man: Enhance corosync.conf mp a bit
  * cfgtool: Fix link status display
  * knet: Use block_unlisted_ips
  * udpu: Drop packets from unlisted IPs
  * knet: Fix initialising of knet access lists.
  * knet: allow corosync to use knet access lists
  * man: Enhance token_retransmit description
  * totemconfig: Fix minimum limit for hold timeout
  * vqsim: Enhance vqsim
  * knet: Fix a couple of errors when adding a new link
  * totemconfig: fix autogen mcastaddr for ipv6-4
  * totemconfig: Ensure nodeid is specified for IPv6
  * vqsim: Fix vqsim for corosync 3.0
  * vqsim: Make vqsim compile
  * totemconfig: ipaddr_equal check just addr part
  * cpg: Add CPG_REASON_UNDEFINED
  * crypto: re-introduce secauth parameter
  * totemconfig: Remove support for 3des
  * keygen: Reflect change in knet
  * set totem.keyfile and totem.key to RO
  * Revert "init: Enable StopWhenUnneeded"
  * totemsrp: Word spelling mistake
  * coroparse: Fix compiler warning
  * configure: Do not autodetect nozzle
  * nozzle: Add support for libnozzle devices
  * quorumtool: Fix exit status codes
  * corosync-cfgtool: Fix -i matching
  * build: Use the AWK variable provided by configure
  * build: Use the SED variable provided by configure
  * configure.ac: AC_PROG_SED is already present
  * corosync.conf.5: typography fixes
  * corosync.conf.5: fix grammar
  * cfgtool: Improve link status display
  * doc: Update INSTALL file
  * init: Enable StopWhenUnneeded
  * totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4
  * [totemknet] update for libknet.so.2.0.0 init API
  * Config version must be specified
  * Don't declare success early
  * More natural error messages
  * main: Rename run_dir to state_dir
  * totemconfig: Enhance totem.ip_version
  * totemip: Add debug information to totemip_parse
  * totemconfig: Add IPs to family mismatch error
  * config: Look up hostnames in a defined order
  * Fix corosync.conf.5 manpage typos
  * man: Add some information about address resolution
  * totemconfig: Really use totemip_parse results
  * man: Add instructions for adding/removing nodes
  * config: Disallow corosync-cmapctl updates of nodelist
  * config: Report IP addr/nodename parse errors back
  * coroparse: Remove unused cs_err initialization
  * cpghum: Check cpg_local_get return code
  * testcpg2: Check cpg_dispatch return code
  * notifyd: Delete registered tracking keys
  * stats: Fix delete of track
  * init: Fix init script to work with containers
  * main: Remove COROSYNC_RUN_DIR
  * man: Describe nodelist.node.name properly
  * main: Remove COROSYNC_TOTEM_AUTHKEY_FILE
  * main: Replace COROSYNC_MAIN_CONFIG_FILE
  * main: Move sched paramaters to config file
  * configure: move to AC_COMPILE_IFELSE
  * logsys: Make hires timestamp default
  * logsys: Support hires timestamp
  * totemconfig: Fix logging of freed string
  * config: Allow generated nodeis for UDP &amp; UDPU
  * config example: Migrate to newer syntax
  * log: Implement support for reopening log files
  * totemconfig: Replace strcpy by strncpy
  * config: Fix crash in reload if new interfaces are added
  * man: Fix default knet_pmtud_interval to match code
  * build: Remove totempg shared library leftovers
  * build: Do not compile totempg as a shared library
  * man: Fix typo conains -&gt; contains
  * man: Fix typo connnections -&gt; connections
  * build: Remove NSS dependencies
  * cts: Remove CTS
  * man: Fix crypto_hash and crypto_cipher defaults
  * coroparse: Fix newly introduced warning
  * Add option to force cluster into GATHER state
  * coroparse: Use key_name for error message
  * coroparse: Add file name and line to error message
  * coroparse: Be more strict in what is parsed
  * coroparse: Fix remove_whitespace end condition
  * coroparse: Check icmap_set results
  * coroparse: Return error if config line is too long
  * notifyd: Propagate error to exit code
  * git-version-gen: Fail on UNKNOWN version
  * build: Support for git archive stored tags
  * man: fix cmap key name runtime.config.totem.token
  * Remove libcgroup
  * systemd: prevent redundancy in journal
  * Add token_warning configuration option
  * corosync-notifyd: Rename global local_nodeid
  * totemsrp: Add assert into memb_lowest_in_config
  * totemconfig: Enlarge error_string_response
  * ipc_glue: Fix strncpy in pid_to_name function
  * cmap: Fix strncpy warning in cmap_iter_next
  * util: Fix strncpy in setcs_name_t function
  * totemknet: Free instance on failure exit
  * spec: Add explicit gcc build requirement
  * Add option for quiet operation to corosync-cmapctl
  * totemudpu: Pass correct paramto totemip_nosigpipe
  * totemudpu: Add local loop support
  * config: Fail config validation if not all nodes have all links
  * config: Enforce use of 'name' node attribute in multi-link clusters
  * totemconfig: Check for things that cannot be changed on the fly
  * Fix snprintf warnings
  * init: Use existing env variable from sysconf
  * upstart: Remove notifyd upstart unit
  * knet: Don't try to create loopback interface twice
  * knet: Fix knet log buffer size
  * cpg: Inform clients about left nodes during pause
  * man: Make the manpages reproducible
  * totemsrp: Fix leave message regression
  * totemsrp: Log proc/fail lists in memb_join_process
  * totemsrp: Fix srp_addr_compare
  * tools: don't distribute what we can easily make
  * Drop all references to SECURITY file
  * SECURITY: Remove SECURITY file
  * NSS_NoDB_Init: the parameter is reserved, must be NULL
  * Fix typo: defualt -&gt; default
  * Fix typo: sucesfully -&gt; successfully
  * totemsrp: Check join and leave msg length
  * totemsrp: Implement sanity checks of received msgs
  * cpg: Handle fragmented message sending interrupt
  * totem: Display IP of sender
  * totemsrp: Add magic and version into header
  * knet: Fix display of links with unconfigured link0
  * main: Set errno before calling of strtol
  * quorumtool: Don't set our_flags without v_handle
  * sam_test_agent: Remove unused assignment
  * blackbox: Quote subshell result properly
  * init: Quote subshell result properly
  * cfgtool: Don't assume link ID is a single char
  * knet: Always use link0 for loopback
  * totem: Fix debug warnings printed by knet
  * config: Allow use of ring0_addr
  * config: Update message when local host isn't found
  * cfg: Fix cfg_get_node_addrs so that DLM works
  * totem: Return interface count correctly
  * totem: Use nodeid ONLY in srp_addr
  * [rpm] use rpm macros to identify build distro
  * [rpm] fixup corosync.spec.in to build on opensuse
  * totempg: Fix corrupted messages
  * totempg: use iovec[i].iov_len instead of copy_len
  * totempg: Fix fragmentation segfault
  * [build] fix build with non-standard knet location
  * [man] fix regression introduced by 7162e75dcf81b7e475536e3060bf5e9312cd43b8
  * Man: Move overview mp to sections 3 and 7 from 8
  * logging: Close before and open blackbox after fork
  * logging: Make blackbox configurable
  * corosync-notifyd: improve error handling
  * spec: Modernize spec to comply with newest Fedora
  * build: Remove support for upstart
  * build: Replace -lknet with autoconf generated vars
  * build: Remove rdma/ibverbs
  * qdevice: Remove qdevices
  * config: Don't fudge port numbers
  * knet: Allow ping_timers to be auto-configured
  * cts: Make code compatible with Python 3
  * corosync-notifyd: make SNMP work again
  * build: Add the headers necessary for RPM build
  * config: if local node addr is wrong, fail with a sensible message
  * totemknet: Drop truncated packets on receive
  * totemudp: Make use of UDP_RECEIVE_FRAME_SIZE_MAX
  * totemudpu: Export and rename UDPU_FRAME_SIZE_MAX
  * totemconfig: Fix UDP autogeneration of mcast addr
  * totemudpu: Scale receive buffer
  * config: Allow selection of crypto_model
  * libcpg: Fix issue with partial big packet assembly
  * qdevice: mv free(str) after port validation
  * corosync.aug: Add missing options
  * config: Allow links to have different ip_versions
  * Fix compile errors in qdevice and vqsim on FreeBSD
  * cmapctl: mention the Clear stats option in usage message
  * corosync-cfgtool: refactor cli parameters handling
  * wd: fix snprintf warnings
  * totemsrp: Revert totemsrp_get_ifaces() changes
  * man: Add note about corosync not using name option
  * corosync.conf: publicize nodelist.node.name
  * man: fixes for corosync.conf man page
  * cmapctl: add "-m" option into help message
  * totemconfig: remove duplicate aes256 test
  * fix output format for corosync-cfgtool with knet (#283)
  * sync: Call sync_init of all services at once
  * sync: Remove unneeded determine sync code
  * stats: Add some missing knet stats
  * man: Add note about qdevice parallel cmds start
  * man: corosync-qdevice: some more stylistics
  * systemd: corosync-qdevice can not run without corosync
  * man: corosync-qdevice: fix formatting vs. punctuation
  * configure: kill off INITWRAPPERSDIR
  * corosync-qdevice: send startup notification to systemd
  * corosync-qnetd: send startup notification to systemd
  * Send corosync-notifyd startup notification to systemd
  * Make systemd stop corosync-notifyd if corosync is stopped
  * corosync.spec: Add system-devel build requirement
  * Send corosync startup notification to systemd
  * quorumtool: Use full buffer size in snprintf
  * cpghum: Mark print/log functions with printf attr
  * cpg_test_agent: Fix snprintf compiler warnings
  * sam: Fix snprintf compiler warnings
  * coroparse: Do not convert empty uid, gid to 0
  * cmapctl: Add option to clear the stats
  * stats: Don't display errors when reading knet stat
  * make the output of "corosync-cfgtool -s" more readable (#269)
  * cfg: nodeid should be unsigned int
  * quorumtool: remove duplicated help message
  * man: fix cpg_mcast_joined.3.in
  * man: Add stats.clear keys to the cmap_keys man pg
  * stats: Add cmap key to clear the various stats.
  * Use RuntimeDirectory instead of tmpfiles.d
  * totemconfig: generate mcast icmap items for UDP
  * Use static case blocks to determine distro flavor
  * configure: add --with-initconfigdir option
  * totemconfig: add nodeid check for knet
  * man: support SOURCE_DATE_EPOCH
  * man:fix in corosync-qdevice.8
  * man: must set nodeid for knet in nodelist
  * logsys: Avoid redundant callsite section checking
  * config: Fix memory leak
  * knet: Add support for knet compression
  * qdevice: Add support for heuristics
  * Spec: fix arch-qualified dependencies
  * cmap: Remove noop highest config version check
  * cmap: don't shutdown highest config_version node
  * totemudp: Remove memb_join discarding
  * votequorum: make atb consistent on nodelist reload
  * totem: Remove unnecessary NSS headers
  * config: Allow dynamic link configuration
  * totemudp: Retry if bind fails
  * corosync.conf.5: watchdog support is conditional
  * wd: default to not using a watchdog
  * wd: remove extra capitalization typo
  * corosync.conf.5: add warning about slow watchdogs
  * totemknet: fix debug message typo
  * corosync.conf.5: Fix watchdog documentation
  * wd: fix typo
  * Include fcntl.h for F_* and O_* defines
  * stats: add knet 'handle' stats
  * main: use syslog &amp; printf directly for early log messages
  * totempg: Allow space for incoming overflow
  * cpghum: Add options to change flood start/mult/end sizes (#237)
  * totemknet: Use knet's LOOPBACK transport (#236)
  * CFG: Remove ring-reenable code
  * main: Add support for libcgroup
  * stats: Add map with on-demand statistics
  * ipc: Check for the libraries sending invalid message IDs
  * main: Add option to set priority
  * totemknet: Prevent dead-loop in log_flush_messages
  * corosync-keygen: Display number of needed bits
  * totemknet: Flush knet log messages
  * corosync-keygen: Make less-secure default
  * corosync-keygen: Adapt to knet key sizes
  * totemconfig: Make crypto work again
  * knet: Compile with latest knet API
  * totem: Propagate totem initialization failure
  * totemknet: Use new knet_link_set_config() API
  * coroapi: Use size_t for private_data_size
  * votequorum: Report errors from votequorum_exec_send_reconfigure
  * cpghum: remove space after delimiter
  * cpghum: Add interim RTT to cpghum
  * configure: Enable C99 language standard
  * main: Display reason why cluster cannot be formed
  * notifyd: Add the community name to an SNMP trap
  * cpghum: Add machine-readable output
  * test: Fold cpgbench into cpghum (#205)
  * knet: Allow space for encapsulated messages
  * Main: Call mlockall after fork
  * Fix typos in README.recovery
  * coroparse: Use readdir instead of readdir_r
  * totemknet: Handle logpipe creation failure
  * wd: Report error when close of wd fails
  * Qnetd lms: Use UTILS_PRI_RING_ID printf format str
  * cpghum: Fix printf of size_t variable
  * totemknet: Got back to recvmsg() from recvmmsg()
  * totemconfig: Prefer nodelist over bindnetaddr
  * knet: Close libknet down cleanly at shutdown
  * man: Document -a option to corosync-quorumtool
  * cpghum test: Improve error codes
  * quorumtool: Add option to show all node addresses
  * cpghum: Stop cpghum from reporting fake CRC errors
  * logconfig: Do not overwrite logger_subsys priority
  * totem: Fix buffer sizes
  * main: Don't ask libqb to handle segv, it doesn't work
  * Logsys: Change logsys syslog_priority priority
  * knet: improve logging messages by adding knet subsystem
  * cpghum: Add abort_on_error option
  * cpghum: Add min rtt and print stats every alarm
  * cpghum: Add Round Trip Time (RTT) reporting
  * knet: Change nodeids to knet_node_id_t for new knet compatibility
  * knet: Fix MTU sizes &amp; allow transport config in corosync.conf
  * knet: PMTUd data_mtu already accounts for IP and knet header overheads
  * knet: switch from write to sendto()
  * knet: Change nodeids to 8 bit for new knet compatibility
  * doc: document watchdog_device parameter
  * knet: Fix member_remove to shut down existing links first
  * Spec: make internal dependencies arch-qualified
  * Spec: drop unneeded dependency
  * knet: Reduce default pong count to 2 for faster startup
  * totemknet: Make it compile with kronosnet git master
  * Qdevice: fix spell errors in qdevice
  * Remove redundant header file inclusion
  * Remove deprecated doxygen flags
  * upstart: Add softdog module loading example
  * Totempg: remove duplicate memcpy in mcast_msg func
  * man: Modify man-page according to command usage
  * init: Add doc URIs to the systemd service files
  * Fix typo: Destorying -&gt; Destroying
  * man: Fix typos in man page
  * totempg: totempg_groups_join return valid error
  * systemd: Delete unnecessary soft_margin
  * knet: Support reload of link parameters
  * list: Unify the list processing with qb_list func
  * knet: Allow configuration of more params
  * knet: Don't lose log messages when knet gets busy (#165)
  * libvotequorum: Bump version
  * list: Replace for_each by safe version where need
  * list: Remove list.h
  * list: Replace uses of list.h with qblist.h
  * [build] Fix build on RHEL7.3 latest
  * Change a type of NodeID.
  * vqsim: Fix Makefile.am
  * configure: Remove RDMA (again)
  * vqsim: Add Quorum simulator program
  * Build: Fail configure if knet is not installed
  * totem: add totemknet.[ch]
  * cfg: Prevents use of uninitialized buffer
  * totem: Add Kronosnet transport.
  * coropase: Set a poll_period value for wd monitor
  * votequorum: simplify reconfigure message handling
  * votequorum: Don't update expected_votes display if value is too high
  * Fix various typos
  * init: corosync and cman aren't system facilities
  * conf: be explicit about the mcast src/dst ports
    Added:
    corosync-3.1.8.tar.gz
    Removed:
    corosync-2.4.6.tar.gz
    bug-1001164_corosync.conf-example.patch
    bug-1032634_fix-ifdown-udp.patch
    bug-1083561_upgrade-from-1-x-y.patch
    bug-882449_corosync-conf-example.patch
    corosync-2.3.4-fix-bashisms.patch
    corosync-init-lockfile-path-error.patch
    corosync-start-stop-level.patch
    Fix-compile-warnings-with-GCC-7.2.1.patch
    upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
    baselibs.conf
    Modified:
    _service
    _servicedata
    corosync.changes: add changelogs
    corosync.spec: updates to corosync3</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731931200">- Update to version 3.1.9:
  * rust: Update to latest standards
  * totemsrp: Fix orf_token stats
  * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
  * totem: Use proper timestamp type for token warning
  * stats: Store token rx and tx timestamps as 64-bit
  * rust: fix clippy warning in rust 1.81
  * coroparse: Free kv_item key and value on failure
  * icmap: Free memory if qb_map_notify_add fails
  * cfg: Free new_config interfaces on failure
  * main: support lock pid file arg
  * man: fix a typo in cpg_model_initialize
  * man: Improve quorum provider formatting
  * rust: tests return errors and don't hang
  * rust: Improve Rust bindings
  * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
  * man: corosync.conf: Multi improvements
  * totem: Fix reference links
  * Report crypto errors back to cfg reload
  * Fix up the library .versions files
  * configure: Fix building of rust for release
  * License: Fix year (mainly to fix rust building)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1742990400">- Add a patch to fix CVE-2025-30472 (bsc#1239987)
  * 779.patch</changelog>
</package>
<package pkgid="da33590682c626918040b3870192d8aa47a32ac4a17e517a74e72ea5c9941545bfed2cd9c88392a3a6de348600ec603e14db2d65bcb9ada08083bc87a841bca0" name="corosync" arch="x86_64">
  <version epoch="0" ver="3.1.9" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1629720000">- Update to version 2.4.5+git70.64010f57:
  * totem: Add cancel_hold_on_retransmit config option</changelog>
  <changelog author="emil.penchev@suse.com" date="1649678400">- Update to version corosync-2.4.5+git.5d625cef:
  * totemudpu: Don't block local socketpair
  * totemsrp: Switch totempg buffers at the right time
  * logsys: Unlock config mutex on error</changelog>
  <changelog author="emil.penchev@suse.com" date="1669032000">- Update to version 2.4.6:
  * totemsrp: More informative messages
  * icmap: fix the icmap_get_*_r functions
  * stats: Add basic schedule-miss stats to needle
  * icmap: icmap_init_r() leaks if trie_create() fails
  * test: Fix cpgtest
  * pkgconfig: Add libqb dependency
  * man: votequorum.5: use proper single quotes
  * cpg: Change downlist log level
  * totem: Increase ring_id seq after load
  * totempg: Check sanity (length) of received message
  * totemsrp: Reduce MTU to left room second mcast
  * qnetd: Rename qnetd-log.c to log.c
  * qnetd: Fix double -d description
  * qnetd: Check log initialization error
  * qnetd: Add function to set log target
  * qdevice: Use log instead of libqb log
  * qdevice: Import log instead of qdevice-log
  * qdevice: Merge msg_decode_error functions
  * qnetd: Use log-common for nodelist debug dump
  * qdevice: Configurable log priority bump
  * tests: Add utils_parse_bool_str test
  * qdevice: Free memory used by log
  * qdevice: Add log test
  * qdevice: Add header files to list of test sources
  * qdevice: Add chk variant of vsyslog to test-log
  * qdevice: Add prototype of __vsyslog_chk
  * votequorum: Ignore the icmap_get_* return value
  * logconfig: Remove double free of value
  * cmap: Assert copied string length
  * sync: Assert sync_callbacks.name length
  * votequorum: Assert copied strings length
  * cpghum: Remove unused time variables and functions
  * cfgtool: Remove unused callbacks
  * cmapctl: Free bin_value on error
  * quorumtool: Assert copied string length
  * votequorum: Reflect runtime change of 2Node to WFA
  * main: Add schedmiss timestamp into message
  * votequorum: Change check of expected_votes
  * quorumtool: Fix exit status codes
  * quorumtool: exit on invalid expected votes
  * votequorum: set wfa status only on startup
  * Revert "totemip: Add support for sin6_scope_id"
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * main: Make schedmiss in cmap and log equal
  * totemip: Add support for sin6_scope_id
  * qnetd: Do not call ffsplit_do on shutdown
  * qdevice: Fix connect heuristics result callback
  * qdevice: Fix connect heuristics result callback
  * qdevice: Log adds newline automatically
  * qnetd: Fix dpd timer
  * qnetd: Add support for keep active partition vote
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: Move token received callback
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * qnetd: Fix NULL dereference of client
  * qnetd: Simplify KAP Tie-breaker logic
  * totem: Add cancel_hold_on_retransmit config option
  * logsys: Unlock config mutex on error
  * totemsrp: Switch totempg buffers at the right time
  * totemudpu: Don't block local socketpair
  * configure.ac: fix pkgconfig issue of rdma
  * totemip: Add support for sin6_scope_id
  * totemip: compare sin6_scope_id and interface_num
  * qdevice: Change log level to NOTICE on PASS
  * cfgtool: output error messages to stderr
  * tools: use util_strtonum for options checking
  * cmapctl: return EXIT_FAILURE on failure
  * quorumtool: Help shouldn't require running service
  * quorumtool: strict check for -o option
  * cmapctl: check NULL for key type and value for -p
  * man: adjust description about interface section
  * qnetd: sort by node_id when add new client
  * man: replace votequorum_poll for actually used fn</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Provide user(coroqnetd) and group(coroqnetd) in the -qnetd
  package: user and group are generated by the pre script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="emil.penchev@suse.com" date="1715774400">- Update to version 3.1.8
  * Handling integer overflow issues
  * rust: Improve vector initialisation
  * man: Update the corosync_overview manpage
  * config: Fail to start if ping timers are invalid
  * rust: Remove some pointless casts
  * parser: Allow a non-breaking space as 'whitespace'
  * spec: Migrate to SPDX license
  * build: Fix rust make -j build dep for distcheck
  * rust: Remove tests from check scripts
  * Rust: Remove obsolete bindgen flag
  * knet: use knet TRACE logging level if available
  * Rust: 'fix' clippys for Rust 1.67
  * rust: Make it work on FreeBSD
  * bindings: Add Rust bindings
  * totemconfig: Add support for knet_mtu
  * configure: Modernize configure.ac a bit
  * log: Configure knet logging to the same as corosync
  * logrotate: Use copytruncate method by default
  * totemconfig: Check uname return value correctly
  * totempg: Fix alignment handling
  * pkgconfig: Export corosysconfdir
  * Remove bashism from configure script
  * totemudpu: Don't block local socketpair
  * build: Add explicit dependency for used libraries
  * totemsrp: Switch totempg buffers at the right time
  * cpghum: Allow to continue if corosync is restarted
  * man: Fix consensus timeout
  * logsys: Unlock config mutex on error
  * totem: Add cancel_hold_on_retransmit config option
  * totemconfig: Knet nodeid must be &lt; 65536
  * totemconfig: Ensure all knet hosts has a nodeid
  * cfgtool: Use CS_PRI_NODE_ID for formatting nodeid
  * cfgtool: Fix brief mode display of localhost
  * cfgtool: Set nodeid indexes after sort
  * totemconfig: Put autogenerated nodeid back to cmap
  * cfgtool: Check existence of at least one of nodeid
  * totemconfig: Do not process totem.nodeid
  * knet: Fix node status display
  * main: Add support for cgroup v2 and auto mode
  * stats: fix crash when iterating over deleted keys
  * man: Add note about single node configuration
  * Revert "main: Add support for cgroup v2"
  * Revert "man: Add info about cgroup v2 behavior"
  * man: Add info about cgroup v2 behavior
  * cfg: corosync_cfg_trackstop blocks forever
  * main: Add support for cgroup v2
  * main: Mark crypto_model key read only
  * totemconfig: Ensure strncpy is always terminated
  * config: Properly check crypto and compress models
  * man: corosync-cfgtool.8: use proper single quotes
  * knet: pass correct handle to knet_handle_compress
  * totemconfig: fix integer underflow and logic bug
  * totemconfig: change udp netmtu value as a constant
  * totemknet: retry knet_handle_new if it fails
  * main: Check memlock rlimit
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitize
  * configure: drop dead code
  * configure: detect and init pkg-config with macro
  * main: Close race condition when moving to statedir
  * init: Use corosync-cfgtool for shutdown
  * test: Add testcfg to exercise some cfg functions
  * cfg: Reinstate cfg tracking
  * cfg: Improve nodestatusget versioning
  * cfg: New API to get extended node/link infomation
  * totemknet: Check both cipher and hash for crypto
  * The ring id file needn't be executable
  * pkgconfig: export LOGDIR in corosync.pc
  * spec: Add isa version of corosync-devel provides
  * totemconfig: remove redundant nodeid error log
  * totemsrp: More informative messages
  * config: Increase default token timeout to 3000 ms
  * man: votequorum.5: use proper single quotes
  * man: fix typo: avaialable
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * quorum: Add support for nodelist callback
  * man: reload during rolling upgrade
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemconfig: improve linknumber checking
  * totemconfig: add interface number to the error str
  * cfg: enhance message_handler_req_lib_cfg_killnode
  * totemconfig: validate totem.transport value
  * cmapctl: return error on no result of print prefix
  * cmapctl: check NULL for key type and value for -p
  * quorumtool: strict check for -o option
  * quorumtool: Help shouldn't require running service
  * cfgtool: Return error when -i doesn't match
  * man: update output of -s and -b for cfgtool
  * cmapctl: return EXIT_FAILURE on failure
  * tools: use util_strtonum for options checking
  * cfgtool: enhancement -a option
  * cfgtool: output error messages to stderr
  * configure: Use default systemd path with prefix
  * build: Use git-version-gen during specfile build
  * build: Update git-version-gen
  * spec: Require at least knet 1.18 for crypto reload
  * config: Allow reconfiguration of crypto options
  * test: Fix cpgtest
  * config: Fix crash when a reload fails twice
  * config: Don't free pointers used by transports
  * config: don't reload vquorum if reload fails
  * cfg: Improve error return to cfgtool -R
  * config: Reorganise the config system
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * Revert "totemip: Add support for sin6_scope_id"
  * cfgtool: Fix error code as described in MP
  * icmap: icmap_init_r() leaks if trie_create() fails
  * votequorum: set wfa status only on startup
  * quorumtool: exit on invalid expected votes
  * votequorum: Change check of expected_votes
  * cfgtool: Simplify output a bit for link status
  * man: Enhance link_mode priority description
  * main: Add schedmiss timestamp into message
  * totemip: compare sin6_scope_id and interface_num
  * totemip: Really remove totemip_copy_endian_convert
  * totemip: Remove unused totemip_copy_endian_convert
  * totemip: Add support for sin6_scope_id
  * cfgtool: Improve link status display
  * totemknet: Change the initial value of the status
  * stats: Use nanoseconds from epoch for schedmiss
  * stats: Add stats for scheduler misses
  * votequorum: Reflect runtime change of 2Node to WFA
  * cpg: Change downlist log level
  * man: move cmap_keys man page from section 8 to 7
  * stats: Check return code of stats_map_get
  * quorumtool: Assert copied string length
  * notifyd: Check cmap_track_add result
  * cmapctl: Free bin_value on error
  * cfgtool: Remove unused callbacks
  * cpghum: Remove unused time variables and functions
  * votequorum: Assert copied strings length
  * totemknet: Assert strcpy length
  * totemknet: Check result of fcntl O_NONBLOCK call
  * totemconfig: Initialize warnings variable
  * sync: Assert sync_callbacks.name length
  * totemknet: Don't mix corosync and knet error codes
  * stats: Assert value_len when value is needed
  * cmap: Assert copied string length
  * totemconfig: Reuse already fetched pointer
  * logconfig: Remove double free of value
  * votequorum: Ignore the icmap_get_* return value
  * totemconfig: Free leaks found by coverity
  * icmap: fix the icmap_get_*_r functions
  * pkgconfig: Add libqb dependency
  * Initialize stack allocated memory
  * man: Fix corosync.conf knet pong count default
  * totemsrp: Reduce MTU to left room second mcast
  * totempg: Check sanity (length) of received message
  * build: add option for enabling sanitizer builds
  * totemknet: Add locking for log call
  * man: Fix link_mode priority description
  * notifyd: Don't dereference NULL key_name
  * totem: Increase ring_id seq after load
  * init: Use cpgtool instead of cfgtool
  * notifyd: Fix warning produced by 32-bit compiler
  * cfgtool: Remove unused code
  * logging: Add CS_PRI_NODE_ID and CS_PRI_RING_ID
  * vqsim: Fix gitignore
  * totemknet: Disable forwarding on shutdown
  * totemconfig: Fix compiler warning
  * totem: fix check if all nodes have same number of links
  * totem: fix check if all nodes have name attrs in multi-link setups
  * corosync-notifyd: Add option to disable DNS lookup
  * totemsrp: Fix warnings produced by gcc 9.1
  * cpg: Move filling of member_list to subfunction
  * cpg: Add more comments to notify_lib_joinlist
  * cpg: send single confchg event per group on joinlist
  * cpg: notify_lib_joinlist: drop conn parameter
  * vqsim: Check length of copied optarg
  * vqsim: Check result of icmap_set_uint32
  * vqsim: Remove unused total_nodes
  * vqsim: Free allocated newvq on error
  * vqsim: Check length of received message
  * vqsim: Check write result
  * vqsim: Do not access unitialized argv[0]
  * totemknet: Initialize return value in setup_nozzle
  * totemknet: macaddr_str is always set
  * totemknet: Ignore icmap_get_string result
  * totemknet: create_nozzle_device simplify check
  * totemip: Use res in totemip_sa_equal
  * totemconfig: ipaddr_equal use switch
  * configure: Fix GDB_CFLAGS typo
  * man: Add vqsim man page into distributed tarball
  * spec: Add support for user-flags configure option
  * man: Enahnce block_unlisted_ips description
  * man: Enhance corosync.conf mp a bit
  * cfgtool: Fix link status display
  * knet: Use block_unlisted_ips
  * udpu: Drop packets from unlisted IPs
  * knet: Fix initialising of knet access lists.
  * knet: allow corosync to use knet access lists
  * man: Enhance token_retransmit description
  * totemconfig: Fix minimum limit for hold timeout
  * vqsim: Enhance vqsim
  * knet: Fix a couple of errors when adding a new link
  * totemconfig: fix autogen mcastaddr for ipv6-4
  * totemconfig: Ensure nodeid is specified for IPv6
  * vqsim: Fix vqsim for corosync 3.0
  * vqsim: Make vqsim compile
  * totemconfig: ipaddr_equal check just addr part
  * cpg: Add CPG_REASON_UNDEFINED
  * crypto: re-introduce secauth parameter
  * totemconfig: Remove support for 3des
  * keygen: Reflect change in knet
  * set totem.keyfile and totem.key to RO
  * Revert "init: Enable StopWhenUnneeded"
  * totemsrp: Word spelling mistake
  * coroparse: Fix compiler warning
  * configure: Do not autodetect nozzle
  * nozzle: Add support for libnozzle devices
  * quorumtool: Fix exit status codes
  * corosync-cfgtool: Fix -i matching
  * build: Use the AWK variable provided by configure
  * build: Use the SED variable provided by configure
  * configure.ac: AC_PROG_SED is already present
  * corosync.conf.5: typography fixes
  * corosync.conf.5: fix grammar
  * cfgtool: Improve link status display
  * doc: Update INSTALL file
  * init: Enable StopWhenUnneeded
  * totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4
  * [totemknet] update for libknet.so.2.0.0 init API
  * Config version must be specified
  * Don't declare success early
  * More natural error messages
  * main: Rename run_dir to state_dir
  * totemconfig: Enhance totem.ip_version
  * totemip: Add debug information to totemip_parse
  * totemconfig: Add IPs to family mismatch error
  * config: Look up hostnames in a defined order
  * Fix corosync.conf.5 manpage typos
  * man: Add some information about address resolution
  * totemconfig: Really use totemip_parse results
  * man: Add instructions for adding/removing nodes
  * config: Disallow corosync-cmapctl updates of nodelist
  * config: Report IP addr/nodename parse errors back
  * coroparse: Remove unused cs_err initialization
  * cpghum: Check cpg_local_get return code
  * testcpg2: Check cpg_dispatch return code
  * notifyd: Delete registered tracking keys
  * stats: Fix delete of track
  * init: Fix init script to work with containers
  * main: Remove COROSYNC_RUN_DIR
  * man: Describe nodelist.node.name properly
  * main: Remove COROSYNC_TOTEM_AUTHKEY_FILE
  * main: Replace COROSYNC_MAIN_CONFIG_FILE
  * main: Move sched paramaters to config file
  * configure: move to AC_COMPILE_IFELSE
  * logsys: Make hires timestamp default
  * logsys: Support hires timestamp
  * totemconfig: Fix logging of freed string
  * config: Allow generated nodeis for UDP &amp; UDPU
  * config example: Migrate to newer syntax
  * log: Implement support for reopening log files
  * totemconfig: Replace strcpy by strncpy
  * config: Fix crash in reload if new interfaces are added
  * man: Fix default knet_pmtud_interval to match code
  * build: Remove totempg shared library leftovers
  * build: Do not compile totempg as a shared library
  * man: Fix typo conains -&gt; contains
  * man: Fix typo connnections -&gt; connections
  * build: Remove NSS dependencies
  * cts: Remove CTS
  * man: Fix crypto_hash and crypto_cipher defaults
  * coroparse: Fix newly introduced warning
  * Add option to force cluster into GATHER state
  * coroparse: Use key_name for error message
  * coroparse: Add file name and line to error message
  * coroparse: Be more strict in what is parsed
  * coroparse: Fix remove_whitespace end condition
  * coroparse: Check icmap_set results
  * coroparse: Return error if config line is too long
  * notifyd: Propagate error to exit code
  * git-version-gen: Fail on UNKNOWN version
  * build: Support for git archive stored tags
  * man: fix cmap key name runtime.config.totem.token
  * Remove libcgroup
  * systemd: prevent redundancy in journal
  * Add token_warning configuration option
  * corosync-notifyd: Rename global local_nodeid
  * totemsrp: Add assert into memb_lowest_in_config
  * totemconfig: Enlarge error_string_response
  * ipc_glue: Fix strncpy in pid_to_name function
  * cmap: Fix strncpy warning in cmap_iter_next
  * util: Fix strncpy in setcs_name_t function
  * totemknet: Free instance on failure exit
  * spec: Add explicit gcc build requirement
  * Add option for quiet operation to corosync-cmapctl
  * totemudpu: Pass correct paramto totemip_nosigpipe
  * totemudpu: Add local loop support
  * config: Fail config validation if not all nodes have all links
  * config: Enforce use of 'name' node attribute in multi-link clusters
  * totemconfig: Check for things that cannot be changed on the fly
  * Fix snprintf warnings
  * init: Use existing env variable from sysconf
  * upstart: Remove notifyd upstart unit
  * knet: Don't try to create loopback interface twice
  * knet: Fix knet log buffer size
  * cpg: Inform clients about left nodes during pause
  * man: Make the manpages reproducible
  * totemsrp: Fix leave message regression
  * totemsrp: Log proc/fail lists in memb_join_process
  * totemsrp: Fix srp_addr_compare
  * tools: don't distribute what we can easily make
  * Drop all references to SECURITY file
  * SECURITY: Remove SECURITY file
  * NSS_NoDB_Init: the parameter is reserved, must be NULL
  * Fix typo: defualt -&gt; default
  * Fix typo: sucesfully -&gt; successfully
  * totemsrp: Check join and leave msg length
  * totemsrp: Implement sanity checks of received msgs
  * cpg: Handle fragmented message sending interrupt
  * totem: Display IP of sender
  * totemsrp: Add magic and version into header
  * knet: Fix display of links with unconfigured link0
  * main: Set errno before calling of strtol
  * quorumtool: Don't set our_flags without v_handle
  * sam_test_agent: Remove unused assignment
  * blackbox: Quote subshell result properly
  * init: Quote subshell result properly
  * cfgtool: Don't assume link ID is a single char
  * knet: Always use link0 for loopback
  * totem: Fix debug warnings printed by knet
  * config: Allow use of ring0_addr
  * config: Update message when local host isn't found
  * cfg: Fix cfg_get_node_addrs so that DLM works
  * totem: Return interface count correctly
  * totem: Use nodeid ONLY in srp_addr
  * [rpm] use rpm macros to identify build distro
  * [rpm] fixup corosync.spec.in to build on opensuse
  * totempg: Fix corrupted messages
  * totempg: use iovec[i].iov_len instead of copy_len
  * totempg: Fix fragmentation segfault
  * [build] fix build with non-standard knet location
  * [man] fix regression introduced by 7162e75dcf81b7e475536e3060bf5e9312cd43b8
  * Man: Move overview mp to sections 3 and 7 from 8
  * logging: Close before and open blackbox after fork
  * logging: Make blackbox configurable
  * corosync-notifyd: improve error handling
  * spec: Modernize spec to comply with newest Fedora
  * build: Remove support for upstart
  * build: Replace -lknet with autoconf generated vars
  * build: Remove rdma/ibverbs
  * qdevice: Remove qdevices
  * config: Don't fudge port numbers
  * knet: Allow ping_timers to be auto-configured
  * cts: Make code compatible with Python 3
  * corosync-notifyd: make SNMP work again
  * build: Add the headers necessary for RPM build
  * config: if local node addr is wrong, fail with a sensible message
  * totemknet: Drop truncated packets on receive
  * totemudp: Make use of UDP_RECEIVE_FRAME_SIZE_MAX
  * totemudpu: Export and rename UDPU_FRAME_SIZE_MAX
  * totemconfig: Fix UDP autogeneration of mcast addr
  * totemudpu: Scale receive buffer
  * config: Allow selection of crypto_model
  * libcpg: Fix issue with partial big packet assembly
  * qdevice: mv free(str) after port validation
  * corosync.aug: Add missing options
  * config: Allow links to have different ip_versions
  * Fix compile errors in qdevice and vqsim on FreeBSD
  * cmapctl: mention the Clear stats option in usage message
  * corosync-cfgtool: refactor cli parameters handling
  * wd: fix snprintf warnings
  * totemsrp: Revert totemsrp_get_ifaces() changes
  * man: Add note about corosync not using name option
  * corosync.conf: publicize nodelist.node.name
  * man: fixes for corosync.conf man page
  * cmapctl: add "-m" option into help message
  * totemconfig: remove duplicate aes256 test
  * fix output format for corosync-cfgtool with knet (#283)
  * sync: Call sync_init of all services at once
  * sync: Remove unneeded determine sync code
  * stats: Add some missing knet stats
  * man: Add note about qdevice parallel cmds start
  * man: corosync-qdevice: some more stylistics
  * systemd: corosync-qdevice can not run without corosync
  * man: corosync-qdevice: fix formatting vs. punctuation
  * configure: kill off INITWRAPPERSDIR
  * corosync-qdevice: send startup notification to systemd
  * corosync-qnetd: send startup notification to systemd
  * Send corosync-notifyd startup notification to systemd
  * Make systemd stop corosync-notifyd if corosync is stopped
  * corosync.spec: Add system-devel build requirement
  * Send corosync startup notification to systemd
  * quorumtool: Use full buffer size in snprintf
  * cpghum: Mark print/log functions with printf attr
  * cpg_test_agent: Fix snprintf compiler warnings
  * sam: Fix snprintf compiler warnings
  * coroparse: Do not convert empty uid, gid to 0
  * cmapctl: Add option to clear the stats
  * stats: Don't display errors when reading knet stat
  * make the output of "corosync-cfgtool -s" more readable (#269)
  * cfg: nodeid should be unsigned int
  * quorumtool: remove duplicated help message
  * man: fix cpg_mcast_joined.3.in
  * man: Add stats.clear keys to the cmap_keys man pg
  * stats: Add cmap key to clear the various stats.
  * Use RuntimeDirectory instead of tmpfiles.d
  * totemconfig: generate mcast icmap items for UDP
  * Use static case blocks to determine distro flavor
  * configure: add --with-initconfigdir option
  * totemconfig: add nodeid check for knet
  * man: support SOURCE_DATE_EPOCH
  * man:fix in corosync-qdevice.8
  * man: must set nodeid for knet in nodelist
  * logsys: Avoid redundant callsite section checking
  * config: Fix memory leak
  * knet: Add support for knet compression
  * qdevice: Add support for heuristics
  * Spec: fix arch-qualified dependencies
  * cmap: Remove noop highest config version check
  * cmap: don't shutdown highest config_version node
  * totemudp: Remove memb_join discarding
  * votequorum: make atb consistent on nodelist reload
  * totem: Remove unnecessary NSS headers
  * config: Allow dynamic link configuration
  * totemudp: Retry if bind fails
  * corosync.conf.5: watchdog support is conditional
  * wd: default to not using a watchdog
  * wd: remove extra capitalization typo
  * corosync.conf.5: add warning about slow watchdogs
  * totemknet: fix debug message typo
  * corosync.conf.5: Fix watchdog documentation
  * wd: fix typo
  * Include fcntl.h for F_* and O_* defines
  * stats: add knet 'handle' stats
  * main: use syslog &amp; printf directly for early log messages
  * totempg: Allow space for incoming overflow
  * cpghum: Add options to change flood start/mult/end sizes (#237)
  * totemknet: Use knet's LOOPBACK transport (#236)
  * CFG: Remove ring-reenable code
  * main: Add support for libcgroup
  * stats: Add map with on-demand statistics
  * ipc: Check for the libraries sending invalid message IDs
  * main: Add option to set priority
  * totemknet: Prevent dead-loop in log_flush_messages
  * corosync-keygen: Display number of needed bits
  * totemknet: Flush knet log messages
  * corosync-keygen: Make less-secure default
  * corosync-keygen: Adapt to knet key sizes
  * totemconfig: Make crypto work again
  * knet: Compile with latest knet API
  * totem: Propagate totem initialization failure
  * totemknet: Use new knet_link_set_config() API
  * coroapi: Use size_t for private_data_size
  * votequorum: Report errors from votequorum_exec_send_reconfigure
  * cpghum: remove space after delimiter
  * cpghum: Add interim RTT to cpghum
  * configure: Enable C99 language standard
  * main: Display reason why cluster cannot be formed
  * notifyd: Add the community name to an SNMP trap
  * cpghum: Add machine-readable output
  * test: Fold cpgbench into cpghum (#205)
  * knet: Allow space for encapsulated messages
  * Main: Call mlockall after fork
  * Fix typos in README.recovery
  * coroparse: Use readdir instead of readdir_r
  * totemknet: Handle logpipe creation failure
  * wd: Report error when close of wd fails
  * Qnetd lms: Use UTILS_PRI_RING_ID printf format str
  * cpghum: Fix printf of size_t variable
  * totemknet: Got back to recvmsg() from recvmmsg()
  * totemconfig: Prefer nodelist over bindnetaddr
  * knet: Close libknet down cleanly at shutdown
  * man: Document -a option to corosync-quorumtool
  * cpghum test: Improve error codes
  * quorumtool: Add option to show all node addresses
  * cpghum: Stop cpghum from reporting fake CRC errors
  * logconfig: Do not overwrite logger_subsys priority
  * totem: Fix buffer sizes
  * main: Don't ask libqb to handle segv, it doesn't work
  * Logsys: Change logsys syslog_priority priority
  * knet: improve logging messages by adding knet subsystem
  * cpghum: Add abort_on_error option
  * cpghum: Add min rtt and print stats every alarm
  * cpghum: Add Round Trip Time (RTT) reporting
  * knet: Change nodeids to knet_node_id_t for new knet compatibility
  * knet: Fix MTU sizes &amp; allow transport config in corosync.conf
  * knet: PMTUd data_mtu already accounts for IP and knet header overheads
  * knet: switch from write to sendto()
  * knet: Change nodeids to 8 bit for new knet compatibility
  * doc: document watchdog_device parameter
  * knet: Fix member_remove to shut down existing links first
  * Spec: make internal dependencies arch-qualified
  * Spec: drop unneeded dependency
  * knet: Reduce default pong count to 2 for faster startup
  * totemknet: Make it compile with kronosnet git master
  * Qdevice: fix spell errors in qdevice
  * Remove redundant header file inclusion
  * Remove deprecated doxygen flags
  * upstart: Add softdog module loading example
  * Totempg: remove duplicate memcpy in mcast_msg func
  * man: Modify man-page according to command usage
  * init: Add doc URIs to the systemd service files
  * Fix typo: Destorying -&gt; Destroying
  * man: Fix typos in man page
  * totempg: totempg_groups_join return valid error
  * systemd: Delete unnecessary soft_margin
  * knet: Support reload of link parameters
  * list: Unify the list processing with qb_list func
  * knet: Allow configuration of more params
  * knet: Don't lose log messages when knet gets busy (#165)
  * libvotequorum: Bump version
  * list: Replace for_each by safe version where need
  * list: Remove list.h
  * list: Replace uses of list.h with qblist.h
  * [build] Fix build on RHEL7.3 latest
  * Change a type of NodeID.
  * vqsim: Fix Makefile.am
  * configure: Remove RDMA (again)
  * vqsim: Add Quorum simulator program
  * Build: Fail configure if knet is not installed
  * totem: add totemknet.[ch]
  * cfg: Prevents use of uninitialized buffer
  * totem: Add Kronosnet transport.
  * coropase: Set a poll_period value for wd monitor
  * votequorum: simplify reconfigure message handling
  * votequorum: Don't update expected_votes display if value is too high
  * Fix various typos
  * init: corosync and cman aren't system facilities
  * conf: be explicit about the mcast src/dst ports
    Added:
    corosync-3.1.8.tar.gz
    Removed:
    corosync-2.4.6.tar.gz
    bug-1001164_corosync.conf-example.patch
    bug-1032634_fix-ifdown-udp.patch
    bug-1083561_upgrade-from-1-x-y.patch
    bug-882449_corosync-conf-example.patch
    corosync-2.3.4-fix-bashisms.patch
    corosync-init-lockfile-path-error.patch
    corosync-start-stop-level.patch
    Fix-compile-warnings-with-GCC-7.2.1.patch
    upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
    baselibs.conf
    Modified:
    _service
    _servicedata
    corosync.changes: add changelogs
    corosync.spec: updates to corosync3</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731931200">- Update to version 3.1.9:
  * rust: Update to latest standards
  * totemsrp: Fix orf_token stats
  * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
  * totem: Use proper timestamp type for token warning
  * stats: Store token rx and tx timestamps as 64-bit
  * rust: fix clippy warning in rust 1.81
  * coroparse: Free kv_item key and value on failure
  * icmap: Free memory if qb_map_notify_add fails
  * cfg: Free new_config interfaces on failure
  * main: support lock pid file arg
  * man: fix a typo in cpg_model_initialize
  * man: Improve quorum provider formatting
  * rust: tests return errors and don't hang
  * rust: Improve Rust bindings
  * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
  * man: corosync.conf: Multi improvements
  * totem: Fix reference links
  * Report crypto errors back to cfg reload
  * Fix up the library .versions files
  * configure: Fix building of rust for release
  * License: Fix year (mainly to fix rust building)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1742990400">- Add a patch to fix CVE-2025-30472 (bsc#1239987)
  * 779.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775131200">- Add a patch to fix CVE-2026-35091 and CVE-2026-35092 (bsc#1261299)(bsc#1261300)
  * 820.patch</changelog>
</package>
<package pkgid="1993097ca20bde8ed3bc6e01fc8cfb775eae8c78b1c39791969dfd3cfa9bdce3b76a7f3059059b58bf43f4335a63d9c8004dafd40d64516040f93d47cdb1202d" name="corosync-devel" arch="x86_64">
  <version epoch="0" ver="3.1.9" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1622548800">- Update to version 2.4.5+git69.6236728a:
  * man: replace votequorum_poll for actually used fn
  * qnetd: sort by node_id when add new client
  * man: adjust description about interface section
  * qnetd: Simplify KAP Tie-breaker logic
  * qnetd: Fix NULL dereference of client
  * man: votequorum.5: use proper single quotes
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: More informative messages
- Remove patches:
  bug-1166899-quorumtool-Fix-exit-status-codes.patch
  bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="varkoly@suse.com" date="1629720000">- Update to version 2.4.5+git70.64010f57:
  * totem: Add cancel_hold_on_retransmit config option</changelog>
  <changelog author="emil.penchev@suse.com" date="1649678400">- Update to version corosync-2.4.5+git.5d625cef:
  * totemudpu: Don't block local socketpair
  * totemsrp: Switch totempg buffers at the right time
  * logsys: Unlock config mutex on error</changelog>
  <changelog author="emil.penchev@suse.com" date="1669032000">- Update to version 2.4.6:
  * totemsrp: More informative messages
  * icmap: fix the icmap_get_*_r functions
  * stats: Add basic schedule-miss stats to needle
  * icmap: icmap_init_r() leaks if trie_create() fails
  * test: Fix cpgtest
  * pkgconfig: Add libqb dependency
  * man: votequorum.5: use proper single quotes
  * cpg: Change downlist log level
  * totem: Increase ring_id seq after load
  * totempg: Check sanity (length) of received message
  * totemsrp: Reduce MTU to left room second mcast
  * qnetd: Rename qnetd-log.c to log.c
  * qnetd: Fix double -d description
  * qnetd: Check log initialization error
  * qnetd: Add function to set log target
  * qdevice: Use log instead of libqb log
  * qdevice: Import log instead of qdevice-log
  * qdevice: Merge msg_decode_error functions
  * qnetd: Use log-common for nodelist debug dump
  * qdevice: Configurable log priority bump
  * tests: Add utils_parse_bool_str test
  * qdevice: Free memory used by log
  * qdevice: Add log test
  * qdevice: Add header files to list of test sources
  * qdevice: Add chk variant of vsyslog to test-log
  * qdevice: Add prototype of __vsyslog_chk
  * votequorum: Ignore the icmap_get_* return value
  * logconfig: Remove double free of value
  * cmap: Assert copied string length
  * sync: Assert sync_callbacks.name length
  * votequorum: Assert copied strings length
  * cpghum: Remove unused time variables and functions
  * cfgtool: Remove unused callbacks
  * cmapctl: Free bin_value on error
  * quorumtool: Assert copied string length
  * votequorum: Reflect runtime change of 2Node to WFA
  * main: Add schedmiss timestamp into message
  * votequorum: Change check of expected_votes
  * quorumtool: Fix exit status codes
  * quorumtool: exit on invalid expected votes
  * votequorum: set wfa status only on startup
  * Revert "totemip: Add support for sin6_scope_id"
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * main: Make schedmiss in cmap and log equal
  * totemip: Add support for sin6_scope_id
  * qnetd: Do not call ffsplit_do on shutdown
  * qdevice: Fix connect heuristics result callback
  * qdevice: Fix connect heuristics result callback
  * qdevice: Log adds newline automatically
  * qnetd: Fix dpd timer
  * qnetd: Add support for keep active partition vote
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: Move token received callback
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * qnetd: Fix NULL dereference of client
  * qnetd: Simplify KAP Tie-breaker logic
  * totem: Add cancel_hold_on_retransmit config option
  * logsys: Unlock config mutex on error
  * totemsrp: Switch totempg buffers at the right time
  * totemudpu: Don't block local socketpair
  * configure.ac: fix pkgconfig issue of rdma
  * totemip: Add support for sin6_scope_id
  * totemip: compare sin6_scope_id and interface_num
  * qdevice: Change log level to NOTICE on PASS
  * cfgtool: output error messages to stderr
  * tools: use util_strtonum for options checking
  * cmapctl: return EXIT_FAILURE on failure
  * quorumtool: Help shouldn't require running service
  * quorumtool: strict check for -o option
  * cmapctl: check NULL for key type and value for -p
  * man: adjust description about interface section
  * qnetd: sort by node_id when add new client
  * man: replace votequorum_poll for actually used fn</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Provide user(coroqnetd) and group(coroqnetd) in the -qnetd
  package: user and group are generated by the pre script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="emil.penchev@suse.com" date="1715774400">- Update to version 3.1.8
  * Handling integer overflow issues
  * rust: Improve vector initialisation
  * man: Update the corosync_overview manpage
  * config: Fail to start if ping timers are invalid
  * rust: Remove some pointless casts
  * parser: Allow a non-breaking space as 'whitespace'
  * spec: Migrate to SPDX license
  * build: Fix rust make -j build dep for distcheck
  * rust: Remove tests from check scripts
  * Rust: Remove obsolete bindgen flag
  * knet: use knet TRACE logging level if available
  * Rust: 'fix' clippys for Rust 1.67
  * rust: Make it work on FreeBSD
  * bindings: Add Rust bindings
  * totemconfig: Add support for knet_mtu
  * configure: Modernize configure.ac a bit
  * log: Configure knet logging to the same as corosync
  * logrotate: Use copytruncate method by default
  * totemconfig: Check uname return value correctly
  * totempg: Fix alignment handling
  * pkgconfig: Export corosysconfdir
  * Remove bashism from configure script
  * totemudpu: Don't block local socketpair
  * build: Add explicit dependency for used libraries
  * totemsrp: Switch totempg buffers at the right time
  * cpghum: Allow to continue if corosync is restarted
  * man: Fix consensus timeout
  * logsys: Unlock config mutex on error
  * totem: Add cancel_hold_on_retransmit config option
  * totemconfig: Knet nodeid must be &lt; 65536
  * totemconfig: Ensure all knet hosts has a nodeid
  * cfgtool: Use CS_PRI_NODE_ID for formatting nodeid
  * cfgtool: Fix brief mode display of localhost
  * cfgtool: Set nodeid indexes after sort
  * totemconfig: Put autogenerated nodeid back to cmap
  * cfgtool: Check existence of at least one of nodeid
  * totemconfig: Do not process totem.nodeid
  * knet: Fix node status display
  * main: Add support for cgroup v2 and auto mode
  * stats: fix crash when iterating over deleted keys
  * man: Add note about single node configuration
  * Revert "main: Add support for cgroup v2"
  * Revert "man: Add info about cgroup v2 behavior"
  * man: Add info about cgroup v2 behavior
  * cfg: corosync_cfg_trackstop blocks forever
  * main: Add support for cgroup v2
  * main: Mark crypto_model key read only
  * totemconfig: Ensure strncpy is always terminated
  * config: Properly check crypto and compress models
  * man: corosync-cfgtool.8: use proper single quotes
  * knet: pass correct handle to knet_handle_compress
  * totemconfig: fix integer underflow and logic bug
  * totemconfig: change udp netmtu value as a constant
  * totemknet: retry knet_handle_new if it fails
  * main: Check memlock rlimit
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitize
  * configure: drop dead code
  * configure: detect and init pkg-config with macro
  * main: Close race condition when moving to statedir
  * init: Use corosync-cfgtool for shutdown
  * test: Add testcfg to exercise some cfg functions
  * cfg: Reinstate cfg tracking
  * cfg: Improve nodestatusget versioning
  * cfg: New API to get extended node/link infomation
  * totemknet: Check both cipher and hash for crypto
  * The ring id file needn't be executable
  * pkgconfig: export LOGDIR in corosync.pc
  * spec: Add isa version of corosync-devel provides
  * totemconfig: remove redundant nodeid error log
  * totemsrp: More informative messages
  * config: Increase default token timeout to 3000 ms
  * man: votequorum.5: use proper single quotes
  * man: fix typo: avaialable
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * quorum: Add support for nodelist callback
  * man: reload during rolling upgrade
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemconfig: improve linknumber checking
  * totemconfig: add interface number to the error str
  * cfg: enhance message_handler_req_lib_cfg_killnode
  * totemconfig: validate totem.transport value
  * cmapctl: return error on no result of print prefix
  * cmapctl: check NULL for key type and value for -p
  * quorumtool: strict check for -o option
  * quorumtool: Help shouldn't require running service
  * cfgtool: Return error when -i doesn't match
  * man: update output of -s and -b for cfgtool
  * cmapctl: return EXIT_FAILURE on failure
  * tools: use util_strtonum for options checking
  * cfgtool: enhancement -a option
  * cfgtool: output error messages to stderr
  * configure: Use default systemd path with prefix
  * build: Use git-version-gen during specfile build
  * build: Update git-version-gen
  * spec: Require at least knet 1.18 for crypto reload
  * config: Allow reconfiguration of crypto options
  * test: Fix cpgtest
  * config: Fix crash when a reload fails twice
  * config: Don't free pointers used by transports
  * config: don't reload vquorum if reload fails
  * cfg: Improve error return to cfgtool -R
  * config: Reorganise the config system
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * Revert "totemip: Add support for sin6_scope_id"
  * cfgtool: Fix error code as described in MP
  * icmap: icmap_init_r() leaks if trie_create() fails
  * votequorum: set wfa status only on startup
  * quorumtool: exit on invalid expected votes
  * votequorum: Change check of expected_votes
  * cfgtool: Simplify output a bit for link status
  * man: Enhance link_mode priority description
  * main: Add schedmiss timestamp into message
  * totemip: compare sin6_scope_id and interface_num
  * totemip: Really remove totemip_copy_endian_convert
  * totemip: Remove unused totemip_copy_endian_convert
  * totemip: Add support for sin6_scope_id
  * cfgtool: Improve link status display
  * totemknet: Change the initial value of the status
  * stats: Use nanoseconds from epoch for schedmiss
  * stats: Add stats for scheduler misses
  * votequorum: Reflect runtime change of 2Node to WFA
  * cpg: Change downlist log level
  * man: move cmap_keys man page from section 8 to 7
  * stats: Check return code of stats_map_get
  * quorumtool: Assert copied string length
  * notifyd: Check cmap_track_add result
  * cmapctl: Free bin_value on error
  * cfgtool: Remove unused callbacks
  * cpghum: Remove unused time variables and functions
  * votequorum: Assert copied strings length
  * totemknet: Assert strcpy length
  * totemknet: Check result of fcntl O_NONBLOCK call
  * totemconfig: Initialize warnings variable
  * sync: Assert sync_callbacks.name length
  * totemknet: Don't mix corosync and knet error codes
  * stats: Assert value_len when value is needed
  * cmap: Assert copied string length
  * totemconfig: Reuse already fetched pointer
  * logconfig: Remove double free of value
  * votequorum: Ignore the icmap_get_* return value
  * totemconfig: Free leaks found by coverity
  * icmap: fix the icmap_get_*_r functions
  * pkgconfig: Add libqb dependency
  * Initialize stack allocated memory
  * man: Fix corosync.conf knet pong count default
  * totemsrp: Reduce MTU to left room second mcast
  * totempg: Check sanity (length) of received message
  * build: add option for enabling sanitizer builds
  * totemknet: Add locking for log call
  * man: Fix link_mode priority description
  * notifyd: Don't dereference NULL key_name
  * totem: Increase ring_id seq after load
  * init: Use cpgtool instead of cfgtool
  * notifyd: Fix warning produced by 32-bit compiler
  * cfgtool: Remove unused code
  * logging: Add CS_PRI_NODE_ID and CS_PRI_RING_ID
  * vqsim: Fix gitignore
  * totemknet: Disable forwarding on shutdown
  * totemconfig: Fix compiler warning
  * totem: fix check if all nodes have same number of links
  * totem: fix check if all nodes have name attrs in multi-link setups
  * corosync-notifyd: Add option to disable DNS lookup
  * totemsrp: Fix warnings produced by gcc 9.1
  * cpg: Move filling of member_list to subfunction
  * cpg: Add more comments to notify_lib_joinlist
  * cpg: send single confchg event per group on joinlist
  * cpg: notify_lib_joinlist: drop conn parameter
  * vqsim: Check length of copied optarg
  * vqsim: Check result of icmap_set_uint32
  * vqsim: Remove unused total_nodes
  * vqsim: Free allocated newvq on error
  * vqsim: Check length of received message
  * vqsim: Check write result
  * vqsim: Do not access unitialized argv[0]
  * totemknet: Initialize return value in setup_nozzle
  * totemknet: macaddr_str is always set
  * totemknet: Ignore icmap_get_string result
  * totemknet: create_nozzle_device simplify check
  * totemip: Use res in totemip_sa_equal
  * totemconfig: ipaddr_equal use switch
  * configure: Fix GDB_CFLAGS typo
  * man: Add vqsim man page into distributed tarball
  * spec: Add support for user-flags configure option
  * man: Enahnce block_unlisted_ips description
  * man: Enhance corosync.conf mp a bit
  * cfgtool: Fix link status display
  * knet: Use block_unlisted_ips
  * udpu: Drop packets from unlisted IPs
  * knet: Fix initialising of knet access lists.
  * knet: allow corosync to use knet access lists
  * man: Enhance token_retransmit description
  * totemconfig: Fix minimum limit for hold timeout
  * vqsim: Enhance vqsim
  * knet: Fix a couple of errors when adding a new link
  * totemconfig: fix autogen mcastaddr for ipv6-4
  * totemconfig: Ensure nodeid is specified for IPv6
  * vqsim: Fix vqsim for corosync 3.0
  * vqsim: Make vqsim compile
  * totemconfig: ipaddr_equal check just addr part
  * cpg: Add CPG_REASON_UNDEFINED
  * crypto: re-introduce secauth parameter
  * totemconfig: Remove support for 3des
  * keygen: Reflect change in knet
  * set totem.keyfile and totem.key to RO
  * Revert "init: Enable StopWhenUnneeded"
  * totemsrp: Word spelling mistake
  * coroparse: Fix compiler warning
  * configure: Do not autodetect nozzle
  * nozzle: Add support for libnozzle devices
  * quorumtool: Fix exit status codes
  * corosync-cfgtool: Fix -i matching
  * build: Use the AWK variable provided by configure
  * build: Use the SED variable provided by configure
  * configure.ac: AC_PROG_SED is already present
  * corosync.conf.5: typography fixes
  * corosync.conf.5: fix grammar
  * cfgtool: Improve link status display
  * doc: Update INSTALL file
  * init: Enable StopWhenUnneeded
  * totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4
  * [totemknet] update for libknet.so.2.0.0 init API
  * Config version must be specified
  * Don't declare success early
  * More natural error messages
  * main: Rename run_dir to state_dir
  * totemconfig: Enhance totem.ip_version
  * totemip: Add debug information to totemip_parse
  * totemconfig: Add IPs to family mismatch error
  * config: Look up hostnames in a defined order
  * Fix corosync.conf.5 manpage typos
  * man: Add some information about address resolution
  * totemconfig: Really use totemip_parse results
  * man: Add instructions for adding/removing nodes
  * config: Disallow corosync-cmapctl updates of nodelist
  * config: Report IP addr/nodename parse errors back
  * coroparse: Remove unused cs_err initialization
  * cpghum: Check cpg_local_get return code
  * testcpg2: Check cpg_dispatch return code
  * notifyd: Delete registered tracking keys
  * stats: Fix delete of track
  * init: Fix init script to work with containers
  * main: Remove COROSYNC_RUN_DIR
  * man: Describe nodelist.node.name properly
  * main: Remove COROSYNC_TOTEM_AUTHKEY_FILE
  * main: Replace COROSYNC_MAIN_CONFIG_FILE
  * main: Move sched paramaters to config file
  * configure: move to AC_COMPILE_IFELSE
  * logsys: Make hires timestamp default
  * logsys: Support hires timestamp
  * totemconfig: Fix logging of freed string
  * config: Allow generated nodeis for UDP &amp; UDPU
  * config example: Migrate to newer syntax
  * log: Implement support for reopening log files
  * totemconfig: Replace strcpy by strncpy
  * config: Fix crash in reload if new interfaces are added
  * man: Fix default knet_pmtud_interval to match code
  * build: Remove totempg shared library leftovers
  * build: Do not compile totempg as a shared library
  * man: Fix typo conains -&gt; contains
  * man: Fix typo connnections -&gt; connections
  * build: Remove NSS dependencies
  * cts: Remove CTS
  * man: Fix crypto_hash and crypto_cipher defaults
  * coroparse: Fix newly introduced warning
  * Add option to force cluster into GATHER state
  * coroparse: Use key_name for error message
  * coroparse: Add file name and line to error message
  * coroparse: Be more strict in what is parsed
  * coroparse: Fix remove_whitespace end condition
  * coroparse: Check icmap_set results
  * coroparse: Return error if config line is too long
  * notifyd: Propagate error to exit code
  * git-version-gen: Fail on UNKNOWN version
  * build: Support for git archive stored tags
  * man: fix cmap key name runtime.config.totem.token
  * Remove libcgroup
  * systemd: prevent redundancy in journal
  * Add token_warning configuration option
  * corosync-notifyd: Rename global local_nodeid
  * totemsrp: Add assert into memb_lowest_in_config
  * totemconfig: Enlarge error_string_response
  * ipc_glue: Fix strncpy in pid_to_name function
  * cmap: Fix strncpy warning in cmap_iter_next
  * util: Fix strncpy in setcs_name_t function
  * totemknet: Free instance on failure exit
  * spec: Add explicit gcc build requirement
  * Add option for quiet operation to corosync-cmapctl
  * totemudpu: Pass correct paramto totemip_nosigpipe
  * totemudpu: Add local loop support
  * config: Fail config validation if not all nodes have all links
  * config: Enforce use of 'name' node attribute in multi-link clusters
  * totemconfig: Check for things that cannot be changed on the fly
  * Fix snprintf warnings
  * init: Use existing env variable from sysconf
  * upstart: Remove notifyd upstart unit
  * knet: Don't try to create loopback interface twice
  * knet: Fix knet log buffer size
  * cpg: Inform clients about left nodes during pause
  * man: Make the manpages reproducible
  * totemsrp: Fix leave message regression
  * totemsrp: Log proc/fail lists in memb_join_process
  * totemsrp: Fix srp_addr_compare
  * tools: don't distribute what we can easily make
  * Drop all references to SECURITY file
  * SECURITY: Remove SECURITY file
  * NSS_NoDB_Init: the parameter is reserved, must be NULL
  * Fix typo: defualt -&gt; default
  * Fix typo: sucesfully -&gt; successfully
  * totemsrp: Check join and leave msg length
  * totemsrp: Implement sanity checks of received msgs
  * cpg: Handle fragmented message sending interrupt
  * totem: Display IP of sender
  * totemsrp: Add magic and version into header
  * knet: Fix display of links with unconfigured link0
  * main: Set errno before calling of strtol
  * quorumtool: Don't set our_flags without v_handle
  * sam_test_agent: Remove unused assignment
  * blackbox: Quote subshell result properly
  * init: Quote subshell result properly
  * cfgtool: Don't assume link ID is a single char
  * knet: Always use link0 for loopback
  * totem: Fix debug warnings printed by knet
  * config: Allow use of ring0_addr
  * config: Update message when local host isn't found
  * cfg: Fix cfg_get_node_addrs so that DLM works
  * totem: Return interface count correctly
  * totem: Use nodeid ONLY in srp_addr
  * [rpm] use rpm macros to identify build distro
  * [rpm] fixup corosync.spec.in to build on opensuse
  * totempg: Fix corrupted messages
  * totempg: use iovec[i].iov_len instead of copy_len
  * totempg: Fix fragmentation segfault
  * [build] fix build with non-standard knet location
  * [man] fix regression introduced by 7162e75dcf81b7e475536e3060bf5e9312cd43b8
  * Man: Move overview mp to sections 3 and 7 from 8
  * logging: Close before and open blackbox after fork
  * logging: Make blackbox configurable
  * corosync-notifyd: improve error handling
  * spec: Modernize spec to comply with newest Fedora
  * build: Remove support for upstart
  * build: Replace -lknet with autoconf generated vars
  * build: Remove rdma/ibverbs
  * qdevice: Remove qdevices
  * config: Don't fudge port numbers
  * knet: Allow ping_timers to be auto-configured
  * cts: Make code compatible with Python 3
  * corosync-notifyd: make SNMP work again
  * build: Add the headers necessary for RPM build
  * config: if local node addr is wrong, fail with a sensible message
  * totemknet: Drop truncated packets on receive
  * totemudp: Make use of UDP_RECEIVE_FRAME_SIZE_MAX
  * totemudpu: Export and rename UDPU_FRAME_SIZE_MAX
  * totemconfig: Fix UDP autogeneration of mcast addr
  * totemudpu: Scale receive buffer
  * config: Allow selection of crypto_model
  * libcpg: Fix issue with partial big packet assembly
  * qdevice: mv free(str) after port validation
  * corosync.aug: Add missing options
  * config: Allow links to have different ip_versions
  * Fix compile errors in qdevice and vqsim on FreeBSD
  * cmapctl: mention the Clear stats option in usage message
  * corosync-cfgtool: refactor cli parameters handling
  * wd: fix snprintf warnings
  * totemsrp: Revert totemsrp_get_ifaces() changes
  * man: Add note about corosync not using name option
  * corosync.conf: publicize nodelist.node.name
  * man: fixes for corosync.conf man page
  * cmapctl: add "-m" option into help message
  * totemconfig: remove duplicate aes256 test
  * fix output format for corosync-cfgtool with knet (#283)
  * sync: Call sync_init of all services at once
  * sync: Remove unneeded determine sync code
  * stats: Add some missing knet stats
  * man: Add note about qdevice parallel cmds start
  * man: corosync-qdevice: some more stylistics
  * systemd: corosync-qdevice can not run without corosync
  * man: corosync-qdevice: fix formatting vs. punctuation
  * configure: kill off INITWRAPPERSDIR
  * corosync-qdevice: send startup notification to systemd
  * corosync-qnetd: send startup notification to systemd
  * Send corosync-notifyd startup notification to systemd
  * Make systemd stop corosync-notifyd if corosync is stopped
  * corosync.spec: Add system-devel build requirement
  * Send corosync startup notification to systemd
  * quorumtool: Use full buffer size in snprintf
  * cpghum: Mark print/log functions with printf attr
  * cpg_test_agent: Fix snprintf compiler warnings
  * sam: Fix snprintf compiler warnings
  * coroparse: Do not convert empty uid, gid to 0
  * cmapctl: Add option to clear the stats
  * stats: Don't display errors when reading knet stat
  * make the output of "corosync-cfgtool -s" more readable (#269)
  * cfg: nodeid should be unsigned int
  * quorumtool: remove duplicated help message
  * man: fix cpg_mcast_joined.3.in
  * man: Add stats.clear keys to the cmap_keys man pg
  * stats: Add cmap key to clear the various stats.
  * Use RuntimeDirectory instead of tmpfiles.d
  * totemconfig: generate mcast icmap items for UDP
  * Use static case blocks to determine distro flavor
  * configure: add --with-initconfigdir option
  * totemconfig: add nodeid check for knet
  * man: support SOURCE_DATE_EPOCH
  * man:fix in corosync-qdevice.8
  * man: must set nodeid for knet in nodelist
  * logsys: Avoid redundant callsite section checking
  * config: Fix memory leak
  * knet: Add support for knet compression
  * qdevice: Add support for heuristics
  * Spec: fix arch-qualified dependencies
  * cmap: Remove noop highest config version check
  * cmap: don't shutdown highest config_version node
  * totemudp: Remove memb_join discarding
  * votequorum: make atb consistent on nodelist reload
  * totem: Remove unnecessary NSS headers
  * config: Allow dynamic link configuration
  * totemudp: Retry if bind fails
  * corosync.conf.5: watchdog support is conditional
  * wd: default to not using a watchdog
  * wd: remove extra capitalization typo
  * corosync.conf.5: add warning about slow watchdogs
  * totemknet: fix debug message typo
  * corosync.conf.5: Fix watchdog documentation
  * wd: fix typo
  * Include fcntl.h for F_* and O_* defines
  * stats: add knet 'handle' stats
  * main: use syslog &amp; printf directly for early log messages
  * totempg: Allow space for incoming overflow
  * cpghum: Add options to change flood start/mult/end sizes (#237)
  * totemknet: Use knet's LOOPBACK transport (#236)
  * CFG: Remove ring-reenable code
  * main: Add support for libcgroup
  * stats: Add map with on-demand statistics
  * ipc: Check for the libraries sending invalid message IDs
  * main: Add option to set priority
  * totemknet: Prevent dead-loop in log_flush_messages
  * corosync-keygen: Display number of needed bits
  * totemknet: Flush knet log messages
  * corosync-keygen: Make less-secure default
  * corosync-keygen: Adapt to knet key sizes
  * totemconfig: Make crypto work again
  * knet: Compile with latest knet API
  * totem: Propagate totem initialization failure
  * totemknet: Use new knet_link_set_config() API
  * coroapi: Use size_t for private_data_size
  * votequorum: Report errors from votequorum_exec_send_reconfigure
  * cpghum: remove space after delimiter
  * cpghum: Add interim RTT to cpghum
  * configure: Enable C99 language standard
  * main: Display reason why cluster cannot be formed
  * notifyd: Add the community name to an SNMP trap
  * cpghum: Add machine-readable output
  * test: Fold cpgbench into cpghum (#205)
  * knet: Allow space for encapsulated messages
  * Main: Call mlockall after fork
  * Fix typos in README.recovery
  * coroparse: Use readdir instead of readdir_r
  * totemknet: Handle logpipe creation failure
  * wd: Report error when close of wd fails
  * Qnetd lms: Use UTILS_PRI_RING_ID printf format str
  * cpghum: Fix printf of size_t variable
  * totemknet: Got back to recvmsg() from recvmmsg()
  * totemconfig: Prefer nodelist over bindnetaddr
  * knet: Close libknet down cleanly at shutdown
  * man: Document -a option to corosync-quorumtool
  * cpghum test: Improve error codes
  * quorumtool: Add option to show all node addresses
  * cpghum: Stop cpghum from reporting fake CRC errors
  * logconfig: Do not overwrite logger_subsys priority
  * totem: Fix buffer sizes
  * main: Don't ask libqb to handle segv, it doesn't work
  * Logsys: Change logsys syslog_priority priority
  * knet: improve logging messages by adding knet subsystem
  * cpghum: Add abort_on_error option
  * cpghum: Add min rtt and print stats every alarm
  * cpghum: Add Round Trip Time (RTT) reporting
  * knet: Change nodeids to knet_node_id_t for new knet compatibility
  * knet: Fix MTU sizes &amp; allow transport config in corosync.conf
  * knet: PMTUd data_mtu already accounts for IP and knet header overheads
  * knet: switch from write to sendto()
  * knet: Change nodeids to 8 bit for new knet compatibility
  * doc: document watchdog_device parameter
  * knet: Fix member_remove to shut down existing links first
  * Spec: make internal dependencies arch-qualified
  * Spec: drop unneeded dependency
  * knet: Reduce default pong count to 2 for faster startup
  * totemknet: Make it compile with kronosnet git master
  * Qdevice: fix spell errors in qdevice
  * Remove redundant header file inclusion
  * Remove deprecated doxygen flags
  * upstart: Add softdog module loading example
  * Totempg: remove duplicate memcpy in mcast_msg func
  * man: Modify man-page according to command usage
  * init: Add doc URIs to the systemd service files
  * Fix typo: Destorying -&gt; Destroying
  * man: Fix typos in man page
  * totempg: totempg_groups_join return valid error
  * systemd: Delete unnecessary soft_margin
  * knet: Support reload of link parameters
  * list: Unify the list processing with qb_list func
  * knet: Allow configuration of more params
  * knet: Don't lose log messages when knet gets busy (#165)
  * libvotequorum: Bump version
  * list: Replace for_each by safe version where need
  * list: Remove list.h
  * list: Replace uses of list.h with qblist.h
  * [build] Fix build on RHEL7.3 latest
  * Change a type of NodeID.
  * vqsim: Fix Makefile.am
  * configure: Remove RDMA (again)
  * vqsim: Add Quorum simulator program
  * Build: Fail configure if knet is not installed
  * totem: add totemknet.[ch]
  * cfg: Prevents use of uninitialized buffer
  * totem: Add Kronosnet transport.
  * coropase: Set a poll_period value for wd monitor
  * votequorum: simplify reconfigure message handling
  * votequorum: Don't update expected_votes display if value is too high
  * Fix various typos
  * init: corosync and cman aren't system facilities
  * conf: be explicit about the mcast src/dst ports
    Added:
    corosync-3.1.8.tar.gz
    Removed:
    corosync-2.4.6.tar.gz
    bug-1001164_corosync.conf-example.patch
    bug-1032634_fix-ifdown-udp.patch
    bug-1083561_upgrade-from-1-x-y.patch
    bug-882449_corosync-conf-example.patch
    corosync-2.3.4-fix-bashisms.patch
    corosync-init-lockfile-path-error.patch
    corosync-start-stop-level.patch
    Fix-compile-warnings-with-GCC-7.2.1.patch
    upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
    baselibs.conf
    Modified:
    _service
    _servicedata
    corosync.changes: add changelogs
    corosync.spec: updates to corosync3</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731931200">- Update to version 3.1.9:
  * rust: Update to latest standards
  * totemsrp: Fix orf_token stats
  * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
  * totem: Use proper timestamp type for token warning
  * stats: Store token rx and tx timestamps as 64-bit
  * rust: fix clippy warning in rust 1.81
  * coroparse: Free kv_item key and value on failure
  * icmap: Free memory if qb_map_notify_add fails
  * cfg: Free new_config interfaces on failure
  * main: support lock pid file arg
  * man: fix a typo in cpg_model_initialize
  * man: Improve quorum provider formatting
  * rust: tests return errors and don't hang
  * rust: Improve Rust bindings
  * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
  * man: corosync.conf: Multi improvements
  * totem: Fix reference links
  * Report crypto errors back to cfg reload
  * Fix up the library .versions files
  * configure: Fix building of rust for release
  * License: Fix year (mainly to fix rust building)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1742990400">- Add a patch to fix CVE-2025-30472 (bsc#1239987)
  * 779.patch</changelog>
</package>
<package pkgid="3eaa3d63b3e62961c9a5f9ed8f846daffd980eda41cc69f8fe420488e500b5ad79bbb1a1fee70fac90947e3a4cd606a4425b4b1db1ee903d151a5ba7b7d9a734" name="corosync-devel" arch="x86_64">
  <version epoch="0" ver="3.1.9" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1629720000">- Update to version 2.4.5+git70.64010f57:
  * totem: Add cancel_hold_on_retransmit config option</changelog>
  <changelog author="emil.penchev@suse.com" date="1649678400">- Update to version corosync-2.4.5+git.5d625cef:
  * totemudpu: Don't block local socketpair
  * totemsrp: Switch totempg buffers at the right time
  * logsys: Unlock config mutex on error</changelog>
  <changelog author="emil.penchev@suse.com" date="1669032000">- Update to version 2.4.6:
  * totemsrp: More informative messages
  * icmap: fix the icmap_get_*_r functions
  * stats: Add basic schedule-miss stats to needle
  * icmap: icmap_init_r() leaks if trie_create() fails
  * test: Fix cpgtest
  * pkgconfig: Add libqb dependency
  * man: votequorum.5: use proper single quotes
  * cpg: Change downlist log level
  * totem: Increase ring_id seq after load
  * totempg: Check sanity (length) of received message
  * totemsrp: Reduce MTU to left room second mcast
  * qnetd: Rename qnetd-log.c to log.c
  * qnetd: Fix double -d description
  * qnetd: Check log initialization error
  * qnetd: Add function to set log target
  * qdevice: Use log instead of libqb log
  * qdevice: Import log instead of qdevice-log
  * qdevice: Merge msg_decode_error functions
  * qnetd: Use log-common for nodelist debug dump
  * qdevice: Configurable log priority bump
  * tests: Add utils_parse_bool_str test
  * qdevice: Free memory used by log
  * qdevice: Add log test
  * qdevice: Add header files to list of test sources
  * qdevice: Add chk variant of vsyslog to test-log
  * qdevice: Add prototype of __vsyslog_chk
  * votequorum: Ignore the icmap_get_* return value
  * logconfig: Remove double free of value
  * cmap: Assert copied string length
  * sync: Assert sync_callbacks.name length
  * votequorum: Assert copied strings length
  * cpghum: Remove unused time variables and functions
  * cfgtool: Remove unused callbacks
  * cmapctl: Free bin_value on error
  * quorumtool: Assert copied string length
  * votequorum: Reflect runtime change of 2Node to WFA
  * main: Add schedmiss timestamp into message
  * votequorum: Change check of expected_votes
  * quorumtool: Fix exit status codes
  * quorumtool: exit on invalid expected votes
  * votequorum: set wfa status only on startup
  * Revert "totemip: Add support for sin6_scope_id"
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * main: Make schedmiss in cmap and log equal
  * totemip: Add support for sin6_scope_id
  * qnetd: Do not call ffsplit_do on shutdown
  * qdevice: Fix connect heuristics result callback
  * qdevice: Fix connect heuristics result callback
  * qdevice: Log adds newline automatically
  * qnetd: Fix dpd timer
  * qnetd: Add support for keep active partition vote
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: Move token received callback
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * qnetd: Fix NULL dereference of client
  * qnetd: Simplify KAP Tie-breaker logic
  * totem: Add cancel_hold_on_retransmit config option
  * logsys: Unlock config mutex on error
  * totemsrp: Switch totempg buffers at the right time
  * totemudpu: Don't block local socketpair
  * configure.ac: fix pkgconfig issue of rdma
  * totemip: Add support for sin6_scope_id
  * totemip: compare sin6_scope_id and interface_num
  * qdevice: Change log level to NOTICE on PASS
  * cfgtool: output error messages to stderr
  * tools: use util_strtonum for options checking
  * cmapctl: return EXIT_FAILURE on failure
  * quorumtool: Help shouldn't require running service
  * quorumtool: strict check for -o option
  * cmapctl: check NULL for key type and value for -p
  * man: adjust description about interface section
  * qnetd: sort by node_id when add new client
  * man: replace votequorum_poll for actually used fn</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Provide user(coroqnetd) and group(coroqnetd) in the -qnetd
  package: user and group are generated by the pre script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="emil.penchev@suse.com" date="1715774400">- Update to version 3.1.8
  * Handling integer overflow issues
  * rust: Improve vector initialisation
  * man: Update the corosync_overview manpage
  * config: Fail to start if ping timers are invalid
  * rust: Remove some pointless casts
  * parser: Allow a non-breaking space as 'whitespace'
  * spec: Migrate to SPDX license
  * build: Fix rust make -j build dep for distcheck
  * rust: Remove tests from check scripts
  * Rust: Remove obsolete bindgen flag
  * knet: use knet TRACE logging level if available
  * Rust: 'fix' clippys for Rust 1.67
  * rust: Make it work on FreeBSD
  * bindings: Add Rust bindings
  * totemconfig: Add support for knet_mtu
  * configure: Modernize configure.ac a bit
  * log: Configure knet logging to the same as corosync
  * logrotate: Use copytruncate method by default
  * totemconfig: Check uname return value correctly
  * totempg: Fix alignment handling
  * pkgconfig: Export corosysconfdir
  * Remove bashism from configure script
  * totemudpu: Don't block local socketpair
  * build: Add explicit dependency for used libraries
  * totemsrp: Switch totempg buffers at the right time
  * cpghum: Allow to continue if corosync is restarted
  * man: Fix consensus timeout
  * logsys: Unlock config mutex on error
  * totem: Add cancel_hold_on_retransmit config option
  * totemconfig: Knet nodeid must be &lt; 65536
  * totemconfig: Ensure all knet hosts has a nodeid
  * cfgtool: Use CS_PRI_NODE_ID for formatting nodeid
  * cfgtool: Fix brief mode display of localhost
  * cfgtool: Set nodeid indexes after sort
  * totemconfig: Put autogenerated nodeid back to cmap
  * cfgtool: Check existence of at least one of nodeid
  * totemconfig: Do not process totem.nodeid
  * knet: Fix node status display
  * main: Add support for cgroup v2 and auto mode
  * stats: fix crash when iterating over deleted keys
  * man: Add note about single node configuration
  * Revert "main: Add support for cgroup v2"
  * Revert "man: Add info about cgroup v2 behavior"
  * man: Add info about cgroup v2 behavior
  * cfg: corosync_cfg_trackstop blocks forever
  * main: Add support for cgroup v2
  * main: Mark crypto_model key read only
  * totemconfig: Ensure strncpy is always terminated
  * config: Properly check crypto and compress models
  * man: corosync-cfgtool.8: use proper single quotes
  * knet: pass correct handle to knet_handle_compress
  * totemconfig: fix integer underflow and logic bug
  * totemconfig: change udp netmtu value as a constant
  * totemknet: retry knet_handle_new if it fails
  * main: Check memlock rlimit
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitize
  * configure: drop dead code
  * configure: detect and init pkg-config with macro
  * main: Close race condition when moving to statedir
  * init: Use corosync-cfgtool for shutdown
  * test: Add testcfg to exercise some cfg functions
  * cfg: Reinstate cfg tracking
  * cfg: Improve nodestatusget versioning
  * cfg: New API to get extended node/link infomation
  * totemknet: Check both cipher and hash for crypto
  * The ring id file needn't be executable
  * pkgconfig: export LOGDIR in corosync.pc
  * spec: Add isa version of corosync-devel provides
  * totemconfig: remove redundant nodeid error log
  * totemsrp: More informative messages
  * config: Increase default token timeout to 3000 ms
  * man: votequorum.5: use proper single quotes
  * man: fix typo: avaialable
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * quorum: Add support for nodelist callback
  * man: reload during rolling upgrade
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemconfig: improve linknumber checking
  * totemconfig: add interface number to the error str
  * cfg: enhance message_handler_req_lib_cfg_killnode
  * totemconfig: validate totem.transport value
  * cmapctl: return error on no result of print prefix
  * cmapctl: check NULL for key type and value for -p
  * quorumtool: strict check for -o option
  * quorumtool: Help shouldn't require running service
  * cfgtool: Return error when -i doesn't match
  * man: update output of -s and -b for cfgtool
  * cmapctl: return EXIT_FAILURE on failure
  * tools: use util_strtonum for options checking
  * cfgtool: enhancement -a option
  * cfgtool: output error messages to stderr
  * configure: Use default systemd path with prefix
  * build: Use git-version-gen during specfile build
  * build: Update git-version-gen
  * spec: Require at least knet 1.18 for crypto reload
  * config: Allow reconfiguration of crypto options
  * test: Fix cpgtest
  * config: Fix crash when a reload fails twice
  * config: Don't free pointers used by transports
  * config: don't reload vquorum if reload fails
  * cfg: Improve error return to cfgtool -R
  * config: Reorganise the config system
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * Revert "totemip: Add support for sin6_scope_id"
  * cfgtool: Fix error code as described in MP
  * icmap: icmap_init_r() leaks if trie_create() fails
  * votequorum: set wfa status only on startup
  * quorumtool: exit on invalid expected votes
  * votequorum: Change check of expected_votes
  * cfgtool: Simplify output a bit for link status
  * man: Enhance link_mode priority description
  * main: Add schedmiss timestamp into message
  * totemip: compare sin6_scope_id and interface_num
  * totemip: Really remove totemip_copy_endian_convert
  * totemip: Remove unused totemip_copy_endian_convert
  * totemip: Add support for sin6_scope_id
  * cfgtool: Improve link status display
  * totemknet: Change the initial value of the status
  * stats: Use nanoseconds from epoch for schedmiss
  * stats: Add stats for scheduler misses
  * votequorum: Reflect runtime change of 2Node to WFA
  * cpg: Change downlist log level
  * man: move cmap_keys man page from section 8 to 7
  * stats: Check return code of stats_map_get
  * quorumtool: Assert copied string length
  * notifyd: Check cmap_track_add result
  * cmapctl: Free bin_value on error
  * cfgtool: Remove unused callbacks
  * cpghum: Remove unused time variables and functions
  * votequorum: Assert copied strings length
  * totemknet: Assert strcpy length
  * totemknet: Check result of fcntl O_NONBLOCK call
  * totemconfig: Initialize warnings variable
  * sync: Assert sync_callbacks.name length
  * totemknet: Don't mix corosync and knet error codes
  * stats: Assert value_len when value is needed
  * cmap: Assert copied string length
  * totemconfig: Reuse already fetched pointer
  * logconfig: Remove double free of value
  * votequorum: Ignore the icmap_get_* return value
  * totemconfig: Free leaks found by coverity
  * icmap: fix the icmap_get_*_r functions
  * pkgconfig: Add libqb dependency
  * Initialize stack allocated memory
  * man: Fix corosync.conf knet pong count default
  * totemsrp: Reduce MTU to left room second mcast
  * totempg: Check sanity (length) of received message
  * build: add option for enabling sanitizer builds
  * totemknet: Add locking for log call
  * man: Fix link_mode priority description
  * notifyd: Don't dereference NULL key_name
  * totem: Increase ring_id seq after load
  * init: Use cpgtool instead of cfgtool
  * notifyd: Fix warning produced by 32-bit compiler
  * cfgtool: Remove unused code
  * logging: Add CS_PRI_NODE_ID and CS_PRI_RING_ID
  * vqsim: Fix gitignore
  * totemknet: Disable forwarding on shutdown
  * totemconfig: Fix compiler warning
  * totem: fix check if all nodes have same number of links
  * totem: fix check if all nodes have name attrs in multi-link setups
  * corosync-notifyd: Add option to disable DNS lookup
  * totemsrp: Fix warnings produced by gcc 9.1
  * cpg: Move filling of member_list to subfunction
  * cpg: Add more comments to notify_lib_joinlist
  * cpg: send single confchg event per group on joinlist
  * cpg: notify_lib_joinlist: drop conn parameter
  * vqsim: Check length of copied optarg
  * vqsim: Check result of icmap_set_uint32
  * vqsim: Remove unused total_nodes
  * vqsim: Free allocated newvq on error
  * vqsim: Check length of received message
  * vqsim: Check write result
  * vqsim: Do not access unitialized argv[0]
  * totemknet: Initialize return value in setup_nozzle
  * totemknet: macaddr_str is always set
  * totemknet: Ignore icmap_get_string result
  * totemknet: create_nozzle_device simplify check
  * totemip: Use res in totemip_sa_equal
  * totemconfig: ipaddr_equal use switch
  * configure: Fix GDB_CFLAGS typo
  * man: Add vqsim man page into distributed tarball
  * spec: Add support for user-flags configure option
  * man: Enahnce block_unlisted_ips description
  * man: Enhance corosync.conf mp a bit
  * cfgtool: Fix link status display
  * knet: Use block_unlisted_ips
  * udpu: Drop packets from unlisted IPs
  * knet: Fix initialising of knet access lists.
  * knet: allow corosync to use knet access lists
  * man: Enhance token_retransmit description
  * totemconfig: Fix minimum limit for hold timeout
  * vqsim: Enhance vqsim
  * knet: Fix a couple of errors when adding a new link
  * totemconfig: fix autogen mcastaddr for ipv6-4
  * totemconfig: Ensure nodeid is specified for IPv6
  * vqsim: Fix vqsim for corosync 3.0
  * vqsim: Make vqsim compile
  * totemconfig: ipaddr_equal check just addr part
  * cpg: Add CPG_REASON_UNDEFINED
  * crypto: re-introduce secauth parameter
  * totemconfig: Remove support for 3des
  * keygen: Reflect change in knet
  * set totem.keyfile and totem.key to RO
  * Revert "init: Enable StopWhenUnneeded"
  * totemsrp: Word spelling mistake
  * coroparse: Fix compiler warning
  * configure: Do not autodetect nozzle
  * nozzle: Add support for libnozzle devices
  * quorumtool: Fix exit status codes
  * corosync-cfgtool: Fix -i matching
  * build: Use the AWK variable provided by configure
  * build: Use the SED variable provided by configure
  * configure.ac: AC_PROG_SED is already present
  * corosync.conf.5: typography fixes
  * corosync.conf.5: fix grammar
  * cfgtool: Improve link status display
  * doc: Update INSTALL file
  * init: Enable StopWhenUnneeded
  * totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4
  * [totemknet] update for libknet.so.2.0.0 init API
  * Config version must be specified
  * Don't declare success early
  * More natural error messages
  * main: Rename run_dir to state_dir
  * totemconfig: Enhance totem.ip_version
  * totemip: Add debug information to totemip_parse
  * totemconfig: Add IPs to family mismatch error
  * config: Look up hostnames in a defined order
  * Fix corosync.conf.5 manpage typos
  * man: Add some information about address resolution
  * totemconfig: Really use totemip_parse results
  * man: Add instructions for adding/removing nodes
  * config: Disallow corosync-cmapctl updates of nodelist
  * config: Report IP addr/nodename parse errors back
  * coroparse: Remove unused cs_err initialization
  * cpghum: Check cpg_local_get return code
  * testcpg2: Check cpg_dispatch return code
  * notifyd: Delete registered tracking keys
  * stats: Fix delete of track
  * init: Fix init script to work with containers
  * main: Remove COROSYNC_RUN_DIR
  * man: Describe nodelist.node.name properly
  * main: Remove COROSYNC_TOTEM_AUTHKEY_FILE
  * main: Replace COROSYNC_MAIN_CONFIG_FILE
  * main: Move sched paramaters to config file
  * configure: move to AC_COMPILE_IFELSE
  * logsys: Make hires timestamp default
  * logsys: Support hires timestamp
  * totemconfig: Fix logging of freed string
  * config: Allow generated nodeis for UDP &amp; UDPU
  * config example: Migrate to newer syntax
  * log: Implement support for reopening log files
  * totemconfig: Replace strcpy by strncpy
  * config: Fix crash in reload if new interfaces are added
  * man: Fix default knet_pmtud_interval to match code
  * build: Remove totempg shared library leftovers
  * build: Do not compile totempg as a shared library
  * man: Fix typo conains -&gt; contains
  * man: Fix typo connnections -&gt; connections
  * build: Remove NSS dependencies
  * cts: Remove CTS
  * man: Fix crypto_hash and crypto_cipher defaults
  * coroparse: Fix newly introduced warning
  * Add option to force cluster into GATHER state
  * coroparse: Use key_name for error message
  * coroparse: Add file name and line to error message
  * coroparse: Be more strict in what is parsed
  * coroparse: Fix remove_whitespace end condition
  * coroparse: Check icmap_set results
  * coroparse: Return error if config line is too long
  * notifyd: Propagate error to exit code
  * git-version-gen: Fail on UNKNOWN version
  * build: Support for git archive stored tags
  * man: fix cmap key name runtime.config.totem.token
  * Remove libcgroup
  * systemd: prevent redundancy in journal
  * Add token_warning configuration option
  * corosync-notifyd: Rename global local_nodeid
  * totemsrp: Add assert into memb_lowest_in_config
  * totemconfig: Enlarge error_string_response
  * ipc_glue: Fix strncpy in pid_to_name function
  * cmap: Fix strncpy warning in cmap_iter_next
  * util: Fix strncpy in setcs_name_t function
  * totemknet: Free instance on failure exit
  * spec: Add explicit gcc build requirement
  * Add option for quiet operation to corosync-cmapctl
  * totemudpu: Pass correct paramto totemip_nosigpipe
  * totemudpu: Add local loop support
  * config: Fail config validation if not all nodes have all links
  * config: Enforce use of 'name' node attribute in multi-link clusters
  * totemconfig: Check for things that cannot be changed on the fly
  * Fix snprintf warnings
  * init: Use existing env variable from sysconf
  * upstart: Remove notifyd upstart unit
  * knet: Don't try to create loopback interface twice
  * knet: Fix knet log buffer size
  * cpg: Inform clients about left nodes during pause
  * man: Make the manpages reproducible
  * totemsrp: Fix leave message regression
  * totemsrp: Log proc/fail lists in memb_join_process
  * totemsrp: Fix srp_addr_compare
  * tools: don't distribute what we can easily make
  * Drop all references to SECURITY file
  * SECURITY: Remove SECURITY file
  * NSS_NoDB_Init: the parameter is reserved, must be NULL
  * Fix typo: defualt -&gt; default
  * Fix typo: sucesfully -&gt; successfully
  * totemsrp: Check join and leave msg length
  * totemsrp: Implement sanity checks of received msgs
  * cpg: Handle fragmented message sending interrupt
  * totem: Display IP of sender
  * totemsrp: Add magic and version into header
  * knet: Fix display of links with unconfigured link0
  * main: Set errno before calling of strtol
  * quorumtool: Don't set our_flags without v_handle
  * sam_test_agent: Remove unused assignment
  * blackbox: Quote subshell result properly
  * init: Quote subshell result properly
  * cfgtool: Don't assume link ID is a single char
  * knet: Always use link0 for loopback
  * totem: Fix debug warnings printed by knet
  * config: Allow use of ring0_addr
  * config: Update message when local host isn't found
  * cfg: Fix cfg_get_node_addrs so that DLM works
  * totem: Return interface count correctly
  * totem: Use nodeid ONLY in srp_addr
  * [rpm] use rpm macros to identify build distro
  * [rpm] fixup corosync.spec.in to build on opensuse
  * totempg: Fix corrupted messages
  * totempg: use iovec[i].iov_len instead of copy_len
  * totempg: Fix fragmentation segfault
  * [build] fix build with non-standard knet location
  * [man] fix regression introduced by 7162e75dcf81b7e475536e3060bf5e9312cd43b8
  * Man: Move overview mp to sections 3 and 7 from 8
  * logging: Close before and open blackbox after fork
  * logging: Make blackbox configurable
  * corosync-notifyd: improve error handling
  * spec: Modernize spec to comply with newest Fedora
  * build: Remove support for upstart
  * build: Replace -lknet with autoconf generated vars
  * build: Remove rdma/ibverbs
  * qdevice: Remove qdevices
  * config: Don't fudge port numbers
  * knet: Allow ping_timers to be auto-configured
  * cts: Make code compatible with Python 3
  * corosync-notifyd: make SNMP work again
  * build: Add the headers necessary for RPM build
  * config: if local node addr is wrong, fail with a sensible message
  * totemknet: Drop truncated packets on receive
  * totemudp: Make use of UDP_RECEIVE_FRAME_SIZE_MAX
  * totemudpu: Export and rename UDPU_FRAME_SIZE_MAX
  * totemconfig: Fix UDP autogeneration of mcast addr
  * totemudpu: Scale receive buffer
  * config: Allow selection of crypto_model
  * libcpg: Fix issue with partial big packet assembly
  * qdevice: mv free(str) after port validation
  * corosync.aug: Add missing options
  * config: Allow links to have different ip_versions
  * Fix compile errors in qdevice and vqsim on FreeBSD
  * cmapctl: mention the Clear stats option in usage message
  * corosync-cfgtool: refactor cli parameters handling
  * wd: fix snprintf warnings
  * totemsrp: Revert totemsrp_get_ifaces() changes
  * man: Add note about corosync not using name option
  * corosync.conf: publicize nodelist.node.name
  * man: fixes for corosync.conf man page
  * cmapctl: add "-m" option into help message
  * totemconfig: remove duplicate aes256 test
  * fix output format for corosync-cfgtool with knet (#283)
  * sync: Call sync_init of all services at once
  * sync: Remove unneeded determine sync code
  * stats: Add some missing knet stats
  * man: Add note about qdevice parallel cmds start
  * man: corosync-qdevice: some more stylistics
  * systemd: corosync-qdevice can not run without corosync
  * man: corosync-qdevice: fix formatting vs. punctuation
  * configure: kill off INITWRAPPERSDIR
  * corosync-qdevice: send startup notification to systemd
  * corosync-qnetd: send startup notification to systemd
  * Send corosync-notifyd startup notification to systemd
  * Make systemd stop corosync-notifyd if corosync is stopped
  * corosync.spec: Add system-devel build requirement
  * Send corosync startup notification to systemd
  * quorumtool: Use full buffer size in snprintf
  * cpghum: Mark print/log functions with printf attr
  * cpg_test_agent: Fix snprintf compiler warnings
  * sam: Fix snprintf compiler warnings
  * coroparse: Do not convert empty uid, gid to 0
  * cmapctl: Add option to clear the stats
  * stats: Don't display errors when reading knet stat
  * make the output of "corosync-cfgtool -s" more readable (#269)
  * cfg: nodeid should be unsigned int
  * quorumtool: remove duplicated help message
  * man: fix cpg_mcast_joined.3.in
  * man: Add stats.clear keys to the cmap_keys man pg
  * stats: Add cmap key to clear the various stats.
  * Use RuntimeDirectory instead of tmpfiles.d
  * totemconfig: generate mcast icmap items for UDP
  * Use static case blocks to determine distro flavor
  * configure: add --with-initconfigdir option
  * totemconfig: add nodeid check for knet
  * man: support SOURCE_DATE_EPOCH
  * man:fix in corosync-qdevice.8
  * man: must set nodeid for knet in nodelist
  * logsys: Avoid redundant callsite section checking
  * config: Fix memory leak
  * knet: Add support for knet compression
  * qdevice: Add support for heuristics
  * Spec: fix arch-qualified dependencies
  * cmap: Remove noop highest config version check
  * cmap: don't shutdown highest config_version node
  * totemudp: Remove memb_join discarding
  * votequorum: make atb consistent on nodelist reload
  * totem: Remove unnecessary NSS headers
  * config: Allow dynamic link configuration
  * totemudp: Retry if bind fails
  * corosync.conf.5: watchdog support is conditional
  * wd: default to not using a watchdog
  * wd: remove extra capitalization typo
  * corosync.conf.5: add warning about slow watchdogs
  * totemknet: fix debug message typo
  * corosync.conf.5: Fix watchdog documentation
  * wd: fix typo
  * Include fcntl.h for F_* and O_* defines
  * stats: add knet 'handle' stats
  * main: use syslog &amp; printf directly for early log messages
  * totempg: Allow space for incoming overflow
  * cpghum: Add options to change flood start/mult/end sizes (#237)
  * totemknet: Use knet's LOOPBACK transport (#236)
  * CFG: Remove ring-reenable code
  * main: Add support for libcgroup
  * stats: Add map with on-demand statistics
  * ipc: Check for the libraries sending invalid message IDs
  * main: Add option to set priority
  * totemknet: Prevent dead-loop in log_flush_messages
  * corosync-keygen: Display number of needed bits
  * totemknet: Flush knet log messages
  * corosync-keygen: Make less-secure default
  * corosync-keygen: Adapt to knet key sizes
  * totemconfig: Make crypto work again
  * knet: Compile with latest knet API
  * totem: Propagate totem initialization failure
  * totemknet: Use new knet_link_set_config() API
  * coroapi: Use size_t for private_data_size
  * votequorum: Report errors from votequorum_exec_send_reconfigure
  * cpghum: remove space after delimiter
  * cpghum: Add interim RTT to cpghum
  * configure: Enable C99 language standard
  * main: Display reason why cluster cannot be formed
  * notifyd: Add the community name to an SNMP trap
  * cpghum: Add machine-readable output
  * test: Fold cpgbench into cpghum (#205)
  * knet: Allow space for encapsulated messages
  * Main: Call mlockall after fork
  * Fix typos in README.recovery
  * coroparse: Use readdir instead of readdir_r
  * totemknet: Handle logpipe creation failure
  * wd: Report error when close of wd fails
  * Qnetd lms: Use UTILS_PRI_RING_ID printf format str
  * cpghum: Fix printf of size_t variable
  * totemknet: Got back to recvmsg() from recvmmsg()
  * totemconfig: Prefer nodelist over bindnetaddr
  * knet: Close libknet down cleanly at shutdown
  * man: Document -a option to corosync-quorumtool
  * cpghum test: Improve error codes
  * quorumtool: Add option to show all node addresses
  * cpghum: Stop cpghum from reporting fake CRC errors
  * logconfig: Do not overwrite logger_subsys priority
  * totem: Fix buffer sizes
  * main: Don't ask libqb to handle segv, it doesn't work
  * Logsys: Change logsys syslog_priority priority
  * knet: improve logging messages by adding knet subsystem
  * cpghum: Add abort_on_error option
  * cpghum: Add min rtt and print stats every alarm
  * cpghum: Add Round Trip Time (RTT) reporting
  * knet: Change nodeids to knet_node_id_t for new knet compatibility
  * knet: Fix MTU sizes &amp; allow transport config in corosync.conf
  * knet: PMTUd data_mtu already accounts for IP and knet header overheads
  * knet: switch from write to sendto()
  * knet: Change nodeids to 8 bit for new knet compatibility
  * doc: document watchdog_device parameter
  * knet: Fix member_remove to shut down existing links first
  * Spec: make internal dependencies arch-qualified
  * Spec: drop unneeded dependency
  * knet: Reduce default pong count to 2 for faster startup
  * totemknet: Make it compile with kronosnet git master
  * Qdevice: fix spell errors in qdevice
  * Remove redundant header file inclusion
  * Remove deprecated doxygen flags
  * upstart: Add softdog module loading example
  * Totempg: remove duplicate memcpy in mcast_msg func
  * man: Modify man-page according to command usage
  * init: Add doc URIs to the systemd service files
  * Fix typo: Destorying -&gt; Destroying
  * man: Fix typos in man page
  * totempg: totempg_groups_join return valid error
  * systemd: Delete unnecessary soft_margin
  * knet: Support reload of link parameters
  * list: Unify the list processing with qb_list func
  * knet: Allow configuration of more params
  * knet: Don't lose log messages when knet gets busy (#165)
  * libvotequorum: Bump version
  * list: Replace for_each by safe version where need
  * list: Remove list.h
  * list: Replace uses of list.h with qblist.h
  * [build] Fix build on RHEL7.3 latest
  * Change a type of NodeID.
  * vqsim: Fix Makefile.am
  * configure: Remove RDMA (again)
  * vqsim: Add Quorum simulator program
  * Build: Fail configure if knet is not installed
  * totem: add totemknet.[ch]
  * cfg: Prevents use of uninitialized buffer
  * totem: Add Kronosnet transport.
  * coropase: Set a poll_period value for wd monitor
  * votequorum: simplify reconfigure message handling
  * votequorum: Don't update expected_votes display if value is too high
  * Fix various typos
  * init: corosync and cman aren't system facilities
  * conf: be explicit about the mcast src/dst ports
    Added:
    corosync-3.1.8.tar.gz
    Removed:
    corosync-2.4.6.tar.gz
    bug-1001164_corosync.conf-example.patch
    bug-1032634_fix-ifdown-udp.patch
    bug-1083561_upgrade-from-1-x-y.patch
    bug-882449_corosync-conf-example.patch
    corosync-2.3.4-fix-bashisms.patch
    corosync-init-lockfile-path-error.patch
    corosync-start-stop-level.patch
    Fix-compile-warnings-with-GCC-7.2.1.patch
    upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
    baselibs.conf
    Modified:
    _service
    _servicedata
    corosync.changes: add changelogs
    corosync.spec: updates to corosync3</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731931200">- Update to version 3.1.9:
  * rust: Update to latest standards
  * totemsrp: Fix orf_token stats
  * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
  * totem: Use proper timestamp type for token warning
  * stats: Store token rx and tx timestamps as 64-bit
  * rust: fix clippy warning in rust 1.81
  * coroparse: Free kv_item key and value on failure
  * icmap: Free memory if qb_map_notify_add fails
  * cfg: Free new_config interfaces on failure
  * main: support lock pid file arg
  * man: fix a typo in cpg_model_initialize
  * man: Improve quorum provider formatting
  * rust: tests return errors and don't hang
  * rust: Improve Rust bindings
  * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
  * man: corosync.conf: Multi improvements
  * totem: Fix reference links
  * Report crypto errors back to cfg reload
  * Fix up the library .versions files
  * configure: Fix building of rust for release
  * License: Fix year (mainly to fix rust building)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1742990400">- Add a patch to fix CVE-2025-30472 (bsc#1239987)
  * 779.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775131200">- Add a patch to fix CVE-2026-35091 and CVE-2026-35092 (bsc#1261299)(bsc#1261300)
  * 820.patch</changelog>
</package>
<package pkgid="392db5478b7645138446d6c33dbafcc90fe19267b0923ae01c8cb2dc3ff13484c678250a8c7b26470c8226fcc3d04890e5be58b87329f4b992846a87e645edcd" name="corosync-libs" arch="x86_64">
  <version epoch="0" ver="3.1.9" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1622548800">- Update to version 2.4.5+git69.6236728a:
  * man: replace votequorum_poll for actually used fn
  * qnetd: sort by node_id when add new client
  * man: adjust description about interface section
  * qnetd: Simplify KAP Tie-breaker logic
  * qnetd: Fix NULL dereference of client
  * man: votequorum.5: use proper single quotes
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: More informative messages
- Remove patches:
  bug-1166899-quorumtool-Fix-exit-status-codes.patch
  bug-1163460-totemip-Add-support-for-sin6_scope_id.patch</changelog>
  <changelog author="varkoly@suse.com" date="1629720000">- Update to version 2.4.5+git70.64010f57:
  * totem: Add cancel_hold_on_retransmit config option</changelog>
  <changelog author="emil.penchev@suse.com" date="1649678400">- Update to version corosync-2.4.5+git.5d625cef:
  * totemudpu: Don't block local socketpair
  * totemsrp: Switch totempg buffers at the right time
  * logsys: Unlock config mutex on error</changelog>
  <changelog author="emil.penchev@suse.com" date="1669032000">- Update to version 2.4.6:
  * totemsrp: More informative messages
  * icmap: fix the icmap_get_*_r functions
  * stats: Add basic schedule-miss stats to needle
  * icmap: icmap_init_r() leaks if trie_create() fails
  * test: Fix cpgtest
  * pkgconfig: Add libqb dependency
  * man: votequorum.5: use proper single quotes
  * cpg: Change downlist log level
  * totem: Increase ring_id seq after load
  * totempg: Check sanity (length) of received message
  * totemsrp: Reduce MTU to left room second mcast
  * qnetd: Rename qnetd-log.c to log.c
  * qnetd: Fix double -d description
  * qnetd: Check log initialization error
  * qnetd: Add function to set log target
  * qdevice: Use log instead of libqb log
  * qdevice: Import log instead of qdevice-log
  * qdevice: Merge msg_decode_error functions
  * qnetd: Use log-common for nodelist debug dump
  * qdevice: Configurable log priority bump
  * tests: Add utils_parse_bool_str test
  * qdevice: Free memory used by log
  * qdevice: Add log test
  * qdevice: Add header files to list of test sources
  * qdevice: Add chk variant of vsyslog to test-log
  * qdevice: Add prototype of __vsyslog_chk
  * votequorum: Ignore the icmap_get_* return value
  * logconfig: Remove double free of value
  * cmap: Assert copied string length
  * sync: Assert sync_callbacks.name length
  * votequorum: Assert copied strings length
  * cpghum: Remove unused time variables and functions
  * cfgtool: Remove unused callbacks
  * cmapctl: Free bin_value on error
  * quorumtool: Assert copied string length
  * votequorum: Reflect runtime change of 2Node to WFA
  * main: Add schedmiss timestamp into message
  * votequorum: Change check of expected_votes
  * quorumtool: Fix exit status codes
  * quorumtool: exit on invalid expected votes
  * votequorum: set wfa status only on startup
  * Revert "totemip: Add support for sin6_scope_id"
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * main: Make schedmiss in cmap and log equal
  * totemip: Add support for sin6_scope_id
  * qnetd: Do not call ffsplit_do on shutdown
  * qdevice: Fix connect heuristics result callback
  * qdevice: Fix connect heuristics result callback
  * qdevice: Log adds newline automatically
  * qnetd: Fix dpd timer
  * qnetd: Add support for keep active partition vote
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: Move token received callback
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * qnetd: Fix NULL dereference of client
  * qnetd: Simplify KAP Tie-breaker logic
  * totem: Add cancel_hold_on_retransmit config option
  * logsys: Unlock config mutex on error
  * totemsrp: Switch totempg buffers at the right time
  * totemudpu: Don't block local socketpair
  * configure.ac: fix pkgconfig issue of rdma
  * totemip: Add support for sin6_scope_id
  * totemip: compare sin6_scope_id and interface_num
  * qdevice: Change log level to NOTICE on PASS
  * cfgtool: output error messages to stderr
  * tools: use util_strtonum for options checking
  * cmapctl: return EXIT_FAILURE on failure
  * quorumtool: Help shouldn't require running service
  * quorumtool: strict check for -o option
  * cmapctl: check NULL for key type and value for -p
  * man: adjust description about interface section
  * qnetd: sort by node_id when add new client
  * man: replace votequorum_poll for actually used fn</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Provide user(coroqnetd) and group(coroqnetd) in the -qnetd
  package: user and group are generated by the pre script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="emil.penchev@suse.com" date="1715774400">- Update to version 3.1.8
  * Handling integer overflow issues
  * rust: Improve vector initialisation
  * man: Update the corosync_overview manpage
  * config: Fail to start if ping timers are invalid
  * rust: Remove some pointless casts
  * parser: Allow a non-breaking space as 'whitespace'
  * spec: Migrate to SPDX license
  * build: Fix rust make -j build dep for distcheck
  * rust: Remove tests from check scripts
  * Rust: Remove obsolete bindgen flag
  * knet: use knet TRACE logging level if available
  * Rust: 'fix' clippys for Rust 1.67
  * rust: Make it work on FreeBSD
  * bindings: Add Rust bindings
  * totemconfig: Add support for knet_mtu
  * configure: Modernize configure.ac a bit
  * log: Configure knet logging to the same as corosync
  * logrotate: Use copytruncate method by default
  * totemconfig: Check uname return value correctly
  * totempg: Fix alignment handling
  * pkgconfig: Export corosysconfdir
  * Remove bashism from configure script
  * totemudpu: Don't block local socketpair
  * build: Add explicit dependency for used libraries
  * totemsrp: Switch totempg buffers at the right time
  * cpghum: Allow to continue if corosync is restarted
  * man: Fix consensus timeout
  * logsys: Unlock config mutex on error
  * totem: Add cancel_hold_on_retransmit config option
  * totemconfig: Knet nodeid must be &lt; 65536
  * totemconfig: Ensure all knet hosts has a nodeid
  * cfgtool: Use CS_PRI_NODE_ID for formatting nodeid
  * cfgtool: Fix brief mode display of localhost
  * cfgtool: Set nodeid indexes after sort
  * totemconfig: Put autogenerated nodeid back to cmap
  * cfgtool: Check existence of at least one of nodeid
  * totemconfig: Do not process totem.nodeid
  * knet: Fix node status display
  * main: Add support for cgroup v2 and auto mode
  * stats: fix crash when iterating over deleted keys
  * man: Add note about single node configuration
  * Revert "main: Add support for cgroup v2"
  * Revert "man: Add info about cgroup v2 behavior"
  * man: Add info about cgroup v2 behavior
  * cfg: corosync_cfg_trackstop blocks forever
  * main: Add support for cgroup v2
  * main: Mark crypto_model key read only
  * totemconfig: Ensure strncpy is always terminated
  * config: Properly check crypto and compress models
  * man: corosync-cfgtool.8: use proper single quotes
  * knet: pass correct handle to knet_handle_compress
  * totemconfig: fix integer underflow and logic bug
  * totemconfig: change udp netmtu value as a constant
  * totemknet: retry knet_handle_new if it fails
  * main: Check memlock rlimit
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitize
  * configure: drop dead code
  * configure: detect and init pkg-config with macro
  * main: Close race condition when moving to statedir
  * init: Use corosync-cfgtool for shutdown
  * test: Add testcfg to exercise some cfg functions
  * cfg: Reinstate cfg tracking
  * cfg: Improve nodestatusget versioning
  * cfg: New API to get extended node/link infomation
  * totemknet: Check both cipher and hash for crypto
  * The ring id file needn't be executable
  * pkgconfig: export LOGDIR in corosync.pc
  * spec: Add isa version of corosync-devel provides
  * totemconfig: remove redundant nodeid error log
  * totemsrp: More informative messages
  * config: Increase default token timeout to 3000 ms
  * man: votequorum.5: use proper single quotes
  * man: fix typo: avaialable
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * quorum: Add support for nodelist callback
  * man: reload during rolling upgrade
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemconfig: improve linknumber checking
  * totemconfig: add interface number to the error str
  * cfg: enhance message_handler_req_lib_cfg_killnode
  * totemconfig: validate totem.transport value
  * cmapctl: return error on no result of print prefix
  * cmapctl: check NULL for key type and value for -p
  * quorumtool: strict check for -o option
  * quorumtool: Help shouldn't require running service
  * cfgtool: Return error when -i doesn't match
  * man: update output of -s and -b for cfgtool
  * cmapctl: return EXIT_FAILURE on failure
  * tools: use util_strtonum for options checking
  * cfgtool: enhancement -a option
  * cfgtool: output error messages to stderr
  * configure: Use default systemd path with prefix
  * build: Use git-version-gen during specfile build
  * build: Update git-version-gen
  * spec: Require at least knet 1.18 for crypto reload
  * config: Allow reconfiguration of crypto options
  * test: Fix cpgtest
  * config: Fix crash when a reload fails twice
  * config: Don't free pointers used by transports
  * config: don't reload vquorum if reload fails
  * cfg: Improve error return to cfgtool -R
  * config: Reorganise the config system
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * Revert "totemip: Add support for sin6_scope_id"
  * cfgtool: Fix error code as described in MP
  * icmap: icmap_init_r() leaks if trie_create() fails
  * votequorum: set wfa status only on startup
  * quorumtool: exit on invalid expected votes
  * votequorum: Change check of expected_votes
  * cfgtool: Simplify output a bit for link status
  * man: Enhance link_mode priority description
  * main: Add schedmiss timestamp into message
  * totemip: compare sin6_scope_id and interface_num
  * totemip: Really remove totemip_copy_endian_convert
  * totemip: Remove unused totemip_copy_endian_convert
  * totemip: Add support for sin6_scope_id
  * cfgtool: Improve link status display
  * totemknet: Change the initial value of the status
  * stats: Use nanoseconds from epoch for schedmiss
  * stats: Add stats for scheduler misses
  * votequorum: Reflect runtime change of 2Node to WFA
  * cpg: Change downlist log level
  * man: move cmap_keys man page from section 8 to 7
  * stats: Check return code of stats_map_get
  * quorumtool: Assert copied string length
  * notifyd: Check cmap_track_add result
  * cmapctl: Free bin_value on error
  * cfgtool: Remove unused callbacks
  * cpghum: Remove unused time variables and functions
  * votequorum: Assert copied strings length
  * totemknet: Assert strcpy length
  * totemknet: Check result of fcntl O_NONBLOCK call
  * totemconfig: Initialize warnings variable
  * sync: Assert sync_callbacks.name length
  * totemknet: Don't mix corosync and knet error codes
  * stats: Assert value_len when value is needed
  * cmap: Assert copied string length
  * totemconfig: Reuse already fetched pointer
  * logconfig: Remove double free of value
  * votequorum: Ignore the icmap_get_* return value
  * totemconfig: Free leaks found by coverity
  * icmap: fix the icmap_get_*_r functions
  * pkgconfig: Add libqb dependency
  * Initialize stack allocated memory
  * man: Fix corosync.conf knet pong count default
  * totemsrp: Reduce MTU to left room second mcast
  * totempg: Check sanity (length) of received message
  * build: add option for enabling sanitizer builds
  * totemknet: Add locking for log call
  * man: Fix link_mode priority description
  * notifyd: Don't dereference NULL key_name
  * totem: Increase ring_id seq after load
  * init: Use cpgtool instead of cfgtool
  * notifyd: Fix warning produced by 32-bit compiler
  * cfgtool: Remove unused code
  * logging: Add CS_PRI_NODE_ID and CS_PRI_RING_ID
  * vqsim: Fix gitignore
  * totemknet: Disable forwarding on shutdown
  * totemconfig: Fix compiler warning
  * totem: fix check if all nodes have same number of links
  * totem: fix check if all nodes have name attrs in multi-link setups
  * corosync-notifyd: Add option to disable DNS lookup
  * totemsrp: Fix warnings produced by gcc 9.1
  * cpg: Move filling of member_list to subfunction
  * cpg: Add more comments to notify_lib_joinlist
  * cpg: send single confchg event per group on joinlist
  * cpg: notify_lib_joinlist: drop conn parameter
  * vqsim: Check length of copied optarg
  * vqsim: Check result of icmap_set_uint32
  * vqsim: Remove unused total_nodes
  * vqsim: Free allocated newvq on error
  * vqsim: Check length of received message
  * vqsim: Check write result
  * vqsim: Do not access unitialized argv[0]
  * totemknet: Initialize return value in setup_nozzle
  * totemknet: macaddr_str is always set
  * totemknet: Ignore icmap_get_string result
  * totemknet: create_nozzle_device simplify check
  * totemip: Use res in totemip_sa_equal
  * totemconfig: ipaddr_equal use switch
  * configure: Fix GDB_CFLAGS typo
  * man: Add vqsim man page into distributed tarball
  * spec: Add support for user-flags configure option
  * man: Enahnce block_unlisted_ips description
  * man: Enhance corosync.conf mp a bit
  * cfgtool: Fix link status display
  * knet: Use block_unlisted_ips
  * udpu: Drop packets from unlisted IPs
  * knet: Fix initialising of knet access lists.
  * knet: allow corosync to use knet access lists
  * man: Enhance token_retransmit description
  * totemconfig: Fix minimum limit for hold timeout
  * vqsim: Enhance vqsim
  * knet: Fix a couple of errors when adding a new link
  * totemconfig: fix autogen mcastaddr for ipv6-4
  * totemconfig: Ensure nodeid is specified for IPv6
  * vqsim: Fix vqsim for corosync 3.0
  * vqsim: Make vqsim compile
  * totemconfig: ipaddr_equal check just addr part
  * cpg: Add CPG_REASON_UNDEFINED
  * crypto: re-introduce secauth parameter
  * totemconfig: Remove support for 3des
  * keygen: Reflect change in knet
  * set totem.keyfile and totem.key to RO
  * Revert "init: Enable StopWhenUnneeded"
  * totemsrp: Word spelling mistake
  * coroparse: Fix compiler warning
  * configure: Do not autodetect nozzle
  * nozzle: Add support for libnozzle devices
  * quorumtool: Fix exit status codes
  * corosync-cfgtool: Fix -i matching
  * build: Use the AWK variable provided by configure
  * build: Use the SED variable provided by configure
  * configure.ac: AC_PROG_SED is already present
  * corosync.conf.5: typography fixes
  * corosync.conf.5: fix grammar
  * cfgtool: Improve link status display
  * doc: Update INSTALL file
  * init: Enable StopWhenUnneeded
  * totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4
  * [totemknet] update for libknet.so.2.0.0 init API
  * Config version must be specified
  * Don't declare success early
  * More natural error messages
  * main: Rename run_dir to state_dir
  * totemconfig: Enhance totem.ip_version
  * totemip: Add debug information to totemip_parse
  * totemconfig: Add IPs to family mismatch error
  * config: Look up hostnames in a defined order
  * Fix corosync.conf.5 manpage typos
  * man: Add some information about address resolution
  * totemconfig: Really use totemip_parse results
  * man: Add instructions for adding/removing nodes
  * config: Disallow corosync-cmapctl updates of nodelist
  * config: Report IP addr/nodename parse errors back
  * coroparse: Remove unused cs_err initialization
  * cpghum: Check cpg_local_get return code
  * testcpg2: Check cpg_dispatch return code
  * notifyd: Delete registered tracking keys
  * stats: Fix delete of track
  * init: Fix init script to work with containers
  * main: Remove COROSYNC_RUN_DIR
  * man: Describe nodelist.node.name properly
  * main: Remove COROSYNC_TOTEM_AUTHKEY_FILE
  * main: Replace COROSYNC_MAIN_CONFIG_FILE
  * main: Move sched paramaters to config file
  * configure: move to AC_COMPILE_IFELSE
  * logsys: Make hires timestamp default
  * logsys: Support hires timestamp
  * totemconfig: Fix logging of freed string
  * config: Allow generated nodeis for UDP &amp; UDPU
  * config example: Migrate to newer syntax
  * log: Implement support for reopening log files
  * totemconfig: Replace strcpy by strncpy
  * config: Fix crash in reload if new interfaces are added
  * man: Fix default knet_pmtud_interval to match code
  * build: Remove totempg shared library leftovers
  * build: Do not compile totempg as a shared library
  * man: Fix typo conains -&gt; contains
  * man: Fix typo connnections -&gt; connections
  * build: Remove NSS dependencies
  * cts: Remove CTS
  * man: Fix crypto_hash and crypto_cipher defaults
  * coroparse: Fix newly introduced warning
  * Add option to force cluster into GATHER state
  * coroparse: Use key_name for error message
  * coroparse: Add file name and line to error message
  * coroparse: Be more strict in what is parsed
  * coroparse: Fix remove_whitespace end condition
  * coroparse: Check icmap_set results
  * coroparse: Return error if config line is too long
  * notifyd: Propagate error to exit code
  * git-version-gen: Fail on UNKNOWN version
  * build: Support for git archive stored tags
  * man: fix cmap key name runtime.config.totem.token
  * Remove libcgroup
  * systemd: prevent redundancy in journal
  * Add token_warning configuration option
  * corosync-notifyd: Rename global local_nodeid
  * totemsrp: Add assert into memb_lowest_in_config
  * totemconfig: Enlarge error_string_response
  * ipc_glue: Fix strncpy in pid_to_name function
  * cmap: Fix strncpy warning in cmap_iter_next
  * util: Fix strncpy in setcs_name_t function
  * totemknet: Free instance on failure exit
  * spec: Add explicit gcc build requirement
  * Add option for quiet operation to corosync-cmapctl
  * totemudpu: Pass correct paramto totemip_nosigpipe
  * totemudpu: Add local loop support
  * config: Fail config validation if not all nodes have all links
  * config: Enforce use of 'name' node attribute in multi-link clusters
  * totemconfig: Check for things that cannot be changed on the fly
  * Fix snprintf warnings
  * init: Use existing env variable from sysconf
  * upstart: Remove notifyd upstart unit
  * knet: Don't try to create loopback interface twice
  * knet: Fix knet log buffer size
  * cpg: Inform clients about left nodes during pause
  * man: Make the manpages reproducible
  * totemsrp: Fix leave message regression
  * totemsrp: Log proc/fail lists in memb_join_process
  * totemsrp: Fix srp_addr_compare
  * tools: don't distribute what we can easily make
  * Drop all references to SECURITY file
  * SECURITY: Remove SECURITY file
  * NSS_NoDB_Init: the parameter is reserved, must be NULL
  * Fix typo: defualt -&gt; default
  * Fix typo: sucesfully -&gt; successfully
  * totemsrp: Check join and leave msg length
  * totemsrp: Implement sanity checks of received msgs
  * cpg: Handle fragmented message sending interrupt
  * totem: Display IP of sender
  * totemsrp: Add magic and version into header
  * knet: Fix display of links with unconfigured link0
  * main: Set errno before calling of strtol
  * quorumtool: Don't set our_flags without v_handle
  * sam_test_agent: Remove unused assignment
  * blackbox: Quote subshell result properly
  * init: Quote subshell result properly
  * cfgtool: Don't assume link ID is a single char
  * knet: Always use link0 for loopback
  * totem: Fix debug warnings printed by knet
  * config: Allow use of ring0_addr
  * config: Update message when local host isn't found
  * cfg: Fix cfg_get_node_addrs so that DLM works
  * totem: Return interface count correctly
  * totem: Use nodeid ONLY in srp_addr
  * [rpm] use rpm macros to identify build distro
  * [rpm] fixup corosync.spec.in to build on opensuse
  * totempg: Fix corrupted messages
  * totempg: use iovec[i].iov_len instead of copy_len
  * totempg: Fix fragmentation segfault
  * [build] fix build with non-standard knet location
  * [man] fix regression introduced by 7162e75dcf81b7e475536e3060bf5e9312cd43b8
  * Man: Move overview mp to sections 3 and 7 from 8
  * logging: Close before and open blackbox after fork
  * logging: Make blackbox configurable
  * corosync-notifyd: improve error handling
  * spec: Modernize spec to comply with newest Fedora
  * build: Remove support for upstart
  * build: Replace -lknet with autoconf generated vars
  * build: Remove rdma/ibverbs
  * qdevice: Remove qdevices
  * config: Don't fudge port numbers
  * knet: Allow ping_timers to be auto-configured
  * cts: Make code compatible with Python 3
  * corosync-notifyd: make SNMP work again
  * build: Add the headers necessary for RPM build
  * config: if local node addr is wrong, fail with a sensible message
  * totemknet: Drop truncated packets on receive
  * totemudp: Make use of UDP_RECEIVE_FRAME_SIZE_MAX
  * totemudpu: Export and rename UDPU_FRAME_SIZE_MAX
  * totemconfig: Fix UDP autogeneration of mcast addr
  * totemudpu: Scale receive buffer
  * config: Allow selection of crypto_model
  * libcpg: Fix issue with partial big packet assembly
  * qdevice: mv free(str) after port validation
  * corosync.aug: Add missing options
  * config: Allow links to have different ip_versions
  * Fix compile errors in qdevice and vqsim on FreeBSD
  * cmapctl: mention the Clear stats option in usage message
  * corosync-cfgtool: refactor cli parameters handling
  * wd: fix snprintf warnings
  * totemsrp: Revert totemsrp_get_ifaces() changes
  * man: Add note about corosync not using name option
  * corosync.conf: publicize nodelist.node.name
  * man: fixes for corosync.conf man page
  * cmapctl: add "-m" option into help message
  * totemconfig: remove duplicate aes256 test
  * fix output format for corosync-cfgtool with knet (#283)
  * sync: Call sync_init of all services at once
  * sync: Remove unneeded determine sync code
  * stats: Add some missing knet stats
  * man: Add note about qdevice parallel cmds start
  * man: corosync-qdevice: some more stylistics
  * systemd: corosync-qdevice can not run without corosync
  * man: corosync-qdevice: fix formatting vs. punctuation
  * configure: kill off INITWRAPPERSDIR
  * corosync-qdevice: send startup notification to systemd
  * corosync-qnetd: send startup notification to systemd
  * Send corosync-notifyd startup notification to systemd
  * Make systemd stop corosync-notifyd if corosync is stopped
  * corosync.spec: Add system-devel build requirement
  * Send corosync startup notification to systemd
  * quorumtool: Use full buffer size in snprintf
  * cpghum: Mark print/log functions with printf attr
  * cpg_test_agent: Fix snprintf compiler warnings
  * sam: Fix snprintf compiler warnings
  * coroparse: Do not convert empty uid, gid to 0
  * cmapctl: Add option to clear the stats
  * stats: Don't display errors when reading knet stat
  * make the output of "corosync-cfgtool -s" more readable (#269)
  * cfg: nodeid should be unsigned int
  * quorumtool: remove duplicated help message
  * man: fix cpg_mcast_joined.3.in
  * man: Add stats.clear keys to the cmap_keys man pg
  * stats: Add cmap key to clear the various stats.
  * Use RuntimeDirectory instead of tmpfiles.d
  * totemconfig: generate mcast icmap items for UDP
  * Use static case blocks to determine distro flavor
  * configure: add --with-initconfigdir option
  * totemconfig: add nodeid check for knet
  * man: support SOURCE_DATE_EPOCH
  * man:fix in corosync-qdevice.8
  * man: must set nodeid for knet in nodelist
  * logsys: Avoid redundant callsite section checking
  * config: Fix memory leak
  * knet: Add support for knet compression
  * qdevice: Add support for heuristics
  * Spec: fix arch-qualified dependencies
  * cmap: Remove noop highest config version check
  * cmap: don't shutdown highest config_version node
  * totemudp: Remove memb_join discarding
  * votequorum: make atb consistent on nodelist reload
  * totem: Remove unnecessary NSS headers
  * config: Allow dynamic link configuration
  * totemudp: Retry if bind fails
  * corosync.conf.5: watchdog support is conditional
  * wd: default to not using a watchdog
  * wd: remove extra capitalization typo
  * corosync.conf.5: add warning about slow watchdogs
  * totemknet: fix debug message typo
  * corosync.conf.5: Fix watchdog documentation
  * wd: fix typo
  * Include fcntl.h for F_* and O_* defines
  * stats: add knet 'handle' stats
  * main: use syslog &amp; printf directly for early log messages
  * totempg: Allow space for incoming overflow
  * cpghum: Add options to change flood start/mult/end sizes (#237)
  * totemknet: Use knet's LOOPBACK transport (#236)
  * CFG: Remove ring-reenable code
  * main: Add support for libcgroup
  * stats: Add map with on-demand statistics
  * ipc: Check for the libraries sending invalid message IDs
  * main: Add option to set priority
  * totemknet: Prevent dead-loop in log_flush_messages
  * corosync-keygen: Display number of needed bits
  * totemknet: Flush knet log messages
  * corosync-keygen: Make less-secure default
  * corosync-keygen: Adapt to knet key sizes
  * totemconfig: Make crypto work again
  * knet: Compile with latest knet API
  * totem: Propagate totem initialization failure
  * totemknet: Use new knet_link_set_config() API
  * coroapi: Use size_t for private_data_size
  * votequorum: Report errors from votequorum_exec_send_reconfigure
  * cpghum: remove space after delimiter
  * cpghum: Add interim RTT to cpghum
  * configure: Enable C99 language standard
  * main: Display reason why cluster cannot be formed
  * notifyd: Add the community name to an SNMP trap
  * cpghum: Add machine-readable output
  * test: Fold cpgbench into cpghum (#205)
  * knet: Allow space for encapsulated messages
  * Main: Call mlockall after fork
  * Fix typos in README.recovery
  * coroparse: Use readdir instead of readdir_r
  * totemknet: Handle logpipe creation failure
  * wd: Report error when close of wd fails
  * Qnetd lms: Use UTILS_PRI_RING_ID printf format str
  * cpghum: Fix printf of size_t variable
  * totemknet: Got back to recvmsg() from recvmmsg()
  * totemconfig: Prefer nodelist over bindnetaddr
  * knet: Close libknet down cleanly at shutdown
  * man: Document -a option to corosync-quorumtool
  * cpghum test: Improve error codes
  * quorumtool: Add option to show all node addresses
  * cpghum: Stop cpghum from reporting fake CRC errors
  * logconfig: Do not overwrite logger_subsys priority
  * totem: Fix buffer sizes
  * main: Don't ask libqb to handle segv, it doesn't work
  * Logsys: Change logsys syslog_priority priority
  * knet: improve logging messages by adding knet subsystem
  * cpghum: Add abort_on_error option
  * cpghum: Add min rtt and print stats every alarm
  * cpghum: Add Round Trip Time (RTT) reporting
  * knet: Change nodeids to knet_node_id_t for new knet compatibility
  * knet: Fix MTU sizes &amp; allow transport config in corosync.conf
  * knet: PMTUd data_mtu already accounts for IP and knet header overheads
  * knet: switch from write to sendto()
  * knet: Change nodeids to 8 bit for new knet compatibility
  * doc: document watchdog_device parameter
  * knet: Fix member_remove to shut down existing links first
  * Spec: make internal dependencies arch-qualified
  * Spec: drop unneeded dependency
  * knet: Reduce default pong count to 2 for faster startup
  * totemknet: Make it compile with kronosnet git master
  * Qdevice: fix spell errors in qdevice
  * Remove redundant header file inclusion
  * Remove deprecated doxygen flags
  * upstart: Add softdog module loading example
  * Totempg: remove duplicate memcpy in mcast_msg func
  * man: Modify man-page according to command usage
  * init: Add doc URIs to the systemd service files
  * Fix typo: Destorying -&gt; Destroying
  * man: Fix typos in man page
  * totempg: totempg_groups_join return valid error
  * systemd: Delete unnecessary soft_margin
  * knet: Support reload of link parameters
  * list: Unify the list processing with qb_list func
  * knet: Allow configuration of more params
  * knet: Don't lose log messages when knet gets busy (#165)
  * libvotequorum: Bump version
  * list: Replace for_each by safe version where need
  * list: Remove list.h
  * list: Replace uses of list.h with qblist.h
  * [build] Fix build on RHEL7.3 latest
  * Change a type of NodeID.
  * vqsim: Fix Makefile.am
  * configure: Remove RDMA (again)
  * vqsim: Add Quorum simulator program
  * Build: Fail configure if knet is not installed
  * totem: add totemknet.[ch]
  * cfg: Prevents use of uninitialized buffer
  * totem: Add Kronosnet transport.
  * coropase: Set a poll_period value for wd monitor
  * votequorum: simplify reconfigure message handling
  * votequorum: Don't update expected_votes display if value is too high
  * Fix various typos
  * init: corosync and cman aren't system facilities
  * conf: be explicit about the mcast src/dst ports
    Added:
    corosync-3.1.8.tar.gz
    Removed:
    corosync-2.4.6.tar.gz
    bug-1001164_corosync.conf-example.patch
    bug-1032634_fix-ifdown-udp.patch
    bug-1083561_upgrade-from-1-x-y.patch
    bug-882449_corosync-conf-example.patch
    corosync-2.3.4-fix-bashisms.patch
    corosync-init-lockfile-path-error.patch
    corosync-start-stop-level.patch
    Fix-compile-warnings-with-GCC-7.2.1.patch
    upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
    baselibs.conf
    Modified:
    _service
    _servicedata
    corosync.changes: add changelogs
    corosync.spec: updates to corosync3</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731931200">- Update to version 3.1.9:
  * rust: Update to latest standards
  * totemsrp: Fix orf_token stats
  * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
  * totem: Use proper timestamp type for token warning
  * stats: Store token rx and tx timestamps as 64-bit
  * rust: fix clippy warning in rust 1.81
  * coroparse: Free kv_item key and value on failure
  * icmap: Free memory if qb_map_notify_add fails
  * cfg: Free new_config interfaces on failure
  * main: support lock pid file arg
  * man: fix a typo in cpg_model_initialize
  * man: Improve quorum provider formatting
  * rust: tests return errors and don't hang
  * rust: Improve Rust bindings
  * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
  * man: corosync.conf: Multi improvements
  * totem: Fix reference links
  * Report crypto errors back to cfg reload
  * Fix up the library .versions files
  * configure: Fix building of rust for release
  * License: Fix year (mainly to fix rust building)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1742990400">- Add a patch to fix CVE-2025-30472 (bsc#1239987)
  * 779.patch</changelog>
</package>
<package pkgid="d516efedb76cf7062ea5a49f7427dc126607ab418281ef22bf7575ad21fa08ad51dcbeeba3ad0d43a753fe23d85cd6f3bb7d7326b0b7f704e14fd2bae4e4371f" name="corosync-libs" arch="x86_64">
  <version epoch="0" ver="3.1.9" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1629720000">- Update to version 2.4.5+git70.64010f57:
  * totem: Add cancel_hold_on_retransmit config option</changelog>
  <changelog author="emil.penchev@suse.com" date="1649678400">- Update to version corosync-2.4.5+git.5d625cef:
  * totemudpu: Don't block local socketpair
  * totemsrp: Switch totempg buffers at the right time
  * logsys: Unlock config mutex on error</changelog>
  <changelog author="emil.penchev@suse.com" date="1669032000">- Update to version 2.4.6:
  * totemsrp: More informative messages
  * icmap: fix the icmap_get_*_r functions
  * stats: Add basic schedule-miss stats to needle
  * icmap: icmap_init_r() leaks if trie_create() fails
  * test: Fix cpgtest
  * pkgconfig: Add libqb dependency
  * man: votequorum.5: use proper single quotes
  * cpg: Change downlist log level
  * totem: Increase ring_id seq after load
  * totempg: Check sanity (length) of received message
  * totemsrp: Reduce MTU to left room second mcast
  * qnetd: Rename qnetd-log.c to log.c
  * qnetd: Fix double -d description
  * qnetd: Check log initialization error
  * qnetd: Add function to set log target
  * qdevice: Use log instead of libqb log
  * qdevice: Import log instead of qdevice-log
  * qdevice: Merge msg_decode_error functions
  * qnetd: Use log-common for nodelist debug dump
  * qdevice: Configurable log priority bump
  * tests: Add utils_parse_bool_str test
  * qdevice: Free memory used by log
  * qdevice: Add log test
  * qdevice: Add header files to list of test sources
  * qdevice: Add chk variant of vsyslog to test-log
  * qdevice: Add prototype of __vsyslog_chk
  * votequorum: Ignore the icmap_get_* return value
  * logconfig: Remove double free of value
  * cmap: Assert copied string length
  * sync: Assert sync_callbacks.name length
  * votequorum: Assert copied strings length
  * cpghum: Remove unused time variables and functions
  * cfgtool: Remove unused callbacks
  * cmapctl: Free bin_value on error
  * quorumtool: Assert copied string length
  * votequorum: Reflect runtime change of 2Node to WFA
  * main: Add schedmiss timestamp into message
  * votequorum: Change check of expected_votes
  * quorumtool: Fix exit status codes
  * quorumtool: exit on invalid expected votes
  * votequorum: set wfa status only on startup
  * Revert "totemip: Add support for sin6_scope_id"
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * main: Make schedmiss in cmap and log equal
  * totemip: Add support for sin6_scope_id
  * qnetd: Do not call ffsplit_do on shutdown
  * qdevice: Fix connect heuristics result callback
  * qdevice: Fix connect heuristics result callback
  * qdevice: Log adds newline automatically
  * qnetd: Fix dpd timer
  * qnetd: Add support for keep active partition vote
  * common_lib: Remove trailing spaces in cs_strerror
  * totemsrp: Move token received callback
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * qnetd: Fix NULL dereference of client
  * qnetd: Simplify KAP Tie-breaker logic
  * totem: Add cancel_hold_on_retransmit config option
  * logsys: Unlock config mutex on error
  * totemsrp: Switch totempg buffers at the right time
  * totemudpu: Don't block local socketpair
  * configure.ac: fix pkgconfig issue of rdma
  * totemip: Add support for sin6_scope_id
  * totemip: compare sin6_scope_id and interface_num
  * qdevice: Change log level to NOTICE on PASS
  * cfgtool: output error messages to stderr
  * tools: use util_strtonum for options checking
  * cmapctl: return EXIT_FAILURE on failure
  * quorumtool: Help shouldn't require running service
  * quorumtool: strict check for -o option
  * cmapctl: check NULL for key type and value for -p
  * man: adjust description about interface section
  * qnetd: sort by node_id when add new client
  * man: replace votequorum_poll for actually used fn</changelog>
  <changelog author="dimstar@opensuse.org" date="1706184000">- Provide user(coroqnetd) and group(coroqnetd) in the -qnetd
  package: user and group are generated by the pre script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="emil.penchev@suse.com" date="1715774400">- Update to version 3.1.8
  * Handling integer overflow issues
  * rust: Improve vector initialisation
  * man: Update the corosync_overview manpage
  * config: Fail to start if ping timers are invalid
  * rust: Remove some pointless casts
  * parser: Allow a non-breaking space as 'whitespace'
  * spec: Migrate to SPDX license
  * build: Fix rust make -j build dep for distcheck
  * rust: Remove tests from check scripts
  * Rust: Remove obsolete bindgen flag
  * knet: use knet TRACE logging level if available
  * Rust: 'fix' clippys for Rust 1.67
  * rust: Make it work on FreeBSD
  * bindings: Add Rust bindings
  * totemconfig: Add support for knet_mtu
  * configure: Modernize configure.ac a bit
  * log: Configure knet logging to the same as corosync
  * logrotate: Use copytruncate method by default
  * totemconfig: Check uname return value correctly
  * totempg: Fix alignment handling
  * pkgconfig: Export corosysconfdir
  * Remove bashism from configure script
  * totemudpu: Don't block local socketpair
  * build: Add explicit dependency for used libraries
  * totemsrp: Switch totempg buffers at the right time
  * cpghum: Allow to continue if corosync is restarted
  * man: Fix consensus timeout
  * logsys: Unlock config mutex on error
  * totem: Add cancel_hold_on_retransmit config option
  * totemconfig: Knet nodeid must be &lt; 65536
  * totemconfig: Ensure all knet hosts has a nodeid
  * cfgtool: Use CS_PRI_NODE_ID for formatting nodeid
  * cfgtool: Fix brief mode display of localhost
  * cfgtool: Set nodeid indexes after sort
  * totemconfig: Put autogenerated nodeid back to cmap
  * cfgtool: Check existence of at least one of nodeid
  * totemconfig: Do not process totem.nodeid
  * knet: Fix node status display
  * main: Add support for cgroup v2 and auto mode
  * stats: fix crash when iterating over deleted keys
  * man: Add note about single node configuration
  * Revert "main: Add support for cgroup v2"
  * Revert "man: Add info about cgroup v2 behavior"
  * man: Add info about cgroup v2 behavior
  * cfg: corosync_cfg_trackstop blocks forever
  * main: Add support for cgroup v2
  * main: Mark crypto_model key read only
  * totemconfig: Ensure strncpy is always terminated
  * config: Properly check crypto and compress models
  * man: corosync-cfgtool.8: use proper single quotes
  * knet: pass correct handle to knet_handle_compress
  * totemconfig: fix integer underflow and logic bug
  * totemconfig: change udp netmtu value as a constant
  * totemknet: retry knet_handle_new if it fails
  * main: Check memlock rlimit
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitize
  * configure: drop dead code
  * configure: detect and init pkg-config with macro
  * main: Close race condition when moving to statedir
  * init: Use corosync-cfgtool for shutdown
  * test: Add testcfg to exercise some cfg functions
  * cfg: Reinstate cfg tracking
  * cfg: Improve nodestatusget versioning
  * cfg: New API to get extended node/link infomation
  * totemknet: Check both cipher and hash for crypto
  * The ring id file needn't be executable
  * pkgconfig: export LOGDIR in corosync.pc
  * spec: Add isa version of corosync-devel provides
  * totemconfig: remove redundant nodeid error log
  * totemsrp: More informative messages
  * config: Increase default token timeout to 3000 ms
  * man: votequorum.5: use proper single quotes
  * man: fix typo: avaialable
  * tests: Use CS_DISPATCH_BLOCKING instead of cycle
  * quorum: Add support for nodelist callback
  * man: reload during rolling upgrade
  * totemsrp: Move token received callback
  * common_lib: Remove trailing spaces in cs_strerror
  * totemconfig: improve linknumber checking
  * totemconfig: add interface number to the error str
  * cfg: enhance message_handler_req_lib_cfg_killnode
  * totemconfig: validate totem.transport value
  * cmapctl: return error on no result of print prefix
  * cmapctl: check NULL for key type and value for -p
  * quorumtool: strict check for -o option
  * quorumtool: Help shouldn't require running service
  * cfgtool: Return error when -i doesn't match
  * man: update output of -s and -b for cfgtool
  * cmapctl: return EXIT_FAILURE on failure
  * tools: use util_strtonum for options checking
  * cfgtool: enhancement -a option
  * cfgtool: output error messages to stderr
  * configure: Use default systemd path with prefix
  * build: Use git-version-gen during specfile build
  * build: Update git-version-gen
  * spec: Require at least knet 1.18 for crypto reload
  * config: Allow reconfiguration of crypto options
  * test: Fix cpgtest
  * config: Fix crash when a reload fails twice
  * config: Don't free pointers used by transports
  * config: don't reload vquorum if reload fails
  * cfg: Improve error return to cfgtool -R
  * config: Reorganise the config system
  * Revert "totemip: compare sin6_scope_id and interface_num"
  * Revert "totemip: Add support for sin6_scope_id"
  * cfgtool: Fix error code as described in MP
  * icmap: icmap_init_r() leaks if trie_create() fails
  * votequorum: set wfa status only on startup
  * quorumtool: exit on invalid expected votes
  * votequorum: Change check of expected_votes
  * cfgtool: Simplify output a bit for link status
  * man: Enhance link_mode priority description
  * main: Add schedmiss timestamp into message
  * totemip: compare sin6_scope_id and interface_num
  * totemip: Really remove totemip_copy_endian_convert
  * totemip: Remove unused totemip_copy_endian_convert
  * totemip: Add support for sin6_scope_id
  * cfgtool: Improve link status display
  * totemknet: Change the initial value of the status
  * stats: Use nanoseconds from epoch for schedmiss
  * stats: Add stats for scheduler misses
  * votequorum: Reflect runtime change of 2Node to WFA
  * cpg: Change downlist log level
  * man: move cmap_keys man page from section 8 to 7
  * stats: Check return code of stats_map_get
  * quorumtool: Assert copied string length
  * notifyd: Check cmap_track_add result
  * cmapctl: Free bin_value on error
  * cfgtool: Remove unused callbacks
  * cpghum: Remove unused time variables and functions
  * votequorum: Assert copied strings length
  * totemknet: Assert strcpy length
  * totemknet: Check result of fcntl O_NONBLOCK call
  * totemconfig: Initialize warnings variable
  * sync: Assert sync_callbacks.name length
  * totemknet: Don't mix corosync and knet error codes
  * stats: Assert value_len when value is needed
  * cmap: Assert copied string length
  * totemconfig: Reuse already fetched pointer
  * logconfig: Remove double free of value
  * votequorum: Ignore the icmap_get_* return value
  * totemconfig: Free leaks found by coverity
  * icmap: fix the icmap_get_*_r functions
  * pkgconfig: Add libqb dependency
  * Initialize stack allocated memory
  * man: Fix corosync.conf knet pong count default
  * totemsrp: Reduce MTU to left room second mcast
  * totempg: Check sanity (length) of received message
  * build: add option for enabling sanitizer builds
  * totemknet: Add locking for log call
  * man: Fix link_mode priority description
  * notifyd: Don't dereference NULL key_name
  * totem: Increase ring_id seq after load
  * init: Use cpgtool instead of cfgtool
  * notifyd: Fix warning produced by 32-bit compiler
  * cfgtool: Remove unused code
  * logging: Add CS_PRI_NODE_ID and CS_PRI_RING_ID
  * vqsim: Fix gitignore
  * totemknet: Disable forwarding on shutdown
  * totemconfig: Fix compiler warning
  * totem: fix check if all nodes have same number of links
  * totem: fix check if all nodes have name attrs in multi-link setups
  * corosync-notifyd: Add option to disable DNS lookup
  * totemsrp: Fix warnings produced by gcc 9.1
  * cpg: Move filling of member_list to subfunction
  * cpg: Add more comments to notify_lib_joinlist
  * cpg: send single confchg event per group on joinlist
  * cpg: notify_lib_joinlist: drop conn parameter
  * vqsim: Check length of copied optarg
  * vqsim: Check result of icmap_set_uint32
  * vqsim: Remove unused total_nodes
  * vqsim: Free allocated newvq on error
  * vqsim: Check length of received message
  * vqsim: Check write result
  * vqsim: Do not access unitialized argv[0]
  * totemknet: Initialize return value in setup_nozzle
  * totemknet: macaddr_str is always set
  * totemknet: Ignore icmap_get_string result
  * totemknet: create_nozzle_device simplify check
  * totemip: Use res in totemip_sa_equal
  * totemconfig: ipaddr_equal use switch
  * configure: Fix GDB_CFLAGS typo
  * man: Add vqsim man page into distributed tarball
  * spec: Add support for user-flags configure option
  * man: Enahnce block_unlisted_ips description
  * man: Enhance corosync.conf mp a bit
  * cfgtool: Fix link status display
  * knet: Use block_unlisted_ips
  * udpu: Drop packets from unlisted IPs
  * knet: Fix initialising of knet access lists.
  * knet: allow corosync to use knet access lists
  * man: Enhance token_retransmit description
  * totemconfig: Fix minimum limit for hold timeout
  * vqsim: Enhance vqsim
  * knet: Fix a couple of errors when adding a new link
  * totemconfig: fix autogen mcastaddr for ipv6-4
  * totemconfig: Ensure nodeid is specified for IPv6
  * vqsim: Fix vqsim for corosync 3.0
  * vqsim: Make vqsim compile
  * totemconfig: ipaddr_equal check just addr part
  * cpg: Add CPG_REASON_UNDEFINED
  * crypto: re-introduce secauth parameter
  * totemconfig: Remove support for 3des
  * keygen: Reflect change in knet
  * set totem.keyfile and totem.key to RO
  * Revert "init: Enable StopWhenUnneeded"
  * totemsrp: Word spelling mistake
  * coroparse: Fix compiler warning
  * configure: Do not autodetect nozzle
  * nozzle: Add support for libnozzle devices
  * quorumtool: Fix exit status codes
  * corosync-cfgtool: Fix -i matching
  * build: Use the AWK variable provided by configure
  * build: Use the SED variable provided by configure
  * configure.ac: AC_PROG_SED is already present
  * corosync.conf.5: typography fixes
  * corosync.conf.5: fix grammar
  * cfgtool: Improve link status display
  * doc: Update INSTALL file
  * init: Enable StopWhenUnneeded
  * totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4
  * [totemknet] update for libknet.so.2.0.0 init API
  * Config version must be specified
  * Don't declare success early
  * More natural error messages
  * main: Rename run_dir to state_dir
  * totemconfig: Enhance totem.ip_version
  * totemip: Add debug information to totemip_parse
  * totemconfig: Add IPs to family mismatch error
  * config: Look up hostnames in a defined order
  * Fix corosync.conf.5 manpage typos
  * man: Add some information about address resolution
  * totemconfig: Really use totemip_parse results
  * man: Add instructions for adding/removing nodes
  * config: Disallow corosync-cmapctl updates of nodelist
  * config: Report IP addr/nodename parse errors back
  * coroparse: Remove unused cs_err initialization
  * cpghum: Check cpg_local_get return code
  * testcpg2: Check cpg_dispatch return code
  * notifyd: Delete registered tracking keys
  * stats: Fix delete of track
  * init: Fix init script to work with containers
  * main: Remove COROSYNC_RUN_DIR
  * man: Describe nodelist.node.name properly
  * main: Remove COROSYNC_TOTEM_AUTHKEY_FILE
  * main: Replace COROSYNC_MAIN_CONFIG_FILE
  * main: Move sched paramaters to config file
  * configure: move to AC_COMPILE_IFELSE
  * logsys: Make hires timestamp default
  * logsys: Support hires timestamp
  * totemconfig: Fix logging of freed string
  * config: Allow generated nodeis for UDP &amp; UDPU
  * config example: Migrate to newer syntax
  * log: Implement support for reopening log files
  * totemconfig: Replace strcpy by strncpy
  * config: Fix crash in reload if new interfaces are added
  * man: Fix default knet_pmtud_interval to match code
  * build: Remove totempg shared library leftovers
  * build: Do not compile totempg as a shared library
  * man: Fix typo conains -&gt; contains
  * man: Fix typo connnections -&gt; connections
  * build: Remove NSS dependencies
  * cts: Remove CTS
  * man: Fix crypto_hash and crypto_cipher defaults
  * coroparse: Fix newly introduced warning
  * Add option to force cluster into GATHER state
  * coroparse: Use key_name for error message
  * coroparse: Add file name and line to error message
  * coroparse: Be more strict in what is parsed
  * coroparse: Fix remove_whitespace end condition
  * coroparse: Check icmap_set results
  * coroparse: Return error if config line is too long
  * notifyd: Propagate error to exit code
  * git-version-gen: Fail on UNKNOWN version
  * build: Support for git archive stored tags
  * man: fix cmap key name runtime.config.totem.token
  * Remove libcgroup
  * systemd: prevent redundancy in journal
  * Add token_warning configuration option
  * corosync-notifyd: Rename global local_nodeid
  * totemsrp: Add assert into memb_lowest_in_config
  * totemconfig: Enlarge error_string_response
  * ipc_glue: Fix strncpy in pid_to_name function
  * cmap: Fix strncpy warning in cmap_iter_next
  * util: Fix strncpy in setcs_name_t function
  * totemknet: Free instance on failure exit
  * spec: Add explicit gcc build requirement
  * Add option for quiet operation to corosync-cmapctl
  * totemudpu: Pass correct paramto totemip_nosigpipe
  * totemudpu: Add local loop support
  * config: Fail config validation if not all nodes have all links
  * config: Enforce use of 'name' node attribute in multi-link clusters
  * totemconfig: Check for things that cannot be changed on the fly
  * Fix snprintf warnings
  * init: Use existing env variable from sysconf
  * upstart: Remove notifyd upstart unit
  * knet: Don't try to create loopback interface twice
  * knet: Fix knet log buffer size
  * cpg: Inform clients about left nodes during pause
  * man: Make the manpages reproducible
  * totemsrp: Fix leave message regression
  * totemsrp: Log proc/fail lists in memb_join_process
  * totemsrp: Fix srp_addr_compare
  * tools: don't distribute what we can easily make
  * Drop all references to SECURITY file
  * SECURITY: Remove SECURITY file
  * NSS_NoDB_Init: the parameter is reserved, must be NULL
  * Fix typo: defualt -&gt; default
  * Fix typo: sucesfully -&gt; successfully
  * totemsrp: Check join and leave msg length
  * totemsrp: Implement sanity checks of received msgs
  * cpg: Handle fragmented message sending interrupt
  * totem: Display IP of sender
  * totemsrp: Add magic and version into header
  * knet: Fix display of links with unconfigured link0
  * main: Set errno before calling of strtol
  * quorumtool: Don't set our_flags without v_handle
  * sam_test_agent: Remove unused assignment
  * blackbox: Quote subshell result properly
  * init: Quote subshell result properly
  * cfgtool: Don't assume link ID is a single char
  * knet: Always use link0 for loopback
  * totem: Fix debug warnings printed by knet
  * config: Allow use of ring0_addr
  * config: Update message when local host isn't found
  * cfg: Fix cfg_get_node_addrs so that DLM works
  * totem: Return interface count correctly
  * totem: Use nodeid ONLY in srp_addr
  * [rpm] use rpm macros to identify build distro
  * [rpm] fixup corosync.spec.in to build on opensuse
  * totempg: Fix corrupted messages
  * totempg: use iovec[i].iov_len instead of copy_len
  * totempg: Fix fragmentation segfault
  * [build] fix build with non-standard knet location
  * [man] fix regression introduced by 7162e75dcf81b7e475536e3060bf5e9312cd43b8
  * Man: Move overview mp to sections 3 and 7 from 8
  * logging: Close before and open blackbox after fork
  * logging: Make blackbox configurable
  * corosync-notifyd: improve error handling
  * spec: Modernize spec to comply with newest Fedora
  * build: Remove support for upstart
  * build: Replace -lknet with autoconf generated vars
  * build: Remove rdma/ibverbs
  * qdevice: Remove qdevices
  * config: Don't fudge port numbers
  * knet: Allow ping_timers to be auto-configured
  * cts: Make code compatible with Python 3
  * corosync-notifyd: make SNMP work again
  * build: Add the headers necessary for RPM build
  * config: if local node addr is wrong, fail with a sensible message
  * totemknet: Drop truncated packets on receive
  * totemudp: Make use of UDP_RECEIVE_FRAME_SIZE_MAX
  * totemudpu: Export and rename UDPU_FRAME_SIZE_MAX
  * totemconfig: Fix UDP autogeneration of mcast addr
  * totemudpu: Scale receive buffer
  * config: Allow selection of crypto_model
  * libcpg: Fix issue with partial big packet assembly
  * qdevice: mv free(str) after port validation
  * corosync.aug: Add missing options
  * config: Allow links to have different ip_versions
  * Fix compile errors in qdevice and vqsim on FreeBSD
  * cmapctl: mention the Clear stats option in usage message
  * corosync-cfgtool: refactor cli parameters handling
  * wd: fix snprintf warnings
  * totemsrp: Revert totemsrp_get_ifaces() changes
  * man: Add note about corosync not using name option
  * corosync.conf: publicize nodelist.node.name
  * man: fixes for corosync.conf man page
  * cmapctl: add "-m" option into help message
  * totemconfig: remove duplicate aes256 test
  * fix output format for corosync-cfgtool with knet (#283)
  * sync: Call sync_init of all services at once
  * sync: Remove unneeded determine sync code
  * stats: Add some missing knet stats
  * man: Add note about qdevice parallel cmds start
  * man: corosync-qdevice: some more stylistics
  * systemd: corosync-qdevice can not run without corosync
  * man: corosync-qdevice: fix formatting vs. punctuation
  * configure: kill off INITWRAPPERSDIR
  * corosync-qdevice: send startup notification to systemd
  * corosync-qnetd: send startup notification to systemd
  * Send corosync-notifyd startup notification to systemd
  * Make systemd stop corosync-notifyd if corosync is stopped
  * corosync.spec: Add system-devel build requirement
  * Send corosync startup notification to systemd
  * quorumtool: Use full buffer size in snprintf
  * cpghum: Mark print/log functions with printf attr
  * cpg_test_agent: Fix snprintf compiler warnings
  * sam: Fix snprintf compiler warnings
  * coroparse: Do not convert empty uid, gid to 0
  * cmapctl: Add option to clear the stats
  * stats: Don't display errors when reading knet stat
  * make the output of "corosync-cfgtool -s" more readable (#269)
  * cfg: nodeid should be unsigned int
  * quorumtool: remove duplicated help message
  * man: fix cpg_mcast_joined.3.in
  * man: Add stats.clear keys to the cmap_keys man pg
  * stats: Add cmap key to clear the various stats.
  * Use RuntimeDirectory instead of tmpfiles.d
  * totemconfig: generate mcast icmap items for UDP
  * Use static case blocks to determine distro flavor
  * configure: add --with-initconfigdir option
  * totemconfig: add nodeid check for knet
  * man: support SOURCE_DATE_EPOCH
  * man:fix in corosync-qdevice.8
  * man: must set nodeid for knet in nodelist
  * logsys: Avoid redundant callsite section checking
  * config: Fix memory leak
  * knet: Add support for knet compression
  * qdevice: Add support for heuristics
  * Spec: fix arch-qualified dependencies
  * cmap: Remove noop highest config version check
  * cmap: don't shutdown highest config_version node
  * totemudp: Remove memb_join discarding
  * votequorum: make atb consistent on nodelist reload
  * totem: Remove unnecessary NSS headers
  * config: Allow dynamic link configuration
  * totemudp: Retry if bind fails
  * corosync.conf.5: watchdog support is conditional
  * wd: default to not using a watchdog
  * wd: remove extra capitalization typo
  * corosync.conf.5: add warning about slow watchdogs
  * totemknet: fix debug message typo
  * corosync.conf.5: Fix watchdog documentation
  * wd: fix typo
  * Include fcntl.h for F_* and O_* defines
  * stats: add knet 'handle' stats
  * main: use syslog &amp; printf directly for early log messages
  * totempg: Allow space for incoming overflow
  * cpghum: Add options to change flood start/mult/end sizes (#237)
  * totemknet: Use knet's LOOPBACK transport (#236)
  * CFG: Remove ring-reenable code
  * main: Add support for libcgroup
  * stats: Add map with on-demand statistics
  * ipc: Check for the libraries sending invalid message IDs
  * main: Add option to set priority
  * totemknet: Prevent dead-loop in log_flush_messages
  * corosync-keygen: Display number of needed bits
  * totemknet: Flush knet log messages
  * corosync-keygen: Make less-secure default
  * corosync-keygen: Adapt to knet key sizes
  * totemconfig: Make crypto work again
  * knet: Compile with latest knet API
  * totem: Propagate totem initialization failure
  * totemknet: Use new knet_link_set_config() API
  * coroapi: Use size_t for private_data_size
  * votequorum: Report errors from votequorum_exec_send_reconfigure
  * cpghum: remove space after delimiter
  * cpghum: Add interim RTT to cpghum
  * configure: Enable C99 language standard
  * main: Display reason why cluster cannot be formed
  * notifyd: Add the community name to an SNMP trap
  * cpghum: Add machine-readable output
  * test: Fold cpgbench into cpghum (#205)
  * knet: Allow space for encapsulated messages
  * Main: Call mlockall after fork
  * Fix typos in README.recovery
  * coroparse: Use readdir instead of readdir_r
  * totemknet: Handle logpipe creation failure
  * wd: Report error when close of wd fails
  * Qnetd lms: Use UTILS_PRI_RING_ID printf format str
  * cpghum: Fix printf of size_t variable
  * totemknet: Got back to recvmsg() from recvmmsg()
  * totemconfig: Prefer nodelist over bindnetaddr
  * knet: Close libknet down cleanly at shutdown
  * man: Document -a option to corosync-quorumtool
  * cpghum test: Improve error codes
  * quorumtool: Add option to show all node addresses
  * cpghum: Stop cpghum from reporting fake CRC errors
  * logconfig: Do not overwrite logger_subsys priority
  * totem: Fix buffer sizes
  * main: Don't ask libqb to handle segv, it doesn't work
  * Logsys: Change logsys syslog_priority priority
  * knet: improve logging messages by adding knet subsystem
  * cpghum: Add abort_on_error option
  * cpghum: Add min rtt and print stats every alarm
  * cpghum: Add Round Trip Time (RTT) reporting
  * knet: Change nodeids to knet_node_id_t for new knet compatibility
  * knet: Fix MTU sizes &amp; allow transport config in corosync.conf
  * knet: PMTUd data_mtu already accounts for IP and knet header overheads
  * knet: switch from write to sendto()
  * knet: Change nodeids to 8 bit for new knet compatibility
  * doc: document watchdog_device parameter
  * knet: Fix member_remove to shut down existing links first
  * Spec: make internal dependencies arch-qualified
  * Spec: drop unneeded dependency
  * knet: Reduce default pong count to 2 for faster startup
  * totemknet: Make it compile with kronosnet git master
  * Qdevice: fix spell errors in qdevice
  * Remove redundant header file inclusion
  * Remove deprecated doxygen flags
  * upstart: Add softdog module loading example
  * Totempg: remove duplicate memcpy in mcast_msg func
  * man: Modify man-page according to command usage
  * init: Add doc URIs to the systemd service files
  * Fix typo: Destorying -&gt; Destroying
  * man: Fix typos in man page
  * totempg: totempg_groups_join return valid error
  * systemd: Delete unnecessary soft_margin
  * knet: Support reload of link parameters
  * list: Unify the list processing with qb_list func
  * knet: Allow configuration of more params
  * knet: Don't lose log messages when knet gets busy (#165)
  * libvotequorum: Bump version
  * list: Replace for_each by safe version where need
  * list: Remove list.h
  * list: Replace uses of list.h with qblist.h
  * [build] Fix build on RHEL7.3 latest
  * Change a type of NodeID.
  * vqsim: Fix Makefile.am
  * configure: Remove RDMA (again)
  * vqsim: Add Quorum simulator program
  * Build: Fail configure if knet is not installed
  * totem: add totemknet.[ch]
  * cfg: Prevents use of uninitialized buffer
  * totem: Add Kronosnet transport.
  * coropase: Set a poll_period value for wd monitor
  * votequorum: simplify reconfigure message handling
  * votequorum: Don't update expected_votes display if value is too high
  * Fix various typos
  * init: corosync and cman aren't system facilities
  * conf: be explicit about the mcast src/dst ports
    Added:
    corosync-3.1.8.tar.gz
    Removed:
    corosync-2.4.6.tar.gz
    bug-1001164_corosync.conf-example.patch
    bug-1032634_fix-ifdown-udp.patch
    bug-1083561_upgrade-from-1-x-y.patch
    bug-882449_corosync-conf-example.patch
    corosync-2.3.4-fix-bashisms.patch
    corosync-init-lockfile-path-error.patch
    corosync-start-stop-level.patch
    Fix-compile-warnings-with-GCC-7.2.1.patch
    upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
    baselibs.conf
    Modified:
    _service
    _servicedata
    corosync.changes: add changelogs
    corosync.spec: updates to corosync3</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731931200">- Update to version 3.1.9:
  * rust: Update to latest standards
  * totemsrp: Fix orf_token stats
  * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
  * totem: Use proper timestamp type for token warning
  * stats: Store token rx and tx timestamps as 64-bit
  * rust: fix clippy warning in rust 1.81
  * coroparse: Free kv_item key and value on failure
  * icmap: Free memory if qb_map_notify_add fails
  * cfg: Free new_config interfaces on failure
  * main: support lock pid file arg
  * man: fix a typo in cpg_model_initialize
  * man: Improve quorum provider formatting
  * rust: tests return errors and don't hang
  * rust: Improve Rust bindings
  * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
  * man: corosync.conf: Multi improvements
  * totem: Fix reference links
  * Report crypto errors back to cfg reload
  * Fix up the library .versions files
  * configure: Fix building of rust for release
  * License: Fix year (mainly to fix rust building)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1742990400">- Add a patch to fix CVE-2025-30472 (bsc#1239987)
  * 779.patch</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775131200">- Add a patch to fix CVE-2026-35091 and CVE-2026-35092 (bsc#1261299)(bsc#1261300)
  * 820.patch</changelog>
</package>
<package pkgid="06008e7f5d62e64f6f7df6345e3c44136ae2b2b8502b62418b73e990e7716fdc65c1f6f1fed91cbfdaa4afc34abf16991ea2570431f14cee452d0e95955c994e" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="160000.2.2"/>
  <changelog author="yren@suse.com" date="1563883200">- Corosync-qdevice with rolling up version with upstream latest commit</changelog>
  <changelog author="XLiang@suse.com" date="1597233600">- Corosync-qdevice with rolling up version with upstream latest commit</changelog>
  <changelog author="XLiang@suse.com" date="1610020800">- Update to version 3.0.1+20201123.df3c672:
  * qnetd: Don't alloc host_addr
  * qnetd: Move client schedule disconnect handling
  * qnetd-algo-ffsplit: Simplify KAP Tie-breaker logic
  * qnetd: Improve dead peer detection
  * qnet-config: Add space to string concat
  * timer-list: Add functions for get and set interval
  * timer-list: Rename delete and reschedule ops
  * utils: Add utils_strtod
  * qdevice: Handle configurations without ring0_addr
  * qdevice: Configuration without nodelist is invalid
  * qdevice-cmap: Load clear node high bit only once
  * qdevice-cmap: Fix clear high node bit typo
  * qdevice-net-ipc-cmd: Fix compiler warning
  * devel: add corosync-qdevice.pc file for pcs to use
  * tests: Fix assert problems
  * timer-list: Improve efficiency of delete operation
  * test-timer-list: Ignore poll errors
  * tlv: Check dynar_cat result
  * test-process-list: Fix few bugs
  * msg: Check cat result on adding msg type and size
  * timer-list: Implement heap based timer-list
  * pr-poll-loop: Add queue header include
  * qdevice-ipc: Fix dereference bug
  * qnet: Add support for keep active partition vote
  * qnetd: Fix NULL dereference of client
  * qdevice-net-heuristics: Fix log message
  * qdevice: Fix set option and set option reply
  * LICENSE: Update copyright date
  * qnetd: Add support for keep active partition vote
  * README: Fix typos
  * timer-list: Add test
  * timer-list: Return error on adding NULL callback
  * qnetd: Fix dpd timer
  * qdevice-votequorum: Fix typo in log message
  * qdevice: Port qdevice to use pr-poll-loop
  * qdevice-net: Log adds newline automatically
  * qnetd: Return error code based on ipc closed
  * pr-poll-loop: Fix set_events_cb return code
  * qdevice: Fix connect heuristics result callback
  * pr-poll-loop: Add pre poll callbacks
  * pr-poll-loop: Pass PRPollDesc for prfd events
  * pr-poll-loop: Add support for PR_POLL_EXCEPT
  * qnetd: Move pr_poll_loop_exec call to function
  * qnetd: Log pr_poll_loop_add,del errors properly
  * qnetd: Remove unneeded pprio include
  * qnetd: Remove write callback on listening sockets
  * qdevice: Initial port to use pr-poll-loop
  * pr-poll-loop: Return error code if PR_Poll fails
  * heuristics: Remove qdevice instance pointer
  * tests: Enhance pr-poll-loop test
  * tests: Add pr-poll-loop test
  * pr-poll-loop: Do not add FD when events is empty
  * qdevice: Fix connect heuristics result callback
  * qdevice: Add space before bracket
  * qdevice: Use EXIT_SUCCESS and EXIT_FAILURE codes
  * qnetd: Do not call ffsplit_do on shutdown
  * qnetd: Migrate main loop to pr-poll-loop
  * pr-poll-loop: Add main poll loop based on PR_Poll</changelog>
  <changelog author="XLiang@suse.com" date="1621857600">- Update to version 3.0.1+20210409.e1d5914:
  * man: replace votequorum_poll for actually used fn
  * qnetd: sort by node_id when add new client
  * timer-list: Use correct english term children
  * tests: Fix test-timer-list NULL check
  * tests: Enhance test-timer-list</changelog>
  <changelog author="XLiang@suse.com" date="1680696000">- Update to version 3.0.3+20230322.4331c7d:
  * qdevice: Destroy non blocking client on failure
  * configure: Modernize configure.ac a bit
  * unix-socket: Check minimal length of socket path</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
</package>
<package pkgid="b59976a9e0f418a8fbf0ff988e4c81ce4b8e9499755eaea27fb4e637032fd4077a98c5f8e00d9fe60c0fef32817c73cf2b55d668d219385cc72480bc6e84e280" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="160000.2.2"/>
  <changelog author="yren@suse.com" date="1563883200">- Corosync-qdevice with rolling up version with upstream latest commit</changelog>
  <changelog author="XLiang@suse.com" date="1597233600">- Corosync-qdevice with rolling up version with upstream latest commit</changelog>
  <changelog author="XLiang@suse.com" date="1610020800">- Update to version 3.0.1+20201123.df3c672:
  * qnetd: Don't alloc host_addr
  * qnetd: Move client schedule disconnect handling
  * qnetd-algo-ffsplit: Simplify KAP Tie-breaker logic
  * qnetd: Improve dead peer detection
  * qnet-config: Add space to string concat
  * timer-list: Add functions for get and set interval
  * timer-list: Rename delete and reschedule ops
  * utils: Add utils_strtod
  * qdevice: Handle configurations without ring0_addr
  * qdevice: Configuration without nodelist is invalid
  * qdevice-cmap: Load clear node high bit only once
  * qdevice-cmap: Fix clear high node bit typo
  * qdevice-net-ipc-cmd: Fix compiler warning
  * devel: add corosync-qdevice.pc file for pcs to use
  * tests: Fix assert problems
  * timer-list: Improve efficiency of delete operation
  * test-timer-list: Ignore poll errors
  * tlv: Check dynar_cat result
  * test-process-list: Fix few bugs
  * msg: Check cat result on adding msg type and size
  * timer-list: Implement heap based timer-list
  * pr-poll-loop: Add queue header include
  * qdevice-ipc: Fix dereference bug
  * qnet: Add support for keep active partition vote
  * qnetd: Fix NULL dereference of client
  * qdevice-net-heuristics: Fix log message
  * qdevice: Fix set option and set option reply
  * LICENSE: Update copyright date
  * qnetd: Add support for keep active partition vote
  * README: Fix typos
  * timer-list: Add test
  * timer-list: Return error on adding NULL callback
  * qnetd: Fix dpd timer
  * qdevice-votequorum: Fix typo in log message
  * qdevice: Port qdevice to use pr-poll-loop
  * qdevice-net: Log adds newline automatically
  * qnetd: Return error code based on ipc closed
  * pr-poll-loop: Fix set_events_cb return code
  * qdevice: Fix connect heuristics result callback
  * pr-poll-loop: Add pre poll callbacks
  * pr-poll-loop: Pass PRPollDesc for prfd events
  * pr-poll-loop: Add support for PR_POLL_EXCEPT
  * qnetd: Move pr_poll_loop_exec call to function
  * qnetd: Log pr_poll_loop_add,del errors properly
  * qnetd: Remove unneeded pprio include
  * qnetd: Remove write callback on listening sockets
  * qdevice: Initial port to use pr-poll-loop
  * pr-poll-loop: Return error code if PR_Poll fails
  * heuristics: Remove qdevice instance pointer
  * tests: Enhance pr-poll-loop test
  * tests: Add pr-poll-loop test
  * pr-poll-loop: Do not add FD when events is empty
  * qdevice: Fix connect heuristics result callback
  * qdevice: Add space before bracket
  * qdevice: Use EXIT_SUCCESS and EXIT_FAILURE codes
  * qnetd: Do not call ffsplit_do on shutdown
  * qnetd: Migrate main loop to pr-poll-loop
  * pr-poll-loop: Add main poll loop based on PR_Poll</changelog>
  <changelog author="XLiang@suse.com" date="1621857600">- Update to version 3.0.1+20210409.e1d5914:
  * man: replace votequorum_poll for actually used fn
  * qnetd: sort by node_id when add new client
  * timer-list: Use correct english term children
  * tests: Fix test-timer-list NULL check
  * tests: Enhance test-timer-list</changelog>
  <changelog author="XLiang@suse.com" date="1680696000">- Update to version 3.0.3+20230322.4331c7d:
  * qdevice: Destroy non blocking client on failure
  * configure: Modernize configure.ac a bit
  * unix-socket: Check minimal length of socket path</changelog>
  <changelog author="nicholas.yang@suse.com" date="1731499200">- Add a patch to harden services with systemd sandboxing:
  * 0001-harden-services-with-systemd-sandboxing.patch</changelog>
</package>
<package pkgid="e61e7dfcf87fc482373c439ea0a0e6ab9dd5fef3e5bb4fa09c7a7840662a4a7c0f12dc3279ce87fa0c0cde975592aff4dc7854b7534ddbe8b840866b307fad41" name="corrosion" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="160000.1.2"/>
  <changelog author="christophe@krop.fr" date="1716379200">- Init corrosion</changelog>
  <changelog author="christophe@krop.fr" date="1740398400">- Update to 0.5.1
  * fix: Update FindRust to work with rustup v1.28.0</changelog>
</package>
<package pkgid="1c28a71faa1a3375f7a9093d8a8af188502cf079cb5f55ccec43023ca74132d118ceb946baf12e2519b6068cb41c775cdccf2787898a321953c57674a4d1f0c7" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.5.3" rel="160000.1.2"/>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="1bbf0131f5cbd9cd4b0a52ecd4da072c780343b2c347e26999ca517f4d99cc9dfcab653c0c3d0c1d8933c6132bd6ae2292df703558c9f85c94e9e3f5772fe521" name="cosign" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5:
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="10814918372288db1a5603bb19aa407a5a557205b137d181230237e1ead3ba1c5a352dbfaff3bf3ca8ff0771c94c0b8d10e57d6ba11d4023196d81a0f9efb47d" name="cosign" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- update to 3.0.6 (bsc#1261859, CVE-2026-39395):
  * Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (#4801)
  * Handle whitespace-only certificate annotation (#4760)
  * fix(sign): closing SignerVerifier too early when signing with
    a security key (#4761)
  * Disallow --new-bundle-format and --rfc3161-timestamp (#4762)
  * support managed keys in conformance testing (#4728)
  * Add support for GCE metadata server env var (#4732)
  * fix: preserve per-layer annotations in
    WriteAttestationsReferrer (#4709)
  * Fix parsing of in-toto for string predicates
  * Mark batch of flags for deprecation (#4698)
  * disallow key and cert identity being used together
    during verification (#4636)
  * support key creation in GitLab group (#4704)</changelog>
</package>
<package pkgid="df9e6da1fc213c39c853a8c960fbce81816ce18f5a88e6da8b6e1d91b76903dee7376b2c9db61770a937ffd48c9bb77e1153bc522eb5015f079b3859154ce519" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="160000.1.2"/>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="640ca999a0d902248535acb978ff15419c06ae492c8abe6ad2be3ad7488f314e083ceec2f7d8895e693d57acc733cef71b80c7521fc9dcc364191b1f90f9479a" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5:
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="fc3d83d9a753bae2e01b78e8188a2734ea5bc8a7bbe0fa645c8f7790290a58fb5f9c205669785ee5270460a257b87735b8ccc47991c3f9dee8cdef9faa4183e5" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.6" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- update to 3.0.6 (bsc#1261859, CVE-2026-39395):
  * Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (#4801)
  * Handle whitespace-only certificate annotation (#4760)
  * fix(sign): closing SignerVerifier too early when signing with
    a security key (#4761)
  * Disallow --new-bundle-format and --rfc3161-timestamp (#4762)
  * support managed keys in conformance testing (#4728)
  * Add support for GCE metadata server env var (#4732)
  * fix: preserve per-layer annotations in
    WriteAttestationsReferrer (#4709)
  * Fix parsing of in-toto for string predicates
  * Mark batch of flags for deprecation (#4698)
  * disallow key and cert identity being used together
    during verification (#4636)
  * support key creation in GitLab group (#4704)</changelog>
</package>
<package pkgid="00a5e2dd30baf1eaba312f5ad7b996c3af4f1dc4196aae522b65150669da55347aa487c250c28f7be023d992f00c29b636e167bc30a563a09e412e43b30fa40b" name="cosign-fish-completion" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="160000.1.2"/>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="08f0d15eb01752d44db30e1d2d9b407806a2ee2512d589feda88deede28278ea121825d9196a6949bedb803fcc3a948b31b47f1da1ecedf5d1f367f5e0936e09" name="cosign-fish-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5:
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="e50c22c896cca2b499aa14e7b6d269f86cf1508fd1089fad78a91955a811395c3712d0bd6317ec5a7d016525c3ff7bc3824ef146593503f2f4ad9786724b784e" name="cosign-fish-completion" arch="noarch">
  <version epoch="0" ver="3.0.6" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- update to 3.0.6 (bsc#1261859, CVE-2026-39395):
  * Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (#4801)
  * Handle whitespace-only certificate annotation (#4760)
  * fix(sign): closing SignerVerifier too early when signing with
    a security key (#4761)
  * Disallow --new-bundle-format and --rfc3161-timestamp (#4762)
  * support managed keys in conformance testing (#4728)
  * Add support for GCE metadata server env var (#4732)
  * fix: preserve per-layer annotations in
    WriteAttestationsReferrer (#4709)
  * Fix parsing of in-toto for string predicates
  * Mark batch of flags for deprecation (#4698)
  * disallow key and cert identity being used together
    during verification (#4636)
  * support key creation in GitLab group (#4704)</changelog>
</package>
<package pkgid="f1c84b39c615b0c16850bc409b6b1afb7d220e27d712cdc27fbf5f4caab626a3eb84bd893276218002291dc285f1af83f08135d1dd0b4febfc9d7e27b387a687" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="160000.1.2"/>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="aab63928d5a09a640625c789ef7f1b6bf6172bc86855c72d81a7bc811260f5d1a33525d57586634445d610642078ad7f159055bceb53aa261c3f4c8453a850fd" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5:
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="307fd761bd91234d4146b163fcf64fc5cfc49c82f2a2a0e62c7e48032dffe2d64c8512c5351728acc48aeab4ed24f3f21c8289184cd23dbc7d0b319925412479" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="3.0.6" rel="160000.1.1"/>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- update to 3.0.6 (bsc#1261859, CVE-2026-39395):
  * Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (#4801)
  * Handle whitespace-only certificate annotation (#4760)
  * fix(sign): closing SignerVerifier too early when signing with
    a security key (#4761)
  * Disallow --new-bundle-format and --rfc3161-timestamp (#4762)
  * support managed keys in conformance testing (#4728)
  * Add support for GCE metadata server env var (#4732)
  * fix: preserve per-layer annotations in
    WriteAttestationsReferrer (#4709)
  * Fix parsing of in-toto for string predicates
  * Mark batch of flags for deprecation (#4698)
  * disallow key and cert identity being used together
    during verification (#4636)
  * support key creation in GitLab group (#4704)</changelog>
</package>
<package pkgid="bc67e3320fae94a7b73c8656cec3ca82ac58900255fae6a7488d8668c621620321423c01fe2fbe8fdf539a36be10830f0d977fe16ae65e8fc600283fdebe59a2" name="coturn" arch="x86_64">
  <version epoch="0" ver="4.14.0" rel="bp160.1.1"/>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1718452800">- Don't hard require systemd -- not needed in containers</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1747051200">- Upgrade to coturn 4.6.3
  * Release highlights:
  - Multiple memory fixes
  - New drain feature
  - Better support for new versions of Redis
  - Add support for raw public keys
  * Complete change list
  - Add clang-tidy, include-what-you-use, and msvc-analyzer github actions
  - Add CodeQL workflow
  - added missing function prototype of turn_random_number()
  - Added sessionID to some log lines
  - added support for amazon linux and renamed tests.yml
  - added warnings for prometheus apt unavailability
  - Add github action that runs tests with compiler sanitizers
  - Additional refactoring of ns_turn_allocation.* to address security
    scanner concerns
  - Add MariaDB support to README.md
  - Add new Drain feature
  - Add prometheus setting suggestions on turn.conf in example folder
  - Address clang-tidy warnings in db files
  - Address some build issues introduced by api changes
  - Add support for raw public keys
  - Add the InsertBraces command for clang-format to ensure that all
    conditionals always have braces
  - Add warning and disable web admin if no-tls option used
  - Adjust wording in cmake message when prometheous cannot be found.
  - Allow authenticating with a username to redis
  - Always run lint, regardless of branch
  - Avoid nullptr dereference of server variable in various functions
  - avoid potential nullptr derefernence in udp_create_server_socket
  - Avoid read-past-end of string in get_bold_admin_title
  - Avoid writing potentially uninitialized data to aes_128 key file
  - changed variables in stunclient.c to bool
  - Change minimal required cmake version to 3.16
  - Change printf() to TURN_LOG_FUNC() for --no-stdout-log
  - Change the various map functions to return bool instead of
    inconsistantly return 0, 1, or -1
  - Check allocation results in add_static_user_account
  - Check the result of calloc in handle_logon_request
  - Check the result of malloc in del_alt_server
  - Check the result of malloc in mongo_set_realm_option_one
  - Check the result of malloc in send_message_to_redis
  - Check the result of malloc in string_list_add
  - Check the result of realloc and calloc in ch_map_get
  - CMake: Declare the variable nearby
  - configure: data files shouldn't be executable
  - defined a magic number for stun fingerprinting
  - Delete dead code
  - Delete unused variable
  - Doc: add flowchart
  - Easy installation of coturn on AWS
  - Fix buffer overflow in generate_enc_password with increase rsalt by 2
  - Fix build with libressl 3.6+
  - Fix clang-format lint warnings
  - Fix cli auth
  - Fix Cmake find issue in libevent
  - Fix cmake find prometheus(fix #1304)
  - Fix compiler warnings from continuous integration
  - Fix const during free warning in rfc5769check app
  - Fix error of make command in Cygwin environment
  - Fix formatting to fix lint error
  - Fix lint complaint about comment
  - Fix lint errors
  - Fix linting error in mainrelay.c
  - Fix make lint
  - Fix memcpy len checks stun_is_challenge_response_str
  - Fix memleak in pgsql_reread_realms
  - Fix memory leak in netengine.c
  - Fix memory leak in rfc5769check.c
  - Fix memory leak on http_server.c
  - Fix mingw build
  - Fix missing strncpy in fix_stun_check_message_integrity_str
  - Fix msvc analyzer error on goto label on rfc5769check
  - Fix nodejs/glibc problem with old container images.
  - Fix no-tls warning typo
  - Fix potential null passed to function expecting nonnull
  - Fix recursive call in delete alternate server
  - Fix return correct error code for `create_relay_connection` in case
    of `RESERVATION-TOKEN` failure
  - Fix rpm version scripts
  - Fix run cmake.yml in any github action
  - Fix typos
  - Fix ubuntu 16 build with GH action checkout version to v3
  - Implement custom prometheus http handler
  - Include what you use
  - Install openssl-1.1.1 on amazonlinux:2 instead of openssl-1.0.1
  - malloc now allocates space for string terminator
  - Memset user_db before reading conf file, not after
  - Missing session ID in coturn logs for denied IP - 1330
  - Move the hiredis_libevent2 code from common to relay
  - Only set MHD_USE_DUAL_STACK if IPv6 is available
  - Print version only, no extra lines
  - Reduce ifdefs in code: TURN_NO_PROMETHEUS
  - Refactor: peer_input_handle
  - Reformat code
  - Remove unimplemented test folder reference from CMakeLists.txt
  - Replace HeapAlloc with malloc
  - Replace srand/rand with srandom/random
  - Return a 400 response to HTTP requests
  - Run all of the CI except for Docker builds on any change
  - Simplify macOS detection macros
  - Simplify workflow for codeql
  - strncpy doesn't return size_t
  - ubuntu build dependencies extracted to composite actions
  - Update FlowChart
  - Update libtelnet
  - Update lukka/run
  - Update SQLite.md
  - Update turnserver.conf Example about listening-ip
  - Update turnserver.spec
  - Update version in vcpkg.json
  - Use active CPU number instead of total number
  - Use bool, instead of int, for the functions in ns_turn_msg.c
  - Use bool over int for the turnutils_uclient program
  - Use calloc where appropriate, avoid memset when normal buffer
    initialization works
  - Windows: Only attempt to bind when the network interface is up
  - workflow tidying
- Rebased coturn-turnserver_conf.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1763899200">- Update to version 4.7.0
  * Breaking changes in order to get to sane defaults for improved
    security by default
    + Support for openssl 1.1.1 and 3.x only.
    + Cleanup deprecated options - if your scripts have them
    turnserver will fail to start.
    + Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic - now
    need to explicitly enable it.
    + Deprecate response-origin-only-with-rfc5780.
    + Invert no-stun-backward-compatibility to be default on.
  * TLSv1 and TLSv1_1 are now optional (no need to turn them off).
  * Minor bug fixes and regressions.
  * Improved support for modern version of prometheus.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1773403200">Fixes for CVE-2026-27624 (boo#1258847) and CVE-2025-69217 (boo##1255744)
- Update to version 4.9.0
  * Multiple security fixes.
  * Fix to Web Admin password check.
  * Cleanup of deprecated openssl APIs.
  * Fix for CVE-2026-27624: bypass localhost and IP range block
    using IPv4-mapped IPv6. boo#1258847
- Update to version 4.8.0
  * Faster packet validation on listener threads to improve
    handling of DDoS attacks.
  * Make socket buffer size configurable with sock-buf-size.
  * Address memory leaks and potential crashes.
  * Improve random number usage to address CVE-2025-69217.
    boo#1255744</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1776168000">- Update to version 4.10.0
  * Skip response buffer allocation for STUN indications.
  * WebRTC Auth optimization path (#1860).
  * Fix null pointer dereferences in post_parse() (#1859).
  * Extend seed corpus (#1858).
  * Add Linux-only `recvmmsg` receive path for DTLS/UDP listener.
  * Fix Linux build warnings (#1853).
  * perf: remove mutex from per-thread super_memory allocator.
  * Keep only NEV_UDP_SOCKET_PER_THREAD network engine.
  * Fix stack buffer overflow in OAuth token decoding.
  * Update config and Readme files about deprecated TLSv1/1.1.
  * perf: eliminate mutex and reduce copies on auth message
    dispatch (#1843).
  * perf: replace mutex_bps with lock-free atomics for bandwidth
    tracking.
  * Fix uint16_t truncation overflow in stun_get_message_len_str()
    causes (#1844).
  * fix: restore RFC 3489 (old STUN) backward compatibility broken
    since 4.7.0 (#1839).
  * Change port identifiers to use uint16_t (#1752).
  * Fixes: run_tests.sh and no db (#1834).
  * Add session usage reporting callback to TURN database driver.
  * Initialize variables before use (#1832).
  * Replace perror with logging (#1831).
  * CLI interface is disabled by default.
  * Disable reason string in response messages to reduce
    amplification factor.
  * Perf: improve worst case scenario optimization.
  * Fix compilation warnings (#1822).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1777982400">- Update to version 4.11.0
  * Filc harness and pointer typedefs (#1896).
  * Load generator mode in turnutils_uclient (#1894).
  * Cache hot lookups in TURN data-path handlers (#1893).
  * Inline get_ioa_addr_len() in the header (#1891).
  * Trim two redundant checks from per-packet relay hot path.
  * Hoist turn_server_get_engine() out of per-packet hot path.
  * Add fuzz coverage for integrity helpers (#1888).
  * Add deterministic challenge-response builder to FuzzStun.
  * Seed address-mapping table in fuzz initializer (#1885).
  * Unblock fuzz coverage for is_http and rare STUN attributes.
  * HTTP parsing fixes (#1882).
  * Out of bound HTTP detection in parser (#1877).
  * Delete log line per relay thread on start (#1876).
  * Add Unity-based unit test scaffolding (#1875).
  * Drop udp_relay_servers_number config and clean up dead UDP
    id-space (#1874).
  * Fix build failure: define _GNU_SOURCE for recvmmsg() on Linux.
  * Pin session origin only after MESSAGE-INTEGRITY validates.
  * Abort on malformed allowed/denied-peer-ip at startup (#1872).
  * Fix format-string injection in Redis DB driver (#1870).
  * Use constant-time compare for STUN MESSAGE-INTEGRITY HMAC.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1779710400">- Update to version 4.12.0
  * Update khash to the latest version (#1919).
  * Update readme to match latest changes (#1920).
  * Update docs for drop-invalid-packets and
    response-origin-only-with-rfc5780.
  * Multiplexpeer (#1916).
  * Fix TTL/TOS type conversion (#1915).
  * turnutils_uclient: sender thread pool + UDP-GSO send batching +
    recv_pps reporting (#1913).
  * Fix memory leak introduced by recvmmsg path (#1912).
  * turnutils_uclient: multi-threaded listener (recv) pool.
  * examples/turnserver.conf: update description of cli option.
  * turnutils_uclient: Linux recvmmsg receive path + larger
    SO_RCVBUF (#1910).
  * Add UDP-GSO send path (--udp-gso) (#1907).
  * turnutils_peer: Linux fast path with drain loop,
    recvmmsg/sendmmsg, U… (#1908).
  * Relay recvmmsg (#1906).
  * fuzzing: use hex escapes for HTTP EOH dictionary entry.
  * Sync turnserver man page with current CLI options (#1903).
  * Remove stale --ne option from turnserver --help (#1904).
  * Restore CodeQL permissions, category, and manual build mode.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1781438400">- Update to version 4.13.0
  * Wrap atomic everywhere.
  * Fix sendmmsg stride bug in multiplex-peer UDP batch flush.
  * Reap TURN permissions/channels via a per-thread sweep instead
    of per-object timers.
  * Add --udp-sendmmsg-log to observe egress sendmmsg/UDP-GSO
    batching.
  * Expose recvmmsg/sendmmsg UDP batch sizes as Prometheus metrics
  * Restrict recvmmsg fast path to shared fan-in sockets
    (make --udp-recvmmsg useful standalone).
  * Enable --udp-recvmmsg by default on Linux.
  * Security hardening: port parsing, admin brute-force throttle,
    credential log redaction, constant-time compare, OAuth bounds
    checks, permission cap (#1932).
  * Add continuous latency mode to stunclient.
  * Fix test_redis_format link failure.
  * Fix configure MANPREFIX typo.
  * Fix missing sqlite3 dependendcy.
  * Fix UDP receive buffer ownership.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1781524800">- Update to version 4.13.1
  * null-terminate server_name in stun_is_challenge_response_str.
  * Canonicalize all IPv4-in-IPv6 encodings before peer-IP checks.
  * Auto-deny coturn's own database backend endpoints as relay
    peers.
  * Deny link-local / ULA / site-local relay peers by default.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1782129600">- Update to version 4.14.0
  New
  * No more dependency on prometheus-client-c
  * HTTPS support for prometheus client (optional)
  * TLS support for redis - now compatible with managed redis
    (optional).
  * Rate limiting "401 Unauthorized" responses - reduces
    reflection attacks off the coturn server. This is an
    experimental feature - not fully tested on production scale
    deployment and massive DDoS attacks. New prometheus counters
    should help shed some light on real life behavior and
    performance. The feature is off by default.
  What's Changed
  * validate hmackey length in sqlite_get_user_key before hex
    decode.
  * Add out-of-tree patch to restore deprecated OpenSSL 1.1.1.
  * Add optional TLS transport for Redis connections.
  * Fix relay threads override.
  * Flush prometheus hot-path counters once per second to kill
    lock contention.
  * fix signed-char index out-of-bounds read in base64_decode.
  * Build Prometheus exporter from vendored local sources.
  * Prom https.
  * Fix realm quota data race and warnings.
  * Add per-source rate-limiting of UDP 401 Unauthorized responses</changelog>
</package>
<package pkgid="6d0f49ab2230c3483b9d87a64f5baaa29ab8d7ee4f835f57dc8c2b5ca3bf767c98942006761c838a272c29cd77c32fc10d9216aee9451e98285f35f181e542e4" name="coturn" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="bp160.1.14"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1670155200">- Version 4.6.1
  - Fix memory corruption on socket close (#1113)
- Version 4.6.0
  - merge PR #967 (eakraly)
  * fix small issues reported by cppcheck
  - merge PR #974 (eakraly)
  * fix long log line printing
  - merge PR #973 (eakraly)
  * Print turnserver version with --version
  - merge PR #972 (eakraly)
  * do not write outside of a buffer in admin interface
  - merge PR #970 (eakraly)
  * fix uclient certificate loading bug
  - merge PR #971 (eakraly)
  * fix duplicate TCP flag in run_tests.sh script
  - merge PR #962 (huhaipeng)
  * fix turn session leak
  - merge PR #963 (eakraly)
  * Document dependency of new-log-timestamp-format on new-log-timestamp
  - merge PR #951 (steffen-moser)
  * Enable compilation of coturn on Solaris 11.4
  - merge PR #949 (eakraly)
  * First step to re-enable compilation with OpenSSL 1.0.x
  - merge PR #949 (eakraly)
  * Fix cmake build on macOS
  - merge PR #942 (eakraly)
  * Disable SSL renegotiation
  - merge PR #792 (yfaker)
  * Fix user quota release #786
  - merge PR #829 (fancycode)
  * add more info to redis allocation status
  - merge PR #938 (eakraly)
  * update turnserver.conf comment
  - merge PR #773 (haseebq)
  * fix performance regression
  - merge PR #773 (korayvt)
  * add syslog facility config
  - merge PR #897 (unicode-it)
  * add support for dual-stack prom listener
  - merge PR #984 (rozhuk-im)
  * fix build with libressl 3.4.0+
  - merge PR #926 (ggarber)
  * add ci tests workflow
  - merge PR #934 (neocat)
  * show error on invalid config
  - merge PR #787 (dsmeytis)
  * add new prom allocations metric
  - merge PR #869 (micmac1)
  * don't link in libintl
  - merge PR #895 (alexnedo)
  * fix access to freed memory
  - merge PR #919 (sysvinit)
  * configurable prom username labels
  - merge PR #840 (sysvinit)
  * configurable prometheus listener port
  - merge PR #870 (micmac1)
  * fix build mariadb connector
  - merge PR #851 (freedomben)
  * fix README typo
  - merge PR #877 (davel)
  * correct doc typo
  - merge PR #755(moznuy) and #825(by argggh)
  * fix sqlite3_shutdown and sqlite3_config race
  - merge PR #826 (by giavac)
  * prom server better
  - merge PR #684 (by brevilo)
  * Define OPENSSL_VERSION_1_1_1 on systems where it doesn't (yet) exist
  * Regression in 4.5.2 that cause issues in openssl version &lt; 1.1.1.
  - typo fix in prometheus (by fcecagno)
  - merge PR #687 (by Wuelber Castillo)
  * Add hash algorithm for hmackey value to redis userdb schema docs
  - replace keep-address-family with allocation-default-address-family (keep-address-family deprecated and will be removed!!)
  - merge PR #703 (by j4zzc4t)
  * Restore no_stdout_log behavior
  - merge PR #727 (by JoKoT3)
  * Support older mysql client version in configure
  - merge PR #721 (by KangLin)
  * Add to support cmake
  - merge PR #717 (by marcoschum)
  * Fix typo in turnserver.conf
  - merge PR #704 (by hills)
  * Packaging scripts can miss out on these errors (exit code)
  - merge PR #679 (by rubo77)
  * Readme.turnserver: how to run server as a daemon
  - merge PR #739 (by hills)
  * SSL reload has hidden bugs which cause crashes
  - Fix regression in PR #739
  - Try to mitigate STUN amplification attatck
  * Add new option --no-rfc5780 to force disable RFC8750
  * Add new option --no-stun-backward-compatibility
    Disable handling old STUN Binding requests and disable
    MAPPED-ADDRESS attribute in binding response (use only the
    XOR-MAPPED-ADDRESS)
  * Add new option --response-origin-only-with-rfc5780
    Add RESPONSE_ORIGIN attribute only if rfc5780 is enabled
  * Don't send SOFTWARE attribute if --no-software-attribute set on (BREAKING CHANGE)
  - merge PR #767 (by ggalperi)
  * fix for log_binding (regression)</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1678104000">- Add coturn-no-FIPS-140-mode.patch, fixes build against OpenSSL 3.0</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1683028800">- Update to 4.6.2
  * Make sure microhttpd starts using epoll if supported
  * Add sessioncount to prometheus metrics
  * Add STUN request/response/error prometheus counters
  * Cleanup logs on turnserver start
  * Fix duplicate stdout log output
  * Log threadId to logs to aid in multi-threaded debugging
  * Optional build info compiled into turnserver binary
  * Fix arguments expansion in docker-entrypoint.sh
  * Santise database connection strings before printing to log
  * Support Windows MSVC
  * Add configuration option for TLS 1.3 ciphersuites
  * Improve openssl3 and FIPS support
  * Use single SSL_CTX for TLS and DTLS support
  * Update openssl API use to non-deprecated version
  * Set string bytes to null to prevent random origin
  * Fix memory corruption on socket close
  * Fix packet backlog fifo that processed packets in reverse
    order in some scenarios
  * Fix off-by-one when terminating gcm_nonce
  * Fixes to Redis memleaks and socketleaks
  * Fix malformed response to mobility refresh request
  * Fuzzing support
  * Ignore raw UDP if no_udp is enabled
  * Better detect availability of SCTP protocol
- Drop coturn-no-FIPS-140-mode.patch, fixed upstream, see
  https://github.com/coturn/coturn/issues/1170</changelog>
  <changelog author="chris@computersalat.de" date="1696852800">- add coturn-turnserver_conf.patch
  * to have a meaningful turnserver.conf.default
- create a ready-to-run turnserver.conf
- fix logrotate script
- Update README.SUSE for Let's Encrypt Certificates
- move certs to /etc/coturn/tls
- Update apparmor profile
- rework sysusers.d config file</changelog>
  <changelog author="chris@computersalat.de" date="1697198400">- Update coturn-turnserver_conf.patch
  * Fix comment for listening-ip
- enable 'verbose' log to see listening IPs and more, not just
  server start/stop</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1718452800">- Don't hard require systemd -- not needed in containers</changelog>
</package>
<package pkgid="8256df4254d3e3e7543fe914c244f97143351fe291e690fda5513f1ea5de152c1048978d4f309b1074a9e20c050a2fbf83c9278fc27d5f7aebc1b75c19f3f83b" name="coturn-devel" arch="x86_64">
  <version epoch="0" ver="4.14.0" rel="bp160.1.1"/>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1718452800">- Don't hard require systemd -- not needed in containers</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1747051200">- Upgrade to coturn 4.6.3
  * Release highlights:
  - Multiple memory fixes
  - New drain feature
  - Better support for new versions of Redis
  - Add support for raw public keys
  * Complete change list
  - Add clang-tidy, include-what-you-use, and msvc-analyzer github actions
  - Add CodeQL workflow
  - added missing function prototype of turn_random_number()
  - Added sessionID to some log lines
  - added support for amazon linux and renamed tests.yml
  - added warnings for prometheus apt unavailability
  - Add github action that runs tests with compiler sanitizers
  - Additional refactoring of ns_turn_allocation.* to address security
    scanner concerns
  - Add MariaDB support to README.md
  - Add new Drain feature
  - Add prometheus setting suggestions on turn.conf in example folder
  - Address clang-tidy warnings in db files
  - Address some build issues introduced by api changes
  - Add support for raw public keys
  - Add the InsertBraces command for clang-format to ensure that all
    conditionals always have braces
  - Add warning and disable web admin if no-tls option used
  - Adjust wording in cmake message when prometheous cannot be found.
  - Allow authenticating with a username to redis
  - Always run lint, regardless of branch
  - Avoid nullptr dereference of server variable in various functions
  - avoid potential nullptr derefernence in udp_create_server_socket
  - Avoid read-past-end of string in get_bold_admin_title
  - Avoid writing potentially uninitialized data to aes_128 key file
  - changed variables in stunclient.c to bool
  - Change minimal required cmake version to 3.16
  - Change printf() to TURN_LOG_FUNC() for --no-stdout-log
  - Change the various map functions to return bool instead of
    inconsistantly return 0, 1, or -1
  - Check allocation results in add_static_user_account
  - Check the result of calloc in handle_logon_request
  - Check the result of malloc in del_alt_server
  - Check the result of malloc in mongo_set_realm_option_one
  - Check the result of malloc in send_message_to_redis
  - Check the result of malloc in string_list_add
  - Check the result of realloc and calloc in ch_map_get
  - CMake: Declare the variable nearby
  - configure: data files shouldn't be executable
  - defined a magic number for stun fingerprinting
  - Delete dead code
  - Delete unused variable
  - Doc: add flowchart
  - Easy installation of coturn on AWS
  - Fix buffer overflow in generate_enc_password with increase rsalt by 2
  - Fix build with libressl 3.6+
  - Fix clang-format lint warnings
  - Fix cli auth
  - Fix Cmake find issue in libevent
  - Fix cmake find prometheus(fix #1304)
  - Fix compiler warnings from continuous integration
  - Fix const during free warning in rfc5769check app
  - Fix error of make command in Cygwin environment
  - Fix formatting to fix lint error
  - Fix lint complaint about comment
  - Fix lint errors
  - Fix linting error in mainrelay.c
  - Fix make lint
  - Fix memcpy len checks stun_is_challenge_response_str
  - Fix memleak in pgsql_reread_realms
  - Fix memory leak in netengine.c
  - Fix memory leak in rfc5769check.c
  - Fix memory leak on http_server.c
  - Fix mingw build
  - Fix missing strncpy in fix_stun_check_message_integrity_str
  - Fix msvc analyzer error on goto label on rfc5769check
  - Fix nodejs/glibc problem with old container images.
  - Fix no-tls warning typo
  - Fix potential null passed to function expecting nonnull
  - Fix recursive call in delete alternate server
  - Fix return correct error code for `create_relay_connection` in case
    of `RESERVATION-TOKEN` failure
  - Fix rpm version scripts
  - Fix run cmake.yml in any github action
  - Fix typos
  - Fix ubuntu 16 build with GH action checkout version to v3
  - Implement custom prometheus http handler
  - Include what you use
  - Install openssl-1.1.1 on amazonlinux:2 instead of openssl-1.0.1
  - malloc now allocates space for string terminator
  - Memset user_db before reading conf file, not after
  - Missing session ID in coturn logs for denied IP - 1330
  - Move the hiredis_libevent2 code from common to relay
  - Only set MHD_USE_DUAL_STACK if IPv6 is available
  - Print version only, no extra lines
  - Reduce ifdefs in code: TURN_NO_PROMETHEUS
  - Refactor: peer_input_handle
  - Reformat code
  - Remove unimplemented test folder reference from CMakeLists.txt
  - Replace HeapAlloc with malloc
  - Replace srand/rand with srandom/random
  - Return a 400 response to HTTP requests
  - Run all of the CI except for Docker builds on any change
  - Simplify macOS detection macros
  - Simplify workflow for codeql
  - strncpy doesn't return size_t
  - ubuntu build dependencies extracted to composite actions
  - Update FlowChart
  - Update libtelnet
  - Update lukka/run
  - Update SQLite.md
  - Update turnserver.conf Example about listening-ip
  - Update turnserver.spec
  - Update version in vcpkg.json
  - Use active CPU number instead of total number
  - Use bool, instead of int, for the functions in ns_turn_msg.c
  - Use bool over int for the turnutils_uclient program
  - Use calloc where appropriate, avoid memset when normal buffer
    initialization works
  - Windows: Only attempt to bind when the network interface is up
  - workflow tidying
- Rebased coturn-turnserver_conf.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1763899200">- Update to version 4.7.0
  * Breaking changes in order to get to sane defaults for improved
    security by default
    + Support for openssl 1.1.1 and 3.x only.
    + Cleanup deprecated options - if your scripts have them
    turnserver will fail to start.
    + Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic - now
    need to explicitly enable it.
    + Deprecate response-origin-only-with-rfc5780.
    + Invert no-stun-backward-compatibility to be default on.
  * TLSv1 and TLSv1_1 are now optional (no need to turn them off).
  * Minor bug fixes and regressions.
  * Improved support for modern version of prometheus.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1773403200">Fixes for CVE-2026-27624 (boo#1258847) and CVE-2025-69217 (boo##1255744)
- Update to version 4.9.0
  * Multiple security fixes.
  * Fix to Web Admin password check.
  * Cleanup of deprecated openssl APIs.
  * Fix for CVE-2026-27624: bypass localhost and IP range block
    using IPv4-mapped IPv6. boo#1258847
- Update to version 4.8.0
  * Faster packet validation on listener threads to improve
    handling of DDoS attacks.
  * Make socket buffer size configurable with sock-buf-size.
  * Address memory leaks and potential crashes.
  * Improve random number usage to address CVE-2025-69217.
    boo#1255744</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1776168000">- Update to version 4.10.0
  * Skip response buffer allocation for STUN indications.
  * WebRTC Auth optimization path (#1860).
  * Fix null pointer dereferences in post_parse() (#1859).
  * Extend seed corpus (#1858).
  * Add Linux-only `recvmmsg` receive path for DTLS/UDP listener.
  * Fix Linux build warnings (#1853).
  * perf: remove mutex from per-thread super_memory allocator.
  * Keep only NEV_UDP_SOCKET_PER_THREAD network engine.
  * Fix stack buffer overflow in OAuth token decoding.
  * Update config and Readme files about deprecated TLSv1/1.1.
  * perf: eliminate mutex and reduce copies on auth message
    dispatch (#1843).
  * perf: replace mutex_bps with lock-free atomics for bandwidth
    tracking.
  * Fix uint16_t truncation overflow in stun_get_message_len_str()
    causes (#1844).
  * fix: restore RFC 3489 (old STUN) backward compatibility broken
    since 4.7.0 (#1839).
  * Change port identifiers to use uint16_t (#1752).
  * Fixes: run_tests.sh and no db (#1834).
  * Add session usage reporting callback to TURN database driver.
  * Initialize variables before use (#1832).
  * Replace perror with logging (#1831).
  * CLI interface is disabled by default.
  * Disable reason string in response messages to reduce
    amplification factor.
  * Perf: improve worst case scenario optimization.
  * Fix compilation warnings (#1822).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1777982400">- Update to version 4.11.0
  * Filc harness and pointer typedefs (#1896).
  * Load generator mode in turnutils_uclient (#1894).
  * Cache hot lookups in TURN data-path handlers (#1893).
  * Inline get_ioa_addr_len() in the header (#1891).
  * Trim two redundant checks from per-packet relay hot path.
  * Hoist turn_server_get_engine() out of per-packet hot path.
  * Add fuzz coverage for integrity helpers (#1888).
  * Add deterministic challenge-response builder to FuzzStun.
  * Seed address-mapping table in fuzz initializer (#1885).
  * Unblock fuzz coverage for is_http and rare STUN attributes.
  * HTTP parsing fixes (#1882).
  * Out of bound HTTP detection in parser (#1877).
  * Delete log line per relay thread on start (#1876).
  * Add Unity-based unit test scaffolding (#1875).
  * Drop udp_relay_servers_number config and clean up dead UDP
    id-space (#1874).
  * Fix build failure: define _GNU_SOURCE for recvmmsg() on Linux.
  * Pin session origin only after MESSAGE-INTEGRITY validates.
  * Abort on malformed allowed/denied-peer-ip at startup (#1872).
  * Fix format-string injection in Redis DB driver (#1870).
  * Use constant-time compare for STUN MESSAGE-INTEGRITY HMAC.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1779710400">- Update to version 4.12.0
  * Update khash to the latest version (#1919).
  * Update readme to match latest changes (#1920).
  * Update docs for drop-invalid-packets and
    response-origin-only-with-rfc5780.
  * Multiplexpeer (#1916).
  * Fix TTL/TOS type conversion (#1915).
  * turnutils_uclient: sender thread pool + UDP-GSO send batching +
    recv_pps reporting (#1913).
  * Fix memory leak introduced by recvmmsg path (#1912).
  * turnutils_uclient: multi-threaded listener (recv) pool.
  * examples/turnserver.conf: update description of cli option.
  * turnutils_uclient: Linux recvmmsg receive path + larger
    SO_RCVBUF (#1910).
  * Add UDP-GSO send path (--udp-gso) (#1907).
  * turnutils_peer: Linux fast path with drain loop,
    recvmmsg/sendmmsg, U… (#1908).
  * Relay recvmmsg (#1906).
  * fuzzing: use hex escapes for HTTP EOH dictionary entry.
  * Sync turnserver man page with current CLI options (#1903).
  * Remove stale --ne option from turnserver --help (#1904).
  * Restore CodeQL permissions, category, and manual build mode.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1781438400">- Update to version 4.13.0
  * Wrap atomic everywhere.
  * Fix sendmmsg stride bug in multiplex-peer UDP batch flush.
  * Reap TURN permissions/channels via a per-thread sweep instead
    of per-object timers.
  * Add --udp-sendmmsg-log to observe egress sendmmsg/UDP-GSO
    batching.
  * Expose recvmmsg/sendmmsg UDP batch sizes as Prometheus metrics
  * Restrict recvmmsg fast path to shared fan-in sockets
    (make --udp-recvmmsg useful standalone).
  * Enable --udp-recvmmsg by default on Linux.
  * Security hardening: port parsing, admin brute-force throttle,
    credential log redaction, constant-time compare, OAuth bounds
    checks, permission cap (#1932).
  * Add continuous latency mode to stunclient.
  * Fix test_redis_format link failure.
  * Fix configure MANPREFIX typo.
  * Fix missing sqlite3 dependendcy.
  * Fix UDP receive buffer ownership.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1781524800">- Update to version 4.13.1
  * null-terminate server_name in stun_is_challenge_response_str.
  * Canonicalize all IPv4-in-IPv6 encodings before peer-IP checks.
  * Auto-deny coturn's own database backend endpoints as relay
    peers.
  * Deny link-local / ULA / site-local relay peers by default.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1782129600">- Update to version 4.14.0
  New
  * No more dependency on prometheus-client-c
  * HTTPS support for prometheus client (optional)
  * TLS support for redis - now compatible with managed redis
    (optional).
  * Rate limiting "401 Unauthorized" responses - reduces
    reflection attacks off the coturn server. This is an
    experimental feature - not fully tested on production scale
    deployment and massive DDoS attacks. New prometheus counters
    should help shed some light on real life behavior and
    performance. The feature is off by default.
  What's Changed
  * validate hmackey length in sqlite_get_user_key before hex
    decode.
  * Add out-of-tree patch to restore deprecated OpenSSL 1.1.1.
  * Add optional TLS transport for Redis connections.
  * Fix relay threads override.
  * Flush prometheus hot-path counters once per second to kill
    lock contention.
  * fix signed-char index out-of-bounds read in base64_decode.
  * Build Prometheus exporter from vendored local sources.
  * Prom https.
  * Fix realm quota data race and warnings.
  * Add per-source rate-limiting of UDP 401 Unauthorized responses</changelog>
</package>
<package pkgid="d0fc086ad5a7ec86be1ff0d22190c9385df13a94dc7c414c1120006aaa193de3c28afa000dcea40fe205446020332c2bc47bb30968bc00204746da360da7e6ea" name="coturn-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="bp160.1.14"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1670155200">- Version 4.6.1
  - Fix memory corruption on socket close (#1113)
- Version 4.6.0
  - merge PR #967 (eakraly)
  * fix small issues reported by cppcheck
  - merge PR #974 (eakraly)
  * fix long log line printing
  - merge PR #973 (eakraly)
  * Print turnserver version with --version
  - merge PR #972 (eakraly)
  * do not write outside of a buffer in admin interface
  - merge PR #970 (eakraly)
  * fix uclient certificate loading bug
  - merge PR #971 (eakraly)
  * fix duplicate TCP flag in run_tests.sh script
  - merge PR #962 (huhaipeng)
  * fix turn session leak
  - merge PR #963 (eakraly)
  * Document dependency of new-log-timestamp-format on new-log-timestamp
  - merge PR #951 (steffen-moser)
  * Enable compilation of coturn on Solaris 11.4
  - merge PR #949 (eakraly)
  * First step to re-enable compilation with OpenSSL 1.0.x
  - merge PR #949 (eakraly)
  * Fix cmake build on macOS
  - merge PR #942 (eakraly)
  * Disable SSL renegotiation
  - merge PR #792 (yfaker)
  * Fix user quota release #786
  - merge PR #829 (fancycode)
  * add more info to redis allocation status
  - merge PR #938 (eakraly)
  * update turnserver.conf comment
  - merge PR #773 (haseebq)
  * fix performance regression
  - merge PR #773 (korayvt)
  * add syslog facility config
  - merge PR #897 (unicode-it)
  * add support for dual-stack prom listener
  - merge PR #984 (rozhuk-im)
  * fix build with libressl 3.4.0+
  - merge PR #926 (ggarber)
  * add ci tests workflow
  - merge PR #934 (neocat)
  * show error on invalid config
  - merge PR #787 (dsmeytis)
  * add new prom allocations metric
  - merge PR #869 (micmac1)
  * don't link in libintl
  - merge PR #895 (alexnedo)
  * fix access to freed memory
  - merge PR #919 (sysvinit)
  * configurable prom username labels
  - merge PR #840 (sysvinit)
  * configurable prometheus listener port
  - merge PR #870 (micmac1)
  * fix build mariadb connector
  - merge PR #851 (freedomben)
  * fix README typo
  - merge PR #877 (davel)
  * correct doc typo
  - merge PR #755(moznuy) and #825(by argggh)
  * fix sqlite3_shutdown and sqlite3_config race
  - merge PR #826 (by giavac)
  * prom server better
  - merge PR #684 (by brevilo)
  * Define OPENSSL_VERSION_1_1_1 on systems where it doesn't (yet) exist
  * Regression in 4.5.2 that cause issues in openssl version &lt; 1.1.1.
  - typo fix in prometheus (by fcecagno)
  - merge PR #687 (by Wuelber Castillo)
  * Add hash algorithm for hmackey value to redis userdb schema docs
  - replace keep-address-family with allocation-default-address-family (keep-address-family deprecated and will be removed!!)
  - merge PR #703 (by j4zzc4t)
  * Restore no_stdout_log behavior
  - merge PR #727 (by JoKoT3)
  * Support older mysql client version in configure
  - merge PR #721 (by KangLin)
  * Add to support cmake
  - merge PR #717 (by marcoschum)
  * Fix typo in turnserver.conf
  - merge PR #704 (by hills)
  * Packaging scripts can miss out on these errors (exit code)
  - merge PR #679 (by rubo77)
  * Readme.turnserver: how to run server as a daemon
  - merge PR #739 (by hills)
  * SSL reload has hidden bugs which cause crashes
  - Fix regression in PR #739
  - Try to mitigate STUN amplification attatck
  * Add new option --no-rfc5780 to force disable RFC8750
  * Add new option --no-stun-backward-compatibility
    Disable handling old STUN Binding requests and disable
    MAPPED-ADDRESS attribute in binding response (use only the
    XOR-MAPPED-ADDRESS)
  * Add new option --response-origin-only-with-rfc5780
    Add RESPONSE_ORIGIN attribute only if rfc5780 is enabled
  * Don't send SOFTWARE attribute if --no-software-attribute set on (BREAKING CHANGE)
  - merge PR #767 (by ggalperi)
  * fix for log_binding (regression)</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1678104000">- Add coturn-no-FIPS-140-mode.patch, fixes build against OpenSSL 3.0</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1683028800">- Update to 4.6.2
  * Make sure microhttpd starts using epoll if supported
  * Add sessioncount to prometheus metrics
  * Add STUN request/response/error prometheus counters
  * Cleanup logs on turnserver start
  * Fix duplicate stdout log output
  * Log threadId to logs to aid in multi-threaded debugging
  * Optional build info compiled into turnserver binary
  * Fix arguments expansion in docker-entrypoint.sh
  * Santise database connection strings before printing to log
  * Support Windows MSVC
  * Add configuration option for TLS 1.3 ciphersuites
  * Improve openssl3 and FIPS support
  * Use single SSL_CTX for TLS and DTLS support
  * Update openssl API use to non-deprecated version
  * Set string bytes to null to prevent random origin
  * Fix memory corruption on socket close
  * Fix packet backlog fifo that processed packets in reverse
    order in some scenarios
  * Fix off-by-one when terminating gcm_nonce
  * Fixes to Redis memleaks and socketleaks
  * Fix malformed response to mobility refresh request
  * Fuzzing support
  * Ignore raw UDP if no_udp is enabled
  * Better detect availability of SCTP protocol
- Drop coturn-no-FIPS-140-mode.patch, fixed upstream, see
  https://github.com/coturn/coturn/issues/1170</changelog>
  <changelog author="chris@computersalat.de" date="1696852800">- add coturn-turnserver_conf.patch
  * to have a meaningful turnserver.conf.default
- create a ready-to-run turnserver.conf
- fix logrotate script
- Update README.SUSE for Let's Encrypt Certificates
- move certs to /etc/coturn/tls
- Update apparmor profile
- rework sysusers.d config file</changelog>
  <changelog author="chris@computersalat.de" date="1697198400">- Update coturn-turnserver_conf.patch
  * Fix comment for listening-ip
- enable 'verbose' log to see listening IPs and more, not just
  server start/stop</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1718452800">- Don't hard require systemd -- not needed in containers</changelog>
</package>
<package pkgid="aa44243deaec50676ac4b6de55402b1e4ccdc4873d2b5c8b88c69ba46bd7f1bede610584500ecd97849803aae6d122f32f7de108dc37f608a663b045daf6e5df" name="coturn-utils" arch="x86_64">
  <version epoch="0" ver="4.14.0" rel="bp160.1.1"/>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1718452800">- Don't hard require systemd -- not needed in containers</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1747051200">- Upgrade to coturn 4.6.3
  * Release highlights:
  - Multiple memory fixes
  - New drain feature
  - Better support for new versions of Redis
  - Add support for raw public keys
  * Complete change list
  - Add clang-tidy, include-what-you-use, and msvc-analyzer github actions
  - Add CodeQL workflow
  - added missing function prototype of turn_random_number()
  - Added sessionID to some log lines
  - added support for amazon linux and renamed tests.yml
  - added warnings for prometheus apt unavailability
  - Add github action that runs tests with compiler sanitizers
  - Additional refactoring of ns_turn_allocation.* to address security
    scanner concerns
  - Add MariaDB support to README.md
  - Add new Drain feature
  - Add prometheus setting suggestions on turn.conf in example folder
  - Address clang-tidy warnings in db files
  - Address some build issues introduced by api changes
  - Add support for raw public keys
  - Add the InsertBraces command for clang-format to ensure that all
    conditionals always have braces
  - Add warning and disable web admin if no-tls option used
  - Adjust wording in cmake message when prometheous cannot be found.
  - Allow authenticating with a username to redis
  - Always run lint, regardless of branch
  - Avoid nullptr dereference of server variable in various functions
  - avoid potential nullptr derefernence in udp_create_server_socket
  - Avoid read-past-end of string in get_bold_admin_title
  - Avoid writing potentially uninitialized data to aes_128 key file
  - changed variables in stunclient.c to bool
  - Change minimal required cmake version to 3.16
  - Change printf() to TURN_LOG_FUNC() for --no-stdout-log
  - Change the various map functions to return bool instead of
    inconsistantly return 0, 1, or -1
  - Check allocation results in add_static_user_account
  - Check the result of calloc in handle_logon_request
  - Check the result of malloc in del_alt_server
  - Check the result of malloc in mongo_set_realm_option_one
  - Check the result of malloc in send_message_to_redis
  - Check the result of malloc in string_list_add
  - Check the result of realloc and calloc in ch_map_get
  - CMake: Declare the variable nearby
  - configure: data files shouldn't be executable
  - defined a magic number for stun fingerprinting
  - Delete dead code
  - Delete unused variable
  - Doc: add flowchart
  - Easy installation of coturn on AWS
  - Fix buffer overflow in generate_enc_password with increase rsalt by 2
  - Fix build with libressl 3.6+
  - Fix clang-format lint warnings
  - Fix cli auth
  - Fix Cmake find issue in libevent
  - Fix cmake find prometheus(fix #1304)
  - Fix compiler warnings from continuous integration
  - Fix const during free warning in rfc5769check app
  - Fix error of make command in Cygwin environment
  - Fix formatting to fix lint error
  - Fix lint complaint about comment
  - Fix lint errors
  - Fix linting error in mainrelay.c
  - Fix make lint
  - Fix memcpy len checks stun_is_challenge_response_str
  - Fix memleak in pgsql_reread_realms
  - Fix memory leak in netengine.c
  - Fix memory leak in rfc5769check.c
  - Fix memory leak on http_server.c
  - Fix mingw build
  - Fix missing strncpy in fix_stun_check_message_integrity_str
  - Fix msvc analyzer error on goto label on rfc5769check
  - Fix nodejs/glibc problem with old container images.
  - Fix no-tls warning typo
  - Fix potential null passed to function expecting nonnull
  - Fix recursive call in delete alternate server
  - Fix return correct error code for `create_relay_connection` in case
    of `RESERVATION-TOKEN` failure
  - Fix rpm version scripts
  - Fix run cmake.yml in any github action
  - Fix typos
  - Fix ubuntu 16 build with GH action checkout version to v3
  - Implement custom prometheus http handler
  - Include what you use
  - Install openssl-1.1.1 on amazonlinux:2 instead of openssl-1.0.1
  - malloc now allocates space for string terminator
  - Memset user_db before reading conf file, not after
  - Missing session ID in coturn logs for denied IP - 1330
  - Move the hiredis_libevent2 code from common to relay
  - Only set MHD_USE_DUAL_STACK if IPv6 is available
  - Print version only, no extra lines
  - Reduce ifdefs in code: TURN_NO_PROMETHEUS
  - Refactor: peer_input_handle
  - Reformat code
  - Remove unimplemented test folder reference from CMakeLists.txt
  - Replace HeapAlloc with malloc
  - Replace srand/rand with srandom/random
  - Return a 400 response to HTTP requests
  - Run all of the CI except for Docker builds on any change
  - Simplify macOS detection macros
  - Simplify workflow for codeql
  - strncpy doesn't return size_t
  - ubuntu build dependencies extracted to composite actions
  - Update FlowChart
  - Update libtelnet
  - Update lukka/run
  - Update SQLite.md
  - Update turnserver.conf Example about listening-ip
  - Update turnserver.spec
  - Update version in vcpkg.json
  - Use active CPU number instead of total number
  - Use bool, instead of int, for the functions in ns_turn_msg.c
  - Use bool over int for the turnutils_uclient program
  - Use calloc where appropriate, avoid memset when normal buffer
    initialization works
  - Windows: Only attempt to bind when the network interface is up
  - workflow tidying
- Rebased coturn-turnserver_conf.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1763899200">- Update to version 4.7.0
  * Breaking changes in order to get to sane defaults for improved
    security by default
    + Support for openssl 1.1.1 and 3.x only.
    + Cleanup deprecated options - if your scripts have them
    turnserver will fail to start.
    + Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic - now
    need to explicitly enable it.
    + Deprecate response-origin-only-with-rfc5780.
    + Invert no-stun-backward-compatibility to be default on.
  * TLSv1 and TLSv1_1 are now optional (no need to turn them off).
  * Minor bug fixes and regressions.
  * Improved support for modern version of prometheus.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1773403200">Fixes for CVE-2026-27624 (boo#1258847) and CVE-2025-69217 (boo##1255744)
- Update to version 4.9.0
  * Multiple security fixes.
  * Fix to Web Admin password check.
  * Cleanup of deprecated openssl APIs.
  * Fix for CVE-2026-27624: bypass localhost and IP range block
    using IPv4-mapped IPv6. boo#1258847
- Update to version 4.8.0
  * Faster packet validation on listener threads to improve
    handling of DDoS attacks.
  * Make socket buffer size configurable with sock-buf-size.
  * Address memory leaks and potential crashes.
  * Improve random number usage to address CVE-2025-69217.
    boo#1255744</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1776168000">- Update to version 4.10.0
  * Skip response buffer allocation for STUN indications.
  * WebRTC Auth optimization path (#1860).
  * Fix null pointer dereferences in post_parse() (#1859).
  * Extend seed corpus (#1858).
  * Add Linux-only `recvmmsg` receive path for DTLS/UDP listener.
  * Fix Linux build warnings (#1853).
  * perf: remove mutex from per-thread super_memory allocator.
  * Keep only NEV_UDP_SOCKET_PER_THREAD network engine.
  * Fix stack buffer overflow in OAuth token decoding.
  * Update config and Readme files about deprecated TLSv1/1.1.
  * perf: eliminate mutex and reduce copies on auth message
    dispatch (#1843).
  * perf: replace mutex_bps with lock-free atomics for bandwidth
    tracking.
  * Fix uint16_t truncation overflow in stun_get_message_len_str()
    causes (#1844).
  * fix: restore RFC 3489 (old STUN) backward compatibility broken
    since 4.7.0 (#1839).
  * Change port identifiers to use uint16_t (#1752).
  * Fixes: run_tests.sh and no db (#1834).
  * Add session usage reporting callback to TURN database driver.
  * Initialize variables before use (#1832).
  * Replace perror with logging (#1831).
  * CLI interface is disabled by default.
  * Disable reason string in response messages to reduce
    amplification factor.
  * Perf: improve worst case scenario optimization.
  * Fix compilation warnings (#1822).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1777982400">- Update to version 4.11.0
  * Filc harness and pointer typedefs (#1896).
  * Load generator mode in turnutils_uclient (#1894).
  * Cache hot lookups in TURN data-path handlers (#1893).
  * Inline get_ioa_addr_len() in the header (#1891).
  * Trim two redundant checks from per-packet relay hot path.
  * Hoist turn_server_get_engine() out of per-packet hot path.
  * Add fuzz coverage for integrity helpers (#1888).
  * Add deterministic challenge-response builder to FuzzStun.
  * Seed address-mapping table in fuzz initializer (#1885).
  * Unblock fuzz coverage for is_http and rare STUN attributes.
  * HTTP parsing fixes (#1882).
  * Out of bound HTTP detection in parser (#1877).
  * Delete log line per relay thread on start (#1876).
  * Add Unity-based unit test scaffolding (#1875).
  * Drop udp_relay_servers_number config and clean up dead UDP
    id-space (#1874).
  * Fix build failure: define _GNU_SOURCE for recvmmsg() on Linux.
  * Pin session origin only after MESSAGE-INTEGRITY validates.
  * Abort on malformed allowed/denied-peer-ip at startup (#1872).
  * Fix format-string injection in Redis DB driver (#1870).
  * Use constant-time compare for STUN MESSAGE-INTEGRITY HMAC.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1779710400">- Update to version 4.12.0
  * Update khash to the latest version (#1919).
  * Update readme to match latest changes (#1920).
  * Update docs for drop-invalid-packets and
    response-origin-only-with-rfc5780.
  * Multiplexpeer (#1916).
  * Fix TTL/TOS type conversion (#1915).
  * turnutils_uclient: sender thread pool + UDP-GSO send batching +
    recv_pps reporting (#1913).
  * Fix memory leak introduced by recvmmsg path (#1912).
  * turnutils_uclient: multi-threaded listener (recv) pool.
  * examples/turnserver.conf: update description of cli option.
  * turnutils_uclient: Linux recvmmsg receive path + larger
    SO_RCVBUF (#1910).
  * Add UDP-GSO send path (--udp-gso) (#1907).
  * turnutils_peer: Linux fast path with drain loop,
    recvmmsg/sendmmsg, U… (#1908).
  * Relay recvmmsg (#1906).
  * fuzzing: use hex escapes for HTTP EOH dictionary entry.
  * Sync turnserver man page with current CLI options (#1903).
  * Remove stale --ne option from turnserver --help (#1904).
  * Restore CodeQL permissions, category, and manual build mode.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1781438400">- Update to version 4.13.0
  * Wrap atomic everywhere.
  * Fix sendmmsg stride bug in multiplex-peer UDP batch flush.
  * Reap TURN permissions/channels via a per-thread sweep instead
    of per-object timers.
  * Add --udp-sendmmsg-log to observe egress sendmmsg/UDP-GSO
    batching.
  * Expose recvmmsg/sendmmsg UDP batch sizes as Prometheus metrics
  * Restrict recvmmsg fast path to shared fan-in sockets
    (make --udp-recvmmsg useful standalone).
  * Enable --udp-recvmmsg by default on Linux.
  * Security hardening: port parsing, admin brute-force throttle,
    credential log redaction, constant-time compare, OAuth bounds
    checks, permission cap (#1932).
  * Add continuous latency mode to stunclient.
  * Fix test_redis_format link failure.
  * Fix configure MANPREFIX typo.
  * Fix missing sqlite3 dependendcy.
  * Fix UDP receive buffer ownership.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1781524800">- Update to version 4.13.1
  * null-terminate server_name in stun_is_challenge_response_str.
  * Canonicalize all IPv4-in-IPv6 encodings before peer-IP checks.
  * Auto-deny coturn's own database backend endpoints as relay
    peers.
  * Deny link-local / ULA / site-local relay peers by default.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1782129600">- Update to version 4.14.0
  New
  * No more dependency on prometheus-client-c
  * HTTPS support for prometheus client (optional)
  * TLS support for redis - now compatible with managed redis
    (optional).
  * Rate limiting "401 Unauthorized" responses - reduces
    reflection attacks off the coturn server. This is an
    experimental feature - not fully tested on production scale
    deployment and massive DDoS attacks. New prometheus counters
    should help shed some light on real life behavior and
    performance. The feature is off by default.
  What's Changed
  * validate hmackey length in sqlite_get_user_key before hex
    decode.
  * Add out-of-tree patch to restore deprecated OpenSSL 1.1.1.
  * Add optional TLS transport for Redis connections.
  * Fix relay threads override.
  * Flush prometheus hot-path counters once per second to kill
    lock contention.
  * fix signed-char index out-of-bounds read in base64_decode.
  * Build Prometheus exporter from vendored local sources.
  * Prom https.
  * Fix realm quota data race and warnings.
  * Add per-source rate-limiting of UDP 401 Unauthorized responses</changelog>
</package>
<package pkgid="5792bdeaa4d0bf891a72ccf3a77e2aa70bddc914d02f6283b431475213de599ca0c98a9dfb039033e961e50fbcf23cf0d9a9002a84345a9f4b00c7c5786592c2" name="coturn-utils" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="bp160.1.14"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1634558400">- Dropped harden_coturn.service.patch because systemd units are
  created from own source anyway and are proven to work</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1660910400">- Drop @privileged SystemCallFilter, can prevent service from starting (status=31/SYS)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1670155200">- Version 4.6.1
  - Fix memory corruption on socket close (#1113)
- Version 4.6.0
  - merge PR #967 (eakraly)
  * fix small issues reported by cppcheck
  - merge PR #974 (eakraly)
  * fix long log line printing
  - merge PR #973 (eakraly)
  * Print turnserver version with --version
  - merge PR #972 (eakraly)
  * do not write outside of a buffer in admin interface
  - merge PR #970 (eakraly)
  * fix uclient certificate loading bug
  - merge PR #971 (eakraly)
  * fix duplicate TCP flag in run_tests.sh script
  - merge PR #962 (huhaipeng)
  * fix turn session leak
  - merge PR #963 (eakraly)
  * Document dependency of new-log-timestamp-format on new-log-timestamp
  - merge PR #951 (steffen-moser)
  * Enable compilation of coturn on Solaris 11.4
  - merge PR #949 (eakraly)
  * First step to re-enable compilation with OpenSSL 1.0.x
  - merge PR #949 (eakraly)
  * Fix cmake build on macOS
  - merge PR #942 (eakraly)
  * Disable SSL renegotiation
  - merge PR #792 (yfaker)
  * Fix user quota release #786
  - merge PR #829 (fancycode)
  * add more info to redis allocation status
  - merge PR #938 (eakraly)
  * update turnserver.conf comment
  - merge PR #773 (haseebq)
  * fix performance regression
  - merge PR #773 (korayvt)
  * add syslog facility config
  - merge PR #897 (unicode-it)
  * add support for dual-stack prom listener
  - merge PR #984 (rozhuk-im)
  * fix build with libressl 3.4.0+
  - merge PR #926 (ggarber)
  * add ci tests workflow
  - merge PR #934 (neocat)
  * show error on invalid config
  - merge PR #787 (dsmeytis)
  * add new prom allocations metric
  - merge PR #869 (micmac1)
  * don't link in libintl
  - merge PR #895 (alexnedo)
  * fix access to freed memory
  - merge PR #919 (sysvinit)
  * configurable prom username labels
  - merge PR #840 (sysvinit)
  * configurable prometheus listener port
  - merge PR #870 (micmac1)
  * fix build mariadb connector
  - merge PR #851 (freedomben)
  * fix README typo
  - merge PR #877 (davel)
  * correct doc typo
  - merge PR #755(moznuy) and #825(by argggh)
  * fix sqlite3_shutdown and sqlite3_config race
  - merge PR #826 (by giavac)
  * prom server better
  - merge PR #684 (by brevilo)
  * Define OPENSSL_VERSION_1_1_1 on systems where it doesn't (yet) exist
  * Regression in 4.5.2 that cause issues in openssl version &lt; 1.1.1.
  - typo fix in prometheus (by fcecagno)
  - merge PR #687 (by Wuelber Castillo)
  * Add hash algorithm for hmackey value to redis userdb schema docs
  - replace keep-address-family with allocation-default-address-family (keep-address-family deprecated and will be removed!!)
  - merge PR #703 (by j4zzc4t)
  * Restore no_stdout_log behavior
  - merge PR #727 (by JoKoT3)
  * Support older mysql client version in configure
  - merge PR #721 (by KangLin)
  * Add to support cmake
  - merge PR #717 (by marcoschum)
  * Fix typo in turnserver.conf
  - merge PR #704 (by hills)
  * Packaging scripts can miss out on these errors (exit code)
  - merge PR #679 (by rubo77)
  * Readme.turnserver: how to run server as a daemon
  - merge PR #739 (by hills)
  * SSL reload has hidden bugs which cause crashes
  - Fix regression in PR #739
  - Try to mitigate STUN amplification attatck
  * Add new option --no-rfc5780 to force disable RFC8750
  * Add new option --no-stun-backward-compatibility
    Disable handling old STUN Binding requests and disable
    MAPPED-ADDRESS attribute in binding response (use only the
    XOR-MAPPED-ADDRESS)
  * Add new option --response-origin-only-with-rfc5780
    Add RESPONSE_ORIGIN attribute only if rfc5780 is enabled
  * Don't send SOFTWARE attribute if --no-software-attribute set on (BREAKING CHANGE)
  - merge PR #767 (by ggalperi)
  * fix for log_binding (regression)</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1678104000">- Add coturn-no-FIPS-140-mode.patch, fixes build against OpenSSL 3.0</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1683028800">- Update to 4.6.2
  * Make sure microhttpd starts using epoll if supported
  * Add sessioncount to prometheus metrics
  * Add STUN request/response/error prometheus counters
  * Cleanup logs on turnserver start
  * Fix duplicate stdout log output
  * Log threadId to logs to aid in multi-threaded debugging
  * Optional build info compiled into turnserver binary
  * Fix arguments expansion in docker-entrypoint.sh
  * Santise database connection strings before printing to log
  * Support Windows MSVC
  * Add configuration option for TLS 1.3 ciphersuites
  * Improve openssl3 and FIPS support
  * Use single SSL_CTX for TLS and DTLS support
  * Update openssl API use to non-deprecated version
  * Set string bytes to null to prevent random origin
  * Fix memory corruption on socket close
  * Fix packet backlog fifo that processed packets in reverse
    order in some scenarios
  * Fix off-by-one when terminating gcm_nonce
  * Fixes to Redis memleaks and socketleaks
  * Fix malformed response to mobility refresh request
  * Fuzzing support
  * Ignore raw UDP if no_udp is enabled
  * Better detect availability of SCTP protocol
- Drop coturn-no-FIPS-140-mode.patch, fixed upstream, see
  https://github.com/coturn/coturn/issues/1170</changelog>
  <changelog author="chris@computersalat.de" date="1696852800">- add coturn-turnserver_conf.patch
  * to have a meaningful turnserver.conf.default
- create a ready-to-run turnserver.conf
- fix logrotate script
- Update README.SUSE for Let's Encrypt Certificates
- move certs to /etc/coturn/tls
- Update apparmor profile
- rework sysusers.d config file</changelog>
  <changelog author="chris@computersalat.de" date="1697198400">- Update coturn-turnserver_conf.patch
  * Fix comment for listening-ip
- enable 'verbose' log to see listening IPs and more, not just
  server start/stop</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Adam Majer &lt;amajer@suse.com&gt;" date="1718452800">- Don't hard require systemd -- not needed in containers</changelog>
</package>
<package pkgid="a6cb42c93eed1de342fde2c7f1dd5c95de77d1668c1be6f26799804721b41ced6a3ddafcd7c892cdc9af0161a22639c3c1b14a9831a13f98cf5cdcbb55bbdb0c" name="courier-authlib" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="78d147b4553e2d5ca128fe5200a17dc65dc47eb982b9ffdbe8332bf71fb02ad5b7c9aa42da4fd02ebfdba9b3290bec80c7c154fad4af6d774068b264dc678d6b" name="courier-authlib-devel" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="9ead6df000b85082ea325512a5a75b247b5cb6385a920bb9f207d39d12ace87eb0e2a3400171b4327c0ea63786e8ddaf00d9b5aba3edcfab158210d27e3fbf71" name="courier-authlib-ldap" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="a7571c756622094dd16a25b40d71193c285adf2f95b39e02fe46408f338a8e10a3319b391f2ed38b5b7f501cb73bf10bf07825d0170d853fc69b39363c1395aa" name="courier-authlib-mysql" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="23f246275993d7a8aa001e78d4b6164e4823a1b73fda1e857fff715b4e9fc3383abc2c7becfa74d6a7e8f3e86f57f0c04ef5c0575f15a297c9a00119337ebd02" name="courier-authlib-pgsql" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="88939f80dac32ec3ad04be87e35b6fefbe76c8ffeadc1761605403fbd6f6d7bf3050d23aafa49821b3075db451de5d61fb8f90935016ffea170ea2c7dda89d8c" name="courier-authlib-pipe" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="8d745eace42a2ec86e35a37cbdd38bc8a18b853b068ebc1f7a0c7ea5e42673e5155c31b1505cdc5cfa648124f331f98f71261ca44de61fd11ef3c3ee22ba13d1" name="courier-authlib-sqlite" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="822eb0ba0912fce3bdd08dd3f9711db57cb3b77dd5676e379aae59526378e0821f45b51bc06721d4351f381ae41d512cf08d7c56a5e8a4d9e717bff6334e3365" name="courier-authlib-userdb" arch="x86_64">
  <version epoch="0" ver="0.72.3" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
</package>
<package pkgid="9b71449bb7b29ebcbfbad17ee0988207e41eaec9d9e6afdf303be2d8d3c02c7abe80a71642b91bb9492cdb3ff564854500fdde68b164730ec3f2b367d74eb458" name="courier-imap" arch="x86_64">
  <version epoch="0" ver="5.2.10" rel="bp160.1.14"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1671364800">- update to 5.2.1
  * Fix a compatibility problem with OpenSSL 3 that results in TLS
    negotiation failures in some non-default configurations.
  * Fix an error in courier-imap's installation script that results in
    creation of absolute, rather than relative, symbolic links.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
</package>
<package pkgid="75825b07ff8ef67bf840ec1b057687411bc304f7e0d46ae50ba14f18c337dfe4ac04a19625b8b7792bff3720d1454cfa317565b49bec44bd08279921af7c206f" name="courier-unicode-devel" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp160.1.13"/>
  <changelog author="suse+build@de-korte.org" date="1512388800">- update to 2.0
  * configure.ac: Better test for available of nl_langinfo_l().
  * Migrate to C++11: remove unicode_char, use char32_t. Replace
    std::vector&lt;unicode_char&gt; with std::u32string.</changelog>
  <changelog author="ikruis@gmail.com" date="1545998400">- update to 2.1
  * gcc 8 update, fix assertions. libtool and toolchain updates.
  * unicode.c: Implement unicode_x_smap_modutf8 pseudo-encoding.
  * unicode.c: Fix error and validation of valid modified-utf7
    encoding.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1573560000">- add courier-unicode.keyring for source verification
- cleanup spec</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1606305600">- update to 2.1.2
  * Fixes a packaging error in 2.1.1 that results in broken manual page
    links (no code changes)
- update to 2.1.1
  * Fixes a bug that causes cone to garble some messages when showing
    them</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 2.2.2
  * unicode_bidi.c: Implement unicode_bidi_combining(). Implement
    canonical and compatibility decomposition and canonical composition.
  * unicode_bidi.c (unicode_bidi_needs_embed): Make its return code
    what its documentation says its return code is.
  * Implement unicode_bidi_needs_embed(), unicode_bidi_cleaned_size(),
    unicode::bidi_override,
- update to 2.2.1
  * unicode_bidi_calc and unicode_bidi_calc_levels return a
    unicode_bidi_direction object, to indicate whether the
    computer paragraph embedding level was explicitly computed or
    defaulted.
  * unicode::bidi_calc - an empty string with an explicit embedding
    level should return the requested embedding level.
- update to 2.2
  * unicode::iconvert::convert, fix uninitialized variable.
  * Implement bidirectional algorithm, canonical or equivalent character
    mappings.
  * Unicode 13 update. Adds lookup of EastAsianWidth property, emoji
    property lookup, adds an alternative sequence-based grapheme API
    that handles multi-character emoji rules.
  * Add bidi property lookups.
- update source download URL</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616846400">- update to 2.2.3
  * Fix compilation error on CentOS 7</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 2.2.4
  * configure.ac: gcc 12, autotool updates.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 2.2.6
  * Debian/Ubuntu: update lintian overrides
- update to 2.2.5
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1704456000">- update to 2.3.0
  * Unicode 15 update. Added unicode_derived_&lt;name&gt;() lookup for
    derived core properties. Added unicode_general_category_lookup()
    for general category lookups. Fix GB11 rule.
- update courier-unicode.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 2.3.1
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.</changelog>
</package>
<package pkgid="3017be51641698574105e2038af345a193fa40d5ec823b0783782f1ba1310d04c8e5288c1833b9be5ea992ea5e9170e28de83b5e8efd03565a1fdc33c1ee7782" name="courier-unicode-doc" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="bp160.1.13"/>
  <changelog author="suse+build@de-korte.org" date="1512388800">- update to 2.0
  * configure.ac: Better test for available of nl_langinfo_l().
  * Migrate to C++11: remove unicode_char, use char32_t. Replace
    std::vector&lt;unicode_char&gt; with std::u32string.</changelog>
  <changelog author="ikruis@gmail.com" date="1545998400">- update to 2.1
  * gcc 8 update, fix assertions. libtool and toolchain updates.
  * unicode.c: Implement unicode_x_smap_modutf8 pseudo-encoding.
  * unicode.c: Fix error and validation of valid modified-utf7
    encoding.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1573560000">- add courier-unicode.keyring for source verification
- cleanup spec</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1606305600">- update to 2.1.2
  * Fixes a packaging error in 2.1.1 that results in broken manual page
    links (no code changes)
- update to 2.1.1
  * Fixes a bug that causes cone to garble some messages when showing
    them</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 2.2.2
  * unicode_bidi.c: Implement unicode_bidi_combining(). Implement
    canonical and compatibility decomposition and canonical composition.
  * unicode_bidi.c (unicode_bidi_needs_embed): Make its return code
    what its documentation says its return code is.
  * Implement unicode_bidi_needs_embed(), unicode_bidi_cleaned_size(),
    unicode::bidi_override,
- update to 2.2.1
  * unicode_bidi_calc and unicode_bidi_calc_levels return a
    unicode_bidi_direction object, to indicate whether the
    computer paragraph embedding level was explicitly computed or
    defaulted.
  * unicode::bidi_calc - an empty string with an explicit embedding
    level should return the requested embedding level.
- update to 2.2
  * unicode::iconvert::convert, fix uninitialized variable.
  * Implement bidirectional algorithm, canonical or equivalent character
    mappings.
  * Unicode 13 update. Adds lookup of EastAsianWidth property, emoji
    property lookup, adds an alternative sequence-based grapheme API
    that handles multi-character emoji rules.
  * Add bidi property lookups.
- update source download URL</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616846400">- update to 2.2.3
  * Fix compilation error on CentOS 7</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 2.2.4
  * configure.ac: gcc 12, autotool updates.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 2.2.6
  * Debian/Ubuntu: update lintian overrides
- update to 2.2.5
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1704456000">- update to 2.3.0
  * Unicode 15 update. Added unicode_derived_&lt;name&gt;() lookup for
    derived core properties. Added unicode_general_category_lookup()
    for general category lookups. Fix GB11 rule.
- update courier-unicode.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 2.3.1
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.</changelog>
</package>
<package pkgid="4dd0c209feb8e84a78850349fdb4a46e7e961db518944382c99616d6354a32f56d424bfe66f0c4ccd2f8782b113018685095637fee8dbd8b76d96fe1911234a7" name="cowsay" arch="noarch">
  <version epoch="0" ver="3.7.0" rel="bp160.1.11"/>
  <changelog author="sor.alexei@meowr.ru" date="1396785600">- Initial package.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398513600">- use verbatim upstream source tarball
- use version number used upstream
- add source URLs, see https://en.opensuse.org/SourceUrls
- add source tarball signature verification
- specify perl requirements as per packaging recommendations</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495886400">- Add perl to BuildRequires in order to make the package rebuild
  when perl was updated.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1561550400">- Add SUSE brand
  * chami.patch -- big chameleon picture named chameleon.cow
  * one-eye.patch -- helper patch to allow the chameleon to be dead</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599048000">- update to 3.0.4:
  - Licensing terms have changed to GPLv3.
  - Friendlier to being hosted on GitHub.
  - No functionality changes whatsoever.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1638532800">- Update to 3.7.0
  * cowsay -r [-C] for random cow
  * Pluggable cow collections using etc/cowsay/cowpath.d
  * Parseable format for cowsay -l when sent to non-terminal
    destination
  * Fix cowsay -l ignoring *.pm files
  * Have cowsay -l recursively discover cowfiles in subdirectories
- Update to 3.5
  * Add llama cow
  * Changed to SemVer version numbering
- Switch to cowsay-org fork:
  * Version 3.04.01
  * Fix the version number in source files
- Adjust chami.patch for different directory structure
- Drop fixed one-eye.patch</changelog>
</package>
<package pkgid="25d14b8b8da8c82579db3581001cf4643afb341426b25c2448673b85e0a798bab34ea76905b541eaba3c99f8cb9af56db29d0af5fbd4fb25eb5daa0388e5e262" name="cowsql-devel" arch="x86_64">
  <version epoch="0" ver="1.15.6" rel="bp160.1.3"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1708430400">- cowsql 1.15.4, fork of canonical/dqlite, working with cowsql/raft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1711886400">- update to 1.15.6:
  * leader: Fix double-frees
  * More raft protocol errors are translated into sqlite errors
  * Improved handling of SQLITE_DIRECT_OVERFLOW_READ</changelog>
</package>
<package pkgid="66e453c27d8a98a0feb454388593766af7baf9d2c153f3d8c28cf86eab65e0b562d9b35937be1fe062749bf4b206558034d69c02d532e97d0040e39e1529912a" name="cozette-fonts" arch="noarch">
  <version epoch="0" ver="1.23.1" rel="bp160.1.9"/>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1581854400">- Initial release.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1585310400">- Update to version 1.7.0. (See CHANGELOG.md)
- Added
  * U+263A WHITE SMILING FACE
  * U+2669 QUARTER NOTE
  * U+266A EIGHTH NOTE
  * U+266B BEAMED EIGHTH NOTES
  * U+266C BEAMED SIXTEENTH NOTES
  * flats and sharps too</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1589284800">- Update to version 1.8.0. (see CHANGELOG.md)
  * Add Pomicons glyphs.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1598702400">- Update to version 1.9.0.
  * Added
  * U+0166 LATIN CAPITAL LETTER T WITH STROKE
  * U+0167 LATIN SMALL LETTER T WITH STROKE
  * U+0172 LATIN CAPITAL LETTER U WITH OGONEK
  * U+0173 LATIN SMALL LETTER U WITH OGONEK
  * U+0174 LATIN CAPITAL LETTER W WITH CIRCUMFLEX
  * U+0175 LATIN SMALL LETTER W WITH CIRCUMFLEX
  * U+0176 LATIN CAPITAL LETTER Y WITH CIRCUMFLEX
  * U+0177 LATIN SMALL LETTER Y WITH CIRCUMFLEX
  * Changed
  * snake is now fullwidth to make starship prompts look less ugly</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1603108800">- Update to version 1.9.2.
  * Added
  * U+221A SQUARE ROOT
  * U+2116 NUMERO SIGN
  * Fixed
  * U+0506 CYRILLIC CAPITAL LETTER KOMI DZJE now has an actual
    glyph
  * U+0507 CYRILLIC SMALL LETTER KOMI DZJE now has an actual
    glyph</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1606392000">- Update to version 1.9.3.
  * Added
  * (U+21B0 UPWARDS ARROW WITH TIP LEFTWARDS)
  * (U+21B1 UPWARDS ARROW WITH TIP RIGHTWARDS)
  * (U+21B2 DOWNWARDS ARROW WITH TIP LEFTWARDS)
  * (U+21B3 DOWNWARDS ARROW WITH TIP RIGHTWARDS)
  * Fixed
  * Changed U+220F N-ARY PRODUCT and U+2210 N-ARY COPRODUCT
    to make them taller
  * Extended the descender of U+04CC CYRILLIC SMALL LETTER
    KHAKASSIAN CHE
- Minor spec file clean up.</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1671192000">- Update to version 1.19.0:
  * Changes, New glyphs, etc.
  * v.1.18.1 images
  * v.1.18.1 Bluetooth icons
  * Add note about dmenu
  * v.1.18.0 Add some logical and set operators
  * v.1.17.2 Umlaut fixes
  * v.1.17.1
  * Update README.md</changelog>
  <changelog author="socvirnyl.estela@gmail.com" date="1689768000">- Update to version 1.19.0:
  * v.1.19.0 The yoshiyoshyosh update - versioning, repo meta
  * Changes, New glyphs, etc.
  * v.1.18.1 images
  * v.1.18.1 Bluetooth icons
  * Add note about dmenu
  * v.1.18.0 Add some logical and set operators
  * v.1.17.2 Umlaut fixes
  * v.1.17.1
  * Update README.md</changelog>
  <changelog author="socvirnyl.estela@gmail.com" date="1689768001">- Update to version 1.21.0:
  * v.1.21.0 The BQN update
  * Added BQN glyphs + some miscellaneous glyphs
  * v.1.20.1 Sunglasses emoji
  * v.1.20.0 The APL update
  * v.1.19.3 Strikethrough rendering fix
  * v.1.19.2-hidpi2 HiDpi fixes
  * HiDpi builds
  * docs: Add FreeBSD port</changelog>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1703073600">- Remove _service file
- Remove otf font
- Add README.md and CHANGELOG.md as sources.
- Update to version 1.23.1:
  * v.1.23.1 Emoji bugfix, new images
  * v.1.23.0: the Uiua update.
  * v.1.22.2 More math symbols
  * docs: Add FreeBSD pkg
  * v.1.22.1 Caron fixes
  * v.1.22.0 the zodiac update
  * v.1.21.0-woff - Fix OS/2 tables, add woff/woff2 export
  * v.1.21.0 The BQN update
  * Added BQN glyphs + some miscellaneous glyphs</changelog>
</package>
<package pkgid="b2881a162475e950cd6fd8cd2645d700cee2220f6ae45cd236941a652a472266b9fe95cfe234350063aebc26169ea08ee3ef0615c3e8e257fb7abe09b50c4ee9" name="cpanspec" arch="noarch">
  <version epoch="0" ver="1.84.00.1688930749.8cd1dcd" rel="bp160.1.12"/>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1604491200">- Update to 1.79.01
  * smaller bug-fixes
  * add add_doc and skip_doc to allow changing docs handling
  * ignore some more unwanted files in doc handling
  * fix package requires
  * reduce changelog space wasting, document option --old-file
  * update copyrights</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1605873600">- Update to 1.80.01
  * support opensuse patch comments (PATCH-FIX-UPSTREAM)
  * add misc block, e.g. for subpackages</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1606478400">- Add the important cpanspec.yml file to the package</changelog>
  <changelog author="Tina M&#xFC;ller &lt;tina.mueller@suse.com&gt;" date="1620388800">- Update to 1.81.01
  * Also read from META.json
  * Read 'dynamic_config' and 'provides' from META files
  * Move Intrusive.pm into its own subprocess
  * Add --debug option
  * Add statistics output
  * Add batch processing script for testing changes on a number of packages</changelog>
  <changelog author="Tina M&#xFC;ller &lt;tina.mueller@suse.com&gt;" date="1647000000">- Update to version 1.82.01.1646998297.5af26bb:
  * v1.82.01
  * Read from MYMETA.{json,yml} (#33)
  * Drop perl markup in summary line (#32)</changelog>
  <changelog author="Tina M&#xFC;ller &lt;tina.mueller@suse.com&gt;" date="1647000001">- Add a call to `cpanspec -h` for testing
- Update dependencies</changelog>
  <changelog author="Tina M&#xFC;ller &lt;tina.mueller@suse.com&gt;" date="1651752000">- Update to version 1.82.02.1651742438.5f389d1:
  * v1.82.02
  * Deal with missing MYMETA files (#34)</changelog>
  <changelog author="Tina M&#xFC;ller &lt;tina.mueller@suse.com&gt;" date="1674475200">- Update to version 1.83.00.1674496263.ba76ec9:
  * v1.83.00
  * Add blank line after %autosetup (#42)
  * Ensure non-interactive mode (#41)
  * Add github workflow (#40)
  * Switch to faster CPAN mirror
  * Strip pod from summary (#38)
  * fix --debug option by adding 'use Data::Dumper' (#31)
  * Fix reading META.yml (#37)</changelog>
  <changelog author="Tina M&#xFC;ller &lt;tina.mueller@suse.com&gt;" date="1688904000">- Update to version 1.84.00.1688930749.8cd1dcd:
  * v1.84.00
  * Fix code for Module::Build(::Tiny) (#46)
  * Exlude scripts/ from removing executable bit (#45)
  * Ignore toml and yml files (#43)</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1709726400">- Add missing dependencies</changelog>
</package>
<package pkgid="f28fc6754a081ace328bb3fbe6bac26b495557e232e1511d0a43ecc5b782d146a6a1a13f37644d3857b18c39b1c3d18040755102c36b4ddc931af222d68b3b87" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.15" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687521600">- Update to 2.14:
  * New option --ignore-dirnlink
    Valid in copy-out mode, it instructs cpio to ignore the actual number of
    links reported for each directory member and always store 2 instead.
  * Changes in --reproducible option
    The --reproducible option implies --ignore-dirlink.  In other words, it is
    equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
  * Use GNU ls algorithm for deciding timestamp format in -tv mode
  * Fix cpio header verification.
  * Fix handling of device numbers on copy out.
  * Fix calculation of CRC in copy-out mode.
  * Rewrite the fix for CVE-2015-1197
  * Fix combination of --create --append --directory.
  * Fix appending to archives bigger than 2G.
- Refresh patches:
  * cpio-open_nonblock.patch
  * cpio-dev_number.patch
  * cpio-default_tape_dev.patch
  * cpio-pattern-file-sigsegv.patch
- Remove patches:
  * cpio-revert-CVE-2015-1197-fix.patch
  * fix-CVE-2021-38185.patch
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571</changelog>
  <changelog author="danilo.spinella@suse.com" date="1688990400">- Backport upstream fix for --no-absolute-filenames --make-directories
  * fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707134400">- Update to 2.15:
  * Fix the operation of --no-absolute-filenames --make-directories.
  * Restore access and modification times of symlinks in copy-in and
    copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708948800">- Use %autopatch instead of deprecated %patchN.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1712318400">- Fix build with gcc14, bsc#1221712
  * fix-gcc14.patch</changelog>
</package>
<package pkgid="6c599a02e245b17a4a4032840717577ee336e529c70ec73192a41964168146523d68bede0dc41443faa5635654dddc0c800359ee6af1e50cb88a9f35fd4a93e1" name="cpio-lang" arch="noarch">
  <version epoch="0" ver="2.15" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687521600">- Update to 2.14:
  * New option --ignore-dirnlink
    Valid in copy-out mode, it instructs cpio to ignore the actual number of
    links reported for each directory member and always store 2 instead.
  * Changes in --reproducible option
    The --reproducible option implies --ignore-dirlink.  In other words, it is
    equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
  * Use GNU ls algorithm for deciding timestamp format in -tv mode
  * Fix cpio header verification.
  * Fix handling of device numbers on copy out.
  * Fix calculation of CRC in copy-out mode.
  * Rewrite the fix for CVE-2015-1197
  * Fix combination of --create --append --directory.
  * Fix appending to archives bigger than 2G.
- Refresh patches:
  * cpio-open_nonblock.patch
  * cpio-dev_number.patch
  * cpio-default_tape_dev.patch
  * cpio-pattern-file-sigsegv.patch
- Remove patches:
  * cpio-revert-CVE-2015-1197-fix.patch
  * fix-CVE-2021-38185.patch
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571</changelog>
  <changelog author="danilo.spinella@suse.com" date="1688990400">- Backport upstream fix for --no-absolute-filenames --make-directories
  * fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707134400">- Update to 2.15:
  * Fix the operation of --no-absolute-filenames --make-directories.
  * Restore access and modification times of symlinks in copy-in and
    copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708948800">- Use %autopatch instead of deprecated %patchN.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1712318400">- Fix build with gcc14, bsc#1221712
  * fix-gcc14.patch</changelog>
</package>
<package pkgid="e77ec849775893c484c6ab092d06bed85328245e595752b386675e2ae4de6a6b99f6d4fd366ddf24feaffa3733039719227fbc8fc0f2914d0df5fa8c34c3a1aa" name="cpio-mt" arch="x86_64">
  <version epoch="0" ver="2.15" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687521600">- Update to 2.14:
  * New option --ignore-dirnlink
    Valid in copy-out mode, it instructs cpio to ignore the actual number of
    links reported for each directory member and always store 2 instead.
  * Changes in --reproducible option
    The --reproducible option implies --ignore-dirlink.  In other words, it is
    equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
  * Use GNU ls algorithm for deciding timestamp format in -tv mode
  * Fix cpio header verification.
  * Fix handling of device numbers on copy out.
  * Fix calculation of CRC in copy-out mode.
  * Rewrite the fix for CVE-2015-1197
  * Fix combination of --create --append --directory.
  * Fix appending to archives bigger than 2G.
- Refresh patches:
  * cpio-open_nonblock.patch
  * cpio-dev_number.patch
  * cpio-default_tape_dev.patch
  * cpio-pattern-file-sigsegv.patch
- Remove patches:
  * cpio-revert-CVE-2015-1197-fix.patch
  * fix-CVE-2021-38185.patch
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch
- Fix CVE-2023-7207, path traversal vulnerability, bsc#1218571</changelog>
  <changelog author="danilo.spinella@suse.com" date="1688990400">- Backport upstream fix for --no-absolute-filenames --make-directories
  * fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1707134400">- Update to 2.15:
  * Fix the operation of --no-absolute-filenames --make-directories.
  * Restore access and modification times of symlinks in copy-in and
    copy-pass modes.
- Remove fix-operation-no-absolute-filenames.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708948800">- Use %autopatch instead of deprecated %patchN.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1712318400">- Fix build with gcc14, bsc#1221712
  * fix-gcc14.patch</changelog>
</package>
<package pkgid="054544bdc4031996cc65fc2bd70f2337a79cf164525138b3a74ae49c02011070fc539811b5c4e08daf243ac035188118067fe2da85b50e5a835e1088bfaa3786" name="cpp" arch="x86_64">
  <version epoch="0" ver="15" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1674129600">- Switch gcc to default 13.</changelog>
  <changelog author="rguenther@suse.com" date="1707825600">- Support building suffixed packages, but only allow installing one
  variant at the same time.
- Remove obsolete obsoletes.</changelog>
  <changelog author="rguenther@suse.com" date="1707912000">- Add gcc-build flavor for building ALP packages, but disabled for
  openSUSE.</changelog>
  <changelog author="rguenther@suse.com" date="1710763200">- Add gcc, gcc-c++ and libstdc++-devel Provides to the -build flavor
  of those packages.  Should fix build of boost in ALP.</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add conflicts where -build variants provide the non-build variant.</changelog>
  <changelog author="rguenther@suse.com" date="1722513600">- Add libquadmath-devel package for GCC 14.
- Bump GCC version to 14, leave -build flavor at 13.</changelog>
  <changelog author="rguenther@suse.com" date="1723032000">- Make gcc-build-fortran provide and conflict gcc-fortran.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1727092800">- Ensure every -build package conflicts and provides the non-build
  counterpart (related to boo#1230628)</changelog>
  <changelog author="rguenther@suse.com" date="1740398400">- Check is_opensuse for whether plugins are enabled.</changelog>
  <changelog author="rguenther@suse.com" date="1741780800">- Bump GCC version to 15, leave -build flavor at 13.</changelog>
</package>
<package pkgid="6645dcd15570421c209f02e3c268463dd7bff6fa5acdc24f1abcfed25c9264584564a140cd34c174659a960e007e2450edac110e16423157e5871aef3960aa4f" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="160000.2.2"/>
  <changelog author="svalx@svalx.net" date="1685534400">- Update to version 0.12.5:
  * Add HTTPLIB_INSTALL CMake option (#1575)
  * Fix more CRLF injection problems
  * Don't loading system certs from Keychain on iOS (#1546)
  * Initialize sockaddr_un to fix valgrind uninitialised byte message. (#1547, #1547)
  * Using set_content_provider with length of 0 makes it infinitely loop (#1545)
  * How to check if server is running successfully in another thread? (#1548)
  * Fix leaked handle in create_socket (#1554)
  * Fix "Location" header url corrupted by percent-unescaping in redirect… (#1459)
  * Trailing headers not handled (#1486)
  * SSL access through a proxy causes SIGSEGV (#1533)
  * System certs support on macOS (#1474)
  * Add Request::get_file_values method (#1495)
  * Fix: assert socket_requests_are_from_thread_ std::this_thread::get_id() (#1498)
  * Fix: multipart Content-Type headers with both boundary and charset parameters (#1516)</changelog>
  <changelog author="svalx@svalx.net" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="rrahl0@opensuse.org" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="svalx@svalx.net" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="pmonreal@suse.com" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1747656000">- Add dependency from cpp-httplib-devel to libzstd-devel
  to workaround cmake wanting it in all cases unconditionally.</changelog>
  <changelog author="marius.grossu@suse.com" date="1750766400">- version update to 0.22.0
  * Fix ranges that are not in the form 0-n do not work #2157
  * Fix windows req/res very slow compared to Linux #1777
  * Add CPPHTTPLIB_HEADER_MAX_COUNT
  * Windows ::isdigit compilation error #2135
  * Specify version in meson.build #2139
  * Detect if afunix.h exists #2145
  * Feature request: let the Request&amp; know which route matched #2101
  * Feature/multipart headers #2152</changelog>
</package>
<package pkgid="f9eb37b4595484862a70018f900c35c192c61d4e2e36a485b548d9be20c77cb71625fe92e291eae7f58673605b9b3097125a8df3fef870b2477852fe87c49916" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="160000.3.1"/>
  <changelog author="svalx@svalx.net" date="1706875200">- Update to version 0.15.1:
  * Malicious requests for many overlapping byte ranges of large files risk OOM #1766
  * Add missing #include for strcasecmp #1744
  * ThreadPool: optional limit for jobs queue (#1741)
  * Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
  * Fix Windows std::max macro problem #1750
  * Fix select() return code for fd &gt;= 1024 (#1757)
  * Add a getter for a bearer token from a request (#1755)
  * Support move semantics for Response::set_content() (#1764)
  * Treat paths with embedded NUL bytes as invalid (#1765)
  * Fix usage of rand() is not seeded and depends on seeding by parent program #1747
  * Fix check request range and fix response Content-Range. #1694
  * Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
  * Fix #1736
  * Fix #1665
  * Change some of status messages based on RFC 9110 (#1740)
  * Add StatusCode enum (#1739)
  * Fix #1738
  * Fix #1685
  * Fix #1724
  * Add optional user defined header writer #1683
  * Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
  * Avoid a -Warray-bounds false positive in GCC 13. (#1639)
  * Fix #1638
  * Removed unnecessary CRLF at the end of multipart ranges data
  * Fix #1559
  * Use memory mapped file for static file server (#1632)
  * Fix #1519
  * Fix #1590 (#1630)
  * Fix #1619
  * Fix #1624
  * Compiler freezes on Debian 10 (buster) with GCC 8.3.0 #1613
  * Don't overwrite the last redirected location (#1589) # This is a breaking change.
  * Fix #1607
  * Add named path parameters parsing (Implements #1587) (#1608)
  * Result: allow default constructor (#1609)
  * Add support for zOS (#1581)
  * Provide a CMake option to disable C++ exceptions (#1580)
  * Load in-memory CA certificates (#1579)
- Requires OpenSSL version to 3.0 or later</changelog>
  <changelog author="rrahl0@opensuse.org" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="svalx@svalx.net" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="pmonreal@suse.com" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1747656000">- Add dependency from cpp-httplib-devel to libzstd-devel
  to workaround cmake wanting it in all cases unconditionally.</changelog>
  <changelog author="marius.grossu@suse.com" date="1750766400">- version update to 0.22.0
  * Fix ranges that are not in the form 0-n do not work #2157
  * Fix windows req/res very slow compared to Linux #1777
  * Add CPPHTTPLIB_HEADER_MAX_COUNT
  * Windows ::isdigit compilation error #2135
  * Specify version in meson.build #2139
  * Detect if afunix.h exists #2145
  * Feature request: let the Request&amp; know which route matched #2101
  * Feature/multipart headers #2152</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1766404800">- Add CVE-2025-66570.patch
  * Fix CVE-2025-66570 (bsc#1254734) and CVE-2025-66577 (bsc#1254735)</changelog>
</package>
<package pkgid="da1b28f266b7500c13d1a2c0453705c18f10aca21570c9ef3d0cb8070022f045e2725a9193f52026c3d9c55fc064d3948a1b5ca4cff2f13de4c99e263d32042e" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="160000.4.1"/>
  <changelog author="rrahl0@opensuse.org" date="1727006400">- update to 0.18.0:
  * httplib.h: support LibreSSL
  * Nice way to call "handle_file_request" from user code
  * How to diagnose the infamous read error 4
  * Made default server and client read/write timeout settings separately
  * Slow performance caused by get_remote_ip_and_port and get_local_ip_and_port
  * Provides a way to ignore host verify
  * add API support for verify certificate manually
- update to 0.17.3:
  * Accessing Directory
  * ‘constexpr’ error
  * Only match path params that span full path segment
  * Fix KeepAliveTest.SSLClientReconnectionPost problem
- update to 0.17.2:
  * Fix incorrect handling of Expect: 100-continue
  * Peformance improvement by removing tolower function call
- update to 0.17.1:
  * Header parser incorrectly accepts NUL and CR within header values
  * Fix problem with Abstract Namespace Unix Domain
  * Fix SIGINT problem in Docker image
- update to 0.17.0:
  * Changed CPPHTTPLIB_KEEPALIVE_MAX_COUNT to 100
  * Add Dockerfile for static file server
  * Breaking Change!: get_header_ methods on Request and Response now take…
  * Add sleep in handle_EINTR
  * Added set_ipv6_v6only method
  * impossible to shut down the server safely
  * Performance: reserve body to avoid frequent reallocations and copies
- update to 0.16.3:
  * Fixed set_connection_timeout() unexpected results
  * Fix KeepAliveTest.SSLClientReconnectionPost
- update to 0.16.2:
  * threadsafe CLOEXEC on platforms that support it
  * BoringSSL compatibility fixes
- update to 0.16.1:
  * detail::is_socket_alive() is not work for https connection
  * avoid memory leaks if linked with static openssl libs
  * Allow hex for ipv6 literal addr in redirect
  * Fix build on Windows with no WINAPI_PARTITION_APP support
  * test: fix GetRangeWithMaxLongLength on 32 bit machines
  * Require a minimum of TLS 1.2
- update to 0.16.0:
  * Use final keyword for devirtualization
  * FindBrotli cleanup &amp; fixes
  * client can't open the encrypted private key
  * build(meson): generate new test PEMs
  * Fix range parser when parsing too many ranges
  * fix: increase default receive buffer to 16kb
  * Removed excess usage of std::move
  * Merge branch 'HerrCai0907-fix'
  * Highlight notes using markdown features
  * Added progress to POST, PUT, PATCH and DELETE requests
  * Tweak CI &amp; fix macOS prefix
  * New function SSLServer::update_certs. Allows to update certificates while server is running
  * Change library name to cpp-httplib
- update to 0.15.3:
  * Breaking change in handling requests with Range in v0.15.1 and v0.15.2
- update to 0.15.2:
  * Severe directory traversal vulnerability (dotdotslash)
- switch to cmake build system</changelog>
  <changelog author="svalx@svalx.net" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="pmonreal@suse.com" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1747656000">- Add dependency from cpp-httplib-devel to libzstd-devel
  to workaround cmake wanting it in all cases unconditionally.</changelog>
  <changelog author="marius.grossu@suse.com" date="1750766400">- version update to 0.22.0
  * Fix ranges that are not in the form 0-n do not work #2157
  * Fix windows req/res very slow compared to Linux #1777
  * Add CPPHTTPLIB_HEADER_MAX_COUNT
  * Windows ::isdigit compilation error #2135
  * Specify version in meson.build #2139
  * Detect if afunix.h exists #2145
  * Feature request: let the Request&amp; know which route matched #2101
  * Feature/multipart headers #2152</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1766404800">- Add CVE-2025-66570.patch
  * Fix CVE-2025-66570 (bsc#1254734) and CVE-2025-66577 (bsc#1254735)</changelog>
  <changelog author="marius.grossu@suse.com" date="1771329600">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)</changelog>
</package>
<package pkgid="9f5b661a9210a677a4b63d2c3e54d06fb8d2bbd9e7203e9c15b8504123a9aa5845ed49fb8eb873d16221980739ff6f94351f350162a5142c820c2b418ff726c7" name="cpp-httplib-devel" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="160000.5.1"/>
  <changelog author="svalx@svalx.net" date="1727438400">- Small specfile refactoring</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Update to 0.18.1:
  * SSLClientServerTest.* tests fail with OpenSSL 3.2.1 (#1798)
  * Feat: add CPack support (#1950)
  * Keep alive is slowing down shutdown (#1959)
  * Allow empty header values (#1965)</changelog>
  <changelog author="pmonreal@suse.com" date="1737374400">- Update to 0.18.3:
  * Bug fixes:
  - Regression: Client keep-alive subsequent requests very slow #1997
  - 304 Not Modified response stalls until timeout #1998
- Update to 0.18.2:
  * Bug fixes:
  - Fix the problem that CreateFile2 in mmap::open fails to... #1973
  - Default Accept-Encoding header for the client #1975
  - SSLClientReconnection fails on Windows #1980
  - delay in keep_alive due to sleep #1969
  - missing query pararm in httplib::Client::send #1985</changelog>
  <changelog author="pgajdos@suse.com" date="1738843200">- version update to 0.18.6
  * Resolve #2033
  * Port/Address re-use #2011
  * Invalid Content-Length values should be rejected #2014
  * Feature request: ability to check if the connection is still alive #2017
  * Changed to use non-blocking socket in is_ssl_peer_could_be_closed (258992a)
  * Treat out-of-range last_pos as the end of the content #2009
  * fix:set_file_content with range request return 416. #2010
  * Fix HTTP Response Splitting Vulnerability (9c36aae)
- added patches
  fix https://github.com/yhirose/cpp-httplib/issues/2042
  + cpp-httplib-test-issue2004-online.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1747051200">- version update to 0.20.1
  0.20.1 (CVE-2025-46728 [bsc#1242777])
  * Add AF_UNIX support on windows #2115
  * Support zstd also via pkg-config #2121
  * Fix #2113
  * Fix "Unbounded Memory Allocation in Chunked/No-Length Requests"
  0.20.0
  * server_certificate_verifier extended to reuse built-in verifier #2064
  * Assertion failed when destroying httplib::Client
  * #2068
  * Spaces incorrectly allowed in header field names #2096
  * build(meson): copy MountTest.MultibytesPathName files #2098
  * Remove SSLInit #2102
  * Add zstd support #2088
  * Question the behavior of method read_content_without_length #2109
  * Crash when calling std::exit while server running or client requests in flight #2097
  0.19.0
  * Global timeout feature (same as "--max-time" curl option) #2034
  * Fix check for URI length to prevent incorrect HTTP 414 errors
  0.18.7
  * Potential memory corruption in stream_line_reader #2028
- deleted patches
  - cpp-httplib-test-issue2004-online.patch (upstreamed)</changelog>
  <changelog author="jengelh@inai.de" date="1747656000">- Add dependency from cpp-httplib-devel to libzstd-devel
  to workaround cmake wanting it in all cases unconditionally.</changelog>
  <changelog author="marius.grossu@suse.com" date="1750766400">- version update to 0.22.0
  * Fix ranges that are not in the form 0-n do not work #2157
  * Fix windows req/res very slow compared to Linux #1777
  * Add CPPHTTPLIB_HEADER_MAX_COUNT
  * Windows ::isdigit compilation error #2135
  * Specify version in meson.build #2139
  * Detect if afunix.h exists #2145
  * Feature request: let the Request&amp; know which route matched #2101
  * Feature/multipart headers #2152</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1766404800">- Add CVE-2025-66570.patch
  * Fix CVE-2025-66570 (bsc#1254734) and CVE-2025-66577 (bsc#1254735)</changelog>
  <changelog author="marius.grossu@suse.com" date="1771329600">- Fix CVE-2025-53629, header can allocate memory arbitrarily in the server, potentially leading to its exhaustion
  (CVE-2025-53628, bsc#1246471)
  * CVE-2025-53628-53629.patch
- Fix CVE-2025-53628, HTTP header smuggling due to insecure trailers merge
  (CVE-2025-53628, bsc#1246468)</changelog>
  <changelog author="marius.grossu@suse.com" date="1777204800">- Fix CVE-2026-21428, server-side request forgery via header injection
  (CVE-2026-21428, bsc#1255835)
  * CVE-2026-21428.patch
- Fix CVE-2026-22776, unsafe handling of compressed HTTP request can cause a denial of service
  (CVE-2026-22776, bsc#1256518)
  * CVE-2026-22776.patch
- Fix CVE-2026-28434, default exception handler may leak e.what() to clients via EXCEPTION_WHAT response header
  (CVE-2026-28434, bsc#1259221)
  * CVE-2026-28434.patch
- Fix CVE-2026-28435, payload size limit bypass via gzip decompression in ContentReader (streaming) can lead to denial of service
  (CVE-2026-28435, bsc#1259220)
  * CVE-2026-28435.patch
- Fix CVE-2026-29076, denial of service via crafted HTTP POST request
  (CVE-2026-29076, bsc#1259373)
  * CVE-2026-29076.patch</changelog>
</package>
<package pkgid="84947579e8ccbfaa449b7d4a7c55f2ec48c3c38cbe6720a0b9bb2323eb541c549e1b38183d4ca707b0550c2f3b6e02c4570594cd4770b2dc8f1ca50a3805d00a" name="cpp13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="7aa0e3dba257cc6630e7da7e9fa1d43429acf3067771e7573a6c6ef785d963b566cd438dc07ff53e0c4ffea9cc6241e48265c50a97fef4606d2b353af5306c44" name="cpp15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="3751b3d0a795a787bacb31c188a25b13ad98f24fd272e9067679ae995ace78522d95c3dc305045880f6d891610fd1de5e1a75bda99381e661ccfad113285db9e" name="cpp15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="2c7dcdb2e69c2ca924b4c35eca91b73d549870d62a574b17ebcd1ba69b0bc6313cf72deb93fcded4c66ee53ee09f68c5ef023ea84ca44f50587cc3de9debac00" name="cpp15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="3cad67e4016d2ee11162e6909ab9e246f47fba756e3c6468555ff6fcc8d74cae9e82cf75a11131dde00cff63bd95efd2a1cd9acf425ea08774dfee75d8bca573" name="cpp15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="37637bde960f81e5ad146890d767bc44c293df644c39a84cb85f08d4ec741e25d33a6a01dcc190a55b0df5fcf23bfc67ed7c8c970ec9bbc9c97586e512b33b41" name="cppcheck" arch="x86_64">
  <version epoch="0" ver="2.17.1" rel="bp160.1.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 2.13.4:
  * Speedup premium misra checking</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1714132800">- update to 2.14.0
  * New checks:
  - eraseIteratorOutOfBounds: warns when erase() is called on an
    iterator that is out of bounds
  - returnByReference: warns when a large class member is returned
    by value from a getter function</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1716811200">- update to 2.14.1
  * Build: fix USE_MATCHCOMPILER CMake option validation
  * Improve Checking: implement evaluation order checker for c++11
    and later</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1719057600">- update to 2.14.2
  * Justifications for warnings using comments in the code
  * Fix alignas handling</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1725192000">- update to 2.15.0
  * New check suspiciousFloatingPointCast flags unnecessary floating
    point casts that cause loss of precision
  * Added command-line option --cpp-header-probe (and
  - -no-cpp-header-probe) to probe headers and extension-less
    files for Emacs marker
  * Add support for 'CLICOLOR_FORCE'/'NO_COLOR' environment
    variables to force/disable ANSI color output for diagnostics.
  * Add "remark comments" that can be used to generate reports with
    justifications for warnings
  * The whole program analysis is now being executed when
    "--project" is being used.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1730203200">- update to 2.16.0
  Improved checking:
  * constVariable; checking multidimensional arrays
  * constVariablePointer; nested array access
  * deallocuse
  Changed interface:
  * SARIF output. Use --output-format=sarif to activate this.
  * Add option --output-format=. Allowed formats are sarif and
    xml.
  Deprecations:
  * The previously deprecated support for Python 2.7 has been
    removed. Please use Python 3 instead.
  * The maximum value for --max-ctu-depth is currently capped
    at 10. This limitation will be removed in a future release.
  Other:
  * "missingInclude" is no longer implicitly enabled with
    "information" - you need to enable it explicitly now.
  * Fixed checkers report when --addon=misra.py or
  - -addon=misra.json is used.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1733054400">- update to 2.16.1
  * SymbolDatabase: does not select l-value method properly</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1734696000">- update to 2.16.2
  * Fix syntax error for function pointer array with @</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1740571200">- update to 2.17.1:
  * New checks:
  - staticFunction: detect functions that should have internal
    linkage since they are not used outside of their translation
    unit (C code only).
  - Check null pointer return from memory/resource allocation
    functions (nullPointerOutOfMemory,
    nullPointerArithmeticOutOfMemory, nullPointerOutOfResources,
    ctunullpointerOutOfMemory,
    ctunullpointerOutOfResources).
  * Changed interface:
  - Added `reduced` check level. It can be activated with
    `--check-level=reduced`. You get faster analysis
    but some fewer results. The motivation is to be able to make
    analysis time "acceptable" for direct usage.
  - Added `--report-type` option. Enables printing of guidelines
    and classifications for several coding
    standards in place of the regular error identifiers and
    severities.
  * Other:
  - Removed deperecated support for builds via qmake.
  - Using a handwritten rule texts file for MISRA C addon
    violates license and copyright terms. See the
    manual for instructions how to download a official rule
    texts file from MISRA.
- switch to qt6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1743508800">- build without rules support on Tumbleweed to remove pcre
  dependency</changelog>
</package>
<package pkgid="cf234a953bd8f35eb241215ecd2da46f4900dc76296399a71360ce7ec79be39db4fccaf5baa3791c3643dfe069e97fe7e98dca1bdd3552abfb07f5818e49ed19" name="cppcheck-gui" arch="x86_64">
  <version epoch="0" ver="2.17.1" rel="bp160.1.6"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 2.13.4:
  * Speedup premium misra checking</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1714132800">- update to 2.14.0
  * New checks:
  - eraseIteratorOutOfBounds: warns when erase() is called on an
    iterator that is out of bounds
  - returnByReference: warns when a large class member is returned
    by value from a getter function</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1716811200">- update to 2.14.1
  * Build: fix USE_MATCHCOMPILER CMake option validation
  * Improve Checking: implement evaluation order checker for c++11
    and later</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1719057600">- update to 2.14.2
  * Justifications for warnings using comments in the code
  * Fix alignas handling</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1725192000">- update to 2.15.0
  * New check suspiciousFloatingPointCast flags unnecessary floating
    point casts that cause loss of precision
  * Added command-line option --cpp-header-probe (and
  - -no-cpp-header-probe) to probe headers and extension-less
    files for Emacs marker
  * Add support for 'CLICOLOR_FORCE'/'NO_COLOR' environment
    variables to force/disable ANSI color output for diagnostics.
  * Add "remark comments" that can be used to generate reports with
    justifications for warnings
  * The whole program analysis is now being executed when
    "--project" is being used.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1730203200">- update to 2.16.0
  Improved checking:
  * constVariable; checking multidimensional arrays
  * constVariablePointer; nested array access
  * deallocuse
  Changed interface:
  * SARIF output. Use --output-format=sarif to activate this.
  * Add option --output-format=. Allowed formats are sarif and
    xml.
  Deprecations:
  * The previously deprecated support for Python 2.7 has been
    removed. Please use Python 3 instead.
  * The maximum value for --max-ctu-depth is currently capped
    at 10. This limitation will be removed in a future release.
  Other:
  * "missingInclude" is no longer implicitly enabled with
    "information" - you need to enable it explicitly now.
  * Fixed checkers report when --addon=misra.py or
  - -addon=misra.json is used.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1733054400">- update to 2.16.1
  * SymbolDatabase: does not select l-value method properly</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1734696000">- update to 2.16.2
  * Fix syntax error for function pointer array with @</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1740571200">- update to 2.17.1:
  * New checks:
  - staticFunction: detect functions that should have internal
    linkage since they are not used outside of their translation
    unit (C code only).
  - Check null pointer return from memory/resource allocation
    functions (nullPointerOutOfMemory,
    nullPointerArithmeticOutOfMemory, nullPointerOutOfResources,
    ctunullpointerOutOfMemory,
    ctunullpointerOutOfResources).
  * Changed interface:
  - Added `reduced` check level. It can be activated with
    `--check-level=reduced`. You get faster analysis
    but some fewer results. The motivation is to be able to make
    analysis time "acceptable" for direct usage.
  - Added `--report-type` option. Enables printing of guidelines
    and classifications for several coding
    standards in place of the regular error identifiers and
    severities.
  * Other:
  - Removed deperecated support for builds via qmake.
  - Using a handwritten rule texts file for MISRA C addon
    violates license and copyright terms. See the
    manual for instructions how to download a official rule
    texts file from MISRA.
- switch to qt6</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1743508800">- build without rules support on Tumbleweed to remove pcre
  dependency</changelog>
</package>
<package pkgid="8d17f057f8f684d85e7fc32baf3a998ad1c873f9d2c8c68defe1ef1c04e95f41de33ea1e9f39e494bf8dc7dfdab10a102162273ffdeb2bd87b5d7e0f49c75cd7" name="cpphs" arch="x86_64">
  <version epoch="0" ver="1.20.9.1" rel="bp160.1.13"/>
  <changelog author="psimons@suse.com" date="1592913600">- Add cpphs at version 1.20.9.1.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="Ond&#x159;ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1635940800">- Update cpphs to version 1.20.9.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1680177600">- Updated spec file to conform with ghc-rpm-macros-2.5.2.</changelog>
</package>
<package pkgid="8e669af0595ac07316cfd76a4dd1d95a6dcb35ab4a00f70a8ca9dab19c57e83a656f8a28e12ef310a414f2678209a53fa01127e8233d41275c50863c97805697" name="cppreference-doc" arch="noarch">
  <version epoch="0" ver="20250209" rel="bp160.1.5"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566907200">- Update to version 20190607:
  + List of changes unavailable from upstream.
- Drop Fix-qch-build.patch: incorporate upstream.
- Add a build script missed by upstream tarball
  (preprocess_qch.py).
- New build dependency: python3-premailer.</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1639569600">- Update to version 20211127
  (Switched to PeterFeicht's repository, which has new releases)
- Removed preprocess_qch.py - now bundled in source</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1644062400">- Update to version 20220201:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1660132800">- Update to version 20220730:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1663243200">- Add BuildRequires: python3-cssutils for all openSUSE versions,
  but specifically require version 2.0.0 and above for oS 1550 to
  avoid build failures.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666612800">- Add cppreference-doc-premailer-3.9-compat.patch: Make
  pre-processing compatible with premailer &gt;= 3.9.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1693051200">- Update to version 20230810:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718712000">- Update to version 20240610:
  * Update content from the website, long overdue.</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1731758400">- Update to version 20241110
  * Update content from the website.
  * Various build improvements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1740312000">- Update to version 20250209:
  * Update content from the website.
- Add Recommends: devhelp for %{name}-devhelp package.</changelog>
</package>
<package pkgid="298bb75210a16cc5af55da8b4de4b43ebdb4bc017abbeaf168db30e4bdd9fe8c97b6bf6180cc6344c7d796f9e2dde4c326eb417047a9895ec6e28e2ad29d81f9" name="cppreference-doc-devhelp" arch="noarch">
  <version epoch="0" ver="20250209" rel="bp160.1.5"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566907200">- Update to version 20190607:
  + List of changes unavailable from upstream.
- Drop Fix-qch-build.patch: incorporate upstream.
- Add a build script missed by upstream tarball
  (preprocess_qch.py).
- New build dependency: python3-premailer.</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1639569600">- Update to version 20211127
  (Switched to PeterFeicht's repository, which has new releases)
- Removed preprocess_qch.py - now bundled in source</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1644062400">- Update to version 20220201:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1660132800">- Update to version 20220730:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1663243200">- Add BuildRequires: python3-cssutils for all openSUSE versions,
  but specifically require version 2.0.0 and above for oS 1550 to
  avoid build failures.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666612800">- Add cppreference-doc-premailer-3.9-compat.patch: Make
  pre-processing compatible with premailer &gt;= 3.9.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1693051200">- Update to version 20230810:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718712000">- Update to version 20240610:
  * Update content from the website, long overdue.</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1731758400">- Update to version 20241110
  * Update content from the website.
  * Various build improvements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1740312000">- Update to version 20250209:
  * Update content from the website.
- Add Recommends: devhelp for %{name}-devhelp package.</changelog>
</package>
<package pkgid="55beaa74983556df2ecceaa7a192412c5160e472d369e8bd3cb8ff50c9ee87d4b28891d9bf48213c775ce5d297669d2476555fc145ce4fad0ced52dd5638cece" name="cppreference-doc-qhelp" arch="noarch">
  <version epoch="0" ver="20250209" rel="bp160.1.5"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566907200">- Update to version 20190607:
  + List of changes unavailable from upstream.
- Drop Fix-qch-build.patch: incorporate upstream.
- Add a build script missed by upstream tarball
  (preprocess_qch.py).
- New build dependency: python3-premailer.</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1639569600">- Update to version 20211127
  (Switched to PeterFeicht's repository, which has new releases)
- Removed preprocess_qch.py - now bundled in source</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1644062400">- Update to version 20220201:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1660132800">- Update to version 20220730:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1663243200">- Add BuildRequires: python3-cssutils for all openSUSE versions,
  but specifically require version 2.0.0 and above for oS 1550 to
  avoid build failures.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1666612800">- Add cppreference-doc-premailer-3.9-compat.patch: Make
  pre-processing compatible with premailer &gt;= 3.9.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1693051200">- Update to version 20230810:
  * No upstream release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718712000">- Update to version 20240610:
  * Update content from the website, long overdue.</changelog>
  <changelog author="Markus Ebner &lt;info@ebner-markus.de&gt;" date="1731758400">- Update to version 20241110
  * Update content from the website.
  * Various build improvements.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1740312000">- Update to version 20250209:
  * Update content from the website.
- Add Recommends: devhelp for %{name}-devhelp package.</changelog>
</package>
<package pkgid="d0e604124cf27167b52b4062c03a8b4605481647d0b5af2b92c4c193c8cb79b21e652190f8a2d723b055f5efb2ead4e79f32bc137258baf8842a4d2de252260a" name="cppunit-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Fix description bsc#1079783</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Fix RPM group of shlib subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1556539200">- Add gcc9-Wdeprecated-copy-1.patch and gcc9-Wdeprecated-copy-2.patch
  in order to fix boo#1121281.</changelog>
  <changelog author="elimat@opensuse.org" date="1594641600">- Version update to 1.15.1
  Portability:
  * Fix Wdefaulted-function-deleted warning with clang
  * Remove old Visual Studio project files
- Changes in version 1.15.0
  * Report (un)signed character as intergers
  * add CPPUNIT_TEST_FIXTURE()
  * add message_to_string trait to allow custom string formatters
  Portability:
  * Fix build with gcc 9
  * Fix various compiler warnings
- Run spec-cleaner
  * remove rpm groups
- Drop patches fixed upstream:
  * gcc9-Wdeprecated-copy-1.patch
  * gcc9-Wdeprecated-copy-2.patch</changelog>
</package>
<package pkgid="331e841b6bf8d54f98b0515bad5e662b0e8f617b0dc249dab7bfa5888d28235a2fc25c8baaac86c2181d74a6d46e24bbd973499da50d3bc7443b6b7a4cf67a20" name="cppunit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Fix description bsc#1079783</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Fix RPM group of shlib subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1556539200">- Add gcc9-Wdeprecated-copy-1.patch and gcc9-Wdeprecated-copy-2.patch
  in order to fix boo#1121281.</changelog>
  <changelog author="elimat@opensuse.org" date="1594641600">- Version update to 1.15.1
  Portability:
  * Fix Wdefaulted-function-deleted warning with clang
  * Remove old Visual Studio project files
- Changes in version 1.15.0
  * Report (un)signed character as intergers
  * add CPPUNIT_TEST_FIXTURE()
  * add message_to_string trait to allow custom string formatters
  Portability:
  * Fix build with gcc 9
  * Fix various compiler warnings
- Run spec-cleaner
  * remove rpm groups
- Drop patches fixed upstream:
  * gcc9-Wdeprecated-copy-1.patch
  * gcc9-Wdeprecated-copy-2.patch</changelog>
</package>
<package pkgid="9a2c8eefdee18655c649f5c6688a43fd5e559491a33d4bd758985004b352dfd647afc008fac994b3a09b05eddc95ae00ec82d03da47940512e296daea8f5d5d6" name="cppunit-devel-doc" arch="noarch">
  <version epoch="0" ver="1.15.1" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1355745600">- Version bump to 1.13.1
  * remove unused patches that are incorporated in the build system
  * cleanup the spec file at least a bit</changelog>
  <changelog author="tbehrens@suse.com" date="1384171200">- Version bump to 1.13.2
  * report dlopen errors now correctly</changelog>
  <changelog author="tchvatal@suse.com" date="1384257600">- Fix baselibs.conf
- Run tests and split documentation in own devel-doc subpackage.
- Remove la file and do not build static lib.</changelog>
  <changelog author="tchvatal@suse.com" date="1384344000">- Fix the desktop file placement and help location within it.</changelog>
  <changelog author="tchvatal@suse.com" date="1384430400">- Avoid collisions with libcppunit.</changelog>
  <changelog author="tchvatal@suse.com" date="1492344000">- Version update to 1.14.0:
  * TestCaller supports any callable that can be put into
    std::function&lt;void()&gt;.
  * CPPUNIT_TEST_PARAMETERIZED executes a test for any value in
    an iteratable.
  * Added new Assertion macros: ASSERT_LESS, ASSERT_GREATER,
    ASSERT_LESSEQUAL, ASSERT_GREATEREQUAL
  * Remove QT test runner</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Fix description bsc#1079783</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Fix RPM group of shlib subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1556539200">- Add gcc9-Wdeprecated-copy-1.patch and gcc9-Wdeprecated-copy-2.patch
  in order to fix boo#1121281.</changelog>
  <changelog author="elimat@opensuse.org" date="1594641600">- Version update to 1.15.1
  Portability:
  * Fix Wdefaulted-function-deleted warning with clang
  * Remove old Visual Studio project files
- Changes in version 1.15.0
  * Report (un)signed character as intergers
  * add CPPUNIT_TEST_FIXTURE()
  * add message_to_string trait to allow custom string formatters
  Portability:
  * Fix build with gcc 9
  * Fix various compiler warnings
- Run spec-cleaner
  * remove rpm groups
- Drop patches fixed upstream:
  * gcc9-Wdeprecated-copy-1.patch
  * gcc9-Wdeprecated-copy-2.patch</changelog>
</package>
<package pkgid="47355a488e736299348dda5f41a1e5c4a0165f0737de4e49eb4aa85202b988c86f0469209fd7ea13ff50d00496fce6e1170c7d892a04431ff405493ae476b55d" name="cpu-x" arch="x86_64">
  <version epoch="0" ver="5.0.4" rel="bp160.1.13"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661428800">- Update to version 4.3.1:
  * Fix CPU usage in System tab when theme is Auto
  * Fix a crash when libpci is upgraded and CPU-X is not rebuild
    against the new shared library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668686400">- Update to release 4.5.2
  * Add support for hybrid CPUs
  * Add support for TAB key and scrolling in NCurses TUI
  * Support for procps-ng 4.0.1rc3
  * Update databases (Intel Tremont, Intel Ice Lake Xeon-D, AMD
    Mendocino, AMD Zen 2 Desktop Kit, AMD Athlon 64 Sherman)</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1678881600">- Add build requires to enable Vulkan support.
- Add cpu-x-update-database.patch: Update database.h to include cpu
  information for Clarkdale (Core i3) and Haswell-EP.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Update to version 4.5.3:
  * Add BAR size for Intel discrete GPU
  * Add total VRAM size via Vulkan API for checking ResizableBAR
  * Update databases (Intel Alder Lake, Intel Raptor Lake-S/P/U)
  * Disable OpenCL support by default
  * Update brand logos for AMD and Intel
  * Make yellow brighter for dark themes in GTK GUI
  * Patch dmidecode to version 3.5.484f893
  * Update 'Technology' label in CPU tab for new node name (like
    Intel 7) and change prefix for technology nodes &gt;= 100nm to µm
- Drop no longer needed cpu-x-update-database.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 5.0.1
  * Add more debug data, including a debug mode for the daemon
  * Add an option to choose temperature unit among Celsius,
    Fahrenheit, Kelvin and Rankine
  * Update databases (AMD Genoa, Intel Sapphire Rapids-WS, AMD
    Phoenix, Intel Alder Lake-U, Intel Apollo Lake)</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1699185600">- Use newer g++, as Leap's default compiler does not provide the
  &lt;filesystem&gt; header.
- Add build requires for glibmm.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700740800">- Update to release 5.0.2
  * Print vendor ID and device ID in Graphics tab for "Device ID"
    label</changelog>
  <changelog author="pallaswept &lt;pallaswept@proton.me&gt;" date="1705320000">- Update to release 5.0.3
- Changed
  * Do not print OpenGL version for unknown user mode driver
  * Reword labels about 'theme' in Settings (#314)
  * Set tooltip for all labels with full text in GTK GUI (#316)
  * Update databases (AMD Storm Peak)
- Fixed
  * Fix active graphic card in GTK GUI (#313)
  * Fix missing AMD GPU power average for some cards (#315)
- Update patch for new version
- Add desktop file</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1714305600">- Update to release 5.0.4
- Changed
  * Update databases (more CPU packages, Intel Meteor Lake-H,
    Intel Emerald Rapids-SP)
  * Patch dmidecode to version 3.6
- Fixed
  * Do not display unavailable DMI fields in Memory tab (#322)
- added %check section to run unit tests</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722340800">- Support libproc2 (aka procps 4): Add pkgconfig(libproc2)
  BuildRequires.</changelog>
</package>
<package pkgid="a4a5d4370536f531f360199a6afc654b28d3dd6a0203c62b2a58a596049a1e19f4168885833aebabfb631e056b6567e720dc269718f4206c55a2e597a7fb1032" name="cpu-x-bash-completion" arch="noarch">
  <version epoch="0" ver="5.0.4" rel="bp160.1.13"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661428800">- Update to version 4.3.1:
  * Fix CPU usage in System tab when theme is Auto
  * Fix a crash when libpci is upgraded and CPU-X is not rebuild
    against the new shared library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668686400">- Update to release 4.5.2
  * Add support for hybrid CPUs
  * Add support for TAB key and scrolling in NCurses TUI
  * Support for procps-ng 4.0.1rc3
  * Update databases (Intel Tremont, Intel Ice Lake Xeon-D, AMD
    Mendocino, AMD Zen 2 Desktop Kit, AMD Athlon 64 Sherman)</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1678881600">- Add build requires to enable Vulkan support.
- Add cpu-x-update-database.patch: Update database.h to include cpu
  information for Clarkdale (Core i3) and Haswell-EP.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Update to version 4.5.3:
  * Add BAR size for Intel discrete GPU
  * Add total VRAM size via Vulkan API for checking ResizableBAR
  * Update databases (Intel Alder Lake, Intel Raptor Lake-S/P/U)
  * Disable OpenCL support by default
  * Update brand logos for AMD and Intel
  * Make yellow brighter for dark themes in GTK GUI
  * Patch dmidecode to version 3.5.484f893
  * Update 'Technology' label in CPU tab for new node name (like
    Intel 7) and change prefix for technology nodes &gt;= 100nm to µm
- Drop no longer needed cpu-x-update-database.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 5.0.1
  * Add more debug data, including a debug mode for the daemon
  * Add an option to choose temperature unit among Celsius,
    Fahrenheit, Kelvin and Rankine
  * Update databases (AMD Genoa, Intel Sapphire Rapids-WS, AMD
    Phoenix, Intel Alder Lake-U, Intel Apollo Lake)</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1699185600">- Use newer g++, as Leap's default compiler does not provide the
  &lt;filesystem&gt; header.
- Add build requires for glibmm.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700740800">- Update to release 5.0.2
  * Print vendor ID and device ID in Graphics tab for "Device ID"
    label</changelog>
  <changelog author="pallaswept &lt;pallaswept@proton.me&gt;" date="1705320000">- Update to release 5.0.3
- Changed
  * Do not print OpenGL version for unknown user mode driver
  * Reword labels about 'theme' in Settings (#314)
  * Set tooltip for all labels with full text in GTK GUI (#316)
  * Update databases (AMD Storm Peak)
- Fixed
  * Fix active graphic card in GTK GUI (#313)
  * Fix missing AMD GPU power average for some cards (#315)
- Update patch for new version
- Add desktop file</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1714305600">- Update to release 5.0.4
- Changed
  * Update databases (more CPU packages, Intel Meteor Lake-H,
    Intel Emerald Rapids-SP)
  * Patch dmidecode to version 3.6
- Fixed
  * Do not display unavailable DMI fields in Memory tab (#322)
- added %check section to run unit tests</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722340800">- Support libproc2 (aka procps 4): Add pkgconfig(libproc2)
  BuildRequires.</changelog>
</package>
<package pkgid="6c3dfd15f2cebab25383278b42c33de6569433d1d262399af57fceea05cd37b4d48aaa143f1110a9bc27aa5b0239033e57a31500756f4594398d58dd24cc68c6" name="cpu-x-fish-completion" arch="noarch">
  <version epoch="0" ver="5.0.4" rel="bp160.1.13"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661428800">- Update to version 4.3.1:
  * Fix CPU usage in System tab when theme is Auto
  * Fix a crash when libpci is upgraded and CPU-X is not rebuild
    against the new shared library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668686400">- Update to release 4.5.2
  * Add support for hybrid CPUs
  * Add support for TAB key and scrolling in NCurses TUI
  * Support for procps-ng 4.0.1rc3
  * Update databases (Intel Tremont, Intel Ice Lake Xeon-D, AMD
    Mendocino, AMD Zen 2 Desktop Kit, AMD Athlon 64 Sherman)</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1678881600">- Add build requires to enable Vulkan support.
- Add cpu-x-update-database.patch: Update database.h to include cpu
  information for Clarkdale (Core i3) and Haswell-EP.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Update to version 4.5.3:
  * Add BAR size for Intel discrete GPU
  * Add total VRAM size via Vulkan API for checking ResizableBAR
  * Update databases (Intel Alder Lake, Intel Raptor Lake-S/P/U)
  * Disable OpenCL support by default
  * Update brand logos for AMD and Intel
  * Make yellow brighter for dark themes in GTK GUI
  * Patch dmidecode to version 3.5.484f893
  * Update 'Technology' label in CPU tab for new node name (like
    Intel 7) and change prefix for technology nodes &gt;= 100nm to µm
- Drop no longer needed cpu-x-update-database.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 5.0.1
  * Add more debug data, including a debug mode for the daemon
  * Add an option to choose temperature unit among Celsius,
    Fahrenheit, Kelvin and Rankine
  * Update databases (AMD Genoa, Intel Sapphire Rapids-WS, AMD
    Phoenix, Intel Alder Lake-U, Intel Apollo Lake)</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1699185600">- Use newer g++, as Leap's default compiler does not provide the
  &lt;filesystem&gt; header.
- Add build requires for glibmm.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700740800">- Update to release 5.0.2
  * Print vendor ID and device ID in Graphics tab for "Device ID"
    label</changelog>
  <changelog author="pallaswept &lt;pallaswept@proton.me&gt;" date="1705320000">- Update to release 5.0.3
- Changed
  * Do not print OpenGL version for unknown user mode driver
  * Reword labels about 'theme' in Settings (#314)
  * Set tooltip for all labels with full text in GTK GUI (#316)
  * Update databases (AMD Storm Peak)
- Fixed
  * Fix active graphic card in GTK GUI (#313)
  * Fix missing AMD GPU power average for some cards (#315)
- Update patch for new version
- Add desktop file</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1714305600">- Update to release 5.0.4
- Changed
  * Update databases (more CPU packages, Intel Meteor Lake-H,
    Intel Emerald Rapids-SP)
  * Patch dmidecode to version 3.6
- Fixed
  * Do not display unavailable DMI fields in Memory tab (#322)
- added %check section to run unit tests</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722340800">- Support libproc2 (aka procps 4): Add pkgconfig(libproc2)
  BuildRequires.</changelog>
</package>
<package pkgid="718659c0f166131bd50158587e0d11f0d0709839f72ebf2b5ec8f242b271f8a7409c9477f8e03df1e25f4d35ea2e55bc96f92f47a93299430f29ec7ab61b0a38" name="cpu-x-lang" arch="noarch">
  <version epoch="0" ver="5.0.4" rel="bp160.1.13"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661428800">- Update to version 4.3.1:
  * Fix CPU usage in System tab when theme is Auto
  * Fix a crash when libpci is upgraded and CPU-X is not rebuild
    against the new shared library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668686400">- Update to release 4.5.2
  * Add support for hybrid CPUs
  * Add support for TAB key and scrolling in NCurses TUI
  * Support for procps-ng 4.0.1rc3
  * Update databases (Intel Tremont, Intel Ice Lake Xeon-D, AMD
    Mendocino, AMD Zen 2 Desktop Kit, AMD Athlon 64 Sherman)</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1678881600">- Add build requires to enable Vulkan support.
- Add cpu-x-update-database.patch: Update database.h to include cpu
  information for Clarkdale (Core i3) and Haswell-EP.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Update to version 4.5.3:
  * Add BAR size for Intel discrete GPU
  * Add total VRAM size via Vulkan API for checking ResizableBAR
  * Update databases (Intel Alder Lake, Intel Raptor Lake-S/P/U)
  * Disable OpenCL support by default
  * Update brand logos for AMD and Intel
  * Make yellow brighter for dark themes in GTK GUI
  * Patch dmidecode to version 3.5.484f893
  * Update 'Technology' label in CPU tab for new node name (like
    Intel 7) and change prefix for technology nodes &gt;= 100nm to µm
- Drop no longer needed cpu-x-update-database.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 5.0.1
  * Add more debug data, including a debug mode for the daemon
  * Add an option to choose temperature unit among Celsius,
    Fahrenheit, Kelvin and Rankine
  * Update databases (AMD Genoa, Intel Sapphire Rapids-WS, AMD
    Phoenix, Intel Alder Lake-U, Intel Apollo Lake)</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1699185600">- Use newer g++, as Leap's default compiler does not provide the
  &lt;filesystem&gt; header.
- Add build requires for glibmm.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700740800">- Update to release 5.0.2
  * Print vendor ID and device ID in Graphics tab for "Device ID"
    label</changelog>
  <changelog author="pallaswept &lt;pallaswept@proton.me&gt;" date="1705320000">- Update to release 5.0.3
- Changed
  * Do not print OpenGL version for unknown user mode driver
  * Reword labels about 'theme' in Settings (#314)
  * Set tooltip for all labels with full text in GTK GUI (#316)
  * Update databases (AMD Storm Peak)
- Fixed
  * Fix active graphic card in GTK GUI (#313)
  * Fix missing AMD GPU power average for some cards (#315)
- Update patch for new version
- Add desktop file</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1714305600">- Update to release 5.0.4
- Changed
  * Update databases (more CPU packages, Intel Meteor Lake-H,
    Intel Emerald Rapids-SP)
  * Patch dmidecode to version 3.6
- Fixed
  * Do not display unavailable DMI fields in Memory tab (#322)
- added %check section to run unit tests</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722340800">- Support libproc2 (aka procps 4): Add pkgconfig(libproc2)
  BuildRequires.</changelog>
</package>
<package pkgid="12fa0f8b3bac2444ac74c5bd42f45e5b139c4278a87a3321677f2804d3ff4ad2e99c9d5a65a00ff845afeeea61939b4902498adb663a1589bb7293f8ef7cefa4" name="cpu-x-zsh-completion" arch="noarch">
  <version epoch="0" ver="5.0.4" rel="bp160.1.13"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661428800">- Update to version 4.3.1:
  * Fix CPU usage in System tab when theme is Auto
  * Fix a crash when libpci is upgraded and CPU-X is not rebuild
    against the new shared library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668686400">- Update to release 4.5.2
  * Add support for hybrid CPUs
  * Add support for TAB key and scrolling in NCurses TUI
  * Support for procps-ng 4.0.1rc3
  * Update databases (Intel Tremont, Intel Ice Lake Xeon-D, AMD
    Mendocino, AMD Zen 2 Desktop Kit, AMD Athlon 64 Sherman)</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1678881600">- Add build requires to enable Vulkan support.
- Add cpu-x-update-database.patch: Update database.h to include cpu
  information for Clarkdale (Core i3) and Haswell-EP.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683288000">- Update to version 4.5.3:
  * Add BAR size for Intel discrete GPU
  * Add total VRAM size via Vulkan API for checking ResizableBAR
  * Update databases (Intel Alder Lake, Intel Raptor Lake-S/P/U)
  * Disable OpenCL support by default
  * Update brand logos for AMD and Intel
  * Make yellow brighter for dark themes in GTK GUI
  * Patch dmidecode to version 3.5.484f893
  * Update 'Technology' label in CPU tab for new node name (like
    Intel 7) and change prefix for technology nodes &gt;= 100nm to µm
- Drop no longer needed cpu-x-update-database.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1698840000">- Update to release 5.0.1
  * Add more debug data, including a debug mode for the daemon
  * Add an option to choose temperature unit among Celsius,
    Fahrenheit, Kelvin and Rankine
  * Update databases (AMD Genoa, Intel Sapphire Rapids-WS, AMD
    Phoenix, Intel Alder Lake-U, Intel Apollo Lake)</changelog>
  <changelog author="Manfred Hollstein &lt;manfred.h@gmx.net&gt;" date="1699185600">- Use newer g++, as Leap's default compiler does not provide the
  &lt;filesystem&gt; header.
- Add build requires for glibmm.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700740800">- Update to release 5.0.2
  * Print vendor ID and device ID in Graphics tab for "Device ID"
    label</changelog>
  <changelog author="pallaswept &lt;pallaswept@proton.me&gt;" date="1705320000">- Update to release 5.0.3
- Changed
  * Do not print OpenGL version for unknown user mode driver
  * Reword labels about 'theme' in Settings (#314)
  * Set tooltip for all labels with full text in GTK GUI (#316)
  * Update databases (AMD Storm Peak)
- Fixed
  * Fix active graphic card in GTK GUI (#313)
  * Fix missing AMD GPU power average for some cards (#315)
- Update patch for new version
- Add desktop file</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1714305600">- Update to release 5.0.4
- Changed
  * Update databases (more CPU packages, Intel Meteor Lake-H,
    Intel Emerald Rapids-SP)
  * Patch dmidecode to version 3.6
- Fixed
  * Do not display unavailable DMI fields in Memory tab (#322)
- added %check section to run unit tests</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722340800">- Support libproc2 (aka procps 4): Add pkgconfig(libproc2)
  BuildRequires.</changelog>
</package>
<package pkgid="a8f45797ff574d3037ba1530c3ce2d06ca0a558729cf43ddc6c0d9d9a25e6093fd6780a666a0eedcc0b0e1563e3d2d74bf91a22dc81d2ff9969fc885f33e1109" name="cpufetch" arch="x86_64">
  <version epoch="0" ver="1.06" rel="bp160.1.11"/>
  <changelog author="Taekyung Kim &lt;gnuykeat.mik@gmail.com&gt;" date="1711800000">- Initial packaging with version 1.05</changelog>
  <changelog author="Taekyung Kim &lt;gnuykeat.mik@gmail.com&gt;" date="1712059200">- Changed wrong source url</changelog>
  <changelog author="RN &lt;R_Nik_C@proton.me&gt;" date="1726660800">- Update to version 1.06:
  * [ARM] Added support for inferring the SoC from the uarch
  * [ARM] Added support for inferring the SoC from PCI devices
  * [ARM] Added support for SVE detection
  * [X86] Significantly improved support for old x86 CPUs
  * [X86] Added support for Hygon CPUs
  * [ARM and X86] Added support for measuring max CPU frequency
  * [ARM and X86] Added `--measure-max-freq` option to manually
    trigger CPU max frequency measurement
  * [All] Added support for NO_COLOR</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1727784000">- Add upstream patch to fix arm %check:
  * cpufetch-aa94389.patch</changelog>
</package>
<package pkgid="071c400c63b150ad3c745cb48f7744c1e830cfccfa206adfde47adf998f625199a25618b73ffaddb9869ae1dd9b5e28b84d5cae5e67a0cb3abf4706f7f886a92" name="cpuid" arch="x86_64">
  <version epoch="0" ver="20240716" rel="bp160.1.8"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1602158400">- Update to 20201006:
  Added "Sapphire Rapids", "Golden Cove", "Rocket Lake", "Cato",
  14nm "Zen", "Tiger Lake-U B0", "Elkhart Lake B0", "Alder Lake",
  "Comet Lake", "Picasso A1", "Renoir A1", "Zhaoxin KaiXian KX-6000",
  as well as some additional decoding of supported features.
  [cpuid-20201006.src.tar.gz, jsc#sle-13189]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636977600">- update to 20211114:
  * Many updated and added identified CPU models and variants
  * Updated hypervisor support</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645704000">- update to 20220224:
  * Support for AMD Rembrandt E1
  * Add hypervisor+4/eax (Xen) expanded destination id bit
  * Correction for Alder Lake, Rocket Lake decoding
  * Multiple detection and decodings updated</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1660392000">- Update to release 20220812
  * Corrected (synth) decoding for (0,6),(8,6) Intel Snow
    Ridge/Parker Ridge.
  * Added 8000000a/edx X2AVIC flag
  * Generalized (0,6),(8,14),9,YP stepping case to include
    Pentium 4425Y, from instlatx64 sample.
  * Added support for hypervisor+3/ecx (Microsoft) flags.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1665662400">- Update to release 20221003
  * Added synth decoding for AMD Ryzen (Phoenix E0, Storm Peak A1)
  * Added synth &amp; uarch synth decoding for
  * (0,6),(11,5) Intel Meteor Lake
  * (0,6),(11,6) Intel Grand Ridge (Crestmont)
  * (0,6),(11,14) Intel Granite Rapids
  * Renamed 7/0/eax enh hardware feedback to just "Thread
    Director".
  * Added 7/1/eax instructions.
  * Added 0x12/0/eax SGX ENCLU EDECCSA flag.
  * Added 0x23 Architecture Performance Monitoring Extended leaf
    decoding.
  * Corrected AVX512IFMA description: integer FMA, not just FMA.
- Release 20220927
  * Added synth decoding for (10,15),(6,1) Raphael
  * Fixed title for AMD 0x8000001a leaf: Performance Optimization
    identifiers.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1670241600">- Update to release 20221201
  * Clarified synth decoding for Intel Xeon D-1700.
  * Added uarch &amp; synth decoding for AMD 4800S Desktop Kit, based on
    instlatx64 sample.
  * Added uarch decoding for AMD Genoa A1, based on instlatx64 sample
  * Added uarch decoding for (0,6),(12,15) Emerald Rapids, from LX*.
  * Added synth &amp; uarch decoding for (10,15),(10,1) Bergamo.
  * Added 0x8000000a/edx bits: ROGPT, VNMI, IBS virtualization.
  * Added 0x8000001b/eax bit: IBS L3 miss filtering support.
  * Added 0x8000001f/eax bits: RMPQUERY instruction support,
    VMPL supervisor shadow stack support, VMGEXIT parameter support,
    virtual TOM MSR support, IBS virtual support for SEV-ES guests,
    SMT protection support, SVSM communication page MSR support,
    VIRT_RMPUPDATE &amp; VIRT_PSMASH MSR support.
  * Added 0x80000020/0/ecx bit: L3 range reservation support.
  * Added 0x80000021/eax bits: automatic IBRS,
    CPUID disable for non-privileged.
  * Added 0x80000022/eax bit: AMD LBR &amp; PMC freezing.
  * Added 0x80000022/ebx field: number of LBR stack entries.
  * Added 0x80000023 leaf: Multi-Key Encrypted Memory Capabilities.
  * Added 0x80000026 leaf: AMD Extended CPU Topology.
  * cpuid.c: use lseek64 and cpuset_setaffinity, Added 0x80000022/eax
    AMD LBR V2 flag, from LX*.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- updated to 20230120:
  * Intel's 13th Generation Core datasheet provides stepping names as
    well as numbers!  So:
  * cpuid.c: Added synth decoding for (0,6),(11,7) Raptor Lake B0 stepping.
  * cpuid.c: Added synth decoding for (0,6),(11,15) Raptor Lake C0
    steppings, and clarified case for unknown stepping.
  * cpuid.man: Added 743844: 13th Generation Core datasheet.
  * cpuid.c: Fixed (0,6)(12,15) synth typo: Emearld Rapids.
  * cpuid.c: Added 6/eax IA32_HW_FEEDBACK_THREAD_CONFIG bit 25.
  * cpuid.c: Added 7/0/edx SGX-KEYS: SGX attestation services.
  * cpuid.c: Clarified 7/0/edx IA32_MCU_OPT_CTRL SRBDS mitigation MSR.
  * cpuid.c: Clarified 7/0/edx IA32_TSX_FORCE_ABORT MSR.
  * cpuid.c: Added 7/1/edx CET_SSS: shadow stacks w/o page faults.
  * cpuid.c: Added several 7/2/edx bits.
  * cpuid.c: In 0xd/0/eax, corrected CET_U &amp; CET_S, which were IA32_XSS.
  * cpuid.c: In 0xd/0/eax, removed the IA32_XSS bits, which aren't
    relevant for XCR0.
  * cpuid.c: For 0xd/1/ecx, enumerate the IA32_XSS bits instead of a
    hex bitmask.
  * cpuid.c: For 0xd, added IA32_XSS PASID state (couple places).
  * cpuid.c: Renamed 0x1a: Native Model ID.
  * cpuid.c: Added synth &amp; uarch decoding for (0,6),(11,15) Raptor Lake
    from MSR_CPUID_table*.
  * cpuid.c: Added synth decoding for (0,6),(9,7),5 Pentium Gold G7400,
    based on instlatx64 sample.
  * cpuid.c: Added rudimentary synth decoding for future (0,6),(12,15)
    Emerald Rapids CPUs.
  * cpuid.c: Added 7/1/eax LASS: linear address space separation.
  * cpuid.c: Corrected 0x18/n/edx maximum number of addressible IDs, which
    should use minus-one notation.
  * cpuid.c: Certain leaves cannot be displayed correctly in isolation,
    i.e. without information about other leaves saved in the stash.  For
    example, the display for leaf 3 uses bits saved from leaf 1.  If the
  - l/--leaf option is used to restrict cpuid to reading only a single
    leaf, such leaves now are displayed as raw hex, rather than with
    incorrect information.  This is handled by passing a NULL stash to
    print_reg() and below, and by many new checks for a NULL stash.
  * cpuid.c: Updated cache associativity strings used in 0x80000006 and
    0x80000019 leaves to use value ranges, as in AMD docs.
  * cpuid.c: Fixed mistake in AMD L3 range reservation support: it's in
    0x80000020/0 register EBX, not ECX.
  * cpuid.c: Added 0x80000026/0/edx extended APIC ID.
  * cpuid.c: Added synth &amp; uarch decoding for (10,15),(1,1) Genoa, from
    AMD 57095 revision guide.
  * cpuid.man: Added AMD 57095 revision guides, and some older guides that
    I'd forgotten.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1681473600">- Update to release 20230406:
  * Support APIC bit fields for the newest 4 topology layers:
    module, tile, die, die group.
  * Support leaf 0xb method for AMD/Hygon.
  * Added prelim Bergamo A1 stepping from sample.
  * Added AMX-COMPLEX instructions, UC-lock disable,
    non-contiguous 1s value support, event logging supported
    bitmap.
  * Update CPUID utility with new feature bits as documented in
    the AMD Processor Programming Reference for Family 19h and
    Model 11h: extended LVT offset fault cange, enhanced
    predictive store forwarding, FSRS, FSRC,
    FsGsKernelGsBaseNonSerializing, number of available UMC PMCs,
    bitmask representing active UMCs.
  * Added (synth) decoding for Sapphire Rapids D &amp; E0 steppings
  * Improved (synth) decoding for Scalable 3rd Gen Xeons to Ice
    Lake-SP, for Intel N-Series, for Raptor Lake-S/HX/P, for
    Raptor Lake-H/U/P.
  * Differentiate (synth) &amp; (uarch synth) for (0,6),(11,14)
    Alder Lake-N based on core type.
  * Differentiate Lakefield P-cores from Tremont E-cores.
  * Added (4th Gen) to the (synth) description of AMD EPYC Genoa.
  * Added (uarch synth) decoding for AMD Ryzen (Phoenix E0)
  * Added PkgType decoding for AMD Family 19h CPUs: Vermeer,
    Cezanne/Barcelo, Raphael, and Phoenix, based on their
    respective PPPRs.
  * Added Alder Lake Core names: i*-12000.
  * Decode Xen tsc mode.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1687348800">- Update to release 20230614
  * Improved (synth) identification for Intel Xeon Scalable (3rd
    Gen) (Cooper Lake A0), Intel Xeon D-1700/2700 (Ice Lake-D),
    Intel Pentium Gold 8500 series, pure Atom x7000E, Atom C1100
    Arizona Beach.
  * Made the (simple synth) fields non-default. The (simple synth)
    fields still are available, but only with the -S/--simple
    option.
- Update to release 20230505
  * Fixed CPU counts for higher levels
    not dividing out counts from lower levels.
  * Differentiate Core i3-N300 N-Series from ordinary N-Series.
  * Added hypervisor+4/eax bit 21: use hypercalls for MMIO config
    space I/O, based on LX*.
  * Added (synth) decoding for Xeon W version of Sapphire Rapids,
    Meteor Lake-M B0.
  * Added (synth) &amp; (uarch synth) Emerald Rapids family: Raptor
    Cove, and Granite Rapids family: Redwood Cove.</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1722859200">- Update to release 20240716
  * cpuid.c: For AMD Zen CPUs, overhauled uarch &amp; synth decoding to
    determine the CPU model from only the extended model &amp; high bit of the
    model field.  Also, determine the stepping (revision) mechanically
    from the low-order 3 bits of the model and the stepping number.
    This should correctly identify retail Zen 5 Ryzen's.  This also
    corrects some stepping bugs from the Zen 1 era.
- Update to release 20240709
  * cpuid.c: Added synth decoding for Hygon Dhyana B1 &amp; C2.  Still no
    information on a uarch name for these.
  * cpuid.c: Added uarch synth decoding for (0,6),(5,5),11 Cooper Lake.
    The synth decoding was already present.  Its absence from
    decode_uarch_intel was just an oversight.
  * cpuid.c: Fixed division-by-zero error in decode_mp_synth Intel leaf
    1/4 (zero fallback).  This is meant for old, incomplete cpuid -r
    dumps, but even for hand-crafted dumps, determining 0 cores and then
    dividing by that 0 is unacceptable.
- Update to release 20240330
  * cpuid.c: Added 0x23/1 sub-header: Architecture Performance Monitoring
    Extended Counters Supported Bitmaps (0x23/1), and simplified fields.
  * cpuid.c: Added 0x23/2 sub-header: Architecture Performance Monitoring
    Extended Auto Counter Reload (ACR) Bitmaps (0x23/2), expanded on
    existing field descriptions, and added "can cause reloads" fields.
  * cpuid.c: Added uarch decoding for (11,15),(1,0), which is mentioned
    with (11,15),(0,0) in the title of 58088 AMD 1Ah Models 00h-0Fh and
    Models 10h-1Fh ACPI v6.5 Porting Guide.
  * cpuid.c: Expanded br.xeon test to include brands with "XEON", and
    br.scalable to include "BRONZE", "PLATINUM", etc. (all caps), based on
    Emerald Rapids (engr?) sample.  I don't know if this is a change Intel
    will use moving forward, or a quirk of engr samples, but checking for
    it is harmless enough.
- Update to release 20240324
  * cpuid.c: Updated (0,6),(11,7) to include Core i*-14000.  Some CPUs
    having this branding, and it's not clear what's different from the
    Core i*-13000 versions.</changelog>
</package>
<package pkgid="f8f4a8d40f32d5fedf0046650dd998528ad1ebb362af84967cb438957a0020fe0fe1cbe64730eb47db56b4e3a42cbcc754a7833eea45b20d1cbbbceb214e691d" name="cpuinfo" arch="x86_64">
  <version epoch="0" ver="0~git1720582619.ca67895" rel="bp160.1.10"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1721390400">- initial package.
  We don't have any version yet upstream, so using version and soname 0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721908800">- Update descriptions
- Use normal SRPM name base for devel subpackage and
  require devel subpackage to have a matching library package
- Ship unpackaged cpuid-dump on i586</changelog>
</package>
<package pkgid="bc7ca51a3b8268045cfc87313d3b876faf949278f1eeefc40b2cc404af3433e421f29dc95a28d0fd649434b204d5a5a6eabe0ca1174a75de60af660a33351e59" name="cpuinfo-devel" arch="x86_64">
  <version epoch="0" ver="0~git1720582619.ca67895" rel="bp160.1.10"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1721390400">- initial package.
  We don't have any version yet upstream, so using version and soname 0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1721908800">- Update descriptions
- Use normal SRPM name base for devel subpackage and
  require devel subpackage to have a matching library package
- Ship unpackaged cpuid-dump on i586</changelog>
</package>
<package pkgid="2867db318e3e2e98f4d624b7e1cf2740179f33f88164b57f6c2a24c16d95fda3cc303a3aaad8e3de6e05c60c7ea3d2f5483ad475c64f1165663de510708a1cbf" name="cpulimit" arch="x86_64">
  <version epoch="0" ver="3.1" rel="bp160.1.12"/>
  <changelog author="malcolmlewis@opensuse.org" date="1374667200">- Updated to version 1.9:
  + Added --kill (-k) and --restore (-r) flags to allow target
    processes to be killed and restored rather than simply
    throttled.
- Updates from version 1.8:
  + When displaying verbose output, cpulimit now redisplays the
    column headers every 20 lines.
  + Fixed limiting CPU usage on multicore machines when the desired
    usage limit is great than 100%.</changelog>
  <changelog author="andrea@opensuse.org" date="1419595200">- new upstream version 2.2
  + Escaped double-dashed in manual page to avoid
  warnings from Debian check tool.
  + Added -s --signal flag. This flag allows the user to
  specify an alternative signal to send a watched process
  when cpulimit terminates. By default we send SIGCONT.
  The -s flag can accept a number (1-35) or a written
  value such as SIGCONT, SIGSTOP, SIGINT, SIGTERM.
- from version 2.1
  + Added the --quiet (-q) flag to make
  limitcpu run silently
  + Make sure error messages are printed to stderr.
  + Placed source code in Subversion (svn) repository.
  Accessable using the SVN checkout command. For
  details, please see the README file.
- from version 2.0
  + Added the -- flag to make sure child processes
  run with command line flags would not confuse
  cpulimit.
  + Corrected output of child process name in verbose mode.
- added cpulimit-2.2-do_not_forget_version.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- new upstream version 2.5
  * Added some protection against causing a fork bomb when the
    throttled process is a parent to LimitCPU.
- includes 2.4
  * Introduced ability to watch children of the target process. This
    means forks of the process we are throttling can also be
    throttled, using the "-m" or "--monitor-forks" flags.
- includes 2.3
  * Applied patch to man page which fixes -s description.
  * Added --foreground, -f flag for launching target programs in the
    foreground. LimitCPU then waits for the target process to exit.
    Should be useful in scripts.
- rebase cpulimit-2.2-do_not_forget_version.patch
- cleanup with spec-cleaner</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598356800">- update to 2.6:
  * Fixed indentation to avoid compiler warnings. No functional change.
  * Updated manual page to warn against using -m on a script.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640001600">- update to 2.7:
  * Fixed compiler warnings regarding string lengths.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672315200">- update to 2.8:
  * Made exit message when child signal is caught only show up
  when in verbose mode.
  * Adjusted the way the VERSION value is assigned in the Makefile.
  CFLAGS was being overwritten by Debian's build process.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1682596800">- update to 2.9:
  * When counting CPU cycles (jiffies) we now use
    a "long" type instead of "int" to avoid running
    out of space when tracking on-running processes.</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1684065600">- update to 3.0:
  * Fix an important bug in LimitCPU when the program is
    monitoring both a program and its child processes via the "-m"
    flag. In the past, it was possible LimitCPU would fail to spawn
    new instances to monitor child processes if LimitCPU was not in
    the user's default path. In other words, if we were launched
    from /usr/local/bin and this directory was not in the default
    path, then child processes might not be monitored. And the
    failure would happen silently.
  * Now LimitCPU will try to do a better job of launching new
    monitors for child processes and it will print a warning
    about any errors when run in verbose mode.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1716206400">- update to 3.1:
  * The new version fixes an issue with monitoring a target process which
    has multiple children and a low CPU limit throttle. In some cases this
    situation could lead to LimitCPU crashing. This has been fixed and the
    monitoring of children processes has been made slightly more efficient.</changelog>
</package>
<package pkgid="3fce0cf6dfbae97d558b33672f1272eb53d5c7ef97c803b034cb098dbbb4aef76d8a3a62ff1293c803fd0242e5124658c0d2e97a622e52121ca4b887a8bceafe" name="cpupower" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="44906165195bd92ebf0afe6e217bc143efad53ab38ddd7ca8cc93f50c104e468ab2f2ac6d58daef9f544d470c09e9e44cfb276c02987dd387f36364e81862d9b" name="cpupower-bash-completion" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="6cdb7c1c67af4f053332fb9c9e2fe424007015bf8d1c8bd2c18ab4764c92ca8c24bb8c2eae08a248f5ac8df32bdab6916b50edfbf4b60a7364b15caf9ddc9174" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="e457f1092500e166513c0f0ed58c088355c0953412204422117b3f1588c844ec0d6549848e91b9351dbc32424c2eaf246e38506f23a5e861d093a2a96f2d3899" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="63ca59b33aff46b6998c60fa5d673b58416c84ac8c392610d607e58a94494654bf72cda1d6936368789edf548ed42b34dd741928b7611447021d0fc4fcc58fdc" name="cpupower-lang" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="070cd2aadf6ef3cbb6963aefbf7b578a7107b35676548a9bcafcdc00b8027d55810eb5d2ee71c86f9d143cfd65cc7f5aea3ffc00daf18c7614c156f4fddbc151" name="cpupower-rebuild" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="trenn@suse.de" date="1713182400">- Parse turbostat and intel-speed-select version from kernel sources and
  add them to %description</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1728043200">- Upstream fixed lib default installation path in 3a5bb5066f4c
  [- cpupower_exclude_kernel_Makefile.patch]</changelog>
  <changelog author="trenn@suse.de" date="1741262400">- Not also adopt the kernel version, but also the exact build release
  By that it is finally possible to find out on which exact (kernel)
  sources the cpupower tools are based on.
  D amd_do_not_show_amount_of_boost_states_if_zero.patch
-&gt; This was only needed for an old Dell test env, will not go mainline
  and can vanish now.</changelog>
  <changelog author="trenn@suse.de" date="1742299200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.</changelog>
</package>
<package pkgid="b304888f40066f3e9b3ec424d24a6195b26b3a76afc38eebe427bfd96bc421b9ae508ecacd9967622969fa626f1d6ec77c7008a6519abdde2850c1f10d8ed091" name="cpuset" arch="noarch">
  <version epoch="0" ver="1.6.2" rel="bp160.1.10"/>
  <changelog author="idonmez@suse.com" date="1452686400">- Cleanup spec file
- Use source url</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="lpechacek@suse.com" date="1490356800">- Fix SLE 11 build in Devel project</changelog>
  <changelog author="lpechacek@suse.com" date="1518091200">- Update to 02ef9e09e1da, release v1.6pre1 (bsc#1079868)</changelog>
  <changelog author="tchvatal@suse.com" date="1522152000">- Do not require -devel but use only setuptools module
- Use ~ in version as without it the package is newer than
  release 1.6
- Reduce the compat py2/py3 choicer, SLE12 can be python3</changelog>
  <changelog author="lpechacek@suse.com" date="1544529600">- Update to 6c46d71a1c6e, release v1.6</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544529601">- Use noun phrase in summary.</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1636718400">- Add cpuset-1.6-Fix_invalid_parentheses.patch to fix
  a semantic error. (bsc#1191418)</changelog>
  <changelog author="Michal Koutn&#xFD; &lt;mkoutny@suse.com&gt;" date="1690977600">- Update to 394c8b0, release v1.6.1
  * Fix --syset typo (bsc#1210468)
  * fix doc typo (bsc#1210468)
- Remove cpuset-1.6-Fix_invalid_parentheses.patch: in upstream tarball</changelog>
  <changelog author="Michal Koutn&#xFD; &lt;mkoutny@suse.com&gt;" date="1700568000">- Update to 4f80263, release v1.6.2
  * Update descriptor to match any python 3.x version
  * Remove python2.x specific paths in the spec file after #33 got merged
  * Update the github project location to github.com/SUSE/cpuset
  * Remove Python 2 support
  * cpuset.spec: Update source URL</changelog>
</package>
<package pkgid="96d7df4becf4837b4c76af3a855b3c22c6e3aa6dc9098387135e9aec2fb8879f192dd65862c0d1be670e45224b384327947bbfed7f161b20a875d49304535005" name="cracklib" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="0e9703474ce1acadb768d85a43d372987471512bb028267059c48f501bff956984fdd969028aca7338dc4ae7c0eab1d86d85e5c61a4fbb0c49976705cf50a4b8" name="cracklib-devel" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="170d450f2136e3bba3b070c8b5b327949314b13262406c2dd128203b77500d3ef0fe6cd954780112457516e19b1557ea6550b5acc636c73b06581ef6d9ce4ecf" name="cracklib-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="040298fa22a0bd02504636e5eff4603ed4481b79a02db938e196c0a197ef0349e1d2e3ea4625e4946a4e264904415c579d645a77d5194af7b815d86f400e7579" name="cracklib-dict-full" arch="x86_64">
  <version epoch="0" ver="2.8.12" rel="160000.2.2"/>
  <changelog author="mc@suse.de" date="1177329600">- full cracklib dictionary - splitted out from cracklib</changelog>
  <changelog author="mc@suse.de" date="1202817600">- update common password files</changelog>
  <changelog author="mc@suse.de" date="1213963200">- compress password database</changelog>
  <changelog author="mc@suse.de" date="1214568000">- update wordlist
- add german wordlists</changelog>
  <changelog author="mc@suse.de" date="1220270400">- do not zip the dict by default. A check takes too long.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mc@suse.de" date="1344513600">- correct License to LGPL-2.1</changelog>
  <changelog author="sean@suspend.net" date="1538136000">- Added additional dictionary libraries
  * http://downloads.skullsecurity.org/passwords/john.txt.bz2
  * http://downloads.skullsecurity.org/passwords/cain.txt.bz2
  * http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt.bz2
  * http://downloads.skullsecurity.org/passwords/twitter-banned.txt.bz2</changelog>
</package>
<package pkgid="c63357d0ba497ecced48919e51e078a73c7024bc520d413468b111b2f2851e85d94bbe509d48f41e29073992f813a5200182049baac4691ea606f65898dcd815" name="cracklib-dict-small" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.</changelog>
  <changelog author="pgajdos@suse.com" date="1636027200">- %check: really test the package [bsc#1191736]</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to 2.9.8:
  * rules: Drop using register keyword
  * add exec perms
  * translation updates
  * Use what's in the build environment and use a current autoconf
  * util/Makefile.am: fix link with lintl
  * Force grep to treat the input as text when formatting word files</changelog>
  <changelog author="pgajdos@suse.com" date="1686139200">- version update to 2.9.11
  * Merge fedora patches and man pages
  * Fix missing files in dist tarball, other automake fixes (Leandro Nini)
  * Fix error handling during build of dictionary (yixiangzhike)
  * Fix to localization support (A. Wilcox, nekopsykose)
  * Fix to test utilities (Alexander Kanavin)
  * Translation updates from weblate
  * python: adjust include path for builddir by @thesamesam in #61
  * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63
- modified patches
  % 0002-cracklib-2.9.2-visibility.patch (refreshed)</changelog>
</package>
<package pkgid="6a75513eb9a25d2891035de8831133ef199ae54dc497670ce5a52ea77951a98361ff2095b958ed26f8111863ef5211244984a5ab1972b332ca195f6e66168e35" name="cramfs-tools" arch="x86_64">
  <version epoch="0" ver="2.1" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1598961600">- Initial package, version 2.1
- Add patch:
  * cramfs-tools-obey-cflags.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="dbf4d8e0771cebd3212a088dad4b8652591c1e207ce8639427f5e87f3d627c286562609620c95a5b0ff6ebbaa646cd63a8d0488261171bf7679e0091106518bc" name="crane" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="bp160.1.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
</package>
<package pkgid="73df48a9c6de2b522d042696a3114ec9fbf237ae2cfd6dd865abc92f2992d2806a88ead7f0cec65a65d109834a1997a9700c2950863fde677121e502f3be7be0" name="crane-bash-completion" arch="noarch">
  <version epoch="0" ver="0.20.1" rel="bp160.1.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
</package>
<package pkgid="6624555831ed971bebeca13e651fc2be8b58d009da4d940931144b367b9947c44a4117ba07c34da6316434f0cb7ed75b1e52bbf6ec13a5f10110630dab93f1bf" name="crane-fish-completion" arch="noarch">
  <version epoch="0" ver="0.20.1" rel="bp160.1.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
</package>
<package pkgid="d66364e314b47f3daa96c5fb2be047ece4e55d99ae19986dc5e457919cbb8dc21bb895a98e8678c4be2a49c7cb0d3e6508b00090a2aaed818333009ce7c1a772" name="crane-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.20.1" rel="bp160.1.8"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1666353600">- Initial package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670932800">- avoid file conflict on SLE15 and other older distributions</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672660800">- update to 0.12.1:
  * Fix context.DeadlineExceeded comparison (#1488)
  * Fix missing body.Close() in bearer auth (#1482)
  * bump version of slsa generator (#1468)
  * crane: add catalog argument use annotation (#1473)
  * k8schain: Log and proceed if secret or SA are not found</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700913600">- update to 0.16.1:
  * bump deps using ./hack/bump-deps.sh
  * Allow crane to export schema 1 images
  * fixed a goroutine leak
  * retry HTTP 522 errors by default
  * Limit size of manifest
  * Add crane auth token
  * Bump codecov/codecov-action from 3.1.3 to 3.1.4
  * Pass scopes through crane auth token
  * fix: add bounds checking to addendum layer mutations to
    prevent panic
  * Surface better error messages in crane index
  * crane: add missing name option in crane index commands
  * crane: Respect cmd.OutOrStdout
  * Make ErrSchema1 checkable via errors.Is()
  * Don't load into daemon if the image already exists
  * add --blobs-to-disk to 'crane registry serve'
  * Correct crane registry help text
  * Allow concurrent blob Sets, use RWMutex
  * Use RWLock, limit scope of locking, write digest first
  * Let the filesystem handle atomicity
  * Don't try cross-origin mounting against dockerhub
  * Drop localhost to support crane registry serve in a container
  * Return OCI Index content-type for referrers response
  * Allow crane edit to generate non-image artifacts
  * Allow setting Content-Type in crane edit manifest
  * Avoid v1.Manifest in crane edit config (#1583)
  * Support for OCI 1.1+ referrers via API (#1546)
  * Support for OCI 1.1+ referrers via fallback tag
  * Update descriptor "data" field (when valid) during
    "crane edit config" (#1584)
  * Update release.yml (#1540)
  * authn: also read mount secrets (#1560)
  * bump deps using ./hack/bump-deps.sh (#1592)
  * crane: add --flatten for index append (#1566)
  * crane: add serve subcommand (#1586)
  * crane: support --omit-digest-tags in crane ls
  * fix(mutate): also set timestamps only present in
    some formats (#1550)
  * fix: Fix the crane release url and add more steps
  * hash: use generic instantiation (#1538)
  * replace manual slsa-verifier installation with
    action (#1585)
  * skip tls verification if default transport is used
    with insecure option (#1559)
  * tarball: pass imageToTags (#1563)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1703678400">- update to 0.17.0:
  * Validate index architectures match children
  * Set Content-Length for blob uploads
  * Don't wrap DefaultKeychain with refreshes
  * Build releases with Go 1.21
  * fix: mimic oci-layout in diskblobhandler
  * tag: add command explanation to the long help
  * feat: implement gc command
  * feat: allow port and disk path to be overriden</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1721304000">- update to 0.20.1:
  * Create `remote.Push`
- update to 0.20.0:
  * Referrer API must return correct Content-Type
  * POTENTIALLY BREAKING: Restore blind-write to remote.Put
- update to 0.19.2:
  * Add JSON marshalling funcs for Digest.
  * registry: Implement Range requests for blobs
  * Support podman auth file REGISTRY_AUTH_FILE.
  * feat: crane mutate platform
  * Add Context support to auth methods
  * Fix windows race condition when writing image with duplicate
    layers
  * Add -O shorthand for --omit-digest-tags to crane.
- update to 0.19.1:
  * Bump golang.org/x/net from 0.10.0 to 0.17.0 in
    /pkg/authn/k8schain
  * Bump golang.org/x/ packages
- update to 0.19.0:
  * Work around docker v25 tarballs
- update to 0.18.0:
  * fix: goreleaser config
  * Always print pushed digest in crane push</changelog>
</package>
<package pkgid="b338da595e2e5326a7b45d1a1f53b921dda34b7085f813d22d2c556ae12f8e8a246e93838a93c1ab4f1e658fc1b721acf0670853299772589722c829335e69ca" name="crash" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.3"/>
  <changelog author="dmair@suse.com" date="1692100800">- crash has it's own definitions of some glibc functions, including
  strlcpy(), length limited string copy. In glibc 2.38 the second
  argument is const char *, in crash it is char *. The argument is
  the source string to copy from and shouldn't be modified.  crash
  uses the glibc version in some places, it's own in others and the
  declarations are incompatible resulting in build errors. Added
  * crash-fix-glibc-redefs.patch
  to make the crash declaration of strlcpy() match the glibc 2.38
  version. It may also need to be made product version conditional
  but it should fix Factory.</changelog>
  <changelog author="dmair@suse.com" date="1695211200">- On initialization crash verifies the core based on the text
  referenced by the linux_banner symbol in the supplied core. It
  chooses how to get the address of the text based on the symbol
  type decoded with gdb. For some compressed kernels with an
  accessible debuginfo file the type is not supported (bss segment
  found, data reference expected) but the symbol and it's value are
  valid. This causes the linux_banner text to be used as the
  "address" of the linux_banner and that's an invalid address for
  the coredump causing crash to fail to load reporting something
  like:
  WARNING: invalid linux_banner pointer: 65762078756e694c
  where the address is obviously ASCII text used as a number. A
  SUSE patch to support compressed kernel binaries introduces the
  behavior, it does not happen for upstream crash source as-is. The
  difference is whether the symbol details are obtained from the
  kernel binary or debuginfo (fails for some debuginfos).
  * crash-get-linux_banner-without-using-syment-type.patch
  In verify_version(), choose how to obtain the linux_banner address
  based on the result of get_symbol_type() instead. TYPE_CODE_ARRAY
  causes the value of the symbol obtained from gdb to be used.
  TYPE_CODE_PTR causes the sybol data to be read to get the address.
  Default is unrecognized type but a warning is shown and the value
  obtained from gdb used as a best case choice.
  (bsc#1190434 c#24)</changelog>
  <changelog author="dmair@suse.com" date="1696507200">- Updated crash gcore extension to current upstream v1.64 dated
  2023-02-28. It's not updated in each product version and most
  don't release a crash-gcore rpm now but updated the latest
  openSUSE package project at this time.</changelog>
  <changelog author="dmair@suse.com" date="1700136000">- Update to crash-8.0.4
  - Removed patches already present in upstream source:
  * crash-fix-glibc-redefs.patch
  * crash-get-linux_banner-without-using-syment-type.patch
- Removed the redundant clean section from the spec file</changelog>
  <changelog author="dmair@suse.com" date="1700481600">- Tidy patches to apply without offsets to crash 8.0.4/gdb 10.2:
  - crash-allow-use-of-sadump-captured-KASLR-kernel.patch
  - crash-debuginfo-compressed.patch
  - crash-make-emacs-default.diff
  - crash-sles9-time.patch
  - crash-stop_read_error_when_intent_is_retry.patch
  - crash-usrmerge.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jslaby@suse.cz" date="1722513600">- add (bsc#1228388):
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739880000">- Add fix_extensions_makefile_race_condition.patch
  makes the build of `dminfo.so` reproducible (bsc#1230281).</changelog>
  <changelog author="dmair@suse.com" date="1742299200">- Upgrade to crash 8.0.6
  - Remove patches already in or updated within 8.0.6 base:
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch
  - Added new patch to correct gcore extension use of modified
  set_context() function with an extra argument
  * gcore-fix-use-of-set_context.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1746100800">- Update to crash 9.0.0
  - Remove patches already present in upstream source:
  * fix_extensions_makefile_race_condition.patch
  - Added gmp-devel and mpfr-devel to BuildRequires</changelog>
</package>
<package pkgid="dfd525445f88cf86b963d9b1a83c8c14f9072ff7710f4d57b2e9316d82aaa8eae0d0b297f0de545f8ea9ce691fef2faf583300f75a05fc812ce597bbd4dc8471" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.3"/>
  <changelog author="dmair@suse.com" date="1692100800">- crash has it's own definitions of some glibc functions, including
  strlcpy(), length limited string copy. In glibc 2.38 the second
  argument is const char *, in crash it is char *. The argument is
  the source string to copy from and shouldn't be modified.  crash
  uses the glibc version in some places, it's own in others and the
  declarations are incompatible resulting in build errors. Added
  * crash-fix-glibc-redefs.patch
  to make the crash declaration of strlcpy() match the glibc 2.38
  version. It may also need to be made product version conditional
  but it should fix Factory.</changelog>
  <changelog author="dmair@suse.com" date="1695211200">- On initialization crash verifies the core based on the text
  referenced by the linux_banner symbol in the supplied core. It
  chooses how to get the address of the text based on the symbol
  type decoded with gdb. For some compressed kernels with an
  accessible debuginfo file the type is not supported (bss segment
  found, data reference expected) but the symbol and it's value are
  valid. This causes the linux_banner text to be used as the
  "address" of the linux_banner and that's an invalid address for
  the coredump causing crash to fail to load reporting something
  like:
  WARNING: invalid linux_banner pointer: 65762078756e694c
  where the address is obviously ASCII text used as a number. A
  SUSE patch to support compressed kernel binaries introduces the
  behavior, it does not happen for upstream crash source as-is. The
  difference is whether the symbol details are obtained from the
  kernel binary or debuginfo (fails for some debuginfos).
  * crash-get-linux_banner-without-using-syment-type.patch
  In verify_version(), choose how to obtain the linux_banner address
  based on the result of get_symbol_type() instead. TYPE_CODE_ARRAY
  causes the value of the symbol obtained from gdb to be used.
  TYPE_CODE_PTR causes the sybol data to be read to get the address.
  Default is unrecognized type but a warning is shown and the value
  obtained from gdb used as a best case choice.
  (bsc#1190434 c#24)</changelog>
  <changelog author="dmair@suse.com" date="1696507200">- Updated crash gcore extension to current upstream v1.64 dated
  2023-02-28. It's not updated in each product version and most
  don't release a crash-gcore rpm now but updated the latest
  openSUSE package project at this time.</changelog>
  <changelog author="dmair@suse.com" date="1700136000">- Update to crash-8.0.4
  - Removed patches already present in upstream source:
  * crash-fix-glibc-redefs.patch
  * crash-get-linux_banner-without-using-syment-type.patch
- Removed the redundant clean section from the spec file</changelog>
  <changelog author="dmair@suse.com" date="1700481600">- Tidy patches to apply without offsets to crash 8.0.4/gdb 10.2:
  - crash-allow-use-of-sadump-captured-KASLR-kernel.patch
  - crash-debuginfo-compressed.patch
  - crash-make-emacs-default.diff
  - crash-sles9-time.patch
  - crash-stop_read_error_when_intent_is_retry.patch
  - crash-usrmerge.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jslaby@suse.cz" date="1722513600">- add (bsc#1228388):
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739880000">- Add fix_extensions_makefile_race_condition.patch
  makes the build of `dminfo.so` reproducible (bsc#1230281).</changelog>
  <changelog author="dmair@suse.com" date="1742299200">- Upgrade to crash 8.0.6
  - Remove patches already in or updated within 8.0.6 base:
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch
  - Added new patch to correct gcore extension use of modified
  set_context() function with an extra argument
  * gcore-fix-use-of-set_context.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1746100800">- Update to crash 9.0.0
  - Remove patches already present in upstream source:
  * fix_extensions_makefile_race_condition.patch
  - Added gmp-devel and mpfr-devel to BuildRequires</changelog>
</package>
<package pkgid="3a140a221898b3bba6a410ce6419d959fb277b704ddd80d35caed0a1a833dca46fc7336be3e11ce99ac992a5022f1b4d35614ce1227cd0ef7abc2a843975cd54" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.3"/>
  <changelog author="dmair@suse.com" date="1692100800">- crash has it's own definitions of some glibc functions, including
  strlcpy(), length limited string copy. In glibc 2.38 the second
  argument is const char *, in crash it is char *. The argument is
  the source string to copy from and shouldn't be modified.  crash
  uses the glibc version in some places, it's own in others and the
  declarations are incompatible resulting in build errors. Added
  * crash-fix-glibc-redefs.patch
  to make the crash declaration of strlcpy() match the glibc 2.38
  version. It may also need to be made product version conditional
  but it should fix Factory.</changelog>
  <changelog author="dmair@suse.com" date="1695211200">- On initialization crash verifies the core based on the text
  referenced by the linux_banner symbol in the supplied core. It
  chooses how to get the address of the text based on the symbol
  type decoded with gdb. For some compressed kernels with an
  accessible debuginfo file the type is not supported (bss segment
  found, data reference expected) but the symbol and it's value are
  valid. This causes the linux_banner text to be used as the
  "address" of the linux_banner and that's an invalid address for
  the coredump causing crash to fail to load reporting something
  like:
  WARNING: invalid linux_banner pointer: 65762078756e694c
  where the address is obviously ASCII text used as a number. A
  SUSE patch to support compressed kernel binaries introduces the
  behavior, it does not happen for upstream crash source as-is. The
  difference is whether the symbol details are obtained from the
  kernel binary or debuginfo (fails for some debuginfos).
  * crash-get-linux_banner-without-using-syment-type.patch
  In verify_version(), choose how to obtain the linux_banner address
  based on the result of get_symbol_type() instead. TYPE_CODE_ARRAY
  causes the value of the symbol obtained from gdb to be used.
  TYPE_CODE_PTR causes the sybol data to be read to get the address.
  Default is unrecognized type but a warning is shown and the value
  obtained from gdb used as a best case choice.
  (bsc#1190434 c#24)</changelog>
  <changelog author="dmair@suse.com" date="1696507200">- Updated crash gcore extension to current upstream v1.64 dated
  2023-02-28. It's not updated in each product version and most
  don't release a crash-gcore rpm now but updated the latest
  openSUSE package project at this time.</changelog>
  <changelog author="dmair@suse.com" date="1700136000">- Update to crash-8.0.4
  - Removed patches already present in upstream source:
  * crash-fix-glibc-redefs.patch
  * crash-get-linux_banner-without-using-syment-type.patch
- Removed the redundant clean section from the spec file</changelog>
  <changelog author="dmair@suse.com" date="1700481600">- Tidy patches to apply without offsets to crash 8.0.4/gdb 10.2:
  - crash-allow-use-of-sadump-captured-KASLR-kernel.patch
  - crash-debuginfo-compressed.patch
  - crash-make-emacs-default.diff
  - crash-sles9-time.patch
  - crash-stop_read_error_when_intent_is_retry.patch
  - crash-usrmerge.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jslaby@suse.cz" date="1722513600">- add (bsc#1228388):
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739880000">- Add fix_extensions_makefile_race_condition.patch
  makes the build of `dminfo.so` reproducible (bsc#1230281).</changelog>
  <changelog author="dmair@suse.com" date="1742299200">- Upgrade to crash 8.0.6
  - Remove patches already in or updated within 8.0.6 base:
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch
  - Added new patch to correct gcore extension use of modified
  set_context() function with an extra argument
  * gcore-fix-use-of-set_context.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1746100800">- Update to crash 9.0.0
  - Remove patches already present in upstream source:
  * fix_extensions_makefile_race_condition.patch
  - Added gmp-devel and mpfr-devel to BuildRequires</changelog>
</package>
<package pkgid="dbcd65c1f33b9561dc63d24478959e1d4bd7b053514d56f76fc5451ed95fe2b597fb1a6d06eacb8dfc9c45d8b53fe3160c07476e4c177a3ed9e6c4664124527c" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="4.99.git.1682279748.c294e5b" rel="bp160.1.13"/>
  <changelog author="ptesarik@suse.com" date="1462449600">- update to commit 5391d3d
  o support for ARM64 (FATE#320844).</changelog>
  <changelog author="jengelh@inai.de" date="1468584000">- Update RPM groups</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1591704000">- eppic-use-extern-in-devel-declaration.patch: Use extern for
  declaration of lastv in libeppic/eppic.h. The file is used as the
  devel eppic.h and if used in multiple sources for the same devel
  link target and using gcc 10 the default behavior is to treat the
  mutiple declarations as a link error.</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add eppic-binutils-fix.patch in order to not used 'l' option for
  ar. It has a new meaning.</changelog>
  <changelog author="Petr Tesa&#x159;&#xED;k &lt;ptesarik@suse.com&gt;" date="1612353600">- Update upstream URL.
- Convert to obs_scm source service.
- Upgrade to git commit e8844d3.
- Drop patches that have been merged into upstream:
  o eppic-no-return.patch
  o eppic-use-extern-in-devel-declaration.patch
  o eppic-binutils-fix.patch</changelog>
  <changelog author="Petr Tesa&#x159;&#xED;k &lt;petr@tesarici.cz&gt;" date="1681387200">- Switch upstream branch to v5.0.
- Update to commit e0a3b03
  o Assorted bug fixes.</changelog>
  <changelog author="Petr Tesa&#x159;&#xED;k &lt;petr@tesarici.cz&gt;" date="1681387201">- eppic-Fix-eppic_getnxtfct.patch: Fix name length condition in
  eppic_getnxtfct().</changelog>
  <changelog author="Petr Tesa&#x159;&#xED;k &lt;petr@tesarici.cz&gt;" date="1681387202">- Build the crash extension.
- Package the eppic code.
- eppic-crash-INCDIR.patch: Use make variable INCDIR to find crash
  include files.</changelog>
  <changelog author="Petr Tesa&#x159;&#xED;k &lt;petr@tesarici.cz&gt;" date="1682337600">- Update to c294e5bf89cab01f3c5316474cfc5104af7e6a60
  o Build on RISC-V64 and 32-bit Arm and IBM POWER.
- Drop upstreamed patches:
  o eppic-Fix-eppic_getnxtfct.patch
  o eppic-crash-INCDIR.patch</changelog>
</package>
<package pkgid="90d081276490db0d446d734a18040bc81ea32a0c9f676f698ec3e6b7d06393bac48a30df7ae1c3d7b3233c5f7988773f94712ef99a845c212be84832c409fb1a" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="160000.2.3"/>
  <changelog author="dmair@suse.com" date="1692100800">- crash has it's own definitions of some glibc functions, including
  strlcpy(), length limited string copy. In glibc 2.38 the second
  argument is const char *, in crash it is char *. The argument is
  the source string to copy from and shouldn't be modified.  crash
  uses the glibc version in some places, it's own in others and the
  declarations are incompatible resulting in build errors. Added
  * crash-fix-glibc-redefs.patch
  to make the crash declaration of strlcpy() match the glibc 2.38
  version. It may also need to be made product version conditional
  but it should fix Factory.</changelog>
  <changelog author="dmair@suse.com" date="1695211200">- On initialization crash verifies the core based on the text
  referenced by the linux_banner symbol in the supplied core. It
  chooses how to get the address of the text based on the symbol
  type decoded with gdb. For some compressed kernels with an
  accessible debuginfo file the type is not supported (bss segment
  found, data reference expected) but the symbol and it's value are
  valid. This causes the linux_banner text to be used as the
  "address" of the linux_banner and that's an invalid address for
  the coredump causing crash to fail to load reporting something
  like:
  WARNING: invalid linux_banner pointer: 65762078756e694c
  where the address is obviously ASCII text used as a number. A
  SUSE patch to support compressed kernel binaries introduces the
  behavior, it does not happen for upstream crash source as-is. The
  difference is whether the symbol details are obtained from the
  kernel binary or debuginfo (fails for some debuginfos).
  * crash-get-linux_banner-without-using-syment-type.patch
  In verify_version(), choose how to obtain the linux_banner address
  based on the result of get_symbol_type() instead. TYPE_CODE_ARRAY
  causes the value of the symbol obtained from gdb to be used.
  TYPE_CODE_PTR causes the sybol data to be read to get the address.
  Default is unrecognized type but a warning is shown and the value
  obtained from gdb used as a best case choice.
  (bsc#1190434 c#24)</changelog>
  <changelog author="dmair@suse.com" date="1696507200">- Updated crash gcore extension to current upstream v1.64 dated
  2023-02-28. It's not updated in each product version and most
  don't release a crash-gcore rpm now but updated the latest
  openSUSE package project at this time.</changelog>
  <changelog author="dmair@suse.com" date="1700136000">- Update to crash-8.0.4
  - Removed patches already present in upstream source:
  * crash-fix-glibc-redefs.patch
  * crash-get-linux_banner-without-using-syment-type.patch
- Removed the redundant clean section from the spec file</changelog>
  <changelog author="dmair@suse.com" date="1700481600">- Tidy patches to apply without offsets to crash 8.0.4/gdb 10.2:
  - crash-allow-use-of-sadump-captured-KASLR-kernel.patch
  - crash-debuginfo-compressed.patch
  - crash-make-emacs-default.diff
  - crash-sles9-time.patch
  - crash-stop_read_error_when_intent_is_retry.patch
  - crash-usrmerge.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jslaby@suse.cz" date="1722513600">- add (bsc#1228388):
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739880000">- Add fix_extensions_makefile_race_condition.patch
  makes the build of `dminfo.so` reproducible (bsc#1230281).</changelog>
  <changelog author="dmair@suse.com" date="1742299200">- Upgrade to crash 8.0.6
  - Remove patches already in or updated within 8.0.6 base:
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch
  - Added new patch to correct gcore extension use of modified
  set_context() function with an extra argument
  * gcore-fix-use-of-set_context.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1746100800">- Update to crash 9.0.0
  - Remove patches already present in upstream source:
  * fix_extensions_makefile_race_condition.patch
  - Added gmp-devel and mpfr-devel to BuildRequires</changelog>
</package>
<package pkgid="ab6ed51498ccdab566de62c64b542ff1e31293cd9a8cf20d02a32ec9da712f7cd9dfe104439f091504887750ff2f07e87ae76551ac93823da1080cfbd2279178" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.0_k6.12.0_160000.5" rel="160000.2.3"/>
  <changelog author="dmair@suse.com" date="1692100800">- crash has it's own definitions of some glibc functions, including
  strlcpy(), length limited string copy. In glibc 2.38 the second
  argument is const char *, in crash it is char *. The argument is
  the source string to copy from and shouldn't be modified.  crash
  uses the glibc version in some places, it's own in others and the
  declarations are incompatible resulting in build errors. Added
  * crash-fix-glibc-redefs.patch
  to make the crash declaration of strlcpy() match the glibc 2.38
  version. It may also need to be made product version conditional
  but it should fix Factory.</changelog>
  <changelog author="dmair@suse.com" date="1695211200">- On initialization crash verifies the core based on the text
  referenced by the linux_banner symbol in the supplied core. It
  chooses how to get the address of the text based on the symbol
  type decoded with gdb. For some compressed kernels with an
  accessible debuginfo file the type is not supported (bss segment
  found, data reference expected) but the symbol and it's value are
  valid. This causes the linux_banner text to be used as the
  "address" of the linux_banner and that's an invalid address for
  the coredump causing crash to fail to load reporting something
  like:
  WARNING: invalid linux_banner pointer: 65762078756e694c
  where the address is obviously ASCII text used as a number. A
  SUSE patch to support compressed kernel binaries introduces the
  behavior, it does not happen for upstream crash source as-is. The
  difference is whether the symbol details are obtained from the
  kernel binary or debuginfo (fails for some debuginfos).
  * crash-get-linux_banner-without-using-syment-type.patch
  In verify_version(), choose how to obtain the linux_banner address
  based on the result of get_symbol_type() instead. TYPE_CODE_ARRAY
  causes the value of the symbol obtained from gdb to be used.
  TYPE_CODE_PTR causes the sybol data to be read to get the address.
  Default is unrecognized type but a warning is shown and the value
  obtained from gdb used as a best case choice.
  (bsc#1190434 c#24)</changelog>
  <changelog author="dmair@suse.com" date="1696507200">- Updated crash gcore extension to current upstream v1.64 dated
  2023-02-28. It's not updated in each product version and most
  don't release a crash-gcore rpm now but updated the latest
  openSUSE package project at this time.</changelog>
  <changelog author="dmair@suse.com" date="1700136000">- Update to crash-8.0.4
  - Removed patches already present in upstream source:
  * crash-fix-glibc-redefs.patch
  * crash-get-linux_banner-without-using-syment-type.patch
- Removed the redundant clean section from the spec file</changelog>
  <changelog author="dmair@suse.com" date="1700481600">- Tidy patches to apply without offsets to crash 8.0.4/gdb 10.2:
  - crash-allow-use-of-sadump-captured-KASLR-kernel.patch
  - crash-debuginfo-compressed.patch
  - crash-make-emacs-default.diff
  - crash-sles9-time.patch
  - crash-stop_read_error_when_intent_is_retry.patch
  - crash-usrmerge.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jslaby@suse.cz" date="1722513600">- add (bsc#1228388):
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1739880000">- Add fix_extensions_makefile_race_condition.patch
  makes the build of `dminfo.so` reproducible (bsc#1230281).</changelog>
  <changelog author="dmair@suse.com" date="1742299200">- Upgrade to crash 8.0.6
  - Remove patches already in or updated within 8.0.6 base:
  * 0001-arm64-section_size_bits-compatible-with-macro-defini.patch
  * 0002-Reflect-__-start-end-_init_task-kernel-symbols-renam.patch
  * 0003-x86_64-fix-for-adding-top_of_kernel_stack_padding-fo.patch
  * 0004-Fix-kmem-v-option-on-Linux-6.9-and-later-kernels.patch
  * 0005-X86-64-fix-for-crash-session-loading-failure.patch
  * 0006-Fix-for-failing-to-load-kernel-module.patch
  * 0007-X86-64-fix-a-regression-issue-about-kernel-stack-pad.patch
  * 0008-Fix-kmem-i-and-swap-commands-on-Linux-6.10-rc1-and-l.patch
  * 0009-List-enable-LIST_HEAD_FORMAT-for-r-option.patch
  * 0010-arm64-fix-a-potential-segfault-when-unwind-frame.patch
  * 0011-arm64-Fix-bt-command-show-wrong-stacktrace-on-ramdum.patch
  - Added new patch to correct gcore extension use of modified
  set_context() function with an extra argument
  * gcore-fix-use-of-set_context.patch</changelog>
  <changelog author="avinesh.kumar@suse.com" date="1746100800">- Update to crash 9.0.0
  - Remove patches already present in upstream source:
  * fix_extensions_makefile_race_condition.patch
  - Added gmp-devel and mpfr-devel to BuildRequires</changelog>
</package>
<package pkgid="3d45b4d160c138c28edfd9b91ea32000ebc5f4138c5188df93e822d0b34c0bfcd84f9687b14dda961d76568d82cf4a0ad31bfb478e5cd06d412fcbdfd5049cb8" name="crash-trace" arch="x86_64">
  <version epoch="0" ver="3.0" rel="160000.2.2"/>
  <changelog author="ptesarik@suse.com" date="1668772800">- Include trace.so crash tool extension (jsc#PED-1289).</changelog>
  <changelog author="ptesarik@suse.com" date="1668772801">- crash-trace-fix-aarch64-ppc64le.patch: Fix build for AArch64 and
  little-endian IBM POWER.</changelog>
  <changelog author="ptesarik@suse.com" date="1668859200">- The "trace show" command requires trace-cmd.</changelog>
</package>
<package pkgid="a1680575586946bff0876140378cc1f750b850900f0062d9f76566bb7f341f6795713132fc3d0b904c0b96519809bcb6bbc85d4a9d79a9552284e3d36391e881" name="crazydiskinfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="bp160.1.13"/>
  <changelog author="lbeltrame@kde.org" date="1487764800">- First openSUSE package</changelog>
  <changelog author="mardnh@gmx.de" date="1546344000">- Spefile cleanup
- Add patch:
  * crazydiskinfo-obey-cflags.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1580990400">- Update to version 1.1.0
  * Add support for toggle raw values between hexadecimal and
    decimal
  * Add feature to hide a serial number
- Update patch:
  * crazydiskinfo-obey-cflags.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="490c752db87a5feca91cc40448b78d49e700ba3be17106107d5adc126027017d4aca1268fe189406e36c490e05e2029a20bcfa6460b7b3d2beec10b1aa24f81a" name="crc32csum" arch="x86_64">
  <version epoch="0" ver="0.1.0~0" rel="bp160.1.13"/>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1651665600">- Initial commit of crc32csum</changelog>
</package>
<package pkgid="b6fba9c02dc0aa52b911c0c70ef1639577de69eeb1a7291ffa4d51a91a303ca147007f08ef4c628c953dea536be57d89407d740b27390af0220c5a503339a224" name="createrepo_c" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="160000.2.2"/>
  <changelog author="steven.kowalik@suse.com" date="1638273600">- python3-nose is not required for the testsuite, update BuildRequires
  to the actual package used, python3-setuptools.</changelog>
  <changelog author="ngompa13@gmail.com" date="1648641600">- Update to 0.20.0
  + Remove obsoleted API cr_xml_parse_main_metadata_together
  + Fix ampersand encoding in attributes when parsing repodata
  + Add a streaming parsing API that is user-controllable
  + Fix a bug in cr_repomd_record_compress_and_fill()
  + Zero init buffer to prevent use of garbage values if input is too short
  + Use copy+delete fallback when moving of a dir fails
  + Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata
  + Set database version only for the database records, not everything
  + If the new repodata generated during an --update run exactly matches the old repodata don't touch the files
  + Use --error-exit-val option by default
  + Remove insecure hashes SHA-1 and MD5 from the default build (rh#1935486)
  + Fix error when updating repo with removed modules metadata
  + Exit with status code 1 when loading of repo's metadata fails
  + Fix memory leaks and covscan warnings</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1658923200">- update to 0.20.1:
  * fix performance problems with large repositories related to
    tasks queue management</changelog>
  <changelog author="aplanas@suse.com" date="1677067200">- Add upstream patches (already merged) to publish IMA metadata in
  repomd repositories
  + 0001-Add-optional-filelists_ext-metadata.patch
  + 0002-Rename-filelists_ext-to-filelists-ext-to-be-consiste.patch
  + 0003-Rename-filelists_ext.xml-metadata-to-filelists-ext.x.patch
  + 0004-Add-missing-ext-to-filelists-ext-repomd-record.patch
- Add upstream patches (under review) to rename filelists-ext
  + 0005-Complete-renaming-to-filelists-ext.patch
- Use git for merging in %autosetup</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1677240000">- Precompile the python bytecode to avoid lingering files on package removal.</changelog>
  <changelog author="jsrain@suse.com" date="1684411200">- disable DeltaRPM for ALP</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- update to 1.0.2:
  * Don't allow building without zstd
  * Remove dependency on libmagic, hardcode magic number detection
- update to 1.0.1:
  * Fix some invalid C code to cover a wider ranger of compilers
  * Python API: Fix a crash when setting pkg files
  * Add support for building with sanitizers
  * Fix a memory leak of nevra in case there are duplicate package
  * Free loaded zchunk dictionary
  * Fix few deltarpm related memory leaks
- update to 1.0.0:
  * Add zstd compression support
- update to 0.21.1:
  * Rename --filelists_ext to --filelists-ext to be consistent
  * Change test to compare contents instead of checksum
  * Don't remove old metadata packages with --update
  * New --duplicated-nevra &lt;solution&gt; option
- drop 0001-Add-optional-filelists_ext-metadata.patch
  0002-Rename-filelists_ext-to-filelists-ext-to-be-consiste.patch
  0003-Rename-filelists_ext.xml-metadata-to-filelists-ext.x.patch
  0004-Add-missing-ext-to-filelists-ext-repomd-record.patch
  0005-Complete-renaming-to-filelists-ext.patch: (merged upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- remove unneeded file-devel dependency</changelog>
  <changelog author="dmueller@suse.com" date="1711281600">- update to 1.1.0:
  * add --no-pretty option to reduce metadata size
  * align compression level for zck
  * restore compatibilty with libxml2 2.12.0
  * restore default to pretty_print in mergerepo_c and modifyrepo_c
  * add tests</changelog>
  <changelog author="mail+rpm@georg-pfuetzenreuter.net" date="1723377600">- Repair manpage links by removing a spurious backslash escape</changelog>
</package>
<package pkgid="dccc593cb1bdb9b63280f30f77eceb592c1a8c5f70cf739c6a88d780154560f73445136905f2354f12f87a0070552553383a757c973434c5813b9959f840fc22" name="crispy-doom" arch="x86_64">
  <version epoch="0" ver="7.0" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1679918400">- Initial package (version 5.12.0) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680091200">- Switch from packageand() to modern rpm conditionals
- Avoid conflict with chocolate-doom manpages</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 6.0.0:
  * The display settings window in the setup tool has been
    reorganised to a better arrangement.
  * It is now possible to load .lmp files (and play back demos)
    with long filenames
  * In the setup tool, it is now possible to hold down shift when
  * changing key/mouse/joystick bindings to prevent other
    bindings to the same key from being cleared (thanks myk).
  * The joystick menu in the setup tool now has a test button
  * Specifying the -privateserver option implies -server
  * Freedesktop.org desktop files are now installed for Doom and
    the setup tool, which will appear in the main menu on desktop
  * environments such as Gnome and KDE
  * The Chex Quest dehacked patch (chex.deh) will now be detected
    if it is in the same directory as the IWAD file.
  * Added support for the alternate version of the Final Doom
    executable included in some later versions of the Id
    Anthology.
  * Very short sound effects are not played, to better emulate
    the behavior of DMX in Vanilla Doom
  * The null sector dereference emulation code has been imported
    from Prboom+ - this fixes a desync with CLNJ-506.LMP
  * The IDMUS cheat doesn’t work when emulating the v1.9
    executable
  * Menu navigation when using joystick/joypad (thanks AXDOOMER).
  * For configuration file value for shift keys, use scan code
    for right shift, not left shift (thanks AXDOOMER).
  * Default joystick buttons for the setup tool now match Vanilla
  * The default sfx/music volume set by the setup tool is now 8
    instead of 15, matching the game itself. (thanks AXDOOMER).
  * Weapon cycling from the shotgun to the chaingun in Doom 1 now
    works properly (thanks AXDOOMER).
  * MIDI playback that locked up when using an empty MUS / MIDI
    file
  * Default sampling rate used by setup tool changed to 44100Hz,
    to match the game default (thanks AXDOOMER).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1723204800">- Update to release 7.0
  * True color rendering support (from Chocolate Doom 3.1.0 base)
  * Improve display of secret sector coloring in automap when
    custom PLAYPALs are used.
  * Use PWAD-provided color translation tables for colored blood.
  * Allow non-power-of-2 wide sky textures.
  * Add support for Sigil II.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750161600">- Add c99.patch, c23-gcc15.patch</changelog>
</package>
<package pkgid="13c264679114ac72b316b09626a8527f7dfa12cb15ee8192523f0ec9ee0f5f363ee2665a120bcee4b614d5795e8d88d5ac8e7fa3de9e06bfb9d31a673e8373ff" name="crispy-doom-bash-completion" arch="noarch">
  <version epoch="0" ver="7.0" rel="bp160.1.11"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1679918400">- Initial package (version 5.12.0) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680091200">- Switch from packageand() to modern rpm conditionals
- Avoid conflict with chocolate-doom manpages</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1689508800">- update to 6.0.0:
  * The display settings window in the setup tool has been
    reorganised to a better arrangement.
  * It is now possible to load .lmp files (and play back demos)
    with long filenames
  * In the setup tool, it is now possible to hold down shift when
  * changing key/mouse/joystick bindings to prevent other
    bindings to the same key from being cleared (thanks myk).
  * The joystick menu in the setup tool now has a test button
  * Specifying the -privateserver option implies -server
  * Freedesktop.org desktop files are now installed for Doom and
    the setup tool, which will appear in the main menu on desktop
  * environments such as Gnome and KDE
  * The Chex Quest dehacked patch (chex.deh) will now be detected
    if it is in the same directory as the IWAD file.
  * Added support for the alternate version of the Final Doom
    executable included in some later versions of the Id
    Anthology.
  * Very short sound effects are not played, to better emulate
    the behavior of DMX in Vanilla Doom
  * The null sector dereference emulation code has been imported
    from Prboom+ - this fixes a desync with CLNJ-506.LMP
  * The IDMUS cheat doesn’t work when emulating the v1.9
    executable
  * Menu navigation when using joystick/joypad (thanks AXDOOMER).
  * For configuration file value for shift keys, use scan code
    for right shift, not left shift (thanks AXDOOMER).
  * Default joystick buttons for the setup tool now match Vanilla
  * The default sfx/music volume set by the setup tool is now 8
    instead of 15, matching the game itself. (thanks AXDOOMER).
  * Weapon cycling from the shotgun to the chaingun in Doom 1 now
    works properly (thanks AXDOOMER).
  * MIDI playback that locked up when using an empty MUS / MIDI
    file
  * Default sampling rate used by setup tool changed to 44100Hz,
    to match the game default (thanks AXDOOMER).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1723204800">- Update to release 7.0
  * True color rendering support (from Chocolate Doom 3.1.0 base)
  * Improve display of secret sector coloring in automap when
    custom PLAYPALs are used.
  * Use PWAD-provided color translation tables for colored blood.
  * Allow non-power-of-2 wide sky textures.
  * Add support for Sigil II.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1750161600">- Add c99.patch, c23-gcc15.patch</changelog>
</package>
<package pkgid="728946ac2996d5ab02c7bef431767995c2c5cf22ef527158158c113cdb2e50533c45aa326abd18c8e3fa822a34436c7fc51e173c7e5ffb71b24a6a3b45f47bbf" name="criterion" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672833600">- First OBS release.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 2.4.2:
  * Fix: fixed crash in assert failure reporting when there was no diff.
    If the user-provided function to stringify an object was bugged and
    produced equal output for non-equal objects, thus producing an empty
    diff, Criterion crashed trying to access an unset parameter list.
  * Fix: fixed crashing tests when Criterion was compiled with nanopb&gt;=0.4.7
  * Fix: fixed deadlock when test timeout was specified and the system was
    overloaded.
  * Fix: fixed segfault if map_shdr fails (David Gloe).
  * Fix: fixed memory leak on test failure (Jookia).
  * Fix: fixed gt() and ge().
  * Fix: escape XML/JSON reports.
  * Misc: converted klib and debugbreak submodules to subprojects
  * Misc: various documentation fixes (Yuri Victorovich, Jonas Schulze).
  * Misc: various updates to dependencies.
- Delete fix-nanopb.patch
- Add fix-meson.patch: since klib and debugbreak provides only some header
  files, search for those deps in Meson fails, therefore we have to remove
  them. Those deps are specified in the spec file though.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Rename devel package from libcriterion3-devel to
  libcriterion-devel: the devel package never follows the soversion
  of the libraries, as it is, unlike the libraries, not meant to be
  parallel-installable.</changelog>
</package>
<package pkgid="1bc53939738aaf82af8e67d0d7ec2cc56a57f24ce3e4078969307f82487a380557193d47ff86c2ad1b7deb8c39ee415b9df01909dbb2dfeb63e62342231acf8e" name="criterion-lang" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672833600">- First OBS release.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1686657600">- Update to 2.4.2:
  * Fix: fixed crash in assert failure reporting when there was no diff.
    If the user-provided function to stringify an object was bugged and
    produced equal output for non-equal objects, thus producing an empty
    diff, Criterion crashed trying to access an unset parameter list.
  * Fix: fixed crashing tests when Criterion was compiled with nanopb&gt;=0.4.7
  * Fix: fixed deadlock when test timeout was specified and the system was
    overloaded.
  * Fix: fixed segfault if map_shdr fails (David Gloe).
  * Fix: fixed memory leak on test failure (Jookia).
  * Fix: fixed gt() and ge().
  * Fix: escape XML/JSON reports.
  * Misc: converted klib and debugbreak submodules to subprojects
  * Misc: various documentation fixes (Yuri Victorovich, Jonas Schulze).
  * Misc: various updates to dependencies.
- Delete fix-nanopb.patch
- Add fix-meson.patch: since klib and debugbreak provides only some header
  files, search for those deps in Meson fails, therefore we have to remove
  them. Those deps are specified in the spec file though.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Rename devel package from libcriterion3-devel to
  libcriterion-devel: the devel package never follows the soversion
  of the libraries, as it is, unlike the libraries, not meant to be
  parallel-installable.</changelog>
</package>
<package pkgid="fb2f0721fd23cdba2069644f408e0b5e10ca40b13066c8487c5f1d27761d464c701f9a65e72b1948911de103c0703311064f480df61e931c56a8ad4ced3b99c9" name="criu" arch="x86_64">
  <version epoch="0" ver="4.1" rel="bp160.1.5"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1686052800">- Update to criu 3.18:
  New features:
  * Allow CRIU to be used as non-root
  * Add SIGTSTP support
  * Add opt to skip file r/w/x check on restore
  Bugfixes:
  * Many fixes here and there
  Improvements:
  * cgroup2: Dump cgroup controllers of every threads in a process
  * save IP_FREEBIND option for SOCK_RAW sockets also
  * support IP_PKTINFO and IPV6_RECVPKTINFO options
  * Implement hw breakpoint for arm64 platform
  * Set only used XFEATURE_* in xstate_bv
  * Checkpoint and restore some global properties
  * A checkpoint optimization for highly sparse ghost files (--ghost-fiemap)
- Refresh criu-py-install-fix.diff:
  a workaround for non-working python-pip inside build environment by
  reviving the old setup script
- Fix shebang of criu-ns script:
  criu-ns-python3-shebang.patch
- Drop obsoleted patches:
  criu-fix-conflicting-headers.patch
  mount-add-definition-for-FSOPEN_CLOEXEC.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1701172800">- Update to criu 3.19:
  New features:
  * LoongArch64 support
  * C/R membarrier() registrations
  * Restore THP_DISABLE prctl
  * prctl: Migrate prctl(NO_NEW_PRIVS) setting
  Bugfixes:
  * Many fixes and improvements from the Google team
  * Fix dumping hugetlb-based memfd on kernels &lt; 4.16
  * Fixes here and there
  Improvements:
  * drop python 2 support
  * support XSAVE on newer Intel CPUs
- Refreshed criu-py-install-fix.diff;
  workarounds appled to both crit and lib/pycriu
- Drop obsoleted patch criu-amdgpu-plugin-fix.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1730376000">- Update to criu 4.0:
  New features:
  * Shadow stack support
  * CUDA plugin: Introduced a plugin to support checkpointing and restoring
    NVIDIA CUDA applications.
  Bugfixes:
  * cgroup: Add support for restoring a thread in a correct v1 cgroup
  * mem: fix some VMAs being incorrectly mapped wtih PROT_WRITE
  * criu: fix a fatal failure if nft doesn't work
  * net: Fix TOCTOU race condition in unix_conf_op
  * pagemap-cache: handle short reads
  * Fixes here and there.
  Improvements:
  * Pagemap cache: Added support for PAGEMAP_SCAN ioctl
  * zdtm: Added tests for IP_TTL restore
  * irmap: hardcode some more interesting paths
  * util: use close_range when it's supported
  * Fixes and improvements in amdgpu-plugin
- Make criu-plugin-cuda subpackage</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1737633600">- Depend on python3-setuptools for building, distutils is deprecated
  and it's not available in python &gt; 3.11</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1737633601">- Fix the error "vdso: Unexpected rt vDSO area bounds" (bsc#1236330):
  taken from the upstream bug tracker
    https://github.com/checkpoint-restore/criu/pull/2539
  vdso-handle-vvar_vclock-vma-s.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1738324800">- Build with default nftables support on openSUSE (bsc#1236769)
  * 0001-cr_options-switch-networking-default-backend-to-nfta.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741262400">- Drop unneeded Requires on python3-ipaddr.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1743422400">- Update to criu 4.1:
  New features:
  * RISC-V Support
  * PIDFD Support
  * arm64: C/R PAC keys
  Bugfixes:
  * vdso: handle vvar_vclock vma-s
  * seize: Take --timeout option into account when freezing processes
  * net: use unique lock chain names (nftables)
  * Fixes here and there.
  Improvements:
  * CUDA Enhancements
  * Allow setting the default network locking backend
  * Enable coredump generation for aarch64 and arm
  * vdso: switch from DT_HASH to DT_GNU_HASH
- Drop superfluous patches:
  vdso-handle-vvar_vclock-vma-s.patch
  0001-cr_options-switch-networking-default-backend-to-nfta.patch
- Enable riscv build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1744891200">- build with selinux support (bsc#1238136)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1748260800">- add
  0001-net-nftables-avoid-restore-failure-if-the-CRIU-nft-t.patch
  (bsc#1241515)</changelog>
</package>
<package pkgid="ba1c849ab5b780de59c31a84c5d261d882af0b5b160c1ca93e37a75aae36481bd4022e9d8e4764a9e5cf50c674fd55a6d507ad7dbeb5500e3f59b86d3c63314c" name="criu-devel" arch="x86_64">
  <version epoch="0" ver="4.1" rel="bp160.1.5"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1686052800">- Update to criu 3.18:
  New features:
  * Allow CRIU to be used as non-root
  * Add SIGTSTP support
  * Add opt to skip file r/w/x check on restore
  Bugfixes:
  * Many fixes here and there
  Improvements:
  * cgroup2: Dump cgroup controllers of every threads in a process
  * save IP_FREEBIND option for SOCK_RAW sockets also
  * support IP_PKTINFO and IPV6_RECVPKTINFO options
  * Implement hw breakpoint for arm64 platform
  * Set only used XFEATURE_* in xstate_bv
  * Checkpoint and restore some global properties
  * A checkpoint optimization for highly sparse ghost files (--ghost-fiemap)
- Refresh criu-py-install-fix.diff:
  a workaround for non-working python-pip inside build environment by
  reviving the old setup script
- Fix shebang of criu-ns script:
  criu-ns-python3-shebang.patch
- Drop obsoleted patches:
  criu-fix-conflicting-headers.patch
  mount-add-definition-for-FSOPEN_CLOEXEC.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1701172800">- Update to criu 3.19:
  New features:
  * LoongArch64 support
  * C/R membarrier() registrations
  * Restore THP_DISABLE prctl
  * prctl: Migrate prctl(NO_NEW_PRIVS) setting
  Bugfixes:
  * Many fixes and improvements from the Google team
  * Fix dumping hugetlb-based memfd on kernels &lt; 4.16
  * Fixes here and there
  Improvements:
  * drop python 2 support
  * support XSAVE on newer Intel CPUs
- Refreshed criu-py-install-fix.diff;
  workarounds appled to both crit and lib/pycriu
- Drop obsoleted patch criu-amdgpu-plugin-fix.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1730376000">- Update to criu 4.0:
  New features:
  * Shadow stack support
  * CUDA plugin: Introduced a plugin to support checkpointing and restoring
    NVIDIA CUDA applications.
  Bugfixes:
  * cgroup: Add support for restoring a thread in a correct v1 cgroup
  * mem: fix some VMAs being incorrectly mapped wtih PROT_WRITE
  * criu: fix a fatal failure if nft doesn't work
  * net: Fix TOCTOU race condition in unix_conf_op
  * pagemap-cache: handle short reads
  * Fixes here and there.
  Improvements:
  * Pagemap cache: Added support for PAGEMAP_SCAN ioctl
  * zdtm: Added tests for IP_TTL restore
  * irmap: hardcode some more interesting paths
  * util: use close_range when it's supported
  * Fixes and improvements in amdgpu-plugin
- Make criu-plugin-cuda subpackage</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1737633600">- Depend on python3-setuptools for building, distutils is deprecated
  and it's not available in python &gt; 3.11</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1737633601">- Fix the error "vdso: Unexpected rt vDSO area bounds" (bsc#1236330):
  taken from the upstream bug tracker
    https://github.com/checkpoint-restore/criu/pull/2539
  vdso-handle-vvar_vclock-vma-s.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1738324800">- Build with default nftables support on openSUSE (bsc#1236769)
  * 0001-cr_options-switch-networking-default-backend-to-nfta.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741262400">- Drop unneeded Requires on python3-ipaddr.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1743422400">- Update to criu 4.1:
  New features:
  * RISC-V Support
  * PIDFD Support
  * arm64: C/R PAC keys
  Bugfixes:
  * vdso: handle vvar_vclock vma-s
  * seize: Take --timeout option into account when freezing processes
  * net: use unique lock chain names (nftables)
  * Fixes here and there.
  Improvements:
  * CUDA Enhancements
  * Allow setting the default network locking backend
  * Enable coredump generation for aarch64 and arm
  * vdso: switch from DT_HASH to DT_GNU_HASH
- Drop superfluous patches:
  vdso-handle-vvar_vclock-vma-s.patch
  0001-cr_options-switch-networking-default-backend-to-nfta.patch
- Enable riscv build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1744891200">- build with selinux support (bsc#1238136)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1748260800">- add
  0001-net-nftables-avoid-restore-failure-if-the-CRIU-nft-t.patch
  (bsc#1241515)</changelog>
</package>
<package pkgid="1ddf1401de1fa104df2d89ade4c805230219aa425251ceb0928311fa0c7e4262036233e09a93a9725414e64de3f8194313de86ae08be4e8bce134920d5e7cf93" name="criu-plugin-amdgpu" arch="x86_64">
  <version epoch="0" ver="4.1" rel="bp160.1.5"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1686052800">- Update to criu 3.18:
  New features:
  * Allow CRIU to be used as non-root
  * Add SIGTSTP support
  * Add opt to skip file r/w/x check on restore
  Bugfixes:
  * Many fixes here and there
  Improvements:
  * cgroup2: Dump cgroup controllers of every threads in a process
  * save IP_FREEBIND option for SOCK_RAW sockets also
  * support IP_PKTINFO and IPV6_RECVPKTINFO options
  * Implement hw breakpoint for arm64 platform
  * Set only used XFEATURE_* in xstate_bv
  * Checkpoint and restore some global properties
  * A checkpoint optimization for highly sparse ghost files (--ghost-fiemap)
- Refresh criu-py-install-fix.diff:
  a workaround for non-working python-pip inside build environment by
  reviving the old setup script
- Fix shebang of criu-ns script:
  criu-ns-python3-shebang.patch
- Drop obsoleted patches:
  criu-fix-conflicting-headers.patch
  mount-add-definition-for-FSOPEN_CLOEXEC.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1701172800">- Update to criu 3.19:
  New features:
  * LoongArch64 support
  * C/R membarrier() registrations
  * Restore THP_DISABLE prctl
  * prctl: Migrate prctl(NO_NEW_PRIVS) setting
  Bugfixes:
  * Many fixes and improvements from the Google team
  * Fix dumping hugetlb-based memfd on kernels &lt; 4.16
  * Fixes here and there
  Improvements:
  * drop python 2 support
  * support XSAVE on newer Intel CPUs
- Refreshed criu-py-install-fix.diff;
  workarounds appled to both crit and lib/pycriu
- Drop obsoleted patch criu-amdgpu-plugin-fix.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1730376000">- Update to criu 4.0:
  New features:
  * Shadow stack support
  * CUDA plugin: Introduced a plugin to support checkpointing and restoring
    NVIDIA CUDA applications.
  Bugfixes:
  * cgroup: Add support for restoring a thread in a correct v1 cgroup
  * mem: fix some VMAs being incorrectly mapped wtih PROT_WRITE
  * criu: fix a fatal failure if nft doesn't work
  * net: Fix TOCTOU race condition in unix_conf_op
  * pagemap-cache: handle short reads
  * Fixes here and there.
  Improvements:
  * Pagemap cache: Added support for PAGEMAP_SCAN ioctl
  * zdtm: Added tests for IP_TTL restore
  * irmap: hardcode some more interesting paths
  * util: use close_range when it's supported
  * Fixes and improvements in amdgpu-plugin
- Make criu-plugin-cuda subpackage</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1737633600">- Depend on python3-setuptools for building, distutils is deprecated
  and it's not available in python &gt; 3.11</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1737633601">- Fix the error "vdso: Unexpected rt vDSO area bounds" (bsc#1236330):
  taken from the upstream bug tracker
    https://github.com/checkpoint-restore/criu/pull/2539
  vdso-handle-vvar_vclock-vma-s.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1738324800">- Build with default nftables support on openSUSE (bsc#1236769)
  * 0001-cr_options-switch-networking-default-backend-to-nfta.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741262400">- Drop unneeded Requires on python3-ipaddr.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1743422400">- Update to criu 4.1:
  New features:
  * RISC-V Support
  * PIDFD Support
  * arm64: C/R PAC keys
  Bugfixes:
  * vdso: handle vvar_vclock vma-s
  * seize: Take --timeout option into account when freezing processes
  * net: use unique lock chain names (nftables)
  * Fixes here and there.
  Improvements:
  * CUDA Enhancements
  * Allow setting the default network locking backend
  * Enable coredump generation for aarch64 and arm
  * vdso: switch from DT_HASH to DT_GNU_HASH
- Drop superfluous patches:
  vdso-handle-vvar_vclock-vma-s.patch
  0001-cr_options-switch-networking-default-backend-to-nfta.patch
- Enable riscv build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1744891200">- build with selinux support (bsc#1238136)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1748260800">- add
  0001-net-nftables-avoid-restore-failure-if-the-CRIU-nft-t.patch
  (bsc#1241515)</changelog>
</package>
<package pkgid="8cf19abd68bed80a7d670546495979a21cc8ed65af5b489c7328fb2ffbb670243da52df9e755d6d5d3e0f1521c70d3ed0ef45fe6fc476a7128cc8439615f0e36" name="criu-plugin-cuda" arch="x86_64">
  <version epoch="0" ver="4.1" rel="bp160.1.5"/>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1686052800">- Update to criu 3.18:
  New features:
  * Allow CRIU to be used as non-root
  * Add SIGTSTP support
  * Add opt to skip file r/w/x check on restore
  Bugfixes:
  * Many fixes here and there
  Improvements:
  * cgroup2: Dump cgroup controllers of every threads in a process
  * save IP_FREEBIND option for SOCK_RAW sockets also
  * support IP_PKTINFO and IPV6_RECVPKTINFO options
  * Implement hw breakpoint for arm64 platform
  * Set only used XFEATURE_* in xstate_bv
  * Checkpoint and restore some global properties
  * A checkpoint optimization for highly sparse ghost files (--ghost-fiemap)
- Refresh criu-py-install-fix.diff:
  a workaround for non-working python-pip inside build environment by
  reviving the old setup script
- Fix shebang of criu-ns script:
  criu-ns-python3-shebang.patch
- Drop obsoleted patches:
  criu-fix-conflicting-headers.patch
  mount-add-definition-for-FSOPEN_CLOEXEC.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1701172800">- Update to criu 3.19:
  New features:
  * LoongArch64 support
  * C/R membarrier() registrations
  * Restore THP_DISABLE prctl
  * prctl: Migrate prctl(NO_NEW_PRIVS) setting
  Bugfixes:
  * Many fixes and improvements from the Google team
  * Fix dumping hugetlb-based memfd on kernels &lt; 4.16
  * Fixes here and there
  Improvements:
  * drop python 2 support
  * support XSAVE on newer Intel CPUs
- Refreshed criu-py-install-fix.diff;
  workarounds appled to both crit and lib/pycriu
- Drop obsoleted patch criu-amdgpu-plugin-fix.patch</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1730376000">- Update to criu 4.0:
  New features:
  * Shadow stack support
  * CUDA plugin: Introduced a plugin to support checkpointing and restoring
    NVIDIA CUDA applications.
  Bugfixes:
  * cgroup: Add support for restoring a thread in a correct v1 cgroup
  * mem: fix some VMAs being incorrectly mapped wtih PROT_WRITE
  * criu: fix a fatal failure if nft doesn't work
  * net: Fix TOCTOU race condition in unix_conf_op
  * pagemap-cache: handle short reads
  * Fixes here and there.
  Improvements:
  * Pagemap cache: Added support for PAGEMAP_SCAN ioctl
  * zdtm: Added tests for IP_TTL restore
  * irmap: hardcode some more interesting paths
  * util: use close_range when it's supported
  * Fixes and improvements in amdgpu-plugin
- Make criu-plugin-cuda subpackage</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1737633600">- Depend on python3-setuptools for building, distutils is deprecated
  and it's not available in python &gt; 3.11</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1737633601">- Fix the error "vdso: Unexpected rt vDSO area bounds" (bsc#1236330):
  taken from the upstream bug tracker
    https://github.com/checkpoint-restore/criu/pull/2539
  vdso-handle-vvar_vclock-vma-s.patch</changelog>
  <changelog author="Danish Prakash &lt;danish.prakash@suse.com&gt;" date="1738324800">- Build with default nftables support on openSUSE (bsc#1236769)
  * 0001-cr_options-switch-networking-default-backend-to-nfta.patch</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741262400">- Drop unneeded Requires on python3-ipaddr.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1743422400">- Update to criu 4.1:
  New features:
  * RISC-V Support
  * PIDFD Support
  * arm64: C/R PAC keys
  Bugfixes:
  * vdso: handle vvar_vclock vma-s
  * seize: Take --timeout option into account when freezing processes
  * net: use unique lock chain names (nftables)
  * Fixes here and there.
  Improvements:
  * CUDA Enhancements
  * Allow setting the default network locking backend
  * Enable coredump generation for aarch64 and arm
  * vdso: switch from DT_HASH to DT_GNU_HASH
- Drop superfluous patches:
  vdso-handle-vvar_vclock-vma-s.patch
  0001-cr_options-switch-networking-default-backend-to-nfta.patch
- Enable riscv build</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1744891200">- build with selinux support (bsc#1238136)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1748260800">- add
  0001-net-nftables-avoid-restore-failure-if-the-CRIU-nft-t.patch
  (bsc#1241515)</changelog>
</package>
<package pkgid="b045621a584421b15ba8255a3c8b529cb7278e23ca09b81a1960cdefb3bde1deb99709621ba5edcd25827c7ddb615d6506a60c2e6781f1cd523a306adc3e4b43" name="crmsh" arch="noarch">
  <version epoch="0" ver="5.0.0+20250815.8d89c3d" rel="160000.1.2"/>
  <changelog author="XLiang@suse.com" date="1747828800">- Update to version 5.0.0+20250521.c5288d1f:
  * Dev: behave: Adjust related timeout values after removing pcmk_delay_max</changelog>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.b1128f4a:
  * Dev: testcases: Adjust original testcases for previous commit
  * Dev: Drop scripts and templates which include unsupported RAs (jsc#PED-8924)</changelog>
  <changelog author="XLiang@suse.com" date="1747915201">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
</package>
<package pkgid="c04fc186ee81f003a2651dda94a0ce87a78f974276c9ee23d7c4d071d43a5ff83a18eac456d88ab76b193a8afed9b9a4656a5368b71dcc17cdbbc49ad9374262" name="crmsh" arch="noarch">
  <version epoch="0" ver="5.0.0+20251110.f6e38810" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.b1128f4a:
  * Dev: testcases: Adjust original testcases for previous commit
  * Dev: Drop scripts and templates which include unsupported RAs (jsc#PED-8924)</changelog>
  <changelog author="XLiang@suse.com" date="1747915201">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
</package>
<package pkgid="08a89233ae32cee151277a90aa454c928634d96b8ad4c34d65f10c79b02bfb168c7461ff8a58232a6d2b9ae4348bed8cf523f707fdd1542a698a7736a4f30ed8" name="crmsh" arch="noarch">
  <version epoch="0" ver="5.0.0+20260126.316aa9fa" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
</package>
<package pkgid="8249bed9c8e146445dcd15925484c70e3426a1a5c999ab0fd891a4d9fdb37c5df26021e2fd37319836f26c5456d21dd46f5efee886966ec3c4537451c753e292" name="crmsh" arch="noarch">
  <version epoch="0" ver="5.0.0+20260403.7274d51c" rel="160000.1.1"/>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775649600">- Update to version 5.0.0+20260403.7274d51c:
  * Fix: bootstrap: Ensure robust node identification when removing from cluster (bsc#1259683)
  * Dev: utils: Rename utils.ssh_reachable_check to utils.ssh_port_reachable_check
  * Dev: utils: Check if the peer node needs password to access
  * Dev: utils: Rename utils.node_reachable_check to utils.ssh_reachable_check
  * Dev: ui_utils: Move ui_node.parse_option_for_nodes to ui_utils.parse_and_validate_node_args
  * Fix: utils: Raise UnreachableNodeError for those ssh unreachable nodes (bsc#1250645)
  * Dev: utils: Adjust node_reachable_check function and the way it is used
  * Dev: doc: Update the formular to calculate the expected fencing-watchdog-timeout
  * Fix: sbd: Update the formular to calculate the expected fencing-watchdog-timeout
  * Dev: bootstrap: Sync directory sbd.SBDManager.SBD_SYSTEMD_DELAY_START_DIR
  * Dev: bootstrap: Refactor retrieve_all_config_files function
  * Dev: behave_agent: Prevent client hang behind firewall during long cluster joins
  * Fix: log: Disable color when not on a TTY (bsc#1259178)
  * Dev: sh: Use sh_helper.py for su commands (bsc#1254757)
  * Dev: doc: Mention about watchdog-device option also acceptes driver name
  * Dev: watchdog: Improve the fatal error logging message
  * Dev: ui_cluster: Hint the watchdog option should be used with sbd option
  * Dev: bootstrap: Skip inactive cluster node when calling restart_cluster function
  * Fix: cibverify: If no errors found, treat crm_verify result as success (bsc#1250349)
  * Fix: log: Add milliseconds time format to crmsh.log (bsc#1255021)
  * Dev: corosync: Add milliseconds to log time format
  * Fix: ui_cluster: Stop dlm in maintenance mode correctly (bsc#1253733)
  * Dev: utils: Reuse methods in xmlutil.CrmMonXmlParser</changelog>
</package>
<package pkgid="c1566f13a46e181f0faabe2debb9a4309a04c29a5127d2821b539aa5e80a656733e81b451b446b298e87b6799c607e4b32dbffcfacd360d6661ca78d5af7bd95" name="crmsh" arch="noarch">
  <version epoch="0" ver="5.0.0+20260420.f7e8ecad" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775649600">- Update to version 5.0.0+20260403.7274d51c:
  * Fix: bootstrap: Ensure robust node identification when removing from cluster (bsc#1259683)
  * Dev: utils: Rename utils.ssh_reachable_check to utils.ssh_port_reachable_check
  * Dev: utils: Check if the peer node needs password to access
  * Dev: utils: Rename utils.node_reachable_check to utils.ssh_reachable_check
  * Dev: ui_utils: Move ui_node.parse_option_for_nodes to ui_utils.parse_and_validate_node_args
  * Fix: utils: Raise UnreachableNodeError for those ssh unreachable nodes (bsc#1250645)
  * Dev: utils: Adjust node_reachable_check function and the way it is used
  * Dev: doc: Update the formular to calculate the expected fencing-watchdog-timeout
  * Fix: sbd: Update the formular to calculate the expected fencing-watchdog-timeout
  * Dev: bootstrap: Sync directory sbd.SBDManager.SBD_SYSTEMD_DELAY_START_DIR
  * Dev: bootstrap: Refactor retrieve_all_config_files function
  * Dev: behave_agent: Prevent client hang behind firewall during long cluster joins
  * Fix: log: Disable color when not on a TTY (bsc#1259178)
  * Dev: sh: Use sh_helper.py for su commands (bsc#1254757)
  * Dev: doc: Mention about watchdog-device option also acceptes driver name
  * Dev: watchdog: Improve the fatal error logging message
  * Dev: ui_cluster: Hint the watchdog option should be used with sbd option
  * Dev: bootstrap: Skip inactive cluster node when calling restart_cluster function
  * Fix: cibverify: If no errors found, treat crm_verify result as success (bsc#1250349)
  * Fix: log: Add milliseconds time format to crmsh.log (bsc#1255021)
  * Dev: corosync: Add milliseconds to log time format
  * Fix: ui_cluster: Stop dlm in maintenance mode correctly (bsc#1253733)
  * Dev: utils: Reuse methods in xmlutil.CrmMonXmlParser</changelog>
  <changelog author="nicholas.yang@suse.com" date="1776945600">- Update to version 5.0.0+20260420.f7e8ecad:
  * Dev: utils: Improve check_port_open to concurrently try all addresses (bsc#1262094)
  * Dev: qdevice: Remove unused codes
  * Fix: bootstrap: On join node, retrieve qdevice certification files before starting qdevice (bsc#1254243)</changelog>
</package>
<package pkgid="a69ab842277e6ac8d5a31a0a4af6f873912da57b1f29dfadec1bc1348766ab63677e429b12065628a9611b7ff9b38d7ee38301ffa5158a475e07f94ed4e95dcd" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="5.0.0+20250815.8d89c3d" rel="160000.1.2"/>
  <changelog author="XLiang@suse.com" date="1747828800">- Update to version 5.0.0+20250521.c5288d1f:
  * Dev: behave: Adjust related timeout values after removing pcmk_delay_max</changelog>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.b1128f4a:
  * Dev: testcases: Adjust original testcases for previous commit
  * Dev: Drop scripts and templates which include unsupported RAs (jsc#PED-8924)</changelog>
  <changelog author="XLiang@suse.com" date="1747915201">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
</package>
<package pkgid="820310bc3fab96709c4140fdcb22aec254f61fb7aad94b2ab4a67721a83f1c449ba6259ddf97a27184e3c86915efbf8e63f897700e2bdf11a3829e14a94df4fd" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="5.0.0+20251110.f6e38810" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.b1128f4a:
  * Dev: testcases: Adjust original testcases for previous commit
  * Dev: Drop scripts and templates which include unsupported RAs (jsc#PED-8924)</changelog>
  <changelog author="XLiang@suse.com" date="1747915201">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
</package>
<package pkgid="6173f34038ce6cfce58502dc64d7933b2e34e93fc09b1f98015d757c3a5d19bbc81ddbd83cd76c3c9dad3d1aa1410da92e738b165fcf0c7de2ce34f0e0d0d01f" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="5.0.0+20260126.316aa9fa" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
</package>
<package pkgid="b333218e95e389265597127bc6594330bfd5909f756b22365356eb2a0b7a95b830fc3217788d77843bdad02cafbbb9b1c2a71d093c060efdbd6455c11de32786" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="5.0.0+20260403.7274d51c" rel="160000.1.1"/>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775649600">- Update to version 5.0.0+20260403.7274d51c:
  * Fix: bootstrap: Ensure robust node identification when removing from cluster (bsc#1259683)
  * Dev: utils: Rename utils.ssh_reachable_check to utils.ssh_port_reachable_check
  * Dev: utils: Check if the peer node needs password to access
  * Dev: utils: Rename utils.node_reachable_check to utils.ssh_reachable_check
  * Dev: ui_utils: Move ui_node.parse_option_for_nodes to ui_utils.parse_and_validate_node_args
  * Fix: utils: Raise UnreachableNodeError for those ssh unreachable nodes (bsc#1250645)
  * Dev: utils: Adjust node_reachable_check function and the way it is used
  * Dev: doc: Update the formular to calculate the expected fencing-watchdog-timeout
  * Fix: sbd: Update the formular to calculate the expected fencing-watchdog-timeout
  * Dev: bootstrap: Sync directory sbd.SBDManager.SBD_SYSTEMD_DELAY_START_DIR
  * Dev: bootstrap: Refactor retrieve_all_config_files function
  * Dev: behave_agent: Prevent client hang behind firewall during long cluster joins
  * Fix: log: Disable color when not on a TTY (bsc#1259178)
  * Dev: sh: Use sh_helper.py for su commands (bsc#1254757)
  * Dev: doc: Mention about watchdog-device option also acceptes driver name
  * Dev: watchdog: Improve the fatal error logging message
  * Dev: ui_cluster: Hint the watchdog option should be used with sbd option
  * Dev: bootstrap: Skip inactive cluster node when calling restart_cluster function
  * Fix: cibverify: If no errors found, treat crm_verify result as success (bsc#1250349)
  * Fix: log: Add milliseconds time format to crmsh.log (bsc#1255021)
  * Dev: corosync: Add milliseconds to log time format
  * Fix: ui_cluster: Stop dlm in maintenance mode correctly (bsc#1253733)
  * Dev: utils: Reuse methods in xmlutil.CrmMonXmlParser</changelog>
</package>
<package pkgid="bae97c3a5c39172f3b07e4fd57a96285265bdd95a69960fcc1a979ba24635ea3d2cf4c6604e57475e283ce0b365dc034b30bcf34d617e4d7a5ca517bd38e28d9" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="5.0.0+20260420.f7e8ecad" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775649600">- Update to version 5.0.0+20260403.7274d51c:
  * Fix: bootstrap: Ensure robust node identification when removing from cluster (bsc#1259683)
  * Dev: utils: Rename utils.ssh_reachable_check to utils.ssh_port_reachable_check
  * Dev: utils: Check if the peer node needs password to access
  * Dev: utils: Rename utils.node_reachable_check to utils.ssh_reachable_check
  * Dev: ui_utils: Move ui_node.parse_option_for_nodes to ui_utils.parse_and_validate_node_args
  * Fix: utils: Raise UnreachableNodeError for those ssh unreachable nodes (bsc#1250645)
  * Dev: utils: Adjust node_reachable_check function and the way it is used
  * Dev: doc: Update the formular to calculate the expected fencing-watchdog-timeout
  * Fix: sbd: Update the formular to calculate the expected fencing-watchdog-timeout
  * Dev: bootstrap: Sync directory sbd.SBDManager.SBD_SYSTEMD_DELAY_START_DIR
  * Dev: bootstrap: Refactor retrieve_all_config_files function
  * Dev: behave_agent: Prevent client hang behind firewall during long cluster joins
  * Fix: log: Disable color when not on a TTY (bsc#1259178)
  * Dev: sh: Use sh_helper.py for su commands (bsc#1254757)
  * Dev: doc: Mention about watchdog-device option also acceptes driver name
  * Dev: watchdog: Improve the fatal error logging message
  * Dev: ui_cluster: Hint the watchdog option should be used with sbd option
  * Dev: bootstrap: Skip inactive cluster node when calling restart_cluster function
  * Fix: cibverify: If no errors found, treat crm_verify result as success (bsc#1250349)
  * Fix: log: Add milliseconds time format to crmsh.log (bsc#1255021)
  * Dev: corosync: Add milliseconds to log time format
  * Fix: ui_cluster: Stop dlm in maintenance mode correctly (bsc#1253733)
  * Dev: utils: Reuse methods in xmlutil.CrmMonXmlParser</changelog>
  <changelog author="nicholas.yang@suse.com" date="1776945600">- Update to version 5.0.0+20260420.f7e8ecad:
  * Dev: utils: Improve check_port_open to concurrently try all addresses (bsc#1262094)
  * Dev: qdevice: Remove unused codes
  * Fix: bootstrap: On join node, retrieve qdevice certification files before starting qdevice (bsc#1254243)</changelog>
</package>
<package pkgid="df6ffafaefa7ad3f156a6f989cfa8c498df0e6c04fd633586e088dce3daee569d9c5d9d0eca25d4f22fecbb6782c4c7160fc264bcbe4d3eedd09fda26abb8687" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="5.0.0+20250815.8d89c3d" rel="160000.1.2"/>
  <changelog author="XLiang@suse.com" date="1747828800">- Update to version 5.0.0+20250521.c5288d1f:
  * Dev: behave: Adjust related timeout values after removing pcmk_delay_max</changelog>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.b1128f4a:
  * Dev: testcases: Adjust original testcases for previous commit
  * Dev: Drop scripts and templates which include unsupported RAs (jsc#PED-8924)</changelog>
  <changelog author="XLiang@suse.com" date="1747915201">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
</package>
<package pkgid="94f6951ba04ffa292ab6f68c70c0798e962941c1aa334701273ef985d9245b9aa1e7a66af6d9874a820143cafc9a9d3d2e7441457ecbc1a0632e7e0118afac33" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="5.0.0+20251110.f6e38810" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.b1128f4a:
  * Dev: testcases: Adjust original testcases for previous commit
  * Dev: Drop scripts and templates which include unsupported RAs (jsc#PED-8924)</changelog>
  <changelog author="XLiang@suse.com" date="1747915201">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
</package>
<package pkgid="c5362385d32ebecb0a81b6533d6d76fbdf2491eb00f41d61231b8004ef6ae1882adec85b35307872961b1496cc89f9872d17fec7f6d225235d690260ab1c17ba" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="5.0.0+20260126.316aa9fa" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1747915200">- Update to version 5.0.0+20250522.ffecd6cb:
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-rc1
  * Dev: ChangeLog: update ChangeLog for release 5.0.0-pre</changelog>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
</package>
<package pkgid="6e300d8331661c74f1d1df2192a52f9ae41bff58d8ea3b15e555812c3ae9b9e0604349bd62ac262ae7b25a6a96070405ae48c7c3302869ef841f8361f05948cf" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="5.0.0+20260403.7274d51c" rel="160000.1.1"/>
  <changelog author="nicholas.yang@suse.com" date="1749211200">- Update to version 5.0.0+20250605.889b8ca:
  * Dev: bootstrap: Improve configuration for admin IP
  * Dev: bootstrap: do not hide ssh-copy-id outputs in debug mode
  * Fix: bootstrap: add sleeps to avoid triggering sshd PerSourcePenalties (bsc#1243141)
  * Dev: migration: use atomic write to modify corosync.conf on remote nodes (jsc#PED-8252)</changelog>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775649600">- Update to version 5.0.0+20260403.7274d51c:
  * Fix: bootstrap: Ensure robust node identification when removing from cluster (bsc#1259683)
  * Dev: utils: Rename utils.ssh_reachable_check to utils.ssh_port_reachable_check
  * Dev: utils: Check if the peer node needs password to access
  * Dev: utils: Rename utils.node_reachable_check to utils.ssh_reachable_check
  * Dev: ui_utils: Move ui_node.parse_option_for_nodes to ui_utils.parse_and_validate_node_args
  * Fix: utils: Raise UnreachableNodeError for those ssh unreachable nodes (bsc#1250645)
  * Dev: utils: Adjust node_reachable_check function and the way it is used
  * Dev: doc: Update the formular to calculate the expected fencing-watchdog-timeout
  * Fix: sbd: Update the formular to calculate the expected fencing-watchdog-timeout
  * Dev: bootstrap: Sync directory sbd.SBDManager.SBD_SYSTEMD_DELAY_START_DIR
  * Dev: bootstrap: Refactor retrieve_all_config_files function
  * Dev: behave_agent: Prevent client hang behind firewall during long cluster joins
  * Fix: log: Disable color when not on a TTY (bsc#1259178)
  * Dev: sh: Use sh_helper.py for su commands (bsc#1254757)
  * Dev: doc: Mention about watchdog-device option also acceptes driver name
  * Dev: watchdog: Improve the fatal error logging message
  * Dev: ui_cluster: Hint the watchdog option should be used with sbd option
  * Dev: bootstrap: Skip inactive cluster node when calling restart_cluster function
  * Fix: cibverify: If no errors found, treat crm_verify result as success (bsc#1250349)
  * Fix: log: Add milliseconds time format to crmsh.log (bsc#1255021)
  * Dev: corosync: Add milliseconds to log time format
  * Fix: ui_cluster: Stop dlm in maintenance mode correctly (bsc#1253733)
  * Dev: utils: Reuse methods in xmlutil.CrmMonXmlParser</changelog>
</package>
<package pkgid="d4831630378839358f57e73c407b57402d80b6393588daa5f6330856d632b92d5bc9aab1bf7cae90a40053db9e44740b7f94dcd8024a2126e78e8de49bfc0e87" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="5.0.0+20260420.f7e8ecad" rel="160000.1.1"/>
  <changelog author="XLiang@suse.com" date="1750420800">- Update to version 5.0.0+20250619.5d3fc83:
  * Dev: provide a friendly message when passwordless ssh does not work (bsc#1244525)
  * Fix: bootstrap: Reload corosync after sync corosync.conf (bsc#1244437)
  * Fix: bootstrap: setup_passwordless_with_other_nodes does not update the authorized_keys on localhost (bsc#1244314)
  * Dev: cibconfig: Prevent adding Pacemaker remote resources to groups, orders, or colocations
  * Fix: report.collect: Detect log existence before using it (bsc#1244515)
  * Dev: bootstrap: Improve node removal handling and messaging
  * Dev: ui_corosync: Write changes made by `corosync.set` to temporary file first
  * ui_corosync: Add push reminder after called `corosync set`
  * Dev: ui_corosync: Call `corosync -t` to do verification</changelog>
  <changelog author="XLiang@suse.com" date="1750852800">- Update to version 5.0.0+20250623.50ad8e8:
  * Fix: crash_test: Correctly retrieve fence event information (bsc#1243786)</changelog>
  <changelog author="XLiang@suse.com" date="1751284800">- Update to version 5.0.0+20250630.23be67d:
  * Fix: bootstrap: should fallback to default user when `core.hosts` is not availabe from the seed node (bsc#1245343)
  * Fix: bootstrap: Refine qnetd passwordless configuration logic (bsc#1245387)
  * Fix: log: Improve function confirm's logic (bsc#1245386)
  * Dev: bootstrap: Remove dead node from the cluster
  * Dev: Prevent actions when offline nodes are unreachable
  * Dev: xmlutil: Address circular import issue
  * Dev: bootstrap: Remove user@host item from /root/.config/crm/crm.conf when removing node</changelog>
  <changelog author="XLiang@suse.com" date="1752580800">- Update to version 5.0.0+20250715.749274d:
  * Dev: migration: allow to run migration locally (jsc#PED-8252)
  * Dev: utils: Validate if local node is a cluster member on peer node's view
  * Dev: ui_cluster: Enhance membership validation for `cluster run` command
  * Dev: corosync: Get value from runtime.config prefix and update default token value</changelog>
  <changelog author="nicholas.yang@suse.com" date="1754049600">- Update to version 5.0.0+20250731.d3091c0:
  * Dev: command: Show help topic completion only at root level
  * Fix: sbd: should show warning instead of error when unable to restart the cluster automatically after changing configs (bsc#1246956)
  * Dev: qdevice: Reload corosync configuration on one node
  * Fix: bootstrap: continue qnetd setup when ssh keypair is not found for some cluster nodes (#1850)
  * Dev: sbd: Add pcmk_delay_max back to calculate SBD_DELAY_START
  * Fix: ui_context: should not require root privilege when using subcommand 'help' (#1791)
  * Fix: sbd: Avoid negative value for the property 'stonith-watchdog-timeout' (bsc#1246622)</changelog>
  <changelog author="XLiang@suse.com" date="1755259200">- Update to version 5.0.0+20250815.8d89c3d:
  * Fix: log: missing LF after a progress bar (#1886)
  * Dev: sbd: Use SBDUtils.get_sbd_device_from_config for reliable diskless SBD detection
  * Dev: sbd: Add with_sbd parameter for the case when sbd is not active
  * Dev: sbd: Restart cluster after configured sbd and adjusted properties
  * Fix: sbd: Ensure stonith-watchdog-timeout is &gt;= 2 * SBD_WATCHDOG_TIMEOUT (bsc#1247415)
  * Dev: xmlutil: Add is_non_stonith_resource_running() and use for cluster restart checks
  * Fix: doc: Add TimeoutFormulas help topic (bsc#1242981)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1762948800">- Update to version 5.0.0+20251110.f6e38810:
  * Fix: ui_configure: Check if able to set stonith-watchdog-timeout property
  * Fix: bootstrap: ignore ssh authentication failure to localhost when merging known_hosts (#1931)
  * Dev: report: Collect corosync status in crm report
  * Dev: xmlutil: Refactor CrmMonXmlParser.get_node_list to be an instance method
  * Dev: utils: Refactor validate_and_get_reachable_nodes for clearer logic
  * Dev: xmlutil: Use a single node_type parameter instead of two mutually exclusive parameters
  * Dev: utils: Skip reachable checking for pacemaker remote node
  * Dev: cibquery: Remove filter condition for pacemaker remote node
  * Dev: ui_node: Enable maintenance pacemaker remote node
  * Dev: ui_node: Enable standby/online pacemaker remote node
  * Dev: xmlutil: Drop xmlutil.listnodes function
  * Dev: bootstrap: Avoid circular import by refactoring FILES_TO_SYNC to use get_files_to_sync()
  * Dev: Get instance of CibFactory by using cibconfig.cib_factory_instance()
  * Dev: bootstrap: Lazily initialize tempfile to store original corosync.conf in Context to avoid circular import
  * Dev: Import only module instead of functions from module
  * Dev: Use functools.cache instead of custom memoize
  * Dev: sbd: Check if fence-agents-sbd is installed on join node
  * Dev: sbd: Check if fence-agents-sbd is installed on interactive mode
  * Dev: sbd: Check if fence-agents-sbd is installed for non sbd stage
  * Dev: sbd: Check if fence-agents-sbd is installed on all nodes
  * Dev: ui_sbd: Check if crashdump is configured before purging crashdump options
  * Fix: prun: Avoid unnecessary sudo in sftp and ssh commands (bsc#1229416)
  * Fix: bootstrap: Correctly identify root user with host
  * Fix: sh: Avoid unnecessary sudo calls in ClusterShell SSH commands (bsc#1229416)
  * Dev: ui_sbd: Add and check the minimum SBD timeout value
  * Dev: doc: Add formula for crashdump watchdog timeout in TimeoutFormulas section
  * Fix: migration: Populate node name during corosync configuration migration (bsc#1250585)
  * Fix: corosync: Fallback to CIB when node name is missing (bsc#1250585)
  * Fix: bootstrap: public keys from ssh-agent are not added to local authorized_keys in `crm cluster join` (#1916)
  * Fix: log: divided-by-zero when terminal width is 0 in progress bar
  * Fix: packaging: use `CURDIR` instead of `PWD` in Makefile
  * Fix: doc: the usage parser in help2adoc should support multiline usages
  * Dev: packaging: add some runtime deps to build deps to support running `crm help` during builds
  * Dev: packaing: add doc subdir to Makefile
  * Refactor: packaging: kill automake and move build steps from crmsh.spec into Makefile
  * Dev: packaging: remove deprecated `data_files`
  * Fix: sbd: Ensure proper cluster restart when adding diskless SBD (bsc#1248874)
  * Fix: ui_cluster: Call crm report directly for the legacy `crm cluster health` command (bsc#1230324)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1769601600">- Update to version 5.0.0+20260126.316aa9fa:
  * Dev: options: Change 'force' option to be session-only (bsc#1254892)
  * Fix: sbd: Allow setting -1 to stonith-watchdog-timeout (bsc#1257143)
  * Fix: qdevice: Make sure stonith-watchdog-timeout is 2 times of SBD_WATCHDOG_TIMEOUT (bsc#1254571)
  * Fix: migration: Avoid exception inside thread
  * Dev: sbd: Remove sbd configuration directories while removing cluster node</changelog>
  <changelog author="nicholas.yang@suse.com" date="1775649600">- Update to version 5.0.0+20260403.7274d51c:
  * Fix: bootstrap: Ensure robust node identification when removing from cluster (bsc#1259683)
  * Dev: utils: Rename utils.ssh_reachable_check to utils.ssh_port_reachable_check
  * Dev: utils: Check if the peer node needs password to access
  * Dev: utils: Rename utils.node_reachable_check to utils.ssh_reachable_check
  * Dev: ui_utils: Move ui_node.parse_option_for_nodes to ui_utils.parse_and_validate_node_args
  * Fix: utils: Raise UnreachableNodeError for those ssh unreachable nodes (bsc#1250645)
  * Dev: utils: Adjust node_reachable_check function and the way it is used
  * Dev: doc: Update the formular to calculate the expected fencing-watchdog-timeout
  * Fix: sbd: Update the formular to calculate the expected fencing-watchdog-timeout
  * Dev: bootstrap: Sync directory sbd.SBDManager.SBD_SYSTEMD_DELAY_START_DIR
  * Dev: bootstrap: Refactor retrieve_all_config_files function
  * Dev: behave_agent: Prevent client hang behind firewall during long cluster joins
  * Fix: log: Disable color when not on a TTY (bsc#1259178)
  * Dev: sh: Use sh_helper.py for su commands (bsc#1254757)
  * Dev: doc: Mention about watchdog-device option also acceptes driver name
  * Dev: watchdog: Improve the fatal error logging message
  * Dev: ui_cluster: Hint the watchdog option should be used with sbd option
  * Dev: bootstrap: Skip inactive cluster node when calling restart_cluster function
  * Fix: cibverify: If no errors found, treat crm_verify result as success (bsc#1250349)
  * Fix: log: Add milliseconds time format to crmsh.log (bsc#1255021)
  * Dev: corosync: Add milliseconds to log time format
  * Fix: ui_cluster: Stop dlm in maintenance mode correctly (bsc#1253733)
  * Dev: utils: Reuse methods in xmlutil.CrmMonXmlParser</changelog>
  <changelog author="nicholas.yang@suse.com" date="1776945600">- Update to version 5.0.0+20260420.f7e8ecad:
  * Dev: utils: Improve check_port_open to concurrently try all addresses (bsc#1262094)
  * Dev: qdevice: Remove unused codes
  * Fix: bootstrap: On join node, retrieve qdevice certification files before starting qdevice (bsc#1254243)</changelog>
</package>
<package pkgid="acb9436c7d2814ef26d72427fe9557c9a43ff364b25fabeebf1646811226a44c11a92e0875494832ea9a4105ae137b6a691c0553176a7b3137a661c4bfee6f15" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="160000.2.2"/>
  <changelog author="schubi@suse.com" date="1670414400">- Migration PAM settings to /usr/etc: Saving user changed
  configuration files in /etc and restoring them while an RPM
  update.
- Removed update support from 4.1 vixie-cron which is really old.</changelog>
  <changelog author="schubi@suse.com" date="1671537600">- Use %_pam_vendordir</changelog>
  <changelog author="mkoutny@suse.com" date="1680264000">- PAM: Use common-session-nonlogin for &gt;15 codestreams
  More info in https://github.com/SUSE/pam-config/pull/16</changelog>
  <changelog author="andrea.manzini@suse.com" date="1699704000">- Update to 1.7.0:
  * anacron: Add support for NO_MAIL_OUTPUT environment variable
  * anacron: Support enabling anacron jobs on battery power
  * crond: Support -n crontab entry option to disable mailing the output
  * crontab: Make a backup of the crontab file on edition and deletion
- Add patch cronie-pam_config-nonlogin.diff
- Refreshed patches:
  * cronie-crond_pid.diff
  * cronie-pam_config.diff
  * cronie-nheader_lines.diff
  * fix-manpage-replace-anacrontab-with-crontab.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1704974400">- Fix anacron not working when /etc/default/anacron does not exist,
  fixes bsc#1218377
  * test-for-etc-default-anacron.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1705579200">- Set safe permissions for crontab backups. Add
  * safe-backup-permissions.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705924800">- Update to 1.7.1:
  * crond: Wait on finishing the job with -n option to check
    the exit status
  * crond: Do not set the return path to &lt;&gt; if non-default MAILFROM is set
  * /etc/sysconfig/crond and /etc/default/anacron files are optional
- Remove test-for-etc-default-anacron.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="smolsheep@opensuse.org" date="1714392000">- Remove safe-backup-permissions.patch -- Merged upstream
- Update to 1.7.2:
  * crond: Revert setting the return path to &lt;&gt;. It is not RFC
    compliant.
  * crond: Inherit MAILFROM from the crond process environment.</changelog>
  <changelog author="jsegitz@suse.com" date="1720526400">- Improve permissions checks in run-cron. Just check if the permission
  matches completely. Otherwise e.g. setgid directories causes failures</changelog>
</package>
<package pkgid="2bd4efaea4bc28400301cd86a92f66d94d3b88b4a9ad1bba4d6d968b9b6aa218a1e32ed6f52399220c885c565a8bab947ea1d8d11a538256ad3e52d04584a5d0" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="160000.2.2"/>
  <changelog author="schubi@suse.com" date="1670414400">- Migration PAM settings to /usr/etc: Saving user changed
  configuration files in /etc and restoring them while an RPM
  update.
- Removed update support from 4.1 vixie-cron which is really old.</changelog>
  <changelog author="schubi@suse.com" date="1671537600">- Use %_pam_vendordir</changelog>
  <changelog author="mkoutny@suse.com" date="1680264000">- PAM: Use common-session-nonlogin for &gt;15 codestreams
  More info in https://github.com/SUSE/pam-config/pull/16</changelog>
  <changelog author="andrea.manzini@suse.com" date="1699704000">- Update to 1.7.0:
  * anacron: Add support for NO_MAIL_OUTPUT environment variable
  * anacron: Support enabling anacron jobs on battery power
  * crond: Support -n crontab entry option to disable mailing the output
  * crontab: Make a backup of the crontab file on edition and deletion
- Add patch cronie-pam_config-nonlogin.diff
- Refreshed patches:
  * cronie-crond_pid.diff
  * cronie-pam_config.diff
  * cronie-nheader_lines.diff
  * fix-manpage-replace-anacrontab-with-crontab.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1704974400">- Fix anacron not working when /etc/default/anacron does not exist,
  fixes bsc#1218377
  * test-for-etc-default-anacron.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1705579200">- Set safe permissions for crontab backups. Add
  * safe-backup-permissions.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705924800">- Update to 1.7.1:
  * crond: Wait on finishing the job with -n option to check
    the exit status
  * crond: Do not set the return path to &lt;&gt; if non-default MAILFROM is set
  * /etc/sysconfig/crond and /etc/default/anacron files are optional
- Remove test-for-etc-default-anacron.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="smolsheep@opensuse.org" date="1714392000">- Remove safe-backup-permissions.patch -- Merged upstream
- Update to 1.7.2:
  * crond: Revert setting the return path to &lt;&gt;. It is not RFC
    compliant.
  * crond: Inherit MAILFROM from the crond process environment.</changelog>
  <changelog author="jsegitz@suse.com" date="1720526400">- Improve permissions checks in run-cron. Just check if the permission
  matches completely. Otherwise e.g. setgid directories causes failures</changelog>
</package>
<package pkgid="949a8285e512fb187d91ccc7609056c6a3446767c576a026d4078ed283894401de97773f1d445f839cdbe92a4a60f5546124b3e4584aa904c1e03ab39346017f" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="160000.2.2"/>
  <changelog author="schubi@suse.com" date="1670414400">- Migration PAM settings to /usr/etc: Saving user changed
  configuration files in /etc and restoring them while an RPM
  update.
- Removed update support from 4.1 vixie-cron which is really old.</changelog>
  <changelog author="schubi@suse.com" date="1671537600">- Use %_pam_vendordir</changelog>
  <changelog author="mkoutny@suse.com" date="1680264000">- PAM: Use common-session-nonlogin for &gt;15 codestreams
  More info in https://github.com/SUSE/pam-config/pull/16</changelog>
  <changelog author="andrea.manzini@suse.com" date="1699704000">- Update to 1.7.0:
  * anacron: Add support for NO_MAIL_OUTPUT environment variable
  * anacron: Support enabling anacron jobs on battery power
  * crond: Support -n crontab entry option to disable mailing the output
  * crontab: Make a backup of the crontab file on edition and deletion
- Add patch cronie-pam_config-nonlogin.diff
- Refreshed patches:
  * cronie-crond_pid.diff
  * cronie-pam_config.diff
  * cronie-nheader_lines.diff
  * fix-manpage-replace-anacrontab-with-crontab.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1704974400">- Fix anacron not working when /etc/default/anacron does not exist,
  fixes bsc#1218377
  * test-for-etc-default-anacron.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1705579200">- Set safe permissions for crontab backups. Add
  * safe-backup-permissions.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705924800">- Update to 1.7.1:
  * crond: Wait on finishing the job with -n option to check
    the exit status
  * crond: Do not set the return path to &lt;&gt; if non-default MAILFROM is set
  * /etc/sysconfig/crond and /etc/default/anacron files are optional
- Remove test-for-etc-default-anacron.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="smolsheep@opensuse.org" date="1714392000">- Remove safe-backup-permissions.patch -- Merged upstream
- Update to 1.7.2:
  * crond: Revert setting the return path to &lt;&gt;. It is not RFC
    compliant.
  * crond: Inherit MAILFROM from the crond process environment.</changelog>
  <changelog author="jsegitz@suse.com" date="1720526400">- Improve permissions checks in run-cron. Just check if the permission
  matches completely. Otherwise e.g. setgid directories causes failures</changelog>
</package>
<package pkgid="01bb5ef523fa945acb558bb38e243c787ddb5de90ee032c9ccfbdcc588505605b260b4f50073b7a272f12d2061050afe067fd252965cb6ecd69dc3ad088f07e0" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="41eda8bddcd3cb301b3cd7fefd84c7a5fc8a88fafea7f4721f7db42013a2d7cc07eea790df91c8d79c3e6132a4055afbf850405c9ce01ce9291f52043e26d59a" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="af01f01bb29ba6527235f5a90ad87a932aeb9c260f839b1766e395159c4b829a9174a8bc00f4a23def097c062802c9df102c3e617cc894719d7aca6dd4e3d1a4" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="80eb3537e92fcc104365c8a7317f43f9a0e7f8fb16d9834d1ed2558549ce84f9942ebb8c7166223a49ec1070a804c0ac20fb8b1d5debcf3bf74e3435c5f88e2c" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="ae4bc99ce9589f90382422a6bf14d446652a0195d83476ecc9b71e0547068ef3e216496ef73a75c883008d4c7721e07d158fbf90acb5802ed3428710e8f4dbd8" name="cross-aarch64-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="b3a60bc263520e0f49901c7c38f5717dcd3c9a0da848f02b76bf3500c311e25f833260d15b716d54f182d0eca225114c4b10d73d13c92c02f193681487e0b260" name="cross-aarch64-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="19754c05de1df269170e59ba11f62962e35a83c3eeb55ab31294979ef2c63bfdae4015f2107cf80bc15e9c9051a936b4db931c23dba602e74279d8a1fe1f7c95" name="cross-aarch64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="0da0560b7eba5248e215a39491d8cc45a21958f9568538049a8513e29246e9e6a71caeef881a0f38c73b5ab14a4641594aaca9b059e3f0dfccbdcb7d905b4ff3" name="cross-aarch64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="3d171e4dbbfbf125d6e636c237ab43665120b93103e8e867e24b7c1d621572d9bb3446ca5521cccc85eac05cbc8b71efa36f79ade264417f60fe1267e8508e25" name="cross-aarch64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="dd9ad2df3b41c59ce4568e539e3c82cfcc0d77b830dd646608ce15e10b6206f8d1f9900f362b9fc6ca2569cc7efd4d334dc8e14c1794728d82b1c39b4c7e8f56" name="cross-aarch64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="bcb5b0d35dce7bf87f0c95621b772bb998287288e6cc7ad12601f2f61698e75dd34f1450909b82952744b324dc804b747471435d0ff3ece4a0f627434acb0ae6" name="cross-aarch64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="7bb4f2e6b242270e2a9cdb6ced7453027655eb79a328c4f25680b40fd27a379c29653e4907bfbe77f4353225630e6e034c32b7b294b732e286d42cb207fa6850" name="cross-aarch64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="777b6f493fd81ed1ea3f4f1d937c7b6cde38ff9acaae4b42564dc36165546175dcaa2110ce4a649cd971011dc72f6ad2fce3778a09fd1901447f836ddfe12fe6" name="cross-aarch64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="585195b68fc0decea0f5f7a0672a07b509bd3bfc5ac1d895201f0323583868c9cfcd369fe32c751b405bfb4d8e96c70eadd69732b210e01ad83236ad609f203d" name="cross-aarch64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="988109f6c39437f26fc3afdc980aa9f62e04640e1acd0037a650c7f6175028f6af6df39c99c7ed005538a1fa44d9b76fd079ebe00f235bb36aa9a9206968528d" name="cross-aarch64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1739188800">- Use rpm.execute when available (bsc#1236869)</changelog>
  <changelog author="schwab@suse.de" date="1739793600">- Remove nis from nsswitch.conf (bsc#1237210)</changelog>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="d551c1a64d3b8612f900beba3eb3f91652283ebe08b225db0749f9cf3fd14d7231d040cd108f63268b8ada28e5e3bb75ee156669590069784e02dd80fdba0a4a" name="cross-aarch64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="a7389adddad9736a71891d2a6254e8f042b7e08bddc7c25693bc8e016279211ad985f3710688592cd2fcf38b77cf8efbb9ca538bce7a55b9b877b9d0f29411c5" name="cross-aarch64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="bf0250fc74b0347e298ff4a5513f8828faab4c997d743fca44e0b87633340cd68d9fcf005b7fe8df3892e389536e435ff8be9445411531da518a88d1d72b8b94" name="cross-aarch64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.5.1"/>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
</package>
<package pkgid="e54fe93292b516d3d089d46b547d6e4b60a7597e325d5c200f07670ee5d4a569e536eb555ec27cdf05a315c3c6a69fc8819f195769d5b95f2ba1fcf5d1bc9d90" name="cross-aarch64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.6.1"/>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
  <changelog author="schwab@suse.de" date="1782129600">- resolv-sprintrrf-unkown-types.patch: resolv: More types as unknown in
  ns_sprintrrf (CVE-2026-5435, bsc#1263656, BZ #34033)
- resolv-sprintrrf-inet-ntop-check.patch: resolv: Check for inet_ntop
  failure in ns_sprintrrf
- resolv-sprintrrf-buffer-overreads.patch: resolv: Fix buffer overreads in
  ns_sprintrrf (CVE-2026-6238, bsc#1263658, BZ #34069)</changelog>
</package>
<package pkgid="a9566049d21b6ad7ac7ce62520babeef53dff3f3537f17ad909a3e14eefdddb2a3f6ad49d224e2e7c1417512a9c8c9ece46ad051ca6f29cf79a15dfd7a0d565f" name="cross-aarch64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="17ca4a769069cf5756fa350c0d3312348395250129fd61390fed5f69d412707c0b093d31848727ded2720f87ef6e0b0f3af16293a9a7a0f6464d49369414fdb7" name="cross-aarch64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="e17130a72dfe027cbbfdb61f5b7cf62efd9e8b3e0919053ca17f81d7120a9e06d9f48ff62335d43b0e160d214d5301ae40e3d7d651d4f87fa8755158b17acc39" name="cross-amdgcn-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="1ea04d76841d019574f829454cbc932b4ad6850821888de6208216da1ff35785e7ee739fc02dc91a4107e696308f39c489aa6e81e6121973a096a52b75fd4172" name="cross-amdgcn-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="381d658eb75bff3d7bf5d90e2000d670b582ddd1255711d6040aea8c2a8fcd530498f6432077d5875b1dbe5d9a97da94ce91b7f204a1b59d0f80e685d75c51e9" name="cross-amdgcn-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="3453310b987848f52c5a1d346b246079973cc5a5d690d8e7440d6983ffbf63539ad9a31e3c5fa4339e8caf2cf16bfaa00f3373917387f9e0a950b3f339ef3dbf" name="cross-amdgcn-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="487a95bd9dc50f7dc477d62483dcbf232912deda469a2bf8f4311685bd9919ea873558f1233cf11d853c94e4361598e9b7c53e2efc8a18e7a4f5b27c17ea5935" name="cross-amdgcn-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="8bf3de62a403190021432b733de5987ad26aebff1b54a4884f77fbc9f51549af53c689b567476fb7cd9a3e51cb2a0f37fe338c38e89fef8586e89a5be44c5b63" name="cross-amdgcn-newlib13-devel" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="fa13fda174ddda3e720fd0a8e5d7ac68cfd640cc6c095a8bac028947a397730cab1bbede034d9fc448181161fcf3b8f0bd524949f96938aeb93efbd8c79872ff" name="cross-amdgcn-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="4f05af9348bda43b66a79fd48fd04897af4380aa4233c1563d79a67a371407053d94e2515e27b98e6d278ae9c51053ca4bc0732a965e4ad55427dd2a8129ebfc" name="cross-amdgcn-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="75bd23779f818648f0b505ca7505b3cf997dc3e3ee092d853846038833f5cb00d0e0ced0dffe346ad561ccde562cdaa418dd321a2eb5c814913359fce6e7a3ce" name="cross-amdgcn-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="76d36aa3325d180da94b581d8ecf9977a535465fb80416cf99bfea968bff08c257826a5b69fdfc00b6b38756644c5bc29cb42ba3eccf862e24e97c4aea5e005e" name="cross-amdgcn-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="9a9b9ed5ecb988d767c5f00b044e64b01b7cd84e2689a39b59c382890b4e9ed37608601c27fcfd28778a48dc0d4e97d2994bbf8630e2786d15debf64f5417d34" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="5f9f9d8b93a15b0ae344435fd5f599d6cb86d74c341e7838e47e2cf0c4242725130f79971804966c3d948576d274ea266264b0ae2877f6030728facb086d239f" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="f4ab509e760d3730c5f86648a21a9500006a2762f476cdd7da20aed6c5128bcd6e2c45219c9a808e41f443f75119c1155b70cd68363c8b120fec1327abe0a606" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="eafc8d15cf90d35becb0a384050cdc2675c1e71042958c023330bd239f22d1e396a0fe12b69d4260dc554bf77b5dc72a7c159ef6ca86146b21bb3d28c59ce4f9" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="5a20441499e932f97248787bc3c1afad58ca4e671e6a139696edbafc34778aa7e2e4a420bd8e5b6677ed6c4959fde6d5bdd36af9d349c22b6d8f345c86cf9f88" name="cross-arm-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="0dd411bc0f8af3915b46043b25930839023c7d486e74148e58c373ddad137ba3c6a3907757b228bbf896d7b0664a96562f3a7d7dbb3963c3d8424bff25650ea7" name="cross-arm-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="da3725123b1ab8d3fbe78ae1da9fef94853f575a2812b3aa62b230431320226818003e9c06107c562a597d11da598b946c860695096ec46ef5a877090efc6dc8" name="cross-arm-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="a846a3396ed3fbccf75ad488a4d92e2e8ca4742fe08472d475ed5e6d2f13544c6c561b1a346b27f08c2b8f11cc178f0c9f355d9fda1f19a498cf9684db14417e" name="cross-arm-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="5317f90b12f905f482c4762fa5130be1a14239ff75d41ca4eac90a542e94a41249091b0ec5b64f129d9cfc627fd47f90b730a8ff88a0f36d3f6b0e63b06f3d41" name="cross-arm-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="3a1ee4c2731bbee84829787be89fab8042accd588edddaf2cc33ac65c41f83b36ec07ba15526c424e8f21238d55881d8d8f0ec886d43614f0262fc667bca6084" name="cross-arm-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="e53737c9ad712cd8f03b655b08ee6b5d8e1fc76d9995a5713536d0cd4e903891cebc730a4a994428863ea7af6bb0fa396464f041128483b9d45be391739c6a49" name="cross-arm-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="4a10cbfe61d4580e352f8e0b30ac05e8e6a880aeea51cd738105453c869de282c6467977acd6e451434276b85febf3cbd73cb250b4de626cc1b79f4157ec18e1" name="cross-arm-none-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="e76048b771366ec65881f4f723e9b6b35279243f48ca97b6c94c2e2e0f9c85614e894717bd6615563b00cdb30d473a9c89f2ec9bf43f79c0091617e9751a6785" name="cross-arm-none-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="2a036b16fc68fa29a40f6a04270cb1832f81396dab44174274b5b88a8da003ed149949882d4bfffe682b8ee4ec838d139743482bd0f7fb48570507b73d2ac372" name="cross-arm-none-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="23ffb4c53b77a26d3525dbaa6515fda01265ab34700803476696cf70f5e8d8340de53e6ba1b26a6a3868303343e3111018092044108da7de4bc42088039dc42b" name="cross-arm-none-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="d4f1d0f3d0c560351c9c55e0ab5db63d1533004c61f56aac6fac2b33dc4234698a4beeb86c1eb8ae931595924779f89e053b88bb37a43e118135ed68175fbf37" name="cross-arm-none-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="68c4a55b57ebb68e76fdc44a6a82eb178da0e2942210a0b4912a2259cd939e116b0620d5d70838c24692cb89ec76593a5af3ac5ac8ab8762790d04cdea38784f" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="2c8db6f6d0bb5bd7c94abce4736c1f748b973cce84ef5f84188a4895d98cd0e2763931ef9f5a2528ad7dfd950448e81e81cea1e74d09b7f67900e521aa2460ed" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="2c05eb5d8eb7dc1436472f3276fb35ea7836115a9d7cd44d420a6119cab25f3a251331705f6afc138e5505778096372457a33065006ce61a3e75fae18a8d192f" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="19b32fb289b58b071ac375e85a8d917ff166cfd1d4406e602a92bb53747ef5f2ef2e5f5ded414afb973b4c0eaaedc92982bc7f1cc8678a4f1828cfc2686542fb" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="13273e625f0ac74e8af334ba4287deb25ce29643e7b491b6ac0a3f9fd960f9c0530d730cfb89e19b5177eb1fb6daf375a562fe677445734b87e6d375656a6bd5" name="cross-avr-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="703150a9a3ffc7c6ee154946e5225171d6d75c53cf4400ad2f3fb2fce9d1824eb1852b73672fc479039b20e2e3d979560cb0efe88a1fcbe0f3ca013e89d7614f" name="cross-avr-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="77cae649f25518479b3094ebf7559ef771072057b09c6bf46b3ffd1e63966df8f5970d7a513c19ee32af9ac12119f70c3538d615459d3875aac4dd4aecf3043e" name="cross-avr-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="9c02cc4c16312c3643785162262680facd18e2447ffd45ba9803f67e9e135a47de06098c1a8b2987c93264ab73e431a7adf4a3dc69d621ad5cb99f60eb9fd856" name="cross-avr-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="c3fb52faa4808836539471d0919dbc142bfe849aeee1c3d74009704a4f80fd1ca598a1d2d9b479bef6506af64fcd6e930a8abf980123db11e09f1e4873c7688a" name="cross-avr-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="591b31ad771be23be125b832842938b830231903af9628f94bc8e0a18f52b1a5c95a6589d58d6224eef29b79eadfa69034714f56fe3867942404d5f80d9e707c" name="cross-bpf-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="2dc5c29c48be7fd8f133af5369b0cd69390f27655478af30579212d512739d4ab5d989fd9193a25dd0dcdf620952a8a558568c3028dfa81e8704034207dae0e1" name="cross-bpf-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="69f3c6b6f6df67237c56ea5b6676da4a147cd6cf00c76a7cc7cca35b099c79161381c6bdbe7dfa8bd603d1e96e76166779d44a2671bdcc812647363fb3154644" name="cross-bpf-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="66f50be2edcf2dd1086808e3b32f2a36c10d0e5cd3ab0a16cc98c70f7df4bd51467debdc833a46b79ff2f48d83a30f3f7f5c9e2a497055fea3d18b16dd196287" name="cross-bpf-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="453080c24b0eef74d46803a96c7ca31933b98f0b72cf415db441d3d90b16624a4e863cab8cabc529a99182af2e7ec64b42a28c3fd87e2cbec44ece4c587e1f16" name="cross-bpf-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="6d38452fd95533c00da83de658bc1ff6c5128cc0e511591b255d794974c28e76a245d7f617150551bb6e905132cd8c44cf7533ebb1119d47cf5b8aa99ad573e0" name="cross-bpf-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="68a13f9f627a3cc8051ce1f0ac0dddb3006d9b38fd2d3b184f0467e507b421c7e96acffbcc65b34f4b5c0744a6416e6eff5de96103309233e140ea51d635b08a" name="cross-bpf-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="f4aa5978a3d5bd4789f1f3601e63d730e52b35261323ca975de9e30bab5ae15656649e727efbef92b2d8ac2a6a6cc18b25765cf7e19893379c0ed317c3a0b1d8" name="cross-bpf-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="24579e2d802ddff41c10ba405d35f3cb707eaf2cec16b32f18042da3241e7f33b99edd7a3089d1fed050f6ca4fb1beafdeb0343d4b18f1ce1b02e21fabaa9065" name="cross-bpf-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="f8f9cfb65413253973792220fdc9f916d39f03b7356c2f749eae5cf28346e8b209f74bde32d377746dae14e8825ae4eeb412f3d70ab49454402d61eb9a911e9e" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="f0862e125e0491181714b2eb5c40e3f75d67c5df34780c8be70b2af634de553c5be5e7e0901bc8ef77d819e87a349a862e70c1c0bfa416f6edbf6eab39d990bb" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="9ef670977eb26c58ae2421faa6bf7a17eefadf58abf049cca535338c2cd4a7ccec271937971f3fe6e911fb19a71c0a2c289685ed28297cc9921412bef8bfc5c5" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="79b1d57d71d78a90a4495e154d7999b2745860c9cd4abf183fdcaeabdaf0c1dedaa01e1290d31b3a04b767728f5507a27a9dfdc05730497b8a8f0b64dbc30d2e" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="1d4978adecad95e95415f1e187c50872f68782cb943e8d10c7a0e8b9c26b94c1957529e32995d549276a149596839f29e4ca4ead4a58edbec87adfeae6cfd3db" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="34e6011fe7d652248edbcef92ed9d11939fd13a779521bec7e2c0e9fe087fb5e6c4a742af03055815df2c01010cb1eb37c6a438118e60cf6b58ed049c1c3b76e" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="94443c7978695c8bf586ff21ba93d64cd2570952827a8ba07a6a97fbdabe53265b579eab6d8fbfe3b63544f992e7880e0d8feb23c5adf7ea7289fa3f74f00917" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="fc230bded3d72ff72988a1d5885ca0a54fde97e807fade5d5f520d44db6253ab375d9abcd51d5987da80fc03d8a3729921716c628671556abb4b82dbfc9f95e7" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="c702a723d87b5c9fb2302e7fea4e3b194569334e18c9709674b7ac394ea9a3034cdf21c36f8c39826787d80dd6a283cbd3d86ec73641dbf13a2ff026a55d0433" name="cross-hppa-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="2cb8db9631cb3d8a0f793a1da41ed9ebaf42ff02c485530893b37a80a5f7bd9a1e802004096ef3c6eea70ca9ff4cafc1ee5cc9d54e1848c4107d62c2b9cfd3cf" name="cross-hppa-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="e311100a46428559c2698336a1f3b47aafc99c2f93b17baac699e7c58535be68f3c25b938a33c1d881dfbea7150d83e05092a6cc4f26937a619b9292fc966c1c" name="cross-hppa-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="ed67699f47359ab89c33f75d06e65c3ddd0eaea1657261be3ae20188547c37d12d7f8e24a938134236216607307f4ec9ca440c9577c841814a52f1dab6eca7d3" name="cross-hppa-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="b9aa4579022ff023fa755e8482a7de07b13cd8373d44fbab9369ab48fdacb8003d73db36e504c15d77875bc0c374085f4d862ea4efa4f0f680004898db111acb" name="cross-hppa-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="a806519107daee436af3cc021546f4578ffc3f6657063dc9d43ffa761494b11ac54312f8e0aa6d20443873d901669fe893a93538122b67e8461c9e5ccd47737c" name="cross-hppa-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="cc05b63d0cbcf724d148bdeff99fc83fdcf43a498bf7789f618f4edf961c0e43127e92cfd7751731bc93d143b209ac4129576b660196c5d7de6b913d6d24be61" name="cross-hppa-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="30baec642d072a5161c0f595d4fc94953273fe6e45efeaaa94141b072ed57cc91fc4392bf8f9dd300ff37085278eae16af990a3c5c251c5b7da7c199f4f10c72" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="e93aedb22939f6deb2371e5a120f875717601857f72e929657a87474c67ebf12501bb144dfe159686ff3f48c66cb6dfaa9f5ad266c28190bcd0aea920f0639e8" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="2b8b8e8da8f2978bd69b8d4086888c42b6e715b4250180ec26866639753c2de90de4c04021669ed7cd6c06daabb213c230761e7af490c7e2ce1800062ce259b4" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="e7c114e0f52e771a99b70ffd1137cd92e32518d8a80e67784d0d52a08779eba8706159275eee7c9f4ae20fa21d7917ad4a2322a624965e16b00d0834be2c571d" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="587ebf60bbd7d5530ca874c23d90d76ce6d96468d771409097387cc95b91385e08e04933128c5278aae3772560cb51186849f40a67b81613cf0e5cc79530b613" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="eea283aa4e0b903093d145bb5b031132c0c8993147841d3aff957e31a8d17f3703a56fe4de204e4fc4c5faa3417416458cd6cf4c3c25961793eb16f3bdb97946" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="345d99446a7e1e801e91be487e0b74719db5647ad1196bed0449c0540782e30a29789d1da0461e0ee8cad7d7ec1196f3f543dce61dfa37b8f6ca4db2250044a1" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="2c8eb5051d60ef57f452318e71bbedfa8c2345536fb233bbede48f0df03c0e4a34c73becf933ad0eb55be7748d2902c1dd0b1ff6faa997fecb2c87e42f91fe25" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="b8dcfc500d1c3035395868fad5511c8f2059f3c877b37d68a45e0ec378f0b2126ec25cf0df384aefdf3061aad680553d4a09bc75da31be2f6a5205433646b6fe" name="cross-i386-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="e6b58b15b9a8104e6c9aef94ef44865f258f84ffdce704029a1d9fed3b81f62160cdd772b8a2db83f3a710cfc89fe471e41a91897c2a416020bcccac9e7e406d" name="cross-i386-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="455778c4c37b32871403e7449d108693fe89d22ecddd4151706bfa184ae87e8dd07307efd563f6b96745b3f62fea36e1aa3f2d2fb3caa937750cf40814e0826e" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="9c9247424f68da9f871f773e4958f8c9a09fd5c105e6184281d49ee12f3dccc291bd6070cee1b00663b4163a59704f6560ce5fc8bfb0639ede7ca79a8d400f7d" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="2663a4161b000fc72ce042ac6215ad6bff8d6ad89b4c523f8f1ee03bffd7e8348ec4d12d2e8aa3ada1f571abbf8f2f815005bebacac98631807e7d6aacd54125" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="9848092f74d6feaf30e7ca3a5a0e8eab78b863602c063c88e3de613a17d49bfe72823353cee9c669975c755750217b533c4e9d38786cfa44e72c42293f2bcf17" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="6e34073da184aaa2014c7bc339e902f88b024e3d573088df47c7f277b32ec7b0eef40d866181070bc43e6885d6af71fd52c0f887a4bcfe6b75448f4ba6433603" name="cross-loongarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="5eb2842b539baf7a0f6e36c5fcdefd80a1ecbd5d9aefcaa4bb86b79549a41d5743b64cd777c75ba7eef8224a8f9b0d3569d097bd56ebedf6f9e4517c9f65dcc9" name="cross-loongarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="02edfe22f74ee8e8bc24559909ff5bd28cf7027e8376427068c40178099d86036b47be3bb78528ac0499d1dc34740b72ae230f5e625247d6876ddd616c7b899b" name="cross-loongarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="1e22d0aeca0b3552f1662c13394fdd2f65a17e5e53fff258cd0d10b96dc86b378e1a28ec79899ad2f3774899fa767183910123aff4ade9ca4d29f094748c008d" name="cross-loongarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="862d6614b86567a1b5a68fae85535b5e4dee6d6fc575cecddf07e534d99ab12a5140935a8dd29df21a3face9ae904575add86122fb864c98d21c6aaa304bf0be" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="eae6060c8cdef07456d3a5555f1f8abddb56ae1d5dfe9f41de8639a765adc568479c571a8faceb474174b1b80d324a6e196a508ef7072c2fcf9c5458f1f30666" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="d5d73376e2e3ba39b0a8f7068fd181705ec9f1e5a3bbc958b31fe1abf01f1625bf0053b9a3d3cdb305d9cfc73631bb2d43f163caa9c08a7fef33683b49dc3ed9" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="8919d53072b84c8363a50408fecdda8eb2120b38fba277442d6cfdeaee83a54ead7be3bac6c467f195d9a1cb6c393e1e898b3f97d037f0c0114fae041b74c001" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="9eb4fe5196d284aa6ef1e1808b40bea69d846fafb04a0d8280c3af57d208f9b6afaa295bf601bb7197a16f87a2ae0a635e7885255d53acebf623a7cf5c2a462a" name="cross-m68k-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="5b75dbfa1ce2986787c050d510e9f31839f9d2c5865487867098220212322b6aabc0ed6209bd346772abf100a1f865e972ce6269477fbd97a01e6dc915c3d356" name="cross-m68k-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="c319c93148790a08123b6a66b1e750dfc26883aabb08ae2e32f169da9f6cfa895dda43940c79a56a0344f9ebe2f7b5a980cc433c4c9b1f37191c45b8b53dd66a" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="eb33fe7977c1d4febfecc3455fd5014fac1faa8eb185388b7007d29dc26c24a029ee8a1f607c9abec63ab0ffd6c0a0d858eda355e57b8a11214ab201b780ec81" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="095fbe86c2ac376afd6f31bc5080a94fb8f936e0712ab91fc6b79cc84612428da1c4b579d8c53d1324514ffa0ff099cd90b0b977fbfaf5bb99455321792b9783" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="f3e1e2d6e80b1f85531b3372f148ee766504f84c930666097ec52b68f1b5136dac5e024d89b53eab00bdfa01fa405b71ae47d3f5cb758ef60366f6f17c69ff5c" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="736184d7c8843e5a9f6ba393dde822b76a80eed3335acf7411448107f5943863588556f359912ea0d1c26e69ee331fb4af9e43d0d474b185286b89b6aba3f3a5" name="cross-mips-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="c84a9571c8792e94663684cf368a8ab0be91e3448f0173fca136ad9d03d97855beff2fe0d1df22b3c42fd35cd058a350160db3e5a14700386bb926f3ca465283" name="cross-mips-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="2167d1a0631e5afa5ef9e50ec6e5b62a51f5efb599d1fb7bb2886039bb71569a41e561e8caac29ad53a9267d934aa66f7008d29028889b581d55e2c380bf3f4e" name="cross-nvptx-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="7de7232c943dc49b2e65ecc7a4985e85b779bd3edc7ac5144c54b3ce0bcfd093ecf9a629d0696a4959f49ea88ead8f3b23a68de32450eac2c2deb1653ba0ef57" name="cross-nvptx-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="a068f5357f0817bfe497084f32e99c3d759cbba6759d6ec63bc00a71663828eb8384cf2ffc80229fff6698134f2aeb57e613516f14ed9b0ea6345e02944802bc" name="cross-nvptx-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="26bbc94ae3399c29ae4b4483e32f3ede501c1125af9fe6c510611515d2588a3eb1c889a4b5ffc911ef71c8edf42bd7a57972a9ea4768a24eca76a4f1623bc13c" name="cross-nvptx-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="fa417d40d59b65a5aedcd6d1f7f594180ec9ab902342864ef76e76724293907a3b872d1f4522804f2f54e59545be84e874f4a47ad5684ecb94ca1a3226e72732" name="cross-nvptx-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="abcc9bb00e5fd47e7d97f8e864df24a96fbec6d1073ecf2815384c0b218bece4b9b987e235a17e73047dcab9eb4f7f1aacea62629eebe715804b58a8f8fcc470" name="cross-nvptx-newlib13-devel" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="24f5c592899c22e18dbbd0237ab31e3296132e5b5b8f2160119ed3820a447a817dc6b0c133085ad04acf0f831f1d70bc06e21823a7d44641cc6c88082659798d" name="cross-nvptx-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="dbafcfa0b88748584685f3a74888eb0b9c2c60d2bb9ffc0be3950b4745f42b0335e3f3d122ee29075ede8f28d26b59625f13a2f442ad6bee6b33adf57034e640" name="cross-nvptx-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="bb7c57ee94f1aa1ffbc73e4f1c4346427b8c2e81b7bd2d5313b489c59d76898a0785fa075216f265a87e4cec385d18f73babbbd07f6d58d73c9a7447f7506381" name="cross-nvptx-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="ac26c012918094d3e9ac0e1beeffe59977d7d6ddc505882e74e57e0fd4e1f39f48d793684c2d75cc50c8077a926a8cefd1f5339f141b254c6d45dab9e121a2e6" name="cross-nvptx-newlib15-devel" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="cb6fbb313ba640796596671d4b5b36dad180da1a6b5d5784cf9a5749296d4701a032e666f0533bd3139cbadf64bb1626a96482b7e5ab020255797ad9ae57b32c" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="e61d6e3547449f3cf6e1a7601f67c6caddf8e37e8b72673dec1dc2cc5c4366284732a1418d43a4d6770107b54de70e80d5a15ad81da0f88aa2a02749da0e62e5" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="97064f740bc2763d12e3829b85e086573ed74cc24894d82383cdca1b54b130f0beff1c08a7762bb192a1e65a4641d3d2b17b3d98a58e87f78abf9a1cba0715e3" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="3686d56373d27c0af5532b111cb349f79503bd3b3aea904668276936568cb5d12f4246ee6175de7d25441d3f80e394167c48e173abc951882df227d0b0cbc04b" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="520e825b6e28c60672d64f03fa016ad438df22d7c5d0ffd035418379e68b9c6ddf4ec8d850e98fcc8f3c284284de21bee41d8417f7c14ec5845f94bfe97b3c63" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="eafc4ba514edac7a21120d638eddca1b39d2cbfe1b9468bd378a27ad5c4cdfb79cf97d6ff7fb732b822ae7a9603475cd4480e500e4a2f252cf32b823263b5f16" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="c7a18f7c67f704d372449e2f19234f0d3d6dcc5452c295b53738afc35b84ce9f34bbb8e1018a12ad8cca98958fc1ed0c40c6ca7b85e41ec39cf59810b65e2ae5" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="e470894e8565f69148849a4d57333925a5e18ab4d35595ecaf215ef9d7b983261f2c35bebdf641b905510aadbdd4256828245247356a40c1215f38229ffa371f" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="13fb59a97078ba605aa42b33c34873602dcc5ef6c3ef8c17460d565a45f24592615784ef284187ec99d3ee321a09205296d8ea3d90934e27bd6107451e304a63" name="cross-ppc64-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="7782e7e0ad2642db355339aa0f2671e3cef2d7c58be6999118414aab49442ca549e4f947993413b4c0ae342cc01d74146e009d03ce00eb5fe61a4efc6f1b2d31" name="cross-ppc64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="34da754fe0bf805528ae6d7462dc7894273bf7a9b9efba4a04e59e6540319e514f7e47103175232894a5ab55ebd45998e05fe912b95ab6526ebc03ac7c444306" name="cross-ppc64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="ffaf30418054164a533dd474965eb28be75ec6e0285fd1d4f2a35fe928da10f4e8737bba11807558b46e88e662792a9ccd8aed0c3f5e17a3988d47226622f51f" name="cross-ppc64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="897bad5d1e9a7553ecdf54b39cc40d0ef21f9572db62a2debe3a7417472f9a435e198104af6532a98495f6cf7eda03faa85f3b897927b07889397949e82d41af" name="cross-ppc64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="ff0927965ba4bf0030974009b27273c5e21d1a1b6d44da3f11e8b4629c99d0283d0c5f3d80ffb156483ac679f47a7d8961c59ef766a1f0e0cd91d075b56ef3eb" name="cross-ppc64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="61722c8eec55c8d9b385afc4727bd1a219b778e28cd834b6ff77a63434153ed7d4e154c6541f0aef141d56889dedd7cc6b222b0a2ffc6219b0aba5fafa3fb55a" name="cross-ppc64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="9345bd47315134aba7fdd2eb387fc2ec6d2f6e38aef8cc8efb7761d6bcad283bd27d98516674a658a80616a18f0bfdfc83e78e221ae3fa8d426def4cf13cc3f6" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="0efa5b40a1dc98efa648ad060c6e366b0b8e3e8fdd510ec4aa90de38c562412df099e937626161236eeebd6a8ceea7bd2a308649bbf7d8a24a5f6da0917a99cf" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="f587189137f9de2068285b7e0fa84dbcf9c16f4ae25298b4b5e643a62f9aed70eba0116e94dd52a248a708635911906f67fa3c68d13bd1dc3862a0115a644044" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="29b409faedeb78323015396da1e7d4f077a692dcfc33608939314a14a24ea992c362ca9987ef28d1889aba434a141851aff28a1d3b0d867b5fd53494a4b5f731" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="669905d6cfca76117bd458b0a3e940977f0ad541ce9dcacd1233f5d30e717296cb2499d51bbd644ace8f940a1fef07e528f0929c888d19fcc4337269bc2d210b" name="cross-ppc64le-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="aa402bbb4e9af8d215e4b1431d159131dcf7948a959e9c3a2a871c537f0286e92f0b27c8d4fc7bb2becf202ec2c699e8d9935d3cddc054840fa79649bdff82c9" name="cross-ppc64le-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="25da05059eba0c3c1e49018873cf90ba240aebd6399015eea109818f718685af096970988212e0f39d2098e74f21dfa26ea2e330ed50dd222041a6aae252478c" name="cross-ppc64le-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="f41c5ffe2b6b06cbc1b6589b8c7211aa3b33d3e3f099dc16a448dd53d0081c578e9af0fbc3a8d64764c3a966f9ed5819d7325bedf56579c066260dffd33a90ff" name="cross-ppc64le-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="a2830968d1ed7b347fcc4f0b32f4ab11f87f591156424bfb4f1db432c645df6f9c0d323a2c1f394db467ea47e622003166bc0f5084007eee2500e85f83168e21" name="cross-ppc64le-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="7a0e9aae7248d66204af9416e943f30a471d7c6d21e8341335598fe3ceeffd6b500792b64208a44a1f1569979643e660031513e38073aee75625a8182d217303" name="cross-ppc64le-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="5c4b4b386b19f5ff03dde731b587ce43a6e25dd6e498c875306eb29de2c1a9cc6fc870b1b4f08f21f56eb8c3c16a6f166029bd4d5325120a18dbe6ee5c44388c" name="cross-ppc64le-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="9a8594d4dc33f5bdfd64717995dce553a6fe3824b5b18c2be9d888be5aa5e7d26307d6abd47b3f99108c7c98d6e73c68c16e4acc512190d394cc209ab62c029b" name="cross-ppc64le-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="16dcd8699eb8e718559c0b55fd5e6fb3cb1e6acaf4318582fc46f79f7bb34456430a7a883c84a5f560217510625dd6d0d1d327d87470468e34015b1dea01b451" name="cross-ppc64le-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="bf911bbb22f79e1d7a9aba4b8be3844b994600b39eb11ba7960f046e97671fcb512f32d7260e515b3e855e4ac544bffa8f51ce23d01ffb3fbb4caf37bb3b0320" name="cross-ppc64le-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1739188800">- Use rpm.execute when available (bsc#1236869)</changelog>
  <changelog author="schwab@suse.de" date="1739793600">- Remove nis from nsswitch.conf (bsc#1237210)</changelog>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="2c7c891a40e4aa4967a5d8da5c6dc8d10253db22bad1ef5bd416ed1345fee202c9827a308dcc6c92ffc69e429c081a12a68524fd4e653f523a57d3b164acf927" name="cross-ppc64le-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="60c71639d69a810f7474dd82c73e2ca74458932755026eeefcb2f35ce3ccad75ecb198b2351f19dfbfe8dc9c8ea78d36f274c428e2011d939c5a8e338cd5953a" name="cross-ppc64le-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="68be61ff29d93502f7bd20c6d003074e96fd8d2658c4a34f4bfbf68995ef5d40ac7b5d2d69fcf7dbc6eaf3e034188459e1227c6626a6717a1215e546ca5b52e0" name="cross-ppc64le-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.5.1"/>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
</package>
<package pkgid="1fe8420114caa30c2d7eaa502d60f59cb0dc0f06280c2ae3a3fa8662e5f2ec7bf3b002574f5ddfd58c7f1777364fddcccd92d4028c85736ada4058e2434c45f6" name="cross-ppc64le-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.6.1"/>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
  <changelog author="schwab@suse.de" date="1782129600">- resolv-sprintrrf-unkown-types.patch: resolv: More types as unknown in
  ns_sprintrrf (CVE-2026-5435, bsc#1263656, BZ #34033)
- resolv-sprintrrf-inet-ntop-check.patch: resolv: Check for inet_ntop
  failure in ns_sprintrrf
- resolv-sprintrrf-buffer-overreads.patch: resolv: Fix buffer overreads in
  ns_sprintrrf (CVE-2026-6238, bsc#1263658, BZ #34069)</changelog>
</package>
<package pkgid="829a6b148f3d6993dd85ef72aea64905e89c53df76a336b6558a3185ea5b706dfe08126eff2c22c79c31bf4b40aa386649d71f3c710c475575b68274d5566de1" name="cross-ppc64le-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="d596b2e3ad4524f3e9a338ff829adf02505faa5e8c08a847306ce648d76c4cf341ff06f2761122e41bc2d171a0803d528e49defbd05118291edea648b9c934a1" name="cross-ppc64le-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="947b614e86ce548da42f69e2fe7bcdb9b3ec25d13059fe5335c8d4423f8c39a554266c2068d4b26c92baa9a1dc4159b473558732c4514b5c61b73d7e6ce9c3ed" name="cross-pru-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="a6c7e84f1de63c647d2b48b8c2b2017ad596373ae2632db1a33755f809543e5602c6bad3b4ede76e126560e663c871069b51770923fef24f24b356f8d9107969" name="cross-pru-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="9810a95ef94f2a79a47b316df41d8df35da3d0b49d53e0a6910a19a689e6ea2e424ee41069547f8a645f2c506ccd80406060e06cf3bb0e40e592a8e703171d3b" name="cross-pru-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="4d13547f3267ec9a0e928ff0c6f686c443548117ed5d5f49bce2ad65b2cd233b1789b14db709f79101b0000d0a411acd901c53a95282d39d8b52bacc70ef2f07" name="cross-pru-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="c983aab03d9f859201dad48b0e947c48bb50ddcc52be68fb67f34587cb7c7344a845a2cf0a7d7953f1f8f5e54d4ce8d73e1d83a24f442f9ce100c773e30295c6" name="cross-pru-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="d727a3ac39998e3a617775fdb682a7eca9df5b6392e112e9fdc32c170ec99d04e35af8cfc6ab0a66d072f884b56a413f1633575005a039879f0ae11730cb5c2e" name="cross-pru-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="2bd9f61a64b8858811b59bccaf825aed5b7c8b47725483f26833dcd861ebd2bdb4125430b217318f54419c1ae265355b1e49080133ebf548da122a5d662cebf5" name="cross-pru-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="ad7b89a6b8893d9982192c8aa74da7a9337f987fa2785c88cff3b5199c52f8d1bc2aa3d9794d83534ae764b0a73bfb49f5f253966653d85ce005e9c4b75385f7" name="cross-pru-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="82e384577239b10912f6e66b88c1dc9c4b4ff06b312e49db79192262f77187c062f4a0d5c40cf70f58fec7ed5c93b7f7a17b1cd3e4e1df7da3e607408f11b272" name="cross-pru-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="a700aaf1938ad2dea9dc05a82fdce9e8b74579f12a7e30793203ade3db32de559d975cb82b58bd41d24bae5f344e9273ac208d90c85ce5b4376c1c852c6615cf" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="9bc7af1cb6043f1161d89bb4d2d2bd0adfd284d14c4c5f72caef35415e28893232bf353e0038bc2c372293e27b9df1b0196fde8037ba73952f3c95ccb476d3e7" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="d6ed04c583607905f297e781e7a6d5110f7fc32ad8b1397810771611f805091e91ce850b6467b5a5cf97c93eb9023612a1272c54fb3733f5f848a67799e57547" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="6465dad88af010b700c94e006ef14ae5e0eacc9aae4a89d7de15a0a9603af4e0f7d33564f686cdfc7d63dac66e551598173dee4efb29cce5ba106bf86bb1546c" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="7899ed536a1601b754e79a28912ea77b431e814598fe880cfc65d61fb48eb6e18a5a2d7b992f4f3b6532efb8067b0f104009a7bf3f599caa6870f974a919da77" name="cross-riscv64-elf-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="981ca9d90b4c0ac0593575fc76a9f4314a668a8d909ea60f615f17706f4cc3c478b56e0ef75442a2cbc3f39ec277833293ddc9638c910a0b2d1f0856959d05e0" name="cross-riscv64-elf-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="96dab8c1d61c657414958117f85182ec27ac1d905d5836e7b7912cf0424a51011933db531d3dcf3f545a0ce8882c039ff3ebe306e88943f17f0b7211ab8f8744" name="cross-riscv64-elf-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="ed0f4785ca45d9733ead11b900b4987d5af704579ba9fa8aa39d896d89cd077ffdb69addf3443ba84fb02e2c252212a64a3d7d3fa43d4aafebdec26b3f931ed6" name="cross-riscv64-elf-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="452614598be1fd38e3cc5cf6090464c43d2b7a571d9330ba1f083c4a7008c0344d1738d91073fae8636b0cb7bb1f17d093d4752f3641ebdc10e2cafb11e5551c" name="cross-riscv64-elf-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="59a5acc21b55e1146bd6b1ff56a63240652d934058fea8613973306a48cbbc9fdade531e0f77c107c228ae8439759a2f68f5fedca57b53544af4ebde2d1e5538" name="cross-riscv64-gcc13" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="e18f601e9f783dc5d652fca94b284b0475e4dcf62936c054ca8a4cce779c2dffeddde2088d6e41fac72799b3063a48d3451b8226fe681f71dd975fb9f011ef9b" name="cross-riscv64-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="c8a83baa8bd9b48ee594f0c280503ac85fd018d787cb8b8f39588deace5a26189c3a4caa8bdb9e1a7edfedea6f657ca12f9d46539609e51536a7559a694df4b8" name="cross-riscv64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="e1646df190dfcc549c23796e3791cb6f9f037c64573433e961190167efdbdc506ca7eaacf09bbb19f907e4972b97890d4b71fb8ae97362ac1ecf6f8dc1967312" name="cross-riscv64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="e8d1a24fa311d1058ff37fd1bc07181c547fba4658fcca83ce5c00c3a344ad9188f4a0287eedfb5f7c210a7e1c57799f6d381cd4b06aac72fe623ee1c977105b" name="cross-riscv64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="fb99cf23a9ddf3d113b0d33c1ea4bbf224f9034e793c4f4c7b7b1e84807c59553ce5bbe6065cfbc7be4ec96b0b20b281e98d5849c6a7ec5e7ebd93f76a47c5b1" name="cross-riscv64-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="c1dbe69bdcaf023c9eacf00db0e996b729d7b7bce09e148f06b3cb8b0899f456ae436d05e26b9834fd2b797f74ea672158d970592fe98be7e93636d9e6ba1efe" name="cross-riscv64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="109fee2112a79c5c7cb6dc6bc2ffc7c00b7e10e4689f64eb337f86d893942a6e83e8f342192a09beea9532f358d1098cd270afd6a1ce6ca06d1991f2a148b0a6" name="cross-riscv64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="df86c4fce675b8308a862d68ce0bc380070aadeff546db8da89f590416afbafdbe1a524bdf4b4eb6140aaa477d00cdebfa4899d62d6c6083c08eb60563080e33" name="cross-riscv64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="00a962f612830fad7254e0229d5e8011a49f105f321183f8b7ea8a0b3ff104bbed06f6d101889808da787fb1e0c59790023589d7f6e2563a9b688f4d1ed82e77" name="cross-riscv64-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="0e7f03eb3054e3d0109d7743f5fe793ebbe16f21e927ad6a992f1d1cef44621ddc92d0135888e1be3d7f63b5a52e970c1c618fa50712bb7b22f3ffd3f36d1643" name="cross-riscv64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1739188800">- Use rpm.execute when available (bsc#1236869)</changelog>
  <changelog author="schwab@suse.de" date="1739793600">- Remove nis from nsswitch.conf (bsc#1237210)</changelog>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="de94ec0f1f08a026499996b37414f434ee989350bbd1bb40efaadb162b0b8dbc38a358ad3604e878159522eb95de9b309976fe51f29f480566627d6cae1cb55e" name="cross-riscv64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="40069495eefa61b57716ca0c6602d89b1308eeb235e81234d1416ab9afdb4658907f9c42d26be31346b87c4fca4663f5a8315a7ceeb7aae3e95075ac37220339" name="cross-riscv64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="f85d79e4554557888673316ae1e60b8dfecc65320981e1aa5bb8eefb792d103d0414ee6dd2c14573ab1a86228b3fd92c403bd259ee41a189a8c05cb972cb5082" name="cross-riscv64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.5.1"/>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
</package>
<package pkgid="3ddd8bb2f2e06cc1a150deb745c110e0d58c26f0982b5f0d1cea2f5b92d51a0920e12c6fbc7b373fd6f34f4958c1a6c1a6adcada7deaaafd231cc151124aea43" name="cross-riscv64-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.6.1"/>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
  <changelog author="schwab@suse.de" date="1782129600">- resolv-sprintrrf-unkown-types.patch: resolv: More types as unknown in
  ns_sprintrrf (CVE-2026-5435, bsc#1263656, BZ #34033)
- resolv-sprintrrf-inet-ntop-check.patch: resolv: Check for inet_ntop
  failure in ns_sprintrrf
- resolv-sprintrrf-buffer-overreads.patch: resolv: Fix buffer overreads in
  ns_sprintrrf (CVE-2026-6238, bsc#1263658, BZ #34069)</changelog>
</package>
<package pkgid="0cc7ffdf1ec6d8a7424ae36c2682a27d9cecf188a4a58242cacd74f4f7f5b3c96c6018d30324d5497b99e6516afa4af9d76ac9545e8b0064ba6b2c4b683e27c7" name="cross-riscv64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="3251916dd2b6be37458a45905b06a8abf403cdfcafbde81d7b2e35dcaa6bc428ad4da9e03d27bf24ad4360eb806c8a489a47a1b8b5836ee1a7246afaad218197" name="cross-riscv64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="2ec28d40978d12a13fbfec32f9f3e5fda583ef1bad550c253e64ff1c45e6bddd17889d7ae79b3e21b60b3261307d18c5bc27b4fc0f180223e867279ddace7f3d" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="265709a40900e431cd39e21c6a3bb797f419bfc380f23eff2d540c1c980b888c976dd89eeab0df725f8d2f68f4115600679c211bb74c509ce9680b651548a8ac" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="86522d763aebd75e44f7e2d8be14b19fcee168d27b72f5685e6cf3ef5cf7c5cb64873d7836ae309fd914bb2adff564523927bc1c9dd4156cb773f16b239ebea9" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="6a8ffdd8154fbc108c4b262a2f681f396d0cf5d00d3677363065daff879ca08afdae98503926e4533f01c2615fb6bebdd9653e8ac3a1ee853fefd24a9a5f54dd" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="e5cfc264d12a5ad2573824b9e7728cad8116123894d374c951577bee6bec570c7d354b9c283b3a575b98c3f5b6decd6477e5e27697e18a12f2631b4bbfa85a59" name="cross-rx-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="8d9aa847cf7c8bb9b326bca972499f8d4af9eb82aa172538a4c7a9f08c97ba613977d1ea913d20e4a11d5178979d83f5933ddd95279768c7bcab9c34399c809e" name="cross-rx-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="9d12080eabb9b6dce4eeb8b70703feb2ea7f9230240c818e95daead4d0bce353736fd5cb8b39aee222cdd21bba132876b90d7ea99bb7b9b1c3a3ae822ae3f755" name="cross-rx-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="c5447a982eb4cffff07f236f239ef75aa9a66e41e3ff9990ab44572236ebc237fb9e293d35cbed16bf3628ded9bd93344c11473c8b3249855724b00018b23318" name="cross-rx-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="edaaf27be3ae808451297227650046906895ebf136d950f03ef7afa640d8df24b73cc4fa4df48d8962df9be385bc0a801c87c540d4ef077897edd739682ce1e0" name="cross-rx-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="1ed753f55bd64c7b5692bd66f8bff94f6d7f8cc761fb1ef7fd51acbe3518cce5b4a1c518deddf96ec8265fae3b6d731a2880b16b58eb13072afa1ced2930f68e" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="7fb1183423cc4ee686b2fd2d14051872ad559bc2d9d8bf9a1bf6825adaa4a0b1b444c234f9df81b6ab657f9c620de0a90a34f7eb8ffaa3cd5f49d1d15673d7de" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="38e5260a9c4778aea3c0d58dd0ba15c4f34bcde8282d6bc22360ea19e8ef92e7088e4d5fe665825fd6b84e59cdea77d0ae563ac457d31247429e89a5c8c6ebbb" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="b0f2765753a54c8b4fee442f2a66f4f1fa72fa43158b71b03f21f89736bb9b566200e133e49a289236cbe633c0b79a85f4853fb8f05030eb5b891d7e6ffea09b" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="4aba555de17c3f4c67e876ed26dd357653c0b7cdff05a3566a13b7da4de85bbf4d564aa05f9a7725f29ff927b2a5c661aa3c864ca853fda7efa1c8abc075f69d" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="4ebdeffe53af99c39903dd7bf25b7ab36d4f1eb7938bcc55f36547e6f7503563846e03afb50e6da57ee2d457ee181faaa1297c88a674ed620b950a99b06f891a" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="6b7a53186e71e440ca212325c1aaa38073e6347f05c00da36869a44ccfb82aab12444eed85246229670575da7ba24e5dfecc5125ea44e702e1debc0d08d41022" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="c4208cc8d5727c46d56a609910069f81d61254ff0e2c74a119b607733cc11aa399a6b02e814494c5ea8cc6b391e6639de76eeb5441aa3f26952afff4e984e44f" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="a9bd375c360205b2b90e2ad0c649080527d11b12f1fcffad5e843e46887dcb70ade91e22fe06e4c0cdecab16f246b8ef9a36c25f782082b6657b952fed205245" name="cross-s390x-gcc13-bootstrap" arch="x86_64">
  <version epoch="0" ver="13.4.0+git9739" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1741867200">- Update to gcc-13 branch head, 4ef1d8c84faeebffeb0cc01ee2, git9426
- Remove gcc13-pr116657.patch now present on the branch.
- Remove gcc13-pr118780.patch now present on the branch.
- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Replace gcc13-rs6000-Adjust-fpatchable-function-entry.patch with
  a backport of the now upstream -msplit-patch-nops in
  gcc13-rs6000-msplit-patch-nops.patch requried for user-space
  livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]</changelog>
  <changelog author="rguenther@suse.com" date="1745323200">- Fix s390x build by using a glob for installed libgcc_s.so and
  libgcc_s.so.1 which only appears when the former is a linker
  script.  [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Update to gcc-13 branch head, ec78a0d9962f144b13c6da3ebe, git9730
  * GCC 13.4 RC2
  * Includes gcc13-bsc1216664.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc13-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Re-enable AutoReqProv for cross packages but filter files processed
  via __requires_exclude_from and __provides_exclude_from.
  [boo#1219031]
- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749124800">- Update to GCC 13.4 release
  * collects regression fixes from the last year
- Remove hppa icecream backend to avoid conflicts with the
  hppa bootstrap compiler</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).
- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
</package>
<package pkgid="9f888b83f7b71911521af20f1511f82ccdc26f2a77b3477732ea8ec2cd0494886ca9f0bf10c4b5bffa701f67a70133be766d7654cc491803bcd7d868a95651f9" name="cross-s390x-gcc15" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="3f952ea9b023ecfae45fc60826213234e489707df45cb2a1189d2820ca581a048993a381a2569808600384d433b72ac36fb0b2e0a6fda9fa710e01489857fb8c" name="cross-s390x-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="e20d9ee2bd21136ffaa7e729515529831360aef3ec15bf5083d16247bcbe9ef75e639e0c15ecc318ad6606fae8bc88e87b94793167caa4f086c0e2da3d82031f" name="cross-s390x-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="2b8382d3a0fdcb2b0b4585420e52ee0650eacd1d61419be9be0aeb1fd71518fe6825cbdaff2f6823b133802156fe79d4d0070a08832bcf116965ad4b55f33fee" name="cross-s390x-gcc15" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="17e25462aebcb54f81f4ebba108a69e488f3061763e11db4c4212e84a04487320cbfc91e40d629d302a00bb0f0dc00aaf66239b18a567eedd50dfcc7711d9db5" name="cross-s390x-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.1.1+git9973" rel="160000.2.2"/>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
</package>
<package pkgid="20d336a1e9813a469b1c63c7ed1c2fde19696f7efd452ae0516bd29f97826230126182a7f95f533a488d352d53aa50390a484f4ca9ba97f1eb1f1f4d8e6da8ef" name="cross-s390x-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.1.1"/>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="2e7ab7899e5e3e009e9299964777e2d2f57cd72732926803556782c44a9ba9cbaf19e8179e7b3043cc090a4af1c13a73d8c90426d68ccc7b1b4cf276aab647d0" name="cross-s390x-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="160000.2.1"/>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc15-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="9aa5c9b8479bd35ecd6ead44c6b9c3cadd01327b7354c6fddc547ce4d9e3f5a06fcb292892e7d0fb0ed4f52a3805d97a3461bb316ec0b9c0a8313e50e7d6c04f" name="cross-s390x-gcc15-bootstrap" arch="x86_64">
  <version epoch="0" ver="15.3.0+git11272" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1759752000">- Update to GCC 15 branch head, 15.2.1+git10392
- Fixes PR110812, Check availability of builtins at expand time</changelog>
  <changelog author="rguenther@suse.com" date="1760961600">- Add gcc15-pr120424.patch to backport fix that cures a miscompile
  of libgo on arm.  [bsc#1252306]</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770033600">- Update to GCC 15 branch head, 15.2.1+git10776
  * includes fix for bogus expression simplification [bsc#1257463]</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1770638400">- Remove loongarch64 from quadmath_arch. On LoongArch long double
  is IEEE quad, so libquadmath is not needed and no longer built.</changelog>
  <changelog author="rguenther@suse.com" date="1771329600">- Add gcc15-Wtime_t-conversion.patch, SUSE-local
  - Wtime_t-conversion.  [jsc#PED-15601]</changelog>
  <changelog author="rguenther@suse.com" date="1772539200">- Update gcc15-Wtime_t-conversion.patch to allow conversions to/from
  uint32_t.  Filter out -Wtime_t-conversion from flags to build
  D target library files.</changelog>
  <changelog author="rguenther@suse.com" date="1773921600">- Avoid conflicts between %gcc_libc_bootstrap packages of different
  versions if update-alternatives are still in use (SLE 15 and older)</changelog>
  <changelog author="rguenther@suse.com" date="1780660800">- Update to GCC 15 branch head, 15.2.1+git11263, GCC 15.3 RC1
- Drop -fhardened from RPM_OPT_FLAGS</changelog>
  <changelog author="rguenther@suse.com" date="1781265600">- Update to GCC 15.3 release
  * remove included gcc15-bsc1257463.patch</changelog>
</package>
<package pkgid="51adbfa430093d8f23b1fc3d33a567d408f4fd80dd3ff0a108fbe9e77167dfedfdf6283eeaa543007003dfe4f211f59662c8cbc8bdcfc03c48808eed4b7a1ecb" name="cross-s390x-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1739188800">- Use rpm.execute when available (bsc#1236869)</changelog>
  <changelog author="schwab@suse.de" date="1739793600">- Remove nis from nsswitch.conf (bsc#1237210)</changelog>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="efa105d6b04bbe2e1f9b2ab7dbae7546e1db5b8ca6f9e2ddd648d06129c42549d2e5935301dc5087dd290bd47a99c166dfa1532a86aa85a1a1ec4c7ee4cdd26e" name="cross-s390x-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1740571200">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1741780800">- Do not build libnsl1 (bsc#1239459)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="2524102fdc6d5f048073286fb6d52eaeb8299f22f0fd203a5383921faf3723634145711e67d059e7ebd1ee4959f9815dad0a3d0ad3be23fd5c0ccd10515cf988" name="cross-s390x-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.4.1"/>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="f0b8977e3a8e9b1e5bd5db435736aa4b723bb4e88271f36ff72ee8c31c09868db4e1022463579cba15726e3556222e0747225e8040e7ca75be1054c85e82a37e" name="cross-s390x-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.5.1"/>
  <changelog author="schwab@suse.de" date="1748865600">- Filter GLIBC_PRIVATE symbols again
- Drop ngpt provides
- Compile functions in libc_nonshared.a as PIC</changelog>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
</package>
<package pkgid="ebe7e1963d23aea61bf21e83ee782ef65ef0054a29eda3284a8446ef1691fae8e1b708aa05b17221a19de5255bc69c659c00ca312189a30d5ca1989bbb3745f2" name="cross-s390x-glibc-devel" arch="noarch">
  <version epoch="0" ver="2.40" rel="160000.6.1"/>
  <changelog author="schwab@suse.de" date="1749124800">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1750161600">- ppc64le-revert-power10-strcmp.patch: Revert optimized POWER10 strcmp,
  strncmp implementations (CVE-2025-5745, CVE-2025-5702, bsc#1244184,
  bsc#1244182, BZ #33060, BZ #33056)
- ppc64le-revert-power10-memcmp.patch: Revert optimized POWER10 memcmp
  implementation (BZ #33059)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1759838400">- abort-msg-s-underallocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582)</changelog>
  <changelog author="schwab@suse.de" date="1768910400">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256436, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
  <changelog author="schwab@suse.de" date="1777982400">- ibm139x-pending-char-state.patch: Use pending character state in
  IBM1390, IBM1399 character sets (CVE-2026-4046, bsc#1261206, BZ #33980)</changelog>
  <changelog author="schwab@suse.de" date="1778500800">- ungetwc-byte-stream.patch: libio: Fix ungetwc operating on byte stream
  (CVE-2026-5928, bsc#1262464, BZ #33998)
- scanf-mc-buffer-overflow.patch: stdio-common: Fix buffer overflow in
  scanf %mc (CVE-2026-5450, bsc#1262465, BZ #34008)</changelog>
  <changelog author="schwab@suse.de" date="1782129600">- resolv-sprintrrf-unkown-types.patch: resolv: More types as unknown in
  ns_sprintrrf (CVE-2026-5435, bsc#1263656, BZ #34033)
- resolv-sprintrrf-inet-ntop-check.patch: resolv: Check for inet_ntop
  failure in ns_sprintrrf
- resolv-sprintrrf-buffer-overreads.patch: resolv: Fix buffer overreads in
  ns_sprintrrf (CVE-2026-6238, bsc#1263658, BZ #34069)</changelog>
</package>
<package pkgid="acd0c4cc9b933baeea53bed81febf9c2c2d9cb91e79be3e2e037511781a52ea4814fa4d85941395a9eb7e902d67190d419d31fae526a9fc5f8a2d0592e101890" name="cross-s390x-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="07e54fa240bb610887d27f2098c829fdebb8e8f0505ad893bbbaf7e7a766dbee36bc95456415a1f29a34b5a1856f1e2aa48f8dfbd8af1943a0a513887e342fe7" name="cross-s390x-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="1d7a75dbf0e7b4d2c3b9cc109ac28ca94c478508aed1b4e30834e6319a69357053ec730ab383581df7ba6b642883c6dd3381dd7a8e1d15a2be4c0ac581c104b6" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="f333fd40e696b1d7870a2fc6d1057db2820b8154c1dc0aef9a5ab93f6e6e4a697fb9bf82696c572555ab348bc602715b3f04bfd3971ca4e086b8f0000c18b6e6" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="715258fa1377760f449d82abefb618ec31e00cef1e63cacf7ba4469aa59580f06fe613a70a87e1a71955b1d411913c8a6167e841e7a5d75851ef9dc53d1de4d0" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="1cc0c4c04519beaa81aedf839c2079b9d1d4d88dce807abcfa95dbb7db5b28a199a3664c0ee0a31d96fbbc48a486a78cb5dae1f9d7ae160843f3d62819f2e206" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="a863091c50beb4be8ae957637ba334735b6c9b12ed100caf28e4e0c7d40b3dbbd99b6c245948ae1a8da8efbc82436ca920a9d282ab780d1597b391bc969b65c7" name="cross-sparc-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="6f10122367d42727d5b44a6cbc6064752bf722b26f96b7aefa025b17f9a92119549ae119a149caabd06afe8a8917d2af0517908225681d719a79413a218f3e74" name="cross-sparc-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="470a2b60ed2f822b7cbf452bb81d1c6729376972408586a6fdc252a0a267ac542b5ddf1e665a223d7abfbf9beffec49769578147c96cbb2afb0ed2c043f369a1" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="9424bb8f85d9bd3e535421b85c867ba02d2290b59457912e7b80aa9cd2b208cfe11ba5eedba25919141bd476bc5e4d80f9c6176cf309501f4c809fe64ff070c8" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="54298b4807055a0187a32b1425e70e65ec351a78f8776408fd13a6c59dcfa245d381d78d6c6058f1133531a2b33653ef17dbe2a30dbd03faa3ae8ea97d16c5c9" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="a498ef92d4395fee4fe94fea577e8892ef78e9223a70393732ac5875c05e786a766539615752532d108a6926933b54f69bd3d828700e114829691d5bc989ea9f" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="9f127a081763ee86fbfaac514b05772b90d85ca6495db8eeffd9eeceec184e648f90877efaef1357ac7b312800d71e25ed0eeee28467b049ade5de2dda3293cf" name="cross-sparc64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="b598c3976af77ce8d5f9c9c424682d215425e363ec428f02fc65bcd0bcb4a72cb3244422c37e8b9f0936b27d56e98b2c7f0968d0f522343fa6d56cbd539ff8d1" name="cross-sparc64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="eb6d933470824ec1db96a473bf89b6db774368b5aa8c0c75d366632c520fd4bbb0642dd414ebbe42eba21757a31450e51afb4c61b850ffec5a2f56021d9479a6" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="f808a3c96ad98f9cf546a8efbc515e86e3ab20f5fea89e9a84b8e0921363e7b738093bb9f6863e89d52a0c9b2d1172f987016121540bc31ad79877d88418bd73" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="b3008227d4d95e7861671671c37432303db6614c57dae420312baff7265409ced496d6f78f9bb6d9659a16efcbc3232295db5ea1e3b02c451b772312bb95e234" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="90c204b7b6825473d5f5a12ef13c88366be3cb95653c4b3912a756a4e52c66fea32f5542475dae848c9fb045615f7aa38e054c6c6a955ab4d9b3f8828fe94c4e" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="dc960a13cc77c58bfe743a0238d85622ce9c30cf2aa1a423e4ac36408033b812b3acf3213abaa4479d669da2721903dd6fbe8e48678af9cd9fa066b3d074ccb7" name="cross-x86_64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1653393600">- Update to kernel headers 5.18</changelog>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
</package>
<package pkgid="2e3775a08b64b8ec49730b6242fd85d576b28f4614c3200911e36e451dd3ff8b6a36e1935f4a37fdf2d3259054509498591a06e749402fd62bfec25b37ca4416" name="cross-x86_64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="6.12" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1659441600">- Update to kernel headers 5.19</changelog>
  <changelog author="schwab@suse.de" date="1664798400">- Update to kernel headers 6.0</changelog>
  <changelog author="schwab@suse.de" date="1670846400">- Update to kernel headers 6.1</changelog>
  <changelog author="schwab@suse.de" date="1676894400">- Update to kernel headers 6.2</changelog>
  <changelog author="schwab@suse.de" date="1682596800">- Update to kernel headers 6.3</changelog>
  <changelog author="schwab@suse.de" date="1687780800">- Update to kernel headers 6.4</changelog>
  <changelog author="tiwai@suse.com" date="1707134400">- Sync with the latest SLE15-SP6 kernel, as of commit 3a5699ce2499
  (bsc#1217465): linux-glibc-devel-current.patch
  * EFI update (fate#316350)
  * amd/amdkfd updates (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041 jsc#PED-6069 jsc#PED-6071)
  * Sound updates (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114 jsc#PED-6067 jsc#PED-6123)
  * UAPI fixes (bsc#1217382)
  * IB updates (jsc#PED-6864)
  * KVM s390 updates (jsc#PED-5441)
  * RDMA updates (jsc#PED-7574 jsc#PED-6864)
  * Block updates (bsc#1012628 jsc#PED-3545 bsc#1216436 bsc#1216435 bsc#1218003)
  * BPF updates (jsc#PED-6811)
  * virtual/devlink updates (jsc#PED-3311 jsc#PED-7785 jsc#PED-5853 jsc#PED-5505)
  * DPLL updates (jsc#PED-6079)
  * FUSE fix (bsc#1012628)
  * io_uring updates (bsc#1215211)
  * MD fix (bnc#763402)
  * Media fixes (bsc#1012628)
  * Net updates (jsc#PED-4876 jsc#PED-4860 jsc#PED-6079 jsc#PED-7574)
  * perf updates (jsc#PED-6012 jsc#PED-6121)
  * Arm64 updates (jsc#PED-5458)
  * PowerPC updates (jsc#PED-4486 jsc#PED-5452)
  * S390 updates (jsc#PED-6371 jsc#PED-3289 jsc#PED-5417 bsc#1218992)
  * X86 updates (jsc#PED-6018 bsc#1216611)
  * WiFi updates (jsc#PED-6081 jsc#PED-6130)
- Add scripts to create a patch from kernel-source git tree</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %patch -P N instead of deprecated %patchN. (bsc#1240154)</changelog>
  <changelog author="tiwai@suse.com" date="1749384000">- Update to SL-16.0 git branch based on 6.12 kernel (bsc#1244066)</changelog>
  <changelog author="tiwai@suse.com" date="1763035200">- Sync with SL-16.0 update kernel (6.12.0-160000.6) (bsc#1253334)</changelog>
</package>
<package pkgid="b4d2465b730f847b4257661bea05a237091ed74c6bfd767436ae77b8db38199b6b60e034758e97cc98e8ed452bd5c1fe146ef64244da6f514b50fbfa832d67aa" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.43" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
</package>
<package pkgid="e8c6e343d144b5b3a62cabf2a68a62dc0bbeb1636ae09aa751c6d9684073b040a589cb3f8d5b061705bca73664e1f40b26050c209991fb431b97f665fba2f60f" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.1.1"/>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="386e38fb3a6f654b5796c15513e576df0f8fecd82ec7be69bd26ef4c942765f8c1f63c7cab882826c34a68138fdb8a8466ef8157aa407cd52f050da3fa7471a4" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.2.1"/>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
</package>
<package pkgid="3bd1aa94749481f84c9b4b88f5cc816ceb0e40895cfcd5788503fc8cc6a7526b5f5459deded833bd68437b83886d41b109fefe05415aad16535649bee14c6410" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="160000.3.1"/>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
  <changelog author="matz@suse.com" date="1773144000">- Migrate from update-alternatives to libalternatives (jsc#PED-15667).
- Update %suse_version &gt; 1600 checks (jsc#PED-15792).
- Split new libsframe2 package from binutils (shared lib policy).
- Make (currently inactive) gold subpackage no require binutils
  in a specific version.
- Add binutils-workaround-premature-libsframe-uninst.diff for
  this to temporarily avoid 99-check-remove-rpms getting in the way.
- Add binutils-fix-c23.diff to fix a compile error with new glibc.</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1778760000">- Add pr33427-fix-loongarch64-glibc-build-with-gcc16.patch to
  backport a fix for assertion failures when building glibc for
  loongarch64 with GCC 16.</changelog>
  <changelog author="matz@suse.com" date="1782907200">- Don't use libalternatives on SLE16. [bsc#1269059]</changelog>
</package>
<package pkgid="a3824b8d456143a5a4d20dab602707ab0aecfff99633b03c950d9d2ce0fb59f2cb4d9e31596eedb511c4e03d008a5bbcf623137f719fed47c1ec7b7bea4b5e1d" name="crosstool-ng" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="bp160.1.13"/>
  <changelog author="dmitry_r@opensuse.org" date="1414411200">- Initial package, version 1.20.0</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1417089600">- Add patches licenses
- Delete patches with problematic licenses</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1432641600">- Update to version 1.21.0
  * No changelog available</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444824000">- Fix build with GCC5
  * crosstool-ng-gcc5.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1448020800">- Update to version 1.22.0
  * No changelog available
  * Drop obsolete crosstool-ng-gcc5.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1483272000">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="bugs@vdm-design.de" date="1495800000">- Add patch (crosstool-ng-gperf-fix.patch) to fix build
  with gpref version &gt;= 3.1, based on upstream commit
  https://github.com/crosstool-ng/crosstool-ng/commit/3bb2bcd2a328fb56332398783e91899ce3bc3556</changelog>
  <changelog author="bwiedemann@suse.com" date="1497787200">- Update to version 1.23.0
  * No changelog available
  * Drop upstream crosstool-ng-gperf-fix.patch</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565179200">- Update to version 1.24.0:
  * An upgrade procedure for configurations created in the previous
    release of crosstool-NG has been introduced with this release.
    See http://crosstool-ng.github.io/docs/configuration/ for more
    details.
- Add new build dependency: unzip.
- Remove reproducible.patch: Fixed upstream.
- Add crosstool-ng.keyring to verify tarball signature.
- Add crosstool-ng.rpmlintrc to ignore some irrelevant rpmlint
  errors.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 1.25.0:
  see https://crosstool-ng.github.io/2022/05/07/release-1.25.0.html
- updated keyring</changelog>
</package>
<package pkgid="309e9e767757f1179f85038233a8994709544d82083c443855a97dbcb0f739de0801afd6d05f5f0e30c5ab96105d7dae5575e3f11d9875c993901eddbb5175b0" name="cryfs" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="bp160.1.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1633262400">- remove cryptopp build dependency, library is bundled</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1645531200">- Update to v0.11.2:
  * Time to mount a file system was very long because the build
    didn't correctly use OpenMP. This is now fixed and file systems
    should open faster again.
  * Fix building of the range-v3 dependency. The conan remote URL
    for this dependency changed and we have to use the new URL.
  * Update to CryptoPP 8.6. This fixes a rare bug where
    CryptoPP 8.5 encrypts data wrongly.
  * cryfs-unmount correctly unmounts paths that contain spaces.
  * Updated to DokanY 1.2.2.1001.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1659355200">- add upstream signing key and verify source signature</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1665748800">- Update to v0.11.3:
  * Fixed build issue on systems with libfmt 9.0
  * Fixed build issue on Apple Silicon Macs
  * Fixed build issue on systems that only have python3 but no
    python executable
- Use python3-base instead of python for building
- Use %autosetup</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1680436800">- Add upstream patch - Include stdexcept when using logic_error:
  * 38849c22aa34c5fad10091e066a520dd831462b3.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="munix9@googlemail.com" date="1742644800">- Update to version 1.0.1:
  Backwards Compatibility
  * Filesystems created with CryFS 0.11.x and CryFS 1.0.0 are fully
    compatible with each other. The storage format hasn't changed.
  * This means filesystems created with 0.10.x or 0.11.x can be
    mounted without requiring a migration.
  * Filesystems created with 1.0.0 or 0.11.x can be mounted by
    CryFS 0.10.x, but only if you configure it to use a cipher
    supported by CryFS 0.10.x, e.g. AES-256-GCM. The new default,
    XChaCha20-Poly1305, is not supported by CryFS 0.10.x.
  Fixes/Improvements
  * Added a man page for cryfs-unmount
  * Fixed small inaccuracy in calculation of free space in statvfs
  * Fix an issue when using -o atime mount options
- Remove 38849c22aa34c5fad10091e066a520dd831462b3.patch
  (merged upstream)</changelog>
  <changelog author="munix9@googlemail.com" date="1745582400">- Add fix-build-with-boost-1_88.patch
- Remove _constraints file (not needed for now)
- Cleanup spec file (from the previous 0.x versions):
  * Use __builder ninja
  * Use %cmake macro
  * Add %check/tests (arch specific)
  * Add -DCRYPTOPP_DISABLE_ASM=ON (arch specific)</changelog>
  <changelog author="munix9@googlemail.com" date="1745582401">- Add _constraints (required for ppc64, ppc64le)</changelog>
  <changelog author="munix9@googlemail.com" date="1746100800">- Migration to fuse 3 and deprecation of fuse (1)
  * Add fix-feature-fuse3.patch -- based on upstream branch
    https://github.com/cryfs/cryfs/tree/feature/fuse3
    (bsc#1242083) (bsc#1242079)
- Increase physicalmemory for ppc64 and ppc64le builds</changelog>
</package>
<package pkgid="3dc29a709766c944f631f48b9ea356a7ec8d502d679d9618acd7aa15dcf47f25ce8e2807c0dcf3c709e142e5ce43d993304c2af4b94beaffb01adfeb2badf125" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20250124.4d262e7" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1707220800">- Update to version 20240201.9f501f3:
  * .gitlab-ci.yml: install sequoia-policy-config
  * java: disable ChaCha20-Poly1305 where applicable
  * fips-mode-setup: make sure ostree is detected in chroot
  * fips-finish-install: make sure ostree is detected in chroot
  * TEST-PQ: enable X25519-KYBER768 / P384-KYBER768 for openssl
  * TEST-PQ: add a no-op subpolicy
  * update-crypto-policies: Keep mid-sentence upper case
  * fips-mode-setup: Write error messages to stderr
  * fips-mode-setup: Fix some shellcheck warnings
  * fips-mode-setup: Fix test for empty /boot
  * fips-mode-setup: Avoid 'boot=UUID=' if /boot == /
  * Update man pages
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to version 20241010.5930b9a:
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * nss: be stricter with new purposes
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * TEST-PQ: disable pure Kyber768
  * nss: wire XYBER768D00 to X25519-KYBER768
  * TEST-PQ: update
  * TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
  * TEST-PQ, alg_lists, openssl: enable more experimental `sign` values
  * TEST-PQ, python: add more groups, mark experimental
  * openssl: mark liboqsprovider groups optional with ?
  * Remove patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738670400">- Update to version 20250124.4d262e7: [bsc#1239009, bsc#1236165]
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-setup-helper: add a libexec helper for anaconda
  * fips-crypto-policy-overlay: automount FIPS policy
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * CONTRIBUTING.md: add a small section on updating policies
  * CONTRIBUTING.md: remove trailing punctuation from headers
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00
  * nss: unconditionally load p11-kit-proxy.so
  * gnutls: make DTLS0.9 controllable again
  * gnutls: retire GNUTLS_NO_TLS_SESSION_HASH
  * openssh: remove OPENSSH_MIN_RSA_SIZE / OPENSSH_MIN_RSA_SIZE_FORCE
  * gnutls: remove extraneous newline
  * sequoia: move away from subprocess.getstatusoutput
  * python/cryptopolicies/cryptopolicies.py: add trailing commas
  * python, tests: rename MalformedLine to MalformedLineError
  * Makefile: introduce SKIP_LINTING flag for packagers to use
  * Makefile: run ruff
  * tests: use pathlib
  * tests: run(check=True) + CalledProcessError where convenient
  * tests: use subprocess.run
  * tests/krb5.py: check all generated policies
  * tests: print to stderr on error paths
  * tests/nss.py: also use encoding='utf-8'
  * tests/nss.py: also use removesuffix
  * tests/nss.py: skip creating tempfiles
  * tests/java.pl -&gt; tests/java.py
  * tests/gnutls.pl -&gt; tests/gnutls.py
  * tests/openssl.pl -&gt; tests/openssl.py
  * tests/verify-output.pl: remove
  * libreswan: do not use up pfs= / ikev2= keywords for default behaviour
  * Rebase patches:
  - crypto-policies-no-build-manpages.patch
  - crypto-policies-policygenerators.patch
  - crypto-policies-supported.patch
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]
- Remove also sequoia config and generator files
- Remove not needed fips bind mount service</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1741694400">- Enable SHA1 sigver in the DEFAULT policy.
  * Add crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="775b45b83ef6a896eb066933a1eee53936d1df96d8a5063c490d606c2fe7fdbdca1b5c25354d9f356220d53470369650b01fa7928d7e43d8bfe32e391ad5925b" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20250714.cd6043a" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="pmonreal@suse.com" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="pmonreal@suse.com" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="0dfbef6e8dbeb12a4ef32dd5bcb11b6569634c90f069da8cb109906adf6939a8fa1e5ffa645e852964b44d5200fb97a6c73361fddab4b8b45dd5a2a4c1c74f25" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20250714.cd6043a" rel="160000.2.1"/>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="pmonreal@suse.com" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="pmonreal@suse.com" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1774958400">- Disable the use of posix_spawn() under qemu user-mode emulation.</changelog>
  <changelog author="pmonreal@suse.com" date="1776859200">- Modify the output of fips-mode-setup to hint the user when
  setting the FIPS mode in transactional systems to use the
  command 'transactional-update setup-fips'. (bsc#1262315)</changelog>
  <changelog author="pmonreal@suse.com" date="1777896000">- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
  * Enable sntrup761x25519-sha512 for OpenSSH by default
  * Add crypto-policies-OpenSSH-PQC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1779278400">- Remove crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
  to allow X25519 as required for sntrup761x25519-sha512@openssh.com
  and sntrup761x25519-sha512 in the DEFAULT policy. (bsc#1259825)
  Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="3652ffb83f0feac7c87c914fbabfa0ddc7ff523ef44ea38a07ae5e995dea6f26867ba58d2332d71d13b27f2a70f14d36b4502a69b02ed5a28f2583d23ead8093" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20250124.4d262e7" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1707220800">- Update to version 20240201.9f501f3:
  * .gitlab-ci.yml: install sequoia-policy-config
  * java: disable ChaCha20-Poly1305 where applicable
  * fips-mode-setup: make sure ostree is detected in chroot
  * fips-finish-install: make sure ostree is detected in chroot
  * TEST-PQ: enable X25519-KYBER768 / P384-KYBER768 for openssl
  * TEST-PQ: add a no-op subpolicy
  * update-crypto-policies: Keep mid-sentence upper case
  * fips-mode-setup: Write error messages to stderr
  * fips-mode-setup: Fix some shellcheck warnings
  * fips-mode-setup: Fix test for empty /boot
  * fips-mode-setup: Avoid 'boot=UUID=' if /boot == /
  * Update man pages
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to version 20241010.5930b9a:
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * nss: be stricter with new purposes
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * TEST-PQ: disable pure Kyber768
  * nss: wire XYBER768D00 to X25519-KYBER768
  * TEST-PQ: update
  * TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
  * TEST-PQ, alg_lists, openssl: enable more experimental `sign` values
  * TEST-PQ, python: add more groups, mark experimental
  * openssl: mark liboqsprovider groups optional with ?
  * Remove patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738670400">- Update to version 20250124.4d262e7: [bsc#1239009, bsc#1236165]
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-setup-helper: add a libexec helper for anaconda
  * fips-crypto-policy-overlay: automount FIPS policy
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * CONTRIBUTING.md: add a small section on updating policies
  * CONTRIBUTING.md: remove trailing punctuation from headers
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00
  * nss: unconditionally load p11-kit-proxy.so
  * gnutls: make DTLS0.9 controllable again
  * gnutls: retire GNUTLS_NO_TLS_SESSION_HASH
  * openssh: remove OPENSSH_MIN_RSA_SIZE / OPENSSH_MIN_RSA_SIZE_FORCE
  * gnutls: remove extraneous newline
  * sequoia: move away from subprocess.getstatusoutput
  * python/cryptopolicies/cryptopolicies.py: add trailing commas
  * python, tests: rename MalformedLine to MalformedLineError
  * Makefile: introduce SKIP_LINTING flag for packagers to use
  * Makefile: run ruff
  * tests: use pathlib
  * tests: run(check=True) + CalledProcessError where convenient
  * tests: use subprocess.run
  * tests/krb5.py: check all generated policies
  * tests: print to stderr on error paths
  * tests/nss.py: also use encoding='utf-8'
  * tests/nss.py: also use removesuffix
  * tests/nss.py: skip creating tempfiles
  * tests/java.pl -&gt; tests/java.py
  * tests/gnutls.pl -&gt; tests/gnutls.py
  * tests/openssl.pl -&gt; tests/openssl.py
  * tests/verify-output.pl: remove
  * libreswan: do not use up pfs= / ikev2= keywords for default behaviour
  * Rebase patches:
  - crypto-policies-no-build-manpages.patch
  - crypto-policies-policygenerators.patch
  - crypto-policies-supported.patch
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]
- Remove also sequoia config and generator files
- Remove not needed fips bind mount service</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1741694400">- Enable SHA1 sigver in the DEFAULT policy.
  * Add crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="5afd2d9bd309c858b1738d24d17e1013c0d116545fc60d6883299a0738f76967710da051ca9222a629abb37880654f6d970ff23acdfc010ffc58dc8b49d66bea" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20250714.cd6043a" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="pmonreal@suse.com" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="pmonreal@suse.com" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="3b3473c298752dd484f58a4e3aff2ca4056ffdba88a3f1ab0d4d0594ce4e1fd911b36c7403fecb8c5bd6fdf675d635e9aa7ef6a2e4a5004d18bc22013a67f0d0" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20250714.cd6043a" rel="160000.2.1"/>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="pmonreal@suse.com" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="pmonreal@suse.com" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1774958400">- Disable the use of posix_spawn() under qemu user-mode emulation.</changelog>
  <changelog author="pmonreal@suse.com" date="1776859200">- Modify the output of fips-mode-setup to hint the user when
  setting the FIPS mode in transactional systems to use the
  command 'transactional-update setup-fips'. (bsc#1262315)</changelog>
  <changelog author="pmonreal@suse.com" date="1777896000">- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
  * Enable sntrup761x25519-sha512 for OpenSSH by default
  * Add crypto-policies-OpenSSH-PQC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1779278400">- Remove crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
  to allow X25519 as required for sntrup761x25519-sha512@openssh.com
  and sntrup761x25519-sha512 in the DEFAULT policy. (bsc#1259825)
  Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
</package>
<package pkgid="ae0f9dc783661c9c88f2898c96c9563d86f41bec68b1cf6988a878cab49115adc79a34d999a3a936334a2ee91845c13601ac281565317cc5aa3c0a1df2bc5d02" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1706529600">- Update to 2.7.0:
  * Full changelog in:
    mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes
  * Introduce support for hardware OPAL disk encryption.
  * plain mode: Set default cipher to aes-xts-plain64 and password hashing
    to sha256.
  * Allow activation (open), luksResume, and luksAddKey to use the volume
    key stored in a keyring.
  * Allow to store volume key to a user-specified keyring in open and
    luksResume commands.
  * Do not flush IO operations if resize grows the device.
    This can help performance in specific cases where the encrypted device
    is extended automatically while running many IO operations.
  * Use only half of detected free memory for Argon2 PBKDF on systems
    without swap (for LUKS2 new keyslot or format operations).
  * Add the possibility to specify a directory for external LUKS2 token
    handlers (plugins).
  * Do not allow reencryption/decryption on LUKS2 devices with
    authenticated encryption or hardware (OPAL) encryption.
  * Do not fail LUKS format if the operation was interrupted on subsequent
    device wipe.
  * Fix the LUKS2 keyslot option to be used while activating the device
    by a token.
  * Properly report if the dm-verity device cannot be activated due to
    the inability to verify the signed root hash (ENOKEY).
  * Fix to check passphrase for selected keyslot only when adding
    new keyslot.
  * Fix to not wipe the keyslot area before in-place overwrite.
  * bitlk: Fix segfaults when attempting to verify the volume key.
  * Add --disable-blkid command line option to avoid blkid device check.
  * Add support for the meson build system.
  * Fix wipe operation that overwrites the whole device if used for LUKS2
    header with no keyslot area.
  * Fix luksErase to work with detached LUKS header.
  * Disallow the use of internal kernel crypto driver names in "capi"
    specification.
  * Fix reencryption to fail early for unknown cipher.
  * tcrypt: Support new Blake2 hash for VeraCrypt.
  * tcrypt: use hash values as substring for limiting KDF check.
  * Add Aria cipher support and block size info.
  * Do not decrease PBKDF parameters if the user forces them.
  * Support OpenSSL 3.2 Argon2 implementation.
  * Add support for Argon2 from libgcrypt
    (requires yet unreleased gcrypt 1.11).
  * Used Argon2 PBKDF implementation is now reported in debug mode
    in the cryptographic backend version. For native support in
    OpenSSL 3.2 or libgcrypt 1.11, "argon2" is displayed.
    If libargon2 is used, "cryptsetup libargon2" (for embedded
    library) or "external libargon2" is displayed.
  * Link only libcrypto from OpenSSL.
  * Disable reencryption for Direct-Access (DAX) devices.
  * Print a warning message if the device is not aligned to sector size.
  * Fix sector size and integrity fields display for non-LUKS2 crypt
    devices for the status command.
  * Fix suspend for LUKS2 with authenticated encryption (also suspend
    dm-integrity device underneath).
  * Update keyring and locking documentation and LUKS2 specification
    for OPAL2 support.
  * Remove patches fixed upstream:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710331200">- Update to 2.7.1:
  * Fix interrupted LUKS1 decryption resume.
  With the replacement of the cryptsetup-reencrypt tool by the cryptsetup
  reencrypt command, resuming the interrupted LUKS1 decryption operation
  could fail. LUKS2 was not affected.
  * Allow --link-vk-to-keyring with --test-passphrase option.
  This option allows uploading the volume key in a user-specified kernel
  keyring without activating the device.
  * Fix crash when --active-name was used in decryption initialization.
  * Updates and changes to man pages, including indentation, sorting options
  alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing
  some typos.
  * Fix compilation with libargon2 when --disable-internal-argon2 was used.
  * Do not require installed argon2.h header and never compile internal
  libargon2 code if the crypto library directly supports Argon2.
  * Fixes to regression tests to support older Linux distributions.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1712664000">- update to 2.7.2:
  * Fix activation of OPAL-only encrypted LUKS device with tokens
  * Fix formatting of OPAL devices with 4096-byte sector size
  * Fix incorrect OPAL locking range alignment calculation if
    used over an unaligned device partition.
  * Do not check the passphrase quality for OPAL Admin PIN,
    as this passphrase already exists.
  * Update license for FAQ document to CC BY-SA 4.0.
  NOTE: Please note that with OPAL-only (--hw-opal-only)
  encryption, the configured OPAL administrator PIN (passphrase)
  allows unlocking all configured locking ranges without LUKS
  keyslot decryption (without knowledge of LUKS passphrase).
  Because of many observed problems with compatibility, cryptsetup
  currently DOES NOT use OPAL single-user mode, which would allow
  such decoupling of OPAL admin PIN access.</changelog>
  <changelog author="pvorel@suse.cz" date="1720785600">- License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with
  'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception).</changelog>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
</package>
<package pkgid="f66f47d298c498205519ca03b7e562ddf80faeaa99b00e0ab91021c7bdef3e01a421571d0756e92a81d68c268df47251fec01ac7660905ce54f6ccd8f220c28b" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Add a dependency on device-mapper to libcryptsetup12 to install
  the required device-mapper udev rules. [bsc#1241612]</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Update to 2.8.0:
  * Full release notes in:
  - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
  * Introduce support for inline mode (use HW sectors with additional hardware
    metadata space).
  * Finalize use of keyslot context API.
  * Make all keyslot context types fully self-contained.
  * Add --key-description and --new-key-description cryptsetup options.
  * Support more precise keyslot selection in reencryption initialization.
  * Allow reencryption to resume using token and volume keys.
  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
  * Opal2: Fix some error description (in debug only).
  * Opal2: Do not allow deferred deactivation.
  * Allow --reduce-device-size and --device-size combination for reencryption
    (encrypt) action.
  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
    keyslot encryption.
  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
  * Remove keyslot warning about possible failure due to low memory.
  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
  * Properly report out of memory error for cryptographic backends implementing Argon2.
  * Avoid KDF2 memory cost overflow on 32-bit platforms.
  * Do not use page size as a fallback for device block size.
  * veritysetup: Check hash device size in advance.
  * Print a better error message for unsupported LUKS2 AEAD device resize.
  * Optimize LUKS2 metadata writes.
  * veritysetup: support --error-as-corruption option.
  * Report all sizes in status and dump command output in the correct units.
  * Add --integrity-key-size option to cryptsetup.
  * Support trusted &amp; encrypted keyrings for plain devices.
  * Support plain format resize with a keyring key.
  * TCRYPT: Clear mapping of system-encrypted partitions.
  * TCRYPT: Print all information from the decrypted metadata header in
    the tcryptDump command.
  * Always lock the volume key structure in memory.
  * Do not run direct-io read check on block devices.
  * Fix a possible segfault in deferred deactivation.
  * Exclude cipher allocation time from the cryptsetup benchmark.
  * Add Mbed-TLS optional crypto backend.
  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
  * Reorganize license files. The license text files are now in docs/licenses.
    The COPYING file in the root directory is the default license.
  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
    and named as COPYING.CC-BY-SA-4.0.
  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
    with all existing symbols. Due to the self-contained memory allocation,
    these symbols have the new version:
  - crypt_keyslot_context_init_by_passphrase;
  - crypt_keyslot_context_init_by_keyfile;
  - crypt_keyslot_context_init_by_token;
  - crypt_keyslot_context_init_by_volume_key;
  - crypt_keyslot_context_init_by_signed_key;
  - crypt_keyslot_context_init_by_keyring;
  - crypt_keyslot_context_init_by_vk_in_keyring;
  * New symbols:
  - crypt_format_inline
  - crypt_get_old_volume_key_size
  - crypt_reencrypt_init_by_keyslot_context
  - crypt_safe_memcpy
  * New defines:
  - CRYPT_ACTIVATE_HIGH_PRIORITY
  - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
  - CRYPT_ACTIVATE_INLINE_MODE
  - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
  * New requirement flag:
  - CRYPT_REQUIREMENT_INLINE_HW_TAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1755777600">- Update to 2.8.1:
  * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
  * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
  * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
  - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
  - Null cipher is sometimes used to create an empty container for later reencryption.
  - Only an empty passphrase can activate such a container (the same as in LUKS1).
  * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
  - The maximum parallel cost is limited to 4 threads.
  * Fixes to configuration and installation scripts.
  - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
  - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
  - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
  - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
  * Major update to manual pages.
  - Try to explain the PBKDF hardcoded limits.
  - Add a better explanation for automatic integrity tag recalculation.
  - Mention crypt/verity/integritytab.
  - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
  - Clarify that some commands do not wipe data and unify OPAL reset wording.
  - Clarify the --label option.
  - There are also many other grammar and stylistic fixes to unify the man-page style.
  * Fixes for false-positive and annoying (optional) warnings added in recent compilers.</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to 2.8.3:
  * Stable bug-fix release with minor extensions.
- Update to 2.8.2:
  * BITLK: Fix for BitLocker metadata validation on big-endian systems.</changelog>
  <changelog author="pmonreal@suse.com" date="1770033600">- Update to 2.8.4: (jsc#PED-15889)
  * Fix integritysetup resize (grow) of the device if integrity bitmap
    mode is used. Increasing the integrity device in bitmap mode did
    not work as integritysetup incorrectly used journal settings that
    were not applicable.
  * Fix device size status reports in cryptsetup and integritysetup.
    If the device uses a sector size larger than 512 bytes, the newly
    reported byte sizes (introduced in 2.8.0) in the status report
    were incorrectly displayed.
  * BITLK: Fix unlocking BitLocker device with recovery passphrase.
    If the recovery passphrase was present in the first keyslot, the
    device failed to unlock. This bug was introduced in 2.8.2 with
    Clear Key support.</changelog>
</package>
<package pkgid="85ecbf1c28a0fe8163e41b517485d015337e20931db59f3c4c3db885c122a076e3c2fb7e34215a930ae7d4fe0f03460066463deb2d68225003780520922bdad2" name="cryptsetup-doc" arch="noarch">
  <version epoch="0" ver="2.7.5" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1706529600">- Update to 2.7.0:
  * Full changelog in:
    mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes
  * Introduce support for hardware OPAL disk encryption.
  * plain mode: Set default cipher to aes-xts-plain64 and password hashing
    to sha256.
  * Allow activation (open), luksResume, and luksAddKey to use the volume
    key stored in a keyring.
  * Allow to store volume key to a user-specified keyring in open and
    luksResume commands.
  * Do not flush IO operations if resize grows the device.
    This can help performance in specific cases where the encrypted device
    is extended automatically while running many IO operations.
  * Use only half of detected free memory for Argon2 PBKDF on systems
    without swap (for LUKS2 new keyslot or format operations).
  * Add the possibility to specify a directory for external LUKS2 token
    handlers (plugins).
  * Do not allow reencryption/decryption on LUKS2 devices with
    authenticated encryption or hardware (OPAL) encryption.
  * Do not fail LUKS format if the operation was interrupted on subsequent
    device wipe.
  * Fix the LUKS2 keyslot option to be used while activating the device
    by a token.
  * Properly report if the dm-verity device cannot be activated due to
    the inability to verify the signed root hash (ENOKEY).
  * Fix to check passphrase for selected keyslot only when adding
    new keyslot.
  * Fix to not wipe the keyslot area before in-place overwrite.
  * bitlk: Fix segfaults when attempting to verify the volume key.
  * Add --disable-blkid command line option to avoid blkid device check.
  * Add support for the meson build system.
  * Fix wipe operation that overwrites the whole device if used for LUKS2
    header with no keyslot area.
  * Fix luksErase to work with detached LUKS header.
  * Disallow the use of internal kernel crypto driver names in "capi"
    specification.
  * Fix reencryption to fail early for unknown cipher.
  * tcrypt: Support new Blake2 hash for VeraCrypt.
  * tcrypt: use hash values as substring for limiting KDF check.
  * Add Aria cipher support and block size info.
  * Do not decrease PBKDF parameters if the user forces them.
  * Support OpenSSL 3.2 Argon2 implementation.
  * Add support for Argon2 from libgcrypt
    (requires yet unreleased gcrypt 1.11).
  * Used Argon2 PBKDF implementation is now reported in debug mode
    in the cryptographic backend version. For native support in
    OpenSSL 3.2 or libgcrypt 1.11, "argon2" is displayed.
    If libargon2 is used, "cryptsetup libargon2" (for embedded
    library) or "external libargon2" is displayed.
  * Link only libcrypto from OpenSSL.
  * Disable reencryption for Direct-Access (DAX) devices.
  * Print a warning message if the device is not aligned to sector size.
  * Fix sector size and integrity fields display for non-LUKS2 crypt
    devices for the status command.
  * Fix suspend for LUKS2 with authenticated encryption (also suspend
    dm-integrity device underneath).
  * Update keyring and locking documentation and LUKS2 specification
    for OPAL2 support.
  * Remove patches fixed upstream:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710331200">- Update to 2.7.1:
  * Fix interrupted LUKS1 decryption resume.
  With the replacement of the cryptsetup-reencrypt tool by the cryptsetup
  reencrypt command, resuming the interrupted LUKS1 decryption operation
  could fail. LUKS2 was not affected.
  * Allow --link-vk-to-keyring with --test-passphrase option.
  This option allows uploading the volume key in a user-specified kernel
  keyring without activating the device.
  * Fix crash when --active-name was used in decryption initialization.
  * Updates and changes to man pages, including indentation, sorting options
  alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing
  some typos.
  * Fix compilation with libargon2 when --disable-internal-argon2 was used.
  * Do not require installed argon2.h header and never compile internal
  libargon2 code if the crypto library directly supports Argon2.
  * Fixes to regression tests to support older Linux distributions.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1712664000">- update to 2.7.2:
  * Fix activation of OPAL-only encrypted LUKS device with tokens
  * Fix formatting of OPAL devices with 4096-byte sector size
  * Fix incorrect OPAL locking range alignment calculation if
    used over an unaligned device partition.
  * Do not check the passphrase quality for OPAL Admin PIN,
    as this passphrase already exists.
  * Update license for FAQ document to CC BY-SA 4.0.
  NOTE: Please note that with OPAL-only (--hw-opal-only)
  encryption, the configured OPAL administrator PIN (passphrase)
  allows unlocking all configured locking ranges without LUKS
  keyslot decryption (without knowledge of LUKS passphrase).
  Because of many observed problems with compatibility, cryptsetup
  currently DOES NOT use OPAL single-user mode, which would allow
  such decoupling of OPAL admin PIN access.</changelog>
  <changelog author="pvorel@suse.cz" date="1720785600">- License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with
  'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception).</changelog>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
</package>
<package pkgid="6b57055c6965cb3c88586be45c62db440368ed17c2d88710807845efe14777cdbcb81a5adcfbb34f9e1664b6cb4725ad1ad56774d5e5fd4f66b8a947ba9efd35" name="cryptsetup-doc" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Add a dependency on device-mapper to libcryptsetup12 to install
  the required device-mapper udev rules. [bsc#1241612]</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Update to 2.8.0:
  * Full release notes in:
  - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
  * Introduce support for inline mode (use HW sectors with additional hardware
    metadata space).
  * Finalize use of keyslot context API.
  * Make all keyslot context types fully self-contained.
  * Add --key-description and --new-key-description cryptsetup options.
  * Support more precise keyslot selection in reencryption initialization.
  * Allow reencryption to resume using token and volume keys.
  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
  * Opal2: Fix some error description (in debug only).
  * Opal2: Do not allow deferred deactivation.
  * Allow --reduce-device-size and --device-size combination for reencryption
    (encrypt) action.
  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
    keyslot encryption.
  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
  * Remove keyslot warning about possible failure due to low memory.
  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
  * Properly report out of memory error for cryptographic backends implementing Argon2.
  * Avoid KDF2 memory cost overflow on 32-bit platforms.
  * Do not use page size as a fallback for device block size.
  * veritysetup: Check hash device size in advance.
  * Print a better error message for unsupported LUKS2 AEAD device resize.
  * Optimize LUKS2 metadata writes.
  * veritysetup: support --error-as-corruption option.
  * Report all sizes in status and dump command output in the correct units.
  * Add --integrity-key-size option to cryptsetup.
  * Support trusted &amp; encrypted keyrings for plain devices.
  * Support plain format resize with a keyring key.
  * TCRYPT: Clear mapping of system-encrypted partitions.
  * TCRYPT: Print all information from the decrypted metadata header in
    the tcryptDump command.
  * Always lock the volume key structure in memory.
  * Do not run direct-io read check on block devices.
  * Fix a possible segfault in deferred deactivation.
  * Exclude cipher allocation time from the cryptsetup benchmark.
  * Add Mbed-TLS optional crypto backend.
  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
  * Reorganize license files. The license text files are now in docs/licenses.
    The COPYING file in the root directory is the default license.
  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
    and named as COPYING.CC-BY-SA-4.0.
  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
    with all existing symbols. Due to the self-contained memory allocation,
    these symbols have the new version:
  - crypt_keyslot_context_init_by_passphrase;
  - crypt_keyslot_context_init_by_keyfile;
  - crypt_keyslot_context_init_by_token;
  - crypt_keyslot_context_init_by_volume_key;
  - crypt_keyslot_context_init_by_signed_key;
  - crypt_keyslot_context_init_by_keyring;
  - crypt_keyslot_context_init_by_vk_in_keyring;
  * New symbols:
  - crypt_format_inline
  - crypt_get_old_volume_key_size
  - crypt_reencrypt_init_by_keyslot_context
  - crypt_safe_memcpy
  * New defines:
  - CRYPT_ACTIVATE_HIGH_PRIORITY
  - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
  - CRYPT_ACTIVATE_INLINE_MODE
  - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
  * New requirement flag:
  - CRYPT_REQUIREMENT_INLINE_HW_TAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1755777600">- Update to 2.8.1:
  * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
  * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
  * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
  - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
  - Null cipher is sometimes used to create an empty container for later reencryption.
  - Only an empty passphrase can activate such a container (the same as in LUKS1).
  * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
  - The maximum parallel cost is limited to 4 threads.
  * Fixes to configuration and installation scripts.
  - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
  - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
  - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
  - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
  * Major update to manual pages.
  - Try to explain the PBKDF hardcoded limits.
  - Add a better explanation for automatic integrity tag recalculation.
  - Mention crypt/verity/integritytab.
  - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
  - Clarify that some commands do not wipe data and unify OPAL reset wording.
  - Clarify the --label option.
  - There are also many other grammar and stylistic fixes to unify the man-page style.
  * Fixes for false-positive and annoying (optional) warnings added in recent compilers.</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to 2.8.3:
  * Stable bug-fix release with minor extensions.
- Update to 2.8.2:
  * BITLK: Fix for BitLocker metadata validation on big-endian systems.</changelog>
  <changelog author="pmonreal@suse.com" date="1770033600">- Update to 2.8.4: (jsc#PED-15889)
  * Fix integritysetup resize (grow) of the device if integrity bitmap
    mode is used. Increasing the integrity device in bitmap mode did
    not work as integritysetup incorrectly used journal settings that
    were not applicable.
  * Fix device size status reports in cryptsetup and integritysetup.
    If the device uses a sector size larger than 512 bytes, the newly
    reported byte sizes (introduced in 2.8.0) in the status report
    were incorrectly displayed.
  * BITLK: Fix unlocking BitLocker device with recovery passphrase.
    If the recovery passphrase was present in the first keyslot, the
    device failed to unlock. This bug was introduced in 2.8.2 with
    Clear Key support.</changelog>
</package>
<package pkgid="fd508ce2e2009ef183767916fdebc849a96abfceded69380e3c5350818e7b48b54e3e69d4b94937aec719ecaa240ef4d967ae0885f0a7cf4c24a01a691f2ba44" name="cryptsetup-lang" arch="noarch">
  <version epoch="0" ver="2.7.5" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1706529600">- Update to 2.7.0:
  * Full changelog in:
    mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes
  * Introduce support for hardware OPAL disk encryption.
  * plain mode: Set default cipher to aes-xts-plain64 and password hashing
    to sha256.
  * Allow activation (open), luksResume, and luksAddKey to use the volume
    key stored in a keyring.
  * Allow to store volume key to a user-specified keyring in open and
    luksResume commands.
  * Do not flush IO operations if resize grows the device.
    This can help performance in specific cases where the encrypted device
    is extended automatically while running many IO operations.
  * Use only half of detected free memory for Argon2 PBKDF on systems
    without swap (for LUKS2 new keyslot or format operations).
  * Add the possibility to specify a directory for external LUKS2 token
    handlers (plugins).
  * Do not allow reencryption/decryption on LUKS2 devices with
    authenticated encryption or hardware (OPAL) encryption.
  * Do not fail LUKS format if the operation was interrupted on subsequent
    device wipe.
  * Fix the LUKS2 keyslot option to be used while activating the device
    by a token.
  * Properly report if the dm-verity device cannot be activated due to
    the inability to verify the signed root hash (ENOKEY).
  * Fix to check passphrase for selected keyslot only when adding
    new keyslot.
  * Fix to not wipe the keyslot area before in-place overwrite.
  * bitlk: Fix segfaults when attempting to verify the volume key.
  * Add --disable-blkid command line option to avoid blkid device check.
  * Add support for the meson build system.
  * Fix wipe operation that overwrites the whole device if used for LUKS2
    header with no keyslot area.
  * Fix luksErase to work with detached LUKS header.
  * Disallow the use of internal kernel crypto driver names in "capi"
    specification.
  * Fix reencryption to fail early for unknown cipher.
  * tcrypt: Support new Blake2 hash for VeraCrypt.
  * tcrypt: use hash values as substring for limiting KDF check.
  * Add Aria cipher support and block size info.
  * Do not decrease PBKDF parameters if the user forces them.
  * Support OpenSSL 3.2 Argon2 implementation.
  * Add support for Argon2 from libgcrypt
    (requires yet unreleased gcrypt 1.11).
  * Used Argon2 PBKDF implementation is now reported in debug mode
    in the cryptographic backend version. For native support in
    OpenSSL 3.2 or libgcrypt 1.11, "argon2" is displayed.
    If libargon2 is used, "cryptsetup libargon2" (for embedded
    library) or "external libargon2" is displayed.
  * Link only libcrypto from OpenSSL.
  * Disable reencryption for Direct-Access (DAX) devices.
  * Print a warning message if the device is not aligned to sector size.
  * Fix sector size and integrity fields display for non-LUKS2 crypt
    devices for the status command.
  * Fix suspend for LUKS2 with authenticated encryption (also suspend
    dm-integrity device underneath).
  * Update keyring and locking documentation and LUKS2 specification
    for OPAL2 support.
  * Remove patches fixed upstream:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710331200">- Update to 2.7.1:
  * Fix interrupted LUKS1 decryption resume.
  With the replacement of the cryptsetup-reencrypt tool by the cryptsetup
  reencrypt command, resuming the interrupted LUKS1 decryption operation
  could fail. LUKS2 was not affected.
  * Allow --link-vk-to-keyring with --test-passphrase option.
  This option allows uploading the volume key in a user-specified kernel
  keyring without activating the device.
  * Fix crash when --active-name was used in decryption initialization.
  * Updates and changes to man pages, including indentation, sorting options
  alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing
  some typos.
  * Fix compilation with libargon2 when --disable-internal-argon2 was used.
  * Do not require installed argon2.h header and never compile internal
  libargon2 code if the crypto library directly supports Argon2.
  * Fixes to regression tests to support older Linux distributions.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1712664000">- update to 2.7.2:
  * Fix activation of OPAL-only encrypted LUKS device with tokens
  * Fix formatting of OPAL devices with 4096-byte sector size
  * Fix incorrect OPAL locking range alignment calculation if
    used over an unaligned device partition.
  * Do not check the passphrase quality for OPAL Admin PIN,
    as this passphrase already exists.
  * Update license for FAQ document to CC BY-SA 4.0.
  NOTE: Please note that with OPAL-only (--hw-opal-only)
  encryption, the configured OPAL administrator PIN (passphrase)
  allows unlocking all configured locking ranges without LUKS
  keyslot decryption (without knowledge of LUKS passphrase).
  Because of many observed problems with compatibility, cryptsetup
  currently DOES NOT use OPAL single-user mode, which would allow
  such decoupling of OPAL admin PIN access.</changelog>
  <changelog author="pvorel@suse.cz" date="1720785600">- License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with
  'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception).</changelog>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
</package>
<package pkgid="877f9908e89a46c4f1bd703bc21078c9434490a1c14a51c0a1fd28132d8f1864905f32f6c077ada3a07d9dfd5fef50a2b19258253781bdee10cbda906b2e2029" name="cryptsetup-lang" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Add a dependency on device-mapper to libcryptsetup12 to install
  the required device-mapper udev rules. [bsc#1241612]</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Update to 2.8.0:
  * Full release notes in:
  - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
  * Introduce support for inline mode (use HW sectors with additional hardware
    metadata space).
  * Finalize use of keyslot context API.
  * Make all keyslot context types fully self-contained.
  * Add --key-description and --new-key-description cryptsetup options.
  * Support more precise keyslot selection in reencryption initialization.
  * Allow reencryption to resume using token and volume keys.
  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
  * Opal2: Fix some error description (in debug only).
  * Opal2: Do not allow deferred deactivation.
  * Allow --reduce-device-size and --device-size combination for reencryption
    (encrypt) action.
  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
    keyslot encryption.
  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
  * Remove keyslot warning about possible failure due to low memory.
  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
  * Properly report out of memory error for cryptographic backends implementing Argon2.
  * Avoid KDF2 memory cost overflow on 32-bit platforms.
  * Do not use page size as a fallback for device block size.
  * veritysetup: Check hash device size in advance.
  * Print a better error message for unsupported LUKS2 AEAD device resize.
  * Optimize LUKS2 metadata writes.
  * veritysetup: support --error-as-corruption option.
  * Report all sizes in status and dump command output in the correct units.
  * Add --integrity-key-size option to cryptsetup.
  * Support trusted &amp; encrypted keyrings for plain devices.
  * Support plain format resize with a keyring key.
  * TCRYPT: Clear mapping of system-encrypted partitions.
  * TCRYPT: Print all information from the decrypted metadata header in
    the tcryptDump command.
  * Always lock the volume key structure in memory.
  * Do not run direct-io read check on block devices.
  * Fix a possible segfault in deferred deactivation.
  * Exclude cipher allocation time from the cryptsetup benchmark.
  * Add Mbed-TLS optional crypto backend.
  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
  * Reorganize license files. The license text files are now in docs/licenses.
    The COPYING file in the root directory is the default license.
  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
    and named as COPYING.CC-BY-SA-4.0.
  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
    with all existing symbols. Due to the self-contained memory allocation,
    these symbols have the new version:
  - crypt_keyslot_context_init_by_passphrase;
  - crypt_keyslot_context_init_by_keyfile;
  - crypt_keyslot_context_init_by_token;
  - crypt_keyslot_context_init_by_volume_key;
  - crypt_keyslot_context_init_by_signed_key;
  - crypt_keyslot_context_init_by_keyring;
  - crypt_keyslot_context_init_by_vk_in_keyring;
  * New symbols:
  - crypt_format_inline
  - crypt_get_old_volume_key_size
  - crypt_reencrypt_init_by_keyslot_context
  - crypt_safe_memcpy
  * New defines:
  - CRYPT_ACTIVATE_HIGH_PRIORITY
  - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
  - CRYPT_ACTIVATE_INLINE_MODE
  - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
  * New requirement flag:
  - CRYPT_REQUIREMENT_INLINE_HW_TAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1755777600">- Update to 2.8.1:
  * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
  * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
  * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
  - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
  - Null cipher is sometimes used to create an empty container for later reencryption.
  - Only an empty passphrase can activate such a container (the same as in LUKS1).
  * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
  - The maximum parallel cost is limited to 4 threads.
  * Fixes to configuration and installation scripts.
  - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
  - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
  - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
  - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
  * Major update to manual pages.
  - Try to explain the PBKDF hardcoded limits.
  - Add a better explanation for automatic integrity tag recalculation.
  - Mention crypt/verity/integritytab.
  - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
  - Clarify that some commands do not wipe data and unify OPAL reset wording.
  - Clarify the --label option.
  - There are also many other grammar and stylistic fixes to unify the man-page style.
  * Fixes for false-positive and annoying (optional) warnings added in recent compilers.</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to 2.8.3:
  * Stable bug-fix release with minor extensions.
- Update to 2.8.2:
  * BITLK: Fix for BitLocker metadata validation on big-endian systems.</changelog>
  <changelog author="pmonreal@suse.com" date="1770033600">- Update to 2.8.4: (jsc#PED-15889)
  * Fix integritysetup resize (grow) of the device if integrity bitmap
    mode is used. Increasing the integrity device in bitmap mode did
    not work as integritysetup incorrectly used journal settings that
    were not applicable.
  * Fix device size status reports in cryptsetup and integritysetup.
    If the device uses a sector size larger than 512 bytes, the newly
    reported byte sizes (introduced in 2.8.0) in the status report
    were incorrectly displayed.
  * BITLK: Fix unlocking BitLocker device with recovery passphrase.
    If the recovery passphrase was present in the first keyslot, the
    device failed to unlock. This bug was introduced in 2.8.2 with
    Clear Key support.</changelog>
</package>
<package pkgid="07427d9d9ed571a3be3145526c4b9355f489e00673eb2e5b911a44a039d2149a2a55fb7514d8a50fd1fce32629f934923ae23dd2083c3d380624ae605215901c" name="cryptsetup-ssh" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1706529600">- Update to 2.7.0:
  * Full changelog in:
    mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes
  * Introduce support for hardware OPAL disk encryption.
  * plain mode: Set default cipher to aes-xts-plain64 and password hashing
    to sha256.
  * Allow activation (open), luksResume, and luksAddKey to use the volume
    key stored in a keyring.
  * Allow to store volume key to a user-specified keyring in open and
    luksResume commands.
  * Do not flush IO operations if resize grows the device.
    This can help performance in specific cases where the encrypted device
    is extended automatically while running many IO operations.
  * Use only half of detected free memory for Argon2 PBKDF on systems
    without swap (for LUKS2 new keyslot or format operations).
  * Add the possibility to specify a directory for external LUKS2 token
    handlers (plugins).
  * Do not allow reencryption/decryption on LUKS2 devices with
    authenticated encryption or hardware (OPAL) encryption.
  * Do not fail LUKS format if the operation was interrupted on subsequent
    device wipe.
  * Fix the LUKS2 keyslot option to be used while activating the device
    by a token.
  * Properly report if the dm-verity device cannot be activated due to
    the inability to verify the signed root hash (ENOKEY).
  * Fix to check passphrase for selected keyslot only when adding
    new keyslot.
  * Fix to not wipe the keyslot area before in-place overwrite.
  * bitlk: Fix segfaults when attempting to verify the volume key.
  * Add --disable-blkid command line option to avoid blkid device check.
  * Add support for the meson build system.
  * Fix wipe operation that overwrites the whole device if used for LUKS2
    header with no keyslot area.
  * Fix luksErase to work with detached LUKS header.
  * Disallow the use of internal kernel crypto driver names in "capi"
    specification.
  * Fix reencryption to fail early for unknown cipher.
  * tcrypt: Support new Blake2 hash for VeraCrypt.
  * tcrypt: use hash values as substring for limiting KDF check.
  * Add Aria cipher support and block size info.
  * Do not decrease PBKDF parameters if the user forces them.
  * Support OpenSSL 3.2 Argon2 implementation.
  * Add support for Argon2 from libgcrypt
    (requires yet unreleased gcrypt 1.11).
  * Used Argon2 PBKDF implementation is now reported in debug mode
    in the cryptographic backend version. For native support in
    OpenSSL 3.2 or libgcrypt 1.11, "argon2" is displayed.
    If libargon2 is used, "cryptsetup libargon2" (for embedded
    library) or "external libargon2" is displayed.
  * Link only libcrypto from OpenSSL.
  * Disable reencryption for Direct-Access (DAX) devices.
  * Print a warning message if the device is not aligned to sector size.
  * Fix sector size and integrity fields display for non-LUKS2 crypt
    devices for the status command.
  * Fix suspend for LUKS2 with authenticated encryption (also suspend
    dm-integrity device underneath).
  * Update keyring and locking documentation and LUKS2 specification
    for OPAL2 support.
  * Remove patches fixed upstream:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710331200">- Update to 2.7.1:
  * Fix interrupted LUKS1 decryption resume.
  With the replacement of the cryptsetup-reencrypt tool by the cryptsetup
  reencrypt command, resuming the interrupted LUKS1 decryption operation
  could fail. LUKS2 was not affected.
  * Allow --link-vk-to-keyring with --test-passphrase option.
  This option allows uploading the volume key in a user-specified kernel
  keyring without activating the device.
  * Fix crash when --active-name was used in decryption initialization.
  * Updates and changes to man pages, including indentation, sorting options
  alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing
  some typos.
  * Fix compilation with libargon2 when --disable-internal-argon2 was used.
  * Do not require installed argon2.h header and never compile internal
  libargon2 code if the crypto library directly supports Argon2.
  * Fixes to regression tests to support older Linux distributions.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1712664000">- update to 2.7.2:
  * Fix activation of OPAL-only encrypted LUKS device with tokens
  * Fix formatting of OPAL devices with 4096-byte sector size
  * Fix incorrect OPAL locking range alignment calculation if
    used over an unaligned device partition.
  * Do not check the passphrase quality for OPAL Admin PIN,
    as this passphrase already exists.
  * Update license for FAQ document to CC BY-SA 4.0.
  NOTE: Please note that with OPAL-only (--hw-opal-only)
  encryption, the configured OPAL administrator PIN (passphrase)
  allows unlocking all configured locking ranges without LUKS
  keyslot decryption (without knowledge of LUKS passphrase).
  Because of many observed problems with compatibility, cryptsetup
  currently DOES NOT use OPAL single-user mode, which would allow
  such decoupling of OPAL admin PIN access.</changelog>
  <changelog author="pvorel@suse.cz" date="1720785600">- License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with
  'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception).</changelog>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
</package>
<package pkgid="0c2b661921dd9c77ad4984467108ea444f76463d70daa6d3353d3ccf51c0d391430c73a52886cb85ec478164ee173c1b1bdc4d1bf5b14ed27eb7e091dd5c79ae" name="cryptsetup-ssh" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="160000.1.1"/>
  <changelog author="pmonreal@suse.com" date="1722340800">- Update to 2.7.3:
  * Do not allow formatting LUKS2 with Opal SED (hardware encryption)
    if the reported logical sector size for the block device and Opal
    encryption logical block differs.
  * Fixes to wiping LUKS2 headers after Opal locking area erase.
  * Mention the need for possible PSID revert before Opal format for some
    drives (man page).
  * Fix Bitlocker-compatible code to ignore newly seen metadata entries.
  * Fix interactive query retry if LUKS2 unbound keyslot is present.
  * Detect unsupported zoned devices for LUKS header devices.
  * Allow "capi" cipher format for benchmark command and fix parsing
    of plain IV in "capi" format.
  * Add support for HCTR2 encryption mode.
  * Source code now uses SPDX license identifiers instead of full
    license preambles.
  * Fix missing includes for cryptographic backend that could cause
    compilation errors for some systems.
  * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2.
  * Fix various (mostly false positive) issues detected by Coverity.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1722427200">- Update to 2.7.4:
  * Detect device busy failure for device-mapper table-referenced
    devices.
  * Fix shared activation for dm-verity devices.
  * Add --shared option for veritysetup open action.
  * Do not use exclusive flag for the allocated backing loop files.
  * Fixes for problems found by static analyzers and Valgrind.
  * Fixes to tests and CI scripts.
- Use fdupes to link identical man pages.</changelog>
  <changelog author="meissner@suse.com" date="1725019200">- cryptsetup-fips140-3.patch: extend the password for PBKDF2 benchmarking
  to be more than 20 chars to meet FIPS 140-3 requirements (bsc#1229975)</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- Update to 2.7.5:
  * Fix possible online reencryption data corruption (only in 2.7.x).
    In some situations (initializing a suspended device-mapper device),
    cryptsetup disabled direct-io device access. This caused unsafe
    online reencryption operations that could lead to data corruption.
    The code now adds strict checks (and aborts the operation) and
    changes direct-io detection code to prevent data corruption.
  * Fix a clang compilation error in SSH token plugin.
    As clang linker treats missing symbols as errors, the linker phase
    for the SSH token failed as the optional cryptsetup_token_buffer_free
    was not defined.
  * Fix crypto backend initialization in crypt_format_luks2_opal API call.</changelog>
  <changelog author="pmonreal@suse.com" date="1741953600">- Set pbkdf2 as the default PBKDF algorithm in LUKS2 format.
  [bsc#1236375, bsc#1236164]
  * The default PBKDF algorithm in the LUKS2 format is now Argon2id
    but its not FIPS compliant. A system would be unbootable if using
    Argon2id or Argon2i for disk encryption and then switching to
    kernel FIPS mode. This can be avoided by setting pbkdf2 as default.
  * Build using the configure option --with-luks2-pbkdf=pbkdf2.
  * Remove the dependency on libargon2 as is now provided by openssl.</changelog>
  <changelog author="pmonreal@suse.com" date="1748520000">- Add a dependency on device-mapper to libcryptsetup12 to install
  the required device-mapper udev rules. [bsc#1241612]</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Update to 2.8.0:
  * Full release notes in:
  - https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.0-ReleaseNotes
  * Introduce support for inline mode (use HW sectors with additional hardware
    metadata space).
  * Finalize use of keyslot context API.
  * Make all keyslot context types fully self-contained.
  * Add --key-description and --new-key-description cryptsetup options.
  * Support more precise keyslot selection in reencryption initialization.
  * Allow reencryption to resume using token and volume keys.
  * Cryptsetup repair command now tries to check LUKS keyslot areas for corruption.
  * Opal2 SED: PSID keyfile is now expected to be 32 alphanumeric characters.
  * Opal2: Avoid the Erase method and use Secure Erase for locking range.
  * Opal2: Fix some error description (in debug only).
  * Opal2: Do not allow deferred deactivation.
  * Allow --reduce-device-size and --device-size combination for reencryption
    (encrypt) action.
  * Fix the userspace storage backend to support kernel "capi:" cipher specification format.
  * Disallow conversion from LUKS2 to LUKS1 if kernel "capi:" cipher specification is used.
  * Explicitly disallow kernel "capi:" cipher specification format for LUKS2
    keyslot encryption.
  * Do not allow conversion of LUKS2 to LUKS1 if an unbound keyslot is present.
  * cryptsetup: Adjust the XTS key size for kernel "capi:" cipher specification.
  * Remove keyslot warning about possible failure due to low memory.
  * Do not limit Argon2 KDF memory cost on systems with more than 4GB of available memory.
  * Properly report out of memory error for cryptographic backends implementing Argon2.
  * Avoid KDF2 memory cost overflow on 32-bit platforms.
  * Do not use page size as a fallback for device block size.
  * veritysetup: Check hash device size in advance.
  * Print a better error message for unsupported LUKS2 AEAD device resize.
  * Optimize LUKS2 metadata writes.
  * veritysetup: support --error-as-corruption option.
  * Report all sizes in status and dump command output in the correct units.
  * Add --integrity-key-size option to cryptsetup.
  * Support trusted &amp; encrypted keyrings for plain devices.
  * Support plain format resize with a keyring key.
  * TCRYPT: Clear mapping of system-encrypted partitions.
  * TCRYPT: Print all information from the decrypted metadata header in
    the tcryptDump command.
  * Always lock the volume key structure in memory.
  * Do not run direct-io read check on block devices.
  * Fix a possible segfault in deferred deactivation.
  * Exclude cipher allocation time from the cryptsetup benchmark.
  * Add Mbed-TLS optional crypto backend.
  * Fix the wrong preprocessor use of #ifdef for config.h processed by Meson.
  * Reorganize license files. The license text files are now in docs/licenses.
    The COPYING file in the root directory is the default license.
  * Remove cc-by-sa-4.0.txt as already shipped now in docs/licenses
    and named as COPYING.CC-BY-SA-4.0.
  * Libcryptsetup API extensions. The libcryptsetup API is backward compatible
    with all existing symbols. Due to the self-contained memory allocation,
    these symbols have the new version:
  - crypt_keyslot_context_init_by_passphrase;
  - crypt_keyslot_context_init_by_keyfile;
  - crypt_keyslot_context_init_by_token;
  - crypt_keyslot_context_init_by_volume_key;
  - crypt_keyslot_context_init_by_signed_key;
  - crypt_keyslot_context_init_by_keyring;
  - crypt_keyslot_context_init_by_vk_in_keyring;
  * New symbols:
  - crypt_format_inline
  - crypt_get_old_volume_key_size
  - crypt_reencrypt_init_by_keyslot_context
  - crypt_safe_memcpy
  * New defines:
  - CRYPT_ACTIVATE_HIGH_PRIORITY
  - CRYPT_ACTIVATE_ERROR_AS_CORRUPTION
  - CRYPT_ACTIVATE_INLINE_MODE
  - CRYPT_REENCRYPT_CREATE_NEW_DIGEST
  * New requirement flag:
  - CRYPT_REQUIREMENT_INLINE_HW_TAGS</changelog>
  <changelog author="pmonreal@suse.com" date="1755777600">- Update to 2.8.1:
  * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
  * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
  * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
  - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
  - Null cipher is sometimes used to create an empty container for later reencryption.
  - Only an empty passphrase can activate such a container (the same as in LUKS1).
  * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
  - The maximum parallel cost is limited to 4 threads.
  * Fixes to configuration and installation scripts.
  - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
  - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
  - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
  - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
  * Major update to manual pages.
  - Try to explain the PBKDF hardcoded limits.
  - Add a better explanation for automatic integrity tag recalculation.
  - Mention crypt/verity/integritytab.
  - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
  - Clarify that some commands do not wipe data and unify OPAL reset wording.
  - Clarify the --label option.
  - There are also many other grammar and stylistic fixes to unify the man-page style.
  * Fixes for false-positive and annoying (optional) warnings added in recent compilers.</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Update to 2.8.3:
  * Stable bug-fix release with minor extensions.
- Update to 2.8.2:
  * BITLK: Fix for BitLocker metadata validation on big-endian systems.</changelog>
  <changelog author="pmonreal@suse.com" date="1770033600">- Update to 2.8.4: (jsc#PED-15889)
  * Fix integritysetup resize (grow) of the device if integrity bitmap
    mode is used. Increasing the integrity device in bitmap mode did
    not work as integritysetup incorrectly used journal settings that
    were not applicable.
  * Fix device size status reports in cryptsetup and integritysetup.
    If the device uses a sector size larger than 512 bytes, the newly
    reported byte sizes (introduced in 2.8.0) in the status report
    were incorrectly displayed.
  * BITLK: Fix unlocking BitLocker device with recovery passphrase.
    If the recovery passphrase was present in the first keyslot, the
    device failed to unlock. This bug was introduced in 2.8.2 with
    Clear Key support.</changelog>
</package>
<package pkgid="21e293739a8ae52e012c4d115d1ff577f63ebe6dfbedc27d3005bb9bd9e8571d9c0d337af1c8cec7ac4b71d3a7bf7875727b4df5a83005bea37b83e126f03628" name="cscope" arch="x86_64">
  <version epoch="0" ver="15.9" rel="160000.2.2"/>
  <changelog author="sleep_walker@suse.cz" date="1346673600">- update to 15.8a
- patches refreshed
- ctrlz patch reached upstream - deleted</changelog>
  <changelog author="sleep_walker@suse.cz" date="1346673601">- attempt to fix build for SLE distributions</changelog>
  <changelog author="ledest@gmail.com" date="1416484800">- fix bashisms in osc script
- add patches:
  * cscope-15.8a-fix-bashisms.patch</changelog>
  <changelog author="jslaby@suse.com" date="1420459200">- support-fun-as-params.patch: swallow function as parameters
- remove INSTALL from %doc, as suggested by the rpm checker</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Use url for source</changelog>
  <changelog author="p.drouand@gmail.com" date="1451736000">- Update to version 15.8b
  * configure.in: Add check to enable C system extensions (like
    _GNU_SOURCE), if available.
  * contrib/cctree.txt: Format change: file had DOS line endings for
    some reason.
- Adapt cscope-egrep.out.patch to upstream changes</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names</changelog>
  <changelog author="jslaby@suse.com" date="1584100800">- Update to 15.9
  * Fix coverity scan warnings
  * cscope: Add ( and | as metachars in regex search
  * Adding chek on return code of search() in linemode
  * Fix DOS style line endings in one file; enable system C extensions,
  if available</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Fix download url
- Clean up spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="954226a20ba3812f55c15b4d53f21fc3fd6351bce82469125c57863779c2f69bc5d3bf0b65d475e2060d8f2d68d8f1aed8a2ef43d3cdd2597c7f6f6baedf2c40" name="csindex" arch="x86_64">
  <version epoch="0" ver="19980713" rel="bp160.1.12"/>
  <changelog author="dan@suse.cz" date="997790400">- use bzip instead of gzip</changelog>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="schwab@suse.de" date="1137499200">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="pgajdos@suse.cz" date="1186056000">- added COPYING -- MakeIndex license</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="cfarrell@suse.com" date="1336651200">- license update: SUSE-MakeIndex
  This license was added to the spreadsheet linked at license.opensuse.org
  to cater for this package</changelog>
  <changelog author="coolo@suse.com" date="1409659200">- fix license for spdx 1.2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="cb41a6cc6a93cd01e25e6ce3f60e4b74d2225e3a3c6389e1d9a12f553883ba3ceb3f860d813235784b766beca0b516584cd84b6d2ab4c2cfd3c9a73488fc3c49" name="csound" arch="x86_64">
  <version epoch="0" ver="6.18.1" rel="bp160.1.11"/>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Added quotes to %{_lib} conditional to satisfy new rpmlint.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622030400">- Update to version 6.15.0
- add -samples subpackage</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1624968000">- Update to version 6.16.0
- add python3-csound package
- update csound-rename-sndinfo.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1642593600">- Update to version 6.16.2:
  * This is a hotfix release dealing with an issue that prevented
    CsoundQT successfully producing a recording using one of the
    API threading services. Fixes for desktop OS packages affected
    are provided here.
- Changes from version 6.16.1:
  * This is a bug fix release of Csound 6.16, where an issue
    affecting the use of turnoff/turnoff2 was repaired.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1660305600">- Update to version 6.17.0
  USER-LEVEL CHANGES
  New opcodes
  * scanmap and scansmap are like the xscanmap/xscansmap opcodes but
    work with the mainstream scan opcodes.
  * trigexpseg, triglinseg are aliases for trigExpseg, trigLinseg.
  * xscan opcodes are deprecated as they add nothing to the scan opcodes.
  * bformdec2 provides more ambisonic decoding of bformat audio.
  * metrobpm is like metro but the timing is in beats per minute and the
    signal can be offset by a proportion of the cycle.
  * sequ is a csound version of a hardware sequencer. It has many modes and options.
  * gtadsr implements a gated ADSR envelope
  Orchestra
  * Message printing has been revised so -m16 suppresses all
    messages.
  * add channel count to list_audio_devices (called when the flag
  - -devices is used so that it can be parsed by frontends).
  Modified Opcodes and Gens
  * event opcode does not bail out if the instrument called does not exist.
  * Added an optional prefix to soundfont instruments printed via sfilist.
  * lpslots reworked with better control.
  Utilities
  * cvanal now uses the SADIR environment to look for analysis files.
  Bugs Fixed
  * fareylen called a non-existent function leading to a crash. Removed typo.
  * turnoff could cause clicks in some cases; fixed.
  * turnoff3 improved.
  * cntReset fixed; had a false initialisation code.
  * binary search in bpf fixed.
  * pvscfs frame counting issue fixed.
  * --sample-accurate fixed in a-rate form of tabsum.
  * Problem in atssinnoi fixed; did read outside allocated memory.
  * hrtfmove fixed; it could use the wrong value for sr.
  * Named instruments could use wrong structure in redefinition.
  * fixes in the jack backend relating to --get-system-sr.
  * pvcross frequency warp mode fixed.
  * lpcfilter/lpcanal bug where processing could not be restarted after
    a freeze fixed.
  * the emugens collection of opcode, a large group incorporation mainly
    array operations, were not made available due to a small editing
    error.
  * If using a float build (rather than a double) array access could be
    wrong.
  * In some cases instr0 code could ignore loops after an incorrect
    warning. Now fixed.
  * Bugs in mp3len and similar fixed.
  * Crash in syncgrain issue #1773 fixed
  * UDO output of fsigs fixed.
  SYSTEM LEVEL CHANGES
  System Changes
  * winsound has been removed.
  API
  * CreateThread2 is a new API function that allows threads to be given a
    user-defined stack size.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 6.18.1:
  * This is a patchfix release mainly dealing with issues arisen in Linux
    package management. This contains the same code as 6.18.0, except for:
  * A long-standing big-endian test failure with score strings has been
    fixed.
  * The symbol spillage caused by a build misconfiguration has been
    resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK
    plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- update to 6.18.0:
  * Mainly a bug-fixing release.  Major new facility is MP3 (MPEG) audio
  * files are supported both for input and output in platforms where this is
  * supported by libsndfile.
  * fix midi list printing to stdout part of the list.
  * Fixed bug where fixed-point phase computation (in oscil family) was
  * incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
  * compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
  * variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
  * carrying no payload (as per spec and manual).
  * bug in sum fixed
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
  * fixed versions of timek, times, timeinstk and timeinsts but return
  * the correct values instead of being one cycle late.  This prserves
  * backward compatability
  * Csound now supports MP3 files for input and output through libsndfile</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1671019200">- Update to 6.18.1
  * A long-standing big-endian test failure with score strings has been fixed.
  * The symbol spillage caused by a build misconfiguration has been resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- Version 6.18.0 Changes:
  New opcodes
  * scanmap reads internal state of scanu
  * elapsedcycles, elapsedtime, eventcycles, and eventtime. See under
    "bugs fied" for detials.
  Modified Opcodes and Gens
  * fix midi list printing to stdout part of the list.
  Bugs Fixed
  * Fixed bug where fixed-point phase computation (in oscil family) was
    incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
    compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
    variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
    carrying no payload (as per spec and manual).
  * bug in sum fixed
  * 'pitchamd' opcode causes segmentation fault (macOS) (#1599)
  * fixed crash on channel setting with empty channel name
  * bug in ftloadk fixed (#1611)
  * qnan works even when compiled with fast arithmetic
  * Fix the flanger opcode for sample-accurate mode, where the xdel input was
    not being correctly offset.
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
    fixed versions of timek, times, timeinstk and timeinsts but return
    the correct values instead of being one cycle late. This prserves
    backward compatability
  System Changes
  * Fix for issue #1613:
    Fixes the rtauhal module for all cases of multichannel output. Previously the
    module would not work correctly with some devices.
  * Csound now supports MP3 files for input and output through libsndfile
    (version 1.1.0 and higher).
  Platform Specific
  Bela:
  * Many changes to Bela csound. See bela web site for details
  MacOS:
  * Universal build for x86_64 and arm64, backward compatible to MacOS 10.9
  WASM:
  * fix sampleRate for single-thread worklet</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Drop unused BuildRequire on xorg-x11-devel
- Modernize specfile constructs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1711022400">- renamed extract to csound-extract to avoid name conflict with
  libextractor, again (boo#45347), add csound-rename-extract.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1722340800">- csound-gcc14.patch: fixed gcc14 build issues</changelog>
</package>
<package pkgid="895470478a9e9ce9895e90699f30da1eb4f18589dd24e9cb392c0dc89344fc676956192ecd51d1c60967608a24657f72c2c40c636e437bdf21e45daeee27d851" name="csound-devel" arch="x86_64">
  <version epoch="0" ver="6.18.1" rel="bp160.1.11"/>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Added quotes to %{_lib} conditional to satisfy new rpmlint.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622030400">- Update to version 6.15.0
- add -samples subpackage</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1624968000">- Update to version 6.16.0
- add python3-csound package
- update csound-rename-sndinfo.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1642593600">- Update to version 6.16.2:
  * This is a hotfix release dealing with an issue that prevented
    CsoundQT successfully producing a recording using one of the
    API threading services. Fixes for desktop OS packages affected
    are provided here.
- Changes from version 6.16.1:
  * This is a bug fix release of Csound 6.16, where an issue
    affecting the use of turnoff/turnoff2 was repaired.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1660305600">- Update to version 6.17.0
  USER-LEVEL CHANGES
  New opcodes
  * scanmap and scansmap are like the xscanmap/xscansmap opcodes but
    work with the mainstream scan opcodes.
  * trigexpseg, triglinseg are aliases for trigExpseg, trigLinseg.
  * xscan opcodes are deprecated as they add nothing to the scan opcodes.
  * bformdec2 provides more ambisonic decoding of bformat audio.
  * metrobpm is like metro but the timing is in beats per minute and the
    signal can be offset by a proportion of the cycle.
  * sequ is a csound version of a hardware sequencer. It has many modes and options.
  * gtadsr implements a gated ADSR envelope
  Orchestra
  * Message printing has been revised so -m16 suppresses all
    messages.
  * add channel count to list_audio_devices (called when the flag
  - -devices is used so that it can be parsed by frontends).
  Modified Opcodes and Gens
  * event opcode does not bail out if the instrument called does not exist.
  * Added an optional prefix to soundfont instruments printed via sfilist.
  * lpslots reworked with better control.
  Utilities
  * cvanal now uses the SADIR environment to look for analysis files.
  Bugs Fixed
  * fareylen called a non-existent function leading to a crash. Removed typo.
  * turnoff could cause clicks in some cases; fixed.
  * turnoff3 improved.
  * cntReset fixed; had a false initialisation code.
  * binary search in bpf fixed.
  * pvscfs frame counting issue fixed.
  * --sample-accurate fixed in a-rate form of tabsum.
  * Problem in atssinnoi fixed; did read outside allocated memory.
  * hrtfmove fixed; it could use the wrong value for sr.
  * Named instruments could use wrong structure in redefinition.
  * fixes in the jack backend relating to --get-system-sr.
  * pvcross frequency warp mode fixed.
  * lpcfilter/lpcanal bug where processing could not be restarted after
    a freeze fixed.
  * the emugens collection of opcode, a large group incorporation mainly
    array operations, were not made available due to a small editing
    error.
  * If using a float build (rather than a double) array access could be
    wrong.
  * In some cases instr0 code could ignore loops after an incorrect
    warning. Now fixed.
  * Bugs in mp3len and similar fixed.
  * Crash in syncgrain issue #1773 fixed
  * UDO output of fsigs fixed.
  SYSTEM LEVEL CHANGES
  System Changes
  * winsound has been removed.
  API
  * CreateThread2 is a new API function that allows threads to be given a
    user-defined stack size.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 6.18.1:
  * This is a patchfix release mainly dealing with issues arisen in Linux
    package management. This contains the same code as 6.18.0, except for:
  * A long-standing big-endian test failure with score strings has been
    fixed.
  * The symbol spillage caused by a build misconfiguration has been
    resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK
    plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- update to 6.18.0:
  * Mainly a bug-fixing release.  Major new facility is MP3 (MPEG) audio
  * files are supported both for input and output in platforms where this is
  * supported by libsndfile.
  * fix midi list printing to stdout part of the list.
  * Fixed bug where fixed-point phase computation (in oscil family) was
  * incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
  * compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
  * variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
  * carrying no payload (as per spec and manual).
  * bug in sum fixed
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
  * fixed versions of timek, times, timeinstk and timeinsts but return
  * the correct values instead of being one cycle late.  This prserves
  * backward compatability
  * Csound now supports MP3 files for input and output through libsndfile</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1671019200">- Update to 6.18.1
  * A long-standing big-endian test failure with score strings has been fixed.
  * The symbol spillage caused by a build misconfiguration has been resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- Version 6.18.0 Changes:
  New opcodes
  * scanmap reads internal state of scanu
  * elapsedcycles, elapsedtime, eventcycles, and eventtime. See under
    "bugs fied" for detials.
  Modified Opcodes and Gens
  * fix midi list printing to stdout part of the list.
  Bugs Fixed
  * Fixed bug where fixed-point phase computation (in oscil family) was
    incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
    compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
    variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
    carrying no payload (as per spec and manual).
  * bug in sum fixed
  * 'pitchamd' opcode causes segmentation fault (macOS) (#1599)
  * fixed crash on channel setting with empty channel name
  * bug in ftloadk fixed (#1611)
  * qnan works even when compiled with fast arithmetic
  * Fix the flanger opcode for sample-accurate mode, where the xdel input was
    not being correctly offset.
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
    fixed versions of timek, times, timeinstk and timeinsts but return
    the correct values instead of being one cycle late. This prserves
    backward compatability
  System Changes
  * Fix for issue #1613:
    Fixes the rtauhal module for all cases of multichannel output. Previously the
    module would not work correctly with some devices.
  * Csound now supports MP3 files for input and output through libsndfile
    (version 1.1.0 and higher).
  Platform Specific
  Bela:
  * Many changes to Bela csound. See bela web site for details
  MacOS:
  * Universal build for x86_64 and arm64, backward compatible to MacOS 10.9
  WASM:
  * fix sampleRate for single-thread worklet</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Drop unused BuildRequire on xorg-x11-devel
- Modernize specfile constructs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1711022400">- renamed extract to csound-extract to avoid name conflict with
  libextractor, again (boo#45347), add csound-rename-extract.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1722340800">- csound-gcc14.patch: fixed gcc14 build issues</changelog>
</package>
<package pkgid="e1339911f0426649083ca31af4deaa8544d6819a111e823735a8fd33a801dee05e0901773c7c9203c6f8060bbba6344b617121dd9dd4ae0a3e66d44d3b9afcf8" name="csound-lang" arch="noarch">
  <version epoch="0" ver="6.18.1" rel="bp160.1.11"/>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Added quotes to %{_lib} conditional to satisfy new rpmlint.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622030400">- Update to version 6.15.0
- add -samples subpackage</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1624968000">- Update to version 6.16.0
- add python3-csound package
- update csound-rename-sndinfo.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1642593600">- Update to version 6.16.2:
  * This is a hotfix release dealing with an issue that prevented
    CsoundQT successfully producing a recording using one of the
    API threading services. Fixes for desktop OS packages affected
    are provided here.
- Changes from version 6.16.1:
  * This is a bug fix release of Csound 6.16, where an issue
    affecting the use of turnoff/turnoff2 was repaired.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1660305600">- Update to version 6.17.0
  USER-LEVEL CHANGES
  New opcodes
  * scanmap and scansmap are like the xscanmap/xscansmap opcodes but
    work with the mainstream scan opcodes.
  * trigexpseg, triglinseg are aliases for trigExpseg, trigLinseg.
  * xscan opcodes are deprecated as they add nothing to the scan opcodes.
  * bformdec2 provides more ambisonic decoding of bformat audio.
  * metrobpm is like metro but the timing is in beats per minute and the
    signal can be offset by a proportion of the cycle.
  * sequ is a csound version of a hardware sequencer. It has many modes and options.
  * gtadsr implements a gated ADSR envelope
  Orchestra
  * Message printing has been revised so -m16 suppresses all
    messages.
  * add channel count to list_audio_devices (called when the flag
  - -devices is used so that it can be parsed by frontends).
  Modified Opcodes and Gens
  * event opcode does not bail out if the instrument called does not exist.
  * Added an optional prefix to soundfont instruments printed via sfilist.
  * lpslots reworked with better control.
  Utilities
  * cvanal now uses the SADIR environment to look for analysis files.
  Bugs Fixed
  * fareylen called a non-existent function leading to a crash. Removed typo.
  * turnoff could cause clicks in some cases; fixed.
  * turnoff3 improved.
  * cntReset fixed; had a false initialisation code.
  * binary search in bpf fixed.
  * pvscfs frame counting issue fixed.
  * --sample-accurate fixed in a-rate form of tabsum.
  * Problem in atssinnoi fixed; did read outside allocated memory.
  * hrtfmove fixed; it could use the wrong value for sr.
  * Named instruments could use wrong structure in redefinition.
  * fixes in the jack backend relating to --get-system-sr.
  * pvcross frequency warp mode fixed.
  * lpcfilter/lpcanal bug where processing could not be restarted after
    a freeze fixed.
  * the emugens collection of opcode, a large group incorporation mainly
    array operations, were not made available due to a small editing
    error.
  * If using a float build (rather than a double) array access could be
    wrong.
  * In some cases instr0 code could ignore loops after an incorrect
    warning. Now fixed.
  * Bugs in mp3len and similar fixed.
  * Crash in syncgrain issue #1773 fixed
  * UDO output of fsigs fixed.
  SYSTEM LEVEL CHANGES
  System Changes
  * winsound has been removed.
  API
  * CreateThread2 is a new API function that allows threads to be given a
    user-defined stack size.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 6.18.1:
  * This is a patchfix release mainly dealing with issues arisen in Linux
    package management. This contains the same code as 6.18.0, except for:
  * A long-standing big-endian test failure with score strings has been
    fixed.
  * The symbol spillage caused by a build misconfiguration has been
    resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK
    plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- update to 6.18.0:
  * Mainly a bug-fixing release.  Major new facility is MP3 (MPEG) audio
  * files are supported both for input and output in platforms where this is
  * supported by libsndfile.
  * fix midi list printing to stdout part of the list.
  * Fixed bug where fixed-point phase computation (in oscil family) was
  * incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
  * compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
  * variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
  * carrying no payload (as per spec and manual).
  * bug in sum fixed
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
  * fixed versions of timek, times, timeinstk and timeinsts but return
  * the correct values instead of being one cycle late.  This prserves
  * backward compatability
  * Csound now supports MP3 files for input and output through libsndfile</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1671019200">- Update to 6.18.1
  * A long-standing big-endian test failure with score strings has been fixed.
  * The symbol spillage caused by a build misconfiguration has been resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- Version 6.18.0 Changes:
  New opcodes
  * scanmap reads internal state of scanu
  * elapsedcycles, elapsedtime, eventcycles, and eventtime. See under
    "bugs fied" for detials.
  Modified Opcodes and Gens
  * fix midi list printing to stdout part of the list.
  Bugs Fixed
  * Fixed bug where fixed-point phase computation (in oscil family) was
    incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
    compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
    variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
    carrying no payload (as per spec and manual).
  * bug in sum fixed
  * 'pitchamd' opcode causes segmentation fault (macOS) (#1599)
  * fixed crash on channel setting with empty channel name
  * bug in ftloadk fixed (#1611)
  * qnan works even when compiled with fast arithmetic
  * Fix the flanger opcode for sample-accurate mode, where the xdel input was
    not being correctly offset.
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
    fixed versions of timek, times, timeinstk and timeinsts but return
    the correct values instead of being one cycle late. This prserves
    backward compatability
  System Changes
  * Fix for issue #1613:
    Fixes the rtauhal module for all cases of multichannel output. Previously the
    module would not work correctly with some devices.
  * Csound now supports MP3 files for input and output through libsndfile
    (version 1.1.0 and higher).
  Platform Specific
  Bela:
  * Many changes to Bela csound. See bela web site for details
  MacOS:
  * Universal build for x86_64 and arm64, backward compatible to MacOS 10.9
  WASM:
  * fix sampleRate for single-thread worklet</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Drop unused BuildRequire on xorg-x11-devel
- Modernize specfile constructs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1711022400">- renamed extract to csound-extract to avoid name conflict with
  libextractor, again (boo#45347), add csound-rename-extract.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1722340800">- csound-gcc14.patch: fixed gcc14 build issues</changelog>
</package>
<package pkgid="9a103abc7466ac4dcbabe1c5fe82874f182d016c13dd30815ed5068c167e08af57788d67e573643a8400d285cf0631aa1dab39c809ea5982c5dd86c724ae83f7" name="csound-plugins" arch="x86_64">
  <version epoch="0" ver="6.18.1" rel="bp160.1.11"/>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Added quotes to %{_lib} conditional to satisfy new rpmlint.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622030400">- Update to version 6.15.0
- add -samples subpackage</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1624968000">- Update to version 6.16.0
- add python3-csound package
- update csound-rename-sndinfo.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1642593600">- Update to version 6.16.2:
  * This is a hotfix release dealing with an issue that prevented
    CsoundQT successfully producing a recording using one of the
    API threading services. Fixes for desktop OS packages affected
    are provided here.
- Changes from version 6.16.1:
  * This is a bug fix release of Csound 6.16, where an issue
    affecting the use of turnoff/turnoff2 was repaired.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1660305600">- Update to version 6.17.0
  USER-LEVEL CHANGES
  New opcodes
  * scanmap and scansmap are like the xscanmap/xscansmap opcodes but
    work with the mainstream scan opcodes.
  * trigexpseg, triglinseg are aliases for trigExpseg, trigLinseg.
  * xscan opcodes are deprecated as they add nothing to the scan opcodes.
  * bformdec2 provides more ambisonic decoding of bformat audio.
  * metrobpm is like metro but the timing is in beats per minute and the
    signal can be offset by a proportion of the cycle.
  * sequ is a csound version of a hardware sequencer. It has many modes and options.
  * gtadsr implements a gated ADSR envelope
  Orchestra
  * Message printing has been revised so -m16 suppresses all
    messages.
  * add channel count to list_audio_devices (called when the flag
  - -devices is used so that it can be parsed by frontends).
  Modified Opcodes and Gens
  * event opcode does not bail out if the instrument called does not exist.
  * Added an optional prefix to soundfont instruments printed via sfilist.
  * lpslots reworked with better control.
  Utilities
  * cvanal now uses the SADIR environment to look for analysis files.
  Bugs Fixed
  * fareylen called a non-existent function leading to a crash. Removed typo.
  * turnoff could cause clicks in some cases; fixed.
  * turnoff3 improved.
  * cntReset fixed; had a false initialisation code.
  * binary search in bpf fixed.
  * pvscfs frame counting issue fixed.
  * --sample-accurate fixed in a-rate form of tabsum.
  * Problem in atssinnoi fixed; did read outside allocated memory.
  * hrtfmove fixed; it could use the wrong value for sr.
  * Named instruments could use wrong structure in redefinition.
  * fixes in the jack backend relating to --get-system-sr.
  * pvcross frequency warp mode fixed.
  * lpcfilter/lpcanal bug where processing could not be restarted after
    a freeze fixed.
  * the emugens collection of opcode, a large group incorporation mainly
    array operations, were not made available due to a small editing
    error.
  * If using a float build (rather than a double) array access could be
    wrong.
  * In some cases instr0 code could ignore loops after an incorrect
    warning. Now fixed.
  * Bugs in mp3len and similar fixed.
  * Crash in syncgrain issue #1773 fixed
  * UDO output of fsigs fixed.
  SYSTEM LEVEL CHANGES
  System Changes
  * winsound has been removed.
  API
  * CreateThread2 is a new API function that allows threads to be given a
    user-defined stack size.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 6.18.1:
  * This is a patchfix release mainly dealing with issues arisen in Linux
    package management. This contains the same code as 6.18.0, except for:
  * A long-standing big-endian test failure with score strings has been
    fixed.
  * The symbol spillage caused by a build misconfiguration has been
    resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK
    plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- update to 6.18.0:
  * Mainly a bug-fixing release.  Major new facility is MP3 (MPEG) audio
  * files are supported both for input and output in platforms where this is
  * supported by libsndfile.
  * fix midi list printing to stdout part of the list.
  * Fixed bug where fixed-point phase computation (in oscil family) was
  * incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
  * compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
  * variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
  * carrying no payload (as per spec and manual).
  * bug in sum fixed
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
  * fixed versions of timek, times, timeinstk and timeinsts but return
  * the correct values instead of being one cycle late.  This prserves
  * backward compatability
  * Csound now supports MP3 files for input and output through libsndfile</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1671019200">- Update to 6.18.1
  * A long-standing big-endian test failure with score strings has been fixed.
  * The symbol spillage caused by a build misconfiguration has been resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- Version 6.18.0 Changes:
  New opcodes
  * scanmap reads internal state of scanu
  * elapsedcycles, elapsedtime, eventcycles, and eventtime. See under
    "bugs fied" for detials.
  Modified Opcodes and Gens
  * fix midi list printing to stdout part of the list.
  Bugs Fixed
  * Fixed bug where fixed-point phase computation (in oscil family) was
    incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
    compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
    variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
    carrying no payload (as per spec and manual).
  * bug in sum fixed
  * 'pitchamd' opcode causes segmentation fault (macOS) (#1599)
  * fixed crash on channel setting with empty channel name
  * bug in ftloadk fixed (#1611)
  * qnan works even when compiled with fast arithmetic
  * Fix the flanger opcode for sample-accurate mode, where the xdel input was
    not being correctly offset.
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
    fixed versions of timek, times, timeinstk and timeinsts but return
    the correct values instead of being one cycle late. This prserves
    backward compatability
  System Changes
  * Fix for issue #1613:
    Fixes the rtauhal module for all cases of multichannel output. Previously the
    module would not work correctly with some devices.
  * Csound now supports MP3 files for input and output through libsndfile
    (version 1.1.0 and higher).
  Platform Specific
  Bela:
  * Many changes to Bela csound. See bela web site for details
  MacOS:
  * Universal build for x86_64 and arm64, backward compatible to MacOS 10.9
  WASM:
  * fix sampleRate for single-thread worklet</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Drop unused BuildRequire on xorg-x11-devel
- Modernize specfile constructs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1711022400">- renamed extract to csound-extract to avoid name conflict with
  libextractor, again (boo#45347), add csound-rename-extract.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1722340800">- csound-gcc14.patch: fixed gcc14 build issues</changelog>
</package>
<package pkgid="589988b840a95d1de71d0a59e505dfbfea789e987374323400e86701310106f2b28c6e5f64456756d98f1cbb16665e8c825798530fae67bd75c28a340f39ae78" name="csound-samples" arch="noarch">
  <version epoch="0" ver="6.18.1" rel="bp160.1.11"/>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Added quotes to %{_lib} conditional to satisfy new rpmlint.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1622030400">- Update to version 6.15.0
- add -samples subpackage</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1624968000">- Update to version 6.16.0
- add python3-csound package
- update csound-rename-sndinfo.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1642593600">- Update to version 6.16.2:
  * This is a hotfix release dealing with an issue that prevented
    CsoundQT successfully producing a recording using one of the
    API threading services. Fixes for desktop OS packages affected
    are provided here.
- Changes from version 6.16.1:
  * This is a bug fix release of Csound 6.16, where an issue
    affecting the use of turnoff/turnoff2 was repaired.</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1660305600">- Update to version 6.17.0
  USER-LEVEL CHANGES
  New opcodes
  * scanmap and scansmap are like the xscanmap/xscansmap opcodes but
    work with the mainstream scan opcodes.
  * trigexpseg, triglinseg are aliases for trigExpseg, trigLinseg.
  * xscan opcodes are deprecated as they add nothing to the scan opcodes.
  * bformdec2 provides more ambisonic decoding of bformat audio.
  * metrobpm is like metro but the timing is in beats per minute and the
    signal can be offset by a proportion of the cycle.
  * sequ is a csound version of a hardware sequencer. It has many modes and options.
  * gtadsr implements a gated ADSR envelope
  Orchestra
  * Message printing has been revised so -m16 suppresses all
    messages.
  * add channel count to list_audio_devices (called when the flag
  - -devices is used so that it can be parsed by frontends).
  Modified Opcodes and Gens
  * event opcode does not bail out if the instrument called does not exist.
  * Added an optional prefix to soundfont instruments printed via sfilist.
  * lpslots reworked with better control.
  Utilities
  * cvanal now uses the SADIR environment to look for analysis files.
  Bugs Fixed
  * fareylen called a non-existent function leading to a crash. Removed typo.
  * turnoff could cause clicks in some cases; fixed.
  * turnoff3 improved.
  * cntReset fixed; had a false initialisation code.
  * binary search in bpf fixed.
  * pvscfs frame counting issue fixed.
  * --sample-accurate fixed in a-rate form of tabsum.
  * Problem in atssinnoi fixed; did read outside allocated memory.
  * hrtfmove fixed; it could use the wrong value for sr.
  * Named instruments could use wrong structure in redefinition.
  * fixes in the jack backend relating to --get-system-sr.
  * pvcross frequency warp mode fixed.
  * lpcfilter/lpcanal bug where processing could not be restarted after
    a freeze fixed.
  * the emugens collection of opcode, a large group incorporation mainly
    array operations, were not made available due to a small editing
    error.
  * If using a float build (rather than a double) array access could be
    wrong.
  * In some cases instr0 code could ignore loops after an incorrect
    warning. Now fixed.
  * Bugs in mp3len and similar fixed.
  * Crash in syncgrain issue #1773 fixed
  * UDO output of fsigs fixed.
  SYSTEM LEVEL CHANGES
  System Changes
  * winsound has been removed.
  API
  * CreateThread2 is a new API function that allows threads to be given a
    user-defined stack size.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 6.18.1:
  * This is a patchfix release mainly dealing with issues arisen in Linux
    package management. This contains the same code as 6.18.0, except for:
  * A long-standing big-endian test failure with score strings has been
    fixed.
  * The symbol spillage caused by a build misconfiguration has been
    resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK
    plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- update to 6.18.0:
  * Mainly a bug-fixing release.  Major new facility is MP3 (MPEG) audio
  * files are supported both for input and output in platforms where this is
  * supported by libsndfile.
  * fix midi list printing to stdout part of the list.
  * Fixed bug where fixed-point phase computation (in oscil family) was
  * incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
  * compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
  * variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
  * carrying no payload (as per spec and manual).
  * bug in sum fixed
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
  * fixed versions of timek, times, timeinstk and timeinsts but return
  * the correct values instead of being one cycle late.  This prserves
  * backward compatability
  * Csound now supports MP3 files for input and output through libsndfile</changelog>
  <changelog author="Konstantin Voinov &lt;kv@kott.no-ip.biz&gt;" date="1671019200">- Update to 6.18.1
  * A long-standing big-endian test failure with score strings has been fixed.
  * The symbol spillage caused by a build misconfiguration has been resolved.
  * Plugin ABI compatibility with earlier versions (affecting the FLTK plugin) has been restored
  * Some left-over tracing in the mod function has been removed.
- Version 6.18.0 Changes:
  New opcodes
  * scanmap reads internal state of scanu
  * elapsedcycles, elapsedtime, eventcycles, and eventtime. See under
    "bugs fied" for detials.
  Modified Opcodes and Gens
  * fix midi list printing to stdout part of the list.
  Bugs Fixed
  * Fixed bug where fixed-point phase computation (in oscil family) was
    incorrect resulting in slight freq deviations in very low freq cases.
  * Fixed bug where freeing instr 0 caused memory issues in new
    compilations. Instr 0 is not freed until reset now.
  * Fixed a bug where opcode directory search was crashing Csound if HOME
    variable not set.
  * Fixed pol2rect array size setting.
  * OSCsend, OSCsend_lo and OSClisten can now work with OSC messages
    carrying no payload (as per spec and manual).
  * bug in sum fixed
  * 'pitchamd' opcode causes segmentation fault (macOS) (#1599)
  * fixed crash on channel setting with empty channel name
  * bug in ftloadk fixed (#1611)
  * qnan works even when compiled with fast arithmetic
  * Fix the flanger opcode for sample-accurate mode, where the xdel input was
    not being correctly offset.
  * elapsedcycles, elapsedtime, eventcycles, and eventtime introducd as
    fixed versions of timek, times, timeinstk and timeinsts but return
    the correct values instead of being one cycle late. This prserves
    backward compatability
  System Changes
  * Fix for issue #1613:
    Fixes the rtauhal module for all cases of multichannel output. Previously the
    module would not work correctly with some devices.
  * Csound now supports MP3 files for input and output through libsndfile
    (version 1.1.0 and higher).
  Platform Specific
  Bela:
  * Many changes to Bela csound. See bela web site for details
  MacOS:
  * Universal build for x86_64 and arm64, backward compatible to MacOS 10.9
  WASM:
  * fix sampleRate for single-thread worklet</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1682510400">- Drop unused BuildRequire on xorg-x11-devel
- Modernize specfile constructs</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1711022400">- renamed extract to csound-extract to avoid name conflict with
  libextractor, again (boo#45347), add csound-rename-extract.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1722340800">- csound-gcc14.patch: fixed gcc14 build issues</changelog>
</package>
<package pkgid="30956467ffbce3a0be1808ca096d14b7e745f5d38f477f7143b438ac0e9e01dd62feda2cf2fb9e6efd10f538cfdeccc8084db9fb1a30a76e30c6c3b1551e71d4" name="csvprintf" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="bp160.1.12"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="22f1a4b4701c59e434d069c361c530bf7febf2558d0443dc32fadbedd95fc50a8eb6c25af8452a1acfc7acacab53613ee433e66ff48b2325b92f01853c2cb256" name="csync" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="bp160.1.8"/>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="Klaas Freitag &lt;opensuse@freisturz.de&gt;" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1615118400">- Fix bare words are no longer supported,
  please use "...": lib64 == lib64
- Run spec-cleaner</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1618315200">- explicitly add -pie linker flag to make /usr/bin/csync a PIE binary
  (bsc#1184122). The problem arises in upstream
  cmake/Modules/DefineCompilerFlags.cmake where -fPIC is explicitly added to
  compiler flags, which are also passed during link time. This overrides our
  implicit gcc PIE profile.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="4506736330b22c4d6beafda072766914e4b45b2aed830705cfa210564814586d97e23737919de2d08c83d05aca55a51ae75ce52b78d5be04216e045b790eebc3" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
</package>
<package pkgid="42581c307a3e2239bc3a9112d26a53c84c9f85df19acda4f6ba66a2fa0c13928944d431aec23ad72a86e44b9e430bd519d331d68bd601bd882971a2c0bb3989b" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="160000.3.1"/>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
  <changelog author="varkoly@suse.com" date="1766404800">- (jsc#PED-14855) Fix packages for Immutable Mode - csync2
- Strip binary.</changelog>
  <changelog author="varkoly@suse.com" date="1776859200">- VUL-1 CVE-2026-41051: csync2: uses insecure temporary directories when compiled with C99 or later
  (bsc#1262472) Add patch:
  configure_mkstemp_c99.patch</changelog>
</package>
<package pkgid="62898d889affede0addcfa651572e2d8e0fe3831ba2217c35485aa0d810b81d89db05f7719b868b2202d732a5ad726e69ded919ec6e6f3292b309890fafee836" name="ctags" arch="x86_64">
  <version epoch="0" ver="5.8" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1471521600">- Own our update-alternatives symlink (bnc#994261)
- Use conflict-free symlinks instead of touch files for
  placeholders.</changelog>
  <changelog author="msuchanek@suse.com" date="1488110400">- merge with arduino-ctags https://github.com/arduino/ctags
  * provide arduino-ctags
  * redo patch queue http://repo.or.cz/git-browser/by-commit.html?r=arduino-ctags/SUSE.git
  + new patches
    0001-Mixing-with-anjuta-tags-https-git.gnome.org-browse-a.patch
  - add vala support
  - update many existing tags with new features
    0002-Making-inline-behave-like-an-attribute.-Fixes-1.patch
    0003-Treat-typename-as-an-attribute.patch
    0004-parseReturnType-should-start-from-the-first-non-brac.patch
    0005-Ensuring-a-space-is-printed-in-return-type-AFTER-the.patch
    0006-Prevent-C-static_assert-from-stopping-parsing.patch
    0007-c-Handle-C-11-noexcept.patch
    0008-c-Properly-parse-C-11-override-and-final-members.patch
    0009-Parse-C-11-enums-with-type-specifier.patch
    0010-Parse-C-11-classed-enums.patch
    0011-Handle-template-expressions-that-may-use-the-or-oper.patch
    0012-Make-sure-we-don-t-throw-things-away-while-collectin.patch
    0013-C-mitigate-matching-error-on-generics-containing-an-.patch
    0014-fix-wrongly-interpreted-in-template.patch
    0015-Added-constexpr-as-keyword.patch
  + refreshed existing patches
    0016-CVE-2014-7204.patch
    0017-Go-language-support.patch (go-tags.patch)
    0018-SUSE-man-page-changes.patch (ctags-5.7.diff)
    0019-Do-not-include-build-time-in-binary.patch (ctags-date-time.patch)</changelog>
  <changelog author="msuchanek@suse.com" date="1610366400">- Fix build on Tumbleweed - do not ship ghost symlinks.</changelog>
  <changelog author="adam.majer@suse.de" date="1611835200">- Ship symlinks that are not to be ghosted in the first place</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1620129600">- Revert ghosting changes, fix real cause for build failure
  instead (symlinks pointing to itself).
- Clean spec file: remove historic cruft, use %license for COPYING,
  use %make_build/%make_install macros</changelog>
  <changelog author="msuchanek@suse.com" date="1632744000">- Fix build with gcc 11
  + ctags-gcc11.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1674043200">- CVE-2022-4515.patch: fixes arbitrary command execution via
  a tag file with a crafted filename (bsc#1206543, CVE-2022-4515)
- Stop resetting ctags update-alternative priority back to auto.
  These are admin settings.
- Remove u-a links in the correct scriptlet</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- mark u-a generics as non-%ghost</changelog>
  <changelog author="werner@suse.de" date="1752667200">- Switch over to libalternatives for ctags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Only Require: alts when using libalternatives, no need for scriplets</changelog>
</package>
<package pkgid="32cc642f0e2b21393be1e29e76770ad54e3c56cb3f027e7c2732ad04882fe4818a7feb605d093ee52e83df38fa8c82bf113f88f0ae1435c275416b922e12f0e8" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.22.3+git.401.c70158430cc" rel="160000.2.2"/>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="scabrero@suse.de" date="1739966401">- Remove nscd build dependency and usage in RPM scriptlets;
  (bsc#1237296);</changelog>
  <changelog author="scabrero@suse.de" date="1741780800">- Update to 4.22.0
  * SMB3 Directory Leases are supported. By default, SMB3 Directory
    Leases are enabled on non-clustered Samba and disabled on
    clustered Samba, based on the "clustering" option.
  * Netlogon Ping over LDAP and LDAPS
  * Experimental Himmelblaud Authentication in Samba
  * The "nmbd proxy logon" feature was removed.
  * fruit:posix_rename option of the vfs_fruit VFS module that
    could be used to enable POSIX directory rename behaviour for
    OS X clients has been removed as it could result in severe
    problems for Windows clients.</changelog>
  <changelog author="nopower@suse.com" date="1745323200">- Update to 4.22.1
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * Deadlock between two smbd processes; (bso#15767).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
    sconn-&gt;oplocks.exclusive_open&gt;=0; (bso#15836).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Wide link issue in samba 4.22; (bso#15841).
  * NT_STATUS_INVALID_PARAMETER: Can't create folders on share of
    an exfat file system; (bso#15845).
  * Lease code is not endian-safe; (bso#15849).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).</changelog>
  <changelog author="scabrero@suse.de" date="1746014400">- Update smb.conf to enable SMB3 unix extensions</changelog>
  <changelog author="nopower@suse.com" date="1746792000">- Update and rename update-apparmor-samba-profile script to
  update-samba-security-profile. It additionally now caters
  for selinux (if selinux is used); (bsc#1241391);</changelog>
  <changelog author="nopower@suse.com" date="1749211200">- Update to 4.22.2
  * (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.22.3
  * samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
</package>
<package pkgid="e870eab7e7f7007229a57c19966c728b9c3a000fa7d052692f3fc7e0eb88ce08b7e892e0dd6543a8d3ed34320bd4339d157dc37206323492541f4a08e9d68b90" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.22.5+git.431.dc5a539f124" rel="160000.1.1"/>
  <changelog author="nopower@suse.com" date="1746792000">- Update and rename update-apparmor-samba-profile script to
  update-samba-security-profile. It additionally now caters
  for selinux (if selinux is used); (bsc#1241391);</changelog>
  <changelog author="nopower@suse.com" date="1749211200">- Update to 4.22.2
  * (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.22.3
  * samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1753444800">- adjust gpgme build dependency for future-proofing</changelog>
  <changelog author="noel.power@suse.com" date="1758801600">- Update to 4.22.4
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName-; (bso#15876).
  * Unresponsive second DC can cause idmapping failure when using
    idmap_ad-; (bso#15881).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * vfs_streams_depot fstatat broken; (bso#15816).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="noel.power@suse.com" date="1758801601">- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange &amp; restorecon cmds;(bsc#1249179).</changelog>
  <changelog author="noel.power@suse.com" date="1758801602">- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).</changelog>
  <changelog author="noel.power@suse.com" date="1758801603">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
</package>
<package pkgid="c4545f461c6d092a6a2fa0f90fb46e349a55ba4fbd5cf2e2b3225fbbea1e4e4534b00820b32de0cea8bc5676f29d754f2d84ddf6938f88a754fdbd2203b29c6e" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.22.6+git.435.014e5eceb5d" rel="160000.1.1"/>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.22.3
  * samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1753444800">- adjust gpgme build dependency for future-proofing</changelog>
  <changelog author="noel.power@suse.com" date="1758801600">- Update to 4.22.4
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName-; (bso#15876).
  * Unresponsive second DC can cause idmapping failure when using
    idmap_ad-; (bso#15881).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * vfs_streams_depot fstatat broken; (bso#15816).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="noel.power@suse.com" date="1758801601">- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange &amp; restorecon cmds;(bsc#1249179).</changelog>
  <changelog author="noel.power@suse.com" date="1758801602">- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).</changelog>
  <changelog author="noel.power@suse.com" date="1758801603">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
</package>
<package pkgid="0b2cda6663259be4cedb906cda56e163879a8ae283d0c6d3be884f1bd4b94c419d567f124030be1d18057718b3f67032dcc46275d1fe6cdb59c98a11605ade19" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.22.6+git.456.11475143caf" rel="160000.1.1"/>
  <changelog author="noel.power@suse.com" date="1758801600">- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange &amp; restorecon cmds;(bsc#1249179).</changelog>
  <changelog author="noel.power@suse.com" date="1758801601">- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).</changelog>
  <changelog author="noel.power@suse.com" date="1758801602">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
  <changelog author="nopower@suse.com" date="1765972800">-  Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
</package>
<package pkgid="2f4ecd0f75f8c3d3ac6146d3e8e17c789421f512895311d51dad738d1cdc11e157dc64e82b57c7177318ec9cf3f7cbb9f75c1aef07da8274f710348986781881" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.22.7+git.460.b680c782b85" rel="160000.1.1"/>
  <changelog author="noel.power@suse.com" date="1758801600">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
  <changelog author="nopower@suse.com" date="1765972800">-  Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
  <changelog author="noel.power@suse.com" date="1768824000">- Update to 4.22.7
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * vfs_recycle does not update mtime; (bso#15940).
  * Assert failed: (dirfd != -1) || (smb_fname-&gt;base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
  * Crash in ctdbd on failed updateip; (bso#15935).</changelog>
  <changelog author="nopower@suse.com" date="1768996800">- Fix mistake in README.SUSE /var/spool/samba =&gt; /var/samba/spool
  (bsc#1254665).</changelog>
</package>
<package pkgid="f8d4a2c4b997a54f4a1b106f8c7774460f5331f3dc1aab39f6af9fd264cf0591887cfad4a3d76b5618d696c61b8e3302e662a6726eede76c4afb5a2927ff9e11" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.22.9+git.506.22c03ce0781" rel="160000.1.1"/>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
  <changelog author="noel.power@suse.com" date="1768824000">- Update to 4.22.7
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * vfs_recycle does not update mtime; (bso#15940).
  * Assert failed: (dirfd != -1) || (smb_fname-&gt;base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
  * Crash in ctdbd on failed updateip; (bso#15935).</changelog>
  <changelog author="nopower@suse.com" date="1768996800">- Fix mistake in README.SUSE /var/spool/samba =&gt; /var/samba/spool
  (bsc#1254665).</changelog>
  <changelog author="nopower@suse.com" date="1772107200">- Update to 4.22.8
  * New Spotlight default search field incorrectly initialized;
    (bso#15959).
  * smbd: in contend_dirleases() don't bother checking when not
    enabled; (bso#15984).
  * possible memory leak  on rpc_spoolss; (bso#15979);
    (bsc#1257200).
  * "net offlinejoin requestodj" manpage entry incorrectly
    mentiones provided credentials; (bso#15964).
  * Winbind group resolution failure; (bso#15972).
  * ctdbd socket documentation is wrong; (bso#15977).
  * Bind dlz 9.20; (bso#15790); (bsc#1249058).</changelog>
  <changelog author="rfrohl@suse.com" date="1774872000">- Use multiple threads for SELinux relabeling in
  update-samba-security-profile (bsc#1259050).</changelog>
  <changelog author="noel.power@suse.com" date="1776168000">- Add support to allow default selinux autolabelling by
  update-samba-security-profile on service [re]start to be
  inhibited; (bsc#1259050).</changelog>
  <changelog author="nopower@suse.com" date="1777377600">- Update to 4.22.9
  * leases torture test flappy; (bso#15978).
  * incorrect behavior on rpcclient enumport with rpcd_spoolss;
    (bso#16019).
  * "use-kerberos=desired" broken; (bso#15789); (bsc#1255755).
  * rpc workers with long living clients grow server  memory
    keytab; (bso#16042); (bsc#1257200).
  * CTDB's statd_callout fails on sm-notify; (bso#15938).
  * CTDB statd_callout_notify notifies unnecessary clients and
    loses their state; (bso#15939).</changelog>
  <changelog author="nopower@suse.com" date="1778760000">- vfs_snapper failing to access or enumerate files in
  subfolders; (bso#16058); (bsc#1259667).</changelog>
  <changelog author="nopower@suse.com" date="1778846400">- CVE-2026-4480: Fix Unauthenticated Remote Code Execution;
  (bso#16033); (bsc#1261161).
- CVE-2026-4408: Fix Remote Code Execution in SAMR;(bso#16034);
  (bsc#1261163).
- CVE-2026-3238: Fix unauthenticated udp packet crashes AD DC
  nbt server; (bso#16012); (bsc#1261160).
- CVE-2026-3012: Fix CVE-2026-3012 group policy certificate
  enrollment using http:// without validation;(bso#16003);
  (bsc#1261159).
- CVE-2026-1933: Fix missing access check on reparse point
  operations; (bso#15992); (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification;
  (bso#15997); (bsc#1261158).</changelog>
</package>
<package pkgid="02e914536601514db5fd9f907892244219789ec0334650f39e798824beac3b89ac2a8cf6af8348ddf07332d3f8546a9468f4ebcc7127f8123ec7977e6a0b7270" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.22.3+git.401.c70158430cc" rel="160000.2.2"/>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="scabrero@suse.de" date="1739966401">- Remove nscd build dependency and usage in RPM scriptlets;
  (bsc#1237296);</changelog>
  <changelog author="scabrero@suse.de" date="1741780800">- Update to 4.22.0
  * SMB3 Directory Leases are supported. By default, SMB3 Directory
    Leases are enabled on non-clustered Samba and disabled on
    clustered Samba, based on the "clustering" option.
  * Netlogon Ping over LDAP and LDAPS
  * Experimental Himmelblaud Authentication in Samba
  * The "nmbd proxy logon" feature was removed.
  * fruit:posix_rename option of the vfs_fruit VFS module that
    could be used to enable POSIX directory rename behaviour for
    OS X clients has been removed as it could result in severe
    problems for Windows clients.</changelog>
  <changelog author="nopower@suse.com" date="1745323200">- Update to 4.22.1
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * Deadlock between two smbd processes; (bso#15767).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
    sconn-&gt;oplocks.exclusive_open&gt;=0; (bso#15836).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Wide link issue in samba 4.22; (bso#15841).
  * NT_STATUS_INVALID_PARAMETER: Can't create folders on share of
    an exfat file system; (bso#15845).
  * Lease code is not endian-safe; (bso#15849).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).</changelog>
  <changelog author="scabrero@suse.de" date="1746014400">- Update smb.conf to enable SMB3 unix extensions</changelog>
  <changelog author="nopower@suse.com" date="1746792000">- Update and rename update-apparmor-samba-profile script to
  update-samba-security-profile. It additionally now caters
  for selinux (if selinux is used); (bsc#1241391);</changelog>
  <changelog author="nopower@suse.com" date="1749211200">- Update to 4.22.2
  * (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.22.3
  * samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
</package>
<package pkgid="68f103b3107514fa8973181af92f7807e5ba98eda8253d9a206fbff6dde9e8a6db7092c02c8b5c3094102128ef9500254cfc56eeb6511ece4db54a0b3bbd8b3f" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.22.5+git.431.dc5a539f124" rel="160000.1.1"/>
  <changelog author="nopower@suse.com" date="1746792000">- Update and rename update-apparmor-samba-profile script to
  update-samba-security-profile. It additionally now caters
  for selinux (if selinux is used); (bsc#1241391);</changelog>
  <changelog author="nopower@suse.com" date="1749211200">- Update to 4.22.2
  * (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.22.3
  * samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1753444800">- adjust gpgme build dependency for future-proofing</changelog>
  <changelog author="noel.power@suse.com" date="1758801600">- Update to 4.22.4
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName-; (bso#15876).
  * Unresponsive second DC can cause idmapping failure when using
    idmap_ad-; (bso#15881).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * vfs_streams_depot fstatat broken; (bso#15816).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="noel.power@suse.com" date="1758801601">- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange &amp; restorecon cmds;(bsc#1249179).</changelog>
  <changelog author="noel.power@suse.com" date="1758801602">- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).</changelog>
  <changelog author="noel.power@suse.com" date="1758801603">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
</package>
<package pkgid="4757d6f76aeb8eb12b8fad73a7a039db2b53e411a170f6fc8ab409f44b6f48c5998d30295be9491c270077255a5da08ca5c89e3f6b11bc0ff7c48a4f305709df" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.22.6+git.435.014e5eceb5d" rel="160000.1.1"/>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.22.3
  * samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1753444800">- adjust gpgme build dependency for future-proofing</changelog>
  <changelog author="noel.power@suse.com" date="1758801600">- Update to 4.22.4
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName-; (bso#15876).
  * Unresponsive second DC can cause idmapping failure when using
    idmap_ad-; (bso#15881).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * vfs_streams_depot fstatat broken; (bso#15816).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="noel.power@suse.com" date="1758801601">- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange &amp; restorecon cmds;(bsc#1249179).</changelog>
  <changelog author="noel.power@suse.com" date="1758801602">- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).</changelog>
  <changelog author="noel.power@suse.com" date="1758801603">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
</package>
<package pkgid="4e4ebbf250a1b2dc6ba8cc357cab5e771e0df8924491261057564a89a7074bb42ccf58aabf167f9e1e085b1b10732465dc9f15297f956d1e58401f78d2a7b327" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.22.6+git.456.11475143caf" rel="160000.1.1"/>
  <changelog author="noel.power@suse.com" date="1758801600">- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange &amp; restorecon cmds;(bsc#1249179).</changelog>
  <changelog author="noel.power@suse.com" date="1758801601">- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).</changelog>
  <changelog author="noel.power@suse.com" date="1758801602">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
  <changelog author="nopower@suse.com" date="1765972800">-  Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
</package>
<package pkgid="ead37e19b96dd7e3b4e5c789eda710fe13ecbc3fac3f0f9fc5b166dd47add9f46dbdeefc8b348f7187c402d9d79710fee4a94914da4242ab9f236bed8d316592" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.22.7+git.460.b680c782b85" rel="160000.1.1"/>
  <changelog author="noel.power@suse.com" date="1758801600">- Disable timeouts for smb.service so that possibly slow running
  ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).</changelog>
  <changelog author="scabrero@suse.de" date="1759320000">- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
  to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).</changelog>
  <changelog author="noel.power@suse.com" date="1760529600">- Update to 4.22.5
  * CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).</changelog>
  <changelog author="nopower@suse.com" date="1761048000">- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).</changelog>
  <changelog author="noel.power@suse.com" date="1761912000">- Update [printers] location to /var/samba/spool; (bsc#1249179).</changelog>
  <changelog author="nopower@suse.com" date="1765972800">-  Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
  <changelog author="noel.power@suse.com" date="1768824000">- Update to 4.22.7
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * vfs_recycle does not update mtime; (bso#15940).
  * Assert failed: (dirfd != -1) || (smb_fname-&gt;base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
  * Crash in ctdbd on failed updateip; (bso#15935).</changelog>
  <changelog author="nopower@suse.com" date="1768996800">- Fix mistake in README.SUSE /var/spool/samba =&gt; /var/samba/spool
  (bsc#1254665).</changelog>
</package>
<package pkgid="39c6671e60f3255a48ab8fd637bd0b353ecd19cd3ec09a4e72e9881fb316a8b2847e946d9e3a58354c38f42b31efe783e3fefda025b7a54d3fffb99a37c8ddb6" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.22.9+git.506.22c03ce0781" rel="160000.1.1"/>
  <changelog author="nopower@suse.com" date="1766059200">- Adjust README.SUSE to reflect the new preferred location for
  '[printers]' share; (bsc#1254665).</changelog>
  <changelog author="scabrero@suse.de" date="1767787200">- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
  (bso#15790); (bsc#1249058).</changelog>
  <changelog author="noel.power@suse.com" date="1768824000">- Update to 4.22.7
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * vfs_recycle does not update mtime; (bso#15940).
  * Assert failed: (dirfd != -1) || (smb_fname-&gt;base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936); (bsc#1254586).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
  * Crash in ctdbd on failed updateip; (bso#15935).</changelog>
  <changelog author="nopower@suse.com" date="1768996800">- Fix mistake in README.SUSE /var/spool/samba =&gt; /var/samba/spool
  (bsc#1254665).</changelog>
  <changelog author="nopower@suse.com" date="1772107200">- Update to 4.22.8
  * New Spotlight default search field incorrectly initialized;
    (bso#15959).
  * smbd: in contend_dirleases() don't bother checking when not
    enabled; (bso#15984).
  * possible memory leak  on rpc_spoolss; (bso#15979);
    (bsc#1257200).
  * "net offlinejoin requestodj" manpage entry incorrectly
    mentiones provided credentials; (bso#15964).
  * Winbind group resolution failure; (bso#15972).
  * ctdbd socket documentation is wrong; (bso#15977).
  * Bind dlz 9.20; (bso#15790); (bsc#1249058).</changelog>
  <changelog author="rfrohl@suse.com" date="1774872000">- Use multiple threads for SELinux relabeling in
  update-samba-security-profile (bsc#1259050).</changelog>
  <changelog author="noel.power@suse.com" date="1776168000">- Add support to allow default selinux autolabelling by
  update-samba-security-profile on service [re]start to be
  inhibited; (bsc#1259050).</changelog>
  <changelog author="nopower@suse.com" date="1777377600">- Update to 4.22.9
  * leases torture test flappy; (bso#15978).
  * incorrect behavior on rpcclient enumport with rpcd_spoolss;
    (bso#16019).
  * "use-kerberos=desired" broken; (bso#15789); (bsc#1255755).
  * rpc workers with long living clients grow server  memory
    keytab; (bso#16042); (bsc#1257200).
  * CTDB's statd_callout fails on sm-notify; (bso#15938).
  * CTDB statd_callout_notify notifies unnecessary clients and
    loses their state; (bso#15939).</changelog>
  <changelog author="nopower@suse.com" date="1778760000">- vfs_snapper failing to access or enumerate files in
  subfolders; (bso#16058); (bsc#1259667).</changelog>
  <changelog author="nopower@suse.com" date="1778846400">- CVE-2026-4480: Fix Unauthenticated Remote Code Execution;
  (bso#16033); (bsc#1261161).
- CVE-2026-4408: Fix Remote Code Execution in SAMR;(bso#16034);
  (bsc#1261163).
- CVE-2026-3238: Fix unauthenticated udp packet crashes AD DC
  nbt server; (bso#16012); (bsc#1261160).
- CVE-2026-3012: Fix CVE-2026-3012 group policy certificate
  enrollment using http:// without validation;(bso#16003);
  (bsc#1261159).
- CVE-2026-1933: Fix missing access check on reparse point
  operations; (bso#15992); (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification;
  (bso#15997); (bsc#1261158).</changelog>
</package>
<package pkgid="789ff38f508da2177ad46bacce9f4675837bbb89b8bb7e91b9edb97327a6770d3f0272e954e10b8a51c7ff99b7775b610f7f5bdac7730c5565a39daf0a231c49" name="ctl" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1716984000">- First OBS release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716984001">- Update descriptions.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1717070400">- Add fix-IlmCtl-sover.patch.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- ensure openexr is at least version 3 and the devel package also
  needs to pull openexr-devel as its headers reference the openexr
  headers</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737115200">- Fix directory not found error when building on Leap 16</changelog>
</package>
<package pkgid="9873d6f924b2b55b6233ade3c08d8657348c074fae220df37583a05eed649428734ab77cc7499f30458348ca86e7c3efc4861ad35e549fc54845257df94a8505" name="ctl-data" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1716984000">- First OBS release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716984001">- Update descriptions.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1717070400">- Add fix-IlmCtl-sover.patch.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- ensure openexr is at least version 3 and the devel package also
  needs to pull openexr-devel as its headers reference the openexr
  headers</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737115200">- Fix directory not found error when building on Leap 16</changelog>
</package>
<package pkgid="99a20889925be11010acefe37eb55ea991db38bfa43d92bdf0862793bd573f140ffcfb509f911aca701c2790d3b04dee57b9f0d5dea754ab3bbffb9ee97c73cd" name="ctl-devel" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1716984000">- First OBS release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716984001">- Update descriptions.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1717070400">- Add fix-IlmCtl-sover.patch.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- ensure openexr is at least version 3 and the devel package also
  needs to pull openexr-devel as its headers reference the openexr
  headers</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737115200">- Fix directory not found error when building on Leap 16</changelog>
</package>
<package pkgid="0da7b4c53bcf262e8d39b1fee2fc2900d5b4be8f32fc9c9d12fb6c63587c9c0fe9496d20fd885241dc47d027cde7db594fe99b43fbf1ad7ae41c1d1c9c228499" name="ctl-doc" arch="noarch">
  <version epoch="0" ver="1.5.3" rel="bp160.1.12"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1716984000">- First OBS release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1716984001">- Update descriptions.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1717070400">- Add fix-IlmCtl-sover.patch.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1729512000">- ensure openexr is at least version 3 and the devel package also
  needs to pull openexr-devel as its headers reference the openexr
  headers</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1737115200">- Fix directory not found error when building on Leap 16</changelog>
</package>
<package pkgid="d75098be4ef7754dcd1859c98541ab033fa52b5701b2bed6a7289db51137bce88622577a58bfb9c12dda84437a2e933eb626dfbbcc6c71703cb88aec76ad6e35" name="ctop" arch="x86_64">
  <version epoch="0" ver="0.7.7" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1691150400">- Initial package of ctop 0.7.7 for openSUSE</changelog>
</package>
<package pkgid="573b23a5670c968933121c11409915711ac7604403a0d8dfdb7b4cccb08d3a4f8b6c8c5a4ac9cd81d2f4ddc1326f70b1d14cca58ef3cb8c8c90e0ed3a62e4cd6" name="ctre-devel" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="bp160.1.9"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700481600">- Initial version.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1700654400">- unsigned-char.patch: Fix bogus tests that depend on signed char</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718712000">- Update to version 3.9.0:
  * you can now use CTRE as C++ module! with -DCTRE_MODULE=ON
    (experimental).
  * `ctre::range` is deprecated and replaced with
    `ctre::search_all`
  * simple `ctre::capture_group` concept
  * capture groups / result type now has
    `.to_optional_number(...)` member function which returns
    `std::nullopt` if group is not matching
  * Fixed: Cannot parse Unicode ranges after question mark as in "
    ?[\p{L}]+"
    [gh#hanickadot/compile-time-regular-expressions#305]
- Pass -DCTRE_MODULE=OFF to cmake to disable CTRE module
  explicitly (requires cmake &gt;= 3.30).</changelog>
</package>
<package pkgid="16bf6c1d6b9bdbd21bba41bb9ee322bfe057d5d17ee96936f2dacf06fe3b862a0b06d74c8ebf454959d05dc4661e70029195dac95e08c83c037704f34a79d3ce" name="cuishark" arch="x86_64">
  <version epoch="0" ver="0.1.2" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1557144000">- Initial package, version 0.1.2</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1566043200">- Fix build on i586: Add cuishark-0.1.2-fix-32bit-build.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="fb8551b4f5f195e453b8086c353d0aaa9ee04a7be1abb6e4270a498178f2b826dcde6290803951448b9b656407f8a65ebc98a2bbbfc3f9c72e87eea2d7f6c261" name="culmus-fonts" arch="noarch">
  <version epoch="0" ver="0.133" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.cz" date="1304596800">- package missed TTF fonts -- thanks to andrei.levi at gmail.com</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1328097600">- renamed to culmus-fonts</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1344340800">- updated to 0.121:
  * Frank Ruehl CLM now supports diacritics.</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- updated to 0.130:
  * Added new TrueType font "Shofar" by Yoram Gnat. Complete family with
  diacritics and cantillation marks. The font is inspired by Koren type, with
  redesigned letter forms and the height-to-width ratio.</changelog>
  <changelog author="cornelis@solcon.nl" date="1525176000">- Updated to 0.132:
  * Nachlieli CLM completely redesigned, and now it also supports
    diacritics.
  * David CLM now also supports meteg and rafe, in addition to other
    diacritics.
  * Nachlieli and David are provided as otf fonts.
- Remove the Provides/Obsoletes: culmus, it was a long time ago that
  the package name was just culmus.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update descriptions.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651924800">- Update to version 0.133
  * Improved Hamsa shape in Caladings
  * New Synagogue glyph
  * Flag of Israel, moon phases and minor fixes.
  * Fixed varika in David CLM</changelog>
</package>
<package pkgid="5ce545b196ed1c821c66c9f4fd679d5b596135f2e2973b2fbade15657ceedec03bfc2c3228dabbf87632c522c8d3e09149b5d368a79d590b785246cbb27a393b" name="cunit-devel" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="160000.2.2"/>
  <changelog author="prusnak@suse.cz" date="1271851200">- cleaned up spec, split devel-static subpackage</changelog>
  <changelog author="andrea@opensuse.org" date="1275998400">- fixed 'no-pkg-config-provides'</changelog>
  <changelog author="jengelh@medozas.de" date="1328788800">- Update to new upstream release 2.1.2
  * modified dtd and xsl files to support inactive suites/tests
  * Added ability to deactivate suite/tests dynamically
  * Removed constraint that suite/test names be unique
- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Fix use of implicitly defined function in source
  (do not declare that post-build-checks's output was wrong)
- Add missing DT_NEEDED entry on ncurses</changelog>
  <changelog author="tchvatal@suse.com" date="1407153600">- Update to release 2.1.3:
  * prune the static-devel subpackage as it is pointless.
  * Various upstream fixes with no changelog.
- Cleanup with spec-cleaner to have the spec pretty</changelog>
  <changelog author="tchvatal@suse.com" date="1407153601">- The license is actually LGPL</changelog>
  <changelog author="tchvatal@suse.com" date="1407844800">- Use proper group for the library.</changelog>
  <changelog author="ddiss@suse.com" date="1432641600">- Don't tag Recommends on RHEL, it yields an "Unknown tag" error.</changelog>
  <changelog author="idonmez@suse.com" date="1445515200">- Add cunit-ncurses6.patch to compile with ncurses6</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms
- Clean the spec file up a bit</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="cb6c0b5ae64030b50f51605dbc4d014350893e88a677327c570de68b62c1b98c07c168ecb859c6a8afc2a42f39c690b28e2f0f57244139fb58e6c3ffa42c5e48" name="cunit-doc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="160000.2.2"/>
  <changelog author="prusnak@suse.cz" date="1271851200">- cleaned up spec, split devel-static subpackage</changelog>
  <changelog author="andrea@opensuse.org" date="1275998400">- fixed 'no-pkg-config-provides'</changelog>
  <changelog author="jengelh@medozas.de" date="1328788800">- Update to new upstream release 2.1.2
  * modified dtd and xsl files to support inactive suites/tests
  * Added ability to deactivate suite/tests dynamically
  * Removed constraint that suite/test names be unique
- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Fix use of implicitly defined function in source
  (do not declare that post-build-checks's output was wrong)
- Add missing DT_NEEDED entry on ncurses</changelog>
  <changelog author="tchvatal@suse.com" date="1407153600">- Update to release 2.1.3:
  * prune the static-devel subpackage as it is pointless.
  * Various upstream fixes with no changelog.
- Cleanup with spec-cleaner to have the spec pretty</changelog>
  <changelog author="tchvatal@suse.com" date="1407153601">- The license is actually LGPL</changelog>
  <changelog author="tchvatal@suse.com" date="1407844800">- Use proper group for the library.</changelog>
  <changelog author="ddiss@suse.com" date="1432641600">- Don't tag Recommends on RHEL, it yields an "Unknown tag" error.</changelog>
  <changelog author="idonmez@suse.com" date="1445515200">- Add cunit-ncurses6.patch to compile with ncurses6</changelog>
  <changelog author="fstrba@suse.com" date="1707220800">- Disable LTO to avoid undefined symbols on some platforms
- Clean the spec file up a bit</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="3c297f9b0729c117da39bc39c83ea368ee989ba5bd2d3755aecb77a0c119b845b6151bee8ef5c4ca16a06e9196b41e9dc101d93e59f46fe256c951fe59304ab5" name="cup-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.9.1" rel="160000.3.2"/>
  <changelog author="mvyskocil@suse.com" date="1385985600">- conflict the non-bootstrap variant with the bootstrap variant</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Don't BuildRequire java-1_5_0-gcj-compat-devel, since it will be
  soon gone; BuildRequire java-devel
- Build with java source and target level 1.6 to allow building
  with jdk9
- Sync the bootstrap and non-bootstrap spec files using the
  jpackage-bootstrap-prepare.sh script and clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Removed a jflex-lex-scan.patch again, so that bot is happy</changelog>
  <changelog author="fstrba@suse.com" date="1642161600">- Upgrade to version 1.8.2
  * fix build with recent java-cup
- Build the bootstrap package using ant with a generated build.xml
- Build the non-bootstrap package using maven, since its dependency
  auto is already built with maven
- Added patch:
  * jflex-1.8.2-no-auto-value.patch
    + do not process auto-value-annotations in bootstrap build
    + the generated file is pre-generated outside build for this
    variant
- Removed patches:
  * jflex-byaccj-utl.patch
  * jflex-classpath.patch
  * jflex-javac-no-target.patch
  * jflex-junit4.patch
  * jflex-no-cup-no-jflex.patch
    + not needed in this version</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Build against standalone glassfish-annotation-api for relevant
  distribution versions that have JDK that does not contain the
  JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1698235200">- Build with source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="gus.kenion@suse.com" date="1728993600">- Upgrade to 1.9.1
  * JFlex 1.9.1 is a small bugfix release:
  * fix negated char classes with overlapping content
    (#1065, #1066): Expressions such as [^\s\n] were translated
    incorrectly, because \s and \n overlap and the negation
    operator ^ in version 1.9.0 did not handle this case correctly.
- Includes changes from 1.9.0
  * JFlex 1.9.0 is a feature release with slight performance
    improvements in the scanning engine. It also fixes all known
    bugs of version 1.8.2.
  * New features
    + add optional token limit size (#1045, #197)
    + warn for unicode escapes that are too long (#1042)
    + directives and command line switches for enabling/disabling
    JFlex warnings (#1020)
    + allow custom annotations such as @SuppressWarnings
    (#1027, #762)
    + increase maximum supported DFA size to about 2^32 states
    (#1003, #952)
    + better error reporting for character classes (#996, #888, #939)
    + allow comments after %yylexthrow (#794)
    + make maven build reproducible (#765)
  * Fixed bugs
    + make character classes more robust (#985, #974, #986)
    + fix NullPointerException when generating dot files (#769)
  * Other
    + update dependencies
    + more and better property-based tests (#953)
    + use SPDX license identifiers
    + avoid use of createTempDir() (was used in tests only)
    + migrate CI to GitHub actions
    + migrate most tests to bazel
    + improve test suite to work on non-US locales
    + fix example file name for minijava example
    + improved simple.flex example
- Remove jflex-1.8.2-no-auto-value.patch (not applicable to
  versions newer than 1.8.2)
- Add jflex-1.9.1-no-auto-value.patch
- Merge multibuild logic into single .spec file
  * remove jflex-bootstrap.spec
  * remove jflex-bootstrap.changes
  * remove pre-checkin.sh</changelog>
</package>
<package pkgid="09ed465782e64dabdcb74d16f12c9f4afc5f7959bf79dc4e2c287500f89c8ec1ae91bc1dabb59f5f2a635e11b715e1d856333daba0267100a9b3547dff627e57" name="cups" arch="x86_64">
  <version epoch="0" ver="2.4.11" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1695211200">- cups-2.4.2-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1706097600">- Version upgrade to 2.4.7:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
  and several other changes, among them it is
  adding OpenSSL support for cupsHashData function and bug fixes.
  Detailed list:
  * CVE-2023-4504 - Fixed Heap-based buffer overflow when
    reading Postscript in PPD files
  * Added OpenSSL support for cupsHashData (Issue #762)
  * Fixed delays in lpd backend (Issue #741)
  * Fixed extensive logging in scheduler (Issue #604)
  * Fixed hanging of lpstat on IBM AIX (Issue #773)
  * Fixed hanging of lpstat on Solaris (Issue #156)
  * Fixed printing to stderr if we can't open cups-files.conf
    (Issue #777)
  * Fixed purging job files via cancel -x (Issue #742)
  * Fixed RFC 1179 port reserving behavior in LPD backend
    (Issue #743)
  * Fixed a bug in the PPD command interpretation code
    (Issue #768)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.6:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
  and two other bug fixes.
  Detailed list:
  * Fix linking error on old MacOS (Issue #715)
  * Fix printing multiple files on specific printers (Issue #643)
  * Fix use-after-free when logging warnings in case of failures
    in cupsdAcceptClient() (fixes CVE-2023-34241)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.5:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.5 is a hotfix release for a bug which corrupted
  locally saved certificates, which broke secured printing
  via TLS after the first print job.
- Version upgrade to 2.4.4:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.4 release is created as a hotfix for segfault
  in cupsGetNamedDest(), when caller tries to find
  the default destination and the default destination
  is not set on the machine.
- Version upgrade to 2.4.3:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
  and many bug fixes. CUPS now implements fallback for printers
  with broken firmware, which is not capable of answering
  to IPP request get-printer-attributes with all,
  media-col-database - this enables driverless support for
  bunch of printers which don't follow IPP Everywhere standard.
  Aside from the CVE fix the most important fixes are around color
  settings, printer application support fixes and OpenSSL support.
  Detailed list of changes:
  * Added a title with device uri for found network printers
    (Issues #402, #393)
  * Added new media sizes defined by IANA (Issues #501)
  * Added quirk for GoDEX label printers (Issue #440)
  * Fixed --enable-libtool-unsupported (Issue #394)
  * Fixed configuration on RISC-V machines (Issue #404)
  * Fixed the device_uri invalid pointer for driverless printers
    with .local hostname (Issue #419)
  * Fixed an OpenSSL crash bug (Issue #409)
  * Fixed a potential SNMP OID value overflow issue (Issue #431)
  * Fixed an OpenSSL certificate loading issue (Issue #465)
  * Fixed Brazilian Portuguese translations (Issue #288)
  * Fixed cupsd default keychain location when building
    with OpenSSL (Issue #529)
  * Fixed default color settings for CMYK printers as well
    (Issue #500)
  * Fixed duplicate PPD2IPP media-type names (Issue #688)
  * Fixed possible heap buffer overflow in _cups_strlcpy()
    (fixes CVE-2023-32324)
  * Fixed InputSlot heuristic for photo sizes smaller than 5x7"
    if there is no media-source in the request (Issue #569)
  * Fixed invalid memory access during generating IPP Everywhere
    queue (Issue #466)
  * Fixed lprm if no destination is provided (Issue #457)
  * Fixed memory leaks in create_local_bg_thread() (Issue #466)
  * Fixed media size tolerance in ippeveprinter (Issue #487)
  * Fixed passing command name without path into ippeveprinter
    (Issue #629)
  * Fixed saving strings file path in printers.conf (Issue #710)
  * Fixed TLS certificate generation bugs (Issue #652)
  * ippDeleteValues would not delete the last value (Issue #556)
  * Ignore some of IPP defaults if the application sends
    its PPD alternative (Issue #484)
  * Make Letter the default size in ippevepcl (Issue #543)
  * Now accessing Admin page in Web UI requires authentication
    (Issue #518)
  * Now look for default printer on network if needed (Issue #452)
  * Now we poll media-col-database separately if we fail at first
    (Issue #599)
  * Now report fax attributes and values as needed (Issue #459)
  * Now localize HTTP responses using the Content-Language value
    (Issue #426)
  * Raised file size limit for importing PPD via Web UI
    (Issue #433)
  * Raised maximum listen backlog size to INT MAX (Issue #626)
  * Update print-color-mode if the printer is modified
    via ColorModel PPD option (Issue #451)
  * Use localhost when printing via printer application
    (Issue #353)
  * Write defaults into /etc/cups/lpoptions if we're root
    (Issue #456)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.7
- Removed cups-2.4.2-CVE-2023-4504.patch : fixed upstream
  see the above CUPS 2.4.7 changes
- Removed cups-2.4.2-CVE-2023-32360.patch : fixed upstream via
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
- Removed cups-2.4.2-CVE-2023-34241.patch : fixed upstream
  see the above CUPS 2.4.6 changes
- Removed cups-2.4.2-CVE-2023-32324.patch : fixed upstream
  see the above CUPS 2.4.3 changes</changelog>
  <changelog author="jsmeix@suse.com" date="1706875200">- Removed outdated ntadmin stuff from cups.spec (boo#1219503)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="f3b82a33b165410bbc20b1f0a55716c060eebccd1e066e3387d6a66e9324e542dbd6ee00d94021b161656ad380c10cf8a433fcda83acbcdfec2419d1bc9c1e02" name="cups" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="60525791c7df516779988d566db43a966189a0e94b29d9c142613077b4df5bd6f429486f9111c53aa6aadd74fe081270a5a7c31283df899d6968eb93a268f33c" name="cups" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="160000.1.1"/>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
  <changelog author="jsmeix@suse.com" date="1776686400">- Version upgrade to 2.4.17:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.17 contains the following security fixes:
  * CVE-2026-27447: The scheduler treated local user
    and group names as case-insensitive (bsc#1261572)
  * CVE-2026-34978: The RSS notifier could write outside
    the scheduler's RSS directory (bsc#1261571)
  * CVE-2026-34980: The scheduler did not filter control
    characters from option values (bsc#1261569)
  * CVE-2026-34979: The scheduler did not always allocate
    enough memory for a job's options string (bsc#1261570)
  * CVE-2026-34990: The scheduler incorrectly allowed
    local certificates over the loopback interface (bsc#1261568)
  * CVE-2026-39314: Fixed the range check for
    job password strings (bsc#1261743)
  * CVE-2026-39316: Fixed a printer subscription bug
    in the scheduler (bsc#1261742)
  * CVE-2026-41079: Fixed a SNMP string conversion bug
    in the backends (bsc#1263116)
- The release includes other fixes as well, listed in CHANGES.md.
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Detailed list (from CHANGES.md):
  * The scheduler followed symbolic links when cleaning out
    its temporary directory (Issue #1448)
  * Updated `cupsFileGetConf` and `cupsFilePutConf` to escape
    more characters.
  * Updated man page `cancel` (Issue #984)
  * Updated `cupsRasterReadHeader` to validate more of the
    page header values (Issue #1501)
  * Fixed an issue with the class/printer CGI name checking.
  * Fixed infinite loop in `http_write()` on busy print servers
    (Issue #827)
  * Fixed potential TLS blocking issues (Issue #1128)
  * Fixed a job history bug in the scheduler (Issue #1440)
  * Fixed notifier logging bug that would result in nul bytes
    getting into the log (Issue #1450)
  * Fixed possible use-after-free in `cupsdReadClient()`
    (Issue #1454)
  * Fixed a document format bug in the IPP backend (Issue #1457)
  * Fixed DRAIN_OUTPUT race condition (Issue #1461)
  * Fixed a bug when then `ippFindXxx` and `ippSetXxx` functions
    were mixed.
  * Fixed the mapping of supply type keywords to SNMP names.
  * Fixed a bug in the IPP backend when SNMP was disabled.
  * Fixed a crash bug in the rastertoepson filter.
  * Fixed a bug in cgiCheckVariables.
  * Fixed handling read/write errors with OpenSSL (Issue #1506)
  * Fixed handling rehandshake error in `_httpTLSRead`
    (Issue #1508)
  * Fixed a debug printf bug on Windows (Issue #1529)
  * Fixed a recursion issue with encoding of nested collections
    (Issue #1539)
  * Fixed parsing of the `LimitRequestBody`, `MaxLogSize`,
    and `MaxRequestSize` directives in "cupsd.conf" (Issue #1540)
  * Fixed a parsing bug in `ipptool` (Issue #1542)
  * Fixed blank line detection in the `rastertolabel` filter
    (Issue #1545)
  * Fixed `httpPeek` edge case on compressed streams
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.17</changelog>
  <changelog author="jsmeix@suse.com" date="1776945600">- Version upgrade to 2.4.18:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.18 contains hotfix after CVE-2026-27447 fix:
  * Fixed cupsd crash if user does not exist (Issue #1555)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.18</changelog>
  <changelog author="jsmeix@suse.com" date="1777377600">- Version upgrade to 2.4.19:
  See https://github.com/openprinting/cups/releases
  Release 2.4.19 contains another hotfix after CVE-2026-27447 fix:
  * Fixed a regression in shared printing from non-local accounts
    (Issue #1557)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.19
- Added 'Michael R Sweet' key to cups.keyring
  because cups-2.4.19-source.tar.gz.sig belongs to him.</changelog>
</package>
<package pkgid="13da6b2308787e494479c621d35f0afc509f3c592f34e1130def55999dca68f68ba2e2235abed42ac6132f6c5f98eab2a14f95058412c794c264ca5b41f21295" name="cups-airprint" arch="noarch">
  <version epoch="0" ver="1.1" rel="bp160.1.6"/>
  <changelog author="seroton10@gmail.com" date="1454846400">- Initial version.</changelog>
  <changelog author="seroton10@gmail.com" date="1455451200">- Changes due to review feedback
  * Drop CUPS as build requirement
  * State required CUPS version at runtime
  * Document why CUPS-internal DNS-SD is insufficient
  * Many minor documentation improvements</changelog>
  <changelog author="jsmeix@suse.de" date="1456142400">- Requires cups-filters &gt;= 1.0.25 and cups &gt;= 1.6:
  At least some iOS apps send the URF format when printing via
  AirPrint so that the matching urftopdf filter that is provided
  in cups-filters &gt;= 1.0.25 is required to convert URF into PDF
  (the nowadays standard printing data format which can be further
  converted into the printer's native data format).
  Because cups-filters cannot be reasonably well used with
  traditional CUPS &lt;= 1.5.4 also a modern CUPS &gt;= 1.6 is
  in practice required.</changelog>
  <changelog author="jsmeix@suse.de" date="1456228800">- Inserted a new section "2. CAVEATS" in README.SUSE
  about possible limitations of AirPrint support via CUPS.</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1589716800">- python3.patch: Port script to python3
- pdf-support.patch: Fix printer discovery
- Add minimal build check to verify the script can run at all</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="d4c56d04e3f11746e2070f6accac446659eb4d6de2519a92ae8098fd1af6204294f340e013b76137dd2c76d7a11529273176732c8ea3c4b3537c44a15445f4c5" name="cups-backends" arch="noarch">
  <version epoch="0" ver="1.1" rel="bp160.1.10"/>
  <changelog author="jsmeix@suse.de" date="1243512000">- Removed the beh backend because it is now provided
  in the upgraded foomatic-filters version 4.0.1 package.
- Replaced the pipe backend source cups-pipe.pl perl script
  with a new source cups-pipe.sh bash script which works
  in much better compliance to CUPS and which also fixes
  a bug that it did not get signals from the cupsd
  so that it did not terminate pipe when removing jobs
  (see Novell/Suse Bugzilla bnc#499735).</changelog>
  <changelog author="coolo@novell.com" date="1245412800">- disable as-needed via 'export SUSE_ASNEEDED=0'
  for this package as it fails to build with it</changelog>
  <changelog author="meissner@suse.de" date="1251374400">- fixed as-needed issue by using the right ordering
  'hal.c -o hal -ldbus-1 -lhal' in the spec file</changelog>
  <changelog author="jsmeix@suse.de" date="1270728000">- Work with upstream compliant CUPS 1.4 on all platforms
  which means to have a fixed "/usr/lib/cups/" directory
  on all platforms (see Novell/Suse Bugzilla bnc#575544).
- Removed the hal backend because HAL is deprecated
  (see Novell/Suse Bugzilla bnc#593946).
- Removed the hpnpf sources because those were "never" built
  (at least not in any of our currently maintained
  products SLES10, 11.0, 11.1, SLES11, and 11.2).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="jsmeix@suse.de" date="1396008000">- Added 'beh' the Backend Error Handler.
  Since cups-filters version 1.0.42 foomatic-rip's upstream home
  is moved from the foomatic-filters package to cups-filters and
  foomatic-rip is provided in the cups-filters-foomatic-rip RPM.
  The foomatic-filters package also contained 'beh' but that was
  not moved into cups-filters.
  Since hereby /usr/lib/cups/backend/beh is provided by both
  cups-backends and foomatic-filters now cups-backends conflicts
  with foomatic-filters.
  As a result foomatic-filters is now obsolete and
  for foomatic-rip cups-filters-foomatic-rip should be used and
  for 'beh' cups-backends should be used.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Since cups-filters version 1.6.0 the beh backend is provided
  by the cups-filters RPM as /usr/lib/cups/backend/beh which is
  a C re-write of the beh backend written in Perl that is still
  provided here but now named /usr/lib/cups/backend/beh.pl
  to avoid that cups-backends conflicts with cups-filters.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Changed how COPYING is installed.  The %doc macro is no longer
  properly expanding ${RPM_SOURCE_DIR}, and isn't handling things
  properly with having the COPYING file manually installed in
  this package.   Clears builderror in openSUSE:Factory.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060801">- Corrected improper source macro for COPYING file.</changelog>
</package>
<package pkgid="cb3227541071a5b51958001cf27857019a54c0b98aa70c7e7e6e835c5a42a5f7b6956d0a95b925d7f80ab5177e279886344a1be61c3b7946ea3f26169a021a59" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.4.11" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1695211200">- cups-2.4.2-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1706097600">- Version upgrade to 2.4.7:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
  and several other changes, among them it is
  adding OpenSSL support for cupsHashData function and bug fixes.
  Detailed list:
  * CVE-2023-4504 - Fixed Heap-based buffer overflow when
    reading Postscript in PPD files
  * Added OpenSSL support for cupsHashData (Issue #762)
  * Fixed delays in lpd backend (Issue #741)
  * Fixed extensive logging in scheduler (Issue #604)
  * Fixed hanging of lpstat on IBM AIX (Issue #773)
  * Fixed hanging of lpstat on Solaris (Issue #156)
  * Fixed printing to stderr if we can't open cups-files.conf
    (Issue #777)
  * Fixed purging job files via cancel -x (Issue #742)
  * Fixed RFC 1179 port reserving behavior in LPD backend
    (Issue #743)
  * Fixed a bug in the PPD command interpretation code
    (Issue #768)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.6:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
  and two other bug fixes.
  Detailed list:
  * Fix linking error on old MacOS (Issue #715)
  * Fix printing multiple files on specific printers (Issue #643)
  * Fix use-after-free when logging warnings in case of failures
    in cupsdAcceptClient() (fixes CVE-2023-34241)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.5:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.5 is a hotfix release for a bug which corrupted
  locally saved certificates, which broke secured printing
  via TLS after the first print job.
- Version upgrade to 2.4.4:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.4 release is created as a hotfix for segfault
  in cupsGetNamedDest(), when caller tries to find
  the default destination and the default destination
  is not set on the machine.
- Version upgrade to 2.4.3:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
  and many bug fixes. CUPS now implements fallback for printers
  with broken firmware, which is not capable of answering
  to IPP request get-printer-attributes with all,
  media-col-database - this enables driverless support for
  bunch of printers which don't follow IPP Everywhere standard.
  Aside from the CVE fix the most important fixes are around color
  settings, printer application support fixes and OpenSSL support.
  Detailed list of changes:
  * Added a title with device uri for found network printers
    (Issues #402, #393)
  * Added new media sizes defined by IANA (Issues #501)
  * Added quirk for GoDEX label printers (Issue #440)
  * Fixed --enable-libtool-unsupported (Issue #394)
  * Fixed configuration on RISC-V machines (Issue #404)
  * Fixed the device_uri invalid pointer for driverless printers
    with .local hostname (Issue #419)
  * Fixed an OpenSSL crash bug (Issue #409)
  * Fixed a potential SNMP OID value overflow issue (Issue #431)
  * Fixed an OpenSSL certificate loading issue (Issue #465)
  * Fixed Brazilian Portuguese translations (Issue #288)
  * Fixed cupsd default keychain location when building
    with OpenSSL (Issue #529)
  * Fixed default color settings for CMYK printers as well
    (Issue #500)
  * Fixed duplicate PPD2IPP media-type names (Issue #688)
  * Fixed possible heap buffer overflow in _cups_strlcpy()
    (fixes CVE-2023-32324)
  * Fixed InputSlot heuristic for photo sizes smaller than 5x7"
    if there is no media-source in the request (Issue #569)
  * Fixed invalid memory access during generating IPP Everywhere
    queue (Issue #466)
  * Fixed lprm if no destination is provided (Issue #457)
  * Fixed memory leaks in create_local_bg_thread() (Issue #466)
  * Fixed media size tolerance in ippeveprinter (Issue #487)
  * Fixed passing command name without path into ippeveprinter
    (Issue #629)
  * Fixed saving strings file path in printers.conf (Issue #710)
  * Fixed TLS certificate generation bugs (Issue #652)
  * ippDeleteValues would not delete the last value (Issue #556)
  * Ignore some of IPP defaults if the application sends
    its PPD alternative (Issue #484)
  * Make Letter the default size in ippevepcl (Issue #543)
  * Now accessing Admin page in Web UI requires authentication
    (Issue #518)
  * Now look for default printer on network if needed (Issue #452)
  * Now we poll media-col-database separately if we fail at first
    (Issue #599)
  * Now report fax attributes and values as needed (Issue #459)
  * Now localize HTTP responses using the Content-Language value
    (Issue #426)
  * Raised file size limit for importing PPD via Web UI
    (Issue #433)
  * Raised maximum listen backlog size to INT MAX (Issue #626)
  * Update print-color-mode if the printer is modified
    via ColorModel PPD option (Issue #451)
  * Use localhost when printing via printer application
    (Issue #353)
  * Write defaults into /etc/cups/lpoptions if we're root
    (Issue #456)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.7
- Removed cups-2.4.2-CVE-2023-4504.patch : fixed upstream
  see the above CUPS 2.4.7 changes
- Removed cups-2.4.2-CVE-2023-32360.patch : fixed upstream via
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
- Removed cups-2.4.2-CVE-2023-34241.patch : fixed upstream
  see the above CUPS 2.4.6 changes
- Removed cups-2.4.2-CVE-2023-32324.patch : fixed upstream
  see the above CUPS 2.4.3 changes</changelog>
  <changelog author="jsmeix@suse.com" date="1706875200">- Removed outdated ntadmin stuff from cups.spec (boo#1219503)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="232536317a15b63b417f022c4f5cb6aa55fb0998cfb7795f7987aa2ce839b06e6c39b3368963a4b420dea324c37385084192f9b7aefe29af07cca56f1ef7bd1b" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="04a6b22b9e82eb5e51a1c42713df6a03a0c03466ac130d7fdb6b307ec900f9b9022cdefb75a0b82470c9ce3e184b3d8518a23fbb2f6eb7511985eb75039aad70" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="160000.1.1"/>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
  <changelog author="jsmeix@suse.com" date="1776686400">- Version upgrade to 2.4.17:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.17 contains the following security fixes:
  * CVE-2026-27447: The scheduler treated local user
    and group names as case-insensitive (bsc#1261572)
  * CVE-2026-34978: The RSS notifier could write outside
    the scheduler's RSS directory (bsc#1261571)
  * CVE-2026-34980: The scheduler did not filter control
    characters from option values (bsc#1261569)
  * CVE-2026-34979: The scheduler did not always allocate
    enough memory for a job's options string (bsc#1261570)
  * CVE-2026-34990: The scheduler incorrectly allowed
    local certificates over the loopback interface (bsc#1261568)
  * CVE-2026-39314: Fixed the range check for
    job password strings (bsc#1261743)
  * CVE-2026-39316: Fixed a printer subscription bug
    in the scheduler (bsc#1261742)
  * CVE-2026-41079: Fixed a SNMP string conversion bug
    in the backends (bsc#1263116)
- The release includes other fixes as well, listed in CHANGES.md.
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Detailed list (from CHANGES.md):
  * The scheduler followed symbolic links when cleaning out
    its temporary directory (Issue #1448)
  * Updated `cupsFileGetConf` and `cupsFilePutConf` to escape
    more characters.
  * Updated man page `cancel` (Issue #984)
  * Updated `cupsRasterReadHeader` to validate more of the
    page header values (Issue #1501)
  * Fixed an issue with the class/printer CGI name checking.
  * Fixed infinite loop in `http_write()` on busy print servers
    (Issue #827)
  * Fixed potential TLS blocking issues (Issue #1128)
  * Fixed a job history bug in the scheduler (Issue #1440)
  * Fixed notifier logging bug that would result in nul bytes
    getting into the log (Issue #1450)
  * Fixed possible use-after-free in `cupsdReadClient()`
    (Issue #1454)
  * Fixed a document format bug in the IPP backend (Issue #1457)
  * Fixed DRAIN_OUTPUT race condition (Issue #1461)
  * Fixed a bug when then `ippFindXxx` and `ippSetXxx` functions
    were mixed.
  * Fixed the mapping of supply type keywords to SNMP names.
  * Fixed a bug in the IPP backend when SNMP was disabled.
  * Fixed a crash bug in the rastertoepson filter.
  * Fixed a bug in cgiCheckVariables.
  * Fixed handling read/write errors with OpenSSL (Issue #1506)
  * Fixed handling rehandshake error in `_httpTLSRead`
    (Issue #1508)
  * Fixed a debug printf bug on Windows (Issue #1529)
  * Fixed a recursion issue with encoding of nested collections
    (Issue #1539)
  * Fixed parsing of the `LimitRequestBody`, `MaxLogSize`,
    and `MaxRequestSize` directives in "cupsd.conf" (Issue #1540)
  * Fixed a parsing bug in `ipptool` (Issue #1542)
  * Fixed blank line detection in the `rastertolabel` filter
    (Issue #1545)
  * Fixed `httpPeek` edge case on compressed streams
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.17</changelog>
  <changelog author="jsmeix@suse.com" date="1776945600">- Version upgrade to 2.4.18:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.18 contains hotfix after CVE-2026-27447 fix:
  * Fixed cupsd crash if user does not exist (Issue #1555)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.18</changelog>
  <changelog author="jsmeix@suse.com" date="1777377600">- Version upgrade to 2.4.19:
  See https://github.com/openprinting/cups/releases
  Release 2.4.19 contains another hotfix after CVE-2026-27447 fix:
  * Fixed a regression in shared printing from non-local accounts
    (Issue #1557)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.19
- Added 'Michael R Sweet' key to cups.keyring
  because cups-2.4.19-source.tar.gz.sig belongs to him.</changelog>
</package>
<package pkgid="518b5991227d7c55d850dbd439c5586f640a52f36499f6ac7d5a7a5fa8e18d7089c93087d4c03a51fd3682843a0ed1040df7dbfc829e19ebf2b03f3efbde0732" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.4.11" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1695211200">- cups-2.4.2-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1706097600">- Version upgrade to 2.4.7:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
  and several other changes, among them it is
  adding OpenSSL support for cupsHashData function and bug fixes.
  Detailed list:
  * CVE-2023-4504 - Fixed Heap-based buffer overflow when
    reading Postscript in PPD files
  * Added OpenSSL support for cupsHashData (Issue #762)
  * Fixed delays in lpd backend (Issue #741)
  * Fixed extensive logging in scheduler (Issue #604)
  * Fixed hanging of lpstat on IBM AIX (Issue #773)
  * Fixed hanging of lpstat on Solaris (Issue #156)
  * Fixed printing to stderr if we can't open cups-files.conf
    (Issue #777)
  * Fixed purging job files via cancel -x (Issue #742)
  * Fixed RFC 1179 port reserving behavior in LPD backend
    (Issue #743)
  * Fixed a bug in the PPD command interpretation code
    (Issue #768)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.6:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
  and two other bug fixes.
  Detailed list:
  * Fix linking error on old MacOS (Issue #715)
  * Fix printing multiple files on specific printers (Issue #643)
  * Fix use-after-free when logging warnings in case of failures
    in cupsdAcceptClient() (fixes CVE-2023-34241)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.5:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.5 is a hotfix release for a bug which corrupted
  locally saved certificates, which broke secured printing
  via TLS after the first print job.
- Version upgrade to 2.4.4:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.4 release is created as a hotfix for segfault
  in cupsGetNamedDest(), when caller tries to find
  the default destination and the default destination
  is not set on the machine.
- Version upgrade to 2.4.3:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
  and many bug fixes. CUPS now implements fallback for printers
  with broken firmware, which is not capable of answering
  to IPP request get-printer-attributes with all,
  media-col-database - this enables driverless support for
  bunch of printers which don't follow IPP Everywhere standard.
  Aside from the CVE fix the most important fixes are around color
  settings, printer application support fixes and OpenSSL support.
  Detailed list of changes:
  * Added a title with device uri for found network printers
    (Issues #402, #393)
  * Added new media sizes defined by IANA (Issues #501)
  * Added quirk for GoDEX label printers (Issue #440)
  * Fixed --enable-libtool-unsupported (Issue #394)
  * Fixed configuration on RISC-V machines (Issue #404)
  * Fixed the device_uri invalid pointer for driverless printers
    with .local hostname (Issue #419)
  * Fixed an OpenSSL crash bug (Issue #409)
  * Fixed a potential SNMP OID value overflow issue (Issue #431)
  * Fixed an OpenSSL certificate loading issue (Issue #465)
  * Fixed Brazilian Portuguese translations (Issue #288)
  * Fixed cupsd default keychain location when building
    with OpenSSL (Issue #529)
  * Fixed default color settings for CMYK printers as well
    (Issue #500)
  * Fixed duplicate PPD2IPP media-type names (Issue #688)
  * Fixed possible heap buffer overflow in _cups_strlcpy()
    (fixes CVE-2023-32324)
  * Fixed InputSlot heuristic for photo sizes smaller than 5x7"
    if there is no media-source in the request (Issue #569)
  * Fixed invalid memory access during generating IPP Everywhere
    queue (Issue #466)
  * Fixed lprm if no destination is provided (Issue #457)
  * Fixed memory leaks in create_local_bg_thread() (Issue #466)
  * Fixed media size tolerance in ippeveprinter (Issue #487)
  * Fixed passing command name without path into ippeveprinter
    (Issue #629)
  * Fixed saving strings file path in printers.conf (Issue #710)
  * Fixed TLS certificate generation bugs (Issue #652)
  * ippDeleteValues would not delete the last value (Issue #556)
  * Ignore some of IPP defaults if the application sends
    its PPD alternative (Issue #484)
  * Make Letter the default size in ippevepcl (Issue #543)
  * Now accessing Admin page in Web UI requires authentication
    (Issue #518)
  * Now look for default printer on network if needed (Issue #452)
  * Now we poll media-col-database separately if we fail at first
    (Issue #599)
  * Now report fax attributes and values as needed (Issue #459)
  * Now localize HTTP responses using the Content-Language value
    (Issue #426)
  * Raised file size limit for importing PPD via Web UI
    (Issue #433)
  * Raised maximum listen backlog size to INT MAX (Issue #626)
  * Update print-color-mode if the printer is modified
    via ColorModel PPD option (Issue #451)
  * Use localhost when printing via printer application
    (Issue #353)
  * Write defaults into /etc/cups/lpoptions if we're root
    (Issue #456)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.7
- Removed cups-2.4.2-CVE-2023-4504.patch : fixed upstream
  see the above CUPS 2.4.7 changes
- Removed cups-2.4.2-CVE-2023-32360.patch : fixed upstream via
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
- Removed cups-2.4.2-CVE-2023-34241.patch : fixed upstream
  see the above CUPS 2.4.6 changes
- Removed cups-2.4.2-CVE-2023-32324.patch : fixed upstream
  see the above CUPS 2.4.3 changes</changelog>
  <changelog author="jsmeix@suse.com" date="1706875200">- Removed outdated ntadmin stuff from cups.spec (boo#1219503)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="351595f6aa8883c2023f46d091c9f682c136ba24a90895fe5c57eaf342b20f453a1f2049c0ea84f4e243dacba3f0650822bac1136e35b398348b86bc82f19864" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="8eaf0211e6f9925b058f17da58de77776dca8d81a6eb2c8a62d1d476917e6b6e51d0b8a3652b5381360a4cc7733bdf40228fc285dbef2443596984e9742d6ca6" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="160000.1.1"/>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
  <changelog author="jsmeix@suse.com" date="1776686400">- Version upgrade to 2.4.17:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.17 contains the following security fixes:
  * CVE-2026-27447: The scheduler treated local user
    and group names as case-insensitive (bsc#1261572)
  * CVE-2026-34978: The RSS notifier could write outside
    the scheduler's RSS directory (bsc#1261571)
  * CVE-2026-34980: The scheduler did not filter control
    characters from option values (bsc#1261569)
  * CVE-2026-34979: The scheduler did not always allocate
    enough memory for a job's options string (bsc#1261570)
  * CVE-2026-34990: The scheduler incorrectly allowed
    local certificates over the loopback interface (bsc#1261568)
  * CVE-2026-39314: Fixed the range check for
    job password strings (bsc#1261743)
  * CVE-2026-39316: Fixed a printer subscription bug
    in the scheduler (bsc#1261742)
  * CVE-2026-41079: Fixed a SNMP string conversion bug
    in the backends (bsc#1263116)
- The release includes other fixes as well, listed in CHANGES.md.
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Detailed list (from CHANGES.md):
  * The scheduler followed symbolic links when cleaning out
    its temporary directory (Issue #1448)
  * Updated `cupsFileGetConf` and `cupsFilePutConf` to escape
    more characters.
  * Updated man page `cancel` (Issue #984)
  * Updated `cupsRasterReadHeader` to validate more of the
    page header values (Issue #1501)
  * Fixed an issue with the class/printer CGI name checking.
  * Fixed infinite loop in `http_write()` on busy print servers
    (Issue #827)
  * Fixed potential TLS blocking issues (Issue #1128)
  * Fixed a job history bug in the scheduler (Issue #1440)
  * Fixed notifier logging bug that would result in nul bytes
    getting into the log (Issue #1450)
  * Fixed possible use-after-free in `cupsdReadClient()`
    (Issue #1454)
  * Fixed a document format bug in the IPP backend (Issue #1457)
  * Fixed DRAIN_OUTPUT race condition (Issue #1461)
  * Fixed a bug when then `ippFindXxx` and `ippSetXxx` functions
    were mixed.
  * Fixed the mapping of supply type keywords to SNMP names.
  * Fixed a bug in the IPP backend when SNMP was disabled.
  * Fixed a crash bug in the rastertoepson filter.
  * Fixed a bug in cgiCheckVariables.
  * Fixed handling read/write errors with OpenSSL (Issue #1506)
  * Fixed handling rehandshake error in `_httpTLSRead`
    (Issue #1508)
  * Fixed a debug printf bug on Windows (Issue #1529)
  * Fixed a recursion issue with encoding of nested collections
    (Issue #1539)
  * Fixed parsing of the `LimitRequestBody`, `MaxLogSize`,
    and `MaxRequestSize` directives in "cupsd.conf" (Issue #1540)
  * Fixed a parsing bug in `ipptool` (Issue #1542)
  * Fixed blank line detection in the `rastertolabel` filter
    (Issue #1545)
  * Fixed `httpPeek` edge case on compressed streams
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.17</changelog>
  <changelog author="jsmeix@suse.com" date="1776945600">- Version upgrade to 2.4.18:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.18 contains hotfix after CVE-2026-27447 fix:
  * Fixed cupsd crash if user does not exist (Issue #1555)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.18</changelog>
  <changelog author="jsmeix@suse.com" date="1777377600">- Version upgrade to 2.4.19:
  See https://github.com/openprinting/cups/releases
  Release 2.4.19 contains another hotfix after CVE-2026-27447 fix:
  * Fixed a regression in shared printing from non-local accounts
    (Issue #1557)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.19
- Added 'Michael R Sweet' key to cups.keyring
  because cups-2.4.19-source.tar.gz.sig belongs to him.</changelog>
</package>
<package pkgid="91245a738692d94d7223895ef32cc6eeb334884aa49176b829fadabbb93853acd1ba4888905f60a09488cf520ba630f59f2aae11de1a02cec6299356d1bc4f24" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.4.11" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1695211200">- cups-2.4.2-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1706097600">- Version upgrade to 2.4.7:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
  and several other changes, among them it is
  adding OpenSSL support for cupsHashData function and bug fixes.
  Detailed list:
  * CVE-2023-4504 - Fixed Heap-based buffer overflow when
    reading Postscript in PPD files
  * Added OpenSSL support for cupsHashData (Issue #762)
  * Fixed delays in lpd backend (Issue #741)
  * Fixed extensive logging in scheduler (Issue #604)
  * Fixed hanging of lpstat on IBM AIX (Issue #773)
  * Fixed hanging of lpstat on Solaris (Issue #156)
  * Fixed printing to stderr if we can't open cups-files.conf
    (Issue #777)
  * Fixed purging job files via cancel -x (Issue #742)
  * Fixed RFC 1179 port reserving behavior in LPD backend
    (Issue #743)
  * Fixed a bug in the PPD command interpretation code
    (Issue #768)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.6:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
  and two other bug fixes.
  Detailed list:
  * Fix linking error on old MacOS (Issue #715)
  * Fix printing multiple files on specific printers (Issue #643)
  * Fix use-after-free when logging warnings in case of failures
    in cupsdAcceptClient() (fixes CVE-2023-34241)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.5:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.5 is a hotfix release for a bug which corrupted
  locally saved certificates, which broke secured printing
  via TLS after the first print job.
- Version upgrade to 2.4.4:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.4 release is created as a hotfix for segfault
  in cupsGetNamedDest(), when caller tries to find
  the default destination and the default destination
  is not set on the machine.
- Version upgrade to 2.4.3:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
  and many bug fixes. CUPS now implements fallback for printers
  with broken firmware, which is not capable of answering
  to IPP request get-printer-attributes with all,
  media-col-database - this enables driverless support for
  bunch of printers which don't follow IPP Everywhere standard.
  Aside from the CVE fix the most important fixes are around color
  settings, printer application support fixes and OpenSSL support.
  Detailed list of changes:
  * Added a title with device uri for found network printers
    (Issues #402, #393)
  * Added new media sizes defined by IANA (Issues #501)
  * Added quirk for GoDEX label printers (Issue #440)
  * Fixed --enable-libtool-unsupported (Issue #394)
  * Fixed configuration on RISC-V machines (Issue #404)
  * Fixed the device_uri invalid pointer for driverless printers
    with .local hostname (Issue #419)
  * Fixed an OpenSSL crash bug (Issue #409)
  * Fixed a potential SNMP OID value overflow issue (Issue #431)
  * Fixed an OpenSSL certificate loading issue (Issue #465)
  * Fixed Brazilian Portuguese translations (Issue #288)
  * Fixed cupsd default keychain location when building
    with OpenSSL (Issue #529)
  * Fixed default color settings for CMYK printers as well
    (Issue #500)
  * Fixed duplicate PPD2IPP media-type names (Issue #688)
  * Fixed possible heap buffer overflow in _cups_strlcpy()
    (fixes CVE-2023-32324)
  * Fixed InputSlot heuristic for photo sizes smaller than 5x7"
    if there is no media-source in the request (Issue #569)
  * Fixed invalid memory access during generating IPP Everywhere
    queue (Issue #466)
  * Fixed lprm if no destination is provided (Issue #457)
  * Fixed memory leaks in create_local_bg_thread() (Issue #466)
  * Fixed media size tolerance in ippeveprinter (Issue #487)
  * Fixed passing command name without path into ippeveprinter
    (Issue #629)
  * Fixed saving strings file path in printers.conf (Issue #710)
  * Fixed TLS certificate generation bugs (Issue #652)
  * ippDeleteValues would not delete the last value (Issue #556)
  * Ignore some of IPP defaults if the application sends
    its PPD alternative (Issue #484)
  * Make Letter the default size in ippevepcl (Issue #543)
  * Now accessing Admin page in Web UI requires authentication
    (Issue #518)
  * Now look for default printer on network if needed (Issue #452)
  * Now we poll media-col-database separately if we fail at first
    (Issue #599)
  * Now report fax attributes and values as needed (Issue #459)
  * Now localize HTTP responses using the Content-Language value
    (Issue #426)
  * Raised file size limit for importing PPD via Web UI
    (Issue #433)
  * Raised maximum listen backlog size to INT MAX (Issue #626)
  * Update print-color-mode if the printer is modified
    via ColorModel PPD option (Issue #451)
  * Use localhost when printing via printer application
    (Issue #353)
  * Write defaults into /etc/cups/lpoptions if we're root
    (Issue #456)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.7
- Removed cups-2.4.2-CVE-2023-4504.patch : fixed upstream
  see the above CUPS 2.4.7 changes
- Removed cups-2.4.2-CVE-2023-32360.patch : fixed upstream via
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
- Removed cups-2.4.2-CVE-2023-34241.patch : fixed upstream
  see the above CUPS 2.4.6 changes
- Removed cups-2.4.2-CVE-2023-32324.patch : fixed upstream
  see the above CUPS 2.4.3 changes</changelog>
  <changelog author="jsmeix@suse.com" date="1706875200">- Removed outdated ntadmin stuff from cups.spec (boo#1219503)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="aa4b59f88480cb65d2e863ff44695867e2c6abd84e1e8283094b13f1c157aa8e52dfcea4912584f23e2c06b1c5c346f14207d5351e71a2986cb79b38856cafa7" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="3d2e8213da67643a1dccc95fde0f78234339bfb4d30afe7b434530cfaff119b1e901bdfd335f0d9307609c56a714ec5dd9b45bf234f1bf80f957323be417668d" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="160000.1.1"/>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
  <changelog author="jsmeix@suse.com" date="1776686400">- Version upgrade to 2.4.17:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.17 contains the following security fixes:
  * CVE-2026-27447: The scheduler treated local user
    and group names as case-insensitive (bsc#1261572)
  * CVE-2026-34978: The RSS notifier could write outside
    the scheduler's RSS directory (bsc#1261571)
  * CVE-2026-34980: The scheduler did not filter control
    characters from option values (bsc#1261569)
  * CVE-2026-34979: The scheduler did not always allocate
    enough memory for a job's options string (bsc#1261570)
  * CVE-2026-34990: The scheduler incorrectly allowed
    local certificates over the loopback interface (bsc#1261568)
  * CVE-2026-39314: Fixed the range check for
    job password strings (bsc#1261743)
  * CVE-2026-39316: Fixed a printer subscription bug
    in the scheduler (bsc#1261742)
  * CVE-2026-41079: Fixed a SNMP string conversion bug
    in the backends (bsc#1263116)
- The release includes other fixes as well, listed in CHANGES.md.
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Detailed list (from CHANGES.md):
  * The scheduler followed symbolic links when cleaning out
    its temporary directory (Issue #1448)
  * Updated `cupsFileGetConf` and `cupsFilePutConf` to escape
    more characters.
  * Updated man page `cancel` (Issue #984)
  * Updated `cupsRasterReadHeader` to validate more of the
    page header values (Issue #1501)
  * Fixed an issue with the class/printer CGI name checking.
  * Fixed infinite loop in `http_write()` on busy print servers
    (Issue #827)
  * Fixed potential TLS blocking issues (Issue #1128)
  * Fixed a job history bug in the scheduler (Issue #1440)
  * Fixed notifier logging bug that would result in nul bytes
    getting into the log (Issue #1450)
  * Fixed possible use-after-free in `cupsdReadClient()`
    (Issue #1454)
  * Fixed a document format bug in the IPP backend (Issue #1457)
  * Fixed DRAIN_OUTPUT race condition (Issue #1461)
  * Fixed a bug when then `ippFindXxx` and `ippSetXxx` functions
    were mixed.
  * Fixed the mapping of supply type keywords to SNMP names.
  * Fixed a bug in the IPP backend when SNMP was disabled.
  * Fixed a crash bug in the rastertoepson filter.
  * Fixed a bug in cgiCheckVariables.
  * Fixed handling read/write errors with OpenSSL (Issue #1506)
  * Fixed handling rehandshake error in `_httpTLSRead`
    (Issue #1508)
  * Fixed a debug printf bug on Windows (Issue #1529)
  * Fixed a recursion issue with encoding of nested collections
    (Issue #1539)
  * Fixed parsing of the `LimitRequestBody`, `MaxLogSize`,
    and `MaxRequestSize` directives in "cupsd.conf" (Issue #1540)
  * Fixed a parsing bug in `ipptool` (Issue #1542)
  * Fixed blank line detection in the `rastertolabel` filter
    (Issue #1545)
  * Fixed `httpPeek` edge case on compressed streams
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.17</changelog>
  <changelog author="jsmeix@suse.com" date="1776945600">- Version upgrade to 2.4.18:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.18 contains hotfix after CVE-2026-27447 fix:
  * Fixed cupsd crash if user does not exist (Issue #1555)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.18</changelog>
  <changelog author="jsmeix@suse.com" date="1777377600">- Version upgrade to 2.4.19:
  See https://github.com/openprinting/cups/releases
  Release 2.4.19 contains another hotfix after CVE-2026-27447 fix:
  * Fixed a regression in shared printing from non-local accounts
    (Issue #1557)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.19
- Added 'Michael R Sweet' key to cups.keyring
  because cups-2.4.19-source.tar.gz.sig belongs to him.</changelog>
</package>
<package pkgid="c6f1b353e814eff7ba84ecfebf1d765cfa14da1daddb7f779f88476b2eeb2a8228674b96326c628f7c5f5dd148a2df560369d14f0c533ca5b0a8b51344a58e20" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.4.11" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1695211200">- cups-2.4.2-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1706097600">- Version upgrade to 2.4.7:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
  and several other changes, among them it is
  adding OpenSSL support for cupsHashData function and bug fixes.
  Detailed list:
  * CVE-2023-4504 - Fixed Heap-based buffer overflow when
    reading Postscript in PPD files
  * Added OpenSSL support for cupsHashData (Issue #762)
  * Fixed delays in lpd backend (Issue #741)
  * Fixed extensive logging in scheduler (Issue #604)
  * Fixed hanging of lpstat on IBM AIX (Issue #773)
  * Fixed hanging of lpstat on Solaris (Issue #156)
  * Fixed printing to stderr if we can't open cups-files.conf
    (Issue #777)
  * Fixed purging job files via cancel -x (Issue #742)
  * Fixed RFC 1179 port reserving behavior in LPD backend
    (Issue #743)
  * Fixed a bug in the PPD command interpretation code
    (Issue #768)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.6:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
  and two other bug fixes.
  Detailed list:
  * Fix linking error on old MacOS (Issue #715)
  * Fix printing multiple files on specific printers (Issue #643)
  * Fix use-after-free when logging warnings in case of failures
    in cupsdAcceptClient() (fixes CVE-2023-34241)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.5:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.5 is a hotfix release for a bug which corrupted
  locally saved certificates, which broke secured printing
  via TLS after the first print job.
- Version upgrade to 2.4.4:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.4 release is created as a hotfix for segfault
  in cupsGetNamedDest(), when caller tries to find
  the default destination and the default destination
  is not set on the machine.
- Version upgrade to 2.4.3:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
  and many bug fixes. CUPS now implements fallback for printers
  with broken firmware, which is not capable of answering
  to IPP request get-printer-attributes with all,
  media-col-database - this enables driverless support for
  bunch of printers which don't follow IPP Everywhere standard.
  Aside from the CVE fix the most important fixes are around color
  settings, printer application support fixes and OpenSSL support.
  Detailed list of changes:
  * Added a title with device uri for found network printers
    (Issues #402, #393)
  * Added new media sizes defined by IANA (Issues #501)
  * Added quirk for GoDEX label printers (Issue #440)
  * Fixed --enable-libtool-unsupported (Issue #394)
  * Fixed configuration on RISC-V machines (Issue #404)
  * Fixed the device_uri invalid pointer for driverless printers
    with .local hostname (Issue #419)
  * Fixed an OpenSSL crash bug (Issue #409)
  * Fixed a potential SNMP OID value overflow issue (Issue #431)
  * Fixed an OpenSSL certificate loading issue (Issue #465)
  * Fixed Brazilian Portuguese translations (Issue #288)
  * Fixed cupsd default keychain location when building
    with OpenSSL (Issue #529)
  * Fixed default color settings for CMYK printers as well
    (Issue #500)
  * Fixed duplicate PPD2IPP media-type names (Issue #688)
  * Fixed possible heap buffer overflow in _cups_strlcpy()
    (fixes CVE-2023-32324)
  * Fixed InputSlot heuristic for photo sizes smaller than 5x7"
    if there is no media-source in the request (Issue #569)
  * Fixed invalid memory access during generating IPP Everywhere
    queue (Issue #466)
  * Fixed lprm if no destination is provided (Issue #457)
  * Fixed memory leaks in create_local_bg_thread() (Issue #466)
  * Fixed media size tolerance in ippeveprinter (Issue #487)
  * Fixed passing command name without path into ippeveprinter
    (Issue #629)
  * Fixed saving strings file path in printers.conf (Issue #710)
  * Fixed TLS certificate generation bugs (Issue #652)
  * ippDeleteValues would not delete the last value (Issue #556)
  * Ignore some of IPP defaults if the application sends
    its PPD alternative (Issue #484)
  * Make Letter the default size in ippevepcl (Issue #543)
  * Now accessing Admin page in Web UI requires authentication
    (Issue #518)
  * Now look for default printer on network if needed (Issue #452)
  * Now we poll media-col-database separately if we fail at first
    (Issue #599)
  * Now report fax attributes and values as needed (Issue #459)
  * Now localize HTTP responses using the Content-Language value
    (Issue #426)
  * Raised file size limit for importing PPD via Web UI
    (Issue #433)
  * Raised maximum listen backlog size to INT MAX (Issue #626)
  * Update print-color-mode if the printer is modified
    via ColorModel PPD option (Issue #451)
  * Use localhost when printing via printer application
    (Issue #353)
  * Write defaults into /etc/cups/lpoptions if we're root
    (Issue #456)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.7
- Removed cups-2.4.2-CVE-2023-4504.patch : fixed upstream
  see the above CUPS 2.4.7 changes
- Removed cups-2.4.2-CVE-2023-32360.patch : fixed upstream via
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
- Removed cups-2.4.2-CVE-2023-34241.patch : fixed upstream
  see the above CUPS 2.4.6 changes
- Removed cups-2.4.2-CVE-2023-32324.patch : fixed upstream
  see the above CUPS 2.4.3 changes</changelog>
  <changelog author="jsmeix@suse.com" date="1706875200">- Removed outdated ntadmin stuff from cups.spec (boo#1219503)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="c7fec40a1d1cf18f6d8ec6469c803cfead32692b29f3dbff59baf7bc32ce9eaf165ee663c8eda712aa14a9064afa6602fcf075c0b1a7db36040c80286092028b" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.4.16" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716984000">- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.8</changelog>
  <changelog author="jsmeix@suse.com" date="1718107200">- cups-2.4.8-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to apply to CUPS 2.4.8 in openSUSE Factory to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
</package>
<package pkgid="3ac9879f16760fbb3a50650b734f71b3be8a1f56d4dbdd0bdd0850bf1c5fb4444604f70adbc6bf52519dcfe9709657f594395b174cd0bd42e2c590980ab0caa9" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="160000.1.1"/>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
  <changelog author="jsmeix@suse.com" date="1776686400">- Version upgrade to 2.4.17:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.17 contains the following security fixes:
  * CVE-2026-27447: The scheduler treated local user
    and group names as case-insensitive (bsc#1261572)
  * CVE-2026-34978: The RSS notifier could write outside
    the scheduler's RSS directory (bsc#1261571)
  * CVE-2026-34980: The scheduler did not filter control
    characters from option values (bsc#1261569)
  * CVE-2026-34979: The scheduler did not always allocate
    enough memory for a job's options string (bsc#1261570)
  * CVE-2026-34990: The scheduler incorrectly allowed
    local certificates over the loopback interface (bsc#1261568)
  * CVE-2026-39314: Fixed the range check for
    job password strings (bsc#1261743)
  * CVE-2026-39316: Fixed a printer subscription bug
    in the scheduler (bsc#1261742)
  * CVE-2026-41079: Fixed a SNMP string conversion bug
    in the backends (bsc#1263116)
- The release includes other fixes as well, listed in CHANGES.md.
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Detailed list (from CHANGES.md):
  * The scheduler followed symbolic links when cleaning out
    its temporary directory (Issue #1448)
  * Updated `cupsFileGetConf` and `cupsFilePutConf` to escape
    more characters.
  * Updated man page `cancel` (Issue #984)
  * Updated `cupsRasterReadHeader` to validate more of the
    page header values (Issue #1501)
  * Fixed an issue with the class/printer CGI name checking.
  * Fixed infinite loop in `http_write()` on busy print servers
    (Issue #827)
  * Fixed potential TLS blocking issues (Issue #1128)
  * Fixed a job history bug in the scheduler (Issue #1440)
  * Fixed notifier logging bug that would result in nul bytes
    getting into the log (Issue #1450)
  * Fixed possible use-after-free in `cupsdReadClient()`
    (Issue #1454)
  * Fixed a document format bug in the IPP backend (Issue #1457)
  * Fixed DRAIN_OUTPUT race condition (Issue #1461)
  * Fixed a bug when then `ippFindXxx` and `ippSetXxx` functions
    were mixed.
  * Fixed the mapping of supply type keywords to SNMP names.
  * Fixed a bug in the IPP backend when SNMP was disabled.
  * Fixed a crash bug in the rastertoepson filter.
  * Fixed a bug in cgiCheckVariables.
  * Fixed handling read/write errors with OpenSSL (Issue #1506)
  * Fixed handling rehandshake error in `_httpTLSRead`
    (Issue #1508)
  * Fixed a debug printf bug on Windows (Issue #1529)
  * Fixed a recursion issue with encoding of nested collections
    (Issue #1539)
  * Fixed parsing of the `LimitRequestBody`, `MaxLogSize`,
    and `MaxRequestSize` directives in "cupsd.conf" (Issue #1540)
  * Fixed a parsing bug in `ipptool` (Issue #1542)
  * Fixed blank line detection in the `rastertolabel` filter
    (Issue #1545)
  * Fixed `httpPeek` edge case on compressed streams
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.17</changelog>
  <changelog author="jsmeix@suse.com" date="1776945600">- Version upgrade to 2.4.18:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.18 contains hotfix after CVE-2026-27447 fix:
  * Fixed cupsd crash if user does not exist (Issue #1555)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.18</changelog>
  <changelog author="jsmeix@suse.com" date="1777377600">- Version upgrade to 2.4.19:
  See https://github.com/openprinting/cups/releases
  Release 2.4.19 contains another hotfix after CVE-2026-27447 fix:
  * Fixed a regression in shared printing from non-local accounts
    (Issue #1557)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.19
- Added 'Michael R Sweet' key to cups.keyring
  because cups-2.4.19-source.tar.gz.sig belongs to him.</changelog>
</package>
<package pkgid="34836b4fe721524bf1b9718c06f2c7bde15f9fc1869addde4fc31f2e4c0c074242d73cfead787a171b873870bc56330e7e97e7bdc3717bb3c4287cc080970361" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="160000.1.1"/>
  <changelog author="jsmeix@suse.com" date="1719921600">- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10
- Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream
  see the above CUPS 2.4.9 changes
- avoid_C99_mode_for_loop_initial_declarations.patch avoids error
  "'for' loop initial declarations are only allowed in C99 mode"
  that happens when building for SLE12
  in scheduler/client.c at "for (char *start = ..." since
  https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f8c92d5b0d
  see https://github.com/OpenPrinting/cups/issues/1000</changelog>
  <changelog author="jsmeix@suse.com" date="1720440000">- Replaced avoid_C99_mode_for_loop_initial_declarations.patch
  which is now the upstream fix
  https://github.com/OpenPrinting/cups/commit/a2b8872ea95564e065e3a08e2aa12a15515bc993
  see https://github.com/OpenPrinting/cups/issues/1000
  and https://github.com/OpenPrinting/cups/pull/1004</changelog>
  <changelog author="jsmeix@suse.com" date="1727697600">- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
  is no longer needed because the issue is fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="jsmeix@suse.com" date="1744286400">- Version upgrade to 2.4.12:
  See https://github.com/openprinting/cups/releases
  The last planned release of CUPS 2.4.x series
  (the next will be 2.5.x series) contains several enhancements
  among set of bug fixes, such following cryptographic policies
  when using GnuTLS crypto provider and possibility to opt-out
  from this behavior, logging job debugging history if print
  queue backends fails, or raising alerts for certificate issues
  in IPPS backend.
  Detailed list (from CHANGES.md):
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.12</changelog>
  <changelog author="jsmeix@suse.com" date="1758110400">- Version upgrade to 2.4.14:
  See https://github.com/openprinting/cups/releases
  The hotfix release brings fix for installation process
  of localized templates and CUPS web UI home pages.
- Version upgrade to 2.4.13:
  See https://github.com/openprinting/cups/releases
  The release 2.4.13 brings two CVE fixes
  fix for important CVE-2025-58060
  "Authentication bypass with AuthType Negotiate" (bsc#1249049)
  and fix for moderate CVE-2025-58364
  "Remote DoS via null dereference" (bsc#1249128)
  together with several bug fixes.
  The release includes a new feature - new attribute
  for printer and job objects - print-as-raster - which
  allows enforce rasterization of the file for
  IPP Everywhere/AirPrint printers, which supports PDF
  and raster document formats. The feature is useful for
  working around internal PDF issues in the printer firmware,
  for example missing diacritic when printing a PDF.
  Detailed list (from CHANGES.md):
  * Blocked authentication using alternate methods
    in cupsd (CVE-2025-58060)
  * Fixed extension tag handling in 'ipp_read_io()'
    in libcups (CVE-2025-58364)
  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
  (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.14</changelog>
  <changelog author="jsmeix@suse.com" date="1768996800">- Version upgrade to 2.4.16:
  See https://github.com/openprinting/cups/releases
  The hotfix release 2.4.16 includes fix for infinite loop in GTK,
  which was caused by change of internal behavior in libcups
  on which GTK depended on, and workaround for stopping
  the scheduler if configuration includes unknown directives.
  Detailed list (from CHANGES.md):
  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 boo#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.15:
  See https://github.com/openprinting/cups/releases
  The release CUPS 2.4.15 brings two CVE fixes:
  Fix various cupsd issues which cause local DoS
  (CVE-2025-61915 bsc#1253783)
  Fix unresponsive cupsd process caused by slow client
  (CVE-2025-58436 bsc#1244057)
  and several bug fixes described in CHANGES.md.
  Detailed list (from CHANGES.md):
  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.16
- Fixed entry below dated "Sat Sep 30 08:52:42 UTC 2017"
  which contained needless UTF-8 Unicode characters that are
  now replaced by plain ASCII text in "... line - the ..."
  to fix a rpmlint "non-break-space" warning.
- Adapted and enhanced 'tmpfiles.d' related things in cups.spec
  to "Fix packages for Immutable Mode - cups"
  (implementation task jsc#PED-14775 from epic jsc#PED-14688)</changelog>
  <changelog author="jsmeix@suse.com" date="1776686400">- Version upgrade to 2.4.17:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.17 contains the following security fixes:
  * CVE-2026-27447: The scheduler treated local user
    and group names as case-insensitive (bsc#1261572)
  * CVE-2026-34978: The RSS notifier could write outside
    the scheduler's RSS directory (bsc#1261571)
  * CVE-2026-34980: The scheduler did not filter control
    characters from option values (bsc#1261569)
  * CVE-2026-34979: The scheduler did not always allocate
    enough memory for a job's options string (bsc#1261570)
  * CVE-2026-34990: The scheduler incorrectly allowed
    local certificates over the loopback interface (bsc#1261568)
  * CVE-2026-39314: Fixed the range check for
    job password strings (bsc#1261743)
  * CVE-2026-39316: Fixed a printer subscription bug
    in the scheduler (bsc#1261742)
  * CVE-2026-41079: Fixed a SNMP string conversion bug
    in the backends (bsc#1263116)
- The release includes other fixes as well, listed in CHANGES.md.
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Detailed list (from CHANGES.md):
  * The scheduler followed symbolic links when cleaning out
    its temporary directory (Issue #1448)
  * Updated `cupsFileGetConf` and `cupsFilePutConf` to escape
    more characters.
  * Updated man page `cancel` (Issue #984)
  * Updated `cupsRasterReadHeader` to validate more of the
    page header values (Issue #1501)
  * Fixed an issue with the class/printer CGI name checking.
  * Fixed infinite loop in `http_write()` on busy print servers
    (Issue #827)
  * Fixed potential TLS blocking issues (Issue #1128)
  * Fixed a job history bug in the scheduler (Issue #1440)
  * Fixed notifier logging bug that would result in nul bytes
    getting into the log (Issue #1450)
  * Fixed possible use-after-free in `cupsdReadClient()`
    (Issue #1454)
  * Fixed a document format bug in the IPP backend (Issue #1457)
  * Fixed DRAIN_OUTPUT race condition (Issue #1461)
  * Fixed a bug when then `ippFindXxx` and `ippSetXxx` functions
    were mixed.
  * Fixed the mapping of supply type keywords to SNMP names.
  * Fixed a bug in the IPP backend when SNMP was disabled.
  * Fixed a crash bug in the rastertoepson filter.
  * Fixed a bug in cgiCheckVariables.
  * Fixed handling read/write errors with OpenSSL (Issue #1506)
  * Fixed handling rehandshake error in `_httpTLSRead`
    (Issue #1508)
  * Fixed a debug printf bug on Windows (Issue #1529)
  * Fixed a recursion issue with encoding of nested collections
    (Issue #1539)
  * Fixed parsing of the `LimitRequestBody`, `MaxLogSize`,
    and `MaxRequestSize` directives in "cupsd.conf" (Issue #1540)
  * Fixed a parsing bug in `ipptool` (Issue #1542)
  * Fixed blank line detection in the `rastertolabel` filter
    (Issue #1545)
  * Fixed `httpPeek` edge case on compressed streams
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.17</changelog>
  <changelog author="jsmeix@suse.com" date="1776945600">- Version upgrade to 2.4.18:
  See https://github.com/openprinting/cups/releases
  The new release 2.4.18 contains hotfix after CVE-2026-27447 fix:
  * Fixed cupsd crash if user does not exist (Issue #1555)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.18</changelog>
  <changelog author="jsmeix@suse.com" date="1777377600">- Version upgrade to 2.4.19:
  See https://github.com/openprinting/cups/releases
  Release 2.4.19 contains another hotfix after CVE-2026-27447 fix:
  * Fixed a regression in shared printing from non-local accounts
    (Issue #1557)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.19
- Added 'Michael R Sweet' key to cups.keyring
  because cups-2.4.19-source.tar.gz.sig belongs to him.</changelog>
</package>
<package pkgid="ec0c0706103a603de344f17d53773f910d5ad4f3ba1e54cbc86000df2f8bb4b6a0c9b7041948509c5a652096c7e4c14dee00407c708cade818cf69a981883c33" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.28.17" rel="bp160.1.12"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400), see
  https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
  Added patch harden_cups-browsed.service.patch</changelog>
  <changelog author="Aur&#xE9;lien Joga &lt;aurelienjoga@gmail.com&gt;" date="1647950400">- Version upgrade to 1.28.12
  * imagetoraster, imagetopdf: Fixed comparison of the image size
    with the page size for print-scaling=auto. The image size
    in pixels was compared with the page size in PostScript
    points (1/72 inch).
  * imagetoraster, imagetopdf: Fixed the "print-scaling=none"
    (crop-to-fit) mode, also use crop-to-fit always when requested,
    do not fall back to fit-to-page when the image size differs
    significantly from the page size (Issue #362).
  * libcupsfilters: Changed the default PPI resolution for images
    as input files from 128 to 200 (Pull request #446).
  * implicitclass: Do not check availability of "gs" and "pdftops"
    executables, instead, check by the presence of "gstoraster"
    and "pdftoraster" filters whether we have configured
    cups-filters for Ghostscript and/or Poppler use.
  * libcupsfilters: In the PPD generator for the driverless
    utility and cups-browsed add "*cupsFilter2: ..." lines for
    all supported driverless data formats (PDF, Apple/PWG Raster,
    PCLm), and add lines for legacy data formats (PCL, PostScript)
    only if no driverless formats available.
  * libcupsfilters: Always use encryption for ipps. RFC7472
    requires that 'ipps' must be used over HTTPS, but the
    driverless utility does not enforce encryption
    (Pull request #433).
  * serial: Add a 10-msec sleep and at the end add a tcdrain().
    For some unknown reason, every printing file need sleep a
    little time to make sure the serial printer receive data
    is right (Pull request #431).
  * libcupsfilters: Fix resolver functions for DNS-SD-based URIs,
    to make resolve_uri() also work when DEVICE_URI env variable
    is set and to make ippfind_based_uri_converter() not
    re-direct stdin.
  * pdftopdf: Set default for print-scaling to avoid
    "should never happem" log messages and undefined behavior.
  * pdftopdf: Fix orientation-requested = 0. Consider this as
    automatic selection and not as error.
  * pdftopdf: Fixed all combinations of print-scaling and
    number-up for printers with asymmetric margins
    (top != bottom or left != right) and for input files
    containing pages with different sizes and/or orientations.
    Fixes backported from 2.x branch.
  * pdftopdf: Add 2% tolerance for input size larger than output
    page when "print-scaling=auto" or "print-scaling=auto-fit"
    is used and too large input pages should be scaled, fitting
    documents not. This prevents a random-looking behavior if
    input and output page size seem to be equal, but in reality
    there are slight differences between size dimensions.
- Version upgrade to 1.28.11
  * libcupsfilters: Let PPD generator take default ColorModel
    from printer (CUPS issue #277).
  * Braille: In vectortopdf check inkscape version to call inkscape
    with the correct command line (Issue #315, Pull request #443).
  * Build system: Make missing DejaVuSans.ttf non-fatal
    in ./configure as the font is only needed for test programs,
    not for actual use of cups-filters (Issue #411).
  * libcupsfilters: In imagetoraster() fixed crash with SGray
    (Issue #435).
  * cups-browsed: Naming of local queues is matched to
    CUPS' current naming of temporary queues (no leading or
    trailing underscores), to avoid duplicates in print dialogs
    which support CUPS' temporary queues.
  * libcupsfilters: Make cupsRasterParseIPPOptions() work
    correctly with PPDs (Issue #436).
  * libcupsfilters: Let colord_get_profile_for_device_id()
    not return empty file name, to avoid error messages
    in CUPS error_log.
  * foomatic-rip: Debug message was wrongly sent to stdout
    and not to log (Issue #422).
- Version upgrade to 1.28.10
  * Sample PPDs: Add borderless page size definitions to
    Generic PDF Printer, HP Color LaserJet CM3530 MFP PDF,
    and Ricoh PDF Printer PPD files.
  * Sample PPDs: From the PDF PPD files removed the unneeded
    "*cupsFilters2: ..." line. For CUPS it does not make any
    difference.
  * libcupsfilters: Fixed pdftopdf filter to correctly support page
    ranges without upper limit, like "10-" (Pull request #399).
  * libcupsfilters: Use wildcard tag (IPP_TAG_ZERO) search for
    "media-type" and "media-type-supported" in the PPD generator
    (Pull request #398).
  * implicitclass, parallel: Added missing newlines at error
    messages.
  * libfontembed: Removed unneeded fontembed/main.c and ttfread
    executable. Eliminates the dependency on DejaVuSans.ttf
    (Issue #386).
  * gstoraster: Refactor the filter a little to clarify handling
    of page counts and set job-impressions for TotalPageCount in
    PWG-Raster header (Pull request #394).
  * cups-browsed: Make NotifLeaseDuration configurable and renew
    after half the lease duration not 60 sec before end. The early
    renewal improves reliability on busy systems a lot. For easier
    development and debugging short durations from 300 sec on can
    get selected (Pull request #378).
- Version upgrade to 1.28.9
  * libcupsfilters: Silenced compiler warnings
  * libcupsfilters: Removed duplicate code in the apply_filters()
    function.
  * driverless: If there are no driverless IPP printers available
    let "driverless" terminate with exit code 0 and not 1, to
    follow CUPS' standard of backends in discovery mode
    terminating with 0 if there are no appropriate printers
    found (Issue #375).
  * gstoraster, foomatic-rip: Fixed Ghostscript command line for
    counting pages as it took too long on PDFs from evince when
    printing DjVu files (Issue #354, Pull request #371,
    Ubuntu bug #1920730).
  * cups-browsed: Renamed ldap_connect() due to conflict in new
    openldap (Issue #367, Pull request #370).
  * pdftoraster: Free color data after processing of each page
    (Pull request #363).
  * cups-browsed: Always save "...-default" option entries from
    printers.conf, regardless of presence or absense of PPD file
    (Pull request #359).
  * cups-browsed: Start after network-online.target
    (Pull request #360).
  * texttopdf: Set default margins when no PPD file is used
    (Pull request #356).
- harden_cups-browsed.service.patch adapted to cups-filters-1.28.12</changelog>
  <changelog author="mwilck@suse.com" date="1654776000">- Enable OBS source services. Stay at 1.28.12 for now.
  * add _service file</changelog>
  <changelog author="mwilck@suse.com" date="1654776001">- Update to version 1.28.15:
  * pdftops: Identify old LaserJets more precisely for swicth to Poppler
  * Make pdftopdf also work correctly with auro-rotating off
  * libcupsfilters: Make pdftopdf() correctly working with "landscape" option
  * rastertopdf: Filter fails if no PCLm default resolution given by printer
  * pdftopdf: Fix N-up printing with long-edge-first
  * libcupsfilters: In pdftopdf() fix cropping with long-edge-first
  * pdftops: Use Poppler for all Apple LaserWriter models</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1656072000">- Spec file: Removed URL from source line</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1677672000">- require_cxx17.patch: qpdf dependency is using std::string_view
  which is a c++17 feature... so we can't use c++11... Maybe it
  made sense to force c++11 at some point when it was not default,
  but with new compilers, we are actually downgrading features sets.
- removed spec configure references to filter (ijs, opvp)
  that were removed in version 1.25</changelog>
  <changelog author="Johannes Meixner &lt;jsmeix@suse.com&gt;" date="1684324800">- cups-filters-1.28.15-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.28.15-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.28.15-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backported to cups-filters-1.28.15
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340) and
  https://github.com/OpenPrinting/cups-filters/commit/8f274035756c04efeb77eb654e9d4c4447287d65</changelog>
  <changelog author="Johannes Meixner &lt;jsmeix@suse.com&gt;" date="1706097600">- Version upgrade to 1.28.17
  See https://github.com/OpenPrinting/cups-filters/releases
  Bug fix release, to more reliably discover all printer
  capablities from driverless printers, especially borderless
  printing, and to preferably use Apple Raster instead of
  PWG Raster or PCLM.
  * libcupsfilters: In PPD generator create only one *cupsFilter2:
    line for raster. Only use the most desirable/reliable format,
    usually Apple Raster (Issue #498).
  * libcupsfilters: In get_printer_attributes() poll
    media-col-database separately if needed. On some printers
    one gets media-col-database only this way. Often it reveals
    important functionality, like for example borderless printing
    (Issue #492).
  * libcupsfilters: Let PPD generator also parse media-col-ready
    IPP attribute. media-col-ready lists the loaded media,
    in contrary to media-ready, as list of complete descriptions
    of the media (media-col data structure). This often lists also
    variants like borderless (it is the same physical paper).
    Especially useful when media-col-database is not available
    (Issue #492).
  * libcupsfilters: In generate_sizes() consider all
    margin alternatives. When generating the PPD file
    for a driverless printer, and in the
    media-{left,right,top,bottom}-margin-supported printer
    IPP attributes there was more than 1 value, the first value
    (which often was the 0 for borderless printing) was not
    considered, leaving the borderless functionality of many
    printers undiscovered (Issue #492).
  Issues are those at
  https://github.com/OpenPrinting/cups-filters/issues
- Version upgrade to 1.28.16
  See https://github.com/OpenPrinting/cups-filters/releases
  Bug fix release, to make images be printed in their original
  size with "print-scaling=none" and to not use deprecated data
  types for reading TIFF images.
  * imagetoraster, imagetopdf, libcupsfilters: Added support
    for reading the resolution of an image from its EXIF data
    when loading it. This way we get the image reproduced in
    its original size with "print-scaling=none" (Issue #362).
  * libcupsfilters: Replaced deprecated data types uint16 and
    uint32. The function to read TIFF image files via libtiff
    in cupsfilters/image-tiff.c uses the deprecated types
    uint16 and uint32. The replacements for these types are
    uint16_t and uint32_t.
  Issues are those at
  https://github.com/OpenPrinting/cups-filters/issues</changelog>
  <changelog author="Johannes Meixner &lt;jsmeix@suse.com&gt;" date="1706875200">- Removed outdated and obsoleted "Requires: cups &gt; 1.5.4"
  which was used to require a sufficient CUPS version
  at times when also CUPS &lt;= 1.5.4 was available
  but it was not meant to require CUPS (boo#1216560)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="d928e93d5360764a48ed1a992daf3dbfed70d88b699ffb7ac71c8876e43072d0e4ff263868ef8fbee602fd666c5b0d9b9e5f07cec34f467fd61443229b388fb2" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.28.17" rel="bp160.1.12"/>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634299200">- Added hardening to systemd service(s) (bsc#1181400), see
  https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
  Added patch harden_cups-browsed.service.patch</changelog>
  <changelog author="Aur&#xE9;lien Joga &lt;aurelienjoga@gmail.com&gt;" date="1647950400">- Version upgrade to 1.28.12
  * imagetoraster, imagetopdf: Fixed comparison of the image size
    with the page size for print-scaling=auto. The image size
    in pixels was compared with the page size in PostScript
    points (1/72 inch).
  * imagetoraster, imagetopdf: Fixed the "print-scaling=none"
    (crop-to-fit) mode, also use crop-to-fit always when requested,
    do not fall back to fit-to-page when the image size differs
    significantly from the page size (Issue #362).
  * libcupsfilters: Changed the default PPI resolution for images
    as input files from 128 to 200 (Pull request #446).
  * implicitclass: Do not check availability of "gs" and "pdftops"
    executables, instead, check by the presence of "gstoraster"
    and "pdftoraster" filters whether we have configured
    cups-filters for Ghostscript and/or Poppler use.
  * libcupsfilters: In the PPD generator for the driverless
    utility and cups-browsed add "*cupsFilter2: ..." lines for
    all supported driverless data formats (PDF, Apple/PWG Raster,
    PCLm), and add lines for legacy data formats (PCL, PostScript)
    only if no driverless formats available.
  * libcupsfilters: Always use encryption for ipps. RFC7472
    requires that 'ipps' must be used over HTTPS, but the
    driverless utility does not enforce encryption
    (Pull request #433).
  * serial: Add a 10-msec sleep and at the end add a tcdrain().
    For some unknown reason, every printing file need sleep a
    little time to make sure the serial printer receive data
    is right (Pull request #431).
  * libcupsfilters: Fix resolver functions for DNS-SD-based URIs,
    to make resolve_uri() also work when DEVICE_URI env variable
    is set and to make ippfind_based_uri_converter() not
    re-direct stdin.
  * pdftopdf: Set default for print-scaling to avoid
    "should never happem" log messages and undefined behavior.
  * pdftopdf: Fix orientation-requested = 0. Consider this as
    automatic selection and not as error.
  * pdftopdf: Fixed all combinations of print-scaling and
    number-up for printers with asymmetric margins
    (top != bottom or left != right) and for input files
    containing pages with different sizes and/or orientations.
    Fixes backported from 2.x branch.
  * pdftopdf: Add 2% tolerance for input size larger than output
    page when "print-scaling=auto" or "print-scaling=auto-fit"
    is used and too large input pages should be scaled, fitting
    documents not. This prevents a random-looking behavior if
    input and output page size seem to be equal, but in reality
    there are slight differences between size dimensions.
- Version upgrade to 1.28.11
  * libcupsfilters: Let PPD generator take default ColorModel
    from printer (CUPS issue #277).
  * Braille: In vectortopdf check inkscape version to call inkscape
    with the correct command line (Issue #315, Pull request #443).
  * Build system: Make missing DejaVuSans.ttf non-fatal
    in ./configure as the font is only needed for test programs,
    not for actual use of cups-filters (Issue #411).
  * libcupsfilters: In imagetoraster() fixed crash with SGray
    (Issue #435).
  * cups-browsed: Naming of local queues is matched to
    CUPS' current naming of temporary queues (no leading or
    trailing underscores), to avoid duplicates in print dialogs
    which support CUPS' temporary queues.
  * libcupsfilters: Make cupsRasterParseIPPOptions() work
    correctly with PPDs (Issue #436).
  * libcupsfilters: Let colord_get_profile_for_device_id()
    not return empty file name, to avoid error messages
    in CUPS error_log.
  * foomatic-rip: Debug message was wrongly sent to stdout
    and not to log (Issue #422).
- Version upgrade to 1.28.10
  * Sample PPDs: Add borderless page size definitions to
    Generic PDF Printer, HP Color LaserJet CM3530 MFP PDF,
    and Ricoh PDF Printer PPD files.
  * Sample PPDs: From the PDF PPD files removed the unneeded
    "*cupsFilters2: ..." line. For CUPS it does not make any
    difference.
  * libcupsfilters: Fixed pdftopdf filter to correctly support page
    ranges without upper limit, like "10-" (Pull request #399).
  * libcupsfilters: Use wildcard tag (IPP_TAG_ZERO) search for
    "media-type" and "media-type-supported" in the PPD generator
    (Pull request #398).
  * implicitclass, parallel: Added missing newlines at error
    messages.
  * libfontembed: Removed unneeded fontembed/main.c and ttfread
    executable. Eliminates the dependency on DejaVuSans.ttf
    (Issue #386).
  * gstoraster: Refactor the filter a little to clarify handling
    of page counts and set job-impressions for TotalPageCount in
    PWG-Raster header (Pull request #394).
  * cups-browsed: Make NotifLeaseDuration configurable and renew
    after half the lease duration not 60 sec before end. The early
    renewal improves reliability on busy systems a lot. For easier
    development and debugging short durations from 300 sec on can
    get selected (Pull request #378).
- Version upgrade to 1.28.9
  * libcupsfilters: Silenced compiler warnings
  * libcupsfilters: Removed duplicate code in the apply_filters()
    function.
  * driverless: If there are no driverless IPP printers available
    let "driverless" terminate with exit code 0 and not 1, to
    follow CUPS' standard of backends in discovery mode
    terminating with 0 if there are no appropriate printers
    found (Issue #375).
  * gstoraster, foomatic-rip: Fixed Ghostscript command line for
    counting pages as it took too long on PDFs from evince when
    printing DjVu files (Issue #354, Pull request #371,
    Ubuntu bug #1920730).
  * cups-browsed: Renamed ldap_connect() due to conflict in new
    openldap (Issue #367, Pull request #370).
  * pdftoraster: Free color data after processing of each page
    (Pull request #363).
  * cups-browsed: Always save "...-default" option entries from
    printers.conf, regardless of presence or absense of PPD file
    (Pull request #359).
  * cups-browsed: Start after network-online.target
    (Pull request #360).
  * texttopdf: Set default margins when no PPD file is used
    (Pull request #356).
- harden_cups-browsed.service.patch adapted to cups-filters-1.28.12</changelog>
  <changelog author="mwilck@suse.com" date="1654776000">- Enable OBS source services. Stay at 1.28.12 for now.
  * add _service file</changelog>
  <changelog author="mwilck@suse.com" date="1654776001">- Update to version 1.28.15:
  * pdftops: Identify old LaserJets more precisely for swicth to Poppler
  * Make pdftopdf also work correctly with auro-rotating off
  * libcupsfilters: Make pdftopdf() correctly working with "landscape" option
  * rastertopdf: Filter fails if no PCLm default resolution given by printer
  * pdftopdf: Fix N-up printing with long-edge-first
  * libcupsfilters: In pdftopdf() fix cropping with long-edge-first
  * pdftops: Use Poppler for all Apple LaserWriter models</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1656072000">- Spec file: Removed URL from source line</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1677672000">- require_cxx17.patch: qpdf dependency is using std::string_view
  which is a c++17 feature... so we can't use c++11... Maybe it
  made sense to force c++11 at some point when it was not default,
  but with new compilers, we are actually downgrading features sets.
- removed spec configure references to filter (ijs, opvp)
  that were removed in version 1.25</changelog>
  <changelog author="Johannes Meixner &lt;jsmeix@suse.com&gt;" date="1684324800">- cups-filters-1.28.15-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.28.15-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.28.15-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backported to cups-filters-1.28.15
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340) and
  https://github.com/OpenPrinting/cups-filters/commit/8f274035756c04efeb77eb654e9d4c4447287d65</changelog>
  <changelog author="Johannes Meixner &lt;jsmeix@suse.com&gt;" date="1706097600">- Version upgrade to 1.28.17
  See https://github.com/OpenPrinting/cups-filters/releases
  Bug fix release, to more reliably discover all printer
  capablities from driverless printers, especially borderless
  printing, and to preferably use Apple Raster instead of
  PWG Raster or PCLM.
  * libcupsfilters: In PPD generator create only one *cupsFilter2:
    line for raster. Only use the most desirable/reliable format,
    usually Apple Raster (Issue #498).
  * libcupsfilters: In get_printer_attributes() poll
    media-col-database separately if needed. On some printers
    one gets media-col-database only this way. Often it reveals
    important functionality, like for example borderless printing
    (Issue #492).
  * libcupsfilters: Let PPD generator also parse media-col-ready
    IPP attribute. media-col-ready lists the loaded media,
    in contrary to media-ready, as list of complete descriptions
    of the media (media-col data structure). This often lists also
    variants like borderless (it is the same physical paper).
    Especially useful when media-col-database is not available
    (Issue #492).
  * libcupsfilters: In generate_sizes() consider all
    margin alternatives. When generating the PPD file
    for a driverless printer, and in the
    media-{left,right,top,bottom}-margin-supported printer
    IPP attributes there was more than 1 value, the first value
    (which often was the 0 for borderless printing) was not
    considered, leaving the borderless functionality of many
    printers undiscovered (Issue #492).
  Issues are those at
  https://github.com/OpenPrinting/cups-filters/issues
- Version upgrade to 1.28.16
  See https://github.com/OpenPrinting/cups-filters/releases
  Bug fix release, to make images be printed in their original
  size with "print-scaling=none" and to not use deprecated data
  types for reading TIFF images.
  * imagetoraster, imagetopdf, libcupsfilters: Added support
    for reading the resolution of an image from its EXIF data
    when loading it. This way we get the image reproduced in
    its original size with "print-scaling=none" (Issue #362).
  * libcupsfilters: Replaced deprecated data types uint16 and
    uint32. The function to read TIFF image files via libtiff
    in cupsfilters/image-tiff.c uses the deprecated types
    uint16 and uint32. The replacements for these types are
    uint16_t and uint32_t.
  Issues are those at
  https://github.com/OpenPrinting/cups-filters/issues</changelog>
  <changelog author="Johannes Meixner &lt;jsmeix@suse.com&gt;" date="1706875200">- Removed outdated and obsoleted "Requires: cups &gt; 1.5.4"
  which was used to require a sufficient CUPS version
  at times when also CUPS &lt;= 1.5.4 was available
  but it was not meant to require CUPS (boo#1216560)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1729080000">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
</package>
<package pkgid="c2e8226666c4b035189daa034ce3422a7a3ce2d2a0b8156bd54f53089af4ccd30b14910e147218ac9a069e98f661572a9136249539ad322c6f41bc1599370c75" name="cups-filters2" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1739966400">- Initial package cups-filters version 2.0.1</changelog>
  <changelog author="jsmeix@suse.com" date="1748347200">- Conflict with the old 'cups-filters' version 1.x RPM</changelog>
</package>
<package pkgid="b8452a74ad46382115debeee2fe4d51fb84b4319ca816270d6d73ea225961d17b744c2fb65a3b8e343bfc721800869b4168a1f9852a448a77ad16cdc0bf97db3" name="cups-filters2-driverless" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="160000.2.2"/>
  <changelog author="jsmeix@suse.com" date="1739966400">- Initial package cups-filters version 2.0.1</changelog>
  <changelog author="jsmeix@suse.com" date="1748347200">- Conflict with the old 'cups-filters' version 1.x RPM</changelog>
</package>
<package pkgid="cc12b5c082f0694e2d7a994bce017acc8a394851bbcac97da8561d80a7c5b583d65950d9c2bcb8764da0d3f1480611a46e3a6f6ca677cb550e1296ad47aad893" name="cups-pk-helper" arch="x86_64">
  <version epoch="0" ver="0.2.7" rel="160000.2.2"/>
  <changelog author="vuntz@opensuse.org" date="1317038400">- Update to version 0.2.1:
  + Do not pass ppd file if empty when adding a printer.
  + Accept NULL for ppd file as valid when adding a printer.
  + Allow inactive/any users to authenticate.
  + Updated translations.</changelog>
  <changelog author="praful.johari@gmail.com" date="1331899200">- Update to version 0.2.2:
  + Add PrinterAddOption D-Bus method.
  + Set requesting-user-name tag in requests.
  + Code cleanups.
  + Build fixes and improvements.
  + New/updated translations.</changelog>
  <changelog author="vuntz@opensuse.org" date="1350043200">- Update to version 0.2.3:
  + Fix security flaw in cupsGetFile/cupsPutFile wrappers
    (CVE-2012-4510, bnc#783488)
  + Escape printer/class names before putting them in URIs
  + Be stricter when validating printer names
  + Fix build with CUPS &gt;= 1.6
  + New/updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1350129600">- Update to version 0.2.4:
  + Fix detection of CUPS version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354104000">- Add cups requires: Without cups being installed, cups-pk-helper
  can't do any of its tasks (bnc#783865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1371384000">- Update to version 0.2.5:
  + Revert "Be stricter when validating printer names".
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 0.2.6:
  + Enable UTF-8 chars in names and texts (bsc#1033742, rh#982727).
  + Introduce CPH_PATH_MAX.
  + Add function for printer renaming.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578657600">- No longer recommend cups-pk-helper-lang: the lang package has
  relevant supplements which pulls it in whenever needed.
- Move /usr/share/locale/en from the -lang package to the main
  package: English is installed on all systems. This avoids
  cups-pk-helper-lang being triggered for installation on
  english-only systems.
- Modernize spec.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659614400">- Update to version 0.2.7:
  + Use meson build system.
  + Remove code using CUPS 1.5 and lower.
  + Remove calls to deprecated g_type_init().
  + Move D-Bus conf file to $(datadir)/dbus-1/system.d
    (bsc#1202338).
  + Don't compare signed and unsigned int.
  + Add default statements to silence compiler warnings.
  + Add Code of Conduct.
  + Updated translations.
- Add meson BuildRequires and replace configure/make/make_install
  macros with relevant meson/meson_build/meson_install ones.</changelog>
</package>
<package pkgid="70ebd2b4c17b7c7590324c58d00c0a3cbd86b4c353b5a3682c764827fc2ef77438320648981c22dd5222744be1ef5be9c65669d47e1ca1242256562d38cbab04" name="cups-pk-helper-lang" arch="noarch">
  <version epoch="0" ver="0.2.7" rel="160000.2.2"/>
  <changelog author="vuntz@opensuse.org" date="1317038400">- Update to version 0.2.1:
  + Do not pass ppd file if empty when adding a printer.
  + Accept NULL for ppd file as valid when adding a printer.
  + Allow inactive/any users to authenticate.
  + Updated translations.</changelog>
  <changelog author="praful.johari@gmail.com" date="1331899200">- Update to version 0.2.2:
  + Add PrinterAddOption D-Bus method.
  + Set requesting-user-name tag in requests.
  + Code cleanups.
  + Build fixes and improvements.
  + New/updated translations.</changelog>
  <changelog author="vuntz@opensuse.org" date="1350043200">- Update to version 0.2.3:
  + Fix security flaw in cupsGetFile/cupsPutFile wrappers
    (CVE-2012-4510, bnc#783488)
  + Escape printer/class names before putting them in URIs
  + Be stricter when validating printer names
  + Fix build with CUPS &gt;= 1.6
  + New/updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1350129600">- Update to version 0.2.4:
  + Fix detection of CUPS version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354104000">- Add cups requires: Without cups being installed, cups-pk-helper
  can't do any of its tasks (bnc#783865).</changelog>
  <changelog author="zaitor@opensuse.org" date="1371384000">- Update to version 0.2.5:
  + Revert "Be stricter when validating printer names".
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455796800">- Update to version 0.2.6:
  + Enable UTF-8 chars in names and texts (bsc#1033742, rh#982727).
  + Introduce CPH_PATH_MAX.
  + Add function for printer renaming.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578657600">- No longer recommend cups-pk-helper-lang: the lang package has
  relevant supplements which pulls it in whenever needed.
- Move /usr/share/locale/en from the -lang package to the main
  package: English is installed on all systems. This avoids
  cups-pk-helper-lang being triggered for installation on
  english-only systems.
- Modernize spec.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659614400">- Update to version 0.2.7:
  + Use meson build system.
  + Remove code using CUPS 1.5 and lower.
  + Remove calls to deprecated g_type_init().
  + Move D-Bus conf file to $(datadir)/dbus-1/system.d
    (bsc#1202338).
  + Don't compare signed and unsigned int.
  + Add default statements to silence compiler warnings.
  + Add Code of Conduct.
  + Updated translations.
- Add meson BuildRequires and replace configure/make/make_install
  macros with relevant meson/meson_build/meson_install ones.</changelog>
</package>
<package pkgid="f23204210f83d1a328db9da495b5eea59195d4d3aa2bc6bdbd5740fec8c9a0703dfd179f8fb19844b5d479e6a470f41db8c0468e851647b2f3aa99b7853a1afc" name="cups-rpm-helper" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="160000.2.2"/>
  <changelog author="svasudevan@suse.com" date="1557835200">- Update to version 1.9.74
  * no changelog provided</changelog>
  <changelog author="mwilck@suse.com" date="1566993600">- Package /usr/lib/rpm/postscriptdriver.prov again, in the
  new "cups-rpm-helper" subpackage (bsc#735865). The file hasn't
  been packaged any more after the switch from python-cups to
  python-pycups (sr#502741).
  * removed revert-postscriptdriver.prov-py3.patch
    (we use python3 now)</changelog>
  <changelog author="lnussel@suse.de" date="1594036800">- ignore build requirement of cups-rpm-helper to avoid cycle with cups-devel
  (boo#1172407))</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Let the python-rpm-macros take care of the correct python3
  provides for all python3 flavors gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="dmueller@suse.com" date="1614081600">- update to 2.0.1:
  * pypi required .tar.gz
  * cups.require couldn't handle version bigger than 1
  * dropped macros for older CUPS &lt; 2.0.0
  * dropped Python 2 support and its related macros
  * update license headers
  * thread did not hold GIL when called Py_XDECREF() from destroy_TLS(), causing SIGSEGV(Fedora bug #1816107)
  * fixed several compiler warnings
  * fix silent error on Connection.printFiles() (patch by Wilbert Berendsen)</changelog>
  <changelog author="dmueller@suse.com" date="1645012800">- spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1692014400">- build as wheel</changelog>
  <changelog author="dmueller@suse.com" date="1704283200">- require setuptools</changelog>
  <changelog author="dmueller@suse.com" date="1713614400">- update to 2.0.4:
  * remove the install_requires from setup.py
  * removed shebang from example/cupstree.py
  * ignore driverless utilities for postscriptdriver tags
    creation (Fedora bug #1873385)
  * remove epydoc from Makefile (#27)
  * fix invalid delete of pointer (#11)
  * Makefile uses wrong Python (#32)
  * define PY_SSIZE_T_CLEAN in cupsipp.h - fixes traceback during
    IPPRequest.writeIO with Python 3.10
  * fix the test.py when there is no printer installed (#46)
  * Use PyObject_Call() instead of deprecated PyEval</changelog>
  <changelog author="dmueller@suse.com" date="1730376000">- fix_shebang on the postscript driver rpmhook</changelog>
</package>
<package pkgid="5370a5b3a4c7a08457ec95d1abdbd5faed7042bf87800fb8c0e6971b3beb02d47db567e0b4d103746c3e56a6ce583f58cd75c7154cfc5c155572fc9c40494bb8" name="cura-engine" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="bp160.1.14"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1574424000">- update to version 4.4.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/v4.4.0</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1577966400">- update to version 4.4.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/v4.4.1</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1591531200">- Update to version 4.6.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.6.1
  * https://github.com/Ultimaker/Cura/releases/tag/4.6.0
  * https://github.com/Ultimaker/Cura/releases/tag/4.5.0
- Clean up spec file</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1600171200">- Update to version 4.7.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.7.1
  * https://github.com/Ultimaker/Cura/releases/tag/4.7.0
  * https://github.com/Ultimaker/Cura/releases/tag/4.6.2</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1605009600">- Update to version 4.8.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.8
- Use system RapidJSON and polyclipping when available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1619438400">- Update to version 4.9.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.9</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1643284800">- Update to version 4.13.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.13.0
- Refresh patch:
  * fix-build.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644148800">- Update to version 4.13.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.13.1</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1683028800">- Add add-missing-include.patch: Add missing include &lt;cstdint&gt;</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1732708800">- Fix build with latest GCC, add
  0001-Fix-failing-build-due-to-missing-iomanip.h-include.patch
- Minor spec file cleanup</changelog>
</package>
<package pkgid="95473e0000438c527ab38417a5f6f8c86eeaa421dc138ebd6ae6079d006e8a26d7222ca39769dc2c06067b83b9715a93764447415cb59739f41295edaa2d83d5" name="cura-fdm-materials" arch="noarch">
  <version epoch="0" ver="4.13.0" rel="bp160.1.9"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1517227200">- Correct package group
- Remove spurious executable flag on data files</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546862400">- update to version 3.6.0
  * Lots of updates and additions to generic and vendor specific
    materials, no changelog available.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1560427200">- update to version 4.1.0
  * https://ultimaker.com/en/products/ultimaker-cura-software/release-notes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1571054400">- update to version 4.3.0</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1577966400">- update to version 4.4.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/v4.4.1</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1591531200">- Update to version 4.6.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.6.1
  * https://github.com/Ultimaker/Cura/releases/tag/4.6.0
  * https://github.com/Ultimaker/Cura/releases/tag/4.5.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1600171200">- Update to version 4.7.1
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.7.1
  * https://github.com/Ultimaker/Cura/releases/tag/4.7.0
  * https://github.com/Ultimaker/Cura/releases/tag/4.6.2</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1605009600">- Update to version 4.8.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.8</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1619438400">- Update to version 4.9.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.9</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643544000">- Update to version 4.13.0
  Release notes:
  * https://github.com/Ultimaker/Cura/releases/tag/4.13</changelog>
</package>
<package pkgid="b482fe0225b0ad93374a9e5770e1d20fd1ffca392e218f7d13f37e87872fdc847da771b447e47c3f2de79377af9ad27a974a3e3eac81262c46bfd97c534690e6" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
</package>
<package pkgid="d5cc3037472253e43a0820bbfcd9b6f0aa81eb2b5b46c26221150f3aba6645a05adae41093b85fd879ebd7814471911dd9da4a0c9977511fb365a4b4011ba331" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.3.1"/>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="9b5b71dcf56347bc804b1e283a661dab82f10297a6565a22bd158961edc5600f2d25ce46a58e27f07e0a32b276d16a10e6d20d26fd8424b92245177e166695ac" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.4.1"/>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="f9b2ca1d95318028615ca25211cf281b32af70f79e35eb23b5de22c8649b9378cc005205a0e5445ea17461ee6868f146a89bf32820cdfc4e25224acd73dd3266" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.5.1"/>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="301f6a59d5c7643502d7ada1d36ffcbb64f3994b79119dcec711f2680ed4a4f8c3e936127c74c3c25a4574ee3dfb9b3986967234f99444842c2988e25e2ce6f0" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.6.1"/>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1777032000">- Security fixes:
  * CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631)
  * CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632)
  * CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635)
  * CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636)
  * CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638)
  * Add patches:
  - curl-CVE-2026-4873.patch
  - curl-CVE-2026-5545.patch
  - curl-CVE-2026-6253.patch
  - curl-CVE-2026-6276.patch
  - curl-CVE-2026-6429.patch</changelog>
</package>
<package pkgid="6b9a63761d5f60be7b617aface28c6993990fac9614515d7faeedd52f2687d80c48221991a399bec83cc198290034fe874def7cbcf53581c87a916902a63e509" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1777032000">- Security fixes:
  * CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631)
  * CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632)
  * CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635)
  * CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636)
  * CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638)
  * Add patches:
  - curl-CVE-2026-4873.patch
  - curl-CVE-2026-5545.patch
  - curl-CVE-2026-6253.patch
  - curl-CVE-2026-6276.patch
  - curl-CVE-2026-6429.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1781524800">- Call http_size() first to prioritize Transfer-Encoding: chunked over a zero
  Content-Length empty body check (bsc#1264971)
  * Add patch: curl-http-prefer-chunked-encoding-over-Content-Length-0.patch</changelog>
</package>
<package pkgid="96029ddfd17d79599343f12115fffb0df298842c25c4795bde1a45c3d0555ee282b5f8c6ac6d6f516069282890dc87f8619ee698ab099d3a8d6f3e3675692031" name="curl-fish-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
</package>
<package pkgid="f497467cc90e8ec18e213932357921c2aab2e5d36a3d5308da41aae5c7b846d700a62892af7c2ae39ceaea1d7cd1c3102e1abd2631164e0ec1057c989cfbd2de" name="curl-fish-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.3.1"/>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="4ce0fda196f36af51809ee2b9aba0570c5b173281db26732babb32b1fe252e5d1c2ee1eb29b18fcc1af8b196fb92ae1dfda0f29c7b8eedad77ca506e0543bc56" name="curl-fish-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.4.1"/>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="4f22a64772471507bf2cbaae46db2c97d5920db30807fe21ea68805178e021fb9d0c37de8724a6e2c65e80b51f01472794348e6396ed428bdd5f4997c06bb44c" name="curl-fish-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.5.1"/>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="fe9f4ca11722a1ed2cc2237b46aa11da1af86834021a50cac33d69724582f995dfb53dc36e251904fdf68e43d7190b8ea5d44a9e1d8e187ce4bd27fa9704315b" name="curl-fish-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.6.1"/>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1777032000">- Security fixes:
  * CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631)
  * CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632)
  * CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635)
  * CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636)
  * CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638)
  * Add patches:
  - curl-CVE-2026-4873.patch
  - curl-CVE-2026-5545.patch
  - curl-CVE-2026-6253.patch
  - curl-CVE-2026-6276.patch
  - curl-CVE-2026-6429.patch</changelog>
</package>
<package pkgid="7466f2a9d40a1489124ac4a1bf64744eef8abf23fd95b5fea11d5e07e1bf2272c99128b80f4a847e27ec0dd820ca7899b49214020fbe6f2a7a7382afcd8179d0" name="curl-fish-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1777032000">- Security fixes:
  * CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631)
  * CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632)
  * CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635)
  * CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636)
  * CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638)
  * Add patches:
  - curl-CVE-2026-4873.patch
  - curl-CVE-2026-5545.patch
  - curl-CVE-2026-6253.patch
  - curl-CVE-2026-6276.patch
  - curl-CVE-2026-6429.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1781524800">- Call http_size() first to prioritize Transfer-Encoding: chunked over a zero
  Content-Length empty body check (bsc#1264971)
  * Add patch: curl-http-prefer-chunked-encoding-over-Content-Length-0.patch</changelog>
</package>
<package pkgid="6365faf9fe7f258efd85a36fe8622667f3b108d58548a3fc1f1b4d81654bd5ce512e6b0fd82b5175b11a0e37650b604ad1a41486a217676281586bb2c4c8df93" name="curl-zsh-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
</package>
<package pkgid="14cad42ec4ca5da87a1df3453579604b1308d28f3ad88bce58bdfaa4cd02eccfb6cab4d5600c0d48d40fdf750c833388ecbf747116948de6610b55a4a8a83730" name="curl-zsh-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.3.1"/>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="3f34bf7bb6e1f75757640f83a005c6a059a54ea1b5ab19e49ed35b7f6a995d6c436f72a082382cf0773843653932f8244df3f999e56c3de716e235c05c1459fc" name="curl-zsh-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.4.1"/>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="e3d103fccdbf200cc5dbf9a4195cb30db94d5a5abfe599c93f0afbc06c99c78478eb579fea3b8b9f394f1e26d72fc455fa3b409ab9d0b04dc433564525110af4" name="curl-zsh-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.5.1"/>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="90a4da8db836966ca3ec75b4016c17d72a5d665913bf408d6d94508591e6b70cf15bb993247f616bea69fa435153a3c1c28b959afe217c1a7afafeee42110cf6" name="curl-zsh-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.6.1"/>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1777032000">- Security fixes:
  * CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631)
  * CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632)
  * CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635)
  * CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636)
  * CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638)
  * Add patches:
  - curl-CVE-2026-4873.patch
  - curl-CVE-2026-5545.patch
  - curl-CVE-2026-6253.patch
  - curl-CVE-2026-6276.patch
  - curl-CVE-2026-6429.patch</changelog>
</package>
<package pkgid="3cbcfb97d8d0fc63f4aa311a8ee9f500827e965c0a872eef6bcede807c27429f19cc0703abf36d99f8da24b5d1fd72e47f3d830efb46b88890a5220d6a5a5c6a" name="curl-zsh-completion" arch="noarch">
  <version epoch="0" ver="8.14.1" rel="160000.7.1"/>
  <changelog author="pmonreal@suse.com" date="1751284800">- Disable insecure NTLM authentication support [bsc#1245491, jsc#PED-12960]</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * tool_operate: reset the URL --url-query between --next (510fdad)
  * Add patches:
  - curl-CVE-2026-1965.patch curl-CVE-2026-1965-disable-ntlm-fix.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1777032000">- Security fixes:
  * CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631)
  * CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632)
  * CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635)
  * CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636)
  * CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638)
  * Add patches:
  - curl-CVE-2026-4873.patch
  - curl-CVE-2026-5545.patch
  - curl-CVE-2026-6253.patch
  - curl-CVE-2026-6276.patch
  - curl-CVE-2026-6429.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1781524800">- Call http_size() first to prioritize Transfer-Encoding: chunked over a zero
  Content-Length empty body check (bsc#1264971)
  * Add patch: curl-http-prefer-chunked-encoding-over-Content-Length-0.patch</changelog>
</package>
<package pkgid="fa7bce5753815689bf001a833f2222bb3f43f6f12a49c763a4b7a7775ad12305d686447af5a49af2cb46042cde86456fd3b156366e773b81369af4933315420f" name="curlie" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="bp160.1.13"/>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1672056000">- initial release 1.6.9</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1673265600">- changed minimal Go version to 1.13</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to version 1.7.1:
  * fix: update curl long values (#70)
  * fix headers/body order (#55)
  * Update install method for Homebrew (#57)
  * Bump golang.org/x/crypto from 0.0.0-20180524125353-159ae71589f3 to 0.1.0 (#66)
  * Bump golang.org/x/sys from 0.0.0-20191026070338-33540a1f6037 to 0.1.0 (#65)
  * Remove macOS binary of curlie (#61)
  * Document --pretty (#56)
  * doc: add webinstall.dev instructions (#58)
- added patch upgrade-go-version-and-x-sys-to-latest.patch to bump dependency</changelog>
  <changelog author="andrea.manzini@suse.com" date="1698148800">- Update to version 1.7.2:
  * Revert "fix headers/body order (#55)" (#74)</changelog>
</package>
<package pkgid="2cf7c10e39e67b4135f1e63acf9dc635dd9e595ad7c268ac910060ee5501a1cda5b6e19bc4157e92ed7d8a67f3af6dfca528695f1a43e7946e19bd1ca6860c0b" name="curtail" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="bp160.1.9"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1630065600">- Actually add the rpmlintrc file to sources.
- BuildArch: noarch as recommended by rpmlint.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638878400">- Update to version 1.2.2:
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651406400">- Update to version 1.3.0:
  * Add option to preserve file attributes if possible.
  * Update image libraries.
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657713600">- Update to version 1.3.1:
  * Make size columns sortable.
  * Fix savings column sorting.
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1680350400">- Update to version 1.6.0:
  * New features:
  - Configurable compression timeout.
  - Compress images in an other thread.
  * Changes:
  - Better workflow for headerbar.
  - Move saving state in the subtitle.
  - Show errors on each line and not in modals anymore.
  - Simplify preferences.
  - Update translations.
  * Bug fix: Fix compression level ranges in UI.
- New BuildRequires: pkgconfig(libadwaita-1), gtk4-tools.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1682078400">- Update to version 1.7.0:
  * Added:
  - SVG support.
  - Add a warning banner for overwrite mode.
  - New start screen with an AdwStatusPage.
  - Add debug information in about window.
  * Changed:
  - Switch from OptiPNG to Oxipng.
  - Minor UI improvements.
  - Remove some remaining dialogs.
  - Bump deps.
  * Fixed: Fix handling of filenames with spaces for WEBP
    compressor.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 1.8.0:
  - Add "Bulk Compress Directory (recursive)" feature.
  - Add simplified Chinese translation.
  - Add categories and keywords support in appdata.
  - Improve clarity of preference options.
  - Update OxiPNG to v9.
  - Handle cases where previews can't be generated.
  - Fix some "Format of this file is not supported".
  - Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712923200">- Update to version 1.9.1:
  * Use default decoration layout for screenshots.
- Changes from version 1.9.0:
  * Correct title case, reword subtitles, remove periods.
  * Use proper arrow character.
  * Fix drag and drop for folders.
  * Appstream data improvements.
  * Updated translations.
- Empty %check section as recommended by rpmlint.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718712000">- Update to version 1.10.0:
  * Add a "Recursive Compression" setting.
  * Update OxiPNG to v9.1.1
  * Change safe mode directly from warning banner button.
  * Fix opening files with "Open With...".
  * Fix DnD with nested folders (recursive).
  * Fix translations not applied to the help overlay window.
  * Updated translations.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1728302400">- Update to version 1.11.0:
  * Always restore original files when compression produces larger
    files.
  * Notify when no files are found in a folder.
  * Use new libadwaita row widgets.
  * Update Gnome Runtime to 47.
  * Fix a shell injection vulnerability.
  * Updated translations.</changelog>
</package>
<package pkgid="0c473223c13402f65181885eca5c3e394230a42d5ef4e70ed2627931608ac3f66a6fc445f8c6cd15a97c6b56aa34b1c3baac34bd1c6991dcaaf9a35332a6b0e6" name="curtail-lang" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="bp160.1.9"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1630065600">- Actually add the rpmlintrc file to sources.
- BuildArch: noarch as recommended by rpmlint.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1638878400">- Update to version 1.2.2:
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1651406400">- Update to version 1.3.0:
  * Add option to preserve file attributes if possible.
  * Update image libraries.
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657713600">- Update to version 1.3.1:
  * Make size columns sortable.
  * Fix savings column sorting.
  * Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1680350400">- Update to version 1.6.0:
  * New features:
  - Configurable compression timeout.
  - Compress images in an other thread.
  * Changes:
  - Better workflow for headerbar.
  - Move saving state in the subtitle.
  - Show errors on each line and not in modals anymore.
  - Simplify preferences.
  - Update translations.
  * Bug fix: Fix compression level ranges in UI.
- New BuildRequires: pkgconfig(libadwaita-1), gtk4-tools.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1682078400">- Update to version 1.7.0:
  * Added:
  - SVG support.
  - Add a warning banner for overwrite mode.
  - New start screen with an AdwStatusPage.
  - Add debug information in about window.
  * Changed:
  - Switch from OptiPNG to Oxipng.
  - Minor UI improvements.
  - Remove some remaining dialogs.
  - Bump deps.
  * Fixed: Fix handling of filenames with spaces for WEBP
    compressor.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 1.8.0:
  - Add "Bulk Compress Directory (recursive)" feature.
  - Add simplified Chinese translation.
  - Add categories and keywords support in appdata.
  - Improve clarity of preference options.
  - Update OxiPNG to v9.
  - Handle cases where previews can't be generated.
  - Fix some "Format of this file is not supported".
  - Updated translations.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712923200">- Update to version 1.9.1:
  * Use default decoration layout for screenshots.
- Changes from version 1.9.0:
  * Correct title case, reword subtitles, remove periods.
  * Use proper arrow character.
  * Fix drag and drop for folders.
  * Appstream data improvements.
  * Updated translations.
- Empty %check section as recommended by rpmlint.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1718712000">- Update to version 1.10.0:
  * Add a "Recursive Compression" setting.
  * Update OxiPNG to v9.1.1
  * Change safe mode directly from warning banner button.
  * Fix opening files with "Open With...".
  * Fix DnD with nested folders (recursive).
  * Fix translations not applied to the help overlay window.
  * Updated translations.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1728302400">- Update to version 1.11.0:
  * Always restore original files when compression produces larger
    files.
  * Notify when no files are found in a folder.
  * Use new libadwaita row widgets.
  * Update Gnome Runtime to 47.
  * Fix a shell injection vulnerability.
  * Updated translations.</changelog>
</package>
<package pkgid="13419e7f7e89210ae17f488766bd25b8d4dde52daf7fa46a2e7071346c1f2e3c4ce0cee6a0b344b139dfc64e9f270334f96506414493fc2efe6598c5f793f2e8" name="cutecom" arch="x86_64">
  <version epoch="0" ver="0.60.0" rel="bp160.1.13"/>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Spec file cleanups:
  * Use upstream Summary
  * Use upstream Description
  * Fix Group tag</changelog>
  <changelog author="opensuse@dstoecker.de" date="1501761600">- update to 0.40.0
  - First implementation of searching the output
  - Linked line termination of displayed data
  with the option (LF, CRLF, CR, ...) for user input.
  - compress/combine multiple non printable characters into one expression
  in case the same non printable characters is beeing received multiple
  times in a sequence
  - enable a mix from hex and ascii characters in hex input mode
  - Disable RTS/DTR when no flow control is used
  - man page update
  - licenses cleanup
  - now builds and runs using Qt5 versions less than 5.3
  - performance tuning by switching to QPlainTextEdit</changelog>
  <changelog author="jengelh@inai.de" date="1502539200">- Trim redundant info from description that is already part of the
  spec preamble.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1528718400">- fix build with cmake &gt;= 5.11 (68.patch)</changelog>
  <changelog author="cyc1ingsir@gmail.com" date="1529236800">-update to release 0.45.0
  * Enable input of Crl characters using a popup or Ctrl+&lt;x&gt;
  * Windows support added
  * line termination was not saved in settings - FIX
  * upgrading to clang-format to version 3.8.0
  * updating travis ci instructions - FIX
  * support for Qt5&gt;=5.11</changelog>
  <changelog author="cyc1ingsir@gmail.com" date="1533556800">-update to release 0.50.0
  * added the byte counter plugin
  * added a plugin manager
  * added macros plugin to support similar to br@y's terminal
  * added netproxy plugin
  * improved logfile handling
  * redesign control panel's opening button</changelog>
  <changelog author="cyc1ingsir@gmail.com" date="1535803200">-update to release 0.51.0
  * moved to a new home
  * added auto reconnect feature
  - ------------------------------------------------------------------</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591272000">- Add patch to fix build with Qt 5.15:
  * 0001-Fix-build-with-Qt-5.15.patch
- Spec cleanup</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Small packaging adjustements:
  * Dont manually compress manpages
  * Fully leverage install command</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1718193600">- update to 0.60. (RC1) - support Qt6
- Drop 0001-Fix-build-with-Qt-5.15.patch (included upstream)</changelog>
</package>
<package pkgid="0da61aaffc99730161bb24ef19abf57ed90cf0218e6d547cd09a3bbc2df61f387fc20ac46aa02148693ab82d12c2e3af9e6440648364aac2974642d1faf1fe47" name="cutmp3" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="bp160.1.12"/>
  <changelog author="pascal.bleser@opensuse.org" date="1240142400">- update to 1.9.5:
  * pressing M and N now really changes the length of playback</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1246276800">- update to 2.0:
  * live time display has been added, pressing "l" toggles it
  * the "-o" switch now always uses the given prefix instead of information from ID3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247400000">- update to 2.0.1:
  * security fixes have been made
  * giving times for cutting has been made easier</changelog>
  <changelog author="pascal@links2linux.de" date="1275825600">- update to 2.0.2:
  * changes in the layout and in the playback behaviour</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304769600">- update to 2.0.3:
  * opening a file has been prevented when writing to STDOUT
- split out -doc subpackage
- obsolete -kde3 subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317038400">- update to 2.1:
  * layer 2 (MP2 file) support</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1364817600">- update to 2.1.1:
  * small time display fix
  * fixed eading ID3V2</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 3.0.1
  * fix for non-interactive mode by Richard Fuchs
  version 3.0:
  * cutmp3 always uses exact times now, without being slow
  * improved silence seeking
  * much faster negative times seeking for cutting from timetable
  * better ID3V2 parsing
  * new parameter "-k" keeps old filename and path and appends
    0001.mp3, etc.
  version 2.1.2:
  * old tempfile is removed just before playing new tempfile.
    Patch by Till Maas.
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Make description more neutral.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1697284800">- Update to version 3.0.3
  * Quickfix, eliminated warnings -Wunused-result and
  - Wformat-security
  version 3.0.2:
  * Minor bugfixes, eliminated warnings
- Switch to new upstream source</changelog>
</package>
<package pkgid="8d36210f2f6ebfbd54c34f34244743792cb4979742699b06496ab62984bfa2c6731e3193e0b91466ddb30ab602e21f9fa49858e6df5195716a11efbe1cb05ef7" name="cutmp3-doc" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="bp160.1.12"/>
  <changelog author="pascal.bleser@opensuse.org" date="1240142400">- update to 1.9.5:
  * pressing M and N now really changes the length of playback</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1246276800">- update to 2.0:
  * live time display has been added, pressing "l" toggles it
  * the "-o" switch now always uses the given prefix instead of information from ID3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247400000">- update to 2.0.1:
  * security fixes have been made
  * giving times for cutting has been made easier</changelog>
  <changelog author="pascal@links2linux.de" date="1275825600">- update to 2.0.2:
  * changes in the layout and in the playback behaviour</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304769600">- update to 2.0.3:
  * opening a file has been prevented when writing to STDOUT
- split out -doc subpackage
- obsolete -kde3 subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317038400">- update to 2.1:
  * layer 2 (MP2 file) support</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1364817600">- update to 2.1.1:
  * small time display fix
  * fixed eading ID3V2</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 3.0.1
  * fix for non-interactive mode by Richard Fuchs
  version 3.0:
  * cutmp3 always uses exact times now, without being slow
  * improved silence seeking
  * much faster negative times seeking for cutting from timetable
  * better ID3V2 parsing
  * new parameter "-k" keeps old filename and path and appends
    0001.mp3, etc.
  version 2.1.2:
  * old tempfile is removed just before playing new tempfile.
    Patch by Till Maas.
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Make description more neutral.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1697284800">- Update to version 3.0.3
  * Quickfix, eliminated warnings -Wunused-result and
  - Wformat-security
  version 3.0.2:
  * Minor bugfixes, eliminated warnings
- Switch to new upstream source</changelog>
</package>
<package pkgid="2affacbc0496ded298a8b072811b7b0ad07cd8d999e0d7089e237efbdbbb33e38fe1702a87c9609dd4f8054b537f95eaced86843796ec67075df00f6b823c760" name="cutterff" arch="x86_64">
  <version epoch="0" ver="1.3" rel="bp160.1.12"/>
  <changelog author="enzokiel@kabelmail.de" date="1547467200">- Update to version 0.6
  + gui.c
  - save dialog with option for shortest stream duration
  - memory leak in 'cff_gui_save_start', 'bsf_info' may not be
    freed. Fixed!
  - removed double question for overwriting an existing file
  - if copying the log-window to the clipboard it will be
    converted from UNIX to DOS (LF to CRLF)
    (MINGW and GTK-2 only)
  + ffmpeg.c
  - searching to previous frame may fail, if the current
    position is near the last frame and K/I/P-frame is requested.
    Fixed!
  - if at label '_got_picture' the condition 'last_frame != NULL'
    is true, the assignment 'video-&gt;vframe.packet[0].pos = -1'
    may overwrite the packet position which was found. Fixed!
  - searching one frame forward or backward may skip a frame with
    a duration less than the picture duration. Fixed!
  - the written file may too short if the duration of either
    audio or video is shorter than the other stream.
    The option 'shortest' was always active, now the user may
    choose if this should happen.
  - may hang if clicking twice on the slider at the same
    position. Fixed!
  - tiny memory leak in 'cff_ffmpeg_get_frame_dts'. Fixed!
  - flushing the codec at end of stream</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1549540800">- Update to version 0.7
  + gui.c
  - memory leak in 'cff_gui_save_start', 'format_names' may not
    be freed. Fixed!
  - disable menu entry File-&gt;Save if there is only one cut point,
    which is the last frame
  - image dialog for saving an image
  - disable okay-button if in the saving dialogs the entry field
    is empty
  + ffmpeg.c
  - buffer may too small for displaying all codecs or formats.
    Fixed!
  - may compute wrong display aspect ratio. Fixed!
  - new function 'cff_ffmpeg_printf_concat' (re)allocates memory
    and writing the string to it
  - log-window displays "Repeated last message n times", if the
    same message should be displayd more then two times
  - scale, encode and save an image
  - at end of copying the bitstream filters will be flushed
  - flushing the codec at end of stream may not work since the
    decode timestamps (dts) are not set. These missing values
    will now computed and saved while opening a file
  - replaced deprecated functions (FFmpeg version 4.0.2)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1552996800">- Update to version 0.8
  + gui.c
  - memory leak in 'cff_gui_init', 'logname' may not be freed.
    Fixed!
  - memory leak in 'cff_gui_save_image', 'filechooser_utf8str'
    may not be freed. Fixed!
  - max 10 extensions (file filter) can be added for the
    filechooser
  - if copying to another format the matching extension is now
    appended to the filename
  + ffmpeg.c
  - memory leak in 'cff_ffmpeg_copy_cb', 'bsf_ctx' may not be
    freed. Fixed!
  - videos could not loaded if the frames have a duration of
    zero. Fixed!
  - videos may not loaded by some muxers if the first packet is
    not a key frame. Fixed!
  - if copying to another format (especially to AVI) the
    timestamps may incorrect. Fixed!
  - 'cff_ffmpeg_get_format_names' now returns only the formats
    useable for the available streams
  - 'cff_ffmpeg_get_bitstream_filter_names' now returns only the
    filters useable for the available streams
  - 'cff_ffmpeg_get_outformat_extension' returns the extension
    for the given format</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1565092800">- Update to version 0.9
  + gui.c
  - if Num-Lock is activated, depending on the OS and GUI no
    navigation may possible. Now the functions only breaks if the
    Control-key is pressed.
  - 'cff_gui_video_frame_button' is the right button equal to the
    shift key.
  + ffmpeg.c
  - 'cff_ffmpeg_get_stream_from_index' may return wrong or no
    streams, if the file contains more than one program, and some
    without a video stream. Fixed!
  - the frame duration computed from 'ticks_per_second' may
    sometimes too short. Fixed!
  - flushing the codec in 'cff_ffmpeg_file_open_cb' if seeking
    for the last frame of the video
  - DVB subtitles should work now
  - if 'avcodec_receive_frame' fails, rewind only if the packet
    flag 'AV_PKT_FLAG_DISCARD' is not set
  - decoding starts now always with a keyframe, if not seeking
    the first fame
  - storing the packet position for first frame, needed if the
    dts is not set
  - copy the video if first cutpoint is the first frame may fail
    if the dts is not set. Fixed!
  - cutpoints will now be saved with the values frame-dots,
    packet-dts and packet-position. It is possible to load lists
    stored with previous versions of CutterFF.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1630411200">- Update to version 1.0
  * main.c
    + replaced 'GLIB_MAJOR_VERSION' with
    'GLIB_MINOR_VERSION' and 'glib_major_version'
    with 'glib_minor_version'
  * gui.c
    + setting '-GtkMenuBar-shadow-type' only for
    versions &lt; 3.20 (GTK-3 only)
    + if closing a file with unsaved cutpoints a
    dialog asks for discarding changes
    + replaced in 'cff_gui_css_load_from_data'
    'gtk_style_context_add_provider_for_screen'
    with 'gtk_style_context_add_provider'
    + changed priority in 'cff_gui_logwindow_color_set'
    from 'GTK_STYLE_PROVIDER_PRIORITY_APPLICATION' to
    '..._USER' (GTK-3 only)
    + changed tag color and font in 'textview' to
    GTK-2 'gtk_widget_modify_...' or
    GTK-3 'cff_gui_css_load_from_data'
    + in 'cff_gui_logwindow_color_parse' converting
    'rgb(r,g,b)' to '#rrggbb' (GTK-2 only)
    + popup in 'cff_gui_file_save' for selecting the
    encoder for soft cutting
    + may hang if log was set to 'debug'. So
    'g_main_context_invoke_full' in 'cff_gui_logwindow_cb'
    was removed, 'cff_gui_logwindow_mainthread' is now
    called every 5ms using 'g_timeout_add_full'
    + remove last '\n' from log string in 'cff_gui_logwindow_cb'
    + '_textview_scroll_to_iter' in 'cff_gui_logwindow_cb'
    was removed. Now down scrolling is done using the
    signal 'changed', and setting the new value in
    'cff_gui_logwindow_adjustment' with the function
    'gtk_adjustment_set_value'
    + the slider is now 'GtkScale'
    + using 'Cairo' instead of 'GdkDraw' (GTK-2 only)
  * ffmpeg.c
    + 'cff_ffmpeg_print_codecs_for_id': codecs separated
    by commas, last space in front of terminating ')'
    removed
    + softcut is de- and encoding frames at the cutpoint(s)
    + stream-sync starts copying packets if the timestamp
    is greater or equal than the cutpoint
    + test if bitstream filter 'mp4toannexb' is needed for
    encoding in 'cff_ffmpeg_get_frame_dts' (h.264 + h.265)
    + 'cff_ffmpeg_copy_open': if 'avformat_transfer_internal_
    stream_timing_info' failed, try '(st-&gt;oStream)-&gt;time_
    base = (st-&gt;iStream)-&gt;time_base' before 'av_stream_get_
    codec_timebase'
    + if the first DVB subtitle frame should clear a subtitle,
    it is dropped (no subtitle shown yet). This will also
    compute the right stream duration
  * tools-gtk.c
    + renamed 'guitl_' to 'cff_guitl_'
    + moved 'cff_gui_beep' to 'cff_guitl_beep'
    + 'cff_guitl_window_destroy' sets 'gWindata.topwin'
    to NULL, if the main window is not on the top
    + 'cff_guitl_dialog_icon' sets 'gWindata.topwin' to
    'gWindata.mainwin', is the top window is NULL
    + changed signal 'size-allocate' in 'cff_guitl_window_setup'
    to 'configure-event'</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1631188800">- Update to version 1.0.1
  * gui.c
    + if encoding (softcut enabled) has finished, the text in the
    progressbar may not disappear. Fixed!
  * ffmpeg.c
    + if saving a file with softcut more than once the automatic
    enabling of 'h264_mp4toannexb' or 'hevc_mp4toannexb' fails.
    Fixed!
    + in 'cff_ffmpeg_copy_write_frame_softcut' the PTS assignment
    may wrong, 'pts -= pts_diff' followed by 'pts = pptr-&gt;dts'.
    Fixed!
    + 'av_packet_int' replaced with 'av_packet_alloc'
    + 'av_packet_ref' replaced with 'av_packet_clone'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Update to version 1.0.2:
  * gui.c:
    + changed in 'cff_gui_dialog_progress_callback'
    Gui_PRIORITY_REDRAW to G_PRIORITY_HIGH_IDLE
    + changed in 'cff_gui_logwindow_add_timeout'
    G_PRIORITY_HIGH to GTK_TEXT_VIEW_PRIORITY_VALIDATE
    + if the first character of the log string is '\r',
    the last line will be overwritten (Last message
    repeated x times). See 'cff_gui_logwindow_mainthread'
    and 'cff_gui_logwindow_cb'
  * ffmpeg.c:
    + works with FFmpeg version 5.0.1
    + in 'cff_ffmpeg_get_image_format_names' looking
    for the codec_id (TIFF, GIF ...) if the encoder
    has not the mime type 'image'
    + test in 'cff_ffmpeg_get_encoder_names' whether
    the encoder supports the pixel format of the input
    + removed in 'cff_ffmpeg_encoder_new' the options
    for 'b-frames', 'gop' and 'sc_threshold'
    + in 'cff_ffmpeg_copy_softcut' forgot to free the
    frame if packet allocation fails
    + 'level &amp;= 0x00FF' in 'cff_ffmpeg_log_callback'
    + get the parent class in 'cff_ffmpeg_log_callback'
    with 'avr' may crash. Right way is using 'ptr'
    + 'skip_prefix' in 'cff_ffmpeg_log_callback' to
    append the next string to the current
    + compare the string in 'cff_ffmpeg_log_callback'
    to the previous one. If equal throw the message
    "Last message repeated x times"
    + some improvements in'cff_ffmpeg_get_frame' for
    proper decoding. Sometimes a frame may report a
    wrong picture type, or a key frame which is not
    at this position, or the frame is not correct
    displayed.
  * ffmpeg.h: including 'libavcodec/bsf.h' (FFmpeg 5.0.1)
- Drop lang package Recommends, no longer needed, nor wanted.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1724760000">- Update to 1.3 to add support for FFmpeg 7. Check the ChangeLog
  file for the full list of changes.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1724760001">- Force ffmpeg-6 library use to fix build</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1724760002">- revert to ffmpeg-7</changelog>
</package>
<package pkgid="ff7fbb40d28c45e1911b722fbbf81e264b8ca89ad4f320a91ce192002a2f98ba51251017019aac2657823b1530b66ef8821c08bef0104826fc88c1a09963fe71" name="cutterff-lang" arch="noarch">
  <version epoch="0" ver="1.3" rel="bp160.1.12"/>
  <changelog author="enzokiel@kabelmail.de" date="1547467200">- Update to version 0.6
  + gui.c
  - save dialog with option for shortest stream duration
  - memory leak in 'cff_gui_save_start', 'bsf_info' may not be
    freed. Fixed!
  - removed double question for overwriting an existing file
  - if copying the log-window to the clipboard it will be
    converted from UNIX to DOS (LF to CRLF)
    (MINGW and GTK-2 only)
  + ffmpeg.c
  - searching to previous frame may fail, if the current
    position is near the last frame and K/I/P-frame is requested.
    Fixed!
  - if at label '_got_picture' the condition 'last_frame != NULL'
    is true, the assignment 'video-&gt;vframe.packet[0].pos = -1'
    may overwrite the packet position which was found. Fixed!
  - searching one frame forward or backward may skip a frame with
    a duration less than the picture duration. Fixed!
  - the written file may too short if the duration of either
    audio or video is shorter than the other stream.
    The option 'shortest' was always active, now the user may
    choose if this should happen.
  - may hang if clicking twice on the slider at the same
    position. Fixed!
  - tiny memory leak in 'cff_ffmpeg_get_frame_dts'. Fixed!
  - flushing the codec at end of stream</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1549540800">- Update to version 0.7
  + gui.c
  - memory leak in 'cff_gui_save_start', 'format_names' may not
    be freed. Fixed!
  - disable menu entry File-&gt;Save if there is only one cut point,
    which is the last frame
  - image dialog for saving an image
  - disable okay-button if in the saving dialogs the entry field
    is empty
  + ffmpeg.c
  - buffer may too small for displaying all codecs or formats.
    Fixed!
  - may compute wrong display aspect ratio. Fixed!
  - new function 'cff_ffmpeg_printf_concat' (re)allocates memory
    and writing the string to it
  - log-window displays "Repeated last message n times", if the
    same message should be displayd more then two times
  - scale, encode and save an image
  - at end of copying the bitstream filters will be flushed
  - flushing the codec at end of stream may not work since the
    decode timestamps (dts) are not set. These missing values
    will now computed and saved while opening a file
  - replaced deprecated functions (FFmpeg version 4.0.2)</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1552996800">- Update to version 0.8
  + gui.c
  - memory leak in 'cff_gui_init', 'logname' may not be freed.
    Fixed!
  - memory leak in 'cff_gui_save_image', 'filechooser_utf8str'
    may not be freed. Fixed!
  - max 10 extensions (file filter) can be added for the
    filechooser
  - if copying to another format the matching extension is now
    appended to the filename
  + ffmpeg.c
  - memory leak in 'cff_ffmpeg_copy_cb', 'bsf_ctx' may not be
    freed. Fixed!
  - videos could not loaded if the frames have a duration of
    zero. Fixed!
  - videos may not loaded by some muxers if the first packet is
    not a key frame. Fixed!
  - if copying to another format (especially to AVI) the
    timestamps may incorrect. Fixed!
  - 'cff_ffmpeg_get_format_names' now returns only the formats
    useable for the available streams
  - 'cff_ffmpeg_get_bitstream_filter_names' now returns only the
    filters useable for the available streams
  - 'cff_ffmpeg_get_outformat_extension' returns the extension
    for the given format</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1565092800">- Update to version 0.9
  + gui.c
  - if Num-Lock is activated, depending on the OS and GUI no
    navigation may possible. Now the functions only breaks if the
    Control-key is pressed.
  - 'cff_gui_video_frame_button' is the right button equal to the
    shift key.
  + ffmpeg.c
  - 'cff_ffmpeg_get_stream_from_index' may return wrong or no
    streams, if the file contains more than one program, and some
    without a video stream. Fixed!
  - the frame duration computed from 'ticks_per_second' may
    sometimes too short. Fixed!
  - flushing the codec in 'cff_ffmpeg_file_open_cb' if seeking
    for the last frame of the video
  - DVB subtitles should work now
  - if 'avcodec_receive_frame' fails, rewind only if the packet
    flag 'AV_PKT_FLAG_DISCARD' is not set
  - decoding starts now always with a keyframe, if not seeking
    the first fame
  - storing the packet position for first frame, needed if the
    dts is not set
  - copy the video if first cutpoint is the first frame may fail
    if the dts is not set. Fixed!
  - cutpoints will now be saved with the values frame-dots,
    packet-dts and packet-position. It is possible to load lists
    stored with previous versions of CutterFF.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1630411200">- Update to version 1.0
  * main.c
    + replaced 'GLIB_MAJOR_VERSION' with
    'GLIB_MINOR_VERSION' and 'glib_major_version'
    with 'glib_minor_version'
  * gui.c
    + setting '-GtkMenuBar-shadow-type' only for
    versions &lt; 3.20 (GTK-3 only)
    + if closing a file with unsaved cutpoints a
    dialog asks for discarding changes
    + replaced in 'cff_gui_css_load_from_data'
    'gtk_style_context_add_provider_for_screen'
    with 'gtk_style_context_add_provider'
    + changed priority in 'cff_gui_logwindow_color_set'
    from 'GTK_STYLE_PROVIDER_PRIORITY_APPLICATION' to
    '..._USER' (GTK-3 only)
    + changed tag color and font in 'textview' to
    GTK-2 'gtk_widget_modify_...' or
    GTK-3 'cff_gui_css_load_from_data'
    + in 'cff_gui_logwindow_color_parse' converting
    'rgb(r,g,b)' to '#rrggbb' (GTK-2 only)
    + popup in 'cff_gui_file_save' for selecting the
    encoder for soft cutting
    + may hang if log was set to 'debug'. So
    'g_main_context_invoke_full' in 'cff_gui_logwindow_cb'
    was removed, 'cff_gui_logwindow_mainthread' is now
    called every 5ms using 'g_timeout_add_full'
    + remove last '\n' from log string in 'cff_gui_logwindow_cb'
    + '_textview_scroll_to_iter' in 'cff_gui_logwindow_cb'
    was removed. Now down scrolling is done using the
    signal 'changed', and setting the new value in
    'cff_gui_logwindow_adjustment' with the function
    'gtk_adjustment_set_value'
    + the slider is now 'GtkScale'
    + using 'Cairo' instead of 'GdkDraw' (GTK-2 only)
  * ffmpeg.c
    + 'cff_ffmpeg_print_codecs_for_id': codecs separated
    by commas, last space in front of terminating ')'
    removed
    + softcut is de- and encoding frames at the cutpoint(s)
    + stream-sync starts copying packets if the timestamp
    is greater or equal than the cutpoint
    + test if bitstream filter 'mp4toannexb' is needed for
    encoding in 'cff_ffmpeg_get_frame_dts' (h.264 + h.265)
    + 'cff_ffmpeg_copy_open': if 'avformat_transfer_internal_
    stream_timing_info' failed, try '(st-&gt;oStream)-&gt;time_
    base = (st-&gt;iStream)-&gt;time_base' before 'av_stream_get_
    codec_timebase'
    + if the first DVB subtitle frame should clear a subtitle,
    it is dropped (no subtitle shown yet). This will also
    compute the right stream duration
  * tools-gtk.c
    + renamed 'guitl_' to 'cff_guitl_'
    + moved 'cff_gui_beep' to 'cff_guitl_beep'
    + 'cff_guitl_window_destroy' sets 'gWindata.topwin'
    to NULL, if the main window is not on the top
    + 'cff_guitl_dialog_icon' sets 'gWindata.topwin' to
    'gWindata.mainwin', is the top window is NULL
    + changed signal 'size-allocate' in 'cff_guitl_window_setup'
    to 'configure-event'</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1631188800">- Update to version 1.0.1
  * gui.c
    + if encoding (softcut enabled) has finished, the text in the
    progressbar may not disappear. Fixed!
  * ffmpeg.c
    + if saving a file with softcut more than once the automatic
    enabling of 'h264_mp4toannexb' or 'hevc_mp4toannexb' fails.
    Fixed!
    + in 'cff_ffmpeg_copy_write_frame_softcut' the PTS assignment
    may wrong, 'pts -= pts_diff' followed by 'pts = pptr-&gt;dts'.
    Fixed!
    + 'av_packet_int' replaced with 'av_packet_alloc'
    + 'av_packet_ref' replaced with 'av_packet_clone'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1657713600">- Update to version 1.0.2:
  * gui.c:
    + changed in 'cff_gui_dialog_progress_callback'
    Gui_PRIORITY_REDRAW to G_PRIORITY_HIGH_IDLE
    + changed in 'cff_gui_logwindow_add_timeout'
    G_PRIORITY_HIGH to GTK_TEXT_VIEW_PRIORITY_VALIDATE
    + if the first character of the log string is '\r',
    the last line will be overwritten (Last message
    repeated x times). See 'cff_gui_logwindow_mainthread'
    and 'cff_gui_logwindow_cb'
  * ffmpeg.c:
    + works with FFmpeg version 5.0.1
    + in 'cff_ffmpeg_get_image_format_names' looking
    for the codec_id (TIFF, GIF ...) if the encoder
    has not the mime type 'image'
    + test in 'cff_ffmpeg_get_encoder_names' whether
    the encoder supports the pixel format of the input
    + removed in 'cff_ffmpeg_encoder_new' the options
    for 'b-frames', 'gop' and 'sc_threshold'
    + in 'cff_ffmpeg_copy_softcut' forgot to free the
    frame if packet allocation fails
    + 'level &amp;= 0x00FF' in 'cff_ffmpeg_log_callback'
    + get the parent class in 'cff_ffmpeg_log_callback'
    with 'avr' may crash. Right way is using 'ptr'
    + 'skip_prefix' in 'cff_ffmpeg_log_callback' to
    append the next string to the current
    + compare the string in 'cff_ffmpeg_log_callback'
    to the previous one. If equal throw the message
    "Last message repeated x times"
    + some improvements in'cff_ffmpeg_get_frame' for
    proper decoding. Sometimes a frame may report a
    wrong picture type, or a key frame which is not
    at this position, or the frame is not correct
    displayed.
  * ffmpeg.h: including 'libavcodec/bsf.h' (FFmpeg 5.0.1)
- Drop lang package Recommends, no longer needed, nor wanted.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1724760000">- Update to 1.3 to add support for FFmpeg 7. Check the ChangeLog
  file for the full list of changes.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1724760001">- Force ffmpeg-6 library use to fix build</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1724760002">- revert to ffmpeg-7</changelog>
</package>
<package pkgid="1236548616e42bacb4dd902bd96e44dac12c2cbb792e8e39252bb986e2798f6d4a9d8bccd993d207b1160a579856a301fa0c1b3d4497ab5ed0ca0f9db81d26a4" name="cvise" arch="x86_64">
  <version epoch="0" ver="2.10.0+git.20240814.7d0ebf0" rel="bp160.1.13"/>
  <changelog author="mliska@suse.cz" date="1681732800">- Update to version 2.7.0+git.20230417.6b558fe:
  * Handle cyclic namespace include that leads to inf. recursion.
  * Shorten pass names that use max_transforms property.
  * Fix clang warning:
  * build: factory out common flags and use -pedantic
  * Simplify dump output for BinaryState.
  * Revert "drop unneeded -Wno-error=mismatched-new-delete"
  * drop unneeded -Wno-error=mismatched-new-delete</changelog>
  <changelog author="mliska@suse.cz" date="1682683200">- Update to version 2.8.0+git.20230428.7aaa251:
  * Bump to 2.8.0.</changelog>
  <changelog author="martin.liska@hey.com" date="1694692800">- Update to version 2.8.0+git.20230914.9f237d6:
  * CMake: port to find_package(Python3)
  * CMake: add minimal version 3.14
  * Moderninze to Python 3.8 and remove Leap CI.
  * Test LLVM 18 again.
  * LLVM nightly: move back to version 17
  * fix pip installation
  * Revert previous change and use Ubuntu 23.04.
  * CI: remove 2 missing LLVM deps for version 18
  * Fix CI.
  * Bump LLVM nightly build to LLVM 18.
  * LLVM 16: add missing header file for toString
  * Remove LLVM 12 from testing matrix as it is removed in TW.
  * Add build to ignored list of folders.
  * LLVM 17: add workaround for a Werror
  * Stop building against LLVM 11 due to a known LLVM issue:
  * Fix build with LLVM 17.
  * LLVM 17: port enum value to c++23.
  * Fix typo in the previous revision for LLVM 17.
  * Fix current LLVM tip branch.
  * Revert a leftover hunk.</changelog>
  <changelog author="martin.liska@hey.com" date="1699272000">- Update to version 2.9.0+git.20231106.cc76e98:
  * Bump to 2.9.0.
  * Support LLVM 18: changes in ElaboratedTypeKeyword
  * add .vscode to .gitignore
  * add --shell argument
  * LLVM 18: port to latest master
  * add LLVM 17 CI target
  * disable -Werror=non-template-friend in llvm/ADT/PagedVector.h:215:59</changelog>
  <changelog author="martin.liska@hey.com" date="1709726400">- Update to version 2.9.0+git.20240306.f0e1387:
  * Fix CI
  * Fix CI
  * CI: install ruff
  * Add TW docker step
  * Add Ruff as a separate job
  * Start using Ruff
  * Reformat the code with Ruff formatter
  * CI refactor
  * Reformat CI configs
  * Simplify CI openSUSE matrix
  * Fix CI package
  * Add missing package for mold action
  * Use mold GH action
  * CI: use checkout@v4
  * Support changes function signature in IncludesPPCallbacks::InclusionDirective
  * Test agains LLVM 19
  * Fix flake8 error:
  * CMakeLists changes to fix macOS build:
  * Fix LLVM 18 build error:
  * Add clang version string to clang_delta --version
  * Disable for now deprecated declarations Werrors
  * Revert "Add CI hack for LLVM nightly"
  * Add CI hack for LLVM nightly
  * cvise.py: call shell vial `/usr/bin/env` indirection instead of `/bin`</changelog>
  <changelog author="martin.liska@hey.com" date="1710331200">- Update to version 2.10.0+git.20240313.c860649:
  * Bump to 2.10.0</changelog>
  <changelog author="martin.liska@hey.com" date="1713873600">- Update to version 2.10.0+git.20240415.00bdd8c:
  * format: run ruff
  * Implement a stopping threshold
  * Revert removal of restore_mode
  * format: use Ruff
  * Make CVise understand files in a filesystem tree
  * Refactor testing.py to pathlib module
  * Write pass statistics and test-case to --log-file as well
  * Show logs on stdout only when log-file arg is not provided
  * Fixed ruff's warning about too  many blank lines
  * Removed basicConfig &amp; fixed working of --log-file arg
  * Drop -Wno-error=deprecated-declarations option
  * fix deprecation warnings
  * CI: Set default to LLVM 18</changelog>
  <changelog author="martin.liska@hey.com" date="1714996800">- Update to version 2.10.0+git.20240506.fd50de2:
  * Manipulate with tempfiles after they are closed (#139)
  * Fix --print-diff after pathlib has been used
  * Apply Ruff format
  * Reduce logging output verbosity
  * Fix Ruff linter issues
  * Stick to Ubuntu 23.10
  * Ensure that clang delta is also compiled with C++17 on Windows
  * Also instruct to install chardet on Windows</changelog>
  <changelog author="martin.liska@hey.com" date="1719489600">- Update to version 2.10.0+git.20240603.16a34b2:
  * Fix fallout from ClassTemplateSpecializationDecl::getTypeAsWritten
  * Remove uses of ClassTemplateSpecializationDecl::getTypeAsWritten (#143)
  * Fix deprecated decl (#141)
  * Move to ubuntu:rolling again
  * Add VSCode settings file
  * Add Dockerfile for LLVM tip builds</changelog>
  <changelog author="martin.liska@hey.com" date="1723636800">- Update to version 2.10.0+git.20240814.7d0ebf0:
  * Catch timeout from Pebble for Python 3.10 and older (#148)
  * Revert "Run on Ubuntu 24.04"
  * Run on Ubuntu 24.04
  * Revert "Try to remove touch command"
  * Try to remove touch command
  * Use llvm 20 as a nightly target</changelog>
</package>
<package pkgid="a6e39524971e68b4f8b9d9fd08fcdc345eb700a4da46d02eaffa9bc08ff371399e1d322d2052c85d0b2ea3a249bdeda00fdc53d67de152c5c7e59be0047e425e" name="cvm-guest-attestation" arch="x86_64">
  <version epoch="0" ver="20240316.b613bcd" rel="bp160.1.13"/>
  <changelog author="olaf@aepfle.de" date="1712577600">- Initial version 20240316.b613bcd (jsc#PED-6307)
  with cvm-guest-attestation.patch</changelog>
</package>
<package pkgid="5a5f378a752e720cfb7a1477f278c4898cbc319a82170731e2fdaafb52520193d6529a661b35ab1936955c0b6227125c21f90eceed2fbf66786edf0d63c6d95a" name="cvm-guest-attestation-devel" arch="x86_64">
  <version epoch="0" ver="20240316.b613bcd" rel="bp160.1.13"/>
  <changelog author="olaf@aepfle.de" date="1712577600">- Initial version 20240316.b613bcd (jsc#PED-6307)
  with cvm-guest-attestation.patch</changelog>
</package>
<package pkgid="ce478ae10e7b803ff6883cdc435893972932c120deeff7da946f95db7f1ba52e72882b26eae2c73b31df874c0950b7213c763dda0f15e32b65f03c1e10f58d5e" name="cvs" arch="x86_64">
  <version epoch="0" ver="1.12.13" rel="bp160.1.12"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tchvatal@suse.com" date="1497528000">- Update bit with spec-cleaner
- Use proper url for docu and do not recompress:
  * OpenSourceDevWithCVS_2E.tar.gz instead of bz2
- Add systemd socket service to replace the xinetd service</changelog>
  <changelog author="mpluskal@suse.com" date="1497528001">- Update dependencies:
  * enable kerberos
  * explicitly require ssh</changelog>
  <changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>
  <changelog author="kukuk@suse.com" date="1518177600">- Don't create unused xinetd directory</changelog>
  <changelog author="josef.moellers@suse.com" date="1537358400">- Upgrade to 1.12.13
  This version fixes two security vulnerabilities in the zlib
  compression libraries (see CERT vulnerabilities advisories
  [#238678] &amp; #680620 for more info), several issues involving
  potential data-loss on heavily loaded systems, some minor
  potential crashes, hangs, and several minor annoyances in CVS
  client and server behavior.
  See also:
  https://savannah.nongnu.org/forum/forum.php?forum_id=4046
  http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/NEWS?revision=1.341</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650542400">- add compile-with-Wformat-security.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1720353600">- add %autoreconf in subdir cvslock-0.2 to support gcc-14</changelog>
</package>
<package pkgid="c41d865f41715764843760688ce22f6cd844dd8b53744fe68900e5f1f2acb82bddf21b82ba86a420e1b6f50d8961349a8b4c5902bb9fc1cc3a731b08d5a6c82b" name="cvs-doc" arch="noarch">
  <version epoch="0" ver="1.12.13" rel="bp160.1.12"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tchvatal@suse.com" date="1497528000">- Update bit with spec-cleaner
- Use proper url for docu and do not recompress:
  * OpenSourceDevWithCVS_2E.tar.gz instead of bz2
- Add systemd socket service to replace the xinetd service</changelog>
  <changelog author="mpluskal@suse.com" date="1497528001">- Update dependencies:
  * enable kerberos
  * explicitly require ssh</changelog>
  <changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>
  <changelog author="kukuk@suse.com" date="1518177600">- Don't create unused xinetd directory</changelog>
  <changelog author="josef.moellers@suse.com" date="1537358400">- Upgrade to 1.12.13
  This version fixes two security vulnerabilities in the zlib
  compression libraries (see CERT vulnerabilities advisories
  [#238678] &amp; #680620 for more info), several issues involving
  potential data-loss on heavily loaded systems, some minor
  potential crashes, hangs, and several minor annoyances in CVS
  client and server behavior.
  See also:
  https://savannah.nongnu.org/forum/forum.php?forum_id=4046
  http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/NEWS?revision=1.341</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1650542400">- add compile-with-Wformat-security.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1720353600">- add %autoreconf in subdir cvslock-0.2 to support gcc-14</changelog>
</package>
<package pkgid="e276c31a84078c692be8b3666bb588f00e1d7955c072ec1e9ac2b1d8db01f90ec68f0c48c2ebf46638777ec2b08dd96011e9c9ea3cb831917db95f0f54ef5b9e" name="cvsps" arch="x86_64">
  <version epoch="0" ver="2.1" rel="bp160.1.12"/>
  <changelog author="schwab@suse.de" date="1220443200">- Fix broken cmakefile.
- Add support for commitid.</changelog>
  <changelog author="mvyskocil@suse.com" date="1357128000">- update to 3.4 with fast-export dumping
  * maintained by Eric S. Raymond
  * more focused on --fast-export mode only
  * now always runs in what used to be csv_direct mode
  * it's not required to run csvps in CVS checkout directory
  * local cvs commands are no longer used
  * the old-style non-fast-export reporting mode is deprecated and
    may be dropped in the future
  * removed the --bkcvs and -x options
  * new --fast-export option allows dumping the history as a git
    import stream
  * the -A now works in the expected way
  * add -R option that writes out a revision map
  * incorporates Heiko Voight's patch for solving some time-skew cases
  * check README and NEWS for details
- obsoleted files and patches
  * bk-cvs.mail - who is interested in BitKeeper/CSV kernel trees?
  * cvsps-bk-cvs.mail - or the ability to import BitKeeper logs?
  * fixes.tar.bz2 - they are upstream
  * CMakeLists.txt - plain make is recommended
  * commitid.diff - already upstream</changelog>
  <changelog author="mvyskocil@suse.com" date="1357905600">- update to 3.7
  * bug fix in timezone handling (thanks to Chris Rorvick).
  * major performance gain in the CVS client code (thanks to
    Sergei Trofimovich).
  * third field in an author entry is now interpreted as if it
    were TZ.
  * remove the --test-log option now that cvsps has its own test suite.
  * new --reposurgeon option for passing reference-lifting hints
    to reposurgeon.</changelog>
  <changelog author="mvyskocil@suse.com" date="1358251200">- update to 3.8
  * fix buggy generation of the revision-map file (thanks to Chris Rorvick).
  * don't convert .cvsignores by default, we have field reports of collisions.</changelog>
  <changelog author="pgajdos@suse.com" date="1358769600">- update to 3.9
  * Added -i option for generating incremental fast exports.</changelog>
  <changelog author="pgajdos@suse.com" date="1359460800">- update to 3.10
  * Make the behavior of a second -d option match the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1366804800">- conflicts with cvsps2 [bnc#809800]</changelog>
  <changelog author="pgajdos@suse.com" date="1367928000">- downgrade to 2.1 [bnc#809800]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="50546fb4feeedb7141025314778cc3194b22c87c43b52175f8276a2359ff083d56668458fc1b8d9e2bf56c38a1a7c0d03606dc45df3c680de7446132921e08b2" name="cxref" arch="x86_64">
  <version epoch="0" ver="1.6e" rel="bp160.1.8"/>
  <changelog author="pth@novell.com" date="1294747200">- Initial package</changelog>
  <changelog author="pth@suse.de" date="1341576000">- Update to 1.6d:
  Bug fixes
    Updated for latest version of autoconf.
    Allow structure initialisers to have multiple components
    (e.g. a.b=1).
    Remove gcc warning messages.
    Change Makefile for better comptibility with FreeBSD.
- Explicit require automake, autoconf and libtool.
- Repackage as tar.xz.</changelog>
  <changelog author="pth@suse.de" date="1354017600">- Repackage as tar.bz2 so that it can build on older distibutions.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Update to 1.6e
  * see ChangeLog for details
- Cleanup spec file with spec-clener
- Use url for source
- Add gpg signature
- Update project url</changelog>
  <changelog author="pth@suse.de" date="1504699200">- Add allow_redirect_of_cxref_cpp_configure_output_in_postinst.patch from
  Debian.</changelog>
  <changelog author="pth@suse.de" date="1504785600">- Add cxref-new_float_types.patch from upstream to add new float types.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="372b0e40b315adc708206698a980c84e352ae021d1159e3831eea9870226c345a364c5e2b412602bf5b8fe3674a8446c6863bb7ad69d75ea00eda05240816670" name="cxxopts-devel" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="bp160.1.2"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1638619200">- Initial package (v3.0.0)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1665748800">- Update descriptions with limitations.
- Trim macros from URL: line (for copy-pasting with mouse).</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680868800">- update to 3.1.1:
  * Fixed version number in header.
  * Support for multiple long names for the same option (=
    multiple long aliases)
  * Add a `program()` function to retrieve the program name.
  * Added a .clang-format file.
  * Added iterator and printing for a ParseResult.
  * Cleanup exception code, add cxxopts::exceptions namespace.
  * Fix `arguments()` having no key for options that only have a
    short name.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 3.2.1:
  * Fix compilation with optional on C++20.
  * Fix unannotated fallthrough.
  * Fix sign conversion with Unicode output.
  * Don't initialize regex in static initialiser.
  * Fix incorrect integer overflow checks.
  * Change quote output to '' to match Windows.
  * Don't split positional arguments by the list delimiter.
  * Order help groups by the order they were added.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1744891200">- fix build with cmake 4 (boo#1239788) cxxopts-3.2.1-cmake4.patch</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1751371200">- fix build with gcc 15 ("Added missing header" below)
- update to 3.3.1:
  * Added missing version bump
  * Added missing header for GCC 15
  * Fix some CMake packaging problems
  * `as_optional`
  * `ParseResult::contains`
  * `std::filesystem` support
  * CMake 4 compatibility
- remove (is upstream):
  cxxopts-3.2.1-cmake4.patch</changelog>
</package>
<package pkgid="ec93893ec3ba2bf1a00ba0751fb40ca87d94bd81494feb027ed132338450f7af22c56fad89f40b48ad12d8eb72e4822ef0f8ce19a6c1c34f7460a056f6dc7462" name="cyanrip" arch="x86_64">
  <version epoch="0" ver="0.9.3.1" rel="bp160.1.12"/>
  <changelog author="zero mind &lt;zeromind@gmx.com&gt;" date="1678968000">- initial version</changelog>
  <changelog author="zero mind &lt;zeromind@gmx.com&gt;" date="1700654400">- update to release version 0.9.2
  * ReplayGain 2.0 scanning and tagging
  * Preemphasis detection via both TOC and subchannel
  * Automatic deemphasis
  * CUE file writing
  * Repeat ripping mode for affirmation or badly damaged discs
  * Tagging improvements (setting the media_type tag)
  * Logfile reorganization and checksumming
  * Windows compatibility improvements
  * Migration to new FFmpeg 6.0 APIs</changelog>
  <changelog author="zero mind &lt;zeromind@gmx.com&gt;" date="1717502400">- update to release version 0.9.3
  * FFmpeg 7.0 compatibility
  * Added an option to specify the image size for cover lookup
  * When only printing info, do not require an offset to be specified with -I
  * Fix default pregap action setting for tracks after the first
  * Better error handling</changelog>
  <changelog author="zero mind &lt;zeromind@gmx.com&gt;" date="1717588800">- update to release version 0.9.3.1
  * fix compilation on certain platforms</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1729684800">- Cleanup spec file</changelog>
</package>
<package pkgid="1bcf94c0fd53cba273f3e6872f7c8844ccb85ae64f624786cbe356a4602a176bd2ee62c2296606e2ecd5304249a6c24276739d8317fc6eb6a2cf4af4ea5207dc" name="cyradm" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="bp160.1.14"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1673092800">- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro
  to ensure compatibility with the C standard one, which is
  expected by sub-components.</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1675598400">- update to version 2.5.17
  * Fixed: tools/git-version.sh did not need bash specifically
    (gh#cyrusimap/cyrus-imapd#3143)
  * Fixed: saved session reuse crash when TLS enabled for backend connections
    (gh#cyrusimap/cyrus-imapd#3191)
  * Fixed: XFER now recognises 3.4 and 3.5 backends
  * Fixed: memory leak during backend auth state cleanup
    (gh#cyrusimap/cyrus-imapd#3320)
  * Fixed: use-after-free segfault in mupdate-client
    (gh#cyrusimap/cyrus-imapd#3312)
- incorperating a lot of work from buschmann23@opensuse.org!
- added new packages libcyrus0 and perl-Cyrus-Annotator
- enabled mailbox event notification
- enabled clamav support
- enabled SQLite support
- enablee and run unit tests
- prepared http support (using bcond; requires libical &lt; 3)
- deprecate BDB support: upstream drops it with 3.0
- deprecate SNMP support: upstream drops it with 3.4
- removed OpenSLP support
- configuration changes
  * add some resource control settings to cyrus-imapd.service file
    + TasksMax=2048
    + LimitNOFILE=10000
    + Restart=on-failure
    + RestartSec=5
- create runtime directory structure under /run/cyrus-imapd with
  systemd-tempfiles instead of unit RuntimeDirectory. This makes
  it possible to store some files and folders on ephemeral storage
- update default shipped config files to use /run/cyrus-imapd
- dropped package conflicts for *cyrus-*-kolab; those packages weren't
  build in a really, really long time, since they were obsoleted
  with cyrus-imapd 2.4.
- removed patches now included upstream:
  - cyrus-imapd-2.4.19_autocreate-0.10-0.patch
  - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
  - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch
- other dropped patches / unsupported, obsolete, out of maintenance:
  - cyrus-imapd-2.4.17_openslp.patch
  - cyrus-imapd-2.4.17_pie.patch
- rebased patches:
  * cyrus-imapd-2.3.16_syslog-facility-doc.patch as
    cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.4.17_db6.patch as
    cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.4.19-implicit_definitions.patch as
    cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as
    cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as
    cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- various spec cleanups
  * use conditional builds with bcond
  * remove SysV init scripts
  * remove conditionals for old openSUSE releases
  * remove unnecessary dependencies
- Changelog of prior 2.5.x releases:
  * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- update to version 2.5.16
  * Fixed: XFER now correctly distinguishes between 2.3.x releases
  * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends
  * Fixed: XFER now syslogs a warning when it doesn’t recognise the
    backend Cyrus version
- update to version 2.5.15
  * Fixed CVE-2019-19783: When creating a missing mailbox as part of
    a sieve ‘fileinto’ directive, lmtpd would create it as administrator,
    bypassing ACL checks. lmtpd creates missing mailboxes as part of
    a sieve ‘fileinto’ directive if:
  * (2.5+) the anysievefolder option is enabled (default: not), or
  * (3.0+) the sieve_extensions option has the ‘mailbox’ extension
    enabled (default: enabled) and the ‘fileinto’ directive contains
    the ”:create” argument
    Under these conditions, a user with the ability to upload a custom
    sieve script to their account could use it to create any valid
    mailbox on the server (with ACL inherited from the parent mailbox
    as usual). lmtpd no longer creates these mailboxes as administrator,
    so users may no longer use a ‘fileinto’ directive to create a mailbox
    they couldn’t create otherwise.
  * Fixed Issue #2913: errors are now logged when maxlogins_per_host,
    maxlogins_per_user, and popminpoll limits are reached (thanks Sergey)
- update to version 2.5.14
  * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
    inherit authentication from the previous request on the same connection
  * Can now build against ClamAV &gt;= 0.101 (thanks Christoph Moench-Tegeder)
  * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating
- update to version 2.5.13
  * Fixed CVE-2019-11356: buffer overrun in httpd
  * Fixed: ptloader, ptexpire and ptdump now honour the
    ptscache_db_path setting
- update to version 2.5.12
  * Fixed: cyr_virusscan now integrates with event notifications
    properly
  * Fixed: mailbox expunge event notifications no longer cause a crash
  * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db
  * Fixed Issue #2253: master now rejects unix domain listen paths
    that are too long
  * Fixed: smilint warnings for CYRUS-MASTER.mib fixed
    (thanks Fabrice Bacchella)
  * Fixed Issue #2177: backend connections no longer ignore STARTTLS
    failures (thanks Wolfgang Breyha)
  * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged
    entries
  * Fixed Issue #2221: dav_reconstruct no longer crashes given bad
    user id (thanks Wolfgang Breyha)
  * Fixed: tls_prune memory leak
  * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing
  * Fixed Issue #2199: recovery from mupdate failure now in correct
    order (thanks Michael Menge)
  * Fixed: backend connections no longer crash if no banner found
  * Fixed: backend connections no longer return success on certain
    types of failure
  * Fixed Issue #2185: squatter no longer tries to index non-IMAP
    mailboxes (thanks Wolfgang Breyha)
  * Fixed: special-use proxying in murder (thanks Wolfgang Breyha)
  * Fixed Issue #1090: send OK NIL to subsequent ID commands
  * Fixed Issue #1434: auth_pts will now error when given a too-long
    socket file name
  * Fixed Issue #1964: correctly detect when librt is needed
  * Fixed Issue #1967: tell EXISTS count earlier when needed
  * Fixed: memory leak in httpd DAV support
- update to 2.5.11
  * Better integration with updated documentation/website infrastructure
  * The “timeout” option is now also used as an upper limit in minutes
    for IDLE connections. A new option “imapidletimeout” can be used to
    set an idle-specific timeout instead. (Thanks Philipp Gesang.)
  * Fixed: invalid free and memory leak in httpd
  * Fixed: services no longer exit when client disconnects before accept()
  * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported
  * Fixed Issue #67: better support for dots in localparts
    (thanks Jeroen van Meeuwen)
  * Fixed: don’t assume LIST section options when proxying
  * Fixed: SEARCH crash on some platforms
  * Fixed: ensure directory hierarchy created when renaming empty mailboxes
  * Fixed Issue #1742: reconstruct no longer crashes when cache records
    are too short
  * Fixed Issue #11: LIST RETURN options now work properly with virtdomains
  * Fixed Issue #44: http proxy no longer crashes on starttls
    (thanks Wolfgang Breyha)
  * Fixed Issue #1752: no longer crash on notifyd mailto method
  * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER
    (thanks Дилян Палаузов)
  * Fixed Issue #368: SETACL with invalid rights characters now returns BAD
  * Fixed Issue #46: renames to remote destinations now work correctly
  * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations
  * Fixed Issue #1872: no longer crash on bad SSL session ids
  * Fixed Issue #1931: missing mysql/mariadb dependencies now reported
    by configure
  * Fixed: various memory and resource leaks (thanks Дилян Палаузов)
- update to 2.5.10
  * master(8) now supports a “-V” (print version and exit) option
  * Fixed Issue #34: imapd in murder no longer crashes on MOVE to
    nonexistent folder (thanks Wolfgang Breyha)
  * Fixed Issue #15: replication no longer crashes on mailboxes that
    are too old to be replicated. Instead, it fails with an error and
    logs a warning that they need to be reconstructed
  * Fixed Issue #45: extended LIST doesn’t lose options when proxied
    to backend
  * Fixed task 142: extended LIST response no longer missing
    \HasNoChildren flag on last mailbox
  * Fixed Issue #49: httpd no longer crashes with assertion failure on
    shutdown after CardDAV has been used
  * Fixed Issue #31: the ldap_timeout setting is now used correctly
  * Fixed bugzilla #3909: idled(8) no longer runs as root
    (thanks Carlos Velasco)
  * Fixed Issue #5: renaming folder with annotations no longer increases
    annotation quota usage
  * Fixed: URLFETCH crash when section is NULL
  * various build system improvements
- update to 2.5.9
  * ipurge(8) now supports a “-n” (dry run) option
    (thanks Valentin Vidic)
  * Fixed: imapd now proxies LIST (special-use) to backend
    (thanks John Capo)
  * Fixed: sync_client handles its shutdown file more reliably
    (thanks John Capo)
  * Fixed: httpd no longer crashes with assertion failure on
    shutdown after CalDAV has been used
  * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data
  * Fixed Issue #5: twoskip database I/O performance in unlocked foreach
  * various build system improvements
- udpate to 2.5.8
  * Allow replicated backends in a discrete Murder to both
    actively participate in the Murder.
  * When choosing between ANNOTATEMORE and METADATA, favour what the client used.
  * cyr_dbtool(8) now supports improved_mboxlist_sort (-M)
  * Fixed: master on pselect systems no longer chokes on repeated interrupts
    (thanks Jens Erat and team)
  * Fixed: better iOS CalDAV support (don’t announce VPOLL)
  * Fixed: backported version detection code to detect future versions
  * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations
    (thanks Wolfgang Breyha)
  * Fixed: replication/XFER of mailbox names containing ‘@’
  * Fixed: METADATA and GETMETADATA pattern/list recognition
  * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate
    fails during mailbox rename
  * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee)
  * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf
    (thanks Simon Matter)
  * Fixed task 227: service processes no longer crash with ‘-T 0’ argument
    (thanks Ian Batten and Jens Erat)
  * various build system fixes
- update to 2.5.7
  * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
    range checks
  * Support for legacy SSLv2 and SSLv3 protocols has been removed
  * Support for TLS compression has been removed (thanks Ondřej Surý)
  * Fixed bug #3908: crash in ctl_mboxlist -m
  * Fixed: setrlimit error on startup
  * Fixed task 216: don’t break quotas when transferring mailboxes between
    backends
  * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch)
  * Fixed: autocreate_sieve now uses sievedir setting correctly
  * Fixed bug #3907: cyradm --cadir option is now called --capath, and works
    (thanks Leena Heino)
  * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE
  * Fixed: pop3d no longer applies plaintextloginpause to TLS connections
  * Fixed bug #3866: lmtpd now consults local mailboxes.db first,
    before mupdate master (thanks Michael Menge)
- update to 2.5.6
  * tls_required (default: 0). Set this to 1 to require a TLS session for ALL
    authentications, not just plain ones (thanks Carlos Velasco)
  * new cyradm options
    + –tlskey keyfile: use certificate with keyfile to authenticate with server
    + –notls: disable StartTLS negotiation
    + –cafile cacertfile: Use CA certificate file to validate server certificate
    + –cadir cacertdirectory: Use CA certificate directory to validate server certificate
  * Fixed: cyr_synclog checks its arguments more strictly to avoid producing
    junk sync loc entries
  * Fixed: cyradm metadata implementation cleaned up and output made consistent
    (thanks Leena Heino)
  * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min
    (thanks Carlos Velasco)
- update to 2.5.5
  * Security fix: compiling with –enable-autocreate no longer allows arbitrary
    mailbox creation
  * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes
    (thanks Chris Stromsoe)
  * Fixed lock management over rename (thanks Thomas Jarosch)
  * Miscellaneous other fixes (thanks Thomas Jarosch)
- update to 2.5.4
  * Security fix: handle urlfetch range starting outside message range
  * Fixed bug: better error messages when reading corrupted twoskip databases
  * Fixed bug: treat autocreate_quota_messages:0 as unlimited
  * Fixed task 203: make autocreate_quota:0 work as documented
- update to 2.5.3
  * Fixed task 183: don’t crash on login when event notifications are enabled
- update to 2.5.2
  * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn
  * Improved consistency of event notification parameters
  * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak)
  * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes
  * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data
  * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests
- update to 2.5.1
  * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future
  * Fixed: XFER deletes source mailbox less aggressively, avoiding data
    loss under pathological conditions
  * Fixed task 163 : XFER no longer bails out on header CRC mismatch
  * Fixed task 117 : now error out silently on non-TLS connections to
    services with implicit TLS
  * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to
    shared folders (Thanks Norbert Warmuth)
  * Fixed task 165 : xfer no longer fails due to bad version comparison
  * Fixed xfer bug: version 2.5 is now detected properly
  * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013
    (Thanks Leena Heino)
  * Fixed task 116 : LIST now correctly handles domains starting with “inbox.”
  * Fixed task 120 : admin users can now SETANNOTATION correctly
  * Fixed task 118 : imapd no longer crashes when selected mailbox is listed
  * Fixed task 156 : LMTP no longer incorrectly rejects messages
    delivered using ‘deliver’
  * Fixed task 76 : lmtpd no longer crashes when delivering to a shared
    mailbox (Thanks Leena Heino)
  * Fixed quota bug: no longer crash when setting quotas on shared
    folder hierarchies
  * Fixed compilation problem on Solaris 10 (Thanks Leena Heino)
  * Fixed bug: QuotaChange event notification now always includes
    maxMessages parameter
  * Fixed bug: event notifications now include paths for shared folders
  * Fixed bug: GETMETADATA now handles mailbox patterns correctly
  * Various fixes to compiling and tool chains
  * changes to cyradm
    + createmailbox command now accepts –specialuse flag if server
    supports CREATE-SPECIAL-USE
    + listmailbox command now returns special-use attribute if
    server supports SPECIAL-USE
    + listmailbox command now accepts –specialuse flag to list only
    mailboxes with special-use attribute
    + cyradm now uses LIST and REMOTE rather than RLIST if server
    supports LIST-EXTENDED
    + mboxconfig now accepts –private flag to switch from default
    shared to private version of an annotation
    + getmetadata: new command
    + setmetadata: new command
    + Cyrus::IMAP::Admin::getinfo now returns a different data structure
    to support the above
    + Cyrus::IMAP::Admin new ACL flag for modifying annotations
- update to version 2.5.0
  * Underscores (the _ character) are no longer allowed in the START,
    SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with
    configuration options in imapd.conf(5) being prefixed by service
    names and an underscore (_) character.
  * Extended Quota Types: New ways to restrict resource usage:
    Number of Folders, Number of Messages, Number of Annotations
  * CalDAV and CardDAV Support
  * Support for RFC 5464: IMAP METADATA
  * Event Notifications
  * The database format for mailboxes.db has been upgraded, adding a
    new mailbox type for deleted mailboxes. A key-value storage format
    is used, allowing for faster and better parsing of mailboxes.db,
    more granular updates to runtime environments, and more sustainable
    future upgrades.
  * New database format twoskip
  * Allowing Undefined Annotations
  * Catchall Mailbox for LMTP
  * Option Name Changes for autocreate: The options related to automatic
    creation of user mailboxes and sub-folders (aka. autocreate) have
    been changed to hold a prefix of autocreate_.
  * The default for the imapd.conf(5) configuration option delete_mode
    has changed from immediate to delayed.
  * The default for the imapd.conf(5) configuration option expunge_mode
    has changed from default to delayed.
  * Configuration option names for LDAP SSL/TLS configuration in
    imapd.conf(5) have been changed.
  * Configuration option names for SSL/TLS configuration in imapd.conf(5)
    have been changed to better reflect how they are used, as enhancements
    would otherwise create great confusion.
  * New Options for tls_*</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750400">- Update to version 3.8.2:
  * Major version jump, reference upstream changelog:
    https://www.cyrusimap.org/dev/imap/download/release-notes/index.html
- Drop no longer applicable patches:
  * cyrus-imapd-2.4.22-perl-5.36.patch
  * cyrus-imapd-2.4.22-recognize-new-backends.patch
  * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- Add refreshed patch:
  * cyrus-imapd-3.8.2_syslog-facility-doc.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750401">- Use correct libexecdir</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750402">- Use upstream configuration files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712923200">- Build with PCRE2, resolve segfault when querying mailboxes</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- update to version 3.8.4 (bugfix release)
  * Fixed Issue #4932: LITERAL+ broken in mupdate
  * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded
  * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica
- update to version 3.8.3 (security fix release)
  * Fixed CVE-2024-34055</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328001">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
</package>
<package pkgid="e49154d4d77e8bfdecd944f6bfc5a507911ac55e67e83876ed1e8fd945dfc4baef6767d805e988ec9b28eb4dc088815b3a323a3f405c9961caed371da1ca3d58" name="cyradm" arch="x86_64">
  <version epoch="0" ver="3.8.6" rel="bp160.1.1"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1745841600">- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from
  cyrus to root (bsc#1241536)
  Adapt backup-cyrus.service to run as user cyrus:mail</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1748347200">- update to version 3.8.5 (bugfix release)
  * Fixed Issue #5029: check for unexpected extra tiny-tests directories
  * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases
  * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов)
  * Fixed Issue #5009: various portability warnings and nits
  * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов)
  * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars
  * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me"
  * Fixed Issue #5047: proxying UID SEARCH
- rebased patches:
  - cyrus-imapd-3.8.2_syslog-facility-doc.patch
  + cyrus-imapd-3.8.5_syslog-facility-doc.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1752580800">- update to version 3.8.6 (bugfix release)
  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
  Desynchronization using Opportunistic TLS (bsc#1246165)
  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root
  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
  * Fixed issue #5424: recognise service-specific SASL options in
    ``cyr_info conf-lint``
  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
    Breyha)
  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1752840000">- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1753790400">- Only BuildRequire systemd-rpm-macros instead of systemd
  to reduce unneeded OBS rebuilds</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1762430400">- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd
  (bsc#1251788)
  Remove var-run.mount from Requires and After</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1781092800">- Adapt license</changelog>
</package>
<package pkgid="05a41ae2a777d1b53cb9ed90151e7e25aa5b39f90e4486089d4e376cd045ba77c3d522fd46734a2fee03357ad4c0e1f63d6ebeced0d25d9b606a7d1fba1b4b87" name="cyreal-alice-fonts" arch="noarch">
  <version epoch="0" ver="2.003" rel="bp160.1.9"/>
  <changelog author="lazy.kent@opensuse.org" date="1342785600">- Initial package created - 1.010.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1348574400">- New font packaging scheme.</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1674129600">- Update to v2.003
- Package OTF instead of TTF font</changelog>
</package>
<package pkgid="3a95331d007952e73138067c3021be6458b774dcd3cfd000d2aba53b34cb563993f21d9bf7240716763675f3b272b8884254e6921351a74e3da1d23db8636a7c" name="cyreal-lora-fonts" arch="noarch">
  <version epoch="0" ver="3.005" rel="bp160.1.9"/>
  <changelog author="lazy.kent@opensuse.org" date="1342785600">- Initial package created - 1.000.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1348574400">- New font packaging scheme.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1404216000">- Update to 1.014.
  * Add cyrillic glyphs.</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1628856000">- Update to v2.202
  * Package OTF files instead of TTF
  * Update URL, summary, description
  * Package documentation
  * Use spec-cleaner</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1649419200">- Update to v3.002
  * added SemiBold to the full weight run
  * Fixes Italic and Weight axes confusion in VF
  * Includes Tabular Figures
  * ttfautohinted
  * Fixes naming scheme issue #30
  * Fixes #25
- Additionally package weights: Medium, SemiBold
- Change source URLs</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1649505600">- Fixed because upstream unexpectedly changed the layout
  of the source archive</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1655899200">- Update to v3.003
  * No changelog available</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1674129600">- Update to v3.005
  * added pre-1945 Bulgarian orthography support
- Remove the _service file</changelog>
</package>
<package pkgid="5263a766b9d480dcb0f3c8a8172554a966eb7b88120299da6752b08c0e7cbdb9267c62699a91384a70772e27164962d7ed0ec4a2edd02d1102bd112279eff15e" name="cyrus-imapd" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="bp160.1.14"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1673092800">- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro
  to ensure compatibility with the C standard one, which is
  expected by sub-components.</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1675598400">- update to version 2.5.17
  * Fixed: tools/git-version.sh did not need bash specifically
    (gh#cyrusimap/cyrus-imapd#3143)
  * Fixed: saved session reuse crash when TLS enabled for backend connections
    (gh#cyrusimap/cyrus-imapd#3191)
  * Fixed: XFER now recognises 3.4 and 3.5 backends
  * Fixed: memory leak during backend auth state cleanup
    (gh#cyrusimap/cyrus-imapd#3320)
  * Fixed: use-after-free segfault in mupdate-client
    (gh#cyrusimap/cyrus-imapd#3312)
- incorperating a lot of work from buschmann23@opensuse.org!
- added new packages libcyrus0 and perl-Cyrus-Annotator
- enabled mailbox event notification
- enabled clamav support
- enabled SQLite support
- enablee and run unit tests
- prepared http support (using bcond; requires libical &lt; 3)
- deprecate BDB support: upstream drops it with 3.0
- deprecate SNMP support: upstream drops it with 3.4
- removed OpenSLP support
- configuration changes
  * add some resource control settings to cyrus-imapd.service file
    + TasksMax=2048
    + LimitNOFILE=10000
    + Restart=on-failure
    + RestartSec=5
- create runtime directory structure under /run/cyrus-imapd with
  systemd-tempfiles instead of unit RuntimeDirectory. This makes
  it possible to store some files and folders on ephemeral storage
- update default shipped config files to use /run/cyrus-imapd
- dropped package conflicts for *cyrus-*-kolab; those packages weren't
  build in a really, really long time, since they were obsoleted
  with cyrus-imapd 2.4.
- removed patches now included upstream:
  - cyrus-imapd-2.4.19_autocreate-0.10-0.patch
  - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
  - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch
- other dropped patches / unsupported, obsolete, out of maintenance:
  - cyrus-imapd-2.4.17_openslp.patch
  - cyrus-imapd-2.4.17_pie.patch
- rebased patches:
  * cyrus-imapd-2.3.16_syslog-facility-doc.patch as
    cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.4.17_db6.patch as
    cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.4.19-implicit_definitions.patch as
    cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as
    cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as
    cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- various spec cleanups
  * use conditional builds with bcond
  * remove SysV init scripts
  * remove conditionals for old openSUSE releases
  * remove unnecessary dependencies
- Changelog of prior 2.5.x releases:
  * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- update to version 2.5.16
  * Fixed: XFER now correctly distinguishes between 2.3.x releases
  * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends
  * Fixed: XFER now syslogs a warning when it doesn’t recognise the
    backend Cyrus version
- update to version 2.5.15
  * Fixed CVE-2019-19783: When creating a missing mailbox as part of
    a sieve ‘fileinto’ directive, lmtpd would create it as administrator,
    bypassing ACL checks. lmtpd creates missing mailboxes as part of
    a sieve ‘fileinto’ directive if:
  * (2.5+) the anysievefolder option is enabled (default: not), or
  * (3.0+) the sieve_extensions option has the ‘mailbox’ extension
    enabled (default: enabled) and the ‘fileinto’ directive contains
    the ”:create” argument
    Under these conditions, a user with the ability to upload a custom
    sieve script to their account could use it to create any valid
    mailbox on the server (with ACL inherited from the parent mailbox
    as usual). lmtpd no longer creates these mailboxes as administrator,
    so users may no longer use a ‘fileinto’ directive to create a mailbox
    they couldn’t create otherwise.
  * Fixed Issue #2913: errors are now logged when maxlogins_per_host,
    maxlogins_per_user, and popminpoll limits are reached (thanks Sergey)
- update to version 2.5.14
  * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
    inherit authentication from the previous request on the same connection
  * Can now build against ClamAV &gt;= 0.101 (thanks Christoph Moench-Tegeder)
  * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating
- update to version 2.5.13
  * Fixed CVE-2019-11356: buffer overrun in httpd
  * Fixed: ptloader, ptexpire and ptdump now honour the
    ptscache_db_path setting
- update to version 2.5.12
  * Fixed: cyr_virusscan now integrates with event notifications
    properly
  * Fixed: mailbox expunge event notifications no longer cause a crash
  * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db
  * Fixed Issue #2253: master now rejects unix domain listen paths
    that are too long
  * Fixed: smilint warnings for CYRUS-MASTER.mib fixed
    (thanks Fabrice Bacchella)
  * Fixed Issue #2177: backend connections no longer ignore STARTTLS
    failures (thanks Wolfgang Breyha)
  * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged
    entries
  * Fixed Issue #2221: dav_reconstruct no longer crashes given bad
    user id (thanks Wolfgang Breyha)
  * Fixed: tls_prune memory leak
  * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing
  * Fixed Issue #2199: recovery from mupdate failure now in correct
    order (thanks Michael Menge)
  * Fixed: backend connections no longer crash if no banner found
  * Fixed: backend connections no longer return success on certain
    types of failure
  * Fixed Issue #2185: squatter no longer tries to index non-IMAP
    mailboxes (thanks Wolfgang Breyha)
  * Fixed: special-use proxying in murder (thanks Wolfgang Breyha)
  * Fixed Issue #1090: send OK NIL to subsequent ID commands
  * Fixed Issue #1434: auth_pts will now error when given a too-long
    socket file name
  * Fixed Issue #1964: correctly detect when librt is needed
  * Fixed Issue #1967: tell EXISTS count earlier when needed
  * Fixed: memory leak in httpd DAV support
- update to 2.5.11
  * Better integration with updated documentation/website infrastructure
  * The “timeout” option is now also used as an upper limit in minutes
    for IDLE connections. A new option “imapidletimeout” can be used to
    set an idle-specific timeout instead. (Thanks Philipp Gesang.)
  * Fixed: invalid free and memory leak in httpd
  * Fixed: services no longer exit when client disconnects before accept()
  * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported
  * Fixed Issue #67: better support for dots in localparts
    (thanks Jeroen van Meeuwen)
  * Fixed: don’t assume LIST section options when proxying
  * Fixed: SEARCH crash on some platforms
  * Fixed: ensure directory hierarchy created when renaming empty mailboxes
  * Fixed Issue #1742: reconstruct no longer crashes when cache records
    are too short
  * Fixed Issue #11: LIST RETURN options now work properly with virtdomains
  * Fixed Issue #44: http proxy no longer crashes on starttls
    (thanks Wolfgang Breyha)
  * Fixed Issue #1752: no longer crash on notifyd mailto method
  * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER
    (thanks Дилян Палаузов)
  * Fixed Issue #368: SETACL with invalid rights characters now returns BAD
  * Fixed Issue #46: renames to remote destinations now work correctly
  * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations
  * Fixed Issue #1872: no longer crash on bad SSL session ids
  * Fixed Issue #1931: missing mysql/mariadb dependencies now reported
    by configure
  * Fixed: various memory and resource leaks (thanks Дилян Палаузов)
- update to 2.5.10
  * master(8) now supports a “-V” (print version and exit) option
  * Fixed Issue #34: imapd in murder no longer crashes on MOVE to
    nonexistent folder (thanks Wolfgang Breyha)
  * Fixed Issue #15: replication no longer crashes on mailboxes that
    are too old to be replicated. Instead, it fails with an error and
    logs a warning that they need to be reconstructed
  * Fixed Issue #45: extended LIST doesn’t lose options when proxied
    to backend
  * Fixed task 142: extended LIST response no longer missing
    \HasNoChildren flag on last mailbox
  * Fixed Issue #49: httpd no longer crashes with assertion failure on
    shutdown after CardDAV has been used
  * Fixed Issue #31: the ldap_timeout setting is now used correctly
  * Fixed bugzilla #3909: idled(8) no longer runs as root
    (thanks Carlos Velasco)
  * Fixed Issue #5: renaming folder with annotations no longer increases
    annotation quota usage
  * Fixed: URLFETCH crash when section is NULL
  * various build system improvements
- update to 2.5.9
  * ipurge(8) now supports a “-n” (dry run) option
    (thanks Valentin Vidic)
  * Fixed: imapd now proxies LIST (special-use) to backend
    (thanks John Capo)
  * Fixed: sync_client handles its shutdown file more reliably
    (thanks John Capo)
  * Fixed: httpd no longer crashes with assertion failure on
    shutdown after CalDAV has been used
  * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data
  * Fixed Issue #5: twoskip database I/O performance in unlocked foreach
  * various build system improvements
- udpate to 2.5.8
  * Allow replicated backends in a discrete Murder to both
    actively participate in the Murder.
  * When choosing between ANNOTATEMORE and METADATA, favour what the client used.
  * cyr_dbtool(8) now supports improved_mboxlist_sort (-M)
  * Fixed: master on pselect systems no longer chokes on repeated interrupts
    (thanks Jens Erat and team)
  * Fixed: better iOS CalDAV support (don’t announce VPOLL)
  * Fixed: backported version detection code to detect future versions
  * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations
    (thanks Wolfgang Breyha)
  * Fixed: replication/XFER of mailbox names containing ‘@’
  * Fixed: METADATA and GETMETADATA pattern/list recognition
  * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate
    fails during mailbox rename
  * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee)
  * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf
    (thanks Simon Matter)
  * Fixed task 227: service processes no longer crash with ‘-T 0’ argument
    (thanks Ian Batten and Jens Erat)
  * various build system fixes
- update to 2.5.7
  * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
    range checks
  * Support for legacy SSLv2 and SSLv3 protocols has been removed
  * Support for TLS compression has been removed (thanks Ondřej Surý)
  * Fixed bug #3908: crash in ctl_mboxlist -m
  * Fixed: setrlimit error on startup
  * Fixed task 216: don’t break quotas when transferring mailboxes between
    backends
  * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch)
  * Fixed: autocreate_sieve now uses sievedir setting correctly
  * Fixed bug #3907: cyradm --cadir option is now called --capath, and works
    (thanks Leena Heino)
  * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE
  * Fixed: pop3d no longer applies plaintextloginpause to TLS connections
  * Fixed bug #3866: lmtpd now consults local mailboxes.db first,
    before mupdate master (thanks Michael Menge)
- update to 2.5.6
  * tls_required (default: 0). Set this to 1 to require a TLS session for ALL
    authentications, not just plain ones (thanks Carlos Velasco)
  * new cyradm options
    + –tlskey keyfile: use certificate with keyfile to authenticate with server
    + –notls: disable StartTLS negotiation
    + –cafile cacertfile: Use CA certificate file to validate server certificate
    + –cadir cacertdirectory: Use CA certificate directory to validate server certificate
  * Fixed: cyr_synclog checks its arguments more strictly to avoid producing
    junk sync loc entries
  * Fixed: cyradm metadata implementation cleaned up and output made consistent
    (thanks Leena Heino)
  * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min
    (thanks Carlos Velasco)
- update to 2.5.5
  * Security fix: compiling with –enable-autocreate no longer allows arbitrary
    mailbox creation
  * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes
    (thanks Chris Stromsoe)
  * Fixed lock management over rename (thanks Thomas Jarosch)
  * Miscellaneous other fixes (thanks Thomas Jarosch)
- update to 2.5.4
  * Security fix: handle urlfetch range starting outside message range
  * Fixed bug: better error messages when reading corrupted twoskip databases
  * Fixed bug: treat autocreate_quota_messages:0 as unlimited
  * Fixed task 203: make autocreate_quota:0 work as documented
- update to 2.5.3
  * Fixed task 183: don’t crash on login when event notifications are enabled
- update to 2.5.2
  * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn
  * Improved consistency of event notification parameters
  * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak)
  * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes
  * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data
  * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests
- update to 2.5.1
  * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future
  * Fixed: XFER deletes source mailbox less aggressively, avoiding data
    loss under pathological conditions
  * Fixed task 163 : XFER no longer bails out on header CRC mismatch
  * Fixed task 117 : now error out silently on non-TLS connections to
    services with implicit TLS
  * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to
    shared folders (Thanks Norbert Warmuth)
  * Fixed task 165 : xfer no longer fails due to bad version comparison
  * Fixed xfer bug: version 2.5 is now detected properly
  * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013
    (Thanks Leena Heino)
  * Fixed task 116 : LIST now correctly handles domains starting with “inbox.”
  * Fixed task 120 : admin users can now SETANNOTATION correctly
  * Fixed task 118 : imapd no longer crashes when selected mailbox is listed
  * Fixed task 156 : LMTP no longer incorrectly rejects messages
    delivered using ‘deliver’
  * Fixed task 76 : lmtpd no longer crashes when delivering to a shared
    mailbox (Thanks Leena Heino)
  * Fixed quota bug: no longer crash when setting quotas on shared
    folder hierarchies
  * Fixed compilation problem on Solaris 10 (Thanks Leena Heino)
  * Fixed bug: QuotaChange event notification now always includes
    maxMessages parameter
  * Fixed bug: event notifications now include paths for shared folders
  * Fixed bug: GETMETADATA now handles mailbox patterns correctly
  * Various fixes to compiling and tool chains
  * changes to cyradm
    + createmailbox command now accepts –specialuse flag if server
    supports CREATE-SPECIAL-USE
    + listmailbox command now returns special-use attribute if
    server supports SPECIAL-USE
    + listmailbox command now accepts –specialuse flag to list only
    mailboxes with special-use attribute
    + cyradm now uses LIST and REMOTE rather than RLIST if server
    supports LIST-EXTENDED
    + mboxconfig now accepts –private flag to switch from default
    shared to private version of an annotation
    + getmetadata: new command
    + setmetadata: new command
    + Cyrus::IMAP::Admin::getinfo now returns a different data structure
    to support the above
    + Cyrus::IMAP::Admin new ACL flag for modifying annotations
- update to version 2.5.0
  * Underscores (the _ character) are no longer allowed in the START,
    SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with
    configuration options in imapd.conf(5) being prefixed by service
    names and an underscore (_) character.
  * Extended Quota Types: New ways to restrict resource usage:
    Number of Folders, Number of Messages, Number of Annotations
  * CalDAV and CardDAV Support
  * Support for RFC 5464: IMAP METADATA
  * Event Notifications
  * The database format for mailboxes.db has been upgraded, adding a
    new mailbox type for deleted mailboxes. A key-value storage format
    is used, allowing for faster and better parsing of mailboxes.db,
    more granular updates to runtime environments, and more sustainable
    future upgrades.
  * New database format twoskip
  * Allowing Undefined Annotations
  * Catchall Mailbox for LMTP
  * Option Name Changes for autocreate: The options related to automatic
    creation of user mailboxes and sub-folders (aka. autocreate) have
    been changed to hold a prefix of autocreate_.
  * The default for the imapd.conf(5) configuration option delete_mode
    has changed from immediate to delayed.
  * The default for the imapd.conf(5) configuration option expunge_mode
    has changed from default to delayed.
  * Configuration option names for LDAP SSL/TLS configuration in
    imapd.conf(5) have been changed.
  * Configuration option names for SSL/TLS configuration in imapd.conf(5)
    have been changed to better reflect how they are used, as enhancements
    would otherwise create great confusion.
  * New Options for tls_*</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750400">- Update to version 3.8.2:
  * Major version jump, reference upstream changelog:
    https://www.cyrusimap.org/dev/imap/download/release-notes/index.html
- Drop no longer applicable patches:
  * cyrus-imapd-2.4.22-perl-5.36.patch
  * cyrus-imapd-2.4.22-recognize-new-backends.patch
  * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- Add refreshed patch:
  * cyrus-imapd-3.8.2_syslog-facility-doc.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750401">- Use correct libexecdir</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750402">- Use upstream configuration files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712923200">- Build with PCRE2, resolve segfault when querying mailboxes</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- update to version 3.8.4 (bugfix release)
  * Fixed Issue #4932: LITERAL+ broken in mupdate
  * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded
  * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica
- update to version 3.8.3 (security fix release)
  * Fixed CVE-2024-34055</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328001">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
</package>
<package pkgid="2cef51796aad1deb241fee3a28ad7037ea38270cd8415ae9800a64796abf138b5d9d38943ed88f0ebb1c9f9fcc37d329006f26960c6fb8121f842a44b79de2df" name="cyrus-imapd" arch="x86_64">
  <version epoch="0" ver="3.8.6" rel="bp160.1.1"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1745841600">- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from
  cyrus to root (bsc#1241536)
  Adapt backup-cyrus.service to run as user cyrus:mail</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1748347200">- update to version 3.8.5 (bugfix release)
  * Fixed Issue #5029: check for unexpected extra tiny-tests directories
  * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases
  * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов)
  * Fixed Issue #5009: various portability warnings and nits
  * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов)
  * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars
  * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me"
  * Fixed Issue #5047: proxying UID SEARCH
- rebased patches:
  - cyrus-imapd-3.8.2_syslog-facility-doc.patch
  + cyrus-imapd-3.8.5_syslog-facility-doc.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1752580800">- update to version 3.8.6 (bugfix release)
  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
  Desynchronization using Opportunistic TLS (bsc#1246165)
  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root
  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
  * Fixed issue #5424: recognise service-specific SASL options in
    ``cyr_info conf-lint``
  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
    Breyha)
  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1752840000">- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1753790400">- Only BuildRequire systemd-rpm-macros instead of systemd
  to reduce unneeded OBS rebuilds</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1762430400">- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd
  (bsc#1251788)
  Remove var-run.mount from Requires and After</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1781092800">- Adapt license</changelog>
</package>
<package pkgid="0053cdb7611d22252a7a8b331703ebe7f3121742b35b282a1f328092e538f0c6432edbb693771a9e01f59566907d4266343179e3ba1b1b099bbdba79f5e8b69f" name="cyrus-imapd-devel" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="bp160.1.14"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1673092800">- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro
  to ensure compatibility with the C standard one, which is
  expected by sub-components.</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1675598400">- update to version 2.5.17
  * Fixed: tools/git-version.sh did not need bash specifically
    (gh#cyrusimap/cyrus-imapd#3143)
  * Fixed: saved session reuse crash when TLS enabled for backend connections
    (gh#cyrusimap/cyrus-imapd#3191)
  * Fixed: XFER now recognises 3.4 and 3.5 backends
  * Fixed: memory leak during backend auth state cleanup
    (gh#cyrusimap/cyrus-imapd#3320)
  * Fixed: use-after-free segfault in mupdate-client
    (gh#cyrusimap/cyrus-imapd#3312)
- incorperating a lot of work from buschmann23@opensuse.org!
- added new packages libcyrus0 and perl-Cyrus-Annotator
- enabled mailbox event notification
- enabled clamav support
- enabled SQLite support
- enablee and run unit tests
- prepared http support (using bcond; requires libical &lt; 3)
- deprecate BDB support: upstream drops it with 3.0
- deprecate SNMP support: upstream drops it with 3.4
- removed OpenSLP support
- configuration changes
  * add some resource control settings to cyrus-imapd.service file
    + TasksMax=2048
    + LimitNOFILE=10000
    + Restart=on-failure
    + RestartSec=5
- create runtime directory structure under /run/cyrus-imapd with
  systemd-tempfiles instead of unit RuntimeDirectory. This makes
  it possible to store some files and folders on ephemeral storage
- update default shipped config files to use /run/cyrus-imapd
- dropped package conflicts for *cyrus-*-kolab; those packages weren't
  build in a really, really long time, since they were obsoleted
  with cyrus-imapd 2.4.
- removed patches now included upstream:
  - cyrus-imapd-2.4.19_autocreate-0.10-0.patch
  - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
  - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch
- other dropped patches / unsupported, obsolete, out of maintenance:
  - cyrus-imapd-2.4.17_openslp.patch
  - cyrus-imapd-2.4.17_pie.patch
- rebased patches:
  * cyrus-imapd-2.3.16_syslog-facility-doc.patch as
    cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.4.17_db6.patch as
    cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.4.19-implicit_definitions.patch as
    cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as
    cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as
    cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- various spec cleanups
  * use conditional builds with bcond
  * remove SysV init scripts
  * remove conditionals for old openSUSE releases
  * remove unnecessary dependencies
- Changelog of prior 2.5.x releases:
  * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- update to version 2.5.16
  * Fixed: XFER now correctly distinguishes between 2.3.x releases
  * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends
  * Fixed: XFER now syslogs a warning when it doesn’t recognise the
    backend Cyrus version
- update to version 2.5.15
  * Fixed CVE-2019-19783: When creating a missing mailbox as part of
    a sieve ‘fileinto’ directive, lmtpd would create it as administrator,
    bypassing ACL checks. lmtpd creates missing mailboxes as part of
    a sieve ‘fileinto’ directive if:
  * (2.5+) the anysievefolder option is enabled (default: not), or
  * (3.0+) the sieve_extensions option has the ‘mailbox’ extension
    enabled (default: enabled) and the ‘fileinto’ directive contains
    the ”:create” argument
    Under these conditions, a user with the ability to upload a custom
    sieve script to their account could use it to create any valid
    mailbox on the server (with ACL inherited from the parent mailbox
    as usual). lmtpd no longer creates these mailboxes as administrator,
    so users may no longer use a ‘fileinto’ directive to create a mailbox
    they couldn’t create otherwise.
  * Fixed Issue #2913: errors are now logged when maxlogins_per_host,
    maxlogins_per_user, and popminpoll limits are reached (thanks Sergey)
- update to version 2.5.14
  * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
    inherit authentication from the previous request on the same connection
  * Can now build against ClamAV &gt;= 0.101 (thanks Christoph Moench-Tegeder)
  * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating
- update to version 2.5.13
  * Fixed CVE-2019-11356: buffer overrun in httpd
  * Fixed: ptloader, ptexpire and ptdump now honour the
    ptscache_db_path setting
- update to version 2.5.12
  * Fixed: cyr_virusscan now integrates with event notifications
    properly
  * Fixed: mailbox expunge event notifications no longer cause a crash
  * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db
  * Fixed Issue #2253: master now rejects unix domain listen paths
    that are too long
  * Fixed: smilint warnings for CYRUS-MASTER.mib fixed
    (thanks Fabrice Bacchella)
  * Fixed Issue #2177: backend connections no longer ignore STARTTLS
    failures (thanks Wolfgang Breyha)
  * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged
    entries
  * Fixed Issue #2221: dav_reconstruct no longer crashes given bad
    user id (thanks Wolfgang Breyha)
  * Fixed: tls_prune memory leak
  * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing
  * Fixed Issue #2199: recovery from mupdate failure now in correct
    order (thanks Michael Menge)
  * Fixed: backend connections no longer crash if no banner found
  * Fixed: backend connections no longer return success on certain
    types of failure
  * Fixed Issue #2185: squatter no longer tries to index non-IMAP
    mailboxes (thanks Wolfgang Breyha)
  * Fixed: special-use proxying in murder (thanks Wolfgang Breyha)
  * Fixed Issue #1090: send OK NIL to subsequent ID commands
  * Fixed Issue #1434: auth_pts will now error when given a too-long
    socket file name
  * Fixed Issue #1964: correctly detect when librt is needed
  * Fixed Issue #1967: tell EXISTS count earlier when needed
  * Fixed: memory leak in httpd DAV support
- update to 2.5.11
  * Better integration with updated documentation/website infrastructure
  * The “timeout” option is now also used as an upper limit in minutes
    for IDLE connections. A new option “imapidletimeout” can be used to
    set an idle-specific timeout instead. (Thanks Philipp Gesang.)
  * Fixed: invalid free and memory leak in httpd
  * Fixed: services no longer exit when client disconnects before accept()
  * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported
  * Fixed Issue #67: better support for dots in localparts
    (thanks Jeroen van Meeuwen)
  * Fixed: don’t assume LIST section options when proxying
  * Fixed: SEARCH crash on some platforms
  * Fixed: ensure directory hierarchy created when renaming empty mailboxes
  * Fixed Issue #1742: reconstruct no longer crashes when cache records
    are too short
  * Fixed Issue #11: LIST RETURN options now work properly with virtdomains
  * Fixed Issue #44: http proxy no longer crashes on starttls
    (thanks Wolfgang Breyha)
  * Fixed Issue #1752: no longer crash on notifyd mailto method
  * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER
    (thanks Дилян Палаузов)
  * Fixed Issue #368: SETACL with invalid rights characters now returns BAD
  * Fixed Issue #46: renames to remote destinations now work correctly
  * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations
  * Fixed Issue #1872: no longer crash on bad SSL session ids
  * Fixed Issue #1931: missing mysql/mariadb dependencies now reported
    by configure
  * Fixed: various memory and resource leaks (thanks Дилян Палаузов)
- update to 2.5.10
  * master(8) now supports a “-V” (print version and exit) option
  * Fixed Issue #34: imapd in murder no longer crashes on MOVE to
    nonexistent folder (thanks Wolfgang Breyha)
  * Fixed Issue #15: replication no longer crashes on mailboxes that
    are too old to be replicated. Instead, it fails with an error and
    logs a warning that they need to be reconstructed
  * Fixed Issue #45: extended LIST doesn’t lose options when proxied
    to backend
  * Fixed task 142: extended LIST response no longer missing
    \HasNoChildren flag on last mailbox
  * Fixed Issue #49: httpd no longer crashes with assertion failure on
    shutdown after CardDAV has been used
  * Fixed Issue #31: the ldap_timeout setting is now used correctly
  * Fixed bugzilla #3909: idled(8) no longer runs as root
    (thanks Carlos Velasco)
  * Fixed Issue #5: renaming folder with annotations no longer increases
    annotation quota usage
  * Fixed: URLFETCH crash when section is NULL
  * various build system improvements
- update to 2.5.9
  * ipurge(8) now supports a “-n” (dry run) option
    (thanks Valentin Vidic)
  * Fixed: imapd now proxies LIST (special-use) to backend
    (thanks John Capo)
  * Fixed: sync_client handles its shutdown file more reliably
    (thanks John Capo)
  * Fixed: httpd no longer crashes with assertion failure on
    shutdown after CalDAV has been used
  * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data
  * Fixed Issue #5: twoskip database I/O performance in unlocked foreach
  * various build system improvements
- udpate to 2.5.8
  * Allow replicated backends in a discrete Murder to both
    actively participate in the Murder.
  * When choosing between ANNOTATEMORE and METADATA, favour what the client used.
  * cyr_dbtool(8) now supports improved_mboxlist_sort (-M)
  * Fixed: master on pselect systems no longer chokes on repeated interrupts
    (thanks Jens Erat and team)
  * Fixed: better iOS CalDAV support (don’t announce VPOLL)
  * Fixed: backported version detection code to detect future versions
  * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations
    (thanks Wolfgang Breyha)
  * Fixed: replication/XFER of mailbox names containing ‘@’
  * Fixed: METADATA and GETMETADATA pattern/list recognition
  * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate
    fails during mailbox rename
  * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee)
  * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf
    (thanks Simon Matter)
  * Fixed task 227: service processes no longer crash with ‘-T 0’ argument
    (thanks Ian Batten and Jens Erat)
  * various build system fixes
- update to 2.5.7
  * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
    range checks
  * Support for legacy SSLv2 and SSLv3 protocols has been removed
  * Support for TLS compression has been removed (thanks Ondřej Surý)
  * Fixed bug #3908: crash in ctl_mboxlist -m
  * Fixed: setrlimit error on startup
  * Fixed task 216: don’t break quotas when transferring mailboxes between
    backends
  * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch)
  * Fixed: autocreate_sieve now uses sievedir setting correctly
  * Fixed bug #3907: cyradm --cadir option is now called --capath, and works
    (thanks Leena Heino)
  * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE
  * Fixed: pop3d no longer applies plaintextloginpause to TLS connections
  * Fixed bug #3866: lmtpd now consults local mailboxes.db first,
    before mupdate master (thanks Michael Menge)
- update to 2.5.6
  * tls_required (default: 0). Set this to 1 to require a TLS session for ALL
    authentications, not just plain ones (thanks Carlos Velasco)
  * new cyradm options
    + –tlskey keyfile: use certificate with keyfile to authenticate with server
    + –notls: disable StartTLS negotiation
    + –cafile cacertfile: Use CA certificate file to validate server certificate
    + –cadir cacertdirectory: Use CA certificate directory to validate server certificate
  * Fixed: cyr_synclog checks its arguments more strictly to avoid producing
    junk sync loc entries
  * Fixed: cyradm metadata implementation cleaned up and output made consistent
    (thanks Leena Heino)
  * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min
    (thanks Carlos Velasco)
- update to 2.5.5
  * Security fix: compiling with –enable-autocreate no longer allows arbitrary
    mailbox creation
  * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes
    (thanks Chris Stromsoe)
  * Fixed lock management over rename (thanks Thomas Jarosch)
  * Miscellaneous other fixes (thanks Thomas Jarosch)
- update to 2.5.4
  * Security fix: handle urlfetch range starting outside message range
  * Fixed bug: better error messages when reading corrupted twoskip databases
  * Fixed bug: treat autocreate_quota_messages:0 as unlimited
  * Fixed task 203: make autocreate_quota:0 work as documented
- update to 2.5.3
  * Fixed task 183: don’t crash on login when event notifications are enabled
- update to 2.5.2
  * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn
  * Improved consistency of event notification parameters
  * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak)
  * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes
  * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data
  * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests
- update to 2.5.1
  * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future
  * Fixed: XFER deletes source mailbox less aggressively, avoiding data
    loss under pathological conditions
  * Fixed task 163 : XFER no longer bails out on header CRC mismatch
  * Fixed task 117 : now error out silently on non-TLS connections to
    services with implicit TLS
  * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to
    shared folders (Thanks Norbert Warmuth)
  * Fixed task 165 : xfer no longer fails due to bad version comparison
  * Fixed xfer bug: version 2.5 is now detected properly
  * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013
    (Thanks Leena Heino)
  * Fixed task 116 : LIST now correctly handles domains starting with “inbox.”
  * Fixed task 120 : admin users can now SETANNOTATION correctly
  * Fixed task 118 : imapd no longer crashes when selected mailbox is listed
  * Fixed task 156 : LMTP no longer incorrectly rejects messages
    delivered using ‘deliver’
  * Fixed task 76 : lmtpd no longer crashes when delivering to a shared
    mailbox (Thanks Leena Heino)
  * Fixed quota bug: no longer crash when setting quotas on shared
    folder hierarchies
  * Fixed compilation problem on Solaris 10 (Thanks Leena Heino)
  * Fixed bug: QuotaChange event notification now always includes
    maxMessages parameter
  * Fixed bug: event notifications now include paths for shared folders
  * Fixed bug: GETMETADATA now handles mailbox patterns correctly
  * Various fixes to compiling and tool chains
  * changes to cyradm
    + createmailbox command now accepts –specialuse flag if server
    supports CREATE-SPECIAL-USE
    + listmailbox command now returns special-use attribute if
    server supports SPECIAL-USE
    + listmailbox command now accepts –specialuse flag to list only
    mailboxes with special-use attribute
    + cyradm now uses LIST and REMOTE rather than RLIST if server
    supports LIST-EXTENDED
    + mboxconfig now accepts –private flag to switch from default
    shared to private version of an annotation
    + getmetadata: new command
    + setmetadata: new command
    + Cyrus::IMAP::Admin::getinfo now returns a different data structure
    to support the above
    + Cyrus::IMAP::Admin new ACL flag for modifying annotations
- update to version 2.5.0
  * Underscores (the _ character) are no longer allowed in the START,
    SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with
    configuration options in imapd.conf(5) being prefixed by service
    names and an underscore (_) character.
  * Extended Quota Types: New ways to restrict resource usage:
    Number of Folders, Number of Messages, Number of Annotations
  * CalDAV and CardDAV Support
  * Support for RFC 5464: IMAP METADATA
  * Event Notifications
  * The database format for mailboxes.db has been upgraded, adding a
    new mailbox type for deleted mailboxes. A key-value storage format
    is used, allowing for faster and better parsing of mailboxes.db,
    more granular updates to runtime environments, and more sustainable
    future upgrades.
  * New database format twoskip
  * Allowing Undefined Annotations
  * Catchall Mailbox for LMTP
  * Option Name Changes for autocreate: The options related to automatic
    creation of user mailboxes and sub-folders (aka. autocreate) have
    been changed to hold a prefix of autocreate_.
  * The default for the imapd.conf(5) configuration option delete_mode
    has changed from immediate to delayed.
  * The default for the imapd.conf(5) configuration option expunge_mode
    has changed from default to delayed.
  * Configuration option names for LDAP SSL/TLS configuration in
    imapd.conf(5) have been changed.
  * Configuration option names for SSL/TLS configuration in imapd.conf(5)
    have been changed to better reflect how they are used, as enhancements
    would otherwise create great confusion.
  * New Options for tls_*</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750400">- Update to version 3.8.2:
  * Major version jump, reference upstream changelog:
    https://www.cyrusimap.org/dev/imap/download/release-notes/index.html
- Drop no longer applicable patches:
  * cyrus-imapd-2.4.22-perl-5.36.patch
  * cyrus-imapd-2.4.22-recognize-new-backends.patch
  * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- Add refreshed patch:
  * cyrus-imapd-3.8.2_syslog-facility-doc.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750401">- Use correct libexecdir</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750402">- Use upstream configuration files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712923200">- Build with PCRE2, resolve segfault when querying mailboxes</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- update to version 3.8.4 (bugfix release)
  * Fixed Issue #4932: LITERAL+ broken in mupdate
  * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded
  * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica
- update to version 3.8.3 (security fix release)
  * Fixed CVE-2024-34055</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328001">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
</package>
<package pkgid="5c50280bf79eb45a03bc57ddba8518795bdec99314cf5811bd4ba87677a3f8bd86fd77f02654a92b22287a2dbb87a1bae24d5e912dcf6f0512a6037042c81389" name="cyrus-imapd-devel" arch="x86_64">
  <version epoch="0" ver="3.8.6" rel="bp160.1.1"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1745841600">- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from
  cyrus to root (bsc#1241536)
  Adapt backup-cyrus.service to run as user cyrus:mail</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1748347200">- update to version 3.8.5 (bugfix release)
  * Fixed Issue #5029: check for unexpected extra tiny-tests directories
  * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases
  * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов)
  * Fixed Issue #5009: various portability warnings and nits
  * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов)
  * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars
  * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me"
  * Fixed Issue #5047: proxying UID SEARCH
- rebased patches:
  - cyrus-imapd-3.8.2_syslog-facility-doc.patch
  + cyrus-imapd-3.8.5_syslog-facility-doc.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1752580800">- update to version 3.8.6 (bugfix release)
  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
  Desynchronization using Opportunistic TLS (bsc#1246165)
  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root
  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
  * Fixed issue #5424: recognise service-specific SASL options in
    ``cyr_info conf-lint``
  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
    Breyha)
  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1752840000">- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1753790400">- Only BuildRequire systemd-rpm-macros instead of systemd
  to reduce unneeded OBS rebuilds</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1762430400">- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd
  (bsc#1251788)
  Remove var-run.mount from Requires and After</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1781092800">- Adapt license</changelog>
</package>
<package pkgid="0e2af4ea26cfa3d3a00e8b67a9cde4b080638fd68cb5ecefd6881f7e7d25f5b6ea5b9627635993f3060e7bb3fdc020a1ed407fb8dfba06899b725bb8cbe5befd" name="cyrus-imapd-snmp" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="bp160.1.14"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1673092800">- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro
  to ensure compatibility with the C standard one, which is
  expected by sub-components.</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1675598400">- update to version 2.5.17
  * Fixed: tools/git-version.sh did not need bash specifically
    (gh#cyrusimap/cyrus-imapd#3143)
  * Fixed: saved session reuse crash when TLS enabled for backend connections
    (gh#cyrusimap/cyrus-imapd#3191)
  * Fixed: XFER now recognises 3.4 and 3.5 backends
  * Fixed: memory leak during backend auth state cleanup
    (gh#cyrusimap/cyrus-imapd#3320)
  * Fixed: use-after-free segfault in mupdate-client
    (gh#cyrusimap/cyrus-imapd#3312)
- incorperating a lot of work from buschmann23@opensuse.org!
- added new packages libcyrus0 and perl-Cyrus-Annotator
- enabled mailbox event notification
- enabled clamav support
- enabled SQLite support
- enablee and run unit tests
- prepared http support (using bcond; requires libical &lt; 3)
- deprecate BDB support: upstream drops it with 3.0
- deprecate SNMP support: upstream drops it with 3.4
- removed OpenSLP support
- configuration changes
  * add some resource control settings to cyrus-imapd.service file
    + TasksMax=2048
    + LimitNOFILE=10000
    + Restart=on-failure
    + RestartSec=5
- create runtime directory structure under /run/cyrus-imapd with
  systemd-tempfiles instead of unit RuntimeDirectory. This makes
  it possible to store some files and folders on ephemeral storage
- update default shipped config files to use /run/cyrus-imapd
- dropped package conflicts for *cyrus-*-kolab; those packages weren't
  build in a really, really long time, since they were obsoleted
  with cyrus-imapd 2.4.
- removed patches now included upstream:
  - cyrus-imapd-2.4.19_autocreate-0.10-0.patch
  - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
  - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch
- other dropped patches / unsupported, obsolete, out of maintenance:
  - cyrus-imapd-2.4.17_openslp.patch
  - cyrus-imapd-2.4.17_pie.patch
- rebased patches:
  * cyrus-imapd-2.3.16_syslog-facility-doc.patch as
    cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.4.17_db6.patch as
    cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.4.19-implicit_definitions.patch as
    cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as
    cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as
    cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- various spec cleanups
  * use conditional builds with bcond
  * remove SysV init scripts
  * remove conditionals for old openSUSE releases
  * remove unnecessary dependencies
- Changelog of prior 2.5.x releases:
  * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- update to version 2.5.16
  * Fixed: XFER now correctly distinguishes between 2.3.x releases
  * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends
  * Fixed: XFER now syslogs a warning when it doesn’t recognise the
    backend Cyrus version
- update to version 2.5.15
  * Fixed CVE-2019-19783: When creating a missing mailbox as part of
    a sieve ‘fileinto’ directive, lmtpd would create it as administrator,
    bypassing ACL checks. lmtpd creates missing mailboxes as part of
    a sieve ‘fileinto’ directive if:
  * (2.5+) the anysievefolder option is enabled (default: not), or
  * (3.0+) the sieve_extensions option has the ‘mailbox’ extension
    enabled (default: enabled) and the ‘fileinto’ directive contains
    the ”:create” argument
    Under these conditions, a user with the ability to upload a custom
    sieve script to their account could use it to create any valid
    mailbox on the server (with ACL inherited from the parent mailbox
    as usual). lmtpd no longer creates these mailboxes as administrator,
    so users may no longer use a ‘fileinto’ directive to create a mailbox
    they couldn’t create otherwise.
  * Fixed Issue #2913: errors are now logged when maxlogins_per_host,
    maxlogins_per_user, and popminpoll limits are reached (thanks Sergey)
- update to version 2.5.14
  * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
    inherit authentication from the previous request on the same connection
  * Can now build against ClamAV &gt;= 0.101 (thanks Christoph Moench-Tegeder)
  * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating
- update to version 2.5.13
  * Fixed CVE-2019-11356: buffer overrun in httpd
  * Fixed: ptloader, ptexpire and ptdump now honour the
    ptscache_db_path setting
- update to version 2.5.12
  * Fixed: cyr_virusscan now integrates with event notifications
    properly
  * Fixed: mailbox expunge event notifications no longer cause a crash
  * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db
  * Fixed Issue #2253: master now rejects unix domain listen paths
    that are too long
  * Fixed: smilint warnings for CYRUS-MASTER.mib fixed
    (thanks Fabrice Bacchella)
  * Fixed Issue #2177: backend connections no longer ignore STARTTLS
    failures (thanks Wolfgang Breyha)
  * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged
    entries
  * Fixed Issue #2221: dav_reconstruct no longer crashes given bad
    user id (thanks Wolfgang Breyha)
  * Fixed: tls_prune memory leak
  * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing
  * Fixed Issue #2199: recovery from mupdate failure now in correct
    order (thanks Michael Menge)
  * Fixed: backend connections no longer crash if no banner found
  * Fixed: backend connections no longer return success on certain
    types of failure
  * Fixed Issue #2185: squatter no longer tries to index non-IMAP
    mailboxes (thanks Wolfgang Breyha)
  * Fixed: special-use proxying in murder (thanks Wolfgang Breyha)
  * Fixed Issue #1090: send OK NIL to subsequent ID commands
  * Fixed Issue #1434: auth_pts will now error when given a too-long
    socket file name
  * Fixed Issue #1964: correctly detect when librt is needed
  * Fixed Issue #1967: tell EXISTS count earlier when needed
  * Fixed: memory leak in httpd DAV support
- update to 2.5.11
  * Better integration with updated documentation/website infrastructure
  * The “timeout” option is now also used as an upper limit in minutes
    for IDLE connections. A new option “imapidletimeout” can be used to
    set an idle-specific timeout instead. (Thanks Philipp Gesang.)
  * Fixed: invalid free and memory leak in httpd
  * Fixed: services no longer exit when client disconnects before accept()
  * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported
  * Fixed Issue #67: better support for dots in localparts
    (thanks Jeroen van Meeuwen)
  * Fixed: don’t assume LIST section options when proxying
  * Fixed: SEARCH crash on some platforms
  * Fixed: ensure directory hierarchy created when renaming empty mailboxes
  * Fixed Issue #1742: reconstruct no longer crashes when cache records
    are too short
  * Fixed Issue #11: LIST RETURN options now work properly with virtdomains
  * Fixed Issue #44: http proxy no longer crashes on starttls
    (thanks Wolfgang Breyha)
  * Fixed Issue #1752: no longer crash on notifyd mailto method
  * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER
    (thanks Дилян Палаузов)
  * Fixed Issue #368: SETACL with invalid rights characters now returns BAD
  * Fixed Issue #46: renames to remote destinations now work correctly
  * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations
  * Fixed Issue #1872: no longer crash on bad SSL session ids
  * Fixed Issue #1931: missing mysql/mariadb dependencies now reported
    by configure
  * Fixed: various memory and resource leaks (thanks Дилян Палаузов)
- update to 2.5.10
  * master(8) now supports a “-V” (print version and exit) option
  * Fixed Issue #34: imapd in murder no longer crashes on MOVE to
    nonexistent folder (thanks Wolfgang Breyha)
  * Fixed Issue #15: replication no longer crashes on mailboxes that
    are too old to be replicated. Instead, it fails with an error and
    logs a warning that they need to be reconstructed
  * Fixed Issue #45: extended LIST doesn’t lose options when proxied
    to backend
  * Fixed task 142: extended LIST response no longer missing
    \HasNoChildren flag on last mailbox
  * Fixed Issue #49: httpd no longer crashes with assertion failure on
    shutdown after CardDAV has been used
  * Fixed Issue #31: the ldap_timeout setting is now used correctly
  * Fixed bugzilla #3909: idled(8) no longer runs as root
    (thanks Carlos Velasco)
  * Fixed Issue #5: renaming folder with annotations no longer increases
    annotation quota usage
  * Fixed: URLFETCH crash when section is NULL
  * various build system improvements
- update to 2.5.9
  * ipurge(8) now supports a “-n” (dry run) option
    (thanks Valentin Vidic)
  * Fixed: imapd now proxies LIST (special-use) to backend
    (thanks John Capo)
  * Fixed: sync_client handles its shutdown file more reliably
    (thanks John Capo)
  * Fixed: httpd no longer crashes with assertion failure on
    shutdown after CalDAV has been used
  * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data
  * Fixed Issue #5: twoskip database I/O performance in unlocked foreach
  * various build system improvements
- udpate to 2.5.8
  * Allow replicated backends in a discrete Murder to both
    actively participate in the Murder.
  * When choosing between ANNOTATEMORE and METADATA, favour what the client used.
  * cyr_dbtool(8) now supports improved_mboxlist_sort (-M)
  * Fixed: master on pselect systems no longer chokes on repeated interrupts
    (thanks Jens Erat and team)
  * Fixed: better iOS CalDAV support (don’t announce VPOLL)
  * Fixed: backported version detection code to detect future versions
  * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations
    (thanks Wolfgang Breyha)
  * Fixed: replication/XFER of mailbox names containing ‘@’
  * Fixed: METADATA and GETMETADATA pattern/list recognition
  * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate
    fails during mailbox rename
  * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee)
  * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf
    (thanks Simon Matter)
  * Fixed task 227: service processes no longer crash with ‘-T 0’ argument
    (thanks Ian Batten and Jens Erat)
  * various build system fixes
- update to 2.5.7
  * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
    range checks
  * Support for legacy SSLv2 and SSLv3 protocols has been removed
  * Support for TLS compression has been removed (thanks Ondřej Surý)
  * Fixed bug #3908: crash in ctl_mboxlist -m
  * Fixed: setrlimit error on startup
  * Fixed task 216: don’t break quotas when transferring mailboxes between
    backends
  * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch)
  * Fixed: autocreate_sieve now uses sievedir setting correctly
  * Fixed bug #3907: cyradm --cadir option is now called --capath, and works
    (thanks Leena Heino)
  * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE
  * Fixed: pop3d no longer applies plaintextloginpause to TLS connections
  * Fixed bug #3866: lmtpd now consults local mailboxes.db first,
    before mupdate master (thanks Michael Menge)
- update to 2.5.6
  * tls_required (default: 0). Set this to 1 to require a TLS session for ALL
    authentications, not just plain ones (thanks Carlos Velasco)
  * new cyradm options
    + –tlskey keyfile: use certificate with keyfile to authenticate with server
    + –notls: disable StartTLS negotiation
    + –cafile cacertfile: Use CA certificate file to validate server certificate
    + –cadir cacertdirectory: Use CA certificate directory to validate server certificate
  * Fixed: cyr_synclog checks its arguments more strictly to avoid producing
    junk sync loc entries
  * Fixed: cyradm metadata implementation cleaned up and output made consistent
    (thanks Leena Heino)
  * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min
    (thanks Carlos Velasco)
- update to 2.5.5
  * Security fix: compiling with –enable-autocreate no longer allows arbitrary
    mailbox creation
  * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes
    (thanks Chris Stromsoe)
  * Fixed lock management over rename (thanks Thomas Jarosch)
  * Miscellaneous other fixes (thanks Thomas Jarosch)
- update to 2.5.4
  * Security fix: handle urlfetch range starting outside message range
  * Fixed bug: better error messages when reading corrupted twoskip databases
  * Fixed bug: treat autocreate_quota_messages:0 as unlimited
  * Fixed task 203: make autocreate_quota:0 work as documented
- update to 2.5.3
  * Fixed task 183: don’t crash on login when event notifications are enabled
- update to 2.5.2
  * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn
  * Improved consistency of event notification parameters
  * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak)
  * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes
  * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data
  * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests
- update to 2.5.1
  * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future
  * Fixed: XFER deletes source mailbox less aggressively, avoiding data
    loss under pathological conditions
  * Fixed task 163 : XFER no longer bails out on header CRC mismatch
  * Fixed task 117 : now error out silently on non-TLS connections to
    services with implicit TLS
  * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to
    shared folders (Thanks Norbert Warmuth)
  * Fixed task 165 : xfer no longer fails due to bad version comparison
  * Fixed xfer bug: version 2.5 is now detected properly
  * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013
    (Thanks Leena Heino)
  * Fixed task 116 : LIST now correctly handles domains starting with “inbox.”
  * Fixed task 120 : admin users can now SETANNOTATION correctly
  * Fixed task 118 : imapd no longer crashes when selected mailbox is listed
  * Fixed task 156 : LMTP no longer incorrectly rejects messages
    delivered using ‘deliver’
  * Fixed task 76 : lmtpd no longer crashes when delivering to a shared
    mailbox (Thanks Leena Heino)
  * Fixed quota bug: no longer crash when setting quotas on shared
    folder hierarchies
  * Fixed compilation problem on Solaris 10 (Thanks Leena Heino)
  * Fixed bug: QuotaChange event notification now always includes
    maxMessages parameter
  * Fixed bug: event notifications now include paths for shared folders
  * Fixed bug: GETMETADATA now handles mailbox patterns correctly
  * Various fixes to compiling and tool chains
  * changes to cyradm
    + createmailbox command now accepts –specialuse flag if server
    supports CREATE-SPECIAL-USE
    + listmailbox command now returns special-use attribute if
    server supports SPECIAL-USE
    + listmailbox command now accepts –specialuse flag to list only
    mailboxes with special-use attribute
    + cyradm now uses LIST and REMOTE rather than RLIST if server
    supports LIST-EXTENDED
    + mboxconfig now accepts –private flag to switch from default
    shared to private version of an annotation
    + getmetadata: new command
    + setmetadata: new command
    + Cyrus::IMAP::Admin::getinfo now returns a different data structure
    to support the above
    + Cyrus::IMAP::Admin new ACL flag for modifying annotations
- update to version 2.5.0
  * Underscores (the _ character) are no longer allowed in the START,
    SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with
    configuration options in imapd.conf(5) being prefixed by service
    names and an underscore (_) character.
  * Extended Quota Types: New ways to restrict resource usage:
    Number of Folders, Number of Messages, Number of Annotations
  * CalDAV and CardDAV Support
  * Support for RFC 5464: IMAP METADATA
  * Event Notifications
  * The database format for mailboxes.db has been upgraded, adding a
    new mailbox type for deleted mailboxes. A key-value storage format
    is used, allowing for faster and better parsing of mailboxes.db,
    more granular updates to runtime environments, and more sustainable
    future upgrades.
  * New database format twoskip
  * Allowing Undefined Annotations
  * Catchall Mailbox for LMTP
  * Option Name Changes for autocreate: The options related to automatic
    creation of user mailboxes and sub-folders (aka. autocreate) have
    been changed to hold a prefix of autocreate_.
  * The default for the imapd.conf(5) configuration option delete_mode
    has changed from immediate to delayed.
  * The default for the imapd.conf(5) configuration option expunge_mode
    has changed from default to delayed.
  * Configuration option names for LDAP SSL/TLS configuration in
    imapd.conf(5) have been changed.
  * Configuration option names for SSL/TLS configuration in imapd.conf(5)
    have been changed to better reflect how they are used, as enhancements
    would otherwise create great confusion.
  * New Options for tls_*</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750400">- Update to version 3.8.2:
  * Major version jump, reference upstream changelog:
    https://www.cyrusimap.org/dev/imap/download/release-notes/index.html
- Drop no longer applicable patches:
  * cyrus-imapd-2.4.22-perl-5.36.patch
  * cyrus-imapd-2.4.22-recognize-new-backends.patch
  * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- Add refreshed patch:
  * cyrus-imapd-3.8.2_syslog-facility-doc.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750401">- Use correct libexecdir</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750402">- Use upstream configuration files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712923200">- Build with PCRE2, resolve segfault when querying mailboxes</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- update to version 3.8.4 (bugfix release)
  * Fixed Issue #4932: LITERAL+ broken in mupdate
  * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded
  * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica
- update to version 3.8.3 (security fix release)
  * Fixed CVE-2024-34055</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328001">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
</package>
<package pkgid="da0c59ed98e210b77eeea4b028ba9c03e75e03147fc49586214b7b1f608ecc1a34db1d371e6b5b0ead167332fb528e77b696f5d1a5abc7cb43a40cd8d3562188" name="cyrus-imapd-snmp" arch="x86_64">
  <version epoch="0" ver="3.8.6" rel="bp160.1.1"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1745841600">- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from
  cyrus to root (bsc#1241536)
  Adapt backup-cyrus.service to run as user cyrus:mail</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1748347200">- update to version 3.8.5 (bugfix release)
  * Fixed Issue #5029: check for unexpected extra tiny-tests directories
  * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases
  * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов)
  * Fixed Issue #5009: various portability warnings and nits
  * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов)
  * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars
  * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me"
  * Fixed Issue #5047: proxying UID SEARCH
- rebased patches:
  - cyrus-imapd-3.8.2_syslog-facility-doc.patch
  + cyrus-imapd-3.8.5_syslog-facility-doc.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1752580800">- update to version 3.8.6 (bugfix release)
  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
  Desynchronization using Opportunistic TLS (bsc#1246165)
  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root
  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
  * Fixed issue #5424: recognise service-specific SASL options in
    ``cyr_info conf-lint``
  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
    Breyha)
  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1752840000">- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1753790400">- Only BuildRequire systemd-rpm-macros instead of systemd
  to reduce unneeded OBS rebuilds</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1762430400">- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd
  (bsc#1251788)
  Remove var-run.mount from Requires and After</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1781092800">- Adapt license</changelog>
</package>
<package pkgid="8a26550dbade42de55f37d42887796fef849550e8943f6a8362a7a761cdc109b8facad493ab9512c5635696132b36d5919c2d560c33c5daaa5e3f8b19e8bf5de" name="cyrus-imapd-snmp-mibs" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="bp160.1.14"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1673092800">- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro
  to ensure compatibility with the C standard one, which is
  expected by sub-components.</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1675598400">- update to version 2.5.17
  * Fixed: tools/git-version.sh did not need bash specifically
    (gh#cyrusimap/cyrus-imapd#3143)
  * Fixed: saved session reuse crash when TLS enabled for backend connections
    (gh#cyrusimap/cyrus-imapd#3191)
  * Fixed: XFER now recognises 3.4 and 3.5 backends
  * Fixed: memory leak during backend auth state cleanup
    (gh#cyrusimap/cyrus-imapd#3320)
  * Fixed: use-after-free segfault in mupdate-client
    (gh#cyrusimap/cyrus-imapd#3312)
- incorperating a lot of work from buschmann23@opensuse.org!
- added new packages libcyrus0 and perl-Cyrus-Annotator
- enabled mailbox event notification
- enabled clamav support
- enabled SQLite support
- enablee and run unit tests
- prepared http support (using bcond; requires libical &lt; 3)
- deprecate BDB support: upstream drops it with 3.0
- deprecate SNMP support: upstream drops it with 3.4
- removed OpenSLP support
- configuration changes
  * add some resource control settings to cyrus-imapd.service file
    + TasksMax=2048
    + LimitNOFILE=10000
    + Restart=on-failure
    + RestartSec=5
- create runtime directory structure under /run/cyrus-imapd with
  systemd-tempfiles instead of unit RuntimeDirectory. This makes
  it possible to store some files and folders on ephemeral storage
- update default shipped config files to use /run/cyrus-imapd
- dropped package conflicts for *cyrus-*-kolab; those packages weren't
  build in a really, really long time, since they were obsoleted
  with cyrus-imapd 2.4.
- removed patches now included upstream:
  - cyrus-imapd-2.4.19_autocreate-0.10-0.patch
  - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
  - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch
- other dropped patches / unsupported, obsolete, out of maintenance:
  - cyrus-imapd-2.4.17_openslp.patch
  - cyrus-imapd-2.4.17_pie.patch
- rebased patches:
  * cyrus-imapd-2.3.16_syslog-facility-doc.patch as
    cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.4.17_db6.patch as
    cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.4.19-implicit_definitions.patch as
    cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as
    cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as
    cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- various spec cleanups
  * use conditional builds with bcond
  * remove SysV init scripts
  * remove conditionals for old openSUSE releases
  * remove unnecessary dependencies
- Changelog of prior 2.5.x releases:
  * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- update to version 2.5.16
  * Fixed: XFER now correctly distinguishes between 2.3.x releases
  * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends
  * Fixed: XFER now syslogs a warning when it doesn’t recognise the
    backend Cyrus version
- update to version 2.5.15
  * Fixed CVE-2019-19783: When creating a missing mailbox as part of
    a sieve ‘fileinto’ directive, lmtpd would create it as administrator,
    bypassing ACL checks. lmtpd creates missing mailboxes as part of
    a sieve ‘fileinto’ directive if:
  * (2.5+) the anysievefolder option is enabled (default: not), or
  * (3.0+) the sieve_extensions option has the ‘mailbox’ extension
    enabled (default: enabled) and the ‘fileinto’ directive contains
    the ”:create” argument
    Under these conditions, a user with the ability to upload a custom
    sieve script to their account could use it to create any valid
    mailbox on the server (with ACL inherited from the parent mailbox
    as usual). lmtpd no longer creates these mailboxes as administrator,
    so users may no longer use a ‘fileinto’ directive to create a mailbox
    they couldn’t create otherwise.
  * Fixed Issue #2913: errors are now logged when maxlogins_per_host,
    maxlogins_per_user, and popminpoll limits are reached (thanks Sergey)
- update to version 2.5.14
  * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
    inherit authentication from the previous request on the same connection
  * Can now build against ClamAV &gt;= 0.101 (thanks Christoph Moench-Tegeder)
  * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating
- update to version 2.5.13
  * Fixed CVE-2019-11356: buffer overrun in httpd
  * Fixed: ptloader, ptexpire and ptdump now honour the
    ptscache_db_path setting
- update to version 2.5.12
  * Fixed: cyr_virusscan now integrates with event notifications
    properly
  * Fixed: mailbox expunge event notifications no longer cause a crash
  * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db
  * Fixed Issue #2253: master now rejects unix domain listen paths
    that are too long
  * Fixed: smilint warnings for CYRUS-MASTER.mib fixed
    (thanks Fabrice Bacchella)
  * Fixed Issue #2177: backend connections no longer ignore STARTTLS
    failures (thanks Wolfgang Breyha)
  * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged
    entries
  * Fixed Issue #2221: dav_reconstruct no longer crashes given bad
    user id (thanks Wolfgang Breyha)
  * Fixed: tls_prune memory leak
  * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing
  * Fixed Issue #2199: recovery from mupdate failure now in correct
    order (thanks Michael Menge)
  * Fixed: backend connections no longer crash if no banner found
  * Fixed: backend connections no longer return success on certain
    types of failure
  * Fixed Issue #2185: squatter no longer tries to index non-IMAP
    mailboxes (thanks Wolfgang Breyha)
  * Fixed: special-use proxying in murder (thanks Wolfgang Breyha)
  * Fixed Issue #1090: send OK NIL to subsequent ID commands
  * Fixed Issue #1434: auth_pts will now error when given a too-long
    socket file name
  * Fixed Issue #1964: correctly detect when librt is needed
  * Fixed Issue #1967: tell EXISTS count earlier when needed
  * Fixed: memory leak in httpd DAV support
- update to 2.5.11
  * Better integration with updated documentation/website infrastructure
  * The “timeout” option is now also used as an upper limit in minutes
    for IDLE connections. A new option “imapidletimeout” can be used to
    set an idle-specific timeout instead. (Thanks Philipp Gesang.)
  * Fixed: invalid free and memory leak in httpd
  * Fixed: services no longer exit when client disconnects before accept()
  * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported
  * Fixed Issue #67: better support for dots in localparts
    (thanks Jeroen van Meeuwen)
  * Fixed: don’t assume LIST section options when proxying
  * Fixed: SEARCH crash on some platforms
  * Fixed: ensure directory hierarchy created when renaming empty mailboxes
  * Fixed Issue #1742: reconstruct no longer crashes when cache records
    are too short
  * Fixed Issue #11: LIST RETURN options now work properly with virtdomains
  * Fixed Issue #44: http proxy no longer crashes on starttls
    (thanks Wolfgang Breyha)
  * Fixed Issue #1752: no longer crash on notifyd mailto method
  * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER
    (thanks Дилян Палаузов)
  * Fixed Issue #368: SETACL with invalid rights characters now returns BAD
  * Fixed Issue #46: renames to remote destinations now work correctly
  * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations
  * Fixed Issue #1872: no longer crash on bad SSL session ids
  * Fixed Issue #1931: missing mysql/mariadb dependencies now reported
    by configure
  * Fixed: various memory and resource leaks (thanks Дилян Палаузов)
- update to 2.5.10
  * master(8) now supports a “-V” (print version and exit) option
  * Fixed Issue #34: imapd in murder no longer crashes on MOVE to
    nonexistent folder (thanks Wolfgang Breyha)
  * Fixed Issue #15: replication no longer crashes on mailboxes that
    are too old to be replicated. Instead, it fails with an error and
    logs a warning that they need to be reconstructed
  * Fixed Issue #45: extended LIST doesn’t lose options when proxied
    to backend
  * Fixed task 142: extended LIST response no longer missing
    \HasNoChildren flag on last mailbox
  * Fixed Issue #49: httpd no longer crashes with assertion failure on
    shutdown after CardDAV has been used
  * Fixed Issue #31: the ldap_timeout setting is now used correctly
  * Fixed bugzilla #3909: idled(8) no longer runs as root
    (thanks Carlos Velasco)
  * Fixed Issue #5: renaming folder with annotations no longer increases
    annotation quota usage
  * Fixed: URLFETCH crash when section is NULL
  * various build system improvements
- update to 2.5.9
  * ipurge(8) now supports a “-n” (dry run) option
    (thanks Valentin Vidic)
  * Fixed: imapd now proxies LIST (special-use) to backend
    (thanks John Capo)
  * Fixed: sync_client handles its shutdown file more reliably
    (thanks John Capo)
  * Fixed: httpd no longer crashes with assertion failure on
    shutdown after CalDAV has been used
  * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data
  * Fixed Issue #5: twoskip database I/O performance in unlocked foreach
  * various build system improvements
- udpate to 2.5.8
  * Allow replicated backends in a discrete Murder to both
    actively participate in the Murder.
  * When choosing between ANNOTATEMORE and METADATA, favour what the client used.
  * cyr_dbtool(8) now supports improved_mboxlist_sort (-M)
  * Fixed: master on pselect systems no longer chokes on repeated interrupts
    (thanks Jens Erat and team)
  * Fixed: better iOS CalDAV support (don’t announce VPOLL)
  * Fixed: backported version detection code to detect future versions
  * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations
    (thanks Wolfgang Breyha)
  * Fixed: replication/XFER of mailbox names containing ‘@’
  * Fixed: METADATA and GETMETADATA pattern/list recognition
  * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate
    fails during mailbox rename
  * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee)
  * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf
    (thanks Simon Matter)
  * Fixed task 227: service processes no longer crash with ‘-T 0’ argument
    (thanks Ian Batten and Jens Erat)
  * various build system fixes
- update to 2.5.7
  * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
    range checks
  * Support for legacy SSLv2 and SSLv3 protocols has been removed
  * Support for TLS compression has been removed (thanks Ondřej Surý)
  * Fixed bug #3908: crash in ctl_mboxlist -m
  * Fixed: setrlimit error on startup
  * Fixed task 216: don’t break quotas when transferring mailboxes between
    backends
  * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch)
  * Fixed: autocreate_sieve now uses sievedir setting correctly
  * Fixed bug #3907: cyradm --cadir option is now called --capath, and works
    (thanks Leena Heino)
  * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE
  * Fixed: pop3d no longer applies plaintextloginpause to TLS connections
  * Fixed bug #3866: lmtpd now consults local mailboxes.db first,
    before mupdate master (thanks Michael Menge)
- update to 2.5.6
  * tls_required (default: 0). Set this to 1 to require a TLS session for ALL
    authentications, not just plain ones (thanks Carlos Velasco)
  * new cyradm options
    + –tlskey keyfile: use certificate with keyfile to authenticate with server
    + –notls: disable StartTLS negotiation
    + –cafile cacertfile: Use CA certificate file to validate server certificate
    + –cadir cacertdirectory: Use CA certificate directory to validate server certificate
  * Fixed: cyr_synclog checks its arguments more strictly to avoid producing
    junk sync loc entries
  * Fixed: cyradm metadata implementation cleaned up and output made consistent
    (thanks Leena Heino)
  * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min
    (thanks Carlos Velasco)
- update to 2.5.5
  * Security fix: compiling with –enable-autocreate no longer allows arbitrary
    mailbox creation
  * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes
    (thanks Chris Stromsoe)
  * Fixed lock management over rename (thanks Thomas Jarosch)
  * Miscellaneous other fixes (thanks Thomas Jarosch)
- update to 2.5.4
  * Security fix: handle urlfetch range starting outside message range
  * Fixed bug: better error messages when reading corrupted twoskip databases
  * Fixed bug: treat autocreate_quota_messages:0 as unlimited
  * Fixed task 203: make autocreate_quota:0 work as documented
- update to 2.5.3
  * Fixed task 183: don’t crash on login when event notifications are enabled
- update to 2.5.2
  * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn
  * Improved consistency of event notification parameters
  * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak)
  * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes
  * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data
  * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests
- update to 2.5.1
  * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future
  * Fixed: XFER deletes source mailbox less aggressively, avoiding data
    loss under pathological conditions
  * Fixed task 163 : XFER no longer bails out on header CRC mismatch
  * Fixed task 117 : now error out silently on non-TLS connections to
    services with implicit TLS
  * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to
    shared folders (Thanks Norbert Warmuth)
  * Fixed task 165 : xfer no longer fails due to bad version comparison
  * Fixed xfer bug: version 2.5 is now detected properly
  * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013
    (Thanks Leena Heino)
  * Fixed task 116 : LIST now correctly handles domains starting with “inbox.”
  * Fixed task 120 : admin users can now SETANNOTATION correctly
  * Fixed task 118 : imapd no longer crashes when selected mailbox is listed
  * Fixed task 156 : LMTP no longer incorrectly rejects messages
    delivered using ‘deliver’
  * Fixed task 76 : lmtpd no longer crashes when delivering to a shared
    mailbox (Thanks Leena Heino)
  * Fixed quota bug: no longer crash when setting quotas on shared
    folder hierarchies
  * Fixed compilation problem on Solaris 10 (Thanks Leena Heino)
  * Fixed bug: QuotaChange event notification now always includes
    maxMessages parameter
  * Fixed bug: event notifications now include paths for shared folders
  * Fixed bug: GETMETADATA now handles mailbox patterns correctly
  * Various fixes to compiling and tool chains
  * changes to cyradm
    + createmailbox command now accepts –specialuse flag if server
    supports CREATE-SPECIAL-USE
    + listmailbox command now returns special-use attribute if
    server supports SPECIAL-USE
    + listmailbox command now accepts –specialuse flag to list only
    mailboxes with special-use attribute
    + cyradm now uses LIST and REMOTE rather than RLIST if server
    supports LIST-EXTENDED
    + mboxconfig now accepts –private flag to switch from default
    shared to private version of an annotation
    + getmetadata: new command
    + setmetadata: new command
    + Cyrus::IMAP::Admin::getinfo now returns a different data structure
    to support the above
    + Cyrus::IMAP::Admin new ACL flag for modifying annotations
- update to version 2.5.0
  * Underscores (the _ character) are no longer allowed in the START,
    SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with
    configuration options in imapd.conf(5) being prefixed by service
    names and an underscore (_) character.
  * Extended Quota Types: New ways to restrict resource usage:
    Number of Folders, Number of Messages, Number of Annotations
  * CalDAV and CardDAV Support
  * Support for RFC 5464: IMAP METADATA
  * Event Notifications
  * The database format for mailboxes.db has been upgraded, adding a
    new mailbox type for deleted mailboxes. A key-value storage format
    is used, allowing for faster and better parsing of mailboxes.db,
    more granular updates to runtime environments, and more sustainable
    future upgrades.
  * New database format twoskip
  * Allowing Undefined Annotations
  * Catchall Mailbox for LMTP
  * Option Name Changes for autocreate: The options related to automatic
    creation of user mailboxes and sub-folders (aka. autocreate) have
    been changed to hold a prefix of autocreate_.
  * The default for the imapd.conf(5) configuration option delete_mode
    has changed from immediate to delayed.
  * The default for the imapd.conf(5) configuration option expunge_mode
    has changed from default to delayed.
  * Configuration option names for LDAP SSL/TLS configuration in
    imapd.conf(5) have been changed.
  * Configuration option names for SSL/TLS configuration in imapd.conf(5)
    have been changed to better reflect how they are used, as enhancements
    would otherwise create great confusion.
  * New Options for tls_*</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750400">- Update to version 3.8.2:
  * Major version jump, reference upstream changelog:
    https://www.cyrusimap.org/dev/imap/download/release-notes/index.html
- Drop no longer applicable patches:
  * cyrus-imapd-2.4.22-perl-5.36.patch
  * cyrus-imapd-2.4.22-recognize-new-backends.patch
  * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- Add refreshed patch:
  * cyrus-imapd-3.8.2_syslog-facility-doc.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750401">- Use correct libexecdir</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750402">- Use upstream configuration files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712923200">- Build with PCRE2, resolve segfault when querying mailboxes</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- update to version 3.8.4 (bugfix release)
  * Fixed Issue #4932: LITERAL+ broken in mupdate
  * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded
  * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica
- update to version 3.8.3 (security fix release)
  * Fixed CVE-2024-34055</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328001">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
</package>
<package pkgid="cad41afaf3f07b98ce959fa34af094fba2829a82d4503f981e3d336f7e5f52fb88dafd6d3a5a8f98cd259cca23b806c100dbb96c58ab06daba750a3fcff3030f" name="cyrus-imapd-snmp-mibs" arch="x86_64">
  <version epoch="0" ver="3.8.6" rel="bp160.1.1"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1745841600">- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from
  cyrus to root (bsc#1241536)
  Adapt backup-cyrus.service to run as user cyrus:mail</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1748347200">- update to version 3.8.5 (bugfix release)
  * Fixed Issue #5029: check for unexpected extra tiny-tests directories
  * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases
  * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов)
  * Fixed Issue #5009: various portability warnings and nits
  * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов)
  * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars
  * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me"
  * Fixed Issue #5047: proxying UID SEARCH
- rebased patches:
  - cyrus-imapd-3.8.2_syslog-facility-doc.patch
  + cyrus-imapd-3.8.5_syslog-facility-doc.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1752580800">- update to version 3.8.6 (bugfix release)
  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
  Desynchronization using Opportunistic TLS (bsc#1246165)
  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root
  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
  * Fixed issue #5424: recognise service-specific SASL options in
    ``cyr_info conf-lint``
  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
    Breyha)
  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1752840000">- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1753790400">- Only BuildRequire systemd-rpm-macros instead of systemd
  to reduce unneeded OBS rebuilds</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1762430400">- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd
  (bsc#1251788)
  Remove var-run.mount from Requires and After</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1781092800">- Adapt license</changelog>
</package>
<package pkgid="dab3a222d5b3da8323d8d3f53850cb0684dd5864afeef657555d9154681a095c5091694e333ced916b885f5a2de6762a4b4832a9a9cd656e47be5fc1baed865e" name="cyrus-imapd-utils" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="bp160.1.14"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1673092800">- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro
  to ensure compatibility with the C standard one, which is
  expected by sub-components.</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1675598400">- update to version 2.5.17
  * Fixed: tools/git-version.sh did not need bash specifically
    (gh#cyrusimap/cyrus-imapd#3143)
  * Fixed: saved session reuse crash when TLS enabled for backend connections
    (gh#cyrusimap/cyrus-imapd#3191)
  * Fixed: XFER now recognises 3.4 and 3.5 backends
  * Fixed: memory leak during backend auth state cleanup
    (gh#cyrusimap/cyrus-imapd#3320)
  * Fixed: use-after-free segfault in mupdate-client
    (gh#cyrusimap/cyrus-imapd#3312)
- incorperating a lot of work from buschmann23@opensuse.org!
- added new packages libcyrus0 and perl-Cyrus-Annotator
- enabled mailbox event notification
- enabled clamav support
- enabled SQLite support
- enablee and run unit tests
- prepared http support (using bcond; requires libical &lt; 3)
- deprecate BDB support: upstream drops it with 3.0
- deprecate SNMP support: upstream drops it with 3.4
- removed OpenSLP support
- configuration changes
  * add some resource control settings to cyrus-imapd.service file
    + TasksMax=2048
    + LimitNOFILE=10000
    + Restart=on-failure
    + RestartSec=5
- create runtime directory structure under /run/cyrus-imapd with
  systemd-tempfiles instead of unit RuntimeDirectory. This makes
  it possible to store some files and folders on ephemeral storage
- update default shipped config files to use /run/cyrus-imapd
- dropped package conflicts for *cyrus-*-kolab; those packages weren't
  build in a really, really long time, since they were obsoleted
  with cyrus-imapd 2.4.
- removed patches now included upstream:
  - cyrus-imapd-2.4.19_autocreate-0.10-0.patch
  - cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
  - cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch
- other dropped patches / unsupported, obsolete, out of maintenance:
  - cyrus-imapd-2.4.17_openslp.patch
  - cyrus-imapd-2.4.17_pie.patch
- rebased patches:
  * cyrus-imapd-2.3.16_syslog-facility-doc.patch as
    cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.4.17_db6.patch as
    cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.4.19-implicit_definitions.patch as
    cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch as
    cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.4.22-fix-cve-2021-33582.patch as
    cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- various spec cleanups
  * use conditional builds with bcond
  * remove SysV init scripts
  * remove conditionals for old openSUSE releases
  * remove unnecessary dependencies
- Changelog of prior 2.5.x releases:
  * see https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- update to version 2.5.16
  * Fixed: XFER now correctly distinguishes between 2.3.x releases
  * Fixed Issue #3123: XFER now recognises 3.1, 3.2 and 3.3 backends
  * Fixed: XFER now syslogs a warning when it doesn’t recognise the
    backend Cyrus version
- update to version 2.5.15
  * Fixed CVE-2019-19783: When creating a missing mailbox as part of
    a sieve ‘fileinto’ directive, lmtpd would create it as administrator,
    bypassing ACL checks. lmtpd creates missing mailboxes as part of
    a sieve ‘fileinto’ directive if:
  * (2.5+) the anysievefolder option is enabled (default: not), or
  * (3.0+) the sieve_extensions option has the ‘mailbox’ extension
    enabled (default: enabled) and the ‘fileinto’ directive contains
    the ”:create” argument
    Under these conditions, a user with the ability to upload a custom
    sieve script to their account could use it to create any valid
    mailbox on the server (with ACL inherited from the parent mailbox
    as usual). lmtpd no longer creates these mailboxes as administrator,
    so users may no longer use a ‘fileinto’ directive to create a mailbox
    they couldn’t create otherwise.
  * Fixed Issue #2913: errors are now logged when maxlogins_per_host,
    maxlogins_per_user, and popminpoll limits are reached (thanks Sergey)
- update to version 2.5.14
  * Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
    inherit authentication from the previous request on the same connection
  * Can now build against ClamAV &gt;= 0.101 (thanks Christoph Moench-Tegeder)
  * Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  * Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating
- update to version 2.5.13
  * Fixed CVE-2019-11356: buffer overrun in httpd
  * Fixed: ptloader, ptexpire and ptdump now honour the
    ptscache_db_path setting
- update to version 2.5.12
  * Fixed: cyr_virusscan now integrates with event notifications
    properly
  * Fixed: mailbox expunge event notifications no longer cause a crash
  * Fixed Issue #2378: ACLs containing spaces no longer break mailboxes.db
  * Fixed Issue #2253: master now rejects unix domain listen paths
    that are too long
  * Fixed: smilint warnings for CYRUS-MASTER.mib fixed
    (thanks Fabrice Bacchella)
  * Fixed Issue #2177: backend connections no longer ignore STARTTLS
    failures (thanks Wolfgang Breyha)
  * Fixed Issue #2222: dav_reconstruct no longer crashes on expunged
    entries
  * Fixed Issue #2221: dav_reconstruct no longer crashes given bad
    user id (thanks Wolfgang Breyha)
  * Fixed: tls_prune memory leak
  * Fixed: tls_prune doesn’t fail when tls_sessions.db is missing
  * Fixed Issue #2199: recovery from mupdate failure now in correct
    order (thanks Michael Menge)
  * Fixed: backend connections no longer crash if no banner found
  * Fixed: backend connections no longer return success on certain
    types of failure
  * Fixed Issue #2185: squatter no longer tries to index non-IMAP
    mailboxes (thanks Wolfgang Breyha)
  * Fixed: special-use proxying in murder (thanks Wolfgang Breyha)
  * Fixed Issue #1090: send OK NIL to subsequent ID commands
  * Fixed Issue #1434: auth_pts will now error when given a too-long
    socket file name
  * Fixed Issue #1964: correctly detect when librt is needed
  * Fixed Issue #1967: tell EXISTS count earlier when needed
  * Fixed: memory leak in httpd DAV support
- update to 2.5.11
  * Better integration with updated documentation/website infrastructure
  * The “timeout” option is now also used as an upper limit in minutes
    for IDLE connections. A new option “imapidletimeout” can be used to
    set an idle-specific timeout instead. (Thanks Philipp Gesang.)
  * Fixed: invalid free and memory leak in httpd
  * Fixed: services no longer exit when client disconnects before accept()
  * Fixed Issue #65: no longer use -Wno-sign-compare when unsupported
  * Fixed Issue #67: better support for dots in localparts
    (thanks Jeroen van Meeuwen)
  * Fixed: don’t assume LIST section options when proxying
  * Fixed: SEARCH crash on some platforms
  * Fixed: ensure directory hierarchy created when renaming empty mailboxes
  * Fixed Issue #1742: reconstruct no longer crashes when cache records
    are too short
  * Fixed Issue #11: LIST RETURN options now work properly with virtdomains
  * Fixed Issue #44: http proxy no longer crashes on starttls
    (thanks Wolfgang Breyha)
  * Fixed Issue #1752: no longer crash on notifyd mailto method
  * Fixed Issue #1768: ensure consistency of CalDav ORGANIZER
    (thanks Дилян Палаузов)
  * Fixed Issue #368: SETACL with invalid rights characters now returns BAD
  * Fixed Issue #46: renames to remote destinations now work correctly
  * Fixed Issue #38: UTF-8 :subject now supported in sieve vacations
  * Fixed Issue #1872: no longer crash on bad SSL session ids
  * Fixed Issue #1931: missing mysql/mariadb dependencies now reported
    by configure
  * Fixed: various memory and resource leaks (thanks Дилян Палаузов)
- update to 2.5.10
  * master(8) now supports a “-V” (print version and exit) option
  * Fixed Issue #34: imapd in murder no longer crashes on MOVE to
    nonexistent folder (thanks Wolfgang Breyha)
  * Fixed Issue #15: replication no longer crashes on mailboxes that
    are too old to be replicated. Instead, it fails with an error and
    logs a warning that they need to be reconstructed
  * Fixed Issue #45: extended LIST doesn’t lose options when proxied
    to backend
  * Fixed task 142: extended LIST response no longer missing
    \HasNoChildren flag on last mailbox
  * Fixed Issue #49: httpd no longer crashes with assertion failure on
    shutdown after CardDAV has been used
  * Fixed Issue #31: the ldap_timeout setting is now used correctly
  * Fixed bugzilla #3909: idled(8) no longer runs as root
    (thanks Carlos Velasco)
  * Fixed Issue #5: renaming folder with annotations no longer increases
    annotation quota usage
  * Fixed: URLFETCH crash when section is NULL
  * various build system improvements
- update to 2.5.9
  * ipurge(8) now supports a “-n” (dry run) option
    (thanks Valentin Vidic)
  * Fixed: imapd now proxies LIST (special-use) to backend
    (thanks John Capo)
  * Fixed: sync_client handles its shutdown file more reliably
    (thanks John Capo)
  * Fixed: httpd no longer crashes with assertion failure on
    shutdown after CalDAV has been used
  * Fixed bugzilla #3938: squat search now handles pre-2.5 cyrus.squat data
  * Fixed Issue #5: twoskip database I/O performance in unlocked foreach
  * various build system improvements
- udpate to 2.5.8
  * Allow replicated backends in a discrete Murder to both
    actively participate in the Murder.
  * When choosing between ANNOTATEMORE and METADATA, favour what the client used.
  * cyr_dbtool(8) now supports improved_mboxlist_sort (-M)
  * Fixed: master on pselect systems no longer chokes on repeated interrupts
    (thanks Jens Erat and team)
  * Fixed: better iOS CalDAV support (don’t announce VPOLL)
  * Fixed: backported version detection code to detect future versions
  * Fixed bug #3927: don’t break cyrus.index on XFER of mailbox with annotations
    (thanks Wolfgang Breyha)
  * Fixed: replication/XFER of mailbox names containing ‘@’
  * Fixed: METADATA and GETMETADATA pattern/list recognition
  * Fixed bug #3862: don’t leave behind inconsistent mailboxes when mupdate
    fails during mailbox rename
  * Fixed compilation with Sun Studio 12 C Compiler (thanks Marty Lee)
  * Fixed bug #3765: ctl_cyrusdb(8) now uses database paths from imapd.conf
    (thanks Simon Matter)
  * Fixed task 227: service processes no longer crash with ‘-T 0’ argument
    (thanks Ian Batten and Jens Erat)
  * various build system fixes
- update to 2.5.7
  * CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
    range checks
  * Support for legacy SSLv2 and SSLv3 protocols has been removed
  * Support for TLS compression has been removed (thanks Ondřej Surý)
  * Fixed bug #3908: crash in ctl_mboxlist -m
  * Fixed: setrlimit error on startup
  * Fixed task 216: don’t break quotas when transferring mailboxes between
    backends
  * Fixed: idled shutdown on platforms without pselect (thanks Thomas Jarosch)
  * Fixed: autocreate_sieve now uses sievedir setting correctly
  * Fixed bug #3907: cyradm --cadir option is now called --capath, and works
    (thanks Leena Heino)
  * Fixed bug #3905: fix segfault in all daemons when built with -DUSE_SETPROCTITLE
  * Fixed: pop3d no longer applies plaintextloginpause to TLS connections
  * Fixed bug #3866: lmtpd now consults local mailboxes.db first,
    before mupdate master (thanks Michael Menge)
- update to 2.5.6
  * tls_required (default: 0). Set this to 1 to require a TLS session for ALL
    authentications, not just plain ones (thanks Carlos Velasco)
  * new cyradm options
    + –tlskey keyfile: use certificate with keyfile to authenticate with server
    + –notls: disable StartTLS negotiation
    + –cafile cacertfile: Use CA certificate file to validate server certificate
    + –cadir cacertdirectory: Use CA certificate directory to validate server certificate
  * Fixed: cyr_synclog checks its arguments more strictly to avoid producing
    junk sync loc entries
  * Fixed: cyradm metadata implementation cleaned up and output made consistent
    (thanks Leena Heino)
  * Fixed: timsieved no longer discloses name/version if ServerInfo is Off or Min
    (thanks Carlos Velasco)
- update to 2.5.5
  * Security fix: compiling with –enable-autocreate no longer allows arbitrary
    mailbox creation
  * Fixed task 207: don’t segfault on mboxutil -d of MBTYPE_DELETED mailboxes
    (thanks Chris Stromsoe)
  * Fixed lock management over rename (thanks Thomas Jarosch)
  * Miscellaneous other fixes (thanks Thomas Jarosch)
- update to 2.5.4
  * Security fix: handle urlfetch range starting outside message range
  * Fixed bug: better error messages when reading corrupted twoskip databases
  * Fixed bug: treat autocreate_quota_messages:0 as unlimited
  * Fixed task 203: make autocreate_quota:0 work as documented
- update to 2.5.3
  * Fixed task 183: don’t crash on login when event notifications are enabled
- update to 2.5.2
  * Fixed task 179: ptloader should no longer crash in ptsmodule_standard_root_dn
  * Improved consistency of event notification parameters
  * Fixed bug: no longer run out of memory in mupdate with twoskip (mmap leak)
  * Fixed bug: no longer crash on ctl_mboxlist -d for remote mailboxes
  * Fixed bug: no longer include RFC 5322 header fields when fetching CALDAV:calendar-data
  * Fixed bug: properly handle same XML namespace used with 2 different prefixes in requests
- update to 2.5.1
  * Fixed: allow SYNC_CRC to be optional, making upgrades easier in future
  * Fixed: XFER deletes source mailbox less aggressively, avoiding data
    loss under pathological conditions
  * Fixed task 163 : XFER no longer bails out on header CRC mismatch
  * Fixed task 117 : now error out silently on non-TLS connections to
    services with implicit TLS
  * Fixed reconstruct bug: upgrading mailbox format now adds GUIDs to
    shared folders (Thanks Norbert Warmuth)
  * Fixed task 165 : xfer no longer fails due to bad version comparison
  * Fixed xfer bug: version 2.5 is now detected properly
  * Fixed task 109 : XLIST behaviour is now compatible with Outlook 2013
    (Thanks Leena Heino)
  * Fixed task 116 : LIST now correctly handles domains starting with “inbox.”
  * Fixed task 120 : admin users can now SETANNOTATION correctly
  * Fixed task 118 : imapd no longer crashes when selected mailbox is listed
  * Fixed task 156 : LMTP no longer incorrectly rejects messages
    delivered using ‘deliver’
  * Fixed task 76 : lmtpd no longer crashes when delivering to a shared
    mailbox (Thanks Leena Heino)
  * Fixed quota bug: no longer crash when setting quotas on shared
    folder hierarchies
  * Fixed compilation problem on Solaris 10 (Thanks Leena Heino)
  * Fixed bug: QuotaChange event notification now always includes
    maxMessages parameter
  * Fixed bug: event notifications now include paths for shared folders
  * Fixed bug: GETMETADATA now handles mailbox patterns correctly
  * Various fixes to compiling and tool chains
  * changes to cyradm
    + createmailbox command now accepts –specialuse flag if server
    supports CREATE-SPECIAL-USE
    + listmailbox command now returns special-use attribute if
    server supports SPECIAL-USE
    + listmailbox command now accepts –specialuse flag to list only
    mailboxes with special-use attribute
    + cyradm now uses LIST and REMOTE rather than RLIST if server
    supports LIST-EXTENDED
    + mboxconfig now accepts –private flag to switch from default
    shared to private version of an annotation
    + getmetadata: new command
    + setmetadata: new command
    + Cyrus::IMAP::Admin::getinfo now returns a different data structure
    to support the above
    + Cyrus::IMAP::Admin new ACL flag for modifying annotations
- update to version 2.5.0
  * Underscores (the _ character) are no longer allowed in the START,
    SERVICES and EVENTS sections of cyrus.conf(5), as they interfere with
    configuration options in imapd.conf(5) being prefixed by service
    names and an underscore (_) character.
  * Extended Quota Types: New ways to restrict resource usage:
    Number of Folders, Number of Messages, Number of Annotations
  * CalDAV and CardDAV Support
  * Support for RFC 5464: IMAP METADATA
  * Event Notifications
  * The database format for mailboxes.db has been upgraded, adding a
    new mailbox type for deleted mailboxes. A key-value storage format
    is used, allowing for faster and better parsing of mailboxes.db,
    more granular updates to runtime environments, and more sustainable
    future upgrades.
  * New database format twoskip
  * Allowing Undefined Annotations
  * Catchall Mailbox for LMTP
  * Option Name Changes for autocreate: The options related to automatic
    creation of user mailboxes and sub-folders (aka. autocreate) have
    been changed to hold a prefix of autocreate_.
  * The default for the imapd.conf(5) configuration option delete_mode
    has changed from immediate to delayed.
  * The default for the imapd.conf(5) configuration option expunge_mode
    has changed from default to delayed.
  * Configuration option names for LDAP SSL/TLS configuration in
    imapd.conf(5) have been changed.
  * Configuration option names for SSL/TLS configuration in imapd.conf(5)
    have been changed to better reflect how they are used, as enhancements
    would otherwise create great confusion.
  * New Options for tls_*</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750400">- Update to version 3.8.2:
  * Major version jump, reference upstream changelog:
    https://www.cyrusimap.org/dev/imap/download/release-notes/index.html
- Drop no longer applicable patches:
  * cyrus-imapd-2.4.22-perl-5.36.patch
  * cyrus-imapd-2.4.22-recognize-new-backends.patch
  * cyrus-imapd-2.5.13-glibc-2.30-compatibility.patch
  * cyrus-imapd-2.5.13_db6.patch
  * cyrus-imapd-2.5.13_implicit-definitions.patch
  * cyrus-imapd-2.5.13_syslog-facility-doc.patch
  * cyrus-imapd-2.5.17-fix-cve-2021-33582.patch
- Add refreshed patch:
  * cyrus-imapd-3.8.2_syslog-facility-doc.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750401">- Use correct libexecdir</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712750402">- Use upstream configuration files</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;mail+rpm@georg-pfuetzenreuter.net&gt;" date="1712923200">- Build with PCRE2, resolve segfault when querying mailboxes</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- update to version 3.8.4 (bugfix release)
  * Fixed Issue #4932: LITERAL+ broken in mupdate
  * Fixed Issue #4955: email headers in iMIP messages were not correctly encoded
  * Fixed Issue #4947: updating a script on a pre-sieve mailbox server resulted in an empty script on a sieve-mailbox replica
- update to version 3.8.3 (security fix release)
  * Fixed CVE-2024-34055</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328001">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
</package>
<package pkgid="5a621e63d4dbc5ac0890efdb9621ce93a1a8af233f6d3ae539b9f37eabce6bf1921aa2782b1bae385a2508347d2a6c405c11e638e6705f8c58e69db3c84cdf43" name="cyrus-imapd-utils" arch="x86_64">
  <version epoch="0" ver="3.8.6" rel="bp160.1.1"/>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1724328000">- enable httpd for caldav/carddav support</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1740052800">- (bsc#1237293) Possibly re-add cyrus-imapd to Package Hub (latest version from devel project)
  Add Conflicts to be able to build on SLES</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1740484800">- spec: add "Conflicts: leafnode" because both leafnode and cyrus-imapd
  ship a file called /usr/sbin/fetchnews (bsc#1237293)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1745841600">- CVE-2025-23394: cyrus-imapd: daily-backup.sh allows escalation from
  cyrus to root (bsc#1241536)
  Adapt backup-cyrus.service to run as user cyrus:mail</changelog>
  <changelog author="Aeneas Jai&#xDF;le &lt;aj@ajaissle.de&gt;" date="1748347200">- update to version 3.8.5 (bugfix release)
  * Fixed Issue #5029: check for unexpected extra tiny-tests directories
  * Fixed Issue #5148: added --enable-release-checks configure option for use when building releases
  * Fixed Issue #4489: calendar-color "changes" namespace (thanks Дилян Палаузов)
  * Fixed Issue #5009: various portability warnings and nits
  * Fixed Issue #5050: iTIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5052: iMIP line endings (thanks Дилян Палаузов)
  * Fixed Issue #5072: http_cgi use after free (thanks Дилян Палаузов)
  * Fixed Issue #5094: httpd crash when PROPFIND url is /dav/calendars
  * Fixed Issue #5118: broken language checks for "zr-hant" and "sr-me"
  * Fixed Issue #5047: proxying UID SEARCH
- rebased patches:
  - cyrus-imapd-3.8.2_syslog-facility-doc.patch
  + cyrus-imapd-3.8.5_syslog-facility-doc.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1752580800">- update to version 3.8.6 (bugfix release)
  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
  Desynchronization using Opportunistic TLS (bsc#1246165)
  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root
  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
  * Fixed issue #5424: recognise service-specific SASL options in
    ``cyr_info conf-lint``
  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
    Breyha)
  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1752840000">- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1753790400">- Only BuildRequire systemd-rpm-macros instead of systemd
  to reduce unneeded OBS rebuilds</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1762430400">- cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd
  (bsc#1251788)
  Remove var-run.mount from Requires and After</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1781092800">- Adapt license</changelog>
</package>
<package pkgid="b432710acbc4ac49732f79ad89a9282cf6e8f753a19f95dbc1d4370cb52374fddad031f6555efe418c6aaeee7daf2825e4acb5a2434cfeb3c57d962779ac3e1c" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="280208c30220635b4512ee27fb89284c2bdc1c18b4609729bbd3e1f71164c777ab7cf501c7255a3ee72f9f1b6dae8b91908c6432cee520481279407f30bb757f" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="1fec18653572fd97a679cb7edb25258fac6357c95fecfc1fcdc01a46ffbf6cb62ce19a53989371e957c8f1ee4b7bb95f407a5a59c85db6ea3b1a3902568c90aa" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="27df74014206f401807f2d0efe6dc496dc4e3ea33db5a8590958eb188d715807d7340a4c18b45099b6faa97f1d9bf3d61540c9cea9a2503045d26832d310a936" name="cyrus-sasl-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e6404e34689b7107c9e4e2fef3b12d2ad384fc5d5516de9b8071510b4953b09107d919d1d07a40b3bb2272496cd754b64b5ef8208d69fa23bff1d820475632ba" name="cyrus-sasl-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="333228bba7a8896b3d32227846bc00233d9fe00f6ba12acd2581fa17b459a07d8921e6ac4f6b226358013b3df74c8b01983fa653da6e8acde0378341e0636629" name="cyrus-sasl-bdb-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="587a776129c7f295eb12d5353ed7a01f4dd9dd2e927a69270c5f94714a8b5aad8537c4568c14e69459246beb3f949955997b1b430acb0b5b66f669c4bae51c6f" name="cyrus-sasl-bdb-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="4526d65caa05b3b9b47a4879972086b8f41a65ea436d891195281ea031de7fe9e224c5325d8685ae2b1cb840d4ae919406f767cdd75d10fe2e7fb6463bd01671" name="cyrus-sasl-bdb-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="04d076cca748f41a954a35c09cb718011dcc5db3802e0c17909601a6371eb4926801052ff2b2d0866cb481aa5259bde1a10a6ec5f11d2e2435300dfe7c2e79e3" name="cyrus-sasl-bdb-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="83c887155b2634642cbaf568408cee0f3f0d0c2f0583d41e67b2f2c2bcebcd05cc99329691c2046ef8e47ac835ae31ce9df6c00c50c81eeb78f00ef37d479dc0" name="cyrus-sasl-bdb-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="f27c8cc96a3cf510d2ffd173ff0e2e37f5e675ee5b5f7c7a6f78f3c2c88bb7c24c1b92952155b02dfde49a359ad93c4643d6b14b38a42d99bbcb0f156ded359f" name="cyrus-sasl-bdb-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="8122429185da715af44186761e446171e82296844e39798d1ce003bb22774758ff6b12b508eab8d6a9b09d684141810ea2066e951ec8c4c93c8d4a28312f2224" name="cyrus-sasl-bdb-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="075c6abc2ee2f73b619ed94871019161d3e4ce51aa709ce567c3feb1ece517da878394290764abe4ebefa7a83b905920d678a20d4903540a1a3ac1d8555b5202" name="cyrus-sasl-bdb-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="95bcf031f89f4a831ce482f72baef5b384724afdc983a56854b6aeda0fa7a46d7da74943a964c009c35117e4040289e5e9e88e33db6e1ef26ab3ca23b25a47f1" name="cyrus-sasl-bdb-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="83d6e8110271709859be16e2fb3219e41813e06481e6c07e6dce6b431643809e71b9a7e2c448598badce967aed722df868480ba924986516a34cff41fccd5ca5" name="cyrus-sasl-bdb-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="5d9e566d70e7f86a482e0f6513fd9351c9f372e7cfac6312e43e37070a8a2a8eb0071bca251e41f71e779ecb419e9dbc50f4b3d6f884a5b871b816ae126012d7" name="cyrus-sasl-bdb-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="66bb7836cf93ffd3888090b744350062f3b195b813725758eb520946de6d48a9cf6d7aa57b0f6f695789928ebb3776aafa1b838a8499873d9326331c7ea2b6aa" name="cyrus-sasl-bdb-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="49d0a6419b22d58c6e2a6885a35733108d8f43a09454516cca4b574b519d4db7dafa1242c98dd0d17838d7ae3193d2e72b6d205ecdd1001a6d3f9b3e1238bdd5" name="cyrus-sasl-bdb-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="62f9ae6ebff6f5965aa408a4263f4898444f01eaffd70ea81583f0eb08165add51dd19225af5fd5deb6ff109630096b8cb2ac036dc948932876444482ceb4200" name="cyrus-sasl-bdb-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="736c0a761fdb8eae60e7b58800be7f6eaa279b0ae0cb2054b4f9f839ae56c603b4b5e9706b14ca830ff79e50c8b3794cbfe763656a37d4824c07a068d0f37a7f" name="cyrus-sasl-bdb-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="10e2987cc19d0e5c18426dad4360e7be623208b0fd28d1d2e05753f9184a67b545c4a26f5766f3dd1f26f1e1f573ed37164375b3e919f5e574e57c738f15fc17" name="cyrus-sasl-bdb-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="c505de127a007245679ae62096dd882937799991e7ae7c07442a37f22a6d02d6851fc6d03470066cafb049e394c901317852c08069388b481351fbad0b115c71" name="cyrus-sasl-bdb-scram" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="9654998089f6cab28659dbb0fda1562a8975b131123d5d68086bab0401dbe76b4f7cc573bd91553fb57a6cd2049b36b1e3b085b15add602514de002c17bfa90b" name="cyrus-sasl-bdb-scram" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="6166a19ba395411aef985ff1546169b735cf247304d660ffa4daadd79bc0cf706b87db103a0f2a1cff4e3a9cebf063189c5da1c1a8f49813a410db417939bee9" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b04ae93e168992b5399a29efb21d6b5f4432b2ed8704cc3d4f398d84bdb7a142f98c61ca6d18d5092b97a89434d6a4bb68bdacf5935a29a2ca2dad4368eda16c" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="220f5ec595ce941ca752385c1375bb1ae79fda3b7d279d00b174d74a62abdf79e7c821624e408b27a28cd9f37e030060452077eef5eef71acc34afe6999425f9" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6cbc6aa922efa72d24159637c12ca845316857c344627edd8c9ce41f9725ad01fd83cdac7c98e87ddc9f8bd5a0cb434c38ab9220e99e646558e95e44d6ac093f" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="64587833cb9dfcf924a75e10c070d8b560f5c5ce1074bd0f4b6805f7a6fdfe18f4b3751bca319d262c8f8c5ee57884b6dc22dcaac247379b26b7f50faba348e3" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="013e798068b66f89df36ca05cf849372ec8dd49fc38450e1abab26ef3b0f828fe4a48b113bbabe16ea24c623c14d320b9b51423da6c071c83c0c8f765fdac82d" name="cyrus-sasl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6693831b30db90883fa2170a9bd4b998307d394ba17f4445393507370d323b1751115faec09f9ce66c342241b12f061aca7c54fda4471d0cf8a73aebfe0f4ea3" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="54ccd42038383eeedb12de6ad9b5a1d25478b1b7844f6cd84bd676809ae3eaa29fa39010b2967a9a5aea53294d7b580993f25bbbfef75ef12772dd6a037ccff8" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="364d9cbe4f9d1e7a49803943358dd4d274d2dca2937081326371fec8379662b37f34708533318de46c4ee57146935dedbb757fa42385e5688f935617bf1235ff" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="448b162570f3c4cff59dd8151cf30908483f4fa5496892dabf9bfa176a10b0d4a13ed0aaf258affd59049df5eba53121c8c5b9b52bdff3a62bd7d978fe1e9cef" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="88d0455e96eb6b9e562cae6a5400e5da1e7666335eb347088765befa9ec23ce6416868ab7913f6a605d084d03f8ff11839173759c5b1028f3cb136339f19634d" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="9d75f2475f3f13918377819f0826a7cf3603f8cb2547ca73efbba02c04b7368584cd18186cbdfbcccdd6da2a3d6751bf88ad2dfdceb0f47b6fa6f35efec32893" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="c23188bb82f03b79232657df83ef3ef912b0144e5e58d89d943eaa9253b30f94686556a2bb10f6b204eca997c630ef95a82ff9caa015e120488c1728095ed171" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="d234733304d2bbeaaac03db24b3716a9f57af58fd76c282165ead17ee7e9c43a738008cbf156ecd6f018617f96de9ba5c7a3f666e26a87a42858064343bb03ec" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="28ffac5a83905661858a0dcce22b3e320d6f3beaebfe79abd0d5313b2c1dbda0936ba30ac21df21a2fd63b4e718706e6c91dd4666398f87425acf234b2f1efb5" name="cyrus-sasl-ldap-auxprop" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="dc714607876d9e93da9ad7df3db609444fd285f2d322c5bc7b1956742fe9d23e1c81e0a0648fd14e574699d0fefc7128f3a2c312db5698cbdc65d6b080caa045" name="cyrus-sasl-ldap-auxprop" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="81d3a0671cd2da546e1894bf171b501bd3a8a698131077882abd5ee257ad481800fe9a420db7f9c34d75e9ea82443f0bba4502e4ea2a82971556d72c9fd27355" name="cyrus-sasl-ldap-auxprop-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8ab2f0624ef8d698b70577570fc3a673fe1208a46cca5abd4595da0c8066cbea90dd2f9dc755e69f27df6d133f47244cf6e8dff9d6cfa73a03bfe4b360fcb53a" name="cyrus-sasl-ldap-auxprop-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="fd88170f801745c56ac2db0cf2ad68edb4be720fbcaf7055d13f39e37a7096621e9044f0de75106cd715a8f1d3f23049e2fd3022e97ebfa0d893be65d9eebd02" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="c9c84dc96a206f48b13b4bce9610d8b3748b75a1606050c53666ad99720ef247062065372b7e28e4337642961ed5abece5480c2ca82836536aaf0a3f6f2ff83f" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="22eadc571c49fdb8d8a0bba58827b0672db945d9f7a6559cc49ffdfcb2bf34e052c69e23c00b27927176c2260583b95d331b61d79574ec7fbe9df89456cb6c20" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="32e5e11616e17ba5a0281fcb32fe57665e0216707f486610ab3f415633bcdd85c32b50896fe44d8ab7e18c91fefc9ba70f382d6560136d833d9405805c4dbfd3" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="f40e4847a37e44e0cec373dc1915bd04abcb82ae0cbee9b297ed0cfe5fb39993f535d067c569f2a96998421dfee0c3271f0789aa13c6668b92eba75013496341" name="cyrus-sasl-otp-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e121d6681e9ebf1b02529d9028f3a943a8f44a9d773a92bfc03f41adc43960c93d61d6ba615ec6365f3e8fac8e4ce8479e5065e6f3d070027e6769235210f549" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="ed27218d976a5a9547bf7ba68b22547db00ab26c514453fad15a5fdc81877e7cf79d016d4fffe9a13d094ba3232d3d10fcfd46ffa2bb6f020d6538e61d9bb61f" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="dd8ec1824ee7da11f2223fdf9afaedbb74f7efdc50702311658f1a87cc37749dddc1567cb878dba6abb4f93f21d3acc00954eb888a9cd08e2faa6cf12f074d34" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="c06fff8fd8160a4bbd95ddc2dc67ca9f7841e632a8d524deff2da2bff9213f93d0716011a27437acfce7867f9955f66b4636c8e797ab18763eb89f40339e9171" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8647eb32fef8ee13cbd32a1cc963710b538cdfa9029832b809a10a0a323e667f8041af7030f1c0f5e7b104d4505a32a11a7c4ac1a94df29866c835d8be66b639" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="aabea5c5c4f56a98c6b39954b0519ce26cf3b36781776ced78ef9afe96800f2b9af134be3c29774c907da8d89c83c85b59d4b506523a0784232bb979c575dfe6" name="cyrus-sasl-saslauthd-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="fa259b9b2c3584e3942627fe3b455074ebfb261a0288c57e9cc8581532e3ebcc5ab4dff590ee795d5902bad17fe076e75b3f71a1b0f8109f03cf5d07e02f9e31" name="cyrus-sasl-saslauthd-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="12ec122dc1b8f69098787a9145e623d7003d0e14be8f3bbba4af99a6eb2031a062ba4a74f7cd54544c0c71b1780e7d09f5c6169e453041d22777abd7f5d16902" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="a89d112e1c9d33c4001b1988ee6cee8c70db53097745dfa3eb1bc4be19de8bb9eaea078ff8fd737a9bbbf48ffb8ba87e785813a4dc87638df55edcd39ea0ef33" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="f8e153b146999feac41ee67d6d0c243edcdd124385023c96d440f0f2559fb124e54a0c93ab1b617af5fdcf09a63e2826cb7c1aa8cb7e21f24597a623a5409b3a" name="cyrus-sasl-sqlauxprop" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8c1e307f86136387dbfb940dc1f3d75f110e60182d7c10ed2c94758469e88accab8bb9b89e9f9415c2510113b227dd590daa7fe6b117ca88c3fd00e806b434a9" name="cyrus-sasl-sqlauxprop" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="5864229f642c3e5ac99d2f90167b813cd941823ff6c02945b2a455fb4fb63197e0a1554daa119e58daa2801c121aa4bf061684d7edf8a68f434ae0b2831bd7ef" name="cyrus-sasl-sqlauxprop-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.2.2"/>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="1a7e4f1a1397a8e700bb61e97fe7265155434751ae7886a22e7eb4d8251378ecec32acbb1423bd4c3a5444a3718c3801d16a4bfcc8733b31cd7a373c7e38ee12" name="cyrus-sasl-sqlauxprop-bdb" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="160000.3.1"/>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="dimstar@opensuse.org" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="bb560debbf3f3e45075d8428eabe11474a48fa785ddc617cd79278d7d983663957d100a10795626b3d9c3b16a4335be6fd11825b0b1277cf8fc7cc247d7f32eb" name="d-feet" arch="noarch">
  <version epoch="0" ver="0.3.16" rel="bp160.1.9"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520424000">- Drop python-pep8 BuildRequires and pass --disable-tests to
  configure, pep8 is only needed for the test-suite, that we do not
  even run.
- Add explicit python3 BuildRequires, and export
  PYTHON=%%{_bindir}/python3 before calling configure, switch to
  python3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1541764800">- Update to version 0.3.14:
  + Correctly honour theme foreground colour.
  + dbus_utils:
  - stringify "h" (UNIX FD).
  - simplify converting simple types.
  - simplify looking ahead 1 character.
  + Cleanup doap file.
  + settings:
  - fix regexp syntax, add a test.
  - use r'' strings for regexps.
  + Ignore W504 line break after binary operator.
  + Fix a few unused variable/import warnings.
  + Remove bare 'except:' clauses.
  + Detect 'pycodestyle', the new name for 'pep8'.
  + Run tests with same Python version as application.
  + Fix coding style errors reported by make check.
  + executedialog:
  - include bus name.
  - allow selecting name/path/interface fields.
  + Fix format string with python3.
  + Honor theme's foreground color.
  + Display statistics and match rules from the D-Bus Stats
    interface.
  + Remove unused DFeetWindow.package field.
  + Set icon_name to org.gnome.dfeet.
  + Do not use hyphen for the reverse-DNS names.
  + Rename the icons, appdata and desktop files.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1544529600">- Own metainfo dir to fix build on old versions of openSUSE.</changelog>
  <changelog author="bwiedemann@suse.com" date="1546430400">- Do not have useless arch-dependent libdir in noarch package
  (boo#1109534).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565438400">- Update to version 0.3.15:
  + Restructure menus to follow GNOME 3.32 menu guidelines.
  + New app icon as part of the GNOME 3.32 icon redesign.
  + Add OARS content-rating data.
  + New Meson-based build system.
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- No longer build as NoArch, FIXME added to spec.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1595937600">- Build as noarch again, with new meson version it works again.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620993600">- Update to version 0.3.16:
  + Escape markup in property values.
  + introspection: Clear idle id when done with it.
  + introspection: Load introspection data asynchronously.
  + DFeetWindow: switch to the added bus watch.
  + DFeetWindow: factor out connect_to(address).
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643716800">- Add 32.patch: Fix build with meson 0.60.0 and newer.</changelog>
</package>
<package pkgid="49920c36d0187de7f0dcce11de33f3c1502f7cc0406897a9046d46d6b6036b93710948f83d94108adfc93c0dd99be2334c2c51092de7e8e79a5f08f040a619c7" name="d-feet-lang" arch="noarch">
  <version epoch="0" ver="0.3.16" rel="bp160.1.9"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520424000">- Drop python-pep8 BuildRequires and pass --disable-tests to
  configure, pep8 is only needed for the test-suite, that we do not
  even run.
- Add explicit python3 BuildRequires, and export
  PYTHON=%%{_bindir}/python3 before calling configure, switch to
  python3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1541764800">- Update to version 0.3.14:
  + Correctly honour theme foreground colour.
  + dbus_utils:
  - stringify "h" (UNIX FD).
  - simplify converting simple types.
  - simplify looking ahead 1 character.
  + Cleanup doap file.
  + settings:
  - fix regexp syntax, add a test.
  - use r'' strings for regexps.
  + Ignore W504 line break after binary operator.
  + Fix a few unused variable/import warnings.
  + Remove bare 'except:' clauses.
  + Detect 'pycodestyle', the new name for 'pep8'.
  + Run tests with same Python version as application.
  + Fix coding style errors reported by make check.
  + executedialog:
  - include bus name.
  - allow selecting name/path/interface fields.
  + Fix format string with python3.
  + Honor theme's foreground color.
  + Display statistics and match rules from the D-Bus Stats
    interface.
  + Remove unused DFeetWindow.package field.
  + Set icon_name to org.gnome.dfeet.
  + Do not use hyphen for the reverse-DNS names.
  + Rename the icons, appdata and desktop files.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1544529600">- Own metainfo dir to fix build on old versions of openSUSE.</changelog>
  <changelog author="bwiedemann@suse.com" date="1546430400">- Do not have useless arch-dependent libdir in noarch package
  (boo#1109534).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565438400">- Update to version 0.3.15:
  + Restructure menus to follow GNOME 3.32 menu guidelines.
  + New app icon as part of the GNOME 3.32 icon redesign.
  + Add OARS content-rating data.
  + New Meson-based build system.
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- No longer build as NoArch, FIXME added to spec.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1595937600">- Build as noarch again, with new meson version it works again.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620993600">- Update to version 0.3.16:
  + Escape markup in property values.
  + introspection: Clear idle id when done with it.
  + introspection: Load introspection data asynchronously.
  + DFeetWindow: switch to the added bus watch.
  + DFeetWindow: factor out connect_to(address).
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643716800">- Add 32.patch: Fix build with meson 0.60.0 and newer.</changelog>
</package>
<package pkgid="2873a5d067825d7eee5f1b9d7962c044aa6634347bf69a157bba36df9da5bb4c707738bf82361717305fbed235e9400e62b462ea3cc277bffd89dd878a5104a7" name="d-spy" arch="x86_64">
  <version epoch="0" ver="48.0" rel="bp160.1.7"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 1.6.0:
  + No changes since 1.5.0 (44.beta).</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1694952000">- Update to version 1.8.0:
  + Fixes to support translations properly.
  + Fixes in introspection path generation.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1694952001">- Package the new translations, add lang_package macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Update to version 1.9.0:
  + Various styling improvements to match GNOME HIG.
  + Various tooltips, mnemonics, and shortcuts were added.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709553600">- Update to version 1.9.1:
  + Appdata and screenshot updates.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710590400">- Update to version 1.10.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726401600">- Update to version 47.0:
  + Set legacy icon for window
  + Updated translations.
- Changes from version 47.alpha:
  + Transition to GNOME release numbering
  + Build changes to accomidate bundling from Builder
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738584000">- Update to 48.beta:
  + Removal of libdspy. This is no longer used by Builder and will
    allow future changes to be landed for new designs.
- Drop devel and shared library sub-packages following upstream
  changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740484800">- Update to version 48.rc:
  + Use AdwAlertDialog
  + Use + icon for connecting to new bus
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742040000">- Update to version 48.0:
  + Updated translations.</changelog>
</package>
<package pkgid="d9d2bf8835fda046ce1c94e27383f28f28ec060da11b50e330ea7ede04de960ed47d10b8a600948689b97f443fcb4d230501d9bb82c35f2f356452273a658e3d" name="d-spy-lang" arch="noarch">
  <version epoch="0" ver="48.0" rel="bp160.1.7"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679054400">- Update to version 1.6.0:
  + No changes since 1.5.0 (44.beta).</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1694952000">- Update to version 1.8.0:
  + Fixes to support translations properly.
  + Fixes in introspection path generation.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1694952001">- Package the new translations, add lang_package macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Update to version 1.9.0:
  + Various styling improvements to match GNOME HIG.
  + Various tooltips, mnemonics, and shortcuts were added.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709553600">- Update to version 1.9.1:
  + Appdata and screenshot updates.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710590400">- Update to version 1.10.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1726401600">- Update to version 47.0:
  + Set legacy icon for window
  + Updated translations.
- Changes from version 47.alpha:
  + Transition to GNOME release numbering
  + Build changes to accomidate bundling from Builder
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738584000">- Update to 48.beta:
  + Removal of libdspy. This is no longer used by Builder and will
    allow future changes to be landed for new designs.
- Drop devel and shared library sub-packages following upstream
  changes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740484800">- Update to version 48.rc:
  + Use AdwAlertDialog
  + Use + icon for connecting to new bus
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1742040000">- Update to version 48.0:
  + Updated translations.</changelog>
</package>
<package pkgid="b1d67820e503eee39e0e13027cb97bebe06a3baf1cd6ffd28b3b9f3c0adf5b3852036cbf949c3d913f5faa32409a830396019c243ac5921abd6541b34f8a0b20" name="d0_blind_id" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="bp160.1.13"/>
  <changelog author="ablu.erikschilling@googlemail.com" date="1344859200">- Corrected license</changelog>
  <changelog author="jengelh@inai.de" date="1344859201">- Adhere to shared library policy
- Run format_spec_file service</changelog>
  <changelog author="mpluskal@suse.com" date="1424520000">- Cleanup spec file with spec-clener
- Update dependencies
  * building now requires autotools
- Use url for source
- Update to new release 1.0
  * no upstream chengelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1424606400">- Install COPYING</changelog>
  <changelog author="mpluskal@suse.com" date="1424606401">- Devel package needs to require library</changelog>
  <changelog author="mpluskal@suse.com" date="1454328000">- Tiny spec file cleanups</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575633600">-  Modernise spec file</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1685534400">- Update to version 0.8.5:
  * Update for Xonotic 0.8.5
  * Using modern secure function to clear memory when available.
  * Fixed version-info.
  * main.c: missing va_end(ap).
  * Bump version for internal changes only in this release.
  * Fix some REALLY stupid typos in the fastreject RSA key generation.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685620800">- Spec file cleanup
- Use obs_scm service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687435200">- Update to version 0.8.6</changelog>
</package>
<package pkgid="14ed5e5bd6b20784cf581167bea4381e525616dc2b46ac340ebd28beac24a6705a9b0855d6ef838c6041474888d6c1dbceda18df895c591aa489efd321985079" name="d0_blind_id-devel" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="bp160.1.13"/>
  <changelog author="ablu.erikschilling@googlemail.com" date="1344859200">- Corrected license</changelog>
  <changelog author="jengelh@inai.de" date="1344859201">- Adhere to shared library policy
- Run format_spec_file service</changelog>
  <changelog author="mpluskal@suse.com" date="1424520000">- Cleanup spec file with spec-clener
- Update dependencies
  * building now requires autotools
- Use url for source
- Update to new release 1.0
  * no upstream chengelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1424606400">- Install COPYING</changelog>
  <changelog author="mpluskal@suse.com" date="1424606401">- Devel package needs to require library</changelog>
  <changelog author="mpluskal@suse.com" date="1454328000">- Tiny spec file cleanups</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575633600">-  Modernise spec file</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1685534400">- Update to version 0.8.5:
  * Update for Xonotic 0.8.5
  * Using modern secure function to clear memory when available.
  * Fixed version-info.
  * main.c: missing va_end(ap).
  * Bump version for internal changes only in this release.
  * Fix some REALLY stupid typos in the fastreject RSA key generation.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1685620800">- Spec file cleanup
- Use obs_scm service</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687435200">- Update to version 0.8.6</changelog>
</package>
<package pkgid="ebe2e17f686894e0328be4bb49ee275ea2a3f089cffe1afdd380b4d20b86bcd9ee72d10ec041b7fd7af8913b31d3b324c622903cb8fb8e6cf8687e57b1357bd2" name="d2" arch="x86_64">
  <version epoch="0" ver="0.6.3" rel="bp160.1.13"/>
  <changelog author="jkowalczyk@suse.com" date="1681041600">- Initial package version 0.4.0:
  * update link to tree-sitter grammar
  * add text-transform as keyword
  * fix watch mode
  * Add `text-transform` attribute to the `style` block
  * fix solo near
  * markdown class has to have diagramHash targeting
  * Lifeline should inherit the stroke style from the actor
  * fix empty layer
  * fix: attach objects of tempGraph
  * Add d2-filter as community plugin
  * update keywords rows -&gt; grid-rows
  * new method for placing nodes across rows
  * fix inheritence bug
  * rename to grid diagram
  * validate descendants
  * layout evenly with rows and columns
  * center container if growing to fit label
  * validate edges
  * add padding between dagre labels
  * fixing rows creation
  * finish column logic
  * more dynamic grid sizing according to node sizes
  * evenly size grid nodes
  * values must be positive
  * layout with grids
  * Truncate to 32-bit precision to avoid floating-point arithmetic divergence between platforms
  * docs(readme): add golang queue library as example.
  * chore: feature description doc
  * fixes #1104
  * namespace transitions
  * fix builds on 32bit
  * have watch mode parse svg message correctly
  * fix: find outer near contaienr
  * fix: validation for near obj connect to outside
  * fix: a clean spilit for temp graph
  * d2parser: Fix #322
  * fix: validateNear outside connection
  * fix: nil labelPosition
  * fix: calc labelPosition
  * fix: delete redundant file
  * fix: use method instead of attribute
  * fix: delete redundant variable
  * fix: delete redundant return value
  * fix: ignore objects inside near container when calc boundingBox
  * fix: calc labelDimension
  * fix: integrate logic of construct sub graph inside WithoutConstantNears
  * fix: add validation for near connectioins
  * fix: compile_test testcase
  * fix: revert near_bad_connected compile_test
  * fix: delete redundant testcases
  * feat: descendants now is allowed for container with near attribute</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681819200">- Update to version 0.4.1:
  * [ci-force] add japan example
  * [ci-base] add d2 pptx example
  * remove d2graph edge.MinWidth MinHeight
  * adjust label positioning for arrowhead
  * update bounding box for arrowhead labels
  * position arrowhead labels
  * render with arrowhead dimensions
  * set arrowhead label dimensions
  * pptx board path
  * refactor boardType
  * refactor ppt
  * remove import
  * show message while generating gif
  * navbar on pptx
  * add example
  * add constants
  * navbar on pdfs
  * Update lib/xgif/xgif.go
  * export root
  * package docs
  * export gifs
  * Fixing typos
  * refactor d2graph.Attributes
  * relative paths
  * refactor LabelWidth and LabelHeight to LabelDimensions
  * convert png boards to gif
  * Update generate_png.js
  * add exportExtension
  * add dark terrastruct flagship theme
  * e2etests: Add ent2d2 test case
  * don't increase font size for md text if container
  * update markdown text measurement and rendering to use font-size
  * rename to horizontal-gap and vertical-gap
  * fix grid panic with insuffient objects
  * if storing int and casting float64 each use
  * set scale when generating png
  * use grid-gap values for layout
  * add grid-gap keywords
  * handdrawn semibold
  * custom semibold font option
  * using semibold
  * add SourceCodePro-Semibold font
  * measure with semibold
  * use semibold font instead of font-weight: 600
  * setting up semibold font
  * add SourceSansPro-Semibold font
  * support multiboard rendering in e2e tests
  * changelog and ci
  * return svg
  * move to a single file
  * generate files from templates
  * fix layout of grid in constant near
  * move xml to templates
  * fix links in keynote
  * [ci-force] update contributing
  * add links to pptx
  * fix urls in changelogs
  * fix image resizing
  * minor fixes for MS PowerPoint
  * fix image size
  * rename and docs
  * update title
  * slide title
  * fix size and position
  * add pptx export
  * base ppt export</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Update to version 0.4.2:
  * update get point at distance
  * fix reparsing flags
  * add logseq plugin
  * add md block info
  * fix elk issue when container named root
  * add d2sketch in ci
  * fix e2e profile passing args
  * fast attempt with debt balancing + skip bad rows
  * add maximum attempts
  * improve grid expand evenly
  * search for white index
  * fix gif pallete
  * add profiling for e2e tests
  * implement arrays for classes
  * add more detailed error msg
  * account for non-orthogonal connection segments
  * arrowhead refactor
  * fix generate unique number id
  * model_order cycle breaking elk
  * fix elk self loop spacing
  * d2oracle: don't modify classes
  * Update japan.d2
  * enforce min size for text shapes
  * remove border-radius percent tests, add border-radius pill (with a big value) test
  * feat: revert percentage border-radius. Accept higher border-radius value and limit it to half of the smaller shape side to be rendered as a pill
  * feat: check border-radius value value before checking its decimals. New rx and ry compute method.
  * feat: add possiblity to set shape border-radius with percentage value</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686398400">- Update to version 0.5.0:
  * D2 files have the ability to import from other D2 files #1371
  * sql_table alternatively takes an array of constraints instead of being limited to a single one #1245
  * Use shape-specific sizing for grid containers #1294
  * Grid diagrams support nested shapes or grid diagrams #1309
  * grid-gap, vertical-gap, and horizontal-gap apply to padding on grid diagrams #1309
  * Watch mode browser uses an error favicon to easily indicate compiler errors #1240
  * Grid layout performance improved when there are many similarly sized shapes #1315
  * Connections and labels are adjusted for shapes with 3d or multiple #1340
  * Constraints in sql_table render even if they have no matching abbreviation #1372
  * Constraints in sql_table sheds their excessive letter-spacing and is padded from the end consistently #1372
  * Duplicate image URLs in icons are only fetched once #1373
  * In watch mode, images are cached by default across compiles. Can be disabled with flag --img-cache=0. #1373
  * Common invalid array separator , usage in class arrays returns a helpful error message #1376
  * Invalid constraint usage is met with an error message, preventing a common mistake of omitting shape: sql_table #1379
  * Connections no longer obscure outside labels #1381
  * Container connections in dagre are more balanced #1384
  * Connections that go through shape labels are now masked translucently #1383
  * Shadow is no longer cut off when --pad is 0. Thank you @LeonardsonCC ! #1326
  * Fixes grid layout overwriting label placements for nested objects #1345
  * Fixes fonts not rendering correctly on certain platforms #1356
  * Fixes folders not rendering in animations (--animate-interval) #1357
  * Fixes panic using reserved keywords as containers #1358
  * When multiple classes are change different attributes of arrowheads, all are applied instead of only the last one #1362
  * Prevent empty block strings #1364
  * Fixes dagre mis-aligning a nested shape's connection #1370
  * Fixes a bug in grids sometimes putting a shape on the next row/column #1380
  * @xyz is now reserved as a pattern for imports</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686398401">- Update to version 0.5.1:
  * d2ir: Fix for windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1691841600">- Update to version 0.6.0:
  * Variables and substitutions are implemented. See docs. #1473
  * Configure timeout value with D2_TIMEOUT env var #1392
  * Scale renders and disable fit to screen with --scale flag #1413
  * null keyword can be used to un-declare. See docs #1446
  * Develop multi-board diagrams in watch mode (links to layers/scenarios/steps work in --watch) #1503
  * Glob patterns have been implemented. See docs. #1479
  * Display version on CLI help invocation #1400
  * Improved readability of connection labels when they overlap another connection #447
  * Error message when shape is given a composite #1415
  * Improved rendering and text measurement for code shapes #1425
  * The autoformatter moves board declarations to the bottom of its scope #1424
  * All font styles in sketch mode use a consistent font-family #1463
  * Tooltip and link icons are positioned on shape border #1466
  * Tooltip and link icons are always rendered over shapes #1467
  * Boards with no objects are considered folders #1504
  * DEBUG environment variable ignored if set incorrectly #1505
  * Fixes edge case in compiler using dots in quotes #1401
  * Fixes grid label font size for TALA #1412
  * Fixes person shape label positioning with multiple or 3d #1478
- _service tar_scm disable changesgenerate. Upstream uses small
  incremental commits and the automated changelog is overly long.
  Use GitHub release summary instead.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1693310400">- Adjust license to cover also redistributed vendor/github.com/* files</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1696593600">- Update to version 0.6.1:
  * The globs feature underwent a major rewrite and is now almost finalized
  * UTF-16 files are automatically detected and supported #1525
  * Grid diagrams can now have simple connections between top-level cells #1586
  * Globs are lazily-evaluated #1552
  * Latex blocks includes Mathjax's ASM extension #1544
  * font-color works on Markdown #1546
  * font-color works on arrowheads #1582
  * CLI failure message includes input path #1617
  * d2 fmt formats all files passed as arguments rather than just the first non-formatted (thank you @maxbrunet) #1523
  * Fixes Markdown cropping last element in mixed-element blocks (e.g. em and strong) #1543
  * Adds compiler error for non-blockstring empty labels #1590
  * Prevents multiple constant nears overlapping in some cases #1591
  * Fixes crash from empty nested grid #1594
  * d2fmt with variable substitution mid-string is formatted correctly #1611
  * Fixes certain shape IDs not working with dagre #1610
  * Fixes font-size adjustments missing from rendered code shape #1614</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1701950400">- Update to version 0.6.2:
  * ELK routes sql_table edges to the exact columns (ty @landmaj) #1681
  * Unfilled triangle arrowhead is available. #1711
  * Grid containers customize label positions. #1715
  * A single board from a multi-board diagram can be rendered with --target flag. #1725
  * Grid cells can contain nested edges #1629
  * Edges can go across constant nears, sequence diagrams, and grids, including nested ones. #1631
  * All vars defined in a scope are accessible everywhere in that scope, i.e., an object can use a var defined after itself. #1695
  * Encoding API switches to standard zlib encoding so that decoding doesn't depend on source. #1709
  * currentcolor is accepted as a color option to inherit parent colors. (ty @hboomsma) #1700
  * Grid containers can be sized with width/height even when using a layout plugin without that feature. #1731
  * Watch mode watches for changes in both the input file and imported files #1720
  * Fixes a bug calculating grid height with only grid-rows and different horizontal-gap and vertical-gap values. #1646
  * Grid layout accounts for each cell's outside labels and icons #1624
  * Grid layout accounts for labels wider or taller than the shape and fixes default label positions for image grid cells. #1670
  * Fixes a panic with a spread substitution in a glob map #1643
  * Fixes use of null in sql_table constraints (ty @landmaj) #1660
  * Fixes ELK growing shapes with width/height set #1679
  * Adds a compiler error when accidentally using an arrowhead on a shape #1686
  * Correctly reports errors from invalid values set by globs. #1691
  * Fixes panic when spread substitution referenced a nonexistant var. #1695
  * Fixes incorrect appendix icon numbering. #1704
  * Fixes crash when using --watch and navigating to an invalid board path #1693
  * Fixes edge case where nested edge globs were creating excess shapes #1713
  * Fixes a panic with a connection to a grid cell that is a container in TALA #1729
  * Fixes incorrect grid cell positioning when the grid has a shape set and fixes content sometimes escaping circle shapes. #1734
  * Fixes content sometimes escaping cloud shapes. #1736
  * Fixes panic using a glob filter (e.g. &amp;a) outside globs. #1748
  * Fixes glob keys with import values (e.g. user*: @lib/user). #1755</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1705492800">- Update to version 0.6.3:
  * Themes can be customized via d2-config vars. #1777
  * Icons can be added for special objects (sql_table, class, code, markdown, latex). #1774
  * Fix importing files that override an existing value with an array. #1762
  * Fixes missing unfilled triangle arrowheads when sketch flag is on. #1763
  * Fixes a bug where the render target could be incorrect if the target path contains "index". #1764
  * Fixes ELK layout with outside labels/icons. #1776
  * Fixes a bug where an edge could become disconnected with dagre layout and direction right. #1778</changelog>
</package>
<package pkgid="a79cda9cfe497b8ca598e275c49fd61a4955f568e6b326f7c839b40b1e7c7afb1a52bc3745346a63191b2afac4af7dd884f5233e2a31733ff47e0a98ecba832c" name="dLeyna" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="bp160.1.14"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1665748800">- Initial packaging for openSUSE.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669118400">- Add the dbus() provides that existed in dleyna-server, allowing
  consumers to migrate over.
- Have the devel package Provide/Obsolete
  dleyna-{core,renderer,server}-devel to have a clean upgrade path.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1669377600">- Update to version 0.8.2:
  + Python:
  - Install modules to be used externally as well
  - Port python code to python3 and update for (modern) PyGObject
  + Core:
  - Do not leak context filter list
  - Do not leak cancellable in gasync tasks
  - If log-level is debug, do not block other log domains
  + Renderer:
  - Fix cancelling async tasks
  - Fix setting the name for the renderer service
  - Do not add empty device properties
  + Server:
  - Do not access async tasks if they are cancelled
  - Fix double-free and reference leak if tasks are cancelled
  - Do not unref NULL variants on shutdown
  - If an optional ServiceAction does not exist, do not emit a
    warning
  + Bugs fixed in this release: glgo#GNOME/World#10,
    glgo#GNOME/World#8, glgo#GNOME/World#9.
- Changes from version 0.8.1:
  + Core: Use GString to sanitize UDNs for object paths names
  + Renderer:
  - Remove duplicate source file that is also in core
  - Fix a double-free in set_position call
  - Make coverity happy in a couple of places
  + Server:
  - Fix a double-free on icon download error
  - Remove some dead code
  + Bugs fixed in this release: Coverity issues 358585, 358590,
    358593, 358595, 358598, 358599 and 358602
  + Merge requests included in this release: glgo#World/dLeyna!5</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1675080000">- Add dLeyna-no-python-shebang.patch: remove /usr/bin/python
  shebang from download_sync_controller.py. The file is installed
  into a python 3.10 site-directory and thus clearly does not need
  a python2 shebang.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1689854400">- Add 61d24fdc.patch: Fix typos for meson 1.2 compatibility.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695988800">- Update to version 0.8.3:
  + Build: Fix compatibility with Meson 1.2
  + Renderer: Fix locale initialization
  + Server:
  - Fix locate initialization
  - Fix uninitialized variable warning
  - Properly handle optional actions
  - Fix browse not working properly
- Drop 61d24fdc.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696420800">- Remove executable bit from download_sync_controller.py. Fix
  rpmlint warning.</changelog>
</package>
<package pkgid="3e36fa9ac4b6e3fcb565dca455f0b7ff171708a84d64e7425c5c7d1dc4baf2ca13f7cf258e9a2f62ea278a80d66e0a71b6abf4d30ff12d4758ef45c8ef841491" name="dLeyna-devel" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="bp160.1.14"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1665748800">- Initial packaging for openSUSE.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669118400">- Add the dbus() provides that existed in dleyna-server, allowing
  consumers to migrate over.
- Have the devel package Provide/Obsolete
  dleyna-{core,renderer,server}-devel to have a clean upgrade path.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1669377600">- Update to version 0.8.2:
  + Python:
  - Install modules to be used externally as well
  - Port python code to python3 and update for (modern) PyGObject
  + Core:
  - Do not leak context filter list
  - Do not leak cancellable in gasync tasks
  - If log-level is debug, do not block other log domains
  + Renderer:
  - Fix cancelling async tasks
  - Fix setting the name for the renderer service
  - Do not add empty device properties
  + Server:
  - Do not access async tasks if they are cancelled
  - Fix double-free and reference leak if tasks are cancelled
  - Do not unref NULL variants on shutdown
  - If an optional ServiceAction does not exist, do not emit a
    warning
  + Bugs fixed in this release: glgo#GNOME/World#10,
    glgo#GNOME/World#8, glgo#GNOME/World#9.
- Changes from version 0.8.1:
  + Core: Use GString to sanitize UDNs for object paths names
  + Renderer:
  - Remove duplicate source file that is also in core
  - Fix a double-free in set_position call
  - Make coverity happy in a couple of places
  + Server:
  - Fix a double-free on icon download error
  - Remove some dead code
  + Bugs fixed in this release: Coverity issues 358585, 358590,
    358593, 358595, 358598, 358599 and 358602
  + Merge requests included in this release: glgo#World/dLeyna!5</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1675080000">- Add dLeyna-no-python-shebang.patch: remove /usr/bin/python
  shebang from download_sync_controller.py. The file is installed
  into a python 3.10 site-directory and thus clearly does not need
  a python2 shebang.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1689854400">- Add 61d24fdc.patch: Fix typos for meson 1.2 compatibility.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695988800">- Update to version 0.8.3:
  + Build: Fix compatibility with Meson 1.2
  + Renderer: Fix locale initialization
  + Server:
  - Fix locate initialization
  - Fix uninitialized variable warning
  - Properly handle optional actions
  - Fix browse not working properly
- Drop 61d24fdc.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1696420800">- Remove executable bit from download_sync_controller.py. Fix
  rpmlint warning.</changelog>
</package>
<package pkgid="3562d8e19f4980b6ea92430e8b11bd840d9585011be09c58bc5b45af4bbc752e46117b69294cd67416e6c2c475eee2d0bf829de18e3a69cd5f2ced51d87bdf62" name="dMagnetic" arch="x86_64">
  <version epoch="0" ver="0.37" rel="bp160.1.12"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1595851200">- Update to 0.25:
  * Internal RGB channels upgraded from 3 to 10 bit</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1596196800">- Corrected specfile install command to let rpm take care of the
  compression (see rq#823547#status-history-8597198 )</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1596715200">- Put up a more sensible description.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1604923200">- Update to 0.27
  * Unfortunately, the last release (0.26) had a severe bug. Which
    allowed Amstrad CPC enthusiasts to play the old games, but
    nobody else. This bug has been fixed now.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608465600">- update to 0.28:
  * This is the Spectrum and the Archimedes release. Users now have the
  opportunity to play Magnetic Scrolls' games from the Spectrum128,
  Spectrum+3 and the Acorn Archimedes disk images. What remarkable pieces of
  hardware they were</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1614600000">- Update to 0.30
  This is a code cleanup release. It includes lots of bug fixes. For example:
  A picture from 'Fish!' was missing. What a shame. In addtion to this, I also
  took the liberty of cleaning up the website a little bit. Hope you like it.
- Update to 0.29
  Welcome to the "Night before Christmas" Release of dMagnetic! This one allows
  players to use ATR images from the AtariXL and Atari800 releases of the games.
  In addtition to this, a new graphics vmode has been added: UTF. It works on
  more terminals than the sixel mode and allows more people to enjoy the
  beautiful pictures!</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1672920000">- Update to 0.34
  * moved man page to section 6
  * bugfixes and documentation update</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 0.35:
  * Lots of cleanup.
  * The memory consumption was reduced
  * the interface between the frontend and the engine has gotten cleaner
  * more stable savegame for Atari and Apple</changelog>
  <changelog author="Deepthi Yadabettu Venkatachala &lt;deepthi.venkatachala@suse.com&gt;" date="1682683200">- Update to 0.36:
  * The "Welcome interested developers" release!
  * Not that many features which are of use to the casual gamer, but
    under the hood, the code has matured. Now it is even possible to
    build a backend library to run the magic of Magnetic Scrolls
    with 3rd party frontends!</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1709640000">- Update to 0.37:
  * This version saw a little bit action on the help screens. Plus,
    the WEIRD WEIRD graphics mode of the Apple II ate a lot of memory,
    which, if you do it properly, is no longer wasted.</changelog>
</package>
<package pkgid="6f6e5b900a2158562750e845872339870a355cc7ccee755f14b54caa1b1dd6bbf6452691a6a8dfddc87f2605b656d85db88c9a52bafa6d3da1b5ecd070c7a95a" name="dSFMT-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="bp160.1.10"/>
  <changelog author="dmitry_r@opensuse.org" date="1406203200">- Initial package, version 2.2.3
- Build shared library
  * dSFMT-sharedlib.patch
- Export functions required to use the library
  * dSFMT-export_functions.patch</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Update to version 2.2.5
  * Some minor fixes
  * Allow build as shared library, this obsoletes
    dSFMT-export_functions.patch
- Refreshed dSFMT-sharedlib.patch as dSFMT-sharedlib-makefile.patch
- Fixed SPEC file, use working upstream URL</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="b13b30e8611ab3524f538688ebd61f5f60dbe3ce653260974801866c00d5f25416ea8aae606f7b2cbe62e2247047fe6bc220dd38f46f5690d7cc27b35cc7a9ad" name="daemonize" arch="x86_64">
  <version epoch="0" ver="1.7.8" rel="bp160.1.12"/>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1708862400">- Add daemonize 1.7.8</changelog>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1708862401">- Add a meaningful description using %description macro</changelog>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1708948800">- Apply spec-cleaner to daemonize.spec</changelog>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1709035200">- Fix License field using proper BSD-3-Clause</changelog>
  <changelog author="Alessio Biancalana &lt;alessio.biancalana@suse.com&gt;" date="1709035201">- Add proper group field for daemonize 1.7.8</changelog>
</package>
<package pkgid="84f563e9eb740d64cc019ed830bc571c7cc8288348ce67e384a79a1daaebd229381cdaf118a8994a2f2231f230d8e364c25b08669a08141626bf569afa192407" name="dai-banna-fonts" arch="noarch">
  <version epoch="0" ver="3.000" rel="bp160.1.9"/>
  <changelog author="pgajdos@suse.com" date="1382011200">- initial version 2.200</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652788800">- Update to version 3.000
  * Uses visual order instead of logical order for left vowels.</changelog>
</package>
<package pkgid="5ee84b75ce84cbfeaffeca6d1d058d96c56789d0d1b44f1db9894dec492910815935177ce9dc2e420b2e37a4be213405f244c88a14ca3c6fc83db3eea1c671f3" name="dante" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="bp160.1.12"/>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718712000">- Remove nonfunctional rc symlink (pointed to a plain file
  not an executable)</changelog>
</package>
<package pkgid="cda294c1ad3115bdca13356cd96c6d9de82de563e17a1313f3828cf3d00a3417657178bc7bb393d98b41cec97bc56c12500a8f6947eed147ef9fe3b01d25eb29" name="dante-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="bp160.1.12"/>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718712000">- Remove nonfunctional rc symlink (pointed to a plain file
  not an executable)</changelog>
</package>
<package pkgid="97308ad563724ad3c6a5ba1dbd211b789acdf47d12120a8343383db72389244f95466d01f894becd14f38095d7a03beba044a308c46d2b532f86607baf95d351" name="dante-server" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="bp160.1.12"/>
  <changelog author="mpluskal@suse.com" date="1430222400">- Update to 1.4.1
  * Fixed configure problem with detection of libc.so on recent
    FreeBSD versions.
  * Fixed problem in configure test used for figuring out which
    buffer in an IPC socket is used for determining bytes that can
    be buffered.  Should fix problem on FreeBSD.
  * Fixed bug in handling of buffered GSSAPI data.
  * AIX 6.1 compilation fixes.
  * NetBSD 6.1.3 gethostbyaddr() configure fix.
  * for a full list of changes see NEWS file
- Use url for source
- Cleanup spec-file with spec-cleaner
- Remove upstreamed/obsolete patches
  * dante-1.4.0-64bit_portability.patch
  * dante-1.4.0-glibc-2.17.patch
  * dante-1.4.0-sockd_conf.patch
- Update dependencies
- Enable upnp support
- Do not mark systemd unit file as executable</changelog>
  <changelog author="mpluskal@suse.com" date="1430913600">- Enable libwrap
- Be more explicit in configure stage
- Readd updated dante-1.4.0-glibc-2.17.patch</changelog>
  <changelog author="dmueller@suse.com" date="1431345600">- add dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1448884800">- Add dante-miniupnp14.patch to fix compilation with miniupnpc
  API level 14.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539864000">- Update to version 1.4.2:
  * Support new version of libminiupnp (drop dante-miniupnp14.patch)
  * Miscelaneous build improvements</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1539864001">- Drop authorship; this ought not to be part of descriptions.
- Fix RPM groups. Drop filler words. Replace boilerplate -devel
  subpackage description.
- Remove pointless --with-pic (no static libs here).</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1621166400">- Update to version 1.4.3
  * LDAP module functionality expanded with support for PAC and
    LDAP based authentication.
  * Changed child.maxrequests behavior to be an upper limit on
    requests handled and added child.maxlifetime, which can be
    used to specify the limit on how long child-processes will
    receive new requests.
  * Added Linux service specification file.
  * Work around an issue where "logoutput: syslog" in the client
    could create issues for the application being socksified.
  * Added missing NULL argument check in Raccept().
  * Fix an error case where the Dante mother process would never
    terminate a request process that failed handling a client
    due to resource shortage, leading the request process to hang
    around idle forever.
  * Will hopefully fix problem reported by ANON.
  * Fix for server crash in builds with preloading disabled
    (preloading is enabled by default).
  * Fix for module related SIOCGIFHWADDR warning in obscure
    situations.
  * Removal of arbitrary interface limit in getifaddrs()
    compatibility function.
  * Some minor automated build/test related changes.
  * Minor documentation fixes.
- Update patch dante-1.4.1-gcc5-fixes.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630411200">- Added hardening to systemd service(s). Modified:
  * sockd.service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1718712000">- Remove nonfunctional rc symlink (pointed to a plain file
  not an executable)</changelog>
</package>
<package pkgid="8ef8c55a677560bcfb437d8c59b827e5f0ccef7e3788f68dbd7b23ca658c4f340e698cdc735899c7d568437d526b115419df835683814d734268ce1b487761d8" name="dapl" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="b84c7ee5c98125ed02ae5ea47778f8eb619addfdd8adf8ba114adffb0c52c44c29cc548ff8c52ae714e33753f5a0571fe64936e3baa108b20a81a9b29ca1c651" name="dapl-debug" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="53ab808b1feb3de5ce81bb2904a9b245c007042fb7191ecdeb715e96fbb54777ab7f9ae147909270021b0a5774ed83e2922489dc55c08133f042f93442bf2ad6" name="dapl-debug-devel" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="67815a0232eeeea08d3f24f7845b0b1f7a17ca2297830b7b6249c25e758769dd28e79211ac5273c8297a10310efa2f3be7661ae7cef0ed64feb3250657aad187" name="dapl-debug-libs" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="67d37d2613dcdf4c1a37a1b1d18a0f90e4ea09563c716f3cb699b9f6746cf5bd88f7566aa9388d7183188c799c0b934ed1cfd57af7fc559880cf559a01f8c935" name="dapl-debug-utils" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="012b393a98911e3e31a4bfe2e13b28e493e0dcefcfc1a42072aad81e544324ac3ef864568ffd011eb8ac9332f8392d656bbffd440657f89e54d769189ff5a8bd" name="dapl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="e9d7dc82a45f561b9c45cc0d8d4ecb413363a5a61fa9f56badfd957a6566ad93b394f19525e7e9c8719512e9d49e2c07350e2bde8cabad6a987289ee68ef374b" name="dapl-utils" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="bp160.1.12"/>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="kasimir_@outlook.de" date="1527163200">- Add patch for arm platform support
  * dapl-add-arm-platform-support.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
  <changelog author="bwiedemann@suse.com" date="1531569600">- Add reproducible.patch to fix build time (boo#1047218)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1683201600">- Convert to proper multibuild package: the spec is already all
  done to distinguish flavors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1725537600">- Add openib-add-missing-include.patch to fix compilation
  with GCC &gt;= 14.</changelog>
</package>
<package pkgid="f44ab889dc3cb41ddad6a8f745707ee675696d2f4a32657751a058b2a7d542ae98590442f6b21c3d8b3648c1b58221a012f2923907802aee17c84cf171096218" name="daps" arch="noarch">
  <version epoch="0" ver="3.3.2" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1578312000">- Do not depend on xml-commons-jaxp-1.3-apis, but on generic
  xml-apis provider</changelog>
  <changelog author="dimstar@opensuse.org" date="1585828800">- Add daps-gnu-make-4.3.patch: Fix compatibility with GNU Make 4.3.</changelog>
  <changelog author="sknorr@suse.com" date="1620734400">- Stable release DAPS 3.1.0:
  * New features:
  - Allow converting AsciiDoc books with multiple parts into a
    DocBook set (`--adocset`/`ADOC_SET="yes"`)
  - Remove `dm:docmanager` during `unpack-lockdrop` when
    `--remove-dm` is used
  - Added support for DITAA diagrams as an image format (must be
    added as an external file) (#540)
  - Allow using `{daps-adoc-attribute}` from AsciiDoc sources to
    add a list of all AsciiDoc attributes used by DAPS to the
    output (#573)
  - Added `daps validate` options  `--validate-ids` (checks
    whether IDs match a basic SEO-compatible set of characters) and
    `--validate-images` (checks for missing and duplicated images)
  - Renamed `daps checklink` to `daps linkcheck` for consistency
    with `daps spellcheck` and `daps stylecheck`
  - Renamed `PDFNAME` to `OUTPUTNAME` DC file option to clarify
    its purpose
  * Removed features:
  - Removed support for the Xfig (`.fig`), PDF, and EPS image
    formats
  - Removed support for the `asciidoc` tool, DAPS now only supports
    AsciiDoctor
  - Removed support for `--xsltparam` which has been replaced by
    `--stringparam`
  - Removed `--css=none` option of `daps epub`
  - Removed `daps-auto.pl` which has been replaced by
    `daps-autobuild`
  - Removed all support for Python 2 dependencies
  * Bug fixes:
  - When AsciiDoctor outputs a warning, DAPS will now fail,
    avoiding XML issues that would crop up later (this only works
    if AsciiDoctor &gt;= 1.5.7 is used)
  - Find unresolvable AsciiDoc attribute references (such as
    `{reference}`) and error out rather than adding them to the
    output
  - When converting AsciiDoc, always unset the `imagesdir`
    attribute, so DAPS can mandate its own `images` directory
  - On successive DAPS runs, always convert AsciiDoc files to XML
    again
  - Improved default IDs generated by AsciiDoctor, to avoid leading
    underscores in IDs (#520)
  - Improved AsciiDoc `postprocess.xsl` clean-up stylesheet:
  - Rewrite `@contentwidth` to `@width`
  - Improved display of article titles
  - Fixed validation of generated abstract elements
  - Improved workarounds for `authorinitials`, `othername`,
    `lineage`
  - Output AsciiDoc `&lt;&lt;reference, title&gt;&gt;` construct as
    `title (&lt;xref linkend="reference"/&gt;)` (same for links)
  - Improved handling of slightly misused AsciiDoc block/
    example syntax that was previously converted to
    GeekoDoc-incompatible `formalpara` elements
  - Fixed updating of profiled files when an entity or the DC
    file of the source has changed
  - Only use AsciiDoctor's `--failure-level` if the version of
    AsciiDoctor is new enough to support it
  - Allowed use of AsciiDoc attributes defined on command line
    and in DC file at the same time
  - Made DAPS's default set of AsciiDoc attributes overridable
  - Internally handle `--param` the same as `--stringparam` (#589)
  - Made sure that both `index.html` and `[ROOTID].html` are
    generated during HTML builds
  - Reworked `getentityname.py` (#556)
  - Restored compatibility with Novdoc profiling stylesheet
    references
  - Avoid stumbling over empty hrefs in XIncludes during validation
  - Fixed issue where DC file parser would concatenate rather
    than overwrite values
  - Fixed issue where DC file parser would not correctly recognize
    last line of a DC file if it did not end in a newline character
    (#553)
  - Fixed issue where default entities like `&amp;mdash;` could not
    be found
  - Fixed `unpack-locdrop` runs that failed because file lists
    contained spaces rather than line breaks
  - Use `PROFOS` value during `locdrop`
  - Fixed `daps html --nostatic` build failure resulting from
    identical files error
  - Fixed GNU Make 4.3 `+=` operator compatibility
  - Added compatibility with Inkscape 1.0 command-line options
  - Set initial memory for FOP
  - Fixed path to Avalon Framework (bsc#1175214)
  - Fixed LibreOffice Draw executable name for Debian (#564)
  - Improved error message when MAIN file is missing (#494)
  - Improved error message displayed when ROOTID does not exist in
    the document (#546)
  - Show FOP warnings when running with `-vv` or higher verbosity
  - Suppressed error messages about missing `xml:base` during
    `daps linkcheck` (#558)
  - Improved message output of `daps-xmlwellformed`
  - Improved Git updating flow in `daps-autobuild`
  * Documentation:
  - Added man pages for `daps-xmlformat` and `daps-check-deps`
    (#491)
  - Added documentation for generating a DocBook set from an
    AsciiDoc book
  - Fixed typos and other minor issues throughout the documentation
  * Packaging changes:
  - Cleaned up TAR archives generated by GitHub (#489)
  - Do not make libexec XSL files executable (#492)</changelog>
  <changelog author="sknorr@suse.com" date="1620820800">- Stable release DAPS 3.1.1:
  * Bug fixes:
  - Removed error messages that appeared during command-line
    completion
  * Packaging changes:
  - Updated Spec file from OBS repo</changelog>
  <changelog author="sknorr@suse.com" date="1621598400">- Stable release DAPS 3.1.2:
  * Bug fixes:
  - Fixed issue where irrelevant XIncludes would cause validation
    errors (#617)
  * Documentation:
  - Updated installation documentation</changelog>
  <changelog author="sknorr@suse.com" date="1623326400">- Stable release DAPS 3.2.0:
  * New features:
  - Added config file compatible with xmlformat 1.9 (for the
    xmlformat version from github.com/someth2say/xmlformat)
  - Added DocBook table validation script (must be run manually
    currently)
  * Bug fixes:
  - Properly enabled `--validate-ids` and `--validate-images`
    validation options
  - For consistency/compatibility, output PDFNAME deprecation
    message to stderr
  - In AsciiDoc postprocess stylesheet, fixed handling of
    subtitles
  - Removed remaining references to Ghostscript (#614)
  * Removed features:
  - Remove `html --jsp` target that was unused for years (#609)
  - Removed the `online-docs` target and associated DocBook 5-to-4
    conversion stylesheets (#610)
  - Removed code to query SVN properties that was unused for years
    (#611)</changelog>
  <changelog author="sknorr@suse.com" date="1644235200">- Stable release DAPS 3.3.0:
  * New features:
  - DocBook table validation is now enabled by default as part of
    validation and building (#532)
  - Improved validation to always check XML validity, tables,
    images, and IDs, rather than stopping after the first issue
    occurs
  - Set up Poppins font in FOP config delivered with DAPS
  * Bug fixes:
  - Fixed validation failures occurring because `--verbose` was set
  - Fixed xml-wellformedness check to use a non-zero exit code
    when entity definitions are missing (#539)
  - Improved image check during validation to check within context
    of entire set, not just current root ID (#627)
  - Fixed output of missing/duplicated image list displayed during
    build (#634)
  - Fixed paths to entity files in `unpack-locdrop`
  - Fixed output of `daps -v` when there is no XSL-FO formatter
    installed (#622)
  - Fixed `daps spellcheck --help` output
  - Improved messages for `unpack-locdrop` and other subcommands
  * Removed features:
  - Removed unused `process-xrefs` and `checkconformance`
    stylesheets (#612)
  * Repository changes:
  - Integrated Python tooling and tests for `xml-wellformed` and
    `getentityname`</changelog>
  <changelog author="sknorr@suse.com" date="1644840000">- Stable release DAPS 3.3.1:
  * Bug fixes:
  - Added `--not-validate-tables` parameter that disables extended
    table validation to additional targets</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">* Add patch to build against libxslt 1.1.36+:
  - In libxslt &gt;=1.1.35, the XSLT processor changed the resolution
    strategy. It gets two template rules (xi:include/@href and
    xi:include/@*) with the same priority (0.5). That's why we need
    to lower the priority to zero for xi:include/@*
  - Added patch "daps-fix-build-against-libxslt-1.1.36+.patch"</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1666699200">Stable release DAPS 3.3.2:
  * Bug fixes:
  - Make DAPS work with libslt &gt; 1.1.34
    (https://github.com/openSUSE/daps/issues/679)
  - Profiling no longer requires processing instruction
  - if DC-file/command line contains profile settings the
    profiling stylesheets will autoimatically be applied
    (https://github.com/openSUSE/daps/issues/529)
  - FOP support for google noto-sans fonts (for Japanese, Korean,
    traditional &amp; simplified Chinese)
    (https://github.com/openSUSE/daps/issues/684)
  - Fix validation error where errors were ignored or failed with a
    bash error
    (https://github.com/openSUSE/daps/issues/679)
  - unpacking locdrops automatically removes dm:editurl from
    docmanager XML header (if present)
  - Building parts of a document (with --rootid) is no longer
    supported when rootid points to a section or sect1 (because
    depending on HTML chunkling, this may result in an empty
    document)
    (https://github.com/openSUSE/daps/issues/686)
  * Helper scripts:
  - Added a few scripts for handling SUSE localization branches,
    improving SEO and migrating frm DocBook4 to DocBook5
  - can be found in the sources under contrib/ (not included in
    SUSE packages)
  * Obsoletes patch daps-fix-build-against-libxslt-1.1.36+.patch</changelog>
</package>
<package pkgid="d9573e69e2051edb665c0077a426728fb2b73ce4461c5deefc50baef5d27cb1230f9d329e2f6d8c462cda33a8ae0bc431af35132752fdab9862e508b959390bd" name="dar" arch="x86_64">
  <version epoch="0" ver="2.7.15" rel="bp160.1.3"/>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1657022400">- Update to version 2.7.6
  * adding -f option to dar_cp
  * adding static version of dar_cp (dar_cp_static) as compilation outcome
  * added FAQ for tape usage with dar
  * fixing error in libdar header file installation
  * fixed bug met when interrupting the creation of a block compressed
    backup (always used by lzo compression and by other algorithm only
    when performing multi-threaded compression)
  * typo fixes in documentation
  * fixed message in lax mode used to obtain from the user the archive format
    when this information is corrupted in the archive.
  * fixing lax mode condition that popped up without being requested
  * fixing bug met when reading slice an special block device by mean of
    a symlink
  * adapting sanity checks to the case of a backup read from a special
    device in sequential-read mode.
  * fixed bug that lead dar to report CRC error while reading a backup
    from a pipe with the help of an isolated catalogue
  * adding -V option to dar_split (was using -v) for homogeneity with
    other commands</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659960000">- update to 2.7.7:
  * added support for sequential reading more of sliced backup, to
  accommodate tape support used with slices (at the opposite of dar_split)
  * fixing few typos in doc
  * making libdar more tolerant when calls to fadvise fail</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 2.7.8:
  * updating code and man page about the way to solve the conflict of
  sequentially reading the archive of reference when binary delta is
  implicitly present for differential/incremental backups
  * added -avc option to surface libcurl verbose messages
  * fixed bug in dar where a sanity check about slice min digit detection
  was applied to the local filesystem when the backup was stored
  remotely, this prevented the reading or remote backups
  * exposing libcurl version to the version output (new API call added
  * remove extra slash (/) found after hostname in URL passed to libcurl
  * fixed self test reported error about mycurl_easyhandle_node.cpp
  * improved error message when libcurl fails to connect to an sftp server
  * fixed bug in libdar in the way libcurl is called for reading a file
  using ftp protocol
  * fixed bug in libdar when asking libcurl the size of the file we are
  writing (libcurl segfaults with ftp protocol). In addition, we now
  record this info during the write process (faster and more efficient).
  * fixed bug met when creating a backup on very close and/or high
  bandwidth ftp and sftp repos with the --hash option set, triggering a
  race condition that led dar to sometime hang unexpectedly.</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1686830400">- update to 2.7.9:
  * added sanity check in elastic buffer code upon Sviat89@github
  feedback.
  * fixed bug in block_compressor module found by sviat89 while reading
  the code. Seen its context, it does not seem however to have much
  chance to express and would lead dar/libdar to loop forever
  consuming CPU.
  * adding the misc/dar_static_builder_with_musl_voidlinux.bash script
  which automatically builds dar_static from source code under
  VoidLinux/musl
  * fixing bug concerning the restoration in sequential read mode of a
  backup containing binary patches
  * fixed bug in tuyau_global class that lead to seeking at a wrong
  in sequential read mode and the unability to properly rely on a
  isolated catalogue to read (test/extract/diff) an backup in sequential
  read mode, leading dar to report CRC error.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1688385600">- Update to 2.7.10:
  * displaying the slicing information about the archive of reference
    stored within a isolated catalogue when using -l and -q options
  * cleanup code from obsolete and unused readdir_r invocation
  * fixing display bug in dar_manager (shell_interaction class of libdar)
  * fixing python binding build system with John Goerzen's proposal
  * replacing the deprecated PYBIND11_OVERLOAD_* by PYBIND11_OVERRIDE_*
    equivalents</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1694952000">- update to 2.7.12:
  * fixed bug avoid restoration of binary patch when it was based
    on another binary patch.
  * fixing bug in testing routine that lead regression unseen and
    released in 2.7.11.
  * removed set_unexpected() invocation (not useful for years in
    libdar and incompatible with C++17)
  * fixed generated dynamic libdar binary to include all its
    dependent libraries
  * modified default block size for binary deltas, to be closer
    to what rsync uses (more details in man page).
  * adding support for ronna (10^27) and quetta (10^30) new SI
    prefixes, R and Q respectively
  * fixing bug in infinint class met when extending underlying
    storage by zero bytes
  * avoiding delta sig block size calculation when not necessary</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1698840000">- update to 2.7.13:
  * fix bug auto-reported in "slice_layout.cpp line 48" concerning
    isolated catalogs triggered when dar/libdar has been compiled
    with some version gcc (gcc &gt;= 11) with optimizations set.
  * documentation and build system updates
- enable lz4, zstd compression support (boo#1216790)
- enable multi-threading support with libthreadar (boo#1216790)
- package license files
- reduce -devel dependencies
- make -doc noarch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699876800">- fix Leap 15.6 build (libattr)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 2.7.14:
  + Adding safe guard in fichier_libcurl destructor to verify all
    data have been passed to libcurl *and* libcurl has completed
    the writing operation before destroying a fichier_libcurl
    object.
  + Adding support for thread cancellation when interacting with
    libcurl.
  + Updating man page.
  + Fixing some error in the code documentation.
  + updated FAQ.</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1722686400">- Update to version 2.7.15
  * updating libdar about CURLINFO_CONTENT_LENGTH_DOWNLOAD symbol which is
    reported as deprecated by recent libcurl libraries.
  * fixed compilation problem under MacOS Mojave
  * fixed bug that lead the warning about a backup operation about to save
    itself, to not show
  * removing obsolete call to gcry_control(GCRYCTL_ENABLE_M_GUARD) while
    initializing libgcrypt. This led to libgcrypt initialization to fail
    with libgcrypt 1.11 and more recent versions.
  * fixed listing but about "present but unsaved" FSA status
  * fixed dead-lock condition in libdar when used with libcurl &gt; 0.74.0 at
    the end of closing sftp session (undocumented changed behavior in
    libcurl).</changelog>
</package>
<package pkgid="e06cc726bd91b167e5ca960b3e901cd7636f971a53aec931cefba77ff92da0685116ca5fb8464143d078578398e00dbe7b5f4df8866c7c646213c5360b993200" name="dar-doc" arch="noarch">
  <version epoch="0" ver="2.7.15" rel="bp160.1.3"/>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1657022400">- Update to version 2.7.6
  * adding -f option to dar_cp
  * adding static version of dar_cp (dar_cp_static) as compilation outcome
  * added FAQ for tape usage with dar
  * fixing error in libdar header file installation
  * fixed bug met when interrupting the creation of a block compressed
    backup (always used by lzo compression and by other algorithm only
    when performing multi-threaded compression)
  * typo fixes in documentation
  * fixed message in lax mode used to obtain from the user the archive format
    when this information is corrupted in the archive.
  * fixing lax mode condition that popped up without being requested
  * fixing bug met when reading slice an special block device by mean of
    a symlink
  * adapting sanity checks to the case of a backup read from a special
    device in sequential-read mode.
  * fixed bug that lead dar to report CRC error while reading a backup
    from a pipe with the help of an isolated catalogue
  * adding -V option to dar_split (was using -v) for homogeneity with
    other commands</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659960000">- update to 2.7.7:
  * added support for sequential reading more of sliced backup, to
  accommodate tape support used with slices (at the opposite of dar_split)
  * fixing few typos in doc
  * making libdar more tolerant when calls to fadvise fail</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 2.7.8:
  * updating code and man page about the way to solve the conflict of
  sequentially reading the archive of reference when binary delta is
  implicitly present for differential/incremental backups
  * added -avc option to surface libcurl verbose messages
  * fixed bug in dar where a sanity check about slice min digit detection
  was applied to the local filesystem when the backup was stored
  remotely, this prevented the reading or remote backups
  * exposing libcurl version to the version output (new API call added
  * remove extra slash (/) found after hostname in URL passed to libcurl
  * fixed self test reported error about mycurl_easyhandle_node.cpp
  * improved error message when libcurl fails to connect to an sftp server
  * fixed bug in libdar in the way libcurl is called for reading a file
  using ftp protocol
  * fixed bug in libdar when asking libcurl the size of the file we are
  writing (libcurl segfaults with ftp protocol). In addition, we now
  record this info during the write process (faster and more efficient).
  * fixed bug met when creating a backup on very close and/or high
  bandwidth ftp and sftp repos with the --hash option set, triggering a
  race condition that led dar to sometime hang unexpectedly.</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1686830400">- update to 2.7.9:
  * added sanity check in elastic buffer code upon Sviat89@github
  feedback.
  * fixed bug in block_compressor module found by sviat89 while reading
  the code. Seen its context, it does not seem however to have much
  chance to express and would lead dar/libdar to loop forever
  consuming CPU.
  * adding the misc/dar_static_builder_with_musl_voidlinux.bash script
  which automatically builds dar_static from source code under
  VoidLinux/musl
  * fixing bug concerning the restoration in sequential read mode of a
  backup containing binary patches
  * fixed bug in tuyau_global class that lead to seeking at a wrong
  in sequential read mode and the unability to properly rely on a
  isolated catalogue to read (test/extract/diff) an backup in sequential
  read mode, leading dar to report CRC error.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1688385600">- Update to 2.7.10:
  * displaying the slicing information about the archive of reference
    stored within a isolated catalogue when using -l and -q options
  * cleanup code from obsolete and unused readdir_r invocation
  * fixing display bug in dar_manager (shell_interaction class of libdar)
  * fixing python binding build system with John Goerzen's proposal
  * replacing the deprecated PYBIND11_OVERLOAD_* by PYBIND11_OVERRIDE_*
    equivalents</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1694952000">- update to 2.7.12:
  * fixed bug avoid restoration of binary patch when it was based
    on another binary patch.
  * fixing bug in testing routine that lead regression unseen and
    released in 2.7.11.
  * removed set_unexpected() invocation (not useful for years in
    libdar and incompatible with C++17)
  * fixed generated dynamic libdar binary to include all its
    dependent libraries
  * modified default block size for binary deltas, to be closer
    to what rsync uses (more details in man page).
  * adding support for ronna (10^27) and quetta (10^30) new SI
    prefixes, R and Q respectively
  * fixing bug in infinint class met when extending underlying
    storage by zero bytes
  * avoiding delta sig block size calculation when not necessary</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1698840000">- update to 2.7.13:
  * fix bug auto-reported in "slice_layout.cpp line 48" concerning
    isolated catalogs triggered when dar/libdar has been compiled
    with some version gcc (gcc &gt;= 11) with optimizations set.
  * documentation and build system updates
- enable lz4, zstd compression support (boo#1216790)
- enable multi-threading support with libthreadar (boo#1216790)
- package license files
- reduce -devel dependencies
- make -doc noarch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699876800">- fix Leap 15.6 build (libattr)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 2.7.14:
  + Adding safe guard in fichier_libcurl destructor to verify all
    data have been passed to libcurl *and* libcurl has completed
    the writing operation before destroying a fichier_libcurl
    object.
  + Adding support for thread cancellation when interacting with
    libcurl.
  + Updating man page.
  + Fixing some error in the code documentation.
  + updated FAQ.</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1722686400">- Update to version 2.7.15
  * updating libdar about CURLINFO_CONTENT_LENGTH_DOWNLOAD symbol which is
    reported as deprecated by recent libcurl libraries.
  * fixed compilation problem under MacOS Mojave
  * fixed bug that lead the warning about a backup operation about to save
    itself, to not show
  * removing obsolete call to gcry_control(GCRYCTL_ENABLE_M_GUARD) while
    initializing libgcrypt. This led to libgcrypt initialization to fail
    with libgcrypt 1.11 and more recent versions.
  * fixed listing but about "present but unsaved" FSA status
  * fixed dead-lock condition in libdar when used with libcurl &gt; 0.74.0 at
    the end of closing sftp session (undocumented changed behavior in
    libcurl).</changelog>
</package>
<package pkgid="ef4cdc9054125c109b147a8079f357df040025d8ee9d6b542fd6073d1c939a48e853ca20a8c5aa71f54fa6146746fa8956a49dbcf4e903dfae6c851d16890c8f" name="dar-lang" arch="noarch">
  <version epoch="0" ver="2.7.15" rel="bp160.1.3"/>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1657022400">- Update to version 2.7.6
  * adding -f option to dar_cp
  * adding static version of dar_cp (dar_cp_static) as compilation outcome
  * added FAQ for tape usage with dar
  * fixing error in libdar header file installation
  * fixed bug met when interrupting the creation of a block compressed
    backup (always used by lzo compression and by other algorithm only
    when performing multi-threaded compression)
  * typo fixes in documentation
  * fixed message in lax mode used to obtain from the user the archive format
    when this information is corrupted in the archive.
  * fixing lax mode condition that popped up without being requested
  * fixing bug met when reading slice an special block device by mean of
    a symlink
  * adapting sanity checks to the case of a backup read from a special
    device in sequential-read mode.
  * fixed bug that lead dar to report CRC error while reading a backup
    from a pipe with the help of an isolated catalogue
  * adding -V option to dar_split (was using -v) for homogeneity with
    other commands</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659960000">- update to 2.7.7:
  * added support for sequential reading more of sliced backup, to
  accommodate tape support used with slices (at the opposite of dar_split)
  * fixing few typos in doc
  * making libdar more tolerant when calls to fadvise fail</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 2.7.8:
  * updating code and man page about the way to solve the conflict of
  sequentially reading the archive of reference when binary delta is
  implicitly present for differential/incremental backups
  * added -avc option to surface libcurl verbose messages
  * fixed bug in dar where a sanity check about slice min digit detection
  was applied to the local filesystem when the backup was stored
  remotely, this prevented the reading or remote backups
  * exposing libcurl version to the version output (new API call added
  * remove extra slash (/) found after hostname in URL passed to libcurl
  * fixed self test reported error about mycurl_easyhandle_node.cpp
  * improved error message when libcurl fails to connect to an sftp server
  * fixed bug in libdar in the way libcurl is called for reading a file
  using ftp protocol
  * fixed bug in libdar when asking libcurl the size of the file we are
  writing (libcurl segfaults with ftp protocol). In addition, we now
  record this info during the write process (faster and more efficient).
  * fixed bug met when creating a backup on very close and/or high
  bandwidth ftp and sftp repos with the --hash option set, triggering a
  race condition that led dar to sometime hang unexpectedly.</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1686830400">- update to 2.7.9:
  * added sanity check in elastic buffer code upon Sviat89@github
  feedback.
  * fixed bug in block_compressor module found by sviat89 while reading
  the code. Seen its context, it does not seem however to have much
  chance to express and would lead dar/libdar to loop forever
  consuming CPU.
  * adding the misc/dar_static_builder_with_musl_voidlinux.bash script
  which automatically builds dar_static from source code under
  VoidLinux/musl
  * fixing bug concerning the restoration in sequential read mode of a
  backup containing binary patches
  * fixed bug in tuyau_global class that lead to seeking at a wrong
  in sequential read mode and the unability to properly rely on a
  isolated catalogue to read (test/extract/diff) an backup in sequential
  read mode, leading dar to report CRC error.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1688385600">- Update to 2.7.10:
  * displaying the slicing information about the archive of reference
    stored within a isolated catalogue when using -l and -q options
  * cleanup code from obsolete and unused readdir_r invocation
  * fixing display bug in dar_manager (shell_interaction class of libdar)
  * fixing python binding build system with John Goerzen's proposal
  * replacing the deprecated PYBIND11_OVERLOAD_* by PYBIND11_OVERRIDE_*
    equivalents</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1694952000">- update to 2.7.12:
  * fixed bug avoid restoration of binary patch when it was based
    on another binary patch.
  * fixing bug in testing routine that lead regression unseen and
    released in 2.7.11.
  * removed set_unexpected() invocation (not useful for years in
    libdar and incompatible with C++17)
  * fixed generated dynamic libdar binary to include all its
    dependent libraries
  * modified default block size for binary deltas, to be closer
    to what rsync uses (more details in man page).
  * adding support for ronna (10^27) and quetta (10^30) new SI
    prefixes, R and Q respectively
  * fixing bug in infinint class met when extending underlying
    storage by zero bytes
  * avoiding delta sig block size calculation when not necessary</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1698840000">- update to 2.7.13:
  * fix bug auto-reported in "slice_layout.cpp line 48" concerning
    isolated catalogs triggered when dar/libdar has been compiled
    with some version gcc (gcc &gt;= 11) with optimizations set.
  * documentation and build system updates
- enable lz4, zstd compression support (boo#1216790)
- enable multi-threading support with libthreadar (boo#1216790)
- package license files
- reduce -devel dependencies
- make -doc noarch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699876800">- fix Leap 15.6 build (libattr)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1715688000">- Update to version 2.7.14:
  + Adding safe guard in fichier_libcurl destructor to verify all
    data have been passed to libcurl *and* libcurl has completed
    the writing operation before destroying a fichier_libcurl
    object.
  + Adding support for thread cancellation when interacting with
    libcurl.
  + Updating man page.
  + Fixing some error in the code documentation.
  + updated FAQ.</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1722686400">- Update to version 2.7.15
  * updating libdar about CURLINFO_CONTENT_LENGTH_DOWNLOAD symbol which is
    reported as deprecated by recent libcurl libraries.
  * fixed compilation problem under MacOS Mojave
  * fixed bug that lead the warning about a backup operation about to save
    itself, to not show
  * removing obsolete call to gcry_control(GCRYCTL_ENABLE_M_GUARD) while
    initializing libgcrypt. This led to libgcrypt initialization to fail
    with libgcrypt 1.11 and more recent versions.
  * fixed listing but about "present but unsaved" FSA status
  * fixed dead-lock condition in libdar when used with libcurl &gt; 0.74.0 at
    the end of closing sftp session (undocumented changed behavior in
    libcurl).</changelog>
</package>
<package pkgid="420e3db98c2e83cc638cd9477eda070abb6b815248af5bd6b729e575b0dd9095d5d85ef6b2469bfc8195fd4971830710f56a267efe03f2cb05f08602b647bcf5" name="darkhttpd" arch="x86_64">
  <version epoch="0" ver="1.16" rel="bp160.1.12"/>
  <changelog author="leedagee &lt;leedageea@gmail.com&gt;" date="1654171200">- darkhttpd v1.13</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1703592000">- Version 1.14:
  * Add support for logging with syslog.
  * Fix hung connection from consecutive keep-alive requests.
  * Fix high CPU usage when timeout is disabled.
  * Add --forward-https.
  * Make header parsing case insensitive, to work behind an HTTP2 reverse proxy.
  * Add trailing slash to links for directories.
  * Fix crash when a file has a large (year 10,000+) mtime.
- Add config and systemd unit</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1705320000">- Listen on IPv6 by default as well as IPv4</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1705579200">- Version 1.15
  * Try to avoid leaking the length of the --auth password through timing side-channels.
  * Document that --auth is not secure.
  * Add mime types: apng, avif, webp, webm, json, woff, woff2, ogg, flac, wav, opus, oga, spx
  * Custom headers with the CLI option</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1709121600">- Version 1.16:
  * Support chroot as non-root on FreeBSD 14+
  * Listen to IPv4 and IPv6 at the same time when --ipv6 is passed.</changelog>
</package>
<package pkgid="b60d5aac2e888e263e4c4a84f8df109621f4480d08a8b852f616a2b5036ed83ace63213ea6018dc5498fbb58b6acc9d147cb6154a3d27ff9246e21f53c4c70f5" name="dash" arch="x86_64">
  <version epoch="0" ver="0.5.12" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="dmueller@suse.com" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
  <changelog author="dmueller@suse.com" date="1609243200">- update to 0.5.11.3:
  * jobs: Only block in waitcmd on first run</changelog>
  <changelog author="rpm@fthiessen.de" date="1623067200">- Update to 0.5.11.4
  * eval: Do not cache value of eflag in evaltree</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.5.11.5:
  * parser: Fix VSLENGTH parsing with trailing garbage</changelog>
  <changelog author="dmueller@suse.com" date="1643284800">- add dash-sh subpackage to be able to switch away from bash</changelog>
  <changelog author="luc14n0@opensuse.org" date="1666440000">- Make dash-sh subpackage architecture independent since it only
  contains a symbolic link.</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 0.5.12:
  * eval: Test evalskip before flipping status for NNOT
  * parser: Add VSBIT to ensure subtype is never zero
  * eval: Check eflag after redirection error
  * eval: Always set exitstatus in evaltree
  * expand: Add ifsfree to expand to fix a logic error that causes a buffer over-read
  * expand: Always quote caret when using fnmatch
  * parser: Fix VSLENGTH parsing with trailing garbage
  * shell: Fail if building --with-libedit and can't find libedit
  * jobs: Only block in waitcmd on first run
  * redir: Retry open64 on EINTR
  * eval: Prevent recursive PS4 expansion
  * jobs: Fix waitcmd busy loop
- drop check-nflag-in-evaltree.patch (upstream)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="68ea4fc55defa1fb46de0cd12f167218470e13e2102739a64d651adb575e2288f96dc43f61929464de3c6a63441ffe8c55a6b48343986ac20c0fe544c1f05818" name="dash-sh" arch="noarch">
  <version epoch="0" ver="0.5.12" rel="160000.2.2"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="dmueller@suse.com" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
  <changelog author="dmueller@suse.com" date="1609243200">- update to 0.5.11.3:
  * jobs: Only block in waitcmd on first run</changelog>
  <changelog author="rpm@fthiessen.de" date="1623067200">- Update to 0.5.11.4
  * eval: Do not cache value of eflag in evaltree</changelog>
  <changelog author="dmueller@suse.com" date="1640001600">- update to 0.5.11.5:
  * parser: Fix VSLENGTH parsing with trailing garbage</changelog>
  <changelog author="dmueller@suse.com" date="1643284800">- add dash-sh subpackage to be able to switch away from bash</changelog>
  <changelog author="luc14n0@opensuse.org" date="1666440000">- Make dash-sh subpackage architecture independent since it only
  contains a symbolic link.</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 0.5.12:
  * eval: Test evalskip before flipping status for NNOT
  * parser: Add VSBIT to ensure subtype is never zero
  * eval: Check eflag after redirection error
  * eval: Always set exitstatus in evaltree
  * expand: Add ifsfree to expand to fix a logic error that causes a buffer over-read
  * expand: Always quote caret when using fnmatch
  * parser: Fix VSLENGTH parsing with trailing garbage
  * shell: Fail if building --with-libedit and can't find libedit
  * jobs: Only block in waitcmd on first run
  * redir: Retry open64 on EINTR
  * eval: Prevent recursive PS4 expansion
  * jobs: Fix waitcmd busy loop
- drop check-nflag-in-evaltree.patch (upstream)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="4b52f54fb3d91d2fa1bab82d15bbab424492540f3b0724d259f37dc22d86894b6227ab97aadfc97118ccc67b38377337a45434b244d6c61bce40710794a151b2" name="dasher" arch="x86_64">
  <version epoch="0" ver="5.0.0+199" rel="bp160.1.5"/>
  <changelog author="dimstar@opensuse.org" date="1466251200">- Add dasher-gcc6.patch: Fix build with gcc 6 (bool can't be used
  as return value for functions returning string) (boo#985108).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1479124800">- Fix some typos in the language code mapping.
- Upgrade .spec.in file to produce the correct spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644667200">- Update to version 5.0.0:
  + Gtk2/FileUtils: Include sys/stat.h
  + Preparation for 5.0 beta release.
  + Win32 -- turned on whole program optimization and unused code
    removal
  + Removed obsolete targets from Win32 projects.
  + Generalised pre set notifications for parameters and reworked
    alphabet history.
  + Tweaks to control boxes.
  + Cleanup. No more WinCE code.
  + Removed obsolate PocketPC projects.
  + Cleanup in Common project.
  + Turn draw mouse position on by default.
  + DasherInterface-&gt;Done was not really stopping dasher.
  + Errors in training file should not stop dasher.
  + Removed ugly messages about speed changes.
  + Countless changes and fixes.
  + Port away from gconf2.
  + Updated translations
- Start fresh with gitcheckout from new upstream.
- Drop patches and source files no longer needed:
  + pre_checkin.sh
  + locale-map.txt
  + dasher.spec.in,
  + dasher-linkX11.patch
  + dasher-gcc6.patch
  + dasher-data-lang.sh
- Add upstream build/bug fix patches:
  + dasher-5.0.0-sys-stat.patch
  + gnome-doc-utils-depr.patch
  + 0001-Remove-extern-C-warpper-around-atspi-glib-headers-in.patch
- BuildRequires/Requires/Recommends/Suggests were dropped and
  replaced with more modern variants.
- Sub-packages dasher-data-recommended and dasher-data-extra were
  both dropped and Obsoleted and Provided via main package.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740657600">- Update to version 5.0.0+199:
  * Add roman vowels with a macron (e.g. ō) to the Japanese Kanna
    with Romaji alphabet, and minor reordering of the alphabet
    groups.
  * Alphabet improvements
  * configure.ac: Replace defunct Bugzilla with GNOME GitLab
  * docs: Replace defunct Bugzilla with GNOME GitLab
  * Adjust text label size and line thickness to account for 2
    pixels per 'point' in with high DPI displays.
  * Fixes to get rendering working correctly on recent mac hardware
    and OS.
  * Minor 'delete' fix and whitespace correction.
  * Use gtk3 draw event rather than gtk2 expose_event.
    gtk__cairo_should_draw_window() presence wasn't being tested.
  * g/c Gdk2 based drawing code (aka the without-cairo option)
  * g/c Qt Extended (Qtopia) which was discontinued over a decade
    ago.
  * g/c The GPE Palmtop Environment which had its last release over
    a decade ago.
  * Point to GitLab instead of Bugzilla (deprecated) in README
  * Avoid deprecated function
  * Remove extern "C" warpper around atspi/glib headers inclusion
  * Tidy away QTE support, the crux of which was already commented
    out.
  * gtk_show_uri deprecated in favour of gtk_show_uri_on_window in
    gtk 3.22
  * Drop support for Gtk2 - Gtk4 is here!
  * Fix comment after 73b1e4a
  * Remove cspi/bonobo support.
  * configure: Ada removed support for GSettings etc. in 2015
  * Remove Maemo support.
  * Remove IOstreamDasherEdit.*
  * Drop html markup
  * Drop trailing spaces
  * Fix socket vs &lt;functional&gt; conflict.
  * Fix clearly untested "Migrate from gnome-doc-utils"
  * Correctly fall back system font when no Dasher Font has been
    selected in preferences
  * Fix appveyor build status URL
  * Fix appveyor error about project cannot be found
  * Updated translations.
- Switch back to gnome gitlab as source url. Original upstream have
  come back to life. Use current head.
- Following upstream changes, drop no longer needed
  update-desktop-files, pkgconfig(gtk+-2.0) and pkgconfig(xtst)
  BuildRequires. Clean up spec.
- Drop patches fixed upstream:
  * dasher-5.0.0-sys-stat.patch
  * gnome-doc-utils-depr.patch
  * 0001-Remove-extern-C-warpper-around-atspi-glib-headers-in.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746360000">- Drop obsolete and unused gnome-common BuildRequires.</changelog>
</package>
<package pkgid="cf60d3398e705974fce85c2c57d62f4fbe8a7bab05aac17d0668de9a5d0d1d7258b568ef3c1e97d03471e5d56dff682a9279c761167748ac0b24502dfa479c5b" name="dasher-lang" arch="noarch">
  <version epoch="0" ver="5.0.0+199" rel="bp160.1.5"/>
  <changelog author="dimstar@opensuse.org" date="1466251200">- Add dasher-gcc6.patch: Fix build with gcc 6 (bool can't be used
  as return value for functions returning string) (boo#985108).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1479124800">- Fix some typos in the language code mapping.
- Upgrade .spec.in file to produce the correct spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644667200">- Update to version 5.0.0:
  + Gtk2/FileUtils: Include sys/stat.h
  + Preparation for 5.0 beta release.
  + Win32 -- turned on whole program optimization and unused code
    removal
  + Removed obsolete targets from Win32 projects.
  + Generalised pre set notifications for parameters and reworked
    alphabet history.
  + Tweaks to control boxes.
  + Cleanup. No more WinCE code.
  + Removed obsolate PocketPC projects.
  + Cleanup in Common project.
  + Turn draw mouse position on by default.
  + DasherInterface-&gt;Done was not really stopping dasher.
  + Errors in training file should not stop dasher.
  + Removed ugly messages about speed changes.
  + Countless changes and fixes.
  + Port away from gconf2.
  + Updated translations
- Start fresh with gitcheckout from new upstream.
- Drop patches and source files no longer needed:
  + pre_checkin.sh
  + locale-map.txt
  + dasher.spec.in,
  + dasher-linkX11.patch
  + dasher-gcc6.patch
  + dasher-data-lang.sh
- Add upstream build/bug fix patches:
  + dasher-5.0.0-sys-stat.patch
  + gnome-doc-utils-depr.patch
  + 0001-Remove-extern-C-warpper-around-atspi-glib-headers-in.patch
- BuildRequires/Requires/Recommends/Suggests were dropped and
  replaced with more modern variants.
- Sub-packages dasher-data-recommended and dasher-data-extra were
  both dropped and Obsoleted and Provided via main package.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">-  Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext: allow OBS to
  shortcut through gettext-runtime-mini.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1740657600">- Update to version 5.0.0+199:
  * Add roman vowels with a macron (e.g. ō) to the Japanese Kanna
    with Romaji alphabet, and minor reordering of the alphabet
    groups.
  * Alphabet improvements
  * configure.ac: Replace defunct Bugzilla with GNOME GitLab
  * docs: Replace defunct Bugzilla with GNOME GitLab
  * Adjust text label size and line thickness to account for 2
    pixels per 'point' in with high DPI displays.
  * Fixes to get rendering working correctly on recent mac hardware
    and OS.
  * Minor 'delete' fix and whitespace correction.
  * Use gtk3 draw event rather than gtk2 expose_event.
    gtk__cairo_should_draw_window() presence wasn't being tested.
  * g/c Gdk2 based drawing code (aka the without-cairo option)
  * g/c Qt Extended (Qtopia) which was discontinued over a decade
    ago.
  * g/c The GPE Palmtop Environment which had its last release over
    a decade ago.
  * Point to GitLab instead of Bugzilla (deprecated) in README
  * Avoid deprecated function
  * Remove extern "C" warpper around atspi/glib headers inclusion
  * Tidy away QTE support, the crux of which was already commented
    out.
  * gtk_show_uri deprecated in favour of gtk_show_uri_on_window in
    gtk 3.22
  * Drop support for Gtk2 - Gtk4 is here!
  * Fix comment after 73b1e4a
  * Remove cspi/bonobo support.
  * configure: Ada removed support for GSettings etc. in 2015
  * Remove Maemo support.
  * Remove IOstreamDasherEdit.*
  * Drop html markup
  * Drop trailing spaces
  * Fix socket vs &lt;functional&gt; conflict.
  * Fix clearly untested "Migrate from gnome-doc-utils"
  * Correctly fall back system font when no Dasher Font has been
    selected in preferences
  * Fix appveyor build status URL
  * Fix appveyor error about project cannot be found
  * Updated translations.
- Switch back to gnome gitlab as source url. Original upstream have
  come back to life. Use current head.
- Following upstream changes, drop no longer needed
  update-desktop-files, pkgconfig(gtk+-2.0) and pkgconfig(xtst)
  BuildRequires. Clean up spec.
- Drop patches fixed upstream:
  * dasher-5.0.0-sys-stat.patch
  * gnome-doc-utils-depr.patch
  * 0001-Remove-extern-C-warpper-around-atspi-glib-headers-in.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746360000">- Drop obsolete and unused gnome-common BuildRequires.</changelog>
</package>
<package pkgid="6748bcc9e7fb36d9d61a856ee92efd1c18b2595d9bc30eaa048868aefc27d4bf3777efed71e68e1a068cfd3c61239f727de9249701967bdb5912b0c3ab1bf735" name="datamash" arch="x86_64">
  <version epoch="0" ver="1.8" rel="bp160.1.29"/>
  <changelog author="astieger@suse.com" date="1521288000">- initial package 1.3</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Disable broken test with upstream patch:
  * upstream-disable-broken-test.patch
- Fix another test
  * upstream-fix-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1545825600">- update to 1.4:
  * New option: -C/--skip-comments to skip comment lines
- drop upsteamed patches:
  * upstream-disable-broken-test.patch
  * upstream-fix-test.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1567598400">- disable LTO for ppc64 ppc64le aarch64 bypass boo#1149348</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568894400">- update to 1.5:
  * accept backslash-escaped characters in field names
  * New operations for handling file names and paths
  * New getnum operation to extract a number from a string
  * New operation: cut, similar to cut(1)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587816000">- update to 1.7:
  * decorate(1): new program - sorts input in non-standard ordering
    e.g. IPv4, IPv6, roman numerals.
  * New operations: sha224/sha384
  * New operations: geomean (Geometric mean) and harmmean (Harmonic
    mean)
- includes changes from 1.6:
  * The 'gutnum' operation now correctly prints detected numbers
    without truncating them</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659009600">- update to 1.8:
  * * Changes in Behavior
    Schedule -f/--full combined with non-linewise operations for deprecation.
    In a future release, -f/--full will only be usable with operations where
    it makes sense. For now, we print a warning to stderr when -f/--full is
    used with non-linewise operations, and such usage will no longer be
    supported.
  * The bin operation now uses more intuitive bins. Previously, a command
    such as `datamash bin 1 &lt;&lt;&lt; -0` would output -100; and -100 did not fall
    in its own bin. We now require all bins to take the form `[nx,(n+1)x)`
    with integer n and bin width x. We discard the sign on -0 and gate such
    inputs into the [0,x) bin.
  * Operations taking more than one argument now provide more complete output
    with --header-out. Previously, an operation such as `pcov x:y` would
    produce an output header like `pcov(y)`, discarding the `x`. The new
    behavior will output header `pcov(x,y)`.
  * datamash(1) no longer ignores --output-delimiter with the rmdup operation.
  * * New Features
  * New datamash option --sort-cmd argument to specify the program used
    by the -s option to sort input, plus enhancements to the security and
    portability of building sort command lines.
  * New datamash option -c/--collapse-delimiter=X argument uses character
    X instead of comma between values in collapse and unique lists.
  * New datamash operations: mean square (ms) and root mean square (rms).
  * Decorate now supports sorting IP addresses of both versions 4 and 6
    together. IPv4 addresses are logically converted to IPv6 addresses,
    either as IPv4-Mapped (ipv6v4map) or IPv4-Compatible (ipv6v4comp)
    addresses.
  * Add two command aliases:
    'echo' may now be used instead of 'cut'.
    'uniq' may now be used instead of 'unique'.</changelog>
</package>
<package pkgid="24d4e33d3b405c1b6c9ff09a8335680bfa180e97982d6f737c3181769b85d4e3cb75d7f2660eed4d92b6bb642d35aaa7414d3a0dc636853c738666abe8b12ce0" name="dataquay-devel" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="bp160.1.13"/>
  <changelog author="pascal.bleser@opensuse.org" date="1353758400">- initial version (0.9)</changelog>
  <changelog author="avvissu@yandex.ru" date="1413979200">- Fix to build on x86 architecture</changelog>
  <changelog author="aloisio@gmx.com" date="1504180800">- Update to 0.9.1
  * Update to support Qt5 and newer C++ compilers. Now requires
    C++11 (though the library only makes minimal use of the
    standard).
  * Incorporate a number of build fixes
- Switched to Qt5
- Refreshed dataquay-redland.patch and dataquay-lib64.patch
- Added dataquay-sharedlib.patch
- Dropped dataquay-disable_tests.patch
- Spec cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Fix RPM groups. Ensure neutrality of descriptions.
- Use upstream name for -devel subpackage.</changelog>
  <changelog author="aloisio@gmx.com" date="1531828800">- Added dataquay-includedir.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="8667ef87a9c7cb1821f5756319b35fefdd239b8c87e744692cb5f7ca7b0a05ba65fe795b73b26419cff67e011d6aa2392c564079832c0f54eb9f59addc05e3d9" name="datefudge" arch="x86_64">
  <version epoch="0" ver="1.26" rel="160000.2.2"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1581076800">- Update to version 1.23: no changelog found.</changelog>
  <changelog author="mliska@suse.cz" date="1581508800">- Add glibc-2.31-fix.patch in order to fix boo#1162963.</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 1.24:
  * Fix FTBFS on hurd-i386: Necessary functions disabled
  * Fix FTBFS with glibc 2.31 (conflicting gettimeofday prototype)
- remove glibc-2.31-fix.patch (upstream)</changelog>
  <changelog author="jgwang@suse.com" date="1706270400">- Update to version 1.26
  * Fix autpokgtest case introduced recently for #946776 so
    that it does not depend on time zone.
- Changes from version 1.25
  * Provide 64-bit versions of time functions on 32-bit
    architectures (closes: #1028587, LP: #2002803).
  * Cleanup source code, and reformat it with clang-format.
  * In --static mode, set sub-seconds part to 0
    (closes: #946776).
  * Mention in man page and README file existence of
    libfaketime package, that might be considered for more
    advanced functionalities than the ones provided by
    datefudge.
  * Standards-Version: 4.6.2 (no changes)</changelog>
</package>
<package pkgid="9c677c7888f6ad7d4000ccf692a17559e0a7dfce7c31ba73e1db78f1e5196cd95910ec1301936aaea3fe520f515bc3da91d0163687d12344c7d631f67b30c5b9" name="dateutils" arch="x86_64">
  <version epoch="0" ver="0.4.11" rel="bp160.1.17"/>
  <changelog author="mvetter@suse.com" date="1552996800">- Update to 0.4.6:
  * underspecified ISO weekday dates can be parsed
  * adding days to underspecified dates results in proper dates
  * all tools with -S|--sed-mode now support -E|--empty-mode to
    output an empty line when a line cannot be read.
  * dateround supports day, week, month and year classes now
    (issues/92)
  * datediff can determine difference in nanoseconds between
    two time values (issues/94)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1580904000">- Update to 0.4.7:
  * strptime mimics return code behaviour of dateconv
  * use unsigned arithmetic for leap second conversion
  * fix up ymds before adding days or business days
  * drain prchunk if filled with many small lines</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608379200">- Add dateutils-remove-deprecated-header.patch: Remove deprecated
  glibc sysctl.h header.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1613563200">- Update to 0.4.8:
  * be symmetric about differences, A - B := -(B - A) for A &lt; B
  * fix security issue when reading TZMAP_DIR from environment
  * fix printing of negative 0 (-0)
  * fix issue with tzdata transitions in files with leap second
  * adjustments that are now cut off at expiration time (#121)
- Drop dateutils-remove-deprecated-header.patch: not needed anymore</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1613908800">- add upstream signing key
- simplify spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1621252800">- Add 0144b15dda4b1ea4fdbeca9f3ecb128eb98772fd.patch and
  a0ebd0037df973aed14779b51d59da3edc506b6a.patch: fix test suite
  run on 32bit archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629460800">- Update to 4.9:
  * allow to specify epochs in nanoseconds, %s%N (#123)
  * fix nanosecond arithmetic (#124)
  * make cross-compilations easier (#128)
  * mention default timezone (#129)
- Drop upstreamed patches:
  * 0144b15dda4b1ea4fdbeca9f3ecb128eb98772fd.patch
  * a0ebd0037df973aed14779b51d59da3edc506b6a.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1653652800">- Update to 4.10:
  * do not resort to daisy sequences when incomplete dates are present (#131)
  * upon end-of-buffer finalise the last line (#141)
  * let --empty-mode|-E and --sed-mode|-S play nicely together (#139)
  * adapt CLI behaviour of strptime(1) to the other tools (#142)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671451200">- Add upstream patches 35041f4d.patch and 841c635b.patch: Do not
  use Singapore for testing previous transitions, but rather
  Jakarta. Fixes build with timezone 2022g.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1706270400">- Updat to version 0.4.11
  * be strict about inputs in datetest --isvalid (#146)
  * build on Macs again (#107)
  * make illegible zone names fatal errors (#151)
  * be strict in datetest --isvalid when inputs have been
    specified (#146)
  * fix issue with negative days remaining after adding months
    in datediff (#153)
- Remove patches 841c635b.patch and 35041f4d.patch because
  they have been applied in source code</changelog>
</package>
<package pkgid="260a93051ec2b35f0627a597ec2485f5cbb089a6b0d74fd27e41a8a86d3d255bf9fd3fee9b1bc5f7a1d95b2459a8d5c628e0555034900d0532dae5c808088304" name="dateutils-octave" arch="x86_64">
  <version epoch="0" ver="0.4.11" rel="bp160.1.17"/>
  <changelog author="mvetter@suse.com" date="1552996800">- Update to 0.4.6:
  * underspecified ISO weekday dates can be parsed
  * adding days to underspecified dates results in proper dates
  * all tools with -S|--sed-mode now support -E|--empty-mode to
    output an empty line when a line cannot be read.
  * dateround supports day, week, month and year classes now
    (issues/92)
  * datediff can determine difference in nanoseconds between
    two time values (issues/94)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1580904000">- Update to 0.4.7:
  * strptime mimics return code behaviour of dateconv
  * use unsigned arithmetic for leap second conversion
  * fix up ymds before adding days or business days
  * drain prchunk if filled with many small lines</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608379200">- Add dateutils-remove-deprecated-header.patch: Remove deprecated
  glibc sysctl.h header.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1613563200">- Update to 0.4.8:
  * be symmetric about differences, A - B := -(B - A) for A &lt; B
  * fix security issue when reading TZMAP_DIR from environment
  * fix printing of negative 0 (-0)
  * fix issue with tzdata transitions in files with leap second
  * adjustments that are now cut off at expiration time (#121)
- Drop dateutils-remove-deprecated-header.patch: not needed anymore</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1613908800">- add upstream signing key
- simplify spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1621252800">- Add 0144b15dda4b1ea4fdbeca9f3ecb128eb98772fd.patch and
  a0ebd0037df973aed14779b51d59da3edc506b6a.patch: fix test suite
  run on 32bit archs.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1629460800">- Update to 4.9:
  * allow to specify epochs in nanoseconds, %s%N (#123)
  * fix nanosecond arithmetic (#124)
  * make cross-compilations easier (#128)
  * mention default timezone (#129)
- Drop upstreamed patches:
  * 0144b15dda4b1ea4fdbeca9f3ecb128eb98772fd.patch
  * a0ebd0037df973aed14779b51d59da3edc506b6a.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1653652800">- Update to 4.10:
  * do not resort to daisy sequences when incomplete dates are present (#131)
  * upon end-of-buffer finalise the last line (#141)
  * let --empty-mode|-E and --sed-mode|-S play nicely together (#139)
  * adapt CLI behaviour of strptime(1) to the other tools (#142)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1671451200">- Add upstream patches 35041f4d.patch and 841c635b.patch: Do not
  use Singapore for testing previous transitions, but rather
  Jakarta. Fixes build with timezone 2022g.</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1706270400">- Updat to version 0.4.11
  * be strict about inputs in datetest --isvalid (#146)
  * build on Macs again (#107)
  * make illegible zone names fatal errors (#151)
  * be strict in datetest --isvalid when inputs have been
    specified (#146)
  * fix issue with negative days remaining after adding months
    in datediff (#153)
- Remove patches 841c635b.patch and 35041f4d.patch because
  they have been applied in source code</changelog>
</package>
<package pkgid="5064d2564bac3ef014268a2967b4a77ec130cc5632b3236f4a88aa966ddf3f28d13d3a61431f15dc861109b379fe4c9c9b0c7d58ffd0828411a99bc266a29d7e" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.24.2" rel="bp160.1.15"/>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1619179200">- Update to 4.17.0
  * Lists of received or sent messages of a selected account can be synchronised
  separately.
  * For better understanding rephrased the notification in cases then no public
  nor a commercial data message can de sent to target data box.
  * Downloads of multiple messages are aggregated into one dialogue when these
  download have been triggered from the main window.
  * Changes of some content of the message databases (statuses, downloaded
  attachments, message deletion) are signalled via the database containers.
  * Added support for new data-box types PFO_ZNALEC and PFO_TLUMOCNIK.
  * Added delivery time and attachment downloaded fields to found message
  entries in search message dialogue. Found entries also can be filtered and
  sorted.
  * User can download data messages directly form the search message dialogue.
  * Selected messages in the search message dialogue can be exported or can be
  attached to an e-mail.
  * Unified std namespace resolution in C++ code.
  * This build requires libdatovka-0.1.2 because of the newly added data-box
  types.
  * The action 'Save all attachments' can be called in multiple selected
  messages at once. Attachment files are renamed when they have same or
  conflicting names within a single data message. Written files are
  not renamed if they conflict between messages or already existing files
  in the directory where the files are written to.
  * Increased the verbosity of logged entries when determining automatic upload
  targets for the records management service.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1630324800">- Update to 4.18.0
  * Changes to behaviour of the tag database object. The container emits
  signals when content changes. Application code catches these signals and
  updates the displayed data.
  * Enabling foreign key functionality when opening tag database.
  * Fixed problems with non-functional move assignments causing unnecessary
  memory copying in some occasions.
  * Using a single transaction to write data of a completely downloaded message
  into the database.
  * Fixed error when deleting entries from account database when removing
  an account.
  * Optimisations in database code.
  * Manually downloaded messages are checked for their identifiers and may be
  uploaded into records management service if a records management service is
  configured and if the message content has not been already downloaded. The
  dialogues notifying the user when the upload finishes are non-modal.
  * Able to query information about the sending of PDZs.
  * Password can be shown when creating a new account without entering the PIN.
  * When there are multiple choices how to pay for a commercial message when
  sending one then the user has the possibility to select the preferred way
  of payment if it is possible.
  * This build requires libdatovka-0.2.0 because of the modified structures for
  holding time values and because of the newly added functionality.
  * Fixed wrong mime type identification then sending ISDOC attachments.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1643716800">- Update to 4.19.0
  * Stored message envelope is updated when the type of a commercial message
  changes (e.g. when consuming the prepaid answer).
  * The application is downloading information about the state of the long term
  storage. This build requires libdatovka-0.2.1.
  * Messages which are going to be deleted from ISDS can be displayed using a
  user-specified colour.
  * Fixed a memory leak occurring while initialising the application.
  * Fixed compilation when using GCC 11.
  * Modified sources to compile with Qt-6.1 and Qt-6.2. Qt-6.0 still causes
  compilation issues. (Qt-6.0 should be fixed instead.)
  * Fixed a bug in a conversion function causing struct tm to Epoch time
  conversion errors when converted value fits within an interval limited by
  midnight and the time zone difference.
  * Suppressed notification dialogues when uploading into records management
  service as too many of them were generated occasionally.
- switch to Qt6 on Tumbleweed</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1651579200">- Update to 4.20.0
  * Fixed a mistake when adding prefixes to multi-line log entries.
  * Enhanced code for handling JSON data.
  * Rewritten JSON classes for communication with the records management service.
  * Able to create a short PDF attachment directly in the application. Only a
  single file can be created whose file name is fixed.
  * Modified communication sequence with records management server when
  automatically uploading newly downloaded messages according to matching
  identifiers. Upload hierarchy is queried only once.
  * Fixed a problem when automatic upload into records management might cause
  the application to crash.
  * Fixed a communication problem when message automatically uploaded into
  records management haven't been displayed in message listing as uploaded.
  * Using c++17 compiler flag when compiling with Qt-6.
- Update datovka-fix-pro.patch: c++17 for qt6 is fixed above</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1669204800">- Update to 4.21.1
  * Fixed hanging send message windows when exiting the application having those
  windows open.
  * Fixed occasional application hangs when worker tasks have been collected on
  exit.
  * GUI application exits in a controlled manner when a POSIX signal is received
  on UNIX-like systems or when a system shutdown or user log-off event is
  detected on Windows.
  * CLI application handles POSIX signals and detects and handles Ctrl+C and
  Ctrl+Break key combinations in Windows command line.
  * Added date-based constraints when checking whether messages are stored in
  records management service.
  * Listed message data can be exported into a CSV file when checking whether
  messages are stored in records management service
  * Accepting backups with missing account identifier. The identifiers may be
  missing if some accounts have been created from local databases.
  * Recipient name '%R' can be used when constructing file names.
  * Reduced computational effort when switching between data messages. Digital
  signatures are not checked. Attachment data are loaded when attachments are
  required/selected.
  * Able to generate e-mails with user-specified content. ZFOs and attachments
  can be added into a single email.
  * ZFO attachments can be viewed directly in the application.
  * Automatic upload targets can be checked for all messages which aren't
  already uploaded into the records management service.
  * Fixed an error in the message download dialogue when the download loop
  hasn't been stopped when the dialogue has been rejected otherwise than using
  the Cancel button.
  * New tag database format. All stored data are converted to new format.
  * Fixed warnings about duplicated database connections.
  * Weakened some recoverable error statements.
  * Fixed inability to check the signature of downloaded psrootqca4.crl file.
  Added PostSignum Qualified CA 5 certificate.
  * Allowing modification of account settings for existing accounts with
  incomplete login credentials.
  * Fixed error when account data have not been downloaded on subsequent
  account removing and adding.
  * Checking libcrypto and libdatovka presence during qmake phase when
  compiling on UNIX-like systems (excluding OS X/macOS).
  * Improved error and warning messages in preferences database code.
  * Able to import account data from the mobile application via a backup or
  transfer archive.
  * Able to download messages from ISDS via command line when the envelope
  hasn't been downloaded yet.
  * Added a tag client for the tag server under development.
  The tag client must be enabled in the preferences.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1687348800">- Update to 4.22.1
  * Viewing number of recently unread messages in top node description when top
  node collapsed in account list. Also changed the icon for the top node.
  * Added support for new data-box type PFO_REQ.
  * User can specify which information he wants to disclose to the recipient
  about the sender.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1701691200">- Update to 4.23.0
  * Added support for high-volume data messages. This build requires
  libdatovka-0.5.0.
  * Added support to store message and attachment data as separate files
  alongside the message database.
  * High-volume messages, attachments of those messages and delivery
  information are stored as separate files in order not to bloat the message
  database.
  * Remembering dialogue window sizes when they are changed by the user.
  * Remembering column widths in all tables.
  * Remember column index and sorting order in tables with enabled sorting.
  * Actions in tool bar in main window can be configured.
  * Extended the list of substitutable labels which can be used to generate file
  names when exporting files. Old labels have been replaced with new ones.
  Old labels are still functional but are not listed in the application.
  * Preference entries can be reset from the prefs dialogue.
  * Fixed bug in dark mode. Filter fields revert now to original colour when
  cleared.
  * Able to build Arm64 package for macOS.
  * Fixed a source of potential deadlocks. Signals from databases are emitted
  when lock are released.
  * Added support for new data-box types PFO_ARCH, PFO_AIAT and PFO_AZI.
  * Changed the layout of the about dialogue.
- don't use bundled static QuaZip, use the system one instead</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1704715200">- Update to 4.23.3:
  * Fixed drag&amp;drop on attachment list in send message dialogue
- 4.23.2:
  * Showing progress of attachment uploads and message sending in
    the send message dialogue
  * Fixed send message dialogue layout where the tab widget wasn't
    vertically expanding.
  * Fixed colours of some labels in the send message dialogue which
    have been illegible in dark mode.
  * Enabled sending of high-volume data messages
- 4.23.1:
  * Fixed the CLI get-msg command when messages failed to download
    with freshly created databases.
  * Changed all references of the term 'account' in the UI into
    'data box'</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 4.23.6:
  * Fixed MIME name detection of ZFO files consiting of a ZIP
    archive and which don't contain a data message nor a delivert info.
  * Fixed crashes of message detail dialogue when invalid ZFO
    content is attempted to be displayed.
  * Fixed some memory-related performance issues reported by
    Coverity.
  * Fixed blocked MEP login loop on newer macOS versions.
  * Fixed sending of ZIP archives in normal (non VoDZ) messages
    by explicitly setting their MIME type.
  * Lowered the limit for maximum attachment count to 50 files.
  * Extended the list of allowed attachment file types.
  * Showing total number of attached files in the send message
    dialogue.
  * Fixed restoration of databases without VoDZ content.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1727697600">- update to 4.24.2:
  * Updated URLs to application-related web pages to point to new locations.
  * Added support for a new credit event type when credit is being charged for
  the recovering of a deleted message. This build requires libdatovka-0.7.0.
  * Added optional date-based message search restrictions.
  * Added sender and recipient data-box IDs into generated correspondence
  overviews.
  * Fixed sending e-gov requests that have been mistakenly sent as high-volume
  messages.
  * Fixed date sorting in found messages list.
  * Added new CLI commands 'export-msg', 'export-msgs', 'import-msg' and
  'import-msgs' allowing exporting and importing data from local databases.
  * Using same PDF format to export envelope and delivery info as in mobile
  application
  * Added four configurable tool bars into main window.
  * Top tool bars can be shown/hidden by the user.
  * Message list filter field in the main window is by default hidden and
  located below the message list.
  * Updated 'create new message' icon.
  * Always updating envelope for VoDZ messages when synchronising accounts.
  This should fix problems when attempting to download VoDZ messages using
  a message list that has been generated in old versions without VoDZ support.
  * Showing a warning label in create message dialogue when source text of PDF
  attachment has been modified after being attached or when not being
  attached at all.
  * Rewritten code for generating account, owner and user overviews. The code is
  now shared with the mobile application.
  * Increased default download timeout limit to 15 minutes because of VoDZ
  messages.
  * New message signature detail icon.
  * CLI interface automatically detects whether to send a normal or a VoDZ
  message.
  * Fixed occasional crashes which may have occurred on backups.
  * Users are occasionally notified about a donation possibility.
  * Added new button icons the send message dialogue. Added 'Add Text' button
  into the send message dialogue. Renamed some buttons in the create account
  and the send message dialogue.
  * The application sends basic environment and configuration stats.
  * Updated support mail to datovka@labs.nic.cz.
  * Added tool tips for create account dialogue labels.</changelog>
</package>
<package pkgid="284dc536f40cb47241380902acdf3b27594ac36cc4a355562e5f495d62e41b8ae447cae9d96f67176b9a13fffd9fa17bec73b4127e11d0dd463f6b7f30e1b73e" name="dav1d" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1683288000">- Use ldconfig_scriptlets macro, minor spec clean-up.</changelog>
  <changelog author="jengelh@inai.de" date="1685534400">- Add to description some performance mentions that set it apart
  from other packages e.g. gav1.</changelog>
  <changelog author="aloisio@gmx.com" date="1685620800">- Update to version 1.2.1
  * Fix a threading race on task_thread.init_done
  * NEON z2 8bpc and high bit-depth optimizations
  * SSSE3 z2 high bit-depth optimziations
  * Fix a desynced luma/chroma planes issue with Film Grain
  * Reduce memory consumption
  * Improve dav1d_parse_sequence_header() speed
  * OBU: Improve header parsing and fix potential overflows
  * OBU: Improve ITU-T T.35 parsing speed
  * Misc buildsystems, CI and headers fixes</changelog>
  <changelog author="aloisio@gmx.com" date="1696420800">- Update to version 1.3.0
  * Reduce memory usage in numerous places
  * ABI break in Dav1dSequenceHeader, Dav1dFrameHeader,
    Dav1dContentLightLevel structures
  * new API function to check the API version:
    dav1d_version_api()
  * Rewrite of the SGR functions for ARM64 to be faster
  * NEON implemetation of save_tmvs for ARM32 and ARM64
  * x86 palette DSP for pal_idx_finish function
- Bump soversion to 7</changelog>
  <changelog author="aloisio@gmx.com" date="1707912000">- Update to version 1.4.0
  * AVX-512 optimizations for z1, z2, z3 in 8bit and
    high-bitdepth
  * New architecture supported: loongarch
  * Loongarch optimizations for 8bit
  * New architecture supported: RISC-V
  * RISC-V optimizations for itx
  * Misc improvements in threading and in reducing binary size
  * Fix potential integer overflow with extremely large frame
    sizes (bsc#1220105, CVE-2024-1580)</changelog>
  <changelog author="aloisio@gmx.com" date="1710504000">- Update to version 1.4.1
  * Optimizations for 6tap filters for NEON (ARM)
  * More RISC-V optimizations for itx (4x8, 8x4, 4x16, 16x4,
    8x16, 16x8)
  * Reduction of binary size on ARM64, ARM32 and RISC-V
  * Fix out-of-bounds read in 8bpc SSE2/SSSE3 wiener_filter
  * Msac optimizations</changelog>
  <changelog author="aloisio@gmx.com" date="1716638400">- Update to version 1.4.2
  * AVX2 optimizations for 8-tap and new variants for 6-tap
  * AVX-512 optimizations for 8-tap and new variants for 6-tap
  * Improve entropy decoding on ARM64
  * New ARM64 optimizations for convolutions based on DotProd
    extension
  * New ARM64 optimizations for convolutions based on i8mm
    extension
  * New ARM64 optimizations for subpel and prep filters for i8mm
  * Misc improvements on existing ARM64 optimizations, notably
    for put/prep
  * New PowerPC9 optimizations for loopfilter
  * Support for macOS kperf API for benchmarking</changelog>
  <changelog author="aloisio@gmx.com" date="1718193600">- Update to version 1.4.3
  * AArch64: Fix potential out of bounds access in DotProd H/HV
    filters
  * cli: Prevent buffer over-read</changelog>
  <changelog author="aloisio@gmx.com" date="1729252800">- Update to version 1.5.0
  * WARNING: we removed some of the SSE2 optimizations, so if
    you care about systems without SSSE3, you should be careful
    when updating!
  * Optimize index offset calculations for decode_coefs
  * picture: copy HDR10+ and T35 metadata only to visible frames
  * SSSE3 new optimizations for 6-tap (8bit and hbd)
  * AArch64/SVE: Add HBD subpel filters using 128-bit SVE2
  * AArch64: Add USMMLA implempentation for 6-tap H/HV
  * AArch64: Optimize Armv8.0 NEON for HBD horizontal filters
    and 6-tap filters
  * Power9: Optimized ITX till 16x4.
  * Loongarch: numerous optimizations
  * RISC-V optimizations for pal, cdef_filter, ipred, mc_blend,
    mc_bdir, itx
  * Allow playing videos in full-screen mode in dav1dplay</changelog>
  <changelog author="aloisio@gmx.com" date="1737374400">- Update to version 1.5.1
  * Rewrite of the looprestoration (SGR, wiener) to reduce stack
    usage
  * Rewrite of {put,prep}_scaled functions
  * Improvements on the SSSE3 SGR
  * Improvements on ARM32/ARM64 looprestoration optimizations
  * RISC-V: blend optimizations for high bitdepth
  * Power9: blend optimizations for 8bpc
  * Port RISC-V to POSIX/non-Linux OS
  * AArch64: Add Neon implementation of load_tmvs
  * Fix a rare, but possible deadlock, in flush()</changelog>
</package>
<package pkgid="9752f15344269091a4f4733d9d5170ffdc9b646fb2b075d527ba722a0ef8886d71717e7522d49dc23b7ec296a3466d45897276505a876dba07a39903d06dc5f9" name="dav1d-devel" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="160000.2.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1683288000">- Use ldconfig_scriptlets macro, minor spec clean-up.</changelog>
  <changelog author="jengelh@inai.de" date="1685534400">- Add to description some performance mentions that set it apart
  from other packages e.g. gav1.</changelog>
  <changelog author="aloisio@gmx.com" date="1685620800">- Update to version 1.2.1
  * Fix a threading race on task_thread.init_done
  * NEON z2 8bpc and high bit-depth optimizations
  * SSSE3 z2 high bit-depth optimziations
  * Fix a desynced luma/chroma planes issue with Film Grain
  * Reduce memory consumption
  * Improve dav1d_parse_sequence_header() speed
  * OBU: Improve header parsing and fix potential overflows
  * OBU: Improve ITU-T T.35 parsing speed
  * Misc buildsystems, CI and headers fixes</changelog>
  <changelog author="aloisio@gmx.com" date="1696420800">- Update to version 1.3.0
  * Reduce memory usage in numerous places
  * ABI break in Dav1dSequenceHeader, Dav1dFrameHeader,
    Dav1dContentLightLevel structures
  * new API function to check the API version:
    dav1d_version_api()
  * Rewrite of the SGR functions for ARM64 to be faster
  * NEON implemetation of save_tmvs for ARM32 and ARM64
  * x86 palette DSP for pal_idx_finish function
- Bump soversion to 7</changelog>
  <changelog author="aloisio@gmx.com" date="1707912000">- Update to version 1.4.0
  * AVX-512 optimizations for z1, z2, z3 in 8bit and
    high-bitdepth
  * New architecture supported: loongarch
  * Loongarch optimizations for 8bit
  * New architecture supported: RISC-V
  * RISC-V optimizations for itx
  * Misc improvements in threading and in reducing binary size
  * Fix potential integer overflow with extremely large frame
    sizes (bsc#1220105, CVE-2024-1580)</changelog>
  <changelog author="aloisio@gmx.com" date="1710504000">- Update to version 1.4.1
  * Optimizations for 6tap filters for NEON (ARM)
  * More RISC-V optimizations for itx (4x8, 8x4, 4x16, 16x4,
    8x16, 16x8)
  * Reduction of binary size on ARM64, ARM32 and RISC-V
  * Fix out-of-bounds read in 8bpc SSE2/SSSE3 wiener_filter
  * Msac optimizations</changelog>
  <changelog author="aloisio@gmx.com" date="1716638400">- Update to version 1.4.2
  * AVX2 optimizations for 8-tap and new variants for 6-tap
  * AVX-512 optimizations for 8-tap and new variants for 6-tap
  * Improve entropy decoding on ARM64
  * New ARM64 optimizations for convolutions based on DotProd
    extension
  * New ARM64 optimizations for convolutions based on i8mm
    extension
  * New ARM64 optimizations for subpel and prep filters for i8mm
  * Misc improvements on existing ARM64 optimizations, notably
    for put/prep
  * New PowerPC9 optimizations for loopfilter
  * Support for macOS kperf API for benchmarking</changelog>
  <changelog author="aloisio@gmx.com" date="1718193600">- Update to version 1.4.3
  * AArch64: Fix potential out of bounds access in DotProd H/HV
    filters
  * cli: Prevent buffer over-read</changelog>
  <changelog author="aloisio@gmx.com" date="1729252800">- Update to version 1.5.0
  * WARNING: we removed some of the SSE2 optimizations, so if
    you care about systems without SSSE3, you should be careful
    when updating!
  * Optimize index offset calculations for decode_coefs
  * picture: copy HDR10+ and T35 metadata only to visible frames
  * SSSE3 new optimizations for 6-tap (8bit and hbd)
  * AArch64/SVE: Add HBD subpel filters using 128-bit SVE2
  * AArch64: Add USMMLA implempentation for 6-tap H/HV
  * AArch64: Optimize Armv8.0 NEON for HBD horizontal filters
    and 6-tap filters
  * Power9: Optimized ITX till 16x4.
  * Loongarch: numerous optimizations
  * RISC-V optimizations for pal, cdef_filter, ipred, mc_blend,
    mc_bdir, itx
  * Allow playing videos in full-screen mode in dav1dplay</changelog>
  <changelog author="aloisio@gmx.com" date="1737374400">- Update to version 1.5.1
  * Rewrite of the looprestoration (SGR, wiener) to reduce stack
    usage
  * Rewrite of {put,prep}_scaled functions
  * Improvements on the SSSE3 SGR
  * Improvements on ARM32/ARM64 looprestoration optimizations
  * RISC-V: blend optimizations for high bitdepth
  * Power9: blend optimizations for 8bpc
  * Port RISC-V to POSIX/non-Linux OS
  * AArch64: Add Neon implementation of load_tmvs
  * Fix a rare, but possible deadlock, in flush()</changelog>
</package>
<package pkgid="e311a282c70b0aa779f7e7af6729ccd38e5152ae33c915354616edc205af77c6e9947a9185dddb2373f0bf24f360a0bf16dfc917e3b4ff3bb7933655a4d7c1fa" name="davfs2" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="bp160.1.1"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1591876800">- Add add-neon-031-support.patch
- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1600257600">- Update to 1.6.0
  * Update documentation
  * Remove Coda-support
  * New parser for cookies (bug #58459).
  * Add log message.
  * Add option sharepoint_href_bug.
  * Ignore option -n (sr #110191).
- Remove add-neon-031-support.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1640001600">- update to 1.6.1:
  * Add Neon version 0.32.
  * mount.davfs.c, get_options: Ignore all unknown options.
  * mount_davfs.c, write_mtab_entry: Add option _netdev to utab-entry.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1653393600">- use release team keyring
- enable keyring validating</changelog>
  <changelog author="Ali Abdallah &lt;ali.abdallah@suse.com&gt;" date="1667390400">- update to 1.7.0:
  * This release uses more portable code.
  * Fix cached file not up to date attributes.
  * Always check for valid prop etag.
- Update davfs2.keyring to match the new upstream one.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1707134400">- Adapt to RPM 4.19 on Tumbleweed.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1716292800">- add davfs2-1.7.0-neon-33.patch to fix build with neon 33</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1740139200">- Rename davfs2-1.7.0-neon-33.patch to
  davfs2-1.7.0-newer-neon.patch and add compatibility to libneon
  0.34.</changelog>
</package>
<package pkgid="704490d9716ddc71f2dc78ba947a4052986caf99f59b113c19e59e29cf6ea7b2cb9dbc01485fe2c3a1710f3d793b64d17e72031b75d631cfb42dbab4e469f140" name="davix" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="bp160.1.15"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589284800">- Update to version 0.7.6:
  * Bug fixes:
  - [DMC-1190] - Unhandled DavixException in secondary thread
    during multi-range simulation.
  - [DMC-1191] - Memory leak in function trying to detect S3
    region.
  - Recognize OpenSSL 'bad decrypt' error message as
    CredDecryptionError.
  - Fix error handling for proxy delegation.
  * [DMC-1181] - Implement proper, abstract data provider class
    for davix HttpIOChain.
  * Refactoring and improvements to davix-tester.
- Changes from version 0.7.5:
  * Bug fixes:
  - Enable use of dav:// and davs:// in third party copies.
  - Fix third party copies when the server presents multiple
    certificate delegation endpoints.
  - Prevent davix from infinite-looping when the server abruptly
    terminates the connection during TPC.
  * Add ability to cancel ongoing TPC transfers through
    user-supplied callback.
  * Continued refactoring to eventually allow the use of libcurl
    as HTTP backend in davix.
  * In-source builds are no longer supported, and explicitly
    prevented by CMake.
- Minor updates to patches using quilt to apply cleanly (only line
  number changes).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to version 0.8.1:
  * Epic
  - [DMC-1267] - Davix with libcurl backend
  - Huge refactoring to accommodate both libneon and libcurl backends,
    as well as improved testing
  * Bug fixes
  - [D-MC-1259] - Gfal2-python pread(offset, count): Partial Content
    request not working against EOS storage
  - [DMC-1279] - Davix with libcurl backend does not load certificate
    via callback functions
  - [DMC-1291] - Davix fails to parse IPv6-format hostname during
    certificate verification
  - [davix/issues/71] - davix-get failing auth with DAVIX_USE_LIBCURL
  - [DMC-1209] - Davix Redirection Cache causes Segfault when
    encountering relative path
  - [DMC-1243] - Davix hangs if url starts with 'https' is used with
    S3/Swift credentials in command
  - [davix/pull/54] - Really add '\0' after printed X.509 data
  - [davix/pull/66] - Initialize session factory members
  - [davix/pull/70] - Fix return value of HttpIO::readFull
  * New Features
  - [DMC-1221] - Introduce a filter to avoid exposing sensitive
    information (such as bearer tokens) in Davix debug output
  - [DMC-1238] - Add SWIFT support in Davix
  - [DMC-1268] - Add CS3API support in Davix
  * Changes
  - [davix/pull/83] - Remove reva-specific credentials management
  * Improvements
  - [DMC-1025] - Allow HEAD-free open through posix API
  - [DMC-1245] - Add leading 0 to Adler32 checksum format in Davix
  * Drop davix-non-void-function.patch
  * Drop davix-link-against-libdl.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1657886400">- Update to version 0.8.2
  * New Features
  - [DMC-1310] - Parse IP stack performance markers in Davix HTTP-TPC
  - [DMC-1320] - Compute S3v4 URI signatures for HTTP TPC calls
  * Issues
  - [davix/issues/97] - Address copyrighted song lyrics in codebase
  - [root-project/root/issues/9072] - HTTP basic authentication and Davix
  * Improvements
  - [DMC-1318] - Better HTTP Copy error message in Davix
  - [davix/pull/95] - Fix CMake warning
  - Improve build and release scripts to also accept tags containing release number</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1667476800">- Update to version 0.8.3:
  * Bug fixes
  - [DMC-1345] - Segfault when encountering invalid redirection URL
  - [DMC-1346] - Segfault because of empty NeonSession object</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676462400">- Update to version 0.8.4:
  * New Features
  - [DMC-1358] - Provide involved transfer hosts via the Copy API
  - [davix/issues/101] - Introspect redirections for HTTP TPC xfers
  * Improvements
  - [DMC-1361] - Improve Davix header logs propagation via logging callback function
  - [davix/pull/99] - Re-enable test to be run with CTest (or make test / ninja test)
  * Issues
  - [davix/issues/98] - Infinite loop in davix slow unit tests when using external libcurl
  - [davix/issues/100] - Unit tests fail when run by more than one user on the same machine
  - [davix/issues/102] - CVE-2022-32221 in bundled curl library
  - [davix/pull/103] - Don't downgrade the C++ version (bugzilla#2163827)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 0.8.5:
  * [gh#cern-fts/davix#107] - CVE-2023-38545 in bundled curl
    library.
  * [gh#cern-fts/davix#106] - Add git mailmap file.
- Use macros to define version, to avoid changing version related
  strings in multiple places.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712750400">- Update to version 0.8.6:
  * Davix header parsing is case-sensitive for libcurl backend.
  * libxml 2.12.0 breaks Gfal2/Davix listing.
  * Incorrect IPv4 reported for HTTP-TPC transfers that don't send
    "RemoteConnections" marker.
  * [gh#cern-fts/davix#113] - Use sed in a more POSIX compliant
    way.
  * Long Authorization header xxxx token string print in Davix.
  * [gh#cern-fts/davix#105] - Do not hardcode error numbers.
  * [gh#cern-fts/davix#110] - Support the NVHPC compiler.
- Empty %check section for rpmlint.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714564800">- Use system available curl and rapidjson instead of bundled
  instances. The use of system rapidjson has the nice side-effect
  of no longer failing to build against GCC14.
- Add davix-no-hardcoded-rapidjson-includes.patch -- Do not hard
  code the location of rapidjson header, and allow system package
  to be used if available [gh#cern-fts/davix#119].
- Enable third-party copy program davix-cp, add BuildRequires:
  pkgconfig(gsoapssl++).
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 0.8.7:
  * Davix does not hide lower-case Authorization headers for
    HTTP/2
  * [gh#cern-fts/davix#120] Out of Date RapidJSON dependency
    causing compile failure
  * [gh#cern-fts/davix#114] Support 64-bit off_t on 32-bit systems
    (LFS)
  * [gh#cern-fts/davix#119] Use system rapidjson, fall back to
    bundled
  * [gh#cern-fts/davix#123] Implement multipart streaming for
    DavPosix::write()
  * [gh#cern-fts/davix#124] Fix s3 dirlisting to follow the
    istruncated/nextmarker
- Drop davix-no-hardcoded-rapidjson-includes.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1727524800">- Add 057b4fa188b6b8afdb34cc6b7d103c78e73c1001.patch: Upstream
  commit to disable the "GcloudTest::UrlSigning" test as the
  GCloud V4 signature involves the current timestamp, which leads
  to non-static results.</changelog>
</package>
<package pkgid="93c134673e5dc5b6d1c8dda2b3b37a02b010e44fb33eebc862f10ceaa69851c6baa85f79a7787a6b2ea0b607aa3a591a762755f2e58b1c5a6c1616da60cec0ef" name="davix-devel" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="bp160.1.15"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589284800">- Update to version 0.7.6:
  * Bug fixes:
  - [DMC-1190] - Unhandled DavixException in secondary thread
    during multi-range simulation.
  - [DMC-1191] - Memory leak in function trying to detect S3
    region.
  - Recognize OpenSSL 'bad decrypt' error message as
    CredDecryptionError.
  - Fix error handling for proxy delegation.
  * [DMC-1181] - Implement proper, abstract data provider class
    for davix HttpIOChain.
  * Refactoring and improvements to davix-tester.
- Changes from version 0.7.5:
  * Bug fixes:
  - Enable use of dav:// and davs:// in third party copies.
  - Fix third party copies when the server presents multiple
    certificate delegation endpoints.
  - Prevent davix from infinite-looping when the server abruptly
    terminates the connection during TPC.
  * Add ability to cancel ongoing TPC transfers through
    user-supplied callback.
  * Continued refactoring to eventually allow the use of libcurl
    as HTTP backend in davix.
  * In-source builds are no longer supported, and explicitly
    prevented by CMake.
- Minor updates to patches using quilt to apply cleanly (only line
  number changes).</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1652097600">- Update to version 0.8.1:
  * Epic
  - [DMC-1267] - Davix with libcurl backend
  - Huge refactoring to accommodate both libneon and libcurl backends,
    as well as improved testing
  * Bug fixes
  - [D-MC-1259] - Gfal2-python pread(offset, count): Partial Content
    request not working against EOS storage
  - [DMC-1279] - Davix with libcurl backend does not load certificate
    via callback functions
  - [DMC-1291] - Davix fails to parse IPv6-format hostname during
    certificate verification
  - [davix/issues/71] - davix-get failing auth with DAVIX_USE_LIBCURL
  - [DMC-1209] - Davix Redirection Cache causes Segfault when
    encountering relative path
  - [DMC-1243] - Davix hangs if url starts with 'https' is used with
    S3/Swift credentials in command
  - [davix/pull/54] - Really add '\0' after printed X.509 data
  - [davix/pull/66] - Initialize session factory members
  - [davix/pull/70] - Fix return value of HttpIO::readFull
  * New Features
  - [DMC-1221] - Introduce a filter to avoid exposing sensitive
    information (such as bearer tokens) in Davix debug output
  - [DMC-1238] - Add SWIFT support in Davix
  - [DMC-1268] - Add CS3API support in Davix
  * Changes
  - [davix/pull/83] - Remove reva-specific credentials management
  * Improvements
  - [DMC-1025] - Allow HEAD-free open through posix API
  - [DMC-1245] - Add leading 0 to Adler32 checksum format in Davix
  * Drop davix-non-void-function.patch
  * Drop davix-link-against-libdl.patch</changelog>
  <changelog author="Timothy Brown &lt;stimut@gmail.com&gt;" date="1657886400">- Update to version 0.8.2
  * New Features
  - [DMC-1310] - Parse IP stack performance markers in Davix HTTP-TPC
  - [DMC-1320] - Compute S3v4 URI signatures for HTTP TPC calls
  * Issues
  - [davix/issues/97] - Address copyrighted song lyrics in codebase
  - [root-project/root/issues/9072] - HTTP basic authentication and Davix
  * Improvements
  - [DMC-1318] - Better HTTP Copy error message in Davix
  - [davix/pull/95] - Fix CMake warning
  - Improve build and release scripts to also accept tags containing release number</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1667476800">- Update to version 0.8.3:
  * Bug fixes
  - [DMC-1345] - Segfault when encountering invalid redirection URL
  - [DMC-1346] - Segfault because of empty NeonSession object</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1676462400">- Update to version 0.8.4:
  * New Features
  - [DMC-1358] - Provide involved transfer hosts via the Copy API
  - [davix/issues/101] - Introspect redirections for HTTP TPC xfers
  * Improvements
  - [DMC-1361] - Improve Davix header logs propagation via logging callback function
  - [davix/pull/99] - Re-enable test to be run with CTest (or make test / ninja test)
  * Issues
  - [davix/issues/98] - Infinite loop in davix slow unit tests when using external libcurl
  - [davix/issues/100] - Unit tests fail when run by more than one user on the same machine
  - [davix/issues/102] - CVE-2022-32221 in bundled curl library
  - [davix/pull/103] - Don't downgrade the C++ version (bugzilla#2163827)</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 0.8.5:
  * [gh#cern-fts/davix#107] - CVE-2023-38545 in bundled curl
    library.
  * [gh#cern-fts/davix#106] - Add git mailmap file.
- Use macros to define version, to avoid changing version related
  strings in multiple places.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712750400">- Update to version 0.8.6:
  * Davix header parsing is case-sensitive for libcurl backend.
  * libxml 2.12.0 breaks Gfal2/Davix listing.
  * Incorrect IPv4 reported for HTTP-TPC transfers that don't send
    "RemoteConnections" marker.
  * [gh#cern-fts/davix#113] - Use sed in a more POSIX compliant
    way.
  * Long Authorization header xxxx token string print in Davix.
  * [gh#cern-fts/davix#105] - Do not hardcode error numbers.
  * [gh#cern-fts/davix#110] - Support the NVHPC compiler.
- Empty %check section for rpmlint.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1714564800">- Use system available curl and rapidjson instead of bundled
  instances. The use of system rapidjson has the nice side-effect
  of no longer failing to build against GCC14.
- Add davix-no-hardcoded-rapidjson-includes.patch -- Do not hard
  code the location of rapidjson header, and allow system package
  to be used if available [gh#cern-fts/davix#119].
- Enable third-party copy program davix-cp, add BuildRequires:
  pkgconfig(gsoapssl++).
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1721217600">- Update to version 0.8.7:
  * Davix does not hide lower-case Authorization headers for
    HTTP/2
  * [gh#cern-fts/davix#120] Out of Date RapidJSON dependency
    causing compile failure
  * [gh#cern-fts/davix#114] Support 64-bit off_t on 32-bit systems
    (LFS)
  * [gh#cern-fts/davix#119] Use system rapidjson, fall back to
    bundled
  * [gh#cern-fts/davix#123] Implement multipart streaming for
    DavPosix::write()
  * [gh#cern-fts/davix#124] Fix s3 dirlisting to follow the
    istruncated/nextmarker
- Drop davix-no-hardcoded-rapidjson-includes.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1727524800">- Add 057b4fa188b6b8afdb34cc6b7d103c78e73c1001.patch: Upstream
  commit to disable the "GcloudTest::UrlSigning" test as the
  GCloud V4 signature involves the current timestamp, which leads
  to non-static results.</changelog>
</package>
<package pkgid="9e68342a971de65b75e3f1ddd4d01abf5786b8dfaa88e4bbefd2a73b1df804faad26a90ecc318d75917aa7f67c2ab39dd9eaa2b8ebee6bac849c74123603f43b" name="dazzle-list-counters" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="160000.2.2"/>
  <changelog author="fcrozat@suse.com" date="1574164800">- Add explicit Conflicts on old libdazzle for dazzle-list-counters,
  allowing upgrade from older release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581508800">- Update to version 3.35.3:
  + Support for secondary icons in suggestion rows.
  + Graph model property range fixes.
- Changes from verson 3.35.2:
  + Touch support for DzlSuggestionEntry.
  + Column sizing improvements to DzlColumnLayout.
  + Documentation improvements.
  + Improved support for disabled animations.
  + Improvments to when and how suggestion popups are displayed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + Style tweaks for Adwaita.
  + New translation scaffolding.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 3.37.1:
  + Fixes for powerpc32.
  + Tweaks for CSS priorities.
  + Add DzlApplicationWindow:titlebar-animation property.
  + Fix C++ compilation.
  + Make showing file browser asynchronous on Linux/BSD/etc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + No changes since 3.37.1.</changelog>
  <changelog author="mgorse@suse.com" date="1616241600">- Update to version 3.40.0:
  + Build system fixes for mingw.
  + PangoFontDescription to CSS conversion improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1630670400">- Update to version 3.42.0:
  + Panel fixes.
  + Allow DzlTaskCache to use NULL copy/free funcs.
  + Updated translations.
- Add lang sub-package now that there are translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632916800">- Add manual libdazzle = %{version} Provides to make the lang pack
  auto installable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646740800">- Update to version 3.43.90:
  + Apply CSS changes immediately.
  + Build fixes for stack protector.
  + Improvements to DzlTaskCache.
  + GCC fixes for macOS.
  + Fix page-size for spinbutton adjustments.
  + Note that libdazzle is not expected to survive into GTK 4.
    Applications using features from libdazzle should either look
    to the replacements that can be found as part of GTK 4 itself
    or libadwaita.
    For those using the more esoteric features of libdazzle like
    fuzzy search, tries, and file system abstractions, you should
    copy those into your project instead.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1647691200">- Update to version 3.44.0:
  + Updated translations.</changelog>
</package>
<package pkgid="9c1cf9eeb4306a066ed261989221095859c3b4e212a00a6808f2edcfd1bab35e764ffb46fe21bebd300d48f7fe30b0e04906f8318d3c89fdd53772432c0895f7" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678449600">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1723032000">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="350317bec443a0cf673346df793b09376b5109c4d286bfee96ab20311a34c6682afde0502ac362949c08ba300965ad476dde7c62a01357cb807aac6e92cd9530" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="160000.3.1"/>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678449600">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1723032000">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1732622400">- Add libdb-4_8-sequence.patch: Fix code to detect/enable 64-bit
  integral type support for sequences. The m4 macros were not
  complying with GCC 14's strictness.
- Rebase db-4.8.30.patch and libdb-fix-atomic.patch to also apply
  using -p1 and use the autosetup macro.</changelog>
  <changelog author="adrian@suse.de" date="1732968000">- fix build for LoongArch64</changelog>
</package>
<package pkgid="9e30be25e2552208563ea152661364adb823c074ae4b0e696494918b5a36d183c8475527699dd6e8aaea0a88f34a78bc78280b1ba223775e7ef7830c1bfa0b7a" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="160000.2.2"/>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678449600">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1723032000">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="bbff5459a153000279f5b18c0b59f8f54054780fb49dce738f7ed65d2df8a593729ec62214cdf5a7ba7ff94296861f029ad87e4e4fddb4232368b8b0b7ab9938" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="160000.3.1"/>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1678449600">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1723032000">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1732622400">- Add libdb-4_8-sequence.patch: Fix code to detect/enable 64-bit
  integral type support for sequences. The m4 macros were not
  complying with GCC 14's strictness.
- Rebase db-4.8.30.patch and libdb-fix-atomic.patch to also apply
  using -p1 and use the autosetup macro.</changelog>
  <changelog author="adrian@suse.de" date="1732968000">- fix build for LoongArch64</changelog>
</package>
<package pkgid="1a5056958aa231b4b7795afa8b2a7a72bef929b39d34dce2de8b9b865e63cf79bb329248d601da8a959b3e0db6baef7fee07f804dfba9d29163bf386d6a75018" name="dbench" arch="x86_64">
  <version epoch="0" ver="3.04" rel="bp160.1.12"/>
  <changelog author="yxu@suse.de" date="1204891200">- submit the package to all distributions</changelog>
  <changelog author="yxu@suse.de" date="1205323200">- removed do_dbench,v in ctcstool source (it is not built anywhere)
- retrieving content from the old missing patch fixing_suse_cert_dependency, and integrated into source</changelog>
  <changelog author="yxu@suse.de" date="1205928000">- adjust the wait time in tcf file (much longer than 750s in real test)</changelog>
  <changelog author="yxu@suse.de" date="1207656000">- renamed all filed done by vmarsik, with a -v suffix
- return to old file name schema to keep integrity and continuity of dbench tables in QADB</changelog>
  <changelog author="vmarsik@suse.cz" date="1222430400">- added TCF for running on local NFS mount
- reverted Yi's renaming</changelog>
  <changelog author="vmarsik@suse.cz" date="1224158400">- added dependency on kernel-nfs-server for the ctcs2-glue subpackage</changelog>
  <changelog author="dsterba@suse.cz" date="1225108800">- use path for documentation from docdir</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Use parallel build, source URLs and remove ancient specfile
  tags and sections</changelog>
  <changelog author="dsterba@suse.cz" date="1415275200">- remove ctcs2-glue subpackage
- clean spec</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="1325151f5162c7398ddf2ef1309b583098c0dbcf735572c549767ef68db01432fa31ca173c45e99008db9506ba3bf36419a0721e1fc50d340b52eb2c055f2629" name="dbench4" arch="x86_64">
  <version epoch="0" ver="4.0" rel="bp160.1.12"/>
  <changelog author="dsterba@suse.cz" date="1412337600">- initial import 4.0
- Added patches:
  * build-fix-paths.diff
  * fileio_leak_repair.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1417694400">- spec: add buildroot and fix build on SLE11</changelog>
  <changelog author="mpluskal@suse.com" date="1423051200">- Tiny spec file cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1431777600">- Update url
- Cleanup dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Small spec file cleanups</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1571745600">- Use modern macros for building</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="5e0aec4f75e4927d0b074f97b7d65ce3c8edb8b431bd5908668b0e089a33edcf88a8399cfcd1e16904d6314e55e8a6321267a443b963c0c066385ae3e567a2dc" name="dblatex" arch="noarch">
  <version epoch="0" ver="0.3.12" rel="160000.2.2"/>
  <changelog author="dmitry_r@opensuse.org" date="1459598400">- Update to version 0.3.7
  * Bugfix release</changelog>
  <changelog author="sbrabec@suse.com" date="1501761600">- Fix texlive-multirow incompatibility (boo#1052102, debian#840189,
  dblatex-xmultirow.patch).</changelog>
  <changelog author="mpluskal@suse.com" date="1501761601">- Cleanup spec file with spec cleaner
- Simplify conditionals
- Drop dblatex-rpmlintrc</changelog>
  <changelog author="aavindraa@gmail.com" date="1509883200">- Update to version 0.3.10
  + Add the ability to set images for front and back covers
  + Add the ability to pass several configuration files (-c option)
  + drop dependency on the latex package 'multirow'
  + wrong character entities in el.xml
  + put the paragraph title on a separate line
- dropped dblatex-xmultirow.patch (upstreamed)
- includes changes from 0.3.8 and 0.3.9. See:
  https://sourceforge.net/p/dblatex/dblatex/ci/default/tree/docs/changes/changes.txt</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536494400">- Package cleanup:
  - Fix she-bang in dblatex script
  - Drop python-devel BuildRequires, not generating any bindings.
  - Drop font-collection BuildRequires, use individual requires.
  - Drop BuildRequires for some bundled styles and add some which
    were implicitly required.
  - Drop font-collection Requires, use individual Requires.
  - Downgrade dependencies which are only used with some engines,
    styles or locales from Requires to Recommends.
- Split documentation subpackage from main package</changelog>
  <changelog author="mpluskal@suse.com" date="1537876800">- More packaging cleanup
- Further reduce duplicities
- Use modern python macros
- Replace shebang in executable</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.3.11:
  * Fix Debian bug #863527: remove active babel character.
  * Fix Debian bug #866716: make dblatex robust to non-ascii xml:id
  * Fix bug #114: don't skip usefull spaces in hyphenated strings</changelog>
  <changelog author="mcepl@suse.com" date="1632744000">- Upgrade to 0.3.12 (python3 version):
  - Fix SF bug #118: fix 'nb' and 'nn' locales.
  - Fix SF bug #119: use locale quotes in glossary.
  - Fix SF bug #120: use locale quotes in bibliography.
  - Fix SF bug #123: add 'se' locale.
  - Fix SF bug #124: set default qandaset title markup in english.
- Added also:
  - dblatex-0.3.11-replace-inkscape-by-rsvg.patch (filed as
    https://sourceforge.net/p/dblatex/feature-requests/21)
  - dblatex-0.3.11-which-shutil.patch (filed as
    https://sourceforge.net/p/dblatex/patches/22)</changelog>
  <changelog author="dimstar@opensuse.org" date="1633089600">- Fix replacement of "env python" to python3 in dblatex' main
  script: upstream moved this already to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738756800">- Fix build against Python 3.13:
  + Add python3-setuptools BuildRequires.
  + Add dblatex-replace-imp.patch: replace imp by importlib.</changelog>
</package>
<package pkgid="1c3d024c343a38ad81bd4936b12948e7f0e125f55db126289e1a5a31130e09fe8a6571a4d3268909728330939ce42b8ccccdb14b0f3ef6592a345c6e5e5467c2" name="dblatex-doc" arch="noarch">
  <version epoch="0" ver="0.3.12" rel="160000.2.2"/>
  <changelog author="dmitry_r@opensuse.org" date="1459598400">- Update to version 0.3.7
  * Bugfix release</changelog>
  <changelog author="sbrabec@suse.com" date="1501761600">- Fix texlive-multirow incompatibility (boo#1052102, debian#840189,
  dblatex-xmultirow.patch).</changelog>
  <changelog author="mpluskal@suse.com" date="1501761601">- Cleanup spec file with spec cleaner
- Simplify conditionals
- Drop dblatex-rpmlintrc</changelog>
  <changelog author="aavindraa@gmail.com" date="1509883200">- Update to version 0.3.10
  + Add the ability to set images for front and back covers
  + Add the ability to pass several configuration files (-c option)
  + drop dependency on the latex package 'multirow'
  + wrong character entities in el.xml
  + put the paragraph title on a separate line
- dropped dblatex-xmultirow.patch (upstreamed)
- includes changes from 0.3.8 and 0.3.9. See:
  https://sourceforge.net/p/dblatex/dblatex/ci/default/tree/docs/changes/changes.txt</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536494400">- Package cleanup:
  - Fix she-bang in dblatex script
  - Drop python-devel BuildRequires, not generating any bindings.
  - Drop font-collection BuildRequires, use individual requires.
  - Drop BuildRequires for some bundled styles and add some which
    were implicitly required.
  - Drop font-collection Requires, use individual Requires.
  - Downgrade dependencies which are only used with some engines,
    styles or locales from Requires to Recommends.
- Split documentation subpackage from main package</changelog>
  <changelog author="mpluskal@suse.com" date="1537876800">- More packaging cleanup
- Further reduce duplicities
- Use modern python macros
- Replace shebang in executable</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.3.11:
  * Fix Debian bug #863527: remove active babel character.
  * Fix Debian bug #866716: make dblatex robust to non-ascii xml:id
  * Fix bug #114: don't skip usefull spaces in hyphenated strings</changelog>
  <changelog author="mcepl@suse.com" date="1632744000">- Upgrade to 0.3.12 (python3 version):
  - Fix SF bug #118: fix 'nb' and 'nn' locales.
  - Fix SF bug #119: use locale quotes in glossary.
  - Fix SF bug #120: use locale quotes in bibliography.
  - Fix SF bug #123: add 'se' locale.
  - Fix SF bug #124: set default qandaset title markup in english.
- Added also:
  - dblatex-0.3.11-replace-inkscape-by-rsvg.patch (filed as
    https://sourceforge.net/p/dblatex/feature-requests/21)
  - dblatex-0.3.11-which-shutil.patch (filed as
    https://sourceforge.net/p/dblatex/patches/22)</changelog>
  <changelog author="dimstar@opensuse.org" date="1633089600">- Fix replacement of "env python" to python3 in dblatex' main
  script: upstream moved this already to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1738756800">- Fix build against Python 3.13:
  + Add python3-setuptools BuildRequires.
  + Add dblatex-replace-imp.patch: replace imp by importlib.</changelog>
</package>
<package pkgid="fb4a5854cca8fcd91420c5a6ef18eefcbf820db3d0f903b28f44b4298a542184efeaa19ad08d731baeda51dd5dae2d1e771eb6b973c33fba78e244f7510a4043" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="743c5aef58fef4135a0f715183aa7676cd1f241aa317f7a3f77086b35392cbebe1254a43e4d98fa8f2a59a4893e8c0d700d3424117f79161721f39bddb0f5ea4" name="dbus-1-common" arch="noarch">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="dcd6b51d666f57b04a1cf8a95d3e6676bb45fda0e93e50b29c1a8dc4a17950df3bff9ee1c78a60e0c04a697c34ccb0ab3e261af9966c76fd03a27ce1e3fe056f" name="dbus-1-daemon" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="c3bbe2ca99c79119b8d4f50575d982303d5f05914b4e62840c6921fe97d4d7ec05a6575a63c468261ebdb6709f3358082875d7e9865f3fd3cc5080cd26c67e25" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="ac054fc3f61f3e7fda22700d516b692f3c106117a61b863e8fdb61ba24d45e35c83ce7d6fd89b2f596c3322bef94c20ed2d675d40cab47e815c81e0b5476902c" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="82abcb4bf298c614ca81f49c9102fdd65a575941071dabebef35d58032cf75bb6e3d6fae049303ee5ac09059924cbf5fde2104e7184c5c04d6236532c12ed4ed" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574251200">- Fix two inconsistencies with _libexecdir, sysusers.d and
  tmpfiles.d are always in %{_prefix}/lib/.
- Drop update-desktop-files BuildRequires, once added for
  mimetypes.prov which is no longer part of update-desktop-files,
  and dbus-1.desktop does not even handles a single mimetype.</changelog>
  <changelog author="sflees@suse.de" date="1575374400">- Verify signatures
  * dbus-1.keyring - Key for Simon McVittie (smcv) from the Debian
  developer keyring.
- Drop dbus_at_console.ck not needed
- Clean up sources
  * Source2 dbus-1.desktop now Source4
  * baselib.conf now source 3
- Update to 1.12.16
  * CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
    authentication for identities that differ from the user running the
    DBusServer. Previously, a local attacker could manipulate symbolic
    links in their own home directory to bypass authentication and connect
    to a DBusServer with elevated privileges. The standard system and
    session dbus-daemons in their default configuration were immune to this
    attack because they did not allow DBUS_COOKIE_SHA1, but third-party
    users of DBusServer such as Upstart could be vulnerable.
    Thanks to Joe Vennix of Apple Information Security.
    (bsc#1137832, dbus#269, Simon McVittie)
- From 1.12.14
  * Raise soft fd limit to match hard limit, even if unprivileged.
    This makes session buses with many clients, or with clients that make
    heavy use of fd-passing, less likely to suffer from fd exhaustion.
    (dbus!103, Simon McVittie)
  * If a privileged dbus-daemon has a hard fd limit greater than 64K, don't
    reduce it to 64K, ensuring that we can put back the original fd limits
    when carrying out traditional (non-systemd) activation. This fixes a
    regression with systemd &gt;= 240 in which system services inherited
    dbus-daemon's hard and soft limit of 64K fds, instead of the intended
    soft limit of 1K and hard limit of 512K or 1M.
    (dbus!103, Debian#928877; Simon McVittie)
  * Fix build failures caused by an AX_CODE_COVERAGE API change in newer
    autoconf-archive versions (dbus#249, dbus!88; Simon McVittie)
  * Fix build failures with newer autoconf-archive versions that include
    AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie)
  * Parse section/group names in .service files according to the syntax
    from the Desktop Entry Specification, rejecting control characters
    and non-ASCII in section/group names (dbus#208, David King)
  * Fix various -Wlogical-op issues that cause build failure with newer
    gcc versions (dbus#225, dbus!109; David King)
  * Don't assume we can set permissions on a directory, for the benefit of
    MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie)
  * Don't overwrite PKG_CONFIG_PATH and related environment variables when
    the pkg-config-based version of DBus1Config is used in a CMake project
    (dbus#267, dbus!96; Clemens Lang)
- Drop now upstream Patches
  * dbus-no-ax-check.patch
  * dbus-new-autoconf-archive.patch</changelog>
  <changelog author="kukuk@suse.com" date="1579262400">- Remove left overs from blocking restart on update from May 29th 2019
- Use sysusers.d to create messagebus user</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579435200">- Drop no longer required call to autoreconf, remove obsolete
  BuildRequires for libtool and autoconf-archive.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579435201">- Move generation of API docs to a separate package, avoid doxygen
  dependency for building main package.
- Build x11 and devel-doc (API doc) using _multibuild.</changelog>
  <changelog author="elimat@opensuse.org" date="1594900800">- Update to 1.12.20
  * On Unix, avoid a use-after-free if two usernames have the same
    numeric uid. In older versions this could lead to a crash (denial of
    service) or other undefined behaviour, possibly including incorrect
    authorization decisions if &lt;policy group=...&gt; is used.
    Like Unix filesystems, D-Bus' model of identity cannot distinguish
    between users of different names with the same numeric uid, so this
    configuration is not advisable on systems where D-Bus will be used.
    Thanks to Daniel Onaca.
    (dbus#305, dbus!166; Simon McVittie)
- From 1.12.18
  * CVE-2020-12049: If a message contains more file descriptors than can
    be sent, close those that did get through before reporting error.
    Previously, a local attacker could cause the system dbus-daemon (or
    another system service with its own DBusServer) to run out of file
    descriptors, by repeatedly connecting to the server and sending fds that
    would get leaked.
    Thanks to Kevin Backhouse of GitHub Security Lab.
    (dbus#294, GHSL-2020-057; Simon McVittie)
  * Fix a crash when the dbus-daemon is terminated while one or more
    monitors are active (dbus#291, dbus!140; Simon McVittie)
  * The dbus-send(1) man page now documents --bus and --peer instead of
    the old --address synonym for --peer, which has been deprecated since
  the introduction of --bus and --peer in 1.7.6
  (fd.o #48816, dbus!115; Chris Morin)
  * Fix a wrong environment variable name in dbus-daemon(1)
    (dbus#275, dbus!122; Mubin, Philip Withnall)
  * Fix formatting of dbus_message_append_args example
  (dbus!126, Felipe Franciosi)
  * Avoid a test failure on Linux when built in a container as uid 0, but
    without the necessary privileges to increase resource limits
  (dbus!58, Debian #908092; Simon McVittie)
  * When building with CMake, cope with libX11 in a non-standard location
  (dbus!129, Tuomo Rinne)
- Run spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646136000">- Update to version 1.12.22:
  + On Linux, when using traditional (non-systemd) service
    activation, don't log warnings about failing to reset OOM score
    adjustment if the process is already more susceptible to the
    OOM killer, as user processes usually are with systemd ≥ 250.
  + On Linux, when using traditional (non-systemd) system bus
    activation, reset the OOM score adjustment to 0 as intended.
    If the system dbus-daemon is protected from the OOM killer,
    this avoids that protection unintentionally being inherited by
    every system service.
  + Avoid malloc() after fork on non-GNU libc.
  + Fix build with clang 13 by using Standard C offsetof where
    available.
  + Fix build of tests on FreeBSD.
  + Make documentation build more reproducible.
  + On Unix, make X11 autolaunch cope with slashes in DISPLAY.
  + Don't try to raise RLIMIT_NOFILE beyond OPEN_MAX on macOS.
  + Fix compilation if embedded tests are enabled but verbose mode
    and stats are both disabled.
  + On Linux, fix a race condition in the integration test for
    transient services.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 1.14.0:
  + Dependencies:
  - dbus now requires at least a basic level of support for C99
    variadic macros, as implemented in gcc &gt;= 3, all versions of
    Clang, and MSVC &gt;= 2005. In practice this requirement has
    existed since version 1.9.2, but it is now official.
  - dbus now requires a C99-compatible va_copy() macro
    (or a __va_copy() macro with the same behaviour), except when
    building for Windows using MSVC and CMake.
  - On Unix platforms, if getpwnam_r() and getgrnam_r() are
    implemented, they must be POSIX-conformant. The non-POSIX
    signature seen in ancient Solaris versions will no longer
    work.
  - GLib &gt;= 2.38 is required if full test coverage is enabled
    (reduced from 2.40 in dbus 1.12.x.)
  - Building using CMake now requires CMake 3.4.
  - Building documentation using CMake now requires xsltproc,
    Docbook DTDs (for example docbook-xml on Debian derivatives),
    and Docbook XSLT stylesheets (for example docbook-xsl on
    Debian derivatives). Using KDE's meinproc4 documentation
    processor is no longer supported.
  + Build-time configuration changes: Move CMake build system to
    top level, matching normal practice for CMake projects
  + Deprecations:
  - Third-party software should install default dbus policies for
    the system bus into ${datadir}/dbus-1/system.d (this has been
    supported since dbus 1.10, released in August 2015).
    Installing default dbus policies in
    ${sysconfdir}/dbus-1/system.d is now considered to be
    deprecated. Policy files in ${sysconfdir}/dbus-1/system.d
    continue to be read, but this directory should only be used
    by system administrators wishing to override the default
    policies.
  - The ${datadir} applicable to dbus is usually /usr/share and
    the ${sysconfdir} is usually /etc.
  - A similar pattern applies to the session bus policies in
    session.d.
  - The dbus-send(1) man page now documents --bus and --peer
    instead of the old --address synonym for --peer, which has
    been deprecated since the introduction of --bus and --peer in
    1.7.6
  - The dbus-daemon man page now has scarier warnings about
    &lt;allow_anonymous/&gt; and non-local TCP, which are insecure and
    should not be used, particularly for the standard system and
    session buses.
  - DBusServer (and hence the dbus-daemon) no longer accepts
    usernames (login names) for the recommended EXTERNAL
    authentication mechanism, only numeric user IDs or the empty
    string. See 1.13.0 release notes for full details.
  + New features:
  - On Linux 4.13 or later when built against a suitable glibc
    version, GetConnectionCredentials() now includes
    UnixGroupIDs, the effective group IDs of the initiator of the
    connection, taken from SO_PEERGROUPS.
  - On Linux 4.13 or later, &lt;policy group="…"&gt; now uses the
    SO_PEERGROUPS credentials-passing socket option to get the
    effective group IDs of the initiator of the connection. See
    1.13.4 release notes for details.
  - Add a --sender option to dbus-send, which requests a name and
    holds it until the signal has been sent
  - dbus-daemon &lt;allow&gt; and &lt;deny&gt; rules can now specify a
    send_destination_prefix attribute, which is like a
    combination of send_destination and the arg0namespace keyword
    in match rules. See 1.13.12 release notes for more details.
  - The dbus-daemon now filters the messages that it relays,
    removing header fields that it does not understand. Clients
    must not rely on this behaviour unless they have confirmed
    that they are connected to a suitable message bus
    implementation, for example by querying its Features
    property.
  - The dbus-daemon now emits a signal,
    ActivatableServicesChanged, when the list of activatable
    services may have changed. Support for this signal can be
    discovered by querying the Features property.
  - It is now possible to disable traditional (non-systemd)
    service activation at build-time (Autotools:
  - -disable-traditional-activation, CMake:
  - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release
    notes for details.
  - The API reference manual can be built as a Qt compiled help
    file if qhelpgenerator(-qt5) is available. See 1.13.16
    release notes for details.
  + Miscellaneous behaviour changes:
  - When using the "user bus" (--enable-user-session), put the
    dbus-daemon in the session slice
  - Several environment variables set by systemd are no longer
    passed on to activated services
  - If the dbus-daemon is compiled for Linux with systemd
    support, it now informs systemd that it is ready for use via
    the sd_notify() mechanism.
  - Tarball releases no longer contain pre-2007 changelogs and
    are now compressed with xz, making them around 35% smaller.
- Drop conditionals for old obsolete versions of openSUSE.
- Rebase patches with quilt.
- Use https for source and sig URL.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665835200">- Disable asserts in dbus-1-x11.spec and dbus-1-devel-doc.spec too</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
</package>
<package pkgid="73812ff6b939fa0d49f3c515d78daf9db45933f76896e122ada4a08e200924f9f4a995982d5cfc953e5ef59f4b2cd5e6e9889930560425ec3c2cef785041e877" name="dbus-1-glib-bash-completion" arch="x86_64">
  <version epoch="0" ver="0.112" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1432987200">- Update to version 0.104:
  + Deprecations: Document the entire library as deprecated.
  + Dependencies:
  - libdbus 1.8 is required.
  - GLib 2.32 is required.
  + Enhancements:
  - The libdbus 1.8 dependency means we can now document that
    dbus_g_thread_init() is idempotent and thread-safe
    (fdo#54770).
  - Use g_cclosure_marshal_generic for all marshalling
    (fdo#64214).
  + Fixes:
  - Allow timeouts to be migrated from one main context to
    another without an assertion failure (fdo#30574).
  - Don't trip a libdbus fatal warning if a Unix fd or other
    unsupported type is encountered in a message (fdo#80557).
  - Make the tests pass with newer GLib by not removing removed
    sources (fdo#83530).
  - Fix some typos in the documentation (fdo#45686).
  - Make the Autotools setup less awful (fdo#58698).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 0.108:
  + Use dbus-run-session instead of dbus-launch for tests.
- Changes from version 0.106:
  + Stop testing G_HAVE_INLINE, which ceased to work in GLib 2.47.2
    and wasn't meant to be API anyway. Instead, rely on "static
    inline" doing the right thing. On pre-C99 compilers, this
    relies on &lt;glib.h&gt; defining inline to __inline, __inline__ or
    the empty string if the compiler requires it, which it has done
    since 2000. (fdo#93513).
  + Stop calling g_mem_profile() in the tests, which no longer does
    anything and caused the tests to fail by issuing a warning.
  + Slightly modernize build system, and remove a weird
    cross-directory dependency which was breaking distcheck.
  + Stop distributing generated marshallers in the tarball.
- Run spec-clean, modernize spec-file macros and also drop a no
  longer conditional dbus-1-glib-64bit Obsoletes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476964800">- Split out dbus-binding-tool in own sub-package.</changelog>
  <changelog author="meissner@suse.com" date="1497009600">- remove CFLAGS setting, -fstack-protector is default and -fPIC
  will be auto-selected.</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 0.110:
  Dependencies:
  + GLib 2.40 is required
  Enhancements:
  + The GLib main-loop glue, "dbus-gmain", is now available as a separate
    subproject (the dbus-gmain branch in dbus-glib's git repository) for
    embedding in larger projects like dbus-glib and dbus-python via the
    `git subtree` or `git submodule` commands. This removes dbus-python's
    dependency on the rest of dbus-glib.
  Fixes:
  + autogen.sh can now detect gtk-doc &gt;= 1.26.
  + More files have per-file copyright information.
- Run spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 0.112:
  + Dependencies:
  - dbus 1.8 was already required, but is more strongly required
    now: the workarounds that were used to run continuous
    integration with dbus 1.6 on Ubuntu 14.04 'trusty' have been
    removed. (Note that dbus 1.8 has already reached end-of-life
    for security support, and newer dbus stable branches are
    strongly recommended.)
  - pkg-config 0.28 is required when building from git.
  + Enhancements:
  - Rewrite CONTRIBUTING.md document, based on Wayland's
    equivalent.
  - A generated ChangeLog file, which made up a significant
    proportion of the size of source tarball releases, is no
    longer included.
  - Improve man page.
  - Add test coverage for fdo#80557
  - Use more modern GLib assertions in unit tests.
  - Improve continuous integration to be run by GitLab in
    addition to Travis-CI.
  - Add clearer license information using
    SPDX-License-Identifier.
  + Fixes:
  - Allow glib-genmarshal to be overridden with
    `./configure GLIB_GENMARSHAL=/path/to/glib-genmarshal`, for
    cross-compilation.
  - Avoid a double-free in dbus-binding-tool for certain inputs,
    possibly involving nested introspection data structures.
  - Report a better error for excessive recursion depth or
    unsupported data types.
  - Map the 15 most-recently-added DBusGError members to their
    corresponding D-Bus error names.
  - Mark all documented symbols as deprecated.
  - Fix unit test failures during distcheck by enabling
    assertions.
  - Fix a core dump during installed-tests by not attempting to
    close a shared DBusConnection.
- Package COPYING as license, CONTRIBUTING.md and NEWS as docs.
- Add explicit pkgconfig BuildRequires.
- Replace dbus-1-devel and glib2-devel with pkgconfig variants that
  configure checks for: pkgconfig(dbus-1), pkgconfig(glib-2.0),
  pkgconfig(gobject-2.0) and pkgconfig(gio-2.0) BuildRequires.
- Drop hard Requires and BuildRequires that are not needed as they
  are added automatically.
- Split out bash-completion sub-package.
- Split out shared library into own sub-package, and Require it
  from the devel package, and add to the baselibs.conf. Following
  the SLPP standard. Add Provides and Obsoletes for the no longer
  existing main package.
- Use ldconfig_scriptlets for post(un) handling.
- Add soname define, ease future updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638360000">- Add signature and keyring as sources, verify tarball with gpg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1638964800">- Add relevant dbus-1-glib-&lt;targettype&gt; provides/obsoletes also in
  baselibs.conf (boo#1193502).</changelog>
  <changelog author="dimstar@opensuse.org" date="1667390400">- Try to guard against incomplete update stacks (boo#1202241):
  + Add split-provides to libdbus-1-glib and bash-completion
    sub-package.
  + Add explicit conflict to bash-completion subpackage against
    dbus-1-glib &lt; 0.112 (when the package split happened)
  + Ensure dbus-1-glib-tool gets the correct library version
    installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710849600">- Own %{_datadir}/gtk-doc and %{_datadir}/gtk-doc/html directories.</changelog>
</package>
<package pkgid="77751216f238b0496171815bba144fff1711f1d510d8620e737b48ea0c4cd6ea11b990085c8d89db25f316277f7f97b45a478c15efe35c82e8c5d9e29958e4c8" name="dbus-1-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.112" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1432987200">- Update to version 0.104:
  + Deprecations: Document the entire library as deprecated.
  + Dependencies:
  - libdbus 1.8 is required.
  - GLib 2.32 is required.
  + Enhancements:
  - The libdbus 1.8 dependency means we can now document that
    dbus_g_thread_init() is idempotent and thread-safe
    (fdo#54770).
  - Use g_cclosure_marshal_generic for all marshalling
    (fdo#64214).
  + Fixes:
  - Allow timeouts to be migrated from one main context to
    another without an assertion failure (fdo#30574).
  - Don't trip a libdbus fatal warning if a Unix fd or other
    unsupported type is encountered in a message (fdo#80557).
  - Make the tests pass with newer GLib by not removing removed
    sources (fdo#83530).
  - Fix some typos in the documentation (fdo#45686).
  - Make the Autotools setup less awful (fdo#58698).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 0.108:
  + Use dbus-run-session instead of dbus-launch for tests.
- Changes from version 0.106:
  + Stop testing G_HAVE_INLINE, which ceased to work in GLib 2.47.2
    and wasn't meant to be API anyway. Instead, rely on "static
    inline" doing the right thing. On pre-C99 compilers, this
    relies on &lt;glib.h&gt; defining inline to __inline, __inline__ or
    the empty string if the compiler requires it, which it has done
    since 2000. (fdo#93513).
  + Stop calling g_mem_profile() in the tests, which no longer does
    anything and caused the tests to fail by issuing a warning.
  + Slightly modernize build system, and remove a weird
    cross-directory dependency which was breaking distcheck.
  + Stop distributing generated marshallers in the tarball.
- Run spec-clean, modernize spec-file macros and also drop a no
  longer conditional dbus-1-glib-64bit Obsoletes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476964800">- Split out dbus-binding-tool in own sub-package.</changelog>
  <changelog author="meissner@suse.com" date="1497009600">- remove CFLAGS setting, -fstack-protector is default and -fPIC
  will be auto-selected.</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 0.110:
  Dependencies:
  + GLib 2.40 is required
  Enhancements:
  + The GLib main-loop glue, "dbus-gmain", is now available as a separate
    subproject (the dbus-gmain branch in dbus-glib's git repository) for
    embedding in larger projects like dbus-glib and dbus-python via the
    `git subtree` or `git submodule` commands. This removes dbus-python's
    dependency on the rest of dbus-glib.
  Fixes:
  + autogen.sh can now detect gtk-doc &gt;= 1.26.
  + More files have per-file copyright information.
- Run spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 0.112:
  + Dependencies:
  - dbus 1.8 was already required, but is more strongly required
    now: the workarounds that were used to run continuous
    integration with dbus 1.6 on Ubuntu 14.04 'trusty' have been
    removed. (Note that dbus 1.8 has already reached end-of-life
    for security support, and newer dbus stable branches are
    strongly recommended.)
  - pkg-config 0.28 is required when building from git.
  + Enhancements:
  - Rewrite CONTRIBUTING.md document, based on Wayland's
    equivalent.
  - A generated ChangeLog file, which made up a significant
    proportion of the size of source tarball releases, is no
    longer included.
  - Improve man page.
  - Add test coverage for fdo#80557
  - Use more modern GLib assertions in unit tests.
  - Improve continuous integration to be run by GitLab in
    addition to Travis-CI.
  - Add clearer license information using
    SPDX-License-Identifier.
  + Fixes:
  - Allow glib-genmarshal to be overridden with
    `./configure GLIB_GENMARSHAL=/path/to/glib-genmarshal`, for
    cross-compilation.
  - Avoid a double-free in dbus-binding-tool for certain inputs,
    possibly involving nested introspection data structures.
  - Report a better error for excessive recursion depth or
    unsupported data types.
  - Map the 15 most-recently-added DBusGError members to their
    corresponding D-Bus error names.
  - Mark all documented symbols as deprecated.
  - Fix unit test failures during distcheck by enabling
    assertions.
  - Fix a core dump during installed-tests by not attempting to
    close a shared DBusConnection.
- Package COPYING as license, CONTRIBUTING.md and NEWS as docs.
- Add explicit pkgconfig BuildRequires.
- Replace dbus-1-devel and glib2-devel with pkgconfig variants that
  configure checks for: pkgconfig(dbus-1), pkgconfig(glib-2.0),
  pkgconfig(gobject-2.0) and pkgconfig(gio-2.0) BuildRequires.
- Drop hard Requires and BuildRequires that are not needed as they
  are added automatically.
- Split out bash-completion sub-package.
- Split out shared library into own sub-package, and Require it
  from the devel package, and add to the baselibs.conf. Following
  the SLPP standard. Add Provides and Obsoletes for the no longer
  existing main package.
- Use ldconfig_scriptlets for post(un) handling.
- Add soname define, ease future updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638360000">- Add signature and keyring as sources, verify tarball with gpg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1638964800">- Add relevant dbus-1-glib-&lt;targettype&gt; provides/obsoletes also in
  baselibs.conf (boo#1193502).</changelog>
  <changelog author="dimstar@opensuse.org" date="1667390400">- Try to guard against incomplete update stacks (boo#1202241):
  + Add split-provides to libdbus-1-glib and bash-completion
    sub-package.
  + Add explicit conflict to bash-completion subpackage against
    dbus-1-glib &lt; 0.112 (when the package split happened)
  + Ensure dbus-1-glib-tool gets the correct library version
    installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710849600">- Own %{_datadir}/gtk-doc and %{_datadir}/gtk-doc/html directories.</changelog>
</package>
<package pkgid="38817d6211ee5e022729083c52417dc0f8ea82fb7675c04b900a620ede1f70768d15fc325711b1cd7f422a8f008f0bcd8355472a87903da9e5f7d41e44ed81f9" name="dbus-1-glib-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.112" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1432987200">- Update to version 0.104:
  + Deprecations: Document the entire library as deprecated.
  + Dependencies:
  - libdbus 1.8 is required.
  - GLib 2.32 is required.
  + Enhancements:
  - The libdbus 1.8 dependency means we can now document that
    dbus_g_thread_init() is idempotent and thread-safe
    (fdo#54770).
  - Use g_cclosure_marshal_generic for all marshalling
    (fdo#64214).
  + Fixes:
  - Allow timeouts to be migrated from one main context to
    another without an assertion failure (fdo#30574).
  - Don't trip a libdbus fatal warning if a Unix fd or other
    unsupported type is encountered in a message (fdo#80557).
  - Make the tests pass with newer GLib by not removing removed
    sources (fdo#83530).
  - Fix some typos in the documentation (fdo#45686).
  - Make the Autotools setup less awful (fdo#58698).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 0.108:
  + Use dbus-run-session instead of dbus-launch for tests.
- Changes from version 0.106:
  + Stop testing G_HAVE_INLINE, which ceased to work in GLib 2.47.2
    and wasn't meant to be API anyway. Instead, rely on "static
    inline" doing the right thing. On pre-C99 compilers, this
    relies on &lt;glib.h&gt; defining inline to __inline, __inline__ or
    the empty string if the compiler requires it, which it has done
    since 2000. (fdo#93513).
  + Stop calling g_mem_profile() in the tests, which no longer does
    anything and caused the tests to fail by issuing a warning.
  + Slightly modernize build system, and remove a weird
    cross-directory dependency which was breaking distcheck.
  + Stop distributing generated marshallers in the tarball.
- Run spec-clean, modernize spec-file macros and also drop a no
  longer conditional dbus-1-glib-64bit Obsoletes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476964800">- Split out dbus-binding-tool in own sub-package.</changelog>
  <changelog author="meissner@suse.com" date="1497009600">- remove CFLAGS setting, -fstack-protector is default and -fPIC
  will be auto-selected.</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 0.110:
  Dependencies:
  + GLib 2.40 is required
  Enhancements:
  + The GLib main-loop glue, "dbus-gmain", is now available as a separate
    subproject (the dbus-gmain branch in dbus-glib's git repository) for
    embedding in larger projects like dbus-glib and dbus-python via the
    `git subtree` or `git submodule` commands. This removes dbus-python's
    dependency on the rest of dbus-glib.
  Fixes:
  + autogen.sh can now detect gtk-doc &gt;= 1.26.
  + More files have per-file copyright information.
- Run spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 0.112:
  + Dependencies:
  - dbus 1.8 was already required, but is more strongly required
    now: the workarounds that were used to run continuous
    integration with dbus 1.6 on Ubuntu 14.04 'trusty' have been
    removed. (Note that dbus 1.8 has already reached end-of-life
    for security support, and newer dbus stable branches are
    strongly recommended.)
  - pkg-config 0.28 is required when building from git.
  + Enhancements:
  - Rewrite CONTRIBUTING.md document, based on Wayland's
    equivalent.
  - A generated ChangeLog file, which made up a significant
    proportion of the size of source tarball releases, is no
    longer included.
  - Improve man page.
  - Add test coverage for fdo#80557
  - Use more modern GLib assertions in unit tests.
  - Improve continuous integration to be run by GitLab in
    addition to Travis-CI.
  - Add clearer license information using
    SPDX-License-Identifier.
  + Fixes:
  - Allow glib-genmarshal to be overridden with
    `./configure GLIB_GENMARSHAL=/path/to/glib-genmarshal`, for
    cross-compilation.
  - Avoid a double-free in dbus-binding-tool for certain inputs,
    possibly involving nested introspection data structures.
  - Report a better error for excessive recursion depth or
    unsupported data types.
  - Map the 15 most-recently-added DBusGError members to their
    corresponding D-Bus error names.
  - Mark all documented symbols as deprecated.
  - Fix unit test failures during distcheck by enabling
    assertions.
  - Fix a core dump during installed-tests by not attempting to
    close a shared DBusConnection.
- Package COPYING as license, CONTRIBUTING.md and NEWS as docs.
- Add explicit pkgconfig BuildRequires.
- Replace dbus-1-devel and glib2-devel with pkgconfig variants that
  configure checks for: pkgconfig(dbus-1), pkgconfig(glib-2.0),
  pkgconfig(gobject-2.0) and pkgconfig(gio-2.0) BuildRequires.
- Drop hard Requires and BuildRequires that are not needed as they
  are added automatically.
- Split out bash-completion sub-package.
- Split out shared library into own sub-package, and Require it
  from the devel package, and add to the baselibs.conf. Following
  the SLPP standard. Add Provides and Obsoletes for the no longer
  existing main package.
- Use ldconfig_scriptlets for post(un) handling.
- Add soname define, ease future updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638360000">- Add signature and keyring as sources, verify tarball with gpg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1638964800">- Add relevant dbus-1-glib-&lt;targettype&gt; provides/obsoletes also in
  baselibs.conf (boo#1193502).</changelog>
  <changelog author="dimstar@opensuse.org" date="1667390400">- Try to guard against incomplete update stacks (boo#1202241):
  + Add split-provides to libdbus-1-glib and bash-completion
    sub-package.
  + Add explicit conflict to bash-completion subpackage against
    dbus-1-glib &lt; 0.112 (when the package split happened)
  + Ensure dbus-1-glib-tool gets the correct library version
    installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710849600">- Own %{_datadir}/gtk-doc and %{_datadir}/gtk-doc/html directories.</changelog>
</package>
<package pkgid="a303e3405109e407ebd4da8a28b5ce4e9bde276dbd3e79b9911ad6593c84794ea92acc999bdc5b038f18d9344eb7f603779af1243fcadaeb8f89b20dc3efb5d2" name="dbus-1-glib-doc" arch="noarch">
  <version epoch="0" ver="0.112" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1432987200">- Update to version 0.104:
  + Deprecations: Document the entire library as deprecated.
  + Dependencies:
  - libdbus 1.8 is required.
  - GLib 2.32 is required.
  + Enhancements:
  - The libdbus 1.8 dependency means we can now document that
    dbus_g_thread_init() is idempotent and thread-safe
    (fdo#54770).
  - Use g_cclosure_marshal_generic for all marshalling
    (fdo#64214).
  + Fixes:
  - Allow timeouts to be migrated from one main context to
    another without an assertion failure (fdo#30574).
  - Don't trip a libdbus fatal warning if a Unix fd or other
    unsupported type is encountered in a message (fdo#80557).
  - Make the tests pass with newer GLib by not removing removed
    sources (fdo#83530).
  - Fix some typos in the documentation (fdo#45686).
  - Make the Autotools setup less awful (fdo#58698).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 0.108:
  + Use dbus-run-session instead of dbus-launch for tests.
- Changes from version 0.106:
  + Stop testing G_HAVE_INLINE, which ceased to work in GLib 2.47.2
    and wasn't meant to be API anyway. Instead, rely on "static
    inline" doing the right thing. On pre-C99 compilers, this
    relies on &lt;glib.h&gt; defining inline to __inline, __inline__ or
    the empty string if the compiler requires it, which it has done
    since 2000. (fdo#93513).
  + Stop calling g_mem_profile() in the tests, which no longer does
    anything and caused the tests to fail by issuing a warning.
  + Slightly modernize build system, and remove a weird
    cross-directory dependency which was breaking distcheck.
  + Stop distributing generated marshallers in the tarball.
- Run spec-clean, modernize spec-file macros and also drop a no
  longer conditional dbus-1-glib-64bit Obsoletes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476964800">- Split out dbus-binding-tool in own sub-package.</changelog>
  <changelog author="meissner@suse.com" date="1497009600">- remove CFLAGS setting, -fstack-protector is default and -fPIC
  will be auto-selected.</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 0.110:
  Dependencies:
  + GLib 2.40 is required
  Enhancements:
  + The GLib main-loop glue, "dbus-gmain", is now available as a separate
    subproject (the dbus-gmain branch in dbus-glib's git repository) for
    embedding in larger projects like dbus-glib and dbus-python via the
    `git subtree` or `git submodule` commands. This removes dbus-python's
    dependency on the rest of dbus-glib.
  Fixes:
  + autogen.sh can now detect gtk-doc &gt;= 1.26.
  + More files have per-file copyright information.
- Run spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 0.112:
  + Dependencies:
  - dbus 1.8 was already required, but is more strongly required
    now: the workarounds that were used to run continuous
    integration with dbus 1.6 on Ubuntu 14.04 'trusty' have been
    removed. (Note that dbus 1.8 has already reached end-of-life
    for security support, and newer dbus stable branches are
    strongly recommended.)
  - pkg-config 0.28 is required when building from git.
  + Enhancements:
  - Rewrite CONTRIBUTING.md document, based on Wayland's
    equivalent.
  - A generated ChangeLog file, which made up a significant
    proportion of the size of source tarball releases, is no
    longer included.
  - Improve man page.
  - Add test coverage for fdo#80557
  - Use more modern GLib assertions in unit tests.
  - Improve continuous integration to be run by GitLab in
    addition to Travis-CI.
  - Add clearer license information using
    SPDX-License-Identifier.
  + Fixes:
  - Allow glib-genmarshal to be overridden with
    `./configure GLIB_GENMARSHAL=/path/to/glib-genmarshal`, for
    cross-compilation.
  - Avoid a double-free in dbus-binding-tool for certain inputs,
    possibly involving nested introspection data structures.
  - Report a better error for excessive recursion depth or
    unsupported data types.
  - Map the 15 most-recently-added DBusGError members to their
    corresponding D-Bus error names.
  - Mark all documented symbols as deprecated.
  - Fix unit test failures during distcheck by enabling
    assertions.
  - Fix a core dump during installed-tests by not attempting to
    close a shared DBusConnection.
- Package COPYING as license, CONTRIBUTING.md and NEWS as docs.
- Add explicit pkgconfig BuildRequires.
- Replace dbus-1-devel and glib2-devel with pkgconfig variants that
  configure checks for: pkgconfig(dbus-1), pkgconfig(glib-2.0),
  pkgconfig(gobject-2.0) and pkgconfig(gio-2.0) BuildRequires.
- Drop hard Requires and BuildRequires that are not needed as they
  are added automatically.
- Split out bash-completion sub-package.
- Split out shared library into own sub-package, and Require it
  from the devel package, and add to the baselibs.conf. Following
  the SLPP standard. Add Provides and Obsoletes for the no longer
  existing main package.
- Use ldconfig_scriptlets for post(un) handling.
- Add soname define, ease future updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638360000">- Add signature and keyring as sources, verify tarball with gpg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1638964800">- Add relevant dbus-1-glib-&lt;targettype&gt; provides/obsoletes also in
  baselibs.conf (boo#1193502).</changelog>
  <changelog author="dimstar@opensuse.org" date="1667390400">- Try to guard against incomplete update stacks (boo#1202241):
  + Add split-provides to libdbus-1-glib and bash-completion
    sub-package.
  + Add explicit conflict to bash-completion subpackage against
    dbus-1-glib &lt; 0.112 (when the package split happened)
  + Ensure dbus-1-glib-tool gets the correct library version
    installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710849600">- Own %{_datadir}/gtk-doc and %{_datadir}/gtk-doc/html directories.</changelog>
</package>
<package pkgid="f5fb56ca6da7a6b9ec26222bda4d837248138097f951a8e568e686614af851dea1047994f8605d5cf912daf5572c01a053786dcf5c98c8f46c8d0725806a6039" name="dbus-1-glib-tool" arch="x86_64">
  <version epoch="0" ver="0.112" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1432987200">- Update to version 0.104:
  + Deprecations: Document the entire library as deprecated.
  + Dependencies:
  - libdbus 1.8 is required.
  - GLib 2.32 is required.
  + Enhancements:
  - The libdbus 1.8 dependency means we can now document that
    dbus_g_thread_init() is idempotent and thread-safe
    (fdo#54770).
  - Use g_cclosure_marshal_generic for all marshalling
    (fdo#64214).
  + Fixes:
  - Allow timeouts to be migrated from one main context to
    another without an assertion failure (fdo#30574).
  - Don't trip a libdbus fatal warning if a Unix fd or other
    unsupported type is encountered in a message (fdo#80557).
  - Make the tests pass with newer GLib by not removing removed
    sources (fdo#83530).
  - Fix some typos in the documentation (fdo#45686).
  - Make the Autotools setup less awful (fdo#58698).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 0.108:
  + Use dbus-run-session instead of dbus-launch for tests.
- Changes from version 0.106:
  + Stop testing G_HAVE_INLINE, which ceased to work in GLib 2.47.2
    and wasn't meant to be API anyway. Instead, rely on "static
    inline" doing the right thing. On pre-C99 compilers, this
    relies on &lt;glib.h&gt; defining inline to __inline, __inline__ or
    the empty string if the compiler requires it, which it has done
    since 2000. (fdo#93513).
  + Stop calling g_mem_profile() in the tests, which no longer does
    anything and caused the tests to fail by issuing a warning.
  + Slightly modernize build system, and remove a weird
    cross-directory dependency which was breaking distcheck.
  + Stop distributing generated marshallers in the tarball.
- Run spec-clean, modernize spec-file macros and also drop a no
  longer conditional dbus-1-glib-64bit Obsoletes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476964800">- Split out dbus-binding-tool in own sub-package.</changelog>
  <changelog author="meissner@suse.com" date="1497009600">- remove CFLAGS setting, -fstack-protector is default and -fPIC
  will be auto-selected.</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 0.110:
  Dependencies:
  + GLib 2.40 is required
  Enhancements:
  + The GLib main-loop glue, "dbus-gmain", is now available as a separate
    subproject (the dbus-gmain branch in dbus-glib's git repository) for
    embedding in larger projects like dbus-glib and dbus-python via the
    `git subtree` or `git submodule` commands. This removes dbus-python's
    dependency on the rest of dbus-glib.
  Fixes:
  + autogen.sh can now detect gtk-doc &gt;= 1.26.
  + More files have per-file copyright information.
- Run spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 0.112:
  + Dependencies:
  - dbus 1.8 was already required, but is more strongly required
    now: the workarounds that were used to run continuous
    integration with dbus 1.6 on Ubuntu 14.04 'trusty' have been
    removed. (Note that dbus 1.8 has already reached end-of-life
    for security support, and newer dbus stable branches are
    strongly recommended.)
  - pkg-config 0.28 is required when building from git.
  + Enhancements:
  - Rewrite CONTRIBUTING.md document, based on Wayland's
    equivalent.
  - A generated ChangeLog file, which made up a significant
    proportion of the size of source tarball releases, is no
    longer included.
  - Improve man page.
  - Add test coverage for fdo#80557
  - Use more modern GLib assertions in unit tests.
  - Improve continuous integration to be run by GitLab in
    addition to Travis-CI.
  - Add clearer license information using
    SPDX-License-Identifier.
  + Fixes:
  - Allow glib-genmarshal to be overridden with
    `./configure GLIB_GENMARSHAL=/path/to/glib-genmarshal`, for
    cross-compilation.
  - Avoid a double-free in dbus-binding-tool for certain inputs,
    possibly involving nested introspection data structures.
  - Report a better error for excessive recursion depth or
    unsupported data types.
  - Map the 15 most-recently-added DBusGError members to their
    corresponding D-Bus error names.
  - Mark all documented symbols as deprecated.
  - Fix unit test failures during distcheck by enabling
    assertions.
  - Fix a core dump during installed-tests by not attempting to
    close a shared DBusConnection.
- Package COPYING as license, CONTRIBUTING.md and NEWS as docs.
- Add explicit pkgconfig BuildRequires.
- Replace dbus-1-devel and glib2-devel with pkgconfig variants that
  configure checks for: pkgconfig(dbus-1), pkgconfig(glib-2.0),
  pkgconfig(gobject-2.0) and pkgconfig(gio-2.0) BuildRequires.
- Drop hard Requires and BuildRequires that are not needed as they
  are added automatically.
- Split out bash-completion sub-package.
- Split out shared library into own sub-package, and Require it
  from the devel package, and add to the baselibs.conf. Following
  the SLPP standard. Add Provides and Obsoletes for the no longer
  existing main package.
- Use ldconfig_scriptlets for post(un) handling.
- Add soname define, ease future updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638360000">- Add signature and keyring as sources, verify tarball with gpg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1638964800">- Add relevant dbus-1-glib-&lt;targettype&gt; provides/obsoletes also in
  baselibs.conf (boo#1193502).</changelog>
  <changelog author="dimstar@opensuse.org" date="1667390400">- Try to guard against incomplete update stacks (boo#1202241):
  + Add split-provides to libdbus-1-glib and bash-completion
    sub-package.
  + Add explicit conflict to bash-completion subpackage against
    dbus-1-glib &lt; 0.112 (when the package split happened)
  + Ensure dbus-1-glib-tool gets the correct library version
    installed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1710849600">- Own %{_datadir}/gtk-doc and %{_datadir}/gtk-doc/html directories.</changelog>
</package>
<package pkgid="6e3eb68bdde52ad418cb20a56e25c40b23e5f824d554d075e76fe4146dc8d2ba14ecb77ff2e100420b6151dc66e76fa2a4fbd29ec1e9de7b5967c27c8e7464c1" name="dbus-1-tools" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1677153600">- Move %tmpfiles_create to %post otherwise the file won't exist
  since it is now located in the correct package</changelog>
  <changelog author="dmueller@suse.com" date="1686571200">- update to 1.14.8 (bsc#1212126, CVE-2023-34969):
  * Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    &lt;deny&gt; rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design</changelog>
  <changelog author="dmueller@suse.com" date="1694606400">- update to 1.14.10:
  * Avoid a dbus-daemon crash if re-creating a connection's policy
    fails. If it isn't possible to re-create its policy (for
    example if it belongs to a user account that has been deleted
    or if the Name Service Switch is broken, on a system not
    supporting SO_PEERGROUPS), we now log a warning, continue to
    use its current policy, and continue to reload other
    connections' policies.
  * If getting the groups from a user ID fails, report the error
    correctly, instead of logging "(null)"
  * Return the primary group ID in GetConnectionCredentials()'
    UnixGroupIDs field for processes with a valid-but-empty
    supplementary group list</changelog>
  <changelog author="sflees@suse.de" date="1695297600">- No longer start or offer starting dbus as a system service
  dbus-broker will be the only supported system dbus. Although
  the existing daemon will stay as some things (gdm) require
  dbus-run-session</changelog>
  <changelog author="dimstar@opensuse.org" date="1695297601">- Explicitly require /usr/bin/cmp for the post scripts instead of
  diffutils: allow other implementations like busybox-diffutils to
  be acceptable.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1701518400">- common: dbus.socket still gets used after migration to
  dbus-broker so keep pre/post/postun scriptlets</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Add feature-suse-auto-socket-target-wants.patch: move
  from static enable symlinks to systemd created symlinks otherwise
  it can't be enabled by systemd-presets-common-SUSE
- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing the socket or user service aswell</changelog>
  <changelog author="gmbr3@opensuse.org" date="1704715200">- Add RH/Fedora compat provides dbus-libs to library package
  needed by Mullvad</changelog>
  <changelog author="sflees@suse.de" date="1714392000">- Drop feature-suse-auto-socket-target-wants.patch and use the
  filesystem instead, this works more consistenly with dbus-broker</changelog>
  <changelog author="dimstar@opensuse.org" date="1729080000">- Drop rcFOO symlinks (PED-266).</changelog>
</package>
<package pkgid="fa24d5a36362b3ef3b34fe06172707a0dbc365b178e92020c1d0e530ca5240c76bfba7014e6961f828915c678b8f9cb23b26e97d1253bdadcbec95607fcfaabc" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="160000.2.2"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579435200">- Move generation of API docs to a separate package, avoid doxygen
  dependency for building main package.
- Build x11 and devel-doc (API doc) using _multibuild.</changelog>
  <changelog author="elimat@opensuse.org" date="1594900800">- Update to 1.12.20
  * On Unix, avoid a use-after-free if two usernames have the same
    numeric uid. In older versions this could lead to a crash (denial of
    service) or other undefined behaviour, possibly including incorrect
    authorization decisions if &lt;policy group=...&gt; is used.
    Like Unix filesystems, D-Bus' model of identity cannot distinguish
    between users of different names with the same numeric uid, so this
    configuration is not advisable on systems where D-Bus will be used.
    Thanks to Daniel Onaca.
    (dbus#305, dbus!166; Simon McVittie)
- From 1.12.18
  * CVE-2020-12049: If a message contains more file descriptors than can
    be sent, close those that did get through before reporting error.
    Previously, a local attacker could cause the system dbus-daemon (or
    another system service with its own DBusServer) to run out of file
    descriptors, by repeatedly connecting to the server and sending fds that
    would get leaked.
    Thanks to Kevin Backhouse of GitHub Security Lab.
    (dbus#294, GHSL-2020-057; Simon McVittie)
  * Fix a crash when the dbus-daemon is terminated while one or more
    monitors are active (dbus#291, dbus!140; Simon McVittie)
  * The dbus-send(1) man page now documents --bus and --peer instead of
    the old --address synonym for --peer, which has been deprecated since
  the introduction of --bus and --peer in 1.7.6
  (fd.o #48816, dbus!115; Chris Morin)
  * Fix a wrong environment variable name in dbus-daemon(1)
    (dbus#275, dbus!122; Mubin, Philip Withnall)
  * Fix formatting of dbus_message_append_args example
  (dbus!126, Felipe Franciosi)
  * Avoid a test failure on Linux when built in a container as uid 0, but
    without the necessary privileges to increase resource limits
  (dbus!58, Debian #908092; Simon McVittie)
  * When building with CMake, cope with libX11 in a non-standard location
  (dbus!129, Tuomo Rinne)
- Run spec-cleaner</changelog>
  <changelog author="schubi@suse.de" date="1628078400">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1631793600">- Fixed spec file regarding removing old update-alternatives
  entries.</changelog>
  <changelog author="schubi@suse.de" date="1632398400">- Added BuildRequires alts for libalternatives.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646136000">- Update to version 1.12.22:
  + On Linux, when using traditional (non-systemd) service
    activation, don't log warnings about failing to reset OOM score
    adjustment if the process is already more susceptible to the
    OOM killer, as user processes usually are with systemd ≥ 250.
  + On Linux, when using traditional (non-systemd) system bus
    activation, reset the OOM score adjustment to 0 as intended.
    If the system dbus-daemon is protected from the OOM killer,
    this avoids that protection unintentionally being inherited by
    every system service.
  + Avoid malloc() after fork on non-GNU libc.
  + Fix build with clang 13 by using Standard C offsetof where
    available.
  + Fix build of tests on FreeBSD.
  + Make documentation build more reproducible.
  + On Unix, make X11 autolaunch cope with slashes in DISPLAY.
  + Don't try to raise RLIMIT_NOFILE beyond OPEN_MAX on macOS.
  + Fix compilation if embedded tests are enabled but verbose mode
    and stats are both disabled.
  + On Linux, fix a race condition in the integration test for
    transient services.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 1.14.0:
  + Dependencies:
  - dbus now requires at least a basic level of support for C99
    variadic macros, as implemented in gcc &gt;= 3, all versions of
    Clang, and MSVC &gt;= 2005. In practice this requirement has
    existed since version 1.9.2, but it is now official.
  - dbus now requires a C99-compatible va_copy() macro
    (or a __va_copy() macro with the same behaviour), except when
    building for Windows using MSVC and CMake.
  - On Unix platforms, if getpwnam_r() and getgrnam_r() are
    implemented, they must be POSIX-conformant. The non-POSIX
    signature seen in ancient Solaris versions will no longer
    work.
  - GLib &gt;= 2.38 is required if full test coverage is enabled
    (reduced from 2.40 in dbus 1.12.x.)
  - Building using CMake now requires CMake 3.4.
  - Building documentation using CMake now requires xsltproc,
    Docbook DTDs (for example docbook-xml on Debian derivatives),
    and Docbook XSLT stylesheets (for example docbook-xsl on
    Debian derivatives). Using KDE's meinproc4 documentation
    processor is no longer supported.
  + Build-time configuration changes: Move CMake build system to
    top level, matching normal practice for CMake projects
  + Deprecations:
  - Third-party software should install default dbus policies for
    the system bus into ${datadir}/dbus-1/system.d (this has been
    supported since dbus 1.10, released in August 2015).
    Installing default dbus policies in
    ${sysconfdir}/dbus-1/system.d is now considered to be
    deprecated. Policy files in ${sysconfdir}/dbus-1/system.d
    continue to be read, but this directory should only be used
    by system administrators wishing to override the default
    policies.
  - The ${datadir} applicable to dbus is usually /usr/share and
    the ${sysconfdir} is usually /etc.
  - A similar pattern applies to the session bus policies in
    session.d.
  - The dbus-send(1) man page now documents --bus and --peer
    instead of the old --address synonym for --peer, which has
    been deprecated since the introduction of --bus and --peer in
    1.7.6
  - The dbus-daemon man page now has scarier warnings about
    &lt;allow_anonymous/&gt; and non-local TCP, which are insecure and
    should not be used, particularly for the standard system and
    session buses.
  - DBusServer (and hence the dbus-daemon) no longer accepts
    usernames (login names) for the recommended EXTERNAL
    authentication mechanism, only numeric user IDs or the empty
    string. See 1.13.0 release notes for full details.
  + New features:
  - On Linux 4.13 or later when built against a suitable glibc
    version, GetConnectionCredentials() now includes
    UnixGroupIDs, the effective group IDs of the initiator of the
    connection, taken from SO_PEERGROUPS.
  - On Linux 4.13 or later, &lt;policy group="…"&gt; now uses the
    SO_PEERGROUPS credentials-passing socket option to get the
    effective group IDs of the initiator of the connection. See
    1.13.4 release notes for details.
  - Add a --sender option to dbus-send, which requests a name and
    holds it until the signal has been sent
  - dbus-daemon &lt;allow&gt; and &lt;deny&gt; rules can now specify a
    send_destination_prefix attribute, which is like a
    combination of send_destination and the arg0namespace keyword
    in match rules. See 1.13.12 release notes for more details.
  - The dbus-daemon now filters the messages that it relays,
    removing header fields that it does not understand. Clients
    must not rely on this behaviour unless they have confirmed
    that they are connected to a suitable message bus
    implementation, for example by querying its Features
    property.
  - The dbus-daemon now emits a signal,
    ActivatableServicesChanged, when the list of activatable
    services may have changed. Support for this signal can be
    discovered by querying the Features property.
  - It is now possible to disable traditional (non-systemd)
    service activation at build-time (Autotools:
  - -disable-traditional-activation, CMake:
  - DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release
    notes for details.
  - The API reference manual can be built as a Qt compiled help
    file if qhelpgenerator(-qt5) is available. See 1.13.16
    release notes for details.
  + Miscellaneous behaviour changes:
  - When using the "user bus" (--enable-user-session), put the
    dbus-daemon in the session slice
  - Several environment variables set by systemd are no longer
    passed on to activated services
  - If the dbus-daemon is compiled for Linux with systemd
    support, it now informs systemd that it is ready for use via
    the sd_notify() mechanism.
  - Tarball releases no longer contain pre-2007 changelogs and
    are now compressed with xz, making them around 35% smaller.
- Drop conditionals for old obsolete versions of openSUSE.
- Rebase patches with quilt.
- Use https for source and sig URL.</changelog>
  <changelog author="fvogt@suse.com" date="1647604800">- Use --with-x=auto to actually enable X11 integration (boo#1197258,
  workaround https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/263)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665835200">- Disable asserts in dbus-1-x11.spec and dbus-1-devel-doc.spec too</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 1.14.4 (bsc#1204111, CVE-2022-42010,
    bsc#1204112, CVE-2022-42011,
    bsc#1204113, CVE-2022-42012):
  This is a security update for the dbus 1.14.x stable branch, fixing
  denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
  security hardening (dbus#416).
  Behaviour changes:
  * On Linux, dbus-daemon and other uses of DBusServer now create a
    path-based Unix socket, unix:path=..., when asked to listen on a
    unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
    unix:dir=... on all platforms.
    Previous versions would have created an abstract socket, unix:abstract=...,
    in this situation.
    This change primarily affects the well-known session bus when run via
    dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
    dbus with --enable-user-session and running it on a systemd system,
    already used path-based Unix sockets and is unaffected by this change.
    This behaviour change prevents a sandbox escape via the session bus socket
    in sandboxing frameworks that can share the network namespace with the host
    system, such as Flatpak.
    This change might cause a regression in situations where the abstract socket
    is intentionally shared between the host system and a chroot or container,
    such as some use-cases of schroot(1). That regression can be resolved by
    using a bind-mount to share either the D-Bus socket, or the whole /tmp
    directory, with the chroot or container.
    (dbus#416, Simon McVittie)
  * Denial of service fixes:
  - Evgeny Vereshchagin discovered several ways in which an authenticated
    local attacker could cause a crash (denial of service) in
    dbus-daemon --system or a custom DBusServer. In uncommon configurations
    these could potentially be carried out by an authenticated remote attacker.
  - An invalid array of fixed-length elements where the length of the array
    is not a multiple of the length of the element would cause an assertion
    failure in debug builds or an out-of-bounds read in production builds.
    This was a regression in version 1.3.0.
    (dbus#413, CVE-2022-42011; Simon McVittie)
  - A syntactically invalid type signature with incorrectly nested parentheses
    and curly brackets would cause an assertion failure in debug builds.
    Similar messages could potentially result in a crash or incorrect message
    processing in a production build, although we are not aware of a practical
    example. (dbus#418, CVE-2022-42010; Simon McVittie)
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption in production
    builds, or an assertion failure in debug builds. This was a regression in
    version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
  - Preserve errno on failure to open /proc/self/oom_score_adj
    (dbus!285, Gentoo#834725; Mike Gilbert)
  - On Linux, don't log warnings if oom_score_adj is read-only but does not
    need to be changed (dbus!291, Simon McVittie)
  - Slightly improve error-handling for inotify
    (dbus!235, Simon McVittie)
  - Don't crash if dbus-daemon is asked to watch more than 128 directories
    for changes (dbus!302, Jan Tojnar)</changelog>
</package>
<package pkgid="11984b4c5463ccc64c236a048e1627a587e9c062189dd761a9cc6a69e323b0ba7eb0546da267bab4ccd08aeb47b870698875800babb332ff9987a5afb72553c6" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="36" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1695988800">- Add BuildIgnore to break cycle with dbus-1.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
</package>
<package pkgid="a1295dc94dcded529a060214cb4312f80264b6a72d938d577902b689dccaefab602d143ee92658d94c26ff25a4b75f4d0ed473eb92b724f2ad567d2d97986c52" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="36" rel="160000.3.1"/>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
  <changelog author="sflees@suse.de" date="1771934400">- Fix timeout on ssh due to not handling ESRCH (boo#1255678)
  * fix-ESRCH-check.patch</changelog>
</package>
<package pkgid="bc5510fdda01230eee9941359e09b74318820f081ed7e80b0235b44ed70690c3b24f8d26e3a25db107fdae21d1e04384e21316aac7b0eb708681812433b3f8f0" name="dbus-broker-allow-restart" arch="noarch">
  <version epoch="0" ver="36" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1695988800">- Add BuildIgnore to break cycle with dbus-1.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
</package>
<package pkgid="c0b8338989984c61dea132e69d77b1191bfe139e2c9eee3b83cdeeffbc2e019bf0046b20af3877c4c1fd990d5442c9cc285a50e31e98370e4b2fa8714998673d" name="dbus-broker-allow-restart" arch="noarch">
  <version epoch="0" ver="36" rel="160000.3.1"/>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
  <changelog author="sflees@suse.de" date="1771934400">- Fix timeout on ssh due to not handling ESRCH (boo#1255678)
  * fix-ESRCH-check.patch</changelog>
</package>
<package pkgid="b1f6fcba641d23f94ba7d36b074876dc4f6f0cb43d8d079156ab3d81917ed63e2a80a11ddb1205a3176c18d437080d05dcf0b118e9f43881dacc68f3e7309bc6" name="dbus-broker-block-restart" arch="noarch">
  <version epoch="0" ver="36" rel="160000.2.2"/>
  <changelog author="fvogt@suse.com" date="1695988800">- Add BuildIgnore to break cycle with dbus-1.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
</package>
<package pkgid="c88cc6489001e303906c452823d87a98a84ef12fe7453c77a9f18211c3e2681a0fb75243e6111ff03c36e33b3e58dc24431c6c7ba8f57dd4ff5aa8ee1c116de9" name="dbus-broker-block-restart" arch="noarch">
  <version epoch="0" ver="36" rel="160000.3.1"/>
  <changelog author="gmbr3@opensuse.org" date="1702382400">- Update feature-suse-refuse-manual-start-stop.patch: prevent
  killing user service aswell</changelog>
  <changelog author="jengelh@inai.de" date="1702555200">- Update to release 34
  * Use AT_RANDOM for libexpat initialization to avoid a hidden
    dependency in libexpat-hashtables on `/dev/urandom` at
    runtime.
  * Check for SELinux Enforcing-mode and honor its value.
  * Support the new `ProcessFD` key in `GetConnectionCredentials()`.
  * Loading files from a directory will not enumerate the files
    in a predictable order rather than the pseudo-random order
    returned by the kernel.</changelog>
  <changelog author="jengelh@inai.de" date="1703073600">- Update to release 35
  * drop an error-checking remnant of old dir-iteration</changelog>
  <changelog author="mrueckert@suse.de" date="1705406400">- Make restart behavior an admin decision:
  - drop feature-suse-refuse-manual-start-stop.patch
  - introduce 2 new subpackages:
    dbus-broker-allow-restart
    dbus-broker-block-restart (default to reflect the old patch
    behavior)
    one of the 2 packages is required and leaves the admin the
    choice if they want to be able to restart dbus-broker without
    reboot or not.</changelog>
  <changelog author="mrueckert@suse.de" date="1705406401">- Downgrade the recommends to suggests based on suggestion from
  dimstar</changelog>
  <changelog author="mrueckert@suse.de" date="1705406402">- Make provides versioned
- Ensure that not both packages can be installed at the same time
  by adding a conflicts</changelog>
  <changelog author="jengelh@inai.de" date="1712923200">- Update to release 36
  * Fix possible file-descriptor use-after-close
  * More verbose activation failures</changelog>
  <changelog author="sflees@suse.de" date="1722945600">- Looks like we need systemd_user_ scripts for some upgrades to
  work</changelog>
  <changelog author="sflees@suse.de" date="1734609600">- Requires(pre): systemd &gt;= 253.6 to ensure scripts in %post are
  run correctly, (bsc#1234697) Thanks to Thorsten for the detailed
  report.</changelog>
  <changelog author="sflees@suse.de" date="1771934400">- Fix timeout on ssh due to not handling ESRCH (boo#1255678)
  * fix-ESRCH-check.patch</changelog>
</package>
<package pkgid="b9422a2477348edc5b49c9fd6a79504d1ad56ca644603567a3573c8054eb0786ddf12b3e2a03085ddfc3ffe7c1456f1bdb31602df6e392af8c33daac65601547" name="dbview" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="bp160.1.12"/>
  <changelog author="rvasice@suse.cz" date="995371200">- initial release (version 1.0.3)</changelog>
  <changelog author="meissner@suse.de" date="1115899200">- use RPM_OPT_FLAGS</changelog>
  <changelog author="pnemec@suse.cz" date="1127131200">- fix gcc warning</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1148299200">- Don't build as root.
- Don't strip binaries.</changelog>
  <changelog author="lmichnovic@suse.cz" date="1175860800">- update to version 1.0.4
  - Support for deleted records
    Added --deleted|-D to display deleted records as well.
  - Improved handling of differences between dBase III and
    dBase III+ files.
  - Improved error handling
- obsoletes patch gcc-warning
- patch %name-%version.diff renamed to *makefile.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mpluskal@suse.com" date="1429617600">- Update download url
- Add gpg signature
- Cleanup spec file with spec-clenaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="303caa93267f86e96ee8882c879ea5696471c5988efc74eccdce0acb6d30fb60ee05955bd6d30036a9eaaaaf55a54a6b1f300a79501d3bc8ddba1cf57d6fa711" name="dc3dd" arch="x86_64">
  <version epoch="0" ver="7.3.1" rel="bp160.1.12"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 7.2.0
  + Log output may be sent to multiple job logs and hash logs. Simply specify
  log=LOG and/or hlog=LOG more than once.
  + Verification of an image restored to a device larger than the image is now
  supported. Specify hof=DEVICE to hash only the bytes dc3dd writes to the
  device. Specify fhod=DEVICE to hash both the bytes dc3dd writes to the
  device and all the bytes that follow, up to the end of the device.
  + Specifying hof=DEVICE will now default to phod=DEVICE behavior (hash only
  the bytes output by dc3dd, not the full device).
- Add xz make dependency; use xz tarball instead of bzipped one
- New dependency on perl(Locale::gettext)
- Strip out translations in lang_subpackage
- Remove depreciated Authors section
- Remove spurious executable bits of documentation files</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1420372801">- update Source: field to be the full URL and delete http: comment
- remove BuildRequires for libtool, automake, autoconf - they were not used</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- Add reproducible.patch to allow for reproducible builds</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565352000">- Update to version 7.2.646:
  * No code change, only bump version.
- Use .7z tarball:
  * The only alternative tarball provided by upstream for this
    version is a zip but its decompression returns exit code 1.
  * Pull p7zip(-full) as build dependency.
- Add dc3dd-7.2.646-fix-FTBFS-with-glibc-2.28.patch: Fix build.
- Clean spec file with spec-cleaner.</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1582545600">- add /usr/share/local to the lang package.
- a change internal to factory triggered this folder tree being created</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1608638400">- BuildRequires p7zip for Leap &lt;= 15.2 only</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1608811200">- BuildRequires p7zip for Leap &lt;= 15.1 only</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621080000">- stop owning directories provided by filesystem rpm (bsc#1184786)</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1686830400">- update to version 7.3.1:
  * use .zip source file
  * added BuildRequires: unzip
  * removed BuildRequires for p7zip(-full)
  * removed patch dc3dd-7.2.646-fix-FTBFS-with-glibc-2.28.patch as
    changes has been merged in the source</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="331023be393b170e099978ed225a9631f56331cc7d79222f21aa397d6d6557edce7f7052017deb1acd4b46e5c8bc96788a1506fd7ab58d10c562205b25f559f9" name="dc3dd-lang" arch="noarch">
  <version epoch="0" ver="7.3.1" rel="bp160.1.12"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 7.2.0
  + Log output may be sent to multiple job logs and hash logs. Simply specify
  log=LOG and/or hlog=LOG more than once.
  + Verification of an image restored to a device larger than the image is now
  supported. Specify hof=DEVICE to hash only the bytes dc3dd writes to the
  device. Specify fhod=DEVICE to hash both the bytes dc3dd writes to the
  device and all the bytes that follow, up to the end of the device.
  + Specifying hof=DEVICE will now default to phod=DEVICE behavior (hash only
  the bytes output by dc3dd, not the full device).
- Add xz make dependency; use xz tarball instead of bzipped one
- New dependency on perl(Locale::gettext)
- Strip out translations in lang_subpackage
- Remove depreciated Authors section
- Remove spurious executable bits of documentation files</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1420372801">- update Source: field to be the full URL and delete http: comment
- remove BuildRequires for libtool, automake, autoconf - they were not used</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- Add reproducible.patch to allow for reproducible builds</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565352000">- Update to version 7.2.646:
  * No code change, only bump version.
- Use .7z tarball:
  * The only alternative tarball provided by upstream for this
    version is a zip but its decompression returns exit code 1.
  * Pull p7zip(-full) as build dependency.
- Add dc3dd-7.2.646-fix-FTBFS-with-glibc-2.28.patch: Fix build.
- Clean spec file with spec-cleaner.</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1582545600">- add /usr/share/local to the lang package.
- a change internal to factory triggered this folder tree being created</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1608638400">- BuildRequires p7zip for Leap &lt;= 15.2 only</changelog>
  <changelog author="Greg Freemyer &lt;Greg.Freemyer@gmail.com&gt;" date="1608811200">- BuildRequires p7zip for Leap &lt;= 15.1 only</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621080000">- stop owning directories provided by filesystem rpm (bsc#1184786)</changelog>
  <changelog author="Avinesh Kumar &lt;avinesh.kumar@suse.com&gt;" date="1686830400">- update to version 7.3.1:
  * use .zip source file
  * added BuildRequires: unzip
  * removed BuildRequires for p7zip(-full)
  * removed patch dc3dd-7.2.646-fix-FTBFS-with-glibc-2.28.patch as
    changes has been merged in the source</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="96c77a3deda1a59d5bafc9151397c4e2d7744d3314a70ea112201219de69dbb6eb5bf38cf433ac0f44a6802f08b33d57ca0e5a9588f7293c8d2555b926c000a8" name="dcatools" arch="x86_64">
  <version epoch="0" ver="0.0.7+2" rel="160000.3.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1679227200">- Initial packaging for openSUSE.</changelog>
</package>
<package pkgid="12b5fe36fda3646f13c805188f4984774646b0f20f064281935f0f24d872483d7a5be53bb071f3c68e38662f49dbeefe7e6be6156e2e1aecc9b2cc58448f77fe" name="dcmtk" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp160.1.16"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="fbc9d18438cb678da8b125253b488f5cee8f57b5b99cc37903a8d53ef4a0969156b3aed744d5bef05ce83a1f1fcb50e84be0f0f3d15603a9dfc0bdc192870d99" name="dcmtk-devel" arch="x86_64">
  <version epoch="0" ver="3.6.9" rel="bp160.1.16"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1683806400">- Add upstream change (boo#1206070, CVE-2022-43272):
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1702555200">- Add dcmtk-fix-pkgconfig.patch: Removed leading spaces in
  dcmtk.pc.in. This in turn makes the .pc file actually valid.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 3.6.8
  See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * dcmtk-fix-pkgconfig.patch
  * dcmtk-CVE-2022-43272.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708603200">- Use the KDE cmake macros that are guaranteed to not break
  Leap builds.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1709294400">- Add missing requirements for dcmtk-devel (boo#1220809)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1713960000">- Add upstream changes:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
    (boo#1227235, CVE-2024-27628)
  * 0001-Fixed-two-segmentation-faults.patch
    (boo#1223949, CVE-2024-34509, boo#1223925, CVE-2024-34508)
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
    (boo#1223324, CVE-2024-28130)
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
- Run unit tests</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Add patches:
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736769600">- Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes
- Drop patches, merged upstream:
  * 0001-Fixed-buffer-overflow-in-decompression-codecs.patch
  * 0001-Fixed-possible-overflows-when-allocating-memory.patch
  * 0001-Fixed-two-segmentation-faults.patch
  * 0001-Fixed-unchecked-typecasts-of-DcmItem-search-results.patch
  * 0002-Fixed-unchecked-typecasts-and-fixed-LUT-handling.patch
  * 0003-Fixed-wrong-error-handling-previous-commit.patch
  * 0001-Fixed-DcmDecimalString-unit-tests.patch
  * 0001-Fixed-link-instructions-for-libtiff.patch
  * 0001-Fix-find_package-library-variables-for-libtiff.patch
- Add patches:
  * 0001-Added-check-to-make-sure-HighBit-BitsAllocated.patch
    (CVE-2024-52333, boo#1235811)
  * 0001-Replaced-call-of-delete-by-delete.patch
  * 0001-Fixed-issue-rendering-invalid-monochrome-image.patch
    (CVE-2024-47796, boo#1235810)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1739966400">- Add patches:
  * 0001-Fixed-another-issue-with-invalid-mono-images.patch
    (CVE-2025-25472, boo#1237369)
  * 0001-Fixed-another-issue-with-invalid-DICOM-images.patch
    (CVE-2025-25474, boo#1237365)
  * 0001-Fixed-issue-with-invalid-RLE-compressed-DICOM-images.patch
    (CVE-2025-25475, boo#1237355)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742212800">- Add upstream change (CVE-2025-2357, boo#1239679)
  * CVE-2025-2357.patch</changelog>
</package>
<package pkgid="3abc22b7a5af872d950b7b95449e8d6a7a3aaed43f95742cda1053476b9b0573a543e4f9a1c5c2d2169c15474af0226f714400f53b1559833fdd18497810762e" name="dconf" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="160000.2.2"/>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 0.33.2:
  + Drop references to GDBusConnection objects when D-Bus
    connections are closed.
- Changes from version 0.33.1:
  + Factor out a common method to route completion of D-Bus
    methods through.
  + build: Use weak bindings in gvdb to fix linking with LLD.</changelog>
  <changelog author="qkzhu@suse.com" date="1568289600">- Update to version 0.34.0:
  + Increment version number following 0.34 release.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1579003200">- Add dconf-fix-meson.patch: Update use of link_whole for
  meson-0.52 and newer.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581508800">- Update to version 0.35.1:
  + Writer service: avoid writing to disk and emitting changed
    signals when write requests do not result in changes to the
    database.
  + build: Drop redundant `install` key from `configure_file()`.
  + build: Update abicheck.sh script to work with GCC 9.
  + build: Update use of link_whole for meson-0.52.
- Drop 0001-gvdb-Restore-permissions-on-changed-files.patch and
  dconf-fix-meson.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583841600">- Update to version 0.36.0:
  + No changes, stable version update only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 0.38.0:
  + build: Install bash-completion relative to datadir.
  + client: add `dconf compile` to shell autocomplete.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Update to version 0.39.1:
  + Build:
  - Improve libdconf visible symbols.
  - Minor fixes to bash completion script.
  + Engine: do not emit optimistic change notifications unless the
    local value is different.
  + service: add a systemd unit for D-Bus activation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 0.40.0:
  + common: Add missing G_BEGIN/END_DECLS to allow use of headers
    from C++ code.</changelog>
  <changelog author="yfjiang@suse.com" date="1663070400">- Bring back 0001-gvdb-Restore-permissions-on-changed-files.patch
  since the useful fix was never merged to upstream (bsc#971074
  bgo#758066 bsc#1203344).</changelog>
  <changelog author="dimstar@opensuse.org" date="1671624000">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
</package>
<package pkgid="99e09a91a800f60477ecb96267fe4b40e760fd44d59598907c8e7e4be7578c94381b39caa20c8e73d5d3b98120bc93cde828f55dbb2ac069780b52e69380c980" name="dconf-devel" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="160000.2.2"/>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 0.33.2:
  + Drop references to GDBusConnection objects when D-Bus
    connections are closed.
- Changes from version 0.33.1:
  + Factor out a common method to route completion of D-Bus
    methods through.
  + build: Use weak bindings in gvdb to fix linking with LLD.</changelog>
  <changelog author="qkzhu@suse.com" date="1568289600">- Update to version 0.34.0:
  + Increment version number following 0.34 release.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1579003200">- Add dconf-fix-meson.patch: Update use of link_whole for
  meson-0.52 and newer.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581508800">- Update to version 0.35.1:
  + Writer service: avoid writing to disk and emitting changed
    signals when write requests do not result in changes to the
    database.
  + build: Drop redundant `install` key from `configure_file()`.
  + build: Update abicheck.sh script to work with GCC 9.
  + build: Update use of link_whole for meson-0.52.
- Drop 0001-gvdb-Restore-permissions-on-changed-files.patch and
  dconf-fix-meson.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583841600">- Update to version 0.36.0:
  + No changes, stable version update only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 0.38.0:
  + build: Install bash-completion relative to datadir.
  + client: add `dconf compile` to shell autocomplete.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Update to version 0.39.1:
  + Build:
  - Improve libdconf visible symbols.
  - Minor fixes to bash completion script.
  + Engine: do not emit optimistic change notifications unless the
    local value is different.
  + service: add a systemd unit for D-Bus activation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 0.40.0:
  + common: Add missing G_BEGIN/END_DECLS to allow use of headers
    from C++ code.</changelog>
  <changelog author="yfjiang@suse.com" date="1663070400">- Bring back 0001-gvdb-Restore-permissions-on-changed-files.patch
  since the useful fix was never merged to upstream (bsc#971074
  bgo#758066 bsc#1203344).</changelog>
  <changelog author="dimstar@opensuse.org" date="1671624000">- Drop baselibs.conf: there is no known consumer of the -32bit
  package.</changelog>
</package>
<package pkgid="848fa55581acfbea7dfae82cd9bff6e917cfec91fe06459dd1380018b2047d30dfa838e96d02e114f3e4655b38d0a4707e8663f5a96b8dd5c37729af9b9e2eec" name="dconf-editor" arch="x86_64">
  <version epoch="0" ver="45.0.1" rel="bp160.1.14"/>
  <changelog author="dimstar@opensuse.org" date="1606132800">- Update to version 3.38.2:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1613649600">- Fix build with Vala 0.51.x:
  + Add 9272e9fb6867e71426bfd0aa5edce5ec39cf0ad4.patch: Don't alter
    or try to write GtkChild fields.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616587200">- Update to version 3.38.3:
  + Fix build with newer vala.
- Drop 9272e9fb6867e71426bfd0aa5edce5ec39cf0ad4.patch: fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643716800">- Add 21.patch: Fix build with meson 0.61.0 and newer.
- Drop update-desktop-files BuildRequires and macro call, no longer
  needed and the way we did use it in the past even produces a lint
  warning now.
- Replace appstream-glib-devel with appstream-glib BuildRequires,
  also add desktop-file-utils. Then add a check section, run
  meson_test macro and explicitly validate appdata and desktop file
  with appstream-util and desktop-file-validate.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1658491200">- Update to version 43.alpha:
  + This release contains a new app icon, various fixes to build
    with newer vala, support for building with meson 0.61, and many
    translation updates.
- Drop 21.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1659700800">- Update to version 43.beta:
  + New beta release! Adds support for the dark color-scheme.
- Add pkgconfig(libhandy-1) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663416000">- Update to version 43.0:
  + Updated screenshots
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695038400">- Update to version 45.0:
  + Fix UI not displaying with latest GTK.
  + Misc fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695297600">- Update to version 45.0.1:
  + Fix string freeze break.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
</package>
<package pkgid="0b908cd7ca8103a7f043dc8051146323056f463ffb0465cce15752295daf5c37e8e5c9e61ed0a25afa0a99e5c67b5fb4bd6af22e1f6e033666792a87a2cdcdb9" name="dconf-editor-lang" arch="noarch">
  <version epoch="0" ver="45.0.1" rel="bp160.1.14"/>
  <changelog author="dimstar@opensuse.org" date="1606132800">- Update to version 3.38.2:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1613649600">- Fix build with Vala 0.51.x:
  + Add 9272e9fb6867e71426bfd0aa5edce5ec39cf0ad4.patch: Don't alter
    or try to write GtkChild fields.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616587200">- Update to version 3.38.3:
  + Fix build with newer vala.
- Drop 9272e9fb6867e71426bfd0aa5edce5ec39cf0ad4.patch: fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643716800">- Add 21.patch: Fix build with meson 0.61.0 and newer.
- Drop update-desktop-files BuildRequires and macro call, no longer
  needed and the way we did use it in the past even produces a lint
  warning now.
- Replace appstream-glib-devel with appstream-glib BuildRequires,
  also add desktop-file-utils. Then add a check section, run
  meson_test macro and explicitly validate appdata and desktop file
  with appstream-util and desktop-file-validate.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1658491200">- Update to version 43.alpha:
  + This release contains a new app icon, various fixes to build
    with newer vala, support for building with meson 0.61, and many
    translation updates.
- Drop 21.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1659700800">- Update to version 43.beta:
  + New beta release! Adds support for the dark color-scheme.
- Add pkgconfig(libhandy-1) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663416000">- Update to version 43.0:
  + Updated screenshots
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695038400">- Update to version 45.0:
  + Fix UI not displaying with latest GTK.
  + Misc fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1695297600">- Update to version 45.0.1:
  + Fix string freeze break.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Convert to source service for easier updating.</changelog>
</package>
<package pkgid="5b00d49cf938960643bf1d2bd3c35cfd3ab0972c236fd45f3520e8c27b749438bb92d64c2c0a8644dbca72b8a931bc39b2baa3c8934eb887a12d463d78be41e6" name="dcraw" arch="x86_64">
  <version epoch="0" ver="9.28.0" rel="160000.2.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1392638400">- Update to version 9.20:
  dcraw - revision 1.461
  * Fixed Sony A700 black level.
  * Added three temporary color matrices.
  * Use Little CMS version 2.
  * Support the Kodak 12-megapixel camera(s).
  * Can now use "-M" with a DNG file that embeds a bad color matrix.
  * Improved support for Nokia cameraphones.
  * Support the Alcatel 5235D, Powershot G16 and S120, Pentax K-3, etc.
  * Added tone curve for Canon RMF files.
  * Copied color matrices from DNG Converter 8.3.
  * Support blacklevel patterns up to 64x64.
  dcparse - revision 1.75
  * Read the Pentax K-3 MakerNote.
- Renamed README.SuSE to README.openSUSE.
- Added new build requirement liblcms2-devel (removed liblcms-devel).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1405425600">- Update to version 9.22:
  dcraw - revision 1.467
  * Correctly handle Fuji X-Trans images in DNG format.
  * Copied color matrices from DNG Converter 8.5.
  From version 9.21:
  dcraw - revision 1.465
  * In colorcheck(), darken sample squares and do a second pass for exact white
    balance.
  * Removed C99 dependency in Phase One code.
  * Correctly dereference TIFF type 13 (SubIFD) tags.
  * Removed redundant strings.
  * Support Lossy DNG files that lack an OpcodeList2 tag.
  * Decode DNG files made from Fuji X-Trans photos.
  * Support the Canon G1 X Mark II, Nikon P340, Samsing NX mini.
  * Patched in Anders Torger's code for Phase One correction.
  * Correctly crop all Sony cameras, read Panasonic blacklevels.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1425038400">- Update to version 9.24.2:
  dcraw - revision 1.473
  * Canon multi-exposure files are already white-balanced.
  * Moved border_interpolate() to the end of xtrans_interpolate().
  From version 9.24.1:
  * No visible changes.
  From version 9.24.0:
  dcraw - revision 1.471
  * Support all format options of the Nikon D4S and D810.
  * Guess which filter pattern OmniVision cameras use.
  dcparse - revision 1.77
  * Display OmniVision's MakerNote.
  From version 9.23.0:
  dcraw - revision 1.470
  * Fixed data errors with Olympus E-M5MarkII HR images.
  * Support the Lenovo A820.
  * Copied color matrices from DNG Converter 8.7.1.
  * Support pre-release Sonys and Canons that lack a proper model
    name.
  * Support the Samsung NX1 (yet another compression algorithm).
  * Read camera white balance in all professional Kodak cameras.
  * Reduced zippering in Fuji X-Trans interpolation.
  * Support YCbCr files from the Kodak C330.
  * Support Hasselblad multi-shot files.
  dcparse - revision 1.76
  * Parse Redcine and Canon EOS QuickTime movies.</changelog>
  <changelog author="fstrba@suse.com" date="1437393600">- Update to version 9.26.0:
  * fixes:
  dcraw revision 1.476
  * Support the Blackmagic URSA, Nokia N9, and Photron BC2-HD.
  * Support the Canon EOS 750D, 760D, EOS M, and sRAW/mRAW for EOS 5DS R.
  * When there's a tie for largest raw image, "-s" says which to decode.
  * Fixed null-byte warnings in TIFF output.
  dcraw revision 1.475
  * Use typecasts instead of [0] to flatten multi-dimensional arrays.
  dcraw revision 1.474
  * Updated color matrices, support the Canon EOS 5DS.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470398400">- Update to version 9.27.0:
  dcraw - revision 1.477
  * Added "-o 6" for ACES colorspace.
  * Copied color matrices from DNG Converter 9.5.1.
  * Support the Canon EOS 80D &amp; IXUS 160, Fuji X-E2 &amp; X-E2S &amp;
    X-Pro2.</changelog>
  <changelog author="elimat@opensuse.org" date="1597579200">- Update to version 9.28.0:
  dcraw - revision 1.478
  * Caught up on two years' worth of new cameras.
- Update upstream URL to new address
- Add patches for CVEs:
  * dcraw-CVE-2017-13735.patch (CVE-2017-13735, bsc#1056170)
  * dcraw-CVE-2017-14608.patch (CVE-2017-14608, bsc#1063798)
  * dcraw-CVE-2018-19655.patch (CVE-2018-19655, bsc#1117896)
  * dcraw-CVE-2018-5801.patch (CVE-2018-5801, bsc#1084690)
- Run spec-cleaner
  * Remove package groups</changelog>
  <changelog author="fstrba@suse.com" date="1649764800">- Added patches:
  * iowrappers.patch
    + Written wrappers of fread(),fwrite(),fseek() library functions
    which check their return values. If an input/output failure is
    detected, dcraw immediately exits with non-zero status and
    prints a descriptive message (bsc#1097973, CVE-2018-5805;
    bsc#1097974, CVE-2018-5806; bsc#1117622, CVE-2018-19565;
    bsc#1117517, CVE-2018-19566; bsc#1117512, CVE-2018-19567;
    bsc#1117436, CVE-2018-19568)
  * dcraw-CVE-2021-3624.patch
    + Bail out if integer overflow happened and the allocated buffer
    would be too small (bsc#1189642, CVE-2021-3624)</changelog>
  <changelog author="dmueller@suse.com" date="1691409600">- add dcraw-glibc-2.38.patch to fix prototype clash on memmem with glibc 2.38+</changelog>
  <changelog author="mvetter@suse.com" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="michal.jires@suse.com" date="1709294400">- Add fix_gcc14_errors.patch (bsc#1220467)</changelog>
</package>
<package pkgid="289b7e2144576b63dba9c5293d2b575de1414596638e7c8ba22ea1396d3d66e001aa5684c5c7ca326becd969a38eda7cbcf626965a8ba5c91bfe44d93e582627" name="dcraw-lang" arch="noarch">
  <version epoch="0" ver="9.28.0" rel="160000.2.2"/>
  <changelog author="asterios.dramis@gmail.com" date="1392638400">- Update to version 9.20:
  dcraw - revision 1.461
  * Fixed Sony A700 black level.
  * Added three temporary color matrices.
  * Use Little CMS version 2.
  * Support the Kodak 12-megapixel camera(s).
  * Can now use "-M" with a DNG file that embeds a bad color matrix.
  * Improved support for Nokia cameraphones.
  * Support the Alcatel 5235D, Powershot G16 and S120, Pentax K-3, etc.
  * Added tone curve for Canon RMF files.
  * Copied color matrices from DNG Converter 8.3.
  * Support blacklevel patterns up to 64x64.
  dcparse - revision 1.75
  * Read the Pentax K-3 MakerNote.
- Renamed README.SuSE to README.openSUSE.
- Added new build requirement liblcms2-devel (removed liblcms-devel).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1405425600">- Update to version 9.22:
  dcraw - revision 1.467
  * Correctly handle Fuji X-Trans images in DNG format.
  * Copied color matrices from DNG Converter 8.5.
  From version 9.21:
  dcraw - revision 1.465
  * In colorcheck(), darken sample squares and do a second pass for exact white
    balance.
  * Removed C99 dependency in Phase One code.
  * Correctly dereference TIFF type 13 (SubIFD) tags.
  * Removed redundant strings.
  * Support Lossy DNG files that lack an OpcodeList2 tag.
  * Decode DNG files made from Fuji X-Trans photos.
  * Support the Canon G1 X Mark II, Nikon P340, Samsing NX mini.
  * Patched in Anders Torger's code for Phase One correction.
  * Correctly crop all Sony cameras, read Panasonic blacklevels.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1425038400">- Update to version 9.24.2:
  dcraw - revision 1.473
  * Canon multi-exposure files are already white-balanced.
  * Moved border_interpolate() to the end of xtrans_interpolate().
  From version 9.24.1:
  * No visible changes.
  From version 9.24.0:
  dcraw - revision 1.471
  * Support all format options of the Nikon D4S and D810.
  * Guess which filter pattern OmniVision cameras use.
  dcparse - revision 1.77
  * Display OmniVision's MakerNote.
  From version 9.23.0:
  dcraw - revision 1.470
  * Fixed data errors with Olympus E-M5MarkII HR images.
  * Support the Lenovo A820.
  * Copied color matrices from DNG Converter 8.7.1.
  * Support pre-release Sonys and Canons that lack a proper model
    name.
  * Support the Samsung NX1 (yet another compression algorithm).
  * Read camera white balance in all professional Kodak cameras.
  * Reduced zippering in Fuji X-Trans interpolation.
  * Support YCbCr files from the Kodak C330.
  * Support Hasselblad multi-shot files.
  dcparse - revision 1.76
  * Parse Redcine and Canon EOS QuickTime movies.</changelog>
  <changelog author="fstrba@suse.com" date="1437393600">- Update to version 9.26.0:
  * fixes:
  dcraw revision 1.476
  * Support the Blackmagic URSA, Nokia N9, and Photron BC2-HD.
  * Support the Canon EOS 750D, 760D, EOS M, and sRAW/mRAW for EOS 5DS R.
  * When there's a tie for largest raw image, "-s" says which to decode.
  * Fixed null-byte warnings in TIFF output.
  dcraw revision 1.475
  * Use typecasts instead of [0] to flatten multi-dimensional arrays.
  dcraw revision 1.474
  * Updated color matrices, support the Canon EOS 5DS.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470398400">- Update to version 9.27.0:
  dcraw - revision 1.477
  * Added "-o 6" for ACES colorspace.
  * Copied color matrices from DNG Converter 9.5.1.
  * Support the Canon EOS 80D &amp; IXUS 160, Fuji X-E2 &amp; X-E2S &amp;
    X-Pro2.</changelog>
  <changelog author="elimat@opensuse.org" date="1597579200">- Update to version 9.28.0:
  dcraw - revision 1.478
  * Caught up on two years' worth of new cameras.
- Update upstream URL to new address
- Add patches for CVEs:
  * dcraw-CVE-2017-13735.patch (CVE-2017-13735, bsc#1056170)
  * dcraw-CVE-2017-14608.patch (CVE-2017-14608, bsc#1063798)
  * dcraw-CVE-2018-19655.patch (CVE-2018-19655, bsc#1117896)
  * dcraw-CVE-2018-5801.patch (CVE-2018-5801, bsc#1084690)
- Run spec-cleaner
  * Remove package groups</changelog>
  <changelog author="fstrba@suse.com" date="1649764800">- Added patches:
  * iowrappers.patch
    + Written wrappers of fread(),fwrite(),fseek() library functions
    which check their return values. If an input/output failure is
    detected, dcraw immediately exits with non-zero status and
    prints a descriptive message (bsc#1097973, CVE-2018-5805;
    bsc#1097974, CVE-2018-5806; bsc#1117622, CVE-2018-19565;
    bsc#1117517, CVE-2018-19566; bsc#1117512, CVE-2018-19567;
    bsc#1117436, CVE-2018-19568)
  * dcraw-CVE-2021-3624.patch
    + Bail out if integer overflow happened and the allocated buffer
    would be too small (bsc#1189642, CVE-2021-3624)</changelog>
  <changelog author="dmueller@suse.com" date="1691409600">- add dcraw-glibc-2.38.patch to fix prototype clash on memmem with glibc 2.38+</changelog>
  <changelog author="mvetter@suse.com" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="michal.jires@suse.com" date="1709294400">- Add fix_gcc14_errors.patch (bsc#1220467)</changelog>
</package>
<package pkgid="fc9aaa7cf4a45ed94b0198f4925259a10e08f09f626c58ca7c35efdda1ee9fad06d875817b100e791af4b4faf31b6d03100f165cc3b7f1aaf5ff4630556d9ab7" name="dd_rescue" arch="x86_64">
  <version epoch="0" ver="1.99.16" rel="bp160.1.14"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1677585600">- temporarily remove not-really-detached-signature</changelog>
  <changelog author="kurt@garloff.de" date="1679054400">- Readd detached signature.</changelog>
  <changelog author="kurt@garloff.de" date="1709121600">- Specify libopenssl-devel as BuildRequirements. This will select
  openssl-3 on new distributions.
  This fixes [bsc#1219882].</changelog>
  <changelog author="kurt@garloff.de" date="1709208000">- Fix openssl version detection for 3.0.x.
- dd_rescue-ossl3-evpcipherctx.diff: There's an additional field
  in the (private) struct _evp_cipher_ctx_st in openssl-3 since
  3.0.6, which makes a difference on 32bit. (On 64bit, the effect
  is hidden by the compiler's alignment rules.)</changelog>
  <changelog author="kurt@garloff.de" date="1709467200">- dd_rescue-md5-unaligned-armv7.diff: gcc-12 does make unaligned
  accesses on armv7 work sometimes, which breaks a configure test
  and then makes the make check fail with SIGBUS when using hash
  after lzo compression. Hardcode knowledge about armv7.
- Drop %setup (not needed if using %autosetup, thanks Valentin!)
- Mention [bsc#1219882], as suggested by Valentin Lefebvre.</changelog>
  <changelog author="kurt@garloff.de" date="1723464000">- dd_rescue-u-emptyout-segfault.diff: Prevent (cosmetic) segfault
  in cleanup path with option -u and empty output file name.</changelog>
  <changelog author="kurt@garloff.de" date="1724328000">- Update to dd_rescue-1.99.14:
  * Drop patches dd_rescue-u-emptyout-segfault.diff:,
    dd_rescue-fuzz-test-more-err.diff:,
    dd_rescue-md5-unaligned-armv7.diff:,
    dd_rescue-ossl3-evpcipherctx.diff: All integrated upstream.
  * Fix detection of LFS function availability for musl.
  * Include headers and settings to make it work on musl.
  * Replaced basename() with mybasename.h.
  * Prefetch lookup table for sha hashing.
  * Fix verbose output when falling back to small blocksize.
  * Fix clearing of errno (unaligned writes at EOF on musl)
- Final tarball with fixes for Android Makefiles.</changelog>
  <changelog author="kurt@garloff.de" date="1724328001">- Avoid setting _FORTIFY_SOURCE in configure script, it may
  conflict with flags passed in otherwise (e.g. rpmbuild).</changelog>
  <changelog author="kurt@garloff.de" date="1726574400">- Update to dd_rescue-1.99.15:
  * Build issue: Detect pread64() and pwrite64() support separately
    and provide individual replacement functions.
    Thanks to David Geiger for reporting (Mageia).
  * Bugfix: printstatus() would not be called with odd offsets,
    resulting in missing progress report and missing sync (-y) and
    write throttling (-C).
  * Optimization: Some unrolling for the hash functions gives up to
    10% better performance (on Zen4).
  * Optimization: Rationalize prefetching for hash functions and
    clear memory after using (avoid cleartext data on the stack).
  * Optimization: Save function calls for fault injection and for
    graph updates when unneeded.
  * Usability: Better handle progress update frequency.
  * Build improvement: Add -target linux-aarch64/arm-android28
    automatically where needed.
  * Drop: ddr-autoconf-no-fortify.diff (included upstream).</changelog>
  <changelog author="kurt@garloff.de" date="1727611200">- Update to dd_rescue-1.99.16:
  * Refactoring: Move CPU feature detection to archdep.c.
  * libddr_cypt: Support passing in password via pipe and passfd=
  * Add testcase for this
  * Support sha256 acceleration on x86-64 and armv8.
  * Improve detection of armv8 crypto (aes) acceleration (32bit).</changelog>
</package>
<package pkgid="b4caee5e5023e66ad925cc7f2ba8b5f86b17681f1631f14874af30e159ceeb523cf0ebefd27dc8a49a1a70df1300a33b09c975f9f7c8250cf2d95a2cbb58b203" name="dd_rescue-crypt" arch="x86_64">
  <version epoch="0" ver="1.99.16" rel="bp160.1.14"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1677585600">- temporarily remove not-really-detached-signature</changelog>
  <changelog author="kurt@garloff.de" date="1679054400">- Readd detached signature.</changelog>
  <changelog author="kurt@garloff.de" date="1709121600">- Specify libopenssl-devel as BuildRequirements. This will select
  openssl-3 on new distributions.
  This fixes [bsc#1219882].</changelog>
  <changelog author="kurt@garloff.de" date="1709208000">- Fix openssl version detection for 3.0.x.
- dd_rescue-ossl3-evpcipherctx.diff: There's an additional field
  in the (private) struct _evp_cipher_ctx_st in openssl-3 since
  3.0.6, which makes a difference on 32bit. (On 64bit, the effect
  is hidden by the compiler's alignment rules.)</changelog>
  <changelog author="kurt@garloff.de" date="1709467200">- dd_rescue-md5-unaligned-armv7.diff: gcc-12 does make unaligned
  accesses on armv7 work sometimes, which breaks a configure test
  and then makes the make check fail with SIGBUS when using hash
  after lzo compression. Hardcode knowledge about armv7.
- Drop %setup (not needed if using %autosetup, thanks Valentin!)
- Mention [bsc#1219882], as suggested by Valentin Lefebvre.</changelog>
  <changelog author="kurt@garloff.de" date="1723464000">- dd_rescue-u-emptyout-segfault.diff: Prevent (cosmetic) segfault
  in cleanup path with option -u and empty output file name.</changelog>
  <changelog author="kurt@garloff.de" date="1724328000">- Update to dd_rescue-1.99.14:
  * Drop patches dd_rescue-u-emptyout-segfault.diff:,
    dd_rescue-fuzz-test-more-err.diff:,
    dd_rescue-md5-unaligned-armv7.diff:,
    dd_rescue-ossl3-evpcipherctx.diff: All integrated upstream.
  * Fix detection of LFS function availability for musl.
  * Include headers and settings to make it work on musl.
  * Replaced basename() with mybasename.h.
  * Prefetch lookup table for sha hashing.
  * Fix verbose output when falling back to small blocksize.
  * Fix clearing of errno (unaligned writes at EOF on musl)
- Final tarball with fixes for Android Makefiles.</changelog>
  <changelog author="kurt@garloff.de" date="1724328001">- Avoid setting _FORTIFY_SOURCE in configure script, it may
  conflict with flags passed in otherwise (e.g. rpmbuild).</changelog>
  <changelog author="kurt@garloff.de" date="1726574400">- Update to dd_rescue-1.99.15:
  * Build issue: Detect pread64() and pwrite64() support separately
    and provide individual replacement functions.
    Thanks to David Geiger for reporting (Mageia).
  * Bugfix: printstatus() would not be called with odd offsets,
    resulting in missing progress report and missing sync (-y) and
    write throttling (-C).
  * Optimization: Some unrolling for the hash functions gives up to
    10% better performance (on Zen4).
  * Optimization: Rationalize prefetching for hash functions and
    clear memory after using (avoid cleartext data on the stack).
  * Optimization: Save function calls for fault injection and for
    graph updates when unneeded.
  * Usability: Better handle progress update frequency.
  * Build improvement: Add -target linux-aarch64/arm-android28
    automatically where needed.
  * Drop: ddr-autoconf-no-fortify.diff (included upstream).</changelog>
  <changelog author="kurt@garloff.de" date="1727611200">- Update to dd_rescue-1.99.16:
  * Refactoring: Move CPU feature detection to archdep.c.
  * libddr_cypt: Support passing in password via pipe and passfd=
  * Add testcase for this
  * Support sha256 acceleration on x86-64 and armv8.
  * Improve detection of armv8 crypto (aes) acceleration (32bit).</changelog>
</package>
<package pkgid="52224f50200e550ef47c2434e8a0be2c008dee68efc4379888df140febcab8e381ceeeafeed964ff036b12bc94c0da0513f528931c561cffd513adef910cc7ad" name="dd_rescue-lzo" arch="x86_64">
  <version epoch="0" ver="1.99.16" rel="bp160.1.14"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1677585600">- temporarily remove not-really-detached-signature</changelog>
  <changelog author="kurt@garloff.de" date="1679054400">- Readd detached signature.</changelog>
  <changelog author="kurt@garloff.de" date="1709121600">- Specify libopenssl-devel as BuildRequirements. This will select
  openssl-3 on new distributions.
  This fixes [bsc#1219882].</changelog>
  <changelog author="kurt@garloff.de" date="1709208000">- Fix openssl version detection for 3.0.x.
- dd_rescue-ossl3-evpcipherctx.diff: There's an additional field
  in the (private) struct _evp_cipher_ctx_st in openssl-3 since
  3.0.6, which makes a difference on 32bit. (On 64bit, the effect
  is hidden by the compiler's alignment rules.)</changelog>
  <changelog author="kurt@garloff.de" date="1709467200">- dd_rescue-md5-unaligned-armv7.diff: gcc-12 does make unaligned
  accesses on armv7 work sometimes, which breaks a configure test
  and then makes the make check fail with SIGBUS when using hash
  after lzo compression. Hardcode knowledge about armv7.
- Drop %setup (not needed if using %autosetup, thanks Valentin!)
- Mention [bsc#1219882], as suggested by Valentin Lefebvre.</changelog>
  <changelog author="kurt@garloff.de" date="1723464000">- dd_rescue-u-emptyout-segfault.diff: Prevent (cosmetic) segfault
  in cleanup path with option -u and empty output file name.</changelog>
  <changelog author="kurt@garloff.de" date="1724328000">- Update to dd_rescue-1.99.14:
  * Drop patches dd_rescue-u-emptyout-segfault.diff:,
    dd_rescue-fuzz-test-more-err.diff:,
    dd_rescue-md5-unaligned-armv7.diff:,
    dd_rescue-ossl3-evpcipherctx.diff: All integrated upstream.
  * Fix detection of LFS function availability for musl.
  * Include headers and settings to make it work on musl.
  * Replaced basename() with mybasename.h.
  * Prefetch lookup table for sha hashing.
  * Fix verbose output when falling back to small blocksize.
  * Fix clearing of errno (unaligned writes at EOF on musl)
- Final tarball with fixes for Android Makefiles.</changelog>
  <changelog author="kurt@garloff.de" date="1724328001">- Avoid setting _FORTIFY_SOURCE in configure script, it may
  conflict with flags passed in otherwise (e.g. rpmbuild).</changelog>
  <changelog author="kurt@garloff.de" date="1726574400">- Update to dd_rescue-1.99.15:
  * Build issue: Detect pread64() and pwrite64() support separately
    and provide individual replacement functions.
    Thanks to David Geiger for reporting (Mageia).
  * Bugfix: printstatus() would not be called with odd offsets,
    resulting in missing progress report and missing sync (-y) and
    write throttling (-C).
  * Optimization: Some unrolling for the hash functions gives up to
    10% better performance (on Zen4).
  * Optimization: Rationalize prefetching for hash functions and
    clear memory after using (avoid cleartext data on the stack).
  * Optimization: Save function calls for fault injection and for
    graph updates when unneeded.
  * Usability: Better handle progress update frequency.
  * Build improvement: Add -target linux-aarch64/arm-android28
    automatically where needed.
  * Drop: ddr-autoconf-no-fortify.diff (included upstream).</changelog>
  <changelog author="kurt@garloff.de" date="1727611200">- Update to dd_rescue-1.99.16:
  * Refactoring: Move CPU feature detection to archdep.c.
  * libddr_cypt: Support passing in password via pipe and passfd=
  * Add testcase for this
  * Support sha256 acceleration on x86-64 and armv8.
  * Improve detection of armv8 crypto (aes) acceleration (32bit).</changelog>
</package>
<package pkgid="69e0c8dedf2af80d842654e7887c8b401ebac7fab44f9a46c07a5e3253de997b5ed22eab7c964dd989e2b5b99bb054cf62b0a35846ea90a92f46b6a8eafa6f24" name="dd_rhelp" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="bp160.1.9"/>
  <changelog author="rschweikert@suse.com" date="1328616000">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1330948800">- dd_rhelp became a separate package (splitted from dd_rescue).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1331726400">- Added dd_rhelp_largedisk.diff patch (change parsing from dd_rhelp to support
  positions / sizes &gt; 1TB).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1335182400">- Update to version 0.3.0:
  * new: fix of some macos bugs
  * fix: handfull of little buts where fixed as usual.
  * fix: several patches from Kurt Garloff were merged.
  From version 0.2.0:
  * new: macosx support will use BSD sed and BSD stat
  * new: main algo is somewhat cleverer than before by going first
    forward then backwards and choosing a bias to favor forward
    dd_rescueing which is often much quicker.
  * new: big efforts on the testing bed for dd_rhelp.
  * imp: efforts to add some consistency checks all around.
  * imp: some effort to cache some values results in some soft speed
    ameliorations.
  * fix: handfull of little bugs where fixed.
  * fix: correctly handle strange behavior where EINVAL is sent in
    place of EOF
- Removed all previous patches (since they are merged upstream or fixed
  otherwise).</changelog>
  <changelog author="kurt@garloff.de" date="1359892800">- Apply three fixes:
  * dd_rhelp_EOF.diff: Be tolerant to error messages after EOF.
  * dd_rhelp_Summary.diff: Avoid misparsing Summary line.
  * dd_rhelp.test.diff: Don't misparse dd_rescue version number.</changelog>
  <changelog author="kurt@garloff.de" date="1394280000">- Update dd_rhelp_EOF.diff to support dd_rescue-1.41+.</changelog>
  <changelog author="kurt@garloff.de" date="1521028800">- dd_r_version.diff: Make dd_rhelp accept version 1.99.x.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="802689ed87add26ef7f09e3a9197a664f0a33b510c9d75e3f1aca8399cb24dff41ad560bba7e77ed93f541fa3d84ab1b656ff246e0fd3d6f212ff619ffcb077b" name="ddclient" arch="noarch">
  <version epoch="0" ver="3.11.2" rel="bp160.1.10"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1620820800">- Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630497600">- Added hardening to systemd service(s). Modified:
  * ddclient.service</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1640347200">- Modify the systemd service file so ddclient is run After
  network-online.target instead of just network.target, since
  running ddclient without being online is pointless.
- Added a Wants statement for the same systemd targets as in After</changelog>
  <changelog author="chris@computersalat.de" date="1657627200">- fix for boo#1191885
  add SupplementaryGroups=maildrop to service file
- rename ddclient-3.8.1-config.patch to ddclient-config.patch
- rebase patch
  * ddclient-delay-main-process-for-systemd.patch (p0)
- update ddclient-config.patch
  * fix PID file path
- merge ddclient-replace-varrun-with-run.patch into
  ddclient-config.patc
- merge changes file with SLES Maintained pkg
- update Source to %{name}-%{version}</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672142400">- Update to 3.10.0:
  * Added support for domaindiscount24.com
  * Added support for njal.la
  * Added support for Cloudflare API tokens
  * Added support for OVH DynHost.
  * Added support for ClouDNS.
  * Added support for dinahosting.
  * Added support for Gandi LiveDNS.
  * The freedns protocol (for https://freedns.afraid.org) now supports IPv6
    addresses.
  * New ssl_ca_dir and ssl_ca_file options to specify the location of CA
    certificates.
  * New built-in IP discovery service shorthands:
    + googledomains from https://domains.google
    + he from https://he.net
    ip+4only.me, ip6only.me from http://whatismyv6.com
    + ipify-ipv4 and ipify-ipv6 from https://www.ipify.org
    + myonlineportal from https://myonlineportal.net
    + noip-ipv4 and noip-ipv6 from https://www.noip.com
    + nsupdate.info-ipv4 and nsupdate.info-ipv6 from
    + https://www.nsupdate.info
    + zoneedit from https://www.zoneedit.com
  * Added option -curl to access network with system Curl command instead
    of the Perl built-in IO::Socket classes.
  * Added option -{no}web-ssl-validate and -{no}fw-ssl-validateto provide
    option to disable SSL certificate validation. Note that these only apply for
    network access when obtaining an IP address with use=web or use=fw
    (any firewall). Network access to Dynamic DNS servers to set or retrieve
    IP address will always require certificate validation.
  * The fw-banlocal option is deprecated and no longer does anything.
  * The if-skip option is deprecated and no longer does anything.
  * The default server for the dslreports1 protocol changed from
    members.dyndns.org to www.dslreports.com.
  * Removed support for defunct dnsspark service
  * Removed support for defunct dtdns service
  * Removed support for defunct Hammernode service
- Add fix-configure_ac.patch
- Add disable-ip-test.patch
- Rebase ddclient-config.patch
- Rebase ddclient-delay-main-process-for-systemd.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1672574400">- Add curl as BuildRequires/Requires to be able to use the '-curl'
  option (eg. in DDCLIENT_OPTIONS in /etc/sysconfig/ddclient).</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1700740800">- Update to 3.11.2
  * ddclient now requires curl. The Perl modules IO::Socket::IP and
    IO::Socket::SSL are no longer used.
  * ddclient no longer ships any example files for init systems that use
    /etc/init.d. This was done because those files where effectively
    unmaintained, untested by the developers and only updated by downstream
    distros. If you where relying on those files, please copy them into your
    packaging.
  * The defunct dnsexit protocol is removed (replaced by dnsexit2).
  * Introduced `usev4` and `usev6` for separate IPv4/IPv6 configuration. These
    will replace the legacy `use` eventually.
  * Added support for moving secrets out of the configuration through
    environment variables
  * Extended postscript mechanism
  * sample-get-ip-from-fritzbox: Added environment variable to override
    hostname
  * Warn about hosts where no IP could be determined - and skip the (bogus)
    update.
  * Added regfish
  * Added domeneshop.no
  * Added Mythic Beasts
  * Added Porkbun
  * Added Enom
  * Added DigitalOcean
  * Added Infomaniak
  * Added DNSExit API v2
  * Removed old DNSExit API
  * Extended EasyDNS to support IPv6
  * Extended duckdns to support IPv6
  * Fixed simultaneous IPv4 and IPv6 updates for provider duckdns
  * Fixed caching issues for new providers when using the old 'use' config
    parameter
  * Fixed simultaneous IPv4 and IPv6 updates for provider porkbun
  * Removed @PACKAGE_VERSION@ placeholder in ddclient.in for now
    to allow downstream to adopt the proper build process first.
    See [here](https://github.com/ddclient/ddclient/issues/579) for the
    discussion.
  * Fixed various issues with caching
  * Fixed issues with Hetzner zones
  * The OVH provider now ignores extra data returned
  * Merge multiple configs for the same hostname instead of use the last
- Remove fix-configure_ac.patch
- Rebase disable-ip-test.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1707134400">- Use sysuser-tools to create user.</changelog>
  <changelog author="Andreas Vetter &lt;vetter@physik.uni-wuerzburg.de&gt;" date="1730289600">- Add ddclient-disable-automake-treating-warnings-as-error.patch:
  Disable automake treating warnings as error, see
  https://github.com/ddclient/ddclient/pull/746/
  This makes building in OBS working again.</changelog>
</package>
<package pkgid="671b67b832112c61ec145993503372ae37e5544f1713a34a997043b8b5ee5088ac4be83a82ebf1154f5b3d31ffe5385c52e9f60b1b3aca9e8dfd0214d2789dae" name="ddcutil" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="bp160.1.3"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652961600">- Update to version 1.2.2:
  + Improve handling of and messages regarding DDC communication
    failures with errno EBUSY. In particular, this error occurs
    when driver ddcci is loaded.
  + Command **detect**: If DDC communication fails with error
    EBUSY, report the display as "Busy" instead of "Invalid" and
    suggest use of option ***--force-slave-address***.
  + Command **environment**: Suggest use of option
  * **--force-slave-address*** if driver ddcci is detected.
  + Messages re EBUSY errors are always written to the system log.
  + Command **detect**:
  - Do not report the EDID source unless there is a value to
    show. This value is set only for USB connected monitors.
  - Show extended output based on option ***--verbose***, not
    undocumented option ***--very-verbose***.
  - Report color bit depth if EDID version &gt;= 1.4
  + Command **environment**: Simplify the exploration of sysfs.
  + API changes:
  - Field latest_sl_values in struct DDCA_Feature_Metadata struct
    is no longer set,
  - API function ddca_report_display_info(): include binary
    serial number.
  + Building and porting:
  - When building ddcutil, allow for building a static library if
  * *configure** option ***--enable-static*** is set. Linux
    distributions frown on packaging static libraries, but if a
    user wants to build it who am I to judge. By default, static
    libraries are not built.
  - Replace use of Linux specific function **__assert_fail()**
    with **exit()** in traced assertions.  **__assert_fail** is
    used in the Linux implementation of **assert()**, but is not
    in the C specification.  This can present a problem in
    porting ddcutil.
  + Code cleanup:
  - Delete incomplete, experimental code for asynhronous feature
    access, including files src/ddc/ddc_async.c/h.
  - Remove unused files src/util/output_sink.c/h.
  + Fixed
  - Only write Starting/Terminating messages to the system log if
    option ***--syslog*** is specified.
  - Avoid compilation warnings when assert() statments are
    disabled (NDEBUG is defined).
  - Fixed a segfault in the debug/trace code of
    ddca_get_display_refs().</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667908800">- Update to version 1.3.0:
  + Option --force-slave-address no longer has any effect
  + Commands getvcp and vcpinfo can now take multiple features as arguments, for example ddcutil getvcp 10 12
  + Better reporting of user configuration issues at startup.
  + The sleep-suppression related options, --sleep-less, --less-sleep,
  - -enable-sleep-suppression, and --disable-sleep-suppression no longer have any effect</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673870400">- Update to version 1.4.0:
  + The ability to use the write()/read() interface of i2c-dev has been restored.
    It is needed to work around a bug in the proprietary nvidia driver.  By
    default,  the write()/read() interface is used for the nvidia driver, the
    ioctl() interface is used for all other drivers. Command line options
  * **--use-file-io*** and ***--use-ioctl-io*** affect his default behavior.
    When i2c-dev's file io interface is used, option ***--force-slave-address***
    is again meaningful.
  + Option ***--sleep-multiplier*** and API functions **ddca_set_sleep_multiplier_value()**,
  * *ddca_set_default_sleep_multiplier_value()** now accept 0 as a valid
    argument.
  + The ddcutil command parser reports an error if a display selection option
    (e.g. ***--bus***) is given on a command to which it does not apply.
  + Write additional error and information messages to the system log.
  + Eliminate message "Is DDC/CI enabled in the monitor's on-screen display?"
    It's rarely the cause of communication failures.
  + Warn of a possibly invalid DRM connector name in **detect** output if
    monitors with identical EDIDs are used with the proprietary nvidia driver.
  + Handle /dev/i2c device names with a double hyphen, e.g. /dev/i2c--3.
  + Better libddcutil handling of configuration file errors.  Do not abort
    initialization in case of errors.
  + Fix interpretation of digital display type bits for EDID version 1.4
  + Miscellaneous segfaults.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 1.4.1:
  * The default sleep-multipler value was 0, instead of 1. This resulted in
    failure of most DDC/CI operations, including display detection.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1682251200">- Split udev rules from command line tools (main) package. Allows
  distribution wide usage of libddcutil without affecting device
  permissions and security.</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1700395200">- update to 2.0.0:
  * Most users will find that command ddcutil just works "out of the box",
    without the need for manual configuration. Driver i2c-dev is loaded
    automatically in case it was not already built into the kernel.
    When executing on a system running systemd
    (i.e. on almost every current Linux distribution)
    the logged on user automatically has read-write access to the /dev/i2c devices associated with monitors,
    making excution as root or set up of group I2C unnecessary.
  * The dynamic sleep algorithm was completely rewritten to use the minimal reliable sleep-multiplier value.
    Explicitly using option --sleep-multiplier to optimize performance should generally be unnecessary.
  * The libddcutil API has been both extended and simplified.
    Some necessary changes broke full backward compatibility,
    requiring a SONAME bump from libddcutil.4 to libddcutil.5.
    Given the necessary SONAME bump, the opportunity was taken for a major API cleanup.
    Unneeded functions were removed, including many that were previously deprecated.
    Most client programs should build with minimal changes.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1715774400">- Update to 2.1.4:
  * Restore previously deprecated API function
    ddca_create_display_ref(), still in use. It is a synonym for
    ddca_get_display_ref(), whose name better reflects the role of
    the function. Its persistence in the Debian code base blocked
    ddcutil upgrade in that distribution.
- Update to 2.1.3:
  * Release 2.1.3 fixes a significant bug in libddcutil caused by
    overzealous checking of the DDCA_Display_Reference passed to
    various API functions. The display reference for displays
    reported as invalid (typically one for which the EDID can be
    read but DDC communication fails) was being rejected on API
    functions such as ddca_get_display_info(). In particular
    addresses ddcui issue 55 which reported a crash when one or
    more displays were invalid.
- Update to 2.1.2:
  * Release 2.1.2 fixes a critical bug in libddcutil that caused
    older versions of PowerDevil to repeatedly crash and restart.
  * Additionally, there are minor bug fixes and changes to
    accommodate the proprietary Nvidia video driver.
- Update to 2.1.0:
  * Improved initialization performance
  * Dynamic sleep improvement
  * Cross-instance locking
  * Shared library libddcutil is backwardly compatible with the
    one in ddcutil 2.0.0 The SONAME is unchanged as
    libddcutil.so.5. The release library file is libddcutil.5.1.0
  * libddcutil watches for display connection and DPMS state
    changes and notifies clients.
  * Improved control of initialization messages</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1743681600">- Update to 2.2.0:
  * ddcutil 2.2.0 is a major new release
  * Detecting and reporting display connection and disconnection
    has been reworked and enhanced, making libddcutil more useful
    to applications such as KDE PowerDevil, vdu_controls, and
    ddcutil-service.
  * Other enhancements include :
  - support for DisplayLink devices using driver evince
  - more consistent and extensive use of the system log
  - additional facilities for remote problem diagnosis
  - changes in building, installation, and packaging
  * And, of course, there's a year's accumulation of bug fixes
    and minor enhancements.
  * Shared library libddcutil is backwardly compatible with that
    release 2.1.4. It contains some minor changes and additional
    API functions for display change detection. The SONAME is
    unchanged as libddcutil.so.5. The release library file is
    libddcutil.so.5.2.0
  * Detailed information about the changes can be found in file
    CHANGELOG.md in the source tree, and on pages ddcutil 2.2.0
    Release Notes (https://www.ddcutil.com/release_notes_220/)
    and Shared Library Changes for Release 2.2.0
    (https://www.ddcutil.com/c_api_220/) on the web site.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1751716800">- reproducible builds: pass --disable-build-timestamp
- improve handling of --verify/--noverify (boo#1245807)
  add ddcutil-2.2.0-verify-noverify.patch from upstream</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1752580800">- Update to 2.2.1:
  * Added
  - Do not perform permission checks if running with effective
    user root, i.e. when running with setuid bit set.
    Partially addresses issue #509
  * Changed
  - Command environment: report if running as root, with sudo, or
    setuid bit set
  - Command environment --verbose: eliminate some unneeded edid
    read tests
  - Command setvcp: Emit more more useful messages when the cause
    of a DDCRC_RETRIES error is itself a DDCRC_RETRIES error.
  - Add option --disable-traced-function-stack The default
    traced-function-stack option value (disabled) is set in
    parms.h.
  * Fixed
  - Avoid segfault if invalid feature code specified
  - Maximum wait time on function lock_display() not respected,
    possible infinte loop. Addresses issue #511
  - Fix --verify/--noverify parsing. Addresses issue #512.
  - ddca_close_display(): do not respect quiesce, allowing the
    display lock record to be released, avoiding possible
    deadlock
  - Fix the spelling of company name HON HAI PRECISION" (obtained
    from UEFI), avoiding a lintian message. Addresses issue #500
  - Fix errors reported by clang 19: unused variable, expression
    which evaluates to 0 treated as null pointer.
    Addresses issue #502.
  - Command getvcp --terse: Eliminate irrelevant messages
    regarding VCP version not set.
  - Make test for missing DRM card-connector directories more
    robust. Issue #507.
  - DDC communication not detected with old (340 series) Nvidia
    proprietary driver. Issue #507
  - Function end_capture(): call close() in case of fflush()
    error, ensuring that messages are always sent to the
    terminal after message capture complete
  - Functions ddca_find_display_ref() and ddca_get_display_ref()
    were returning a pointer to the internal Display_Ref struct
    rather than an external integer DDCA_Display_Ref, causing
    segfault or return code DDCRC_INVALID_DISPLAY on a subsequent
    api call such as ddca_open_display2(). Addresses issue #528.
  - Several API functions were not recognized as arguments to
  - -trcfunc and --trcfrom. These included
    ddca_find_display_ref(), ddca_get_display_ref(),
    report_parsed_capabilities()
  - Option --stats was not reporting data
  - ddc_open_display(): return DDCRC_DISCONNECTED instead of an
    assert failure if bus_info == NULL. Addresses KDE Powerdevil
    issue #504861 (powerdevil crash from libddcutil, no restart
    happens)
  - Macro TRACED_ASSERT() calls __assert_fail() instead of
    exit(1). Addresses Powerdevil issue #504861.
  - Fix troff formatting in ddcutil man page. Pull request #531.
  * Building
  - configure option --enable-watch-displays/
  - -disable-watch-displays controls whether display watch
    functionaliity is built. The default is
  - -enable-watch-displays. If built with
  - -disable-watch-displays, API functions related to display
    change detection return DDCRC_UNIMPLEMENTED
  - If configure option --disable-x11 is specified, the only
    watch-mode is POLL. watch-mode XEVENT does not exist.
  * Detailed information about the changes can be found in file
    CHANGELOG.md in the source tree, and on pages ddcutil 2.2.1
    Release Notes (https://www.ddcutil.com/release_notes_221/)
    and Shared Library Changes for Release 2.2.1
    (https://www.ddcutil.com/c_api_221/) on the web site.
- Drop patch which is already included by upstream:
  * ddcutil-2.2.0-verify-noverify.patch</changelog>
</package>
<package pkgid="3bce22f997f871322bc2ca2229038eac15a243305c44b4fd88af98b96dbaaabb8f44fb1f60e316d2e8cc56058aa7542c247e26970adcc5196c9693066aaa701d" name="ddcutil-i2c-udev-rules" arch="noarch">
  <version epoch="0" ver="2.2.1" rel="bp160.1.3"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1652961600">- Update to version 1.2.2:
  + Improve handling of and messages regarding DDC communication
    failures with errno EBUSY. In particular, this error occurs
    when driver ddcci is loaded.
  + Command **detect**: If DDC communication fails with error
    EBUSY, report the display as "Busy" instead of "Invalid" and
    suggest use of option ***--force-slave-address***.
  + Command **environment**: Suggest use of option
  * **--force-slave-address*** if driver ddcci is detected.
  + Messages re EBUSY errors are always written to the system log.
  + Command **detect**:
  - Do not report the EDID source unless there is a value to
    show. This value is set only for USB connected monitors.
  - Show extended output based on option ***--verbose***, not
    undocumented option ***--very-verbose***.
  - Report color bit depth if EDID version &gt;= 1.4
  + Command **environment**: Simplify the exploration of sysfs.
  + API changes:
  - Field latest_sl_values in struct DDCA_Feature_Metadata struct
    is no longer set,
  - API function ddca_report_display_info(): include binary
    serial number.
  + Building and porting:
  - When building ddcutil, allow for building a static library if
  * *configure** option ***--enable-static*** is set. Linux
    distributions frown on packaging static libraries, but if a
    user wants to build it who am I to judge. By default, static
    libraries are not built.
  - Replace use of Linux specific function **__assert_fail()**
    with **exit()** in traced assertions.  **__assert_fail** is
    used in the Linux implementation of **assert()**, but is not
    in the C specification.  This can present a problem in
    porting ddcutil.
  + Code cleanup:
  - Delete incomplete, experimental code for asynhronous feature
    access, including files src/ddc/ddc_async.c/h.
  - Remove unused files src/util/output_sink.c/h.
  + Fixed
  - Only write Starting/Terminating messages to the system log if
    option ***--syslog*** is specified.
  - Avoid compilation warnings when assert() statments are
    disabled (NDEBUG is defined).
  - Fixed a segfault in the debug/trace code of
    ddca_get_display_refs().</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1667908800">- Update to version 1.3.0:
  + Option --force-slave-address no longer has any effect
  + Commands getvcp and vcpinfo can now take multiple features as arguments, for example ddcutil getvcp 10 12
  + Better reporting of user configuration issues at startup.
  + The sleep-suppression related options, --sleep-less, --less-sleep,
  - -enable-sleep-suppression, and --disable-sleep-suppression no longer have any effect</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673870400">- Update to version 1.4.0:
  + The ability to use the write()/read() interface of i2c-dev has been restored.
    It is needed to work around a bug in the proprietary nvidia driver.  By
    default,  the write()/read() interface is used for the nvidia driver, the
    ioctl() interface is used for all other drivers. Command line options
  * **--use-file-io*** and ***--use-ioctl-io*** affect his default behavior.
    When i2c-dev's file io interface is used, option ***--force-slave-address***
    is again meaningful.
  + Option ***--sleep-multiplier*** and API functions **ddca_set_sleep_multiplier_value()**,
  * *ddca_set_default_sleep_multiplier_value()** now accept 0 as a valid
    argument.
  + The ddcutil command parser reports an error if a display selection option
    (e.g. ***--bus***) is given on a command to which it does not apply.
  + Write additional error and information messages to the system log.
  + Eliminate message "Is DDC/CI enabled in the monitor's on-screen display?"
    It's rarely the cause of communication failures.
  + Warn of a possibly invalid DRM connector name in **detect** output if
    monitors with identical EDIDs are used with the proprietary nvidia driver.
  + Handle /dev/i2c device names with a double hyphen, e.g. /dev/i2c--3.
  + Better libddcutil handling of configuration file errors.  Do not abort
    initialization in case of errors.
  + Fix interpretation of digital display type bits for EDID version 1.4
  + Miscellaneous segfaults.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 1.4.1:
  * The default sleep-multipler value was 0, instead of 1. This resulted in
    failure of most DDC/CI operations, including display detection.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1682251200">- Split udev rules from command line tools (main) package. Allows
  distribution wide usage of libddcutil without affecting device
  permissions and security.</changelog>
  <changelog author="Aaron Stern &lt;ukbeast89@protonmail.com&gt;" date="1700395200">- update to 2.0.0:
  * Most users will find that command ddcutil just works "out of the box",
    without the need for manual configuration. Driver i2c-dev is loaded
    automatically in case it was not already built into the kernel.
    When executing on a system running systemd
    (i.e. on almost every current Linux distribution)
    the logged on user automatically has read-write access to the /dev/i2c devices associated with monitors,
    making excution as root or set up of group I2C unnecessary.
  * The dynamic sleep algorithm was completely rewritten to use the minimal reliable sleep-multiplier value.
    Explicitly using option --sleep-multiplier to optimize performance should generally be unnecessary.
  * The libddcutil API has been both extended and simplified.
    Some necessary changes broke full backward compatibility,
    requiring a SONAME bump from libddcutil.4 to libddcutil.5.
    Given the necessary SONAME bump, the opportunity was taken for a major API cleanup.
    Unneeded functions were removed, including many that were previously deprecated.
    Most client programs should build with minimal changes.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1715774400">- Update to 2.1.4:
  * Restore previously deprecated API function
    ddca_create_display_ref(), still in use. It is a synonym for
    ddca_get_display_ref(), whose name better reflects the role of
    the function. Its persistence in the Debian code base blocked
    ddcutil upgrade in that distribution.
- Update to 2.1.3:
  * Release 2.1.3 fixes a significant bug in libddcutil caused by
    overzealous checking of the DDCA_Display_Reference passed to
    various API functions. The display reference for displays
    reported as invalid (typically one for which the EDID can be
    read but DDC communication fails) was being rejected on API
    functions such as ddca_get_display_info(). In particular
    addresses ddcui issue 55 which reported a crash when one or
    more displays were invalid.
- Update to 2.1.2:
  * Release 2.1.2 fixes a critical bug in libddcutil that caused
    older versions of PowerDevil to repeatedly crash and restart.
  * Additionally, there are minor bug fixes and changes to
    accommodate the proprietary Nvidia video driver.
- Update to 2.1.0:
  * Improved initialization performance
  * Dynamic sleep improvement
  * Cross-instance locking
  * Shared library libddcutil is backwardly compatible with the
    one in ddcutil 2.0.0 The SONAME is unchanged as
    libddcutil.so.5. The release library file is libddcutil.5.1.0
  * libddcutil watches for display connection and DPMS state
    changes and notifies clients.
  * Improved control of initialization messages</changelog>
  <changelog author="pallas wept &lt;pallaswept@proton.me&gt;" date="1743681600">- Update to 2.2.0:
  * ddcutil 2.2.0 is a major new release
  * Detecting and reporting display connection and disconnection
    has been reworked and enhanced, making libddcutil more useful
    to applications such as KDE PowerDevil, vdu_controls, and
    ddcutil-service.
  * Other enhancements include :
  - support for DisplayLink devices using driver evince
  - more consistent and extensive use of the system log
  - additional facilities for remote problem diagnosis
  - changes in building, installation, and packaging
  * And, of course, there's a year's accumulation of bug fixes
    and minor enhancements.
  * Shared library libddcutil is backwardly compatible with that
    release 2.1.4. It contains some minor changes and additional
    API functions for display change detection. The SONAME is
    unchanged as libddcutil.so.5. The release library file is
    libddcutil.so.5.2.0
  * Detailed information about the changes can be found in file
    CHANGELOG.md in the source tree, and on pages ddcutil 2.2.0
    Release Notes (https://www.ddcutil.com/release_notes_220/)
    and Shared Library Changes for Release 2.2.0
    (https://www.ddcutil.com/c_api_220/) on the web site.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1751716800">- reproducible builds: pass --disable-build-timestamp
- improve handling of --verify/--noverify (boo#1245807)
  add ddcutil-2.2.0-verify-noverify.patch from upstream</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1752580800">- Update to 2.2.1:
  * Added
  - Do not perform permission checks if running with effective
    user root, i.e. when running with setuid bit set.
    Partially addresses issue #509
  * Changed
  - Command environment: report if running as root, with sudo, or
    setuid bit set
  - Command environment --verbose: eliminate some unneeded edid
    read tests
  - Command setvcp: Emit more more useful messages when the cause
    of a DDCRC_RETRIES error is itself a DDCRC_RETRIES error.
  - Add option --disable-traced-function-stack The default
    traced-function-stack option value (disabled) is set in
    parms.h.
  * Fixed
  - Avoid segfault if invalid feature code specified
  - Maximum wait time on function lock_display() not respected,
    possible infinte loop. Addresses issue #511
  - Fix --verify/--noverify parsing. Addresses issue #512.
  - ddca_close_display(): do not respect quiesce, allowing the
    display lock record to be released, avoiding possible
    deadlock
  - Fix the spelling of company name HON HAI PRECISION" (obtained
    from UEFI), avoiding a lintian message. Addresses issue #500
  - Fix errors reported by clang 19: unused variable, expression
    which evaluates to 0 treated as null pointer.
    Addresses issue #502.
  - Command getvcp --terse: Eliminate irrelevant messages
    regarding VCP version not set.
  - Make test for missing DRM card-connector directories more
    robust. Issue #507.
  - DDC communication not detected with old (340 series) Nvidia
    proprietary driver. Issue #507
  - Function end_capture(): call close() in case of fflush()
    error, ensuring that messages are always sent to the
    terminal after message capture complete
  - Functions ddca_find_display_ref() and ddca_get_display_ref()
    were returning a pointer to the internal Display_Ref struct
    rather than an external integer DDCA_Display_Ref, causing
    segfault or return code DDCRC_INVALID_DISPLAY on a subsequent
    api call such as ddca_open_display2(). Addresses issue #528.
  - Several API functions were not recognized as arguments to
  - -trcfunc and --trcfrom. These included
    ddca_find_display_ref(), ddca_get_display_ref(),
    report_parsed_capabilities()
  - Option --stats was not reporting data
  - ddc_open_display(): return DDCRC_DISCONNECTED instead of an
    assert failure if bus_info == NULL. Addresses KDE Powerdevil
    issue #504861 (powerdevil crash from libddcutil, no restart
    happens)
  - Macro TRACED_ASSERT() calls __assert_fail() instead of
    exit(1). Addresses Powerdevil issue #504861.
  - Fix troff formatting in ddcutil man page. Pull request #531.
  * Building
  - configure option --enable-watch-displays/
  - -disable-watch-displays controls whether display watch
    functionaliity is built. The default is
  - -enable-watch-displays. If built with
  - -disable-watch-displays, API functions related to display
    change detection return DDCRC_UNIMPLEMENTED
  - If configure option --disable-x11 is specified, the only
    watch-mode is POLL. watch-mode XEVENT does not exist.
  * Detailed information about the changes can be found in file
    CHANGELOG.md in the source tree, and on pages ddcutil 2.2.1
    Release Notes (https://www.ddcutil.com/release_notes_221/)
    and Shared Library Changes for Release 2.2.1
    (https://www.ddcutil.com/c_api_221/) on the web site.
- Drop patch which is already included by upstream:
  * ddcutil-2.2.0-verify-noverify.patch</changelog>
</package>
<package pkgid="0535ebfa098c4300d37b97ded63ba55372c30fa23823468056361be18cff6e3b9258d3d6c62bd788a350b87a527f4d5813f435f94cc7b857602aefc9974000a7" name="ddcutil-service" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="bp160.1.4"/>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1705579200">- Version 1.0.0
  * Added an optional D-Bus interface to ddcutil for up 10x faster response times.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1709208000">- Version 1.0.2
  - Added VcpValueChanged D-Bus signal which triggers if the SetVcp method succeeds. This is to allow
    multiple clients to be aware of changes made by each.
  - Added SetVcpWithContext which accepts a client-context to be returned with the VcpValueChanged signal.
  - ServiceEmitSignals renamed to ServiceEmitConnectivitySignals to avoid confusion.
  - Command line option --emit-signals renamed to --emit-connectivity-signals for the same reason.
  - Fix ServiceEmitSignals property assignment so that it correctly toggles hotplug signals.
  - Fix hotplug polling so that it remains an option no matter what version of libddcutil is in use.
- Version 1.0.1
  - Use gcc with -Wformat-security for safety and to match Arch and Ubuntu defaults.
  - Calling ddca_init() before verify_i2c() to fix runtime error for libddcutil &gt;= 2.1.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1711972800">- 1.0.3
  - Reduce unnecessary logging.
  - Improve the description of the service's signals in ddcutil-service.1.
  - Correct the typo in option name --perfer-drm (it was mistakenly called --prefer-dma).
  - For simple VCP-features, only return the low-byte, for some VDUs the high-byte might contain junk.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1712923200">- 1.0.4
  - Provide an API flag RETURN_RAW_VALUES which disables GetVcp high-byte masking of Simple Non-Continuous features.
  - Provide the --return-raw-values command line option for the same purpose.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1714392000">- 1.0.6
  - Add SetVcp/SetVcpWithContext NO_VERIFY (no retry) flag option.
  - Match the behaviour of the ddcutil command, default to verify-and-retry for all set-vcp method calls.
  - Default to verify-and-retry for all libddcutil versions.
  - Replace the stateful DdcutilVerifySetVcp property with the stateless NO_VERIFY flag.
  - Fix the ServiceFlagOptions property so that it lists all flag options.
  - Check the status returned by libddcutil ddca_init() and exit on error to prevent any inconsistent behaviour.
  - Cleanup the --prefer-polling and --prefer-drm options to make them consistent with each other.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1715860800">- 1.0.7
  - Slightly improved setvcp diagnostics.
  - Fix methods failing with return code DDCRC_OTHER (-3022) when only some i2c devices are accessible.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1718280000">- 1.0.9
  - Fixed a GetCapabilitiesMetadata bug that caused some VCP features to lack metadata values.
  - Fixed the return of feature-name and feature-description from GetVcpMetadata.
  - Fixed potential hot-plug/DPMS polling memory leaks and simplified event locking.
  - Recoded hot-plug/DPMS polling to avoid a potential libddcutil assertion failure.
  - Fixed code/doc typos, improved code readability/structure, reduced IDE warnings.
  - Updated documentation to caution against excessive updates when coding loops, as this may impact VDU NVRAM lifespan.
  - Updated documentation to caution against experimenting with non-standard features, as it may risk damage to the VDU.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1724328000">- 1.0.11
  - Alter the detect-function for ddcutil 2.5.1 (generates more logging/warning info).
  - Add a DETECT_ALL option to control whether disabled/powered-off VDU's are to be included in the results from detect.
  - Reduce the number of messages generated when polling for hotplug events.
  - Fixes to API documentation.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1732708800">- 1.0.12
  - Return the error status-code if enable_ddca_watch_displays fails - was returning OK even on failure.</changelog>
  <changelog author="Michael Hamilton &lt;michael@actrix.gen.nz&gt;" date="1741435200">- 1.0.14
  - A hotplug and DPMS tidy up to accommodate quirks exhibited by drivers, GPUs and monitors.
  - Default to libddcutil event detection for libddcutil &gt;= 2.2 (for faster response to changes).
  - Add option --prefer-libddcutil-events as a better name for deprecated option --prefer-drm.
  - Deprecate option --prefer-drm as it's name is misleading.
  - Add option --disable-connectivity-signals to allow connectivity signals to be turned off.
  - Add options --disable-hotplug-polling and --disable-dpms-polling to accommodate quirky monitors.
  - Always internally poll for DPMS changes (DPMS is not covered by libddcutil events).
  - Add method ListDetected to take advantage of hotplug detection in libddcutil &gt;= 2.2.
  - Add the list command to ddcutil-client to provide access to the new ListDetected method.
  - Add wait, wait-connection-change, and wait-vcp-change commands to ddcutil-client.
  - Log more information when get_vcp fails.</changelog>
</package>
<package pkgid="49e52f06d6a2fa5c2070f69ba9f5e6e44d1b990d463d71f57adaaeaf15d30d0af3dce1d092b50814b0d4176a1453c4705de14fa86655ea20312b335ffece2a2e" name="ddgr" arch="noarch">
  <version epoch="0" ver="2.2" rel="bp160.1.9"/>
  <changelog author="sebix+novell.com@sebix.at" date="1516017600">- initial package for version 1.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525262400">- update to version 1.4:
  - Copy URL at omniprompt
  - Check default stdout encoding at start
  - New environment variable DISABLE_PROMPT_COLOR</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1539432000">- update to version 1.5:
  - Support xclip as a clipboard utility on *nix
  - Support GNU Screen and tmux as clipboard fallback
  - Support Termux clipboard on Android</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1552737600">- update to version 1.6:
  - User interface revamped
  - DDG instant answers
  - Haiku OS clipboard support
  - Packaging preparation for PyPI</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1571918400">- update to version 1.7:
  - Use setproctitle to set process name
  - Monkeypatch textwrap for CJK wide characters
  - Fix write to GNU Screen paste buffer
  - Refresh current page on URL expansion toggle
  - Smarter colorization and better support for native terminals on Windows
  - Handle bangs in the form g!</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1599048000">- update to 1.9:
  - Fix breakage due to changes required in POST method
  - Support wayland native copier `wl-copy` for url copy
  - Unblock GUI browsers on WSL
  - Update auto-generated package list
  - Skip broken Arch Linux packaging (https://github.com/BytePackager issue #204)
  - Bump version
  - Update docs</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- update to 2.0:
  - Display results in reversed order (`--rev`, `--reverse`)
  - Support Python v3.10 (dropped v3.6)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 2.1:
  * Change user agent
  * Remove python 3.6 support
  * Minor documentation changes</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706961600">- update to 2.2:
  * Change user agent
  * Discontinue Python 3.7 support (EOL)</changelog>
</package>
<package pkgid="b3cf73d410479a9f69bd4f9c32b3d38dbdd2f37144b22e3e44ba4d29aff4cc7e5be863824ff246bb863e119f1449200d2c336c42184af1d513533cbc8dc09c0c" name="ddnet" arch="x86_64">
  <version epoch="0" ver="18.6" rel="bp160.1.4"/>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1695470400">- Update to version 17.2.1:
  * [Client] Multiview spectating
  * [Client] Improved font selection using fonts/index.json,
    updated fonts
  * [Client] 100 times faster text rendering, better space use
  * [Client] Add goto_switch and goto_tele commands
  * [Client] Add Galician language
  * [Client] Select storage locations in demo browser
  * [Editor] Support bezier envelope curves in maps
  * [Editor] Zoomable envelope editor
  * [Editor] Multiple selection in envelope editor, add grid,
    box selection
  * [Client] Render message when qutting/restarting client
  * [Client] Support ./DDNet "connect
    tw-0.6+udp://ger2.ddnet.org:8303"
  * [Client] Implement elasticity tuning values
    (ground_elasticity_x/y)
  * [Client] Execute CFGFLAG_GAME configs from map load on client
  * [Client] No delay for direction arrows and aim line toggle
  * [Client] Improve demo/video renderer UI
  * [Client] Connect to server faster
  * [Client] Fix HUD weapons rendering
  * [Client] Make online clan friends removable
  * [Client] Fix prediction of pickup
  * [Client] Fix text wrapping with long strings
  * [Client] Fix enter in server browser
  * [Client] Fix invalid texture crash in Vulkan
  * [Client] Don't load RGB images
  * [Client] Support selecting text in both consoles
  * [Client] Fix emotes being shown for other tee
  * [Editor] Allow saving map which is running in server
  * [Editor] Show message when player is moved ingame
  * [Editor] Selectable quadpoints
  * [Editor] Keep selection when moving layers
  * [Editor] Use temporary file when saving map to prevent
    corruption
  * [Editor] Support deleting/renaming folders
  * [Editor] Perform sanity check and show errors when loading map
  * [Editor] Fix hookthrough not being fully removed when
    filling selection
  * [Editor] Fix crashes with popup menus
  * [Editor] Improve font scaling and ellipsis
  * [Editor] Fix hotkeys while editboxes are active
  * [Editor] Fix quadpoint selection, easier point selection
  * [Editor] Fix inaccurate envelope calculation
  * [Editor] Set default name when saving map under new name
    or as copy
  * [Server &amp; Client] Allow server to redirect clients
  * [Server] Separate log levels for each output
    (console/stdout_output_level)
  * [Server] Fix killfeed for teams
  * [Server] Prevent /swap with paused players
  * [Server] Fix crash with DNSBL</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1704283200">- Update to version 17.4.2:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Increase freeview radius to kill tile border
  * [Client] Detect server no longer running when started
    from client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position you
    did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.4.1:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Detect server no longer running when started from
    client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position
    you did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.4:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Increase freeview radius to kill tile border
  * [Client] Detect server no longer running when started from
    client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position you
    did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.3:
  * [Client] Automatic multi-view for players in team
  * [Client] Indicator on pause/unpause in demo player
  * [Client] Demo search bar
  * [Client] Directly render cut to video
  * [Client] Golden angle to generate unique team colors
  * [Client] Overhauled demo player skipping UI
  * [Client] Overhauled server browser filter/details/friends
  * [Client] Color vote if you votes yes/no
  * [Editor] Generate pixelart from images
  * [Client] Improved default skin
  * [Client] Updated countryflags (GP, MN, MQ, MW, PY, RE)
  * [Client] Improve dbg_tuning and other debug HUD
  * [Client] Button to reload entities background
  * [Client] Improve Windows pipe (FIFO) support
  * [Client] Fix rendering long lines in console
  * [Client] Disable prediction when game is paused
  * [Client] Fix long console commands help
  * [Client] Don't send empty chat messages
  * [Client] Fix crash with too many votes
  * [Client] Fix crash using goto_tele
  * [Client] macOS server launcher fix
  * [Client] No box selection when panning
  * [Client] Detect server being stopped on Linux again
  * [Client] Release mouse for X11 when LLDB breakpoint is hit
  * [Client] Fix camera zooming when exiting multiview
  * [Client] Fix lineinput selection cursor desync
  * [Client] Fix chat history with cl_showchat 1
  * [Client] Fix countryflag scrolling
  * [Client] Fix chat clipping with OpenGL backend
  * [Client] Improve skin cleaning
  * [Editor] ctrl+f to load map prompt
  * [Editor] Move automap rule files to subfolder
  * [Editor] Progress spinner when saving
  * [Editor] Scaling for envelopes
  * [Editor] Keep brush when loading another map
  * [Editor] Fix right-clicking envelope points
  * [Editor] Warn about unsaved changes when dragging map file
    into game
  * [Editor] Fix envelope saving
  * [Server] Testing commands: unninja, solo, deep
  * [Server] Fix 0.7 clients being able to join after slot change
  * [Server] NO_SKIN_CHANGE_FOR_FROZEN game info flag
  * [Server] Fix everyone's swap getting reset
  * [Server] Fix /load from backup database
  * [Server] Fix scoreboard time reset when using /timecp
  * [Server] Fix SQLite connection failure assertion
  * [Server] Don't reigster to ipv6 when sv_ipv4only is enabled
  * [Server] Record antibot events in teehistorian
  * [Server] Record join events in teehistorian
  * [Server] Shut down DB connection pool on errors
- Use gcc11 for openSUSE Leap</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1706961600">- Update to version 18.0.3:
  * [Client] Community server filter instead of DDNet/KoG tabs
  * [Client] Add finish info messages
  * [Client] Editable chat size and width
  * [Client] Console: Scroll, search (ctrl-f), argument
    autocompletion
  * [Editor] Undo/Redo
  * [Editor] Improved quad handling
  * [Editor] Color palette and pipette
  * [Client] Add /join [player] to join a player's team
  * [Client] Improve performance when rendering text
  * [Client] Multi-view: Don't zoom below cl_default_zoom
  * [Client] Save current chat input when pressing up
  * [Client] Better prediction margin updates
  * [Client] Count deaths in statboard
  * [Client] Quote names with spaces when auto-completing names
    in commands
  * [Client] Config manager improvements
  * [Client] Validate filenames and network packets
  * [Client] Fix votes with timeout over 60 seconds not
    being shown
  * [Client] Better key reader button in settings
  * [Client] Render the tee being spectated after everyone else
  * [Client] Validate favorite skin name
  * [Client] Better text line spacing and console text selection
  * [Client] Fix automatic hammer on release with cl_dummy_control
  * [Client] Restart button when game needs to restart to
    apply settings
  * [Client] Improve performance of sounds
  * [Client] Improve graphics performance by copying less data
  * [Client] Improve player/tee settings
  * [Client] Fix wrong selection in vote menu when selected
    player leaves
  * [Client] Fix hook collision line when paused
  * [Client] Improved text outlines
  * [Editor] Differentiate between normal and checkpoint teles
  * [Editor] Editor buttons rework
  * [Editor] Allow resize of layers panel
  * [Editor] Shift-scroll to adjust special tile numbers
  * [Editor] Don't duplicate images when appending
  * [Editor] Warn about unused tiles
  * [Editor] Better text rendering in tele tiles
  * [Editor] Allow panning outside initial container
  * [Server] Add /tp x y to teleport to coordinates
  * [Server] Improve server-side auto demos
  * [Server] Add Sv_CommandInfo netmsg for autocompletion of
    chat commands
  * [Server] sv_vote_kick_delay fixes
  * [Server] Antibot improvements
  * [Server] Dynamically connect/disconnect debug dummies
  * [Server] Apply name bans to clans
  * [Server] Stop recording of demos on shutdown
  * [Server] Group list messages
  * [Server] Fix happy birthday broadcast
  * [Tools] Fix crashes on unknown UUID-based map items</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1710936000">- Update to version 18.1:
  * [Client] Add tabs for favorite communities, separate
    country/type filters
  * [Editor] Better map settings input
    (autocompletion, validation)
  * [Client] Render loading message/indicator for vote options
    and rcon commands
  * [Client] Add flag search in settings
  * [Client] Add team-lock indicator to HUD
  * [Client] Use icons for Internet, LAN and Favorites server
    browser tabs, use star icon for favorite servers
  * [Client] More efficient HTTP usage
  * [Client] Add time scale to debug graphs for constant
    scrolling speed
  * [Client/Server] Improve Windows logger, add virtual
    terminal support
  * [Client] Show extra "Reset Filter" button when no servers
    match filter
  * [Client] Ensure client window is maximized and active
    after restarting
  * [Client] Random skin improvements
  * [Client] Improve voting HUD
  * [Client] Keep console scrolling position during text selection
  * [Client] Only write files when changed
  * [Client] Show warnings after client close instead of
    preventing quitting
  * [Client] Fix switch screen and blackscreen OpenGL + Window
    borderless
  * [Client] Add placeholder country/type for servers without
    community
  * [Client] Don't show FPS during demo rendering
  * [Client] Validate skin names when loading
  * [Client] Allow background jobs to be aborted
  * [Client] save_replay improvements
  * [Client] Pick bg entities map without file extension
  * [Client/Server] Search most fitting allocation, not first
    fitting
  * [Editor] Increase WASD pan speed while holding shift
  * [Editor] Add "View" button to tele/switch drop down
  * [Editor] Make "Clean up game tiles" undoable
  * [Editor] Allow finer grid
  * [Editor] Add parallax to layer selector
  * [Editor] Add plus/minus buttons to numeric value selectors
  * [Editor] Fix quads
  * [Editor] Fix FPS drop when editing tiles layer properties
  * [Server] Make chat command arguments case-insensitive
  * [Server] Add /tpxy to teleport to specific position
  * [Server] Fix 0.7 armor being snapped as health
  * [Server] Small /practice improvements
  * [Server] Show kill messages also for 0.7 clients
  * [Server] Add /solo and /deep as practice commands
  * [Server] Expire team invites on player disconnect
  * [Server] Respond to vital pings with vital pongs</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1714824000">- Update to version 18.2:
  * [Client] Allow the vote creator to cancel the vote
  * [Client] Track country/type filters separately for
    internet/favorites tabs
  * [Client] Add a "No Login required" filter
  * [Server] Add /team0mode to have a team behave like team 0
  * [Server] Fix freeze not working during first 50 server ticks
  * [Client] Increase maximum number of favorite communities
    from 3 to 5
  * [Client] Improve layout of Appearance settings, overall
    settings menus and restart message
  * [Client] Show completion options for bind key names in console
  * [Client] Add sorting by number of friends to the
    server browser
  * [Client] Reset tuning of dummy and main when disconnecting
  * [Client] Improve performance when rendering menus
  * [Client] Show countdown message in player/tee settings
    for sv_info_change_delay
  * [Client] Add optional name argument to start_video command
  * [Client] Fix prediction errors and incorrect rendering after
    changing map
  * [Client] Fix tee briefly appearing at previous position
    when joining
  * [Client] Show Discord activity when offline
  * [Client] Include more options in appearance settings
  * [Client] cl_nameplates_strong improvements
  * [Client] Take serverlist age into account when choosing master
  * [Client] Fix race conditions in job state handling
  * [Client] Disconnect when we get map change with invalid
    parameters
  * [Client] Support overlapping scroll regions, always allow
    mouse scrolling
  * [Client] Fix crash when the serverlist request fails
  * [Client] Support clicking line color picker label to
    toggle checkbox
  * [Client] Fix recursive folder creation with mixed slashes
    and drive letters
  * [Client] Fix rcon username not reset when disconnecting
    while connecting
  * [Client] Render loading popup also while loading demo files
  * [Client] Update immediately when changing
    cl_background_entities
  * [Client] Fix demo player hotkeys not working when menu
    is inactive
  * [Client] Fix incorrect score kind in demos depending on
    last server
  * [Client] Fix alignment of labels in friends list
  * [Editor] Editor: Make embedded image popup bigger at all times
  * [Editor] Fix crash when trying to select autorule with
    arrow keys
  * [Editor] Allow saving empty quads &amp; sounds layers
  * [Editor] Fix crash when constructing some game tiles
  * [Editor] Fix envelope points not clickable after opening
    bezier popup
  * [Editor] Fix bug where certain tiles would not work in Game
    tiles menu
  * [Server] Disallow /save on teams with practice enabled,
    teehistorian improvements
  * [Server] Refresh air jumps after teleporting [murpi]
  * [Server] Fix freeze bar not being correct after returning
    from pause
  * [Server] List all practice commands when enabling /practice
  * [Server] Fix practice mode not resetting after disconnect
    on solo servers
  * [Server] Ensure commands executed via FIFO/ECon/LineReader
    are valid UTF-8
  * [Server] Improve /timecp chat command</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1718452800">- Update to version 18.3:
  * [Client] Add confetti particles on finish
  * [Client] Add team0mode indicator
  * [Client] Show percentage of loaded rcon commands
  * [Client] Fix truncated scoreboard recording notification
  * [Client] Keep respawned players in multi view list on
    pvp servers
  * [Client] Add cl_showhud_time_cp_diff
  * [Client] Fix console search highlighting
  * [Client] Fix potential client crash and console not keeping
    scrolling position when console backlog is full
  * [Client] Add option to show only messages by team members
  * [Client] Fix smoke particles sometimes being stuck inside
    solid tiles
  * [Client] Fix language file being loaded twice when starting,
    improve error handling for invalid translation files
  * [Client] Prevent UI elements from being hovered while key
    reader is active
  * [Client] Fix segfault when swapchain images change
    (e.g. toggling Vsync)
  * [Client] Fix demo seekbar tooltip not shown while seekbar is
    active, fix demo seekbar being activated by held button press
  * [Client] Android build improvements
  * [Client] Fix wrong file extension being removed in demo
    cut popup
  * [Client] Fix potential client crash and console not keeping
    scrolling position when console backlog is full
  * [Client] Video recorder: improve error handling and log
    messages, fix crashes
  * [Client] Fix wrong server address used in password popup
    when redirected
  * [Client] Fix OOB accesses rendering ghosts, fix ghost hook
    collision line
  * [Editor] Fix crashes and memory leaks related to editor map
    sounds and opus file decoding
  * [Editor] Fix inconsistent behavior of scrollbars, key readers,
    edit boxes, value selectors and editor sound seekbars
  * [Client+Server] Use network tokens in big-endian byte order
    consistently
  * [Server] Add /rescuemode
  * [Server] Add /practicecmdlist
  * [Server] Add chat commands for toggling weapons in practice
    mode
  * [Server] Fix goto_tele not finding all teleporters
  * [Server] Allow econ to succeed, even if ipv6 econ fails to
    bind to socket
  * [Server] Store player names in teehistorian and
    Finish/TeamFinish v2
  * [Tooling] Add delta debug dump
  * [Tooling] Also print external module/symbol names in
    parse_drmingw.sh
  * [Tooling] Fix issues with map_create_pixelart</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1724241600">- Update to version 18.4:
  * [Client] Add team size indicator
  * [Client] Show skin name as tooltip in ingame player list
  * [Client] Remove Spectate label from HUD, show Following
    {player} instead
  * [Client] Various fixes with sound disabled
  * [Client] Various improvements to scoreboard rendering
  * [Client] Show help text when chaining multiple commands
  * [Client] Consistent value selector behavior
  * [Client] Server browser friend list: sort case insensitively
  * [Client] Fix incorrect scoreboard size if blue team used
    without teams flag
  * [Client] Fix integer overflow when computing tilemap size
  * [Client] Correct player name in copied server info
  * [Client] Fix UI issues when switching between menus and editor
  * [Client] Trim Strings on Search/Exclude Filter &amp; add Tooltip
  * [Client] Fix ingame menu buttons overlapping on team based
    gametypes
  * [Client] Correct arguments highlighting after removing entry
  * [Client] Fix browser not refreshing if ui_page is changed in
    start menu, refresh LAN tab after starting/stopping
    local server
  * [Client] Loading screen fixes
  * [Editor] Add button and F1 hotkey to open Wiki page
  * [Editor] Fix various automapper issues
  * [Tools] Improve map_extract tool
  * [Master] Use libloc instead of our own CSV format for GeoIP
  * [Client&amp;Server] Rewrite and fix line reader
  * [Server] Add "/setjumps" practice command and "setjumps"
    rcon command
  * [Server] Don't check sv_max_team_size for teams in practice
  * [Server] Fix multiple redirected clients not dropped in the
    same tick
  * [Server] Faster antibot API calls
  * [Server] Fix crashes with dbg_dummies and sv_max_clients
  * [Server] Fix server crash when starting with
    random(_unfinished)_map
  * [Server] Add sv_dnsbl_ban_reason, increase maximum ban
    reason length</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1725883200">- Update to version 18.5:
  * [Client] Support connecting to Teeworlds 0.7 servers
  * [Client] Color speed in hud based on increase or decrease
  * [Client] ARM64 Windows support [SchrodingerZhu]
  * [Client] Add a popup for picking a map for background
    entities setting
  * [Client] Support composite binds with + commands, fix handling
    of composite binds with F1-F24 keys
  * [Server] Spawn confetti when connecting on your DDNet birthday
  * [Server] Add support for directories with add_map_votes
  * [Server] Add support for triggering map sounds
  * [Editor&amp;Server] Add hot_reload command to reload map while
    preserving state
  * [Client] Show server info in password popup
  * [Client] Spectator clans in scoreboard
  * [Client] New lock indicator
  * [Client] Improve cl_show_ids
  * [Client] Improve dummy connecting button and error handling
  * [Client] Fix 'auto' GPU identification on hybrid GPU systems
  * [Client] Check API version before adding GPU to GPU list
  * [Client] Use text containers to render movement information
  * [Client] Work on improving Android support
  * [Client] Remove multi-line chat
  * [Client] 128 player support in scoreboard and spectator UI
  * [Client] Also trim scoreboard search strings in highlights
  * [Client] Use same Red/Blue team colors for score HUD as for
    scoreboard
  * [Client] Fix CSV header being written multiple times to
    ddnet-saves.txt
  * [Client] Fix memory leak of non-RGBA image data, clear all
    image info
  * [Client] Smoother menu checker background scrolling on
    loading screens
  * [Client] Fix invalid team count in scoreboard for split teams
  * [Client] Only activate double-clicks with left mouse button
    again
  * [Client] Show warning when connect address cannot be resolved
  * [Client] Show game menu buttons again, even in 5:4, when not
    on a red/blue-team server
  * [Client] Fix debug HUD units
  * [Client] Improve bans rcon command pagination
  * [Client] Increase max command length in console
  * [Client] Scale target position when spectating
  * [Client] Make macOS semaphore names more unique, improve
    assertion
  * [Client] Fix save code not being censored in streamer mode
  * [Client] Don't allow input in console while it is
    opening/closing
  * [Client] Allow reloading current background entities map
  * [Client] Speed demo up with mouse scroll only if menu
    is active
  * [Editor] Add button to collapse/expand all groups
  * [Editor] Transfer server settings while using append
  * [Editor] Fix editor properties not being clamped on + and
  - button click
  * [Client&amp;Server] Fix UDP socket creation/cleanup if opening
    IPv6 socket fails
  * [Server] Add /whispers to disable whipers (similar to /dnd)
  * [Server] Disallow moving authed players to spec
  * [Server] Fix practice finish time
  * [Server] Add error message when trying to /swap on forced
    solo server
  * [Server] Savegame fixes
  * [Server] Disallow saving with draggers active
  * [Server] Only apply DNSBL bans once when player joins
  * [Server] Don't show "you've been banned" for VPN bans
  * [Server] Handle dnsbl and other non-critical stuff only on
    new ticks
  * [Server] Don't keep state of teammate in team0mode after death
  * [Tooling] Validate language files for … and non-matching
    formatters in CI</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1726488000">- Update to version 18.5.1:
  * [Client] Support connecting to Teeworlds 0.7 servers
  * [Client] Color speed in hud based on increase or decrease
  * [Client] ARM64 Windows support
  * [Client] Add a popup for picking a map for background
    entities setting
  * [Client] Support composite binds with + commands, fix handling
    of composite binds with F1-F24 keys
  * [Server] Spawn confetti when connecting on your DDNet birthday
  * [Server] Add support for directories with add_map_votes
  * [Server] Add support for triggering map sounds
  * [Editor&amp;Server] Add hot_reload command to reload map while
    preserving state
  * [Client] Show server info in password popup
  * [Client] Spectator clans in scoreboard
  * [Client] New lock indicator
  * [Client] Improve cl_show_ids
  * [Client] Improve dummy connecting button and error handling
  * [Client] Fix 'auto' GPU identification on hybrid GPU systems
  * [Client] Check API version before adding GPU to GPU list
  * [Client] Use text containers to render movement information
  * [Client] Work on improving Android support
  * [Client] Remove multi-line chat
  * [Client] 128 player support in scoreboard and spectator UI
  * [Client] Also trim scoreboard search strings in highlights
  * [Client] Use same Red/Blue team colors for score HUD as
    for scoreboard
  * [Client] Fix CSV header being written multiple times to
    ddnet-saves.txt
  * [Client] Fix memory leak of non-RGBA image data, clear all
    image info
  * [Client] Smoother menu checker background scrolling on
    loading screens
  * [Client] Fix invalid team count in scoreboard for split teams
  * [Client] Only activate double-clicks with left mouse
    button again
  * [Client] Show warning when connect address cannot be resolved
  * [Client] Show game menu buttons again, even in 5:4, when not
    on a red/blue-team server
  * [Client] Fix debug HUD units
  * [Client] Improve bans rcon command pagination
  * [Client] Increase max command length in console
  * [Client] Scale target position when spectating
  * [Client] Fix save code not being censored in streamer mode
  * [Client] Don't allow input in console while it is
    opening/closing
  * [Client] Allow reloading current background entities map
  * [Client] Speed demo up with mouse scroll only if menu
    is active
  * [Editor] Add button to collapse/expand all groups
  * [Editor] Transfer server settings while using append
  * [Editor] Fix editor properties not being clamped on + and
  - button click
  * [Client&amp;Server] Fix UDP socket creation/cleanup if opening
    IPv6 socket fails
  * [Server] Add /whispers to disable whipers (similar to /dnd)
  * [Server] Disallow moving authed players to spec
  * [Server] Fix practice finish time
  * [Server] Add error message when trying to /swap on forced
    solo server
  * [Server] Savegame fixes
  * [Server] Disallow saving with draggers active
  * [Server] Only apply DNSBL bans once when player joins
  * [Server] Don't show "you've been banned" for VPN bans
  * [Server] Handle dnsbl and other non-critical stuff only on
    new ticks
  * [Server] Don't keep state of teammate in team0mode after
    death
  * [Tooling] Validate language files for … and non-matching
    formatters in CI</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1728302400">- Update to version 18.6:
  * [Client] Smooth spectating
  * [Client] Mouse click in spectator mode to lock/release view
  * [Client] Add auto-completion hint for chat commands
  * [Client] Add cl_freeze_stars setting (F1) for old freeze
    stars
  * [Editor] Add quick actions (ctrl+p)
  * [Client] Show skin name as tooltip in friendlist and
    serverinfo
  * [Client] Put dead players at the bottom of scoreboard
  * [Client] Add ghost list sorting
  * [Client] Android improvements
  * [Client] Skin save button and directory for Teeworlds 0.7
  * [Client] Correctly handle country/type filters for
    non-community servers
  * [Client] Validate chat and console arguments
  * [Client] Fix game launch on Wayland-only systems
  * [Client] Resample audio to device playback rate
  * [Client] Immediate browser filters
  * [Client] Fix default player name for Teeworlds 0.7
  * [Client] Don't open scoreboard during pause
  * [Client] Vertical arrow key navigation in skin selection
  * [Client] Rework 0.7 tee settings layout
  * [Client] Fix dummy disconnecting on hot reload
  * [Client] Fix map download fallback
  * [Client] Add icon button to open console in bottom right of
    start menu
  * [Client] Fix illegal memory access in video recorder
  * [Client] Fix directory in map paths
  * [Client] Fix scrollbar rail clicking being active while
    popups open
  * [Client] Fix colored speed values after connecting to
    a server
  * [Client] Fix composite binds that open chat, console
    or menus
  * [Client] Fix name in chat not being highlighted
  * [Client] Rework image loading, saving and manipulation
  * [Client] Fix duplicate 0.7 flag sound with dummy connected
  * [Client] Fix 0.7 team colors
  * [Client] Change 'No servers found' message to hint at ports
  * [Client] More gametype colors (LMS, LTS, gCTF, gDM, FreeZe,
    iFreeze)
  * [Client] Fix Leak IP check
  * [Client] Make cl_show_direction change alpha with
    cl_show_others_alpha
  * [Client] Don't reset zoom on team switch
  * [Editor] Allow custom entities
  * [Editor] Add ed_layer_selector
  * [Editor] Add center pivot for quads
  * [Editor] Add ed_auto_map_reload setting
  * [Editor] Add right-click to solo editor layer
  * [Editor] Fix crash with RGB images
  * [Editor] Fix undo/redo for adding layers
  * [Editor] Allow non-conflicting keybinds while line input
    is active
  * [Editor] Fix crash with image/sound load failing
  * [Server] Improvements to announcements (reload_announcement)
  * [Server] Add reload_censorlist command
  * [Server] Send result of random_unfinished_map to all clients
  * [Server] Allow random_unfinished_map in rcon
  * [Server] Add /lasttp to hot reload
  * [Server] Fix hot reload crash with super
  * [Server] Don't expose econ publicly when ec_bindaddr is set
    to localhost
  * [Server] Fix hot reload crash with draggers
  * [Server] Alignment of separators in record output
  * [Server] Fix sv_rescue_delay
  * [Tooling] Fix language contexts</changelog>
</package>
<package pkgid="fc8e12505e2d54cd724a58b265492a892ae071547c5d45dc899d227b54a9f8bc4014ab219395bca3caa09796c6ca29defc327de5c25b261b13c95f7308877c01" name="ddnet-data" arch="noarch">
  <version epoch="0" ver="18.6" rel="bp160.1.4"/>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1695470400">- Update to version 17.2.1:
  * [Client] Multiview spectating
  * [Client] Improved font selection using fonts/index.json,
    updated fonts
  * [Client] 100 times faster text rendering, better space use
  * [Client] Add goto_switch and goto_tele commands
  * [Client] Add Galician language
  * [Client] Select storage locations in demo browser
  * [Editor] Support bezier envelope curves in maps
  * [Editor] Zoomable envelope editor
  * [Editor] Multiple selection in envelope editor, add grid,
    box selection
  * [Client] Render message when qutting/restarting client
  * [Client] Support ./DDNet "connect
    tw-0.6+udp://ger2.ddnet.org:8303"
  * [Client] Implement elasticity tuning values
    (ground_elasticity_x/y)
  * [Client] Execute CFGFLAG_GAME configs from map load on client
  * [Client] No delay for direction arrows and aim line toggle
  * [Client] Improve demo/video renderer UI
  * [Client] Connect to server faster
  * [Client] Fix HUD weapons rendering
  * [Client] Make online clan friends removable
  * [Client] Fix prediction of pickup
  * [Client] Fix text wrapping with long strings
  * [Client] Fix enter in server browser
  * [Client] Fix invalid texture crash in Vulkan
  * [Client] Don't load RGB images
  * [Client] Support selecting text in both consoles
  * [Client] Fix emotes being shown for other tee
  * [Editor] Allow saving map which is running in server
  * [Editor] Show message when player is moved ingame
  * [Editor] Selectable quadpoints
  * [Editor] Keep selection when moving layers
  * [Editor] Use temporary file when saving map to prevent
    corruption
  * [Editor] Support deleting/renaming folders
  * [Editor] Perform sanity check and show errors when loading map
  * [Editor] Fix hookthrough not being fully removed when
    filling selection
  * [Editor] Fix crashes with popup menus
  * [Editor] Improve font scaling and ellipsis
  * [Editor] Fix hotkeys while editboxes are active
  * [Editor] Fix quadpoint selection, easier point selection
  * [Editor] Fix inaccurate envelope calculation
  * [Editor] Set default name when saving map under new name
    or as copy
  * [Server &amp; Client] Allow server to redirect clients
  * [Server] Separate log levels for each output
    (console/stdout_output_level)
  * [Server] Fix killfeed for teams
  * [Server] Prevent /swap with paused players
  * [Server] Fix crash with DNSBL</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1704283200">- Update to version 17.4.2:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Increase freeview radius to kill tile border
  * [Client] Detect server no longer running when started
    from client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position you
    did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.4.1:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Detect server no longer running when started from
    client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position
    you did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.4:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Increase freeview radius to kill tile border
  * [Client] Detect server no longer running when started from
    client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position you
    did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.3:
  * [Client] Automatic multi-view for players in team
  * [Client] Indicator on pause/unpause in demo player
  * [Client] Demo search bar
  * [Client] Directly render cut to video
  * [Client] Golden angle to generate unique team colors
  * [Client] Overhauled demo player skipping UI
  * [Client] Overhauled server browser filter/details/friends
  * [Client] Color vote if you votes yes/no
  * [Editor] Generate pixelart from images
  * [Client] Improved default skin
  * [Client] Updated countryflags (GP, MN, MQ, MW, PY, RE)
  * [Client] Improve dbg_tuning and other debug HUD
  * [Client] Button to reload entities background
  * [Client] Improve Windows pipe (FIFO) support
  * [Client] Fix rendering long lines in console
  * [Client] Disable prediction when game is paused
  * [Client] Fix long console commands help
  * [Client] Don't send empty chat messages
  * [Client] Fix crash with too many votes
  * [Client] Fix crash using goto_tele
  * [Client] macOS server launcher fix
  * [Client] No box selection when panning
  * [Client] Detect server being stopped on Linux again
  * [Client] Release mouse for X11 when LLDB breakpoint is hit
  * [Client] Fix camera zooming when exiting multiview
  * [Client] Fix lineinput selection cursor desync
  * [Client] Fix chat history with cl_showchat 1
  * [Client] Fix countryflag scrolling
  * [Client] Fix chat clipping with OpenGL backend
  * [Client] Improve skin cleaning
  * [Editor] ctrl+f to load map prompt
  * [Editor] Move automap rule files to subfolder
  * [Editor] Progress spinner when saving
  * [Editor] Scaling for envelopes
  * [Editor] Keep brush when loading another map
  * [Editor] Fix right-clicking envelope points
  * [Editor] Warn about unsaved changes when dragging map file
    into game
  * [Editor] Fix envelope saving
  * [Server] Testing commands: unninja, solo, deep
  * [Server] Fix 0.7 clients being able to join after slot change
  * [Server] NO_SKIN_CHANGE_FOR_FROZEN game info flag
  * [Server] Fix everyone's swap getting reset
  * [Server] Fix /load from backup database
  * [Server] Fix scoreboard time reset when using /timecp
  * [Server] Fix SQLite connection failure assertion
  * [Server] Don't reigster to ipv6 when sv_ipv4only is enabled
  * [Server] Record antibot events in teehistorian
  * [Server] Record join events in teehistorian
  * [Server] Shut down DB connection pool on errors
- Use gcc11 for openSUSE Leap</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1706961600">- Update to version 18.0.3:
  * [Client] Community server filter instead of DDNet/KoG tabs
  * [Client] Add finish info messages
  * [Client] Editable chat size and width
  * [Client] Console: Scroll, search (ctrl-f), argument
    autocompletion
  * [Editor] Undo/Redo
  * [Editor] Improved quad handling
  * [Editor] Color palette and pipette
  * [Client] Add /join [player] to join a player's team
  * [Client] Improve performance when rendering text
  * [Client] Multi-view: Don't zoom below cl_default_zoom
  * [Client] Save current chat input when pressing up
  * [Client] Better prediction margin updates
  * [Client] Count deaths in statboard
  * [Client] Quote names with spaces when auto-completing names
    in commands
  * [Client] Config manager improvements
  * [Client] Validate filenames and network packets
  * [Client] Fix votes with timeout over 60 seconds not
    being shown
  * [Client] Better key reader button in settings
  * [Client] Render the tee being spectated after everyone else
  * [Client] Validate favorite skin name
  * [Client] Better text line spacing and console text selection
  * [Client] Fix automatic hammer on release with cl_dummy_control
  * [Client] Restart button when game needs to restart to
    apply settings
  * [Client] Improve performance of sounds
  * [Client] Improve graphics performance by copying less data
  * [Client] Improve player/tee settings
  * [Client] Fix wrong selection in vote menu when selected
    player leaves
  * [Client] Fix hook collision line when paused
  * [Client] Improved text outlines
  * [Editor] Differentiate between normal and checkpoint teles
  * [Editor] Editor buttons rework
  * [Editor] Allow resize of layers panel
  * [Editor] Shift-scroll to adjust special tile numbers
  * [Editor] Don't duplicate images when appending
  * [Editor] Warn about unused tiles
  * [Editor] Better text rendering in tele tiles
  * [Editor] Allow panning outside initial container
  * [Server] Add /tp x y to teleport to coordinates
  * [Server] Improve server-side auto demos
  * [Server] Add Sv_CommandInfo netmsg for autocompletion of
    chat commands
  * [Server] sv_vote_kick_delay fixes
  * [Server] Antibot improvements
  * [Server] Dynamically connect/disconnect debug dummies
  * [Server] Apply name bans to clans
  * [Server] Stop recording of demos on shutdown
  * [Server] Group list messages
  * [Server] Fix happy birthday broadcast
  * [Tools] Fix crashes on unknown UUID-based map items</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1710936000">- Update to version 18.1:
  * [Client] Add tabs for favorite communities, separate
    country/type filters
  * [Editor] Better map settings input
    (autocompletion, validation)
  * [Client] Render loading message/indicator for vote options
    and rcon commands
  * [Client] Add flag search in settings
  * [Client] Add team-lock indicator to HUD
  * [Client] Use icons for Internet, LAN and Favorites server
    browser tabs, use star icon for favorite servers
  * [Client] More efficient HTTP usage
  * [Client] Add time scale to debug graphs for constant
    scrolling speed
  * [Client/Server] Improve Windows logger, add virtual
    terminal support
  * [Client] Show extra "Reset Filter" button when no servers
    match filter
  * [Client] Ensure client window is maximized and active
    after restarting
  * [Client] Random skin improvements
  * [Client] Improve voting HUD
  * [Client] Keep console scrolling position during text selection
  * [Client] Only write files when changed
  * [Client] Show warnings after client close instead of
    preventing quitting
  * [Client] Fix switch screen and blackscreen OpenGL + Window
    borderless
  * [Client] Add placeholder country/type for servers without
    community
  * [Client] Don't show FPS during demo rendering
  * [Client] Validate skin names when loading
  * [Client] Allow background jobs to be aborted
  * [Client] save_replay improvements
  * [Client] Pick bg entities map without file extension
  * [Client/Server] Search most fitting allocation, not first
    fitting
  * [Editor] Increase WASD pan speed while holding shift
  * [Editor] Add "View" button to tele/switch drop down
  * [Editor] Make "Clean up game tiles" undoable
  * [Editor] Allow finer grid
  * [Editor] Add parallax to layer selector
  * [Editor] Add plus/minus buttons to numeric value selectors
  * [Editor] Fix quads
  * [Editor] Fix FPS drop when editing tiles layer properties
  * [Server] Make chat command arguments case-insensitive
  * [Server] Add /tpxy to teleport to specific position
  * [Server] Fix 0.7 armor being snapped as health
  * [Server] Small /practice improvements
  * [Server] Show kill messages also for 0.7 clients
  * [Server] Add /solo and /deep as practice commands
  * [Server] Expire team invites on player disconnect
  * [Server] Respond to vital pings with vital pongs</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1714824000">- Update to version 18.2:
  * [Client] Allow the vote creator to cancel the vote
  * [Client] Track country/type filters separately for
    internet/favorites tabs
  * [Client] Add a "No Login required" filter
  * [Server] Add /team0mode to have a team behave like team 0
  * [Server] Fix freeze not working during first 50 server ticks
  * [Client] Increase maximum number of favorite communities
    from 3 to 5
  * [Client] Improve layout of Appearance settings, overall
    settings menus and restart message
  * [Client] Show completion options for bind key names in console
  * [Client] Add sorting by number of friends to the
    server browser
  * [Client] Reset tuning of dummy and main when disconnecting
  * [Client] Improve performance when rendering menus
  * [Client] Show countdown message in player/tee settings
    for sv_info_change_delay
  * [Client] Add optional name argument to start_video command
  * [Client] Fix prediction errors and incorrect rendering after
    changing map
  * [Client] Fix tee briefly appearing at previous position
    when joining
  * [Client] Show Discord activity when offline
  * [Client] Include more options in appearance settings
  * [Client] cl_nameplates_strong improvements
  * [Client] Take serverlist age into account when choosing master
  * [Client] Fix race conditions in job state handling
  * [Client] Disconnect when we get map change with invalid
    parameters
  * [Client] Support overlapping scroll regions, always allow
    mouse scrolling
  * [Client] Fix crash when the serverlist request fails
  * [Client] Support clicking line color picker label to
    toggle checkbox
  * [Client] Fix recursive folder creation with mixed slashes
    and drive letters
  * [Client] Fix rcon username not reset when disconnecting
    while connecting
  * [Client] Render loading popup also while loading demo files
  * [Client] Update immediately when changing
    cl_background_entities
  * [Client] Fix demo player hotkeys not working when menu
    is inactive
  * [Client] Fix incorrect score kind in demos depending on
    last server
  * [Client] Fix alignment of labels in friends list
  * [Editor] Editor: Make embedded image popup bigger at all times
  * [Editor] Fix crash when trying to select autorule with
    arrow keys
  * [Editor] Allow saving empty quads &amp; sounds layers
  * [Editor] Fix crash when constructing some game tiles
  * [Editor] Fix envelope points not clickable after opening
    bezier popup
  * [Editor] Fix bug where certain tiles would not work in Game
    tiles menu
  * [Server] Disallow /save on teams with practice enabled,
    teehistorian improvements
  * [Server] Refresh air jumps after teleporting [murpi]
  * [Server] Fix freeze bar not being correct after returning
    from pause
  * [Server] List all practice commands when enabling /practice
  * [Server] Fix practice mode not resetting after disconnect
    on solo servers
  * [Server] Ensure commands executed via FIFO/ECon/LineReader
    are valid UTF-8
  * [Server] Improve /timecp chat command</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1718452800">- Update to version 18.3:
  * [Client] Add confetti particles on finish
  * [Client] Add team0mode indicator
  * [Client] Show percentage of loaded rcon commands
  * [Client] Fix truncated scoreboard recording notification
  * [Client] Keep respawned players in multi view list on
    pvp servers
  * [Client] Add cl_showhud_time_cp_diff
  * [Client] Fix console search highlighting
  * [Client] Fix potential client crash and console not keeping
    scrolling position when console backlog is full
  * [Client] Add option to show only messages by team members
  * [Client] Fix smoke particles sometimes being stuck inside
    solid tiles
  * [Client] Fix language file being loaded twice when starting,
    improve error handling for invalid translation files
  * [Client] Prevent UI elements from being hovered while key
    reader is active
  * [Client] Fix segfault when swapchain images change
    (e.g. toggling Vsync)
  * [Client] Fix demo seekbar tooltip not shown while seekbar is
    active, fix demo seekbar being activated by held button press
  * [Client] Android build improvements
  * [Client] Fix wrong file extension being removed in demo
    cut popup
  * [Client] Fix potential client crash and console not keeping
    scrolling position when console backlog is full
  * [Client] Video recorder: improve error handling and log
    messages, fix crashes
  * [Client] Fix wrong server address used in password popup
    when redirected
  * [Client] Fix OOB accesses rendering ghosts, fix ghost hook
    collision line
  * [Editor] Fix crashes and memory leaks related to editor map
    sounds and opus file decoding
  * [Editor] Fix inconsistent behavior of scrollbars, key readers,
    edit boxes, value selectors and editor sound seekbars
  * [Client+Server] Use network tokens in big-endian byte order
    consistently
  * [Server] Add /rescuemode
  * [Server] Add /practicecmdlist
  * [Server] Add chat commands for toggling weapons in practice
    mode
  * [Server] Fix goto_tele not finding all teleporters
  * [Server] Allow econ to succeed, even if ipv6 econ fails to
    bind to socket
  * [Server] Store player names in teehistorian and
    Finish/TeamFinish v2
  * [Tooling] Add delta debug dump
  * [Tooling] Also print external module/symbol names in
    parse_drmingw.sh
  * [Tooling] Fix issues with map_create_pixelart</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1724241600">- Update to version 18.4:
  * [Client] Add team size indicator
  * [Client] Show skin name as tooltip in ingame player list
  * [Client] Remove Spectate label from HUD, show Following
    {player} instead
  * [Client] Various fixes with sound disabled
  * [Client] Various improvements to scoreboard rendering
  * [Client] Show help text when chaining multiple commands
  * [Client] Consistent value selector behavior
  * [Client] Server browser friend list: sort case insensitively
  * [Client] Fix incorrect scoreboard size if blue team used
    without teams flag
  * [Client] Fix integer overflow when computing tilemap size
  * [Client] Correct player name in copied server info
  * [Client] Fix UI issues when switching between menus and editor
  * [Client] Trim Strings on Search/Exclude Filter &amp; add Tooltip
  * [Client] Fix ingame menu buttons overlapping on team based
    gametypes
  * [Client] Correct arguments highlighting after removing entry
  * [Client] Fix browser not refreshing if ui_page is changed in
    start menu, refresh LAN tab after starting/stopping
    local server
  * [Client] Loading screen fixes
  * [Editor] Add button and F1 hotkey to open Wiki page
  * [Editor] Fix various automapper issues
  * [Tools] Improve map_extract tool
  * [Master] Use libloc instead of our own CSV format for GeoIP
  * [Client&amp;Server] Rewrite and fix line reader
  * [Server] Add "/setjumps" practice command and "setjumps"
    rcon command
  * [Server] Don't check sv_max_team_size for teams in practice
  * [Server] Fix multiple redirected clients not dropped in the
    same tick
  * [Server] Faster antibot API calls
  * [Server] Fix crashes with dbg_dummies and sv_max_clients
  * [Server] Fix server crash when starting with
    random(_unfinished)_map
  * [Server] Add sv_dnsbl_ban_reason, increase maximum ban
    reason length</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1725883200">- Update to version 18.5:
  * [Client] Support connecting to Teeworlds 0.7 servers
  * [Client] Color speed in hud based on increase or decrease
  * [Client] ARM64 Windows support [SchrodingerZhu]
  * [Client] Add a popup for picking a map for background
    entities setting
  * [Client] Support composite binds with + commands, fix handling
    of composite binds with F1-F24 keys
  * [Server] Spawn confetti when connecting on your DDNet birthday
  * [Server] Add support for directories with add_map_votes
  * [Server] Add support for triggering map sounds
  * [Editor&amp;Server] Add hot_reload command to reload map while
    preserving state
  * [Client] Show server info in password popup
  * [Client] Spectator clans in scoreboard
  * [Client] New lock indicator
  * [Client] Improve cl_show_ids
  * [Client] Improve dummy connecting button and error handling
  * [Client] Fix 'auto' GPU identification on hybrid GPU systems
  * [Client] Check API version before adding GPU to GPU list
  * [Client] Use text containers to render movement information
  * [Client] Work on improving Android support
  * [Client] Remove multi-line chat
  * [Client] 128 player support in scoreboard and spectator UI
  * [Client] Also trim scoreboard search strings in highlights
  * [Client] Use same Red/Blue team colors for score HUD as for
    scoreboard
  * [Client] Fix CSV header being written multiple times to
    ddnet-saves.txt
  * [Client] Fix memory leak of non-RGBA image data, clear all
    image info
  * [Client] Smoother menu checker background scrolling on
    loading screens
  * [Client] Fix invalid team count in scoreboard for split teams
  * [Client] Only activate double-clicks with left mouse button
    again
  * [Client] Show warning when connect address cannot be resolved
  * [Client] Show game menu buttons again, even in 5:4, when not
    on a red/blue-team server
  * [Client] Fix debug HUD units
  * [Client] Improve bans rcon command pagination
  * [Client] Increase max command length in console
  * [Client] Scale target position when spectating
  * [Client] Make macOS semaphore names more unique, improve
    assertion
  * [Client] Fix save code not being censored in streamer mode
  * [Client] Don't allow input in console while it is
    opening/closing
  * [Client] Allow reloading current background entities map
  * [Client] Speed demo up with mouse scroll only if menu
    is active
  * [Editor] Add button to collapse/expand all groups
  * [Editor] Transfer server settings while using append
  * [Editor] Fix editor properties not being clamped on + and
  - button click
  * [Client&amp;Server] Fix UDP socket creation/cleanup if opening
    IPv6 socket fails
  * [Server] Add /whispers to disable whipers (similar to /dnd)
  * [Server] Disallow moving authed players to spec
  * [Server] Fix practice finish time
  * [Server] Add error message when trying to /swap on forced
    solo server
  * [Server] Savegame fixes
  * [Server] Disallow saving with draggers active
  * [Server] Only apply DNSBL bans once when player joins
  * [Server] Don't show "you've been banned" for VPN bans
  * [Server] Handle dnsbl and other non-critical stuff only on
    new ticks
  * [Server] Don't keep state of teammate in team0mode after death
  * [Tooling] Validate language files for … and non-matching
    formatters in CI</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1726488000">- Update to version 18.5.1:
  * [Client] Support connecting to Teeworlds 0.7 servers
  * [Client] Color speed in hud based on increase or decrease
  * [Client] ARM64 Windows support
  * [Client] Add a popup for picking a map for background
    entities setting
  * [Client] Support composite binds with + commands, fix handling
    of composite binds with F1-F24 keys
  * [Server] Spawn confetti when connecting on your DDNet birthday
  * [Server] Add support for directories with add_map_votes
  * [Server] Add support for triggering map sounds
  * [Editor&amp;Server] Add hot_reload command to reload map while
    preserving state
  * [Client] Show server info in password popup
  * [Client] Spectator clans in scoreboard
  * [Client] New lock indicator
  * [Client] Improve cl_show_ids
  * [Client] Improve dummy connecting button and error handling
  * [Client] Fix 'auto' GPU identification on hybrid GPU systems
  * [Client] Check API version before adding GPU to GPU list
  * [Client] Use text containers to render movement information
  * [Client] Work on improving Android support
  * [Client] Remove multi-line chat
  * [Client] 128 player support in scoreboard and spectator UI
  * [Client] Also trim scoreboard search strings in highlights
  * [Client] Use same Red/Blue team colors for score HUD as
    for scoreboard
  * [Client] Fix CSV header being written multiple times to
    ddnet-saves.txt
  * [Client] Fix memory leak of non-RGBA image data, clear all
    image info
  * [Client] Smoother menu checker background scrolling on
    loading screens
  * [Client] Fix invalid team count in scoreboard for split teams
  * [Client] Only activate double-clicks with left mouse
    button again
  * [Client] Show warning when connect address cannot be resolved
  * [Client] Show game menu buttons again, even in 5:4, when not
    on a red/blue-team server
  * [Client] Fix debug HUD units
  * [Client] Improve bans rcon command pagination
  * [Client] Increase max command length in console
  * [Client] Scale target position when spectating
  * [Client] Fix save code not being censored in streamer mode
  * [Client] Don't allow input in console while it is
    opening/closing
  * [Client] Allow reloading current background entities map
  * [Client] Speed demo up with mouse scroll only if menu
    is active
  * [Editor] Add button to collapse/expand all groups
  * [Editor] Transfer server settings while using append
  * [Editor] Fix editor properties not being clamped on + and
  - button click
  * [Client&amp;Server] Fix UDP socket creation/cleanup if opening
    IPv6 socket fails
  * [Server] Add /whispers to disable whipers (similar to /dnd)
  * [Server] Disallow moving authed players to spec
  * [Server] Fix practice finish time
  * [Server] Add error message when trying to /swap on forced
    solo server
  * [Server] Savegame fixes
  * [Server] Disallow saving with draggers active
  * [Server] Only apply DNSBL bans once when player joins
  * [Server] Don't show "you've been banned" for VPN bans
  * [Server] Handle dnsbl and other non-critical stuff only on
    new ticks
  * [Server] Don't keep state of teammate in team0mode after
    death
  * [Tooling] Validate language files for … and non-matching
    formatters in CI</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1728302400">- Update to version 18.6:
  * [Client] Smooth spectating
  * [Client] Mouse click in spectator mode to lock/release view
  * [Client] Add auto-completion hint for chat commands
  * [Client] Add cl_freeze_stars setting (F1) for old freeze
    stars
  * [Editor] Add quick actions (ctrl+p)
  * [Client] Show skin name as tooltip in friendlist and
    serverinfo
  * [Client] Put dead players at the bottom of scoreboard
  * [Client] Add ghost list sorting
  * [Client] Android improvements
  * [Client] Skin save button and directory for Teeworlds 0.7
  * [Client] Correctly handle country/type filters for
    non-community servers
  * [Client] Validate chat and console arguments
  * [Client] Fix game launch on Wayland-only systems
  * [Client] Resample audio to device playback rate
  * [Client] Immediate browser filters
  * [Client] Fix default player name for Teeworlds 0.7
  * [Client] Don't open scoreboard during pause
  * [Client] Vertical arrow key navigation in skin selection
  * [Client] Rework 0.7 tee settings layout
  * [Client] Fix dummy disconnecting on hot reload
  * [Client] Fix map download fallback
  * [Client] Add icon button to open console in bottom right of
    start menu
  * [Client] Fix illegal memory access in video recorder
  * [Client] Fix directory in map paths
  * [Client] Fix scrollbar rail clicking being active while
    popups open
  * [Client] Fix colored speed values after connecting to
    a server
  * [Client] Fix composite binds that open chat, console
    or menus
  * [Client] Fix name in chat not being highlighted
  * [Client] Rework image loading, saving and manipulation
  * [Client] Fix duplicate 0.7 flag sound with dummy connected
  * [Client] Fix 0.7 team colors
  * [Client] Change 'No servers found' message to hint at ports
  * [Client] More gametype colors (LMS, LTS, gCTF, gDM, FreeZe,
    iFreeze)
  * [Client] Fix Leak IP check
  * [Client] Make cl_show_direction change alpha with
    cl_show_others_alpha
  * [Client] Don't reset zoom on team switch
  * [Editor] Allow custom entities
  * [Editor] Add ed_layer_selector
  * [Editor] Add center pivot for quads
  * [Editor] Add ed_auto_map_reload setting
  * [Editor] Add right-click to solo editor layer
  * [Editor] Fix crash with RGB images
  * [Editor] Fix undo/redo for adding layers
  * [Editor] Allow non-conflicting keybinds while line input
    is active
  * [Editor] Fix crash with image/sound load failing
  * [Server] Improvements to announcements (reload_announcement)
  * [Server] Add reload_censorlist command
  * [Server] Send result of random_unfinished_map to all clients
  * [Server] Allow random_unfinished_map in rcon
  * [Server] Add /lasttp to hot reload
  * [Server] Fix hot reload crash with super
  * [Server] Don't expose econ publicly when ec_bindaddr is set
    to localhost
  * [Server] Fix hot reload crash with draggers
  * [Server] Alignment of separators in record output
  * [Server] Fix sv_rescue_delay
  * [Tooling] Fix language contexts</changelog>
</package>
<package pkgid="3a085551da538690c284fc20c32c1d27429d924f4ee7daf2b4ffac6a67f20c44e99af2baf23900a7dddac2f9cd8794b241b6cb9728f603db3769899d5275a314" name="ddnet-server" arch="x86_64">
  <version epoch="0" ver="18.6" rel="bp160.1.4"/>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1695470400">- Update to version 17.2.1:
  * [Client] Multiview spectating
  * [Client] Improved font selection using fonts/index.json,
    updated fonts
  * [Client] 100 times faster text rendering, better space use
  * [Client] Add goto_switch and goto_tele commands
  * [Client] Add Galician language
  * [Client] Select storage locations in demo browser
  * [Editor] Support bezier envelope curves in maps
  * [Editor] Zoomable envelope editor
  * [Editor] Multiple selection in envelope editor, add grid,
    box selection
  * [Client] Render message when qutting/restarting client
  * [Client] Support ./DDNet "connect
    tw-0.6+udp://ger2.ddnet.org:8303"
  * [Client] Implement elasticity tuning values
    (ground_elasticity_x/y)
  * [Client] Execute CFGFLAG_GAME configs from map load on client
  * [Client] No delay for direction arrows and aim line toggle
  * [Client] Improve demo/video renderer UI
  * [Client] Connect to server faster
  * [Client] Fix HUD weapons rendering
  * [Client] Make online clan friends removable
  * [Client] Fix prediction of pickup
  * [Client] Fix text wrapping with long strings
  * [Client] Fix enter in server browser
  * [Client] Fix invalid texture crash in Vulkan
  * [Client] Don't load RGB images
  * [Client] Support selecting text in both consoles
  * [Client] Fix emotes being shown for other tee
  * [Editor] Allow saving map which is running in server
  * [Editor] Show message when player is moved ingame
  * [Editor] Selectable quadpoints
  * [Editor] Keep selection when moving layers
  * [Editor] Use temporary file when saving map to prevent
    corruption
  * [Editor] Support deleting/renaming folders
  * [Editor] Perform sanity check and show errors when loading map
  * [Editor] Fix hookthrough not being fully removed when
    filling selection
  * [Editor] Fix crashes with popup menus
  * [Editor] Improve font scaling and ellipsis
  * [Editor] Fix hotkeys while editboxes are active
  * [Editor] Fix quadpoint selection, easier point selection
  * [Editor] Fix inaccurate envelope calculation
  * [Editor] Set default name when saving map under new name
    or as copy
  * [Server &amp; Client] Allow server to redirect clients
  * [Server] Separate log levels for each output
    (console/stdout_output_level)
  * [Server] Fix killfeed for teams
  * [Server] Prevent /swap with paused players
  * [Server] Fix crash with DNSBL</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1704283200">- Update to version 17.4.2:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Increase freeview radius to kill tile border
  * [Client] Detect server no longer running when started
    from client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position you
    did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.4.1:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Detect server no longer running when started from
    client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position
    you did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.4:
  * [Client] Graphics: Zoom out without lags
  * [Client] Add streamer mode to avoid leaks
  * [Client] Indicate AFK status in friends list and info tab
  * [Client] Overhaul demo browser UI
  * [Client] Ghost improvements (256 simultaneous ghosts!)
  * [Tools] Add demo_extract_chat tool
  * [Client] Don't disable practice mode on death
  * [Client] Prediction for laser doors
  * [Client] cl_show_direction 3 to show local keypresses only
  * [Client] Improve IME window position on multi-line text
  * [Client] Delay server race demo ending by 1 second
  * [Client] Add mode selection to color picker popups
  * [Client] Implement cl_sub_tick_aiming (not enabled on
    official servers)
  * [Client] Increase freeview radius to kill tile border
  * [Client] Detect server no longer running when started from
    client
  * [Client] Resize screen when changing resolution in console
  * [Client] Improve winter theme
  * [Client] Update server browser when adding friend ingame
  * [Client] Fix 1-tick delay of values in HUD
  * [Client] Fix doubleclick handling with old renderer
  * [Client] Correctly update auth keys when using auth_remove
  * [Client] Ensure strings in demo header are zero-terminated
    and valid UTF-8
  * [Client] Fix large FPS drop rendering server details of
    favorite server
  * [Client+Server] Old file handling on Windows again
  * [Client] Show player's latency if menu is open
  * [Client] Improve performance of menus checker background,
    improve server browser performance
  * [Client] Don't use mouse position for angle if paused
  * [Client] Support easter, halloween, xmas theme maps
    (no maps yet)
  * [Client] Remove parallax zoom from map files
  * [Client] Save unknown commands from settings_ddnet.cfg
  * [Editor] Stop/pause sound previews when leaving editor
  * [Editor] Add export image/sound buttons
  * [Editor] Add project-onto operation for envelopes
  * [Editor] Add numpad shortcuts for zooming in envelope editor
  * [Editor] Support writing maps with more items/data
  * [Server] Add votes command
  * [Server] Swap without a name when team only has 2 players
  * [Server] Move X amounts of tiles with left, right, up, down
  * [Server] Add /lasttp to teleport to last position you
    did /tp to
  * [Server] Fix dead reckoning
  * [Server] tele unfreeze and reset speed
  * [Server] Quoted names in chat for team joins
  * [Server] Save/load ninja
  * [Server] Add sv_regional_rankings 0
  * [Server] Add freeze/unfreeze testing commands
- Changes in version 17.3:
  * [Client] Automatic multi-view for players in team
  * [Client] Indicator on pause/unpause in demo player
  * [Client] Demo search bar
  * [Client] Directly render cut to video
  * [Client] Golden angle to generate unique team colors
  * [Client] Overhauled demo player skipping UI
  * [Client] Overhauled server browser filter/details/friends
  * [Client] Color vote if you votes yes/no
  * [Editor] Generate pixelart from images
  * [Client] Improved default skin
  * [Client] Updated countryflags (GP, MN, MQ, MW, PY, RE)
  * [Client] Improve dbg_tuning and other debug HUD
  * [Client] Button to reload entities background
  * [Client] Improve Windows pipe (FIFO) support
  * [Client] Fix rendering long lines in console
  * [Client] Disable prediction when game is paused
  * [Client] Fix long console commands help
  * [Client] Don't send empty chat messages
  * [Client] Fix crash with too many votes
  * [Client] Fix crash using goto_tele
  * [Client] macOS server launcher fix
  * [Client] No box selection when panning
  * [Client] Detect server being stopped on Linux again
  * [Client] Release mouse for X11 when LLDB breakpoint is hit
  * [Client] Fix camera zooming when exiting multiview
  * [Client] Fix lineinput selection cursor desync
  * [Client] Fix chat history with cl_showchat 1
  * [Client] Fix countryflag scrolling
  * [Client] Fix chat clipping with OpenGL backend
  * [Client] Improve skin cleaning
  * [Editor] ctrl+f to load map prompt
  * [Editor] Move automap rule files to subfolder
  * [Editor] Progress spinner when saving
  * [Editor] Scaling for envelopes
  * [Editor] Keep brush when loading another map
  * [Editor] Fix right-clicking envelope points
  * [Editor] Warn about unsaved changes when dragging map file
    into game
  * [Editor] Fix envelope saving
  * [Server] Testing commands: unninja, solo, deep
  * [Server] Fix 0.7 clients being able to join after slot change
  * [Server] NO_SKIN_CHANGE_FOR_FROZEN game info flag
  * [Server] Fix everyone's swap getting reset
  * [Server] Fix /load from backup database
  * [Server] Fix scoreboard time reset when using /timecp
  * [Server] Fix SQLite connection failure assertion
  * [Server] Don't reigster to ipv6 when sv_ipv4only is enabled
  * [Server] Record antibot events in teehistorian
  * [Server] Record join events in teehistorian
  * [Server] Shut down DB connection pool on errors
- Use gcc11 for openSUSE Leap</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1706961600">- Update to version 18.0.3:
  * [Client] Community server filter instead of DDNet/KoG tabs
  * [Client] Add finish info messages
  * [Client] Editable chat size and width
  * [Client] Console: Scroll, search (ctrl-f), argument
    autocompletion
  * [Editor] Undo/Redo
  * [Editor] Improved quad handling
  * [Editor] Color palette and pipette
  * [Client] Add /join [player] to join a player's team
  * [Client] Improve performance when rendering text
  * [Client] Multi-view: Don't zoom below cl_default_zoom
  * [Client] Save current chat input when pressing up
  * [Client] Better prediction margin updates
  * [Client] Count deaths in statboard
  * [Client] Quote names with spaces when auto-completing names
    in commands
  * [Client] Config manager improvements
  * [Client] Validate filenames and network packets
  * [Client] Fix votes with timeout over 60 seconds not
    being shown
  * [Client] Better key reader button in settings
  * [Client] Render the tee being spectated after everyone else
  * [Client] Validate favorite skin name
  * [Client] Better text line spacing and console text selection
  * [Client] Fix automatic hammer on release with cl_dummy_control
  * [Client] Restart button when game needs to restart to
    apply settings
  * [Client] Improve performance of sounds
  * [Client] Improve graphics performance by copying less data
  * [Client] Improve player/tee settings
  * [Client] Fix wrong selection in vote menu when selected
    player leaves
  * [Client] Fix hook collision line when paused
  * [Client] Improved text outlines
  * [Editor] Differentiate between normal and checkpoint teles
  * [Editor] Editor buttons rework
  * [Editor] Allow resize of layers panel
  * [Editor] Shift-scroll to adjust special tile numbers
  * [Editor] Don't duplicate images when appending
  * [Editor] Warn about unused tiles
  * [Editor] Better text rendering in tele tiles
  * [Editor] Allow panning outside initial container
  * [Server] Add /tp x y to teleport to coordinates
  * [Server] Improve server-side auto demos
  * [Server] Add Sv_CommandInfo netmsg for autocompletion of
    chat commands
  * [Server] sv_vote_kick_delay fixes
  * [Server] Antibot improvements
  * [Server] Dynamically connect/disconnect debug dummies
  * [Server] Apply name bans to clans
  * [Server] Stop recording of demos on shutdown
  * [Server] Group list messages
  * [Server] Fix happy birthday broadcast
  * [Tools] Fix crashes on unknown UUID-based map items</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1710936000">- Update to version 18.1:
  * [Client] Add tabs for favorite communities, separate
    country/type filters
  * [Editor] Better map settings input
    (autocompletion, validation)
  * [Client] Render loading message/indicator for vote options
    and rcon commands
  * [Client] Add flag search in settings
  * [Client] Add team-lock indicator to HUD
  * [Client] Use icons for Internet, LAN and Favorites server
    browser tabs, use star icon for favorite servers
  * [Client] More efficient HTTP usage
  * [Client] Add time scale to debug graphs for constant
    scrolling speed
  * [Client/Server] Improve Windows logger, add virtual
    terminal support
  * [Client] Show extra "Reset Filter" button when no servers
    match filter
  * [Client] Ensure client window is maximized and active
    after restarting
  * [Client] Random skin improvements
  * [Client] Improve voting HUD
  * [Client] Keep console scrolling position during text selection
  * [Client] Only write files when changed
  * [Client] Show warnings after client close instead of
    preventing quitting
  * [Client] Fix switch screen and blackscreen OpenGL + Window
    borderless
  * [Client] Add placeholder country/type for servers without
    community
  * [Client] Don't show FPS during demo rendering
  * [Client] Validate skin names when loading
  * [Client] Allow background jobs to be aborted
  * [Client] save_replay improvements
  * [Client] Pick bg entities map without file extension
  * [Client/Server] Search most fitting allocation, not first
    fitting
  * [Editor] Increase WASD pan speed while holding shift
  * [Editor] Add "View" button to tele/switch drop down
  * [Editor] Make "Clean up game tiles" undoable
  * [Editor] Allow finer grid
  * [Editor] Add parallax to layer selector
  * [Editor] Add plus/minus buttons to numeric value selectors
  * [Editor] Fix quads
  * [Editor] Fix FPS drop when editing tiles layer properties
  * [Server] Make chat command arguments case-insensitive
  * [Server] Add /tpxy to teleport to specific position
  * [Server] Fix 0.7 armor being snapped as health
  * [Server] Small /practice improvements
  * [Server] Show kill messages also for 0.7 clients
  * [Server] Add /solo and /deep as practice commands
  * [Server] Expire team invites on player disconnect
  * [Server] Respond to vital pings with vital pongs</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1714824000">- Update to version 18.2:
  * [Client] Allow the vote creator to cancel the vote
  * [Client] Track country/type filters separately for
    internet/favorites tabs
  * [Client] Add a "No Login required" filter
  * [Server] Add /team0mode to have a team behave like team 0
  * [Server] Fix freeze not working during first 50 server ticks
  * [Client] Increase maximum number of favorite communities
    from 3 to 5
  * [Client] Improve layout of Appearance settings, overall
    settings menus and restart message
  * [Client] Show completion options for bind key names in console
  * [Client] Add sorting by number of friends to the
    server browser
  * [Client] Reset tuning of dummy and main when disconnecting
  * [Client] Improve performance when rendering menus
  * [Client] Show countdown message in player/tee settings
    for sv_info_change_delay
  * [Client] Add optional name argument to start_video command
  * [Client] Fix prediction errors and incorrect rendering after
    changing map
  * [Client] Fix tee briefly appearing at previous position
    when joining
  * [Client] Show Discord activity when offline
  * [Client] Include more options in appearance settings
  * [Client] cl_nameplates_strong improvements
  * [Client] Take serverlist age into account when choosing master
  * [Client] Fix race conditions in job state handling
  * [Client] Disconnect when we get map change with invalid
    parameters
  * [Client] Support overlapping scroll regions, always allow
    mouse scrolling
  * [Client] Fix crash when the serverlist request fails
  * [Client] Support clicking line color picker label to
    toggle checkbox
  * [Client] Fix recursive folder creation with mixed slashes
    and drive letters
  * [Client] Fix rcon username not reset when disconnecting
    while connecting
  * [Client] Render loading popup also while loading demo files
  * [Client] Update immediately when changing
    cl_background_entities
  * [Client] Fix demo player hotkeys not working when menu
    is inactive
  * [Client] Fix incorrect score kind in demos depending on
    last server
  * [Client] Fix alignment of labels in friends list
  * [Editor] Editor: Make embedded image popup bigger at all times
  * [Editor] Fix crash when trying to select autorule with
    arrow keys
  * [Editor] Allow saving empty quads &amp; sounds layers
  * [Editor] Fix crash when constructing some game tiles
  * [Editor] Fix envelope points not clickable after opening
    bezier popup
  * [Editor] Fix bug where certain tiles would not work in Game
    tiles menu
  * [Server] Disallow /save on teams with practice enabled,
    teehistorian improvements
  * [Server] Refresh air jumps after teleporting [murpi]
  * [Server] Fix freeze bar not being correct after returning
    from pause
  * [Server] List all practice commands when enabling /practice
  * [Server] Fix practice mode not resetting after disconnect
    on solo servers
  * [Server] Ensure commands executed via FIFO/ECon/LineReader
    are valid UTF-8
  * [Server] Improve /timecp chat command</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1718452800">- Update to version 18.3:
  * [Client] Add confetti particles on finish
  * [Client] Add team0mode indicator
  * [Client] Show percentage of loaded rcon commands
  * [Client] Fix truncated scoreboard recording notification
  * [Client] Keep respawned players in multi view list on
    pvp servers
  * [Client] Add cl_showhud_time_cp_diff
  * [Client] Fix console search highlighting
  * [Client] Fix potential client crash and console not keeping
    scrolling position when console backlog is full
  * [Client] Add option to show only messages by team members
  * [Client] Fix smoke particles sometimes being stuck inside
    solid tiles
  * [Client] Fix language file being loaded twice when starting,
    improve error handling for invalid translation files
  * [Client] Prevent UI elements from being hovered while key
    reader is active
  * [Client] Fix segfault when swapchain images change
    (e.g. toggling Vsync)
  * [Client] Fix demo seekbar tooltip not shown while seekbar is
    active, fix demo seekbar being activated by held button press
  * [Client] Android build improvements
  * [Client] Fix wrong file extension being removed in demo
    cut popup
  * [Client] Fix potential client crash and console not keeping
    scrolling position when console backlog is full
  * [Client] Video recorder: improve error handling and log
    messages, fix crashes
  * [Client] Fix wrong server address used in password popup
    when redirected
  * [Client] Fix OOB accesses rendering ghosts, fix ghost hook
    collision line
  * [Editor] Fix crashes and memory leaks related to editor map
    sounds and opus file decoding
  * [Editor] Fix inconsistent behavior of scrollbars, key readers,
    edit boxes, value selectors and editor sound seekbars
  * [Client+Server] Use network tokens in big-endian byte order
    consistently
  * [Server] Add /rescuemode
  * [Server] Add /practicecmdlist
  * [Server] Add chat commands for toggling weapons in practice
    mode
  * [Server] Fix goto_tele not finding all teleporters
  * [Server] Allow econ to succeed, even if ipv6 econ fails to
    bind to socket
  * [Server] Store player names in teehistorian and
    Finish/TeamFinish v2
  * [Tooling] Add delta debug dump
  * [Tooling] Also print external module/symbol names in
    parse_drmingw.sh
  * [Tooling] Fix issues with map_create_pixelart</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1724241600">- Update to version 18.4:
  * [Client] Add team size indicator
  * [Client] Show skin name as tooltip in ingame player list
  * [Client] Remove Spectate label from HUD, show Following
    {player} instead
  * [Client] Various fixes with sound disabled
  * [Client] Various improvements to scoreboard rendering
  * [Client] Show help text when chaining multiple commands
  * [Client] Consistent value selector behavior
  * [Client] Server browser friend list: sort case insensitively
  * [Client] Fix incorrect scoreboard size if blue team used
    without teams flag
  * [Client] Fix integer overflow when computing tilemap size
  * [Client] Correct player name in copied server info
  * [Client] Fix UI issues when switching between menus and editor
  * [Client] Trim Strings on Search/Exclude Filter &amp; add Tooltip
  * [Client] Fix ingame menu buttons overlapping on team based
    gametypes
  * [Client] Correct arguments highlighting after removing entry
  * [Client] Fix browser not refreshing if ui_page is changed in
    start menu, refresh LAN tab after starting/stopping
    local server
  * [Client] Loading screen fixes
  * [Editor] Add button and F1 hotkey to open Wiki page
  * [Editor] Fix various automapper issues
  * [Tools] Improve map_extract tool
  * [Master] Use libloc instead of our own CSV format for GeoIP
  * [Client&amp;Server] Rewrite and fix line reader
  * [Server] Add "/setjumps" practice command and "setjumps"
    rcon command
  * [Server] Don't check sv_max_team_size for teams in practice
  * [Server] Fix multiple redirected clients not dropped in the
    same tick
  * [Server] Faster antibot API calls
  * [Server] Fix crashes with dbg_dummies and sv_max_clients
  * [Server] Fix server crash when starting with
    random(_unfinished)_map
  * [Server] Add sv_dnsbl_ban_reason, increase maximum ban
    reason length</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1725883200">- Update to version 18.5:
  * [Client] Support connecting to Teeworlds 0.7 servers
  * [Client] Color speed in hud based on increase or decrease
  * [Client] ARM64 Windows support [SchrodingerZhu]
  * [Client] Add a popup for picking a map for background
    entities setting
  * [Client] Support composite binds with + commands, fix handling
    of composite binds with F1-F24 keys
  * [Server] Spawn confetti when connecting on your DDNet birthday
  * [Server] Add support for directories with add_map_votes
  * [Server] Add support for triggering map sounds
  * [Editor&amp;Server] Add hot_reload command to reload map while
    preserving state
  * [Client] Show server info in password popup
  * [Client] Spectator clans in scoreboard
  * [Client] New lock indicator
  * [Client] Improve cl_show_ids
  * [Client] Improve dummy connecting button and error handling
  * [Client] Fix 'auto' GPU identification on hybrid GPU systems
  * [Client] Check API version before adding GPU to GPU list
  * [Client] Use text containers to render movement information
  * [Client] Work on improving Android support
  * [Client] Remove multi-line chat
  * [Client] 128 player support in scoreboard and spectator UI
  * [Client] Also trim scoreboard search strings in highlights
  * [Client] Use same Red/Blue team colors for score HUD as for
    scoreboard
  * [Client] Fix CSV header being written multiple times to
    ddnet-saves.txt
  * [Client] Fix memory leak of non-RGBA image data, clear all
    image info
  * [Client] Smoother menu checker background scrolling on
    loading screens
  * [Client] Fix invalid team count in scoreboard for split teams
  * [Client] Only activate double-clicks with left mouse button
    again
  * [Client] Show warning when connect address cannot be resolved
  * [Client] Show game menu buttons again, even in 5:4, when not
    on a red/blue-team server
  * [Client] Fix debug HUD units
  * [Client] Improve bans rcon command pagination
  * [Client] Increase max command length in console
  * [Client] Scale target position when spectating
  * [Client] Make macOS semaphore names more unique, improve
    assertion
  * [Client] Fix save code not being censored in streamer mode
  * [Client] Don't allow input in console while it is
    opening/closing
  * [Client] Allow reloading current background entities map
  * [Client] Speed demo up with mouse scroll only if menu
    is active
  * [Editor] Add button to collapse/expand all groups
  * [Editor] Transfer server settings while using append
  * [Editor] Fix editor properties not being clamped on + and
  - button click
  * [Client&amp;Server] Fix UDP socket creation/cleanup if opening
    IPv6 socket fails
  * [Server] Add /whispers to disable whipers (similar to /dnd)
  * [Server] Disallow moving authed players to spec
  * [Server] Fix practice finish time
  * [Server] Add error message when trying to /swap on forced
    solo server
  * [Server] Savegame fixes
  * [Server] Disallow saving with draggers active
  * [Server] Only apply DNSBL bans once when player joins
  * [Server] Don't show "you've been banned" for VPN bans
  * [Server] Handle dnsbl and other non-critical stuff only on
    new ticks
  * [Server] Don't keep state of teammate in team0mode after death
  * [Tooling] Validate language files for … and non-matching
    formatters in CI</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1726488000">- Update to version 18.5.1:
  * [Client] Support connecting to Teeworlds 0.7 servers
  * [Client] Color speed in hud based on increase or decrease
  * [Client] ARM64 Windows support
  * [Client] Add a popup for picking a map for background
    entities setting
  * [Client] Support composite binds with + commands, fix handling
    of composite binds with F1-F24 keys
  * [Server] Spawn confetti when connecting on your DDNet birthday
  * [Server] Add support for directories with add_map_votes
  * [Server] Add support for triggering map sounds
  * [Editor&amp;Server] Add hot_reload command to reload map while
    preserving state
  * [Client] Show server info in password popup
  * [Client] Spectator clans in scoreboard
  * [Client] New lock indicator
  * [Client] Improve cl_show_ids
  * [Client] Improve dummy connecting button and error handling
  * [Client] Fix 'auto' GPU identification on hybrid GPU systems
  * [Client] Check API version before adding GPU to GPU list
  * [Client] Use text containers to render movement information
  * [Client] Work on improving Android support
  * [Client] Remove multi-line chat
  * [Client] 128 player support in scoreboard and spectator UI
  * [Client] Also trim scoreboard search strings in highlights
  * [Client] Use same Red/Blue team colors for score HUD as
    for scoreboard
  * [Client] Fix CSV header being written multiple times to
    ddnet-saves.txt
  * [Client] Fix memory leak of non-RGBA image data, clear all
    image info
  * [Client] Smoother menu checker background scrolling on
    loading screens
  * [Client] Fix invalid team count in scoreboard for split teams
  * [Client] Only activate double-clicks with left mouse
    button again
  * [Client] Show warning when connect address cannot be resolved
  * [Client] Show game menu buttons again, even in 5:4, when not
    on a red/blue-team server
  * [Client] Fix debug HUD units
  * [Client] Improve bans rcon command pagination
  * [Client] Increase max command length in console
  * [Client] Scale target position when spectating
  * [Client] Fix save code not being censored in streamer mode
  * [Client] Don't allow input in console while it is
    opening/closing
  * [Client] Allow reloading current background entities map
  * [Client] Speed demo up with mouse scroll only if menu
    is active
  * [Editor] Add button to collapse/expand all groups
  * [Editor] Transfer server settings while using append
  * [Editor] Fix editor properties not being clamped on + and
  - button click
  * [Client&amp;Server] Fix UDP socket creation/cleanup if opening
    IPv6 socket fails
  * [Server] Add /whispers to disable whipers (similar to /dnd)
  * [Server] Disallow moving authed players to spec
  * [Server] Fix practice finish time
  * [Server] Add error message when trying to /swap on forced
    solo server
  * [Server] Savegame fixes
  * [Server] Disallow saving with draggers active
  * [Server] Only apply DNSBL bans once when player joins
  * [Server] Don't show "you've been banned" for VPN bans
  * [Server] Handle dnsbl and other non-critical stuff only on
    new ticks
  * [Server] Don't keep state of teammate in team0mode after
    death
  * [Tooling] Validate language files for … and non-matching
    formatters in CI</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1728302400">- Update to version 18.6:
  * [Client] Smooth spectating
  * [Client] Mouse click in spectator mode to lock/release view
  * [Client] Add auto-completion hint for chat commands
  * [Client] Add cl_freeze_stars setting (F1) for old freeze
    stars
  * [Editor] Add quick actions (ctrl+p)
  * [Client] Show skin name as tooltip in friendlist and
    serverinfo
  * [Client] Put dead players at the bottom of scoreboard
  * [Client] Add ghost list sorting
  * [Client] Android improvements
  * [Client] Skin save button and directory for Teeworlds 0.7
  * [Client] Correctly handle country/type filters for
    non-community servers
  * [Client] Validate chat and console arguments
  * [Client] Fix game launch on Wayland-only systems
  * [Client] Resample audio to device playback rate
  * [Client] Immediate browser filters
  * [Client] Fix default player name for Teeworlds 0.7
  * [Client] Don't open scoreboard during pause
  * [Client] Vertical arrow key navigation in skin selection
  * [Client] Rework 0.7 tee settings layout
  * [Client] Fix dummy disconnecting on hot reload
  * [Client] Fix map download fallback
  * [Client] Add icon button to open console in bottom right of
    start menu
  * [Client] Fix illegal memory access in video recorder
  * [Client] Fix directory in map paths
  * [Client] Fix scrollbar rail clicking being active while
    popups open
  * [Client] Fix colored speed values after connecting to
    a server
  * [Client] Fix composite binds that open chat, console
    or menus
  * [Client] Fix name in chat not being highlighted
  * [Client] Rework image loading, saving and manipulation
  * [Client] Fix duplicate 0.7 flag sound with dummy connected
  * [Client] Fix 0.7 team colors
  * [Client] Change 'No servers found' message to hint at ports
  * [Client] More gametype colors (LMS, LTS, gCTF, gDM, FreeZe,
    iFreeze)
  * [Client] Fix Leak IP check
  * [Client] Make cl_show_direction change alpha with
    cl_show_others_alpha
  * [Client] Don't reset zoom on team switch
  * [Editor] Allow custom entities
  * [Editor] Add ed_layer_selector
  * [Editor] Add center pivot for quads
  * [Editor] Add ed_auto_map_reload setting
  * [Editor] Add right-click to solo editor layer
  * [Editor] Fix crash with RGB images
  * [Editor] Fix undo/redo for adding layers
  * [Editor] Allow non-conflicting keybinds while line input
    is active
  * [Editor] Fix crash with image/sound load failing
  * [Server] Improvements to announcements (reload_announcement)
  * [Server] Add reload_censorlist command
  * [Server] Send result of random_unfinished_map to all clients
  * [Server] Allow random_unfinished_map in rcon
  * [Server] Add /lasttp to hot reload
  * [Server] Fix hot reload crash with super
  * [Server] Don't expose econ publicly when ec_bindaddr is set
    to localhost
  * [Server] Fix hot reload crash with draggers
  * [Server] Alignment of separators in record output
  * [Server] Fix sv_rescue_delay
  * [Tooling] Fix language contexts</changelog>
</package>
<package pkgid="f94b4ffe1b967f78a3738d72eb333724b73f0b69dcfc68ff6a35c03c2abe1471a20a8e42632ccd0a5bf7ea43b60803f77297779cb09038bd8749e22ef14020b3" name="dds2tar" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="bp160.1.12"/>
  <changelog author="adrian@suse.de" date="1073736000">- build as user</changelog>
  <changelog author="ro@suse.de" date="1082894400">- use RPM_OPT_FLAGS
- add no-strict-aliasing</changelog>
  <changelog author="postadal@suse.cz" date="1096545600">- removed dependency on kernel-source and set macro ST_BUFFER_BLOCKS on default value 32 (without-kernel-header.diff)</changelog>
  <changelog author="schwab@suse.de" date="1137412800">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1163160000">- fix manpage permissions</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mpluskal@suse.com" date="1428840000">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Small packaging adjustements</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1686225600">- Spec file modernisation</changelog>
</package>
<package pkgid="7af983e8db77c1b186ba4979c5bf05ceaa8b243bb29e178ad572e5a2759e06b7e27ea001468cc0bff00d3380f7d8da95f7967d9bef985d31ae81f778d0a66415" name="ddskk" arch="noarch">
  <version epoch="0" ver="20160304" rel="bp160.1.11"/>
  <changelog author="werner@suse.de" date="1349870400">- Solve update problem due date based version number scheme and
  current number scheme with 14.4</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="i@marguerite.su" date="1402315200">- update version 20140608
  * changes see ChangeLog.4 and ChangeLog.5
- drop flavour.patch
  * upstream now doesn't have this code
- drop skk-emacs-type.patch, upstreamed</changelog>
  <changelog author="i@marguerite.su" date="1440158400">- update version 20150816
  * dictionaries version 20150821
  * wiki version 20150326
  * changes see ChangeLog.5</changelog>
  <changelog author="bwiedemann@suse.com" date="1502539200">- Add ddskk-drop-build-date.patch to fix build-compare (boo#1047218)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- remove unused xorg-x11-devel BuildRequires</changelog>
  <changelog author="ftake@geeko.jp" date="1520424000">- Update to ddskk-16.2
  * Drop support for GNU Emacs 22
  * Support GNU Emacs 26
  * bayesian/bskk: Support Ruby 2.4
  * A New variable, skk-candidate-buffer-delete-other-windows
    for users of popwin.el or shackle.el
  * A New variable, skk-show-candidates-nth-henkan-char
    to configure the number of space keys to show a candidate list
  * A New variable, skk-henkan-number-to-display-candidates
    to specify the number of candidates on a candidate list at once
    obsoleting skk-henkan-show-candidates-rows
- Update to ddskk-16.1
  * Support GNU Emacs 25
  * Update documents
- Update dictionary to 20180304
- Drop edict dictionary
  * edict is now considered as non-free
- Remove unnecessary documents
- Fix License tag since some dictionary files are not distributed
  under GPL-2.0+
- Update the source code URL to GitHub</changelog>
  <changelog author="ftake@geeko.jp" date="1520510400">- Remove unnecessary script: SKK-JISYO.rb
- Add download-dic.sh to Source</changelog>
  <changelog author="Xu Zhao &lt;i@xuzhao.net&gt;" date="1583150400">- Update to skkdic 20200228
  * SKK-JISYO.L: Modify below candidates.
  - よもつひらさか /黄泉平坂/{-&gt;黄泉比良坂;古事記/泉津平坂;日本書紀/}
  - やつめうなぎ /八目鰻{鱧/-&gt;}/
  - ばっさい /伐採/{伐裁/-&gt;}
  - せんけん /先遣/先見/専権/先験/浅見/淺見;「浅」旧字/先件/嬋娟;-たる美女/仙建/擅権/選研/選鉱{精-&gt;製}錬研究所;※abbrev/
  - よいざm /酔い覚{;-&gt;}/酔い醒/酔醒/
  * SKK-JISYO.L: Remove below candidates.
  - かみきょうく /上京区/
  - にしぎょうく /西京区/
  - さいきょうく /西京区/
  - ちゅうきょうく /中京区/
  - しゅんとうぐん /駿東郡/
  * SKK-JISYO.L: Add below candidates.
  - うきょうく /右京区/
  - かみぎょうく /上京区/
  - しもぎょうく /下京区/
  - なかぎょうく /中京区/
  - にしきょうく /西京区/
  - ひがしやまく /東山区/
  - すんとうぐん /駿東郡/</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="819ed25a643b9be902ea68a04b48c47d2b6bcaad02aaf590e7a4a6e33dafc157b497e3e971ea4101629a8b353a0caebfcf5d8849bc3e67a55a3bfceb4842cc79" name="deadbeef" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="bp160.1.14"/>
  <changelog author="predivan@mts.rs" date="1656763200">- Update to version 1.9.1:
  * Remove the hearts from default titlebar - mainly because large percentage of systems can't display emoji in the title bar.
  * fix LINGUAS and translators.txt to include 'be'
  * translation: restore Belarussian language translation
  * gtkui: exclude medialib files, to avoid broken tarball
  Changes in 1.9.0
  * Fixed: WMA regression which caused corrupt playback
  * Fixed: Deadlock in ALSA plugin
  * Fixed: Mis-detection of raw AAC files as MP4 files
  * Fixed: Handling empty title formatting scripts
  * Fixed: Memory error when dragging playlist via Playlist Browser
  * Fixed: Keyboard nagivation issues across playlist tabs (Saivert)
  * Fixed: Playlist tabs and playlist customized colors bugs (Saivert)
  * Fixed: Paused state was not persisted correctly after force-quitting
  * Fixed: Regression which broke musepack seeking
  * Fixed: Crash when notification artwork could not be found
  * Fixed: Poor performance when saving playlist and configuration files
  * Fixed: sndfile not opening files because of uninitialized memory access bug
  * Fixed: Crash when removing tracks from playlist while they're playing
  * Fixed: Rendering group titles with blank text
  * Fixed: Delay activation of a playlist tab during drag-drop over the tab bar
  * Fixed: ᵣussian and ᵦelarussian languages are no longer supported
  * Added: Long file seeking support for Opus and FFMPEG
  * Added: HTTPS support for vfs_curl in portable builds, via libmbedtls
  * Added: New Scope and Spectrum Analyzer visualizations
  * Added: Visualization appearance preferences pane
  * Added: New album art loader
  * Added: Configurable volume bar scale (dB, linear, cubic) via context menu (Saivert)
  * Added: Title formatting $year(time) function
  * Added: GTK UI for editing a chosen field of multiple selected tracks, in a table interface
  * Added: Creating new playlist via clicking the "+" button in the playlist tab strip (Saivert)
  * Added: Improved DSP preferences GTK UI (Saivert)
  * Added: Improved handling of invalid MP3 files
  * Added: Last.fm scrobbler will use HTTPS by default
- Refresh deadbeef-drop-documents-installation.patch
- Add deadbeef-fix-includes.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1656936000">- Sync ExcludeArch %ix86 with libdispatch: libdispatch is not being
  buily and as such we don't have the needed dep available.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1667476800">- Update to 1.9.2:
  * Fixed: Many race conditions, deadlocks and crashes
  * Fixed: Crash when reading metadata of some .SPU files
  * Fixed: Config file content was repeated twice
  * Fixed: Default album art max file size increased to 40MB (Dakeryas)
  * Fixed: Reading some DTS files which require a larger buffer when probing
  * Fixed: Noise was played in the beginning of DTS files
  * Fixed: Default cddb server changed to gnudb.gnudb.org:8880
  * Fixed: Crash when playing certain .AY files
  * Fixed: Playlist corruption when sorting by random
  * Fixed: Crash in the sndfile plugin
  * Fixed: Spectrum analyzer samplerate bug
  * Fixed: Visualization buffer out-of-bounds access
  * Fixed: Multichannel down-mixing bug
  * Added: Notification displaying compatibility with KDE 5.23.5
  * Added: GTKUI oscilloscope rendering with anti-aliasing
  * Added: Selection Properties widget configurable to display metadata, properties, or both
  * Added: Toggle Pause action in the Deadbeef.desktop file
  * Added: Confirmation dialog when removing a playlist using hotkey
  * Added: Improved Sort By -&gt; Custom dialog
- Add fix-warning.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1667736000">- Add fix-ffmpeg-5-support.patch: Fix build against ffmpeg 5.0x</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1672574400">- Update to 1.9.4:
  * Fixed: Deadlock when playing network streams
  * Fixed: Handling multi-value genre in ID3v2
  * Fixed: Will fully reinitialize ALSA device when changing output format,
    to be compatible with more DACs
  * Fixed: Duplicate playlist menu item was not showing
  * Fixed: A random crash in visualization code
  * Added: Customizable visualization background color for GTKUI
  * Added: 64-bit seeking support in AAC, ALAC, Sndfile, Musepack, MP3, WMA, Vorbis
  * Added: Embedded album art from OGG files
  * Added: When double clicking a playlist in Playlist browser,
    will play the first track in the shuffle queue,
    according to current settings (pappnu)
  * version 1.9.3
  * Fixed: OpenBSD compatibility / warnings (Brad Smith)
  * Fixed: Crash when loading certain malformed cuesheets
  * Fixed: API behavior change regression causing certain plugins to malfunction
  * Added: Support for building with FFMPEG 5.0 (xuzhen)
- Removed fix-ffmpeg-5-support.patch: not needed anymore
- Fixed deadbeef Help menu entries resulting in file not found errors</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1677240000">- removed fix-warning.patch, not needed anymore
- added pipewire build dependency
- added deadbeef-fix-desktop-file.patch to fix bogus "Play Pause" action
- added upstream deadbeef-fix-libretro-compilation.patch to fix compilation on ARM
- Update to 1.9.5:
  * Fixed: GME chiptune voice muting was affecting converter / replaygain scanner
  * Fixed: SID chiptune voice muting was affecting converter / replaygain scanner
  * Fixed: SID stereo was not working the way it was intended
  * Fixed: Wave format conversion regressions, which could lead to wrong channels mapping
  * Fixed: Converter race condition bug when checking whether a directory exists (dakeryas)
  * Fixed: Album art fetching for tracks with multiple artists
  * Fixed: GTK warning when opening track properties
  * Fixed: Prompting before deleting playlist via middle mouse button
  * Fixed: Album art left/right/center alignment in GTKUI
  * Fixed: Removed embedded album art size limit for ID3v2 tags
  * Fixed: Deadlock when trying to delete files from disk
  * Fixed: Mute functionality for output plugins with their own volume control
  * Fixed: Switching to previous/next track after the current track is removed
  * Fixed: Incorrect playlist affected by hotkeys
  * Fixed: Unsynchronized ID3v2 tag loading (credit: Robin Seth Ekman)
  * Fixed: Spectrum analyzer buffer overflow
  * Fixed: Deadlock when removing multiple selected tracks while one of them is playing
  * Added: Pipewire output plugin (saivert)
  * Added: LibRetro resampling plugin (toadking)
  * Added: Chiptune voice muting in DUMB plugin
  * Added: Improved drawing of spectrum analyzer
  * Added: $itematindex(index,value) function to title formatting, get value by index from multivalue fields</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1683547200">- Add deadbeef-fix-register-cxx17.patch
- Add deadbeef-adplug-use-cxx11.patch</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1709294400">- removed deadbeef-fix-includes.patch. Modify CFLAGS instead
- removed upstream patches:
  * deadbeef-fix-register-cxx17.patch
  * deadbeef-adplug-use-cxx11.patch
  * deadbeef-fix-libretro-compilation.patch
- Update to 1.9.6:
  * Fixed: Drawing spectrum analyzer in discrete frequencies mode
  * Fixed: Handling the option to enter archives when scanning folders (fudanchii)
  * Fixed: Playback performance issue when searching in large playlist
  * Fixed: Possible crash when starting playback with ALSA plugin
  * Fixed: Shuffle albums was not using Album Artist
  * Fixed: Title formatting failure with large calculated values
  * Fixed: Loading of small album art image files
  * Fixed: MP4 parser failing to read/write certain tags correctly
  * Fixed: Handling of title-formatted paths
  * Fixed: A bug when editing metadata in multiple selected tracks
  * Fixed: OSD notification reuse by default, with an option to disable
  * Added: Bit depth override option (HiFiPhile)
  * Added: DSD DoP support for ALSA/FFMPEG plugins (HiFiPhile)
  * Added: $put, $puts, $get title formatting functions (Robin Ekman)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1710849600">- Drop hardcoded '-msse3' in ddb_dsp_libretro (fix non-x86 builds)</changelog>
  <changelog author="olaf@aepfle.de" date="1731326400">- Convert BuildRequires from libfaad-devel to pkgconfig(faad2)
- Support ffmpeg 7.1 with 70ae99463889e191c3d5d0af6ba28e893d73a63f.patch</changelog>
</package>
<package pkgid="8aff09204af3e78558fef717076993cd999c5fe4531c382611c11f4e23d6a18bd105aa9beca0cb37308978e5c2b53efcae510ea7d6e2bf54d30f4f8bb910e4ae" name="deadbeef-devel" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="bp160.1.14"/>
  <changelog author="predivan@mts.rs" date="1656763200">- Update to version 1.9.1:
  * Remove the hearts from default titlebar - mainly because large percentage of systems can't display emoji in the title bar.
  * fix LINGUAS and translators.txt to include 'be'
  * translation: restore Belarussian language translation
  * gtkui: exclude medialib files, to avoid broken tarball
  Changes in 1.9.0
  * Fixed: WMA regression which caused corrupt playback
  * Fixed: Deadlock in ALSA plugin
  * Fixed: Mis-detection of raw AAC files as MP4 files
  * Fixed: Handling empty title formatting scripts
  * Fixed: Memory error when dragging playlist via Playlist Browser
  * Fixed: Keyboard nagivation issues across playlist tabs (Saivert)
  * Fixed: Playlist tabs and playlist customized colors bugs (Saivert)
  * Fixed: Paused state was not persisted correctly after force-quitting
  * Fixed: Regression which broke musepack seeking
  * Fixed: Crash when notification artwork could not be found
  * Fixed: Poor performance when saving playlist and configuration files
  * Fixed: sndfile not opening files because of uninitialized memory access bug
  * Fixed: Crash when removing tracks from playlist while they're playing
  * Fixed: Rendering group titles with blank text
  * Fixed: Delay activation of a playlist tab during drag-drop over the tab bar
  * Fixed: ᵣussian and ᵦelarussian languages are no longer supported
  * Added: Long file seeking support for Opus and FFMPEG
  * Added: HTTPS support for vfs_curl in portable builds, via libmbedtls
  * Added: New Scope and Spectrum Analyzer visualizations
  * Added: Visualization appearance preferences pane
  * Added: New album art loader
  * Added: Configurable volume bar scale (dB, linear, cubic) via context menu (Saivert)
  * Added: Title formatting $year(time) function
  * Added: GTK UI for editing a chosen field of multiple selected tracks, in a table interface
  * Added: Creating new playlist via clicking the "+" button in the playlist tab strip (Saivert)
  * Added: Improved DSP preferences GTK UI (Saivert)
  * Added: Improved handling of invalid MP3 files
  * Added: Last.fm scrobbler will use HTTPS by default
- Refresh deadbeef-drop-documents-installation.patch
- Add deadbeef-fix-includes.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1656936000">- Sync ExcludeArch %ix86 with libdispatch: libdispatch is not being
  buily and as such we don't have the needed dep available.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1667476800">- Update to 1.9.2:
  * Fixed: Many race conditions, deadlocks and crashes
  * Fixed: Crash when reading metadata of some .SPU files
  * Fixed: Config file content was repeated twice
  * Fixed: Default album art max file size increased to 40MB (Dakeryas)
  * Fixed: Reading some DTS files which require a larger buffer when probing
  * Fixed: Noise was played in the beginning of DTS files
  * Fixed: Default cddb server changed to gnudb.gnudb.org:8880
  * Fixed: Crash when playing certain .AY files
  * Fixed: Playlist corruption when sorting by random
  * Fixed: Crash in the sndfile plugin
  * Fixed: Spectrum analyzer samplerate bug
  * Fixed: Visualization buffer out-of-bounds access
  * Fixed: Multichannel down-mixing bug
  * Added: Notification displaying compatibility with KDE 5.23.5
  * Added: GTKUI oscilloscope rendering with anti-aliasing
  * Added: Selection Properties widget configurable to display metadata, properties, or both
  * Added: Toggle Pause action in the Deadbeef.desktop file
  * Added: Confirmation dialog when removing a playlist using hotkey
  * Added: Improved Sort By -&gt; Custom dialog
- Add fix-warning.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1667736000">- Add fix-ffmpeg-5-support.patch: Fix build against ffmpeg 5.0x</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1672574400">- Update to 1.9.4:
  * Fixed: Deadlock when playing network streams
  * Fixed: Handling multi-value genre in ID3v2
  * Fixed: Will fully reinitialize ALSA device when changing output format,
    to be compatible with more DACs
  * Fixed: Duplicate playlist menu item was not showing
  * Fixed: A random crash in visualization code
  * Added: Customizable visualization background color for GTKUI
  * Added: 64-bit seeking support in AAC, ALAC, Sndfile, Musepack, MP3, WMA, Vorbis
  * Added: Embedded album art from OGG files
  * Added: When double clicking a playlist in Playlist browser,
    will play the first track in the shuffle queue,
    according to current settings (pappnu)
  * version 1.9.3
  * Fixed: OpenBSD compatibility / warnings (Brad Smith)
  * Fixed: Crash when loading certain malformed cuesheets
  * Fixed: API behavior change regression causing certain plugins to malfunction
  * Added: Support for building with FFMPEG 5.0 (xuzhen)
- Removed fix-ffmpeg-5-support.patch: not needed anymore
- Fixed deadbeef Help menu entries resulting in file not found errors</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1677240000">- removed fix-warning.patch, not needed anymore
- added pipewire build dependency
- added deadbeef-fix-desktop-file.patch to fix bogus "Play Pause" action
- added upstream deadbeef-fix-libretro-compilation.patch to fix compilation on ARM
- Update to 1.9.5:
  * Fixed: GME chiptune voice muting was affecting converter / replaygain scanner
  * Fixed: SID chiptune voice muting was affecting converter / replaygain scanner
  * Fixed: SID stereo was not working the way it was intended
  * Fixed: Wave format conversion regressions, which could lead to wrong channels mapping
  * Fixed: Converter race condition bug when checking whether a directory exists (dakeryas)
  * Fixed: Album art fetching for tracks with multiple artists
  * Fixed: GTK warning when opening track properties
  * Fixed: Prompting before deleting playlist via middle mouse button
  * Fixed: Album art left/right/center alignment in GTKUI
  * Fixed: Removed embedded album art size limit for ID3v2 tags
  * Fixed: Deadlock when trying to delete files from disk
  * Fixed: Mute functionality for output plugins with their own volume control
  * Fixed: Switching to previous/next track after the current track is removed
  * Fixed: Incorrect playlist affected by hotkeys
  * Fixed: Unsynchronized ID3v2 tag loading (credit: Robin Seth Ekman)
  * Fixed: Spectrum analyzer buffer overflow
  * Fixed: Deadlock when removing multiple selected tracks while one of them is playing
  * Added: Pipewire output plugin (saivert)
  * Added: LibRetro resampling plugin (toadking)
  * Added: Chiptune voice muting in DUMB plugin
  * Added: Improved drawing of spectrum analyzer
  * Added: $itematindex(index,value) function to title formatting, get value by index from multivalue fields</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1683547200">- Add deadbeef-fix-register-cxx17.patch
- Add deadbeef-adplug-use-cxx11.patch</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1709294400">- removed deadbeef-fix-includes.patch. Modify CFLAGS instead
- removed upstream patches:
  * deadbeef-fix-register-cxx17.patch
  * deadbeef-adplug-use-cxx11.patch
  * deadbeef-fix-libretro-compilation.patch
- Update to 1.9.6:
  * Fixed: Drawing spectrum analyzer in discrete frequencies mode
  * Fixed: Handling the option to enter archives when scanning folders (fudanchii)
  * Fixed: Playback performance issue when searching in large playlist
  * Fixed: Possible crash when starting playback with ALSA plugin
  * Fixed: Shuffle albums was not using Album Artist
  * Fixed: Title formatting failure with large calculated values
  * Fixed: Loading of small album art image files
  * Fixed: MP4 parser failing to read/write certain tags correctly
  * Fixed: Handling of title-formatted paths
  * Fixed: A bug when editing metadata in multiple selected tracks
  * Fixed: OSD notification reuse by default, with an option to disable
  * Added: Bit depth override option (HiFiPhile)
  * Added: DSD DoP support for ALSA/FFMPEG plugins (HiFiPhile)
  * Added: $put, $puts, $get title formatting functions (Robin Ekman)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1710849600">- Drop hardcoded '-msse3' in ddb_dsp_libretro (fix non-x86 builds)</changelog>
  <changelog author="olaf@aepfle.de" date="1731326400">- Convert BuildRequires from libfaad-devel to pkgconfig(faad2)
- Support ffmpeg 7.1 with 70ae99463889e191c3d5d0af6ba28e893d73a63f.patch</changelog>
</package>
<package pkgid="73f5d5cf85906637e1ab863b95ed04eda6e13c52a8be539e54f5d1e1d8a84af0e43751cc6ca0e0c6f47ca0560e01c6276dbc5d5efcf3dcad17274feb9dc0c419" name="deadbeef-lang" arch="noarch">
  <version epoch="0" ver="1.9.6" rel="bp160.1.14"/>
  <changelog author="predivan@mts.rs" date="1656763200">- Update to version 1.9.1:
  * Remove the hearts from default titlebar - mainly because large percentage of systems can't display emoji in the title bar.
  * fix LINGUAS and translators.txt to include 'be'
  * translation: restore Belarussian language translation
  * gtkui: exclude medialib files, to avoid broken tarball
  Changes in 1.9.0
  * Fixed: WMA regression which caused corrupt playback
  * Fixed: Deadlock in ALSA plugin
  * Fixed: Mis-detection of raw AAC files as MP4 files
  * Fixed: Handling empty title formatting scripts
  * Fixed: Memory error when dragging playlist via Playlist Browser
  * Fixed: Keyboard nagivation issues across playlist tabs (Saivert)
  * Fixed: Playlist tabs and playlist customized colors bugs (Saivert)
  * Fixed: Paused state was not persisted correctly after force-quitting
  * Fixed: Regression which broke musepack seeking
  * Fixed: Crash when notification artwork could not be found
  * Fixed: Poor performance when saving playlist and configuration files
  * Fixed: sndfile not opening files because of uninitialized memory access bug
  * Fixed: Crash when removing tracks from playlist while they're playing
  * Fixed: Rendering group titles with blank text
  * Fixed: Delay activation of a playlist tab during drag-drop over the tab bar
  * Fixed: ᵣussian and ᵦelarussian languages are no longer supported
  * Added: Long file seeking support for Opus and FFMPEG
  * Added: HTTPS support for vfs_curl in portable builds, via libmbedtls
  * Added: New Scope and Spectrum Analyzer visualizations
  * Added: Visualization appearance preferences pane
  * Added: New album art loader
  * Added: Configurable volume bar scale (dB, linear, cubic) via context menu (Saivert)
  * Added: Title formatting $year(time) function
  * Added: GTK UI for editing a chosen field of multiple selected tracks, in a table interface
  * Added: Creating new playlist via clicking the "+" button in the playlist tab strip (Saivert)
  * Added: Improved DSP preferences GTK UI (Saivert)
  * Added: Improved handling of invalid MP3 files
  * Added: Last.fm scrobbler will use HTTPS by default
- Refresh deadbeef-drop-documents-installation.patch
- Add deadbeef-fix-includes.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1656936000">- Sync ExcludeArch %ix86 with libdispatch: libdispatch is not being
  buily and as such we don't have the needed dep available.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1667476800">- Update to 1.9.2:
  * Fixed: Many race conditions, deadlocks and crashes
  * Fixed: Crash when reading metadata of some .SPU files
  * Fixed: Config file content was repeated twice
  * Fixed: Default album art max file size increased to 40MB (Dakeryas)
  * Fixed: Reading some DTS files which require a larger buffer when probing
  * Fixed: Noise was played in the beginning of DTS files
  * Fixed: Default cddb server changed to gnudb.gnudb.org:8880
  * Fixed: Crash when playing certain .AY files
  * Fixed: Playlist corruption when sorting by random
  * Fixed: Crash in the sndfile plugin
  * Fixed: Spectrum analyzer samplerate bug
  * Fixed: Visualization buffer out-of-bounds access
  * Fixed: Multichannel down-mixing bug
  * Added: Notification displaying compatibility with KDE 5.23.5
  * Added: GTKUI oscilloscope rendering with anti-aliasing
  * Added: Selection Properties widget configurable to display metadata, properties, or both
  * Added: Toggle Pause action in the Deadbeef.desktop file
  * Added: Confirmation dialog when removing a playlist using hotkey
  * Added: Improved Sort By -&gt; Custom dialog
- Add fix-warning.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1667736000">- Add fix-ffmpeg-5-support.patch: Fix build against ffmpeg 5.0x</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1672574400">- Update to 1.9.4:
  * Fixed: Deadlock when playing network streams
  * Fixed: Handling multi-value genre in ID3v2
  * Fixed: Will fully reinitialize ALSA device when changing output format,
    to be compatible with more DACs
  * Fixed: Duplicate playlist menu item was not showing
  * Fixed: A random crash in visualization code
  * Added: Customizable visualization background color for GTKUI
  * Added: 64-bit seeking support in AAC, ALAC, Sndfile, Musepack, MP3, WMA, Vorbis
  * Added: Embedded album art from OGG files
  * Added: When double clicking a playlist in Playlist browser,
    will play the first track in the shuffle queue,
    according to current settings (pappnu)
  * version 1.9.3
  * Fixed: OpenBSD compatibility / warnings (Brad Smith)
  * Fixed: Crash when loading certain malformed cuesheets
  * Fixed: API behavior change regression causing certain plugins to malfunction
  * Added: Support for building with FFMPEG 5.0 (xuzhen)
- Removed fix-ffmpeg-5-support.patch: not needed anymore
- Fixed deadbeef Help menu entries resulting in file not found errors</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1677240000">- removed fix-warning.patch, not needed anymore
- added pipewire build dependency
- added deadbeef-fix-desktop-file.patch to fix bogus "Play Pause" action
- added upstream deadbeef-fix-libretro-compilation.patch to fix compilation on ARM
- Update to 1.9.5:
  * Fixed: GME chiptune voice muting was affecting converter / replaygain scanner
  * Fixed: SID chiptune voice muting was affecting converter / replaygain scanner
  * Fixed: SID stereo was not working the way it was intended
  * Fixed: Wave format conversion regressions, which could lead to wrong channels mapping
  * Fixed: Converter race condition bug when checking whether a directory exists (dakeryas)
  * Fixed: Album art fetching for tracks with multiple artists
  * Fixed: GTK warning when opening track properties
  * Fixed: Prompting before deleting playlist via middle mouse button
  * Fixed: Album art left/right/center alignment in GTKUI
  * Fixed: Removed embedded album art size limit for ID3v2 tags
  * Fixed: Deadlock when trying to delete files from disk
  * Fixed: Mute functionality for output plugins with their own volume control
  * Fixed: Switching to previous/next track after the current track is removed
  * Fixed: Incorrect playlist affected by hotkeys
  * Fixed: Unsynchronized ID3v2 tag loading (credit: Robin Seth Ekman)
  * Fixed: Spectrum analyzer buffer overflow
  * Fixed: Deadlock when removing multiple selected tracks while one of them is playing
  * Added: Pipewire output plugin (saivert)
  * Added: LibRetro resampling plugin (toadking)
  * Added: Chiptune voice muting in DUMB plugin
  * Added: Improved drawing of spectrum analyzer
  * Added: $itematindex(index,value) function to title formatting, get value by index from multivalue fields</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1683547200">- Add deadbeef-fix-register-cxx17.patch
- Add deadbeef-adplug-use-cxx11.patch</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1709294400">- removed deadbeef-fix-includes.patch. Modify CFLAGS instead
- removed upstream patches:
  * deadbeef-fix-register-cxx17.patch
  * deadbeef-adplug-use-cxx11.patch
  * deadbeef-fix-libretro-compilation.patch
- Update to 1.9.6:
  * Fixed: Drawing spectrum analyzer in discrete frequencies mode
  * Fixed: Handling the option to enter archives when scanning folders (fudanchii)
  * Fixed: Playback performance issue when searching in large playlist
  * Fixed: Possible crash when starting playback with ALSA plugin
  * Fixed: Shuffle albums was not using Album Artist
  * Fixed: Title formatting failure with large calculated values
  * Fixed: Loading of small album art image files
  * Fixed: MP4 parser failing to read/write certain tags correctly
  * Fixed: Handling of title-formatted paths
  * Fixed: A bug when editing metadata in multiple selected tracks
  * Fixed: OSD notification reuse by default, with an option to disable
  * Added: Bit depth override option (HiFiPhile)
  * Added: DSD DoP support for ALSA/FFMPEG plugins (HiFiPhile)
  * Added: $put, $puts, $get title formatting functions (Robin Ekman)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1710849600">- Drop hardcoded '-msse3' in ddb_dsp_libretro (fix non-x86 builds)</changelog>
  <changelog author="olaf@aepfle.de" date="1731326400">- Convert BuildRequires from libfaad-devel to pkgconfig(faad2)
- Support ffmpeg 7.1 with 70ae99463889e191c3d5d0af6ba28e893d73a63f.patch</changelog>
</package>
<package pkgid="e7c5b77832b23c55f66521328278660993569996b6c972403b3f933abbba863a387d63cc5650d7192b0680c24c5570b7c3a07589ee8e68ea7864361fa97c5a80" name="deadbeef-plugin-mpris2" arch="x86_64">
  <version epoch="0" ver="1.16" rel="bp160.1.10"/>
  <changelog author="hillwood@opensuse.org" date="1435492800">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1441368000">- Rename package to deadbeef-plugin-mpris2.
- Correct license.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1464436800">- Update to version 1.9:
  * Fix compatibility with GLib &lt; 2.32.
  * Fix starting a paused track via MPRIS2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 1.10:
  * Fix the seek method not returning a reply.
  * Fix the seek method not reading the argument correctly.
    This often led to Skipping to the next or previous track.
  * Fix the --enable-debug configure switch doing nothing.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1556452800">- Update version to 1.12
  * Fix double free
  * Send correct CanSeek
  * Fix duration for radio streams
  * Fix pause handling
  * New features: CanPlay, CanGoPrevious, CanGoNext</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1579262400">- Update version to 1.13
  * Fix raise method
  * Fix missing emit of seeked signal after seek
  * Include LICENCE file in distribution</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1623067200">- Update to version 1.14
  * Use Deadbeef title formating to produce metadata more
    robust/accurate
  * Add "Previous or restart current track" behavior to "Previous"
    action</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1656936000">- Sync ExcludeArch %ix86 with libdispatch: libdispatch is not being
  buily and as such we don't have the needed dep available.</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1696334400">- Update to DeaDBeeF-Player git version 1.16
  * onPlayerSetPropertyHandler: return TRUE when ignoring playback
    configs
    gh#DeaDBeeF-Player/deadbeef-mpris2-plugin#4
  * Update to newest artwork plugin
    gh#DeaDBeeF-Player/deadbeef-mpris2-plugin#1</changelog>
</package>
<package pkgid="c7106e389ef665d85fd364cc36a249ea2ace366136a1518b9ed2b7716bde1f9f10edfe9b337ff8ba570220001f1ef1a2304e964018150e1af1bcb7846bfd65c1" name="dealers-choice" arch="x86_64">
  <version epoch="0" ver="0.0.13" rel="bp160.1.1"/>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754395200">- dealers-choice 0.0.7:
  + Set default maximum raises per round to 3 (config option)
  * Fix discard button being clickable when disabled
  * Increase player action timeout from 20 to 30 seconds
  + The client will now retry server connection for 60 seconds
    before timing out if server is unavailable
  * Fix incorrect hand wins in some cases when there are 3 or more players
  + Add amount won to status message
  - Remove the simulated delay when cards are initially dealt</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754913600">- dealers-choice 0.0.8:
  * Fix: Server does not send turn ids if player 0 disconnects during game
  + Display ping times in lobby
  + After winner declared, replace action timer with "end of game" timer
  + Allow specifying the client/server port via config or cli
  + Allow setting min, med, and max bets via server.conf</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1762948800">- Make it build without %check (boo#1227364)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1773316800">- dealers-choice 0.0.9:
  + Implement California lowball
  + Implement Six-card stud (partially complete)
  + Automatically sort hands
  + Remove cards of player when folded
  + Add a "Dealing" message for dealer when waiting for server to start
  + Disallow raise that is less than previous bet/raise
  + Add server config option: wild_exchange_timeout_ms
  + Add server config option: action_timeout_max (disconnect players
    after n timeouts)
  + Add feedback when some buttons are clicked
  * Increase coin size
  + Add card back patterns
  + Add F11 key for full-screen toggling
  * Bump game protocol to v6
  * bugfix: Infinite checking when first person in a &gt;=3 person game folds</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1774785600">- dealers-choice 0.0.10:
  + Add Texas Hold'em
  * bugfix: Client freezes (infinite loop in layout_cards) when slot-0
  + Connection screen: cancel button, per-attempt timeout, configurable
    retry count (connect.attempts in player config), return to menu on
    failure (#204)
  + Add animated card backs
    player disconnects during a game (#195)
  + Server and client password set via server.conf/player.conf or DC_PASSWORD env var (#187)
  + Add dealer indicator column to lobby player list (black square, red circle if dealer)
  + Play turn notification sound when local player becomes the dealer
  + Play game over sound when winner is determined
  * Fix "waiting" messages sometimes rendering when they shouldn't
  * Fix wrong 5-card hand selected from 6- or 7-card hands when
    multiple subsets share the same rank (kickers and best straight not
    considered); also fix straight selection incorrectly favouring a wheel
    over a higher straight when both are present
  + Implemented Admin kick/ban in the lobby and during the game
  * bugfix: Out-of-bounds read when the last bet-amount button was
    disabled while selected (CID 644890)
  - Remove installation of miniaudio libraries
  ! BREAKING: server.conf bet_minimum/bet_median/bet_maximum replaced by
    a single variable-length list: bet_amounts = list, 100, 250, 500
    (up to 8 values, hotkeys 1-8).</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775044800">- dealers-choice 0.0.11:
  * bugfix: uninitialize miniaudio engine on sound load failure
    Previously called exit() without ma_engine_uninit(), locking the audio
    device and blocking other applications until it was replugged or the
    system was restarted (#198)
  * Change dealer rotation timeout from 60 seconds to 30
  * Add version line to changes entry for v0.0.10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775131200">* Drop cmake build dependency (no longer needed for miniaudio)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1776168000">- dealers-choice 0.0.12
  * Update package description
  + Add dealers-choice-bot: a headless rules-based CLI bot that connects to a
    running server like a regular client. Reads DC_PASSWORD from the
    environment (bot is rejected if the server has no password set).
  + Text input fields: scrolling with cursor navigation (left/right/home/end),
    mid-text insertion, Ctrl+V paste; cursor blink resets on each keypress;
    yellow cursor color for visibility against white text
  + Handle audio device disconnection: when the audio backend has no default
    device to reroute to, the device is stopped; register a miniaudio
    notification callback to detect this and restart the engine when possible
    (#243).
  + Stud games: implement bring-in forced partial bet (bringin_amount in
    server.conf, default 50); subsequent streets open with the player
    holding the best visible hand
  + Deuces wild: server now evaluates wild hands automatically using
    POKEVAL_compare_hands_wild / POKEVAL_evaluate_hand_wild; removed the
    end-of-hand UI selection for wild card replacement and the associated
    exchange button, timeout setting (wild_exchange_timeout_ms), network
    message (MSG_WILD_REPLACEMENT), and server-side exchange logic
  * bugfix: Three busy-waits, high-cpu server usage
  * Require libsodium unconditionally; fix authentication bypass where
    clients could authenticate on password-protected servers without
    libsodium present
  * bugfix: Show clear error on protocol version mismatch
  * Update docker-compose.yml to use DC_PASSWORD and extra arguments when running
    the server
  * Fix coin animation: animate from the player who paid, not the next player
    to act
  * Bump GAME_PROTOCOL_VERSION from 7 to 8</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777032000">- dealers-choice 0.0.13
  * Use system-install canfigger instead of the bundled copy
  + Add "X" quit button (top-right, red) to all four screens (connect, settings,
    lobby, game); ESC is a hotkey for the same action; both paths go through a
    confirmation dialog (SDL_ShowMessageBox) before quitting
  + Draw rounded semi-transparent nameplate panels behind each player's seat info;
    empty seats show a fainter "Open" panel; nick column sized for 15-character
    maximum and left-aligned; all columns vertically centered; uniform column
    widths across all seats
  + Add vignette effect: radial darkening from center to edges for a lamp-lit atmosphere
  + Replace solid-color table background with tiled green felt texture
  + Server: connection rate limiting and per-IP connection cap; loopback
    always exempt; configured via max_connections_per_minute and
    max_connections_per_ip in server.conf (0 = unlimited) (#189)
  + Add --auto-connect: skip the connect dialog and connect immediately on
    startup using host/port from player.conf; ignored if --server is set;
    reverts to normal menu on return from lobby (#253)
  + Coins placed in the pot are rendered at a random rotation angle
  + Add 7-card no peek
  * bugfix: Community cards (Hold'em, Omaha) disappear after a player folds
    (#252)
  * Folded players: preserve cards (face-up or face-down) and grey out the
    player area instead of removing cards when a player folds
  * server.conf: end_of_game_timeout, action_timeout, and dealer_timeout are
    now specified in seconds instead of milliseconds; keys renamed to drop
    the _ms suffix
  * bugfix: Server: nick too long is truncated instead of causing disconnect; client
    and bot no longer include null terminator in nick length; nicks up to 14
    characters are now accepted as expected
  * dealers-choice-bot: add --verbose flag; verbose_printf/verbose_puts at key
    decision points (hand strength, each action, discard count); action name
    output moved into send_player_action so client and bot share the same path
  * Client returns to the connect screen on server disconnect or send failure,
    from both the lobby and game screens (#217, #256)
  * dealers-choice-bot: no longer links against SDL2_ttf or SDL2_image
  * Use canfigger_config_dir() and canfigger_path_join() for config/data
    paths; remove get_config_dir(), join_paths(), and PathconfLimits_t
    from util.c
  * Bump GAME_PROTOCOL_VERSION from 8 to 9</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777464000">- Add 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
  (fixes s390x build / pool/dealers-choice/pulls/1#issuecomment-135113)</changelog>
</package>
<package pkgid="b0a2638da3b505c27baf8e5db93de7d947d928a7a67bddd890084a8f61e1f8040364a6b9a2a72599e5de346a2efb74c3cf319b3297f1c4d9af2a953b96767498" name="dealers-choice" arch="x86_64">
  <version epoch="0" ver="0.0.14" rel="bp160.1.1"/>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754913600">- dealers-choice 0.0.8:
  * Fix: Server does not send turn ids if player 0 disconnects during game
  + Display ping times in lobby
  + After winner declared, replace action timer with "end of game" timer
  + Allow specifying the client/server port via config or cli
  + Allow setting min, med, and max bets via server.conf</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1762948800">- Make it build without %check (boo#1227364)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1773316800">- dealers-choice 0.0.9:
  + Implement California lowball
  + Implement Six-card stud (partially complete)
  + Automatically sort hands
  + Remove cards of player when folded
  + Add a "Dealing" message for dealer when waiting for server to start
  + Disallow raise that is less than previous bet/raise
  + Add server config option: wild_exchange_timeout_ms
  + Add server config option: action_timeout_max (disconnect players
    after n timeouts)
  + Add feedback when some buttons are clicked
  * Increase coin size
  + Add card back patterns
  + Add F11 key for full-screen toggling
  * Bump game protocol to v6
  * bugfix: Infinite checking when first person in a &gt;=3 person game folds</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1774785600">- dealers-choice 0.0.10:
  + Add Texas Hold'em
  * bugfix: Client freezes (infinite loop in layout_cards) when slot-0
  + Connection screen: cancel button, per-attempt timeout, configurable
    retry count (connect.attempts in player config), return to menu on
    failure (#204)
  + Add animated card backs
    player disconnects during a game (#195)
  + Server and client password set via server.conf/player.conf or DC_PASSWORD env var (#187)
  + Add dealer indicator column to lobby player list (black square, red circle if dealer)
  + Play turn notification sound when local player becomes the dealer
  + Play game over sound when winner is determined
  * Fix "waiting" messages sometimes rendering when they shouldn't
  * Fix wrong 5-card hand selected from 6- or 7-card hands when
    multiple subsets share the same rank (kickers and best straight not
    considered); also fix straight selection incorrectly favouring a wheel
    over a higher straight when both are present
  + Implemented Admin kick/ban in the lobby and during the game
  * bugfix: Out-of-bounds read when the last bet-amount button was
    disabled while selected (CID 644890)
  - Remove installation of miniaudio libraries
  ! BREAKING: server.conf bet_minimum/bet_median/bet_maximum replaced by
    a single variable-length list: bet_amounts = list, 100, 250, 500
    (up to 8 values, hotkeys 1-8).</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775044800">- dealers-choice 0.0.11:
  * bugfix: uninitialize miniaudio engine on sound load failure
    Previously called exit() without ma_engine_uninit(), locking the audio
    device and blocking other applications until it was replugged or the
    system was restarted (#198)
  * Change dealer rotation timeout from 60 seconds to 30
  * Add version line to changes entry for v0.0.10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775131200">* Drop cmake build dependency (no longer needed for miniaudio)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1776168000">- dealers-choice 0.0.12
  * Update package description
  + Add dealers-choice-bot: a headless rules-based CLI bot that connects to a
    running server like a regular client. Reads DC_PASSWORD from the
    environment (bot is rejected if the server has no password set).
  + Text input fields: scrolling with cursor navigation (left/right/home/end),
    mid-text insertion, Ctrl+V paste; cursor blink resets on each keypress;
    yellow cursor color for visibility against white text
  + Handle audio device disconnection: when the audio backend has no default
    device to reroute to, the device is stopped; register a miniaudio
    notification callback to detect this and restart the engine when possible
    (#243).
  + Stud games: implement bring-in forced partial bet (bringin_amount in
    server.conf, default 50); subsequent streets open with the player
    holding the best visible hand
  + Deuces wild: server now evaluates wild hands automatically using
    POKEVAL_compare_hands_wild / POKEVAL_evaluate_hand_wild; removed the
    end-of-hand UI selection for wild card replacement and the associated
    exchange button, timeout setting (wild_exchange_timeout_ms), network
    message (MSG_WILD_REPLACEMENT), and server-side exchange logic
  * bugfix: Three busy-waits, high-cpu server usage
  * Require libsodium unconditionally; fix authentication bypass where
    clients could authenticate on password-protected servers without
    libsodium present
  * bugfix: Show clear error on protocol version mismatch
  * Update docker-compose.yml to use DC_PASSWORD and extra arguments when running
    the server
  * Fix coin animation: animate from the player who paid, not the next player
    to act
  * Bump GAME_PROTOCOL_VERSION from 7 to 8</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777032000">- dealers-choice 0.0.13
  * Use system-install canfigger instead of the bundled copy
  + Add "X" quit button (top-right, red) to all four screens (connect, settings,
    lobby, game); ESC is a hotkey for the same action; both paths go through a
    confirmation dialog (SDL_ShowMessageBox) before quitting
  + Draw rounded semi-transparent nameplate panels behind each player's seat info;
    empty seats show a fainter "Open" panel; nick column sized for 15-character
    maximum and left-aligned; all columns vertically centered; uniform column
    widths across all seats
  + Add vignette effect: radial darkening from center to edges for a lamp-lit atmosphere
  + Replace solid-color table background with tiled green felt texture
  + Server: connection rate limiting and per-IP connection cap; loopback
    always exempt; configured via max_connections_per_minute and
    max_connections_per_ip in server.conf (0 = unlimited) (#189)
  + Add --auto-connect: skip the connect dialog and connect immediately on
    startup using host/port from player.conf; ignored if --server is set;
    reverts to normal menu on return from lobby (#253)
  + Coins placed in the pot are rendered at a random rotation angle
  + Add 7-card no peek
  * bugfix: Community cards (Hold'em, Omaha) disappear after a player folds
    (#252)
  * Folded players: preserve cards (face-up or face-down) and grey out the
    player area instead of removing cards when a player folds
  * server.conf: end_of_game_timeout, action_timeout, and dealer_timeout are
    now specified in seconds instead of milliseconds; keys renamed to drop
    the _ms suffix
  * bugfix: Server: nick too long is truncated instead of causing disconnect; client
    and bot no longer include null terminator in nick length; nicks up to 14
    characters are now accepted as expected
  * dealers-choice-bot: add --verbose flag; verbose_printf/verbose_puts at key
    decision points (hand strength, each action, discard count); action name
    output moved into send_player_action so client and bot share the same path
  * Client returns to the connect screen on server disconnect or send failure,
    from both the lobby and game screens (#217, #256)
  * dealers-choice-bot: no longer links against SDL2_ttf or SDL2_image
  * Use canfigger_config_dir() and canfigger_path_join() for config/data
    paths; remove get_config_dir(), join_paths(), and PathconfLimits_t
    from util.c
  * Bump GAME_PROTOCOL_VERSION from 8 to 9</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777464000">- Add 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
  (fixes s390x build / pool/dealers-choice/pulls/1#issuecomment-135113)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1781006400">- dealers-choice 0.0.14
  - Drop 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
    (fixed upstream)
  * Replace SDL2_net with tcpme (thin POSIX/Winsock wrapper)
  + Game-play display overhaul: relative seating (local bottom-centre,
    opponents clockwise), a bottom dashboard, an anchor-based layout system,
    and SVG card suits
  + Configurable game-play action hotkeys via a press-to-bind Hotkeys screen
    (#102)
  + The seat that opens each betting round is marked in its nameplate (#264)
  + Optional timestamped diagnostic logging (--log-file): server slow-send /
    high-ping / slow-action warnings and client frame-stall / slow-audio
    warnings, all gated by --verbose (#307)
  * regression fix: discard-phase timeout now reports 0 cards drawn (#265)
  * Fix OpenBSD build (#270)
  * server: skip stray MSG_PING_RESPONSE frames buffered from the lobby,
    fixing a spurious disconnect on slow/emulated hardware
  * Move deckhandler and pokeval inline (no longer meson subprojects)
  * rank-aware wild tiebreak for THREE/FOUR_OF_A_KIND, FULL_HOUSE,
    FIVE_OF_A_KIND
  * wild-aware tiebreak for PAIR and TWO_PAIR
  * fix wild kicker comparison for THREE/FOUR_OF_A_KIND at equal trip/quad
    value
  * wild-aware tiebreak for STRAIGHT / STRAIGHT_FLUSH
  * substitute wild = ACE_HIGH for FLUSH tiebreak
  * rank-aware PAIR/TWO_PAIR tiebreak in update_best_5card (Omaha / 7-card
    picker)
  * route update_best_wild same-rank tiebreak through the wild-aware compare
  * bugfix: run audio init on a background thread with silent fallback, so
    a blocked audio backend can't freeze the window
  * Bump GAME_PROTOCOL_VERSION from 9 to 10</changelog>
</package>
<package pkgid="e9e1f3a7c431e9c63cf8ff2a406b8dc27a4e9fa2cf12fe85e6b37fa9b3b99ed55e425cb92c75c780fdff9767abf8507012b3115748a5e4b5b483ea23cf6d4318" name="dealers-choice" arch="x86_64">
  <version epoch="0" ver="0.0.15" rel="bp160.1.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1762948800">- Make it build without %check (boo#1227364)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1773316800">- dealers-choice 0.0.9:
  + Implement California lowball
  + Implement Six-card stud (partially complete)
  + Automatically sort hands
  + Remove cards of player when folded
  + Add a "Dealing" message for dealer when waiting for server to start
  + Disallow raise that is less than previous bet/raise
  + Add server config option: wild_exchange_timeout_ms
  + Add server config option: action_timeout_max (disconnect players
    after n timeouts)
  + Add feedback when some buttons are clicked
  * Increase coin size
  + Add card back patterns
  + Add F11 key for full-screen toggling
  * Bump game protocol to v6
  * bugfix: Infinite checking when first person in a &gt;=3 person game folds</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1774785600">- dealers-choice 0.0.10:
  + Add Texas Hold'em
  * bugfix: Client freezes (infinite loop in layout_cards) when slot-0
  + Connection screen: cancel button, per-attempt timeout, configurable
    retry count (connect.attempts in player config), return to menu on
    failure (#204)
  + Add animated card backs
    player disconnects during a game (#195)
  + Server and client password set via server.conf/player.conf or DC_PASSWORD env var (#187)
  + Add dealer indicator column to lobby player list (black square, red circle if dealer)
  + Play turn notification sound when local player becomes the dealer
  + Play game over sound when winner is determined
  * Fix "waiting" messages sometimes rendering when they shouldn't
  * Fix wrong 5-card hand selected from 6- or 7-card hands when
    multiple subsets share the same rank (kickers and best straight not
    considered); also fix straight selection incorrectly favouring a wheel
    over a higher straight when both are present
  + Implemented Admin kick/ban in the lobby and during the game
  * bugfix: Out-of-bounds read when the last bet-amount button was
    disabled while selected (CID 644890)
  - Remove installation of miniaudio libraries
  ! BREAKING: server.conf bet_minimum/bet_median/bet_maximum replaced by
    a single variable-length list: bet_amounts = list, 100, 250, 500
    (up to 8 values, hotkeys 1-8).</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775044800">- dealers-choice 0.0.11:
  * bugfix: uninitialize miniaudio engine on sound load failure
    Previously called exit() without ma_engine_uninit(), locking the audio
    device and blocking other applications until it was replugged or the
    system was restarted (#198)
  * Change dealer rotation timeout from 60 seconds to 30
  * Add version line to changes entry for v0.0.10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775131200">* Drop cmake build dependency (no longer needed for miniaudio)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1776168000">- dealers-choice 0.0.12
  * Update package description
  + Add dealers-choice-bot: a headless rules-based CLI bot that connects to a
    running server like a regular client. Reads DC_PASSWORD from the
    environment (bot is rejected if the server has no password set).
  + Text input fields: scrolling with cursor navigation (left/right/home/end),
    mid-text insertion, Ctrl+V paste; cursor blink resets on each keypress;
    yellow cursor color for visibility against white text
  + Handle audio device disconnection: when the audio backend has no default
    device to reroute to, the device is stopped; register a miniaudio
    notification callback to detect this and restart the engine when possible
    (#243).
  + Stud games: implement bring-in forced partial bet (bringin_amount in
    server.conf, default 50); subsequent streets open with the player
    holding the best visible hand
  + Deuces wild: server now evaluates wild hands automatically using
    POKEVAL_compare_hands_wild / POKEVAL_evaluate_hand_wild; removed the
    end-of-hand UI selection for wild card replacement and the associated
    exchange button, timeout setting (wild_exchange_timeout_ms), network
    message (MSG_WILD_REPLACEMENT), and server-side exchange logic
  * bugfix: Three busy-waits, high-cpu server usage
  * Require libsodium unconditionally; fix authentication bypass where
    clients could authenticate on password-protected servers without
    libsodium present
  * bugfix: Show clear error on protocol version mismatch
  * Update docker-compose.yml to use DC_PASSWORD and extra arguments when running
    the server
  * Fix coin animation: animate from the player who paid, not the next player
    to act
  * Bump GAME_PROTOCOL_VERSION from 7 to 8</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777032000">- dealers-choice 0.0.13
  * Use system-install canfigger instead of the bundled copy
  + Add "X" quit button (top-right, red) to all four screens (connect, settings,
    lobby, game); ESC is a hotkey for the same action; both paths go through a
    confirmation dialog (SDL_ShowMessageBox) before quitting
  + Draw rounded semi-transparent nameplate panels behind each player's seat info;
    empty seats show a fainter "Open" panel; nick column sized for 15-character
    maximum and left-aligned; all columns vertically centered; uniform column
    widths across all seats
  + Add vignette effect: radial darkening from center to edges for a lamp-lit atmosphere
  + Replace solid-color table background with tiled green felt texture
  + Server: connection rate limiting and per-IP connection cap; loopback
    always exempt; configured via max_connections_per_minute and
    max_connections_per_ip in server.conf (0 = unlimited) (#189)
  + Add --auto-connect: skip the connect dialog and connect immediately on
    startup using host/port from player.conf; ignored if --server is set;
    reverts to normal menu on return from lobby (#253)
  + Coins placed in the pot are rendered at a random rotation angle
  + Add 7-card no peek
  * bugfix: Community cards (Hold'em, Omaha) disappear after a player folds
    (#252)
  * Folded players: preserve cards (face-up or face-down) and grey out the
    player area instead of removing cards when a player folds
  * server.conf: end_of_game_timeout, action_timeout, and dealer_timeout are
    now specified in seconds instead of milliseconds; keys renamed to drop
    the _ms suffix
  * bugfix: Server: nick too long is truncated instead of causing disconnect; client
    and bot no longer include null terminator in nick length; nicks up to 14
    characters are now accepted as expected
  * dealers-choice-bot: add --verbose flag; verbose_printf/verbose_puts at key
    decision points (hand strength, each action, discard count); action name
    output moved into send_player_action so client and bot share the same path
  * Client returns to the connect screen on server disconnect or send failure,
    from both the lobby and game screens (#217, #256)
  * dealers-choice-bot: no longer links against SDL2_ttf or SDL2_image
  * Use canfigger_config_dir() and canfigger_path_join() for config/data
    paths; remove get_config_dir(), join_paths(), and PathconfLimits_t
    from util.c
  * Bump GAME_PROTOCOL_VERSION from 8 to 9</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777464000">- Add 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
  (fixes s390x build / pool/dealers-choice/pulls/1#issuecomment-135113)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1781006400">- dealers-choice 0.0.14
  - Drop 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
    (fixed upstream)
  * Replace SDL2_net with tcpme (thin POSIX/Winsock wrapper)
  + Game-play display overhaul: relative seating (local bottom-centre,
    opponents clockwise), a bottom dashboard, an anchor-based layout system,
    and SVG card suits
  + Configurable game-play action hotkeys via a press-to-bind Hotkeys screen
    (#102)
  + The seat that opens each betting round is marked in its nameplate (#264)
  + Optional timestamped diagnostic logging (--log-file): server slow-send /
    high-ping / slow-action warnings and client frame-stall / slow-audio
    warnings, all gated by --verbose (#307)
  * regression fix: discard-phase timeout now reports 0 cards drawn (#265)
  * Fix OpenBSD build (#270)
  * server: skip stray MSG_PING_RESPONSE frames buffered from the lobby,
    fixing a spurious disconnect on slow/emulated hardware
  * Move deckhandler and pokeval inline (no longer meson subprojects)
  * rank-aware wild tiebreak for THREE/FOUR_OF_A_KIND, FULL_HOUSE,
    FIVE_OF_A_KIND
  * wild-aware tiebreak for PAIR and TWO_PAIR
  * fix wild kicker comparison for THREE/FOUR_OF_A_KIND at equal trip/quad
    value
  * wild-aware tiebreak for STRAIGHT / STRAIGHT_FLUSH
  * substitute wild = ACE_HIGH for FLUSH tiebreak
  * rank-aware PAIR/TWO_PAIR tiebreak in update_best_5card (Omaha / 7-card
    picker)
  * route update_best_wild same-rank tiebreak through the wild-aware compare
  * bugfix: run audio init on a background thread with silent fallback, so
    a blocked audio backend can't freeze the window
  * Bump GAME_PROTOCOL_VERSION from 9 to 10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1781524800">- dealers-choice 0.0.15:
  * regression fix: joining a hand in progress no longer crashes the client
  * deckhandler: shuffle and recycle the discard pile when the deck runs out
    mid-draw, fixing duplicate cards dealt in multi-player draw games
  * pokeval: fix California lowball tie-breaks</changelog>
</package>
<package pkgid="dbbaa5c6e5dabd2ca02c94a95ec6f7a49fc95ca2b68a5a909618af84f89bdb22ab928397f9f7e9b65fce70048c9a711a9b19f80164dba5a7be5cbcd56c6d4002" name="dealers-choice" arch="x86_64">
  <version epoch="0" ver="0.0.8" rel="bp160.1.2"/>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1751976000">- dealers-choice 0.0.5, initial package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1752062400">- Use pkgconfig() BuildRequires to be more impervious to renames.</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1752408000">- dealers-choice 0.0.6:
  + Implement Deuces Wild option
  * Fix tie handling
  * Reduce client console output messages
  + Partially implement 7-card stud
  + Add optional 'language' setting (https://dealer-s-choice.github.io/docs/CONFIG.html)
  * Network Protocol bumped to 3
  + Add coin animation</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1752494400">- Fix lint warnings
- Fix directory ownership error
- Enable tests
- Update (fix) description</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754395200">- dealers-choice 0.0.7:
  + Set default maximum raises per round to 3 (config option)
  * Fix discard button being clickable when disabled
  * Increase player action timeout from 20 to 30 seconds
  + The client will now retry server connection for 60 seconds
    before timing out if server is unavailable
  * Fix incorrect hand wins in some cases when there are 3 or more players
  + Add amount won to status message
  - Remove the simulated delay when cards are initially dealt</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754913600">- dealers-choice 0.0.8:
  * Fix: Server does not send turn ids if player 0 disconnects during game
  + Display ping times in lobby
  + After winner declared, replace action timer with "end of game" timer
  + Allow specifying the client/server port via config or cli
  + Allow setting min, med, and max bets via server.conf</changelog>
</package>
<package pkgid="64e6da9310f86fb3380c8c9f3dfddece517a2d194f42f17a83281bfe3297f0799d414c621063e23a80b77450c5d20f8ebabb04dea4e2a4f45764ddd5df915bc9" name="dealers-choice-lang" arch="noarch">
  <version epoch="0" ver="0.0.13" rel="bp160.1.1"/>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754395200">- dealers-choice 0.0.7:
  + Set default maximum raises per round to 3 (config option)
  * Fix discard button being clickable when disabled
  * Increase player action timeout from 20 to 30 seconds
  + The client will now retry server connection for 60 seconds
    before timing out if server is unavailable
  * Fix incorrect hand wins in some cases when there are 3 or more players
  + Add amount won to status message
  - Remove the simulated delay when cards are initially dealt</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754913600">- dealers-choice 0.0.8:
  * Fix: Server does not send turn ids if player 0 disconnects during game
  + Display ping times in lobby
  + After winner declared, replace action timer with "end of game" timer
  + Allow specifying the client/server port via config or cli
  + Allow setting min, med, and max bets via server.conf</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1762948800">- Make it build without %check (boo#1227364)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1773316800">- dealers-choice 0.0.9:
  + Implement California lowball
  + Implement Six-card stud (partially complete)
  + Automatically sort hands
  + Remove cards of player when folded
  + Add a "Dealing" message for dealer when waiting for server to start
  + Disallow raise that is less than previous bet/raise
  + Add server config option: wild_exchange_timeout_ms
  + Add server config option: action_timeout_max (disconnect players
    after n timeouts)
  + Add feedback when some buttons are clicked
  * Increase coin size
  + Add card back patterns
  + Add F11 key for full-screen toggling
  * Bump game protocol to v6
  * bugfix: Infinite checking when first person in a &gt;=3 person game folds</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1774785600">- dealers-choice 0.0.10:
  + Add Texas Hold'em
  * bugfix: Client freezes (infinite loop in layout_cards) when slot-0
  + Connection screen: cancel button, per-attempt timeout, configurable
    retry count (connect.attempts in player config), return to menu on
    failure (#204)
  + Add animated card backs
    player disconnects during a game (#195)
  + Server and client password set via server.conf/player.conf or DC_PASSWORD env var (#187)
  + Add dealer indicator column to lobby player list (black square, red circle if dealer)
  + Play turn notification sound when local player becomes the dealer
  + Play game over sound when winner is determined
  * Fix "waiting" messages sometimes rendering when they shouldn't
  * Fix wrong 5-card hand selected from 6- or 7-card hands when
    multiple subsets share the same rank (kickers and best straight not
    considered); also fix straight selection incorrectly favouring a wheel
    over a higher straight when both are present
  + Implemented Admin kick/ban in the lobby and during the game
  * bugfix: Out-of-bounds read when the last bet-amount button was
    disabled while selected (CID 644890)
  - Remove installation of miniaudio libraries
  ! BREAKING: server.conf bet_minimum/bet_median/bet_maximum replaced by
    a single variable-length list: bet_amounts = list, 100, 250, 500
    (up to 8 values, hotkeys 1-8).</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775044800">- dealers-choice 0.0.11:
  * bugfix: uninitialize miniaudio engine on sound load failure
    Previously called exit() without ma_engine_uninit(), locking the audio
    device and blocking other applications until it was replugged or the
    system was restarted (#198)
  * Change dealer rotation timeout from 60 seconds to 30
  * Add version line to changes entry for v0.0.10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775131200">* Drop cmake build dependency (no longer needed for miniaudio)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1776168000">- dealers-choice 0.0.12
  * Update package description
  + Add dealers-choice-bot: a headless rules-based CLI bot that connects to a
    running server like a regular client. Reads DC_PASSWORD from the
    environment (bot is rejected if the server has no password set).
  + Text input fields: scrolling with cursor navigation (left/right/home/end),
    mid-text insertion, Ctrl+V paste; cursor blink resets on each keypress;
    yellow cursor color for visibility against white text
  + Handle audio device disconnection: when the audio backend has no default
    device to reroute to, the device is stopped; register a miniaudio
    notification callback to detect this and restart the engine when possible
    (#243).
  + Stud games: implement bring-in forced partial bet (bringin_amount in
    server.conf, default 50); subsequent streets open with the player
    holding the best visible hand
  + Deuces wild: server now evaluates wild hands automatically using
    POKEVAL_compare_hands_wild / POKEVAL_evaluate_hand_wild; removed the
    end-of-hand UI selection for wild card replacement and the associated
    exchange button, timeout setting (wild_exchange_timeout_ms), network
    message (MSG_WILD_REPLACEMENT), and server-side exchange logic
  * bugfix: Three busy-waits, high-cpu server usage
  * Require libsodium unconditionally; fix authentication bypass where
    clients could authenticate on password-protected servers without
    libsodium present
  * bugfix: Show clear error on protocol version mismatch
  * Update docker-compose.yml to use DC_PASSWORD and extra arguments when running
    the server
  * Fix coin animation: animate from the player who paid, not the next player
    to act
  * Bump GAME_PROTOCOL_VERSION from 7 to 8</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777032000">- dealers-choice 0.0.13
  * Use system-install canfigger instead of the bundled copy
  + Add "X" quit button (top-right, red) to all four screens (connect, settings,
    lobby, game); ESC is a hotkey for the same action; both paths go through a
    confirmation dialog (SDL_ShowMessageBox) before quitting
  + Draw rounded semi-transparent nameplate panels behind each player's seat info;
    empty seats show a fainter "Open" panel; nick column sized for 15-character
    maximum and left-aligned; all columns vertically centered; uniform column
    widths across all seats
  + Add vignette effect: radial darkening from center to edges for a lamp-lit atmosphere
  + Replace solid-color table background with tiled green felt texture
  + Server: connection rate limiting and per-IP connection cap; loopback
    always exempt; configured via max_connections_per_minute and
    max_connections_per_ip in server.conf (0 = unlimited) (#189)
  + Add --auto-connect: skip the connect dialog and connect immediately on
    startup using host/port from player.conf; ignored if --server is set;
    reverts to normal menu on return from lobby (#253)
  + Coins placed in the pot are rendered at a random rotation angle
  + Add 7-card no peek
  * bugfix: Community cards (Hold'em, Omaha) disappear after a player folds
    (#252)
  * Folded players: preserve cards (face-up or face-down) and grey out the
    player area instead of removing cards when a player folds
  * server.conf: end_of_game_timeout, action_timeout, and dealer_timeout are
    now specified in seconds instead of milliseconds; keys renamed to drop
    the _ms suffix
  * bugfix: Server: nick too long is truncated instead of causing disconnect; client
    and bot no longer include null terminator in nick length; nicks up to 14
    characters are now accepted as expected
  * dealers-choice-bot: add --verbose flag; verbose_printf/verbose_puts at key
    decision points (hand strength, each action, discard count); action name
    output moved into send_player_action so client and bot share the same path
  * Client returns to the connect screen on server disconnect or send failure,
    from both the lobby and game screens (#217, #256)
  * dealers-choice-bot: no longer links against SDL2_ttf or SDL2_image
  * Use canfigger_config_dir() and canfigger_path_join() for config/data
    paths; remove get_config_dir(), join_paths(), and PathconfLimits_t
    from util.c
  * Bump GAME_PROTOCOL_VERSION from 8 to 9</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777464000">- Add 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
  (fixes s390x build / pool/dealers-choice/pulls/1#issuecomment-135113)</changelog>
</package>
<package pkgid="42c04510fe83a38901e5aca22514604fbc76d0b3a247572a453320376452904a371668ac7fca5add54c82f2819c1ddca74bac48c0cecbd2ec51b5e557d15da49" name="dealers-choice-lang" arch="noarch">
  <version epoch="0" ver="0.0.14" rel="bp160.1.1"/>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754913600">- dealers-choice 0.0.8:
  * Fix: Server does not send turn ids if player 0 disconnects during game
  + Display ping times in lobby
  + After winner declared, replace action timer with "end of game" timer
  + Allow specifying the client/server port via config or cli
  + Allow setting min, med, and max bets via server.conf</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1762948800">- Make it build without %check (boo#1227364)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1773316800">- dealers-choice 0.0.9:
  + Implement California lowball
  + Implement Six-card stud (partially complete)
  + Automatically sort hands
  + Remove cards of player when folded
  + Add a "Dealing" message for dealer when waiting for server to start
  + Disallow raise that is less than previous bet/raise
  + Add server config option: wild_exchange_timeout_ms
  + Add server config option: action_timeout_max (disconnect players
    after n timeouts)
  + Add feedback when some buttons are clicked
  * Increase coin size
  + Add card back patterns
  + Add F11 key for full-screen toggling
  * Bump game protocol to v6
  * bugfix: Infinite checking when first person in a &gt;=3 person game folds</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1774785600">- dealers-choice 0.0.10:
  + Add Texas Hold'em
  * bugfix: Client freezes (infinite loop in layout_cards) when slot-0
  + Connection screen: cancel button, per-attempt timeout, configurable
    retry count (connect.attempts in player config), return to menu on
    failure (#204)
  + Add animated card backs
    player disconnects during a game (#195)
  + Server and client password set via server.conf/player.conf or DC_PASSWORD env var (#187)
  + Add dealer indicator column to lobby player list (black square, red circle if dealer)
  + Play turn notification sound when local player becomes the dealer
  + Play game over sound when winner is determined
  * Fix "waiting" messages sometimes rendering when they shouldn't
  * Fix wrong 5-card hand selected from 6- or 7-card hands when
    multiple subsets share the same rank (kickers and best straight not
    considered); also fix straight selection incorrectly favouring a wheel
    over a higher straight when both are present
  + Implemented Admin kick/ban in the lobby and during the game
  * bugfix: Out-of-bounds read when the last bet-amount button was
    disabled while selected (CID 644890)
  - Remove installation of miniaudio libraries
  ! BREAKING: server.conf bet_minimum/bet_median/bet_maximum replaced by
    a single variable-length list: bet_amounts = list, 100, 250, 500
    (up to 8 values, hotkeys 1-8).</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775044800">- dealers-choice 0.0.11:
  * bugfix: uninitialize miniaudio engine on sound load failure
    Previously called exit() without ma_engine_uninit(), locking the audio
    device and blocking other applications until it was replugged or the
    system was restarted (#198)
  * Change dealer rotation timeout from 60 seconds to 30
  * Add version line to changes entry for v0.0.10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775131200">* Drop cmake build dependency (no longer needed for miniaudio)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1776168000">- dealers-choice 0.0.12
  * Update package description
  + Add dealers-choice-bot: a headless rules-based CLI bot that connects to a
    running server like a regular client. Reads DC_PASSWORD from the
    environment (bot is rejected if the server has no password set).
  + Text input fields: scrolling with cursor navigation (left/right/home/end),
    mid-text insertion, Ctrl+V paste; cursor blink resets on each keypress;
    yellow cursor color for visibility against white text
  + Handle audio device disconnection: when the audio backend has no default
    device to reroute to, the device is stopped; register a miniaudio
    notification callback to detect this and restart the engine when possible
    (#243).
  + Stud games: implement bring-in forced partial bet (bringin_amount in
    server.conf, default 50); subsequent streets open with the player
    holding the best visible hand
  + Deuces wild: server now evaluates wild hands automatically using
    POKEVAL_compare_hands_wild / POKEVAL_evaluate_hand_wild; removed the
    end-of-hand UI selection for wild card replacement and the associated
    exchange button, timeout setting (wild_exchange_timeout_ms), network
    message (MSG_WILD_REPLACEMENT), and server-side exchange logic
  * bugfix: Three busy-waits, high-cpu server usage
  * Require libsodium unconditionally; fix authentication bypass where
    clients could authenticate on password-protected servers without
    libsodium present
  * bugfix: Show clear error on protocol version mismatch
  * Update docker-compose.yml to use DC_PASSWORD and extra arguments when running
    the server
  * Fix coin animation: animate from the player who paid, not the next player
    to act
  * Bump GAME_PROTOCOL_VERSION from 7 to 8</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777032000">- dealers-choice 0.0.13
  * Use system-install canfigger instead of the bundled copy
  + Add "X" quit button (top-right, red) to all four screens (connect, settings,
    lobby, game); ESC is a hotkey for the same action; both paths go through a
    confirmation dialog (SDL_ShowMessageBox) before quitting
  + Draw rounded semi-transparent nameplate panels behind each player's seat info;
    empty seats show a fainter "Open" panel; nick column sized for 15-character
    maximum and left-aligned; all columns vertically centered; uniform column
    widths across all seats
  + Add vignette effect: radial darkening from center to edges for a lamp-lit atmosphere
  + Replace solid-color table background with tiled green felt texture
  + Server: connection rate limiting and per-IP connection cap; loopback
    always exempt; configured via max_connections_per_minute and
    max_connections_per_ip in server.conf (0 = unlimited) (#189)
  + Add --auto-connect: skip the connect dialog and connect immediately on
    startup using host/port from player.conf; ignored if --server is set;
    reverts to normal menu on return from lobby (#253)
  + Coins placed in the pot are rendered at a random rotation angle
  + Add 7-card no peek
  * bugfix: Community cards (Hold'em, Omaha) disappear after a player folds
    (#252)
  * Folded players: preserve cards (face-up or face-down) and grey out the
    player area instead of removing cards when a player folds
  * server.conf: end_of_game_timeout, action_timeout, and dealer_timeout are
    now specified in seconds instead of milliseconds; keys renamed to drop
    the _ms suffix
  * bugfix: Server: nick too long is truncated instead of causing disconnect; client
    and bot no longer include null terminator in nick length; nicks up to 14
    characters are now accepted as expected
  * dealers-choice-bot: add --verbose flag; verbose_printf/verbose_puts at key
    decision points (hand strength, each action, discard count); action name
    output moved into send_player_action so client and bot share the same path
  * Client returns to the connect screen on server disconnect or send failure,
    from both the lobby and game screens (#217, #256)
  * dealers-choice-bot: no longer links against SDL2_ttf or SDL2_image
  * Use canfigger_config_dir() and canfigger_path_join() for config/data
    paths; remove get_config_dir(), join_paths(), and PathconfLimits_t
    from util.c
  * Bump GAME_PROTOCOL_VERSION from 8 to 9</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777464000">- Add 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
  (fixes s390x build / pool/dealers-choice/pulls/1#issuecomment-135113)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1781006400">- dealers-choice 0.0.14
  - Drop 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
    (fixed upstream)
  * Replace SDL2_net with tcpme (thin POSIX/Winsock wrapper)
  + Game-play display overhaul: relative seating (local bottom-centre,
    opponents clockwise), a bottom dashboard, an anchor-based layout system,
    and SVG card suits
  + Configurable game-play action hotkeys via a press-to-bind Hotkeys screen
    (#102)
  + The seat that opens each betting round is marked in its nameplate (#264)
  + Optional timestamped diagnostic logging (--log-file): server slow-send /
    high-ping / slow-action warnings and client frame-stall / slow-audio
    warnings, all gated by --verbose (#307)
  * regression fix: discard-phase timeout now reports 0 cards drawn (#265)
  * Fix OpenBSD build (#270)
  * server: skip stray MSG_PING_RESPONSE frames buffered from the lobby,
    fixing a spurious disconnect on slow/emulated hardware
  * Move deckhandler and pokeval inline (no longer meson subprojects)
  * rank-aware wild tiebreak for THREE/FOUR_OF_A_KIND, FULL_HOUSE,
    FIVE_OF_A_KIND
  * wild-aware tiebreak for PAIR and TWO_PAIR
  * fix wild kicker comparison for THREE/FOUR_OF_A_KIND at equal trip/quad
    value
  * wild-aware tiebreak for STRAIGHT / STRAIGHT_FLUSH
  * substitute wild = ACE_HIGH for FLUSH tiebreak
  * rank-aware PAIR/TWO_PAIR tiebreak in update_best_5card (Omaha / 7-card
    picker)
  * route update_best_wild same-rank tiebreak through the wild-aware compare
  * bugfix: run audio init on a background thread with silent fallback, so
    a blocked audio backend can't freeze the window
  * Bump GAME_PROTOCOL_VERSION from 9 to 10</changelog>
</package>
<package pkgid="4f62d71b0c2d17e7c588443df0afc3cbacf5da5c850dabf50f177e5796235c64030800a0ab5001c06c46f3cc44054300a36f3cd9803ea2c7f09739449140ef2e" name="dealers-choice-lang" arch="noarch">
  <version epoch="0" ver="0.0.15" rel="bp160.1.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1762948800">- Make it build without %check (boo#1227364)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1773316800">- dealers-choice 0.0.9:
  + Implement California lowball
  + Implement Six-card stud (partially complete)
  + Automatically sort hands
  + Remove cards of player when folded
  + Add a "Dealing" message for dealer when waiting for server to start
  + Disallow raise that is less than previous bet/raise
  + Add server config option: wild_exchange_timeout_ms
  + Add server config option: action_timeout_max (disconnect players
    after n timeouts)
  + Add feedback when some buttons are clicked
  * Increase coin size
  + Add card back patterns
  + Add F11 key for full-screen toggling
  * Bump game protocol to v6
  * bugfix: Infinite checking when first person in a &gt;=3 person game folds</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1774785600">- dealers-choice 0.0.10:
  + Add Texas Hold'em
  * bugfix: Client freezes (infinite loop in layout_cards) when slot-0
  + Connection screen: cancel button, per-attempt timeout, configurable
    retry count (connect.attempts in player config), return to menu on
    failure (#204)
  + Add animated card backs
    player disconnects during a game (#195)
  + Server and client password set via server.conf/player.conf or DC_PASSWORD env var (#187)
  + Add dealer indicator column to lobby player list (black square, red circle if dealer)
  + Play turn notification sound when local player becomes the dealer
  + Play game over sound when winner is determined
  * Fix "waiting" messages sometimes rendering when they shouldn't
  * Fix wrong 5-card hand selected from 6- or 7-card hands when
    multiple subsets share the same rank (kickers and best straight not
    considered); also fix straight selection incorrectly favouring a wheel
    over a higher straight when both are present
  + Implemented Admin kick/ban in the lobby and during the game
  * bugfix: Out-of-bounds read when the last bet-amount button was
    disabled while selected (CID 644890)
  - Remove installation of miniaudio libraries
  ! BREAKING: server.conf bet_minimum/bet_median/bet_maximum replaced by
    a single variable-length list: bet_amounts = list, 100, 250, 500
    (up to 8 values, hotkeys 1-8).</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775044800">- dealers-choice 0.0.11:
  * bugfix: uninitialize miniaudio engine on sound load failure
    Previously called exit() without ma_engine_uninit(), locking the audio
    device and blocking other applications until it was replugged or the
    system was restarted (#198)
  * Change dealer rotation timeout from 60 seconds to 30
  * Add version line to changes entry for v0.0.10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1775131200">* Drop cmake build dependency (no longer needed for miniaudio)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1776168000">- dealers-choice 0.0.12
  * Update package description
  + Add dealers-choice-bot: a headless rules-based CLI bot that connects to a
    running server like a regular client. Reads DC_PASSWORD from the
    environment (bot is rejected if the server has no password set).
  + Text input fields: scrolling with cursor navigation (left/right/home/end),
    mid-text insertion, Ctrl+V paste; cursor blink resets on each keypress;
    yellow cursor color for visibility against white text
  + Handle audio device disconnection: when the audio backend has no default
    device to reroute to, the device is stopped; register a miniaudio
    notification callback to detect this and restart the engine when possible
    (#243).
  + Stud games: implement bring-in forced partial bet (bringin_amount in
    server.conf, default 50); subsequent streets open with the player
    holding the best visible hand
  + Deuces wild: server now evaluates wild hands automatically using
    POKEVAL_compare_hands_wild / POKEVAL_evaluate_hand_wild; removed the
    end-of-hand UI selection for wild card replacement and the associated
    exchange button, timeout setting (wild_exchange_timeout_ms), network
    message (MSG_WILD_REPLACEMENT), and server-side exchange logic
  * bugfix: Three busy-waits, high-cpu server usage
  * Require libsodium unconditionally; fix authentication bypass where
    clients could authenticate on password-protected servers without
    libsodium present
  * bugfix: Show clear error on protocol version mismatch
  * Update docker-compose.yml to use DC_PASSWORD and extra arguments when running
    the server
  * Fix coin animation: animate from the player who paid, not the next player
    to act
  * Bump GAME_PROTOCOL_VERSION from 7 to 8</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777032000">- dealers-choice 0.0.13
  * Use system-install canfigger instead of the bundled copy
  + Add "X" quit button (top-right, red) to all four screens (connect, settings,
    lobby, game); ESC is a hotkey for the same action; both paths go through a
    confirmation dialog (SDL_ShowMessageBox) before quitting
  + Draw rounded semi-transparent nameplate panels behind each player's seat info;
    empty seats show a fainter "Open" panel; nick column sized for 15-character
    maximum and left-aligned; all columns vertically centered; uniform column
    widths across all seats
  + Add vignette effect: radial darkening from center to edges for a lamp-lit atmosphere
  + Replace solid-color table background with tiled green felt texture
  + Server: connection rate limiting and per-IP connection cap; loopback
    always exempt; configured via max_connections_per_minute and
    max_connections_per_ip in server.conf (0 = unlimited) (#189)
  + Add --auto-connect: skip the connect dialog and connect immediately on
    startup using host/port from player.conf; ignored if --server is set;
    reverts to normal menu on return from lobby (#253)
  + Coins placed in the pot are rendered at a random rotation angle
  + Add 7-card no peek
  * bugfix: Community cards (Hold'em, Omaha) disappear after a player folds
    (#252)
  * Folded players: preserve cards (face-up or face-down) and grey out the
    player area instead of removing cards when a player folds
  * server.conf: end_of_game_timeout, action_timeout, and dealer_timeout are
    now specified in seconds instead of milliseconds; keys renamed to drop
    the _ms suffix
  * bugfix: Server: nick too long is truncated instead of causing disconnect; client
    and bot no longer include null terminator in nick length; nicks up to 14
    characters are now accepted as expected
  * dealers-choice-bot: add --verbose flag; verbose_printf/verbose_puts at key
    decision points (hand strength, each action, discard count); action name
    output moved into send_player_action so client and bot share the same path
  * Client returns to the connect screen on server disconnect or send failure,
    from both the lobby and game screens (#217, #256)
  * dealers-choice-bot: no longer links against SDL2_ttf or SDL2_image
  * Use canfigger_config_dir() and canfigger_path_join() for config/data
    paths; remove get_config_dir(), join_paths(), and PathconfLimits_t
    from util.c
  * Bump GAME_PROTOCOL_VERSION from 8 to 9</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1777464000">- Add 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
  (fixes s390x build / pool/dealers-choice/pulls/1#issuecomment-135113)</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1781006400">- dealers-choice 0.0.14
  - Drop 0001-server-skip-buffered-MSG_PING_RESPONSE-at-game-start.patch
    (fixed upstream)
  * Replace SDL2_net with tcpme (thin POSIX/Winsock wrapper)
  + Game-play display overhaul: relative seating (local bottom-centre,
    opponents clockwise), a bottom dashboard, an anchor-based layout system,
    and SVG card suits
  + Configurable game-play action hotkeys via a press-to-bind Hotkeys screen
    (#102)
  + The seat that opens each betting round is marked in its nameplate (#264)
  + Optional timestamped diagnostic logging (--log-file): server slow-send /
    high-ping / slow-action warnings and client frame-stall / slow-audio
    warnings, all gated by --verbose (#307)
  * regression fix: discard-phase timeout now reports 0 cards drawn (#265)
  * Fix OpenBSD build (#270)
  * server: skip stray MSG_PING_RESPONSE frames buffered from the lobby,
    fixing a spurious disconnect on slow/emulated hardware
  * Move deckhandler and pokeval inline (no longer meson subprojects)
  * rank-aware wild tiebreak for THREE/FOUR_OF_A_KIND, FULL_HOUSE,
    FIVE_OF_A_KIND
  * wild-aware tiebreak for PAIR and TWO_PAIR
  * fix wild kicker comparison for THREE/FOUR_OF_A_KIND at equal trip/quad
    value
  * wild-aware tiebreak for STRAIGHT / STRAIGHT_FLUSH
  * substitute wild = ACE_HIGH for FLUSH tiebreak
  * rank-aware PAIR/TWO_PAIR tiebreak in update_best_5card (Omaha / 7-card
    picker)
  * route update_best_wild same-rank tiebreak through the wild-aware compare
  * bugfix: run audio init on a background thread with silent fallback, so
    a blocked audio backend can't freeze the window
  * Bump GAME_PROTOCOL_VERSION from 9 to 10</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1781524800">- dealers-choice 0.0.15:
  * regression fix: joining a hand in progress no longer crashes the client
  * deckhandler: shuffle and recycle the discard pile when the deck runs out
    mid-draw, fixing duplicate cards dealt in multi-player draw games
  * pokeval: fix California lowball tie-breaks</changelog>
</package>
<package pkgid="8483cc9c2aa747c2689ef416db294ee89131eeeee28c0645b1e25a9429f689ac9695ae2c0625e237a7943d220beec1dd3a49c787b8879653777a704c27787caa" name="dealers-choice-lang" arch="noarch">
  <version epoch="0" ver="0.0.8" rel="bp160.1.2"/>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1751976000">- dealers-choice 0.0.5, initial package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1752062400">- Use pkgconfig() BuildRequires to be more impervious to renames.</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1752408000">- dealers-choice 0.0.6:
  + Implement Deuces Wild option
  * Fix tie handling
  * Reduce client console output messages
  + Partially implement 7-card stud
  + Add optional 'language' setting (https://dealer-s-choice.github.io/docs/CONFIG.html)
  * Network Protocol bumped to 3
  + Add coin animation</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1752494400">- Fix lint warnings
- Fix directory ownership error
- Enable tests
- Update (fix) description</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754395200">- dealers-choice 0.0.7:
  + Set default maximum raises per round to 3 (config option)
  * Fix discard button being clickable when disabled
  * Increase player action timeout from 20 to 30 seconds
  + The client will now retry server connection for 60 seconds
    before timing out if server is unavailable
  * Fix incorrect hand wins in some cases when there are 3 or more players
  + Add amount won to status message
  - Remove the simulated delay when cards are initially dealt</changelog>
  <changelog author="Andy Alt &lt;arch_stanton5995@proton.me&gt;" date="1754913600">- dealers-choice 0.0.8:
  * Fix: Server does not send turn ids if player 0 disconnects during game
  + Display ping times in lobby
  + After winner declared, replace action timer with "end of game" timer
  + Allow specifying the client/server port via config or cli
  + Allow setting min, med, and max bets via server.conf</changelog>
</package>
<package pkgid="4669624d7e865ce6e0eab4ccda8bb96755a1b188d8ac5558fa937a6576afa9f0d0a8e34f2388498e7f78a282c029594cbd433a5a933def558ae37e3166eb2a13" name="debhelper" arch="noarch">
  <version epoch="0" ver="13.20" rel="bp160.1.12"/>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1704456000">- update to 13.11.9:
  * dh_installudev: install into /usr (Closes: #1058791)
  * dh_movetousr: also update links from canonical into aliased
  * buildsystems: add qmake6 variant of the qmake buildsystem (Closes: #1057359)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1706270400">- update to 13.11.10:
  * dh_installsystemduser: fix daemon-reload of user instances
  * dh_clean: Clean __pycache__ (Closes: #1048890)
  * dh_installchangelogs: Generate separate binNMU changelog also
    under --no-trim (Closes: #1059395)
  * dh_assistant: Add filename to `detect-hook-targets`
  * Dh_Lib.pm: Ensure `$_use_color` is always initialized first time
  * dh_assistant: Add detect-unknown-hook-targets subcommand</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1707134400">- update to 13.12:
  * Add support for an 'X-Time64-Compat' field in debian/control to allow
    overriding of the auto-generated Provides: as necessary.
    Closes: #1059941.
  * dh_assistant: Exit with code 2 when unknown hook targets are found
  * dh_assistant: Add the following new subcommands:
  - `supports COMMAND` can be used to programmically check whether
    dh_assistant knows about `COMMAND`. It is a lot better than having
    to check versions or parse `--help` output.
  - `list-commands` can be used to determine all "debhelper commands"
    that will run from a source package (assuming no overrides and
    no add-on adds a non-standard sequence). This command has a
    text and a JSON output.
  - `list-guessed-dh-config-files` can be used to list all
    debhelper config and their related commands. The result
    involves a lot of guess work and will never be 100% reliable,
    which explains the `guessed` part of the command. The output
    is always JSON.
  - Add `restore-file-on-clean` with all its caveats. Use it with
    care for the few cases where it is useful.  (Closes: #1051184)
  * dh_assistant: Always parse Build-Depends for sequences. This
    would have prevented `detect-unknown-hook-targets` from reporting
    issues about hook targets related to add-ons if they were loaded
    via `Build-Depends`.
  * dh_assistant: `detect-unknown-hook-targets` now continues when
    add-ons loading fails. It will still exit with status 2 by
    default when this occurs as if it found an issue.
  * cmake.pm: Remove compat guard for `-DBUILD_TESTING:BOOL=off`
    on `nocheck`
  * Dh_Lib.pm: Fix warning from `cp -n`
  * qmake6.pm: Add cross-compiling support (Closes: #1059209)
  * Add &lt;pkg.debhelper.nonls&gt; build profile (Closes: #1032816)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1707134401">- update to 13.13:
  * Add `debhelper-documentation` `debputy` plugin. This provides
    `debputy` with some files and file patterns for `debputy`'s
    new `debputy tool-support annotate-debian-directory`.
  * Revert "Dh_Lib.pm: Fix warning from `cp -n`"
    Thanks to Sven Joachim &lt;svenjoac@gmx.de&gt; (Closes: #1061610)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1714737600">- update to 13.15.3:
  * debhelper-compat-upgrade-checklist.pod: Fix repeated substvar.
    Thanks to Andrey Rakhmatullin
  * debhelper-compat-upgrade-checklist.pod: Add ref to #1067653
  * dh_gencontrol: Gracefully cope with custom substvars and -dbgsym packages
    (Closes: #1067711)
  * upgrade-checklist: Document `dh_installsystemduser` change
    (Closes: #1066025)
  * autopkgtest: Remove reference d/compat triggering perl tests
  * dh_gencontrol: Fix inverted boolean logic causing warnings
  * Dh_Lib.pm: Fix field truncation in compat 14+
    (Closes: #1067508, #1067509)
  * d/changelog: Fix typo of Felix Geyer
  * dh_makeshlibs: Ensure t64:Provides is always provided (but
    sometimes empty)
  * Replace `d/compat` with a `X-DH-Compat` field in compat 14+.
    (Closes: #1021877)
  * Ensure values to --dbg-package and --link-doc are known packages
  * PROGRAMMING.md: Add a note about `dh_assistant`
  * Make it easier to re-bootstrap without `dwz` (and also `man-db`).
    This is a new build profile that build `debhelper` with fewer
    dependencies. Note that this profile causes `debhelper` to produce
    a different result in some cases. Packages built with this minimal
    version of debhelper should be rebuilt when bootstrapping is
    complete.
  * dh_shlibdeps: Use ${shlibs:Pre-Depends} for Essential packages
    in compat 14+.
  * dh_gencontrol: Automatically apply relationship substvars in
    compat 14+
  * Clearly document how to do filtering (which is via dh-exec)
    (Closes: #1065742)
  * Reject debhelper config files without a package prefix for
    multi-binary packages in compat 15. Starting in compat 14, it will
    now trigger a warning to have `debian/install` instead of
    `debian/package.install` when `debian/control` contains 2 or more
    binary packages. In compat 15, this is promoted to an error.  The
    main exceptions are files like `debian/changelog`, `debian/NEWS`,
    and `debian/copyright`, which are applied to all packages and can
    still be used without a prefix. (Closes: #1014537)
  * cmake.pm: Pass ASFLAGS as ASMFLAGS to cmake [c14] (Closes: #1036760)
  * meson.pm: Pass --auto-features=enabled in compat 14+
    (Closes: #1030011, #1062508)
  * Dh_Lib.pm: Simplify reset_perm_and_owner so it only works with int
    now. The only misbehaving call-sites where in debhelper itself
    according to codesearch.debian.net and were fixed as well.
  * Dh_Lib.pm: Bump perl version requirement to 5.28 (Closes: #1001403)
  * dh_makeshlibs: Skip directories known not to contain SONAMEs
    (Closes: #1063126)
  * Restructure debhelper upgrade compat checklist for compat 14 in an
    attempt to make it easier for consumers.
  * dh_makeshlibs: Correct the auto-detected package name
  * dh_makeshlibs: Use the "correct" package architecture definition
  * debhelper-documentation.json: The pam change happened in c14
  * dh_assistant: Expose bug#950723 marker in
    list-guessed-dh-config-files
  * dh_installsystemduser: Add missing pkgfiles in DH NOOP promise
  * debhelper-documentation.json: Add dh_installsystemd files
  * debhelper-documentation.json: Add dh_installsystemduser files
  * d/changelog: Fix typo in a previous entry
  * dh_gencontrol: Avoid Static-Built-Using in -dbgsym packages
    (Closes: #1062960)
  * dh_makeshlibs: Improve handling of t64 transition support
  - The presence of the `X-Time64-Compat` now unconditionally
    trigger the `${t64:Provides}` substvar.
  - Auto-detection is now extended to include t64-nss libraries
    (The detection regex is now: `m/^lib.*t64(?:-nss)?$/`)
  - The `${t64:Provides}` substvars now uses `${binary:Version}`
    instead of trying to guess the version. This works better
    for packages that manually set their own version via
    dpkg-gencontrol's -v option.
  * check the dpkg "features" to decide whether to emit t64:Provides</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1721649600">- update to 13.16:
  * dh_assistant: Clearly mark unsafe commands
  * d/changelog: Fix typos in historical entries
  * Migrate to `X-Style: black`
  * dh_assistant.1: Improve documentation and command tagging
  * Improve wording of several man pages.
    Thanks to Christoph Brinkhaus &lt;c.brinkhaus@t-online.de&gt; (Closes: #1069176)
  * Require a package prefix with `--name` in c15 (warning in c14)
  * dh_assistant: Report data about disabled commands in some subcommands.
    This breaks a small subset of the `dh-debputy` features and a related
    `Breaks` has been added.
  * Fix a "comat" -&gt; "compat" typo in _load_compat_info()
  * dh_installtmpfiles: implement remove on removal, purge on purge
  * Update German translation of man pages (Closes: #1069176)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1723118400">- fix perl compatibility for Leap (bsc#1228955)</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1724068800">- update to 13.19:
  * Fix regression in pkgfile where compat 14 semantics were always active.
    Thanks to Salvatore Bonaccorso &lt;carnil@debian.org&gt;
  * dh_lintian: Reject architecture specific overrides files for M-A: same [c14]
    Thanks to Salvatore Bonaccorso &lt;carnil@debian.org&gt; (Closes: #1078830)
  * perl_makemaker: Fix missing import that broke cross-builds.
    Thanks to Helmut Grohne &lt;helmut@subdivi.de&gt; (Closes: #1078707)
  * perl-build: Set PKG_CONFIG during cross builds like perl-makemaker.
    Thanks to gregor herrmann &lt;gregoa@debian.org&gt;
  * Update on Portuguese translation of man pages
  * Reorder default sequence around dh_fixperms and nearby tools in
    compat 14. (Closes: #981783, #982457). This should also avoid
    future issues like LP#1928381 where Ubuntu's modifications to
    `dh_strip` cause differences not visible in Debian.
  * dh_assistant: Fix bug the config introspection could be wrong.
  * debhelper-documentation.json: Associate with `substvars` with
    `dh_gencontrol`.
  * Add some config hints to `dh_makeshlibs` and `dh_gencontrol`.
  * Bump Standards-Version to 4.7.0 - no changes required
  * Dh_Lib.pm: Change `pkgfile` lookup to have opt-in features
    rather than always-on in compat 14. Third-party debhelper tools
    should update their `pkgfile` calls if they need `named` or/and
    architecture specifc configuration files.
  * Set PKG_CONFIG when calling Makefile.pl (makemaker) if not already set
  * Make `dh_auto_install --destdir` change a pure compat 14 change.
    Thanks to Jeremy Bícha &lt;jeremy.bicha@canonical.com&gt;.
    (Closes: #1074322)
- enable test suite during build</changelog>
  <changelog author="Jan Baier &lt;jbaier@suse.com&gt;" date="1724673600">- update to 13.20:
  * dh_installsysusers: Temporarily add opensysusers alternative.
    (See #1076045)</changelog>
</package>
<package pkgid="d56372e0e6f59463cf0ccc30925aa6644ea089ece0d62cc5594b2cd68e6039d70df90c824a07d2338b2bf5aec4b8ba5013d7cca42d803527567a1c5fcff67fb0" name="debianutils" arch="x86_64">
  <version epoch="0" ver="5.4" rel="160000.2.2"/>
  <changelog author="danilo.spinella@suse.com" date="1627992000">- Initial package</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Move system executables into /usr/sbin</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631275200">- Update to 5.4:
  * Added update-shells
  * Dropped tempfile
  * Various improvements</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1678795200">- Move run-parts to /usr/bin, Run-parts runs just fast as regular user.</changelog>
</package>
<package pkgid="54d2bb570df9669f576c17c8cad254d1ceb8372f1672274c101627499098517320e99fd58f79636949b2795f0c60b626457b0692104152b1582889e6f81c9231" name="debootstrap" arch="noarch">
  <version epoch="0" ver="1.0.137" rel="bp160.1.9"/>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1588507200">- Update version to 1.0.123:
  * See /usr/share/doc/packages/debootstrap/changelog</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1623067200">- Update to version 1.0.124
  * functions: Turn for loops variables into locals
  * functions: add zstd control&amp;data support to the ar extractor
  * stage1: re-mkdir /proc if it is a symlink instead of umount.
  * Add --inrelease-path option to allow specifying by-hash
    InRelease location.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 1.0.128:
  * Make gbp tag produce the right tag format
  * Add (PureOS) byzantium as a symlink to amber
  * Add (PureOS) crimson as a symlink to amber
  * Support Packages files which are not ordered alphabetically by Package field
  * Apply "EXCLUDE_DEPENDENCY" during "resolve_deps"
  * debootstrap: optionally exclude specific dependencies
  * debian-common: exclude usrmerge when installing usr-is-merged
  * Enable usrmerge on hurd-i386 too.
  * add usrmerge support loongarch64.
  * Avoid duplicate components in `sources.list`.
  * Mount /dev/fd if the host is FreeBSD.
  * Update renamed lintian tag names in lintian overrides.
  * Update standards version to 4.6.0.1, no changes needed.
  * setup_merged_usr: create skip flag when merged-usr is disabled on bookworm+
  * Add usr-is-merged to the required set on testing/unstable
  * Ensure bookworm+ suites are set up with merged-usr.
  * functions (download_main): Let the loops try the different components and
    suites when the checksum doesn't match. This is needed when several of
    them contain the same package name.
  * Fix auto proxy discovery
  * Fix detection of docker container for cgroup v2
  * functions: define link_dir before using it.
  * Add (Debian) trixie as a symlink to sid.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1690459200">- update to 1.0.128+nmu5:
  * Update PureOS bootstrap script
  * Improve error message when tar fails
  * fixes bug when http_proxy is unset
  * fallback if mounting /proc fails
  * defaulting to merged-usr on newer suites</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1696680000">- update to 1.0.132:
  * improve various tests
- update to 1.0.131:
  * Reinstate setup_merged_usr
- update to 1.0.130:
  * add --preserve-env option
  * add Trisquel distribution
  * add Pardus distribution
  * fix debootstrap --second-stage on native runs</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1701172800">- update to 1.0.133
  * stop changing user/group in Makefile
  * use mount from the outside to support chroots without mount installed
  * Let the buildd variant only install essential, build-essential and apt
- remove patch debootstrap-norootforbuild.patch as upstream integrated
  the patch</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@proton.me&gt;" date="1707652800">- update to 1.0.134
  * scripts/debian-common: install Priority:required with buildd variant
    for bookworm and earlier
  * error out if chroot cannot be found in $PATH
  * setup_devices: fall back to setup_devices_bind if setup_devices_simple
    failed irrespective of the container
  * Move "unshared" test from autopkgtest to salsaci pipeline
  * Implement support for repos with modern-style arch:all support
  * Add test for split-arch:all support
  * add various Ubuntu/Debian codenames</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@disroot.org&gt;" date="1718712000">- update to 1.0.135:
  * fix quoting to allow spaces in target directory
  * Use correct keyring and mirror for Ubuntu
  * Ubuntu: test for dpkg zstd support for Hirsute+
  * Remove hardcoded HTTPS mirror and use inline substitution
- add patch revert-symlink-removal.patch for not breaking workflows</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@disroot.org&gt;" date="1718712001">- update to 1.0.136:
  * reinstate Debian codename symlinks
  * drop unneeded addition of "test extras"
  * avoid setting DEF_MIRROR to https://https://...
- remove patch revert-symlink-removal.patch as it's unneeded now</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1721908800">- update to 1.0.137:
  * reinstate Ubuntu codename symlinks
  * Ubuntu: add symlink for oracular</changelog>
</package>
<package pkgid="2c3813cbf141a60e8156a1a2a06976c68ed8e4f4b385009efb9129e9329839d1ef7a9e19a3427d3892b02db76b6061a6d43290d2ff4401f6cc29775e6d30d9a4" name="debugbreak" arch="noarch">
  <version epoch="0" ver="1.0~git.20210702" rel="bp160.1.10"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672920000">- Initial OBS release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Use noun phrase for descriptions.</changelog>
</package>
<package pkgid="61c29a57531f0cf4fce664d04ca3b0389748c0adc0588f85a4e54f652e5e2aaed8f2d9c9cc69bad6373e834e277275ea8df9e0fb966bf926f46c79a4a8e2991a" name="debugbreak-devel" arch="noarch">
  <version epoch="0" ver="1.0~git.20210702" rel="bp160.1.10"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1672920000">- Initial OBS release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1674043200">- Use noun phrase for descriptions.</changelog>
</package>
<package pkgid="c0d9be6748728ffb50aa79c340ae4b073e629b40d44cab9aa30aca159c6799fa5d3896af5cf443bec08a6dc23a4f7f820756ae5079bfd847aec610eb0c1fc552" name="debugedit" arch="x86_64">
  <version epoch="0" ver="5.0" rel="160000.2.2"/>
  <changelog author="gmbr3@opensuse.org" date="1625054400">- initial version 5.0
- Added patches from rpm:
  * finddebuginfo.patch
  * finddebuginfo-absolute-links.patch
  * debugsubpkg.patch
  * debuglink.patch
  * debuginfo-mono.patch
- Add patch to fix bad shift: remove-bad-shift.patch</changelog>
  <changelog author="lnussel@suse.de" date="1656331200">- refresh patches to apply clean
- add git url
- add requires</changelog>
  <changelog author="lnussel@suse.de" date="1657108800">- move find-debuginfo and sepdebugcrcfix which are basically tools
  for use by rpmbuild only to /usr/lib/rpm where they used to be
  when debugedit was bundled with rpm.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- finddebuginfo.patch: convert obsolete egrep to grep -E
  (boo#1203092)</changelog>
  <changelog author="lnussel@suse.de" date="1668600000">- don't hard require gdb (boo#1205344)</changelog>
</package>
<package pkgid="f69e10bc8577ee08957f7d36261f177f0857f17beae3d7f326dd2e903bb2a28717a8ea511704f1ec7ec900ceac3968875d6f920d938088a79d1ec26ccb0082fd" name="debuginfod-client" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.2.3"/>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="mliska@suse.cz" date="1678190400">- Fix file listing for 15.x builds.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1689163200">- Replace libdebuginfo1 sub-package's debuginfod-profile Recommends
  with config(debuginfod-profile) Requires, but on the debuginfod-\
  client sub-package, instead. And add binutils, bpftrace-tools,
  elfutils, gdb, perf, systemd-coredump, and valgrind Supplements
  to debuginfod-client sub-package. This should make installation
  of debuginfod-client more consistent, along with debuginfod-\
  profile, with software/packages that have debuginfod support.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Conditionalize config(debuginfod-profile) Requires tag in the
  debuginfod-client sub-package, with the help of the %sle_version
  macro, so only Tumbleweed (currently the only distro supported by
  debuginfod.opensuse.org) sets it.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190
  * Schema change (reindexing required, sorry!) for a 60%
    compression in filename representation, which was a large
    part of the sqlite index; also, more deliberate sqlite
  - wal management during scanning using the
  - -scan-checkpoint option.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Add pkgconfig(json-c) to reenable debuginfod support
- Add fish to enable profile support for fish
- Remove files packaged by libelf-devel</changelog>
</package>
<package pkgid="3898b08413942704814c315afc651c563b0f9bee40bd5b1e4fa1ae7ec46a23d5fa4ef5547f3adca3141f4f86d7a6338e417a5b1028bcf694a41e92db60257f45" name="debuginfod-client" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="mliska@suse.cz" date="1678190400">- Fix file listing for 15.x builds.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1689163200">- Replace libdebuginfo1 sub-package's debuginfod-profile Recommends
  with config(debuginfod-profile) Requires, but on the debuginfod-\
  client sub-package, instead. And add binutils, bpftrace-tools,
  elfutils, gdb, perf, systemd-coredump, and valgrind Supplements
  to debuginfod-client sub-package. This should make installation
  of debuginfod-client more consistent, along with debuginfod-\
  profile, with software/packages that have debuginfod support.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Conditionalize config(debuginfod-profile) Requires tag in the
  debuginfod-client sub-package, with the help of the %sle_version
  macro, so only Tumbleweed (currently the only distro supported by
  debuginfod.opensuse.org) sets it.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190
  * Schema change (reindexing required, sorry!) for a 60%
    compression in filename representation, which was a large
    part of the sqlite index; also, more deliberate sqlite
  - wal management during scanning using the
  - -scan-checkpoint option.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Add pkgconfig(json-c) to reenable debuginfod support
- Add fish to enable profile support for fish
- Remove files packaged by libelf-devel</changelog>
  <changelog author="matz@suse.com" date="1768392000">- Move debuginfod homedir creation to tmpfiles.d</changelog>
</package>
<package pkgid="06ff8fda2a81894236ea8224f6bcb9be61acf68912e64797b80f30c043017c7741393f84af76a213b7b52c86b7f558d406e4280e8fc4f1f36ba1abbebf9e7c4d" name="debuginfod-dummy-client" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="d8578304e7102d665ce55cac0b71785ff47d3d06da6eb7e24cb630aa069d81b36cdc6aab4a98ab670fcaf88329d28059698696b6e9aa9513ccb5c22accf9220c" name="debuginfod-dummy-client" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="4fa62294cabbd7fa99b7f6521ea1fccc1763d59b480bfe293a4197bd8793a776944c91fe30bfeb7024a47b90a8d1ac6513238ad526f42b6c57545857b11f87e7" name="debuginfod-profile" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.2.3"/>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="mliska@suse.cz" date="1678190400">- Fix file listing for 15.x builds.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1689163200">- Replace libdebuginfo1 sub-package's debuginfod-profile Recommends
  with config(debuginfod-profile) Requires, but on the debuginfod-\
  client sub-package, instead. And add binutils, bpftrace-tools,
  elfutils, gdb, perf, systemd-coredump, and valgrind Supplements
  to debuginfod-client sub-package. This should make installation
  of debuginfod-client more consistent, along with debuginfod-\
  profile, with software/packages that have debuginfod support.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Conditionalize config(debuginfod-profile) Requires tag in the
  debuginfod-client sub-package, with the help of the %sle_version
  macro, so only Tumbleweed (currently the only distro supported by
  debuginfod.opensuse.org) sets it.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190
  * Schema change (reindexing required, sorry!) for a 60%
    compression in filename representation, which was a large
    part of the sqlite index; also, more deliberate sqlite
  - wal management during scanning using the
  - -scan-checkpoint option.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Add pkgconfig(json-c) to reenable debuginfod support
- Add fish to enable profile support for fish
- Remove files packaged by libelf-devel</changelog>
</package>
<package pkgid="4f3f9774521635b600900dfb09fa1e2f7d7f6b2dfa2796f21938b5135a13d774bf700d1ba5c06ab992affea646ca15a2efd67545a54ca2b47b369832ad8ceef3" name="debuginfod-profile" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="mliska@suse.cz" date="1678190400">- Fix file listing for 15.x builds.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1689163200">- Replace libdebuginfo1 sub-package's debuginfod-profile Recommends
  with config(debuginfod-profile) Requires, but on the debuginfod-\
  client sub-package, instead. And add binutils, bpftrace-tools,
  elfutils, gdb, perf, systemd-coredump, and valgrind Supplements
  to debuginfod-client sub-package. This should make installation
  of debuginfod-client more consistent, along with debuginfod-\
  profile, with software/packages that have debuginfod support.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Conditionalize config(debuginfod-profile) Requires tag in the
  debuginfod-client sub-package, with the help of the %sle_version
  macro, so only Tumbleweed (currently the only distro supported by
  debuginfod.opensuse.org) sets it.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190
  * Schema change (reindexing required, sorry!) for a 60%
    compression in filename representation, which was a large
    part of the sqlite index; also, more deliberate sqlite
  - wal management during scanning using the
  - -scan-checkpoint option.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Add pkgconfig(json-c) to reenable debuginfod support
- Add fish to enable profile support for fish
- Remove files packaged by libelf-devel</changelog>
  <changelog author="matz@suse.com" date="1768392000">- Move debuginfod homedir creation to tmpfiles.d</changelog>
</package>
<package pkgid="782f0b3e0e653f189dc272f3a6ec727dbf7a5fe5c78f7acc6c744551e4b5886d7927c11cccee9a26abd99c64bef3525a90ef084da00aec552f1315ba0e417d22" name="decaf" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1699531200">- Initial OBS release.
- Add remove_unsafe_methods.patch.</changelog>
</package>
<package pkgid="f66da7cd5b96244b75d161fddd200a43bc4210e75caecae7085436aa1808e22e7f6c3925bd06389626a4e047224b4d7c2f6fca84ba9312e057039f2638b94fb5" name="decaf-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="bp160.1.13"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1699531200">- Initial OBS release.
- Add remove_unsafe_methods.patch.</changelog>
</package>
<package pkgid="39f7751ac757a00bf102fedc0f04388cd0dbb590642c26a4cce36935308b0cc1d7e36fad352b608cb83f58b226880275fc68c93e3f0e1d1d00d7aa5c28b042ff" name="decentxml" arch="noarch">
  <version epoch="0" ver="1.4" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1557230400">- Initial packaging of decentxml 1.4.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim conjecture from description.
- Encode percent signs in description.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647950400">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="18702c00b972ef86cd91cecf14dfa8b13e89a6a93e9d35d9b705083a28aba7303cd81b0d2fc4bc1e06f0ba998e59fe689f6fb3cee2e481d0eaf7c2d415693040" name="decentxml-javadoc" arch="noarch">
  <version epoch="0" ver="1.4" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1557230400">- Initial packaging of decentxml 1.4.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim conjecture from description.
- Encode percent signs in description.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1647950400">- Build with java source and target levels 8</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1727092800">- Use SOURCE_DATE_EPOCH for reproducible builds</changelog>
</package>
<package pkgid="e2c72aaf10ea8685e1c0bbaa0bb2ad33f4dca36418d3b90863930096391a8a24f95b25aef30f7a70c38e6f96dc6eb5fe897f1c548a3597b765c86301910f3ab5" name="decibels" arch="noarch">
  <version epoch="0" ver="46.0" rel="bp160.1.9"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1697371200">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1697457600">- Change sources</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1700395200">- Update to version 0.1.6
  * remove 30s skip buttons
  * Update translations
- Update to version 0.1.5
  * generate the waves progressively
  * use RMS to generate peaks
  * Update translations</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1701604800">- Update to version 0.1.7
  * Add tooltip buttons for the player
  * Update translations</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1712836800">- Update to version 46.0
  * Decibels joined GNOME Incubator
  * The application ID changed to org.gnome.Decibels
  * The application's source code is now hosted on GNOME Gitlab's
    instance instead of GitHub
  * Only the header bar is now draggable, instead of the whole app
    window
  * The app is more secure because it only uses the needed sandbox
    permissions
  * Decibels no longer incorrectly advertises being able to open
    directories
  * The waveform now looks better because it has slightly thicker
    lines
  * Fixed crashes when handling invalid audio files
  * Added keyboard controls for controlling playback
  * It is now possible to scroll on the playback bar to seek
    forwards or backwards
  * Decibels now shows the correct track's durations reliably
    instead of showing 1:40
  * The design of the app was improved with new icons and papercut
    fixes
  * Added Spanish and updated the Chinese, Russian and Ukrainian
    translations
- Update submodule gi-types to commit 94acb630
- Add typelib(Adw) and blueprint-compiler BuildRequires: fix build
  requirements version 46.0</changelog>
</package>
<package pkgid="02b01542328fb428a173153c88a6bcbdc0fb183f7ab1ee7594670e1dd72cae6a6f228350d4cbf2510cfe27bf45dd14a71210ac4495e11292ec237ddf8c079ee0" name="decibels-lang" arch="noarch">
  <version epoch="0" ver="46.0" rel="bp160.1.9"/>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1697371200">- Initial package</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1697457600">- Change sources</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1700395200">- Update to version 0.1.6
  * remove 30s skip buttons
  * Update translations
- Update to version 0.1.5
  * generate the waves progressively
  * use RMS to generate peaks
  * Update translations</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1701604800">- Update to version 0.1.7
  * Add tooltip buttons for the player
  * Update translations</changelog>
  <changelog author="Muhammad Akbar Yanuar Mantari &lt;mantarimay@pm.me&gt;" date="1712836800">- Update to version 46.0
  * Decibels joined GNOME Incubator
  * The application ID changed to org.gnome.Decibels
  * The application's source code is now hosted on GNOME Gitlab's
    instance instead of GitHub
  * Only the header bar is now draggable, instead of the whole app
    window
  * The app is more secure because it only uses the needed sandbox
    permissions
  * Decibels no longer incorrectly advertises being able to open
    directories
  * The waveform now looks better because it has slightly thicker
    lines
  * Fixed crashes when handling invalid audio files
  * Added keyboard controls for controlling playback
  * It is now possible to scroll on the playback bar to seek
    forwards or backwards
  * Decibels now shows the correct track's durations reliably
    instead of showing 1:40
  * The design of the app was improved with new icons and papercut
    fixes
  * Added Spanish and updated the Chinese, Russian and Ukrainian
    translations
- Update submodule gi-types to commit 94acb630
- Add typelib(Adw) and blueprint-compiler BuildRequires: fix build
  requirements version 46.0</changelog>
</package>
<package pkgid="23f9fa0f718e7cc8cb076d7646a0ff7f6791c0133534e541173a6475cc3bc3d6e28209aab9a3f1333193063c8c81669a8c9cb922d9ae60d446c3872cdabbdea6" name="decker" arch="x86_64">
  <version epoch="0" ver="1.41" rel="bp160.1.13"/>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1705233600">- Create package at upstream version 1.37
  * more weekly challenge puzzles
  * correct a regression introduced in the last attempt at fixing event plumbing
  * simplify and improve the consistency of the cursor info overlay
  * correct prettyprinting floating-point numbers very close to whole integers
  * add an 'underpaint' mode that applies to all drawing tools. Underpainting leaves any instances of pattern 1 intact; this is ideal for coloring lineart, among other things
  * simplifying weekly challenge 247.2 by using the window[] helper function</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1708862400">- Don't strip the decker or lilt binaries
- Add decker-doc as a multibuild flavor instead of making it a separate package</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1709121600">- Update decker and decker-doc to version 1.39
  * checking in Puppeteer
  * introduce dictionary conforming to Lil
  * notes about set operations
  * fix description of raze-of-table
  * even more weekly challenge stuff
  * redefine the raze operator applied to a table to form a dictionary from the first two columns, if available.
  * patch possible UB in GIF decoder
  * make right-clicking with the fill tool erase (pattern 0) instead of using the fill color. In practice I've found this tremendously more useful, especially when working in transparency mask mode.
  * slightly nicer test framework
  * in some situations saving a deck would not necessarily reflect in-progress text editing operations.
  * make dialogizer respect the hidden state of its canvas when servicing a resize.
  * generalize deck.remove[] to accept widgets, removing them from whatever card they may reside within.
  * Lil solutions to the codereport 'top 10' problems.
  * more weekly challenge problems
  * more weekly challenge puzzles
  * extend the image interface with image.scale[], as a convenient chainable alternative to scaling images with image.paste[]
  * fix image export from the background image of a prototype.
  * allow image interfaces to be coerced (rtext.cat[] as well as internal rtext_cast()) to rtext runs containing an inline image.
  * when exporting images, clip the selection to the active container bounds.
  * make the 'Show Transparent' appearance of make Transparent+Invisible buttons not show an inverted background when clicked, making them less visible than ever before
  * when compact sliders are at their minimum or maximum extent, visibly disable the appropriate stepper button and its highlighting behavior.
  * more puzzle solutions
  * correct the vx := random NN instruction in the chip8 emulator example.
  * improve performance of readcsv[] by reducing unnecessary intermediate allocations.
  * a more efficient implementation of l_by(), which carries out the work of the 'by' clause in lil queries.
  * web-decker's random[] did not handle dicts like native-decker; they should be treated the same as lists.</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1709467200">- Update decker and decker-doc to version 1.40
- Remove install-script.patch - the patch was merged in upstream commit 7b1856ae8189c2247043cd433448ab1c2b30e49b
  * minor documentation touchups
  * introduce a 'like' primitive to Lil, loosely mirroring SQL's glob-matching operator. Since this is a new keyword it is a minor breaking change, and there is some functional overlap with parse pattern matching, but overall I think this addition will make a wide range of common use-cases simpler and more straightforward.
  * permit keyboard shortcuts to be activated while the menu is suppressed in drawing mode.
  * add danger.shell[]. offer not valid on Windows.
  * revise install script to accept DESTDIR/PREFIX vars and avoid the use of sudo.
  * an initial foray into exposing potentially hazardous (but equally useful) APIs to Decker. The 'danger zone' is presently accessible exclusively by rebuilding from source. In the future I may consider easier methods.
  * correct inconsistencies between web-decker and native-decker in how writecsv[] serialized 'j' formatted columns.
  * oops, actually native decker was already handling j column formats correctly; web-decker was busted.
  * fix web-decker not hiding toolbars while in modals or the script editor.
  * more refinements to puzzle solutions
  * make the j and a format symbols in a grid format string enclose their listy arguments before formatting. This makes, for example, a j format of a column of pairs do the right thing.
  * a simpler formulation of weekly challenge 127.1; are sets disjoint?
  * fix crashes if a prototype is removed while editing it.</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1711281600">- Update decker and decker-doc to version 1.41
  * correct random[] in native-decker to select random rows of tables, rather than random col
  umns (which is very silly and almost never useful)
  * version bump to v1.41
  * make grid.rowvalue and grid.cellvalue writable, leveraging the generalizations of amend()
  , and in turn simplify the default handler for changecell[].
  * rework grid cell editing to occur in-situ instead of in a visibly distinct modal dialog. In some situations this may lead to a cramped field, and the current implementation prevents entering newlines, but despite these quibbles I think the overall experience- especially when using the keyboard- will be much nicer.
  * another weeklychallenge puzzle
  * introduce the changecell event for grids, replacing hardcoded validation logic with an overrideable default handler and providing opportunities for shimming in side effects.
  * compensate for rounding error when computing the width of the final cell in a grid with auto-sized columns.
  * generalize amending assignments to work for tables. Some of these operations are easy enough to express with 'update', but some would be extremely annoying. This generalization mostly follows from the behavior of amending lists/dicts.
  * remove some cruft from the test script
  * add a selection by cell mode to the grid widget, allowing it to behave a bit more like a traditional spreadsheet and permitting faster editing via the keyboard.
  * disable menu selection while hidden, per #82.
  * improve behavior of transparent grids on colored backgrounds by reducing reliance on color inversion, per #81.
  * auto-focus the script editor field when entering it via keyboard shortcuts, per #79.
  * gracefully handle grid widgets with 0-width columns, making this a viable method of hiding columns, if desired.
  * another weekly challenge problem, providing a nice example of progressive parsing.
  * show:none buttons should not be given a pointer mouse cursor.
  * extend dialogizer with configuration options for controlling text display speed and triggering sound effects.</changelog>
</package>
<package pkgid="cd0c559661ca1895e4a06d4d5930fea0020ea848d51587811b164470875434b7ca003987242f44656e29f44abd7355646a978b10480baefb4a11ba218287df6c" name="decker-doc" arch="noarch">
  <version epoch="0" ver="1.41" rel="bp160.1.9"/>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1705233600">- Create package at upstream version 1.37
  * more weekly challenge puzzles
  * correct a regression introduced in the last attempt at fixing event plumbing
  * simplify and improve the consistency of the cursor info overlay
  * correct prettyprinting floating-point numbers very close to whole integers
  * add an 'underpaint' mode that applies to all drawing tools. Underpainting leaves any instances of pattern 1 intact; this is ideal for coloring lineart, among other things
  * simplifying weekly challenge 247.2 by using the window[] helper function</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1708862400">- Don't strip the decker or lilt binaries
- Add decker-doc as a multibuild flavor instead of making it a separate package</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1709121600">- Update decker and decker-doc to version 1.39
  * checking in Puppeteer
  * introduce dictionary conforming to Lil
  * notes about set operations
  * fix description of raze-of-table
  * even more weekly challenge stuff
  * redefine the raze operator applied to a table to form a dictionary from the first two columns, if available.
  * patch possible UB in GIF decoder
  * make right-clicking with the fill tool erase (pattern 0) instead of using the fill color. In practice I've found this tremendously more useful, especially when working in transparency mask mode.
  * slightly nicer test framework
  * in some situations saving a deck would not necessarily reflect in-progress text editing operations.
  * make dialogizer respect the hidden state of its canvas when servicing a resize.
  * generalize deck.remove[] to accept widgets, removing them from whatever card they may reside within.
  * Lil solutions to the codereport 'top 10' problems.
  * more weekly challenge problems
  * more weekly challenge puzzles
  * extend the image interface with image.scale[], as a convenient chainable alternative to scaling images with image.paste[]
  * fix image export from the background image of a prototype.
  * allow image interfaces to be coerced (rtext.cat[] as well as internal rtext_cast()) to rtext runs containing an inline image.
  * when exporting images, clip the selection to the active container bounds.
  * make the 'Show Transparent' appearance of make Transparent+Invisible buttons not show an inverted background when clicked, making them less visible than ever before
  * when compact sliders are at their minimum or maximum extent, visibly disable the appropriate stepper button and its highlighting behavior.
  * more puzzle solutions
  * correct the vx := random NN instruction in the chip8 emulator example.
  * improve performance of readcsv[] by reducing unnecessary intermediate allocations.
  * a more efficient implementation of l_by(), which carries out the work of the 'by' clause in lil queries.
  * web-decker's random[] did not handle dicts like native-decker; they should be treated the same as lists.</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1709467200">- Update decker and decker-doc to version 1.40
- Remove install-script.patch - the patch was merged in upstream commit 7b1856ae8189c2247043cd433448ab1c2b30e49b
  * minor documentation touchups
  * introduce a 'like' primitive to Lil, loosely mirroring SQL's glob-matching operator. Since this is a new keyword it is a minor breaking change, and there is some functional overlap with parse pattern matching, but overall I think this addition will make a wide range of common use-cases simpler and more straightforward.
  * permit keyboard shortcuts to be activated while the menu is suppressed in drawing mode.
  * add danger.shell[]. offer not valid on Windows.
  * revise install script to accept DESTDIR/PREFIX vars and avoid the use of sudo.
  * an initial foray into exposing potentially hazardous (but equally useful) APIs to Decker. The 'danger zone' is presently accessible exclusively by rebuilding from source. In the future I may consider easier methods.
  * correct inconsistencies between web-decker and native-decker in how writecsv[] serialized 'j' formatted columns.
  * oops, actually native decker was already handling j column formats correctly; web-decker was busted.
  * fix web-decker not hiding toolbars while in modals or the script editor.
  * more refinements to puzzle solutions
  * make the j and a format symbols in a grid format string enclose their listy arguments before formatting. This makes, for example, a j format of a column of pairs do the right thing.
  * a simpler formulation of weekly challenge 127.1; are sets disjoint?
  * fix crashes if a prototype is removed while editing it.</changelog>
  <changelog author="vivid &lt;absolutely.vivid@fastmail.org&gt;" date="1711281600">- Update decker and decker-doc to version 1.41
  * correct random[] in native-decker to select random rows of tables, rather than random col
  umns (which is very silly and almost never useful)
  * version bump to v1.41
  * make grid.rowvalue and grid.cellvalue writable, leveraging the generalizations of amend()
  , and in turn simplify the default handler for changecell[].
  * rework grid cell editing to occur in-situ instead of in a visibly distinct modal dialog. In some situations this may lead to a cramped field, and the current implementation prevents entering newlines, but despite these quibbles I think the overall experience- especially when using the keyboard- will be much nicer.
  * another weeklychallenge puzzle
  * introduce the changecell event for grids, replacing hardcoded validation logic with an overrideable default handler and providing opportunities for shimming in side effects.
  * compensate for rounding error when computing the width of the final cell in a grid with auto-sized columns.
  * generalize amending assignments to work for tables. Some of these operations are easy enough to express with 'update', but some would be extremely annoying. This generalization mostly follows from the behavior of amending lists/dicts.
  * remove some cruft from the test script
  * add a selection by cell mode to the grid widget, allowing it to behave a bit more like a traditional spreadsheet and permitting faster editing via the keyboard.
  * disable menu selection while hidden, per #82.
  * improve behavior of transparent grids on colored backgrounds by reducing reliance on color inversion, per #81.
  * auto-focus the script editor field when entering it via keyboard shortcuts, per #79.
  * gracefully handle grid widgets with 0-width columns, making this a viable method of hiding columns, if desired.
  * another weekly challenge problem, providing a nice example of progressive parsing.
  * show:none buttons should not be given a pointer mouse cursor.
  * extend dialogizer with configuration options for controlling text display speed and triggering sound effects.</changelog>
</package>
<package pkgid="244def2fb8ce465b087ec6dd60ad4b4eb85d53efcccb473d2db0ef891f5a6fd7bb861c3e81e6fac76570cbf1d5c7e80114cecb469f7c847049c9697f18e4994c" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.7.1" rel="bp160.1.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617019200">- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617019201">- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617105600">- Enable instantiated services (boo#1184165)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657281600">- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657281601">- Target should not PartOf on itself.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658577600">- Add postrun hook scripts for apache+nginx</changelog>
  <changelog author="Daniel Molkentin &lt;daniel@molkentin.de&gt;" date="1667044800">- Update to 0.7.1
  * See https://github.com/dehydrated-io/dehydrated/releases/tag/v0.7.1
  * Removes more-examples.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1705147200">- Add instance name to unit description
- Check instance specific configuration</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706875200">- Add user/group provides for rpm 4.19</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1707134400">- switch to sysuser for user/group setup</changelog>
</package>
<package pkgid="ea59fc2cce2c50f5f273d411e0d9c26ffaec0739fdd6b40499325f2ad5cc022db65268142e11f4a9ac980ac3462cb2aaa3257a1d175a53a7dec7a3a610958cdc" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.7.1" rel="bp160.1.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617019200">- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617019201">- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617105600">- Enable instantiated services (boo#1184165)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657281600">- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657281601">- Target should not PartOf on itself.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658577600">- Add postrun hook scripts for apache+nginx</changelog>
  <changelog author="Daniel Molkentin &lt;daniel@molkentin.de&gt;" date="1667044800">- Update to 0.7.1
  * See https://github.com/dehydrated-io/dehydrated/releases/tag/v0.7.1
  * Removes more-examples.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1705147200">- Add instance name to unit description
- Check instance specific configuration</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706875200">- Add user/group provides for rpm 4.19</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1707134400">- switch to sysuser for user/group setup</changelog>
</package>
<package pkgid="37160b5d1d36fcd84ca05d690155148c7db3e5ecd9f6707cbe6f8672c42c58a207f2f19af1123bffbcee7ddb5186fedbb7125e977e07a096b283529a9408546b" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.7.1" rel="bp160.1.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617019200">- Rework support for /etc/dehydrated/postrun-hooks.d/:
  dehydrated.service nolonger starts them directly, the support was
  moved to a separate unit file. Please run:
  systemctl enable dehydrated-postrun-hooks.service
  to restore this functionality
- Run dehydrated as dehydrated user again</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617019201">- Prepare instantiated service/timer support but not enable it:
  This seems to fail due to missing systemd support right now.
  So the only option at the moment is to copy the timer and unit
  file for a 2nd instance. Mark all files as part of dehydrated.target</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1617105600">- Enable instantiated services (boo#1184165)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657281600">- Copy the changes entry into README.postrun-hooks to make it
  easier for users to find the information how to restore the
  postrun-hooks after the split.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1657281601">- Target should not PartOf on itself.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1658577600">- Add postrun hook scripts for apache+nginx</changelog>
  <changelog author="Daniel Molkentin &lt;daniel@molkentin.de&gt;" date="1667044800">- Update to 0.7.1
  * See https://github.com/dehydrated-io/dehydrated/releases/tag/v0.7.1
  * Removes more-examples.patch</changelog>
  <changelog author="Georg Pfuetzenreuter &lt;georg.pfuetzenreuter@suse.com&gt;" date="1705147200">- Add instance name to unit description
- Check instance specific configuration</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1706875200">- Add user/group provides for rpm 4.19</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1707134400">- switch to sysuser for user/group setup</changelog>
</package>
<package pkgid="2dc0381989da5d0c7427ca3d6c6dc251cd2a1c484ee4b2ffbed831519f3d615570607b4c68665d27c0b2c86007708632b6912e41c0b40b4486fd43d5d1599a1e" name="deja-dup" arch="x86_64">
  <version epoch="0" ver="47.0" rel="bp160.1.16"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653048000">- Update to version 43.3:
  + Change Google/Microsoft authentication flow to use a more
    secure, non-deprecated approach (Google is turning off the
    approach we use now in just a few months).
  + Remember window size after closing.
  + Fix incorrect file permissions / mtime when restoring files
    from other users.
  + Updated translations.
- Drop 60856db.patch and 9c17deb0526b.patch: fixed upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1657022400">- Update to version 43.4 (jsc#SLE-24632, bsc#1199740):
  + Warn about delayed backups due to power saver mode,
    if it's been over a day since we were supposed to back up.
  + Improve support for mobile screen sizes.
  + Add some in-preferences help explaining some of the
    always-ignored folders.
  + Bump default volume size from 25/50MB to 200MB, to keep fewer
    files around and improve network throughput.
  + Minor fixes to our experimental restic support (make sure
    to unlock the repo and warn if some files could not be read
    when backing up).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1659960000">- The nautilus-deja-dup plugin has been dropped since version 42.4,
  explicitly obsoletes it in the specfile (jsc#SLE-24632,
  bsc#1199740).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1670241600">- Update to version 44.0:
  + Refresh the visuals in a few places by using modern text
    entries and the new About dialog.
  + Newly created restic backups will now use compression.
  + Fix a bug that prevented updating the folder option in the
    Preferences window after changing to an external disk.
  + Fix a bug that prevented switching to the restore view if the
    app startd up in mobile mode (thin width).
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1680264000">- Update to version 44.1:
  + Refuse to back up to a destination that doesn't have enough
    space, and suggest how much more space is needed.
  + Fix Trash location when run as a flatpak.
  + Don't try to back up when the network is behind a wifi
    captive portal.
  + Updated translations.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1700654400">- Update to version 45.1:
  + Fix compilation with valac 0.56
  + Use the modern flat header style
  + Use latest Gtk file dialog
  + Fix a vague SMB error into a more specific one
  + Support duplicity 2.0's command line changes
  + Update OneDrive api key to work with Duplicity 1.2.3
  + Add more details to the error message about not enough space
  + Fix not being able to open the preferences window after a
    restore
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705492800">- Update to version 45.2:
  + Fix not being prompted for packagekit installs during a
    restore.
  + Allow using the '~/' alias for the home dir in more text
    entries.
  + Add clearer error message when auto-backups can't be set in
    flatpak mode.
  + Fix compilation on non-glibc systems.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext-runtime: allow OBS
  to shortcut through gettext-runtime-mini.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1725883200">- Update to version 46.1:
  + Fix backing up to and restoring from WebDAV servers.
  + Fix a "I/O socket timeout" error when connecting to Google
    Drive and Microsoft OneDrive servers (or at least, reduce its
    frequency).
  + Add a warning dialog if GVfs FUSE is not installed.
- Changes from version 46.0:
  + Use modern Adwaita dialogs.
  + Show storage location on the main overview page.
  + Show a nice warning if we can't connect to a secrets service or
    gvfs.
  + Stop showing an error when your cache dir has a CACHEDIR.TAG
    file.
  + Handle a wider variety of odd gvfs mount options during
    backups.
  + Rename "Resume Later" to "Pause" during backups to reduce
    confusion.
  + Show a "Reset All Folders" button in the include/exclude
    preferences.
  + Give feedback when include/exclude/storage folders are invalid
    in some way (either remote URLs for includes or folders inside
    the flatpak).
  + Fix rare crash if an unknown gsetting value is encountered.
  + Fix OAuth token parsing on some newer versions of libsoup/glib.
  + Stop double-mounting fstab entries.
  + Exclude Electron cache dirs by default.
  + Duplicity: Use rclone to connect to Microsoft OneDrive and
    Google Drive and FUSE to connect to remote locations, for
    better reliability.
  + Duplicity: Fix an error about "old signatures and incremental
    specified".
  + Duplicity: Save memory by not keeping a record of every file
    changed.
  + Duplicity: Work around a bug in 2.2.0+ that sometimes chops off
    a command line argument when resuming a backup.
  + Restic: Fix OAuth token refreshing.
  + Restic: Delete old snapshots as needed, to make space.
  + Restic: Ignore restic environment variables we didn't set.
  + Restic: Handle a changed HOME dir during restores.
  + Restic: Handle nested includes/excludes correctly.
  + Restic: Allow restoring from other hostnames or non-Deja-Dup
    snapshots.
  + Updated translations.
- Add xdg-user-dirs BuildRequires: new dependency used in tests.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1728043200">- Update to version 47.0:
  + Fix a case of "another duplicity instance is already running"
    error
  + Mention when an encryption password is wrong, rather than just
    re-showing the password prompt without explanation
  + Use new adwaita widgets (button rows and spinner)
  + Exclude Steam flatpak folder by default too (in addition to
    normal Steam folder)
  + Restic:
  - Allow creating a no-password backup
  - Enable post-backup verification checks
  - Show logs in troubleshooting dialog
  - Show per-file errors during restore
- Switch to source service for tarball.</changelog>
</package>
<package pkgid="c326e8c1a5c58a615ddebdc28a0b54eaed99a40d0393ce2409fdbd431596ddd3dbfdf1163ef8f733c8f5ae2a4e4b30aa8421ecabff826c57f1d52126feeb846a" name="deja-dup-lang" arch="noarch">
  <version epoch="0" ver="47.0" rel="bp160.1.16"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653048000">- Update to version 43.3:
  + Change Google/Microsoft authentication flow to use a more
    secure, non-deprecated approach (Google is turning off the
    approach we use now in just a few months).
  + Remember window size after closing.
  + Fix incorrect file permissions / mtime when restoring files
    from other users.
  + Updated translations.
- Drop 60856db.patch and 9c17deb0526b.patch: fixed upstream.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1657022400">- Update to version 43.4 (jsc#SLE-24632, bsc#1199740):
  + Warn about delayed backups due to power saver mode,
    if it's been over a day since we were supposed to back up.
  + Improve support for mobile screen sizes.
  + Add some in-preferences help explaining some of the
    always-ignored folders.
  + Bump default volume size from 25/50MB to 200MB, to keep fewer
    files around and improve network throughput.
  + Minor fixes to our experimental restic support (make sure
    to unlock the repo and warn if some files could not be read
    when backing up).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1659960000">- The nautilus-deja-dup plugin has been dropped since version 42.4,
  explicitly obsoletes it in the specfile (jsc#SLE-24632,
  bsc#1199740).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1670241600">- Update to version 44.0:
  + Refresh the visuals in a few places by using modern text
    entries and the new About dialog.
  + Newly created restic backups will now use compression.
  + Fix a bug that prevented updating the folder option in the
    Preferences window after changing to an external disk.
  + Fix a bug that prevented switching to the restore view if the
    app startd up in mobile mode (thin width).
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1680264000">- Update to version 44.1:
  + Refuse to back up to a destination that doesn't have enough
    space, and suggest how much more space is needed.
  + Fix Trash location when run as a flatpak.
  + Don't try to back up when the network is behind a wifi
    captive portal.
  + Updated translations.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1700654400">- Update to version 45.1:
  + Fix compilation with valac 0.56
  + Use the modern flat header style
  + Use latest Gtk file dialog
  + Fix a vague SMB error into a more specific one
  + Support duplicity 2.0's command line changes
  + Update OneDrive api key to work with Duplicity 1.2.3
  + Add more details to the error message about not enough space
  + Fix not being able to open the preferences window after a
    restore
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705492800">- Update to version 45.2:
  + Fix not being prompted for packagekit installs during a
    restore.
  + Allow using the '~/' alias for the home dir in more text
    entries.
  + Add clearer error message when auto-backups can't be set in
    flatpak mode.
  + Fix compilation on non-glibc systems.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1724068800">- BuildRequire gettext-devel instead of gettext-runtime: allow OBS
  to shortcut through gettext-runtime-mini.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1725883200">- Update to version 46.1:
  + Fix backing up to and restoring from WebDAV servers.
  + Fix a "I/O socket timeout" error when connecting to Google
    Drive and Microsoft OneDrive servers (or at least, reduce its
    frequency).
  + Add a warning dialog if GVfs FUSE is not installed.
- Changes from version 46.0:
  + Use modern Adwaita dialogs.
  + Show storage location on the main overview page.
  + Show a nice warning if we can't connect to a secrets service or
    gvfs.
  + Stop showing an error when your cache dir has a CACHEDIR.TAG
    file.
  + Handle a wider variety of odd gvfs mount options during
    backups.
  + Rename "Resume Later" to "Pause" during backups to reduce
    confusion.
  + Show a "Reset All Folders" button in the include/exclude
    preferences.
  + Give feedback when include/exclude/storage folders are invalid
    in some way (either remote URLs for includes or folders inside
    the flatpak).
  + Fix rare crash if an unknown gsetting value is encountered.
  + Fix OAuth token parsing on some newer versions of libsoup/glib.
  + Stop double-mounting fstab entries.
  + Exclude Electron cache dirs by default.
  + Duplicity: Use rclone to connect to Microsoft OneDrive and
    Google Drive and FUSE to connect to remote locations, for
    better reliability.
  + Duplicity: Fix an error about "old signatures and incremental
    specified".
  + Duplicity: Save memory by not keeping a record of every file
    changed.
  + Duplicity: Work around a bug in 2.2.0+ that sometimes chops off
    a command line argument when resuming a backup.
  + Restic: Fix OAuth token refreshing.
  + Restic: Delete old snapshots as needed, to make space.
  + Restic: Ignore restic environment variables we didn't set.
  + Restic: Handle a changed HOME dir during restores.
  + Restic: Handle nested includes/excludes correctly.
  + Restic: Allow restoring from other hostnames or non-Deja-Dup
    snapshots.
  + Updated translations.
- Add xdg-user-dirs BuildRequires: new dependency used in tests.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1728043200">- Update to version 47.0:
  + Fix a case of "another duplicity instance is already running"
    error
  + Mention when an encryption password is wrong, rather than just
    re-showing the password prompt without explanation
  + Use new adwaita widgets (button rows and spinner)
  + Exclude Steam flatpak folder by default too (in addition to
    normal Steam folder)
  + Restic:
  - Allow creating a no-password backup
  - Enable post-backup verification checks
  - Show logs in troubleshooting dialog
  - Show per-file errors during restore
- Switch to source service for tarball.</changelog>
</package>
<package pkgid="9e252143d7ca1b032becfe3b6f5a85d0373df29cfe4bfbd882abf0a5b6e803f95e159cb4a6e21c52469dc13c103649549e285ec7d1fdc7c0c75796916b4f813d" name="dejagnu" arch="noarch">
  <version epoch="0" ver="1.6.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1426334400">- Add gpg signature
- Add dependencies for macros dealing with info files
- Use fdupes to avoid duplicate files
- Small spec file cleanup by spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1427889600">- Update to dejagnu 1.5.3
  * More bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1460808000">- Update to 1.6
  * Proper support for target communication via SSH has been added.
  * A large number of very old config and baseboard files have been
    removed.  If you need to resurrect these, you can get them from
    version 1.5.3.  If you can show that a board is still in use,
    it can be put back in the distribution.
  * The --status command line option is now the default. This means
    that any error in the testsuite Tcl scripts will cause runtest
    to abort with exit status code 2.  The --status option has been
    removed from the documentation, but will continue to be
    accepted for backward compatibility.
  * runtest now exits with exit code 0 if the testsuite "passed",
    1 if something unexpected happened (eg, FAIL, XPASS or
    UNRESOLVED), and 2 if an exception is raised by the Tcl
    interpreter.
  * runtest now exits with the standard exit codes of programs that
    are terminated by the SIGINT, SIGTERM and SIGQUIT signals.
  * The user-visible utility procedures `absolute', `psource' and
    `slay' have been removed.  If a testsuite uses any of these
    procedures, a copy of the procedure should be made and placed
    in the lib directory of the testsuite.
  * Support was added for testing the D compiler.
  * ~/.dejagnurc is now loaded last, not first. This allows the
    user to have the ability to override anything in their
    environment (even the site.exp file specified by $DEJAGNU).
  * The user-visible utility procedure `unsetenv' is deprecated
    and will be removed in the next release.  If a testsuite uses
    any of these procedures, a copy of the procedure should be made
    and placed in the lib directory of the testsuite.
- Run tests during build
- Small spec-file polishing</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- Update to 1.6.1
  * Minor bug fixes, no major changes</changelog>
  <changelog author="schwab@suse.de" date="1531828800">- close-wait-program.patch: Use separate kill command for each pid
  (bsc#1100206)
- Use %license.</changelog>
  <changelog author="schwab@suse.de" date="1533038400">- Adjust license</changelog>
  <changelog author="schwab@suse.de" date="1543406400">- Update to dejagnu 1.6.2
  * runtest will abort if $DEJAGNU is defined but the file is not
    found.
- close-wait-program.patch: Removed</changelog>
  <changelog author="schwab@suse.de" date="1624276800">- Update to dejagnu 1.6.3
  * The internal proc 'is_remote' has been renamed to 'isremote' for
    consistency with the other similar procs (eg, istarget)
  * runtest now accepts --local_init and --global_init options to override
    the default of reading "site.exp"
  * runtest now responds consistently to all Tcl errors and generates an
    UNRESOLVED result when a test script aborts
  * runtest now collects Tcl errors encountered during a test run and prints
    the collected errors a second time at the end of the test run after the
    summary
  * A utility procedure relative_filename has been added
  * The utility procedure 'grep' now accepts a '-n' option that
    includes line numbers in the output, consistent with GNU grep
  * The target_compile procedure now accepts a "linker=" option that
    overrides the compiler selection when producing an executable
  * The internal default_target_compile procedure now supports compiling
    sources in Go (using GCC Go) and Rust
  * The host_execute procedure no longer insists that the executable be in
    the current directory if the file exists under the given name
  * The host_execute procedure now reads input to end-of-file
  * The match patterns in the host_execute procedure have been revised to
    fix timing issues causing test names to be truncated
  * The host_execute procedure is no longer sensitive to the value of the
    "text" global variable
  * A new multiplex procedure "testsuite" is added for commands retrieving
    or providing information about the current testsuite
  * A command "testsuite file" is added to replace the use of the "*dir"
    variables in test scripts
  * A command "testsuite can call" is added to report the availability of
    multiplexed API calls
  * A new multiplex procedure "testcase" is added for commands examining or
    manipulating the dynamic state of ongoing testing
  * A command "testcase group" is provided for reporting test groups to the
    DejaGnu core
  * A shell command "dejagnu" is added as a place to hang various
    auxiliary commands not directly involved with running tests
  * The first auxiliary command is added: "report card"
  * A Tcl namespace is now used for some internal procedures and variables.
  * The Tcl namespace ::dejagnu and all child namespaces are entirely
    internal and should not be mentioned in testsuite code
  * The DejaGnu testsuite no longer searches for a nearby Expect executable
    in the location where it would have been located in the old Cygnus tree
    layout</changelog>
  <changelog author="schwab@suse.de" date="1625054400">- testsuite-legacy.patch: support deprecated legacy uses of dejagnu</changelog>
  <changelog author="schwab@suse.de" date="1708516800">- Use %autosetup</changelog>
</package>
<package pkgid="64f82df91a7e00ce494e2e2c8407a15abbde39e0403b016beb2fa9fa372427a8784623fbaa806898631db8ee63e123e7c388b52c09f1ef454ea80be96fa725d8" name="dejavu-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="160000.2.2"/>
  <changelog author="vlado.paskov@gmail.com" date="1308139200">- update to version 2.33
  * added Old Italic block to Sans
  * added U+051E, U+051F to Sans
  * added U+01BA, U+0372-U+0373, U+0376-U+0377, U+03CF, U+1D00-U+1D01,
    U+1D03-U+1D07, U+1D0A-U+1D13, U+1D15, U+1D18-U+1D1C, U+1D20-U+1D2B,
    U+1D2F, U+1D3D, U+1D5C-U+1D61, U+1D66-U+1D6B, U+1DB8, U+1E9C-U+1E9D,
    U+1EFA-U+1EFB, U+2C60-U+2C61, U+2C63, U+A726-U+A73C, U+A73E-U+A73F,
    U+A746-U+A747, U+A74A-U+A74B, U+A74E+U+A74F, U+A768-U+A769,
    U+A77B-U+A77C, U+A780-U+A787, U+A790-U+A791, U+A7FA-U+A7FF to Serif
  * added alternate forms to U+014A and U+01B7 in Serif
  * typographical improvements to U+0166-U+0167, U+0197, U+01B5-U+01B6,
    U+01BB, U+0222-U+0223, U+023D, U+0250-U+0252, U+026E, U+0274, U+028F,
    U+029F, U+02A3-U+02A5, U+02AB, U+03FE-U+03FF, U+1D02, U+1D14,
    U+1D1D-U+1D1F, U+1D3B, U+1D43-U+1D46, U+1D59, U+1D9B, U+2C71, U+2C73 in Serif
  * fixed bugs #31762 and #34700 plus other small fixes
    (wrong direction, duplicate points, etc.) for Sans and Serif
  * added U+204B to Mono
  * added U+26E2 to Sans
  * added Playing Cards block (U+1F0A0-U+1F0DF) to Sans
  * emoticons in Sans: replace U+2639-U+263B with better versions,
    add U+1F601-U+1F610, U+1F612-U+1F614, U+1F616, U+1F618,
    U+1F61A, U+1F61C-U+1F61E, U+1F620-U+1F624, U+1F625,
    U+1F628-U+1F62B, U+1F62D, U+1F630-U+1F633, U+1F635-U+1F640
  * added U+A78E, U+A790-U+A791 to Sans and Mono
  * added U+A7FA to Sans
  * subscripts: added U+2095-U+209C to Sans, Serif and Mono,
    adjusted U+1D49-U+1D4A in Sans and Mono
  * added U+0243 to Mono
  * adjusted U+0307 to match dot of i, replaced dotaccent U+02D9 with
    U+0307 in most dependencies in Sans
  * adjusted anchors of f and added them to long s in Sans
  * added anchors to precomposed dependencies of D and d
  * added debug glyphs U+F002 and U+F003 which will show current point size
  * use correct version for Serbian italic be
  * added pictograms U+1F42D-U+1F42E, U+1F431, U+1F435
  * improved Hebrew in Sans
  * improved Armenian in Sans, and added Armenian in Serif and Mono
  * remove "locl" feature for Romanian for S/T/s/t with cedilla/comma accent
  * replace wrong "dflt" script tag in Mono with "DFLT"</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed dejavu -&gt; dejavu-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1325592000">- license update: SUSE-Permissive
  Use this SPDX proprietary extension tag until upstream SPDX adopts a
  permissive category</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377518400">- Update to 2.34:
  * This release includes the addition of Lisu, an update of Georgian,
    the addition of some symbols and the addition and modification
    of several Latin characters.
  * Sans, SansMono, Serif: unlinked references of U+2596 for bug 50848
  * Sans, SansMono, Serif: added U+A7AA
  * Sans, SansMono, Serif: added U+2A6A, U+2A6B, U+2E1F based on U+223B
  * Sans, Serif: removed superfluous ligature definitions for
    ffl und ffi (bug 55363)
  * Sans, Serif: swapped glyphs for U+25D2 and U+25D3 (bug 55197)
  * Sans, Serif: added U+A740, U+A741
  * Sans: added U+20BA Turkish Lira sign
  * Sans: replaced Georgian Asomtavruli U+10A0-U+10C5 and Mkhedruli
    U+10D0-U+10FC with new version
  * Sans: added Georgian Nuskhuri U+2D00-U+U+2D25
  * Sans: added Private Use Area glyphs for Georgian U+F400-U+F441
  * Sans: tweaked U+0250, U+0254
  * Sans: adjusted hinting of U+032C-U+032D, avoiding problem on
    some platforms
  * Sans: added U+A7A0-U+A7A9, pre-1921 Latvian letters with
    oblique stroke
  * Sans: added anchors to U+2C6D
  * Sans: added cedilla anchor to some Latin characters
  * Sans: added ogonek anchor to A, E, O, U, Y
  * Sans: adjusted ogonek reference in U+0172, U+01EA, U+01EB
  * Sans: added anchors to U+0104, U+0105
  * Sans: added U+1F600, U+1F611, U+1F615, U+1F617, U+1F619,
    U+1F61B, U+1F61F, U+1F626-U+1F627, U+1F62E-U+1F62F, U+1F634
  * Sans: replaced U+27A1 with mirror image of U+2B05 for consistency
  * Sans: copied hints from U+14A3, U+14A7 to U+2142-U+2143
  * Sans: added Lisu block
  * Sans: typographical improvements to U+0166-U+0167, U+02A6, U+02AA
  * Sans: slightly change hinting of "2" to fix bug 37395
  * Sans: fixed U+1444 which had wrong top dot that shouldn't be there
  * Sans: added anchors for diacritics to U+01B7, U+01B8, U+01B9, U+0292
  * Sans: added U+01B7, U+01B8 to context for case diacritics above
  * SansMono: fixed U+0574
  * SansMono: added U+2016, U+27C2
  * SansMono: added U+02CE, U+02CF
  * SansMono: added U+2148, U+27E6-U+27E7, U+2B05-U+2B0D, U+1D55A
  * Serif: added U+02BA, U+02C2-U+02C5, U+02CA-U+02CB, U+02D7, U+02F3,
    U+02F7, U+046C-U+046D, U+0476-U+0477, U+1D7C-U+1D7F, U+20B8, U+2132,
    U+214E, U+2C7B to Serif
  * Serif: typographic improvements to U+0194, U+01B1, U+0263, U+028A,
    U+02A6, U+02A8, U+02AA, U+02E0, U+03DC, U+1D3B, U+1D7B
  * Serif: added small cap versions of q, x (in italic styles), delta,
    theta, xi, sigma, phi, omega, not wired in yet
  * Serif: added anchors to U+0234-U+0236
  * Serif: added U+02EC, U+02EF, U+02F0, U+0360</changelog>
  <changelog author="cornelis@solcon.nl" date="1437048000">- Update to 2.35:
  * For details see: http://dejavu-fonts.org/wiki/Changelog</changelog>
  <changelog author="sflees@suse.de" date="1470052800">- Update to 2.37
  * Changes from 2.36 to 2.37
  * Fix issue with empty glyphs in condensed typefaces in the released source files.
  * Changes from 2.35 to 2.36
  * Math: added DejaVu Math Tex Gyre by B. Jackowski, P. Strzelczyk and P. Pianowski (on behalf of TeX users groups)
  * Sans: removed dot of U+06BA in all forms
  * Sans: fixed position of three dots of U+06BD in init and medi forms (by Denis Jacquerye)
  * Sans: corrected direction of contours in U+05E7 (by Lior Halphon]])
  * Sans: added U+1F643 (by Olleg Samoylov)
  * Serif: moved up U+0360-0361 (by Gee Fung Sit 薛至峰]])
  * Serif: increased spacing of Roman numerals U+2161-2163, U+2165-2168, U+216A-216B (by Gee Fung Sit 薛至峰)
  * Serif: fixed anchor position of U+00E6 (by Gee Fung Sit 薛至峰)
  * Sans: fixed vertical position of U+20BA (by Gee Fung Sit 薛至峰)
  * Sans, Serif: fixed glyph height of Block Elements (by Gee Fung Sit 薛至峰)
  * Sans, Serif: added U+A698-A699 (by Gee Fung Sit 薛至峰)
  * Sans, Mono, Serif: added U+037F (by Gee Fung Sit 薛至峰)
  * Mono: added U+0376-0377, U+037B-037D (by Gee Fung Sit 薛至峰)
  * Serif: removed duplicate point from U+1D05 (by Gee Fung Sit 薛至峰)
  * Mono: added U+20BA, U+20BD (by Gee Fung Sit 薛至峰)
  * Sans: Added moon symbols U+1F311-1F318 (by Ben Laenen)</changelog>
</package>
<package pkgid="afc89812d020dfc5158daa4dc582725a4b01d8f8336a890f483b904eda20d317db412eaa9572511863fd4929d748c06c5f3c7bbedc21ed01297edd84d21decdb" name="dejavu-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="160000.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed dejavu -&gt; dejavu-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1325592000">- license update: SUSE-Permissive
  Use this SPDX proprietary extension tag until upstream SPDX adopts a
  permissive category</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377518400">- Update to 2.34:
  * This release includes the addition of Lisu, an update of Georgian,
    the addition of some symbols and the addition and modification
    of several Latin characters.
  * Sans, SansMono, Serif: unlinked references of U+2596 for bug 50848
  * Sans, SansMono, Serif: added U+A7AA
  * Sans, SansMono, Serif: added U+2A6A, U+2A6B, U+2E1F based on U+223B
  * Sans, Serif: removed superfluous ligature definitions for
    ffl und ffi (bug 55363)
  * Sans, Serif: swapped glyphs for U+25D2 and U+25D3 (bug 55197)
  * Sans, Serif: added U+A740, U+A741
  * Sans: added U+20BA Turkish Lira sign
  * Sans: replaced Georgian Asomtavruli U+10A0-U+10C5 and Mkhedruli
    U+10D0-U+10FC with new version
  * Sans: added Georgian Nuskhuri U+2D00-U+U+2D25
  * Sans: added Private Use Area glyphs for Georgian U+F400-U+F441
  * Sans: tweaked U+0250, U+0254
  * Sans: adjusted hinting of U+032C-U+032D, avoiding problem on
    some platforms
  * Sans: added U+A7A0-U+A7A9, pre-1921 Latvian letters with
    oblique stroke
  * Sans: added anchors to U+2C6D
  * Sans: added cedilla anchor to some Latin characters
  * Sans: added ogonek anchor to A, E, O, U, Y
  * Sans: adjusted ogonek reference in U+0172, U+01EA, U+01EB
  * Sans: added anchors to U+0104, U+0105
  * Sans: added U+1F600, U+1F611, U+1F615, U+1F617, U+1F619,
    U+1F61B, U+1F61F, U+1F626-U+1F627, U+1F62E-U+1F62F, U+1F634
  * Sans: replaced U+27A1 with mirror image of U+2B05 for consistency
  * Sans: copied hints from U+14A3, U+14A7 to U+2142-U+2143
  * Sans: added Lisu block
  * Sans: typographical improvements to U+0166-U+0167, U+02A6, U+02AA
  * Sans: slightly change hinting of "2" to fix bug 37395
  * Sans: fixed U+1444 which had wrong top dot that shouldn't be there
  * Sans: added anchors for diacritics to U+01B7, U+01B8, U+01B9, U+0292
  * Sans: added U+01B7, U+01B8 to context for case diacritics above
  * SansMono: fixed U+0574
  * SansMono: added U+2016, U+27C2
  * SansMono: added U+02CE, U+02CF
  * SansMono: added U+2148, U+27E6-U+27E7, U+2B05-U+2B0D, U+1D55A
  * Serif: added U+02BA, U+02C2-U+02C5, U+02CA-U+02CB, U+02D7, U+02F3,
    U+02F7, U+046C-U+046D, U+0476-U+0477, U+1D7C-U+1D7F, U+20B8, U+2132,
    U+214E, U+2C7B to Serif
  * Serif: typographic improvements to U+0194, U+01B1, U+0263, U+028A,
    U+02A6, U+02A8, U+02AA, U+02E0, U+03DC, U+1D3B, U+1D7B
  * Serif: added small cap versions of q, x (in italic styles), delta,
    theta, xi, sigma, phi, omega, not wired in yet
  * Serif: added anchors to U+0234-U+0236
  * Serif: added U+02EC, U+02EF, U+02F0, U+0360</changelog>
  <changelog author="cornelis@solcon.nl" date="1437048000">- Update to 2.35:
  * For details see: http://dejavu-fonts.org/wiki/Changelog</changelog>
  <changelog author="sflees@suse.de" date="1470052800">- Update to 2.37
  * Changes from 2.36 to 2.37
  * Fix issue with empty glyphs in condensed typefaces in the released source files.
  * Changes from 2.35 to 2.36
  * Math: added DejaVu Math Tex Gyre by B. Jackowski, P. Strzelczyk and P. Pianowski (on behalf of TeX users groups)
  * Sans: removed dot of U+06BA in all forms
  * Sans: fixed position of three dots of U+06BD in init and medi forms (by Denis Jacquerye)
  * Sans: corrected direction of contours in U+05E7 (by Lior Halphon]])
  * Sans: added U+1F643 (by Olleg Samoylov)
  * Serif: moved up U+0360-0361 (by Gee Fung Sit 薛至峰]])
  * Serif: increased spacing of Roman numerals U+2161-2163, U+2165-2168, U+216A-216B (by Gee Fung Sit 薛至峰)
  * Serif: fixed anchor position of U+00E6 (by Gee Fung Sit 薛至峰)
  * Sans: fixed vertical position of U+20BA (by Gee Fung Sit 薛至峰)
  * Sans, Serif: fixed glyph height of Block Elements (by Gee Fung Sit 薛至峰)
  * Sans, Serif: added U+A698-A699 (by Gee Fung Sit 薛至峰)
  * Sans, Mono, Serif: added U+037F (by Gee Fung Sit 薛至峰)
  * Mono: added U+0376-0377, U+037B-037D (by Gee Fung Sit 薛至峰)
  * Serif: removed duplicate point from U+1D05 (by Gee Fung Sit 薛至峰)
  * Mono: added U+20BA, U+20BD (by Gee Fung Sit 薛至峰)
  * Sans: Added moon symbols U+1F311-1F318 (by Ben Laenen)</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252142]</changelog>
</package>
<package pkgid="4704fe4c10302f84405e240c634482bf747f9c77a84a11fb3802ba099007f8784a74829e432597bd553f7b5343557d7b17cfa9f3f854da5b5d433dc895305c90" name="delayacct-utils" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="bp160.1.12"/>
  <changelog author="dmueller@suse.de" date="1235044800">- drop unnecessary patch, it is now upstream (in the kernel tree)</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1359201600">- fix build</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1403179200">- delayacct-utils-nl.patch DO not attempt to link getdelays
  with libnl1, it is a bogus dependency, resulting executable
  never uses the library.</changelog>
  <changelog author="meissner@suse.com" date="1484049600">- adapt to new kernel version and new location of getdelays.c</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1554206400">- BuildRequire kernel-devel because we want to rebuild
  when it gets updated</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649419200">- rebuild when kernel version changes
- spec cleaning</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="58c0a9943d7f6b1d023242397612d5aca0e2d25fea4d87228e247e82496e24a2e60882f6c85893707d1b6ef4730d740f936533cc74cf26b670b0c8c8e563ee44" name="delayacct-utils-rebuild" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="bp160.1.12"/>
  <changelog author="dmueller@suse.de" date="1235044800">- drop unnecessary patch, it is now upstream (in the kernel tree)</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1359201600">- fix build</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1403179200">- delayacct-utils-nl.patch DO not attempt to link getdelays
  with libnl1, it is a bogus dependency, resulting executable
  never uses the library.</changelog>
  <changelog author="meissner@suse.com" date="1484049600">- adapt to new kernel version and new location of getdelays.c</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1554206400">- BuildRequire kernel-devel because we want to rebuild
  when it gets updated</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1649419200">- rebuild when kernel version changes
- spec cleaning</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="232380e598106ce2afbb45321ddb756b53dbaa78d3113a51da7bdb117464a91c64079b2842edce5c1b8c349de021d16308c1c43e74269cb54a548168af982dd1" name="deltarpm" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="bp160.1.9"/>
  <changelog author="ro@suse.de" date="1448366400">- update to version 3.6.1
  - remove upstreamed patch deltarpm-zlibcppflags.diff
  - fix off-by-one error in delta generation code (bnc#948504)
    This could lead to a segfault in rare circumstances.
  - Return error rather than crashing if we can't allocate memory
  - add newline in missing prelink error
  - do not finish applydeltarpm jobs when in the middle of a request
  - fix zlibcppflags typo</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Build python3 bindings as well
- Rename python2 subpackage to name consistent with current python
  packaging
- Drop patch.sles8 - there does not seem to be any reason for it</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Correct provides/obsoletes for python2 subpackage</changelog>
  <changelog author="tchvatal@suse.com" date="1515153600">- Make python2 and python3 conditional to ensure we can build with
  python3 only</changelog>
  <changelog author="mls@suse.de" date="1560427200">- update to deltarpm-3.6.2
  * support for zstd compression</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561204800">- Actually enable zstd compression</changelog>
  <changelog author="mls@suse.de" date="1635508800">- update to deltarpm-3.6.3
  * support for threaded zstd compression</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1649851200">- deltarpm-b7987f6aa4211df3df03dcfc55a00b2ce7472e0a.patch: fixed
  some C bugs ( incorrect sized memset() , memcpy instead of strcpy,
  unsigned int)</changelog>
  <changelog author="mls@suse.de" date="1723032000">- update to deltarpm-3.6.4
  * support for threaded zstd
  * use a tmp file instead of memory to hold the incore data
    [bsc#1228948]
- dropped patches:
  * deltarpm-b7987f6aa4211df3df03dcfc55a00b2ce7472e0a.patch</changelog>
  <changelog author="mls@suse.de" date="1726228800">- update to deltarpm-3.6.5
  * support for archive files bigger than 2GByte [bnc#1230547]</changelog>
</package>
<package pkgid="40db7da6573cf8a3772b51aeea046b499fe1a959ce56b301d10cc772519b2e54b566412a101c0678451be3108b936be489efbe874f9581e4c68110488f47d55a" name="delve" arch="x86_64">
  <version epoch="0" ver="1.23.1" rel="bp160.1.12"/>
  <changelog author="jkowalczyk@suse.com" date="1680782400">- Update to version 1.20.2:
  * proc: fix TestEvalExpression on Windows (#3313)
  * terminal: Fix printing boolean values in Starlark scripts (#3314)
  * proc: fix escapeCheck infinite recursion if something can not be (#3311)
  * proc: support multiple functions with the same name (#3297)
  * proc: fuzzing expression evaluator and variable loader (#3293)
  * proc: limit maximum time.Time we try to format (#3294)
  * Documentation: expand project layout to match usage (#3304)
  * proc: fix automatic breakpoints visibility (#3300)
  * proc,terminal: remove unused unexported functions (#3299)
  * cmd/dlv: Add flag to replay for rr onprocess pid (#3281)
  * proc: do not try to load a non-empty slice if the base address is 0 (#3295)
  * Documentation: fix typo and grammar issues (#3291)
  * dwarf/line: enable TestGrafana on Windows (#3289)
  * dwarf/op: change generated comment header (#3288)
  * proc,proc/native: adds ability to automatically debug child processes (#3165)
  * Default to stop test_windows.ps1 when there is an error (#3285)
  * dwarf/line: handle end_seq properly (#3277)
  * proc: remove unused parameter from resolveParametricType (#3276)
  * TeamCity,Documentation: use new TeamCity URL (#3275)
  * terminal/logflags: Added `SetLoggerFactory(LoggerFactory)` (#3257)
  * *: remove some code for Go 1.12 or earlier (#3271)
  * pkg/proc,service/test: refactor to strings.ReplaceAll (#3269)
  * _scripts: Update staticcheck (#3270)
  * proc/native: fix syscalls to SYS_PROCESS_VM_READV (and WRITEV) (#3273)
  * dwarf: fix broken external url to arm dwarf mapping (#3272)
  * Documentation: watch example for arbitrary address (#3268)
  * service/dap: correct typos in comments (#3264)
  * cmd/dlv: fix exit status for trace subcommand  (#3263)
  * godwarf: Allow extracting a DWARF entry's field (#3258)
  * _scripts: fix log.Printf format specifier (#3260)
  * cmd/dlv, pkg/proc: use T.TempDir in tests (#3256)
  * pkg/proc: do not check decl line for FunctionArguments (#3254)
  * terminal: use exact window size for pager (#3249)
  * proc/dwarf: Move util functions to dwarf package (#3252)
  * proc/dwarf: LEB128 encode/decode in separate pkg (#3235)
  * debugger,terminal: Allow setting and clearing breakpoints after process exit (#3246)
  * pkg/terminal: use default for Y/n empty response (#3248)
  * godwarf: Attempt to load `DW_AT_specification` if present (#3247)
  * terminal: Add config options for tab printing (#3243)
  * pkg/proc: fix stripping DYLD_INSERT_LIBRARIES on macOS (#3245)
  * cmd/dlv: match go test behavior when dlv test gets a list of .go files (#3232)
  * pkg/proc: populate pointer values (#3229)
  * pkg/terminal: fix handling list colors via config (#3240)
  * Documentation: document how to debug runtime with Delve (#3234)
  * go.mod: update github.com/google/go-dap to v0.7.0 (#3237)
  * pkg/proc: apply simplifycompositelit analysis fixes (#3236)
  * proc: Fix typos in the comments (#3231)
  * service/debugger: fix comment on EvalVariableInScope (#3225)
  * proc/native: fix FreeBSD backend (#3224)
  * TeamCity: fix windows/amd64 builds (#3223)
  * Documentation/faq: Correct commands in substitute-path section (#3222)
  * *: Change comments to match common Go standarts (#3221)
  * Update github.com/derekparker/trie dependency (#3219)
  * dwarf/frame: Remove expression constants (#3218)
  * proc: replace os.SEEK_CUR with io.SeekCurrent (#3214)
  * Documentation: add -test.run to test example (#3212)
- Packaging update source service mode to manual formerly disabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1687953600">- Update to version 1.21.0:
  * all: Bump to v1.21.0 (#3428)
  * proc: skip TestDebugStripped on linux/386/pie (#3427)
  * service/dap: fix typos in comments (#3426)
  * pkg/proc: improve stripped binary support with PIE (#3421)
  * proc: only print warning when gopclntab can not be read for first image (#3420)
  * service,terminal: when libraries don't have debug_info print reason (#3419)
  * pkg/terminal: regenerate starlark mappings (#3418)
  * pkg/proc: fix ebpf probe tracing backen uprobe handling (#3417)
  * pkg/proc: enable basic debug functionality for stripped ELF binaries (#3408)
  * terminal/starbind: add online help for starlark (#3388)
  * service/dap: update go-dap to latest (#3414)
  * TeamCity: fix linux/arm64 build (second attempt) (#3411)
  * terminal: expand ~ in paths passed to 'source' (#3387)
  * proc/test: reenable cgo testing on FreeBSD (#3394)
  * terminal: ask for confirmation when using 'quit -c' with breakpoints (#3398)
  * TeamCity: fix linux/arm64 build (#3403)
  * rpc2, debugger: Fix comments around goroutine grouping (#3374)
  * cmd/commands: Fix to read debug info file from the correct directory when using trace command with -e option. (#3405)
  * starbind: fix use of ptr variables in starlark  (#3386)
  * debugger: inline clearBreakpoint, createLogicalBreakpoint (#3389)
  * TeamCity: actually run linux/386 tests on linux/386 (#3392)
  * service/rpccommon: correct wrong comments (#3397)
  * docgen: fix links with trailing dots  (#3399)
  * dwarf: ignore DeclLine for function args (#3400)
  * _scripts: fix typos (#3402)
  * dwarf/op: use readMemory function (#3391)
  * starbind: Make the time module available to star scripts (#3375)
  * documentation: add a note about starlark structs (#3376)
  * debuginfod-find stderr may contain diagnostics; look at stdout only for filename (#3381)
  * dwarf,proc: fix typos in comments and error messages (#3379)
  * service: fix typos in comments, logs, tests, and vars (#3378)
  * proc: remove addrret field from Stackframe struct (#3373)
  * pkg/proc,pkg/terminal: close response body in tests (#3372)
  * cmd/dlv,service/dap: use randomized name as default output binary (#3366)
  * pkg/proc: pad variable mem in extractVarInfoFromEntry (#3365)
  * cmd/dlv: logger is not closed in connect command (#3367)
  * proc: fix runtime type handling for Go 1.21 (#3370)
  * proc,terminal: read command line of new processes (#3346)
  * trace: add timestamp to the output (#3358)
  * service/dap: refactor funcs always returning nil error (#3357)
  * dwarf/godwarf: fix alignment calculation for typedef types (#3362)
  * refactor: replace `Readdir(-1)` with `os.ReadDir` (#3361)
  * chore: don't ignore directory cmd/dlv (#3359)
  * pkg/proc: add missing response body Close in test (#3355)
  * pkg/proc: remove memlock limit for ebpf trace backend (#3353)
  * *: misc improvements to config command and substitute-path rules (#3335)
  * service/dap: use reloaded value
  * service/dap,service/debugger: refactor regexp funcs
  * proc/test: replace old func testName with T.Name
  * service: fix typos in comments (#3344)
  * Add additional information to how to filter goroutines
  * service/debugger,terminal: API and user interface for follow exec mode (#3286)
  * proc/native: support core dumping on FreeBSD (#3305)
  * debugger: do not panic if defer location can not be found (#3329)
  * proc: Simplify eBPF backend implementation (#3325)
  * proc: step breakpoints shouldn't hide normal breakpoints (#3287)
  * service/dap: fix failing test on Go 1.21 (#3312)
  * proc: disable flaky tests on windows/arm64 (#3328)
  * proc: fix match condition in TestGnuDebuglink
  * proc: fix test by adding missing assert</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1693310400">- update summary and architecture excludes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1698667200">- Update to version 1.21.1:
  * V1.21.1 (#3518)
  * all: replace deprecated io/ioutil with io and os (#3509)
  * pkg/proc: macho: Enable debugging stripped binaries (#3511)
  * fix memory leak (#3512)
  * pky/proc: enable function call injection in Delve for linux/ppc64le (#3449)
  * pkg/terminal: support more editors with edit command (#3506)
  * proc: move StepInstruction method to TargetGroup (#3488)
  * Various fixes for go 1.22 (#3455)
  * service/dap: accept a string list as launch request's buildFlags (#3496)
  * _scripts: remove unnecessary os.ExpandEnv (#3504)
  * proc,service: simplify tests with T.Setenv (#3503)
  * pkg/terminal: add 'packages' command (#3499)
  * pkg/proc/internal/ebpf: remove redundant nil check (#3502)
  * service/dap: strip package paths from symbols in callstack (#3500)
  * pkg/proc: Fix PIE tests on ppc64le port (#3498)
  * go.mod: update version of github.com/cilium/ebpf (#3491)
  * api,dap: fix hexadecimal printing of vars with symbolic const values (#3487)
  * pkg,service: fix typos in comments, exceptions, tests (#3486)
  * proc: refactorings to implement follow-exec mode on Windows (#3441)
  * proc,service,terminal: add ways to list goroutines waiting on a channel (#3481)
  * proc: disable "wait-for" tests on freebsd (#3482)
  * DWARF CFI: use a stack for restore/remember opcodes (#3480)
  * proc: remove unused functions (#3479)
  * cmd/dlv: handle ctrl-c during tracing (#3477)
  * teamcity: misc changes to CI (#3476)
  * proc: when stepping set condition on thread ID if there is no curg (#3475)
  * pkg/proc: add support for more types in ebpf tracing backend (#3474)
  * pkg,service: make receiver names consistent (#3473)
  * goversion: parse new version format and simplify version representation (#3470)
  * Update target.go (#3471)
  * *: remove deepsource.toml (#3468)
  * gobuild: pass user specified -C argument first (#3456)
  * locspec: fix SubstitutePath when converting a Windows path to Linux (#3453)
  * proc: fix stacktraces on freebsd/amd64/go1.20 (#3458)
  * proc: fix PIE support on macOS (#3467)
  * teamcity: hold back linux/386 builds to 1.20 (#3465)
  * service/dap: use == to test io.EOF (#3464)
  * goversion,teamcity: update test matrix and fix build scripts (#3463)
  * *: Fix ppc64le test runs (#3460)
  * Documentation,cmd/dlv: clean up command line usage help (#3395)
  * proc: add waitfor option to attach (#3445)
  * logflags: simplify Logger interface (#3274)
  * starbind: fix Starlark slice unmarshaling (#3454)
  * pkg/terminal: use reflect.Value.IsValid to check a zero Value (#3450)
  * proc: replace use of runtime.GOARCH with Arch.Name (#3442)
  * proc,ebpf: mark as unreadable args with unsupported types with ebpf (#3444)
  * service/api: in multiline mode print address of pointers (#3448)
  * terminal: restore breakpoints set with line offset on restart (#3425)
  * all: use "len == 0" rather than "len &lt;= 0" when checking empty slice/string (#3439)
  * service/dap: fix typos in comments (#3438)
  * pkg/proc: simplify code with trivial changes (#3436)
  * *: add linux/ppc64le targets (#3435)
  * terminal,service: better printing of suspended breakpoints (#3415)
  * proc: check recursion level when loading pointers (#3431)
  * *: add ppc64le support (#2963)
  * service/dap: fix test for debug in progress (#3407)
  * all: fix typos (#3434)
  * pkg,service: refactor to use %q instead of "%s" (#3430)
  * pkg/dwarf/frame: fix FrameDescriptionEntries's Append (#3433)
  * pkg/proc,service/*: Supports sending output to clients when running programs remotely (#3253)
  * proc: read context from sigtrampgo, fixes TestCgoStacktrace2 on 1.21 (#3401)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1698667201">- Update to version 1.21.2:
  * *: release 1.21.2 (#3543)
  * proc: use DW_AT_trampoline to detect auto-generated code (#3528)
  * proc/native: use cgo instead of C for freebsd (#3529)
  * service/test: disable TestClientServer_chanGoroutines with rr backend (#3492)
  * proc: implement follow exec mode on Windows (#3507)
  * Use a valid timezone in tested binary (#3527)
  * pkg/terminal: support vscode in edit command (#3524)
  * service/dap: fix bugs in stdout/stderr handling (#3522)
  * service/dap: add the concrete type to interface type (#3510)
  * all: remove obsolete build tags "// +build" (#3513)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1698667202">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * Update to BuildRequires: golang(API) &gt;= 1.17 matching go.mod
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Drop go build -o arg, default binary name is pkg of main()
  * Drop comment about upstream Makefile static build options fail
  * Add basic %check to execute binary --help</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1703851200">- Update to version 1.22.0:
  * *: release version 1.22.0 (#3606)
  * *: Update gore dep for 1.22 (#3611)
  * proc: fix TestPackageRenames on go1.22 on linux/386 (#3610)
  * service/dap: fix close on closed channel (#3609)
  * goversion: include pre-releases in VersionAfterOrEqual check (#3607)
  * proc: fix ppc64 arch name check (#3608)
  * teamcity,version: add 1.22 to supported versions and CI matrix (#3601)
  * proc: make some type casts less counterintuitive
  * *: Use forked goretk/gore module (#3597)
  * Show pprof labels in thread names (#3501)
  * service/dap: fix close on closed channel panic (#3573)
  * add all branches but PRs to filter (#3590)
  * all: run go mod tidy (#3589)
  * tests: fix tests in go1.22 (#3583)
  * proc: skip trapthread for harcoded breakpoints after manual stop (#3582)
  * proc: fix TestIssue1101 flake (#3585)
  * update TeamCity DSL version to 2023.05 and remove tip configurations from Aggregator (#3581)
  * add missing import in TeamCity DSL (#3580)
  * pkg/proc: use gore to obtain info from stripped binaries (#3577)
  * CI: update teamcity settings (#3579)
  * pkg,service/dap: use switch instead of ifs (#3576)
  * CI: Extract tip builds into a separate sub-project (#3578)
  * proc/gdbserial: refactor parsing of key-value pairs from gdb protocol (#3574)
  * proc: simplify and generalize runtime.mallocgc workaround (#3571)
  * TeamCity: remove windows/arm64 builders from chain (#3572)
  * service: fix typo in variable name (#3575)
  * terminal: clear substitute path rules cache when config is used (#3567)
  * *: remove checks for TRAVIS env variable (#3568)
  * pkg,service: remove unnecessary convertions (#3564)
  * chore: use strings.Contains instead (#3562)
  * pkg/proc: unskip passing tests and reorganize (#3561)
  * pkg/proc: improve support unwinding from sigpanic (#3559)
  * TeamCity: reupgrade linux/386 builder to Go 1.21 (#3560)
  * Shorten variable types (#3535)
  * pkg,service: Remove redundant build constraints (#3556)
  * *: Correct spelling mistakes (#3555)
  * service: fix a bunch of linter warnings from GoLand (#3551)
  * *: update dependencies (#3552)
  * proc: add regression test for issue #3548 (#3553)
  * cmd: fix a bunch of linter warnings from GoLand (#3550)
  * pkg/proc: add inline function support for stripped binaries (#3549)
  * proc/native: wherever we check for exited we should also check detached (#3547)
  * *: release 1.21.2 (#3546)
  * proc,service/dap,proc/gdbserial: fixes for debugserver --unmask-signals (#3541)
  * *: Add explicit code of conduct (#3540)
  * proc: allow evaluator to reference previous frames (#3534)
  * service/api: use bitfield for prettyprint flags (#3536)
  * proc: remove expr evaluation goroutine from EvalExpressionWithCalls (#3532)
  * CI: update staticcheck version (#3533)
  * proc: add min and max builtins (#3530)
  * proc: fix comment typos (#3531)
  * proc: use stack machine to evaluate expressions (#3508)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1709726400">- Update to version 1.22.1:
  * *: release version 1.22.1 (#3662)
  * pkg/proc: remove usage of gore dependency (#3664)
  * cmd/dlv: fix --continue with unix domain sockets (#3658)
  * Don't use a fixed width for s when parsing /proc/net/tcp lines (#3660)
  * *: update gore (#3659)
  * terminal: add prompt color option (#3648)
  * terminal: add color highlighting to stacktraces (#3649)
  * cmd/dlv: support unix domain sockets (#3655)
  * service/dap: support waitfor option for 'dap attach' only (#3656)
  * *: update go-delve/gore (#3646)
  * *: remove accidentally committed binary (#3645)
  * proc: if a reslice operator is used load the whole slice (#3623)
  * proc/gdbserver: clean up rr directory on detach (#3570)
  * proc: skip TestDebugStripped on development versions of Go (#3642)
  * evalop: fix name of executeOp function in test (#3643)
  * service/dap: make TestEvaluateCallFunction independent of line numbers (#3644)
  * proc/native: add support sentinel for FreeBSD with cgo disabled (#3636)
  * make.go: do not recodesign when rebuilding (#3639)
  * proc/native: remove dead code in nonative_darwin.go (#3637)
  * proc: fix stacktrace frame after runtime.sigpanic (#3638)
  * proc: fix dynamic library loading with musl loader (#3621)
  * proc: fix TestCondBreakpointWithFrame flakes on 1.22rc1 (#3624)
  * terminal: add paging to print, vars, args and locals (#3620)
  * TeamCity: speed up ppc64le CI (#3622)
  * Documentation: document runtime.frame(n).varname (#3625)
  * go.mod: Update version of go-delve/liner (#3619)
  * Cirrus-CI: update FreeBSD version (#3618)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1721131200">- Update to version 1.23.0:
  * *: release version 1.23.0 (#3782)
  * teamcity: fix typo in configuration (#3783)
  * goversion: add 1.23 to supported versions, update test matrix (#3780)
  * proc: fix bug with range-over-func stepping (#3778)
  * *: replace old golang.org links with new go.dev (#3774)
  * service/rpc1: add Go Reference doc (#3779)
  * proc: use .closureptr for stepping through range-over-func statements (#3763)
  * pkg/dwarf/line: use t.Logf instead of fmt.Printf in tests (#3772)
  * pkg: refactor to buf.WriteString() (#3769)
  * pkg/terminal: add missing file.Close() call (#3770)
  * go.mod: update gopkg.in/yaml to v3 (#3776)
  * pkg/proc: fix 404 links and change to https (#3775)
  * *: remove redundant lines at the start/end of block (#3773)
  * fix: LoadAbstractOriginAndSpecification infinite loop caused by abstract origin point to itself. (#3767)
  * service/debugger: evaluate breakpoint vars on g-less threads (#3759)
  * proc: support stepping through range-over-func statements with inlining (#3755)
  * fix: mem cache out of range panic caused by overflow (#3761)
  * pkg/proc,service/debugger: fix debuginfod-find source (#3762)
  * refactor: move loadModuleData from runtimeTypeToDIE and expose the apis (#3741)
  * all: fix typos in docs, comments and package name (#3757)
  * pkg/terminal: do not use deprecated strings.Title (#3756)
  * proc: initial support for expressions with range-over-func (#3750)
  * *: replace fmt.Errorf with errors.New (#3752)
  * pkg/astutil,pkg/elfwriter: fix package doc (#3753)
  * service: print better message for unattended stops (#3747)
  * proc: refactor identifier evaluation for range-over-func support (#3738)
  * proc: fix TestRangeOverFuncNext (#3740)
  * proc: fix bug with stack watchpoints going out of scope (#3742)
  * pkg/terminal,service/debugger: Support to add a new suboption --follow-calls to trace subcommand  (#3594)
  * cmd/dlv: print out message with stack trace when breakpoint is hit but has no waiting client (#3632)
  * proc: initial stepping with range-over-func support (#3736)
  * proc/gdbserial: add environment variables to configure rr invocation (#3726)
  * *: update actions/checkout to v4 (#3731)
  * *: remove redundant lines at the start/end of block (#3730)
  * pkg/terminal: remove deprecated starlark global options (#3722)
  * gdbserial: fixes for rr 5.7.0 (#3718)
  * gdbserial: update path of lldb protocol extension documentation (#3727)
  * pkg/proc/gdbserial: optimize gdbwire backend (#3715)
  * _scripts: upgrade to python3 (#3716)
  * pkg/proc: fix watchpoints on macos (#3703)
  * pkg/terminal: Add function name to return tracepoints (#3712)
  * rr: fix gdb parsing (#3705)
  * proc: generalize escapeCheck and allocString (#3687)
  * cmd/dlv: improve positional argument completion (#3699)
  * pkg/terminal: remove duplicated word (#3707)
  * pkg/terminal: clear erroneous name setting on postfix if (#3702)
  * tests: fix tests on Go 1.23 (#3697)
  * cmd/dlv: fix panic on connect fail (#3698)
  * cmd/dlv: add shell (non-)completions to flags taking args (#3696)
  * proc: change 'step' command so that it steps through go statements (#3686)
  * pkg/terminal: allow postfix if for breakpoint conds (#3693)
  * proc: support reading captured variables of closures (#3682)
  * pkg/proc: defend better against missing DWARF (#3695)
  * proc,go.mod: update x/sys remove KeepAlive calls (#3680)
  * proc: catch panics when reading debug info for stripped executables (#3678)
  * dwarf/loclist: remove impossible condition (#3677)
  * Cirrus-CI: update to FreeBSD 13.3 (#3679)
  * proc/evalop: remove no longer needed old Go files (#3676)
  * pkg/terminal: print breakpoint number on stop (#3675)
  * pkg/terminal,pkg/proc: Implement next-instruction (#3671)
  * *: Upgrade github.com/google/go-dap (#3673)
  * elfwriter: add WriteSectionHeaders (#3666)
  * *: misc fixes for go1.23 (#3663)
  * dwarfbuilder: fix makeAbbrevTable (#3665)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1727092800">- Update to version 1.23.1:
  * *: release version 1.23.1 (#3816)
  * proc: cache module data (#3800)
  * proc: for optimized functions allow .closureptr to not exist (#3808)
  * proc: improve Rosetta check (#3810)
  * proc: fix result type of division of untyped constants (#3794)
  * service/dap: fix test failure with 1.24 (#3805)
  * service/dap: make handlesMap generic (#3798)
  * proc: workaround for macOS section name truncation (#3799)
  * terminal/starbind: fix starlark conversion of named consts (#3802)
  * chore: fix function name (#3803)
  * eval: Allow reslicing a slice up to its cap, rather than its length (#3796)
  * proc: fix TestRangeOverFuncNext on linux/386 (#3795)
  * proc: fix step stuttering when entering range-over-func bodies (#3788)
  * proc: move stepping test to their own file (#3784)</changelog>
</package>
<package pkgid="982e0759051f910bba37f000a821bd26320f01ec7f7ddd748436245d6e88193ae698113b82f00972599525146ba17f0680b86566b2f7b3b9c1e21788fc52038a" name="demumble" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="bp160.1.12"/>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Initial release on OBS</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1715601600">- update to 1.2.3:
  * Update LLVM demangling libraries to a new version
  * Build using C++17
  * Don't silently omit suffices on ms symbols</changelog>
</package>
<package pkgid="d8ede68efbf42a27d0d54cccb1262d66a8f8d44ad89217569f44067cfba2f7ded9c3bf096f921e00254946632841cda8c74942cca34bd95260c889d901edf384" name="descent3" arch="x86_64">
  <version epoch="0" ver="1.6.0~git533.c99e57c" rel="bp160.1.3"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1724932800">- Initial package (1.6.0~g101.2db85ca) for build.opensuse.org.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1726228800">- Update to snapshot 1.6.0~g226.616f921e with over 30 crash fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1727006400">- Add "online" directory to ~/.config/descent3 to make multiplayer
  available.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1727092800">- Make Leap 15.x builds succeed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1731412800">- Update to snapshot 1.6.0~git397.ab3f28dc
  * Resolve a game crash in Retribution level 12's matcen room
  * Level selector dialog has been reworked, now shows level titles
  * Fixed cutscenes sometimes having excessive black borders</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1741262400">- Update to snapshot 1.6.0~git533.c99e57c
  * Internal rewrite for SDL3
  * Internal rewrite of HTTP client in Descent3 Online
  * New command line option ``-display``</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1748433600">- Add fstream.patch to resolve source build failure with new
  compiler</changelog>
</package>
<package pkgid="b9ff8df6c0aac949d13900ee3f1d2c96ebce8850d589807e4d903c5bb3405ff67e9fd669210595b1096e682e100ca9c91aeae1362fc848b258063e698a0d14ca" name="deskflow" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="bp160.1.4"/>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744632000">- initial packaging</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1746792000">- move LICENSE_EXCEPTION to %license</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1748606400">- update to 1.22.0:
  * Remove the broken drag and drop support
  * Improve the windows daemon
  * Use Deskflow-server.conf for the external server config name
  * Code base is now 60% less smelly
  * Fix issues around the dialog shown when you first connect a server</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1751284800">- add patch disable-updater.patch, this disables by default the internal
  updater, and hides the UI elements</changelog>
</package>
<package pkgid="6a3d2cd5f3ab0295d50dd3048987d71a5764393e690d18cc37fbee62057d2cde75c9050aae459683381504888093f9f0014f2c61d2961052d0b97104a355e940" name="deskflow-doc" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="bp160.1.4"/>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1744632000">- initial packaging</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1746792000">- move LICENSE_EXCEPTION to %license</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1748606400">- update to 1.22.0:
  * Remove the broken drag and drop support
  * Improve the windows daemon
  * Use Deskflow-server.conf for the external server config name
  * Code base is now 60% less smelly
  * Fix issues around the dialog shown when you first connect a server</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1751284800">- add patch disable-updater.patch, this disables by default the internal
  updater, and hides the UI elements</changelog>
</package>
<package pkgid="35b620b78816663cbabe383a378dd4ca1f8ab12b5149cc163d70d84180360b2b5fe0e233249f12569d849ed81445a888e28b00c36293cc6eea9fa2e53606e7af" name="desktop-data-openSUSE" arch="noarch">
  <version epoch="0" ver="15.2.20200107" rel="lp160.5.1"/>
  <changelog author="alarrosa@suse.com" date="1453982400">- Added package_edutainment.png which is used by Yast's software
  management module as Education package group icon (bnc#953027)</changelog>
  <changelog author="alarrosa@suse.com" date="1455624000">- Upgraded package from upstream sources.
- Removed the update_rpm script and replaced it with a proper
  obs source service (disabled by default). Use xz compression
  instead of bz2.
- Removed package_edutainment.png icon "patch" since it's now
  properly installed from the upstream sources.
- Updated the spec file accordingly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Update to version 15.0.20171023:
  * Drop /etc/skel/public_html (boo#1064226).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509019200">- Update to version 15.0.20171024:
  * Remove update_rpm: the package has been converted to _service</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hellcp@opensuse.org" date="1544788800">- Update to version 15.1.20181213:
  * Replace old menus and set wallpapers for Gnome
  * Remove all irrelevant stuff from KDE4, Novell and duplicated icons
  * Fix up cursors not working by default, DMZ theme doesn't exist</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="hellcp@mailbox.org" date="1574596800">- Update to version 15.1.20191124:
  * Remove remaining wallpapers
  * Remove unused icon directory
  * Don't set cursor on empty input
- No longer requires DMZ Cursors, as the fillup no longer contains
  the theme by default</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1578398400">- Update to version 15.2.20200107:
  * Fix csh (boo#1158422)</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1609329600">- Move call-browser and desktop-launch symlink to xdg-utils.</changelog>
</package>
<package pkgid="68857bb2f8d24586b4b0cb505ba30806ef2cdd4eb2522036413ddb1bc29519acf05fa8025be91cd7df270c0053b2422716ed29546af20cf82a2c8e3e9f0fc479" name="desktop-file-utils" arch="x86_64">
  <version epoch="0" ver="0.28" rel="160000.2.2"/>
  <changelog author="cunix@mail.de" date="1593432000">- Update to version 0.26:
  * Support for Autotools removed in the next release.
  * update-desktop-database
    + Fix erroneous installation as "desktop-file-update"
    when using the Meson build system
- Update to version 0.25:
  * common
    + Add Meson build system
  * desktop-file-validate
    + Allow desktop file spec version 1.4.
    + Make it possible to deprecate keys starting with "X-".
    + Add the "Implements" field from spec version 1.2.
    + Add the "PrefersNonDefaultGPU" key and deprecate "X-KDE-RunOnDiscreteGpu".
    + Set locale for correct output message encoding.
    + Add coloured output support.
    + Fix parsing of escaped double quote in quoted strings.
    + Add GNOME Flashback, GNOME Classic desktops.
- desktop-file-utils-suse-keys.patch rebased.
- Switched to Meson build system.
- "--with-lispdir" deleted because no build loop anymore visible.
- "install_man_desktop-file-edit_as_symlink.patch" added to install
  duplicated manual page as a symlink instead of a file copy with
  help from added script "install_man.py".</changelog>
  <changelog author="andythe_great@pm.me" date="1594900800">- Clean spec file.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016000">- suse-update-mime-defaults: add Pantheon desktop environment</changelog>
  <changelog author="gmbr3@opensuse.org" date="1648209600">- suse-update-mime-defaults: add Budgie desktop environment</changelog>
  <changelog author="christophe@krop.fr" date="1656072000">- Add patches to avoid bogus errors in post-build checks:
  * 0001-validate-support-SingleMainWindow-key-from-1.5.patch
  * 0002-validate-Support-version-1.5.patch</changelog>
  <changelog author="guido+opensuse@berhoerster.name" date="1681992000">- suse-update-mime-defaults:
  * add support for MATE desktop
  * ensure C locale is set for sorting order
  * fix quoting of DESTDIR</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1696593600">- Update to version 0.27:
  * common
    + Remove Autotools support.
    + Minor updates to project documentation.
    + Add pledge(2) support to remaining utilities
    + Add --version support to utilities.
  * desktop-file-validate
    + Support desktop spec version 1.5.
    + Add LXQt to categories.
    + Use DDE category for Deepin desktop.
    + Add Endless to list of desktop IDs.
    + Fix field code escaping in messages.
  * desktop-entry-mode.el
    + Highlight action groups when ID includes hyphens.
- Drop patches (upstreamed):
  * 0001-validate-support-SingleMainWindow-key-from-1.5.patch
  * 0002-validate-Support-version-1.5.patch
- Refresh desktop-file-utils-suse-keys.patch</changelog>
  <changelog author="dmueller@suse.com" date="1705492800">- support non-SUSE distributions</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1730980800">- Update to version 0.28:
  * common
  + Increase GLib requirement to 2.26 (Corentin Noël).
  + Fix install failing on second run (Raziel Anarki).
  + Fix use of deprecated Meson feature resulting in a warning (Raziel
    Anarki).
  * desktop-file-validate
  + Allow groups with the same name as interfaces in Implements (Corentin
    Noël).
  + Add support for the COSMIC environment (Ryan Brue).</changelog>
  <changelog author="guido+opensuse@berhoerster.name" date="1735300800">- suse-update-mime-defaults:
  * support drop in files in $r/etc/&lt;desktop&gt;_defaults.conf.d which take
    priority over the distribution provided $r/etc/&lt;desktop&gt;_defaults.conf
  * extend syntax of &lt;desktop&gt;_defaults.conf, prefixing a directive with a "-"
    removes an otherwise identical earlier directive</changelog>
</package>
<package pkgid="f8d0c7c081f8fefb3bb12f175f8f36829ffda66e65859fd0b26c46be4bffd589d6ce8ce5b435ce1fa306d8afc838475db1d5df26f20b54fc07424e46b07cac05" name="desktop-translations" arch="noarch">
  <version epoch="0" ver="84.87.20240503.9343de5" rel="bp160.1.9"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1584014400">- Update to version 84.87.20200312.febbb097:
  * Add two TODO notes to generate_and_merge_pos.sh
  * Drop en_US (boo#1139962, bsc#1163437).
  * README.md: Document the process of update
  * Translated using Weblate (Belarusian)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Czech)
  * Translated using Weblate (Danish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Estonian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (German)
  * Translated using Weblate (Greek)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Turkish)
  * Translated using Weblate (Vietnamese)
  * Update strings from Leap 15.2.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1615291200">- Update to version 84.87.20210202.7db31a52:
  * Update strings from Leap 15.3.
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Central Atlas Tamazight)
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (English (United Kingdom))
  * Translated using Weblate (Finnish)
  * Translated using Weblate (French)
  * Translated using Weblate (German)
  * Translated using Weblate (Greek)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Romanian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Swedish)
  * Added translation using Weblate (Central Atlas Tamazight)
  * Drop obsolete mimelnk files (boo#1062631).</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1647518400">- Update to version 84.87.20220316.9301f89b:
  * Update strings from Leap 15.4.
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Chinese (Taiwan) (zh_TW))
  * Translated using Weblate (Chinese (Taiwan))
  * Translated using Weblate (Croatian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (French)
  * Translated using Weblate (German)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Kabyle)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Russian)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Turkish)
  * Translated using Weblate (Ukrainian)
  * Translated using Weblate (Vietnamese)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1651406400">- Update to version 84.87.20220427.80cb897f:
  * Translated using Weblate (Slovenian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Czech)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1676289600">- Update to version 84.87.20230128.350400f:
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Russian)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1681473600">- Update to version 84.87.20230410.dc72281:
  * Translated using Weblate (Latvian)
  * Translated using Weblate (Latvian)
  * Translated using Weblate (German)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Persian)
  * Translated using Weblate (Persian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1714737600">- Update to version 84.87.20240502.b932b7c:
  * Add download_data_from_download-o-o.sh
  * Added translation using Weblate (Latvian)
  * Disable appstream and polkit extraction
  * Leap 15.6 desktop-file-translations
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Croatian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (English (United Kingdom))
  * Translated using Weblate (Finnish)
  * Translated using Weblate (German)
  * Translated using Weblate (Greek)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Latvian)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Serbian (latin) (sr@latin))
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Turkish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1714737601">- Update to version 84.87.20240503.9343de5:
  * Update for SLES 15 SP6 RC / Leap 15.6 RC poo#131735
  * Manually remove further invalid character occurances
  * Fix Browse C:\ drive incorrect escaping</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1724673600">- Generate desktop-translation-devel for purpose of translation
  check. (boo#1158957)</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1725451200">- Add support for the new tool %suse_translate_desktop.
  (boo#1158957)</changelog>
</package>
<package pkgid="2b6117dc744c54c7afc23f228c8a083f9b1177ce830de76d564a3d6f013a7693edc847c83b64e4104071c64b32e16a83d455a94ff9375d95dd05411d44351d31" name="desktop-translations-devel" arch="noarch">
  <version epoch="0" ver="84.87.20240503.9343de5" rel="bp160.1.9"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1584014400">- Update to version 84.87.20200312.febbb097:
  * Add two TODO notes to generate_and_merge_pos.sh
  * Drop en_US (boo#1139962, bsc#1163437).
  * README.md: Document the process of update
  * Translated using Weblate (Belarusian)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Czech)
  * Translated using Weblate (Danish)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Estonian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (German)
  * Translated using Weblate (Greek)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Turkish)
  * Translated using Weblate (Vietnamese)
  * Update strings from Leap 15.2.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1615291200">- Update to version 84.87.20210202.7db31a52:
  * Update strings from Leap 15.3.
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Central Atlas Tamazight)
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (English (United Kingdom))
  * Translated using Weblate (Finnish)
  * Translated using Weblate (French)
  * Translated using Weblate (German)
  * Translated using Weblate (Greek)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Romanian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Swedish)
  * Added translation using Weblate (Central Atlas Tamazight)
  * Drop obsolete mimelnk files (boo#1062631).</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1647518400">- Update to version 84.87.20220316.9301f89b:
  * Update strings from Leap 15.4.
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Chinese (China))
  * Translated using Weblate (Chinese (Taiwan) (zh_TW))
  * Translated using Weblate (Chinese (Taiwan))
  * Translated using Weblate (Croatian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (French)
  * Translated using Weblate (German)
  * Translated using Weblate (Hindi)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Kabyle)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Russian)
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Turkish)
  * Translated using Weblate (Ukrainian)
  * Translated using Weblate (Vietnamese)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1651406400">- Update to version 84.87.20220427.80cb897f:
  * Translated using Weblate (Slovenian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Czech)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1676289600">- Update to version 84.87.20230128.350400f:
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (German)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (German)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Russian)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1681473600">- Update to version 84.87.20230410.dc72281:
  * Translated using Weblate (Latvian)
  * Translated using Weblate (Latvian)
  * Translated using Weblate (German)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Macedonian)
  * Translated using Weblate (Finnish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Persian)
  * Translated using Weblate (Persian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)
  * Translated using Weblate (Georgian)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1714737600">- Update to version 84.87.20240502.b932b7c:
  * Add download_data_from_download-o-o.sh
  * Added translation using Weblate (Latvian)
  * Disable appstream and polkit extraction
  * Leap 15.6 desktop-file-translations
  * Translated using Weblate (Arabic)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Chinese (China) (zh_CN))
  * Translated using Weblate (Croatian)
  * Translated using Weblate (Czech)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (English (United Kingdom))
  * Translated using Weblate (Finnish)
  * Translated using Weblate (German)
  * Translated using Weblate (Greek)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Latvian)
  * Translated using Weblate (Lithuanian)
  * Translated using Weblate (Polish)
  * Translated using Weblate (Portuguese)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Serbian (latin) (sr@latin))
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Turkish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1714737601">- Update to version 84.87.20240503.9343de5:
  * Update for SLES 15 SP6 RC / Leap 15.6 RC poo#131735
  * Manually remove further invalid character occurances
  * Fix Browse C:\ drive incorrect escaping</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1724673600">- Generate desktop-translation-devel for purpose of translation
  check. (boo#1158957)</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1725451200">- Add support for the new tool %suse_translate_desktop.
  (boo#1158957)</changelog>
</package>
<package pkgid="2fee97dc50c8ef0131ca7dc79b9439c89617deb7544d0d6005dfd9769d601387b309137653b217773e5ea6de8c54ad41a2d4c382b12a5906ecf42247c88f90f9" name="devhelp" arch="x86_64">
  <version epoch="0" ver="43.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139200">- Update to version 41.1:
  + Appdata fixes.
- Changes from version 41.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633089600">- Update to version 41.2:
  + More appdata fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643803200">- Add 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch and
  03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch: Fix build with
  meson 0.61.0 and newer.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657713600">- Add e6c644683fbb34ac4ceb31150ef20a2536512149.patch -- Disable HW
  acceleration to prevent blank pages (glgo#GNOME/devhelp#60).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 41.3:
  + Disable hardware acceleration for WebKitGTK
  + Update the location of the app screenshots
  + Fix build with Meson ≥ 0.60
  + Appdata validation fixes
  + Updated translations.
- Drop patches fixed upstream:
  + e6c644683fbb34ac4ceb31150ef20a2536512149.patch
  + 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch
  + 03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515201">- Update to version 43.alpha:
  + Temporarily disable hardware accelerated rendering.
  + Fix build with newer versions of Meson.
  + gir: Fix build with WebkitGTK 4.1
  + Updated translations.
- Replace pkgconfig(webkit2gtk-4.0) for pkgconfig(webkit2gtk-4.1)
  BuildRequires now that upstream supports it.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515202">- Update to version 43.beta:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1662292800">- Update to version 43.rc:
  + Use Meson's gnome.post_install()
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663675200">- Update to version 43.0:
  + Updated translations.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1677412800">- Replace python3-gi-docgen build requirement with the more
  reliable pkgconfig(gi-docgen).</changelog>
</package>
<package pkgid="160097553f53273663c89dbfb634c3aca63b261df4f42d033532a704915c542600b218669e673b0de137326e48a60cae62eb57e3f31031a79b3ac673a223f974" name="devhelp-devel" arch="x86_64">
  <version epoch="0" ver="43.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139200">- Update to version 41.1:
  + Appdata fixes.
- Changes from version 41.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633089600">- Update to version 41.2:
  + More appdata fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643803200">- Add 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch and
  03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch: Fix build with
  meson 0.61.0 and newer.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657713600">- Add e6c644683fbb34ac4ceb31150ef20a2536512149.patch -- Disable HW
  acceleration to prevent blank pages (glgo#GNOME/devhelp#60).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 41.3:
  + Disable hardware acceleration for WebKitGTK
  + Update the location of the app screenshots
  + Fix build with Meson ≥ 0.60
  + Appdata validation fixes
  + Updated translations.
- Drop patches fixed upstream:
  + e6c644683fbb34ac4ceb31150ef20a2536512149.patch
  + 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch
  + 03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515201">- Update to version 43.alpha:
  + Temporarily disable hardware accelerated rendering.
  + Fix build with newer versions of Meson.
  + gir: Fix build with WebkitGTK 4.1
  + Updated translations.
- Replace pkgconfig(webkit2gtk-4.0) for pkgconfig(webkit2gtk-4.1)
  BuildRequires now that upstream supports it.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515202">- Update to version 43.beta:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1662292800">- Update to version 43.rc:
  + Use Meson's gnome.post_install()
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663675200">- Update to version 43.0:
  + Updated translations.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1677412800">- Replace python3-gi-docgen build requirement with the more
  reliable pkgconfig(gi-docgen).</changelog>
</package>
<package pkgid="561ae61f697e629ed705e0f8699cb2f8117c5ee3bff63e817e747c2aaf4e703c95b784b90885a9417f5f7400809d1410bbf200cb23a29ec9efc33a6a4559da1b" name="devhelp-lang" arch="noarch">
  <version epoch="0" ver="43.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139200">- Update to version 41.1:
  + Appdata fixes.
- Changes from version 41.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633089600">- Update to version 41.2:
  + More appdata fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643803200">- Add 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch and
  03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch: Fix build with
  meson 0.61.0 and newer.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657713600">- Add e6c644683fbb34ac4ceb31150ef20a2536512149.patch -- Disable HW
  acceleration to prevent blank pages (glgo#GNOME/devhelp#60).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 41.3:
  + Disable hardware acceleration for WebKitGTK
  + Update the location of the app screenshots
  + Fix build with Meson ≥ 0.60
  + Appdata validation fixes
  + Updated translations.
- Drop patches fixed upstream:
  + e6c644683fbb34ac4ceb31150ef20a2536512149.patch
  + 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch
  + 03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515201">- Update to version 43.alpha:
  + Temporarily disable hardware accelerated rendering.
  + Fix build with newer versions of Meson.
  + gir: Fix build with WebkitGTK 4.1
  + Updated translations.
- Replace pkgconfig(webkit2gtk-4.0) for pkgconfig(webkit2gtk-4.1)
  BuildRequires now that upstream supports it.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515202">- Update to version 43.beta:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1662292800">- Update to version 43.rc:
  + Use Meson's gnome.post_install()
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663675200">- Update to version 43.0:
  + Updated translations.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1677412800">- Replace python3-gi-docgen build requirement with the more
  reliable pkgconfig(gi-docgen).</changelog>
</package>
<package pkgid="3d008823f7e7fe1a530ae3660f4f9098bc8661ce0ff7fcda1ea99e3bcb5629c0dbb1353352c9080e0c3cb89e672873b9a155f5d59427c21ebd00c7c529989afa" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.2.2"/>
  <changelog author="glass.su@suse.com" date="1721649600">- enable devices file feature by default - see lvmdevices(8)
  * enable '--with-default-use-devices-file=1' in lvm2.spec
  * update commented default value of 'use_devicesfile' in lvm2.conf</changelog>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
</package>
<package pkgid="3cfa82caca9da287ecb098c8d0601efb6997181c0aaf81f9f75d17c6b513c5225e61cdd2bb4b78fd7a5a5cef8c6ae6e363a09d3db1d916a7e365d1ea6e7daacd" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="4338ff7c904542600120750a31a7a28a4f259c9363f1a291c79e5d58ae4499bd914db7e3040d3d36478f79f6a73c67f117b98a802e7f8d0f50986de57ea9cb45" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.2.2"/>
  <changelog author="glass.su@suse.com" date="1721649600">- enable devices file feature by default - see lvmdevices(8)
  * enable '--with-default-use-devices-file=1' in lvm2.spec
  * update commented default value of 'use_devicesfile' in lvm2.conf</changelog>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
</package>
<package pkgid="f38a7d95a3ed9b15124fe99a6785942154badfb2f687d6e7e33d8a0a002b052f1ba443359a0fd039561761f36a9fec4efb00558ba236ab88a218b7999446f5df" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="f0d03113a099dc06c3fb7d31508ffe35e6ff16d4b4cfc9675c1199028e0504b6505a0937baac102aa4e00f6ad9df9bba10758ff4ee1fb276b4a17b5278768cfd" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.03.29_1.02.203" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1723550400">- lvm2-monitor.service fails to start (boo#1228854)
  + bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch</changelog>
  <changelog author="glass.su@suse.com" date="1725019200">- [SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules (bsc#1229518)
  * update udev dependency version in lvm2.spec</changelog>
  <changelog author="glass.su@suse.com" date="1734350400">- Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29
  * ** WHATS_NEW from 2.03.24 to 2.03.29 ***
  Version 2.03.29 - 09th December 2024
  ====================================
    Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify.
    Allow test mode when lvmlockd is built without dlm support.
    Add a note about RAID + integrity synchronization to lvmraid(7) man page.
    Add a function for running lvconvert --repair on RAID LVs to lvmdbusd.
    Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}).
    Fix renaming of raid sub LVs when converting a volume to raid (2.03.28).
    Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize.
    Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27).
  Version 2.03.28 - 04th November 2024
  ====================================
    Use radix_tree to lookup for UUID within committed metadata.
    Use radix_tree to lookup LV list entry within VG struct.
    Introduce setting config/validate_metadata = full | none.
    Restore fs resize call for lvresize -r on the same size LV (2.03.17).
    Correct off-by-one devicesfile backup counting.
    Replace use of dm_hash with radix_tree for lv names and uuids.
    Refactor vg_validate with uniq_insert and better use of CPU caches.
    Add radix_tree_uniq_insert.
    Update DM cache when taking next VG lock instead of dropping it.
    Generate json string id only for json reporting.
    For vgsummary use new API call dm_config_parse_only_section().
    Use radix_tree for PV names mapping.
    Split check_lv_segment into separate _in/complete_vg variant.
    Use find_lv instead of find_lv_in_vg when possible.
    Do a mirror fixup only when mirrors with logs are imported.
    Add faster crc32 calculation from zlib code for x86_64.
    Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
  Version 2.03.27 - 02nd October 2024
  ===================================
    Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
    Detect GPT partition table and pass partition filter if no partitions defined.
    Add global/sanlock_align_size option to configure sanlock lease size.
    Disable mem locking when activation/reserved_stack or reserved_memory is 0.
    Fix locking issues in lvmlockd leaving thin pool locked.
    Deprecate vdo settings vdo_write_policy and vdo_write_policy.
    Lots of typo fixes across lvm2 code base (codespell).
    Corrected integrity parameter interleave_sectors for DM table line.
    Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
    Do not accept duplicate device names for pvcreate.
  Version 2.03.26 - 23rd August 2024
  ==================================
    Fix internal error reported by pvmove on a VG with single PV.
    Also accept --mknodes --refresh for vgscan.
    Fix vgmknodes --refresh to wait for udev before checking /dev content.
    Use log/report_command_log=1 config setting by default for JSON output format.
    Fix unreleased memory pools on RAID lvextend.
    Add --integritysettings option to manipulate dm-integrity settings.
  Version 2.03.25 - 12nd July 2024
  ================================
    Utilize more radix_tree instead of dm_hash and btree.
    Refactor DM uuid caching from device_mapper directory.
    Enhance checking for DM uuid device.
    Fix lvm shell command completion on tab key (2.03.24).
    Avoid lockd_vg call to lvmlockd for local VGs.
    Allow forced change of locktype from none.
    Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
  * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 ***
  Version 1.02.203 - 09th December 2024
  =====================================
  Version 1.02.202 - 04th November 2024
  =====================================
    Introduce dm_config_parse_only_section to stop parsing after section.
    For shorter string use on stack buffers when generating sections.
    Enhance dm_config tokenizer.
  Version 1.02.201 - 02nd October 2024
  ====================================
    Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails.
    Improve error messages on failed udev cookie create/inc/dec operation.
  Version 1.02.200 - 23rd August 2024
  ===================================
  Version 1.02.199 - 12nd July 2024
  =================================
- update lvm2.spec
  - change lvm2_version to 2.03.29
  - change upstream_device_mapper_version and device_mapper_version to 1.02.203
  - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package
  - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd
  - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="glass.su@suse.com" date="1738756800">- thin-provisioning-tools 1.1.0 requires device-mapper-devel, this creates a cycle (boo#1236749)
  * update lvm2.spec
  - remove build require dependency thin-provisioning-tools from devicemapper
  - remove thin-provisioning-tools related configure options from devicemapper
  - remove a trivial empty line in extra_opts if default_use_devices_file=1</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1740657600">- fixing HA16.0 Product building issues for packages: lvm2-lockd, cluster-md, dlm, drbd (bsc#1237701)
  * update lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="c2350a4a72f876172362e53457bcebb73e847dba2c55a9d0be4dcd988f6009b7b148770333cc4c3fd732d0298f8b032c5f4753d8120a76d013c5cb8877996dbd" name="devilspie2" arch="x86_64">
  <version epoch="0" ver="0.44" rel="bp160.1.9"/>
  <changelog author="mpluskal@suse.com" date="1455883200">- Drop _service and use url instead
- Build with optflags
- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 0.40
  * Add callback for geometry change
  * Add error string for one or two indata expected
  * Make devilspie2_get_viewport_start return both x and y
    coordinates
  * Add alternative functionality to set_viewport Now you can set
    the coordinates to the window if you use two integers as indata
  * New Italian translation, updated Dutch, Japanese and Swedish
    translations
  * Build flags hardening fixes
  * Allow reading of XA_WINDOW properties</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Set group for main package</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 0.41:
  * Set a correct version number</changelog>
  <changelog author="yfjiang@suse.com" date="1473249600">- Change license to GPL-3.0+</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 0.42:
  * Support window focus / blur events
  * Add example for Awesome window manager
  * Updated French, Italian and Swedish translations
- Split lang subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1507291200">- Update to version 0.43:
  * No changelog provided by upstream
- Update project url</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Modernise specfile using spec-cleaner
  * Mark license as such</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1613131200">- Requires lua-5.1 as its only one supported now</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687262400">- Update to version 0.43:
  * Default to Lua 5.3, and permit use of other versions
  * Add support for setting and deleting window properties
  * Add get_process_name(), which returns the name of the process
    owning the window (if possible)
  * Add get_monitor_index() and get_monitor_geometry(); improve
    monitor index/geometry discovery
  * Add get_window_is_decorated() (which uses the Motif window hints)
  * Alias center() as centre()
  * Extend centre() to allow centring on a given monitor and to allow
    horizontal or vertical only
  * Extend set_window_position() to allow positioning on a given
    monitor and control which corner is measured from.
    (Behaviour with two parameters is unchanged.)
  * Quote the option hyphens in the man page (preventing replacement)
  * Various const &amp; compiler warning (gcc -Wextra) fix-ups
  * Support for UTF-8 strings in window properties
  * Allow replacements for pkg-config at compile time</changelog>
</package>
<package pkgid="738eb79a618c4dba52e69256c25e7dd7de32ebb5aaff8941b090fa946b6c5a5123a9704f91aa9249eba07d151e7d4ffd3b6a462fe5e8854c620e96ca0ffc1f71" name="devilspie2-lang" arch="noarch">
  <version epoch="0" ver="0.44" rel="bp160.1.9"/>
  <changelog author="mpluskal@suse.com" date="1455883200">- Drop _service and use url instead
- Build with optflags
- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 0.40
  * Add callback for geometry change
  * Add error string for one or two indata expected
  * Make devilspie2_get_viewport_start return both x and y
    coordinates
  * Add alternative functionality to set_viewport Now you can set
    the coordinates to the window if you use two integers as indata
  * New Italian translation, updated Dutch, Japanese and Swedish
    translations
  * Build flags hardening fixes
  * Allow reading of XA_WINDOW properties</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Set group for main package</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 0.41:
  * Set a correct version number</changelog>
  <changelog author="yfjiang@suse.com" date="1473249600">- Change license to GPL-3.0+</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 0.42:
  * Support window focus / blur events
  * Add example for Awesome window manager
  * Updated French, Italian and Swedish translations
- Split lang subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1507291200">- Update to version 0.43:
  * No changelog provided by upstream
- Update project url</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547812800">- Modernise specfile using spec-cleaner
  * Mark license as such</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1613131200">- Requires lua-5.1 as its only one supported now</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687262400">- Update to version 0.43:
  * Default to Lua 5.3, and permit use of other versions
  * Add support for setting and deleting window properties
  * Add get_process_name(), which returns the name of the process
    owning the window (if possible)
  * Add get_monitor_index() and get_monitor_geometry(); improve
    monitor index/geometry discovery
  * Add get_window_is_decorated() (which uses the Motif window hints)
  * Alias center() as centre()
  * Extend centre() to allow centring on a given monitor and to allow
    horizontal or vertical only
  * Extend set_window_position() to allow positioning on a given
    monitor and control which corner is measured from.
    (Behaviour with two parameters is unchanged.)
  * Quote the option hyphens in the man page (preventing replacement)
  * Various const &amp; compiler warning (gcc -Wextra) fix-ups
  * Support for UTF-8 strings in window properties
  * Allow replacements for pkg-config at compile time</changelog>
</package>
<package pkgid="20911866109ed58dfa750682b68cd413439d39022d7e9cc7a87c9bf5cbb5bd30713e4141c1917696f1b501cc42e0d48d8c4c4c4b58245e93fb913adde5f6ba57" name="devscripts" arch="x86_64">
  <version epoch="0" ver="2.22.2" rel="160000.2.2"/>
  <changelog author="mwilck@suse.com" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="tchvatal@suse.com" date="1567512000">- Update to 2.19.5:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
  <changelog author="mliska@suse.cz" date="1606132800">- Add backport from master devscripts-checkbashisms-early-fail.patch.</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1651492800">- Add missing uscan dependencies perl-{File-HomeDir,IPC-Run,Moo}</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- update to 2.22.2:
  * who-permits-upload:
    + Fix fingerprint lookup, so it actually finds the user id
  * debsnap:
    + Add a -l option as the short version of --list.  Closes: #1006904
  * sadt:
    + Run autodep8 when looking for autopkgtests to run.
  * deprepro:
    + Add new options, to make it easier to debrepro against arbitrary source
    directories (i.e. not Debian packages):
  - -B, --build-command: specify custom build command
  - -a, --artifact-pattern: specify custom artifacts to be compared
    across builds
  - --no-copy: run commands against the source tree directly, i.e. don't
    copy it to a temporary build directory.
  * mk-origtargz:
    + Apply patch from Vasyl Gello to make Files-Included-&lt;component&gt; work.
  * Include the updated Portuguese translation.  Closes: #1011316
    Thanks to Américo Monteiro &lt;a_monteiro@gmx.com&gt;.
  * Run perltidy with the newer 20220217.
  * Bump Standards-Version to 4.6.1, no changes needed.
  * mk-origtargz:
    + Display compression/tar errors
  * wrap-and-sort:
    + Introduce an experimental mode using the RTS parser available with
    python-debian &gt;= 0.1.43.  This will let wrap-and-sort retain comments.
    This feature is opt-in with a new flag.  MR: !237
    + Futher improvements to the RTS mode, now also supporting short indent
    (-s) among others.  MR: !263
  * deb-janitor:
    + Add a new 'review' subcommand.  MR: !261
  * wnpp-check:
    + Replace HTTP URLs with HTTPS.  Closes: #1002311, #902242; MR: !256
  * rc-alert, wnpp-alert, wnpp-check:
    + Allow curl to follow HTTP redirections.  MR: !257
  * wnpp-check:
    + Document -e,--exact in the --help output.  Closes: #1003254
  * Make pristine-tar a Suggests in Ubuntu, as it's not in main so it can't be
    a Recommends.  LP: #1885766
  * Don't build-depend on subversion on i386, skipping the test_uscan_svn
    test; this is to avoid a delta with Ubuntu, that doesn't have svn on i386.
  * debrebuild:
    + Use the new field_parse_binary_source() from libdpkg-perl &gt;= 1.21.0
    if available.  MR: !249
  * test_uscan_mangle:
    + Use MGZREPACK to specify the expected file extension when necessary;
    otherwise, use the default file extension.
    + Add a workaround for testWatch4WebNonNativeMUT0(). MR: !258
    + Test use of filenamemangle with single and multiple upstream tarballs.
    + Modify helperWatch() to accept filenamemangled filenames.
    + Allow filenamemangling with multiple upstream tarballs.
  * Fix some spelling errors in code comments.  MR: !243
  * hardening-check:
    + Handle emtpy symble table by returning an unknown result for the
    stack-protector check.  MR: !223
  * salsa:
    + Add a new last_ci_status subcommand.  MR: !226
- drop devscripts-checkbashisms-early-fail.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1701172800">- Move checkbashisms to a separate multibuild flavor, reduce
  build cycle when only checkbashisms is needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716292800">- Mark %{buildroot}%{_bindir}/checkbashisms executable: sed … &gt;
  %{buildroot}%{_bindir}/checkbashisms creates a non-executable,
  regular file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1716552000">- Fix minor issues:
  + Do not build devscripts main package (empty) in checkbashisms
    flavor.
  + Ensure the two flavors have different .src.rpm names, not
    overwriting each other.</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">-  remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
</package>
<package pkgid="7e37563339fa0adc3089d0cb803977e837f8c7a6286281734ea4a17f60b5eca1433c2317c8b3680185e0032c0eb7c540e51874ebf86219890ac6d651007ca8f7" name="dfc" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="bp160.1.8"/>
  <changelog author="asterios.dramis@gmail.com" date="1365940800">- Update to 3.0.2:
  BUGS:
  * fixed dfc failing when getting volume size information from volume &gt;= 4 To
    on 32-bit hosts (added LFS option, which can be triggered on or off but is
    on by default)
  * fixed missing separator on CSV export when -T and -s options where
    triggered
- Fix rpm post build check warning "File is compiled without RPM_OPT_FLAGS".</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 3.0.3:
  BUGS:
  * fixed warning message wrongly displayed when calling 'dfc -u h'
  * fixed various typo fixes
  * fixed some memory management issues
  * fixed if tests on potentially NULL values
  * fixed potential security holes (potentially exploitable buffer overflows
    caused by misuse of printf function)
  * fixed dfc hang on no more accessible remote file systems
  * display a warning in any case when file system cannot be stated instead of
    exiting on error
  MISCELLANEOUS:
  * updated license header and copyright year</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1382702400">- Update to 3.0.4:
  BUGS:
  * fixed compilation error on *BSD systems introduced in dfc version 3.0.3</changelog>
  <changelog author="thutterer@suse.com" date="1432036800">- Update to 3.0.5:
  BUGS:
  * fixed initialization of LFS
  * do not install translated configuration files and man pages when NLS option
  is disabled
  * fixed typos in the man</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update download url
- Use cmake macros
- Cleanup spec file with spec-clened</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Split lang subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1492776000">- Update to version 3.1.0:
  * New features:
    + Major code refactoring: now, platform specific code is
    clearly separated
    + Solaris support.
    + The CSV separator can be specified via the configuration file
    (defaults to",").
    + In addition to the already export formats (CSV, text, tex and
    HTML), dfc is able to export the information as JSON (no
    additional dependency required).
    + Add support for bold font via the configuration file
    + Add -M option to disable "Mounted On" information.
    + Add Dutch translation.
    + Add git revision to the dfc version string for development
    versions of dfc.
  * Bug fixes:
    + Fix type not respecting -W flag.
    + Fix alignment issue when both -M and -o options are specified.
    + Plug a few memory leaks.
    + Escape mount options with "" when exporting to CSV as mount
    options may typically contain a ",".
    + Linux: avoid stat'ing remote file system when local flag is
    given (prevents dfc from potentially hanging on remote file
    systems).
    + Consider nfs4 a remote filesystem.
    + Correctly link math library (fixes build on, at least,
    Ubuntu).
    + Remove a few extra incorrect CSV separators in CSV export
    mode.
    + Silently ignore EACCESS error on statvfs.
    + Fix build failure on Hurd.
    + Fix build failure on kFreeBSD.
  * Incompatible changes:
    + Remove "GRIM" compile option - compile flags previously set
    by "grim" are now defaults.
    + Stop translating color names in the configuration file - now,
    only "English" names are understood.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 3.1.1:
  * fix a typo in the compilation instructions in the readme file
  * fix an old bug (4+ years) which messed up colors in HTML export
    when a configuration file is used
  * fix a bug which prevented some file systems to be displayed
    when the filtering option was used
  * fix a bad implicit fallthrough</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1583841600">- Spec file cleanup</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687262400">- Update project and download url</changelog>
</package>
<package pkgid="1e05252178bc55d0ae3cf0eb37c04861c1f02e5021aebfa475833b9a32a9f18c6a3f8a52c381b32cf93bb881c767cd4b99906b0f12cbbc7b01f8254541411147" name="dfc-lang" arch="noarch">
  <version epoch="0" ver="3.1.1" rel="bp160.1.8"/>
  <changelog author="asterios.dramis@gmail.com" date="1365940800">- Update to 3.0.2:
  BUGS:
  * fixed dfc failing when getting volume size information from volume &gt;= 4 To
    on 32-bit hosts (added LFS option, which can be triggered on or off but is
    on by default)
  * fixed missing separator on CSV export when -T and -s options where
    triggered
- Fix rpm post build check warning "File is compiled without RPM_OPT_FLAGS".</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 3.0.3:
  BUGS:
  * fixed warning message wrongly displayed when calling 'dfc -u h'
  * fixed various typo fixes
  * fixed some memory management issues
  * fixed if tests on potentially NULL values
  * fixed potential security holes (potentially exploitable buffer overflows
    caused by misuse of printf function)
  * fixed dfc hang on no more accessible remote file systems
  * display a warning in any case when file system cannot be stated instead of
    exiting on error
  MISCELLANEOUS:
  * updated license header and copyright year</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1382702400">- Update to 3.0.4:
  BUGS:
  * fixed compilation error on *BSD systems introduced in dfc version 3.0.3</changelog>
  <changelog author="thutterer@suse.com" date="1432036800">- Update to 3.0.5:
  BUGS:
  * fixed initialization of LFS
  * do not install translated configuration files and man pages when NLS option
  is disabled
  * fixed typos in the man</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update download url
- Use cmake macros
- Cleanup spec file with spec-clened</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Split lang subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1492776000">- Update to version 3.1.0:
  * New features:
    + Major code refactoring: now, platform specific code is
    clearly separated
    + Solaris support.
    + The CSV separator can be specified via the configuration file
    (defaults to",").
    + In addition to the already export formats (CSV, text, tex and
    HTML), dfc is able to export the information as JSON (no
    additional dependency required).
    + Add support for bold font via the configuration file
    + Add -M option to disable "Mounted On" information.
    + Add Dutch translation.
    + Add git revision to the dfc version string for development
    versions of dfc.
  * Bug fixes:
    + Fix type not respecting -W flag.
    + Fix alignment issue when both -M and -o options are specified.
    + Plug a few memory leaks.
    + Escape mount options with "" when exporting to CSV as mount
    options may typically contain a ",".
    + Linux: avoid stat'ing remote file system when local flag is
    given (prevents dfc from potentially hanging on remote file
    systems).
    + Consider nfs4 a remote filesystem.
    + Correctly link math library (fixes build on, at least,
    Ubuntu).
    + Remove a few extra incorrect CSV separators in CSV export
    mode.
    + Silently ignore EACCESS error on statvfs.
    + Fix build failure on Hurd.
    + Fix build failure on kFreeBSD.
  * Incompatible changes:
    + Remove "GRIM" compile option - compile flags previously set
    by "grim" are now defaults.
    + Stop translating color names in the configuration file - now,
    only "English" names are understood.</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 3.1.1:
  * fix a typo in the compilation instructions in the readme file
  * fix an old bug (4+ years) which messed up colors in HTML export
    when a configuration file is used
  * fix a bug which prevented some file systems to be displayed
    when the filtering option was used
  * fix a bad implicit fallthrough</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1583841600">- Spec file cleanup</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1687262400">- Update project and download url</changelog>
</package>
<package pkgid="1e863bcee0c710743bac23f5badafe2e88fc20f5a61ea3c70ce3bf430bcd960181d73ca651b52e1efb9fe553c997958faeccede84f7557c826e292f653dc69b9" name="dfu-programmer" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="bp160.1.12"/>
  <changelog author="bwalle@suse.de" date="1191153600">- initial package</changelog>
  <changelog author="bernhard.walle@gmx.de" date="1244635200">- Fix build for openSUSE 11.1.</changelog>
  <changelog author="mail.aroessler@gmail.com" date="1341576000">- updated to version 0.5.4</changelog>
  <changelog author="jw@suse.com" date="1387281600">- updated to version 0.6.2</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1406980800">- spec file cleanup
- Use pkgconfig for build requires</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 0.7.1
  + Fix use of mandatory filename ChangeLog in distribution tarball
  + Fix infinite loop in rpl_malloc
  + Add experimental support for autocomplete on Ubuntu
  + Fix exit status of help-related options and improve start sequence
- Changes from version 0.7.0
  + Add support for atmega16c4 and atmega32c4
  + Fix device erase for bootloaders which return busy status
  + Better include file defaults for libusb when run bootstrap is run
    without pkgconfig.
  + Improved status output
  + Add hex dump commands
  + Add blank memory check
  + Major rework of the flash/user/eeprom code
  + Replace start and reset commands with launch
  + Repository and website migrated to GitHub
- Add pkg-config build require; needed to find libusb.h</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1458648000">- Update to version 0.7.2
  + Use the correct memory ranges for XMega.
    Bootloader space is additional to listed device size.</changelog>
  <changelog author="Wojciech Kazubski &lt;wk@ire.pw.edu.pl&gt;" date="1728820800">- Update to version 1.1.0
  * Add --erase-first option #90 #92
  * Fix missing update-bash-completion.sh #91
  * Fix missing header files #93 #94
- Update to version 1.0.0
  * Remove libusb0 support
- Update to version 0.9.0
  * Add --validate-first and --ignore-outside options to the flash command
  * Disabled progress bar when not using a tty
- Update to version 0.8.1-libusb1
  * Fix bug preventing specifying a device with libusb0
  * Fix bug in order device id was printed with libusb0
  * Publish Windows binaries with libusb1
  * Update libusb1 include path
  * Update uses of deprecated libusb1 functions
- Update to version 0.8.1
  * Fix bug preventing specifying a device with libusb0
  * Fix bug in order device id was printed with libusb0
- Update to version 0.8.0
  * Experimental support for ST cortex M4
  * Enable GitHub Actions for releases [2022-10-13]
  * Make ./bootstrap.sh fail if any command fails (and print commands)
  * Update configure.ac features
  * Added IntelliSense hints for Visual Studio Code
- New source location (Github)
- Specfile update to current recommendations for Tumbleweed</changelog>
</package>
<package pkgid="57bcba1a3cdd45e908f82d1aef66605fbdabe79e7c8bca615a69f5f90b8b08a447f09da09c2e6ac0cdbc856e3c43d27c7ba99e4a2e3fbe99138f5cf738ba7a9b" name="dfu-util" arch="x86_64">
  <version epoch="0" ver="0.11" rel="bp160.1.12"/>
  <changelog author="holger+suse@freyther.de" date="1311336000">- Initial version of dfu-util package</changelog>
  <changelog author="holger+suse@freyther.de" date="1320235200">- Upgrade to upstream version 0.5</changelog>
  <changelog author="holger+suse@freyther.de" date="1344254400">- Upgrade to upstream version 0.6</changelog>
  <changelog author="adrian@suse.de" date="1423742400">- update to upstream version 0.8
- using _service file to create the tarball
  * modify version and revision inside and run
    "osc service disabledrun" when updating it.</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1459252800">- update to upstream version 0.9
- added a patch:
    0001-Allow-building-against-older-libusb-without-bus-port.patch
    taken from dfu-util bug tracker, to build on openSUSE 13.1 (with libusb &lt; 1.0.16)
- some build warnings fixed</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1609070400">- Update to version 0.10
  * New --wait option for devices to appear
  * New --devnum option to filter devices
  * Support DFU_STATE_dfuMANIFEST_WAIT_RST
  * Support large files
  * Quirks for Jabra devices
  * Quirks for OpenPICC, SIMtrace
  * Quirks for GD32VF103
  * Fix numeric argument parsing
  * Improve alternate interface index matching
  * Improve libusb error messages
  * Improve Stellaris firmware detection
  * Improve warnings and debug output
  * Update manual page
  * Manual pages for dfu-suffix and dfu-prefix
  * Usage text describes DfuSe modifiers
- Drop not longer needed patch:
  * 0001-Allow-building-against-older-libusb-without-bus-port.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1630929600">- Update to version 0.11
  * Skip setting alternate interface when not needed
  * Only clamp transfer size on Linux
  * Quirk for GD32 leave request
  * Improve status and error messages and exit codes
  * dfuse: Process all alternate interfaces in a DfuSe file
  * dfuse-pack.py: Fix alternate settings if first is 0</changelog>
  <changelog author="Frank Kunz &lt;mailinglists@kunz-im-inter.net&gt;" date="1671796800">- Add dfuse-pack tool to package</changelog>
</package>
<package pkgid="75cd79a8e77ff8ca876381a52f5107e1f6af84bb2de1b1243412c1985a2a388fbc19d17361de7e1e2e0ab23d0474a9883024bb2abd0bebd0bf904775d29c9eac" name="dh-autoreconf" arch="noarch">
  <version epoch="0" ver="19" rel="bp160.1.11"/>
  <changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
  <changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1341576000">- package dh-autoreconf separately</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 10
  + dh_autoreconf.pod: Fix typo (Closes: #729001)
  + dh-autoreconf.pod: Document when dh-autoreconf can be used with
    autotools-dev (Closes: #698765)
- Add xz build dependency; debian tarballs are now compressed with
  xz format</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 19:
  * Disable gtkdocize for now (Closes: #898916)
  * Correctly restore working directory if autoreconf failed (Closes: #876187)
  * Automatically use xdg-autogen if configure.{ac,in} contain XDT_ lines.
    Thanks to Unit 193 for the initial patch (Closes: #893746)
  * Automatically handle gtkdocize if no custom command has been provided
    (Closes: #640376)
  * Add Breaks: quilt (&lt;&lt; 0.63-8.2~), dpatch (&lt;&lt; 2.0.38+nmu1~) (Closes: #889567)
  * Move to Salsa
  * Use debhelper compat level 11
  * Bump Standards-Version to 4.1.3
  * debian/copyright: Point to HTTPS Format url
  * d/rules: Use /usr/share/dpkg/pkg-info.mk instead of dpkg-parsechangelog
  * Do not fail, only warn, if run multiple times (Closes: #887482)
  * Also clean up symlinks (Closes: #882479)
  * Run dh_autoreconf after dh_update_autotools_config,
    not before dh_auto_configure
  * update dh-autoreconf(7) man page (Closes: #870518)
  * dh_autoreconf_clean: Add a NOOP promise (Closes: #881394)
  * dh-autoreconf can build without (fake)root
  * Bump Standards-Version to 4.1.1
  * Drop alternative dependency on automaken (Closes: #857556)
  * Speed-up: Use -exec ... + instead of -exec ... \; for find.
    Thanks to Helmut Grohne and Tollef Fog Heen for the suggestion
  * Update Standards-Version and point Vcs fields to https
  * dh_autoreconf: --sourcedirectory is forwarded by dh(1)
    Thanks to Niels Thykier for reporting this on IRC
  * dh_autoreconf: Do nothing if there are no configure scripts</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1616414400">- Do not rquire ourselves to build: buildignore dh-autoreconf,
  which is required by debhelper (boo#1183854).</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1617192000">- Do not require perl, but use %perl_requires to avoid a rebuild
  on perl updates</changelog>
</package>
<package pkgid="d8c1ee46d1ea3ffbf686a9e98c86d12a95d172ac4370c24f0bd42635385f38d85a8b7ec67e056207a92d68c28c1c6a58b9fac2302d604930fc15f33dc271d08e" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="d2a43388286800cef9b516a3d3dd83d3d1be4ceb11c7605d8d6f061f6243b0814dc82dcd16904675880eb1d2771ca008b79443e4b549158e85a6e762c93ea5c5" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="df9f0ae5b2b9932879128f8fba754371af6611369e17be09007d90411bac1df30040f5b88ed4ed6192c8ac2084648cf1f9c22c6634961053ba32556e39ea075a" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="f1ccf7c2bd3cb469c753b55e079f72500b8951c62f7cc84c4d2f05e028815d59eb32169a33f20cf0800dd06a0bdf7013efe13251cdaea357cd599a1403b84b84" name="dhcp-doc" arch="noarch">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="5a1135775c52986aa0eb5e4c98108c7d7e730613e023a3de78784abe6c882dec97cac8bd553ef0f9635c8f6323a36baf1e1dbb8d367c8b0c51cfaef9bb67eb6e" name="dhcp-keama" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="9e49f11673f4a3866d613cb67f7a4ea272cdad3911db381f4607065b36384f331ed0e7b98b595b493cf50805754780db1fee80551add340347309bc09374cb63" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="8133a0d813544f7332c78671906dbd2164f39f7665af1ceeddfabe6b5aaeb11e9c44c6c5e4820274c0c871f2a37e26d889cf690ca8f80ffa423b070a53141681" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.4.2.P1" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
  <changelog author="max@suse.com" date="1664971200">- bsc#1203988, CVE-2022-2928, dhcp-CVE-2022-2928.patch:
  An option refcount overflow exists in dhcpd
- bsc#1203989, CVE-2022-2929, dhcp-CVE-2022-2929.patch:
  DHCP memory leak</changelog>
  <changelog author="gmbr3@opensuse.org" date="1666872000">- Use %_rundir</changelog>
  <changelog author="kukuk@suse.com" date="1670587200">- Add /etc/sysconfig/network hierachy to server file list</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="pvorel@suse.cz" date="1698926400">- Remove dhclient-script (boo#1216822).</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701777600">- Add new Kea migration assistant subpackage
- Switch doc subpackage to noarch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1701950400">- Revert dhclient-script removal and instead change usleep to sleep
  (boo#1216822)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
</package>
<package pkgid="ffdcf7e4d28c6564ce8850cfe0a17bb548a96320a595ecb441c1d673f7db2c53f94c9e65e71e81d3c994d36cd84527526e7dfa1a6f9cb36da3103fba2cd5fc7f" name="dhcpcd" arch="x86_64">
  <version epoch="0" ver="10.2.4" rel="160000.2.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1719835200">- Initial packaging @ 10.0.8</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1724241600">- Update to 10.0.10
  * Option 2: Fix stdin parsing
  * IPv4LL: Restart ARP probling on address conflict
  * DHCP: Handle option 108 correctly when receiving 0.0.0.0 OFFER
  * DHCP: No longer set interface mtu
  * Update privsep-linux.c to allow statx</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1728302400">- Update to 10.1.0
  * dhcp: get_option_uint32/16 only accept options with correct len
  * Include frame header in buffer length</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1739361600">- Update to 10.2.0
  * dhcp6: start request when advertise received after IRT
  * dhcpcd: stdout output sometimes empty when redirected to a file
  * Fix help text formatting
  * Apply lastlease behavior to DHCPv6
  * dhcpcd not ignoring source-based routes on linux
  * DHCP6: lastlease behavior after Confim non-response
  * Allow limited RLIMIT_FSIZE when dumping lease
  * IPv6: Avoid uninitialized ifp state when adding address
  * DHCPv6: Add support for sending Option 17 (VSIO)
  * Exit the timesyncd hook if not on systemd and not executable
  * Add route lifetime from Router Advertisement
  * revert e3c5de1
  * Fix using multiple enterprise IDs with vendclass (Option 124
    DHCP / Option 16 DHCPv6)
  * Update route if acquired time changes
  * Always send req for InfoRefreshTime option on Inform-Req
  * Increase max IPv4 clientid
  * Update build.yml to fix BSD builds</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1740398400">- Update to 10.2.1
  * Fix building with different options
  * Only drop IPv4 LL addresses if configured to handle them</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1740571200">- Update to 10.2.2
  * DHCP6: Fix dhcpcd vendor class option
  * options: Allow interface block to be pattern matching</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747396800">- Update to 10.2.3
  * Restore logic on when to open an address specific socket
  * [Fix] DHCP Failure on WAN Interface Rename (Fixes #504)
  * BSD: routes via P2P interfaces now find their out-going
    interface
  * -b --background fixed
  * resolv: Fix processing more DNSSL options than RDNSS]
  * dhcpcd: Remove option rapid_commit from dhcpcd.conf
  * privsep: Fix valgrind and hardened-malloc on Linux with SECCOMP
  * route: Don't spam route changes for lifetime</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1748865600">- Update to 10.2.4
  * compat: use timingsafe_bcmp if available
  * IPv6: Sort routers by reachability correctly.
  * definitions: define ND Route Information option
  * IPv6: Clear previous address RA flags on receipt of a RA.</changelog>
</package>
<package pkgid="dfc43d481be620bd484544578f323fecd2377f6d3e831c0fe329dff6b6b65f819e03f9fcdf46aec6d012d4f9de7a38f6aaec6ae099c04b94149efff102c015fe" name="dhcpcd" arch="x86_64">
  <version epoch="0" ver="10.3.2" rel="160000.1.2"/>
  <changelog author="jorik.cronenberg@suse.com" date="1719835200">- Initial packaging @ 10.0.8</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1724241600">- Update to 10.0.10
  * Option 2: Fix stdin parsing
  * IPv4LL: Restart ARP probling on address conflict
  * DHCP: Handle option 108 correctly when receiving 0.0.0.0 OFFER
  * DHCP: No longer set interface mtu
  * Update privsep-linux.c to allow statx</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1728302400">- Update to 10.1.0
  * dhcp: get_option_uint32/16 only accept options with correct len
  * Include frame header in buffer length</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1739361600">- Update to 10.2.0
  * dhcp6: start request when advertise received after IRT
  * dhcpcd: stdout output sometimes empty when redirected to a file
  * Fix help text formatting
  * Apply lastlease behavior to DHCPv6
  * dhcpcd not ignoring source-based routes on linux
  * DHCP6: lastlease behavior after Confim non-response
  * Allow limited RLIMIT_FSIZE when dumping lease
  * IPv6: Avoid uninitialized ifp state when adding address
  * DHCPv6: Add support for sending Option 17 (VSIO)
  * Exit the timesyncd hook if not on systemd and not executable
  * Add route lifetime from Router Advertisement
  * revert e3c5de1
  * Fix using multiple enterprise IDs with vendclass (Option 124
    DHCP / Option 16 DHCPv6)
  * Update route if acquired time changes
  * Always send req for InfoRefreshTime option on Inform-Req
  * Increase max IPv4 clientid
  * Update build.yml to fix BSD builds</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1740398400">- Update to 10.2.1
  * Fix building with different options
  * Only drop IPv4 LL addresses if configured to handle them</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1740571200">- Update to 10.2.2
  * DHCP6: Fix dhcpcd vendor class option
  * options: Allow interface block to be pattern matching</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747396800">- Update to 10.2.3
  * Restore logic on when to open an address specific socket
  * [Fix] DHCP Failure on WAN Interface Rename (Fixes #504)
  * BSD: routes via P2P interfaces now find their out-going
    interface
  * -b --background fixed
  * resolv: Fix processing more DNSSL options than RDNSS]
  * dhcpcd: Remove option rapid_commit from dhcpcd.conf
  * privsep: Fix valgrind and hardened-malloc on Linux with SECCOMP
  * route: Don't spam route changes for lifetime</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1748865600">- Update to 10.2.4
  * compat: use timingsafe_bcmp if available
  * IPv6: Sort routers by reachability correctly.
  * definitions: define ND Route Information option
  * IPv6: Clear previous address RA flags on receipt of a RA.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1782216000">- Update to 10.3.2
  * options: Ensure ldop is not NULL dereferenced
  [bsc#1268761, CVE-2025-70102]
  * DHCP: Don't run double EXPIRE hooks on carrier loss
  * DHCP: free the state when dropping on state NONE
  * BSD: don't send uninitialised memory using
    ps_root_indirectioctl
  * Fix fallback_time option
  * IPv4: Ignore DHCP state when building routes
  * route: Routes may not have an interface assinged
  * options: Ensure that an overly long bitflag string does not
    crash
  * options: Don't assume vsio options have an argument
  * common: Cast via uintptr_t rather than unsigned long in UNCONST
  * privsep: Ensure we recv for real after a successful recv
    MSG_PEEK
  * DHCP: Add parentheses to macro definitions
  * ipv6nd: empty IPV6RA_EXPIRE eloop queue when dropping
  * privsep: enforce message boundaries with MSG_EOR on our
    messages
  * Protocols will notify when dhcpcd can exit
  * DHCP: Don't request T1 and T2
  * DHCP: Don't request a lease time
  * DHCP6: Don't exit if using DHCP4 INFORM in non manager mode
  * ND: Route Information Option prefix is optional
  * ipv6: respect slaac hwaddr to really use the hwaddr
  * When stopping all interfaces at exit and releasing,
    remove persistance
  * NetBSD: Delete RTF_CONNECTED route when changing it
  * privsep: Drain the log when the root process is exiting
  * eloop: vastly reworked, kqueue and epoll support on by default</changelog>
</package>
<package pkgid="77e23327eed9d837c288840b9dd6c9788c6de6579e366b0f32b9bd08d87da7bb307d0fc315b036dabef3959532693fed05c5a693bea88c8a800e2310df184623" name="dhcpd-pools" arch="x86_64">
  <version epoch="0" ver="3.2" rel="bp160.1.12"/>
  <changelog author="barbereau@gmail.com" date="1331640000">- Code clean up
- Added proper path to openSuse dhcpd file locations
- Corrected spec error</changelog>
  <changelog author="klaus@vink-slott.dk" date="1486468800">- added nessary modifications to build including uthash</changelog>
  <changelog author="klaus@vink-slott.dk" date="1516190400">- Version 3.0 released from author
- added package documentation</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1587124800">- Specfile overhaul
  * Run spec-cleaner
  * Use proper build requires
  * Convert inline changelog to changes file
  * Run testsuite</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1587124801">- Update to version 3.1
  * Autoreconf done &amp; PACKAGE_URL introduced.
  * PACKAGE_URL introduced to configure.ac
  * Dominic Germain sent xml, and detailed xml, outputs
    patch.
  * Dominic Germain pointed out include directive bug,
    which broke shared network name.
  * Anonymous contrib addition snmptest.pl which should
    provide some sort of SNMP integration.
  * Range statements have dynamic-bootp flag and it no
    longer will break analysis.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1587470400">- Use correct name for the changes file</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 3.2:
  * contrib: snmptest.pl SNMPwalk can't access to all variables/wrong sort
  * contrib: point out where one can find zabbix template
  * config: remove unnecessary padding</changelog>
</package>
<package pkgid="76ee5fe0c794245ac2324af30279a4a06c9fb23ab615da0c0304e860d5bed5a290207f683be033247e061db796af188cf814b7cafaa896f8eaea52abf11ef34f" name="dhewm3" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="bp160.1.6"/>
  <changelog author="9@cirno.systems" date="1498305600">- Initial commit, 1.4.1
  * Fixed some (kinda rare) crashes due to assertion errors,
    especially observed in the last boss fights of both doom3
    and the Resurrection of Evil Addon.
  * Improved compatibility with AZERTY keyboards
    (the row of keys with 1...9, 0 is now usable)
  * Fixed a crash (at least on FreeBSD) when loading
    Resurrection of Evil's last level
  * Video resolutions in menu now sorted, added 2880x1800
  * Support for up to 8 mouse buttons</changelog>
  <changelog author="jengelh@inai.de" date="1498651200">- Trim redundant mentions from summary and description.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530619200">- Use %license macro
- Add 0002-Lower-release-build-optimizations-to-O2.patch
  * Fixes some undefined behavior caused by higher optimization
    levels. Picked from git master.</changelog>
  <changelog author="Martin Herkt &lt;9+suse@cirno.systems&gt;" date="1550923200">- Update to 1.5.0 (no changelog)
- Drop 0002-Lower-release-build-optimizations-to-O2.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1615723200">- Update to 1.5.1:
  * Update savegame format. Old savegames still work, but new
    savegames can't be loaded with older versions of dhewm3!
  * dhewm3 now supports the Doom3 Demo gamedata.
  * Create the game window on the display the cursor is currently
    on (when using more than one display).
  * Added r_fullscreenDesktop CVar to set if fullscreen mode should
    be "classic" or "Desktop" which means a borderless window at.
    desktop resolution.
  * Fullscreen modes that are not at the current desktop resolution
    should work better now.
  * Several sound-related bugfixes.
  * Restore "Carmack's Reverse" Z-Fail stencil shadows; use
    glStencilOpSeparate() if available.
  * New CVar g_hitEffect: If set to 0, the player camera damage
    effects (like double-vision and extreme tilt) when being hit
    are disabled.
  * Fix lingering messages in HUD after loading savegame.
  * Fixed clipping bug in delta1.
  * Improve compatibility with some custom scripts.
  * Registering multiplayer servers at id's master-server fixed,
    so they can be found in the multiplayer menu.
  * Support for reproducible builds by setting the CMake option
    REPRODUCIBLE_BUILD.
  * Proper handling of paths with dots in directory names.
  * In the Spanish translation all the Alpha Lab autosaves got
    the same name, now the autosave name is based on the mapename
    instead which is distinct.
- Remove patch
  * 0001-Remove-use-of-date-time-macros.patch (fixed by upstream)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1655294400">- Update to 1.5.2:
  * Gamma and Brightness are now applied in the shaders instead of
  by setting hardware gamma.  Can be disabled (so hardware gamma
  is used again) with `r_gammaInShaders 0`
  * Cycle through multiple Quicksave slots instead of immediately
  overwriting the last Quicksave. The `com_numQuicksaves` CVar
  allows setting the number of QuickSaves
  (gh#dhewm/dhewm3#392)
  * Make r_locksurfaces work
  It doesn't do exactly what its description and name suggests:
  it renders everything that is *currently* visible from the
  position/view the player had when setting `r_locksurfaces 1`.
  Originally it was supposed to render exactly the surfaces that
  * were* visible then, but I couldn't get that to work.
  This is pretty similar, but there may be differences with opened
  doors and such.
  (gh#dhewm/dhewm3#357)
  * Keyboard input improvements (mostly SDL2-only):
  - Support (hopefully) all keyboard keys on all kinds of keyboard
    layouts by using scancodes for otherwise unknown keys
  - Support typing in non-ASCII characters, if supported by Doom3
    (it supports ISO-8859-1)
  - Support the clipboard also on non-Windows platforms
    You can paste text from the clipboard into the console or
    other edit fields with `Shift+Insert`
  - Explicit support for Right Ctrl, Alt and Shift keys
    (can be bound to different actions than their left
    counterparts)
  - Added `in_grabKeyboard` CVar to make sure dhewm3 gets *all*
    keyboard input
    Prevents the Windows-key or Alt-Tab or whatever from taking
    focus from the game
  - Added `in_ignoreConsoleKey` - if set to `1`, the console is
    only opened with Shift+Esc, and the "console key" (that key
    between Esc, 1 and Tab) can be freely bound to an action
    (and its char can be typed in the console without closing
    it).
  - Added (SDL2-only) "auto" option for `in_kbd`: When not
    disabling the console key, dhewm3 will try to automatically
    detect it if `in_kbd` is set to "auto" (now default)
  * Reworked mouse-input and -grabbing code, using absolute mouse
  mode in fullscreen GUIs (except for the PDA, because it's
  implemented weirdly).
  This made releasing the mouse in the main menu possible, as now
  the ingame cursor is at the same position as the system cursor.
  * `s_alReverbGain` CVar to reduce EFX reverb effect intensity
  (gh#dhewm/dhewm3#365)
  * Pause (looped) sounds when entering menu
  (gh#dhewm/dhewm3#330)
  * Fixes for looped sounds
  (gh#dhewm/dhewm3#390)
  * Replace libjpeg with stb_image and libogg/libvorbis(file) with
  stb_vorbis
  - Now the only required external dependencies should be OpenAL,
    SDL, zlib and optionally libCURL (and of course the C and C++
    runtimes)
  * (Optionally) use libbacktrace on non-Windows platforms for more
  useful backtraces in case of crashes (usually linked statically)
  * Fixed endless loop (game locking up at startup) if graphics
  settings couldn't be applied
  (gh#dhewm/dhewm3#386)
  * Fixed some warnings and uninitialized variables
  * Work around dmap bug caused by GCC using FMA "optimizations"
  (gh#dhewm/dhewm3#147)
  * Prevent dhewm3 from being run as root on Unix-like systems to
  improve security
  * Replaced most usages of `strncpy()` with something safer to
  prevent buffer overflows (remaining cases should be safe).
  * Console output is now logged to `dhewm3log.txt`
  (last log is renamed to `dhewm3log-old.txt`)
  - On Windows it's in `My Documents/My Games/dhewm3/`
  - On Mac it's in `$HOME/Library/Application Support/dhewm3/`
  - On other Unix-like systems like Linux it's in
    `$XDG_DATA_HOME/dhewm3/` (usually `$HOME/.local/share/dhewm3/`)
  * Improved compatibility with Wayland
  (gh#dhewm/dhewm3#426)
  * Work around assertion in AlphaLabs4 due to "ride_of_death"
  yeeting the dead "monster_zsec_shotgun_12" into the void
  (gh#dhewm/dhewm3#409)
  * Support loading some mods known to need `fs_game_base d3xp` via
  Mods menu (currently, *The Lost Mission* and *LibreCoop d3xp*
  are supported)
  * Disable assertion in idSampleDecoderLocal::DecodeOGG() that
  triggered when starting a new Classic Doom3 game
  (gh#dhewm/dhewm3#461)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1711713600">- Update to version 1.5.3
  * Support for gamepads. See Configuration.md for more information.
  * Support different file formats for screenshots by setting the
    r_screenshotFormat CVar (0 = TGA, still the default, 1 = BMP,
    2 = PNG, 3 = JPG). r_screenshotJpgQuality and
    r_screenshotPngCompression allow configuring how JPG/PNG are
    compressed.
  * Fixed problems with lights after loading a savegame.
  * Fix volume of some weapon sounds, like chaingun being too quit.
  * Fix MD3 model support
  * Several new CMake options:
    + To enable Clang/GCC Address Sanitizer and Undefined Behavior
    Sanitizer
    + Hardlink the game code into the executable (instead of using
    game DLLs, only supports base or d3xp then; needed for
    Undefined Behavior Sanitizer)
    + Force colored diagnostic output from GCC or Clang (esp.
    useful when building with ninja)
  * Fix several compiler warnings
  * Updated stb_image and stb_vorbis
  * Updated minizip (from zlib/contrib) to latest upstream code
  * Added in_namePressed CVar to print currently pressed key/button
    (useful for binding keys in the console or configs).
- Add patch
  * dhewm3-fix-desktop-files.patch
- Packages desktop files
- Adjust URL</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1722686400">- Update to version 1.5.4
  * dhewm3-mods now contains game libs for several new mods:
  * Blood Mod v1.5
  * Perfected Doom3 (ROE) v7
  * Sikkmod v1.2 and Sikkmod RoE v1.1
  * A brand new settings menu that uses Dear ImGui.
  * "Soft" Particles (that don't "cut" into geometry but fade
    smoothly), based on code from The Dark Mod 2.04.
  * r_enableDepthCapture: Enable capturing depth buffer to texture,
    needed for the soft particles.
  * Replaced dependency on (external) zlib with integrated miniz.
  * HighDPI/Retina support.
  * Allow inverted mouse look (horizontally, vertically or both)
    with m_invertLook.
  * CVar to allow always run in single player (still drains
    stamina though!): in_allowAlwaysRunInSP.
  * VSync can be enabled/disabled on the fly, without restarting
    the renderer (still with r_swapInterval or in the menu, of
    course; needs SDL2).
  * Allow enabling/disabling HRTF with s_alHRTF.
  * s_alOutputLimiter: Configure OpenAL's output-limiter which
    temporarily reduces the overall volume when too many too loud
    sounds play at once, to avoid issues like clipping.
  * s_scaleDownAndClamp: Clamp and reduce volume of all sound to
    prevent clipping or temporary downscaling by OpenAL's output
    limiter.
  * If r_windowResizable is set, the dhewm3 window (when in
    windowed mode..) can be freely resized.
  * Fixed screenshots when using native Wayland
    (SDL_VIDEODRIVER=wayland).
  * If you enter the map command in the console, without any
    arguments, the current map name is printed.
  * Support OpenGL debug contexts and messages.
    (GL_ARB_debug_output). Can be enabled with r_glDebugContext 1.
  * Changing that CVar requires a vid_restart
    (or set it as startup argument).
- Remove Patch:
  * dhewm3-fix-desktop-files.patch (fixed upstream)</changelog>
</package>
<package pkgid="e461158d5d28ba2755de20e3b9832d6d1cf29ac84bf7b7fb5101064c1512dbe74604184974aa97552389f3b1144e212a8bfa12f587d472a19a160da7cf493b42" name="dhex" arch="x86_64">
  <version epoch="0" ver="0.69" rel="bp160.1.13"/>
  <changelog author="pascal.bleser@opensuse.org" date="1294488000">- initial version (0.61)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1294833600">- update to 0.62:
  * bugfixes
  * adds bookmark support
  * adds ASCII search</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1297771200">- update to 0.65:
  * adds native correlator, which may help matching an object-file
    to an executable and compare
  * new default theme
  * adds manpages</changelog>
  <changelog author="mardnh@gmx.de" date="1515326400">- Update to 0.68:
- Add themes
- Run spec-cleaner
- Drop not longer needed sources/patches:
  * dhex.desktop
  * dhex-fixes.patch
  * dhex-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1515499200">- Use %setup -a.</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Update to 0.69:
  * fixed a bug which caused the terminal to be broken.
  * added the functionality to start the hexcal from the
    commandline (-x).</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723204800">- Define feature macro _DEFAULT_SOURCE via a compiler option so that
  functions like usleep are properly declared by glibc and GCC 14 does
  not error out because of calling undeclared functions.</changelog>
</package>
<package pkgid="2780d8b1a39700fd339658a19ebc36ceb4ed17a5b42bb96de88ceab2c5d9b3da57a3fb9439da5060edd409757f3aae8dfa422be7e27b80631fc5e82525ee4d22" name="dia" arch="x86_64">
  <version epoch="0" ver="0.97.3" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1485000000">- Drop scrollkeeper BuildRequires: No longer needed.
- Stop packaging INSTALL in docs.</changelog>
  <changelog author="badshah400@gmail.com" date="1486123200">- Fix building with rpm &gt;= 4.13 by explicitly listing %{_docdir}
  files installed by make. Package the non-C lang documentation
  in the %{name}-lang package. The examples for all non-C locales
  are simply symlinks to the C locale example, so these need to
  be installed as part of the main package itself.
- Move man for fr locale into lang package (instead of main
  package).</changelog>
  <changelog author="badshah400@gmail.com" date="1486728000">- Make sure to own %{_docdir}/%{name} and lower directories
  individually by using %doc/%dir wherever appropriate.</changelog>
  <changelog author="badshah400@gmail.com" date="1487678400">- Avoid double inclusion of the contents of the directory
  %{_docdir}/%{name}, by removing it from the file-list for
  main package.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- spec-cleaned
- drop support for python plugin - depends on obsolete python-gtk package
- fix buildrequires
- enable png support</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579780800">- Remove docbook-toys build dependency, db2html is just an unused
  leftover in the configure script, only xsltproc is required.
  Removes build dependency on texlive-jadetex and some more.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Prepare for RPM 4.20: patchN -&gt; patch -P N.</changelog>
  <changelog author="mjambor@suse.com" date="1720440000">- Added patches dia-configure-c99.patch,
  dia-0.97.3-get_data_size.patch, dia-0.97.3-const-ft_vector.patch,
  dia-0.97.3-g_test_add_data_func_1.patch and
  dia-0.97.3-g_test_add_data_func_2.patch to address C99 compliance
  issues (mainly use of incompatible pointer types) that are errors by
  default with GCC 14 [boo#1224536].  All of these patches were taken
  from the Fedora dia package.</changelog>
</package>
<package pkgid="0c29511592b2715a36e8994fb07150792e228353b79dfd14e1f8f51effec7e5457da5b5fce9037aae0bfa5934d263e2baf9f5d013e15a114a3406fe3a2650446" name="dia-lang" arch="noarch">
  <version epoch="0" ver="0.97.3" rel="160000.2.2"/>
  <changelog author="zaitor@opensuse.org" date="1485000000">- Drop scrollkeeper BuildRequires: No longer needed.
- Stop packaging INSTALL in docs.</changelog>
  <changelog author="badshah400@gmail.com" date="1486123200">- Fix building with rpm &gt;= 4.13 by explicitly listing %{_docdir}
  files installed by make. Package the non-C lang documentation
  in the %{name}-lang package. The examples for all non-C locales
  are simply symlinks to the C locale example, so these need to
  be installed as part of the main package itself.
- Move man for fr locale into lang package (instead of main
  package).</changelog>
  <changelog author="badshah400@gmail.com" date="1486728000">- Make sure to own %{_docdir}/%{name} and lower directories
  individually by using %doc/%dir wherever appropriate.</changelog>
  <changelog author="badshah400@gmail.com" date="1487678400">- Avoid double inclusion of the contents of the directory
  %{_docdir}/%{name}, by removing it from the file-list for
  main package.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- spec-cleaned
- drop support for python plugin - depends on obsolete python-gtk package
- fix buildrequires
- enable png support</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579780800">- Remove docbook-toys build dependency, db2html is just an unused
  leftover in the configure script, only xsltproc is required.
  Removes build dependency on texlive-jadetex and some more.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1707393600">- Prepare for RPM 4.20: patchN -&gt; patch -P N.</changelog>
  <changelog author="mjambor@suse.com" date="1720440000">- Added patches dia-configure-c99.patch,
  dia-0.97.3-get_data_size.patch, dia-0.97.3-const-ft_vector.patch,
  dia-0.97.3-g_test_add_data_func_1.patch and
  dia-0.97.3-g_test_add_data_func_2.patch to address C99 compliance
  issues (mainly use of incompatible pointer types) that are errors by
  default with GCC 14 [boo#1224536].  All of these patches were taken
  from the Fedora dia package.</changelog>
</package>
<package pkgid="4fbfb6eca4f8c63b5ccc63918143354208b4d3e117bf6d3308b879fd20607827dc6215eec2ccc0c6b461d7547976fc984247304bcd6891c91927c01cd1d8193e" name="dialog" arch="x86_64">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743076800">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="fe0a71b988219f90183a6d2d316443b040b158c3ad19005fd2bfc86f70c473ed39e42dce8c5f201ce6acc7194b52a32956f6b10700b574a6e10c6cf2703e12a8" name="dialog-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743076800">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="5c066e030f262d7348252e830a656b4a97c497e3627bb8bdc0cfff316c2887e4de395a3fa15c269406ecb5f6ff5e3f916521a32450bd7c38b4771fd0dc4a951a" name="dialog-examples" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743076800">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="1f78fbee7ecf8c98c6c77664aa1f3b92bb8dc2e86b9374a51a11f48e3a3f3a5ab62d0ec7c3f27906f1ff16162d4ba9748146f2cc16c689ab737442a109e41fe1" name="dialog-lang" arch="noarch">
  <version epoch="0" ver="1.3" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
  <changelog author="sbrabec@suse.com" date="1541592000">- Fix mangled Hindi translation (bsc#1115005).</changelog>
  <changelog author="werner@suse.de" date="1550059200">- Update to version 1.3-20190211
  + modify to work with ncurses' threaded-library, which does not allow
    assignment to LINES/COLS (report by Marcus Roeckrath).
  + correct clearing after text in progressbox from 2018/06/21 changes
    for resizing (reports by David Boyd, Alan Somers).
  + improved configure macros CF_GNU_SOURCE, CF_POSIX_C_SOURCE,
    CF_XOPEN_SOURCE
  + update config.guess, config.sub
- Includes also version 1.3-20181107
  + convert ja.po to UTF-8 for consistency (suggested by Stanislav
    Brabec).
  + repair mis-encoded hi.po (report/analysis by Stanislav Brabec).
- Includes also version 1.3-20181022
  + improved configure macros CF_CC_ENV_FLAGS, CF_LD_RPATH_OPT,
    CF_LIBRARY_PATH, CF_SHARED_OPTS, CF_WITH_MAN2HTML,
    CF_WITH_VERSIONED_SYMS from ncurses
  + add ast.po, from
    http://translationproject.org/latest/dialog/
- Includes also version 1.3-20180621
  + improve file-offset computation in textbox.c (Werner Fink).
  + fix an overlooked case with real_auto_size() to maximize when
    height or width is given as -1.
  + build-fixes for configure options "--disable-Xdialog2" and
    "--disable-form"
  + add traces for each widget to show its parameters.
  + modify color scheme for mixedgauge to use the dialog window colors,
    like the captions.
  + fix a too-small malloc in the mixedgauge widget.
  + fix a use-after-free in dlg_remove_callback().
  + improve handling of SIGWINCH for several widgets (Debian #865840).
    + menubox, the point of the Debian report was that it would be nice
    to increase the window size if the terminal size increases.  Did
    that as a special case less problematic than decreasing the
    terminal size.  Added samples/menubox11 to demonstrate by
    comparison with menubox10 a problem with debconf which puts extra
    newlines in the caption that interfere with autowrap.
    + progressbox and derived prgbox, programbox, now handle resizing.
    + yesno, window was cleared
  + add dlg_ttysize() to support new options, allowing scripts to obtain
    some text-formatting details without initializing the terminal.
  + add options --print-text-only, and --print-text-size for scripts that
    adjust the widget size according to how the captions are formatted.
  + improve dialog.pl:
    + add demo.pl, to demonstrate the functions
    + quote/escape string parameters passed to dialog.
    + ensure all "integer" parameters are really integers.
    + use actual screensize for list captions rather than assuming 24
    lines.
  + when trimming blanks, treat unconverted tabs the same as spaces.
  + correct parameter to test when trimming blanks from the script,
    e.g., with "--trim" (report by Jarno Suni).
  + improve documentation of the various whitespace-filtering options,
    to show which take precedence (Debian #867536, cf: Debian #102942).
  + modify msgbox.c, yesno.c to bind SCROLLKEY_BINDINGS before
    TRAVERSE_BINDINGS so that up/down arrow will by default scroll the
    message up/down rather than be aliases for tab-traversal (report by
    Fredrik Kers).
  + modify dump_one_binding() to show when a binding is overridden.
  + improve format of trace-file, making comment-syntax consistent,
    as well as showing argv-splitting as a series of comments.
  + modify dlg_string_to_argv() to change the quoting behavior to be
    more consistent with shell behavior (patch by Denilson Sa Maia).
  + modify dlg_getc() to return ESC when a timeout expires, notifying
    callers that a quit occurred rather than exiting the application
    (suggested by Rodrigo Freitas).
  + modify handle_inputs() to ensure cursor-visibility is restored when
    there is no input character available (report by Guillaume Vareille).
  + improve comment in manual page regarding which widgets can use the
    "--help-button" (prompted by discussion with Csanyi Pal).
  + add a check for valid object pointer in tailbox's main loop since
    the getc-callback may have been freed within ui_getc.c (report by
    "David").
  + improved configure macros for ncurses: CF_GNU_SOURCE, CF_SHARED_OPTS,
    CF_CURSES_LIBS, CF_CURSES_FUNCS, CF_NCURSES_CONFIG
  + improved configure script checks for groff vs man2html:
    CF_PROG_GROFF and CF_WITH_MAN2HTML
  + build-fix from lynx for AM_WITH_NLS configure macro
  + update config.guess, config.sub
- Remove fix for Hindi translation as now upstream
- Remove patch textbox-file_size.patch now upstream
- Remove dialog.ko.po.bz2 as ko.po now upstream
- Modify patch dialog-1.2-20121230.dif</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="werner@suse.de" date="1616068800">- Update to version 1.3-20210306
  + add several usage-messages to dialog.pot
  + improve configure-check for ld searchpath on HP-UX and Solaris.
  + fix a few cppcheck warnings
  + updated eo.po, fi.po, pt.po, sq.po, sv.po, ru.po, uk.po, zh_CN.po
    from http://translationproject.org/latest/dialog/
  + updated dialog.pot
  + add option --no-hot-list, to allow suppressing the hotkey feature
    from lists.
  + increase minimum height of inputbox to avoid input field overlapping
    with the button-box (report by Victor Ananjevsky).
  + modify options-parsing to permit a "no" on any boolean option and
    deprecating the "no" options without a "-" , e.g., generalizing on
    "--nook" equivalence to "--no-ok".
  + minor spelling fixes, per codespell
  + update configure macros, for quoting/escaping fixes per shellcheck
  + update config.guess, config.sub
  + modify configure script's compiler check to work around Xcode's
    useless aliases for standard C.
  + enable keep-tite feature for NetBSD 8 and up; earlier releases would
    dump core.
  &gt; new features/fixes (Glenn Herteg)
  + add option "--cursor-off-label"
  + add option "--erase-on-exit"
  + fix errata in manpage.
  + fix logic: dlg_button_to_char() would return wrong value if no
    uppercase was found
  + add DIALOG_TIMEOUT to sample scripts, and use report-button more
    consistently to handle unexpected exit-status values.
  + add dlg_getenv_num() and dlg_getenv_str().
  + add DLG_EXIT_TIMEOUT to allow scripts to exit on an expired timeout
    with an exit-status different from DLG_EXIT_ERROR or DLG_EXIT_ESC
    (patch by Norbert Koch).
  + modify dlg_ok_label() and dlg_ok_labels() to ignore --no-ok if all
    buttons would be omitted.
  + add/use dlg_der_window() to account for derived windows just like
    subwindows, to fix regression in dlg_getc() in fselect/dselect
    widget.
  + modify several widgets to make their handling of --no-ok consistent
    with the majority of the widgets: editbox.c, menubox.c, msgbox.c,
    rangebox.c, textbox.c, timebox.c
  + add ^D as binding for new virtual key DLGK_LEAVE, which will close
    the current dialog by activating the currently-selected button.
  + improve manual-page description of --no-ok option (reports by
    Hans Mueller, Gil Delescluse).
  + modify configure script to make Solaris -R rpath feature work
  + fix regression in dlg_getc() caused by not taking into account
    subwindows used for input (report by Michael Wihl).
  + add validity-checks for window pointer (report/testcase by Michael
    Wihl).
  + improve configure macros:
    CF_CLANG_COMPILER: apply compiler-flags needed for test.
    CF_WITH_SCREEN_PDCURSES: use this to reduce X11-checks.
  + amend initialization for dlg_getc to fix regression in pause widget
    from 2020/03/27 changes (reports by Aidan Tessier, Norbert Koch,
    Josmar Pierri).
  + improve configure macros:
    CF_CLANG_COMPILER: split-out check for -Qunused-arguments to ensure
    that clang supports it.  IBM xlclang does not.
    CF_MIXEDCASE_FILENAMES: when cross-compiling to darwin (macOS),
    assume the filesystem doesn't support mixed-case
  + modify init_dialog's initialization of tab_len and aspect_ratio to
    avoid overwriting initialization done in process_common_options
    (report/patch by Rainer Weikusat, Debian #970508).
  + fix out-of-order description for --tailbox vs --rangebox in manpage
    (report by Glenn Herteg).
  + updated configure-macros: compiler-warnings and shared-library
    options.  Changed configure --with-warnings to --enable-warnings for
    consistency.
  + update config.guess
  + updated sq.po from http://translationproject.org/latest/dialog/
  + add clarification in manual page to show when the single/double
    quotes may be needed (prompted by discussion with Danilo G Baio).
  + fix an extra ".exe" in makefile.in which prevented Cygwin build.
  + fix most cppcheck warnings
  + tailbox/tailboxbg's exit-button now works with mouse-clicks
  + fix repainting while resizing for the editbox widget.
  + add configure-check for curses_exit() from ncurses 6.2
  + fix a few memory leaks in fselect.c, mixedgauge.c when resizing.
  + fix inconsistency in dlg_string_to_argv() which made the checklist9
    example not work.
  + add empty-string check in dlg_print_listitem() to avoid indexing past
    the end of the array of character-offsets.
  + improve handling of KEY_RESIZE by repainting the backtitle after
    clearing the screen (integrated patch by Rainer Weikusat, Debian
    [#954185]).
  + improve logic for wtimeout() calls which are used to set temporary
    non-blocking reads (prompted by patch by Rainer Weikusat, Debian
    [#954220]).
  + add "make check" rule.
  + updated configure-macros.
  + updated configure-macros, to work around ncurses vs xcode's c99 -W
  + update config.guess
  + updated configure-macros.
  + update config.guess
  + correct rc-file lookup of "default" color (report by Grady Martin,
    cf: 2019/09/24).
  + fix several issues in the sample scripts reported by shellcheck.
  + fix a few spelling errors reported by codespell (report by Jens
    Schleusener).
  + correct check for return-value of isblank(), which is not necessarily
    0/1 (report/patch by Paul Cercueil, Peter Korsgaard, cf: 2018/05/31).
  + amend change for parsing command-options before calling init_dialog,
    to handle --no-shadow, etc., which are initialized in init_dialog
    (report by Paul Cercueil, cf: 2018/06/21).
  + add dlg_trace_va_msg to manpage, symbol files.
  + improve layout of several widgets' data area when maximizing.
  + modify dselect/fselect to work with autosizing (Debian #915949).
  + add error messages from dlg_exiterr() to trace file.
  + improve manual page description of escaping in key-bindings.
  + modify inputmenu to recognize the "Cancel" button and keys bound to
    that feature while editing a renamed menu item.
  + revert one change, in form.c to the --last-key feature (Debian
    [#942025]).
  + correct ordering of libraries in configure-script, which appended
    in a case where it should have prepended.
  + update config.guess, config.sub
  + improve dialog-config script's filtering of -L options using the
    linker default directories.
  + improve dialog-config script, adding a -L option corresponding to
    the configure --libdir option if it would be a duplicate (report by
    Andrew Kosteltsev).
  + build-fix for configure --disable-trace
  + updated pt.po from http://translationproject.org/latest/dialog/
  + allow for underline- and reverse-video flags in the ".rc" file
    (integrated patch by Richard Robbins).
  + amend change to --last-key feature to eliminate an unnecessary
    separator (report by Gabriele Balducci).
  + extend --last-key feature to the remaining widgets which have
    ok/cancel buttons, and add logic to map keys which happen to be
    bound to ok/extra/cancel/help to simulate a button-press on the
    corresponding button (report by "sgewrk").
  + further fixes for dialog-config.in (report by Andrew Kosteltsev).
  + modify dialog-config.in so that setting prefix or exec-prefix to
    a given value with --prefix=VALUE or --exec-prefix=VALUE has the
    expected result of changing bindir, etc.
  + correct substitution for $LIBS value in dialog-config.in (report by
    Andrew Kosteltsev).
  + modify dlg_will_resize() and dlg_result_key() functions to reduce
    the chance that dialog exits on a SIGWINCH (Debian #930775).
  + make test-package for the development headers/library
  + add --libs-only-L, etc., to dialog-config script (prompted by
    discussion with Andrew Kosteltsev).
  + fix a memory leak in gauge widget (Andrew Kosteltsev).
  + minor fix for CF_GCC_WARNINGS
  + update config.guess, config.sub
- Modify patch dialog-1.2-20121230.dif
- This update fixes boo#1183668</changelog>
  <changelog author="dimstar@opensuse.org" date="1623844800">- Update to version 1.3-20210530:
  + amend adjustment to inputbox height so the autosized dimensions
    match  older versions (boo#1184503).
  + improve configure checks, to reduce warnings during those checks
  + updated translations.
- Changes from version 1.3-20210509:
  + improve configure checks, e.g., for libtool version
- Changes from version 1.3-20210324:
  + add configure option --enable-stdnoreturn to build when C11
    _Noreturn feature is enabled in recent ncurses development.
- Changes from version 1.3-20210319:
  Updated translations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743076800">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="a5328a0ddcdaa18d4d0201beef91d64c434c9f2c70b21a5407e0b176ebf00e5593d3632b95e58e3baaf164d44df6d157b6eae4a5eba8e045898e7c64d21dacf9" name="dianara" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="bp160.1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 1.3.1:
  * Option to browse posts from a user (only for users on the same
    server, for now).
  * Option to set or change e-mail address for the account.
  * Nick autocompleter now displays user ID, too.
  * Proper links are made from URL's found anywhere, when pasting
    plain text.
  * Add a Privacy category in the settings, with a couple of new
    options related to following people and managing lists.
  * Button to configure account on status bar when account is not
    configured.
  * Option to scroll main timeline to the new stuff line on update.
  * Enhance timeline page selector.
  * Progress bar during program startup.
  * Option to start application hidden in the system tray.
  * Command line option to change the color of links:
  - -linkcolor=color (useful in GTK+ environments).
  * Other minor fixes.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446292800">- Update to 1.3.2:
  * Add a D-Bus interface, to control the applications from other
    programs, such as scripts, using tools like qdbus or dbus-send.
  * Option to list the newest users from your own pump.io server,
    located under Neighbors, inside the Contacts tab.
  * Welcome wizard, to guide new users.
  * New privacy option: private likes.
    Liking posts or comments will only inform the author.
  * Support for non-https servers, using the --nohttps command line
    parameter.
  * Improve localisation support, and fix some issues with RTL
    languages.
  * JSON-based error messages from the server, which might have
    Unicode symbols, are now shown correctly.
  * Several minor fixes.
  * Hebrew translation.
- Remove dianara-remove-timestamp.patch and use a regexp instead.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1458648000">- Update to 1.3.3:
  * When trying to follow a contact, the user ID is verified.
  * The image viewer gained basic zoom capabilities.
  * Timelines show thumbnails of embedded images, full size in the
    viewer.
  * When pasting text in a post or comment, proper links will be
    made from URLs, even when the pasted text is rich format.
  * Links created from the Format menu are verified to have a
    proper scheme.
  * Post publisher area can grow bigger.
  * Configurable avatar sizes in comments and minor feeds.
  * Better error handling when timelines fail to load.
  * Add a AppData (AppStream) file.
  * Fix some size issues in comments.
  * Other small fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1467115200">- Update to version 1.3.4:
  * Automatic timeline updates will avoid interrupting the user.
  * Different snippet limits for regular and highlighted activities.
  * Snippets set to 'Always' by default.
  * More detailed new post notifications.
  * Clicking "Comment" in posts will show an option to check for
    comments, if the post doesn't have (or show) any comments yet.
  * Filtering (searching) contact lists will show the number of
    matches.
  * Items in the list of configured filtering rules can be sorted
    manually, via drag-and-drop.
  * Fix a possible crash when pasting a URL which points to an image.
  * Update a few links to pump.io sites.
  * Minor visual fixes and other improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.3.6 (changes since 1.3.4):
  * Officially support building with Qt 5.
  * Items highlighted due to filtering rules will show the reasons
    for highlighting.
  * After downloading an attachment, a button will appear, to open
    the file using the default application from the user's desktop
    environment.
  * Add buttons to rotate images in the image viewer
    (Ctrl+Left/Right keys).
  * Some windows that used to block input to the rest of the
    application, such as posts opened from the Meanwhile feed, will
    be independent now.
  * The colour setting for highlighted items is now enabled by
    default.
  * Several improvements in page selector.
  * Fix corner case where timeline might update while a comment is
    being composed, destroying it.
  * HTTP redirections will be followed when loading images
    (Qt 5 only).
  * Duration of popup notifications is now configurable, and
    notifications can be set to be persistent.
  * Some input fields will show a button to clear them
    (Qt 5 only).
  * Add a Galician translation.
  * Other small fixes.
- Switch to Qt5.
- Define $SOURCE_DATE_EPOCH for Dianara instead of manually
  replacing __DATE__ and __TIME__.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 1.3.7:
  * Image viewer now supports dragging the image around with the
    mouse, zooming with the wheel, and rotating animated images
    correctly.
  * Fix case-insensitive sorting of contacts in auto-completion
    lists.
  * Server version will be shown in the log.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510315200">- Update to version 1.4.0:
  * The side panel can now be moved to any border of the window, by
    dragging its title bar, after unlocking the panels from the
    View menu.
  * The toolbar can also be moved around, after unlocking.
  * Files can be attached to a post via drag'n'drop from a
    file manager.
  * Dragging text from a website to the post composer works better
    now.
  * Several improvements in the formatting options of the
    post/comment editor.
  * Auto-switch from Fit mode to Full mode in image viewer when
    using the mouse wheel.
  * Finer zoom control.
  * Posts with non-media attachments will show a matching icon from
    the user's icon theme, based on MIME type (i.e. PDF icon,
    TXT icon, etc).
  * A proper file extension will be suggested when saving non-media
    attachments to drive.
  * Add an option to set window as "requiring attention" to notify
    new posts, which usually results in the taskbar/dock entry
    being highlighted (Configuration &gt; Notifications, enabled by
    default).
  * Optional activity icons in the minor feeds.
    (Configuration &gt; Timelines, disabled by default).
  * Several improvements in the account dialogue.
  * Building with Qt 4 is no longer supported.
  * Remove the libmagic dependency, since Qt 5 has methods for
    mimetypes.
  * Remove the QJSON dependency, since Qt 5 has methods to handle
    JSON.
  * Accepting username@localhost as valid Webfinger ID, for testers.
  * Handle new HTML-based error messages sent by server since
    Pump.io 4.0.
  * Several cosmetic fixes.
  * Other minor fixes.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534593600">- Update to version 1.4.1:
  * Ability to save and restore post drafts.
  * Post publisher can grow much bigger.
  * System notifications now include a button to show the
    application.
  * Properly bring the main window to the front when restoring from
    the tray icon, and when clicking the "Show" button in a
    notification (depends on your WM)..
  * Fixes in the profile editor and image viewer.
  * Other minor improvements.
- Do not bother installing the appstream file to
  /usr/share/appdata/ on openSUSE Leap 42.x or older.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 1.4.3:
  - Added optional spell checking support, using KDE's Sonnet.
  It will be enabled if Sonnet's development packages are installed when
  building the program (unless CONFIG+=NO_KF5 is used).
  - Added optional character picker, using KDE's KCharSelect widget.
  It will be enabled if the development packages for KWidgetsAddons are
  installed when building the program (unless CONFIG+=NO_KF5 is used).
  - Adapted AppStream-related file naming and IDs to current standards.
  - Changed more dialogs to follow the environment's button order.
  - More code refactoring.
  - Changed OK/Cancel buttons in several dialogs to follow environment style.
  - Code refactoring and optimizations.
  - Fixed a corner case where a post deleted by its author, while a comment
  was being composed, would block timeline updates until program restart.
  - When a post is cancelled, abort possible ongoing file upload immediately.
  - Fixed Cancel button being disabled while sending a comment.
  - Fixed a pagination bug that would set the wrong page number if a timeline
  update had failed previously.
  - Other minor fixes.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 1.4.4:
  * Option to invert colors in image viewer.
  * Character picker now remembers up to 24 last used symbols, in usage order.
  * Fixed a possible crash when filtering out activities from the minor feed.
  * Fixed some minor visual issues.</changelog>
</package>
<package pkgid="4c869e87f488b61f200e2c78001f3124755bc696d359712476c2e242fe2a5efe05a5dcaf26c431d29981a7870640a045098e0d34e34633bdc54a1e68f0907990" name="dictd" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549281600">- Trim filler wording from description.
- Retire old $RPM_* shell vars.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1556107200">- Update to version 1.12.1+git.1555438032.190d8c6:
  * Remove --enable-dictorg from dict(1)
  * update config.sub and config.guess
  * dictfmt: fix merge conflict
  * dictfmt: fix compilation failure on Solaris (alloca)
  * dictfmt: DICTFMT_SORT variable is used for setting sort(1)
  * Support for --use-dictorg was removed
  * Support for socks5 was removed
  * Clean-ups for autocrap build system (headers and types)
  * Use stable sort to ensure already-sorted input stays sorted.
  * Revert "Update tables for is{space,alnum}__ (report by michael72)"</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1556107201">- Update to 1.12.1+git.1555438032.190d8c6:
  - Remove --enable-dictorg from dict(1)
- Stop using obs_scm, it doesn't work, use tar_scm instead.
- Use tighter globs in %%files to make debuginfo generator happy.
- Clean up SPEC using spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.
- USe systemd_ordering instead of systemd_requires: only ask for
  systemd to be early in the transaction, but don't forcibly
  require systemd to be present.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1582113600">- Update to version 1.12.1+git.1579902294.78aa097:
  * Replace inet_ntoa with gethostbyname for checking -lnsl library. It seems recent IssumOS has inet_ntoa in libc.
  * test/dictzip_test.in: use @AWK@ instead of awk
  * test/dictzip_test.in: avoid printing binary \0. This fixes test on some systems
  * Fix test/dictzip_test regression test with broken busybox-1.30 AWK implementation. Use AWK set to ./configure script
  * dictfmt: fix overlap of memcpy(3) (overlap of source and destination pointers) Use memmove(3) instead of memcpy(3). This fixes test fail on Linux/musl.
  * Fix build on Solaris-10</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1585569600">- Update to 1.13.0:
  - dictd:
  * add support for IPv6 (the default is IPv4)
  - Add global configuration option "address_family" and
    command line options --address-family
  - Options "listen_to" and --listen-to accepts host name
    in addition to IP address, "*" means "bind to all interfaces".
  - dict:
  * add support for IPv6.
  - New command line options -4 and -6.
  - dict + dict:// URL: add support for IPv6 address
    surrounded by [ and ] symbols
  - dictfmt:
  * fix overlap of source and destination buffers in memcpy(3).
    Use memmove(3) instead. This fixes failures on Linux/musl.
  * DICTFMT_SORT environment variable may be used for
    setting non-default sort(1)
  - Fix build on recent Solaris/IllumOS (missing -lnsl at link
    time)
  - Remove support for --use-dictorg and socks5. Clean-ups for build
    system.
  - Remove support for non-utf8 dictionaries.
  - tests:
  * new test for dictd as a daemon
  * always use @AWK@
  * test/dictzip_test.in: avoid printing binary \0. This fixes test on
    some systems</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631534400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * dictd.service</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645358400">- Update to 1.13.1:
  - Remove the last call of gethostbyname(3)
  - Fixes by Huy-Ngo in dictfmt help message.
- Remove ProtectHome from the systemd service file, because data
  files can be stored in $HOME and indexes need to written to.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645358401">- Add dictd-rpmlintrc ... potential bashismus is completely
  innocent (gh#cheusov/dictd#13).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1709812800">- Fix License: tag (thank you, Fedora
  developers, for the research,
  https://src.fedoraproject.org/rpms/dictd/pull-request/5).
- Clean up the SPEC file</changelog>
</package>
<package pkgid="c6acafd03606e4e5166f9423118b0b665092bdc102687ead5d7aff5d99a9f62e7e52fdfd27b00f935988d77fb2f47af6638b1007824f1df9169be22b62eec67f" name="dictd-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="bp160.1.12"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549281600">- Trim filler wording from description.
- Retire old $RPM_* shell vars.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1556107200">- Update to version 1.12.1+git.1555438032.190d8c6:
  * Remove --enable-dictorg from dict(1)
  * update config.sub and config.guess
  * dictfmt: fix merge conflict
  * dictfmt: fix compilation failure on Solaris (alloca)
  * dictfmt: DICTFMT_SORT variable is used for setting sort(1)
  * Support for --use-dictorg was removed
  * Support for socks5 was removed
  * Clean-ups for autocrap build system (headers and types)
  * Use stable sort to ensure already-sorted input stays sorted.
  * Revert "Update tables for is{space,alnum}__ (report by michael72)"</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1556107201">- Update to 1.12.1+git.1555438032.190d8c6:
  - Remove --enable-dictorg from dict(1)
- Stop using obs_scm, it doesn't work, use tar_scm instead.
- Use tighter globs in %%files to make debuginfo generator happy.
- Clean up SPEC using spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1559736000">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  make the build dep chain cheaper by using systemd-mini.
- USe systemd_ordering instead of systemd_requires: only ask for
  systemd to be early in the transaction, but don't forcibly
  require systemd to be present.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1582113600">- Update to version 1.12.1+git.1579902294.78aa097:
  * Replace inet_ntoa with gethostbyname for checking -lnsl library. It seems recent IssumOS has inet_ntoa in libc.
  * test/dictzip_test.in: use @AWK@ instead of awk
  * test/dictzip_test.in: avoid printing binary \0. This fixes test on some systems
  * Fix test/dictzip_test regression test with broken busybox-1.30 AWK implementation. Use AWK set to ./configure script
  * dictfmt: fix overlap of memcpy(3) (overlap of source and destination pointers) Use memmove(3) instead of memcpy(3). This fixes test fail on Linux/musl.
  * Fix build on Solaris-10</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1585569600">- Update to 1.13.0:
  - dictd:
  * add support for IPv6 (the default is IPv4)
  - Add global configuration option "address_family" and
    command line options --address-family
  - Options "listen_to" and --listen-to accepts host name
    in addition to IP address, "*" means "bind to all interfaces".
  - dict:
  * add support for IPv6.
  - New command line options -4 and -6.
  - dict + dict:// URL: add support for IPv6 address
    surrounded by [ and ] symbols
  - dictfmt:
  * fix overlap of source and destination buffers in memcpy(3).
    Use memmove(3) instead. This fixes failures on Linux/musl.
  * DICTFMT_SORT environment variable may be used for
    setting non-default sort(1)
  - Fix build on recent Solaris/IllumOS (missing -lnsl at link
    time)
  - Remove support for --use-dictorg and socks5. Clean-ups for build
    system.
  - Remove support for non-utf8 dictionaries.
  - tests:
  * new test for dictd as a daemon
  * always use @AWK@
  * test/dictzip_test.in: avoid printing binary \0. This fixes test on
    some systems</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631534400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * dictd.service</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645358400">- Update to 1.13.1:
  - Remove the last call of gethostbyname(3)
  - Fixes by Huy-Ngo in dictfmt help message.
- Remove ProtectHome from the systemd service file, because data
  files can be stored in $HOME and indexes need to written to.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1645358401">- Add dictd-rpmlintrc ... potential bashismus is completely
  innocent (gh#cheusov/dictd#13).</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1709812800">- Fix License: tag (thank you, Fedora
  developers, for the research,
  https://src.fedoraproject.org/rpms/dictd/pull-request/5).
- Clean up the SPEC file</changelog>
</package>
<package pkgid="cac7b46b6e41370a89441db46c41ef10b47f90cc2fff6a765ecfb5dbc6cb0f23e51e6560fff8ad6734f73b153c2e67caaa493f61134bf9cfe30b1367e3a2961b" name="dicts-devel" arch="noarch">
  <version epoch="0" ver="1.5" rel="bp160.1.5"/>
  <changelog author="dimstar@opensuse.org" date="1366718400">- Assume SUSE-Permissive for dutch and catalan: there are no
  License information available.</changelog>
  <changelog author="werner@suse.de" date="1392292800">- Update polish dictionary to version 20140102 (bnc#857026)</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Use modern regular expressions for character sets in lisp
  declarations for the dictionaries</changelog>
  <changelog author="werner@suse.de" date="1495454400">- s/decrementieren/dekrementieren/ for german dictionary (boo#1039305)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1585656000">- Declare string functions
- No debug package at all</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1630929600">- Smaller cleanups</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1632484800">- Mark the package split dicts into dicts and dicts-devel as such</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1632744000">- OK, it is a package rename and it is noarch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1697112000">- New RPM API change ... now no %patch anymore only %patch0</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="b3074b2050d669ef0952c80c6169798039ac1ec4e1988727814e39a325cbbc25f0a69ac233a4d6b075b9f4fe1519c4c77df9a8da47fea3e29d224800e22b71f3" name="diff-pdf" arch="x86_64">
  <version epoch="0" ver="0.5" rel="bp160.1.12"/>
  <changelog author="wagner-thomas@gmx.at" date="1395748800">+ initial compilation
-</changelog>
  <changelog author="mpluskal@suse.com" date="1464523200">- Cleanup spec file and update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Fix building with gcc6 (boo#985353)
- Use safer ldflags</changelog>
  <changelog author="munix9@googlemail.com" date="1609243200">- Update to version 0.4.1
  Fixes some bugs (#64, #65) that crept into 0.4.
  All users of 0.4 should update.
- Update to version 0.4
  Added new useful options contributed by @fatalmind:
  - -skip-identical    only outputs pages with actual differences
  - -channel-tolerance makes it easy to ignore tiny differences
  - -mark-differences  adds visual markers to the margin to
    highlight where small changes are
- Add fix-find-poppler.patch
- Add man page with help2man
- Clean up spec file</changelog>
  <changelog author="munix9@googlemail.com" date="1609416000">- Pre-create diff-pdf.1 with help2man to work around GTK+ DISPLAY
  errors (boo#1180471)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Update to version 0.5:
  * Reflect renaming of package from Ubuntu 20.10 on
  * Increase version to v0.5
  * Add --grayscale option
  * Show default DPI value used in --help output
  * Remove code for old versions of glib and wxWidgets
  * Tiny code formatting fixes
  * Add rasterization DPI option (#71)
  * AppVeyor: fix MSYS2 build
  * Remove legacy poppler-cairo dependency (#69)
  * Add instructions for installing on Fedora and CentOS 8 (#66)
- Drop no longer needed fix-find-poppler.patch
- Switch to obs scm _service</changelog>
  <changelog author="munix9@googlemail.com" date="1676289600">- Pre-create diff-pdf.1 with help2man to work around GTK+ DISPLAY
  errors (boo#1180471)</changelog>
</package>
<package pkgid="fd5e3c448a958eecd990d0daa68c111e89371de4b483ffa194f486f7962005fe935f11b8a89cbaf4a450ba786fd701484fb62badd17c097f3c2d7076d45e5a4e" name="diff-so-fancy" arch="noarch">
  <version epoch="0" ver="1.4.4" rel="bp160.1.9"/>
  <changelog author="JL K &lt;jlk@fsfe.org&gt;" date="1615118400">- Bump to version 1.4.0</changelog>
  <changelog author="JL K &lt;jlk@fsfe.org&gt;" date="1633780800">- Fix missing file</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963200">- Use macros instead of commands upon install
- Remove shebang and executable bit from third party scripts
- Replace env shebangs with real interpreters</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963201">- Move from /opt to _datadir (/usr/share)
- Refit to text utils group</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1645963202">- Relocate DiffHighlight script to be found by executable</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1646049600">- Fix error in sed command changing the lib directory</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649332800">- Format spec file via osc service</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649332801">- Update to version 1.4.3
  * use fatpack build for npm</changelog>
  <changelog author="Jan-Luca Kiok &lt;me@jlk.one&gt;" date="1649592000">- Use direct shell commands instead of indirect macros within the
  specfile
- Neutralise summary</changelog>
  <changelog author="Jan-Luca Kiok &lt;opensuse-packages@jlk.one&gt;" date="1686398400">- Update to version 1.4.4
  * General maintenance release with bug fixes for modern versions
    of git
  * Much improved test suite to catch bugs earlier and easier
  * Better support for non-git use cases (vanilla diff and hg)</changelog>
</package>
<package pkgid="475bf44ed3adf5d0be817cbdc8fceaef5f8843486d57e60f534da91ba4ff700b5b9a621ee15a07389ae569e65dd095415481df35798f4f7a010089b5028475e7" name="diffoscope" arch="noarch">
  <version epoch="0" ver="284" rel="bp160.1.10"/>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674302400">- update to 233:
  * Split packaging metadata into an extras_require.json file instead of using
    the pep517 and the pip modules directly. This was causing build failures if
    not using a virtualenv and/or building without internet access.
  * Add an external tool reference for GNU Guix (lzip).
  * Drop an external tool reference for GNU Guix (pedump).
  * Split inline Python code in shell script to generate test dependencies to a
    separate Python script.
  * No need for "from __future__ import print_function" import in setup.py
    anymore.
  * Comment and tidy the new extras_require.json handling.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1677844800">- update to 238:
  * autopkgtest: fix tool name in the skippable list.
  * autopkgtest: only install aapt and dexdump on architectures
    where they are available.
  * Drop backward compatibility assignment.
  * Fix flake warnings, potentially reinstating PyPDF 1.x
    support (untested).
  * Update code to match latest version of Black.
  * Require at least Black version 23.1.0 to run the internal
    Black tests.
  * Update copyright years.
  * Fix compatibility with PyPDF2.
  * Fix compatibility with ImageMagick 7.1.
  * Update from PyPDF2 to pypdf.
  * Add support for Android resources.arsc files.
  * Add support for dexdump.
  * Improve DexFile's FILE_TYPE_RE and add
    FILE_TYPE_HEADER_PREFIX, and remove
    "Dalvik dex file" from ApkFile's FILE_TYPE_RE as well.
  * Update external tool for isoinfo on guix.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1683115200">- update to 241:
  * Add a missing 'raise' statement
  * document sending out an email upon release
  * Drop the use of include_package_data=True in setup.py.
  * Fix compatibility with pypdf 3.x, and correctly restore test
    data.
  * Rework PDF annotations processing into a separate method.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1691236800">- Add fix-file-5.45.patch to fix compatibility with file version 5.45
  https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/346
- update to version 242:
  - If the binwalk Python module is not available, ensure the user knows they
  may be missing more differences in, for example, concatenated .cpio
  archives.
  - Factor out routine to generate a human-readable comments when
  Python modules are missing.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1698840000">- removed patch fix-file-5.45.patch as included in upstream
- Update to version 251:
  * If the equivalent of `file -i` returns text/plain, fallback to comparing
    this file as a text file. This especially helps when file(1) miscategorises
    text files as some esoteric type.
- Update to version 250:
  * Fix compatibility with file 5.45.
  * Add external tool references for GNU Guix (for html2text and ttx).
- Update to version 249:
  * Add specialize_as() method, and use it to speed up .smali comparison in APKs.
  * Add documentation for the new specialize_as, and expand the documentation
    of `specialize` too.
  * Correct typos in diffoscope/presenters/utils.py.
- Update to version 246:
  * Add support for LLVM 16.
- Update to version 244:
  * Address compatibility with python-libarchive-c version 5.
  * Testsuite changes
- Update to version 243:
  * Improve the documentation on to produce that binary blob that in the arsc comparator.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 261 (bsc#1220157, CVE-2024-25711):
  * Don't crash if we encounter an .rdb file without an
    equivalent .rdx file.
  * Actually test 7z support in the test_7z set of tests, not the
    lz4 functionality.
  * In addition, correctly check for the 7z binary being
    available (and not lz4) when testing 7z.
  * Prevent a traceback when comparing a contentful .pyc file
    with an empty one. (Re: Debian:#1064973)
  * Don't error-out with a traceback if we encounter
    "struct.unpack"-related errors when parsing .pyc files.
  * Fix compatibility with PyTest 8.0.
  * Don't try and compare rdb_expected_diff on non-GNU systems as
    %p formatting can vary.
  * Use the 7zip package (over p7zip-full) after package
    transition.
  * Parse the header and hunksize of diffs strictly before
    parsing the context below.
  * Reformat code to comply with the latest version of Black
    (24.1.1).
  * Expand the previous changelog entry to include the CVE number
    that was subsequently assigned.
  * Bump the miniumum Black requirement to run the "Black clean"
    test and make test_zip.py Black clean.
  * CVE-2024-25711: Use a determistic name when extracting
    content from GPG artifacts instead of trusting the value of
    gpg's --use- embedded-filenames.
  * Temporarily fix support for Python 3.11.8 re. a potential
    regression with the handling of ZIP files.
  * Add/fix compatibility for Python progressbar 2.5 &amp; 3.0 etc.
  * Add external tool on GNU Guix for 7z.
  * Improve DOS/MBR extraction by adding support for 7z.
  * Process objdump symbol comment filter inputs as the Python
    "bytes" type (and not str). (Closes: reproducible-
    builds/diffoscope#358)
  * Add a missing RequiredToolNotFound import.
  * Update copyright years.
  * As UI/UX improvement, try and avoid printing an extended
    traceback if diffoscope runs out of memory. This may not
    always be possible to detect.
  * Mark diffoscope as stable in setup.py (for PyPI.org).
    Whatever diffoscope is, at least, not "alpha" anymore.</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1713787200">- Update to 265:
  * Ensure that tests with "&gt;=" version constraints actually print
    the corresponding tool name.
    (Closes: reproducible-builds/diffoscope#370)
  * Prevent odt2txt tests from always being skipped due to an
    impossibly new version requirement.
    (Closes: reproducible-builds/diffoscope#369)
  * Avoid nested parens-in-parens when printing "skipping…"
    messages in the testsuite.
- Update to 264:
  * Don't crash on invalid zipfiles, even if we encounter 'badness'
    halfway through the file. (Re: #1068705)
  * Add note when there are duplicate entries in ZIP files.
    (Closes: reproducible-builds/diffoscope!140)
  * Add an external tool reference for GNU Guix for zipdetails.
- Update to 263:
  * Add support for the zipdetails(1) tool included in the Perl
    distribution.
  * Don't use parenthesis within test "skipping…" messages; PyTest
    adds its own parenthesis, so we were ending up with double
    nested parens.
  * Fix the .epub tests after supporting zipdetails(1).
  * Update copyright years and debian/tests/control.
  * Fix MozillaZipContainer's monkeypatch after Python's zipfile
    module changed to detect potentially insecure overlapping
    entries within .zip files.
    (Closes: reproducible-builds/diffoscope#362)
- Update to 262:
  * Factor out Python version checking in test_zip.py. (Re: #362)
  * Also skip some zip tests under 3.10.14 as well; a potential
    regression may have been backported to the 3.10.x series. The
    underlying cause is still to be investigated. (Re: #362)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1720526400">- update to 272:
  * Move away from using DSA OpenSSH keys in tests; support has
    been removed in OpenSSH 9.8p1.
  * Move to assert_diff helper in test_openssh_pub_key.py
  * Update tests to support zipdetails version 4.004 shipped with
    Perl 5.40.
  * Drop apktool from Build-Depends; we can still test our APK
    code via autopkgtests. (Closes: #1071410)
  * Fix tests for 7zip version 24.05.
  * Add a versioned dependency for at least version 5.4.5 for the
    xz tests; they fail under (at least xz 5.2.8).
  * Relax Chris' versioned xz test dependency (5.4.5) to also
    allow version 5.4.1.
  * Include "xz --verbose --verbose" (ie. double --verbose)
    output, not just the single --verbose. (Closes: #1069329)
  * Only include "xz --list" output if the xz has no other
    differences.
  * Use "xz --list" to supplement the output when comparing .xz
    archives; essential when some underlying metadata differs.
  * Actually append the xz --list after the container
    differences, as it simplifies tests and the output.
  * Maintain an in-header boolean state to determine whether to
    drop from-file/to-file lines. This fixes an issue where HTML
    differences were being inadvertendly neglected.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1733140800">- update to version 283:
  - Fix crash when objdump is missing when checking .EFI files.
- update to version 282:
  - Ignore errors when listing .ar archives. (Closes: #1085257)
  - Update copyright years.
- update to version 281:
  - Don't try and test with systemd-ukify within Debian stable.
  - Add support for UKI files.
- update to version 280:
  - Drop Depends on deprecated python3-pkg-resources. (Closes: #1083362)
- update to version 279:
  - Drop removal of calculated basename from readelf output.
  (Closes: reproducible-builds/diffoscope#394)
- update to version 278:
  - Temporarily remove procyon-decompiler from Build-Depends as it was removed
  from testing (#1057532). (Closes: #1082636)
  - Add a helpful contextual message to the output if comparing Debian .orig
  tarballs within .dsc files without the ability to "fuzzy-match" away the
  leading directory. (Closes: reproducible-builds/diffoscope#386)
  - Correctly invert "X% similar" value and do not emit "100% similar".
  (Closes: reproducible-builds/diffoscope#391)
  - Update copyright years.
- update to version 277:
  - Don't crash when attempting to hashing symlinks with targets that point to
  a directory.
- update to version 276:
  - Also catch RuntimeError when importing PyPDF so that PyPDF or, crucially,
  its transitive dependencies do not cause diffoscope to traceback at runtime
  and build time. (Closes: #1078944, reproducible-builds/diffoscope#389)
  - Factor out a method for stripping ANSI escapes.
  - Strip ANSI escapes from the output of Procyon. Thanks, Aman Sharma!
  - Update copyright years.
- update to version 275:
  - Update the test_zip.py text fixtures and definitions to support new changes
  to IO::Compress. (Closes: #1078050)
  - Do not call marshal.loads(...) of precompiled Python bytecode as it is
  inherently unsafe. Replace, at least for now, with a brief summary of the
  code section of .pyc files. (Re: reproducible-builds/diffoscope#371)
  - Don't bother to check the Python version number in test_python.py: the
  fixture for this test is deterministic/fixed.
  - Update copyright years.
- update to version 274:
  - Add support for IO::Compress::Zip &gt;= 2.212. (Closes: #1078050)
  - Don't include debug output when calling dumppdf(1).
  - Append output from dumppdf(1) in more cases.
  (Closes: reproducible-builds/diffoscope#387)
  - Update copyright years.
  - Update the available architectures for test dependencies.
- update to version 273:
  - Factor out version detection in test_jpeg_image. (Re:
  reproducible-builds/diffoscope#384)
  - Ensure that 'convert' is from Imagemagick 6.x; we will need to update a
  few things with IM7. (Closes: reproducible-builds/diffoscope#384)
  - Correct import of identify_version after refactoring change in 037bdcbb0.
  - tests:
  + Add OpenSSH key test with a ed25519 key.
  + Skip the OpenSSH test with DSA key if openssh is &gt;&gt; 9.7
  + Support ffmpeg &gt;= 7 that adds some extra context to the diff
  - Do not ignore testing in gitlab-ci.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix@sebix.at&gt;" date="1734868800">- update to version 284:
  - Simplify tests_quines.py::test_{differences,differences_deb} to use
  assert_diff and not mangle the expected test output.
  - Update some tests to support file(1) version 5.46.
  (Closes: reproducible-builds/diffoscope#395)
- update test skips, remove test_diff, add test_obj_identification</changelog>
</package>
<package pkgid="fbd659ac7a7923869cab611c125fed81d0dfa018da3ee6f397dcc7e204d24efa4d0a80fdcdca81d41ad5b00b705353a0a4ca6c4e130bae750f01654f24e4aafe" name="diffstat" arch="x86_64">
  <version epoch="0" ver="1.66" rel="bp160.1.13"/>
  <changelog author="pgajdos@suse.com" date="1383134400">- updated to 1.58:
    + add COPYING file (request by Dagobert Michelsen).
    + improved portability for cross-compiling, by supplying missing
    getopt function as well as improving checks for popen/pclose
    prototypes.</changelog>
  <changelog author="pgajdos@suse.com" date="1402315200">- updated to 1.59:
  + add -E option to filter escape-sequences, e.g., from colordiff
    (Ubuntu #1304262).
  + merge/adapt improvments to makefile and configure script from
    openembedded.org (forwarded by Ross Burton).
    + remove unused $(libdir) from makefile "installdirs" target
    + amend definition in CF_POPEN_TEST to permit use of autoheader.
    + workaround for gratuitous renaming of AC_ACVERSION in 2.69
  + added "docs" rule to makefile
  + improvements to configure macros:
    + added check for -Wlogical-op to gcc warnings
    + suppress check for defining _XOPEN_SOURCE on Solaris
    + trim an unwanted -no-gcc option for Intel compiler
  + update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Update source url
- Add gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 1.60
  * add configure option --with-man2html
  * update configure macros
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1454846400">- Update to 1.61
  * add -T option to show amount of changes next to histogram.
  * if -S option is given, check for unmodified files and add those
    to the report.
  * update configure macros
  * update config.guess, config.sub</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546257600">- Update to 1.62
  + improve checks for unmodified files when -S and -D options are
    given.
  + improve test-packages, to check warning-options.
  + minor fixes for manpage (Debian #895963)
  + minor fixes for prefix-stripping with -S option.</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 1.63
  + eliminate fixed buffer when decoding range.
  + use locale in computing filename column-width.
  + improve parsing for git diffs.
  + use terminal-width as default for -w to tty.
  + minor fix in do_merging (Miloslaw Smyk).
  + improve relative-pathname matching in count_lines()
  + add a parsing-case for svn diff.
  + quote filenames in -t/-T output.
  + fix cppcheck warnings about sscanf.
  + update configure macros
  + update config.guess, config.sub</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 1.64:
  + recognize binary files mentioned in "git diff --binary", and
  "git log -p --binary" formatted files (report by Faheem Mitha).</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 1.65:
  + correct case where there is no unified-context.
  + trim trailing '/' from pathnames, e.g., to handle
    "diff -ru FOO/ BAR/ | diffstat -K"</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1707652800">- update to 1.66:
  + improve handling of git diff's
  + update install-sh
  + improve configure script checks, reducing compiler warnings</changelog>
</package>
<package pkgid="18ac2469b47176877a593e43a73da1d08fc95aec4a31e890f9862388b0d4a6f3a8737d159f106a53f11f968d7d6de05e11fef4f2d2ab73210471a5e0fa32fcd6" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.12" rel="160000.2.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: avoid false-positive
  error in gnulib tests 'test-perror2' and 'test-strerror_r',
  visible on armv7l.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1628337600">- diffutils 3.8:
  * diff no longer treats a closed stdin as representing an absent
    file in usage like 'diff --new-file - foo &lt;&amp;-'
  * diff and related programs no longer get confused if stdin,
    stdout, or stderr are closed
  * cmp, diff and sdiff no longer treat negative command-line
    option-arguments as if they were large positive numbers
- drop gnulib-test-avoid-FP-perror-strerror.patch, upstream
- drop gnulib-c-stack.patch, equivalent change in c-stack
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="schwab@suse.de" date="1632139200">- Skip stack overflow tests under qemu emulation (bsc#1190046)</changelog>
  <changelog author="schwab@suse.de" date="1663156800">- Skip gnulib test test-free under qemu emulation (bsc#1202260)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673870400">- diffutils 3.9:
  * fixes for other platforms</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684756800">- diffutils 3.10:
  * cmp/diff can again work with file dates past Y2K38
  * diff -D no longer fails to output #ifndef lines</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738756800">- diffutils 3.11:
  * quote file names more consistently in diagnostics
  * diff now outputs more information when symbolic links differ
  * diff's --ignore-case (-i) and --ignore-file-name-case options
    now support multi-byte characters
  * diff now supports multi-byte characters when treating white
    space
  * In options like --expand-tabs (-t), --ignore-space-change (-b)
    and --ignore-tab-expansion (-E), diff now recognizes non-ASCII
    space characters and counts columns for non-ASCII characters.
  * cmp -bl no longer omits "M-" from bytes with the high bit set
    in single-byte locales like en_US.iso8859-1
  * cmp -i N and -n N no longer fail merely because N is enormous.
  * cmp -s no longer mishandles /proc files
  * diff -E no longer mishandles some input lines containing '\a',
    '\b', '\f', '\r', '\v', or '\0'.
  * diff -ly no longer mishandles non-ASCII input.
  * diff - A/B now works correctly when standard input is a
    directory, by reading a file named B in that directory.
  * diff no longer suffers from race conditions in some cases when
    comparing files in a mutating file system</changelog>
  <changelog author="tonyj@suse.com" date="1743854400">- Fix failure (noticed in sdiff as fatal "realloc(): invalid next size")
  Original upstream report: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=77265
  New patch: diff-fix-allocation-typo-leading-to-crashes.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- diffutils 3.12:
  * diff -r no longer merely summarizes when comparing an empty
    regular file to a nonempty regular file.
  * diff -y no longer crashes when given nontrivial differences
- drop diff-fix-allocation-typo-leading-to-crashes.patch</changelog>
</package>
<package pkgid="fa0189d865129a50b899ae04ccc5c183f26cf455460da9b2fc0a9b2a84326980cf11b897c0a2866d29f97036d4d4f4a32af88fb1df61733730c6c910328f2034" name="diffutils-lang" arch="noarch">
  <version epoch="0" ver="3.12" rel="160000.2.2"/>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: avoid false-positive
  error in gnulib tests 'test-perror2' and 'test-strerror_r',
  visible on armv7l.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- gnulib-c-stack.patch: c-stack: stop using SIGSTKSZ</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1628337600">- diffutils 3.8:
  * diff no longer treats a closed stdin as representing an absent
    file in usage like 'diff --new-file - foo &lt;&amp;-'
  * diff and related programs no longer get confused if stdin,
    stdout, or stderr are closed
  * cmp, diff and sdiff no longer treat negative command-line
    option-arguments as if they were large positive numbers
- drop gnulib-test-avoid-FP-perror-strerror.patch, upstream
- drop gnulib-c-stack.patch, equivalent change in c-stack
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="schwab@suse.de" date="1632139200">- Skip stack overflow tests under qemu emulation (bsc#1190046)</changelog>
  <changelog author="schwab@suse.de" date="1663156800">- Skip gnulib test test-free under qemu emulation (bsc#1202260)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673870400">- diffutils 3.9:
  * fixes for other platforms</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684756800">- diffutils 3.10:
  * cmp/diff can again work with file dates past Y2K38
  * diff -D no longer fails to output #ifndef lines</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1738756800">- diffutils 3.11:
  * quote file names more consistently in diagnostics
  * diff now outputs more information when symbolic links differ
  * diff's --ignore-case (-i) and --ignore-file-name-case options
    now support multi-byte characters
  * diff now supports multi-byte characters when treating white
    space
  * In options like --expand-tabs (-t), --ignore-space-change (-b)
    and --ignore-tab-expansion (-E), diff now recognizes non-ASCII
    space characters and counts columns for non-ASCII characters.
  * cmp -bl no longer omits "M-" from bytes with the high bit set
    in single-byte locales like en_US.iso8859-1
  * cmp -i N and -n N no longer fail merely because N is enormous.
  * cmp -s no longer mishandles /proc files
  * diff -E no longer mishandles some input lines containing '\a',
    '\b', '\f', '\r', '\v', or '\0'.
  * diff -ly no longer mishandles non-ASCII input.
  * diff - A/B now works correctly when standard input is a
    directory, by reading a file named B in that directory.
  * diff no longer suffers from race conditions in some cases when
    comparing files in a mutating file system</changelog>
  <changelog author="tonyj@suse.com" date="1743854400">- Fix failure (noticed in sdiff as fatal "realloc(): invalid next size")
  Original upstream report: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=77265
  New patch: diff-fix-allocation-typo-leading-to-crashes.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- diffutils 3.12:
  * diff -r no longer merely summarizes when comparing an empty
    regular file to a nonempty regular file.
  * diff -y no longer crashes when given nontrivial differences
- drop diff-fix-allocation-typo-leading-to-crashes.patch</changelog>
</package>
<package pkgid="e4d401c31dc44c6af0230a50f681e60f8dd5316b1e80fdd5e80ca2a9bb5f41743563612d6011f38d42537bcc2b49a823465bfb8c74ef8862a0981747798f0422" name="digikam" arch="x86_64">
  <version epoch="0" ver="8.7.0" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708948800">- Drop the KDE PIM build dependencies until digikam starts using Qt6</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1712059200">- Update to 8.3.0:
  https://www.digikam.org/news/2024-03-17-8.3.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1721822400">- Update to 8.4.0:
  https://www.digikam.org/news/2024-07-14-8.4.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1722427200">- Remove obsolete SSE CMake options remove QtAV build dependency,
  explicit libpulse dependency (QtAV removed in 8.3.0),
- Add libjxl build dependency, required for DNG.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731844800">- Update to 8.5.0
  https://www.digikam.org/news/2024-11-16-8.5.0_release_announcement/
- Use Qt 6 to build Digikam
- Drop patch, no longer needed:
  * 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Stop using the %suse_update_desktop_file macro</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742040000">- Update to 8.6.0
  https://www.digikam.org/news/2025-03-15-8.6.0_release_announcement/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743768000">- Add patch:
  * digikam-qt69.patch</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1746100800">- Add patch (to revert from upstream to fix builds on Leap 15.6):
  * digikam-pointer-casting.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 8.7.0
  https://www.digikam.org/news/2025-06-30-8.7.0_release_announcement/
- Drop patch, merged upstream:
  * digikam-qt69.patch</changelog>
</package>
<package pkgid="a0e12c4718a762133825f0f67c52a891a49a5ffa02b37ac85e18c2d4926ffef0738a212a7aec9823602a8cd840c1f55bac2de2428fb9a92536a3edbc51137963" name="digikam-devel" arch="x86_64">
  <version epoch="0" ver="8.7.0" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708948800">- Drop the KDE PIM build dependencies until digikam starts using Qt6</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1712059200">- Update to 8.3.0:
  https://www.digikam.org/news/2024-03-17-8.3.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1721822400">- Update to 8.4.0:
  https://www.digikam.org/news/2024-07-14-8.4.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1722427200">- Remove obsolete SSE CMake options remove QtAV build dependency,
  explicit libpulse dependency (QtAV removed in 8.3.0),
- Add libjxl build dependency, required for DNG.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731844800">- Update to 8.5.0
  https://www.digikam.org/news/2024-11-16-8.5.0_release_announcement/
- Use Qt 6 to build Digikam
- Drop patch, no longer needed:
  * 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Stop using the %suse_update_desktop_file macro</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742040000">- Update to 8.6.0
  https://www.digikam.org/news/2025-03-15-8.6.0_release_announcement/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743768000">- Add patch:
  * digikam-qt69.patch</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1746100800">- Add patch (to revert from upstream to fix builds on Leap 15.6):
  * digikam-pointer-casting.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 8.7.0
  https://www.digikam.org/news/2025-06-30-8.7.0_release_announcement/
- Drop patch, merged upstream:
  * digikam-qt69.patch</changelog>
</package>
<package pkgid="8d6a8d4adeb071654bbe5bec5c3acb1fc2bd1cec95720c609badc1a5ae862bf0f24c281e0a23b0990a1810bcdb3066ea9b9fbfd9b61c0e4ee0d27d38c2294e88" name="digikam-lang" arch="noarch">
  <version epoch="0" ver="8.7.0" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708948800">- Drop the KDE PIM build dependencies until digikam starts using Qt6</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1712059200">- Update to 8.3.0:
  https://www.digikam.org/news/2024-03-17-8.3.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1721822400">- Update to 8.4.0:
  https://www.digikam.org/news/2024-07-14-8.4.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1722427200">- Remove obsolete SSE CMake options remove QtAV build dependency,
  explicit libpulse dependency (QtAV removed in 8.3.0),
- Add libjxl build dependency, required for DNG.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731844800">- Update to 8.5.0
  https://www.digikam.org/news/2024-11-16-8.5.0_release_announcement/
- Use Qt 6 to build Digikam
- Drop patch, no longer needed:
  * 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Stop using the %suse_update_desktop_file macro</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742040000">- Update to 8.6.0
  https://www.digikam.org/news/2025-03-15-8.6.0_release_announcement/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743768000">- Add patch:
  * digikam-qt69.patch</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1746100800">- Add patch (to revert from upstream to fix builds on Leap 15.6):
  * digikam-pointer-casting.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 8.7.0
  https://www.digikam.org/news/2025-06-30-8.7.0_release_announcement/
- Drop patch, merged upstream:
  * digikam-qt69.patch</changelog>
</package>
<package pkgid="8ab78ad3abcc09639287bdaf8ceaa4918946845aa17a94fbfd2617f176ccaa9f97ea8be3041efd3e686f3a49e9ae381cdb0a11e1c35b7e6dcedcba7ef6cf60c5" name="digikam-plugins" arch="x86_64">
  <version epoch="0" ver="8.7.0" rel="bp160.1.3"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1708948800">- Drop the KDE PIM build dependencies until digikam starts using Qt6</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1712059200">- Update to 8.3.0:
  https://www.digikam.org/news/2024-03-17-8.3.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Jaime Marqu&#xED;nez Ferr&#xE1;ndiz &lt;jaime.marquinez.ferrandiz@fastmail.net&gt;" date="1721822400">- Update to 8.4.0:
  https://www.digikam.org/news/2024-07-14-8.4.0_release_announcement/
- Rebase 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1722427200">- Remove obsolete SSE CMake options remove QtAV build dependency,
  explicit libpulse dependency (QtAV removed in 8.3.0),
- Add libjxl build dependency, required for DNG.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1731844800">- Update to 8.5.0
  https://www.digikam.org/news/2024-11-16-8.5.0_release_announcement/
- Use Qt 6 to build Digikam
- Drop patch, no longer needed:
  * 0001-Look-for-each-akonadi-component-separately.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Stop using the %suse_update_desktop_file macro</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742040000">- Update to 8.6.0
  https://www.digikam.org/news/2025-03-15-8.6.0_release_announcement/</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743768000">- Add patch:
  * digikam-qt69.patch</changelog>
  <changelog author="Nico Kruber &lt;nico.kruber@gmail.com&gt;" date="1746100800">- Add patch (to revert from upstream to fix builds on Leap 15.6):
  * digikam-pointer-casting.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 8.7.0
  https://www.digikam.org/news/2025-06-30-8.7.0_release_announcement/
- Drop patch, merged upstream:
  * digikam-qt69.patch</changelog>
</package>
<package pkgid="708b649ed74a87de3d6ffe2a4704e89d42c067e0c460ec0a84a29332ec534a6c5a5f9b9a31b50196e7566fb336d3278a84102fa25790aa676fff531467e2063f" name="ding" arch="noarch">
  <version epoch="0" ver="1.9" rel="bp160.1.9"/>
  <changelog author="coolo@suse.de" date="1225195200">- remove quotes from GenericName</changelog>
  <changelog author="hvogel@suse.de" date="1249473600">- Update to verion 1.6
  - Catch more faulty inputs
  - Update of the dictionary</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Upodate to version 1.7
  * Copy to clipboard, not just primary selection (Unix)
  * Bugfixes, robustness increased
  * Enhanced English-German dictionary (270,000 entries)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="jengelh@inai.de" date="1418299200">- Update to new upstream release 1.8
  * New version of German-English translation file,
  now over 326,000 entries (up from 270,000).
  * Minor bug fixes.
- Split the dictionary file so as to not mandate installation of
  the Tk frontend.
- Downgrade ispell dictionary requirements into recommendations;
  ding works without them, too.
- Add missing ispell Recommends (just having the dictionaries does
  not help, the program is needed).
- Also recommend agrep, which the Tk frontend prefers for full
  functionality (approximate matching).
- Suggest fortune, because ding even supports searching that.
- Minor cleanups: use rpm macros in place of rpm shell vars.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Update to version 1.8.1:
  * New version of German-English translation file, now over 345,000 entries
  * Minor bug fixes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1488196801">- fix Source patch, spec-cleaned</changelog>
  <changelog author="Daniel Donisa &lt;daniel.donisa@suse.com&gt;" date="1620820800">- Update to 1.9
  * Enhanced English-German dictionary (380,000 entries)
  * Bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1663502400">- Add patch:
  * use-grep-instead-of-egrep.patch
    This prevents the egrep obsolescent warning message introduced
    with grep 3.8:
    "egrep: warning: egrep is obsolescent; using grep -E"
- Install man-page
- Use https instead of http/ftp for Source/URL</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="7a586f36f41d35689d6b1f6ff0fcf7347e603740ccbf763b3ade3e504a464f403b190e2aa2a28aea16e7cd6f282f256e7514ca07d1aabb36ff76f53e31e60107" name="ding-dict-de_en" arch="noarch">
  <version epoch="0" ver="1.9" rel="bp160.1.9"/>
  <changelog author="coolo@suse.de" date="1225195200">- remove quotes from GenericName</changelog>
  <changelog author="hvogel@suse.de" date="1249473600">- Update to verion 1.6
  - Catch more faulty inputs
  - Update of the dictionary</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Upodate to version 1.7
  * Copy to clipboard, not just primary selection (Unix)
  * Bugfixes, robustness increased
  * Enhanced English-German dictionary (270,000 entries)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="jengelh@inai.de" date="1418299200">- Update to new upstream release 1.8
  * New version of German-English translation file,
  now over 326,000 entries (up from 270,000).
  * Minor bug fixes.
- Split the dictionary file so as to not mandate installation of
  the Tk frontend.
- Downgrade ispell dictionary requirements into recommendations;
  ding works without them, too.
- Add missing ispell Recommends (just having the dictionaries does
  not help, the program is needed).
- Also recommend agrep, which the Tk frontend prefers for full
  functionality (approximate matching).
- Suggest fortune, because ding even supports searching that.
- Minor cleanups: use rpm macros in place of rpm shell vars.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Update to version 1.8.1:
  * New version of German-English translation file, now over 345,000 entries
  * Minor bug fixes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1488196801">- fix Source patch, spec-cleaned</changelog>
  <changelog author="Daniel Donisa &lt;daniel.donisa@suse.com&gt;" date="1620820800">- Update to 1.9
  * Enhanced English-German dictionary (380,000 entries)
  * Bugfixes</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1663502400">- Add patch:
  * use-grep-instead-of-egrep.patch
    This prevents the egrep obsolescent warning message introduced
    with grep 3.8:
    "egrep: warning: egrep is obsolescent; using grep -E"
- Install man-page
- Use https instead of http/ftp for Source/URL</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="f4028815515b6ceea76f70d5cb197934d0f198340aa3418e4644c0df7cfa9ebf7a5e2ab65bb947a346651109e65f9ae0b8eb9b1ef08990cecb3f1b32c9631a07" name="diod" arch="x86_64">
  <version epoch="0" ver="1.0.24+53.g0d87511" rel="bp160.1.13"/>
  <changelog author="9+suse@cirno.systems" date="1554033600">- Init version 1.0.24+53.g0d87511</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631534400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_diod.service.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="ac038f9b7c8a9f8349e9994f145087ea37428cee2179e99b9b5b09d042e1c6a84bc54064b7fe623866f6aa7460ced04f0b92b46c354a40ce6d7edac5ea2ff590" name="dirac" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
  <changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
  <changelog author="matz@suse.de" date="1386417600">- Don't buildrequire valgrind-devel anywhere, it's unused.</changelog>
  <changelog author="dmueller@suse.com" date="1428148800">- remove unneeded texlive-latex dependency</changelog>
  <changelog author="plinnell@opensuse.org" date="1428840000">- added existing baselibs.conf to fix build</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Add baselibs.conf as Source</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Cleanu pwith spec-cleaner
- Switch to upstream tarball instead of repacking
- Update dependencies to match reality
- Explicitely enable configuration switches
- Disable docu building as they are kinda empty unless we would
  add latex and dot</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Use gcc7 in SLE_12</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="7d8b74001c7a904e00730b9980d191e8da29a22cd90683c9860645bfaf9715efca108d2c26ab4babd173a25244f78cbcbc2f1e25a16d583beac3da5aecd64e5b" name="dirac-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
  <changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
  <changelog author="matz@suse.de" date="1386417600">- Don't buildrequire valgrind-devel anywhere, it's unused.</changelog>
  <changelog author="dmueller@suse.com" date="1428148800">- remove unneeded texlive-latex dependency</changelog>
  <changelog author="plinnell@opensuse.org" date="1428840000">- added existing baselibs.conf to fix build</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Add baselibs.conf as Source</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Cleanu pwith spec-cleaner
- Switch to upstream tarball instead of repacking
- Update dependencies to match reality
- Explicitely enable configuration switches
- Disable docu building as they are kinda empty unless we would
  add latex and dot</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Use gcc7 in SLE_12</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="36fb59aaeb24dc3aae829de79f269e4ba9e67ef8c5dce4ee68681e325876b67b82b605c5eb8a76647fa865eb35944600211b6f024ba762ff3050962de2b5bcd4" name="dirac-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="160000.2.2"/>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
  <changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
  <changelog author="matz@suse.de" date="1386417600">- Don't buildrequire valgrind-devel anywhere, it's unused.</changelog>
  <changelog author="dmueller@suse.com" date="1428148800">- remove unneeded texlive-latex dependency</changelog>
  <changelog author="plinnell@opensuse.org" date="1428840000">- added existing baselibs.conf to fix build</changelog>
  <changelog author="jkeil@suse.com" date="1432641600">- Add baselibs.conf as Source</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Cleanu pwith spec-cleaner
- Switch to upstream tarball instead of repacking
- Update dependencies to match reality
- Explicitely enable configuration switches
- Disable docu building as they are kinda empty unless we would
  add latex and dot</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Use gcc7 in SLE_12</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="746a2d7146114ae065d63199fe482f4e3c455b52ec42a57fa578081494853c98d17271e3406c13ef8eb64b8c6892c4858e0e4113bd4e5258f0d5a5ba26f9e98f" name="direnv" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="bp160.1.13"/>
  <changelog author="Julien Enselme &lt;jujens@jujens.eu&gt;" date="1603627200">- update to 2.23.1:
  * fix: handle links on Mac when using `allow` (#696)
  * fix: use restored env in exec (#695)
  * stdlib: add basename and dirname from realpath (#693)
  * stdlib.sh: remove tabs
  * dist: compile all the binaries statically
- incule changes from 2.23.0
  * stdlib: add source_url function (#562)
  * direnv: add fetchurl command (#686)
  * shell: Update Elvish hook to replace deprecated `explode` (#685)</changelog>
  <changelog author="Julien Enselme &lt;jujens@jujens.eu&gt;" date="1605960000">- update to 2.24.0
  * direnv_load: avoid leaking DIRENV_DUMP_FILE_PATH (#715)
  * Add strict_env and unstrict_env (#572)
  * stdlib: add use_vim to source local vimrc (#497)
  * stdlib: add source_env_if_exists (#714)
  * Wording (#713)
  * build(deps): bump actions/checkout from v2.3.3 to v2.3.4 (#709)
  * build(deps): bump cachix/install-nix-action from v11 to v12 (#710)
  * Fix XDG_CACHE_HOME path (#711)
  * rc: make file existence check more robust (#706)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1623153600">- Update to version 2.28.0
  * Update to go 1.16
  * tcsh: fix variable escaping
  * docs: improve the documentation
  * Fixed fish shell hook to work with eval
  * Fixed layout anaconda &lt;env_name_or_prefix&gt;
- Build with pie enabled if available
- Add _service for vendor package</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1651147200">- use https homepage
- spec-cleaner</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1651924800">- Update to version 2.31.0
  * Don't load .env files by default
  * Allow skipping .env autoload
  * stdlib: add `env_vars_required`
  * FIX: version: trim surrounding spaces
  * FIX: ignore .envrc and .env if they are not files
  * bump actions/setup-go from 2.1.4 to 2.1.5
- Update to version 2.30.0
  * Add automatic .env load
  * Resolve symlinks during direnv deny
  * stdlib: use_flake handle no layout dir (#861)
  * go mod update
- Update to version 2.29.0
  * stdlib: add use_flake function
  * Updated conditional for zsh hook to be more forgiving
  * Add -r flag for matching Git branches with a regexp
  * Enable syntax hilights to the quick demo code
  * Fixed extra quotes for lower alpha characters
  * Remove noisy warning about PS1 again</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1669291200">- Update to version 2.32.1
  * Support custom VIRTUAL_ENV for layout_python
  * Add gha shell for GitHub Actions
  * allow conda environment names to be detected from environment.yml
  * source_up_if_exists: A strict_env compatible version of source_up
  * Expand ~/ in whitelist paths
  * Add "block" and "revoke" as aliases of the "deny" command
  * Add "permit" and "grant" as aliases of the "allow" command</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670414400">- update to 2.32.2:
  * doc: Add stdlib's layout_pyenv to docs
  * doc: Fix broken link
  * doc: Minor typo fix
  * doc: `$XDG_CONFIG_HOME/direnv/direnv.toml` =&gt; add (typically
    ~/.config/direnv/direnv.toml)
  * doc: add quickenv to Related projects
  * feat: Update layout anaconda to accept a path to a yml file
  * feat: install.sh: can specify direnv version
  * fix: elvish: replace deprecated `except` with `catch`
  * fix: installer.sh: make direnv executable for all
  * fix: path escaping
  * fix: stdlib: only use ANSI escape on TTY
  * fix: test: remove mentions of DIRENV_MTIME
  * fix: test: use lowercase -d flag for base64 decoding of DIRENV_DIFF</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1687780800">- update to 2.32.3:
  * fix: stat the already open rc file rather than another path based one on it (#1044)
  * fix: remove deprecated io/ioutil uses (#1042)
  * fix: spelling fixes (#1041)
  * fix: appease Go 1.19 gofmt (#1040)
  * fix: stdlib: use_guix: Switch to guix shell. (#1045)
  * fix: pass BASH_PATH to make, matches the nixpkgs derivation (#1006)
  * fix: stdlib/layout_python: exclude patchlevel from $python_version (#1033)
  * fix: incorrect escape sequences during Loads under git-bash (Windows) (#1085)
  * fix: skip some tests for IBM Z mainframe's z/OS operating system (#1094)
  * doc: add Windows installation with winget (#1096)
  * doc: link 12factor webpage for more clarity (#1095)
  * website: add Plausible analytics</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1706443200">- update to 2.33.0:
  * fixes and updates to documentation
  * feat: direnv status --json
  * feat: add PowerShell Support
  * feat: add mergify configuration
  * feat: add support for armv7l platform in install.sh
  * feat: add watch print command
  * feat: alias direnv disallow to deny
  * feat: stdlib: create CACHEDIR.TAG inside .direnv
  * fix: allowPath for LoadedRC
  * fix: don't prompt to allow if user explicitly denied
  * fix: man/direnv-stdlib: fix obsolete opam-env example
  * fix: print correct path in source_env log message
  * fix: quote tcsh $PATH, to avoid failure on whitespace
  * fix: remove redundant nil check in CommandsDispatch
  * fix: update nixpkgs and shellcheck</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1712836800">- update to 2.34.0:
  * doc: README.md, man pages: it's typos (#1230)
  * doc: add shell setup instructions for oh-my-zsh (#1070)
  * doc: added fetchurl manpage link to README.md
  * doc: document XDG_DATA_HOME (#1185)
  * doc: update installation.md for Gentoo (#1206)
  * feat: add Murex support (#1242)
  * feat: added systemd shell for export (#1126)
  * feat: allow to disable warn timeouts (#1209)
  * feat: hide env diff (#1223, #1234)
  * feat: made 'direnv export' non private (#1229)
  * fix: use_julia should not set LD_LIBRARY_PATH (#900)
  * fix: add missing deps for release in go.mod
  * fix: avoid use of regex in bash hook output (#1043)
  * fix: direnv.toml.1.md: add examples for $HOME expansion
  * fix: stdlib: use_flake: don't keep old generations around (#1089)
  * fix: stdlib: use_node: strip leading v from version (#1071)
  * fix: support Bash 5.1 array PROMPT_COMMAND (#1208)
  * fix: update stdlib.sh to avoid deprecation warning (#1221)
  * fix: update zsh syntax in internal/cmd/shell_zsh.go (#1075)
- compress vendor tarball with zst</changelog>
</package>
<package pkgid="f67582b2b070049281e816ea978558e272a7fd5c187ee398d4399f5fa177dcbc2ca54a84ca9bc08e1d3f9c59b869e469e5cb8b788da6ddfe1835799a445aee19" name="direvent" arch="x86_64">
  <version epoch="0" ver="5.4" rel="bp160.1.12"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564747200">- direvent 5.2, initial package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Use noun phrase in summary.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1640865600">- direvent 5.3:
  * Introduce compound events
  * New configuration statement for manipulating the environment
  * Variable expansion in arguments to some configuration statements
  * Rewrite the recursive watching support
  * Change interface for bulk closing of file descriptors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1720353600">- direvent 5.4:
  * Support simultaneous execution limits
  * Restore the nowait default
  * Fix bug in generic to system event translation
  * Fix sentinel code</changelog>
</package>
<package pkgid="dee2ae8c51ffe994ab889ad22eab0446ec37f85e24e3a9825c6ab298c89e2b22cef4d5013e41be2f3a2034c8438e39825ead5ef0ff8b441ceebe1eee0dba70fc" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="160000.2.2"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 2.5.1:
  * gpg: The support for composite Kyber+ECC public key algorithms
    does now use the final FIPS-203 and LibrePGP specifications. The
    experimental keys from 2.5.0 are no longer supported. [T6815]
  * gpg: New commands --add-recipients and --change-recipients. [T1825]
  * gpg: New option --proc-all-sigs. [T7261]
  * gpg: Fix a regression in 2.5.0 in gpgme's tests. [T7195]
  * gpg: Make --no-literal work again for -c and --store. [T5852]
  * gpg: Improve detection of input data read errors. [T6528]
  * gpg: Fix getting key by IPGP record (rfc-4398). [T7288]
  * gpgsm: New option --assert-signer. [T7286]
  * gpgsm: More improvements to PKCS#12 parsing to cope with latest
    IVBB changes. [T7213]
  * agent: Fix KEYTOCARD command when used with a loopback pinentry. [T7283]
  * gpg-mail-tube: Make sure GNUPGHOME is set in vsd mode.  New option
  - -as-attach. [rG4511997e9e1b]
  * Now uses the process spawn API from libgpg-error. [T7192,T7194]
  * Removed the --enable-gpg-is-gpg2 configure time option.
    [rG2125f228d36c]
  * Rebase patches:
  - gnupg-add_legacy_FIPS_mode_option.patch
  - gnupg-revert-rfc4880bis.patch
  - gnupg-nobetasuffix.patch</changelog>
  <changelog author="adrian@suse.de" date="1733400000">- Disable ibmswtpm2 on LoongArch64</changelog>
  <changelog author="lucas.mulling@suse.com" date="1733918400">- Update to 2.5.2:
  * gpg: Add option 16 to --full-gen-key to create ECC+Kyber.  [T6638]
  * gpg: For composite algos add the algo string to the colons
    listings.  [T6638]
  * gpg: Validate the trustdb after the import of a trusted key.
    [T7200]
  * gpg: Exclude expired trusted keys from the key validation process.
    [T7200]
  * gpg: Fix a wrong decryption failed status for signed and OCB
    encrypted messages without a signature verification key.  [T7042]
  * gpg: Retain binary representation for import-&gt;export with Ed25519
    key signatures.  [T7426]
  * gpg: Fix comparing ed448 to ed25519 with --assert-pubkey-algo.
    [T7425]
  * gpg: Avoid a failure exit code for expired ultimately trusted
    keys.  [T7351]
  * gpg: Emit status error for an invalid ADSK.  [T7322]
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.  [T6882]
  * gpg: Fix --quick-set-expire for V5 subkey fingerprints.  [T7298]
  * gpg: Robust error handling for SCD READKEY.  [T7309]
  * gpg: Fix cv25519 v5 export regression.  [T7316]
  * gpgsm: Nearly fourfold speedup of validated certificate listings.
    [T7308]
  * gpgsm: Improvement for some rare P12 files.  [rGf50dde6269]
  * gpgsm: Terminate key listing on output write error.  [T6185]
  * agent: Add option --status to the LISTRUSTED command.
    [rG4275d5fa7a]
  * agent: Fix detection of the yet unused trustflag de-vs.  [T5079]
  * agent: Allow ssh to sign data larger than the Assuan line length.
    [T7436]
  * keyboxd: Fix a race condition on the database handle.  [T7294]
  * dirmngr: A list of used URLs for loaded CRLs is printed first in
    the output of the LISTCRL command.  [T7337]
  * scd: More mitigations against lock ups with multiple cards or
    apps.  [T7323, T7402]
  * gpgtar: Use log-file from common.conf only in --batch mode.
    [rGb389e04ef5]
  * gpgtar: Fix directory creation during extraction.  [T7380]
  * gpg-mail-tube: Minor fixes.
  * gpgconf: Add list flag to trusted-key et al.  [T7313]
  * Implement GNUPG_ASSUME_COMPLIANCE envvar and registry key for
    testing de-vs compliance mode.  [rGb287fb5775,rG7b0be541a9]
  * Fix a race condition in creating the socket directory.  [T7332]</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1736164800">- note updated 2.5.x build dependencies</changelog>
  <changelog author="lucas.mulling@suse.com" date="1736856000">- Update to 2.5.3
  * gpg: Allow for signature subpackets of up to 30000 octets.
    [rG36dbca3e69]
  * gpg: Silence expired trusted-key diagnostics in quiet mode.  [T7351]
  * gpg: Allow smaller session keys with Kyber and enforce the use of
    AES-256 if useful.  [T7472]
  * gpg: Fix regression in key generation from existing card key.
    [T7309,T7457]
  * gpg: Print a warning if the card backup key could not be written.
    [T2169]
  * The --supervised options of gpg-agent and dirmngr have been
    renamed to --deprecated-supervised as preparation for their removal.
    [rGa019a0fcd8]
  * There is no more default for a keyserver.</changelog>
  <changelog author="pmonreal@suse.com" date="1739966400">- Update to 2.5.4:
  * gpg: New option --disable-pqc-encryption. [rG00c31f8b04]
  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given. [T7506]
  * gpg: Fix handling with no CRC armor. [T7071]
  * gpg: New private Kyber keys are now cross-referenced using a new
    Link attribute. [T6638]
  * gpg: Fix an import problem with keys having another primary key as
    a subkey. [T7527]
  * gpgsm: Allow unattended PKCS#12 export without passphrase. [rG159e801043]
  * gpgsm: Allow CSR generation with an unprotected key. [rG89055f24f4]
  * agent: New option --change-std-env-name. [T7522]
  * agent: Fix ssh-agent's request_identities for skipped Brainpool
    keys. [rG2469dc5aae]
  * Do not package zlib and bzip2 object files in a speedo release build. [T7442]
  * Rebase patches:
  - gnupg-add_legacy_FIPS_mode_option.patch
  - gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  - gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="adrian@suse.de" date="1740571200">- Fixing gpg-agent integration by changing --supervised to
  - -deprecated-supervised in service files.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1741348800">- Update to 2.5.5: [bsc#1236931, bsc#1239119]
  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]
  * dirmngr: Fix possible hangs due to blocking connection requests.
    [T6606, T7434]
  Release-info: https://dev.gnupg.org/T7530</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750161600">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix another regression due to the T7547 fix.
  * The fix for CVE-2025-30258 was introduced in 2.5.5
  * Add gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch</changelog>
</package>
<package pkgid="234dd28de11eefb0a02e4d8856bf8ec4f3ab5a962c0a89aa3e0c0cbad2b94f97194471ac78819da9961ceaa0336ec5e6ec436c40a9c9f194719862f4076fe6aa" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="160000.3.1"/>
  <changelog author="lucas.mulling@suse.com" date="1736856000">- Update to 2.5.3
  * gpg: Allow for signature subpackets of up to 30000 octets.
    [rG36dbca3e69]
  * gpg: Silence expired trusted-key diagnostics in quiet mode.  [T7351]
  * gpg: Allow smaller session keys with Kyber and enforce the use of
    AES-256 if useful.  [T7472]
  * gpg: Fix regression in key generation from existing card key.
    [T7309,T7457]
  * gpg: Print a warning if the card backup key could not be written.
    [T2169]
  * The --supervised options of gpg-agent and dirmngr have been
    renamed to --deprecated-supervised as preparation for their removal.
    [rGa019a0fcd8]
  * There is no more default for a keyserver.</changelog>
  <changelog author="pmonreal@suse.com" date="1739966400">- Update to 2.5.4:
  * gpg: New option --disable-pqc-encryption. [rG00c31f8b04]
  * gpg: Fix --quick-add-key for Weierstrass ECC with usage given. [T7506]
  * gpg: Fix handling with no CRC armor. [T7071]
  * gpg: New private Kyber keys are now cross-referenced using a new
    Link attribute. [T6638]
  * gpg: Fix an import problem with keys having another primary key as
    a subkey. [T7527]
  * gpgsm: Allow unattended PKCS#12 export without passphrase. [rG159e801043]
  * gpgsm: Allow CSR generation with an unprotected key. [rG89055f24f4]
  * agent: New option --change-std-env-name. [T7522]
  * agent: Fix ssh-agent's request_identities for skipped Brainpool
    keys. [rG2469dc5aae]
  * Do not package zlib and bzip2 object files in a speedo release build. [T7442]
  * Rebase patches:
  - gnupg-add_legacy_FIPS_mode_option.patch
  - gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  - gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="adrian@suse.de" date="1740571200">- Fixing gpg-agent integration by changing --supervised to
  - -deprecated-supervised in service files.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1741348800">- Update to 2.5.5: [bsc#1236931, bsc#1239119]
  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]
  * dirmngr: Fix possible hangs due to blocking connection requests.
    [T6606, T7434]
  Release-info: https://dev.gnupg.org/T7530</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750161600">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix another regression due to the T7547 fix.
  * The fix for CVE-2025-30258 was introduced in 2.5.5
  * Add gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873601">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
</package>
<package pkgid="7d480dfd961136510ba836314d2a1b62900ea8cad7c8b1b11e993562ed38edd6be2fc232b0dd56e7d233f1ddec165e098362164572b3dc7a68ef9815e19be735" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="160000.4.1"/>
  <changelog author="adrian@suse.de" date="1740571200">- Fixing gpg-agent integration by changing --supervised to
  - -deprecated-supervised in service files.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1741348800">- Update to 2.5.5: [bsc#1236931, bsc#1239119]
  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]
  * dirmngr: Fix possible hangs due to blocking connection requests.
    [T6606, T7434]
  Release-info: https://dev.gnupg.org/T7530</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750161600">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix another regression due to the T7547 fix.
  * The fix for CVE-2025-30258 was introduced in 2.5.5
  * Add gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873601">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix [bsc#1256389] (gpg.fail/filename)
  * Added gnupg-accepts-path-separators-literal-data.patch
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix
  * [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch
  * [bsc#1257395, CVE-2026-24883]
  - gpg2: denial of service due to long signature packet length causing parse_signature to return success with sig-&gt;data[] set to a NULL value
  - Added gnupg-CVE-2026-24883.patch</changelog>
</package>
<package pkgid="2d425fdb34c9a1ad342d7f47e7a0b0cc7405b46e6cdcfd9bcc6afb6b76902dbbeb0cf42c37be9f20bae1faac654dac8ec82e5f87bae86d4382ac6ac9f286c4ac" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="160000.5.1"/>
  <changelog author="lucas.mulling@suse.com" date="1741348800">- Update to 2.5.5: [bsc#1236931, bsc#1239119]
  * gpg: Fix a verification DoS due to a malicious subkey in the
    keyring.  [T7527]
  * dirmngr: Fix possible hangs due to blocking connection requests.
    [T6606, T7434]
  Release-info: https://dev.gnupg.org/T7530</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750161600">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix another regression due to the T7547 fix.
  * The fix for CVE-2025-30258 was introduced in 2.5.5
  * Add gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873601">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix [bsc#1256389] (gpg.fail/filename)
  * Added gnupg-accepts-path-separators-literal-data.patch
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix
  * [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch
  * [bsc#1257395, CVE-2026-24883]
  - gpg2: denial of service due to long signature packet length causing parse_signature to return success with sig-&gt;data[] set to a NULL value
  - Added gnupg-CVE-2026-24883.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Fix Y2K38 FTBFS:
  * gpg2 quick-key-manipulation test FTBFS-2038 (bsc#1251214)
  * Upstream issue: dev.gnupg.org/T8096
  * Add gnupg-gpgscm-New-operator-long-time-t-to-detect-proper-tim.patch</changelog>
</package>
<package pkgid="81d62c57f8cdbc565e46e995e4a73b79e36f800b9c065eb7ebe9b8230d53c9169de2740c192bd5039e69aca730892ae0d87234b2342c904e3c04155b46211474" name="dirvish" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="bp160.1.9"/>
  <changelog author="Robert Marcano &lt;robert@marcanoonline.com&gt;" date="1159185600">- 1.2.1
- Initial package release</changelog>
  <changelog author="Robert Marcano &lt;robert@marcanoonline.com&gt;" date="1160049600">- Fix License field
- Add license text
- Removed perl from BuildRequires</changelog>
  <changelog author="dmacvicar@suse.de" date="1192104000">- Adapt to openSUSE and put into build service</changelog>
  <changelog author="opendeve@weberhofer.at" date="1302004800">- dirvish-expire-vanished.patch: Added a patch that makes vaults having
  "vanished files" expireable</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1423742400">- dirvish-1.2.1-install.patch: converts the installer to work in unattended mode
- dirvish-expire-vanished.patch: Allows expiration of vanished backups
- dirvish-imsort-reserved-warning.patch: Fix for future reserved word warning
- dirvish-rsync-options.patch: Fix typo in docs about rsync-options which was
  deprecated
- dirvish-locate.patch: Get patch level of loadconfig.pl in case exit codes
  are needed.
- dirvish-lock-vault-against-overlapping-runs.patch: Lock vault against
  overlapping runs</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1423742401">- Added example for /etc/dirvish/master.conf</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680000">- Updated to latest upstream source package which fixed a small issue in
  manpage for dirvish.conf.5 and corrected the version-number returned by
  the dirvvish-commands and --version</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680001">- Removed requirement for specific perl-version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="4e50976c3f3c8defcd2a83137f1800b0572f0fcaa1da29c6545da25848df25e0dabe8afd03fd130581822c74531ca226de0ec522f6d30ddcc26a3b6d342e521a" name="discord-rpc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="bp160.1.13"/>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1581163200">- Initial package for version 3.4.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655812800">- Add 0001-Add-some-library-versioning.patch to further SLPP
  compliance.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1674043200">- Don't recommend discord, just suggest it. We don't want it installed
  just because some game or other application uses the rpc lib,
  especially because it's also not FOSS.</changelog>
</package>
<package pkgid="63067fd74ed0c540058d75adb58c54fb674800cf0ea7c68fa81467c942b72cb6dfd46a33bf17b51761c86f2cad39042f6e93b7fd2235ef4c6d8d036cf13bade0" name="discount" arch="x86_64">
  <version epoch="0" ver="3.0.0a" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1476619200">- Update to version 2.2.1:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1486641600">- Update to version 2.2.2:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Provide virtual package markdown</changelog>
  <changelog author="mpluskal@suse.com" date="1529928000">- Update to version 2.2.3a:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1539777600">- Update to version 2.2.4:
  * No changelog provided
  * fixes:
    + boo#1094809 CVE-2018-11468 heap-based buffer over-read __mkd_trim_line function in mkdio.c
    + boo#1098252 CVE-2018-12495 heap-based buffer over-read via a crafted file</changelog>
  <changelog author="mpluskal@suse.com" date="1546862400">- Update changelog with references to security issues fixed</changelog>
  <changelog author="mpluskal@suse.com" date="1611662400">- Update to version 2.2.6:
  * No changelog provided
- Drop no longer needed discount-fix-compile-warings.diff</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to version 2.2.7:
  * fix small buffer overflow</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- update to 2.2.7b:
  * fix to makefiles for parallel build</changelog>
  <changelog author="andrea.manzini@suse.com" date="1679572800">- update to 3.0.0a:
  * add a new testcase to verify that -&gt; ... &lt;- works properly
  * have all of the extensions code guarded by checking against MKD_STRICT
  * rework the tag handler
- enabled test suite during build</changelog>
</package>
<package pkgid="a3907ce126a47e28332e73a0d6e2f872af84df27158c509e171d6d57682f0603c1e09e81a141e05902062da0aef58e9e1b791097372245835edd75234a72aed5" name="discover6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release
  * updatemodel: collate names (kde#499638)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release
  * Fix nonfree app license name colors
  * Clear the transactions job together with the SNI
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release
  * Disable effect when software renderer is used
  * kns: Ensure we deactivate the updater when the backend gets invalidated (kde#500513)
  * Sort offline update items case-insensitively (kde#500661)
  * flatpak: do not mark eol runtimes for uninstall
  * UpdatesPage: Fix update chagelog when opening details (kde#500776)
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * PackageKit: Fix connection for update details (kde#434936)
  * notifier: cover in qDebugs
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release
  * ApplicationsListPage: fix "Still Looking" indicator (kde#485379)
  * ApplicationPage: fix offline update header text at narrow window widths (kde#502835)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * rpm-ostree: Don't try to parse an empty version (kde#496538)
  * rpm-ostree: Fix rpm-ostree driver registration (kde#480947)
  * systemd: do not return resource when filtering for an unsuitable state
  * systemd: do not return resource when the search doesn't match
  * steamos,systemd: do not return resources on appstream searches
  * discover/qml: improve UpdatesPage accessibility
  * ApplicationPage: allow offline update header to take up enough space (kde#504513)
  * KNSBackend: Do not accept global searches</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * FlatpakTransactionThread: Copy job to new ref after rebase (kde#505245)
  * Fix use-after-free when closing Discover (kde#466619)
  * rpm-ostree: Fix updates count reporting (kde#504821)
  * rpm-ostree: Convert some info logs to debug
  * rpm-ostree: Add debugging logs for update driver registration
  * rpm-ostree: Use QLoggingCategory for logging
  * rpm-ostree: Remove unused set(CMAKE_MODULE_PATH)
  * rpm-ostree: Cleanup unused variable warning
  * rpmostree: Remove unused attribute
  * rpmostree: don't notify a state change if the state remains the same</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1
  * discover: include Remove button in tab chain (kde#505544)
  * ApplicationPage: fix uncentered app icon/name in stacked mode
  * Cleanup list of missing backends
  * ApplicationsListPage: give listview default focus (kde#505551)
  * UpdatesPage: Improve text display semantics
  * SearchField: trim all whitespace from search text (kde#505538)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * sourcespage: fix delegate referencing the wrong `name` (kde#505700)</changelog>
</package>
<package pkgid="70791d86fa73b09656feda76349706701a2de35777804acd79c471ed57d5da6b7049c30688840896f94293e26cc08be5f03c4009f1d8fc9f571a6e20d8d44f4a" name="discover6-backend-flatpak" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release
  * updatemodel: collate names (kde#499638)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release
  * Fix nonfree app license name colors
  * Clear the transactions job together with the SNI
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release
  * Disable effect when software renderer is used
  * kns: Ensure we deactivate the updater when the backend gets invalidated (kde#500513)
  * Sort offline update items case-insensitively (kde#500661)
  * flatpak: do not mark eol runtimes for uninstall
  * UpdatesPage: Fix update chagelog when opening details (kde#500776)
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * PackageKit: Fix connection for update details (kde#434936)
  * notifier: cover in qDebugs
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release
  * ApplicationsListPage: fix "Still Looking" indicator (kde#485379)
  * ApplicationPage: fix offline update header text at narrow window widths (kde#502835)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * rpm-ostree: Don't try to parse an empty version (kde#496538)
  * rpm-ostree: Fix rpm-ostree driver registration (kde#480947)
  * systemd: do not return resource when filtering for an unsuitable state
  * systemd: do not return resource when the search doesn't match
  * steamos,systemd: do not return resources on appstream searches
  * discover/qml: improve UpdatesPage accessibility
  * ApplicationPage: allow offline update header to take up enough space (kde#504513)
  * KNSBackend: Do not accept global searches</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * FlatpakTransactionThread: Copy job to new ref after rebase (kde#505245)
  * Fix use-after-free when closing Discover (kde#466619)
  * rpm-ostree: Fix updates count reporting (kde#504821)
  * rpm-ostree: Convert some info logs to debug
  * rpm-ostree: Add debugging logs for update driver registration
  * rpm-ostree: Use QLoggingCategory for logging
  * rpm-ostree: Remove unused set(CMAKE_MODULE_PATH)
  * rpm-ostree: Cleanup unused variable warning
  * rpmostree: Remove unused attribute
  * rpmostree: don't notify a state change if the state remains the same</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1
  * discover: include Remove button in tab chain (kde#505544)
  * ApplicationPage: fix uncentered app icon/name in stacked mode
  * Cleanup list of missing backends
  * ApplicationsListPage: give listview default focus (kde#505551)
  * UpdatesPage: Improve text display semantics
  * SearchField: trim all whitespace from search text (kde#505538)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * sourcespage: fix delegate referencing the wrong `name` (kde#505700)</changelog>
</package>
<package pkgid="e86cffe2cedb4c5510f0e032e1aad7abd324b4ac2a0d53b941703e2546d842e6906d2ed5468f6a0f886d943ea88670bcbb9f962f6d27ea44343f0d757f52ca30" name="discover6-backend-fwupd" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release
  * updatemodel: collate names (kde#499638)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release
  * Fix nonfree app license name colors
  * Clear the transactions job together with the SNI
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release
  * Disable effect when software renderer is used
  * kns: Ensure we deactivate the updater when the backend gets invalidated (kde#500513)
  * Sort offline update items case-insensitively (kde#500661)
  * flatpak: do not mark eol runtimes for uninstall
  * UpdatesPage: Fix update chagelog when opening details (kde#500776)
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * PackageKit: Fix connection for update details (kde#434936)
  * notifier: cover in qDebugs
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release
  * ApplicationsListPage: fix "Still Looking" indicator (kde#485379)
  * ApplicationPage: fix offline update header text at narrow window widths (kde#502835)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * rpm-ostree: Don't try to parse an empty version (kde#496538)
  * rpm-ostree: Fix rpm-ostree driver registration (kde#480947)
  * systemd: do not return resource when filtering for an unsuitable state
  * systemd: do not return resource when the search doesn't match
  * steamos,systemd: do not return resources on appstream searches
  * discover/qml: improve UpdatesPage accessibility
  * ApplicationPage: allow offline update header to take up enough space (kde#504513)
  * KNSBackend: Do not accept global searches</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * FlatpakTransactionThread: Copy job to new ref after rebase (kde#505245)
  * Fix use-after-free when closing Discover (kde#466619)
  * rpm-ostree: Fix updates count reporting (kde#504821)
  * rpm-ostree: Convert some info logs to debug
  * rpm-ostree: Add debugging logs for update driver registration
  * rpm-ostree: Use QLoggingCategory for logging
  * rpm-ostree: Remove unused set(CMAKE_MODULE_PATH)
  * rpm-ostree: Cleanup unused variable warning
  * rpmostree: Remove unused attribute
  * rpmostree: don't notify a state change if the state remains the same</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1
  * discover: include Remove button in tab chain (kde#505544)
  * ApplicationPage: fix uncentered app icon/name in stacked mode
  * Cleanup list of missing backends
  * ApplicationsListPage: give listview default focus (kde#505551)
  * UpdatesPage: Improve text display semantics
  * SearchField: trim all whitespace from search text (kde#505538)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * sourcespage: fix delegate referencing the wrong `name` (kde#505700)</changelog>
</package>
<package pkgid="4ca16cb6632e423f2a078f1888b7915a2c01f02d96dfb0d72081cf675c7d75239048d3a07c1e61199beb48211e4aa0d9d7f8cdfad46e2cca160ac7d51df65dda" name="discover6-backend-packagekit" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release
  * updatemodel: collate names (kde#499638)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release
  * Fix nonfree app license name colors
  * Clear the transactions job together with the SNI
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release
  * Disable effect when software renderer is used
  * kns: Ensure we deactivate the updater when the backend gets invalidated (kde#500513)
  * Sort offline update items case-insensitively (kde#500661)
  * flatpak: do not mark eol runtimes for uninstall
  * UpdatesPage: Fix update chagelog when opening details (kde#500776)
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * PackageKit: Fix connection for update details (kde#434936)
  * notifier: cover in qDebugs
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release
  * ApplicationsListPage: fix "Still Looking" indicator (kde#485379)
  * ApplicationPage: fix offline update header text at narrow window widths (kde#502835)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * rpm-ostree: Don't try to parse an empty version (kde#496538)
  * rpm-ostree: Fix rpm-ostree driver registration (kde#480947)
  * systemd: do not return resource when filtering for an unsuitable state
  * systemd: do not return resource when the search doesn't match
  * steamos,systemd: do not return resources on appstream searches
  * discover/qml: improve UpdatesPage accessibility
  * ApplicationPage: allow offline update header to take up enough space (kde#504513)
  * KNSBackend: Do not accept global searches</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * FlatpakTransactionThread: Copy job to new ref after rebase (kde#505245)
  * Fix use-after-free when closing Discover (kde#466619)
  * rpm-ostree: Fix updates count reporting (kde#504821)
  * rpm-ostree: Convert some info logs to debug
  * rpm-ostree: Add debugging logs for update driver registration
  * rpm-ostree: Use QLoggingCategory for logging
  * rpm-ostree: Remove unused set(CMAKE_MODULE_PATH)
  * rpm-ostree: Cleanup unused variable warning
  * rpmostree: Remove unused attribute
  * rpmostree: don't notify a state change if the state remains the same</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1
  * discover: include Remove button in tab chain (kde#505544)
  * ApplicationPage: fix uncentered app icon/name in stacked mode
  * Cleanup list of missing backends
  * ApplicationsListPage: give listview default focus (kde#505551)
  * UpdatesPage: Improve text display semantics
  * SearchField: trim all whitespace from search text (kde#505538)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * sourcespage: fix delegate referencing the wrong `name` (kde#505700)</changelog>
</package>
<package pkgid="17b416926bb13362550b5b15e97ebc4f23d453fa457d14eb1048a40d630219e6342c4982cff53ea2eae87e65eb6ef9eef679d09156ad5da6b698273d355defab" name="discover6-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release
  * updatemodel: collate names (kde#499638)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release
  * Fix nonfree app license name colors
  * Clear the transactions job together with the SNI
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release
  * Disable effect when software renderer is used
  * kns: Ensure we deactivate the updater when the backend gets invalidated (kde#500513)
  * Sort offline update items case-insensitively (kde#500661)
  * flatpak: do not mark eol runtimes for uninstall
  * UpdatesPage: Fix update chagelog when opening details (kde#500776)
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * PackageKit: Fix connection for update details (kde#434936)
  * notifier: cover in qDebugs
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release
  * ApplicationsListPage: fix "Still Looking" indicator (kde#485379)
  * ApplicationPage: fix offline update header text at narrow window widths (kde#502835)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * rpm-ostree: Don't try to parse an empty version (kde#496538)
  * rpm-ostree: Fix rpm-ostree driver registration (kde#480947)
  * systemd: do not return resource when filtering for an unsuitable state
  * systemd: do not return resource when the search doesn't match
  * steamos,systemd: do not return resources on appstream searches
  * discover/qml: improve UpdatesPage accessibility
  * ApplicationPage: allow offline update header to take up enough space (kde#504513)
  * KNSBackend: Do not accept global searches</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * FlatpakTransactionThread: Copy job to new ref after rebase (kde#505245)
  * Fix use-after-free when closing Discover (kde#466619)
  * rpm-ostree: Fix updates count reporting (kde#504821)
  * rpm-ostree: Convert some info logs to debug
  * rpm-ostree: Add debugging logs for update driver registration
  * rpm-ostree: Use QLoggingCategory for logging
  * rpm-ostree: Remove unused set(CMAKE_MODULE_PATH)
  * rpm-ostree: Cleanup unused variable warning
  * rpmostree: Remove unused attribute
  * rpmostree: don't notify a state change if the state remains the same</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1
  * discover: include Remove button in tab chain (kde#505544)
  * ApplicationPage: fix uncentered app icon/name in stacked mode
  * Cleanup list of missing backends
  * ApplicationsListPage: give listview default focus (kde#505551)
  * UpdatesPage: Improve text display semantics
  * SearchField: trim all whitespace from search text (kde#505538)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * sourcespage: fix delegate referencing the wrong `name` (kde#505700)</changelog>
</package>
<package pkgid="625cdbdbb36360e8628b5a797c880e44b91dc9c54704b103fc7c6d846b242c1a732e753b0dbd636649b5a8bfefe863337a4042249d8681b38a8a8e8d27725d12" name="discover6-notifier" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * update version for new release
  * updatemodel: collate names (kde#499638)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release
  * Fix nonfree app license name colors
  * Clear the transactions job together with the SNI
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release
  * Disable effect when software renderer is used
  * kns: Ensure we deactivate the updater when the backend gets invalidated (kde#500513)
  * Sort offline update items case-insensitively (kde#500661)
  * flatpak: do not mark eol runtimes for uninstall
  * UpdatesPage: Fix update chagelog when opening details (kde#500776)
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * PackageKit: Fix connection for update details (kde#434936)
  * notifier: cover in qDebugs
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release
  * ApplicationsListPage: fix "Still Looking" indicator (kde#485379)
  * ApplicationPage: fix offline update header text at narrow window widths (kde#502835)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * rpm-ostree: Don't try to parse an empty version (kde#496538)
  * rpm-ostree: Fix rpm-ostree driver registration (kde#480947)
  * systemd: do not return resource when filtering for an unsuitable state
  * systemd: do not return resource when the search doesn't match
  * steamos,systemd: do not return resources on appstream searches
  * discover/qml: improve UpdatesPage accessibility
  * ApplicationPage: allow offline update header to take up enough space (kde#504513)
  * KNSBackend: Do not accept global searches</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * FlatpakTransactionThread: Copy job to new ref after rebase (kde#505245)
  * Fix use-after-free when closing Discover (kde#466619)
  * rpm-ostree: Fix updates count reporting (kde#504821)
  * rpm-ostree: Convert some info logs to debug
  * rpm-ostree: Add debugging logs for update driver registration
  * rpm-ostree: Use QLoggingCategory for logging
  * rpm-ostree: Remove unused set(CMAKE_MODULE_PATH)
  * rpm-ostree: Cleanup unused variable warning
  * rpmostree: Remove unused attribute
  * rpmostree: don't notify a state change if the state remains the same</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1
  * discover: include Remove button in tab chain (kde#505544)
  * ApplicationPage: fix uncentered app icon/name in stacked mode
  * Cleanup list of missing backends
  * ApplicationsListPage: give listview default focus (kde#505551)
  * UpdatesPage: Improve text display semantics
  * SearchField: trim all whitespace from search text (kde#505538)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * sourcespage: fix delegate referencing the wrong `name` (kde#505700)</changelog>
</package>
<package pkgid="d82dd7c17953544d55ff39d9859ca660f88ba92f4a1906bca1764949031bb182830e59750e044be341ec153428d9aac9367deb0d7504d83b6259a7a098ac6129" name="disk-encryption-tool" arch="noarch">
  <version epoch="0" ver="1+git20250505.aa666d1" rel="160000.2.2"/>
  <changelog author="aplanas@suse.com" date="1724328000">- Update to version 1+git20240821.f98edd6:
  * CI: Pass -cpu host to QEMU
  * Fix CI
  * Add basic automated testing
  * Remove cat of issue file</changelog>
  <changelog author="aplanas@suse.com" date="1724760000">- Update to version 1+git20240826.c956112:
  * CI: Also provide an ignition config</changelog>
  <changelog author="aplanas@suse.com" date="1728561600">- Update to version 1+git20241008.826cb75:
  * Revert "Add systemd-repart-dracut.service"
  * CI: workaround for bug#1230912
  * Add systemd-repart-dracut.service</changelog>
  <changelog author="aplanas@suse.com" date="1730980800">- Update to version 1+git20241107.5a2eef7:
  * Clean the enrollment key
  * Set crypttab options
  * Use sdbootutil to enroll recovery key
  * use $tmpdir/mnt instead of /mnt as it's not there in the intird
  * Fix variable name
  * Reload disk partitions after resize
  * Make only rootfs ro
  * Remove SLE15 compatibility
  * Remove GRUB2 configuration
  * Remove image encryption support
  * Remove prime support
  * Encrypt multiple disks
  * CI: Use OVMF image with included variable store
  * Revert "CI: workaround for bug#1230912"</changelog>
  <changelog author="aplanas@suse.com" date="1730980801">- Update to version 1+git20241107.fc90da6:
  * Clean enrollment key also in the jeos module</changelog>
  <changelog author="aplanas@suse.com" date="1731412800">- Update to version 1+git20241112.f83dfa0:
  * Move enrollment to sdbootutil</changelog>
  <changelog author="aplanas@suse.com" date="1733486400">- Update to version 1+git20241129.1c9848e:
  * Support swap partititons
  * Drop x-initrd.mount tag in crypttab
  * Increase the key timeout to 1h</changelog>
  <changelog author="aplanas@suse.com" date="1742817600">- Update to version 1+git20241213.2504619:
  * Do not mark swap as x-initrd.attach
  * Check root_options to skip cr_root encryption</changelog>
  <changelog author="aplanas@suse.com" date="1745496000">- Update to version 1+git20250424.b1779d6:
  * Drop keyctl timeout</changelog>
  <changelog author="aplanas@suse.com" date="1746446400">- Update to version 1+git20250505.aa666d1:
  * Build only for Intel and arm (bsc#1242256)</changelog>
</package>
<package pkgid="8a9b61d9f17479b68540562f1886768fb9669383adc3938098ce1476d938863753a07de5fdba1b469c8f992a43d44c36c6db6a5a960836d864af38a2bde338f1" name="disk-encryption-tool" arch="noarch">
  <version epoch="0" ver="1+git20260304.d12960d" rel="160000.1.1"/>
  <changelog author="aplanas@suse.com" date="1731412800">- Update to version 1+git20241112.f83dfa0:
  * Move enrollment to sdbootutil</changelog>
  <changelog author="aplanas@suse.com" date="1733486400">- Update to version 1+git20241129.1c9848e:
  * Support swap partititons
  * Drop x-initrd.mount tag in crypttab
  * Increase the key timeout to 1h</changelog>
  <changelog author="aplanas@suse.com" date="1742817600">- Update to version 1+git20241213.2504619:
  * Do not mark swap as x-initrd.attach
  * Check root_options to skip cr_root encryption</changelog>
  <changelog author="aplanas@suse.com" date="1745496000">- Update to version 1+git20250424.b1779d6:
  * Drop keyctl timeout</changelog>
  <changelog author="aplanas@suse.com" date="1746446400">- Update to version 1+git20250505.aa666d1:
  * Build only for Intel and arm (bsc#1242256)</changelog>
  <changelog author="aplanas@suse.com" date="1750852800">- Update to version 1+git20250625.f0b909a:
  * cr_etc (and cr_var) can be mounted in initrd</changelog>
  <changelog author="aplanas@suse.com" date="1753876800">- Update to version 1+git20250729.d86f79f:
  * Build also for riscv64</changelog>
  <changelog author="aplanas@suse.com" date="1768996800">- Update to version 1+git20260121.010c05a:
  * Remove x-growpart.grow flag for encrypted devices
  * Requires combustion for firstboot.target
  * Drop x-initrd.attach for cr_etc and cr_var</changelog>
  <changelog author="aplanas@suse.com" date="1769688000">- Update to version 1+git20260129.f7df08c:
  * Fix comment typo</changelog>
  <changelog author="aplanas@suse.com" date="1772625600">- Update to version 1+git20260304.d12960d:
  * Use UUID= in crypttab</changelog>
</package>
<package pkgid="b64302b2c90cccb43b1c62a23bd05423236328580c483a286949d63355260ba477df10b67ee90de97dc6701b49d81d7dafb4525cf8a74136ce837463a8886dfb" name="diskmonitor" arch="x86_64">
  <version epoch="0" ver="0.3.4" rel="bp160.1.16"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1451563200">- Use cmake() for kf5 and qt5 BuildRequires.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1478347200">- Fix file list (add appdata.xml file) for Leap 42.2 and
  openSUSE &gt; 13.2. Added Source URL.</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 0.3.2.
  * Fix compilation problem with KLocalizedString
- Drop diskmonitor-underlinking.patch (fixed upstream)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1558958400">- Update to 0.3.3.
  No changelog available</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1597579200">- Update to 0.3.4
  * Include Slovenian translation
  * Document package installation
  * Various fixes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1611057600">- Replace diskmonitor-installdirs.patch with
  0001-Install-the-application-icon-in-the-right-directory.patch
- Drop diskmonitor-desktop.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626609600">- Fix the %files section. plasma-framework &gt;= 5.84 doesn't install
  desktop files in %_kf5_servicesdir anymore.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1639483200">- Fix installation with plasma-framework 5.89.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Stop using the %suse_update_desktop_file macro</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Add patch:
  * diskmonitor-cmake4.patch</changelog>
</package>
<package pkgid="78c30a660413617330d9ad5b503f0c0bab9f50ead7820929853425da43eecfadb3bcdecc9a900d577b53b5eb6ddd970d561f6683e1da66d6a13c22b30c22382c" name="diskmonitor-lang" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="bp160.1.16"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1451563200">- Use cmake() for kf5 and qt5 BuildRequires.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1478347200">- Fix file list (add appdata.xml file) for Leap 42.2 and
  openSUSE &gt; 13.2. Added Source URL.</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 0.3.2.
  * Fix compilation problem with KLocalizedString
- Drop diskmonitor-underlinking.patch (fixed upstream)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1558958400">- Update to 0.3.3.
  No changelog available</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1597579200">- Update to 0.3.4
  * Include Slovenian translation
  * Document package installation
  * Various fixes</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1611057600">- Replace diskmonitor-installdirs.patch with
  0001-Install-the-application-icon-in-the-right-directory.patch
- Drop diskmonitor-desktop.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1626609600">- Fix the %files section. plasma-framework &gt;= 5.84 doesn't install
  desktop files in %_kf5_servicesdir anymore.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1639483200">- Fix installation with plasma-framework 5.89.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1732104000">- Stop using the %suse_update_desktop_file macro</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743508800">- Add patch:
  * diskmonitor-cmake4.patch</changelog>
</package>
<package pkgid="66321005247b5abcef7e9d604b85f4ce69785f6d3689118d5e9fa244baa81a6b5e02704b26f9f582452ca7e835f86ed6fc29c5cd237a26ca1b7c461d2761d047" name="diskscan" arch="x86_64">
  <version epoch="0" ver="0.21" rel="bp160.1.6"/>
  <changelog author="dap.darkness@gmail.com" date="1386504000">- Initial build.</changelog>
  <changelog author="mpluskal@suse.com" date="1431259200">- Update to 0.15
  * no upstream changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 0.18
  * Switched to CMake as the build system, it is more common than
  ninja-build and so more useful for those who build by hand
  (sysadmins).
  * Fix build issues on FreeBSD.
  * Fix disk on 4k granularity to avoid overwriting areas that are
  usable, this is useful on media errors.</changelog>
  <changelog author="mpluskal@suse.com" date="1448539200">- Update to 0.19
  * When a partition is write mounted do not attempt to fix it as
    it will mess the filesystem.
  * Also fix building on Debian/kFreeBSD.</changelog>
  <changelog author="mpluskal@suse.com" date="1471521600">- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Adjust to latest cmake macros</changelog>
  <changelog author="mpluskal@suse.com" date="1503921600">- Update to version 0.20:
  * Misc internal changes
  * Update libscsicmd</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update dependencies
- Modernize spec file using spec-cleaner</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Fixed SPEC file: Replaced broken URL with current upstream</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1710763200">- Update to version 0.21:
  * Fix Gitter badge URL by @jwilk in #69
  * Remove spurious backslash from manpage by @jwilk in #68
  * Fix JSON output validity
  * Add supported devices info to README</changelog>
</package>
<package pkgid="f21728fbef8a700311452c40cb03c5dfe1e4f2bcb659af67d4764586763ecf295611d8fa317406eba50be17b5e7c98059a2e1f89f4062913aacd6997ddd8e496" name="disorderfs" arch="x86_64">
  <version epoch="0" ver="0.5.11" rel="bp160.1.11"/>
  <changelog author="bwiedemann@suse.com" date="1499083200">- Initial package version 0.5.1</changelog>
  <changelog author="bwiedemann@suse.com" date="1499342400">- fix build for Leap 42.1</changelog>
  <changelog author="bwiedemann@suse.com" date="1499688000">- Use nicer upstream tarball and verify signature</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.5.2
  * Add -q, --quiet options to avoid printing to stdout.
- cleanup with spec-cleaner</changelog>
  <changelog author="Bernhard M. Wiedemann &lt;bwiedemann@suse.com&gt;" date="1537099200">- Update to 0.5.3
  * Ensure readdir(2) returns consistent (and unique) inode numbers.
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898287
- Add xattr.patch to fix build with attr-2.4.48</changelog>
  <changelog author="bwiedemann@suse.com" date="1540468800">- Update to 0.5.5
  * Allow tar and touch -m to update mtime of files
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911281
  * Drop upstream xattr.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 0.5.10:
  * Use "directory entries" over "dirents" in human-readable output/log messages.
  * Don't attempt to drop groups in multi-user mode when we are not root
  * Ignore the return values to fsyncdir to ensure (for example) dpkg(1) can "flush" /var/lib/dpkg
  * Move test execution logic into Makefile to not require a separate script</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- update to 0.5.11:
  * Improve tests.
  * Add RPM spec file
  * Makefile: allow to prepend flags in CXXFLAGS.</changelog>
</package>
<package pkgid="9d182cfd6fe2664554500636e5b33d982baccb855139d91368a274bc9c8685ce2af022e65ee5c5be52153045c07e2d527748053a4fbcb504036bf7f95171f4fd" name="displaymanager-sysconfig" arch="x86_64">
  <version epoch="0" ver="1.1.17" rel="160000.2.2"/>
  <changelog author="sndirsch@suse.com" date="1711281600">- Update to release 1.1.15
  * This release fixes a failure to build with the upcoming gcc 14,
    cleans up several other compiler warnings, fixes a bug in the
    generation of the xdm.service file for systemd, and removes a
    lot of dead code checks for platforms &amp; features that have not
    been supported since the conversion from Imake to autoconf in
    2005.
-  supersedes u_gcc14-fix.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- Update to release 1.1.16
  * This release fixes a failure to build with the recent libXaw 1.0.16
    release due to a change introduced in xdm 1.1.15 to address gcc 14
    build issues.</changelog>
  <changelog author="kukuk@suse.com" date="1723204800">- sysconfig/windowmanager is deprecated since 7 years, don't
  read it if it does not exist.</changelog>
  <changelog author="pgajdos@suse.com" date="1732104000">- tweak the login screen:
  * use sans serif font
  * use branding wallpaper and colors
  * do not require xli, recommend feh</changelog>
  <changelog author="dimstar@opensuse.org" date="1732708800">- Split out displaymanager-sycconfig package: The central
  configuration part that is used by all display managers. This is
  needed in order to progress towards 'xdm' not acting as wrapper
  around DMs, but only be used as Dislplay Manager when XDM is
  supposed to be used, or use the real systemd services of the
  various DMs (e.g gdm.service, sddm.service).</changelog>
  <changelog author="dimstar@opensuse.org" date="1740571200">- display-manager: Do not abort when there is no /usr/bin/X found.
  Rely on the DM to know how to handle it. E.g gdm could be
  spawning a wayland-only session. (boo#1237777)</changelog>
  <changelog author="jengelh@inai.de" date="1740830400">- Make build recipe compatible with POSIX sh.</changelog>
  <changelog author="sndirsch@suse.com" date="1741521600">- Update to release 1.1.17
  Support for using getaddrinfo(), inet_ntop(), and struct sockaddr_storage
  was originally added to support IPv6, and only used if IPv6 support was
  enabled. Two decades later, these interfaces are ubiquitous and OS'es have
  starting marking the old interfaces as deprecated, so this release changes
  to use the modern interface whenever we can now.  (Note that code included
  from xtrans will only use these interfaces when IPv6 is disabled if building
  against xtrans 1.6.0 or later.)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1742904000">- Move display-manager.service to display-manager-legacy.service
  to prepare for systemd control of display manager choice
  (needs systemd-presets-common-SUSE update)
- Create xdm.service to allow XDM to be used in systemd only mode
- Order systemd-presets-common-SUSE before xdm</changelog>
  <changelog author="sndirsch@suse.com" date="1749038400">- no longer require xinit so it can be dropped from SLE16</changelog>
</package>
<package pkgid="edc4b09076c2e431c3615d9e7d376f5070ab803547661d94970b3af78b63e9f07bde3fccc8290952bc1a62d9d804c9a7536c82f45f4cd366206c30df76608a49" name="disruptor" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Initial packaging of disruptor 3.3.6</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1639137600">- Update to 3.4.4:
  * 3.4.4 Lazy-loading of Logger instances - See #370 &amp; #376
  * 3.4.3 Add Automatic-Module-Name to MANIFEST.MF
  * 3.4.2 Fix race condition in BatchEventProcessor with 3 or more
    starting/halting concurrently.
  * 3.4.1 Fix race between run() and halt() on BatchEventProcessor.
  * 3.4.0 Drop support for JDK6, support JDK7 and above only.
    Add ThreadHints.onSpinWait to all busy spins within Disruptor.
    Increase default sleep time for LockSupport.parkNanos to
    prevent busy spinning.
  * 3.3.8 Revert belt and braces WaitStrategy signalling.
  * 3.3.7 Add batch size to BatchStartAware.onBatchStart()
    Upgrade to newer versions of gradle, checkstyle and JUnit
    Deprecate classes &amp; methods for later release
    Remove JMock and rewrite tests accordingly
- Remove disruptor-3.3.2-jmock.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="77a5e12c99ea0b607d372bd1eb429dcd8e85306ae905eecce7684d0208fd7311d0bb6f2a568324db2edc1f89c3016d4c28b4290d8c86517bc03040dede65d61c" name="disruptor-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="bp160.1.9"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Initial packaging of disruptor 3.3.6</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1639137600">- Update to 3.4.4:
  * 3.4.4 Lazy-loading of Logger instances - See #370 &amp; #376
  * 3.4.3 Add Automatic-Module-Name to MANIFEST.MF
  * 3.4.2 Fix race condition in BatchEventProcessor with 3 or more
    starting/halting concurrently.
  * 3.4.1 Fix race between run() and halt() on BatchEventProcessor.
  * 3.4.0 Drop support for JDK6, support JDK7 and above only.
    Add ThreadHints.onSpinWait to all busy spins within Disruptor.
    Increase default sleep time for LockSupport.parkNanos to
    prevent busy spinning.
  * 3.3.8 Revert belt and braces WaitStrategy signalling.
  * 3.3.7 Add batch size to BatchStartAware.onBatchStart()
    Upgrade to newer versions of gradle, checkstyle and JUnit
    Deprecate classes &amp; methods for later release
    Remove JMock and rewrite tests accordingly
- Remove disruptor-3.3.2-jmock.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694260800">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
</package>
<package pkgid="ee62219a30d8ac70670cfb2ae639debea42342b32dc93f6e44ee32b9a8138f3aabe68e46f141575ee3dc50a57f063858fdc95de72099b19cfa426daefdb64272" name="distcc" arch="x86_64">
  <version epoch="0" ver="3.4" rel="bp160.1.10"/>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1569240000">- Update to 3.3.3 bsc#1151594:
  * small fixes, such as fixing the build on some non-Linux systems
  * Fixes a regression where ssh mode did not work in most circumstances. Bug #291
- Rebase patch distcc-3.2_rc1-freedesktop.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1591617600">- add gcc-10-no-common.patch:
  * Fixes link with gcc 10, upstream (https://github.com/distcc/distcc/pull/373)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614513600">- update to 3.3.5:
  * Fix build on OSX
  * Fix build when using optional features AND those optional libraries decided
    to build against libsystemd (not sure which one, but it doesn't matter).
  * Python 3.8 compatibility issues
  * drop distcc-3.2_rc1-freedesktop.patch distcc-3.2_rc1-gssapi.patch: obsolete
  * drop gcc-10-no-common.patch: upstream</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620820800">- update to 3.4:
  * distccmon-gnome ported from gtk2 to gtk3
  * Remove debug lag in spawning new threads. (better multi-core performance)
  * Bug fixes.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631534400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * distccd.service</changelog>
  <changelog author="Neil Brown &lt;nfbrown@suse.com&gt;" date="1633521600">- Remove dependency on libgssglue.  It is no longer needed
  (bsc#1191068)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1652356800">- fix fdupes call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659960000">- remove python2 dependency</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741608000">- Add patch use-setuptools-instead.patch:
  * Use setuptools rather than distutils inside include_server.</changelog>
</package>
<package pkgid="a4061147971d37bac8094c7b69fc8720cfd7be1985cb25f4aeae0f4818ef86bea04ff9472e543e1a6607b0852c1c3ab56233a6b5323e7f37b7b621fad96e2214" name="distcc-gui" arch="x86_64">
  <version epoch="0" ver="3.4" rel="bp160.1.10"/>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1569240000">- Update to 3.3.3 bsc#1151594:
  * small fixes, such as fixing the build on some non-Linux systems
  * Fixes a regression where ssh mode did not work in most circumstances. Bug #291
- Rebase patch distcc-3.2_rc1-freedesktop.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1591617600">- add gcc-10-no-common.patch:
  * Fixes link with gcc 10, upstream (https://github.com/distcc/distcc/pull/373)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614513600">- update to 3.3.5:
  * Fix build on OSX
  * Fix build when using optional features AND those optional libraries decided
    to build against libsystemd (not sure which one, but it doesn't matter).
  * Python 3.8 compatibility issues
  * drop distcc-3.2_rc1-freedesktop.patch distcc-3.2_rc1-gssapi.patch: obsolete
  * drop gcc-10-no-common.patch: upstream</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620820800">- update to 3.4:
  * distccmon-gnome ported from gtk2 to gtk3
  * Remove debug lag in spawning new threads. (better multi-core performance)
  * Bug fixes.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631534400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * distccd.service</changelog>
  <changelog author="Neil Brown &lt;nfbrown@suse.com&gt;" date="1633521600">- Remove dependency on libgssglue.  It is no longer needed
  (bsc#1191068)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1652356800">- fix fdupes call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659960000">- remove python2 dependency</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741608000">- Add patch use-setuptools-instead.patch:
  * Use setuptools rather than distutils inside include_server.</changelog>
</package>
<package pkgid="9495e7e2a93d1bc82657bdb709deb8ed4e05c2db6cec581ecb6a6fd2300d9a7ac8da3a2321f3ba819ca8f8052898a1987d66bd8c53bd975dcc2305ca88caba8d" name="distcc-server" arch="x86_64">
  <version epoch="0" ver="3.4" rel="bp160.1.10"/>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1569240000">- Update to 3.3.3 bsc#1151594:
  * small fixes, such as fixing the build on some non-Linux systems
  * Fixes a regression where ssh mode did not work in most circumstances. Bug #291
- Rebase patch distcc-3.2_rc1-freedesktop.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1591617600">- add gcc-10-no-common.patch:
  * Fixes link with gcc 10, upstream (https://github.com/distcc/distcc/pull/373)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614513600">- update to 3.3.5:
  * Fix build on OSX
  * Fix build when using optional features AND those optional libraries decided
    to build against libsystemd (not sure which one, but it doesn't matter).
  * Python 3.8 compatibility issues
  * drop distcc-3.2_rc1-freedesktop.patch distcc-3.2_rc1-gssapi.patch: obsolete
  * drop gcc-10-no-common.patch: upstream</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1620820800">- update to 3.4:
  * distccmon-gnome ported from gtk2 to gtk3
  * Remove debug lag in spawning new threads. (better multi-core performance)
  * Bug fixes.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631534400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * distccd.service</changelog>
  <changelog author="Neil Brown &lt;nfbrown@suse.com&gt;" date="1633521600">- Remove dependency on libgssglue.  It is no longer needed
  (bsc#1191068)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1652356800">- fix fdupes call</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1659960000">- remove python2 dependency</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1741608000">- Add patch use-setuptools-instead.patch:
  * Use setuptools rather than distutils inside include_server.</changelog>
</package>
<package pkgid="e5cf5ccf59b51f07303e75edeae47b1c8f34f2ed5dcdbaf3a9e3d3d1898528b1f0351d4561e4258ed4cd8e8df91e6ab78bf11fb0f438493857aa1e1e5d526fbb" name="distribution-gpg-keys" arch="noarch">
  <version epoch="0" ver="1.113" rel="bp160.1.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1590062400">- Version 1.38
  + Add Fedora GPG keys for Fedora 33
  + Add symlinks for CentOS 8 GPG keys
  + Add various vendor repository GPG keys</changelog>
  <changelog author="Nicolas FORMICHELLA &lt;stigpro@outlook.fr&gt;" date="1634904000">- Update to v1.58
  - [1.39]
    + Add Rosa Linux and Intel keys
  - [1.40]
    + Add EuroLinux keys
    + Add Datto's third party repository keys
  - [1.41]
    + Add QubesOS and Fedora 34 keys
  - [1.42]
    + Add RPMFusion 33 keys
  - [1.43]
  - [1.44]
    + Add Oracle Linux, Fedora ELN and Zoom keys
    + Update symlinks
  - [1.45]
    + Update symlinks
  - [1.46]
  - [1.47]
    + Add Remi 2021 key
  - [1.48]
    + Add Fedora 35 keys
  - [1.49]
    + Add Mariadb and Alma Linux keys
    + Update symlinks
  - [1.50]
  - [1.51]
    + Add Intel new key
    + Add Fedora 36 key
    + Add missing CentOS keys
  - [1.52-1.53]
  - [1.54]
    + Add SUSE keys
    + Add OpenSUSE
  - [1.55]
    + Add Rocky Linux keys
  - [1.56-1.57]
  - [1.58]
    + Add RPMFusion 36 keys
    + Update symlinks</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648036800">- Update to v1.67
  + Add EPEL9 key
  + Add keys of RPM Fusion Fedora 37
  + Add Navy Linux RPM GPG official key
  + add new MySQL key
  + add Fedora 37
  + Add symlink for CentOS Stream 9 to main official key
  + Add EuroLinux 9 key
  + move Fedora Rawhide key to F37
  + Add remi 2022 key
  + Refresh all CentOS SIG keys (rh#2059424)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1653393600">- Update to v1.71
  + Refresh AlmaLinux keys to add AlmaLinux 9 key
  + Add RHEL9 keys
  + Add RPM Fusion keys for Fedora 38
  + Add RPM Fusion keys for EL 9</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1671019200">- Update to v1.79
  + Fix Fedora 39 key
  + Add openEuler GPG key
  + Add Oracle Linux 9 key
  + Add Fedora 10 key
  + Add f37 to releasers
  + Add Fedora 38 and 39 keys
  + Add Amazon Linux 2022 GPG key
  + Add Anolis OS GPG keys
  + Remove F34 from releasers
  + Add Circle Linux GPG keys
  + Add Rocky Linux 9 keys and refresh 8</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1686571200">- Update to v1.88
  + Update copr keys
  + Add per distro/version link to proper key for remi
  + Update brave keys
  + Add Docker key
  + Add mullvad key
- Changes from v1.87
  + Update copr keys
  + Update virtualbox key
  + Update openSUSE-Backports key
  + Update skype key
- Changes from v1.86
  + Update copr keys
  + Add Jenkins 2023
  + Add keys for Bacula &amp; Baculum
  + Add keys for Google Cloud
  + Add VeraCrypt keys
  + Add Element keys
- Changes from v1.85
  + Update copr keys
  + Add Amazon Linux 2023 and remove Amazon Linux 2022 key
  + Add AnyDesk GPG key
- Changes from v1.84
  + Add tumbleweed key
  + Add RPM Fusion keys for Fedora 39
  + Update copr keys
  + Add elastic gpg key
- Changes from v1.82
  + Move symlink of fedora-rawhide to fedora-39
  + Add openEuler new key
  + Update copr keys
  + Add fedora 40 gpg key
- Changes from v1.81
  + Update copr keys
  + Add remi 2023 key
  + Add TeamViewer key
- Changes from v1.80
  + Add SME Server keys
  + Update copr keys</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 1.102:
  * update copr keys
  * Create cathugger.asc
  * Create zzz.key.asc
  * Create idk.key.asc
  * Create hulahoop.asc
  * Create adrelanos.asc
  * Create makemkv_pub.txt
  * add F42 key and move rawhide link
  * update copr keys
  * update postgresql keys
  * Add Qubes OS 4.2 release key
  * Split AlmaLinux OS 8 GPG public keys to fix microdnf
  * Update AlmaLinux OS 8 public key
  * Add openSUSE Backports 2023 key
  * Update Amazon Linux 2023 public key
  * add script to check all keys
  * remove expired jenkins key
  * update expired intel security key
  * update expired navy linux key
  * update expired bluejeans key
  * add script to check expiration
  * Add the key for pkgs.k8s.io (Kubernetes)
  * Restructure openSUSE GPG keys
  * Add SUSE ALP signing keys
  * Add SLE 2023 signing keys
  * add symlinkg to rpmfusion 40 and 41
  * update copr keys
  * add remi fedora 39 link to 2023 key
  * update Google key
  * add Fedora 41 key
  * Add source URL for AL2023
  * update copr keys
  * Update expired RPM-GPG-KEY-Mageia key
  * Add keys for Azure Linux</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1724328000">- Update to 1.105
  + Add fedora 43 keys and change rawhide symlink
  + Refresh GPG keys for Dell
  + Add RPM-GPG-KEY-CentOS-Official-SHA256
  + Add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys
  + Add CentOS 10 and EPEL 10 GPG keys
  + add Alpine Linux and postmarketOS keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1748001600">- update to 1.111
  + add link for remi/EL-10 key
  + update copr keys
  + Update Mageia gpg key
  + Add Fedora 44 key
  + add Remi 2025 key
  + alma: Add AlmaLinux 10 key
  + Update keys for Azure Linux and Kylin
  + fedora: Update rawhide symlink
  + Navy Linux GPG key Update
  + Add symlinks to rpmfusion 42 and 43
  + Add keys for el-10 rpmfusion-free and nonfree
  + Add RHEL 10 keys
  + Add OpenWrt keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1752926400">- update to 1.113:
  + Add Rocky Linux 10 keys
  + Add FreeBSD keys
  + Fix AlmaLinux name and alphabetical ordering of distros
  + Add AlmaLinux EPEL AltArch Key</changelog>
</package>
<package pkgid="8251bf56800cf072d8abd5a99f3677bb66e1dbdb15c2f2a16e10748e2828f2d958b63d668d2c7a280e4bf1f924688a3b1fe8240f781d4e6fdf4c2b98aa8c1cbc" name="distribution-logos-openSUSE" arch="noarch">
  <version epoch="0" ver="20240424" rel="lp160.3.1"/>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1622980800">- Add icons package to handle systemd branding better</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1645185600">- Fix the obsoleted and provided versions of the old systemd logo branding package</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Initial Leap Micro 5.2 branding</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1695297600">- Add Aeon branding</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1706788800">- Update Leap 15.6 branding poo#131666</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706788801">- list the source url</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1707393600">- switch to a service using zstd</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708948800">- Add handling for Leap Micro 6.X and Leap 16.X</changelog>
  <changelog author="lubos.kocman@suse.com" date="1712232000">- Update to version 20240404:
  * Turn apple-touch-icon into round square ones
  * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW
  * Delete dist/package directory
  * fix source mismatch with package name</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1713960000">- Update to version 20240424:
  * Aeon: Make light versions actually light</changelog>
</package>
<package pkgid="ce817e2d156727e2088ed0ec36ec485289a24b7112ba0de1721bd01ce798f934e77e7cc2a58ba1d316e16b1919716f89180fe46fa57ebdbd0a8dbb12dd36cb69" name="distribution-logos-openSUSE-Leap" arch="noarch">
  <version epoch="0" ver="20240424" rel="lp160.3.1"/>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1622980800">- Add icons package to handle systemd branding better</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1645185600">- Fix the obsoleted and provided versions of the old systemd logo branding package</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Initial Leap Micro 5.2 branding</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1695297600">- Add Aeon branding</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1706788800">- Update Leap 15.6 branding poo#131666</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706788801">- list the source url</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1707393600">- switch to a service using zstd</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708948800">- Add handling for Leap Micro 6.X and Leap 16.X</changelog>
  <changelog author="lubos.kocman@suse.com" date="1712232000">- Update to version 20240404:
  * Turn apple-touch-icon into round square ones
  * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW
  * Delete dist/package directory
  * fix source mismatch with package name</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1713960000">- Update to version 20240424:
  * Aeon: Make light versions actually light</changelog>
</package>
<package pkgid="4eca745d713e974578dfead628794390c7e2a38ccbc07b63829eb402446042194d9cc0a32c025399968502efe03f006d99599d1b0e9c327e2b7db242c530faa8" name="distribution-logos-openSUSE-LeapMicro" arch="noarch">
  <version epoch="0" ver="20240424" rel="lp160.3.1"/>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1622980800">- Add icons package to handle systemd branding better</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1645185600">- Fix the obsoleted and provided versions of the old systemd logo branding package</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Initial Leap Micro 5.2 branding</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1695297600">- Add Aeon branding</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1706788800">- Update Leap 15.6 branding poo#131666</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706788801">- list the source url</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1707393600">- switch to a service using zstd</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708948800">- Add handling for Leap Micro 6.X and Leap 16.X</changelog>
  <changelog author="lubos.kocman@suse.com" date="1712232000">- Update to version 20240404:
  * Turn apple-touch-icon into round square ones
  * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW
  * Delete dist/package directory
  * fix source mismatch with package name</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1713960000">- Update to version 20240424:
  * Aeon: Make light versions actually light</changelog>
</package>
<package pkgid="d0a3e26952250de844bb46c7d779b2709df89a59d11a81143bc51a06864b04baeab128808287c5dedf2db8a299834e65112ae4bdf348829ad35fe9c9524f4ca2" name="distribution-logos-openSUSE-icons" arch="noarch">
  <version epoch="0" ver="20240424" rel="lp160.3.1"/>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1622980800">- Add icons package to handle systemd branding better</changelog>
  <changelog author="Sasi Olin &lt;hel@lcp.world&gt;" date="1645185600">- Fix the obsoleted and provided versions of the old systemd logo branding package</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1647950400">- Initial Leap Micro 5.2 branding</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1695297600">- Add Aeon branding</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1706788800">- Update Leap 15.6 branding poo#131666</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1706788801">- list the source url</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1707393600">- switch to a service using zstd</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1708948800">- Add handling for Leap Micro 6.X and Leap 16.X</changelog>
  <changelog author="lubos.kocman@suse.com" date="1712232000">- Update to version 20240404:
  * Turn apple-touch-icon into round square ones
  * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW
  * Delete dist/package directory
  * fix source mismatch with package name</changelog>
  <changelog author="Jacob Michalskie &lt;hel@lcp.world&gt;" date="1713960000">- Update to version 20240424:
  * Aeon: Make light versions actually light</changelog>
</package>
<package pkgid="aa2c7265f0427d111005e5475c9ba9b55725887751deb1f70684cdc6de42fd6060bf623ac1731e24c813723c1fefb04c635f83b7ff71ef13932fd249439a3589" name="distribution-registry" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="160000.2.2"/>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="dmueller@suse.com" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="dmueller@suse.com" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
</package>
<package pkgid="6a9eee35b2b1f02135f5a9c0cf1eb94ddf2d942d4a9d6bd72ff78b5617e4d0bb721dca83fd3b735f5a46eae8b2e6311059856156199d7d591a6ee6d4d9bcb7d1" name="distribution-registry" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="160000.1.1"/>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="dmueller@suse.com" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="dmueller@suse.com" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="dmueller@suse.com" date="1770120000">- restore directory ownership after last change</changelog>
  <changelog author="dmueller@suse.com" date="1777291200">- Update to version 3.1.0:
  * chore(ci): Prep for v3.1 release
  * fix(vendor): fix broke vendpor validation
  * Opt: refactor tag list pagination support
  * build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
  * fix redis repo-scoped blob descriptor revocation
  * build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0
  * proxy: bind bearer realms to upstream trust boundary</changelog>
  <changelog author="dmueller@suse.com" date="1777291201">- update to 3.1.0 (
    bsc#1262096, CVE-2026-35172,
    bsc#1261793, CVE-2026-33540,
    bsc#1260283, CVE-2026-33186,
    bsc#1262951, CVE-2026-34986,
    bsc#1259718):
  * Fixes CVE-2026-35172
  * Fixes CVE-2026-33540
  * Adds support for tag pagination
  * Fixes default credentials in Azure storage provider
  * Drops support for go1.23 and go1.24 and updates to go1.25
  * See the full changelog below for the full list of changes.
  * docs: Update to refer to new image tag v3
  * Fix default_credentials in azure storage provider
  * chore: make function comment match function name
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in
    the go_modules group across 1 directory
  * fix: implement JWK thumbprint for Ed25519 public keys
  * fix: Annotate code block from validation.indexes
    configuration docs
  * feat: extract redis config to separate struct
  * Fix: resolve issue #4478 by using a temporary file for non-
    append writes
  * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
  * docs: Add note about `OTEL_TRACES_EXPORTER`
  * fix: set OTEL traces to disabled by default
  * Fix markdown syntax for OTEL traces link in docs
  * Switch UUIDs to UUIDv7
  * refactor: replace map iteration with maps.Copy/Clone
  * s3-aws: fix build for 386
  * docs: Add OpenTelemetry links to quickstart docs
  * Fix S3 driver loglevel param
  * Fixed data race in TestSchedule test
  * Fixes #4683 - uses X/Y instead of Gx/Gy for thumbprint of
    ecdsa keys
  * build(deps): bump actions/checkout from 4 to 5
  * Fix broken link to Docker Hub fair use policy
  * fix(registry/handlers/app): redis CAs
  * build(deps): bump actions/labeler from 5 to 6
  * build(deps): bump actions/setup-go from 5 to 6
  * build(deps): bump actions/upload-pages-artifact from 3 to 4
  * build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
  * build(deps): bump github/codeql-action from 3.26.5 to 4.30.7
  * build(deps): bump github/codeql-action from 4.30.7 to 4.30.8
  * chore: labeler: add area/client mapping for
    internal/client/**
  * client: add Accept headers to Exists() HEAD
  * feat(registry): Make graceful shutdown test robust
  * fix(registry): Correct log formatting for upstream challenge
  * build(deps): bump github/codeql-action from 4.30.8 to 4.30.9
  * build(deps): bump github/codeql-action from 4.30.9 to 4.31.3
  * refactor: remove redundant variable declarations in for loops
  * "should" -&gt; "must" regarding redis eviction policy
  * build(deps): bump actions/checkout from 5 to 6
  * Incorrect warning hint
  * Add return error when list object
  * build(deps): bump actions/checkout from 5.0.1 to 6.0.0
  * build(deps): bump peter-evans/dockerhub-description from 4 to
    5
  * fix: Logging regression for manifest HEAD requests
  * Add boolean parsing util
  * Expose `useFIPSEndpoint` for S3
  * Add Cloudfleet Container Registry to adopters
  * fix(ci): Fix broken Azure e2e storage tests
  * BUG: Fix notification filtering to work with actions when
    mediatypes is empty
  * build(deps): bump actions/checkout from 6.0.0 to 6.0.1
  * build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0
  * build(deps): bump github/codeql-action from 4.31.3 to 4.31.10
  * build(deps): bump github/codeql-action from 4.31.10 to 4.32.2
  * build(deps): bump actions/checkout from 6.0.1 to 6.0.2
  * update golangci-lint to v2.9 and fix linting issues
  * update to go1.25.7, alpine 3.23, xx v1.9.0
  * vendor: github.com/sirupsen/logrus v1.9.4
  * vendor: update golang.org/x/* dependencies
  * vendor: github.com/docker/docker-credential-helpers v0.9.5
  * vendor: github.com/opencontainers/image-spec v1.1.1
  * vendor: github.com/klauspost/compress v1.18.4
  * fix: prefer otel variables over hard coded service name
  * vendor: github.com/spf13/cobra v1.10.2
  * vendor: github.com/bshuster-repo/logrus-logstash-hook v1.1.0
  * fix: sync parent dir to ensure data is reliably stored
  * modernize code
  * vendor: github.com/docker/go-events 605354379745
  * vendor: github.com/go-jose/go-jose/v4 v4.1.3
  * build(deps): bump github/codeql-action from 4.32.2 to 4.32.5
  * build(deps): bump docker/login-action from 3 to 4
  * build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
  * build(deps): bump docker/setup-buildx-action from 3 to 4
  * build(deps): bump docker/bake-action from 6 to 7
  * build(deps): bump docker/metadata-action from 5 to 6
  * fix: nil-check scheduler in `proxyingRegistry.Close()`
  * fix: set MD5 on GCS writer before first `Write` call in
    `putContent`
  * docs: pull through cache will pull from remote multiple times
  * Update s3.md regionendpoint option
  * chore(deps): Bump Go to latest 1.25 in CI workflows and
    go.mod
  * fix: correct Ed25519 JWK thumbprint `kty` from `"OTP"` to
    `"OKP"`
  * Update vacuum.go
  * Opt: refector tag list pagination support (stage 1)
  * Correctly match environment variables to YAML-inlined structs
    in configuration
  * Enable Redis TLS without client certificates
  * build(deps): bump actions/deploy-pages from 4 to 5
  * build(deps): bump github/codeql-action from 4.32.5 to 4.34.1
  * fix(registry/proxy): use detached context when flushing write
    buffer
  * ci: pin actions and apply zizmor auto-fixes
  * build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
  * build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to
    4.1.4 in the go_modules group across 1 directory
  * chore(app): warn when partial TLS config is used in Redis
  * feat(registry): enhance authentication checks in htpasswd
    implementation
  * Opt: refactor tag list pagination support
  * build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
  * build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0
  * fix(vendor): fix broke vendor validation
  * chore(ci): Prep for v3.1 release</changelog>
</package>
<package pkgid="3297a99a6f7387d03a554e93f1053cda6851c847d5bb456f36171a41ff85a790ae3d7a802e15be6f044308842fdc17866fbf1dbd94bbf1aeaae8a8336aefd91a" name="distribution-registry" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="160000.1.1"/>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 2.8.3 (bsc#1216491):
  * Pass `BUILDTAGS` argument to `go build`
  * Enable Go build tags
  * `reference`: replace deprecated function `SplitHostname`
  * Dont parse errors as JSON unless Content-Type is set to JSON
  * update to go 1.20.8
  * Set `Content-Type` header in registry client `ReadFrom`
  * deprecate reference package, migrate to
    github.com/distribution/reference
  * `digestset`: deprecate package in favor of `go-
    digest/digestset`
  * Do not close HTTP request body in HTTP handler
  * Add v2.8.3 release notes</changelog>
  <changelog author="dmueller@suse.com" date="1729684800">- remove unnecessary lock group</changelog>
  <changelog author="dmueller@suse.com" date="1751284800">- update to 3.0.0 (jsc#PED-11728):
  * This is the first v3 stable release since `v2.8.3` which is a
    culmination of years of hard work of the container community
    and registry maintainers!
  * If you are upgrading from `v2.x` and have never used any of
    the release candidates, please familiarise yourselves with
    the `v2.x` deprecations properly.
  * oss and swift storage drivers are no longer supported
  * `docker/libtrust` has been replaced with `go-jose/go-jose` in
    https://github.com/distribution/distribution/pull/4096
  * `client` is no longer supported as a standalone package in
    https://github.com/distribution/distribution/pull/4126
  * the default configuration path has changed to
    `/etc/distribution/config.yml`
  * `ManifestBuilder` interface in 3886
  * `manifest.Versioned` has been deprecated in favor of
    `oci.Versioned` in 3887
  * `reference` package has been moved to
    github.com/distribution/reference in
    https://github.com/distribution/distribution/pull/4063</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1768305600">- Move config files in systemd tmpfiles dir for immutable mode
  (jsc#PED-14747)
  * Add distribution-registry.tmpfiles</changelog>
  <changelog author="dmueller@suse.com" date="1770120000">- restore directory ownership after last change</changelog>
  <changelog author="dmueller@suse.com" date="1777291200">- Update to version 3.1.0:
  * chore(ci): Prep for v3.1 release
  * fix(vendor): fix broke vendpor validation
  * Opt: refactor tag list pagination support
  * build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
  * fix redis repo-scoped blob descriptor revocation
  * build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0
  * proxy: bind bearer realms to upstream trust boundary</changelog>
  <changelog author="dmueller@suse.com" date="1777291201">- update to 3.1.0 (
    bsc#1262096, CVE-2026-35172,
    bsc#1261793, CVE-2026-33540,
    bsc#1260283, CVE-2026-33186,
    bsc#1262951, CVE-2026-34986,
    bsc#1259718):
  * Fixes CVE-2026-35172
  * Fixes CVE-2026-33540
  * Adds support for tag pagination
  * Fixes default credentials in Azure storage provider
  * Drops support for go1.23 and go1.24 and updates to go1.25
  * See the full changelog below for the full list of changes.
  * docs: Update to refer to new image tag v3
  * Fix default_credentials in azure storage provider
  * chore: make function comment match function name
  * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in
    the go_modules group across 1 directory
  * fix: implement JWK thumbprint for Ed25519 public keys
  * fix: Annotate code block from validation.indexes
    configuration docs
  * feat: extract redis config to separate struct
  * Fix: resolve issue #4478 by using a temporary file for non-
    append writes
  * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
  * docs: Add note about `OTEL_TRACES_EXPORTER`
  * fix: set OTEL traces to disabled by default
  * Fix markdown syntax for OTEL traces link in docs
  * Switch UUIDs to UUIDv7
  * refactor: replace map iteration with maps.Copy/Clone
  * s3-aws: fix build for 386
  * docs: Add OpenTelemetry links to quickstart docs
  * Fix S3 driver loglevel param
  * Fixed data race in TestSchedule test
  * Fixes #4683 - uses X/Y instead of Gx/Gy for thumbprint of
    ecdsa keys
  * build(deps): bump actions/checkout from 4 to 5
  * Fix broken link to Docker Hub fair use policy
  * fix(registry/handlers/app): redis CAs
  * build(deps): bump actions/labeler from 5 to 6
  * build(deps): bump actions/setup-go from 5 to 6
  * build(deps): bump actions/upload-pages-artifact from 3 to 4
  * build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
  * build(deps): bump github/codeql-action from 3.26.5 to 4.30.7
  * build(deps): bump github/codeql-action from 4.30.7 to 4.30.8
  * chore: labeler: add area/client mapping for
    internal/client/**
  * client: add Accept headers to Exists() HEAD
  * feat(registry): Make graceful shutdown test robust
  * fix(registry): Correct log formatting for upstream challenge
  * build(deps): bump github/codeql-action from 4.30.8 to 4.30.9
  * build(deps): bump github/codeql-action from 4.30.9 to 4.31.3
  * refactor: remove redundant variable declarations in for loops
  * "should" -&gt; "must" regarding redis eviction policy
  * build(deps): bump actions/checkout from 5 to 6
  * Incorrect warning hint
  * Add return error when list object
  * build(deps): bump actions/checkout from 5.0.1 to 6.0.0
  * build(deps): bump peter-evans/dockerhub-description from 4 to
    5
  * fix: Logging regression for manifest HEAD requests
  * Add boolean parsing util
  * Expose `useFIPSEndpoint` for S3
  * Add Cloudfleet Container Registry to adopters
  * fix(ci): Fix broken Azure e2e storage tests
  * BUG: Fix notification filtering to work with actions when
    mediatypes is empty
  * build(deps): bump actions/checkout from 6.0.0 to 6.0.1
  * build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0
  * build(deps): bump github/codeql-action from 4.31.3 to 4.31.10
  * build(deps): bump github/codeql-action from 4.31.10 to 4.32.2
  * build(deps): bump actions/checkout from 6.0.1 to 6.0.2
  * update golangci-lint to v2.9 and fix linting issues
  * update to go1.25.7, alpine 3.23, xx v1.9.0
  * vendor: github.com/sirupsen/logrus v1.9.4
  * vendor: update golang.org/x/* dependencies
  * vendor: github.com/docker/docker-credential-helpers v0.9.5
  * vendor: github.com/opencontainers/image-spec v1.1.1
  * vendor: github.com/klauspost/compress v1.18.4
  * fix: prefer otel variables over hard coded service name
  * vendor: github.com/spf13/cobra v1.10.2
  * vendor: github.com/bshuster-repo/logrus-logstash-hook v1.1.0
  * fix: sync parent dir to ensure data is reliably stored
  * modernize code
  * vendor: github.com/docker/go-events 605354379745
  * vendor: github.com/go-jose/go-jose/v4 v4.1.3
  * build(deps): bump github/codeql-action from 4.32.2 to 4.32.5
  * build(deps): bump docker/login-action from 3 to 4
  * build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
  * build(deps): bump docker/setup-buildx-action from 3 to 4
  * build(deps): bump docker/bake-action from 6 to 7
  * build(deps): bump docker/metadata-action from 5 to 6
  * fix: nil-check scheduler in `proxyingRegistry.Close()`
  * fix: set MD5 on GCS writer before first `Write` call in
    `putContent`
  * docs: pull through cache will pull from remote multiple times
  * Update s3.md regionendpoint option
  * chore(deps): Bump Go to latest 1.25 in CI workflows and
    go.mod
  * fix: correct Ed25519 JWK thumbprint `kty` from `"OTP"` to
    `"OKP"`
  * Update vacuum.go
  * Opt: refector tag list pagination support (stage 1)
  * Correctly match environment variables to YAML-inlined structs
    in configuration
  * Enable Redis TLS without client certificates
  * build(deps): bump actions/deploy-pages from 4 to 5
  * build(deps): bump github/codeql-action from 4.32.5 to 4.34.1
  * fix(registry/proxy): use detached context when flushing write
    buffer
  * ci: pin actions and apply zizmor auto-fixes
  * build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
  * build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to
    4.1.4 in the go_modules group across 1 directory
  * chore(app): warn when partial TLS config is used in Redis
  * feat(registry): enhance authentication checks in htpasswd
    implementation
  * Opt: refactor tag list pagination support
  * build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
  * build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0
  * fix(vendor): fix broke vendor validation
  * chore(ci): Prep for v3.1 release</changelog>
  <changelog author="dmueller@suse.com" date="1779105600">- update to 3.1.1 (bsc#1265429, CVE-2026-41888):
  * Fixes CVE-2026-41888
  * Bounds-check the file basename in PurgeUploads Walk callback
  * Add S3 Express One Zone support to the S3 storage driver
  * Fix tag list endpoint in proxy mode
  * Clamp oversized `n` query parameter in proxy mode instead of
    returning 400
  * See the full changelog below for the full list of changes.
  * internal/client/auth/challenge: cleanups and minor refactor
  * build(deps): bump
    go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
    from 0.18.0 to 0.19.0 in the go_modules group across 1
    directory
  * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otl
    ptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules
    group across 1 directory
  * build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
  * chore(build): Bump go version to latest
  * refactor: use slices.Backward to simplify the code
  * fix(proxy): fix tag list endpoint in proxy mode
  * Update docker-compose structure in deploying.md
  * build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
  * build(deps): bump actions/upload-pages-artifact from 4.0.0 to
    5.0.0
  * build(deps): bump docker/login-action from 4.0.0 to 4.1.0
  * build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
  * fix(proxy): clamp oversized n query param instead of
    returning 400
  * feat(s3): add express zone one support to S3 driver
  * fix(storage): bounds-check the file basename in PurgeUploads
    Walk callback
  * chore(release): prepare for v3.1.1 release</changelog>
  <changelog author="dmueller@suse.com" date="1779969600">- use vendor.tar.zst generation
- update x/net to v0.55.0 (
    bsc#1266629, CVE-2026-39821,
    bsc#1265788, CVE-2026-33814)
- update x/crypto to 0.52.0 (CVE-2026-39827,
  CVE-2026-39834,CVE-2026-39828,CVE-2026-39829,CVE-2026-39831,
  CVE-2026-42508,CVE-2026-39833,CVE-2026-39830,CVE-2026-39832,
  CVE-2026-46597,CVE-2026-46598,CVE-2026-46595,CVE-2026-39835)</changelog>
</package>
<package pkgid="d0736cdef934ae0ead81375a937c052a87424fb45ab8f25d8698eec08327f77acc553064c7639a833e06d723d2c97400e822f4928e9b24003cf8144d42b925a2" name="distrobox" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="bp160.1.9"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1688731200">- Update to version 1.5.0.2:
  * Fix typo in instructions for setting podman-host path
  * Fix user initialization for ubuntu 23.04
  * Compatibility: add openEULER and Linux Mint containers
  * Fix docker minimum version to 19.03.15.
  * Better container detection in host-exec
  * fix host file sync when unsharing network
- Changes from version 1.5.0.1:
  * Fix bashism in assemble.
  * Revert to using distrobox-enter for upgrade.
  * Fix bug in init_readlink with relative paths in init.
  * Improve dry-run output to show a flag for each line in enter/create.</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1700568000">- Update to version 1.6.0.1:
  * Export: fix exporting desktop app.
  * Init: fix nvidia library integration.
- Update to version 1.6.0:
  * Lilipod support
  * Improved nvidia integration, particularly for cuda
  * General improvements in the init process
  * Improve user's shell handling, so that it now always respects the chsh done inside the container
  * Fix tzdata/zoneinfo problems
  * Rootful containers now will properly setup user password for sudo
  * General polish in initful containers
  * Initful containers now support also OpenRC when present
  * Initful containers will now have also a proper systemd user session
  * New --unshare-all, --unshare-netns, --unshare-process, --unshare-devsys
    flags in create
    + Now initful + unshare-all containers can be used as playgrounds for
    services like LXC and Libvirt more easily
  * New container_additional_volumes configuration
  * Export fixes and improvements in multi-icon and space-in-name handling
  * Exported binaries will be runnable between distroboxes
  * Exported binaries will always run in a login shell
  * Assemble is now more polished and supports all of create flags
  * Assemble can now export apps/binaries directly from the manifest</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1708516800">- Add 0001-Fix-systemd-init-container-startup-1069.patch:
  * run podman exec command as root since some distros would ask
    for user password when using su to login even though the user
    has no password in /etc/shadow
  * fix pam_systemd not being checked for su</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1708603200">- Add flatpak as a dependency, as we need it for distrobox-host-exec
  to work properly (bsc#1220037)</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1709121600">- Removed:
  * 0001-Fix-systemd-init-container-startup-1069.patch
- Update to 1.7.0
  * added --enter-flags to distrobox-export to specify additional
    distrobox flags to use when entering
  * added --hostname flag to distrobox-create so you can choose a
    different hostname than the box name
  * added --unshare-groups to distrobox-create to allow unsharing
    user's additional groups inside the container
  * better login shell management
  * better systemd support for initful containers
  * fixed multiple bins and apps exports declaration in assemble
  * improved NVidia support
  * improved Wolfi container support
  * improved rootful containers support for exported graphical apps
  * improved terminfo support
  * new distrobox-export --list-apps and --list-binaries to show
    exported apps and binaries</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1710417600">- Update to 1.7.0.1
  * install: fix version
  * distrobox-generate-entry: respect DBX_CONTAINER_MANAGER variable
  * distrobox-init: do not fail if locale cannot be set by
  * Don't create empty XAUTH* variables.
  * Add DISTROBOX_EXPORT_PATH env var for distrobox-export.
  * distrobox-init: use "zypper se --match-exact" (instead of "zypper se -x")
  * init: better detection of file watching trigger
  * enter: fix shell when entering initful container after
  * export: fix quotes arount exported binary path
  * upgrade: fix execution with new enter behavior
  * enter: do not use a shell when executing a custom command
  * export: fix execution of binaries with spaces in the name
  * rm: do not fail if no exports are found</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1710504000">- Update to current git version in order to include the code that
  fixes the problem of ImageMagick not being able to resize the
  icons dynamically. This means including the following commits:
  * install: fix linting
  * assemble: fix regression in file reading
  * chore: fix typo (#1283)
  * install: fix installation script (#1282)
  * install: add fixed resolution png icons for use on desktops (#1280)
  * Update install (#1278)</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1711368000">- Update to 1.7.1
  * all: ensure no side effects on global variables
  * create the binary export path if it doesn't exist (#1291)
  * docs: Add info on upgrading package on steamdeck (#1271)
  * docs: remove extra ` from xhost command by (#1284)
  * enter: Add option to run with clean PATH (#1299)
  * fix: missing .fifo logfile in distrobox-enter (#1307)
  * init: ignore findmnt error in routine remounting (#1289) (#1296)
  * init: mask suspend/hibernate/hybrid-sleep
  * init: massively speed up apk deps install by @JamiKettunen in (#1298)
  * rm: do not block container removal if we cannot start it</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1715428800">- Update to version 1.7.2.1
  + changes from 1.7.2.1
  * chore(init): Add sudo to Wolfi (#1375)
  * Add fedora toolbox 40 to list of compatible images (#1377)
  * init: fix setting empty DISPLAY variable, breaking gpg
  + changes from 1.7.2
  * all: properly handle env vars and configs in all commands
    (#1328)
  * chore: bump CI actions, minor fixes to README and other
    files (#1345)
  * docs: Specify that distrobox is in the extra repo (#1316)
  * docs: Support latest alpine (#1341)
  * docs: Update copyright in footer (#1365)
  * docs: Update useful_tips.md (#1330)
  * enter: make log_timestamp date format universally
    compatible (#1343)
  * export: cancel export when trying to delete (#1340)
  * export: consider only absolute candidate icon paths that
    exist (#1318)
  * init: Support musl variant of Void Linux (#1327)
  * init: add explicit creation of /etc/fish/conf.d (#1348)
  * init: massively speed up apt/pacman/xbps deps install (#1324)
  * install: use more portable install(1) arguments (#1364)
  * CI: fix hostname test
  * CI: try to ensure enough disk space
  * CI: use shell-funcheck
  * all: improve function docs
  * assemble: add custom hostname support
  * create: fix regression with rootless runc 1.20~rc1 (#1359)
  * docs: add Slackware 15 (#1357)
  * docs: move upgrading instruction a bit more ahead (#1342)
  * docs: update xhost command to be silent (#1350)
  * enter: Fix support for Active Directory usernames including
    backslashes (#1360)
  * enter: fix regression in fish shell login with initful
    systems
  * enter: fix typo in command generation (#1331)
  * export: fix duplicate extra_flags (#1311)
  * export: use different symbol for IFS (#1351)
  * init, create: use $CONTAINER_ID to distinguish container's
    prompts. Use host's hostname by default.
  * init: ensure fish config is sourced only on interactive
    shell (#1292)
  * init: fix endless hook append (#1320)
  * init: fix performance regression in skel file setup (#1317)
  * init: forward wayland display only if it is set
  * rm: revert 22bc081, simplify removal of exported
    app/bins (#1301)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1729080000">- update to 1.8.0
  * Improvements
  + Improvements on Nvidia integration
  + Improvements on XDG_* env variables management
  + Remote distrobox assemble files! Keep them remote with distrobox assemble create --file https://foo.com/file.ini!
  + A lot of new container distros, from @ublue-os and @toolbx-images, New Fedora, Ubuntu, Alpine and @wolfi-dev wolfi-toolbox!
  * all: ensure env variables are set and have values
  * all: use registry.fedoraproject.org/fedora-toolbox:latest image by default, Fix #1402
  * assemble: add support for remote manifest files
  * assemble: ensure variables are reset correctly
  * assemble: fix name detection with hyphens, Fix #1507
  * assemble: fix possible empty lines, Fix #1514
  * assemble: improve handling of hooks, pass around b64 encoded string to avoid unwanted evaluations
  * compatibility: add missing url for ubuntu:23.04 by @sheevy in #1439
  * create: better explain init/pre-init hooks
  * create: ignore trailing slashes on custom homes, Fix #1575
  * docs: Add kali icon by @andyspectre in #1451
  * docs: Document support for alpine 3.20 containers by @Ferenc- in #1504
  * docs: Fix issue with user not having permissions to write containers.conf by @nhermosilla14 in #1456
  * docs: Seperate curl and wget commands by @axtloss in #1434
  * docs: Update microos -&gt; aeon/kalpa in docs by @TheRsKing in #1427
  * docs: Update openSUSE and SLES compatibility guide by @alexandrevicenzi in #1489
  * docs: add BlackaArch Linux compatibility, Fix #1358
  * docs: add compatibility with ghcr.io/ublue-os/bluefin-cli, Fix #1453
  * docs: document an official way to detect when you're in a distrobox
  * docs: document pipewire/alsa packages for ubuntu initful containers. Fix #1374
  * docs: fix subuids spelling mistake by @yocoldle in #1431
  * docs: fix link for Crystal linux. Fix #1418
  * docs: fix linting
  * docs: fix obsolete Chainguard Wolfi notes
  * docs: point to new nixos wiki by @Mic92 in #1384
  * docs: remove rhel-toolbox image from compatibility, it's now behind paywall
  * docs: support for 3d acceleration in: run_libvirt_in_distrobox.md by @TheRsKing in #1426
  * docs: update compatibility, add ublue toolboxes, update Alpine and Fedora versions, Fix #1501
  * docs: update vscode integration docs
  * enter: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shorter than 5 symbols by @senioroman4uk in #1545
  * enter: Fix support for Active Directory usernames including backslashes pt. 2 by @phoppermann in #1458
  * enter: fix additional flags evaluation, Fix #1541
  * enter: fix docker timestamp incompatibility, Fix #1382, Fix #1424, Fix #1392
  * enter: fix regression in login for initful container, Fix #1428
  * enter: get rid of eval and pass arguments using set. This will avoid maniupulating args, and simplify our life. Fix #749, Fix #1461
  * enter: improve positional args handling, treat enter command accordingly, improve comments explaining the black magic
  * export: Actually fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @TigerGorilla2 in #1582
  * export: Fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @e-luks in #1496
  * export: ensure destpath exists, Fix #1405
  * export: fix CONTAINER_ID fallback
  * export: fix grep errors on list-apps
  * export: improve documentation of the spec. Fix #1444
  * export: simplify and cleanup code
  * export: support exporting app launchers by full-path.
  * extras: vscode- improve podman wrapper, add docker wrapper, fix reconnections
  * fix for 1440 by @dtg01100 in #1441
  * fix: init package in Gentoo Stage3 image by @xz-dev in #1455
  * fix:[#1525] handle container creation failure by @jardon in #1526
  * generate-entry: add 'Remove' action to entry, Fix #1433
  * generate-entry: add timeout to downloads, Fix #1459
  * generate-entry: fix generic icon download and setup
  * generate-entry: fix linting
  * generate-entry: use XDG_DATA_HOME by @Samueru-sama in #1468
  * host-exec: fix arm naming, Fix #1442
  * host-exec: fix host-spawn version
  * host-exec: update host-spawn version
  * init: fix arch locale-gen by @Boria138 in #1520
  * init: Exclude repos from bind-mounting by @lunacd in #1503
  * init: Fix SHELL using absolute path and disable duplicate profile inclusion by @eugenesan in #1397
  * init: Generate host locales in container (fixed issue #1399) by @Boria138 in #1404
  * init: add fallback values for host locale variables
  * init: add iputils
  * init: add iputils in setup_pacman by @intzaaa in #1576
  * init: apt-get upgrade, force keeping old configs when non interactive
  * init: arrange package manager to avoid conflicts when using more than one (eg: packaging containers)
  * init: auto-link /usr/bin/flatpak, to better support opening links on host's browser, if those are flatpaks
  * init: do not fail in "Setting up read-only mounts" if findmnt does not exist by @phoppermann in #1454
  * init: ensure we have DBUS variables set for host-spawn to work in login scripts, Fix #1383
  * init: fallback case where mounting /etc/localtime fails, Fix #1435
  * init: fix detection of 32bit nvidia libs on suse family
  * init: fix failing chpasswd on systemd-homed managed users, Fix #1423
  * init: fix locale generation for minimal images
  * init: fix locale generation on musl and older systems
  * init: fix missing allowerasing flag for dnf
  * init: fix nvidia integration mounting files from boost libs, Fix #1500
  * init: fix nvidia integration, improve search of nvidia files, Fix #1500
  * init: fix typo in fallback locale values
  * init: fix udev clash on rootful initful systems
  * init: fix void-linux failing due to runit, Fix #1380
  * init: perform upgrade before setting up archlinux packages
  * init: proper fix for void extraction paths. Fix #1457
  * init: remove su-exec workaround for Wolfi, now that it supports proper sudo
  * init: rework package managment code
  * init: separate 'mount --rbind -o rslave ...' into 'mount --rbind ...'… by @timwa0669 in #1583
  * rm: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shoter than 5 symbols by @senioroman4uk in #1545
  * rm: add fallback value to response_force
  * rm: ask to force-delete if running and in interactive mode
  * rm: fix IFS overwriting, Fix #1400
  * rm: remove dead code, remove container volumes.</changelog>
</package>
<package pkgid="fd4b133b1746d7138ad12f2532aec254622fe67dbad205022a9f5bb6c9a2f03d92498dd76e5f2b2d38683342a3f6e3aa2c3975c0320f1b01a05745c975f0185c" name="distrobox" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="bp160.2.1"/>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1700568000">- Update to version 1.6.0.1:
  * Export: fix exporting desktop app.
  * Init: fix nvidia library integration.
- Update to version 1.6.0:
  * Lilipod support
  * Improved nvidia integration, particularly for cuda
  * General improvements in the init process
  * Improve user's shell handling, so that it now always respects the chsh done inside the container
  * Fix tzdata/zoneinfo problems
  * Rootful containers now will properly setup user password for sudo
  * General polish in initful containers
  * Initful containers now support also OpenRC when present
  * Initful containers will now have also a proper systemd user session
  * New --unshare-all, --unshare-netns, --unshare-process, --unshare-devsys
    flags in create
    + Now initful + unshare-all containers can be used as playgrounds for
    services like LXC and Libvirt more easily
  * New container_additional_volumes configuration
  * Export fixes and improvements in multi-icon and space-in-name handling
  * Exported binaries will be runnable between distroboxes
  * Exported binaries will always run in a login shell
  * Assemble is now more polished and supports all of create flags
  * Assemble can now export apps/binaries directly from the manifest</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1708516800">- Add 0001-Fix-systemd-init-container-startup-1069.patch:
  * run podman exec command as root since some distros would ask
    for user password when using su to login even though the user
    has no password in /etc/shadow
  * fix pam_systemd not being checked for su</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1708603200">- Add flatpak as a dependency, as we need it for distrobox-host-exec
  to work properly (bsc#1220037)</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1709121600">- Removed:
  * 0001-Fix-systemd-init-container-startup-1069.patch
- Update to 1.7.0
  * added --enter-flags to distrobox-export to specify additional
    distrobox flags to use when entering
  * added --hostname flag to distrobox-create so you can choose a
    different hostname than the box name
  * added --unshare-groups to distrobox-create to allow unsharing
    user's additional groups inside the container
  * better login shell management
  * better systemd support for initful containers
  * fixed multiple bins and apps exports declaration in assemble
  * improved NVidia support
  * improved Wolfi container support
  * improved rootful containers support for exported graphical apps
  * improved terminfo support
  * new distrobox-export --list-apps and --list-binaries to show
    exported apps and binaries</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1710417600">- Update to 1.7.0.1
  * install: fix version
  * distrobox-generate-entry: respect DBX_CONTAINER_MANAGER variable
  * distrobox-init: do not fail if locale cannot be set by
  * Don't create empty XAUTH* variables.
  * Add DISTROBOX_EXPORT_PATH env var for distrobox-export.
  * distrobox-init: use "zypper se --match-exact" (instead of "zypper se -x")
  * init: better detection of file watching trigger
  * enter: fix shell when entering initful container after
  * export: fix quotes arount exported binary path
  * upgrade: fix execution with new enter behavior
  * enter: do not use a shell when executing a custom command
  * export: fix execution of binaries with spaces in the name
  * rm: do not fail if no exports are found</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1710504000">- Update to current git version in order to include the code that
  fixes the problem of ImageMagick not being able to resize the
  icons dynamically. This means including the following commits:
  * install: fix linting
  * assemble: fix regression in file reading
  * chore: fix typo (#1283)
  * install: fix installation script (#1282)
  * install: add fixed resolution png icons for use on desktops (#1280)
  * Update install (#1278)</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1711368000">- Update to 1.7.1
  * all: ensure no side effects on global variables
  * create the binary export path if it doesn't exist (#1291)
  * docs: Add info on upgrading package on steamdeck (#1271)
  * docs: remove extra ` from xhost command by (#1284)
  * enter: Add option to run with clean PATH (#1299)
  * fix: missing .fifo logfile in distrobox-enter (#1307)
  * init: ignore findmnt error in routine remounting (#1289) (#1296)
  * init: mask suspend/hibernate/hybrid-sleep
  * init: massively speed up apk deps install by @JamiKettunen in (#1298)
  * rm: do not block container removal if we cannot start it</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1715428800">- Update to version 1.7.2.1
  + changes from 1.7.2.1
  * chore(init): Add sudo to Wolfi (#1375)
  * Add fedora toolbox 40 to list of compatible images (#1377)
  * init: fix setting empty DISPLAY variable, breaking gpg
  + changes from 1.7.2
  * all: properly handle env vars and configs in all commands
    (#1328)
  * chore: bump CI actions, minor fixes to README and other
    files (#1345)
  * docs: Specify that distrobox is in the extra repo (#1316)
  * docs: Support latest alpine (#1341)
  * docs: Update copyright in footer (#1365)
  * docs: Update useful_tips.md (#1330)
  * enter: make log_timestamp date format universally
    compatible (#1343)
  * export: cancel export when trying to delete (#1340)
  * export: consider only absolute candidate icon paths that
    exist (#1318)
  * init: Support musl variant of Void Linux (#1327)
  * init: add explicit creation of /etc/fish/conf.d (#1348)
  * init: massively speed up apt/pacman/xbps deps install (#1324)
  * install: use more portable install(1) arguments (#1364)
  * CI: fix hostname test
  * CI: try to ensure enough disk space
  * CI: use shell-funcheck
  * all: improve function docs
  * assemble: add custom hostname support
  * create: fix regression with rootless runc 1.20~rc1 (#1359)
  * docs: add Slackware 15 (#1357)
  * docs: move upgrading instruction a bit more ahead (#1342)
  * docs: update xhost command to be silent (#1350)
  * enter: Fix support for Active Directory usernames including
    backslashes (#1360)
  * enter: fix regression in fish shell login with initful
    systems
  * enter: fix typo in command generation (#1331)
  * export: fix duplicate extra_flags (#1311)
  * export: use different symbol for IFS (#1351)
  * init, create: use $CONTAINER_ID to distinguish container's
    prompts. Use host's hostname by default.
  * init: ensure fish config is sourced only on interactive
    shell (#1292)
  * init: fix endless hook append (#1320)
  * init: fix performance regression in skel file setup (#1317)
  * init: forward wayland display only if it is set
  * rm: revert 22bc081, simplify removal of exported
    app/bins (#1301)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1729080000">- update to 1.8.0
  * Improvements
  + Improvements on Nvidia integration
  + Improvements on XDG_* env variables management
  + Remote distrobox assemble files! Keep them remote with distrobox assemble create --file https://foo.com/file.ini!
  + A lot of new container distros, from @ublue-os and @toolbx-images, New Fedora, Ubuntu, Alpine and @wolfi-dev wolfi-toolbox!
  * all: ensure env variables are set and have values
  * all: use registry.fedoraproject.org/fedora-toolbox:latest image by default, Fix #1402
  * assemble: add support for remote manifest files
  * assemble: ensure variables are reset correctly
  * assemble: fix name detection with hyphens, Fix #1507
  * assemble: fix possible empty lines, Fix #1514
  * assemble: improve handling of hooks, pass around b64 encoded string to avoid unwanted evaluations
  * compatibility: add missing url for ubuntu:23.04 by @sheevy in #1439
  * create: better explain init/pre-init hooks
  * create: ignore trailing slashes on custom homes, Fix #1575
  * docs: Add kali icon by @andyspectre in #1451
  * docs: Document support for alpine 3.20 containers by @Ferenc- in #1504
  * docs: Fix issue with user not having permissions to write containers.conf by @nhermosilla14 in #1456
  * docs: Seperate curl and wget commands by @axtloss in #1434
  * docs: Update microos -&gt; aeon/kalpa in docs by @TheRsKing in #1427
  * docs: Update openSUSE and SLES compatibility guide by @alexandrevicenzi in #1489
  * docs: add BlackaArch Linux compatibility, Fix #1358
  * docs: add compatibility with ghcr.io/ublue-os/bluefin-cli, Fix #1453
  * docs: document an official way to detect when you're in a distrobox
  * docs: document pipewire/alsa packages for ubuntu initful containers. Fix #1374
  * docs: fix subuids spelling mistake by @yocoldle in #1431
  * docs: fix link for Crystal linux. Fix #1418
  * docs: fix linting
  * docs: fix obsolete Chainguard Wolfi notes
  * docs: point to new nixos wiki by @Mic92 in #1384
  * docs: remove rhel-toolbox image from compatibility, it's now behind paywall
  * docs: support for 3d acceleration in: run_libvirt_in_distrobox.md by @TheRsKing in #1426
  * docs: update compatibility, add ublue toolboxes, update Alpine and Fedora versions, Fix #1501
  * docs: update vscode integration docs
  * enter: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shorter than 5 symbols by @senioroman4uk in #1545
  * enter: Fix support for Active Directory usernames including backslashes pt. 2 by @phoppermann in #1458
  * enter: fix additional flags evaluation, Fix #1541
  * enter: fix docker timestamp incompatibility, Fix #1382, Fix #1424, Fix #1392
  * enter: fix regression in login for initful container, Fix #1428
  * enter: get rid of eval and pass arguments using set. This will avoid maniupulating args, and simplify our life. Fix #749, Fix #1461
  * enter: improve positional args handling, treat enter command accordingly, improve comments explaining the black magic
  * export: Actually fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @TigerGorilla2 in #1582
  * export: Fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @e-luks in #1496
  * export: ensure destpath exists, Fix #1405
  * export: fix CONTAINER_ID fallback
  * export: fix grep errors on list-apps
  * export: improve documentation of the spec. Fix #1444
  * export: simplify and cleanup code
  * export: support exporting app launchers by full-path.
  * extras: vscode- improve podman wrapper, add docker wrapper, fix reconnections
  * fix for 1440 by @dtg01100 in #1441
  * fix: init package in Gentoo Stage3 image by @xz-dev in #1455
  * fix:[#1525] handle container creation failure by @jardon in #1526
  * generate-entry: add 'Remove' action to entry, Fix #1433
  * generate-entry: add timeout to downloads, Fix #1459
  * generate-entry: fix generic icon download and setup
  * generate-entry: fix linting
  * generate-entry: use XDG_DATA_HOME by @Samueru-sama in #1468
  * host-exec: fix arm naming, Fix #1442
  * host-exec: fix host-spawn version
  * host-exec: update host-spawn version
  * init: fix arch locale-gen by @Boria138 in #1520
  * init: Exclude repos from bind-mounting by @lunacd in #1503
  * init: Fix SHELL using absolute path and disable duplicate profile inclusion by @eugenesan in #1397
  * init: Generate host locales in container (fixed issue #1399) by @Boria138 in #1404
  * init: add fallback values for host locale variables
  * init: add iputils
  * init: add iputils in setup_pacman by @intzaaa in #1576
  * init: apt-get upgrade, force keeping old configs when non interactive
  * init: arrange package manager to avoid conflicts when using more than one (eg: packaging containers)
  * init: auto-link /usr/bin/flatpak, to better support opening links on host's browser, if those are flatpaks
  * init: do not fail in "Setting up read-only mounts" if findmnt does not exist by @phoppermann in #1454
  * init: ensure we have DBUS variables set for host-spawn to work in login scripts, Fix #1383
  * init: fallback case where mounting /etc/localtime fails, Fix #1435
  * init: fix detection of 32bit nvidia libs on suse family
  * init: fix failing chpasswd on systemd-homed managed users, Fix #1423
  * init: fix locale generation for minimal images
  * init: fix locale generation on musl and older systems
  * init: fix missing allowerasing flag for dnf
  * init: fix nvidia integration mounting files from boost libs, Fix #1500
  * init: fix nvidia integration, improve search of nvidia files, Fix #1500
  * init: fix typo in fallback locale values
  * init: fix udev clash on rootful initful systems
  * init: fix void-linux failing due to runit, Fix #1380
  * init: perform upgrade before setting up archlinux packages
  * init: proper fix for void extraction paths. Fix #1457
  * init: remove su-exec workaround for Wolfi, now that it supports proper sudo
  * init: rework package managment code
  * init: separate 'mount --rbind -o rslave ...' into 'mount --rbind ...'… by @timwa0669 in #1583
  * rm: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shoter than 5 symbols by @senioroman4uk in #1545
  * rm: add fallback value to response_force
  * rm: ask to force-delete if running and in interactive mode
  * rm: fix IFS overwriting, Fix #1400
  * rm: remove dead code, remove container volumes.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1773144000">- Add fix-distrobox-to-newer-zypper.patch, fixing bsc#1259032
  * we need to backport another commit, to actually make it work
    (add newline.patch) (it still gives a visual error when initializing
    a new container, but works)</changelog>
</package>
<package pkgid="cbecb3a1b66a4c8420ee3fb383c8ca5c7b41ffd783c5bf635ec9dec98dcd228eefb285d17391e40554590650c47b00f5a26fde8c591eb505ed435d2ed0acfdb6" name="distrobox-bash-completion" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="bp160.1.9"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1688731200">- Update to version 1.5.0.2:
  * Fix typo in instructions for setting podman-host path
  * Fix user initialization for ubuntu 23.04
  * Compatibility: add openEULER and Linux Mint containers
  * Fix docker minimum version to 19.03.15.
  * Better container detection in host-exec
  * fix host file sync when unsharing network
- Changes from version 1.5.0.1:
  * Fix bashism in assemble.
  * Revert to using distrobox-enter for upgrade.
  * Fix bug in init_readlink with relative paths in init.
  * Improve dry-run output to show a flag for each line in enter/create.</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1700568000">- Update to version 1.6.0.1:
  * Export: fix exporting desktop app.
  * Init: fix nvidia library integration.
- Update to version 1.6.0:
  * Lilipod support
  * Improved nvidia integration, particularly for cuda
  * General improvements in the init process
  * Improve user's shell handling, so that it now always respects the chsh done inside the container
  * Fix tzdata/zoneinfo problems
  * Rootful containers now will properly setup user password for sudo
  * General polish in initful containers
  * Initful containers now support also OpenRC when present
  * Initful containers will now have also a proper systemd user session
  * New --unshare-all, --unshare-netns, --unshare-process, --unshare-devsys
    flags in create
    + Now initful + unshare-all containers can be used as playgrounds for
    services like LXC and Libvirt more easily
  * New container_additional_volumes configuration
  * Export fixes and improvements in multi-icon and space-in-name handling
  * Exported binaries will be runnable between distroboxes
  * Exported binaries will always run in a login shell
  * Assemble is now more polished and supports all of create flags
  * Assemble can now export apps/binaries directly from the manifest</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1708516800">- Add 0001-Fix-systemd-init-container-startup-1069.patch:
  * run podman exec command as root since some distros would ask
    for user password when using su to login even though the user
    has no password in /etc/shadow
  * fix pam_systemd not being checked for su</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1708603200">- Add flatpak as a dependency, as we need it for distrobox-host-exec
  to work properly (bsc#1220037)</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1709121600">- Removed:
  * 0001-Fix-systemd-init-container-startup-1069.patch
- Update to 1.7.0
  * added --enter-flags to distrobox-export to specify additional
    distrobox flags to use when entering
  * added --hostname flag to distrobox-create so you can choose a
    different hostname than the box name
  * added --unshare-groups to distrobox-create to allow unsharing
    user's additional groups inside the container
  * better login shell management
  * better systemd support for initful containers
  * fixed multiple bins and apps exports declaration in assemble
  * improved NVidia support
  * improved Wolfi container support
  * improved rootful containers support for exported graphical apps
  * improved terminfo support
  * new distrobox-export --list-apps and --list-binaries to show
    exported apps and binaries</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1710417600">- Update to 1.7.0.1
  * install: fix version
  * distrobox-generate-entry: respect DBX_CONTAINER_MANAGER variable
  * distrobox-init: do not fail if locale cannot be set by
  * Don't create empty XAUTH* variables.
  * Add DISTROBOX_EXPORT_PATH env var for distrobox-export.
  * distrobox-init: use "zypper se --match-exact" (instead of "zypper se -x")
  * init: better detection of file watching trigger
  * enter: fix shell when entering initful container after
  * export: fix quotes arount exported binary path
  * upgrade: fix execution with new enter behavior
  * enter: do not use a shell when executing a custom command
  * export: fix execution of binaries with spaces in the name
  * rm: do not fail if no exports are found</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1710504000">- Update to current git version in order to include the code that
  fixes the problem of ImageMagick not being able to resize the
  icons dynamically. This means including the following commits:
  * install: fix linting
  * assemble: fix regression in file reading
  * chore: fix typo (#1283)
  * install: fix installation script (#1282)
  * install: add fixed resolution png icons for use on desktops (#1280)
  * Update install (#1278)</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1711368000">- Update to 1.7.1
  * all: ensure no side effects on global variables
  * create the binary export path if it doesn't exist (#1291)
  * docs: Add info on upgrading package on steamdeck (#1271)
  * docs: remove extra ` from xhost command by (#1284)
  * enter: Add option to run with clean PATH (#1299)
  * fix: missing .fifo logfile in distrobox-enter (#1307)
  * init: ignore findmnt error in routine remounting (#1289) (#1296)
  * init: mask suspend/hibernate/hybrid-sleep
  * init: massively speed up apk deps install by @JamiKettunen in (#1298)
  * rm: do not block container removal if we cannot start it</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1715428800">- Update to version 1.7.2.1
  + changes from 1.7.2.1
  * chore(init): Add sudo to Wolfi (#1375)
  * Add fedora toolbox 40 to list of compatible images (#1377)
  * init: fix setting empty DISPLAY variable, breaking gpg
  + changes from 1.7.2
  * all: properly handle env vars and configs in all commands
    (#1328)
  * chore: bump CI actions, minor fixes to README and other
    files (#1345)
  * docs: Specify that distrobox is in the extra repo (#1316)
  * docs: Support latest alpine (#1341)
  * docs: Update copyright in footer (#1365)
  * docs: Update useful_tips.md (#1330)
  * enter: make log_timestamp date format universally
    compatible (#1343)
  * export: cancel export when trying to delete (#1340)
  * export: consider only absolute candidate icon paths that
    exist (#1318)
  * init: Support musl variant of Void Linux (#1327)
  * init: add explicit creation of /etc/fish/conf.d (#1348)
  * init: massively speed up apt/pacman/xbps deps install (#1324)
  * install: use more portable install(1) arguments (#1364)
  * CI: fix hostname test
  * CI: try to ensure enough disk space
  * CI: use shell-funcheck
  * all: improve function docs
  * assemble: add custom hostname support
  * create: fix regression with rootless runc 1.20~rc1 (#1359)
  * docs: add Slackware 15 (#1357)
  * docs: move upgrading instruction a bit more ahead (#1342)
  * docs: update xhost command to be silent (#1350)
  * enter: Fix support for Active Directory usernames including
    backslashes (#1360)
  * enter: fix regression in fish shell login with initful
    systems
  * enter: fix typo in command generation (#1331)
  * export: fix duplicate extra_flags (#1311)
  * export: use different symbol for IFS (#1351)
  * init, create: use $CONTAINER_ID to distinguish container's
    prompts. Use host's hostname by default.
  * init: ensure fish config is sourced only on interactive
    shell (#1292)
  * init: fix endless hook append (#1320)
  * init: fix performance regression in skel file setup (#1317)
  * init: forward wayland display only if it is set
  * rm: revert 22bc081, simplify removal of exported
    app/bins (#1301)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1729080000">- update to 1.8.0
  * Improvements
  + Improvements on Nvidia integration
  + Improvements on XDG_* env variables management
  + Remote distrobox assemble files! Keep them remote with distrobox assemble create --file https://foo.com/file.ini!
  + A lot of new container distros, from @ublue-os and @toolbx-images, New Fedora, Ubuntu, Alpine and @wolfi-dev wolfi-toolbox!
  * all: ensure env variables are set and have values
  * all: use registry.fedoraproject.org/fedora-toolbox:latest image by default, Fix #1402
  * assemble: add support for remote manifest files
  * assemble: ensure variables are reset correctly
  * assemble: fix name detection with hyphens, Fix #1507
  * assemble: fix possible empty lines, Fix #1514
  * assemble: improve handling of hooks, pass around b64 encoded string to avoid unwanted evaluations
  * compatibility: add missing url for ubuntu:23.04 by @sheevy in #1439
  * create: better explain init/pre-init hooks
  * create: ignore trailing slashes on custom homes, Fix #1575
  * docs: Add kali icon by @andyspectre in #1451
  * docs: Document support for alpine 3.20 containers by @Ferenc- in #1504
  * docs: Fix issue with user not having permissions to write containers.conf by @nhermosilla14 in #1456
  * docs: Seperate curl and wget commands by @axtloss in #1434
  * docs: Update microos -&gt; aeon/kalpa in docs by @TheRsKing in #1427
  * docs: Update openSUSE and SLES compatibility guide by @alexandrevicenzi in #1489
  * docs: add BlackaArch Linux compatibility, Fix #1358
  * docs: add compatibility with ghcr.io/ublue-os/bluefin-cli, Fix #1453
  * docs: document an official way to detect when you're in a distrobox
  * docs: document pipewire/alsa packages for ubuntu initful containers. Fix #1374
  * docs: fix subuids spelling mistake by @yocoldle in #1431
  * docs: fix link for Crystal linux. Fix #1418
  * docs: fix linting
  * docs: fix obsolete Chainguard Wolfi notes
  * docs: point to new nixos wiki by @Mic92 in #1384
  * docs: remove rhel-toolbox image from compatibility, it's now behind paywall
  * docs: support for 3d acceleration in: run_libvirt_in_distrobox.md by @TheRsKing in #1426
  * docs: update compatibility, add ublue toolboxes, update Alpine and Fedora versions, Fix #1501
  * docs: update vscode integration docs
  * enter: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shorter than 5 symbols by @senioroman4uk in #1545
  * enter: Fix support for Active Directory usernames including backslashes pt. 2 by @phoppermann in #1458
  * enter: fix additional flags evaluation, Fix #1541
  * enter: fix docker timestamp incompatibility, Fix #1382, Fix #1424, Fix #1392
  * enter: fix regression in login for initful container, Fix #1428
  * enter: get rid of eval and pass arguments using set. This will avoid maniupulating args, and simplify our life. Fix #749, Fix #1461
  * enter: improve positional args handling, treat enter command accordingly, improve comments explaining the black magic
  * export: Actually fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @TigerGorilla2 in #1582
  * export: Fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @e-luks in #1496
  * export: ensure destpath exists, Fix #1405
  * export: fix CONTAINER_ID fallback
  * export: fix grep errors on list-apps
  * export: improve documentation of the spec. Fix #1444
  * export: simplify and cleanup code
  * export: support exporting app launchers by full-path.
  * extras: vscode- improve podman wrapper, add docker wrapper, fix reconnections
  * fix for 1440 by @dtg01100 in #1441
  * fix: init package in Gentoo Stage3 image by @xz-dev in #1455
  * fix:[#1525] handle container creation failure by @jardon in #1526
  * generate-entry: add 'Remove' action to entry, Fix #1433
  * generate-entry: add timeout to downloads, Fix #1459
  * generate-entry: fix generic icon download and setup
  * generate-entry: fix linting
  * generate-entry: use XDG_DATA_HOME by @Samueru-sama in #1468
  * host-exec: fix arm naming, Fix #1442
  * host-exec: fix host-spawn version
  * host-exec: update host-spawn version
  * init: fix arch locale-gen by @Boria138 in #1520
  * init: Exclude repos from bind-mounting by @lunacd in #1503
  * init: Fix SHELL using absolute path and disable duplicate profile inclusion by @eugenesan in #1397
  * init: Generate host locales in container (fixed issue #1399) by @Boria138 in #1404
  * init: add fallback values for host locale variables
  * init: add iputils
  * init: add iputils in setup_pacman by @intzaaa in #1576
  * init: apt-get upgrade, force keeping old configs when non interactive
  * init: arrange package manager to avoid conflicts when using more than one (eg: packaging containers)
  * init: auto-link /usr/bin/flatpak, to better support opening links on host's browser, if those are flatpaks
  * init: do not fail in "Setting up read-only mounts" if findmnt does not exist by @phoppermann in #1454
  * init: ensure we have DBUS variables set for host-spawn to work in login scripts, Fix #1383
  * init: fallback case where mounting /etc/localtime fails, Fix #1435
  * init: fix detection of 32bit nvidia libs on suse family
  * init: fix failing chpasswd on systemd-homed managed users, Fix #1423
  * init: fix locale generation for minimal images
  * init: fix locale generation on musl and older systems
  * init: fix missing allowerasing flag for dnf
  * init: fix nvidia integration mounting files from boost libs, Fix #1500
  * init: fix nvidia integration, improve search of nvidia files, Fix #1500
  * init: fix typo in fallback locale values
  * init: fix udev clash on rootful initful systems
  * init: fix void-linux failing due to runit, Fix #1380
  * init: perform upgrade before setting up archlinux packages
  * init: proper fix for void extraction paths. Fix #1457
  * init: remove su-exec workaround for Wolfi, now that it supports proper sudo
  * init: rework package managment code
  * init: separate 'mount --rbind -o rslave ...' into 'mount --rbind ...'… by @timwa0669 in #1583
  * rm: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shoter than 5 symbols by @senioroman4uk in #1545
  * rm: add fallback value to response_force
  * rm: ask to force-delete if running and in interactive mode
  * rm: fix IFS overwriting, Fix #1400
  * rm: remove dead code, remove container volumes.</changelog>
</package>
<package pkgid="1c5416d7595e769cd14f219525f5060216e6b202b286aed81dad5da434a7807059b89e71b9832d4acc8e13c4b64c3e0bdfa5535680755a6ca2ad9f9430f8b2ba" name="distrobox-bash-completion" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="bp160.2.1"/>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1700568000">- Update to version 1.6.0.1:
  * Export: fix exporting desktop app.
  * Init: fix nvidia library integration.
- Update to version 1.6.0:
  * Lilipod support
  * Improved nvidia integration, particularly for cuda
  * General improvements in the init process
  * Improve user's shell handling, so that it now always respects the chsh done inside the container
  * Fix tzdata/zoneinfo problems
  * Rootful containers now will properly setup user password for sudo
  * General polish in initful containers
  * Initful containers now support also OpenRC when present
  * Initful containers will now have also a proper systemd user session
  * New --unshare-all, --unshare-netns, --unshare-process, --unshare-devsys
    flags in create
    + Now initful + unshare-all containers can be used as playgrounds for
    services like LXC and Libvirt more easily
  * New container_additional_volumes configuration
  * Export fixes and improvements in multi-icon and space-in-name handling
  * Exported binaries will be runnable between distroboxes
  * Exported binaries will always run in a login shell
  * Assemble is now more polished and supports all of create flags
  * Assemble can now export apps/binaries directly from the manifest</changelog>
  <changelog author="Enrico Belleri &lt;kilgore.trout@idesmi.eu&gt;" date="1708516800">- Add 0001-Fix-systemd-init-container-startup-1069.patch:
  * run podman exec command as root since some distros would ask
    for user password when using su to login even though the user
    has no password in /etc/shadow
  * fix pam_systemd not being checked for su</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1708603200">- Add flatpak as a dependency, as we need it for distrobox-host-exec
  to work properly (bsc#1220037)</changelog>
  <changelog author="Shawn Dunn &lt;sfalken@opensuse.org&gt;" date="1709121600">- Removed:
  * 0001-Fix-systemd-init-container-startup-1069.patch
- Update to 1.7.0
  * added --enter-flags to distrobox-export to specify additional
    distrobox flags to use when entering
  * added --hostname flag to distrobox-create so you can choose a
    different hostname than the box name
  * added --unshare-groups to distrobox-create to allow unsharing
    user's additional groups inside the container
  * better login shell management
  * better systemd support for initful containers
  * fixed multiple bins and apps exports declaration in assemble
  * improved NVidia support
  * improved Wolfi container support
  * improved rootful containers support for exported graphical apps
  * improved terminfo support
  * new distrobox-export --list-apps and --list-binaries to show
    exported apps and binaries</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1710417600">- Update to 1.7.0.1
  * install: fix version
  * distrobox-generate-entry: respect DBX_CONTAINER_MANAGER variable
  * distrobox-init: do not fail if locale cannot be set by
  * Don't create empty XAUTH* variables.
  * Add DISTROBOX_EXPORT_PATH env var for distrobox-export.
  * distrobox-init: use "zypper se --match-exact" (instead of "zypper se -x")
  * init: better detection of file watching trigger
  * enter: fix shell when entering initful container after
  * export: fix quotes arount exported binary path
  * upgrade: fix execution with new enter behavior
  * enter: do not use a shell when executing a custom command
  * export: fix execution of binaries with spaces in the name
  * rm: do not fail if no exports are found</changelog>
  <changelog author="Dario Faggioli &lt;dfaggioli@suse.com&gt;" date="1710504000">- Update to current git version in order to include the code that
  fixes the problem of ImageMagick not being able to resize the
  icons dynamically. This means including the following commits:
  * install: fix linting
  * assemble: fix regression in file reading
  * chore: fix typo (#1283)
  * install: fix installation script (#1282)
  * install: add fixed resolution png icons for use on desktops (#1280)
  * Update install (#1278)</changelog>
  <changelog author="Michal Vyskocil &lt;michal.vyskocil@gmail.com&gt;" date="1711368000">- Update to 1.7.1
  * all: ensure no side effects on global variables
  * create the binary export path if it doesn't exist (#1291)
  * docs: Add info on upgrading package on steamdeck (#1271)
  * docs: remove extra ` from xhost command by (#1284)
  * enter: Add option to run with clean PATH (#1299)
  * fix: missing .fifo logfile in distrobox-enter (#1307)
  * init: ignore findmnt error in routine remounting (#1289) (#1296)
  * init: mask suspend/hibernate/hybrid-sleep
  * init: massively speed up apk deps install by @JamiKettunen in (#1298)
  * rm: do not block container removal if we cannot start it</changelog>
  <changelog author="jun wang &lt;jgwang@suse.com&gt;" date="1715428800">- Update to version 1.7.2.1
  + changes from 1.7.2.1
  * chore(init): Add sudo to Wolfi (#1375)
  * Add fedora toolbox 40 to list of compatible images (#1377)
  * init: fix setting empty DISPLAY variable, breaking gpg
  + changes from 1.7.2
  * all: properly handle env vars and configs in all commands
    (#1328)
  * chore: bump CI actions, minor fixes to README and other
    files (#1345)
  * docs: Specify that distrobox is in the extra repo (#1316)
  * docs: Support latest alpine (#1341)
  * docs: Update copyright in footer (#1365)
  * docs: Update useful_tips.md (#1330)
  * enter: make log_timestamp date format universally
    compatible (#1343)
  * export: cancel export when trying to delete (#1340)
  * export: consider only absolute candidate icon paths that
    exist (#1318)
  * init: Support musl variant of Void Linux (#1327)
  * init: add explicit creation of /etc/fish/conf.d (#1348)
  * init: massively speed up apt/pacman/xbps deps install (#1324)
  * install: use more portable install(1) arguments (#1364)
  * CI: fix hostname test
  * CI: try to ensure enough disk space
  * CI: use shell-funcheck
  * all: improve function docs
  * assemble: add custom hostname support
  * create: fix regression with rootless runc 1.20~rc1 (#1359)
  * docs: add Slackware 15 (#1357)
  * docs: move upgrading instruction a bit more ahead (#1342)
  * docs: update xhost command to be silent (#1350)
  * enter: Fix support for Active Directory usernames including
    backslashes (#1360)
  * enter: fix regression in fish shell login with initful
    systems
  * enter: fix typo in command generation (#1331)
  * export: fix duplicate extra_flags (#1311)
  * export: use different symbol for IFS (#1351)
  * init, create: use $CONTAINER_ID to distinguish container's
    prompts. Use host's hostname by default.
  * init: ensure fish config is sourced only on interactive
    shell (#1292)
  * init: fix endless hook append (#1320)
  * init: fix performance regression in skel file setup (#1317)
  * init: forward wayland display only if it is set
  * rm: revert 22bc081, simplify removal of exported
    app/bins (#1301)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1729080000">- update to 1.8.0
  * Improvements
  + Improvements on Nvidia integration
  + Improvements on XDG_* env variables management
  + Remote distrobox assemble files! Keep them remote with distrobox assemble create --file https://foo.com/file.ini!
  + A lot of new container distros, from @ublue-os and @toolbx-images, New Fedora, Ubuntu, Alpine and @wolfi-dev wolfi-toolbox!
  * all: ensure env variables are set and have values
  * all: use registry.fedoraproject.org/fedora-toolbox:latest image by default, Fix #1402
  * assemble: add support for remote manifest files
  * assemble: ensure variables are reset correctly
  * assemble: fix name detection with hyphens, Fix #1507
  * assemble: fix possible empty lines, Fix #1514
  * assemble: improve handling of hooks, pass around b64 encoded string to avoid unwanted evaluations
  * compatibility: add missing url for ubuntu:23.04 by @sheevy in #1439
  * create: better explain init/pre-init hooks
  * create: ignore trailing slashes on custom homes, Fix #1575
  * docs: Add kali icon by @andyspectre in #1451
  * docs: Document support for alpine 3.20 containers by @Ferenc- in #1504
  * docs: Fix issue with user not having permissions to write containers.conf by @nhermosilla14 in #1456
  * docs: Seperate curl and wget commands by @axtloss in #1434
  * docs: Update microos -&gt; aeon/kalpa in docs by @TheRsKing in #1427
  * docs: Update openSUSE and SLES compatibility guide by @alexandrevicenzi in #1489
  * docs: add BlackaArch Linux compatibility, Fix #1358
  * docs: add compatibility with ghcr.io/ublue-os/bluefin-cli, Fix #1453
  * docs: document an official way to detect when you're in a distrobox
  * docs: document pipewire/alsa packages for ubuntu initful containers. Fix #1374
  * docs: fix subuids spelling mistake by @yocoldle in #1431
  * docs: fix link for Crystal linux. Fix #1418
  * docs: fix linting
  * docs: fix obsolete Chainguard Wolfi notes
  * docs: point to new nixos wiki by @Mic92 in #1384
  * docs: remove rhel-toolbox image from compatibility, it's now behind paywall
  * docs: support for 3d acceleration in: run_libvirt_in_distrobox.md by @TheRsKing in #1426
  * docs: update compatibility, add ublue toolboxes, update Alpine and Fedora versions, Fix #1501
  * docs: update vscode integration docs
  * enter: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shorter than 5 symbols by @senioroman4uk in #1545
  * enter: Fix support for Active Directory usernames including backslashes pt. 2 by @phoppermann in #1458
  * enter: fix additional flags evaluation, Fix #1541
  * enter: fix docker timestamp incompatibility, Fix #1382, Fix #1424, Fix #1392
  * enter: fix regression in login for initful container, Fix #1428
  * enter: get rid of eval and pass arguments using set. This will avoid maniupulating args, and simplify our life. Fix #749, Fix #1461
  * enter: improve positional args handling, treat enter command accordingly, improve comments explaining the black magic
  * export: Actually fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @TigerGorilla2 in #1582
  * export: Fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @e-luks in #1496
  * export: ensure destpath exists, Fix #1405
  * export: fix CONTAINER_ID fallback
  * export: fix grep errors on list-apps
  * export: improve documentation of the spec. Fix #1444
  * export: simplify and cleanup code
  * export: support exporting app launchers by full-path.
  * extras: vscode- improve podman wrapper, add docker wrapper, fix reconnections
  * fix for 1440 by @dtg01100 in #1441
  * fix: init package in Gentoo Stage3 image by @xz-dev in #1455
  * fix:[#1525] handle container creation failure by @jardon in #1526
  * generate-entry: add 'Remove' action to entry, Fix #1433
  * generate-entry: add timeout to downloads, Fix #1459
  * generate-entry: fix generic icon download and setup
  * generate-entry: fix linting
  * generate-entry: use XDG_DATA_HOME by @Samueru-sama in #1468
  * host-exec: fix arm naming, Fix #1442
  * host-exec: fix host-spawn version
  * host-exec: update host-spawn version
  * init: fix arch locale-gen by @Boria138 in #1520
  * init: Exclude repos from bind-mounting by @lunacd in #1503
  * init: Fix SHELL using absolute path and disable duplicate profile inclusion by @eugenesan in #1397
  * init: Generate host locales in container (fixed issue #1399) by @Boria138 in #1404
  * init: add fallback values for host locale variables
  * init: add iputils
  * init: add iputils in setup_pacman by @intzaaa in #1576
  * init: apt-get upgrade, force keeping old configs when non interactive
  * init: arrange package manager to avoid conflicts when using more than one (eg: packaging containers)
  * init: auto-link /usr/bin/flatpak, to better support opening links on host's browser, if those are flatpaks
  * init: do not fail in "Setting up read-only mounts" if findmnt does not exist by @phoppermann in #1454
  * init: ensure we have DBUS variables set for host-spawn to work in login scripts, Fix #1383
  * init: fallback case where mounting /etc/localtime fails, Fix #1435
  * init: fix detection of 32bit nvidia libs on suse family
  * init: fix failing chpasswd on systemd-homed managed users, Fix #1423
  * init: fix locale generation for minimal images
  * init: fix locale generation on musl and older systems
  * init: fix missing allowerasing flag for dnf
  * init: fix nvidia integration mounting files from boost libs, Fix #1500
  * init: fix nvidia integration, improve search of nvidia files, Fix #1500
  * init: fix typo in fallback locale values
  * init: fix udev clash on rootful initful systems
  * init: fix void-linux failing due to runit, Fix #1380
  * init: perform upgrade before setting up archlinux packages
  * init: proper fix for void extraction paths. Fix #1457
  * init: remove su-exec workaround for Wolfi, now that it supports proper sudo
  * init: rework package managment code
  * init: separate 'mount --rbind -o rslave ...' into 'mount --rbind ...'… by @timwa0669 in #1583
  * rm: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shoter than 5 symbols by @senioroman4uk in #1545
  * rm: add fallback value to response_force
  * rm: ask to force-delete if running and in interactive mode
  * rm: fix IFS overwriting, Fix #1400
  * rm: remove dead code, remove container volumes.</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1773144000">- Add fix-distrobox-to-newer-zypper.patch, fixing bsc#1259032
  * we need to backport another commit, to actually make it work
    (add newline.patch) (it still gives a visual error when initializing
    a new container, but works)</changelog>
</package>
<package pkgid="beb737da0475cb46596dfe4879ed1f3cdf9f8acf4867f233f8b9cd2bd2428939e32c546530bcf1110fa0eb49c8ab00f20c0fe7643a812c1f016b90a32f5187ae" name="dive" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="bp160.1.8"/>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1727092800">- new package dive: tool for exploring each layer in a docker image</changelog>
</package>
<package pkgid="73f3e82deac033b400c57ca762d387f6694bb4ed01c85b416a3baaea7db97194efbca8fb7edf7c552ba680ae25905f2a6df8bf6ddef227d7af20fbd10c1d5937" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.28" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1608552000">- Update to version 3.5.28
  * ddjvu: tiff generation improvements
  * djvumake: security checks on INCL chunks
  * all: updated for modern compilers
  * bugs: fixed several crashes on invalid inputs
  * miniexp: fixed escape printout and macrochars
  * djvudigital: can use poppler to find text
  * csepdjvu: handle T comments for page titles
  * bytestream: fixed 2GB limit
  * gexception, gthread: cleanup obsolete code
- Drop patches incorporated or otherwise fixed upstream:
  * djvulibre-invalid-tiff.patch
  * djvulibre-CVE-2019-15144.patch
  * djvulibre-CVE-2019-15145.patch
  * djvulibre-CVE-2019-18804.patch
  * djvulibre-CVE-2019-15143.patch
  * djvulibre-always-assume-that-cpuid-works-on-x86_64.patch
  * djvulibre-CVE-2019-15142.patch
  * reproducible.patch
- Only run post(un) scriptlets for desktop database update for
  openSUSE &lt; 1550, these are void otherwise.
- Regenerate configure script as it is no longer supplied with
  tarball; add BuildRequires: libtool.
- Adapt file list for mime file no longer being installed (this is
  intentional from upstream); accordingly drop shared-mime-info
  BuildRequires and post(un) scripts.
- fixes CVE-2021-3630 [bsc#1187869]</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch to use https source url</changelog>
  <changelog author="pgajdos@suse.com" date="1693310400">- security update
- added patches
  fix CVE-2021-46310 [bsc#1214670], divide by zero in IW44Image.cpp
  + djvulibre-CVE-2021-46310.patch
  fix CVE-2021-46312 [bsc#1214672], divide by zero in IW44EncodeCodec.cpp
  + djvulibre-CVE-2021-46312.patch</changelog>
  <changelog author="mvetter@suse.com" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- added patches
  CVE-2025-53367 [bsc#1245773], a crafted document may lead to an out of bound write
  + djvulibre-CVE-2025-53367.patch</changelog>
</package>
<package pkgid="d201e28865434607f88a47e82ea284fbfa1b063d7a9b48367bdc52b63b2c00d0862bab2246bd1b6e03c2e1630191303ef9817862a9059ed72bec52e6f0a7d107" name="djvulibre-djview4" arch="x86_64">
  <version epoch="0" ver="4.12" rel="bp160.1.12"/>
  <changelog author="pgajdos@suse.com" date="1324296000">- build with qt 4.8
  * added qt-4.8.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 4.9:
  * Added language selection in preference.
  * Added option to override printing and saving restrictions.
  * Automatic reloading of djvu documents when the file is changed.
  * New chinese translations.
  * Improved network code (needs Qt&gt;=4.4.)
  * Remember the last visited position for the last 50 documents.
- dropped qt-4.8.patch, upstream is using qSwap()</changelog>
  <changelog author="schwab@suse.de" date="1378900800">- npsdk-aarch64-support.patch: Add support for AArch64 in npsdk</changelog>
  <changelog author="mpluskal@suse.com" date="1426766400">- Cleanup spec file with spec-cleaner
- Use url for source
- Build qt5 version
- Remove no longer needed patches
  * djview4-nsplugin_manpage.patch
  * djview4-nsplugin_dir.patch
- Update to 4.10
  * Bug fixes: layout, usability, preferences, locale selection
  * Works with both Qt4 and Qt5
  * Build uses automake/qmake hybrid (instead of autoconf/qmake).
  * Layout annotations are honored in multipage mode
  * Experimental OpenGL rendering
  * Slideshow mode</changelog>
  <changelog author="pgajdos@suse.com" date="1479816000">- updated to 4.10.6
  - Support for pinch gestures
  - New shortcuts on mac
  - Support for high dpi displays
  - Spanish translations
  - Bug fixes
  - Workaround for qt5.5 embed bug</changelog>
  <changelog author="schwab@suse.de" date="1524139200">- npsdk-aarch64-support.patch: remove obsolete patch</changelog>
  <changelog author="ro@suse.de" date="1571832000">- fix build-requires for factory/tumbleweed
  rsvg-convert tool is now in rsvg-convert package</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1582200000">- Leap 15.2 and SLE15 SP2 has newer librsvg, extend the conditional
  for "BuildRequires: rsvg-convert"</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1608552000">- Update to version 4.12:
  * Fixes for recent compilers.
  * Fixes for Qt-5.15.
  * Fixes in tiff2pdf.c.
  * Updated documentation (most browsers no longer support
    plugins).
  * Updated translations.
- Run autogen.sh to generate configure script as source tarball
  no longer has one; BuildRequires: libtool.
- Only run post(un) scriptlets for openSUSE &lt; 1550; they are void
  for newer openSUSE and directly handled by file triggers.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651665600">- update source url to https</changelog>
</package>
<package pkgid="dc51aef3a0072e354c856899b33de70959298ff0a54d451346072005f7c386a0c1cbb1826c1bf4b9cb472f0aa4e78bf394fbf50775948e1839bb856e220cee6f" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.28" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1608552000">- Update to version 3.5.28
  * ddjvu: tiff generation improvements
  * djvumake: security checks on INCL chunks
  * all: updated for modern compilers
  * bugs: fixed several crashes on invalid inputs
  * miniexp: fixed escape printout and macrochars
  * djvudigital: can use poppler to find text
  * csepdjvu: handle T comments for page titles
  * bytestream: fixed 2GB limit
  * gexception, gthread: cleanup obsolete code
- Drop patches incorporated or otherwise fixed upstream:
  * djvulibre-invalid-tiff.patch
  * djvulibre-CVE-2019-15144.patch
  * djvulibre-CVE-2019-15145.patch
  * djvulibre-CVE-2019-18804.patch
  * djvulibre-CVE-2019-15143.patch
  * djvulibre-always-assume-that-cpuid-works-on-x86_64.patch
  * djvulibre-CVE-2019-15142.patch
  * reproducible.patch
- Only run post(un) scriptlets for desktop database update for
  openSUSE &lt; 1550, these are void otherwise.
- Regenerate configure script as it is no longer supplied with
  tarball; add BuildRequires: libtool.
- Adapt file list for mime file no longer being installed (this is
  intentional from upstream); accordingly drop shared-mime-info
  BuildRequires and post(un) scripts.
- fixes CVE-2021-3630 [bsc#1187869]</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch to use https source url</changelog>
  <changelog author="pgajdos@suse.com" date="1693310400">- security update
- added patches
  fix CVE-2021-46310 [bsc#1214670], divide by zero in IW44Image.cpp
  + djvulibre-CVE-2021-46310.patch
  fix CVE-2021-46312 [bsc#1214672], divide by zero in IW44EncodeCodec.cpp
  + djvulibre-CVE-2021-46312.patch</changelog>
  <changelog author="mvetter@suse.com" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1751889600">- security update
- added patches
  CVE-2025-53367 [bsc#1245773], a crafted document may lead to an out of bound write
  + djvulibre-CVE-2025-53367.patch</changelog>
</package>
<package pkgid="932126e490c0d374fb63e8d73bd3eb1f3bd7c42ffe4aa2b7069330c8d4b7a6c765acd38d2f833286cb3e358b435c644786f858df72f24c59c907f201ba0c1ff7" name="dkimproxy" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="bp160.1.7"/>
  <changelog author="varkoly@suse.com" date="1543320000">- bsc#1116007 - Please convert SysV init scripts by dkimproxy into
  native systemd services</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1577102400">- Add the "installation" section.
- Changed "PreExecStart" to "ExecStartPre".
- Added/changed the type to forking</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1592568000">- Remove sysvinit remains from this package.</changelog>
  <changelog author="Mihaly Meszaros &lt;mmeszaros@npsh.hu&gt;" date="1623326400">- fix PID filename typos in systemd unit files</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1699272000">- Fix boo#1216919
  * create /run/dkimproxy using tmpfiles
  * use the correct env var for the hostname</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1699444800">- Follow-up fix for boo#1216919
  * make sure dkimproxy-in works even when the dynamically-created
    config file under /run does not exist</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1704196800">- Remove the dependency on perl(IO::Socket::INET6) as it has been
  deprecated by upstream, is no longer suitable for use and its not
  being maintained. A compatible replacement for this package is
  perl(IO::Socket::IP) which is shipped by the perl-base package.
  * Rebase dkimproxy-1.4.1-avoid-perl-provides.diff
  * Add dkimproxy-port-perl-IO-Socket-INET6-to-IP.patch
  * Reported upstream: https://sourceforge.net/p/dkimproxy/bugs/39</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1718280000">- Fix ExecStartPre path. This changes depending on %_libexecdir macro.
  Problem was mentioned in (bsc#1217173)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1724846400">- Fix VUL-1: dkimproxy: possible symlink attack in /run/dkimproxy/sysconfig
  (bsc#1217173)
  Remove environment variables DKIMPROXY_USER DKIMPROXY_GROUP.
  These are hardcoded anyway in dkimproxy-tmpfiles. Changing these
  would only lead to trouble. Now User and Group in dkimproxy-in.service
  are set to dkim to avoid the mentioned security issue.
  ExecStart got a '+' to execute it by root rights.</changelog>
</package>
<package pkgid="edf013be7ac26f26bfb7f67127b941cde23110dbcd971f07871f09efa9623f2761e9c178180bfb98d41e8e688d61e61ddbd12bc33e8d858bb10c2c70d487596c" name="dkms" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="bp160.1.3"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1623153600">- Update to version 2.8.4
  * New kernel_install.d_dkms and sign_helper.sh scripts under /etc
  * Fix support for /etc/sysconfig/kernel directory.
  * Improve test dkms.conf file.
  * Add support for zstd compressed modules.
  * Document NO_WEAK_MODULES in the man page.
  * Be more verbose when failing due to missing module.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1674129600">- Update to version 2.8.8
  * Drop old kernel 2.x checks
  * Drop modules.conf handling
  * Fix kernel removing.
- Update to version 2.8.7
  * Fix kernel `prerm.d` for new output in `dkms status`
- Update to version 2.8.6
  * Fix installation of configuration files
  * Use more condensed output for commands, print when invoking
    the signing hook
- Update to version 2.8.5
  * Simplify function for correct kernel using the modules folder
    and not the configuration files in /boot.
  * Simplify function to detect newer kernels</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1683979200">- Fix various bugs in dkms.systemd (boo#1194723)
- Rename /etc/kernel/install.d/dkms to 40-dkms.install (boo#1194723)
- Add patch `fix-kernel-postinst_d.patch`:
  * Fix path to dkms_autoinstaller (boo#1194723)
- Add patch `fix-weak-modules_dkms_in.patch`:
  * Remove '--no-initrams' from weak_modules_no_initrd
    (boo#1194723)
- Add `40-dkms.install` into /usr/lib/kernel/install.d
- Update to 3.0.11
  * Fix updating modules with no version
  * Reinstate NO_WEAK_MODULES section in man
  * Skip module signing when hash is unknown
  * Reinstate --enroll-key
  * Add BUILD_EXCLUSIVE_CONFIG
  * Misc fixes
- Update to 3.0.10
  * Fix warnings for modules with no version
  * Fix modprobe_on_install not being honored in the config file
- Update to 3.0.9
  * Support variable expansion in framework files
  * Fix --config option
  * Verify the key of module signature in tests
  * Handle error cases in autoinstall
  * Follow the target kernel's module hash algorithm
  * Fix incomplete deletion of install directory
  * Correct searching for rpm in PATH
  * Ensure the kconfig file location is set during building
  * Fix the search for the path of installed modules
  * Use exact compiler for dkms as used to build the kernel
- Update to 3.0.8
  * Fix using PKCS#11 engine as private key
- Update to 3.0.7
  * Bad substitution bugfix
  * Update dkms.in to passthrough URI to sign-file
  * Fix commands detecting
- Update to 3.0.6
  * Fix typo in dkms_framework.conf
  * Look for sign-file regardless
- Update to 3.0.5
  * Put version comparison before info comparison
  * Fix typo in commented defaults
- Update to 3.0.4
  * Respect PATH
  * Fallback to uncompressed module when compress fails
  * Rework signing
  * Add /etc/dkms/framework.conf.d directory
- Update to 3.0.3
  * Fix source only tarballs unpacked with ldtarball
- Update to 3.0.2
  * Enable using add, build and install with a directory again
  * Fix Linux distribution identification through /etc/os-release
- Update to 3.0.1
  * Silently consume the old --no-initrd option
  * Fix creation of temp build dir
- Update to 3.0.0
  * Clarify --all switch in the man page
  * Fix root permissions checking for the various possible actions
  * The following variables have been deprecated:
  - REMAKE_INITRD, MODULES_CONF, MODULES_CONF_OBSOLETES,
    MODULES_CONF_ALIAS_TYPE, and MODULES_CONF_OBSOLETE_ONLY
  * Misc fixes</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1694952000">- Drop custom dkms.service in favour of the one provided by
  upstream</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1698408000">- Update to 3.0.12
  * Fix CC detection
  * Makefile: fix extension of kernel-install plugin
  * Fix grammatical error
  * Remove embedded DESTDIR in make variables, honour them
- Drop patch `fix-kernel-postinst_d.patch` (fixed by upstream)
- Remove leftover dkms.default</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1709812800">- Update to 3.0.13
  * New dkms status adjective broken
  * Allow overriding the /lib/modules directory
  * Adjust kernel module compression, compatible with the in-kernel decompressors
- Add dkms-bash-completion sub-package
- Add dkms-zsh-completion sub-package</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1730030400">- Update to 3.1.0
  * New more condensed output for most of the tasks
  * Allow running the MOK certificate generation as a standalone
    command (Nvidia / Gnome Software integration)
  * Install kernel-install drop-in to /usr/lib instead of /etc
  * Remove modules.weakdep as part of the cleanup
  * Allow setting the maximum number of parallel jobs in
    /etc/dkms/framework.conf
- Update to 3.1.1
  * Remove last remnants of log_action_msg from
    dkms_autoinstaller.in
  * Drop GNU/kFreeBSD
  * Move local to one var per line and init on seperate line
  * Do not print "terminated" message (issue #450)
  * Update tests
  * Fix passing multiple kernel versions</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1733659200">- Update to 3.1.2
  * Fix building nvidia open kernel modules against clang and
    thin/full lto compiled kernel
  * Fix issue with stripped vmlinux
  * Allow configuring compression settings
  * Better output and misc fixes
- Update to 3.1.3
  * Print messages for user feedback only once
  * Keep the Module.symvers file along with the module files if
    it exists
- Do not install dkms_autoinstaller into libexec and scriptlets
  into `/etc/kernel`: follow the "redhat" installation procedure
  instead of the "debian" one</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1743076800">- Update to 3.1.4
  * Install again common.postinst for install-redhat
  * Check for include/config/auto.conf by default in place of
    .config
  * Move kernel_prerm.d logic into dkms
- Update to 3.1.5
  * Fix capture error output
  * Ensure autoinstall reads /etc/dkms/$module.conf
  * Improve output formatting
  * log more in make.log
  * Set compression levels to upstream defaults
  * Various fixes for weak modules and SUSE
- Update to 3.1.6
  * Report kernel module signing errors to prevent silent failures
- Drop fix-weak-modules_dkms_in.patch since it is not necessary
  anymore</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1747224000">- Update to 3.1.7
  * Add codeSigning EKU to generated MOK
  * Various fixes:
  - Record location of archived original modules and restore them
    there
  - Support AUTOINSTALL="no"
  - Do not clean the clean build tree before building the module
  - Error out on dkms.conf containing duplicate module
    definitions
  - common.postinst: run with the same verbosity as autoinstall
  - Add more sanity checks
  - Make some error messages more informative</changelog>
</package>
<package pkgid="7fb7b665eca7c93c65618738158900e85ad9206fa4194b1f7a49abd2c9b2c6c0e368e40ac583c85007a2fa5417676684b24f2e894cae843d22761309c0eba9af" name="dkms-bash-completion" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="bp160.1.3"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1623153600">- Update to version 2.8.4
  * New kernel_install.d_dkms and sign_helper.sh scripts under /etc
  * Fix support for /etc/sysconfig/kernel directory.
  * Improve test dkms.conf file.
  * Add support for zstd compressed modules.
  * Document NO_WEAK_MODULES in the man page.
  * Be more verbose when failing due to missing module.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1674129600">- Update to version 2.8.8
  * Drop old kernel 2.x checks
  * Drop modules.conf handling
  * Fix kernel removing.
- Update to version 2.8.7
  * Fix kernel `prerm.d` for new output in `dkms status`
- Update to version 2.8.6
  * Fix installation of configuration files
  * Use more condensed output for commands, print when invoking
    the signing hook
- Update to version 2.8.5
  * Simplify function for correct kernel using the modules folder
    and not the configuration files in /boot.
  * Simplify function to detect newer kernels</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1683979200">- Fix various bugs in dkms.systemd (boo#1194723)
- Rename /etc/kernel/install.d/dkms to 40-dkms.install (boo#1194723)
- Add patch `fix-kernel-postinst_d.patch`:
  * Fix path to dkms_autoinstaller (boo#1194723)
- Add patch `fix-weak-modules_dkms_in.patch`:
  * Remove '--no-initrams' from weak_modules_no_initrd
    (boo#1194723)
- Add `40-dkms.install` into /usr/lib/kernel/install.d
- Update to 3.0.11
  * Fix updating modules with no version
  * Reinstate NO_WEAK_MODULES section in man
  * Skip module signing when hash is unknown
  * Reinstate --enroll-key
  * Add BUILD_EXCLUSIVE_CONFIG
  * Misc fixes
- Update to 3.0.10
  * Fix warnings for modules with no version
  * Fix modprobe_on_install not being honored in the config file
- Update to 3.0.9
  * Support variable expansion in framework files
  * Fix --config option
  * Verify the key of module signature in tests
  * Handle error cases in autoinstall
  * Follow the target kernel's module hash algorithm
  * Fix incomplete deletion of install directory
  * Correct searching for rpm in PATH
  * Ensure the kconfig file location is set during building
  * Fix the search for the path of installed modules
  * Use exact compiler for dkms as used to build the kernel
- Update to 3.0.8
  * Fix using PKCS#11 engine as private key
- Update to 3.0.7
  * Bad substitution bugfix
  * Update dkms.in to passthrough URI to sign-file
  * Fix commands detecting
- Update to 3.0.6
  * Fix typo in dkms_framework.conf
  * Look for sign-file regardless
- Update to 3.0.5
  * Put version comparison before info comparison
  * Fix typo in commented defaults
- Update to 3.0.4
  * Respect PATH
  * Fallback to uncompressed module when compress fails
  * Rework signing
  * Add /etc/dkms/framework.conf.d directory
- Update to 3.0.3
  * Fix source only tarballs unpacked with ldtarball
- Update to 3.0.2
  * Enable using add, build and install with a directory again
  * Fix Linux distribution identification through /etc/os-release
- Update to 3.0.1
  * Silently consume the old --no-initrd option
  * Fix creation of temp build dir
- Update to 3.0.0
  * Clarify --all switch in the man page
  * Fix root permissions checking for the various possible actions
  * The following variables have been deprecated:
  - REMAKE_INITRD, MODULES_CONF, MODULES_CONF_OBSOLETES,
    MODULES_CONF_ALIAS_TYPE, and MODULES_CONF_OBSOLETE_ONLY
  * Misc fixes</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1694952000">- Drop custom dkms.service in favour of the one provided by
  upstream</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1698408000">- Update to 3.0.12
  * Fix CC detection
  * Makefile: fix extension of kernel-install plugin
  * Fix grammatical error
  * Remove embedded DESTDIR in make variables, honour them
- Drop patch `fix-kernel-postinst_d.patch` (fixed by upstream)
- Remove leftover dkms.default</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1709812800">- Update to 3.0.13
  * New dkms status adjective broken
  * Allow overriding the /lib/modules directory
  * Adjust kernel module compression, compatible with the in-kernel decompressors
- Add dkms-bash-completion sub-package
- Add dkms-zsh-completion sub-package</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1730030400">- Update to 3.1.0
  * New more condensed output for most of the tasks
  * Allow running the MOK certificate generation as a standalone
    command (Nvidia / Gnome Software integration)
  * Install kernel-install drop-in to /usr/lib instead of /etc
  * Remove modules.weakdep as part of the cleanup
  * Allow setting the maximum number of parallel jobs in
    /etc/dkms/framework.conf
- Update to 3.1.1
  * Remove last remnants of log_action_msg from
    dkms_autoinstaller.in
  * Drop GNU/kFreeBSD
  * Move local to one var per line and init on seperate line
  * Do not print "terminated" message (issue #450)
  * Update tests
  * Fix passing multiple kernel versions</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1733659200">- Update to 3.1.2
  * Fix building nvidia open kernel modules against clang and
    thin/full lto compiled kernel
  * Fix issue with stripped vmlinux
  * Allow configuring compression settings
  * Better output and misc fixes
- Update to 3.1.3
  * Print messages for user feedback only once
  * Keep the Module.symvers file along with the module files if
    it exists
- Do not install dkms_autoinstaller into libexec and scriptlets
  into `/etc/kernel`: follow the "redhat" installation procedure
  instead of the "debian" one</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1743076800">- Update to 3.1.4
  * Install again common.postinst for install-redhat
  * Check for include/config/auto.conf by default in place of
    .config
  * Move kernel_prerm.d logic into dkms
- Update to 3.1.5
  * Fix capture error output
  * Ensure autoinstall reads /etc/dkms/$module.conf
  * Improve output formatting
  * log more in make.log
  * Set compression levels to upstream defaults
  * Various fixes for weak modules and SUSE
- Update to 3.1.6
  * Report kernel module signing errors to prevent silent failures
- Drop fix-weak-modules_dkms_in.patch since it is not necessary
  anymore</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1747224000">- Update to 3.1.7
  * Add codeSigning EKU to generated MOK
  * Various fixes:
  - Record location of archived original modules and restore them
    there
  - Support AUTOINSTALL="no"
  - Do not clean the clean build tree before building the module
  - Error out on dkms.conf containing duplicate module
    definitions
  - common.postinst: run with the same verbosity as autoinstall
  - Add more sanity checks
  - Make some error messages more informative</changelog>
</package>
<package pkgid="9e4ba3b03fcc2b2efd0e1ae4320849f38c65ba1bcd924b8bbf5573992349bc72ef89a0d6cc9348be6142f1f391e15557b06c52f2318f047a5f85a186d96448af" name="dkms-zsh-completion" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="bp160.1.3"/>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1623153600">- Update to version 2.8.4
  * New kernel_install.d_dkms and sign_helper.sh scripts under /etc
  * Fix support for /etc/sysconfig/kernel directory.
  * Improve test dkms.conf file.
  * Add support for zstd compressed modules.
  * Document NO_WEAK_MODULES in the man page.
  * Be more verbose when failing due to missing module.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1674129600">- Update to version 2.8.8
  * Drop old kernel 2.x checks
  * Drop modules.conf handling
  * Fix kernel removing.
- Update to version 2.8.7
  * Fix kernel `prerm.d` for new output in `dkms status`
- Update to version 2.8.6
  * Fix installation of configuration files
  * Use more condensed output for commands, print when invoking
    the signing hook
- Update to version 2.8.5
  * Simplify function for correct kernel using the modules folder
    and not the configuration files in /boot.
  * Simplify function to detect newer kernels</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1683979200">- Fix various bugs in dkms.systemd (boo#1194723)
- Rename /etc/kernel/install.d/dkms to 40-dkms.install (boo#1194723)
- Add patch `fix-kernel-postinst_d.patch`:
  * Fix path to dkms_autoinstaller (boo#1194723)
- Add patch `fix-weak-modules_dkms_in.patch`:
  * Remove '--no-initrams' from weak_modules_no_initrd
    (boo#1194723)
- Add `40-dkms.install` into /usr/lib/kernel/install.d
- Update to 3.0.11
  * Fix updating modules with no version
  * Reinstate NO_WEAK_MODULES section in man
  * Skip module signing when hash is unknown
  * Reinstate --enroll-key
  * Add BUILD_EXCLUSIVE_CONFIG
  * Misc fixes
- Update to 3.0.10
  * Fix warnings for modules with no version
  * Fix modprobe_on_install not being honored in the config file
- Update to 3.0.9
  * Support variable expansion in framework files
  * Fix --config option
  * Verify the key of module signature in tests
  * Handle error cases in autoinstall
  * Follow the target kernel's module hash algorithm
  * Fix incomplete deletion of install directory
  * Correct searching for rpm in PATH
  * Ensure the kconfig file location is set during building
  * Fix the search for the path of installed modules
  * Use exact compiler for dkms as used to build the kernel
- Update to 3.0.8
  * Fix using PKCS#11 engine as private key
- Update to 3.0.7
  * Bad substitution bugfix
  * Update dkms.in to passthrough URI to sign-file
  * Fix commands detecting
- Update to 3.0.6
  * Fix typo in dkms_framework.conf
  * Look for sign-file regardless
- Update to 3.0.5
  * Put version comparison before info comparison
  * Fix typo in commented defaults
- Update to 3.0.4
  * Respect PATH
  * Fallback to uncompressed module when compress fails
  * Rework signing
  * Add /etc/dkms/framework.conf.d directory
- Update to 3.0.3
  * Fix source only tarballs unpacked with ldtarball
- Update to 3.0.2
  * Enable using add, build and install with a directory again
  * Fix Linux distribution identification through /etc/os-release
- Update to 3.0.1
  * Silently consume the old --no-initrd option
  * Fix creation of temp build dir
- Update to 3.0.0
  * Clarify --all switch in the man page
  * Fix root permissions checking for the various possible actions
  * The following variables have been deprecated:
  - REMAKE_INITRD, MODULES_CONF, MODULES_CONF_OBSOLETES,
    MODULES_CONF_ALIAS_TYPE, and MODULES_CONF_OBSOLETE_ONLY
  * Misc fixes</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1694952000">- Drop custom dkms.service in favour of the one provided by
  upstream</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1698408000">- Update to 3.0.12
  * Fix CC detection
  * Makefile: fix extension of kernel-install plugin
  * Fix grammatical error
  * Remove embedded DESTDIR in make variables, honour them
- Drop patch `fix-kernel-postinst_d.patch` (fixed by upstream)
- Remove leftover dkms.default</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1709812800">- Update to 3.0.13
  * New dkms status adjective broken
  * Allow overriding the /lib/modules directory
  * Adjust kernel module compression, compatible with the in-kernel decompressors
- Add dkms-bash-completion sub-package
- Add dkms-zsh-completion sub-package</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1730030400">- Update to 3.1.0
  * New more condensed output for most of the tasks
  * Allow running the MOK certificate generation as a standalone
    command (Nvidia / Gnome Software integration)
  * Install kernel-install drop-in to /usr/lib instead of /etc
  * Remove modules.weakdep as part of the cleanup
  * Allow setting the maximum number of parallel jobs in
    /etc/dkms/framework.conf
- Update to 3.1.1
  * Remove last remnants of log_action_msg from
    dkms_autoinstaller.in
  * Drop GNU/kFreeBSD
  * Move local to one var per line and init on seperate line
  * Do not print "terminated" message (issue #450)
  * Update tests
  * Fix passing multiple kernel versions</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1733659200">- Update to 3.1.2
  * Fix building nvidia open kernel modules against clang and
    thin/full lto compiled kernel
  * Fix issue with stripped vmlinux
  * Allow configuring compression settings
  * Better output and misc fixes
- Update to 3.1.3
  * Print messages for user feedback only once
  * Keep the Module.symvers file along with the module files if
    it exists
- Do not install dkms_autoinstaller into libexec and scriptlets
  into `/etc/kernel`: follow the "redhat" installation procedure
  instead of the "debian" one</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1743076800">- Update to 3.1.4
  * Install again common.postinst for install-redhat
  * Check for include/config/auto.conf by default in place of
    .config
  * Move kernel_prerm.d logic into dkms
- Update to 3.1.5
  * Fix capture error output
  * Ensure autoinstall reads /etc/dkms/$module.conf
  * Improve output formatting
  * log more in make.log
  * Set compression levels to upstream defaults
  * Various fixes for weak modules and SUSE
- Update to 3.1.6
  * Report kernel module signing errors to prevent silent failures
- Drop fix-weak-modules_dkms_in.patch since it is not necessary
  anymore</changelog>
  <changelog author="Alexandru Gabriel Bradatan &lt;alex.bradatan85@yahoo.it&gt;" date="1747224000">- Update to 3.1.7
  * Add codeSigning EKU to generated MOK
  * Various fixes:
  - Record location of archived original modules and restore them
    there
  - Support AUTOINSTALL="no"
  - Do not clean the clean build tree before building the module
  - Error out on dkms.conf containing duplicate module
    definitions
  - common.postinst: run with the same verbosity as autoinstall
  - Add more sanity checks
  - Make some error messages more informative</changelog>
</package>
<package pkgid="c3e069e93723550c810d162d62629668decb9a0c6d680c996fd0c77fa8e505758a645f873c39bfb6eb5e207cf0a7b94516fe6b4392535022c2f05d4357211cfc" name="dlib-devel" arch="x86_64">
  <version epoch="0" ver="19.24.6" rel="bp160.1.13"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713441600">- Initial package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1713700800">- Consistently set USE_AVX_INSTRUCTIONS to ON for x86_64 archs and
  to OFF for others for reproducibility (boo#1223168).
- Switch to older python_build, python_install macros since the
  pyproject_* macros do not allow a way to send the necessary
  options to cmake (using `python setup --no USE_FOO`).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1722600000">- Update to version 19.24.5:
  * No release notes.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1723809600">- Update to version 19.24.6:
  * Add ffmpeg 7 support.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1727870400">- add more Requires to -devel (now listing all from
  /usr/lib64/pkgconfig/dlib-1.pc)</changelog>
</package>
<package pkgid="82328973bacf85145f12d328ab3c12e75ef46454277e16db80510e323f1b12f8b0ba47dad964f90f471d7195fb3dd49b300a0f3b9b386c80d3b667d8afba63d7" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.2.2"/>
  <changelog author="jgross@suse.com" date="1752840000">- vsock/vmci: Clear the vmci transport packet properly when
  initializing it (git-fixes).
- commit ec91da1</changelog>
  <changelog author="jgross@suse.com" date="1752926400">- vsock: Fix transport_{g2h,h2g} TOCTOU (git-fixes).
- commit 3024c81</changelog>
  <changelog author="jgross@suse.com" date="1752926401">- vsock: Fix transport_* TOCTOU (git-fixes).
- commit 704674f</changelog>
  <changelog author="jgross@suse.com" date="1752926402">- vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also
  `transport_local` (git-fixes).
- commit 615e0f1</changelog>
  <changelog author="jgross@suse.com" date="1752926403">- virtio-net: fix recursived rtnl_lock() during probe()
  (git-fixes).
- commit 0bc7aff</changelog>
  <changelog author="tiwai@suse.de" date="1753012800">- hwmon: (corsair-cpro) Validate the size of the received input
  buffer (git-fixes).
- drm/mediatek: only announce AFBC if really supported
  (git-fixes).
- drm/mediatek: Add wait_event_timeout when disabling plane
  (git-fixes).
- drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
  (git-fixes).
- drm/nouveau: check ioctl command codes better (git-fixes).
- soundwire: amd: fix for clearing command status register
  (git-fixes).
- dmaengine: nbpfaxi: Fix memory corruption in probe()
  (git-fixes).
- phy: tegra: xusb: Fix unbalanced regulator disable in UTMI
  PHY mode (git-fixes).
- memstick: core: Zero initialize id_reg in
  h_memstick_read_dev_id() (git-fixes).
- mmc: bcm2835: Fix dma_unmap_sg() nents value (git-fixes).
- mmc: sdhci_am654: Workaround for Errata i2312 (git-fixes).
- mmc: sdhci-pci: Quirk for broken command queuing on Intel
  GLK-based Positivo models (git-fixes).
- commit f4e7d99</changelog>
  <changelog author="tiwai@suse.de" date="1753099200">- i2c: stm32f7: unmap DMA mapped buffer (git-fixes).
- i2c: stm32: fix the device used for the DMA map (git-fixes).
- usb: hub: Don't try to recover devices lost during warm reset
  (git-fixes).
- usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY
  (git-fixes).
- usb: musb: fix gadget state on disconnect (git-fixes).
- thunderbolt: Fix bit masking in tb_dp_port_set_hops()
  (git-fixes).
- thunderbolt: Fix wake on connect at runtime (git-fixes).
- pch_uart: Fix dma_sync_sg_for_device() nents value (git-fixes).
- serial: core: fix OF node leak (git-fixes).
- comedi: Fix initialization of data for instructions that write
  to subdevice (git-fixes).
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  (git-fixes).
- comedi: das6402: Fix bit shift out of bounds (git-fixes).
- comedi: aio_iiro_16: Fix bit shift out of bounds (git-fixes).
- comedi: pcl812: Fix bit shift out of bounds (git-fixes).
- comedi: das16m1: Fix bit shift out of bounds (git-fixes).
- comedi: Fix some signed shift left operations (git-fixes).
- comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
  (git-fixes).
- interconnect: icc-clk: destroy nodes in case of memory
  allocation failures (git-fixes).
- interconnect: exynos: handle node name allocation failure
  (git-fixes).
- interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1
  node (git-fixes).
- iio: adc: ad7949: use spi_is_bpw_supported() (git-fixes).
- iio: accel: fxls8962af: Fix use after free in
  fxls8962af_fifo_flush (git-fixes).
- iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC
  channel maps (git-fixes).
- iio: adc: stm32-adc: Fix race in installing chained IRQ handler
  (git-fixes).
- iio: backend: fix out-of-bound write (git-fixes).
- spi: Add check for 8-bit transfer with 8 IO mode support
  (git-fixes).
- regmap: fix potential memory leak of regmap_bus (git-fixes).
- Input: xpad - set correct controller type for Acer NGR200
  (git-fixes).
- commit efa1e54</changelog>
  <changelog author="ohering@suse.de" date="1753099201">- tools/hv: fcopy: Fix irregularities with size of ring buffer
  (git-fixes).
- PCI: hv: Use the correct hypercall for unmasking interrupts
  on nested (git-fixes).
- x86/hyperv: Expose hv_map_msi_interrupt() (git-fixes).
- Drivers: hv: Use nested hypercall for post message and signal
  event (git-fixes).
- x86/hyperv: Clean up hv_map/unmap_interrupt() return values
  (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
  (git-fixes).
- PCI: hv: Don't load the driver for baremetal root partition
  (git-fixes).
- net: mana: Fix warnings for missing export.h header inclusion
  (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header
  inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- Drivers: hv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR
  (git-fixes).
- tools/hv: fcopy: Fix incorrect file path conversion (git-fixes).
- Drivers: hv: Select CONFIG_SYSFB only if EFI is enabled
  (git-fixes).
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open
  to prevent IPv6 addrconf (git-fixes).
- commit 6fce57d</changelog>
  <changelog author="tiwai@suse.de" date="1753099202">- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  (CVE-2025-38250 bsc#1246182).
- commit 7979f02</changelog>
  <changelog author="tiwai@suse.de" date="1753099203">- kABI workaround for bluetooth hci_dev changes (CVE-2025-38250
  bsc#1246182).
- commit 9363e74</changelog>
</package>
<package pkgid="de5a6bff4bd8d58cb8d9c471d9e7531d83223f3b31e71dba74a374c1deb60bb42140f0203425c07a7b9424f81b00e88cb140d6d124a8bff304c4806c7bcf6121" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.26.1"/>
  <changelog author="msuchanek@suse.de" date="1770120000">- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5</changelog>
  <changelog author="msuchanek@suse.de" date="1770120001">- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b</changelog>
  <changelog author="wqu@suse.com" date="1770206400">- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b</changelog>
  <changelog author="jgross@suse.com" date="1770206401">- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d</changelog>
  <changelog author="tiwai@suse.de" date="1770206402">- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7</changelog>
  <changelog author="jgross@suse.com" date="1770206403">- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91</changelog>
  <changelog author="jgross@suse.com" date="1770206404">- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8</changelog>
  <changelog author="jgross@suse.com" date="1770206405">- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb</changelog>
  <changelog author="jgross@suse.com" date="1770206406">- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e</changelog>
  <changelog author="sjaeckel@suse.de" date="1770206407">- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef</changelog>
</package>
<package pkgid="87777595a21e3b70041493622f9c171028264952b48b1c143ffafeb31a8d975dfffb7c74e0e72f6b75a1c9ea9dd473a80bbc1ede1f4f65b392b96449c2864a85" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1"/>
  <changelog author="petr.pavlu@suse.com" date="1772798400">- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09</changelog>
  <changelog author="tiwai@suse.de" date="1772884800">- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327</changelog>
  <changelog author="tiwai@suse.de" date="1772971200">- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773057600">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613</changelog>
  <changelog author="iivanov@suse.de" date="1773057601">- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21</changelog>
  <changelog author="wqu@suse.com" date="1773057602">- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61</changelog>
  <changelog author="ohering@suse.de" date="1773057603">- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057604">- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d</changelog>
  <changelog author="mwilck@suse.com" date="1773057605">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea</changelog>
  <changelog author="mwilck@suse.com" date="1773057606">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6</changelog>
</package>
<package pkgid="8aa40ace19f982a1f5b6bd5545522cd65e3e7cbded36aed8466201f6993a87bbdb0973598f6982ebd19c57295615a757480e43f3cffe035ef4c64e2fb8656345" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="a9494a6ef0de672a271d3c5ec325e4d68c92d6ff17761af0b91bfdd8fc70d7c5c9bf80e503ead378bf0ed8dfb8dba2fe2600f7e57fcde3d0c176a1de2ca3abce" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.29.1"/>
  <changelog author="pfalcato@suse.de" date="1775649600">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573 CVE-2026-31431).
- commit 429a54b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
</package>
<package pkgid="856f513b147e6cd3ac49b48600e8cac494f3212ecdc245b5bfe53b0d594500429f65829c69630ed3b1cd5469dbca5cb1cf47122b93c014a189f62183661ecf67" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.30.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
</package>
<package pkgid="8ca974adb13eb0d8892961e5ff3ff80c2a6213e4cc489da221e84fd3b94832fdc69cc286552808796a769906708bc0349045a3021eaeff7e98fdec906707b153" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.31.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
</package>
<package pkgid="210e950b1c024c660eb2b82a2bf2d5e69bf7dd3d6a3b9844e5eebd3eb8c33d0bec3b082561e29ae4f09e28d4ddedcaad927c4a58c4cb6b9d2888369494a9632e" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.32.1"/>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit f8f4ca2</changelog>
</package>
<package pkgid="003f8f611c3945b89f10503e331c337e54c8e089b4a5fa76405dd1426ebaee9cf77e0b36efd941231823b7446b263794d2f25837140a8258c10e36fbd5525e7a" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.33.1"/>
  <changelog author="tiwai@suse.de" date="1779278400">- drivers/base/memory: fix memory block reference leak in poison
  accounting (git-fixes).
- commit c0de598</changelog>
  <changelog author="tonyj@suse.de" date="1779278401">- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
  race (bsc#1260018 CVE-2026-23271).
- commit 1c3b58a</changelog>
  <changelog author="msuchanek@suse.de" date="1779364800">- Kernel-binary: Do not truncate vmlinux when it's the boot image
  Some architectures use vmlinux to boot. Truncating vmlinux on those
  architectures causes signing failure during build. Also if the signing
  was disabled a brokne kernel would be produced.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603</changelog>
  <changelog author="ohering@suse.de" date="1779364801">- net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
- net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
- net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
- net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Validate rx_hash_key_len (git-fixes).
- hv_sock: fix ARM64 support (git-fixes).
- mshv: Fix error handling in mshv_region_pin (CVE-2026-43045 bsc#1263942).
- mshv: Refactor and rename memory region handling functions (CVE-2026-43045 bsc#1263942).
- commit 6cbd7cb</changelog>
  <changelog author="ykaukab@suse.de" date="1779364802">- Refresh
  patches.suse/io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch.
- commit 033df25</changelog>
  <changelog author="alnovak@suse.com" date="1779364803">- scsi: target: iscsi: validate CHAP_R length before base64 decode
  (bsc#1265449).
- commit 04f607e</changelog>
  <changelog author="msuchanek@suse.de" date="1779364804">- kernel-binary: Only apply vmlinux workaround on SLE15 and later
  To create debuginfo for vmlinux the file needs to be present even if
  it's not packaged because a compressed file is packaged insteand.
  To accomplish that the file is marked as ghost in the file list. Then
  rpm does not complain that the file exists but does not package it.
  However, rpm still reserves space for ghost files when installing a
  package. To avoid reserving space for a file that is not used the file
  is truncated.
  That works on SLE 15 but on SLE 12 rpm then fails packaging the
  debuginfo complaiing that extra debuginfo files are present. Limit the
  workaround to SLE 15 and later.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451</changelog>
  <changelog author="ykaukab@suse.de" date="1779451200">- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi-assert.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.suse/ptrace-slightly-saner-get_dumpable-logic.patch
  (CVE-2026-46333 bsc#1265308).
- commit 493e3ed</changelog>
  <changelog author="pfalcato@suse.de" date="1779710400">- Revert "net: skbuff: propagate shared-frag marker through pskb_copy()"
  This reverts commit f71c96250de20f4edf1c4beeb9d8b973a9ad6943.
- commit aaf0bdb</changelog>
  <changelog author="pfalcato@suse.de" date="1779710401">- net: gro: don't merge zcopy skbs (git-fixes).
- net: skbuff: propagate shared-frag marker through frag-transfer
  helpers (CVE-2026-43503 bsc#1265960).
- net: skbuff: preserve shared-frag marker during coalescing
  (CVE-2026-46300 bsc#1265209).
- commit 68f8e8b</changelog>
</package>
<package pkgid="ac13902350501d8185d4e6d4fe24b0cff0bdf9e7d3dd64b54fb48d828e9baeeee44cd932fe157d10a7ed7c7be49fa4ab0fe1b8988174b4572c5e3e2dd999e25a" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.34.1"/>
  <changelog author="tiwai@suse.de" date="1780228800">- USB: serial: cypress_m8: validate interrupt packet headers
  (git-fixes).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (git-fixes).
- USB: serial: omninet: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (git-fixes).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (git-fixes).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (git-fixes).
- USB: serial: belkin_sa: validate interrupt status length
  (git-fixes).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (git-fixes).
- usb: dwc2: Fix use after free in debug code (git-fixes).
- usb: chipidea: core: convert ci_role_switch to local variable
  (git-fixes).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (git-fixes).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (git-fixes).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (git-fixes).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (git-fixes).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (git-fixes).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (git-fixes).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (git-fixes).
- usb: gadget: net2280: Fix double free in probe error path
  (git-fixes).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (git-fixes).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (git-fixes).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (git-fixes).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (git-fixes).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (git-fixes).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (git-fixes).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (git-fixes).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (git-fixes).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (git-fixes).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (git-fixes).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (git-fixes).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (git-fixes).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (git-fixes).
- parport: Fix race between port and client registration
  (git-fixes).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (git-fixes).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (git-fixes).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (git-fixes).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (git-fixes).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (git-fixes).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (git-fixes).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (git-fixes).
- iio: dac: ad5686: fix input raw value check (git-fixes).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (git-fixes).
- iio: dac: max5821: fix return value check in powerdown sync
  (git-fixes).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (git-fixes).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (git-fixes).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (git-fixes).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (git-fixes).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (git-fixes).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (git-fixes).
- iio: gyro: adis16260: fix division by zero in write_raw
  (git-fixes).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback
  (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (git-fixes).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (git-fixes).
- drm/i915: Fix potential UAF in TTM object purge (git-fixes).
- commit b935350</changelog>
  <changelog author="wqu@suse.com" date="1780315200">- btrfs: do not mark inode incompressible after inline attempt
  fails (git-fixes).
- commit b9ec6e8</changelog>
  <changelog author="tiwai@suse.de" date="1780315201">- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (git-fixes).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (git-fixes).
- Input: xpad - fix out-of-bounds access for Share button
  (git-fixes).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (git-fixes).
- commit d66e959</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315202">- net: stmmac: Prevent NULL deref when RX memory exhausted
  (CVE-2026-46110 bsc#1266759).
- net: stmmac: rename STMMAC_GET_ENTRY() -&gt; STMMAC_NEXT_ENTRY()
  (CVE-2026-46110 bsc#1266759).
- net/mlx5: Fix switchdev mode rollback in case of failure
  (CVE-2026-43012 bsc#1264016).
- net/mlx5: lag: Check for LAG device before creating debugfs
  (CVE-2026-43013 bsc#1264011).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  (CVE-2026-31736 bsc#1263908).
- commit 5178a8b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315203">- team: avoid NETDEV_CHANGEMTU event when unregistering slave
  (CVE-2026-43234 bsc#1264409).
- commit 0f4d02d</changelog>
  <changelog author="lduncan@suse.com" date="1780315204">- dm: fix a buffer overflow in ioctl processing (git-fixes).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
  (git-fixes).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
  (git-fixes).
- scsi: mpi3mr: Clear reset history on ready and recheck state
  after timeout (git-fixes).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  (git-fixes).
- commit e61e502</changelog>
  <changelog author="ohering@suse.de" date="1780401600">- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- commit 36776be</changelog>
  <changelog author="tiwai@suse.de" date="1780401601">- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (git-fixes).
- security/keys: fix missed RCU read section on lookup
  (stable-fixes).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
  probe (git-fixes).
- drm/amd/display: Validate payload length and link_index in
  dc_process_dmub_aux_transfer_async (stable-fixes).
- drm/amd/display: Validate GPIO pin LUT table size before
  iterating (stable-fixes).
- drm/amd/display: Fix integer overflow in bios_get_image()
  (stable-fixes).
- drm/amdgpu/vpe: Force collaborate sync after TRAP
  (stable-fixes).
- ALSA: asihpi: Fix potential OOB array access at reading cache
  (stable-fixes).
- HID: quirks: really enable the intended work around for
  appledisplay (git-fixes).
- HID: uclogic: Fix regression of input name assignment
  (git-fixes).
- commit 5fdf340</changelog>
  <changelog author="tiwai@suse.de" date="1780401602">- Bluetooth: serialize accept_q access (git-fixes).
- Refresh
  patches.suse/Bluetooth-fix-UAF-in-l2cap_sock_cleanup_listen-vs-l2.patch.
- commit 649e53f</changelog>
  <changelog author="vkarasulli@suse.de" date="1780401603">- Update
  patches.suse/smb-client-reject-userspace-cifs-spnego-descriptions.patch
  (bsc#1266238 CVE-2026-46243).
- commit 9550304</changelog>
</package>
<package pkgid="4698fd6e2eaa32d6769e95d777aefae86d074bcbf6cfca8a1a51972f251b3fe129002a7d6485f1faf1b973336b9af7ff76cd43aff37d0f5417c66283592dbac5" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.35.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780660800">- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (CVE-2026-43026 bsc#1263932).
- commit 8e1a72c</changelog>
  <changelog author="tiwai@suse.de" date="1780920000">- Input: atkbd - skip deactivate for HONOR BCC-N's internal
  keyboard (git-fixes).
- ALSA: seq: dummy: fix UMP event stack overread (git-fixes).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
  on linked streams (git-fixes).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
  (git-fixes).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
  (git-fixes).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
  (git-fixes).
- accel/ivpu: Add bounds checks for firmware log indices
  (git-fixes).
- drm/xe: Clear pending_disable before signaling suspend fence
  (git-fixes).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
  on GFX11 (git-fixes).
- drm/amdkfd: fix NULL dereference in get_queue_ids() (git-fixes).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  (git-fixes).
- drm/amd/display: Reject gpio_bitshift &gt;= 32 in
  bios_parser_get_gpio_pin_info() (git-fixes).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
  (git-fixes).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
  debugfs (git-fixes).
- commit 83128fd</changelog>
  <changelog author="tiwai@suse.de" date="1780920001">- drm/amd/display: Bound VBIOS record-chain walk loops
  (git-fixes).
- commit ec5fd83</changelog>
  <changelog author="iivanov@suse.de" date="1780920002">- perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415 CVE-2026-43150)
- commit 100fc92</changelog>
  <changelog author="tiwai@suse.de" date="1780920003">- ALSA: aloop: Fix peer runtime UAF during format-change stop
  (CVE-2026-46090 bsc#1267531).
- ALSA: aloop: Use guard() for spin locks (CVE-2026-46090
  bsc#1267531).
- commit fedd5b0</changelog>
  <changelog author="jgross@suse.com" date="1780920004">- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (git-fixes).
- commit 02c6192</changelog>
  <changelog author="jgross@suse.com" date="1780920005">- KVM: arm64: Reassign nested_mmus array behind mmu_lock (git-fixes).
- commit e33b225</changelog>
  <changelog author="jgross@suse.com" date="1780920006">- KVM: arm64: Take the SRCU lock for page table walks in fault
  injection and AT emulation (git-fixes).
- commit b3cd8ff</changelog>
  <changelog author="ykaukab@suse.de" date="1780920007">- config: remove DEBUG_FS_DISALLOW_MOUNT
  DEBUG_FS_DISALLOW_MOUNT was removed by the following SUSE commit:
  5697d6916a00 debugfs: Remove broken no-mount mode (bsc#1265186)
  Clean up config files by deleting CONFIG_DEBUG_FS_DISALLOW_MOUNT
- commit 3cc7250</changelog>
  <changelog author="vkarasulli@suse.de" date="1781092800">- Update
  patches.suse/KVM-arm64-Reassign-nested_mmus-array-behind-mmu_lock.patch
  (git-fixes CVE-2026-46317 bsc#1268018).
- Update
  patches.suse/KVM-arm64-vgic-its-Drop-the-translation-cache-refere.patch
  (git-fixes CVE-2026-46316 bsc#1267875).
- commit c70d539</changelog>
</package>
<package pkgid="3c39bf059498917618eec042dd8b440e5c93dcdf5f7f306a4710bb89567030fea14140a3739f612c56d37ea16563a07c62fa1842c0bf57b4b2e7a2d74df368e1" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.9.1"/>
  <changelog author="jslaby@suse.cz" date="1768478400">- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b</changelog>
  <changelog author="jslaby@suse.cz" date="1768478401">- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b</changelog>
  <changelog author="nmorey@suse.com" date="1768478402">- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234</changelog>
  <changelog author="mkoutny@suse.com" date="1768478403">- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478404">- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478405">- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478406">- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478407">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27</changelog>
  <changelog author="tiwai@suse.de" date="1768564800">- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b</changelog>
  <changelog author="vkarasulli@suse.de" date="1768564801">- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9</changelog>
</package>
<package pkgid="adabd39edd0e6499e8da26b3f2d491f3dbce482d5ae1d0b485c57475bdb683ab63ac53801ea2ddc632cd40b8436092dcb7c7d275b5b9a5916f8b3657d2b9f84b" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.26.1"/>
  <changelog author="msuchanek@suse.de" date="1770120000">- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5</changelog>
  <changelog author="msuchanek@suse.de" date="1770120001">- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b</changelog>
  <changelog author="wqu@suse.com" date="1770206400">- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b</changelog>
  <changelog author="jgross@suse.com" date="1770206401">- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d</changelog>
  <changelog author="tiwai@suse.de" date="1770206402">- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7</changelog>
  <changelog author="jgross@suse.com" date="1770206403">- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91</changelog>
  <changelog author="jgross@suse.com" date="1770206404">- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8</changelog>
  <changelog author="jgross@suse.com" date="1770206405">- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb</changelog>
  <changelog author="jgross@suse.com" date="1770206406">- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e</changelog>
  <changelog author="sjaeckel@suse.de" date="1770206407">- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef</changelog>
</package>
<package pkgid="4744704232283c53ab3cb1e707646ebaf0bfd647a7aee1c6d51ae475b8fa357f38c24e5dd0df3bd4688ac91ce2286993288a0d3944d1ac19f9786236843006af" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1"/>
  <changelog author="petr.pavlu@suse.com" date="1772798400">- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09</changelog>
  <changelog author="tiwai@suse.de" date="1772884800">- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327</changelog>
  <changelog author="tiwai@suse.de" date="1772971200">- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773057600">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613</changelog>
  <changelog author="iivanov@suse.de" date="1773057601">- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21</changelog>
  <changelog author="wqu@suse.com" date="1773057602">- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61</changelog>
  <changelog author="ohering@suse.de" date="1773057603">- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057604">- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d</changelog>
  <changelog author="mwilck@suse.com" date="1773057605">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea</changelog>
  <changelog author="mwilck@suse.com" date="1773057606">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6</changelog>
</package>
<package pkgid="73586b8fe6dfc0b7e899193339a5d7fbc7fe146cc106ac51e570d2c99fec95eb139d20087d1240084d264b81fc751994ff48e64e74c194b33e70583aa68c1521" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="f066e26a01667432b129f8710942d2b2c44021a5f81b4b15f968975c2b067b52e619b2f12444e14efc64559c630ffd8ca931055ac92b052120d4b7cbae616f94" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.29.1"/>
  <changelog author="pfalcato@suse.de" date="1775649600">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573 CVE-2026-31431).
- commit 429a54b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
</package>
<package pkgid="5f8bcccc80bd72ca4c63a4e15ca26fd58a245faf5dee4a311e25e6785d046f3cfc9f52fc8e4e9cd35e294c83f3955a03b1a160e4c5b906fb41d318e7836c151a" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.30.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
</package>
<package pkgid="faa0abb4d4e42361377cc31480b1ff92ac13dff9b14c82f479dea76c665d871d8f184df1a298129aeeb3ea28c2c9ce3cbbe60d2fd5160fb6df5a613d3f173d47" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.31.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
</package>
<package pkgid="d2eab0420b2a6e8331f43461dbd757243e26616cf97dff31f8c68640dc2c99d46d5fd8c58fce6d2a7825b9c690b73601121f629f6cfd54fad4efa146bfeca4c8" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.32.1"/>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit f8f4ca2</changelog>
</package>
<package pkgid="1811a0e5cde9ec0603785e7dc3af48956ccc79c673ffdd12e6723227f051fc7235a883bceb3e2900157595fe49f4b77ff00ad1eb178302d75d8af5231ce90352" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.33.1"/>
  <changelog author="tiwai@suse.de" date="1779278400">- drivers/base/memory: fix memory block reference leak in poison
  accounting (git-fixes).
- commit c0de598</changelog>
  <changelog author="tonyj@suse.de" date="1779278401">- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
  race (bsc#1260018 CVE-2026-23271).
- commit 1c3b58a</changelog>
  <changelog author="msuchanek@suse.de" date="1779364800">- Kernel-binary: Do not truncate vmlinux when it's the boot image
  Some architectures use vmlinux to boot. Truncating vmlinux on those
  architectures causes signing failure during build. Also if the signing
  was disabled a brokne kernel would be produced.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603</changelog>
  <changelog author="ohering@suse.de" date="1779364801">- net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
- net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
- net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
- net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Validate rx_hash_key_len (git-fixes).
- hv_sock: fix ARM64 support (git-fixes).
- mshv: Fix error handling in mshv_region_pin (CVE-2026-43045 bsc#1263942).
- mshv: Refactor and rename memory region handling functions (CVE-2026-43045 bsc#1263942).
- commit 6cbd7cb</changelog>
  <changelog author="ykaukab@suse.de" date="1779364802">- Refresh
  patches.suse/io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch.
- commit 033df25</changelog>
  <changelog author="alnovak@suse.com" date="1779364803">- scsi: target: iscsi: validate CHAP_R length before base64 decode
  (bsc#1265449).
- commit 04f607e</changelog>
  <changelog author="msuchanek@suse.de" date="1779364804">- kernel-binary: Only apply vmlinux workaround on SLE15 and later
  To create debuginfo for vmlinux the file needs to be present even if
  it's not packaged because a compressed file is packaged insteand.
  To accomplish that the file is marked as ghost in the file list. Then
  rpm does not complain that the file exists but does not package it.
  However, rpm still reserves space for ghost files when installing a
  package. To avoid reserving space for a file that is not used the file
  is truncated.
  That works on SLE 15 but on SLE 12 rpm then fails packaging the
  debuginfo complaiing that extra debuginfo files are present. Limit the
  workaround to SLE 15 and later.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451</changelog>
  <changelog author="ykaukab@suse.de" date="1779451200">- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi-assert.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.suse/ptrace-slightly-saner-get_dumpable-logic.patch
  (CVE-2026-46333 bsc#1265308).
- commit 493e3ed</changelog>
  <changelog author="pfalcato@suse.de" date="1779710400">- Revert "net: skbuff: propagate shared-frag marker through pskb_copy()"
  This reverts commit f71c96250de20f4edf1c4beeb9d8b973a9ad6943.
- commit aaf0bdb</changelog>
  <changelog author="pfalcato@suse.de" date="1779710401">- net: gro: don't merge zcopy skbs (git-fixes).
- net: skbuff: propagate shared-frag marker through frag-transfer
  helpers (CVE-2026-43503 bsc#1265960).
- net: skbuff: preserve shared-frag marker during coalescing
  (CVE-2026-46300 bsc#1265209).
- commit 68f8e8b</changelog>
</package>
<package pkgid="900ef9261bb8d4ad568f2d3be20ff479deb4117fd503cecebf54a1b422c937588ca5b4ee1480f4687fd47780e599bea9144164fbfd5f2853856500c666ed2c5b" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.34.1"/>
  <changelog author="tiwai@suse.de" date="1780228800">- USB: serial: cypress_m8: validate interrupt packet headers
  (git-fixes).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (git-fixes).
- USB: serial: omninet: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (git-fixes).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (git-fixes).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (git-fixes).
- USB: serial: belkin_sa: validate interrupt status length
  (git-fixes).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (git-fixes).
- usb: dwc2: Fix use after free in debug code (git-fixes).
- usb: chipidea: core: convert ci_role_switch to local variable
  (git-fixes).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (git-fixes).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (git-fixes).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (git-fixes).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (git-fixes).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (git-fixes).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (git-fixes).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (git-fixes).
- usb: gadget: net2280: Fix double free in probe error path
  (git-fixes).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (git-fixes).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (git-fixes).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (git-fixes).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (git-fixes).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (git-fixes).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (git-fixes).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (git-fixes).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (git-fixes).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (git-fixes).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (git-fixes).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (git-fixes).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (git-fixes).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (git-fixes).
- parport: Fix race between port and client registration
  (git-fixes).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (git-fixes).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (git-fixes).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (git-fixes).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (git-fixes).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (git-fixes).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (git-fixes).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (git-fixes).
- iio: dac: ad5686: fix input raw value check (git-fixes).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (git-fixes).
- iio: dac: max5821: fix return value check in powerdown sync
  (git-fixes).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (git-fixes).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (git-fixes).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (git-fixes).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (git-fixes).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (git-fixes).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (git-fixes).
- iio: gyro: adis16260: fix division by zero in write_raw
  (git-fixes).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback
  (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (git-fixes).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (git-fixes).
- drm/i915: Fix potential UAF in TTM object purge (git-fixes).
- commit b935350</changelog>
  <changelog author="wqu@suse.com" date="1780315200">- btrfs: do not mark inode incompressible after inline attempt
  fails (git-fixes).
- commit b9ec6e8</changelog>
  <changelog author="tiwai@suse.de" date="1780315201">- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (git-fixes).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (git-fixes).
- Input: xpad - fix out-of-bounds access for Share button
  (git-fixes).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (git-fixes).
- commit d66e959</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315202">- net: stmmac: Prevent NULL deref when RX memory exhausted
  (CVE-2026-46110 bsc#1266759).
- net: stmmac: rename STMMAC_GET_ENTRY() -&gt; STMMAC_NEXT_ENTRY()
  (CVE-2026-46110 bsc#1266759).
- net/mlx5: Fix switchdev mode rollback in case of failure
  (CVE-2026-43012 bsc#1264016).
- net/mlx5: lag: Check for LAG device before creating debugfs
  (CVE-2026-43013 bsc#1264011).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  (CVE-2026-31736 bsc#1263908).
- commit 5178a8b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315203">- team: avoid NETDEV_CHANGEMTU event when unregistering slave
  (CVE-2026-43234 bsc#1264409).
- commit 0f4d02d</changelog>
  <changelog author="lduncan@suse.com" date="1780315204">- dm: fix a buffer overflow in ioctl processing (git-fixes).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
  (git-fixes).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
  (git-fixes).
- scsi: mpi3mr: Clear reset history on ready and recheck state
  after timeout (git-fixes).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  (git-fixes).
- commit e61e502</changelog>
  <changelog author="ohering@suse.de" date="1780401600">- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- commit 36776be</changelog>
  <changelog author="tiwai@suse.de" date="1780401601">- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (git-fixes).
- security/keys: fix missed RCU read section on lookup
  (stable-fixes).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
  probe (git-fixes).
- drm/amd/display: Validate payload length and link_index in
  dc_process_dmub_aux_transfer_async (stable-fixes).
- drm/amd/display: Validate GPIO pin LUT table size before
  iterating (stable-fixes).
- drm/amd/display: Fix integer overflow in bios_get_image()
  (stable-fixes).
- drm/amdgpu/vpe: Force collaborate sync after TRAP
  (stable-fixes).
- ALSA: asihpi: Fix potential OOB array access at reading cache
  (stable-fixes).
- HID: quirks: really enable the intended work around for
  appledisplay (git-fixes).
- HID: uclogic: Fix regression of input name assignment
  (git-fixes).
- commit 5fdf340</changelog>
  <changelog author="tiwai@suse.de" date="1780401602">- Bluetooth: serialize accept_q access (git-fixes).
- Refresh
  patches.suse/Bluetooth-fix-UAF-in-l2cap_sock_cleanup_listen-vs-l2.patch.
- commit 649e53f</changelog>
  <changelog author="vkarasulli@suse.de" date="1780401603">- Update
  patches.suse/smb-client-reject-userspace-cifs-spnego-descriptions.patch
  (bsc#1266238 CVE-2026-46243).
- commit 9550304</changelog>
</package>
<package pkgid="1db84ac175581fe0dc022e19bdb32df533395dbd578164f498b3fa177fcbac7f80ac9f08ac91429507164af61d92eb0dcd681f8208da0d4086271ededa1af0ea" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.35.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780660800">- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (CVE-2026-43026 bsc#1263932).
- commit 8e1a72c</changelog>
  <changelog author="tiwai@suse.de" date="1780920000">- Input: atkbd - skip deactivate for HONOR BCC-N's internal
  keyboard (git-fixes).
- ALSA: seq: dummy: fix UMP event stack overread (git-fixes).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
  on linked streams (git-fixes).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
  (git-fixes).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
  (git-fixes).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
  (git-fixes).
- accel/ivpu: Add bounds checks for firmware log indices
  (git-fixes).
- drm/xe: Clear pending_disable before signaling suspend fence
  (git-fixes).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
  on GFX11 (git-fixes).
- drm/amdkfd: fix NULL dereference in get_queue_ids() (git-fixes).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  (git-fixes).
- drm/amd/display: Reject gpio_bitshift &gt;= 32 in
  bios_parser_get_gpio_pin_info() (git-fixes).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
  (git-fixes).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
  debugfs (git-fixes).
- commit 83128fd</changelog>
  <changelog author="tiwai@suse.de" date="1780920001">- drm/amd/display: Bound VBIOS record-chain walk loops
  (git-fixes).
- commit ec5fd83</changelog>
  <changelog author="iivanov@suse.de" date="1780920002">- perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415 CVE-2026-43150)
- commit 100fc92</changelog>
  <changelog author="tiwai@suse.de" date="1780920003">- ALSA: aloop: Fix peer runtime UAF during format-change stop
  (CVE-2026-46090 bsc#1267531).
- ALSA: aloop: Use guard() for spin locks (CVE-2026-46090
  bsc#1267531).
- commit fedd5b0</changelog>
  <changelog author="jgross@suse.com" date="1780920004">- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (git-fixes).
- commit 02c6192</changelog>
  <changelog author="jgross@suse.com" date="1780920005">- KVM: arm64: Reassign nested_mmus array behind mmu_lock (git-fixes).
- commit e33b225</changelog>
  <changelog author="jgross@suse.com" date="1780920006">- KVM: arm64: Take the SRCU lock for page table walks in fault
  injection and AT emulation (git-fixes).
- commit b3cd8ff</changelog>
  <changelog author="ykaukab@suse.de" date="1780920007">- config: remove DEBUG_FS_DISALLOW_MOUNT
  DEBUG_FS_DISALLOW_MOUNT was removed by the following SUSE commit:
  5697d6916a00 debugfs: Remove broken no-mount mode (bsc#1265186)
  Clean up config files by deleting CONFIG_DEBUG_FS_DISALLOW_MOUNT
- commit 3cc7250</changelog>
  <changelog author="vkarasulli@suse.de" date="1781092800">- Update
  patches.suse/KVM-arm64-Reassign-nested_mmus-array-behind-mmu_lock.patch
  (git-fixes CVE-2026-46317 bsc#1268018).
- Update
  patches.suse/KVM-arm64-vgic-its-Drop-the-translation-cache-refere.patch
  (git-fixes CVE-2026-46316 bsc#1267875).
- commit c70d539</changelog>
</package>
<package pkgid="1625e6fef4ac615bbae5e9d89b014ded062d065fbcc95a87b46fd652f4d127d8fbc6acf7bf738dd377ac84169fa0682e55ec0da4e436c281505e774f6bed3610" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.5.1"/>
  <changelog author="pfalcato@suse.de" date="1754481600">- nvme-tcp: fix selinux denied when calling sock_sendmsg
  (bsc#1247497).
- commit 6082643</changelog>
  <changelog author="dsterba@suse.com" date="1754568000">- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374)
- commit cb82edb</changelog>
  <changelog author="sjaeckel@suse.de" date="1754654400">- smc: Fix various oops due to inet_sock type confusion
  (CVE-2025-38475 bsc#1247308).
- commit 05e8074</changelog>
  <changelog author="pfalcato@suse.de" date="1754654401">- tls: always refresh the queue when reading sock (CVE-2025-38471
  bsc#1247450).
- commit 2bcb640</changelog>
  <changelog author="krisman@suse.de" date="1754654402">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
  (CVE-2025-38453 bsc#1247234).
- commit 171360a</changelog>
  <changelog author="krisman@suse.de" date="1754913600">- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred
  (CVE-2025-38453 bsc#1247234).
  Conflicts:
  series.conf
- commit 909d7fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913601">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 5c830c5</changelog>
  <changelog author="msuchanek@suse.de" date="1755172800">- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41</changelog>
  <changelog author="tiwai@suse.de" date="1755518400">- sched/psi: Fix psi_seq initialization (bsc#1248155).
- commit 2dd3707</changelog>
  <changelog author="tzimmermann@suse.com" date="1757332800">- Fix OOB access in "drm/amdgpu: read back register after written for VCN v4.0.5" (bsc#1249251)
- commit 3545bbd</changelog>
</package>
<package pkgid="05382c4d4365f858b6ba671539ce7758ff557c9fde0003f0982318921e548295ab26e146677336b906c1f4a3768de51319354bb97d23c4579fb58dc8c2037b53" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.6.1"/>
  <changelog author="vkarasulli@suse.de" date="1760616000">- iommu/amd: Fix alias device DTE setting (git-fixes).
- iommu/arm-smmu-v3: Fix smmu_domain-&gt;nr_ats_masters decrement
  (git-fixes).
- iommu/amd: Enable PASID and ATS capabilities in the correct
  order (git-fixes).
- commit 6e3bf58</changelog>
  <changelog author="lduncan@suse.com" date="1760616001">- scsi: mpi3mr: Update driver version to 8.15.0.5.50
  (bsc#1251186).
- scsi: mpi3mr: Fix premature TM timeouts on virtual drives
  (bsc#1251186).
- scsi: mpi3mr: Update MPI headers to revision 37 (bsc#1251186).
- scsi: mpi3mr: Fix I/O failures during controller reset
  (bsc#1251186).
- scsi: mpi3mr: Fix controller init failure on fault during
  queue creation (bsc#1251186).
- scsi: mpi3mr: Fix device loss during enclosure reboot due to
  zero link speed (bsc#1251186).
- scsi: mpi3mr: Event processing debug improvement (bsc#1251186).
- commit 15f7129</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1760702400">- skmsg: Return copied bytes in sk_msg_memcopy_from_iter
  (bsc#1250650).
- commit 6650ce1</changelog>
  <changelog author="trenn@suse.de" date="1760702401">- cpufreq: intel_pstate: Fix object lifecycle issue in
  update_qos_request() (git-fixes).
- commit 330c599</changelog>
  <changelog author="trenn@suse.de" date="1760702402">- cpufreq: sun50i: prevent out-of-bounds access (git-fixes).
- commit 815165b</changelog>
  <changelog author="trenn@suse.de" date="1760702403">- cpufreq: armada-8k: make both cpu masks static (git-fixes).
- commit 3ab6135</changelog>
  <changelog author="trenn@suse.de" date="1760702404">- cpufreq: armada-8k: Fix off by one in
  armada_8k_cpufreq_free_table() (stable-fixes).
- commit 1b00366</changelog>
  <changelog author="trenn@suse.de" date="1760702405">- cpufreq: scmi: Account for malformed DT in
  scmi_dev_used_by_cpus() (git-fixes).
- commit e9a9ed4</changelog>
  <changelog author="trenn@suse.de" date="1760702406">- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
  (stable-fixes).
- commit 4f5afab</changelog>
  <changelog author="trenn@suse.de" date="1760702407">- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition
  latency (stable-fixes git-fixes).
- commit 41821ef</changelog>
</package>
<package pkgid="fd1a2c15d430ee7f22c9541bf422e388cfab396449045e1a4b250dd72d597d757026d2b3e39e0c650ea178108a39f358804141cb3b414484dcb0a5f68ec7c0eb" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.7.1"/>
  <changelog author="nmorey@suse.com" date="1762344000">- RDMA/irdma: Fix SD index calculation (git-fixes)
- commit 0aad166</changelog>
  <changelog author="nmorey@suse.com" date="1762344001">- RDMA/irdma: Set irdma_cq cq_num field during CQ create (git-fixes)
- commit be2c8f8</changelog>
  <changelog author="nmorey@suse.com" date="1762344002">- RDMA/hns: Fix recv CQ and QP cache affinity (git-fixes)
- commit 61f6ae6</changelog>
  <changelog author="nmorey@suse.com" date="1762344003">- RDMA/hns: Fix the modification of max_send_sge (git-fixes)
- commit f143d8d</changelog>
  <changelog author="nmorey@suse.com" date="1762344004">- RDMA/hns: Fix wrong WQE data when QP wraps around (git-fixes)
- commit 6ea0097</changelog>
  <changelog author="msuchanek@suse.de" date="1762344005">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
  <changelog author="jack@suse.cz" date="1762344006">- nbd: restrict sockets to TCP and UDP (bsc#1252774
  CVE-2025-40080).
- commit 3fbbb49</changelog>
  <changelog author="mkoutny@suse.com" date="1762344007">- cpuset: fix failure to enable isolated partition when containing
  isolcpus (bsc#1241166).
- commit 9093c25</changelog>
  <changelog author="mkoutny@suse.com" date="1762344008">- cpuset: Use new excpus for nocpu error check when enabling
  root partition (bsc#1241166).
- cgroup/cpuset: Remove remote_partition_check() &amp; make
  update_cpumasks_hier() handle remote partition (bsc#1241166).
- commit d4c3a1b</changelog>
  <changelog author="vbabka@suse.cz" date="1762430400">- mm/ksm: fix flag-dropping behavior in ksm_madvise
  (CVE-2025-40040 bsc#1252780).
- commit 095dc3d</changelog>
</package>
<package pkgid="a1dc95f4597d3e5772ee2849b118ef8175c27841828340274c08e1d6855c73cfdfd8d1d33ea2d04f62910df784a46be153636995491920595e09bc66df4c08b9" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.8.1"/>
  <changelog author="iivanov@suse.de" date="1765281600">- arm64: zynqmp: Disable coresight by default (git-fixes)
- commit 11d63c1</changelog>
  <changelog author="iivanov@suse.de" date="1765281601">- arm64: zynqmp: Revert usb node drive strength and slew rate for (git-fixes)
- commit 2f61b01</changelog>
  <changelog author="iivanov@suse.de" date="1765281602">- arm64: mte: Do not warn if the page is already tagged in (git-fixes)
- commit 52c9758</changelog>
  <changelog author="osalvador@suse.de" date="1765281603">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431
  CVE-2025-38085 bsc#1245499).
- commit 50d9103</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281604">- smb: Log an error when close_all_cached_dirs fails (bsc#1246328,
  CVE-2025-38321).
- commit c5a4d00</changelog>
  <changelog author="dsterba@suse.com" date="1765281605">- mount: handle NULL values in mnt_ns_release() (bsc#1254308)
- commit 08256f9</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281606">- smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256,
  CVE-2025-38728).
- commit 0f61287</changelog>
  <changelog author="tiwai@suse.de" date="1765368000">- i2c: amd-mp2: fix reference leak in MP2 PCI device (git-fixes).
- i2c: i2c.h: fix a bad kernel-doc line (git-fixes).
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd
  led (git-fixes).
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
  (git-fixes).
- commit 73f17dd</changelog>
  <changelog author="osalvador@suse.de" date="1765368001">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431 CVE-2025-38084 bsc#1245498).
- commit ae3cd1c</changelog>
  <changelog author="ailiop@suse.com" date="1765368002">- exfat: fix refcount leak in exfat_find (git-fixes).
- commit eb1ffd0</changelog>
</package>
<package pkgid="ada3a4392593f9fc0c1739037a7713bd91f033b757738f11ef15b890a37cf2e5a4252af5811ea64e9ba656903a7a95b59af0f9e697b6c8b3fb3ae18041b56ae0" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.9.1"/>
  <changelog author="jslaby@suse.cz" date="1768478400">- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b</changelog>
  <changelog author="jslaby@suse.cz" date="1768478401">- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b</changelog>
  <changelog author="nmorey@suse.com" date="1768478402">- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234</changelog>
  <changelog author="mkoutny@suse.com" date="1768478403">- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478404">- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478405">- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478406">- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478407">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27</changelog>
  <changelog author="tiwai@suse.de" date="1768564800">- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b</changelog>
  <changelog author="vkarasulli@suse.de" date="1768564801">- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9</changelog>
</package>
<package pkgid="15b61b5db5b9a360dd8997b2cc8b503de5224d4c06ba74113fd62061af316c5a47de7594af1a13ffcebfb1a6edc530b1ebf82c6541a7febe7cb5c1b40a770746" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.26.1"/>
  <changelog author="msuchanek@suse.de" date="1770120000">- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5</changelog>
  <changelog author="msuchanek@suse.de" date="1770120001">- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b</changelog>
  <changelog author="wqu@suse.com" date="1770206400">- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b</changelog>
  <changelog author="jgross@suse.com" date="1770206401">- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d</changelog>
  <changelog author="tiwai@suse.de" date="1770206402">- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7</changelog>
  <changelog author="jgross@suse.com" date="1770206403">- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91</changelog>
  <changelog author="jgross@suse.com" date="1770206404">- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8</changelog>
  <changelog author="jgross@suse.com" date="1770206405">- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb</changelog>
  <changelog author="jgross@suse.com" date="1770206406">- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e</changelog>
  <changelog author="sjaeckel@suse.de" date="1770206407">- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef</changelog>
</package>
<package pkgid="29d249d5ddfdf5cbe1598d10628eee76283bcd787b8b6a293e051109ea1cf38874c91b568f875dfc07f4bb67d306f52e427712941d347e5e5a88121944125db2" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.27.1"/>
  <changelog author="petr.pavlu@suse.com" date="1772798400">- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09</changelog>
  <changelog author="tiwai@suse.de" date="1772884800">- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327</changelog>
  <changelog author="tiwai@suse.de" date="1772971200">- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773057600">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613</changelog>
  <changelog author="iivanov@suse.de" date="1773057601">- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21</changelog>
  <changelog author="wqu@suse.com" date="1773057602">- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61</changelog>
  <changelog author="ohering@suse.de" date="1773057603">- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057604">- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d</changelog>
  <changelog author="mwilck@suse.com" date="1773057605">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea</changelog>
  <changelog author="mwilck@suse.com" date="1773057606">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6</changelog>
</package>
<package pkgid="2021d96ddff923b66e325b8bee4de111cefd47a13fb9c9fd797586b43159457f4568478ba6e7e3cdbe046cb2d123c590e513ff74047a5f6f9ac5dc5075821942" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.28.1"/>
  <changelog author="clopez@suse.de" date="1775563200">- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874</changelog>
  <changelog author="clopez@suse.de" date="1775563201">- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1775563202">- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab</changelog>
  <changelog author="dwagner@suse.de" date="1775563203">- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563204">- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1775563205">- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3</changelog>
  <changelog author="lduncan@suse.com" date="1775563206">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2</changelog>
  <changelog author="msuchanek@suse.de" date="1775649600">- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47</changelog>
  <changelog author="pfalcato@suse.de" date="1775649601">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
</package>
<package pkgid="a3ea0f605f3d566d1ba71371079be1041d684b4b9a985d7cb151bf2f135754454cfe28599659a5af46978840715cafd79fa33c3ef39d46e629265c4f15672783" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.29.1"/>
  <changelog author="pfalcato@suse.de" date="1775649600">- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4</changelog>
  <changelog author="msuchanek@suse.de" date="1775736000">- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573 CVE-2026-31431).
- commit 429a54b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
</package>
<package pkgid="1f285cdacccf5e8dd3261f997c74ca6738d3539488c562d9e6d108ade61d533da40cabc0a27cb82660373aac536e72f1ccd97405d4787d4451fc95d376513467" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.30.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit 620f22b</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
</package>
<package pkgid="769c19082bd1e21347ff7bbbb06abb314f311876ae18face0e0694ce9adfe5fc21c0def1cee4d3885df7941b37598d70a7378573ee2c16f03180f17b6e34d9de" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.31.1"/>
  <changelog author="nstange@suse.de" date="1777550400">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
</package>
<package pkgid="2179687750b6e81eb7c02d6c1104a018f39e0a7145118b2a3adf75b6c85e7a8d60c4a62ff001d3d57ab42fc3642352cf676d9ffe8d5c3ecae5c59738fe046c3c" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.32.1"/>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit b2d5a21</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags
  (bsc#1264449).
- commit afc97fe</changelog>
  <changelog author="fmancera@suse.de" date="1778155201">- supported.conf: drop rxrpc completely (bsc#1264450)
- commit 2dc3b0f</changelog>
  <changelog author="mhocko@suse.com" date="1778241600">- Update config files: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC
- commit a035dd7</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit f71c962</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 7709fe4</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- kabi assert: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi: ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit f8f4ca2</changelog>
</package>
<package pkgid="c0fded2d7f64f763b3f022f3fd333449ed6ca30c3a734e2cdc87c1094e98444afc6c424fcb9220806a75a6a8befa969f8717af68cd02ce8e0cf8f4ac3836b8a7" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.33.1"/>
  <changelog author="tiwai@suse.de" date="1779278400">- drivers/base/memory: fix memory block reference leak in poison
  accounting (git-fixes).
- commit c0de598</changelog>
  <changelog author="tonyj@suse.de" date="1779278401">- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
  race (bsc#1260018 CVE-2026-23271).
- commit 1c3b58a</changelog>
  <changelog author="msuchanek@suse.de" date="1779364800">- Kernel-binary: Do not truncate vmlinux when it's the boot image
  Some architectures use vmlinux to boot. Truncating vmlinux on those
  architectures causes signing failure during build. Also if the signing
  was disabled a brokne kernel would be produced.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603</changelog>
  <changelog author="ohering@suse.de" date="1779364801">- net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
- net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
- net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
- net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
- RDMA/mana: Validate rx_hash_key_len (git-fixes).
- hv_sock: fix ARM64 support (git-fixes).
- mshv: Fix error handling in mshv_region_pin (CVE-2026-43045 bsc#1263942).
- mshv: Refactor and rename memory region handling functions (CVE-2026-43045 bsc#1263942).
- commit 6cbd7cb</changelog>
  <changelog author="ykaukab@suse.de" date="1779364802">- Refresh
  patches.suse/io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch.
- commit 033df25</changelog>
  <changelog author="alnovak@suse.com" date="1779364803">- scsi: target: iscsi: validate CHAP_R length before base64 decode
  (bsc#1265449).
- commit 04f607e</changelog>
  <changelog author="msuchanek@suse.de" date="1779364804">- kernel-binary: Only apply vmlinux workaround on SLE15 and later
  To create debuginfo for vmlinux the file needs to be present even if
  it's not packaged because a compressed file is packaged insteand.
  To accomplish that the file is marked as ghost in the file list. Then
  rpm does not complain that the file exists but does not package it.
  However, rpm still reserves space for ghost files when installing a
  package. To avoid reserving space for a file that is not used the file
  is truncated.
  That works on SLE 15 but on SLE 12 rpm then fails packaging the
  debuginfo complaiing that extra debuginfo files are present. Limit the
  workaround to SLE 15 and later.
  Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451</changelog>
  <changelog author="ykaukab@suse.de" date="1779451200">- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi-assert.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.kabi/ptrace-slightly-saner-get_dumpable-logic-kabi.patch
  (CVE-2026-46333 bsc#1265308).
- Update
  patches.suse/ptrace-slightly-saner-get_dumpable-logic.patch
  (CVE-2026-46333 bsc#1265308).
- commit 493e3ed</changelog>
  <changelog author="pfalcato@suse.de" date="1779710400">- Revert "net: skbuff: propagate shared-frag marker through pskb_copy()"
  This reverts commit f71c96250de20f4edf1c4beeb9d8b973a9ad6943.
- commit aaf0bdb</changelog>
  <changelog author="pfalcato@suse.de" date="1779710401">- net: gro: don't merge zcopy skbs (git-fixes).
- net: skbuff: propagate shared-frag marker through frag-transfer
  helpers (CVE-2026-43503 bsc#1265960).
- net: skbuff: preserve shared-frag marker during coalescing
  (CVE-2026-46300 bsc#1265209).
- commit 68f8e8b</changelog>
</package>
<package pkgid="1ba0f22d443afc1648093affb278b873aee25a45906aa3f7972c6baa3edbfd655d0436c6e8c9351f82966368682e77b691d6e30c85907bbc8ce349804be6d849" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.34.1"/>
  <changelog author="tiwai@suse.de" date="1780228800">- USB: serial: cypress_m8: validate interrupt packet headers
  (git-fixes).
- USB: serial: safe_serial: fix memory corruption with small
  endpoint (git-fixes).
- USB: serial: omninet: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: mxuport: fix memory corruption with small endpoint
  (git-fixes).
- USB: serial: option: add missing RSVD(5) flag for Rolling
  RW135R-GL (git-fixes).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
  check (git-fixes).
- USB: serial: keyspan: fix missing indat transfer sanity check
  (git-fixes).
- USB: serial: belkin_sa: validate interrupt status length
  (git-fixes).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
  header (git-fixes).
- usb: dwc2: Fix use after free in debug code (git-fixes).
- usb: chipidea: core: convert ci_role_switch to local variable
  (git-fixes).
- usb: gadget: f_fs: serialize DMABUF cancel against request
  completion (git-fixes).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
  (git-fixes).
- usb: gadget: dummy_hcd: Reject hub port requests for
  non-existent ports (git-fixes).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
  condition (git-fixes).
- usb: usbtmc: reject interrupt endpoints with small
  wMaxPacketSize (git-fixes).
- usb: usbtmc: check URB actual_length for interrupt-IN
  notifications (git-fixes).
- usb: gadget: uvc: hold opts-&gt;lock across XU walks in
  uvc_function_bind (git-fixes).
- usb: gadget: net2280: Fix double free in probe error path
  (git-fixes).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
  (git-fixes).
- usb: typec: ucsi: Don't update power_supply on power role
  change if not connected (git-fixes).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
  (git-fixes).
- usb: cdns3: gadget: fix request skipping after clearing halt
  (git-fixes).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
  permanently leaks the runtime PM usage counter across
  bind/unbind cycles (git-fixes).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
  acquisition failure (git-fixes).
- thunderbolt: property: Reject dir_len &lt; 4 to prevent size_t
  underflow (git-fixes).
- thunderbolt: property: Reject u32 wrap in
  tb_property_entry_valid() (git-fixes).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
  handling (git-fixes).
- tty: serial: samsung: Remove redundant port lock acquisition
  in rx helpers (git-fixes).
- serial: qcom_geni: fix kfifo underflow when flush precedes
  DMA completion IRQ (git-fixes).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
  start_rx_dma (git-fixes).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
  (git-fixes).
- parport: Fix race between port and client registration
  (git-fixes).
- comedi: comedi_test: fix check for valid scan_begin_src in
  waveform_ai_cmdtest() (git-fixes).
- comedi: comedi_test: Fix limiting of convert_arg in
  waveform_ai_cmdtest() (git-fixes).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
  (git-fixes).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
  (git-fixes).
- iio: dac: ad5686: acquire lock when doing powerdown control
  (git-fixes).
- iio: temperature: tsys01: fix broken PROM checksum validation
  (git-fixes).
- iio: buffer: hw-consumer: fix use-after-free in error path
  (git-fixes).
- iio: dac: ad5686: fix input raw value check (git-fixes).
- iio: ssp_sensors: cancel delayed work_refresh on remove
  (git-fixes).
- iio: dac: max5821: fix return value check in powerdown sync
  (git-fixes).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
  (git-fixes).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
  (git-fixes).
- iio: light: cm3323: fix reg_conf not being initialized correctly
  (git-fixes).
- iio: magnetometer: st_magn: fix default DRDY pin selection
  for LIS2MDL (git-fixes).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
  (git-fixes).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
  (git-fixes).
- iio: gyro: adis16260: fix division by zero in write_raw
  (git-fixes).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
  dual mux (git-fixes).
- drm/hyperv: validate VMBus packet size in receive callback
  (git-fixes).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
  (git-fixes).
- drm/amd/pm/si: Disregard vblank time when no displays are
  connected (git-fixes).
- drm/i915: Fix potential UAF in TTM object purge (git-fixes).
- commit b935350</changelog>
  <changelog author="wqu@suse.com" date="1780315200">- btrfs: do not mark inode incompressible after inline attempt
  fails (git-fixes).
- commit b9ec6e8</changelog>
  <changelog author="tiwai@suse.de" date="1780315201">- Input: ims-pcu - fix usb_free_coherent() size in
  ims_pcu_buffers_free() (git-fixes).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
  (git-fixes).
- Input: xpad - fix out-of-bounds access for Share button
  (git-fixes).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
  buffer size (git-fixes).
- commit d66e959</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315202">- net: stmmac: Prevent NULL deref when RX memory exhausted
  (CVE-2026-46110 bsc#1266759).
- net: stmmac: rename STMMAC_GET_ENTRY() -&gt; STMMAC_NEXT_ENTRY()
  (CVE-2026-46110 bsc#1266759).
- net/mlx5: Fix switchdev mode rollback in case of failure
  (CVE-2026-43012 bsc#1264016).
- net/mlx5: lag: Check for LAG device before creating debugfs
  (CVE-2026-43013 bsc#1264011).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  (CVE-2026-31736 bsc#1263908).
- commit 5178a8b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1780315203">- team: avoid NETDEV_CHANGEMTU event when unregistering slave
  (CVE-2026-43234 bsc#1264409).
- commit 0f4d02d</changelog>
  <changelog author="lduncan@suse.com" date="1780315204">- dm: fix a buffer overflow in ioctl processing (git-fixes).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
  (git-fixes).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
  (git-fixes).
- scsi: mpi3mr: Clear reset history on ready and recheck state
  after timeout (git-fixes).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  (git-fixes).
- commit e61e502</changelog>
  <changelog author="ohering@suse.de" date="1780401600">- net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
- net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
- net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
- net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
- net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes).
- net: mana: Skip redundant detach on already-detached port (git-fixes).
- net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
- commit 36776be</changelog>
  <changelog author="tiwai@suse.de" date="1780401601">- auxdisplay: line-display: fix OOB read on zero-length
  message_store() (git-fixes).
- security/keys: fix missed RCU read section on lookup
  (stable-fixes).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
  probe (git-fixes).
- drm/amd/display: Validate payload length and link_index in
  dc_process_dmub_aux_transfer_async (stable-fixes).
- drm/amd/display: Validate GPIO pin LUT table size before
  iterating (stable-fixes).
- drm/amd/display: Fix integer overflow in bios_get_image()
  (stable-fixes).
- drm/amdgpu/vpe: Force collaborate sync after TRAP
  (stable-fixes).
- ALSA: asihpi: Fix potential OOB array access at reading cache
  (stable-fixes).
- HID: quirks: really enable the intended work around for
  appledisplay (git-fixes).
- HID: uclogic: Fix regression of input name assignment
  (git-fixes).
- commit 5fdf340</changelog>
  <changelog author="tiwai@suse.de" date="1780401602">- Bluetooth: serialize accept_q access (git-fixes).
- Refresh
  patches.suse/Bluetooth-fix-UAF-in-l2cap_sock_cleanup_listen-vs-l2.patch.
- commit 649e53f</changelog>
  <changelog author="vkarasulli@suse.de" date="1780401603">- Update
  patches.suse/smb-client-reject-userspace-cifs-spnego-descriptions.patch
  (bsc#1266238 CVE-2026-46243).
- commit 9550304</changelog>
</package>
<package pkgid="da7df641621022c49dd48d9e0fa8ea748539677b99eba279b381667c13eb548a41d432691ce3827207be4c21f70c2946b936d567db286f18fd010afe3c1de6e9" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.35.1"/>
  <changelog author="rgoldwyn@suse.com" date="1780660800">- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (CVE-2026-43026 bsc#1263932).
- commit 8e1a72c</changelog>
  <changelog author="tiwai@suse.de" date="1780920000">- Input: atkbd - skip deactivate for HONOR BCC-N's internal
  keyboard (git-fixes).
- ALSA: seq: dummy: fix UMP event stack overread (git-fixes).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
  on linked streams (git-fixes).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
  (git-fixes).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
  (git-fixes).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
  (git-fixes).
- accel/ivpu: Add bounds checks for firmware log indices
  (git-fixes).
- drm/xe: Clear pending_disable before signaling suspend fence
  (git-fixes).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
  on GFX11 (git-fixes).
- drm/amdkfd: fix NULL dereference in get_queue_ids() (git-fixes).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
  (git-fixes).
- drm/amd/display: Reject gpio_bitshift &gt;= 32 in
  bios_parser_get_gpio_pin_info() (git-fixes).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
  (git-fixes).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
  debugfs (git-fixes).
- commit 83128fd</changelog>
  <changelog author="tiwai@suse.de" date="1780920001">- drm/amd/display: Bound VBIOS record-chain walk loops
  (git-fixes).
- commit ec5fd83</changelog>
  <changelog author="iivanov@suse.de" date="1780920002">- perf/arm-cmn: Reject unsupported hardware configurations (bsc#1264415 CVE-2026-43150)
- commit 100fc92</changelog>
  <changelog author="tiwai@suse.de" date="1780920003">- ALSA: aloop: Fix peer runtime UAF during format-change stop
  (CVE-2026-46090 bsc#1267531).
- ALSA: aloop: Use guard() for spin locks (CVE-2026-46090
  bsc#1267531).
- commit fedd5b0</changelog>
  <changelog author="jgross@suse.com" date="1780920004">- KVM: arm64: vgic-its: Drop the translation cache reference
  only for the erased entry (git-fixes).
- commit 02c6192</changelog>
  <changelog author="jgross@suse.com" date="1780920005">- KVM: arm64: Reassign nested_mmus array behind mmu_lock (git-fixes).
- commit e33b225</changelog>
  <changelog author="jgross@suse.com" date="1780920006">- KVM: arm64: Take the SRCU lock for page table walks in fault
  injection and AT emulation (git-fixes).
- commit b3cd8ff</changelog>
  <changelog author="ykaukab@suse.de" date="1780920007">- config: remove DEBUG_FS_DISALLOW_MOUNT
  DEBUG_FS_DISALLOW_MOUNT was removed by the following SUSE commit:
  5697d6916a00 debugfs: Remove broken no-mount mode (bsc#1265186)
  Clean up config files by deleting CONFIG_DEBUG_FS_DISALLOW_MOUNT
- commit 3cc7250</changelog>
  <changelog author="vkarasulli@suse.de" date="1781092800">- Update
  patches.suse/KVM-arm64-Reassign-nested_mmus-array-behind-mmu_lock.patch
  (git-fixes CVE-2026-46317 bsc#1268018).
- Update
  patches.suse/KVM-arm64-vgic-its-Drop-the-translation-cache-refere.patch
  (git-fixes CVE-2026-46316 bsc#1267875).
- commit c70d539</changelog>
</package>
<package pkgid="85e13d7275c803b04178c6502fe8dc79ee87867f95505444501f952744bc99687a406b88c7d4e861cc1bfb21bb314dfeafdaadd5c75a4a297529f9556e5cbb1f" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.5.1"/>
  <changelog author="pfalcato@suse.de" date="1754481600">- nvme-tcp: fix selinux denied when calling sock_sendmsg
  (bsc#1247497).
- commit 6082643</changelog>
  <changelog author="dsterba@suse.com" date="1754568000">- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374)
- commit cb82edb</changelog>
  <changelog author="sjaeckel@suse.de" date="1754654400">- smc: Fix various oops due to inet_sock type confusion
  (CVE-2025-38475 bsc#1247308).
- commit 05e8074</changelog>
  <changelog author="pfalcato@suse.de" date="1754654401">- tls: always refresh the queue when reading sock (CVE-2025-38471
  bsc#1247450).
- commit 2bcb640</changelog>
  <changelog author="krisman@suse.de" date="1754654402">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
  (CVE-2025-38453 bsc#1247234).
- commit 171360a</changelog>
  <changelog author="krisman@suse.de" date="1754913600">- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred
  (CVE-2025-38453 bsc#1247234).
  Conflicts:
  series.conf
- commit 909d7fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913601">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 5c830c5</changelog>
  <changelog author="msuchanek@suse.de" date="1755172800">- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41</changelog>
  <changelog author="tiwai@suse.de" date="1755518400">- sched/psi: Fix psi_seq initialization (bsc#1248155).
- commit 2dd3707</changelog>
  <changelog author="tzimmermann@suse.com" date="1757332800">- Fix OOB access in "drm/amdgpu: read back register after written for VCN v4.0.5" (bsc#1249251)
- commit 3545bbd</changelog>
</package>
<package pkgid="91abd92b8f6200a2681447da5cbc52a66890fd69dbce335e031d94e74b6036aa01c7f4c23711bb8083a321c65fada1b5d24ae496acb2b7e9656766f8552ac2ca" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.6.1"/>
  <changelog author="vkarasulli@suse.de" date="1760616000">- iommu/amd: Fix alias device DTE setting (git-fixes).
- iommu/arm-smmu-v3: Fix smmu_domain-&gt;nr_ats_masters decrement
  (git-fixes).
- iommu/amd: Enable PASID and ATS capabilities in the correct
  order (git-fixes).
- commit 6e3bf58</changelog>
  <changelog author="lduncan@suse.com" date="1760616001">- scsi: mpi3mr: Update driver version to 8.15.0.5.50
  (bsc#1251186).
- scsi: mpi3mr: Fix premature TM timeouts on virtual drives
  (bsc#1251186).
- scsi: mpi3mr: Update MPI headers to revision 37 (bsc#1251186).
- scsi: mpi3mr: Fix I/O failures during controller reset
  (bsc#1251186).
- scsi: mpi3mr: Fix controller init failure on fault during
  queue creation (bsc#1251186).
- scsi: mpi3mr: Fix device loss during enclosure reboot due to
  zero link speed (bsc#1251186).
- scsi: mpi3mr: Event processing debug improvement (bsc#1251186).
- commit 15f7129</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1760702400">- skmsg: Return copied bytes in sk_msg_memcopy_from_iter
  (bsc#1250650).
- commit 6650ce1</changelog>
  <changelog author="trenn@suse.de" date="1760702401">- cpufreq: intel_pstate: Fix object lifecycle issue in
  update_qos_request() (git-fixes).
- commit 330c599</changelog>
  <changelog author="trenn@suse.de" date="1760702402">- cpufreq: sun50i: prevent out-of-bounds access (git-fixes).
- commit 815165b</changelog>
  <changelog author="trenn@suse.de" date="1760702403">- cpufreq: armada-8k: make both cpu masks static (git-fixes).
- commit 3ab6135</changelog>
  <changelog author="trenn@suse.de" date="1760702404">- cpufreq: armada-8k: Fix off by one in
  armada_8k_cpufreq_free_table() (stable-fixes).
- commit 1b00366</changelog>
  <changelog author="trenn@suse.de" date="1760702405">- cpufreq: scmi: Account for malformed DT in
  scmi_dev_used_by_cpus() (git-fixes).
- commit e9a9ed4</changelog>
  <changelog author="trenn@suse.de" date="1760702406">- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
  (stable-fixes).
- commit 4f5afab</changelog>
  <changelog author="trenn@suse.de" date="1760702407">- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition
  latency (stable-fixes git-fixes).
- commit 41821ef</changelog>
</package>
<package pkgid="8f1a31c36a24af1f2da668028fe59e55c6c9c328b7e470c325cb94389aa5801aac8c85e54a2961a043b8f65386cd70fe89bb131a843367c3a7d32b13bbfbf0fb" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.7.1"/>
  <changelog author="nmorey@suse.com" date="1762344000">- RDMA/irdma: Fix SD index calculation (git-fixes)
- commit 0aad166</changelog>
  <changelog author="nmorey@suse.com" date="1762344001">- RDMA/irdma: Set irdma_cq cq_num field during CQ create (git-fixes)
- commit be2c8f8</changelog>
  <changelog author="nmorey@suse.com" date="1762344002">- RDMA/hns: Fix recv CQ and QP cache affinity (git-fixes)
- commit 61f6ae6</changelog>
  <changelog author="nmorey@suse.com" date="1762344003">- RDMA/hns: Fix the modification of max_send_sge (git-fixes)
- commit f143d8d</changelog>
  <changelog author="nmorey@suse.com" date="1762344004">- RDMA/hns: Fix wrong WQE data when QP wraps around (git-fixes)
- commit 6ea0097</changelog>
  <changelog author="msuchanek@suse.de" date="1762344005">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
  <changelog author="jack@suse.cz" date="1762344006">- nbd: restrict sockets to TCP and UDP (bsc#1252774
  CVE-2025-40080).
- commit 3fbbb49</changelog>
  <changelog author="mkoutny@suse.com" date="1762344007">- cpuset: fix failure to enable isolated partition when containing
  isolcpus (bsc#1241166).
- commit 9093c25</changelog>
  <changelog author="mkoutny@suse.com" date="1762344008">- cpuset: Use new excpus for nocpu error check when enabling
  root partition (bsc#1241166).
- cgroup/cpuset: Remove remote_partition_check() &amp; make
  update_cpumasks_hier() handle remote partition (bsc#1241166).
- commit d4c3a1b</changelog>
  <changelog author="vbabka@suse.cz" date="1762430400">- mm/ksm: fix flag-dropping behavior in ksm_madvise
  (CVE-2025-40040 bsc#1252780).
- commit 095dc3d</changelog>
</package>
<package pkgid="084772c92a68e7437a8a9f098b6c52fc639e94cfb74674c0141a87b0340f9199429ab3dfcfbf22d27548ad62df862c6882985d9f396a8ed86233240175c058cd" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.8.1"/>
  <changelog author="iivanov@suse.de" date="1765281600">- arm64: zynqmp: Disable coresight by default (git-fixes)
- commit 11d63c1</changelog>
  <changelog author="iivanov@suse.de" date="1765281601">- arm64: zynqmp: Revert usb node drive strength and slew rate for (git-fixes)
- commit 2f61b01</changelog>
  <changelog author="iivanov@suse.de" date="1765281602">- arm64: mte: Do not warn if the page is already tagged in (git-fixes)
- commit 52c9758</changelog>
  <changelog author="osalvador@suse.de" date="1765281603">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431
  CVE-2025-38085 bsc#1245499).
- commit 50d9103</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281604">- smb: Log an error when close_all_cached_dirs fails (bsc#1246328,
  CVE-2025-38321).
- commit c5a4d00</changelog>
  <changelog author="dsterba@suse.com" date="1765281605">- mount: handle NULL values in mnt_ns_release() (bsc#1254308)
- commit 08256f9</changelog>
  <changelog author="ematsumiya@suse.de" date="1765281606">- smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256,
  CVE-2025-38728).
- commit 0f61287</changelog>
  <changelog author="tiwai@suse.de" date="1765368000">- i2c: amd-mp2: fix reference leak in MP2 PCI device (git-fixes).
- i2c: i2c.h: fix a bad kernel-doc line (git-fixes).
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd
  led (git-fixes).
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
  (git-fixes).
- commit 73f17dd</changelog>
  <changelog author="osalvador@suse.de" date="1765368001">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431 CVE-2025-38084 bsc#1245498).
- commit ae3cd1c</changelog>
  <changelog author="ailiop@suse.com" date="1765368002">- exfat: fix refcount leak in exfat_find (git-fixes).
- commit eb1ffd0</changelog>
</package>
<package pkgid="c170cdec7aa72575ee296af37e367799e027ead374e7b7f1aee5e0ab441969dfdc57325bf2b897d5748643e52ef5bb3666b346129c579de868e7ac93f5965674" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="160000.9.1"/>
  <changelog author="jslaby@suse.cz" date="1768478400">- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b</changelog>
  <changelog author="jslaby@suse.cz" date="1768478401">- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b</changelog>
  <changelog author="nmorey@suse.com" date="1768478402">- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234</changelog>
  <changelog author="mkoutny@suse.com" date="1768478403">- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478404">- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478405">- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478406">- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768478407">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27</changelog>
  <changelog author="tiwai@suse.de" date="1768564800">- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b</changelog>
  <changelog author="vkarasulli@suse.de" date="1768564801">- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9</changelog>
</package>
<package pkgid="c7432f26cfac4d199189b416072827952d4081d238963ce7d85caaccd112e4befeeb1b840779d8eddaca1c45d011a3f24556a6ea1ad0bf72f24900db74d2c9e0" name="dlpack-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="bp160.1.9"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1596024000">- Version 0.3</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1645704000">- Update to 0.6:
  * Changelog:
    Add kDLROCMHost
    Add kDLCUDAManaged
  * from 0.5:
    Rename enum names:
    kDLGPU -&gt; kDLCUDA
    kDLCPUPinned -&gt; kDLCUDAHost
    The ABI is backward compatible, as it is only change of
    constant name, exchange can still happen between the new version
    and old version.
  * from 0.4:
    OpaqueHandle type
    Complex support
    Rename DLContext -&gt; DLDevice
    DLTensor.ctx -&gt; DLTensor.device
    This requires dependent frameworks to upgrade the type name.
    The ABI is backward compatible, as it is only change of constant
    name, exchange can still happen between the new version and old version.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674907200">- update to 0.8:
  * Add kDLBool
  * Add kDLHexagon
  * Add kDLOneAPI
  * Add DLPACK_VERSION and DLPACK_ABI_VERSION</changelog>
</package>
<package pkgid="a7f84a182c99fa572a6de943068de428502cc10e3a9f97ee2a07bdf4dc4447cceb1afd26a056e78c91761c17900dccc18f79d726a39ba7f01f6be9f1b65eb502" name="dm-zoned-tools" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="bp160.1.12"/>
  <changelog author="jthumshirn@suse.com" date="1547121600">- Initial packaging for SUSE (bsc#1125058)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547640000">- Use noun phrase in summary.</changelog>
  <changelog author="jthumshirn@suse.com" date="1547812800">- Remove empty %post and %postun from spec</changelog>
  <changelog author="Johannes Thumshirn &lt;jth@kernel.org&gt;" date="1630929600">- Update to upstream version 2.2.0
  + build-fix.patch</changelog>
  <changelog author="Hannes Reinecke &lt;hare@suse.de&gt;" date="1697025600">- Update to upstream version 2.2.2
  * This minor release improves the clean and distclean make
    directives and remove the build dependency on autoconf-archive.
- Update to upstream version 2.2.1
  * This minor release improves the RPM spec file and fixes a problem
    with dmzadm command line parsing
- Drop build-fix.patch
  - build-fix.patch</changelog>
</package>
<package pkgid="bcd654235f850a8ebd09b89d9b02ad3ba742cd147635ee89e97cc29e52961b568e04d40646bfafd89ec6ef1f6798eab5f3cd26612f7e81de0f16549698dd48a4" name="dmd" arch="x86_64">
  <version epoch="0" ver="2.109.1" rel="bp160.1.5"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1669896000">- Bootstrap using gdmd instead of prebuilt binaries</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681646400">- Update to version 2.103.0
  * Compiler changes:
  - Add __check(assign-expression) to ImportC
  - Alias this for classes is deprecated
  - -preview=dip25 has been enabled by default
  - export int a; now generates dllexport instead of dllimport
  - Deprecate traits(isVirtualFunction) and
    traits(getVirtualFunctions)
  * Library changes:
  - Unicode grapheme walking updated to conform to Unicode
    version 15
  - Better static assert messages for
    std.algorithm.iteration.joiner
  - Better static assert messages for std.algorithm.sorting.sort
  * Dub changes: The --color argument now accepts values auto,
    never, always
- Changes from version 2.102.2:
  * 6 fixed Bugzilla issues.
- Changes from version 2.102.1:
  * Dub changes:
  - Reverted v1.31.0 working directory change when using dub run
  - -root=&lt;value&gt;
  - Path dependencies of path-based sub-packages have been fixed
- Changes from version 2.102.0:
  * Compiler changes:
  - A missed case of conflicting extern (D) @system function
    definitions has been deprecated
  - Deprecate the ability to call __traits(getAttributes) on
    overload sets
  - Deprecate non-empty for statement Increment clause with no
    effect
  - Array literals assigned to scope array variables can now be
    allocated on the stack
  - static assert now supports multiple message arguments
  - -preview=systemVariables has been added
  * Runtime changes: The default Throwable.TraceInfo generation now
    is @nogc.
  * Library changes:
  - Single- and double-precision implementations for log function
    families
  - The Unicode property "C" aka "Other" has had the wrong
    properties associated with it
  - Unicode table generator is now in Phobos, tables are updated
    to version 15
  - std.typecons.Unique now calls destroy on struct types
  * Installer changes:
  - Update the bundled VisualD package
  - Prefer 64 bit over 32 bit DMD on Windows 64 bit.
  * Dub changes:
  - Binary output will now be in a central cache
  - DUB API breaking change: Package.metadataCache setter and
    getter have been removed
- Changes from version 2.101.2:
  * 16 fixed Bugzilla issues.
- Changes from version 2.101.1:
  * 11 fixed Bugzilla issues.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1689854400">- Update to version 2.104.2
  * DMD Compiler regression fixes:
  - [REG2.102] Cannot use traits(getAttributes) with overloaded template
  - ImportC: ICE on nested C initializer 2
  * DMD Compiler bug fixes:
  - Segmentation fault on mixin template + using unknown type
  - "alias this" not properly dereferenced when the object being looked up is a field of a type
  - error: instantiated from here: maxElement!("a.a", A[])
  * Druntime regression fixes:
  - "Warning: cannot inline function" in core.lifetime
- Changes from version 2.204.1
  * DMD Compiler regression fixes:
  - [REG2.101.0] Appending deprecated structs in deprecated function causes deprecation message
  - [REG 2.103.0] ICE: dip1021 memory corruption
  - ICE on failed alias this attempt on pointer expression
  - [REG 2.103.0] address of a __traits(getOverloads) item is not converted to a delegate anymore
  * DMD Compiler bug fixes:
  - Segfault for function contract -preview=dip1021
  - ICE: Invalid array access for invalid interface definition
  - ImportC: ICE on nested C initializer
  - segfault when printing scope inference failure
  - ICE: dip1021 asserts on typeof(null) parameter
  * Phobos regression fixes:
  - std.range.slide fails in dmd-2.104.0
  - std.algorithm.maxElement no longer works with array of BigInt
- Changes from version 2.104.0
  * Compiler changes:
  - Better error message when attribute inference fails down the call stack
  - Using ; as an empty statement has been turned into an error
  - Using in parameters with non extern(D)/extern(C++) functions is deprecated
  - in ref on parameters has been deprecated in favor of -preview=in
  - Throwing qualified objects is now deprecated
  - User Defined Attributes now parse Template Arguments
  * Library changes:
  - Better static assert messages for std.algorithm.comparison.clamp
  - std.typecons.Rebindable now supports all types
  * Tools changes:
  - rdmd supports -shared
  * Dub changes:
  - Add new properties 'cSourcePaths' and 'cImportPaths' to SDL/JSON
  - The way packages are stored internally has changed
- Changes from version 2.103.1
  * Compiler changes:
  - Deprecate invalid special token sequences inside token strings
  * DMD Compiler regression fixes:
  - Header generation wrongfully outputs constructor bodies
  - Typing invalid mnemonic in asm{} block segfault
  * DMD Compiler bug fixes:
  - Segmentation fault in CppMangleVisitor.headOfType
  - Assertion failure in CppMangleVisitor.template_args
  - Segfault for malformed static if in imported template
  * Druntime regression fixes:
  - [REG 2.103] Throwing while in a deep callstack causes memory corruption</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1699012800">- Update to versione 2.105.3
  * DMD Compiler regression fixes:
  - Bugzilla 24171: [REG 2.100] Segfault compiling an empty ddoc file
  - Bugzilla 24188: ICE (Illegal instruction) with missing imported symbol
  * DMD Compiler bug fixes:
  - Bugzilla 23686: template instance reused with default alias arg
  - Bugzilla 23865: duplicate alias not detected
- Changes from version 2.105.2:
  * DMD Compiler regression fixes
  - Bugzilla 24109: [REG2.103] 'need this' when invoking outer method from inner method
  - Bugzilla 24110: [REG2.104] Array comparison lowering apparently not handled properly in __traits(compiles)
  - Bugzilla 24118: ICE / regression from 2.103.1 - segfault on CTFE only code in 2.104.2 and 2.105.0
  - Bugzilla 24144: [REG2.105] Silent file name index overflow
  * DMD Compiler bug fixes
  - Bugzilla 24139: 'this' corruption in extern(C++) dtor when destructing via TypeInfo_Struct
  * Phobos bug fixes
  - Bugzilla 24140: Int128.opBinary [+-*/%&amp;|^] with negative long arguments gives wrong answers
- Changes from version 2.105.1:
  * A function with enum storage class is now deprecated, not an error
  * for detail and bugfixes see https://dlang.org/changelog/2.105.1.html#bugfix-list
- Changes from version 2.105.0:
  * Compiler changes
  - Assignment-style syntax is now allowed for alias this
  - Catch clause must take only const or mutable exceptions
  - Functions can no longer have enum storage class
  - Overloading extern(C) functions is now an error
  - Deprecation phase ended for access to private method when overloaded with public method.
  - Added predefined version identifier VisionOS
  * Runtime changes
  - Linux input header translations were added to druntime
  - Integration with the Valgrind memcheck tool has been added to the garbage collector
  * Library changes
  - Better static assert messages for std.algorithm.iteration.permutations
  - Added std.system.instructionSetArchitecture and std.system.ISA
  * Dub changes
  - Exposed --d-versions CLI flag
  * for details see https://dlang.org/changelog/2.105.0.html#bugfix-list</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1710244800">- Update to version 2.107.1
  * DMD Compiler regression fixes
  - Bugzilla 20802: [REG2.088.0] Link failure with writefln
  - Bugzilla 24371: [REG 2.104] String array concatenation does not respect operator precedence
  * DMD Compiler bug fixes
  - Bugzilla 20297: ld: warning: no platform load command found for macOS
  - Bugzilla 21047: Linker error: GOT load reloc does not point to a movq instruction
  - Bugzilla 22556: Invalid GOT load reloc with -O on MacOS
  - Bugzilla 23517: dmd with -g flag fails to link on macOS with unaligned pointer
  - Bugzilla 24137: Link failure on macOS with symbol count from symbol table and dynamic symbol table differ
  - Bugzilla 24365: ICE when printing 'showCtfeContext' error
  - Bugzilla 24370: static array values in static AA initialise to dynamic arrays
  - Bugzilla 24399: Link failure on MacOS with address=0x0 points to section(2) with no content in config_a68_4c3.o
  - Bugzilla 24409: DMD crash for CTFE in stompOverlappedFields
  - Bugzilla 24422: ImportC: ICE: Segfault in cparseFunctionDefinition
- Update to version 2.107.0
  * Compiler changes
  - A string literal as an assert condition is deprecated
  - Unrecognized pragmas are no longer an error, but instead simply ignored
  - Added @standalone for module constructors
  - _d_newarray{mTX,miTX,OpT} are converted to a single template: _d_newarraymTX
  * Runtime changes
  - Using an invalid MemoryOrder for core.atomic operations are now rejected at compile time
  * Library changes
  - isForwardRange now takes an optional element type.
- Update to version 2.106.1
  * DMD Compiler regression fixes
  - Bugzilla 22212: dmd version has -dirty suffix on windows
  * DMD Compiler bug fixes
  - Bugzilla 22483: DMD generates invalid string sections that work by coincidence
  - Bugzilla 24281: Segfault with missing field after named argument
  - Bugzilla 24283: [SIMD][CODEGEN] Bad codegen with and not + AVX2 registers
- Update to version 2.106.0
  * 2.106.0 comes with 17 major changes and 65 fixed Bugzilla issues. For
    full changelog see https://dlang.org/changelog/2.106.0.html</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1710590400">- Added rdmd run/build tool ( https://dlang.org/rdmd.html )</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1712059200">- Update to version 2.108.0
  * Compiler changes
  - Added .nameSig field to TypeInfo_Class in object.d
  - Keywords like __FILE__ are always evaluated at the call site
  - Hex strings now convert to integer arrays
  - Add support for Interpolated Expression Sequences
  - Named arguments for functions have been implemented and documented
  * Library changes
  - isForwardRange, isBidirectionalRange, and isRandomAccessRange now take an optional element type
  - std.uni has been upgraded from Unicode 15.0.0 to 15.1.0</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1714996800">- Update to version 2.108.1
  * DMD Compiler regression fixes
    + Bugzilla 23657: [REG2.101] Incorrect error escape reference to stack allocated value
    + Bugzilla 24436: a array be overwritten when other array be written
    + Bugzilla 24479: [REG2.104] Error on getAttributes on getOverloads of templates
    + Bugzilla 24505: [REG2.108] ImportC: Function-like macros (newly translated to templates) may collide with regular symbols
    + Bugzilla 24519: compiler segfault on default argument with slice operator []
  * DMD Compiler bug fixes
    + Bugzilla 24495: ImportC: Struct initialization expression fails to initialize field
    + Bugzilla 24509: importC cannot handle _stdcall Function Calling Convention with single heading underscore
    + Bugzilla 24511: __stdcall functions from C are extern(C) in D.
  * Phobos regression fixes
    + Bugzilla 24481: retro no longer works with types that support assignment but not moving
  * Druntime regression fixes
    + Bugzilla 24498: Multidimensional array not scanned by GC</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1717329600">- Update to version 2.109.0
  * Compiler changes
    + [next edition] Aliasing a member of a type instance is now an error
    + Add Bitfield Introspection Capability
    + Added __ctfeWrite to write messages from CTFE
    + Deprecation warnings are now also limited by -verrors
    + dtoh generates signatures for extern(Windows) and extern(System) functions.
    + foreach on a dynamic array can have an index type smaller than size_t
    + foreach_reverse on a delegate is now an error
    + Expansion of identifier tables to allow new characters to match C23 have been
    added along with CLI configurability
    + ImportC has improved Unicode support
    + Missing symbol errors are made less cryptic
  * Runtime changes
    + Add module core.sys.linux.sys.mount.
    + Remove all collectNoStack functions and API from druntime.
    + Mark Thread.sleep as @trusted
  * Library changes
    + Add std.process.Config.preExecDelegate</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1720008000">- Update to version 2.109.1
  * Compiler change: bool values other than 0 or 1 are not @safe
  * fixed Bugzilla 24602: Internal compiler error: failed to detect static
    initialization of associative array
  * fixed Bugzilla 24566: condition that starts with runtime value and uses
    compile time array does not short circuit
  * Bugzilla 24596: Rebindable2 corrupts objects
- suggest to install also phobos-devel-static (see bsc#1219521)</changelog>
</package>
<package pkgid="2f4b361ca64a6b055302aa58a5557a94c059650712a8ea5a82a7c20925d924c98492a53b044afded6f24f725a2191cf4205743e55ebada795f008dc286933d7e" name="dmenu" arch="x86_64">
  <version epoch="0" ver="5.3" rel="bp160.1.12"/>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1579780800">- bump to 4.9
  for complete list of changes see
  see https://git.suckless.org/dmenu/log/?h=4.9&amp;qt=range&amp;q=4.8..4.9
- dmenu-optflags.patch: Adapt patch to dmenu 4.9</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1582545600">- Modernise spec file
- Install license and readme file</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1582545601">- add 0001-Close-when-the-embedding-window-is-destroyed.patch
- add 0002-fix-crash-when-XOpenIM-returns-NULL.patch
  - fix crash on input</changelog>
  <changelog author="Tomas Cech &lt;sleep_walker@opensuse.org&gt;" date="1583409600">- revert back to 4.8
  Based on bnc#1164650, fixes in GIT and personal experience - reverting.
- refresh dmenu-optflags again
- remove patches:
    0001-Close-when-the-embedding-window-is-destroyed.patch
    0002-fix-crash-when-XOpenIM-returns-NULL.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 4.9
  * Use slow path if stdin is a tty
  * Use bold for keyboard shortcuts in dmenu.1
  * Fix cursor drawn position with wide glyphs</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598875200">- add input fixes from master branch at https://git.suckless.org/dmenu/ (bsc#1164650):
  0001-Close-when-the-embedding-window-is-destroyed.patch
  0002-fix-crash-when-XOpenIM-returns-NULL.patch
  0003-make-dmenu_path-script-executable.patch
  0004-improve-xopenim-error-message.patch
  0005-revert-IME-support.patch
  0006-Fix-memory-leaks-in-drw.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600603200">- update to 5.0:
  * no change compared to 4.9 with the extra patches
- remove   0001-Close-when-the-embedding-window-is-destroyed.patch
  0002-fix-crash-when-XOpenIM-returns-NULL.patch
  0003-make-dmenu_path-script-executable.patch
  0004-improve-xopenim-error-message.patch
  0005-revert-IME-support.patch
  0006-Fix-memory-leaks-in-drw.patch (upstream)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1652270400">- Update to version 5.1
  * inputw: improve correctness and startup performance
  * drw_text: don't segfault when called with 0 width
  * drw_text: improve performance when there's no match
  * significantly improve performance on large strings
  * improve performance of case-insensitive matching
  * add support for more keypad keys</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1672920000">- update to 5.2:
  * dmenu: use die() to print usage message
  * remove workaround for a crash in emojis, fixed in Xft 2.3.5
  * tab-complete: determine size before copying
  * readstdin: use getline
  * improve correctness and startup performance
  * drw_text: account for fallback fonts in ellipsis width
  * drw_text: don't segfault when called with 0 width
  * fix UB with the function iscntrl()
  * avoid redraw when there's no change
  * inputw: improve correctness and startup performance
  * signifcantly improve performance on large strings</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1711281600">- update to 5.3:
  * fix leak when getline fails
  * readstdin: allocate amount of items
  * readstdin: reduce memory-usage
  * fix BadMatch error when embedding on some windows
  * drw: minor improvement to the nomatches cache
  * remove options target</changelog>
</package>
<package pkgid="84d238e304d25651a6bd1e5a91ab41b016c197e59135456aa427eb8722d1d2bc1ba571856be553cfcd70db4a11929fabb8c40d2f34036d1752946a0029bc3caa" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.6" rel="160000.2.2"/>
  <changelog author="jdelvare@suse.de" date="1602676800">- Update to upstream version 3.3:
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Add bios-revision, firmware-revision and system-sku-number to -s option.
  * Use the most appropriate unit for cache size.
  * Decode system slot base bus width and peers.
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-allow-overriding-build-settings-from-env.patch,
    dmidecode-dont-choke-on-invalid-processor-voltage.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-fix-the-alignment-of-type-25-name.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch, and
    dmidecode-print-type-33-name-unconditionally.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1611316800">2 recommended fixes from upstream:
- dmidecode-fix-the-condition-error-in-ascii_filter.patch:
  dmidecode: Fix the condition error in ascii_filter.
- dmidecode-fix-crash-with-u-option.patch: dmidecode: Fix crash
  with -u option.</changelog>
  <changelog author="jdelvare@suse.de" date="1656331200">- Update to upstream version 3.4:
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-fix-crash-with-u-option.patch and
    dmidecode-fix-the-condition-error-in-ascii_filter.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1662724800">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1678968000">- Update to upstream version 3.5:
  * Decode HPE OEM records 216, 224, 230, 238 and 242.
  * Fortify entry point length checks.
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Do not let --dump-bin overwrite an existing file.
  * Ensure /dev/mem is a character device file.
  * Obsoletes news-fix-typo.patch and
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1679313600">- arm-use-alignment-workaround.patch: Fix the massive build
  warnings on armv7l.</changelog>
  <changelog author="jdelvare@suse.de" date="1680523200">- dmioem-hpe-oem-record-237-firmware-change.patch: Fix the decoding
  of the last field of HPE OEM record type 237 (DIMM Vendor
  Information).</changelog>
  <changelog author="jdelvare@suse.de" date="1682596800">Fix a potential regression:
- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes.</changelog>
  <changelog author="jdelvare@suse.com" date="1722254400">- Update to upstream version 3.6 (jsc#PED-8647):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support.
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules.
  * Add bash completion.
  * Decode HPE OEM records 197, 239 and 245.
  * Implement options --list-strings and --list-types.
  * Update HPE OEM records 203, 212, 216, 221, 233, 236, 238 and 242.
  * Update Redfish support.
  * Bug fixes:
    Fix enabled slot characteristics not being printed
  * Minor improvements:
    Print slot width on its own line
    Use standard strings for slot width
  * Obsoletes arm-use-alignment-workaround.patch,
    dmioem-hpe-oem-record-237-firmware-change.patch and
    use-read_file-to-read-from-dump.patch.
  Update for HPE servers from upstream:
- dmioem-update-hpe-oem-type-238.patch: Decode PCI bus segment in
  HPE type 238 records.
- Drop legacy Provides: and Obsoletes: tags. The split from the
  pmtools package happened 15 years ago so they are no longer
  relevant.</changelog>
  <changelog author="bwiedemann@suse.com" date="1743163200">- Use %autosetup to work with rpm-4.20 (bsc#1240154)</changelog>
</package>
<package pkgid="572be9567efa5bb25968a2b5d591870150e2c09bd1448cdb49cbb44f2cf1e2a28a9a8a744a25329f5a05f5871e4d82e25f88a57acc8e5c57b576c91e7162c6d8" name="dmraid" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16.3" rel="160000.2.2"/>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="mwilck@suse.com" date="1509019200">- dmraid: remove partitions with O_RDONLY
  * add 0001-remove-partitions-with-O_RDONLY.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mliska@suse.cz" date="1558958400">- Add fix-return-function-type.patch in order to fix
  a warning.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to 1.0.0.rc16 patch level 3
- Drop upstream fixed and resolved dmraid-destdir.patch,
  dmraid-1.0.0.rc16-cvs-2010-02-02.patch, lib-install.patch,
  fix-return-function-type.patch and handle_spaces
- Drop remove_trylock, only required for very old glibc versions
  (openSUSE 11.x)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.
- Rebase 0001-remove-partitions-with-O_RDONLY.patch to apply -p1.</changelog>
</package>
<package pkgid="104cf2c4c0b504e67087e96ddad7d815673b3e4a2e104dca30cc3f41bbcaecbc8774ae954140187713452ed3700f371f321f7b6c93b223ca1cb716bd976426b0" name="dmraid-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0.rc16.3" rel="160000.2.2"/>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="mwilck@suse.com" date="1509019200">- dmraid: remove partitions with O_RDONLY
  * add 0001-remove-partitions-with-O_RDONLY.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mliska@suse.cz" date="1558958400">- Add fix-return-function-type.patch in order to fix
  a warning.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to 1.0.0.rc16 patch level 3
- Drop upstream fixed and resolved dmraid-destdir.patch,
  dmraid-1.0.0.rc16-cvs-2010-02-02.patch, lib-install.patch,
  fix-return-function-type.patch and handle_spaces
- Drop remove_trylock, only required for very old glibc versions
  (openSUSE 11.x)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.
- Rebase 0001-remove-partitions-with-O_RDONLY.patch to apply -p1.</changelog>
</package>
<package pkgid="4757e92e07240f6ac32666a298f54b8af811e8de3216fd7809a2229cc515ac70a9aa8f9e09f1c190c6dcfb81d9a831ef8b7af1efb2dfbc0e372101ac2aa268d6" name="dmz-icon-theme-cursors" arch="noarch">
  <version epoch="0" ver="11.4.0" rel="160000.2.2"/>
  <changelog author="abockover@novell.com" date="1250683200">- created package</changelog>
  <changelog author="vuntz@opensuse.org" date="1281182400">- Rename package from icon-theme-dmz-cursors to
  dmz-icon-theme-cursors, to follow convention used by other
  packages. Add appropriate Provides/Obsoletes.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="vuntz@opensuse.org" date="1358424000">- Change license from GPL-2.0+ to CC-BY-SA-3.0. Fix bnc#782743.</changelog>
  <changelog author="lbeltrame@kde.org" date="1498305600">- Update to the latest version in Debian (0.4.4)
  * Provide DMZ-White and DMZ-Black cursors</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499601600">- actually build and install the cursors, instead of random stuff</changelog>
  <changelog author="cornelis@solcon.nl" date="1568116800">- Add fix-for-plasma.patch to add symlinks for cursors used by KDE
  Plasma. This patch brings the DMZ theme on par with the breeze
  cursor themes.</changelog>
  <changelog author="code@luigifab.fr" date="1708084800">- New upstream release in Debian (0.4.5.1)
  * Adds dmz-cursor-themes-name.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="7cd56272090bb0a7a4060baad43a64e5b4fb0cc6659f02283865987916fe7ef954dca1dbd725131a58795c5497f94d236ae86f1ff1c6a1660f9183a0590087a9" name="dnf" arch="noarch">
  <version epoch="0" ver="4.23.0" rel="bp160.1.7"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1648209600">- Add Fix-processing-of-download-errors.patch backported from upstream
  * Fix dnf incorrectly aborting on non-English systems when packages already cached (rh#2024527)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648382400">- Update to 4.11.1
  + Allow destdir option with modulesync command
  + Add documentation for query api flags (rh#2035577)
  + Fix swap command to work with local rpm files correctly (rh#2036434)
  + Fix regression in verifying signatures using rpmkeys
  + Use rpm.TransactionSet.dbCookie() to determining if rpmdb has changed (rh#2043476)
  + Fix decompression of groups.xml (rh#2030255)
  + Fix history undo on a Reason Change (rh#2010259, rh#2053014)
  + Remove /usr/bin from sys.path to avoid accidentally importing garbage
  + Fix: Python dnf API does not respect cacheonly (rh#1862970)
  + Fix python3.11 build: remove deprecated, update traceback regex
  + fix dnf mark error when history sqlite missing
  + [doc] Improve description of multilib_policy=all (rh#1996681, rh#1995630)
  + [doc] clarify effect of --enablerepo and --disablerepo options (rh#2031414)
  + [doc] default values for module_obsoletes and module_stream_switch (rh#2051846)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665835200">- update to 4.14.0:
  * doc: Describe how gpg keys are stored for `repo_ggpcheck`
  * Set default value for variable to prevent crash
  * Add only relevant pkgs to upgrade transaction
  * Use `installed_all` because `installed_query` is filtered user input
  * Don't include resolved advisories for obsoletes filtering with security filters
  * Allow passing plugin parameters with dashes in names
  * Fix upgrade from file to noarch pkg
  * Translations update
  * Expose plugin unload method to API
  * Add support for group upgrade rollback
  * Fix broken dependencies error reporting
  * Add doc related to --destdir and --downloadonly options
- includes changes from 4.13.0:
  * Base.reset: plug (temporary) leak of libsolv's page file descriptors
  * Don't use undocumented re.template()
  * Small change to better present the option
  * Use sqlite cache to make bash completion snappier
  * includes changes from 4.12.0:
  * dnf.conf: hint users where to find more info about defaults and other options
  * Fix unittests that relied on checksum being at the end of solvfiles
  * completion: remove unnecessary echo
  * Fix remove when no repos are enabled
  * Add loongarch support for dnf
  * Add spaces between words to fix typos
  * [doc] Improve "proxy" configuration option documentation
  * Fix download errors handling in non-english locales
- drop Fix-processing-of-download-errors.patch, upstream</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1676289600">- spec: Run python_compileall macro to generate bytecode</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681732800">- BuildRequire pkgconfig(bash-completion) instead of
  bash-completion: the build system needs this to find out where to
  install the completion files to.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1699099200">- Update to 4.18.0
  + Add reboot option to DNF Automatic (rh#2124793)
  + Add support for rollback of group upgrade rollback (rh#2016070)
  + Omit src RPMs from check-update (rh#2151910)
  + repoquery: Properly sanitize queryformat strings (rh#2140884)
  + Don't double-encode RPM URLs passed on CLI (rh#2103015)
  + Allow passing CLI options when loading remote cfg (rh#2060127)
  + Ignore processing variable files with unsupported encoding (rh#2141215)
  + Fix AttributeError when IO busy and press ctrl+c (rh#2172433)
  + cli: Allow = in setopt values
  + Mark strftime format specifiers for translation
  + Unload plugins upon their deletion
  + Fixes in docs and help command
  + Fix plugins unit tests
  + Add unit tests for dnf mark
  + smtplib: catch OSError, not SMTPException
  + automatic: Fix online detection with proxy (rh#2022440)
  + automatic: Return an error when transaction fails (rh#2170093)
  + repoquery: Allow uppercased query tags (rh#2185239)
  + Update repo metadata cache pattern to include zstd
  + Add provide exception handling
  + When parsing over a KVP list, do not return till the whole list is parsed
  + Provide /usr/bin/dnf4 symlink to /usr/bin/dnf-3
  + Document the symbols in the output of `dnf history list` (rh#2172067)
  + crypto: Use libdnf crypto API instead of using GnuPG/GpgME
  + Block signals during RPM transaction processing (rh#2133398)
  + Fix bash completion due to sqlite changes (rh#2232052)
  + automatic: allow use of STARTTLS/TLS
  + automatic: use email_port specified in config
  + base: Add obsoleters of only latest versions (rh#2183279, rh#2176263)
  + comps: Fix marking a group package as installed (rh#2066638)
  + distro-sync: Print better info message when no match (rh#2011850)
  + Include dist-info for python3-dnf (rh#2239323)
  + Revert "Block signals during RPM transaction processing" (rh#2133398)
  + Do not print details of verifying (rh#1908253)
  + conf: Split $releasever to $releasever_major and $releasever_minor (rh#1789346)
  + Update translations</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1702900800">- Add Requires(post) dependency for dnf-data</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728648000">- Do not recommend -lang package: the lang package has already the
  relevant supplements in place.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1742385600">- New upstream release 4.23.0
  * automatic: Enhance errors reporting
  * automatic: Fix incorrect Error class instantiation
  * doc: `--disableexcludepkgs=all` doesn't affect just file configuration
  * Update ko.po
  * Update README.rst started 1
  * Tests: Avoid the multiprocessing forkserver method
  * cli: Print a plugin suggestion on installed but expired pgp key
  * copr: Add Copr build files
  * Add support for --transient
  * bootc: Document `--transient` and `persistence`
  * bootc: Use ostree GObject API to get deployment status
  * bootc: "Re-locking": use ostree admin unlock --transient
  * spec: Add dnf-bootc subpackage
  * Require libdnf &gt;= 0.74.0 with `persistence` option
  * Derive releasever_{major,minor} in conf, not substitutions
  * Override releasever_{major,minor} with provides
  * Add --releasever-major and --releasever-minor options
  * doc: Document detect_releasevers and update example
  * tests: Patch detect_releasevers, not detect_releasever
  * Document how --releasever, --releasever_{major,minor} affect each other
  * Move releasever_minor setter docstring to the correct function
  * Enable automatic PR reviews
  * Usage help: don't mark mandatory option parameters as optional
- New upstream release 4.22.0
  * doc: Naming of source and debug repos
  * spec: Fix ownership of /etc/yum tree
  * Allow --installroot on read-only bootc system
  * Allow --downloadonly on read-only bootc system
  * base: Add kernel-core to reboot_needed list
  * AUTHORS: Add myself
  * Update need_reboot for dnf-automatic
  * doc: Example send_error_messages in /etc/dnf/automatic.conf
  * automatic: Check availability of config file
  * Updated conf_ref to reflect change in fastestmirror behavior
  * Fix display issue of a code snippet.
  * Print rpm package unpack errors to the user (RhBug:2312906)
  * Fix package location if baseurl is present in the metadata
- Update to 4.21.0
  * Add detection for ostree-based systems and warn users about losing changes
  * Fix: No traceback when Python interpreter is running with -P
  * Allow `%py3_shebang_fix` macro to add `-P` argument to shebang lines
  * man: Improve upgrade-minimal command docs (RHEL-6417)
  * Limit queries to nevra forms when provided by command
  * [doc] Remove provide of spec definition for repoquery command
  * Update the man page entry for the countme option
  * Drop collect file for ABRT
- Update to 4.20.0:
  * repoquery: Fix loading filelists when -f is used (RhBug:2276012)
  * remove: --duplicates and --oldinstallonly exit with 0 when nothing to do (RHEL-6424)
  * man: Prepare pages for dnf5 switch
- New upstream release 4.19.1:
  * Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme`
  * Drop dnf obsoletion temporarily
  * doc: Update FAQ entry on filelists
  * build: Adapt to changes in Fedora packaging of bash-completion
  * Support RPMTRANS_FLAG_DEPLOOPS
  * Add all candidates for reinstall to solver
  * Fix handling installonly packages reasons
  * Remove confusing sentence from documentation
  * Remove "leaf" word from documentation
  * Update documentation of history userinstalled command
  * Onboard packit tests
  * doc: Makecache with timer tries only one mirror
  * ELN: Don't obsolete DNF with DNF5 yet
  * bash-completion: Complete dnf command only if we own it
  * bash-completion: Prepare ownerships for dnf5 switch
- New upstream release 4.19:
  * filelists metadata loading on demand
  * deltarpm disabled on Fedora by default
  * conf: Introduce new optional_metadata_types option to load filelists on demand
  * cli: Add a hint for user on transaction file dependency failure
  * cli: Setup filelists metadata for commands that need them
  * util: Add function for detecting file in specs
  * Fix failing API unit test on rawhide (RhBug:2261066)
  * automatic: Use add_security_filters, not _update_security_filters</changelog>
</package>
<package pkgid="101f6ccf40b0ccfc3d9005e1d842f344c4d43b99bf97a371e9ed3011fd9c5d9f4ea112d238faf3824e9624af776e768812bce5a4ede9e578bbccaaedab4e6611" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.23.0" rel="bp160.1.7"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1648209600">- Add Fix-processing-of-download-errors.patch backported from upstream
  * Fix dnf incorrectly aborting on non-English systems when packages already cached (rh#2024527)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648382400">- Update to 4.11.1
  + Allow destdir option with modulesync command
  + Add documentation for query api flags (rh#2035577)
  + Fix swap command to work with local rpm files correctly (rh#2036434)
  + Fix regression in verifying signatures using rpmkeys
  + Use rpm.TransactionSet.dbCookie() to determining if rpmdb has changed (rh#2043476)
  + Fix decompression of groups.xml (rh#2030255)
  + Fix history undo on a Reason Change (rh#2010259, rh#2053014)
  + Remove /usr/bin from sys.path to avoid accidentally importing garbage
  + Fix: Python dnf API does not respect cacheonly (rh#1862970)
  + Fix python3.11 build: remove deprecated, update traceback regex
  + fix dnf mark error when history sqlite missing
  + [doc] Improve description of multilib_policy=all (rh#1996681, rh#1995630)
  + [doc] clarify effect of --enablerepo and --disablerepo options (rh#2031414)
  + [doc] default values for module_obsoletes and module_stream_switch (rh#2051846)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665835200">- update to 4.14.0:
  * doc: Describe how gpg keys are stored for `repo_ggpcheck`
  * Set default value for variable to prevent crash
  * Add only relevant pkgs to upgrade transaction
  * Use `installed_all` because `installed_query` is filtered user input
  * Don't include resolved advisories for obsoletes filtering with security filters
  * Allow passing plugin parameters with dashes in names
  * Fix upgrade from file to noarch pkg
  * Translations update
  * Expose plugin unload method to API
  * Add support for group upgrade rollback
  * Fix broken dependencies error reporting
  * Add doc related to --destdir and --downloadonly options
- includes changes from 4.13.0:
  * Base.reset: plug (temporary) leak of libsolv's page file descriptors
  * Don't use undocumented re.template()
  * Small change to better present the option
  * Use sqlite cache to make bash completion snappier
  * includes changes from 4.12.0:
  * dnf.conf: hint users where to find more info about defaults and other options
  * Fix unittests that relied on checksum being at the end of solvfiles
  * completion: remove unnecessary echo
  * Fix remove when no repos are enabled
  * Add loongarch support for dnf
  * Add spaces between words to fix typos
  * [doc] Improve "proxy" configuration option documentation
  * Fix download errors handling in non-english locales
- drop Fix-processing-of-download-errors.patch, upstream</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1676289600">- spec: Run python_compileall macro to generate bytecode</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681732800">- BuildRequire pkgconfig(bash-completion) instead of
  bash-completion: the build system needs this to find out where to
  install the completion files to.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1699099200">- Update to 4.18.0
  + Add reboot option to DNF Automatic (rh#2124793)
  + Add support for rollback of group upgrade rollback (rh#2016070)
  + Omit src RPMs from check-update (rh#2151910)
  + repoquery: Properly sanitize queryformat strings (rh#2140884)
  + Don't double-encode RPM URLs passed on CLI (rh#2103015)
  + Allow passing CLI options when loading remote cfg (rh#2060127)
  + Ignore processing variable files with unsupported encoding (rh#2141215)
  + Fix AttributeError when IO busy and press ctrl+c (rh#2172433)
  + cli: Allow = in setopt values
  + Mark strftime format specifiers for translation
  + Unload plugins upon their deletion
  + Fixes in docs and help command
  + Fix plugins unit tests
  + Add unit tests for dnf mark
  + smtplib: catch OSError, not SMTPException
  + automatic: Fix online detection with proxy (rh#2022440)
  + automatic: Return an error when transaction fails (rh#2170093)
  + repoquery: Allow uppercased query tags (rh#2185239)
  + Update repo metadata cache pattern to include zstd
  + Add provide exception handling
  + When parsing over a KVP list, do not return till the whole list is parsed
  + Provide /usr/bin/dnf4 symlink to /usr/bin/dnf-3
  + Document the symbols in the output of `dnf history list` (rh#2172067)
  + crypto: Use libdnf crypto API instead of using GnuPG/GpgME
  + Block signals during RPM transaction processing (rh#2133398)
  + Fix bash completion due to sqlite changes (rh#2232052)
  + automatic: allow use of STARTTLS/TLS
  + automatic: use email_port specified in config
  + base: Add obsoleters of only latest versions (rh#2183279, rh#2176263)
  + comps: Fix marking a group package as installed (rh#2066638)
  + distro-sync: Print better info message when no match (rh#2011850)
  + Include dist-info for python3-dnf (rh#2239323)
  + Revert "Block signals during RPM transaction processing" (rh#2133398)
  + Do not print details of verifying (rh#1908253)
  + conf: Split $releasever to $releasever_major and $releasever_minor (rh#1789346)
  + Update translations</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1702900800">- Add Requires(post) dependency for dnf-data</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728648000">- Do not recommend -lang package: the lang package has already the
  relevant supplements in place.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1742385600">- New upstream release 4.23.0
  * automatic: Enhance errors reporting
  * automatic: Fix incorrect Error class instantiation
  * doc: `--disableexcludepkgs=all` doesn't affect just file configuration
  * Update ko.po
  * Update README.rst started 1
  * Tests: Avoid the multiprocessing forkserver method
  * cli: Print a plugin suggestion on installed but expired pgp key
  * copr: Add Copr build files
  * Add support for --transient
  * bootc: Document `--transient` and `persistence`
  * bootc: Use ostree GObject API to get deployment status
  * bootc: "Re-locking": use ostree admin unlock --transient
  * spec: Add dnf-bootc subpackage
  * Require libdnf &gt;= 0.74.0 with `persistence` option
  * Derive releasever_{major,minor} in conf, not substitutions
  * Override releasever_{major,minor} with provides
  * Add --releasever-major and --releasever-minor options
  * doc: Document detect_releasevers and update example
  * tests: Patch detect_releasevers, not detect_releasever
  * Document how --releasever, --releasever_{major,minor} affect each other
  * Move releasever_minor setter docstring to the correct function
  * Enable automatic PR reviews
  * Usage help: don't mark mandatory option parameters as optional
- New upstream release 4.22.0
  * doc: Naming of source and debug repos
  * spec: Fix ownership of /etc/yum tree
  * Allow --installroot on read-only bootc system
  * Allow --downloadonly on read-only bootc system
  * base: Add kernel-core to reboot_needed list
  * AUTHORS: Add myself
  * Update need_reboot for dnf-automatic
  * doc: Example send_error_messages in /etc/dnf/automatic.conf
  * automatic: Check availability of config file
  * Updated conf_ref to reflect change in fastestmirror behavior
  * Fix display issue of a code snippet.
  * Print rpm package unpack errors to the user (RhBug:2312906)
  * Fix package location if baseurl is present in the metadata
- Update to 4.21.0
  * Add detection for ostree-based systems and warn users about losing changes
  * Fix: No traceback when Python interpreter is running with -P
  * Allow `%py3_shebang_fix` macro to add `-P` argument to shebang lines
  * man: Improve upgrade-minimal command docs (RHEL-6417)
  * Limit queries to nevra forms when provided by command
  * [doc] Remove provide of spec definition for repoquery command
  * Update the man page entry for the countme option
  * Drop collect file for ABRT
- Update to 4.20.0:
  * repoquery: Fix loading filelists when -f is used (RhBug:2276012)
  * remove: --duplicates and --oldinstallonly exit with 0 when nothing to do (RHEL-6424)
  * man: Prepare pages for dnf5 switch
- New upstream release 4.19.1:
  * Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme`
  * Drop dnf obsoletion temporarily
  * doc: Update FAQ entry on filelists
  * build: Adapt to changes in Fedora packaging of bash-completion
  * Support RPMTRANS_FLAG_DEPLOOPS
  * Add all candidates for reinstall to solver
  * Fix handling installonly packages reasons
  * Remove confusing sentence from documentation
  * Remove "leaf" word from documentation
  * Update documentation of history userinstalled command
  * Onboard packit tests
  * doc: Makecache with timer tries only one mirror
  * ELN: Don't obsolete DNF with DNF5 yet
  * bash-completion: Complete dnf command only if we own it
  * bash-completion: Prepare ownerships for dnf5 switch
- New upstream release 4.19:
  * filelists metadata loading on demand
  * deltarpm disabled on Fedora by default
  * conf: Introduce new optional_metadata_types option to load filelists on demand
  * cli: Add a hint for user on transaction file dependency failure
  * cli: Setup filelists metadata for commands that need them
  * util: Add function for detecting file in specs
  * Fix failing API unit test on rawhide (RhBug:2261066)
  * automatic: Use add_security_filters, not _update_security_filters</changelog>
</package>
<package pkgid="1016206867ff291dd2c12a33da62c6e152921c3befa665eaa08b546d9bd5255f96e9b937dfd96fe0fe793d651c582f9ba337e89f62e849396aa51e1ef852d336" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.23.0" rel="bp160.1.7"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1648209600">- Add Fix-processing-of-download-errors.patch backported from upstream
  * Fix dnf incorrectly aborting on non-English systems when packages already cached (rh#2024527)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648382400">- Update to 4.11.1
  + Allow destdir option with modulesync command
  + Add documentation for query api flags (rh#2035577)
  + Fix swap command to work with local rpm files correctly (rh#2036434)
  + Fix regression in verifying signatures using rpmkeys
  + Use rpm.TransactionSet.dbCookie() to determining if rpmdb has changed (rh#2043476)
  + Fix decompression of groups.xml (rh#2030255)
  + Fix history undo on a Reason Change (rh#2010259, rh#2053014)
  + Remove /usr/bin from sys.path to avoid accidentally importing garbage
  + Fix: Python dnf API does not respect cacheonly (rh#1862970)
  + Fix python3.11 build: remove deprecated, update traceback regex
  + fix dnf mark error when history sqlite missing
  + [doc] Improve description of multilib_policy=all (rh#1996681, rh#1995630)
  + [doc] clarify effect of --enablerepo and --disablerepo options (rh#2031414)
  + [doc] default values for module_obsoletes and module_stream_switch (rh#2051846)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665835200">- update to 4.14.0:
  * doc: Describe how gpg keys are stored for `repo_ggpcheck`
  * Set default value for variable to prevent crash
  * Add only relevant pkgs to upgrade transaction
  * Use `installed_all` because `installed_query` is filtered user input
  * Don't include resolved advisories for obsoletes filtering with security filters
  * Allow passing plugin parameters with dashes in names
  * Fix upgrade from file to noarch pkg
  * Translations update
  * Expose plugin unload method to API
  * Add support for group upgrade rollback
  * Fix broken dependencies error reporting
  * Add doc related to --destdir and --downloadonly options
- includes changes from 4.13.0:
  * Base.reset: plug (temporary) leak of libsolv's page file descriptors
  * Don't use undocumented re.template()
  * Small change to better present the option
  * Use sqlite cache to make bash completion snappier
  * includes changes from 4.12.0:
  * dnf.conf: hint users where to find more info about defaults and other options
  * Fix unittests that relied on checksum being at the end of solvfiles
  * completion: remove unnecessary echo
  * Fix remove when no repos are enabled
  * Add loongarch support for dnf
  * Add spaces between words to fix typos
  * [doc] Improve "proxy" configuration option documentation
  * Fix download errors handling in non-english locales
- drop Fix-processing-of-download-errors.patch, upstream</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1676289600">- spec: Run python_compileall macro to generate bytecode</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681732800">- BuildRequire pkgconfig(bash-completion) instead of
  bash-completion: the build system needs this to find out where to
  install the completion files to.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1699099200">- Update to 4.18.0
  + Add reboot option to DNF Automatic (rh#2124793)
  + Add support for rollback of group upgrade rollback (rh#2016070)
  + Omit src RPMs from check-update (rh#2151910)
  + repoquery: Properly sanitize queryformat strings (rh#2140884)
  + Don't double-encode RPM URLs passed on CLI (rh#2103015)
  + Allow passing CLI options when loading remote cfg (rh#2060127)
  + Ignore processing variable files with unsupported encoding (rh#2141215)
  + Fix AttributeError when IO busy and press ctrl+c (rh#2172433)
  + cli: Allow = in setopt values
  + Mark strftime format specifiers for translation
  + Unload plugins upon their deletion
  + Fixes in docs and help command
  + Fix plugins unit tests
  + Add unit tests for dnf mark
  + smtplib: catch OSError, not SMTPException
  + automatic: Fix online detection with proxy (rh#2022440)
  + automatic: Return an error when transaction fails (rh#2170093)
  + repoquery: Allow uppercased query tags (rh#2185239)
  + Update repo metadata cache pattern to include zstd
  + Add provide exception handling
  + When parsing over a KVP list, do not return till the whole list is parsed
  + Provide /usr/bin/dnf4 symlink to /usr/bin/dnf-3
  + Document the symbols in the output of `dnf history list` (rh#2172067)
  + crypto: Use libdnf crypto API instead of using GnuPG/GpgME
  + Block signals during RPM transaction processing (rh#2133398)
  + Fix bash completion due to sqlite changes (rh#2232052)
  + automatic: allow use of STARTTLS/TLS
  + automatic: use email_port specified in config
  + base: Add obsoleters of only latest versions (rh#2183279, rh#2176263)
  + comps: Fix marking a group package as installed (rh#2066638)
  + distro-sync: Print better info message when no match (rh#2011850)
  + Include dist-info for python3-dnf (rh#2239323)
  + Revert "Block signals during RPM transaction processing" (rh#2133398)
  + Do not print details of verifying (rh#1908253)
  + conf: Split $releasever to $releasever_major and $releasever_minor (rh#1789346)
  + Update translations</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1702900800">- Add Requires(post) dependency for dnf-data</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728648000">- Do not recommend -lang package: the lang package has already the
  relevant supplements in place.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1742385600">- New upstream release 4.23.0
  * automatic: Enhance errors reporting
  * automatic: Fix incorrect Error class instantiation
  * doc: `--disableexcludepkgs=all` doesn't affect just file configuration
  * Update ko.po
  * Update README.rst started 1
  * Tests: Avoid the multiprocessing forkserver method
  * cli: Print a plugin suggestion on installed but expired pgp key
  * copr: Add Copr build files
  * Add support for --transient
  * bootc: Document `--transient` and `persistence`
  * bootc: Use ostree GObject API to get deployment status
  * bootc: "Re-locking": use ostree admin unlock --transient
  * spec: Add dnf-bootc subpackage
  * Require libdnf &gt;= 0.74.0 with `persistence` option
  * Derive releasever_{major,minor} in conf, not substitutions
  * Override releasever_{major,minor} with provides
  * Add --releasever-major and --releasever-minor options
  * doc: Document detect_releasevers and update example
  * tests: Patch detect_releasevers, not detect_releasever
  * Document how --releasever, --releasever_{major,minor} affect each other
  * Move releasever_minor setter docstring to the correct function
  * Enable automatic PR reviews
  * Usage help: don't mark mandatory option parameters as optional
- New upstream release 4.22.0
  * doc: Naming of source and debug repos
  * spec: Fix ownership of /etc/yum tree
  * Allow --installroot on read-only bootc system
  * Allow --downloadonly on read-only bootc system
  * base: Add kernel-core to reboot_needed list
  * AUTHORS: Add myself
  * Update need_reboot for dnf-automatic
  * doc: Example send_error_messages in /etc/dnf/automatic.conf
  * automatic: Check availability of config file
  * Updated conf_ref to reflect change in fastestmirror behavior
  * Fix display issue of a code snippet.
  * Print rpm package unpack errors to the user (RhBug:2312906)
  * Fix package location if baseurl is present in the metadata
- Update to 4.21.0
  * Add detection for ostree-based systems and warn users about losing changes
  * Fix: No traceback when Python interpreter is running with -P
  * Allow `%py3_shebang_fix` macro to add `-P` argument to shebang lines
  * man: Improve upgrade-minimal command docs (RHEL-6417)
  * Limit queries to nevra forms when provided by command
  * [doc] Remove provide of spec definition for repoquery command
  * Update the man page entry for the countme option
  * Drop collect file for ABRT
- Update to 4.20.0:
  * repoquery: Fix loading filelists when -f is used (RhBug:2276012)
  * remove: --duplicates and --oldinstallonly exit with 0 when nothing to do (RHEL-6424)
  * man: Prepare pages for dnf5 switch
- New upstream release 4.19.1:
  * Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme`
  * Drop dnf obsoletion temporarily
  * doc: Update FAQ entry on filelists
  * build: Adapt to changes in Fedora packaging of bash-completion
  * Support RPMTRANS_FLAG_DEPLOOPS
  * Add all candidates for reinstall to solver
  * Fix handling installonly packages reasons
  * Remove confusing sentence from documentation
  * Remove "leaf" word from documentation
  * Update documentation of history userinstalled command
  * Onboard packit tests
  * doc: Makecache with timer tries only one mirror
  * ELN: Don't obsolete DNF with DNF5 yet
  * bash-completion: Complete dnf command only if we own it
  * bash-completion: Prepare ownerships for dnf5 switch
- New upstream release 4.19:
  * filelists metadata loading on demand
  * deltarpm disabled on Fedora by default
  * conf: Introduce new optional_metadata_types option to load filelists on demand
  * cli: Add a hint for user on transaction file dependency failure
  * cli: Setup filelists metadata for commands that need them
  * util: Add function for detecting file in specs
  * Fix failing API unit test on rawhide (RhBug:2261066)
  * automatic: Use add_security_filters, not _update_security_filters</changelog>
</package>
<package pkgid="c93af0eaf4a51dca7e668f8a264efebc25d08ff2432d4e00777af832e41bc6cdb9fb136a91ace9bbea29194000c1b2ded8447873568036df5e14652d6d849721" name="dnf-lang" arch="noarch">
  <version epoch="0" ver="4.23.0" rel="bp160.1.7"/>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1648209600">- Add Fix-processing-of-download-errors.patch backported from upstream
  * Fix dnf incorrectly aborting on non-English systems when packages already cached (rh#2024527)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648382400">- Update to 4.11.1
  + Allow destdir option with modulesync command
  + Add documentation for query api flags (rh#2035577)
  + Fix swap command to work with local rpm files correctly (rh#2036434)
  + Fix regression in verifying signatures using rpmkeys
  + Use rpm.TransactionSet.dbCookie() to determining if rpmdb has changed (rh#2043476)
  + Fix decompression of groups.xml (rh#2030255)
  + Fix history undo on a Reason Change (rh#2010259, rh#2053014)
  + Remove /usr/bin from sys.path to avoid accidentally importing garbage
  + Fix: Python dnf API does not respect cacheonly (rh#1862970)
  + Fix python3.11 build: remove deprecated, update traceback regex
  + fix dnf mark error when history sqlite missing
  + [doc] Improve description of multilib_policy=all (rh#1996681, rh#1995630)
  + [doc] clarify effect of --enablerepo and --disablerepo options (rh#2031414)
  + [doc] default values for module_obsoletes and module_stream_switch (rh#2051846)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665835200">- update to 4.14.0:
  * doc: Describe how gpg keys are stored for `repo_ggpcheck`
  * Set default value for variable to prevent crash
  * Add only relevant pkgs to upgrade transaction
  * Use `installed_all` because `installed_query` is filtered user input
  * Don't include resolved advisories for obsoletes filtering with security filters
  * Allow passing plugin parameters with dashes in names
  * Fix upgrade from file to noarch pkg
  * Translations update
  * Expose plugin unload method to API
  * Add support for group upgrade rollback
  * Fix broken dependencies error reporting
  * Add doc related to --destdir and --downloadonly options
- includes changes from 4.13.0:
  * Base.reset: plug (temporary) leak of libsolv's page file descriptors
  * Don't use undocumented re.template()
  * Small change to better present the option
  * Use sqlite cache to make bash completion snappier
  * includes changes from 4.12.0:
  * dnf.conf: hint users where to find more info about defaults and other options
  * Fix unittests that relied on checksum being at the end of solvfiles
  * completion: remove unnecessary echo
  * Fix remove when no repos are enabled
  * Add loongarch support for dnf
  * Add spaces between words to fix typos
  * [doc] Improve "proxy" configuration option documentation
  * Fix download errors handling in non-english locales
- drop Fix-processing-of-download-errors.patch, upstream</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1676289600">- spec: Run python_compileall macro to generate bytecode</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1681732800">- BuildRequire pkgconfig(bash-completion) instead of
  bash-completion: the build system needs this to find out where to
  install the completion files to.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1699099200">- Update to 4.18.0
  + Add reboot option to DNF Automatic (rh#2124793)
  + Add support for rollback of group upgrade rollback (rh#2016070)
  + Omit src RPMs from check-update (rh#2151910)
  + repoquery: Properly sanitize queryformat strings (rh#2140884)
  + Don't double-encode RPM URLs passed on CLI (rh#2103015)
  + Allow passing CLI options when loading remote cfg (rh#2060127)
  + Ignore processing variable files with unsupported encoding (rh#2141215)
  + Fix AttributeError when IO busy and press ctrl+c (rh#2172433)
  + cli: Allow = in setopt values
  + Mark strftime format specifiers for translation
  + Unload plugins upon their deletion
  + Fixes in docs and help command
  + Fix plugins unit tests
  + Add unit tests for dnf mark
  + smtplib: catch OSError, not SMTPException
  + automatic: Fix online detection with proxy (rh#2022440)
  + automatic: Return an error when transaction fails (rh#2170093)
  + repoquery: Allow uppercased query tags (rh#2185239)
  + Update repo metadata cache pattern to include zstd
  + Add provide exception handling
  + When parsing over a KVP list, do not return till the whole list is parsed
  + Provide /usr/bin/dnf4 symlink to /usr/bin/dnf-3
  + Document the symbols in the output of `dnf history list` (rh#2172067)
  + crypto: Use libdnf crypto API instead of using GnuPG/GpgME
  + Block signals during RPM transaction processing (rh#2133398)
  + Fix bash completion due to sqlite changes (rh#2232052)
  + automatic: allow use of STARTTLS/TLS
  + automatic: use email_port specified in config
  + base: Add obsoleters of only latest versions (rh#2183279, rh#2176263)
  + comps: Fix marking a group package as installed (rh#2066638)
  + distro-sync: Print better info message when no match (rh#2011850)
  + Include dist-info for python3-dnf (rh#2239323)
  + Revert "Block signals during RPM transaction processing" (rh#2133398)
  + Do not print details of verifying (rh#1908253)
  + conf: Split $releasever to $releasever_major and $releasever_minor (rh#1789346)
  + Update translations</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1702900800">- Add Requires(post) dependency for dnf-data</changelog>
  <changelog author="pgajdos@suse.com" date="1710331200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728648000">- Do not recommend -lang package: the lang package has already the
  relevant supplements in place.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1742385600">- New upstream release 4.23.0
  * automatic: Enhance errors reporting
  * automatic: Fix incorrect Error class instantiation
  * doc: `--disableexcludepkgs=all` doesn't affect just file configuration
  * Update ko.po
  * Update README.rst started 1
  * Tests: Avoid the multiprocessing forkserver method
  * cli: Print a plugin suggestion on installed but expired pgp key
  * copr: Add Copr build files
  * Add support for --transient
  * bootc: Document `--transient` and `persistence`
  * bootc: Use ostree GObject API to get deployment status
  * bootc: "Re-locking": use ostree admin unlock --transient
  * spec: Add dnf-bootc subpackage
  * Require libdnf &gt;= 0.74.0 with `persistence` option
  * Derive releasever_{major,minor} in conf, not substitutions
  * Override releasever_{major,minor} with provides
  * Add --releasever-major and --releasever-minor options
  * doc: Document detect_releasevers and update example
  * tests: Patch detect_releasevers, not detect_releasever
  * Document how --releasever, --releasever_{major,minor} affect each other
  * Move releasever_minor setter docstring to the correct function
  * Enable automatic PR reviews
  * Usage help: don't mark mandatory option parameters as optional
- New upstream release 4.22.0
  * doc: Naming of source and debug repos
  * spec: Fix ownership of /etc/yum tree
  * Allow --installroot on read-only bootc system
  * Allow --downloadonly on read-only bootc system
  * base: Add kernel-core to reboot_needed list
  * AUTHORS: Add myself
  * Update need_reboot for dnf-automatic
  * doc: Example send_error_messages in /etc/dnf/automatic.conf
  * automatic: Check availability of config file
  * Updated conf_ref to reflect change in fastestmirror behavior
  * Fix display issue of a code snippet.
  * Print rpm package unpack errors to the user (RhBug:2312906)
  * Fix package location if baseurl is present in the metadata
- Update to 4.21.0
  * Add detection for ostree-based systems and warn users about losing changes
  * Fix: No traceback when Python interpreter is running with -P
  * Allow `%py3_shebang_fix` macro to add `-P` argument to shebang lines
  * man: Improve upgrade-minimal command docs (RHEL-6417)
  * Limit queries to nevra forms when provided by command
  * [doc] Remove provide of spec definition for repoquery command
  * Update the man page entry for the countme option
  * Drop collect file for ABRT
- Update to 4.20.0:
  * repoquery: Fix loading filelists when -f is used (RhBug:2276012)
  * remove: --duplicates and --oldinstallonly exit with 0 when nothing to do (RHEL-6424)
  * man: Prepare pages for dnf5 switch
- New upstream release 4.19.1:
  * Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme`
  * Drop dnf obsoletion temporarily
  * doc: Update FAQ entry on filelists
  * build: Adapt to changes in Fedora packaging of bash-completion
  * Support RPMTRANS_FLAG_DEPLOOPS
  * Add all candidates for reinstall to solver
  * Fix handling installonly packages reasons
  * Remove confusing sentence from documentation
  * Remove "leaf" word from documentation
  * Update documentation of history userinstalled command
  * Onboard packit tests
  * doc: Makecache with timer tries only one mirror
  * ELN: Don't obsolete DNF with DNF5 yet
  * bash-completion: Complete dnf command only if we own it
  * bash-completion: Prepare ownerships for dnf5 switch
- New upstream release 4.19:
  * filelists metadata loading on demand
  * deltarpm disabled on Fedora by default
  * conf: Introduce new optional_metadata_types option to load filelists on demand
  * cli: Add a hint for user on transaction file dependency failure
  * cli: Setup filelists metadata for commands that need them
  * util: Add function for detecting file in specs
  * Fix failing API unit test on rawhide (RhBug:2261066)
  * automatic: Use add_security_filters, not _update_security_filters</changelog>
</package>
<package pkgid="467afbff3c151a3aa66547eb982bdee00853adf76f384f60ee97a75752db77bbdf7ec309e7bb187101e419dd2b56578fffda44acd4d57911cf8957c711285332" name="dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.10.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to version 4.0.19
  + copr: allow only 2 arguments with copr enable command
  + [needs-restarting] fix -r in nspawn containers (rh#1913962, rh#1914251)
  + Add --gpgcheck option to reposync (rh#1856818) (rh#1856818)
  + Re-introduce yum-groups-manager functionality (rh#1826016)
  + [repomanage] Don't use cached metadata (rh#1899852)
  + [needs-restarting] add -s to list services (rh#1772939) (rh#1772939)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to version 4.0.21
  + Add missing command line option to documentation
  + doc: add packages to needs-restarting conf
  + Set blacklist subcommand as deprecated
  + Bugs fixed (rh#1914827, rh#1916782)
  + Removed dependency on dnf.yum.misc.Checksum class (rh#1935465)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 4.0.22
  + [repomanage] Allow running only with metadata
  + [repomanage] Enhance documentation (rh#1898293)
  + [versionlock] Locking obsoleted package does not make the obsoleter unavailable (rh#1957280)
  + [versionlock] Work correctly with packages with minorbump part of release (rh#1961217)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 4.0.24
  + [copr] Avoid using deprecated function distro.linux_distribution() (rh#2011550)
  + [copr] don't traceback on empty lines in /etc/os-release
  + [leaves] Show strongly connected components
  + [needs-restarting] Fix wrong boot time (rh#1960437)
  + [playground] Disable playground command, since it doesn't work</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648382400">- Update to 4.1.0
  + Add a new subpackage with modulesync command. The command downloads
    packages from modules and/or creates a repository with modular data. (rh#1868047)
  + [groups-manager] Use full NEVRA (not only name) for matching packages (rh#2013633)
  + [repoclosure] Print counts of missing dependencies
  + [reposync] Do not stop downloading packages on the first error (rh#2009894)
  + [versionlock] Fix: Multiple package-name-spec arguments don't lock correctly (rh#2001039) (rh#2013324)
  + [versionlock] Update documentation for adding specifi version (rh#2013332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665835200">- update to 4.3.1
  * Update translations
- includes changes from 4.3.0:
  * [repomanage] Modules are used only when they belong to target repo
  * copr: Guess EPEL chroots for CentOS Stream
  * builddep: Warning when using macros with source rpms
  * Update documentation for config-manager used with subscription-manager
  * Update translations
- includes changes from 4.2.1
  * Skip all non rpm tsi for transaction_action plugins
- includes changes from 4.2.0
  * repomanage: Add new option --oldonly</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1677240000">- Precompile python bytecode (boo#1208151)</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1707220800">- Update to 4.4.4
  * needs-restarting: Add microcode_ctl to a reboot list
- includes changes from 4.4.3
  * needs-restarting: Avoid issue with garbage smaps chars (RhBug:2212953)
  * needs-restarting: Add kernel-core to reboot list
  * Update translations
- includes changes from 4.4.2
  * Fix systemd dependencies when using --poweroff option in system-upgrade plugin (RhBug:2211844)
  * Fixed copr.vendor.conf not loading
  * "dnf copr enable" on "Asahi Fedora Linux Remix" guesses epel..x86_64
  * system-upgrade: change http to https in unit file
- includes changes from 4.4.1
  * reposync: Implement --safe-write-path option (RhBug:1898089)
  * needs-restarting: Catch exception when no systemd unit exists for pid (RhBug:2122587)
  * post-transaction-actions: Fix ConfigParser.substitute call
  * builddep: Avoid using obsolete RPM API
  * yum-utils: Only depend on python3-dnf, not dnf
- includes changes from 4.4.0
  * system-upgrade: Move from extras to core (RhBug:2054235)
  * system-upgrade: Add --poweroff option to reboot
  * copr: Switch to reading a copr.vendor.conf file to determine a vendor ID
  * config-manager: Allow to specify the "main" section
  * system-upgrade: Add support for security filters in offline-upgrade (RhBug:1939975)
  * needs-restarting: Fix boot time derivation for systems with no rtc (RhBug:2137935)
  * download: Skip downloading weak deps when install_weak_deps=False
  * reposync: Documentation update (RhBug:2132383, 2182004)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728648000">- Do not recommend -lang package: the lang package has already the
  relevant supplements in place.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1743163200">- 4.10.1
  * spec: toggle dnf5_obsoletes_dnf for RHEL 11
  * reposync: Avoid multiple downloads of duplicate packages
  * doc: needs-restarting uses UnitsLoadStartTimestamp boot time
  * debuginfo-install: Fix missing dnf.cli import
  * copr Fix missing dnf.cli import
  * tests: Fix missing dnf.cli imports
- 4.10.0
  * CMakeLists.txt: Allow overriding PYTHON_INSTALL_DIR
  * Add Amazon Linux to copr chroots
  * needs-restarting: Add --exclude-services
  * needs-restarting: Add --exclude-services to man page
  * needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp
  * needs-restarting: "Regular files" are often on 00:xx devices
  * needs-restarting tests: Can't discriminate block devices any more
- 4.9.0
  * Enable leaves and show-leaves plugins for RHEL
  * expired-pgp-keys: New plugin for detecting expired PGP keys
  * reposync: Respect --norepopath with --metadata-path
  * doc: copr plugin does not respect IP family preference
  * expired-pgp-keys: Fix calling the hook at resolved time
- 4.8.0
  * needs-restarting: Revert using systemd start time
  * spec: Fix symbolic links to packaged files
  * needs-restarting: detect packages providing NEED_REBOOT.
  * build: Disable debug plugin on Fedora &gt; 40 and RHEL &gt; 9
  * download plugin now resolves dependencies for debuginfo and debugsource packages
- 4.7.0
  * docs: Documentation of needs-restarting boot time
  * man: Prepare pages for dnf5 switch
  * spec: Prepare for switch of dnf5 in Rawhide
- 4.6.0:
  * Updated AUTHORS file
  * needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
  * Add new plugin pre-transaction-actions
- 4.5.0:
  * Request filelists metadata for plugins needing that</changelog>
</package>
<package pkgid="fec5e7dcc04072bc15377eadb7fd247866e882dd0ebdc826220b2fc0033dadd9a85e543d453943c8ea26d66703b5491e514743a4273a84256819601eb5806feb" name="dnf-plugins-core-lang" arch="noarch">
  <version epoch="0" ver="4.10.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to version 4.0.19
  + copr: allow only 2 arguments with copr enable command
  + [needs-restarting] fix -r in nspawn containers (rh#1913962, rh#1914251)
  + Add --gpgcheck option to reposync (rh#1856818) (rh#1856818)
  + Re-introduce yum-groups-manager functionality (rh#1826016)
  + [repomanage] Don't use cached metadata (rh#1899852)
  + [needs-restarting] add -s to list services (rh#1772939) (rh#1772939)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to version 4.0.21
  + Add missing command line option to documentation
  + doc: add packages to needs-restarting conf
  + Set blacklist subcommand as deprecated
  + Bugs fixed (rh#1914827, rh#1916782)
  + Removed dependency on dnf.yum.misc.Checksum class (rh#1935465)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1630065600">- Update to 4.0.22
  + [repomanage] Allow running only with metadata
  + [repomanage] Enhance documentation (rh#1898293)
  + [versionlock] Locking obsoleted package does not make the obsoleter unavailable (rh#1957280)
  + [versionlock] Work correctly with packages with minorbump part of release (rh#1961217)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1635940800">- Update to 4.0.24
  + [copr] Avoid using deprecated function distro.linux_distribution() (rh#2011550)
  + [copr] don't traceback on empty lines in /etc/os-release
  + [leaves] Show strongly connected components
  + [needs-restarting] Fix wrong boot time (rh#1960437)
  + [playground] Disable playground command, since it doesn't work</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1648382400">- Update to 4.1.0
  + Add a new subpackage with modulesync command. The command downloads
    packages from modules and/or creates a repository with modular data. (rh#1868047)
  + [groups-manager] Use full NEVRA (not only name) for matching packages (rh#2013633)
  + [repoclosure] Print counts of missing dependencies
  + [reposync] Do not stop downloading packages on the first error (rh#2009894)
  + [versionlock] Fix: Multiple package-name-spec arguments don't lock correctly (rh#2001039) (rh#2013324)
  + [versionlock] Update documentation for adding specifi version (rh#2013332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665835200">- update to 4.3.1
  * Update translations
- includes changes from 4.3.0:
  * [repomanage] Modules are used only when they belong to target repo
  * copr: Guess EPEL chroots for CentOS Stream
  * builddep: Warning when using macros with source rpms
  * Update documentation for config-manager used with subscription-manager
  * Update translations
- includes changes from 4.2.1
  * Skip all non rpm tsi for transaction_action plugins
- includes changes from 4.2.0
  * repomanage: Add new option --oldonly</changelog>
  <changelog author="Bruno Pitrus &lt;brunopitrus@hotmail.com&gt;" date="1677240000">- Precompile python bytecode (boo#1208151)</changelog>
  <changelog author="Daniel Garcia &lt;daniel.garcia@suse.com&gt;" date="1707220800">- Update to 4.4.4
  * needs-restarting: Add microcode_ctl to a reboot list
- includes changes from 4.4.3
  * needs-restarting: Avoid issue with garbage smaps chars (RhBug:2212953)
  * needs-restarting: Add kernel-core to reboot list
  * Update translations
- includes changes from 4.4.2
  * Fix systemd dependencies when using --poweroff option in system-upgrade plugin (RhBug:2211844)
  * Fixed copr.vendor.conf not loading
  * "dnf copr enable" on "Asahi Fedora Linux Remix" guesses epel..x86_64
  * system-upgrade: change http to https in unit file
- includes changes from 4.4.1
  * reposync: Implement --safe-write-path option (RhBug:1898089)
  * needs-restarting: Catch exception when no systemd unit exists for pid (RhBug:2122587)
  * post-transaction-actions: Fix ConfigParser.substitute call
  * builddep: Avoid using obsolete RPM API
  * yum-utils: Only depend on python3-dnf, not dnf
- includes changes from 4.4.0
  * system-upgrade: Move from extras to core (RhBug:2054235)
  * system-upgrade: Add --poweroff option to reboot
  * copr: Switch to reading a copr.vendor.conf file to determine a vendor ID
  * config-manager: Allow to specify the "main" section
  * system-upgrade: Add support for security filters in offline-upgrade (RhBug:1939975)
  * needs-restarting: Fix boot time derivation for systems with no rtc (RhBug:2137935)
  * download: Skip downloading weak deps when install_weak_deps=False
  * reposync: Documentation update (RhBug:2132383, 2182004)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1728648000">- Do not recommend -lang package: the lang package has already the
  relevant supplements in place.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1743163200">- 4.10.1
  * spec: toggle dnf5_obsoletes_dnf for RHEL 11
  * reposync: Avoid multiple downloads of duplicate packages
  * doc: needs-restarting uses UnitsLoadStartTimestamp boot time
  * debuginfo-install: Fix missing dnf.cli import
  * copr Fix missing dnf.cli import
  * tests: Fix missing dnf.cli imports
- 4.10.0
  * CMakeLists.txt: Allow overriding PYTHON_INSTALL_DIR
  * Add Amazon Linux to copr chroots
  * needs-restarting: Add --exclude-services
  * needs-restarting: Add --exclude-services to man page
  * needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp
  * needs-restarting: "Regular files" are often on 00:xx devices
  * needs-restarting tests: Can't discriminate block devices any more
- 4.9.0
  * Enable leaves and show-leaves plugins for RHEL
  * expired-pgp-keys: New plugin for detecting expired PGP keys
  * reposync: Respect --norepopath with --metadata-path
  * doc: copr plugin does not respect IP family preference
  * expired-pgp-keys: Fix calling the hook at resolved time
- 4.8.0
  * needs-restarting: Revert using systemd start time
  * spec: Fix symbolic links to packaged files
  * needs-restarting: detect packages providing NEED_REBOOT.
  * build: Disable debug plugin on Fedora &gt; 40 and RHEL &gt; 9
  * download plugin now resolves dependencies for debuginfo and debugsource packages
- 4.7.0
  * docs: Documentation of needs-restarting boot time
  * man: Prepare pages for dnf5 switch
  * spec: Prepare for switch of dnf5 in Rawhide
- 4.6.0:
  * Updated AUTHORS file
  * needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
  * Add new plugin pre-transaction-actions
- 4.5.0:
  * Request filelists metadata for plugins needing that</changelog>
</package>
<package pkgid="e834b459954b3d39003aace727b7c9ed0634dd7b62c80984d043ca6375cf6d30243cef38f97164624fe71be113f733d3a36df52c4b835845761c8d52374ea237" name="dnf5" arch="x86_64">
  <version epoch="0" ver="5.2.13.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1708948800">- Fix dependency on libcurl in dnf5-automatic</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1709899200">- Update to 5.1.14
  + Update translations from weblate
  + Make the error to resolve module metadata more descriptive
  + Switch off deltarpm support
  + Limit number of dnf5daemon simultaneously active sessions
  + Make info and list commands case insesitive
  + Allow dnf5daemon configuration overrides for root
  + Add repoquery.hpp for swig-4.2.1 support</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712232000">- Update to 5.1.17
  + Update translations from weblate
  + dnf5daemon: Remove reposdir from allowed config overrides
  + Document system-upgrade aliases
  + Improved Bash Completion
  + Print command line hints after resolve failure
  + Docuent Advisory.list() API usage
  + Add NEVRA field to advisory packages in dnf5daemon
  + Review and fix missing commands
  + Document dnf5daemon advisory
  + Document system-upgrade
  + system-upgrade: offline status subcommand
  + Add aliases `offline-distrosync`, `offline-upgrade`
  + Add `system-upgrade --offline` option
  + Add `offline`, `system-upgrade` commands
  + Automatically set `upgrade --downloadonly` when `--destdir` is used
  + Write warnings to stderr too in config-manager plugin
  + Add repoid to generated repository name in config-manager plugin
  + Bump sdbus-cpp requirement to 0.9.0
  + Document and implement dnf5daemon Rpm interface
  + Document and implement dnf5daemon Goal interface
  + Document and implement dnf5daemon Repo interface
  + Document and implement dnf5daemon Base interface
  + Document and implement dnf5daemon Advisory interface
  + Document and implement dnf5daemon SessionManager interface
  + Add `dnf5daemon repo --enable/--disable` commands
  + automatic: Skip network availability check without remote repo
  + dnf5daemon: Rpm.list() works with commandline pkgs</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712404800">- Move dbus policy configuration from /etc to /usr</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1714132800">- Rebase to 5.2.0.0
  + Update translations from weblate
  + [DNF5] `--enable-plugin` and `--disable-plugin`: no match found message
  + [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  + spec: Add conflict with the former provider of plugin man pages
  + spec: Add conflict with the old provider of dnf.conf
  + [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  + [libdnf5 API] Base::get_plugins_info
  + [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  + repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  + [DNF5] API: No inline methods in shared_options.hpp
  + [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  + [DNF5] API: Remove unused and buggy RpmTransactionItem class
  + [DNF5] Command: no inline methods
  + [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  + API: cli::session: no inline methods and public vars in opts classes
  + API: cli::session::Command: no inline methods
  + API: add p_impl to cli::session::Session
  + API: rpm::TransactionCallbacks: no inline methods
  + API: repo::RepoCallbacks: no inline methods
  + Prepare for switch of dnf5 in Rawhide
  + base: Make get_transaction_history unstable
  + Set `group` reason for packages removed by a group removal
  + [DNF5] Implement `--enable-plugin` and `--disable-plugin`
  + [libdnf5 API] Base::enable_disable_plugins
  + spec: Simplify man page files
  + Loggers: Fix: Add missing "null_loger.cpp" file
  + Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  + doc: Review of DNF4 vs DNF5 CLI and configuration changes
  + Re-enable clang builds after API changes
  + Add `--store` option for storing arbitrary transaction
  + libdnf5::Goal: when adding serialized transaction accept local items
  + Goal: change `add_serialized_transaction()` to accept path to trans
  + Add group/env paths for transaction parsing/serializing
  + base::Transaction: during serialization allow specifying paths
  + base::Transaction: add `store_comps(...)` method
  + repo_sack: add stored_transaction repo and its private API
  + repo: add private API `add_xml_comps(path)`
  + Generalize logging of `read_group_solvable_from_xml(..)`
  + Add `environment_no_groups` to `GoalJobSettings`
  + libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  + libdnf5 IPlugin: Use pImpl
  + libdnf5 IPlugin: Do not use inline methods
  + dnf5 IPlugin: Do not use inline methods on API
  + libdnf5 IPlugin: Add argumets description
  + libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  + libdnf5 plugins: New hook `repos_loaded`
  + libdnf5 plugins: New hook `repos_configured`
  + Base: notify_repos_configured and are_repos_configured methods
  + Fix: implicit conversion changes signedness, unused value
  + Disable unit tests for Copr dnf5 plugin
  + dnfdaemon: Document Polit CheckAuthorization call
  + dnfdaemon: Catch timeout during CheckAuthorization
  + Not handle compatibility.conf as configuration file
  + config: add search (se) and info (if) aliases
  + Improve documentation of repo config directories
  + Cross reference documentation
  + Document Repos and Vars Dirs
  + doc: Unify style and move "Files" section
  + Document repos configuration overrides
  + doc: Remove ":" in titles
  + Bump libdnf5/libdnf5-cli so version
  + Mark multiple strings for translation
  + Set locale for dnf5 run
  + spec: Add missing dnf-config-manager.8.gz file
  + Generate documentation for ConfigRepo Class
  + [Doc] Describe denerating repo cache path
  + dnf5daemon: Make availability case insensitive
  + dnf5: Drop unneeded severities capitalization
  + dnf5: Document --available as default for advisory cmd
  + dnf5daemon-client: Drop unneeded severities capitalization
  + advisory: filter_severity and filter_type case insensitive
  + dnfdaemon: Fix and enhance Advisory interface doc
  + Enable import data from DNF4 for systems without state dir
  + libdnf5 options: Unify constructors - pass args for storing by value
  + dnfdaemon: Missing signal registration
  + doc: config manager plugin: wrap too long lines
  + doc: document config-manager plugin
  + Packit: get version from specfile for copr_builds againts main
  + Update tests to use new `load_repos()` API
  + Use new load_repos instead of deprecated update_and_load_enabled_repos
  + Make `libdnf5::repo::Repo::load()` private
  + Deprecate: `update_and_load_enabled_repos`
  + RepoSack: add new `load_repos` method
  + Move update_and_load_repos and fix_group_missing_xml to Impl
  + Prevent loading plugins for unittests
  + Respect plugins configuration option for loading plugins
  + Add pImpl to `libdnf5::LogRouter`
  + Add pImpl to `libdnf5::MemoryBufferLogger`
  + Add pImpl to `libdnf5::OptionBinds`
  + Add pImpl to `libdnf5::OptionBinds::Item`
  + Add pImpl to `libdnf5::Config`
  + Add pImpl to `libdnf5::OptionStringList`
  + OptionStringList: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionBool`
  + OptionBool: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionNumber`
  + Add pImpl to `libdnf5::OptionPath`
  + Add pImpl to `libdnf5::OptionString`
  + libdnf5::OptionEnum: remove template, add pImpl
  + Add pImpl to `libdnf5::Option`
  + modules: Report problems with switching module streams
  + modules: Report switched module streams
  + modules: Add switching module streams as a possible transaction action
  + modules: Add replaces and replaced_by to TransactionModule
  + Add missing info updates alias, to match list command
  + Update `package_info_sections` not to use `scols_table_print_range`
  + libdnf-cli: Extract package info printing
  + ArgumentParser: use p_impl, no inline methods
  + ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  + ArgumentParser:PositionalArg: Support repeating of positional argument
  + Hide/Remove deprecated `libdnf5::repo::Repo` API
  + Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  + Remove deprecated unused function `create_forcearch_option()`
  + builddep: Don't escape globs, use expand_globs = false
  + builddep: Don't try to expand globs in pkg specs
  + libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  + Interfaces and adapters
  + module::ModuleStatus: Move to separate header file
  + comps::PackageType: Move to separate header file
  + cmp_naevr: Fix: pass by reference
  + modules: Report module solver problems
  + Accept SolverProblems for transacion resolve log
  + modules: Return problems from the module solver
  + modules: Add a method to process module solver problems
  + modules: Add a separate set of problem rules for modules
  + modules: Store the original module context also in the libsolv solvable
  + modules: Internalize modular repositories
  + Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  + Add pImpl to `libdnf5::repo::RepoQuery`
  + Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  + Remove deprecated `libdnf5::Base::load_config_from_file`
  + Move all `libdnf5::Base` members to pImpl
  + Add pImpl to `libdnf5::rpm::Reldep`
  + Add pImpl to `libdnf5::rpm::Changelog`
  + Add pImpl to `libdnf5::rpm::Nevra`
  + Add pImpl to `libdnf5::rpm::Checksum`
  + Add pImpl to `libdnf5::rpm::Package`
  + Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  + Add a method accepting std::string for filter_repo_id()
  + Add a method accepting std::string for filter_location()
  + Add a method accepting std::string for filter_file()
  + Add a method accepting std::string for filter_supplements()
  + Add a method accepting std::string for filter_enhances()
  + Add a method accepting std::string for filter_suggests()
  + Add a method accepting std::string for filter_recommends()
  + Add a method accepting std::string for filter_obsoletes()
  + Add a method accepting std::string for filter_conflicts()
  + Add a method accepting std::string for filter_requires()
  + Add a method accepting std::string for filter_description()
  + Add a method accepting std::string for filter_summary()
  + Add a method accepting std::string for filter_url()
  + Add a method accepting std::string for filter_sourcerpm()
  + Add a method accepting std::string for filter_nevra()
  + Add a method accepting std::string for filter_evr()
  + Add a method accepting std::string for filter_arch()
  + Add a method accepting std::string for filter_release()
  + Add a method accepting std::string for filter_version()
  + Add a method accepting std::string and int for filter_epoch()
  + Add a method accepting std::string for filter_name()
  + Add a method accepting std::string for filter_provides()
  + Extend version to four numbers (5.x.y.z)
  + Unify smallest version number name
  + cmake: rename PROJECT_VERSION_* to just VERSION_*
  + dnf5daemon: Document before_begin / after_complete signals
  + dnf5daemon: Signals to wrap rpm transaction execution
  + rpm: New callback to wrap whole rpm transaction
  + Add pImpl to `libdnf5::module::ModuleProfile`
  + Add pImpl to `libdnf5::module::ModuleDependency`
  + Add pImpl to `libdnf5::module::Nsvcap`
  + Add pImpl to `libdnf5::module::ModuleQuery`
  + Add pImpl to `libdnf5::comps::EnvironmentQuery`
  + Add pImpl to `libdnf5::comps::GroupQuery`
  + Add pImpl to `libdnf5::comps::Environment`
  + Add pImpl to `libdnf5::comps::Package`
  + Add pImpl to `libdnf5::comps::Group`
  + Remove unused `libdnf5::comps::GroupSack`
  + Remove unused `libdnf5::comps::EnvironmentSack`
  + Remove unused `libdnf5::comps::Comps`
  + Add pImpl to `libdnf5::advisory::Advisory`
  + Add pImpl to `libdnf5::advisory::AdvisoryReference`
  + Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  + Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  + Add pImpl to `libdnf5::rpm::RpmSignature`
  + Add pImpl to `libdnf5::transaction::Transaction`
  + Add pImpl to `libdnf5::rpm::KeyInfo`
  + Add pImpl to `libdnf5::repo::RepoSack`
  + Add pImpl to `libdnf5::base::SolverProblems`
  + Add pImpl to `libdnf5::base::LogEvent`
  + Add pImpl to `libdnf5::ConfigParser`
  + Add pImpl to `libdnf5::Vars`
  + Add pImpl to `libdnf5::transaction::TransactionHistory`
  + Add pImpl to `libdnf5::transaction::Package`
  + Add pImpl to `libdnf5::transaction::CompsGroup`
  + Add pImpl to `libdnf5::transaction::CompsEnvironment`
  + Add pImpl to `libdnf5::transaction::TransactionItem`
  + Remove several not needed imports
  + repo: add p_Impl and several needed utility methods
  + Repo: remove unused `fresh()` and `timestamp` attribute
  + Add pImpl to `ModuleItem` and remove definitions from header
  + Add pImpl to `libdnf5::base::transaction_*` classes
  + Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  + Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  + dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  + dnf5: Bash completion: Switch to `_init_completion`
  + Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  + Support RPMTRANS_FLAG_DEPLOOPS
  + Give inline methods hidden visibility by default
  + dnfdaemon: Make only internally used funcs static
  + dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  + doc: Add example of Rpm.list_fd usage in Python
  + dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  + dnfdaemon: New method list_fd() on Rpm interface
  + dnfdaemon: Serialize package object to JSON string
  + dnf5daemon: Handler that return data using UNIX_FD
  + dnf5daemon: Auxiliary method to write string to fd
  + dnf5daemon: Move utils functions into dnfdaemon namespace
  + dnf5daemon: get_session() method for D-Bus services
  + dnf5daemon-server: Ignore SIGPIPE
  + Vars: Add unit tests for API methods
  + Vars::unset: API method for removing variable
  + dnf5daemon-server/dbus: Install config files into /usr
  + Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  + Fix: Do not use Variable-length arrays (VLAs) in C++ code
  + Add a hint to call base.setup() prior loading repositories
  + dnf5daemon-client: New switches for group list
  + doc: Include comps.Group interface to D-Bus API documentatin
  + dnfdaemon: Enhance comps.Group.list() method
  + dnf5daemon-client: Fix group.get_installed()
  + man: Link dnf5 pages to dnf</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1717848000">- Update to 5.2.3.0
  + Update translations from weblate
  + const: Shared constant defining RPM transaction lock file
  + main: Implement checking of privileges before executing commands
  + exception: Add new exception for user insufficient privileges
  + locker: Move to public API
  + distro-sync: Add downloadonly option
  + commands: Fix using store option
  + Enhance warning about RPMs that were not validate by RPM
  + Vars::substitute: fix use-out-of-scope leaks
  + docs: correct the default for pluginconfpath
  + cli: Add skipped packages to the transaction table
  + i18n: Improve formatting an error message for multiple streams
  + Add/fix documentation for rpm::PackageQuery methods
  + i18n: Unwind "No {} to remove for argument: {}"
  + `history list`: count also groups and envs in total `Altered`
  + Fix typo in translatable string
  + [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  + Option `--providers-of` doesn't require available repos
  + Improve docs regarding the keepcache option and download command
  + needs_restarting: Fix invalid reference usage
  + download: add `--source` alias for `--srpm`
  + automatic: Fix documentation and ship config file
  + fix: quote `dnf5-command({})' in command suggestion when plugin not found
  + i18n: Unwind "Cannot {} package \"{}\"" message
  + base: Add repository to solver problem messages
  + conf: New classes for append options
  + docs: Document changes to repoinfo and repolist
  + dnf5daemon: The buildtime attribute has been added to the package_attrs option
  + bindings: Tests for using struct attributes in Python
  + bindings: Add Python attributes for structs
  + docs: Fix diff link on the dnf 5.2.0.0 changes page
  + docs: Add diff with API changes in dnf5-5.2.0.0
  + docs: Add a page about public API changes in dnf 5.2.0.0
  + system-upgrade: fix missing \n before transaction test
  + system-upgrade: comment to clarify progress bar logic
  + system-upgrade: drop [[maybe_unused]] from reboot() arg
  + system-upgrade: fix progress bars, set transaction description
  + system-upgrade: adapt to new transaction serialization format
  + system-upgrade: clean up releasever logic
  + system-upgrade: fix poweroff_after
  + copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  + Add file search result for repoquery --whatprovides
  + doc: Add enviroment variables and clarify options for loading the plugins
  + dnfdaemon: Fix Rpm interface introspection file
- Refresh patches
  + dnf5-with-static-libsolvext.patch
  + dnf5-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch
  + dnf5-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + dnf5-disable-Werror.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1727092800">- Do not conflict with libdnf-devel yet, PackageKit needs both
  devel packages for now.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1732449600">- Update to 5.2.7.0
  + 5.2.7.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.7.0
  + 5.2.6.2 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.2
  + 5.2.6.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.1
  + 5.2.6.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.0
  + 5.2.5.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.5.0
  + 5.2.4.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.4.0
- Refresh patches
  + Patch: dnf5-disable-Werror.patch
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1733659200">- Update to 5.2.8.1
  + 5.2.8.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.1
  + 5.2.8.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.0
- Add patch to fix build with sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Temporarily disable running tests until crashes are fixed (gh#rpm-software-management/dnf5#1893)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1745928000">- Update to 5.2.13.1
  + 5.2.13.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.1
  + 5.2.13.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.0
  + 5.2.12.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.12.0
  + 5.2.11.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.11.0
  + 5.2.10.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.10.0
  + 5.2.9.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.9.0
- Drop merged patch for sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Drop no longer needed patch for static libsolvext
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
</package>
<package pkgid="163346218b8de7788feb68c560ada98cc9cb3da1afcdc3ab3988f5c0d971928b4fb966466331dac9561c972dc69a1dbaf02495f9eded76149fbeb3c287159202" name="dnf5-devel" arch="x86_64">
  <version epoch="0" ver="5.2.13.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1708948800">- Fix dependency on libcurl in dnf5-automatic</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1709899200">- Update to 5.1.14
  + Update translations from weblate
  + Make the error to resolve module metadata more descriptive
  + Switch off deltarpm support
  + Limit number of dnf5daemon simultaneously active sessions
  + Make info and list commands case insesitive
  + Allow dnf5daemon configuration overrides for root
  + Add repoquery.hpp for swig-4.2.1 support</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712232000">- Update to 5.1.17
  + Update translations from weblate
  + dnf5daemon: Remove reposdir from allowed config overrides
  + Document system-upgrade aliases
  + Improved Bash Completion
  + Print command line hints after resolve failure
  + Docuent Advisory.list() API usage
  + Add NEVRA field to advisory packages in dnf5daemon
  + Review and fix missing commands
  + Document dnf5daemon advisory
  + Document system-upgrade
  + system-upgrade: offline status subcommand
  + Add aliases `offline-distrosync`, `offline-upgrade`
  + Add `system-upgrade --offline` option
  + Add `offline`, `system-upgrade` commands
  + Automatically set `upgrade --downloadonly` when `--destdir` is used
  + Write warnings to stderr too in config-manager plugin
  + Add repoid to generated repository name in config-manager plugin
  + Bump sdbus-cpp requirement to 0.9.0
  + Document and implement dnf5daemon Rpm interface
  + Document and implement dnf5daemon Goal interface
  + Document and implement dnf5daemon Repo interface
  + Document and implement dnf5daemon Base interface
  + Document and implement dnf5daemon Advisory interface
  + Document and implement dnf5daemon SessionManager interface
  + Add `dnf5daemon repo --enable/--disable` commands
  + automatic: Skip network availability check without remote repo
  + dnf5daemon: Rpm.list() works with commandline pkgs</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712404800">- Move dbus policy configuration from /etc to /usr</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1714132800">- Rebase to 5.2.0.0
  + Update translations from weblate
  + [DNF5] `--enable-plugin` and `--disable-plugin`: no match found message
  + [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  + spec: Add conflict with the former provider of plugin man pages
  + spec: Add conflict with the old provider of dnf.conf
  + [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  + [libdnf5 API] Base::get_plugins_info
  + [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  + repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  + [DNF5] API: No inline methods in shared_options.hpp
  + [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  + [DNF5] API: Remove unused and buggy RpmTransactionItem class
  + [DNF5] Command: no inline methods
  + [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  + API: cli::session: no inline methods and public vars in opts classes
  + API: cli::session::Command: no inline methods
  + API: add p_impl to cli::session::Session
  + API: rpm::TransactionCallbacks: no inline methods
  + API: repo::RepoCallbacks: no inline methods
  + Prepare for switch of dnf5 in Rawhide
  + base: Make get_transaction_history unstable
  + Set `group` reason for packages removed by a group removal
  + [DNF5] Implement `--enable-plugin` and `--disable-plugin`
  + [libdnf5 API] Base::enable_disable_plugins
  + spec: Simplify man page files
  + Loggers: Fix: Add missing "null_loger.cpp" file
  + Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  + doc: Review of DNF4 vs DNF5 CLI and configuration changes
  + Re-enable clang builds after API changes
  + Add `--store` option for storing arbitrary transaction
  + libdnf5::Goal: when adding serialized transaction accept local items
  + Goal: change `add_serialized_transaction()` to accept path to trans
  + Add group/env paths for transaction parsing/serializing
  + base::Transaction: during serialization allow specifying paths
  + base::Transaction: add `store_comps(...)` method
  + repo_sack: add stored_transaction repo and its private API
  + repo: add private API `add_xml_comps(path)`
  + Generalize logging of `read_group_solvable_from_xml(..)`
  + Add `environment_no_groups` to `GoalJobSettings`
  + libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  + libdnf5 IPlugin: Use pImpl
  + libdnf5 IPlugin: Do not use inline methods
  + dnf5 IPlugin: Do not use inline methods on API
  + libdnf5 IPlugin: Add argumets description
  + libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  + libdnf5 plugins: New hook `repos_loaded`
  + libdnf5 plugins: New hook `repos_configured`
  + Base: notify_repos_configured and are_repos_configured methods
  + Fix: implicit conversion changes signedness, unused value
  + Disable unit tests for Copr dnf5 plugin
  + dnfdaemon: Document Polit CheckAuthorization call
  + dnfdaemon: Catch timeout during CheckAuthorization
  + Not handle compatibility.conf as configuration file
  + config: add search (se) and info (if) aliases
  + Improve documentation of repo config directories
  + Cross reference documentation
  + Document Repos and Vars Dirs
  + doc: Unify style and move "Files" section
  + Document repos configuration overrides
  + doc: Remove ":" in titles
  + Bump libdnf5/libdnf5-cli so version
  + Mark multiple strings for translation
  + Set locale for dnf5 run
  + spec: Add missing dnf-config-manager.8.gz file
  + Generate documentation for ConfigRepo Class
  + [Doc] Describe denerating repo cache path
  + dnf5daemon: Make availability case insensitive
  + dnf5: Drop unneeded severities capitalization
  + dnf5: Document --available as default for advisory cmd
  + dnf5daemon-client: Drop unneeded severities capitalization
  + advisory: filter_severity and filter_type case insensitive
  + dnfdaemon: Fix and enhance Advisory interface doc
  + Enable import data from DNF4 for systems without state dir
  + libdnf5 options: Unify constructors - pass args for storing by value
  + dnfdaemon: Missing signal registration
  + doc: config manager plugin: wrap too long lines
  + doc: document config-manager plugin
  + Packit: get version from specfile for copr_builds againts main
  + Update tests to use new `load_repos()` API
  + Use new load_repos instead of deprecated update_and_load_enabled_repos
  + Make `libdnf5::repo::Repo::load()` private
  + Deprecate: `update_and_load_enabled_repos`
  + RepoSack: add new `load_repos` method
  + Move update_and_load_repos and fix_group_missing_xml to Impl
  + Prevent loading plugins for unittests
  + Respect plugins configuration option for loading plugins
  + Add pImpl to `libdnf5::LogRouter`
  + Add pImpl to `libdnf5::MemoryBufferLogger`
  + Add pImpl to `libdnf5::OptionBinds`
  + Add pImpl to `libdnf5::OptionBinds::Item`
  + Add pImpl to `libdnf5::Config`
  + Add pImpl to `libdnf5::OptionStringList`
  + OptionStringList: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionBool`
  + OptionBool: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionNumber`
  + Add pImpl to `libdnf5::OptionPath`
  + Add pImpl to `libdnf5::OptionString`
  + libdnf5::OptionEnum: remove template, add pImpl
  + Add pImpl to `libdnf5::Option`
  + modules: Report problems with switching module streams
  + modules: Report switched module streams
  + modules: Add switching module streams as a possible transaction action
  + modules: Add replaces and replaced_by to TransactionModule
  + Add missing info updates alias, to match list command
  + Update `package_info_sections` not to use `scols_table_print_range`
  + libdnf-cli: Extract package info printing
  + ArgumentParser: use p_impl, no inline methods
  + ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  + ArgumentParser:PositionalArg: Support repeating of positional argument
  + Hide/Remove deprecated `libdnf5::repo::Repo` API
  + Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  + Remove deprecated unused function `create_forcearch_option()`
  + builddep: Don't escape globs, use expand_globs = false
  + builddep: Don't try to expand globs in pkg specs
  + libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  + Interfaces and adapters
  + module::ModuleStatus: Move to separate header file
  + comps::PackageType: Move to separate header file
  + cmp_naevr: Fix: pass by reference
  + modules: Report module solver problems
  + Accept SolverProblems for transacion resolve log
  + modules: Return problems from the module solver
  + modules: Add a method to process module solver problems
  + modules: Add a separate set of problem rules for modules
  + modules: Store the original module context also in the libsolv solvable
  + modules: Internalize modular repositories
  + Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  + Add pImpl to `libdnf5::repo::RepoQuery`
  + Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  + Remove deprecated `libdnf5::Base::load_config_from_file`
  + Move all `libdnf5::Base` members to pImpl
  + Add pImpl to `libdnf5::rpm::Reldep`
  + Add pImpl to `libdnf5::rpm::Changelog`
  + Add pImpl to `libdnf5::rpm::Nevra`
  + Add pImpl to `libdnf5::rpm::Checksum`
  + Add pImpl to `libdnf5::rpm::Package`
  + Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  + Add a method accepting std::string for filter_repo_id()
  + Add a method accepting std::string for filter_location()
  + Add a method accepting std::string for filter_file()
  + Add a method accepting std::string for filter_supplements()
  + Add a method accepting std::string for filter_enhances()
  + Add a method accepting std::string for filter_suggests()
  + Add a method accepting std::string for filter_recommends()
  + Add a method accepting std::string for filter_obsoletes()
  + Add a method accepting std::string for filter_conflicts()
  + Add a method accepting std::string for filter_requires()
  + Add a method accepting std::string for filter_description()
  + Add a method accepting std::string for filter_summary()
  + Add a method accepting std::string for filter_url()
  + Add a method accepting std::string for filter_sourcerpm()
  + Add a method accepting std::string for filter_nevra()
  + Add a method accepting std::string for filter_evr()
  + Add a method accepting std::string for filter_arch()
  + Add a method accepting std::string for filter_release()
  + Add a method accepting std::string for filter_version()
  + Add a method accepting std::string and int for filter_epoch()
  + Add a method accepting std::string for filter_name()
  + Add a method accepting std::string for filter_provides()
  + Extend version to four numbers (5.x.y.z)
  + Unify smallest version number name
  + cmake: rename PROJECT_VERSION_* to just VERSION_*
  + dnf5daemon: Document before_begin / after_complete signals
  + dnf5daemon: Signals to wrap rpm transaction execution
  + rpm: New callback to wrap whole rpm transaction
  + Add pImpl to `libdnf5::module::ModuleProfile`
  + Add pImpl to `libdnf5::module::ModuleDependency`
  + Add pImpl to `libdnf5::module::Nsvcap`
  + Add pImpl to `libdnf5::module::ModuleQuery`
  + Add pImpl to `libdnf5::comps::EnvironmentQuery`
  + Add pImpl to `libdnf5::comps::GroupQuery`
  + Add pImpl to `libdnf5::comps::Environment`
  + Add pImpl to `libdnf5::comps::Package`
  + Add pImpl to `libdnf5::comps::Group`
  + Remove unused `libdnf5::comps::GroupSack`
  + Remove unused `libdnf5::comps::EnvironmentSack`
  + Remove unused `libdnf5::comps::Comps`
  + Add pImpl to `libdnf5::advisory::Advisory`
  + Add pImpl to `libdnf5::advisory::AdvisoryReference`
  + Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  + Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  + Add pImpl to `libdnf5::rpm::RpmSignature`
  + Add pImpl to `libdnf5::transaction::Transaction`
  + Add pImpl to `libdnf5::rpm::KeyInfo`
  + Add pImpl to `libdnf5::repo::RepoSack`
  + Add pImpl to `libdnf5::base::SolverProblems`
  + Add pImpl to `libdnf5::base::LogEvent`
  + Add pImpl to `libdnf5::ConfigParser`
  + Add pImpl to `libdnf5::Vars`
  + Add pImpl to `libdnf5::transaction::TransactionHistory`
  + Add pImpl to `libdnf5::transaction::Package`
  + Add pImpl to `libdnf5::transaction::CompsGroup`
  + Add pImpl to `libdnf5::transaction::CompsEnvironment`
  + Add pImpl to `libdnf5::transaction::TransactionItem`
  + Remove several not needed imports
  + repo: add p_Impl and several needed utility methods
  + Repo: remove unused `fresh()` and `timestamp` attribute
  + Add pImpl to `ModuleItem` and remove definitions from header
  + Add pImpl to `libdnf5::base::transaction_*` classes
  + Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  + Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  + dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  + dnf5: Bash completion: Switch to `_init_completion`
  + Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  + Support RPMTRANS_FLAG_DEPLOOPS
  + Give inline methods hidden visibility by default
  + dnfdaemon: Make only internally used funcs static
  + dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  + doc: Add example of Rpm.list_fd usage in Python
  + dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  + dnfdaemon: New method list_fd() on Rpm interface
  + dnfdaemon: Serialize package object to JSON string
  + dnf5daemon: Handler that return data using UNIX_FD
  + dnf5daemon: Auxiliary method to write string to fd
  + dnf5daemon: Move utils functions into dnfdaemon namespace
  + dnf5daemon: get_session() method for D-Bus services
  + dnf5daemon-server: Ignore SIGPIPE
  + Vars: Add unit tests for API methods
  + Vars::unset: API method for removing variable
  + dnf5daemon-server/dbus: Install config files into /usr
  + Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  + Fix: Do not use Variable-length arrays (VLAs) in C++ code
  + Add a hint to call base.setup() prior loading repositories
  + dnf5daemon-client: New switches for group list
  + doc: Include comps.Group interface to D-Bus API documentatin
  + dnfdaemon: Enhance comps.Group.list() method
  + dnf5daemon-client: Fix group.get_installed()
  + man: Link dnf5 pages to dnf</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1717848000">- Update to 5.2.3.0
  + Update translations from weblate
  + const: Shared constant defining RPM transaction lock file
  + main: Implement checking of privileges before executing commands
  + exception: Add new exception for user insufficient privileges
  + locker: Move to public API
  + distro-sync: Add downloadonly option
  + commands: Fix using store option
  + Enhance warning about RPMs that were not validate by RPM
  + Vars::substitute: fix use-out-of-scope leaks
  + docs: correct the default for pluginconfpath
  + cli: Add skipped packages to the transaction table
  + i18n: Improve formatting an error message for multiple streams
  + Add/fix documentation for rpm::PackageQuery methods
  + i18n: Unwind "No {} to remove for argument: {}"
  + `history list`: count also groups and envs in total `Altered`
  + Fix typo in translatable string
  + [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  + Option `--providers-of` doesn't require available repos
  + Improve docs regarding the keepcache option and download command
  + needs_restarting: Fix invalid reference usage
  + download: add `--source` alias for `--srpm`
  + automatic: Fix documentation and ship config file
  + fix: quote `dnf5-command({})' in command suggestion when plugin not found
  + i18n: Unwind "Cannot {} package \"{}\"" message
  + base: Add repository to solver problem messages
  + conf: New classes for append options
  + docs: Document changes to repoinfo and repolist
  + dnf5daemon: The buildtime attribute has been added to the package_attrs option
  + bindings: Tests for using struct attributes in Python
  + bindings: Add Python attributes for structs
  + docs: Fix diff link on the dnf 5.2.0.0 changes page
  + docs: Add diff with API changes in dnf5-5.2.0.0
  + docs: Add a page about public API changes in dnf 5.2.0.0
  + system-upgrade: fix missing \n before transaction test
  + system-upgrade: comment to clarify progress bar logic
  + system-upgrade: drop [[maybe_unused]] from reboot() arg
  + system-upgrade: fix progress bars, set transaction description
  + system-upgrade: adapt to new transaction serialization format
  + system-upgrade: clean up releasever logic
  + system-upgrade: fix poweroff_after
  + copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  + Add file search result for repoquery --whatprovides
  + doc: Add enviroment variables and clarify options for loading the plugins
  + dnfdaemon: Fix Rpm interface introspection file
- Refresh patches
  + dnf5-with-static-libsolvext.patch
  + dnf5-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch
  + dnf5-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + dnf5-disable-Werror.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1727092800">- Do not conflict with libdnf-devel yet, PackageKit needs both
  devel packages for now.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1732449600">- Update to 5.2.7.0
  + 5.2.7.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.7.0
  + 5.2.6.2 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.2
  + 5.2.6.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.1
  + 5.2.6.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.0
  + 5.2.5.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.5.0
  + 5.2.4.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.4.0
- Refresh patches
  + Patch: dnf5-disable-Werror.patch
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1733659200">- Update to 5.2.8.1
  + 5.2.8.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.1
  + 5.2.8.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.0
- Add patch to fix build with sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Temporarily disable running tests until crashes are fixed (gh#rpm-software-management/dnf5#1893)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1745928000">- Update to 5.2.13.1
  + 5.2.13.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.1
  + 5.2.13.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.0
  + 5.2.12.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.12.0
  + 5.2.11.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.11.0
  + 5.2.10.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.10.0
  + 5.2.9.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.9.0
- Drop merged patch for sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Drop no longer needed patch for static libsolvext
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
</package>
<package pkgid="d7080fae7fb5e326d4c6e3db05de9c0e9bb7c68a762a0e22a8e60273d3970bc4b76463f658bc5739900ef41474525b1679bc106874b901e895f5a058cea3dac1" name="dnf5-plugin-automatic" arch="x86_64">
  <version epoch="0" ver="5.2.13.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1708948800">- Fix dependency on libcurl in dnf5-automatic</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1709899200">- Update to 5.1.14
  + Update translations from weblate
  + Make the error to resolve module metadata more descriptive
  + Switch off deltarpm support
  + Limit number of dnf5daemon simultaneously active sessions
  + Make info and list commands case insesitive
  + Allow dnf5daemon configuration overrides for root
  + Add repoquery.hpp for swig-4.2.1 support</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712232000">- Update to 5.1.17
  + Update translations from weblate
  + dnf5daemon: Remove reposdir from allowed config overrides
  + Document system-upgrade aliases
  + Improved Bash Completion
  + Print command line hints after resolve failure
  + Docuent Advisory.list() API usage
  + Add NEVRA field to advisory packages in dnf5daemon
  + Review and fix missing commands
  + Document dnf5daemon advisory
  + Document system-upgrade
  + system-upgrade: offline status subcommand
  + Add aliases `offline-distrosync`, `offline-upgrade`
  + Add `system-upgrade --offline` option
  + Add `offline`, `system-upgrade` commands
  + Automatically set `upgrade --downloadonly` when `--destdir` is used
  + Write warnings to stderr too in config-manager plugin
  + Add repoid to generated repository name in config-manager plugin
  + Bump sdbus-cpp requirement to 0.9.0
  + Document and implement dnf5daemon Rpm interface
  + Document and implement dnf5daemon Goal interface
  + Document and implement dnf5daemon Repo interface
  + Document and implement dnf5daemon Base interface
  + Document and implement dnf5daemon Advisory interface
  + Document and implement dnf5daemon SessionManager interface
  + Add `dnf5daemon repo --enable/--disable` commands
  + automatic: Skip network availability check without remote repo
  + dnf5daemon: Rpm.list() works with commandline pkgs</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712404800">- Move dbus policy configuration from /etc to /usr</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1714132800">- Rebase to 5.2.0.0
  + Update translations from weblate
  + [DNF5] `--enable-plugin` and `--disable-plugin`: no match found message
  + [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  + spec: Add conflict with the former provider of plugin man pages
  + spec: Add conflict with the old provider of dnf.conf
  + [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  + [libdnf5 API] Base::get_plugins_info
  + [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  + repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  + [DNF5] API: No inline methods in shared_options.hpp
  + [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  + [DNF5] API: Remove unused and buggy RpmTransactionItem class
  + [DNF5] Command: no inline methods
  + [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  + API: cli::session: no inline methods and public vars in opts classes
  + API: cli::session::Command: no inline methods
  + API: add p_impl to cli::session::Session
  + API: rpm::TransactionCallbacks: no inline methods
  + API: repo::RepoCallbacks: no inline methods
  + Prepare for switch of dnf5 in Rawhide
  + base: Make get_transaction_history unstable
  + Set `group` reason for packages removed by a group removal
  + [DNF5] Implement `--enable-plugin` and `--disable-plugin`
  + [libdnf5 API] Base::enable_disable_plugins
  + spec: Simplify man page files
  + Loggers: Fix: Add missing "null_loger.cpp" file
  + Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  + doc: Review of DNF4 vs DNF5 CLI and configuration changes
  + Re-enable clang builds after API changes
  + Add `--store` option for storing arbitrary transaction
  + libdnf5::Goal: when adding serialized transaction accept local items
  + Goal: change `add_serialized_transaction()` to accept path to trans
  + Add group/env paths for transaction parsing/serializing
  + base::Transaction: during serialization allow specifying paths
  + base::Transaction: add `store_comps(...)` method
  + repo_sack: add stored_transaction repo and its private API
  + repo: add private API `add_xml_comps(path)`
  + Generalize logging of `read_group_solvable_from_xml(..)`
  + Add `environment_no_groups` to `GoalJobSettings`
  + libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  + libdnf5 IPlugin: Use pImpl
  + libdnf5 IPlugin: Do not use inline methods
  + dnf5 IPlugin: Do not use inline methods on API
  + libdnf5 IPlugin: Add argumets description
  + libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  + libdnf5 plugins: New hook `repos_loaded`
  + libdnf5 plugins: New hook `repos_configured`
  + Base: notify_repos_configured and are_repos_configured methods
  + Fix: implicit conversion changes signedness, unused value
  + Disable unit tests for Copr dnf5 plugin
  + dnfdaemon: Document Polit CheckAuthorization call
  + dnfdaemon: Catch timeout during CheckAuthorization
  + Not handle compatibility.conf as configuration file
  + config: add search (se) and info (if) aliases
  + Improve documentation of repo config directories
  + Cross reference documentation
  + Document Repos and Vars Dirs
  + doc: Unify style and move "Files" section
  + Document repos configuration overrides
  + doc: Remove ":" in titles
  + Bump libdnf5/libdnf5-cli so version
  + Mark multiple strings for translation
  + Set locale for dnf5 run
  + spec: Add missing dnf-config-manager.8.gz file
  + Generate documentation for ConfigRepo Class
  + [Doc] Describe denerating repo cache path
  + dnf5daemon: Make availability case insensitive
  + dnf5: Drop unneeded severities capitalization
  + dnf5: Document --available as default for advisory cmd
  + dnf5daemon-client: Drop unneeded severities capitalization
  + advisory: filter_severity and filter_type case insensitive
  + dnfdaemon: Fix and enhance Advisory interface doc
  + Enable import data from DNF4 for systems without state dir
  + libdnf5 options: Unify constructors - pass args for storing by value
  + dnfdaemon: Missing signal registration
  + doc: config manager plugin: wrap too long lines
  + doc: document config-manager plugin
  + Packit: get version from specfile for copr_builds againts main
  + Update tests to use new `load_repos()` API
  + Use new load_repos instead of deprecated update_and_load_enabled_repos
  + Make `libdnf5::repo::Repo::load()` private
  + Deprecate: `update_and_load_enabled_repos`
  + RepoSack: add new `load_repos` method
  + Move update_and_load_repos and fix_group_missing_xml to Impl
  + Prevent loading plugins for unittests
  + Respect plugins configuration option for loading plugins
  + Add pImpl to `libdnf5::LogRouter`
  + Add pImpl to `libdnf5::MemoryBufferLogger`
  + Add pImpl to `libdnf5::OptionBinds`
  + Add pImpl to `libdnf5::OptionBinds::Item`
  + Add pImpl to `libdnf5::Config`
  + Add pImpl to `libdnf5::OptionStringList`
  + OptionStringList: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionBool`
  + OptionBool: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionNumber`
  + Add pImpl to `libdnf5::OptionPath`
  + Add pImpl to `libdnf5::OptionString`
  + libdnf5::OptionEnum: remove template, add pImpl
  + Add pImpl to `libdnf5::Option`
  + modules: Report problems with switching module streams
  + modules: Report switched module streams
  + modules: Add switching module streams as a possible transaction action
  + modules: Add replaces and replaced_by to TransactionModule
  + Add missing info updates alias, to match list command
  + Update `package_info_sections` not to use `scols_table_print_range`
  + libdnf-cli: Extract package info printing
  + ArgumentParser: use p_impl, no inline methods
  + ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  + ArgumentParser:PositionalArg: Support repeating of positional argument
  + Hide/Remove deprecated `libdnf5::repo::Repo` API
  + Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  + Remove deprecated unused function `create_forcearch_option()`
  + builddep: Don't escape globs, use expand_globs = false
  + builddep: Don't try to expand globs in pkg specs
  + libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  + Interfaces and adapters
  + module::ModuleStatus: Move to separate header file
  + comps::PackageType: Move to separate header file
  + cmp_naevr: Fix: pass by reference
  + modules: Report module solver problems
  + Accept SolverProblems for transacion resolve log
  + modules: Return problems from the module solver
  + modules: Add a method to process module solver problems
  + modules: Add a separate set of problem rules for modules
  + modules: Store the original module context also in the libsolv solvable
  + modules: Internalize modular repositories
  + Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  + Add pImpl to `libdnf5::repo::RepoQuery`
  + Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  + Remove deprecated `libdnf5::Base::load_config_from_file`
  + Move all `libdnf5::Base` members to pImpl
  + Add pImpl to `libdnf5::rpm::Reldep`
  + Add pImpl to `libdnf5::rpm::Changelog`
  + Add pImpl to `libdnf5::rpm::Nevra`
  + Add pImpl to `libdnf5::rpm::Checksum`
  + Add pImpl to `libdnf5::rpm::Package`
  + Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  + Add a method accepting std::string for filter_repo_id()
  + Add a method accepting std::string for filter_location()
  + Add a method accepting std::string for filter_file()
  + Add a method accepting std::string for filter_supplements()
  + Add a method accepting std::string for filter_enhances()
  + Add a method accepting std::string for filter_suggests()
  + Add a method accepting std::string for filter_recommends()
  + Add a method accepting std::string for filter_obsoletes()
  + Add a method accepting std::string for filter_conflicts()
  + Add a method accepting std::string for filter_requires()
  + Add a method accepting std::string for filter_description()
  + Add a method accepting std::string for filter_summary()
  + Add a method accepting std::string for filter_url()
  + Add a method accepting std::string for filter_sourcerpm()
  + Add a method accepting std::string for filter_nevra()
  + Add a method accepting std::string for filter_evr()
  + Add a method accepting std::string for filter_arch()
  + Add a method accepting std::string for filter_release()
  + Add a method accepting std::string for filter_version()
  + Add a method accepting std::string and int for filter_epoch()
  + Add a method accepting std::string for filter_name()
  + Add a method accepting std::string for filter_provides()
  + Extend version to four numbers (5.x.y.z)
  + Unify smallest version number name
  + cmake: rename PROJECT_VERSION_* to just VERSION_*
  + dnf5daemon: Document before_begin / after_complete signals
  + dnf5daemon: Signals to wrap rpm transaction execution
  + rpm: New callback to wrap whole rpm transaction
  + Add pImpl to `libdnf5::module::ModuleProfile`
  + Add pImpl to `libdnf5::module::ModuleDependency`
  + Add pImpl to `libdnf5::module::Nsvcap`
  + Add pImpl to `libdnf5::module::ModuleQuery`
  + Add pImpl to `libdnf5::comps::EnvironmentQuery`
  + Add pImpl to `libdnf5::comps::GroupQuery`
  + Add pImpl to `libdnf5::comps::Environment`
  + Add pImpl to `libdnf5::comps::Package`
  + Add pImpl to `libdnf5::comps::Group`
  + Remove unused `libdnf5::comps::GroupSack`
  + Remove unused `libdnf5::comps::EnvironmentSack`
  + Remove unused `libdnf5::comps::Comps`
  + Add pImpl to `libdnf5::advisory::Advisory`
  + Add pImpl to `libdnf5::advisory::AdvisoryReference`
  + Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  + Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  + Add pImpl to `libdnf5::rpm::RpmSignature`
  + Add pImpl to `libdnf5::transaction::Transaction`
  + Add pImpl to `libdnf5::rpm::KeyInfo`
  + Add pImpl to `libdnf5::repo::RepoSack`
  + Add pImpl to `libdnf5::base::SolverProblems`
  + Add pImpl to `libdnf5::base::LogEvent`
  + Add pImpl to `libdnf5::ConfigParser`
  + Add pImpl to `libdnf5::Vars`
  + Add pImpl to `libdnf5::transaction::TransactionHistory`
  + Add pImpl to `libdnf5::transaction::Package`
  + Add pImpl to `libdnf5::transaction::CompsGroup`
  + Add pImpl to `libdnf5::transaction::CompsEnvironment`
  + Add pImpl to `libdnf5::transaction::TransactionItem`
  + Remove several not needed imports
  + repo: add p_Impl and several needed utility methods
  + Repo: remove unused `fresh()` and `timestamp` attribute
  + Add pImpl to `ModuleItem` and remove definitions from header
  + Add pImpl to `libdnf5::base::transaction_*` classes
  + Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  + Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  + dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  + dnf5: Bash completion: Switch to `_init_completion`
  + Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  + Support RPMTRANS_FLAG_DEPLOOPS
  + Give inline methods hidden visibility by default
  + dnfdaemon: Make only internally used funcs static
  + dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  + doc: Add example of Rpm.list_fd usage in Python
  + dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  + dnfdaemon: New method list_fd() on Rpm interface
  + dnfdaemon: Serialize package object to JSON string
  + dnf5daemon: Handler that return data using UNIX_FD
  + dnf5daemon: Auxiliary method to write string to fd
  + dnf5daemon: Move utils functions into dnfdaemon namespace
  + dnf5daemon: get_session() method for D-Bus services
  + dnf5daemon-server: Ignore SIGPIPE
  + Vars: Add unit tests for API methods
  + Vars::unset: API method for removing variable
  + dnf5daemon-server/dbus: Install config files into /usr
  + Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  + Fix: Do not use Variable-length arrays (VLAs) in C++ code
  + Add a hint to call base.setup() prior loading repositories
  + dnf5daemon-client: New switches for group list
  + doc: Include comps.Group interface to D-Bus API documentatin
  + dnfdaemon: Enhance comps.Group.list() method
  + dnf5daemon-client: Fix group.get_installed()
  + man: Link dnf5 pages to dnf</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1717848000">- Update to 5.2.3.0
  + Update translations from weblate
  + const: Shared constant defining RPM transaction lock file
  + main: Implement checking of privileges before executing commands
  + exception: Add new exception for user insufficient privileges
  + locker: Move to public API
  + distro-sync: Add downloadonly option
  + commands: Fix using store option
  + Enhance warning about RPMs that were not validate by RPM
  + Vars::substitute: fix use-out-of-scope leaks
  + docs: correct the default for pluginconfpath
  + cli: Add skipped packages to the transaction table
  + i18n: Improve formatting an error message for multiple streams
  + Add/fix documentation for rpm::PackageQuery methods
  + i18n: Unwind "No {} to remove for argument: {}"
  + `history list`: count also groups and envs in total `Altered`
  + Fix typo in translatable string
  + [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  + Option `--providers-of` doesn't require available repos
  + Improve docs regarding the keepcache option and download command
  + needs_restarting: Fix invalid reference usage
  + download: add `--source` alias for `--srpm`
  + automatic: Fix documentation and ship config file
  + fix: quote `dnf5-command({})' in command suggestion when plugin not found
  + i18n: Unwind "Cannot {} package \"{}\"" message
  + base: Add repository to solver problem messages
  + conf: New classes for append options
  + docs: Document changes to repoinfo and repolist
  + dnf5daemon: The buildtime attribute has been added to the package_attrs option
  + bindings: Tests for using struct attributes in Python
  + bindings: Add Python attributes for structs
  + docs: Fix diff link on the dnf 5.2.0.0 changes page
  + docs: Add diff with API changes in dnf5-5.2.0.0
  + docs: Add a page about public API changes in dnf 5.2.0.0
  + system-upgrade: fix missing \n before transaction test
  + system-upgrade: comment to clarify progress bar logic
  + system-upgrade: drop [[maybe_unused]] from reboot() arg
  + system-upgrade: fix progress bars, set transaction description
  + system-upgrade: adapt to new transaction serialization format
  + system-upgrade: clean up releasever logic
  + system-upgrade: fix poweroff_after
  + copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  + Add file search result for repoquery --whatprovides
  + doc: Add enviroment variables and clarify options for loading the plugins
  + dnfdaemon: Fix Rpm interface introspection file
- Refresh patches
  + dnf5-with-static-libsolvext.patch
  + dnf5-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch
  + dnf5-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + dnf5-disable-Werror.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1727092800">- Do not conflict with libdnf-devel yet, PackageKit needs both
  devel packages for now.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1732449600">- Update to 5.2.7.0
  + 5.2.7.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.7.0
  + 5.2.6.2 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.2
  + 5.2.6.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.1
  + 5.2.6.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.0
  + 5.2.5.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.5.0
  + 5.2.4.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.4.0
- Refresh patches
  + Patch: dnf5-disable-Werror.patch
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1733659200">- Update to 5.2.8.1
  + 5.2.8.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.1
  + 5.2.8.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.0
- Add patch to fix build with sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Temporarily disable running tests until crashes are fixed (gh#rpm-software-management/dnf5#1893)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1745928000">- Update to 5.2.13.1
  + 5.2.13.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.1
  + 5.2.13.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.0
  + 5.2.12.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.12.0
  + 5.2.11.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.11.0
  + 5.2.10.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.10.0
  + 5.2.9.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.9.0
- Drop merged patch for sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Drop no longer needed patch for static libsolvext
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
</package>
<package pkgid="6eea0001d191771c6ee4e55af915b5763cade963937921900d74648deeb3d25c1e9c9fead79ef7f906c7ed47c48534ef7423e307936d54b33a3114f4c1dd3c77" name="dnf5-plugins" arch="x86_64">
  <version epoch="0" ver="5.2.13.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1708948800">- Fix dependency on libcurl in dnf5-automatic</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1709899200">- Update to 5.1.14
  + Update translations from weblate
  + Make the error to resolve module metadata more descriptive
  + Switch off deltarpm support
  + Limit number of dnf5daemon simultaneously active sessions
  + Make info and list commands case insesitive
  + Allow dnf5daemon configuration overrides for root
  + Add repoquery.hpp for swig-4.2.1 support</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712232000">- Update to 5.1.17
  + Update translations from weblate
  + dnf5daemon: Remove reposdir from allowed config overrides
  + Document system-upgrade aliases
  + Improved Bash Completion
  + Print command line hints after resolve failure
  + Docuent Advisory.list() API usage
  + Add NEVRA field to advisory packages in dnf5daemon
  + Review and fix missing commands
  + Document dnf5daemon advisory
  + Document system-upgrade
  + system-upgrade: offline status subcommand
  + Add aliases `offline-distrosync`, `offline-upgrade`
  + Add `system-upgrade --offline` option
  + Add `offline`, `system-upgrade` commands
  + Automatically set `upgrade --downloadonly` when `--destdir` is used
  + Write warnings to stderr too in config-manager plugin
  + Add repoid to generated repository name in config-manager plugin
  + Bump sdbus-cpp requirement to 0.9.0
  + Document and implement dnf5daemon Rpm interface
  + Document and implement dnf5daemon Goal interface
  + Document and implement dnf5daemon Repo interface
  + Document and implement dnf5daemon Base interface
  + Document and implement dnf5daemon Advisory interface
  + Document and implement dnf5daemon SessionManager interface
  + Add `dnf5daemon repo --enable/--disable` commands
  + automatic: Skip network availability check without remote repo
  + dnf5daemon: Rpm.list() works with commandline pkgs</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712404800">- Move dbus policy configuration from /etc to /usr</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1714132800">- Rebase to 5.2.0.0
  + Update translations from weblate
  + [DNF5] `--enable-plugin` and `--disable-plugin`: no match found message
  + [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  + spec: Add conflict with the former provider of plugin man pages
  + spec: Add conflict with the old provider of dnf.conf
  + [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  + [libdnf5 API] Base::get_plugins_info
  + [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  + repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  + [DNF5] API: No inline methods in shared_options.hpp
  + [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  + [DNF5] API: Remove unused and buggy RpmTransactionItem class
  + [DNF5] Command: no inline methods
  + [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  + API: cli::session: no inline methods and public vars in opts classes
  + API: cli::session::Command: no inline methods
  + API: add p_impl to cli::session::Session
  + API: rpm::TransactionCallbacks: no inline methods
  + API: repo::RepoCallbacks: no inline methods
  + Prepare for switch of dnf5 in Rawhide
  + base: Make get_transaction_history unstable
  + Set `group` reason for packages removed by a group removal
  + [DNF5] Implement `--enable-plugin` and `--disable-plugin`
  + [libdnf5 API] Base::enable_disable_plugins
  + spec: Simplify man page files
  + Loggers: Fix: Add missing "null_loger.cpp" file
  + Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  + doc: Review of DNF4 vs DNF5 CLI and configuration changes
  + Re-enable clang builds after API changes
  + Add `--store` option for storing arbitrary transaction
  + libdnf5::Goal: when adding serialized transaction accept local items
  + Goal: change `add_serialized_transaction()` to accept path to trans
  + Add group/env paths for transaction parsing/serializing
  + base::Transaction: during serialization allow specifying paths
  + base::Transaction: add `store_comps(...)` method
  + repo_sack: add stored_transaction repo and its private API
  + repo: add private API `add_xml_comps(path)`
  + Generalize logging of `read_group_solvable_from_xml(..)`
  + Add `environment_no_groups` to `GoalJobSettings`
  + libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  + libdnf5 IPlugin: Use pImpl
  + libdnf5 IPlugin: Do not use inline methods
  + dnf5 IPlugin: Do not use inline methods on API
  + libdnf5 IPlugin: Add argumets description
  + libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  + libdnf5 plugins: New hook `repos_loaded`
  + libdnf5 plugins: New hook `repos_configured`
  + Base: notify_repos_configured and are_repos_configured methods
  + Fix: implicit conversion changes signedness, unused value
  + Disable unit tests for Copr dnf5 plugin
  + dnfdaemon: Document Polit CheckAuthorization call
  + dnfdaemon: Catch timeout during CheckAuthorization
  + Not handle compatibility.conf as configuration file
  + config: add search (se) and info (if) aliases
  + Improve documentation of repo config directories
  + Cross reference documentation
  + Document Repos and Vars Dirs
  + doc: Unify style and move "Files" section
  + Document repos configuration overrides
  + doc: Remove ":" in titles
  + Bump libdnf5/libdnf5-cli so version
  + Mark multiple strings for translation
  + Set locale for dnf5 run
  + spec: Add missing dnf-config-manager.8.gz file
  + Generate documentation for ConfigRepo Class
  + [Doc] Describe denerating repo cache path
  + dnf5daemon: Make availability case insensitive
  + dnf5: Drop unneeded severities capitalization
  + dnf5: Document --available as default for advisory cmd
  + dnf5daemon-client: Drop unneeded severities capitalization
  + advisory: filter_severity and filter_type case insensitive
  + dnfdaemon: Fix and enhance Advisory interface doc
  + Enable import data from DNF4 for systems without state dir
  + libdnf5 options: Unify constructors - pass args for storing by value
  + dnfdaemon: Missing signal registration
  + doc: config manager plugin: wrap too long lines
  + doc: document config-manager plugin
  + Packit: get version from specfile for copr_builds againts main
  + Update tests to use new `load_repos()` API
  + Use new load_repos instead of deprecated update_and_load_enabled_repos
  + Make `libdnf5::repo::Repo::load()` private
  + Deprecate: `update_and_load_enabled_repos`
  + RepoSack: add new `load_repos` method
  + Move update_and_load_repos and fix_group_missing_xml to Impl
  + Prevent loading plugins for unittests
  + Respect plugins configuration option for loading plugins
  + Add pImpl to `libdnf5::LogRouter`
  + Add pImpl to `libdnf5::MemoryBufferLogger`
  + Add pImpl to `libdnf5::OptionBinds`
  + Add pImpl to `libdnf5::OptionBinds::Item`
  + Add pImpl to `libdnf5::Config`
  + Add pImpl to `libdnf5::OptionStringList`
  + OptionStringList: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionBool`
  + OptionBool: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionNumber`
  + Add pImpl to `libdnf5::OptionPath`
  + Add pImpl to `libdnf5::OptionString`
  + libdnf5::OptionEnum: remove template, add pImpl
  + Add pImpl to `libdnf5::Option`
  + modules: Report problems with switching module streams
  + modules: Report switched module streams
  + modules: Add switching module streams as a possible transaction action
  + modules: Add replaces and replaced_by to TransactionModule
  + Add missing info updates alias, to match list command
  + Update `package_info_sections` not to use `scols_table_print_range`
  + libdnf-cli: Extract package info printing
  + ArgumentParser: use p_impl, no inline methods
  + ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  + ArgumentParser:PositionalArg: Support repeating of positional argument
  + Hide/Remove deprecated `libdnf5::repo::Repo` API
  + Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  + Remove deprecated unused function `create_forcearch_option()`
  + builddep: Don't escape globs, use expand_globs = false
  + builddep: Don't try to expand globs in pkg specs
  + libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  + Interfaces and adapters
  + module::ModuleStatus: Move to separate header file
  + comps::PackageType: Move to separate header file
  + cmp_naevr: Fix: pass by reference
  + modules: Report module solver problems
  + Accept SolverProblems for transacion resolve log
  + modules: Return problems from the module solver
  + modules: Add a method to process module solver problems
  + modules: Add a separate set of problem rules for modules
  + modules: Store the original module context also in the libsolv solvable
  + modules: Internalize modular repositories
  + Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  + Add pImpl to `libdnf5::repo::RepoQuery`
  + Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  + Remove deprecated `libdnf5::Base::load_config_from_file`
  + Move all `libdnf5::Base` members to pImpl
  + Add pImpl to `libdnf5::rpm::Reldep`
  + Add pImpl to `libdnf5::rpm::Changelog`
  + Add pImpl to `libdnf5::rpm::Nevra`
  + Add pImpl to `libdnf5::rpm::Checksum`
  + Add pImpl to `libdnf5::rpm::Package`
  + Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  + Add a method accepting std::string for filter_repo_id()
  + Add a method accepting std::string for filter_location()
  + Add a method accepting std::string for filter_file()
  + Add a method accepting std::string for filter_supplements()
  + Add a method accepting std::string for filter_enhances()
  + Add a method accepting std::string for filter_suggests()
  + Add a method accepting std::string for filter_recommends()
  + Add a method accepting std::string for filter_obsoletes()
  + Add a method accepting std::string for filter_conflicts()
  + Add a method accepting std::string for filter_requires()
  + Add a method accepting std::string for filter_description()
  + Add a method accepting std::string for filter_summary()
  + Add a method accepting std::string for filter_url()
  + Add a method accepting std::string for filter_sourcerpm()
  + Add a method accepting std::string for filter_nevra()
  + Add a method accepting std::string for filter_evr()
  + Add a method accepting std::string for filter_arch()
  + Add a method accepting std::string for filter_release()
  + Add a method accepting std::string for filter_version()
  + Add a method accepting std::string and int for filter_epoch()
  + Add a method accepting std::string for filter_name()
  + Add a method accepting std::string for filter_provides()
  + Extend version to four numbers (5.x.y.z)
  + Unify smallest version number name
  + cmake: rename PROJECT_VERSION_* to just VERSION_*
  + dnf5daemon: Document before_begin / after_complete signals
  + dnf5daemon: Signals to wrap rpm transaction execution
  + rpm: New callback to wrap whole rpm transaction
  + Add pImpl to `libdnf5::module::ModuleProfile`
  + Add pImpl to `libdnf5::module::ModuleDependency`
  + Add pImpl to `libdnf5::module::Nsvcap`
  + Add pImpl to `libdnf5::module::ModuleQuery`
  + Add pImpl to `libdnf5::comps::EnvironmentQuery`
  + Add pImpl to `libdnf5::comps::GroupQuery`
  + Add pImpl to `libdnf5::comps::Environment`
  + Add pImpl to `libdnf5::comps::Package`
  + Add pImpl to `libdnf5::comps::Group`
  + Remove unused `libdnf5::comps::GroupSack`
  + Remove unused `libdnf5::comps::EnvironmentSack`
  + Remove unused `libdnf5::comps::Comps`
  + Add pImpl to `libdnf5::advisory::Advisory`
  + Add pImpl to `libdnf5::advisory::AdvisoryReference`
  + Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  + Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  + Add pImpl to `libdnf5::rpm::RpmSignature`
  + Add pImpl to `libdnf5::transaction::Transaction`
  + Add pImpl to `libdnf5::rpm::KeyInfo`
  + Add pImpl to `libdnf5::repo::RepoSack`
  + Add pImpl to `libdnf5::base::SolverProblems`
  + Add pImpl to `libdnf5::base::LogEvent`
  + Add pImpl to `libdnf5::ConfigParser`
  + Add pImpl to `libdnf5::Vars`
  + Add pImpl to `libdnf5::transaction::TransactionHistory`
  + Add pImpl to `libdnf5::transaction::Package`
  + Add pImpl to `libdnf5::transaction::CompsGroup`
  + Add pImpl to `libdnf5::transaction::CompsEnvironment`
  + Add pImpl to `libdnf5::transaction::TransactionItem`
  + Remove several not needed imports
  + repo: add p_Impl and several needed utility methods
  + Repo: remove unused `fresh()` and `timestamp` attribute
  + Add pImpl to `ModuleItem` and remove definitions from header
  + Add pImpl to `libdnf5::base::transaction_*` classes
  + Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  + Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  + dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  + dnf5: Bash completion: Switch to `_init_completion`
  + Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  + Support RPMTRANS_FLAG_DEPLOOPS
  + Give inline methods hidden visibility by default
  + dnfdaemon: Make only internally used funcs static
  + dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  + doc: Add example of Rpm.list_fd usage in Python
  + dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  + dnfdaemon: New method list_fd() on Rpm interface
  + dnfdaemon: Serialize package object to JSON string
  + dnf5daemon: Handler that return data using UNIX_FD
  + dnf5daemon: Auxiliary method to write string to fd
  + dnf5daemon: Move utils functions into dnfdaemon namespace
  + dnf5daemon: get_session() method for D-Bus services
  + dnf5daemon-server: Ignore SIGPIPE
  + Vars: Add unit tests for API methods
  + Vars::unset: API method for removing variable
  + dnf5daemon-server/dbus: Install config files into /usr
  + Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  + Fix: Do not use Variable-length arrays (VLAs) in C++ code
  + Add a hint to call base.setup() prior loading repositories
  + dnf5daemon-client: New switches for group list
  + doc: Include comps.Group interface to D-Bus API documentatin
  + dnfdaemon: Enhance comps.Group.list() method
  + dnf5daemon-client: Fix group.get_installed()
  + man: Link dnf5 pages to dnf</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1717848000">- Update to 5.2.3.0
  + Update translations from weblate
  + const: Shared constant defining RPM transaction lock file
  + main: Implement checking of privileges before executing commands
  + exception: Add new exception for user insufficient privileges
  + locker: Move to public API
  + distro-sync: Add downloadonly option
  + commands: Fix using store option
  + Enhance warning about RPMs that were not validate by RPM
  + Vars::substitute: fix use-out-of-scope leaks
  + docs: correct the default for pluginconfpath
  + cli: Add skipped packages to the transaction table
  + i18n: Improve formatting an error message for multiple streams
  + Add/fix documentation for rpm::PackageQuery methods
  + i18n: Unwind "No {} to remove for argument: {}"
  + `history list`: count also groups and envs in total `Altered`
  + Fix typo in translatable string
  + [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  + Option `--providers-of` doesn't require available repos
  + Improve docs regarding the keepcache option and download command
  + needs_restarting: Fix invalid reference usage
  + download: add `--source` alias for `--srpm`
  + automatic: Fix documentation and ship config file
  + fix: quote `dnf5-command({})' in command suggestion when plugin not found
  + i18n: Unwind "Cannot {} package \"{}\"" message
  + base: Add repository to solver problem messages
  + conf: New classes for append options
  + docs: Document changes to repoinfo and repolist
  + dnf5daemon: The buildtime attribute has been added to the package_attrs option
  + bindings: Tests for using struct attributes in Python
  + bindings: Add Python attributes for structs
  + docs: Fix diff link on the dnf 5.2.0.0 changes page
  + docs: Add diff with API changes in dnf5-5.2.0.0
  + docs: Add a page about public API changes in dnf 5.2.0.0
  + system-upgrade: fix missing \n before transaction test
  + system-upgrade: comment to clarify progress bar logic
  + system-upgrade: drop [[maybe_unused]] from reboot() arg
  + system-upgrade: fix progress bars, set transaction description
  + system-upgrade: adapt to new transaction serialization format
  + system-upgrade: clean up releasever logic
  + system-upgrade: fix poweroff_after
  + copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  + Add file search result for repoquery --whatprovides
  + doc: Add enviroment variables and clarify options for loading the plugins
  + dnfdaemon: Fix Rpm interface introspection file
- Refresh patches
  + dnf5-with-static-libsolvext.patch
  + dnf5-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch
  + dnf5-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + dnf5-disable-Werror.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1727092800">- Do not conflict with libdnf-devel yet, PackageKit needs both
  devel packages for now.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1732449600">- Update to 5.2.7.0
  + 5.2.7.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.7.0
  + 5.2.6.2 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.2
  + 5.2.6.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.1
  + 5.2.6.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.0
  + 5.2.5.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.5.0
  + 5.2.4.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.4.0
- Refresh patches
  + Patch: dnf5-disable-Werror.patch
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1733659200">- Update to 5.2.8.1
  + 5.2.8.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.1
  + 5.2.8.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.0
- Add patch to fix build with sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Temporarily disable running tests until crashes are fixed (gh#rpm-software-management/dnf5#1893)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1745928000">- Update to 5.2.13.1
  + 5.2.13.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.1
  + 5.2.13.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.0
  + 5.2.12.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.12.0
  + 5.2.11.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.11.0
  + 5.2.10.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.10.0
  + 5.2.9.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.9.0
- Drop merged patch for sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Drop no longer needed patch for static libsolvext
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
</package>
<package pkgid="d0e9920e5614ff898936d9c2346cf08fbaad40acc92588966da862abaaa26ad87c8c07d88aa2d4f976eb111ad10ce1d8573823d4ab81bfb948891fc016357562" name="dnf5daemon-client" arch="x86_64">
  <version epoch="0" ver="5.2.13.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1708948800">- Fix dependency on libcurl in dnf5-automatic</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1709899200">- Update to 5.1.14
  + Update translations from weblate
  + Make the error to resolve module metadata more descriptive
  + Switch off deltarpm support
  + Limit number of dnf5daemon simultaneously active sessions
  + Make info and list commands case insesitive
  + Allow dnf5daemon configuration overrides for root
  + Add repoquery.hpp for swig-4.2.1 support</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712232000">- Update to 5.1.17
  + Update translations from weblate
  + dnf5daemon: Remove reposdir from allowed config overrides
  + Document system-upgrade aliases
  + Improved Bash Completion
  + Print command line hints after resolve failure
  + Docuent Advisory.list() API usage
  + Add NEVRA field to advisory packages in dnf5daemon
  + Review and fix missing commands
  + Document dnf5daemon advisory
  + Document system-upgrade
  + system-upgrade: offline status subcommand
  + Add aliases `offline-distrosync`, `offline-upgrade`
  + Add `system-upgrade --offline` option
  + Add `offline`, `system-upgrade` commands
  + Automatically set `upgrade --downloadonly` when `--destdir` is used
  + Write warnings to stderr too in config-manager plugin
  + Add repoid to generated repository name in config-manager plugin
  + Bump sdbus-cpp requirement to 0.9.0
  + Document and implement dnf5daemon Rpm interface
  + Document and implement dnf5daemon Goal interface
  + Document and implement dnf5daemon Repo interface
  + Document and implement dnf5daemon Base interface
  + Document and implement dnf5daemon Advisory interface
  + Document and implement dnf5daemon SessionManager interface
  + Add `dnf5daemon repo --enable/--disable` commands
  + automatic: Skip network availability check without remote repo
  + dnf5daemon: Rpm.list() works with commandline pkgs</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712404800">- Move dbus policy configuration from /etc to /usr</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1714132800">- Rebase to 5.2.0.0
  + Update translations from weblate
  + [DNF5] `--enable-plugin` and `--disable-plugin`: no match found message
  + [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  + spec: Add conflict with the former provider of plugin man pages
  + spec: Add conflict with the old provider of dnf.conf
  + [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  + [libdnf5 API] Base::get_plugins_info
  + [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  + repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  + [DNF5] API: No inline methods in shared_options.hpp
  + [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  + [DNF5] API: Remove unused and buggy RpmTransactionItem class
  + [DNF5] Command: no inline methods
  + [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  + API: cli::session: no inline methods and public vars in opts classes
  + API: cli::session::Command: no inline methods
  + API: add p_impl to cli::session::Session
  + API: rpm::TransactionCallbacks: no inline methods
  + API: repo::RepoCallbacks: no inline methods
  + Prepare for switch of dnf5 in Rawhide
  + base: Make get_transaction_history unstable
  + Set `group` reason for packages removed by a group removal
  + [DNF5] Implement `--enable-plugin` and `--disable-plugin`
  + [libdnf5 API] Base::enable_disable_plugins
  + spec: Simplify man page files
  + Loggers: Fix: Add missing "null_loger.cpp" file
  + Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  + doc: Review of DNF4 vs DNF5 CLI and configuration changes
  + Re-enable clang builds after API changes
  + Add `--store` option for storing arbitrary transaction
  + libdnf5::Goal: when adding serialized transaction accept local items
  + Goal: change `add_serialized_transaction()` to accept path to trans
  + Add group/env paths for transaction parsing/serializing
  + base::Transaction: during serialization allow specifying paths
  + base::Transaction: add `store_comps(...)` method
  + repo_sack: add stored_transaction repo and its private API
  + repo: add private API `add_xml_comps(path)`
  + Generalize logging of `read_group_solvable_from_xml(..)`
  + Add `environment_no_groups` to `GoalJobSettings`
  + libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  + libdnf5 IPlugin: Use pImpl
  + libdnf5 IPlugin: Do not use inline methods
  + dnf5 IPlugin: Do not use inline methods on API
  + libdnf5 IPlugin: Add argumets description
  + libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  + libdnf5 plugins: New hook `repos_loaded`
  + libdnf5 plugins: New hook `repos_configured`
  + Base: notify_repos_configured and are_repos_configured methods
  + Fix: implicit conversion changes signedness, unused value
  + Disable unit tests for Copr dnf5 plugin
  + dnfdaemon: Document Polit CheckAuthorization call
  + dnfdaemon: Catch timeout during CheckAuthorization
  + Not handle compatibility.conf as configuration file
  + config: add search (se) and info (if) aliases
  + Improve documentation of repo config directories
  + Cross reference documentation
  + Document Repos and Vars Dirs
  + doc: Unify style and move "Files" section
  + Document repos configuration overrides
  + doc: Remove ":" in titles
  + Bump libdnf5/libdnf5-cli so version
  + Mark multiple strings for translation
  + Set locale for dnf5 run
  + spec: Add missing dnf-config-manager.8.gz file
  + Generate documentation for ConfigRepo Class
  + [Doc] Describe denerating repo cache path
  + dnf5daemon: Make availability case insensitive
  + dnf5: Drop unneeded severities capitalization
  + dnf5: Document --available as default for advisory cmd
  + dnf5daemon-client: Drop unneeded severities capitalization
  + advisory: filter_severity and filter_type case insensitive
  + dnfdaemon: Fix and enhance Advisory interface doc
  + Enable import data from DNF4 for systems without state dir
  + libdnf5 options: Unify constructors - pass args for storing by value
  + dnfdaemon: Missing signal registration
  + doc: config manager plugin: wrap too long lines
  + doc: document config-manager plugin
  + Packit: get version from specfile for copr_builds againts main
  + Update tests to use new `load_repos()` API
  + Use new load_repos instead of deprecated update_and_load_enabled_repos
  + Make `libdnf5::repo::Repo::load()` private
  + Deprecate: `update_and_load_enabled_repos`
  + RepoSack: add new `load_repos` method
  + Move update_and_load_repos and fix_group_missing_xml to Impl
  + Prevent loading plugins for unittests
  + Respect plugins configuration option for loading plugins
  + Add pImpl to `libdnf5::LogRouter`
  + Add pImpl to `libdnf5::MemoryBufferLogger`
  + Add pImpl to `libdnf5::OptionBinds`
  + Add pImpl to `libdnf5::OptionBinds::Item`
  + Add pImpl to `libdnf5::Config`
  + Add pImpl to `libdnf5::OptionStringList`
  + OptionStringList: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionBool`
  + OptionBool: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionNumber`
  + Add pImpl to `libdnf5::OptionPath`
  + Add pImpl to `libdnf5::OptionString`
  + libdnf5::OptionEnum: remove template, add pImpl
  + Add pImpl to `libdnf5::Option`
  + modules: Report problems with switching module streams
  + modules: Report switched module streams
  + modules: Add switching module streams as a possible transaction action
  + modules: Add replaces and replaced_by to TransactionModule
  + Add missing info updates alias, to match list command
  + Update `package_info_sections` not to use `scols_table_print_range`
  + libdnf-cli: Extract package info printing
  + ArgumentParser: use p_impl, no inline methods
  + ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  + ArgumentParser:PositionalArg: Support repeating of positional argument
  + Hide/Remove deprecated `libdnf5::repo::Repo` API
  + Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  + Remove deprecated unused function `create_forcearch_option()`
  + builddep: Don't escape globs, use expand_globs = false
  + builddep: Don't try to expand globs in pkg specs
  + libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  + Interfaces and adapters
  + module::ModuleStatus: Move to separate header file
  + comps::PackageType: Move to separate header file
  + cmp_naevr: Fix: pass by reference
  + modules: Report module solver problems
  + Accept SolverProblems for transacion resolve log
  + modules: Return problems from the module solver
  + modules: Add a method to process module solver problems
  + modules: Add a separate set of problem rules for modules
  + modules: Store the original module context also in the libsolv solvable
  + modules: Internalize modular repositories
  + Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  + Add pImpl to `libdnf5::repo::RepoQuery`
  + Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  + Remove deprecated `libdnf5::Base::load_config_from_file`
  + Move all `libdnf5::Base` members to pImpl
  + Add pImpl to `libdnf5::rpm::Reldep`
  + Add pImpl to `libdnf5::rpm::Changelog`
  + Add pImpl to `libdnf5::rpm::Nevra`
  + Add pImpl to `libdnf5::rpm::Checksum`
  + Add pImpl to `libdnf5::rpm::Package`
  + Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  + Add a method accepting std::string for filter_repo_id()
  + Add a method accepting std::string for filter_location()
  + Add a method accepting std::string for filter_file()
  + Add a method accepting std::string for filter_supplements()
  + Add a method accepting std::string for filter_enhances()
  + Add a method accepting std::string for filter_suggests()
  + Add a method accepting std::string for filter_recommends()
  + Add a method accepting std::string for filter_obsoletes()
  + Add a method accepting std::string for filter_conflicts()
  + Add a method accepting std::string for filter_requires()
  + Add a method accepting std::string for filter_description()
  + Add a method accepting std::string for filter_summary()
  + Add a method accepting std::string for filter_url()
  + Add a method accepting std::string for filter_sourcerpm()
  + Add a method accepting std::string for filter_nevra()
  + Add a method accepting std::string for filter_evr()
  + Add a method accepting std::string for filter_arch()
  + Add a method accepting std::string for filter_release()
  + Add a method accepting std::string for filter_version()
  + Add a method accepting std::string and int for filter_epoch()
  + Add a method accepting std::string for filter_name()
  + Add a method accepting std::string for filter_provides()
  + Extend version to four numbers (5.x.y.z)
  + Unify smallest version number name
  + cmake: rename PROJECT_VERSION_* to just VERSION_*
  + dnf5daemon: Document before_begin / after_complete signals
  + dnf5daemon: Signals to wrap rpm transaction execution
  + rpm: New callback to wrap whole rpm transaction
  + Add pImpl to `libdnf5::module::ModuleProfile`
  + Add pImpl to `libdnf5::module::ModuleDependency`
  + Add pImpl to `libdnf5::module::Nsvcap`
  + Add pImpl to `libdnf5::module::ModuleQuery`
  + Add pImpl to `libdnf5::comps::EnvironmentQuery`
  + Add pImpl to `libdnf5::comps::GroupQuery`
  + Add pImpl to `libdnf5::comps::Environment`
  + Add pImpl to `libdnf5::comps::Package`
  + Add pImpl to `libdnf5::comps::Group`
  + Remove unused `libdnf5::comps::GroupSack`
  + Remove unused `libdnf5::comps::EnvironmentSack`
  + Remove unused `libdnf5::comps::Comps`
  + Add pImpl to `libdnf5::advisory::Advisory`
  + Add pImpl to `libdnf5::advisory::AdvisoryReference`
  + Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  + Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  + Add pImpl to `libdnf5::rpm::RpmSignature`
  + Add pImpl to `libdnf5::transaction::Transaction`
  + Add pImpl to `libdnf5::rpm::KeyInfo`
  + Add pImpl to `libdnf5::repo::RepoSack`
  + Add pImpl to `libdnf5::base::SolverProblems`
  + Add pImpl to `libdnf5::base::LogEvent`
  + Add pImpl to `libdnf5::ConfigParser`
  + Add pImpl to `libdnf5::Vars`
  + Add pImpl to `libdnf5::transaction::TransactionHistory`
  + Add pImpl to `libdnf5::transaction::Package`
  + Add pImpl to `libdnf5::transaction::CompsGroup`
  + Add pImpl to `libdnf5::transaction::CompsEnvironment`
  + Add pImpl to `libdnf5::transaction::TransactionItem`
  + Remove several not needed imports
  + repo: add p_Impl and several needed utility methods
  + Repo: remove unused `fresh()` and `timestamp` attribute
  + Add pImpl to `ModuleItem` and remove definitions from header
  + Add pImpl to `libdnf5::base::transaction_*` classes
  + Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  + Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  + dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  + dnf5: Bash completion: Switch to `_init_completion`
  + Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  + Support RPMTRANS_FLAG_DEPLOOPS
  + Give inline methods hidden visibility by default
  + dnfdaemon: Make only internally used funcs static
  + dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  + doc: Add example of Rpm.list_fd usage in Python
  + dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  + dnfdaemon: New method list_fd() on Rpm interface
  + dnfdaemon: Serialize package object to JSON string
  + dnf5daemon: Handler that return data using UNIX_FD
  + dnf5daemon: Auxiliary method to write string to fd
  + dnf5daemon: Move utils functions into dnfdaemon namespace
  + dnf5daemon: get_session() method for D-Bus services
  + dnf5daemon-server: Ignore SIGPIPE
  + Vars: Add unit tests for API methods
  + Vars::unset: API method for removing variable
  + dnf5daemon-server/dbus: Install config files into /usr
  + Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  + Fix: Do not use Variable-length arrays (VLAs) in C++ code
  + Add a hint to call base.setup() prior loading repositories
  + dnf5daemon-client: New switches for group list
  + doc: Include comps.Group interface to D-Bus API documentatin
  + dnfdaemon: Enhance comps.Group.list() method
  + dnf5daemon-client: Fix group.get_installed()
  + man: Link dnf5 pages to dnf</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1717848000">- Update to 5.2.3.0
  + Update translations from weblate
  + const: Shared constant defining RPM transaction lock file
  + main: Implement checking of privileges before executing commands
  + exception: Add new exception for user insufficient privileges
  + locker: Move to public API
  + distro-sync: Add downloadonly option
  + commands: Fix using store option
  + Enhance warning about RPMs that were not validate by RPM
  + Vars::substitute: fix use-out-of-scope leaks
  + docs: correct the default for pluginconfpath
  + cli: Add skipped packages to the transaction table
  + i18n: Improve formatting an error message for multiple streams
  + Add/fix documentation for rpm::PackageQuery methods
  + i18n: Unwind "No {} to remove for argument: {}"
  + `history list`: count also groups and envs in total `Altered`
  + Fix typo in translatable string
  + [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  + Option `--providers-of` doesn't require available repos
  + Improve docs regarding the keepcache option and download command
  + needs_restarting: Fix invalid reference usage
  + download: add `--source` alias for `--srpm`
  + automatic: Fix documentation and ship config file
  + fix: quote `dnf5-command({})' in command suggestion when plugin not found
  + i18n: Unwind "Cannot {} package \"{}\"" message
  + base: Add repository to solver problem messages
  + conf: New classes for append options
  + docs: Document changes to repoinfo and repolist
  + dnf5daemon: The buildtime attribute has been added to the package_attrs option
  + bindings: Tests for using struct attributes in Python
  + bindings: Add Python attributes for structs
  + docs: Fix diff link on the dnf 5.2.0.0 changes page
  + docs: Add diff with API changes in dnf5-5.2.0.0
  + docs: Add a page about public API changes in dnf 5.2.0.0
  + system-upgrade: fix missing \n before transaction test
  + system-upgrade: comment to clarify progress bar logic
  + system-upgrade: drop [[maybe_unused]] from reboot() arg
  + system-upgrade: fix progress bars, set transaction description
  + system-upgrade: adapt to new transaction serialization format
  + system-upgrade: clean up releasever logic
  + system-upgrade: fix poweroff_after
  + copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  + Add file search result for repoquery --whatprovides
  + doc: Add enviroment variables and clarify options for loading the plugins
  + dnfdaemon: Fix Rpm interface introspection file
- Refresh patches
  + dnf5-with-static-libsolvext.patch
  + dnf5-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch
  + dnf5-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + dnf5-disable-Werror.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1727092800">- Do not conflict with libdnf-devel yet, PackageKit needs both
  devel packages for now.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1732449600">- Update to 5.2.7.0
  + 5.2.7.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.7.0
  + 5.2.6.2 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.2
  + 5.2.6.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.1
  + 5.2.6.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.0
  + 5.2.5.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.5.0
  + 5.2.4.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.4.0
- Refresh patches
  + Patch: dnf5-disable-Werror.patch
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1733659200">- Update to 5.2.8.1
  + 5.2.8.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.1
  + 5.2.8.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.0
- Add patch to fix build with sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Temporarily disable running tests until crashes are fixed (gh#rpm-software-management/dnf5#1893)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1745928000">- Update to 5.2.13.1
  + 5.2.13.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.1
  + 5.2.13.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.0
  + 5.2.12.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.12.0
  + 5.2.11.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.11.0
  + 5.2.10.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.10.0
  + 5.2.9.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.9.0
- Drop merged patch for sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Drop no longer needed patch for static libsolvext
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
</package>
<package pkgid="b925d3952cc683d54692c6583cce937ee12f2a7996d40fb40800c0f2d8ac789a8bf8c48815916d266151fd317773875d1580314df6587d7b1d57a19685f5e914" name="dnf5daemon-server" arch="x86_64">
  <version epoch="0" ver="5.2.13.1" rel="bp160.1.7"/>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1708948800">- Fix dependency on libcurl in dnf5-automatic</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1709899200">- Update to 5.1.14
  + Update translations from weblate
  + Make the error to resolve module metadata more descriptive
  + Switch off deltarpm support
  + Limit number of dnf5daemon simultaneously active sessions
  + Make info and list commands case insesitive
  + Allow dnf5daemon configuration overrides for root
  + Add repoquery.hpp for swig-4.2.1 support</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712232000">- Update to 5.1.17
  + Update translations from weblate
  + dnf5daemon: Remove reposdir from allowed config overrides
  + Document system-upgrade aliases
  + Improved Bash Completion
  + Print command line hints after resolve failure
  + Docuent Advisory.list() API usage
  + Add NEVRA field to advisory packages in dnf5daemon
  + Review and fix missing commands
  + Document dnf5daemon advisory
  + Document system-upgrade
  + system-upgrade: offline status subcommand
  + Add aliases `offline-distrosync`, `offline-upgrade`
  + Add `system-upgrade --offline` option
  + Add `offline`, `system-upgrade` commands
  + Automatically set `upgrade --downloadonly` when `--destdir` is used
  + Write warnings to stderr too in config-manager plugin
  + Add repoid to generated repository name in config-manager plugin
  + Bump sdbus-cpp requirement to 0.9.0
  + Document and implement dnf5daemon Rpm interface
  + Document and implement dnf5daemon Goal interface
  + Document and implement dnf5daemon Repo interface
  + Document and implement dnf5daemon Base interface
  + Document and implement dnf5daemon Advisory interface
  + Document and implement dnf5daemon SessionManager interface
  + Add `dnf5daemon repo --enable/--disable` commands
  + automatic: Skip network availability check without remote repo
  + dnf5daemon: Rpm.list() works with commandline pkgs</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1712404800">- Move dbus policy configuration from /etc to /usr</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1714132800">- Rebase to 5.2.0.0
  + Update translations from weblate
  + [DNF5] `--enable-plugin` and `--disable-plugin`: no match found message
  + [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  + spec: Add conflict with the former provider of plugin man pages
  + spec: Add conflict with the old provider of dnf.conf
  + [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  + [libdnf5 API] Base::get_plugins_info
  + [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  + repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  + [DNF5] API: No inline methods in shared_options.hpp
  + [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  + [DNF5] API: Remove unused and buggy RpmTransactionItem class
  + [DNF5] Command: no inline methods
  + [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  + API: cli::session: no inline methods and public vars in opts classes
  + API: cli::session::Command: no inline methods
  + API: add p_impl to cli::session::Session
  + API: rpm::TransactionCallbacks: no inline methods
  + API: repo::RepoCallbacks: no inline methods
  + Prepare for switch of dnf5 in Rawhide
  + base: Make get_transaction_history unstable
  + Set `group` reason for packages removed by a group removal
  + [DNF5] Implement `--enable-plugin` and `--disable-plugin`
  + [libdnf5 API] Base::enable_disable_plugins
  + spec: Simplify man page files
  + Loggers: Fix: Add missing "null_loger.cpp" file
  + Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  + doc: Review of DNF4 vs DNF5 CLI and configuration changes
  + Re-enable clang builds after API changes
  + Add `--store` option for storing arbitrary transaction
  + libdnf5::Goal: when adding serialized transaction accept local items
  + Goal: change `add_serialized_transaction()` to accept path to trans
  + Add group/env paths for transaction parsing/serializing
  + base::Transaction: during serialization allow specifying paths
  + base::Transaction: add `store_comps(...)` method
  + repo_sack: add stored_transaction repo and its private API
  + repo: add private API `add_xml_comps(path)`
  + Generalize logging of `read_group_solvable_from_xml(..)`
  + Add `environment_no_groups` to `GoalJobSettings`
  + libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  + libdnf5 IPlugin: Use pImpl
  + libdnf5 IPlugin: Do not use inline methods
  + dnf5 IPlugin: Do not use inline methods on API
  + libdnf5 IPlugin: Add argumets description
  + libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  + libdnf5 plugins: New hook `repos_loaded`
  + libdnf5 plugins: New hook `repos_configured`
  + Base: notify_repos_configured and are_repos_configured methods
  + Fix: implicit conversion changes signedness, unused value
  + Disable unit tests for Copr dnf5 plugin
  + dnfdaemon: Document Polit CheckAuthorization call
  + dnfdaemon: Catch timeout during CheckAuthorization
  + Not handle compatibility.conf as configuration file
  + config: add search (se) and info (if) aliases
  + Improve documentation of repo config directories
  + Cross reference documentation
  + Document Repos and Vars Dirs
  + doc: Unify style and move "Files" section
  + Document repos configuration overrides
  + doc: Remove ":" in titles
  + Bump libdnf5/libdnf5-cli so version
  + Mark multiple strings for translation
  + Set locale for dnf5 run
  + spec: Add missing dnf-config-manager.8.gz file
  + Generate documentation for ConfigRepo Class
  + [Doc] Describe denerating repo cache path
  + dnf5daemon: Make availability case insensitive
  + dnf5: Drop unneeded severities capitalization
  + dnf5: Document --available as default for advisory cmd
  + dnf5daemon-client: Drop unneeded severities capitalization
  + advisory: filter_severity and filter_type case insensitive
  + dnfdaemon: Fix and enhance Advisory interface doc
  + Enable import data from DNF4 for systems without state dir
  + libdnf5 options: Unify constructors - pass args for storing by value
  + dnfdaemon: Missing signal registration
  + doc: config manager plugin: wrap too long lines
  + doc: document config-manager plugin
  + Packit: get version from specfile for copr_builds againts main
  + Update tests to use new `load_repos()` API
  + Use new load_repos instead of deprecated update_and_load_enabled_repos
  + Make `libdnf5::repo::Repo::load()` private
  + Deprecate: `update_and_load_enabled_repos`
  + RepoSack: add new `load_repos` method
  + Move update_and_load_repos and fix_group_missing_xml to Impl
  + Prevent loading plugins for unittests
  + Respect plugins configuration option for loading plugins
  + Add pImpl to `libdnf5::LogRouter`
  + Add pImpl to `libdnf5::MemoryBufferLogger`
  + Add pImpl to `libdnf5::OptionBinds`
  + Add pImpl to `libdnf5::OptionBinds::Item`
  + Add pImpl to `libdnf5::Config`
  + Add pImpl to `libdnf5::OptionStringList`
  + OptionStringList: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionBool`
  + OptionBool: remove assignment operators and move constructor
  + Add pImpl to `libdnf5::OptionNumber`
  + Add pImpl to `libdnf5::OptionPath`
  + Add pImpl to `libdnf5::OptionString`
  + libdnf5::OptionEnum: remove template, add pImpl
  + Add pImpl to `libdnf5::Option`
  + modules: Report problems with switching module streams
  + modules: Report switched module streams
  + modules: Add switching module streams as a possible transaction action
  + modules: Add replaces and replaced_by to TransactionModule
  + Add missing info updates alias, to match list command
  + Update `package_info_sections` not to use `scols_table_print_range`
  + libdnf-cli: Extract package info printing
  + ArgumentParser: use p_impl, no inline methods
  + ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  + ArgumentParser:PositionalArg: Support repeating of positional argument
  + Hide/Remove deprecated `libdnf5::repo::Repo` API
  + Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  + Remove deprecated unused function `create_forcearch_option()`
  + builddep: Don't escape globs, use expand_globs = false
  + builddep: Don't try to expand globs in pkg specs
  + libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  + Interfaces and adapters
  + module::ModuleStatus: Move to separate header file
  + comps::PackageType: Move to separate header file
  + cmp_naevr: Fix: pass by reference
  + modules: Report module solver problems
  + Accept SolverProblems for transacion resolve log
  + modules: Return problems from the module solver
  + modules: Add a method to process module solver problems
  + modules: Add a separate set of problem rules for modules
  + modules: Store the original module context also in the libsolv solvable
  + modules: Internalize modular repositories
  + Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  + Add pImpl to `libdnf5::repo::RepoQuery`
  + Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  + Remove deprecated `libdnf5::Base::load_config_from_file`
  + Move all `libdnf5::Base` members to pImpl
  + Add pImpl to `libdnf5::rpm::Reldep`
  + Add pImpl to `libdnf5::rpm::Changelog`
  + Add pImpl to `libdnf5::rpm::Nevra`
  + Add pImpl to `libdnf5::rpm::Checksum`
  + Add pImpl to `libdnf5::rpm::Package`
  + Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  + Add a method accepting std::string for filter_repo_id()
  + Add a method accepting std::string for filter_location()
  + Add a method accepting std::string for filter_file()
  + Add a method accepting std::string for filter_supplements()
  + Add a method accepting std::string for filter_enhances()
  + Add a method accepting std::string for filter_suggests()
  + Add a method accepting std::string for filter_recommends()
  + Add a method accepting std::string for filter_obsoletes()
  + Add a method accepting std::string for filter_conflicts()
  + Add a method accepting std::string for filter_requires()
  + Add a method accepting std::string for filter_description()
  + Add a method accepting std::string for filter_summary()
  + Add a method accepting std::string for filter_url()
  + Add a method accepting std::string for filter_sourcerpm()
  + Add a method accepting std::string for filter_nevra()
  + Add a method accepting std::string for filter_evr()
  + Add a method accepting std::string for filter_arch()
  + Add a method accepting std::string for filter_release()
  + Add a method accepting std::string for filter_version()
  + Add a method accepting std::string and int for filter_epoch()
  + Add a method accepting std::string for filter_name()
  + Add a method accepting std::string for filter_provides()
  + Extend version to four numbers (5.x.y.z)
  + Unify smallest version number name
  + cmake: rename PROJECT_VERSION_* to just VERSION_*
  + dnf5daemon: Document before_begin / after_complete signals
  + dnf5daemon: Signals to wrap rpm transaction execution
  + rpm: New callback to wrap whole rpm transaction
  + Add pImpl to `libdnf5::module::ModuleProfile`
  + Add pImpl to `libdnf5::module::ModuleDependency`
  + Add pImpl to `libdnf5::module::Nsvcap`
  + Add pImpl to `libdnf5::module::ModuleQuery`
  + Add pImpl to `libdnf5::comps::EnvironmentQuery`
  + Add pImpl to `libdnf5::comps::GroupQuery`
  + Add pImpl to `libdnf5::comps::Environment`
  + Add pImpl to `libdnf5::comps::Package`
  + Add pImpl to `libdnf5::comps::Group`
  + Remove unused `libdnf5::comps::GroupSack`
  + Remove unused `libdnf5::comps::EnvironmentSack`
  + Remove unused `libdnf5::comps::Comps`
  + Add pImpl to `libdnf5::advisory::Advisory`
  + Add pImpl to `libdnf5::advisory::AdvisoryReference`
  + Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  + Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  + Add pImpl to `libdnf5::rpm::RpmSignature`
  + Add pImpl to `libdnf5::transaction::Transaction`
  + Add pImpl to `libdnf5::rpm::KeyInfo`
  + Add pImpl to `libdnf5::repo::RepoSack`
  + Add pImpl to `libdnf5::base::SolverProblems`
  + Add pImpl to `libdnf5::base::LogEvent`
  + Add pImpl to `libdnf5::ConfigParser`
  + Add pImpl to `libdnf5::Vars`
  + Add pImpl to `libdnf5::transaction::TransactionHistory`
  + Add pImpl to `libdnf5::transaction::Package`
  + Add pImpl to `libdnf5::transaction::CompsGroup`
  + Add pImpl to `libdnf5::transaction::CompsEnvironment`
  + Add pImpl to `libdnf5::transaction::TransactionItem`
  + Remove several not needed imports
  + repo: add p_Impl and several needed utility methods
  + Repo: remove unused `fresh()` and `timestamp` attribute
  + Add pImpl to `ModuleItem` and remove definitions from header
  + Add pImpl to `libdnf5::base::transaction_*` classes
  + Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  + Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  + dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  + dnf5: Bash completion: Switch to `_init_completion`
  + Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  + Support RPMTRANS_FLAG_DEPLOOPS
  + Give inline methods hidden visibility by default
  + dnfdaemon: Make only internally used funcs static
  + dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  + doc: Add example of Rpm.list_fd usage in Python
  + dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  + dnfdaemon: New method list_fd() on Rpm interface
  + dnfdaemon: Serialize package object to JSON string
  + dnf5daemon: Handler that return data using UNIX_FD
  + dnf5daemon: Auxiliary method to write string to fd
  + dnf5daemon: Move utils functions into dnfdaemon namespace
  + dnf5daemon: get_session() method for D-Bus services
  + dnf5daemon-server: Ignore SIGPIPE
  + Vars: Add unit tests for API methods
  + Vars::unset: API method for removing variable
  + dnf5daemon-server/dbus: Install config files into /usr
  + Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  + Fix: Do not use Variable-length arrays (VLAs) in C++ code
  + Add a hint to call base.setup() prior loading repositories
  + dnf5daemon-client: New switches for group list
  + doc: Include comps.Group interface to D-Bus API documentatin
  + dnfdaemon: Enhance comps.Group.list() method
  + dnf5daemon-client: Fix group.get_installed()
  + man: Link dnf5 pages to dnf</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1717848000">- Update to 5.2.3.0
  + Update translations from weblate
  + const: Shared constant defining RPM transaction lock file
  + main: Implement checking of privileges before executing commands
  + exception: Add new exception for user insufficient privileges
  + locker: Move to public API
  + distro-sync: Add downloadonly option
  + commands: Fix using store option
  + Enhance warning about RPMs that were not validate by RPM
  + Vars::substitute: fix use-out-of-scope leaks
  + docs: correct the default for pluginconfpath
  + cli: Add skipped packages to the transaction table
  + i18n: Improve formatting an error message for multiple streams
  + Add/fix documentation for rpm::PackageQuery methods
  + i18n: Unwind "No {} to remove for argument: {}"
  + `history list`: count also groups and envs in total `Altered`
  + Fix typo in translatable string
  + [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  + Option `--providers-of` doesn't require available repos
  + Improve docs regarding the keepcache option and download command
  + needs_restarting: Fix invalid reference usage
  + download: add `--source` alias for `--srpm`
  + automatic: Fix documentation and ship config file
  + fix: quote `dnf5-command({})' in command suggestion when plugin not found
  + i18n: Unwind "Cannot {} package \"{}\"" message
  + base: Add repository to solver problem messages
  + conf: New classes for append options
  + docs: Document changes to repoinfo and repolist
  + dnf5daemon: The buildtime attribute has been added to the package_attrs option
  + bindings: Tests for using struct attributes in Python
  + bindings: Add Python attributes for structs
  + docs: Fix diff link on the dnf 5.2.0.0 changes page
  + docs: Add diff with API changes in dnf5-5.2.0.0
  + docs: Add a page about public API changes in dnf 5.2.0.0
  + system-upgrade: fix missing \n before transaction test
  + system-upgrade: comment to clarify progress bar logic
  + system-upgrade: drop [[maybe_unused]] from reboot() arg
  + system-upgrade: fix progress bars, set transaction description
  + system-upgrade: adapt to new transaction serialization format
  + system-upgrade: clean up releasever logic
  + system-upgrade: fix poweroff_after
  + copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  + Add file search result for repoquery --whatprovides
  + doc: Add enviroment variables and clarify options for loading the plugins
  + dnfdaemon: Fix Rpm interface introspection file
- Refresh patches
  + dnf5-with-static-libsolvext.patch
  + dnf5-Use-usr-lib-sysimage-for-the-persistent-state-dir.patch
  + dnf5-Switch-default-reposdir-to-etc-dnf-repos.d.patch
  + dnf5-disable-Werror.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1727092800">- Do not conflict with libdnf-devel yet, PackageKit needs both
  devel packages for now.</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1732449600">- Update to 5.2.7.0
  + 5.2.7.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.7.0
  + 5.2.6.2 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.2
  + 5.2.6.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.1
  + 5.2.6.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.6.0
  + 5.2.5.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.5.0
  + 5.2.4.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.4.0
- Refresh patches
  + Patch: dnf5-disable-Werror.patch
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1733659200">- Update to 5.2.8.1
  + 5.2.8.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.1
  + 5.2.8.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.8.0
- Add patch to fix build with sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Temporarily disable running tests until crashes are fixed (gh#rpm-software-management/dnf5#1893)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@opensuse.org&gt;" date="1745928000">- Update to 5.2.13.1
  + 5.2.13.1 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.1
  + 5.2.13.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.13.0
  + 5.2.12.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.12.0
  + 5.2.11.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.11.0
  + 5.2.10.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.10.0
  + 5.2.9.0 changelog: https://github.com/rpm-software-management/dnf5/releases/tag/5.2.9.0
- Drop merged patch for sdbus-cpp v2
  + Patch: dnf5-PR1888.patch
- Drop no longer needed patch for static libsolvext
  + Patch: dnf5-with-static-libsolvext.patch</changelog>
</package>
<package pkgid="80625e90213567e395a486c5baaf072d181484f9e5df5ed1c98cf2ec93b2c0b35113e52802e821096fca10a39d45744ea5c7c760a05ed447aba5c1b722725c62" name="dnscrypt-proxy" arch="x86_64">
  <version epoch="0" ver="2.1.16" rel="bp160.1.1"/>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1736596800">- Update to version 2.1.6
  * Forwarding: in the list of servers for a zone, the `$BOOTSTRAP`
    keyword can be included as a shortcut to forward to the bootstrap
    servers. And the `$DHCP` keyword can be included to forward to the
    DNS resolvers provided by the local DHCP server. Based on work by YX
    Hao, thanks! DHCP forwarding should be considered experimental and my
    not work on all operating systems. A rule for a zone can mix and
    match multiple forwarder types, such as `10.0.0.1,10.0.0.254,$DHCP,
    192.168.1.1,$BOOTSTRAP`. Note that this is not implemented for
    captive portals yet.
  * Lying resolvers are now skipped, instead of just printing an error.
    This doesn't apply to captive portal and forwarding entries, which
    are the only reasonable use case for lying resolvers.
  * Support for XSalsa20 in DNSCrypt has been removed. This was not
    documented, and was supserseded by XChaCha20 in 2016.
  * Source files are now fetched with compression.
  * DNS64: compatibility has been improved.
  * Forwarding: the root domain (`.`) can now be forwarded.
  * The ARC caching algorithm has been replaced by the SIEVE algorithm.
  * Properties of multiple servers are now updated simultaneously. The
    concurrency level can be adjusted with the new
    `cert_refresh_concurrency` setting. Contributed by YX Hao.
  * MSI packages for DNSCrypt can now easily be built.
  * New command-line flag: `-include-relays` to include relays in `-list`
    and `-list-all`.
  * Support for DNS extended error codes has been added.
  * Documentation updates, bug fixes, dependency updates.
- Drop quic-go.patch, for dnscrypt-proxy already pulls fixed quic-go v0.48.2</changelog>
  <changelog author="cunix@mail.de" date="1736596801">- Update to version 2.1.7
  * Reintroduces support for XSalsa20 enryption in DNSCrypt,
    which was removed in 2.1.6. Unfortunately, a bunch of servers still
    only support that encryption system.
  * Added check for lying resolvers was added for DNSCrypt, similar to
    the one that was already present for DoH and ODoH.
- Minimum golang version now at 1.23
- With vendored quic-go at 0.48.2 since update to 2.1.6
  boo#1222473 and boo#1235156 should be fixed.
- Trimmed long lines in last changelog entry</changelog>
  <changelog author="Gerald Chen &lt;gerald_chen@foxmail.com&gt;" date="1743163200">- Updated to version 2.1.8
  * Dependencies have been updated, notably the QUIC implementation, which could
    be vulnerable to denial-of-service attacks.
  * In forwarding rules, the target can now optionally include a non-standard
    DNS port number. The port number is also now optional when using IPv6.
  * An annoying log message related to permissions on Windows has been
    suppressed.
  * Resolver IP addresses can now be refreshed more frequently. Additionally,
    jitter has been introduced to prevent all resolvers from being refreshed
    simultaneously. Further changes have been implemented to mitigate issues
    arising from multiple concurrent attempts to resolve a resolver's IP
    address.
  * An empty value for "tls_cipher_suite" is now equivalent to leaving the
    property undefined. Previously, it disabled all TLS cipher suites, which had
    little practical justification.
  * In forwarding rules, an optional `*.` prefix is now accepted.</changelog>
  <changelog author="cunix@mail.de" date="1747828800">- Update to version 2.1.11
  * web-based monitoring user interface added
  * configuration files hot-reloading implemented
  * HTTP/3 probing
  * added parallel downloading of block lists</changelog>
  <changelog author="cunix@mail.de" date="1748520000">- Update to version 2.1.12
  * weighted Power of Two (WP2) load balancing strategy has been
    implemented as the default
  * optional Prometheus metrics endpoint has been added for monitoring
  * additional records in queries are now properly removed before forwarding
  * simple view UI has been removed</changelog>
  <changelog author="cunix@mail.de" date="1756036800">- Update to version 2.1.13
  * Manual configuration reload via SIGHUP is now supported regardless of the
    hot-reload setting, providing more flexibility for system administrators
  * Fixed a regression in IP prefix matching for allow/block lists that could
    cause incorrect filtering behavior
  * the generate-domains-blocklist script now handles poor network conditions
    more gracefully</changelog>
  <changelog author="cunix@mail.de" date="1756987200">- Update to version 2.1.14
  * Added support for client IP address encryption in logs</changelog>
  <changelog author="cunix@mail.de" date="1766491200">- Update to version 2.1.15
  * Proxy hostnames (when using SOCKS/HTTP proxies) are now pre-resolved using
    bootstrap resolvers if they are domain names
  * Dynamically reduces timeouts as the connection limit is approached
  * Fixed double-bracketing of IPv6 addresses in DoH stamps
  * Cache statistics are now more accurate by only counting queries that
    actually participate in caching
  * Multiple IP addresses per hostname are now cached instead of randomly
    selecting one</changelog>
  <changelog author="cunix@mail.de" date="1780747200">- Update to version 2.1.16
  * The "tls_cipher_suite" option is now a no-op. Modern TLS stacks no longer
    expose cipher suite selection in a meaningful way, and the option had become
    misleading
  * A log size of 0 no longer means "unlimited"; it now correctly disables
    rotation by size
  * A new "tls_prefer_rsa" option has been added to prefer RSA cipher suites
    during the TLS handshake, useful on systems without hardware AES
  * The IP allow/block plugins now support CIDR ranges in addition to single
    addresses and prefix matching
  * Forwarding rules now support `$RESOLVCONF:&lt;file&gt;` to pick up upstream
    resolvers from a resolv.conf-style file, complementing the existing `$DHCP`
    syntax
  * Servers that hit a transient high RTT could previously stay penalized
    forever and never come back into rotation; their RTT estimate now decays so
    they can recover
  * Servers are no longer penalized for slow responses when the response is
    actually being served from the stale cache
  * The HTTP transport now handles `Alt-Svc: clear` properly and reuses HTTP
    connections more aggressively
  * The cache TTL is now an explicit, configurable parameter rather than being
    derived implicitly
  * The ""-resolve"" command now reports incomplete DNSSEC support instead of
    silently treating partial signatures as a success
  * "jsdelivr is now offered as an alternative source URL for resolver
    lists, providing more redundancy when the primary mirrors are unreachable
- boo#1260280: vendored google.golang.org/grpc v1.80.0
- boo#1265785: vendored golang.org/x/net v0.54.0</changelog>
</package>
<package pkgid="867a84cd5e8ad64ac8bb57fbcd8e943f7beb4af04f1af496779fe4690c82e72bfd7b13bc71e1c65430d0e1d48be6e049e09f926b7c493dcd23a7b5cf9888e352" name="dnscrypt-proxy" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="bp160.1.10"/>
  <changelog author="cunix@mail.de" date="1612008000">- Use less predictable temporary files during build (bsc#1181502).</changelog>
  <changelog author="cunix@mail.de - 2.1.0" date="1629028800">- Update to version 2.1.0
  * "fallback_resolvers" was renamed to "bootstrap_resolvers"
    Please update your configuration file accordingly.
  * Support for Oblivious DoH.
  * If the proxy is overloaded, cached and synthetic queries now
    keep being served, while non-cached queries are delayed.
  * Source URLs are now randomized.
  * Default "reject_ttl" reduced from 600 to 10
- Minimum golang version now at 1.16
- Find more "legal" files to include.</changelog>
  <changelog author="cunix@mail.de - 2.1.1" date="1633089600">- Update to version 2.1.1
  * Serve cached DoH responses when experiencing connectivity issues.
  * Time attributes in allow/block lists were ignored.
  * TTL served to clients is now rounded and starts decreasing
    before the first query is received.
  * Time-based rules are properly handled again in generate-domains-blocklist.
  * DoH/ODoH: entries with an IP address and using a non-standard port
    should not require help from a bootstrap resolver any more.</changelog>
  <changelog author="cunix@mail.de" date="1647950400">- switched to vendored_licenses_packager as build dependency</changelog>
  <changelog author="cunix@mail.de - 2.1.2" date="1659441600">- Update to version 2.1.2
  * Support for DoH over HTTP/3 (DoH3, HTTP over QUIC)
    Compatible servers will automatically use it.
    Note that QUIC uses UDP
    (usually over port 443, like DNSCrypt) instead of TCP.
  * fixed memory usage kept growing due to channels not
    being properly closed
  * DNS64: "CNAME" records are now translated like other responses
  * A relay whose name has been configured, but doesn't exist in the
    list of available relays is now a hard error
  * "dnscrypt-proxy -resolve" now reports if ECS (EDNS-clientsubnet) is
    supported by the server
  * "dnscrypt-proxy -list" now includes ODoH (Oblivious DoH) servers
  * Local DoH: queries made using the "GET" method are now handled
  * "PTR" queries are now supported for cloaked domains
- Minimum golang version now at 1.18</changelog>
  <changelog author="cunix@mail.de - 2.1.3" date="1675598400">- Update to version 2.1.3
  * DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
    version 2.1.2 required another (non-QUIC) resolver to be present for
    bootstrapping, or the resolver's IP address to be present in the
    stamp. This is not the case any more.
  * dnscrypt-proxy is now compatible with Go 1.20+
  * Commands (-check, -show-certs, -list, -list-all) now ignore log
    files and directly output the result to the standard output.
  * The "cert_ignore_timestamp" configuration switch is now documented.
    It allows ignoring timestamps for DNSCrypt certificate verification,
    until a first server is available. This should only be used on devices
    that don't have any ways to set the clock before DNS service is up.
    However, a safer alternative remains to use an NTP server with a fixed
    IP address (such as time.google.com), configured in the captive portals
    file.
  * Cloaking: when a name is cloaked, unsupported record types now
    return a blocked response rather than the actual records.
  * systemd: report Ready earlier as dnscrypt-proxy can itself manage
    retries for updates/refreshes.
  * vendored dependencies updated</changelog>
  <changelog author="cunix@mail.de - 2.1.4" date="1676116800">- Update to version 2.1.4
  * Fixes a regression from version 2.1.3: when cloaking was enabled,
    blocked responses were returned for records that were not A/AAAA/PTR
    even for names that were not in the cloaked list.</changelog>
  <changelog author="cunix@mail.de - 2.1.5" date="1691928000">- Update to version 2.1.5
  * Responses to blocked queries now include extended error codes
  * Reliability of connections using HTTP/3 has been improved
  * New configuration directive: "tls_key_log_file"
    to dump TLS secret keys</changelog>
  <changelog author="cunix@mail.de" date="1707134400">- use systemd sysusers</changelog>
  <changelog author="cunix@mail.de" date="1713700800">- added patch quic-go.patch (boo#1222473)</changelog>
</package>
<package pkgid="4d937bfab19b50f9334971b1a8f33862d9e8cbb29a05c75a4061df2027e3796c90c07ea8738341a234ec061f3f5af816f0f33f0417b6774662286de8275e9b66" name="dnsdist" arch="x86_64">
  <version epoch="0" ver="1.9.10" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
</package>
<package pkgid="264bf70b8c1217f66d7a553bf1db4f42ca860b319a1faa97d9e624e663a3db1a98f803a8e6f3a9c7a3d1319eaff9c37966a021cf53a3b9188844f09071bb5946" name="dnsdist" arch="x86_64">
  <version epoch="0" ver="1.9.11" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
  <changelog author="adam.majer@suse.de" date="1772798400">- update to 1.9.11:
  * Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852, CVE-2025-8671)
    fix a possible DoS in incoming DoH with nghttp2 (bsc#1250054, CVE-2025-30187)
  * Fix the IO reentry guard in outgoing DoH</changelog>
</package>
<package pkgid="206ad0581544e266017473e6bd2dc2973bf15e2e5c58dfdb2f25ebc82bca1c7f891744ae5b051623c83c6ae250a2eaa57bee7aaa80c73b8dc314253da1d4bff4" name="dnsdist" arch="x86_64">
  <version epoch="0" ver="1.9.13" rel="160000.1.1"/>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
  <changelog author="adam.majer@suse.de" date="1772798400">- update to 1.9.11:
  * Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852, CVE-2025-8671)
    fix a possible DoS in incoming DoH with nghttp2 (bsc#1250054, CVE-2025-30187)
  * Fix the IO reentry guard in outgoing DoH</changelog>
  <changelog author="adam.majer@suse.de" date="1775044800">- update to 1.9.12:
  https://www.dnsdist.org/changelog.html#change-1.9.12
  (CVE-2026-0396, bsc#1261236, CVE-2026-0397, bsc#1261237,
  CVE-2026-24028, bsc#1261238, CVE-2026-24029, bsc#1261239,
  CVE-2026-24030, bsc#1261240, CVE-2026-27853, bsc#1261241,
  CVE-2026-27854, bsc#1261243)</changelog>
  <changelog author="adam.majer@suse.de" date="1777896000">- update to 1.9.13:
  https://www.dnsdist.org/changelog.html#change-1.9.13
  * bsc#1262536 (CVE-2026-33257): Insufficient input validation of internal webserver
  * bsc#1262537 (CVE-2026-33260): Insufficient input validation of internal webserver
  * bsc#1262538 (CVE-2026-33254): Resource exhaustion via DoQ/DoH3 connections
  * bsc#1262539 (CVE-2026-33602): Off-by-one access when processing crafted UDP responses
  * bsc#1262540 (CVE-2026-33599): Out-of-bounds read in service discovery
  * bsc#1262541 (CVE-2026-33598): Out-of-bounds read in cache inspection via Lua
  * bsc#1262542 (CVE-2026-33597): PRSD detection denial of service
  * bsc#1262543 (CVE-2026-33596): TCP backend stream ID overflow
  * bsc#1262544 (CVE-2026-33595): DoQ/DoH3 excessive memory allocation
  * bsc#1262545 (CVE-2026-33594): Outgoing DoH excessive memory allocation
  * bsc#1262546 (CVE-2026-33593): Denial of service via crafted DNSCrypt query</changelog>
</package>
<package pkgid="e98088cda4e931bf25fe0bef91a2bc8f84c9cd0a08d43f56bcd0aceae90f72d3f68d41077158d787ece761083043bd302bf4ca4a60e96b16a795ae5620a65fa3" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.90" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
</package>
<package pkgid="c32c9539d5f568b5fcbcdf1d4db78403ad431e8dc3b00c45aed39136289cb59139694d18610da60d7604e5a7b1eac77b8edb6da36ea8c74f60de6bb4bf8e54e2" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.92rel2" rel="160000.1.1"/>
  <changelog author="lukasstraub2@web.de" date="1728388800">- Enable --nftset support</changelog>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gerald_chen@foxmail.com" date="1747569600">- update to 2.91:
  * Fix spurious "resource limit exceeded messages".
  * Fix out-of-bounds heap read in order_qsort().
  * Fix buffer overflow when configured lease-change script name
    is too long.
  * Improve behaviour in the face of non-responsive upstream TCP DNS
    servers. Without shorter timeouts, clients are blocked for too long
    and fail with their own timeouts.
  * Set --fast-dns-retries by default when doing DNSSEC. A single
    downstream query can trigger many upstream queries. On an
    unreliable network, there may not be enough downstream retries
    to ensure that all these queries complete.
  * Improve behaviour in the face of truncated answers to queries
    for DNSSEC records. Getting these answers by TCP doesn't now
    involve a faked truncated answer to the downstream client to
    force it to move to TCP. This improves performance and robustness
    in the face of broken clients which can't fall back to TCP.
  * No longer remove data from truncated upstream answers. If an
    upstream replies with a truncated answer, but the answer has some
    RRs included, return those RRs, rather than returning and
    empty answer.
  * Fix handling of EDNS0 UDP packet sizes.
  * Modify the behaviour of --synth-domain for IPv6.
  * Fix broken dhcp-relay on *BSD.
  * Add --dhcp-option-pxe config. This acts almost exactly like
  - -dhcp-option except that the defined option is only sent when
    replying to PXE clients. More importantly, these options are sent
    in reply PXE clients when dnsmasq in acting in PXE proxy mode. In
    PXE proxy mode, the set of options sent is defined by the PXE standard
    and the normal set of options is not sent. This config allows arbitrary
    options in PXE-proxy replies. A typical use-case is to send option
    175 to iPXE.
  * Support PXE proxy-DHCP and DHCP-relay at the same time.
  * Fix erroneous "DNSSEC validated" state with non-DNSSEC
    upstream servers.
  * Handle queries with EDNS client subnet fields better. If dnsmasq
    is configured to add an EDNS client subnet to a query, it is careful
    to suppress use of the cache, since a cached answer may not be valid
    for a query with a different client subnet. Extend this behaviour
    to queries which arrive a dnsmasq already carrying an EDNS client
    subnet.
  * Handle DS queries to auth zones. When dnsmasq is configured to
    act as an authoritative server and has an authoritative zone
    configured, and receives a query for that zone _as_forwarder_
    it answers the query directly rather than forwarding it. This
    doesn't affect the answer, but it saves dnsmasq forwarding the
    query to the recursor upstream, which then bounces it back to dnsmasq
    in auth mode. The exception should be when the query is for the root
    of zone, for a DS RR. The answer to that has to come from the parent,
    via the recursor, and will typically be a proof-of-non-existence
    since dnsmasq doesn't support signed zones. This patch suppresses
    local answers and forces forwarding to the upstream recursor for such
    queries. It stops breakage when a DNSSEC validating client makes
    queries to dnsmasq acting as forwarder for a zone for which it is
    authoritative.
  * Implement "DNS-0x20 encoding", for extra protection against
    reply-spoof attacks. Since DNS queries are case-insensitive,
    it's possible to randomly flip the case of letters in a query
    and still get the correct answer back.
  * Fix a long-standing problem when two queries which are identical
    in every repect _except_ case, get combined by dnsmasq. If
    dnsmasq gets eg, two queries for example.com and Example.com
    in quick succession it will get the answer for example.com from
    upstream and send that answer to both requestors. This means that
    the query for Example.com will get an answer for example.com, and
    in the modern DNS, that answer may not be accepted.</changelog>
  <changelog author="max@suse.com" date="1755777600">- bsc#1247812: Fix a segfault when setting up supplementary groups,
  but no username was specified.</changelog>
  <changelog author="FSchreiner@suse.com" date="1769256000">- update to 2.92
  * Redesign the interaction between DNSSEC validation and per-domain
    servers, specified as --server=/&lt;domain&gt;/&lt;ip-address&gt;. This should
    just work in all cases now. If the normal chain-of-trust exists into
    the delegated domain then whether the domain is signed or not, DNSSEC
    validation will function normally. In the case the delegated domain
    is an "overlay" on top of the global DNS and no NS and/or DS records
    exist connecting it to the global dns, then if the domain is
    unsigned the situation will be handled by synthesising a
    proof-of-non-existence-of-DS for the domain and queries will be
    answered unvalidated; this action will be logged. A signed domain
    without chain-of-trust can be validated if a suitable trust-anchor
    is provided using --trust-anchor. This change should be backwards
    compatible for all existing working configurations; it extends the
    space of possible configurations which are functional.
  * Fix a couple of problems with DNSSEC validation and DNAME. One
    could cause validation failure on correct domains, and the other
    would fail to spot an invalid domain. Thanks to Graham Clinch
    for spotting the problem.
  * Add --log-queries=auth option to only log replies from the auth DNS
    facility.
  * Fix some edge-cases with domains and --address and --server. There
    has been some regressions with this in previous releases. This change
    fixes the priority order from lower to highest as:
  - -address with a IPv4 or IPv6 address (as long as the query matches the type)
  - -address with # for all-zeros, as long as the query is A or AAAA)
  - -address with no address, which returns NXDOMAIN or NOERROR for all types.
  - -server with address set to # to use the unqualified servers.
  - -server with matching domain.
  - -server without domain or from /etc/resolv.conf.
  * Fix problems with ipset or nftset and TCP DNS transport. Previously
    this was racy, and insertion of addresses could fail on a busy server
    when DNS-over-TCP transport was involved.
  * DNSSEC validation change for reverse lookups in RFC-1918 ranges and friends.
    The large public DNS services seem not to return proof-of-nonexistence
    for DS records at the start of RFC-1918 in-addr.arpa domains and the their
    IPv6 equivalents. 10.in-addr.arpa, 168.192.in-addr.arpa etc.
    Since dnsmasq already has an option which instructs it not bother
    upstream servers with pointless queries about these address ranges,
    namely --bogus-priv, we extend that to enable behaviour which allows
    dnsmasq to assume that insecure NXDOMAIN replies for these domains
    are expected and to assume that the domains are legitimately unsigned.
    This behaviour only matters when some address range is directed to
    another upstream server using --rev-server. In that case it allows
    replies from that server to pass DNSSEC validation. Without such a
    server configured, queries are never sent upstream so they are never
    validated and the new behaviour is moot.
  * Add support for leasequery to the dnsmasq DHCPv4 server.
    This has to be specifically enabled with the --leasequery option.
    Many thanks to JAXPORT, Jacksonville Port Authority for sponsoring
    this enhancement to dnsmasq.
  * Fix failure to cache PTR RRs when a reply contains more than one answer.
    Thanks to Dmitry for spotting this.
  * Add TFTP options windowsize (RFC 7440) and timeout (RFC 2349).
  * Change the behaviour of the DHCPv6 server when a REBIND message
    is received but no lease exists. Under these circumstances a new
    lease is created _only_ when the --dhcp-authoritative option is
    set. This matches the behavior of the DHCPv4 server.
  * Add --dhcp-split-relay option. This makes a DHCPv4 relay which
    is functional when client and server networks aren't mutually
    route-able.
  * Fix failure to add client MAC address to queries in TCP mode.
    The options which cause	dnsmasq	to decorate a DNS query	with the MAC
    address	on the originating client can fail when the query is sent
    using TCP. Thanks to Bruno Ravara for spotting and
    characterising this bug.</changelog>
  <changelog author="max@suse.com" date="1774440000">- boo#1257934, 4070a748.patch: Fix build with nettle 4.0.</changelog>
  <changelog author="pmonreal@suse.com" date="1776686400">- Fix FTBFS with libnettle 4.0: (boo#1257934)
  * dnsmasq: missed hash-&gt;digest calls in 4070a74 (1eab169)
  * Add dnsmasq-Fix-FTBFS-nettle-4.0.patch and merge 4070a748.patch</changelog>
  <changelog author="max@suse.com" date="1776859200">- bsc#1262487, CVE-2026-6507, dnsmasq-CVE-2026-6507.patch:
  out-of-bounds write in DHCP BOOTREPLY processing can lead to
  denial of service.</changelog>
  <changelog author="max@suse.com" date="1778587200">- Update to security release 2.92rel2:
  * CVE-2026-2291, bsc#1258251: dnsmasq can be abused to record
    false cached data enabling DoS or attacker redirect.
  * CVE-2026-4890, bsc#1265001: DoS vulnerability in the DNSSEC
    validation.
  * CVE-2026-4891, bsc#1265002: heap-based out-of-bounds read
    vulnerability in the DNSSEC validation.
  * CVE-2026-4892, bsc#1265003: heap-based out-of-bounds write
    vulnerability in the DHCPv6 implementation.
  * CVE-2026-4893, bsc#1265004: information disclosure
    vulnerability in dnsmasq allows remote attackers to bypass
    source checks.
  * CVE-2026-5172, bsc#1265006: buffer overflow in dnsmasq’s
    extract_addresses() function.</changelog>
</package>
<package pkgid="e28b7bd92206bd8deb73da49e865f969fead591df89b6a686259f00528a759fe01ecb3fe823274eab8e2f6e9132a112e9cc7c2f86b8200f8a8cbc48689c0b9ce" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.93" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gerald_chen@foxmail.com" date="1747569600">- update to 2.91:
  * Fix spurious "resource limit exceeded messages".
  * Fix out-of-bounds heap read in order_qsort().
  * Fix buffer overflow when configured lease-change script name
    is too long.
  * Improve behaviour in the face of non-responsive upstream TCP DNS
    servers. Without shorter timeouts, clients are blocked for too long
    and fail with their own timeouts.
  * Set --fast-dns-retries by default when doing DNSSEC. A single
    downstream query can trigger many upstream queries. On an
    unreliable network, there may not be enough downstream retries
    to ensure that all these queries complete.
  * Improve behaviour in the face of truncated answers to queries
    for DNSSEC records. Getting these answers by TCP doesn't now
    involve a faked truncated answer to the downstream client to
    force it to move to TCP. This improves performance and robustness
    in the face of broken clients which can't fall back to TCP.
  * No longer remove data from truncated upstream answers. If an
    upstream replies with a truncated answer, but the answer has some
    RRs included, return those RRs, rather than returning and
    empty answer.
  * Fix handling of EDNS0 UDP packet sizes.
  * Modify the behaviour of --synth-domain for IPv6.
  * Fix broken dhcp-relay on *BSD.
  * Add --dhcp-option-pxe config. This acts almost exactly like
  - -dhcp-option except that the defined option is only sent when
    replying to PXE clients. More importantly, these options are sent
    in reply PXE clients when dnsmasq in acting in PXE proxy mode. In
    PXE proxy mode, the set of options sent is defined by the PXE standard
    and the normal set of options is not sent. This config allows arbitrary
    options in PXE-proxy replies. A typical use-case is to send option
    175 to iPXE.
  * Support PXE proxy-DHCP and DHCP-relay at the same time.
  * Fix erroneous "DNSSEC validated" state with non-DNSSEC
    upstream servers.
  * Handle queries with EDNS client subnet fields better. If dnsmasq
    is configured to add an EDNS client subnet to a query, it is careful
    to suppress use of the cache, since a cached answer may not be valid
    for a query with a different client subnet. Extend this behaviour
    to queries which arrive a dnsmasq already carrying an EDNS client
    subnet.
  * Handle DS queries to auth zones. When dnsmasq is configured to
    act as an authoritative server and has an authoritative zone
    configured, and receives a query for that zone _as_forwarder_
    it answers the query directly rather than forwarding it. This
    doesn't affect the answer, but it saves dnsmasq forwarding the
    query to the recursor upstream, which then bounces it back to dnsmasq
    in auth mode. The exception should be when the query is for the root
    of zone, for a DS RR. The answer to that has to come from the parent,
    via the recursor, and will typically be a proof-of-non-existence
    since dnsmasq doesn't support signed zones. This patch suppresses
    local answers and forces forwarding to the upstream recursor for such
    queries. It stops breakage when a DNSSEC validating client makes
    queries to dnsmasq acting as forwarder for a zone for which it is
    authoritative.
  * Implement "DNS-0x20 encoding", for extra protection against
    reply-spoof attacks. Since DNS queries are case-insensitive,
    it's possible to randomly flip the case of letters in a query
    and still get the correct answer back.
  * Fix a long-standing problem when two queries which are identical
    in every repect _except_ case, get combined by dnsmasq. If
    dnsmasq gets eg, two queries for example.com and Example.com
    in quick succession it will get the answer for example.com from
    upstream and send that answer to both requestors. This means that
    the query for Example.com will get an answer for example.com, and
    in the modern DNS, that answer may not be accepted.</changelog>
  <changelog author="max@suse.com" date="1755777600">- bsc#1247812: Fix a segfault when setting up supplementary groups,
  but no username was specified.</changelog>
  <changelog author="FSchreiner@suse.com" date="1769256000">- update to 2.92
  * Redesign the interaction between DNSSEC validation and per-domain
    servers, specified as --server=/&lt;domain&gt;/&lt;ip-address&gt;. This should
    just work in all cases now. If the normal chain-of-trust exists into
    the delegated domain then whether the domain is signed or not, DNSSEC
    validation will function normally. In the case the delegated domain
    is an "overlay" on top of the global DNS and no NS and/or DS records
    exist connecting it to the global dns, then if the domain is
    unsigned the situation will be handled by synthesising a
    proof-of-non-existence-of-DS for the domain and queries will be
    answered unvalidated; this action will be logged. A signed domain
    without chain-of-trust can be validated if a suitable trust-anchor
    is provided using --trust-anchor. This change should be backwards
    compatible for all existing working configurations; it extends the
    space of possible configurations which are functional.
  * Fix a couple of problems with DNSSEC validation and DNAME. One
    could cause validation failure on correct domains, and the other
    would fail to spot an invalid domain. Thanks to Graham Clinch
    for spotting the problem.
  * Add --log-queries=auth option to only log replies from the auth DNS
    facility.
  * Fix some edge-cases with domains and --address and --server. There
    has been some regressions with this in previous releases. This change
    fixes the priority order from lower to highest as:
  - -address with a IPv4 or IPv6 address (as long as the query matches the type)
  - -address with # for all-zeros, as long as the query is A or AAAA)
  - -address with no address, which returns NXDOMAIN or NOERROR for all types.
  - -server with address set to # to use the unqualified servers.
  - -server with matching domain.
  - -server without domain or from /etc/resolv.conf.
  * Fix problems with ipset or nftset and TCP DNS transport. Previously
    this was racy, and insertion of addresses could fail on a busy server
    when DNS-over-TCP transport was involved.
  * DNSSEC validation change for reverse lookups in RFC-1918 ranges and friends.
    The large public DNS services seem not to return proof-of-nonexistence
    for DS records at the start of RFC-1918 in-addr.arpa domains and the their
    IPv6 equivalents. 10.in-addr.arpa, 168.192.in-addr.arpa etc.
    Since dnsmasq already has an option which instructs it not bother
    upstream servers with pointless queries about these address ranges,
    namely --bogus-priv, we extend that to enable behaviour which allows
    dnsmasq to assume that insecure NXDOMAIN replies for these domains
    are expected and to assume that the domains are legitimately unsigned.
    This behaviour only matters when some address range is directed to
    another upstream server using --rev-server. In that case it allows
    replies from that server to pass DNSSEC validation. Without such a
    server configured, queries are never sent upstream so they are never
    validated and the new behaviour is moot.
  * Add support for leasequery to the dnsmasq DHCPv4 server.
    This has to be specifically enabled with the --leasequery option.
    Many thanks to JAXPORT, Jacksonville Port Authority for sponsoring
    this enhancement to dnsmasq.
  * Fix failure to cache PTR RRs when a reply contains more than one answer.
    Thanks to Dmitry for spotting this.
  * Add TFTP options windowsize (RFC 7440) and timeout (RFC 2349).
  * Change the behaviour of the DHCPv6 server when a REBIND message
    is received but no lease exists. Under these circumstances a new
    lease is created _only_ when the --dhcp-authoritative option is
    set. This matches the behavior of the DHCPv4 server.
  * Add --dhcp-split-relay option. This makes a DHCPv4 relay which
    is functional when client and server networks aren't mutually
    route-able.
  * Fix failure to add client MAC address to queries in TCP mode.
    The options which cause	dnsmasq	to decorate a DNS query	with the MAC
    address	on the originating client can fail when the query is sent
    using TCP. Thanks to Bruno Ravara for spotting and
    characterising this bug.</changelog>
  <changelog author="max@suse.com" date="1774440000">- boo#1257934, 4070a748.patch: Fix build with nettle 4.0.</changelog>
  <changelog author="pmonreal@suse.com" date="1776686400">- Fix FTBFS with libnettle 4.0: (boo#1257934)
  * dnsmasq: missed hash-&gt;digest calls in 4070a74 (1eab169)
  * Add dnsmasq-Fix-FTBFS-nettle-4.0.patch and merge 4070a748.patch</changelog>
  <changelog author="max@suse.com" date="1776859200">- bsc#1262487, CVE-2026-6507, dnsmasq-CVE-2026-6507.patch:
  out-of-bounds write in DHCP BOOTREPLY processing can lead to
  denial of service.</changelog>
  <changelog author="max@suse.com" date="1778587200">- Update to security release 2.92rel2:
  * CVE-2026-2291, bsc#1258251: dnsmasq can be abused to record
    false cached data enabling DoS or attacker redirect.
  * CVE-2026-4890, bsc#1265001: DoS vulnerability in the DNSSEC
    validation.
  * CVE-2026-4891, bsc#1265002: heap-based out-of-bounds read
    vulnerability in the DNSSEC validation.
  * CVE-2026-4892, bsc#1265003: heap-based out-of-bounds write
    vulnerability in the DHCPv6 implementation.
  * CVE-2026-4893, bsc#1265004: information disclosure
    vulnerability in dnsmasq allows remote attackers to bypass
    source checks.
  * CVE-2026-5172, bsc#1265006: buffer overflow in dnsmasq’s
    extract_addresses() function.</changelog>
  <changelog author="max@suse.com" date="1782216000">- Update to 2.93:
  * CVE-2026-12725, bsc#1268764: Heap buffer overflow in
    `log_query()` when logging unsupported DS/DNSKEY replies.
  * Fix a corner-case in DNSSEC validation with wildcards.
  * Fix DNSSEC failure with spurious RRSIGs.
  * Fix DNSSEC fail with CNAME replies to DS queries.
  * Fix regression in 2.92 release which broke DHCPv6 when a DHCP
    relay is in use.
  * Modify the inotify implementation so that inotify watches are
    only created after dnsmasq has changed permissions and userid.
  * CVE-2026-2291: Rework storage allocation for domain names.
  * Obsoletes dnsmasq-CVE-2026-6507.patch
  * Obsoletes dnsmasq-Fix-FTBFS-nettle-4.0.patch</changelog>
</package>
<package pkgid="99d3ffc2c0f02835f94ca6a93977ed179140ec0e5830ecd7857f63c1651ac5cdf6e0be89ba9208fbd555d854871e8ae407b91df8e058cdb8fcf7a52f312a38f2" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.90" rel="160000.2.2"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
</package>
<package pkgid="374a8bef129951ec21f3f72df9c7d7f7de735b78b28526ee522a396d0e9b43a3d36d66c4c0abc3b3a088f9956f0c15654ff61a255b184dcaabf6b586850d8b89" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.92rel2" rel="160000.1.1"/>
  <changelog author="lukasstraub2@web.de" date="1728388800">- Enable --nftset support</changelog>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gerald_chen@foxmail.com" date="1747569600">- update to 2.91:
  * Fix spurious "resource limit exceeded messages".
  * Fix out-of-bounds heap read in order_qsort().
  * Fix buffer overflow when configured lease-change script name
    is too long.
  * Improve behaviour in the face of non-responsive upstream TCP DNS
    servers. Without shorter timeouts, clients are blocked for too long
    and fail with their own timeouts.
  * Set --fast-dns-retries by default when doing DNSSEC. A single
    downstream query can trigger many upstream queries. On an
    unreliable network, there may not be enough downstream retries
    to ensure that all these queries complete.
  * Improve behaviour in the face of truncated answers to queries
    for DNSSEC records. Getting these answers by TCP doesn't now
    involve a faked truncated answer to the downstream client to
    force it to move to TCP. This improves performance and robustness
    in the face of broken clients which can't fall back to TCP.
  * No longer remove data from truncated upstream answers. If an
    upstream replies with a truncated answer, but the answer has some
    RRs included, return those RRs, rather than returning and
    empty answer.
  * Fix handling of EDNS0 UDP packet sizes.
  * Modify the behaviour of --synth-domain for IPv6.
  * Fix broken dhcp-relay on *BSD.
  * Add --dhcp-option-pxe config. This acts almost exactly like
  - -dhcp-option except that the defined option is only sent when
    replying to PXE clients. More importantly, these options are sent
    in reply PXE clients when dnsmasq in acting in PXE proxy mode. In
    PXE proxy mode, the set of options sent is defined by the PXE standard
    and the normal set of options is not sent. This config allows arbitrary
    options in PXE-proxy replies. A typical use-case is to send option
    175 to iPXE.
  * Support PXE proxy-DHCP and DHCP-relay at the same time.
  * Fix erroneous "DNSSEC validated" state with non-DNSSEC
    upstream servers.
  * Handle queries with EDNS client subnet fields better. If dnsmasq
    is configured to add an EDNS client subnet to a query, it is careful
    to suppress use of the cache, since a cached answer may not be valid
    for a query with a different client subnet. Extend this behaviour
    to queries which arrive a dnsmasq already carrying an EDNS client
    subnet.
  * Handle DS queries to auth zones. When dnsmasq is configured to
    act as an authoritative server and has an authoritative zone
    configured, and receives a query for that zone _as_forwarder_
    it answers the query directly rather than forwarding it. This
    doesn't affect the answer, but it saves dnsmasq forwarding the
    query to the recursor upstream, which then bounces it back to dnsmasq
    in auth mode. The exception should be when the query is for the root
    of zone, for a DS RR. The answer to that has to come from the parent,
    via the recursor, and will typically be a proof-of-non-existence
    since dnsmasq doesn't support signed zones. This patch suppresses
    local answers and forces forwarding to the upstream recursor for such
    queries. It stops breakage when a DNSSEC validating client makes
    queries to dnsmasq acting as forwarder for a zone for which it is
    authoritative.
  * Implement "DNS-0x20 encoding", for extra protection against
    reply-spoof attacks. Since DNS queries are case-insensitive,
    it's possible to randomly flip the case of letters in a query
    and still get the correct answer back.
  * Fix a long-standing problem when two queries which are identical
    in every repect _except_ case, get combined by dnsmasq. If
    dnsmasq gets eg, two queries for example.com and Example.com
    in quick succession it will get the answer for example.com from
    upstream and send that answer to both requestors. This means that
    the query for Example.com will get an answer for example.com, and
    in the modern DNS, that answer may not be accepted.</changelog>
  <changelog author="max@suse.com" date="1755777600">- bsc#1247812: Fix a segfault when setting up supplementary groups,
  but no username was specified.</changelog>
  <changelog author="FSchreiner@suse.com" date="1769256000">- update to 2.92
  * Redesign the interaction between DNSSEC validation and per-domain
    servers, specified as --server=/&lt;domain&gt;/&lt;ip-address&gt;. This should
    just work in all cases now. If the normal chain-of-trust exists into
    the delegated domain then whether the domain is signed or not, DNSSEC
    validation will function normally. In the case the delegated domain
    is an "overlay" on top of the global DNS and no NS and/or DS records
    exist connecting it to the global dns, then if the domain is
    unsigned the situation will be handled by synthesising a
    proof-of-non-existence-of-DS for the domain and queries will be
    answered unvalidated; this action will be logged. A signed domain
    without chain-of-trust can be validated if a suitable trust-anchor
    is provided using --trust-anchor. This change should be backwards
    compatible for all existing working configurations; it extends the
    space of possible configurations which are functional.
  * Fix a couple of problems with DNSSEC validation and DNAME. One
    could cause validation failure on correct domains, and the other
    would fail to spot an invalid domain. Thanks to Graham Clinch
    for spotting the problem.
  * Add --log-queries=auth option to only log replies from the auth DNS
    facility.
  * Fix some edge-cases with domains and --address and --server. There
    has been some regressions with this in previous releases. This change
    fixes the priority order from lower to highest as:
  - -address with a IPv4 or IPv6 address (as long as the query matches the type)
  - -address with # for all-zeros, as long as the query is A or AAAA)
  - -address with no address, which returns NXDOMAIN or NOERROR for all types.
  - -server with address set to # to use the unqualified servers.
  - -server with matching domain.
  - -server without domain or from /etc/resolv.conf.
  * Fix problems with ipset or nftset and TCP DNS transport. Previously
    this was racy, and insertion of addresses could fail on a busy server
    when DNS-over-TCP transport was involved.
  * DNSSEC validation change for reverse lookups in RFC-1918 ranges and friends.
    The large public DNS services seem not to return proof-of-nonexistence
    for DS records at the start of RFC-1918 in-addr.arpa domains and the their
    IPv6 equivalents. 10.in-addr.arpa, 168.192.in-addr.arpa etc.
    Since dnsmasq already has an option which instructs it not bother
    upstream servers with pointless queries about these address ranges,
    namely --bogus-priv, we extend that to enable behaviour which allows
    dnsmasq to assume that insecure NXDOMAIN replies for these domains
    are expected and to assume that the domains are legitimately unsigned.
    This behaviour only matters when some address range is directed to
    another upstream server using --rev-server. In that case it allows
    replies from that server to pass DNSSEC validation. Without such a
    server configured, queries are never sent upstream so they are never
    validated and the new behaviour is moot.
  * Add support for leasequery to the dnsmasq DHCPv4 server.
    This has to be specifically enabled with the --leasequery option.
    Many thanks to JAXPORT, Jacksonville Port Authority for sponsoring
    this enhancement to dnsmasq.
  * Fix failure to cache PTR RRs when a reply contains more than one answer.
    Thanks to Dmitry for spotting this.
  * Add TFTP options windowsize (RFC 7440) and timeout (RFC 2349).
  * Change the behaviour of the DHCPv6 server when a REBIND message
    is received but no lease exists. Under these circumstances a new
    lease is created _only_ when the --dhcp-authoritative option is
    set. This matches the behavior of the DHCPv4 server.
  * Add --dhcp-split-relay option. This makes a DHCPv4 relay which
    is functional when client and server networks aren't mutually
    route-able.
  * Fix failure to add client MAC address to queries in TCP mode.
    The options which cause	dnsmasq	to decorate a DNS query	with the MAC
    address	on the originating client can fail when the query is sent
    using TCP. Thanks to Bruno Ravara for spotting and
    characterising this bug.</changelog>
  <changelog author="max@suse.com" date="1774440000">- boo#1257934, 4070a748.patch: Fix build with nettle 4.0.</changelog>
  <changelog author="pmonreal@suse.com" date="1776686400">- Fix FTBFS with libnettle 4.0: (boo#1257934)
  * dnsmasq: missed hash-&gt;digest calls in 4070a74 (1eab169)
  * Add dnsmasq-Fix-FTBFS-nettle-4.0.patch and merge 4070a748.patch</changelog>
  <changelog author="max@suse.com" date="1776859200">- bsc#1262487, CVE-2026-6507, dnsmasq-CVE-2026-6507.patch:
  out-of-bounds write in DHCP BOOTREPLY processing can lead to
  denial of service.</changelog>
  <changelog author="max@suse.com" date="1778587200">- Update to security release 2.92rel2:
  * CVE-2026-2291, bsc#1258251: dnsmasq can be abused to record
    false cached data enabling DoS or attacker redirect.
  * CVE-2026-4890, bsc#1265001: DoS vulnerability in the DNSSEC
    validation.
  * CVE-2026-4891, bsc#1265002: heap-based out-of-bounds read
    vulnerability in the DNSSEC validation.
  * CVE-2026-4892, bsc#1265003: heap-based out-of-bounds write
    vulnerability in the DHCPv6 implementation.
  * CVE-2026-4893, bsc#1265004: information disclosure
    vulnerability in dnsmasq allows remote attackers to bypass
    source checks.
  * CVE-2026-5172, bsc#1265006: buffer overflow in dnsmasq’s
    extract_addresses() function.</changelog>
</package>
<package pkgid="9575a4bfc54a9cfa46a89410cd653e8cf3a9f25aa540ddbedab2a1c20ca899b7a0b9e21ee089dbbcb44815f970d425cd81aaa58b4f15610ee427b696869e1694" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.93" rel="160000.1.1"/>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gerald_chen@foxmail.com" date="1747569600">- update to 2.91:
  * Fix spurious "resource limit exceeded messages".
  * Fix out-of-bounds heap read in order_qsort().
  * Fix buffer overflow when configured lease-change script name
    is too long.
  * Improve behaviour in the face of non-responsive upstream TCP DNS
    servers. Without shorter timeouts, clients are blocked for too long
    and fail with their own timeouts.
  * Set --fast-dns-retries by default when doing DNSSEC. A single
    downstream query can trigger many upstream queries. On an
    unreliable network, there may not be enough downstream retries
    to ensure that all these queries complete.
  * Improve behaviour in the face of truncated answers to queries
    for DNSSEC records. Getting these answers by TCP doesn't now
    involve a faked truncated answer to the downstream client to
    force it to move to TCP. This improves performance and robustness
    in the face of broken clients which can't fall back to TCP.
  * No longer remove data from truncated upstream answers. If an
    upstream replies with a truncated answer, but the answer has some
    RRs included, return those RRs, rather than returning and
    empty answer.
  * Fix handling of EDNS0 UDP packet sizes.
  * Modify the behaviour of --synth-domain for IPv6.
  * Fix broken dhcp-relay on *BSD.
  * Add --dhcp-option-pxe config. This acts almost exactly like
  - -dhcp-option except that the defined option is only sent when
    replying to PXE clients. More importantly, these options are sent
    in reply PXE clients when dnsmasq in acting in PXE proxy mode. In
    PXE proxy mode, the set of options sent is defined by the PXE standard
    and the normal set of options is not sent. This config allows arbitrary
    options in PXE-proxy replies. A typical use-case is to send option
    175 to iPXE.
  * Support PXE proxy-DHCP and DHCP-relay at the same time.
  * Fix erroneous "DNSSEC validated" state with non-DNSSEC
    upstream servers.
  * Handle queries with EDNS client subnet fields better. If dnsmasq
    is configured to add an EDNS client subnet to a query, it is careful
    to suppress use of the cache, since a cached answer may not be valid
    for a query with a different client subnet. Extend this behaviour
    to queries which arrive a dnsmasq already carrying an EDNS client
    subnet.
  * Handle DS queries to auth zones. When dnsmasq is configured to
    act as an authoritative server and has an authoritative zone
    configured, and receives a query for that zone _as_forwarder_
    it answers the query directly rather than forwarding it. This
    doesn't affect the answer, but it saves dnsmasq forwarding the
    query to the recursor upstream, which then bounces it back to dnsmasq
    in auth mode. The exception should be when the query is for the root
    of zone, for a DS RR. The answer to that has to come from the parent,
    via the recursor, and will typically be a proof-of-non-existence
    since dnsmasq doesn't support signed zones. This patch suppresses
    local answers and forces forwarding to the upstream recursor for such
    queries. It stops breakage when a DNSSEC validating client makes
    queries to dnsmasq acting as forwarder for a zone for which it is
    authoritative.
  * Implement "DNS-0x20 encoding", for extra protection against
    reply-spoof attacks. Since DNS queries are case-insensitive,
    it's possible to randomly flip the case of letters in a query
    and still get the correct answer back.
  * Fix a long-standing problem when two queries which are identical
    in every repect _except_ case, get combined by dnsmasq. If
    dnsmasq gets eg, two queries for example.com and Example.com
    in quick succession it will get the answer for example.com from
    upstream and send that answer to both requestors. This means that
    the query for Example.com will get an answer for example.com, and
    in the modern DNS, that answer may not be accepted.</changelog>
  <changelog author="max@suse.com" date="1755777600">- bsc#1247812: Fix a segfault when setting up supplementary groups,
  but no username was specified.</changelog>
  <changelog author="FSchreiner@suse.com" date="1769256000">- update to 2.92
  * Redesign the interaction between DNSSEC validation and per-domain
    servers, specified as --server=/&lt;domain&gt;/&lt;ip-address&gt;. This should
    just work in all cases now. If the normal chain-of-trust exists into
    the delegated domain then whether the domain is signed or not, DNSSEC
    validation will function normally. In the case the delegated domain
    is an "overlay" on top of the global DNS and no NS and/or DS records
    exist connecting it to the global dns, then if the domain is
    unsigned the situation will be handled by synthesising a
    proof-of-non-existence-of-DS for the domain and queries will be
    answered unvalidated; this action will be logged. A signed domain
    without chain-of-trust can be validated if a suitable trust-anchor
    is provided using --trust-anchor. This change should be backwards
    compatible for all existing working configurations; it extends the
    space of possible configurations which are functional.
  * Fix a couple of problems with DNSSEC validation and DNAME. One
    could cause validation failure on correct domains, and the other
    would fail to spot an invalid domain. Thanks to Graham Clinch
    for spotting the problem.
  * Add --log-queries=auth option to only log replies from the auth DNS
    facility.
  * Fix some edge-cases with domains and --address and --server. There
    has been some regressions with this in previous releases. This change
    fixes the priority order from lower to highest as:
  - -address with a IPv4 or IPv6 address (as long as the query matches the type)
  - -address with # for all-zeros, as long as the query is A or AAAA)
  - -address with no address, which returns NXDOMAIN or NOERROR for all types.
  - -server with address set to # to use the unqualified servers.
  - -server with matching domain.
  - -server without domain or from /etc/resolv.conf.
  * Fix problems with ipset or nftset and TCP DNS transport. Previously
    this was racy, and insertion of addresses could fail on a busy server
    when DNS-over-TCP transport was involved.
  * DNSSEC validation change for reverse lookups in RFC-1918 ranges and friends.
    The large public DNS services seem not to return proof-of-nonexistence
    for DS records at the start of RFC-1918 in-addr.arpa domains and the their
    IPv6 equivalents. 10.in-addr.arpa, 168.192.in-addr.arpa etc.
    Since dnsmasq already has an option which instructs it not bother
    upstream servers with pointless queries about these address ranges,
    namely --bogus-priv, we extend that to enable behaviour which allows
    dnsmasq to assume that insecure NXDOMAIN replies for these domains
    are expected and to assume that the domains are legitimately unsigned.
    This behaviour only matters when some address range is directed to
    another upstream server using --rev-server. In that case it allows
    replies from that server to pass DNSSEC validation. Without such a
    server configured, queries are never sent upstream so they are never
    validated and the new behaviour is moot.
  * Add support for leasequery to the dnsmasq DHCPv4 server.
    This has to be specifically enabled with the --leasequery option.
    Many thanks to JAXPORT, Jacksonville Port Authority for sponsoring
    this enhancement to dnsmasq.
  * Fix failure to cache PTR RRs when a reply contains more than one answer.
    Thanks to Dmitry for spotting this.
  * Add TFTP options windowsize (RFC 7440) and timeout (RFC 2349).
  * Change the behaviour of the DHCPv6 server when a REBIND message
    is received but no lease exists. Under these circumstances a new
    lease is created _only_ when the --dhcp-authoritative option is
    set. This matches the behavior of the DHCPv4 server.
  * Add --dhcp-split-relay option. This makes a DHCPv4 relay which
    is functional when client and server networks aren't mutually
    route-able.
  * Fix failure to add client MAC address to queries in TCP mode.
    The options which cause	dnsmasq	to decorate a DNS query	with the MAC
    address	on the originating client can fail when the query is sent
    using TCP. Thanks to Bruno Ravara for spotting and
    characterising this bug.</changelog>
  <changelog author="max@suse.com" date="1774440000">- boo#1257934, 4070a748.patch: Fix build with nettle 4.0.</changelog>
  <changelog author="pmonreal@suse.com" date="1776686400">- Fix FTBFS with libnettle 4.0: (boo#1257934)
  * dnsmasq: missed hash-&gt;digest calls in 4070a74 (1eab169)
  * Add dnsmasq-Fix-FTBFS-nettle-4.0.patch and merge 4070a748.patch</changelog>
  <changelog author="max@suse.com" date="1776859200">- bsc#1262487, CVE-2026-6507, dnsmasq-CVE-2026-6507.patch:
  out-of-bounds write in DHCP BOOTREPLY processing can lead to
  denial of service.</changelog>
  <changelog author="max@suse.com" date="1778587200">- Update to security release 2.92rel2:
  * CVE-2026-2291, bsc#1258251: dnsmasq can be abused to record
    false cached data enabling DoS or attacker redirect.
  * CVE-2026-4890, bsc#1265001: DoS vulnerability in the DNSSEC
    validation.
  * CVE-2026-4891, bsc#1265002: heap-based out-of-bounds read
    vulnerability in the DNSSEC validation.
  * CVE-2026-4892, bsc#1265003: heap-based out-of-bounds write
    vulnerability in the DHCPv6 implementation.
  * CVE-2026-4893, bsc#1265004: information disclosure
    vulnerability in dnsmasq allows remote attackers to bypass
    source checks.
  * CVE-2026-5172, bsc#1265006: buffer overflow in dnsmasq’s
    extract_addresses() function.</changelog>
  <changelog author="max@suse.com" date="1782216000">- Update to 2.93:
  * CVE-2026-12725, bsc#1268764: Heap buffer overflow in
    `log_query()` when logging unsupported DS/DNSKEY replies.
  * Fix a corner-case in DNSSEC validation with wildcards.
  * Fix DNSSEC failure with spurious RRSIGs.
  * Fix DNSSEC fail with CNAME replies to DS queries.
  * Fix regression in 2.92 release which broke DHCPv6 when a DHCP
    relay is in use.
  * Modify the inotify implementation so that inotify watches are
    only created after dnsmasq has changed permissions and userid.
  * CVE-2026-2291: Rework storage allocation for domain names.
  * Obsoletes dnsmasq-CVE-2026-6507.patch
  * Obsoletes dnsmasq-Fix-FTBFS-nettle-4.0.patch</changelog>
</package>
<package pkgid="4a22d9377aec638df85f0f63c8ef6a1b1621c415b69692f99db560691a1677ddefc7d31ed8f187de24c484fd5dd5a29856265080b70b68ff8bc6588c11a8fa13" name="dnsproxy" arch="x86_64">
  <version epoch="0" ver="0.73.2" rel="bp160.1.12"/>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713528000">- Update to version 0.70.0:
  * SOA and NS requests containing ARPA domains implying private IP
    addresses are now treated as private requests, as was
    previously the case only for PTR requests.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1713700800">- Declare go &gt;= 1.22 in .spec, following upstream go.mod file</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1714132800">- Update to version 0.71.0:
  * The quic-go dependency has been updated due to issues with
    QUIC and HTTP/3 upstreams on older Linux kernel versions.
  * Domain specifications for top-level domains now considered when
    routing the requests for unqualified names.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1714824000">- Update to version 0.71.1:
  * Ignored wildcard specifications for top-level domains</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1717329600">- Update to version 0.71.2:
  * The quic-go dependency has been updated to v0.44.0.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1720353600">- Update to version 0.72.0:
  * Package API changes</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1722427200">- Update to version 0.72.2:
  * General memory performance improvements
- Update to version 0.72.1:
  * Race conditions on message ID in DNS-over-HTTPS and
    DNS-over-QUIC upstream implementations</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1723723200">- Update to version 0.72.3:
  * Updated golibs dependency</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1724760000">- Update to version 0.73.1:
  * Fixed the hosts-file-enabled field of the YAML configuration
    could not be parsed
- Update to version 0.73.0:
  * Added the --hosts-file-enabled and the --hosts-files options,
    which control the preliminary resolving A, AAAA and PTR
    requests from hosts (5) files before using the upstream servers</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1729080000">- Update to version 0.73.2:
  * Get rid of github.com/jessevdk/go-flags dependency</changelog>
</package>
<package pkgid="b2f1a6884e4e9dd11f8d30e76cefb1e5808d0a0bcda1eef878bd8b822bb089f11aa7a7b556f20309c56200f63083bb51c2d3d95c759fe6b3794b4195aba43f73" name="docbook-dsssl-stylesheets" arch="noarch">
  <version epoch="0" ver="1.79" rel="160000.2.2"/>
  <changelog author="aj@suse.de" date="1135166400">- Package symlink.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ke@suse.de" date="1148904000">- Use %postun instead of %preun and check for the update case; reported
  by Marcus Meissner.</changelog>
  <changelog author="coolo@novell.com" date="1251633600">- provide Patch0</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1340625600">- license update: SUSE-XSL-Lint
  Choose a license from http://www.spdx.org/licenses or from the list
  linked at http://license.opensuse.org</changelog>
  <changelog author="mls@suse.de" date="1373976000">- remove two wrong dir modifiers in filelist</changelog>
  <changelog author="dimstar@opensuse.org" date="1510574400">- Rename README.SuSE to README.SUSE, adhering to the correct
  spelling.
- Add fdupes BuildRequires and eliminate duplictae files.</changelog>
  <changelog author="ke@suse.com" date="1548936000">- Do not install in /var/lib; bsc#1093345.</changelog>
  <changelog author="jengelh@inai.de" date="1549368000">- Replace old $RPM_* shell vars.</changelog>
</package>
<package pkgid="5295df472e9f9d20a1dbe2512a33c511f29a326afb4415265f8ad1c30e8c2e3623f42d2a816e1f2f9c2d348eeadfbf59ba0dbb5c0e422bd4929f3ea347451ac3" name="docbook-dsssl-stylesheets" arch="noarch">
  <version epoch="0" ver="1.79" rel="160000.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ke@suse.de" date="1148904000">- Use %postun instead of %preun and check for the update case; reported
  by Marcus Meissner.</changelog>
  <changelog author="coolo@novell.com" date="1251633600">- provide Patch0</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1340625600">- license update: SUSE-XSL-Lint
  Choose a license from http://www.spdx.org/licenses or from the list
  linked at http://license.opensuse.org</changelog>
  <changelog author="mls@suse.de" date="1373976000">- remove two wrong dir modifiers in filelist</changelog>
  <changelog author="dimstar@opensuse.org" date="1510574400">- Rename README.SuSE to README.SUSE, adhering to the correct
  spelling.
- Add fdupes BuildRequires and eliminate duplictae files.</changelog>
  <changelog author="ke@suse.com" date="1548936000">- Do not install in /var/lib; bsc#1093345.</changelog>
  <changelog author="jengelh@inai.de" date="1549368000">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="pgajdos@suse.com" date="1764849600">- package LEGALNOTICE.htm as %license [bsc#1252143]</changelog>
</package>
<package pkgid="92857588cde0d87d1a429f8d4ad51d2ef5be303e71402d9b32af3535ca54c9d6a5941e62d18d13ae669387bde6316f1a46777ca98d4e3d6c6bb2df9aef42c438" name="docbook-toys" arch="noarch">
  <version epoch="0" ver="1.51.0" rel="160000.2.2"/>
  <changelog author="ke@suse.de" date="1074168000">- Use proper output dir for HTML even if -o isn't set (reported by
  Stanislav Visnovsky).</changelog>
  <changelog author="ke@suse.de" date="1082116800">- Require "jadetex" [#38989].</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ke@suse.de" date="1180958400">- Drop obsolete Provide/Obsolete (docbooktls).
- Return 1 if do_pdf fails; reported by Andreas Kleen [#270905].
- Move config files to %{_sysconfdir}.</changelog>
  <changelog author="werner@suse.de" date="1205755200">- Use texlive-jadetex instead of jadetex</changelog>
  <changelog author="aj@suse.de" date="1251633600">- make patch0 usage consistent</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1510228800">- Rename README.SuSE to README.SUSE, adhering to the correct
  spelling.
- Do not package the test directory as documentation.</changelog>
  <changelog author="ke@suse.com" date="1684756800">- Set URL of URL and Source to
  https://users.suse.com/~ke/docbook-toys/.
- Mark COPYING as %license.</changelog>
</package>
<package pkgid="2a6a4c93541e5f0fd27750df13bb0b6042363c7032d1032ac6a145c5369d914c089627e6dd7596c5a0f182a15815b149df95da5c506c58e846166631c256121d" name="docbook-utils" arch="noarch">
  <version epoch="0" ver="0.6.14" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="werner@suse.de" date="1205755200">- Use texlive-jadetex instead of jadetex</changelog>
  <changelog author="jengelh@medozas.de" date="1261483200">- enable parallel build</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1334750400">- split out the backends that do not require tex to work</changelog>
  <changelog author="ledest@gmail.com" date="1413720000">- fix bashisms of jw script
- add patches:
  * docbook-utils-0.6.14-fix-bashisms.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1485000000">- Add support_source_date_epoch.patch to allow for reproducible builds
  of depending packages like freerdp</changelog>
  <changelog author="jsrain@suse.com" date="1701086400">- fix the download URL</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="522d16930d4ce6f342b876e8894f0e6dc3825a8295745d5a2e52cbfb37b289cdf1b199cb7534fc06312fe2a57bae1021be7aeffd2888ffe9cc462b5a58b6dca9" name="docbook-utils-minimal" arch="noarch">
  <version epoch="0" ver="0.6.14" rel="160000.2.2"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="werner@suse.de" date="1205755200">- Use texlive-jadetex instead of jadetex</changelog>
  <changelog author="jengelh@medozas.de" date="1261483200">- enable parallel build</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1334750400">- split out the backends that do not require tex to work</changelog>
  <changelog author="ledest@gmail.com" date="1413720000">- fix bashisms of jw script
- add patches:
  * docbook-utils-0.6.14-fix-bashisms.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1485000000">- Add support_source_date_epoch.patch to allow for reproducible builds
  of depending packages like freerdp</changelog>
  <changelog author="jsrain@suse.com" date="1701086400">- fix the download URL</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="25d95749b0ab4a5e73d0ec4abd508947e5ef87ffb26b7435664dfef23555cf37d83b2a14bf8aaf30ff3a3b213e8930151cbeba4437ca36a19d2cec2a8a1fac2d" name="docbook-xsl-pdf2index" arch="noarch">
  <version epoch="0" ver="1.79.2.2" rel="160000.2.2"/>
  <changelog author="thomas.schraitle@suse.com" date="1503748800">- Add docbook-xsl-stylesheets-non-recursive_string_subst.patch
  Use str:replace from exslt.org to implement string.subst
  string.subst implementation causes recursion issues when building
  systemd documentation. This issue has been reported in
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765567 and
  https://bugs.archlinux.org/task/54694 .
  Taken from https://github.com/fishilico/xslt10-stylesheets/commit/a7df4fbbef3ab0f97d50aa47f2ccfa0630a2686e</changelog>
  <changelog author="aavindraa@gmail.com" date="1506859200">- Update to version 1.79.2
- Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch
- callout-gen is removed</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Restore working patch (bsc#1063066):
  * Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1510660800">- Fix bsc#1063066:
  From 1.79.1 and later, upstream decided to release namespace
  aware stylesheets only. The non-NS stylesheets have to be built
  with the "xslnons-build" script (taken from upstream).
  This is integrated now.
  The switch from NS-aware to non-NS stylesheets help to fix this
  problem.</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511092800">- First attempt to build the two DocBook stylesheet packages
  from a single source:
  - Added xslnons-build script from upstream.
  - Improved dbxslt-install.sh script a lot</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511352000">- Abandom the docbook-xsl-stylesheets-script package.
  The dbtoepub script is available from the rubygem-dbtoepub
  package.
  The script pdf2index is available in docbook-xsl-pdf2index</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1522238400">- Spec file:
  Missing 'g' in sed replacements of @VERSION@ of catalog files.
  This is needed to avoid the string "@VERSION@" in our installed
  catalog files. This leads to catalog resolution errors.
- Applied spec-cleaner</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1681905600">* Raise version to 1.79.2.1
  * Patch assembly/assemble.xsl
  Copy the missing xml:lang attribute to the result file.
  docbook-xsl-1.79.2-assembly-assemble.xsl.patch
  For details, see the docbook mailinglist:
  https://lists.oasis-open.org/archives/docbook/202304/msg00012.html</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1699531200">- Raise version to 1.79.2.2
  Integrate latest changes from assembly/assemble.xsl and
  assembly/effectivity.xsl
- Remove docbook-xsl-1.79.2-assembly-assemble.xsl.patch
  We copy the two files directly.
  These two files contains the following overall changes:
- Fix #254: Pass structure/@xml:lang to result doc
- Support filterin/filterout elements
- Fix problem with resourceref to another structure in assemblies
- fix #28 assemble.xsl: imagedata filerefs in assembled output
  document may be incorrect
- Fix #27 to allow merge from resource of titles not inside info
  because they are equivalent to titles inside info. Also fixe
  a couple of other problems noticed during testing.
  For details, see the upstream Git repo and run:
  $ git diff release/1.79.2..master -- \
    xsl/assembly/assemble.xsl xsl/assembly/effectivity.xsl</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="9e6c67aa0f2a4ae7ad8bde6009962c2e24f170ee067da1b9543062f85347570bae03fbff7437dc98857550371b38c10259400f70822399c6931a0ab5e6e5cf49" name="docbook-xsl-stylesheets" arch="noarch">
  <version epoch="0" ver="1.79.2.2" rel="160000.2.2"/>
  <changelog author="thomas.schraitle@suse.com" date="1503748800">- Add docbook-xsl-stylesheets-non-recursive_string_subst.patch
  Use str:replace from exslt.org to implement string.subst
  string.subst implementation causes recursion issues when building
  systemd documentation. This issue has been reported in
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765567 and
  https://bugs.archlinux.org/task/54694 .
  Taken from https://github.com/fishilico/xslt10-stylesheets/commit/a7df4fbbef3ab0f97d50aa47f2ccfa0630a2686e</changelog>
  <changelog author="aavindraa@gmail.com" date="1506859200">- Update to version 1.79.2
- Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch
- callout-gen is removed</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Restore working patch (bsc#1063066):
  * Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1510660800">- Fix bsc#1063066:
  From 1.79.1 and later, upstream decided to release namespace
  aware stylesheets only. The non-NS stylesheets have to be built
  with the "xslnons-build" script (taken from upstream).
  This is integrated now.
  The switch from NS-aware to non-NS stylesheets help to fix this
  problem.</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511092800">- First attempt to build the two DocBook stylesheet packages
  from a single source:
  - Added xslnons-build script from upstream.
  - Improved dbxslt-install.sh script a lot</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511352000">- Abandom the docbook-xsl-stylesheets-script package.
  The dbtoepub script is available from the rubygem-dbtoepub
  package.
  The script pdf2index is available in docbook-xsl-pdf2index</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1522238400">- Spec file:
  Missing 'g' in sed replacements of @VERSION@ of catalog files.
  This is needed to avoid the string "@VERSION@" in our installed
  catalog files. This leads to catalog resolution errors.
- Applied spec-cleaner</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1681905600">* Raise version to 1.79.2.1
  * Patch assembly/assemble.xsl
  Copy the missing xml:lang attribute to the result file.
  docbook-xsl-1.79.2-assembly-assemble.xsl.patch
  For details, see the docbook mailinglist:
  https://lists.oasis-open.org/archives/docbook/202304/msg00012.html</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1699531200">- Raise version to 1.79.2.2
  Integrate latest changes from assembly/assemble.xsl and
  assembly/effectivity.xsl
- Remove docbook-xsl-1.79.2-assembly-assemble.xsl.patch
  We copy the two files directly.
  These two files contains the following overall changes:
- Fix #254: Pass structure/@xml:lang to result doc
- Support filterin/filterout elements
- Fix problem with resourceref to another structure in assemblies
- fix #28 assemble.xsl: imagedata filerefs in assembled output
  document may be incorrect
- Fix #27 to allow merge from resource of titles not inside info
  because they are equivalent to titles inside info. Also fixe
  a couple of other problems noticed during testing.
  For details, see the upstream Git repo and run:
  $ git diff release/1.79.2..master -- \
    xsl/assembly/assemble.xsl xsl/assembly/effectivity.xsl</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e4efe6f88d8a9710e4b16257bf92ca4d7910142e63f4098d3892ce0a4700946c8b0e37cddebf0f561d83459a2bbc4ac7663afcabb158e038abdaa2e22cf08c06" name="docbook2x" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="160000.2.2"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="stephan.barth@suse.com" date="1376308800">- add BuildRequires for makeinfo (bnc#834457)</changelog>
  <changelog author="coolo@suse.com" date="1423569600">- move install_info from %postun to %preun and don't reference
  the extension twice</changelog>
  <changelog author="dimstar@opensuse.org" date="1510228800">- Rename README.SuSE to README.SUSE, adhering to the correct
  spelling.
- Fix postun scriptlet: the variable %{xml_sysconf_dir} is
  undefined and thus put into the postun scriptlet unexpanded.
- Fix rpmlint warnings about % in comments: macros are still
  expanded in comments. Some macros are multiline, which could
  impact the build directly. Escape the percent sign.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1562241600">- Cleanup spec file:
  * Remove tidy BuildRequires, only used for XSL based HTML generation
    using --with-html-xsl (defaults to off).
  * Reorder tags, Group/Source/Url etc first, BuildRequires/Requires last
  * Remove BuildRoot: tag, use %buildroot
  * Remove %defattr, use %license and %doc macros
  * Remove unused macros, expand trivial single use macros</changelog>
  <changelog author="bwiedemann@suse.com" date="1705752000">- Use %patch0 to fix compilation with rpm-4.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1738756800">- Correct download path</changelog>
  <changelog author="werner@suse.de" date="1738843200">- Correct license as since docbook2X 0.8.4 it is MIT</changelog>
</package>
<package pkgid="e917fa86cca73a62b3861090ebc3aca867f593a9d3d4e6795c486ce2413aabf59b5a78b0d47e92ef07ccd42016bccc2c5412560ffbd4c88e25b84b59673525ad" name="docbook2x-doc" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="160000.2.2"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="stephan.barth@suse.com" date="1376308800">- add BuildRequires for makeinfo (bnc#834457)</changelog>
  <changelog author="coolo@suse.com" date="1423569600">- move install_info from %postun to %preun and don't reference
  the extension twice</changelog>
  <changelog author="dimstar@opensuse.org" date="1510228800">- Rename README.SuSE to README.SUSE, adhering to the correct
  spelling.
- Fix postun scriptlet: the variable %{xml_sysconf_dir} is
  undefined and thus put into the postun scriptlet unexpanded.
- Fix rpmlint warnings about % in comments: macros are still
  expanded in comments. Some macros are multiline, which could
  impact the build directly. Escape the percent sign.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1562241600">- Cleanup spec file:
  * Remove tidy BuildRequires, only used for XSL based HTML generation
    using --with-html-xsl (defaults to off).
  * Reorder tags, Group/Source/Url etc first, BuildRequires/Requires last
  * Remove BuildRoot: tag, use %buildroot
  * Remove %defattr, use %license and %doc macros
  * Remove unused macros, expand trivial single use macros</changelog>
  <changelog author="bwiedemann@suse.com" date="1705752000">- Use %patch0 to fix compilation with rpm-4.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1738756800">- Correct download path</changelog>
  <changelog author="werner@suse.de" date="1738843200">- Correct license as since docbook2X 0.8.4 it is MIT</changelog>
</package>
<package pkgid="06f1cb36af8572fe2fb840c54b73a130f10bc0de8402631a033f75663cc3c5ad25494383cbb136ba6b1cfb9b1a6e10157f4caa190c5970e16c21bd45877736c7" name="docbook5-xsl-stylesheets" arch="noarch">
  <version epoch="0" ver="1.79.2.2" rel="160000.2.2"/>
  <changelog author="thomas.schraitle@suse.com" date="1503748800">- Add docbook-xsl-stylesheets-non-recursive_string_subst.patch
  Use str:replace from exslt.org to implement string.subst
  string.subst implementation causes recursion issues when building
  systemd documentation. This issue has been reported in
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765567 and
  https://bugs.archlinux.org/task/54694 .
  Taken from https://github.com/fishilico/xslt10-stylesheets/commit/a7df4fbbef3ab0f97d50aa47f2ccfa0630a2686e</changelog>
  <changelog author="aavindraa@gmail.com" date="1506859200">- Update to version 1.79.2
- Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch
- callout-gen is removed</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Restore working patch (bsc#1063066):
  * Rebase docbook-xsl-stylesheets-non-recursive_string_subst.patch</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1510660800">- Fix bsc#1063066:
  From 1.79.1 and later, upstream decided to release namespace
  aware stylesheets only. The non-NS stylesheets have to be built
  with the "xslnons-build" script (taken from upstream).
  This is integrated now.
  The switch from NS-aware to non-NS stylesheets help to fix this
  problem.</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511092800">- First attempt to build the two DocBook stylesheet packages
  from a single source:
  - Added xslnons-build script from upstream.
  - Improved dbxslt-install.sh script a lot</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511352000">- Abandom the docbook-xsl-stylesheets-script package.
  The dbtoepub script is available from the rubygem-dbtoepub
  package.
  The script pdf2index is available in docbook-xsl-pdf2index</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1522238400">- Spec file:
  Missing 'g' in sed replacements of @VERSION@ of catalog files.
  This is needed to avoid the string "@VERSION@" in our installed
  catalog files. This leads to catalog resolution errors.
- Applied spec-cleaner</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1681905600">* Raise version to 1.79.2.1
  * Patch assembly/assemble.xsl
  Copy the missing xml:lang attribute to the result file.
  docbook-xsl-1.79.2-assembly-assemble.xsl.patch
  For details, see the docbook mailinglist:
  https://lists.oasis-open.org/archives/docbook/202304/msg00012.html</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1699531200">- Raise version to 1.79.2.2
  Integrate latest changes from assembly/assemble.xsl and
  assembly/effectivity.xsl
- Remove docbook-xsl-1.79.2-assembly-assemble.xsl.patch
  We copy the two files directly.
  These two files contains the following overall changes:
- Fix #254: Pass structure/@xml:lang to result doc
- Support filterin/filterout elements
- Fix problem with resourceref to another structure in assemblies
- fix #28 assemble.xsl: imagedata filerefs in assembled output
  document may be incorrect
- Fix #27 to allow merge from resource of titles not inside info
  because they are equivalent to titles inside info. Also fixe
  a couple of other problems noticed during testing.
  For details, see the upstream Git repo and run:
  $ git diff release/1.79.2..master -- \
    xsl/assembly/assemble.xsl xsl/assembly/effectivity.xsl</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="c53b09622253c890f4075a60074c08f32ac088a53ceb57cf1b69e0f9891e84a9ca8d8bef9f1442dd34dae46304fb447fb32fa3bd77d1a2cc39bc3ca024f4c0d1" name="docbook_3" arch="noarch">
  <version epoch="0" ver="3.1" rel="160000.2.2"/>
  <changelog author="ke@suse.de" date="1338897600">- No longer require iso_ent (now Recommends).</changelog>
  <changelog author="coolo@suse.com" date="1339416000">- iso_ent is required for SGML, so readd it as long as SGML is supported</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="ke@suse.com" date="1548936000">- Do not install in /var/lib; bsc#1093345</changelog>
  <changelog author="jengelh@inai.de" date="1549368000">- Replace old $RPM_* shell vars and "useless use of cat".</changelog>
  <changelog author="dimstar@opensuse.org" date="1550145600">- Fixup installed CATALOG files to follow the move to /usr/share.</changelog>
  <changelog author="jsrain@suse.com" date="1684497600">- fix URL of source archives</changelog>
  <changelog author="ke@suse.com" date="1684756800">- fix URL of dbhset.tar.gz (no longer available at the old HTTP
  address or elsewhere).</changelog>
  <changelog author="jsrain@suse.com" date="1684843200">- remove several other URLs (which are no longer available at
  the old address or elsewhere)</changelog>
  <changelog author="mpluskal@suse.com" date="1684929600">- Modernise spec file a bit
- Rename docbook_3-README.SuSE to docbook_3-README.SUSE</changelog>
</package>
<package pkgid="5fb167a4e20866ff6796366f40b1632aff0a7bba3dd737ac21d599a64d458d2e740c610eed2842b9c3461a8c87e1d02a6af95766a4b4f4907c4eb3e899939d4d" name="docbook_4" arch="noarch">
  <version epoch="0" ver="4.5" rel="160000.2.2"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="ke@suse.de" date="1338897600">- spec: No longer Requires iso_ent (now Recommends) and xmlcharent
  (xml entities are shipped together with the DTD).</changelog>
  <changelog author="coolo@suse.com" date="1339416000">- iso_ent is required for SGML, so readd it as long as it's supported</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="toms@opensuse.org" date="1373889600">- Fixed bnc#828872:
  Missing system identifier http://www.docbook.org/xml/$VER/ added
- Spec file:
  Removed docbook-4-3-cat.diff patch as it is obsolete now
  Removed obsoletes and provides of docbk_4; don't use it anymore!
  Removed libxml2 dependency; this is already covered with xml-catalog</changelog>
  <changelog author="toms@opensuse.org" date="1424347200">- Fixed subtle XML catalog bug (bsc#918565)
- Renamed docbook_4-README.SuSE  -&gt; docbook_4-README.SUSE to
  avoid rpmlint warnings</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1508241600">- Spec file changes:
  * Adapted patches (only directory)
  * Used spec-cleaner
  * Removed obsolete stuff
  * Installed files through Makefile
  * Used/require sgml-skel &gt;= 0.7
  * Used update-xml-catalog</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1510574400">- Fix XML catalog problems (missing or mistyped identifiers)
- Fix version 4.1.2 link in SGML (yes!) directory
- Add missing docbook-xml-4.1.2-catalog.xml
-</changelog>
  <changelog author="ke@suse.de" date="1555329600">- Enable 4.5 SGML and XML DTD for processing with SGML tools;
  bsc#1072957.
- Do not install catalogs in /var/lib/sgml; bsc#1093345.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="9b8d0379f1912327fa19b52992a64cd9ca165f1ed848f97236363b3b712e8cae92148b15daf7c33d1e929bd7061ce48eca934f47299886c65f7e9a8e79b1ff4d" name="docbook_5" arch="noarch">
  <version epoch="0" ver="5.2cr5" rel="160000.2.2"/>
  <changelog author="thomas.schraitle@suse.com" date="1625832000">- Update to version 5.2b10a4:
  - Adding transclusion attributes as common attributes (#187)
  - Implementing legalsection as a class attribute (#186)
  - Add a type attribute to formal and informal objects (#185)
  - Add pubwork/otherpubwork to biblioentry/bibliomixed (#184)
  - Add a DocBook ITS + XInclude schema (#183)
  - Proposed fix for issues related to the new synopsis elements (#173)
  - Convert @name on s:pattern to s:title in ISO Schematron (#2)
- Update to version 5.2b10a3:
  - Add a general meta element (#176)
  - Fix XInclude issues on empty href, fragid (#175)
  - Add Schematron rules for productionset and callout (#174, #151, #162)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1626350400">- Update to version 5.2b10a5:
  - Fixed the bug where db.extension.inlines and db.extension.blocks were
    accidentally omitted from a4.
  - Made the name attribute on meta optional.
  - Fixed duplicate patterns in db.synopsis.blocks.
  - Improved the consistency of synopsisinfo by making it available in
    fieldsynopsis, constructorsynopsis, and destructorsynopsis.
- Spec file
  - Correct XML catalog entry and replaced wrong and old 5.210a2
    version with current version
  - Remove %lastschemaversion variable, consolidate to %version</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1647432000">- Update to version 5.2b12:
  - Fix #223 by refactoring namespacesynopsis as packagesynopis
  - Fix #221 by setting the queryBinding on Schematron schemas to xslt2
- Update to version 5.2b11:
  - Fix #212 Incorrect XML catalog generation for CDN URIs.
  - Fix #216 A bug in the citetitle element; the otherpubwork attribute was missing</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1653912000">- Update to version 5.2CR1
  - #230: Add packageref attribute for all *synopsis elements
  no changes from the 5.2b13 reviewed by the TC</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1670500800">- Update to version 5.2CR3
  - PR #237 Allow namespace qualified attributes in non-DB namespaces
  - Add &lt;modifier&gt; after the main names in many OO classes
  - Some improvements for tests
- Update to version 5.2CR2
  - Added many new elements, for example meta, danger, enumsynopsis
  - Added otherclass attribute to article
  - Added otherclass attribute to section elements to support other values.
  - Added optional type attribute (text) to procedure element.
  - Added a type attribute to table and informaltable elements (CALS and HTML
    table syntax)
  - Added trans:idfixup, trans:suffix, and trans:linkscope to common attributes.
  - Changed abstract content from db.para.blocks+ to db.all.blocks+ to expand
    its content model
  Find the complete list in the release-notes folder
- Package changes
  - Add the release-notes folder in the spec file
  - Add %check section in spec file for a minimal test
  - Correct version information in Makefile to create the correct link
  - Add @VERSION@ placeholder in XML catalog file docbook_5.xml which is
    replaced during build time
  - Add https://cdn.docbook.org/schema/&lt;VERSION&gt; in the XML catalog file
    docbook_5.xml
  - Update docbook_5-README.SUSE</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1675944000">- Update to version 5.2CR4
  - Fix OASIS identifiers in catalog, CR4 (#245)
  - Allow info to be a top-level element in a document (#244)
  - Fix XInclude declarations, inconsistencies (#243)
  - Documentation updates (#242)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1675944001">- Update to version 5.2CR5
  fixes a bug where the cols attribute on entrytbl element was
  incorrectly optional.</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1677844800">Only spec file changes
- Introduce check-catalog.sh script in %check section
  This script tests the docbook_5.xml XML catalog, extracts entries, and checks
  if the file exists.
- Add missing "/" in catalog file "docbook_5.xml"
  In several rewritePrefix attributes the missing "/" leads to invalid local paths.
  For example:
  $ xmlcatalog /etc/xml/catalog https://cdn.docbook.org/schema/5.2/rng/assemblyxi.rnc
  file:///usr/share/xml/docbook/schema/rng/5.2assemblyxi.rnc
  The ".../5.2assemblyxi.rnc" part should be ".../5.2/assemblyxi.rnc".</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1708948801">- Shorten %prep code, utilize everything %setup has to offer.
- Avoid piping to xargs when that is not necessary.</changelog>
</package>
<package pkgid="188c6fa880f9009f321c0d1a319ac4ff0041db14c669fdcec48dd688fa3a0f9f3b805e6937c7876c3ddcf592e5214465af54f6d7306ce7b984c797202c9ef19d" name="docbook_5-doc" arch="noarch">
  <version epoch="0" ver="5.2cr5" rel="160000.2.2"/>
  <changelog author="thomas.schraitle@suse.com" date="1625832000">- Update to version 5.2b10a4:
  - Adding transclusion attributes as common attributes (#187)
  - Implementing legalsection as a class attribute (#186)
  - Add a type attribute to formal and informal objects (#185)
  - Add pubwork/otherpubwork to biblioentry/bibliomixed (#184)
  - Add a DocBook ITS + XInclude schema (#183)
  - Proposed fix for issues related to the new synopsis elements (#173)
  - Convert @name on s:pattern to s:title in ISO Schematron (#2)
- Update to version 5.2b10a3:
  - Add a general meta element (#176)
  - Fix XInclude issues on empty href, fragid (#175)
  - Add Schematron rules for productionset and callout (#174, #151, #162)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1626350400">- Update to version 5.2b10a5:
  - Fixed the bug where db.extension.inlines and db.extension.blocks were
    accidentally omitted from a4.
  - Made the name attribute on meta optional.
  - Fixed duplicate patterns in db.synopsis.blocks.
  - Improved the consistency of synopsisinfo by making it available in
    fieldsynopsis, constructorsynopsis, and destructorsynopsis.
- Spec file
  - Correct XML catalog entry and replaced wrong and old 5.210a2
    version with current version
  - Remove %lastschemaversion variable, consolidate to %version</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1647432000">- Update to version 5.2b12:
  - Fix #223 by refactoring namespacesynopsis as packagesynopis
  - Fix #221 by setting the queryBinding on Schematron schemas to xslt2
- Update to version 5.2b11:
  - Fix #212 Incorrect XML catalog generation for CDN URIs.
  - Fix #216 A bug in the citetitle element; the otherpubwork attribute was missing</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1653912000">- Update to version 5.2CR1
  - #230: Add packageref attribute for all *synopsis elements
  no changes from the 5.2b13 reviewed by the TC</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1670500800">- Update to version 5.2CR3
  - PR #237 Allow namespace qualified attributes in non-DB namespaces
  - Add &lt;modifier&gt; after the main names in many OO classes
  - Some improvements for tests
- Update to version 5.2CR2
  - Added many new elements, for example meta, danger, enumsynopsis
  - Added otherclass attribute to article
  - Added otherclass attribute to section elements to support other values.
  - Added optional type attribute (text) to procedure element.
  - Added a type attribute to table and informaltable elements (CALS and HTML
    table syntax)
  - Added trans:idfixup, trans:suffix, and trans:linkscope to common attributes.
  - Changed abstract content from db.para.blocks+ to db.all.blocks+ to expand
    its content model
  Find the complete list in the release-notes folder
- Package changes
  - Add the release-notes folder in the spec file
  - Add %check section in spec file for a minimal test
  - Correct version information in Makefile to create the correct link
  - Add @VERSION@ placeholder in XML catalog file docbook_5.xml which is
    replaced during build time
  - Add https://cdn.docbook.org/schema/&lt;VERSION&gt; in the XML catalog file
    docbook_5.xml
  - Update docbook_5-README.SUSE</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1675944000">- Update to version 5.2CR4
  - Fix OASIS identifiers in catalog, CR4 (#245)
  - Allow info to be a top-level element in a document (#244)
  - Fix XInclude declarations, inconsistencies (#243)
  - Documentation updates (#242)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1675944001">- Update to version 5.2CR5
  fixes a bug where the cols attribute on entrytbl element was
  incorrectly optional.</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1677844800">Only spec file changes
- Introduce check-catalog.sh script in %check section
  This script tests the docbook_5.xml XML catalog, extracts entries, and checks
  if the file exists.
- Add missing "/" in catalog file "docbook_5.xml"
  In several rewritePrefix attributes the missing "/" leads to invalid local paths.
  For example:
  $ xmlcatalog /etc/xml/catalog https://cdn.docbook.org/schema/5.2/rng/assemblyxi.rnc
  file:///usr/share/xml/docbook/schema/rng/5.2assemblyxi.rnc
  The ".../5.2assemblyxi.rnc" part should be ".../5.2/assemblyxi.rnc".</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1708948801">- Shorten %prep code, utilize everything %setup has to offer.
- Avoid piping to xargs when that is not necessary.</changelog>
</package>
<package pkgid="e84e9e6f345271871ffb7c4f90235cb0a20786d00c58b78e07da4967eac9947fdc9a9384b2101b2530fd2427437552f2d1b63584bd9ca00edb1f331db4843069" name="docker" arch="x86_64">
  <version epoch="0" ver="28.3.2_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
</package>
<package pkgid="b8d08ded64cb5b5338d5bd0b114c74209e773969242879b87ea82e487d296c71078a3d3cd3aa230af761a443683eeecd651a93f7c125233bbe0b382b13cbdd6b" name="docker" arch="x86_64">
  <version epoch="0" ver="28.3.2_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="7a5f0503fbf200fc6710ec8d32da244ad5cb6620a248a30ff7917af8867d033e2571aa8227ce00ec95e3c54487775dc9bc3c6239a6e45ee28d36a397fba170ac" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="49d5f996d07e09be56792752bacf397e7434b9e76c60b47b2c5b04b059604956726cd23fb19e41d4c032c42482939a7a628443dfbaa2e1f532bd1b57bd605b8b" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="cf65556f19446045f7aa5642d8c7c699c0ac105d94dfd791b54411bd1303687832ba70095e26f174bddbe232ae7ae19c46bbe3cf7ee496d5f498122a6b002097" name="docker" arch="x86_64">
  <version epoch="0" ver="29.4.0_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
</package>
<package pkgid="677522a574f967fa710c4f4781a618ace3c12bd0baadb8f664343f2e7c213cb9141e40fe2be64ad75ed18733777552b28508d5719cc1952c020b659c2cbd7718" name="docker" arch="x86_64">
  <version epoch="0" ver="29.4.0_ce" rel="160000.7.1"/>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782302400">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="90eadd2c058a7e789f624b947e9045f35df2b8dfb9b38cc59456888737265a9d81695da479b30414bf186366056de76119a595e4fd50ef70748bae7729340774" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
</package>
<package pkgid="b919493e2239285a4c4d245ca0dadd882f6fd0c48ab2c16c7354f422135d176e6b5a881301b3c93ab65f75a4f1dffbab29e70752c7bb86ef690f21bb70b7fbc8" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="a3696bfa6429386fdbc3d4b79b9c1a89c4929e9bf120e5a79f2db0ee64cac52940e65acb2edffaff9fa5951432df451efdba70bbe0f5a4339e2d8242345afd3b" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="91758619ac81eb83b0ae3d6bbe8243cd85a962e4aa6c0080fb0a8538e7110c56c19a6aa2544b74c459b78726d5d5f9bde3e1c810c982eefb71304be72faebc37" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="0de3f46a6a198975402fe3b8f1fc4371bdb6ce11377c60ab7379a1ef285224817283c0b8c7a3b4b4db0d22f22170eb9c1125de0cb2a2d011961dad03c45052d1" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
</package>
<package pkgid="5d4a05d4b0a7d969697dee9a78294493badb007409f4014adcb27fab984ca40f286809c564bf4e1119384bab12bf3552143520a40c97780118307e8833f5bf88" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.7.1"/>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782302400">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="cbf2f33284c48dfada8b3bf96be3eee6d5cf514c134056820c5b51da1872dba326ad0206845af442c1e2c344338f248f45655af4a3e67ad4cb55b3d5440fca0b" name="docker-bench-security" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="bp160.1.9"/>
  <changelog author="astieger@suse.com" date="1460980800">- checks implementing CIS Docker 1.11.0 Benchmark
  https://benchmarks.cisecurity.org/downloads/show-single/index.cfm?file=docker16.110
- checks for docker 1.11.0
- use stat to verify permissions
- fixes for process detection</changelog>
  <changelog author="astieger@suse.com" date="1462968000">- checks for docker 1.11.1</changelog>
  <changelog author="astieger@suse.com" date="1465300800">- checks for docker 1.11.2, no benchmark changes
- requires docker &gt;= 1.10.0</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- Docker Bench for Security v1.1.0:
  * check for docker 1.12.0
  * fix early-docker use
  * mention adjusting volumes</changelog>
  <changelog author="astieger@suse.com" date="1487937600">- update to 1.3.0:
  * Inspired by the CIS Docker 1.13 Benchmark
  * adjust run-time package requirements</changelog>
  <changelog author="astieger@suse.com" date="1493985600">- update to 1.3.2:
  * improve get_docker_configuration_file_args()
  * add [NOTE] for informational checks with no actual tests
  * fix various tests when using daemon.json
  * use stat instead of ls -ld output
- includes changes from 1.3.1:
  * Add daemon.json support
  * Correct multiple tests
  * Update default alpine Dockerfile
  * Use grep if auditctl isn't present</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- update to 1.3.3:
  * Adapt to CIS Docker Community Edition Benchmark v1.1.0
  * Correct check names
  * Require Docker version 1.13.0 or later
  * Handle busybox date conversion
  * Add Docker Swarm configuration checks</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1574078400">- update to 1.3.5:
  * Align with CIS Docker Benchmark v1.2.0
  * Add some command line options to support specific use cases</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- fix include patch of functions_lib.sh (boo#1164631)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1729252800">- Update to docker-bench-security v1.6.1. See upstream changelog online at
  &lt;https://github.com/docker/docker-bench-security/releases/tag/v1.6.1&gt;.
  * Align with CIS Docker Benchmark v1.6.0.
  v1.6.0 &lt;https://github.com/docker/docker-bench-security/releases/tag/v1.6.0&gt;
  * Fix image sprawl miscalculation.
  * Add an option to filter out labels to exclude from checks.
  v1.5.0 &lt;https://github.com/docker/docker-bench-security/releases/tag/v1.5.0&gt;
  * Align with CIS Docker Benchmark v1.5.0.
  * Add support for .NanoCpus.
  v1.3.6 &lt;https://github.com/docker/docker-bench-security/releases/tag/v1.3.6&gt;
  * Add CIS Level 1 only functions.
  * Support user namespaces in partition check.
  * Deprecate rule 2.16 for Docker &gt; 19.03.
  * Add checks for capabilities that allows container escape.
  * Implement listing of open ports.
  * Add 4.12 check.
- Rather than patching the script entirely using sed (which can make updates
  error-prone), apply an actual patch to switch to using a LIBEXEC variable we
  can replace during packaging. Backport of
  &lt;https://github.com/docker/docker-bench-security/pull/559&gt;.
  + 0001-dist-adjust-script-imports-to-be-able-to-use-usr-lib.patch</changelog>
</package>
<package pkgid="1c25694544994891947d9e1af2f533e0431e5859f9cda5bcd3b0c83148fdb294fd9046b9f39a01d22027642060832e6b38f2949b0ec09f4cc1f8add582fb452d" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
</package>
<package pkgid="08e2dfd8877b6ac33bfa21ce4f1309d1f2eae12529c6a46a9f7ee5548bb17a8ce450fac3fcb98d7f670d49398a41a517490250e433d969f5e5760e4181a142dd" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="b053e5c449bfa26f7cb7804f48fc7a764a99dcfbda93cf53d52ed9e880f41302ba79118cb68e29219831be1a1cefad9cf90d8d3ef507393bf1bf27ea28066ff3" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="ad1c6ccd419a0f8bc483e7a8a3598f43709bf93e2bc128a70ae47fb244f5513cac6bb9f72d493f3a570146de8d0f958358c5a3998b955f51a8fcfe7d7b09d314" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="8aa39117a8c51951ef70ca61cbdb9f7af56b7c6c9ee7e93578fecf2c48e7e7f0dcb3077806a5314520eb62fdaaa6396bf59851ed7f161c6e700f6bcad4d4ce23" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.33.0" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
</package>
<package pkgid="6760b26121241409fae1a669c1877f57a2df9d211482102621c41dd687f6e82062507986e58add105334051f7ae7a445bfdbdcfeaccfa3fc1cc35ab674ecfac7" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.33.0" rel="160000.7.1"/>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782302400">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="236513e60b0eedb17b02a2e9a3676057e60c224827fdd119ea30e40dab4a15dc548a8894139cc26bfa68148261e332919fcdde2609cb4a55c20ed1235f6de3a2" name="docker-compose" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="160000.3.2"/>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1731412800">- Update to version 2.30.3:
  * bump compose-go v2.4.4
  * Avoid starting all services on rebuild</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732881600">- Update to version 2.31.0:
  * bump containerd to v1.7,24
  * bump google.golang.org/grpc to v1.68.0
  * build(deps): bump github.com/moby/buildkit from 0.17.1 to
    0.17.2
  * build(deps): bump github.com/compose-spec/compose-go/v2
  * only stop dependent containers ... if there's some
  * disable TestNetworkConfigChanged which is unstable on CI
  * only check attached networks on running containers
  * fix: commit tests
  * feat: add commit command
  * run build tests against bake
  * delegate build to buildx bake
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
    1.10.0
  * use service.stop to stop dependent containers
  * Update wait-timeout flag usage to include the unit
  * go.mod: github.com/docker/cli v27.4.0-rc.2
  * go.mod: github.com/docker/docker v27.4.0-rc.2
  * go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
  * go.mod: github.com/docker/cli v27.4.0-rc.1
  * go.mod: github.com/docker/docker v27.4.0-rc.1
  * Update pkg/compose/convergence.go
  * detect network config changes and recreate if needed
  * go.mod: github.com/docker/buildx v0.18.0
  * go.mod: github.com/moby/buildkit v0.17.1
  * gha: test against docker engine v27.4.0
  * push empty descriptor layer when using OCI version 1.1 for
    Compose artifact it fixes a repository creation issue when
    pushing the 1st time a Compose OCI artifact on the Hub
  * remove ddev e2e tests
  * implement remove-orphans on run
  * ci: enable testifylint linter
  * Emit events for building images
  * Fix compose images that reutn a different image with the same
    ID
  * remove obsolete containers first on scale down
  * pass stal bot inactivity limit from 6 to 3 months
  * fix(config): Print service names with --no-interpolate
  * build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734091200">- Update to version 2.32.0:
  * e2e test for recreate volume
  * build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
  * build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
  * prompt user to confirm volume recreation
  * Recreate container on volume configuration change
  * introduce watch restart action
  * bump otel dependencies to v1.28.0 and v0.53.0 to align with
    buildx, buildkit and engine versions
  * bump docker/buildx to latest release
  * fix support for service.mac_address
  * update xx to v1.6.1 for compatibility with alpine 3.21 and file
    5.46+
  * build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
  * Update pkg/e2e/watch_test.go
  * first watch action for a file event wins
  * fix
  * revisit TestDebounceBatching
  * introduce sync+exec watch action
  * log configuration error as a watch log event
  * do not require a build section but for `rebuild` action
  * pull --quiet should not drop status message, only progress
  * use latest engine tags
  * Bump buildx to 0.19.1
  * be sure everything has been cleanup at the end of each tests
  * add local config.json to test configuration dir if exists
  * disable failing TestBuildSSH test
  * fix build with bake</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734436800">- Update to version 2.32.1:
  * e2e test to prevent future regression
  * only check volume mounts for updated config</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736337600">- Update to version 2.32.2:
  * remove engine v25 from e2e test matrix The 1st version
    available for Ubuntu 24.x is Docker Engine v26
  * fix relative path in compose file
  * bump compose-go to v2.4.7
  * replace tibdex/github-app-token by official GitHub
    create-github-app-token
  * bump golang.org/x/net to v0.33.0 to fix potential security
    issue https://github.com/golang/go/issues/70906
  * checkExpectedVolumes must ignore anonymous volumes
  * When retrying to resolveOrCreateNetwork, retry with a valid
    network name
  * only check bind mount conflict if sync action is involved
  * use the 3 latest major versions of the engine to run e2e step
  * bump Golang version to v1.22.10 and update CI actions
  * add --pull to run command
  * CI to validate fmt
  * `make fmt` so any contributor can enforce formatting
  * format code with gofumpt</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736769600">- Update to version 2.32.3:
  * ci: update bake-action to v6
  * simplification
  * image can be set to a local ID, that isn't a valid docker ref
  * can't render progress concurrently with buildkit
  * exclude one-off container running convergence
  * Only override service mac if set on the main network.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737028800">- Update to version 2.32.4:
  * add missing tag for build during merge workflow
  * ci: re-use local source to build binary images
  * ci: use local source for binary builds</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361600">- Update to version 2.33.0:
  * Important
  - This release introduce support for Bake to manage builds as
    an alternative to the internal buildkit client. This new
    feature can be enabled by setting COMPOSE_BAKE=1 variable.
    Bake will become the default builder in a future release.
  * Improvements
  - let user know bake is now supported by @ndeloof in #12524
  - support additional_context reference to another service by
    @ndeloof in #12485
  - add support for BUILDKIT_PROGRESS by @ndeloof in #12458
  - add --with-env flag to publish command by @glours in #12482
  - Update ls --quiet help description by @maxproske in #12541
  - Publish warn display env vars by @glours in #12486
  * Fixes
  - Fix bake support by @ndeloof in #12507
  - Update link in stats --help output by @maxproske in #12523
  - Properly handle "builtin" seccomp profile by @r-bk in #12478
  - manage watch applied to mulitple services by @ndeloof in
    [#12469]
  * Internal
  - use main branch for docs upstream validation workflow by
    @crazy-max in #12487
  - fix provenance for binaries and generate sbom by @crazy-max
    in #12479
  - add codeowners file by @glours in #12480
  - remove exit code per error type used by legacy metrics system
    by @ndeloof in #12502
  - Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in
    [#12546]
  - Full test coverage for compatibility cmd by @maxproske in
    [#12528]
  - don't send raw os.Args to opentelemetry but a pseudo command
    line by @ndeloof in #12530
  - add docker engine v28.x to the test-matrix by @thaJeztah in
    [#12539]
  - enable copyloopvar linter by @thaJeztah in #12542
  - go.mod: remove toolchain directive by @thaJeztah in #12551
  * Dependencies
  - bump buildx v0.20.1 by @ndeloof in #12488
  - bump docker to v27.5.1 by @ndeloof in #12491
  - bump compose-go v2.4.8 by @ndeloof in #12543
  - bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in
    [#12529]
  - bump github.com/moby/term v0.5.2 by @thaJeztah in #12540
  - bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by
    @dependabot in #12493
  - bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by
    @dependabot in #12430
  - bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by
    @dependabot in #12548
  - bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot
    in #12547
  - bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in
    [#12549]</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361601">- remove docker-compose-switch dependency</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740139200">- Update to version 2.33.1:
  * Improvements
  - Add support for gw_priority, enable_ipv4 (requires docker
    v28.0) by @thaJeztah in #12570
  * Fixes
  - Run watch standalone if menu fails to start by @ndeloof in
    [#12536]
  - Report error using non-file secret|config with read-only
    service by @ndeloof in #12531
  - Don't display bake suggestion when using --progress with
    quiet or json option by @glours in #12561
  - Fix pull --parallel and --no-parallel deprecation warnings
    missing by @maxproske in #12555
  - Fix error message when detach is implied by wait by @ndeloof
    in #12566
  * Dependencies
  - build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
    by @dependabot in #12556
  - build(deps): bump google.golang.org/grpc from 1.68.1 to
    1.70.0 by @dependabot in #12494
  - go.mod: update to docker v28.0.0 by @thaJeztah in #12545</changelog>
</package>
<package pkgid="4fbc1564e0acd41527849d12cc4004d5e28c3675ca553ea8437eab580aa0e483196dbea5b67ebb8ff5c04041cc698b6e8c275de649e83009032dd72c643d9328" name="docker-compose" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="160000.4.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732881600">- Update to version 2.31.0:
  * bump containerd to v1.7,24
  * bump google.golang.org/grpc to v1.68.0
  * build(deps): bump github.com/moby/buildkit from 0.17.1 to
    0.17.2
  * build(deps): bump github.com/compose-spec/compose-go/v2
  * only stop dependent containers ... if there's some
  * disable TestNetworkConfigChanged which is unstable on CI
  * only check attached networks on running containers
  * fix: commit tests
  * feat: add commit command
  * run build tests against bake
  * delegate build to buildx bake
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
    1.10.0
  * use service.stop to stop dependent containers
  * Update wait-timeout flag usage to include the unit
  * go.mod: github.com/docker/cli v27.4.0-rc.2
  * go.mod: github.com/docker/docker v27.4.0-rc.2
  * go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
  * go.mod: github.com/docker/cli v27.4.0-rc.1
  * go.mod: github.com/docker/docker v27.4.0-rc.1
  * Update pkg/compose/convergence.go
  * detect network config changes and recreate if needed
  * go.mod: github.com/docker/buildx v0.18.0
  * go.mod: github.com/moby/buildkit v0.17.1
  * gha: test against docker engine v27.4.0
  * push empty descriptor layer when using OCI version 1.1 for
    Compose artifact it fixes a repository creation issue when
    pushing the 1st time a Compose OCI artifact on the Hub
  * remove ddev e2e tests
  * implement remove-orphans on run
  * ci: enable testifylint linter
  * Emit events for building images
  * Fix compose images that reutn a different image with the same
    ID
  * remove obsolete containers first on scale down
  * pass stal bot inactivity limit from 6 to 3 months
  * fix(config): Print service names with --no-interpolate
  * build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734091200">- Update to version 2.32.0:
  * e2e test for recreate volume
  * build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
  * build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
  * prompt user to confirm volume recreation
  * Recreate container on volume configuration change
  * introduce watch restart action
  * bump otel dependencies to v1.28.0 and v0.53.0 to align with
    buildx, buildkit and engine versions
  * bump docker/buildx to latest release
  * fix support for service.mac_address
  * update xx to v1.6.1 for compatibility with alpine 3.21 and file
    5.46+
  * build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
  * Update pkg/e2e/watch_test.go
  * first watch action for a file event wins
  * fix
  * revisit TestDebounceBatching
  * introduce sync+exec watch action
  * log configuration error as a watch log event
  * do not require a build section but for `rebuild` action
  * pull --quiet should not drop status message, only progress
  * use latest engine tags
  * Bump buildx to 0.19.1
  * be sure everything has been cleanup at the end of each tests
  * add local config.json to test configuration dir if exists
  * disable failing TestBuildSSH test
  * fix build with bake</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734436800">- Update to version 2.32.1:
  * e2e test to prevent future regression
  * only check volume mounts for updated config</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736337600">- Update to version 2.32.2:
  * remove engine v25 from e2e test matrix The 1st version
    available for Ubuntu 24.x is Docker Engine v26
  * fix relative path in compose file
  * bump compose-go to v2.4.7
  * replace tibdex/github-app-token by official GitHub
    create-github-app-token
  * bump golang.org/x/net to v0.33.0 to fix potential security
    issue https://github.com/golang/go/issues/70906
  * checkExpectedVolumes must ignore anonymous volumes
  * When retrying to resolveOrCreateNetwork, retry with a valid
    network name
  * only check bind mount conflict if sync action is involved
  * use the 3 latest major versions of the engine to run e2e step
  * bump Golang version to v1.22.10 and update CI actions
  * add --pull to run command
  * CI to validate fmt
  * `make fmt` so any contributor can enforce formatting
  * format code with gofumpt</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736769600">- Update to version 2.32.3:
  * ci: update bake-action to v6
  * simplification
  * image can be set to a local ID, that isn't a valid docker ref
  * can't render progress concurrently with buildkit
  * exclude one-off container running convergence
  * Only override service mac if set on the main network.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737028800">- Update to version 2.32.4:
  * add missing tag for build during merge workflow
  * ci: re-use local source to build binary images
  * ci: use local source for binary builds</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361600">- Update to version 2.33.0:
  * Important
  - This release introduce support for Bake to manage builds as
    an alternative to the internal buildkit client. This new
    feature can be enabled by setting COMPOSE_BAKE=1 variable.
    Bake will become the default builder in a future release.
  * Improvements
  - let user know bake is now supported by @ndeloof in #12524
  - support additional_context reference to another service by
    @ndeloof in #12485
  - add support for BUILDKIT_PROGRESS by @ndeloof in #12458
  - add --with-env flag to publish command by @glours in #12482
  - Update ls --quiet help description by @maxproske in #12541
  - Publish warn display env vars by @glours in #12486
  * Fixes
  - Fix bake support by @ndeloof in #12507
  - Update link in stats --help output by @maxproske in #12523
  - Properly handle "builtin" seccomp profile by @r-bk in #12478
  - manage watch applied to mulitple services by @ndeloof in
    [#12469]
  * Internal
  - use main branch for docs upstream validation workflow by
    @crazy-max in #12487
  - fix provenance for binaries and generate sbom by @crazy-max
    in #12479
  - add codeowners file by @glours in #12480
  - remove exit code per error type used by legacy metrics system
    by @ndeloof in #12502
  - Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in
    [#12546]
  - Full test coverage for compatibility cmd by @maxproske in
    [#12528]
  - don't send raw os.Args to opentelemetry but a pseudo command
    line by @ndeloof in #12530
  - add docker engine v28.x to the test-matrix by @thaJeztah in
    [#12539]
  - enable copyloopvar linter by @thaJeztah in #12542
  - go.mod: remove toolchain directive by @thaJeztah in #12551
  * Dependencies
  - bump buildx v0.20.1 by @ndeloof in #12488
  - bump docker to v27.5.1 by @ndeloof in #12491
  - bump compose-go v2.4.8 by @ndeloof in #12543
  - bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in
    [#12529]
  - bump github.com/moby/term v0.5.2 by @thaJeztah in #12540
  - bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by
    @dependabot in #12493
  - bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by
    @dependabot in #12430
  - bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by
    @dependabot in #12548
  - bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot
    in #12547
  - bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in
    [#12549]</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361601">- remove docker-compose-switch dependency</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740139200">- Update to version 2.33.1:
  * Improvements
  - Add support for gw_priority, enable_ipv4 (requires docker
    v28.0) by @thaJeztah in #12570
  * Fixes
  - Run watch standalone if menu fails to start by @ndeloof in
    [#12536]
  - Report error using non-file secret|config with read-only
    service by @ndeloof in #12531
  - Don't display bake suggestion when using --progress with
    quiet or json option by @glours in #12561
  - Fix pull --parallel and --no-parallel deprecation warnings
    missing by @maxproske in #12555
  - Fix error message when detach is implied by wait by @ndeloof
    in #12566
  * Dependencies
  - build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
    by @dependabot in #12556
  - build(deps): bump google.golang.org/grpc from 1.68.1 to
    1.70.0 by @dependabot in #12494
  - go.mod: update to docker v28.0.0 by @thaJeztah in #12545</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1771848000">- Add patch for CVE-2025-47914 (bsc#1254041), CVE-2025-47913 (bsc#1253584):
  * 0001-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Add patch for CVE-2025-62725 (bsc#1252752)
  * 0002-CVE-2025-62725-fix-Enforce-compose-files-from-OCI-ar.patch</changelog>
</package>
<package pkgid="60ca0afe53800188540dd57338fa7a063d48481979eee8a09d934c862858de10ef7056c328969d99dc31115a603dbe680a363d2d2f7abfaa92e1ff1722596b91" name="docker-compose" arch="x86_64">
  <version epoch="0" ver="2.33.1" rel="160000.5.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734091200">- Update to version 2.32.0:
  * e2e test for recreate volume
  * build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
  * build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
  * prompt user to confirm volume recreation
  * Recreate container on volume configuration change
  * introduce watch restart action
  * bump otel dependencies to v1.28.0 and v0.53.0 to align with
    buildx, buildkit and engine versions
  * bump docker/buildx to latest release
  * fix support for service.mac_address
  * update xx to v1.6.1 for compatibility with alpine 3.21 and file
    5.46+
  * build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
  * Update pkg/e2e/watch_test.go
  * first watch action for a file event wins
  * fix
  * revisit TestDebounceBatching
  * introduce sync+exec watch action
  * log configuration error as a watch log event
  * do not require a build section but for `rebuild` action
  * pull --quiet should not drop status message, only progress
  * use latest engine tags
  * Bump buildx to 0.19.1
  * be sure everything has been cleanup at the end of each tests
  * add local config.json to test configuration dir if exists
  * disable failing TestBuildSSH test
  * fix build with bake</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1734436800">- Update to version 2.32.1:
  * e2e test to prevent future regression
  * only check volume mounts for updated config</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736337600">- Update to version 2.32.2:
  * remove engine v25 from e2e test matrix The 1st version
    available for Ubuntu 24.x is Docker Engine v26
  * fix relative path in compose file
  * bump compose-go to v2.4.7
  * replace tibdex/github-app-token by official GitHub
    create-github-app-token
  * bump golang.org/x/net to v0.33.0 to fix potential security
    issue https://github.com/golang/go/issues/70906
  * checkExpectedVolumes must ignore anonymous volumes
  * When retrying to resolveOrCreateNetwork, retry with a valid
    network name
  * only check bind mount conflict if sync action is involved
  * use the 3 latest major versions of the engine to run e2e step
  * bump Golang version to v1.22.10 and update CI actions
  * add --pull to run command
  * CI to validate fmt
  * `make fmt` so any contributor can enforce formatting
  * format code with gofumpt</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736769600">- Update to version 2.32.3:
  * ci: update bake-action to v6
  * simplification
  * image can be set to a local ID, that isn't a valid docker ref
  * can't render progress concurrently with buildkit
  * exclude one-off container running convergence
  * Only override service mac if set on the main network.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737028800">- Update to version 2.32.4:
  * add missing tag for build during merge workflow
  * ci: re-use local source to build binary images
  * ci: use local source for binary builds</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361600">- Update to version 2.33.0:
  * Important
  - This release introduce support for Bake to manage builds as
    an alternative to the internal buildkit client. This new
    feature can be enabled by setting COMPOSE_BAKE=1 variable.
    Bake will become the default builder in a future release.
  * Improvements
  - let user know bake is now supported by @ndeloof in #12524
  - support additional_context reference to another service by
    @ndeloof in #12485
  - add support for BUILDKIT_PROGRESS by @ndeloof in #12458
  - add --with-env flag to publish command by @glours in #12482
  - Update ls --quiet help description by @maxproske in #12541
  - Publish warn display env vars by @glours in #12486
  * Fixes
  - Fix bake support by @ndeloof in #12507
  - Update link in stats --help output by @maxproske in #12523
  - Properly handle "builtin" seccomp profile by @r-bk in #12478
  - manage watch applied to mulitple services by @ndeloof in
    [#12469]
  * Internal
  - use main branch for docs upstream validation workflow by
    @crazy-max in #12487
  - fix provenance for binaries and generate sbom by @crazy-max
    in #12479
  - add codeowners file by @glours in #12480
  - remove exit code per error type used by legacy metrics system
    by @ndeloof in #12502
  - Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in
    [#12546]
  - Full test coverage for compatibility cmd by @maxproske in
    [#12528]
  - don't send raw os.Args to opentelemetry but a pseudo command
    line by @ndeloof in #12530
  - add docker engine v28.x to the test-matrix by @thaJeztah in
    [#12539]
  - enable copyloopvar linter by @thaJeztah in #12542
  - go.mod: remove toolchain directive by @thaJeztah in #12551
  * Dependencies
  - bump buildx v0.20.1 by @ndeloof in #12488
  - bump docker to v27.5.1 by @ndeloof in #12491
  - bump compose-go v2.4.8 by @ndeloof in #12543
  - bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in
    [#12529]
  - bump github.com/moby/term v0.5.2 by @thaJeztah in #12540
  - bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by
    @dependabot in #12493
  - bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by
    @dependabot in #12430
  - bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by
    @dependabot in #12548
  - bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot
    in #12547
  - bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in
    [#12549]</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739361601">- remove docker-compose-switch dependency</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740139200">- Update to version 2.33.1:
  * Improvements
  - Add support for gw_priority, enable_ipv4 (requires docker
    v28.0) by @thaJeztah in #12570
  * Fixes
  - Run watch standalone if menu fails to start by @ndeloof in
    [#12536]
  - Report error using non-file secret|config with read-only
    service by @ndeloof in #12531
  - Don't display bake suggestion when using --progress with
    quiet or json option by @glours in #12561
  - Fix pull --parallel and --no-parallel deprecation warnings
    missing by @maxproske in #12555
  - Fix error message when detach is implied by wait by @ndeloof
    in #12566
  * Dependencies
  - build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
    by @dependabot in #12556
  - build(deps): bump google.golang.org/grpc from 1.68.1 to
    1.70.0 by @dependabot in #12494
  - go.mod: update to docker v28.0.0 by @thaJeztah in #12545</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1771848000">- Add patch for CVE-2025-47914 (bsc#1254041), CVE-2025-47913 (bsc#1253584):
  * 0001-CVE-2025-47913-CVE-2025-47914-ssh-agent-fixes.patch
- Add patch for CVE-2025-62725 (bsc#1252752)
  * 0002-CVE-2025-62725-fix-Enforce-compose-files-from-OCI-ar.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782907200">- Add patch for CVE-2026-33814 (bsc#1265782)
  * 0003-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- Add patch for CVE-2026-39821 (bsc#1266625)
  * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- Add patch for CVE-2025-22869 (bsc#1239340)
  * 0005-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch
- Add patch for CVE-2025-0495 (bsc#1239766)
  * 0006-CVE-2025-0495-fix-localstate-remove-definition-and-i.patch</changelog>
</package>
<package pkgid="4f9774a8ac3ad846656774b8892ddf76573634bd9c48e042ad66e2cb0719e0141711f17bc373e04ffcea23446f6d402d1f723efcb2e9262a9db760a68dd08efd" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
</package>
<package pkgid="c24b9c0c706c04108dafd3464d053fa7dabee3db275124635e67d0101a74ca9a06bf465378512f5140778f676cd1168dbdff70ebd509de0fdf2af0965499f72f" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="d751b6e9f5a1bc90d419397bcd07db62c49a5b616126e880289b1b6120336295865019d28dc13cb5bb9cc1817d4c1b5c8380eb1d856a3ec7b15413cf7df1d3fd" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="fe65273063926c123a646f953d5f4143ac77c39209d350a988047358cc2112abf26d09f30717da9ca63e10ca5259979a9f49b97d5cb3a91d576fa6222644d75a" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="f7ab3eb3cb3966f3c65e57a48a79b541cd09547c2c15067e5e49b7705801d1ce0975cc63fe37ca2a8fbf5edf4ea768eea17437e1d281998eec6ecc754907dbd8" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
</package>
<package pkgid="0f1848e2caac80607f5a3ed13a916b08668fa4abbed338daa7b03f2207b79e5deb73e3d1899e44455d56f4775606575f2ca7a95d6af5eed5597bffdf0c47a81b" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.7.1"/>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782302400">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="646edc5941b313890049aea68eeac68a24c446a827616d49258a244d84e7dd879a5e09517d18308531e6ea6e31b0b1985842bead3d33afd37c8d5cd3c8c38997" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
</package>
<package pkgid="d11704c75a63084da870eb1d43ce3c3ea7c71bd50386ee6ad06e521915f7a3f35af11366a3f27e9ae5e97b84ca191d4d1945c52b19f816064928369db4b5cd7b" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="9a82023f81c0c077c7ca3f46dacfddde96364792173fd3a3fe212d9586f81f19d5f41ec9c96c100ef3d2b99f53ca63d535c53bb6524627fb64627ed2d57e0a5b" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="749e1b27e358d6154bbbd993ab4b50518c0b145f361e0af4e68e174853c58fb8bdae063f01f9d6d0891bf5975cdac8008faa9e767e21553559c123245619d903" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="aaedc2ad2f34aa9fa52d2f4a5318e8849ab2930a8b541795f31437c2aa577e240a3fa07c8e15abbdc2cc33706dbb4d1931eebcdd1174a0a0d8bb240d35cee7f9" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
</package>
<package pkgid="605e7d67ad77ceb16d382149436ad05795cc50a81ae287b58a21efbb0ee05af2738ea532e520b4a60eb98e5888021b14bc5cfe7fc71613f3afe731368ca103a3" name="docker-rootless-extras" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.7.1"/>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782302400">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="6392603364d6c6e06871291247136c01c13d489156ff3d6aafc90e93b9c793745a7110627aabfce9946f6cc72d48febf1170db643019ce99ed1db4837df1875e" name="docker-stable" arch="x86_64">
  <version epoch="0" ver="24.0.9_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1733918400">- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1733918401">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Add backport for CVE-2024-29018 fix. bsc#1234089
  + 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Add backport for CVE-2024-23650 fix and rename patch filename. bsc#1219437
  - 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
- Reorder and rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-TESTS-backport-fixes-for-integration-tests.patch
  + 0011-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
</package>
<package pkgid="7f1ca6b5626827b54f67e5d16e875a564dad7a70b27bbb5f7952f1e3bc414d6d3b513ca29bddc91a606b4c01129e5aace231b5367daa2b78fb95159d26e5dd2a" name="docker-stable" arch="x86_64">
  <version epoch="0" ver="24.0.9_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="484fcfb64b3403363133b6e678b738c3e3b39dfcecdd218a7aa107b225ddb018e5f3c2be36c900b5dd72247fae8f1085d185b8ca64dc9f139942bc56f7c573ae" name="docker-stable" arch="x86_64">
  <version epoch="0" ver="24.0.9_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
</package>
<package pkgid="fb1ff73b9213a3a7a8f5b21233602c949e9f4eac54e4502ccda893a8108e52b465ce1651cf4b65a0a026bb68ff2fff3304b1410792af937b68a58f68257d532f" name="docker-stable" arch="x86_64">
  <version epoch="0" ver="24.0.9_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
</package>
<package pkgid="c9e60b6fec2ee408c3cdd2ce49d43bb2c58f441f7eca4bf7a750044f922c35f35a8600a972fc9f2795d1390a205fa88adab68ac5edf3443d8a00f607d50fa5b1" name="docker-stable" arch="x86_64">
  <version epoch="0" ver="24.0.9_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- fix for Privilege validation bypass during plugin
  Backport of &lt;https://github.com/moby/moby/commit/99a095ecf04e8849318f2811bb3f687905eab09b&gt;
  (bsc#1265907, CVE-2026-33997)
  * 0021-CVE-2026-33997-fix-for-Privilege-validation-bypass-d.patch
- fix for Authz zero length regression
  Backport of &lt;https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38&gt;
  (bsc#1265929, CVE-2026-34040)
  * 0022-CVE-2026-34040-fix-for-Authz-zero-length-regression.patch
- grpc: enforce strict path checking for incoming requests on the server
  Backport of &lt;grpc/grpc-go@72186f1&gt;
  (bsc#1260279, CVE-2026-33186)
  * 0023-CVE-2026-33186-grpc-enforce-strict-path-checking-for.patch
- http2: prevent hanging Transport due to bad SETTINGS
  Backport of &lt;golang/net@1e71bd8&gt;
  (bsc#1265782, CVE-2026-33814)
  * 0024-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  Backport of &lt;golang/net@8c4c965&gt;
  (bsc#1266625, CVE-2026-39821)
  * 0025-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  Backport of &lt;moby@2022313&gt;
  (bsc#1267827, CVE-2026-41567)
  * 0026-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="855fefa35bde8e4f08f69f8e07185e4848202ed5e2a569ce26f0dcfbfe8688f85f2f66fb22340534ce9bf9b35a71eaf6857795add81c855f94ad274e55842405" name="docker-stable-bash-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1733918400">- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1733918401">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Add backport for CVE-2024-29018 fix. bsc#1234089
  + 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Add backport for CVE-2024-23650 fix and rename patch filename. bsc#1219437
  - 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
- Reorder and rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-TESTS-backport-fixes-for-integration-tests.patch
  + 0011-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
</package>
<package pkgid="99a6b9a8af2852fd371ab99c7152287225ce789baf633facc348649bbc21df84c444915f2b73b9246224db91e9cf61409daa0967cf8b9b0c60e35bccc7b97089" name="docker-stable-bash-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="0bbf1de26e8205a54349164a029acd915f733fade89edccde2884d348e3c2f9ce5605f643df904644bca9fb1968785e6cf32a552c16906e296ed9d87c0784e6b" name="docker-stable-bash-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
</package>
<package pkgid="b35fb82383add9b83a4b1928e8c4284f4981afb2940370e7b1d3e5e7e3fb43c8fddd091e07b5cff3bb17fdfc53101b430873720464ff180f720d6f7e0a01b05d" name="docker-stable-bash-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
</package>
<package pkgid="b91c3262184270d04a1ea8b12ee7cc907eb9409f590bf9f7f2ac32efae4ce9c85da19a5f382d280b839d2121c891e0eee78bf837b1a95d956a4998d54a0ca281" name="docker-stable-bash-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- fix for Privilege validation bypass during plugin
  Backport of &lt;https://github.com/moby/moby/commit/99a095ecf04e8849318f2811bb3f687905eab09b&gt;
  (bsc#1265907, CVE-2026-33997)
  * 0021-CVE-2026-33997-fix-for-Privilege-validation-bypass-d.patch
- fix for Authz zero length regression
  Backport of &lt;https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38&gt;
  (bsc#1265929, CVE-2026-34040)
  * 0022-CVE-2026-34040-fix-for-Authz-zero-length-regression.patch
- grpc: enforce strict path checking for incoming requests on the server
  Backport of &lt;grpc/grpc-go@72186f1&gt;
  (bsc#1260279, CVE-2026-33186)
  * 0023-CVE-2026-33186-grpc-enforce-strict-path-checking-for.patch
- http2: prevent hanging Transport due to bad SETTINGS
  Backport of &lt;golang/net@1e71bd8&gt;
  (bsc#1265782, CVE-2026-33814)
  * 0024-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  Backport of &lt;golang/net@8c4c965&gt;
  (bsc#1266625, CVE-2026-39821)
  * 0025-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  Backport of &lt;moby@2022313&gt;
  (bsc#1267827, CVE-2026-41567)
  * 0026-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="7662d510234d5cfef3628fc8619a55227d85b48f295b7bcc2ccc56f3a2a9101aa36e33b999093869ef4dc47c9474d214c2642af4b9c41b80f3c281b3863d4abf" name="docker-stable-buildx" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1733918400">- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1733918401">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Add backport for CVE-2024-29018 fix. bsc#1234089
  + 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Add backport for CVE-2024-23650 fix and rename patch filename. bsc#1219437
  - 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
- Reorder and rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-TESTS-backport-fixes-for-integration-tests.patch
  + 0011-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
</package>
<package pkgid="dca4000081101ba28d4f56f6bdb2a04143b91f10e65d266dd5d74368d6c747ba7cdf74a822524eef69ad2755deeb3cdce5137ba6ae1fb9b20ce5000af12b1716" name="docker-stable-buildx" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="0c0b4b3f7b5094d9b1ed7c50460073f1c3af4cca2e583d7f9b9282ec7d6f58d33bf3de9f310c733c3288ecb621e381bd890c915c1f276858f47c323d5687ebb0" name="docker-stable-buildx" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
</package>
<package pkgid="5b9e35a6846cd7ee412a43a5a8ad91a8c75540bb45ec4df0f49db69d5ee8582e25fcafc1db071fb2875d98e2b305097c2592eeeac975ed4a69615cc4c2b55dad" name="docker-stable-buildx" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
</package>
<package pkgid="77a3146d84bef645d746f87b361f2ff49c9dbd02c73251ba965777408a945dd522b2b24e2d9608b169205bb4068e0c1da6e909f000036e9b1ca622eb22c60b00" name="docker-stable-buildx" arch="x86_64">
  <version epoch="0" ver="0.25.0" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- fix for Privilege validation bypass during plugin
  Backport of &lt;https://github.com/moby/moby/commit/99a095ecf04e8849318f2811bb3f687905eab09b&gt;
  (bsc#1265907, CVE-2026-33997)
  * 0021-CVE-2026-33997-fix-for-Privilege-validation-bypass-d.patch
- fix for Authz zero length regression
  Backport of &lt;https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38&gt;
  (bsc#1265929, CVE-2026-34040)
  * 0022-CVE-2026-34040-fix-for-Authz-zero-length-regression.patch
- grpc: enforce strict path checking for incoming requests on the server
  Backport of &lt;grpc/grpc-go@72186f1&gt;
  (bsc#1260279, CVE-2026-33186)
  * 0023-CVE-2026-33186-grpc-enforce-strict-path-checking-for.patch
- http2: prevent hanging Transport due to bad SETTINGS
  Backport of &lt;golang/net@1e71bd8&gt;
  (bsc#1265782, CVE-2026-33814)
  * 0024-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  Backport of &lt;golang/net@8c4c965&gt;
  (bsc#1266625, CVE-2026-39821)
  * 0025-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  Backport of &lt;moby@2022313&gt;
  (bsc#1267827, CVE-2026-41567)
  * 0026-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="d80e277027d1ad70eed57e1122205e70bfb3c84361ba9d923868ed83b142b272f6d97accb8e6a7fa61bbf51e5a22bafa241f5e485b646dccba449ddc142d09a7" name="docker-stable-fish-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1733918400">- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1733918401">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Add backport for CVE-2024-29018 fix. bsc#1234089
  + 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Add backport for CVE-2024-23650 fix and rename patch filename. bsc#1219437
  - 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
- Reorder and rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-TESTS-backport-fixes-for-integration-tests.patch
  + 0011-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
</package>
<package pkgid="f9e24ff9ba4d1dcdf1258d7f1dde563c4e78c478050ce877ba316fc202590f3a32e01e99a6928011ae70af90aecb2e0c104484b494a29c9600357bb674cfe138" name="docker-stable-fish-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="f086dbb452fde154a87f3c79f15313e693298d81c1df95ced62c0d71097b799afd349d302f492feaff5690f3df9179eca560bc1bb86e1810396e66e98c8d1aad" name="docker-stable-fish-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
</package>
<package pkgid="d0613ad2751569758bbe81e7252e9108a41e7fc69ce20d40d3f09d16eacbb39ae27361432f7b55bafcb62a9be5b4e33801df1a7d3792457f7da10c777d66787d" name="docker-stable-fish-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
</package>
<package pkgid="8d21cf293b3717d5f172a441e447429a4243d1178ea96489b7756abdd83e0a74186cdf885ced163c5b3936a94ec60888b4eb91418963c943e1020dda9c325372" name="docker-stable-fish-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- fix for Privilege validation bypass during plugin
  Backport of &lt;https://github.com/moby/moby/commit/99a095ecf04e8849318f2811bb3f687905eab09b&gt;
  (bsc#1265907, CVE-2026-33997)
  * 0021-CVE-2026-33997-fix-for-Privilege-validation-bypass-d.patch
- fix for Authz zero length regression
  Backport of &lt;https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38&gt;
  (bsc#1265929, CVE-2026-34040)
  * 0022-CVE-2026-34040-fix-for-Authz-zero-length-regression.patch
- grpc: enforce strict path checking for incoming requests on the server
  Backport of &lt;grpc/grpc-go@72186f1&gt;
  (bsc#1260279, CVE-2026-33186)
  * 0023-CVE-2026-33186-grpc-enforce-strict-path-checking-for.patch
- http2: prevent hanging Transport due to bad SETTINGS
  Backport of &lt;golang/net@1e71bd8&gt;
  (bsc#1265782, CVE-2026-33814)
  * 0024-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  Backport of &lt;golang/net@8c4c965&gt;
  (bsc#1266625, CVE-2026-39821)
  * 0025-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  Backport of &lt;moby@2022313&gt;
  (bsc#1267827, CVE-2026-41567)
  * 0026-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="337a793d8c2209d1371bd1e9e607ae61d4bcf1ba7d5b3392312baba4b2133f4530e4be4012f77c5e2a37259332ae442ac1419ca5745ce78cb29a254b8e43a995" name="docker-stable-rootless-extras" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1733918400">- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1733918401">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Add backport for CVE-2024-29018 fix. bsc#1234089
  + 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Add backport for CVE-2024-23650 fix and rename patch filename. bsc#1219437
  - 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
- Reorder and rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-TESTS-backport-fixes-for-integration-tests.patch
  + 0011-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
</package>
<package pkgid="9b61120f77cbc33f35a9a31929dba16c3014504267a14f7335e2824961bc4e1a7cf1853adfcc8dcb2e08ed47487b1bb67426df3d121fc69fe78b78e275bcdd1e" name="docker-stable-rootless-extras" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="f15379b477a709ba16bed3afd7b75ee13fca2ccfe7215bdba073876187d2dff5f6286799785dd71cd99b661dd9a8e1723ad1a7ed06f53a7b15fc46dcc3d84708" name="docker-stable-rootless-extras" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
</package>
<package pkgid="d7d3de9f74540b0ea6beec71b607bb7d04f13124ba76cca7105959faacebaaaa9b450957b6232634deeda3cba896b1deb1a37ffff265729d3d400fd4d0da6e41" name="docker-stable-rootless-extras" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
</package>
<package pkgid="3e5fd5c0a7278c9c6f2da2716e06f25dfd1bc04b835c9ef9e43668582dfc7b2efe08b58a2fd9d503e57459527883bb4b5b399264eddfdd3b55a021b70c02f145" name="docker-stable-rootless-extras" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- fix for Privilege validation bypass during plugin
  Backport of &lt;https://github.com/moby/moby/commit/99a095ecf04e8849318f2811bb3f687905eab09b&gt;
  (bsc#1265907, CVE-2026-33997)
  * 0021-CVE-2026-33997-fix-for-Privilege-validation-bypass-d.patch
- fix for Authz zero length regression
  Backport of &lt;https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38&gt;
  (bsc#1265929, CVE-2026-34040)
  * 0022-CVE-2026-34040-fix-for-Authz-zero-length-regression.patch
- grpc: enforce strict path checking for incoming requests on the server
  Backport of &lt;grpc/grpc-go@72186f1&gt;
  (bsc#1260279, CVE-2026-33186)
  * 0023-CVE-2026-33186-grpc-enforce-strict-path-checking-for.patch
- http2: prevent hanging Transport due to bad SETTINGS
  Backport of &lt;golang/net@1e71bd8&gt;
  (bsc#1265782, CVE-2026-33814)
  * 0024-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  Backport of &lt;golang/net@8c4c965&gt;
  (bsc#1266625, CVE-2026-39821)
  * 0025-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  Backport of &lt;moby@2022313&gt;
  (bsc#1267827, CVE-2026-41567)
  * 0026-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="ec79c589c7f705c25906e23beec9bae6a63026068e6ef547b9457ce411a44e53c297a7237f812eb073a7cb2ddc2bec3a03540e1eab3a518d083c62df7acd0930" name="docker-stable-zsh-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1733918400">- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 &gt; /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1733918401">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Add backport for CVE-2024-29018 fix. bsc#1234089
  + 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Add backport for CVE-2024-23650 fix and rename patch filename. bsc#1219437
  - 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
- Reorder and rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-TESTS-backport-fixes-for-integration-tests.patch
  + 0011-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
</package>
<package pkgid="403698834aec17e72a2083de7c491ef4eaf92673c60df61e9cb0f43bc188a4a258363a13f237b28c0d440806fcf68e7eec0ce3d1aadddcdfd78874ba49a584be" name="docker-stable-zsh-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
- Move test-related patch to the end of the patch stack:
  - 0011-TESTS-backport-fixes-for-integration-tests.patch
  + 0013-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="ccd3b76a394f64d3b82c49ca5121bebcc9dda5f86791670d14a174eb77ead101c66250656102fb78583968e06d3fffd427d0b2cd8c170d497febb5e13581dbe4" name="docker-stable-zsh-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
</package>
<package pkgid="fc346558560d481f8b1041407ca01cd16ae7d88372fd9bdeaa08ed7495baf61ccd99dc3cbff4aae30903f0a6a830974ec43b4221978be70b04e249fdf37c6c93" name="docker-stable-zsh-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  + 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  - 0007-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  + 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0008-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  + 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  - 0009-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  + 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  - 0010-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  + 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  - 0011-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0012-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - 0013-TESTS-backport-fixes-for-integration-tests.patch
  + 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
</package>
<package pkgid="f2428c34bfc2e1d88158856b29613be51a37dc2df151e65cdd98aabf06f39b818ca8e8d0e217f5079c44cb9e17ac94dae9075a4e1ef73b9368f45d89c6cf22ed" name="docker-stable-zsh-completion" arch="noarch">
  <version epoch="0" ver="24.0.9_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.</changelog>
  <changelog author="asarai@suse.com" date="1754395200">- Backport &lt;https://github.com/moby/moby/pull/48517&gt;. bsc#1247362
  + 0015-bsc1247362-release-container-layer-on-export.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).
- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="asarai@suse.com" date="1764158400">- Backport &lt;https://github.com/moby/moby/pull/47498&gt; to fix incorrect
  permissions for overlayfs lowerdir. In practice the permissions of this
  directory are immaterial but some security scanners falsely flag this as an
  issue. bsc#1254206
  + 0016-bsc1254206-daemon-overlay2-remove-world-writable-per.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1770811200">- Backport &lt;https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3&gt;
  to remove strings.Split and add parseToken function, bsc#1240513
  fixes CVE-2025-30204
  + 0017-CVE-2025-30204-fix-Remove-strings.Split-and-add-pars.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1771502400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0018-CVE-2025-58181-fix-vendor-crypto-ssh-3.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1779192000">- executor: validate container IDs centrally
  Backport of &lt;https://github.com/moby/buildkit/commit/45b038cd0b2ec2d34013ce0f085522276f7ee0d8&gt;.
  (bsc#1261078, CVE-2026-33748)
  * 0019-CVE-2026-33748-Fix-git-normalize-and-validate-subdir.patch
- git: normalize and validate subdir paths
  Backport of &lt;https://github.com/moby/buildkit/commit/099cf80f5ebc935c48d2925499bffe703a54cff4&gt;.
  (bsc#1260967, CVE-2026-33747)
  * 0020-CVE-2026-33747-Fix-executor-validate-container-IDs-c.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1781784000">- fix for Privilege validation bypass during plugin
  Backport of &lt;https://github.com/moby/moby/commit/99a095ecf04e8849318f2811bb3f687905eab09b&gt;
  (bsc#1265907, CVE-2026-33997)
  * 0021-CVE-2026-33997-fix-for-Privilege-validation-bypass-d.patch
- fix for Authz zero length regression
  Backport of &lt;https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38&gt;
  (bsc#1265929, CVE-2026-34040)
  * 0022-CVE-2026-34040-fix-for-Authz-zero-length-regression.patch
- grpc: enforce strict path checking for incoming requests on the server
  Backport of &lt;grpc/grpc-go@72186f1&gt;
  (bsc#1260279, CVE-2026-33186)
  * 0023-CVE-2026-33186-grpc-enforce-strict-path-checking-for.patch
- http2: prevent hanging Transport due to bad SETTINGS
  Backport of &lt;golang/net@1e71bd8&gt;
  (bsc#1265782, CVE-2026-33814)
  * 0024-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  Backport of &lt;golang/net@8c4c965&gt;
  (bsc#1266625, CVE-2026-39821)
  * 0025-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  Backport of &lt;moby@2022313&gt;
  (bsc#1267827, CVE-2026-41567)
  * 0026-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="0400b73cb4be288eb374064a45a44d97f926155e6f5f4e7671e6de1130f38b70f014414cb3a0ece47277e01fdac69a40f5e624b6073dd2f8b815544454552866" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.2.2"/>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
</package>
<package pkgid="3ae7e250b1cce79e2d27d1cd1be0796f567fe95398ab37091fff41c5eb768e9b253243e5c85c3a5c5b6435ea77c0a421215c006eac490cf8e0b05f5054fc3cd2" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="28.3.2_ce" rel="160000.3.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="a2a069f6d927377aba5a96bed5d7fc4751b8687d70e31026184449c521f15b4215684c2b6d4d02ee6a8942bddb41aa7513c737117449c6605af0f7c9fb7c8892" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.4.1"/>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="43ae0c4461fdd94c2f6d44eaeae12734bbbb66ef44f527eab4c0039aef6cbcbd41618da2a93e152bc496c4d9bbda09e8f5d7246ae2869f91bef312261e3c83db" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="28.5.1_ce" rel="160000.5.1"/>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="783236bdc65dc4f53fc5101bb581f5a4d137feed8f8431143db8413ebf4077e11071e38e1744e575f2ab6bd11b11a8af7501cf695178ad60de29537a48aa3879" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.6.1"/>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
</package>
<package pkgid="4685348b05e76edf8e976ce8851e25fbe2a73e371536803300112ade7b1ce0a6f02ca7e40f478dcdf47b468903d6580d849b7207340b649db4627a2a9828e042" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="29.4.0_ce" rel="160000.7.1"/>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bcs#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1778673600">-  Update to Docker 29.4.0. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/29/#2940&gt;
- Update to buildx 0.33.0. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.33.0&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Removed patch
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch (applicable only
    when docker version &lt; v29.1.0)</changelog>
  <changelog author="madhankumar.chellamuthu@suse.com" date="1782302400">- Ensure correct certificate is used for TSA auth
  (bsc#1262346, CVE-2026-39984)
  * 0007-CVE-2026-39984-Ensure-correct-certificate-is-used-fo.patch
- http2: prevent hanging Transport due to bad SETTINGS
  (bsc#1265782, CVE-2026-33814)
  * 0008-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- idna: update from x/text, fix ToUnicode and all-ASCII xn-- labels
  (bsc#1266625, CVE-2026-39821)
  * 0009-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
- daemon: Decompress archives before entering container filesystem
  (bsc#1267827, CVE-2026-41567)
  * 0010-CVE-2026-41567-daemon-Decompress-archives-before-ent.patch</changelog>
</package>
<package pkgid="376bf657b89e0bf95ffca7423b8714f66b78a8f5ca3ba5ab53e6da7f9816a87c70f0b9361cc9a7e2a806f3e888d42a142f0c4f8bce1b23cf25b4ec3bea6decc3" name="doctest-devel" arch="x86_64">
  <version epoch="0" ver="2.4.11" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1600948800">- Enable arm builds. The package builds fine on aarch64 systems.</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 2.4.1
  * Support for unit tests with Open MPI as a new extension header.
  * Added default printers for enums.</changelog>
  <changelog author="mardnh@gmx.de" date="1608033600">- Update to version 2.4.2
  Closed issues:
  * DOCTEST_CHECK_THROWS_WITH_AS fails to work with dependant
    exception type #447
  * log contexts for failures in JUnit reporter #441
  * Test runner thread initialization #435
  * CHECK_EQ with enum values #276
  Merged pull requests:
  * Add MAIN_PROJECT check for test option #445
  * log contexts for failures in JUnit reporter #442</changelog>
  <changelog author="mardnh@gmx.de" date="1614513600">- Update to version 2.4.5
  Closed issues:
  * Use of std::atomic can slow down multithreaded tests #452
  * Stack buffer overflow in String constructor #460
  Merged pull requests:
  * Fix compilation on case-sensitive filesystems #463
  * Use function-like macros for prefixless macro names #462
  * Implement a multi lane atomic for assertion counts
- Update to version 2.4.4
  * combine the same tests for different build configurations from
    multiple shared objects without having symbol clashes #436</changelog>
  <changelog author="mardnh@gmx.de" date="1616414400">- Update to version 2.4.6
  Fixed bugs:
  * REQUIRE does not compile when operator== in different
    namespace #443
  * Using templated operator== inside TEST_CASE changes deduced
    types of forwarding references #399
  Closed issues:
  * CMake doesn't link package #483
  * Get list of registered test-case names #479
  * Can't compile with glibc master (future 2.34): SIGSTKSZ is
    no longer a constant #473
  * INFO does not compile when used like a function call #469</changelog>
  <changelog author="christophe@krop.fr" date="1622548800">- Add GCC 11 compatibility fix:
  * 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 2.4.7:
  * Fix Stack-buffer-overflow probably because char array is viewed as NULL
    terminated string
  * "C4834: discarding return value" with REQUIRE_THROWS
  * Xcode 11.3 is gone from macOS-latest (=macOS-11)
  * is it possible to define dependency for CHECKs
  * Output summary explanation
  * compiler errors in doctest.h using cmake in CLion
  * Fails to build in VS2013 because of constexpr
  * -Wreserved-identifier warnings with Clang 13.0.0
  * Build fails with latest MSVC 2019 (v16.11) due to /WX
  * VS 16.11 warning about unreferenced function with internal linkage
  * Faq googletest mocking dead link
  * FR: Documentation: FAQ: Add sectoin 'multiple files'
  * CMAKE: doctest_discover_tests() error when ADD_LABELS is not specified
  * Register tests based on test data available
  * naming override in different testcase files
  * Segmentation fault during the compilation without the copy elision optimization
  * Compiler warnings on Xcode 12.5
  * Using filter -sc does not work properly?
  * [question] Example of tests in production code &amp; DLLs &amp; shared libraries?
  * Dumping fixture state to disk on error
  * Macros construct reserved identifiers
  * Running doctest on embedded ARM Cortex µCs
  * Asserts Outside of Tests Example Does Not Link
  * [FEATURE REQUEST] Quiet flag
  * Compile error on Intel C++ Classic Compilers
  * compiling doctest in 32-bit with __stdcall calling convention fails
  * Duplicate 'const' compilation error from TEST_CASE_CLASS macro
  * Packed fields can't be accessed in 2.4.6
  * Dangling pointers with .str().c_str()
  * Automatic adding of TEST_SUITE labels to discovered tests fails if
    ADD_LABELS not set
  * Adding a bunch of REQUIRE/CHECK utilities
  * Warning C4114 in MSVC
  * Own repository
  * Linking problem with Clang 10 on Windows
  * Add option not to print the intro text
  * [Feature] Better integration with tools (VS Code Test Adapter Extension)
  * vscode test explorer
  * Want an option not to print any intro
  * Add way to disable printing of intro
- Drop 0001-Fix-build-with-GCC-11.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1652270400">- Update to 2.4.8
  * Fixed g_oss is causing incorrect stringification results
  * Feature: Assertions returning booleans
  * Non visible build related changes</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1667908800">- Update to 2.4.9
  * Visual Studio's Test Explorer and Resharper C++'s Unit Test Explorer don't see Doctest's tests
  * How to get detailed information about testcases failing due to thrown exceptions?
  * Add clang-tidy integration and fix all warnings
  * Avoid static init problem in insufficient_procs() (MPI)
  * Use MPI_Isend in MpiConsoleReporter to avoid deadlock
  * Deadlock in MpiConsoleReporter when root rank fails assert
  * Cleanup of DOCTEST_DO_BINARY_EXPRESSION_COMPARISON. Fixes
  * Comparison with implicit cast from non-const value can't be decomposed
  * Local structured bindings cannot be used in CHECK macros (since 2.4.8)
  * Add tests for DOCTEST_CONFIG_USE_STD_HEADERS
  * Stringification amendments
  * Clean up defines a bit; Implement
  * New doctest version gives me an error: reference to local binding '...' declared in enclosing function 'DOCTEST_ANON_FUNC_16'
  * The tutorial example does not work (linker errors) with clang 10
  * Implementing `DOCTEST_ASSERT_IMPLEMENT_1` as lambda prevents testing structured bindings
  * re-re-remove overly restrictive minimum version of meson
  * Fix move-only types failing to decompose correctly
  * Weird compilation error when using CHECK_THROWS/CHECK_THROWS_AS on Visual Studio 2019 with no exceptions
  * Error triggered by comparing typeid with new doctest 2.4.8
  * Improve Mac PowerPC support
  * issue introduced in 2.4.7
  * Decompose expressions containing the spaceship operator
  * added nolint for cert-err58
  * Fix properties not being passed in doctest_discover_tests
  * Config no multithreading
  * wasm\*-support?
  * Fix MPI extension to work with no parallel tests
  * string comparison leads to gotting stuck
  * doctest_discover_tests no longer sets ENVIRONMENT variables for discovered tests.
  * Add contains option to checks.
  * Feature request: CHECK_THROWS_WITH with contains option
  * Add alias target for doctest_with_main
  * Allow escaping backslash with backslash in filters (
  * Fix operator&lt;&lt;
  * Correct minor typos
  * Fix MPI extension to work if launched without mpirun/mpiexec
  * Fix mpi subcase
  * compilation error with custom operator== defined in namespace
  * Regression: Clang-Tidy warnings in 2.4.8
  * Internal compiler error with GCC 7.5
  * tagging convension has changed?
  * Update Doctest in vcpkg to 2.4.8
  * Add IsNaN operator\!
  * Ignored generated files from CMake, OSX, Xcode, and VS
  * Move roadmap and wipe it clean
  * removes a duplicate word 'most' in configuration.md
  * Fix subcase reentry
  * Loop-generated `SUBCASE`s are not run
  * Void
  * Add flag that forces custom stringification methods to be provided
  * Fix coverage
  * TEST CODECOV PR BEHAVIOR
  * Ignore CMake and MacOS generated files
  * Feature request: option to disable fallback "\{?\}" stringifier
  * Add tests for default stringification result of doctest
  * Feature config ret vals
  * DOCTEST_CONFIG_ASSERT_RETURN_VALUES
  * Support pretty printing of container based on heuristics
  * Refactor stringification
  * Feature: Better NaN
  * Nan check
  * Update roadmap following maintainer change
  * Regression between 2.4.6 and 2.4.7
  * build failure with gcc-11.2 when using user declared operator&lt;&lt;(ostream, vector)
  * variable maximum is assigned 6206517616395625 instead of the actual return value which is 5.0
  * toString can call existing user-defined toString through ADL incorrectly
  * [Coverity] Concurrent data access violations (MISSING_LOCK) doctest.h: 5838 in doctest::&lt;unnamed&gt;::ConsoleReporter::test_case_start(const doctest::TestCaseData &amp;)()
  * Provide an error message if REQUIRE (or other disabled assertion macros) are used when exceptions are disabled
  * Conflict with templated toString function
  * -tc does not work with comma in names
  * Compile error on MSVC2019 with any macro which involves stringification of std::string (asserts, INFO, etc.) when &lt;ostream&gt; isn't included
  * the dll example doesn't run correctly on Windows with MinGW
  * add basic conan recipe
  * CHECK_MESSAGE() should accept temporaries
  * stringify of cstring literals doesn't work out of the box with separate test_driver.cpp
  * warning : function declared 'noreturn' should not return [-Winvalid-noreturn]
  * Test cases containing a comma cannot be run individually
  * [bug] Can't compile the tests because of mutex, that is declared in the doctest
  * The `CHECK` macro conflicts with Boost.Beast (and surely others)
  * Feature request: check if a `float` or `double` is NaN
  * Add clang-tidy integration and fix all warnings
  * Avoid static init problem in insufficient_procs() (MPI)
  * Use MPI_Isend in MpiConsoleReporter to avoid deadlock
  * Cleanup of DOCTEST_DO_BINARY_EXPRESSION_COMPARISON. Fixes
  * Add tests for DOCTEST_CONFIG_USE_STD_HEADERS
  * Stringification amendments
  * Clean up defines a bit; Implement
  * re-re-remove overly restrictive minimum version of meson
  * Fix move-only types failing to decompose correctly
  * Improve Mac PowerPC support
  * added nolint for cert-err58
  * Fix properties not being passed in doctest_discover_tests
  * Config no multithreading
  * Fix MPI extension to work with no parallel tests
  * Add contains option to checks.
  * Add alias target for doctest_with_main
  * Allow escaping backslash with backslash in filters
  * Fix operator&lt;&lt;
  * Fix MPI extension to work if launched without mpirun/mpiexec
  * Fix mpi subcase
  * Add IsNaN operator!
  * Move roadmap and wipe it clean
  * removes a duplicate word 'most' in configuration.md
  * Fix subcase reentry
  * Add flag that forces custom stringification methods to be provided
  * Fix coverage
  * Ignore CMake and MacOS generated files
  * Feature config ret vals
  * Refactor stringification
  * Feature: Better NaN
  * Nan check</changelog>
  <changelog author="andrea.manzini@suse.com" date="1679140800">- Update to 2.4.11
  * fixed issue #755 - FAIL/FAIL_CHECK weren't properly reported with the junit reporter
  * fixed #751 which was caused by commit db758e0 when turning the values from an enum to an integer implicitly
  * removed the generated html docs
- Update to 2.4.10
  * Add Intel Compiler support
  * Fix stringification of enums that overload operator&lt;&lt;
  * Suppress hash() clang integer sanitizer issues
  * Fix compile errors when comparing pointers.
  * Use variables instead of hard-coded mpirun -np
  * Fix typos and CMake example in docs</changelog>
</package>
<package pkgid="6dc759557d97079ed748d63c658fe6dd7cdf30dbc2c4f1bd41f8512dfe3bd6fb3edcb19e6bc7bf4c9ece76ad12f2d26a5d2e65a5a72ccf49afd441a1d984cb6b" name="dog" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="bp160.1.13"/>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1638446400">- Initial packaging of version 0.1.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1649160000">- Automatic update of vendored dependencies</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655467200">- Remove git tag from version
- Update vendored dependencies to fix build error</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1655726400">- Automatic update of vendored dependencies</changelog>
</package>
<package pkgid="848ed4ab3087fcd07952fcc69cba14b41bd859a89ef3ca8160810e19dc7a943fd5033cefe3e22f708ab261ae9a9dc7ce3c42802be336a27e1693fe39b41212be" name="doggo" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="bp160.1.12"/>
  <changelog author="Alexandre Almeida &lt;me@aoalmeida.com&gt;" date="1696161600">- First release</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1697630400">- Use xz compression for vendor.tar
- Use obscpio instead of tar for disk storage efficency</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697630401">- Packaging improvements:
  * Use subpackages for fish-completion and zsh-completion.
    Upstream currently has no bash completion scripts. Fish and zsh
    subpackages are marked Suggests: and not installed by default.
    If a bash-completion subpackage becomes available, we should
    install that by default.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Remove ldflags -X entries for upstream import path and version.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Use %%name macro where applicable to normalize common lines
    across Go app packages. Also makes renaming binary easier when
    required to handle package name conflict.
  * Remove bash loop for two paramaterized calls of go build.
    The loop technique is nice for large lists, but making the two
    go build calls explicit seems a better readability tradeoff.
  * Add sample API config as doc</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1698062400">- Packaging improvements:
  * Fix zsh-completion and fish-completion by not requiring
    zsh-completion and fish-completion and by supplementing the
    right package.
  * Fix fish-completion by using the .fish suffix when copying the
    completion file.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1719921600">- Update to version 1.0.2:
  * refactor: move main package to cmd/doggo for proper binary naming
- Update to version 1.0.1
  * fix: proper alignment of help text
  * ci: re-enable dependabot
  * ci: add npm caching
  * ci: goreleaser
  * ci: upgrade actions
  * refactor: replace logrus with slog
  * feat: add support for more platforms and targets
  * feat: add single install script
  * feat: add completions command
  * feat: add support for query flags
  * refactor: fix loading of nameservers
  * chore: upgrade deps
  * fix: send proper json error responses
- Update to version 1.0.0:
  * feat: add bash completion support
  * feat: add completions command
  * Fix syntax error in ZSH completion
  * Update ZSH completion to include all current options
  * added tls client configuration for doh and doq</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921601">- Update to version 1.0.3:
  * chore: upgrade deps
  * chore: fix help text
  * docs: specify correct usage of timeout flag
  * feat: add ctx cancellation while resolving records
  * feat: Refactor DNS resolvers for concurrent lookups
  * feat: add support for common query types
  * chore: fix docs link
  * chore: revamp README</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921602">- Packaging improvements:
  * Add subpackage web providing web browser UI for making DNS queries
  * Add Group: Productivity/Networking/DNS/Utilities
  * Update License: to GPL-3.0 instead of GPL-3.0-only
  * Update to BuildRequires: golang(API) &gt;= 1.22 matching go.mod
  * Add Recommends: %{name}-bash-completion
  * Completions subpackages for fish, zsh remain as Suggests:
  * Reorder completions install ops consistently: bash, fish, zsh
  * Add changelog detail for earlier release v1.0.1</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1720008000">- Update to version 1.0.4:
  * fix: add ca-certificates in doggo-web
  * Updating canonical URL
  * Fix zsh completions
  * docs: add --rm in docker</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1727697600">- Update to version 1.0.5:
  * chore: upgrade deps
  * fix fishCompletion
  * update globalping client
  * update args
  * add support for --json, --short &amp;&amp; update docs
  * feat: integrate Globalping API for global network diagnostics
  * chore: document completions subcommand in --help output
  * Update README.md
  * fix: change DefaultResolvConfPath to var instead of const
  * fix(logger): Change log destination to stderr
  * Update README.md</changelog>
</package>
<package pkgid="04069db2c03386a12458bf07f459665b98904063c95c16c4501ae91f70d4e7797924a11b770f5878ec022ae38f77300d1727dbc6aa5ad2acb6f7d3d308d94fe9" name="doggo-bash-completion" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="bp160.1.12"/>
  <changelog author="Alexandre Almeida &lt;me@aoalmeida.com&gt;" date="1696161600">- First release</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1697630400">- Use xz compression for vendor.tar
- Use obscpio instead of tar for disk storage efficency</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697630401">- Packaging improvements:
  * Use subpackages for fish-completion and zsh-completion.
    Upstream currently has no bash completion scripts. Fish and zsh
    subpackages are marked Suggests: and not installed by default.
    If a bash-completion subpackage becomes available, we should
    install that by default.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Remove ldflags -X entries for upstream import path and version.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Use %%name macro where applicable to normalize common lines
    across Go app packages. Also makes renaming binary easier when
    required to handle package name conflict.
  * Remove bash loop for two paramaterized calls of go build.
    The loop technique is nice for large lists, but making the two
    go build calls explicit seems a better readability tradeoff.
  * Add sample API config as doc</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1698062400">- Packaging improvements:
  * Fix zsh-completion and fish-completion by not requiring
    zsh-completion and fish-completion and by supplementing the
    right package.
  * Fix fish-completion by using the .fish suffix when copying the
    completion file.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1719921600">- Update to version 1.0.2:
  * refactor: move main package to cmd/doggo for proper binary naming
- Update to version 1.0.1
  * fix: proper alignment of help text
  * ci: re-enable dependabot
  * ci: add npm caching
  * ci: goreleaser
  * ci: upgrade actions
  * refactor: replace logrus with slog
  * feat: add support for more platforms and targets
  * feat: add single install script
  * feat: add completions command
  * feat: add support for query flags
  * refactor: fix loading of nameservers
  * chore: upgrade deps
  * fix: send proper json error responses
- Update to version 1.0.0:
  * feat: add bash completion support
  * feat: add completions command
  * Fix syntax error in ZSH completion
  * Update ZSH completion to include all current options
  * added tls client configuration for doh and doq</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921601">- Update to version 1.0.3:
  * chore: upgrade deps
  * chore: fix help text
  * docs: specify correct usage of timeout flag
  * feat: add ctx cancellation while resolving records
  * feat: Refactor DNS resolvers for concurrent lookups
  * feat: add support for common query types
  * chore: fix docs link
  * chore: revamp README</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921602">- Packaging improvements:
  * Add subpackage web providing web browser UI for making DNS queries
  * Add Group: Productivity/Networking/DNS/Utilities
  * Update License: to GPL-3.0 instead of GPL-3.0-only
  * Update to BuildRequires: golang(API) &gt;= 1.22 matching go.mod
  * Add Recommends: %{name}-bash-completion
  * Completions subpackages for fish, zsh remain as Suggests:
  * Reorder completions install ops consistently: bash, fish, zsh
  * Add changelog detail for earlier release v1.0.1</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1720008000">- Update to version 1.0.4:
  * fix: add ca-certificates in doggo-web
  * Updating canonical URL
  * Fix zsh completions
  * docs: add --rm in docker</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1727697600">- Update to version 1.0.5:
  * chore: upgrade deps
  * fix fishCompletion
  * update globalping client
  * update args
  * add support for --json, --short &amp;&amp; update docs
  * feat: integrate Globalping API for global network diagnostics
  * chore: document completions subcommand in --help output
  * Update README.md
  * fix: change DefaultResolvConfPath to var instead of const
  * fix(logger): Change log destination to stderr
  * Update README.md</changelog>
</package>
<package pkgid="1293f115eb1e77a61c1d0fb4fbd082270b144436f7439354b2bfa122ad34a478e6b0270be24993d0904cfdd7cdab373e4ea705da4ffcb67f92fb36af728a8bd9" name="doggo-fish-completion" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="bp160.1.12"/>
  <changelog author="Alexandre Almeida &lt;me@aoalmeida.com&gt;" date="1696161600">- First release</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1697630400">- Use xz compression for vendor.tar
- Use obscpio instead of tar for disk storage efficency</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697630401">- Packaging improvements:
  * Use subpackages for fish-completion and zsh-completion.
    Upstream currently has no bash completion scripts. Fish and zsh
    subpackages are marked Suggests: and not installed by default.
    If a bash-completion subpackage becomes available, we should
    install that by default.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Remove ldflags -X entries for upstream import path and version.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Use %%name macro where applicable to normalize common lines
    across Go app packages. Also makes renaming binary easier when
    required to handle package name conflict.
  * Remove bash loop for two paramaterized calls of go build.
    The loop technique is nice for large lists, but making the two
    go build calls explicit seems a better readability tradeoff.
  * Add sample API config as doc</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1698062400">- Packaging improvements:
  * Fix zsh-completion and fish-completion by not requiring
    zsh-completion and fish-completion and by supplementing the
    right package.
  * Fix fish-completion by using the .fish suffix when copying the
    completion file.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1719921600">- Update to version 1.0.2:
  * refactor: move main package to cmd/doggo for proper binary naming
- Update to version 1.0.1
  * fix: proper alignment of help text
  * ci: re-enable dependabot
  * ci: add npm caching
  * ci: goreleaser
  * ci: upgrade actions
  * refactor: replace logrus with slog
  * feat: add support for more platforms and targets
  * feat: add single install script
  * feat: add completions command
  * feat: add support for query flags
  * refactor: fix loading of nameservers
  * chore: upgrade deps
  * fix: send proper json error responses
- Update to version 1.0.0:
  * feat: add bash completion support
  * feat: add completions command
  * Fix syntax error in ZSH completion
  * Update ZSH completion to include all current options
  * added tls client configuration for doh and doq</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921601">- Update to version 1.0.3:
  * chore: upgrade deps
  * chore: fix help text
  * docs: specify correct usage of timeout flag
  * feat: add ctx cancellation while resolving records
  * feat: Refactor DNS resolvers for concurrent lookups
  * feat: add support for common query types
  * chore: fix docs link
  * chore: revamp README</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921602">- Packaging improvements:
  * Add subpackage web providing web browser UI for making DNS queries
  * Add Group: Productivity/Networking/DNS/Utilities
  * Update License: to GPL-3.0 instead of GPL-3.0-only
  * Update to BuildRequires: golang(API) &gt;= 1.22 matching go.mod
  * Add Recommends: %{name}-bash-completion
  * Completions subpackages for fish, zsh remain as Suggests:
  * Reorder completions install ops consistently: bash, fish, zsh
  * Add changelog detail for earlier release v1.0.1</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1720008000">- Update to version 1.0.4:
  * fix: add ca-certificates in doggo-web
  * Updating canonical URL
  * Fix zsh completions
  * docs: add --rm in docker</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1727697600">- Update to version 1.0.5:
  * chore: upgrade deps
  * fix fishCompletion
  * update globalping client
  * update args
  * add support for --json, --short &amp;&amp; update docs
  * feat: integrate Globalping API for global network diagnostics
  * chore: document completions subcommand in --help output
  * Update README.md
  * fix: change DefaultResolvConfPath to var instead of const
  * fix(logger): Change log destination to stderr
  * Update README.md</changelog>
</package>
<package pkgid="631705abc510eaf7680e5bacce3054c8d077308ca107c28cb8ea47c682ecd6803e9986380e57f69795a17f16e446ac57a62da7c438d25e4fc30d20a5a624ba00" name="doggo-web" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="bp160.1.12"/>
  <changelog author="Alexandre Almeida &lt;me@aoalmeida.com&gt;" date="1696161600">- First release</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1697630400">- Use xz compression for vendor.tar
- Use obscpio instead of tar for disk storage efficency</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697630401">- Packaging improvements:
  * Use subpackages for fish-completion and zsh-completion.
    Upstream currently has no bash completion scripts. Fish and zsh
    subpackages are marked Suggests: and not installed by default.
    If a bash-completion subpackage becomes available, we should
    install that by default.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Remove ldflags -X entries for upstream import path and version.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Use %%name macro where applicable to normalize common lines
    across Go app packages. Also makes renaming binary easier when
    required to handle package name conflict.
  * Remove bash loop for two paramaterized calls of go build.
    The loop technique is nice for large lists, but making the two
    go build calls explicit seems a better readability tradeoff.
  * Add sample API config as doc</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1698062400">- Packaging improvements:
  * Fix zsh-completion and fish-completion by not requiring
    zsh-completion and fish-completion and by supplementing the
    right package.
  * Fix fish-completion by using the .fish suffix when copying the
    completion file.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1719921600">- Update to version 1.0.2:
  * refactor: move main package to cmd/doggo for proper binary naming
- Update to version 1.0.1
  * fix: proper alignment of help text
  * ci: re-enable dependabot
  * ci: add npm caching
  * ci: goreleaser
  * ci: upgrade actions
  * refactor: replace logrus with slog
  * feat: add support for more platforms and targets
  * feat: add single install script
  * feat: add completions command
  * feat: add support for query flags
  * refactor: fix loading of nameservers
  * chore: upgrade deps
  * fix: send proper json error responses
- Update to version 1.0.0:
  * feat: add bash completion support
  * feat: add completions command
  * Fix syntax error in ZSH completion
  * Update ZSH completion to include all current options
  * added tls client configuration for doh and doq</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921601">- Update to version 1.0.3:
  * chore: upgrade deps
  * chore: fix help text
  * docs: specify correct usage of timeout flag
  * feat: add ctx cancellation while resolving records
  * feat: Refactor DNS resolvers for concurrent lookups
  * feat: add support for common query types
  * chore: fix docs link
  * chore: revamp README</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921602">- Packaging improvements:
  * Add subpackage web providing web browser UI for making DNS queries
  * Add Group: Productivity/Networking/DNS/Utilities
  * Update License: to GPL-3.0 instead of GPL-3.0-only
  * Update to BuildRequires: golang(API) &gt;= 1.22 matching go.mod
  * Add Recommends: %{name}-bash-completion
  * Completions subpackages for fish, zsh remain as Suggests:
  * Reorder completions install ops consistently: bash, fish, zsh
  * Add changelog detail for earlier release v1.0.1</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1720008000">- Update to version 1.0.4:
  * fix: add ca-certificates in doggo-web
  * Updating canonical URL
  * Fix zsh completions
  * docs: add --rm in docker</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1727697600">- Update to version 1.0.5:
  * chore: upgrade deps
  * fix fishCompletion
  * update globalping client
  * update args
  * add support for --json, --short &amp;&amp; update docs
  * feat: integrate Globalping API for global network diagnostics
  * chore: document completions subcommand in --help output
  * Update README.md
  * fix: change DefaultResolvConfPath to var instead of const
  * fix(logger): Change log destination to stderr
  * Update README.md</changelog>
</package>
<package pkgid="35f37061d10d58c019a6f84351a270b6a2789b48b3dfe311998a58587900f6b19e45bd531fb04874295c51512513857cced1a0e88a7e49bd300a1a241382f52d" name="doggo-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="bp160.1.12"/>
  <changelog author="Alexandre Almeida &lt;me@aoalmeida.com&gt;" date="1696161600">- First release</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1697630400">- Use xz compression for vendor.tar
- Use obscpio instead of tar for disk storage efficency</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1697630401">- Packaging improvements:
  * Use subpackages for fish-completion and zsh-completion.
    Upstream currently has no bash completion scripts. Fish and zsh
    subpackages are marked Suggests: and not installed by default.
    If a bash-completion subpackage becomes available, we should
    install that by default.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Remove ldflags -X entries for upstream import path and version.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Use %%name macro where applicable to normalize common lines
    across Go app packages. Also makes renaming binary easier when
    required to handle package name conflict.
  * Remove bash loop for two paramaterized calls of go build.
    The loop technique is nice for large lists, but making the two
    go build calls explicit seems a better readability tradeoff.
  * Add sample API config as doc</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1698062400">- Packaging improvements:
  * Fix zsh-completion and fish-completion by not requiring
    zsh-completion and fish-completion and by supplementing the
    right package.
  * Fix fish-completion by using the .fish suffix when copying the
    completion file.</changelog>
  <changelog author="Eyad Issa &lt;eyadlorenzo@gmail.com&gt;" date="1719921600">- Update to version 1.0.2:
  * refactor: move main package to cmd/doggo for proper binary naming
- Update to version 1.0.1
  * fix: proper alignment of help text
  * ci: re-enable dependabot
  * ci: add npm caching
  * ci: goreleaser
  * ci: upgrade actions
  * refactor: replace logrus with slog
  * feat: add support for more platforms and targets
  * feat: add single install script
  * feat: add completions command
  * feat: add support for query flags
  * refactor: fix loading of nameservers
  * chore: upgrade deps
  * fix: send proper json error responses
- Update to version 1.0.0:
  * feat: add bash completion support
  * feat: add completions command
  * Fix syntax error in ZSH completion
  * Update ZSH completion to include all current options
  * added tls client configuration for doh and doq</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921601">- Update to version 1.0.3:
  * chore: upgrade deps
  * chore: fix help text
  * docs: specify correct usage of timeout flag
  * feat: add ctx cancellation while resolving records
  * feat: Refactor DNS resolvers for concurrent lookups
  * feat: add support for common query types
  * chore: fix docs link
  * chore: revamp README</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1719921602">- Packaging improvements:
  * Add subpackage web providing web browser UI for making DNS queries
  * Add Group: Productivity/Networking/DNS/Utilities
  * Update License: to GPL-3.0 instead of GPL-3.0-only
  * Update to BuildRequires: golang(API) &gt;= 1.22 matching go.mod
  * Add Recommends: %{name}-bash-completion
  * Completions subpackages for fish, zsh remain as Suggests:
  * Reorder completions install ops consistently: bash, fish, zsh
  * Add changelog detail for earlier release v1.0.1</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1720008000">- Update to version 1.0.4:
  * fix: add ca-certificates in doggo-web
  * Updating canonical URL
  * Fix zsh completions
  * docs: add --rm in docker</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1727697600">- Update to version 1.0.5:
  * chore: upgrade deps
  * fix fishCompletion
  * update globalping client
  * update args
  * add support for --json, --short &amp;&amp; update docs
  * feat: integrate Globalping API for global network diagnostics
  * chore: document completions subcommand in --help output
  * Update README.md
  * fix: change DefaultResolvConfPath to var instead of const
  * fix(logger): Change log destination to stderr
  * Update README.md</changelog>
</package>
<package pkgid="a612518cce705213c1b103c5626fe40b06bd68e93eea5c39a6bf8859999b1a55abf438cd0805c8a1704b2733538adca347c38e6bb79000789f0740dc6186e914" name="dolly" arch="x86_64">
  <version epoch="0" ver="0.64.2" rel="bp160.1.12"/>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1612267200">- fixed the Makefile to support position independent code</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612785600">- Remove obsolete specfile constructs. Depersonalize descriptions.</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1612872000">- updated to v0.63.1 which builds on i586
- disabled pandoc for i585</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1623067200">- updated to v0.63.4 which builds with gcc-11</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1633608000">- update to version 0.63.5 (improve help usage information) (JSC#SLE-22050)
- tarball is now bzip2 compressed</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1634126400">- fix hostname resolution is not done in case of usage
  of an external configuration file (bsc#1191613)
- fix -Werror=format-security
- update to version 0.63.6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1636459200">- Minor grammar fix in description.</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1637150400">- add dolly firewall config (JSC#SLE-22730)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1648036800">-  updated to dolly 0.64.1 which adds dolly as a service and/or
  activation through a socket</changelog>
  <changelog author="Antoine Ginies &lt;aginies@suse.com&gt;" date="1648036801">- update to dolly version 0.64.2: bugs and typo fixes, dolly is
  less verbose by default</changelog>
</package>
<package pkgid="d253d2a3dd8fd6da8840e1134dd80d01944997cff94331ae33f10c5ff7180b3907dbbc80f55c2a295a76533198d06d09dd59af0f18b50fec3f2d592112fe53fd" name="dolphin" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1734609600">- Add upstream fixes:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch (kde#497021)
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch (kde#497555)
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch (kde#495878)</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1735473600">- fix super user mode in right click menu</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Fix focus changing when unminimising on X11 (kde#497803)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
- Drop patches, merged upstream:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Clear forward action popup menu before adding history actions
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix crash when opening new tab with search (kde#500101)
  * kitemrolesupdater: fix size of icon when there is an overlay (kde#499644)
  * Viewproperties: prevent loosing view settings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * kstandarditemlistwidget: make overlay icons independant of preview size (kde#500428)
  * Fix crash when opening new tab with search (kde#500101)
  * dolphinview: Add widget parameter to elided QToolTip::showText (kde#500009)
  * kitemlistkeyboardsearchmanager: smarter search start position (kde#422951)
  * Removed unused imports to QUuid,quuid (kde#197009)
  * Added code for a "Rename Tab" feature. (kde#197009)
  * implement shortcut action for file creation (kde#462899)
  * Ignore diacritical marks for keyboard search (kde#482394)
  * Refactor Overlay Handling (kde#497372)
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)
  * Improve trash context menu UI (kde#498132)
  * Elide file names in the middle again (kde#497664)
  * Fix focus changing when unminimising on X11 (kde#497803)
  * Update copyright to 2025 (kde#474515)
  * Mirror details view mode for right-to-left languages (kde#449211)
  * Have special keyboard controls in selection mode (kde#458091)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
  * Make "open path" and "open path in new tab" scroll to the selected item (kde#495613)
  * DolphinTabPage: Update container view url on redirection (kde#496414)
  * DolphinViewContainer: set searchPath on redirect, check for connected urlNavigator (kde#496387)
  * DolphinView: beginAnchoredSelection after setSelected in selectNextItem (kde#495371)
  * natural sort: exclude extension when comparing filenames (kde#416025)
  * generalviewsettingspage: Use qobject_cast instead of static_cast (kde#492741)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * DolphinStatusbar: Fix background and margins for non-Breeze styles
  * DolphinView: If contextmenu is requested, abort twoClicksRenaming (kde#503185)
  * dolphinui: Set view_mode action to low priority (kde#501498)
  * Use dolphin icon for dolphin windows
  * KStandardItemList: have emblem when hovering
  * Fix session restore (kde#502770)
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * viewproperties: Fix leaking file descriptors (kde#505215)</changelog>
</package>
<package pkgid="8f1632b95877a639e01f359c50a22b6be536f07ef17333779884740eb304a3a17a69e6f374bc6347c55a97416fc3237508737766d529d89ffbfabc76ab8cda27" name="dolphin-devel" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1734609600">- Add upstream fixes:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch (kde#497021)
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch (kde#497555)
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch (kde#495878)</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1735473600">- fix super user mode in right click menu</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Fix focus changing when unminimising on X11 (kde#497803)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
- Drop patches, merged upstream:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Clear forward action popup menu before adding history actions
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix crash when opening new tab with search (kde#500101)
  * kitemrolesupdater: fix size of icon when there is an overlay (kde#499644)
  * Viewproperties: prevent loosing view settings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * kstandarditemlistwidget: make overlay icons independant of preview size (kde#500428)
  * Fix crash when opening new tab with search (kde#500101)
  * dolphinview: Add widget parameter to elided QToolTip::showText (kde#500009)
  * kitemlistkeyboardsearchmanager: smarter search start position (kde#422951)
  * Removed unused imports to QUuid,quuid (kde#197009)
  * Added code for a "Rename Tab" feature. (kde#197009)
  * implement shortcut action for file creation (kde#462899)
  * Ignore diacritical marks for keyboard search (kde#482394)
  * Refactor Overlay Handling (kde#497372)
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)
  * Improve trash context menu UI (kde#498132)
  * Elide file names in the middle again (kde#497664)
  * Fix focus changing when unminimising on X11 (kde#497803)
  * Update copyright to 2025 (kde#474515)
  * Mirror details view mode for right-to-left languages (kde#449211)
  * Have special keyboard controls in selection mode (kde#458091)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
  * Make "open path" and "open path in new tab" scroll to the selected item (kde#495613)
  * DolphinTabPage: Update container view url on redirection (kde#496414)
  * DolphinViewContainer: set searchPath on redirect, check for connected urlNavigator (kde#496387)
  * DolphinView: beginAnchoredSelection after setSelected in selectNextItem (kde#495371)
  * natural sort: exclude extension when comparing filenames (kde#416025)
  * generalviewsettingspage: Use qobject_cast instead of static_cast (kde#492741)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * DolphinStatusbar: Fix background and margins for non-Breeze styles
  * DolphinView: If contextmenu is requested, abort twoClicksRenaming (kde#503185)
  * dolphinui: Set view_mode action to low priority (kde#501498)
  * Use dolphin icon for dolphin windows
  * KStandardItemList: have emblem when hovering
  * Fix session restore (kde#502770)
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * viewproperties: Fix leaking file descriptors (kde#505215)</changelog>
</package>
<package pkgid="9aabea74d85080dc0f3c44238a0b54cf48885caf3879bcda38a4d0e3594c33c73cc0109a6c994167b64a08d6860b9a820fa48f4e51541f3bb89c07404c10a703" name="dolphin-part" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1734609600">- Add upstream fixes:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch (kde#497021)
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch (kde#497555)
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch (kde#495878)</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1735473600">- fix super user mode in right click menu</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Fix focus changing when unminimising on X11 (kde#497803)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
- Drop patches, merged upstream:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Clear forward action popup menu before adding history actions
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix crash when opening new tab with search (kde#500101)
  * kitemrolesupdater: fix size of icon when there is an overlay (kde#499644)
  * Viewproperties: prevent loosing view settings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * kstandarditemlistwidget: make overlay icons independant of preview size (kde#500428)
  * Fix crash when opening new tab with search (kde#500101)
  * dolphinview: Add widget parameter to elided QToolTip::showText (kde#500009)
  * kitemlistkeyboardsearchmanager: smarter search start position (kde#422951)
  * Removed unused imports to QUuid,quuid (kde#197009)
  * Added code for a "Rename Tab" feature. (kde#197009)
  * implement shortcut action for file creation (kde#462899)
  * Ignore diacritical marks for keyboard search (kde#482394)
  * Refactor Overlay Handling (kde#497372)
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)
  * Improve trash context menu UI (kde#498132)
  * Elide file names in the middle again (kde#497664)
  * Fix focus changing when unminimising on X11 (kde#497803)
  * Update copyright to 2025 (kde#474515)
  * Mirror details view mode for right-to-left languages (kde#449211)
  * Have special keyboard controls in selection mode (kde#458091)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
  * Make "open path" and "open path in new tab" scroll to the selected item (kde#495613)
  * DolphinTabPage: Update container view url on redirection (kde#496414)
  * DolphinViewContainer: set searchPath on redirect, check for connected urlNavigator (kde#496387)
  * DolphinView: beginAnchoredSelection after setSelected in selectNextItem (kde#495371)
  * natural sort: exclude extension when comparing filenames (kde#416025)
  * generalviewsettingspage: Use qobject_cast instead of static_cast (kde#492741)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * DolphinStatusbar: Fix background and margins for non-Breeze styles
  * DolphinView: If contextmenu is requested, abort twoClicksRenaming (kde#503185)
  * dolphinui: Set view_mode action to low priority (kde#501498)
  * Use dolphin icon for dolphin windows
  * KStandardItemList: have emblem when hovering
  * Fix session restore (kde#502770)
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * viewproperties: Fix leaking file descriptors (kde#505215)</changelog>
</package>
<package pkgid="589c1d15459b0dc842acb053f794de1906bd8222392bf1644279d3bcc446b2da5c8c06908e5c431da97cb470c58d892cc764fe125a818826725011f704a0156e" name="dolphin-part-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1734609600">- Add upstream fixes:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch (kde#497021)
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch (kde#497555)
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch (kde#495878)</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1735473600">- fix super user mode in right click menu</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Fix focus changing when unminimising on X11 (kde#497803)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
- Drop patches, merged upstream:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Clear forward action popup menu before adding history actions
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix crash when opening new tab with search (kde#500101)
  * kitemrolesupdater: fix size of icon when there is an overlay (kde#499644)
  * Viewproperties: prevent loosing view settings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * kstandarditemlistwidget: make overlay icons independant of preview size (kde#500428)
  * Fix crash when opening new tab with search (kde#500101)
  * dolphinview: Add widget parameter to elided QToolTip::showText (kde#500009)
  * kitemlistkeyboardsearchmanager: smarter search start position (kde#422951)
  * Removed unused imports to QUuid,quuid (kde#197009)
  * Added code for a "Rename Tab" feature. (kde#197009)
  * implement shortcut action for file creation (kde#462899)
  * Ignore diacritical marks for keyboard search (kde#482394)
  * Refactor Overlay Handling (kde#497372)
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)
  * Improve trash context menu UI (kde#498132)
  * Elide file names in the middle again (kde#497664)
  * Fix focus changing when unminimising on X11 (kde#497803)
  * Update copyright to 2025 (kde#474515)
  * Mirror details view mode for right-to-left languages (kde#449211)
  * Have special keyboard controls in selection mode (kde#458091)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
  * Make "open path" and "open path in new tab" scroll to the selected item (kde#495613)
  * DolphinTabPage: Update container view url on redirection (kde#496414)
  * DolphinViewContainer: set searchPath on redirect, check for connected urlNavigator (kde#496387)
  * DolphinView: beginAnchoredSelection after setSelected in selectNextItem (kde#495371)
  * natural sort: exclude extension when comparing filenames (kde#416025)
  * generalviewsettingspage: Use qobject_cast instead of static_cast (kde#492741)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * DolphinStatusbar: Fix background and margins for non-Breeze styles
  * DolphinView: If contextmenu is requested, abort twoClicksRenaming (kde#503185)
  * dolphinui: Set view_mode action to low priority (kde#501498)
  * Use dolphin icon for dolphin windows
  * KStandardItemList: have emblem when hovering
  * Fix session restore (kde#502770)
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * viewproperties: Fix leaking file descriptors (kde#505215)</changelog>
</package>
<package pkgid="84f89c93f89e79c39d6cda1552133ac44e4352d28fc8356daa0cce0de57e3a3fd024c16e2c91ab230d48c99d71c2314eeb56e0f7ca0e0cc2e171d453912a3fba" name="dolphin-plugins" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * git: Allow pushing new branches
  * Apply 1 suggestion(s) to 1 file(s)
  * git: Use --force-with-lease for push instead of --force</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="027ed34530e5d5760e1e680f9a2883639221f8a4091bf4fd5aafe8d8ebc1ae8ec63cc3fbf4498b3317792cf27aa98360f19d4ac808168fd6c58f40df94781768" name="dolphin-plugins-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * git: Allow pushing new branches
  * Apply 1 suggestion(s) to 1 file(s)
  * git: Use --force-with-lease for push instead of --force</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- No code change since 25.04.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="de3728ca00835a44e857704ad02d421d61f9b7f93d1c2174ff6e3bd30118e1c234695b8d6e7358920dcca01b8752b72973ec0f1d119d51ea2fcc738472f76cfb" name="dolphin-zsh-completion" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1734609600">- Add upstream fixes:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch (kde#497021)
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch (kde#497555)
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch (kde#495878)</changelog>
  <changelog author="hui &lt;sturm-fr@web.de&gt;" date="1735473600">- fix super user mode in right click menu</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * Fix focus changing when unminimising on X11 (kde#497803)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
- Drop patches, merged upstream:
  * 0001-DolphinViewContainer-make-sure-searchbox-is-initiali.patch
  * 0001-dolphinview-Update-thumbnail-on-filename-change.patch
  * 0001-ViewProperties-Return-nullptr-if-viewPropertiesStrin.patch</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Clear forward action popup menu before adding history actions
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * Fix crash when opening new tab with search (kde#500101)
  * kitemrolesupdater: fix size of icon when there is an overlay (kde#499644)
  * Viewproperties: prevent loosing view settings</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * kstandarditemlistwidget: make overlay icons independant of preview size (kde#500428)
  * Fix crash when opening new tab with search (kde#500101)
  * dolphinview: Add widget parameter to elided QToolTip::showText (kde#500009)
  * kitemlistkeyboardsearchmanager: smarter search start position (kde#422951)
  * Removed unused imports to QUuid,quuid (kde#197009)
  * Added code for a "Rename Tab" feature. (kde#197009)
  * implement shortcut action for file creation (kde#462899)
  * Ignore diacritical marks for keyboard search (kde#482394)
  * Refactor Overlay Handling (kde#497372)
  * Icons: when adding overlays pass in the output size (kde#498211)
  * information panel: scale according dpr (kde#497576)
  * Improve trash context menu UI (kde#498132)
  * Elide file names in the middle again (kde#497664)
  * Fix focus changing when unminimising on X11 (kde#497803)
  * Update copyright to 2025 (kde#474515)
  * Mirror details view mode for right-to-left languages (kde#449211)
  * Have special keyboard controls in selection mode (kde#458091)
  * dolphinview: Update thumbnail on filename change (kde#497555)
  * ViewProperties: Return nullptr if viewPropertiesString is empty (kde#495878)
  * DolphinViewContainer: make sure searchbox is initialized before setSearchPath (kde#497021)
  * Make "open path" and "open path in new tab" scroll to the selected item (kde#495613)
  * DolphinTabPage: Update container view url on redirection (kde#496414)
  * DolphinViewContainer: set searchPath on redirect, check for connected urlNavigator (kde#496387)
  * DolphinView: beginAnchoredSelection after setSelected in selectNextItem (kde#495371)
  * natural sort: exclude extension when comparing filenames (kde#416025)
  * generalviewsettingspage: Use qobject_cast instead of static_cast (kde#492741)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * DolphinStatusbar: Fix background and margins for non-Breeze styles
  * DolphinView: If contextmenu is requested, abort twoClicksRenaming (kde#503185)
  * dolphinui: Set view_mode action to low priority (kde#501498)
  * Use dolphin icon for dolphin windows
  * KStandardItemList: have emblem when hovering
  * Fix session restore (kde#502770)
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- Changes since 25.04.2:
  * viewproperties: Fix leaking file descriptors (kde#505215)</changelog>
</package>
<package pkgid="348f098ed7c2bb593a1f000b5cedd112b77fb56ec6a93dfb5cf3f813504c4d62c8cbee894700db1c556d6caabd41cfea88841035e341867b0fd3bb5d9eacdf24" name="dom2-core-tests" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="bp160.1.11"/>
  <changelog author="mvyskocil@suse.cz" date="1220356800">- Initial packaging ov 0.0.1 (based on Jpackage 1.7)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1221134400">- Used a gcj instead of java-devel to prevent of an bootstrapping problem with
  openjdk</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: W3C
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377259200">- disable javadoc subpackage
  * drop dom2-core-tests-explicit-javadoc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- remove org/w3c/domts/JUnitRunner.java not compatible with junit 4</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't hardcode dependency on java-gcj-compat
  * use java-devel &gt;= 1.6 instead
- Specify java source and target levels 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="71dca9ee8db3c98eb9a6f49322c88f00d2211f223a3fa10307bb28e8652939ea3043246001a338f57beb006033cf43139818d037007345aacdbd1e6cb3018e4a" name="dom4j" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="056ded254f4c5b2edda2c93732c64df69ab1dd25fec98dabf9be45640af96b7e459b2cdd5ea03dcd7a452e60a74a4440f73df3ca7b873e1c0337d42cdc90c84c" name="dom4j" arch="noarch">
  <version epoch="0" ver="2.1.5" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1777032000">- Upgrade to upstream version 2.1.5
  * Changes:
    + Bump gradle from 6.3 to 8.13 (fixes #187)
    + Remove unnecessary constant conditional
    + Remove misleading no-op lines incorrectly trying to disable
    external entities</changelog>
</package>
<package pkgid="5dd4f08202c03c09e42f15d75e04be31186c747acec737e91ad7fe8d087746d444534b66510d9b6b1166b06e2f0d00f244b1f46d9ef18cf7a0ff2ce17f8665b4" name="dom4j-bootstrap" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="9afac0aa3f0d379863f0932775da8fd1cb0eced12b40c67cf27538b85f105a3f66f5e933059ab3856170fc4bbf820b313d0a9510e63ccb89f0bee8bf4c31eeff" name="dom4j-bootstrap" arch="noarch">
  <version epoch="0" ver="2.1.5" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1777032000">- Upgrade to upstream version 2.1.5
  * Changes:
    + Bump gradle from 6.3 to 8.13 (fixes #187)
    + Remove unnecessary constant conditional
    + Remove misleading no-op lines incorrectly trying to disable
    external entities</changelog>
</package>
<package pkgid="6f008c811891d3d9f214fc0ab4d7c7fb30b8b875a62850ded09039afd6acaf04c3164923b7162d40453dbde8b875c4daa0b570d700051925416672224c6c7a52" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="be39078e6cacf3c10b525da3588980245875eea415194f8739e858246ecaf1d67b4970fcb8f0711d98c10899fdf245c18e6f94e71e3cda819fb4ccd93a341cc6" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="2.1.5" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1777032000">- Upgrade to upstream version 2.1.5
  * Changes:
    + Bump gradle from 6.3 to 8.13 (fixes #187)
    + Remove unnecessary constant conditional
    + Remove misleading no-op lines incorrectly trying to disable
    external entities</changelog>
</package>
<package pkgid="d6aaa2cafac384295b307ffaf605c8577487bc0deff501e4dffa5b8a3fd0e31f3de8384ffcadcee2ea94b5b419b556d3b564fd8c7d27f5b1c4fef381dedfa27d" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="160000.2.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587124800">- Security fix: [bsc#1169760, CVE-2020-10683]
  * External Entity vulnerability in default SAX parser
  * Add dom4j-CVE-2020-10683.patch</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="6498993ebc048a9323b84b2f1df06e023c49861758a0a6dbfa3d23528a79b38b0293796750672f0faccd360c4472290c768cf40d88be105bf3943e8c48332a1f" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.5" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1647518400">- Add jaxb-api dependency for relevant distribution versions so that
  we can build with JDKs that do not include the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1648468800">- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1690200000">- Do not depend on jtidy, since it is not used during build</changelog>
  <changelog author="fstrba@suse.com" date="1692878400">- Upgrade to upstream version 2.1.4
  * Improvements and potentially breaking changes
    + Added new factory method
    org.dom4j.io.SAXReader.createDefault(). It has more secure
    defaults than new SAXReader(), which uses system
    XMLReaderFactory.createXMLReader() or
    SAXParserFactory.newInstance().newSAXParser().
    + If you use some optional dependency of dom4j (for example
    Jaxen, xsdlib etc.), you need to specify an explicit
    dependency on it in your project. They are no longer marked as
    a mandatory transitive dependency by dom4j.
    + Following SAX parser features are disabled by default in
    DocumentHelper.parse() for security reasons (they were enabled
    in previous versions):
    ° http://xml.org/sax/properties/external-general-entities
    ° http://xml.org/sax/properties/external-parameter-entities
  * Other changes:
    + updated pull-parser version
    + Reuse the writeAttribute method in writeAttributes
    + support build on OS with non-UTF8 as default charset
    + Gradle: add an automatic module name
    + Use Correct License Name "Plexus"
    + Possible vulnerability of DocumentHelper.parseText() to XML
    injection
    + CVS directories left in the source tree
    + XMLWriter does not escape supplementary unicode characters
    correctly
    + writer.writeOpen(x) doesn't write namespaces
    + concurrency problem with QNameCache
    + all dependencies are optional
    + SAXReader: hardcoded namespace features
    + validate QNames
    + StringIndexOutOfBoundsException in
    XMLWriter.writeElementContent()
    + TreeNode has grown some generics
    + QName serialization fix
    + DocumentException initialize with nested exception
    + Accidentally occurring error in a multi-threaded test
    + compatibility with W3C DOM Level 3
    + use Java generics
- Removed patches:
  * dom4j-1.6.1-bug1618750.patch
  * dom4j-CVE-2018-1000632.patch
  * dom4j-CVE-2020-10683.patch
  * dom4j-enable-stax-datatypes.patch
  * dom4j-javadoc.patch
  * dom4j-sourcetarget.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1692878401">- Make a separate flavour for a minimal dom4j-bootstrap package
  used to build jaxen and full dom4j
- Added patch:
  * 0001-no-jaxen-dom4.patch
  * for the bootstrap package, patch out the code that requires
    jaxen with dom4j support to build</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1698926400">- JPMS: Add the Automatic-Module-Name attribute to the manifest.</changelog>
  <changelog author="fstrba@suse.com" date="1707998400">- The license is actually Plexus</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1777032000">- Upgrade to upstream version 2.1.5
  * Changes:
    + Bump gradle from 6.3 to 8.13 (fixes #187)
    + Remove unnecessary constant conditional
    + Remove misleading no-op lines incorrectly trying to disable
    external entities</changelog>
</package>
<package pkgid="86e9d13a6912ab54bfad1bbdf52e0b8152deadd6961ddf04a19d9c9636b47b27c1d4332e92aac93bc2420e4fce40309f279f380bb9638aa2cc0137fd92a8e1e9" name="domtrip" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1779883200">- Initial packaging with version 1.5.1</changelog>
</package>
<package pkgid="b192a1f884cfb5748048af471e85b41f1706bf82a5d89e56699c621950c6553257ecc9d24c6aa688a0b0187e4985bb2dd05c8762f41c5aeb1ffda6dc0ef51052" name="domtrip-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="160000.1.1"/>
  <changelog author="fstrba@suse.com" date="1779883200">- Initial packaging with version 1.5.1</changelog>
</package>
<package pkgid="80ca54561f0084bcdbc413c66916100871d0c000eaf1036b2d26ac82d472f9ff6c347b93b46d839e3423fa18bd0d3f10684340fec52c20dc8293ff4ff4c46147" name="doomsday" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="bp160.1.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579435200">- Update to release 2.2.1.1
  * The built-in scripting language has gained wider integration
    in the engine internals.
  * Scripted mobj actions
  * A number of modding related improvements have been done for
    Heretic. For example: customizable menu labels, enhanced
    intermission screen, Values for ammo per shot, support for
    Hexen-like wall-bouncing missiles, and a script binding for
    starting an enemy’s attack.
  * Separate FOV for rendering player weapons
  * Doomsday now detects Freedoom v0.12.1.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1583409600">- Add -lminizip to doomsday-libs.diff to cure a linker error.
- Update to release 2.2.2
  * Doomsday Script improvements, Heretic modding, weapon
    field of view.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1585483200">- Add -DCMAKE_SKIP_RPATH</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597924800">- Use openGL ES 3 for aarch64 and %arm</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop recommendation for timidity, this backend is not selectable
  from the game.</changelog>
  <changelog author="Yevgeny Sliosarenko &lt;musicsuse@gmx.com&gt;" date="1615377600">- Updated to release 2.3.1
- What's new in 2.3.1:
  * This version improves support for vanilla DOOM render hacks and adds more script bindings to manipulate things in the map.
    DOOM render hacks. TNT: Evilution and The Plutonia Experiment use several render/map hacks to take advantage of quirks in the original DOOM renderer.
    Many of these effects are now supported (or fixed) in Doomsday.
    Examples: TNT MAP02 deep water, TNT MAP02 windows overlooking the deep water, TNT MAP09 transparent window, TNT MAP31 Arachnotrons inside pillars.
    Scripting. Several new Doomsday Script bindings were added, allowing access to game, player, and thing properties.
    In addition to spawning things, one can now list things by type, check their state and flags, and perform state changes on them.
    Things can also have an “On death” script that gets run when the thing dies. Bitwise operators are now available in scripts.
    Modding. Sprite renaming is supported via DeHackEd.
    In Heretic, ambient sound sequences can be redefined and new ones can be added via the Audio module.
    Changing the sequences is also possible during gameplay. The earthquake effect from Hexen is now also available in Heretic.
    It can be controlled via scripts.
    Renderer. Player HUD weapon models may specify a custom FOV value for rendering so that model authors have more control over the appearance, for instance to replicate a 2D sprite appearance more faithfully.
  * Patch release for 2.3 that fixes some incorrect behavior:
    Heretic: Sky textures are only partially visible.
    Hexen: Sky textures are sized incorrectly.
    Alignment of floor/ceiling textures whose size is not 64×64.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1624708800">- Drop unused launcher subpackage.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742644800">- Make build recipe POSIX sh compatible
- Use system assimp library [boo#1239917]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1769601600">- Add doomsday-gles.patch to fix a build failure on GLES3 platforms.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1769601601">- Disable ARM &amp; RISC-V builds, as the program crashes on startup
  with SIGBUS.</changelog>
</package>
<package pkgid="e0977bd1018631d12dd3133e2ccc70f5e148df28c8ee9cf2f6b25c413c2ad4028b6f51a604f8759e1820782783c73d9df8bba3440a998d092c84638469baafb5" name="dos2unix" arch="x86_64">
  <version epoch="0" ver="7.5.2" rel="160000.2.2"/>
  <changelog author="waterlan@xs4all.nl" date="1507723200">- Update to 7.3.5
  * New option --allow-chown to allow file ownership change
    in old file mode.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569412800">- update to 7.4.1:
  * translation updates
  * code cleanup</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1602763200">- update to 7.4.2:
  * translation update
- add upstream signing key and verify source signature</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613044800">- Remove localized man directories from file list: Already provided
  by filesystem.</changelog>
  <changelog author="waterlan@xs4all.nl" date="1654430400">- update to 7.4.3:
  * translation update</changelog>
  <changelog author="ilya@ilya.cf" date="1654516800">- Added directory with localized man pages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- update to 7.4.4:
  * translation updates</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1684411200">- update to 7.5.0:
  * New option -e, --add-eol to add a line break to the last line
    if the isn't one
  * New option -O, --to-stdout to write to standard output</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1693396800">- update to 7.5.1:
  * Fix problem of converting a symbolic link target that is on
    another file system
  * Updated Chinese and Serbian translations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1706011200">- update to 7.5.2:
  * Dos2unix can print info about the line break type of the last
    line, or indicate there is none
  * Updated documentation about ASCII mode conversion</changelog>
</package>
<package pkgid="10be7b6719f5cfbbc5623649c26f6a8bfc105da4b610c925c91933fdb0920633998971fcab23b4edea12ff0d8dcd1656a1fed9e644d5b5298e5d89df291b8d81" name="dosbox" arch="x86_64">
  <version epoch="0" ver="0.82.2" rel="bp160.1.4"/>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1666612800">- Updated pkgconfig(slirp) &gt;= 4.7.0 dependency.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1672833600">- Updated to dosbox-staging 0.80.0
  * Replaced dosbox-staging-0.79.1-config.patch by dosbox-staging-0.80.0-config.patch.
  * Replaced dosbox-staging-0.79.1-name.patch by dosbox-staging-0.80.0-name.patch.
  * Added pkgconfig(SDL2_image), pkgconfig(xi) dependencies.
  * https://dosbox-staging.github.io/releases/release-notes/0.80.0</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1673092800">- Updated to dosbox-staging 0.80.1
  * Replaced dosbox-staging-0.80.0-config.patch by dosbox-staging-config.patch.
  * Replaced dosbox-staging-0.80.0-name.patch by dosbox-staging-name.patch.
  * Added pkgconfig(gl) dependencies.
  * Removed Provides/Obsoletes instructions for dosbox-translations subpackage.
  * https://dosbox-staging.github.io/releases/release-notes/0.80.1</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1707912000">- Updated to dosbox-staging 0.81.0
  * Changed files dosbox-staging-config.patch and dosbox-staging-name.patch.
  * Added python3 &gt;= 3.7 and pkgconfig(zlib-ng) dependencies.
  * https://dosbox-staging.github.io/releases/release-notes/0.81.0</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1708084800">- Changed file dosbox-staging-config.patch.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1715515200">- Updated to dosbox-staging 0.81.1
  * https://dosbox-staging.github.io/releases/release-notes/0.81.1</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1721563200">- Updated to 0.81.2
  * https://www.dosbox-staging.org/releases/release-notes/0.81.2</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1733832000">- Updated to 0.82.0
  * Changed files dosbox-staging-config.patch and dosbox-staging-name.patch.
  * https://www.dosbox-staging.org/releases/release-notes/0.82.0</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1743768000">- Updated to 0.82.1
  * https://www.dosbox-staging.org/releases/release-notes/0.82.1</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1750248000">- Updated to 0.82.2
  * Changed dosbox-staging-name.patch.
  * https://www.dosbox-staging.org/releases/release-notes/0.82.2</changelog>
</package>
<package pkgid="6331766b88cb7c80eb7a04c5c28e35aa05fb90b8b9ed3dd4cdb2fedab93401b65fe66c0721b75019d834d44e0d083156a7083bd927cf6af568015f227a4701f7" name="dosemu" arch="x86_64">
  <version epoch="0" ver="1.4.0.1.r2065" rel="bp160.1.11"/>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove buggy glibc version check (dosemu-skip-glibc-test.patch)
- force GNU inline semantics for GCC5.</changelog>
  <changelog author="bwiedemann@suse.com" date="1495886400">- Add reproducible.patch to sort input files (boo#1041090)
  and to use gzip -n to make build fully reproducible</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1512475200">- Replace xorg-x11-devel build dependency for individual
  libraries.</changelog>
  <changelog author="bwiedemann@suse.com" date="1531483200">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1572436800">- Use -flto-partition=one in order to make top-level assembly
  working with LTO.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1579694400">- add dosemu-LTO-fix.patch (bnc#1160098)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1654603200">- Replace SDL-devel BuildRequires with pkgconfig(sdl): allow to use
  sdl12_compat as an alternative.
- Run spec-cleaner: align spec file layout with openSUSE standards.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658404800">- Remove old specfile constructs and all the things pre-15.x;
  drop obsolete dosemu-flex.patch in the process.
- Trim descriptions, it's not supposed to be a manual.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1699876800">- Remove bin86 from BuildRequires.  It isn't used since a very
  long time now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="f122571357d76bf267faec7aa007293133d8de333b37eef8ca193218e0bc32c4cc951a6c7c0fabd5a95fec828222a362f467bfd5e09cf13a4f46b763580642c2" name="dosfstools" arch="x86_64">
  <version epoch="0" ver="4.2" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="lnussel@suse.de" date="1605009600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mcepl@cepl.eu" date="1610712000">- Update to version 4.1+git.1610658652.9443732 (bsc#1172863):
  * testsuite: Add mkfs test for 600MB large 4K disk
  * mkfs.fat: Do not show verbose messages not relevant to selected FAT size
  * mkfs.fat: Fix text of verbose messages
  * mkfs.fat: Fix limits for number of clusters
  * mkfs.fat: Fix calculation of FAT32 cluster size on non 512 bytes sector disks
  * mkfs.fat: Fix printing number of sectors
  * mkfs.fat: Align total number of sectors to be multiple of sectors per track
  * testsuite: Add referenceFAT32mbr test data to dist_check_DATA
  * manpages: Escape dot in fsck.fat manpage at the beginning of the line
  * fsck.fat: properly check for valid "." and ".." entries</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 4.2:
  * mkfs.fat: Allow to specify disk geometry via new -g option
  * fsck.fat: Add code for fixing first FAT cluster
  * fatlabel: Do not call parts of fsck repair procedure
  * Update warning message about lowercase labels
  * mkfs.fat: Read geom_start from sysfs
  * Add missing files into distribution tarball
- BREAKING CHANGES (boo#1188401):
  After fixing of bsc#1172863 in the last update, mkfs started to
  create different images than before. Applications that depend on
  exact FAT file format (e. g. embedded systems) may be broken in
  two ways:
  * The introduction of the alignment may create smaller images
    than before, with a different positions of important image
    elements. It can break existing software that expect images in
    doststools &lt;= 4.1 style.
    To work around these problems, use "-a" command line argument.
  * The new image may contain a different geometry values. Geometry
    sensitive applications expecting doststools &lt;= 4.1 style images
    can fails to accept different geometry values.
    There is no direct work around for this problem. But you can
    take the old image, use "file -s $IMAGE", check its
    "sectors/track" and "heads", and use them in the newly
    introduced "-g" command line argument.</changelog>
  <changelog author="dimstar@opensuse.org" date="1643889600">- Drop vim BuildRequires: the test suite passes without it present.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
</package>
<package pkgid="18c31e8d3a0d6625d7cc1ac6528c04453596c99250638a4377e3fd56500a8901ce4a4ae4865e8cedb44280858ffa365c8d0633f564c3ff18a93b9b56ca87541c" name="dotconf-devel" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="160000.2.2"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mgorse@suse.com" date="1316520000">- Switch URL to github.com/williamh and upgrade to v1.3 from there</changelog>
  <changelog author="mgorse@suse.com" date="1316520001">- Remove files that are no longer installed</changelog>
  <changelog author="mgorse@suse.com" date="1316606400">- Fix docs
- Fix package name to correspond with shared lib conventions, and obsolete
  old package</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Remove dependencies on main package, which only has docs</changelog>
  <changelog author="mpluskal@suse.com" date="1445169600">- Use url for source
- Move documentation to devel package
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1628683200">- Drop --with-pic, as it has no effect with --disable-static.
- Trim filler wording from descriptions.</changelog>
  <changelog author="andrea.manzini@suse.com" date="1713268800">- Update to version 1.4.1
  * fix possible buffer overflows in get_path and dotconf_get_next_line
- fixed package group
- added empty %check section (no unit tests in the project)</changelog>
  <changelog author="andrea.manzini@suse.com" date="1713700800">- removed empty useless %check section</changelog>
</package>
<package pkgid="7bf1c548bf99db132a865cd53181e25e7128efd1bf118909b8bff1d775165c6ad754c0180d117091645435949e66a7a788a824b082dd3e3ef62c790accc31c10" name="double-conversion-devel" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1500033600">- Fix RPM groups.
  Slightly trim/compact descriptions.</changelog>
  <changelog author="schwab@suse.de" date="1551355200">- Update to version 3.0.3
  * Support RISC-V
  * Bug fixes
- Switch to cmake
- Use %license</changelog>
  <changelog author="toddrme2178@gmail.com" date="1563796800">- Update to version 3.1.5 jsc#ECO-1190, jsc#SLE-11474
  * Fix `0x` for string-&gt;double conversion when Hex Floats are allowed.
    Avoid integer overflow when exponents for hex floats were too big.
    Update version number.
  * Fixed warning in gcc4.9.
  * Merged changes to install libraries in the correct place when
    using 64-bit libraries.
  * Use relative includes in the library. This shouldn't have any visible effect
    for consumers of the library.
  * Fix typo in test.
  * Fix separator characters when they they don't fit into 8 bits.
  * Check correctly for _MSC_VER.
  * Allow the library to be compiled for Emscripten.</changelog>
  <changelog author="tchvatal@suse.com" date="1580990400">- Use proper cmake calls
- Do not pull in py2 that is EOL but use python3 for build</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 3.1.6:
  * Features some code cleanups.
  * Adds the following new architectures: loongarch, xtensa, nios2, e2k.</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 3.1.7:
  * Reintroduce macros, if DOUBLE_CONVERSION_NON_PREFIXED_MACROS is set
  * Also add support for Synopsys ARC64 architecture</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 3.2.0:
  * Fix quiet NANs on MIPS* and PA-RISC architectures.</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 3.2.1
  * Disable quiet nan test on windows
  * Test on all platforms.
  * Fix warnings on Windows
  * Run ctests first.
  * Give shared-lib option and test install
  * Install Windows debbuger (pdb) files.
  * Add a cast to silence a signedness conversion warning.
  * Issue #184 : Fixed all -Wzero-as-null-pointer-constant warnings</changelog>
  <changelog author="dmueller@suse.com" date="1687176000">- update to 3.3.0:
  * Fix some compile warnings in Visual Studio
  * Set permissions for github workflows
  * Add flags to control trailing decimal and zero in exponent
    form when input has one significant digit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743854400">- update to 3.3.1:
  * Add _ITERATOR_DEBUG_LEVEL=2 and _DEBUG defines
  * Build system and CI tweaks
  * Add some missing headers</changelog>
</package>
<package pkgid="a688790a292f3dbe16f8172f3db71f79ba8f86a07b3e2bb950c31f3eb36e49c480d70720d6c365a8ef1df2417082cbd660a9463666aa536193a1d587068622b9" name="dovecot" arch="noarch">
  <version epoch="0" ver="2.4" rel="160000.2.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1563969600">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="kukuk@suse.com" date="1594814400">- Remove unused systemd requires/defines.</changelog>
  <changelog author="kukuk@suse.com" date="1604577600">- Use macro for systemd-tmpfiles call
- Pre-Require shadow if we use it in %pre</changelog>
  <changelog author="kukuk@suse.com" date="1605268800">- Check first if they exist before creating user and group accounts</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1618574400">- Refreshed spec-file via spec-cleaner and manual optimization.
  * Removed file dovecot.init (droped SystemV support).
  * Added parameter -p to all install command in spec-file.
  * Added %{name} macro wherever possible.</changelog>
  <changelog author="varkoly@suse.com" date="1619006400">- (bsc#1185074) /var/run in /usr/lib/tmpfiles.d/dovecot.conf is
  deprecated, please use /run instead</changelog>
  <changelog author="opensuse@dstoecker.de" date="1644840000">- Fix changelog and permissions</changelog>
  <changelog author="mrueckert@suse.de" date="1737720000">- update to 2.4
  Add unit files from 2.4</changelog>
  <changelog author="mrueckert@suse.de" date="1737720001">- Add config files for dovecot 2.4</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Recommend dovecot24
- Dovecot misses many configuration files (bsc#1242687)
  Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  On dovecot 2.4 we only provides one simple configuration file.</changelog>
</package>
<package pkgid="f3369d75e9d1bb3032f24f0519c468f9d9c75c39cbd51ac0a404c38eeb0e385dc576df1238c4f4214b360294d5f14e8eb4dd1cac0a8dbf471fa9a94228aab9ba" name="dovecot24" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="9a33b5cf8c25e9203ae441d333f29e88602e66cfe7ba4183b2e65e2bcfc63cf1fa94925b2aaaac15e51b1e2600abe27d926e0f5a93d8b4d108e76aee8e1b4454" name="dovecot24" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="8625e82ecee201a6e98fa04329749feeb1177de2aa466c5f472ba887e1e8650a13cb918cd0c7921b73ef4ddcbb067355fe37f8438ed7570b589af0803b0d0a4b" name="dovecot24" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="e6aa37d86fe4459e68edc459e7b6191a63b236f8f990b6a9d06d0778e9a82981dc3a616248541754d710bdced95a58eddb12c23101f0f478b004e3406c1eb6f8" name="dovecot24" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="0fefff711b9fa10c1bd824c99b9590c03ccc9f0b329e744191ac047ed1db9398590680fe529a472e97410a2b3ad7f39f0ce0270677dcdd9244c879ead636f989" name="dovecot24-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="50dde717246a256a397d95a606f67a09435faac43bfa9c66249febd8989f832e4433851103069bee2eebf3fba4e2749e5aafc916c645631dfeaf86596d74a465" name="dovecot24-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="0a7ff044dcdade979677d4f57a8d3a5bb4f5046ccc8029d82bb8cf159158e313e73eef7d320ff94215fc4328131819c0eeb9b5e51230dfacf39792559a87f437" name="dovecot24-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="454b75ac535a1e42a13206b15376e0a769fcb40b6045311ff76f7bb80a412c7af05e16dcf95ceaa5fb81213e16a527dbcadb5ec5d6a3cc6d3c1a0fd94cbef1ad" name="dovecot24-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="cac63cd95187a260082d847a400e7af8e6994de3e85ef55a6cbfb68db7cc080d13ea8c03113a3a2e0d2da0bebf0d00a5c0d5e786c175fe800e305eed739d46eb" name="dovecot24-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="20233806ed6d8e095c5c58037b22a5e68a9de11591108ea4f6d6f3cf6dbab4d3ff52dfa696e000da010e64f0365087a19e0288f92cbf4e804d17911e48a3a675" name="dovecot24-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="6c0a4fcf33e31fcdb39c0961153f9b749fb44c721758bf5f999195de7fbe1794120d4494fb6aef076db1526eea6315f2e103fc519cd3a81286c37ffb07ae7433" name="dovecot24-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="2421f890b4c05e16073b2dcf2c02da4c7e8330988f2b473d359437cd498e6de2306c99be2038b50b52b4f32a784cd09c8580b673057f215fc1f184764b39b6a0" name="dovecot24-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="04c5859ab62e33019de7965bb66536af9b4fa8f046e7aeab5064173eb76f06b4daefcc395c65cedb66b689c90b7f00405c9a4ed85d862a712a4b51f92f69b267" name="dovecot24-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="3d4458e0a4b3bcb148c8c2afdd4a66e7ceec121719ede4d64274852836f4d40181f0271ac1c37b0aa62e162664bb160788b9b4da6edeed38061572a1df0da5e7" name="dovecot24-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="fd14e502dba16c50afe5031ffb93d2aa95dbde0bf641dcb70a1e798a9e7aa4879dd3ba141a5b55b1781f3ba8cfc58be62efb99c367dab7bedad6150f4c5be089" name="dovecot24-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="6e98ac3e2a29178efb9d42e669405d50c870c5ca75f01e33309f3f0b2b8bf02de47ff7c61f2d79f28a72221d1e9a6d4a45d7c70cecd3b38bbb64309d873eb94f" name="dovecot24-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="235b59938366e6fb91a67e2fb6dfdf305a21540f3a10cc753465e11703e1f6561a1c316566fa30feeeb2edade42a6619aed96749da486d29b8792f2abef62995" name="dovecot24-devel" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="7c95764b43652ea3a55c08c868804e9b2e2f4aeb01bb38ecec133e6c5b8f4aef7d9b1ad24acf0690152beeba51c6ea17fdf82bfd877907973ab3156a2757e950" name="dovecot24-devel" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="1c0527ac326c8ef28fc4f3bc212fabeb8d3373bc411220062ff8bc1bd31ed8674e277170f657abb8d11e0e7ebe28c1a58ef5cf5607d26bcdcdfbb7c04cd219bd" name="dovecot24-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="be933831804a3d1a78f41121a89fa39bbb14705d12fb52bd5208b1b98601c1a17ace18128a880e8f789fe0aa216224cda82559ee2fd00783cb9414ab6cf4e4fe" name="dovecot24-devel" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="caaebcbcb4dac322ab19424ab83ace63fa2aeadf62f1cec0d9cbd31b3240f4cadcf8d137f13c8eb9a4f1c947dd60821408bf3630e1ad82329cd33e7fa689929c" name="dovecot24-fts" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="3def8671e084a1e44e1dc0ff8c9b1e0869620156da681e1b9cd023ea9ee034e8dd7a6d60dbfbb5a9c1d8a6c949b262c3ae0ae791ce09b76fefd2e7ffceddb4fd" name="dovecot24-fts" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="d7cd02bec318752e0b1fe12fc22a42f447e291b6c9aa51240f3c6155c716ff6c4bbacd50dbda88a2424b7d50036885f4288f17089fbfe0711673f1be06a8a339" name="dovecot24-fts" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="3551887db64b6647da3eb88236abc98eb35270f69b220b1271790a935abe68e0803ee3cae65fe2bddc9f7dfe9c2c69be8752e6c7eec4ec042360ea92a3735102" name="dovecot24-fts" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="eee575fff359f327f671d7d7948fe476267ea6875b7b24efc42c6674d7cb8253c87c506a6c06e396bb21ca5dc162e923da1d0f3d2d9270ede7740d5f8b5b5cc9" name="dovecot24-fts-flatcurve" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="8a17a99c7648062688c1cb6a6b8c03c0de1be76586b138ff72cd2ec66a3f0baac328184bae0719cf49bf78531fd2811670ee982f890e46497f15ce4ffe1eca58" name="dovecot24-fts-flatcurve" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="0020e29651b234adf538e4f287a6c8d48986db3e07d70a17b2f03bb9d7b9df39270f5fd0a8951a1c3f0a4f08deeab6a6702009cbf7b8e62edabc470f65706df5" name="dovecot24-fts-flatcurve" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="d0f88ffa999aa7be262e600f17568428d85c2280520f69db17880c48d6c28e7499c187dd6a3ce4a8e1d75fbcb10776a7d43f1126c1958b7e4862aa0f7cfd963d" name="dovecot24-fts-flatcurve" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="3db9fc8490bbf4af2c39a92416b30b380b83d9858982237f8b291bca8cdce541d42b5c4a4b590be7f1d28192d8db4507ce56b885fd0fe5b386c607d62ee3b78b" name="dovecot24-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="160000.3.2"/>
  <changelog author="mrueckert@suse.de" date="1738843200">- make apparmor conditional more readable</changelog>
  <changelog author="varkoly@suse.com" date="1740571200">- Remove not used macro</changelog>
  <changelog author="varkoly@suse.com" date="1740657600">- Adapt dependency for SLES.</changelog>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
</package>
<package pkgid="b4d692435c2277faa653794b7021330a512e18baa1fa40940726fdcebcdb6f8639dd3fddfb46af1b3b52d7c58a0aa4b76cff82c3782f5d64eecaaa3c67c167e7" name="dovecot24-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="160000.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1743163200">- update to 2.4.1
  * auth: Change unix_listener/auth-userdb/group = $SET:default_internal_group
    This change needs dovecot_config_version=2.4.1.
  * auth: lua - Remove support for single string result.
  * imap: Unconditionally advertise SPECIAL-USE capability.
  * lib-dcrypt: Install dcrypt_openssl.so into dovecot modules directory.
  * lib-master: For glibc, default MALLOC_MMAP_THRESHOLD_=131072.
  * lib-storage: Change default mail_cache_fields to:
    hdr.date hdr.subject hdr.from hdr.sender hdr.reply-to hdr.to
    hdr.cc hdr.bcc hdr.in-reply-to hdr.message-id
    date.received size.virtual imap.bodystructure mime.parts hdr.references
    hdr.importance hdr.x-priority hdr.x-open-xchange-share-url
    pop3.uidl pop3.order. This change needs dovecot_config_version=2.4.1.
  * lib-var-expand: Use moduledir instead of pkglibdir for crypt.
  * lmtp: Change the default lmtp_user_concurrency_limit to 10.
    This change needs dovecot_config_version=2.4.1.
  * lmtp: Change the default service_restart_request_count to 1.
    This change needs dovecot_config_version=2.4.1.
  + auth: Allow configuring passdb/userdb sql to use auth-workers.
  + config: Add default group @mailbox_defaults = english.
  + config: Improve "Unknown setting" error with more details and
    suggestions.
  + doveconf: Add -U parameter to ignore unknown settings in config file.
  + fts-flatcurve: Support lock files in VOLATILEDIR.
  + imap-acl: Add support for the IMAP LIST-MYRIGHTS capability (RFC 8440).
  + imap-client: Support ANONYMOUS authentication.
  + imap: Implement support for the REPLACE capability.
  - Many bugs have been fixed.</changelog>
  <changelog author="varkoly@suse.com" date="1743854400">- Fix bsc#1240399 dovecot24 has incomplete config.
  Ignore the broken config in the sources and deliver a minimal
  configuration for the system users.</changelog>
  <changelog author="varkoly@suse.com" date="1746705600">- Dovecot: /etc/dovecot/conf.d/ doesn't exist after installing dovecot
  (bsc#1242774)
  Dovecot misses many configuration files (bsc#1242687)
  Remove list of not delivered files
- dovecot fails to build (bsc#1242418)
  Do not use libunwind on s390x</changelog>
  <changelog author="paul.zirnik@suse.com" date="1748001600">- dovecot gssapi authentication fails when starting with empty auth data
  (bsc#1243489)
  dovecot-fix-gssapi.patch applied to fix gssapi</changelog>
  <changelog author="varkoly@suse.com" date="1750939200">- Update to actual version (Fri May 30 17:05:02 2025) in main branch to fix bsc#1245075
  [sle16][ppc64le][dovecot] dovecot service failed to start and coredump on ppc64le
  Turn off tests.
  * lib-auth: Fix linking due to duplicate symbols
  * lib-settings: test-settings - Refactor initialization of params3
  * lib-var-expand: Test hierarchical SETTINGS_EVENT_VAR_EXPAND_PARAMS
  * lib-settings: Pad initial var expand context with empty tables and providers when needed
  * Panic: file settings.c: line 1560 (settings_var_expand_init_add): assertion failed: (I_MAX(num_tables, num_provs) == num_ctx)
  * auth: db-oauth2 - Don't mix table and providers_arr
  * lib: test-file-cache - Ignore RLIMIT_AS enforcement failure
  * If the OS does not respect RLIMIT_AS here, lets skip all the rest of the tests.
  * auth: Fix using passdb_fields with passdb_ldap_bind_userdn=yes</changelog>
  <changelog author="varkoly@suse.com" date="1754395200">- [SLFO:Main] [SLES16.0] Please lower the libldap2 dependency for dovecot24
  (bsc#1247601)</changelog>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
</package>
<package pkgid="3194ca55da359bb0d98571ce7ad1fba09ed114b5a600137f1cb1b14d77e817f9d92b312d65a59d412e1fe610c2cf91e4fd705b731b7b151ca2afacc1de602725" name="dovecot24-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="160000.1.1"/>
  <changelog author="dimstar@opensuse.org" date="1755172800">- Enable build for all arches again. The build failure on 32bit has
  been addressed upstream.</changelog>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
</package>
<package pkgid="586c1f241b7b35853d45119c75a620ccfe1dc28789e507d06a911879f11c905b5e95598995540aa9459dafc21f9e8c9d2c4dfbf1abf8615fe65f7d88dd3970af" name="dovecot24-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="160000.1.1"/>
  <changelog author="giacomo.leidi@suse.com" date="1755864000">- Allow for %is_opensuse to be unset, following up to
  https://src.suse.de/products/SLFO/pulls/204 (bsc#1248485).</changelog>
  <changelog author="mrueckert@suse.de" date="1761739200">- Update dovecot to 2.4.2 (boo#1252839 CVE-2025-30189)
  - Critical bug fixes
  - CVE-2025-30189: Passdb oauth2 (not oauth2 mechanism), passdb
    passwd, passdb bsdauth, and userdb passwd drivers would cause
    users to be cached with same cache key when auth cache was
    enabled.
  - Changes
  - auth: Remove proxy_always field.
  - config: Change settings history parsing to use python3.
  - doveadm: Print table formatter - Print empty values as "-".
  - imapc: Propagate remote error codes properly.
  - lda: Default mail_home=$HOME environment if not using userdb
    lookup
  - lib-dcrypt: Salt for new version 2 keys has been increased to
    16 bytes.
  - lib-dregex: Add libpcre2 based regular expression support to
    Dovecot, if the library is missing, disable all regular
    expressions. This adds libpcre2-32 as build dependency.
  - lib-oauth2: jwt - Allow nbf and iat to point 1 second into
    future.
  - lib: Replace libicu with our own unicode library. Removes
    libicu as build dependency.
  - login-common: If proxying fails due to remote having invalid
    SSL cert, don't reconnect.
  - New features
  - auth: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp
    fields, see
    https://doc.dovecot.org/latest/core/summaries/settings.html#ssl_peer_certificate_fingerprint_hash
    for more information.
  - config: Add support for $SET:filter/path/setting.
  - config: Improve @group includes to work with overwriting
    their settings.
  - doveadm kick: Add support for kicking multiple usernames
  - doveadm mailbox status: Add support for deleted status item.
  - imap, imap-client: Add experimental partial IMAP4rev2
    support.
  - imap: Implement support for UTF8=ACCEPT for APPEND
  - lib-oauth2, oauth2: Add oauth2_token_expire_grace setting.
  - lmtp: lmtp-client - Support command pipelining.
  - login-common: Support local/remote blocks better.
  - master: accept() unix/inet connections before creating child
    process to handle it. This reduces timeouts when child
    processes are slow to spawn themselves.
  - Bug fixes
  - SMTPUTF8 was accepted even when it wasn't enabled.
  - auth, *-login: Direct logging with -L parameter was not
    working.
  - auth: Crash occured when OAUTH token validation failed with
    oauth2_use_worker_with_mech=yes.
  - auth: Invalid field handling crashes were fixed.
  - auth: ldap - Potential crash could happen at deinit.
  - auth: mech-gssapi - Server sending empty initial response
    would cause errors.
  - auth: mech-winbind - GSS-SPNEGO mechanism was erroneously
    marked as
  - not accepting NUL.
  - config: Multiple issues with $SET handling has been fixed.
  - configure: Building without LDAP didn't work.
  - doveadm: If source user didn't exist, a crash would occur.
  - imap, pop3, submission, imap-urlauth: USER environment usage
    was broken when running standalone.
  - imap-hibernate: Statistics would get truncated on
    unhibernation.
  - imap: "SEARCH MIMEPART FILENAME ENDS" command could have
    accessed memory outside allocated buffer, resulting in a
    crash.
  - imapc: Fetching partial headers would cause other cached
    headers to be cached empty, breaking e.g. imap envelope
    responses when caching to disk.
  - imapc: Shared namespace's INBOX mailbox was not always
    uppercased.
  - imapc: imapc_features=guid-forced GUID generation was not
    working correctly.
  - lda: USER environment was not accepted if -d hasn't been
    specified.
  - lib-http: http-url - Significant path percent encoding
    through parse and create was not preserved. This is mainly
    important for Dovecot's Lua bindings for lib-http.
  - lib-settings: Crash would occur when using %variables in
    SET_FILE type settings.
  - lib-storage: Attachment flags were attempted to be added for
    readonly mailboxes with mail_attachment_flags=add-flags.
  - lib-storage: Root directory for unusable shared namespaces
    was unnecessarily attempted to be created.
  - lib: Crash would occur when config was reloaded and logging
    to syslog.
  - login-common: Crash might have occured when login proxy was
    destroyed.
  - sqlite: The sqlite_journal_mode=wal setting didn't actually
    do anything.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.2
  - Changes
  - lib-sieve: Use new regular expression library in core.
  - managesieve: Add default
    service_extra_groups=$SET:default_internal_group.
  - New features
  - lib-sieve: Add support for "extlists" extension.
  - lib-sieve: regex - Allow unicode comparator.
  - Bug fixes
  - lib-sieve-tool: sieve-tool - All sieve_script settings were
    overriden.
  - lib-sieve: storage: dict: sieve_script_dict filter was
    missing from settings.
  - sieve-ldap-storage: Fix compile without LDAP.</changelog>
  <changelog author="mrueckert@suse.de" date="1761739201">- drop dovecot-fix-gssapi.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1761739202">- Add patches to fix the 32bit build failures:
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1766491200">- backport patches to fix sieve regex support after the switch to
  pcre2
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
- ------------------------------------------------------------------</changelog>
  <changelog author="mrueckert@suse.de" date="1766491201">- While we are at it backport some fixes for the authentication
  stack, after recommendation from upstream:
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch</changelog>
  <changelog author="hpj@urpla.net" date="1769083200">- dovecot will not compile with older gcc's. Force a newer one.</changelog>
  <changelog author="mrueckert@suse.de" date="1774612800">- Update to 2.4.3 (boo#1260893 boo#1260894 boo#1260895 boo#1260896
  boo#1260897 boo#1260898 boo#1260899 boo#1260900 boo#1260901
  boo#1260902)
  There are experimental features in 2.4, one is enabled with
  - -enable-experimental-mail-utf8, and another with
  - -enable-experimental-imap4rev2, and you also need to set
  mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them
  in config.
  Critical bug fixes
  - CVE-2025-59028: Invalid base64 authentication can cause DoS for
    other logins.
  - CVE-2025-59031: decode2text.sh OOXML extraction may follow
    symlinks and read unintended files during indexing. Fixed by
    dropping the script.
  - CVE-2026-24031: SQL injection possible if auth_username_chars
    is configured empty. Fixed escaping to always happen. v2.4
    regression.
  - CVE-2026-27859: Excessive RFC 2231 MIME parameters in email
    would cause excessive CPU usage. Fixed by limiting number of
    parameters to process.
  - CVE-2026-27860: LDAP query injection possible if
    auth_username_chars is configured empty. Fixed escaping to
    always happen. v2.4 regression.
  - CVE-2026-27857: Sending excessive parenthesis causes imap-login
    to use excessive memory.
  - CVE-2026-27856: Doveadm credentials were not checked using
    timing-safe checking function.
  - CVE-2026-27855: OTP driver vulnerable to replay attack.
  Changes
  - Remove default
    service/*/service_extra_groups=$SET:default_internal_group.
    They are now replaced by default
    mail_access_groups=$SET:default_internal_group.
  - The version file has been renamed as version.txt to avoid clash
    with C++ headers.
  - auth: oauth2 - Do not export token automatically, must be
    exported using fields.
  - config: Don't accept 0 as meaning unlimited anymore for
    last_valid_uid, last_valid_gid, mail_cache_max_headers_count,
    mail_cache_max_header_name_length, mail_vsize_bg_after_count,
    mail_sort_max_read_count, message_max_size,
    submission_max_recipients and quota_mail_size.
  - imap, pop3: Don't autoexpunge if Dovecot is shutting down or
    process is killed.
  - imap: LIST - Handle invalid mUTF-7 mailbox names as never
    matching anything
  - lazy-expunge: Change lazy_expunge_only_last_instance default to
    yes.
  - lda: Use EX_TEMPFAIL (75) if configuration is invalid instead
    of 89. v2.4 regression.
  - lib-master: Increase ANVIL_DEFAULT_LOOKUP_TIMEOUT_MSECS from 5s
    to 30s
  - lib: crc32 - Use zlib's built-in CRC32 function
  New features
  - Improve UTF-8 support for mail storage.
  - auth: Add default auth-token UNIX socket for token-based
    authentication.
  - doc: solr-config-9.xml - Make it compatible with Solr 9.8.0
  - doveadm: dsync - Search mails when exporting to reduce number
    of mails exported by dsync-server.
  - dovecot-sysreport: Add -D|--destdir support.
  - imap, imap-hibernate: Use DOVECOT-TOKEN authentication for
    unhibernation.
  - Default imap-master socket permissioms have been changed due to
    this.
  - imap: Add APPENDLIMIT capability when configured with
    quota_mail_size.
  - imap: Support STATUS (DELETED) for IMAP4rev2.
  - imapc: Add support for SEARCH MIMEPART
  - imapc: Improve error forwarding.
  - imapc: Support SORT and ESORT extensions.
  - imapc: Support STATUS (DELETED) for IMAP4rev2.
  - lib-sql: Support parameterized queries.
  - lib-test: Add new test-dir API for better temporary test
    directory handling.
  - lmtp: Advertize SIZE capability when configured with
    quota_mail_size.
  - lmtp: Support XCLIENT DESTADDR and DESTPORT
  - pop3-login: proxy - Add support for XCLIENT DESTIP and DESTPORT
  - submission-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT
  - Various optimizations have been made to the code.
  Bug fixes
  - Fix building dovecot with BSD, Solaris and macOS.
  - auth: Crash would occur if users were iterated but
    userdb_ldap_iterate_fields was not set.
  - auth: Fix request leak when client authenticates with
    unsupported mechanism.
  - auth: Some passdbs would default to PLAIN instead of CRYPT
    scheme.
  - config: Section and setting names could have been intermixed,
    resulting in the setting being silently ignored.
  - configure: Fix checking if BUILD_IMAP_HIBERNATE is set
  - doveadm: dsync - -e parameter was handled wrong with
    dsync-server.
  - fts-flatcurve: Mailbox leak would occur if mailbox failed to
    open.
  - imap: Fix potential issues with unhibernation and process state
    handling.
  - imapc: SEARCH failure handling was done wrong.
  - imapc: UID STORE commands included extra comma in uidset.
  - lib-auth-client: auth-master - Fix panic when reconnecting
    after handshake timeout.
  - lib-compression: Lz4 algorithm would assert-crash with
    malicious data.
  - lib-dcrypt: Fix digest algorithm handling.
  - lib-dict: Escape username paths to prevent traversal issues
    with dict-fs.
  - lib-http: Fix HTTP parsing edge cases and state handling.
  - lib-iostream: Disallow empty ssl_min_protocol.
  - lib-json: Fix incorrect character handling logic.
  - lib-ldap: Fix various TLS related bugs.
  - lib-mail: Fix charset translation and MIME parsing edge cases.
  - lib-mail: Fix multiple bounds checks and parsing issues in
    message handling.
  - lib-var-expand: Multiple fixes and improvements for expansion
    handling.
  - lib: Fix punycode decoding out-of-bounds reads.
  - lib: Fix unicode normalization edge cases causing crashes.
  - lib-http: Chunked transfer trailer size was not limited.
  - login-common: Improve logging and internal error handling.
  - login-common: login_log_format_elements was split by spaces
    naively, which could break variable expansion. Use template
    aware splitting now.
  - master: Dovecot would fail to start if listen directive was
    used and dovenull or dovecot user was missing.
  - pop3c: Connection might've hung with SSL.
  - util: Fix handling of environment variables containing control
    characters.
  - Many other bugs have been fixed.
- Update pigeonhole to 2.4.3
  Critical bug fixes
  - CVE-2026-27858: managesieve-login can allocate large amount of
    memory during authentication.
  - CVE-2025-59032: ManageSieve panic occurs with sieve-connect as a client.
  Changes
  - lib-sieve: Don't accept 0 as meaning unlimited anymore for
    sieve_quota_script_count and sieve_quota_storage_size.
  - managesieve-login: If mail_max_userip_connections is reached,
    return LIMIT/CONNECTIONS resp-code.
  - managesieve-login: proxy - Return unexpected backend failures
    as TRYLATER/NORETRY resp-code.
  - managesieve: Remove default
    service_extra_groups=$SET:default_internal_group.
  New features
  - managesieve-login: proxy - Add support for XCLIENT DESTIP and
    DESTPORT.
  Bug fixes
  - imapsieve: Fix panic occurring upon implicit flag changes.
  - lib-sieve: include-extension - Fix crash occurring when
    previous global command has no arguments.
  - lib-sieve: Fix erroneous attempt to read active script for
    non-personal storage.
  - lib-sieve: ldap: Fix linking non-shared LIBDOVECOT.
- drop patches included in update
  0001-auth-Fix-dashes-to-underscores-in-driver-names-in-fi.patch
  0001-lib-regex-Separate-maximum-capture-groups-and-match-.patch
  0002-auth-Fix-crypt-CRYPT-in-passdb_passwd-passdb_ldap-de.patch
  0002-lib-regex-Set-DREGEX_MAX_MATCHES-to-library-default.patch
  0003-auth-Make-the-default-passdb_static-passdb_default_p.patch
  0003-lib-regex-Limit-number-of-capture-groups-correctly.patch
  0004-auth-Set-CRYPT-as-default-passdb_default_password_sc.patch
  dovecot24-32bit-1.patch
  dovecot24-32bit-2.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1775822400">- Upstream republished the source tarballs for 2.4.3 due to missing
  man pages in the tarball
- Added signature files for source tarballs</changelog>
  <changelog author="mrueckert@suse.de" date="1778587200">- Update to 2.4.4 (boo#1265146 boo#1265147 boo#1265148 boo#1265149
  boo#1265150)
  - core
  * CVE-2026-27851: lib-var-expand: Safe filter marks all
    following pipelines safe.
  * CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could
    be faked. MITM attacker with a certificate trusted by the
    client could have bypassed the requirement for channel
    binding.
  * CVE-2026-40020: IMAP folders can be shared-spammed to
    everyone.
  * CVE-2026-42006: An attacker can cause uncontrolled memory
    usage with excessive bracing over IMAP. The fix in
    CVE-2026-27857 was incomplete.
  * indexer-worker, quota-status, script-login,
    program-client-local: Root privileges are now dropped
    permanently before serving requests.
  * indexer-worker: Default restart_request_count changed
    to 1 to work correctly after permanent root privilege drop.
  * lmtp: Add back service_extra_groups=$SET:default_internal_group
    that was incorrectly removed in v2.4.3.
  * master: inet_listener_reuse_port has been replaced by
    service_reuse_port. The new setting properly pre-creates all
    listener sockets at startup and assigns one unique socket per
    process. Using this allows evenly distributing incoming
    connections to login processes. See
    https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
    for details.
  - auth: Fix LDAP escaping of 0x13 control character.
  - auth: Use timing-safe comparison for certificate and public
    key fingerprints.
  - fts: Correctly handle internal http-client response errors.
  - fts: Don't send request to Tika if there is no body text.
  - fts: Fix address header indexing for RFC 2047 encoded-words.
  - fts: tika, fts-solr: Fix use-after-free crash during DNS
    lookup.
  - imap: Fix assertion panic on invalid REPLACE 0 command.
  - lib-auth-client: Avoid "unknown id" errors for aborted auth
    requests.
  - lib-dcrypt: Fix potential crash if trying to access
    untrusted/corrupted keys.
  - lib-dcrypt: Improve error message if keys aren't in hex
    format as expected.
  - lib-index: Fix potential crash if fsck fails.
  - lib-ldap: Fix using OpenLDAP default CA when
    ssl_client_ca_dir/file is unset. v2.4.3 regression.
  - lib-master, master: Fix behavior for services with
    client_limit&gt;1 and restart_request_count so that processes
    reaching restart_request_count are no longer counted towards
    process_limit.
  - lib-master: Fix crash when reaching client_limit with
    restart_request_count&gt;1.
  - lib-master: haproxy - Don't trust client certificate common
    name when HAProxy reports verification failure.
  - lib-sasl: cram-md5 - Fix out of bounds memory read.
  - lib-sasl: oauth2 - Fix one byte out of bounds read.
  - lib-sql: cassandra - Fix reusing Cassandra SSL connections.
  - lib-sql: sqlite - Fix sqlite_journal_mode=wal to actually
    work.
  - lib-storage: Auto-rename non-NFC subscription file entries to
    NFC on read.
  - lib-storage: Prevent non-atom SEARCH keywords from causing
    IMAP command injection.
  - lib-var-expand-crypt: Return error if hex decoding fails.
  - lib-var-expand: Fix crash (SIGFPE) with non-positive divisor
    for / and %.
  - log: Fix memory leak at deinit.
  - login-common: When process is full, don't destroy clients
    waiting on master auth.
  - login-proxy: Fix crash with rawlog and multiplexing during
    reconnection.
  - mail-compress: Fix panic when save method unavailable.
  - mail-crypt: Fix crash when HMAC-based algorithm is used.
  - mail-crypt: Use AEAD instead of HMAC with ChaCha20-Poly1305.
  - mdbox: Create files with O_NOFOLLOW.
  - push-notification: ox - Fix use-after-free crash during DNS
    lookup.
  - quota: quota-status - Limit input buffer size to 1 kB.
  - pigeonhole:
  * CVE-2026-40016: sieve :contains and :matches operators could
    have been using excessive amount of CPU. Limit the CPU to
    sieve_max_cpu_time.
  - Fix potential crashes parsing corrupted Sieve binaries.
  - lib-sieve: matches - Fix trailing literal match when it fills
    value exactly. v2.4.3 regression.</changelog>
</package>
<package pkgid="054a134c39d17064e12cb00fdacbbcb78d3825ad1095477ebb2172504739b701cbcb0aad5c0efce4a3bb30ae93736d72067a70d7b04723172421bf83ec3421b5" name="doxygen" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1705924800">- reintroduce useful reproducible.patch
- modified patches
  % doxygen-no-lowercase-man-names.patch (refreshed)
- added patches
  + reproducible.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="foss@grueninger.de" date="1716379200">- Update to Doxygen 1.11.0
  * Add Markdown style todo list
  * Add support for GitHub Markdown style alerts
  * Add a "Run" menu item key-command to DoxyWizard
  * Added 'raise' and 'prefix' options to @include{doc}
  * Support `link` / `endlink` command in section title
  * Add support for @subparagraph and @subsubparagraph
  * Translation updates for German/Greek/Polish/Portuegse/Dutch/Chinese
  * `doxyapp --locate` list all overloads by including arguments
  * Adding support for "engine" files for plantuml
  * Show emoji in HTML treeview
  * Add `HTML_CODE_FOLDING` possibility to CHM
  * Make `HTML_CODE_FOLDING` possible when `DISABLE_INDEX=YES`
  * Add doxyindexer and doxysearch installation
  * cmake: always install man pages, only install for the
    binaries installed
  * allow function ptr with `INLINE_SIMPLE_STRUCTS`</changelog>
  <changelog author="foss@grueninger.de" date="1723032000">- Update to Doxygen 1.12.0
  * Adding "engine" chen and chronology for plantuml
  * Also allow backticks to be combined with emphasis in Markdown</changelog>
  <changelog author="pgajdos@suse.com" date="1725537600">- update licensing information (IBS sr#343838)</changelog>
  <changelog author="foss@grueninger.de" date="1735473600">- update to Doxygen 1.13.0
  * Using README.md as directory description via new option
    IMPLICIT_DIR_DOCS.
  * Add CSS class for @p command [view]
  * Add class attribute to the @qualifier command in the HTML output
  * New option HIDE_UNDOC_NAMESPACES which can be used to hide
    undocumented namespaces (similar to HIDE_UNDOC_CLASSES)
  * New option PLANTUMLFILE_DIRS and command \plantumlfile to
    include plantuml files (similar to DOT_DIRS, and \dotfile)
  * New option AUTOLINK_IGNORE_WORDS to specific a set of words
    that should not be linked
  * Update available emojis
  * Added strip and nostrip options to \include and \snippet to
    either strip or keep doxygen comments
  * Added helper script to live edit &amp; view a doxygen comment
    block, see addon/doxycommentviewer in the repo
  * Extending autobrief end characters with ? and !</changelog>
  <changelog author="foss@grueninger.de" date="1735819200">- update to Doxygen 1.13.1
  * As of doxygen version 1.13.1 and layout version 2.0, Doxygen
    will insert defaults for elements that are missing in the user
    defined layout file.
  * Add WARN_LAYOUT_FILE option to toggle warnings in layout file</changelog>
  <changelog author="foss@grueninger.de" date="1736596800">- update to Doxygen 1.13.2
  * Support for Plus sign code fence directives - GitHub flavor
  * String representation at "show configuration" in doxywizard
- Remove special paths for older Suse versions for which packages
  are no longer built anyway
  * Drop related patch doxygen-no-libclang-cpp.patch</changelog>
  <changelog author="foss@grueninger.de" date="1748088000">- update to 1.14.0
  * HTML output has gotten a fresh, more modern look. It makes
    better use of CSS and uses fewer bitmaps.
  * Added page outline navigation panel to the HTML output
  * Added new layout option: full height side bar + navigation tabs
  * Improved flexibility of `\cite` command
  * Support for Plus sign code fence directives - GitHub flavor</changelog>
  <changelog author="foss@grueninger.de" date="1748520000">- Doxywizard: Use Qt 6 instead of Qt5.</changelog>
</package>
<package pkgid="36af9716ccc8dc5212d78dccc50998866e03079a9a611074b80b17fc6e844a457485144d6eea16f09abc43bacb43b8e119804be2406fc15dbdb36f1e4125f258" name="doxygen" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="foss@grueninger.de" date="1716379200">- Update to Doxygen 1.11.0
  * Add Markdown style todo list
  * Add support for GitHub Markdown style alerts
  * Add a "Run" menu item key-command to DoxyWizard
  * Added 'raise' and 'prefix' options to @include{doc}
  * Support `link` / `endlink` command in section title
  * Add support for @subparagraph and @subsubparagraph
  * Translation updates for German/Greek/Polish/Portuegse/Dutch/Chinese
  * `doxyapp --locate` list all overloads by including arguments
  * Adding support for "engine" files for plantuml
  * Show emoji in HTML treeview
  * Add `HTML_CODE_FOLDING` possibility to CHM
  * Make `HTML_CODE_FOLDING` possible when `DISABLE_INDEX=YES`
  * Add doxyindexer and doxysearch installation
  * cmake: always install man pages, only install for the
    binaries installed
  * allow function ptr with `INLINE_SIMPLE_STRUCTS`</changelog>
  <changelog author="foss@grueninger.de" date="1723032000">- Update to Doxygen 1.12.0
  * Adding "engine" chen and chronology for plantuml
  * Also allow backticks to be combined with emphasis in Markdown</changelog>
  <changelog author="pgajdos@suse.com" date="1725537600">- update licensing information (IBS sr#343838)</changelog>
  <changelog author="foss@grueninger.de" date="1735473600">- update to Doxygen 1.13.0
  * Using README.md as directory description via new option
    IMPLICIT_DIR_DOCS.
  * Add CSS class for @p command [view]
  * Add class attribute to the @qualifier command in the HTML output
  * New option HIDE_UNDOC_NAMESPACES which can be used to hide
    undocumented namespaces (similar to HIDE_UNDOC_CLASSES)
  * New option PLANTUMLFILE_DIRS and command \plantumlfile to
    include plantuml files (similar to DOT_DIRS, and \dotfile)
  * New option AUTOLINK_IGNORE_WORDS to specific a set of words
    that should not be linked
  * Update available emojis
  * Added strip and nostrip options to \include and \snippet to
    either strip or keep doxygen comments
  * Added helper script to live edit &amp; view a doxygen comment
    block, see addon/doxycommentviewer in the repo
  * Extending autobrief end characters with ? and !</changelog>
  <changelog author="foss@grueninger.de" date="1735819200">- update to Doxygen 1.13.1
  * As of doxygen version 1.13.1 and layout version 2.0, Doxygen
    will insert defaults for elements that are missing in the user
    defined layout file.
  * Add WARN_LAYOUT_FILE option to toggle warnings in layout file</changelog>
  <changelog author="foss@grueninger.de" date="1736596800">- update to Doxygen 1.13.2
  * Support for Plus sign code fence directives - GitHub flavor
  * String representation at "show configuration" in doxywizard
- Remove special paths for older Suse versions for which packages
  are no longer built anyway
  * Drop related patch doxygen-no-libclang-cpp.patch</changelog>
  <changelog author="foss@grueninger.de" date="1748088000">- update to 1.14.0
  * HTML output has gotten a fresh, more modern look. It makes
    better use of CSS and uses fewer bitmaps.
  * Added page outline navigation panel to the HTML output
  * Added new layout option: full height side bar + navigation tabs
  * Improved flexibility of `\cite` command
  * Support for Plus sign code fence directives - GitHub flavor</changelog>
  <changelog author="foss@grueninger.de" date="1748520000">- Doxywizard: Use Qt 6 instead of Qt5.</changelog>
  <changelog author="pgajdos@suse.com" date="1768910400">- drop %suse_update_desktop_file usag
- modified sources
  * doxywizard.desktop</changelog>
</package>
<package pkgid="a21fb7a64e5719f3296e36d33427c97a7a1eb51afb7f93d52cf4bb86cc351c92976c4a1963fb819f465d84160edab4810a6738129d4023235b2e7b45df03a244" name="doxygen2man" arch="x86_64">
  <version epoch="0" ver="2.0.8+20230721.002171b" rel="160000.3.2"/>
  <changelog author="ygao@suse.com" date="1607083200">- Update to version 2.0.2+20201203.def947e (v2.0.2):
- ipcs : Decrease log level. (#426)
- cov: Quieten some covscan warnings (#427)
- doxygen2man: Fix a couple of covscan-detected errors (#425)
- ipcs: Add missing qb_list_del when freeing server (#423) (gh#ClusterLabs/libqb#422)
- ipc: add qb_ipcc_auth_get() API call (#418)
- doxygen2man: Remove horrible hack (#420) (gh#ClusterLabs/libqb#419)
- doxygen2man: Add support for @code blocks (#417)
- man: Tidy man pages (#416)
- doxygen2man: Add option to read copyright line from the header file (#415) (gh#ClusterLabs/libqb#414)</changelog>
  <changelog author="ygao@suse.com" date="1633608000">- Update to version 2.0.3+20210303.404adbc (v2.0.3):
- syslog: Add a message-id parameter for messages (gh#ClusterLabs/libqb#433)
- timers: Add some locking (gh#ClusterLabs/libqb#436)
- ipcc: Have a few goes at tidying up after a dead server (gh#ClusterLabs/libqb#434)
- strlcpy: Check for maxlen underflow (gh#ClusterLabs/libqb#432)
- doxygen2man: fix printing of lines starting with '.' (gh#ClusterLabs/libqb#431)
- doxygen2man: ignore all-whitespace brief descriptions (gh#ClusterLabs/libqb#430)</changelog>
  <changelog author="ygao@suse.com" date="1637064000">- Update to version 2.0.4+20211112.a2691b9 (v2.0.4):
- poll: Don't log in a signal handler (gh#ClusterLabs/libqb##447)
- Fix pthread returns (gh#ClusterLabs/libqb#444)
- doxygen2man: print structure descriptions (gh#ClusterLabs/libqb#443)
- Implement heap based timer list (gh#ClusterLabs/libqb#439)</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Inject package version differently into the build system
  (boo#1193087):
  + Drop libqb-configure-package-version.patch
  + copy the package version into .tarball-version (if it does not
    exist and we would happen to use a tarball to build).</changelog>
  <changelog author="ygao@suse.com" date="1642161600">- Retry if posix_fallocate is interrupted with EINTR (#453) (gh#ClusterLabs/libqb#451, bsc#1193737, bsc#1193912)
  * bsc#1193737-0001-Retry-if-posix_fallocate-is-interrupted-with-EINTR-4.patch</changelog>
  <changelog author="ygao@suse.com" date="1648036800">- Update to version 2.0.5+20220321.ccdaada (v2.0.5):
- blackbox: Sanitize items read from the blackbox header (gh#ClusterLabs/libqb#438)
- ipcc: Fix errno returned from qb_ipcc_connect (gh#ClusterLabs/libqb#460)
- util: reimplement time functions as a series of fallbacks (gh#ClusterLabs/libqb#457)
- util: use HAVE_GETTIMEOFDAY where appropriate
- Retry if posix_fallocate is interrupted with EINTR (#453) (gh#ClusterLabs/libqb#451, bsc#1193737, bsc#1193912)
- Merge:
  * bsc#1193737-0001-Retry-if-posix_fallocate-is-interrupted-with-EINTR-4.patch
- ipcc: Add an async connect API (gh#ClusterLabs/libqb#450)</changelog>
  <changelog author="ygao@suse.com" date="1648036801">- Update to version 2.0.6+20220323.758044b (v2.0.6):
- test: Include ipc_sock.test in the libqb-tests rpm (gh#ClusterLabs/libqb##463)</changelog>
  <changelog author="dmueller@suse.com" date="1650542400">- Make sure that the libstat_wrapper.so library is included in the libqb-tests RPM (when built)</changelog>
  <changelog author="ygao@suse.com" date="1687176000">- Update to version 2.0.7+20230607.06c8641 (v2.0.7):
- blackbox: fix potential overlow/memory corruption (gh#ClusterLabs/libqb#486)
- tests: allow -j to work (gh#ClusterLabs/libqb#485)
- strlcpy: avoid compiler warning from strncpy (gh#ClusterLabs/libqb#473)
- timer: Move state check to before time check (gh#ClusterLabs/libqb#479)
- ipc: Retry receiving credentials if the the message is short (gh#ClusterLabs/libqb#476, rh#2111711)
- lib: Fix some small bugs spotted by newest covscan (gh#ClusterLabs/libqb#471)
- doxygen2man: Fix function parameter alignment (gh#ClusterLabs/libqb#468)</changelog>
  <changelog author="ygao@suse.com" date="1690200000">- Update to version 2.0.8+20230721.002171b (v2.0.8):
- log: fix potential overflow with long log messages (gh#ClusterLabs/libqb#490, CVE-2023-39976, bsc#1214066)</changelog>
</package>
<package pkgid="577110b771b22bdaf46650838e95489b052eee6601239dab2e78c978c364347e2ea091b6e93bf29356e4f0de1b9da6ed64fb7775da50dd01dd2ed867c0a62669" name="doxywizard" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="160000.2.2"/>
  <changelog author="pgajdos@suse.com" date="1705924800">- reintroduce useful reproducible.patch
- modified patches
  % doxygen-no-lowercase-man-names.patch (refreshed)
- added patches
  + reproducible.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="foss@grueninger.de" date="1716379200">- Update to Doxygen 1.11.0
  * Add Markdown style todo list
  * Add support for GitHub Markdown style alerts
  * Add a "Run" menu item key-command to DoxyWizard
  * Added 'raise' and 'prefix' options to @include{doc}
  * Support `link` / `endlink` command in section title
  * Add support for @subparagraph and @subsubparagraph
  * Translation updates for German/Greek/Polish/Portuegse/Dutch/Chinese
  * `doxyapp --locate` list all overloads by including arguments
  * Adding support for "engine" files for plantuml
  * Show emoji in HTML treeview
  * Add `HTML_CODE_FOLDING` possibility to CHM
  * Make `HTML_CODE_FOLDING` possible when `DISABLE_INDEX=YES`
  * Add doxyindexer and doxysearch installation
  * cmake: always install man pages, only install for the
    binaries installed
  * allow function ptr with `INLINE_SIMPLE_STRUCTS`</changelog>
  <changelog author="foss@grueninger.de" date="1723032000">- Update to Doxygen 1.12.0
  * Adding "engine" chen and chronology for plantuml
  * Also allow backticks to be combined with emphasis in Markdown</changelog>
  <changelog author="pgajdos@suse.com" date="1725537600">- update licensing information (IBS sr#343838)</changelog>
  <changelog author="foss@grueninger.de" date="1735473600">- update to Doxygen 1.13.0
  * Using README.md as directory description via new option
    IMPLICIT_DIR_DOCS.
  * Add CSS class for @p command [view]
  * Add class attribute to the @qualifier command in the HTML output
  * New option HIDE_UNDOC_NAMESPACES which can be used to hide
    undocumented namespaces (similar to HIDE_UNDOC_CLASSES)
  * New option PLANTUMLFILE_DIRS and command \plantumlfile to
    include plantuml files (similar to DOT_DIRS, and \dotfile)
  * New option AUTOLINK_IGNORE_WORDS to specific a set of words
    that should not be linked
  * Update available emojis
  * Added strip and nostrip options to \include and \snippet to
    either strip or keep doxygen comments
  * Added helper script to live edit &amp; view a doxygen comment
    block, see addon/doxycommentviewer in the repo
  * Extending autobrief end characters with ? and !</changelog>
  <changelog author="foss@grueninger.de" date="1735819200">- update to Doxygen 1.13.1
  * As of doxygen version 1.13.1 and layout version 2.0, Doxygen
    will insert defaults for elements that are missing in the user
    defined layout file.
  * Add WARN_LAYOUT_FILE option to toggle warnings in layout file</changelog>
  <changelog author="foss@grueninger.de" date="1736596800">- update to Doxygen 1.13.2
  * Support for Plus sign code fence directives - GitHub flavor
  * String representation at "show configuration" in doxywizard
- Remove special paths for older Suse versions for which packages
  are no longer built anyway
  * Drop related patch doxygen-no-libclang-cpp.patch</changelog>
  <changelog author="foss@grueninger.de" date="1748088000">- update to 1.14.0
  * HTML output has gotten a fresh, more modern look. It makes
    better use of CSS and uses fewer bitmaps.
  * Added page outline navigation panel to the HTML output
  * Added new layout option: full height side bar + navigation tabs
  * Improved flexibility of `\cite` command
  * Support for Plus sign code fence directives - GitHub flavor</changelog>
  <changelog author="foss@grueninger.de" date="1748520000">- Doxywizard: Use Qt 6 instead of Qt5.</changelog>
</package>
<package pkgid="d48e5dba729380edae998f82d5d57fc1ffb75c3a834ef676ef561e1f683030f1cecd55bfd069adaf30c7c20dd4714146793ce6eb41039eca138a6cb4d4157079" name="doxywizard" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="foss@grueninger.de" date="1716379200">- Update to Doxygen 1.11.0
  * Add Markdown style todo list
  * Add support for GitHub Markdown style alerts
  * Add a "Run" menu item key-command to DoxyWizard
  * Added 'raise' and 'prefix' options to @include{doc}
  * Support `link` / `endlink` command in section title
  * Add support for @subparagraph and @subsubparagraph
  * Translation updates for German/Greek/Polish/Portuegse/Dutch/Chinese
  * `doxyapp --locate` list all overloads by including arguments
  * Adding support for "engine" files for plantuml
  * Show emoji in HTML treeview
  * Add `HTML_CODE_FOLDING` possibility to CHM
  * Make `HTML_CODE_FOLDING` possible when `DISABLE_INDEX=YES`
  * Add doxyindexer and doxysearch installation
  * cmake: always install man pages, only install for the
    binaries installed
  * allow function ptr with `INLINE_SIMPLE_STRUCTS`</changelog>
  <changelog author="foss@grueninger.de" date="1723032000">- Update to Doxygen 1.12.0
  * Adding "engine" chen and chronology for plantuml
  * Also allow backticks to be combined with emphasis in Markdown</changelog>
  <changelog author="pgajdos@suse.com" date="1725537600">- update licensing information (IBS sr#343838)</changelog>
  <changelog author="foss@grueninger.de" date="1735473600">- update to Doxygen 1.13.0
  * Using README.md as directory description via new option
    IMPLICIT_DIR_DOCS.
  * Add CSS class for @p command [view]
  * Add class attribute to the @qualifier command in the HTML output
  * New option HIDE_UNDOC_NAMESPACES which can be used to hide
    undocumented namespaces (similar to HIDE_UNDOC_CLASSES)
  * New option PLANTUMLFILE_DIRS and command \plantumlfile to
    include plantuml files (similar to DOT_DIRS, and \dotfile)
  * New option AUTOLINK_IGNORE_WORDS to specific a set of words
    that should not be linked
  * Update available emojis
  * Added strip and nostrip options to \include and \snippet to
    either strip or keep doxygen comments
  * Added helper script to live edit &amp; view a doxygen comment
    block, see addon/doxycommentviewer in the repo
  * Extending autobrief end characters with ? and !</changelog>
  <changelog author="foss@grueninger.de" date="1735819200">- update to Doxygen 1.13.1
  * As of doxygen version 1.13.1 and layout version 2.0, Doxygen
    will insert defaults for elements that are missing in the user
    defined layout file.
  * Add WARN_LAYOUT_FILE option to toggle warnings in layout file</changelog>
  <changelog author="foss@grueninger.de" date="1736596800">- update to Doxygen 1.13.2
  * Support for Plus sign code fence directives - GitHub flavor
  * String representation at "show configuration" in doxywizard
- Remove special paths for older Suse versions for which packages
  are no longer built anyway
  * Drop related patch doxygen-no-libclang-cpp.patch</changelog>
  <changelog author="foss@grueninger.de" date="1748088000">- update to 1.14.0
  * HTML output has gotten a fresh, more modern look. It makes
    better use of CSS and uses fewer bitmaps.
  * Added page outline navigation panel to the HTML output
  * Added new layout option: full height side bar + navigation tabs
  * Improved flexibility of `\cite` command
  * Support for Plus sign code fence directives - GitHub flavor</changelog>
  <changelog author="foss@grueninger.de" date="1748520000">- Doxywizard: Use Qt 6 instead of Qt5.</changelog>
  <changelog author="pgajdos@suse.com" date="1768910400">- drop %suse_update_desktop_file usag
- modified sources
  * doxywizard.desktop</changelog>
</package>
<package pkgid="c0da2a022a0265d6604b6e8a15359b811e28cacacf67e74e86a4ce38048832b40caee84332c2da32c18fa23cdfe3014b12d7e38bab60ca655e4c48d4746bef1d" name="dpdk" arch="x86_64">
  <version epoch="0" ver="24.11.1" rel="160000.2.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1725537600">- Fix build on aarch64 with gcc14:
  * 0001-examples-vm_power_manager-add-missing-header.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
</package>
<package pkgid="5339af4dbf7cecf3a306ed055311033d66ab36e74c93cdba2e88967421ab9577d603ce7824518906554c087a4d9f6009053386ff18672a83495a9a7eacf89945" name="dpdk" arch="x86_64">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="646321b99182c609f3f48d38bb60d26cf578bef0a46afbdb5b87577aa2e010af4a9b37e970347630fba7051c2583efcfc146d8258787f8b491aee3f0c2d0cdbe" name="dpdk" arch="x86_64">
  <version epoch="0" ver="24.11.6" rel="160000.1.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1775736000">- Specfile cleanup, removing flavors_to_build as we do not build kernel modules.
- Set cpu_instruction_set to x86-64-v2 for Leap16/SLE16, which makes
  0001-fix-cpu-compatibility.patch obsolete for these.
- Add libarchive as dependency, avoid errors like
  '/lib/firmware/... cannot be decompressed' where firmware is compressed.
  (bsc#1260007)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776340800">- Update to version 24.11.5
  * https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id15
  * Summary:
  - Fixed buffer overflows (dma-perf, openssl) and use-after-free's in vhost.
  - Intel: Fixes for i40e, iavf, ice, and ixgbe regarding flow parsing,
    memory leak, and MAC management.
  - NVIDIA/Mellanox: Fixes for mlx5 regarding bonding, HW steering (HWS) and secondary process logic.
  - Fixes race conditions and resource leaks in netvsc (Hyper-V)
  - Fixes for Marvell (cnxk), Broadcom (bnxt), and Amazon (mana).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776686400">- Remove temporary output file sphinx_html.out -- fixes reproducible
  builds (bsc#1262286)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1780574400">- Update to version 24.11.6
  - docs: fix build issue due to missing spacing between paragraphs
  - Revert “net: fix packet type for stacked VLAN”</changelog>
</package>
<package pkgid="40aeee6a7610ad01a5989c60bd3e8452b4518710fbe99356fc801c388a6dcaeee4651085c3f3a55c64217071c9a27f6e308f0ad20f0b6379a64b9ec1167cb140" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="24.11.1" rel="160000.2.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1725537600">- Fix build on aarch64 with gcc14:
  * 0001-examples-vm_power_manager-add-missing-header.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
</package>
<package pkgid="4949089b45ad4eb1f4cb2d59f21a77eb6a20b649ca2e59499b415b511a9f78844ab9e61ad30944d4830795df31d8f9b44cfb5fae976ab50cc1c9d90bc440af52" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="7fbff9a5ac62fa041df7d7f021be5b9da7cb7b2f72610474e20d537c7c5c1a04bedec5ea1ac9b6a6f9d69c5d3c36bb08eff1163d2d6a20493f6ea2b9e8264d07" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="24.11.6" rel="160000.1.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1775736000">- Specfile cleanup, removing flavors_to_build as we do not build kernel modules.
- Set cpu_instruction_set to x86-64-v2 for Leap16/SLE16, which makes
  0001-fix-cpu-compatibility.patch obsolete for these.
- Add libarchive as dependency, avoid errors like
  '/lib/firmware/... cannot be decompressed' where firmware is compressed.
  (bsc#1260007)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776340800">- Update to version 24.11.5
  * https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id15
  * Summary:
  - Fixed buffer overflows (dma-perf, openssl) and use-after-free's in vhost.
  - Intel: Fixes for i40e, iavf, ice, and ixgbe regarding flow parsing,
    memory leak, and MAC management.
  - NVIDIA/Mellanox: Fixes for mlx5 regarding bonding, HW steering (HWS) and secondary process logic.
  - Fixes race conditions and resource leaks in netvsc (Hyper-V)
  - Fixes for Marvell (cnxk), Broadcom (bnxt), and Amazon (mana).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776686400">- Remove temporary output file sphinx_html.out -- fixes reproducible
  builds (bsc#1262286)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1780574400">- Update to version 24.11.6
  - docs: fix build issue due to missing spacing between paragraphs
  - Revert “net: fix packet type for stacked VLAN”</changelog>
</package>
<package pkgid="5e74d5d4359d55bf11bea371a24032c6d61fe2f64542a92088f99228d8f1614c85586e2040a7f0c9c9b9b977ae43aa636968d1d3be5ff9317df0ce766af87688" name="dpdk-devel-static" arch="x86_64">
  <version epoch="0" ver="24.11.1" rel="160000.2.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1725537600">- Fix build on aarch64 with gcc14:
  * 0001-examples-vm_power_manager-add-missing-header.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
</package>
<package pkgid="56ca045f62a2f4d7f3eea1b8042f6dc6d3b1c0effbc0976dd8a1ea9bb90c299a503cf911986b3a2bf4696522e0d6280b668b8c9e54edb46aa27ce04ccf913c83" name="dpdk-devel-static" arch="x86_64">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="66e4f12fb8b121585b051338200ae3b80b1550bc6769e973ce1fc71ce90429e141928c9c1ef13ca9abebe13dc1952035f3d41121c1f58c84c7480aab21eb4ce0" name="dpdk-devel-static" arch="x86_64">
  <version epoch="0" ver="24.11.6" rel="160000.1.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1775736000">- Specfile cleanup, removing flavors_to_build as we do not build kernel modules.
- Set cpu_instruction_set to x86-64-v2 for Leap16/SLE16, which makes
  0001-fix-cpu-compatibility.patch obsolete for these.
- Add libarchive as dependency, avoid errors like
  '/lib/firmware/... cannot be decompressed' where firmware is compressed.
  (bsc#1260007)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776340800">- Update to version 24.11.5
  * https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id15
  * Summary:
  - Fixed buffer overflows (dma-perf, openssl) and use-after-free's in vhost.
  - Intel: Fixes for i40e, iavf, ice, and ixgbe regarding flow parsing,
    memory leak, and MAC management.
  - NVIDIA/Mellanox: Fixes for mlx5 regarding bonding, HW steering (HWS) and secondary process logic.
  - Fixes race conditions and resource leaks in netvsc (Hyper-V)
  - Fixes for Marvell (cnxk), Broadcom (bnxt), and Amazon (mana).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776686400">- Remove temporary output file sphinx_html.out -- fixes reproducible
  builds (bsc#1262286)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1780574400">- Update to version 24.11.6
  - docs: fix build issue due to missing spacing between paragraphs
  - Revert “net: fix packet type for stacked VLAN”</changelog>
</package>
<package pkgid="e6976524b8ffc589f4af1fb5a2c99474b64f797b8e740d00e5283ba4b4a510f2ad0f43e7160395361f8a12947a25d8d05d9268765d07c442b01d15e4cb103396" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="24.11.1" rel="160000.2.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1725537600">- Fix build on aarch64 with gcc14:
  * 0001-examples-vm_power_manager-add-missing-header.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
</package>
<package pkgid="d6d3eb0f2fd18a4fdb716d6d5494824ab87a8137caef37ee7b36651ee5da00606d53f667379c6f0fafa71d18a0fc4e170c65d0f6b8f428d0ab0a0dfcc02dc35b" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="a4116e64a1b953aa5921ef5de45cbc28b05854d5b65e2951baf0071d4fa2979706796e8619104976cef9ae2011cfaf485afffeb383a5378f721b0c279c2ab5b3" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="24.11.6" rel="160000.1.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1775736000">- Specfile cleanup, removing flavors_to_build as we do not build kernel modules.
- Set cpu_instruction_set to x86-64-v2 for Leap16/SLE16, which makes
  0001-fix-cpu-compatibility.patch obsolete for these.
- Add libarchive as dependency, avoid errors like
  '/lib/firmware/... cannot be decompressed' where firmware is compressed.
  (bsc#1260007)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776340800">- Update to version 24.11.5
  * https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id15
  * Summary:
  - Fixed buffer overflows (dma-perf, openssl) and use-after-free's in vhost.
  - Intel: Fixes for i40e, iavf, ice, and ixgbe regarding flow parsing,
    memory leak, and MAC management.
  - NVIDIA/Mellanox: Fixes for mlx5 regarding bonding, HW steering (HWS) and secondary process logic.
  - Fixes race conditions and resource leaks in netvsc (Hyper-V)
  - Fixes for Marvell (cnxk), Broadcom (bnxt), and Amazon (mana).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776686400">- Remove temporary output file sphinx_html.out -- fixes reproducible
  builds (bsc#1262286)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1780574400">- Update to version 24.11.6
  - docs: fix build issue due to missing spacing between paragraphs
  - Revert “net: fix packet type for stacked VLAN”</changelog>
</package>
<package pkgid="a0f57968a2d4791e36e3d7138b54a11d4790cdf5181b112e1794f350ad1cff3b9dd0c27d18baa841bf4adb5d7e2f2d79a375370deb315e1dbc1e4ca55e57225f" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="24.11.1" rel="160000.2.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1725537600">- Fix build on aarch64 with gcc14:
  * 0001-examples-vm_power_manager-add-missing-header.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
</package>
<package pkgid="e4b008541253a61bc86910a227e81facb95334455c97381f54e471ef7e24c863902a57e28f4dedfc1be20fd9741e7cad15994787bb3a83910aee5571d8c58c8c" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="8a91dc6b5f8698e763aaaf29e9e647d1d761a546f1fac3c21728e0d5196edff2a756f739d577015194dbc1313c7a8a9ca93389758fad342221cf69f701ea3a41" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="24.11.6" rel="160000.1.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1775736000">- Specfile cleanup, removing flavors_to_build as we do not build kernel modules.
- Set cpu_instruction_set to x86-64-v2 for Leap16/SLE16, which makes
  0001-fix-cpu-compatibility.patch obsolete for these.
- Add libarchive as dependency, avoid errors like
  '/lib/firmware/... cannot be decompressed' where firmware is compressed.
  (bsc#1260007)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776340800">- Update to version 24.11.5
  * https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id15
  * Summary:
  - Fixed buffer overflows (dma-perf, openssl) and use-after-free's in vhost.
  - Intel: Fixes for i40e, iavf, ice, and ixgbe regarding flow parsing,
    memory leak, and MAC management.
  - NVIDIA/Mellanox: Fixes for mlx5 regarding bonding, HW steering (HWS) and secondary process logic.
  - Fixes race conditions and resource leaks in netvsc (Hyper-V)
  - Fixes for Marvell (cnxk), Broadcom (bnxt), and Amazon (mana).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776686400">- Remove temporary output file sphinx_html.out -- fixes reproducible
  builds (bsc#1262286)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1780574400">- Update to version 24.11.6
  - docs: fix build issue due to missing spacing between paragraphs
  - Revert “net: fix packet type for stacked VLAN”</changelog>
</package>
<package pkgid="e667e3402de2d51ff37a73d3f2e9941a56844fef82db10f804421ee76b21975148688ed116aa5d2f4183a9a00b21681c4c2f6dd986cb0450c71be21a57c3f394" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="24.11.1" rel="160000.2.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1725537600">- Fix build on aarch64 with gcc14:
  * 0001-examples-vm_power_manager-add-missing-header.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
</package>
<package pkgid="66b4872585702bb78a03f15df584778479379e9d7af9bd1dd56dc2ee055bce02b56ecf15977743aa3d41a053e2b6e707270ba7ac47a687a079d27e47edcdb523" name="dpdk-tools" arch="noarch">
  <version epoch="0" ver="24.11.4" rel="160000.1.1"/>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1726228800">- Use python macros from build config</changelog>
  <changelog author="d.partelly@yahoo.com" date="1726315200">- Enable (disabled by default) installation of headers needed
  to build drivers.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1735732800">-  Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
-  Added patch,
    + dpdk-CVE-2024-11614.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1739793600">- Update to LTS version 24.11
  * Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
  * This update fix build with glibc 2.41
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
</package>
<package pkgid="d80614afe70b8057f9b69650a8beb435dc68b428b5f7a7d30162a9db11eb6506e889ed81da1ab7df78d9fa7d5abe54d8bb5339b6079fbcec6f7e5bb6212e15cf" name="dpdk-tools" arch="noarch">
  <version epoch="0" ver="24.11.6" rel="160000.1.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1741608000">- Update to version 24.11.1
  * Contains DPDK 24.11 plus the fix for CVE-2024-11614,
    remove patch dpdk-CVE-2024-11614.patch
- Move docs from %{_docdir}/dpdk/dpdk to %{docdir}/dpdk</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1741953600">- Remove the 'thunderx' multibuild flavor; it was identical to aarch64.
  It also makes 'Provides: dpdk-any' obsolete. [bsc#1237385]</changelog>
  <changelog author="rguenther@suse.com" date="1743422400">- Add 0001-always_inline-fix.patch to fix issue with always_inline
  and rte_trace_feature_is_enabled which should use -mgeneral-regs-only
  to inter-operate with other ISA flags.  Remove GCC 14 build requirement
  for SLE15/16 again.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1743508800">- Change 0001-always_inline-fix.patch by replacing the function
  rte_trace_feature_is_enabled with a preprocessor substitution,
  this also work with older gcc7 where -mgeneral-regs-only isn't
  available.</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1749124800">- Fix deterministic build [bsc#1244130]
  [+ 0001-dts-generate-random-capture_name-per-call.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1767700800">- Update to version 24.11.4
  * LTS update with ~250 fixes, details here:
    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10
- Update to version 24.11.3
  * LTS release update contains ~180 fixes from main branch up to DPDK 25.07
  - Fixes CVE-2025-23259 -- an attacker on a VM in the system can cause
    information disclosure and denial of service (bsc#1254161)
  * remove included patch 0001-dts-generate-random-capture_name-per-call.patch
- Remove obsolete build option -Denable_kmods (upstream a52d472c5)
- dpdk-tools requires "which" and is noarch
- Drop pesign and needssslcertforbuild because we don't build a kmp anymore
  (boo#1247389)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1775736000">- Specfile cleanup, removing flavors_to_build as we do not build kernel modules.
- Set cpu_instruction_set to x86-64-v2 for Leap16/SLE16, which makes
  0001-fix-cpu-compatibility.patch obsolete for these.
- Add libarchive as dependency, avoid errors like
  '/lib/firmware/... cannot be decompressed' where firmware is compressed.
  (bsc#1260007)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776340800">- Update to version 24.11.5
  * https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id15
  * Summary:
  - Fixed buffer overflows (dma-perf, openssl) and use-after-free's in vhost.
  - Intel: Fixes for i40e, iavf, ice, and ixgbe regarding flow parsing,
    memory leak, and MAC management.
  - NVIDIA/Mellanox: Fixes for mlx5 regarding bonding, HW steering (HWS) and secondary process logic.
  - Fixes race conditions and resource leaks in netvsc (Hyper-V)
  - Fixes for Marvell (cnxk), Broadcom (bnxt), and Amazon (mana).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1776686400">- Remove temporary output file sphinx_html.out -- fixes reproducible
  builds (bsc#1262286)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1780574400">- Update to version 24.11.6
  - docs: fix build issue due to missing spacing between paragraphs
  - Revert “net: fix packet type for stacked VLAN”</changelog>
</package>
<package pkgid="88994a13ce1310a57d27de7c2f7a2ceca29795ab0d618aed2228650e2b079f713006a19080f44fa56b58583d59788b85abeda6a388637cf2903123e3a8d8675c" name="dpic" arch="x86_64">
  <version epoch="0" ver="2024.01.01" rel="bp160.1.12"/>
  <changelog author="dmitry_r@opensuse.org" date="1363003200">- update to version 2013.03.10
  * Minor tweak to svg output</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1380974400">- Update to version 2013.09.30
  * Better portability of the random() function</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1389700800">- Update to version 2014.01.01
  * Input lines of arbitrary length and line continuation (except
    in strings).  Object parameters .thick = .thickness and .len =
    .length, eg t=last box.thick; q = last line.len</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1424865600">- Update to version 2015.02.16
  * Reworked the handling of backslashes in strings in macro arguments.
  * PDF output. Built-in variable dpicopt and variables added for
    detecting command options. Linear objects reworked for
    consistent fill.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1432123200">- Update to version 2015.05.19
  * Bugfixes for nested if-statement and multiple pdf strings.
  * Fix comment lines containing braces in macro and for bodies.
    Revised messages for some errors.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1439467200">- Update to version 2015.06.29
  * Fixed a bug in svg output.
  * Undeferred error messaging. Improved readability of C code.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1503489600">- Update to version 2017.08.01
  * Minor changes and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2020.06.01:
  * SVG text adjustments; GCC-10 conformance.
  * Commas protected by brackets; zero-repetition "for" loop bugfix
    under bison.
  * Fix of environment variable scope, arc attribute; improved error
    messages; generalized macro definition.
  * Corrected typos, copyright notices, version number, string treatment.
  * Bugfix for buffer overflow with extreme arguments of wfloat().
  * This is a major clone of the previous distribution, which
  contained compilable C code together with the original pascal
  source.  The pascal was translated to C code using p2c,
  which was included, and parsing was automated by a custom
  compiler-compiler which was also provided.  The current
  package includes C source only with parsing automated using
  GNU bison.  The original lexical analyser has been kept. To
  avoid introducing bugs, the C code has been changed only to
  accommodate bison; some p2c idiosyncrasies remain. The result
  is functionally identical to the previous version for correct
  input.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1677844800">- update to 2023.02.1:
  * More precise obtuse-angle arcs.
  * Minor addition to the manual.
  * Non-LaTeX error-handling cleanup.
  * Line thickness recovery parameter enabled.
  * Redundant code dating from pascal conversion removed.
  * Robustness fixes.
  * Improved robustness for fuzzed input.
  * Added colored svg sprintf text and % appended to selected outputs.
  * Shift operation bugfix.
  * Improved error messaging; additional distribution examples.
  * CVE-2021-33390: Use-after-free in thedeletestringbox() (boo#1214501).
  * CVE-2021-33388: Heap Buffer Overflow in themakevar() (boo#1214502).
  * CVE-2021-32422: Buffer Overflow in theyylex() (boo#1214503).
  * CVE-2021-32421: Heap Use-After-Free in thedeletestringbox() (boo#1214504).
  * CVE-2021-32420: Heap-based Buffer Overflow in thestorestring() (boo#1214505).</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1720526400">- update to 2024.01.01:
  * SVG stroke fix.
  * Robust arrowheads and pgf text offsets.</changelog>
</package>
<package pkgid="9a225c16a89aa9c3ec3ac02ae9322daf74866338f348a7e8a4406d1125693799cd5050f8c6951c38109f07a949e737333e87003d2ba00987dee14eb02d80a227" name="dpic-doc" arch="noarch">
  <version epoch="0" ver="2024.01.01" rel="bp160.1.12"/>
  <changelog author="dmitry_r@opensuse.org" date="1363003200">- update to version 2013.03.10
  * Minor tweak to svg output</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1380974400">- Update to version 2013.09.30
  * Better portability of the random() function</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1389700800">- Update to version 2014.01.01
  * Input lines of arbitrary length and line continuation (except
    in strings).  Object parameters .thick = .thickness and .len =
    .length, eg t=last box.thick; q = last line.len</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1424865600">- Update to version 2015.02.16
  * Reworked the handling of backslashes in strings in macro arguments.
  * PDF output. Built-in variable dpicopt and variables added for
    detecting command options. Linear objects reworked for
    consistent fill.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1432123200">- Update to version 2015.05.19
  * Bugfixes for nested if-statement and multiple pdf strings.
  * Fix comment lines containing braces in macro and for bodies.
    Revised messages for some errors.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1439467200">- Update to version 2015.06.29
  * Fixed a bug in svg output.
  * Undeferred error messaging. Improved readability of C code.</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1503489600">- Update to version 2017.08.01
  * Minor changes and bugfixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 2020.06.01:
  * SVG text adjustments; GCC-10 conformance.
  * Commas protected by brackets; zero-repetition "for" loop bugfix
    under bison.
  * Fix of environment variable scope, arc attribute; improved error
    messages; generalized macro definition.
  * Corrected typos, copyright notices, version number, string treatment.
  * Bugfix for buffer overflow with extreme arguments of wfloat().
  * This is a major clone of the previous distribution, which
  contained compilable C code together with the original pascal
  source.  The pascal was translated to C code using p2c,
  which was included, and parsing was automated by a custom
  compiler-compiler which was also provided.  The current
  package includes C source only with parsing automated using
  GNU bison.  The original lexical analyser has been kept. To
  avoid introducing bugs, the C code has been changed only to
  accommodate bison; some p2c idiosyncrasies remain. The result
  is functionally identical to the previous version for correct
  input.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1677844800">- update to 2023.02.1:
  * More precise obtuse-angle arcs.
  * Minor addition to the manual.
  * Non-LaTeX error-handling cleanup.
  * Line thickness recovery parameter enabled.
  * Redundant code dating from pascal conversion removed.
  * Robustness fixes.
  * Improved robustness for fuzzed input.
  * Added colored svg sprintf text and % appended to selected outputs.
  * Shift operation bugfix.
  * Improved error messaging; additional distribution examples.
  * CVE-2021-33390: Use-after-free in thedeletestringbox() (boo#1214501).
  * CVE-2021-33388: Heap Buffer Overflow in themakevar() (boo#1214502).
  * CVE-2021-32422: Buffer Overflow in theyylex() (boo#1214503).
  * CVE-2021-32421: Heap Use-After-Free in thedeletestringbox() (boo#1214504).
  * CVE-2021-32420: Heap-based Buffer Overflow in thestorestring() (boo#1214505).</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1720526400">- update to 2024.01.01:
  * SVG stroke fix.
  * Robust arrowheads and pgf text offsets.</changelog>
</package>
<package pkgid="8a74f1c22928cdb5b3d9bf2be7d0f34005db9db8a26c24442233125990b421994623d1d995a05352df906ea467cf16bb0dbfd0818d70416b13c3c773a178d70b" name="dpkg" arch="x86_64">
  <version epoch="0" ver="1.22.21" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1689854400">- openssl.patch: use openssl library for MD5 calculation instead
  of relying on libmd. libmd is not in Ring0
- require Perl 5.28.1 or later</changelog>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
</package>
<package pkgid="4bf0df2790460bb02317d3393fb560622acfbc6b1f3cb737e1bf0ff740ab53f8d95933f880573f789b70c9498785177056f5a1fb3b8e643440ff37c8568a47bc" name="dpkg" arch="x86_64">
  <version epoch="0" ver="1.22.21" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773662400">- Fix bsc#1259385 / CVE-2026-2219.
- Add new patch:
  * CVE-2026-2219.patch</changelog>
</package>
<package pkgid="bda9ec60b3c5791bbc2c9de8052fc072fb6ad9c895a4f27239346569a070554d559752836958c7e1a04df8d51061b1f302cd7e1845cd823493369740319d6713" name="dpkg-devel" arch="x86_64">
  <version epoch="0" ver="1.22.21" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1689854400">- openssl.patch: use openssl library for MD5 calculation instead
  of relying on libmd. libmd is not in Ring0
- require Perl 5.28.1 or later</changelog>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
</package>
<package pkgid="8297f189097c0f009670c8bcc583e966c7e77c126ad3413c244073569a93aab8e1ec56d933b5291ebfec133410b7db3d6ac602833d4336869ef4e5940d2636cf" name="dpkg-devel" arch="x86_64">
  <version epoch="0" ver="1.22.21" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773662400">- Fix bsc#1259385 / CVE-2026-2219.
- Add new patch:
  * CVE-2026-2219.patch</changelog>
</package>
<package pkgid="db729e42224353fb9a143e50c81b352380425b56831c805cf93142cb990e5404bc29d6ee558fcb489fa02f29df04de9cafa211e7780aabf2b6aef80295f6ca51" name="dpkg-lang" arch="noarch">
  <version epoch="0" ver="1.22.21" rel="160000.2.2"/>
  <changelog author="adam.majer@suse.de" date="1689854400">- openssl.patch: use openssl library for MD5 calculation instead
  of relying on libmd. libmd is not in Ring0
- require Perl 5.28.1 or later</changelog>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
</package>
<package pkgid="bef2848f39f20b5fdd1f13e7451e5d999bace6b3e4c407dfbe36a1561c15eb011ed69b08d6a8b8997bb7eac38d7960e7c07e889f4f8a082302c7062dfb541b22" name="dpkg-lang" arch="noarch">
  <version epoch="0" ver="1.22.21" rel="160000.3.1"/>
  <changelog author="martin.schreiner@suse.com" date="1695038400">- Update to version 1.22.0.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.0
- Refresh openssl.patch so it works on 1.22.0.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1700654400">- Update to version 1.22.1.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.1
- Refresh update-alternatives-suse.patch so it applies cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704024000">- Update to version 1.22.2.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2</changelog>
  <changelog author="martin.schreiner@suse.com" date="1709035200">- Prepare for RPM 4.20.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1710158400">- Update to version 1.22.5.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.5
  Version 1.22.5 includes all the changes from 1.22.4 and 1.22.3.
  These may be found here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.4
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.3
- Refresh openssl.patch so it would apply cleanly.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1712750400">- Update to version 1.22.6.
  The changelog for this version isn't very large, so it's provided in full:
  * dpkg-deb: Fix up compressor parameters for default legacy format.
  * Perl modules:
  - Dpkg::Vendor::Debian: Make it possible to disable qa=-bug-implicit-func.
  - Dpkg::Vendor::Debian: Unconditionally set qa bug-implicit-func.
  * Documentation:
  - man: Document dpkg versions supporting SOURCE_DATE_EPOCH for various
    tools.
  * Code internals:
  - libdpkg: Use array access instead of pointer arithmetic for meminfo
    parser.
  - libdpkg: Use a macro to define the zstd default compression level.
  * Build system:
  - Test with minimal library dependencies in CI.
  - Add gen-release script.
  * Packaging:
  - Fix typo in man page reference in changelog.
  * Test suite:
  - Refactor OpenPGP backend and commands list.
  - Refactor certfile and keyfile filenames for OpenPGP test.
  - Skip OpenPGP tests if the backend does not have a verify command.
  * Localization:
  - Fix typos in Swedish man pages translations.
  - Fix typos in Swedish man pages translations.
  - Update Dutch man pages translations.
  - Update Portuguese man pages translations.
  - Update German man pages translation.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723377600">- Update to version 1.22.11.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.11
- Changes from 1.22.10:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.10
- Changes from 1.22.9:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.9
- Changes from 1.22.8:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.8
- Changes from 1.22.7:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.7
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1744632000">- Update to version 1.22.18.
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.18
- Changes from 1.22.17:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.17
- Changes from 1.22.16:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.16
- Changes from 1.22.15:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.15
- Changes from 1.22.14:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.14
- Changes from 1.22.13:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.13
- Changes from 1.22.12:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.12
- Refresh patch:
  * openssl.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1751457600">- Update to version 1.22.21
  The full changelog is very large. Please check it here:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.21
- Changes from 1.22.20:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.20
- Changes from 1.22.19:
  https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.19
- Release 1.22.21 includes the fix upstream for CVE-2025-6297 / bsc#1245573.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773662400">- Fix bsc#1259385 / CVE-2026-2219.
- Add new patch:
  * CVE-2026-2219.patch</changelog>
</package>
<package pkgid="c2f978089f42f1f1c0b5d2a509c8a5e7785d2958cc76caed552e0cc9302f2494571c76d6ad92e94e993491a979ab3c1d33ac2ff36c5f9cbde1bdcfe921485398" name="draco" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="bp160.1.13"/>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1682164800">- initial package (version 1.5.6) for openSUSE</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1703073600">- fix static library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1703073601">- Abide by shared library packaging guide (split to libdraco8)
  and disable -devel-static.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1724155200">- update to 1.5.7
  * Added support for normalized attributes to Emscripten encoder API.
  * Bug fixes.
  * Security fixes.</changelog>
</package>
<package pkgid="ba0b2ac9f15957e38f2f0cd04508deea6eadf6986cca4194844b5fe0fee063e53054ea36667ac8c13f6df93ddd0165d79f1e91d0add53d339567527a8ac73123" name="draco-devel" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="bp160.1.13"/>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1682164800">- initial package (version 1.5.6) for openSUSE</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1703073600">- fix static library</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1703073601">- Abide by shared library packaging guide (split to libdraco8)
  and disable -devel-static.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1724155200">- update to 1.5.7
  * Added support for normalized attributes to Emscripten encoder API.
  * Bug fixes.
  * Security fixes.</changelog>
</package>
<package pkgid="3c734c95d101c299b060dbf61ec0133670db129024bfd2ce7e47d892e515e8115bf5d7dcf08f3e191b5090d9fba11d2808357620cee2634bd5e41febf78e6db2" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.696.g950c4798" rel="160000.1.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
</package>
<package pkgid="5cb0804ddf0da04ecc2837f1ecdc604d69ef3a1f1bae81ee463235a7a941e645cffefa9c0375cf66e1b9bfc422591f36c0f7335e7ea9e3c20ed7cd4e005f018c" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.700.g40f7c5c4" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1758801600">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
</package>
<package pkgid="d8205a650460bf640dc9ee47cce59d56d726ed05f8d5789f0ab6c6e6c8796771e56b1f63c58241698477f171fb4abcaca3dc2c8b0057bbc389c0ae73026acbd6" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="518571ec4cb957f2b92259bc6b4e1362faf137c498766978bb0868fa0816b28b62e3f9aed62561a60ada7577498e7bbe2b5373303ff033de0e04563343f0402f" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.720.g64cb9fbf" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
</package>
<package pkgid="120b3c79bde9c07164e0bbfd1b5f3183eb08f44ff5fb0b6c36cdb859d8278f750c7a322a815786b0fce821eb93e8c1653e01bb3fe53984e1e303f31977ccc0f5" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.722.gdd9d67ff5" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
</package>
<package pkgid="2cd38d91a86af63e6fc8239de89fc65bc155ef48d2b2bbad6bfd980aa1dfb2bb6979408bf1500fa39e602ccb3d35cf623c682536da83389e0ab6d672ba00994e" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.724.gaa87d1594" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1783080000">- Update to version 059+suse.724.gaa87d1594:
  * fix(fips): handle zipl (bsc#1262515)</changelog>
</package>
<package pkgid="a9486cb87d7ac5b5401576d479c134e64f4390ef410068136ac71d2a3aa069e257b542196f8f872f3b9bfda2ceadf687f7e2dfc02adf829fef68aaf698aa9a99" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="059+suse.696.g950c4798" rel="160000.1.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
</package>
<package pkgid="0f26d16cd3819a572641f59efea5c6cb8873137a17605717c338cddfa0cdb0915a8ff1d58d346549d26d740c3906c06e700f0fa110369ab624a6ec7253555288" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="059+suse.700.g40f7c5c4" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1758801600">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
</package>
<package pkgid="6742ddf8a069ef252557cd2926c659a5b3049a180487c602a34efcf4be6e63b69d8210c5a1b56e3a79492804adde6a36cb45732c1e2b4f31757a17c893e0e03f" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="7b4ac729ed36c77912b9da34cb9828026f6a0747af996df9ab7dbb12d1d375c5cbe0011f990c86e625a0b57c0d22ff5b777f0354df1292556cd022fd29a74542" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="059+suse.720.g64cb9fbf" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
</package>
<package pkgid="e3ced25a790c52df4d804a7aa01c3b6f4c837eece24ded1774d2382a2a4fd0c6e89b8050a7cab4ae4b510410a8a78ec7b6ce13aede1697f7019340bbdf890bb4" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="059+suse.722.gdd9d67ff5" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
</package>
<package pkgid="d3dfc413fcb0e0337e5535f6e63b33a6c3c7cbd72c1986a44e89c882d5f963778f3fb312cacb0997c036f887f9f9136e8979f20de8bca93aded4a1c9fbac3bf2" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="059+suse.724.gaa87d1594" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1783080000">- Update to version 059+suse.724.gaa87d1594:
  * fix(fips): handle zipl (bsc#1262515)</changelog>
</package>
<package pkgid="931c7689b035c9e43c4b1c816806fb2f69876c84a9a935eadca1f6f2b0fbe6f2baf2926d4096df9791c739dbd186d7ce44377fc93784156858ac937a20fa4493" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.696.g950c4798" rel="160000.1.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
</package>
<package pkgid="6f51a6e6552fee7f9936d37d94dbb3efef5962d747d7686ee0cf903f3fbb63f9dc098cffc8b64ccc860182ff235019f82ba7159e90a4380e2d184f7c28365dd2" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.700.g40f7c5c4" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1758801600">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
</package>
<package pkgid="7691a19029655b1357f0a9777faa16926125f7345230690c5b0f9bc9688742f002c96e4d17707b626733a12208d98336b605b28b241e8ef49afd717c7b506b8a" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="6bd98eebfaf0c3c7a00fffe16103f61e69ac74a0252164fd7f639eed74f5d1a3c40bdbe349a61abc80209c3ffde4ca6e4ad0eca8e104bbed3051f39f20398539" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.720.g64cb9fbf" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
</package>
<package pkgid="dc7ed1cd37e1efc486ce46ee7f921374f77ba9432ad270dbf0445b693fa1c000bf40abd578f15b12c0919a2ab17f223a67931c2fb6d1fb0ec622bf33152017e9" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.722.gdd9d67ff5" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
</package>
<package pkgid="84411076f17333953867e540ad9fdfabfcaa406aa79700c39d74c8085bea73fbe8e312f2091458b61caa58368f4c5eb1a53513ee12d2733eb387cf70a1be55d1" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.724.gaa87d1594" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1783080000">- Update to version 059+suse.724.gaa87d1594:
  * fix(fips): handle zipl (bsc#1262515)</changelog>
</package>
<package pkgid="11b9acc18142538cc8fd378034edf5f960ed528eaecb306f8d9f997859f326fca9c30fd3515061a68c5ac11fe50cb12d11dbde5241ecf56918a51a726369e816" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.696.g950c4798" rel="160000.1.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
</package>
<package pkgid="2ed536e917284e7382ea67fe4be33f3e0f4e4355ea7ceadb8e0a0db39cf4ecf022abb24f9c708a72370d8fad2a2b8aedd4e2557dfd3232312a04aef09b4f4808" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.700.g40f7c5c4" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1758801600">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
</package>
<package pkgid="cb997326dff6c978db04732e872d9164d9fb10ecd5d165fa2a87602eb080020ca68c30b6412326c82325c7ade4a8861d142a01771cf30820911eb558272ad87d" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="9dff9eb10c9d2b11e081c5bc64fe8287572b3c1aa769c7be87a0a416f6697721deb1f8fe01d3f067296e994499eedc8987f169f694cc4f1d2c84ef212c970d8d" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.720.g64cb9fbf" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
</package>
<package pkgid="e51fa0958fae2709c499788591bb78cab097badd95b1ac74c390c1ad44e5f3e2b71421602eb8a39aced6718a26defb9fef3202ca730d7cea58eac62b1239dcdd" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.722.gdd9d67ff5" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
</package>
<package pkgid="dbef930032673deaaa99c80a7c353d205c83a946e98ad2e65eb29ed3f441bd45384cd3eb67cbb832110782c6bdedb4d54f57219ce28201335d796b81ee24ddb3" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.724.gaa87d1594" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1783080000">- Update to version 059+suse.724.gaa87d1594:
  * fix(fips): handle zipl (bsc#1262515)</changelog>
</package>
<package pkgid="5c6c9d20ac76cb15d8e50df071da326b2e1510436ae200c972130983530bb27a9a4b3b952e19bdd1bcc7e93429fe2929f002b96c8f0b71ad18a21c3261f4adef" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="10.2.29" rel="160000.1.2"/>
  <changelog author="marcus.schaefer@gmail.com" date="1752667200">- Fix centos/test-image-live-disk-v10
  There is no package named iprutils</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753600">- Do not drop /config.partids
  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753601">- Do not strictly require config.partids in repart
  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753602">- relocate GPT at the end of disk using sfdisk
  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753603">- Apply proper udev locking
  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753604">- Extend test-image-lvm integration test
  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840000">- Fix dracut code to be POSIX compliant
  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840001">- Bump version: 10.2.27 → 10.2.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358400">- Fix return from repart stage
  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358401">- Bump version: 10.2.28 → 10.2.29</changelog>
</package>
<package pkgid="2d9b64a32490e0f64e383acb6d821a608302d545d5d396182cf2ed6aa68aeb488c3c33fb5afee4281920142e09abf81fd95fd02bf5f765102e88b49f97f9f4d9" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Fix dracut Makefile install target
  module dir names have changed due to recommended dracut
  module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Update dracut version compat runtime check
  Update check_dracut_module_versions_compatible_to_kiwi to match
  with new dracut module dirs which have changed due to recommended
  dracut module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Update test-image-custom-partitions test build
  Fix patch files to match with new dracut module dirs</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728003">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728004">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728005">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
</package>
<package pkgid="4653c5d6d7a1d294c12698fc1b3ce3da549014c37a9be4b7a300d718dab397a2677e843cebba664efe6bb1eeffa25daa8af5a435e4e8707bea15424914e1f8c2" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="8602c4973e298d7649b1105b3d4f805a7b9306c9b7bb228360f53b426d614df5b1743901be9541d5f5ea71f6d6408bfb613fd3fc0bc642d97b3d785888ac3a7b" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="10.2.29" rel="160000.1.2"/>
  <changelog author="marcus.schaefer@gmail.com" date="1752667200">- Fix centos/test-image-live-disk-v10
  There is no package named iprutils</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753600">- Do not drop /config.partids
  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753601">- Do not strictly require config.partids in repart
  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753602">- relocate GPT at the end of disk using sfdisk
  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753603">- Apply proper udev locking
  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753604">- Extend test-image-lvm integration test
  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840000">- Fix dracut code to be POSIX compliant
  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840001">- Bump version: 10.2.27 → 10.2.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358400">- Fix return from repart stage
  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358401">- Bump version: 10.2.28 → 10.2.29</changelog>
</package>
<package pkgid="2be36cb52cb2f11a259a096c4bd6466d0c7b4cb9e60552d037812aca657bf06a77363c098bac3d32b645674fe535352f470b985186c4889d82da57c9476a9d38" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Fix dracut Makefile install target
  module dir names have changed due to recommended dracut
  module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Update dracut version compat runtime check
  Update check_dracut_module_versions_compatible_to_kiwi to match
  with new dracut module dirs which have changed due to recommended
  dracut module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Update test-image-custom-partitions test build
  Fix patch files to match with new dracut module dirs</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728003">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728004">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728005">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
</package>
<package pkgid="fbde1ae51d56cd2a6b903419fe713d2bfe53cf2413c26bd34ff56372d3eadea3df5b05fa97fa278455df84d4088e94fa18d7a340f4e7433c50a4861fa64ac5bd" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="9b6de16986a2fa65d19f6573a951b552ceffa7887f75b1d846e65838babe010dd2f7c145b6653b2cb17e53e430e3faa642ee3b220cb5ab5746c95c4813e9e8a7" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="10.2.29" rel="160000.1.2"/>
  <changelog author="marcus.schaefer@gmail.com" date="1752667200">- Fix centos/test-image-live-disk-v10
  There is no package named iprutils</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753600">- Do not drop /config.partids
  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753601">- Do not strictly require config.partids in repart
  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753602">- relocate GPT at the end of disk using sfdisk
  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753603">- Apply proper udev locking
  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753604">- Extend test-image-lvm integration test
  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840000">- Fix dracut code to be POSIX compliant
  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840001">- Bump version: 10.2.27 → 10.2.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358400">- Fix return from repart stage
  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358401">- Bump version: 10.2.28 → 10.2.29</changelog>
</package>
<package pkgid="8b1b2360ebe34d3790e8ccf436ab94bb3ea1d1ff5f268048488d6a7a1bfc96c6d363747b6ed450c124ffad6b7e1156ee0e23019c92353ee90e889e649c2a0cd5" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Fix dracut Makefile install target
  module dir names have changed due to recommended dracut
  module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Update dracut version compat runtime check
  Update check_dracut_module_versions_compatible_to_kiwi to match
  with new dracut module dirs which have changed due to recommended
  dracut module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Update test-image-custom-partitions test build
  Fix patch files to match with new dracut module dirs</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728003">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728004">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728005">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
</package>
<package pkgid="06fee661ce9e9b89edceee6bdbca173b6f8611523d06c7e5381a8f17d02f73d945b82c442fe75e8045684461570ebd593b85058792b09a10c417cfd5fcf36317" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="c1e3348e16791e20a3a2d06eaceb1cf45907c572fd1812582f40efe1a258687937247ddc8d2e298927e8ed7ec1593f98638fea2d9f8b2ef9b4bfbdf4862d3e04" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="10.2.29" rel="160000.1.2"/>
  <changelog author="marcus.schaefer@gmail.com" date="1752667200">- Fix centos/test-image-live-disk-v10
  There is no package named iprutils</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753600">- Do not drop /config.partids
  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753601">- Do not strictly require config.partids in repart
  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753602">- relocate GPT at the end of disk using sfdisk
  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753603">- Apply proper udev locking
  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753604">- Extend test-image-lvm integration test
  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840000">- Fix dracut code to be POSIX compliant
  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840001">- Bump version: 10.2.27 → 10.2.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358400">- Fix return from repart stage
  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358401">- Bump version: 10.2.28 → 10.2.29</changelog>
</package>
<package pkgid="df74db06fe313b8664f842265865a88ecc18e8a157c0bc7c4fb85a0dea008f0fe39eb437c986633023632fbdaa7656246394c9b52cf4aac3f70f846b777d9239" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Fix dracut Makefile install target
  module dir names have changed due to recommended dracut
  module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Update dracut version compat runtime check
  Update check_dracut_module_versions_compatible_to_kiwi to match
  with new dracut module dirs which have changed due to recommended
  dracut module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Update test-image-custom-partitions test build
  Fix patch files to match with new dracut module dirs</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728003">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728004">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728005">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
</package>
<package pkgid="9c2a6f4c4c8b0a2c050ed83db4981e71c57601db9367fd3bc9bcc27c20f7694f035e050dc7986c0597ae30e009bdcc0c3e91fc2a88d43d42a854cdcd77976115" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="395f5400d953fc000b835e84f32aaa3fa0327693661f24e577708e5586216cd02362ab4583a71f26ad431e619db2bb1122d3fe3671cc841f779762b1714d3752" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="10.2.29" rel="160000.1.2"/>
  <changelog author="marcus.schaefer@gmail.com" date="1752667200">- Fix centos/test-image-live-disk-v10
  There is no package named iprutils</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753600">- Do not drop /config.partids
  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753601">- Do not strictly require config.partids in repart
  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753602">- relocate GPT at the end of disk using sfdisk
  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753603">- Apply proper udev locking
  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753604">- Extend test-image-lvm integration test
  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840000">- Fix dracut code to be POSIX compliant
  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840001">- Bump version: 10.2.27 → 10.2.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358400">- Fix return from repart stage
  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358401">- Bump version: 10.2.28 → 10.2.29</changelog>
</package>
<package pkgid="75f564acdce311f869940203b389c8e359545a724cd91bc2993cc854daf5ffa2fcdbc99739a45db45530598336903af40213dddf926d35710e85c5166b1917b8" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Fix dracut Makefile install target
  module dir names have changed due to recommended dracut
  module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Update dracut version compat runtime check
  Update check_dracut_module_versions_compatible_to_kiwi to match
  with new dracut module dirs which have changed due to recommended
  dracut module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Update test-image-custom-partitions test build
  Fix patch files to match with new dracut module dirs</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728003">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728004">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728005">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
</package>
<package pkgid="f10e97c3a0805fb19693449e4318f031e181b1f7c1dc4f81b5e0f774e9881f326720deb0dda8f51f8a64e8d966fc1e1ecf638af00c63334c1590180ef03af537" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="fb804149fbcc2f6b728c0ec5ba78bf736ca5b37fc86b93a862019ff9e63e682da19b4f21ec6fe4e422f19e4236e2162c93310eeece34ada0d04857d39d532822" name="dracut-kiwi-verity" arch="x86_64">
  <version epoch="0" ver="10.2.29" rel="160000.1.2"/>
  <changelog author="marcus.schaefer@gmail.com" date="1752667200">- Fix centos/test-image-live-disk-v10
  There is no package named iprutils</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753600">- Do not drop /config.partids
  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753601">- Do not strictly require config.partids in repart
  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753602">- relocate GPT at the end of disk using sfdisk
  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753603">- Apply proper udev locking
  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752753604">- Extend test-image-lvm integration test
  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840000">- Fix dracut code to be POSIX compliant
  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1752840001">- Bump version: 10.2.27 → 10.2.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358400">- Fix return from repart stage
  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1753358401">- Bump version: 10.2.28 → 10.2.29</changelog>
</package>
<package pkgid="ebb70aad659f01a190942d8319d66ec2af588c0d98e9ec31d031a74de510468de627ce6ea54fb98e5e879df828e174a2243dc6845aa64c62c94e38053b851726" name="dracut-kiwi-verity" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.1.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Fix dracut Makefile install target
  module dir names have changed due to recommended dracut
  module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Update dracut version compat runtime check
  Update check_dracut_module_versions_compatible_to_kiwi to match
  with new dracut module dirs which have changed due to recommended
  dracut module ordering for out-of-tree modules.</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Update test-image-custom-partitions test build
  Fix patch files to match with new dracut module dirs</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728003">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728004">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728005">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
</package>
<package pkgid="9ea047f1a5ff2d40e8660c998e20b8c663a22e54172f4eeb963d16e028d0030886c370b4ebac5b8f6fa755462af94d1cde635fcd7ec5288e9fb94a5ec0a2d5a6" name="dracut-kiwi-verity" arch="x86_64">
  <version epoch="0" ver="10.2.33" rel="160000.2.1"/>
  <changelog author="marcus.schaefer@gmail.com" date="1756728000">- Mount proc when needed
  Using cp -a might lookup in proc/self/.. under certain conditions.
  Make sure to mount proc for config/function that might trigger
  this condition. This Fixes #2876</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728001">- Add test for profiled overlays
  kiwi supports overlay files per profile, but we didn't had a
  proper integration test for it. This commit adds one</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1756728002">- Fix rawhide integration test
  The package shim-ia32 got dropped</changelog>
  <changelog author="Klaas-@users.noreply.github.com" date="1756814400">- References #2474 and #2475 poweroff instead of halt on oem shutdown</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505600">- Fixed typo in documentation
  Invalid XML syntax, missing end tag. This Fixes #2882</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757505601">- Run grub mkconfig with os-prober disabled
  Set GRUB_DISABLE_OS_PROBER=true to the caller environment
  such that it gets consumed via /etc/grub.d/30_os-prober
  This Fixes #2883</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757592000">- Bump version: 10.2.32 → 10.2.33</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763380800">- Fixed spec file requires
  The package requirement for binutils was set to TW (&gt;=1650)
  only but is also required for SLES16/Leap16 which is 1600
  This commit fixes the condition to match with all required
  distributions and fixes bsc#1253637</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1763985600">- Delete workflows conflicting with upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1767960000">- Fixed ramdisk sysroot generator
  Do not use a custom _dev name and stick with the UUID representation
  of the disk image in RAM after deployment. Former versions of udev
  did not create a by-uuid device representation which now seems to
  have changed. This then leads to the device name RamDisk_rootfs
  not being created the and respective .device unit times out.
  In addition the timer unit for the standard device representation
  changed to infinity. This fixes bsc#1254116</changelog>
</package>
<package pkgid="524d01a183ef7b2aaad9d82080a93f95aa259de4ca53b8c0a32c3699a217f22905849e330a7a376d68e6288b107f9b71cb905447b376257f1f0cc2446ab469ff" name="dracut-pcr-signature" arch="noarch">
  <version epoch="0" ver="0.6+2" rel="160000.1.2"/>
  <changelog author="aplanas@suse.com" date="1713355200">- Update to version 0.3+5:
  * Generate the initrd after installation
  * Temporaly conflict with GRUB2
  * Small fix for comment</changelog>
  <changelog author="aplanas@suse.com" date="1713787200">- Update to version 0.3+6:
  * Add UTF8 character set</changelog>
  <changelog author="aplanas@suse.com" date="1715601600">- Adapt regenerate initrd macro expansion</changelog>
  <changelog author="aplanas@suse.com" date="1717070400">- Update to version 0.4:
  + No new features, tagged on 0.3+6
- Remove GRUB2 conflict</changelog>
  <changelog author="aplanas@suse.com" date="1728302400">- Update to version 0.4+2:
  * Synchronize spec file
  * Copy JSON file in /run to survive initrd</changelog>
  <changelog author="aplanas@suse.com" date="1730376000">- Update to version 0.5+0:
  * Normalize spec file
  * Use a generator to mount ESP
  * Avoid race condition when multiple disks are encrypted</changelog>
  <changelog author="aplanas@suse.com" date="1734436800">- Update to version 0.5+1:
  * Make the mount do not depend of default service</changelog>
  <changelog author="aplanas@suse.com" date="1738324800">- Update to version 0.6+0:
  * Copy measure-pcr files</changelog>
  <changelog author="aplanas@suse.com" date="1742212800">- Update to version 0.6+1:
  * Fix typo in service description</changelog>
  <changelog author="aplanas@suse.com" date="1753185600">- Update to version 0.6+2 (bsc#1246322):
  * Extract the token from os-release</changelog>
</package>
<package pkgid="93f116a0f41b43871e5d79af9aa7f0471b7cd7eb38da7e6fb3a12fad512fdd2a49e392604e4528ac2ac3c7e43ec89616626a23796ffbc50ec4cc715d1c3af90e" name="dracut-pcr-signature" arch="noarch">
  <version epoch="0" ver="0.7+0" rel="160000.1.1"/>
  <changelog author="aplanas@suse.com" date="1717070400">- Update to version 0.4:
  + No new features, tagged on 0.3+6
- Remove GRUB2 conflict</changelog>
  <changelog author="aplanas@suse.com" date="1728302400">- Update to version 0.4+2:
  * Synchronize spec file
  * Copy JSON file in /run to survive initrd</changelog>
  <changelog author="aplanas@suse.com" date="1730376000">- Update to version 0.5+0:
  * Normalize spec file
  * Use a generator to mount ESP
  * Avoid race condition when multiple disks are encrypted</changelog>
  <changelog author="aplanas@suse.com" date="1734436800">- Update to version 0.5+1:
  * Make the mount do not depend of default service</changelog>
  <changelog author="aplanas@suse.com" date="1738324800">- Update to version 0.6+0:
  * Copy measure-pcr files</changelog>
  <changelog author="aplanas@suse.com" date="1742212800">- Update to version 0.6+1:
  * Fix typo in service description</changelog>
  <changelog author="aplanas@suse.com" date="1753185600">- Update to version 0.6+2 (bsc#1246322):
  * Extract the token from os-release</changelog>
  <changelog author="aplanas@suse.com" date="1754049600">- Update to version 0.6+3:
  * Use installkernel() only to install kernel modules</changelog>
  <changelog author="aplanas@suse.com" date="1762430400">- Update to version 0.6+4:
  * Do not always install the dracut module in hostonly mode</changelog>
  <changelog author="aplanas@suse.com" date="1778068800">- Update to version 0.7+0:
  * Boot the ESP in /sysefi during initrd</changelog>
</package>
<package pkgid="0dfc1781b22a560d9e26295e0e4a1c00562068447f845ea186a8c859e243c8f1ae906a4bf8484ec82d4b84706d859888b2f3c624bbd6225f53307e870b5ce8e0" name="dracut-sshd" arch="noarch">
  <version epoch="0" ver="0.6.7" rel="bp160.1.4"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1563796800">- Initial checkin</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1563883200">- Add gladiacs patchset
  * Adds 0001-Fail-if-there-is-no-authorized_keys.patch
  * Adds 0002-Use-install-command-to-create-directories.patch
  * Adds 0003-Either-install-ssh-or-sshd-sysconfig.patch
  * Adds 0004-Try-to-load-etc-sysconfig-ssh.patch
  * Adds 0005-Create-privilege-seperation-dirs-for-Fedora-and-SUSE.patch
  * Adds 0006-Only-include-systemd-networkd-if-active.patch
  * Adds 0007-Add-network-dependency-if-systemd-networkd-is-not-us.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1591099200">- Update to upstream version 0.5.1-2
  - Adds support for SUSE
  - Adds support for Arch
  - Properly install sshd depedencies
  - Support dracut_authorized_keys file for early boot
  - Removes SUSE support patches that are now part of the upstream release
  * Drops 0001-Fail-if-there-is-no-authorized_keys.patch
  * Drops 0002-Use-install-command-to-create-directories.patch
  * Drops 0003-Either-install-ssh-or-sshd-sysconfig.patch
  * Drops 0004-Try-to-load-etc-sysconfig-ssh.patch
  * Drops 0005-Create-privilege-seperation-dirs-for-Fedora-and-SUSE.patch
  * Drops 0006-Only-include-systemd-networkd-if-active.patch
  * Drops 0007-Add-network-dependency-if-systemd-networkd-is-not-us.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1591099201">- spec: Add full Github URL for tar archive.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604318400">- Update to upstream version 0.6.1-2 (jsc#SLE-12273)
- Add patch to provide hints after logging in via SSH for
  Adds 0001-Give-users-better-hints-after-logging-in.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605355200">- Update patch for log-in hints to final upstream version
  - removes 0001-Give-some-guidance-through-motd-prompt.patch
  - adds 0001-Give-users-better-hints-after-logging-in.patch</changelog>
  <changelog author="Antonio Feijoo &lt;antonio.feijoo@suse.com&gt;" date="1722427200">- Support OpenSSH 9.8
  * Adds 0002-Support-OpenSSH-9.8.patch
  * Adds 0003-Support-OpenSSH-9.8-for-openSUSE.patch</changelog>
  <changelog author="Taeyeon Mori &lt;taeyeon@oro.sodimm.me&gt;" date="1735732800">- Update to 0.6.7
  * Enable SFTP access
  * Removed 0001-Give-some-guidance-through-motd-prompt.patch (upstream)
  * Removed 0002-Support-OpenSSH-9.8.patch (upstream)
  * Removed 0003-Support-OpenSSH-9.8-for-openSUSE.patch (upstream)
- Add Suggests: systemd-network to go with included docs and examples</changelog>
  <changelog author="Antonio Feijoo &lt;antonio.feijoo@suse.com&gt;" date="1745841600">- Support OpenSSH 10.0
  * Adds 0001-Add-sshd-auth-binary.patch
  * Adds 0002-eliminate-misleading-error-message-with-openssh-9.patch</changelog>
</package>
<package pkgid="2ad3c189843ac563a3e0b416b2ffd02349bc55a65ffbe9509c1b41f323353ef2f5bef7b47ea08630955bc432837c1b51203c3bbbc2cb1b4d589f68b87fdd7bcb" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="059+suse.696.g950c4798" rel="160000.1.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.610.g850d981a:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
</package>
<package pkgid="ee154c7b4095e333eece376b2df024d089b951577e7c6d0c87c1df69745479dc289e5bac1964955b9893aa1ed6b2f93dc18583501354d1c8a3c7561203c7271e" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="059+suse.700.g40f7c5c4" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1737115200">- Update to version 059+suse.651.g303e60b5:
  Sync SLFO with Factory (bsc#1236018):
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)
  * fix(systemd): copy 20-systemd-stub.conf into the initrd
  * feat(systemd-coredump): save coredumps to journal
  * fix(suse-initrd): shellcheck SC1007
  * fix(pcsc): add libpcsclite_real.so.*
  * fix(dracut-systemd): use expected PS1 in the emergency shell
  * fix(dracut-systemd): unquote systemd conf strings
  * feat: add header comment to generators
  * refactor: change TimeoutSec=0 to TimeoutSec=infinity
  * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
  * fix(btrfs): write cmdline in install()
  * fix(dracut.sh): omit compressed kernel modules from find searching exec files
  * fix(dracut): don't apply aggressive strip to kernel modules
  * fix(dracut-install): copy xattr when use clone ioctl
  * fix(systemd-ask-password): no graphical output in aarch64 (bsc#1224404)
  * perf(drm): group dracut_instmods calls
  * fix: do not write to /usr/lib/modprobe.d at boot
  * fix(install.d): skip if dracut is not the initrd or UKI generator
  * style(install.d): shfmt reformat
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)
  * fix(dracut.spec): do not check if fillup template exists at %post end
  * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068)
  * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator
  * fix(systemd): explicitly install some libs that will not be statically included
  * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir
  * fix(dracut-util): avoid memory leak
  * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists
  * fix(dracut-install): release memory allocated for regular expressions
  * fix(dracut-install): memory leak in `--modalias` option
  * refactor(dracut-install): strerror(errno) -&gt; %m
  * perf(dracut-install): don't strdup() environment block
  * perf(dracut-install): don't reallocate {src,dst}path in hmac_install()
  * perf(dracut-install): don't strdup() excessively for dracut_install()
  * perf(dracut-install): stat() w/unused buf -&gt; access(F_OK) in dracut-install
  * perf(dracut-install): multiple single-character strstr()s -&gt; strpbrk()
  * chore: remove src/install/hashmap.lo
  * feat(dracut): add option to disable automatic guessing of output file (bsc#1213648)
  * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1739966400">- Update to version 059+suse.658.ge9a17609:
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * feat(livenet): get live image size from TFTP servers</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1758801600">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
</package>
<package pkgid="fac9f552b6743e4c1d6977197dbc93236b49bfab67885f8bffa9c6b90052db4b2aefeded7af79d20ca8318307a317cfec4f842a09a8f9b9d306d9c057a0a04a0" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="059+suse.717.g75494a30" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.667.gf0265ebe:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(90kernel-modules): explicitly include xhci-pci-renesas (bsc#1238258)
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
</package>
<package pkgid="f5c63448ba180f273d02915e034cd9d23602f549d79d79405b376b44952f3199bf060bb8b21ce4f280a123ffa40c9b3dc073a7d2184fd945f6db8930b4fe0573" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="059+suse.720.g64cb9fbf" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1742558400">- Update to version 059+suse.672.g25f25f98:
  * fix(dracut.spec): move znet to the main package (bsc#1239632)
  * feat(lsinitrd.sh): print stored dracut cmdline
  * feat(lsinitrd.sh): enable unpacking files from squash-root.img</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
</package>
<package pkgid="0d1cc45a41afaf5d4611caea6f10611aeb0c62a2bfc55c84fbae11c1c357c31db2ec087b4366c807832926142628a133ae0f89bcabed868460cf2597a4009815" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="059+suse.722.gdd9d67ff5" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.683.g38e017da:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(dmsquash-live): use load_fstype to load driver for filesystems
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1744804801">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
</package>
<package pkgid="ed9c7272b2246b405870257f80c3fe5b4dcd86768beab0dbe8ed170d00c755ad48bd367a96b2842f5546cecc1c7779de4717f4a2fb6f7f1b098a43a92615451e" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="059+suse.724.gaa87d1594" rel="160000.1.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1744804800">- Update to version 059+suse.684.g4c6c5a89:
  * fix(dracut.spec): require jq for nvmf (bsc#1239603)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.690.g496a1409:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)
  * fix(dracut-init): assign real path to srcmods (bsc#1241114)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1752667200">- Update to version 059+suse.692.g6ec224d5:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.696.g950c4798:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(74nvmf): set root=nvmf (bsc#1238848)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1761048000">- Update to version 059+suse.700.g40f7c5c4:
  Additional fixes for PXE boot with filled-in NBFT (bsc#1238848):
  * fix(74nvmf): make sure autoconnect script is run at least once
  * fix(74nvmf): only set netroot if it's yet empty</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1764331200">- Update to version 059+suse.703.g9c695861:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1767009600">- Update to version 059+suse.717.g75494a30:
  Fix and update testsuite (bsc#1254873):
  * test(FULL-SYSTEMD): ignore errors in systemd-vconsole-setup.service
  * test: move /failed to /run/failed as rootfs might be read-only
  * test(FULL-SYSTEMD): use poweroff to shut down test
  * test(FULL SYSTEMD): no need to include dbus to the target rootfs
  * test: make the size of all test drives 512 MB
  * fix(systemd): move installation of libkmod to udev-rules module
  * test: switch to virtio for the QEMU drive
  * test: switch to virtio for the QEMU drive
  * test: increase test VM memory from 512M to 1024M to avoid OOM killer
  * test: move more common test code to test-functions
  * test: upgrade to ext4
  Other:
  * fix(nfs): do not execute logic in nfs hooks if netroot is not nfs (bsc#1253960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1772625600">- Update to version 059+suse.720.g64cb9fbf:
  Always include a defined set of kernel modules for aarch64 (bsc#1257955):
  * fix(kernel-modules): always include arm/aarch64 specific modules in sloppy mode
  * fix(kernel-modules): make sure block modules are always included
  Other:
  * test(BTRFSRAID): simplify and rework to avoid intermittent errors (bsc#1258960)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1781870400">- Update to version 059+suse.722.gdd9d67ff5:
  * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  * fix(network-legacy): add input validation to RFC 3442 route parser</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1783080000">- Update to version 059+suse.724.gaa87d1594:
  * fix(fips): handle zipl (bsc#1262515)</changelog>
</package>
<package pkgid="ab3a5176237d4fe135ec4628c5265bd2e7cdbac85403f263ac115b4e49c751acf662319971fb82a2778bc7cb2042f677035b6a71d20c3db5c41aad2444c75ff8" name="dracut-transactional-update" arch="x86_64">
  <version epoch="0" ver="5.0.7" rel="160000.1.2"/>
  <changelog author="iforster@suse.com" date="1736683200">- Version 5.0.0
  - Rework /etc handling; instead of maintaining complex overlay
    mount layers use a btrfs subvolume of the corresponding
    snapshot instead.
    Syncing changes before the reboot will be done by during boot
    (or during apply) by transactional-update-sync-etc-state
    instead. [jsc#SMO-367]
    Also resolves: [boo#1140472],
    [gh#openSUSE/transactional-update#117]
  - Add EXPERIMENTAL support for performing updates using a
    container image [gh#openSUSE/transactional-update#128]. Note
    that this command is only available via
    `transactional-update apply-oci ...` for now and cannot be
    triggered from the API or D-Bus interface. Moreover the syntax
    may and probably will change in future releases.
  - Removed `status` command - it was disabled by default for a
    long time already and unmaintained
  - tukit: Fix snippet directory in man page
  - t-u: Don't apply again if snapshot is current already
  - t-u: Prevent self-updates between major t-u versions because
    these usually require additional files
  - Fix missing files when using `make dist`
  - Unified Copyright headers
  - Make Bash scripts shellcheck compatible
  - Replace tabs with spaces in Shell scripts to avoid the complex
    tab / space changes
  - Various other minor internal optimizations and fixes</changelog>
  <changelog author="fvogt@suse.com" date="1744113600">- Version 5.0.1
  - Fix path to rebootmgrctl [bsc#1236908]</changelog>
  <changelog author="fvogt@suse.com" date="1744891200">- Version 5.0.2
  - Fix continuing from an already booted snapshot
  - Fix check for overlayfs when using tukit open with --discard</changelog>
  <changelog author="fvogt@suse.com" date="1745496000">- Version 5.0.3
  - When continuing a transaction that was based on the running
    system, sync new changes from /etc into the new snapshot.
    This way it behaves as-if the snapshot was booted into
    before continuing the transaction, which matches the
    behaviour of versions &lt; 5.0.
  - Fix syncing of file times and ownership
  - Do not sync /etc/etc.syncpoint/ into the running system
    (or parent snapshot) when using --discard</changelog>
  <changelog author="fvogt@suse.com" date="1749729600">- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]</changelog>
  <changelog author="iforster@suse.com" date="1750420800">- Add correct SELinux policy version dependency for SLE 16</changelog>
  <changelog author="iforster@suse.com" date="1751630400">- Version 5.0.5
  - Add support for kdump 2.1.0 [bsc#1243758]
  - Integrate test to support `make check`</changelog>
  <changelog author="iforster@suse.com" date="1752062400">- Version 5.0.6
  - Fix missing x-initrd.mount in fstab on migration [boo#1246139]
    When migrating overlayfs based /etc to btrfs subvolumes, then
    the attribute was not set - this may result in failures from
    services operating on /etc during initrd phase such as SELinux
    relabelling
  - Optimize execution time of tests</changelog>
  <changelog author="iforster@suse.com" date="1753099200">- Version 5.0.7
  - Add sysext compatibility [bsc#1246140]
  - Fix soft-reboot with btrfs subvolume based /etc
  - Sync /etc layers also on soft-reboot
  - Bind mount /run/systemd/journal to allow log calls
    [gh#openSUSE/transactional-update#149]
  - Use rootlesskit instead of fakeroot for tests
  - Small coding style fixes
- Temporarily disabling the testsuite because it doesn't run in
  the build environment so far</changelog>
  <changelog author="iforster@suse.com" date="1753272000">- Add journalmount.patch to bind mount systemd journal only when
  available</changelog>
</package>
<package pkgid="ea000eea9d444d8467f749a9f92dd285b8c6b895b194ec2029d4daea2e8ae1778f8bd0ff3dd9708a86183e47489f4fcc4e39357c5bde4da4f8f70426eac6907f" name="dragon-drop" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="bp160.1.12"/>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1721131200">- Initial package, version 1.2.0</changelog>
</package>
<package pkgid="826b4662f93db3db69e273b4a81b87df7e4d5b1c147d98b827260bca45015e98dc05ba003e631ffdb8626eb83e432c6a64cb44b4dca87afb3e6b8cc5184325d8" name="dragonbox-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="bp160.1.10"/>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1658232000">- Initial packaging of version 1.1.3</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1663243200">- Improve spec file</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1691496000">- Build with g++ &gt;= 7 since it is the version that allows C++17
- Added patch:
  * cmake.patch
    + Build with cmake &gt;= 3.5
    + Allow building on SLE12-SP5</changelog>
</package>
<package pkgid="a153a602e4e4e7f743003232b98003a3567a6bb59144788a507a4bae7f2e80f3d971d71e0ff3fabdb5bcab8a86bdacc1f3f1baa8b1894d1de1bd401a15fa63bd" name="dragonplayer" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * KPart: drop since kf6 unused "Id" from metadata</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * KPart: use apps.kde.org as homepage in metadata
  * KPart: drop since kf6 unused "Id" from metadata
  * Add xml/yaml linting
  * Add reuse files for app icon
  * Use dragonplayer app icon from breeze-icons</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * flatpak: update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="e8134ff8adad4d2b7e814968cf0ac237807a0c079e654730922d62151543eddd39f78ff8204e390e5bd5ef8eac65991d88edd068320010057e8e84684b457cd9" name="dragonplayer-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- No code change since 24.12.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- No code change since 24.12.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- Changes since 24.12.2:
  * KPart: drop since kf6 unused "Id" from metadata</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Changes since 24.12.3:
  * KPart: use apps.kde.org as homepage in metadata
  * KPart: drop since kf6 unused "Id" from metadata
  * Add xml/yaml linting
  * Add reuse files for app icon
  * Use dragonplayer app icon from breeze-icons</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- No code change since 25.03.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * flatpak: update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- No code change since 25.04.1</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="98059a7f98106f6411e9b5bd2e60a3c495a7b351a6b56cebacb9c61d370b4e64b681f23b008621144c9f467cdde31ffb7b934cd7f6c1081591083150ee00a0f6" name="drawing" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="bp160.1.9"/>
  <changelog author="slbtongying &lt;shenlebantongying@gmail.com&gt;" date="1613044800">- initial upload.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619870400">- updated 0.8.0 release
  - new, richer, more readable bottom pane for the selection tool
  - add a "replace with" option to the eraser tool
  - use an adequate layout on LXDE or LXQt
  - force the release notes down users' throat (#347)
  - rewrite the help manual to better force it down users' throat (#347)
  - add color application mode support to the "shape" tool (#329)
  - persist the text background style (#340) and the shape filling style options
  - brush supporting pressure-sensitive input (#69, #116)
  - hairy brush supporting pressure-sensitive input (#69, #116)
  - airbrush supporting pressure-sensitive input (#69, #116)
  - calligraphic nip supporting pressure-sensitive input (#69, #116)
  - fix unexpected "jumps" when unselecting a selection that was defined by an undo
  - improve the fullscreen mode, with a way to toggle the tools list (#265, #189)
  - add an "increase constrast" filter (#308)
  - deleting the selection can now leave something else than transparency #232
  - option to exclude the color left under the selection from the selection itself #232
  - rewrite the UI for changing the color application mode (#329)
  - remove the cool but deprecated GNOME Shell app menu
  - improve flatpak CI (#319, Bilel Moussaoui)
  - update several translations</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1620043200">- use BuildRequires: gobject-introspection instead of hardrequiring
  typelibs, remove -lang recommends, handled better automatically.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Add explicit itstool BuildRequires, as meson.build checks for it:
  do not expect anything else to pull it in.</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1648987200">- updated to 1.0.0 release
  - enable tools with "alt+letter" mnemonics
  - larger sidebar items, where the selected tool is easier to see
  - new "skew" tool
  - enable or disable specific tools options with the [shift] or [alt] keyboard modifiers
  - show more numerous, more dynamic, more contextual help tips as the window's subtitle
  - display cursor coordinates and other related data when pressing the [ctrl] keyboard modifier
  - dynamically change the label of the "options" submenu in the menu-bar, to increase its discoverability
  - scale tool option to set the size in percentage
  - suggest to "apply &amp; save" when trying to save while an operation is unapplied
  - highlighter option to straighten the line, so it better follows the underlying text
  - improvements to the "points" tool's numbers readability
  - suggest to "apply &amp; deselect" when trying to save while the    selection is active
  - more precise tools for tiny modifications required by pixel-art
  - display pixels sharply when zooming deeper than 400%
  - hide information messages after 4 seconds if they're not that useful
  - disable the 'reload image from the disk' action if the image has never been saved
  - new 'reset the canvas' action (ctrl+backspace)
  - warn the user if they're opening an already opened image
  - suggest to reload the picture if it has changed on the disk
  - artificially limited framerate to avoid overloading the CPU
  - menu item and action to change the theme variant preference
  - toggle the menubar with ctrl+f2
  - update the user help manual
  - shorter appdata summary, to comply with guidelines
  - update several translations</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1649073600">- Patched meson.build in help to fix build issue with itstool which kept it from building.
  meson_build.patch</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1649332800">- Fixed translation and help file locations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 1.0.1:
  * enable the highlighter by default (#458)
  * less intrusive "what's new" message dialog (#504)
  * non-linear zooming speed profile (to zoom faster when using extreme values) (#499)
  * slower scrolling speed to have a better precision with higher zoom levels (#499)
  * require itstool as a dependency even though it's some useless bloat
  * fix the adaptivity of the elementaryOS layout (#502)
  * better keep the image centered on the mouse pointer when changing the zoom (#499)
  * avoid —again— insane attempts to open the binary as an image (#500)
  * update several translations
- drop meson_build.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680091200">- update to 1.0.2:
  * fix the default value of the text background option (as
    reported by #521 and #559)
  * fix a scenario where saving without transparency would
    consistently fail
  * automatically reload the picture after saving
  * mitigate initial state of the "filters" tool if "blur" is
    selected
  * change the keyboard shortcuts to switch tabs
  * remove from the highlighter the (ineffective) UI to change
    the active cairo operator
  * change the UI of the selection tools to improve readability
    of various items
  * fix typos in the user help manual
  * change the label of the "toggle the preview" menu item
  * update several translations</changelog>
</package>
<package pkgid="198f57b3e6d477d048be58aae869a75e0c84d7aad17d0cdf46a82ee6fee64f54d43c548bfe559a7d2fa4a0dac5943ab53fa00a1a3d30c34ea635308835642b49" name="drawing-lang" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="bp160.1.9"/>
  <changelog author="slbtongying &lt;shenlebantongying@gmail.com&gt;" date="1613044800">- initial upload.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619870400">- updated 0.8.0 release
  - new, richer, more readable bottom pane for the selection tool
  - add a "replace with" option to the eraser tool
  - use an adequate layout on LXDE or LXQt
  - force the release notes down users' throat (#347)
  - rewrite the help manual to better force it down users' throat (#347)
  - add color application mode support to the "shape" tool (#329)
  - persist the text background style (#340) and the shape filling style options
  - brush supporting pressure-sensitive input (#69, #116)
  - hairy brush supporting pressure-sensitive input (#69, #116)
  - airbrush supporting pressure-sensitive input (#69, #116)
  - calligraphic nip supporting pressure-sensitive input (#69, #116)
  - fix unexpected "jumps" when unselecting a selection that was defined by an undo
  - improve the fullscreen mode, with a way to toggle the tools list (#265, #189)
  - add an "increase constrast" filter (#308)
  - deleting the selection can now leave something else than transparency #232
  - option to exclude the color left under the selection from the selection itself #232
  - rewrite the UI for changing the color application mode (#329)
  - remove the cool but deprecated GNOME Shell app menu
  - improve flatpak CI (#319, Bilel Moussaoui)
  - update several translations</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1620043200">- use BuildRequires: gobject-introspection instead of hardrequiring
  typelibs, remove -lang recommends, handled better automatically.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Add explicit itstool BuildRequires, as meson.build checks for it:
  do not expect anything else to pull it in.</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1648987200">- updated to 1.0.0 release
  - enable tools with "alt+letter" mnemonics
  - larger sidebar items, where the selected tool is easier to see
  - new "skew" tool
  - enable or disable specific tools options with the [shift] or [alt] keyboard modifiers
  - show more numerous, more dynamic, more contextual help tips as the window's subtitle
  - display cursor coordinates and other related data when pressing the [ctrl] keyboard modifier
  - dynamically change the label of the "options" submenu in the menu-bar, to increase its discoverability
  - scale tool option to set the size in percentage
  - suggest to "apply &amp; save" when trying to save while an operation is unapplied
  - highlighter option to straighten the line, so it better follows the underlying text
  - improvements to the "points" tool's numbers readability
  - suggest to "apply &amp; deselect" when trying to save while the    selection is active
  - more precise tools for tiny modifications required by pixel-art
  - display pixels sharply when zooming deeper than 400%
  - hide information messages after 4 seconds if they're not that useful
  - disable the 'reload image from the disk' action if the image has never been saved
  - new 'reset the canvas' action (ctrl+backspace)
  - warn the user if they're opening an already opened image
  - suggest to reload the picture if it has changed on the disk
  - artificially limited framerate to avoid overloading the CPU
  - menu item and action to change the theme variant preference
  - toggle the menubar with ctrl+f2
  - update the user help manual
  - shorter appdata summary, to comply with guidelines
  - update several translations</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1649073600">- Patched meson.build in help to fix build issue with itstool which kept it from building.
  meson_build.patch</changelog>
  <changelog author="Emily Gonyer &lt;emilyyrose@gmail.com&gt;" date="1649332800">- Fixed translation and help file locations.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 1.0.1:
  * enable the highlighter by default (#458)
  * less intrusive "what's new" message dialog (#504)
  * non-linear zooming speed profile (to zoom faster when using extreme values) (#499)
  * slower scrolling speed to have a better precision with higher zoom levels (#499)
  * require itstool as a dependency even though it's some useless bloat
  * fix the adaptivity of the elementaryOS layout (#502)
  * better keep the image centered on the mouse pointer when changing the zoom (#499)
  * avoid —again— insane attempts to open the binary as an image (#500)
  * update several translations
- drop meson_build.patch (upstream)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1680091200">- update to 1.0.2:
  * fix the default value of the text background option (as
    reported by #521 and #559)
  * fix a scenario where saving without transparency would
    consistently fail
  * automatically reload the picture after saving
  * mitigate initial state of the "filters" tool if "blur" is
    selected
  * change the keyboard shortcuts to switch tabs
  * remove from the highlighter the (ineffective) UI to change
    the active cairo operator
  * change the UI of the selection tools to improve readability
    of various items
  * fix typos in the user help manual
  * change the label of the "toggle the preview" menu item
  * update several translations</changelog>
</package>
<package pkgid="3fbc9c554bd0b32c3c9de874f5d7df03d61c252f8423ab0bb9a460238882f0c95eb9c0ab37bf74cdfd612e94d2dbd3a0c92ffc9f015d4a06e80bf8c8331fb806" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.1.23" rel="160000.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1713182400">- drbd: fix build error against kernel v6.8.2 (boo#1222397)
  * add upstream patches
    + 0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    + 0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    + 0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1718798400">- drbd: fix build error against kernel v6.9.3 (boo#1226510)
  * add patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1723464000">- drbd: fix build error against kernel v6.10.3 (boo#1229062)
  * add patch
    + boo1229062-re-enable-blk_queue_max_hw_sectors.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1726574400">- drbdadm down fails to remove sysfs holder file (boo#1230635)
  * add patch
    + boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    + boo1230635_02-drbd-port-block-device-access-to-file.patch
  * update patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1728648000">- Update DRBD version from 9.1.16 to 9.1.22
  * Changelog from Linbit:
    9.1.22 (api:genl2/proto:86-121/transport:18)
  - -------
  * Upgrade from partial resync to a full resync if necessary when the
    user manually resolves a split-brain situation
  * Fix a potential NULL deref when a disk fails while doing a
    forget-peer operation.
  * Fix a rcu_read_lock()/rcu_read_unlock() imbalance
  * Restart the open() syscall when a process auto promoting a drbd device gets
    interrupted by a signal
  * Remove a deadlock that caused DRBD to connect sometimes
    exceptionally slow
  * Make detach operations interruptible
  * Added dev_is_open to events2 status information
  * Improve log readability for 2PC state changes and drbd-threads
  * Updated compability code for Linux 6.9
    9.1.21 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a deadlock that can trigger when deleting a connection and
    another connection going down in parallel. This is a regression of
    9.1.20
  * Fix an out-of-bounds access when scanning the bitmap. It leads to a
    crash when the bitmap ends on a page boundary, and this is also a
    regression in 9.1.20.
    9.1.20 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a kernel crash that is sometimes triggered when downing drbd
    resources in a specific, unusual order (was triggered by the
    Kubernetes CSI driver)
  * Fix a rarely triggering kernel crash upon adding paths to a
    connection by rehauling the path lists' locking
  * Fix the continuation of an interrupted initial resync
  * Fix the state engine so that an incapable primary does not outdate
    indirectly reachable secondary nodes
  * Fix a logic bug that caused drbd to pretend that a peer's disk is
    outdated when doing a manual disconnect on a down connection; with
    that cured impact on fencing and quorum.
  * Fix forceful demotion of suspended devices
  * Rehaul of the build system to apply compatibility patches out of
    place that allows one to build for different target kernels from a
    single drbd source tree
  * Updated compability code for Linux 6.8
    9.1.19 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a resync decision case where drbd wrongly decided to do a full
    resync, where a partial resync was sufficient; that happened in a
    specific connect order when all nodes were on the same data
    generation (UUID)
  * Fix the online resize code to obey cached size information about
    temporal unreachable nodes
  * Fix a rare corner case in which DRBD on a diskless primary node
    failed to re-issue a read request to another node with a backing
    disk upon connection loss on the connection where it shipped the
    read request initially
  * Make timeout during promotion attempts interruptible
  * No longer write activity-log updates on the secondary node in a
    cluster with precisely two nodes with backing disk; this is a
    performance optimization
  * Reduce CPU usage of acknowledgment processing
    9.1.18 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fixed connecting nodes with differently sized backing disks,
    specifically when the smaller node is primary, before establishing
    the connections
  * Fixed thawing a device that has I/O frozen after loss of quorum
    when a configuration change eases its quorum requirements
  * Properly fail TLS if requested (only available in drbd-9.2)
  * Fixed a race condition that can cause auto-demote to trigger right
    after an explicit promote
  * Fixed a rare race condition that could mess up the handshake result
    before it is committed to the replication state.
  * Preserve "tiebreaker quorum" over a reboot of the last node (3-node
    clusters only)
  * Update compatibility code for Linux 6.6
    9.1.17 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a potential crash when configuring drbd to bind to a
    non-existent local IP address (this is a regression of drbd-9.1.8)
  * Cure a very seldom triggering race condition bug during
    establishing connections; when you triggered it, you got an OOPS
    hinting to list corruption
  * fix a race condition regarding operations on the bitmap while
    forgetting a bitmap slot and a pointless warning
  * Fix handling of unexpected (on a resource in secondary role) write
    requests
  * Fix a corner case that can cause a process to hang when closing the
    DRBD device, while a connection gets re-established
  * Correctly block signal delivery during auto-demote
  * Improve the reliability of establishing connections
  * Do not clear the transport with `net-options --set-defaults`. This
    fix avoids unexpected disconnect/connect cycles upon an `adjust`
    when using the 'lb-tcp' or 'rdma' transports in drbd-9.2.
  * New netlink packet to report path status to drbdsetup
  * Improvements to the content and rate-limiting of many log messages
  * Update compatibility code and follow Linux upstream development
    until Linux 6.5
  * remove patches which already included in the new version:
    0001-drbd-allow-transports-to-take-additional-krefs-on-a-.patch
    0002-drbd-improve-decision-about-marking-a-failed-disk-Ou.patch
    0003-drbd-fix-error-path-in-drbd_get_listener.patch
    0004-drbd-build-fix-spurious-re-build-attempt-of-compat.p.patch
    0005-drbd-log-error-code-when-thread-fails-to-start.patch
    0006-drbd-log-numeric-value-of-drbd_state_rv-as-well-as-s.patch
    0007-drbd-stop-defining-__KERNEL_SYSCALLS__.patch
    0008-compat-block-introduce-holder-ops.patch
    0009-drbd-reduce-net_ee-not-empty-info-to-a-dynamic-debug.patch
    0010-drbd-do-not-send-P_CURRENT_UUID-to-DRBD-8-peer-when-.patch
    0011-compat-block-pass-a-gendisk-to-open.patch
    0012-drbd-Restore-DATA_CORKED-and-CONTROL_CORKED-bits.patch
    0013-drbd-remove-unused-extern-for-conn_try_outdate_peer.patch
    0014-drbd-include-source-of-state-change-in-log.patch
    0015-compat-block-use-the-holder-as-indication-for-exclus.patch
    0016-drbd-Fix-net-options-set-defaults-to-not-clear-the-t.patch
    0017-drbd-propagate-exposed-UUIDs-only-into-established-c.patch
    0018-drbd-rework-autopromote.patch
    0019-compat-block-remove-the-unused-mode-argument-to-rele.patch
    0020-drbd-do-not-allow-auto-demote-to-be-interrupted-by-s.patch
    0021-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
    0022-compat-block-replace-fmode_t-with-a-block-specific-t.patch
    0023-compat-genetlink-remove-userhdr-from-struct-genl_inf.patch
    0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch
    boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    boo1230635_02-drbd-port-block-device-access-to-file.patch
  * removed patches which are not needed anymore:
    boo1229062-re-enable-blk_queue_max_hw_sectors.patch
    bsc1226510-fix-build-err-against-6.9.3.patch
  * update:
    drbd_git_revision
    suse-coccinelle.patch
    drbd.spec
  * add upstream patches to align commit 13ada1be201e:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * add patch to fix kernel imcompatibility issue (boo#1231290):
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch</changelog>
  <changelog author="glass.su@suse.com" date="1731326400">- drbd: fix build error against kernel v6.11.6 (boo#1233222)
  * add patch
    + boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1733918400">- Update DRBD version from 9.1.22 to 9.1.23 (boo#1234849)
  * Changelog from Linbit:
    9.1.23 (api:genl2/proto:86-101,118-121/transport:18)
  - -------
  * Fix a corner case that can happen when DRBD establishes multiple
    connections in parallel, which could lead one connection to end up in
    an inconsistent replication state of WFBitMapT/Established
  * Fix a corner case in which a reconciliation resync ends up in
    WFBitMapT/Established
  * Restrict protocol compatibility to the most recent 8.4 and 9.0 releases
  * Fix a corner case causing a module ref leak on drbd_transport_tcp;
    if it hits, you can not rmmod it
  * rate-limit resync progress while resync is paused
  * resync-target inherits history UUIDs when resync finishes,
    this can prevent unexpected "unrelared data" events later
  * Updated compatibility code for Linux 6.11 and 6.12
  * remove patches which already included in the new version:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * removed patch which is not needed anymore:
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch
    boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch
    bsc-1216666-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
  * update:
    drbd_git_revision
    drbd.spec
  * add upstream patches to align commit d64ebe7eb7df:
    0001-drbd-Fix-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- fix the warning of blk_validate_limits when running drbdadm down (boo#1235399)
  * add patch
    boo1235399-fix_the_warning_of_blk_validate_limits.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1737720000">-  drbd failed to build with SLFO kernel candidate (bsc#1235595)
  * update drbd.spec</changelog>
</package>
<package pkgid="6e2311b38b9de782a1d8187c190f2a2e6507b978a8c6dd3aeb60b3646a9c0d95c1af8383312f38dc5aaf1dde4843c6ca426b7635b6a3e9dfb085d8296900fb9b" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.1.23_k6.12.0_160000.5" rel="160000.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1713182400">- drbd: fix build error against kernel v6.8.2 (boo#1222397)
  * add upstream patches
    + 0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    + 0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    + 0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1718798400">- drbd: fix build error against kernel v6.9.3 (boo#1226510)
  * add patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1723464000">- drbd: fix build error against kernel v6.10.3 (boo#1229062)
  * add patch
    + boo1229062-re-enable-blk_queue_max_hw_sectors.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1726574400">- drbdadm down fails to remove sysfs holder file (boo#1230635)
  * add patch
    + boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    + boo1230635_02-drbd-port-block-device-access-to-file.patch
  * update patch
    + bsc1226510-fix-build-err-against-6.9.3.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1728648000">- Update DRBD version from 9.1.16 to 9.1.22
  * Changelog from Linbit:
    9.1.22 (api:genl2/proto:86-121/transport:18)
  - -------
  * Upgrade from partial resync to a full resync if necessary when the
    user manually resolves a split-brain situation
  * Fix a potential NULL deref when a disk fails while doing a
    forget-peer operation.
  * Fix a rcu_read_lock()/rcu_read_unlock() imbalance
  * Restart the open() syscall when a process auto promoting a drbd device gets
    interrupted by a signal
  * Remove a deadlock that caused DRBD to connect sometimes
    exceptionally slow
  * Make detach operations interruptible
  * Added dev_is_open to events2 status information
  * Improve log readability for 2PC state changes and drbd-threads
  * Updated compability code for Linux 6.9
    9.1.21 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a deadlock that can trigger when deleting a connection and
    another connection going down in parallel. This is a regression of
    9.1.20
  * Fix an out-of-bounds access when scanning the bitmap. It leads to a
    crash when the bitmap ends on a page boundary, and this is also a
    regression in 9.1.20.
    9.1.20 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a kernel crash that is sometimes triggered when downing drbd
    resources in a specific, unusual order (was triggered by the
    Kubernetes CSI driver)
  * Fix a rarely triggering kernel crash upon adding paths to a
    connection by rehauling the path lists' locking
  * Fix the continuation of an interrupted initial resync
  * Fix the state engine so that an incapable primary does not outdate
    indirectly reachable secondary nodes
  * Fix a logic bug that caused drbd to pretend that a peer's disk is
    outdated when doing a manual disconnect on a down connection; with
    that cured impact on fencing and quorum.
  * Fix forceful demotion of suspended devices
  * Rehaul of the build system to apply compatibility patches out of
    place that allows one to build for different target kernels from a
    single drbd source tree
  * Updated compability code for Linux 6.8
    9.1.19 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fix a resync decision case where drbd wrongly decided to do a full
    resync, where a partial resync was sufficient; that happened in a
    specific connect order when all nodes were on the same data
    generation (UUID)
  * Fix the online resize code to obey cached size information about
    temporal unreachable nodes
  * Fix a rare corner case in which DRBD on a diskless primary node
    failed to re-issue a read request to another node with a backing
    disk upon connection loss on the connection where it shipped the
    read request initially
  * Make timeout during promotion attempts interruptible
  * No longer write activity-log updates on the secondary node in a
    cluster with precisely two nodes with backing disk; this is a
    performance optimization
  * Reduce CPU usage of acknowledgment processing
    9.1.18 (api:genl2/proto:86-121/transport:18)
  - -------
  * Fixed connecting nodes with differently sized backing disks,
    specifically when the smaller node is primary, before establishing
    the connections
  * Fixed thawing a device that has I/O frozen after loss of quorum
    when a configuration change eases its quorum requirements
  * Properly fail TLS if requested (only available in drbd-9.2)
  * Fixed a race condition that can cause auto-demote to trigger right
    after an explicit promote
  * Fixed a rare race condition that could mess up the handshake result
    before it is committed to the replication state.
  * Preserve "tiebreaker quorum" over a reboot of the last node (3-node
    clusters only)
  * Update compatibility code for Linux 6.6
    9.1.17 (api:genl2/proto:86-121/transport:18)
  - -------
  * fix a potential crash when configuring drbd to bind to a
    non-existent local IP address (this is a regression of drbd-9.1.8)
  * Cure a very seldom triggering race condition bug during
    establishing connections; when you triggered it, you got an OOPS
    hinting to list corruption
  * fix a race condition regarding operations on the bitmap while
    forgetting a bitmap slot and a pointless warning
  * Fix handling of unexpected (on a resource in secondary role) write
    requests
  * Fix a corner case that can cause a process to hang when closing the
    DRBD device, while a connection gets re-established
  * Correctly block signal delivery during auto-demote
  * Improve the reliability of establishing connections
  * Do not clear the transport with `net-options --set-defaults`. This
    fix avoids unexpected disconnect/connect cycles upon an `adjust`
    when using the 'lb-tcp' or 'rdma' transports in drbd-9.2.
  * New netlink packet to report path status to drbdsetup
  * Improvements to the content and rate-limiting of many log messages
  * Update compatibility code and follow Linux upstream development
    until Linux 6.5
  * remove patches which already included in the new version:
    0001-drbd-allow-transports-to-take-additional-krefs-on-a-.patch
    0002-drbd-improve-decision-about-marking-a-failed-disk-Ou.patch
    0003-drbd-fix-error-path-in-drbd_get_listener.patch
    0004-drbd-build-fix-spurious-re-build-attempt-of-compat.p.patch
    0005-drbd-log-error-code-when-thread-fails-to-start.patch
    0006-drbd-log-numeric-value-of-drbd_state_rv-as-well-as-s.patch
    0007-drbd-stop-defining-__KERNEL_SYSCALLS__.patch
    0008-compat-block-introduce-holder-ops.patch
    0009-drbd-reduce-net_ee-not-empty-info-to-a-dynamic-debug.patch
    0010-drbd-do-not-send-P_CURRENT_UUID-to-DRBD-8-peer-when-.patch
    0011-compat-block-pass-a-gendisk-to-open.patch
    0012-drbd-Restore-DATA_CORKED-and-CONTROL_CORKED-bits.patch
    0013-drbd-remove-unused-extern-for-conn_try_outdate_peer.patch
    0014-drbd-include-source-of-state-change-in-log.patch
    0015-compat-block-use-the-holder-as-indication-for-exclus.patch
    0016-drbd-Fix-net-options-set-defaults-to-not-clear-the-t.patch
    0017-drbd-propagate-exposed-UUIDs-only-into-established-c.patch
    0018-drbd-rework-autopromote.patch
    0019-compat-block-remove-the-unused-mode-argument-to-rele.patch
    0020-drbd-do-not-allow-auto-demote-to-be-interrupted-by-s.patch
    0021-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
    0022-compat-block-replace-fmode_t-with-a-block-specific-t.patch
    0023-compat-genetlink-remove-userhdr-from-struct-genl_inf.patch
    0024-compat-fixup-FMODE_READ-FMODE_WRITE-usage.patch
    0025-compat-drdb-Convert-to-use-bdev_open_by_path.patch
    0026-compat-gate-blkdev_-patches-behind-bdev_open_by_path.patch
    boo1230635_01-compat-fix-nla_nest_start_noflag-test.patch
    boo1230635_02-drbd-port-block-device-access-to-file.patch
  * removed patches which are not needed anymore:
    boo1229062-re-enable-blk_queue_max_hw_sectors.patch
    bsc1226510-fix-build-err-against-6.9.3.patch
  * update:
    drbd_git_revision
    suse-coccinelle.patch
    drbd.spec
  * add upstream patches to align commit 13ada1be201e:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * add patch to fix kernel imcompatibility issue (boo#1231290):
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch</changelog>
  <changelog author="glass.su@suse.com" date="1731326400">- drbd: fix build error against kernel v6.11.6 (boo#1233222)
  * add patch
    + boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1733918400">- Update DRBD version from 9.1.22 to 9.1.23 (boo#1234849)
  * Changelog from Linbit:
    9.1.23 (api:genl2/proto:86-101,118-121/transport:18)
  - -------
  * Fix a corner case that can happen when DRBD establishes multiple
    connections in parallel, which could lead one connection to end up in
    an inconsistent replication state of WFBitMapT/Established
  * Fix a corner case in which a reconciliation resync ends up in
    WFBitMapT/Established
  * Restrict protocol compatibility to the most recent 8.4 and 9.0 releases
  * Fix a corner case causing a module ref leak on drbd_transport_tcp;
    if it hits, you can not rmmod it
  * rate-limit resync progress while resync is paused
  * resync-target inherits history UUIDs when resync finishes,
    this can prevent unexpected "unrelared data" events later
  * Updated compatibility code for Linux 6.11 and 6.12
  * remove patches which already included in the new version:
    0001-drbd-properly-rate-limit-resync-progress-reports.patch
    0002-drbd-inherit-history-UUIDs-from-sync-source-when-res.patch
    0003-build-compat-fix-line-offset-in-annotation-pragmas-p.patch
    0004-drbd-fix-exposed_uuid-going-backward.patch
    0005-drbd-Proper-locking-around-new_current_uuid-on-a-dis.patch
    0006-build-CycloneDX-fix-bom-ref-add-purl.patch
    0007-build-Another-update-to-the-spdx-files.patch
    0008-build-generate-spdx.json-not-tag-value-format.patch
    0009-compat-fix-gen_patch_names-for-bdev_file_open_by_pat.patch
    0010-compat-fix-nla_nest_start_noflag-test.patch
    0011-compat-fix-blk_alloc_disk-rule.patch
    0012-drbd-remove-const-from-function-return-type.patch
    0013-drbd-don-t-set-max_write_zeroes_sectors-in-decide_on.patch
    0014-drbd-split-out-a-drbd_discard_supported-helper.patch
    0015-drbd-atomically-update-queue-limits-in-drbd_reconsid.patch
    0016-compat-test-and-patch-for-queue_limits_start_update.patch
    0017-compat-specify-which-essential-change-was-not-made.patch
    0018-gen_patch_names-reorder-blk_mode_t.patch
    0019-compat-fix-blk_queue_update_readahead-patch.patch
    0020-compat-test-and-patch-for-que_limits-max_hw_discard_.patch
    0021-compat-fixup-write_zeroes__no_capable.patch
    0022-compat-fixup-queue_flag_discard__yes_present.patch
    0023-drbd-move-flags-to-queue_limits.patch
    0024-compat-test-and-patch-for-queue_limits.features.patch
    0025-drbd-Annotate-struct-fifo_buffer-with-__counted_by.patch
    0026-compat-test-and-patch-for-__counted_by.patch
    0027-drbd-fix-function-cast-warnings-in-state-machine.patch
    0028-Add-missing-documentation-of-peer_device-parameter-t.patch
    0030-drbd-kref_put-path-when-kernel_accept-fails.patch
    0031-build-fix-typo-in-Makefile.spatch.patch
    0032-drbd-open-do-not-delay-open-if-already-Primary.patch
  * removed patch which is not needed anymore:
    boo1231290_fix_drbd_build_error_against_kernel_v6.11.0.patch
    boo1233222_fix_drbd_build_error_against_kernel_v6.11.6.patch
    bsc-1216666-compat-sock-Remove-sendpage-in-favour-of-sendmsg-MSG.patch
  * update:
    drbd_git_revision
    drbd.spec
  * add upstream patches to align commit d64ebe7eb7df:
    0001-drbd-Fix-memory-leak.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- fix the warning of blk_validate_limits when running drbdadm down (boo#1235399)
  * add patch
    boo1235399-fix_the_warning_of_blk_validate_limits.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1737720000">-  drbd failed to build with SLFO kernel candidate (bsc#1235595)
  * update drbd.spec</changelog>
</package>
<package pkgid="1b8885dd7741e58490422c6171d4f99d43ef276e7f33f030d1e418b201427d35241aef0c734da5554451da786bf87fb2396c1ecf9666a95c0454c05cdbb0977e" name="drbd-selinux" arch="x86_64">
  <version epoch="0" ver="9.29.0" rel="160000.2.2"/>
  <changelog author="fcrozat@suse.com" date="1685534400">- Update url and remove download url for tarball, not valid anymore.</changelog>
  <changelog author="heming.zhao@suse.com" date="1693224000">- Update to 9.25.0 (jsc#PED-6362)
  * drbdsetup,v9,show: fix meta disk format for json
  * drbdmeta: {hex,}dump superblock
  * drbdmon: major rewrite
  * build: gcc v12 cleanups
  * misc: put locks into separate dir
  * selinux: add fowner fsetsid, they dropped a global noaudit rule
  * v9: Support user-defined block-size
  * doc,v9: improvements all over the place
  * drbdadm,v9: implement drbdadm role &lt;res:peer&gt;
  * drbdadm,v9: pass --verbose/--statistics to drbdsetup status
  * drbd{adm,meta}: add repair-md subcommand
  * drbdadm,v9,resync-after: fix too strict check
  * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1
  * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions
  * drbdadm,v9,parser: allow via outside-address for NATed peers
  * parser,v9: deprecate named connections
  * drbd-selinux: add sub package, minor packaging/spec changes
  * drbdadm: allow files from expanded glob to vanish
  * drbdadm,v9: fix potential segfault in postparse
  * drbdadm,v9: fix sh-ip when set on connection/path
  * drbdmeta: fix apply-al for bitmap sizes &gt; 4GiB
  * drbd-service-shim.sh: add secondary --force
  * ocf: fix for dropped --peer option
  * drbdsetup,v9: show susupend reason in json output
  * drbdsetup,v9: add secondary --force
  * drbdsetup,v9: fix *susp_str() for events2 diff mode
  * drdbdadm,v9: fix sh-resource
  * drdbdadm,v9: rm --peer=connect_to_host
  * ocf: deal with situation where PM node name and actual node name do not
  match
  * notify.sh: deal with unset DRBD_PEER env variable
  * crm-fence-peer: fix timeout with Pacemaker 2.0.5
  * drbdmeta: don't wait for confirmation if not a TTY
  * drbdadm,v9: Pass '--force' to certain drbdmeta commands
  * drbdmeta: do init in chunks; allow different methods
  * build: various minor fixes (udev detection, POSIX,
  compiler flags, allow doc building with asciidoctor,...)
  * drbd.ocf: fix type (relevant for certain pcs versions)
  * crm-fence-peer: fix timeout with Pacemaker 2.1
  * v9,proxy: allow multiple sharing a proxy node
  * v9,drbdsetup: quote resource name in "show"
  * build: allow building for RHEL9.0, minor cleanups
  * reactor/systemd: allow proper actions (e.g., reboot) if
  demotion fails.
- introduce new systemd service:
  drbd-demote-or-escalate@.service
- remove v83 v84 binaries (incompatible with kmp)
- drop patches which are already included in latest code:
  - 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  - 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch
- add upstream patch:
  + 0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
  + 0002-user-drbrdmon-add-missing-stdint.h-includes.patch
  + 0003-Introduce-default_types.h-header.patch
- change patch name:
  - 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch
  + bsc-1032142_Disable-quorum-in-default-configuration.patch
- rebase patch:
  + pie-fix.patch
  + rpmlint-build-error.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1710763200">- drbd failover timeout because of "fence-peer helper broken" (bsc#1219263)
  * bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
  * bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch</changelog>
  <changelog author="glass.su@suse.com" date="1731412800">- drbd: Support and adaptations for OCF 1.1 standard (bsc#1233273)
  * bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
  * bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
  * bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- Update drbd-utils from 9.25.0 to 9.29.0
  * Changelog from Linbit:
    9.29.0
  - ----------
  * drbdmeta: fix initialization for external md
  * build: allow disbling keyutils
  * tests: export sanitized environment
  * drbdmon: various improvements
  * build: add cyclonedx
  * drbsetup,v9: fix multiple paths drbdsetup show --json
    strictly spreaking breaking change, but maily used internally
  * events2: expose if device is open
  * drbdadm: fix undefined behavior that triggered on amd64
  * shared: fix out-of-bounds access in parsing
  * drbsetup,v9: event consistency with peer devices
  * drbdadm: fix parsing of v8.4 configs for compatibility
  * drbdmeta: fix segfault for check-resize on intentionally diskless
  * drbd-promote@.service: check if ExecCondition is available
    9.28.0
  - ----------
  * events2: set may_promote:no promotion_score:0 while
    force-io-failure:yes
  * drbdsetup,v9: show TLS in connection status
  * drbdsetup,v9: add udev command
  * 8.3: remove
  * crm-fence-peer.9.sh: fixes for pacemaker 2.1.7
  * events2: improved out of order message handling
    9.27.0
  - ----------
  * adjust,v9: retry for diskless primaries
  * tests: sanitize env (e.g., TZ)
  * drbdmeta: dump and restore the members field
    9.26.0
  - ----------
  * config,v9: new config option load-balance-paths
  * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size
  * drbdadm,v9: fix segfault if proxy has no path
  * drbd: increase maximum CPU mask size
  * systemd: introduce drbd-graceful-shutdown.service
  * drbdmeta,v9: fix regression, allow attach after offline resize
  * drbdsetup,v9: add path established information to JSON status
  * events2: terminate on module unload even under --poll
  * events2: specif exit code if module unload
  * docs: add spdx license file
  * drbdmon: various smaller improvements
  * drbdsetup,v9: support for TLS/kTLS
  * remove patches which are already included in upstream code:
    0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
    0002-user-drbrdmon-add-missing-stdint.h-includes.patch
    0003-Introduce-default_types.h-header.patch
    bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
    bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch
    bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
    usrmerge_move_lib_to_prefix_lib.patch
  * add upstream patches to align commit 0a014f290802:
    0001-drbd-verify.py-relax-host-key-checking.patch
    0002-DRBDmon-Disabled-DRBD-commands-warning-only-for-actu.patch
    0003-DRBDmon-Integrate-global-local-command-delegation.patch
    0004-DRBDmon-Adjust-events-log-supplier-program-name.patch
    0005-DRBDmon-Add-drbd-events-log-supplier.patch
    0006-DRBDmon-Adjust-Makefile.patch
    0007-DRBDmon-Version-V1R4M1.patch
    0008-drbdadm-add-proxy-options-to-add-connection-command.patch
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
    0010-Fix-typo-in-warning-there-is-no-po4a-translage-comma.patch
    0011-drbd.ocf-explicitly-timeout-crm_master-IPC-early.patch
    0012-drbd.ocf-the-text-output-of-crm_resource-locate-has-.patch
  * update patches according to source code changes:
    bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
    fence-after-pacemaker-down.patch
  * modify upstream patch for passing build:
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
  * add new service:
    drbd-graceful-shutdown.service
  * add new binrary:
    drbd-events-log-supplier</changelog>
  <changelog author="heming.zhao@suse.com" date="1741867200">- drbd_passive resource times out after 10 minutes and drbd device doesn't exist (bsc#1239437)
  * add patch
    + bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * update drbd.spec
    + remove '--without-83support' from configure, which is not needed anymore</changelog>
  <changelog author="heming.zhao@suse.com" date="1742212800">- Default SELinux Profile prevents configuration of drbd_passive resources in cluster (bsc#1239436)
  * update spec file to create a new package drbd-selinux
  * update patch bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
  - fix the commit log mistake and typo, no code change</changelog>
  <changelog author="cathy.hu@suse.com" date="1750161600">- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1750161601">- merge upstream patch to fix build error
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch</changelog>
</package>
<package pkgid="317a743b1ac7bd53cbf7778dc261d26d46a4a76f6e7de77a401c8bf9be833d4d58c70cb22ad7a4091aa5251d694393f584db31d58908458e6a937dbc371ac990" name="drbd-selinux" arch="x86_64">
  <version epoch="0" ver="9.29.0" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1731412800">- drbd: Support and adaptations for OCF 1.1 standard (bsc#1233273)
  * bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
  * bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
  * bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- Update drbd-utils from 9.25.0 to 9.29.0
  * Changelog from Linbit:
    9.29.0
  - ----------
  * drbdmeta: fix initialization for external md
  * build: allow disbling keyutils
  * tests: export sanitized environment
  * drbdmon: various improvements
  * build: add cyclonedx
  * drbsetup,v9: fix multiple paths drbdsetup show --json
    strictly spreaking breaking change, but maily used internally
  * events2: expose if device is open
  * drbdadm: fix undefined behavior that triggered on amd64
  * shared: fix out-of-bounds access in parsing
  * drbsetup,v9: event consistency with peer devices
  * drbdadm: fix parsing of v8.4 configs for compatibility
  * drbdmeta: fix segfault for check-resize on intentionally diskless
  * drbd-promote@.service: check if ExecCondition is available
    9.28.0
  - ----------
  * events2: set may_promote:no promotion_score:0 while
    force-io-failure:yes
  * drbdsetup,v9: show TLS in connection status
  * drbdsetup,v9: add udev command
  * 8.3: remove
  * crm-fence-peer.9.sh: fixes for pacemaker 2.1.7
  * events2: improved out of order message handling
    9.27.0
  - ----------
  * adjust,v9: retry for diskless primaries
  * tests: sanitize env (e.g., TZ)
  * drbdmeta: dump and restore the members field
    9.26.0
  - ----------
  * config,v9: new config option load-balance-paths
  * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size
  * drbdadm,v9: fix segfault if proxy has no path
  * drbd: increase maximum CPU mask size
  * systemd: introduce drbd-graceful-shutdown.service
  * drbdmeta,v9: fix regression, allow attach after offline resize
  * drbdsetup,v9: add path established information to JSON status
  * events2: terminate on module unload even under --poll
  * events2: specif exit code if module unload
  * docs: add spdx license file
  * drbdmon: various smaller improvements
  * drbdsetup,v9: support for TLS/kTLS
  * remove patches which are already included in upstream code:
    0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
    0002-user-drbrdmon-add-missing-stdint.h-includes.patch
    0003-Introduce-default_types.h-header.patch
    bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
    bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch
    bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
    usrmerge_move_lib_to_prefix_lib.patch
  * add upstream patches to align commit 0a014f290802:
    0001-drbd-verify.py-relax-host-key-checking.patch
    0002-DRBDmon-Disabled-DRBD-commands-warning-only-for-actu.patch
    0003-DRBDmon-Integrate-global-local-command-delegation.patch
    0004-DRBDmon-Adjust-events-log-supplier-program-name.patch
    0005-DRBDmon-Add-drbd-events-log-supplier.patch
    0006-DRBDmon-Adjust-Makefile.patch
    0007-DRBDmon-Version-V1R4M1.patch
    0008-drbdadm-add-proxy-options-to-add-connection-command.patch
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
    0010-Fix-typo-in-warning-there-is-no-po4a-translage-comma.patch
    0011-drbd.ocf-explicitly-timeout-crm_master-IPC-early.patch
    0012-drbd.ocf-the-text-output-of-crm_resource-locate-has-.patch
  * update patches according to source code changes:
    bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
    fence-after-pacemaker-down.patch
  * modify upstream patch for passing build:
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
  * add new service:
    drbd-graceful-shutdown.service
  * add new binrary:
    drbd-events-log-supplier</changelog>
  <changelog author="heming.zhao@suse.com" date="1741867200">- drbd_passive resource times out after 10 minutes and drbd device doesn't exist (bsc#1239437)
  * add patch
    + bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * update drbd.spec
    + remove '--without-83support' from configure, which is not needed anymore</changelog>
  <changelog author="heming.zhao@suse.com" date="1742212800">- Default SELinux Profile prevents configuration of drbd_passive resources in cluster (bsc#1239436)
  * update spec file to create a new package drbd-selinux
  * update patch bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
  - fix the commit log mistake and typo, no code change</changelog>
  <changelog author="cathy.hu@suse.com" date="1750161600">- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1750161601">- merge upstream patch to fix build error
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755259200">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * remove patch
  - bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * add patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755604800">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * update patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1763121600">- Allow domtrans from kernel_t to drbd_t (bsc#1252991)
  * add patch
  - 1252991-selinux-domtrans-from-kernel.patch</changelog>
  <changelog author="glass.su@suse.com" date="1763467200">- [SELinux] nfs_drbd: "fence-peer helper broken, returned 0" and nfs WRITE hang when power off the secondary node (bsc#1252991)
  * Update and rename patch
  - bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
    + bsc-1233273-1252991_drbd.ocf-update-for-OCF-1.1.patch</changelog>
</package>
<package pkgid="17f361f2b2d8f524c977f535408400a57b066b3ab94507850ac3189d9b1bb4c4fe5da0a7f4685be66536f30af1263b7a2f6f369498c0433c649bac0fa206b69b" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.29.0" rel="160000.2.2"/>
  <changelog author="fcrozat@suse.com" date="1685534400">- Update url and remove download url for tarball, not valid anymore.</changelog>
  <changelog author="heming.zhao@suse.com" date="1693224000">- Update to 9.25.0 (jsc#PED-6362)
  * drbdsetup,v9,show: fix meta disk format for json
  * drbdmeta: {hex,}dump superblock
  * drbdmon: major rewrite
  * build: gcc v12 cleanups
  * misc: put locks into separate dir
  * selinux: add fowner fsetsid, they dropped a global noaudit rule
  * v9: Support user-defined block-size
  * doc,v9: improvements all over the place
  * drbdadm,v9: implement drbdadm role &lt;res:peer&gt;
  * drbdadm,v9: pass --verbose/--statistics to drbdsetup status
  * drbd{adm,meta}: add repair-md subcommand
  * drbdadm,v9,resync-after: fix too strict check
  * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1
  * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions
  * drbdadm,v9,parser: allow via outside-address for NATed peers
  * parser,v9: deprecate named connections
  * drbd-selinux: add sub package, minor packaging/spec changes
  * drbdadm: allow files from expanded glob to vanish
  * drbdadm,v9: fix potential segfault in postparse
  * drbdadm,v9: fix sh-ip when set on connection/path
  * drbdmeta: fix apply-al for bitmap sizes &gt; 4GiB
  * drbd-service-shim.sh: add secondary --force
  * ocf: fix for dropped --peer option
  * drbdsetup,v9: show susupend reason in json output
  * drbdsetup,v9: add secondary --force
  * drbdsetup,v9: fix *susp_str() for events2 diff mode
  * drdbdadm,v9: fix sh-resource
  * drdbdadm,v9: rm --peer=connect_to_host
  * ocf: deal with situation where PM node name and actual node name do not
  match
  * notify.sh: deal with unset DRBD_PEER env variable
  * crm-fence-peer: fix timeout with Pacemaker 2.0.5
  * drbdmeta: don't wait for confirmation if not a TTY
  * drbdadm,v9: Pass '--force' to certain drbdmeta commands
  * drbdmeta: do init in chunks; allow different methods
  * build: various minor fixes (udev detection, POSIX,
  compiler flags, allow doc building with asciidoctor,...)
  * drbd.ocf: fix type (relevant for certain pcs versions)
  * crm-fence-peer: fix timeout with Pacemaker 2.1
  * v9,proxy: allow multiple sharing a proxy node
  * v9,drbdsetup: quote resource name in "show"
  * build: allow building for RHEL9.0, minor cleanups
  * reactor/systemd: allow proper actions (e.g., reboot) if
  demotion fails.
- introduce new systemd service:
  drbd-demote-or-escalate@.service
- remove v83 v84 binaries (incompatible with kmp)
- drop patches which are already included in latest code:
  - 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  - 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch
- add upstream patch:
  + 0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
  + 0002-user-drbrdmon-add-missing-stdint.h-includes.patch
  + 0003-Introduce-default_types.h-header.patch
- change patch name:
  - 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch
  + bsc-1032142_Disable-quorum-in-default-configuration.patch
- rebase patch:
  + pie-fix.patch
  + rpmlint-build-error.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="glass.su@suse.com" date="1710763200">- drbd failover timeout because of "fence-peer helper broken" (bsc#1219263)
  * bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
  * bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch</changelog>
  <changelog author="glass.su@suse.com" date="1731412800">- drbd: Support and adaptations for OCF 1.1 standard (bsc#1233273)
  * bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
  * bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
  * bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- Update drbd-utils from 9.25.0 to 9.29.0
  * Changelog from Linbit:
    9.29.0
  - ----------
  * drbdmeta: fix initialization for external md
  * build: allow disbling keyutils
  * tests: export sanitized environment
  * drbdmon: various improvements
  * build: add cyclonedx
  * drbsetup,v9: fix multiple paths drbdsetup show --json
    strictly spreaking breaking change, but maily used internally
  * events2: expose if device is open
  * drbdadm: fix undefined behavior that triggered on amd64
  * shared: fix out-of-bounds access in parsing
  * drbsetup,v9: event consistency with peer devices
  * drbdadm: fix parsing of v8.4 configs for compatibility
  * drbdmeta: fix segfault for check-resize on intentionally diskless
  * drbd-promote@.service: check if ExecCondition is available
    9.28.0
  - ----------
  * events2: set may_promote:no promotion_score:0 while
    force-io-failure:yes
  * drbdsetup,v9: show TLS in connection status
  * drbdsetup,v9: add udev command
  * 8.3: remove
  * crm-fence-peer.9.sh: fixes for pacemaker 2.1.7
  * events2: improved out of order message handling
    9.27.0
  - ----------
  * adjust,v9: retry for diskless primaries
  * tests: sanitize env (e.g., TZ)
  * drbdmeta: dump and restore the members field
    9.26.0
  - ----------
  * config,v9: new config option load-balance-paths
  * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size
  * drbdadm,v9: fix segfault if proxy has no path
  * drbd: increase maximum CPU mask size
  * systemd: introduce drbd-graceful-shutdown.service
  * drbdmeta,v9: fix regression, allow attach after offline resize
  * drbdsetup,v9: add path established information to JSON status
  * events2: terminate on module unload even under --poll
  * events2: specif exit code if module unload
  * docs: add spdx license file
  * drbdmon: various smaller improvements
  * drbdsetup,v9: support for TLS/kTLS
  * remove patches which are already included in upstream code:
    0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
    0002-user-drbrdmon-add-missing-stdint.h-includes.patch
    0003-Introduce-default_types.h-header.patch
    bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
    bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch
    bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
    usrmerge_move_lib_to_prefix_lib.patch
  * add upstream patches to align commit 0a014f290802:
    0001-drbd-verify.py-relax-host-key-checking.patch
    0002-DRBDmon-Disabled-DRBD-commands-warning-only-for-actu.patch
    0003-DRBDmon-Integrate-global-local-command-delegation.patch
    0004-DRBDmon-Adjust-events-log-supplier-program-name.patch
    0005-DRBDmon-Add-drbd-events-log-supplier.patch
    0006-DRBDmon-Adjust-Makefile.patch
    0007-DRBDmon-Version-V1R4M1.patch
    0008-drbdadm-add-proxy-options-to-add-connection-command.patch
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
    0010-Fix-typo-in-warning-there-is-no-po4a-translage-comma.patch
    0011-drbd.ocf-explicitly-timeout-crm_master-IPC-early.patch
    0012-drbd.ocf-the-text-output-of-crm_resource-locate-has-.patch
  * update patches according to source code changes:
    bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
    fence-after-pacemaker-down.patch
  * modify upstream patch for passing build:
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
  * add new service:
    drbd-graceful-shutdown.service
  * add new binrary:
    drbd-events-log-supplier</changelog>
  <changelog author="heming.zhao@suse.com" date="1741867200">- drbd_passive resource times out after 10 minutes and drbd device doesn't exist (bsc#1239437)
  * add patch
    + bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * update drbd.spec
    + remove '--without-83support' from configure, which is not needed anymore</changelog>
  <changelog author="heming.zhao@suse.com" date="1742212800">- Default SELinux Profile prevents configuration of drbd_passive resources in cluster (bsc#1239436)
  * update spec file to create a new package drbd-selinux
  * update patch bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
  - fix the commit log mistake and typo, no code change</changelog>
  <changelog author="cathy.hu@suse.com" date="1750161600">- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1750161601">- merge upstream patch to fix build error
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch</changelog>
</package>
<package pkgid="d62561f554b80fd0f3e8f9076ca6ca14140122e599636bde25e37a9bb21f29ee14b07e767969fc1817710aa4312eb5c3a4afc06341e0abeb25f19ea22ff979e2" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.29.0" rel="160000.3.1"/>
  <changelog author="glass.su@suse.com" date="1731412800">- drbd: Support and adaptations for OCF 1.1 standard (bsc#1233273)
  * bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
  * bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
  * bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1736337600">- Update drbd-utils from 9.25.0 to 9.29.0
  * Changelog from Linbit:
    9.29.0
  - ----------
  * drbdmeta: fix initialization for external md
  * build: allow disbling keyutils
  * tests: export sanitized environment
  * drbdmon: various improvements
  * build: add cyclonedx
  * drbsetup,v9: fix multiple paths drbdsetup show --json
    strictly spreaking breaking change, but maily used internally
  * events2: expose if device is open
  * drbdadm: fix undefined behavior that triggered on amd64
  * shared: fix out-of-bounds access in parsing
  * drbsetup,v9: event consistency with peer devices
  * drbdadm: fix parsing of v8.4 configs for compatibility
  * drbdmeta: fix segfault for check-resize on intentionally diskless
  * drbd-promote@.service: check if ExecCondition is available
    9.28.0
  - ----------
  * events2: set may_promote:no promotion_score:0 while
    force-io-failure:yes
  * drbdsetup,v9: show TLS in connection status
  * drbdsetup,v9: add udev command
  * 8.3: remove
  * crm-fence-peer.9.sh: fixes for pacemaker 2.1.7
  * events2: improved out of order message handling
    9.27.0
  - ----------
  * adjust,v9: retry for diskless primaries
  * tests: sanitize env (e.g., TZ)
  * drbdmeta: dump and restore the members field
    9.26.0
  - ----------
  * config,v9: new config option load-balance-paths
  * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size
  * drbdadm,v9: fix segfault if proxy has no path
  * drbd: increase maximum CPU mask size
  * systemd: introduce drbd-graceful-shutdown.service
  * drbdmeta,v9: fix regression, allow attach after offline resize
  * drbdsetup,v9: add path established information to JSON status
  * events2: terminate on module unload even under --poll
  * events2: specif exit code if module unload
  * docs: add spdx license file
  * drbdmon: various smaller improvements
  * drbdsetup,v9: support for TLS/kTLS
  * remove patches which are already included in upstream code:
    0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch
    0002-user-drbrdmon-add-missing-stdint.h-includes.patch
    0003-Introduce-default_types.h-header.patch
    bsc-1219263_crm-fence-peer.9.sh-fix-parsing-in_ccm-crmd-fields-o.patch
    bsc-1219263_crm-fence-peer.9.sh-use-join-of-node_state-to-judge-.patch
    bsc-1233273_drbd.ocf-update-regex-of-sed-for-new-output-from-crm.patch
    usrmerge_move_lib_to_prefix_lib.patch
  * add upstream patches to align commit 0a014f290802:
    0001-drbd-verify.py-relax-host-key-checking.patch
    0002-DRBDmon-Disabled-DRBD-commands-warning-only-for-actu.patch
    0003-DRBDmon-Integrate-global-local-command-delegation.patch
    0004-DRBDmon-Adjust-events-log-supplier-program-name.patch
    0005-DRBDmon-Add-drbd-events-log-supplier.patch
    0006-DRBDmon-Adjust-Makefile.patch
    0007-DRBDmon-Version-V1R4M1.patch
    0008-drbdadm-add-proxy-options-to-add-connection-command.patch
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
    0010-Fix-typo-in-warning-there-is-no-po4a-translage-comma.patch
    0011-drbd.ocf-explicitly-timeout-crm_master-IPC-early.patch
    0012-drbd.ocf-the-text-output-of-crm_resource-locate-has-.patch
  * update patches according to source code changes:
    bsc-1233273_drbd.ocf-replace-crm_master-with-ocf_promotion_score.patch
    fence-after-pacemaker-down.patch
  * modify upstream patch for passing build:
    0009-Do-not-hardcode-paths-in-services-and-scripts.patch
  * add new service:
    drbd-graceful-shutdown.service
  * add new binrary:
    drbd-events-log-supplier</changelog>
  <changelog author="heming.zhao@suse.com" date="1741867200">- drbd_passive resource times out after 10 minutes and drbd device doesn't exist (bsc#1239437)
  * add patch
    + bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * update drbd.spec
    + remove '--without-83support' from configure, which is not needed anymore</changelog>
  <changelog author="heming.zhao@suse.com" date="1742212800">- Default SELinux Profile prevents configuration of drbd_passive resources in cluster (bsc#1239436)
  * update spec file to create a new package drbd-selinux
  * update patch bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
  - fix the commit log mistake and typo, no code change</changelog>
  <changelog author="cathy.hu@suse.com" date="1750161600">- Fix SELinux equivalency rules in module (bsc#1242915)
  * add patch
    + 0001-Fix-selinux-policy-for-usr-bin-equivalency-rules.patch
    + 0002-Fix-selinux-module-for-run-lock-equivalency-rules.patch
    + 0003-Fix-selinux-module-for-run-equivalency-rules.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1750161601">- merge upstream patch to fix build error
  * add patch
    + DRBDmon-Add-missing-default_types.h-include-in-strin.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755259200">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * remove patch
  - bsc-1239437_drbd.rules-fix-missing-udev-device.patch
  * add patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1755604800">- drbd_passive didn't start due to drbd.rules returning error (bsc#1247534)
  * update patch
  - bsc-1247534_drbd-didnt-start-due-to-drbd_rules-returning-err.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1763121600">- Allow domtrans from kernel_t to drbd_t (bsc#1252991)
  * add patch
  - 1252991-selinux-domtrans-from-kernel.patch</changelog>
  <changelog author="glass.su@suse.com" date="1763467200">- [SELinux] nfs_drbd: "fence-peer helper broken, returned 0" and nfs WRITE hang when power off the secondary node (bsc#1252991)
  * Update and rename patch
  - bsc-1233273_drbd.ocf-update-for-OCF-1.1.patch
    + bsc-1233273-1252991_drbd.ocf-update-for-OCF-1.1.patch</changelog>
</package>
<package pkgid="938b172d5a76df424be3f7702a2dab7aeb7fdad8993d71e0b6a98b3421dbd996498de435c9bb75e990a997087d969b65cfa63f3c8328d875ff69b52775d6f8af" name="driverctl" arch="noarch">
  <version epoch="0" ver="0.111" rel="160000.2.2"/>
  <changelog author="ndas@suse.de" date="1520424000">- Initial package (version:0.95)</changelog>
  <changelog author="ndas@suse.de" date="1520596800">- use pkgconfig as it allows OBS to pick packages optimized for building.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 0.111
  * completion fixes
  * improve help texts</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1677240000">- Add patch add_list-persisted_command-ec102481.patch:
  * driverctl: add list-persisted command
  * Fix device driver binding issue after re-enumeration
  * driverctl: fix list_devices() when `driver_override` is not set
  * driverctl: fix --help to return success.
  * Makefile: drop extra '/'
  * improve help text
  * bash-completion: suggest pci addresses instead of driver.
  * bash-completion: add support for options.
  * bash-completion: simplify and autocomplete cmds.
  * bash-completion: add support for list- commands.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="9495af0862b9dec29bb2623e571cf49cd4a9de7da0b4ac9d458578ece944c22217d33b103ab08477349124844c8ac40b6589e2b5524181463df5020ab3e1894a" name="drkonqi6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * sentry: send rich gpu context when available
  * preambletest: repair test_sentry_image_mapping_fail
  * preamble: limit stack var detection to crashing thread
  * sentry: tie the python event and drkonqi event together when the payload failed
  * Fix mapping for kactivitymanagerd
  * preamble: flush for longer
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * Add mapping for krdpserver
  * coredump: don't start units on system users (e.g. sddm) (kde#500179)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * backtracegenerator: convert memoryfence to qglobalstatic (kde#504386)
  * coredump/gui: add keywords to desktop file
  * 🍒backtracegenerator: don't crash when the proc was already deleted (kde#504389)
  * Fix minimum systemd requirement
  * preamble: improve log message a tad
  * preamble: leave a breadcrumb behind when loading a solib
  * preamble: pull thread into scope for debugging
  * preamble: make comment clearer
  * preamble: pull pc into scope so we can diagnose it easily
  * preamble: don't trip over undefined variables</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * preamble: handle deleted mappings separately</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * Add kwalletmanager5 to mappings</changelog>
</package>
<package pkgid="6643ae5dd527a7d6454fe4614a0e8ccf4c1aa7ce42d0f8999d0060c858e1dcba575e27925db551c009b6beff09c3367192632a9bd47343e42ea870ec46c37188" name="drkonqi6-lang" arch="noarch">
  <version epoch="0" ver="6.4.2" rel="bp160.1.2"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1739880000">- Update to 6.3.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.1
- Changes since 6.3.0:
  * sentry: send rich gpu context when available
  * preambletest: repair test_sentry_image_mapping_fail
  * preamble: limit stack var detection to crashing thread
  * sentry: tie the python event and drkonqi event together when the payload failed
  * Fix mapping for kactivitymanagerd
  * preamble: flush for longer
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1740484800">- Update to 6.3.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.2
- Changes since 6.3.1:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1741694400">- Update to 6.3.3:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.3
- Changes since 6.3.2:
  * update version for new release</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743595200">- Update to 6.3.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/6/6.3.4
- Changes since 6.3.3:
  * Add mapping for krdpserver
  * coredump: don't start units on system users (e.g. sddm) (kde#500179)
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1746532800">- Update to 6.3.5:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.5
- Changes since 6.3.4:
  * update version for new release</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1747656000">- Update to 6.3.90:
  * New feature release
  * For more details see https://kde.org/announcements/plasma/6/6.3.90
- Too many changes to list here</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1748520000">- Update to 6.3.91:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.3.91
- Changes since 6.3.90:
  * Update version for new release 6.3.91
  * backtracegenerator: convert memoryfence to qglobalstatic (kde#504386)
  * coredump/gui: add keywords to desktop file
  * 🍒backtracegenerator: don't crash when the proc was already deleted (kde#504389)
  * Fix minimum systemd requirement
  * preamble: improve log message a tad
  * preamble: leave a breadcrumb behind when loading a solib
  * preamble: pull thread into scope for debugging
  * preamble: make comment clearer
  * preamble: pull pc into scope so we can diagnose it easily
  * preamble: don't trip over undefined variables</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1749729600">- Update to 6.4.0:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.0
- Changes since 6.3.91:
  * Update version for new release 6.4.0
  * preamble: handle deleted mappings separately</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1750766400">- Update to 6.4.1:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.1
- Changes since 6.4.0:
  * Update version for new release 6.4.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1751371200">- Update to 6.4.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.4.2
- Changes since 6.4.1:
  * Update version for new release 6.4.2
  * Add kwalletmanager5 to mappings</changelog>
</package>
<package pkgid="aad91dc6d67e9f1e8812d06549aabf88ae284ac926a818f6e6a5e0dcd1795a39d2b5656eeb3e19f442f610d6127106b53d09b50ddfced664ff8dde3038e99acc" name="drm_info" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="bp160.1.12"/>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1639396800">- initial package (2.3.0)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1674216000">- Update to version 2.4.0
  * added manpage
  * Migrate to gitlab.freedesktop.org
  * Add support for DRM_FORMAT_MOD_ARM_TYPE_AFRC
  * Fix FB planes tree glitch
  * Print unit for pitch
  * Use drmModeGetConnectorCurrent</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1679400000">- Update to 2.5.0:
  * Find drm_fourcc.h in sysroot
  * build: bump libdrm to 2.4.114
  * ci: add .gitlab-ci.yml
  * build: fix "Unknown statement" error
  * build: fix "Unknown statement" for real
  * Consistently use lower-case "unknown" as fallback value
  * Add device bus info
  * Add support for Vivante modifiers
  * Add support for printing AMD GFX11 modifiers
  * Fix AMD tile for GFX11 modifiers
  * build: add workaround for include_directories() sandbox
  * build: bump version to 2.5.0
  * Decode HDR_OUTPUT_METADATA</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1711454400">- Update to 2.6.0:
  * Add host1x bus support
  * build: use FS module to check drm_fourcc.h
  * Include kernel tainted state in JSON output
  * readme: improve readability, use meson setup</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1711627200">- require json-c &gt;= 0.14 to avoid build failures</changelog>
  <changelog author="llyyr &lt;llyyr@yukari.in&gt;" date="1726056000">- Update to 2.7.0:
  * Add new DRM caps from libdrm v2.4.120
  * Don't print zero version date
  * Constify blob data
  * Add flag to read JSON from file
  * pretty: use Unicode multiplication sign for sizes
  * build: bump libdrm to v2.4.122
  * Add support for the SIZE_HINTS property
  * Print modifier hex code with leading zeroes</changelog>
</package>
<package pkgid="812b7a3f30f53d4410cebfe3b5263ae5044c9b068f2c6255e3aab020e60fe60a3f0a1412e783e68f7be8a3ee73aa5adbd9ec0efa9350452819a04a26ad3e0c05" name="droidcam" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="lp160.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1594382400">- Initial package version 1.4
- Add two patches to make it work with the upstream v4l2loopback driver:
  * 0001-Enhance-compatibility-with-upstream-v4l2loopback-dri.patch
  * 0002-Accept-upstream-v4l2loopback-driver-as-device.patch
- Add compatibility for TurboJPEG version in Leap 15.x
  * 0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1594555200">- Use noun phrase for descriptions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1601985600">- Update to version 1.5
  * AppIndicator support
  * Portrait mode and flip support
- Add README-v4l2loopback.md, referring to v4l2loopback-ctl for
  configuration
- Add 0001-Use-icon-installed-to-theme-directory.patch
- Skip EXIF marker handling in JPEG transform on Leap 15.x, update
  0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1612785600">- Update to version 1.7
  * Added 'Vertical Flip' option. (original PR: #120)
  * Added Gnome desktop entry. (original PR: #127)
  * GUI client will show a warning when closing with active
    connection.
  * Added -dev command line option, to use a specific video device
    instead of auto-discovery.
- Update to version 1.6
  * Added support for the regular v4l2loopback module
    (Original pr #105)
  * Fixed bug with server mode not using the port value correctly
    in the GUI
  * Fixed bug when connecting to iOS device via USB (#97)
- Fix failing build due to renamed libusbmusd pkgconfig file.
- Drop upstreamed v4l2loopback patches:
  * 0001-Enhance-compatibility-with-upstream-v4l2loopback-dri.patch
  * 0002-Accept-upstream-v4l2loopback-driver-as-device.patch
- Rebased patches:
  * 0001-Use-icon-installed-to-theme-directory.patch
  * 0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Grover Chou &lt;groverchout@opensuse.org&gt;" date="1652702400">- Update to version 1.8.2
  * Bugfix: Prevent UI alerts when connection is stopped abruptly. #210
- Update to version 1.8.1
  * Added -vflip/-hflip options to droidcam-cli
- Update to version 1.8.0
  * Fix for iOS USB connections dropping instantly (via #184)
  * Code updates (via #184)
  * Binaries now go into /usr/local/bin instead of /usr/bin, which is
    more "correct" for non-packaged software
  * Add battery-level check and label
  * Add flag that allows other programs (eg. ffmpeg) to use the v4l2-dc
    device
- Update to version 1.7.3
  * Bring back app-indicator by popular demand (#159).
- Update to version 1.7.2
  * GUI client saves + restores horizontal and vertical flip changes
  * GUI client: Exposure lock and white-balance controls
  * Update keyboard accelerators, hopefully fix the numpad plus/minus
    shortcuts for all keyboards
  * CLI client: -nocontrols flag to facilitate "headless mode" (#143)
- Update to version 1.7.1
  * Dropped 'appindicator' (systray icon) support as this library is
    deprecated and no longer works (at least on Debian).
- Updated patches:
  * 0001-Use-icon-installed-to-theme-directory.patch
  * 0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1680868800">- Update to version 1.9.0
  * Increase the socket timeout, extra logging
  * Fixup a/v/batt syncing
  * Fix the White-Balance menu
  * Fix battery value parsing
  * Support ayatana-appindicator
  * Continue trying when setting audio hwparams fails</changelog>
</package>
<package pkgid="eb89713f2b9953affc04845ac9aa52462c9cd75c7b57d38877d512fd66e3dc4deb55fcc0428802e703636d52377ecbddbc55201887829575863e21f3278946d7" name="droidcam-cli" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="lp160.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1594382400">- Initial package version 1.4
- Add two patches to make it work with the upstream v4l2loopback driver:
  * 0001-Enhance-compatibility-with-upstream-v4l2loopback-dri.patch
  * 0002-Accept-upstream-v4l2loopback-driver-as-device.patch
- Add compatibility for TurboJPEG version in Leap 15.x
  * 0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1594555200">- Use noun phrase for descriptions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1601985600">- Update to version 1.5
  * AppIndicator support
  * Portrait mode and flip support
- Add README-v4l2loopback.md, referring to v4l2loopback-ctl for
  configuration
- Add 0001-Use-icon-installed-to-theme-directory.patch
- Skip EXIF marker handling in JPEG transform on Leap 15.x, update
  0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1612785600">- Update to version 1.7
  * Added 'Vertical Flip' option. (original PR: #120)
  * Added Gnome desktop entry. (original PR: #127)
  * GUI client will show a warning when closing with active
    connection.
  * Added -dev command line option, to use a specific video device
    instead of auto-discovery.
- Update to version 1.6
  * Added support for the regular v4l2loopback module
    (Original pr #105)
  * Fixed bug with server mode not using the port value correctly
    in the GUI
  * Fixed bug when connecting to iOS device via USB (#97)
- Fix failing build due to renamed libusbmusd pkgconfig file.
- Drop upstreamed v4l2loopback patches:
  * 0001-Enhance-compatibility-with-upstream-v4l2loopback-dri.patch
  * 0002-Accept-upstream-v4l2loopback-driver-as-device.patch
- Rebased patches:
  * 0001-Use-icon-installed-to-theme-directory.patch
  * 0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Grover Chou &lt;groverchout@opensuse.org&gt;" date="1652702400">- Update to version 1.8.2
  * Bugfix: Prevent UI alerts when connection is stopped abruptly. #210
- Update to version 1.8.1
  * Added -vflip/-hflip options to droidcam-cli
- Update to version 1.8.0
  * Fix for iOS USB connections dropping instantly (via #184)
  * Code updates (via #184)
  * Binaries now go into /usr/local/bin instead of /usr/bin, which is
    more "correct" for non-packaged software
  * Add battery-level check and label
  * Add flag that allows other programs (eg. ffmpeg) to use the v4l2-dc
    device
- Update to version 1.7.3
  * Bring back app-indicator by popular demand (#159).
- Update to version 1.7.2
  * GUI client saves + restores horizontal and vertical flip changes
  * GUI client: Exposure lock and white-balance controls
  * Update keyboard accelerators, hopefully fix the numpad plus/minus
    shortcuts for all keyboards
  * CLI client: -nocontrols flag to facilitate "headless mode" (#143)
- Update to version 1.7.1
  * Dropped 'appindicator' (systray icon) support as this library is
    deprecated and no longer works (at least on Debian).
- Updated patches:
  * 0001-Use-icon-installed-to-theme-directory.patch
  * 0003-Hack-backwards-compatibility-for-TurboJPEG-2.0.0.patch</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1680868800">- Update to version 1.9.0
  * Increase the socket timeout, extra logging
  * Fixup a/v/batt syncing
  * Fix the White-Balance menu
  * Fix battery value parsing
  * Support ayatana-appindicator
  * Continue trying when setting audio hwparams fails</changelog>
</package>
<package pkgid="dae4480c619212f7d05917af32f7a02622a3ae16b050a3d54b87013dbba24a4e3dffe306386ee6e451d3cdbcab2227044841c774375f00fe04e6ce274902c06a" name="dropbox-cli" arch="x86_64">
  <version epoch="0" ver="2020.03.04" rel="bp160.1.14"/>
  <changelog author="dimstar@opensuse.org" date="1511524800">- Drop README from doc list: it does not contain useful information
  to the user (boo#1069626).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bwiedemann@suse.com" date="1520769600">- Add nautilus-dropbox-reproducible.patch to make man pages build
  reproducibly (boo#1047218)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1574337600">- Update to version 2019.02.14
  * Add "version" command, which prints out the version of the
    Dropbox daemon and the Dropbox command-line interface.
  * Update gpg warning to tell users to install the Python 3 GPG
    libraries instead of the Python 2 libraries.
  * Fix bug where the dropbox nautilus repo wasn't being added to
    the apt sources correctly on Ubuntu 18.04 and up.
  * Move build dependencies to Python 3.
  * Move to Python 3 and GTK3
  * Fix bug where the Dropbox tray icon wouldn't display on Ubuntu
    Unity and Ubuntu Gnome.
  * Reverts the fix to issue #15, where the tray wouldn't display on
    XFCE. If you're using XFCE, try the workarounds in this ticket:
    https://bugs.launchpad.net/ubuntu/+source/nautilus-dropbox/+bug/1546176
  * Add support for Fedora 23 - 29, Debian stretch and buster
  * Drop support for Fedora releases older than 21, Ubuntu releases
    older than trusty, and Debian releases older than jessie
  * Display link url on `status`
  * Fix canonicalize_path
  * Make `exclude` work with unicode paths
  * Fix bug that caused the Dropbox tray icon to not show up in XFCE &amp; LXDE
  * Add "update" command, which updates the Dropbox client
  * Unlink files that are going to be replaced by the unpack
  * Validate that Dropbox runs after downloading it
  * Use python-gpg instead of python-gpgme if it's installed, since
    python-gpgme is not available in Ubuntu 18.04.
  * Update icons included in package to the redesigned icons
- Drop nautilus-dropbox-fix-crash.patch and nautilus-dropbox-reproducible.patch
  Both fixed upstream.
- Remove BR on desktop-file-utils, python-docutils and python-gtk
- Move to python3, add BR and Requires on python3-gobject and python3-gpgme</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610452800">- Update to version 2020.03.04:
  + Coerce XDG_CURRENT_DESKTOP to "Unity". This works around the
    dropbox binary that will only activate the indicator icon and
    menu on Ubuntu Unity &lt; 16.10. This patch coerces
    XDG_CURRENT_DESKTOP to report as "Unity" for the
    budgie-desktop.
- Modernize spec.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1613649600">- Add 98.patch: workaround build script not coping with the new
  GNOME versioning scheme. In case of x.alpha or x.beta version, we
  declare them as x.0.
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641988800">- Add nautilus-dropbox-gtk4.patch: Fix build against Nautils/GTK4.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663243200">- Add 105.patch: Port to libnautilus-extension-4.
- Following the above, add pkgconfig(gtk4) and
  pkgconfig(libnautilus-extension-4) BuildRequires and drop
  pkgconfig(libnautilus-extension) and nautilus-dropbox-gtk4.patch
  and change nautilus_extdir global to check for
  libnautilus-extension-4 and not libnautilus-extension.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1669118400">- Require python3-gpg instead of python3-gpgme: gpgme is deprecated
  and in the code is already the fallback, which is only used when
  python3-gpg cannot be found.
- Refresh 105.patch based on git (re-download).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1726747200">- Add libgthread-2_0-0 to dependency as Requires to fix GUI
  launching (bsc#1230714).</changelog>
</package>
<package pkgid="4255eb95fbf13377c37ba49e30a895b8e8e9806c05fdad97de0efd0a3a52db69d5dae4df002178ec6d92cfcb00d858ab7b193e73d1e35e3ad8787dc4eb0b9f6d" name="drumstick" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="bp160.1.9"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1643112000">- Enable fluidsynth support on Leap 15.4 too, fluidsynth was
  updated</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651492800">- Update to 2.6.0
  * Widgets: Fluidsynth soundfonts dialog, updated filters
  * RT: Fluidsynth backend initialization: failure report for
    invalid soundfonts
  * Utils: fixed loading translations, program names and messages
  * cmake buildsystem: run qt::lupdate after building targets
  * Widgets: pianokeybd internal raw computer keyboard input
    processing
  * Utils: vpiano gets and uses a new raw keyboard menu option
  * Widgets: fixed pianokeybd's touchscreen input on Linux,
    including X11 and Wayland.
  * Utils: vpiano new menu options to allow enabling keyboard,
    mouse and touchscreen input.
  * Widgets: pianokeybd has 2 new functions, setUsingNativeFilter()
    and isUsingNativeFilter().
  * Utils: vpiano note labels font stability fix.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 2.6.1
  * Fixed generated pkgconfig files
  * Fix the wrong icon in KDE+Wayland
  * Fixed another issue with installation library dir</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1660305600">- Update to 2.7.0. Check the ChangeLog file for the full list of
  changes:
  * Utils: vpiano uses the subscript octave designation option
  * Drumstick::ALSA revision, registering SequencerEvent
    with qMetaType
  * Drumstick::Widgets - fixed piano designer plugin to show
    more properties
  * fixed fluidsynth backend to support channel pressure and
    key pressure MIDI events
  * fluidsynth backend files and classes renamed with more
    specific names.
  * removed sonivox library sources from the source tree</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1660824000">- Update to 2.7.1
  * Improved the sonivox detection when building drumstick
  * Fixed underlinking in some RT backends</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664798400">- Update to 2.7.2
  * Italian translation update
  * FluidSynth backend should honor its default soundfont.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1698148800">- Update to 2.8.1
  * CMake config check to avoid mixing Qt6 with Qt5
  * File: Improved RMID file support
    Extract DLS embedded data
    Decode DLS instrument names
    New mime type
  * RT Sonivox backend: enabled DLS file loading
  * Widgets: Sonivox configuration dialog updated
  * Chinese translation updated. Thanks to Hycinth
  * CMake config check to avoid mixing Qt6 with Qt5
  * Widgets: fixed compiler definitions, removed object headers
    duplicity
  * dumprmi utility: fixed QScopedPointer template for arrays
  * Updated doxygen settings for Doxygen 1.9.5
  * Widgets: clip note children (labels)
  * Unit tests: conditionally run the ALSA test and run the
    Widgets test using the QPA platform "offscreen"
  * ALSA: added assignment operators for sysex and text events
  * Fix for ticket #48: SMF Parser does not report enough errors
  * Implemented change soundfont function for the SonivoxEAS
    backend.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 2.9.0
  * new SettingsFactory public static methods: fileName() and
    format() (gh#pedrolcl/drumstick#15)
  * new slot writeSettings() for some backends: Sonivox,
    FluidSynth, Network (gh#pedrolcl/drumstick#16)
  * Building with Qt6 by default.
  * For Qt5 compatibility, a new option USE_QT5 must be set.
  * Upgraded compiler/runtime requirements to C++17.
  * Upgraded CMake requirement to 3.16</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728907200">- Update to 2.9.1
  RT library:
  * initialization of PipeWire in the FluidSynth backend.
  * fix for #25: FluidSynth backend, ability to configure chorus
    and reverb parameters.
  * fix for #24: FluidSynth backend, ability to set several
    soundfonts.
  Widgets library:
  * fix for #25: FluidSynth settings dialog, configuration of
    chorus and reverb.
  * fix for #24: FluidSynth settings dialog, select several
    soundfonts.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738497600">- Update to 2.10.0
  * RT: FluidSynth backend, using "audio.jack.autoconnect" when
    the audio driver is "jack"
  * ALSA: emitted signal with invalid pointer
  * RT, Widgets: issues with the new reverb/chorus fluidsynth
    settings
  * ALSA: new QDebug output operator accepting SequencerEvent
    instances
  * Widgets: revised user interface for the fluidsynth settings
  * fixed backendmanager usage in vpiano</changelog>
</package>
<package pkgid="4f863adfa175e956918378f0c7b31797a11d7af4872200a3fe968e5a5b350b24576e56376e26346a42c12ce5febbdeac341d7761f62bdd584306668731c070d7" name="drumstick-lang" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="bp160.1.9"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1643112000">- Enable fluidsynth support on Leap 15.4 too, fluidsynth was
  updated</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651492800">- Update to 2.6.0
  * Widgets: Fluidsynth soundfonts dialog, updated filters
  * RT: Fluidsynth backend initialization: failure report for
    invalid soundfonts
  * Utils: fixed loading translations, program names and messages
  * cmake buildsystem: run qt::lupdate after building targets
  * Widgets: pianokeybd internal raw computer keyboard input
    processing
  * Utils: vpiano gets and uses a new raw keyboard menu option
  * Widgets: fixed pianokeybd's touchscreen input on Linux,
    including X11 and Wayland.
  * Utils: vpiano new menu options to allow enabling keyboard,
    mouse and touchscreen input.
  * Widgets: pianokeybd has 2 new functions, setUsingNativeFilter()
    and isUsingNativeFilter().
  * Utils: vpiano note labels font stability fix.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 2.6.1
  * Fixed generated pkgconfig files
  * Fix the wrong icon in KDE+Wayland
  * Fixed another issue with installation library dir</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1660305600">- Update to 2.7.0. Check the ChangeLog file for the full list of
  changes:
  * Utils: vpiano uses the subscript octave designation option
  * Drumstick::ALSA revision, registering SequencerEvent
    with qMetaType
  * Drumstick::Widgets - fixed piano designer plugin to show
    more properties
  * fixed fluidsynth backend to support channel pressure and
    key pressure MIDI events
  * fluidsynth backend files and classes renamed with more
    specific names.
  * removed sonivox library sources from the source tree</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1660824000">- Update to 2.7.1
  * Improved the sonivox detection when building drumstick
  * Fixed underlinking in some RT backends</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664798400">- Update to 2.7.2
  * Italian translation update
  * FluidSynth backend should honor its default soundfont.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1698148800">- Update to 2.8.1
  * CMake config check to avoid mixing Qt6 with Qt5
  * File: Improved RMID file support
    Extract DLS embedded data
    Decode DLS instrument names
    New mime type
  * RT Sonivox backend: enabled DLS file loading
  * Widgets: Sonivox configuration dialog updated
  * Chinese translation updated. Thanks to Hycinth
  * CMake config check to avoid mixing Qt6 with Qt5
  * Widgets: fixed compiler definitions, removed object headers
    duplicity
  * dumprmi utility: fixed QScopedPointer template for arrays
  * Updated doxygen settings for Doxygen 1.9.5
  * Widgets: clip note children (labels)
  * Unit tests: conditionally run the ALSA test and run the
    Widgets test using the QPA platform "offscreen"
  * ALSA: added assignment operators for sysex and text events
  * Fix for ticket #48: SMF Parser does not report enough errors
  * Implemented change soundfont function for the SonivoxEAS
    backend.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 2.9.0
  * new SettingsFactory public static methods: fileName() and
    format() (gh#pedrolcl/drumstick#15)
  * new slot writeSettings() for some backends: Sonivox,
    FluidSynth, Network (gh#pedrolcl/drumstick#16)
  * Building with Qt6 by default.
  * For Qt5 compatibility, a new option USE_QT5 must be set.
  * Upgraded compiler/runtime requirements to C++17.
  * Upgraded CMake requirement to 3.16</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728907200">- Update to 2.9.1
  RT library:
  * initialization of PipeWire in the FluidSynth backend.
  * fix for #25: FluidSynth backend, ability to configure chorus
    and reverb parameters.
  * fix for #24: FluidSynth backend, ability to set several
    soundfonts.
  Widgets library:
  * fix for #25: FluidSynth settings dialog, configuration of
    chorus and reverb.
  * fix for #24: FluidSynth settings dialog, select several
    soundfonts.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738497600">- Update to 2.10.0
  * RT: FluidSynth backend, using "audio.jack.autoconnect" when
    the audio driver is "jack"
  * ALSA: emitted signal with invalid pointer
  * RT, Widgets: issues with the new reverb/chorus fluidsynth
    settings
  * ALSA: new QDebug output operator accepting SequencerEvent
    instances
  * Widgets: revised user interface for the fluidsynth settings
  * fixed backendmanager usage in vpiano</changelog>
</package>
<package pkgid="8ba86b1680b17e6baa1674c5b043ca3a72bd884bfb2794783247acaa1596710a8e2d006545ea71aafdd3f01101bdc414475442ed94d89a6fc05f93dbc1b43e2c" name="drumstick-mimetypes" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="bp160.1.9"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1643112000">- Enable fluidsynth support on Leap 15.4 too, fluidsynth was
  updated</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1651492800">- Update to 2.6.0
  * Widgets: Fluidsynth soundfonts dialog, updated filters
  * RT: Fluidsynth backend initialization: failure report for
    invalid soundfonts
  * Utils: fixed loading translations, program names and messages
  * cmake buildsystem: run qt::lupdate after building targets
  * Widgets: pianokeybd internal raw computer keyboard input
    processing
  * Utils: vpiano gets and uses a new raw keyboard menu option
  * Widgets: fixed pianokeybd's touchscreen input on Linux,
    including X11 and Wayland.
  * Utils: vpiano new menu options to allow enabling keyboard,
    mouse and touchscreen input.
  * Widgets: pianokeybd has 2 new functions, setUsingNativeFilter()
    and isUsingNativeFilter().
  * Utils: vpiano note labels font stability fix.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1658577600">- Update to 2.6.1
  * Fixed generated pkgconfig files
  * Fix the wrong icon in KDE+Wayland
  * Fixed another issue with installation library dir</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1660305600">- Update to 2.7.0. Check the ChangeLog file for the full list of
  changes:
  * Utils: vpiano uses the subscript octave designation option
  * Drumstick::ALSA revision, registering SequencerEvent
    with qMetaType
  * Drumstick::Widgets - fixed piano designer plugin to show
    more properties
  * fixed fluidsynth backend to support channel pressure and
    key pressure MIDI events
  * fluidsynth backend files and classes renamed with more
    specific names.
  * removed sonivox library sources from the source tree</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1660824000">- Update to 2.7.1
  * Improved the sonivox detection when building drumstick
  * Fixed underlinking in some RT backends</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1664798400">- Update to 2.7.2
  * Italian translation update
  * FluidSynth backend should honor its default soundfont.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1698148800">- Update to 2.8.1
  * CMake config check to avoid mixing Qt6 with Qt5
  * File: Improved RMID file support
    Extract DLS embedded data
    Decode DLS instrument names
    New mime type
  * RT Sonivox backend: enabled DLS file loading
  * Widgets: Sonivox configuration dialog updated
  * Chinese translation updated. Thanks to Hycinth
  * CMake config check to avoid mixing Qt6 with Qt5
  * Widgets: fixed compiler definitions, removed object headers
    duplicity
  * dumprmi utility: fixed QScopedPointer template for arrays
  * Updated doxygen settings for Doxygen 1.9.5
  * Widgets: clip note children (labels)
  * Unit tests: conditionally run the ALSA test and run the
    Widgets test using the QPA platform "offscreen"
  * ALSA: added assignment operators for sysex and text events
  * Fix for ticket #48: SMF Parser does not report enough errors
  * Implemented change soundfont function for the SonivoxEAS
    backend.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1706788800">- Update to 2.9.0
  * new SettingsFactory public static methods: fileName() and
    format() (gh#pedrolcl/drumstick#15)
  * new slot writeSettings() for some backends: Sonivox,
    FluidSynth, Network (gh#pedrolcl/drumstick#16)
  * Building with Qt6 by default.
  * For Qt5 compatibility, a new option USE_QT5 must be set.
  * Upgraded compiler/runtime requirements to C++17.
  * Upgraded CMake requirement to 3.16</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1728907200">- Update to 2.9.1
  RT library:
  * initialization of PipeWire in the FluidSynth backend.
  * fix for #25: FluidSynth backend, ability to configure chorus
    and reverb parameters.
  * fix for #24: FluidSynth backend, ability to set several
    soundfonts.
  Widgets library:
  * fix for #25: FluidSynth settings dialog, configuration of
    chorus and reverb.
  * fix for #24: FluidSynth settings dialog, select several
    soundfonts.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738497600">- Update to 2.10.0
  * RT: FluidSynth backend, using "audio.jack.autoconnect" when
    the audio driver is "jack"
  * ALSA: emitted signal with invalid pointer
  * RT, Widgets: issues with the new reverb/chorus fluidsynth
    settings
  * ALSA: new QDebug output operator accepting SequencerEvent
    instances
  * Widgets: revised user interface for the fluidsynth settings
  * fixed backendmanager usage in vpiano</changelog>
</package>
<package pkgid="7b15aa58742a2f0fdf6c5e45fc35f3d529c1f1c33d5e35f5a39293aae08ba4ed5ed197ae1792994e94c7a8e8d82da613c4e7737b1ce7edc4479a9a0d01fe6709" name="dsda-doom" arch="x86_64">
  <version epoch="0" ver="0.29.2" rel="bp160.1.3"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1699185600">- Update to release 0.27.3
  * New indexed light mode (software fidelity in OpenGL).
  * Improved controller support.
  * A new HUD system with new components.
  * New console commands and better usability.
  * UDMF support, MAPINFO support
  * ZIP file loading
  * Improved Heretic and Hexen suport
  * Upgraded to OPL3 emulation
  * You can switch back to OPL2 with config option mus_opl_opl3mode
- Delete prboom-nodatetime.diff, fluidsynth1.diff
- Add cmake-path-suffix.diff
- Note: If you updated from an old dsda-doom and use the same
  config file, your default complevel may have been reset to 0. If
  you run into an issue, check it out (suggested value is 21 /
  mbf21, if you don't know what to pick).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1700308800">- Update to release 0.27.4
  * Added option to hide stat labels and totals
  * Fixed an overflow causing distant sprites (~8k map units) to
    not be rendered</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1701604800">- Update to release 0.27.5
  * DSDAHUD lumps are "merged" now so only redefined huds are changed
  * Fixed umapinfo bunny scroller crash</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1723723200">- Update to release 0.28.0
  * Freelook aiming and projectile behavior has been rewritten
  * Added MAPINFO flags to support finite height explosion behavior
  * Added MAPINFO flags to support freelook
  * improvement on Tools, Console, and many Bug Fixes
    see https://github.com/kraflab/dsda-doom/blob/master/patch_notes/v0.28.md
- Delete cmake-path-suffix.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1723982400">- Update to release 0.28.1
  * Fixed freelook menu crash, fixed numlock menu crash</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1729944000">- Update to release 0.28.2
  * Added ANIMATED support to Heretic
  * Fixed mbf21 add / remove NOBLOCKMAP or NOSECTOR dehacked
    crashes</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1737115200">- Update to release 0.28.3
  * Added -track_reality command-line option
  * Added "Auto Switch Weapon on Pickup" option
  * Added shaded overlay for the automap and options menu
  * Added horizontal mouse wheel support
  * Added low-res aspect ratio correction on OpenGL to match
    software rendering
  * Improved software fuzz to not scale with the resolution
  * Improved automap zoom / scroll speeds</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1742472000">- Remove unused BuildRequire on libpcre. (The feature using pcre
  was dropped in 2022 already.)
- Add BuildRequire on pkgconfig(glu), previously implicitly added
  by SDL2-devel (but now we have sdl2-compat-devel).
- Make build recipe POSIX sh compatible.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1744286400">- Update to release 0.29
  * Reorganized all menus
  * Strict mode is now On by default when recording demos
  * Don't allow saving the game on strict mode
  * Added support for reading GAMEINFO lump ("iwad" field only)
  * Added config option for toggling aspect ratio correction
  * Added linear sky scrolling option for Software renderer
  * Added smooth chainsaw bobbing (only when Uncapped FPS is on)
  * Remove SysEx support from FluidSynth midi player
  * automap: New colors for "Alt Secret Exit line" and
    "Tag Finder line"
  * Checks if a map exists before changing music with IDMUS
  * New cheat SKILL</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1751025600">- Update to release 0.29.2
  * Clickable demo progress bar
  * Multiple quicksave support
  * Customizable view and weapon bob config
  * Colored statusbar backgrounds
  * WAD lookup now includes XDG directories
  * Cutoff MIDI notes at end of song before looping
  * Linedef action 272 had erroneously not changed the sky
  * Replace DUMB by OpenMPT as tracker music engine
  * Level brightness adjuster (this is different from
    Gamma correction) [config-only, not selectable in UI]
  * MAPINFO Skill Definition support</changelog>
</package>
<package pkgid="fcbc13024ffd8b7f16d4da15e7c5d31b363ab0030da5addfc09c378dae05b6a335da9657b83162fe7e5be15768842f510be49657dd0ccb0b6cb2ae9670c9205b" name="dssi" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.1"/>
  <changelog author="davejplater@gmail.com" date="1285156800">- Update to version 1.1.0
- Upstram changes :
  * Man page updates.
  * Added '-c' option for client name to jack-dssi-host.
  * Fixed configure.ac to check for OS X Qt 4 frameworks, and to add
  '-lX11' to QT_LIBS when Qt is X11-based.
  * Added dssi_list_plugins and dssi_analyse_plugin tools.
  * Updated README for Qt 4 and new tools.
  * Fixed jack-dssi-host.c ALSA client ports to be of type 'application'.
  * Fixed trivial_synth.c getControllerTS() to use DSSI_CC().
  * examples/Makefile.am fixes: reverted trivial_sampler_qt_CXXFLAGS
  to again include $(ALSA_CFLAGS); added math lib to trivial_synth_la_LIBADD.
  * Version bump to 1.0.1.
  * Updated example GUIs to use Qt 4 (thanks to Charles Flèche!)
  * Fixed an uninitialized variable bug in less_trivial_synth.c.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314705600">- Fix linking with new toolchain.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="reddwarf@opensuse.org" date="1326196800">- Update to version 1.1.1:
  * Fix to a crash on startup in one of the example plugins
    (less_trivial_synth)
- Run spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="davejplater@gmail.com" date="1412510400">- Own the dssi libdir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723809600">- Added dssi-C99.diff which fixed a callback prototype so that the
  source code adher to C99 and builds with GCC 14.</changelog>
  <changelog author="munix9@googlemail.com" date="1735387200">- Add dssi-add-missing-include.patch:
  Fix for "error: unknown type name ‘size_t’"</changelog>
</package>
<package pkgid="98bfd86f87a537e43999c4a291d55468595c5ba34104012511682c9b41018513f7af4a3ab6d045113566014ff73cffd35c0bda078a8ac61a6f3e3bd9e5785c5d" name="dssi-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.1"/>
  <changelog author="davejplater@gmail.com" date="1285156800">- Update to version 1.1.0
- Upstram changes :
  * Man page updates.
  * Added '-c' option for client name to jack-dssi-host.
  * Fixed configure.ac to check for OS X Qt 4 frameworks, and to add
  '-lX11' to QT_LIBS when Qt is X11-based.
  * Added dssi_list_plugins and dssi_analyse_plugin tools.
  * Updated README for Qt 4 and new tools.
  * Fixed jack-dssi-host.c ALSA client ports to be of type 'application'.
  * Fixed trivial_synth.c getControllerTS() to use DSSI_CC().
  * examples/Makefile.am fixes: reverted trivial_sampler_qt_CXXFLAGS
  to again include $(ALSA_CFLAGS); added math lib to trivial_synth_la_LIBADD.
  * Version bump to 1.0.1.
  * Updated example GUIs to use Qt 4 (thanks to Charles Flèche!)
  * Fixed an uninitialized variable bug in less_trivial_synth.c.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314705600">- Fix linking with new toolchain.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="reddwarf@opensuse.org" date="1326196800">- Update to version 1.1.1:
  * Fix to a crash on startup in one of the example plugins
    (less_trivial_synth)
- Run spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="davejplater@gmail.com" date="1412510400">- Own the dssi libdir</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723809600">- Added dssi-C99.diff which fixed a callback prototype so that the
  source code adher to C99 and builds with GCC 14.</changelog>
  <changelog author="munix9@googlemail.com" date="1735387200">- Add dssi-add-missing-include.patch:
  Fix for "error: unknown type name ‘size_t’"</changelog>
</package>
<package pkgid="ad6329d51de9da53654f6bff60b392165ce4c2d090988403f3a84426f8a7fca1563fabdb055d506dc32a53324ed9a4158a4644dd8578efba9d4c97ab6355fb8a" name="dssim" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="bp160.1.13"/>
  <changelog author="mardnh@gmx.de" date="1496664000">- initial package, version 1.3.2</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1675080000">- update to 3.2.3:
  * 25% faster
  * WASM compatibility
  * use more accurate pooling algorithm
  * rewrite in Rust
  * Chroma channels are compared at full resolution.
  * This increases accuracy on images with chroma subsampling.
  * All scaling is done in linear-light premultiplied-alpha color
    space, which further increases accuracy.
  * Safe and reliable code. No more dodgy pointer manipulatio n
  * Fixed handling of PNG files with invalid chunks
  * Fixed handling of color channels smaller than 8 pixels</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1694692800">- Update license based on the recent legaldb review</changelog>
</package>
<package pkgid="0ee7775bcdfd7c28aab1ec3accfad1659c680660d65bb63fc3767a56f59ffe99e5d0bfa99e54ec8ab2254f520c42d287561e48887cea952c91217b5f0d1b8d7c" name="dt" arch="x86_64">
  <version epoch="0" ver="23.28" rel="bp160.1.12"/>
  <changelog author="hare@suse.de" date="1255435200">- Initial rpm, based on dt version 16.20</changelog>
  <changelog author="hare@suse.de" date="1298289600">- Update to version 17.25</changelog>
  <changelog author="mpluskal@suse.com" date="1472558400">- Correct license
- Cleanup spec file with spec-cleaner
- Disable building on 32 architectures for Factory as they fail</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Update to version 18.32
- Sync patches from fedora:
  * dt-wformat-security.patch
  * dt-default-source-define.patch
  * dt-manpage.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Drop doc subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1528372800">- Modernise spec file with spec-cleaner</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618660800">- Update SPEC file, added working upstream URL
  * Use OBS services for source generation
- Update to 23.28
  * Add support for forcing FALSE data corruptiong for debugging
  * When creating log directories in setup_log_directory(),
    create the last subdirectory (as required). For user specified
    log directory, expand format control strings prior to creating
    the directory (logdir= option).
  * Create master log creation function for use by other tool parsers
  * Add support for comma separated workload[s]= option
  * When "trigger=" is specified, no parameters, then remove triggers.
  * Add array=string option, esp. for external trigger scripts.
  * Add --trigger= and --workload= parsing for I/O behavior options.
  * Add support for starting slice offset.
  * Add options for date and time field separator used when
    formatting the log prefix format strings (e.g. "%ymd", "%hms")
  * Apply special step option handling to both disks and files,
    by setting up and ending offset so I/O loops break reaching
    this offset.
  * Add flag for output position, so zero offset is handled properly.
  * Add "showvflags=hex" option to show block tag verify flags set
  * When selecting 100% reads (readp=100), switch output file to
    input file.
  * Remove a file position sanity check no longer valid with
    updates made in FindCapacity() with new logic associated
    with the file position option.
  * For Unix systems, increase the open file resource limit,
    now that low limits are imposed on newer Linux distros,
    to avoid false failures!
  * Added "showfslba" and "showfsmap" commands to show the file
    system map, for the file specified, assuming we can acquire FS
    extents to map physical LBAs.
  * When re-enabling stats via "enable=stats", ensure all the stat
    flags reset when disabled, get enabled once again, esp. since
    these are sticky.
  * Add a retry data corruption limit option (retryDC_limit=value).
  * The normal retry limit is used for retrying errors (60 by default).
  * Added separate retry data corruption delay option (retryDC_delay).
  * Change the default dispose mode setting to keep on error.
  * Change the delete error log file default to be true.
  * Add logdir= option to prepend to job/log file paths.
  * Add support for capacity percentage for thin provisioned LUNs,
    to help avoid exceeding backend storage for over-provisioned
    volumes
  * Add support for appending a default file name to a directory.
  * Fix bug introduced with mounted files system check in copy mode.
  * For Linux file systems with direct I/O, get the disk block size.
  * This disk block size is required for later sanity checks for
    direct I/O.
  * Add mounted file system check when writing to /dev/ disk devices
- Dropped obsoleted  dt-default-source-define.patch and
  dt-wformat-security.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="5238afb4a5ec832bca96837085dee1c3d6775e20eb266a77111a71b3992204c195852d661460ec248bc2c7e61f74ff06090475d92b95a965e96c3e1cb438774f" name="dtach" arch="x86_64">
  <version epoch="0" ver="0.9+2.748020b" rel="bp160.1.13"/>
  <changelog author="okurz@suse.com" date="1488196800">- New release based on version 0.9</changelog>
  <changelog author="okurz@suse.com" date="1488801600">- Update to version v0.9+2.748020b:
  * Prevent buffer overflow with a long socket path name.
  * Try to use chdir to get around the sun_path length limit.
  * Add dtach -p.
  * Update copyrights for 2015.
  * Call init_pty before signals are set up.
  * Improve error message when dtach can't find a pty.
  * Update copyrights for 2016.
  * dtach 0.9
  * Update license address
  * Update license header in source files.
- Delete redundant dtach-remove-date-time-compile-macros.patch merged upstream</changelog>
  <changelog author="okurz@suse.com" date="1489060800">- Remove __DATE__/__TIME__ macro use to allow reproducible builds</changelog>
  <changelog author="mpluskal@suse.com" date="1493899200">- Cleanup spec file with spec-cleaner
- Drop implicit build dependencies
- Fully utilise install command</changelog>
  <changelog author="jengelh@inai.de" date="1494244800">- Rewrite description to point out the objective features,
  and do so without relying to much on the user knowing GNU screen.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615636800">- modernize specfile (move license to licensedir)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1643371200">- use versionrewrite to properly set spec file version
- use https for downloading sources</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="e2a7957698eaf36091fe850c51e26afdb2797cd50789f2d0cc12f29a900bf0a5ac7b2f14f526b30745f5764a929e5d0991dba8586b3c09bfd59481f042cc33c7" name="dtc" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1575806400">- Use %make_build and recpect %optflags.</changelog>
  <changelog author="dmueller@suse.com" date="1579003200">- add dtc-no-common-conflict.patch (bsc#1160388)</changelog>
  <changelog author="info@paolostivanin.com" date="1583841600">- Update to 1.6.0 (no changelog)
- Removed dtc-no-common-conflict.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 1.6.1:
  * A number of bugfixes
  * Fix many warnings with -Wsign-compare
  * Add compilation with meson (not used by default so far)
  * Yet another revamp of how we handle unaligned accesses
  * Added a number of extra checks for common tree errors
  * Checks for interrupt providers
  * i2c reg properties
  * Tighten checking of gpio properties
  * Reduce dependencies when building libfdt only
  * Allow libfdt.h header to be used from C++ more easily
  * Accept .dtbo extension for overlays
  * Update valid node and property characters to match current devicetree spec
  * Add several checks for root node sanity in fdt_check_full()
  * Somewhat more robust type labelling for the benefit of yaml output</changelog>
  <changelog author="schwab@suse.de" date="1664193600">- makefile-bison-rule.patch: Makefile: fix infinite recursion by dropping
  non-existent `%.output`</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1682424000">- update to 1.7.0:
  * dtc
  * Fix -Oasm output on PA-RISC by avoiding ';' separators
  * Put symbolic label references in -Odts output when possible
  * Add label relative path references
  * Don't incorrectly attempt to create fixups for reference to path
    in overlays
  * Warning rather than hard error if integer expression results are
    truncated due to cell size
  * libfdt
  * Add fdt_get_property_by_offset_w() function
  * pylibfdt
  * Fixed to work with Python 3.10
  * A number of extra methods
  * Fix out of tree build
  * fdtget
  * Add raw bytes output mode
  * General
  * Fixes for mixed-signedness comparison warnings
  * Assorted other warning fixes
  * Assorted updates to checks
  * Assorted bugfixes
  * Fix scripts to work with dash as well as bash
  * Allow static builds
  * Formalize Signed-off-by usage
- Update dtc.keyring
- Drop upstream patch:
  * makefile-bison-rule.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1729598400">- Update to 1.7.1:
  * dtc
  * Fix check for 10-bit I2C addresses
  * Improve documentation of -@ option
  * Update to libyaml &gt;= 0.2.3
  * Improvements &amp; fixes for device graph checks
  * Add -L / --local-fixups option
  * Add check for length of interrupt-map properties
  * libfdt
  * Add fdt_path_getprop_namelen()
  * Add fdt_get_symbol() and fdt_get_symbol_namelen()
  * Correct documentation of fdt_path_offset()
  * Correct documentation of fdt_appendprop_addrrange()
  * Validate aliases is fdt_get_alias_namelen()
  * Don't overwrite phandles when applying overlays
  * Require Python 3
  * pylibfdt
  * Support boolean properties
  * Fixes for current Python versions
  * General
  * Assorted bugfixes
  * Assorted build improvements
  * Assorted typo fixes in docs
  * Some additional testcases
  * Move to GitHub Actions based CI</changelog>
  <changelog author="schwab@suse.de" date="1738670400">- Mark assembler output as noexecstack</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1738929600">- Update to 1.7.2:
  * pylibfdt: Don't emit warnings from swig generate C code
  * fdtoverlay: provide better error message for missing /__symbols__
  * pylibfdt/libfdt.i: Use SWIG_AppendOutput
  * Escape spaces in depfile with backslashes.
  * libfdt.h: whitespace consistency fixups
  * libfdt.h: typo and consistency fixes
- Revert previous commit and use upstream fix for glibc 2.41:
  * ce1d858.patch</changelog>
</package>
<package pkgid="2ec111ea655457e815c419c887052ad9e9e178730e6a3cc464d2ebf054fa8ea5650a410755495aa3f1a45af7cbe4f2211a8737c0f4703c6c2c2246e156d456e0" name="dtdinst" arch="noarch">
  <version epoch="0" ver="20220510" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1541073600">- Change to build against bsh2 instead of the old bsh</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624795200">- Update to v20181222
- Package maven metadata
- Use testng in build process
- Remove unneeded patches:
  * jing-trang-20091111-datatype-sample.patch
  * jing-trang-20151127-notestng.patch
- Modified patch:
  * 0001-Various-build-fixes.patch -&gt; 0000-Various-build-fixes.patch</changelog>
  <changelog author="fstrba@suse.com" date="1625227200">- Do not use xmvn-tools, since this is a ring package
- Added patch:
  * no-tests.patch
    + avoid unnecessary dependency on testng</changelog>
  <changelog author="fstrba@suse.com" date="1625227201">- Added patch:
  * old-saxon.patch
    + Avoid building old saxon validator in order to avoid
    dependency on old saxon6</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1658750400">- Update to 20220510
- Removed patch:
  * 0002-Use-Xalan-instead-of-Saxon-for-the-build-655601.patch
    Use Saxon9 instead of Xalan
- Recreated patch files</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1674302400">- Add Maven Provides line for Jing &amp; Trang</changelog>
  <changelog author="fstrba@suse.com" date="1679313600">- Fetch the sources using the source service and filter out stray
  binaries and other files that we don't want to distribute because
  of licensing.</changelog>
  <changelog author="fstrba@suse.com" date="1692100800">- Build against saxon 10+</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="f97352a11948e0bca8abf3f1305f80797b8f779ea8fb2c138bd2c4075c4e8e74075a59dc0d5f3558f37d7a2d856ffe9bc4fc1ccffe5617c8d3f3a34e80e3ce57" name="dtrx" arch="noarch">
  <version epoch="0" ver="8.5.3" rel="bp160.1.10"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 5.0" date="1196164800">- new package</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 6.0" date="1204977600">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 6.1" date="1216123200">- new upstream version:
  * add support for InstallShield archives, using the unshield command
  * the wording of many of the interactive prompts has been adjusted to be
    clearer and provide more information to the user immediately
  * dtrx 6.1 does a better job protecting against race conditions when
    extracting a single file
  * if you used the -f option, and extracted an archive that only contained
    one file or directory, dtrx 6.0 would still prompt you to ask how it
    should be extracted. dtrx 6.1 fixes this, extracting the contents to the
    current directory as -f requires
  * recursive extraction would not work well in dtrx 6.0 when the contents of
    the original archive were a single file. This has been fixed in dtrx 6.1.</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 6.2" date="1217246400">- new upstream version:
  * new --one-entry option
  * fixes "1234 blocks" warning message
  * when you try to list the contents of an archive, dtrx will now cope with
    misnamed files more gracefully, giving more accurate results and showing
    fewer error messages
  * dtrx 6.2 will only show you error messages from archive extraction if it
    is completely unable to extract the file. If one of its extraction methods
    succeeds, it will no longer show you the error messages from previous
    extraction attempts
  * dtrx is now better about cleaning up partially extracted archives when it
    encounters an error or signal
  * users will no longer see error messages about broken pipes from dtrx.</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 6.3" date="1224504000">- update to 6.3:
  * this release adds support for RAR archives
  * fixes a bug that caused dtrx to crash when extracting certain kinds of
    archives with the -v option
  * avoids spurious warnings under Python 2.6</changelog>
  <changelog author="zaitor@opensuse.org" date="1374667200">- Update to version 7.1:
  + New features: LZH archives are now supported.
  + Bug fixes:
  - dtrx will no longer offer to extract the zero archive files
    found in a zero-file archive.
  - Temporary directories will be cleaned up after extracting an
    empty archive.
- Changes from version 7.0:
  + At this point, I consider dtrx to be mature software. It's
    maybe a little too interactive, but otherwise it does
    everything I want, and it does it very well.  Expect new
    releases to be few and far between going forward.
  + New features: If any of dtrx's command line arguments are URLs,
    it will automatically download them with `wget -c` in the
    current directory before extracting them.
  + Enhancements:
  - dtrx will try to extract ZIP files with 7z if unzip is not
    successful.
  - dtrx will be smarter about removing extensions from filenames
    when extracting to a new directory or file.
  - dtrx will not ask you if you want to recurse through an
    archive if the number of archives inside the original file is
    small.
- Changes from version 6.6:
  + Enhancements: dtrx can now handle `xz compression`_.
  + Other changes: The tests now use the PyYAML library, instead of
    the abandoned Syck.
- Changes from version 6.5:
  + Enhancements:
  - When you list archive contents with -l or -t, dtrx will start
    printing results much faster than it used to.  There's a
    small chance that it will print some incorrect listings if it
    misdetects the archive type of a given file, but it will show
    you an error message when that happens.
  - dtrx recognizes more kinds of compressed tar archives by
    their extension.
  - You can now extract newer .deb packages that are compressed
    with bzip2 or lzma.
  + Bug fixes:
  - When extracting an archive that contained a file with a
    mismatched filename, the prompt would offer you a chance to
    "rename the directory" instead of "rename the file." This
    wording has been fixed, along with some other wording
    adjustments in the prompts generally.
  - Perform more reliable detection of the terminal size, and
    improve word wrapping on prompts.
  + Other changes : The README is now written like a man page, and
    can be converted to a man page by using rst2man_.
- Changes from version 6.4:
  + Enhancements:
  - Support detection of LZMA archives by magic.
  - Interactive prompts are wrapped much more cleanly.
  + Bug fixes: Fix a bug where dtrx would crash when extracting an
    archive with no files inside it.
- Add BuildArch: norach for opensuse.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Cleanup with spec-cleaner
- Use current python building macros</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1683115200">- Update to version 8.5.2
  * too many changes to list</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1683115201">- Trim filler wording and rhetorics from descriptions.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1720526400">- update to 8.5.3:
  * Send stdout to /dev/null unless it is needed</changelog>
</package>
<package pkgid="e94cbfaccdc05b4188e18a3ff99e353e9eca12ba12186b0eb7af4e1e7f4b830d5cbcdd33764f572fd253305d3084ae9f693b4b286faeaa3d5493ea6a0f14d1d7" name="dtv-scan-tables" arch="noarch">
  <version epoch="0" ver="20240503" rel="bp160.1.9"/>
  <changelog author="jslaby@suse.com" date="1599048000">- Update to version 20200830:
  * dtv-scan-tables: Full UK update
  * dtv-scan-tables: add table for Slovenia
  * dtv-scan-tables: frequency updates for Finland
  * Add atsc/kr-Cable-8VSB
  * dtv-scan-tables: add Dorfnetz for Liechtenstein
  * Update dvb-t scan files for Ireland (ie-*)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 20200902:
  * dtv-scan-tables: DVB-C for the City of Munich, Germany, operated by Vodafone</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1622030400">- Update to version 20210430:
  * update Brazilian scan files
  * Remove legacy entries
  * Add new satellites from Lyngsat
  * Rename a few satellites with two names and update frequencies
  * Update frequencies from Lyngsat</changelog>
  <changelog author="mpluskal@suse.com" date="1640606400">- Update to version 20211214:
  * dtv-scan-tables: latest UK changes</changelog>
  <changelog author="mpluskal@suse.com" date="1646913600">- Update to version 20220307:
  * Update Brazilian ISDB-T tables
  * Update satellite channel lists from Lyngsat</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651492800">- Update to version 20220430:
  * pt-All: fix modulation
  * pt-All: Update Portugal channels</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1670932800">- Update to version 20221125:
  * dtv-scan-tables: hu-Digikabel changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1706875200">- Update to version 20240131:
  * isdb-t: Update Brazil channel lists
  * dvb-s: drop transponders that aren't there at Lyngsat anymore
  * dvb-s: update from today's Lyngsat report
  * dtv-scan-tables: full uk transmitter update</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709208000">- Update to version 20240207:
  * dtv-scan-tables: added channels for Lviv, Ukraine</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1715947200">- Update to version 20240503:
  * dvb-t/at-All: add Salzburg/Gaisberg dvb-t2 transponders</changelog>
</package>
<package pkgid="d67a57e9aaa3cd85e3ca92695d7c3ae7a0c43b7ccd3c71f6315c4dbf37c468ff4f73b8ceb866f4c088a2658e03be043f9a1026fbe493673cef33c548e4ddbfeb" name="dtv-scan-tables-v5" arch="noarch">
  <version epoch="0" ver="20240503" rel="bp160.1.9"/>
  <changelog author="jslaby@suse.com" date="1599048000">- Update to version 20200830:
  * dtv-scan-tables: Full UK update
  * dtv-scan-tables: add table for Slovenia
  * dtv-scan-tables: frequency updates for Finland
  * Add atsc/kr-Cable-8VSB
  * dtv-scan-tables: add Dorfnetz for Liechtenstein
  * Update dvb-t scan files for Ireland (ie-*)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1604577600">- Update to version 20200902:
  * dtv-scan-tables: DVB-C for the City of Munich, Germany, operated by Vodafone</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1622030400">- Update to version 20210430:
  * update Brazilian scan files
  * Remove legacy entries
  * Add new satellites from Lyngsat
  * Rename a few satellites with two names and update frequencies
  * Update frequencies from Lyngsat</changelog>
  <changelog author="mpluskal@suse.com" date="1640606400">- Update to version 20211214:
  * dtv-scan-tables: latest UK changes</changelog>
  <changelog author="mpluskal@suse.com" date="1646913600">- Update to version 20220307:
  * Update Brazilian ISDB-T tables
  * Update satellite channel lists from Lyngsat</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1651492800">- Update to version 20220430:
  * pt-All: fix modulation
  * pt-All: Update Portugal channels</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1670932800">- Update to version 20221125:
  * dtv-scan-tables: hu-Digikabel changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1706875200">- Update to version 20240131:
  * isdb-t: Update Brazil channel lists
  * dvb-s: drop transponders that aren't there at Lyngsat anymore
  * dvb-s: update from today's Lyngsat report
  * dtv-scan-tables: full uk transmitter update</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1709208000">- Update to version 20240207:
  * dtv-scan-tables: added channels for Lviv, Ukraine</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1715947200">- Update to version 20240503:
  * dvb-t/at-All: add Salzburg/Gaisberg dvb-t2 transponders</changelog>
</package>
<package pkgid="f213492df3c61811ed4e245ecf9fb6740cde7e89ee1a3fd61123fa2bac41e91167bd4bcad553927c0266c67ef4b6d2ea55bf48e2cb62a97548af6c1ffdfb7a44" name="dub" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="bp160.1.5"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1548417600">- Add _constraints to avoid OOM errors
- Fix builds with ldc on %ix86</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1549886400">- Increase required memory in _constraints as latest ldc requires more RAM</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1552824000">- Update to version 1.14.0
  * dub fetch now supports &lt;package&gt;@&lt;version&gt; as a shortcut
  * extraDependencyFiles attribute added
  * File system supplier enabled
  * toolchainRequirements recipe entry</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1565784000">- Update to version 1.16.0
  * No changelog was made available.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588680000">- Update to 1.20.0 (no changelog)</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1609070400">- Update to 1.23.0
  * Added architecture x86_omf for windows-dmd
  * dub remove --non-interactive will now remove all packages by default
  * Running dub upgrade on a package-less folder is now a no-op
  * Support dependencies as git url with exact commit
  * All commands now support package[@&lt;version-spec&gt;], --version is deprecated</changelog>
  <changelog author="Chris Josten &lt;chris+suse@netsoj.nl&gt;" date="1668686400">- Update to 1.29.0
  * Harden package version detection from git describe by @kinke
- Update to 1.28.0
  * Removes dynamicLibrary being built as staticLibrary for targets
    other than OMF. by @rikkimax in #2211
  * move command variable substitution to execution by @WebFreak001
    in #2217
  * Fix interactive run-unittest.d by @WebFreak001
    in #2219
  * merge stable by @MartinNowak in #2221
  * fix: parse version from filesystem supplier correctly by
    @Panke in #2220
  * merge stable by @MartinNowak in #2225
  * add CompilerInvocationException by @WebFreak001 in #2226
  * Adapt determinePlatform to the new defaults for Win32 by
    @MoonlightSentinel in #2227
  * Define the $DUB_BUILD_PATH variable. by @veelo in #2228
  * merge stable by @MartinNowak in #2231
  * Add link to dub-docs. by @veelo in #2232
  * Remove travis-ci badge from README.md by @ibuclaw in #2233
  * Annotate escaping reference. by @veelo in #2237
  * Posix: use /etc/dub/settings.json if in /usr by @WebFreak001
    in #2203
  * Add -fno-druntime to GDC BuildOptions; it is the betterC
    flag. by @ibara in #2186
  * Fix #2238 - Renew source files after preGenerateCommands by
    @atilaneves in #2239
  * Inject source file (replaces #2207) by @rikkimax in #2240
- Update to 1.27.0
  * merge stable by @MartinNowak in #2132
  * Add environment variables to BuildSettings by @shoo in #2121
  * merge stable by @MartinNowak in #2138
  * Fix dependency build settings flooding dflags by @omerfirmak
    in #2139
  * merge stable by @MartinNowak in #2140
  * Adds quotation marks to error message by @denizzzka in #2148
  * Generate paths relative to visuald project files by @JudgeFish
    in #2150
  * merge stable by @MartinNowak in #2152
  * merge stable by @MartinNowak in #2154
  * Fix #2141 - When used as a library, the default compiler is
    different from the expected. by @shoo in #2158
  * Remove line 'Exclusing package.d blah...' from default dub
    build by @p0nce in #2157
  * RegistryPackageSupplier.genPackageDownloadUrl added by
    @denizzzka in #2156
- Update to 1.26.0
  * merge stable by @MartinNowak in #2114
  * Fix single file package dynamic library by @andre2007
    in #2112
  * fix #1867 - Add lowmem for settings by @shoo in #1905
  * Fix #2046 - Dependencies specified with a path ignore
    optional settings by @shoo in #2103
  * Replacing rununittest.sh by @drug007 in #2109
  * merge stable by @MartinNowak in #2115
  * merge stable by @MartinNowak in #2117
  * Only show package.d warning once by @dkorpel in #2131
  * [stable] LDC: Recognize -gcc as linker D flag by @kinke
    in #2135
- Update to 1.25.0
  * merge stable by @MartinNowak in #2061
  * Minor code cleanup (whitespace, import) by @Geod24 in #2063
  * Remove redundant code with relativeTo by @Geod24 in #2062
  * Set cwd on spawn functions instead of chdir by @Geod24
    in #2065
  * Hotfix for #2051 by @drug007 in #2064
  * Renaming a file by @drug007 in #2066
  * Raise minimum Vibe.d requirement to v0.9.0 by @Geod24
    in #2067
  * merge stable by @MartinNowak in #2071
  * Cleanup http listener in vibed template by @gizmomogwai in #2072
  * merge stable by @MartinNowak in #2074
  * Improve 'linker-D-flag' detection for ldmd2 by @kinke in #2082
  * Extend 'linker dflags' detection for DMD by @kinke in #2083
  * Selectively import symbols from std.array. by @veelo in #2089
  * Remove unused selective imports. by @veelo in #2088
  * Remove unused imports from compiler.d. by @veelo in #2090
  * Refactor imports (inet.url -&gt; inet.path). by @veelo in #2091
  * Remove unused std.range import. by @veelo in #2092
  * Remove unused imports. by @veelo in #2093
  * Refactor imports. by @veelo in #2094
  * Refactor import. Url is not used directly, but path is.
    by @veelo in #2097
  * Remove unused imports. by @veelo in #2096
  * Deprecate unused but public import. by @veelo in #2095
  * Fix #2085: [visuald] spurious library project by @veelo in #2098
  * Add some generated files to .gitignore by @ljmf00 in #2102
  * Fix #2086 copyFiles in subPackage does not honour targetPath.
    by @veelo in #2087
  * Replacing run-unittest.sh by run-unittest.d. Inception by
    @drug007 in #2084
  * Include copyFiles and extraDependencyFiles in visuald projects.
    by @veelo in #2099
  * Bump FRONTEND, move dmd to latest by default. by @maxhaton
    in #2104
  * merge stable by @MartinNowak in #2106
  * Actually copy copyFiles when building in Visual Studio. by
    @veelo in #2105
  * import 'std.variant.Algebraic' properly by @BorisCarvajal
    in #2108
  * merge stable by @MartinNowak in #2107
  * Fixed a regression with DFLAGS environment variable and cached
    generated unittest by @foerdi in #2116
- Update to 1.24.1
  * Allow adding dflags on dependencies when using SDL format by
    @omerfirmak in #2081
- Update to 1.24.0
  * merge stable by @MartinNowak in #2011
  * [stable] Deduplicate dflags and lflags by @Geod24 in #2016
  * cache the generated test main file: dub_test_root.d by @foerdi
    in #2005
  * Revert "Deduplicate dflags and lflags" (#2016) by @s-ludwig
    in #2020
  * merge stable by @MartinNowak in #2022
  * Remove usage of deprecated std.xml by @andre2007 in #1977
  * Support for .netrc file added by @andre2007 in #2027
  * ci: build release .tar.gz without travis owner and group id
    by @ljmf00 in #2030
  * Add support for '-platformlib' option. Fixes #2031 by
    @dbankov-vmware in #2032
  * GH Actions: Use new syntax for set-env by @Geod24 in #2036
  * Merge stable into master by @Geod24 in #2037
  * dub.compilers.ldc: Fix --rdmd with --compiler=ldc2 by
    @CyberShadow in #2033
  * Correct issue #1673 (with dupe #1797 and #2019) by @p0nce
    in #2034
  * betterC flag enabled in generated visuald project file. Fixes #2024
    by @MrZoraman in #2025
  * Fix Issue #1474 - Regenerate build settings after preGenerateCommands
    by @omerfirmak in #2035
  * Mutually exclude mainSourceFile of different configurations by
    @omerfirmak in #2039
  * [CI]: Remove old AppVeyor, TravisCI, SemaphoreCI and build-gdc.sh
    files by @PetarKirov in #2042
  * [stable] Use compiler version, not frontend version for build IDs
    and paths by @kinke in #2045
  * [stable] Add support for --arch=x86_mscoff for LDC (for DMD
    compatibility) by @kinke in #2049
  * Use DC env variable as the default compiler by @omerfirmak in #2047
  * Fix #2051: Running unit tests from DUB single file packages fails by
    @drug007 in #2052
  * Improved ldc cross compile by @foerdi in #2055
  * improve list command (filter by package spec) by @deviator
    in #2057
  * Dont export DFLAGS &amp; LFLAGS by default by @omerfirmak
    in #2048
  * Allow custom dflags to be defined for dependencies by
    @omerfirmak in #2040
  * Normalize line endings &amp; UTF8 BOMs by @Geod24 in #2058
  * add ability for specify version range for commandline commands
    by @deviator in #2056</changelog>
  <changelog author="Deepthi Yadabettu Venkatachala &lt;deepthi.venkatachala@suse.com&gt;" date="1683115200">- Update to 1.32.1
  * Implement --color=auto|always|never, fix #2410 by @WebFreak001
    in #2552
  * update version to v1.31.0-beta.1 by @ibuclaw in #2555
  * Remove GeneratorSettings.direct as it is never set by @Geod24 in #2559
  * Fix various DDOC warnings by @Geod24 in #2558
  * Don't assume the cache path is relative to CWD by @Geod24 in #2557
  * replace std.variant with std.sumtype by @WebFreak001 in #2550
  * add markdown documentation generator to gen_man.d by @WebFreak001
    in #2563
  * update version to v1.31.0-rc.1 by @ibuclaw in #2565
  * Fix typo in subpackage license warning by @zyedidia in #2576
  * merge stable by @ibuclaw in #2578
  * fix man page generator by @WebFreak001 in #2571
  * fix typo(s) by @WebFreak001 in #2564
  * Add betterC support - fixes #1636 by @etcimon in #2581
  * merge stable by @ibuclaw in #2591
  * Add OpenBSD package to README.md by @ibara in #2592
  * Fix #2574: Suggest alternative spelling when a command is mistyped by
    @elvodqa in #2593
  * improve warning messages, especially with ~branch by @WebFreak001 in #2585
  * reintroduce dmd-latest to CI runner by @WebFreak001 in #2594
  * merge stable by @ibuclaw in #2595
  * make build names much smaller by @WebFreak001 in #2589
  * Make getDUBExePath returns a NativePath by @Geod24 in #2604</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1689854400">- Update to 1.33.0
  * Add collection of c sources and headers to dub by @cschlote in #2544
  * update version to v1.32.0-beta.1 by @ibuclaw in #2609
  * Don't depend on the whole of Vibe.d for the test_registry by @Geod24 in #2612
  * Upgrade dependencies by @Geod24 in #2613
  * Make all static library exports contribute to dlls on Windows by @rikkimax in #2614
  * Revert "Make all static library exports contribute to dlls on Windows" by @Geod24 in #2616
  * PackageManager: Store packages hierarchically, by version by @Geod24 in #2610
  * add pr_info GitHub actions run by @WebFreak001 in #2586
  * try to fix pr_info permissions problem by @WebFreak001 in #2621
  * fix pr_info_post file paths by @WebFreak001 in #2622
  * update version to v1.32.0-rc.1 by @ibuclaw in #2625
  * merge stable by @ibuclaw in #2628
  * update version to v1.32.1-beta.1 by @ibuclaw in #2631
  * update version to v1.32.1 by @ibuclaw in #2634</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1711454400">- Update to 1.36.0
  * Deprecate unused packageInfoFilenames
  * Remove inconsistent error on missing subpackage path
  * Remove dub.internal.vibecompat.file : listDirectory
  * Remove logging from dub.dependency
  * Allow to load dub.selections.json before Project instantiation
- Update to 1.35.0
  * Don't wastefully execute everything via a shell
  * Implemented recipe files for dub
  * add --deep flag to dub build
  * add dub describe --data=configs,builds
  * interactively query for license, suggest SPDX licenses
- Update to 1.34.0
  * Fix flags Json serialization
  * Cache json db
  * support specifying --d-versions</changelog>
</package>
<package pkgid="ae8c40f7809eb570dd116ed2b4edaaff7f0eb895d7e5a72b69a35542b66c104d5d99e058f064a9327d4ca90324432a16f777ae3e8740e387cecca784ac005976" name="duc" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="bp160.1.13"/>
  <changelog author="mvetter@suse.com" date="1519646400">- Inital package for openSUSE in version 1.4.3</changelog>
  <changelog author="mvetter@suse.com" date="1519646401">- Change license to LGPL-3</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1538568000">- Update to 1.4.4:
  * new: added --directory/-D option to 'duc ls' to allow listing of only directory itself (#196[1])
  * new: 'duc ls' now handles multiple path arguments
  * new: added 'o' key to duc-ui to pass current file to xdg-open
  * new: added DPI handing for graph font size (#201[2])
  * new: added '-a/--apparent' option to 'duc xml' (#171[3])
  * fix: improved cairo and SVG graph rendering (#202[4])
  * cha: changed license from GPL to LGPL (#190[5])</changelog>
  <changelog author="Beno&#xEE;t Monin &lt;benoit.monin@gmx.fr&gt;" date="1565611200">- fix build: add missing dependency to gobject library</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1658750400">- Update to 1.4.5:
  * new: added '-u' option to duc index to index by username
  * new: added json subcommand
  * new: added support for NO_COLOR env var
  * cha: duc db location is now XDG compliant
  * fix: various bug fixes, check the git log for details</changelog>
</package>
<package pkgid="8ae05d2ccba7380400232e5f7a6a53fc5e6ca33ad8ac63d8589579fd179c8d932b499e072275961d97a2f1de128076b7019a2dc95e0bc60fa560cf0f82278c8c" name="duf" arch="x86_64">
  <version epoch="0" ver="0.8.1+git64.24c3369" rel="bp160.1.12"/>
  <changelog author="pousaduarte@gmail.com" date="1633694400">- Update to version 0.6.2:
  * Update Arch Linux install, in official repos now
  * Bump termenv &amp; go-runewidth deps
  * Fix goreportcard badge
  * Replace deprecated terminal package (#126)
  * Hide/show mount points (#107)
  * Add manpage</changelog>
  <changelog author="pousaduarte@gmail.com" date="1635681600">- Update to version 0.6.2:
  * Add installation instructions for Void Linux</changelog>
  <changelog author="pousaduarte@gmail.com" date="1640520000">- Update to version 0.6.2:
  * Document color-coding/threshold options in README
  * add availability and usage threhold option
  * Add install instructions on OpenBSD
  * Remove unmaintained snap package
  * Bump go-pretty to v6.2.4</changelog>
  <changelog author="pousaduarte@gmail.com" date="1641729600">- Update to version 0.7.0:
  * Add feedback paragraph to README</changelog>
  <changelog author="pousaduarte@gmail.com" date="1642939200">- Update to version 0.7.0:
  * Update go-wilcard lib #156</changelog>
  <changelog author="pousaduarte@gmail.com" date="1643803200">- Update to version 0.8.0:
  * docs: update man page
  * Fix manpage workflow branch
  * Add 'ansi' theme that uses the terminal's native 4-bit ANSI colors
  * Add Go 1.17 build tags
  * Bump github.com/jedib0t/go-pretty/v6 from 6.2.4 to 6.2.5
  * table: rename inode-related columns to clarify difference between bytes and inodes. Fixes #94
  * Add dependabot config
  * Generate man page when built with 'mango' build-tag
  * Add mango-generated man page
  * Bump termenv to v0.11.0</changelog>
  <changelog author="pousaduarte@gmail.com" date="1644148800">- Update to version 0.8.0:
  * docs: update man page
  * Bump go-wildcard to v1.0.3
  * docs: update man page
  * Bump mango to v0.1.0</changelog>
  <changelog author="pousaduarte@gmail.com" date="1675771200">- Update to version 0.8.1:
  * Update README badges
  * Add godoc comments and fix linter warnings
  * Add separate sets of hard- and soft-enforced linters
  * docs: update man page
  * Unalias term package
  * Fix mountinfo parsing #153 (#154)
  * docs: update man page
  * Add Debian &amp; Ubuntu installation instructions
  * docs: update man page
  * Bump go-wildcard to v1.0.3
  * docs: update man page
  * Bump mango to v0.1.0</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684756800">- Update to version 0.8.1+git64.24c3369:
  * Add installation instructions for Gentoo Linux
  * build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * build(deps): bump actions/setup-go from 3.5.0 to 4.0.0
  * fix readme build badge
  * build(deps): bump github.com/muesli/termenv from 0.14.0 to 0.15.1
  * build(deps): bump golang.org/x/term
  * build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.4.3 to 6.4.6
  * chore: bump Go to 1.17
  * build(deps): bump goreleaser/goreleaser-action from 3 to 4
  * build(deps): bump actions/setup-go from 3.4.0 to 3.5.0
  * build(deps): bump github.com/muesli/termenv from 0.13.0 to 0.14.0
  * build(deps): bump actions/setup-go from 3.3.1 to 3.4.0
  * build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.4.2 to 6.4.3
  * build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.4.0 to 6.4.2
  * run code through gofumpt and correct gopls warnings
  * Bump actions/setup-go from 3.3.0 to 3.3.1
  * Bump github.com/jedib0t/go-pretty/v6 from 6.3.9 to 6.4.0
  * Bump github.com/jedib0t/go-pretty/v6 from 6.3.8 to 6.3.9
  * chore: bump required Go version
  * chore: x/sys API change
  * Bump github.com/muesli/termenv from 0.12.0 to 0.13.0
  * Bump github.com/muesli/mango from 0.1.0 to 0.2.0
  * Bump github.com/muesli/termenv from 0.11.0 to 0.12.0
  * Bump actions/setup-go from 3.2.0 to 3.3.0
  * Bump github.com/mattn/go-runewidth from 0.0.13 to 0.0.14
  * Bump github.com/jedib0t/go-pretty/v6 from 6.3.4 to 6.3.8
  * Bump github.com/jedib0t/go-pretty/v6 from 6.3.3 to 6.3.4
  * docs: update ubuntu and debian versions
  * Bump github.com/jedib0t/go-pretty/v6 from 6.3.2 to 6.3.3
  * Bump github.com/jedib0t/go-pretty/v6 from 6.3.1 to 6.3.2
  * Bump actions/setup-go from 3.1.0 to 3.2.0
  * Bump goreleaser/goreleaser-action from 2 to 3
  * Bump actions/setup-go from 2 to 3.1.0
  * Bump github.com/jedib0t/go-pretty/v6 from 6.2.5 to 6.3.1
  * Bump actions/checkout from 2 to 3
  * Bump golangci/golangci-lint-action from 2 to 3</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1684756801">- Use _service mode manual as better alias name than disabled</changelog>
</package>
<package pkgid="e1e682df432bad03754e616ba2b0955bc9e2abd13cc9fa5fb404bea200b9e37bf53c9ae0583496bb1f70e34eff14f28ca99336dc5c53e96803d6d5ad185dfc91" name="duktape-devel" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 2.7.0:
  * Fix memory unsafe behavior when valstack size limit hit in
    call setup
  * Fix a realloc() memory leak triggered when (1) previous
    allocation exists, (2) new realloc size is 0, (3) GC is
    triggered before first realloc() attempt
  * Fix void pointer arithmetic in duk_alloc_pool.c, caused
    problems with MSVC
  * Fix broken bytecode dump on big endian architectures
  * Fix DUK_USE_GET_RANDOM_DOUBLE() argument handling
  * Use yaml.safe_load() instead of yaml.load() in Py2 tooling
  * Dist makefile and pkg-config improvements
  * Fix Makefile.jsoncbor build
  * Reformat source with clang-format-12
- Bump sover define following upstream changes.
- Rebase duktape-link-m.patch with quilt.
- Drop pc.in file, no longer needed.
- Pass the needed prefixes etc to make_build and make_install.
- Use ldconfig_scriptlets macro.</changelog>
</package>
<package pkgid="c24b2878d8fed61ae21f78773ecddf3d3c3994a710a66c0ec7aac75ef2948e9611c81472a552cb40fa710f9314b9fb8a6d1446e9fac27e842e86e1d3b5d21faa" name="dump" arch="x86_64">
  <version epoch="0" ver="0.4b49" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Update urls
- Add patch dump-buildfix.patch
- Update to 0.4b44
  * Recognize ext4 partitions in dump -w commands (Sourceforge bug
    [#3125587], RedHat bug #658890).
  * Fix an issue with multi volume backups, which breaks restoring
    of files which are splitted on two or more volumes and are
    starting on 2nd tape or later (RedHat bug #507948).
  * Fix a bug in dump when dumping files with holes. This bug was
    introduced in 0.4b42 while adding ext4 support. (Sourceforge
    bug #3133762).
  * Fix a bug in restore -P where useless index files for
    compressed dumps were created (Debian bug #583093).
  * Fix SYS_clone invocation on s390 architectures (Sourceforge
    bug #3303235).
  * Fix static builds.
  * Add quick regression script from Bear Giles.
  * Fix a bug introduced in 0.4b43 causing restore to crash when
    asking for a new volume when doing multi-volume restores.</changelog>
  <changelog author="mpluskal@suse.com" date="1430481600">- Enable ermt support
- Update dependencies</changelog>
  <changelog author="svalx@svalx.net" date="1490097600">- Update to 0.4b44
  * Improve data throughput when using compression in dump by
    allowing multiple slaves to compress in parallel. Thanks
    to Phillip Susi &lt;psusi@cfl.rr.com&gt; for the patch.
  * Add dump encryption support and reorganise the whole
    compression/encryption code as plugins. Thanks to
    Bear Giles &lt;bgiles@coyotesong.com&gt; for the patch.
  * Add sqlite index support and reorganize the QFA code
    as plugins. Thanks to Bear Giles &lt;bgiles@coyotesong.com&gt; for
    the patch.
  * Lots of various build cleanups and minor bugfixes.
  * Use pkg-config to locate openssl dependencies to fix ermt linking.
  * Fix building when QFA code is disabled (Alexander Zangerl).
  * Fix crash with the -Q option (Alexander Zangerl).
  * Fix crash with legacy indexer (Alexander Zangerl).
  * Fix handling of the -A flag.
  * Fix compression enabling logic (Alexander Zangerl).
  * Skip unhandled fstab entries (Josef Ridky).
- Add ermt (1) man page
- A new version of dump have an updated make system, because of this
  * remove patches dump-0.4b43-configure.patch, dump-0.4b43-destdir.patch, dump-buildfix.patch
  * rebase patch dump-0.4b43-pathnames.patch to dump-0.4b46-pathnames.patch
- Add dump-0.4b46-lzo-no-return.patch - fixing rpmlint
  no-return-in-nonvoid-function error in dump
- Add dump-0.4b46-rmt-ermt.patch - independent rmt and ermt build,
  change its locations to _bindir
- Cleanup spec file with spec-cleaner
- Separated rmt subpackage
- Alternatives system for rmt/ermt</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Conform to packaging guidelines with update-alternatives
- Clenaup with spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497528000">- Compile with OpenSSL 1.1 (bsc#1042637)
- add patches:
  * dump-0.4b46-openssl-1.1.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1497528001">- Add sqlite3 dependency and enable building with it</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because dump build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160263]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 0.4b47:
  * Fix missing lzo return (Alexey Svistunov).
  * Fix building with OpenSSL 1.1 (Daniel Molkentin).
  * Fix bashisms in examples (Oleksandr Chumachenko).
  * Use xattrs funcs from the C library (Vaclav Dolezal).
  * Fix date mangling in man pages (Mike Frysinger).
  * Force -fcommon when building (Mike Frysinger).
  * Add error checking to SSL init transformation (Mike Frysinger).
  * Fix restore -C calls with ftruncate (Alexander Zangerl).
  * Restore symlink timestamps (Alexander Zangerl).
- Remove upstreamed patches:
  * dump-0.4b43-fix-bashisms.patch
  * dump-0.4b46-lzo-no-return.patch
  * dump-0.4b46-openssl-1.1.patch
- Run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734436800">- Update to 0.4b49:
  * Reworking of regression tests and test harness
  * Import some patches from the Debian package.
  * restore -N should never change the fs. Fixes #154
  * Support outputting list of files from restore -t with '\0' separator
    (Patch from debian bug 703564 by Heiko Schlittermann)
  * Fix reading of QFA file when listing tape.
  * Support restoring to filesystems with a blocksize that isn't a multiple
    of TP_BSIZE (debian bug 995992). This is a different fix to the one
    currently in debian. The advantage of using a common multiple, if
    available, is that every FS block will only be written to once.
    Fixed an issue where the alignment between blocksize and writing pos
    becomes misaligned when a sparse hole doesn't occupy a full fs block
    (happens when restoring to a FS with a different, larger blocksize than
    the one the dump was taken on.
  * Numerous other minor patches from the Debian package
  * Don't read off end of buffer when restoring symlinks
  * Fix some weirdness around dumping a subdirectory. Do not include the
    inodes for all of the items in the subdirectories - which then give a
    restore error "inode not found on tape"
  * Fix EA problem when EAs blocks are read immediately before a tape change.
  * Allow compressed dumps to work when -b blocksize setting is the maximum
    a tape drive supports.
  * Remove code added for building on systems other than __linux__
  * Major reworking of how reading from disk and tape works. Dump now
    supports writing a compressed dump to a file and then writing that to
    tape. There is now only one "read" function. We do not have separate
    functions for reading tapes, files, compressed tapes, compressed files.
  * Improve the efficiency of TS_ADDR (and TS_INODE) record for
    representing larger files. A single TS_ADDR record can now represent up
    to 4GB of file rather than just 512K. Dumps written by 0.4b49 cannot be
    restored using 0.4b48 and before.
- 0.4b48 changelog:
  * Handle fs with more than 2^32 blocks (Greg Oster)
  * Handle EA stored in blocks with address &gt;2^32.
  * Handle the case were EAs are stored across two blocks. Fixes several
    reported bugs regarding the restore of directory attributes.
    Additionally, now restore -C passes too. Originally restore -C was
    patched for files, but not directories, in debian bug#940473 by
    Alexander Zangerl.  Substantially redone and extended to directory
    attributes here.
  * Do not record garbage data in dump for files with
    EXT2_EXTENT_FLAGS_UNINIT set indicating that the disk block has not
    been written to and should be assumed to be all zeros.
  * Dump small files on ext4 partitions with -O inline-data set.
  * Major performance enhancements on the restoring and verifying of very
    sparse files.
  * Handle dumps that are over 2^32 (tape) blocks long (&gt;4T)
  * Handle restoring sparse files that start with a hole from dump versions
    0.4b42/43. Previously they were restored but corrupted as some of the
    initial hole was moved to the end.
  * Many cleanups. Move to autoconf v0.71. Remove need to build with
  - fcommon. Build with -W -Wall and without compiler warnings. Add some
    compile time checks for structures that are written to tape and must
    not change.
  * Extensive regression tests. Every bug fixed by 0.4b48 release is now
    covered by a regression test along with testing the restore of a historical
    dump created by the previous versions from 0.4b5 through 0.4b47.
- Use autopatch
- Refresh patches</changelog>
</package>
<package pkgid="aded92b808c48593e0871fa21b870ca47bb5004afe4b7d8f4375c513a3a559d1ef53533bcf965b41bdc1c7f3e6b4c89c7528fab82d76949eec5ed8cd0bc6b868" name="dump-rmt" arch="x86_64">
  <version epoch="0" ver="0.4b49" rel="160000.2.2"/>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Update urls
- Add patch dump-buildfix.patch
- Update to 0.4b44
  * Recognize ext4 partitions in dump -w commands (Sourceforge bug
    [#3125587], RedHat bug #658890).
  * Fix an issue with multi volume backups, which breaks restoring
    of files which are splitted on two or more volumes and are
    starting on 2nd tape or later (RedHat bug #507948).
  * Fix a bug in dump when dumping files with holes. This bug was
    introduced in 0.4b42 while adding ext4 support. (Sourceforge
    bug #3133762).
  * Fix a bug in restore -P where useless index files for
    compressed dumps were created (Debian bug #583093).
  * Fix SYS_clone invocation on s390 architectures (Sourceforge
    bug #3303235).
  * Fix static builds.
  * Add quick regression script from Bear Giles.
  * Fix a bug introduced in 0.4b43 causing restore to crash when
    asking for a new volume when doing multi-volume restores.</changelog>
  <changelog author="mpluskal@suse.com" date="1430481600">- Enable ermt support
- Update dependencies</changelog>
  <changelog author="svalx@svalx.net" date="1490097600">- Update to 0.4b44
  * Improve data throughput when using compression in dump by
    allowing multiple slaves to compress in parallel. Thanks
    to Phillip Susi &lt;psusi@cfl.rr.com&gt; for the patch.
  * Add dump encryption support and reorganise the whole
    compression/encryption code as plugins. Thanks to
    Bear Giles &lt;bgiles@coyotesong.com&gt; for the patch.
  * Add sqlite index support and reorganize the QFA code
    as plugins. Thanks to Bear Giles &lt;bgiles@coyotesong.com&gt; for
    the patch.
  * Lots of various build cleanups and minor bugfixes.
  * Use pkg-config to locate openssl dependencies to fix ermt linking.
  * Fix building when QFA code is disabled (Alexander Zangerl).
  * Fix crash with the -Q option (Alexander Zangerl).
  * Fix crash with legacy indexer (Alexander Zangerl).
  * Fix handling of the -A flag.
  * Fix compression enabling logic (Alexander Zangerl).
  * Skip unhandled fstab entries (Josef Ridky).
- Add ermt (1) man page
- A new version of dump have an updated make system, because of this
  * remove patches dump-0.4b43-configure.patch, dump-0.4b43-destdir.patch, dump-buildfix.patch
  * rebase patch dump-0.4b43-pathnames.patch to dump-0.4b46-pathnames.patch
- Add dump-0.4b46-lzo-no-return.patch - fixing rpmlint
  no-return-in-nonvoid-function error in dump
- Add dump-0.4b46-rmt-ermt.patch - independent rmt and ermt build,
  change its locations to _bindir
- Cleanup spec file with spec-cleaner
- Separated rmt subpackage
- Alternatives system for rmt/ermt</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Conform to packaging guidelines with update-alternatives
- Clenaup with spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497528000">- Compile with OpenSSL 1.1 (bsc#1042637)
- add patches:
  * dump-0.4b46-openssl-1.1.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1497528001">- Add sqlite3 dependency and enable building with it</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because dump build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160263]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 0.4b47:
  * Fix missing lzo return (Alexey Svistunov).
  * Fix building with OpenSSL 1.1 (Daniel Molkentin).
  * Fix bashisms in examples (Oleksandr Chumachenko).
  * Use xattrs funcs from the C library (Vaclav Dolezal).
  * Fix date mangling in man pages (Mike Frysinger).
  * Force -fcommon when building (Mike Frysinger).
  * Add error checking to SSL init transformation (Mike Frysinger).
  * Fix restore -C calls with ftruncate (Alexander Zangerl).
  * Restore symlink timestamps (Alexander Zangerl).
- Remove upstreamed patches:
  * dump-0.4b43-fix-bashisms.patch
  * dump-0.4b46-lzo-no-return.patch
  * dump-0.4b46-openssl-1.1.patch
- Run spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734436800">- Update to 0.4b49:
  * Reworking of regression tests and test harness
  * Import some patches from the Debian package.
  * restore -N should never change the fs. Fixes #154
  * Support outputting list of files from restore -t with '\0' separator
    (Patch from debian bug 703564 by Heiko Schlittermann)
  * Fix reading of QFA file when listing tape.
  * Support restoring to filesystems with a blocksize that isn't a multiple
    of TP_BSIZE (debian bug 995992). This is a different fix to the one
    currently in debian. The advantage of using a common multiple, if
    available, is that every FS block will only be written to once.
    Fixed an issue where the alignment between blocksize and writing pos
    becomes misaligned when a sparse hole doesn't occupy a full fs block
    (happens when restoring to a FS with a different, larger blocksize than
    the one the dump was taken on.
  * Numerous other minor patches from the Debian package
  * Don't read off end of buffer when restoring symlinks
  * Fix some weirdness around dumping a subdirectory. Do not include the
    inodes for all of the items in the subdirectories - which then give a
    restore error "inode not found on tape"
  * Fix EA problem when EAs blocks are read immediately before a tape change.
  * Allow compressed dumps to work when -b blocksize setting is the maximum
    a tape drive supports.
  * Remove code added for building on systems other than __linux__
  * Major reworking of how reading from disk and tape works. Dump now
    supports writing a compressed dump to a file and then writing that to
    tape. There is now only one "read" function. We do not have separate
    functions for reading tapes, files, compressed tapes, compressed files.
  * Improve the efficiency of TS_ADDR (and TS_INODE) record for
    representing larger files. A single TS_ADDR record can now represent up
    to 4GB of file rather than just 512K. Dumps written by 0.4b49 cannot be
    restored using 0.4b48 and before.
- 0.4b48 changelog:
  * Handle fs with more than 2^32 blocks (Greg Oster)
  * Handle EA stored in blocks with address &gt;2^32.
  * Handle the case were EAs are stored across two blocks. Fixes several
    reported bugs regarding the restore of directory attributes.
    Additionally, now restore -C passes too. Originally restore -C was
    patched for files, but not directories, in debian bug#940473 by
    Alexander Zangerl.  Substantially redone and extended to directory
    attributes here.
  * Do not record garbage data in dump for files with
    EXT2_EXTENT_FLAGS_UNINIT set indicating that the disk block has not
    been written to and should be assumed to be all zeros.
  * Dump small files on ext4 partitions with -O inline-data set.
  * Major performance enhancements on the restoring and verifying of very
    sparse files.
  * Handle dumps that are over 2^32 (tape) blocks long (&gt;4T)
  * Handle restoring sparse files that start with a hole from dump versions
    0.4b42/43. Previously they were restored but corrupted as some of the
    initial hole was moved to the end.
  * Many cleanups. Move to autoconf v0.71. Remove need to build with
  - fcommon. Build with -W -Wall and without compiler warnings. Add some
    compile time checks for structures that are written to tape and must
    not change.
  * Extensive regression tests. Every bug fixed by 0.4b48 release is now
    covered by a regression test along with testing the restore of a historical
    dump created by the previous versions from 0.4b5 through 0.4b47.
- Use autopatch
- Refresh patches</changelog>
</package>
<package pkgid="adb444224ba9e1d0414b0f730bf384b4ac9d590f8deecfe30623535afb450744705cc3f8ba4318440ddc0c939bde07842f5041a5808ceefede57fe5eeceab939" name="dumpzilla" arch="noarch">
  <version epoch="0" ver="0.0.0+git.20210311" rel="bp160.1.9"/>
  <changelog author="mardnh@gmx.de" date="1598097600">- Initial package, version 0.0.0+git.20180324</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673438400">- Update to version 0.0.0+git.20210311:
  * Removed related db query from domain filters.
  * Resolves #4.
- use proper python3-magic module</changelog>
</package>
<package pkgid="61337969072b53d54e4fb1fafa41d31a55b6b0e5f5e99f009d94e09b071ff5841778042742ac7970bbf0e9dae51a4d684ac0590f641252a3f4f35ed867e19f7f" name="dumpzilla-bash-completion" arch="noarch">
  <version epoch="0" ver="0.0.0+git.20210311" rel="bp160.1.9"/>
  <changelog author="mardnh@gmx.de" date="1598097600">- Initial package, version 0.0.0+git.20180324</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673438400">- Update to version 0.0.0+git.20210311:
  * Removed related db query from domain filters.
  * Resolves #4.
- use proper python3-magic module</changelog>
</package>
<package pkgid="07d33d42e823074cb30a16135f20f13284aabcee669f294387f2aadb7ffce0cc638cf8fb5dad7fc4f0c3e894c571d4015e2b0e57ae3449333af11983579facf7" name="duperemove" arch="x86_64">
  <version epoch="0" ver="0.15" rel="160000.1.2"/>
  <changelog author="mpluskal@suse.com" date="1592136000">- Fix building with gcc10</changelog>
  <changelog author="nborisov@suse.com" date="1604577600">- Update to v0.11.2
  - Improved detection of hyperthreading
  - Multiple minor fixes and cleanups
  - Updated xxhash algorithm to latest release
  - Fixed extent collision handling
  - Fix overflow scanning in extents</changelog>
  <changelog author="mvetter@suse.com" date="1643889600">- Update to 0.11.3:
  * Increase open file limit. (#269)
  * Create hash database file with 600 permission for improved
    security. (#262)
  * Read more data per pread, for v2 hashfile format this reduces
    the overall number of syscalls made which in turns results
    in better performance.
  * Fix truncated file handling, eliminating a an infinite
    loop case. (#255)</changelog>
  <changelog author="mvetter@suse.com" date="1689595200">- Update to 0.12:
  * Duplication lookup is now based on extents. This leads to a
    massive increase of the performances. Block-based lookup is
    still possible via --dedupe-options=partial.
  * Following that change, a new hashfile format has been introduced.
    Previous hashfile format is still supported when extents lookup
    are disabled, this is not recommended.
  * Batching has been implemented. When enabled with the -B &lt;batchsize&gt;
    option, duperemove will run the deduplication phase every &lt;batchsize&gt;
    scanned files. This is meant to help running duperemove on large
    dataset, with small blocksize, or on memory-constrained systems.
  * All hash algorithm has been removed and replaced by xxh128. This
    variant is as robust as murmur3 while being faster. Choosing a
    hash function via the --hash option has been removed. Hashfiles
    built with other algorithm must be removed.</changelog>
  <changelog author="pgajdos@suse.com" date="1694692800">- build for 15</changelog>
  <changelog author="mvetter@suse.com" date="1695988800">- Update to 0.13:
  * Add a new dedupe option: [no]rescan_files. It will increase
    performance in some use cases.
  * New behaviors from v0.12 has been consolidated. Extent-based
    lookup is always enabled, as is fiemap. The v2
    hashfile is no longer supported.
  * Hashfile are now updated after deduplication, to reflect the
    new physical offsets. This avoid (re)deduplicating extents
    in some cases.
  * Partial mode has been enhanced to support batching. The
    overall performance of this mode (which was previously known
    as "block-based mode") has been improved.
  * All files are now open in readonly mode.
  * Hashfile version has been increased to reflect the new
    database behaviors. Previous hashfiles are not compatible.
  * Always compute a hash for the entire file. This let us
    deduplicate same files easily, regardless of their
    extents mappings.
  * Deduplicating only parts of a file can be disabled using
    the [no]only_whole_files dedupe option.
  * Hashfiles with unsupported features or hash algorithm are
    now recreated transparently. Migration of the old content
    is not implemented.
  * Relative exclude patterns are no longer silently ingested.
    Such patterns are now rebuilt on top of the current
    working directory.
  * Batching is now set to 1024 by default.</changelog>
  <changelog author="mvetter@suse.com" date="1700395200">- Update to 0.14:
  * Batching has been reimplemented on top of the dedupe_seq.
  * The "scan" phase has been reimplemented (see 8264336 for details).
  * Filesystem locking has been implemented. See f3947e9 for details.</changelog>
  <changelog author="mvetter@suse.com" date="1701000000">- Update to 0.14.1:
  * file_scan: satisfy clang CFI
  * file_scan: walk_dir: improve rootfs support
  * dbfile: get_duplicate_files: exclude inlined files before
    looking for duplicates
  * filerec: fiemap_scan_extent: fix typo: we must check the
    return from get_extent</changelog>
  <changelog author="pgajdos@suse.com" date="1731585600">- force newer gcc version in sync (isc rq #353372)</changelog>
  <changelog author="mvetter@suse.com" date="1738756800">- Update to 0.15:
  * Files are no longer invalidated when renamed.
  * The scan phase now reports both files and bytes in its progress,
    which is especially useful when processing large files.
- Add duperemove-0.15-buildfail.patch:
  To fix the build. See #367.
- Add subpackage for zsh completions</changelog>
</package>
<package pkgid="bdbf0135a47425bd2872f97102a2ab5d4567eab8a0c3a6f742231ffb2dcbca1fbc72a7d524dd6866daeb31060e780e52de7eef1460bab1ed01b71c50a66ff762" name="duperemove-zsh-completion" arch="noarch">
  <version epoch="0" ver="0.15" rel="160000.1.2"/>
  <changelog author="mpluskal@suse.com" date="1592136000">- Fix building with gcc10</changelog>
  <changelog author="nborisov@suse.com" date="1604577600">- Update to v0.11.2
  - Improved detection of hyperthreading
  - Multiple minor fixes and cleanups
  - Updated xxhash algorithm to latest release
  - Fixed extent collision handling
  - Fix overflow scanning in extents</changelog>
  <changelog author="mvetter@suse.com" date="1643889600">- Update to 0.11.3:
  * Increase open file limit. (#269)
  * Create hash database file with 600 permission for improved
    security. (#262)
  * Read more data per pread, for v2 hashfile format this reduces
    the overall number of syscalls made which in turns results
    in better performance.
  * Fix truncated file handling, eliminating a an infinite
    loop case. (#255)</changelog>
  <changelog author="mvetter@suse.com" date="1689595200">- Update to 0.12:
  * Duplication lookup is now based on extents. This leads to a
    massive increase of the performances. Block-based lookup is
    still possible via --dedupe-options=partial.
  * Following that change, a new hashfile format has been introduced.
    Previous hashfile format is still supported when extents lookup
    are disabled, this is not recommended.
  * Batching has been implemented. When enabled with the -B &lt;batchsize&gt;
    option, duperemove will run the deduplication phase every &lt;batchsize&gt;
    scanned files. This is meant to help running duperemove on large
    dataset, with small blocksize, or on memory-constrained systems.
  * All hash algorithm has been removed and replaced by xxh128. This
    variant is as robust as murmur3 while being faster. Choosing a
    hash function via the --hash option has been removed. Hashfiles
    built with other algorithm must be removed.</changelog>
  <changelog author="pgajdos@suse.com" date="1694692800">- build for 15</changelog>
  <changelog author="mvetter@suse.com" date="1695988800">- Update to 0.13:
  * Add a new dedupe option: [no]rescan_files. It will increase
    performance in some use cases.
  * New behaviors from v0.12 has been consolidated. Extent-based
    lookup is always enabled, as is fiemap. The v2
    hashfile is no longer supported.
  * Hashfile are now updated after deduplication, to reflect the
    new physical offsets. This avoid (re)deduplicating extents
    in some cases.
  * Partial mode has been enhanced to support batching. The
    overall performance of this mode (which was previously known
    as "block-based mode") has been improved.
  * All files are now open in readonly mode.
  * Hashfile version has been increased to reflect the new
    database behaviors. Previous hashfiles are not compatible.
  * Always compute a hash for the entire file. This let us
    deduplicate same files easily, regardless of their
    extents mappings.
  * Deduplicating only parts of a file can be disabled using
    the [no]only_whole_files dedupe option.
  * Hashfiles with unsupported features or hash algorithm are
    now recreated transparently. Migration of the old content
    is not implemented.
  * Relative exclude patterns are no longer silently ingested.
    Such patterns are now rebuilt on top of the current
    working directory.
  * Batching is now set to 1024 by default.</changelog>
  <changelog author="mvetter@suse.com" date="1700395200">- Update to 0.14:
  * Batching has been reimplemented on top of the dedupe_seq.
  * The "scan" phase has been reimplemented (see 8264336 for details).
  * Filesystem locking has been implemented. See f3947e9 for details.</changelog>
  <changelog author="mvetter@suse.com" date="1701000000">- Update to 0.14.1:
  * file_scan: satisfy clang CFI
  * file_scan: walk_dir: improve rootfs support
  * dbfile: get_duplicate_files: exclude inlined files before
    looking for duplicates
  * filerec: fiemap_scan_extent: fix typo: we must check the
    return from get_extent</changelog>
  <changelog author="pgajdos@suse.com" date="1731585600">- force newer gcc version in sync (isc rq #353372)</changelog>
  <changelog author="mvetter@suse.com" date="1738756800">- Update to 0.15:
  * Files are no longer invalidated when renamed.
  * The scan phase now reports both files and bytes in its progress,
    which is especially useful when processing large files.
- Add duperemove-0.15-buildfail.patch:
  To fix the build. See #367.
- Add subpackage for zsh completions</changelog>
</package>
<package pkgid="da8150db30a132c8ca0cf963a3ef4d12c819b37b2229ed0fcb769ec1b95bb737d328edb96f236e02a23a967208a98ce82e96020e678b80fbee24ff7b54934772" name="duplicity" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="bp160.1.3"/>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1674734400">- Update to version 1.2.2:
  + Fix:
  - Fix to work with b2sdk 1.19.0.
  - Fix #692.  Redundant --encrypt option added in gpg.py.
  - Regression on issue #147, change password for incremental.
  - Crash if a socket is listed with --files-from.
  + Other:
  - Add detailed step-by-step instructions.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1689940800">- Update to version 1.2.3:
  + New:
  - Xorriso backend for optical media.
  - Onedrive for Business Support.
  + Fix:
  - Warn rather than fail on op-not-supported restore errors.
  - Fixes #701 - unable to resume full backup to B2.
  - Added option --no-check-remote to skip checking the   remote
    manifest.  The default is to check.
  - Fixes #686 - PCA backend does not unseal volumes.
  - Encoding errors when logging.
  - Onedrive may hang indefinitely.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1701950400">- Update to version 2.1.4
  + See CHANGELOG.md for changes.
- Update source URI.
- use python 3.11 on SLE/Leap.
- Drop duplicity-remove_shebang.patch. Handle this with sed in %setup.
- No longer require python3-future. It isn't used anymore except
  in tests.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1712491200">- Update to version 2.2.3:
  + See CHANGELOG.md for changes.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1716379200">- Update to version 2.2.4:
  * Onedrive: fix "unauthorized" upload error by not passing auth.
  * Don't drop args when restarting with execve.
  * Fix invalid option error.
  * Move missleading warning to debug level.
  * Duplicity 2.2.3: --use-agent can be wrongly turned off.
  * Pass "usedforsecurity=False" to md5() and sha1().
- Update source URI.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1721304000">- Update to version 3.0.0:
  * Collected fixes to setup process.
  * CommandLineError: argument --gpg-options: expected one
    argument.
  * Volume missing if --asynchronous-upload and put fails.
  * Don't raise KeyError if OSError.errno is unrecognized.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1723809600">- Update to version 3.0.2:
  + Fix collection-status print.
  + Changes in version 3.0.1:
  + Changes
  - Remove version limits on urllib3.
  - Use functools.lru\_cache with limit, not unlimited.
  + Fix
  - Rework logging to be compatible with Python's logging.
  - S3 glacier storage class and --concurrency.
  - Unblock multiprocessing deadlock, ensure local disk usage not
    exceed n+1 volumes, switch to "spawn".
  - Add file-size query support to rclonebackend.
  - Allow empty manifest list.
  - Make --ignore-errors actually ignore (and recover from)
    errors.
  - SSLCertVerificationError despite --ssl-no-check-certificate.
  - Instead of raise call command\_line\_error() directly.
  - Empty exclude string results in unfriendly traceback.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1738238400">- Update to version 3.0.3.2:
  + Changes
  - Improve round512 method docstring.
  + Fix
  - Concurrency without setting verbosity throws exception.
  - Argument --max-blocksize: invalid round512 value.
  - Fix handling of zero length files for older librsync versions.
  + Changes in version 3.0.3:
  + Changes
  - Fix docs for --max-blocksize.
  - Allow Python 3.13 to install.
  - High memory usage when creating duplicity backup of a single
    very large file.
  - Fix problem with reading ".../progress" file after aborted.
  - Turn off atom for py313.
  - Only log if backend import failed.
  + Fix
  - Typo in max block size doc.
  - Verbosity setting is broken with concurrency.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1739620800">- Update to version 3.0.4:
  + New
  - Support for Microsoft Azure "Cold" blob storage tier.
  + Changes
  - Allow to build with py3.13.x.
  + Fix
  - Allow for python versions 3.12+ e.g. 3.12.8.
  - INFO and DEBUG messages when verbosity is warning.
- Switch source URI to bz2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1751803200">- Update to version 3.0.5:
  + Changes
  - Add ENODEV to list of "robust" ignored exceptions.
  - Support gpg binary 'gpgsm'.
  - Accept GPG user id formats other than hex.
  - Add env var BACKEND\_PASSWORD, deprecate FTP\_PASSWORD.
  + Fix
  - Fix handling of .p7m filename suffix during sync.
  - Cache negative getpwnam/getgrnam lookups.
  - Incompatible with par2cmdline v1.0.0.
  - Allow the full range of time formats as arguments to
  - -full-if-older-than.
  - Fix problems with password request and metadata sync.
  - "OverflowError: bytes object is too large to make repr".
  - Prevent webdav log password at info log level.</changelog>
</package>
<package pkgid="5bd105a84c7e8b4964a802adc160f59f13bca7764549e4693f37f934f71c3ea5e349d2416aa4f9fbc9324ebc34c3353b1fb59c212d1d23536beb1a94af858148" name="duplicity-lang" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="bp160.1.3"/>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1674734400">- Update to version 1.2.2:
  + Fix:
  - Fix to work with b2sdk 1.19.0.
  - Fix #692.  Redundant --encrypt option added in gpg.py.
  - Regression on issue #147, change password for incremental.
  - Crash if a socket is listed with --files-from.
  + Other:
  - Add detailed step-by-step instructions.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1689940800">- Update to version 1.2.3:
  + New:
  - Xorriso backend for optical media.
  - Onedrive for Business Support.
  + Fix:
  - Warn rather than fail on op-not-supported restore errors.
  - Fixes #701 - unable to resume full backup to B2.
  - Added option --no-check-remote to skip checking the   remote
    manifest.  The default is to check.
  - Fixes #686 - PCA backend does not unseal volumes.
  - Encoding errors when logging.
  - Onedrive may hang indefinitely.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1701950400">- Update to version 2.1.4
  + See CHANGELOG.md for changes.
- Update source URI.
- use python 3.11 on SLE/Leap.
- Drop duplicity-remove_shebang.patch. Handle this with sed in %setup.
- No longer require python3-future. It isn't used anymore except
  in tests.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1712491200">- Update to version 2.2.3:
  + See CHANGELOG.md for changes.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1716379200">- Update to version 2.2.4:
  * Onedrive: fix "unauthorized" upload error by not passing auth.
  * Don't drop args when restarting with execve.
  * Fix invalid option error.
  * Move missleading warning to debug level.
  * Duplicity 2.2.3: --use-agent can be wrongly turned off.
  * Pass "usedforsecurity=False" to md5() and sha1().
- Update source URI.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1721304000">- Update to version 3.0.0:
  * Collected fixes to setup process.
  * CommandLineError: argument --gpg-options: expected one
    argument.
  * Volume missing if --asynchronous-upload and put fails.
  * Don't raise KeyError if OSError.errno is unrecognized.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1723809600">- Update to version 3.0.2:
  + Fix collection-status print.
  + Changes in version 3.0.1:
  + Changes
  - Remove version limits on urllib3.
  - Use functools.lru\_cache with limit, not unlimited.
  + Fix
  - Rework logging to be compatible with Python's logging.
  - S3 glacier storage class and --concurrency.
  - Unblock multiprocessing deadlock, ensure local disk usage not
    exceed n+1 volumes, switch to "spawn".
  - Add file-size query support to rclonebackend.
  - Allow empty manifest list.
  - Make --ignore-errors actually ignore (and recover from)
    errors.
  - SSLCertVerificationError despite --ssl-no-check-certificate.
  - Instead of raise call command\_line\_error() directly.
  - Empty exclude string results in unfriendly traceback.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1738238400">- Update to version 3.0.3.2:
  + Changes
  - Improve round512 method docstring.
  + Fix
  - Concurrency without setting verbosity throws exception.
  - Argument --max-blocksize: invalid round512 value.
  - Fix handling of zero length files for older librsync versions.
  + Changes in version 3.0.3:
  + Changes
  - Fix docs for --max-blocksize.
  - Allow Python 3.13 to install.
  - High memory usage when creating duplicity backup of a single
    very large file.
  - Fix problem with reading ".../progress" file after aborted.
  - Turn off atom for py313.
  - Only log if backend import failed.
  + Fix
  - Typo in max block size doc.
  - Verbosity setting is broken with concurrency.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1739620800">- Update to version 3.0.4:
  + New
  - Support for Microsoft Azure "Cold" blob storage tier.
  + Changes
  - Allow to build with py3.13.x.
  + Fix
  - Allow for python versions 3.12+ e.g. 3.12.8.
  - INFO and DEBUG messages when verbosity is warning.
- Switch source URI to bz2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1751803200">- Update to version 3.0.5:
  + Changes
  - Add ENODEV to list of "robust" ignored exceptions.
  - Support gpg binary 'gpgsm'.
  - Accept GPG user id formats other than hex.
  - Add env var BACKEND\_PASSWORD, deprecate FTP\_PASSWORD.
  + Fix
  - Fix handling of .p7m filename suffix during sync.
  - Cache negative getpwnam/getgrnam lookups.
  - Incompatible with par2cmdline v1.0.0.
  - Allow the full range of time formats as arguments to
  - -full-if-older-than.
  - Fix problems with password request and metadata sync.
  - "OverflowError: bytes object is too large to make repr".
  - Prevent webdav log password at info log level.</changelog>
</package>
<package pkgid="4c7ff92690cb39031cd6ed542344ed22522c4203d36bc888100eeefbf0ca891b04e61671de85cf6f096737bfd60188c554ed3e8aa682676e24f84f15219a565e" name="duply" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="bp160.1.9"/>
  <changelog author="malcolmlewis@opensuse.org" date="1502193600">- Update to version 2.0.2:
  * Bugfix: never insert creds into file:// targets.
  * Bugfix: avail profiles hint sometimes shortend the names by one
    char.
  * Bugfix 108: CMD_NEXT variable should ignore conditional commands
    (and, or).
  * Export condition before/after next/prev command as
    CND_PREV,CND_NEXT now.
  * Bugfix 97: Unknown command should be ERROR, not WARNING.
- Changes from version 2.0.1:
  * Bugfix 104: Duply 2.0 sets wrong archive dir, --name was always
    'duply_'.
- Changes from version 2.0:
  * Made this a major version change, as we broke backward
    compatibility anyway. If your backend stops working w/ this
    version create a new profile and export the env vars needed as
    described in the comments of the conf file directly above the
    SOURCE setting.
  * Making sure multi spaces in TARGET survive awk processing.
  * New env var PROFILE exported to scripts.
  * Fix 102: expose a unique timestamp variable for pre/post scripts
    actually a featreq. exporting RUN_START nanosec unix timestamp.
  * Fix 101: GPG_AGENT_INFO is 'bogus'.
  * Fix 96: duply cannot handle two consecutive spaces in paths.
- Update Copyright year.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1527854400">- Update to version 2.0.4:
  + Bugfix 114: "duply usage is not current" wrt. purgeFull/Incr.
  + Bugfix 115: typo in error message - "Not GPG_KEY entries"
    should be "No".
  + Bugfix 117: no duply_ prefix when ARCH_DIR is set in conf.
  + Occasionally shows negative runtimes, (deb#882159).
- Changes from version 2.0.3:
  +Bugfix: "line 2231: CMDS: bad array subscript".</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Ensure neutrality of descriptions.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1571313600">- Updated to version 2.2:
  + Implement grouping for batch commands new separators are []
    (square brackets) or groupIn/groupOut command 'backup'
    translates now to [pre_bkp_post] to be skipped as one block in
    case a condition was set in the batch instruction.
- Changes from version 2.1:
  + Be more verbose when duplicity version detection fails.
  + Using info shows python binary's path for easier
    identification now.
  + Reworked python interpreter handling, it's either configured
    per PYTHON var unconfigured, parsed from duplicity shebang or
    set to current duplicity default 'python2' (was 'python' until
    now).
  + Donot quotewrap strings because of slashes (eg. paths) anymore.
  + Bugfix: improved in/exclude stripping from conf DUPL_PARAMS.
- Remove obsolete Groups tag (fate#326485).</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1571400000">- Fix source download URL.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1598961600">- update to 2.2.2:
  - bugfix 120: Failures in "Autoset trust of key" during restore
    because of gpg2.2 fingerprint output change
  - featreq 46: Example systemd units &amp; Howto, courtesy of Jozef Riha
  - featreq 47: Clarify message about keeping the profile, also by Jozef Riha
  - fix abbreviation spelling of 'e.g.'</changelog>
  <changelog author="hsk17@mail.de" date="1657108800">- Update to 2.4:
  - bugfix #127: date_from_nsecs ignores format string
  - bugfix #116: separators print date now too
  - featreq #48: add purgeAuto command (see man page)
  - replaced tab indents with 2spaces everywhere
  - bugfix #129,131,132: duply stumbles over 'python -s' shebang,
    python interpreter parse failed if duplicity is a snap app
  - bugfix #130: duplicity version check failed "gpg: WARNING: ..."
  - version output, always print PYTHONPATH, if interpreter was determined
  - update python references to python3
- Changes from 2.3.1:
  - bugfix 123: symmetric encryption errs out, asks for '' private key
- Changes from 2.3:
  - don't import whole key pair anymore if only pub/sec is requested
  - gpg import routine informs on missing key files in profile now
  - add check/import needed secret key for decryption
  - featreq 50: Disable GPG key backups, implemented/added settings
    GPG_IMPORT/GPG_EXPORT='disabled' to conf template</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 2.4.1:
  * fixup duplicity links, moved to http://duplicity.us
  * bugfix: duply hangs on awk version detection on OpenBSD (thx phthomas137)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674302400">- update to 2.4.2:
  * change to purgeAuto in systemd unit files (thx B.Foresman)
  * systemd files should go in /etc, not /lib (thx B.Foresman)
  * read -N not available on macOS (thx Peter Torelli)</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1701518400">- update to 2.5.2
  * fix bug #139: "ampersand (&amp;) in gpg passphrase breaks gpg tests"
- update to 2.5.1
  * quotewrap only strings with quotes ('") or spaces from now on
  * add --verbosity only if set in profile conf
  * bugfix #138: fix quoting when filtering params, thx Eric
  * bugfix #137: relax version parsing regex
- update to 2.5.0
  * bugfix #136: "not compatible with duplicity 2.x", thx tengel, lds, Rhomeo
    check for duplicity 2.1+ (2.0 broke implied commands),
    command line ui changed incompatibly
  * filter in/excludes more strictly for more duplicity actions now
  * replace '--file-to-restore' with '--path-to-restore'
  * filter backup only params now
- update to 2.4.3
  * bugfix #134: workaround bash 4.2 and earlier read bug (thx Tavio Wong)</changelog>
</package>
<package pkgid="45eb98ea8a31d4409a93484d72dd7000694bfbaf708e9c1e121394924c1f9d01a1ed7828e4b05d226d8f81b8451ec961caaf99a48f975c05097ee2ac871a7870" name="dust" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="bp160.1.13"/>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1662120000">- Update to version 0.8.3:
  * Fix: Only create large stack size if enough memory
  * Config file
  * New parameter: --min-size
  * New parameter: --skip-total
  * Does not include a space character as the first character in each line unless required
  * Fixes spurious permissions warning
  * Adds completion</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1675080000">- Update to version 0.8.4:
  * Increment version
  * fix: Stop progress indicator crashing into stderr
  * Feature: Add flag for screen readers
  * fix: Fix bug in progress bar
  * fix: only-dir flag conflicts with types
  * feature: --files-only -F
  * Update LICENSE
  * use create_dir_all instead of create_dir as that doesn't fail if the directory already exists, and make sure to propagate the error out
  * generate a man page as part of the build
  * clippy: Fix new clippy rules
  * upgrade dependencies
  * refactor: progress bar
  * refactor: progress bar
  * refactor: progress bar
  * Comment: Remove comment
  * Comment: update comment
  * Refactor: rename var
  * Refactor: PAtomicInfo class
  * Refactor: progress bar &amp; file permissions
  * Refactor: progress bar: rename vars
  * Refactor: Progress bar: Remove atomic classes
  * Refactor: Progress bar: Remove PConfig
  * Refactor: progress bar: simplify
  * Refactor: progress bar: rm unused field
  * Refactor: Simplify progress indicator
  * refactor: update Progress bar: progress.rs
  * Refactor: Update main for progress bar
  * Refactor: Reduce complexity of progress bar code
  * Implemented a progress indicator (#275)
  * Fix: naming of parameter
  * [documentation] Note about running single-threaded
  * refactor dir_walker
  * feature: Support for dereference links -L follow
  * refactor create AggregateData for filter.rs
  * refactor filter.rs
  * refactor filter.rs
  * Fix: depth=0 bug for multiple arguments
  * fix: bug where hard links could be double counted
  * clippy: Fix new clippy
  * fix: update use of sysinfo.system
  * Update sysinfo version to 0.26.7
  * added deb-get as installation source
  * FEATURE: support only directories will be displayed. Flag -D
  * Read `inputs` from stdin when applicable
  * Add a direct dependency on the `atty` crate</changelog>
  <changelog author="mvetter@suse.com" date="1683460800">- Update to version 0.8.6:
  * Increment version
  * cargo update: update dependencies
  * Add support for cargo-binstall to Cargo.toml
  * cargo update: update dependencies
  * Increment version
  * Fix: some panics are occuring when creating rayon
  * remove depth from config.toml and fix style issues
  * feat: default option for depth from config file
  * refactor: DisplayData
  * refactor: simplify filter.rs
  * Update README.md</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704888000">- Update to version 0.9.0:
  * Migrated to clap4. Command line flags must appear before
    arguments: dust -X debug target instead of dust target -X debug
  * Bars on right by default (change with new Flag -B)
  * Add flag -S (for Custom Stack size) - incase dust crashes with
    memory allocation error.
  * Add flat -I (--ignore-all-in-file) - Ignore all regexs in this
    file.
  * Clearer errors on file not found.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1706702400">- Added fix-test-string.patch and re-enabled test.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Disable tests: not working on OBS</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1708603200">- Reenable tests</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1711454400">- Remove fix-test-string.patch -- fixed upstream
- Add package to File utilities group.
- Update to version 1.0.0:
  * Update README.md
  * Better handling for color in terminal
  * refactor: minimum-size &amp; output-format
  * refactor: minimum-size
  * refactor: merge --si and --display-kb
  * feat: Listen for ctrl-c
  * feat: display the size of a file or directory in "kilobytes"
  * feat: better error messages
  * tests: fix test test_apparent_size (fix-test-string.patch)
  * tests: Print to stderr when test fails</changelog>
  <changelog author="mvetter@suse.com" date="1721217600">- Update to version 1.1.0:
  * Added json output function
  * Allow options to be set in any position
  * chore: Cleanup threads commit
  * deps: bump libc from 0.2.153 to 0.2.155
  * deps: update winapi-util to 0.1.8
  * eprint problematic folders
  * Explicit lifecycle that can be omitted
  * feat: Added the ability to filter the corresponding files
    based on the access time, modify time, and change time of the
    file for statistics
  * feat: Add flag to read from file/stdin
  * feat: Adding threads flag
  * fix: bug: Si detection was backwards.
  * fix: issue 386 --only-file displays full paths even without --full-paths
  * fix: si detection - single digits are binary
  * fix: total_ordering of sort_by_inode
  * Fix -x option behavior
  * Fix zsh completion
  * Redo 'Fix zsh completion' with clap
  * refactor: cleanup -j / --output-json flag
  * streamline func APIs processing target_dirs
  * test_exact_output: refactor unreadable directory handling
  * test_exact_output: simplify array handling
  * tests: Cleanup test_exact_ouput
  * tests: Fix test broken in prev commit</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1721304000">- Update to version 1.1.1:
  * docs: update release procedure
  * fix: perf issues with v1.1.0
  * refactor: rename variable</changelog>
</package>
<package pkgid="9c50e4292e1b371d97a090d75e74402a905a8ae3f396b81dcc3a7b95538f9bd1c51b79a69776b50e643a272280801e787cddfb94858ca56a518effc4d7d6de4c" name="dust-bash-completion" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="bp160.1.13"/>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1662120000">- Update to version 0.8.3:
  * Fix: Only create large stack size if enough memory
  * Config file
  * New parameter: --min-size
  * New parameter: --skip-total
  * Does not include a space character as the first character in each line unless required
  * Fixes spurious permissions warning
  * Adds completion</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1675080000">- Update to version 0.8.4:
  * Increment version
  * fix: Stop progress indicator crashing into stderr
  * Feature: Add flag for screen readers
  * fix: Fix bug in progress bar
  * fix: only-dir flag conflicts with types
  * feature: --files-only -F
  * Update LICENSE
  * use create_dir_all instead of create_dir as that doesn't fail if the directory already exists, and make sure to propagate the error out
  * generate a man page as part of the build
  * clippy: Fix new clippy rules
  * upgrade dependencies
  * refactor: progress bar
  * refactor: progress bar
  * refactor: progress bar
  * Comment: Remove comment
  * Comment: update comment
  * Refactor: rename var
  * Refactor: PAtomicInfo class
  * Refactor: progress bar &amp; file permissions
  * Refactor: progress bar: rename vars
  * Refactor: Progress bar: Remove atomic classes
  * Refactor: Progress bar: Remove PConfig
  * Refactor: progress bar: simplify
  * Refactor: progress bar: rm unused field
  * Refactor: Simplify progress indicator
  * refactor: update Progress bar: progress.rs
  * Refactor: Update main for progress bar
  * Refactor: Reduce complexity of progress bar code
  * Implemented a progress indicator (#275)
  * Fix: naming of parameter
  * [documentation] Note about running single-threaded
  * refactor dir_walker
  * feature: Support for dereference links -L follow
  * refactor create AggregateData for filter.rs
  * refactor filter.rs
  * refactor filter.rs
  * Fix: depth=0 bug for multiple arguments
  * fix: bug where hard links could be double counted
  * clippy: Fix new clippy
  * fix: update use of sysinfo.system
  * Update sysinfo version to 0.26.7
  * added deb-get as installation source
  * FEATURE: support only directories will be displayed. Flag -D
  * Read `inputs` from stdin when applicable
  * Add a direct dependency on the `atty` crate</changelog>
  <changelog author="mvetter@suse.com" date="1683460800">- Update to version 0.8.6:
  * Increment version
  * cargo update: update dependencies
  * Add support for cargo-binstall to Cargo.toml
  * cargo update: update dependencies
  * Increment version
  * Fix: some panics are occuring when creating rayon
  * remove depth from config.toml and fix style issues
  * feat: default option for depth from config file
  * refactor: DisplayData
  * refactor: simplify filter.rs
  * Update README.md</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704888000">- Update to version 0.9.0:
  * Migrated to clap4. Command line flags must appear before
    arguments: dust -X debug target instead of dust target -X debug
  * Bars on right by default (change with new Flag -B)
  * Add flag -S (for Custom Stack size) - incase dust crashes with
    memory allocation error.
  * Add flat -I (--ignore-all-in-file) - Ignore all regexs in this
    file.
  * Clearer errors on file not found.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1706702400">- Added fix-test-string.patch and re-enabled test.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Disable tests: not working on OBS</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1708603200">- Reenable tests</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1711454400">- Remove fix-test-string.patch -- fixed upstream
- Add package to File utilities group.
- Update to version 1.0.0:
  * Update README.md
  * Better handling for color in terminal
  * refactor: minimum-size &amp; output-format
  * refactor: minimum-size
  * refactor: merge --si and --display-kb
  * feat: Listen for ctrl-c
  * feat: display the size of a file or directory in "kilobytes"
  * feat: better error messages
  * tests: fix test test_apparent_size (fix-test-string.patch)
  * tests: Print to stderr when test fails</changelog>
  <changelog author="mvetter@suse.com" date="1721217600">- Update to version 1.1.0:
  * Added json output function
  * Allow options to be set in any position
  * chore: Cleanup threads commit
  * deps: bump libc from 0.2.153 to 0.2.155
  * deps: update winapi-util to 0.1.8
  * eprint problematic folders
  * Explicit lifecycle that can be omitted
  * feat: Added the ability to filter the corresponding files
    based on the access time, modify time, and change time of the
    file for statistics
  * feat: Add flag to read from file/stdin
  * feat: Adding threads flag
  * fix: bug: Si detection was backwards.
  * fix: issue 386 --only-file displays full paths even without --full-paths
  * fix: si detection - single digits are binary
  * fix: total_ordering of sort_by_inode
  * Fix -x option behavior
  * Fix zsh completion
  * Redo 'Fix zsh completion' with clap
  * refactor: cleanup -j / --output-json flag
  * streamline func APIs processing target_dirs
  * test_exact_output: refactor unreadable directory handling
  * test_exact_output: simplify array handling
  * tests: Cleanup test_exact_ouput
  * tests: Fix test broken in prev commit</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1721304000">- Update to version 1.1.1:
  * docs: update release procedure
  * fix: perf issues with v1.1.0
  * refactor: rename variable</changelog>
</package>
<package pkgid="663af34aa0022bb845d3e98b2913ec6877ea518b357bb81439ce74d2000a89cc98e6372ab665bde743c14b23408c1e874decda1eb3ae974dc1a31668e0da2330" name="dust-fish-completion" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="bp160.1.13"/>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1662120000">- Update to version 0.8.3:
  * Fix: Only create large stack size if enough memory
  * Config file
  * New parameter: --min-size
  * New parameter: --skip-total
  * Does not include a space character as the first character in each line unless required
  * Fixes spurious permissions warning
  * Adds completion</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1675080000">- Update to version 0.8.4:
  * Increment version
  * fix: Stop progress indicator crashing into stderr
  * Feature: Add flag for screen readers
  * fix: Fix bug in progress bar
  * fix: only-dir flag conflicts with types
  * feature: --files-only -F
  * Update LICENSE
  * use create_dir_all instead of create_dir as that doesn't fail if the directory already exists, and make sure to propagate the error out
  * generate a man page as part of the build
  * clippy: Fix new clippy rules
  * upgrade dependencies
  * refactor: progress bar
  * refactor: progress bar
  * refactor: progress bar
  * Comment: Remove comment
  * Comment: update comment
  * Refactor: rename var
  * Refactor: PAtomicInfo class
  * Refactor: progress bar &amp; file permissions
  * Refactor: progress bar: rename vars
  * Refactor: Progress bar: Remove atomic classes
  * Refactor: Progress bar: Remove PConfig
  * Refactor: progress bar: simplify
  * Refactor: progress bar: rm unused field
  * Refactor: Simplify progress indicator
  * refactor: update Progress bar: progress.rs
  * Refactor: Update main for progress bar
  * Refactor: Reduce complexity of progress bar code
  * Implemented a progress indicator (#275)
  * Fix: naming of parameter
  * [documentation] Note about running single-threaded
  * refactor dir_walker
  * feature: Support for dereference links -L follow
  * refactor create AggregateData for filter.rs
  * refactor filter.rs
  * refactor filter.rs
  * Fix: depth=0 bug for multiple arguments
  * fix: bug where hard links could be double counted
  * clippy: Fix new clippy
  * fix: update use of sysinfo.system
  * Update sysinfo version to 0.26.7
  * added deb-get as installation source
  * FEATURE: support only directories will be displayed. Flag -D
  * Read `inputs` from stdin when applicable
  * Add a direct dependency on the `atty` crate</changelog>
  <changelog author="mvetter@suse.com" date="1683460800">- Update to version 0.8.6:
  * Increment version
  * cargo update: update dependencies
  * Add support for cargo-binstall to Cargo.toml
  * cargo update: update dependencies
  * Increment version
  * Fix: some panics are occuring when creating rayon
  * remove depth from config.toml and fix style issues
  * feat: default option for depth from config file
  * refactor: DisplayData
  * refactor: simplify filter.rs
  * Update README.md</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704888000">- Update to version 0.9.0:
  * Migrated to clap4. Command line flags must appear before
    arguments: dust -X debug target instead of dust target -X debug
  * Bars on right by default (change with new Flag -B)
  * Add flag -S (for Custom Stack size) - incase dust crashes with
    memory allocation error.
  * Add flat -I (--ignore-all-in-file) - Ignore all regexs in this
    file.
  * Clearer errors on file not found.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1706702400">- Added fix-test-string.patch and re-enabled test.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Disable tests: not working on OBS</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1708603200">- Reenable tests</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1711454400">- Remove fix-test-string.patch -- fixed upstream
- Add package to File utilities group.
- Update to version 1.0.0:
  * Update README.md
  * Better handling for color in terminal
  * refactor: minimum-size &amp; output-format
  * refactor: minimum-size
  * refactor: merge --si and --display-kb
  * feat: Listen for ctrl-c
  * feat: display the size of a file or directory in "kilobytes"
  * feat: better error messages
  * tests: fix test test_apparent_size (fix-test-string.patch)
  * tests: Print to stderr when test fails</changelog>
  <changelog author="mvetter@suse.com" date="1721217600">- Update to version 1.1.0:
  * Added json output function
  * Allow options to be set in any position
  * chore: Cleanup threads commit
  * deps: bump libc from 0.2.153 to 0.2.155
  * deps: update winapi-util to 0.1.8
  * eprint problematic folders
  * Explicit lifecycle that can be omitted
  * feat: Added the ability to filter the corresponding files
    based on the access time, modify time, and change time of the
    file for statistics
  * feat: Add flag to read from file/stdin
  * feat: Adding threads flag
  * fix: bug: Si detection was backwards.
  * fix: issue 386 --only-file displays full paths even without --full-paths
  * fix: si detection - single digits are binary
  * fix: total_ordering of sort_by_inode
  * Fix -x option behavior
  * Fix zsh completion
  * Redo 'Fix zsh completion' with clap
  * refactor: cleanup -j / --output-json flag
  * streamline func APIs processing target_dirs
  * test_exact_output: refactor unreadable directory handling
  * test_exact_output: simplify array handling
  * tests: Cleanup test_exact_ouput
  * tests: Fix test broken in prev commit</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1721304000">- Update to version 1.1.1:
  * docs: update release procedure
  * fix: perf issues with v1.1.0
  * refactor: rename variable</changelog>
</package>
<package pkgid="260b5020cbe5d0138c2829aa52bd898bff1c25e5652b5836d9d4a936dddf86b0f4ab7c6f20b6d47585266ec35e0df8b12b32e950a4e50bc7bccc10207a531b2f" name="dust-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="bp160.1.13"/>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1662120000">- Update to version 0.8.3:
  * Fix: Only create large stack size if enough memory
  * Config file
  * New parameter: --min-size
  * New parameter: --skip-total
  * Does not include a space character as the first character in each line unless required
  * Fixes spurious permissions warning
  * Adds completion</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1675080000">- Update to version 0.8.4:
  * Increment version
  * fix: Stop progress indicator crashing into stderr
  * Feature: Add flag for screen readers
  * fix: Fix bug in progress bar
  * fix: only-dir flag conflicts with types
  * feature: --files-only -F
  * Update LICENSE
  * use create_dir_all instead of create_dir as that doesn't fail if the directory already exists, and make sure to propagate the error out
  * generate a man page as part of the build
  * clippy: Fix new clippy rules
  * upgrade dependencies
  * refactor: progress bar
  * refactor: progress bar
  * refactor: progress bar
  * Comment: Remove comment
  * Comment: update comment
  * Refactor: rename var
  * Refactor: PAtomicInfo class
  * Refactor: progress bar &amp; file permissions
  * Refactor: progress bar: rename vars
  * Refactor: Progress bar: Remove atomic classes
  * Refactor: Progress bar: Remove PConfig
  * Refactor: progress bar: simplify
  * Refactor: progress bar: rm unused field
  * Refactor: Simplify progress indicator
  * refactor: update Progress bar: progress.rs
  * Refactor: Update main for progress bar
  * Refactor: Reduce complexity of progress bar code
  * Implemented a progress indicator (#275)
  * Fix: naming of parameter
  * [documentation] Note about running single-threaded
  * refactor dir_walker
  * feature: Support for dereference links -L follow
  * refactor create AggregateData for filter.rs
  * refactor filter.rs
  * refactor filter.rs
  * Fix: depth=0 bug for multiple arguments
  * fix: bug where hard links could be double counted
  * clippy: Fix new clippy
  * fix: update use of sysinfo.system
  * Update sysinfo version to 0.26.7
  * added deb-get as installation source
  * FEATURE: support only directories will be displayed. Flag -D
  * Read `inputs` from stdin when applicable
  * Add a direct dependency on the `atty` crate</changelog>
  <changelog author="mvetter@suse.com" date="1683460800">- Update to version 0.8.6:
  * Increment version
  * cargo update: update dependencies
  * Add support for cargo-binstall to Cargo.toml
  * cargo update: update dependencies
  * Increment version
  * Fix: some panics are occuring when creating rayon
  * remove depth from config.toml and fix style issues
  * feat: default option for depth from config file
  * refactor: DisplayData
  * refactor: simplify filter.rs
  * Update README.md</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1704888000">- Update to version 0.9.0:
  * Migrated to clap4. Command line flags must appear before
    arguments: dust -X debug target instead of dust target -X debug
  * Bars on right by default (change with new Flag -B)
  * Add flag -S (for Custom Stack size) - incase dust crashes with
    memory allocation error.
  * Add flat -I (--ignore-all-in-file) - Ignore all regexs in this
    file.
  * Clearer errors on file not found.</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1706702400">- Added fix-test-string.patch and re-enabled test.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Disable tests: not working on OBS</changelog>
  <changelog author="Joshua Smith &lt;jsmithfpv@gmail.com&gt;" date="1708603200">- Reenable tests</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1711454400">- Remove fix-test-string.patch -- fixed upstream
- Add package to File utilities group.
- Update to version 1.0.0:
  * Update README.md
  * Better handling for color in terminal
  * refactor: minimum-size &amp; output-format
  * refactor: minimum-size
  * refactor: merge --si and --display-kb
  * feat: Listen for ctrl-c
  * feat: display the size of a file or directory in "kilobytes"
  * feat: better error messages
  * tests: fix test test_apparent_size (fix-test-string.patch)
  * tests: Print to stderr when test fails</changelog>
  <changelog author="mvetter@suse.com" date="1721217600">- Update to version 1.1.0:
  * Added json output function
  * Allow options to be set in any position
  * chore: Cleanup threads commit
  * deps: bump libc from 0.2.153 to 0.2.155
  * deps: update winapi-util to 0.1.8
  * eprint problematic folders
  * Explicit lifecycle that can be omitted
  * feat: Added the ability to filter the corresponding files
    based on the access time, modify time, and change time of the
    file for statistics
  * feat: Add flag to read from file/stdin
  * feat: Adding threads flag
  * fix: bug: Si detection was backwards.
  * fix: issue 386 --only-file displays full paths even without --full-paths
  * fix: si detection - single digits are binary
  * fix: total_ordering of sort_by_inode
  * Fix -x option behavior
  * Fix zsh completion
  * Redo 'Fix zsh completion' with clap
  * refactor: cleanup -j / --output-json flag
  * streamline func APIs processing target_dirs
  * test_exact_output: refactor unreadable directory handling
  * test_exact_output: simplify array handling
  * tests: Cleanup test_exact_ouput
  * tests: Fix test broken in prev commit</changelog>
  <changelog author="Joshua Smith &lt;smolsheep@opensuse.org&gt;" date="1721304000">- Update to version 1.1.1:
  * docs: update release procedure
  * fix: perf issues with v1.1.0
  * refactor: rename variable</changelog>
</package>
<package pkgid="59728566d6dbd25ba2f11df6f560f123aae094b66cdf47647e271e4ea71fcf20328c27543a219a1e696c50f2d65f1a90d1d6a81ba8214020384cfb4af1648c60" name="dvb-utils" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="160000.2.2"/>
  <changelog author="meissner@suse.com" date="1591531200">- libv4l-devel-32bit needs to require the shared libraries belonging
  to it, libv4l1-0-32bit + libv4l2-0-32bit + libv4l2rds0-32bit + libv4lconvert0-32bit.
  This helps Wine development (bsc#1172301)</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.20.0:
  * v4l2-ctl: add sizeimage suboption for set-fmt-video options
  * qvidcap: Add stride option to command line
  * buildsystem: Start v4l-utils 1.19.0 development cycle
  * dvbv5-zap: Fix typo
  * v4l2-ctl: include C++ cmath header
  * ubuntu1604: add missing headers for std::exit
  * libcecutil: Remove vanished TODO file from ditribution list
  * v4l2-ctl: Do not distribute generated 32bit source
  * v4l2-compliance: Do not distribute generated 32bit source
  * libcecutil: Distribute cec-gen.pl
  * Fix broken for loop in libv4l
  * Fix for mismatched class/struct tags
  * v4l2-compliance: improve metadata capture support
  * test-media: remove left-over debug lines
  * v4l2-compliance: fail if selection is present for compressed video
  * cec-compliance: rename 'ok' to 'unknown'
  * cec-ctl/msg2ctl.pl: don't add HTNG commands to msgtable
  * cec-compliance: add --test-fuzzing option
  * test-media: update vimc tests
  * v4l-utils: sync with latest media_tree master
  * keytable: add new generated keymaps
  * msg2ctl.pl: add newline after log_msg
  * cec-follower: drop the hardcoded UI commands list
  * cec-ctl/cec-log: use new CEC_OP_UI_CMD defines
  * cec utils: support CEC_ADAP_G_CONNECTOR_INFO
  * cec-compliance/follower: use new CEC_OP_UI_CMD defines
  * utils/libcecutil: add CEC utility library
  * cec-follower: switch to the new CEC utilities library
  * cec-compliance: use the new CEC utilities library
  * cec-ctl: use the new CEC utilities library
  * utils/common/cec*: remove unused cec files
  * cec-htng(-funcs).h: move to libcecutil
  * libcecutil: do not assume building in source tree.
  * libcecutil: remove empty generated headers on failure
  * libcecutil: cec-gen.pl now generates all headers in one go
  * v4l-utils: sync to latest cec-funcs.h
  * libcecutil: spaces should be replaced by - for help_features
  * cec-compliance: move util_receive to cec-compliance.cpp
  * cec-compliance: add timeout to util_receive
  * cec-compliance: fix a bug in util_receive
  * cec-compliance: Improve the INACTIVE_SOURCE test
  * cec-follower: add INACTIVE_SOURCE support.
  * v4l2-compliance: fix read/write tests
  * cec-compliance: improve Inactive Source test
  * cec-compliance: Set OSD Name is not TV specific
  * Makefile.am: copy v4l2-tpg.h, not v4l2-tpg*
  * v4l-utils: sync with latest media_tree master
  * v4l2-info.cpp: support the new hold capture flags
  * cec-compliance: remove old tuner tests
  * cec-follower: add support for Status Request
  * cec-compliance: improve failure reporting
  * cec-follower: fix index handling
  * v4l-utils: sync with latest media_tree master
  * cec-compliance: improve the Inactive Source test
  * v4l-utils: sync with latest media_tree master
  * v4l2-compliance: better scaler detection for M2M devices
  * cec-ctl: add a --phys-addr-from-edid option
  * cec: fix Makefile.am to get the right library dependencies
  * libcecutil: convert latency values to ms
  * cec-ctl: finish --stress-test-power-cycle with active display
  * cec-compliance: make the subtest names unique
  * cec-compliance: add -e and -l options
  * cec-compliance: make test names easier to type
  * qvidcap: fix typo: fnt -&gt; fmt
  * qvidcap: switch to RGB24 if format is unsupported
  * v4l2-ctl: support -k (concise) when showing touch data
  * v4l2-compliance: relax a 'is the DONE flag set' test
  * v4l-utils: fix sync-with-kernel: it missed pixelformats
  * qvidcap: make texts consistent
  * cec-follower: add --ignore option
  * cec-follower: support CEC 2.0 power status reporting
  * cec-compliance: test CEC 2.0 power transitions
  * cec-ctl: add --phys-addr-from-edid-poll
  * cec-compliance: return OK_PRESUMED in the power transition test
  * cec-compliance: update patch link
  * cec-compliance: change a fail to a warn
  * qvidcap: use --pixelformat instead of --pixel-format
  * cec-ctl: show PA changes with --phys-addr-from-edid-poll
  * cec-ctl: sleep 5s before retry, use cec_phys_addr_exp
  * cec: remove duplicate cec_phys_addr_exp defines
  * cec-ctl: improve --test-power-cycle test
  * cec-ctl: fix --phys-addr-from-edid-poll support
  * cec: show OSD Name with quotes around the name
  * v4l2-compliance: log the size of time_t
  * v4l2-compliance: use %zd with sizeof(time_t)
  * v4l2-ctl/compliance: fix 32-bit g_topology casts
  * v4l2-ctl/compliance: fix 32-bit compiler warnings
  * v4l2-compliance: use a better invalid address
  * v4l2-compliance: fix uninitialized have_sel variable
  * v4l2-compliance: return ENOTTY if selection is not supported
  * cec-compliance: add invalid ioctls test
  * v4l2-compliance: add tests for invalid ioctls
  * cec-ctl/compliance: call srandom()
  * cec-compliance: '-e' alias for --expect was missing
  * cec-compliance.h: add warn_on_test, clean ups
  * cec-compliance: fail/warn if reported latency &gt; 50ms
  * cec-compliance: add --expect-with-no-warnings
  * cec-compliance: swap -n/-N options
  * v4l-utils: remove trailing spaces
  * qvidcap: properly initialize m_curSize/Data
  * Revert "qvidcap: properly initialize m_curSize/Data"
  * qvidcap: properly initialize m_curSize/Data
  * v4l2-compliance: check source and sink pad types of a link
  * cec-compliance: clarify obscure error message
  * cec-ctl: remove trailing space in output
  * cec-ctl: add timestamps to the power-cycle tests
  * cec-ctl: improve --stress-test-power-cycle option
  * libcecutil: translate abort_msg to a message string
  * libcecutil: drop CEC_MSG_ prefix when logging messages
  * v4l2-compliance: improve USERPTR streaming tests
  * v4l2-compliance: fix bug/improve testing filler
  * v4l2-compliance: fix userptr buffer checks
  * cec-compliance: improve system_info_give_features()
  * sync with latest media_tree master
  * v4l-utils: add --enable-v4l2-compliance/ctl-32 option
  * v4l-utils: fix autoconf/automake errors
  * test-media: add -32 option
  * v4l2-compliance: fix 32 bit warnings
  * v4l2-ctl/compliance-32: fix when configuring from another dir
  * v4l2-compliance: fix typo: v4l2-ctl -&gt; v4l2-compliance
  * cec-ctl: add 'repeats' suboption to --stress-test-power-cycle
  * cec-ctl: added polls suboption to --stress-test-power-cycle
  * cec-ctl: handle ENONET errors
  * Revert "cec-ctl: handle ENONET errors"
  * cec-ctl: set wakeup_la correctly and handle ENONET &amp; EINVAL in stress tests
  * v4l2-compliance: fix weird formatting with -f
  * cec-ctl: don't transmit IMAGE_VIEW_ON every second
  * cec-ctl: introduce and use transmit_msg_retry()
  * cec-compliance: check for invalid transient power states
  * cec-ctl: check for incorrect state transitions
  * cec-ctl: add min-sleep suboption
  * cec-ctl: show timeouts vs Nacks
  * cec-ctl: show | instead of e or E
  * test-media: postpone the dmesg command
  * cec-follower: check both CEC_CAP_PHYS_ADDR and _CONNECTOR_INFO
  * cec-ctl: improve wait_for_pwr_state
  * cec-ctl: add physical address sanity checks
  * v4l-utils: sync with latest media_tree master
  * v4l2-compliance: fix step &lt; 0 control check
  * v4l-utils: sync with latest media kernel
  * v4l2-compliance: zero mbus_code
  * v4l2-compliance: add tests for V4L2_CAP_IO_MC
  * v4l2-ctl: zero v4l2_fmtdesc
  * v4l-utils: sync with latest media kernel
  * gconv: fix compiler warning
  * v4l2-ctl: add missing subdev usage in --help-all
  * cec-follower: create analog channel frequencies
  * cec-follower: add tuner analog service emulation
  * cec-follower: fix bugs for tuner emulation
  * cec-follower: add tuner step increment/decrement
  * cec-follower: fix analog tuner device info update
  * cec-follower: rename freq_idx to service_idx
  * cec-follower: create digital ARIB channels
  * cec-follower: create digital ATSC channels
  * cec-follower: create digital DVB channels
  * cec-follower: add tuner digital service emulation
  * cec-follower: fix tuner step increment/decrement
  * cec-compliance: add tuner control test
  * v4l-utils: configure.ac: Avoid bashisms
  * qv4l2: Use C library file operations with v4lconvert for raw mode devices
  * cec: fix cec-log.h dependency issues
  * v4l2grab: allow using direct calls instead of libv4l
  * v4l2grab: add support for setting the fourcc code
  * keymap.h needs sys/types.h and argp.h with musl
  * v4l2-compliance: fix assert on only read/write-only controls
  * v4l2-ctl: Support query V4L2_CTRL_TYPE_AREA controls
  * v4l2-ctl: Support getting V4L2_CTRL_TYPE_AREA controls
  * v4l2-ctl: Support setting V4L2_CTRL_TYPE_AREA controls
  * v4l2-compliance: Allow all the selection targets for subdevs
  * keytable: use input_event properly
  * keytable: add compatibility for input_event_sec
  * treewide: remove bzero
  * treewide: fix redundant expressions
  * treewide: remove pointless c_str
  * dvb-sat: remove pointless abs call
  * utils: checks for empty instead of size in if
  * treewide: add extra {} to initialization
  * treewide: do not use return after else
  * treewide: fix wrong identation
  * utils: simplify bool returns
  * treewide: fix math problems
  * treewide: replace C casts with C++
  * treewide: apply performance fixes
  * utils: use bool literals
  * utils: do not use empty void with C++
  * utils: remove extra commas
  * utils: fix float equal warning
  * utils: add copy assignment operator
  * utils: initialize variable
  * utils: fix wrong format
  * utils: fix compilation with C++98
  * utils: add noreturn attribute and remove dead code
  * utils: fix implicit float conversions
  * utils: fix fallthrough warnings
  * utils: fix double promotions
  * utils: replace exit with std variant
  * cec-compliance: add missing header for clang
  * compiler.h: fix compilation with libcxx
  * compiler.h: fix compilation with clang + std=c++98 + glibcxx
  * utils: replace chr functions with std variants
  * ir-ctl: report timeout when it cannot be modified
  * keytable: do not warn if keymap not found in IR_KEYTABLE_USER_DIR
  * ir-keytable: bpf: improve rsc imon pointer decoder
  * sync v4l-utils.spec with the fedora repo
  * keytable: cannot load BPF decoders from udevd
  * 50-rc_keymap.conf prevents debian testing from booting
  * lircd2toml: warn when scancode has duplicate definitions
  * keytable: keymap without protocol is invalid
  * rc_keymap.5: improve wording around using rc_keymaps for sending
  * keytable: a bpf protocol can have parameters and no scancodes
  * Fix build failure on s390x
  * keytable: support 64 bit scancodes
  * keytable: new samsung36 bpf decoder
  * Add keymap for Samsung AK59-00125A remote
  * ir-ctl: removed nested functions to support building with clang
  * ir-ctl: allow unmodulated signal to be sent
  * keytable: "-p all" should not attempt BPF decodes that don't exist
  * v4l2-ctl: Print UVC meta info
  * v4l2-compliance: fix metadata output support
  * v4l2-compliance: Verify metadata formats
  * v4l2-ctl: support for metadata output
  * v4l2-ctl: Add Support for Touch</changelog>
  <changelog author="hpj@urpla.net" date="1599566400">- Exclude /usr/lib/udev/systemd-udevd.service.d/50-rc_keymap.conf
  for Leaps, it isn't installed in the first place</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1613908800">- Force C++14 as the code is not C++17 ready. Fixes GCC 11 build
  (boo#1181884).
- Don't exclude /usr/lib/udev/systemd-udevd.service.d/50-rc_keymap.conf
  for Leap 15.3.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 1.22.1
  * add missing include for uClibc-ng
  * buildsystem: Start v4l-utils 1.21.0 development cycle
  * Build with libbpf, remove local sources
  * cec: add active sensing test for Audio Rate Control messages
  * cec: add Deck Control wake-up handling tests
  * cec: add invalid operand test for Audio Rate Control messages
  * cec: add One Touch Record Standby tests
  * cec: add tests for Deck Control message
  * cec: add tests for Deck Play message
  * cec: add tests for Give Deck Status message
  * cec-compliance: add Audio System mask to Set Audio Rate
  * cec-compliance: add cec-test-tuner-record-timer.cpp
  * cec-compliance: add 'reason' sanity check.
  * cec-compliance: Add version command
  * cec-compliance: clarify a power transition test
  * cec-compliance: clarify a warning
  * cec-compliance: don't skip tests if phys addr is invalid
  * cec-compliance: fix broken timer tests
  * cec-compliance: fix confusing 'Transient state' message
  * cec-compliance: fix 'unresponsive' detection
  * cec-compliance/follower: fix type comparison warnings
  * cec-compliance: hardcode audio_out_delay to 1 if not set
  * cec-compliance: improve confusing message
  * cec-compliance: improve current latency checks
  * cec-compliance: improve error message
  * cec-compliance: improve testLostMsgs test
  * cec-compliance: improve warning about late reply
  * cec-compliance: move audio helper functions to cec-test-audio.cpp
  * cec-compliance: move CDC helper functions to cec-test.cpp
  * cec-compliance: options -n and -N were swapped in --help
  * cec-compliance: remove Deck Status test
  * cec-compliance: remove One Touch Record Status test
  * cec-compliance: skip warning if audio_out_delay is 1
  * cec-compliance: the SHA needs to be shown in different ways
  * cec-compliance: use send_timer_error for one more test
  * cec-compliance: use the actual audio_out_delay value
  * cec-compliance: wait up to 10s for Inactive Source reply
  * cec-ctl.1.in: fix awkward language
  * cec-ctl: Add version command
  * cec-ctl/cec-compliance: add pulse8-cec kernel version check
  * cec-ctl: detect if Standby etc. messages are Nacked
  * cec-ctl: don't spam log with PA changes unless paused
  * cec-ctl: free signal time -&gt; signal free time
  * cec-ctl: improve --list-devices
  * cec-ctl: improve 'Sleep' message in stress test
  * cec-ctl: improve the --phys-addr-from-edid-poll option
  * cec-ctl: log signal free time when (show &amp;&amp; !verbose)
  * cec-ctl: min/max-sleep arguments should be double, not unsigned
  * cec-ctl: really wait for 2 seconds when the HPD is low
  * cec-ctl: report low drive without --verbose
  * cec-ctl: showTopology(): fix level wraparound bug
  * cec: expand One Touch Record tests
  * cec: expand Timer Programming tests
  * cec-follower: add --standby and --toggle-power-status
  * cec-follower: Add version command
  * cec-follower: CEC_MSG_STANDBY can just call enter_standby()
  * cec-follower: detect the cessation of Audio Rate Control messages
  * cec-follower: drop physical address check
  * cec-follower: emulate features for CEC versions &lt; CEC 2.0
  * cec-follower: emulate programmed timer recordings
  * cec-follower: fix incorrect fallthrough
  * cec-follower: fix logging the SHA
  * cec-follower: increase precision of Audio Rate Control active sensing
  * cec-follower: refactoring: split up overly long functions
  * cec-follower: use log_addr_type to get local device type
  * cec: improve vendor ID logging
  * cec: remove redundant struct cec_msg initializations
  * cec-tuner: std::array conversions
  * cec utils and v4l2-compliance: improve version info
  * clang-tidy: add a bunch of const
  * clang-tidy: use auto
  * clang-tidy: use nullptr
  * clang-tidy: use using instead of typedef
  * clean up includes and convert C includes to C++
  * common/media-info.cpp: 'Flags' was not aligned
  * configure.ac: Add --without-libudev option to avoid automagic dep
  * configure.ac: autodetect availability of systemd
  * configure.ac: drop printf for GIT_COMMIT_DATE
  * configure.ac: Export git commit count
  * configure.ac: Fix building without libudev
  * configure.ac: improve gettext compatibility support
  * configure.ac: Resolve GIT_* even if repository is a submodule
  * configure.ac: revert AM_GNU_GETTEXT_VERSION change
  * contrib/test/test-media: add -setup option
  * convert files to reference
  * convert to range based loops
  * cppcheck: turn several references to const
  * cppcheck: use const references
  * cv4l-helpers.h: fix the cv4l_buffer assignment operator
  * dvb-dev-remote: check if setsockopt() fails
  * dvb-fe-tool: better check the event type
  * dvb-file: fix one-line output with default values
  * dvb-file: reimplement get_pmt_descriptors()
  * dvbv5-daemon: don't dereference a null pointer
  * dvbv5-daemon: do some cleanups at the daemon
  * dvbv5-zap: add a check for dvb_fe_retrieve_status() errors
  * dvbv5-zap: add a warning when not recording PMT data
  * dvbv5-zap: allow recording also the SDT table
  * dvbv5-zap: don't use start time initialized
  * dvbv5-zap: fix a cut-and paste error
  * dvbv5-zap: remove an unused logic
  * dvb-zap: copy_to_file doesn't return any value
  * fix mismatching declaration
  * Fix print formatting warning for clang.
  * ir-ctl: include timeout in raw IR and parse timeout in pulse-space file
  * ir-ctl: increase the size of the buffer used to read raw files
  * ir-ctl: print correct transmitter count
  * ir-ctl: Revert "ir-ctl: print correct transmitter count"
  * keytable: Add source information in generated keymaps
  * keytable: ensure BPF IR decoders use correct section name
  * keytable: Fix missing inclusion of argp.h
  * keytable: fix typo
  * keytable: restrict installation of 50-rc_keymap.conf
  * libcecutil/cec-info.cpp: rename Reserved to Backup
  * libcecutil: make license consistent
  * libdvb: fix ATSC service location parser
  * libdvbv5: add a warning if a descriptor's init doesn't went fine
  * libdvbv5: add support for the registration descriptor
  * libdvbv5: avoid a potential access out of an array
  * libdvbv5: desc_ca: cleanup the routine
  * libdvbv5: desc_language: check if the size is correct
  * libdvbv5: desc_network_name: simplify the init code
  * libdvbv5: detect SMTPE 302m audio format
  * libdvbv5: don't leak memory at dvb-dev-remote
  * libdvbv5: dvb-dev-local: better handle realloc()
  * libdvbv5: dvb-dev-local: fix error handling for device addition
  * libdvbv5: dvb-dev-remote: better handle cmd size
  * libdvbv5: dvb-dev-remote: don't leak resources at send_buf()
  * libdvbv5: fix a typo
  * libdvbv5: fix init of the ATSC service location
  * libdvbv5: fix the quality detection logic
  * libdvbv5: hide my_strlcpy symbol
  * libdvbv5: hide stack_dump symbols and provide soname compatibility
  * libdvbv5: initialize v3 params
  * libdvbv5: use an array for the fourcc type
  * libdvbv5: validate cable descriptor's size
  * libv4l2: add newer caps to v4l2_driver.c
  * Makefile.am: turn the build less verbose by default
  * mass constexpr conversions
  * mc_nextgen_test: Link against argp library
  * media-ctl: add v4l2-ycbcr-enc field in help description
  * media-ctl: Add version command
  * media-ctl: fix compiler warnings
  * media-ctl: fix ycbcr property in help description
  * media-info: MEDIA_ENT_F_IO_DTV doesn't need an interface
  * Move sync-with-kernel into dedicated shell script ./sync-with-kernel.sh
  * qv4l2: add -Wno-psabi to avoid ABI warning on ARM
  * qv4l2: Also fall back to old method for querying resolution
  * qv4l2: fallback if window()-&gt;windowHandle() == NULL
  * qv4l2: fix CaptureWin::setWindowSize() if there are multiple screens
  * qv4l2: fix more 'deprecated Qt functions' warnings
  * qv4l2: fix use of deprecated byteCount method
  * qv4l2: QGuiApplication::screenAt() appeared in Qt 5.10
  * qvidcap: fix GL_UNPACK_ROW_LENGTH for Bayer &gt; 8 bits
  * qvidcap: set GL_UNPACK_ROW_LENGTH for Bayer formats
  * remove pointless constructor
  * remove unused ARRAY_SIZE
  * Rudimentary support for mi_media_detect_type on FreeBSD.
  * sync with latest media kernel
  * test-media: add 'date' at beginning and end, show versions
  * test-media: add -E and -W options
  * test-media: add support for vidtv
  * test-media: add 'tee /dev/kmsg'
  * test-media: add vidtv to the mc target
  * test-media: also keep vivid cec devices open
  * test-media: configure vimc scaler correctly
  * test-media: drop vidtv from mc, but warn if MC is disabled for DVB
  * test-media: drop vidtv from the 'mc' target
  * test-media: enable cache_hints for the first vivid instance
  * test-media: improve vidtv tests
  * test-media: mc should include vidtv
  * test-media: missed one scaler config line
  * test-media: show version info earlier and show cmd args
  * use auto
  * use emplace_back
  * use explicit for single argument constructors
  * Use standard integer types
  * use using instead of typedef
  * utils/cec: fix inconsistent Vendor ID reporting
  * utils/libcecutil/cec-log.cpp: report 6 digits of Vendor ID
  * utils: replace push_back with emplace_back
  * utils: v4l2-ctl: support V4L2_CAP_IO_MC in v4l2-ctl '--list-formats-*' commands
  * v4l2/cec-compliance: use new GIT_SHA variable
  * v4l2: common: add the flags V4L2_FMT_FLAG_CSC* to the list that maps flags to str
  * v4l2-compliance-32: use v4l2_compliance_CPPFLAGS
  * v4l2-compliance: add 0 check for v4l2_event reserved field
  * v4l2-compliance: Add libcamera to businfo prefixes
  * v4l2-compliance: add missing V4L2_PIX_FMT_H264_SLICE
  * v4l2-compliance: add new test for 32/64 bit time handling
  * v4l2-compliance: add support for VIDIOC_SUBDEV_QUERYCAP
  * v4l2-compliance: Add version command
  * v4l2-compliance: check correct buffer length after CREATE_BUFS
  * v4l2-compliance: check entity function for codecs
  * v4l2-compliance: Convert testBlockingDQBuf to pthreads
  * v4l2-compliance: disable cache flag test for kernels &lt; 5.9
  * v4l2-compliance: don't warn about seq counter for metadata
  * v4l2-compliance: drop kernel_version
  * v4l2-compliance: fix bad indentation
  * v4l2-compliance: fix cache hint regressions
  * v4l2-compliance: fix colorspace checks for JPEG codecs
  * v4l2-compliance: fix g++-7 compile error
  * v4l2-compliance: fix stateful encoder tests
  * v4l2-compliance: fix two S_EDID tests
  * v4l2-compliance: improve comment for CROPCAP/G_SELECTION fail
  * v4l2-compliance: improve compound control checks
  * v4l2-compliance: improve fmtdesc.description check
  * v4l2-compliance: improve frequency range checks
  * v4l2-compliance: improve request tests
  * v4l2-compliance: improve VIDIOC_TRY_DE/ENCODER_CMD tests
  * v4l2-compliance: improve VIDIOC_(TRY_)EN/DECODER_CMD tests
  * v4l2-compliance: move all vivid controls to v4l2-compliance.h
  * v4l2-compliance: relax testBasicSelection check.
  * v4l2-compliance: remove spurious \n in message
  * v4l2-compliance: rename stvec to vec_remote_subtests
  * v4l2-compliance: skip sequence tests for vivid
  * v4l2-compliance: some fails were ignored
  * v4l2-compliance: test for vb2/m2m poll kernel bug
  * v4l2-compliance: test polling and disconnecting
  * v4l2-compliance: use fail_on_test_val for better fail reports
  * v4l2-compliance: V4L2_PIX_FMT_VP8_FRAME is for stateless decoder
  * v4l2-ctl-32: use v4l2_ctl_CPPFLAGS, fix wrong check
  * v4l2-ctl: add missing const, use {} instead of memset
  * v4l2-ctl: add new control types
  * v4l2-ctl: add '--set-edid type=list' support
  * v4l2-ctl: add --show-edid, add new test EDIDs
  * v4l2-ctl: add support for VIDIOC_SUBDEV_QUERYCAP
  * v4l2-ctl: Add version command
  * v4l2-ctl: break on VIDIOC_DQEVENT error
  * v4l2-ctl: clean up control value printing
  * v4l2-ctl: don't squash setting multiple identical controls.
  * v4l2-ctl: fix broken fd.qbuf error check
  * v4l2-ctl: fix bugs found in streaming_set_cap2out
  * v4l2-ctl: fix hdmi and hdmi-4k-170mhz EDIDs
  * v4l2-ctl: fix incorrect check for last_ts
  * v4l2-ctl: fix INTEGER64 support, add common_print_control()
  * v4l2-ctl: Fix test_ioctl cmd type
  * v4l2-ctl: improve --help-edid
  * v4l2-ctl: print delta to current clock in verbose mode
  * v4l2-ctl: print specific error upon failure
  * v4l2-ctl: recognize compound h264 and fwht control types
  * v4l2-ctl: remove unused struct flag_def
  * v4l2-ctl: rename vivid_uvc_meta_buf to uvc_meta_buf
  * v4l2-ctl: set  total number of native DTDs to 1
  * v4l2-ctl: subdev: Add support for the CSC API in the subdevices
  * v4l2-ctl: subdev: Add the flags to the list of supported mbus formats
  * v4l2-ctl: update EDIDs
  * v4l2-ctl: update test EDIDs
  * v4l2-ctl: vidcap: Add support for the CSC API
  * v4l2-dbg: fix control flow problem
  * v4l2grab: add command line args for other capture methods
  * v4l2grab: add querycap basic support
  * v4l2grab: add read and userptr capture methods
  * v4l2grab: fix block mode handling
  * v4l2grab: prepare it for adding support for other methods
  * v4l2grab: remove an unused var
  * v4l2grab: some code reorg
  * v4l2-info: add v4l2_info_subdev_capability
  * v4l2-info.cpp: add new flag V4L2_FMT_FLAG_ENC_CAP_FRAME_INTERVAL
  * v4l2-subdev.h: replace BIT(0) by 0x00000001
  * v4l2-tpg.patch: add clamp_t define
  * v4l2-tpg.patch: rename min/max defines to tpg_min/max
  * v4l2-utils: test cache_hints for MMAP queues
  * v4l2-utils: turn fb_formats to constexpr array
  * v4l-compliance: re-introduce NON_COHERENT and cache hints tests
  * v4l-compliance: remove NON_CONSISTENT hint test
  * v4l-helpers: don't mix enum type with int
  * v4l-utils: add missing fallthrough
  * v4l-utils: add missing static
  * v4l-utils: convert board_list to vector
  * v4l-utils: FreeBSD already defines packed
  * v4l-utils: libdvbv5: fix broken my_strlcpy calls
  * v4l-utils: patch v4l2-controls.h
  * v4l-utils: switch remote_subtest arrays to vector
  * v4l-utils: sync with latest media kernel
  * v4l-utils: sync with latest media staging tree
  * v4l-utils: sync with latest media_tree master repo
  * v4l-utils: sync with media_tree master
  * v4l-utils: sync with media_tree/master
  * v4l-utils: sync with upstream media_tree master
  * v4l-utils: update v4l2-tpg.patch
  * v4l-utils: use V4L2_TYPE_IS_CAPTURE
- remove sysmacros.patch: obsolete</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1677672000">- Update to version 1.24.1:
  * Lot of changes, see ChangeLog for details.
- Removed update-desktop-files and hicolor-icon-theme post
  requirements (not needed anymore).</changelog>
  <changelog author="alarrosa@suse.com" date="1743422400">- Update to 1.28.1
  * qv4l2: always set m_haveFramebufferSRGB to false
  * qv4l2: fix crash when disabling openGL
  * qvidcap: fix core dump
- Update to 1.28.0
  * buildsystem: Start v4l-utils 1.27.0 development cycle
  * cec-compliance: add --show-timestamp option
  * cec-ctl: avoid confusing error message
  * cec-ctl: exit after reporting all cec devices with --list-devices
  * cec-ctl: fix random cec stress test: check if msg status is OK
  * cec-follower: change type of struct Timer duration field to int
  * cv4l-helpers.h: add missing helper functions
  * Fixed qv4l2 crash with drivers that implement VIDIOC_ENUM_FRAMESIZES for outputs
  * ir-ctl: add optional header to manchester encoding
  * ir-ctl: clear errno before strtol
  * ir-ctl: correct max_size for rc5 and rc5_sz
  * ir-ctl: encode rc6 mode 0 can have 43 edges
  * ir-ctl: fix encoding pulse_length bpf encoder
  * ir-ctl: remove line length limits
  * keytable: fix command line processing
  * keytable: fix segfault when reading legacy keymaps
  * keytable: fix stdout/stderr inconsistency
  * keytable: meson not passing rc_keymaps system directory
  * keytable: meson: Restrict the installation of 50-rc_keymap.conf
  * keytable: remove line length limits
  * libv4l2rds: fix TMC location parsing
  * libv4l2subdev: Extend API with 'which' argument where missing
  * media-ctl: Re-order setting format and routes
  * media-info: add missing sys/stat.h include (for dev_t)
  * meson: add optional Qt6 support
  * meson: Allow documentation directory to be specified with -Ddocdir
  * meson: Fix building with -Dv4l-utils=false
  * meson: fix has_function fork detection (needs suitable include)
  * meson: libv4lconvert helpers need fork support
  * meson: v4l2grab needs libv4lconvert with fork support enabled
  * meson.build: dep_systemd was not set in one case
  * qv4l2: add support for /dev/v4l-touchX devices
  * qv4l2: fix crash when used with metadata output devices
  * qv4l2: support menu controls in updateCtrlRange()
  * Revert "meson: v4l2grab needs libv4lconvert with fork support enabled"
  * sync-with-kernel.sh: add v4l2-dv-timings.h
  * sync-with-kernel.sh: create v4l2-tracer patches
  * sync-with-kernel.sh: filter V4L2_META_FMT_GENERIC_ defines
  * test-media: Add basic tests for visl
  * utils: media-ctl: Prepare for TRY state support
  * utils: media-ctl: Print the MUST_CONNECT pad flag
  * utils: media-ctl: Support accessing the subdev TRY state
  * utils: media-ctl: Support changed routing API
  * utils/keytable: forgot to add mygica_utv3.toml
  * v4l2-compliance: Add a test for REMOVE_BUFS ioctl
  * v4l2-compliance: add new CREATE_BUFS tests
  * v4l2-compliance: add support for V4L2_SUBDEV_CLIENT_CAP_INTERVAL_USES_WHICH
  * v4l2-compliance: Add tests for V4L2_FMT_FLAG_META_LINE_BASED flag
  * v4l2-compliance: clarify a create_bufs test
  * v4l2-compliance: Constify pointers and references in formats tests
  * v4l2-compliance: do not warn for unexpected vivid_ro_ctrl values
  * v4l2-compliance: Fix building against libc++
  * v4l2-compliance: Fix streams use in testSubDevEnumFrameSize()
  * v4l2-compliance: Fix use of routing on 32-bit platforms
  * v4l2-compliance: matchFormats(): add multiplane logging
  * v4l2-compliance: Support the changed routing API
  * v4l2-ctl: add support for V4L2_SUBDEV_CLIENT_CAP_INTERVAL_USES_WHICH
  * v4l2-ctl: Add --try-routing option
  * v4l2-ctl: --list-devices --verbose will list current input/output
  * v4l2-ctl: replace --fix-edid-checksums by --keep-edid-checksums
  * v4l2-ctl: report max_num_buffers
  * v4l2-ctl/compliance: read and show the subdev client capabilities
  * v4l2gl: Add missing dependency on argp
  * v4l2-info: add support for V4L2_BUF_CAP_SUPPORTS_REMOVE_BUFS
  * v4l2-info: support V4L2_FMT_FLAG_META_LINE_BASED
  * v4l2-tracer: add auto-generated files to git repo
  * v4l2-tracer: add re/tracing for AV1 controls
  * v4l2-tracer: add re/tracing for MAX_NUM_BUFFERS
  * v4l2-tracer: autogenerate files that can be added to git
  * v4l2-tracer: ignore single line comments when parsing headers
  * v4l2-tracer: look in more places for libv4l2tracer
  * v4l2-tracer: Rewrite libv4l2tracer.so lookup
  * v4l2-tracer: stop auto-generating files with meson
  * v4l2-tracer: stop waiting to handle a signal
  * v4l2-tracer: use stat to verify that retrace file exists
  * v4l-helpers: support V4L2_SUBDEV_CLIENT_CAP_INTERVAL_USES_WHICH
  * v4l-helpers: v4l_format_s_sizeimage: add support for other buftypes
  * v4l-utils: clang-tidy: convert to for range loop
  * v4l-utils: clang-tidy: use auto with iterators
  * v4l-utils: (c)v4l-helpers.h: support more than 32 buffers
  * v4l-utils: fix formats under alpha/ppc64/mips64
  * v4l-utils: fix @PACKAGE_VERSION@ use
  * v4l-utils: fix potential crashing with 32-bit musl
  * v4l-utils: sync with latest kernel
  * v4l-utils: sync-with-kernel
  * v4l-utils: sync-with-kernel
  * v4l-utils: sync-with-kernel
  * v4l-utils: test-media: add dmesg -n info before modprobes
  * v4l-utils: test-media: connect the hdmi input to the output
  * v4l-utils: use 64-bit formats for time
  * v4l-utils: use 64-bit off_t format
  * v4l-utils: v4l-utils: sync with latest kernel headers
  * v4l-utils: v4l-utils: sync with latest kernel headers
  * v4l-utils/contrib/gconv: fix conversion errors on ARIB-STD-B24 strings
  * v4l-utils/contrib/gconv: translation table fix for ARIB-STD-B24
- Update to 1.26.0
  * Add support for meson building
  * build: conditionally retrieve Git repo information
  * build: do not fall back to libbpf header lookup
  * buildsystem: Start v4l-utils 1.25.0 development cycle
  * cec-compliance: get_power_status(): check cec_msg_status_is_abort
  * cec-compliance: get_power_status(): fix valid RX test
  * cec-ctl: add hpd-may-be-low suboption for the CEC tests
  * cec-ctl: add --test-random-power-states stress test
  * cec-ctl: always log timestamp in show_msg if not-OK
  * cec-ctl: rename power-cycle to standby-wakeup-cycle
  * cec-ctl: store state changes in pin file
  * cec-ctl.1.in: clarify that you configure *your* device
  * cec-ctl.1.in: for hpd-may-be-low option: &lt;0,1&gt; -&gt; &lt;0/1&gt;
  * cec-follower: add --exclusive option
  * cec/v4l2-compliance, cec-follower: use __FILE_NAME__ if available
  * common/media-info: add MEDIA_ENT_F_PROC_VIDEO_ISP
  * common/media-info: fail for unknown entity function values
  * configure.ac: fix gconv directory search
  * Copy Doxygen configuration file to doc/
  * Drop autoconf/automake support
  * gen_dvb_structs.pl: drop copy of dvb-frontend.h
  * .gitignore: add back '*.pc' pattern
  * ir-ctl: fix sharp encoding
  * keytable: fix repeat formatting
  * keytable: open lirc for read/write for attaching/detaching bpf programs
  * libcecutil: fix performance inefficiencies
  * libdvbv5: dvb-scan: fix DVB-S2 checks for DVB-S tuning
  * lib/libdvbv5/dvb-file.c: check for valid entry pointer
  * libv4l1/libv4l2/v4l2-tracer: use common meson c_args/cpp_args to disable transparent large file support
  * manpages: fix groff warnings
  * media-ctl: 1 -&gt; 1ULL
  * media-ctl: Add support for routes and streams
  * media-ctl: Check for Streams API support
  * meson: Add support for doxygen documentation
  * meson: Fix install location of doxygen's man pages
  * meson: Fix libbpf detection
  * meson: make it backward-compatible with version 0.54
  * meson: re-enable qv4l2 without Qt OpenGL support
  * meson: Use -include to include config.h instead of -I.
  * meson.build: backport it to version 0.56
  * qv4l2: enable Qt6 compile with Qt OpenGL support
  * qv4l2: fix qmake project file
  * qv4l2: fix Qt6 compile (ambiguous overload for operator!=)
  * qv4l2: fix Qt6 compile (missing QActionGroup header)
  * qv4l2: fix Qt6 compile (no matching function for call to QString::split(QRegExp))
  * qv4l2: fix Qt6 compile (QDesktopWidget: No such file or directory)
  * qv4l2: fix Qt6 compile (QHBoxLayout/QVBoxLayout has no member setMargin)
  * qv4l2: fix Qt6 warning (QMenu::addAction() is deprecated)
  * qv4l2: fix Qt6 warnings (QKeyCombination operator+ is deprecated)
  * qv4l2: fix SDR format error message
  * qv4l2: remove leagcy alsa_stream.h include (ENABLE_ALSA protected)
  * qv4l2: remove unused local variables 'QString what'
  * qv4l2: update qmake project file for Qt6 (core5compat module)
  * qvidcap: enable Qt6 compile with Qt OpenGL support
  * qvidcap: fix qmake project file
  * qvidcap: fix v4l2_convert_hook (add PRE_TARGETDEPS)
  * README.md: drop qt5-default, add libsdl2-dev libbpf-dev llvm clang
  * sync-with-kernel.sh: don't filter V4L2_PIX_FMT_HEVC_SLICE
  * sync-with-kernel.sh: regenerate utils/keytable/rc_keymaps/meson.build
  * test-media: cec-pwr enables cec variable as well
  * test-media: log utils versions
  * test-media: 'mc' argument didn't select vidtv
  * test-media: use -m instead of -M for vicodec and vidtv
  * Update old email address
  * utils: libv4l2subdev: Set stream for g_selection
  * utils/common: Set V4L2_SUBDEV_CLIENT_CAP_STREAMS for subdevs
  * utils/libcecutil: drop spurious dep_libv4lconvert
  * v4l2-compliance: Add gadget. as bus_info prefix
  * v4l2-compliance: Add handling for QC08C and QC10C format
  * v4l2-compliance: call select before dequeuing event
  * v4l2-compliance: codecs: Add stateless (TRY_)DECODER_CMD tests
  * v4l2-compliance: improve error message
  * v4l2-compliance: pass media_fd when walking topology
  * v4l2-compliance: support V4L2_PIX_FMT_AV1_FRAME
  * v4l2-compliance: Test queue maximum buffers allocation
  * v4l2-ctl: Add --get/--set-ctrl support for INTEGER and INTEGER64 arrays
  * v4l2-ctl: add missing &gt; in aspect option usage message
  * v4l2-ctl: Add routing and streams support
  * v4l2-ctl: add support for AV1 stateless control types
  * v4l2-ctl: Check for Streams API support
  * v4l2-ctl: fix alignment meta formats usage message
  * v4l2-ctl: fix handling the premul-alpha sub-option
  * v4l2-ctl: improve --silent support
  * v4l2-ctl: improve --stream-sleep
  * v4l2-ctl: improve --stream-sleep functionality
  * v4l2-ctl: Improve sub-device options help text
  * v4l2-ctl: reset fps counter when using --stream-sleep with streamoff/on
  * v4l2-ctl: show field value in print_concise_buffer()
  * v4l2-ctl: support random sleep times
  * v4l2-ctl.1.in: add missing --help-meta
  * v4l2-ctl/compliance: add include cstdint
  * v4l2-ctl/compliance: Add routing and streams multiplexed streams
  * v4l2-ctl/compliance: Add simple routing test
  * v4l2-info.cpp: fix _SUPPORTS_MAX_NUM_BUFFERS description
  * v4l2-info/v4l2-tracer: add macro to mark the trace
  * v4l2-tracer: add event tracing/retracing
  * v4l2-tracer: add G/S TUNER ioctls
  * v4l2-tracer: add macros to print debug info
  * v4l2-tracer: add quotes to -DLIBTRACER_PATH="@0@"
  * v4l2-tracer: add VIDIOC_ENUM_FRAMEINTERVALS
  * v4l2-tracer: add VIDIOC_ENUM_FRAMESIZES
  * v4l2-tracer: auto generate flags for DECODER_CMD
  * v4l2-tracer: create an option to trace userspace args
  * v4l2-tracer: fix autogen script for AV1
  * v4l2-tracer: Fix libv4l2tracer.so loader
  * v4l2-tracer: fix trace path name creation
  * v4l2-tracer: get decoded bytesused from DQBUF
  * v4l2-tracer: print only if debugging option is set
  * v4l2-tracer: remove buffers by type and index
  * v4l2-tracer: remove compress_frame_count
  * v4l2-tracer: replace buftype2s with val2s
  * v4l2-tracer: stop retracing failed ioctls
  * v4l2-tracer: stop stringifying v4l2_input "tuner"
  * v4l2-tracer: stringify target in v4l2_selection
  * v4l2-tracer: use __s64 instead of long
  * v4l2-tracer: wrap open64/mmap64 functions only if linux &amp;&amp; __GLIBC__
  * v4l-utils: libdvbv5: fix doxygen warnings
  * v4l-utils: sync with latest kernel headers
  * v4l-utils: sync with latest kernel headers
  * v4l-utils: sync with latest kernel headers
  * v4l-utils: sync with latest kernel headers
  * v4l-utils: sync with latest media staging tree
  * v4l-utils: sync with upstream media staging kernel.
  * v4l-utils.spec.in: update it to work with meson
- Use Qt6 instead of Qt5 when building the qv4l2 flavor
- Drop usage of deprecated %suse_update_desktop_file
- Redo patch since v4l-utils now uses meson:
  * use_system_v4l_for_qv4l.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1744459200">- Install gconv module file to /usr/lib64/gconv/gconv-modules.d/
  (resolves also conflict with /usr/lib64/gconv/gconv-modules file
  from glibc).</changelog>
  <changelog author="alarrosa@suse.com" date="1748433600">- Update to 1.30.1
  * licenses: update copyright files to remove fsf address
  * v4l2-compliance: run testBlockingWait when streaming
- Update to 1.30.0
  * media-ctl: libv4l2subdev: Add Y16 format
  * v4l2-ctl: process events before queues in stateful_m2m()
  * v4l2-compliance: Add test for V4L2_FMTDESC_FLAG_ENUM_ALL flag
  * v4l2-ctl-vidcap: Add options to enumerate all pixel formats
  * edid-decode: support parsing EDID-Like Data
  * buildsystem: Start v4l-utils 1.29.0 development cycle
  * qvidcap: fix core dump
  * qv4l2: fix crash when disabling openGL
  * qv4l2: always set m_haveFramebufferSRGB to false
  * v4l-utils: sync with latest kernel
  * cec-ctl: add support for CEC_MSG_FL_REPLY_VENDOR_ID
  * cec-compliance: add tests for CEC_MSG_FL_REPLY_VENDOR_ID
  * contrib/test/test-media: re-add cec-compliance -A tests
  * v4l-utils: sync with latest kernel
  * v4l2-compliance: testRequests(): drop V4L2_BUF_FLAG_QUEUED
    check
  * contrib/test/test-media: set log level to info at end
  * v4l2-compliance: only do request-queued checks while streaming
    is off
  * v4l2-compliance: always test blocking wait
  * v4l-utils: sync with latest kernel
  * utils/common: add V4L2_CAP_EDID support
  * v4l2-compliance: add support for V4L2_CAP_EDID
  * test-media: move visl out of the vivid test sequence
  * contrib/test/test-media: test unbind in DQBUF
  * v4l2-ctl/compliance: add -32-time64 variants
  * test-media: add -32-time64 option
  * cec-ctl: add --test-reliability option
  * v4l-utils: sync with latest kernel
  * cec-ctl: always return in list_devices
  * cec-ctl: use -A shortcut for --list-devices
  * v4l2-ctl: list_media_devices() should show the in/out name
  * v4l2-ctl: add --list-devices-input/output options
  * v4l2-ctl: add -A as shortcut for --list-devices
  * v4l2-ctl: move s_trace back to where it was before
  * cec-follower: the short_options array was potentially too
    small
  * cec-compliance: the short_options array was potentially too
    small
  * cec-ctl: missing support for optional arguments
  * v4l2-ctl: fix --stream-out-buf-caps option
  * qv4l2/qvidcap: bind shader program in paintGL()
  * v4l2-ctl: support V4L2_CID_MIN_BUFFERS_FOR_CAPTURE/OUTPUT
  * v4l2-compliance: improve stateful codec tests
  * v4l2-compliance: improve CREATE_BUFS tests
  * cec-compliance: add fflush(stdout) in several places
  * cec-ctl: don't show legend for
  - -stress-test-random-standby-wakeup-cycle
  * cec-ctl: clearly report PASS if a test passes
  * cec-ctl: add --physical-address (-x) option
  * v4l2-ctl: support toggling Cable Status in EDID
  * v4l-utils: update README.md
  * cec-compliance: change long timeout to 30s
  * v4l2-ctl: also report the SHA if available in --version
  * media-ctl: also report the SHA if available in --version
  * edid-decode: move edid-decode into v4l-utils
  * edid-decode: don't show parse errors if -P is given
  * test-display.py: test display CEC and EDID compliance
  * cec-ctl/edid-decode: use seconds for the reliability test
  * test-display: add cec-ddc-reliability test
  * edid-decode: suppress two more errors if -P is used
  * test_display.py: add log options, checked with linter
  * test_display.py: fix cec-stress-sleep test
  * edid-decode: hide error when using -P and -a
  * test_display.py: various fixes
  * contrib/test/test-media: add more 'date' commands
  * contrib/test/test_display.py: various improvements
  * edid-decode: support HF-EEODB when reading EDID over DDC
  * edid-decode: show timestamp for --i2c-hdcp-ri
  * edid-decode: show the delta in ms since last Ri' change
  * edid-decode: ignore failed Ri' reads
  * Revert "cec-compliance: change long timeout to 30s"
  * edid-decode: add eld.test example
  * qvidcap: add --no-loop option
  * qvidcap: add --from-frame option
  * qvidcap: update the man page
  * edid-decode: transfer characteristics improvements
  * qvidcap: allow Q to close the window with option --no-loop
  * qvidcap: 'Space' will pause, 'Backspace' will go back one frame
  * edid-decode: fix incorrect message
  * cec-compliance: add two new tests
  * v4l2-ctl: add new hdmi-4k-600mhz-with-displayid-eeodb EDID
  * edid-decode: fix DisplayID checksum regression
  * edid-decode: fix infoframe DB parsing regression
  * edid-decode: fix incorrect warning for DisplayID v1
  * edid-decode: search for 'edid-decode (hex)' first
  * cec-compliance: use CEC_MSG_FL_RAW with Unregistered
  * v4l2-tpg.patch: add define for WARN_ON_ONCE
  * v4l-utils: sync with latest media-committers git repo
  * v4l2-tracer: add V4L2_CTRL_WHICH_MIN/MAX_VAL support
  * v4l-utils: clean up printf formatting for top, left, width and
    height
  * v4l-utils: sync with latest media-committers git repo
  * v4l2-compliance: use geteuid instead of getuid
  * cec-compliance: use geteuid instead of getuid
  * cec-compliance: don't check UID, instead test with a &lt;Poll&gt;
  * edid-decode: fix wrong CTA warning if more than 1 CTA block
  * edid-decode: more warnings that only apply for the first CTA
  * cec-ctl: improve usage message
  * cec-ctl: actually parse the hpd-may-be-low suboption argument
  * cec-ctl: fail if HPD goes high unexpectedly
  * edid-decode: preparse the HDMI VSDB Image_Size
  * cec-ctl/edid-decode: fix arm architecture warnings
  * cec-follower: add support for 5V events
  * edid-decode: fail if there are no SVDs in the Data Block
  * meson.build: add -Wno-psabi to suppress arm ABI warning
  * meson.build: fix arm _TIME_BITS=64 error
  * meson.build: fix location of gconv library
  * edid-decode: improve handling of preferred/native timings
  * edid-decode: improved diagonal handling
  * test-media: add vim2m multiplanar tests
  * dvbv5-scan: color was set to white instead of resetting
  * edid-decode: more native resolution/diagonal improvements
  * edid-decode: check if NVRDB needs the size as well
  * meson: Bump minimum meson version
  * utils: media-ctl: Set V4L2_MBUS_FRAMEFMT_SET_CSC flag to set
    colorspace
  * v4l2-compliance: Don't perform blocking DQBUF test on MC_IO
    devices
  * edid-decode: fix transfer characteristics buffer overread
  * edid-decode: avoid infinite loop in transfer characteristics
  * edid-decode: fix a transfer characteristics buffer overread
  * edid-decode: fix buffer overread in infoframe parsing
  * edid-decode: fix buffer overread on CTA block parsing
  * edid-decode: fix buffer overread on displayid block parsing
  * edid-decode: fix buffer overread on product identification
    parsing
  * edid-decode: fix buffer overread while parsing Stereo Display
    Interface DB
  * edid-decode: size colorspace_eotf_combinations array correctly
  * edid-decode: fix divide by zero in type17 timings parsing
  * edid-decode: fix divide by zero in type3 timings parsing
  * edid-decode: fix heap overread on early EOF
  * libv4l2: Guard the v4l2_ioctl function with HAVE_POSIX_IOCTL
  * v4l-utils: Ignore comma in bracket when getting subopt
  * libv4lconvert: fix jpeg-v9x/gcc-14.x compile (jpeg_mem_dest
    argument mismatch)
  * meson: remove two pre-0.60 workarounds
  * media-ctl: Remove duplicated include
  * Android.mk: Remove obsolete build files
  * v4l2-compliance: Do not run test requiring pthread_cancel in
    Android
  * v4l2-compliance: Fix build error clang TOT
  * android: Remove unused file
  * contrib/test/test-media: Increase modprobe time
  * v4l-utils: fix compilation with external intl
  * edid-decode: use override_find_program() to ease subproject use
  * v4l2-ctl: Support V4L2_CTRL_TYPE_RECT
  * v4l2-utils: Support V4L2_CTRL_WHICH_MIN/MAX_VAL</changelog>
  <changelog author="schwab@suse.de" date="1749556800">- Filter out GLIBC_PRIVATE dependencies</changelog>
</package>
<package pkgid="ba2ce5edb180dc81d80dd674af8d7645c187b9d7c0407b219894d86628b59343ea18b786cf2fe4ebd9dfdd9df42639cf1f72d949802d3664d3b264d01afb408a" name="dvbcut" arch="x86_64">
  <version epoch="0" ver="0.7.4" rel="bp160.1.10"/>
  <changelog author="aloisio@gmx.com" date="1531224000">- Initial package (version 0.7.2)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1555934400">- Update to version 0.7.3
  * Be able to build with Qt5 utils with -qt5 postfix.
  * Fix issue with reencoded frames appear with 50 FPS.
  * Switch copyright-format URL from http to https.
  * Bump standards version from 3.9.8 to 4.1.4.
  * Bump debhelper version from 10 to 11.
  * Remove trailing whitespace from debian files.
- Dropped dvbcut-qt5_utils.patch (merged upstream)
- Refreshed dvbcut-appicon.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1659700800">- Update to version 0.7.4:
  + Updated autotools files.
  + Build with ffmpeg 5.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1692705600">- Drop dvbcut-a52.patch (build fails with a52dec 0.8.0)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1708084800">- Reintroduce modified dvbcut-a52.patch to build against liba52
  0.7.x
- Add dvbcut-autoconf269.patch
- Have Leap also build against ffmpeg 5</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1708084801">- Use cleaner package version detection method</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1724241600">- Build against ffmpeg 6 on Factory</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1746878400">- Force build against ffmpeg-4 on factory, use the "legacy ffmpeg"</changelog>
</package>
<package pkgid="3551a676c83d4ef0a5bf651e68df4c5ee75873ff0f71ce7bdce284a3e276ca5327b8a00185d9fdc4c5b10ca12922cd261bc97dadcc3d0d3070aa7e113d7653d9" name="dvbstream" arch="x86_64">
  <version epoch="0" ver="0.6" rel="bp160.1.12"/>
  <changelog author="duwe@suse.de" date="1131969600">- update to current CVS, version 0.6</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1148299200">- Don't strip binaries.</changelog>
  <changelog author="ro@suse.de" date="1171195200">- added defattr</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="jdelvare@suse.de" date="1499169600">- Removed BuildRequires dvb, builds just fine without it.</changelog>
  <changelog author="mpluskal@suse.com" date="1499169601">- Run spec-cleaner</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618747200">- Fixes SPEC file: Replaced broken URL with latest upstream</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="a51bb5053c4961d461337f5a13641e5ef1308cdd063598ffd33b2fe8dcc6790c17015dc22ddeb7c1651e32bf8456633e3b4cb87af37b39a1b1bdab7c0b93d08a" name="dvd+rw-tools" arch="x86_64">
  <version epoch="0" ver="7.1" rel="bp160.1.13"/>
  <changelog author="lnussel@suse.de" date="1219147200">- remove resmgr from BuildRequires</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1302436800">- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Added description for the patches based on openSUSE Patches Guidelines.
  * Added genisoimage in Requires:.
  * Updates in Summary: and %description.
  * Compile the package with -fno-strict-aliasing.
  * Rename btcflash binary to "dvd+rw-tools-btcflash" in order to avoid
    conflict with btcflash from cdrtools.
  * Small updates in %files section.
  * Remove the entries from %changelog.
- Removed rpm_opt_flags.diff patch (not required since the flags can be set in
  the spec file).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc, %__cxx macros</changelog>
  <changelog author="cfarrell@suse.com" date="1344427200">- Update license in spec file to use SPDX format</changelog>
  <changelog author="davejplater@gmail.com" date="1368187200">- Change requirement from genisoimage to /usr/bin/mkisofs to allow
  the use of either wodim or cdrtools and commented out patch
  growisofs-genisoimage.patch as this prevents the use of cdrtools
  without user intervention.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1554811200">- Add fix-build-with-recent-glibc.patch.
- Refresh dvd+rw-tools-buffer.patch
- Refresh growisofs-dvd-dl-undersized.patch
- Run spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1709208000">- Avoid comment out of patch application that leads to failure ot
  "osc service runall"</changelog>
</package>
<package pkgid="ca2b468fb6ffa14d1d66593a56a6a9a02049517c78a042d47c7aa83f43e29c849433f3d9a6de9719882c6eaafa1fa056752ba0e922160d5121ca588b3b5cdfb7" name="dvdauthor" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="bp160.1.13"/>
  <changelog author="detlef@links2linux.de" date="1302955200">- new upstream version &lt;0.7.0&gt;</changelog>
  <changelog author="davejplater@gmail.com" date="1304337600">- Update to version 0.7.0+ and removed dvdauthor-strcat.patch due to
  build errors and changes to the function patched.</changelog>
  <changelog author="davejplater@gmail.com" date="1333972800">- Provided and obsoleted dvdauthor due to the dvdauthor binaries
  being overwritten during a zypper up -r Packman causing DVDStyler
  to fail.</changelog>
  <changelog author="avvissu@yandex.ru" date="1413892800">- Fix build error on openSUSE &gt; 13.1:
  * add dvdauthor-0.7.0_glibc-2.20.patch
- Spec file cleanup</changelog>
  <changelog author="davejplater@gmail.com" date="1477224000">- Update to version 0.7.1+ and rebased
  dvdauthor-0.7.0_glibc-2.20.patch
- Upstream fixed https://github.com/ldo/dvdauthor/issues/21
- Upstream changes:
  * Various code-quality and build improvements
  * Support “jump pgc n” and other interaction code-generation
    improvements
  * Improve reliability of dvdunauthor
  * Don’t force infinite pause on last cell of a PGC
  * Allow specification of provider field in VMG IFO file
  * Add video_format(7) man page
  * Add padding to ensure .BUP and .IFO files end up in different
    ECC blocks
  * No longer silently fail to build dvdunauthor if libdvdread is
    not present, must be explicitly disabled with
  - -disable-dvdunauthor, otherwise configure reports an error
  * Allow format specification at top level of dvdauthor control
    file
  * mpeg2desc now reports more details about video frames
  * More explanatory XML-parsing errors</changelog>
  <changelog author="davejplater@gmail.com" date="1491307200">- Update to version 0.7.2
- Upstream changes:
  * Various code-quality and build improvements
  * Support “jump pgc n” and other interaction code-generation
    improvements
  * Improve reliability of dvdunauthor
  * Don’t force infinite pause on last cell of a PGC
  * Allow specification of provider field in VMG IFO file
  * Add video_format(7) man page
  * Add padding to ensure .BUP and .IFO files end up in different
    ECC blocks
  * Enabled hinting of rendered subtitle text
  * Require cell start and end times (if specified) to be nonempty</changelog>
  <changelog author="davejplater@gmail.com" date="1491652800">- Build with GraphicsMagick instead of ImageMagick due to the
  latter's change of api being incompatible.</changelog>
  <changelog author="alarrosa@suse.com" date="1496318400">- Obsolete dvdauthor07 &lt;= %version-%release instead of only older
  versions in order to fix conflicts on TW.</changelog>
  <changelog author="tiwai@suse.de" date="1587297600">- Revert to ImageMagick from GraphicsMagick due to the spumux error
  (boo#1169848)
- Fix the build with ImageMagick 7, a downstream patch taken from
  Arch linux package:
  dvdauthor-0.7.2-imagemagick7.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="a971a9daf55203236b5f0e1f5d334791c09ba7aeafd39790f8893e78de0937647441b0e3bac3f0981ec1ab1e7c67c0a1987d1c02c252cf50d607a06920ff5169" name="dvdisaster" arch="x86_64">
  <version epoch="0" ver="0.79.10" rel="bp160.1.12"/>
  <changelog author="davejplater@gmail.com" date="1477224000">- Created initial package, version 0.79.5</changelog>
  <changelog author="avindra@opensuse.org" date="1515672000">-  Update to version 0.79.6
  * Verify/Test option will now output dvdisaster version numbers
    always in x.yy.zz format, as the old scheme using x.yy
    (devel|pre|rc|pl)-zz is no longer used.
  * The "medium info" tool will now correctly show the blank
    capacity (was previously always shown as zero)
  * added support for BDXL-TL (triple layer, 100GB)
  * Sector CRC sums and the image MD5 sum are collected during
    reading the medium and can be re-used by the ecc data creation
    process. Speeds up ecc generation and enables RS03 image
    checksums when generating ecc data was preceeded by a read.
- cleanup spec file with spec-cleaner
- rebase dvdisaster-findmake.patch
- add upstream urls to sources
- add pgp signature</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1591358400">- Fix Factory build with gcc10 and add Debian patches:
  29-fix-more-typos.patch, 23-add-bdrom-support.patch,
  34-gcc8-format-security.patch, 02-encryption.patch,
  17-fix-all-but-deprecated-api-warnings.patch,
  10-use-non-size-specific-icon-and-add-keywords-to-desktop-file.patch
  25-fix-man-pages.patch, 14-make-builds-reproducible.patch,
  11-no-cruft.patch, 18-update-copyright-in-about-dialog.patch,
  30-hurd-kfreebsd-ftbfs.patch, 22-fix-hurd-i386-ftbfs.patch,
  03-dvdrom.patch, 37-suggest-dvdisaster-doc.patch,
  13-fix-missing-language-field-in-po-files.patch,
  32-display-compilation-commands.patch,
  28-pdftex-reproducibility.patch, 05-help-dialog.patch,
  27-allow-opening-in-browser-again.patch and
  24-show-gpl3-license.patch
- Created dvdisaster-no-tex.patch to pevent building of existing
  pdf manual.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1642939200">- Add more debian patches:
  12-fix-spelling-of-up-to.patch Added
  15-show-new-pkg-tracker.patch Added
  16-remove-auto-build-of-doco-from-install-rule.patch Added
  19-show-text-files-with-abs-path.patch Added
  20-display-changelog-credits-and-todo.patch Added
  26-fix-display-of-manual.pdf.patch Added
  31-improve-hurd-and-kfreebsd-support.patch Added
  33-honour-LDFLAGS.patch Added
  35-archived-homepage.patch Added
  36-fix-parallelism.patch Added
- Fix boo#1195036 with dvdisaster-g_strdup_printf.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1687694400">- Update to version 0.79.10
- Add dvdisaster-desktop-cat.patch to correct desktop catagory.
- Remove obsolete patches:
  dvdisaster-findmake.patch, 02-encryption.patch, 03-dvdrom.patch,
  05-help-dialog.patch, 08-fix-gnu-make-detection.patch,
  10-use-non-size-specific-icon-and-add-keywords-to-desktop-file.patch,
  11-no-cruft.patch, 12-fix-spelling-of-up-to.patch,
  13-fix-missing-language-field-in-po-files.patch,
  14-make-builds-reproducible.patch, 15-show-new-pkg-tracker.patch,
  16-remove-auto-build-of-doco-from-install-rule.patch,
  17-fix-all-but-deprecated-api-warnings.patch,
  18-update-copyright-in-about-dialog.patch,
  19-show-text-files-with-abs-path.patch,
  20-display-changelog-credits-and-todo.patch,
  22-fix-hurd-i386-ftbfs.patch, 23-add-bdrom-support.patch,
  24-show-gpl3-license.patch, 25-fix-man-pages.patch'
  26-fix-display-of-manual.pdf.patch,
  27-allow-opening-in-browser-again.patch,
  28-pdftex-reproducibility.patch, 29-fix-more-typos.patch,
  30-hurd-kfreebsd-ftbfs.patch,
  31-improve-hurd-and-kfreebsd-support.patch,
  32-display-compilation-commands.patch, 33-honour-LDFLAGS.patch,
  34-gcc8-format-security.patch, 35-archived-homepage.patch,
  36-fix-parallelism.patch, 37-suggest-dvdisaster-doc.patch,
  dvdisaster-no-tex.patch, dvdisaster-g_strdup_printf.patch.
- Upstream changes:
  Many fixes see:
  /usr/share/doc/packages/dvdisaster/CHANGELOG</changelog>
</package>
<package pkgid="4b0170b5ab84595d867dc4840390a345cd7fefcbe0b67bafb8119fa7523711393069a683e3006a7f3b8224c2ffd793755bc4a91c1ce65479c9afdbf59f6c0f80" name="dvdisaster-docs" arch="noarch">
  <version epoch="0" ver="0.79.10" rel="bp160.1.12"/>
  <changelog author="davejplater@gmail.com" date="1477224000">- Created initial package, version 0.79.5</changelog>
  <changelog author="avindra@opensuse.org" date="1515672000">-  Update to version 0.79.6
  * Verify/Test option will now output dvdisaster version numbers
    always in x.yy.zz format, as the old scheme using x.yy
    (devel|pre|rc|pl)-zz is no longer used.
  * The "medium info" tool will now correctly show the blank
    capacity (was previously always shown as zero)
  * added support for BDXL-TL (triple layer, 100GB)
  * Sector CRC sums and the image MD5 sum are collected during
    reading the medium and can be re-used by the ecc data creation
    process. Speeds up ecc generation and enables RS03 image
    checksums when generating ecc data was preceeded by a read.
- cleanup spec file with spec-cleaner
- rebase dvdisaster-findmake.patch
- add upstream urls to sources
- add pgp signature</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1591358400">- Fix Factory build with gcc10 and add Debian patches:
  29-fix-more-typos.patch, 23-add-bdrom-support.patch,
  34-gcc8-format-security.patch, 02-encryption.patch,
  17-fix-all-but-deprecated-api-warnings.patch,
  10-use-non-size-specific-icon-and-add-keywords-to-desktop-file.patch
  25-fix-man-pages.patch, 14-make-builds-reproducible.patch,
  11-no-cruft.patch, 18-update-copyright-in-about-dialog.patch,
  30-hurd-kfreebsd-ftbfs.patch, 22-fix-hurd-i386-ftbfs.patch,
  03-dvdrom.patch, 37-suggest-dvdisaster-doc.patch,
  13-fix-missing-language-field-in-po-files.patch,
  32-display-compilation-commands.patch,
  28-pdftex-reproducibility.patch, 05-help-dialog.patch,
  27-allow-opening-in-browser-again.patch and
  24-show-gpl3-license.patch
- Created dvdisaster-no-tex.patch to pevent building of existing
  pdf manual.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1642939200">- Add more debian patches:
  12-fix-spelling-of-up-to.patch Added
  15-show-new-pkg-tracker.patch Added
  16-remove-auto-build-of-doco-from-install-rule.patch Added
  19-show-text-files-with-abs-path.patch Added
  20-display-changelog-credits-and-todo.patch Added
  26-fix-display-of-manual.pdf.patch Added
  31-improve-hurd-and-kfreebsd-support.patch Added
  33-honour-LDFLAGS.patch Added
  35-archived-homepage.patch Added
  36-fix-parallelism.patch Added
- Fix boo#1195036 with dvdisaster-g_strdup_printf.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1687694400">- Update to version 0.79.10
- Add dvdisaster-desktop-cat.patch to correct desktop catagory.
- Remove obsolete patches:
  dvdisaster-findmake.patch, 02-encryption.patch, 03-dvdrom.patch,
  05-help-dialog.patch, 08-fix-gnu-make-detection.patch,
  10-use-non-size-specific-icon-and-add-keywords-to-desktop-file.patch,
  11-no-cruft.patch, 12-fix-spelling-of-up-to.patch,
  13-fix-missing-language-field-in-po-files.patch,
  14-make-builds-reproducible.patch, 15-show-new-pkg-tracker.patch,
  16-remove-auto-build-of-doco-from-install-rule.patch,
  17-fix-all-but-deprecated-api-warnings.patch,
  18-update-copyright-in-about-dialog.patch,
  19-show-text-files-with-abs-path.patch,
  20-display-changelog-credits-and-todo.patch,
  22-fix-hurd-i386-ftbfs.patch, 23-add-bdrom-support.patch,
  24-show-gpl3-license.patch, 25-fix-man-pages.patch'
  26-fix-display-of-manual.pdf.patch,
  27-allow-opening-in-browser-again.patch,
  28-pdftex-reproducibility.patch, 29-fix-more-typos.patch,
  30-hurd-kfreebsd-ftbfs.patch,
  31-improve-hurd-and-kfreebsd-support.patch,
  32-display-compilation-commands.patch, 33-honour-LDFLAGS.patch,
  34-gcc8-format-security.patch, 35-archived-homepage.patch,
  36-fix-parallelism.patch, 37-suggest-dvdisaster-doc.patch,
  dvdisaster-no-tex.patch, dvdisaster-g_strdup_printf.patch.
- Upstream changes:
  Many fixes see:
  /usr/share/doc/packages/dvdisaster/CHANGELOG</changelog>
</package>
<package pkgid="1f774c6e81a2869ea7bdda0ad3032ad9728e86ee55259e80c91bc7d3b08857c8a674bf443842c2c415832d43c5eb98a3cdebeb597d9e2f3d7f957d8807676339" name="dvgt" arch="x86_64">
  <version epoch="0" ver="3.51L3" rel="bp160.1.12"/>
  <changelog author="schwab@suse.de" date="1137240000">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1177243200">- use texlive for building</changelog>
  <changelog author="werner@suse.de" date="1205409600">- Minor adoption on new gcc</changelog>
  <changelog author="werner@suse.de" date="1248264000">- Add missed fclose (bnc#524231)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="werner@suse.de" date="1343044800">- Make it build with latest TeXLive 2012</changelog>
  <changelog author="dimstar@opensuse.org" date="1510228800">- Update dvgt-3.51L3.dif: adjust the spelling for README.SUSE (in
  place of README.SuSE).</changelog>
  <changelog author="lcavajani@suse.com" date="1510228801">- Run spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="815692d6ef1922a607be5f4effa75fad908bbe743f0d9c0ffb5fe869905d7ab2d2a99826277b103d6cd5df2a68d0dc2dd309327947f1feb6bc4db6dc243c2a92" name="dwarves" arch="x86_64">
  <version epoch="0" ver="1.27" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1629720000">- Update to release 1.22 (bsc#1190340).
  * Ability to encode BTF to a separate file
  * Multithreaded DWARF loading
  * Details at https://marc.info/?l=dwarves&amp;m=162975403628056&amp;w=2</changelog>
  <changelog author="jengelh@inai.de" date="1638964800">- Update to release 1.23
  * Ability to encode BTF tags.
  * Ability to carry attributes to the kernel BPF verifier for
    further checks.
  * Inference of struct member unnatural alignment
    (__attribute__(__aligned__(N))) to help in generating
    compileable headers matching the original type layout from
    BTF data.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.24:
  * Add support to BTF_KIND_ENUM64 to represent enumeration
    entries with more than 32 bits.
  * Support multithreaded encoding, in addition to DWARF
    multithreaded loading, speeding up the process. Selected just
    like DWARF multithreaded loading, using the 'pahole -j'
    option.
  * Encode 'char' type as signed.
  * Add support to BTF_KIND_ENUM64.
  * Introduce --lang and --lang_exclude to specify the language
    the DWARF compile units were originated from to use or
    filter.
  * Introduce --compile to generate compilable code in a similar
    fashion to: bpftool btf dump file vmlinux format c &gt;
    vmlinux.h As with 'bpftool', this will notice type shadowing,
    i.e. multiple types with the same name and will disambiguate
    by adding a suffix.
  * Don't segfault when processing bogus files.
- add dwarves.keyring for source validation</changelog>
  <changelog author="mliska@suse.cz" date="1676635200">- Add 0001-pahole-Support-lang-lang_exclude-asm.patch,
  0002-btf_encoder-Add-extra-debug-info-for-unsupported-DWA.patch,
  0003-btf_encoder-Store-the-CU-being-processed-to-avoid-ch.patch,
  0004-core-Add-DW_TAG_unspecified_type-to-tag__is_tag_type.patch,
  0005-core-Record-if-a-CU-has-a-DW_TAG_unspecified_type.patch,
  0006-btf_encoder-Encode-DW_TAG_unspecified_type-returning.patch,
  0007-dwarves-Zero-initialize-struct-cu-in-cu__new-to-prev.patch
  as in order to support DW_TAG_unspecified_type that is newly
  emitted by binutils 2.40+.</changelog>
  <changelog author="jengelh@inai.de" date="1680955200">- Update to release 1.25
  * Fixed the handling of DW_TAG_unspecified type in assembly
    functions that came with binutils 2.40
  * Allow the BTF encoding of optimized functions (ending in
    .constprop, .isra),
  * Exclude BTF optimized functions not following the calling
    convention
  * Support for DW_TAG_atomic_type
  * Support for the DW_TAG_LLVM_annotation BTF equivalent
    (BTF_KIND_TYPE_TAG) on the BTF loader and for now suppressing
    it when pretty printing
- Drop 0001-pahole-Support-lang-lang_exclude-asm.patch,
  0002-btf_encoder-Add-extra-debug-info-for-unsupported-DWA.patch,
  0003-btf_encoder-Store-the-CU-being-processed-to-avoid-ch.patch,
  0004-core-Add-DW_TAG_unspecified_type-to-tag__is_tag_type.patch,
  0005-core-Record-if-a-CU-has-a-DW_TAG_unspecified_type.patch,
  0006-btf_encoder-Encode-DW_TAG_unspecified_type-returning.patch,
  0007-dwarves-Zero-initialize-struct-cu-in-cu__new-to-prev.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1696852800">- Fix have_libbpf conditional (jsc#PED-4593 bsc#1216042).</changelog>
  <changelog author="jengelh@inai.de" date="1709121600">- Update to release 1.26
  * Show more holes (the ones in contained types)
  * Ability to express the BTF features to encode</changelog>
  <changelog author="jengelh@inai.de" date="1718193600">- Update to release 1.27
  * Inject kfunc decl tags into BTF from the BTF IDs ELF section
    in the Linux kernel vmlinux file.
  * Support parallel reproducible builds, where it doesn't matter
    how many threads are used, the end BTF encoding result is the
    same.
  * Initial support for BTF_KIND_DECL_TAG
  * Fix pretty-printing of hole discovery with inheritance in C++.</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="dmueller@suse.com" date="1727784000">- fix baselibs.conf</changelog>
</package>
<package pkgid="00bde379e992f91b6a5602954b20209eb264bebae2e56f808eb1f1292b520aee296b78f0096d697be0b11acf603bd6acbc38eac269ab0a7cc033ada5804c73c0" name="dwarves-devel" arch="x86_64">
  <version epoch="0" ver="1.27" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1629720000">- Update to release 1.22 (bsc#1190340).
  * Ability to encode BTF to a separate file
  * Multithreaded DWARF loading
  * Details at https://marc.info/?l=dwarves&amp;m=162975403628056&amp;w=2</changelog>
  <changelog author="jengelh@inai.de" date="1638964800">- Update to release 1.23
  * Ability to encode BTF tags.
  * Ability to carry attributes to the kernel BPF verifier for
    further checks.
  * Inference of struct member unnatural alignment
    (__attribute__(__aligned__(N))) to help in generating
    compileable headers matching the original type layout from
    BTF data.</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.24:
  * Add support to BTF_KIND_ENUM64 to represent enumeration
    entries with more than 32 bits.
  * Support multithreaded encoding, in addition to DWARF
    multithreaded loading, speeding up the process. Selected just
    like DWARF multithreaded loading, using the 'pahole -j'
    option.
  * Encode 'char' type as signed.
  * Add support to BTF_KIND_ENUM64.
  * Introduce --lang and --lang_exclude to specify the language
    the DWARF compile units were originated from to use or
    filter.
  * Introduce --compile to generate compilable code in a similar
    fashion to: bpftool btf dump file vmlinux format c &gt;
    vmlinux.h As with 'bpftool', this will notice type shadowing,
    i.e. multiple types with the same name and will disambiguate
    by adding a suffix.
  * Don't segfault when processing bogus files.
- add dwarves.keyring for source validation</changelog>
  <changelog author="mliska@suse.cz" date="1676635200">- Add 0001-pahole-Support-lang-lang_exclude-asm.patch,
  0002-btf_encoder-Add-extra-debug-info-for-unsupported-DWA.patch,
  0003-btf_encoder-Store-the-CU-being-processed-to-avoid-ch.patch,
  0004-core-Add-DW_TAG_unspecified_type-to-tag__is_tag_type.patch,
  0005-core-Record-if-a-CU-has-a-DW_TAG_unspecified_type.patch,
  0006-btf_encoder-Encode-DW_TAG_unspecified_type-returning.patch,
  0007-dwarves-Zero-initialize-struct-cu-in-cu__new-to-prev.patch
  as in order to support DW_TAG_unspecified_type that is newly
  emitted by binutils 2.40+.</changelog>
  <changelog author="jengelh@inai.de" date="1680955200">- Update to release 1.25
  * Fixed the handling of DW_TAG_unspecified type in assembly
    functions that came with binutils 2.40
  * Allow the BTF encoding of optimized functions (ending in
    .constprop, .isra),
  * Exclude BTF optimized functions not following the calling
    convention
  * Support for DW_TAG_atomic_type
  * Support for the DW_TAG_LLVM_annotation BTF equivalent
    (BTF_KIND_TYPE_TAG) on the BTF loader and for now suppressing
    it when pretty printing
- Drop 0001-pahole-Support-lang-lang_exclude-asm.patch,
  0002-btf_encoder-Add-extra-debug-info-for-unsupported-DWA.patch,
  0003-btf_encoder-Store-the-CU-being-processed-to-avoid-ch.patch,
  0004-core-Add-DW_TAG_unspecified_type-to-tag__is_tag_type.patch,
  0005-core-Record-if-a-CU-has-a-DW_TAG_unspecified_type.patch,
  0006-btf_encoder-Encode-DW_TAG_unspecified_type-returning.patch,
  0007-dwarves-Zero-initialize-struct-cu-in-cu__new-to-prev.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1696852800">- Fix have_libbpf conditional (jsc#PED-4593 bsc#1216042).</changelog>
  <changelog author="jengelh@inai.de" date="1709121600">- Update to release 1.26
  * Show more holes (the ones in contained types)
  * Ability to express the BTF features to encode</changelog>
  <changelog author="jengelh@inai.de" date="1718193600">- Update to release 1.27
  * Inject kfunc decl tags into BTF from the BTF IDs ELF section
    in the Linux kernel vmlinux file.
  * Support parallel reproducible builds, where it doesn't matter
    how many threads are used, the end BTF encoding result is the
    same.
  * Initial support for BTF_KIND_DECL_TAG
  * Fix pretty-printing of hole discovery with inheritance in C++.</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="dmueller@suse.com" date="1727784000">- fix baselibs.conf</changelog>
</package>
<package pkgid="773d3d72af96e1d068831a075d67b8fceaabc9688d441e298dbe1f755f519c3b97c8770fdb23cbd5f827a0c3aa4727de15da60ae7b73e405dcd1f6b1a76e856f" name="dwz" arch="x86_64">
  <version epoch="0" ver="0.15" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1641384000">- Add dwz-remove-odr-struct-multifile.sh.patch that removes problematic
  testcase.</changelog>
  <changelog author="mliska@suse.cz" date="1643803200">- Silent warnings for tramp3d compilation.</changelog>
  <changelog author="mliska@suse.cz" date="1651147200">- Drop binutils-gold dependency for testsuite as binutils-gold
  is deprecated and will be removed in the future.</changelog>
  <changelog author="mliska@suse.cz" date="1662638400">- Add dwz-use-grep-E-instead-of-egrep.patch in order
  to fix build with latest grep package.</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to 0.15 release:
  * Uses xxHash hashing algorithm. A 8% ~ 14% speedup.
  * Set endianity of multifile using -e, --multifile-endian.
  * Set pointer size of multifile using -p, --multifile-pointer-size
  * Process files in parallel using -j N --jobs N. The default is
    processors / 2.  Disabled when multifile is used.
  * Prints abbrev or DIE offset for Unknown DWARF error messages.
  * All testcases have been updated to work against the binutils 2.39.
- Remove upstreamed patches:
  * dwz-fix-another-reference-from-pu-to-cu-for-odr.patch
  * dwz-handle-reordered-dup-chains-in-create-import-tree.patch
  * dwz-testsuite-fix-pr27463.sh-on-riscv64.patch
  * dwz-use-grep-E-instead-of-egrep.patch
- Rebased patches:
  * dwz-remove-odr-struct-multifile.sh.patch
  * dwz-enable-odr-by-default.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1668945600">- Make PGO training independent from number of build machine cores
  (boo#1040589)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="mardnh@gmx.de" date="1734696000">- Use %{SOURCE2} macro instead of hardcoding the source file name/path.
  This makes the spec file compatible with rpmbuild.</changelog>
  <changelog author="tdevries@suse.com" date="1741089600">- Add patch (backport from upstream trunk):
  * dwz-add-support-for-version-9-gdb-index.patch
  * dwz-make-dejagnu-logs-more-elaborate.patch
  * dwz-make-dejagnu-test-names-environment-insensitive.patch
  * dwz-testsuite-fix-finding-gdb-without-which.patch
- Drop patch:
  * dwz-remove-odr-struct-multifile.sh.patch</changelog>
  <changelog author="tdevries@suse.com" date="1747051200">- Add patch (backport from upstream trunk) [swo#32934]:
  * dwz-fix-double-free-in-compute-abbrevs.patch</changelog>
</package>
<package pkgid="001b2a3b5c9fb5db40823d8c1aa62dbcf3738dbc2a081474fe4317fc4d31582ee8152e0c9462978378e02dc6f5de478ba0c4eb734d0908364794d66beade7a27" name="dwz-testsuite" arch="x86_64">
  <version epoch="0" ver="0.15" rel="160000.2.2"/>
  <changelog author="mliska@suse.cz" date="1641384000">- Add dwz-remove-odr-struct-multifile.sh.patch that removes problematic
  testcase.</changelog>
  <changelog author="mliska@suse.cz" date="1643803200">- Silent warnings for tramp3d compilation.</changelog>
  <changelog author="mliska@suse.cz" date="1651147200">- Drop binutils-gold dependency for testsuite as binutils-gold
  is deprecated and will be removed in the future.</changelog>
  <changelog author="mliska@suse.cz" date="1662638400">- Add dwz-use-grep-E-instead-of-egrep.patch in order
  to fix build with latest grep package.</changelog>
  <changelog author="mliska@suse.cz" date="1667822400">- Update to 0.15 release:
  * Uses xxHash hashing algorithm. A 8% ~ 14% speedup.
  * Set endianity of multifile using -e, --multifile-endian.
  * Set pointer size of multifile using -p, --multifile-pointer-size
  * Process files in parallel using -j N --jobs N. The default is
    processors / 2.  Disabled when multifile is used.
  * Prints abbrev or DIE offset for Unknown DWARF error messages.
  * All testcases have been updated to work against the binutils 2.39.
- Remove upstreamed patches:
  * dwz-fix-another-reference-from-pu-to-cu-for-odr.patch
  * dwz-handle-reordered-dup-chains-in-create-import-tree.patch
  * dwz-testsuite-fix-pr27463.sh-on-riscv64.patch
  * dwz-use-grep-E-instead-of-egrep.patch
- Rebased patches:
  * dwz-remove-odr-struct-multifile.sh.patch
  * dwz-enable-odr-by-default.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1668945600">- Make PGO training independent from number of build machine cores
  (boo#1040589)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="mardnh@gmx.de" date="1734696000">- Use %{SOURCE2} macro instead of hardcoding the source file name/path.
  This makes the spec file compatible with rpmbuild.</changelog>
  <changelog author="tdevries@suse.com" date="1741089600">- Add patch (backport from upstream trunk):
  * dwz-add-support-for-version-9-gdb-index.patch
  * dwz-make-dejagnu-logs-more-elaborate.patch
  * dwz-make-dejagnu-test-names-environment-insensitive.patch
  * dwz-testsuite-fix-finding-gdb-without-which.patch
- Drop patch:
  * dwz-remove-odr-struct-multifile.sh.patch</changelog>
  <changelog author="tdevries@suse.com" date="1747051200">- Add patch (backport from upstream trunk) [swo#32934]:
  * dwz-fix-double-free-in-compute-abbrevs.patch</changelog>
</package>
<package pkgid="3ae371d08950b80118dbd074828312906a6f375e8089b8c0823e522042007aa351db409e0b6276893df640ff58dbb6180a9888608f70c5f09985b87e1a7f37c6" name="dynamips" arch="x86_64">
  <version epoch="0" ver="0.2.23" rel="bp160.1.12"/>
  <changelog author="andrea@opensuse.org" date="1458907200">- new upstream version 0.2.16
  * Remove libuuid dependency and NIO Multicast implementation that depends on it.
    NIO Multicast is never used and maybe not even functional.
  * EthernetSwitch: Allow to choose ethertype for QinQ outer tag</changelog>
  <changelog author="mpost@suse.com" date="1488283200">- Added define-s390x-arch.patch to enable building on s390x.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- new upstream version 0.2.17
  * Set nonblocking I/O for UDP sockets
  * NM-16ESW: process packets even if MAC address table is full
- remove dos2unix, no longer needed
- use cmake macros to build</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1577275200">- Update to version 0.2.21
  * Fix SEGV during snprintf and localtime_r.
- Update to version 0.2.20
  * New fix for segmentation fault when using localtime()
- Update to version 0.2.19
  * Fix segmentation fault when using localtime() (64-bit only).
- Update to version 0.2.18
  * Allow to reuse socket in udp_connect.
  * Fix segfault when exporting startup-config.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1653393600">- Update to version 0.2.22
  * Fix stack alignment for JIT function call targets.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1673179200">- update to 0.2.23:
  * Command line option to configure console binding for TCP/AUX console.
  - Fallbacks to the hypervisor binding address if not set.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1673524800">- Update to version 0.2.23
  * Add Command line option to configure console binding for
    TCP/AUX console.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948801">- Set CMAKE_INSTALL_DOCDIR to work around incompatible changes
  added to macros.cmake.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1712577600">- Add empty %check section.</changelog>
</package>
<package pkgid="7d7e7b61b515dcbda4a2b232d460bd5c37859d93ec65677c5cc5a44593df878cf7ec0b3f7f73a4e08cfeb1c7e31ed1d92dd54933599bf6c30a7368b5efb18178" name="dynare" arch="x86_64">
  <version epoch="0" ver="6.2" rel="bp160.1.20"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641988800">- Initial package.
- Add dynare-no-return-in-non-void-function.patch: Return trivial
  value from a function that is not declared as returning void.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1650974400">- Update to version 5.1:
  * Long list of changes, see
    &lt;https://www.dynare.org/new-dynare-release/dynare-5.1-released/&gt;.
- Add dynare-octave7-compat.patch: git commits from upstream to
  support building against octave 7.1; patch touches build files,
  so add BuildRequires: libtool and run autoreconf before
  configure.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656331200">- Add dynare-5.1-gcc-12.patch: Fix build with gcc 12.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1672401600">- Update to version 5.3:
  * Long list of changes, see
    https://www.dynare.org/new-dynare-release/dynare-5.3-released/
- Remove upstream patches:
  * dynare-5.1-gcc-12.patch
  * dynare-octave7-compat.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681128000">- Add dynare-add-missing-include.patch: Add missing includes, now
  exposed by gcc 13.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681300800">- Update to version 5.4:
  * Estimation:
  - The load_results_after_load_mh option would not find the
    location of the results file
  - The computation of prior/posterior statistics would crash if
    the value of the filter step_ahead option was greater than 1
    without requesting a forecast or the smoother
  - NaN or complex parameters returned by steady state files
    were not correctly handled
  - analytical_derivation could be triggered with
    endogenous_prior but would not take the endogenous prior
    into account for the Jacobian and Hessian
  * OccBin:
  - Running the calib_smoother command with
    smoother_inversion_filter would crash unless
    likelihood_inversion_filter was also specified
  - Running the piecewise Kalman smoother would crash if an
    error was encountered during computation of the decision
    rules
  * PAC equation estimation through iterative OLS would crash if
    the auxiliary model contained a constant.
  * The variable label was incorrect for leads and lags of
    exogenous variables in the display of decision rules and in
    the model_info command.
  * Declaring a trend_var variable while not having a
    var(deflator=...) statement would cause the preprocessor to
    crash.
  * Macro processor: error messages following a @#define,
    @#include or @#includepath directive could in some cases point
    to a line number off by 1.
  * Perfect foresight simulations: the debug option would not
    preserve sparsity, causing out of memory errors.
- Make doc packages noarch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 5.5:
  * In a stochastic context, results could be incorrect if an
    endogenous with a lead ⩾ 2 or an exogenous with a lead ⩾ 1
    appeared in the argument(s) of a call to a (nonlinear)
    external function
  * With the use_dll option of the model block, the expression
    sign(x) would evaluate to ±1 instead of 0 if x=0
  * If the guess value given to the steady command was such that
    the residuals were all below tolerance, except some that are
    NaN, then this guess value was incorrectly accepted as the
    solution to the steady state problem
  * The method_of_moments command with GMM was ignoring the
    analytic_standard_errors option when using mode_compute=4
  * Homotopy with the extended_path command at order=0 was broken
  * The parallel_use_psexec command-line option was ignored
  * With the bytecode option of the model block, using the
    operators abs(), cbrt() and sign() would lead to a crash
  * The fast command-line option was broken under MATLAB with
    Windows
  * Ramsey steady state computation could fail if an expectation
    or diff operator was present in the model
  * A crash could occur if some external function call was present
    in an auxiliary variable
  * The endogenous_prior option of the estimation command could
    erroneously display a warning message about missing
    observations
  * The model_comparison command would crash if the .mod file name
    had less than four characters
  * The shock_decomposition command would overwrite previously
    stored smoother results
  * The x13 interface in dseries did not handle missing values,
    particularly at the beginning of a series
  * The x13 interface in dseries would occasionally crash under
    Windows with segmentation violations
  * OccBin: estimation would crash if a previous shocks(surprise)
    simulation was conducted
  * The internals command would not find the location of the
    _results.mat file
  * The prior optimize command would not work with mode_compute=5
- Minor improvement to conditionals specifying the right version
  of gcc to use.
- Drop dynare-add-missing-include.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1706875200">- Update to version 6.0:
  * Long list of changes, see NEWS.md file in %{_docdir}/dynare/
    or online at
    https://git.dynare.org/Dynare/dynare/-/blob/6.0/NEWS.md.
- Drop dynare-no-return-in-non-void-function.patch: fixed
  upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1723032000">- Update to version 6.1:
  * Identification: simulated moments were triggered instead of
    theoretical ones
  * Variance decompositions would crash with measurement errors
    when zero variance shocks were present
  * The handling of Lagrange multipliers in the display of
    problems with the Jacobian was wrong
  * The option auxname was missing in the documentation of the
    pac_model command
  * PAC equation estimation/simulation was crashing in the case of
    composite target
  * The PAC equation estimation would crash if the PAC target was
    a transformed variable
  * The perfect_foresight_with_expectation_errors_solver command
    could return incorrect results when used in conjunction with
    homotopy_linearization_fallback or
    homotopy_marginal_linearization_fallback options
  * For scalar values, the description of the horizon option of
    the var_expectation_model command was incorrect
  * The steady state computation with the bytecode option in a
    Ramsey model was broken
  * OccBin: the piecewise Kalman filter would crash in case of a
    periodic solution
  * The heteroskedastic_filter option of the estimation command
    would cause a crash if there was only one shock
  * The method_of_moments command would crash during the J-test
    for just and underidentified models
  * User-defined warning settings were internally overwritten with
    the method_of_moments command or the piecewise Kalman filter
  * The SMC sampler would crash if any of the bayesian_irf,
    moments_varendo, or smoother options of the estimation command
    had been specified
  * The bvar_irf command would ignore the SquareRoot option and
    instead employ a Cholesky decomposition
  * The univariate Kalman filter erroneously treated observations
    with negative prediction variances due to numerical issues as
    missing values instead of discarding the parameter draw
  * A new homotopy_exclude_varexo option to the
    perfect_foresight_solver command has been added, to exclude
    some exogenous variables from the homotopy procedure (i.e. to
    keep them at their value corresponding to 100% of the shock
    during all homotopy iterations).
- Add _service file to allow inclusion of submodules in source
  tarball.
- Switch to meson based build.
- Add dynare-libdir.patch: Use meson detected system libdir
  instead of hard-coded 'lib'.
- New dependency: slicot-devel-static.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1728820800">- Update to version 6.2:
  * Compatibility: Compatible with octave 9.2.0.
  * Bugs fixed:
  - The mixed complementarity problem (MCP) solver could fail or
    give wrong results in some cases where there were multiple
    complementarity conditions
  - The qmc_sequence MEX file from the macOS package would fail
    to load
  - OccBin forecasts would crash in case of shocks with zero
    variance
  - OccBin smoother would crash if simulation did not converge
  - Computation of posterior moments could crash in large models
  - The auxiliary particle filter and the Liu &amp; West online
    filter (mode_compute=11) required the Statistics Toolbox
  - The auxiliary particle filter and the Liu &amp; West online
    filter (mode_compute=11) would not work with the
    discretionary_policy command
  - The discretionary_policy command would crash if there were
    fewer than two exogenous variables
  - Using the forecast command with a model solved at order&gt;1
    without varexo_det would return forecasts based on a first
    order approximation instead of providing an error message
  - Using the forecast command with a model solved at order=2
    with varexo_det and pruning would return forecasts without
    pruning instead of providing an error message
  - Using the forecast command with a model solved at order=3
    would crash SMC methods could return wrong posterior results
    if the Parallel Toolbox was installed
  - The Herbst-Schorfheide SMC sampler would crash at order&gt;1
  - Annualized shock decomposition would not output results if
    desired vintage date did not coincide to an end-of-the-year
    Q4 period
  - Using rand_multivariate_student as the proposal density in
    the tailored_random_block_metropolis_hastings posterior
    sampler would return wrong results
  - The onlyclearglobals of the dynare command was not working
    as intended
  - The det_cond_forecast command would crash with plans
    including only expected shocks
  - Estimation could crash in some rare cases when computing the
    2nd order moments of prior or posterior distribution
  - Successive calls of the Herbst-Schorfheide SMC sampler could
    crash due to some stale files being left on disk
  - The shock decomposition plot could be wrong in the presence
    of leads/lags on exogenous variables, or when the steady
    state is squeezed
- Add dynare-sphinx-str-concat.patch: Fix path to string
  concatenation when building sphinx documentation.</changelog>
</package>
<package pkgid="1e1f0a8d5134a2a100e48d77ae64776188d3c4c9d45a34424fa13ac4588725cc8121b7da1600e2f471427209a7db07835aa3406310b6cc19b0291ea219965bcc" name="dynare-doc-html" arch="noarch">
  <version epoch="0" ver="6.2" rel="bp160.1.20"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641988800">- Initial package.
- Add dynare-no-return-in-non-void-function.patch: Return trivial
  value from a function that is not declared as returning void.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1650974400">- Update to version 5.1:
  * Long list of changes, see
    &lt;https://www.dynare.org/new-dynare-release/dynare-5.1-released/&gt;.
- Add dynare-octave7-compat.patch: git commits from upstream to
  support building against octave 7.1; patch touches build files,
  so add BuildRequires: libtool and run autoreconf before
  configure.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656331200">- Add dynare-5.1-gcc-12.patch: Fix build with gcc 12.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1672401600">- Update to version 5.3:
  * Long list of changes, see
    https://www.dynare.org/new-dynare-release/dynare-5.3-released/
- Remove upstream patches:
  * dynare-5.1-gcc-12.patch
  * dynare-octave7-compat.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681128000">- Add dynare-add-missing-include.patch: Add missing includes, now
  exposed by gcc 13.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681300800">- Update to version 5.4:
  * Estimation:
  - The load_results_after_load_mh option would not find the
    location of the results file
  - The computation of prior/posterior statistics would crash if
    the value of the filter step_ahead option was greater than 1
    without requesting a forecast or the smoother
  - NaN or complex parameters returned by steady state files
    were not correctly handled
  - analytical_derivation could be triggered with
    endogenous_prior but would not take the endogenous prior
    into account for the Jacobian and Hessian
  * OccBin:
  - Running the calib_smoother command with
    smoother_inversion_filter would crash unless
    likelihood_inversion_filter was also specified
  - Running the piecewise Kalman smoother would crash if an
    error was encountered during computation of the decision
    rules
  * PAC equation estimation through iterative OLS would crash if
    the auxiliary model contained a constant.
  * The variable label was incorrect for leads and lags of
    exogenous variables in the display of decision rules and in
    the model_info command.
  * Declaring a trend_var variable while not having a
    var(deflator=...) statement would cause the preprocessor to
    crash.
  * Macro processor: error messages following a @#define,
    @#include or @#includepath directive could in some cases point
    to a line number off by 1.
  * Perfect foresight simulations: the debug option would not
    preserve sparsity, causing out of memory errors.
- Make doc packages noarch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 5.5:
  * In a stochastic context, results could be incorrect if an
    endogenous with a lead ⩾ 2 or an exogenous with a lead ⩾ 1
    appeared in the argument(s) of a call to a (nonlinear)
    external function
  * With the use_dll option of the model block, the expression
    sign(x) would evaluate to ±1 instead of 0 if x=0
  * If the guess value given to the steady command was such that
    the residuals were all below tolerance, except some that are
    NaN, then this guess value was incorrectly accepted as the
    solution to the steady state problem
  * The method_of_moments command with GMM was ignoring the
    analytic_standard_errors option when using mode_compute=4
  * Homotopy with the extended_path command at order=0 was broken
  * The parallel_use_psexec command-line option was ignored
  * With the bytecode option of the model block, using the
    operators abs(), cbrt() and sign() would lead to a crash
  * The fast command-line option was broken under MATLAB with
    Windows
  * Ramsey steady state computation could fail if an expectation
    or diff operator was present in the model
  * A crash could occur if some external function call was present
    in an auxiliary variable
  * The endogenous_prior option of the estimation command could
    erroneously display a warning message about missing
    observations
  * The model_comparison command would crash if the .mod file name
    had less than four characters
  * The shock_decomposition command would overwrite previously
    stored smoother results
  * The x13 interface in dseries did not handle missing values,
    particularly at the beginning of a series
  * The x13 interface in dseries would occasionally crash under
    Windows with segmentation violations
  * OccBin: estimation would crash if a previous shocks(surprise)
    simulation was conducted
  * The internals command would not find the location of the
    _results.mat file
  * The prior optimize command would not work with mode_compute=5
- Minor improvement to conditionals specifying the right version
  of gcc to use.
- Drop dynare-add-missing-include.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1706875200">- Update to version 6.0:
  * Long list of changes, see NEWS.md file in %{_docdir}/dynare/
    or online at
    https://git.dynare.org/Dynare/dynare/-/blob/6.0/NEWS.md.
- Drop dynare-no-return-in-non-void-function.patch: fixed
  upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1723032000">- Update to version 6.1:
  * Identification: simulated moments were triggered instead of
    theoretical ones
  * Variance decompositions would crash with measurement errors
    when zero variance shocks were present
  * The handling of Lagrange multipliers in the display of
    problems with the Jacobian was wrong
  * The option auxname was missing in the documentation of the
    pac_model command
  * PAC equation estimation/simulation was crashing in the case of
    composite target
  * The PAC equation estimation would crash if the PAC target was
    a transformed variable
  * The perfect_foresight_with_expectation_errors_solver command
    could return incorrect results when used in conjunction with
    homotopy_linearization_fallback or
    homotopy_marginal_linearization_fallback options
  * For scalar values, the description of the horizon option of
    the var_expectation_model command was incorrect
  * The steady state computation with the bytecode option in a
    Ramsey model was broken
  * OccBin: the piecewise Kalman filter would crash in case of a
    periodic solution
  * The heteroskedastic_filter option of the estimation command
    would cause a crash if there was only one shock
  * The method_of_moments command would crash during the J-test
    for just and underidentified models
  * User-defined warning settings were internally overwritten with
    the method_of_moments command or the piecewise Kalman filter
  * The SMC sampler would crash if any of the bayesian_irf,
    moments_varendo, or smoother options of the estimation command
    had been specified
  * The bvar_irf command would ignore the SquareRoot option and
    instead employ a Cholesky decomposition
  * The univariate Kalman filter erroneously treated observations
    with negative prediction variances due to numerical issues as
    missing values instead of discarding the parameter draw
  * A new homotopy_exclude_varexo option to the
    perfect_foresight_solver command has been added, to exclude
    some exogenous variables from the homotopy procedure (i.e. to
    keep them at their value corresponding to 100% of the shock
    during all homotopy iterations).
- Add _service file to allow inclusion of submodules in source
  tarball.
- Switch to meson based build.
- Add dynare-libdir.patch: Use meson detected system libdir
  instead of hard-coded 'lib'.
- New dependency: slicot-devel-static.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1728820800">- Update to version 6.2:
  * Compatibility: Compatible with octave 9.2.0.
  * Bugs fixed:
  - The mixed complementarity problem (MCP) solver could fail or
    give wrong results in some cases where there were multiple
    complementarity conditions
  - The qmc_sequence MEX file from the macOS package would fail
    to load
  - OccBin forecasts would crash in case of shocks with zero
    variance
  - OccBin smoother would crash if simulation did not converge
  - Computation of posterior moments could crash in large models
  - The auxiliary particle filter and the Liu &amp; West online
    filter (mode_compute=11) required the Statistics Toolbox
  - The auxiliary particle filter and the Liu &amp; West online
    filter (mode_compute=11) would not work with the
    discretionary_policy command
  - The discretionary_policy command would crash if there were
    fewer than two exogenous variables
  - Using the forecast command with a model solved at order&gt;1
    without varexo_det would return forecasts based on a first
    order approximation instead of providing an error message
  - Using the forecast command with a model solved at order=2
    with varexo_det and pruning would return forecasts without
    pruning instead of providing an error message
  - Using the forecast command with a model solved at order=3
    would crash SMC methods could return wrong posterior results
    if the Parallel Toolbox was installed
  - The Herbst-Schorfheide SMC sampler would crash at order&gt;1
  - Annualized shock decomposition would not output results if
    desired vintage date did not coincide to an end-of-the-year
    Q4 period
  - Using rand_multivariate_student as the proposal density in
    the tailored_random_block_metropolis_hastings posterior
    sampler would return wrong results
  - The onlyclearglobals of the dynare command was not working
    as intended
  - The det_cond_forecast command would crash with plans
    including only expected shocks
  - Estimation could crash in some rare cases when computing the
    2nd order moments of prior or posterior distribution
  - Successive calls of the Herbst-Schorfheide SMC sampler could
    crash due to some stale files being left on disk
  - The shock decomposition plot could be wrong in the presence
    of leads/lags on exogenous variables, or when the steady
    state is squeezed
- Add dynare-sphinx-str-concat.patch: Fix path to string
  concatenation when building sphinx documentation.</changelog>
</package>
<package pkgid="0ed8a40f594ef79419f87a124158c2946778bad0484ebb9421e1e28c1aa409c8f2771242909fe2ce6206035d85783966eca114b85b9953950c8ba879a246584a" name="dynare-doc-pdf" arch="noarch">
  <version epoch="0" ver="6.2" rel="bp160.1.20"/>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1641988800">- Initial package.
- Add dynare-no-return-in-non-void-function.patch: Return trivial
  value from a function that is not declared as returning void.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1650974400">- Update to version 5.1:
  * Long list of changes, see
    &lt;https://www.dynare.org/new-dynare-release/dynare-5.1-released/&gt;.
- Add dynare-octave7-compat.patch: git commits from upstream to
  support building against octave 7.1; patch touches build files,
  so add BuildRequires: libtool and run autoreconf before
  configure.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1656331200">- Add dynare-5.1-gcc-12.patch: Fix build with gcc 12.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1672401600">- Update to version 5.3:
  * Long list of changes, see
    https://www.dynare.org/new-dynare-release/dynare-5.3-released/
- Remove upstream patches:
  * dynare-5.1-gcc-12.patch
  * dynare-octave7-compat.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1681128000">- Add dynare-add-missing-include.patch: Add missing includes, now
  exposed by gcc 13.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1681300800">- Update to version 5.4:
  * Estimation:
  - The load_results_after_load_mh option would not find the
    location of the results file
  - The computation of prior/posterior statistics would crash if
    the value of the filter step_ahead option was greater than 1
    without requesting a forecast or the smoother
  - NaN or complex parameters returned by steady state files
    were not correctly handled
  - analytical_derivation could be triggered with
    endogenous_prior but would not take the endogenous prior
    into account for the Jacobian and Hessian
  * OccBin:
  - Running the calib_smoother command with
    smoother_inversion_filter would crash unless
    likelihood_inversion_filter was also specified
  - Running the piecewise Kalman smoother would crash if an
    error was encountered during computation of the decision
    rules
  * PAC equation estimation through iterative OLS would crash if
    the auxiliary model contained a constant.
  * The variable label was incorrect for leads and lags of
    exogenous variables in the display of decision rules and in
    the model_info command.
  * Declaring a trend_var variable while not having a
    var(deflator=...) statement would cause the preprocessor to
    crash.
  * Macro processor: error messages following a @#define,
    @#include or @#includepath directive could in some cases point
    to a line number off by 1.
  * Perfect foresight simulations: the debug option would not
    preserve sparsity, causing out of memory errors.
- Make doc packages noarch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1700654400">- Update to version 5.5:
  * In a stochastic context, results could be incorrect if an
    endogenous with a lead ⩾ 2 or an exogenous with a lead ⩾ 1
    appeared in the argument(s) of a call to a (nonlinear)
    external function
  * With the use_dll option of the model block, the expression
    sign(x) would evaluate to ±1 instead of 0 if x=0
  * If the guess value given to the steady command was such that
    the residuals were all below tolerance, except some that are
    NaN, then this guess value was incorrectly accepted as the
    solution to the steady state problem
  * The method_of_moments command with GMM was ignoring the
    analytic_standard_errors option when using mode_compute=4
  * Homotopy with the extended_path command at order=0 was broken
  * The parallel_use_psexec command-line option was ignored
  * With the bytecode option of the model block, using the
    operators abs(), cbrt() and sign() would lead to a crash
  * The fast command-line option was broken under MATLAB with
    Windows
  * Ramsey steady state computation could fail if an expectation
    or diff operator was present in the model
  * A crash could occur if some external function call was present
    in an auxiliary variable
  * The endogenous_prior option of the estimation command could
    erroneously display a warning message about missing
    observations
  * The model_comparison command would crash if the .mod file name
    had less than four characters
  * The shock_decomposition command would overwrite previously
    stored smoother results
  * The x13 interface in dseries did not handle missing values,
    particularly at the beginning of a series
  * The x13 interface in dseries would occasionally crash under
    Windows with segmentation violations
  * OccBin: estimation would crash if a previous shocks(surprise)
    simulation was conducted
  * The internals command would not find the location of the
    _results.mat file
  * The prior optimize command would not work with mode_compute=5
- Minor improvement to conditionals specifying the right version
  of gcc to use.
- Drop dynare-add-missing-include.patch: upstreamed.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1706875200">- Update to version 6.0:
  * Long list of changes, see NEWS.md file in %{_docdir}/dynare/
    or online at
    https://git.dynare.org/Dynare/dynare/-/blob/6.0/NEWS.md.
- Drop dynare-no-return-in-non-void-function.patch: fixed
  upstream.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1723032000">- Update to version 6.1:
  * Identification: simulated moments were triggered instead of
    theoretical ones
  * Variance decompositions would crash with measurement errors
    when zero variance shocks were present
  * The handling of Lagrange multipliers in the display of
    problems with the Jacobian was wrong
  * The option auxname was missing in the documentation of the
    pac_model command
  * PAC equation estimation/simulation was crashing in the case of
    composite target
  * The PAC equation estimation would crash if the PAC target was
    a transformed variable
  * The perfect_foresight_with_expectation_errors_solver command
    could return incorrect results when used in conjunction with
    homotopy_linearization_fallback or
    homotopy_marginal_linearization_fallback options
  * For scalar values, the description of the horizon option of
    the var_expectation_model command was incorrect
  * The steady state computation with the bytecode option in a
    Ramsey model was broken
  * OccBin: the piecewise Kalman filter would crash in case of a
    periodic solution
  * The heteroskedastic_filter option of the estimation command
    would cause a crash if there was only one shock
  * The method_of_moments command would crash during the J-test
    for just and underidentified models
  * User-defined warning settings were internally overwritten with
    the method_of_moments command or the piecewise Kalman filter
  * The SMC sampler would crash if any of the bayesian_irf,
    moments_varendo, or smoother options of the estimation command
    had been specified
  * The bvar_irf command would ignore the SquareRoot option and
    instead employ a Cholesky decomposition
  * The univariate Kalman filter erroneously treated observations
    with negative prediction variances due to numerical issues as
    missing values instead of discarding the parameter draw
  * A new homotopy_exclude_varexo option to the
    perfect_foresight_solver command has been added, to exclude
    some exogenous variables from the homotopy procedure (i.e. to
    keep them at their value corresponding to 100% of the shock
    during all homotopy iterations).
- Add _service file to allow inclusion of submodules in source
  tarball.
- Switch to meson based build.
- Add dynare-libdir.patch: Use meson detected system libdir
  instead of hard-coded 'lib'.
- New dependency: slicot-devel-static.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1728820800">- Update to version 6.2:
  * Compatibility: Compatible with octave 9.2.0.
  * Bugs fixed:
  - The mixed complementarity problem (MCP) solver could fail or
    give wrong results in some cases where there were multiple
    complementarity conditions
  - The qmc_sequence MEX file from the macOS package would fail
    to load
  - OccBin forecasts would crash in case of shocks with zero
    variance
  - OccBin smoother would crash if simulation did not converge
  - Computation of posterior moments could crash in large models
  - The auxiliary particle filter and the Liu &amp; West online
    filter (mode_compute=11) required the Statistics Toolbox
  - The auxiliary particle filter and the Liu &amp; West online
    filter (mode_compute=11) would not work with the
    discretionary_policy command
  - The discretionary_policy command would crash if there were
    fewer than two exogenous variables
  - Using the forecast command with a model solved at order&gt;1
    without varexo_det would return forecasts based on a first
    order approximation instead of providing an error message
  - Using the forecast command with a model solved at order=2
    with varexo_det and pruning would return forecasts without
    pruning instead of providing an error message
  - Using the forecast command with a model solved at order=3
    would crash SMC methods could return wrong posterior results
    if the Parallel Toolbox was installed
  - The Herbst-Schorfheide SMC sampler would crash at order&gt;1
  - Annualized shock decomposition would not output results if
    desired vintage date did not coincide to an end-of-the-year
    Q4 period
  - Using rand_multivariate_student as the proposal density in
    the tailored_random_block_metropolis_hastings posterior
    sampler would return wrong results
  - The onlyclearglobals of the dynare command was not working
    as intended
  - The det_cond_forecast command would crash with plans
    including only expected shocks
  - Estimation could crash in some rare cases when computing the
    2nd order moments of prior or posterior distribution
  - Successive calls of the Herbst-Schorfheide SMC sampler could
    crash due to some stale files being left on disk
  - The shock decomposition plot could be wrong in the presence
    of leads/lags on exogenous variables, or when the steady
    state is squeezed
- Add dynare-sphinx-str-concat.patch: Fix path to string
  concatenation when building sphinx documentation.</changelog>
</package>
<package pkgid="e36e875c81b36a470c545fcd003caf0940df4cb40c6b2f6d466690a7f1ef7b6334439cd77c878b4d32846d166816cc6c9c7111e34b821016fd5f8aef8465c11e" name="dysk" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="bp160.1.13"/>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1696852800">- new package dysk: like df but better</changelog>
  <changelog author="kastl@b1-systems.de" date="1696939200">- Update to version 2.8.1:
  * require rust 1.70 because that's what clap requests
  * cleaner web site
  * prevent dysk version mismatch
  * fix version display</changelog>
  <changelog author="kastl@b1-systems.de" date="1697716800">- Update to version 2.8.2:
  * fix publish
  * version 2.8.2
  * add link to contributing rules in website</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717502400">- Update to version 2.9.0:
  * free_percent column</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1726315200">- Update to version 2.9.1:
  * version 2.9.1
  * use base-2 logs to retrieve binary prefixes
  * add free_percent column to tests</changelog>
</package>
<package pkgid="0289398db28a8d2d0d9e3ba9dc23709bc0751dc3bed4ca3ab1476cfe3c4fc215d0fc3edb5e3790836850a37299215db2e92f47ceed89933debe3b315f5ebbecb" name="e-antic-devel" arch="x86_64">
  <version epoch="0" ver="2.0.2" rel="bp160.1.14"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644494400">- Update to release 1.1.0
  * Added support for Python 3.10; dropped explicit support for
    Python 3.6.
  * Header file e-antic.h is now called local.h. There is still a
    header file e-antic.h that includes all of e-antic's C
    interface, so in particular local.h.
  * Header file renfxx_fwd.hpp is now called forward.hpp. The old
    header file renfxx_fwd.hpp can still be used.
  * Header file renfxx.h is now called e-antic.hpp. The old
    header file renfxx.h can still be used.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1649592000">- Update to release 1.2.0
  * Improved conversion from vectors of rational coefficients to
    renf_elem_class by using a faster code path in FLINT.
  * Improved conversion from SageMath number fields to pyeantic
    RealEmbeddedNumberField. This adds a dependency of pyeantic
    on gmpxxyy.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1653048000">- Update to release 1.2.1
  * Fixed serialization of renf_class with cereal&gt;=1.3.2
  * Fixed deserialization of objects serialized with e-antic
    prior to 1.0.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666699200">- Update to release 1.2.2
  * Fixed conda channels used for binder notebooks.
  * Fixed deserialization of renf_class from old Python pickles.
  * Fixed serialization with cereal 1.3.1+.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666699201">- Update to release 1.2.3
  * Library version bump was missing</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670328000">- Update to release 1.3.0
  * Added support for FLINT 2.8 and 2.9
  * Added short and unsigned short operators to C++ interface.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1697976000">- Add flint3.diff to have the build succeed with flint-3.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1702555200">- Update to release 2.0.0
  * Added support for FLINT 3
- Drop flint3.diff (obsolete)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1704801600">- Update to release 2.0.1
  * Fixed segfault when using non-intrusive pointers to renf_class
    such as the ones returned by parent() from Python.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1704974400">- Update to release 2.0.2
  * Fixed an exception being thrown when run under PyPy
    (github.com/wlav/cppyy/issues/209)</changelog>
</package>
<package pkgid="7dc2ff4b8404dc40ff997e1be57089164dc78640847ee22c9eb62e2da93968e6c114548e34947cf7b2299eb14c9a90b17c36aaed10da3853fad79e42188a8e4b" name="e16" arch="x86_64">
  <version epoch="0" ver="1.0.24" rel="bp160.1.6"/>
  <changelog author="sleep_walker@opensuse.org" date="1444392000">- add cairo as build requirement
- add harfbuzz as build requirement</changelog>
  <changelog author="sflees@suse.de" date="1494417600">- Update to 1.0.18 - warnings / autotools fixes</changelog>
  <changelog author="simonf.lees@suse.com" date="1497614400">- Fix license should be MIT-advertising and GPL-2.0+</changelog>
  <changelog author="dimstar@opensuse.org" date="1506513600">- Fixup sound dependencies: we pass --enable-sound to configure,
  which, according to configure, implies 'pulseaudio' (unless
  specified as --enable-sound=esound).
  + Drop esound-devel BuildRequires: not needed, since we never
    passed --enable-sound=esound to configure.
  + Drop pkgconfig(alas) BuildRequires: no needed, since e16 has no
    alsa support.
  + Add pkgconfig(libpulse) BuildRequires: Enable the implied sound
    module for 16.
- Toggle with_sound to 0, until somebody actually fixes the build
  with PulseAudio (note: this is defacto the same as we had before
  as the dependencies were simply not in place and configure
  silently switched off --enable-sound).</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1559131200">- Update to 16.0.19
  * Fix focus after slide-in
  * Fix issue with initially shaded windows in certain cases
  * Add new macros for theming in 'definitions'
  * Update the restart cursor which looked a bit dated
  * Do proper rendering of transparent icons in menus
  * Fix magnifier pixel value display
  * Remove long disabled pseudotransparency support
  * Fix focus-if-group-focused cases
  * (warning) fixes for gcc8
  * (warning) fixes for recent support package versions
  * autotool updates
- use %license macro
- add fix-compile-gtk.patch as a hack for pango dropping gobj
  flags</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1559476800">- Trim bias and filler wording from description.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1567684800">- Update to 16.0.20
  * Theming macro updates (Don Harrop)
  * Warning fixes for gcc 9
  * Fix transient placement involving desk/area change
  * GSOD: Fix restart after choosing Restart on e.g. segv
  * GSOD: Better keyboard grab
  * Don't do double-clicks on scroll wheel events
  * Correct refresh when switching away from background "None"
  * Restore background to last set if quitting background selector
  * Fix memory leak in pulseaudio sound loader
  * Fix potential segv in pulseaudio sound handler
  * Fix compositing glitches with tiled backgrounds
  * Make config dialog edge flip mode changes take effect immediately
  * Add gobject-2.0 dependency in case pango doesn't include it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1577966400">- Add sndio sound back end for OpenBSD
- Menu generation speedups</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1625486400">- Update to 1.0.23
  * Add option to allow only the primary mouse button to raise windows
  * Use poll() for event handling by default
  * Allow users to override fonts via ~/.e16/fonts/
  * bindings: Add 'W' as alias for modifier 4
  * Enable sounds in combined configuration dialog
  * Optionally play sounds using audio player
  * Avoid potential crash when attempting to enable sound
  * Add alsa-lib sound backend
  * Various bugfixes
  * Add sndio sound back end for OpenBSD
  * Menu generation speedups
  * Translation updates: fr
- Refreshed fix-compile-gtk.patch
- Run spec cleaner</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1645704000">- Update to 1.0.24
  * Pagers: Remember zoom setting when changed by pager menu
  * Systray: Change default icon size to 32
  * Support _NET_WM_STATE_FOCUSED
  * Focus: Fix focus on new clients requesting max size
  * Fix bad memory access during shutdown
  * FX (waves/ripples): Make it work in compositing mode
  * Sound: Enable having multiple engines and changing it at runtime
  * Translation updates: fr, da
- Refreshed fix-compile-gtk.patch</changelog>
</package>
<package pkgid="a3b05ba6db29c8a44ae3919b724fb8fd3b98d0767629119c2f333d6178cf10e52dda5b6235fb08ef6069540ee9f73f29235cf8a70d1ec8efe5cd828fe319d165" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="160000.3.2"/>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="lhenriques@suse.com" date="1705060800">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck:
  Suppress "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="d28c8dc2724dc45c753e298cf237de8f96875f0d7ab4329ad9d8d2c0c6a2576ac602fb953b07f7e4080a8db9d626bb7d06297d060243166767f3ea545f342c6f" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="160000.3.2"/>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="lhenriques@suse.com" date="1705060800">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck:
  Suppress "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="7564d6d1404be5f2ceb8579363978f413617dbb966ba91dc80965e47ca6418ce262cf59f1136c77b9acc2beee2ab775d914985c4a6a6c765dec0c9f53bf8cf04" name="e2fsprogs-scrub" arch="x86_64">
  <version epoch="0" ver="1.47.0" rel="160000.3.2"/>
  <changelog author="jack@suse.cz" date="1643371200">- Update to 1.46.5:
  * better handling for resizing to fs sizes which would exceed inode limits
  * fix crash in e2fsck fastcommit handling
  * fix possibly lost quota limits when e2fsck corrects quota files
  * fix tune2fs to properly transfer quota limits when convertion quota files
  * add support for handling of version 0 quota files in tune2fs
  * teach libss to use libreadline.so.8
  * optimize resize2fs cpu usage for large filesystems
  * teach libuuid to use getrandom() or getentropy() if available
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: Remove, merged upstream
- quota-Add-support-to-version-0-quota-format.patch: Remove, merged upstream
- quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: Remove, merged upstream
- quota-Rename-quota_update_limits-to-quota_read_all_d.patch: Remove, merged upstream
- tune2fs-Fix-conversion-of-quota-files.patch: Remove, merged upstream
- e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: Remove, merged upstream
- debugfs-Fix-headers-for-quota-commands.patch: Remove, merged upstream
- quota-Drop-dead-code.patch: Remove, merged upstream</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- avoid empty preuninstall script</changelog>
  <changelog author="cgoll@suse.com" date="1663070400">- enabled fuse2fs build which enable to mount ext2/3/4 via FUSE</changelog>
  <changelog author="dimstar@opensuse.org" date="1663156800">- Spec file cleanup:
  + Drop remainders regarding -mini packages, which was not a thing
    since Jan 2014.
  + Split build of fuse2fs out into a sep build (_multibuild
    enabled).</changelog>
  <changelog author="dimstar@opensuse.org" date="1663243200">- Refresh e2fsprogs.keyring based on currently provided keys.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1675857600">- Update to 1.47.0:
  * Add support for the orphan_file feature, which speeds up workloads
    that are deleting or truncating a large number files in parallel.
    This compat feature was first supported in the v5.15 Linux kernel.
  * The mke2fs program (via the mke2fs.conf file) now enables the
    metadata_csum_seed and orphan_file features by default.
    The metadata_csum_seed feature is an incompat feature which is
    first supported in the Linux kernel starting in the 4.4 kernel.
  * Mke2fs now supports the extended option "assume_storage_prezeroed"
    which causes mke2fs to skip zeroing the journal and inode tables
    and to mark the inode tables as zeroed.
  * Add support to tune2fs and e2label to set the label and UUID for
    a mounted file system using a ioctl, which is more reliable than
    modifying the superblock via writing to the block device.
    The kernel support for setting the label landed in v5.17, while
    the support for adding the UUID landed in v6.0. If the ioctls
    are not supported, tune2fs and e2label will fall back old
    strategy of directly modifying the superblock.
  * Allow tune2fs to disable the casefold feature after scanning all
    of the directories do not have the Casefold flag set.</changelog>
  <changelog author="jack@suse.cz" date="1696420800">- Update specfile to make sure regenerate_initrd_post macro is defined</changelog>
  <changelog author="lhenriques@suse.com" date="1705060800">- e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck:
  Suppress "orphan file is clean" message in preen mode (bsc#1218747)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="8687bbb11aa0a9480d172d3dcce259428bb05f4f9770ee54d5b0fd555cde14b1f5fd9662637f3bf538f81f3de1c9c83f3aaafb8bf746ded2f318630be74f519a" name="eac-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="160000.2.2"/>
  <changelog author="mardnh@gmx.de" date="1709985600">- Initial package, version 1.1.3</changelog>
</package>
<package pkgid="1912ac3e8802cf37f9d39e787711485891820dfb065f216d412504a574785deac680f33762603d0bb535c7915abac85857a03a0c02176fe27721e7fba8f60627" name="earlyoom" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="bp160.1.12"/>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 1.6.1:
  * Clean up dbus-send zombie processes
  * Skip processes with oom_score_adj=-1000</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1599134400">- Drop dependency on insserv-compat
  The sysvinit script is not shipped so this dependency on this
  obsolete package is not needed and can be removed.</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1600344000">- Enable tests on x86_64 &amp; ARM
- change reporting interval to never
- remove calls to systemctl in make install
- change LDFLAGS handling via env variables</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1606996800">- New upstream release 1.6.2
  * Double-check memory situation before killing victim ([commit](https://github.com/rfjakob/earlyoom/commit/e34e0fcec5d9f60eb19a48a3ec2bab175818fdd8))
  * Never terminate ourselves ([#205](https://github.com/rfjakob/earlyoom/issues/205))
  * Dump buffer on /proc/meminfo conversion error ([#214](https://github.com/rfjakob/earlyoom/issues/214))
- Remove invalid Recommends of libnotify-tools (boo#1179537)
- disable tests
- add link from /sbin/rcearlyoom to /sbin/service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620388800">- Package pre-built earlyoom.1 as pandoc / haskell is not supported
  on all archs.
- Drop pandoc BuildRequires.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1637236800">- Added GeckoMain in --prefer parameter. (firefox name process)
- Removed firefox and chromium in --prefer parameter. (irrelevant)</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1652875200">- Refreshed spec-file via spec-cleaner and manual optimizated.
  * Reduced to the standard github URL.
  * Added -p flag to all install commands.
- Updated file earlyoom.sysconfig with actual firefox process names.
- Updated to 1.7
  * Changed file earlyoom.1 (MANPAGE.md -s -t man &gt; earlyoom.1).
  * https://github.com/rfjakob/earlyoom#changelog
  * Added -N flag to run a script every time a process is killed.
  * Added -g flag to kill whole process group.
  * Removed -i flag, it does not work properly on Linux kernels 5.9+.
  * Droped ambient capabilities on startup.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1713268800">- Updated to 1.8
  * Changed file earlyoom.1 (MANPAGE.md -s -t man &gt; earlyoom.1).
  * https://github.com/rfjakob/earlyoom#changelog
  * Introduce user mem total / meminfo_t.UserMemTotal and
    calculate MemAvailablePercent.
  * Added NO_COLOR support.
  * Fixed handling of processes with a zombie main thread.
  * Added --sort-by-rss. This will select a process to kill acc
    to the largest RSS instead of largest oom_score.</changelog>
  <changelog author="David B &lt;db@mail25.net&gt;" date="1713441600">- Removed -p flag from configuration (ineffective for systemd unit).</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1715515200">- Manual optimizations in spec-file.
- Updated to 1.8.2
  * Changed file earlyoom.1 (MANPAGE.md -s -t man &gt; earlyoom.1).
  * https://github.com/rfjakob/earlyoom#changelog
  * Fixed crash with -p flag in config and IPAddressDeny syntax.</changelog>
</package>
<package pkgid="f4ab6ef3550318ae033cfc19292a36f3f657ece12f1315d6cf43c89f3ddf25d4c742e89fde56a0ffdf79e41d320eb23a7f83699005e541183c26530bb2ff23eb" name="easy-rsa" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="bp160.1.9"/>
  <changelog author="chris@computersalat.de" date="1543579200">- update to 3.0.5
  * Fix #17 &amp; #58: use AES256 for CA key
  * Also, don't use read -s, use stty -echo
  * Fix broken "nopass" option
  * Add -r to read to stop errors reported by shellcheck (and to behave)
  * remove overzealous quotes around $pkcs_opts (more SC errors)
- update and rebase suse-packaging.patch
  * fix: set_var EASYRSA in vars.example
- fix License</changelog>
  <changelog author="Tuukka Pasanen &lt;tuukka.pasanen@ilmi.fi&gt;" date="1549972800">- update to 3.0.6 (2019-02-01)
  * Certifcates that are revoked now move to a revoked subdirectory (#63)
  * EasyRSA no longer clobbers non-EASYRSA environment variables (#277)
  * More sane string checking, allowingn for commas in CN (#267)
  * Support for reasonCode in CRL (#280)
  * Better handling for capturing passphrases (#230, others)
  * Improved LibreSSL/MacOS support
  * Adds support to renew certificates up to 30 days before expiration (#286)
  - This changes previous behavior allowing for certificate creation using
    duplicate CNs.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1606305600">- update to 3.0.8 (2020-09-09)
  * Provide --version option (#372)
  * Version information now within generated certificates like on *nix
  * Fixed issue where gen-dh overwrote existing files without warning (#373)
  * Fixed issue with ED/EC certificates were still signed by RSA (#374)
  * Added support for export-p8 (#339)
  * Clarified error message (#384)
  * 2-&gt;3 upgrade now errors and prints message when vars isn't found (#377)
  * Update OpenSSL Windows binaries to 1.1.1g
  * Reverted OpenSSL back to 1.1.0j</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1655294400">- Update to 3.0.9 (2022-05-04)
  * Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
  - We are buliding this ourselves now.
  * Fix --version so it uses EASYRSA_OPENSSL (#416)
  * Use openssl rand instead of non-POSIX mktemp (#478)
  * Fix paths with spaces (#443)
  * Correct OpenSSL version from Homebrew on macOs (#416)
  * Fix revoking a renewed certificate (Original PR #394)
  * Follow-up commit: ef22701
  * Introduce 'show-crl' (d199389)
  * Support Windows-Git 'version of bash' (#533)
  * Disallow use of single quote (') in vars file, Warning (#530)
  * Creating a CA uses x509-types/ca and COMMON (#526)
  * Prefer 'PKI/vars' over all other locations (#528)
  * Introduce 'init-pki soft' option (#197)
  * Warnings are no longer silenced by --batch (#523)
  * Improve packaging options (#510)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662379200">- Update to 3.1.0 (2022-05-18)
  * Introduce basic support for OpenSSL version 3 (#492)
  * Update regex in grep to be POSIX compliant (#556)
  * Introduce status reporting tools (#555 &amp; #557)
  * Display certificates using UTF8 (#551)
  * Allow certificates to be created with fixed date offset (#550)
  * Add 'verify' to verify certificate against CA (#549)
  * Add PKCS#12 alias 'friendlyName' (#544)
  * Disallow use of '--vars=FILE init-pki' (#566)
  * Support multiple IP-Addresses in SAN (#564)
  * Add option '--renew-days=NN', custom renew grace period (#557)
  * Add 'nopass' option to the 'export-pkcs' functions (#411)
  * Add support for 'busybox' (#543)
  * Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 3.1.1:
  * Remove command 'renewable' (#715)
  * Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
  * Resolve long-standing issue with --subca-len=N (#691)
  * ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
  * Require 'openssl-easyrsa.cnf' is up to date (#695}
  * Introduce 'renew' (version 3). Only renew cert (#688)
  * Always ensure X509-types files exist (#581 #696)
  * Expand alias '--days' to all suitable options with a period (#674)
  * Introduce --keep-tmp, keep temp files for debugging (#667)
  * Introduce Option -q|--quiet, disable information output (#703)
  * Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
  * Support ampersand and dollar-sign in vars file (#590)
  * Introduce 'rewind-renew' (#579)
  * Expand status reports to include checking a single cert (#577)
  * Introduce 'revoke-renewed' (#547)
  * update OpenSSL for Windows to 3.0.5</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1670932800">- fix for 3.1.1:
  * add patch fix-747.patch from upstream</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673956800">- Update to 3.1.2:
  * Command 'renew': Remove option 'nopass'
  * find_x509_types_dir(): Remove excess checks
  * Remove function find_x509_types_dir()
  * For 'init-pki hard' only, always try to create a new pki/vars file
  * Introduce global option '--notext|--no-text'
  * Minor style change
  * Introduce command 'set-pass'
  * Fix shellcheck warning for command set-pass case statement
  * cleanup(): Exit correctly for SIGINT
  * Update help: Standardise output; Improve code; Reprioritise options
  * vars.example: Add EASYRSA_NO_PASS and wrap long lines
  * Use 'unset -v', consistently
  * build-ca: Improve passphrase input mechanism
  * Remove global options '--verbose' and '--quiet' as not required
  * Remove all prerequisite code to build a safe SSL config file
  * Rename temp files to reflect the purpose
  * easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config
  * Replace SSL calls for serial number with function ssl_cert_serial()
  * Introduce OpenSSL only mode: No Safe SSL Config File
  * ff_date_to_cert_date(): Correct the input format for busybox date
  * Re-order easyrsa_openssl() temp-file assignment
  * Stop EASYRSA_DEBUG interfering with SSL output from subshells
  * Status reports: Recognise Expired certificates
  * New function safe_set_var(): Safe wrapper for set_var()
  * Windows, build-ca: Add input password to re-open private key
  * Renewal: General code improvements
  * cleanup(): General improvements - Create KNOWN error exit
  * build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf
  * Allow --fix-offset to create post-dated certificates
  * Default settings: Make default Edwards curve ED25519
  * cleanup(): Exit with numeric error-code only
  * init-pki(): Introduce second warning before HARD removal
  * build-full: Always enable inline file creation
  * Global option '--passout' always take priority ONLY
  * Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports
  * Option --fix-offset: Adjust off-by-one day
- Drop fix-747.patch</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691323200">- Update to 3.1.5:
  * Build Update: script now supports signing and verifying
  * Automate support-file creation (Free packaging) (#964)
  * build-ca: New command option 'raw-ca', abbrevation: 'raw' (#963)
  This 'raw' method, is the most reliable way to build a CA,
    with a password, without writing the CA password to a temp-file.
    This option completely replaces both methods below:
    build-ca: New option --ca-via-stdin, use SSL -pass* argument 'stdin' (#959)
    Option '--ca-via-stdin' offers no more security than standard method.
    Easy-RSA version 3.1.4 ONLY.
    build-ca: Replace password temp-files with file-descriptors (#955)
    Using file-descriptors does not work in Windows.
    Easy-RSA version 3.1.3 ONLY.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697544000">- Update to 3.1.7:
  * Completely Remove Upgrade Functionality
  * Expand help to include undocumented commands
  * Forbid "default vars in the default PKI" for all commands
  * show-expire: Calculate certificate expire seconds from Database date
  * Expand help to include undocumented commands
  * New command: make-vars - Print vars.example (here-doc) to stdout
  * gen-crl: preserve existing crl.pem ownership+mode by @Tabiskabis in #1020
  * Improve vars auto load
  * Replace santize_path() and ignore Windows "security" warning
  * Improve select_vars() and source_vars()
  * sign-req: Allow the CSR DN-field order to be preserved
  * vars-file: Warn about EASYRSA_NO_VARS disabling vars-file use
  * Expand default status to include vars-file and CA status
  * verify_ssl_lib(): Minor style improvements
  * cleanup: Rename $easyrsa_error_exit to $easyrsa_exit_with_error</changelog>
</package>
<package pkgid="de82d0bceedb06e6af8e6725e70ea2046fa928ba563ae23017b526c670a4681e44661a8be82b11ea0b40da63bd54a2bbd286c97507f956141b3f25626c98e1ea" name="easy-rsa" arch="noarch">
  <version epoch="0" ver="3.2.6" rel="bp160.1.1"/>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1655294400">- Update to 3.0.9 (2022-05-04)
  * Upgrade OpenSSL from 1.1.0j to 1.1.1o (#405, #407)
  - We are buliding this ourselves now.
  * Fix --version so it uses EASYRSA_OPENSSL (#416)
  * Use openssl rand instead of non-POSIX mktemp (#478)
  * Fix paths with spaces (#443)
  * Correct OpenSSL version from Homebrew on macOs (#416)
  * Fix revoking a renewed certificate (Original PR #394)
  * Follow-up commit: ef22701
  * Introduce 'show-crl' (d199389)
  * Support Windows-Git 'version of bash' (#533)
  * Disallow use of single quote (') in vars file, Warning (#530)
  * Creating a CA uses x509-types/ca and COMMON (#526)
  * Prefer 'PKI/vars' over all other locations (#528)
  * Introduce 'init-pki soft' option (#197)
  * Warnings are no longer silenced by --batch (#523)
  * Improve packaging options (#510)</changelog>
  <changelog author="Florian &quot;spirit&quot; &lt;packaging@sp1rit.anonaddy.me&gt;" date="1662379200">- Update to 3.1.0 (2022-05-18)
  * Introduce basic support for OpenSSL version 3 (#492)
  * Update regex in grep to be POSIX compliant (#556)
  * Introduce status reporting tools (#555 &amp; #557)
  * Display certificates using UTF8 (#551)
  * Allow certificates to be created with fixed date offset (#550)
  * Add 'verify' to verify certificate against CA (#549)
  * Add PKCS#12 alias 'friendlyName' (#544)
  * Disallow use of '--vars=FILE init-pki' (#566)
  * Support multiple IP-Addresses in SAN (#564)
  * Add option '--renew-days=NN', custom renew grace period (#557)
  * Add 'nopass' option to the 'export-pkcs' functions (#411)
  * Add support for 'busybox' (#543)
  * Add option '--tmp-dir=DIR' to declare Temp-dir (Commit f503a22)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670068800">- update to 3.1.1:
  * Remove command 'renewable' (#715)
  * Expand 'show-renew', include 'renewed/certs_by_serial' (#700)
  * Resolve long-standing issue with --subca-len=N (#691)
  * ++ NOTICE: Add EasyRSA-Renew-and-Revoke.md (#690)
  * Require 'openssl-easyrsa.cnf' is up to date (#695}
  * Introduce 'renew' (version 3). Only renew cert (#688)
  * Always ensure X509-types files exist (#581 #696)
  * Expand alias '--days' to all suitable options with a period (#674)
  * Introduce --keep-tmp, keep temp files for debugging (#667)
  * Introduce Option -q|--quiet, disable information output (#703)
  * Add serialNumber (OID 2.5.4.5) to DN 'org' mode (#606)
  * Support ampersand and dollar-sign in vars file (#590)
  * Introduce 'rewind-renew' (#579)
  * Expand status reports to include checking a single cert (#577)
  * Introduce 'revoke-renewed' (#547)
  * update OpenSSL for Windows to 3.0.5</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1670932800">- fix for 3.1.1:
  * add patch fix-747.patch from upstream</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1673956800">- Update to 3.1.2:
  * Command 'renew': Remove option 'nopass'
  * find_x509_types_dir(): Remove excess checks
  * Remove function find_x509_types_dir()
  * For 'init-pki hard' only, always try to create a new pki/vars file
  * Introduce global option '--notext|--no-text'
  * Minor style change
  * Introduce command 'set-pass'
  * Fix shellcheck warning for command set-pass case statement
  * cleanup(): Exit correctly for SIGINT
  * Update help: Standardise output; Improve code; Reprioritise options
  * vars.example: Add EASYRSA_NO_PASS and wrap long lines
  * Use 'unset -v', consistently
  * build-ca: Improve passphrase input mechanism
  * Remove global options '--verbose' and '--quiet' as not required
  * Remove all prerequisite code to build a safe SSL config file
  * Rename temp files to reflect the purpose
  * easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config
  * Replace SSL calls for serial number with function ssl_cert_serial()
  * Introduce OpenSSL only mode: No Safe SSL Config File
  * ff_date_to_cert_date(): Correct the input format for busybox date
  * Re-order easyrsa_openssl() temp-file assignment
  * Stop EASYRSA_DEBUG interfering with SSL output from subshells
  * Status reports: Recognise Expired certificates
  * New function safe_set_var(): Safe wrapper for set_var()
  * Windows, build-ca: Add input password to re-open private key
  * Renewal: General code improvements
  * cleanup(): General improvements - Create KNOWN error exit
  * build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf
  * Allow --fix-offset to create post-dated certificates
  * Default settings: Make default Edwards curve ED25519
  * cleanup(): Exit with numeric error-code only
  * init-pki(): Introduce second warning before HARD removal
  * build-full: Always enable inline file creation
  * Global option '--passout' always take priority ONLY
  * Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports
  * Option --fix-offset: Adjust off-by-one day
- Drop fix-747.patch</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1691323200">- Update to 3.1.5:
  * Build Update: script now supports signing and verifying
  * Automate support-file creation (Free packaging) (#964)
  * build-ca: New command option 'raw-ca', abbrevation: 'raw' (#963)
  This 'raw' method, is the most reliable way to build a CA,
    with a password, without writing the CA password to a temp-file.
    This option completely replaces both methods below:
    build-ca: New option --ca-via-stdin, use SSL -pass* argument 'stdin' (#959)
    Option '--ca-via-stdin' offers no more security than standard method.
    Easy-RSA version 3.1.4 ONLY.
    build-ca: Replace password temp-files with file-descriptors (#955)
    Using file-descriptors does not work in Windows.
    Easy-RSA version 3.1.3 ONLY.
- update and rebase suse-packaging.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1697544000">- Update to 3.1.7:
  * Completely Remove Upgrade Functionality
  * Expand help to include undocumented commands
  * Forbid "default vars in the default PKI" for all commands
  * show-expire: Calculate certificate expire seconds from Database date
  * Expand help to include undocumented commands
  * New command: make-vars - Print vars.example (here-doc) to stdout
  * gen-crl: preserve existing crl.pem ownership+mode by @Tabiskabis in #1020
  * Improve vars auto load
  * Replace santize_path() and ignore Windows "security" warning
  * Improve select_vars() and source_vars()
  * sign-req: Allow the CSR DN-field order to be preserved
  * vars-file: Warn about EASYRSA_NO_VARS disabling vars-file use
  * Expand default status to include vars-file and CA status
  * verify_ssl_lib(): Minor style improvements
  * cleanup: Rename $easyrsa_error_exit to $easyrsa_exit_with_error</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1732968000">- update to 3.2.1:
  * inline: Add decimal value for cert. serial
  * Always exit with error for unknown command options
  * ntegrate Easy-RSA TLS-Key for use with 'init-pki soft'
  * easyrsa-tools.lib, show-expire: Add CA certificate to report
  * inline: OpenVPN TLS Keys inlining for TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: OpenVPN TLS Key gen. TLS-AUTH, TLS-CRYPT-V1
  * easyrsa-tools.lib: expire_status_v2() (show-expire version 2)
  * sign-req: Require 128bit serial number
  * Move command 'verify-cert' to Tools-lib; drop 'verify' shortcut
  * Windows secure_session(): Ensure $secured_session dir is created
  * Switch to '-f' for file existence
  * inline: Move auto-inline from build_full() to sign_req()
  * gen-crl: Create additional CRL in DER format
  * self-sign: Allow Edwards Curve based keys
  * Re-enable command 'renew' (version 2): Requires EasyRSA Tools
  * bug-fix: revoke: Pass the correct certificate location
  * vars.example: Add flags for auto-SAN and X509 critical attribute
  * Global option --eku-crit: Mark X509 extendedKeyUsage as critical
  * sign-req: Add critical and pathlen details to confirmation
  * export-p12: Automatically generate inline file
  * Introduce global option --auto-san, use commonName as SAN
  * Introduce global option --san-crit, mark SAN critical
  * Introduce new global options: --ku-crit and --bc-crit
  * gen-req: Always check for existing request file
  * revoke/revoke-expired/-renewed: Keep duplicate certificate
  * revoke-expired/-renewed: Keep req/key files for resigning
  * revoke: Add abbreviations for optional 'reason'
  * build-ca: Allow use of --req-cn without batch mode
  * gen-req: Re-enable use of --req-cn
  * write: Change syntax, target as file, not directory
- update to 3.2.0:
  * Revert ca76697: Restore escape_hazard()
  * New X509 Type: 'selfsign' Internal only
  * New commands: self-sign-server and self-sign-client
  * build-ca: Command 'req', remove SSL option '-keyout'
  * Remove escape_hazard(), obsolete
  * Remove command and function display_cn(), unused
  * docs: Update EasyRSA-Renew-and-Revoke.md
  * Remove all 'renew' code; replaced by 'expire' code
  * Introduce commands: 'expire' and 'revoke-expired'
  * Keep request files [CSR] when revoking certificates
  * Restrict use of --req-cn to build-ca
  * Remove command 'display-san' (Code removed in 5a06f94)
  * Move Status Reports to 'easyrsa-tools.lib'
  * export-p12, OpenSSL v1.x: Upgrade PBE and MAC options
  * LibreSSL: Add fix for missing 'x509' option '-ext'
  * Variable heredoc expansion for SSL/Safe Config file
  * Always use here-doc version of openssl-easyrsa.cnf
  * export-p12: New command option 'legacy'. OpenSSL V3 Only
  * export-p12: Always set 'friendlyName' to file-name-base
  * As of Easy-RSA version 3.2.0-beta1, the configuration files
    vars.example, openssl-eayrsa.cnf and all files in x509-types directory
    are no longer required
  * Rename X509-type file code-signing to codeSigning
  * init-pki: Always write vars.example file to fresh PKI
  * New command 'write': Write 'legacy' files to stdout or files
  * Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf'
  * New Command 'rand': Expose easyrsa_random() to the command line
  * Remove function 'set_pass_legacy()'
  * Remove command 'rewind-renew'
  * Remove command 'rebuild'
  * Remove command 'upgrade'
  * Remove EASYRSA_NO_VARS; Allow graceful use without a vars file
  * New diagnostic command 'display-cn'
  * Expand renewable certificate types to include code-signing
- attach a source to keyring</changelog>
  <changelog author="Richard Rahl &lt;rrahl0@opensuse.org&gt;" date="1738411200">- update to 3.2.2:
  * Remove redundant file: index.txt.attr
  * sign-req: Allow custom X509 Types
  * Add LibreSSL version 4 to supported SSL Libraries
  * Revoke remove private inline
  * Easyrsa disable inline
  * easyrsa-tools.lib: renew SAN, remove excess word 'Address'
  * easyrsa-tls.lib: renew, make sed regex for 'IP Address' greedy
  * Show expire allow zero days
  * easyrsa-tools.lib: New command 'renew ca'
  * Improve CRL expiration details
  * Tools move to easyrsa3
  * vars.example: Remove $EASYRSA_PKI
  * Introduce new command revoke-issued
  * Bugfix renew ca and renew
  * Always use locate_support_files() after secure_session()
  * revoke: Make check for conflicting files less intrusive
  * Forbid a self-signed certificate from being expired/renewed/revoked
  * V321 minor final
  * op-test.sh: Disable download ossl3 and shellcheck binaries
  * Revert: Do not remove index.txt.attr
  * Fold easyrsa-tools.lib into easyrsa</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1773576000">- Update to 3.2.6:
  - CI: Enable shell switch errexit in #1417
  - V325 326 minor touches in #1421
  - Inline sub ca v1 in #1423
  - X509-Type ca: Enable 'basicConstraints = critical' for CA/subCA certificates in #1428
  - Import tls key v1 in #1429
  - import_tls_key(): Use set_no_clobber() to preserve existing key file in #1430
- Changes from 3.2.5:
  - Replace local / global openssl-easyrsa.cnf in #1394
  - init-pki: Introduce configurable cryptography in #1397
  - Drop x509 type kdc built-in in #1399
  - Always generate an openssl-easyrsa.cnf or x509-types tmp-file in #1401
  - Libressl use $EASYRSA_FORCE_SAFE_SSL in #1402
  - Update EasyRSA-Advanced.md in #1403
  - source_vars(): Add grep regex for assign by equal = in #1405
  - export_pkcs(), PKCS12 inline: Respect $EASYRSA_NO_INLINE in #1407
  - Introduce peer-fingerprint inline lists in #1410
  - help: Add '-b' alias for --batch and correct default 'vars' file in #1411
  - New function ssl_cert_sig_digest(); Extract certificae digest name in #1414
  - Upgrading OpenSSL for Windows to 3.6.0 in #1416
- Changes from 3.2.4:
  - export-p12: Move inline file to 'inline/private' folder in #1356
  - Restructure help in #1363
  - New global option: --no-lockfile = env-var: $EASYRSA_NO_LOCKFILE in #1364
  - Restructure verify_working_env() in #1367
  - Improve verbose in #1368
  - Windows easyrsa-shell-init.sh: Replace 'read -p' in #1371
  - mutual_exclusions(): Include basic checks for --startdate/--enddate in #1372
  - easyrsa-shell-init.sh: Allow Easy-RSA to use '\User$HOME' directory in #1374
  - Remove 'easyrsa_mkdir()', use only 'mkdir' in #1376
  - revoke: Archive request and private key files and expand help in #1378
  - set_no_clobber(): Add simple error detection in #1379
  - random: Use verify_working_env() to configure EASYRSA_OPENSSL in #1381
  - self_sign(): Force use of Easy-RSA X509-type file 'selfsign' in #1383
- Changes from 3.2.3:
  - Update OpenSSL to v3.5.0
  - renew: Print 'unique_subject = no' to index.txt.attr in #1293
  - check_serial_unique(): Check for duplicate Subject error in #1294
  - Correctly define options names - Remove wild-card pattern in #1297
  - Remove all references to file:easyrsa-tools.lib in #1298
  - Reinstate old function as 'db_date_to_iso_8601()' [Renamed] in #1303
  - expire_status_v2(): Refactor 'if' statement to capture error correctly in #1304
  - source_vars() improvements in #1300
  - add_critical_attrib(): Do not add 'critical' if 'critical' exists in #1308
  - inline_file(): Include DH file or placeholder, for RSA Servers in #1310
  - Fix shellcheck warnings in #1311
  - Introduce command line options --umask|--no-umask, to set 'umask' in #1312
  - Introduce "robust" lock-file mechanism in #1313
  - New function set_no_clobber() in #1314
  - Easyrsa mktemp v2 in #1315
  - add_critical_attrib_v2(): Move file access to function in #1316
  - Command 'write': Remove options 'overwrite' and 'filename' in #1318
  - Introduce option --text: Create CSR files with human readable text in #1319
  - will_cert_be_valid(): Remove SSL option -noout in #1321
  - easyrsa_mktemp(): Remove secondary atomic operation in #1322
  - easyrsa_mkdir(): Separate Windows from *nix in #1324
  - Update Copyright 2025 in #1327
  - inine_file(): Correct logic and add 'dh none' for DH params file in #1330
  - show-expire: Move setting $pre_expire_window_s to status() in #1332
  - Always export EASYRSA_SSL_CONF, when assigned (code standard) in #1334
  - Unit-test: Drop old *nix test in #1335
  - add_critical_attrib(): export temp-file name as input file in #1333
  - Inline improvements in #1337
  - Unit-test: Minimize Windows test in #1339
  - PKI lock-file: Move possible creation to sub-function request_lock_file() in #1340
  - forbid_selfsign(): Compare cert serial to signing cert serial in #1342
  - inline_file(): Use ssl_cert_serial() in #1343
  - Inline self sign improvements in #1345
  - peer-fingerprint mode: Make CA mode mutually exclusive to PFP mode in #1347
  - Remove init pki soft in #1351</changelog>
</package>
<package pkgid="f6f5589a0096f699d67d1cd494ccdf4b18642bd2d5cd1749b038dd5d9f8578c6220a28d9308afdb37c2aea729696e9b69f29c5fd06faf61cfdd40a53ec6f1d8b" name="easyloggingpp-devel" arch="x86_64">
  <version epoch="0" ver="9.97.1" rel="bp160.1.9"/>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1576929600">- Initial package (v9.96.7)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578398400">- Remove marketing filler wording from description.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1618315200">- Update to version 0.97.0
  Features:
  * ENABLE_EXECINFO option in CMake to enable/disable stack trace
  Bug Fixes:
  * Fix attempt to access the released memory
  * Fix April month name
  * Refer to unknown user as unknown-user instead of user
  * Handle low memory situation
  * Fix many compiler warnings</changelog>
  <changelog author="ming li &lt;mli@suse.com&gt;" date="1710244800">- Update to version 0.97.1:
  * Ensuring the build on ARM64 works
  * Update gtest and cmake now requires C++14 because of that</changelog>
</package>
<package pkgid="8f7eb6b6227696a618553e70660936f3ca4a7ed11e7d0759231b357019c8c9d89329f154508a497689cd25456aa5ee12a590910e5e614393598191b6b525ebac" name="easymock" arch="noarch">
  <version epoch="0" ver="3.6" rel="bp160.1.12"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1552824000">- Initial packaging of easymock 3.6
- Generate and customize ant build files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554811200">- Summarize description.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="e5716cfc58f254b77f737d2308e1f60c8c564165ad8bcba8f479a777e8513cbb2ba902d7493b495552d8adbbef71bd90fd0252e5ab467c35e1fd421f7ce5d076" name="easymock-javadoc" arch="noarch">
  <version epoch="0" ver="3.6" rel="bp160.1.12"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1552824000">- Initial packaging of easymock 3.6
- Generate and customize ant build files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554811200">- Summarize description.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="f3d79caf94e7177bca28620270f8c4e01a0c95305a18d09bbb286d1d5ba364b28040abb4a0ea8a68a67dabfe12019f4c835cb25087c3ad8afaff3ae1fbf9170d" name="easytag" arch="x86_64">
  <version epoch="0" ver="2.4.3+161" rel="bp160.1.2"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584100800">- Remove empty post and postun</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641988800">- Temporarily disable the nautilus extension: not yet compatible
  with Nautilus/GTK4.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646222400">- Enable nautilus extension again.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1659787200">- Temporarily disable the nautilus extension: not yet compatible
  with Nautilus/GTK4.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709121600">- Update to version 2.4.3+155:
  + Port to using libsoup for CDDB requests.
  + Use GSubprocess instead of g_spawn_async().
  + Updated translations.
- Add easytag-taglib-2.0.patch: Fix build against taglib 2.0.
- Rebase easytag-revert-open-handle-ogg.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1726574400">- Update to version 2.4.3+161:
  + Hide search dialog on close.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1739707200">- Exclude i586 as buildtarget, broken for ages with no fix in
  sight.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740657600">- Add upstream patches, lifted from debian, fix build for 32bit:
  + 01_remove-pixdata.patch
  + 02_fix-ogg-corruption.patch
  + 03_port-to-taglib-2.patch
  + 04_taglib-2-further-fix.patch
- Drop easytag-revert-open-handle-ogg.patch,
  easytag-taglib-2.0.patch and ExcludeArch: i586, no longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
</package>
<package pkgid="4f17706445fd6c5302106724e24957201a082f6325d3db3fdd7984cee463b00e16f3c485a6fe4884a1959895fe21c273c166062bdacbc08af1f9c74c5bc58f1a" name="easytag-lang" arch="noarch">
  <version epoch="0" ver="2.4.3+161" rel="bp160.1.2"/>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584100800">- Remove empty post and postun</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1641988800">- Temporarily disable the nautilus extension: not yet compatible
  with Nautilus/GTK4.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646222400">- Enable nautilus extension again.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1659787200">- Temporarily disable the nautilus extension: not yet compatible
  with Nautilus/GTK4.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709121600">- Update to version 2.4.3+155:
  + Port to using libsoup for CDDB requests.
  + Use GSubprocess instead of g_spawn_async().
  + Updated translations.
- Add easytag-taglib-2.0.patch: Fix build against taglib 2.0.
- Rebase easytag-revert-open-handle-ogg.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1726574400">- Update to version 2.4.3+161:
  + Hide search dialog on close.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1739707200">- Exclude i586 as buildtarget, broken for ages with no fix in
  sight.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740657600">- Add upstream patches, lifted from debian, fix build for 32bit:
  + 01_remove-pixdata.patch
  + 02_fix-ogg-corruption.patch
  + 03_port-to-taglib-2.patch
  + 04_taglib-2-further-fix.patch
- Drop easytag-revert-open-handle-ogg.patch,
  easytag-taglib-2.0.patch and ExcludeArch: i586, no longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1748001600">- Drop obsolete update-desktop-files BuildRequires.</changelog>
</package>
<package pkgid="7ac10e44cba139404a2c46fddc56b3ad5a14336b8b285b3d2600d6ee5942d996567876e0a5f96f09f507bcb2bccc01d893def0b86eddbc8d2eadeba9a39ff61a" name="eb" arch="x86_64">
  <version epoch="0" ver="4.4.3" rel="bp160.1.13"/>
  <changelog author="ro@suse.de" date="1175256000">- added zlib-devel to buildreq</changelog>
  <changelog author="crrodriguez@suse.de" date="1203940800">- fix library-without-ldconfig-postin errors
- spec file cleanup
- remove libtool archives and static libraries
- use find_lang macro where needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Undebianify ebdev to eb-devel</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="p.drouand@gmail.com" date="1420545600">- Update to version 4.4.3
  + eb/ebnet.c (ebnet_open): Use _atoi64() or atol(), when atoll()
  is not available.
  + configure.ac (LIBEB_VERSION_INFO):
  EB Library verison 4.2.2 sets LIBEB_VERSION_INFO to 15:0:2,
  but it is wrong.  To avoid the confusion, I decide to update
  LIBEB_VERSION_INFO to 16:0:0.
- Split out translation files in a lang subpackage and recommend it
  by the main package
- Split out the system library in libeb16 subpackage; follow shared
  library packaging guidelines
- Do not provide the INSTALL file; we're not concerned
- Update the Url
- Use download Url as source
- Make devel subpackage depends on libeb16 instead of eb
- Remove redudant "eb" in Summary; fix related rpmlint warning
- Remove bugzilla-242268.patch; merged on upstream release</changelog>
  <changelog author="i@marguerite.su" date="1451131200">- eb-devel should requires eb, which requires libeb16.
  or applications like ebview won't build because lack
  of /etc/eb.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="pgajdos@suse.com" date="1715601600">- added patches
  fix build with gcc14
  + eb-gcc14.patch</changelog>
</package>
<package pkgid="fe6a2981bb57d3158ff496369daa6f2c0de0a2f1a3686beaea022ca65dcc6a133be18573185b68c5b9ec02eeade4cb5a0014ce4107147576b53a1b1351a08ce3" name="eb-devel" arch="x86_64">
  <version epoch="0" ver="4.4.3" rel="bp160.1.13"/>
  <changelog author="ro@suse.de" date="1175256000">- added zlib-devel to buildreq</changelog>
  <changelog author="crrodriguez@suse.de" date="1203940800">- fix library-without-ldconfig-postin errors
- spec file cleanup
- remove libtool archives and static libraries
- use find_lang macro where needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Undebianify ebdev to eb-devel</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="p.drouand@gmail.com" date="1420545600">- Update to version 4.4.3
  + eb/ebnet.c (ebnet_open): Use _atoi64() or atol(), when atoll()
  is not available.
  + configure.ac (LIBEB_VERSION_INFO):
  EB Library verison 4.2.2 sets LIBEB_VERSION_INFO to 15:0:2,
  but it is wrong.  To avoid the confusion, I decide to update
  LIBEB_VERSION_INFO to 16:0:0.
- Split out translation files in a lang subpackage and recommend it
  by the main package
- Split out the system library in libeb16 subpackage; follow shared
  library packaging guidelines
- Do not provide the INSTALL file; we're not concerned
- Update the Url
- Use download Url as source
- Make devel subpackage depends on libeb16 instead of eb
- Remove redudant "eb" in Summary; fix related rpmlint warning
- Remove bugzilla-242268.patch; merged on upstream release</changelog>
  <changelog author="i@marguerite.su" date="1451131200">- eb-devel should requires eb, which requires libeb16.
  or applications like ebview won't build because lack
  of /etc/eb.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="pgajdos@suse.com" date="1715601600">- added patches
  fix build with gcc14
  + eb-gcc14.patch</changelog>
</package>
<package pkgid="7139915733c4639d3ea79968b92df8a00d1618659b2dba95b9a1212bcf98264b727dce5337241f87fe85e7622648efbadba6aab00f5c2d98a372a2ef91f2caaf" name="eb-lang" arch="noarch">
  <version epoch="0" ver="4.4.3" rel="bp160.1.13"/>
  <changelog author="ro@suse.de" date="1175256000">- added zlib-devel to buildreq</changelog>
  <changelog author="crrodriguez@suse.de" date="1203940800">- fix library-without-ldconfig-postin errors
- spec file cleanup
- remove libtool archives and static libraries
- use find_lang macro where needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Undebianify ebdev to eb-devel</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="p.drouand@gmail.com" date="1420545600">- Update to version 4.4.3
  + eb/ebnet.c (ebnet_open): Use _atoi64() or atol(), when atoll()
  is not available.
  + configure.ac (LIBEB_VERSION_INFO):
  EB Library verison 4.2.2 sets LIBEB_VERSION_INFO to 15:0:2,
  but it is wrong.  To avoid the confusion, I decide to update
  LIBEB_VERSION_INFO to 16:0:0.
- Split out translation files in a lang subpackage and recommend it
  by the main package
- Split out the system library in libeb16 subpackage; follow shared
  library packaging guidelines
- Do not provide the INSTALL file; we're not concerned
- Update the Url
- Use download Url as source
- Make devel subpackage depends on libeb16 instead of eb
- Remove redudant "eb" in Summary; fix related rpmlint warning
- Remove bugzilla-242268.patch; merged on upstream release</changelog>
  <changelog author="i@marguerite.su" date="1451131200">- eb-devel should requires eb, which requires libeb16.
  or applications like ebview won't build because lack
  of /etc/eb.conf</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="pgajdos@suse.com" date="1715601600">- added patches
  fix build with gcc14
  + eb-gcc14.patch</changelog>
</package>
<package pkgid="d68a1ab4a4d2ab2acf6a025764364d8a620844aff7b5464b52ef6f1c7c47c5a21710834e20b7d1b09f3748e62005d387d03c929d61e697adaa5ba52cbcd95ba3" name="eblook" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="bp160.1.13"/>
  <changelog author="adrian@suse.de" date="1073822400">- build as user</changelog>
  <changelog author="ro@suse.de" date="1092657600">- fix code aliasing issue</changelog>
  <changelog author="tiwai@suse.de" date="1118318400">- updated to version 1.6.1.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1175428800">- added zlib-devel to buildreq</changelog>
  <changelog author="tiwai@suse.de" date="1297771200">- fix 64bit issues thar break UTF-8 locale support on 11.4;
  patches ported from Fedora packages</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1420804800">- Add eb BuildRequires: configure checks for the presence of
  /etc/eb.conf.
- Run spec-cleaner.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.
- Rebase eblook-size_t.patch to apply with patch -p1.</changelog>
</package>
<package pkgid="5508af216f938b1f79dea18edf7e125f80ca95e09232a531df0f8f4d04b6fbdd95ce43df3a9554f961143428e80d0bbc384290dcd53b9a2c18d2c3774156b27e" name="ebook-tools" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="bp160.1.14"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325160000">- Use GCC visibility, which shrinks the symbol table
  to less than a half of the actually size</changelog>
  <changelog author="tchvatal@suse.com" date="1373976000">- xz was added to buildrequires and it was formatted.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381579200">- Update to 0.2.2 (bnc#845629, kde#325909)
  * Bugfix release, no upstream changelog provided</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1401883200">- Add baselibs.conf</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1556625600">- Fix a crash when a navPoint in toc.ncx has no navLabel, see
  kde#406116 and https://sourceforge.net/p/ebook-tools/bugs/8/
  * add 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch
- specfile cleanup, remove %defattr, add LICENSE</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1609761600">- use cmake build macros + spec-cleaner</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1682251200">- Fix a crash when an itemref in the spine has no idref,
  see kde#466540.
  * add 0002-Avoid-crash-on-spine-itemref-without-idref.patch
- Replace 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch
  with 0001-Avoid-crash-on-toc.ncx-navPoint-without-navLabel.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1742558400">- Add patch:
  * ebook-tools-cmake4.patch
- Rebase patches
- Drop unneeded baselibs.conf</changelog>
</package>
<package pkgid="25b4f3af17a306d098a32145e84cb05c5039cb297c1739ef7fa77b84f62648239096b5cfb8bd28c28ae5a12245dc627b4857ade25bb9b69b6401c8f7771f12a7" name="ebumeter" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="bp160.1.2"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588507200">- Initial package, version 0.4.2
- Add patch:
  * fix-build.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1644753600">- Pass prefix also to the build as the path to the assets is
  compiled into the binary</changelog>
  <changelog author="Edgar Aichinger &lt;edogawa@aon.at&gt;" date="1676635200">- Update to version 0.5.1
  * Removed special treatment of mono files.
  * Updated GPL header in all source files.
- skipped version 0.4.3
  * Changed peak level unit to 'dBTP'
- remove fix-build.patch (now upstream)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1676894400">- Do not build with -march=native to
  avoid compile-time CPU-detection (boo#1100677)</changelog>
</package>
<package pkgid="1e2700a4296cd100d99468e1adf6e8104790eb2e6d5eac3a15570fcdbac2384e0cec0fb79944479ed59e5ab82fad106d581a47cf0706ad6763f6bd46550c47a9" name="ec2-instance-connect" arch="noarch">
  <version epoch="0" ver="1.1.17" rel="160000.2.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1601380800">- Initial build (bsc#1152806, bsc#1131916, jsc#ECO-352, jsc#PM-1351)
  + Version 1.1.12</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 1.1.14
  + This release prevents host key harvesting script failures on system startup
    from leaving instances in a degraded state. The issue was found in #28.
  + Prefixing the systemd.service ExecStart executable path with '-' ignores any error
    exit codes, and considers them successful, leaving the system in a healthy state.
    See Table 1 under ExecStart= here:
    https://www.freedesktop.org/software/systemd/man/systemd.service.html
  + The AL2 package binary will be added when available, and release description
    updated when available to pull from package repositories (AL2, Ubuntu).
- from version 1.1.13
  + Tagging release for package version 1.1-13 for consumption by Amazon's OS Partners.
  + This release contains an additional safeguard to verify that the domain returned
    from IMDS is an AWS domain.
  + Amazon Linux 2 packaging is attached to this release. Official Ubuntu and other
    distribution packaging are published separately following GitHub release.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.1.17
  + Fix parse authorized keys script to work with OpenSSL 3.0.2
  + Update changelog
- from version 1.1.15
  + Host key harvesting changed to be async/non-blocking
  + Change "service" name to be more specific and auto-enable
- Update source filename for ec2-instance-connect.preset
- Update source filename for ec2-instance-connect.service</changelog>
</package>
<package pkgid="c63de709c90d9774c20eae3506eed8917f6e01da1113485843b64f2cacf6625615c346bac1bf263c073b665c9fb544d4d02ea00e86b86b697bc25823eea0c08d" name="echomixer" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="bp160.1.6"/>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="tiwai@suse.de" date="1576843200">- Fix hdspmixer build error with the latest alsa-lib:
  0001-hdspmixer-Use-__u32-and-__u64-for-RMS-array-types.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582632000">- Update to 1.2.2 (do not support Python 2 and PyGtk).
- Remove
  0001-hdspmixer-Use-__u32-and-__u64-for-RMS-array-types.patch
  which was included upstream.</changelog>
  <changelog author="tiwai@suse.de" date="1603454400">- Drop unnecessary buildreq alsa-topology-devel (bsc#1178064)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to version 1.2.5 (jsc#PED-6566):
  * hdspmixer: add output loopback buttons
  * hdspmixer: enhance saving of presets</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add tarball signature and keyring</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706529600">- hwmixvolume: replace the unversioned python shebang to point to
  python3 (alsa-project/alsa-tools@fb04384 claims it is compatible
  to python3).
- Change hwmixvolume's dependency on pyalso to python3-alsa: ensure
  we get the main python interpreters' alsa module (matching the
  /usr/bin/python3 shebang) (boo#1219312).</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1706875200">- Update to version 1.2.11:
  * hdajackretask: resolution limit for wide screen, pipewire support
  * hdspmixer: fix coredump
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-tools
- Fix build with gcc7:
  0001-hdajackretask-Fix-build-with-gcc7.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="24343fd76da4764964e8637633cab84998151172d459b43d8750d3176672cf390493adbdcdd399da1cee2cb8d007a537bbd87851a9e708424ad74bfe2275c01f" name="ecj" arch="noarch">
  <version epoch="0" ver="4.23" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1505736000">- Don't build against the java-bootstrap package; it is gone</changelog>
  <changelog author="fstrba@suse.com" date="1540814400">- Add two more maven artifact aliases:
  * org.eclipse.jdt.core.compiler:ecj
  * org.eclipse.jdt:ecj</changelog>
  <changelog author="fstrba@suse.com" date="1542888000">- Add one more maven artifact alias:
  * org.eclipse.tycho:org.eclipse.jdt.compiler.apt</changelog>
  <changelog author="fstrba@suse.com" date="1569412800">- Upgrade to eclipse 4.12 ecj
  * No changelog was made available.
- Removed patches:
  * ecj-include-props.patch,
  * eclipse-gcj-compat4.2.1.patch
  * eclipse-gcj-nodummysymbol.patch
    + Unneeded for this version
- Added patches:
  * ecj-encoding.patch
    + Fix build with java &gt;= 9
  * javaAPI.patch
    + When building with java &lt; 9, add the java10api.jar and the
    JRE's rt.jar to bootclasspath
  * jdk10u-jdk8compat.patch
    + Patch out deprecation annotation not understood by the JDK
    when building with java &lt; 9
- Build the java.compiler module's javax.* packages as non-modular
  java10api.jar, so that ecj can be compiled even with java &lt; 9
- Distribute the java10api artifact for packages that might need
  it</changelog>
  <changelog author="wittemar@googlemail.com" date="1634558400">- Upgrade to eclipse 4.17 ecj
  * No changelog was made available.
- Removed patches:
  * ecj-encoding.patch
  * jdk10u-jdk8compat.patch
- Switch to JDK 11 for build a JDK 8 is not supported anymore by ecj
- Switch java10api to java14api to be compatible to JDK 14</changelog>
  <changelog author="wittemar@googlemail.com" date="1634558401">- Upgrade to eclipse 4.18 ecj
  * No changelog was made available.
- Switch java14api to java15api to be compatible to JDK 15</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Added patch:
  * encoding.patch
    + the encoding needs to be set for all JDK versions
- Modified patch:
  * ecj-rpmdebuginfo.patch
    + rediff
  * javaAPI.patch
    + extract the encoding part to a separate patch</changelog>
  <changelog author="fstrba@suse.com" date="1692619200">- Upgrade to eclipse 4.23 ecj (jsc#PED-2979)
  * No changelog was made available.
- Use the bundled javax17api.jar stubs, but don't distribute
  them
- Removed patches:
  * encoding.patch
    + handled by a simple sed run
  * javaAPI.patch
    + not needed with this version</changelog>
  <changelog author="fstrba@suse.com" date="1707825600">- Added patch:
  * ecj-java8compat.patch
    + Allow building ecj with language levels 8 (bsc#1219862)
- Distribute the bundled javax17api.jar under maven coordinate of
  org.eclipse:javax17api:17, so that it can be used if needed</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="669785d99c0c622f32483f67ff992c3f96c24d671c4cbaf34ee15ff7675e08234012948e6ee5ae9cbea08c8f71d3671a1488478a9eec486b8b905c719080e6ac" name="ecl" arch="x86_64">
  <version epoch="0" ver="24.5.10" rel="bp160.1.44"/>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1578830400">- Initial commit with v16.1.3</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1593864000">- Update to v20.4.24</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1594900800">- Package PDF manual</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1613390400">- Update to v21.2.1</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1671624000">- Disable LTO on Tumbleweed as it breaks at least 'ecl -compile'</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1694260800">- update to v23.9.9</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1715342400">- update to v24.5.10</changelog>
</package>
<package pkgid="a9e53fc8aecfafe80b0e28348c44c5afc449c0e026a6306ca03fcc173d49d4688ce2673e3c0d7dda72d8cc4e0b2723d46980f673997aa252d3495a43c46e7ff0" name="ecl-devel" arch="x86_64">
  <version epoch="0" ver="24.5.10" rel="bp160.1.44"/>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1578830400">- Initial commit with v16.1.3</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1593864000">- Update to v20.4.24</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1594900800">- Package PDF manual</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1613390400">- Update to v21.2.1</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1671624000">- Disable LTO on Tumbleweed as it breaks at least 'ecl -compile'</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1694260800">- update to v23.9.9</changelog>
  <changelog author="Michael Pujos &lt;pujos.michael@gmail.com&gt;" date="1715342400">- update to v24.5.10</changelog>
</package>
<package pkgid="c125bdbdf03ab45692a0fe002ddc01ef07f05b8a417da281c9726f3db4dc19a49a6082f16b76a548cef00004392b2ca7e43d438d64e742fce4df84874f7f7379" name="eclipse-collections" arch="noarch">
  <version epoch="0" ver="11.1.0" rel="bp160.1.9"/>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1625054400">- Initial commit with v10.4.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1625227200">- Do not use service file
- Avoid unnecessary dependency on tycho and maven-enforcer-plugin</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1650628800">- Update to v11.0.0
  * New Functionality
    = Added toImmutableList/Set/Bag/Map/BiMap to RichIterable.
    = Added toImmutableSortedList/Set/Bag to RichIterable.
    = Added toImmutableSortedBag/List/Set with Comparator
    to RichIterable.
    = Added toImmutableSortedBagBy/ListBy/SetBy with Function
    to RichIterable.
    = Added selectWithIndex and rejectWithIndex to OrderedIterable
    and ListIterable.
    = Added putAllMapIterable method to MutableMap.
    = Added withMapIterable to MutableMap.
    = Added newWithMap and newWithMapIterable to ImmutableMap.
    = Added anySatisfyWithOccurrences, allSatisfyWithOccurrences,
    noneSatisfyWithOccurrences, detectWithOccurrences to Bag.
    = Added covariant overrides for sortThis().
    = Added covariant return types to methods in MultiReaderList
    that return this.
    = Added primitive singleton iterator.
    = Added union, intersect, difference, symmetric difference,
    cartesianProduct, isSubsetOf, isProperSubsetOf
    to primitive sets.
    = Added containsAny and containsNone on primitive iterables.
    = Added toSortedList(Comparator) and toSortedListBy(Function)
    to primitive iterables.
    = Added isEqual and isSame to Pair and Triple as default
    methods.
    = Added converters from Pair and Triple to List types.
    = Added toImmutableSortedBagBy to Collectors2.
    = Added toImmutableSortedMap and toImmutableSortedMapBy
    to Collectors2.
    = Added toSortedMap and toSortedMapBy to Collectors2.
    = Added Norwegian translation for the Eclipse Collections
    website.
    = Added ClassComparer utility.
  * Optimizations
    = Optimized ImmutableListFactoryImpl.withAll(Iterable).
    = Optimized containsAll on primitive iterables.
    = Optimized primitive hash set newSet and withAll.
    = Optimized sumByLong and sumByInt Primitive methods for Bags.
    = Optimized toImmutable on primitive sets.
    = Optimized union and difference on SetIterables.
    = Added enhanced for-loop syntax wherever as possible.
  * Tech Debt Reduction
    = Deprecated ImmutableArrayStack.
    = Fixed bug with noneSatisfy for ImmutableBooleanEmptySet.
    = Fixed compiler errors for JDK-15-EA.
    = Fixed return types of aggregateBy().
    = Fixed types on Multimap.*MultiValues().
    = Fixed primitive hash map values collections removed
    for special key zero.
    = Fixed CollectIterable detect methods.
    = Added missing overrides for toImmutable methods
    on synchronized primitive object maps.
    = Added missing overrides of aggregateBy()
    and aggregateInPlaceBy().
    = Added documentation on serializing Eclipse Collections
    with jackson.
    = Added logic to throw UnsupportedOperationException
    on calling withMap method in FixedSizeMap. This is
    a breaking change.
    = Made org.eclipse.collections.impl.list.Interval#goForward
    private. This is a breaking change.
    = Replaced HashingStrategies.longHashCode with Java 8
    Long.hashCode. This is a breaking change.
    = Deleted version.properties as the file is no longer needed.
    = Removed extra calls to map.get in sumByDoubleFunction
    and sumByFloatFunction.
    = Removed implementations of OrderedIterable.toStack()
    that can use the default implementation instead.
    = Removed implementations of aggregateBy and aggregateInPlaceBy
    that can use default implementations instead.
    = Removed references to deleted classes in findbugs-exclude
    file.
  * Removed Functionality
    = Removed Verify.assertThrows() which takes a Runnable
    in favor of Assert.assertThrows(). This is a breaking change.
    = Removed assertNotEquals() from Verify as Assert already
    has the same API. This is a breaking change.
  * Build Changes
    = Upgraded EBR plugin to 1.3.0.
    = Upgraded actions/cache to 2.1.6.
    = Upgraded actions/upload-artifact to 2.2.4.
    = Upgraded antlr ST4 to 2.1.5.
    = Upgraded checkstyle plugin to 3.1.2.
    = Upgraded checkstyle to 8.42.
    = Upgraded codehaus maven plugin to 2.8.1.
    = Upgraded jacoco to v2.2.3.
    = Upgraded jmh-core to 1.33.
    = Upgraded maven-resources-plugin to 3.2.0.
    = Upgraded to JUnit 4.13.1.
    = Upgraded to setup-java v2.
    = Skip p2 repository module during EA builds and Java 15+ builds.
    = Enabled Dependabot v2.
    = Added GitHub action to generate code coverage report.
    = Added JDK Early Access GitHub Actions.
  * Breaking Changes
    Warning: These changes are already mentioned above. The list
    below might not be exhaustive, make sure to test your
    application and usages to verify.
    = Added logic to throw UnsupportedOperationException on calling
    withMap method in FixedSizeMap.
    = Made org.eclipse.collections.impl.list.Interval#goForward
    private.
    = Replaced HashingStrategies.longHashCode with Java 8
    Long.hashCode.
    = Removed Verify.assertThrows() which takes a Runnable
    in favor of Assert.assertThrows().
    = Removed assertNotEquals() from Verify as Assert already
    has the same API.</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1659268800">- Update to v11.1.0
  * New Functionality
    = Added Bag.distinctView().
    = Added Bags.mutable.withInitialCapacity.
    = Added forEachInBoth to Primitive Lists.
    = Added MultiReader to Bags factory in API module.
    = Added MultiReader to Lists factory in API module.
    = Added MultiReader to Sets factory in API module.
    = Added Primitive Bag factories in API module.
    = Added Primitive Set factories in API module.
    = Added Primitive Stack factories in API module.
    = Added factory for ObjectPrimitiveHashMapWithHashingStrategy.
    = Added withInitialCapacity api in
    mutableObjectPrimitiveHashingStrategyMapFactory.
    = Added ability to create Hashing Strategy Sets, Maps and Bags
    using Function.
    = Added injectInto for primitive types to primitive iterables.
    = Added injectIntoKeyValue to MapIterable.
    = Added injectIntoKeyValue to objectPrimitiveMap.
    = Added injectIntoKeyValue to primitiveObjectMap.
    = Added injectIntoKeyValue to primitivePrimitiveMap.
    = Added mutable reduction scenario to injectIntoKeyValue test
    for primitive maps.
    = Added object to primitive map factory to API module.
    = Added of and with factory methods to object -&gt; primitive map
    factories.
    = Added of and with factory methods to primitive -&gt; primitive
    and primitive -&gt; object map factories.
    = Added withKeyMultiValues to MutableMultimap and subtypes.
    = Added withKeyValue to MutableMultimap and subtypes.
    = Added getAndPut to mutableObjectPrimitiveMap to retrieve the
    value associated with the key if one exists.
    = Added peekAndPop methods in ImmutableStack.
    = Added fused method for collect + makeString.
    = Added missing implementations of toString().
    = Added selectWithIndex and rejectWithIndex to Ordered
    Primitive Iterables.
    = Implemented containsAny, containsNone, containsAnyIterable,
    containsNoneIterable on RichIterable.
  * Optimizations
    = Optimized asParallel() for immutable sets in O(1) instead of
    O(n).
    = Optimized some implementations of toString() that were
    delegating to iterators.
    = Improved equals() performance for Set implementations.
  * Tech Debt Reduction
    = Replaced implementation factories and dependencies with API
    factories where possible.
    = Fixed CheckStyle configuration for NewlineAtEndOfFile so that
    it works across operating systems.
    = Made forEach a default method on primitiveIterable.stg.
    = Made noneSatisfy a default method on primitiveIterable.stg.
    = Removed unnecessary implementations of
    toSortedList/Set/Bag/MapBy.
    = Disambiguate and deprecate primitive injectInto methods on
    RichIterable.
    = Improved code generation logic into separate goals for
    sources, test-sources, and resources.
    = Improved PIT mutation test coverage.
    = Improved overall test coverage by adding missing tests.
  * Documentation Changes
    = Updated reference guide and convert to AsciiDoc.
    = Updated CONTRIBUTING.md to reflect contribution guidelines
    around commit sign-off.
    = Updated README.md with OSS projects that use Eclipse
    Collections.
  * Build Changes
    = Upgraded CheckStyle from 9.1 to 10.1.
    = Upgraded actions/cache from 2.1.7 to 3.0.2.
    = Upgraded checkstyle-configuration.xml from 1.2 schema to 1.3
    schema.
    = Upgraded setup-java v3.
    = Upgraded actions/cache from 2.1.6 to 2.1.7.
    = Upgraded actions/checkout from 2 to 3.
    = Upgraded actions/upload-artifact from 2.2.4 to 3.
    = Upgraded maven-plugin-api from 3.6.3 to 3.8.5.
    = Upgraded maven-shade-plugin from 3.2.2 to 3.2.4.
    = Upgraded maven-site-plugin from 3.9.0 to 3.11.0.
    = Switched to oracle-actions to download JDK for EA builds.
    = Turned on additional CheckStyle rules and IntelliJ
    inspections.
    = Removed FindBugs build from GitHub workflows.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694606400">- Reproducible builds: produce reproducible manifest with bnd</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698840000">- Build the eclipse-collections-api module with release=8 if the
  compiler is supporting it
  * fixes incompatibilities with JDK21 and new added methods in
    java.util.List interface</changelog>
</package>
<package pkgid="8b8ed9c6fb83df5e275c283851fdb35e3a037bc553bf13ad806965656ac40901e9766793b7d52b052b26fbde13b87518769ae4c7452497c84674d18970f4a50c" name="eclipse-collections-javadoc" arch="noarch">
  <version epoch="0" ver="11.1.0" rel="bp160.1.9"/>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1625054400">- Initial commit with v10.4.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1625227200">- Do not use service file
- Avoid unnecessary dependency on tycho and maven-enforcer-plugin</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1650628800">- Update to v11.0.0
  * New Functionality
    = Added toImmutableList/Set/Bag/Map/BiMap to RichIterable.
    = Added toImmutableSortedList/Set/Bag to RichIterable.
    = Added toImmutableSortedBag/List/Set with Comparator
    to RichIterable.
    = Added toImmutableSortedBagBy/ListBy/SetBy with Function
    to RichIterable.
    = Added selectWithIndex and rejectWithIndex to OrderedIterable
    and ListIterable.
    = Added putAllMapIterable method to MutableMap.
    = Added withMapIterable to MutableMap.
    = Added newWithMap and newWithMapIterable to ImmutableMap.
    = Added anySatisfyWithOccurrences, allSatisfyWithOccurrences,
    noneSatisfyWithOccurrences, detectWithOccurrences to Bag.
    = Added covariant overrides for sortThis().
    = Added covariant return types to methods in MultiReaderList
    that return this.
    = Added primitive singleton iterator.
    = Added union, intersect, difference, symmetric difference,
    cartesianProduct, isSubsetOf, isProperSubsetOf
    to primitive sets.
    = Added containsAny and containsNone on primitive iterables.
    = Added toSortedList(Comparator) and toSortedListBy(Function)
    to primitive iterables.
    = Added isEqual and isSame to Pair and Triple as default
    methods.
    = Added converters from Pair and Triple to List types.
    = Added toImmutableSortedBagBy to Collectors2.
    = Added toImmutableSortedMap and toImmutableSortedMapBy
    to Collectors2.
    = Added toSortedMap and toSortedMapBy to Collectors2.
    = Added Norwegian translation for the Eclipse Collections
    website.
    = Added ClassComparer utility.
  * Optimizations
    = Optimized ImmutableListFactoryImpl.withAll(Iterable).
    = Optimized containsAll on primitive iterables.
    = Optimized primitive hash set newSet and withAll.
    = Optimized sumByLong and sumByInt Primitive methods for Bags.
    = Optimized toImmutable on primitive sets.
    = Optimized union and difference on SetIterables.
    = Added enhanced for-loop syntax wherever as possible.
  * Tech Debt Reduction
    = Deprecated ImmutableArrayStack.
    = Fixed bug with noneSatisfy for ImmutableBooleanEmptySet.
    = Fixed compiler errors for JDK-15-EA.
    = Fixed return types of aggregateBy().
    = Fixed types on Multimap.*MultiValues().
    = Fixed primitive hash map values collections removed
    for special key zero.
    = Fixed CollectIterable detect methods.
    = Added missing overrides for toImmutable methods
    on synchronized primitive object maps.
    = Added missing overrides of aggregateBy()
    and aggregateInPlaceBy().
    = Added documentation on serializing Eclipse Collections
    with jackson.
    = Added logic to throw UnsupportedOperationException
    on calling withMap method in FixedSizeMap. This is
    a breaking change.
    = Made org.eclipse.collections.impl.list.Interval#goForward
    private. This is a breaking change.
    = Replaced HashingStrategies.longHashCode with Java 8
    Long.hashCode. This is a breaking change.
    = Deleted version.properties as the file is no longer needed.
    = Removed extra calls to map.get in sumByDoubleFunction
    and sumByFloatFunction.
    = Removed implementations of OrderedIterable.toStack()
    that can use the default implementation instead.
    = Removed implementations of aggregateBy and aggregateInPlaceBy
    that can use default implementations instead.
    = Removed references to deleted classes in findbugs-exclude
    file.
  * Removed Functionality
    = Removed Verify.assertThrows() which takes a Runnable
    in favor of Assert.assertThrows(). This is a breaking change.
    = Removed assertNotEquals() from Verify as Assert already
    has the same API. This is a breaking change.
  * Build Changes
    = Upgraded EBR plugin to 1.3.0.
    = Upgraded actions/cache to 2.1.6.
    = Upgraded actions/upload-artifact to 2.2.4.
    = Upgraded antlr ST4 to 2.1.5.
    = Upgraded checkstyle plugin to 3.1.2.
    = Upgraded checkstyle to 8.42.
    = Upgraded codehaus maven plugin to 2.8.1.
    = Upgraded jacoco to v2.2.3.
    = Upgraded jmh-core to 1.33.
    = Upgraded maven-resources-plugin to 3.2.0.
    = Upgraded to JUnit 4.13.1.
    = Upgraded to setup-java v2.
    = Skip p2 repository module during EA builds and Java 15+ builds.
    = Enabled Dependabot v2.
    = Added GitHub action to generate code coverage report.
    = Added JDK Early Access GitHub Actions.
  * Breaking Changes
    Warning: These changes are already mentioned above. The list
    below might not be exhaustive, make sure to test your
    application and usages to verify.
    = Added logic to throw UnsupportedOperationException on calling
    withMap method in FixedSizeMap.
    = Made org.eclipse.collections.impl.list.Interval#goForward
    private.
    = Replaced HashingStrategies.longHashCode with Java 8
    Long.hashCode.
    = Removed Verify.assertThrows() which takes a Runnable
    in favor of Assert.assertThrows().
    = Removed assertNotEquals() from Verify as Assert already
    has the same API.</changelog>
  <changelog author="Anton Shvetz &lt;shvetz.anton@gmail.com&gt;" date="1659268800">- Update to v11.1.0
  * New Functionality
    = Added Bag.distinctView().
    = Added Bags.mutable.withInitialCapacity.
    = Added forEachInBoth to Primitive Lists.
    = Added MultiReader to Bags factory in API module.
    = Added MultiReader to Lists factory in API module.
    = Added MultiReader to Sets factory in API module.
    = Added Primitive Bag factories in API module.
    = Added Primitive Set factories in API module.
    = Added Primitive Stack factories in API module.
    = Added factory for ObjectPrimitiveHashMapWithHashingStrategy.
    = Added withInitialCapacity api in
    mutableObjectPrimitiveHashingStrategyMapFactory.
    = Added ability to create Hashing Strategy Sets, Maps and Bags
    using Function.
    = Added injectInto for primitive types to primitive iterables.
    = Added injectIntoKeyValue to MapIterable.
    = Added injectIntoKeyValue to objectPrimitiveMap.
    = Added injectIntoKeyValue to primitiveObjectMap.
    = Added injectIntoKeyValue to primitivePrimitiveMap.
    = Added mutable reduction scenario to injectIntoKeyValue test
    for primitive maps.
    = Added object to primitive map factory to API module.
    = Added of and with factory methods to object -&gt; primitive map
    factories.
    = Added of and with factory methods to primitive -&gt; primitive
    and primitive -&gt; object map factories.
    = Added withKeyMultiValues to MutableMultimap and subtypes.
    = Added withKeyValue to MutableMultimap and subtypes.
    = Added getAndPut to mutableObjectPrimitiveMap to retrieve the
    value associated with the key if one exists.
    = Added peekAndPop methods in ImmutableStack.
    = Added fused method for collect + makeString.
    = Added missing implementations of toString().
    = Added selectWithIndex and rejectWithIndex to Ordered
    Primitive Iterables.
    = Implemented containsAny, containsNone, containsAnyIterable,
    containsNoneIterable on RichIterable.
  * Optimizations
    = Optimized asParallel() for immutable sets in O(1) instead of
    O(n).
    = Optimized some implementations of toString() that were
    delegating to iterators.
    = Improved equals() performance for Set implementations.
  * Tech Debt Reduction
    = Replaced implementation factories and dependencies with API
    factories where possible.
    = Fixed CheckStyle configuration for NewlineAtEndOfFile so that
    it works across operating systems.
    = Made forEach a default method on primitiveIterable.stg.
    = Made noneSatisfy a default method on primitiveIterable.stg.
    = Removed unnecessary implementations of
    toSortedList/Set/Bag/MapBy.
    = Disambiguate and deprecate primitive injectInto methods on
    RichIterable.
    = Improved code generation logic into separate goals for
    sources, test-sources, and resources.
    = Improved PIT mutation test coverage.
    = Improved overall test coverage by adding missing tests.
  * Documentation Changes
    = Updated reference guide and convert to AsciiDoc.
    = Updated CONTRIBUTING.md to reflect contribution guidelines
    around commit sign-off.
    = Updated README.md with OSS projects that use Eclipse
    Collections.
  * Build Changes
    = Upgraded CheckStyle from 9.1 to 10.1.
    = Upgraded actions/cache from 2.1.7 to 3.0.2.
    = Upgraded checkstyle-configuration.xml from 1.2 schema to 1.3
    schema.
    = Upgraded setup-java v3.
    = Upgraded actions/cache from 2.1.6 to 2.1.7.
    = Upgraded actions/checkout from 2 to 3.
    = Upgraded actions/upload-artifact from 2.2.4 to 3.
    = Upgraded maven-plugin-api from 3.6.3 to 3.8.5.
    = Upgraded maven-shade-plugin from 3.2.2 to 3.2.4.
    = Upgraded maven-site-plugin from 3.9.0 to 3.11.0.
    = Switched to oracle-actions to download JDK for EA builds.
    = Turned on additional CheckStyle rules and IntelliJ
    inspections.
    = Removed FindBugs build from GitHub workflows.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1694606400">- Reproducible builds: produce reproducible manifest with bnd</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1698840000">- Build the eclipse-collections-api module with release=8 if the
  compiler is supporting it
  * fixes incompatibilities with JDK21 and new added methods in
    java.util.List interface</changelog>
</package>
<package pkgid="d56f636a89496c9fcfdda731f7d8d00a226a6074966d9decdae2a9d7d59d5874e3368f09cf25656704dcf6abdab9f247d84f4d57f54052045e9abb0f3cf7e87f" name="ecryptfs-utils" arch="x86_64">
  <version epoch="0" ver="111" rel="bp160.1.12"/>
  <changelog author="vcizek@suse.com" date="1510056000">- Update to 111
  * upstream provides no changelog
- add ecryptfs-utils-openssl11.patch to support build with
  OpenSSL 1.1 (bsc#1066937)</changelog>
  <changelog author="meissner@suse.com" date="1510660800">- The license is GPL-2.0 (without + / or later)</changelog>
  <changelog author="meissner@suse.com" date="1519214400">- drop python2 support (needs to be replaced by python3 support)
  (bsc#1081587)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597752000">- Fix wrong usage of %{_libexecdir} for systemd owned paths below
  %{_prefix}/lib.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1605614400">- prepare usrmerge (boo#1029961)
  - added: ecryptfs-usrmerge.diff</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1612440000">- usr %_pamdir</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651579200">- use https urls</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN
- Rebase ecryptfs-utils-openssl11.patch: make it apply with patch
  - p1 like all the others.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1714996800">- ecryptfs-fix-gcc14.patch: fix build with gcc14</changelog>
</package>
<package pkgid="61cb597cc53aa1859bb7665ea490e070027d3107cadd23cb228ae5103952e90ce1311c701962643ca1407c2e8b49249ff7aeada15e5a4717d3d28c67ac2786ef" name="ecryptfs-utils-devel" arch="x86_64">
  <version epoch="0" ver="111" rel="bp160.1.12"/>
  <changelog author="vcizek@suse.com" date="1510056000">- Update to 111
  * upstream provides no changelog
- add ecryptfs-utils-openssl11.patch to support build with
  OpenSSL 1.1 (bsc#1066937)</changelog>
  <changelog author="meissner@suse.com" date="1510660800">- The license is GPL-2.0 (without + / or later)</changelog>
  <changelog author="meissner@suse.com" date="1519214400">- drop python2 support (needs to be replaced by python3 support)
  (bsc#1081587)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597752000">- Fix wrong usage of %{_libexecdir} for systemd owned paths below
  %{_prefix}/lib.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1605614400">- prepare usrmerge (boo#1029961)
  - added: ecryptfs-usrmerge.diff</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1612440000">- usr %_pamdir</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651579200">- use https urls</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN
- Rebase ecryptfs-utils-openssl11.patch: make it apply with patch
  - p1 like all the others.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1714996800">- ecryptfs-fix-gcc14.patch: fix build with gcc14</changelog>
</package>
<package pkgid="02504066278feb61a636cc70877ec5c84396811cfb052665e6b319baf7ac6deed9b1b1703a08070e0e4bf7d2b949a5a3f1added7e91cd6c2a0e9fa992ebf0fa3" name="ed" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="160000.2.2"/>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 1.16
  * regex.c (line_replace): Accept 's/^/#/g' as valid.
    (Reported by Bjoern Wibben).
  * main_loop.c: Removed length limit of prompt string.
    (Reported by Tim Chase).
  * main.c: Set a valid invocation_name even if argc == 0.
  * ed.texi: Extended operators depend on regex implementation.
    (Reported by Brian Zwahr).
  * ed.texi: Several fixes and improvements.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="info@paolostivanin.com" date="1611576000">- Update to 1.17
  * The commands 'q' and 'Q' now work in a global command.
  * The new option '-E, --extended-regexp' has been added. It tells
    ed to use extended regular expressions instead of the basic
    regular expressions mandated by POSIX
  * Print the file name in case of read or write error</changelog>
  <changelog author="dmueller@suse.com" date="1647777600">- update to 1.18:
  * The shell escape command (!) now flushes stdout so that the modified command
    is always printed before being executed even if standard output is fully
    buffered (for example, a file).
  * A couple of harmless memory leaks have been fixed. (They both happened just
    before ed exits).
  * The pointer returned by the function 'strip_escapes' is now checked. (It may
    be null if memory is exhausted).
  * The shell escape command (!) now removes the backslash from each escaped '%'
    character within the text of the shell command line.
  * Case-insensitive regular expressions have been implemented as in GNU sed.
  * Syntax errors in regular expressions, for example unmatched ( or \(, no
    longer overwrite a previously compiled regular expression, preventing a
    "No previous pattern" error.
  * The option '--strip-trailing-cr', which removes carriage returns at end of
    text lines, has been added.
  * Loading a file now fails if a line is longer than INT_MAX bytes or if the
    file contains more than INT_MAX lines (usually 2 Gi lines). (Instead of
    overflowing line addresses).
  * In interactive mode ed now sets final exit status to 1 if a fatal error
    happens while reading the file passed in the command line.
  * red now reports "Directory access restricted" instead of "Invalid filename"
    when trying to edit a file outside of the current directory.
  * The new chapter "The 's' Command" has been added to the manual.
- switch to zstd
- remove usrmerged handling</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673870400">- update to 1.19:
  * Reading a non-existent file with commands 'e' or 'E' did set the
    'modified' flag, which prevented a following 'e' command from
    succeeding
  * The long name of option '-s' has been changed to '--script'.
    Option '-s' now only suppresses byte counts and the '!' prompt
    as mandated by POSIX. It no longer suppresses diagnostic
    messages written to stderr.
  * The short name '-q' has been assigned to options '--quiet' and
    '--silent'. Option '-q' now only suppresses diagnostic messages
    written to stderr.
  * The help message showing the line where a script error happened
    when ed's input is from a regular file is now printed to stdout
    instead of stderr because it is enabled by the 'H' command.
  * Ed no longer processes file names for backslash escapes.
  * It has been documented in the manual that address 0 is valid as
    a starting point for searches so that '0;/RE/' can match the
    regular expression RE in the first line of the buffer.
  * It has been documented in the manual how to achieve the effect
    of ex style '!' filtering with a sequence of commands.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1705838400">- update to 1.20:
  * New command-line options for jumping to a line number or match
  * Improved handling of file names containing control characters
  * Tweak workflow for fewer 'buffer modified' warnings
  * Tilde expansion is now performed on file names
  * Warn on modifying a buffer from a read-only file
  * Create missing intermediate directories when writing to a file
  * Documentation updates
- drop obsolete makeinfo marcos</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708084800">- GNU ed 1.20.1:
  * New command-line options '+line', '+/RE', and '+?RE' have been
    implemented to set the current line to the line number
    specified or to the first or last line matching the regular
    expression 'RE'.
  * File names containing control characters 1 to 31 are now
    rejected unless they are allowed with the command-line option
    '--unsafe-names'.
  * File names containing control characters 1 to 31 are now
    printed using octal escape sequences.
  * Ed now rejects file names ending with a slash.
  * Intervening commands that don't set the modified flag no longer
    make a second 'e' or 'q' command fail with a 'buffer modified'
    warning.
  * Tilde expansion is now performed on file names supplied to
    commands; if a file name starts with '~/', the tilde (~) is
    expanded to the contents of the variable HOME.
  * Ed now warns the first time that a command modifies a buffer
    loaded from a read-only file.
  * It has been documented that 'e' creates an empty buffer if
    file does not exist.
  * It has been documented that 'f' sets the default filename,
    whether or not its argument names an existing file.
  * The description of the exit status has been improved in
    '--help' and in the manual.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1714564800">- GNU ed 1.20.2:
  * Fix a bug that made global commands like 'g/x/s/x/x', with the
    last delimiter omitted, print every substituted line twice</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1736596800">- GNU ed 1.21
  * 'r !command' and 'w !command' ignore again the exit status of
    'command'
  * The messages "Newline inserted" and "Newline appended" are now
    suppressed in scripted mode (-s)
  * documentation updates and portqability fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1743768000">- GNU ed 1.21.1:
  * Fixed a compilation failure caused by the inclusion of the
    unused and obsolete header &lt;sys/file.h&gt;
  * Ed now reads the initial window size for the z command from the
    environment variable LINES</changelog>
</package>
<package pkgid="a904a2901ad87f7cedb57c5b49a4c940fecd40190a30f28d5ad38f4df90d1f6349645fb2468fd094dde57456151db7e5a4a4e44257e7fe66d31dea20fb72e1ba" name="ed25519-java" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1593432000">- Initial packaging of ed25519 0.3.0</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with source and target levels 8
- Added patches:
  * 0001-EdDSAEngine.initVerify-Handle-any-non-EdDSAPublicKey.patch
  * 0002-Disable-test-that-relies-on-internal-sun-JDK-classes.patch
    + Remove use of internal sun JDK classes</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1730289600">- Rewrite the build using ant</changelog>
  <changelog author="fstrba@suse.com" date="1741953600">- Added patch:
  * ed25519-java-CVE-2020-36843.patch
    + backport commit https://github.com/i2p/i2p.i2p/commit/
    /d7d1dcb5399c61cf2916ccc45aa25b0209c88712
    + Fixes bsc#1239551, CVE-2020-36843: no check performed on
    scalar to avoid signature malleability</changelog>
</package>
<package pkgid="55a488a5cadc2eaf9fe175c4d735e47e985c4a31a97547ec0372d4819dc3a5c34bec029a5eea847e5054ad856388f41412477dd39233463be6b65d721c936c84" name="ed25519-java-javadoc" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="160000.2.2"/>
  <changelog author="fstrba@suse.com" date="1593432000">- Initial packaging of ed25519 0.3.0</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with source and target levels 8
- Added patches:
  * 0001-EdDSAEngine.initVerify-Handle-any-non-EdDSAPublicKey.patch
  * 0002-Disable-test-that-relies-on-internal-sun-JDK-classes.patch
    + Remove use of internal sun JDK classes</changelog>
  <changelog author="fstrba@suse.com" date="1694433600">- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1730289600">- Rewrite the build using ant</changelog>
  <changelog author="fstrba@suse.com" date="1741953600">- Added patch:
  * ed25519-java-CVE-2020-36843.patch
    + backport commit https://github.com/i2p/i2p.i2p/commit/
    /d7d1dcb5399c61cf2916ccc45aa25b0209c88712
    + Fixes bsc#1239551, CVE-2020-36843: no check performed on
    scalar to avoid signature malleability</changelog>
</package>
<package pkgid="f9e2c14987b9997162b235f3e294cef93512a57623e052dedf857fe9447e52af0880fa3e32f0a2d15e846d2a5e582f281b0aa72c02812d22324e2e70f629044f" name="edge-addition-planarity-suite" arch="x86_64">
  <version epoch="0" ver="3.0.2.0" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Initial package (version 3.0.1.0) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655380800">- Update to release 3.0.2.0
  * Manpage updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- install license
- move docs to main package</changelog>
</package>
<package pkgid="a4258db51114a75419339a1c85906615e4ffd41f0ff73598bd10ab72da995ac13ce820e9d119ca40dc32b7229f409a9a81e008a2275d80f4198e501e6f4bf6b7" name="edge-addition-planarity-suite-devel" arch="x86_64">
  <version epoch="0" ver="3.0.2.0" rel="bp160.1.13"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600516800">- Initial package (version 3.0.1.0) for build.opensuse.org</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655380800">- Update to release 3.0.2.0
  * Manpage updates</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1670155200">- install license
- move docs to main package</changelog>
</package>
<package pkgid="ff7737928900d57de47ddbe769f033e863c1974d1d88c033014892259638261bce7ecc4cde0f149bfde5eaafd0e141e504fa778a08ae11499268853089cbbbe0" name="edict" arch="noarch">
  <version epoch="0" ver="20230511" rel="bp160.1.10"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1581595200">- Fix invalid RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598356800">- Update to snapshot 20200825
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1604232000">- Update to snapshot 20201102
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to snapshot 20210429
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1622289600">- Update to snapshot 20210529
  * Approximately 600 entries were updated.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1640952000">- Update to snapshot 20211231
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to snapshot 20220214
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648900800">- Update to snapshot 20220402
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681128000">- Update to snapshot 20230411
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1683806400">- Update to snapshot 20230511
  * No changelog recorded.
- Provide EUC-JP encoded variants again, for the "kiten" program.</changelog>
</package>
<package pkgid="cf8f58e148391243b5d846c5d23ced29f6b9b119756c38d893059c21b10ab155793f1f2e1dd3f346d2634d8ae67980f6f2b374657393b0aa340e486c884b928e" name="edict-eucjp" arch="noarch">
  <version epoch="0" ver="20230511" rel="bp160.1.10"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1581595200">- Fix invalid RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598356800">- Update to snapshot 20200825
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1604232000">- Update to snapshot 20201102
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to snapshot 20210429
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1622289600">- Update to snapshot 20210529
  * Approximately 600 entries were updated.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1640952000">- Update to snapshot 20211231
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to snapshot 20220214
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648900800">- Update to snapshot 20220402
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681128000">- Update to snapshot 20230411
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1683806400">- Update to snapshot 20230511
  * No changelog recorded.
- Provide EUC-JP encoded variants again, for the "kiten" program.</changelog>
</package>
<package pkgid="4a0cb72fb9e7e966379ee2a9651c559713eca6a012921c7e325247fa04e0297556e290d6ed0cdfdc23f258e5f57f8f8766790a197f52ff35b8bf1fe5e388d6a9" name="edict2" arch="noarch">
  <version epoch="0" ver="20230511" rel="bp160.1.10"/>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1581595200">- Fix invalid RPM group.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598356800">- Update to snapshot 20200825
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1604232000">- Update to snapshot 20201102
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619697600">- Update to snapshot 20210429
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1622289600">- Update to snapshot 20210529
  * Approximately 600 entries were updated.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1640952000">- Update to snapshot 20211231
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1644753600">- Update to snapshot 20220214
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1648900800">- Update to snapshot 20220402
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1681128000">- Update to snapshot 20230411
  * No changelog recorded.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1683806400">- Update to snapshot 20230511
  * No changelog recorded.
- Provide EUC-JP encoded variants again, for the "kiten" program.</changelog>
</package>
<package pkgid="b7e1794fd581ad498dd36d45d3730d20876536cdff4983125a2512d42c54813a932256ee64dd4663e2b343b21cf001b2abb8fd6e9ea2a376d5dc373463e1a5f1" name="editorconfig" arch="x86_64">
  <version epoch="0" ver="0.12.9" rel="160000.2.2"/>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="herbert@graeber-clan.de" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="fvogt@suse.com" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1604750400">- editorconfig-core-c 0.12.4:
  * fix various stability issues caused by memory handling
- drop upstream patch now included:
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
  <changelog author="herbert@graeber-clan.de" date="1624795200">- editorconfig-core-c 0.12.5:
  * Fix memory leak which would occur if no .editorconfig files were found
    in the file's ancestry or if an error occurred while ingesting values.</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683028800">- editorconfig-core-c 0.12.6:
  * CVE-2023-0341: A buffer overflow in ec_blob (boo#1211032)
  * Update property key, value length limits per spec change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1713096000">- update to 0.12.7:
  * Fix pointer overflow in STRING_CAT
  * Fix a few more stack buffer overflows
- drop HTML docs and editorconfig-core-c-0.12.1-install_paths.patch
- drop editorconfig-core-c-0.12.1-no_timestamp.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1718452800">- update to 0.12.8:
  * lib/ec_glob: plug leak of nums utarray</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1718625600">- update to 0.12.9:
  * fix potentially uninitialized local (variable|pointer)</changelog>
  <changelog author="mgorse@suse.com" date="1748001600">- Fix intermittent build failure (bsc#1243568): Add
  0001-Generate-output-directories-before-building-manpages.patch:</changelog>
</package>
<package pkgid="e12b2069c4ebbbb14eea52fa9e72b333f25f0355b6b9acd8ef2160c70dbe948ca65d12826530588a807e7abdcc74222301eead47a38beb90f8c60d6d9db172b9" name="editorconfig" arch="x86_64">
  <version epoch="0" ver="0.12.9" rel="160000.3.1"/>
  <changelog author="herbert@graeber-clan.de" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="fvogt@suse.com" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1604750400">- editorconfig-core-c 0.12.4:
  * fix various stability issues caused by memory handling
- drop upstream patch now included:
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
  <changelog author="herbert@graeber-clan.de" date="1624795200">- editorconfig-core-c 0.12.5:
  * Fix memory leak which would occur if no .editorconfig files were found
    in the file's ancestry or if an error occurred while ingesting values.</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683028800">- editorconfig-core-c 0.12.6:
  * CVE-2023-0341: A buffer overflow in ec_blob (boo#1211032)
  * Update property key, value length limits per spec change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1713096000">- update to 0.12.7:
  * Fix pointer overflow in STRING_CAT
  * Fix a few more stack buffer overflows
- drop HTML docs and editorconfig-core-c-0.12.1-install_paths.patch
- drop editorconfig-core-c-0.12.1-no_timestamp.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1718452800">- update to 0.12.8:
  * lib/ec_glob: plug leak of nums utarray</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1718625600">- update to 0.12.9:
  * fix potentially uninitialized local (variable|pointer)</changelog>
  <changelog author="mgorse@suse.com" date="1748001600">- Fix intermittent build failure (bsc#1243568): Add
  0001-Generate-output-directories-before-building-manpages.patch:</changelog>
  <changelog author="alynx.zhou@suse.com" date="1776945600">- Add editorconfig-core-c-CVE-2026-40489.patch: Fix l_pattern
  buffer overflow. (CVE-2026-40489, bsc#1262131)</changelog>
</package>
<package pkgid="55d726b4e9cedaba750c9b776e0d4e822c24136df94f30867fbfa383ff84f96b7a1e225e8f8dc608f519bb85aef73c522c65d9f7ffedbc1e8cf12fce72db73a5" name="editres" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="bp160.1.12"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split editres from xorg-x11. Initial version: 1.0.5.</changelog>
  <changelog author="zaitor@opensuse.org" date="1358596800">- Update to version 1.0.6:
  + Remove Xorg/XFree86 CVS/RCS id tags.
  + config:
  - Move man pages into their own directory.
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Replace deprecated AC_HELP_STRING with AS_HELP_STRING.
  + man:
  - Replace hard coded man page section with substitution strings
  - Remove trailing spaces and tabs.</changelog>
  <changelog author="sndirsch@suse.com" date="1391688000">- fixed license to X11 in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.0.7
  * This version raises the minimum version of libXt required to build &amp; run
    editres to libXt 1.0.99.1.</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1648987200">- Update to version 1.0.8
  * bugfix release</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1709553600">- Update to version 1.0.9
  * Ensure all *.c files include config.h before any other headers
  * Re-enable code to use XKB Bells
  * Add -help and -version options
  * List which options were unrecognized before printing usage message
  * gitlab CI: stop requiring Signed-off-by in commits
  * fix const error
  * FIX const warning
  * FIX some const warnings
  * stop const warnings
  * stop const warnings
  * stop const warnings
  * stop const warnings
  * stop const warnings
  * fix initialization discards const
  * Fix shadowing box</changelog>
</package>
<package pkgid="cb42283b12b52987a953fcc50a4532a6dec5a39fdf3d5382949a3af8b38e09952ca3e42c748c6f3af5d4ca88854ab906ffeaddcb3d4f55e054cfee59c96493c5" name="ee4j" arch="noarch">
  <version epoch="0" ver="1.0.7" rel="bp160.1.10"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1610712000">- Initial packaging of ee4j parent pom 1.0.6</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1649073600">- Update to version 1.0.7</changelog>
</package>
<package pkgid="1186d9a6c88177b237cce16aed2bedc96ea5df121013c22be6cabfd27e6a4a60567f204c863a7ee0dd0dd077c22486c6cbf8b4d3bf746fe94a7a1e54a55084c7" name="eekboard" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="bp160.1.13"/>
  <changelog author="hillwood@linuxfans.org" date="1348488000">- Initial package.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1348574400">- move girepository files to typelib-1_0-Eek-0_90 package.</changelog>
  <changelog author="mlin@suse.com" date="1359633600">- makes more flexible for pkgconfig with vala</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1601294400">- fix libexecdir</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1632225600">- Add port-to-python3.patch:
  * Ports gen-keysym-entries.py to Python 3.
- Remove unneeded BuildRequires on python and python-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="0f5a07ebe09849dba71f11825c727fcc6a1f204d9c3b3257ab8aefc10f9b993bcc67158b5fa96e8a59ffa973dc47bee233b59177e288098095129e95b4b88fbb" name="eekboard-devel" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="bp160.1.13"/>
  <changelog author="hillwood@linuxfans.org" date="1348488000">- Initial package.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1348574400">- move girepository files to typelib-1_0-Eek-0_90 package.</changelog>
  <changelog author="mlin@suse.com" date="1359633600">- makes more flexible for pkgconfig with vala</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1601294400">- fix libexecdir</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1632225600">- Add port-to-python3.patch:
  * Ports gen-keysym-entries.py to Python 3.
- Remove unneeded BuildRequires on python and python-devel</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="00a903810ce958439264ff54cc64c0b70172bfa7326294ffcb2c0896b5c8e48ba98d1a23d7f4ccc132b7edfec3a0b5885885760ab14f77c57cc1489ad154059d" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="18" rel="160000.2.2"/>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
  <changelog author="glin@suse.com" date="1671537600">- Update to v18
  * fixed the simple run example
  * Restore activation error message in efibootmgr
  * remove-dupes: update error message
  * Fix typo in manual page
  * README: Note efivarfs as the current required kernel module
  * Fix possible read out of bounds in ucs2_to_utf8
  * Add code of conduct
  * Fix help messages
  * Add option for insertion location of new entries
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="8bb7c1a3d11f4c1c4edfe40c20d59a3bbd60dc81b8be12f8aacb6bcfda0153ebdf10a6e13e1e30bb79d5f99c8050034205bfefe1aaef666cf70a129af79b7cf3" name="efitools" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="bp160.1.10"/>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1608724800">- initial import (version 1.9.2)
  + Only package the userspace tools</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1709899200">- Add efitools-bsc1220470-fix-gcc14-errors.patch to fix gcc-14
  errors (bsc#1220470)</changelog>
</package>
<package pkgid="be760c9ac174847a643f3b892e719450d0797a4a3247f2c9889fd6a6088ddfd75aca0bfbb0cddef05c9ccd049bb18f838f5cfb4e23e7d2c9f296c9f1879b9a23" name="efivar" arch="x86_64">
  <version epoch="0" ver="38" rel="160000.2.2"/>
  <changelog author="glin@suse.com" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="glin@suse.com" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="mliska@suse.cz" date="1597406400">- Do not partition LTO as we may reach new GAS error:
  Error: invalid attempt to declare external version
  name as default in symbol `efi_set_variable@@LIBEFIVAR_0.24'</changelog>
  <changelog author="glin@suse.com" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault in non-EFI systems (bsc#1175989)</changelog>
  <changelog author="glin@suse.com" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)
- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="glin@suse.com" date="1660132800">- Add efivar-bsc1202209-fix-glibc-2.36-build.patch to fix the build
  error against glibc 2.36 (bsc#1202209)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671624000">- Update spec file to current standards</changelog>
  <changelog author="glin@suse.com" date="1676030400">- Update to 38
  + Rework some makefile bits to make overriding some options
    simpler
  + Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem}
    devices
  + guids.S: Include &lt;cet.h&gt; when CET is enabled
  + Fix /sys/block sysfs parsing for eMMC-s
  + Properly check mmap return error
  + Fix s{yt,ty}le typo in efi_get_variable(3)
  + Handle NULL set_variable()
  + Fix parsing for nvme-subsystem devices
  + Attempt to fix the identified thread safety bugs
  + Make thread-test depend on libefivar.so
  + Upstream a local patch from rawhide
  + Fix conversion from UTF8 to UCS2
  + efivar: make docs match current code for 'efivar -A'
  + Add code of conduct
  + Misc minor fixes
  + Add efi_time_t declarations and helper functions
  + More misc fixes
  + Coverity fixes 20211208
  + Fix linux virtual root device parsing
  + efivar.spec.in: fix license to be valid SPDX
  + Add efisecdb tooling
  + Fix linker string comparison for dash
- Add efivar-bsc1206388-revamp-efi_well_known-variable-handling.patch
  to remove the ld script hack for efi_well_known_* variables
  that caused build failure with LTO (bsc#1206388)
- Add mandoc to BuildRequires to build efisecdb man page
- Add efivar-adjust-dependency.patch to avoid 'make install' from
  building the binaries again
- Add efivar-filter-gcc-march.patch to drop '-march=native' from
  HOST_CPPFLAGS for ppc64le and riscv64 due to the absence of the
  gcc parameter
- Refresh libefiboot-export-disk_get_partition_info.patch
  + Cast (uint8_t *) signature to (partition_signature_t *)
  + Update src/libefiboot.map.in
- Remove upstreamed patches
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
  + efivar-bsc1127544-fix-ucs2len.patch
  + efivar-bsc1175989-handle-NULL-set-variable.patch
  + efivar-bsc1181967-fix-nvme-parsing.patch
  + efivar-bsc1187386-fix-emmc-parsing.patch
  + efivar-fix-efidp_ipv4_addr-fields-assignment.patch
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1697025600">- We don’t mandoc at all after all (gh#rhboot/efivar#229 and
  gh#rhboot/efivar#253).</changelog>
  <changelog author="bwiedemann@suse.com" date="1728388800">- Adapt efivar-filter-gcc-march.patch to drop -march=native (boo#1231368)</changelog>
</package>
<package pkgid="b6ea03372319407bec914e3e82f84a60d80f5faf89e601e87e31c3302ea202d1824518f92befb7689d87ef0d570ced0765986c4de22c1e9f3f3eca8b6db94149" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="38" rel="160000.2.2"/>
  <changelog author="glin@suse.com" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="glin@suse.com" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="mliska@suse.cz" date="1597406400">- Do not partition LTO as we may reach new GAS error:
  Error: invalid attempt to declare external version
  name as default in symbol `efi_set_variable@@LIBEFIVAR_0.24'</changelog>
  <changelog author="glin@suse.com" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault in non-EFI systems (bsc#1175989)</changelog>
  <changelog author="glin@suse.com" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)
- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="glin@suse.com" date="1660132800">- Add efivar-bsc1202209-fix-glibc-2.36-build.patch to fix the build
  error against glibc 2.36 (bsc#1202209)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1671624000">- Update spec file to current standards</changelog>
  <changelog author="glin@suse.com" date="1676030400">- Update to 38
  + Rework some makefile bits to make overriding some options
    simpler
  + Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem}
    devices
  + guids.S: Include &lt;cet.h&gt; when CET is enabled
  + Fix /sys/block sysfs parsing for eMMC-s
  + Properly check mmap return error
  + Fix s{yt,ty}le typo in efi_get_variable(3)
  + Handle NULL set_variable()
  + Fix parsing for nvme-subsystem devices
  + Attempt to fix the identified thread safety bugs
  + Make thread-test depend on libefivar.so
  + Upstream a local patch from rawhide
  + Fix conversion from UTF8 to UCS2
  + efivar: make docs match current code for 'efivar -A'
  + Add code of conduct
  + Misc minor fixes
  + Add efi_time_t declarations and helper functions
  + More misc fixes
  + Coverity fixes 20211208
  + Fix linux virtual root device parsing
  + efivar.spec.in: fix license to be valid SPDX
  + Add efisecdb tooling
  + Fix linker string comparison for dash
- Add efivar-bsc1206388-revamp-efi_well_known-variable-handling.patch
  to remove the ld script hack for efi_well_known_* variables
  that caused build failure with LTO (bsc#1206388)
- Add mandoc to BuildRequires to build efisecdb man page
- Add efivar-adjust-dependency.patch to avoid 'make install' from
  building the binaries again
- Add efivar-filter-gcc-march.patch to drop '-march=native' from
  HOST_CPPFLAGS for ppc64le and riscv64 due to the absence of the
  gcc parameter
- Refresh libefiboot-export-disk_get_partition_info.patch
  + Cast (uint8_t *) signature to (partition_signature_t *)
  + Update src/libefiboot.map.in
- Remove upstreamed patches
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
  + efivar-bsc1127544-fix-ucs2len.patch
  + efivar-bsc1175989-handle-NULL-set-variable.patch
  + efivar-bsc1181967-fix-nvme-parsing.patch
  + efivar-bsc1187386-fix-emmc-parsing.patch
  + efivar-fix-efidp_ipv4_addr-fields-assignment.patch
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1697025600">- We don’t mandoc at all after all (gh#rhboot/efivar#229 and
  gh#rhboot/efivar#253).</changelog>
  <changelog author="bwiedemann@suse.com" date="1728388800">- Adapt efivar-filter-gcc-march.patch to drop -march=native (boo#1231368)</changelog>
</package>
<package pkgid="057575d1162bc4c10f03c91d20a5e441d06302ca518f1c62c94bd39d98f14be5f0955cd5b20218d7f7aaaba25255ca83b99eb67c3a01df8dd8a10e802300d816" name="efl" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="a60fc091356845275dd0c56806b4d943ef9ca933b6aca417e9c79f0610648444b88f803076eb2feea406fd5c8d234c58b258d79fbc8a006794b6d432f9f8b518" name="efl-devel" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="97be2fcc97be86f8edb95b3ef697d2d10abb4ed6dc7600b81dc0859c4f39c674caf0a32496c785011d5fed7584d4fe390fff4aa1febbd4c5cba2849b96792543" name="efl-examples" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="0da0904e36f2c160334749d3a048180aeb3d0023cbbdef151ee0c61814ebc03a9aed6ab95a694c11080e566fce0229ed7095e75415d796b14e51100d21d53d8b" name="efl-lang" arch="noarch">
  <version epoch="0" ver="1.26.3" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="849d389ad306fe2b55d55ebc882d91de1bb0334445cfd45d94b514bd7a63b9c2bec1c7e57c17ad820344e1b124aaf134025c098385ce7ad43782ce6e67538dd6" name="efl-testsuite" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="a821601e751aad296fa0e98519f117d8e2b7a0d4335756a15021ba97e87dc8dc6e6c6bea36dc883384ae7fc5598e40218802f7cf85bfecd3f96d63462b90bf54" name="efm-langserver" arch="x86_64">
  <version epoch="0" ver="0.0.49" rel="bp160.1.13"/>
  <changelog author="Soc Virnyl Estela &lt;uncomfy+openbuildservice@uncomfyhalomacro.pl&gt;" date="1703505600">- Initial spec for efm-langserver 0.0.49</changelog>
</package>
<package pkgid="16c0527a285f25b4b63540ba8068fb42dae9fed03c72d02db4e27c56abbe5a88beb9279b64b7990f06164119e7ab9a619589c806f196e6eb264868d97b79247e" name="efont-unicode-bitmap-fonts" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="bp160.1.9"/>
  <changelog author="mfabian@suse.de" date="1164110400">- Bugzilla #199997: Add the special glyphs needed by YaST2
  to the halfwidth fonts.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- removed unnecessary buildrequires for too old distros</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- Renamed efont-unicode -&gt; efont-unicode-bitmap-fonts according to
  openSUSE packaging guidelines and FATE#313035</changelog>
  <changelog author="pgajdos@suse.com" date="1333454400">- SUSE-Public-Domain and BSD-3-Clause license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="bwiedemann@suse.com" date="1497787200">- Add reproducible.patch to call gzip -n to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574337600">- Fix use of deprecated one-based array index, removed in perl 5.30.
  Add remove_deprecated_one_based_array_index.diff</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="cdccbb213c1c140b836e6c7c228446433a9179f75c07647e3b2f058e428fa0bf9a71b015b32b58b4cc76eb03eb5d75ec2e8e8ad95507fc02345dede33e31bcd2" name="eglexternalplatform-devel" arch="x86_64">
  <version epoch="0" ver="1.2" rel="160000.2.2"/>
  <changelog author="aevseev@gmail.com" date="1625140800">- First build. Version 1.1 + git</changelog>
  <changelog author="sndirsch@suse.com" date="1625140801">- tried to address checkin policy issues for factory</changelog>
  <changelog author="sndirsch@suse.com" date="1625140802">- added missing copyright to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1625140803">- specfile cleanup</changelog>
  <changelog author="sndirsch@suse.com" date="1625140804">- added webpage for source tarballs to specfile</changelog>
  <changelog author="jengelh@inai.de" date="1625140805">- Move headers into -devel subpackage to soothe the corresponding
  rpmlint warning.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625400000">- Use better tarball URL
- Run spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- needed for jira#SLE/SLE-19965, jira#SLE/SLE-19964, jira#SLE/SLE-18653</changelog>
  <changelog author="sndirsch@suse.com" date="1726747200">- update to release 1.2
  * Change the shutdown behavior so that
    EGLExtPlatformExports::unloadEGLExternalPlatform is called
    while the internal EGLDisplays are still valid.
  * Added a meson.build file to generate the pkg-config file. It's
    also set up so that you can use eglexternalplatform as a Meson
    subproject.
  * Interface version 1.2 is supported on 560.* and later drivers.</changelog>
</package>
<package pkgid="bc4b337ed0335f457272974c2f24dd443db1cc95dd892c681e4e84be36dfb1378facbf19fafe545e1f8d281816df3db4f639b39def78afcd1cd0881f2a4aa1c4" name="eglexternalplatform-devel" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="160000.1.1"/>
  <changelog author="sndirsch@suse.com" date="1625140800">- added missing copyright to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1625140801">- specfile cleanup</changelog>
  <changelog author="sndirsch@suse.com" date="1625140802">- added webpage for source tarballs to specfile</changelog>
  <changelog author="jengelh@inai.de" date="1625140803">- Move headers into -devel subpackage to soothe the corresponding
  rpmlint warning.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1625400000">- Use better tarball URL
- Run spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- needed for jira#SLE/SLE-19965, jira#SLE/SLE-19964, jira#SLE/SLE-18653</changelog>
  <changelog author="sndirsch@suse.com" date="1726747200">- update to release 1.2
  * Change the shutdown behavior so that
    EGLExtPlatformExports::unloadEGLExternalPlatform is called
    while the internal EGLDisplays are still valid.
  * Added a meson.build file to generate the pkg-config file. It's
    also set up so that you can use eglexternalplatform as a Meson
    subproject.
  * Interface version 1.2 is supported on 560.* and later drivers.</changelog>
  <changelog author="sndirsch@suse.com" date="1749556800">- update to release 1.2.1
  * Override the installation directory of the pkg-config file to
    put it in the correct architecture-independent directory.</changelog>
  <changelog author="sndirsch@suse.com" date="1749556801">- removed again empty %check section</changelog>
  <changelog author="sndirsch@suse.com" date="1767009600">- no relevant changes in specfie</changelog>
</package>
<package pkgid="4af086e80c49285065aca6e21bb03483ddf730beac14c354a0ea6178049f3cf8a06d86a575d87ce870f11ca6a22bb54b05bf59d467f0bd8bccd2ddb7233fd245" name="eiciel" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="bp160.1.14"/>
  <changelog author="dimstar@opensuse.org" date="1463054400">- Do not delete the .desktop file. It is needed for AppStream
  processes to have a valid reference.
- Add update-desktop-files BuildRequires.
- Change Categories of eiciel.desktop to System;Filesystem.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Remove BuildRequires on libgnomeui-devel and conditional build
  against gtk2.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 0.9.12.1:
  + Fix desktop file.
- Changes from version 0.9.12:
  + Updates for better integration with AppStream.
- Adopt the use of %make_install rather than raw make command,
  following the best practices.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Conditionalize translation-update-upstream BuildRequires use as
  it's a SLE-only requirement.
- Drop intltool BuildRequires: since upstream migrated to Gettext
  it's no longer needed anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538136000">- Add eiciel-sys-xattr.patch -- &lt;attr/xattr.h&gt; is deprecated, use
  &lt;sys/xattr.h&gt; instead. Also use sed to replace the relevant parts
  of configure.
- Run spec-cleaner, modernize specfile.
- Apply translation-update also for openSUSE, drop conditionals.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility fix:
  * 0001-Remove-deprecated-dynamic-exception-specifications.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998400">- Update to version 0.9.13.1:
  + Solves a missing file in the archive and adds some
    compatibility support to build on old distributions.
- Changes from version 0.9.13:
  + This update includes the long-requested feature of recursive
    changing of permissions and some minor cleanups (mostly
    non-functional changes).
  + Add meson build system.
- Drop
  0001-Remove-deprecated-dynamic-exception-specifications.patch and
  eiciel-sys-xattr.patch: fixed upstream.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1666094400">- Update to 0.10.0.rc2 version:
  + This is a fully updated version to gtk4 and the new plugin
    interface of GNOME Files 43.
  + This version is meant to be used with GNOME Files 43 (and
    later) and it will not work with any earlier version.
  + The plugin support in GNOME Files 43 has been simplified, so
    edition is not possible inside GNOME Files' Properties dialog.
    Visualisation support has been implemented in GNOME Files. To
    edit ACLs or Extended Attributes, use the contextual menu over
    a file or directory in the files view of GNOME Files, this will
    start Eiciel in edit mode for that file directly.
  + Build system has been fully ported to Meson (Autotools has been
    dropped).
  + The id/app-id has been normalised from org.roger-ferrer.Eiciel
    to org.roger_ferrer.Eiciel everywhere given the inconsistent
    handling of the hyphen in the GNOME stack.
- Drop no longer needed update-desktop-files build requirement and
  suse_update_desktop_file macro.
- Drop no longer needed libattr-devel and fdupes build requirements
  and fdupes macro.
- Update pkgconfig module build requirements (align with Meson
  script):
  + "gtkmm-3.0 &gt;= 3.0.0" to "gtkmm-4.0 &gt;= 4.6";
  + "libnautilus-extension &gt;= 3.0.0" to
    "libnautilus-extension-4 &gt;= 43"
- Add Meson build requirement and replace Autotools macros with
  Meson's (configure/make_build/make_install to meson/meson_build/
  meson_install).
- Add new build requirements: "giomm-2.68 &gt;= 2.68" pkgconfig module
  and itstool.
- Update 'packageand(package1:package2)' obsolete Supplements
  syntax to '(package1 and package2)' for supplementation of eiciel
  and nautilus packages.
- Add 0001-Add-man-subdir-to-top-level-meson.build.patch and
  0001-Replace-deprecated-attr-xattr.h-with-sys-xattr.h.patch
  patches to fix installation of manpage and check for sys/xattr.h
  rather than deprecated attr/xattr.h, respectively.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1681473600">- Update to version 0.10.0:
  + Updated translations.
- Drop merged upstream patches:
  0001-Add-man-subdir-to-top-level-meson.build.patch and
  0001-Replace-deprecated-attr-xattr.h-with-sys-xattr.h.patch.
- Move English translations from the lang sub-package to the main
  one. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add eiciel.rpmlintrc file to filter out the "file-not-in-%lang"
  RPM Lint warning for the reason above.</changelog>
</package>
<package pkgid="28b96ddc8375f7e4a52584f61bf62136566cd310eca0f1e6ba35e49499c02c99763c04ee9cbf415ca72143fa15351ad47ec064ddc17135d890d6ca40a88dd1ec" name="eiciel-lang" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="bp160.1.14"/>
  <changelog author="dimstar@opensuse.org" date="1463054400">- Do not delete the .desktop file. It is needed for AppStream
  processes to have a valid reference.
- Add update-desktop-files BuildRequires.
- Change Categories of eiciel.desktop to System;Filesystem.</changelog>
  <changelog author="fcrozat@suse.com" date="1502452800">- Remove BuildRequires on libgnomeui-devel and conditional build
  against gtk2.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 0.9.12.1:
  + Fix desktop file.
- Changes from version 0.9.12:
  + Updates for better integration with AppStream.
- Adopt the use of %make_install rather than raw make command,
  following the best practices.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Conditionalize translation-update-upstream BuildRequires use as
  it's a SLE-only requirement.
- Drop intltool BuildRequires: since upstream migrated to Gettext
  it's no longer needed anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538136000">- Add eiciel-sys-xattr.patch -- &lt;attr/xattr.h&gt; is deprecated, use
  &lt;sys/xattr.h&gt; instead. Also use sed to replace the relevant parts
  of configure.
- Run spec-cleaner, modernize specfile.
- Apply translation-update also for openSUSE, drop conditionals.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility fix:
  * 0001-Remove-deprecated-dynamic-exception-specifications.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1653998400">- Update to version 0.9.13.1:
  + Solves a missing file in the archive and adds some
    compatibility support to build on old distributions.
- Changes from version 0.9.13:
  + This update includes the long-requested feature of recursive
    changing of permissions and some minor cleanups (mostly
    non-functional changes).
  + Add meson build system.
- Drop
  0001-Remove-deprecated-dynamic-exception-specifications.patch and
  eiciel-sys-xattr.patch: fixed upstream.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1666094400">- Update to 0.10.0.rc2 version:
  + This is a fully updated version to gtk4 and the new plugin
    interface of GNOME Files 43.
  + This version is meant to be used with GNOME Files 43 (and
    later) and it will not work with any earlier version.
  + The plugin support in GNOME Files 43 has been simplified, so
    edition is not possible inside GNOME Files' Properties dialog.
    Visualisation support has been implemented in GNOME Files. To
    edit ACLs or Extended Attributes, use the contextual menu over
    a file or directory in the files view of GNOME Files, this will
    start Eiciel in edit mode for that file directly.
  + Build system has been fully ported to Meson (Autotools has been
    dropped).
  + The id/app-id has been normalised from org.roger-ferrer.Eiciel
    to org.roger_ferrer.Eiciel everywhere given the inconsistent
    handling of the hyphen in the GNOME stack.
- Drop no longer needed update-desktop-files build requirement and
  suse_update_desktop_file macro.
- Drop no longer needed libattr-devel and fdupes build requirements
  and fdupes macro.
- Update pkgconfig module build requirements (align with Meson
  script):
  + "gtkmm-3.0 &gt;= 3.0.0" to "gtkmm-4.0 &gt;= 4.6";
  + "libnautilus-extension &gt;= 3.0.0" to
    "libnautilus-extension-4 &gt;= 43"
- Add Meson build requirement and replace Autotools macros with
  Meson's (configure/make_build/make_install to meson/meson_build/
  meson_install).
- Add new build requirements: "giomm-2.68 &gt;= 2.68" pkgconfig module
  and itstool.
- Update 'packageand(package1:package2)' obsolete Supplements
  syntax to '(package1 and package2)' for supplementation of eiciel
  and nautilus packages.
- Add 0001-Add-man-subdir-to-top-level-meson.build.patch and
  0001-Replace-deprecated-attr-xattr.h-with-sys-xattr.h.patch
  patches to fix installation of manpage and check for sys/xattr.h
  rather than deprecated attr/xattr.h, respectively.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1681473600">- Update to version 0.10.0:
  + Updated translations.
- Drop merged upstream patches:
  0001-Add-man-subdir-to-top-level-meson.build.patch and
  0001-Replace-deprecated-attr-xattr.h-with-sys-xattr.h.patch.
- Move English translations from the lang sub-package to the main
  one. This should offer translations for the main English locales
  without the need to install any additional package by default.
- Add eiciel.rpmlintrc file to filter out the "file-not-in-%lang"
  RPM Lint warning for the reason above.</changelog>
</package>
<package pkgid="13d6ed475e0776b25ef02b05c7f51f5e1762b05cb01b43cd92e9509f4db814771fb99600dcae7f24ef3d5a076769f76f8f4145b35a744182fcd8e111c6249226" name="eigen3-devel" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="160000.2.2"/>
  <changelog author="bwiedemann@suse.com" date="1551182400">- Drop doc tgz that contained duplicated files
  to make the package build reproducible (boo#1047218)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1563969600">- Clean up spec file:
  * Correct License tag, some included algorithms are LGPL-2.1-only
  * Remove conditionals for obsolete distributions (which were failing
    or unresolvable anyway)
  * Remove defattr, use license macro
  * Hide GL/GLUT/GLEW BuildRequires behind tests bcond, as tests are
    not build currently
  * Add missing BuildRequires tex(newunicodechar.sty), group doc dependencies</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1565006400">- Convert to _multibuild, to avoid doc dependencies when building
  the main package.</changelog>
  <changelog author="badshah400@gmail.com" date="1600344000">- Add eigen3-CastXML-support-for-aarch64.patch to support CastXML
  on aarch64 [https://gitlab.com/libeigen/eigen/-/issues/1979];
  patch taken from upstream commit and rebased to apply without
  fuzz.</changelog>
  <changelog author="badshah400@gmail.com" date="1602763200">- Update to version 3.3.8:
  * General bug fixes:
  - Issue #1995: Fix a failure in the GEBP kernel when using
    small L1 cache sizes, OpenMP and FMA.
  - Issue #1990: Make CMake accept installation paths relative
    to CMAKE_INSTALL_PREFIX.
  - Issue #1974: Fix issue when reserving an empty sparse matrix
  - Issue #1823: Fix incorrect use of std::abs
  - Issue #1788: Fix rule-of-three violations inside the stable
    modules. This fixes deprecated-copy warnings when compiling
    with GCC&gt;=9. Also protect some additional Base-constructors
    from getting called by user code code (Issue #1587)
  - Issue #1796: Make matrix squareroot usable for Map and Ref
    types.
  - Issue #1281: Fix AutoDiffScalar's make_coherent for nested
    expression of constant ADs.
  - Issue #1761: Fall back is_integral to std::is_integral in
    c++11 and fix internal::is_integral&lt;size_t/ptrdiff_t&gt; with
    MSVC 2013 and older.
  - Issue #1741: Fix self-adjoint*matrix, triangular*matrix, and
    triangular^1*matrix with a destination having a non-trivial
    inner-stride.
  - Issue #1741: Fix SelfAdjointView::rankUpdate and product to
    triangular part for destination with non-trivial inner
    stride.
  - Issue #1741: Fix C.noalias() = A*C; with C.innerStride()!=1.
  - Issue #1695: Fix a numerical robustness issue in BDCSVD.
  - Issue #1692: Enable enum as sizes of Matrix and Array.
  - Issue #1689: Fix used-but-marked-unused warning.
  - Issue #1679: Avoid possible division by 0 in complex-schur.
  - Issue #1676: Fix C++17 template deduction in DenseBase.
  - Issue #1669: Fix PartialPivLU/inverse with zero-sized
    matrices.
  - Issue #1557: Fix RealSchur and EigenSolver for matrices with
    only zeros on the diagonal.
  * Performance related fixes:
  - Issue #1562: Optimize evaluation of small products of the
    form s*A*B by rewriting them as: s*(A.lazyProduct(B)) to
    save a costly temporary. Measured speedup from 2x to 5x...
  - Fix performance issue with SimplicialLDLT for complexes
    coefficients.
  * Misc fixes:
  - Fix QuaternionBase::cast for quaternion map and wrapper.
  - Fix case issue with Lapack unit tests.
  - Fix possible conflict with an externally defined "real" type
    when using gcc-5.
  - Provide numext::[u]int{32,64}_t.
  - Initialize isometric transforms like affine transforms.
  - Change typedefs from private to protected to fix MSVC
    compilation.
  - Fix compilation of FFTW unit test.
  - Fix compilation of BLAS backend and frontend.
  - Fix real/imag namespace conflict.
  - Avoid throwing in destructors.
  - Fix precision issue in SelfAdjointEigenSolver.h
  - Make digits10() return an integer.
  - Use pade for matrix exponential also for complex values.
  - Cast Index to RealScalar in SVDBase to fix an issue when
    RealScalar is not implicitly convertible to Index.
  - Provide EIGEN_HAS_C99_MATH when using MSVC.
  - Various fixes in polynomial solver and its unit tests.
  - nd 4415d4e2d: Extend polynomial solver unit tests to
    complexes.
  - Automatically switch between EigenSolver and
    ComplexEigenSolver, and fix a few Real versus Scalar issues.
  - Enable construction of Ref&lt;VectorType&gt; from a runtime
    vector.
  - Fix a problem of old gcc versions having problems with
    recursive #pragma GCC diagnostic push/pop.
  - Fix compilation with expression template scalar type.
  - Backport AVX512 implementation to 3.3.
  - Fix StlDeque compilation issue with GCC 10.
  - Avoid false-positive test results in non-linear optimization
    tests.
  - Fix undefined behaviour caused by uncaught exceptions in OMP
    section of parallel GEBP kernel.
  - Fix a bug with half-precision floats on GPUs.
  * Fixed warnings:
  - Fix some maybe-uninitialized warnings in AmbiVector.h and
    test bdcsvd.
  - Silent cmake warnings in Lapack CMakeLists.txt.
  - Rename variable which shadows class name in Polynomials
    module.
  - Workaround gcc's alloc-size-larger-than= warning in
    DenseStorage.h.
  - Hide some unused variable warnings in g++8.1 in Tensor
    contraction mapper.
  - Fix gcc 8.1 warning: "maybe use uninitialized" in std tests.
  - Fix always true warning with gcc 4.7in test numext.
  - Fix nonnull-compare warning in test geo_alignedbox.
  - Disable ignoring attributes warning in vectorization logic
    test.
  - Fix a gcc7 warning about bool * bool in abs2 default
    implementation.
  - Fix a warning in SparseSelfAdjointView about a branch
    statement always evaluation to false.
- Minor rebase of patches to fix offsets.
- Specify relative path to includedir as option to cmake as it
  only accepts paths relative to CMAKE_INSTALL_PREFIX now.
- Drop Group tags.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1603627200">- Fix compilation error when using Eigen3 with OpenMP:
  * Remove-error-counting-in-OpenMP-parallelize_gemm.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1604491200">- Drop eigen_pkgconfig.patch: the includedir now needs to be
  specified relative to CMAKE_INSTALL_PREFIX, so this patch causes
  the includedir in the pkgconfig file to be erroneous
  (boo#1178139).
- Use %autosetup to automatically run through patches.</changelog>
  <changelog author="badshah400@gmail.com" date="1607428800">- Update to version 3.3.9:
  * Introduce rendering Doxygen math formulas with MathJax and the
    option EIGEN_DOC_USE_MATHJAX to control this.
  * Issue 1746: Removed implementation of standard
    copy-constructor and standard copy-assign-operator from
    PermutationMatrix and Transpositions to allow malloc-less
    std::move.
  * Issue 2036: Make sure the
    find_standard_math_library_test_program compiles and doesn't
    optimize away functions we try to test for.
  * Issue 2046: Rename test/array.cpp to test/array_cwise.cpp to
    fix an issue with the C++ standard library header "array"
  * Issue 2040: Fix an issue in test/ctorleak that occured when
    disabling exceptions.
  * Issue 2011: Remove error counting in OpenMP parallel section
    in Eigen's GEMM parallelizing logic.
  * Issue 2012: Define coeff-wise binary array operators for base
    class to fix an issue when using Eigen with C++20
  * Fix an issue with Intel® MKL PARDISO support.
- Drop Remove-error-counting-in-OpenMP-parallelize_gemm.patch:
  incorporated upstream.
- Add patches to fix building and running tests:
  * eigen3-failtests-handling.patch: Simplify handling of tests
    that must fail to compile; upstream commit: 72c0bbe.
  * eigen3-make-sparseqr-unit-test-stable.patch: Make sparseqr
    test more stable to prevent random failures; patch taken from
    upstream commit
    [https://gitlab.com/libeigen/eigen/-/issues/899].
  * eigen3-googlehash-detection.patch: GoogleHash needs C++11 std
    to compile test code and be succesfully detected.
  * eigen3-fix-forward_adolc-unit-test.patch: Prevent conflict of
    std::min/max with eigen's macros by importing eigen
    test-suite's main.h header only after all system headers have
    been included.
- Setup but don't run tests due to random errors in test-suite
  itself
  * Pass EIGEN_TEST_CXX11:Bool=ON and EIGEN_TEST_OPENMP:Bool=ON to
    cmake to enable building c++11 and openmp tests.
  * export EIGEN_SEED=100 to build with fixed seed (see
    https://gitlab.com/libeigen/eigen/-/issues/2088).
  * export EIGEN_REPEAT=1 to run each test only once (default 10)
    to save time and since we use a fixed seed anyway.
  * Disable for non-86_64 archs as some unsupported tests fail for
    the others (for i586 some supported tests too, see
    https://gitlab.com/libeigen/eigen/-/issues/2092).
- Pass CMAKE_SKIP_RPATH:BOOL=OFF and
  CMAKE_SKIP_INSTALL_RPATH:BOOL=ON to cmake to fix rpath handling
  in Leap 15.2's cmake macros (doesn't hurt generally).
- Change CMAKE_BUILD_TYPE from Release to RelWithDebInfo (openSUSE
  default).</changelog>
  <changelog author="badshah400@gmail.com" date="1629460800">- Update to version 3.4.0
  * Long list of changes, see
    &lt;https://eigen.tuxfamily.org/index.php?title=3.4&gt;.
- Drop patches incorporated or otherwise fixed upstream:
  * eigen3-CastXML-support-for-aarch64.patch.
  * eigen3-make-sparseqr-unit-test-stable.patch.
  * eigen3-failtests-handling.patch.
- Rebase following patches for updated sources:
  * 0001-Disable-Altivec-for-ppc64le.patch.
  * 0001-Do-stack-allignment-on-ppc.patch.
- Minor line offset adjustments of other patches to apply cleanly.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643716800">- Add _constraints for docs(+test) to avoid OOM build failures
- Drop obsolete/unnecessary patches
  * eigen3-3.3.1-fixcmake.patch (no longer has any effect)
  * 01_install_FindEigen3.patch (CMake Config mode is preferred)
- Fix build for ppc64le (affects test and dependent packages, e.g.
  arpack-ng), add fix_ppc64le_always_inline_680.patch</changelog>
</package>
<package pkgid="12df0d31ad66f58c0f85192335f3decbc1732385cb9a3694d83109212eac717e942aac3bee9838a146539c5c83579819372634e3d9a127588a6319d56d4b7ae9" name="eigen3-devel" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="bp160.1.2"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1551182400">- Drop doc tgz that contained duplicated files
  to make the package build reproducible (boo#1047218)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563969600">- Clean up spec file:
  * Correct License tag, some included algorithms are LGPL-2.1-only
  * Remove conditionals for obsolete distributions (which were failing
    or unresolvable anyway)
  * Remove defattr, use license macro
  * Hide GL/GLUT/GLEW BuildRequires behind tests bcond, as tests are
    not build currently
  * Add missing BuildRequires tex(newunicodechar.sty), group doc dependencies</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1565006400">- Convert to _multibuild, to avoid doc dependencies when building
  the main package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600344000">- Add eigen3-CastXML-support-for-aarch64.patch to support CastXML
  on aarch64 [https://gitlab.com/libeigen/eigen/-/issues/1979];
  patch taken from upstream commit and rebased to apply without
  fuzz.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602763200">- Update to version 3.3.8:
  * General bug fixes:
  - Issue #1995: Fix a failure in the GEBP kernel when using
    small L1 cache sizes, OpenMP and FMA.
  - Issue #1990: Make CMake accept installation paths relative
    to CMAKE_INSTALL_PREFIX.
  - Issue #1974: Fix issue when reserving an empty sparse matrix
  - Issue #1823: Fix incorrect use of std::abs
  - Issue #1788: Fix rule-of-three violations inside the stable
    modules. This fixes deprecated-copy warnings when compiling
    with GCC&gt;=9. Also protect some additional Base-constructors
    from getting called by user code code (Issue #1587)
  - Issue #1796: Make matrix squareroot usable for Map and Ref
    types.
  - Issue #1281: Fix AutoDiffScalar's make_coherent for nested
    expression of constant ADs.
  - Issue #1761: Fall back is_integral to std::is_integral in
    c++11 and fix internal::is_integral&lt;size_t/ptrdiff_t&gt; with
    MSVC 2013 and older.
  - Issue #1741: Fix self-adjoint*matrix, triangular*matrix, and
    triangular^1*matrix with a destination having a non-trivial
    inner-stride.
  - Issue #1741: Fix SelfAdjointView::rankUpdate and product to
    triangular part for destination with non-trivial inner
    stride.
  - Issue #1741: Fix C.noalias() = A*C; with C.innerStride()!=1.
  - Issue #1695: Fix a numerical robustness issue in BDCSVD.
  - Issue #1692: Enable enum as sizes of Matrix and Array.
  - Issue #1689: Fix used-but-marked-unused warning.
  - Issue #1679: Avoid possible division by 0 in complex-schur.
  - Issue #1676: Fix C++17 template deduction in DenseBase.
  - Issue #1669: Fix PartialPivLU/inverse with zero-sized
    matrices.
  - Issue #1557: Fix RealSchur and EigenSolver for matrices with
    only zeros on the diagonal.
  * Performance related fixes:
  - Issue #1562: Optimize evaluation of small products of the
    form s*A*B by rewriting them as: s*(A.lazyProduct(B)) to
    save a costly temporary. Measured speedup from 2x to 5x...
  - Fix performance issue with SimplicialLDLT for complexes
    coefficients.
  * Misc fixes:
  - Fix QuaternionBase::cast for quaternion map and wrapper.
  - Fix case issue with Lapack unit tests.
  - Fix possible conflict with an externally defined "real" type
    when using gcc-5.
  - Provide numext::[u]int{32,64}_t.
  - Initialize isometric transforms like affine transforms.
  - Change typedefs from private to protected to fix MSVC
    compilation.
  - Fix compilation of FFTW unit test.
  - Fix compilation of BLAS backend and frontend.
  - Fix real/imag namespace conflict.
  - Avoid throwing in destructors.
  - Fix precision issue in SelfAdjointEigenSolver.h
  - Make digits10() return an integer.
  - Use pade for matrix exponential also for complex values.
  - Cast Index to RealScalar in SVDBase to fix an issue when
    RealScalar is not implicitly convertible to Index.
  - Provide EIGEN_HAS_C99_MATH when using MSVC.
  - Various fixes in polynomial solver and its unit tests.
  - nd 4415d4e2d: Extend polynomial solver unit tests to
    complexes.
  - Automatically switch between EigenSolver and
    ComplexEigenSolver, and fix a few Real versus Scalar issues.
  - Enable construction of Ref&lt;VectorType&gt; from a runtime
    vector.
  - Fix a problem of old gcc versions having problems with
    recursive #pragma GCC diagnostic push/pop.
  - Fix compilation with expression template scalar type.
  - Backport AVX512 implementation to 3.3.
  - Fix StlDeque compilation issue with GCC 10.
  - Avoid false-positive test results in non-linear optimization
    tests.
  - Fix undefined behaviour caused by uncaught exceptions in OMP
    section of parallel GEBP kernel.
  - Fix a bug with half-precision floats on GPUs.
  * Fixed warnings:
  - Fix some maybe-uninitialized warnings in AmbiVector.h and
    test bdcsvd.
  - Silent cmake warnings in Lapack CMakeLists.txt.
  - Rename variable which shadows class name in Polynomials
    module.
  - Workaround gcc's alloc-size-larger-than= warning in
    DenseStorage.h.
  - Hide some unused variable warnings in g++8.1 in Tensor
    contraction mapper.
  - Fix gcc 8.1 warning: "maybe use uninitialized" in std tests.
  - Fix always true warning with gcc 4.7in test numext.
  - Fix nonnull-compare warning in test geo_alignedbox.
  - Disable ignoring attributes warning in vectorization logic
    test.
  - Fix a gcc7 warning about bool * bool in abs2 default
    implementation.
  - Fix a warning in SparseSelfAdjointView about a branch
    statement always evaluation to false.
- Minor rebase of patches to fix offsets.
- Specify relative path to includedir as option to cmake as it
  only accepts paths relative to CMAKE_INSTALL_PREFIX now.
- Drop Group tags.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1603627200">- Fix compilation error when using Eigen3 with OpenMP:
  * Remove-error-counting-in-OpenMP-parallelize_gemm.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1604491200">- Drop eigen_pkgconfig.patch: the includedir now needs to be
  specified relative to CMAKE_INSTALL_PREFIX, so this patch causes
  the includedir in the pkgconfig file to be erroneous
  (boo#1178139).
- Use %autosetup to automatically run through patches.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1607428800">- Update to version 3.3.9:
  * Introduce rendering Doxygen math formulas with MathJax and the
    option EIGEN_DOC_USE_MATHJAX to control this.
  * Issue 1746: Removed implementation of standard
    copy-constructor and standard copy-assign-operator from
    PermutationMatrix and Transpositions to allow malloc-less
    std::move.
  * Issue 2036: Make sure the
    find_standard_math_library_test_program compiles and doesn't
    optimize away functions we try to test for.
  * Issue 2046: Rename test/array.cpp to test/array_cwise.cpp to
    fix an issue with the C++ standard library header "array"
  * Issue 2040: Fix an issue in test/ctorleak that occured when
    disabling exceptions.
  * Issue 2011: Remove error counting in OpenMP parallel section
    in Eigen's GEMM parallelizing logic.
  * Issue 2012: Define coeff-wise binary array operators for base
    class to fix an issue when using Eigen with C++20
  * Fix an issue with Intel® MKL PARDISO support.
- Drop Remove-error-counting-in-OpenMP-parallelize_gemm.patch:
  incorporated upstream.
- Add patches to fix building and running tests:
  * eigen3-failtests-handling.patch: Simplify handling of tests
    that must fail to compile; upstream commit: 72c0bbe.
  * eigen3-make-sparseqr-unit-test-stable.patch: Make sparseqr
    test more stable to prevent random failures; patch taken from
    upstream commit
    [https://gitlab.com/libeigen/eigen/-/issues/899].
  * eigen3-googlehash-detection.patch: GoogleHash needs C++11 std
    to compile test code and be succesfully detected.
  * eigen3-fix-forward_adolc-unit-test.patch: Prevent conflict of
    std::min/max with eigen's macros by importing eigen
    test-suite's main.h header only after all system headers have
    been included.
- Setup but don't run tests due to random errors in test-suite
  itself
  * Pass EIGEN_TEST_CXX11:Bool=ON and EIGEN_TEST_OPENMP:Bool=ON to
    cmake to enable building c++11 and openmp tests.
  * export EIGEN_SEED=100 to build with fixed seed (see
    https://gitlab.com/libeigen/eigen/-/issues/2088).
  * export EIGEN_REPEAT=1 to run each test only once (default 10)
    to save time and since we use a fixed seed anyway.
  * Disable for non-86_64 archs as some unsupported tests fail for
    the others (for i586 some supported tests too, see
    https://gitlab.com/libeigen/eigen/-/issues/2092).
- Pass CMAKE_SKIP_RPATH:BOOL=OFF and
  CMAKE_SKIP_INSTALL_RPATH:BOOL=ON to cmake to fix rpath handling
  in Leap 15.2's cmake macros (doesn't hurt generally).
- Change CMAKE_BUILD_TYPE from Release to RelWithDebInfo (openSUSE
  default).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1629460800">- Update to version 3.4.0
  * Long list of changes, see
    &lt;https://eigen.tuxfamily.org/index.php?title=3.4&gt;.
- Drop patches incorporated or otherwise fixed upstream:
  * eigen3-CastXML-support-for-aarch64.patch.
  * eigen3-make-sparseqr-unit-test-stable.patch.
  * eigen3-failtests-handling.patch.
- Rebase following patches for updated sources:
  * 0001-Disable-Altivec-for-ppc64le.patch.
  * 0001-Do-stack-allignment-on-ppc.patch.
- Minor line offset adjustments of other patches to apply cleanly.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643716800">- Add _constraints for docs(+test) to avoid OOM build failures
- Drop obsolete/unnecessary patches
  * eigen3-3.3.1-fixcmake.patch (no longer has any effect)
  * 01_install_FindEigen3.patch (CMake Config mode is preferred)
- Fix build for ppc64le (affects test and dependent packages, e.g.
  arpack-ng), add fix_ppc64le_always_inline_680.patch</changelog>
</package>
<package pkgid="1493f410c88761b6127c602282891c9f1a02a32433ebc0254cd7d6b26216fc4f738903bf40002f9389a67cb8a194692daa977d8a7568ef62225dcd30619528f7" name="eigen3-doc" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="160000.2.2"/>
  <changelog author="bwiedemann@suse.com" date="1551182400">- Drop doc tgz that contained duplicated files
  to make the package build reproducible (boo#1047218)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1563969600">- Clean up spec file:
  * Correct License tag, some included algorithms are LGPL-2.1-only
  * Remove conditionals for obsolete distributions (which were failing
    or unresolvable anyway)
  * Remove defattr, use license macro
  * Hide GL/GLUT/GLEW BuildRequires behind tests bcond, as tests are
    not build currently
  * Add missing BuildRequires tex(newunicodechar.sty), group doc dependencies</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1565006400">- Convert to _multibuild, to avoid doc dependencies when building
  the main package.</changelog>
  <changelog author="badshah400@gmail.com" date="1600344000">- Add eigen3-CastXML-support-for-aarch64.patch to support CastXML
  on aarch64 [https://gitlab.com/libeigen/eigen/-/issues/1979];
  patch taken from upstream commit and rebased to apply without
  fuzz.</changelog>
  <changelog author="badshah400@gmail.com" date="1602763200">- Update to version 3.3.8:
  * General bug fixes:
  - Issue #1995: Fix a failure in the GEBP kernel when using
    small L1 cache sizes, OpenMP and FMA.
  - Issue #1990: Make CMake accept installation paths relative
    to CMAKE_INSTALL_PREFIX.
  - Issue #1974: Fix issue when reserving an empty sparse matrix
  - Issue #1823: Fix incorrect use of std::abs
  - Issue #1788: Fix rule-of-three violations inside the stable
    modules. This fixes deprecated-copy warnings when compiling
    with GCC&gt;=9. Also protect some additional Base-constructors
    from getting called by user code code (Issue #1587)
  - Issue #1796: Make matrix squareroot usable for Map and Ref
    types.
  - Issue #1281: Fix AutoDiffScalar's make_coherent for nested
    expression of constant ADs.
  - Issue #1761: Fall back is_integral to std::is_integral in
    c++11 and fix internal::is_integral&lt;size_t/ptrdiff_t&gt; with
    MSVC 2013 and older.
  - Issue #1741: Fix self-adjoint*matrix, triangular*matrix, and
    triangular^1*matrix with a destination having a non-trivial
    inner-stride.
  - Issue #1741: Fix SelfAdjointView::rankUpdate and product to
    triangular part for destination with non-trivial inner
    stride.
  - Issue #1741: Fix C.noalias() = A*C; with C.innerStride()!=1.
  - Issue #1695: Fix a numerical robustness issue in BDCSVD.
  - Issue #1692: Enable enum as sizes of Matrix and Array.
  - Issue #1689: Fix used-but-marked-unused warning.
  - Issue #1679: Avoid possible division by 0 in complex-schur.
  - Issue #1676: Fix C++17 template deduction in DenseBase.
  - Issue #1669: Fix PartialPivLU/inverse with zero-sized
    matrices.
  - Issue #1557: Fix RealSchur and EigenSolver for matrices with
    only zeros on the diagonal.
  * Performance related fixes:
  - Issue #1562: Optimize evaluation of small products of the
    form s*A*B by rewriting them as: s*(A.lazyProduct(B)) to
    save a costly temporary. Measured speedup from 2x to 5x...
  - Fix performance issue with SimplicialLDLT for complexes
    coefficients.
  * Misc fixes:
  - Fix QuaternionBase::cast for quaternion map and wrapper.
  - Fix case issue with Lapack unit tests.
  - Fix possible conflict with an externally defined "real" type
    when using gcc-5.
  - Provide numext::[u]int{32,64}_t.
  - Initialize isometric transforms like affine transforms.
  - Change typedefs from private to protected to fix MSVC
    compilation.
  - Fix compilation of FFTW unit test.
  - Fix compilation of BLAS backend and frontend.
  - Fix real/imag namespace conflict.
  - Avoid throwing in destructors.
  - Fix precision issue in SelfAdjointEigenSolver.h
  - Make digits10() return an integer.
  - Use pade for matrix exponential also for complex values.
  - Cast Index to RealScalar in SVDBase to fix an issue when
    RealScalar is not implicitly convertible to Index.
  - Provide EIGEN_HAS_C99_MATH when using MSVC.
  - Various fixes in polynomial solver and its unit tests.
  - nd 4415d4e2d: Extend polynomial solver unit tests to
    complexes.
  - Automatically switch between EigenSolver and
    ComplexEigenSolver, and fix a few Real versus Scalar issues.
  - Enable construction of Ref&lt;VectorType&gt; from a runtime
    vector.
  - Fix a problem of old gcc versions having problems with
    recursive #pragma GCC diagnostic push/pop.
  - Fix compilation with expression template scalar type.
  - Backport AVX512 implementation to 3.3.
  - Fix StlDeque compilation issue with GCC 10.
  - Avoid false-positive test results in non-linear optimization
    tests.
  - Fix undefined behaviour caused by uncaught exceptions in OMP
    section of parallel GEBP kernel.
  - Fix a bug with half-precision floats on GPUs.
  * Fixed warnings:
  - Fix some maybe-uninitialized warnings in AmbiVector.h and
    test bdcsvd.
  - Silent cmake warnings in Lapack CMakeLists.txt.
  - Rename variable which shadows class name in Polynomials
    module.
  - Workaround gcc's alloc-size-larger-than= warning in
    DenseStorage.h.
  - Hide some unused variable warnings in g++8.1 in Tensor
    contraction mapper.
  - Fix gcc 8.1 warning: "maybe use uninitialized" in std tests.
  - Fix always true warning with gcc 4.7in test numext.
  - Fix nonnull-compare warning in test geo_alignedbox.
  - Disable ignoring attributes warning in vectorization logic
    test.
  - Fix a gcc7 warning about bool * bool in abs2 default
    implementation.
  - Fix a warning in SparseSelfAdjointView about a branch
    statement always evaluation to false.
- Minor rebase of patches to fix offsets.
- Specify relative path to includedir as option to cmake as it
  only accepts paths relative to CMAKE_INSTALL_PREFIX now.
- Drop Group tags.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1603627200">- Fix compilation error when using Eigen3 with OpenMP:
  * Remove-error-counting-in-OpenMP-parallelize_gemm.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1604491200">- Drop eigen_pkgconfig.patch: the includedir now needs to be
  specified relative to CMAKE_INSTALL_PREFIX, so this patch causes
  the includedir in the pkgconfig file to be erroneous
  (boo#1178139).
- Use %autosetup to automatically run through patches.</changelog>
  <changelog author="badshah400@gmail.com" date="1607428800">- Update to version 3.3.9:
  * Introduce rendering Doxygen math formulas with MathJax and the
    option EIGEN_DOC_USE_MATHJAX to control this.
  * Issue 1746: Removed implementation of standard
    copy-constructor and standard copy-assign-operator from
    PermutationMatrix and Transpositions to allow malloc-less
    std::move.
  * Issue 2036: Make sure the
    find_standard_math_library_test_program compiles and doesn't
    optimize away functions we try to test for.
  * Issue 2046: Rename test/array.cpp to test/array_cwise.cpp to
    fix an issue with the C++ standard library header "array"
  * Issue 2040: Fix an issue in test/ctorleak that occured when
    disabling exceptions.
  * Issue 2011: Remove error counting in OpenMP parallel section
    in Eigen's GEMM parallelizing logic.
  * Issue 2012: Define coeff-wise binary array operators for base
    class to fix an issue when using Eigen with C++20
  * Fix an issue with Intel® MKL PARDISO support.
- Drop Remove-error-counting-in-OpenMP-parallelize_gemm.patch:
  incorporated upstream.
- Add patches to fix building and running tests:
  * eigen3-failtests-handling.patch: Simplify handling of tests
    that must fail to compile; upstream commit: 72c0bbe.
  * eigen3-make-sparseqr-unit-test-stable.patch: Make sparseqr
    test more stable to prevent random failures; patch taken from
    upstream commit
    [https://gitlab.com/libeigen/eigen/-/issues/899].
  * eigen3-googlehash-detection.patch: GoogleHash needs C++11 std
    to compile test code and be succesfully detected.
  * eigen3-fix-forward_adolc-unit-test.patch: Prevent conflict of
    std::min/max with eigen's macros by importing eigen
    test-suite's main.h header only after all system headers have
    been included.
- Setup but don't run tests due to random errors in test-suite
  itself
  * Pass EIGEN_TEST_CXX11:Bool=ON and EIGEN_TEST_OPENMP:Bool=ON to
    cmake to enable building c++11 and openmp tests.
  * export EIGEN_SEED=100 to build with fixed seed (see
    https://gitlab.com/libeigen/eigen/-/issues/2088).
  * export EIGEN_REPEAT=1 to run each test only once (default 10)
    to save time and since we use a fixed seed anyway.
  * Disable for non-86_64 archs as some unsupported tests fail for
    the others (for i586 some supported tests too, see
    https://gitlab.com/libeigen/eigen/-/issues/2092).
- Pass CMAKE_SKIP_RPATH:BOOL=OFF and
  CMAKE_SKIP_INSTALL_RPATH:BOOL=ON to cmake to fix rpath handling
  in Leap 15.2's cmake macros (doesn't hurt generally).
- Change CMAKE_BUILD_TYPE from Release to RelWithDebInfo (openSUSE
  default).</changelog>
  <changelog author="badshah400@gmail.com" date="1629460800">- Update to version 3.4.0
  * Long list of changes, see
    &lt;https://eigen.tuxfamily.org/index.php?title=3.4&gt;.
- Drop patches incorporated or otherwise fixed upstream:
  * eigen3-CastXML-support-for-aarch64.patch.
  * eigen3-make-sparseqr-unit-test-stable.patch.
  * eigen3-failtests-handling.patch.
- Rebase following patches for updated sources:
  * 0001-Disable-Altivec-for-ppc64le.patch.
  * 0001-Do-stack-allignment-on-ppc.patch.
- Minor line offset adjustments of other patches to apply cleanly.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643716800">- Add _constraints for docs(+test) to avoid OOM build failures
- Drop obsolete/unnecessary patches
  * eigen3-3.3.1-fixcmake.patch (no longer has any effect)
  * 01_install_FindEigen3.patch (CMake Config mode is preferred)
- Fix build for ppc64le (affects test and dependent packages, e.g.
  arpack-ng), add fix_ppc64le_always_inline_680.patch</changelog>
</package>
<package pkgid="08b322af66fedd07f81e6c07ede9af8a4ab17acba9c6283da2fdf1d0f2dc07bd6ced2ae410c4df2c9a2462089c2f9525430398e37336d45ecfba97314fe9599b" name="eigen3-doc" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="bp160.1.2"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1551182400">- Drop doc tgz that contained duplicated files
  to make the package build reproducible (boo#1047218)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563969600">- Clean up spec file:
  * Correct License tag, some included algorithms are LGPL-2.1-only
  * Remove conditionals for obsolete distributions (which were failing
    or unresolvable anyway)
  * Remove defattr, use license macro
  * Hide GL/GLUT/GLEW BuildRequires behind tests bcond, as tests are
    not build currently
  * Add missing BuildRequires tex(newunicodechar.sty), group doc dependencies</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1565006400">- Convert to _multibuild, to avoid doc dependencies when building
  the main package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600344000">- Add eigen3-CastXML-support-for-aarch64.patch to support CastXML
  on aarch64 [https://gitlab.com/libeigen/eigen/-/issues/1979];
  patch taken from upstream commit and rebased to apply without
  fuzz.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1602763200">- Update to version 3.3.8:
  * General bug fixes:
  - Issue #1995: Fix a failure in the GEBP kernel when using
    small L1 cache sizes, OpenMP and FMA.
  - Issue #1990: Make CMake accept installation paths relative
    to CMAKE_INSTALL_PREFIX.
  - Issue #1974: Fix issue when reserving an empty sparse matrix
  - Issue #1823: Fix incorrect use of std::abs
  - Issue #1788: Fix rule-of-three violations inside the stable
    modules. This fixes deprecated-copy warnings when compiling
    with GCC&gt;=9. Also protect some additional Base-constructors
    from getting called by user code code (Issue #1587)
  - Issue #1796: Make matrix squareroot usable for Map and Ref
    types.
  - Issue #1281: Fix AutoDiffScalar's make_coherent for nested
    expression of constant ADs.
  - Issue #1761: Fall back is_integral to std::is_integral in
    c++11 and fix internal::is_integral&lt;size_t/ptrdiff_t&gt; with
    MSVC 2013 and older.
  - Issue #1741: Fix self-adjoint*matrix, triangular*matrix, and
    triangular^1*matrix with a destination having a non-trivial
    inner-stride.
  - Issue #1741: Fix SelfAdjointView::rankUpdate and product to
    triangular part for destination with non-trivial inner
    stride.
  - Issue #1741: Fix C.noalias() = A*C; with C.innerStride()!=1.
  - Issue #1695: Fix a numerical robustness issue in BDCSVD.
  - Issue #1692: Enable enum as sizes of Matrix and Array.
  - Issue #1689: Fix used-but-marked-unused warning.
  - Issue #1679: Avoid possible division by 0 in complex-schur.
  - Issue #1676: Fix C++17 template deduction in DenseBase.
  - Issue #1669: Fix PartialPivLU/inverse with zero-sized
    matrices.
  - Issue #1557: Fix RealSchur and EigenSolver for matrices with
    only zeros on the diagonal.
  * Performance related fixes:
  - Issue #1562: Optimize evaluation of small products of the
    form s*A*B by rewriting them as: s*(A.lazyProduct(B)) to
    save a costly temporary. Measured speedup from 2x to 5x...
  - Fix performance issue with SimplicialLDLT for complexes
    coefficients.
  * Misc fixes:
  - Fix QuaternionBase::cast for quaternion map and wrapper.
  - Fix case issue with Lapack unit tests.
  - Fix possible conflict with an externally defined "real" type
    when using gcc-5.
  - Provide numext::[u]int{32,64}_t.
  - Initialize isometric transforms like affine transforms.
  - Change typedefs from private to protected to fix MSVC
    compilation.
  - Fix compilation of FFTW unit test.
  - Fix compilation of BLAS backend and frontend.
  - Fix real/imag namespace conflict.
  - Avoid throwing in destructors.
  - Fix precision issue in SelfAdjointEigenSolver.h
  - Make digits10() return an integer.
  - Use pade for matrix exponential also for complex values.
  - Cast Index to RealScalar in SVDBase to fix an issue when
    RealScalar is not implicitly convertible to Index.
  - Provide EIGEN_HAS_C99_MATH when using MSVC.
  - Various fixes in polynomial solver and its unit tests.
  - nd 4415d4e2d: Extend polynomial solver unit tests to
    complexes.
  - Automatically switch between EigenSolver and
    ComplexEigenSolver, and fix a few Real versus Scalar issues.
  - Enable construction of Ref&lt;VectorType&gt; from a runtime
    vector.
  - Fix a problem of old gcc versions having problems with
    recursive #pragma GCC diagnostic push/pop.
  - Fix compilation with expression template scalar type.
  - Backport AVX512 implementation to 3.3.
  - Fix StlDeque compilation issue with GCC 10.
  - Avoid false-positive test results in non-linear optimization
    tests.
  - Fix undefined behaviour caused by uncaught exceptions in OMP
    section of parallel GEBP kernel.
  - Fix a bug with half-precision floats on GPUs.
  * Fixed warnings:
  - Fix some maybe-uninitialized warnings in AmbiVector.h and
    test bdcsvd.
  - Silent cmake warnings in Lapack CMakeLists.txt.
  - Rename variable which shadows class name in Polynomials
    module.
  - Workaround gcc's alloc-size-larger-than= warning in
    DenseStorage.h.
  - Hide some unused variable warnings in g++8.1 in Tensor
    contraction mapper.
  - Fix gcc 8.1 warning: "maybe use uninitialized" in std tests.
  - Fix always true warning with gcc 4.7in test numext.
  - Fix nonnull-compare warning in test geo_alignedbox.
  - Disable ignoring attributes warning in vectorization logic
    test.
  - Fix a gcc7 warning about bool * bool in abs2 default
    implementation.
  - Fix a warning in SparseSelfAdjointView about a branch
    statement always evaluation to false.
- Minor rebase of patches to fix offsets.
- Specify relative path to includedir as option to cmake as it
  only accepts paths relative to CMAKE_INSTALL_PREFIX now.
- Drop Group tags.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1603627200">- Fix compilation error when using Eigen3 with OpenMP:
  * Remove-error-counting-in-OpenMP-parallelize_gemm.patch</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1604491200">- Drop eigen_pkgconfig.patch: the includedir now needs to be
  specified relative to CMAKE_INSTALL_PREFIX, so this patch causes
  the includedir in the pkgconfig file to be erroneous
  (boo#1178139).
- Use %autosetup to automatically run through patches.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1607428800">- Update to version 3.3.9:
  * Introduce rendering Doxygen math formulas with MathJax and the
    option EIGEN_DOC_USE_MATHJAX to control this.
  * Issue 1746: Removed implementation of standard
    copy-constructor and standard copy-assign-operator from
    PermutationMatrix and Transpositions to allow malloc-less
    std::move.
  * Issue 2036: Make sure the
    find_standard_math_library_test_program compiles and doesn't
    optimize away functions we try to test for.
  * Issue 2046: Rename test/array.cpp to test/array_cwise.cpp to
    fix an issue with the C++ standard library header "array"
  * Issue 2040: Fix an issue in test/ctorleak that occured when
    disabling exceptions.
  * Issue 2011: Remove error counting in OpenMP parallel section
    in Eigen's GEMM parallelizing logic.
  * Issue 2012: Define coeff-wise binary array operators for base
    class to fix an issue when using Eigen with C++20
  * Fix an issue with Intel® MKL PARDISO support.
- Drop Remove-error-counting-in-OpenMP-parallelize_gemm.patch:
  incorporated upstream.
- Add patches to fix building and running tests:
  * eigen3-failtests-handling.patch: Simplify handling of tests
    that must fail to compile; upstream commit: 72c0bbe.
  * eigen3-make-sparseqr-unit-test-stable.patch: Make sparseqr
    test more stable to prevent random failures; patch taken from
    upstream commit
    [https://gitlab.com/libeigen/eigen/-/issues/899].
  * eigen3-googlehash-detection.patch: GoogleHash needs C++11 std
    to compile test code and be succesfully detected.
  * eigen3-fix-forward_adolc-unit-test.patch: Prevent conflict of
    std::min/max with eigen's macros by importing eigen
    test-suite's main.h header only after all system headers have
    been included.
- Setup but don't run tests due to random errors in test-suite
  itself
  * Pass EIGEN_TEST_CXX11:Bool=ON and EIGEN_TEST_OPENMP:Bool=ON to
    cmake to enable building c++11 and openmp tests.
  * export EIGEN_SEED=100 to build with fixed seed (see
    https://gitlab.com/libeigen/eigen/-/issues/2088).
  * export EIGEN_REPEAT=1 to run each test only once (default 10)
    to save time and since we use a fixed seed anyway.
  * Disable for non-86_64 archs as some unsupported tests fail for
    the others (for i586 some supported tests too, see
    https://gitlab.com/libeigen/eigen/-/issues/2092).
- Pass CMAKE_SKIP_RPATH:BOOL=OFF and
  CMAKE_SKIP_INSTALL_RPATH:BOOL=ON to cmake to fix rpath handling
  in Leap 15.2's cmake macros (doesn't hurt generally).
- Change CMAKE_BUILD_TYPE from Release to RelWithDebInfo (openSUSE
  default).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1629460800">- Update to version 3.4.0
  * Long list of changes, see
    &lt;https://eigen.tuxfamily.org/index.php?title=3.4&gt;.
- Drop patches incorporated or otherwise fixed upstream:
  * eigen3-CastXML-support-for-aarch64.patch.
  * eigen3-make-sparseqr-unit-test-stable.patch.
  * eigen3-failtests-handling.patch.
- Rebase following patches for updated sources:
  * 0001-Disable-Altivec-for-ppc64le.patch.
  * 0001-Do-stack-allignment-on-ppc.patch.
- Minor line offset adjustments of other patches to apply cleanly.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643716800">- Add _constraints for docs(+test) to avoid OOM build failures
- Drop obsolete/unnecessary patches
  * eigen3-3.3.1-fixcmake.patch (no longer has any effect)
  * 01_install_FindEigen3.patch (CMake Config mode is preferred)
- Fix build for ppc64le (affects test and dependent packages, e.g.
  arpack-ng), add fix_ppc64le_always_inline_680.patch</changelog>
</package>
<package pkgid="52c30848e5e8be542fd9ded83689e7cddc05b0b877205f5c4b125f448383cef2faedb63524200cb0b0f7d66f732e20bc9f973decdb7d0452c42d754e5c63163c" name="eiskaltdcpp-cli" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1601640000">- Don't depend on aspell, it will be removed from Factory.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1601985600">- Readd aspell support and add Requires:aspell.
- Add BuildRequires:git (cmake script checks it).
- Remove additional cmake options that were default.
- Correct disable PHP daemon backand via cmake option JSONRPC_DAEMON.
- Disable examples via cmake option to remove requires: bash, php, sh.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1602504000">- Remove Requires:aspell and add Requires:aspell for -qt package.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1607947200">- Update to 2.4.0.
  * Remove _service.
  * Refresh BuildRequires and using pkgconfig where is possible.
  * Migration from boost to C++14 standard.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1608206400">- Add subpackages: common, libeiskaltdcpp2_4, daemon, cli.
- Add separate lang subpackages: common-lang, qt-lang.
- Change all descriptions.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1612180800">- The correct license is GPL-3.0-or-later.
- Update to 2.4.1.
  * https://github.com/eiskaltdcpp/eiskaltdcpp/blob/v2.4.1/ChangeLog.txt
  * Fixed sending of hub commands containing %[mySID] parameter.
  * Fix text in tooltip for system tray icon in KDE Plasma 5.
  * Added new widget "Secretary" for searching magnet links and keywords.
  * Fixed context menu for messages in private chats.
- Refresh ru.ts.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612180801">- Trim metadata redundancies from descriptions. Fix grammar issues.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1620388800">- Update to 2.4.2
  * Added support of build using musl instead of glibc.
  * Add support of build in Cygwin environment.
  * Added configuration option LUA_VERSION (unset by default) for choosing
    specific version of Lua library in the systems if necessary.
  * Fix search on ADC hubs. (It was accidentally broken in 2.4.1 release.)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- Added eiskaltdcpp-2.4.2-pcre2.patch to pcre2 support.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1746792000">- Fixed the build with cmake4.</changelog>
</package>
<package pkgid="3c220e7d55f24bb9ebff37cfbce9af927c692f0f99b7336b5d7a972d32661d1f2d77d4263da140709217d2256b8c91104b16a87e57f1f63af460327763958fdd" name="eiskaltdcpp-common" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1601640000">- Don't depend on aspell, it will be removed from Factory.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1601985600">- Readd aspell support and add Requires:aspell.
- Add BuildRequires:git (cmake script checks it).
- Remove additional cmake options that were default.
- Correct disable PHP daemon backand via cmake option JSONRPC_DAEMON.
- Disable examples via cmake option to remove requires: bash, php, sh.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1602504000">- Remove Requires:aspell and add Requires:aspell for -qt package.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1607947200">- Update to 2.4.0.
  * Remove _service.
  * Refresh BuildRequires and using pkgconfig where is possible.
  * Migration from boost to C++14 standard.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1608206400">- Add subpackages: common, libeiskaltdcpp2_4, daemon, cli.
- Add separate lang subpackages: common-lang, qt-lang.
- Change all descriptions.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1612180800">- The correct license is GPL-3.0-or-later.
- Update to 2.4.1.
  * https://github.com/eiskaltdcpp/eiskaltdcpp/blob/v2.4.1/ChangeLog.txt
  * Fixed sending of hub commands containing %[mySID] parameter.
  * Fix text in tooltip for system tray icon in KDE Plasma 5.
  * Added new widget "Secretary" for searching magnet links and keywords.
  * Fixed context menu for messages in private chats.
- Refresh ru.ts.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612180801">- Trim metadata redundancies from descriptions. Fix grammar issues.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1620388800">- Update to 2.4.2
  * Added support of build using musl instead of glibc.
  * Add support of build in Cygwin environment.
  * Added configuration option LUA_VERSION (unset by default) for choosing
    specific version of Lua library in the systems if necessary.
  * Fix search on ADC hubs. (It was accidentally broken in 2.4.1 release.)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- Added eiskaltdcpp-2.4.2-pcre2.patch to pcre2 support.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1746792000">- Fixed the build with cmake4.</changelog>
</package>
<package pkgid="3de59299df4d3c14cdfd5e2a9f73792c3357c601bed3665c0cdd8aaa4972c61c24fc13239b057eff6b58509da5e34c7c6c2e269c4ed9ff866100f8b1755427bd" name="eiskaltdcpp-common-lang" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1601640000">- Don't depend on aspell, it will be removed from Factory.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1601985600">- Readd aspell support and add Requires:aspell.
- Add BuildRequires:git (cmake script checks it).
- Remove additional cmake options that were default.
- Correct disable PHP daemon backand via cmake option JSONRPC_DAEMON.
- Disable examples via cmake option to remove requires: bash, php, sh.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1602504000">- Remove Requires:aspell and add Requires:aspell for -qt package.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1607947200">- Update to 2.4.0.
  * Remove _service.
  * Refresh BuildRequires and using pkgconfig where is possible.
  * Migration from boost to C++14 standard.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1608206400">- Add subpackages: common, libeiskaltdcpp2_4, daemon, cli.
- Add separate lang subpackages: common-lang, qt-lang.
- Change all descriptions.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1612180800">- The correct license is GPL-3.0-or-later.
- Update to 2.4.1.
  * https://github.com/eiskaltdcpp/eiskaltdcpp/blob/v2.4.1/ChangeLog.txt
  * Fixed sending of hub commands containing %[mySID] parameter.
  * Fix text in tooltip for system tray icon in KDE Plasma 5.
  * Added new widget "Secretary" for searching magnet links and keywords.
  * Fixed context menu for messages in private chats.
- Refresh ru.ts.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612180801">- Trim metadata redundancies from descriptions. Fix grammar issues.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1620388800">- Update to 2.4.2
  * Added support of build using musl instead of glibc.
  * Add support of build in Cygwin environment.
  * Added configuration option LUA_VERSION (unset by default) for choosing
    specific version of Lua library in the systems if necessary.
  * Fix search on ADC hubs. (It was accidentally broken in 2.4.1 release.)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- Added eiskaltdcpp-2.4.2-pcre2.patch to pcre2 support.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1746792000">- Fixed the build with cmake4.</changelog>
</package>
<package pkgid="ef6955518c533ad8c0f1b57dcad7d64bfd680a6f608b1dd852cbec0528f9f99ed24a68ef16be24bc87707b3baead5bd17b4192e0105c91e857a6cdccb36b5e6e" name="eiskaltdcpp-daemon" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1601640000">- Don't depend on aspell, it will be removed from Factory.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1601985600">- Readd aspell support and add Requires:aspell.
- Add BuildRequires:git (cmake script checks it).
- Remove additional cmake options that were default.
- Correct disable PHP daemon backand via cmake option JSONRPC_DAEMON.
- Disable examples via cmake option to remove requires: bash, php, sh.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1602504000">- Remove Requires:aspell and add Requires:aspell for -qt package.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1607947200">- Update to 2.4.0.
  * Remove _service.
  * Refresh BuildRequires and using pkgconfig where is possible.
  * Migration from boost to C++14 standard.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1608206400">- Add subpackages: common, libeiskaltdcpp2_4, daemon, cli.
- Add separate lang subpackages: common-lang, qt-lang.
- Change all descriptions.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1612180800">- The correct license is GPL-3.0-or-later.
- Update to 2.4.1.
  * https://github.com/eiskaltdcpp/eiskaltdcpp/blob/v2.4.1/ChangeLog.txt
  * Fixed sending of hub commands containing %[mySID] parameter.
  * Fix text in tooltip for system tray icon in KDE Plasma 5.
  * Added new widget "Secretary" for searching magnet links and keywords.
  * Fixed context menu for messages in private chats.
- Refresh ru.ts.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612180801">- Trim metadata redundancies from descriptions. Fix grammar issues.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1620388800">- Update to 2.4.2
  * Added support of build using musl instead of glibc.
  * Add support of build in Cygwin environment.
  * Added configuration option LUA_VERSION (unset by default) for choosing
    specific version of Lua library in the systems if necessary.
  * Fix search on ADC hubs. (It was accidentally broken in 2.4.1 release.)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- Added eiskaltdcpp-2.4.2-pcre2.patch to pcre2 support.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1746792000">- Fixed the build with cmake4.</changelog>
</package>
<package pkgid="3c1cbb0d1e8301ebc5b8e5fdc310cc5aec82c945814ace749a2befab6799ec14b07933bd1b2ed7dd1d94e10c7c3eaca34b196d1f1d833514d3d59a562051935e" name="eiskaltdcpp-qt" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1601640000">- Don't depend on aspell, it will be removed from Factory.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1601985600">- Readd aspell support and add Requires:aspell.
- Add BuildRequires:git (cmake script checks it).
- Remove additional cmake options that were default.
- Correct disable PHP daemon backand via cmake option JSONRPC_DAEMON.
- Disable examples via cmake option to remove requires: bash, php, sh.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1602504000">- Remove Requires:aspell and add Requires:aspell for -qt package.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1607947200">- Update to 2.4.0.
  * Remove _service.
  * Refresh BuildRequires and using pkgconfig where is possible.
  * Migration from boost to C++14 standard.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1608206400">- Add subpackages: common, libeiskaltdcpp2_4, daemon, cli.
- Add separate lang subpackages: common-lang, qt-lang.
- Change all descriptions.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1612180800">- The correct license is GPL-3.0-or-later.
- Update to 2.4.1.
  * https://github.com/eiskaltdcpp/eiskaltdcpp/blob/v2.4.1/ChangeLog.txt
  * Fixed sending of hub commands containing %[mySID] parameter.
  * Fix text in tooltip for system tray icon in KDE Plasma 5.
  * Added new widget "Secretary" for searching magnet links and keywords.
  * Fixed context menu for messages in private chats.
- Refresh ru.ts.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612180801">- Trim metadata redundancies from descriptions. Fix grammar issues.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1620388800">- Update to 2.4.2
  * Added support of build using musl instead of glibc.
  * Add support of build in Cygwin environment.
  * Added configuration option LUA_VERSION (unset by default) for choosing
    specific version of Lua library in the systems if necessary.
  * Fix search on ADC hubs. (It was accidentally broken in 2.4.1 release.)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- Added eiskaltdcpp-2.4.2-pcre2.patch to pcre2 support.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1746792000">- Fixed the build with cmake4.</changelog>
</package>
<package pkgid="6e164c53ba9a22a2eea81646ea6c1785764ec8d4cbeb0bb68f1b9ac3c7964be6b7d5c06258235de6d18d6208a96fca7a0203cc18eeca13ec1b8a70b244e012ed" name="eiskaltdcpp-qt-lang" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="bp160.1.10"/>
  <changelog author="pgajdos@suse.com" date="1601640000">- Don't depend on aspell, it will be removed from Factory.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1601985600">- Readd aspell support and add Requires:aspell.
- Add BuildRequires:git (cmake script checks it).
- Remove additional cmake options that were default.
- Correct disable PHP daemon backand via cmake option JSONRPC_DAEMON.
- Disable examples via cmake option to remove requires: bash, php, sh.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1602504000">- Remove Requires:aspell and add Requires:aspell for -qt package.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1607947200">- Update to 2.4.0.
  * Remove _service.
  * Refresh BuildRequires and using pkgconfig where is possible.
  * Migration from boost to C++14 standard.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1608206400">- Add subpackages: common, libeiskaltdcpp2_4, daemon, cli.
- Add separate lang subpackages: common-lang, qt-lang.
- Change all descriptions.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1612180800">- The correct license is GPL-3.0-or-later.
- Update to 2.4.1.
  * https://github.com/eiskaltdcpp/eiskaltdcpp/blob/v2.4.1/ChangeLog.txt
  * Fixed sending of hub commands containing %[mySID] parameter.
  * Fix text in tooltip for system tray icon in KDE Plasma 5.
  * Added new widget "Secretary" for searching magnet links and keywords.
  * Fixed context menu for messages in private chats.
- Refresh ru.ts.patch.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1612180801">- Trim metadata redundancies from descriptions. Fix grammar issues.</changelog>
  <changelog author="Wang Jun &lt;jgwang@suse.com&gt;" date="1620388800">- Update to 2.4.2
  * Added support of build using musl instead of glibc.
  * Add support of build in Cygwin environment.
  * Added configuration option LUA_VERSION (unset by default) for choosing
    specific version of Lua library in the systems if necessary.
  * Fix search on ADC hubs. (It was accidentally broken in 2.4.1 release.)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1742385600">- Added eiskaltdcpp-2.4.2-pcre2.patch to pcre2 support.</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1746792000">- Fixed the build with cmake4.</changelog>
</package>
<package pkgid="2135b3bbfebb4b1c08eae85ec25a43595d5253ba36b1bf7e75a2c2f62913d9cd4d8e3ad456535e6d1ffa4ae428843c37dbb47d79b657f5814b1be05b0e44c36d" name="element-web" arch="noarch">
  <version epoch="0" ver="1.11.81" rel="bp160.1.9"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1720785600">- Version 1.11.70
  [#]# ✨ Features
  * Add SSO redirect option for login page (https://github.com/element-hq/element-web/pull/27576). Contributed by @bartvdbraak.
  * Use stable endpoints for MSC3916 (https://github.com/element-hq/element-web/pull/27558). Contributed by @turt2live.
  * Switch to Rust crypto stack for all logins (https://github.com/matrix-org/matrix-react-sdk/pull/12630). Contributed by @richvdh.
  * Hide voip buttons in group rooms in environments with widgets disabled (https://github.com/matrix-org/matrix-react-sdk/pull/12664). Contributed by @t3chguy.
  * Minor tweaks to UserSettings dialog (https://github.com/matrix-org/matrix-react-sdk/pull/12651). Contributed by @florianduros.
  * Hide voice call button when redundant (https://github.com/matrix-org/matrix-react-sdk/pull/12639). Contributed by @t3chguy.
  * Improve accessibility of the room summary card (https://github.com/matrix-org/matrix-react-sdk/pull/12586). Contributed by @t3chguy.
  * Show tooltips on narrow tabbed views (https://github.com/matrix-org/matrix-react-sdk/pull/12624). Contributed by @dbkr.
  * Update gfm.css to github-markdown-css (https://github.com/matrix-org/matrix-react-sdk/pull/12613). Contributed by @t3chguy.
  * Cache e2eStatus to avoid concerning unencrypted flicker when changing rooms (https://github.com/matrix-org/matrix-react-sdk/pull/12606). Contributed by @t3chguy.
  * Tweak copy for user verification toast (https://github.com/matrix-org/matrix-react-sdk/pull/12605). Contributed by @t3chguy.
  * Support s tags for strikethrough for Matrix v1.10 (https://github.com/matrix-org/matrix-react-sdk/pull/12604). Contributed by @t3chguy.
  [#]# 🐛 Bug Fixes
  * Fix "Unable to restore session" error (https://github.com/matrix-org/matrix-js-sdk/pull/4299).
  * Fix error when sending encrypted messages in large rooms (https://github.com/matrix-org/matrix-js-sdk/pull/4297).
  * Remove redundant copy in deactive uia modal (https://github.com/matrix-org/matrix-react-sdk/pull/12668). Contributed by @t3chguy.
  * Fix high contrast theme in settings (https://github.com/matrix-org/matrix-react-sdk/pull/12649). Contributed by @florianduros.
  * Fix background on live location sharing footer (https://github.com/matrix-org/matrix-react-sdk/pull/12629). Contributed by @t3chguy.
  * Remove outdated iframe sandbox attribute (https://github.com/matrix-org/matrix-react-sdk/pull/12633). Contributed by @t3chguy.
  * Remove stray setState which caused encryption state shields to flicker (https://github.com/matrix-org/matrix-react-sdk/pull/12632). Contributed by @t3chguy.
  * Fix stray background colour on markdown body (https://github.com/matrix-org/matrix-react-sdk/pull/12628). Contributed by @t3chguy.
  * Fix widgets not being cleaned up correctly. (https://github.com/matrix-org/matrix-react-sdk/pull/12616). Contributed by @toger5.
  * Add in-progress view to display name EditInPlace (https://github.com/matrix-org/matrix-react-sdk/pull/12609). Contributed by @dbkr.
  * Fix config override of other settings levels (https://github.com/matrix-org/matrix-react-sdk/pull/12593). Contributed by @langleyd.
  * Don't show 'saved' on display name save error (https://github.com/matrix-org/matrix-react-sdk/pull/12600). Contributed by @dbkr.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1721217600">- Version 1.11.71
  [#]# ✨ Features
  * Add Modernizr rule for Intl.Segmenter (https://github.com/element-hq/element-web/pull/27677). Contributed by @t3chguy.
  * Add tabs to the right panel (https://github.com/matrix-org/matrix-react-sdk/pull/12672). Contributed by @MidhunSureshR.
  * Promote new room header from labs to Beta (https://github.com/matrix-org/matrix-react-sdk/pull/12739). Contributed by @t3chguy.
  * Redesign room search interface (https://github.com/matrix-org/matrix-react-sdk/pull/12677). Contributed by @t3chguy.
  * Move language settings to 'preferences' (https://github.com/matrix-org/matrix-react-sdk/pull/12723). Contributed by @dbkr.
  * New layout selector ui in user settings (https://github.com/matrix-org/matrix-react-sdk/pull/12676). Contributed by @florianduros.
  * Prevent Element appearing in system media controls  (https://github.com/matrix-org/matrix-react-sdk/pull/10995). Contributed by @SuperKenVery.
  * Move the account management button (https://github.com/matrix-org/matrix-react-sdk/pull/12663). Contributed by @dbkr.
  * Disable profile controls if the HS doesn't allow them to be set (https://github.com/matrix-org/matrix-react-sdk/pull/12652). Contributed by @dbkr.
  * New theme ui in user settings (https://github.com/matrix-org/matrix-react-sdk/pull/12576). Contributed by @florianduros.
  * Adjust room header hover transition from 300ms to 200ms (https://github.com/matrix-org/matrix-react-sdk/pull/12703). Contributed by @t3chguy.
  * Split out email \&amp; phone number settings to separate components \&amp; move discovery to privacy tab (https://github.com/matrix-org/matrix-react-sdk/pull/12670). Contributed by @dbkr.
  [#]# 🐛 Bug Fixes
  * Ensure we do not load matrix-react-sdk is a manner which can white-screen (https://github.com/element-hq/element-web/pull/27685). Contributed by @t3chguy.
  * Fix incoming call toast crash due to audio refactor (https://github.com/matrix-org/matrix-react-sdk/pull/12737). Contributed by @t3chguy.
  * Improve new room header accessibility (https://github.com/matrix-org/matrix-react-sdk/pull/12725). Contributed by @t3chguy.
  * Fix closing all modals (https://github.com/matrix-org/matrix-react-sdk/pull/12728). Contributed by @dbkr.
  * Fix close button on forgot password flow (https://github.com/matrix-org/matrix-react-sdk/pull/12732). Contributed by @dbkr.
  * Don't consider textual characters to be emoji (https://github.com/matrix-org/matrix-react-sdk/pull/12582). Contributed by @robintown.
  * Clear autocomplete input on selection accept (https://github.com/matrix-org/matrix-react-sdk/pull/12709). Contributed by @dbkr.
  * Fix `Match system theme` toggle (https://github.com/matrix-org/matrix-react-sdk/pull/12719). Contributed by @florianduros.</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1722945600">- Version 1.11.73
  Fixes for CVE-2024-42347 / GHSA-f83w-wqhc-cfp4
- Version 1.11.72
  [#]# ✨ Features
  * Polyfill Intl.Segmenter for wider web browser compatibility (https://github.com/element-hq/element-web/pull/27803). Contributed by @dbkr.
  * Enable audio/webaudio Modernizr rule (https://github.com/element-hq/element-web/pull/27772). Contributed by @t3chguy.
  * Add release announcement for the new room header (https://github.com/matrix-org/matrix-react-sdk/pull/12802). Contributed by @MidhunSureshR.
  * Default the room header to on (https://github.com/matrix-org/matrix-react-sdk/pull/12803). Contributed by @MidhunSureshR.
  * Update Thread Panel to match latest designs (https://github.com/matrix-org/matrix-react-sdk/pull/12797). Contributed by @t3chguy.
  * Close any open modals on logout (https://github.com/matrix-org/matrix-react-sdk/pull/12777). Contributed by @dbkr.
  * Iterate design of right panel empty state (https://github.com/matrix-org/matrix-react-sdk/pull/12796). Contributed by @t3chguy.
  * Update styling of UserInfo right panel card (https://github.com/matrix-org/matrix-react-sdk/pull/12788). Contributed by @t3chguy.
  * Accessibility: Add Landmark navigation (https://github.com/matrix-org/matrix-react-sdk/pull/12190). Contributed by @akirk.
  * Let Element Call widget receive m.room.create (https://github.com/matrix-org/matrix-react-sdk/pull/12710). Contributed by @AndrewFerr.
  * Let Element Call widget set session memberships (https://github.com/matrix-org/matrix-react-sdk/pull/12713). Contributed by @AndrewFerr.
  * Update right panel base card styling to match Compound (https://github.com/matrix-org/matrix-react-sdk/pull/12768). Contributed by @t3chguy.
  * Align `widget_build_url_ignore_dm` with call behaviour switch between 1:1 and Widget (https://github.com/matrix-org/matrix-react-sdk/pull/12760). Contributed by @t3chguy.
  * Move integrations switch (https://github.com/matrix-org/matrix-react-sdk/pull/12733). Contributed by @dbkr.
  * Element-R: Report events with withheld keys separately to Posthog. (https://github.com/matrix-org/matrix-react-sdk/pull/12755). Contributed by @richvdh.
  [#]# 🐛 Bug Fixes
  * Add a modernizr check for WebAssembly support (https://github.com/element-hq/element-web/pull/27776). Contributed by @dbkr.
  * Test for lack of WebAssembly support (https://github.com/matrix-org/matrix-react-sdk/pull/12792). Contributed by @dbkr.
  * Fix stray 'account' heading (https://github.com/matrix-org/matrix-react-sdk/pull/12791). Contributed by @dbkr.
  * Add test for the unsupported browser screen (https://github.com/matrix-org/matrix-react-sdk/pull/12787). Contributed by @dbkr.
  * Fix HTML export test (https://github.com/matrix-org/matrix-react-sdk/pull/12778). Contributed by @dbkr.
  * Fix HTML export missing a bunch of Compound variables (https://github.com/matrix-org/matrix-react-sdk/pull/12774). Contributed by @t3chguy.
  * Fix inability to change accent colour consistently in custom theming (https://github.com/matrix-org/matrix-react-sdk/pull/12772). Contributed by @t3chguy.
  * Fix edge case of landing on 3pid email link with registration disabled (https://github.com/matrix-org/matrix-react-sdk/pull/12771). Contributed by @t3chguy.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1724673600">- Version 1.11.75
  * Fixes for CVE-2024-42369 / GHSA-vhr5-g3pm-49fm.
- Version 1.11.74
  [#]# ✨ Features
  * Update unsupported browser react component to new designs (https://github.com/element-hq/element-web/pull/27857). Contributed by @t3chguy.
  * Invite dialog: display MXID on its own line (https://github.com/matrix-org/matrix-react-sdk/pull/11756). Contributed by @AndrewFerr.
  * Align RoomSummaryCard styles with Figma (https://github.com/matrix-org/matrix-react-sdk/pull/12793). Contributed by @t3chguy.
  * Extract Extensions into their own right panel tab (https://github.com/matrix-org/matrix-react-sdk/pull/12844). Contributed by @t3chguy.
  * Remove topic from new room header and expand right panel topic (https://github.com/matrix-org/matrix-react-sdk/pull/12842). Contributed by @t3chguy.
  * Rework how the onboarding notifications task works (https://github.com/matrix-org/matrix-react-sdk/pull/12839). Contributed by @t3chguy.
  * Update toast styles to match Figma (https://github.com/matrix-org/matrix-react-sdk/pull/12833). Contributed by @t3chguy.
  * Warn users on unsupported browsers before they lack features (https://github.com/matrix-org/matrix-react-sdk/pull/12830). Contributed by @t3chguy.
  * Add sign out button to settings profile section (https://github.com/matrix-org/matrix-react-sdk/pull/12666). Contributed by @dbkr.
  * Remove MatrixRTC realted import ES lint exceptions using a index.ts for matrixrtc (https://github.com/matrix-org/matrix-react-sdk/pull/12780). Contributed by @toger5.
  * Fix unwanted ringing of other devices even though the user is already connected to the call. (https://github.com/matrix-org/matrix-react-sdk/pull/12742). Contributed by @toger5.
  * Acknowledge `DeviceMute` widget actions (https://github.com/matrix-org/matrix-react-sdk/pull/12790). Contributed by @toger5.
  [#]# 🐛 Bug Fixes
  * Update Element icons (https://github.com/element-hq/element-web/pull/27900). Contributed by @t3chguy.
  * Fix Jitsi by updating device mute updates over postMessage API (https://github.com/element-hq/element-web/pull/27858). Contributed by @t3chguy.
  * Fix formatting of rich text emotes (https://github.com/matrix-org/matrix-react-sdk/pull/12862). Contributed by @dbkr.
  * Fixed custom emotes background color #27745 (https://github.com/matrix-org/matrix-react-sdk/pull/12798). Contributed by @asimdelvi.
  * Ignore permalink\_prefix when serializing pills (https://github.com/matrix-org/matrix-react-sdk/pull/11726). Contributed by @herkulessi.
  * Deflake the chat export test (https://github.com/matrix-org/matrix-react-sdk/pull/12854). Contributed by @dbkr.
  * Fix alignment of RTL messages (https://github.com/matrix-org/matrix-react-sdk/pull/12837). Contributed by @dbkr.
  * Handle media download errors better (https://github.com/matrix-org/matrix-react-sdk/pull/12848). Contributed by @t3chguy.
  * Make micIcon display on primary (https://github.com/matrix-org/matrix-react-sdk/pull/11908). Contributed by @kdanielm.
  * Fix compound typography font component issues (https://github.com/matrix-org/matrix-react-sdk/pull/12826). Contributed by @t3chguy.
  * Allow Chrome page translator to translate messages in rooms (https://github.com/matrix-org/matrix-react-sdk/pull/11113). Contributed by @lukaszpolowczyk.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1725019200">- Version 1.11.76
  [#]# ✨ Features
  * Message Pinning: rework the message pinning list in the right panel (https://github.com/matrix-org/matrix-react-sdk/pull/12825). Contributed by @florianduros.
  * Tweak UIA postMessage check to work cross-origin (https://github.com/matrix-org/matrix-react-sdk/pull/12878). Contributed by @t3chguy.
  * Delayed events (Futures) / MSC4140 for call widget (https://github.com/matrix-org/matrix-react-sdk/pull/12714). Contributed by @AndrewFerr.
  * Stop the ongoing ring if another device joins the call session. (https://github.com/matrix-org/matrix-react-sdk/pull/12866). Contributed by @toger5.
  * Rich text Editor: Auto-replace plain text emoticons with emoji (https://github.com/matrix-org/matrix-react-sdk/pull/12828). Contributed by @langleyd.
  * Clean up editor drafts for unknown rooms  (https://github.com/matrix-org/matrix-react-sdk/pull/12850). Contributed by @langleyd.
  * Rename general user settings to account (https://github.com/matrix-org/matrix-react-sdk/pull/12841). Contributed by @dbkr.
  * Update settings tab icons (https://github.com/matrix-org/matrix-react-sdk/pull/12867). Contributed by @dbkr.
  * Disable jump to read receipt button instead of hiding when nothing to jump to (https://github.com/matrix-org/matrix-react-sdk/pull/12863). Contributed by @t3chguy.
  [#]# 🐛 Bug Fixes
  * Ensure elements on Login page are disabled when in-flight (https://github.com/matrix-org/matrix-react-sdk/pull/12895). Contributed by @t3chguy.
  * Hide pinned messages when grouped in timeline when feature pinning is disabled (https://github.com/matrix-org/matrix-react-sdk/pull/12888). Contributed by @florianduros.
  * Add chat button on new room header for maximised widgets (https://github.com/matrix-org/matrix-react-sdk/pull/12882). Contributed by @t3chguy.
  * Show spinner whilst initial search request is in progress (https://github.com/matrix-org/matrix-react-sdk/pull/12883). Contributed by @t3chguy.
  * Fix user menu font (https://github.com/matrix-org/matrix-react-sdk/pull/12879). Contributed by @florianduros.
  * Allow selecting text in the right panel topic (https://github.com/matrix-org/matrix-react-sdk/pull/12870). Contributed by @t3chguy.
  * Add missing presence indicator to new room header (https://github.com/matrix-org/matrix-react-sdk/pull/12865). Contributed by @t3chguy.
  * Fix permissions in release tarballs (https://github.com/element-hq/element-web/pull/27904). Contributed by @t3chguy.
  [#]# 🧰 Maintenance
  * Update dependencies for MSC4157 (https://github.com/element-hq/element-web/pull/27906). Contributed by @AndrewFerr.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1726056000">- Version 1.11.77
  [#]# ✨ Features
  * Add docs for widget container height option (https://github.com/element-hq/element-web/pull/27922). Contributed by @dbkr.
  * Allow user to set timezone (https://github.com/matrix-org/matrix-react-sdk/pull/12775). Contributed by @Timshel.
  * Implement download\_file in widget driver (https://github.com/matrix-org/matrix-react-sdk/pull/12931). Contributed by @weeman1337.
  * Sort the pinning message list in the same order than the banner. By timeline order. (https://github.com/matrix-org/matrix-react-sdk/pull/12937). Contributed by @florianduros.
  * Display pinned messages on a banner at the top of a room (https://github.com/matrix-org/matrix-react-sdk/pull/12917). Contributed by @florianduros.
  * Add a config option to control the default widget container height (https://github.com/matrix-org/matrix-react-sdk/pull/12893). Contributed by @dbkr.
  * RTE drafts (https://github.com/matrix-org/matrix-react-sdk/pull/12674). Contributed by @langleyd.
  * Add thread information in pinned message list (https://github.com/matrix-org/matrix-react-sdk/pull/12902). Contributed by @florianduros.
  * Add Pin/Unpin action in quick access of the message action bar (https://github.com/matrix-org/matrix-react-sdk/pull/12897). Contributed by @florianduros.
  [#]# 🐛 Bug Fixes
  * Fix read receipt animation (https://github.com/matrix-org/matrix-react-sdk/pull/12923). Contributed by @dbkr.
  * Display the indicator even with one message in pinned message banner (https://github.com/matrix-org/matrix-react-sdk/pull/12946). Contributed by @florianduros.
  * Always display last pinned message on the banner (https://github.com/matrix-org/matrix-react-sdk/pull/12945). Contributed by @florianduros.
  * The pinned message banner or list are triggering  🎉 effect. (https://github.com/matrix-org/matrix-react-sdk/pull/12944). Contributed by @florianduros.
  * Fix reply message truncation on 2 lines (https://github.com/matrix-org/matrix-react-sdk/pull/12929). Contributed by @florianduros.
  * Fix pin/unpin slowness and non refresh from the message action bar (https://github.com/matrix-org/matrix-react-sdk/pull/12934). Contributed by @florianduros.
  * Ignore desktop for minimum browser support. (https://github.com/matrix-org/matrix-react-sdk/pull/12928). Contributed by @florianduros.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1727352000">- Version 1.11.78
  [#]# ✨ Features
  * Add Release announcement for the pinning message list (https://github.com/element-hq/matrix-react-sdk/pull/46). Contributed by @florianduros.
  * Unlabs feature pinning (https://github.com/element-hq/matrix-react-sdk/pull/22). Contributed by @florianduros.
  * Add mobile registration (https://github.com/element-hq/matrix-react-sdk/pull/42). Contributed by @langleyd.
  * Add support for `org.matrix.cross_signing_reset` UIA stage flow (https://github.com/element-hq/matrix-react-sdk/pull/34). Contributed by @t3chguy.
  * Add timezone to user profile (https://github.com/element-hq/matrix-react-sdk/pull/20). Contributed by @Half-Shot.
  * Add config option to force verification (https://github.com/element-hq/matrix-react-sdk/pull/29). Contributed by @dbkr.
  * Reduce pinned message banner size (https://github.com/element-hq/matrix-react-sdk/pull/28). Contributed by @florianduros.
  * Enable message pinning labs by default (https://github.com/element-hq/matrix-react-sdk/pull/25). Contributed by @florianduros.
  * Remove release announcement of the new header (https://github.com/element-hq/matrix-react-sdk/pull/23). Contributed by @florianduros.
  [#]# 🐛 Bug Fixes
  * Fix timeout type (https://github.com/element-hq/matrix-react-sdk/pull/40). Contributed by @dbkr.
  * Fix huge usage bandwidth and performance issue of pinned message banner. (https://github.com/element-hq/matrix-react-sdk/pull/37). Contributed by @florianduros.
  * Reverse order of pinned message list (https://github.com/element-hq/matrix-react-sdk/pull/19). Contributed by @florianduros.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1727870400">- Version 1.11.79
  * No changes
  [#]# ✨ Features
  * https://github.com/element-hq/matrix-react-sdk/pull/106). Contributed by @RiotRobot.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1728475200">- Version 1.11.80
  [#]# ✨ Features
  * Add doc for 'force\_verification config option (https://github.com/element-hq/element-web/pull/28035). Contributed by @dbkr.
  * Roll back change to device isolation mode (https://github.com/element-hq/matrix-react-sdk/pull/104). Contributed by @richvdh.
  * Remove right panel toggling behaviour on room header buttons (https://github.com/element-hq/matrix-react-sdk/pull/100). Contributed by @t3chguy.
  * Improve error display for messages sent from insecure devices (https://github.com/element-hq/matrix-react-sdk/pull/93). Contributed by @richvdh.
  * Add labs option to exclude unverified devices (https://github.com/element-hq/matrix-react-sdk/pull/92). Contributed by @richvdh.
  * Improve contrast for timestamps, date separators \&amp; spotlight trigger (https://github.com/element-hq/matrix-react-sdk/pull/91). Contributed by @t3chguy.
  * Open room settings on room header avatar click (https://github.com/element-hq/matrix-react-sdk/pull/88). Contributed by @t3chguy.
  * Use `strong` over `b` for improved a11y semantics (https://github.com/element-hq/matrix-react-sdk/pull/41). Contributed by @t3chguy.
  * Grant Element Call widget capabilities for "raise hand" feature (https://github.com/element-hq/matrix-react-sdk/pull/82). Contributed by @AndrewFerr.
  * Mobile registration optimizations and tests (https://github.com/element-hq/matrix-react-sdk/pull/62). Contributed by @langleyd.
  * Ignore chat effect when older than 48h (https://github.com/element-hq/matrix-react-sdk/pull/48). Contributed by @florianduros.
  [#]# 🐛 Bug Fixes
  * Update native OIDC callback url to be RFC8252 compliant (https://github.com/element-hq/element-web/pull/28096). Contributed by @t3chguy.
  * Update icons to include transparency (https://github.com/element-hq/element-web/pull/28040). Contributed by @t3chguy.
  * Fix default\_widget\_container\_height in sample config (https://github.com/element-hq/element-web/pull/28034). Contributed by @dbkr.
  * Fix untranslated keys being rendered in `/help` dialog (https://github.com/element-hq/matrix-react-sdk/pull/90). Contributed by @t3chguy.
  * Ensure timeline search results are visible even in video rooms (https://github.com/element-hq/matrix-react-sdk/pull/96). Contributed by @t3chguy.
  * Pop right panel timeline when unmaximising widget to avoid double timeline (https://github.com/element-hq/matrix-react-sdk/pull/94). Contributed by @t3chguy.
  * Fix accessible label on left panel spotlight trigger (https://github.com/element-hq/matrix-react-sdk/pull/87). Contributed by @t3chguy.
  * Crypto: fix display of device key (https://github.com/element-hq/matrix-react-sdk/pull/86). Contributed by @richvdh.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1728993600">- Version 1.11.81
  This release fixes High severity vulnerability CVE-2024-47771 / GHSA-963w-49j9-gxj6</changelog>
</package>
<package pkgid="58e0c99c21f28de6832edb91101f2c1a22fda650ab07979c1b2acaac2a1b287311daf3fc4c8f549c72ca7721bae395ebd9ed6cdf95c62eb83dab70c945ca0987" name="elemental" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="kkaempf@suse.com" date="1666699200">- add /etc/NetworkManager/conf.d/rke2-canal.conf (#446)</changelog>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.1.0+git20230125.14a106c:
  * Add debug flag on upgrade command and update bootargs.cfg file (#625)</changelog>
  <changelog author="dcassany@suse.com" date="1701172801">- Update to version 1.3+git20230830.d301e1b:
  * Add elemental-register-reset.service
  * Use the new init command (#874)
  * Disable service triggers on staging
  * Fix elemental-iso-add-registration script
  * rancher/ -&gt; suse/
  * Use elemental-register --install argument (#934)
  * Allow installation on non-SUSE distributions
  * Add CONTRIBUTING.md
  * Enable cloud-config from removable devices
  * Ensure names are unique for all stages
  * Do not compare versions from different repositories on upgrades
  * Feat: add CODEOWNERS
  * Load proxy setup from sysconfig and allow elemental specific env variables
  * Include cryptsetup in elemental-teal
  * Do not expand COS_PERSISTENT by default
  * Add environment variable files in elemental-system-agent.service
  * Run elemental-register in systemd service (#723)
  * Include rke2-killall on shutdown process
  * Update shutdown-k3s.service
  * Prevent upgrade loops when FORCE is in use
  * Do not allow downgrades without force flag
  * Remove reboots on cloud-config addition
  * Do not allow concurrent suc-upgrade executions
  * Update docker/login-action to v2.1.0 (#666)
  * Add shutdown-k3s.service to OBS spec
  * Add service to kill k3s before umount</changelog>
  <changelog author="dcassany@suse.com" date="1701172802">- Update to version 2.0.0:
  * For some reason OBS complains of invalid format on SOURCEURL substitution
  * Update workflow so that it branches the appropriate OBS packages
  * Adding missing manifest for the base-iso image
  * Align and update labels and tags with all images
  * Remove obsolete images, sle micro variants are already in place
  * Rename build-iso-next
  * Remove longhorn overlay mount
  * Drop the 'for Rancher' suffix
  * Revert to 'old' RPi firmware
  * Set entrypoint of elemental-iso-add-registration
  * Fix SLEM4R OS build
  * Update elemental-iso-add-registration
  * Remove some old teal references
  * Remove Teal images
  * Bump ele-testhelpers deps
  * Include system agent unit file in specfile
  * Require elemental-toolkit instead of elemental-cli (#984)</changelog>
  <changelog author="dcassany@suse.com" date="1710331200">- Bump to v2.1.0
  * Micro rename
  * Only apply upgrade config on OS upgrades (#1283)
  * Require elemental-toolkit v2
  * Adding the btrfs default at elemental-operator level
  * Enable recovery upgrades (#1226)
  * Set transient recovery hostname
  * Update all Golang dependencies
  * Adapt bootargs file to support btrfs snapshotter (#1213)
  * Adapt upgrade script to the new elemental-toolkit
  * Don't set the hostname (#1171)
  * Make use of the update elemental kernel arguments
  * Make initrd generation consistent across flavors
  * Update rootfs settings
  * Make sure no variables in /etc/os-release are duplicated
  * Build RT flavour only for x86_64
  * Use Elemental systemd branding package
  * Update kernel cmdline for elemental-sysroot (#1165)
  * Use the elemental-rootfs feature (#1163)
  * Run services after time-sync.target
  * Mkdir /host/run/elemental in suc-upgrade
  * Migrate to /run/elemental from /run/cos
  * Add default network configuration for eth0
  * Remove default serial console kernel parameter</changelog>
  <changelog author="dcassany@suse.com" date="1714132800">- Update to version v2.1.1
  * Move bootargs to /etc/elemental
  * Include boot assessment installation as part of elemental init
  * Do not start elemental-register timer manually
  * Add an elemental-register checker
  * Adding an network-online checker for elemental
  * Add wireless-regdb for aarch64</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version v2.1.2
  * Fix grub2-x86_64-efi installation
  * Removing syslinux from base image
  * Workaround to remove any pre-existing Elemental initrd</changelog>
  <changelog author="dcassany@suse.com" date="1727092800">- Include net.ifnames=0 kernel parameter bsc#1230904</changelog>
  <changelog author="elemental@suse.de" date="1727784000">- Update to v2.2.0-rc1:
  * 01444ac Bump elemental-toolkit to latest v2.2.x (#1592)
  * a0c30fc Adding the new arm-firmware feature for aarch64 builds (#1590)
  * a9c1d57 Disable predictable interface names (bsc#1230904) (#1581)
  * 35b34fd Include a baremetal disk image
  * 764b791 Switch to git in OBS (#1562)
  * 415c2ea Install nm-configurator in dev image and simplify dev sample
    manifest (#1533)
  * 31c322a Support for IPAM to nmstate (#1476)
  * dba9c98 Remove unneeded network setup
  * 36207b6 elemental.spec: Add procps to Requires
  * fde4fe2 Add openSSH server to SELinux images
  * 2ef9dd7 Revert "Move install openssh and openssh-server"
  * 462b1b8 Move install openssh and openssh-server
  * a267562 selinux config file no longer needed
  * 0b88900 Configure SELinux for RKE2 image
  * 9fd1cd7 Add relabelling initramfs step
  * 016914b Add explicit enforcing setup
  * bec23e9 Set SELinux in permissive mode on recovery, leave default on
    active
  * 80a9efe Move mount config files to /run/elemental
  * fe8e0fc Removing syslinux from base image
  * 7f668e9 Fix grub2-x86_64-efi installation
  * 8b8c89a Update framework/files/system/oem/01_elemental-rootfs.yaml
  * 7675473 Set layout with yaml format
  * 650493a Drop unused accounting.yaml
  * db7f55a use patterns-microos-selinux instead of individual packages
  * b6720b9 Add flavors for k3s-selinux and rke2-selinux KVM images
  * cc1a6ee Rebase dev image to Tumbleweed (#1363)
  * 994a0c3 Use default compression (gzip) for ISOs
  * 0d67032 No squashfs compression by default
  * 8787081 Get rid of few error messages in OBS builds
  * f2f3e65 Update spec file to new bootargs.cfg location
  * 24dca6e Move bootargs to /etc/elemental
  * 8edb9ba Include boot assessment installation as part of elemental init
  * 7a04678 Do not start elemental-register timer manually
  * 37f60bf Update .obs/dockerfile/micro-rt-iso/Dockerfile
  * 6019373 Update .obs/dockerfile/micro-kvm-iso/Dockerfile
  * f8ef719 Update .obs/dockerfile/micro-base-iso/Dockerfile
  * 60de594 Update .obs/dockerfile/micro-baremetal-iso/Dockerfile
  * 6d90f32 Use the naming convention OBS expects for ISOs
  * c01a9a1 Add an elemental-register checker
  * 54c94ff Adding an network-online checker for elemental
  * c50d518 Fix RT ISO name
  * 1b9cf0f Update workflow to new SL Micro name
  * 98d06fc micro-rt-os/Dockerfile: Tag consistently
  * a479e2b Dockefile: Add #!UseOBSRepositories
  * 8f61703 Add wireless-regdb for aarch64
  * 530dc33 Finalize Micro rename
  * 2b6cf4d Install openssl in micro-base
  * 39b1fad Micro rename
  * e4e1206 Include audit package and boot selinux in permissive mode
    explicitly
  * f358223 Sync kvm and rt ISO sources in OBS
  * f7f9de3 Only apply upgrade config on OS upgrades (#1283)
  * a5afd95 Actualize development documentation (#1271)
  * 005e933 slem-rt-iso: fix ISO name
  * 7b23fee Disable selinux for recovery
  * 77aaac2 rt: move ARG after FROM
  * c1abf48 rt, kvm: fix tags and references
  * 98584eb kvm, rt: Add BuildName
  * 886f710 Use busybox in RT and KVM iso images
  * 6fee308 Include busybox to ISO images from scratch
  * eb74c83 slem-base-os: Drop apparmor-parser
  * 13344e6 Switch from busybox to toolbox for ALP
  * e00d917 Fix labelprefix for ALP
  * b9ebc0a slem-iso: SLE_VERSION -&gt; SLEMICRO_VERSION on ALP
  * 17a5133 slem-iso: move from busybox to toolbox on ALP
  * 5a73e00 Drop builder container in favor of sle-micro/6.0/toolbox
  * 99c7c44 Switch to sle-micro/6.0/toolbox as host
  * 14c46a2 Back to SLE15 busybox
  * 85e97d3 Move to alp/bci/busybox
  * a6267b4 Adapt Dockerfiles for ALP
  * ccd4598 drop %VERSION% in IMG_TAG
  * 9c8403f fix VERSION
  * 474b8b1 Unify syntax
  * 351a396 add SLEMICRO_VERSION suffix
  * 08f1118 Build slem-base-os with slem-builder-container
  * 3d27650 drop -base- from builder container
  * 87e8d8b A builder container
  * 34018d3 Back to SLE15 busybox
  * f21de6d Add btrfsmaintance to base container
  * 1b92b57 Move to alp/bci/busybox
  * 382730c slem-kvm-iso/Dockerfile: fix IMG_REPO
  * 65224b7 Add slem-rt-iso Dockerfile and manifest.yaml
  * c5dc64b Add slem-kvm-iso Dockerfile
  * e7f9844 Drop haveged - included in kernel now
  * dd525b0 slem-base-os: explicitly install kernel-default
  * de2fa1f drop k9s and nfsidmap, not available in SLE Micro 6
  * 91eb5ef Adapt Dockerfiles for ALP</changelog>
  <changelog author="elemental@suse.de" date="1728302400">- Update to v2.2.0:
  * 2dfcbfd Add support to define CATTLE_AGENT_STRICT_VERIFY (#1616)</changelog>
</package>
<package pkgid="dfc2a6a15eb4e286c1f85c5af09ffdb7d1437f3772a5baeb8d22a5c818472d5b2aff051fa0381539921742d7a8a9cd4d0841fa1969216181e760307e29e0713e" name="elemental" arch="noarch">
  <version epoch="0" ver="2.3.0" rel="160000.1.1"/>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.1.0+git20230125.14a106c:
  * Add debug flag on upgrade command and update bootargs.cfg file (#625)</changelog>
  <changelog author="dcassany@suse.com" date="1701172801">- Update to version 1.3+git20230830.d301e1b:
  * Add elemental-register-reset.service
  * Use the new init command (#874)
  * Disable service triggers on staging
  * Fix elemental-iso-add-registration script
  * rancher/ -&gt; suse/
  * Use elemental-register --install argument (#934)
  * Allow installation on non-SUSE distributions
  * Add CONTRIBUTING.md
  * Enable cloud-config from removable devices
  * Ensure names are unique for all stages
  * Do not compare versions from different repositories on upgrades
  * Feat: add CODEOWNERS
  * Load proxy setup from sysconfig and allow elemental specific env variables
  * Include cryptsetup in elemental-teal
  * Do not expand COS_PERSISTENT by default
  * Add environment variable files in elemental-system-agent.service
  * Run elemental-register in systemd service (#723)
  * Include rke2-killall on shutdown process
  * Update shutdown-k3s.service
  * Prevent upgrade loops when FORCE is in use
  * Do not allow downgrades without force flag
  * Remove reboots on cloud-config addition
  * Do not allow concurrent suc-upgrade executions
  * Update docker/login-action to v2.1.0 (#666)
  * Add shutdown-k3s.service to OBS spec
  * Add service to kill k3s before umount</changelog>
  <changelog author="dcassany@suse.com" date="1701172802">- Update to version 2.0.0:
  * For some reason OBS complains of invalid format on SOURCEURL substitution
  * Update workflow so that it branches the appropriate OBS packages
  * Adding missing manifest for the base-iso image
  * Align and update labels and tags with all images
  * Remove obsolete images, sle micro variants are already in place
  * Rename build-iso-next
  * Remove longhorn overlay mount
  * Drop the 'for Rancher' suffix
  * Revert to 'old' RPi firmware
  * Set entrypoint of elemental-iso-add-registration
  * Fix SLEM4R OS build
  * Update elemental-iso-add-registration
  * Remove some old teal references
  * Remove Teal images
  * Bump ele-testhelpers deps
  * Include system agent unit file in specfile
  * Require elemental-toolkit instead of elemental-cli (#984)</changelog>
  <changelog author="dcassany@suse.com" date="1710331200">- Bump to v2.1.0
  * Micro rename
  * Only apply upgrade config on OS upgrades (#1283)
  * Require elemental-toolkit v2
  * Adding the btrfs default at elemental-operator level
  * Enable recovery upgrades (#1226)
  * Set transient recovery hostname
  * Update all Golang dependencies
  * Adapt bootargs file to support btrfs snapshotter (#1213)
  * Adapt upgrade script to the new elemental-toolkit
  * Don't set the hostname (#1171)
  * Make use of the update elemental kernel arguments
  * Make initrd generation consistent across flavors
  * Update rootfs settings
  * Make sure no variables in /etc/os-release are duplicated
  * Build RT flavour only for x86_64
  * Use Elemental systemd branding package
  * Update kernel cmdline for elemental-sysroot (#1165)
  * Use the elemental-rootfs feature (#1163)
  * Run services after time-sync.target
  * Mkdir /host/run/elemental in suc-upgrade
  * Migrate to /run/elemental from /run/cos
  * Add default network configuration for eth0
  * Remove default serial console kernel parameter</changelog>
  <changelog author="dcassany@suse.com" date="1714132800">- Update to version v2.1.1
  * Move bootargs to /etc/elemental
  * Include boot assessment installation as part of elemental init
  * Do not start elemental-register timer manually
  * Add an elemental-register checker
  * Adding an network-online checker for elemental
  * Add wireless-regdb for aarch64</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version v2.1.2
  * Fix grub2-x86_64-efi installation
  * Removing syslinux from base image
  * Workaround to remove any pre-existing Elemental initrd</changelog>
  <changelog author="dcassany@suse.com" date="1727092800">- Include net.ifnames=0 kernel parameter bsc#1230904</changelog>
  <changelog author="elemental@suse.de" date="1727784000">- Update to v2.2.0-rc1:
  * 01444ac Bump elemental-toolkit to latest v2.2.x (#1592)
  * a0c30fc Adding the new arm-firmware feature for aarch64 builds (#1590)
  * a9c1d57 Disable predictable interface names (bsc#1230904) (#1581)
  * 35b34fd Include a baremetal disk image
  * 764b791 Switch to git in OBS (#1562)
  * 415c2ea Install nm-configurator in dev image and simplify dev sample
    manifest (#1533)
  * 31c322a Support for IPAM to nmstate (#1476)
  * dba9c98 Remove unneeded network setup
  * 36207b6 elemental.spec: Add procps to Requires
  * fde4fe2 Add openSSH server to SELinux images
  * 2ef9dd7 Revert "Move install openssh and openssh-server"
  * 462b1b8 Move install openssh and openssh-server
  * a267562 selinux config file no longer needed
  * 0b88900 Configure SELinux for RKE2 image
  * 9fd1cd7 Add relabelling initramfs step
  * 016914b Add explicit enforcing setup
  * bec23e9 Set SELinux in permissive mode on recovery, leave default on
    active
  * 80a9efe Move mount config files to /run/elemental
  * fe8e0fc Removing syslinux from base image
  * 7f668e9 Fix grub2-x86_64-efi installation
  * 8b8c89a Update framework/files/system/oem/01_elemental-rootfs.yaml
  * 7675473 Set layout with yaml format
  * 650493a Drop unused accounting.yaml
  * db7f55a use patterns-microos-selinux instead of individual packages
  * b6720b9 Add flavors for k3s-selinux and rke2-selinux KVM images
  * cc1a6ee Rebase dev image to Tumbleweed (#1363)
  * 994a0c3 Use default compression (gzip) for ISOs
  * 0d67032 No squashfs compression by default
  * 8787081 Get rid of few error messages in OBS builds
  * f2f3e65 Update spec file to new bootargs.cfg location
  * 24dca6e Move bootargs to /etc/elemental
  * 8edb9ba Include boot assessment installation as part of elemental init
  * 7a04678 Do not start elemental-register timer manually
  * 37f60bf Update .obs/dockerfile/micro-rt-iso/Dockerfile
  * 6019373 Update .obs/dockerfile/micro-kvm-iso/Dockerfile
  * f8ef719 Update .obs/dockerfile/micro-base-iso/Dockerfile
  * 60de594 Update .obs/dockerfile/micro-baremetal-iso/Dockerfile
  * 6d90f32 Use the naming convention OBS expects for ISOs
  * c01a9a1 Add an elemental-register checker
  * 54c94ff Adding an network-online checker for elemental
  * c50d518 Fix RT ISO name
  * 1b9cf0f Update workflow to new SL Micro name
  * 98d06fc micro-rt-os/Dockerfile: Tag consistently
  * a479e2b Dockefile: Add #!UseOBSRepositories
  * 8f61703 Add wireless-regdb for aarch64
  * 530dc33 Finalize Micro rename
  * 2b6cf4d Install openssl in micro-base
  * 39b1fad Micro rename
  * e4e1206 Include audit package and boot selinux in permissive mode
    explicitly
  * f358223 Sync kvm and rt ISO sources in OBS
  * f7f9de3 Only apply upgrade config on OS upgrades (#1283)
  * a5afd95 Actualize development documentation (#1271)
  * 005e933 slem-rt-iso: fix ISO name
  * 7b23fee Disable selinux for recovery
  * 77aaac2 rt: move ARG after FROM
  * c1abf48 rt, kvm: fix tags and references
  * 98584eb kvm, rt: Add BuildName
  * 886f710 Use busybox in RT and KVM iso images
  * 6fee308 Include busybox to ISO images from scratch
  * eb74c83 slem-base-os: Drop apparmor-parser
  * 13344e6 Switch from busybox to toolbox for ALP
  * e00d917 Fix labelprefix for ALP
  * b9ebc0a slem-iso: SLE_VERSION -&gt; SLEMICRO_VERSION on ALP
  * 17a5133 slem-iso: move from busybox to toolbox on ALP
  * 5a73e00 Drop builder container in favor of sle-micro/6.0/toolbox
  * 99c7c44 Switch to sle-micro/6.0/toolbox as host
  * 14c46a2 Back to SLE15 busybox
  * 85e97d3 Move to alp/bci/busybox
  * a6267b4 Adapt Dockerfiles for ALP
  * ccd4598 drop %VERSION% in IMG_TAG
  * 9c8403f fix VERSION
  * 474b8b1 Unify syntax
  * 351a396 add SLEMICRO_VERSION suffix
  * 08f1118 Build slem-base-os with slem-builder-container
  * 3d27650 drop -base- from builder container
  * 87e8d8b A builder container
  * 34018d3 Back to SLE15 busybox
  * f21de6d Add btrfsmaintance to base container
  * 1b92b57 Move to alp/bci/busybox
  * 382730c slem-kvm-iso/Dockerfile: fix IMG_REPO
  * 65224b7 Add slem-rt-iso Dockerfile and manifest.yaml
  * c5dc64b Add slem-kvm-iso Dockerfile
  * e7f9844 Drop haveged - included in kernel now
  * dd525b0 slem-base-os: explicitly install kernel-default
  * de2fa1f drop k9s and nfsidmap, not available in SLE Micro 6
  * 91eb5ef Adapt Dockerfiles for ALP</changelog>
  <changelog author="elemental@suse.de" date="1728302400">- Update to v2.2.0:
  * 2dfcbfd Add support to define CATTLE_AGENT_STRICT_VERIFY (#1616)</changelog>
  <changelog author="elemental@suse.de" date="1759147200">- Update to v2.3.0:
  * 9460f98 Add policycoreutils-python-utils (bsc#1240623)
  * 8a07527 Set elemental images to only build for x86_64 and aarch64
  * e8e8161 Disable disk flavor
  * cf99f4b Include an empty /etc/machine-id file (bsc#1239623)
  * 5c12b2c cni and cni-plugins are no longer part of SL Micro 6.2
  * 4725df2 Switch to BCI base image instead of toolbox
  * 11ba9af Adding --force flag to init command for aarch64 as it is for
    x86_64
  * be1ff0c Update copyright year (2025)
  * 1243b12 Dockerfile.dev.os: enable elemental-register.timer (#1655)
  * 2cef6d9 Merge ISO and OS container images
  * c52cc44 Remove no longer valid OBS workflow
  * 09c4ab9 Add documentation to test private CA renewal (#1606)</changelog>
</package>
<package pkgid="1ded82e6c88f833778b804351a80c6c5c9b140c784e73a615e08c925a9525e8bd8425fca0297d0069b8154c61ca507bfe7fc9103a564c76697e1e15c5bcf10f0" name="elemental" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="160000.1.1"/>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.3+git20230830.d301e1b:
  * Add elemental-register-reset.service
  * Use the new init command (#874)
  * Disable service triggers on staging
  * Fix elemental-iso-add-registration script
  * rancher/ -&gt; suse/
  * Use elemental-register --install argument (#934)
  * Allow installation on non-SUSE distributions
  * Add CONTRIBUTING.md
  * Enable cloud-config from removable devices
  * Ensure names are unique for all stages
  * Do not compare versions from different repositories on upgrades
  * Feat: add CODEOWNERS
  * Load proxy setup from sysconfig and allow elemental specific env variables
  * Include cryptsetup in elemental-teal
  * Do not expand COS_PERSISTENT by default
  * Add environment variable files in elemental-system-agent.service
  * Run elemental-register in systemd service (#723)
  * Include rke2-killall on shutdown process
  * Update shutdown-k3s.service
  * Prevent upgrade loops when FORCE is in use
  * Do not allow downgrades without force flag
  * Remove reboots on cloud-config addition
  * Do not allow concurrent suc-upgrade executions
  * Update docker/login-action to v2.1.0 (#666)
  * Add shutdown-k3s.service to OBS spec
  * Add service to kill k3s before umount</changelog>
  <changelog author="dcassany@suse.com" date="1701172801">- Update to version 2.0.0:
  * For some reason OBS complains of invalid format on SOURCEURL substitution
  * Update workflow so that it branches the appropriate OBS packages
  * Adding missing manifest for the base-iso image
  * Align and update labels and tags with all images
  * Remove obsolete images, sle micro variants are already in place
  * Rename build-iso-next
  * Remove longhorn overlay mount
  * Drop the 'for Rancher' suffix
  * Revert to 'old' RPi firmware
  * Set entrypoint of elemental-iso-add-registration
  * Fix SLEM4R OS build
  * Update elemental-iso-add-registration
  * Remove some old teal references
  * Remove Teal images
  * Bump ele-testhelpers deps
  * Include system agent unit file in specfile
  * Require elemental-toolkit instead of elemental-cli (#984)</changelog>
  <changelog author="dcassany@suse.com" date="1710331200">- Bump to v2.1.0
  * Micro rename
  * Only apply upgrade config on OS upgrades (#1283)
  * Require elemental-toolkit v2
  * Adding the btrfs default at elemental-operator level
  * Enable recovery upgrades (#1226)
  * Set transient recovery hostname
  * Update all Golang dependencies
  * Adapt bootargs file to support btrfs snapshotter (#1213)
  * Adapt upgrade script to the new elemental-toolkit
  * Don't set the hostname (#1171)
  * Make use of the update elemental kernel arguments
  * Make initrd generation consistent across flavors
  * Update rootfs settings
  * Make sure no variables in /etc/os-release are duplicated
  * Build RT flavour only for x86_64
  * Use Elemental systemd branding package
  * Update kernel cmdline for elemental-sysroot (#1165)
  * Use the elemental-rootfs feature (#1163)
  * Run services after time-sync.target
  * Mkdir /host/run/elemental in suc-upgrade
  * Migrate to /run/elemental from /run/cos
  * Add default network configuration for eth0
  * Remove default serial console kernel parameter</changelog>
  <changelog author="dcassany@suse.com" date="1714132800">- Update to version v2.1.1
  * Move bootargs to /etc/elemental
  * Include boot assessment installation as part of elemental init
  * Do not start elemental-register timer manually
  * Add an elemental-register checker
  * Adding an network-online checker for elemental
  * Add wireless-regdb for aarch64</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version v2.1.2
  * Fix grub2-x86_64-efi installation
  * Removing syslinux from base image
  * Workaround to remove any pre-existing Elemental initrd</changelog>
  <changelog author="dcassany@suse.com" date="1727092800">- Include net.ifnames=0 kernel parameter bsc#1230904</changelog>
  <changelog author="elemental@suse.de" date="1727784000">- Update to v2.2.0-rc1:
  * 01444ac Bump elemental-toolkit to latest v2.2.x (#1592)
  * a0c30fc Adding the new arm-firmware feature for aarch64 builds (#1590)
  * a9c1d57 Disable predictable interface names (bsc#1230904) (#1581)
  * 35b34fd Include a baremetal disk image
  * 764b791 Switch to git in OBS (#1562)
  * 415c2ea Install nm-configurator in dev image and simplify dev sample
    manifest (#1533)
  * 31c322a Support for IPAM to nmstate (#1476)
  * dba9c98 Remove unneeded network setup
  * 36207b6 elemental.spec: Add procps to Requires
  * fde4fe2 Add openSSH server to SELinux images
  * 2ef9dd7 Revert "Move install openssh and openssh-server"
  * 462b1b8 Move install openssh and openssh-server
  * a267562 selinux config file no longer needed
  * 0b88900 Configure SELinux for RKE2 image
  * 9fd1cd7 Add relabelling initramfs step
  * 016914b Add explicit enforcing setup
  * bec23e9 Set SELinux in permissive mode on recovery, leave default on
    active
  * 80a9efe Move mount config files to /run/elemental
  * fe8e0fc Removing syslinux from base image
  * 7f668e9 Fix grub2-x86_64-efi installation
  * 8b8c89a Update framework/files/system/oem/01_elemental-rootfs.yaml
  * 7675473 Set layout with yaml format
  * 650493a Drop unused accounting.yaml
  * db7f55a use patterns-microos-selinux instead of individual packages
  * b6720b9 Add flavors for k3s-selinux and rke2-selinux KVM images
  * cc1a6ee Rebase dev image to Tumbleweed (#1363)
  * 994a0c3 Use default compression (gzip) for ISOs
  * 0d67032 No squashfs compression by default
  * 8787081 Get rid of few error messages in OBS builds
  * f2f3e65 Update spec file to new bootargs.cfg location
  * 24dca6e Move bootargs to /etc/elemental
  * 8edb9ba Include boot assessment installation as part of elemental init
  * 7a04678 Do not start elemental-register timer manually
  * 37f60bf Update .obs/dockerfile/micro-rt-iso/Dockerfile
  * 6019373 Update .obs/dockerfile/micro-kvm-iso/Dockerfile
  * f8ef719 Update .obs/dockerfile/micro-base-iso/Dockerfile
  * 60de594 Update .obs/dockerfile/micro-baremetal-iso/Dockerfile
  * 6d90f32 Use the naming convention OBS expects for ISOs
  * c01a9a1 Add an elemental-register checker
  * 54c94ff Adding an network-online checker for elemental
  * c50d518 Fix RT ISO name
  * 1b9cf0f Update workflow to new SL Micro name
  * 98d06fc micro-rt-os/Dockerfile: Tag consistently
  * a479e2b Dockefile: Add #!UseOBSRepositories
  * 8f61703 Add wireless-regdb for aarch64
  * 530dc33 Finalize Micro rename
  * 2b6cf4d Install openssl in micro-base
  * 39b1fad Micro rename
  * e4e1206 Include audit package and boot selinux in permissive mode
    explicitly
  * f358223 Sync kvm and rt ISO sources in OBS
  * f7f9de3 Only apply upgrade config on OS upgrades (#1283)
  * a5afd95 Actualize development documentation (#1271)
  * 005e933 slem-rt-iso: fix ISO name
  * 7b23fee Disable selinux for recovery
  * 77aaac2 rt: move ARG after FROM
  * c1abf48 rt, kvm: fix tags and references
  * 98584eb kvm, rt: Add BuildName
  * 886f710 Use busybox in RT and KVM iso images
  * 6fee308 Include busybox to ISO images from scratch
  * eb74c83 slem-base-os: Drop apparmor-parser
  * 13344e6 Switch from busybox to toolbox for ALP
  * e00d917 Fix labelprefix for ALP
  * b9ebc0a slem-iso: SLE_VERSION -&gt; SLEMICRO_VERSION on ALP
  * 17a5133 slem-iso: move from busybox to toolbox on ALP
  * 5a73e00 Drop builder container in favor of sle-micro/6.0/toolbox
  * 99c7c44 Switch to sle-micro/6.0/toolbox as host
  * 14c46a2 Back to SLE15 busybox
  * 85e97d3 Move to alp/bci/busybox
  * a6267b4 Adapt Dockerfiles for ALP
  * ccd4598 drop %VERSION% in IMG_TAG
  * 9c8403f fix VERSION
  * 474b8b1 Unify syntax
  * 351a396 add SLEMICRO_VERSION suffix
  * 08f1118 Build slem-base-os with slem-builder-container
  * 3d27650 drop -base- from builder container
  * 87e8d8b A builder container
  * 34018d3 Back to SLE15 busybox
  * f21de6d Add btrfsmaintance to base container
  * 1b92b57 Move to alp/bci/busybox
  * 382730c slem-kvm-iso/Dockerfile: fix IMG_REPO
  * 65224b7 Add slem-rt-iso Dockerfile and manifest.yaml
  * c5dc64b Add slem-kvm-iso Dockerfile
  * e7f9844 Drop haveged - included in kernel now
  * dd525b0 slem-base-os: explicitly install kernel-default
  * de2fa1f drop k9s and nfsidmap, not available in SLE Micro 6
  * 91eb5ef Adapt Dockerfiles for ALP</changelog>
  <changelog author="elemental@suse.de" date="1728302400">- Update to v2.2.0:
  * 2dfcbfd Add support to define CATTLE_AGENT_STRICT_VERIFY (#1616)</changelog>
  <changelog author="elemental@suse.de" date="1759147200">- Update to v2.3.0:
  * 9460f98 Add policycoreutils-python-utils (bsc#1240623)
  * 8a07527 Set elemental images to only build for x86_64 and aarch64
  * e8e8161 Disable disk flavor
  * cf99f4b Include an empty /etc/machine-id file (bsc#1239623)
  * 5c12b2c cni and cni-plugins are no longer part of SL Micro 6.2
  * 4725df2 Switch to BCI base image instead of toolbox
  * 11ba9af Adding --force flag to init command for aarch64 as it is for
    x86_64
  * be1ff0c Update copyright year (2025)
  * 1243b12 Dockerfile.dev.os: enable elemental-register.timer (#1655)
  * 2cef6d9 Merge ISO and OS container images
  * c52cc44 Remove no longer valid OBS workflow
  * 09c4ab9 Add documentation to test private CA renewal (#1606)</changelog>
  <changelog author="elemental@suse.de" date="1781006400">- Update to v2.3.1:
  * c47d91b Adapt labels to pass containers checks in OBS
  * 88015da set to released-stage to released as SL Micro 6.2 is GA
  * 6f8ca5a Fix specfile dependencies</changelog>
</package>
<package pkgid="35f3083270f3b211682e6cd5ae062fce61db5c5a178f6eef23c4f89eea7e7cd33ac27dff142f1bfea76f8cd90cb305bc816c8fa8dc8d7717513b5141294b1a89" name="elemental-post-build-extract-iso" arch="noarch">
  <version epoch="0" ver="0.4" rel="160000.2.2"/>
  <changelog author="dcassany@suse.com" date="1682078400">- Version 0.0.2:
  * Only extract containers including "iso" in its name</changelog>
  <changelog author="dcassany@suse.com" date="1682337600">- Do not exit 1 if docker images are not found, just exit 0</changelog>
  <changelog author="dcassany@suse.com" date="1685102400">- Update ISO path to current containerized ISOs</changelog>
  <changelog author="kkaempf@suse.com" date="1712059200">- install to /usr/lib/build/post_build.d</changelog>
  <changelog author="kkaempf@suse.com" date="1712059201">- install to /usr/lib/build/post_build.d</changelog>
  <changelog author="dcassany@suse.com" date="1726660800">- Extend the extraction script to also support disk images</changelog>
</package>
<package pkgid="bdd6a6c62db2711985c8b63d5e7882b8f6e8f96bebdd3859850001c14fca307d840f09d402a1f07dce0a3fed7812295075ec00cf0083fdef183d044ec5bab517" name="elemental-post-build-generate-rpi-image" arch="noarch">
  <version epoch="0" ver="0.4" rel="160000.2.2"/>
  <changelog author="kkaempf@suse.com" date="1703678400">- iso name changed, adapt flavor extraction
- handle empty flavor</changelog>
  <changelog author="kkaempf@suse.com" date="1704283200">- switch ttyS0 baudrate to 115200 (standard for Raspberry Pi)
  (rancher/elemental#1139)</changelog>
  <changelog author="kkaempf@suse.com" date="1704369600">- fix grub2 root partition (rancher/elemental#1151)</changelog>
  <changelog author="dcassany@suse.com" date="1710417600">- Fix generator script: Do not patch partition label setup from
  grub.cfg.</changelog>
  <changelog author="kkaempf@suse.com" date="1711108800">- follow symlinks when copying boot partition</changelog>
  <changelog author="kkaempf@suse.com" date="1711627200">- fix flavor extraction (micro version was added to filename)</changelog>
  <changelog author="dcassany@suse.com" date="1711627201">- Copying required files only &lt;EFI&gt;/boot path. This prevents
  dereferencing multiple links pointing to the same file, otherwise
  kernel and initrd are duplicated.</changelog>
  <changelog author="kkaempf@suse.com" date="1712059200">- install to /usr/lib/build/post_build.d</changelog>
  <changelog author="dcassany@suse.com" date="1712836800">- Adapt to new rootfs.squashfs file path</changelog>
  <changelog author="kkaempf@suse.com" date="1713787200">- handle non-iso builds gracefully</changelog>
</package>
<package pkgid="7191710e0af21b34d84414312b0f45992283bf3a7af3ab5a9570c835ae72c0886f96f4dc798fca8b924affc0a8a5b1827b1bde48cc0087af6001b45fb83ec1a4" name="elemental-register" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="160000.1.1"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
  <changelog author="elemental@suse.de" date="1758542400">- Update to v1.8.0:
  * a755c2d7 Update default channels to micro 6.2
  * 2e3375d8 Revert "RBAC: restrict SeedImage controller auth to
    fleet-default (#864)"
  * 338f5668 Add maintenance case to elemental-airgap.sh
  * 5899edce Stop using toolbox image in favor of bci-base image
  * fda434de [ports  from 1.7.x] Update default channel data (#919)
  * 97608c0c OS channel: enable baremetal channel by default
  * 43f3b001  Bump libraries to incorporate CVE fixes  (#913)
  * 317de1e2 Label Templates: improve Random family processing (#914)
  * aa6474c6 operator: update RBAC for upgrade plans (#908)
  * 8fc8efd4 [Airgap] extend yq support in the airgap script (#898)
  * 97db17d7 make linter happy - update copyright dates (#899)
  * f4d7b6f5 Fix generation of already present resources (#892)
  * a7297052 SeedImage: fix description (#889)
  * 884beb59 golanci-lint: change output format (#887)
  * ad150a87 Add created date to the ManagedOSVersion common metadata fields
    (#886)
  * 5e14e968 Label Templates: add IP addresses to the Network variables
    (#885)
  * b3c9ef88 Update default channels to 6.1 images (#883)</changelog>
</package>
<package pkgid="76e014872f467a7d8947fb47020f6a89724e4f4a626d5d6057ea56be511973586c0701f78aa106543ac23bcaa9c1a40e14e1593aaa329f55f95bb0f3f5e4d172" name="elemental-register" arch="x86_64">
  <version epoch="0" ver="1.8.0~dev" rel="160000.2.2"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
</package>
<package pkgid="e78f7d8c766f3e72f97443dbba348813a64fba035941eb0403e739029cc813d5baa7a5df2c31e86fbc329a55804e57831d699e7bca6f4efe8f8e8caed6bb3948" name="elemental-register" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="160000.1.1"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
  <changelog author="elemental@suse.de" date="1758542400">- Update to v1.8.0:
  * a755c2d7 Update default channels to micro 6.2
  * 2e3375d8 Revert "RBAC: restrict SeedImage controller auth to
    fleet-default (#864)"
  * 338f5668 Add maintenance case to elemental-airgap.sh
  * 5899edce Stop using toolbox image in favor of bci-base image
  * fda434de [ports  from 1.7.x] Update default channel data (#919)
  * 97608c0c OS channel: enable baremetal channel by default
  * 43f3b001  Bump libraries to incorporate CVE fixes  (#913)
  * 317de1e2 Label Templates: improve Random family processing (#914)
  * aa6474c6 operator: update RBAC for upgrade plans (#908)
  * 8fc8efd4 [Airgap] extend yq support in the airgap script (#898)
  * 97db17d7 make linter happy - update copyright dates (#899)
  * f4d7b6f5 Fix generation of already present resources (#892)
  * a7297052 SeedImage: fix description (#889)
  * 884beb59 golanci-lint: change output format (#887)
  * ad150a87 Add created date to the ManagedOSVersion common metadata fields
    (#886)
  * 5e14e968 Label Templates: add IP addresses to the Network variables
    (#885)
  * b3c9ef88 Update default channels to 6.1 images (#883)</changelog>
  <changelog author="elemental@suse.de" date="1766059200">- Update to v1.8.1:
  * bcbd09d2 Install yip config files in before-install step
  * 64505339 Bump github.com/rancher-sandbox/go-tpm and its dependencies
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)</changelog>
  <changelog author="elemental@suse.de" date="1768564800">- Changes on top of v1.8.1:
  * 49ebf0b7 Update headers to 2026
  * fd13ba92 Update questions to include SL Micro 6.2</changelog>
</package>
<package pkgid="a52eecda7a0af3e310c2a4a2540b6f79bf6e165b8b565c179a2c5e936b2b902e58b37c4c58f0e766488896c0f37e7b530b954e6295e6a0886e6df0bba101ee59" name="elemental-register" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="160000.1.1"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
  <changelog author="elemental@suse.de" date="1758542400">- Update to v1.8.0:
  * a755c2d7 Update default channels to micro 6.2
  * 2e3375d8 Revert "RBAC: restrict SeedImage controller auth to
    fleet-default (#864)"
  * 338f5668 Add maintenance case to elemental-airgap.sh
  * 5899edce Stop using toolbox image in favor of bci-base image
  * fda434de [ports  from 1.7.x] Update default channel data (#919)
  * 97608c0c OS channel: enable baremetal channel by default
  * 43f3b001  Bump libraries to incorporate CVE fixes  (#913)
  * 317de1e2 Label Templates: improve Random family processing (#914)
  * aa6474c6 operator: update RBAC for upgrade plans (#908)
  * 8fc8efd4 [Airgap] extend yq support in the airgap script (#898)
  * 97db17d7 make linter happy - update copyright dates (#899)
  * f4d7b6f5 Fix generation of already present resources (#892)
  * a7297052 SeedImage: fix description (#889)
  * 884beb59 golanci-lint: change output format (#887)
  * ad150a87 Add created date to the ManagedOSVersion common metadata fields
    (#886)
  * 5e14e968 Label Templates: add IP addresses to the Network variables
    (#885)
  * b3c9ef88 Update default channels to 6.1 images (#883)</changelog>
  <changelog author="elemental@suse.de" date="1766059200">- Update to v1.8.1:
  * bcbd09d2 Install yip config files in before-install step
  * 64505339 Bump github.com/rancher-sandbox/go-tpm and its dependencies
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)</changelog>
  <changelog author="elemental@suse.de" date="1768564800">- Changes on top of v1.8.1:
  * 49ebf0b7 Update headers to 2026
  * fd13ba92 Update questions to include SL Micro 6.2</changelog>
  <changelog author="elemental@suse.de" date="1772539200">- Update to v1.9.0-rc1:
  * 9952ebe1 Update libraries based on dependency scan
  * 5e128c5d Adapt OBS packages to a 1.9 version to coexist with 1.8 version
  * f88219af Fix cluster api version in test environment
  * ad937279 Run 'make generate' to recreate generated code and vendor folder
  * 15bb505f Bump to cluster API libraries to v1.12.x
  * 63369022 Bump test environment tools in Makefile
  * 7b464802 Run 'make vendor' to recreate vendor folder
  * 879b3464 Bump yip
  * aeda10ac Fix unit tests after bumping libraries
  * 33dcb61a Run 'make vendor' to recreate vendor folder
  * 0ccd96af Bump wrangler from v2 to v3
  * ff0190c4 Run 'make generate' to renew all generated code and config files
  * b28d2f08 Bump controller generator to version 0.19
  * 0bf7dc32 Update controller runtime options
  * 549e720d Run 'make vendor' to recreate vendor folder
  * 3f0f27e0 Updated cluster-api, steve, rancher/apis, client-go and k8s/api
    to the level they were at rancher v2.13
  * 49ebf0b7 Update headers to 2026
  * fd13ba92 Update questions to include SL Micro 6.2</changelog>
  <changelog author="elemental@suse.de" date="1772798400">- Update to v1.9.0:</changelog>
  <changelog author="elemental@suse.de" date="1774267200">- Update to v1.9.1:
  * b42116d4 Ensure the machine inventory selector keeps looking for a match</changelog>
  <changelog author="elemental@suse.de" date="1780574400">- Update to v1.9.2:
  * 71d1fb9c Local node labels (#984)
  * ce6acda9 Bump golang.org/x/net to v0.55.0 includes fixes for:
  - bsc#1266789 bsc#1265921 bsc#1267197 bsc#1267168 bsc#1251679
  * 060958b7 Bump golangci/golangci-lint-action
  * 3b4b6699 use a real UUID for the machine registration ID
  * d33faa01 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
  * 6dceb411 Deterministic endpoints for MachineRegistrations (#975)</changelog>
</package>
<package pkgid="55c0b3314f862461bf531c038961755e3493917d82aade250191d64cfb4d9f663217a6204c5f73397c24fc127d11268d63c9f38f27a0630afb1040858457e0a6" name="elemental-support" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="160000.1.1"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
  <changelog author="elemental@suse.de" date="1758542400">- Update to v1.8.0:
  * a755c2d7 Update default channels to micro 6.2
  * 2e3375d8 Revert "RBAC: restrict SeedImage controller auth to
    fleet-default (#864)"
  * 338f5668 Add maintenance case to elemental-airgap.sh
  * 5899edce Stop using toolbox image in favor of bci-base image
  * fda434de [ports  from 1.7.x] Update default channel data (#919)
  * 97608c0c OS channel: enable baremetal channel by default
  * 43f3b001  Bump libraries to incorporate CVE fixes  (#913)
  * 317de1e2 Label Templates: improve Random family processing (#914)
  * aa6474c6 operator: update RBAC for upgrade plans (#908)
  * 8fc8efd4 [Airgap] extend yq support in the airgap script (#898)
  * 97db17d7 make linter happy - update copyright dates (#899)
  * f4d7b6f5 Fix generation of already present resources (#892)
  * a7297052 SeedImage: fix description (#889)
  * 884beb59 golanci-lint: change output format (#887)
  * ad150a87 Add created date to the ManagedOSVersion common metadata fields
    (#886)
  * 5e14e968 Label Templates: add IP addresses to the Network variables
    (#885)
  * b3c9ef88 Update default channels to 6.1 images (#883)</changelog>
</package>
<package pkgid="1619c4c0cd6f8c369f7cf3c715c63758f57fbf2a41e728848b0036e8ea9f84f6b768f0fe772f01c0b67fa2a6df894b89ef10fa84de37f05a0d9c89b4482d52c7" name="elemental-support" arch="x86_64">
  <version epoch="0" ver="1.8.0~dev" rel="160000.2.2"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
</package>
<package pkgid="91024251fdc6f387efebbb609a59c79ea2c93bfd8ac0179fb94c8235864a3c04cd484c93a4307ce7f9ebcbcede1079fc88c7b82099363665ca18d8d7694230a7" name="elemental-support" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="160000.1.1"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
  <changelog author="elemental@suse.de" date="1758542400">- Update to v1.8.0:
  * a755c2d7 Update default channels to micro 6.2
  * 2e3375d8 Revert "RBAC: restrict SeedImage controller auth to
    fleet-default (#864)"
  * 338f5668 Add maintenance case to elemental-airgap.sh
  * 5899edce Stop using toolbox image in favor of bci-base image
  * fda434de [ports  from 1.7.x] Update default channel data (#919)
  * 97608c0c OS channel: enable baremetal channel by default
  * 43f3b001  Bump libraries to incorporate CVE fixes  (#913)
  * 317de1e2 Label Templates: improve Random family processing (#914)
  * aa6474c6 operator: update RBAC for upgrade plans (#908)
  * 8fc8efd4 [Airgap] extend yq support in the airgap script (#898)
  * 97db17d7 make linter happy - update copyright dates (#899)
  * f4d7b6f5 Fix generation of already present resources (#892)
  * a7297052 SeedImage: fix description (#889)
  * 884beb59 golanci-lint: change output format (#887)
  * ad150a87 Add created date to the ManagedOSVersion common metadata fields
    (#886)
  * 5e14e968 Label Templates: add IP addresses to the Network variables
    (#885)
  * b3c9ef88 Update default channels to 6.1 images (#883)</changelog>
  <changelog author="elemental@suse.de" date="1766059200">- Update to v1.8.1:
  * bcbd09d2 Install yip config files in before-install step
  * 64505339 Bump github.com/rancher-sandbox/go-tpm and its dependencies
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)</changelog>
  <changelog author="elemental@suse.de" date="1768564800">- Changes on top of v1.8.1:
  * 49ebf0b7 Update headers to 2026
  * fd13ba92 Update questions to include SL Micro 6.2</changelog>
</package>
<package pkgid="59c8024dda4269e59395c666b5f52f81371cbc569cb6a43d1b08b24362b3915a4c898c9e709d517160f6d34104368ee71bbbb89c6abbb548702acc15a5857fa5" name="elemental-support" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="160000.1.1"/>
  <changelog author="elemental@suse.de" date="1728388800">- Initial commit</changelog>
  <changelog author="elemental@suse.de" date="1729857600">- Changes on top of v1.8.0-dev:
  * 6372ec67 Only reset network if a network configurator is used (#874)
  * cf1a2d64 Do not include Config to MachineRegistration as pointer (#870)
  * fad205a5 Split elemental-operator and elemental-register at OBS level
  * ab193eca Add support for agent-tls-mode Rancher setting (#863)
  * de3c37df RBAC: restrict SeedImage controller auth to fleet-default (#864)</changelog>
  <changelog author="elemental@suse.de" date="1758542400">- Update to v1.8.0:
  * a755c2d7 Update default channels to micro 6.2
  * 2e3375d8 Revert "RBAC: restrict SeedImage controller auth to
    fleet-default (#864)"
  * 338f5668 Add maintenance case to elemental-airgap.sh
  * 5899edce Stop using toolbox image in favor of bci-base image
  * fda434de [ports  from 1.7.x] Update default channel data (#919)
  * 97608c0c OS channel: enable baremetal channel by default
  * 43f3b001  Bump libraries to incorporate CVE fixes  (#913)
  * 317de1e2 Label Templates: improve Random family processing (#914)
  * aa6474c6 operator: update RBAC for upgrade plans (#908)
  * 8fc8efd4 [Airgap] extend yq support in the airgap script (#898)
  * 97db17d7 make linter happy - update copyright dates (#899)
  * f4d7b6f5 Fix generation of already present resources (#892)
  * a7297052 SeedImage: fix description (#889)
  * 884beb59 golanci-lint: change output format (#887)
  * ad150a87 Add created date to the ManagedOSVersion common metadata fields
    (#886)
  * 5e14e968 Label Templates: add IP addresses to the Network variables
    (#885)
  * b3c9ef88 Update default channels to 6.1 images (#883)</changelog>
  <changelog author="elemental@suse.de" date="1766059200">- Update to v1.8.1:
  * bcbd09d2 Install yip config files in before-install step
  * 64505339 Bump github.com/rancher-sandbox/go-tpm and its dependencies
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)</changelog>
  <changelog author="elemental@suse.de" date="1768564800">- Changes on top of v1.8.1:
  * 49ebf0b7 Update headers to 2026
  * fd13ba92 Update questions to include SL Micro 6.2</changelog>
  <changelog author="elemental@suse.de" date="1772539200">- Update to v1.9.0-rc1:
  * 9952ebe1 Update libraries based on dependency scan
  * 5e128c5d Adapt OBS packages to a 1.9 version to coexist with 1.8 version
  * f88219af Fix cluster api version in test environment
  * ad937279 Run 'make generate' to recreate generated code and vendor folder
  * 15bb505f Bump to cluster API libraries to v1.12.x
  * 63369022 Bump test environment tools in Makefile
  * 7b464802 Run 'make vendor' to recreate vendor folder
  * 879b3464 Bump yip
  * aeda10ac Fix unit tests after bumping libraries
  * 33dcb61a Run 'make vendor' to recreate vendor folder
  * 0ccd96af Bump wrangler from v2 to v3
  * ff0190c4 Run 'make generate' to renew all generated code and config files
  * b28d2f08 Bump controller generator to version 0.19
  * 0bf7dc32 Update controller runtime options
  * 549e720d Run 'make vendor' to recreate vendor folder
  * 3f0f27e0 Updated cluster-api, steve, rancher/apis, client-go and k8s/api
    to the level they were at rancher v2.13
  * 49ebf0b7 Update headers to 2026
  * fd13ba92 Update questions to include SL Micro 6.2</changelog>
  <changelog author="elemental@suse.de" date="1772798400">- Update to v1.9.0:</changelog>
  <changelog author="elemental@suse.de" date="1774267200">- Update to v1.9.1:
  * b42116d4 Ensure the machine inventory selector keeps looking for a match</changelog>
  <changelog author="elemental@suse.de" date="1780574400">- Update to v1.9.2:
  * 71d1fb9c Local node labels (#984)
  * ce6acda9 Bump golang.org/x/net to v0.55.0 includes fixes for:
  - bsc#1266789 bsc#1265921 bsc#1267197 bsc#1267168 bsc#1251679
  * 060958b7 Bump golangci/golangci-lint-action
  * 3b4b6699 use a real UUID for the machine registration ID
  * d33faa01 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
  * 6dceb411 Deterministic endpoints for MachineRegistrations (#975)</changelog>
</package>
<package pkgid="aafa8e3a6cca78b8cd13aa9c2887d2c5503a0f296a27ac7a26de112059ef555599f677e9520abb13951e928b943eafd7a74a961e42f3defc2e081e49aff130e4" name="elemental-system-agent" arch="x86_64">
  <version epoch="0" ver="0.3.13" rel="160000.1.1"/>
  <changelog author="kkaempf@suse.com" date="1689595200">- Update to version 0.3.3:
  * Add CATTLE_AGENT_ATTEMPT_NUMBER environment variable that corresponds to failure count for K8s plan application (#115)
  * Retry update with latest secret if plan still matches the applied plan (#114)
  * Add support for transactional-update based systems (#105)
  * Add error handling logic that handles edge cases to force the system-agent to restart if we encounter non-transient errors. Disallow the K8s watcher from manipulating a secret when the UID changes. (#112)
  * Update CODEOWNERS
  * Add CODEOWNERS
  * Update wrangler to v1.1.0</changelog>
  <changelog author="kkaempf@suse.com" date="1689681600">- Fix .spec to build and install on non-SUSE distributions</changelog>
  <changelog author="dcassany@suse.com" date="1695643200">- Remove the systemd unit file as this is now included as part of
  elemental package</changelog>
  <changelog author="kkaempf@suse.com" date="1708344000">- Update to version 0.3.4:
  * Add initial Renovate configuration (#117)
  * bump docker version and go deps to fix CVEs
  * Fix repeated time parse error on probes that have not yet run successfully
- switched _service from 'disabled' to 'manual'</changelog>
  <changelog author="kkaempf@suse.com" date="1708689600">- bump go to 1.21 or later (SURE-7072)</changelog>
  <changelog author="kkaempf@suse.com" date="1710417600">- Update to version 0.3.5:
  * Add interlocks to ensure operations are not interrupted (#150)
  * Update module github.com/google/go-containerregistry to v0.16.1
  * Update module github.com/rancher/wharfie to v0.6.2
  * Update module github.com/urfave/cli/v2 to v2.25.7
  * Update module github.com/sirupsen/logrus to v1.9.3
  * Update plugins/manifest Docker tag to v1.4.0
  * Update module golang.org/x/sync to v0.3.0
  * Update dependency golangci/golangci-lint to v1.54.2
  * Update alpine Docker tag to v3.18.3
  * Update module github.com/mattn/go-colorable to v0.1.13</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712923200">- Update to version 0.3.6:
  * Update Go to 1.21 and deps for k8s 1.27 (#152)
  * Apply suggestions from code review
  * Cleanup and exit if cannot download valid connection info.</changelog>
  <changelog author="kkaempf@suse.de" date="1723464000">- Update to version 0.3.7:
  * Add support for CATTLE_AGENT_VAR_DIR in suc plan
  * add the step for creating GH release, and fix typo in filename
  * Migrate from Drone to GitHub Action
  * Version bump for Alpine and Kubectl
  * Add support for CATTLE_AGENT_STRICT_VERIFY|STRICT_VERIFY environment variables to ensure kubeconfig CA data is valid (#171)</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1727697600">- Update to version 0.3.9:
  * Properly install grep and kubectl into the SUC image (#196)
  * Add default fallback values (`/opt/rke2/bin`, `/opt/bin`) to the PATH if `/usr/local/bin` is read-only (#195)
  * use bci-base to run zypper then layer the result onto bci-micro (#194)
  * Change base images to `bci-micro` (#169)
  * Add CATTLE_AGENT_FALLBACK_PATH
  * Fix if statement in install.sh
  * bump Go version to 1.22, kube-related modules to v0.29.7 to eliminate CVEs
  * Update module github.com/rancher/wharfie to v0.6.6</changelog>
  <changelog author="dcassany@suse.com" date="1758542400">- Update to version 0.3.13:
  * Bumped dependencies for k8s v1.33
  * Add delete for plan.File
  * fix dispatch
  * fix: add retry logic for one time instruction
  * Get UID/GID for current user in write file_test.go
  * Update secrets for dispatch
  * fix golangci
  * support k8s 1.32.2
  * Update CODEOWNERS
  * Add GitHub App token generation and dispatch job for System Agent Upgrade workflow.
  * Add ResetFailureCountOnServiceRestart, if true reset plan failure count after each restart of the system-agent
  * Bump wharfie to v0.6.7
  * Add tests and update CI
  * Windows updates</changelog>
</package>
<package pkgid="4b16d997a9560042587bac9a04733f669fe0ead8a126988197fba196dec8591259913dc01675e3a0b2080bd108dcee7145a3780098599b8ebe6a3303e1b6e154" name="elemental-system-agent" arch="x86_64">
  <version epoch="0" ver="0.3.16" rel="160000.1.1"/>
  <changelog author="kkaempf@suse.com" date="1689681600">- Fix .spec to build and install on non-SUSE distributions</changelog>
  <changelog author="dcassany@suse.com" date="1695643200">- Remove the systemd unit file as this is now included as part of
  elemental package</changelog>
  <changelog author="kkaempf@suse.com" date="1708344000">- Update to version 0.3.4:
  * Add initial Renovate configuration (#117)
  * bump docker version and go deps to fix CVEs
  * Fix repeated time parse error on probes that have not yet run successfully
- switched _service from 'disabled' to 'manual'</changelog>
  <changelog author="kkaempf@suse.com" date="1708689600">- bump go to 1.21 or later (SURE-7072)</changelog>
  <changelog author="kkaempf@suse.com" date="1710417600">- Update to version 0.3.5:
  * Add interlocks to ensure operations are not interrupted (#150)
  * Update module github.com/google/go-containerregistry to v0.16.1
  * Update module github.com/rancher/wharfie to v0.6.2
  * Update module github.com/urfave/cli/v2 to v2.25.7
  * Update module github.com/sirupsen/logrus to v1.9.3
  * Update plugins/manifest Docker tag to v1.4.0
  * Update module golang.org/x/sync to v0.3.0
  * Update dependency golangci/golangci-lint to v1.54.2
  * Update alpine Docker tag to v3.18.3
  * Update module github.com/mattn/go-colorable to v0.1.13</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712923200">- Update to version 0.3.6:
  * Update Go to 1.21 and deps for k8s 1.27 (#152)
  * Apply suggestions from code review
  * Cleanup and exit if cannot download valid connection info.</changelog>
  <changelog author="kkaempf@suse.de" date="1723464000">- Update to version 0.3.7:
  * Add support for CATTLE_AGENT_VAR_DIR in suc plan
  * add the step for creating GH release, and fix typo in filename
  * Migrate from Drone to GitHub Action
  * Version bump for Alpine and Kubectl
  * Add support for CATTLE_AGENT_STRICT_VERIFY|STRICT_VERIFY environment variables to ensure kubeconfig CA data is valid (#171)</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1727697600">- Update to version 0.3.9:
  * Properly install grep and kubectl into the SUC image (#196)
  * Add default fallback values (`/opt/rke2/bin`, `/opt/bin`) to the PATH if `/usr/local/bin` is read-only (#195)
  * use bci-base to run zypper then layer the result onto bci-micro (#194)
  * Change base images to `bci-micro` (#169)
  * Add CATTLE_AGENT_FALLBACK_PATH
  * Fix if statement in install.sh
  * bump Go version to 1.22, kube-related modules to v0.29.7 to eliminate CVEs
  * Update module github.com/rancher/wharfie to v0.6.6</changelog>
  <changelog author="dcassany@suse.com" date="1758542400">- Update to version 0.3.13:
  * Bumped dependencies for k8s v1.33
  * Add delete for plan.File
  * fix dispatch
  * fix: add retry logic for one time instruction
  * Get UID/GID for current user in write file_test.go
  * Update secrets for dispatch
  * fix golangci
  * support k8s 1.32.2
  * Update CODEOWNERS
  * Add GitHub App token generation and dispatch job for System Agent Upgrade workflow.
  * Add ResetFailureCountOnServiceRestart, if true reset plan failure count after each restart of the system-agent
  * Bump wharfie to v0.6.7
  * Add tests and update CI
  * Windows updates</changelog>
  <changelog author="dcassany@suse.com" date="1778673600">- Update to version 0.3.16:
  * setup for immutable releases (#274)
  * align system-agent image publishing for signed releases (#270)
  * Bumo github.com/docker/cli to v29.2.0 and go.opentelemetry.io/otel to v1.43.0
  * run go mod tidy in /test folder
  * Bump google.golang.org/grpc from 1.75.0 to 1.79.3 (bsc#1260277 CVE-2026-33186)
  * Bump github.com/docker/cli in /test
  * export CATTLE_NODE_NAME if SYSTEM_UPGRADE_NODE_NAME is set
  * use correct prefix for system-agent binary (#273)
  * checksum validation (#271)
  * Add `validate` subcommand for configuration validation (#250)
  * Update CODEOWNERS
  * Pin GH Actions to commit sha
  * chore: bump sles to 15.7
  * Extend remote plan e2e tests
  * Fix agent restart issue and introduce constants
  * chore: bump go to v1.25
  * Setup e2e test infrastructure
  * chores(deps): Bump k8s dependencies
  * Define linter rules
  * Fix CI failures
  * Introduce an extended Makefile
  * Switch workflows to use name makefile
  * Replace dapper with multi stage builds
  * Remove dapper scripts
  * Add multiple improvements for ignore files
  * fix: remove umask command from the system-agent unit-file
  * fix-system-agent-umask
  * [1.34] bumped dependencies for 1.34 support (#242)
  * Bump K8s patch level to 1.33.5 and Go patch level to 1.24.6
  * fix: properly handle traps after unsuccessful SUC job execution
  * fix: do not unconditionally reset failure-counts
  * fix: remove resetFailureCountOnStartup, always reset failure counts on first start
  * un-rc wrangler and lasso
  * drop windows 2019 when running PR CI</changelog>
</package>
<package pkgid="e496ec3f31a30ed290149c02dac17496ede3ec4746725d1438b8ea0af70178c7486b4a304c3a763ac0185052e4e5df3e3233f4e74823434ffd4ecf139341294e" name="elemental-system-agent" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="160000.2.2"/>
  <changelog author="kkaempf@suse.com" date="1681300800">- Update to version 0.3.2:
  * Convert uname aarch64 to k8s arm64 before downloading kubectl
  * Only try to get the client version with kubectl
  * Make curl fail on non 2xx codes
  * Use `kubectl version` to make sure the downloaded binary works</changelog>
  <changelog author="kkaempf@suse.com" date="1689595200">- Update to version 0.3.3:
  * Add CATTLE_AGENT_ATTEMPT_NUMBER environment variable that corresponds to failure count for K8s plan application (#115)
  * Retry update with latest secret if plan still matches the applied plan (#114)
  * Add support for transactional-update based systems (#105)
  * Add error handling logic that handles edge cases to force the system-agent to restart if we encounter non-transient errors. Disallow the K8s watcher from manipulating a secret when the UID changes. (#112)
  * Update CODEOWNERS
  * Add CODEOWNERS
  * Update wrangler to v1.1.0</changelog>
  <changelog author="kkaempf@suse.com" date="1689681600">- Fix .spec to build and install on non-SUSE distributions</changelog>
  <changelog author="dcassany@suse.com" date="1695643200">- Remove the systemd unit file as this is now included as part of
  elemental package</changelog>
  <changelog author="kkaempf@suse.com" date="1708344000">- Update to version 0.3.4:
  * Add initial Renovate configuration (#117)
  * bump docker version and go deps to fix CVEs
  * Fix repeated time parse error on probes that have not yet run successfully
- switched _service from 'disabled' to 'manual'</changelog>
  <changelog author="kkaempf@suse.com" date="1708689600">- bump go to 1.21 or later (SURE-7072)</changelog>
  <changelog author="kkaempf@suse.com" date="1710417600">- Update to version 0.3.5:
  * Add interlocks to ensure operations are not interrupted (#150)
  * Update module github.com/google/go-containerregistry to v0.16.1
  * Update module github.com/rancher/wharfie to v0.6.2
  * Update module github.com/urfave/cli/v2 to v2.25.7
  * Update module github.com/sirupsen/logrus to v1.9.3
  * Update plugins/manifest Docker tag to v1.4.0
  * Update module golang.org/x/sync to v0.3.0
  * Update dependency golangci/golangci-lint to v1.54.2
  * Update alpine Docker tag to v3.18.3
  * Update module github.com/mattn/go-colorable to v0.1.13</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712923200">- Update to version 0.3.6:
  * Update Go to 1.21 and deps for k8s 1.27 (#152)
  * Apply suggestions from code review
  * Cleanup and exit if cannot download valid connection info.</changelog>
  <changelog author="kkaempf@suse.de" date="1723464000">- Update to version 0.3.7:
  * Add support for CATTLE_AGENT_VAR_DIR in suc plan
  * add the step for creating GH release, and fix typo in filename
  * Migrate from Drone to GitHub Action
  * Version bump for Alpine and Kubectl
  * Add support for CATTLE_AGENT_STRICT_VERIFY|STRICT_VERIFY environment variables to ensure kubeconfig CA data is valid (#171)</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1727697600">- Update to version 0.3.9:
  * Properly install grep and kubectl into the SUC image (#196)
  * Add default fallback values (`/opt/rke2/bin`, `/opt/bin`) to the PATH if `/usr/local/bin` is read-only (#195)
  * use bci-base to run zypper then layer the result onto bci-micro (#194)
  * Change base images to `bci-micro` (#169)
  * Add CATTLE_AGENT_FALLBACK_PATH
  * Fix if statement in install.sh
  * bump Go version to 1.22, kube-related modules to v0.29.7 to eliminate CVEs
  * Update module github.com/rancher/wharfie to v0.6.6</changelog>
</package>
<package pkgid="96717546f3f44dbb29e9eb1ad7d6b42e5dc6aea5c0b8d93676bc1dd5e6c7b1bfd40aa32154bb15e6bb0cfd1f8d2d07b70d8e74745cdf045f67b10d516e001411" name="elemental-toolkit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="160000.2.2"/>
  <changelog author="dcassany@suse.com" date="1664539200">- Improve requirements in spec</changelog>
  <changelog author="kkaempf@suse.com" date="1669636800">- elemental-cli needs lvm2 for running blkdeactivate.</changelog>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.1.0+git20231027.9c55b9d7:
  * Use build-disk command (#1847)
  * Make use of partx instead of partprobe
  * build-disk command (#1794)
  * Ensure the cache is renewed on source changes
  * Improve test coverage and fix recovery image label setting
  * Improve state.yaml file loading
  * Remove deprecated cmdline options
  * Fix partitions typo (#1835)
  * Move grub bootargs.cfg into new feature
  * Worflow was still trying to build the already dropped builder image</changelog>
  <changelog author="dcassany@suse.com" date="1710417600">- Update to version 2.0.0:
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging version v2.0.0
  * bump elemental-toolkit to v2 (#1969)
  * Align sysroot mount options with SLE Micro, which in turn is applying default mount options
  * Fix racy workflows
  * Fix build-disk action unit tests
  * Make ext2 the default FS for recovery on disks (#1995)
  * Fix unit tests
  * Use working directory to set the snapper configuration
  * Adding debug messages for snapper configuration
  * Do not migrate legacy images if snapshots are already present (#1990)
  * Fix Recovery only upgrades (#1988)
  * Image variable includes full image path already
  * fix broken link (#1985)
  * Adding snapshotter.type flag install command
  * Add support to /dev/disk/by-path device reference
  * Keep previous behavior for persistent binded paths
  * Add upgrade-recovery subcommand (#1974)
  * Fix grub setup to properly set fallback (#1981)
  * Fix recovery-system.uri env var mapping
  * Fix env vars mapping for install and upgrade commands
  * Relay on the snapshotter setup of the installed system for upgrades (#1979)
  * Fix regression introduced in 547cb932 (#1977)
  * Ensure /run/elemental/efi is RW for upgrades
  * Make snapshotter root dynamic based on the reported mountpoint (#1971)
  * Remove tumbleweed dracut patches (#1964)
  * Regenerate docs
  * Use backup legacy grub.cfg location (#1967)
  * Build toolkit on nightly (#1965)
  * Btrfs snapshotter implementation (#1957)
  * Fix docs publishing error (#1963)
  * Move elemental services to /etc (#1962)
  * Embed file permissions for features (#1961)
  * Improved upgrade test (#1960)
  * Update README workflow
  * Fix workflow dependencies (#1956)
  * Add types for pull_request_target
  * Cleanup packages after build
  * Run zypper clean --all in examples
  * Use pull_request_target
  * Update workflows
  * Umount OEM before switching root
  * Build CLI on changes in go.mod
  * Bump golang(API) to 1.22
  * Update GO_VERSION
  * Update BuildRequires in OBS spec
  * Update copyright year (2024)
  * Use go version 1.22
  * Use at least xorriso 1.5.6
  * Bump the go_modules group across 1 directories with 1 update
  * Add formatting to log message
  * Make linter happy
  * Remove references to old ACTIVE and PASSIVE images
  * Make persistent volume a nested structure of persistent data
  * Add Volumes in Mount spec
  * Prevent unnecessary copy of image tree to tmp folder
  * Install podman in example Dockerfiles
  * Bump github actions (#1933)
  * Add back the BindPath for /oem
  * Bump yip to v1.4.10 (#1926)
  * Remove BindMount for /oem in initramfs stage (#1934)
  * Bump the go_modules group across 1 directories with 1 update (#1932)
  * Add dependabot config (#1929)
  * Refactor to switch to snapshotter interface (#1906)
  * This commit does removes the assumption of a /boot folder
  * Test that persistence is working (#1919)
  * Make mount setup more dynamic based on detected partitions
  * Include elemental partitions in mount command
  * Update dependencies (#1917)
  * Use rancher/yip v1.4.8
  * Imporve support for old boot arguments
  * Bind mount /oem in elemental-setup-initramfs
  * Use v1.3.0 as upgrade base image
  * Install grub.cfg into EFI System Partition (#1904)
  * Bump twpayne/vfs module to latest version
  * Fix license template
  * Include SUT utilities within the repository
  * Mount readonly EFI partition to /run/elemental/efi (#1905)
  * Move grub-config to /etc/elemental
  * Fix partitions typo
  * Change default rootfs feature
  * Update copyright year (2024)
  * Update github.com/go-git/go-git to v5.11.0
  * Add default cloud-init-paths to build commands (#1893)
  * Add loopdevice implementation (#1891)
  * Split arm and x86_64 tests
  * Adding new snapshotter interface
  * Fix typo in Makefile build-rpi-disk target
  * Change trigger to pull_request_target (#1889)
  * Add disable-boot-entry flag to reset-command (#1888)
  * Changes to cleanup-cache workflow (#1887)
  * Make sure the module-setup.sh picks the right paths for systemd units
  * Add permissions to delete cache items
  * Load mount-layout from .env-files (#1885)
  * Drop elemental object and make elemental methods stateless
  * Refactor some elemental package methods to be used as stand alone functions
  * Cleanup caches when PR is closed
  * Add backwards-compatibility for liveCD detection
  * Rename overlay -&gt; ephemeral mounts
  * Fix tumbleweed example
  * Make network configuration part of the example, not defaults
  * Do not run CI on pushes to main, the test already happens on the PR
  * Fix RISCV64 Tumbleweed example build
  * add btrfs support in partitioner
  * Wrap mount.Interface to our own interface (#1875)
  * Update go in build-docs action
  * Refactor early system mounting (#1866)
  * Add force flag in systemd-firstboot yip's plugin so default files are overwritten if they are already existing
  * Make sure it triggers PR workflow
  * Bump yip
  * Add other example distros (#1868)
  * Make lint happy, Runner.error method was unused
  * Log errors of runner commands only in debug mode
  * Fix initrd and kernel ISO paths
  * Refactor grub as a bootloader interface
  * Add target for rpi disk (#1859)
  * Drop ARM32 build
  * Add support for RISC-V 64bit architecture
  * Update golang.org/x/net dependency
  * Remove existing file during build-disk (#1857)
  * Configurable build-disk deploy command
  * Move recovery hostname to cloud-config-defaults
  * Update release workflow
  * Improve CI stability
  * Try different drivers for macOS
  * Add installer test</changelog>
  <changelog author="dcassany@suse.com" date="1711108800">- Update to version 2.0.0:
  * Fix passive snapshots listing in grub.cfg</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 2.1.0:
  * Make squashfs defaults more consistent
  * Snapshottable recovery system (#2032)
  * Change description of boot assessment service (#2037)
  * Remove empty mount paths (#2036)
  * Wait for relevant elemental init stages
  * Fix the fix (#2033)
  * Backwards compatible recovery boot configuration
  * Fix doc typo
  * Iterate over passive snapshots on boot-assessment
  * Skip symlink if kernel already exists (#2028)
  * docs: fix build-iso example (#2026)
  * Update github.com/canonical/go-efilib (#2019)
  * make configurable boot-assessment checks (#2018)
  * Turn off smm test
  * Turn off secure boot test
  * Use 2M firmware args
  * Use secure boot firmware
  * Change test ISO firmware
  * Use ContainSubstring
  * Test qemu secure boot
  * Fix passive snapshots listing in grub.cfg
  * Bump github.com/docker/docker (#2020)
  * Extract recovery kernel (#2016)
  * Change location of bootargs.conf (#2013)
  * Use elemental instead of cos (#2014)
  * Remove flaky assert in downgrade test
  * Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2009)
  * Remove deprecated feature immutable-rootfs (#2007)
  * Bump github.com/docker/docker (#2006)
  * Bump google/go-containerregistry (#2005)
  * Fix downgrade tests, there are no hooks when upgrading from passive
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging for new development version 2.1.0-dev</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version 2.1.1:
  * [backport] Disable boot entry if efivars is read-only (#2059) (#2145)
  * [backport] CI refactor to v2.1.x branch (#2146)
  * Remove pre-existing Elemental initrds</changelog>
  <changelog author="elemental@suse.de" date="1726833600">- Update to v2.2.0:
  * 064546f1 Improve state file testing (#2190)
  * 14c049c0 Fix docker build warnings when using buildx
  * 98b0254d Switch to git in OBS (#2187)
  * b1a7dbc6 Bump github.com/containerd/containerd from 1.7.20 to 1.7.22
  * c42a766a Bump k8s.io/mount-utils from 0.31.0 to 0.31.1
  * 8e51d33e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * 5a8ecc1c Bump github.com/jaypipes/ghw from 0.12.0 to 0.13.0 (#2178)
  * fa2306d6 Implement state subcommand (#2182)
  * dc52491a Add user defined labels to snapshot info (#2175)
  * b2cce27b Bump github.com/opencontainers/runc in the go_modules group
  * 08a8ead9 Bump k8s.io/mount-utils from 0.30.3 to 0.31.0
  * 949d4709 Bump github.com/docker/docker in the go_modules group
  * 16438ddc Bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * 1a529527 Bump yip to v1.9.3
  * bbd386ec Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (#2169)
  * 0cfc891c Bump github.com/google/go-containerregistry from 0.20.1 to
    0.20.2 (#2161)
  * 5e0a28c6 Do not require network in initrd by default
  * 75e17df1 Bump to v2.1.1 for tests and fix recovery test
  * 8dac61cb Disable SELINUX enforcing mode, permissive is the default
  * 265cf018 Add build-disk documentation (#2164)
  * b1bac09c Expose ELEMENTAL_CLOUD_INIT_PATHS option (#2163)
  * b1cc863b Make RAW disks recovery partition expandable (#2159)
  * 44b2e7b5 Bump efi library (#2158)
  * 40b4fd4b Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#2157)
  * bfc3696b Bump github.com/google/go-containerregistry from 0.20.0 to
    0.20.1 (#2156)
  * d42f3c8b Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1
  * 19a9ae32 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
  * 3c885d2c Bump github.com/jaypipes/ghw
  * 76caad5f Add test for auto disabled boot entry in Grub
  * 615af35d Bump github.com/bramvdbogaerde/go-scp from 1.4.0 to 1.5.0
  * afe3ed5a Bump github.com/containerd/containerd from 1.7.19 to 1.7.20
  * c9c89b3c Bump k8s.io/mount-utils from 0.30.2 to 0.30.3
  * 51a85a71 Remove unused steps in workflow
  * 80bb6a22 Bump github.com/containerd/containerd from 1.7.18 to 1.7.19
  * f54f6836 Fix cache cleaning for PRs and main pushes (#2144)
  * 396e5aeb Bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * b9fc3e91 Bump github.com/google/go-containerregistry from 0.19.2 to
    0.20.0
  * 644cdc72 Refactor ci (#2137)
  * 22996ef7 Allow insecure registries (#2131)
  * e2feafb9 Bump yip to 1.9.2
  * b41f7d20 Bump tp yip 1.6.2
  * 49ed9afd Bump github.com/bramvdbogaerde/go-scp from 1.2.1 to 1.4.0
  * c7746687 Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0
  * b3e17ba2 Bump golang.org/x/crypto from 0.22.0 to 0.24.0
  * 72940f06 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0
  * 3f754032 Bump github.com/containerd/containerd from 1.7.12 to 1.7.18
  * a9bd0f1a Bump github.com/onsi/gomega from 1.30.0 to 1.33.1
  * 884573cd Bump github.com/google/go-containerregistry from 0.19.0 to
    0.19.2
  * 31a8d413 Bump k8s.io/mount-utils from 0.30.1 to 0.30.2
  * 19d2cb04 Bump github.com/spf13/cobra from 1.7.0 to 1.8.1
  * b6a14cf1 Bump github.com/spf13/viper from 1.15.0 to 1.19.0
  * 2b23133c Bump mount utils (#2099)
  * 15a10cc4 Make EFI partition size configurable at install time (#2105)
  * 28c4e473 Use fake mounter in tests
  * 897d872a Ensure subvolume snapshots is mounted to list snapshots
  * 0b9170de Fix smoke test for orange flavor
  * f427491f Update example OSes to more recent versions
  * fc923f42 Remove default network configuration
  * 043a7dfd Add missing glibc-gconv package
  * 9f2f2368 Remove pre-existing Elemental initrds
  * fbe90421 Fix overlaydir setup
  * e20e3829 Move green-rpi flavor to tumbleweed
  * 29e909eb Longer retry during nightly pull
  * 48d6ca48 Refactor and test efi manager
  * 2e56a099 Do not return error for efi.ReadLoadOption
  * fa82c1b1 Fix recovery test (#2086)
  * 8ce930a1 Remove obsolete flags for build-disk command (#2085)
  * a1a22e83 Allow to compile for RPi (#2084)
  * 54664f8c Solve few linter warnings
  * f0d9cb30 Remove the work around for bsc#1210690 and simplify code
  * 5a840145 Bootloader-in-rootfs=true (#2071)
  * 3f96b5e7 Relabel presistent paths only at first boot (#2080)
  * f3d4cfd6 Ensure SELinux relabelling can be disabled in configfile
  * 7686d121 Refine relabel step
  * 3fd2046a Update SELinux docs (#2075)
  * 6c301f2e Move mount config file to /run/elemental
  * a4c414f5 Add extra-cmdline flag to build-iso command (#2072)
  * 1c89db02 SELinux relabel on boot (#2074)
  * c95aa381 Define layout with yaml format
  * d7d208a1 Add branding for live CD (#2065)
  * 6f0b28e1 Set legacy password for upgrade test
  * a5f526d5 Allow key pair of ssh connection in tests
  * 46a88e10 Change default root password
  * f9934d75 Fix error return
  * 22baf14e Fix stackable sources for build-iso (#2061)
  * 786cfa63 Update embedded features docs
  * 4d469e7f Enable SELinux for tumbleweed and green (#2052)
  * 8baaef22 Disable boot entry if efivars is read-only (#2059)
  * 91983af9 Retry pull-toolkit on failure
  * b04f5098 Refactor selinux method (#2057)
  * dddb716b Add autologin feature (#2056)
  * c6b391a8 Move green to tumbleweed
  * c80eaa9b Bump golang.org/x/net in the go_modules group across 1 directory
    (#2051)
  * cccd8387 add symlink for missing binary on ubuntu 22.04+ (#2048)
  * d0ad1014 Document cloud-config-defaults for SELinux support (#2046)
  * 7feca1f4 Make squashfs defaults more consistent</changelog>
  <changelog author="elemental@suse.de" date="1727870400">- Update to v2.2.1:
  * a9f22910 Bump yip to v1.9.6
  * 398c0e44 Disable audit package in example Dockerfile
  * 92264f1e  Add cloud-init paths of the new root in 'after-*' hooks (#2192)
  * 491e01b8 Expose max snapshots environment variable (#2193)</changelog>
  <changelog author="bwiedemann@suse.com" date="1740052800">- Add reproducible-tar.patch for reproducible builds (boo#1237212, jsc#PED-12137)</changelog>
</package>
<package pkgid="7eea1b059d433d1807564628c9798453e6d8bf9cfa4f86e640b032ef761a4471c87c43b803ea56d32f7a8aa1547864cc94ddb9e824680797ba186dbe7c93dfc0" name="elemental-toolkit" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="160000.1.1"/>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.1.0+git20231027.9c55b9d7:
  * Use build-disk command (#1847)
  * Make use of partx instead of partprobe
  * build-disk command (#1794)
  * Ensure the cache is renewed on source changes
  * Improve test coverage and fix recovery image label setting
  * Improve state.yaml file loading
  * Remove deprecated cmdline options
  * Fix partitions typo (#1835)
  * Move grub bootargs.cfg into new feature
  * Worflow was still trying to build the already dropped builder image</changelog>
  <changelog author="dcassany@suse.com" date="1710417600">- Update to version 2.0.0:
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging version v2.0.0
  * bump elemental-toolkit to v2 (#1969)
  * Align sysroot mount options with SLE Micro, which in turn is applying default mount options
  * Fix racy workflows
  * Fix build-disk action unit tests
  * Make ext2 the default FS for recovery on disks (#1995)
  * Fix unit tests
  * Use working directory to set the snapper configuration
  * Adding debug messages for snapper configuration
  * Do not migrate legacy images if snapshots are already present (#1990)
  * Fix Recovery only upgrades (#1988)
  * Image variable includes full image path already
  * fix broken link (#1985)
  * Adding snapshotter.type flag install command
  * Add support to /dev/disk/by-path device reference
  * Keep previous behavior for persistent binded paths
  * Add upgrade-recovery subcommand (#1974)
  * Fix grub setup to properly set fallback (#1981)
  * Fix recovery-system.uri env var mapping
  * Fix env vars mapping for install and upgrade commands
  * Relay on the snapshotter setup of the installed system for upgrades (#1979)
  * Fix regression introduced in 547cb932 (#1977)
  * Ensure /run/elemental/efi is RW for upgrades
  * Make snapshotter root dynamic based on the reported mountpoint (#1971)
  * Remove tumbleweed dracut patches (#1964)
  * Regenerate docs
  * Use backup legacy grub.cfg location (#1967)
  * Build toolkit on nightly (#1965)
  * Btrfs snapshotter implementation (#1957)
  * Fix docs publishing error (#1963)
  * Move elemental services to /etc (#1962)
  * Embed file permissions for features (#1961)
  * Improved upgrade test (#1960)
  * Update README workflow
  * Fix workflow dependencies (#1956)
  * Add types for pull_request_target
  * Cleanup packages after build
  * Run zypper clean --all in examples
  * Use pull_request_target
  * Update workflows
  * Umount OEM before switching root
  * Build CLI on changes in go.mod
  * Bump golang(API) to 1.22
  * Update GO_VERSION
  * Update BuildRequires in OBS spec
  * Update copyright year (2024)
  * Use go version 1.22
  * Use at least xorriso 1.5.6
  * Bump the go_modules group across 1 directories with 1 update
  * Add formatting to log message
  * Make linter happy
  * Remove references to old ACTIVE and PASSIVE images
  * Make persistent volume a nested structure of persistent data
  * Add Volumes in Mount spec
  * Prevent unnecessary copy of image tree to tmp folder
  * Install podman in example Dockerfiles
  * Bump github actions (#1933)
  * Add back the BindPath for /oem
  * Bump yip to v1.4.10 (#1926)
  * Remove BindMount for /oem in initramfs stage (#1934)
  * Bump the go_modules group across 1 directories with 1 update (#1932)
  * Add dependabot config (#1929)
  * Refactor to switch to snapshotter interface (#1906)
  * This commit does removes the assumption of a /boot folder
  * Test that persistence is working (#1919)
  * Make mount setup more dynamic based on detected partitions
  * Include elemental partitions in mount command
  * Update dependencies (#1917)
  * Use rancher/yip v1.4.8
  * Imporve support for old boot arguments
  * Bind mount /oem in elemental-setup-initramfs
  * Use v1.3.0 as upgrade base image
  * Install grub.cfg into EFI System Partition (#1904)
  * Bump twpayne/vfs module to latest version
  * Fix license template
  * Include SUT utilities within the repository
  * Mount readonly EFI partition to /run/elemental/efi (#1905)
  * Move grub-config to /etc/elemental
  * Fix partitions typo
  * Change default rootfs feature
  * Update copyright year (2024)
  * Update github.com/go-git/go-git to v5.11.0
  * Add default cloud-init-paths to build commands (#1893)
  * Add loopdevice implementation (#1891)
  * Split arm and x86_64 tests
  * Adding new snapshotter interface
  * Fix typo in Makefile build-rpi-disk target
  * Change trigger to pull_request_target (#1889)
  * Add disable-boot-entry flag to reset-command (#1888)
  * Changes to cleanup-cache workflow (#1887)
  * Make sure the module-setup.sh picks the right paths for systemd units
  * Add permissions to delete cache items
  * Load mount-layout from .env-files (#1885)
  * Drop elemental object and make elemental methods stateless
  * Refactor some elemental package methods to be used as stand alone functions
  * Cleanup caches when PR is closed
  * Add backwards-compatibility for liveCD detection
  * Rename overlay -&gt; ephemeral mounts
  * Fix tumbleweed example
  * Make network configuration part of the example, not defaults
  * Do not run CI on pushes to main, the test already happens on the PR
  * Fix RISCV64 Tumbleweed example build
  * add btrfs support in partitioner
  * Wrap mount.Interface to our own interface (#1875)
  * Update go in build-docs action
  * Refactor early system mounting (#1866)
  * Add force flag in systemd-firstboot yip's plugin so default files are overwritten if they are already existing
  * Make sure it triggers PR workflow
  * Bump yip
  * Add other example distros (#1868)
  * Make lint happy, Runner.error method was unused
  * Log errors of runner commands only in debug mode
  * Fix initrd and kernel ISO paths
  * Refactor grub as a bootloader interface
  * Add target for rpi disk (#1859)
  * Drop ARM32 build
  * Add support for RISC-V 64bit architecture
  * Update golang.org/x/net dependency
  * Remove existing file during build-disk (#1857)
  * Configurable build-disk deploy command
  * Move recovery hostname to cloud-config-defaults
  * Update release workflow
  * Improve CI stability
  * Try different drivers for macOS
  * Add installer test</changelog>
  <changelog author="dcassany@suse.com" date="1711108800">- Update to version 2.0.0:
  * Fix passive snapshots listing in grub.cfg</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 2.1.0:
  * Make squashfs defaults more consistent
  * Snapshottable recovery system (#2032)
  * Change description of boot assessment service (#2037)
  * Remove empty mount paths (#2036)
  * Wait for relevant elemental init stages
  * Fix the fix (#2033)
  * Backwards compatible recovery boot configuration
  * Fix doc typo
  * Iterate over passive snapshots on boot-assessment
  * Skip symlink if kernel already exists (#2028)
  * docs: fix build-iso example (#2026)
  * Update github.com/canonical/go-efilib (#2019)
  * make configurable boot-assessment checks (#2018)
  * Turn off smm test
  * Turn off secure boot test
  * Use 2M firmware args
  * Use secure boot firmware
  * Change test ISO firmware
  * Use ContainSubstring
  * Test qemu secure boot
  * Fix passive snapshots listing in grub.cfg
  * Bump github.com/docker/docker (#2020)
  * Extract recovery kernel (#2016)
  * Change location of bootargs.conf (#2013)
  * Use elemental instead of cos (#2014)
  * Remove flaky assert in downgrade test
  * Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2009)
  * Remove deprecated feature immutable-rootfs (#2007)
  * Bump github.com/docker/docker (#2006)
  * Bump google/go-containerregistry (#2005)
  * Fix downgrade tests, there are no hooks when upgrading from passive
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging for new development version 2.1.0-dev</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version 2.1.1:
  * [backport] Disable boot entry if efivars is read-only (#2059) (#2145)
  * [backport] CI refactor to v2.1.x branch (#2146)
  * Remove pre-existing Elemental initrds</changelog>
  <changelog author="elemental@suse.de" date="1726833600">- Update to v2.2.0:
  * 064546f1 Improve state file testing (#2190)
  * 14c049c0 Fix docker build warnings when using buildx
  * 98b0254d Switch to git in OBS (#2187)
  * b1a7dbc6 Bump github.com/containerd/containerd from 1.7.20 to 1.7.22
  * c42a766a Bump k8s.io/mount-utils from 0.31.0 to 0.31.1
  * 8e51d33e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * 5a8ecc1c Bump github.com/jaypipes/ghw from 0.12.0 to 0.13.0 (#2178)
  * fa2306d6 Implement state subcommand (#2182)
  * dc52491a Add user defined labels to snapshot info (#2175)
  * b2cce27b Bump github.com/opencontainers/runc in the go_modules group
  * 08a8ead9 Bump k8s.io/mount-utils from 0.30.3 to 0.31.0
  * 949d4709 Bump github.com/docker/docker in the go_modules group
  * 16438ddc Bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * 1a529527 Bump yip to v1.9.3
  * bbd386ec Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (#2169)
  * 0cfc891c Bump github.com/google/go-containerregistry from 0.20.1 to
    0.20.2 (#2161)
  * 5e0a28c6 Do not require network in initrd by default
  * 75e17df1 Bump to v2.1.1 for tests and fix recovery test
  * 8dac61cb Disable SELINUX enforcing mode, permissive is the default
  * 265cf018 Add build-disk documentation (#2164)
  * b1bac09c Expose ELEMENTAL_CLOUD_INIT_PATHS option (#2163)
  * b1cc863b Make RAW disks recovery partition expandable (#2159)
  * 44b2e7b5 Bump efi library (#2158)
  * 40b4fd4b Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#2157)
  * bfc3696b Bump github.com/google/go-containerregistry from 0.20.0 to
    0.20.1 (#2156)
  * d42f3c8b Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1
  * 19a9ae32 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
  * 3c885d2c Bump github.com/jaypipes/ghw
  * 76caad5f Add test for auto disabled boot entry in Grub
  * 615af35d Bump github.com/bramvdbogaerde/go-scp from 1.4.0 to 1.5.0
  * afe3ed5a Bump github.com/containerd/containerd from 1.7.19 to 1.7.20
  * c9c89b3c Bump k8s.io/mount-utils from 0.30.2 to 0.30.3
  * 51a85a71 Remove unused steps in workflow
  * 80bb6a22 Bump github.com/containerd/containerd from 1.7.18 to 1.7.19
  * f54f6836 Fix cache cleaning for PRs and main pushes (#2144)
  * 396e5aeb Bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * b9fc3e91 Bump github.com/google/go-containerregistry from 0.19.2 to
    0.20.0
  * 644cdc72 Refactor ci (#2137)
  * 22996ef7 Allow insecure registries (#2131)
  * e2feafb9 Bump yip to 1.9.2
  * b41f7d20 Bump tp yip 1.6.2
  * 49ed9afd Bump github.com/bramvdbogaerde/go-scp from 1.2.1 to 1.4.0
  * c7746687 Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0
  * b3e17ba2 Bump golang.org/x/crypto from 0.22.0 to 0.24.0
  * 72940f06 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0
  * 3f754032 Bump github.com/containerd/containerd from 1.7.12 to 1.7.18
  * a9bd0f1a Bump github.com/onsi/gomega from 1.30.0 to 1.33.1
  * 884573cd Bump github.com/google/go-containerregistry from 0.19.0 to
    0.19.2
  * 31a8d413 Bump k8s.io/mount-utils from 0.30.1 to 0.30.2
  * 19d2cb04 Bump github.com/spf13/cobra from 1.7.0 to 1.8.1
  * b6a14cf1 Bump github.com/spf13/viper from 1.15.0 to 1.19.0
  * 2b23133c Bump mount utils (#2099)
  * 15a10cc4 Make EFI partition size configurable at install time (#2105)
  * 28c4e473 Use fake mounter in tests
  * 897d872a Ensure subvolume snapshots is mounted to list snapshots
  * 0b9170de Fix smoke test for orange flavor
  * f427491f Update example OSes to more recent versions
  * fc923f42 Remove default network configuration
  * 043a7dfd Add missing glibc-gconv package
  * 9f2f2368 Remove pre-existing Elemental initrds
  * fbe90421 Fix overlaydir setup
  * e20e3829 Move green-rpi flavor to tumbleweed
  * 29e909eb Longer retry during nightly pull
  * 48d6ca48 Refactor and test efi manager
  * 2e56a099 Do not return error for efi.ReadLoadOption
  * fa82c1b1 Fix recovery test (#2086)
  * 8ce930a1 Remove obsolete flags for build-disk command (#2085)
  * a1a22e83 Allow to compile for RPi (#2084)
  * 54664f8c Solve few linter warnings
  * f0d9cb30 Remove the work around for bsc#1210690 and simplify code
  * 5a840145 Bootloader-in-rootfs=true (#2071)
  * 3f96b5e7 Relabel presistent paths only at first boot (#2080)
  * f3d4cfd6 Ensure SELinux relabelling can be disabled in configfile
  * 7686d121 Refine relabel step
  * 3fd2046a Update SELinux docs (#2075)
  * 6c301f2e Move mount config file to /run/elemental
  * a4c414f5 Add extra-cmdline flag to build-iso command (#2072)
  * 1c89db02 SELinux relabel on boot (#2074)
  * c95aa381 Define layout with yaml format
  * d7d208a1 Add branding for live CD (#2065)
  * 6f0b28e1 Set legacy password for upgrade test
  * a5f526d5 Allow key pair of ssh connection in tests
  * 46a88e10 Change default root password
  * f9934d75 Fix error return
  * 22baf14e Fix stackable sources for build-iso (#2061)
  * 786cfa63 Update embedded features docs
  * 4d469e7f Enable SELinux for tumbleweed and green (#2052)
  * 8baaef22 Disable boot entry if efivars is read-only (#2059)
  * 91983af9 Retry pull-toolkit on failure
  * b04f5098 Refactor selinux method (#2057)
  * dddb716b Add autologin feature (#2056)
  * c6b391a8 Move green to tumbleweed
  * c80eaa9b Bump golang.org/x/net in the go_modules group across 1 directory
    (#2051)
  * cccd8387 add symlink for missing binary on ubuntu 22.04+ (#2048)
  * d0ad1014 Document cloud-config-defaults for SELinux support (#2046)
  * 7feca1f4 Make squashfs defaults more consistent</changelog>
  <changelog author="elemental@suse.de" date="1727870400">- Update to v2.2.1:
  * a9f22910 Bump yip to v1.9.6
  * 398c0e44 Disable audit package in example Dockerfile
  * 92264f1e  Add cloud-init paths of the new root in 'after-*' hooks (#2192)
  * 491e01b8 Expose max snapshots environment variable (#2193)</changelog>
  <changelog author="bwiedemann@suse.com" date="1740052800">- Add reproducible-tar.patch for reproducible builds (boo#1237212, jsc#PED-12137)</changelog>
  <changelog author="elemental@suse.de" date="1758888000">- Update to v2.3.0:
  * a8982b16 Use chroot to label previously binded mountpoints
  * c16e1d5b Bump github.com/jaypipes/ghw from 0.15.0 to 0.19.1
  * 1fef8d1f Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
  * a19b7208 Bump github.com/spf13/pflag from 1.0.6 to 1.0.10
  * d2d39d61 Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.25.2
  * ff4a09e4 Bump go version to 1.24 in Dockerfile
  * 968784c6 Adapt tests to new build error
  * 80ba8034 Bump k8s.io/mount-utils from 0.32.2 to 0.33.3
  * cba157cc Bump github.com/containerd/containerd from 1.7.26 to 1.7.28
  * 15432137 Permissive mode for green selinux
  * ce35ae6c Adapt code and unit tests
  * cb15d32d Minor change to lookup devices using blkid
  * d8450e01 Avoid panic when MaxSnaps is set to 0
  * 33f51def Bump github.com/jaypipes/ghw from 0.13.0 to 0.14.0
  * 6ede64b7 Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0
  * 6adf0b0c Bump golang.org/x/net from 0.34.0 to 0.36.0 in the go_modules
    group
  * 7b123bac Bump golang.org/x/crypto from 0.35.0 to 0.36.0
  * 13703f6f Bump github.com/containerd/containerd from 1.7.25 to 1.7.26
  * fc6611a8 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
  * c2a85f0b Bump golang.org/x/crypto from 0.33.0 to 0.34.0
  * bc64b5af Bump k8s.io/mount-utils from 0.32.1 to 0.32.2
  * ed97872b Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
  * c0722812 Bump github.com/sanity-io/litter from 1.5.6 to 1.5.8
  * 32c199a9 golangci-lint: use new formats config property
  * 50f6b4ec Bump golang.org/x/crypto from 0.32.0 to 0.33.0
  * d16cafcb Fix elemental-toolkit build for Dev env
  * 85f7130c Bump github.com/google/go-containerregistry from 0.20.2 to
    0.20.3
  * bb4ed47b Bump k8s.io/mount-utils from 0.32.0 to 0.32.1
  * 173588ff Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * a2aa800e Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
  * 94301e7d Bump github.com/sanity-io/litter from 1.5.5 to 1.5.6
  * f268a908 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * 4cfa5b58 Bump k8s.io/mount-utils from 0.31.3 to 0.32.0
  * f3c3387f Bump go to v1.23.4
  * 7575becb Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.2
  * f132230b Update copyright year (2025)
  * 69479dee Bump github.com/onsi/gomega from 1.36.1 to 1.36.2
  * 7ac3f233 Bump github.com/onsi/gomega from 1.36.0 to 1.36.1
  * 378ccc6e Bump golang.org/x/crypto from 0.30.0 to 0.31.0 in the go_modules
    group
  * 9a1892b4 Simplify podman calls in CI steup
  * 737983ab Switch GHA runners to Ubuntu 24.04
  * ecaac096 Bump golang.org/x/crypto from 0.29.0 to 0.30.0
  * d5e2068b Fix Makefile for riscv64
  * 25d9ae69 Fix Dockerfile for riscv64
  * 7f707ca0 Add missing Autologin feature
  * 692c6333 Fix architecture platform value
  * d9873c84 Make tar creation deterministic
  * 71169850 Use GNU tar to support --sort
  * 733c3432 Bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * 877bf6a8 Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0
  * 77b24a85 Bump k8s.io/mount-utils from 0.31.2 to 0.31.3
  * 701f7621 Bump github.com/containerd/containerd from 1.7.23 to 1.7.24
  * da340af9 Require grub2 instead of grub2-common
  * 527c12d0 Fixes squashfs images creation (#2230)
  * 5f996b5d Expand downgrade test by upgrading back to origin after
    downgrading (#2224)
  * 19606359 Fix dracut modules dependencies
  * e4472440 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * 50207539 Change btrfs state volumes detection
  * 5b2bb7ab Add orange btrfs snapshotter support
  * c289f368 Already fixed upstream
  * 94ddc24e Set SilenceUsage for run-stage command
  * 1898d5db Use --strict flag in elemental-setup services
  * eb77a4ca Update spec dependecies and dracut module dependencies
  * 733f2b44 Remove few leftovers from snapshotter tests
  * ca0ac592 Btrfs snapshotter without snapper (#2220)
  * 7a7414d7 Bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * d5ee69e1 Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0
  * c4bf7c5f Bump npm autoprefixer to 10.0.0
  * 1d8926d3 Bump k8s.io/mount-utils from 0.31.1 to 0.31.2
  * 54568627 Bump postcss to v8
  * 94f82aab Bump github.com/containerd/containerd from 1.7.22 to 1.7.23
  * 72fef823 Update docs npm packages
  * 7ee7afcc Bump github.com/canonical/go-efilib from 1.3.1 to 1.4.1
  * 0fc05a94 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * 55b78952 Bump github.com/canonical/go-efilib from 1.2.0 to 1.3.1
  * 55770a2f A couple of Dockerfile cleanups (#2200)
  * 95cdcb22 Add systemd-timesync user
  * 84a71b9e green: install xterm-resize (#2194)</changelog>
  <changelog author="elemental@suse.de" date="1759233600">- Update to v2.3.1:
  * b9202d3d Add snapshotter.type flag to build-disk command</changelog>
</package>
<package pkgid="48b0d7045a6948bb427c7da2539a46e0f53a98a3139032768da6e11c6c1341045d1735f90ed64c76e7180b7d885d5bf3c9e456955cecf0b7cfb69b0cbc57d9cc" name="elemental-toolkit" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="160000.1.1"/>
  <changelog author="dcassany@suse.com" date="1710417600">- Update to version 2.0.0:
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging version v2.0.0
  * bump elemental-toolkit to v2 (#1969)
  * Align sysroot mount options with SLE Micro, which in turn is applying default mount options
  * Fix racy workflows
  * Fix build-disk action unit tests
  * Make ext2 the default FS for recovery on disks (#1995)
  * Fix unit tests
  * Use working directory to set the snapper configuration
  * Adding debug messages for snapper configuration
  * Do not migrate legacy images if snapshots are already present (#1990)
  * Fix Recovery only upgrades (#1988)
  * Image variable includes full image path already
  * fix broken link (#1985)
  * Adding snapshotter.type flag install command
  * Add support to /dev/disk/by-path device reference
  * Keep previous behavior for persistent binded paths
  * Add upgrade-recovery subcommand (#1974)
  * Fix grub setup to properly set fallback (#1981)
  * Fix recovery-system.uri env var mapping
  * Fix env vars mapping for install and upgrade commands
  * Relay on the snapshotter setup of the installed system for upgrades (#1979)
  * Fix regression introduced in 547cb932 (#1977)
  * Ensure /run/elemental/efi is RW for upgrades
  * Make snapshotter root dynamic based on the reported mountpoint (#1971)
  * Remove tumbleweed dracut patches (#1964)
  * Regenerate docs
  * Use backup legacy grub.cfg location (#1967)
  * Build toolkit on nightly (#1965)
  * Btrfs snapshotter implementation (#1957)
  * Fix docs publishing error (#1963)
  * Move elemental services to /etc (#1962)
  * Embed file permissions for features (#1961)
  * Improved upgrade test (#1960)
  * Update README workflow
  * Fix workflow dependencies (#1956)
  * Add types for pull_request_target
  * Cleanup packages after build
  * Run zypper clean --all in examples
  * Use pull_request_target
  * Update workflows
  * Umount OEM before switching root
  * Build CLI on changes in go.mod
  * Bump golang(API) to 1.22
  * Update GO_VERSION
  * Update BuildRequires in OBS spec
  * Update copyright year (2024)
  * Use go version 1.22
  * Use at least xorriso 1.5.6
  * Bump the go_modules group across 1 directories with 1 update
  * Add formatting to log message
  * Make linter happy
  * Remove references to old ACTIVE and PASSIVE images
  * Make persistent volume a nested structure of persistent data
  * Add Volumes in Mount spec
  * Prevent unnecessary copy of image tree to tmp folder
  * Install podman in example Dockerfiles
  * Bump github actions (#1933)
  * Add back the BindPath for /oem
  * Bump yip to v1.4.10 (#1926)
  * Remove BindMount for /oem in initramfs stage (#1934)
  * Bump the go_modules group across 1 directories with 1 update (#1932)
  * Add dependabot config (#1929)
  * Refactor to switch to snapshotter interface (#1906)
  * This commit does removes the assumption of a /boot folder
  * Test that persistence is working (#1919)
  * Make mount setup more dynamic based on detected partitions
  * Include elemental partitions in mount command
  * Update dependencies (#1917)
  * Use rancher/yip v1.4.8
  * Imporve support for old boot arguments
  * Bind mount /oem in elemental-setup-initramfs
  * Use v1.3.0 as upgrade base image
  * Install grub.cfg into EFI System Partition (#1904)
  * Bump twpayne/vfs module to latest version
  * Fix license template
  * Include SUT utilities within the repository
  * Mount readonly EFI partition to /run/elemental/efi (#1905)
  * Move grub-config to /etc/elemental
  * Fix partitions typo
  * Change default rootfs feature
  * Update copyright year (2024)
  * Update github.com/go-git/go-git to v5.11.0
  * Add default cloud-init-paths to build commands (#1893)
  * Add loopdevice implementation (#1891)
  * Split arm and x86_64 tests
  * Adding new snapshotter interface
  * Fix typo in Makefile build-rpi-disk target
  * Change trigger to pull_request_target (#1889)
  * Add disable-boot-entry flag to reset-command (#1888)
  * Changes to cleanup-cache workflow (#1887)
  * Make sure the module-setup.sh picks the right paths for systemd units
  * Add permissions to delete cache items
  * Load mount-layout from .env-files (#1885)
  * Drop elemental object and make elemental methods stateless
  * Refactor some elemental package methods to be used as stand alone functions
  * Cleanup caches when PR is closed
  * Add backwards-compatibility for liveCD detection
  * Rename overlay -&gt; ephemeral mounts
  * Fix tumbleweed example
  * Make network configuration part of the example, not defaults
  * Do not run CI on pushes to main, the test already happens on the PR
  * Fix RISCV64 Tumbleweed example build
  * add btrfs support in partitioner
  * Wrap mount.Interface to our own interface (#1875)
  * Update go in build-docs action
  * Refactor early system mounting (#1866)
  * Add force flag in systemd-firstboot yip's plugin so default files are overwritten if they are already existing
  * Make sure it triggers PR workflow
  * Bump yip
  * Add other example distros (#1868)
  * Make lint happy, Runner.error method was unused
  * Log errors of runner commands only in debug mode
  * Fix initrd and kernel ISO paths
  * Refactor grub as a bootloader interface
  * Add target for rpi disk (#1859)
  * Drop ARM32 build
  * Add support for RISC-V 64bit architecture
  * Update golang.org/x/net dependency
  * Remove existing file during build-disk (#1857)
  * Configurable build-disk deploy command
  * Move recovery hostname to cloud-config-defaults
  * Update release workflow
  * Improve CI stability
  * Try different drivers for macOS
  * Add installer test</changelog>
  <changelog author="dcassany@suse.com" date="1711108800">- Update to version 2.0.0:
  * Fix passive snapshots listing in grub.cfg</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 2.1.0:
  * Make squashfs defaults more consistent
  * Snapshottable recovery system (#2032)
  * Change description of boot assessment service (#2037)
  * Remove empty mount paths (#2036)
  * Wait for relevant elemental init stages
  * Fix the fix (#2033)
  * Backwards compatible recovery boot configuration
  * Fix doc typo
  * Iterate over passive snapshots on boot-assessment
  * Skip symlink if kernel already exists (#2028)
  * docs: fix build-iso example (#2026)
  * Update github.com/canonical/go-efilib (#2019)
  * make configurable boot-assessment checks (#2018)
  * Turn off smm test
  * Turn off secure boot test
  * Use 2M firmware args
  * Use secure boot firmware
  * Change test ISO firmware
  * Use ContainSubstring
  * Test qemu secure boot
  * Fix passive snapshots listing in grub.cfg
  * Bump github.com/docker/docker (#2020)
  * Extract recovery kernel (#2016)
  * Change location of bootargs.conf (#2013)
  * Use elemental instead of cos (#2014)
  * Remove flaky assert in downgrade test
  * Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2009)
  * Remove deprecated feature immutable-rootfs (#2007)
  * Bump github.com/docker/docker (#2006)
  * Bump google/go-containerregistry (#2005)
  * Fix downgrade tests, there are no hooks when upgrading from passive
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging for new development version 2.1.0-dev</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version 2.1.1:
  * [backport] Disable boot entry if efivars is read-only (#2059) (#2145)
  * [backport] CI refactor to v2.1.x branch (#2146)
  * Remove pre-existing Elemental initrds</changelog>
  <changelog author="elemental@suse.de" date="1726833600">- Update to v2.2.0:
  * 064546f1 Improve state file testing (#2190)
  * 14c049c0 Fix docker build warnings when using buildx
  * 98b0254d Switch to git in OBS (#2187)
  * b1a7dbc6 Bump github.com/containerd/containerd from 1.7.20 to 1.7.22
  * c42a766a Bump k8s.io/mount-utils from 0.31.0 to 0.31.1
  * 8e51d33e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * 5a8ecc1c Bump github.com/jaypipes/ghw from 0.12.0 to 0.13.0 (#2178)
  * fa2306d6 Implement state subcommand (#2182)
  * dc52491a Add user defined labels to snapshot info (#2175)
  * b2cce27b Bump github.com/opencontainers/runc in the go_modules group
  * 08a8ead9 Bump k8s.io/mount-utils from 0.30.3 to 0.31.0
  * 949d4709 Bump github.com/docker/docker in the go_modules group
  * 16438ddc Bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * 1a529527 Bump yip to v1.9.3
  * bbd386ec Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (#2169)
  * 0cfc891c Bump github.com/google/go-containerregistry from 0.20.1 to
    0.20.2 (#2161)
  * 5e0a28c6 Do not require network in initrd by default
  * 75e17df1 Bump to v2.1.1 for tests and fix recovery test
  * 8dac61cb Disable SELINUX enforcing mode, permissive is the default
  * 265cf018 Add build-disk documentation (#2164)
  * b1bac09c Expose ELEMENTAL_CLOUD_INIT_PATHS option (#2163)
  * b1cc863b Make RAW disks recovery partition expandable (#2159)
  * 44b2e7b5 Bump efi library (#2158)
  * 40b4fd4b Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#2157)
  * bfc3696b Bump github.com/google/go-containerregistry from 0.20.0 to
    0.20.1 (#2156)
  * d42f3c8b Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1
  * 19a9ae32 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
  * 3c885d2c Bump github.com/jaypipes/ghw
  * 76caad5f Add test for auto disabled boot entry in Grub
  * 615af35d Bump github.com/bramvdbogaerde/go-scp from 1.4.0 to 1.5.0
  * afe3ed5a Bump github.com/containerd/containerd from 1.7.19 to 1.7.20
  * c9c89b3c Bump k8s.io/mount-utils from 0.30.2 to 0.30.3
  * 51a85a71 Remove unused steps in workflow
  * 80bb6a22 Bump github.com/containerd/containerd from 1.7.18 to 1.7.19
  * f54f6836 Fix cache cleaning for PRs and main pushes (#2144)
  * 396e5aeb Bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * b9fc3e91 Bump github.com/google/go-containerregistry from 0.19.2 to
    0.20.0
  * 644cdc72 Refactor ci (#2137)
  * 22996ef7 Allow insecure registries (#2131)
  * e2feafb9 Bump yip to 1.9.2
  * b41f7d20 Bump tp yip 1.6.2
  * 49ed9afd Bump github.com/bramvdbogaerde/go-scp from 1.2.1 to 1.4.0
  * c7746687 Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0
  * b3e17ba2 Bump golang.org/x/crypto from 0.22.0 to 0.24.0
  * 72940f06 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0
  * 3f754032 Bump github.com/containerd/containerd from 1.7.12 to 1.7.18
  * a9bd0f1a Bump github.com/onsi/gomega from 1.30.0 to 1.33.1
  * 884573cd Bump github.com/google/go-containerregistry from 0.19.0 to
    0.19.2
  * 31a8d413 Bump k8s.io/mount-utils from 0.30.1 to 0.30.2
  * 19d2cb04 Bump github.com/spf13/cobra from 1.7.0 to 1.8.1
  * b6a14cf1 Bump github.com/spf13/viper from 1.15.0 to 1.19.0
  * 2b23133c Bump mount utils (#2099)
  * 15a10cc4 Make EFI partition size configurable at install time (#2105)
  * 28c4e473 Use fake mounter in tests
  * 897d872a Ensure subvolume snapshots is mounted to list snapshots
  * 0b9170de Fix smoke test for orange flavor
  * f427491f Update example OSes to more recent versions
  * fc923f42 Remove default network configuration
  * 043a7dfd Add missing glibc-gconv package
  * 9f2f2368 Remove pre-existing Elemental initrds
  * fbe90421 Fix overlaydir setup
  * e20e3829 Move green-rpi flavor to tumbleweed
  * 29e909eb Longer retry during nightly pull
  * 48d6ca48 Refactor and test efi manager
  * 2e56a099 Do not return error for efi.ReadLoadOption
  * fa82c1b1 Fix recovery test (#2086)
  * 8ce930a1 Remove obsolete flags for build-disk command (#2085)
  * a1a22e83 Allow to compile for RPi (#2084)
  * 54664f8c Solve few linter warnings
  * f0d9cb30 Remove the work around for bsc#1210690 and simplify code
  * 5a840145 Bootloader-in-rootfs=true (#2071)
  * 3f96b5e7 Relabel presistent paths only at first boot (#2080)
  * f3d4cfd6 Ensure SELinux relabelling can be disabled in configfile
  * 7686d121 Refine relabel step
  * 3fd2046a Update SELinux docs (#2075)
  * 6c301f2e Move mount config file to /run/elemental
  * a4c414f5 Add extra-cmdline flag to build-iso command (#2072)
  * 1c89db02 SELinux relabel on boot (#2074)
  * c95aa381 Define layout with yaml format
  * d7d208a1 Add branding for live CD (#2065)
  * 6f0b28e1 Set legacy password for upgrade test
  * a5f526d5 Allow key pair of ssh connection in tests
  * 46a88e10 Change default root password
  * f9934d75 Fix error return
  * 22baf14e Fix stackable sources for build-iso (#2061)
  * 786cfa63 Update embedded features docs
  * 4d469e7f Enable SELinux for tumbleweed and green (#2052)
  * 8baaef22 Disable boot entry if efivars is read-only (#2059)
  * 91983af9 Retry pull-toolkit on failure
  * b04f5098 Refactor selinux method (#2057)
  * dddb716b Add autologin feature (#2056)
  * c6b391a8 Move green to tumbleweed
  * c80eaa9b Bump golang.org/x/net in the go_modules group across 1 directory
    (#2051)
  * cccd8387 add symlink for missing binary on ubuntu 22.04+ (#2048)
  * d0ad1014 Document cloud-config-defaults for SELinux support (#2046)
  * 7feca1f4 Make squashfs defaults more consistent</changelog>
  <changelog author="elemental@suse.de" date="1727870400">- Update to v2.2.1:
  * a9f22910 Bump yip to v1.9.6
  * 398c0e44 Disable audit package in example Dockerfile
  * 92264f1e  Add cloud-init paths of the new root in 'after-*' hooks (#2192)
  * 491e01b8 Expose max snapshots environment variable (#2193)</changelog>
  <changelog author="bwiedemann@suse.com" date="1740052800">- Add reproducible-tar.patch for reproducible builds (boo#1237212, jsc#PED-12137)</changelog>
  <changelog author="elemental@suse.de" date="1758888000">- Update to v2.3.0:
  * a8982b16 Use chroot to label previously binded mountpoints
  * c16e1d5b Bump github.com/jaypipes/ghw from 0.15.0 to 0.19.1
  * 1fef8d1f Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
  * a19b7208 Bump github.com/spf13/pflag from 1.0.6 to 1.0.10
  * d2d39d61 Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.25.2
  * ff4a09e4 Bump go version to 1.24 in Dockerfile
  * 968784c6 Adapt tests to new build error
  * 80ba8034 Bump k8s.io/mount-utils from 0.32.2 to 0.33.3
  * cba157cc Bump github.com/containerd/containerd from 1.7.26 to 1.7.28
  * 15432137 Permissive mode for green selinux
  * ce35ae6c Adapt code and unit tests
  * cb15d32d Minor change to lookup devices using blkid
  * d8450e01 Avoid panic when MaxSnaps is set to 0
  * 33f51def Bump github.com/jaypipes/ghw from 0.13.0 to 0.14.0
  * 6ede64b7 Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0
  * 6adf0b0c Bump golang.org/x/net from 0.34.0 to 0.36.0 in the go_modules
    group
  * 7b123bac Bump golang.org/x/crypto from 0.35.0 to 0.36.0
  * 13703f6f Bump github.com/containerd/containerd from 1.7.25 to 1.7.26
  * fc6611a8 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
  * c2a85f0b Bump golang.org/x/crypto from 0.33.0 to 0.34.0
  * bc64b5af Bump k8s.io/mount-utils from 0.32.1 to 0.32.2
  * ed97872b Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
  * c0722812 Bump github.com/sanity-io/litter from 1.5.6 to 1.5.8
  * 32c199a9 golangci-lint: use new formats config property
  * 50f6b4ec Bump golang.org/x/crypto from 0.32.0 to 0.33.0
  * d16cafcb Fix elemental-toolkit build for Dev env
  * 85f7130c Bump github.com/google/go-containerregistry from 0.20.2 to
    0.20.3
  * bb4ed47b Bump k8s.io/mount-utils from 0.32.0 to 0.32.1
  * 173588ff Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * a2aa800e Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
  * 94301e7d Bump github.com/sanity-io/litter from 1.5.5 to 1.5.6
  * f268a908 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * 4cfa5b58 Bump k8s.io/mount-utils from 0.31.3 to 0.32.0
  * f3c3387f Bump go to v1.23.4
  * 7575becb Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.2
  * f132230b Update copyright year (2025)
  * 69479dee Bump github.com/onsi/gomega from 1.36.1 to 1.36.2
  * 7ac3f233 Bump github.com/onsi/gomega from 1.36.0 to 1.36.1
  * 378ccc6e Bump golang.org/x/crypto from 0.30.0 to 0.31.0 in the go_modules
    group
  * 9a1892b4 Simplify podman calls in CI steup
  * 737983ab Switch GHA runners to Ubuntu 24.04
  * ecaac096 Bump golang.org/x/crypto from 0.29.0 to 0.30.0
  * d5e2068b Fix Makefile for riscv64
  * 25d9ae69 Fix Dockerfile for riscv64
  * 7f707ca0 Add missing Autologin feature
  * 692c6333 Fix architecture platform value
  * d9873c84 Make tar creation deterministic
  * 71169850 Use GNU tar to support --sort
  * 733c3432 Bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * 877bf6a8 Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0
  * 77b24a85 Bump k8s.io/mount-utils from 0.31.2 to 0.31.3
  * 701f7621 Bump github.com/containerd/containerd from 1.7.23 to 1.7.24
  * da340af9 Require grub2 instead of grub2-common
  * 527c12d0 Fixes squashfs images creation (#2230)
  * 5f996b5d Expand downgrade test by upgrading back to origin after
    downgrading (#2224)
  * 19606359 Fix dracut modules dependencies
  * e4472440 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * 50207539 Change btrfs state volumes detection
  * 5b2bb7ab Add orange btrfs snapshotter support
  * c289f368 Already fixed upstream
  * 94ddc24e Set SilenceUsage for run-stage command
  * 1898d5db Use --strict flag in elemental-setup services
  * eb77a4ca Update spec dependecies and dracut module dependencies
  * 733f2b44 Remove few leftovers from snapshotter tests
  * ca0ac592 Btrfs snapshotter without snapper (#2220)
  * 7a7414d7 Bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * d5ee69e1 Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0
  * c4bf7c5f Bump npm autoprefixer to 10.0.0
  * 1d8926d3 Bump k8s.io/mount-utils from 0.31.1 to 0.31.2
  * 54568627 Bump postcss to v8
  * 94f82aab Bump github.com/containerd/containerd from 1.7.22 to 1.7.23
  * 72fef823 Update docs npm packages
  * 7ee7afcc Bump github.com/canonical/go-efilib from 1.3.1 to 1.4.1
  * 0fc05a94 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * 55b78952 Bump github.com/canonical/go-efilib from 1.2.0 to 1.3.1
  * 55770a2f A couple of Dockerfile cleanups (#2200)
  * 95cdcb22 Add systemd-timesync user
  * 84a71b9e green: install xterm-resize (#2194)</changelog>
  <changelog author="elemental@suse.de" date="1759233600">- Update to v2.3.1:
  * b9202d3d Add snapshotter.type flag to build-disk command</changelog>
  <changelog author="elemental@suse.de" date="1765972800">- Update to v2.3.2:
  * 051ecf04 Bump golang.org/x/crypto library
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)
  * bsc#1253581 (CVE-2025-47913)
  * bsc#1253901 (CVE-2025-58181)
  * bsc#1254079 (CVE-2025-47914)</changelog>
</package>
<package pkgid="d89e330d793d2c20a0f67aee6be65c5df830ad68ca88383407cbcfb59e01947e330f3b06a5d14e919bc56e7a019f2064afba704fcd7db0c202b1d724f539e664" name="elemental-toolkit" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="160000.2.1"/>
  <changelog author="dcassany@suse.com" date="1711108800">- Update to version 2.0.0:
  * Fix passive snapshots listing in grub.cfg</changelog>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 2.1.0:
  * Make squashfs defaults more consistent
  * Snapshottable recovery system (#2032)
  * Change description of boot assessment service (#2037)
  * Remove empty mount paths (#2036)
  * Wait for relevant elemental init stages
  * Fix the fix (#2033)
  * Backwards compatible recovery boot configuration
  * Fix doc typo
  * Iterate over passive snapshots on boot-assessment
  * Skip symlink if kernel already exists (#2028)
  * docs: fix build-iso example (#2026)
  * Update github.com/canonical/go-efilib (#2019)
  * make configurable boot-assessment checks (#2018)
  * Turn off smm test
  * Turn off secure boot test
  * Use 2M firmware args
  * Use secure boot firmware
  * Change test ISO firmware
  * Use ContainSubstring
  * Test qemu secure boot
  * Fix passive snapshots listing in grub.cfg
  * Bump github.com/docker/docker (#2020)
  * Extract recovery kernel (#2016)
  * Change location of bootargs.conf (#2013)
  * Use elemental instead of cos (#2014)
  * Remove flaky assert in downgrade test
  * Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2009)
  * Remove deprecated feature immutable-rootfs (#2007)
  * Bump github.com/docker/docker (#2006)
  * Bump google/go-containerregistry (#2005)
  * Fix downgrade tests, there are no hooks when upgrading from passive
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging for new development version 2.1.0-dev</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version 2.1.1:
  * [backport] Disable boot entry if efivars is read-only (#2059) (#2145)
  * [backport] CI refactor to v2.1.x branch (#2146)
  * Remove pre-existing Elemental initrds</changelog>
  <changelog author="elemental@suse.de" date="1726833600">- Update to v2.2.0:
  * 064546f1 Improve state file testing (#2190)
  * 14c049c0 Fix docker build warnings when using buildx
  * 98b0254d Switch to git in OBS (#2187)
  * b1a7dbc6 Bump github.com/containerd/containerd from 1.7.20 to 1.7.22
  * c42a766a Bump k8s.io/mount-utils from 0.31.0 to 0.31.1
  * 8e51d33e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * 5a8ecc1c Bump github.com/jaypipes/ghw from 0.12.0 to 0.13.0 (#2178)
  * fa2306d6 Implement state subcommand (#2182)
  * dc52491a Add user defined labels to snapshot info (#2175)
  * b2cce27b Bump github.com/opencontainers/runc in the go_modules group
  * 08a8ead9 Bump k8s.io/mount-utils from 0.30.3 to 0.31.0
  * 949d4709 Bump github.com/docker/docker in the go_modules group
  * 16438ddc Bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * 1a529527 Bump yip to v1.9.3
  * bbd386ec Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (#2169)
  * 0cfc891c Bump github.com/google/go-containerregistry from 0.20.1 to
    0.20.2 (#2161)
  * 5e0a28c6 Do not require network in initrd by default
  * 75e17df1 Bump to v2.1.1 for tests and fix recovery test
  * 8dac61cb Disable SELINUX enforcing mode, permissive is the default
  * 265cf018 Add build-disk documentation (#2164)
  * b1bac09c Expose ELEMENTAL_CLOUD_INIT_PATHS option (#2163)
  * b1cc863b Make RAW disks recovery partition expandable (#2159)
  * 44b2e7b5 Bump efi library (#2158)
  * 40b4fd4b Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#2157)
  * bfc3696b Bump github.com/google/go-containerregistry from 0.20.0 to
    0.20.1 (#2156)
  * d42f3c8b Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1
  * 19a9ae32 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
  * 3c885d2c Bump github.com/jaypipes/ghw
  * 76caad5f Add test for auto disabled boot entry in Grub
  * 615af35d Bump github.com/bramvdbogaerde/go-scp from 1.4.0 to 1.5.0
  * afe3ed5a Bump github.com/containerd/containerd from 1.7.19 to 1.7.20
  * c9c89b3c Bump k8s.io/mount-utils from 0.30.2 to 0.30.3
  * 51a85a71 Remove unused steps in workflow
  * 80bb6a22 Bump github.com/containerd/containerd from 1.7.18 to 1.7.19
  * f54f6836 Fix cache cleaning for PRs and main pushes (#2144)
  * 396e5aeb Bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * b9fc3e91 Bump github.com/google/go-containerregistry from 0.19.2 to
    0.20.0
  * 644cdc72 Refactor ci (#2137)
  * 22996ef7 Allow insecure registries (#2131)
  * e2feafb9 Bump yip to 1.9.2
  * b41f7d20 Bump tp yip 1.6.2
  * 49ed9afd Bump github.com/bramvdbogaerde/go-scp from 1.2.1 to 1.4.0
  * c7746687 Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0
  * b3e17ba2 Bump golang.org/x/crypto from 0.22.0 to 0.24.0
  * 72940f06 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0
  * 3f754032 Bump github.com/containerd/containerd from 1.7.12 to 1.7.18
  * a9bd0f1a Bump github.com/onsi/gomega from 1.30.0 to 1.33.1
  * 884573cd Bump github.com/google/go-containerregistry from 0.19.0 to
    0.19.2
  * 31a8d413 Bump k8s.io/mount-utils from 0.30.1 to 0.30.2
  * 19d2cb04 Bump github.com/spf13/cobra from 1.7.0 to 1.8.1
  * b6a14cf1 Bump github.com/spf13/viper from 1.15.0 to 1.19.0
  * 2b23133c Bump mount utils (#2099)
  * 15a10cc4 Make EFI partition size configurable at install time (#2105)
  * 28c4e473 Use fake mounter in tests
  * 897d872a Ensure subvolume snapshots is mounted to list snapshots
  * 0b9170de Fix smoke test for orange flavor
  * f427491f Update example OSes to more recent versions
  * fc923f42 Remove default network configuration
  * 043a7dfd Add missing glibc-gconv package
  * 9f2f2368 Remove pre-existing Elemental initrds
  * fbe90421 Fix overlaydir setup
  * e20e3829 Move green-rpi flavor to tumbleweed
  * 29e909eb Longer retry during nightly pull
  * 48d6ca48 Refactor and test efi manager
  * 2e56a099 Do not return error for efi.ReadLoadOption
  * fa82c1b1 Fix recovery test (#2086)
  * 8ce930a1 Remove obsolete flags for build-disk command (#2085)
  * a1a22e83 Allow to compile for RPi (#2084)
  * 54664f8c Solve few linter warnings
  * f0d9cb30 Remove the work around for bsc#1210690 and simplify code
  * 5a840145 Bootloader-in-rootfs=true (#2071)
  * 3f96b5e7 Relabel presistent paths only at first boot (#2080)
  * f3d4cfd6 Ensure SELinux relabelling can be disabled in configfile
  * 7686d121 Refine relabel step
  * 3fd2046a Update SELinux docs (#2075)
  * 6c301f2e Move mount config file to /run/elemental
  * a4c414f5 Add extra-cmdline flag to build-iso command (#2072)
  * 1c89db02 SELinux relabel on boot (#2074)
  * c95aa381 Define layout with yaml format
  * d7d208a1 Add branding for live CD (#2065)
  * 6f0b28e1 Set legacy password for upgrade test
  * a5f526d5 Allow key pair of ssh connection in tests
  * 46a88e10 Change default root password
  * f9934d75 Fix error return
  * 22baf14e Fix stackable sources for build-iso (#2061)
  * 786cfa63 Update embedded features docs
  * 4d469e7f Enable SELinux for tumbleweed and green (#2052)
  * 8baaef22 Disable boot entry if efivars is read-only (#2059)
  * 91983af9 Retry pull-toolkit on failure
  * b04f5098 Refactor selinux method (#2057)
  * dddb716b Add autologin feature (#2056)
  * c6b391a8 Move green to tumbleweed
  * c80eaa9b Bump golang.org/x/net in the go_modules group across 1 directory
    (#2051)
  * cccd8387 add symlink for missing binary on ubuntu 22.04+ (#2048)
  * d0ad1014 Document cloud-config-defaults for SELinux support (#2046)
  * 7feca1f4 Make squashfs defaults more consistent</changelog>
  <changelog author="elemental@suse.de" date="1727870400">- Update to v2.2.1:
  * a9f22910 Bump yip to v1.9.6
  * 398c0e44 Disable audit package in example Dockerfile
  * 92264f1e  Add cloud-init paths of the new root in 'after-*' hooks (#2192)
  * 491e01b8 Expose max snapshots environment variable (#2193)</changelog>
  <changelog author="bwiedemann@suse.com" date="1740052800">- Add reproducible-tar.patch for reproducible builds (boo#1237212, jsc#PED-12137)</changelog>
  <changelog author="elemental@suse.de" date="1758888000">- Update to v2.3.0:
  * a8982b16 Use chroot to label previously binded mountpoints
  * c16e1d5b Bump github.com/jaypipes/ghw from 0.15.0 to 0.19.1
  * 1fef8d1f Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
  * a19b7208 Bump github.com/spf13/pflag from 1.0.6 to 1.0.10
  * d2d39d61 Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.25.2
  * ff4a09e4 Bump go version to 1.24 in Dockerfile
  * 968784c6 Adapt tests to new build error
  * 80ba8034 Bump k8s.io/mount-utils from 0.32.2 to 0.33.3
  * cba157cc Bump github.com/containerd/containerd from 1.7.26 to 1.7.28
  * 15432137 Permissive mode for green selinux
  * ce35ae6c Adapt code and unit tests
  * cb15d32d Minor change to lookup devices using blkid
  * d8450e01 Avoid panic when MaxSnaps is set to 0
  * 33f51def Bump github.com/jaypipes/ghw from 0.13.0 to 0.14.0
  * 6ede64b7 Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0
  * 6adf0b0c Bump golang.org/x/net from 0.34.0 to 0.36.0 in the go_modules
    group
  * 7b123bac Bump golang.org/x/crypto from 0.35.0 to 0.36.0
  * 13703f6f Bump github.com/containerd/containerd from 1.7.25 to 1.7.26
  * fc6611a8 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
  * c2a85f0b Bump golang.org/x/crypto from 0.33.0 to 0.34.0
  * bc64b5af Bump k8s.io/mount-utils from 0.32.1 to 0.32.2
  * ed97872b Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
  * c0722812 Bump github.com/sanity-io/litter from 1.5.6 to 1.5.8
  * 32c199a9 golangci-lint: use new formats config property
  * 50f6b4ec Bump golang.org/x/crypto from 0.32.0 to 0.33.0
  * d16cafcb Fix elemental-toolkit build for Dev env
  * 85f7130c Bump github.com/google/go-containerregistry from 0.20.2 to
    0.20.3
  * bb4ed47b Bump k8s.io/mount-utils from 0.32.0 to 0.32.1
  * 173588ff Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * a2aa800e Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
  * 94301e7d Bump github.com/sanity-io/litter from 1.5.5 to 1.5.6
  * f268a908 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * 4cfa5b58 Bump k8s.io/mount-utils from 0.31.3 to 0.32.0
  * f3c3387f Bump go to v1.23.4
  * 7575becb Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.2
  * f132230b Update copyright year (2025)
  * 69479dee Bump github.com/onsi/gomega from 1.36.1 to 1.36.2
  * 7ac3f233 Bump github.com/onsi/gomega from 1.36.0 to 1.36.1
  * 378ccc6e Bump golang.org/x/crypto from 0.30.0 to 0.31.0 in the go_modules
    group
  * 9a1892b4 Simplify podman calls in CI steup
  * 737983ab Switch GHA runners to Ubuntu 24.04
  * ecaac096 Bump golang.org/x/crypto from 0.29.0 to 0.30.0
  * d5e2068b Fix Makefile for riscv64
  * 25d9ae69 Fix Dockerfile for riscv64
  * 7f707ca0 Add missing Autologin feature
  * 692c6333 Fix architecture platform value
  * d9873c84 Make tar creation deterministic
  * 71169850 Use GNU tar to support --sort
  * 733c3432 Bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * 877bf6a8 Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0
  * 77b24a85 Bump k8s.io/mount-utils from 0.31.2 to 0.31.3
  * 701f7621 Bump github.com/containerd/containerd from 1.7.23 to 1.7.24
  * da340af9 Require grub2 instead of grub2-common
  * 527c12d0 Fixes squashfs images creation (#2230)
  * 5f996b5d Expand downgrade test by upgrading back to origin after
    downgrading (#2224)
  * 19606359 Fix dracut modules dependencies
  * e4472440 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * 50207539 Change btrfs state volumes detection
  * 5b2bb7ab Add orange btrfs snapshotter support
  * c289f368 Already fixed upstream
  * 94ddc24e Set SilenceUsage for run-stage command
  * 1898d5db Use --strict flag in elemental-setup services
  * eb77a4ca Update spec dependecies and dracut module dependencies
  * 733f2b44 Remove few leftovers from snapshotter tests
  * ca0ac592 Btrfs snapshotter without snapper (#2220)
  * 7a7414d7 Bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * d5ee69e1 Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0
  * c4bf7c5f Bump npm autoprefixer to 10.0.0
  * 1d8926d3 Bump k8s.io/mount-utils from 0.31.1 to 0.31.2
  * 54568627 Bump postcss to v8
  * 94f82aab Bump github.com/containerd/containerd from 1.7.22 to 1.7.23
  * 72fef823 Update docs npm packages
  * 7ee7afcc Bump github.com/canonical/go-efilib from 1.3.1 to 1.4.1
  * 0fc05a94 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * 55b78952 Bump github.com/canonical/go-efilib from 1.2.0 to 1.3.1
  * 55770a2f A couple of Dockerfile cleanups (#2200)
  * 95cdcb22 Add systemd-timesync user
  * 84a71b9e green: install xterm-resize (#2194)</changelog>
  <changelog author="elemental@suse.de" date="1759233600">- Update to v2.3.1:
  * b9202d3d Add snapshotter.type flag to build-disk command</changelog>
  <changelog author="elemental@suse.de" date="1765972800">- Update to v2.3.2:
  * 051ecf04 Bump golang.org/x/crypto library
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)
  * bsc#1253581 (CVE-2025-47913)
  * bsc#1253901 (CVE-2025-58181)
  * bsc#1254079 (CVE-2025-47914)</changelog>
  <changelog author="bwiedemann@suse.de" date="1770120000">- Drop upstream reproducible-tar.patch</changelog>
</package>
<package pkgid="7f5cad8a1a0748feb9d6f87a5dd9948f1704652d6c6f3abe62194b00c4b4135150e1202c833ae1285764e4ceb635163fdafba72fe06c450adefe7e4e3302c512" name="elemental-toolkit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="160000.1.1"/>
  <changelog author="fredrik.lonnegren@suse.com" date="1712836800">- Update to version 2.1.0:
  * Make squashfs defaults more consistent
  * Snapshottable recovery system (#2032)
  * Change description of boot assessment service (#2037)
  * Remove empty mount paths (#2036)
  * Wait for relevant elemental init stages
  * Fix the fix (#2033)
  * Backwards compatible recovery boot configuration
  * Fix doc typo
  * Iterate over passive snapshots on boot-assessment
  * Skip symlink if kernel already exists (#2028)
  * docs: fix build-iso example (#2026)
  * Update github.com/canonical/go-efilib (#2019)
  * make configurable boot-assessment checks (#2018)
  * Turn off smm test
  * Turn off secure boot test
  * Use 2M firmware args
  * Use secure boot firmware
  * Change test ISO firmware
  * Use ContainSubstring
  * Test qemu secure boot
  * Fix passive snapshots listing in grub.cfg
  * Bump github.com/docker/docker (#2020)
  * Extract recovery kernel (#2016)
  * Change location of bootargs.conf (#2013)
  * Use elemental instead of cos (#2014)
  * Remove flaky assert in downgrade test
  * Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2009)
  * Remove deprecated feature immutable-rootfs (#2007)
  * Bump github.com/docker/docker (#2006)
  * Bump google/go-containerregistry (#2005)
  * Fix downgrade tests, there are no hooks when upgrading from passive
  * Fix version check
  * Fix recovery test
  * Fix downgrade test
  * Use v2.0.0 reference image for tests
  * Switches tests to Ubuntu and KVM for tests
  * Update v2 linker args (#2000)
  * Fix unterminated quoted string (#1999)
  * Tagging for new development version 2.1.0-dev</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version 2.1.1:
  * [backport] Disable boot entry if efivars is read-only (#2059) (#2145)
  * [backport] CI refactor to v2.1.x branch (#2146)
  * Remove pre-existing Elemental initrds</changelog>
  <changelog author="elemental@suse.de" date="1726833600">- Update to v2.2.0:
  * 064546f1 Improve state file testing (#2190)
  * 14c049c0 Fix docker build warnings when using buildx
  * 98b0254d Switch to git in OBS (#2187)
  * b1a7dbc6 Bump github.com/containerd/containerd from 1.7.20 to 1.7.22
  * c42a766a Bump k8s.io/mount-utils from 0.31.0 to 0.31.1
  * 8e51d33e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
  * 5a8ecc1c Bump github.com/jaypipes/ghw from 0.12.0 to 0.13.0 (#2178)
  * fa2306d6 Implement state subcommand (#2182)
  * dc52491a Add user defined labels to snapshot info (#2175)
  * b2cce27b Bump github.com/opencontainers/runc in the go_modules group
  * 08a8ead9 Bump k8s.io/mount-utils from 0.30.3 to 0.31.0
  * 949d4709 Bump github.com/docker/docker in the go_modules group
  * 16438ddc Bump github.com/onsi/gomega from 1.34.1 to 1.34.2
  * 1a529527 Bump yip to v1.9.3
  * bbd386ec Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (#2169)
  * 0cfc891c Bump github.com/google/go-containerregistry from 0.20.1 to
    0.20.2 (#2161)
  * 5e0a28c6 Do not require network in initrd by default
  * 75e17df1 Bump to v2.1.1 for tests and fix recovery test
  * 8dac61cb Disable SELINUX enforcing mode, permissive is the default
  * 265cf018 Add build-disk documentation (#2164)
  * b1bac09c Expose ELEMENTAL_CLOUD_INIT_PATHS option (#2163)
  * b1cc863b Make RAW disks recovery partition expandable (#2159)
  * 44b2e7b5 Bump efi library (#2158)
  * 40b4fd4b Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#2157)
  * bfc3696b Bump github.com/google/go-containerregistry from 0.20.0 to
    0.20.1 (#2156)
  * d42f3c8b Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1
  * 19a9ae32 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
  * 3c885d2c Bump github.com/jaypipes/ghw
  * 76caad5f Add test for auto disabled boot entry in Grub
  * 615af35d Bump github.com/bramvdbogaerde/go-scp from 1.4.0 to 1.5.0
  * afe3ed5a Bump github.com/containerd/containerd from 1.7.19 to 1.7.20
  * c9c89b3c Bump k8s.io/mount-utils from 0.30.2 to 0.30.3
  * 51a85a71 Remove unused steps in workflow
  * 80bb6a22 Bump github.com/containerd/containerd from 1.7.18 to 1.7.19
  * f54f6836 Fix cache cleaning for PRs and main pushes (#2144)
  * 396e5aeb Bump golang.org/x/crypto from 0.24.0 to 0.25.0
  * b9fc3e91 Bump github.com/google/go-containerregistry from 0.19.2 to
    0.20.0
  * 644cdc72 Refactor ci (#2137)
  * 22996ef7 Allow insecure registries (#2131)
  * e2feafb9 Bump yip to 1.9.2
  * b41f7d20 Bump tp yip 1.6.2
  * 49ed9afd Bump github.com/bramvdbogaerde/go-scp from 1.2.1 to 1.4.0
  * c7746687 Bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0
  * b3e17ba2 Bump golang.org/x/crypto from 0.22.0 to 0.24.0
  * 72940f06 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0
  * 3f754032 Bump github.com/containerd/containerd from 1.7.12 to 1.7.18
  * a9bd0f1a Bump github.com/onsi/gomega from 1.30.0 to 1.33.1
  * 884573cd Bump github.com/google/go-containerregistry from 0.19.0 to
    0.19.2
  * 31a8d413 Bump k8s.io/mount-utils from 0.30.1 to 0.30.2
  * 19d2cb04 Bump github.com/spf13/cobra from 1.7.0 to 1.8.1
  * b6a14cf1 Bump github.com/spf13/viper from 1.15.0 to 1.19.0
  * 2b23133c Bump mount utils (#2099)
  * 15a10cc4 Make EFI partition size configurable at install time (#2105)
  * 28c4e473 Use fake mounter in tests
  * 897d872a Ensure subvolume snapshots is mounted to list snapshots
  * 0b9170de Fix smoke test for orange flavor
  * f427491f Update example OSes to more recent versions
  * fc923f42 Remove default network configuration
  * 043a7dfd Add missing glibc-gconv package
  * 9f2f2368 Remove pre-existing Elemental initrds
  * fbe90421 Fix overlaydir setup
  * e20e3829 Move green-rpi flavor to tumbleweed
  * 29e909eb Longer retry during nightly pull
  * 48d6ca48 Refactor and test efi manager
  * 2e56a099 Do not return error for efi.ReadLoadOption
  * fa82c1b1 Fix recovery test (#2086)
  * 8ce930a1 Remove obsolete flags for build-disk command (#2085)
  * a1a22e83 Allow to compile for RPi (#2084)
  * 54664f8c Solve few linter warnings
  * f0d9cb30 Remove the work around for bsc#1210690 and simplify code
  * 5a840145 Bootloader-in-rootfs=true (#2071)
  * 3f96b5e7 Relabel presistent paths only at first boot (#2080)
  * f3d4cfd6 Ensure SELinux relabelling can be disabled in configfile
  * 7686d121 Refine relabel step
  * 3fd2046a Update SELinux docs (#2075)
  * 6c301f2e Move mount config file to /run/elemental
  * a4c414f5 Add extra-cmdline flag to build-iso command (#2072)
  * 1c89db02 SELinux relabel on boot (#2074)
  * c95aa381 Define layout with yaml format
  * d7d208a1 Add branding for live CD (#2065)
  * 6f0b28e1 Set legacy password for upgrade test
  * a5f526d5 Allow key pair of ssh connection in tests
  * 46a88e10 Change default root password
  * f9934d75 Fix error return
  * 22baf14e Fix stackable sources for build-iso (#2061)
  * 786cfa63 Update embedded features docs
  * 4d469e7f Enable SELinux for tumbleweed and green (#2052)
  * 8baaef22 Disable boot entry if efivars is read-only (#2059)
  * 91983af9 Retry pull-toolkit on failure
  * b04f5098 Refactor selinux method (#2057)
  * dddb716b Add autologin feature (#2056)
  * c6b391a8 Move green to tumbleweed
  * c80eaa9b Bump golang.org/x/net in the go_modules group across 1 directory
    (#2051)
  * cccd8387 add symlink for missing binary on ubuntu 22.04+ (#2048)
  * d0ad1014 Document cloud-config-defaults for SELinux support (#2046)
  * 7feca1f4 Make squashfs defaults more consistent</changelog>
  <changelog author="elemental@suse.de" date="1727870400">- Update to v2.2.1:
  * a9f22910 Bump yip to v1.9.6
  * 398c0e44 Disable audit package in example Dockerfile
  * 92264f1e  Add cloud-init paths of the new root in 'after-*' hooks (#2192)
  * 491e01b8 Expose max snapshots environment variable (#2193)</changelog>
  <changelog author="bwiedemann@suse.com" date="1740052800">- Add reproducible-tar.patch for reproducible builds (boo#1237212, jsc#PED-12137)</changelog>
  <changelog author="elemental@suse.de" date="1758888000">- Update to v2.3.0:
  * a8982b16 Use chroot to label previously binded mountpoints
  * c16e1d5b Bump github.com/jaypipes/ghw from 0.15.0 to 0.19.1
  * 1fef8d1f Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
  * a19b7208 Bump github.com/spf13/pflag from 1.0.6 to 1.0.10
  * d2d39d61 Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.25.2
  * ff4a09e4 Bump go version to 1.24 in Dockerfile
  * 968784c6 Adapt tests to new build error
  * 80ba8034 Bump k8s.io/mount-utils from 0.32.2 to 0.33.3
  * cba157cc Bump github.com/containerd/containerd from 1.7.26 to 1.7.28
  * 15432137 Permissive mode for green selinux
  * ce35ae6c Adapt code and unit tests
  * cb15d32d Minor change to lookup devices using blkid
  * d8450e01 Avoid panic when MaxSnaps is set to 0
  * 33f51def Bump github.com/jaypipes/ghw from 0.13.0 to 0.14.0
  * 6ede64b7 Bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0
  * 6adf0b0c Bump golang.org/x/net from 0.34.0 to 0.36.0 in the go_modules
    group
  * 7b123bac Bump golang.org/x/crypto from 0.35.0 to 0.36.0
  * 13703f6f Bump github.com/containerd/containerd from 1.7.25 to 1.7.26
  * fc6611a8 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
  * c2a85f0b Bump golang.org/x/crypto from 0.33.0 to 0.34.0
  * bc64b5af Bump k8s.io/mount-utils from 0.32.1 to 0.32.2
  * ed97872b Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
  * c0722812 Bump github.com/sanity-io/litter from 1.5.6 to 1.5.8
  * 32c199a9 golangci-lint: use new formats config property
  * 50f6b4ec Bump golang.org/x/crypto from 0.32.0 to 0.33.0
  * d16cafcb Fix elemental-toolkit build for Dev env
  * 85f7130c Bump github.com/google/go-containerregistry from 0.20.2 to
    0.20.3
  * bb4ed47b Bump k8s.io/mount-utils from 0.32.0 to 0.32.1
  * 173588ff Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  * a2aa800e Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
  * 94301e7d Bump github.com/sanity-io/litter from 1.5.5 to 1.5.6
  * f268a908 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
  * 4cfa5b58 Bump k8s.io/mount-utils from 0.31.3 to 0.32.0
  * f3c3387f Bump go to v1.23.4
  * 7575becb Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.2
  * f132230b Update copyright year (2025)
  * 69479dee Bump github.com/onsi/gomega from 1.36.1 to 1.36.2
  * 7ac3f233 Bump github.com/onsi/gomega from 1.36.0 to 1.36.1
  * 378ccc6e Bump golang.org/x/crypto from 0.30.0 to 0.31.0 in the go_modules
    group
  * 9a1892b4 Simplify podman calls in CI steup
  * 737983ab Switch GHA runners to Ubuntu 24.04
  * ecaac096 Bump golang.org/x/crypto from 0.29.0 to 0.30.0
  * d5e2068b Fix Makefile for riscv64
  * 25d9ae69 Fix Dockerfile for riscv64
  * 7f707ca0 Add missing Autologin feature
  * 692c6333 Fix architecture platform value
  * d9873c84 Make tar creation deterministic
  * 71169850 Use GNU tar to support --sort
  * 733c3432 Bump github.com/onsi/gomega from 1.35.1 to 1.36.0
  * 877bf6a8 Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0
  * 77b24a85 Bump k8s.io/mount-utils from 0.31.2 to 0.31.3
  * 701f7621 Bump github.com/containerd/containerd from 1.7.23 to 1.7.24
  * da340af9 Require grub2 instead of grub2-common
  * 527c12d0 Fixes squashfs images creation (#2230)
  * 5f996b5d Expand downgrade test by upgrading back to origin after
    downgrading (#2224)
  * 19606359 Fix dracut modules dependencies
  * e4472440 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
  * 50207539 Change btrfs state volumes detection
  * 5b2bb7ab Add orange btrfs snapshotter support
  * c289f368 Already fixed upstream
  * 94ddc24e Set SilenceUsage for run-stage command
  * 1898d5db Use --strict flag in elemental-setup services
  * eb77a4ca Update spec dependecies and dracut module dependencies
  * 733f2b44 Remove few leftovers from snapshotter tests
  * ca0ac592 Btrfs snapshotter without snapper (#2220)
  * 7a7414d7 Bump github.com/onsi/gomega from 1.34.2 to 1.35.1
  * d5ee69e1 Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0
  * c4bf7c5f Bump npm autoprefixer to 10.0.0
  * 1d8926d3 Bump k8s.io/mount-utils from 0.31.1 to 0.31.2
  * 54568627 Bump postcss to v8
  * 94f82aab Bump github.com/containerd/containerd from 1.7.22 to 1.7.23
  * 72fef823 Update docs npm packages
  * 7ee7afcc Bump github.com/canonical/go-efilib from 1.3.1 to 1.4.1
  * 0fc05a94 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
  * 55b78952 Bump github.com/canonical/go-efilib from 1.2.0 to 1.3.1
  * 55770a2f A couple of Dockerfile cleanups (#2200)
  * 95cdcb22 Add systemd-timesync user
  * 84a71b9e green: install xterm-resize (#2194)</changelog>
  <changelog author="elemental@suse.de" date="1759233600">- Update to v2.3.1:
  * b9202d3d Add snapshotter.type flag to build-disk command</changelog>
  <changelog author="elemental@suse.de" date="1765972800">- Update to v2.3.2:
  * 051ecf04 Bump golang.org/x/crypto library
    This includes few CVE fixes:
  * bsc#1241826 (CVE-2025-22872)
  * bsc#1241857 (CVE-2025-22872)
  * bsc#1251511 (CVE-2025-47911)
  * bsc#1251679 (CVE-2025-58190)
  * bsc#1253581 (CVE-2025-47913)
  * bsc#1253901 (CVE-2025-58181)
  * bsc#1254079 (CVE-2025-47914)</changelog>
  <changelog author="elemental@suse.de" date="1778500800">- Update to v2.3.3:
  * 8b4af274 Avoid pulling binaries with curl
  * d46e30f4 Bump golangci/golangci-lint-action to v9
  * 02caf200 Bump github.com/spf13/cobra library
  * e29e1fbf Bump github.com/jaypipes/ghw library
  * 652654e1 Bump github.com/bramvdbogaerde/go-scp library
  * f94a0c58 Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
  * dc1a2056 Bump github.com/ulikunitz/xz library
  * 337a986c Update headers to 2026
  * d6aac085 Switch from TW to Leap 16.0 for green flavor</changelog>
  <changelog author="elemental@suse.de" date="1780488000">- Update to v2.3.4:
  * 974af043 Bump golang.org/x/net to v0.55.0 (bsc#1267168 bsc#1251679)
  * ae39c90f Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)</changelog>
</package>
<package pkgid="fed8936ba4e02306d1baedc51a7ef89ecb8bcfff5f3933cb898df0498e42f2479b2c67abc5548ddc4954235a4b85f33c3328948ab3718c3aa9c6c9b70e24fdb6" name="elemental-updater" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="160000.2.2"/>
  <changelog author="kkaempf@suse.com" date="1666699200">- add /etc/NetworkManager/conf.d/rke2-canal.conf (#446)</changelog>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.1.0+git20230125.14a106c:
  * Add debug flag on upgrade command and update bootargs.cfg file (#625)</changelog>
  <changelog author="dcassany@suse.com" date="1701172801">- Update to version 1.3+git20230830.d301e1b:
  * Add elemental-register-reset.service
  * Use the new init command (#874)
  * Disable service triggers on staging
  * Fix elemental-iso-add-registration script
  * rancher/ -&gt; suse/
  * Use elemental-register --install argument (#934)
  * Allow installation on non-SUSE distributions
  * Add CONTRIBUTING.md
  * Enable cloud-config from removable devices
  * Ensure names are unique for all stages
  * Do not compare versions from different repositories on upgrades
  * Feat: add CODEOWNERS
  * Load proxy setup from sysconfig and allow elemental specific env variables
  * Include cryptsetup in elemental-teal
  * Do not expand COS_PERSISTENT by default
  * Add environment variable files in elemental-system-agent.service
  * Run elemental-register in systemd service (#723)
  * Include rke2-killall on shutdown process
  * Update shutdown-k3s.service
  * Prevent upgrade loops when FORCE is in use
  * Do not allow downgrades without force flag
  * Remove reboots on cloud-config addition
  * Do not allow concurrent suc-upgrade executions
  * Update docker/login-action to v2.1.0 (#666)
  * Add shutdown-k3s.service to OBS spec
  * Add service to kill k3s before umount</changelog>
  <changelog author="dcassany@suse.com" date="1701172802">- Update to version 2.0.0:
  * For some reason OBS complains of invalid format on SOURCEURL substitution
  * Update workflow so that it branches the appropriate OBS packages
  * Adding missing manifest for the base-iso image
  * Align and update labels and tags with all images
  * Remove obsolete images, sle micro variants are already in place
  * Rename build-iso-next
  * Remove longhorn overlay mount
  * Drop the 'for Rancher' suffix
  * Revert to 'old' RPi firmware
  * Set entrypoint of elemental-iso-add-registration
  * Fix SLEM4R OS build
  * Update elemental-iso-add-registration
  * Remove some old teal references
  * Remove Teal images
  * Bump ele-testhelpers deps
  * Include system agent unit file in specfile
  * Require elemental-toolkit instead of elemental-cli (#984)</changelog>
  <changelog author="dcassany@suse.com" date="1710331200">- Bump to v2.1.0
  * Micro rename
  * Only apply upgrade config on OS upgrades (#1283)
  * Require elemental-toolkit v2
  * Adding the btrfs default at elemental-operator level
  * Enable recovery upgrades (#1226)
  * Set transient recovery hostname
  * Update all Golang dependencies
  * Adapt bootargs file to support btrfs snapshotter (#1213)
  * Adapt upgrade script to the new elemental-toolkit
  * Don't set the hostname (#1171)
  * Make use of the update elemental kernel arguments
  * Make initrd generation consistent across flavors
  * Update rootfs settings
  * Make sure no variables in /etc/os-release are duplicated
  * Build RT flavour only for x86_64
  * Use Elemental systemd branding package
  * Update kernel cmdline for elemental-sysroot (#1165)
  * Use the elemental-rootfs feature (#1163)
  * Run services after time-sync.target
  * Mkdir /host/run/elemental in suc-upgrade
  * Migrate to /run/elemental from /run/cos
  * Add default network configuration for eth0
  * Remove default serial console kernel parameter</changelog>
  <changelog author="dcassany@suse.com" date="1714132800">- Update to version v2.1.1
  * Move bootargs to /etc/elemental
  * Include boot assessment installation as part of elemental init
  * Do not start elemental-register timer manually
  * Add an elemental-register checker
  * Adding an network-online checker for elemental
  * Add wireless-regdb for aarch64</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version v2.1.2
  * Fix grub2-x86_64-efi installation
  * Removing syslinux from base image
  * Workaround to remove any pre-existing Elemental initrd</changelog>
  <changelog author="dcassany@suse.com" date="1727092800">- Include net.ifnames=0 kernel parameter bsc#1230904</changelog>
  <changelog author="elemental@suse.de" date="1727784000">- Update to v2.2.0-rc1:
  * 01444ac Bump elemental-toolkit to latest v2.2.x (#1592)
  * a0c30fc Adding the new arm-firmware feature for aarch64 builds (#1590)
  * a9c1d57 Disable predictable interface names (bsc#1230904) (#1581)
  * 35b34fd Include a baremetal disk image
  * 764b791 Switch to git in OBS (#1562)
  * 415c2ea Install nm-configurator in dev image and simplify dev sample
    manifest (#1533)
  * 31c322a Support for IPAM to nmstate (#1476)
  * dba9c98 Remove unneeded network setup
  * 36207b6 elemental.spec: Add procps to Requires
  * fde4fe2 Add openSSH server to SELinux images
  * 2ef9dd7 Revert "Move install openssh and openssh-server"
  * 462b1b8 Move install openssh and openssh-server
  * a267562 selinux config file no longer needed
  * 0b88900 Configure SELinux for RKE2 image
  * 9fd1cd7 Add relabelling initramfs step
  * 016914b Add explicit enforcing setup
  * bec23e9 Set SELinux in permissive mode on recovery, leave default on
    active
  * 80a9efe Move mount config files to /run/elemental
  * fe8e0fc Removing syslinux from base image
  * 7f668e9 Fix grub2-x86_64-efi installation
  * 8b8c89a Update framework/files/system/oem/01_elemental-rootfs.yaml
  * 7675473 Set layout with yaml format
  * 650493a Drop unused accounting.yaml
  * db7f55a use patterns-microos-selinux instead of individual packages
  * b6720b9 Add flavors for k3s-selinux and rke2-selinux KVM images
  * cc1a6ee Rebase dev image to Tumbleweed (#1363)
  * 994a0c3 Use default compression (gzip) for ISOs
  * 0d67032 No squashfs compression by default
  * 8787081 Get rid of few error messages in OBS builds
  * f2f3e65 Update spec file to new bootargs.cfg location
  * 24dca6e Move bootargs to /etc/elemental
  * 8edb9ba Include boot assessment installation as part of elemental init
  * 7a04678 Do not start elemental-register timer manually
  * 37f60bf Update .obs/dockerfile/micro-rt-iso/Dockerfile
  * 6019373 Update .obs/dockerfile/micro-kvm-iso/Dockerfile
  * f8ef719 Update .obs/dockerfile/micro-base-iso/Dockerfile
  * 60de594 Update .obs/dockerfile/micro-baremetal-iso/Dockerfile
  * 6d90f32 Use the naming convention OBS expects for ISOs
  * c01a9a1 Add an elemental-register checker
  * 54c94ff Adding an network-online checker for elemental
  * c50d518 Fix RT ISO name
  * 1b9cf0f Update workflow to new SL Micro name
  * 98d06fc micro-rt-os/Dockerfile: Tag consistently
  * a479e2b Dockefile: Add #!UseOBSRepositories
  * 8f61703 Add wireless-regdb for aarch64
  * 530dc33 Finalize Micro rename
  * 2b6cf4d Install openssl in micro-base
  * 39b1fad Micro rename
  * e4e1206 Include audit package and boot selinux in permissive mode
    explicitly
  * f358223 Sync kvm and rt ISO sources in OBS
  * f7f9de3 Only apply upgrade config on OS upgrades (#1283)
  * a5afd95 Actualize development documentation (#1271)
  * 005e933 slem-rt-iso: fix ISO name
  * 7b23fee Disable selinux for recovery
  * 77aaac2 rt: move ARG after FROM
  * c1abf48 rt, kvm: fix tags and references
  * 98584eb kvm, rt: Add BuildName
  * 886f710 Use busybox in RT and KVM iso images
  * 6fee308 Include busybox to ISO images from scratch
  * eb74c83 slem-base-os: Drop apparmor-parser
  * 13344e6 Switch from busybox to toolbox for ALP
  * e00d917 Fix labelprefix for ALP
  * b9ebc0a slem-iso: SLE_VERSION -&gt; SLEMICRO_VERSION on ALP
  * 17a5133 slem-iso: move from busybox to toolbox on ALP
  * 5a73e00 Drop builder container in favor of sle-micro/6.0/toolbox
  * 99c7c44 Switch to sle-micro/6.0/toolbox as host
  * 14c46a2 Back to SLE15 busybox
  * 85e97d3 Move to alp/bci/busybox
  * a6267b4 Adapt Dockerfiles for ALP
  * ccd4598 drop %VERSION% in IMG_TAG
  * 9c8403f fix VERSION
  * 474b8b1 Unify syntax
  * 351a396 add SLEMICRO_VERSION suffix
  * 08f1118 Build slem-base-os with slem-builder-container
  * 3d27650 drop -base- from builder container
  * 87e8d8b A builder container
  * 34018d3 Back to SLE15 busybox
  * f21de6d Add btrfsmaintance to base container
  * 1b92b57 Move to alp/bci/busybox
  * 382730c slem-kvm-iso/Dockerfile: fix IMG_REPO
  * 65224b7 Add slem-rt-iso Dockerfile and manifest.yaml
  * c5dc64b Add slem-kvm-iso Dockerfile
  * e7f9844 Drop haveged - included in kernel now
  * dd525b0 slem-base-os: explicitly install kernel-default
  * de2fa1f drop k9s and nfsidmap, not available in SLE Micro 6
  * 91eb5ef Adapt Dockerfiles for ALP</changelog>
  <changelog author="elemental@suse.de" date="1728302400">- Update to v2.2.0:
  * 2dfcbfd Add support to define CATTLE_AGENT_STRICT_VERIFY (#1616)</changelog>
</package>
<package pkgid="6317b8d719f6ed65c05e6486471f85386830fe85199925b23f736fa6bfa0b082aaeccaca176b3aa3e9daf723c105e116755e8d841175fee3d798f3c7b9a318bd" name="elemental-updater" arch="noarch">
  <version epoch="0" ver="2.3.0" rel="160000.1.1"/>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.1.0+git20230125.14a106c:
  * Add debug flag on upgrade command and update bootargs.cfg file (#625)</changelog>
  <changelog author="dcassany@suse.com" date="1701172801">- Update to version 1.3+git20230830.d301e1b:
  * Add elemental-register-reset.service
  * Use the new init command (#874)
  * Disable service triggers on staging
  * Fix elemental-iso-add-registration script
  * rancher/ -&gt; suse/
  * Use elemental-register --install argument (#934)
  * Allow installation on non-SUSE distributions
  * Add CONTRIBUTING.md
  * Enable cloud-config from removable devices
  * Ensure names are unique for all stages
  * Do not compare versions from different repositories on upgrades
  * Feat: add CODEOWNERS
  * Load proxy setup from sysconfig and allow elemental specific env variables
  * Include cryptsetup in elemental-teal
  * Do not expand COS_PERSISTENT by default
  * Add environment variable files in elemental-system-agent.service
  * Run elemental-register in systemd service (#723)
  * Include rke2-killall on shutdown process
  * Update shutdown-k3s.service
  * Prevent upgrade loops when FORCE is in use
  * Do not allow downgrades without force flag
  * Remove reboots on cloud-config addition
  * Do not allow concurrent suc-upgrade executions
  * Update docker/login-action to v2.1.0 (#666)
  * Add shutdown-k3s.service to OBS spec
  * Add service to kill k3s before umount</changelog>
  <changelog author="dcassany@suse.com" date="1701172802">- Update to version 2.0.0:
  * For some reason OBS complains of invalid format on SOURCEURL substitution
  * Update workflow so that it branches the appropriate OBS packages
  * Adding missing manifest for the base-iso image
  * Align and update labels and tags with all images
  * Remove obsolete images, sle micro variants are already in place
  * Rename build-iso-next
  * Remove longhorn overlay mount
  * Drop the 'for Rancher' suffix
  * Revert to 'old' RPi firmware
  * Set entrypoint of elemental-iso-add-registration
  * Fix SLEM4R OS build
  * Update elemental-iso-add-registration
  * Remove some old teal references
  * Remove Teal images
  * Bump ele-testhelpers deps
  * Include system agent unit file in specfile
  * Require elemental-toolkit instead of elemental-cli (#984)</changelog>
  <changelog author="dcassany@suse.com" date="1710331200">- Bump to v2.1.0
  * Micro rename
  * Only apply upgrade config on OS upgrades (#1283)
  * Require elemental-toolkit v2
  * Adding the btrfs default at elemental-operator level
  * Enable recovery upgrades (#1226)
  * Set transient recovery hostname
  * Update all Golang dependencies
  * Adapt bootargs file to support btrfs snapshotter (#1213)
  * Adapt upgrade script to the new elemental-toolkit
  * Don't set the hostname (#1171)
  * Make use of the update elemental kernel arguments
  * Make initrd generation consistent across flavors
  * Update rootfs settings
  * Make sure no variables in /etc/os-release are duplicated
  * Build RT flavour only for x86_64
  * Use Elemental systemd branding package
  * Update kernel cmdline for elemental-sysroot (#1165)
  * Use the elemental-rootfs feature (#1163)
  * Run services after time-sync.target
  * Mkdir /host/run/elemental in suc-upgrade
  * Migrate to /run/elemental from /run/cos
  * Add default network configuration for eth0
  * Remove default serial console kernel parameter</changelog>
  <changelog author="dcassany@suse.com" date="1714132800">- Update to version v2.1.1
  * Move bootargs to /etc/elemental
  * Include boot assessment installation as part of elemental init
  * Do not start elemental-register timer manually
  * Add an elemental-register checker
  * Adding an network-online checker for elemental
  * Add wireless-regdb for aarch64</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version v2.1.2
  * Fix grub2-x86_64-efi installation
  * Removing syslinux from base image
  * Workaround to remove any pre-existing Elemental initrd</changelog>
  <changelog author="dcassany@suse.com" date="1727092800">- Include net.ifnames=0 kernel parameter bsc#1230904</changelog>
  <changelog author="elemental@suse.de" date="1727784000">- Update to v2.2.0-rc1:
  * 01444ac Bump elemental-toolkit to latest v2.2.x (#1592)
  * a0c30fc Adding the new arm-firmware feature for aarch64 builds (#1590)
  * a9c1d57 Disable predictable interface names (bsc#1230904) (#1581)
  * 35b34fd Include a baremetal disk image
  * 764b791 Switch to git in OBS (#1562)
  * 415c2ea Install nm-configurator in dev image and simplify dev sample
    manifest (#1533)
  * 31c322a Support for IPAM to nmstate (#1476)
  * dba9c98 Remove unneeded network setup
  * 36207b6 elemental.spec: Add procps to Requires
  * fde4fe2 Add openSSH server to SELinux images
  * 2ef9dd7 Revert "Move install openssh and openssh-server"
  * 462b1b8 Move install openssh and openssh-server
  * a267562 selinux config file no longer needed
  * 0b88900 Configure SELinux for RKE2 image
  * 9fd1cd7 Add relabelling initramfs step
  * 016914b Add explicit enforcing setup
  * bec23e9 Set SELinux in permissive mode on recovery, leave default on
    active
  * 80a9efe Move mount config files to /run/elemental
  * fe8e0fc Removing syslinux from base image
  * 7f668e9 Fix grub2-x86_64-efi installation
  * 8b8c89a Update framework/files/system/oem/01_elemental-rootfs.yaml
  * 7675473 Set layout with yaml format
  * 650493a Drop unused accounting.yaml
  * db7f55a use patterns-microos-selinux instead of individual packages
  * b6720b9 Add flavors for k3s-selinux and rke2-selinux KVM images
  * cc1a6ee Rebase dev image to Tumbleweed (#1363)
  * 994a0c3 Use default compression (gzip) for ISOs
  * 0d67032 No squashfs compression by default
  * 8787081 Get rid of few error messages in OBS builds
  * f2f3e65 Update spec file to new bootargs.cfg location
  * 24dca6e Move bootargs to /etc/elemental
  * 8edb9ba Include boot assessment installation as part of elemental init
  * 7a04678 Do not start elemental-register timer manually
  * 37f60bf Update .obs/dockerfile/micro-rt-iso/Dockerfile
  * 6019373 Update .obs/dockerfile/micro-kvm-iso/Dockerfile
  * f8ef719 Update .obs/dockerfile/micro-base-iso/Dockerfile
  * 60de594 Update .obs/dockerfile/micro-baremetal-iso/Dockerfile
  * 6d90f32 Use the naming convention OBS expects for ISOs
  * c01a9a1 Add an elemental-register checker
  * 54c94ff Adding an network-online checker for elemental
  * c50d518 Fix RT ISO name
  * 1b9cf0f Update workflow to new SL Micro name
  * 98d06fc micro-rt-os/Dockerfile: Tag consistently
  * a479e2b Dockefile: Add #!UseOBSRepositories
  * 8f61703 Add wireless-regdb for aarch64
  * 530dc33 Finalize Micro rename
  * 2b6cf4d Install openssl in micro-base
  * 39b1fad Micro rename
  * e4e1206 Include audit package and boot selinux in permissive mode
    explicitly
  * f358223 Sync kvm and rt ISO sources in OBS
  * f7f9de3 Only apply upgrade config on OS upgrades (#1283)
  * a5afd95 Actualize development documentation (#1271)
  * 005e933 slem-rt-iso: fix ISO name
  * 7b23fee Disable selinux for recovery
  * 77aaac2 rt: move ARG after FROM
  * c1abf48 rt, kvm: fix tags and references
  * 98584eb kvm, rt: Add BuildName
  * 886f710 Use busybox in RT and KVM iso images
  * 6fee308 Include busybox to ISO images from scratch
  * eb74c83 slem-base-os: Drop apparmor-parser
  * 13344e6 Switch from busybox to toolbox for ALP
  * e00d917 Fix labelprefix for ALP
  * b9ebc0a slem-iso: SLE_VERSION -&gt; SLEMICRO_VERSION on ALP
  * 17a5133 slem-iso: move from busybox to toolbox on ALP
  * 5a73e00 Drop builder container in favor of sle-micro/6.0/toolbox
  * 99c7c44 Switch to sle-micro/6.0/toolbox as host
  * 14c46a2 Back to SLE15 busybox
  * 85e97d3 Move to alp/bci/busybox
  * a6267b4 Adapt Dockerfiles for ALP
  * ccd4598 drop %VERSION% in IMG_TAG
  * 9c8403f fix VERSION
  * 474b8b1 Unify syntax
  * 351a396 add SLEMICRO_VERSION suffix
  * 08f1118 Build slem-base-os with slem-builder-container
  * 3d27650 drop -base- from builder container
  * 87e8d8b A builder container
  * 34018d3 Back to SLE15 busybox
  * f21de6d Add btrfsmaintance to base container
  * 1b92b57 Move to alp/bci/busybox
  * 382730c slem-kvm-iso/Dockerfile: fix IMG_REPO
  * 65224b7 Add slem-rt-iso Dockerfile and manifest.yaml
  * c5dc64b Add slem-kvm-iso Dockerfile
  * e7f9844 Drop haveged - included in kernel now
  * dd525b0 slem-base-os: explicitly install kernel-default
  * de2fa1f drop k9s and nfsidmap, not available in SLE Micro 6
  * 91eb5ef Adapt Dockerfiles for ALP</changelog>
  <changelog author="elemental@suse.de" date="1728302400">- Update to v2.2.0:
  * 2dfcbfd Add support to define CATTLE_AGENT_STRICT_VERIFY (#1616)</changelog>
  <changelog author="elemental@suse.de" date="1759147200">- Update to v2.3.0:
  * 9460f98 Add policycoreutils-python-utils (bsc#1240623)
  * 8a07527 Set elemental images to only build for x86_64 and aarch64
  * e8e8161 Disable disk flavor
  * cf99f4b Include an empty /etc/machine-id file (bsc#1239623)
  * 5c12b2c cni and cni-plugins are no longer part of SL Micro 6.2
  * 4725df2 Switch to BCI base image instead of toolbox
  * 11ba9af Adding --force flag to init command for aarch64 as it is for
    x86_64
  * be1ff0c Update copyright year (2025)
  * 1243b12 Dockerfile.dev.os: enable elemental-register.timer (#1655)
  * 2cef6d9 Merge ISO and OS container images
  * c52cc44 Remove no longer valid OBS workflow
  * 09c4ab9 Add documentation to test private CA renewal (#1606)</changelog>
</package>
<package pkgid="0dfa4a509819f1b2ed2628a7545a8c2c630952ecd75090f4b456f75d577cacb2631ae9c4e8a9f03d9cd55b962364d2d95d5dfb46ae7371999b286c41f3d1d3ac" name="elemental-updater" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="160000.1.1"/>
  <changelog author="dcassany@suse.com" date="1701172800">- Update to version 1.3+git20230830.d301e1b:
  * Add elemental-register-reset.service
  * Use the new init command (#874)
  * Disable service triggers on staging
  * Fix elemental-iso-add-registration script
  * rancher/ -&gt; suse/
  * Use elemental-register --install argument (#934)
  * Allow installation on non-SUSE distributions
  * Add CONTRIBUTING.md
  * Enable cloud-config from removable devices
  * Ensure names are unique for all stages
  * Do not compare versions from different repositories on upgrades
  * Feat: add CODEOWNERS
  * Load proxy setup from sysconfig and allow elemental specific env variables
  * Include cryptsetup in elemental-teal
  * Do not expand COS_PERSISTENT by default
  * Add environment variable files in elemental-system-agent.service
  * Run elemental-register in systemd service (#723)
  * Include rke2-killall on shutdown process
  * Update shutdown-k3s.service
  * Prevent upgrade loops when FORCE is in use
  * Do not allow downgrades without force flag
  * Remove reboots on cloud-config addition
  * Do not allow concurrent suc-upgrade executions
  * Update docker/login-action to v2.1.0 (#666)
  * Add shutdown-k3s.service to OBS spec
  * Add service to kill k3s before umount</changelog>
  <changelog author="dcassany@suse.com" date="1701172801">- Update to version 2.0.0:
  * For some reason OBS complains of invalid format on SOURCEURL substitution
  * Update workflow so that it branches the appropriate OBS packages
  * Adding missing manifest for the base-iso image
  * Align and update labels and tags with all images
  * Remove obsolete images, sle micro variants are already in place
  * Rename build-iso-next
  * Remove longhorn overlay mount
  * Drop the 'for Rancher' suffix
  * Revert to 'old' RPi firmware
  * Set entrypoint of elemental-iso-add-registration
  * Fix SLEM4R OS build
  * Update elemental-iso-add-registration
  * Remove some old teal references
  * Remove Teal images
  * Bump ele-testhelpers deps
  * Include system agent unit file in specfile
  * Require elemental-toolkit instead of elemental-cli (#984)</changelog>
  <changelog author="dcassany@suse.com" date="1710331200">- Bump to v2.1.0
  * Micro rename
  * Only apply upgrade config on OS upgrades (#1283)
  * Require elemental-toolkit v2
  * Adding the btrfs default at elemental-operator level
  * Enable recovery upgrades (#1226)
  * Set transient recovery hostname
  * Update all Golang dependencies
  * Adapt bootargs file to support btrfs snapshotter (#1213)
  * Adapt upgrade script to the new elemental-toolkit
  * Don't set the hostname (#1171)
  * Make use of the update elemental kernel arguments
  * Make initrd generation consistent across flavors
  * Update rootfs settings
  * Make sure no variables in /etc/os-release are duplicated
  * Build RT flavour only for x86_64
  * Use Elemental systemd branding package
  * Update kernel cmdline for elemental-sysroot (#1165)
  * Use the elemental-rootfs feature (#1163)
  * Run services after time-sync.target
  * Mkdir /host/run/elemental in suc-upgrade
  * Migrate to /run/elemental from /run/cos
  * Add default network configuration for eth0
  * Remove default serial console kernel parameter</changelog>
  <changelog author="dcassany@suse.com" date="1714132800">- Update to version v2.1.1
  * Move bootargs to /etc/elemental
  * Include boot assessment installation as part of elemental init
  * Do not start elemental-register timer manually
  * Add an elemental-register checker
  * Adding an network-online checker for elemental
  * Add wireless-regdb for aarch64</changelog>
  <changelog author="dcassany@suse.com" date="1722859200">- Update to version v2.1.2
  * Fix grub2-x86_64-efi installation
  * Removing syslinux from base image
  * Workaround to remove any pre-existing Elemental initrd</changelog>
  <changelog author="dcassany@suse.com" date="1727092800">- Include net.ifnames=0 kernel parameter bsc#1230904</changelog>
  <changelog author="elemental@suse.de" date="1727784000">- Update to v2.2.0-rc1:
  * 01444ac Bump elemental-toolkit to latest v2.2.x (#1592)
  * a0c30fc Adding the new arm-firmware feature for aarch64 builds (#1590)
  * a9c1d57 Disable predictable interface names (bsc#1230904) (#1581)
  * 35b34fd Include a baremetal disk image
  * 764b791 Switch to git in OBS (#1562)
  * 415c2ea Install nm-configurator in dev image and simplify dev sample
    manifest (#1533)
  * 31c322a Support for IPAM to nmstate (#1476)
  * dba9c98 Remove unneeded network setup
  * 36207b6 elemental.spec: Add procps to Requires
  * fde4fe2 Add openSSH server to SELinux images
  * 2ef9dd7 Revert "Move install openssh and openssh-server"
  * 462b1b8 Move install openssh and openssh-server
  * a267562 selinux config file no longer needed
  * 0b88900 Configure SELinux for RKE2 image
  * 9fd1cd7 Add relabelling initramfs step
  * 016914b Add explicit enforcing setup
  * bec23e9 Set SELinux in permissive mode on recovery, leave default on
    active
  * 80a9efe Move mount config files to /run/elemental
  * fe8e0fc Removing syslinux from base image
  * 7f668e9 Fix grub2-x86_64-efi installation
  * 8b8c89a Update framework/files/system/oem/01_elemental-rootfs.yaml
  * 7675473 Set layout with yaml format
  * 650493a Drop unused accounting.yaml
  * db7f55a use patterns-microos-selinux instead of individual packages
  * b6720b9 Add flavors for k3s-selinux and rke2-selinux KVM images
  * cc1a6ee Rebase dev image to Tumbleweed (#1363)
  * 994a0c3 Use default compression (gzip) for ISOs
  * 0d67032 No squashfs compression by default
  * 8787081 Get rid of few error messages in OBS builds
  * f2f3e65 Update spec file to new bootargs.cfg location
  * 24dca6e Move bootargs to /etc/elemental
  * 8edb9ba Include boot assessment installation as part of elemental init
  * 7a04678 Do not start elemental-register timer manually
  * 37f60bf Update .obs/dockerfile/micro-rt-iso/Dockerfile
  * 6019373 Update .obs/dockerfile/micro-kvm-iso/Dockerfile
  * f8ef719 Update .obs/dockerfile/micro-base-iso/Dockerfile
  * 60de594 Update .obs/dockerfile/micro-baremetal-iso/Dockerfile
  * 6d90f32 Use the naming convention OBS expects for ISOs
  * c01a9a1 Add an elemental-register checker
  * 54c94ff Adding an network-online checker for elemental
  * c50d518 Fix RT ISO name
  * 1b9cf0f Update workflow to new SL Micro name
  * 98d06fc micro-rt-os/Dockerfile: Tag consistently
  * a479e2b Dockefile: Add #!UseOBSRepositories
  * 8f61703 Add wireless-regdb for aarch64
  * 530dc33 Finalize Micro rename
  * 2b6cf4d Install openssl in micro-base
  * 39b1fad Micro rename
  * e4e1206 Include audit package and boot selinux in permissive mode
    explicitly
  * f358223 Sync kvm and rt ISO sources in OBS
  * f7f9de3 Only apply upgrade config on OS upgrades (#1283)
  * a5afd95 Actualize development documentation (#1271)
  * 005e933 slem-rt-iso: fix ISO name
  * 7b23fee Disable selinux for recovery
  * 77aaac2 rt: move ARG after FROM
  * c1abf48 rt, kvm: fix tags and references
  * 98584eb kvm, rt: Add BuildName
  * 886f710 Use busybox in RT and KVM iso images
  * 6fee308 Include busybox to ISO images from scratch
  * eb74c83 slem-base-os: Drop apparmor-parser
  * 13344e6 Switch from busybox to toolbox for ALP
  * e00d917 Fix labelprefix for ALP
  * b9ebc0a slem-iso: SLE_VERSION -&gt; SLEMICRO_VERSION on ALP
  * 17a5133 slem-iso: move from busybox to toolbox on ALP
  * 5a73e00 Drop builder container in favor of sle-micro/6.0/toolbox
  * 99c7c44 Switch to sle-micro/6.0/toolbox as host
  * 14c46a2 Back to SLE15 busybox
  * 85e97d3 Move to alp/bci/busybox
  * a6267b4 Adapt Dockerfiles for ALP
  * ccd4598 drop %VERSION% in IMG_TAG
  * 9c8403f fix VERSION
  * 474b8b1 Unify syntax
  * 351a396 add SLEMICRO_VERSION suffix
  * 08f1118 Build slem-base-os with slem-builder-container
  * 3d27650 drop -base- from builder container
  * 87e8d8b A builder container
  * 34018d3 Back to SLE15 busybox
  * f21de6d Add btrfsmaintance to base container
  * 1b92b57 Move to alp/bci/busybox
  * 382730c slem-kvm-iso/Dockerfile: fix IMG_REPO
  * 65224b7 Add slem-rt-iso Dockerfile and manifest.yaml
  * c5dc64b Add slem-kvm-iso Dockerfile
  * e7f9844 Drop haveged - included in kernel now
  * dd525b0 slem-base-os: explicitly install kernel-default
  * de2fa1f drop k9s and nfsidmap, not available in SLE Micro 6
  * 91eb5ef Adapt Dockerfiles for ALP</changelog>
  <changelog author="elemental@suse.de" date="1728302400">- Update to v2.2.0:
  * 2dfcbfd Add support to define CATTLE_AGENT_STRICT_VERIFY (#1616)</changelog>
  <changelog author="elemental@suse.de" date="1759147200">- Update to v2.3.0:
  * 9460f98 Add policycoreutils-python-utils (bsc#1240623)
  * 8a07527 Set elemental images to only build for x86_64 and aarch64
  * e8e8161 Disable disk flavor
  * cf99f4b Include an empty /etc/machine-id file (bsc#1239623)
  * 5c12b2c cni and cni-plugins are no longer part of SL Micro 6.2
  * 4725df2 Switch to BCI base image instead of toolbox
  * 11ba9af Adding --force flag to init command for aarch64 as it is for
    x86_64
  * be1ff0c Update copyright year (2025)
  * 1243b12 Dockerfile.dev.os: enable elemental-register.timer (#1655)
  * 2cef6d9 Merge ISO and OS container images
  * c52cc44 Remove no longer valid OBS workflow
  * 09c4ab9 Add documentation to test private CA renewal (#1606)</changelog>
  <changelog author="elemental@suse.de" date="1781006400">- Update to v2.3.1:
  * c47d91b Adapt labels to pass containers checks in OBS
  * 88015da set to released-stage to released as SL Micro 6.2 is GA
  * 6f8ca5a Fix specfile dependencies</changelog>
</package>
<package pkgid="1029e23c84f905a4c64e93588d2a65a71b68431441bd5170008e3ba0b2f611b105a64905dc0483a582dae605892d8272a7d46af440a0f9f734757fc106cfaea1" name="elementary-xfce-icon-theme" arch="noarch">
  <version epoch="0" ver="0.15.2+git0.2e2ca316" rel="bp160.1.9"/>
  <changelog author="tux93@opensuse.org" date="1583841600">- Update to version 0.14+git26.b207ac07:
  * Fix icon for Gnome Software Center (Issue #181)
  * Fix Bluetooth Manager icon in application menu (Issue #129)</changelog>
  <changelog author="tux93@opensuse.org" date="1583928000">- Update to version 0.14+git28.4be98dc7:
  * Fix home icon in darker theme</changelog>
  <changelog author="tux93@opensuse.org" date="1584619200">- Update to version 0.14+git30.e40a2684:
  * Darker theme: relink bad icons and fix nm-applet (Issue #191)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1584964800">- Update to version 0.15+git0.6fc555d6:
  * Run vacuum-defs
  * Add 24px clipman icon
  * Fixed dangling symlinks</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1584964801">- Build using buildsystem to take advantage of the SVG to PNG
  conversion script. PNG load faster than SVG.</changelog>
  <changelog author="tux93@opensuse.org" date="1586088000">- Update to version 0.15+git4.5862aab7:
  * Fix text-editor and software-updater icons used in help dialogs
  * Fix xfce4-terminal and blueman icons used in help dialogs</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1586174400">- Update to version 0.15+git6.098bd333:
  * Fix nm-applet vpn symbolic and 16px panel icons</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1591790400">- Update to version 0.15+git8.ae895abc:
  * Fixed nm-applet icon in  notification bubble and vpn indicator
    lock (issue #212)
  * Fixed several contrast problems and added new colored
    software-update icons</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1610366400">- Update to version 0.15.2+git0.2e2ca316:
  * Add missing 32px icons
  * Add symbolic links for xfce 4.16 icon names (#220)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1693224000">- BuildRequire bitstream-vera-fonts for SVG text rendering</changelog>
</package>
<package pkgid="56556be46eaf940b14098ba3630382eedaec410ccf3d1e2a54aa750c6293c7f55cdf6dfc3b659f67a48e1d89f225fa62461934d86b3e09fd02ace1d98b06da2c" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="39dd2358b4414ad5012f49d926f38421878cc4ee5bcfe2c5240e11c726263c9704f3df73313a517cdfd328d7e5d98cc6ce04b3405fedcf57ba7c747a342e40bc" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="e478daf5f04502fc29233105c4cd6c3bc51c784428dcb0a16574d1c54493782b0598c0dd3ac6b30cd8852e407c3e316740fd47c4602a9b1c12fe970d9e0ec9aa" name="elfutils-debuginfod" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.2.3"/>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="mliska@suse.cz" date="1678190400">- Fix file listing for 15.x builds.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1689163200">- Replace libdebuginfo1 sub-package's debuginfod-profile Recommends
  with config(debuginfod-profile) Requires, but on the debuginfod-\
  client sub-package, instead. And add binutils, bpftrace-tools,
  elfutils, gdb, perf, systemd-coredump, and valgrind Supplements
  to debuginfod-client sub-package. This should make installation
  of debuginfod-client more consistent, along with debuginfod-\
  profile, with software/packages that have debuginfod support.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Conditionalize config(debuginfod-profile) Requires tag in the
  debuginfod-client sub-package, with the help of the %sle_version
  macro, so only Tumbleweed (currently the only distro supported by
  debuginfod.opensuse.org) sets it.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190
  * Schema change (reindexing required, sorry!) for a 60%
    compression in filename representation, which was a large
    part of the sqlite index; also, more deliberate sqlite
  - wal management during scanning using the
  - -scan-checkpoint option.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Add pkgconfig(json-c) to reenable debuginfod support
- Add fish to enable profile support for fish
- Remove files packaged by libelf-devel</changelog>
</package>
<package pkgid="82135773eb14d021b89f7eba528c42108d90f1e4667a7df0cf308a5c988b41077cb7ceb17f84e671d1fc66de40a91b6174d16b4771848f54b736dab6f746f067" name="elfutils-debuginfod" arch="x86_64">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="mliska@suse.cz" date="1678190400">- Fix file listing for 15.x builds.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1689163200">- Replace libdebuginfo1 sub-package's debuginfod-profile Recommends
  with config(debuginfod-profile) Requires, but on the debuginfod-\
  client sub-package, instead. And add binutils, bpftrace-tools,
  elfutils, gdb, perf, systemd-coredump, and valgrind Supplements
  to debuginfod-client sub-package. This should make installation
  of debuginfod-client more consistent, along with debuginfod-\
  profile, with software/packages that have debuginfod support.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692532800">- Conditionalize config(debuginfod-profile) Requires tag in the
  debuginfod-client sub-package, with the help of the %sle_version
  macro, so only Tumbleweed (currently the only distro supported by
  debuginfod.opensuse.org) sets it.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190
  * Schema change (reindexing required, sorry!) for a 60%
    compression in filename representation, which was a large
    part of the sqlite index; also, more deliberate sqlite
  - wal management during scanning using the
  - -scan-checkpoint option.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Add pkgconfig(json-c) to reenable debuginfod support
- Add fish to enable profile support for fish
- Remove files packaged by libelf-devel</changelog>
  <changelog author="matz@suse.com" date="1768392000">- Move debuginfod homedir creation to tmpfiles.d</changelog>
</package>
<package pkgid="113a6f96266896d986bc23f9471505e04836cf07ea8c41ff520277de771611da1ca0d33fbd6940797f80279e511c951f0dc1e31f77865d56bef134bf2c3ce421" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.192" rel="160000.2.2"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="b8c4478a18bb68db9dde12b6dd9aab1da6ac56b590b057a221f228ebd7b5637d79bfe203f04714c0f6ceac94c70967810984987c1ccd93e20aab19ba7e4529c6" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.192" rel="160000.3.1"/>
  <changelog author="schwab@suse.de" date="1677758400">- Drop 0005-backends-Add-RISC-V-object-attribute-printing.patch, never
  intented to be added</changelog>
  <changelog author="mliska@suse.cz" date="1677844800">- Update to version 0.189:
  * configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
    when linked with libstdc++. Use --disable-demangler to disable.
    A new option --enable-sanitize-memory has been added for msan
    sanitizer support.
  * libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
    libzstd
  * libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
    for DIEs that point to a DW_TAG_unspecified_type.
  * elfcompress: -t, --type= now support zstd if libelf has been build with
    ELFCOMPRESS_ZSTD support.
  * backends: Add support for LoongArch and Synopsys ARCv2 processors.
- drop upsteam patches:
  * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch
  * elfutils-0.188-CURL_AT_LEAST_VERSION.patch
  * elfutils-0.188-deprecated-CURLINFO.patch
  * support-DW_TAG_unspecified_type.patch
- Enable -Werror=use-after-free again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1683633600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to version 0.190:
  * libelf: Add RELR support.
  * libdw: Recognize .debug_[ct]u_index sections
  * readelf:
  - Support readelf -Ds, --use-dynamic --symbol.
  - Support .gdb_index version 9
  * scrlines: New tool that compiles a list of source files associated
    with a specified dwarf/elf file.
  * backends: Various LoongArch updates.</changelog>
  <changelog author="michal.jires@suse.com" date="1709640000">- Add fix_gcc14_errors.patch (bsc#1220464)</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 0.191:
  * libdw: dwarf_addrdie now supports binaries lacking a
    .debug_aranges section.
  * Improved support for DWARF package files.  Add new
    function dwarf_cu_dwp_section_info.
  * debuginfod: Caching eviction logic improvements to improve
    retention of small/frequent/slow files such as Fedora's
    vdso.debug.
  * srcfiles: Can now fetch the source files of a DWARF/ELF file
    and place them into a zip.
- drop fix_gcc14_errors.patch (upstream)</changelog>
  <changelog author="matz@suse.com" date="1716292800">- Add "-g" to %optflags, so that the tests work in all repos,
  with or without globally enabled debuginfo creation.</changelog>
  <changelog author="adrian@suse.de" date="1733054400">- update to 0.192
  CONDUCT: A new code of conduct has been adopted.  See the
  CONDUCT file for more information.
  debuginfod: Add per-file signature verification for integrity
    checking, using RPM IMA scheme from Fedora/RHEL.
  New API for metadata queries: file name -&gt; buildid.
  Server-side extraction of files from kernel debuginfo
  packages is significantly faster. Now takes &lt; 0.25 seconds,
  down from ~50 seconds.
  libdw: New functions dwfl_set_sysroot, dwfl_frame_unwound_source
  and dwfl_unwound_source_str.
  stacktrace: Experimental new tool that can process a stream of stack
    samples from the Sysprof profiler and unwind them into call
    chains. Enable on x86 with --enable-stacktrace. See
    README.eu-stacktrace in the development branch for detailed
    usage instructions:
    https://sourceware.org/cgit/elfutils/tree/README.eu-stacktrace?h=users/serhei/eu-stacktrace</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove files packaged by elfutils-debuginfod</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1734004800">- Add fix-static-linking.patch (bsc#1234445)</changelog>
</package>
<package pkgid="e2fc64ac1683a3f0441e036f5cc426d8ef5e39cc1281d2251d3a4d0fb3ab25fc9c50f06706e6e68ee0af17e33e96d5e4fc0f805065000cc955c35f1b4354935f" name="elinks" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="160000.2.2"/>
  <changelog author="mcalabkova@suse.com" date="1554120000">- Update to version 0.13
  * parse_header: document parameters and return value
  * doxygen: Fix link to bookmark::url
  * use draw_text for titles
  * iconv: Bail out of the loop when an illegal sequence of bytes
    occur
  * Add support for the CSS list-style-type property
  * configure.in: use PKG_CONFIG
  * Fixed problem of converting more than 256 chars
  * mem_free_if where aplicable
  * ssl: Make RAND_egd optional
  * Better handling of content-disposition
  * Compilation fix for OpenSSL-1.1
  * display lua hooks errors
  * brotli code updated
  * Use blacklist to skip verification of certificates
  * various code cleanup
  * -VERS-SSL3.0 in gnutls to avoid SSL error.
  * 1024: Verify server certificate hostname with OpenSSL (bsc#1082814)
- Removed unneeded patches:
  * elinks-0.12_pre5-compilation-fix.patch
  * use_lua-5.1.patch
  * build.with-openssl-1_1.patch
- Renamed patch:
  * build-with-ruby-1.9.patch -&gt; build-with-new-ruby.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1563883200">- Update to 20190723 snapshot of version 0.13:
  * no changes
- Use pre-version tag, as the current snapshot is a pre-release.
- Remove volatile URL from Source0.
- Compile without strict aliasing to prevent breakage with new gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655121600">- Require perl in the same version as we built against: elinks
  links to libperl.so, which changes location based on perl
  version. The relevant path in encoded as RUNPATH into the binary
  (boo#1199945).</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- Makefile is not parallel-safe</changelog>
  <changelog author="mantarimay@pm.me" date="1682856000">- Update to rkd77 git version 0.16.0
- Enable javascript with mujs on Tumbleweed (missing libxml++-5.0 on leap)
- Use LuaJIT for lua compiler until someone fix it with standart Lua
- Removed unneeded patches:
  * build-with-new-ruby.patch
- Added the following patches:
  * 0006-elinks-0.16.0-libidn2.patch</changelog>
  <changelog author="mantarimay@pm.me" date="1682942400">- Update to version 0.16.1
  * handle SECTION html element #207
  * allocate more memory for BLOCKQUOTE #214
  * encode A href to terminal codepage and encode bytes with
    highest bit set as %HEX #221
  * Serbian translation update
  * install doc by default in meson #224
  * tests fixes</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- update to 0.16.1.1:
  * updated POTFILES</changelog>
  <changelog author="dimstar@opensuse.org" date="1691064000">- Add perl-5.38.patch: Fix compilation with Perl 5.38
  (gh#rkd77/elinks#243).</changelog>
  <changelog author="mantarimay@pm.me" date="1705233600">- update to 0.17.0:
  * Avoid division by zero. Refs #276
  * fix for some 32-bit systems and select-only builds
  * configuration files are now saved to ~/.config/elinks/ or
    $XDG_CONFIG_HOME/elinks/ #199
  * User must copy files from ~/.elinks/ to ~/.config/elinks/
    himself or herself
  * HOME_ETC support was dropped, you can set with ELINKS_CONFDIR
  * idn2 in place of idn #206
  * libcss support (a few netsurf's libraries are required).
    Set document.css.libcss = 1 to enable
  * experimental libsixel support (image/*; img2sixel %s;
    copiousoutput) in ~/.mailcap
  * Must be enabled in a few places in configuration: set
    document.plain.sixel = 1
  * and in terminal options. Do not try it on metered remote
    connections
  * testing libcurl support (explicit FTPS and SFTP among others)
  * To enable set protocol.ftp.use_curl = 1
  * set protocol.http.use_curl = 1 for http/https
  * ui.sessions.postpone_unlink option. Delete temporary files at
    exit instead of immediately after
  * closing viewer #257
  * redefined isspace #249
  * Serbian translation update
  * compilation fixes
- Add pkgconfig(libdom) BuildRequires: fix build to enable js.
- Enable gemini support
- Removed unneeded patches:
  * perl-5.38.patch
  * 0006-elinks-0.16.0-libidn2.patch</changelog>
  <changelog author="gboiko@suse.com" date="1725969600">- Fix building on ppc64le (by using lua instead of luajit there)</changelog>
</package>
<package pkgid="45a2d4d6d083d705f7191cdf847d6dffb6041d5b8d6041eef63d84096ad986705c045effad9778fac80d721bb07f20c46f6f1f0020637aa0fb47af1e246220b5" name="elisa" arch="x86_64">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * fix out of bounds access on MediaPlayListProxyModel::mapRowToSource
  * Fix APK build with Gradle Android plugin 8.6.0
  * Update Android Gradle plugin version to 8.6.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Use single quotes for string literal in SQL query (fixes FreeBSD CI)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Fix the spacebar play/pause action when specific buttons have focus (kde#476532)
  * Restore the minimized Elisa instance when opened again (kde#472768)
  * Start playing track when opened externally (kde#423007)
  * Update track data using the correct index (kde#498357)
  * Connect genreRemoved signal to data models (kde#492353)
  * libvlc: Set media player role to "Music" (kde#492316)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * Fix missing action buttons on mobile settings and metadata pages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * Don't link QtCorePrivate in test
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * qml/ContextView: don't show Lyrics when they're invisible (kde#504198)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="0ba4dd426370ea36447876f51843f3735185848914fd6dbedd62a4508d871080756f1c33603df0353f4de8e52ea79046d9140f77ce6f4f9059e9597db965ae4c" name="elisa-lang" arch="noarch">
  <version epoch="0" ver="25.04.3" rel="bp160.1.2"/>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733140800">- Update to 24.11.90
  * New feature release
- No code change since 24.11.80</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1733659200">- Update to 24.12.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.0/
- No code change since 24.11.90</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1736251200">- Update to 24.12.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.1/
- Changes since 24.12.0:
  * fix out of bounds access on MediaPlayListProxyModel::mapRowToSource
  * Fix APK build with Gradle Android plugin 8.6.0
  * Update Android Gradle plugin version to 8.6.0</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1738670400">- Update to 24.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.2/
- Changes since 24.12.1:
  * Use single quotes for string literal in SQL query (fixes FreeBSD CI)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1741089600">- Update to 24.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/24.12.3/
- No code change since 24.12.2</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1743249600">- Update to 25.03.90
  * New feature release
- Too many changes since 24.12.3, only listing bugfixes:
  * Fix the spacebar play/pause action when specific buttons have focus (kde#476532)
  * Restore the minimized Elisa instance when opened again (kde#472768)
  * Start playing track when opened externally (kde#423007)
  * Update track data using the correct index (kde#498357)
  * Connect genreRemoved signal to data models (kde#492353)
  * libvlc: Set media player role to "Music" (kde#492316)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1744632000">- Update to 25.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.0/
- Changes since 25.03.90:
  * Fix missing action buttons on mobile settings and metadata pages</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1746619200">- Update to 25.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.1/
- Changes since 25.04.0:
  * Don't link QtCorePrivate in test
  * flatpak: Update runtime</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1748952000">- Update to 25.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.2/
- Changes since 25.04.1:
  * qml/ContextView: don't show Lyrics when they're invisible (kde#504198)</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1751371200">- Update to 25.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/25.04.3/
- No code change since 25.04.2</changelog>
</package>
<package pkgid="1324cdd55486fd942c83788508e1f4f709d4e01b9a9b36b68cce1388cb229c56b15507aeed784c399242bd618d4d77a6bebd477a114784c2c2afd92c40e23ccf" name="elixir" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="160000.2.3"/>
  <changelog author="alessio.biancalana@suse.com" date="1708776000">- Upgrade to Elixir 1.16.1
- Drop 0001-Use-PID-valid-for-32-bit-systems-closes-12741.patch:
  * Not needed anymore, included in this version
- Drop 0001-Use-PID-valid-for-32-bit-systems-followup-to-12741-1.patch:
  * Not needed anymore, included in this version
- Add 0001-Skip-tests-if-Erlang-compiled-without-docs-closes-13322.patch:
  * Skip some tests if Erlang is compiled without docs</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1710072000">- Upgrade to Elixir 1.16.2:
  * Changelog available at https://hexdocs.pm/elixir/1.16.2/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1716724800">- Upgrade to Elixir 1.16.3:
  * Changelog available at https://hexdocs.pm/elixir/1.16.3/changelog.html
  * 0001-Skip-tests-if-Erlang-compiled-without-docs-closes-13322.patch no longer
    needed</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1718280000">- Upgrade to Elixir 1.17.0:
  * Changelog available at https://hexdocs.pm/elixir/1.17.0/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1718712000">- Upgrade to Elixir 1.17.1:
  * Changelog available at https://hexdocs.pm/elixir/1.17.1/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1720353600">- Upgrade to Elixir 1.17.2:
  * Changelog available at https://hexdocs.pm/elixir/1.17.2/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1726747200">- Upgrade to Elixir 1.17.3:
  * Changelog available at https://hexdocs.pm/elixir/1.17.3/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1734609600">- Add 001-skip-translator-supervisor-test.patch to make the package build correctly
- Pass elixir.spec through spec-cleaner</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1734696000">- Upgrade to Elixir 1.18.0:
  * Changelog available at https://hexdocs.pm/elixir/1.18.0/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1735128000">- Upgrade to Elixir 1.18.1:
  * Changelog available at https://hexdocs.pm/elixir/1.18.1/changelog.html</changelog>
</package>
<package pkgid="bbe017dad41cfb4492d640ffec2189e4da00c9bb90f550b46b4ad6a5d6585d5de2adc3b94a6212b1ea8a62a176e3a6da8f2bb3a838ff4b59995053bcc1279da9" name="elixir-doc" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="160000.2.3"/>
  <changelog author="alessio.biancalana@suse.com" date="1708776000">- Upgrade to Elixir 1.16.1
- Drop 0001-Use-PID-valid-for-32-bit-systems-closes-12741.patch:
  * Not needed anymore, included in this version
- Drop 0001-Use-PID-valid-for-32-bit-systems-followup-to-12741-1.patch:
  * Not needed anymore, included in this version
- Add 0001-Skip-tests-if-Erlang-compiled-without-docs-closes-13322.patch:
  * Skip some tests if Erlang is compiled without docs</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1710072000">- Upgrade to Elixir 1.16.2:
  * Changelog available at https://hexdocs.pm/elixir/1.16.2/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1716724800">- Upgrade to Elixir 1.16.3:
  * Changelog available at https://hexdocs.pm/elixir/1.16.3/changelog.html
  * 0001-Skip-tests-if-Erlang-compiled-without-docs-closes-13322.patch no longer
    needed</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1718280000">- Upgrade to Elixir 1.17.0:
  * Changelog available at https://hexdocs.pm/elixir/1.17.0/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1718712000">- Upgrade to Elixir 1.17.1:
  * Changelog available at https://hexdocs.pm/elixir/1.17.1/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1720353600">- Upgrade to Elixir 1.17.2:
  * Changelog available at https://hexdocs.pm/elixir/1.17.2/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1726747200">- Upgrade to Elixir 1.17.3:
  * Changelog available at https://hexdocs.pm/elixir/1.17.3/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1734609600">- Add 001-skip-translator-supervisor-test.patch to make the package build correctly
- Pass elixir.spec through spec-cleaner</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1734696000">- Upgrade to Elixir 1.18.0:
  * Changelog available at https://hexdocs.pm/elixir/1.18.0/changelog.html</changelog>
  <changelog author="alessio.biancalana@suse.com" date="1735128000">- Upgrade to Elixir 1.18.1:
  * Changelog available at https://hexdocs.pm/elixir/1.18.1/changelog.html</changelog>
</package>
<package pkgid="5ffdb5d43078854b15181d983ec408e7479de88718007fcc946b6d87510edc5692ce34a50de01100a446549186b7f061ea3e6082769f5057d82827102a3a7628" name="elixir-hex" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="160000.2.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1431172800">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527422400">- Update to version v0.17.7:
  * Bump to v0.7.6-dev
  * Fix ArgumentError when printing http error
  * Warn if using insecure SSL
  * Add support for yellow error messages
  * Move shell functions to separate module
  * Fix typo in 7ab3426
  * Always fetch new registry if it's older than 7 days
  * Include build_tools in package metadata
  * Hex.Shell print
  * Update hex_web
  * Print package metadata smarter
  * Bump to v0.8.0-dev
  * Update changelog
  * Use postgres 9.4 on travis
  * Release v0.8.0
  * Bump to v0.8.1-dev
  * Update publish task docs
  * Warn if registry file is missing when loading deps
  * Fix syntax error
  * Unload hex for test compilation
  * Util =&gt; Utils
  * Print a link to the CoC when publishing packages
  * Add multiple build tools to metadata
  * Add optional requirements for activated dep
  * Release v0.8.1
  * Bump to v0.8.2-dev
  * Send build_tools metadata correctly
  * Update hex_web
  * Sort resolver results
  * Release v0.8.2
  * Bump to v0.8.3-dev
  * add test case for incorrect ca_bit
  * fix invalid ca_bit
  * Clean up SSL tests
  * Move certs to test fixtures
  * Update changelog
  * Release v0.8.3
  * Bump to v0.8.4-dev
  * Be more straight-forward in coc message
  * Fix certificate tests
  * Remove old manifest support
  * Support new SCM.managers
  * Add missing Registry.get_build_tools
  * Make Hex a proper OTP application
  * Update CA store
  * warn if files are missing
  * Cleanup Hex defaults definition
  * Use Application behaviour for Hex
  * Start `:httpc` and set its options in one place
  * Simplify missing files filtering on publish
  * Support elixir master
  * Change API URL to use full path
  * Document environment variables
  * improve locked dep error message
  * Suppress warning in `Hex.Resolver`
  * Introduce "hex.registry" Mix task
  * Add support for offline mode
  * Improve error messages for tar extraction
  * add build task
  * refactor build and publish mix tasks
  * move mix/tasks/hex/utils.ex to mix/tasks/utils.ex
  * Fix crash when missing override
  * Avoid generic Dict when possible
  * HashDict to Map
  * Fix warnings
  * Update changelog
  * Bump to v0.9.0-dev
  * Set correct API url
  * UTF8 encode metadata
  * Only list missing files if files is set by user
  * Don't use deprecated package endpoint
  * Make displayed resolution errors unique
  * Update erlang and elixir version on travis
  * Fix Set implementation decision based on elixir version
  * MapSet =&gt; Set
  * Sort backtrack parents for consistency
  * Fix backtrack parent sorting
  * Update changelog
  * Correct missing registry warning
  * Make hex.outdated task recursive
  * Update `@shortdoc`s to starndardized Elixir format
  * Update `@moduledoc`s to starndardized Elixir format
  * Title case Hex
  * Do not raise on bad data in a users old lock
  * Add support for server name indication
  * Add HEX_UNSAFE_HTTPS for disabling certificate checking
  * Rename :contributors metadata to :maintainers
  * Update hex_web
  * Only use MapSet on Elixir 1.2+
  * Release v0.9.0
  * Bump to v0.9.1-dev
  * Add proxy auth
  * Update release instructions with csv signing
  * Fix proxy config when there is no userinfo
  * Run elixir master with correct OTP release
  * Drop master from 17.5 build matrix
  * Update release instructions
  * Add build versions to hex.info
  * Add compressed registry size to hex.info
  * Avoid loop in resolver backtracking
  * Don't remove all backtrack messages
  * Clean up backtracking logic
  * Track all states we've visited to avoid infinite loops
  * Use local.hex on travis
  * Update config.ex
  * Raise error if package description is missing
  * use Hex.Build to validate description in meta
  * Raise error if any of the required fields are missing when publishing a package
  * Typo fix
  * Remove path spec functions
  * Handle S3 errors better
  * Simplify resolver backtracking with body recursion
  * Merge backtrack messages that only differ in version
  * Run integration tests by default
  * Support elixir master
  * Do not say resolution completed successfully
  * Fix backtrack version sorting
  * Fix indentation
  * Skip cert validation test until we fix it
  * Improve outdated task output
  * add mix hex.owner packages task
  * Fix tests on 1.0.5
  * Fix warnings on elixir master
  * Remove compatibilities with 0.8.3
  * Update certificates
  * Move HexTest.Case to its own file
  * Ensure http proxy authentication is supplied in calls to `:httpc.request`
  * Handle missing requirements and raise on them
  * Remove hex_web dependency
  * Fix outdated task
  * Move mix integration tests to separate case
  * add version number for search output
  * Wait after listening to stdio
  * Clone hex_web in travis tests
  * Fix travis tests
  * Fix failing tests
  * remove test duplication from build and publish task
  * Document hex_web dependency
  * Fix app and package name mix when loading from lock
  * Fix failing tests on elixir master
  * Stop printing "Running dependency resolution"
  * Fix regressed outdated output
  * Suggest adding ex_doc if docs task is missing when running hex.docs
  * Revert "Stop printing "Running dependency resolution""
  * Tweak missing docs task error
  * Fix docs task to actually reraise
  * Change mix hex.info package output
  * Specify Elixir version requirement
  * Do not show the unpacking of a package
  * Correct indentation of Config entry in the info task
  * Fix hex.info tests
  * Separate printing from formatting in the hex.info task
  * Tidy up Hex.SCM
  * Tidy up Hex.Resolver
  * [Solution#172] raises a Mix.Error instead of choking on invalid requirements (only fot hex requirements)
  * Eliminate spaces after [ and before ] in mix_task_test.exs
  * Check versions in Registry before package requirement validation
  * Tidy up Hex.RemoteConverger.prepare_locked/3
  * Show only last 10 releases in hex.info task
  * Eliminate spaces after [ and before ] in every place
  * Tidy up modules purging in tests
  * Refine hex.info task output
  * Improve release samples naming
  * Fix Task.find warning
  * Handle DOWN messages in Parallel
  * Fix bug when umbrella child has dependency with :only
  * Handle crashing parallel task
  * Only warn on missing dependency requirement
  * Update changelog
  * Print OTP version hex.info task
  * Remove "v" prefix from all versions
  * Release v0.10.0
  * Bump to v0.10.1-dev
  * Fixed typo: Hex.shell =&gt; Hex.Shell
  * Add release script
  * Upload releases to /installs
  * Release v0.10.1
  * Bump to v0.10.2-dev
  * Optimize down_to to return only the overridden_parents map
  * Add Version cache
  * Calculate top_level once
  * Reduce memory pressure from storing backtracks
  * Clean up some resolver code
  * Add experimental backtracking resolver
  * Start Version ets table directly in supervisor
  * Merge backtrack messages with similar parents
  * Try converting lists of versions to ranges
  * Remove "From" from backtrack messages
  * Run hex_web with custom elixir and OTP version on travis
  * Release v0.10.2
  * Bump to v0.10.3-dev
  * Do not include deps that are not part of the tree
  * tests(Hex.Mix): add tests for flatten_deps
  * tests(Hex.Mix): add tests for overriding dependencies
  * Release v0.10.3
  * Bump to v0.10.4-dev
  * Catch an empty search result
  * Move lookup_packages definition to the end of file
  * Only backtrack on the parent where requirement failed
  * Ensure parent versions are unique after merging
  * Fix merging of overlapping parent and package versions
  * Ensure registry can be opened/closed multiple times
  * Make experimental resolver the default
  * Release v0.10.4
  * Bump to v0.10.5-dev
  * Append the OTP version to the user_agent function
  * Fix errors raised on invalid version
  * Ensure integration tests pass against hex_web
  * Only compare against built minor version
  * use the included otp_release function
  * Fix stdout printing from hex_web
  * Fix elixir 1.3.0-dev warnings
  * Fix loop when backtracking in resolver
  * Optimize memory usage of state tracking
  * Increase Agent timeouts
  * Improve http request timeout errors
  * Warn on non-supported dependency options
  * Add --pre flag to hex.outdated, default to false
  * Use erlang binary term encoding
  * Use correct package name when publish docs
  * Pass canonical url to ex_doc
  * Use https for hexdocs
  * Add mix hex.outdated APP
  * Emulate Version.match? :allow_pre
  * Don't emulate :allow_pre when available
  * Fix build for OTP 17.5 and Elixir master
  * Do not use with, older elixirs are supported
  * Add Hex.Registry.all_packages/0
  * Optimize version cache memory usage
  * Extract ets registry to allow for multiple implementations
  * Update certificates
  * Update changelog
  * Do not use Mix.Dep struct inside resolver
  * Add missing registry callbacks
  * Explicitly open registry and clean pdict
  * Release v0.11.0
  * Bump to v0.11.1-dev
  * Fix update hex warning
  * Fix parsing of requirements without spaces
  * Release v0.11.1
  * Bump to v0.11.2-dev
  * Show local time in hex.info
  * Return headers from API.request
  * Verify registry signature
  * Fetch bypass from git
  * Add hex.public_keys remove
  * Improve missing registry error message
  * Fix deps.update unlock regression
  * Warn on HEX_CDN deprecation
  * Fix if-none-match on fastly
  * Disable pipelining for fastly
  * Tweak performance for faster CDNs
  * Clean up some task args
  * Add hex.config key --delete
  * Improve HEX_CDN deprecation message
  * Change over to fastly
  * Fetch registry if it's missing or known to be old
  * Release v0.11.2
  * Bump to v0.11.3-dev
  * Set cache metadata in release script
  * Do not crash if registry fails to fetch
  * Remove force update of registry if older than a weel
  * Remove redundant :update option to ensure_registry
  * Fix clause order in signature_fetch_fail
  * Fix hex version warnings on travis
  * Fix :socket_closed_remotely error on travis
  * Release v0.11.3
  * Bump to v0.11.4-dev
  * Correctly show update notification
  * Raise in hex.info if registry failed
  * Use https to fastly
  * Improve config documentation
  * Clean up unneeded variable and remove extra spaces
  * Clean up inconsistencies
  * Remove duplicate parents from backtrack messages
  * If latest is a pre-release include them
  * Prepare for lock changes
  * Update changelog
  * Release v0.11.4
  * Release v0.11.5-dev
  * Measure fetch and load time for registry
  * Only print update message once per run
  * Add more registry data to hex.info
  * Fix some missing future-proofing of lock
  * Fix interactive staging error
  * Fix interactive staging error
  * Update changelog
  * Release v0.11.5
  * Bump to v0.11.6-dev
  * Add checksum to lock
  * Align deps fetching output from scm
  * Bump to 0.12.0-dev
  * Add managers and deps to lock
  * Use custom domain for hex.pm repo
  * Link to policies when registering account
  * Fix compilation errors on elixir master
  * Merge subsets of parents on conflict messages
  * Improve conflict messages
  * Revert "Merge subsets of parents on conflict messages"
  * Remove custom parent sorting
  * update code of conduct links
  * Update docs.ex
  * Removed redundant usage "against" in warning (#228)
  * Fix unsafe_https config
  * Show app name of dependency in hex.info
  * Warn about long package descriptions (#230)
  * Update changelog
  * Release v0.12.0
  * Bump to v0.12.1-dev
  * Fix changelog language
  * Fix release script
  * Fix tests against updated hex_web
  * Fix some TODOs
  * Fix crash for multiple backtrack messages
  * Add script for making new rebar releases
  * Only show proxy settings when MIX_DEBUG=1
  * System.exit =&gt; System.halt
  * Add retries to idempotent requests
  * Release v0.12.1
  * Bump to v0.12.2-dev
  * Inform about new Hex version in mix hex.info
  * Further add missing to_string in backtrack messages
  * Add elixir 1.2.6 to release script
  * Unload unpacked archives
  * Try to fix travis errors
  * Fix build on v1.2.1 (#236)
  * Fix spelling of "registry" and deindent lines
  * Fix Elixir 1.4 warnings
  * Fix some Elixir 1.4 warnings (#237)
  * Added extra meta field for package (#234)
  * Improve task shortdocs (#238)
  * Print checksum when building and publishing
  * Fix Hex.Tar.create usage (#239)
  * Do not use global state in resolver
  * Warn if using registry from cache
  * Move table code to utils for sharing
  * Show creation time of API keys
  * Fix no backtrack output from resolver
  * Fix some warnings
  * Check for broken SNI in :ssl app
  * Pipeline http requests
  * Verify dependencies from registry against lock
  * Update travis build matrix and use elixir 1.3 for hex_web
  * Install rebar on travis for hex_web deps
  * Update deps and use rebar3 for erlang deps
  * Install rebar3 for hex also
  * Encrypt local API key (#244)
  * No longer support elixir configs
  * Default to rebar3 build tool instead of rebar2
  * Don't base16 encode salt
  * Mention overrides and pre-releases in resolver error
  * Base16 encode cipher and salt in config
  * Simplify pbkdf2 guards
  * Improve error message if invalid dep config in registry
  * Fix encrypted key base16 encoding case
  * Remove encrypted key and salt when deauthing
  * Downcase checksum when a package is published
  * Add tests for Hex.Tasks.Hex
  * Add tests for mix hex.owner packages
  * Fix key test after HTTP API changes
  * Add workaround for prune_deps in Elixir 1.4-dev
  * Add docs for mix.hex config KEY --delete (#260)
  * Provide Mix tasks for fetching and opening docs (#245)
  * Default to "mix" as build tool
  * Admins will not revert your package
  * Ask for credentials later when publishing
  * Map.new not available on older Elixir versions
  * Add KeyManager and ContentEncryptor to handle encryption of api key (#255)
  * Color hex_web output blue in tests
  * Use MIX_NO_DEPS in tests
  * Use elixir v1.3.2 on travis
  * Support for revocation of all keys and removal from local config (#256)
  * Password =&gt; passphrase for encrypted API key
  * Add mix hex.user passphrase task
  * Indent by four spaces instead of using backticks in docs
  * Fix dangling }
  * Fix message when encrypting API key after registering
  * Indent all task examples
  * Verify certificate against correct hostname after redirect
  * Bump to v0.13.0-dev and update changelog
  * Remove all references to Dict (which is deprecated) (#266)
  * Disable all certificate validation tests
  * Improve messages after successful publish
  * Add status messages when publishing and reverting
  * Test repo is scoped under /repo
  * Set :canonical correctly when calling ex_doc
  * Start Hex in docs task
  * Fix progress newlines output
  * Revert back to rescuing docs task
  * Do not show table when app do not have Hex deps (#275)
  * List root dependencies in umbrella projects (#276)
  * Release v0.13.0
  * Bump to v0.13.1-dev
  * Convert all warnings when building a pkg on errors (#277)
  * Add test for hex.outdated in umbrella projects (#278)
  * Fix error message (#280)
  * Avoid to handle `error` as extra argument in functions (#281)
  * Revert "No longer support elixir configs"
  * Read elixir configs and update to new format
  * No need for explicit ending :reset with IO.ANSI.format/1
  * Hex.Build refactoring (#286)
  * Improve printing in Hex.Outdated task
  * Rename table/2 –&gt; print_table/2 in Mix.Hex.Utils
  * Tidy up helper functions for Mix.Hex.Utils.print_table/2
  * Remove unnecessary !! operation, and use better variable name
  * Negating HEX_UNSAFE_REGISTRY value #285 (#287)
  * Release v0.13.1
  * Bump to v0.13.2-dev
  * Only error on non-Hex deps when building
  * Release v0.13.2
  * Bump to v0.13.3-dev
  * Remove csv files
  * Adding --offline option to hex.docs open (#292)
  * Modify hex docs.open to fetch docs if not present locally (#293)
  * Polish the deprecation message in "mix hex.docs" (#294)
  * Rename is_missing –&gt; missing? in hex.docs task
  * Update certstore
  * Fix task error consistency issues
  * Fix task tests
  * Only support secure ciphers
  * Do not generate duplicate build tools
  * Fix location of generated html files (#301)
  * Use longer password in tests
  * Fix test/mix/tasks/hex/user_test.exs
  * Improve tests against hex_web
  * Use new hex_web auth test endpoint
  * Add slack notification to travis
  * Add registry v2
  * Persist ETS cache
  * Update plug
  * Improve resolver error messages
  * Add hex version checking for registry v2
  * Try to avoid httpc race conditions in tests
  * Fix prefetch crash
  * Bump to v0.14.0-dev
  * Fix consistency in hex.docs task docs
  * Escape atoms in mix hex.info config example
  * Fix warnings for all Elixir versions
  * Version.parse! =&gt; Version.parse for version compatability
  * Fix mix.lock for older Elixir versions
  * Remove dialyzer attributes for OTP 17 compatability
  * Fix table printing in hex.search task
  * Do not drop managers from lock
  * Remove leftover IEx.pry
  * Store managers in manifest
  * Fix master rebase issues
  * Add private task for manually installing hex
  * Check for updates in hex.info task
  * Hard code some hex.pm website links
  * Add error messages for registry fetch failures
  * Also preload from old lock
  * Do not document canonical URL
  * Fix failing owner test
  * Do not support SSLv3
  * Fix hex.docs docs
  * Update changelog
  * Fix managers in lock for already fetched deps
  * Release v0.14.0
  * Bump to v0.14.1-dev
  * Use proper URLs for links in tests
  * Fix elixir 1.0.x compatibility (#307)
  * Make sure we guess unique build tools
  * Handle nil build_tools
  * hex.docs now opens with xdg-open for non OSX unix systems (#311)
  * Prepend csv on release
  * Fix hex.install task
  * Do not crash on diverged deps with conflicting SCMs
  * HTTP should time out before GenServer
  * Persist cache after remote converger
  * Fix duplicate requests on slow networks
  * Fix duplicate update checks
  * Optimize cipher filtering
  * Add Hex.Set.new/1
  * Limit concurrent registry http requests
  * Fix Hex.Set.new for older Elixir versions
  * Update changelog
  * Release v0.14.1
  * Bump to v0.14.2-dev
  * Build hex-1.x.csv in correct order
  * Restore including latest version with hex.search (#324)
  * Do not make conditional HTTP request if file is missing
  * Fix elixir warnings
  * Clean up crypto code
  * Fix some code style issues
  * Add --module flag to hex.docs task (#316)
  * Changed hex.outdated to show if a dependency can be updated (#323)
  * Fix crypto compatibility on older OTP versions
  * String.trim =&gt; Hex.string_trim
  * Fix bit_size_to_cipher
  * Don't use with for older Elixir versions compatability
  * Restart registry server for tests
  * Add hex.retire task
  * Warn on retired packages
  * Show retirements after resolution completes
  * Fix OTP17 compilation of gpb files
  * Parent =&gt; Source in hex.outdated
  * Ensure ets cache file is saved before exiting
  * Bump to 0.15.0-dev
  * Improve wording for changelog message about retirement
  * Restrict default SSL ciphers
  * Release v0.15.0
  * Bump to v0.15.1-dev
  * Fix spelling
  * Remove unnecessary hex.install doc comment
  * Remove cache.ets file if it's broken
  * Reduce nested code in some functions (#336)
  * Normalize usage of one pipe per line (#337)
  * Move hex.key tasks to hex.user (#334)
  * Fix README to correctly say HEXWEB_PATH and add hint to error (#339)
  * Improve hex task docs
  * Use Elixir v1.4.0 for hex_web tests
  * Removed unused in_fixture macro (#338)
  * Clean up config &amp; document it consistently (#343)
  * Do not check for updates when running in offline mode (#342)
  * $ prefixed config keys are reserved
  * Initial multi repo support
  * Fix repo purging when URL changes
  * Add hex.repo docs
  * Add plataformatec's credo config
  * Use manual matchspecs to fix build on older elixir
  * Ensure hex.repo list works
  * Move Mix.* modules to Mix.Tasks.Hex
  * Remove Hex.API.Utils
  * Document repo overrides
  * socket_closed_remotely issue fixed on hex_web
  * Add tests for mix hex.repo
  * Tweak credo config
  * Support multiple repos in tests
  * Test multiple repo resolution
  * Support implicit repo overrides
  * Try to fix Registry.Server race in test
  * Always use given registry in resolver
  * Revert back to backwards-compatible lock
  * Improve performance of overridden_parents/3
  * Provide information how to reset passphrase on mismatch
  * Do not publish docs if publishing package failed
  * Add manual timeouts for httpc with Task.async
  * HTTP refactor
  * Disable moduledoc credo check
  * Move lib/mix/tasks/hex/* -&gt; lib/mix/tasks/hex.*
  * Rename hex_web -&gt; hexpm
  * Adjust .travis.yml for old hex.pm repo
  * Fix .travis.yml
  * Update .travis.yml
  * Final name change HexWeb =&gt; Hexpm
  * Bring back shorter `mix help hex` docs
  * Indent command in docs
  * Fix managers missing from lock
  * Remove parse_transform
  * Use present continuous in @moduledoc summaries and @shortdocs
  * Add better error message when repo is not configured
  * Throw error if publishing a non-pre package that has pre-dependencies (#333)
  * Fix travis builds
  * Update .credo.exs for Credo 0.7
  * Use phx.server for hexpm
  * Add test for publishing with metadata
  * Use Mix.Dep.loaded/1 to check for deps
  * Update certificates
  * Update changelog
  * Use safe_binary_to_term
  * Release v0.16.0
  * Bump to v0.16.1-dev
  * Add hex.repo subtask to show repo config (#373)
  * Updated docs to match tests code
  * Do not publish docs if package publish failed
  * More granular lock files updates (#372)
  * Hide basic authentication password from the message.
  * Fix reset password
  * Remove :named_table from backtracks ets
  * Enum.filter_map is deprecated
  * Error if requirement doesn't match
  * Fix skipping integration tests (#387)
  * Separate update check from registry server
  * Do not close server until pending requests are done
  * Show `mix hex.user passphrase` when doing `mix hex.user`
  * Nicer error message for `mix hex.user key`
  * Vendor erl_tar from OTP20
  * Vendor filename:safe_relative_path/1
  * Avoid creating PAX tarballs
  * Fix registry persist on older Elixir versions
  * Update travis build matrix for new versions
  * Set tar mtimes to 0 and remove dependency on :os.system_time/1
  * Add hex.audit (#381)
  * Code cleanup
  * Update certificates
  * Update changelog
  * Release v0.16.1
  * Bump to v0.16.2-dev
  * Update changelog
  * Clarify that only Hex deps are resolved (#398)
  * Vendor Version exceptions from Elixir
  * Don't use reserved package name in tests
  * [publish] use html_url from API response when publishing a package
  * [publish] make publish test less hacky by using pattern matching
  * Remove unused Hex.Utils.hex_package_url/1,2
  * Fix hex.search test race
  * Make html_url optional (#401)
  * [hex.search] use package html_url (#400)
  * Fallback to url when html_url is nil
  * Preserve modes when building tarball (#405)
  * Add dependency repository to package metadata (#406)
  * Fix test on travis
  * Fix typographical error (#408)
  * Move api_url and api_key to repo config
  * Add test for hex.repo --api-url
  * Add --repo flag to tasks
  * Add :repo package config
  * Use get_repo in more places
  * Add private repo support to hex.repo task
  * Minor clean up
  * Fix Elixir 1.1 compatability
  * Introduce organizations
  * Key remove =&gt; key revoke
  * Add hex.organization task
  * Reduce number of travis builds
  * Print organization when publising
  * Improve error message when docs task is missing
  * Disallow :app option for dependencies
  * Add --confirm flag to mix hex.publish (#402)
  * Fix tests for mix hex.publish --confirm
  * Update changelog
  * Use correct repo name for organizations
  * Registry defaults to parent repo
  * Update protobuf files
  * Use MixProject instead of Mixfile in mix.exs files (#409)
  * Handle package documentation mirror response (#410)
  * Use Elixir current version to fetch documentation of built in applications (#411)
  * Use MixProject in missing places
  * Fix OTP17 compilation of gpb files
  * Add repository name to mix deps task output
  * Release v0.17.0
  * Bump to v0.17.1-dev
  * Add tasks for authenticating on CI servers
  * Improve error message for missing package
  * Improve error message when package-version does not exist
  * Release v0.17.1
  * Bump to v0.17.2-dev
  * Increase publish timeouts and make it configurable
  * Fix http_timeout config name
  * Clarify where package is published to
  * Clarify hex.organization manual key handling
  * Test repository key when adding it
  * Remove pre-release publish restriction for private packages
  * Fix typographical errors (#414)
  * Add description to hex.search task (#415)
  * Improve error message when couldn't find matching version (#418)
  * Strict option parsing (#419)
  * Add "integration" tag to hex.organization_test.exs (#422)
  * Add function head so connection error does not result in a FunctionClauseError (#423)
  * Escape owner email address when adding or deleting an owner. (#421)
  * Do not crash if failing to write tar
  * Remove HTTP pipelining
  * Use configured HTTP timeout
  * Also purge registry etags when repo changed
  * Write changes to default repo to config correctly
  * Improve messaging when misconfiguring package
  * URI.encode everything
  * Convert package name to string
  * Mention HEX_HOME in `mix help hex.config` docs
  * Add a column to hex.search output showing stable version (#431)
  * Retry http request on socket_closed_remotely
  * Improve CHANGELOG style against mardownlint (#432)
  * Include metadata.config in deps (#433)
  * Fix Hex.TarTest for older Elixir versions
  * Clarify repository key read-only access (#434)
  * :name is valid in project config
  * Warn if detecting newer lock entry (#438)
  * Reject packages defining :system_env (#442)
  * Fix system_env check
  * Add mix hex.build --smoke (#437)
  * Run formatter on lib/mix/tasks/hex.build.ex
  * Include dot files when expanding file paths (#440)
  * Make minor doc rewording to Mix.Tasks.Hex{Build,Publish} (#443)
  * Fix smoke tests
  * Set exit code and improve hex.build --smoke tests
  * Fix tests on Elixir versions
  * Preserve symlinks and empty directories in tar
  * Do not set mtime for directories/symlinks
  * Fix tar mtime tests
  * Vendor File.lstat/2 for Elixir 1.0 compatability
  * Remove docs for old task: mix hex.user test (#445)
  * Authenticate hex.search http requests (#446)
  * Populate managers when getting deps (#426)
  * Check deps on hex.audit &amp; hex.publish (#449)
  * Fix crash on managers check (#451)
  * Make repository more prominent in hex.publish output (#450)
  * Simplify Hex output on deps.get #454 (#457)
  * Refactor checksum verification
  * Move registry checksum verification out of Hex.Tar
  * Replace build --smoke with build --unpack
  * Allow to set output tarball path
  * Add build --output
  * Add docs
  * Clean up output path before unpacking to avoid warning
  * Add Hex.Shell.debug/1 used with MIX_DEBUG=1 (#461)
  * List umbrella child top level deps in hex.outdated (#464)
  * Revert "Clean up output path before unpacking to avoid warning"
  * Clarify warning
  * Update Hexpm Elixir &amp; OTP version on Travis (#470)
  * Include formatter in default hex.build
  * Add note about updating lock in SCM
  * Fix registry_etag cache entry removal
  * Remove unnecessary use GenServer
  * Update repository key name
  * Fix parallel fetcher for overriding private packages
  * Fix grammatical error in documention in hex.retire (#475)
  * Fix handle_redirect to match calling arguments (#473)
  * Improve unauthed organization error
  * Redesign Hex.Tar (#467)
  * File.ls may be unsorted
  * Prompt for authenticating user (#477)
  * Deauth organizations when deauthing user (#478)
  * Replace Hex.Set with Enum.uniq
  * Remove passhprase for local/account password (#479)
  * Make gzip reproducible (#484)
  * Alerts if a package has been retired in hex.info (#482)
  * Change config encrypted_key =&gt; $encrypted_key (#485)
  * Also auth organizations when authing user (#483)
  * Display package html url in `mix hex.owner packages` (#486)
  * Color retired package yellow in mix hex.info PACKAGE (#487)
  * Improve bad organization key error
  * Build against latest stable Elixir
  * Update changelog
  * Release v0.17.2
  * Bump to v0.17.3-dev
  * Prevent empty package["meta"]["description"] to crash search (#488)
  * Base16 encode checksum before printing (#489)
  * Release v0.17.3
  * Bump to v0.17.4-dev
  * Fix wrong publish message when using --organization flag in hex.publish  (#492)
  * Fixes misspelling in hex.organization documentation (#493)
  * Changes a grammatical error. Revokal is not a valid word. (#495)
  * Allow setting file_info opts on :hex_erl_tar.add
  * Set atime/mtime/ctime to 2000-01-01 so that tar works on FAT
  * Run elixir formatter (#497)
  * Do not show retired releases in hex.info (#500)
  * Adds offline and online tasks to clarify open flags (#503)
  * Handle `--module` in `hex docs.offline`
  * Instead of hex.docs online opening browser, test env sends message to… (#505)
  * Add --key-name flag (#510)
  * Adds organization to downloaded docs path (#509)
  * Minor cleanup
  * Update hex.repo task error message (#513)
  * Make docs project aware (#508)
  * Revert "Changes references to organization to repo for clarity"
  * Raise error when trying to create too big tarballs
  * Make format_error/1 re-usable between creating and unpacking tarballs
  * Fix bug: do not encode checksum in error tuple
  * Change order of missing/unknown keys to make it more testable
  * Refactor Hex.TarTest
  * Refactor test
  * Run formatter
  * Move file timestamps assertions into separate test
  * More Hex.TarTest refactoring
  * Use repo.hex.pm in .travis.yml (#517)
  * Add :exclude_patterns to hex package options (#512)
  * Improve exclude_patterns test
  * Backtrack children before parents (#522)
  * Fix hex.docs open on Windows (#524)
  * Vendor hex_erl (#518)
  * Fixes documentation in hex.repo task (#528)
  * Prevents error when unauthenticated user authenticates while publishing (#519)
  * Vendor hex_pb_*
  * Use hex_registry
  * Different error message for non-hexpm key verification error
  * Update hex_erl
  * Use vendor.sh
  * Use correct version of hex_erl
  * Windows tests (#526)
  * hex.info documentation fix (#538)
  * Fix --organization flags (#511)
  * Format code
  * Convert some errors to warnings for organizations
  * Updates search --org test (#543)
  * Groups deps into unchanged, updated, and downgraded (#535)
  * Created -&gt; New
  * Add authentication to hex.docs (#542)
  * Add colors back into tests. (#544)
  * Show more detailed message when fetch times out (#546)
  * Update OTP and Elixir versions
  * Update certificates
  * Release v0.17.4
  * Bump to v0.17.5-dev
  * Fix crash when printing resolver output for old lock files
  * Release v0.17.5
  * Bump to v0.17.6-dev
  * Fix crash when printing resolver output when having lock entries from other SCMs
  * Release v0.17.6
  * Bump to v0.17.7-dev
  * Update hex_erl
  * Update hex_erl, closes #550
  * Update hex_erl. #550
  * Update release instructions
  * Release v0.17.7</changelog>
  <changelog author="g.santomaggio@gmail.com" date="1542196800">- Update to version v0.18.2:
  * Add checks before publishing docs
  * Update generated protobuf files for Registry with OTP 21 compatibility
  * No longer list tasks in mix hex task
  * Use hexdocs organization URLs
  * Adds --dry-run option to publish tasks
  * Do not print "Unchanged" dependencies on mix deps.get in green
  * Validate hex config keys
  * Add c_src/ and Makefile to default package files
  * Publish Mix task docs on https://hexdocs.pm/hex
  * Add recommendation when retiring and require --message flag
  * Fix Use rebar3, not rebar, when guessing build tool
  * Fix  issue saving write key when reseting local password
- Update to version v0.18.1:
  * Fix normalization of repo paths when authenticating organization
- Update to version v0.18.0:
  * Add --yes flag to hex.publish for publishing without any confirmation prompts
  * Add HEX_API_KEY environment variable for setting and overriding the key used when authenticating against the API
  * Generate a single key for all organization repositories when authenticating a new user
  * Return a non-zero exit code from hex.outdated when dependencies are outdated
  * Generate two API keys when authenticating, one encrypted with write access, and one unencrypted with only read access
  * Add ownership levels to hex.owner task
  * When resolving, try all possible backtrack branches and select the best solution
  * Improve formatting of multi-line validation errors
  * Do not use :maintainers package configuration field
  * Change hex.organization to generate keys owned by organization instead of the user generating them
  * Add options to hex.organization key for revoking and listing keys owned by organization
  * Improve interface for hex.user key and hex.organization key,
  * Full release notes: https://github.com/hexpm/hex/releases/tag/v0.18.0
- Update to version v0.17.8:
  * Fix private packages on Windows</changelog>
  <changelog author="jbreuer@suse.de" date="1608033600">- Update to version v0.20.5:
  * Release v0.20.5
  * Missing outer checksum is not a mismatch
  * Handle missing outer checksum when formatting lock
  * Warn if fetching registry without outer checksum
  * Optionally encode outer checksum in manifest
  * Bump registry cache version
  * Add timestamps to registry cache
  * Bump to v0.20.5-dev
  * Release v0.20.4
  * Add Elixir 1.10.0 to CI (#746)
  * Vendor hex_core v0.6.8 (#745)
  * Bump to v0.20.4-dev
  * Release v0.20.3
  * Handle old manifest files (#743)
  * Format
  * Fix deprecated warning
  * Fetch latest (#742)
  * Remove Travis CI
  * Uncomment upload
  * Bump to v0.20.3-dev
  * Release v0.20.2
  * Format
  * Add new Elixir versions to release script
  * Fix deprecation warning
  * Fix compatibility with OTP 17 and 18
  * Vendor hex_core v0.6.6
  * Explain red colors in hex.outdated
  * Add GitHub CI
  * Add logging to Hex.Parallel
  * Fix tests on Elixir 1.10
  * Fix ANSI encoding in test
  * Fix Hex.debug?() on old Elixirs
  * Change publish docs message on non-default api_url (#730)
  * Change publish package message on non-default api_url (#729)
  * Add `cacerts_path` config option (#727)
  * Raises when the metadata files list is empty (#728)
  * Fix reproducible checksum (#726)
  * Include :files meta in tests
  * Add outer checksum (#708)
  * mix format
  * Fix HTTP timeout config
  * Add --output option to mix hex.package fetch (#703)
  * Sets ansi_enabled? based on setting in IO for non-test envs (#712)
  * Use Elixir 1.9 and OTP 22 on CI
  * Backtrack parents first
  * Backtrack yourself before parents
  * Fix code block in docs
  * Update RELEASE.md
  * Bump to v0.20.2-dev
  * Release v0.20.1
  * Do not print transfer message when not transferring
  * Revert "Do not print ownership transfer message when not transferring"
  * Do not print ownership transfer message when not transferring
  * Update lib/mix/tasks/hex.package.ex
  * Fix release.sh
  * Bump to v0.20.1-dev
  * Release v0.20.0
  * Update v0.20 changelog (#700)
  * Verify fetched tarballs (#701)
  * Add --organization option to `mix hex.package` (#699)
  * Add `mix hex.package diff VERSION1..VERSION2` (#698)
  * Print error message on invalid config (#685)
  * Add mix hex.owner transfer task
  * Fix hex.config to use public keys instead of internal
  * Fix Hex.State to use config spec
  * Map.size/1 =&gt; map_size/1
  * Hex outdated app for umbrella (#689)
  * Supersimple/allow hex api config (#663)
  * Documents the maximum package and documentation size (#688)
  * Test on Elixir 1.8.1
  * Remove broken error handling
  * Add mix hex.package task  (#684)
  * Remove the tarball on errors (#681)
  * Show subtasks in mix hex task (#679)
  * Bring back listing Hex tasks in `mix hex` (#666)
  * show a message when dependencies may contain breaking changes (#677)
  * Add saved to location after build (#673)
  * Fix old-style mix.lock support (#668)
  * Suggest `runtime: false` for ex_doc dependency [ci skip] (#671)
  * Improve revert docs (#670)
  * Add per-project Hex configuration (#665)
  * Adds support for mirror_url config (#658)
  * Bump to v0.19.1-dev
  * Release v0.19.0
  * Update changelog (#655)
  * Fix repo name check for organizations
  * Update to hex_core v0.4.0 (#651)
  * Format
  * Adds organization to config when passing org flag into hex.info (#654)
  * Format code
  * Fix resolver backtrack performance
  * Filter pre-releases before merging backtracked versions
  * Clarify cache message
  * Remove honor_cipher_order
  * Fix registry record deprecation error message (#652)
  * Error when fetching outdated registry record (#650)
  * Fix fetching :repos_key, closes #649
  * Print publisher in `mix hex.info PACKAGE VERSION` (#647)
  * Warn when fetching outdated registry record (#648)
  * Verify authenticity of signed payload (#646)
  * Make it explicit wer're running hex_core v0.2.1
  * Update `mix hex.config` moduledoc (#645)
  * Changes hex.config to output all config settings and where they are derived from (#644)
  * Store source of value in Hex.State (#643)
  * Update hex_core
  * Error with a descriptive msg when building a package with git deps (#636)
  * Don't follow symlinks when adding files to tarballs (#634)
  * Update hex_core
  * Refactor create docs function to use  :mix_hex_tarball.create_docs (#620)
  * Bump to 0.18.3-dev
  * Release v0.18.2 (#626)
  * Add recommendation when retiring and require --message flag (#623)
  * Consider :organization in build deps
  * Update hex.pm link on `mix hex`
  * Remove `mix run scripts/task_docs.exs` from release instructions
  * Ignore /doc
  * Most of Hex is private API (#625)
  * Format code
  * Remove "v" prefix version cleaning
  * System.cwd!/0 =&gt; File.cwd!/0 (#622)
  * Check :repo for dep equality in SCM
  * Add c_src and Makefile to default package files
  * Validate hex config keys (#618)
  * Color upgrade/downgrade messages (#616)
  * Changes the email or username arg to a single string
  * Updates hex.owner documentation
  * Update hex_core (#609)
  * Mention `mix hex.build --unpack` option (#610)
  * Adds dry run option to publish tasks (#608)
  * Hexpm.Repo -&gt; Hexpm.RepoBase
  * Update links in register message (#602)
  * Fix issue saving write key when reseting local password (#603)
  * Fix deps warnings (#600)
  * Use hexdocs organization URLs
  * Fix hex.outdated deps check
  * Fix top_level_deps for older Elixir versions
  * Vendor Mix.Project.apps_paths for older Elixir versions
  * Update Elixir and OTP on travis
  * Do not list tasks in mix hex task
  * Transfer copyright to Six Colors AB
  * Use less private Mix API
  * Format with () for nullary function calls
  * Use https on travis
  * Update hex_erl
  * Always filter and sort solutions
  * Sort SSL ciphers
  * Rename new =&gt; publish
  * Raise errors when top-level file in package matches semver pattern (#593)
  * Bump to v0.18.2-dev
  * Release v0.18.1
  * Fix organization url normalization
  * Run hex.install task without starting hex
  * Bump to v0.18.1-dev
  * Release v0.18.0
  * Add v0.18 changelog (#585)
  * Use v1.6.6 instead of master on travis
  * Change hex.publish --no-confirm to --yes
  * Improve interface for hex.user and hex.organization key tasks
  * Add organization owned keys
  * Deprecate maintainers field (#582)
  * Bump to v0.18.0-dev
  * Update release instructions
  * Bump to v0.17.9-dev
  * Use - instead of : in paths on Windows (#583)
  * Remove usages of Collectable with a non-empty list collectable (#578)
  * Reverting missing docs is not an error
  * Clarify that package can be removed by hex.publish --revert
  * Improve formatting of multi-line validation errors
  * Fix headings in hex.user docs
  * Format credo config
  * No need to parse args in hex.install
  * Try all backtrack branches and select best solution (#572)
  * Raises an error if the arg passed is not a version (#575)
  * Add ownership level options to hex.owner (#569)
  * Do not rely on 204 responses
  * Fix docs code indentation
  * Remove unneccesary API.User.test/2
  * Split API key into a write and read pair (#560)
  * Adds non-zero exit code when one or more dependencies is outdated (#563)
  * Add single key for all organizations (#559)
  * Rename vendored_hex_* to mix_hex_* (#558)
  * Update hex.pm task docs on release
  * Add HEX_RESOLVE_VERBOSE mode for always printing backtracks
  * Clarify difference between encrypted and unencrypted API keys
  * Remove repo from deps map
  * Add support for unencrypted API keys (#553)
  * Remove unused offline? field
  * Use maps for tracking dependencies
  * Remove regex usage (#556)
  * Change confusing negation in resolver
  * Update release instructions
  * Documents the --no-confirm flag (#555)
  * Bump to v0.17.8-dev</changelog>
  <changelog author="mvetter@suse.com" date="1651579200">- Update to version v1.0.1:
  * Release v1.0.1
  * Fix OTP compatibility (#934)
  * Bump v1.0.1-dev
  * Release v1.0.0
  * Remove retire warning (#929)
  * Error if building packge with app: false dependency (#928)
  * Add support for reading credentials from .netrc files (#925)
  * Disable OTP master on CI (#927)
  * Fix OTP deprecation warnings (#926)
  * Fix missing yes?/2 callback warning
  * Add scripts directory
  * Validate oss licenses (#915)
  * Exit with 1 when hex fails to publish package (#912)
  * Ensure internal timeout check is hit before external
  * Ensure package names are unique in tests (#913)
  * Fix resolver of top level dependency (#909)
  * Do not fail if could not verify auth key (#911)
  * Update to setup-beam v1.9 (#908)
  * Update release docs
  * Release v0.21.3
  * Add backtrack check based on version requirement (#907)
  * Add overridden_deps/1 and remove unnecessary resolver state (#905)
  * fix typo (#904)
  * Print hint if resolver is slow (#900)
  * Check hex timeout (#896)
  * Update Mix task docs (#897)
  * Remove unused function
  * Hide accidentally exposes functions
  * Add mix hex.repo show NAME --key task (#893)
  * Use Elixir 1.12 for checking formatting (#895)
  * Remove rebar3 that is included in the base image (#894)
  * Format
  * Add a tip to run `mix hex.sponsor` if a package with sponsor gets downloaded (#887)
  * Add sample usage to hex.retire moduledoc (#891)
  * Update rebar release script
  * Revert "Mention sponsors when packages with them are fetched (#884)"
  * Mention sponsors when packages with them are fetched (#884)
  * Adds new config: no_short_urls (#881)
  * mix hex.registry: Add updated_at to /names resource (#877)
  * Update hex_core to use high-level registry API (#878)
  * Update release.sh
  * Release v0.21.2
  * Store correct password after confirmation failure (#875)
  * Update CHANGELOG
  * Update ssl opts for host validation on redirect (#874)
  * Use setup-beam@v1.7 (#873)
  * Build of rebar3 and upload for specific Elixir versions (#870)
  * Fix building hex registry, closes #866
  * Fix registry build crash on versions with hyphens (#865)
  * Adds support for `mix hex.package fetch PACKAGE` without version (#861)
  * Update CA store docs (#863)
  * Use erlef/setup-elixir action (#860)
  * Start Hex before building the registry, closes #859
  * Clarify using packages from self-hosted instances
  * Gracefully handle missing hex metadata in sponsor task (#855)
  * Bump to v0.21.2-dev
  * Release v0.21.1
  * Disallow API writes on ssl-10.2
  * Warn when using ssl-10.2
  * Remove --fetch-public-key from `mix hex.repo set` docs, closes #852
  * Unload hex application to fix compatability between Hex versions
  * Fix {:error, :bad_directory} when installing on Elixir 1.0
  * Fix filenames in release script
  * Bump to v0.21.1-dev
  * Release v0.21.0
  * Show MIX_XDG and HEX_HOME as sources on mix hex.config (#851)
  * Add tests for mix xdg (#849)
  * Document MIX_XDG (#848)
  * Update CHANGELOG.md
  * replaces xdg_config_home and xdg_cache_home with mix_xdg (#841)
  * Fix crypto compatibility for OTP 24 (#847)
  * Introduce Hex.Crypto.hmac/3 function (#845)
  * Re-fetch package if registry checksum changed (#843)
  * Fix mix hex.install (#842)
  * handle no_proxy edge cases (#840)
  * Add `mix hex.registry` build (#836)
  * Fix leaking of test config into global config (#837)
  * Add :integration tag to IntegarationCase
  * Vendor hex_core v0.7.1
  * Add missing hex_core file
  * Update CHANGELOG.md
  * Raise error for sponsor task when outside Mix project (#832)
  * Add `mix hex.sponsor` (#827)
  * Add `mix hex.package diff APP VERSION` (#819)
  * Update CI badge (#831)
  * Fix build by not linking the process that starts the server
  * Simplify setting up hexpm once for integration tests
  * Add HexTest.IntegrationCase that starts hexpm on demand (#830)
  * Update hex.config.ex
  * rm lib/.DS_Store
  * Clarify `mix hex.publish --revert` docs (#826)
  * Support no_proxy environment variable (#818)
  * Test against elixir master (#825)
  * Update CI
  * Fix flaky divergereq test (#823)
  * Update CHANGELOG
  * Use docker images for Hex release (#822)
  * Bump to v0.21.0-dev and update changelog
  * Update release.sh for Elixir v1.11
  * Vendor hex_core v0.7.0
  * Fix warning
  * non-zero exit when package or release are not found (#817)
  * do not unpack tarball when flag is not passed (#816)
  * Add `--fetch-public-key FINGERPRINT` to `mix hex.repo add` (#814)
  * Revert "Support TLS 1.3"
  * Support TLS 1.3
  * Add `--within-requirements` flag (#765)
  * Use tarball outer checksum to check cache freshness (#812)
  * Add note about updatable packages to hex.outdated task
  * Always add *.DS_Store to :exclude_patterns (#750)
  * Fix backtracking on single parent (#810)
  * Move functions out of Hex module (#809)
  * Do not pass --canonical to docs task (#808)
  * Use API for dependency config in mix hex.info (#804)
  * Customize hostname check to allow also wildcard certificates (#798)
  * Fix spelling errors (#800)
  * Make `mix hex.package diff` more CLI-friendly (#795)
  * Add --repo flag to mix hex.package task (#791)
  * Updates docs to use main instead of master (#790)
  * Fix documentation updates limitation docs
  * changes 2 columns into 1 status column with 3 possible values (#786)
  * Fix mix hex.repo remove command doc (#785)
  * Document latest branch
  * Fix typo (#783)
  * adds link to diffs page in footer of hex.outdated (#779)
  * mix hex.install is a private take
  * Add ./vendor_hex_core.sh
  * Follow xdg base dir specification (#760)
  * remove reliance on colors for hex.outdated (#775)
  * Clarify publish message around ownership (#773)
  * Add locked version to `mix hex.info &lt;package&gt;`
  * Move application callback (#764)
  * Fix stacktrace warning (#763)
  * Fix order of organizations
  * supports --epub option for opening epub version of docs offline (#755)
  * Fix unused variable
  * Add test for :divergedreq (#757)
  * Fix Hex.Server.should_warn_registry_version?/0 (#754)
  * adds replace option for publish (#734)
  * Removes duuplicate release from publish test
  * Bump to v0.20.6-dev</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1690891200">- Update to version v2.0.6:
  * Release v2.0.6
  * Fix recursive Hex.State call during application start (#982)
  * Bump to v2.0.6-dev
  * Release v2.0.5
  * Default to trusted for already persisted organizations
  * Bump to v2.0.5-dev
  * Release v2.0.4
  * Simplify loading of repos_key config
  * Fix trust lookup for organizations
  * Bump to v2.0.4-dev
  * Release v2.0.3
  * Add trusted_mirror_url config (#956)
  * Remove :ssh application dependency (#977)
  * Fixes for hexpm ecto.load
  * Format
  * Bump to v2.0.3-dev
  * Release v2.0.2
  * Fixes for Elixir 1.15.0 (#974)
  * Remove hex.install private task
  * Bump to v2.0.2-dev
  * Release v2.0.1
  * Fix organization owner prompt during publish (#967)
  * Fix pre-release test
  * Vendor hex_solver v0.2.2
  * Fix mix deps.get
  * Vendor hex_solver v0.2.1
  * Fully remove deps outside of :test env
  * Remove unused function
  * Converge requirements from different sources (#960)
  * Bump to v2.0.1-dev
  * Release v2.0.0
  * lock =&gt; the lock in solver failure messages
  * only: :test deps
  * Update CI (#957)
  * Use hex deps (#955)
  * Add :logger to :extra_applications (#954)
  * Do not override locked deps
  * Fix dependency repo in mix.lock
  * New solver (#953)
  * Fix small typo in `retire` documentation (#952)
  * Bump elixir requirement to ~&gt; 1.5 (#950)
  * Document hex owner.add --level option
  * Fix docs about `repository` permission (#948)
  * Extract common docs to Hex.Package (#945)
  * Bump to v2.0.0-dev (#943)
  * Fix deps on Elixir 1.0 (#942)
  * Retry fetch requests using different inet (#384) - Make IPv6-only/NAT64 work (#940)
  * Add rebar3 build for OTP 22 (#939)
  * Another attempt at fixing opening in browser on Windows
  * Fix opening up docs on Windows, closes #937
  * Bump to v1.0.2-dev</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1700827200">- Cleanup spec file</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1717156800">- Update to version 2.1.1:
  * Release v2.1.1
  * Only filter non Hex overrides from requests (#1030)
  * Bump v2.1.1-dev
  * Release v2.1.0
  * Warn on unknown dependency options (#1027)
  * Document generating package keys
  * Use docs output if set in project's config (#1026)
  * Handle empty package name in mix hex.info (#1022)
  * Improve error message when trying to publish existing package with permissions (#1021)
  * Fix failing test on newer Elixir
  * Do not silently ignore incorrect `mix hex.outdated --sort BY`
  * Provide --sort flag sorting outdated results by status (#1017)
  * Fix building requests from umbrella apps (#1013)
  * Revert Mix changes on app stop (#1015)
  * Update release matrix
  * Update CI matrix and bump Elixir requirement to ~&gt; 1.6
  * Update certs
  * Set exit status on organization.auth failure (#1009)
  * Improve logging of auth issues (#1007)
  * Add disclaimer about loadpaths (#1000)
  * Update Hex.Repo to use hex_core to fetch data (#993)
  * Add rebar3 installs for Elixir 1.14.5 &amp; 1.15.0-rc.0 (#995)
  * Do not close registry server in post_converge (#994)
  * Add (CI) to user-agent
  * Fix HEX_TRUSTED_MIRROR_URL name in docs
  * Revert setup-beam tag
  * Convert HTTP module into hex_core adapter (#990)
  * Test erlef/setup-beam with builds.hex.pm (#992)
  * Solve with path and git deps (#989)
  * Bump to v2.0.7-dev</changelog>
</package>
<package pkgid="4069e7d08729f56e16fcc8f818ed4e05cad4e8a0952b24bf6981b3ff191eea6c2ecf464bbbc7d1ae2b4b95d840a1bfeae77f0f63d7095eaae3f37a7034fe1341" name="elk" arch="x86_64">
  <version epoch="0" ver="8.7.2" rel="bp160.1.12"/>
  <changelog author="badshah400@gmail.com" date="1334404800">- Update BuildRequires in keeping with lapack package changes</changelog>
  <changelog author="scorot@free.fr" date="1336737600">- remove conditional BuildRequires for blas and lapack since
  recent lapack now build correctly for all suse version</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1670587200">- Update to version 8.5.10:
  * Improved OpenMP parallelism.
  * Added variables to VARIABLES.OUT which are written on
    completion of geometry optimisation, for example 'engytot
    (geomopt)'.
  * Adjusted several default parameters.
- Drop sources/patches that are no longer used:
  * make.inc.bz2: make.inc is now generated in specfile
  * usefftw3.patch.bz2: upstream make.defs takes care of this
  * Makefile_src.patch.bz2: outdated and not needed any more.
- Switch to multibuild for multiple openmpi flavours, plus non-
  mpi flavour, common data, utilities, etc.
- New BuildRequires: pkgconfig(libxc), pkgconfig(wannier).
- Numerous specfile cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 8.6.7:
  * Added dynamical Born effective charges (dynBEC).
  * Included a dynBEC example of hexagonal boron nitride.
  * Fixed a problem with spin-unpolarised DFT+U calculations.
  * Updated to Libxc version 6.
  * Changed to single-precision orbitals in many routines.
  * Removed the bundled BLAS/LAPACK and FFTPACK libraries.
- Adapt configuration of make.inc to conform to new version.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671537600">- Adjust wannier90-devel dependencies so as to build against its
  correct openmpi flavour and avoid degeneracy between its multiple
  openmpi flavours when installing.
- Add rpmlintrc file to suppress false positives that cannot be
  fixed/worked around:
  * openmpi-libs Requires: necessary for multiple openmpi flavours.
  * Requires: wannier90-devel (or its appropriate openmpi flavour
    in keeping with the first entry of this changeset.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673870400">- Update to version 8.7.2:
  * Fixed problem of writing TDDFT density of states with
    wrtdsk=.false.
  * Fixed problem of restarting from TDDFT backup files.
  * Removed an OpenMP regression which cause substantial slow-down
    of TDDFT.
  * Added more documentation.
  * Minor optimisations and bug fixes.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]</changelog>
</package>
<package pkgid="7babd0ee86ce1957f23c71cf1ba8701da0a822ed70dbc428f44c2a71821faf0f287e6ae99cb70662cdc843ed410d054fb5f6ecc39c681f58788179d827bc84d2" name="elk-data" arch="noarch">
  <version epoch="0" ver="8.7.2" rel="bp160.1.12"/>
  <changelog author="badshah400@gmail.com" date="1334404800">- Update BuildRequires in keeping with lapack package changes</changelog>
  <changelog author="scorot@free.fr" date="1336737600">- remove conditional BuildRequires for blas and lapack since
  recent lapack now build correctly for all suse version</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1670587200">- Update to version 8.5.10:
  * Improved OpenMP parallelism.
  * Added variables to VARIABLES.OUT which are written on
    completion of geometry optimisation, for example 'engytot
    (geomopt)'.
  * Adjusted several default parameters.
- Drop sources/patches that are no longer used:
  * make.inc.bz2: make.inc is now generated in specfile
  * usefftw3.patch.bz2: upstream make.defs takes care of this
  * Makefile_src.patch.bz2: outdated and not needed any more.
- Switch to multibuild for multiple openmpi flavours, plus non-
  mpi flavour, common data, utilities, etc.
- New BuildRequires: pkgconfig(libxc), pkgconfig(wannier).
- Numerous specfile cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 8.6.7:
  * Added dynamical Born effective charges (dynBEC).
  * Included a dynBEC example of hexagonal boron nitride.
  * Fixed a problem with spin-unpolarised DFT+U calculations.
  * Updated to Libxc version 6.
  * Changed to single-precision orbitals in many routines.
  * Removed the bundled BLAS/LAPACK and FFTPACK libraries.
- Adapt configuration of make.inc to conform to new version.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671537600">- Adjust wannier90-devel dependencies so as to build against its
  correct openmpi flavour and avoid degeneracy between its multiple
  openmpi flavours when installing.
- Add rpmlintrc file to suppress false positives that cannot be
  fixed/worked around:
  * openmpi-libs Requires: necessary for multiple openmpi flavours.
  * Requires: wannier90-devel (or its appropriate openmpi flavour
    in keeping with the first entry of this changeset.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673870400">- Update to version 8.7.2:
  * Fixed problem of writing TDDFT density of states with
    wrtdsk=.false.
  * Fixed problem of restarting from TDDFT backup files.
  * Removed an OpenMP regression which cause substantial slow-down
    of TDDFT.
  * Added more documentation.
  * Minor optimisations and bug fixes.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]</changelog>
</package>
<package pkgid="cc70af001ca131e2478a00727abfd30869149d8122a6efb71d70b2d1181761c0886d6a6dc6d4420b82396c2a4eee6844fac9944ed26da8ff3685fabd5754a7a4" name="elk-openmpi4" arch="x86_64">
  <version epoch="0" ver="8.7.2" rel="bp160.1.13"/>
  <changelog author="badshah400@gmail.com" date="1334404800">- Update BuildRequires in keeping with lapack package changes</changelog>
  <changelog author="scorot@free.fr" date="1336737600">- remove conditional BuildRequires for blas and lapack since
  recent lapack now build correctly for all suse version</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1670587200">- Update to version 8.5.10:
  * Improved OpenMP parallelism.
  * Added variables to VARIABLES.OUT which are written on
    completion of geometry optimisation, for example 'engytot
    (geomopt)'.
  * Adjusted several default parameters.
- Drop sources/patches that are no longer used:
  * make.inc.bz2: make.inc is now generated in specfile
  * usefftw3.patch.bz2: upstream make.defs takes care of this
  * Makefile_src.patch.bz2: outdated and not needed any more.
- Switch to multibuild for multiple openmpi flavours, plus non-
  mpi flavour, common data, utilities, etc.
- New BuildRequires: pkgconfig(libxc), pkgconfig(wannier).
- Numerous specfile cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 8.6.7:
  * Added dynamical Born effective charges (dynBEC).
  * Included a dynBEC example of hexagonal boron nitride.
  * Fixed a problem with spin-unpolarised DFT+U calculations.
  * Updated to Libxc version 6.
  * Changed to single-precision orbitals in many routines.
  * Removed the bundled BLAS/LAPACK and FFTPACK libraries.
- Adapt configuration of make.inc to conform to new version.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671537600">- Adjust wannier90-devel dependencies so as to build against its
  correct openmpi flavour and avoid degeneracy between its multiple
  openmpi flavours when installing.
- Add rpmlintrc file to suppress false positives that cannot be
  fixed/worked around:
  * openmpi-libs Requires: necessary for multiple openmpi flavours.
  * Requires: wannier90-devel (or its appropriate openmpi flavour
    in keeping with the first entry of this changeset.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673870400">- Update to version 8.7.2:
  * Fixed problem of writing TDDFT density of states with
    wrtdsk=.false.
  * Fixed problem of restarting from TDDFT backup files.
  * Removed an OpenMP regression which cause substantial slow-down
    of TDDFT.
  * Added more documentation.
  * Minor optimisations and bug fixes.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]</changelog>
</package>
<package pkgid="e2d504772e2c3c37e60f754db85ee7dc9baf979992b1e3f3dc1e49388a54b4d60f4e5427690acce0116f9cfb296dee881a08560d315aa1af9f5b59c572d6c5fd" name="elk-openmpi5" arch="x86_64">
  <version epoch="0" ver="8.7.2" rel="bp160.1.13"/>
  <changelog author="badshah400@gmail.com" date="1334404800">- Update BuildRequires in keeping with lapack package changes</changelog>
  <changelog author="scorot@free.fr" date="1336737600">- remove conditional BuildRequires for blas and lapack since
  recent lapack now build correctly for all suse version</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1670587200">- Update to version 8.5.10:
  * Improved OpenMP parallelism.
  * Added variables to VARIABLES.OUT which are written on
    completion of geometry optimisation, for example 'engytot
    (geomopt)'.
  * Adjusted several default parameters.
- Drop sources/patches that are no longer used:
  * make.inc.bz2: make.inc is now generated in specfile
  * usefftw3.patch.bz2: upstream make.defs takes care of this
  * Makefile_src.patch.bz2: outdated and not needed any more.
- Switch to multibuild for multiple openmpi flavours, plus non-
  mpi flavour, common data, utilities, etc.
- New BuildRequires: pkgconfig(libxc), pkgconfig(wannier).
- Numerous specfile cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 8.6.7:
  * Added dynamical Born effective charges (dynBEC).
  * Included a dynBEC example of hexagonal boron nitride.
  * Fixed a problem with spin-unpolarised DFT+U calculations.
  * Updated to Libxc version 6.
  * Changed to single-precision orbitals in many routines.
  * Removed the bundled BLAS/LAPACK and FFTPACK libraries.
- Adapt configuration of make.inc to conform to new version.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671537600">- Adjust wannier90-devel dependencies so as to build against its
  correct openmpi flavour and avoid degeneracy between its multiple
  openmpi flavours when installing.
- Add rpmlintrc file to suppress false positives that cannot be
  fixed/worked around:
  * openmpi-libs Requires: necessary for multiple openmpi flavours.
  * Requires: wannier90-devel (or its appropriate openmpi flavour
    in keeping with the first entry of this changeset.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673870400">- Update to version 8.7.2:
  * Fixed problem of writing TDDFT density of states with
    wrtdsk=.false.
  * Fixed problem of restarting from TDDFT backup files.
  * Removed an OpenMP regression which cause substantial slow-down
    of TDDFT.
  * Added more documentation.
  * Minor optimisations and bug fixes.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]</changelog>
</package>
<package pkgid="1f7807e507537b13a3766629e2cb056a9ab513de1c68210780298c28d8495b86fd26183c0a854d82ac53048f6a02715bdb1a98c6366117094c3b2f4ffac44494" name="elk-utils" arch="noarch">
  <version epoch="0" ver="8.7.2" rel="bp160.1.12"/>
  <changelog author="badshah400@gmail.com" date="1334404800">- Update BuildRequires in keeping with lapack package changes</changelog>
  <changelog author="scorot@free.fr" date="1336737600">- remove conditional BuildRequires for blas and lapack since
  recent lapack now build correctly for all suse version</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1670587200">- Update to version 8.5.10:
  * Improved OpenMP parallelism.
  * Added variables to VARIABLES.OUT which are written on
    completion of geometry optimisation, for example 'engytot
    (geomopt)'.
  * Adjusted several default parameters.
- Drop sources/patches that are no longer used:
  * make.inc.bz2: make.inc is now generated in specfile
  * usefftw3.patch.bz2: upstream make.defs takes care of this
  * Makefile_src.patch.bz2: outdated and not needed any more.
- Switch to multibuild for multiple openmpi flavours, plus non-
  mpi flavour, common data, utilities, etc.
- New BuildRequires: pkgconfig(libxc), pkgconfig(wannier).
- Numerous specfile cleanups.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671019200">- Update to version 8.6.7:
  * Added dynamical Born effective charges (dynBEC).
  * Included a dynBEC example of hexagonal boron nitride.
  * Fixed a problem with spin-unpolarised DFT+U calculations.
  * Updated to Libxc version 6.
  * Changed to single-precision orbitals in many routines.
  * Removed the bundled BLAS/LAPACK and FFTPACK libraries.
- Adapt configuration of make.inc to conform to new version.
- Run tests as part of %check.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1671537600">- Adjust wannier90-devel dependencies so as to build against its
  correct openmpi flavour and avoid degeneracy between its multiple
  openmpi flavours when installing.
- Add rpmlintrc file to suppress false positives that cannot be
  fixed/worked around:
  * openmpi-libs Requires: necessary for multiple openmpi flavours.
  * Requires: wannier90-devel (or its appropriate openmpi flavour
    in keeping with the first entry of this changeset.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1673870400">- Update to version 8.7.2:
  * Fixed problem of writing TDDFT density of states with
    wrtdsk=.false.
  * Fixed problem of restarting from TDDFT backup files.
  * Removed an OpenMP regression which cause substantial slow-down
    of TDDFT.
  * Added more documentation.
  * Minor optimisations and bug fixes.</changelog>
  <changelog author="Nicolas Morey &lt;nicolas.morey@suse.com&gt;" date="1698062400">- Drop support for obsolete openmpi[123]</changelog>
</package>
<package pkgid="5fd0498670f02ba4ffa3afb71c59bb8669b92b4f1d05665c9d847e3e4c1cf7718fb30a28a586fdca7395b6e3d6f53d567ad6c16b31cb70c76f9d4b7449c74ca3" name="ell-devel" arch="x86_64">
  <version epoch="0" ver="0.59" rel="160000.2.2"/>
  <changelog author="jengelh@inai.de" date="1650974400">- Update to release 0.50
  * dbus: Fix use-after-free crash when removing objects</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.51:
  * Fix issue with handling bad prefixes per RFC4862
  * Fix issue with handling DHCP retransmission timers
  * Add support for DHCP override and static IP API</changelog>
  <changelog author="dmueller@suse.com" date="1658145600">- update to 0.52:
  * Fix issue with using PTRDIFF_MAX constant.
  * Fix issue with accepting FD 0 as epoll_fd.
  * Fix issue with setting bound time before emitting event.
  * Fix issue with starting ACD before committing static IPv4.
  * Fix issue with waiting for link-local address before DHCPv6.</changelog>
  <changelog author="dmueller@suse.com" date="1663070400">- update to 0.53:
  * Add support for EC based certificates.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 0.54:
  * Add support for DHCPv6 SLAAC address creation.
  * Add support for control of optimistic DAD feature.
  * Add support for checking validity dates of certificates.
  * Add support for RFC 5746 Secure Renegotiation.</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 0.55:
  * Fix issue with DHCP and blocked unicast requests.</changelog>
  <changelog author="info@paolostivanin.com" date="1674648000">- update to 0.56:
  * Add support for TLS session resume interfaces.</changelog>
  <changelog author="dmueller@suse.com" date="1687176000">- update to 0.57:
  * Fix issue with handling Generic Netlink cancel requests.</changelog>
  <changelog author="aloisio@gmx.com" date="1693310400">- Update to version 0.58
  * Add support for handling sysctl settings.</changelog>
  <changelog author="jengelh@inai.de" date="1698840000">- Update to release 0.59
  * Add l_safe_ato* functions to the exported symbol list.</changelog>
</package>
<package pkgid="2e80703682153d015a184748c9c715c968c1a0899530bca0871136925f624b587fa2e7ca79c68d6de7b61857c31453d6fd39352873c9afa376f6f5033bf5a51d" name="elua" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="fe697931e9fe0c918844cda427b3ef5506c4031e541c7174bc8db2dcde8c5579a1b98063830b7844d0ee8a768d5d6119d54dc687d6d910e27856c037a2da7c85" name="emacs" arch="x86_64">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="59f1bbf7c5cf33c97ddfc42fa5b2aaf924c6cf963fa1e27d33fc462b684cf7fb5cb918deb811fdd4d243133fd0834c783b670ffd3ec2206a93dcd2d44afcb3ee" name="emacs" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="af507fd500c340c2369af57ab2569440eef352e83a5a0ef1fcc95639173e572400b96aef0424805e23281305fc5700385959f7b5d483e2d3a9b71570a66f3ef8" name="emacs" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="6e4c19051aa80530a8efad041b5b8c204764cb11a87b434f47989b0690959341f6dbf965b4c9cd04595aeeba7b41ec95cd0969a7a75e3aab30f8ae65cf0b08b3" name="emacs-apel" arch="noarch">
  <version epoch="0" ver="10.8+81+g82eb232" rel="bp160.1.11"/>
  <changelog author="mfabian@suse.de" date="1076760000">- update to 10.6</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="tiwai@suse.de" date="1250683200">- updated to version 10.7:
  Updated for newer FLIM and WL; See ChangeLog file for details</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="werner@suse.de" date="1341403200">- updated to version 10.8:
  * EMU-ELS (emu-modules): Add setting for GNU Emacs 23 or later.
  * invisible.el: In GNU Emacs 23, inv-19.el overrides builtin
    function `invisible-p'.  To fix the bug, require `inv-23' when
    running with GNU Emacs 23 or later.
  * poe.el (format-time-string): Fix problem on GNU Emacs 22.2
- Add patch from Debian:
  * poem-e20.el (fontset-pixel-size): Don't cause an error. Workaround
    for Emacs 23.</changelog>
  <changelog author="i@marguerite.su" date="1414411200">- fix for factory
  * added apel-10.8-040_make-temp-file-for-Emacs-24.3.50.patch
  * Fix wrong type argument on Emacs 24.3.50 to check make-temp-file</changelog>
  <changelog author="tiwai@suse.de" date="1532347200">- Fix build with the latest emacs:
  apel-emacs-escape-fix.patch</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1601294400">- add emacs-apel-fix-old-backquote.patch
- fix TW build</changelog>
  <changelog author="schwab@linux-m68k.org" date="1651752000">- Switch to APEL-LB from Wanderlust
- Update to version 10.8+80+g6947dc4:
  * Fold docstring within 80 characters
  * Fix fontset-pixel-size failure
  * Revive poe.el's dependency on pym.el
  * Remove conditional definition of functions and variable.
  * Remove codes for old platforms.
  * Update package description file for MELPA.
  * * product.el: Remove unneeded dependency on pym.el.
  * Don't use defun-maybe for mime-charset-list
- apel-10.8-040_make-temp-file-for-Emacs-24.3.50.patch,
  apel-emacs-escape-fix.patch, emacs-apel-fix-old-backquote.patch,
  prevent-fontset-error.patch: Remote obsolete patches</changelog>
  <changelog author="schwab@linux-m68k.org" date="1684411200">- Update to version 10.8+81+g82eb232:
  * Update docstring syntax</changelog>
</package>
<package pkgid="c4e05ebd78f66633b37086f098081bb2af15860e2cb8f844b20eb1aad9fe7f4b56e697d2a980a79d590c976a5433c413548a13e83321dfcbf5ade3d4c3d5eb91" name="emacs-auctex" arch="noarch">
  <version epoch="0" ver="14.1.0" rel="bp160.1.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1715860800">- Remove patch ignore-errors.patch
  * After discussion with AUCTeX upstream avoid now those errors
    by ignoring font-lock TeX macros as well as lwarp.sty
- Refresh auctex-13.3-auto-TL-2024.tar.xz with that above</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1715860801">- Update dinbrief.patch
  * Use babel style direct for ngerman
  * Reintroduce enforced T1 font encoding</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1715860802">- Merge changes from upstream for patch dinbrief.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1720612800">- Update to AUCTeX ELPA version 14.0.6
  * This work only with GNU Emacs 27.1 and above
- Remove patches upstream now
  * dinbrief.patch
  * initial-reset.patch
  * auctex-13.1-expand.patch
- Port patch dvips.patch
- Port spec file to ELPA installation with the
  help of triggerin scriptlets
- REcommend texlive-preview as this also from AUCTeX</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1732017600">- Update to AUCTeX ELPA version 14.0.7 (2024-10-05)
  * * Added
  - Respect the value of ~TeX-output-dir~ when processing files with
    latexmk.  This means that the default value of ~TeX-command-list~ is
    changed.
  - Add new support files =style/authblk.el=, =style/langscibook.cls=,
    =style/lstautogobble.el=, =style/lstlinebgrd.el=,
    =style/ninecolors.el=, =style/supertabular.el=, =style/tabularray.el=
    and =style/xtab.el=.
  * * Fixed
  - Fold argument of verbatim macros more accurately.
  * * Removed
  - Remove the possibility to disable the side-wide installation with:
    [#]+begin_src emacs-lisp
    (unload-feature 'tex-site)
    [#]+end_src
    Using this form when installed from [[ELPA:auctex.html][ELPA]] will
    throw an error.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1732190400">- Use gzip -n for deterministic gzip headers</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1740571200">- Add patch auctex-14.0.7-texinfo.patch
  * Make it build again with latest texinfo package</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1743076800">- Switch over to TeXLive 2025</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1759406400">- Update to AUCTeX ELPA version 14.1.0
  - Add new commands ~LaTeX-make-inline~ which converts the display math
    environment at point to inline math and the more general
    ~LaTeX-modify-math~ which converts the mathematical construct at point
    into one with different kind of delimiter or another environment.
  - Add new support files =style/embedfile.el=, =style/figureversions.el=,
    =style/needspace.el=, =style/tablericons.el= and =style/wrapstuff.el=.
  - AUCTeX now requires GNU Emacs 28.1 or higher.
  - Fix unwanted expansion of abbrevs during filling when ~abbrev-mode~ is
    enabled.
  - Fix the command-line options passed to latexmk when processing files
    with xetex in order to run the viewer correctly.
  - Fix removing of stale verbatim entries in auto-parsed file once the
    corresponding package isn't used in the .tex file anymore.  Complete
    removal may require two invocations of =C-u C-c C-n=.
  - Improve support for folding of citations macros.  The current folding
    =[c]= is changed to a more descriptive version, using author names and
    publication years, like =[Ne21]= or =[ABC99]=.  These are extracted
    from any bib files referenced in the document or specified by the user
    option ~TeX-fold-bib-file~.
  - Add support for folding of =\begin{env}= and =\end{env}= macros.  The
    replacement specifiers are controlled by the custom option
    ~TeX-fold-begin-end-spec-list~.
  - Add new custom option ~TeX-fold-alert-color~ which determines the
    color used when folding the ~\alert~ macro, defaults to ~red~.
  - Add new support files =style/glossaries-extra.el=,
    =style/glossaries.el=, =style/inlinegraphicx.el=, =style/minted2.el=
    (=style/minted.el= is updated to package v3.1.2) and
    =style/stocksize.el=.
  - Add preliminary support for parsing =\graphicspath= in
    =style/graphicx.el=.
  - Change the default value of ~LaTeX-insert-into-comments~ from ~t~ to
    ~nil~.
- Add patch auctex-14.1.0-dinbrief.patch
  * Correct usage of (LaTeX-add-environments)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1775563200">- Skip auto generated style files for Leap (upstream also dislike them)</changelog>
</package>
<package pkgid="174ea73b07428c78984abe4de9df3e0b2eee2dd3f70d6420eb9c343a48d759c2a1adfef363c11b2e17959345b3a7e1f263f9ac724d001d2be9663acfb2f08ab7" name="emacs-compat" arch="noarch">
  <version epoch="0" ver="30.0.0.0" rel="bp160.1.12"/>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1695816000">- Initial packaging for OpenSuSE
- Include patch to add install targets to upstream makefiles
- Compat 29.1.4.2
  * compat-28: Improve =make-separator-line= visuals on graphic displays
  * compat-28: Add =native-comp-available-p=, which always returns nil
  * compat-29: Add variable =lisp-directory=</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1706702400">- Update to version 29.1.4.4:
  * The maintainer field accepts only a single mail address
  * fix(compat.el): Package-Requires "seq" = 2.3 -&gt; 2.23 (#31)
  * compat.texi: Fix typos</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1708948800">- Depend on emacs-devel to make sure Emacs packaging macros are installed when not building with emacs-eln</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1711368000">- Update to version 29.1.4.5:
  * Update NEWS.org
  * compat-tests: Fix compat-thing-at-mouse test
  * Use https links everywhere
  * compat.texi: Use @dfn{Extended Definitions}
  * NEWS: Mention addition of compat.el to Emacs
  * compat.texi: Update manual after the inclusion of compat.el in Emacs
  * compat-tests: Fix commentary linter warnings
  * compat-tests: Use should-equal
  * compat--maybe-require: Rename macro to reduce churn</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1722686400">- Remove use deprecated install_info macro's
- Rebase 0001-Add-install-target.patch against new upstream version
- Update to version 30.0.0.0:
  * compat-28: Mark =subr-native-elisp-p= as obsolete (renamed in Emacs 30).
  * compat-30: New function =char-to-name=.
  * compat-30: New function =obarray-clear=.
  * compat-30: New function =interpreted-function-p=.
  * compat-30: New function =primitive-function-p=.
  * compat-30: New function =closurep=.
  * compat-30: Add extended function =sort= with keyword arguments.
  * compat-30: New function =value&lt;=.
  * compat-30: Add extended =copy-tree= with support for copying records with
    non-nil optional second argument.
  * compat-30: New macro =static-if=.
  * compat-30: New alias =drop=.
  * compat-30: New function =merge-ordered-lists=.
  * compat-30: New variables =completion-lazy-hilit= and =completion-lazy-hilit-fn=
    and new function =completion-lazy-hilit=.
  * compat-30: New function =require-with-check=.
  * compat-30: New functions =find-buffer= and =get-truename-buffer=.
  * compat-30: Add extended =completion-metadata-get= with support for
    =completion-category-overrides= and =completion-extra-properties=.</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1722686401">- Add back the install_info macro's for Leap, info triggers
  are not old enough for Leap
- Add patch to fix Texinfo references inside the manual:
  0002-compat.texi-Fix-references-to-Emacs-30.1-in-Support-.patch</changelog>
</package>
<package pkgid="4cc4326cb8f5e4fc098af60db0a7759a2d553025d3afe9a15486cb18e08905a48ce8fce140e5b194afd2a0935c41833812c3daac95000218d489be80786e32a3" name="emacs-el" arch="noarch">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="d63328f62a05b8dcdceaca3eb49b97f1425f08e102ed1fa27d736854b4c1572092849392d644148c2b0b405a07a83ddfc4a588983f64dd6a09792a827b174119" name="emacs-el" arch="noarch">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="fc7519dfd7afc4331f2898267a42682d91664135d5572acf4a2f17ebf0714d784995d7d5a9ee6c158005b8b43f8bdf95f56ac9e5f3356459b32a3aebdfd3896f" name="emacs-el" arch="noarch">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="939bdcad1f8a5584d5ac00b463533e44f41eee751599d921c688bb8cb9b90fdd4a3052e606451edefb1648674e619d7cefa205e6247a742625b7aa5faf42ce0e" name="emacs-eln" arch="x86_64">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="c319e9891ee402ed51fa378bf5ad200af63543a8dee98a1040101c338a16b0da9e10d031a61eb790a15959b732ee3bdc505a4f4ede3853983c2e3c9896f6d968" name="emacs-eln" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="1ce0ac4c4f38d44b9960bba7ea72da3f0bb5e2f49ea034445be2982aaa2cf86d89b87f5697858f17c9cba5ca9bbd6ea8cebbb003772333c036cf93b31ad9c0e5" name="emacs-eln" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="684d9c388e5138cb030f04709ede244f98071dd56207cd505262aaa844d8d55632caaf028c4a4f76fa5296ea50935210313ff9e6bd55977b1988c69b3067904b" name="emacs-flim" arch="noarch">
  <version epoch="0" ver="1.14.9+136+g2cf5a78" rel="bp160.1.11"/>
  <changelog author="tiwai@suse.de" date="1250683200">- updated to version 1.14.9
  required for new WL and emacs23
- fixed file encoding at saving files</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1349438400">- Remove more files already part of Emacs
- Specfile cleanup</changelog>
  <changelog author="i@marguerite.su" date="1436443200">- rename to emacs-flim
- clean specfile</changelog>
  <changelog author="i@marguerite.su" date="1436529600">- fix URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1649505600">- Switch to FLIM-LB from Wanderlust
- Update to version 1.4.9+125+g02735de:
  * Fold docstring of customizable variable within 80 characters
  * Minor refactorings
  * * sasl-xoauth2.el (sasl-xoauth2-host-url-table): Add examples. (not tested)
  * Compare field names in a case insensitive manner
  * Fix last change of std11-narrow-to-header.
  * Adjust dependencies.
  * Fix https://github.com/wanderlust/flim/issues/14
  * * eword-decode.el (eword-lexical-analyze): Minor refactorings.
  * * std11.el (std11-narrow-to-header): Narrow region only when needed.
  * Update package description file for MELPA.</changelog>
  <changelog author="tiwai@suse.com" date="1653393600">- Update to version 1.14.9+130+g289e5bbd66f6:
  * Fold docstring within 80 characters
  * Remove XEmacs related stuff.
  * New installer option PACKAGE_LISPDIR
  * Fix problem with new timestamp format.
  * Fold docstring within 80 characters</changelog>
  <changelog author="schwab@linux-m68k.org" date="1684411200">- Update to version 1.14.9+136+g2cf5a78:
  * Don't inhibit EOL conversion for oauth2.el.
  * Use `ash' instead of `lsh'
  * Fix CCL lexical analyzer fails to parse quoted-string
  * Add redirect URI for Gmail
  * Update docstring syntax
  * * README: Update requirements.  Wide int feature is required.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1705752000">- Use %patch0 to fix compilation with rpm-4.19</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="2e1c0bd6903322830d820fe9b7a1b838b3ed43b1deedcc0e66d8d4b47bd4f4123517e34211327c727a10a582688f278eff8ec0cd298482cea247757b15683836" name="emacs-games" arch="x86_64">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="fe1944b4ab2dd8e8f555aa1bfbb25d3a21b180c4332f37914010ebb458e205f06713e01cf4a1d5a61f7e7742df3af4c02e7088a7754c7f9217dcee63d3357b9d" name="emacs-games" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="baf657aca8e0916aaa7186fd732d1e684ab479c35635cc64ceb3c7050c9f2cff039cfe28a7140e3aed5c00fc24aca89ed9e6908036baaf66dd3555901989237b" name="emacs-games" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="972aad4cb6c2dcd34033d8c64fd732dc58e9eb0bfcb092b91af1ed4b3f1a9c48daba57727e0bf752946f41e47fcb4700fb0d982bf5ab0c24c3f1d5a189b786b2" name="emacs-gnuplot-mode" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="bp160.1.10"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511179200">- Initial separate package for gnuplot mode. The gnuplot mode
  was formerly distributed as part of the gnuplot package.
- Update from version 0.6.1 to version 0.7.0
  * Added context sensitive auto completion</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1615464000">- Make sure that Upstream source tar ball fits local copy</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1718107200">- Update to 0.8.0
  * Changed project license to GPLv3.
  * Greatly simplify the compilation process.
  * Fix deprecated calls to the cl library.
  * Deprecated XEmacs support. Bump minimal GNU Emacs version to 24.3.
  * Add a gnuplot-program-args variable for passing additional
  arguments to the gnuplot program binary.
  * The gnuplot-inline-image-mode can now take three values: nil,
  inline, dedicated.
  * Add the gnuplot-use-context-sensitive-completion configuration
  option.
  * Removed the gnuplot-bug-report function.
  * The provided gnuplot.info manual file has been updated for gnuplot
  version 5.2.6.
  * Add the gnuplot-program-args customization option to pass
  additional arguments to the gnuplot process.
  * Use syntax-proprietize-rules in gnuplot buffers.
  * gnuplot-context-sensitive-mode is now a normal minor mode.
  * Enable completion-at-point in gnuplot comint buffers.
  * Remove the unused dotemacs.el file.
  * comint-process-echoes is now buffer-local.</changelog>
</package>
<package pkgid="b569b16673bfecaa4fff27448a83c2def041208a218ec054b4dfb08a17f095814cf12887ee4ae0dbd8d679396158bc56a8d6b104d358b3090f4808e9214f5575" name="emacs-gnuplot-mode-doc" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="bp160.1.10"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511179200">- Initial separate package for gnuplot mode. The gnuplot mode
  was formerly distributed as part of the gnuplot package.
- Update from version 0.6.1 to version 0.7.0
  * Added context sensitive auto completion</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1615464000">- Make sure that Upstream source tar ball fits local copy</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1718107200">- Update to 0.8.0
  * Changed project license to GPLv3.
  * Greatly simplify the compilation process.
  * Fix deprecated calls to the cl library.
  * Deprecated XEmacs support. Bump minimal GNU Emacs version to 24.3.
  * Add a gnuplot-program-args variable for passing additional
  arguments to the gnuplot program binary.
  * The gnuplot-inline-image-mode can now take three values: nil,
  inline, dedicated.
  * Add the gnuplot-use-context-sensitive-completion configuration
  option.
  * Removed the gnuplot-bug-report function.
  * The provided gnuplot.info manual file has been updated for gnuplot
  version 5.2.6.
  * Add the gnuplot-program-args customization option to pass
  additional arguments to the gnuplot process.
  * Use syntax-proprietize-rules in gnuplot buffers.
  * gnuplot-context-sensitive-mode is now a normal minor mode.
  * Enable completion-at-point in gnuplot comint buffers.
  * Remove the unused dotemacs.el file.
  * comint-process-echoes is now buffer-local.</changelog>
</package>
<package pkgid="918e4a7f6a0b6091072165661ba2342d157e051e712e35795860c0c1313217e11d7ceac3c2c60582c3f6d1ea12b2cf7a8a996abd462570c3b12c74ffbe79ad22" name="emacs-info" arch="noarch">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="0f11363c3f04e6dbb232830d3efa28ecd2e5d6ba6b9a3d15b0ceb7bae0527235b4dfd541900a8ba9e121ac7e6ade820e462b087972f4299c066b50decc393052" name="emacs-info" arch="noarch">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="0ea450831804bb3a018fd610a1d5b830450ef1ca2ce1bc23a22fdf37e80b5a464351acb1f42f98d13a1278d11776120387aca1f8fae70adce157ce3a01bf82cd" name="emacs-info" arch="noarch">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="b9ce1f59501ae1864812ad0bdcf16b7c79feeb88f43ec216d6fb14daa6d78dfbff0719646424f5c17eb31673c87d575f48f6cbe2a5ec2b2527afc86c286ae0dc" name="emacs-jinx" arch="x86_64">
  <version epoch="0" ver="2.1" rel="bp160.1.5"/>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1708948800">- Update to version 1.3:
  * jinx-mode: hack-local-variables - ignore mode variables
  * README: List packages needed on OpenSUSE
  * Fix interaction bug with the newest version of AUCTeX, where the major mode
    got changed unexpectedly.
  * No need to use hashed symbol as argument for derived-mode-p
  * Fix deadlock on macOS during Jinx startup (Fix gh#minad/jinx#91, gh#minad/jinx#113)
  * Revert "Simplify rescheduling"
  * timer-activate-when-idle: Pass DONT-WAIT=t</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1708948801">- Depend on emacs-devel to make sure Emacs packaging macros are installed when not building with emacs-eln</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1711368000">- Update to version 1.4:
  * Update README
  * Fix: Ensure that `eval' local variable enabling `jinx-mode' works
  * yaml-mode/yaml-ts-mode: Alias to conf-mode
  * Remove TeX-mode alias
  * jinx-exclude/include-faces, jinx-exclude-regexps: Support mode aliases
  * jinx-correct-all: Restrict corrections to marked region
  * jinx-correct: Ensure that word is saved without text properties (Fix gh#minad/jinx#140)</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1713009600">- Rebase 0001-Only-export-necessary-symbols.-Fixes-105.patch against
  1.6
- Update to version 1.6:
  * Fix jinx-mode reentrancy issue #gh/minad/jinx#158
  * Ensure that directory local variables work correctly with Jinx.
    It is possible to turn Jinx on or off via dir-locals,
    and also configure the language and local words.
  * jinx-mod: Add global ref Qcons
  * jinx-next: Unfold hidden misspelling</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1719403200">- Rebase p0001-Only-export-necessary-symbols.-Fixes-105.patch
  against version 1.8.
- Update to version 1.8:
  * Fix wrong-type-argument (Fix gh#minad/jinx#175)
  * README: Fix grammatical mistake
  * Ignore message-separator
  * Add jinx-save-languages
  * jinx--word-valid-p: Do not error on invalid characters (Fix gh#minad/jinx#93, gh#minad/jinx#164)</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1720353600">- Rebase p0001-Only-export-necessary-symbols.-Fixes-105.patch
  against version 1.9.
- Update to version 1.9:
  * Expose (jinx-correct-all t) via C-u C-u C-u M-x jinx-correct
  * jinx-correct-all: Add ONLY-CHECK argument.
  * A better fix for gh#minad/jinx#156
  * Revert "Fix bug in jinx--find-visible-pending (See gh#minad/jinx#156)"
  * Fix bug in jinx--find-visible-pending (See gh#minad/jinx#156)
  * correct link to enchant manual (gh#minad/jinx#185)</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1722686400">- Rebase p0001-Only-export-necessary-symbols.-Fixes-105.patch
  against version 1.10
- Update to version 1.10:
  * Add jinx--syntax-overrides to override syntax table</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1737892800">- Rebase p0001-Only-export-necessary-symbols.-Fixes-105.patch
  against version 1.11
- Update to version 1.11:
  * Add tsx-ts-mode to jinx-camel-modes (gh#minad/jinx#219)
  * Extract jinx--compile-flags (Fix gh#minad/jinx#218)
  * Remove org-fold code to improve performance in Org-mode buffers.
  * Customization group: Add link to the wiki
  * Remove with-delayed-message workaround (Emacs#63253)
  * Workaround broken :predicate keyword in Emacs 28 and older</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1739188800">- Rebase 0001-Only-export-necessary-symbols.-Fixes-105.patch
  against version 1.12
- Update to version 1.12:
  * Attempt to fix performance problem in folded Org buffers (gh#minad/jinx#187)
  * lisp-data-mode: Exclude symbols in docstrings
  * Use next-single-property-change when scanning for jinx--pending
  * Update README
  * Add comment regarding eager-display on Emacs 31
  * Use with-memoization, requires Emacs 29.1 or compat-29
  * Use weak hash table for loaded dictionaries
  * Preserve alist of loaded dictionaries (gh#rrthomas/enchant#402)</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1744891200">- Rebase 0001-Only-export-necessary-symbols.-Fixes-105.patch
  against version 2.1
- Update to version 2.1:
  * README: Update suggested Vertico configuration
  * Offer lower-case words for saving in personal dictionary
  * Improve lighter and menu, also include correct word next
    to correct all.
  * Add ~jinx-dir-local-words~ saved in ~.dir-locals.el~.
    Words can be added to the ~.dir-locals.el~ with the ~/~ key
    in the ~jinx-correct~ dialog
  * ~jinx-correct~: For capitalized words, offer lower case variants to save in
    personal dictionary and file local variables.
  * Add ~help-echo~ to the Jinx overlays to show possibly actions
    to perform on highlighted word</changelog>
</package>
<package pkgid="03f03ca64f787d576daab1552501fc0a6648d8a261cbb335fadbeef586aee87f71b4203f84048eea54b01952e11efe99b3172c3dd7cf6da943e81922b960cb83" name="emacs-libgit2" arch="x86_64">
  <version epoch="0" ver="471.373defa" rel="bp160.1.12"/>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1697803200">- Initial packaging for openSUSE
- Add patch for loading libegit2 dynamic module from load-path
- Add patch to add an install target for upstream makefile
- Add fix upstream makefile to not build libegit2 each time make is ran</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1708948800">- Depend on emacs-devel to make sure Emacs packaging macros are installed when not building with emacs-eln</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1711368000">- Drop the following patches as they have been accepted by upstream:
  * 0001-libgit.el-Be-able-to-load-libegit2-from-load-path-if.patch
  * 0002-Add-install-targets-for-libgit-and-libegit2.patch
  * 0003-Don-t-mark-libgit2-target-as-phony-don-t-rebuild-it-.patch
- Update to 471.373defa
  * Make it possible to install libgit and libegit2 from Makefile
  * Be able to load libegit2 from load-path if found
  * License changed from GPL-3.0-or-later to GPL-2.0-or-later</changelog>
  <changelog author="Martin Jambor &lt;mjambor@suse.com&gt;" date="1723809600">- Add -Wno-error=incompatible-pointer-types to optflags to work around
  C99 violations that prevent building with GCC 14.  [boo#1229236]</changelog>
</package>
<package pkgid="cb26fa824dd8caf01e4be312ae3ef1d4d226e8fa337ebdf9547eabaa967f3c01fced073081483012317ef2019e567a254aff4b4e2962b9c91413be61874dc08e" name="emacs-nox" arch="x86_64">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="c98153c0275ccc2326ed35f3c141ab5d5182ebdb6d85ae09556dda4e99c9f9561c76fc871b2afa6904b7f3fb89841e0f7304c1ebf813d963ba024244a618d54c" name="emacs-nox" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="17963e65c30d2202bc3da9847673123f4466b6cf65943dd4d9b4466d3a502c33fcb9040a9ef12fcad411d5b731cc01bad05a08739c8471c921dfa6838769a5ed" name="emacs-nox" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="7dc6a45d62b98388dad35791803265c34f0b07e52d7a8248ae3d63b99c60f46f8ef758d5c34188565d7684e0b750c3db62403f65f316cc793085c973d955dd02" name="emacs-plugin-devhelp" arch="x86_64">
  <version epoch="0" ver="43.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1632139200">- Update to version 41.1:
  + Appdata fixes.
- Changes from version 41.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1633089600">- Update to version 41.2:
  + More appdata fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1643803200">- Add 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch and
  03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch: Fix build with
  meson 0.61.0 and newer.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1657713600">- Add e6c644683fbb34ac4ceb31150ef20a2536512149.patch -- Disable HW
  acceleration to prevent blank pages (glgo#GNOME/devhelp#60).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515200">- Update to version 41.3:
  + Disable hardware acceleration for WebKitGTK
  + Update the location of the app screenshots
  + Fix build with Meson ≥ 0.60
  + Appdata validation fixes
  + Updated translations.
- Drop patches fixed upstream:
  + e6c644683fbb34ac4ceb31150ef20a2536512149.patch
  + 281bade14c1925cf9e7329fa8e9cf2d82512c66f.patch
  + 03b9b6b55ab1e1376b314ac7f99693512e42d80b.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515201">- Update to version 43.alpha:
  + Temporarily disable hardware accelerated rendering.
  + Fix build with newer versions of Meson.
  + gir: Fix build with WebkitGTK 4.1
  + Updated translations.
- Replace pkgconfig(webkit2gtk-4.0) for pkgconfig(webkit2gtk-4.1)
  BuildRequires now that upstream supports it.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1661515202">- Update to version 43.beta:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1662292800">- Update to version 43.rc:
  + Use Meson's gnome.post_install()
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663675200">- Update to version 43.0:
  + Updated translations.</changelog>
  <changelog author="Luciano Santos &lt;luc14n0@opensuse.org&gt;" date="1677412800">- Replace python3-gi-docgen build requirement with the more
  reliable pkgconfig(gi-docgen).</changelog>
</package>
<package pkgid="59e54bf6a964c7734ddc5929ac7429fceb867a52fe6232ae126765af4af3d44c2ba8372ee8914a35f770561a6fb70240e0961307a01ee3701186e5cc78dc0e4c" name="emacs-scheme48" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="bp160.1.60"/>
  <changelog author="mvyskocil@suse.cz" date="1229342400">- Update to 1.8</changelog>
  <changelog author="mvyskocil@suse.cz" date="1231156800">- Use RPM_OPT_FLAGS to build
- Fixed the compiler errors and warnings (patch1 and patch2)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1236859200">- Fixed a build under gcc4.4
  * used gcc as a default linker</changelog>
  <changelog author="mvyskocil@suse.cz" date="1262088000">- fixed bnc#566860: correct Group of emacs-scheme48
- converted %%changelog to changes</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1552564800">- Add old packge to project devel:languages:misc just like clisp
- Update to scheme48-1.9.2
- Modernize spec file
- Add some missed patches
  debian-user-name.diff
  man-properly-escape-minuses.diff
  no-env-trampoline.diff
  noreturn.patch
  security-tmpfile.patch
- Remove some superfluous patches
  scheme48-1.8.tar.bz2
  scheme48-asneeded.patch
  scheme48-destdir.patch
  scheme48-implicit-fortify-decl.patch
  scheme48-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552564801">- Replace %__-type macro indirections by regular commands.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1552651200">- Redo image with existing image</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1552996800">- OpenSUSE does not have emacs-common, but an emacs package for
  the lisp files of GNU Emacs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708948800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.</changelog>
</package>
<package pkgid="a322dc04c1a13b3bf8d7ab84c4aeca26c8d64e45fcb8c6591d0f40b6e01f0adbe9ff29cd2ca69f49eeda21aba9f460957a0bb9774a76beafbfd8b6d7443e7ae6" name="emacs-semi" arch="noarch">
  <version epoch="0" ver="1.14.6+239+gb1c245b81715" rel="bp160.1.10"/>
  <changelog author="tiwai@suse.de" date="1214568000">- ported from semi-xemacs-1.14.6</changelog>
  <changelog author="tiwai@suse.de" date="1390392000">- clean up spec file via osc service
- update url, etc</changelog>
  <changelog author="tiwai@suse.de" date="1390910400">- mime-hide-buttons-in-reply.diff:
  Add mime-hide-buttons-in-reply custom variable</changelog>
  <changelog author="tiwai@suse.de" date="1547467200">- Renamed from semi-emacs to emacs-semi package to align with FLIM
- Dropped xemacs variant that causes a problem with persitent build</changelog>
  <changelog author="tiwai@suse.com" date="1653393600">- Switchto SEMI-EPG on wanderlust repo, extrat via service
- Update to version 1.14.6+239+gb1c245b81715:
  * mime-vcard.el requires bbdb-vcard-vcard21 in bbdb-vcard package
  * Remove XEmacs related stuff
  * New installer option PACKAGE_LISPDIR
  * Fold docstring within 80 characters
  * Check mule-version's availability
  * * semi-setup.el: Adjust dependencies.
  * Fold docstring of customizable variable within 80 characters
  * Use threads for signature verification
  * * mime-pgp.el (mime-preview-application/pgp-encrypted): Fix typo.
  * Fix ignored argument for mime-display-text/plain-flowed
- Drop obsoleted patches:
  autoloads.patch
  mime-hide-buttons-in-reply.diff</changelog>
</package>
<package pkgid="89ada77d6b3ebc32eb119e2a720ce3de17be5a04cc5d3fdfd9e8c44f96cec2d7defecebc56e8cefb95a88c99ea9d075d544677f6f387b09596dee21a95f49ff2" name="emacs-vm" arch="x86_64">
  <version epoch="0" ver="8.2.0b.1538" rel="bp160.1.20"/>
  <changelog author="aj@suse.de" date="1251201600">- Fix build, handle just one info file.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="eich@suse.com" date="1381406400">- Updated package to version 8.2.0b.
  * Fixes warnings about missing hooks removed from GNU emacs after being
    deprecated for over 10 years
  * Fixes performance penalties caused by bidi being activated by default
    on GNU emacs 24.
  * Updates from version 7.19 - released in 2004, 24 releases ago.
    Numerous changes and bug fixes, file 'NEWS' in the package docs list
    the changes since 7.19.
- Project now hosted at https://launchpad.net/vm.
  Upstream maintainership package has been transferred from Kyle Jones
  to the 'VM development team'.
- vm-Makefile.patch:
  Removed, matching Makefile no longer required since build uses autotools
  now.</changelog>
  <changelog author="eich@suse.com" date="1382616000">- Fixed up paths to make them package private
- Removed duplicate files from package</changelog>
  <changelog author="dimstar@opensuse.org" date="1426075200">- Use makeinfo --force to ignore the errors in vm.texinfo.</changelog>
  <changelog author="eich@suse.com" date="1437998400">- U_rev-1313.patch:
  - Added a variable `vm-confirm-for-auto-archive' that controls the
    confirmation dialogue for `vm-auto-archive-messages'. (lp#793541)
  - Add autoload for `vm-select-recipient-from-sender'.  (lp#907286)
    (bsc#939497).</changelog>
  <changelog author="eich@suse.com" date="1453377600">- U_Require-vm-reply.el-from-vm-compose-mail.patch
  Require vm-reply.el from vm-compose-mail (lp#913005)
  (bsc#939497).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="mpluskal@suse.com" date="1512648001">- Cleanup spec file with spec-cleaner
- Fix rpm group</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1680091200">- Update to latest launchpad trunk version.
  Delete obsolete patches:
  * U_rev-1313.patch
  * U_Require-vm-reply.el-from-vm-compose-mail.patch
- Fix vcard parser to handle broken vcards better
  vcard-Make-vcard-parser-more-robust-to-invalid-vcards.patch
- Limit %install_info and %install_info_delete macros to Leap/SLE.</changelog>
</package>
<package pkgid="029aca2569fa45ae76a8232334f8ddd4c3fddfdb63ae883c71e21d0a2d66d7a8321bdcdad9eb55d32cb91fa72ae1b7c2ee98a6ed6e747c1b362ab99c89d0f100" name="emacs-vterm" arch="x86_64">
  <version epoch="0" ver="698.ae4ae1a" rel="bp160.1.11"/>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1675339200">- Initial packaging for openSUSE</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1708948800">- Update to version 696.c3a3a23:
  * add example to use another font for vterm buffer
  * Differentiate foreground and background colors
  * Add separate faces for bright ANSI colors
  * Don't allow moving cursor below the last prompt via mouse
  * Allow to find beginning and end of line from a specific point
  * Fix vterm--remove-fake-newlines when in an empty buffer
  * Remove fake newlines in copy mode
  * init is_invalidated in Fvterm_new
  * add LDFLAGS to statically link libvterm
  * Use same shell as TRAMP on remotes.</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1708948801">- Depend on emacs-devel to make sure Emacs packaging macros are installed when not building with emacs-eln</changelog>
  <changelog author="Bj&#xF6;rn Bidar &lt;bjorn.bidar@thaodan.de&gt;" date="1711368000">- Update to version 698.ae4ae1a:
  * Ensures the starting col is the same as later calculated
  * Fix typo: postion -&gt; position</changelog>
</package>
<package pkgid="53dec4a329d579c7191420aa9413d0c7ce9dd5febc49ec632f0c54949f698a00f2c05109dbf837506a8587c4c43845eb7d0dc196943990d37932c2728246510b" name="emacs-w3m" arch="noarch">
  <version epoch="0" ver="1.4.632+569+g5c965214" rel="bp160.1.11"/>
  <changelog author="schwab@linux-m68k.org" date="1481284800">- Update to current CVS head (version 1.4.567)
  * make it work with emacs 26</changelog>
  <changelog author="schwab@linux-m68k.org" date="1531051200">- Rename from w3m-el to emacs-w3m
- Update to current CVS head (version 1.4.631)
  * Work for Emacs &gt;= 26 in which the emacs-version variable no longer
    includes the build number
  * Refactor w3m-process-queue memory and redability
  * Make progress messages more uniform and more useful
  * Work for mailto urls
  * Update faces for all navigation cases
  * Fix two bugs in navigating the w3m-session-select popup window
  * Bugfix for the creation of session pop-up window
  * Uniform error handling and message presentation
  * Introduce w3m-display-mode
  * Send a cached ETag to the remote server so as to check whether
    the server responds with 304 meaning the cache is still up-to-date
  * Delete about://cookie/ buffer when w3m-view-previous-page is performed
  * Update selection buffer properly after deletion or renaming
  * Fix cookies handling
- Use %license for COPYING
- Remove xemacs subpackage, not compatible with xemacs any more</changelog>
  <changelog author="jengelh@inai.de" date="1531569600">- Trim bias from description.
- Replace old RPM shell vars by macros.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1582632000">- Update to current GIT HEAD (6eda3828)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1616328000">- Update to version 1.4.632+396+g051dba16:
  * Don't show a backstage while performing `text-scale-adjust'
  * Make text-scale-adjust work
  * Fix it again
  * shimbun.el (shimbun-xml-parse-buffer): Fix typo
  * ChangeLog: fix date entries
  * * shimbun.el (shimbun-xml-parse-buffer): Work around malformed xml
  * Update copyright years
  * Docfix so not to be wider than 80 chars
  * Bugfix 'w3m-previous-image doesn't work' ([emacs-w3m:13747])
  * Fix typo in ChangeLog</changelog>
  <changelog author="schwab@linux-m68k.org" date="1634299200">- Update to version 1.4.632+501+gc088fe62:
  * * w3m-lnum.el (w3m-lnum-get-match-info, w3m-lnum-get-action): Rearrange docstrings so to be in 80-column
  * Typo fix
  * Use rfc6068.el if possible instead of rfc2368.el (issue #109)
  * * sb-sankei.el (shimbun-sankei-keep-login): Consult akamai cookie instead of local timer for expiry period. (shimbun-sankei-logout): Remove login/out cookies first and save last. (shimbun-sankei-login): Remove akamai cookie first as well. (shimbun-sankei-last-login): Remove variable. (shimbun-sankei-get-headers): Use date-to-time instead of encode-time and parse-time-string or timezone-parse-date.
  * * w3m-filter.el (w3m-filter-configuration): Add desc template
  * * w3m-filter.el (w3m-filter-configuration): Make Custom-set work
  * * w3m-bookmark.el (w3m-bookmark-menubar-update): Add a workaround to avoid a miscellaneous error
  * Treat application/emacs-lisp as text/plain ([emacs-w3m:13845])
  * user-agents: bugfix, update, improve friendliness (PR#106)
  * * w3m.el (w3m-user-agent-alist): Fill in in 80-column, reindent
  * user-agent variables: update, and add reference feature
  * w3m-user-agent-default-alist: bugfix macro element
  * New and improved filter for github (PR#105)
  * * w3m-filter.el (w3m-filter-github): Fill in in 80-column, reindent
  * w3m-filter: new and improved filter for github
  * * sb-sankei.el (shimbun-headers): Run shimbun-sankei-keep-login
  * * sb-sankei.el (shimbun-sankei-login): Cache a copy of password always
  * * sb-sankei.el (shimbun-sankei-logout{in|out}): Make those functions, instead of shimbun-sankei-keep-login, manage shimbun-sankei-last-login.
  * * sb-sankei.el (shimbun-sankei-keep-login): Fix last commit
  * Keep logging in in Sankei
  * Add timeout to w3m-download
  * Fix last commit (1059e92)
  * Hard-code the shell used in `w3m-download' with "sh" ([emacs-w3m:13826])
  * Use defvar-local in w3m.el (PR#101)
  * Replace make-variable-buffer-local with defvar-local
  * Bugfix: db-history single-page advances point too far (PR#100)
  * * w3m.el (w3m--goto-url--handler-function): Fix point position. (PR#99)
  * Position point on the first entry in the db history (PR#99) ;; slightly modified by yamaoka
  * Fix typo 講読→購読
  * reindent
  * Bugfix: db-history single-page advances point too far
  * * w3m.el (w3m--goto-url--handler-function): Fix point position. (PR#99)
  * Position point on the first entry in the db history (PR#99) ;; slightly modified by yamaoka
  * Fix typo 講読→購読
  * reindent
  * Fix typo 講読→購読
  * Add docstring for function w3m--goto-url--handler-function
  * db-history: advance to first history link
  * reindent
  * force-wide-display
  * (shimbun-sankei-clear-contents): Show restrictions
  * Fix previous commit
  * Delete nonsense distinction of writer and byliner
  * (shimbun-sankei-clear-contents): Distinguish author and writer
  * Fix last commit
  * Fix last commit
  * Add iframe tag to movie tag so to be able to view it in other browsers
  * Add links to embedded movies on Sankei
  * * sb-sankei.el (shimbun-sankei-clear-contents): Fix regexp
  * * sb-sankei.el (shimbun-sankei-clear-contents): Fix regexp
  * Support multiple article pages on Sankei
  * Minor fix in last commit
  * Show author name if it is expressed clearly in the original
  * Minor improvements on read and scan-sexps usage
  * * sb-yoshirin.el: Spelling fix: thumnail -&gt; thumbnail
  * Minor fix to Sankei
  * Display most detailed headline on Sankei
  * Display headline that might be the only place to show the author
  * Bugfix: make w3m-select-buffer-toggle-style work properly (PR#95)
  * Make Sankei support raw html embedded in java script
  * * sb-sankei.el (shimbun-sankei-clear-contents): Modify last commit
  * * sb-sankei.el (shimbun-sankei-clear-contents): Don't infloop
  * * sb-sankei.el (shimbun-sankei-clear-contents) : Fix regexps
  * * sb-sankei.el (shimbun-sankei-clear-contents) : Trivial fix
  * Make Sankei work on Emacs 26 and 27
  * Make Sankei support raw html embedded in java script
  * * sb-sankei.el (shimbun-sankei-clear-contents): Modify last commit
  * * sb-sankei.el (shimbun-sankei-clear-contents): Don't infloop
  * * sb-sankei.el (shimbun-sankei-clear-contents) : Fix regexps
  * * sb-sankei.el (shimbun-sankei-clear-contents) : Trivial fix
  * Make Sankei work on Emacs 26 and 27
  * Sigh; w3m-select-buffer-window needs to match the selected w3m buffer, not the select buffer.
  * Ensure that w3m-select-buffer-window is kept updated properly.
  * By the time split-window is called, the locally let selected-window variable is no longer a valid window. Thus, we *actually* need to call the selected-window function here.
  * Fetch more images
  * * doc/emacs-w3m.texi, doc/emacs-w3m-ja.texi (Newspapers Supported by Shimbun): Update Sankei groups.
  * Make Sankei work
  * Make Mainichi work
  * Make Asahi work (as for at least the rss group)
  * Declare w3m-queries-log-file in w3m-util.el
  * Move w3m-queries-log-file from w3m-util.el to w3m.el
  * Update
  * Reindent
  * w3m-queries-log-file: Use expand-file-name in variable defcustom
  * tweaks to handling url query parts
  * Update
  * Reindent
  * Place entire logic in function w3m-external-view
  * Revert last change that made `w3m-process-stop' do kill page buffer
  * Reindent
  * w3m-delete-buffer-if-empty: Only operate on live buffers
  * Fixes for w3m-current-url = NIL, loading images from ext program
  * Delete useless history warning
  * Make shimbun-sankei-login work
  * Silence the byte compiler on Emacs 28</changelog>
  <changelog author="schwab@linux-m68k.org" date="1649505600">- Update to version 1.4.632+512+gc3a3a947:
  * * Makefile.in (configure): Replace configure.in with configure.ac
  * Make the builder work for autoconf 2.70 and up as well
  * Drop Emacs 26 support
  * * shimbun/ChangeLog: Remove cancelled entry
  * * sb-kyoko-np.el (shimbun-clear-contents): Revert
  * * sb-kyoko-np.el (shimbun-clear-contents): Make date header precision
  * * mime-w3m.el: Fix last change
  * Typo fix
  * Conceal warnings for the case SEMI is absent (issue #108)
  * * sb-sankei.el (w3m-cookie-setup): Autoload it
  * * w3m.el (w3m-image-type-alist): Update docstring</changelog>
  <changelog author="schwab@linux-m68k.org" date="1680350400">- Update to version 1.4.632+546+gf8819bca:
  * Silence the byte-compiler on Emacs 30
  * ; sb-sankei.el (shimbun-sankei-login): Fix the way to parse forms
  * Silence the byte compiler
  * Silence warnings when compiling w3m.el individually ([emacs-w3m:13914])
  * ; Fix last change in aclocal.m4
  * Support Emacs 30
  * Update ChangeLog
  * Fix w3m-puny-encode1 failure on Emacs 29
  * * w3m.el (w3m-unsafe-url-warning): New face</changelog>
  <changelog author="schwab@linux-m68k.org" date="1708516800">- Update to version 1.4.632+563+gdc5136d2:
  * * shimbun/sb-sankei.el (shimbun-sankei-login, shimbun-sankei-keep-login): Revert
  * * shimbun/sb-sankei.el (shimbun-sankei-get-headers): Add author's name to subject if possible (shimbun-sankei-login, shimbun-sankei-keep-login): Update cookies handling
  * * shimbun/sb-sankei.el (shimbun-sankei-get-headers-ranking) (shimbun-sankei-get-headers): Update regexps
  * * shimbun/sb-sankei.el (shimbun-sankei-get-headers): Minor fixes
  * Add ``lexical-binding: nil'' to many files
  * * shimbun/sb-sankei.el (shimbun-sankei-get-headers-ranking): New function (shimbun-sankei-get-headers): Use it for the sankeisyo group; minor improvements
  * * shimbun/sb-sankei.el: Fix it so to work again for almost groups
  * * w3m.el (w3m-fontify-anchors): Improve the way to find unsafe links
  * * shimbun/mew-shimbun.el (mew-shimbun-unseen-setup): Fix advice
  * * w3m.el (w3m-add-referer, w3m-puny-utf-16be): Fix custom types
  * * w3mhack.el (w3mhack-insert-git-revision, w3mhack-generate-load-file): Fix so to generate emacs-w3m-git-revision on Emacs 29 and up as well
  * * nnshimbun.el (nnshimbun-replace-date-header): Compile it if and only if it is necessary
  * * mew-shimbun.el (mew-shimbun-unseen-setup): Use advice-add instead of defadvice that's been marked obsolete in Emacs 30
  * * w3m-util.el (w3m-delete-w3m-initial-frames): Doc fix
  * * mime-w3m.el (mime-display-message, kill-new): Use advice-add instead of defadvice that's been marked obsolete in Emacs 30
  * Drop Emacs 27 support
  * * nnshimbun.el (nnshimbun-replace-date-header): Don't quote lambda form</changelog>
  <changelog author="schwab@linux-m68k.org" date="1729512000">- Update to version 1.4.632+569+g5c965214:
  * shimbun/sb-sankei.el: Somewhat improve article readability
  * shimbun/sb-sankei.el: Make login suite work again
  * * w3m-filter.el (w3m-filter-regard-srcset=-as-src=): New filter
  * * shimbun.el (shimbun-mime-replace-image-tags): Allow srcset in img
  * * sb-sankei.el (shimbun-sankei-get-headers): Update regexp
  * * sb-sankei.el (shimbun-sankei-get-headers): Fix regexp</changelog>
</package>
<package pkgid="11fed03a5301f4c7ce3fdbf3b7499b271b30eadeb9ddb9ed9c170f106540b7a8473d9409caff991b50fc9033a3252147bcc1a746360a2b31b0b93003efbfed41" name="emacs-x11" arch="x86_64">
  <version epoch="0" ver="30.1" rel="160000.2.2"/>
  <changelog author="werner@suse.de" date="1743076800">- Avoid override of delete-selection-mode in site-load.el (boo#1239926)</changelog>
  <changelog author="werner@suse.de" date="1744027200">- Modify patch emacs-30.1-seccomp.patch
  * include asm/termbits.h is mandatory accordingly to latest ioctl_tty(2)
  * set default for MAP_DROPPABLE to 0x08</changelog>
  <changelog author="werner@suse.de" date="1746705600">- Remove/disable GNUS setup in (dot).gnu-emacs  (boo#1241188)
- Add patch emacs-30.1-minmalxauth.patch (boo#1241254)</changelog>
  <changelog author="werner@suse.de" date="1748865600">- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)</changelog>
  <changelog author="werner@suse.de" date="1749124800">- Last change does not work as the new binary with unexec are
  also *not* reproducible</changelog>
  <changelog author="werner@suse.de" date="1749211200">- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch</changelog>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
</package>
<package pkgid="e68469204c2c682d0f3d65416c60aaabc2c22cf0c4731b19c183781ca36a25749e51ee7f5c4f65088e9cf9b60ecea2eb13bd61808aa17133a2c927a3fb340bff" name="emacs-x11" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.1.1"/>
  <changelog author="werner@suse.de" date="1751371200">- Reenable tests again which is let the emacs binary find its eln
  files as well</changelog>
  <changelog author="werner@suse.de" date="1751544000">- Make 32bit architectures build again by using %_libdir at
  symbolic linking the final native compiled eln files back
  for installing and checking</changelog>
  <changelog author="werner@suse.de" date="1752235200">- Add patch emacs-30.1-pdumper.patch
  * Avoid changing initial lisp timestamp as well as gc changing
    statistics as lisp float in dumped images (bug#1239628)
- Remove --enable-checking=all (bug#1246121)
- Do not run checks in chroot environments as there are no
  namespaces</changelog>
  <changelog author="werner@suse.de" date="1752494400">- Switch over to libalternatives for etags to provide a ctags
  variant (bsc#1245894)</changelog>
  <changelog author="werner@suse.de" date="1752580800">- Move .gnu-emacs to /usr/etc/skel/</changelog>
  <changelog author="adam.majer@suse.de" date="1753358400">- Remove ctags.1 that's unused with libalternatives
- Requires: alts, not used in scriptlets</changelog>
  <changelog author="werner@suse.de" date="1755172800">- Update to GNU Emacs version 30.2
  * Mainly a bug fix version
- Port patches
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * emacs-24.4-ps-bdf.patch
  * emacs-29.1.dif
  * emacs-30.1-pdumper.patch
- Remove patch emacs-parallel-compilation-53a5dada.patch now upstream</changelog>
  <changelog author="schwab@suse.de" date="1759406400">- Enable valgrind support on riscv64</changelog>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
</package>
<package pkgid="c5d4e0c655c47390f7e886484af99c4f74ea7ac66e234c0f4c884268497ef3c5ebc9bc045497409fb9c2f39ad09c2952cc0423569d049ac49441992a89f1abf3" name="emacs-x11" arch="x86_64">
  <version epoch="0" ver="30.2" rel="160000.2.1"/>
  <changelog author="werner@suse.de" date="1764331200">- Avoid direct dependencies to X11 libraries for wayland port</changelog>
  <changelog author="werner@suse.de" date="1768392000">* Add patch desktop.patch and then remove dependency on
  update-desktop-files (jsc#PED-15201)</changelog>
  <changelog author="werner@suse.de" date="1770724800">- Enable %check again</changelog>
  <changelog author="werner@suse.de" date="1770724801">- Clarify when bubblewrap is required at runtime
- Make %check work again</changelog>
  <changelog author="werner@suse.de" date="1770811200">- Add patch emacs-30.2-fix-zoom.patch
  * Avoid the currently broken zoom test</changelog>
  <changelog author="bjorn.kettunen@thaodan.de" date="1772280000">- Add macro to add Emacs packages to load-path
- Enable lexical bindings in startup-macros</changelog>
  <changelog author="werner@suse.de" date="1776686400">- Add patch emacs-30.2-silent.patch
  * To silent the useless warning on memmove
- Add patch emacs-30.2-tree-sitter-0.26.8.patch
  * Make it build with tree-sitter-0.26.8 security update (boo#1262007)</changelog>
  <changelog author="werner@suse.de" date="1776772800">- Let treesit test find its ruby shared library
- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Add commit to reflect new syntax ot tree-sitter like :equal
    changed to :eq?</changelog>
  <changelog author="werner@suse.de" date="1776945600">- Add patch emacs-30.2-boo1262611.patch
  * Fix CVE-2026-6861: Memory corruption vulnerability when
    processing SVG CSS (boo#1262611)</changelog>
  <changelog author="werner@suse.de" date="1777032000">- Modify patch emacs-30.2-tree-sitter-0.26.8.patch
  * Let find the tree-sitter code find the libraries below
    %{_libdir}/tree-sitter/ without using LD_LIBRARY_PATH</changelog>
</package>
<package pkgid="e9771978247a241d693871ac6de947dde7936f7619f2581bab525f86cf3e2530265cb80550ee6496cf6e8267e1f93a2ef16fec3fb363b460d588dc01121d6d05" name="embree-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="bp160.1.2"/>
  <changelog author="Ben Greiner &lt;code@bnavigator.de&gt;" date="1637668800">- Update to version 3.13.2
  * Avoiding spatial split positions that are slightly out of
    geometry bounds.
  * Introduced rtcGetGeometryThreadSafe function, which is a thread
    safe version of rtcGetGeometry.
  * Using more accurate rcp implementation.
  * Bugfix to rare corner case of high quality BVH builder.
- Embree 3.13.1
  * Added support for ISPC+ARM.
  * Releases upgrade to TBB 2021.3.0 and ISPC 1.16.1
- Use internal tasking instead of TBB
  * gh#embree/embree#348
  * boo#1192994</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1650801600">- Update to version v3.13.3
  * Invalid multi segment motion blurred normal oriented curves
    are properly excluded from BVH build.
  * Fixing issue with normal oriented curve construction when
    center curve curvature is very large.
  * Due to this change normal oriented curve shape changes
    slightly.
  * Fixed crash caused by disabling a geometry and then detaching
    it from the scene.
  * Bugfix in emulated ray packet intersection when
    EMBREE_RAY_PACKETS is turned off.
  * Bugfix for linear quaternion interpolation fallback.
  * Fixed issues with spaces in path to Embree build folder.
  * Some fixes to compile Embree in SSE mode using WebAssembly.
  * Bugfix for occlusion rays with grids and ray packets.
  * We do no longer provide installers for Windows and macOS,
    please use the ZIP files instead.
  * Upgrading to Intel® ISPC 1.17.0 for release build.
  * Upgrading to Intel® oneTBB 2021.5.0 for release build.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1650974400">- Update _constraints for aarch64</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1666440000">- Fix cmake devel config to reflect reality</changelog>
  <changelog author="hpj@urpla.net" date="1666440001">- Update to version 3.13.5:
  * regenerated documentation
  * setting version to v3.13.5
  * ci: add github actions workflows
  * FastAllocator: fix the false sharing in SpinLock array
  * Fixed spatial splitting for non-planar quads.
  * no longer automatically starting thread nor setting affinity
  * disabling thread ID affinity re-mapping as it causes issues inside LXC containers
  * TBB: Stop task_scheduler_observer when TaskScheduler is destroyed
  * Improved self intersection avoidance for RTC_GEOMETRY_TYPE_DISC_POINT geometry type.
  * Fix compilation issues on macOS 12.5 and Apple clang version 13.1.6
- Update to version 3.13.4:
  * Using 8-wide BVH and double pumped NEON instructions on Apple M1 gives 8% performance boost.
  * Fixed binning related crash in SAH BVH builder.
  * Added EMBREE_TBB_COMPONENT cmake option to define the component/library name of Intel® TBB (default: tbb).
  * Embree supports now Intel® oneAPI DPC++/C++ Compiler 2022.0.0
- Switch to _service based package source
- Use simd compiler ispc</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1666699200">- Remove the cmake config tweaking</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1667390400">- Build embree as shared library, blender no longer requires a
  static library build.
- Reduce memory constraints, use limit_build to avoid build
  failures due to OOM.
- Fix build on ARM (gh#embree/embree#383, gh#embree/embree#410)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1667476800">- Obsolete the -devel-static package</changelog>
  <changelog author="Hans-Peter Jansen &lt;hp@urpla.net&gt;" date="1691064000">- Fix library package naming</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1743854400">- Update to version 4.4.0:
  * renamed test-package job, needed for creating zip with test data
  * update doc
  * ci: disable signing on windows for non-release build jobs
  * ci: fix integrate workflow
  * ci: remove unused test-package job from release workflow
  * Remove unused .gitlab-ci.yml file
  * removed dpcpp-version from release-linux-sycl-test job
  * using libXXX.so* semantics
  * updated dpcpp v6.0.0 runtime in package.cmake
  * Disabled memory compression for acceleration buffer
  * Ensuring that instances point to acceleration structures in device memory, not host memory.
  * Removed vscode files, not part of this PR
  * update compiler to intel llvm v6.0.0 for all release jobs also CPU
  * update compiler to intel llvm v6.0.0 for all release jobs
  * fixing host_device tutorial race condition
  * fixing embree_info and embree_minimal sycl tutorials missing DL_LIBS
  * disabled internal driver tests
  * Moved buffer releases in host/device tutorial
  * disabled internal driver tests for release
  * removed bvh data host device test, not needed any more
  * updated windows internal driver version
  * updated windows public driver, upgraded dg2 tests to ubuntu24.04 fixed coverity issue update gfx-ubuntu24-internal/public.env for CI update linux intenal drivers fix linux release CI fix integration CI
  * Fixed mistake in async buffer copies Fixed forest tutorial Skip pvc tests in nightly.yml fixed unititialized empty geometry commit segfault
  * Removed redundant copies in host/device tutorial
  * skip pvc tests
  * removed EMBREE_SYCL_BVH_DATA_HOST_DEVICE cmake option and made it enabled by default
  * little cleanup
  * Fixed uninitialized memory
  * Device buffers are now automatically updated on Geometry::commit()
  * documentation: rtcTraversable invalidation on rtcCommit
  * removed internal rtas builder, made EMBREE_SYCL_L0_RTAS_BUILDER the default
  * fix issues with host/device memory API on iGPU fix blender segfault with geometry == NULL inside geometries array
  * remove timing output from dynamic scene tutorial
  * update internal Linux and Window driver in CI
  * changelog, typos
  * add CI test for BVH data in host device memory
  * add export filters for commit with queue API functions
  * more general documentation
  * documentation for ray queries using RTCTraversable
  * updating general intro documentation
  * make rtcCommitSceneWithQueue work with out-of-order SYCL queues, too
  * change rtcCommit???WithQueue interface to return sycl::event
  * docu fixes
  * revert accidental changes in ray flag settings
  * rename memory types and account for host unified memory in buffer constructor
  * update rtcCommitScene(|WithQueue) documentation
  * update rtcSet(New|Shared)GeometryBuffer(|HostDevice) documentation
  * fix wrong deallocation in multi_instance_geometry tutorial.
  * update documentation for RTCBuffer
  * add nightly Windows multilevel test.
  * refactor alloc. remove global (tls) SYCL context and device.
  * rename host_device_memory tutorial and add CI tests
  * clear host scratch space for static scenes
  * add cmake option for explicit host/device BVH data
  * add sycl events for sychronization
  * less alloc/free when creating device representation of scenen/geometry
  * small fix for validation API
  * add padding to tree vertex and color data buffers for safe SIMD access.
  * create CPP from ISPC tutorials
  * add ISPC API using RTCTraversable
  * change API naming for buffers form 'Ex' to 'HostDevice'
  * port forest tutorial to new host/device memory support
  * port of multi_instanced_geometry tutorial to RTCTraversable interface was missing
  * do not use ALIGNED_STRUCT_ macro for Scene and Geometry
  * cleanups
  * test address sanitizer issue
  * rework buffer interface
  * memory passing interface
  * scene is now in device memory, too. USM shared memory is now only used in tutorials.
  * add debug tutorial and restore state of other tutorials
  * BVH buffer in explicitly managed host/device memory on systems without unified memory (e.g. dGPUs) geometry data works
  * fix wrong assert about maxTimeSegments. fix missing sign-extension when using device memory for BVH data.
  * Suppressed warnings with latest clang/sycl compiler
  * Version update to 4.4.0
  * internal ci: update dependencies
  * remove requirement for CPU feature RDRAND
  * refactor scene array for (multi-level) instancing into struct
  * simplify intersect_instance and intersect_instance_array
  * update dpcpp runtime dependencies for installation
  * update driver versions for CI tests
  * update sycl nightly version for CI tests
  * Removed usage of no longer supported SYCL subgroup shuffles.
  * fix public ci (#2732)
  * update documentation
  * update version in testing package
  * update reusable workflows.
  * bump version and update changelog
  * Compute hwaccel adresses on the fly to prevent back-migration of BVH data.
  * Fix include order causing unwanted dllexport symbols
  * disable unneccessary stripping of files on Windows to WA binary signing issue.
  * Update API documentation and changelog.
  * Add RTC_ERROR_LEVEL_ZERO_RAYTRACING_SUPPORT_MISSING and the API functions rtcGetDeviceLastErrorMessage and rtcGetErrorString.
  * fix unused variable warning
  * fix sycl header path warning
  * test new public Windows driver.
  * update to sycl nightly-2024-06-12
  * Cleaned up whitespace
  * Split array of Scene* into root and instances
  * Fixed duplicate SYCL context
  * revert pipeline renaming
  * basic public ci (#2725)
  * fix typo in max_triangles_per_leaf option.
  * Fix triangle splitting crash where FP error causes binning differences
  * Provide a configuration setting for limiting leaf size
  * use composite mode in release job for pvc testing due to switch to older dpcpp.
  * clean up continouus tests and move some to nightly.
  * use same compiler version for release as last time.
  * remove ICX-RC tests. ICX 2024.1 is out.
  * turn L0RTAS builder off for nightly validation test.
  * add known issue about ISPC and macOS universal binary in changelog.
  * use UMD migration for PVC for now because KMD migration is buggy.
  * move function for USM prefetch into embree4.dll
  * add test function dummy
  * turn level zero raytracing acceleration structure build on by default.
  * update tests to ICX 2024.1 compiler.
  * add instruction to install intel-level-zero-gpu-raytracing to docu and changelog.
  * fix misleading "USM allocation not enabled" exception thrown Tutorial destructor when a SYCL device could not be created successfully.
  * update linux internal driver.
  * add embree_info and embree_minimal to CI tests for debugging purposes.
  * check for driver support for building RTAS properly.
  * update Linux drivers.
  * update Windows drivers.
  * fix output operator, issue #486
  * add scene flag to trigger USM shared prefetch to GPU at the end of rtcCommitScene
  * update PVC tests.
  * remove references to obsolete CMake variables
  * more tests with sycl rc.
  * use public driver for nightly PVC tests, too.
  * regress to older SYCL version due to issues with getting profiling information.
  * handle exception in device info querying code.
  * fix dpcpp download script for new versions of the compiler
  * build Windows DG2 tests with sycl-nightly, too
  * fix release CI job.
  * Documentation update
  * version and changelog
  * use sycl-5-2-0 for release binaries.
  * bump cmake_minimum_required verion to 3.5
  * Fix tbb macOS port name
  * add static assert for proper RTCHitNt&lt;N&gt; alignment in verify.
  * Added alignment definitions to RTCHitNt and RTCRayNt
  * Fix for barycentric coordinate verification in
  * remove unused image code.
  * use public drivers for PVC, too.
  * fixes for current sycl nightly and some warning fixes
  * add tests for syclos release candidate.
  * add macOS universal binary build test.
  * update to TBB 2021.12.0
  * Build for ARM on Apple silicon machines by default when CMAKE_OSX_ARCHITECTURES is not set.
  * Enabled support for Universal Binaries on macOS
  * update drivers enable l0rtas in continuous and nigtly tests
  * Do/upgrade outdated os tests (#2711)
  * add token permissions for github workflows.
  * add buildbench to performance CI pipeline
  * add SYCL version of buildbench
  * fine tuning google benchmark
  * more precise perf-CI measurements
  * Do/scripts cleanup (#2701)
  * better output of which ISPC executable is found/used
  * test ispc 1.23.0
  * Do/performance regression tests (#2699)
  * remove printf
  * test AVX512 compilation on x86 macOS in continuous test.
  * Run Embree in AVX512 mode on AVX512 capable x86_64 machines running macOS.
  * compile embree_info also for ARM.
  * print warning about "flush to zero" and "denormals are zero" only on x86 systems
  * fix missing backslash for overwriting EMBREE_TESTING_INTENSITY
  * fix path for macos-arm binary analysis and antivirus scan (#2692)
  * allow overriding of EMBREE_TESTING_INTENSITY for tests
  * update documentation
  * apply internally needed patch to glfw only when explicitly stated.
  * use same self-compiled tbb on macOS for x86_64 and arm64 versions.
  * update drivers
  * some issues with nightly tests
  * add bdba and virus scan for arm binaries, too
  * use TBB compiled for NAS for ARM release package
  * fix find command in package test check
  * docu
  * increase test epsilon for Apple Clang 14 on macOS ARM
  * add missing tests of release packages
  * some fixes.
  * different names for x86 and arm macOS packages
  * update to TBB 2021.11 and ISPC 1.22
  * bump embree version to 4.3.1
  * add NEON and NEON2X tests to continuous jobs again.
  * update sycl-nightly and ICX RC
  * Do/macos notarization update (#2684)
  * removed AOEUAOEU string from integration test exe (#2683)
  * Do/devel (#2682)
  * add dependloadflag also for msvc
  * Fail when no tests are executed.
  * Do/fix macos test execution (#2677)
  * updating PVC deviceID check
  * fix artifact name
  * move Windows DG2 ICX tests to continuous again.
  * update docu regarding supported compilers.
  * update Windows public driver version again.
  * remove Windows release driver version. We use official version now.
  * drop ICX versions from 2023
  * remove EMBREE_LEVEL_ZERO CMake variable from presets
  * disable ARM emultation tests for now because runner seems to be broken
  * cleanups
  * fixes for nightly tests
  * revert public Windows driver
  * add DG2 Windows tests with public and release drivers in continous CI, too
  * added back notarization with TODO comment to mac tests
  * make notarize.sh executable
  * update to correct icx version
  * add missing feature flag checks
  * Do/release macos extern notarize (#2670)
  * Run Windows tests in CI again
  * Do/driver update (#2668)
  * Do/threadsanitizer issue (#2667)
  * fix dll dependency location for ICX 2024
  * add dependent load flag to executables and shared libraries.
  * test intel-llvm/nightly-2023-12-18
  * update continouus ICX tests to 2024.0 and remove RC tests.
  * catching exceptions in rthwif tests
  * adding compare threshold to cornell_box test
  * windows testing ICX 2023.2.1 (#2663)
  * using force-delete for windows CI (#2662)
  * fix nightly L0RTAS typo error (#2661)
  * Sh/simd sse2neon 1.6.0 (#2660)
  * fix coverity, upgrade all CI cmakepresets, accelerate continuous (#2659)
  * add nightly test for validation api
  * EMBREE_SYCL_RT_VALIDATION_API=ON and EMBREE_SYCL_IMPLICIT_DISPATCH_GLOBALS=OFF works again
  * add ze_api header to repository directly.
  * WA compiler issues under Windows with -D_DEBUG.
  * make rthwif tests compatible with TBB 2023
  * fix static linking issues with ze_wrapper library
  * user-defined thread count precedence
  * moving most Windows DG2 tests to nightly testing
  * enabling usage of L0RTAS builder in CI under Windows
  * requiring RTAS extension when enabling EMBREE_SYCL_L0_RTAS_BUILDER
  * updating gfx-driver
  * Add missing EMBREE_GEOMETRY_??? to embree-config.cmake
  * updates
  * add old include/lib directory structure for ICX 2024, too.
  * add also weird libsycl.so version (libsycl.so.7.0.0-8 ?!?!?)
  * add pi_win_proxy_loader.dll to release package
  * update documentation
  * use rockylinux for release and split linux sycl
  * update compilation docu and version number
  * add instance array geometry type.
  * disable nightly bezier_round furball tests on 2 windows configs for now
  * add tests for sycl-nightly RK version
  * Update changelog.md
  * add ICX release candidate tests
  * WA for changed sycl include headers in oneAPI DPC++ 2024.0
  * validating that rtasFormat is not ZE_RTAS_FORMAT_EXP_INVALID
  * added argument to set resolution support for cornell_box test
  * integration of coverity
  * disabling L0 RTAS builder by default
  * disabling L0 rtas builder only for release
  * added cmake option to enable usage of L0 rtas builder
  * properly checking if rtas extension can get loaded
  * not using rtas_builder extension by default in rthwif tests
  * not using rtas_builder extension by default yet
  * removed unused file
  * fixed deviceID check for PVC
  * cherry pick from carlocab (#2623)
  * do not sign the zip package after build for windows any more (#2624)
  * update to intel-llvm 20230830
  * remove using sycl::fmax and using sycl::fmin
  * Do/update compiler cmakepreset (#2621)
  * use ubuntu 20.04 for release again and update release driver
  * do not source dpcpp environment manually  Please enter the commit message for your changes. Lines starting
  * consistently using main version of reusable workflow
  * Revert "use DPCPP_SETUP_SCRIPT environment variable in test.py script"
  * updated graphics drivers in CI
  * use DPCPP_SETUP_SCRIPT environment variable in test.py script
  * CI-perf sycl build on Ubuntu 22.04 (#2617)
  * docker GPU image for perf CI to embree/ubuntu:22.04 (#2615)
  * cleanups to sycl namespace usage
  * fixed sub_group related compile warning
  * - updating to dpcpp compiler sycl-nightly/20230724 - fixing compile issues in rthwif tests
  * rthwif tests use RTAS build extension only when available
  * using L0 RTAS build extension only when available
  * implemented varying version of rtcGetGeometryTransform for ISPC
  * matching rcp math between rthwif_test and BVH builder
  * Add support for ARM64 windows platform cmake
  * added configuration to run rtas builder tests using internal or level zero implementation
  * Do/update driver (#2607)
  * add memory monitor to GPU BVH build
  * fix imgui empty label complaint on Windows
  * adding check if rtas extension present and properly initialized
  * checking ze_rtas_builder_procedural_geometry_info_exp_t reserved member to be 0
  * Do/release (#2601)
  * Do/release (#2597)
  * fix typo (#2592)
  * removed extra comma (#2591)
  * setting version to 4.2.0
  * SYCL version of Embree with GPU support is no longer in beta phase.
  * updated changelog
  * Added PVC runner to perf CI (#2588)
  * clarified that rtcOccluded and occlusion filter cannot get used to gather next n hits
  * Added rtcGetGeometryTransformFromScene API function that can get used inside SYCL kernels.
  * Added CI feature to store results in database (#2584)
  * Do/fix release package name sycl (#2583)
  * Do/release test package (#2579)
  * passing dispatch globals for through debug RTAS build API extension
  * fix to get dispatch globals allocation working again for debugging purposes
  * New model repository address (#2575)
  * Improved BVH build performance on many core machines by avoiding spin locks.
  * using zeDeviceGetProperties to query RTAS device properties
  * - using new rtas API header - properly returning ZE_RESULT_EXP_RTAS_BUILD_DEFERRED and ZE_RESULT_ERROR_HANDLE_OBJECT_IN_USE error codes
  * adding RTASBuilder support to ze_wrapper
  * moving ze_rtas.h to level_zero folder
  * using decltype to get function types in ze_wrapper
  * init ZeWrapper in rthwif tests.
  * fix rthwif tests with new level zero runtime loading change.
  * adding MTL support
  * fixing experimental disable of deviceID check
  * fix rthwif tests for test package (#2567)
  * load ze_loader library during runtime with dlopen/LoadLibrary. Remove EMBREE_LEVEL_ZERO CMake variable. It is used now by default.
  * Do/integration (#2562)
  * adding Impl to RTAS builder to have separate symbols to API function names
  * added filter files for test execution (#2541)
  * Do/fix fopen (#2558)
  * replace insecure fopen with secure std::ifstream (#2557)
  * using ZE_RESULT_EXP_ERROR_RETRY_RTAS_BUILD error code to re-try rtas build operation
  * removed zeRTASInitExp/zeRTASExitExp functions
  * checking that number of geometries is in range
  * prepared L0 rtas builder to support multiple rtas formats
  * limiting triangle pair primID delta to 5 bits
  * L0 ray tracing support tests can use rtcore SW simulation
  * Do/release (#2554)
  * rebase release branch into devel (#2553)
  * Do/release (#2551)
  * changed package filenames (#2550)
  * adding always_inline for Embree SYCL API functions
  * make EMBREE_NO_SPLASH a proper CMake option.
  * making ze_rtas_builder_geometry_exp_flag_t opaque by default
  * updated to latest L0 rtas build API spec
  * checking if rtas allocation is in 48 bit address range
  * using proper ZE_STRUCTURE_TYPE_RAYTRACING_MEM_ALLOC_EXT_DESC stype for rtas allocations
  * - changed version to 4.1.0 - added support for Intel(R) Data Center GPU Max series to changelog - removed limitation of support to specific Arc/Flex version, all products are supported now. - updated DPC++, driver, and compute-runtime versions to use
  * returning ZE_RESULT_ERROR_INVALID_ENUMERATION error when stype is not as expected
  * properly checking for stype of builder properties and descriptor
  * adding Level Zero rtas header from spec
  * updates to compile Level Zero ray tracing builder API to match spec
  * using argument structure in bounds callback for Level Zero ray tracing build API
  * using standard Level Zero results in Level Zero rtas build API
  * removing ze_raytracing CI tests
  * Do/remove macosx embree tag (#2543)
  * cleanups to cornell_box rtas build example
  * only including rttrace.h
  * renamed rtbuild and rttrace API header files
  * returning proper error codes in rtas builder
  * adding flags to rtas builder properties
  * adjusted Level Zero ray tracing Build API struct member names to match spec
  * adjusted Level Zero ray tracing Build API function names to match spec
  * implemented rtas device properties query for L0 ray tracing build API
  * adjusted property query for parallel operation object in L0 ray tracing build API
  * removed not required update of build arguments
  * adopted build and size query functions of L0 ray tracing build API
  * introduced rtas builder concept to L0 ray tracing API
  * using L0 ray tracing API to build acceleration structure for cornell_box test
  * * Added CMake options for sphere and curve backface culling * Moved sphere backface culling documentation to the right place
  * Added EMBREE_BACKFACE_CULLING_SPHERES option
  * do not use exception mechanism for BVH build retry due to TBB 2020.3
  * update dpcpp to 20230417 and fix deprecation warnings
  * fix config error in generated embree-addtest.cmake (#2536)
  * fix tarball package unpacks into single folder (#2535)
  * using proper RT allocation function to allocate RTDispatchGlobals
  * fixed issue that caused allocation of RTDispatchGlobals by default
  * build a deliverable testing package (#2532)
  * fixed success job
  * updates to compile ze_raytracing builder in isolation in separate repository
  * properly destroying parallel build operations
  * ci: update gfx-driver internal to ci-neo-025905
  * all names of ze_raytracing build API implementation match spec
  * fixed interface of some ze_raytracing API functions
  * implemented zeRaytracingAccelFormatCompatibilityExt in ze_raytracing build API
  * implemented build flag to skip duplicate any hit shader invokation
  * added stype and pNext to ze_raytracing build API implementation descriptors
  * removed rthwifGetSupportedFeatures from ze_raytracing build API
  * introduced triangle format, quad format, and vertex format in ze_raytracing build API
  * added arm support to changelog and doc (#2524)
  * added EMBREE_ISA_NEON2X to embree-config.cmake (#2526)
  * Minor fixes to performance CI (#2525)
  * Use all models from repo
  * added arm emulation testing to nightly (#2520)
  * turning EMBREE_LEVEL_ZERO on in one CI test
  * fixed success CI task
  * update doc and fix intelstyle repo url
  * disable furball hermite round test for now.
  * use cmake --build instead of make in package scripts
  * don't use -no-intel-lib along with -static-intel on Linux with SYCL enabled
  * add imf-use-svml=false even though it seems to not work
  * set next Embree version to 4.0.1
  * make EMBREE_LEVEL_ZERO a proper CMake option
  * add frexp implementation for DPC++ with -no-intel-lib
  * changelog
  * try no-intel-libs again along with static-intel flag
  * - rthwif can get build standalone - creating libze_raytracing packages in CI
  * Intel(R) Data Center GPU Flex Series is supported now
  * update drivers
  * add EMBREE_NO_SPLASH enviroment to disable beta splash screen (#2504)
  * update sycl-nightly to 20230304
  * Increase compare threshold for known issue with Apple AVX2 linear curves (#2508)
  * Revert "disabling spatial splits in rthwif builder"
  * use cmake --build instead of make to be able to use Ninja
  * use Ninja for DPC++ builds
  * fixed issue with EMBREE_BUILD_GOOGLE_BENCHMARK_FROM_SOURCE
  * fix renamed benchmark target name for ispc tutorials
  * fix struct/class redeclaration warning
  * clean up google benchmark CMake cache variables
  * download and build google benchmark from source
  * rthwif builder no longer throws RTCError exception
  * introduced separate priminfo_mb.h file and moved primref into builders folder
  * disabling spatial splits in rthwif builder
  * separated rtbuild and rttrace in rthwif
  * removed Embree specific code out of rthwif
  * Do/improvetesting (#2499)
  * workaround for accidentally installed glfw (setting directory properties only works for CMake &gt;= 3.22)
  * don't install embree_info source code to src folder in release package
  * prevent creation of default sycl device to make CPU versions of tutorials runnable on systems without available GPU drivers
  * - added usage example to L0 rt build API - added zeRaytracingAccelCompatibilityExt function to L0 rt build API - added device input to ze_raytracing_build_accel_ext_desc_t descriptor
  * ci: add ATS-M testing job
  * fix release sycl linux build
  * Fixed a bug that limited the size of meshes supported in RT hardware BVH builder.
  * changelog
  * add continuous sycl test with TBB 2020.3
  * fix rthwif build retry for TBB 2020.3
  * added support for RT software simulation for validation purposes
  * Frei/devel (#2489)
  * Updates to L0 ray tracing build API - properly naming flag enum and introducing flags uint - renaming ze_raytracing_accel_size_ext_desc_t to ze_raytracing_accel_size_ext_properties_t - introducing ze_raytracing_format_ext_t and specifying format for triangle, quad, and vertex buffers - removed ZE_RAYTRACING_BUILD_EXT_FLAG_DYNAMIC
  * fix line.gather with time interpolation causing inconsistent sphere cap intersections
  * calculating improved epsilon for triangles and quads in pathtracer
  * fix small errors in test.py
  * fix set but unused warning in tinyexr
  * fix sycl deprecation warning
  * update release jobs, too
  * reintroduce setup_dpcpp and setup_gfx stages again
  * update to sycl-nightly/20230209 and clean up .ci-env
  * initialize debug data with time if --time is passed
  * fix linux-PVC-2T job to use docker_gpu
  * Remove core.autocrlf from CMake patch command
  * set autocrlf to fix glfw patch issues in new reusable workflows (thanks @Krzysztof!)
  * use Trevors GHA for installing drivers on-the-fly.
  * move 2 continuous mac tests to nightly
  * throwing error when build hardware BVH is too deep
  * further updates to L0 ray tracing build extension
  * fixed issue with winding order in perfect watertight ray/triangle intersector
  * - Using proper naming convention for L0 ray tracing build extension - Adding Doxygen support to documentation of L0 ray tracing build extension - Updating documentation of L0 ray tracing build extension
  * added back missing check_arm_neon.cpp file
  * Improved performance for Tiger Lake, Comet Lake, Cannon Lake, Kaby Lake, and Skylake client CPUs by using 256 bit SIMD instructions by default.
  * rthwif already uses resize, which allocates exact for static scenes, and may over allocate for dynamic scenes that increase in size
  * Resize of empty embree vector allocates exact size to match std::vector behavior.
  * ci: switch internal driver to ci-neo-master-025593
  * add missing .so files for Linux CPU only version.
  * allocating proper BVH buffer size
  * using ZE_RELAXED_ALLOCATION_LIMITS_EXP_FLAG_MAX_SIZE mode to allocate large BVH buffers with L0
  * throwing Embree error when BVH memory allocation failed
  * properly initalizing pNext member of ze_raytracing_mem_alloc_ext_desc_t
  * Improved performance for Tiger Lake CPUs.
  * setting version to v4.1.0
  * without -no-intel-lib, svml_dispmd.dll is also needed for CPU only version.
  * turn off no-intel-lib for now. this causes ICX compiler bugs.
  * Fix build error in rtcore_common.isph
  * update GLFW to latest version
  * some fixes in embree-config.cmake for static Embree build.
  * add CMake variable to control building GLFW from source
  * patch DLL loading path in ImGUI.
  * download GLFW from source and patch DLL loading path.
  * add vcruntime and msvcp DLLs when packaging Embree.
  * clean up search for SYCL dependencies.
  * also add tbbmalloc.dll/.so when packaging Embree
  * WA on Windows when using -no-intel-lib.
  * Windows debug mode WA for std::vector operator[] access in SYCL kernel.
  * cleanup of source_sycl_env.sh
  * disable statically linked TBB for rthwif builder by default.
  * Updated beta statement and regenerated documentation.
  * fixed interchanged windows/linux build artifacts in release.yaml
  * regenerated documentation
  * Added messages what Embree SYCL version is still in beta phase.
  * Fix docu with regard to setting embree_DIR path correctly
  * remove unused device parameter from test.py invokations
  * remove iGPU enabled problem from known issues
  * add "threads per EU" as criteria to filter out non RTHW cards and add max num of EUs as device selection score
  * add embree_info tutorial and printSYCLDevice functionality
  * add creation of startup.bat script in download_dpcpp.sh
  * Spelling compilation.md
  * Perf-CI compiler change to ICX (#2451)
  * small changes in release package names
  * add note about deprecated Intel Compiler being not officially supported anymore
  * Fix alignment problem in ray mask tutorial
  * Turn ispc support off by default
  * Added third-party-programs file for Intel(R) oneAPI DPC++/C++ compiler
  * Add reference to minimal CMake version in compile docu.
  * update supported compilers and remove MAX_ISA from cmake config example
  * rename RTC_FEATURE_FLAG_RAY_MASK to RTC_FEATURE_FLAG_32_BIT_RAY_MASK
  * modify minimal_sycl tutorial to match documentation wrt specialization constants
  * set maximum glibc version to 2.28 on Linux CPU release
  * Add documenation for compilation with the Intel(R) oneAPI DPC++/C++ compiler.
  * change kernel.rc encoding to UTF-8
  * fix memleak in ray mask tutorial
  * add explanation of the RTC_FEATURE_FLAG_RAY_MASK flag
  * add test for ray mask tutorial
  * modify ray tutorial to pass klockwork scan
  * fix SYCL code when ray masks are turned off.
  * execute trav loop when ray masks are used.
  * add ray mask tutorial
  * libmmd is needed on Windows with ICX in CPU only mode
  * don't link against DPC++ intel libs when SYCL support is off.
  * use oneTBB 2021.7.0 for mac release
  * remove WA for old sycl standard of ICX
  * windows and linux release use ispc 1.18.1 and tbb 2021.7.0
  * cleanup unused configuration options
  * remove unneccessary --include-intel-llvm
  * turn off vsync in tutorial
  * clean up continuous test names
  * test tbb 2021.7.0 and ispc 1.18.1
  * update package_linux.sh script (changes cherry-picked from Raszkowski, Krzysztof)
  * fix Linux SYCL packaging for ICX 2023.0.0
  * fix test script invokation on ubuntu 22.04
  * update glibc requirements for Linux CPU build (ICX2023.0.0 requirements)
  * update continuous and nightly tests and replace ICC with ICX
  * use Rocky Linux 8.7 for Linux CPU release (req. of ICX 2023.0.0)
  * fix artifact names in SYCL releases
  * also package svml_dispmd.dll and libmmd.dll form the DPC++ redistributables on Windows
  * remove dpcpp specific package script for Windows
  * do not copy ze_loader library/dll. it is in the driver.
  * Windows now uses ICX and Ninja for release build package
  * update failing nightly tests to use ICX 2023.0.0
  * use correct stack protection flag on Linux for ICX
  * update release builds to use ICX 2023.0.0 and TBB 2021.5.0
  * move debug linux ICX test into nightly (takes too long) and change build type to release
  * new perf CI runners, added asia_dragon workload (#2440)
  * add tests for oneAPI DPC++ 2023.0.0 compiler
  * Added simple performance measurements to CI (#2435)
  * added cmake option EMBREE_RTHWIF_TBB_GIT_REPOSITORY to set git repository location of TBB
  * added cmake option EMBREE_RTHWIF_TBB_URL to set URL to TBB version to use
  * bugfix linei missing sphere cap use select for linei leftExists filter
  * added rudimentary fur ball to scenegraph/xml_loader
  * read/write images with tinyexr and stb_image
  * fix imgui event handling
  * compiling DPC++ release builds with all ISAs enabled
  * added list of supported Arc GPUs
  * updated documentation to DPC++ compiler 2022-12-14
  * increasing testing intensity of DPC++ release builds to 4
  * added SYCL windows release build with JIT mode
  * fixing path to SYCL libraries when creating package under Windows
  * fixing imgui compile issues under macOS with ICC
  * bugfix of SYCL compilation when AVX enabled
  * referencing embree_rthwif-targets.cmake in embree-config only when Embree compiled to static library
  * updates to device ID detection
  * make oneAPI DPC++ compiler (ICX) work with EMBREE_SYCL_SUPPORT on Windows
  * add CMake option to disable direct usage of level zero
  * some fixes for oneAPI dpcpp compiler. still WIP.
  * ICX works again (without EMBREE_SYCL_SUPPORT) under Windows
  * clean up dpcpp.cmake on Windos and fix compile warnings
  * prevent warnings on Windows caused by TBB, and use of getenv and fopen
  * add stack protector option to dpcpp on Windows
  * removed RTC_ERROR_UNSUPPORTED_GPU error code as not required
  * update sycl-nightly to 20221214
  * update ImGUI
  * Revert "switching VS studio tests &lt;= 2017 to release mode due to long path problem."
  * using proper SYCL device and context to allocate ray tracing hardware BVH
  * bugfix to rtcSYCLDeviceSelector API function
  * building Embree SYCL release on Ubuntu 20.04
  * removing level=2 workaround in intersection_filter_sycl, seems no longer required
  * matching intel_ray_flags_t layout for RTCRayQueryFlags
  * - renamed RTCIntersectContext to RTCRayQueryContext - renamed RTCIntersectContextFlags to RTCRayQueryFlags
  * updates to API documentation
  * Upgrading to gfx-driver-ci-master-12953, ci-neo-master-025103 in CI
  * switching VS studio tests &lt;= 2017 to release mode due to long path problem.
  * prefix all executables with embree_
  * setting version to v4.0.0
  * updated Embree version from 3 to 4 in man pages
  * embree_rthwif is static library now to not have additional shared libraries in release package
  * renamed embree_sycl.a to embree4_sycl.a
  * renamed RTC_FEATURE_FLAGS_ to RTC_FEATURE_FLAG_ to be consistent with other API flag namings
  * fixed download link, properly installing rthwif
  * - passing DPC++ include path is not required for -fsycl compilations - cleanups to minimal tutorial CMakeList.txt
  * using gfx-driver-ci-master-12917 in CI and disabling implicit scaling workaround
  * updates to documentation
  * added documentation of rtcGetSYCLDeviceFunctionPointer
  * added documentation of rtcSetGeometryEnableFilterFunctionFromArguments API function
  * documented rtcNewSYCLDevice, rtcIsSYCLDeviceSupported, rtcSYCLDeviceSelector, and rtcSetDeviceSYCLDevice API functions.
  * enabling rthwif testing also under Windows
  * updated docu link to compute runtime, documenting need to pass path to DPC++ headers
  * removed need of using special linker and -L on Windows from documentation
  * documentation updates
  * introduced RTC_INTERSECT_CONTEXT_FLAG_INVOKE_ARGUMENT_FILTER to enforce argument filter invokation for each geometry
  * use lld-link which is now shipped with dpcpp.
  * turn EMBREE_SYCL_SUPPORT off on Windows when DPC++ compiler is not used.
  * using releases_22ww49-ci-master-12886 windows driver in CI
  * enabling curves in DPCPP release builds
  * removed some workaround that disable CI tests
  * using neo-releases-22.43.24595.35 NEO release in CI
  * removing rt_validation_api:OFF from CI, validation API is OFF by default
  * upgrading CI to gfx-driver-ci-master-12886 and disabling ZEBinary workarounds
  * upgrading CI to ci-neo-master-025028 and removing ZEBinary workarounds
  * disabing benchmark output for rthwif_test_builder_instances CI tests
  * marking most SYCL cmake options as advanced
  * removed EMBREE_SYCL_MBLUR cmake option
  * changes to upgrading from Embree 3 to Embree 4 section as will as changelog
  * updates to section Embree SYCL known issues
  * documented that JIT compilation is preferred
  * updates to CMake configuration docu section
  * updates to Building Embree SYCL Applications section
  * added optimization section on generic pointers
  * documented RTCFeatureFlags
  * updated documentation of rtcIntersect1/4/8/16 and rtcOccluded1/4/8/16
  * updates to Embree SYCL API documentation
  * enabling pre-splits in rthwif BVH builder only in high quality mode
  * checking if ray tracing extension supported by L0
  * enabled geometry callbacks for some CPP tutorials for testing purposes
  * added rtcSetGeometryEnableFilterFunctionFromArguments API function
  * multiscene_geometry tutorial uses proper feature mask
  * regenerated CPP tutorials from ISPC version
  * updates to fix ISPC to CPP tutorial conversion
  * - updating to ci-neo-master-024996 and gfx-driver-ci-master-12868 in CI - enabling production ray tracing API in CI tests - enabling production ray tracing API by default in cmake - switching Windows SYCL CI tests to AOT mode
  * introduced RTCOccludedArguments to API
  * optimizations to intersection_filter tutorial
  * removed _IN_GEOMETRY and _IN_ARGUMENTS cmake options as no longer required
  * fixing issues with using Embree install package
  * disabling SYCL by default
  * updating to neo-releases-22.43.24595.34 in CI
  * rtcSetDeviceSYCLDevice does not check if device is supported by Embree as user may not necessarily run on that device
  * update sign file location
  * added missing dependency from embree_rthwif to embree_rthwif_sycl
  * added rtcSetDeviceSYCLDevice API call
  * disabling geometry callbacks by default in SYCL only
  * using ci-neo-master-024982 in CI
  * adding rthwif_production into embree_rthwif target
  * avoiding dispatch globals allocation when implicit dispatch globals are used
  * marking TBB cmake variables as advanced
  * some DPC++ to SYCL replacements in docu
  * updating Linux DPC++ compilation and driver install instructions
  * added L0 code to query if RT hardware supported, still kept disabled due to issues
  * printing render frame rate and total frame rate in window
  * setting device revision again for DG2 in AOT mode as a temporary workaround
  * measuring frame rate displayed in the application window on the device
  * added benchmark mode for dynamic_scene tutorial
  * no longer passing arrays through TutorialArguments for quaternion_motion_blur tutorial
  * no longer passing arrays through TutorialArguments for motion_blur_geometry tutorial
  * No longer passing arrays through TutorialArguments for user_geometry and instanced_geometry tutorials. Using USM allocations for these arrays significantly improved performance.
  * making accumulation buffer read/write
  * - using SYCL JIT compilation by default - using EMBREE_CI_DEVICE to determine GPU test is run on - removing EMBREE_SYCL_AOT_DEVICE_REVISION cmake variable, no longer required
  * Setting default frequency level to SIMD256 for ARM on all platforms.
  * Refactoring of CI testing: - mainly testing JIT in continuous tests - testing internal an public release driver in continuous tests - moved some less important tests to nighty testing
  * - building releases with public gfx driver - building releases in JIT mode - DEFAULT gfx version renamed to INTERNAL
  * using neo-releases-22.43.24595.29 as public gfx driver in CI
  * using gfx-driver-ci-master-12830 in CI
  * removed geometry filter invokation from quaternion_motion_blur tutorial
  * - renamed rtcFilterIntersection to rtcInvokeIntersectFilterFromGeometry - renamed rtcFilterOcclusion to rtcInvokeOccludedFilterFromGeometry
  * rtcFilterIntersection and rtcFilterOcclusion only invokes geometry filter function
  * adding instID argument to rtcForwardIntersect/Occluded functions
  * fixed compile warning
  * rtcForwardIntersect/Occluded do not need to handle NULL intersect arguments
  * using default RTCIntersectContext whenever possible
  * moving RTCIntersectContext to RTCIntersectArguments
  * update Ubuntu docker to 22.04 for all SYCL/GPU builds
  * implemented argument filter function support in pathtracer, keeping filter functions disabled
  * - disabling filter function in pathtracer - disabling pathtracer tests that require filter function - enabling pathtracer testing in JIT mode
  * removed OBJ intersection filter from pathtracer to simplify filter callbacks
  * removed unused intersectionFilterReject function from pathtracer
  * motion blur tutorial supports argument intersect function
  * quaternion motion blur tutorial uses argument intersect function
  * updated overview and platforms documentation sections
  * optimization to next_hit tutorial to allow inlining of filter callback
  * - hair_geometry tutorial uses argument version of filter function - improved performance of hair_geometry tutorial by stopping shadow rays when transparency close to 0
  * not using open-linux driver for release builds for now
  * also using open-linux-driver-ci-dev_igc-12785 in CI
  * enabling ray masking by default in cmake
  * bugfix on ray mask test in verify
  * updating CI to gfx-driver-ci-master-12767
  * bugfix on ray mask test in verify
  * renamed IN_CONTEXT -&gt; IN_ARGUMENTS for cmake variables and feature flags
  * documented that an Embree SYCL device can only get used on the GPU
  * moved invokation of CPU and GPU builder to separate functions in scene.cpp
  * removed unused is_build variable from Embree scene
  * Removing stream tracing API
  * rtcFilterIntersection and rtcFilterOcclusion invokes geometry and context filter function
  * using faster copy of org and dir for rtcForwardIntersect/Occluded
  * - documented rtcForwardIntersect1/4/8/16 and rtcForwardOccluded1/4/8/16 - ray forwarding only forwards ray origin and direction
  * passing SYCL context and device objects directly to rtcNewSYCLDevice
  * renamed RTC_FEATURE_ to RTC_FEATURE_FLAGS_ in Embree API
  * using gfx-driver-ci-master-12725 in CI
  * Changes required for Windows ARM64
  * bugfix to user_geometry tutorial when compiled without context user geometry callbacks
  * using gfx-driver-ci-master-12700 in CI
  * update mac jobs to at least TBB 2021.1.1
  * macOS jobs use the "build" tag.
  * fixed in export map files due to slightly changed name mangling in clang when using Embree API namespace
  * passing context and device to rtcNewSYCLDevice
  * removed RTC_SYCL_KERNEL makro as no longer required
  * rtcForwardIntersect pushes instance ID
  * user_geometry tutorial pushes instance geomID
  * renamed rtcGetSYCLFunctionPointer to rtcGetSYCLDeviceFunctionPointer
  * added rtcSYCLDeviceSelector API function
  * renamed RTC_ERROR_UNSUPPORTED_DEVICE to RTC_ERROR_UNSUPPORTED_GPU
  * removed workaround that avoided passing function pointer types as kernel argument
  * removed unnecessary casting to user geometry and filter callback types
  * fixed compile issue when user geometries were disabled
  * using proper argument types for API callback type definitions
  * - passing RTCIntersectContext to rtcIntersect and rtcOccluded functions - removing rtcIntersectEx1 function - moving all RTCIntersectContext members to RTCIntersectArguments, except instance stack
  * added -cl-intel-greater-than-4GB-buffer-required flag to rthwif tests as bug workaround
  * disabling some IGC workarounds
  * using gfx-driver-ci-master-12316 in CI
  * geometry user callback and geometry filter callback can get properly disabled using feature mask
  * added support to use production version of ray tracing API
  * removed ARM detection using TRY_COMPILE, no longer required
  * add rthwif CMake export
  * Section title format fix for "Embree Support and Contact"
  * fixed compile warning
  * Fixed compilation issues for ARM AArch64 processor under Linux.
  * Set `EXCLUDE_FROM_ALL` on the tbb_static build dir to not install it
  * enabling intensive JIT testing for DG2
  * embree_rthwif can get compiled stand alone
  * using new allocator in rthwif builder implementation
  * - adding --frames &lt;int&gt; command line option and testing triangle_geometry_sycl with many frames - enabling triangle_geometry_sycl tutorial in PVC CI again
  * disabling windows ICX test temporarily
  * Frei/devel (#2309)
  * disabling windows ICX test temporarily
  * fix cmake_minimum_required position
  * running release CI job only nightly
  * Fix spelling mistake
  * added ZE_RESULT_RAYTRACING_OPERATION_DEFERRED result to rthwif_builder_spec
  * first draft of L0 version of rthwif_builder API
  * removing SYCL dependency from rthwif_builder API
  * making TBB content fetching verbose
  * fixed compile warning related to specialization constant usage
  * made rthwif_production implementation independent to embree specific headers
  * Improvements and bugfixes to scene based feature mask selection - scene hierarchy is traversed completely - curves and point s sub-types are detected properly - ISPC crash fixed - pathtracers properly disables specialization constant usage in AOT mode
  * Viewer and Pathtracer are now determining their specialization constants based on the scene
  * renamed EMBREE_DPCPP cmake variables to EMBREE_SYCL
  * rthwif_test: adding scratch and accel buffer bounds checking
  * rthwif_test: adding multi-threading
  * rthwif_test: adding benchmark mode
  * rthwif_build: returning new size estimate from failed build
  * rthwif_build: returning acceleration structure size
  * rthwif_builder: using estimateSize function from SAH builder
  * rthwif_test: adding random NULL geometries for testing
  * rthwif_test: adding test of worst case accel bytes
  * removing EMBREE_DPCPP_IMPLICIT_DISPATCH_GLOBALS define and added EMBREE_DPCPP_ALLOC_DISPATCH_GLOBALS define
  * using intel_ray_query_abandon
  * Using ray tracing allocation desciptor (ze_raytracing_mem_alloc_ext_desc_t) to allocate acceleration structure data.
  * fixed to rtcore_scene.h
  * rthwif_build: builder uses scratch buffer
  * rthwif_build: matching implementation header with specification
  * rthwif_test: using device_read_only USM allocations and increased test size
  * rthwif_test: added mixed geometry type BVH build test
  * rthwif_test: added instance geometry BVH test
  * rthwif_test: added procedural geometries BVH build test
  * rthwif_test: generalized calculation of expected output
  * rthwif_test: testing also meshes that cannot get quadified
  * rthwif_test: random triangle selection
  * rthwif_test: storing triangle ID as 4th triangle index
  * rthwif_test: adding first BVH build test
  * rthwif_test: moved expected output generation to separate function
  * introduced instance transformation formats in rthwif build API
  * rthwif build API uses bounds pointer for instances to avoid read from hardware accel in top-level build
  * rthwif builder performs check of geometry descriptors
  * Add --compare argument to rthwif_cornell_box test
  * Fix download gfx_driver &amp; dpcpp scripts
  * added EMBREE_DISABLE_DEVICEID_CHECK env option to disable deviceID check
  * enabling spill compression disable workaround again
  * upgrading CI to DPC++ compiler 20220914
  * using sycl::gpu_selector_v for newer DPC++ compiler versions
  * updates to rthwif_builder_spec, improved transformation layout spec and naming
  * running release CI workflow only in nightly build
  * building separate mblur BVHs over static and mblur geometry
  * removing internal rthw BVH builder that was directly connected to Embree scene
  * using statically build TBB in rthwif_builder implementation
  * implemented rthwif builder thread join interface
  * enabling binary rthw BVH build interface by default
  * Disabling Windows DG2 CI test for internal tasking system to get faster CI turn arounds.
  * fixed bug with invalid instance bounds in rthw BVH builder
  * enabling implicit dispatch globals usage by default
  * using default sub group size for kernels
  * running continuous workflow no longer on pull requests
  * Extensions to rthwif build API: - adding format for transformations - adding list of acceleration structures to be intersected sequentially - adding parallel build operation for parallelization
  * enabled CI test for binary HW BVH build interface
  * introduced EmbreeHWAccel struct to access list of HWAccels
  * upgrading to CI to gfx-driver-ci-master-12316
  * fixed include paths to parallel_for.h
  * removing spill compression disable workaround
  * ci: leave only benchmark jobs in gitlab (#2270)
  * remove inplace version of RTHWIF_GEOMETRY_TYPE_INSTANCE
  * updates to rthwif_test
  * rthwif_builder uses new procedural callback that returns array of bounds
  * renames to make rthwif_builder match spec
  * documented accelBufferBytesOut semantics when build succeeds/fails
  * further changes to rthwif_builder_spec
  * added improved and documented rthwif_builder_spec
  * Make SYCL tutorials work when iGPU is present:
  * adding vcpkg install instructions also to docu source files
  * Add vcpkg installation instructions
  * fixed bug in hardware BVH builder when geometries where NULL
  * using internal gfx-driver for DPC++ release build for now
  * running nightly release build in github at 00:00 UTC
  * setting JIT and AOT compile options
  * increased SYCL test timeout to 50s
  * disabling public gfx driver tests
  * removed no longer required disabling of EU fusion workaround
  * running nightly github CI at 00:00 UTC
  * added cmake option to generate dbg info in dpcpp kernels
  * ci: add github actions workflows
  * using high instance mask bit in instance_geometry tutorial
  * fixed instance mask bug with high mask bits were used
  * Enabled trav_loop always when instances are enabled to fix issues with high instance mask bits set.
  * getting rt_production API in sync with spec
  * removed bvh_id from ray query and ray forward intrinsics
  * removed bvh_level from intel_ray_query_forward_ray intrinsic
  * properly using intel_ray_flags_t type in rt_production API
  * Using some more descriptive names for some rt_production API functions: - intel_get_hit_barys -&gt; intel_get_hit_barycentrics - intel_get_hit_geomID -&gt; intel_get_hit_geometry_id - intel_get_hit_primID -&gt; intel_get_hit_primitive_id - intel_get_hit_primID_triangle -&gt; intel_get_hit_triangle_primitive_id - intel_get_hit_primID_procedural -&gt; intel_get_hit_procedural_primitive_id - intel_get_hit_instID -&gt; intel_get_hit_instance_id - intel_get_hit_instUserID -&gt; intel_get_hit_instance_user_id - intel_get_hit_triangle_verts -&gt; intel_get_hit_triangle_vertices
  * renaming intel_ray_desc_t members O/D to origin/direction in rt_production API
  * removed bvh_level from intel_ray_query_init instrinsic in rt_production API
  * changed enumerants in rt_production API to be lower case
  * Renamed structs in rt_production RT API: - RayFlagsINTEL -&gt; intel_ray_flags_t - RayDescINTEL -&gt; intel_ray_desc_t - ray_query_INTEL -&gt; intel_ray_query_t - raytracing_acceleration_structure_INTEL -&gt; intel_raytracing_acceleration_structure_t - float4x3_INTEL -&gt; intel_float4x3 - HitTypeINTEL -&gt; intel_hit_type - CandidateTypeINTEL -&gt; intel_candidate_type_t
  * added cmake option to switch between internal and driver RT hardware BVH builder
  * removed old direct connection of HW BVH builder to Embree
  * first attempt to unify internal HW builder and API HW builder
  * parsing --jit-cache command line option in rthwif_test application
  * TBB: Stop task_scheduler_observer when TaskScheduler is destroyed
  * upgrading gfx driver to gfx-driver-ci-master-12117
  * using sycl namespace instead of cl::sycl namespace
  * fixed rtcForwardIntersect/Occluded implementation when driver HW BVH interface is used
  * fixed wrong primitive counting in driver HW BVH interface implementation
  * fixed wrong instanced accel passed when driver HW BUILD interface was used
  * fixed wrong bounds propagation when driver HW BVH build interface was used
  * passing ray_query_INTEL* to each rt_production API function
  * renamed ray_query_t to ray_query_INTEL, and rtas_t to raytracing_acceleration_structure_INTEL
  * added time to RayDescINTEL
  * renamed CandidateType to CandidateTypeINTEL and prepended all enumerators with CANDIDATE_TYPE_INTEL_
  * HitType -&gt; HitTypeINTEL and prepending HIT_TYPE_INTEL_ to all enumerants
  * prepending RAY_FLAGS_INTEL_ to RayFlagsINTEL enumerants
  * RayFlagsIntel -&gt; RayFlagsINTEL
  * rayquery_t -&gt; ray_query_t
  * rt_production test uses randomized transformation for instancing
  * rt_production API test checks local2world and world2local output
  * moved TraceRayCtrl to rthwif_internal.h
  * Include dpcpp compilation target info in CMake config file export
  * Fix rounded kernel dispatch size to round up when there's a remainder
  * fixed bug in rthwif_test when internal task scheduler is used
  * - renamed intel_sync_ray_query to intel_ray_query_sync - using pointers to rayquery_t instead of references - renamed intel_get_ray_tnear to intel_get_ray_tmin - remove intel_get_hit_instanced_accel function
  * no longer passing Embree device to binary HW BVH build interface
  * using intel_get_hit_instID short form in intel_rt_production API to be consistent with geomID/primID naming
  * added testing for intel_get_hit_instanceUserID
  * implemented intel_get_hit_instanceUserID, intel_get_hit_world_to_object and intel_get_hit_object_to_world
  * cleanups to rthwif_production implementation
  * all software instancing rt_production API tests are working
  * software instancing rt_production API test works mostly
  * procedural triangle rt_production API test works
  * skipping rt_production test when using public gfx driver and limiting number of errors printed
  * adding manual dispatch globals allocation support to rt_production tests
  * first procedural triangle test
  * preparing test code to support procedural triangles
  * hwinstancing tests work
  * rt_production test can create instances
  * moved buildAccel to scene object
  * started to add instancing support to rt_production API test
  * added rthwif_test_triangles_anyhit_shader_commit/reject tests
  * rt_production API test checks committed and potential hit
  * rt_production API test uses multiple geometries
  * enabled user_geometry again when implicit globals are used
  * first version of rt_producton API testing
  * working around some regression
  * bugfix
  * fixed compile issue
  * added driver HW BVH builder support for mixed mblur and static geometry scenes
  * first motion blur support in driver HW BVH builder
  * updates
  * worked around compilation issue under Windows
  * fixed compile issue with disabled DPCPP support
  * - making rthwifGetAccelSize future proof - added support of rthw_builder=default/driver to switch between both ray tracing hardware builders
  * connected binary interface HW BVH builder to Embree
  * first version of binary interface to HW BVH builder
  * Fix check for if we're compiling without AOT
  * using sycl::ext::oneapi::property::usm::device_read_only() mode and no longer using SYCL_PI_LEVEL_ZERO_USM_ALLOCATOR explicitely
  * fixed tagging of wrong functions with RTC_SYCL_INDIRECTLY_CALLABLE in user_geometry tutorial
  * upgrading to DPC++ compiler 20220802
  * added cornell_box test for production RT API
  * using fixed 128 bytes offset to root node in HW accel
  * added support to use intel_get_implicit_dispatch_globals intrinsic (disabled by default)
  * adding JIT test for PVC
  * - upgrading to DPC++ compiler sycl-nightly/20220721 - changing CL/sycl.hpp to sycl/sycl.hpp for new dpcpp compilers
  * add tutorial benchmarks
  * update models for GPU benchmark tests
  * CMake Large GRF option + enabled for fcall testcases
  * disabling specialization constant usage in AOT mode due to some DPC++ compiler bug
  * switching to sycl-nightly/20220625
  * ci: switch testing to PVC B4
  * adding unused option -cl-intel-private-memory-minimal-size-per-thread XXX to dpcpp.cmake which can get used to increase private memory size when stack calls are used
  * disabling EMBREE_INSTALL_DEPENDENCIES again by default
  * run gpu benchmark in regular ubuntu20.04 docker and clone benchmark client with secret token
  * merging IGC flag settings for windows and linux to common place
  * no longer disabling __noinline for SYCL
  * using CMake list for CMAKE_IGC_OPTIONS
  * fixed issue where disabling JIT cache did also disable USM chunk allocator
  * only enforcing sub-group size when geometry callbacks are enabled
  * adding CI test that disables geometry callbacks
  * added rtcIsSYCLDeviceSupported API function to check if Embree is supported on some SYCL device
  * lights no longer defined as indirectly callable
  * upgrading to gfx-driver 11261 under Windows
  * removed no longer required environment settings from device.cpp
  * No longer including sycl.hpp inside Embree API headers. If SYCL support is required, the user should include sycl.hpp before including the Embree API headers.
  * upgrading to gfx-driver-ci-master-11261
  * cleanups to rthwif implementation
  * intel_get_hit_instanceID now properly returns instanceIndex
  * prepending PATH to DPC++ compiler
  * added documentation on howto workaround issues when multiple GPUs are present in the system
  * using -j 8 in documentation, -j might run out of memory
  * enabled JIT caching again when specialization constants are used
  * updating Windows driver version in documentation
  * added feature mask to pathtracer tutorial
  * upgrading public win gfx driver to sdp/1011433 in CI
  * building Linux DPC++ release without curve support
  * proper options to enable large GRF mode
  * some bugfixes to documentation of compiling Embree with DPC++
  * setting version to 4.0.0-alpha
  * updates to README.md.in file for tutorials
  * added DPC++ release build
  * added Embree DPC++ known issues docu section
  * viewer_sycl disables JIT caching when specialization constants are used
  * added --jit-cache command line option to disable JIT caching
  * Exporting tasking lib only for static Embree compilation. Configuring tutorial/README.md file.
  * setting version to 4.0.0-alpha.0
  * increasing required GLIBCXX version to 3.4.14
  * removed Intel Compiler 2015 from supported compilers and CI testing as we trigger some compiler bug
  * added more shortcuts to specify RTC_FEATURE_LINEAR_CURVES, RTC_FEATURE_BEZIER_CURVES, RTC_FEATURE_BSPLINE_CURVES, RTC_FEATURE_HERMITE_CURVES, and RTC_FEATURE_CURVES
  * added feature mask to user_geometry tutorial
  * removed specialization constant usage from triangle_geometry_tutorial, we have the viewer for this
  * added feature mask to quaternion_motion_blur tutorial
  * - moved feature mask for point_geometry tutorial to beginning of file - enabled more testing for point_geometry tutorial
  * added feature mask to multi_instanced_geometry tutorial
  * added feature mask to motion_blur_geometry tutorial
  * added feature mask to minimal_sycl tutorial
  * added feature mask to intersection_filter tutorial
  * fixed disabling of intersection filter feature through feature mask
  * added feature mask to instanced_geometry tutorial
  * added feature mask to hair_geometry tutorial
  * added feature mask to grid_geometry tutorial
  * added feature mask to dynamic_scene tutorial
  * added feature mask to curve_geometry tutorial
  * improved feature masks for multi-level instancing
  * using feature mask also for viewer debug shaders
  * moved debug shaders to viewer application only, this significantly improved JIT compile time of all other tutorials
  * added specialization constants and command line parsing for feature mask to viewer_sycl
  * fixing issue with feature mask and RTC_MAX_INSTANCE_LEVEL_COUNT &gt; 1
  * added feature flags also to ISPC API
  * fixing compile issue when DPC++ support was disabled
  * Added specialization constant to point geometry tutorial
  * Added missing feature filter for motion blur
  * Added RTC_FEATURE_NONE to common header
  * Enabled specialization constants in SYCL triangle tutorial
  * Added feature_mask variable to IntersectArguments and condidtionals around features.
  * using work group size (4,4) which works on DG2 and PVC
  * allowing rendering of arbitrary screen resolutions
  * no longer disabling various warnings for SYCL compilation
  * removing SYCL_LIBS, seems not required
  * removed some workarounds that disabled some tutorials in some configs
  * documenting that user geometry bounds callbacks are host side functions always
  * printing CMake warning when filter and user geometry callback support in geometries are enabled
  * consistently adding -lsycl to link flags under Windows and Linux
  * fixes to DPC++ application compilation documentation for Windows
  * properly installing SYCL dependency under Windows
  * documented how to build an Embree DPC++ application
  * enabled EMBREE_ZIP_MODE and EMBREE_INSTALL_DEPENDENCIES by default
  * adding minimal tutorial sources to install package
  * cleanup
  * hide device's task arena behind execute interface
  * remove taskingscheduler.h from default.h
  * don't link embree_sycl to tasking
  * clean up parallel algorithm headers
  * move more members in inner structs
  * move task group members into inner struct
  * move checkIfModifiedAndSet into scene_verify.cpp
  * tutorial_ispc and tutorial should not link agains embree_sycl
  * fix tasking linking issues and remove rthwif library
  * add CI tests that use the internal tasking scheduler for sycl
  * make internal tasking scheduler's exception handling consistent with TBB
  * adding RTC_SYCL_SIMD_WIDTH to rtcore_config.h
  * removed reqd_sub_group_size from API function declarations, enforcing sub group size only works at kernel level
  * making dg2 default under Linux and JIT default under Windows
  * added DPC++ Memory Pooling section to documentation
  * enabling memory pooling and persistent JIT caching in minimal_sycl tutorial
  * always detecting dpcpp when EMBREE_DPCPP_SUPPORT is enabled
  * updates to Windows build instructions with DPC++ compiler
  * introduced RTC_SYCL_KERNEL kernel attribute
  * linking embree target to embree_sycl target
  * enabled SYCL chunk allocator for shared USM allocations
  * removing SYCL allocation workaround
  * allocator.clear() was executed too late in qbvh6_builder_sah
  * minimal_sycl tutorial properly hits triangle now
  * increasing timeout for SYCL CI tests to 30s
  * added rtcSetGeometryUserDataFromScene API function to be used during rendering
  * removing rtcInterpolate SYCL implementation
  * enabled user_geometry_sycl again in JIT test
  * fixed some compile warnings for Release build
  * updated instructions on compiling Embree with DPC++ under Linux
  * using TBB2020.2 for Windows CI tests
  * documented that AOT compilation with multiple devices is currently not working
  * Added documentation on how to install Windows HPG drivers.
  * increasing ctest timeout to 20s to properly run JIT tests
  * Revert "running Linux JIT CI test only on dg2-03 machine"
  * getting pathtracer to work when geometry filter functions are disabled
  * avoiding function pointers for light sampling and evaluation in pathtracer
  * running Linux JIT CI test only on dg2-03 machine
  * Added Embree DPC++ compilation docu
  * Added Embree DPC++ API docu section
  * fixed issue with SYCL benchmarking, dg2-b0-512 device config no longer supported, using just dg2 device
  * Added documentation for EMBREE_DPCPP_AOT_DEVICES cmake option. Cleanup of EMBREE_DPCPP_AOT_DEVICES cmake option.
  * installing SYCL dependency only when EMBREE_DPCPP_SUPPORT is enabled
  * documented EMBREE_DPCPP_SUPPORT cmake option
  * using newer driver for public CI testing
  * adding CI tests that use publicly available drivers
  * removed unused build.py and conf.py scripts
  * updated third-party-programs files
  * adding windows JIT test that uses gfx-driver sdp/1011314
  * trying gfx-driver-ci-master release build
  * updates to the Embree 3 to Embree 4 porting section in documentation
  * added agama CI test
  * extending download_gfx script to support agama releases
  * passing RTCIntersectArguments through pointer to make API C99 compliant again
  * installing only required SYCL libraries
  * - Removed Embree 2 to Embree 3 patch script - Removed Embree 2 to Embree 3 upgrade section from documentation
  * renamed all *.3embree3 man files to *.4embree4
  * Renamed embree3 API include folder to embree4
  * updated model hash to devel branch of model repo
  * Initial commit of SYCL/DPC++ version of Embree with GPU support</changelog>
</package>
<package pkgid="d43eeca830ad428399cf3919879b398ce490001a85548062548f3d6fa3862d9ad9ab6e438924f7427f34eb574e5de49179b75630586f3fd1534ad2f6ca9ffeb1" name="emil" arch="x86_64">
  <version epoch="0" ver="2.1.0beta9" rel="bp160.1.5"/>
  <changelog author="schwab@suse.de" date="1120651200">- Fix missing declarations.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1175169600">- Add flex and bison to BuildRequires.</changelog>
  <changelog author="crrodriguez@suse.de" date="1243944000">- fix build</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1699272000">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1707912000">- Drop source URLs: the original site is no longer operational
  (one step away from package drop).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="Filip Kastl &lt;filip.kastl@suse.com&gt;" date="1721822400">- Added -fpermissive to CFLAGS to enable build with GCC 14</changelog>
</package>
<package pkgid="e157c9d118e5bc46a57606f5432ffd9fd383d5e467c92851abc7992e7d90d2999aec72a2a70b08a0c66caae67b80e3f69eb855f1f091eea22c3b009fa45603e3" name="emptyepsilon" arch="x86_64">
  <version epoch="0" ver="2024.08.09" rel="bp160.1.10"/>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1597320000">- Initial checkin</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1629460800">- Version 2021.06.23</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1663156800">- Version 2022.03.16
  * DeliverAmbassador
  * Update warpJammer.cpp
  * update setting translation scenario_50_gaps.lua (#1656)
  * Tweak warp vs jump stats a bit so they are more equal.
  * Correct description discrepancy - the enemies are Exuari, not Kraylor.
  * Add estimated duration of one hour to description
  * Add descriptions and simple scan parameters for life pod and warp jammer
  * Increase the number of attacking hornets gradually while waiting for transport retrieval
  * New function for adding shields on Playership in scenarios
  * made your point clear in the documentation</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1695729600">- Version 2023.06.17
  * added Settings : scavenger, shoreline, Patrolduty
  * Update scenario_47_scavenger.fr.po
  * update scenario_54_PatrolDuty.fr.po
  * Update scenario_57_shoreline.fr.po</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.de&gt;" date="1708603201">- Use same doc dir for all versions</changelog>
  <changelog author="Dominik Heidler &lt;dheidler@suse.com&gt;" date="1726401600">- Version 2024.08.09
  * Add a quick&amp;dirty way to get callback errors
  * Clamp the warp and jump commands
  * fix voice path scenario 51
  * fix voice path scenario 48
  * Fix the wiggle console with just 1 text line</changelog>
</package>
<package pkgid="88992109ccfa283398b1f96b99635a6318938f7fc8e64a4914d7cd25324d08b32ce0142d813d576960843735adbf981ba2517220f17106613063f8a7e819686d" name="enblend-enfuse" arch="x86_64">
  <version epoch="0" ver="4.2" rel="bp160.1.6"/>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Introduce _build_doc defines (currently set to 0): Allow to
  easily enable/disable the building of the documentation (incl.
  the reevant BuildRequires and file sections). Currently disabled,
  as enblend fails with texinfo 5.1; upstream is aware but there
  are multiple ways the texi files are broken (mainly using invalid
  characters for defintions).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 4.1.4
  * The introduction of additional blend color spaces in the Development
    Branch requires a new option to select them.    Here, in the Stable
    Branch, the new option `  *  * blend  * colorspace' just duplicates the
    functionality of `  *  * ciecam' and `  *  * no  * ciecam'.    The Stable Branch
    does *not* provide the additional blend colorspaces of the
    Development Branch.    The following equivalences hold
  * * ciecam         &lt;=&gt;      *  * blend  * colorspace=ciecam
  * * no  * ciecam    &lt;=&gt;      *  * blend  * colorspace=identity
    Both options `  *  * ciecam' and `  *  * no  * ciecam' are deprecated in 4.2 and
    will be withdrawn in 4.3.    Thus, users should prefer
    `  *  * blend  * colorspace'.
  * [Enblend and Enfuse] Fix the nesting  * depth counter for response
    files.    This bug prohibited to load more than 20 images in a single
    response file.
  * [Enblend and Enfuse] Allow grayscale images to bring their own
    (grayscale) profiles.    Previously grayscale images with ICC profiles
    were rejected.
  * [Enblend] Fix a possible domain error followed by a division  * by  * zero
    in the seam  * line optimizer.
  * [Enblend and Enfuse] Avoid an undeserved warning about incompatible
    colorspaces if they only disagree on their meta  * data (e.g. profile
    creation date/time).
  * [Enblend] Fix a bug in the Dijkstra Optimizer which could lead to
    undefined behavior in the placement of the (optimized) seam line.
  * [Enblend] Fix a non  * dereferencable vector iterator which led to a
    segfault.
  * [Enblend] Avoid a division  * by  * zero in the Annealing Optimizer.
  * [Enblend] Fix a bug (#1356551) in the seam  * line vectorization code
    that was there since 2004.    The fix changes the position of almost
    any coarse  * mask seam line vertex by one pixel.
- Update use-default-gcc-inlining.diff
- Add libICE-devel and pkg-config build dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1464264000">- Update to version 4.2:
  + All deprecated options and features of version 4.1 have been
    removed.
  + Enblend and Enfuse support layer (aka "page", aka "frame")
    selection in of multi-layer image-files. This includes
    processing any layers in user-defined order.
  + Both Enblend and Enfuse can now perform all their pyramidal
    blending operations in CIELAB (aka L*a*b*, aka L-star) and
    CIELUV (aka L*u*v*) color spaces, too.
  + The new Graph-Cut algorithm is the default primary seam-line
    generator.
  + Avoid a division-by-zero in the Annealing Optimizer.
  + Fix a bug (sf#1356551) in the seam-line vectorization code that
    was there since 2004. The fix changes the position of almost
    any coarse-mask seam line vertex by one pixel.
  + Fix a longstanding quirk, which allowed to load masks into
    Enblend and Enfuse that were unsuitable for processing.
  + Fix a bug in the highlight-recovery that caused Enfuse to bail
    out with the uncaught exception "Minimizer1D::set_bracket:
    minimum not bracketed".
  + The OpenMP enabled versions of Enblend and Enfuse benefit from
    Google's TCMalloc library.
  + Several exposure weight functions were added to Enfuse. The
    choice is now up to the user. The default still is the Gauss
    function as in all Enfuse versions before.
- Add texlive-latex-bin-bin BuildRequires: new dependency.
- Drop use-default-gcc-inlining.diff: no longer needed.
- Add enblend-latex-optional.patch: Allow building without
  documentation, that is, make latex optional.
- Toggle _build_doc to 1: building documentation works again.</changelog>
  <changelog author="astieger@suse.com" date="1464609600">- specify boost build dependendy version</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="asn@cryptomilk.org" date="1529409600">- Switched to cmake build
  * Removed patch for autotools: enblend-latex-optional.patch
- Added enblend-enfuse-4.2-add-missing-cmakelists.patch
- Enabled support for OpenMP
- Enabled support for SSE2
- Turn on optimizations again
- Info pages are no longer available
- Added PDF documentation for enblend and enfuse</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Update RPM groups.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1568721600">- Add reproducibledate.patch to override build date (boo#1047218)
- Add reproducible.patch to override build hostname (boo#1084909)</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1616846400">- Add enblend-enfuse-4.2-gcc-10.patch: Fix build with GCC 10
  (picked from Gentoo, https://bugs.gentoo.org/723306).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744718400">- Drop BuildRequires: glew-devel as it is not used for build.</changelog>
</package>
<package pkgid="0bc9f17e7b6c4d612acafe27a4891fbc2d14b82b87a5ee0c7582f751cbdf78b081e0ec735bc5015d58e7d64c9176967f68155135414ceac6f66b4691a1b317de" name="enblend-enfuse-doc" arch="x86_64">
  <version epoch="0" ver="4.2" rel="bp160.1.6"/>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Introduce _build_doc defines (currently set to 0): Allow to
  easily enable/disable the building of the documentation (incl.
  the reevant BuildRequires and file sections). Currently disabled,
  as enblend fails with texinfo 5.1; upstream is aware but there
  are multiple ways the texi files are broken (mainly using invalid
  characters for defintions).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 4.1.4
  * The introduction of additional blend color spaces in the Development
    Branch requires a new option to select them.    Here, in the Stable
    Branch, the new option `  *  * blend  * colorspace' just duplicates the
    functionality of `  *  * ciecam' and `  *  * no  * ciecam'.    The Stable Branch
    does *not* provide the additional blend colorspaces of the
    Development Branch.    The following equivalences hold
  * * ciecam         &lt;=&gt;      *  * blend  * colorspace=ciecam
  * * no  * ciecam    &lt;=&gt;      *  * blend  * colorspace=identity
    Both options `  *  * ciecam' and `  *  * no  * ciecam' are deprecated in 4.2 and
    will be withdrawn in 4.3.    Thus, users should prefer
    `  *  * blend  * colorspace'.
  * [Enblend and Enfuse] Fix the nesting  * depth counter for response
    files.    This bug prohibited to load more than 20 images in a single
    response file.
  * [Enblend and Enfuse] Allow grayscale images to bring their own
    (grayscale) profiles.    Previously grayscale images with ICC profiles
    were rejected.
  * [Enblend] Fix a possible domain error followed by a division  * by  * zero
    in the seam  * line optimizer.
  * [Enblend and Enfuse] Avoid an undeserved warning about incompatible
    colorspaces if they only disagree on their meta  * data (e.g. profile
    creation date/time).
  * [Enblend] Fix a bug in the Dijkstra Optimizer which could lead to
    undefined behavior in the placement of the (optimized) seam line.
  * [Enblend] Fix a non  * dereferencable vector iterator which led to a
    segfault.
  * [Enblend] Avoid a division  * by  * zero in the Annealing Optimizer.
  * [Enblend] Fix a bug (#1356551) in the seam  * line vectorization code
    that was there since 2004.    The fix changes the position of almost
    any coarse  * mask seam line vertex by one pixel.
- Update use-default-gcc-inlining.diff
- Add libICE-devel and pkg-config build dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1464264000">- Update to version 4.2:
  + All deprecated options and features of version 4.1 have been
    removed.
  + Enblend and Enfuse support layer (aka "page", aka "frame")
    selection in of multi-layer image-files. This includes
    processing any layers in user-defined order.
  + Both Enblend and Enfuse can now perform all their pyramidal
    blending operations in CIELAB (aka L*a*b*, aka L-star) and
    CIELUV (aka L*u*v*) color spaces, too.
  + The new Graph-Cut algorithm is the default primary seam-line
    generator.
  + Avoid a division-by-zero in the Annealing Optimizer.
  + Fix a bug (sf#1356551) in the seam-line vectorization code that
    was there since 2004. The fix changes the position of almost
    any coarse-mask seam line vertex by one pixel.
  + Fix a longstanding quirk, which allowed to load masks into
    Enblend and Enfuse that were unsuitable for processing.
  + Fix a bug in the highlight-recovery that caused Enfuse to bail
    out with the uncaught exception "Minimizer1D::set_bracket:
    minimum not bracketed".
  + The OpenMP enabled versions of Enblend and Enfuse benefit from
    Google's TCMalloc library.
  + Several exposure weight functions were added to Enfuse. The
    choice is now up to the user. The default still is the Gauss
    function as in all Enfuse versions before.
- Add texlive-latex-bin-bin BuildRequires: new dependency.
- Drop use-default-gcc-inlining.diff: no longer needed.
- Add enblend-latex-optional.patch: Allow building without
  documentation, that is, make latex optional.
- Toggle _build_doc to 1: building documentation works again.</changelog>
  <changelog author="astieger@suse.com" date="1464609600">- specify boost build dependendy version</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="asn@cryptomilk.org" date="1529409600">- Switched to cmake build
  * Removed patch for autotools: enblend-latex-optional.patch
- Added enblend-enfuse-4.2-add-missing-cmakelists.patch
- Enabled support for OpenMP
- Enabled support for SSE2
- Turn on optimizations again
- Info pages are no longer available
- Added PDF documentation for enblend and enfuse</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Update RPM groups.</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1568721600">- Add reproducibledate.patch to override build date (boo#1047218)
- Add reproducible.patch to override build hostname (boo#1084909)</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1616846400">- Add enblend-enfuse-4.2-gcc-10.patch: Fix build with GCC 10
  (picked from Gentoo, https://bugs.gentoo.org/723306).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1744718400">- Drop BuildRequires: glew-devel as it is not used for build.</changelog>
</package>
<package pkgid="988b8356d7b7e2f8561aaeacec0f2e40c59f525da06fe8ff4c6cc67a4fbedf6823498c2585aa95cde68bb44f1040124e38839857dd47a4891c54aa77239af8ee" name="enc" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1676030400">- Initial package of enc 1.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1678622400">- Update to 1.1.1:
  * Fix broken link in README #3
  * Submit Go dependencies into GitHub API #4
  * Update all dependencies #5</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1686052800">- Update to 1.1.2:
  * Update all dependencies #6</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 1.1.3:
  * Fix typo in README #7
  * Update all dependencies #8</changelog>
</package>
<package pkgid="8582ed699bcbfa47e9b5855077956725a74c676b6e8c22d9eff08871d0d9a1b4d71cca48731e4e0abafc84103cdd20d087eeb071673ca9386e1a1c8caf44e5e4" name="enc" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="bp160.1.1"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1676030400">- Initial package of enc 1.1.0 for openSUSE</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1678622400">- Update to 1.1.1:
  * Fix broken link in README #3
  * Submit Go dependencies into GitHub API #4
  * Update all dependencies #5</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1686052800">- Update to 1.1.2:
  * Update all dependencies #6</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1704801600">- Update to 1.1.3:
  * Fix typo in README #7
  * Update all dependencies #8</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1744027200">- Update to 1.1.4:
  * Update all dependencies #9</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1762948800">- Update to 1.1.5:
  * Update dependencies #10</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1781092800">- CVE-2026-1229: Fix incorrect value (bsc#1265533)
  Bump circl to 1.6.3</changelog>
</package>
<package pkgid="de6b55506e70d99babbd7132cdb34671f8be70730335f4fc8d51b606812de9ae4763d8fa76341f7859a943ebeb1b969f3eb07f6b1c6adc843d5c4abc20ea3468" name="enca" arch="x86_64">
  <version epoch="0" ver="1.19" rel="160000.2.2"/>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries
- removed tests for obsolete openSUSE versions</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="lars@linux-schulserver.de" date="1329307200">- fix license to be in spdx format</changelog>
  <changelog author="lars@linux-schulserver.de" date="1355659200">- update to 1.14:
  + Allow standard names for belarusian and slovenian languages,
    thanks to Branislav Geržo for suggestion.
  + Reset strictness when check buffer less than file size,
    thanks to Sam Liao.
  + Fixed typos in man page, thanks to A. Costa.</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mcihar@suse.cz" date="1380542400">- update to 1.15:
  + Documentation improvement
  + Development moved to GitHub
  + Do not use deprecated autoconf macros</changelog>
  <changelog author="mcihar@suse.cz" date="1380801600">- Fixed upstream URL in spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 1.16
  * Fixed typo in Belarusian language name
  * Added aliases for Chinese and Yugoslavian languages</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to version 1.19
  + fix possible memory leak
  + make utf-8 detection work even on one character
- includes changes from 1.18
  + fix installation of devhelp documentation
- includes changes from 1.17
  + Fixed conversion of GB2312 encoding with iconv
  + Fixed iconv conversion on OSX
  + Fixed execution of external converters with ACLs
  + Documentation improvements
- cleanup with spec-cleaner
- use %make_install macro
- list binaries and man pages explicitly</changelog>
  <changelog author="dimstar@opensuse.org" date="1652443200">- URL -&gt; https.
- Run spec-cleaner: mainly: package LICENSE as license, not doc.</changelog>
</package>
<package pkgid="977c089e40e7862a511874538818ff6cc8fb66ef9319997e1914fdb6180d90fcf2045e146c5d76b826920f581a02c215c45552b73ce63b1f9d52022e33d9ef70" name="enca-devel" arch="x86_64">
  <version epoch="0" ver="1.19" rel="160000.2.2"/>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries
- removed tests for obsolete openSUSE versions</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="lars@linux-schulserver.de" date="1329307200">- fix license to be in spdx format</changelog>
  <changelog author="lars@linux-schulserver.de" date="1355659200">- update to 1.14:
  + Allow standard names for belarusian and slovenian languages,
    thanks to Branislav Geržo for suggestion.
  + Reset strictness when check buffer less than file size,
    thanks to Sam Liao.
  + Fixed typos in man page, thanks to A. Costa.</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mcihar@suse.cz" date="1380542400">- update to 1.15:
  + Documentation improvement
  + Development moved to GitHub
  + Do not use deprecated autoconf macros</changelog>
  <changelog author="mcihar@suse.cz" date="1380801600">- Fixed upstream URL in spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 1.16
  * Fixed typo in Belarusian language name
  * Added aliases for Chinese and Yugoslavian languages</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to version 1.19
  + fix possible memory leak
  + make utf-8 detection work even on one character
- includes changes from 1.18
  + fix installation of devhelp documentation
- includes changes from 1.17
  + Fixed conversion of GB2312 encoding with iconv
  + Fixed iconv conversion on OSX
  + Fixed execution of external converters with ACLs
  + Documentation improvements
- cleanup with spec-cleaner
- use %make_install macro
- list binaries and man pages explicitly</changelog>
  <changelog author="dimstar@opensuse.org" date="1652443200">- URL -&gt; https.
- Run spec-cleaner: mainly: package LICENSE as license, not doc.</changelog>
</package>
<package pkgid="1e8fd7e40ce009583f5543df15b92361bdc838380779122d8b4b12c99e91c663dc29187baead00baaa337c4a6b8bb6d3a48f77d191651b384a7afccb1905de30" name="encfs" arch="x86_64">
  <version epoch="0" ver="1.9.5" rel="bp160.1.9"/>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1745582400">- fix build and simplify spec file
- use system easylogging</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="7220c6559b8d04b40b77c5b6acae356d9e04385635d24e75f0d0af94711ee8b3ee8daa486b334fd762be03febb86ce8ae566d51a97551bcafa898bb43d296ede" name="encfs-lang" arch="noarch">
  <version epoch="0" ver="1.9.5" rel="bp160.1.9"/>
  <changelog author="p.drouand@gmail.com" date="1457524800">- Update to version 1.8.1
  * No short chanlog available; please read
    /usr/share/doc/packages/encfs/ChangeLog</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1488628800">- update to 1.9.1
  * Fix empty log file creation
  * Link with libintl when available
  * add LIB_INSTALL_DIR override during build to aid in customized install
    locations
  * upgrade easylogging++
- update to 1.9
  * switch to CMake
  * OSX build improvements, RPATH setup
  * Drop Boost dependency. Uses tinyxml2 to read existing XML config archives.
  * Drop librlog dependency. Uses easylogging++ for logging.
  * add encfs_create operation
  * replace getdir with readdir
  * cleanup includes and reformat code
  * allow writes in reverse mode when no header is used
  * make use of C++11 (eg std unordered_map in place of GNU internal hashmap)
- split *.mo files to a separate package encfs-lang
- preperation to include checks
- removed cmake-libdir-name.patch and old-perm-checks.patch which are not
  needed any more
- install tinyxml2-3 if not available in the official repos
- configure-fix.patch: also not needed anymore</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1492948800">- patch 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch fixes
  some undefined references. See upstream issue
  https://github.com/vgough/encfs/issues/291
  With this patch, the %cmake macro can now be used for building if
  version of cmake is greater than 3.3
- improved detection of tinyxml: now builds on more architectures
  and SLE12 SP2</changelog>
  <changelog author="wagner-thomas@gmx.at" date="1501070400">- update to 1.9.2
  * fix a use-after-free bug that was introduced in v1.9-rc1
  * cast booleans to int before writing the XML config
  * support reading the config file from pipes
  * add "-t" option to set syslog tag
  * allow read/write in standard reverse mode
  * reject empty passwords
  * support building with openssl 1.1
- removed now unneeded 0001-Use-INITIALIZE_EASYLOGGINGPP-in-Error.cpp.patch</changelog>
  <changelog author="fvogt@suse.com" date="1516190400">- Fix combination of os_has_tinyxml and use_cmake_macro</changelog>
  <changelog author="Markus Ebner&lt;info@ebner-markus.de&gt;" date="1583496000">- update to 1.9.5
  * Correct a int/off_t buffer overflow in getSize()
  * Correct a possible write crash
  * Correct encfsctl cat and add encfsctl --reverse cat
  * Add -c &amp; -u cmdline options
  * Add --noattrcache &amp; --nodatacache cmdline options
  * Ignore .encfs6.xml file in reverse mode
  * Do not count usage on root path (to avoid resetting the --idle option)
  * Use stderr instead of stdout for error messages
  * Add the ability to disable data encryption (absolutely discouraged)
  * Add Cygwin support
- update to 1.9.4
  * Fix packaging error leading to wrong version output
  * Fix shared lib compilation (cmake -DBUILD_SHARED_LIBS=ON ..)
- update to 1.9.3
  * Fix compilation with "-std=c++11"
  * Fix a gid permission issue with allow_other
  * Fix operations on symlinks
  * Fix a race in idle unmount
  * Add --reversewrite cli option
  * Add PID to syslog logging
  * Deep code sanity check
  * Modernize coding style
  * Make codebase warnings &amp; clang-tidy clean
  * Bump FUSE_USE_VERSION to 29
  * Ensure compatibility with LibreSSL
  * Switch to vendored lib tinyxml2 &amp; easylogging
  * Reorganize man page and add missing options
  * Add gtest and micro benchmarks</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1585051200">- Disable RPATH for building</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1745582400">- fix build and simplify spec file
- use system easylogging</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1747051200">- add README.openSUSE for boo#1221085, boo#1243036</changelog>
</package>
<package pkgid="940967c9ef34428b5306d4aeaa40ab9b24dc2ec81ccaa9960ea61f08d1137f08f4f6d78ede2119eceb4ee4a835c5661142a32986ce59db4e77a23aae83d844ef" name="enchant-2-backend-aspell" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="e5f4bd91918782e1f59bfdd045b7e437fd6e8473d22b344896966744a2ee7710dd68805fe83c480f9555a763e4702577bd6c59949c2a4b1930b87e01c75ddedc" name="enchant-2-backend-hunspell" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="f94000e3938a3fc5d149514f4a220f59da1fa7e7e3e5e4ea17c8ecf244456abd14b31b62e982bf88c9960eaad077a6cb4f76914ac8902d02f42d3e4a10d38304" name="enchant-2-backend-nuspell" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="9d15288fe43ce8778e1f38822db68520bbde3b29cf94a0c6cb35c3fc1cefbe31135643cb6ade977deb0e1324e3c380479650bc30e92808ddb64b930f11a0b22d" name="enchant-2-backend-voikko" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="8e301b20f0fa95b3c5e09d6e8e6177c05510165cc2e421f6edb5a226761f8a1ba8c3e4d901202236a6bfc013c4f5dccb47bac4f5da5e51c2ab07736f98e106e6" name="enchant-2-backend-voikko-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="e5693591b7c514370bdc93022e24fc62f7c480f3cdf0cea0d9854fe6f8e0747c55aa99d9c563d5e02ca1a36596754727b3d21ac79ac8198f9f6b7c8d492eea9a" name="enchant-data" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="28d0d57ac200e184c185a7d0f210277fda707a6fc6a229d6928d606707c1901099e396cc350d98c53fb8dad3b8915a1d685a9eecafd2cace031493b2cec05410" name="enchant-devel" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="93f5a32b6ba9f29224c0a1ff17283b3030b23626cc5827aecc20e10f876890440dc72f36e31a1731c20ae5ead00e80330ad039bbfb2451af91affd453a19a6a7" name="enchant-tools" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="160000.2.2"/>
  <changelog author="yfjiang@suse.com" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="yfjiang@suse.com" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to version 2.2.8:
  + Add a provider back-end for Nuspell. Nuspell is a new
    spell-checker whose development has been supported by the
    Mozilla foundation. It is backwards-compatible with Hunspell
    and Myspell dictionaries, while supporting a wider range of
    language peculiarities, improved suggestions, and easier
    maintainability of the code-base.
  + Doxygen documentation generation is now supported for Enchant.
  + The command-line parsing of the “enchant” program has been made
    more friendly and reliable. The -L flag (show line numbers),
    which had not been working for some time, has been fixed.
  + A buffer overflow in personal wordlist handling has been fixed.
  + Minor improvements were made to the tests.
- Changes in version 2.2.7:
  + Fix some memory leaks in the hunspell and aspell providers.
- Changes in version 2.2.6:
  + Treat PWL as text, not binary.
- Run spec-cleaner: Remove package groups.</changelog>
  <changelog author="badshah400@gmail.com" date="1597752000">- Enable nuspell backend where it is available (openSUSE &gt;= 1550):
  + Introduce BuildRequires: nuspell-devel and
    libboost_headers-devel.
  + Split out new package enchant-2-backend-nuspell providing the
    nuspell backend.</changelog>
  <changelog author="tjyrinki@suse.com" date="1604577600">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- Update to version 2.2.15:
  + Specify that nuspell &gt;= 4.1.0 is required.
  + Fix some space leaks in the tests.
  + The nuspell backend is updated for newer versions.
  + Make the enchant program output its version to standard output,
    not standard error. This may help some programs that use this
    output.
  + Fix a bug in the Voikko and Zemberek back-ends that could cause
    spell checking and suggestion to fail.
  + Make enchant silently ignore -B flag, for better Emacs
    compatibility.
  + Make enchant_broker_list_dicts sort the tags, so that
    enchant-lsmod’s output is sorted.
  + Minor build system improvement: don’t use -D_FORTIFY_SOURCE,
    which can cause problems on Windows, and should be configured
    by the compiler vendor if desired.
  + Fix Hunspell backend to treat apostrophes as Hunspell does: if
    either straight or curly apostrophe is a word character, allow
    both.
  + Fix a couple of space leaks in the Nuspell back end.
- Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed
  upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1641556800">- Add missing closing parentheses for packageand Supplements.</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- Use %bcond_without aspell, ref ALP push for as few mandatory
  dependencies as possible/ability to turn off dependencies.</changelog>
  <changelog author="felix@dumbeck.net" date="1727697600">- Update to 2.8.2
  + maintainer has changed their name from abiWord to rrthomas on
    Github, hence update Source and URL to new home.
  + Switch to vala.
  + Use doxygen and groff-full for documentation.
  + nuspell &gt;= 5.1.0 is required.
  + for more information see: NEWS
- Add doxygen, vala and groff-full BuildRequires following upstream
  changes.
- Pass --docdir=%%{_defaultdocdir}/%%{name} to configure, package
  the now built documentation in openSUSE standard.</changelog>
</package>
<package pkgid="6d6b7ad5225efd09559fe8bcf053a28551beb209fb75dcedf58bcb553ef80ec4614266c5dafba1c0c9c786e2cb960871139df579e0fbf1237ed09239a5a37066" name="enchive" arch="x86_64">
  <version epoch="0" ver="3.5" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1553342400">- Initial package, version 3.4</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1575288000">- Update to version 3.5
  * New keygen option: --repeats (-r), times to repeat passphrase
    prompt
  * More explicit passphrase prompts
  * Improved portability
  * Fix various issues with enchive-mode.el
  * Minor documentation and bug fixes</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1708516800">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
</package>
<package pkgid="560610b48f22945bf6c72aaca2d72751f3d1bb897d36854aada809ef1e8d9dd73ccd478071362f27a6a1eba42fdd6ae17a3ee0da0e75584ed9553a7c20aff7c1" name="enet-devel" arch="x86_64">
  <version epoch="0" ver="1.3.18" rel="bp160.1.5"/>
  <changelog author="jengelh@medozas.de" date="1329652800">- Update license field to reflect actual license</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 1.3.5:
  + fixed a big in unreliable packaget fragment queuing
  + Soname bump to 2
- Changes from version 1.3.4:
  + added enet_peer_ping_interval() for configuring per-peer ping
    intervals
  + added enet_peer_timeout() for configuring per-peer timeouts
  + added protocol packet size limits</changelog>
  <changelog author="nemysis@gmx.ch" date="1417953600">- Update to 1.3.12
- Correct what fdupes not have found
- Move Documentation to libenet-devel package and add html</changelog>
  <changelog author="nemysis@gmx.ch" date="1432036800">- Update to 1.3.13, announce message:
  * miscellaneous bug fixes
  * added premake and cmake support
  * miscellaneous documentation cleanups
- Adjust what fdupes not have found</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1552305600">- Update to version 1.3.14
  * bug fix for enet_peer_disconnect_later()
  * use getaddrinfo and getnameinfo where available
  * miscellenous cleanups
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552564800">- Rename %soname to %sover to better match its use.
- Remove unnecessary extra pkgconfig require that is already
  implicit.
- Trim bias from descriptions.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1587643200">- Update to 1.3.15
  * quicker RTT initialization
  * use fractional precision for RTT calculations
  * fixes for packet throttle with low RTT variance
  * miscellaneous socket bug fixes</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600344000">- update to 1.3.16:
  * fix bug in unreliable fragment queuing
  * use single output queue for reliable and unreliable packets for saner ordering
  * revert experimental throttle changes that were less stable than prior algorithm</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1608465600">- update to 1.3.17:
  * fixes for sender getting too far ahead or receiver that can cause instability with reliable packets</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1713441600">- Update to version 1.3.18
  * Packet sending performance improvements.
  * MTU negotiation fixes.
  * Checksum alignment fix.
  * No more dynamic initialization of checksum table.
  * ENET_SOCKOPT_TTL
  * Other miscellaneous small improvements.</changelog>
</package>
<package pkgid="d1772b36ab55d1e82c2bdee3eec23979acc4ebbe68d2e41869cc91795803ea140f06dfd131ee60f69126b976e3125d2219782c5ba48ea4bb7f5a1abc939d7992" name="engdic" arch="noarch">
  <version epoch="0" ver="0.2" rel="bp160.123.9"/>
  <changelog author="violiet@susekorea.net" date="978523200">- NEW package.</changelog>
  <changelog author="ro@suse.de" date="1030708800">- corrected changes file</changelog>
  <changelog author="hmacht@suse.de" date="1077537600">- added option # norootforbuild in specfile</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mfabian@suse.de" date="1153224000">- update to 0.2 and convert to UTF-8.
  keep script from 0.1 version as an additional source.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="84e5da376461fbb559c5383d5ee20f4d2e013c782d624febdd00dcb724e7667ef5ea4ae88d6b7ee4fd3e6305c8e5b75a9138917e15f7fd66ed70160607b8c599" name="engrampa" arch="x86_64">
  <version epoch="0" ver="1.28.1" rel="bp160.1.13"/>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1572868800">- Fix build error complaining about conflicting types for
  g_ptr_array_copy by updating to 1.23.1.
- Update to version 1.23.1:
  * Update translations
  * glib-utils: Remove unused function - g_ptr_array_copy
  * Remove some unused/deprecated functions
  * Various smaller fixes</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1578052800">- Update to version 1.23.2
  * tx: sync with transifex
  * LHA: add test for checking compressed file integrity
  * Add application/(x-compress|x-rpm|x-lzh-compressed) in local magic
  * Show archive type in properties dialog
  * Zstandard: read .tar.zst files
  * Zstandard: add test for checking compressed file integrity
  * Zstandard: Update MIME type
  * Ar: Update MIME type and add magic numbers
  * fr-command-ar: fetch dates with strptime
  * Remove internal mkdtemp and define feature test macro
  * fr-command-tar: fetch dates with strptime
  * Use mate-compiler-flags.m4 provided by mate-common
  * ar: don't remove leading whitespaces in filename field
  * i18n caja extension copyright
  * LHA: make compatible with content-type response from gio file query
  * fr-command-dpkg: fetch dates with strptime
  * dlg-prop: set property label in ui file
  * Add extract-dialog-options.ui
  * LHA: Fix internet media type
  * Use g_list_free_full and g_slist_free_full
  * dlg-prop: show the exact number of bytes as part of the size
  * dlg-prop: allow to open the archive's folder
  * remove warnings: ‘gtk_image_new_from_stock’ is deprecated
  * glib-utils &amp; gtk-utils: Remove unused functions
  * dlg-package-installer: show icons in error dialog buttons
  * dlg-package-installer: remove warning ‘GtkStock’ is deprecated
  * gio-utils: Remove unused functions
  * glib-utils: Remove get_time_string()
  * unace 2.5: Don't show archive summary in file listing
  * tar: don't remove leading whitespaces in filename field
  * Initialization discards ‘const’ qualifier from pointer target type
  * remove warnings: "ENABLE_MAGIC" is not defined, evaluates to 0
  * comparison of integer expressions of different signedness: ‘size_t’
  * Missing initializer for struct field
  * remove warnings: cast from function call [-Wbad-function-cast]
  * remove build warning: local variable shadows another variable</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.2):
  * fr-command-rpm: Use rpm2cpio binary shipped with rpm package.
  * Add source rpm to supported mime-types.
  * Use cpio if no binary is found.
  * Add a configure environment variable to select the cpio path.
  * 7z: Don't set the work directory, i.e. use temporary directory.
  * Check if a mime-type is an alias in
    compute_supported_archive_types.
  * Define LOCALEDIR for bindtextdomain().
  * Migrate from intltool to gettext.
  * Clean file type selection in the new archive dialogue.
  * Automatically sets the maximum size of static arrays.
  * Fix localised pause UI logic.
  * dlg-extract: GtkFileChooserDialog instead of set extra widget.
  * dlg-batch-add: Set dialog image from icon-name instead of
    pixbuf.
  * Fix build using the -fno-common flag.
  * fr-process: Do not override LC_CTYPE.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * Avoid memory leak in java utils.
  * build: Silent build warnings for distcheck.
  * engrampa.appdata.xml: Recursive acronyms for .iso, .rpm
    filetypes.
  * autoconf: Get zstd mime type using libmagic if enabled.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * ar: fix filename in file list
  * rar 6.00: fix listing archive content with encrypted file list
  * fr-archive: Fix memory leak</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * fr-process: Fix memory leak.
  * Fix archive file save as function.
  * file-data: Fix memory leak.
  * fr-window: Fix memory leak.
  * dlg-package-installer: Fix memory leak.
  * Update translations.
- Add engrampa-1.26.1-add-7zip-support.patch: Add new 7-zip
  (7zz and 7zzs) project support (commit 6f49d2c7).</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1707825600">- CVE-2023-52138:
  Add patch: engrampa-1.26.1-use-unar-instead-of-cpio-for-CPIO-archives.patch,
  Use unar instead of cpio for CPIO archives (upstream commit 8cd485a5).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.1
  * update translations
  * Use unar instead of cpio for CPIO archives
  * Add correct jar mime type
  * Fix double URI escaping
  * Escapes a string for use in a URI. replace special "# and ?" characters in
    uri
  * rar: Actually accept unrar-free as the executable name
  * rar: Add support for unrar-free
  * rar: Fix out of bounds read on malformed output
  * rar: Simplify and merge duplicate code
  * zip: Fix crashes on buggy zip output
  * 7z: Fix accepting RAR archives when unar-open-zip=true
  * correct translation string
  * Fix Segfault on opening .deb files after recent Debian Unstable updates
  * fix warning in Japanese translations
  * Distribute Meson build system (but don't use on openSUSE)
- Drop engrampa-1.26.1-add-7zip-support.patch and
  engrampa-1.26.1-use-unar-instead-of-cpio-for-CPIO-archives.patch, merged by
  Upstream</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1718107200">- Support building on SUSE version 1550: instead of pkgconfig(libmagic)
  build-depend on file-devel for older versions of SUSE.
- Build with --enable-magic configure option set.</changelog>
</package>
<package pkgid="2192df8550601214d885effcec5dae79f9499dfdc59551d440e9f4b690a9f78b27c039b6f58986ab566e6ef43bd8408c4db8793642e45df377842f3e9f4df666" name="engrampa-lang" arch="noarch">
  <version epoch="0" ver="1.28.1" rel="bp160.1.13"/>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1572868800">- Fix build error complaining about conflicting types for
  g_ptr_array_copy by updating to 1.23.1.
- Update to version 1.23.1:
  * Update translations
  * glib-utils: Remove unused function - g_ptr_array_copy
  * Remove some unused/deprecated functions
  * Various smaller fixes</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1578052800">- Update to version 1.23.2
  * tx: sync with transifex
  * LHA: add test for checking compressed file integrity
  * Add application/(x-compress|x-rpm|x-lzh-compressed) in local magic
  * Show archive type in properties dialog
  * Zstandard: read .tar.zst files
  * Zstandard: add test for checking compressed file integrity
  * Zstandard: Update MIME type
  * Ar: Update MIME type and add magic numbers
  * fr-command-ar: fetch dates with strptime
  * Remove internal mkdtemp and define feature test macro
  * fr-command-tar: fetch dates with strptime
  * Use mate-compiler-flags.m4 provided by mate-common
  * ar: don't remove leading whitespaces in filename field
  * i18n caja extension copyright
  * LHA: make compatible with content-type response from gio file query
  * fr-command-dpkg: fetch dates with strptime
  * dlg-prop: set property label in ui file
  * Add extract-dialog-options.ui
  * LHA: Fix internet media type
  * Use g_list_free_full and g_slist_free_full
  * dlg-prop: show the exact number of bytes as part of the size
  * dlg-prop: allow to open the archive's folder
  * remove warnings: ‘gtk_image_new_from_stock’ is deprecated
  * glib-utils &amp; gtk-utils: Remove unused functions
  * dlg-package-installer: show icons in error dialog buttons
  * dlg-package-installer: remove warning ‘GtkStock’ is deprecated
  * gio-utils: Remove unused functions
  * glib-utils: Remove get_time_string()
  * unace 2.5: Don't show archive summary in file listing
  * tar: don't remove leading whitespaces in filename field
  * Initialization discards ‘const’ qualifier from pointer target type
  * remove warnings: "ENABLE_MAGIC" is not defined, evaluates to 0
  * comparison of integer expressions of different signedness: ‘size_t’
  * Missing initializer for struct field
  * remove warnings: cast from function call [-Wbad-function-cast]
  * remove build warning: local variable shadows another variable</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.2):
  * fr-command-rpm: Use rpm2cpio binary shipped with rpm package.
  * Add source rpm to supported mime-types.
  * Use cpio if no binary is found.
  * Add a configure environment variable to select the cpio path.
  * 7z: Don't set the work directory, i.e. use temporary directory.
  * Check if a mime-type is an alias in
    compute_supported_archive_types.
  * Define LOCALEDIR for bindtextdomain().
  * Migrate from intltool to gettext.
  * Clean file type selection in the new archive dialogue.
  * Automatically sets the maximum size of static arrays.
  * Fix localised pause UI logic.
  * dlg-extract: GtkFileChooserDialog instead of set extra widget.
  * dlg-batch-add: Set dialog image from icon-name instead of
    pixbuf.
  * Fix build using the -fno-common flag.
  * fr-process: Do not override LC_CTYPE.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * Avoid memory leak in java utils.
  * build: Silent build warnings for distcheck.
  * engrampa.appdata.xml: Recursive acronyms for .iso, .rpm
    filetypes.
  * autoconf: Get zstd mime type using libmagic if enabled.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * ar: fix filename in file list
  * rar 6.00: fix listing archive content with encrypted file list
  * fr-archive: Fix memory leak</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1628683200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * fr-process: Fix memory leak.
  * Fix archive file save as function.
  * file-data: Fix memory leak.
  * fr-window: Fix memory leak.
  * dlg-package-installer: Fix memory leak.
  * Update translations.
- Add engrampa-1.26.1-add-7zip-support.patch: Add new 7-zip
  (7zz and 7zzs) project support (commit 6f49d2c7).</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1707825600">- CVE-2023-52138:
  Add patch: engrampa-1.26.1-use-unar-instead-of-cpio-for-CPIO-archives.patch,
  Use unar instead of cpio for CPIO archives (upstream commit 8cd485a5).</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.1
  * update translations
  * Use unar instead of cpio for CPIO archives
  * Add correct jar mime type
  * Fix double URI escaping
  * Escapes a string for use in a URI. replace special "# and ?" characters in
    uri
  * rar: Actually accept unrar-free as the executable name
  * rar: Add support for unrar-free
  * rar: Fix out of bounds read on malformed output
  * rar: Simplify and merge duplicate code
  * zip: Fix crashes on buggy zip output
  * 7z: Fix accepting RAR archives when unar-open-zip=true
  * correct translation string
  * Fix Segfault on opening .deb files after recent Debian Unstable updates
  * fix warning in Japanese translations
  * Distribute Meson build system (but don't use on openSUSE)
- Drop engrampa-1.26.1-add-7zip-support.patch and
  engrampa-1.26.1-use-unar-instead-of-cpio-for-CPIO-archives.patch, merged by
  Upstream</changelog>
  <changelog author="Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;" date="1718107200">- Support building on SUSE version 1550: instead of pkgconfig(libmagic)
  build-depend on file-devel for older versions of SUSE.
- Build with --enable-magic configure option set.</changelog>
</package>
<package pkgid="452d1000e3282129eb573cc0591620a27fa986d3aa2aa8ca9e924d4fbb4368425b2b8a1cb1d9014b1c389e6e2c4ab722049852bd5013aadf9904e123c5bb3ce4" name="enlightenment" arch="x86_64">
  <version epoch="0" ver="0.25.4" rel="bp160.1.1"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1656417600">- Disable suid storage module thats not needed under Linux
  (boo#1170161, boo#1170162)
  * feature-openSUSE-disable-system-storage.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1675166400">- Add constraints file occasionally out of disk space</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1705060800">- Recommend packages to get Qt/KDE apps to match the theme out of
  the box
  * libqt5-qtstyleplugins-platformtheme-gtk2
  * qt6gtk2</changelog>
</package>
<package pkgid="19f56c7a42a6483b041c0cba7146ea35b69c259b33f01d863dc28511b78219bb44927c6c5dcab5ba907af2aeb3ada8a3f5ac75b404af729aa51f7d0372b03bcb" name="enlightenment-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="0.2" rel="lp160.4.1"/>
  <changelog author="simon@simotek.net" date="1380715200">- Use new openSUSE theme as default
  Recommend other themes as well</changelog>
  <changelog author="simon@simotek.net" date="1383480000">- Require default theme otherwise e17 won't start the first time</changelog>
  <changelog author="simon@simotek.net" date="1387713600">- e-theme-openSUSE replaced with e17-theme-openSUSE</changelog>
  <changelog author="simon@simotek.net" date="1387886400">- update for terminology</changelog>
  <changelog author="simon@simotek.net" date="1392724800">- Conflict with e17 branding</changelog>
  <changelog author="simon@simotek.net" date="1392811200">- Fixed Summary's mention of e17 and tried to fix
  Branding conflicts.</changelog>
  <changelog author="simon@simotek.net" date="1411387200">- New 13.2 themes added
- Updated def-ibar.txt
  Includes hexchat and xchat in text implementations
  Browsers before text editors
  Add kate to the list of text editors
  Add Yast2</changelog>
  <changelog author="simon@simotek.net" date="1419854400">- Should require openSUSE Profiles as these are a fundamental part
  of the branding</changelog>
  <changelog author="simon@simotek.net" date="1433937600">- At the recommendation of DimStar Obsolete but don't provide
  e17 branding</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Update list of themes recommended. v0.2</changelog>
</package>
<package pkgid="a6bf6bd5f8bc6f83a0e97921d8b20f63fb36775733508ec2ddf574ec93b78d03a5d1dfedb5d2f4dd5abb34a7cc3f93128fad5d7f634a8a31535a9af3c2d547a8" name="enlightenment-branding-upstream" arch="x86_64">
  <version epoch="0" ver="0.25.4" rel="bp160.1.1"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1656417600">- Disable suid storage module thats not needed under Linux
  (boo#1170161, boo#1170162)
  * feature-openSUSE-disable-system-storage.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1675166400">- Add constraints file occasionally out of disk space</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1705060800">- Recommend packages to get Qt/KDE apps to match the theme out of
  the box
  * libqt5-qtstyleplugins-platformtheme-gtk2
  * qt6gtk2</changelog>
</package>
<package pkgid="f7e769ba54d8cb4a8e173372217f817a7d907dce2267e4a85814163bc6d0d2ae1479cb169ef7e66300a6b40c25694206e4f679a8651d91a6f67f6f1fed6ac817" name="enlightenment-devel" arch="x86_64">
  <version epoch="0" ver="0.25.4" rel="bp160.1.1"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645012800">- Update to 0.25.3
  * Fix notification double-shadow on multi-screen notifications
  * Add option to gesture to turn off entirely to avoid xserver vt bugs
  * Add option to backlight to disable ddc support in case it's broken
  * Fix ibar left/right emit for alignment
- Log to journal with X11 etc rather then logfile
    feature-openSUSE-log-to-journal.patch
- Refreshed enlightenment-0.16.999.65256-dont_require_suidbit.patch to be -p1
- Fix xsession file install</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- boo#1154733 - Recommend pam_mount</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1646049600">- Allow Branding &gt;= 0.1 (I made 0.2 the other day)
- Fix non wayland build</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1650024000">- boo#1197326,1196609 - Don't Enable modules that don't exist in profile
  migration.
  * fix-upstream-dont-migrate-sysinfoluncher.patch
- Recommend acpid for bindings</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651752000">- Recommend acpid for bindings (Should now remove popup) [boo#1196609]
- system.conf allow all users, this is required because we no
  longer automatically add people to the users group. [boo#1196609]</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1656417600">- Disable suid storage module thats not needed under Linux
  (boo#1170161, boo#1170162)
  * feature-openSUSE-disable-system-storage.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664280000">- Update to 0.25.4 Bugfix release
  * Fix shape handling in various cases that affected apps with shaped input
  * Fix procstats popup and dangling icon for fullscreen windows
  * Fix a vianishing pointer in some cases
  * Workaround Qt issue where it does not remove WM_STATE on withdraw
  * Fix fullscreen focus toggle flicker
  * Fix pointer sticking case
  * Fix tap-to-click props
  * Fix gadgcon disabled items
  * Fix config fallback handling that means no fallback happened
  * Fix gtk frame prop handling
  * Fix first map handling that affected energyxt
  * Fix CVE-2022-37706 (boo#1203631)
  * Hanrde enlightenment_sys when mis-packaged without sysactions.conf
- Drop fix-upstream-dont-migrate-sysinfoluncher.patch fixed upstream</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673611200">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1675166400">- Add constraints file occasionally out of disk space</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1705060800">- Recommend packages to get Qt/KDE apps to match the theme out of
  the box
  * libqt5-qtstyleplugins-platformtheme-gtk2
  * qt6gtk2</changelog>
</package>
<package pkgid="80f26078cb78627fb407a18e3ed798ce5e546e6dc75f5753e37f979d9124b79dbb5ae4b735260a133153733e5a297603bccb828e982478ccfb25890b0bfded6e" name="enlightenment-profiles-openSUSE" arch="noarch">
  <version epoch="0" ver="20220317" rel="lp160.5.1"/>
  <changelog author="simon@simotek.net" date="1386936000">- rename to e17-*</changelog>
  <changelog author="simon@simotek.net" date="1386936001">- Fork for enlightenment e18 and make it work.</changelog>
  <changelog author="sleep_walker@suse.cz" date="1387454400">- fix spec for new version of profile</changelog>
  <changelog author="simon@simotek.net" date="1392724800">- Conflict with old e17</changelog>
  <changelog author="simon@simotek.net" date="1392984000">- require enlightenment-theme-dft for default.edj in e18
  Don't obsolete old packages</changelog>
  <changelog author="simon@simotek.net" date="1411387200">- e19 version of profiles for openSUSE 13.2
  Adds a dock profile
  uses and configures the package config module</changelog>
  <changelog author="simon@simotek.net" date="1433937600">- At recomendation of DimStar, Obsolete but don't provide e17 profiles</changelog>
  <changelog author="simon@simotek.net" date="1445515200">- tidy up for leap (remove extra tasks module from shelf) remove
  some modules that the wizard should load.</changelog>
  <changelog author="sflees@suse.de" date="1466596800">- boo#983953 alt-F4 and Ctrl-Alt-X keybindings don't match other
  desktops</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1647518400">- 20220317 - e25 dropped the teamwork module and I added the msgbus
  module because its useful
- Updated URL moved profiles out of my namespace and into the
  openSUSE one.</changelog>
</package>
<package pkgid="26ad1130fa4e045fc8f1337c9d16e7ff8881843ac102190dd5673d74b217c5b84b18f6bbeaea4fd9ce6db8d4b1aab497c5caa45fca73c4f33574c15ea659ec8e" name="enlightenment-theme-Flat" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="527f4af1e8a9c711bf817344c89e1fd2445770684452a5db6c2423fc9fa357a75d2bbda3520d9dcfbf336c1ede647e8206eb6e78961524ee22bb9bd7b61f9139" name="enlightenment-theme-dark" arch="noarch">
  <version epoch="0" ver="20220216.1.26" rel="bp160.1.27"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645358400">- Dark theme is no longer default and now a separate package
  20220216.1.26</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
</package>
<package pkgid="443a30c463553d8523195dd00b550b65e7de8f7b967ad0589a20eb668a2556c0e618bf6c6142bb598c609725fd8cf1ab9efd1c09463775ab72259ec84d58a759" name="enlightenment-theme-openSUSE" arch="noarch">
  <version epoch="0" ver="20220430.1.26" rel="lp160.6.1"/>
  <changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
  <changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
  <changelog author="sflees@suse.de" date="1511956800">- Update for e22</changelog>
  <changelog author="sflees@suse.de" date="1524830400">- Bring back oliveleaf as default with leap 15 branding 20180504</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.com&gt;" date="1573041600">- 20191110 - efl 1.23
  * Now also ship openSUSE-e-X icon theme to match efl theme</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590667200">- 20200528 - efl 1.24</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645185600">- 20220219.1.26 - efl 1.26
  * Temporarily still using Olive Leaf, new theme coming soon.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1651320000">- 20220430.1.26 - Major change to theme based off new Dimensions theme.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1738584000">- Fix build with RPM 4.20: remove commented ot setup line. %setup i
  snow a proper, multi-line macro. Using '#' to comment it out only
  comments out the first line and does not do what packagers might
  expect.</changelog>
</package>
<package pkgid="fad3fd6742024b763177693e0f5d3f84d3323a4a96483e6996a8ae6c22155bad015aee93001dbf90eab409cd2f4bca2b8cf48601c62c4c109685549cf42f329b" name="enlightenment-theme-openSUSE-ice" arch="noarch">
  <version epoch="0" ver="20220219.1.26" rel="bp160.1.27"/>
  <changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence SR(252158)
- Fix Init logo</changelog>
  <changelog author="sflees@suse.de" date="1457956800">- 20160314 rebase on efl 1.17.0 fix factory build</changelog>
  <changelog author="sflees@suse.de" date="1457956801">- spec cleaner run</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
  <changelog author="sflees@suse.de" date="1477656000">- 20161028 Fixes some minor regressions</changelog>
  <changelog author="sflees@suse.de" date="1511956800">- Update for e22</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.com&gt;" date="1546344000">- 20200101 - efl 1.23
  * Now also ship openSUSE-e-X-ice icon theme to match efl theme</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1590753600">- 20200529 - efl 1.24</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1645531200">- Update for e25 and efl 1.26</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
</package>
<package pkgid="e7c17de32da5ae42f4d7d7b49f131661625212644dc1dc92ce4728cd40bf9381613361ab5af6e5b0a4c566654dc6e248f73106284bb75ac744be6c3fdce9a095" name="enlightenment-theme-openSUSE-neon" arch="noarch">
  <version epoch="0" ver="20220219.1.26" rel="bp160.1.27"/>
  <changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
  <changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
  <changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
  <changelog author="sflees@suse.de" date="1511956800">- Update for e22</changelog>
  <changelog author="sflees@suse.de" date="1524744000">- Create Neon theme from old default</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.com&gt;" date="1546344000">- 20200101 - efl 1.23
  * Now also ship openSUSE-e-X-Neon icon theme to match efl theme</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1579608000">- Drop default theme conflicts this is not the default theme</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1590753600">- 20200529 - efl 1.24</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1645531200">- Update for e25 and efl 1.26</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well
- It also has no need for obsoletes.</changelog>
</package>
<package pkgid="a6032d91626a192e6b3c15706ab9fcab6c9f8fa7947a14459d6e1e2a90b21fb66376cd076f118b0b3ec8ecd631ee8c5d0b5a23408e99b185c5a0332317b2a016" name="enlightenment-theme-openSUSE-oliveleaf" arch="noarch">
  <version epoch="0" ver="20220219.1.26" rel="bp160.1.27"/>
  <changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
  <changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
  <changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
  <changelog author="simon@simotek.net" date="1410955200">- Recreate theme from 13.1 in this package</changelog>
  <changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence SR(252158)</changelog>
  <changelog author="sflees@suse.de" date="1457956800">- Recreated theme 201603014
  - Build scripts now work again with openSUSE:Factory
  - Theme rebased on elementary theme from efl 1.17.0</changelog>
  <changelog author="sflees@suse.de" date="1457956801">- Spec cleaner run</changelog>
  <changelog author="sflees@suse.de" date="1475064000">- Update to new building version 20160922</changelog>
  <changelog author="sflees@suse.de" date="1511956800">- Update for e22</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645531200">- Update for e25 and efl 1.26 (This will no longer be default)</changelog>
</package>
<package pkgid="4a814dd14dc634e1ea796c36f7b10e97800d273c7e6f9db76fb2d6c1296bf021d4cd644b286c3c0646801f2c59579596c4faf02afb6ad767f1f0e0d22ef1e1f1" name="enlightenment-theme-upstream" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="6842ea8007abcdf964281f3e4b66af55a44db37a005596ddde018c48538675de75a5430a03139dcc7f86f899adeceb1472a5d24c325865b168dfdef09d987941" name="enlightenment-x-Flat-icon-theme" arch="x86_64">
  <version epoch="0" ver="0.21.0" rel="bp160.1.30"/>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645099200">- Upstream theme is now called Flat rather then dark. Dark will
  reappear soon in a new package.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1645704000">- Themes are going to recommend there icon themes as well</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1646222400">- Drop python-devel BuildRequires: not needed.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1664020800">- remove duplicate valgrind buildrequires (fixes RISCV build)</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1664193600">- Update to 1.26.3 Bugfix release
  * Fix theme issues
  * Fix edje calc internal return values in some cases
  * Fix ecore-x netwm moveresize request handling
  * Fix ecore-x xkb handling to not leak
  * Fix new xkb event handling
  * Fix evas smart object to null out fields for safety
  * Fix elm null cnp object handling to not crash in odd cases
  * Fix ecore evas x11 dnd handling to not null out xdnd props
  * Fix data checkme file so relocation at runtime works again
  * Fix eina bt output to always have spaces between fields
  * Fix png loader on arm to not have rgb values when a is 0
  * Fix textgrid to guard against null glyphs
  * Fix ecore-x vblank to use current time not vlbank time
  * Fix emile to handle invalid compress types more gracefully
  * Fix compile warnings
  * Fix evas psd loader crash
  * Fix osx sample compile conf script options
  * Fix wl vsync timer to use current time not vblank time
  * Work around xwayland issue where synthetic events are not sent</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1669723200">- luajit no longer available on ppc64</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709640000">- Add d9ec36e1de4c2a70ac82dc66a72c282dc42037b7.patch: add charset
  header to po files.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1720008000">- Drop libpoppler-cpp0 BuildRequires: this was there to workaround
  a bug in poppler-devel, in the times for openSUSE 13.2 and has
  long been fixed.</changelog>
  <changelog author="Christophe Marin &lt;christophe@krop.fr&gt;" date="1723118400">- Remove obsolete xine and vlc build dependencies. Support was
  dropped from the emotion library in 1.23.0 release.
- Consequently drop the 'generic_players_present' condition</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1742126400">- Make scim conditional, which is Factory drop candidate
- Add patch efl_scim.patch</changelog>
</package>
<package pkgid="dc8a6f718a5ec07701a1f58efc98097aafe12c3089c409751152cb5052423cbf385b749cecfa328a78cddbdb11dc6298e218afd506fd1672768bbaff0c959c39" name="enscript" arch="x86_64">
  <version epoch="0" ver="1.6.6" rel="bp160.1.12"/>
  <changelog author="avindra@opensuse.org" date="1516708800">- update to 1.6.6
  * Add afm/MustRead.html, containing licensing information for
    Adobe AFM files.
  * Sync all translations from the Translation Project. Visit
    http://translationproject.org/ to help translate Enscript
  * Add documented but missing '-w' option as an alias for
    '--language'
  * Apply sliceprint patch from Debian
- includes 1.6.5.2:
  * Fix CFG_FATAL macro in util.c-- prevents a segfault when the
    config file contains unknown parameters
  * Fix segfault with line lengths over 90 characters
- includes 1.6.5.1:
  * Typo corrections in the manual pages
  * Actually ship f90.st in the tarball
  * Better organization for ChangeLog, INSTALL and README
- includes 1.6.5:
  * Licensing change: GNU Enscript is now distributed under
    version 3 or later of the GNU GPL
  * Build system fixes - distcheck now passes
  * At least four security bug fixes:
  - CAN-2004-1184
  - CAN-2004-1185
  - CAN-2004-1186
  - CVE-2008-3863, CVE-2008-4306
  * Syntax highlighting fixes
  - shell escaping rules from Shawn McMahon
  - JavaScript regexps now recognised
  - New highlighting rules for Fortran 90 from David Bowler
- rebase enscript-automake.diff
- remove enscript-1.6.4-CAN-2004-1184.patch
  * upstreamed in 9510e4315705329e51b27fa2f3f688989b9fb37f
- remove enscript-1.6.4-CAN-2004-1185.patch
  * fixed in a3e6bf57e48bb7434cdd590732e221fd2e0b4c17
- remove enscript-1.6.4-CAN-2004-1186.patch
  * fixed in 0acc7b63a1be9f5d02f1a21d6df52cb5a9ce7e58
- remove enscript-1.6.4-CVE-2008-3863.patch
  * upstreamed in 94135714871a735e3fe624eaf37901bbb6314e05
- remove enscript-1.6.4-fdleak.patch
  * fixed in f2bfb5ead29048ce42000e4796383a4406b069f6
- remove enscript-1.6.4.dif
- renumber patches
- cleanup with spec-cleaner</changelog>
  <changelog author="werner@suse.de" date="1516708801">- Add patch enscript-1.6.6-euro+baltic.patch to get support for the
  Euro symbol as well as the Baltic language support back</changelog>
  <changelog author="werner@suse.de" date="1516708802">- Add patch enscript-1.6.6-encoding+paper.patch to get better
  encoding and automatic paper size support back</changelog>
  <changelog author="werner@suse.de" date="1516708803">- Add patch enscript-1.6.6-mailto.patch to get mailto support with
  optional address back</changelog>
  <changelog author="werner@suse.de" date="1516708804">- Add patch enscript-1.6.6-helper-apps.patch to mention
  helper app support again</changelog>
  <changelog author="werner@suse.de" date="1516708805">- Add enscript-1.6.6-silent-warns.patch to silent gcc
- Move %install_info_delete from %postun to %preun</changelog>
  <changelog author="werner@suse.de" date="1516708806">- Add enscript-1.6.6-ghostscript.patch to get correct support for
  ghostscript back</changelog>
  <changelog author="werner@suse.de" date="1516708807">- Add missing scan vor LC_PAPER in patch enscript-1.6.6-encoding+paper.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="eff66486581a0bc895c13b16fc41ef978591e6de4c58d1a0596b926636394f8dad21c19a5fca41d5e59c178311dde382d467a6004ddf652a501b415e26b4ac58" name="entangle" arch="x86_64">
  <version epoch="0" ver="3.0" rel="bp160.1.16"/>
  <changelog author="meissner@suse.com" date="1360843200">- entangle-libgphoto25.patch: libgphoto2 2.5 port.</changelog>
  <changelog author="meissner@suse.com" date="1377777600">- Release 0.5.3 - "Photon" - 2013-08-28
  * Move file name of image thumbnails to tooltip popup
  * Add --disable-schemas-compile configure arg to
    disable schema compilation
  * Remove "Encoding" key from desktop file
  * Fix massive memory leak in pixbuf loading
  * Fix thread safety in camera control updates which caused
    hangs in GTK
  * Fix updating of control readonly state when camera modes
    change
- Release 0.5.2 - "Graviton" - 2013-08-17
  * Split histogram into RGB colour channels
  * Fix aperture / shutter speed calculations in status bar
  * Only import files with known image extensions
  * Use case insensitive file extension check to detect raw files
  * Set saner defaults for processing raw files to fix Canon
    raw display
  * Set preferences before loading session to fix settings
    for initial image load
  * Apply orientation from EXIF images if image file has none
  * Remove left over debug prints
  * Add support for linear histogram display mode
  * Support 'h' key to toggle linear/log histogram mode
  * Ensure all events are emitted in main thread
  * Remove use of deprecated GDK thread APIs
  * Use GtkGrid instead of deprecated GtkTable
  * Ensure status bar is constant size when scaling image
  * Preserve scrollbar offsets when switching images
  * Make metadata extraction more robust wrt missing fields
  * Updated translations from transifex
- Release 0.5.1 - "W Boson" - 2012-03-12
  * Update for compatibility with libgphoto 2.5 API
    callbacks
  * Avoid warnings about deprecated glib2 mutex
    and condition variable APIs
  * Directly disable viewfinder mode using config APIs
  * Add support for triggering autofocus during preview
    with 'a' key
  * Add support for manual focus drive in/out using
    '.' and ',' keys
  * Refresh translations from transifex
  * Import user contributed Italian translation
  * Add missing translation markers on some strings
- Release 0.5.0 - "Z Boson" - 2012-12-16
  * Switch to using LibRaw for loading raw images
  * Allowing loading image preview from raw files
  * Fix deadlock unmounting camera at startup
  * Ensure camera is disconnected before exiting
  * Sort image list by name instead of date
  * Add support for rendering "onion skin" of image sequence
  * Fix updating of range control values
  * Fix filename generation for dual-format capture modes
  * Fix deletion of dual-format images when exiting preview
  * Refresh translations
- removed entangle-libgphoto25.patch: upstream
- updated entangle-desktop.patch</changelog>
  <changelog author="meissner@suse.com" date="1387368000">- Release 0.5.4 - "Up" - 2013-12-15
  * Ensure thumbnail directory exists when saving thumbnails
  * Fix memory leak generating thumbnails from raw images
  * Add an appdata XML file for GNOME software center
  * Create a dedicated camera actions menu
  * Fix include of gexiv2 header files
  * Fix image selection for onion skinning in preview mode
  * Display selected image when cancelling preview
  * Fix empty tooltips on capture/preview buttons
  * Fix scaling for preview image in onion skinning mode
  * Increase emphasis of top image in onion skinning mode
  * Improve granularity of manual focus and add extra
  '&lt;' and '&gt;' key accelerators for coarse focus
  * Fix leak of image exiting preview mode
  * Make progress toolbar button permanently visible</changelog>
  <changelog author="meissner@suse.com" date="1399118400">- Release 0.6.0 - "Down" - 2014-05-02
  * Add a demonstration plugin for setting up a captive photo box display mode
  * Switch to use Python3 for plugin engine instead of JavaScript
  * Use GTK dark theme
  * Require GNOME symbolic icon theme to be installed
  * Switch to require lcms2 instead of lcms
  * Move application icon into a standard directory mandated to work with the appdata tools
  * Make manual focus work with Canon EOS cameras
  * Disable flickering progress bar in preview mode with Canon EOS cameras
  * Remove use of deprecated GTK methods/classes/constants
  * Remove use of gexiv2 method which is not long exported
  * Remove use of deprecated libpeas methods
  * Add GTK-DOC transfer annotations / docs to all methods
  * Avoid loosing camera capabilities on disconnect
  * Fix off by one in histogram tables causing memory corruption
  * Mark appdata / desktop files for translation
  * Fix typos in README file
  * Fix inverted tests when checking if range widget changed
  * Avoid storm of expose events due to auto-drawer widget
  * Avoid never ending circular update of controls causing errors in some camera modes
  * Add workaround for crazy D5100 camera serial number
  * Add customizable highlight/background for images
  * Avoid reference leak of windows preventing proper cleanup
  * Remove camera manual/about/driver help windows since it did not contain any info useful to users
  * Filter list of cameras in connect dialog to only those which support capture/preview
  * Don't auto connect to cameras which don't support capture or preview
  * Ensure parent window is set on dialogs to prevent them falling behind main window
  * Fix crash with latest GTK due to incorrect overriding of GtkApplication startup method
  * Update to cope with changed GExiv API version
  * Refreshed translations from transifex</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.7.0
  * Require GLib &gt;= 2.36
  * Import new logo design
  * Switch to using zanata.org for translations
  * Set default window icon
  * Introduce an initial help manual via yelp
  * Use shared library for core engine to ensure all symbols
  are exported to plugins
  * Add framework for scripting capture operations
  * Workaround camera busy problems with Nikon cameras
  * Add a plugin for repeated capture sequences
  * Replace progress bar with spinner icon
- Changes from version 0.6.1
  * Require GTK &gt;= 3.4
  * Fix check for GIO package in configure
  * Add missing icons to Makefile
  * Follow freedesktop thumbnail standard storage location
  * Refactor capture code to facilitate plugin script
    automation
  * Fix bug causing plugin to be displayed more than once
  * Make histogram height larger
  * Strip trailing '2' from widget labels to be more friendly
  * Completely rewrite control panel display to show a small,
    user configurable subset from all the camera controls.
  * Remember custom list of camera controls per camera model
  * Hide compiler warnings from new glib atomic opertaions
  * Update to newer gnulib compiler warnings code
  * Remove broken double buffering code that's no required
    when using GTK3
  * Remove use of deprecated GtkMisc APis
  * Allow camera picker list to show multiple lines
  * Remove crufty broken code from session browser that was
  breaking with new GTK versions
  * Disable libraw auto brightness since it totally overexposes
    many images, generally making things look worse
  * Fix memory leak handling camera events
  * Add keywords to desktop &amp; appdata files
- Add gtk-doc and itstool dependencies
- Add yelp-tools require but disable it for now as the check
  now requires internet connection
- Disable check; requires network connection
- Split out photobox and shooter plugins into their own packages
- Recommend entangle-lang package
- Update entangle-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Update to 0.7.1:
  * Fix linking problem with strict linkers
  * Misc spelling fixes to online help docs
  * Replace use of GSimpleAsyncResult with GTask
  * Specify versions when importing from python plugins
  * Remove use of deprecated GTK APIs
  * Render image stats overlay partially transparent
  * Fix error reporting when saving settings
  * Flush events after capture to avoid accidentally restarting preview
  * Make Nikon fine focus stepping finer
  * Ensure images are sorted by last modified date
  * Switch from 128 px to 256 px thumbnail sizes to benefit larger high dpi screens
  * Rewrite film strip browser to dynamically resize icons to fit available space
  * Draw symbolic icons in film strip if image is not yet loaded
  * Refresh translations from Zanata
- Depend on lcms2 not lcms1</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1548158400">- update to version 2.0
  * Require gobject introspection &gt;= 1.54
  * Require GTK3 &gt;= 3.22
  * Fix dependency on libraw
  * Fix variable name in photobox plugin
  * Document some missing keyboard shortcuts
  * Fix upper bound in histogram to display clipped pixel
  * Refresh translations
  * Option to highlight over exposed pixels in red
  * Disable noisy compiler warning
  * Remove use of deprecated application menu concept
  * Fix image redraw when changing some settings
  * Update mailing list address in appdaat
  * Add more fields to appdata content
  * Fix reference counting during window close
  * Use correct API for destroying top level windows
  * Fix unmounting of cameras with newer gvfs URI naming scheme
  * Avoid out of bounds read of property values
  * Fix many memory leaks
  * Workaround for combo boxes not displaying on Wayland
  * Fix race condition in building enums
  * Fix setting of gschema directory during startup
  * Set env to ensure plugins can find introspection typelib
- entangle-desktop.patch: dropped, included desktop file is ok</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 3.0:
  * Ensure picture directory is an absolute path
  * Add ability to flip image during preview
  * Fix warnings about string length
  * Convert appdata file to metainfo and add missing info
  * Another attempt to fix build deps on enum headers
  * Display remaining shot count &amp; ETA in repeat shooter
  plugin
  * Remove use of deprecated GObject macros
  * Remove use of deprecated GLib APIs
  * Ensure glib min version checks at build time
  * Convert to use GObject macros for declaring boilerplate
  * Bulk reformat code using clang-format rules
  * Force a default filename pattern if setting is invalid
  * Validate filename pattern when updating preferences
  * Rename desktop file and icon file to match application ID
  * Add ability to render text mesages over image
  * Add a countdown timer for photobox plugin capture
  * Disable context menu in image browser when photobox plugin
  is active
  * Run live view when counting down to capturein photobox
  plugin
  * Fix crash releasing popup windows
  * Add context menu option for opening popup image window
  * Drop drag support for opening popup image window
  * Display greeting when opening popup image window
  * Display greeting when entering photobox plugin</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1598529600">- fixed filelists after update to make it build.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1646136000">- fix-new-meson.patch: fix build with new meson</changelog>
</package>
<package pkgid="4c909ffccdf13e76b74fec6bb37ba687a1d2aee695003d942dfe223a27d263d435c0aad7fcacc52fb03c7662bfe9c2c079e5b55785d30bc4bc645eda8e94875b" name="entangle-doc" arch="noarch">
  <version epoch="0" ver="3.0" rel="bp160.1.16"/>
  <changelog author="meissner@suse.com" date="1360843200">- entangle-libgphoto25.patch: libgphoto2 2.5 port.</changelog>
  <changelog author="meissner@suse.com" date="1377777600">- Release 0.5.3 - "Photon" - 2013-08-28
  * Move file name of image thumbnails to tooltip popup
  * Add --disable-schemas-compile configure arg to
    disable schema compilation
  * Remove "Encoding" key from desktop file
  * Fix massive memory leak in pixbuf loading
  * Fix thread safety in camera control updates which caused
    hangs in GTK
  * Fix updating of control readonly state when camera modes
    change
- Release 0.5.2 - "Graviton" - 2013-08-17
  * Split histogram into RGB colour channels
  * Fix aperture / shutter speed calculations in status bar
  * Only import files with known image extensions
  * Use case insensitive file extension check to detect raw files
  * Set saner defaults for processing raw files to fix Canon
    raw display
  * Set preferences before loading session to fix settings
    for initial image load
  * Apply orientation from EXIF images if image file has none
  * Remove left over debug prints
  * Add support for linear histogram display mode
  * Support 'h' key to toggle linear/log histogram mode
  * Ensure all events are emitted in main thread
  * Remove use of deprecated GDK thread APIs
  * Use GtkGrid instead of deprecated GtkTable
  * Ensure status bar is constant size when scaling image
  * Preserve scrollbar offsets when switching images
  * Make metadata extraction more robust wrt missing fields
  * Updated translations from transifex
- Release 0.5.1 - "W Boson" - 2012-03-12
  * Update for compatibility with libgphoto 2.5 API
    callbacks
  * Avoid warnings about deprecated glib2 mutex
    and condition variable APIs
  * Directly disable viewfinder mode using config APIs
  * Add support for triggering autofocus during preview
    with 'a' key
  * Add support for manual focus drive in/out using
    '.' and ',' keys
  * Refresh translations from transifex
  * Import user contributed Italian translation
  * Add missing translation markers on some strings
- Release 0.5.0 - "Z Boson" - 2012-12-16
  * Switch to using LibRaw for loading raw images
  * Allowing loading image preview from raw files
  * Fix deadlock unmounting camera at startup
  * Ensure camera is disconnected before exiting
  * Sort image list by name instead of date
  * Add support for rendering "onion skin" of image sequence
  * Fix updating of range control values
  * Fix filename generation for dual-format capture modes
  * Fix deletion of dual-format images when exiting preview
  * Refresh translations
- removed entangle-libgphoto25.patch: upstream
- updated entangle-desktop.patch</changelog>
  <changelog author="meissner@suse.com" date="1387368000">- Release 0.5.4 - "Up" - 2013-12-15
  * Ensure thumbnail directory exists when saving thumbnails
  * Fix memory leak generating thumbnails from raw images
  * Add an appdata XML file for GNOME software center
  * Create a dedicated camera actions menu
  * Fix include of gexiv2 header files
  * Fix image selection for onion skinning in preview mode
  * Display selected image when cancelling preview
  * Fix empty tooltips on capture/preview buttons
  * Fix scaling for preview image in onion skinning mode
  * Increase emphasis of top image in onion skinning mode
  * Improve granularity of manual focus and add extra
  '&lt;' and '&gt;' key accelerators for coarse focus
  * Fix leak of image exiting preview mode
  * Make progress toolbar button permanently visible</changelog>
  <changelog author="meissner@suse.com" date="1399118400">- Release 0.6.0 - "Down" - 2014-05-02
  * Add a demonstration plugin for setting up a captive photo box display mode
  * Switch to use Python3 for plugin engine instead of JavaScript
  * Use GTK dark theme
  * Require GNOME symbolic icon theme to be installed
  * Switch to require lcms2 instead of lcms
  * Move application icon into a standard directory mandated to work with the appdata tools
  * Make manual focus work with Canon EOS cameras
  * Disable flickering progress bar in preview mode with Canon EOS cameras
  * Remove use of deprecated GTK methods/classes/constants
  * Remove use of gexiv2 method which is not long exported
  * Remove use of deprecated libpeas methods
  * Add GTK-DOC transfer annotations / docs to all methods
  * Avoid loosing camera capabilities on disconnect
  * Fix off by one in histogram tables causing memory corruption
  * Mark appdata / desktop files for translation
  * Fix typos in README file
  * Fix inverted tests when checking if range widget changed
  * Avoid storm of expose events due to auto-drawer widget
  * Avoid never ending circular update of controls causing errors in some camera modes
  * Add workaround for crazy D5100 camera serial number
  * Add customizable highlight/background for images
  * Avoid reference leak of windows preventing proper cleanup
  * Remove camera manual/about/driver help windows since it did not contain any info useful to users
  * Filter list of cameras in connect dialog to only those which support capture/preview
  * Don't auto connect to cameras which don't support capture or preview
  * Ensure parent window is set on dialogs to prevent them falling behind main window
  * Fix crash with latest GTK due to incorrect overriding of GtkApplication startup method
  * Update to cope with changed GExiv API version
  * Refreshed translations from transifex</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.7.0
  * Require GLib &gt;= 2.36
  * Import new logo design
  * Switch to using zanata.org for translations
  * Set default window icon
  * Introduce an initial help manual via yelp
  * Use shared library for core engine to ensure all symbols
  are exported to plugins
  * Add framework for scripting capture operations
  * Workaround camera busy problems with Nikon cameras
  * Add a plugin for repeated capture sequences
  * Replace progress bar with spinner icon
- Changes from version 0.6.1
  * Require GTK &gt;= 3.4
  * Fix check for GIO package in configure
  * Add missing icons to Makefile
  * Follow freedesktop thumbnail standard storage location
  * Refactor capture code to facilitate plugin script
    automation
  * Fix bug causing plugin to be displayed more than once
  * Make histogram height larger
  * Strip trailing '2' from widget labels to be more friendly
  * Completely rewrite control panel display to show a small,
    user configurable subset from all the camera controls.
  * Remember custom list of camera controls per camera model
  * Hide compiler warnings from new glib atomic opertaions
  * Update to newer gnulib compiler warnings code
  * Remove broken double buffering code that's no required
    when using GTK3
  * Remove use of deprecated GtkMisc APis
  * Allow camera picker list to show multiple lines
  * Remove crufty broken code from session browser that was
  breaking with new GTK versions
  * Disable libraw auto brightness since it totally overexposes
    many images, generally making things look worse
  * Fix memory leak handling camera events
  * Add keywords to desktop &amp; appdata files
- Add gtk-doc and itstool dependencies
- Add yelp-tools require but disable it for now as the check
  now requires internet connection
- Disable check; requires network connection
- Split out photobox and shooter plugins into their own packages
- Recommend entangle-lang package
- Update entangle-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Update to 0.7.1:
  * Fix linking problem with strict linkers
  * Misc spelling fixes to online help docs
  * Replace use of GSimpleAsyncResult with GTask
  * Specify versions when importing from python plugins
  * Remove use of deprecated GTK APIs
  * Render image stats overlay partially transparent
  * Fix error reporting when saving settings
  * Flush events after capture to avoid accidentally restarting preview
  * Make Nikon fine focus stepping finer
  * Ensure images are sorted by last modified date
  * Switch from 128 px to 256 px thumbnail sizes to benefit larger high dpi screens
  * Rewrite film strip browser to dynamically resize icons to fit available space
  * Draw symbolic icons in film strip if image is not yet loaded
  * Refresh translations from Zanata
- Depend on lcms2 not lcms1</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1548158400">- update to version 2.0
  * Require gobject introspection &gt;= 1.54
  * Require GTK3 &gt;= 3.22
  * Fix dependency on libraw
  * Fix variable name in photobox plugin
  * Document some missing keyboard shortcuts
  * Fix upper bound in histogram to display clipped pixel
  * Refresh translations
  * Option to highlight over exposed pixels in red
  * Disable noisy compiler warning
  * Remove use of deprecated application menu concept
  * Fix image redraw when changing some settings
  * Update mailing list address in appdaat
  * Add more fields to appdata content
  * Fix reference counting during window close
  * Use correct API for destroying top level windows
  * Fix unmounting of cameras with newer gvfs URI naming scheme
  * Avoid out of bounds read of property values
  * Fix many memory leaks
  * Workaround for combo boxes not displaying on Wayland
  * Fix race condition in building enums
  * Fix setting of gschema directory during startup
  * Set env to ensure plugins can find introspection typelib
- entangle-desktop.patch: dropped, included desktop file is ok</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 3.0:
  * Ensure picture directory is an absolute path
  * Add ability to flip image during preview
  * Fix warnings about string length
  * Convert appdata file to metainfo and add missing info
  * Another attempt to fix build deps on enum headers
  * Display remaining shot count &amp; ETA in repeat shooter
  plugin
  * Remove use of deprecated GObject macros
  * Remove use of deprecated GLib APIs
  * Ensure glib min version checks at build time
  * Convert to use GObject macros for declaring boilerplate
  * Bulk reformat code using clang-format rules
  * Force a default filename pattern if setting is invalid
  * Validate filename pattern when updating preferences
  * Rename desktop file and icon file to match application ID
  * Add ability to render text mesages over image
  * Add a countdown timer for photobox plugin capture
  * Disable context menu in image browser when photobox plugin
  is active
  * Run live view when counting down to capturein photobox
  plugin
  * Fix crash releasing popup windows
  * Add context menu option for opening popup image window
  * Drop drag support for opening popup image window
  * Display greeting when opening popup image window
  * Display greeting when entering photobox plugin</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1598529600">- fixed filelists after update to make it build.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1646136000">- fix-new-meson.patch: fix build with new meson</changelog>
</package>
<package pkgid="a76346b7693bcab8d9cc7ad4551425b92efd768bd6184b156a18c98c0ae3deb171167c3ee5ad2b8f23cb490e8424b6b35dfeeb916d6f111b7d10ff640173764a" name="entangle-lang" arch="noarch">
  <version epoch="0" ver="3.0" rel="bp160.1.16"/>
  <changelog author="meissner@suse.com" date="1360843200">- entangle-libgphoto25.patch: libgphoto2 2.5 port.</changelog>
  <changelog author="meissner@suse.com" date="1377777600">- Release 0.5.3 - "Photon" - 2013-08-28
  * Move file name of image thumbnails to tooltip popup
  * Add --disable-schemas-compile configure arg to
    disable schema compilation
  * Remove "Encoding" key from desktop file
  * Fix massive memory leak in pixbuf loading
  * Fix thread safety in camera control updates which caused
    hangs in GTK
  * Fix updating of control readonly state when camera modes
    change
- Release 0.5.2 - "Graviton" - 2013-08-17
  * Split histogram into RGB colour channels
  * Fix aperture / shutter speed calculations in status bar
  * Only import files with known image extensions
  * Use case insensitive file extension check to detect raw files
  * Set saner defaults for processing raw files to fix Canon
    raw display
  * Set preferences before loading session to fix settings
    for initial image load
  * Apply orientation from EXIF images if image file has none
  * Remove left over debug prints
  * Add support for linear histogram display mode
  * Support 'h' key to toggle linear/log histogram mode
  * Ensure all events are emitted in main thread
  * Remove use of deprecated GDK thread APIs
  * Use GtkGrid instead of deprecated GtkTable
  * Ensure status bar is constant size when scaling image
  * Preserve scrollbar offsets when switching images
  * Make metadata extraction more robust wrt missing fields
  * Updated translations from transifex
- Release 0.5.1 - "W Boson" - 2012-03-12
  * Update for compatibility with libgphoto 2.5 API
    callbacks
  * Avoid warnings about deprecated glib2 mutex
    and condition variable APIs
  * Directly disable viewfinder mode using config APIs
  * Add support for triggering autofocus during preview
    with 'a' key
  * Add support for manual focus drive in/out using
    '.' and ',' keys
  * Refresh translations from transifex
  * Import user contributed Italian translation
  * Add missing translation markers on some strings
- Release 0.5.0 - "Z Boson" - 2012-12-16
  * Switch to using LibRaw for loading raw images
  * Allowing loading image preview from raw files
  * Fix deadlock unmounting camera at startup
  * Ensure camera is disconnected before exiting
  * Sort image list by name instead of date
  * Add support for rendering "onion skin" of image sequence
  * Fix updating of range control values
  * Fix filename generation for dual-format capture modes
  * Fix deletion of dual-format images when exiting preview
  * Refresh translations
- removed entangle-libgphoto25.patch: upstream
- updated entangle-desktop.patch</changelog>
  <changelog author="meissner@suse.com" date="1387368000">- Release 0.5.4 - "Up" - 2013-12-15
  * Ensure thumbnail directory exists when saving thumbnails
  * Fix memory leak generating thumbnails from raw images
  * Add an appdata XML file for GNOME software center
  * Create a dedicated camera actions menu
  * Fix include of gexiv2 header files
  * Fix image selection for onion skinning in preview mode
  * Display selected image when cancelling preview
  * Fix empty tooltips on capture/preview buttons
  * Fix scaling for preview image in onion skinning mode
  * Increase emphasis of top image in onion skinning mode
  * Improve granularity of manual focus and add extra
  '&lt;' and '&gt;' key accelerators for coarse focus
  * Fix leak of image exiting preview mode
  * Make progress toolbar button permanently visible</changelog>
  <changelog author="meissner@suse.com" date="1399118400">- Release 0.6.0 - "Down" - 2014-05-02
  * Add a demonstration plugin for setting up a captive photo box display mode
  * Switch to use Python3 for plugin engine instead of JavaScript
  * Use GTK dark theme
  * Require GNOME symbolic icon theme to be installed
  * Switch to require lcms2 instead of lcms
  * Move application icon into a standard directory mandated to work with the appdata tools
  * Make manual focus work with Canon EOS cameras
  * Disable flickering progress bar in preview mode with Canon EOS cameras
  * Remove use of deprecated GTK methods/classes/constants
  * Remove use of gexiv2 method which is not long exported
  * Remove use of deprecated libpeas methods
  * Add GTK-DOC transfer annotations / docs to all methods
  * Avoid loosing camera capabilities on disconnect
  * Fix off by one in histogram tables causing memory corruption
  * Mark appdata / desktop files for translation
  * Fix typos in README file
  * Fix inverted tests when checking if range widget changed
  * Avoid storm of expose events due to auto-drawer widget
  * Avoid never ending circular update of controls causing errors in some camera modes
  * Add workaround for crazy D5100 camera serial number
  * Add customizable highlight/background for images
  * Avoid reference leak of windows preventing proper cleanup
  * Remove camera manual/about/driver help windows since it did not contain any info useful to users
  * Filter list of cameras in connect dialog to only those which support capture/preview
  * Don't auto connect to cameras which don't support capture or preview
  * Ensure parent window is set on dialogs to prevent them falling behind main window
  * Fix crash with latest GTK due to incorrect overriding of GtkApplication startup method
  * Update to cope with changed GExiv API version
  * Refreshed translations from transifex</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.7.0
  * Require GLib &gt;= 2.36
  * Import new logo design
  * Switch to using zanata.org for translations
  * Set default window icon
  * Introduce an initial help manual via yelp
  * Use shared library for core engine to ensure all symbols
  are exported to plugins
  * Add framework for scripting capture operations
  * Workaround camera busy problems with Nikon cameras
  * Add a plugin for repeated capture sequences
  * Replace progress bar with spinner icon
- Changes from version 0.6.1
  * Require GTK &gt;= 3.4
  * Fix check for GIO package in configure
  * Add missing icons to Makefile
  * Follow freedesktop thumbnail standard storage location
  * Refactor capture code to facilitate plugin script
    automation
  * Fix bug causing plugin to be displayed more than once
  * Make histogram height larger
  * Strip trailing '2' from widget labels to be more friendly
  * Completely rewrite control panel display to show a small,
    user configurable subset from all the camera controls.
  * Remember custom list of camera controls per camera model
  * Hide compiler warnings from new glib atomic opertaions
  * Update to newer gnulib compiler warnings code
  * Remove broken double buffering code that's no required
    when using GTK3
  * Remove use of deprecated GtkMisc APis
  * Allow camera picker list to show multiple lines
  * Remove crufty broken code from session browser that was
  breaking with new GTK versions
  * Disable libraw auto brightness since it totally overexposes
    many images, generally making things look worse
  * Fix memory leak handling camera events
  * Add keywords to desktop &amp; appdata files
- Add gtk-doc and itstool dependencies
- Add yelp-tools require but disable it for now as the check
  now requires internet connection
- Disable check; requires network connection
- Split out photobox and shooter plugins into their own packages
- Recommend entangle-lang package
- Update entangle-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Update to 0.7.1:
  * Fix linking problem with strict linkers
  * Misc spelling fixes to online help docs
  * Replace use of GSimpleAsyncResult with GTask
  * Specify versions when importing from python plugins
  * Remove use of deprecated GTK APIs
  * Render image stats overlay partially transparent
  * Fix error reporting when saving settings
  * Flush events after capture to avoid accidentally restarting preview
  * Make Nikon fine focus stepping finer
  * Ensure images are sorted by last modified date
  * Switch from 128 px to 256 px thumbnail sizes to benefit larger high dpi screens
  * Rewrite film strip browser to dynamically resize icons to fit available space
  * Draw symbolic icons in film strip if image is not yet loaded
  * Refresh translations from Zanata
- Depend on lcms2 not lcms1</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1548158400">- update to version 2.0
  * Require gobject introspection &gt;= 1.54
  * Require GTK3 &gt;= 3.22
  * Fix dependency on libraw
  * Fix variable name in photobox plugin
  * Document some missing keyboard shortcuts
  * Fix upper bound in histogram to display clipped pixel
  * Refresh translations
  * Option to highlight over exposed pixels in red
  * Disable noisy compiler warning
  * Remove use of deprecated application menu concept
  * Fix image redraw when changing some settings
  * Update mailing list address in appdaat
  * Add more fields to appdata content
  * Fix reference counting during window close
  * Use correct API for destroying top level windows
  * Fix unmounting of cameras with newer gvfs URI naming scheme
  * Avoid out of bounds read of property values
  * Fix many memory leaks
  * Workaround for combo boxes not displaying on Wayland
  * Fix race condition in building enums
  * Fix setting of gschema directory during startup
  * Set env to ensure plugins can find introspection typelib
- entangle-desktop.patch: dropped, included desktop file is ok</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 3.0:
  * Ensure picture directory is an absolute path
  * Add ability to flip image during preview
  * Fix warnings about string length
  * Convert appdata file to metainfo and add missing info
  * Another attempt to fix build deps on enum headers
  * Display remaining shot count &amp; ETA in repeat shooter
  plugin
  * Remove use of deprecated GObject macros
  * Remove use of deprecated GLib APIs
  * Ensure glib min version checks at build time
  * Convert to use GObject macros for declaring boilerplate
  * Bulk reformat code using clang-format rules
  * Force a default filename pattern if setting is invalid
  * Validate filename pattern when updating preferences
  * Rename desktop file and icon file to match application ID
  * Add ability to render text mesages over image
  * Add a countdown timer for photobox plugin capture
  * Disable context menu in image browser when photobox plugin
  is active
  * Run live view when counting down to capturein photobox
  plugin
  * Fix crash releasing popup windows
  * Add context menu option for opening popup image window
  * Drop drag support for opening popup image window
  * Display greeting when opening popup image window
  * Display greeting when entering photobox plugin</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1598529600">- fixed filelists after update to make it build.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1646136000">- fix-new-meson.patch: fix build with new meson</changelog>
</package>
<package pkgid="07092a79e6f55985ddc1bc3a09d358b5ca08a613836411588e222dbf97307a14a4b5c7579b0fb2f12d59a25d792ed92327c08c99095db1b3945cc6fb351144a5" name="entangle-plugin-eclipse" arch="x86_64">
  <version epoch="0" ver="3.0" rel="bp160.1.16"/>
  <changelog author="meissner@suse.com" date="1360843200">- entangle-libgphoto25.patch: libgphoto2 2.5 port.</changelog>
  <changelog author="meissner@suse.com" date="1377777600">- Release 0.5.3 - "Photon" - 2013-08-28
  * Move file name of image thumbnails to tooltip popup
  * Add --disable-schemas-compile configure arg to
    disable schema compilation
  * Remove "Encoding" key from desktop file
  * Fix massive memory leak in pixbuf loading
  * Fix thread safety in camera control updates which caused
    hangs in GTK
  * Fix updating of control readonly state when camera modes
    change
- Release 0.5.2 - "Graviton" - 2013-08-17
  * Split histogram into RGB colour channels
  * Fix aperture / shutter speed calculations in status bar
  * Only import files with known image extensions
  * Use case insensitive file extension check to detect raw files
  * Set saner defaults for processing raw files to fix Canon
    raw display
  * Set preferences before loading session to fix settings
    for initial image load
  * Apply orientation from EXIF images if image file has none
  * Remove left over debug prints
  * Add support for linear histogram display mode
  * Support 'h' key to toggle linear/log histogram mode
  * Ensure all events are emitted in main thread
  * Remove use of deprecated GDK thread APIs
  * Use GtkGrid instead of deprecated GtkTable
  * Ensure status bar is constant size when scaling image
  * Preserve scrollbar offsets when switching images
  * Make metadata extraction more robust wrt missing fields
  * Updated translations from transifex
- Release 0.5.1 - "W Boson" - 2012-03-12
  * Update for compatibility with libgphoto 2.5 API
    callbacks
  * Avoid warnings about deprecated glib2 mutex
    and condition variable APIs
  * Directly disable viewfinder mode using config APIs
  * Add support for triggering autofocus during preview
    with 'a' key
  * Add support for manual focus drive in/out using
    '.' and ',' keys
  * Refresh translations from transifex
  * Import user contributed Italian translation
  * Add missing translation markers on some strings
- Release 0.5.0 - "Z Boson" - 2012-12-16
  * Switch to using LibRaw for loading raw images
  * Allowing loading image preview from raw files
  * Fix deadlock unmounting camera at startup
  * Ensure camera is disconnected before exiting
  * Sort image list by name instead of date
  * Add support for rendering "onion skin" of image sequence
  * Fix updating of range control values
  * Fix filename generation for dual-format capture modes
  * Fix deletion of dual-format images when exiting preview
  * Refresh translations
- removed entangle-libgphoto25.patch: upstream
- updated entangle-desktop.patch</changelog>
  <changelog author="meissner@suse.com" date="1387368000">- Release 0.5.4 - "Up" - 2013-12-15
  * Ensure thumbnail directory exists when saving thumbnails
  * Fix memory leak generating thumbnails from raw images
  * Add an appdata XML file for GNOME software center
  * Create a dedicated camera actions menu
  * Fix include of gexiv2 header files
  * Fix image selection for onion skinning in preview mode
  * Display selected image when cancelling preview
  * Fix empty tooltips on capture/preview buttons
  * Fix scaling for preview image in onion skinning mode
  * Increase emphasis of top image in onion skinning mode
  * Improve granularity of manual focus and add extra
  '&lt;' and '&gt;' key accelerators for coarse focus
  * Fix leak of image exiting preview mode
  * Make progress toolbar button permanently visible</changelog>
  <changelog author="meissner@suse.com" date="1399118400">- Release 0.6.0 - "Down" - 2014-05-02
  * Add a demonstration plugin for setting up a captive photo box display mode
  * Switch to use Python3 for plugin engine instead of JavaScript
  * Use GTK dark theme
  * Require GNOME symbolic icon theme to be installed
  * Switch to require lcms2 instead of lcms
  * Move application icon into a standard directory mandated to work with the appdata tools
  * Make manual focus work with Canon EOS cameras
  * Disable flickering progress bar in preview mode with Canon EOS cameras
  * Remove use of deprecated GTK methods/classes/constants
  * Remove use of gexiv2 method which is not long exported
  * Remove use of deprecated libpeas methods
  * Add GTK-DOC transfer annotations / docs to all methods
  * Avoid loosing camera capabilities on disconnect
  * Fix off by one in histogram tables causing memory corruption
  * Mark appdata / desktop files for translation
  * Fix typos in README file
  * Fix inverted tests when checking if range widget changed
  * Avoid storm of expose events due to auto-drawer widget
  * Avoid never ending circular update of controls causing errors in some camera modes
  * Add workaround for crazy D5100 camera serial number
  * Add customizable highlight/background for images
  * Avoid reference leak of windows preventing proper cleanup
  * Remove camera manual/about/driver help windows since it did not contain any info useful to users
  * Filter list of cameras in connect dialog to only those which support capture/preview
  * Don't auto connect to cameras which don't support capture or preview
  * Ensure parent window is set on dialogs to prevent them falling behind main window
  * Fix crash with latest GTK due to incorrect overriding of GtkApplication startup method
  * Update to cope with changed GExiv API version
  * Refreshed translations from transifex</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.7.0
  * Require GLib &gt;= 2.36
  * Import new logo design
  * Switch to using zanata.org for translations
  * Set default window icon
  * Introduce an initial help manual via yelp
  * Use shared library for core engine to ensure all symbols
  are exported to plugins
  * Add framework for scripting capture operations
  * Workaround camera busy problems with Nikon cameras
  * Add a plugin for repeated capture sequences
  * Replace progress bar with spinner icon
- Changes from version 0.6.1
  * Require GTK &gt;= 3.4
  * Fix check for GIO package in configure
  * Add missing icons to Makefile
  * Follow freedesktop thumbnail standard storage location
  * Refactor capture code to facilitate plugin script
    automation
  * Fix bug causing plugin to be displayed more than once
  * Make histogram height larger
  * Strip trailing '2' from widget labels to be more friendly
  * Completely rewrite control panel display to show a small,
    user configurable subset from all the camera controls.
  * Remember custom list of camera controls per camera model
  * Hide compiler warnings from new glib atomic opertaions
  * Update to newer gnulib compiler warnings code
  * Remove broken double buffering code that's no required
    when using GTK3
  * Remove use of deprecated GtkMisc APis
  * Allow camera picker list to show multiple lines
  * Remove crufty broken code from session browser that was
  breaking with new GTK versions
  * Disable libraw auto brightness since it totally overexposes
    many images, generally making things look worse
  * Fix memory leak handling camera events
  * Add keywords to desktop &amp; appdata files
- Add gtk-doc and itstool dependencies
- Add yelp-tools require but disable it for now as the check
  now requires internet connection
- Disable check; requires network connection
- Split out photobox and shooter plugins into their own packages
- Recommend entangle-lang package
- Update entangle-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Update to 0.7.1:
  * Fix linking problem with strict linkers
  * Misc spelling fixes to online help docs
  * Replace use of GSimpleAsyncResult with GTask
  * Specify versions when importing from python plugins
  * Remove use of deprecated GTK APIs
  * Render image stats overlay partially transparent
  * Fix error reporting when saving settings
  * Flush events after capture to avoid accidentally restarting preview
  * Make Nikon fine focus stepping finer
  * Ensure images are sorted by last modified date
  * Switch from 128 px to 256 px thumbnail sizes to benefit larger high dpi screens
  * Rewrite film strip browser to dynamically resize icons to fit available space
  * Draw symbolic icons in film strip if image is not yet loaded
  * Refresh translations from Zanata
- Depend on lcms2 not lcms1</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1548158400">- update to version 2.0
  * Require gobject introspection &gt;= 1.54
  * Require GTK3 &gt;= 3.22
  * Fix dependency on libraw
  * Fix variable name in photobox plugin
  * Document some missing keyboard shortcuts
  * Fix upper bound in histogram to display clipped pixel
  * Refresh translations
  * Option to highlight over exposed pixels in red
  * Disable noisy compiler warning
  * Remove use of deprecated application menu concept
  * Fix image redraw when changing some settings
  * Update mailing list address in appdaat
  * Add more fields to appdata content
  * Fix reference counting during window close
  * Use correct API for destroying top level windows
  * Fix unmounting of cameras with newer gvfs URI naming scheme
  * Avoid out of bounds read of property values
  * Fix many memory leaks
  * Workaround for combo boxes not displaying on Wayland
  * Fix race condition in building enums
  * Fix setting of gschema directory during startup
  * Set env to ensure plugins can find introspection typelib
- entangle-desktop.patch: dropped, included desktop file is ok</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 3.0:
  * Ensure picture directory is an absolute path
  * Add ability to flip image during preview
  * Fix warnings about string length
  * Convert appdata file to metainfo and add missing info
  * Another attempt to fix build deps on enum headers
  * Display remaining shot count &amp; ETA in repeat shooter
  plugin
  * Remove use of deprecated GObject macros
  * Remove use of deprecated GLib APIs
  * Ensure glib min version checks at build time
  * Convert to use GObject macros for declaring boilerplate
  * Bulk reformat code using clang-format rules
  * Force a default filename pattern if setting is invalid
  * Validate filename pattern when updating preferences
  * Rename desktop file and icon file to match application ID
  * Add ability to render text mesages over image
  * Add a countdown timer for photobox plugin capture
  * Disable context menu in image browser when photobox plugin
  is active
  * Run live view when counting down to capturein photobox
  plugin
  * Fix crash releasing popup windows
  * Add context menu option for opening popup image window
  * Drop drag support for opening popup image window
  * Display greeting when opening popup image window
  * Display greeting when entering photobox plugin</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1598529600">- fixed filelists after update to make it build.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1646136000">- fix-new-meson.patch: fix build with new meson</changelog>
</package>
<package pkgid="1b6deee4748020bc16dc996b67a97886b321f7b60a3677906f5fa3c2d6788209ad3b5fa62b9db191bede254698e7981d1c75c0dcaddb4cfc3dccf75c0bed3809" name="entangle-plugin-photobox" arch="x86_64">
  <version epoch="0" ver="3.0" rel="bp160.1.16"/>
  <changelog author="meissner@suse.com" date="1360843200">- entangle-libgphoto25.patch: libgphoto2 2.5 port.</changelog>
  <changelog author="meissner@suse.com" date="1377777600">- Release 0.5.3 - "Photon" - 2013-08-28
  * Move file name of image thumbnails to tooltip popup
  * Add --disable-schemas-compile configure arg to
    disable schema compilation
  * Remove "Encoding" key from desktop file
  * Fix massive memory leak in pixbuf loading
  * Fix thread safety in camera control updates which caused
    hangs in GTK
  * Fix updating of control readonly state when camera modes
    change
- Release 0.5.2 - "Graviton" - 2013-08-17
  * Split histogram into RGB colour channels
  * Fix aperture / shutter speed calculations in status bar
  * Only import files with known image extensions
  * Use case insensitive file extension check to detect raw files
  * Set saner defaults for processing raw files to fix Canon
    raw display
  * Set preferences before loading session to fix settings
    for initial image load
  * Apply orientation from EXIF images if image file has none
  * Remove left over debug prints
  * Add support for linear histogram display mode
  * Support 'h' key to toggle linear/log histogram mode
  * Ensure all events are emitted in main thread
  * Remove use of deprecated GDK thread APIs
  * Use GtkGrid instead of deprecated GtkTable
  * Ensure status bar is constant size when scaling image
  * Preserve scrollbar offsets when switching images
  * Make metadata extraction more robust wrt missing fields
  * Updated translations from transifex
- Release 0.5.1 - "W Boson" - 2012-03-12
  * Update for compatibility with libgphoto 2.5 API
    callbacks
  * Avoid warnings about deprecated glib2 mutex
    and condition variable APIs
  * Directly disable viewfinder mode using config APIs
  * Add support for triggering autofocus during preview
    with 'a' key
  * Add support for manual focus drive in/out using
    '.' and ',' keys
  * Refresh translations from transifex
  * Import user contributed Italian translation
  * Add missing translation markers on some strings
- Release 0.5.0 - "Z Boson" - 2012-12-16
  * Switch to using LibRaw for loading raw images
  * Allowing loading image preview from raw files
  * Fix deadlock unmounting camera at startup
  * Ensure camera is disconnected before exiting
  * Sort image list by name instead of date
  * Add support for rendering "onion skin" of image sequence
  * Fix updating of range control values
  * Fix filename generation for dual-format capture modes
  * Fix deletion of dual-format images when exiting preview
  * Refresh translations
- removed entangle-libgphoto25.patch: upstream
- updated entangle-desktop.patch</changelog>
  <changelog author="meissner@suse.com" date="1387368000">- Release 0.5.4 - "Up" - 2013-12-15
  * Ensure thumbnail directory exists when saving thumbnails
  * Fix memory leak generating thumbnails from raw images
  * Add an appdata XML file for GNOME software center
  * Create a dedicated camera actions menu
  * Fix include of gexiv2 header files
  * Fix image selection for onion skinning in preview mode
  * Display selected image when cancelling preview
  * Fix empty tooltips on capture/preview buttons
  * Fix scaling for preview image in onion skinning mode
  * Increase emphasis of top image in onion skinning mode
  * Improve granularity of manual focus and add extra
  '&lt;' and '&gt;' key accelerators for coarse focus
  * Fix leak of image exiting preview mode
  * Make progress toolbar button permanently visible</changelog>
  <changelog author="meissner@suse.com" date="1399118400">- Release 0.6.0 - "Down" - 2014-05-02
  * Add a demonstration plugin for setting up a captive photo box display mode
  * Switch to use Python3 for plugin engine instead of JavaScript
  * Use GTK dark theme
  * Require GNOME symbolic icon theme to be installed
  * Switch to require lcms2 instead of lcms
  * Move application icon into a standard directory mandated to work with the appdata tools
  * Make manual focus work with Canon EOS cameras
  * Disable flickering progress bar in preview mode with Canon EOS cameras
  * Remove use of deprecated GTK methods/classes/constants
  * Remove use of gexiv2 method which is not long exported
  * Remove use of deprecated libpeas methods
  * Add GTK-DOC transfer annotations / docs to all methods
  * Avoid loosing camera capabilities on disconnect
  * Fix off by one in histogram tables causing memory corruption
  * Mark appdata / desktop files for translation
  * Fix typos in README file
  * Fix inverted tests when checking if range widget changed
  * Avoid storm of expose events due to auto-drawer widget
  * Avoid never ending circular update of controls causing errors in some camera modes
  * Add workaround for crazy D5100 camera serial number
  * Add customizable highlight/background for images
  * Avoid reference leak of windows preventing proper cleanup
  * Remove camera manual/about/driver help windows since it did not contain any info useful to users
  * Filter list of cameras in connect dialog to only those which support capture/preview
  * Don't auto connect to cameras which don't support capture or preview
  * Ensure parent window is set on dialogs to prevent them falling behind main window
  * Fix crash with latest GTK due to incorrect overriding of GtkApplication startup method
  * Update to cope with changed GExiv API version
  * Refreshed translations from transifex</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.7.0
  * Require GLib &gt;= 2.36
  * Import new logo design
  * Switch to using zanata.org for translations
  * Set default window icon
  * Introduce an initial help manual via yelp
  * Use shared library for core engine to ensure all symbols
  are exported to plugins
  * Add framework for scripting capture operations
  * Workaround camera busy problems with Nikon cameras
  * Add a plugin for repeated capture sequences
  * Replace progress bar with spinner icon
- Changes from version 0.6.1
  * Require GTK &gt;= 3.4
  * Fix check for GIO package in configure
  * Add missing icons to Makefile
  * Follow freedesktop thumbnail standard storage location
  * Refactor capture code to facilitate plugin script
    automation
  * Fix bug causing plugin to be displayed more than once
  * Make histogram height larger
  * Strip trailing '2' from widget labels to be more friendly
  * Completely rewrite control panel display to show a small,
    user configurable subset from all the camera controls.
  * Remember custom list of camera controls per camera model
  * Hide compiler warnings from new glib atomic opertaions
  * Update to newer gnulib compiler warnings code
  * Remove broken double buffering code that's no required
    when using GTK3
  * Remove use of deprecated GtkMisc APis
  * Allow camera picker list to show multiple lines
  * Remove crufty broken code from session browser that was
  breaking with new GTK versions
  * Disable libraw auto brightness since it totally overexposes
    many images, generally making things look worse
  * Fix memory leak handling camera events
  * Add keywords to desktop &amp; appdata files
- Add gtk-doc and itstool dependencies
- Add yelp-tools require but disable it for now as the check
  now requires internet connection
- Disable check; requires network connection
- Split out photobox and shooter plugins into their own packages
- Recommend entangle-lang package
- Update entangle-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Update to 0.7.1:
  * Fix linking problem with strict linkers
  * Misc spelling fixes to online help docs
  * Replace use of GSimpleAsyncResult with GTask
  * Specify versions when importing from python plugins
  * Remove use of deprecated GTK APIs
  * Render image stats overlay partially transparent
  * Fix error reporting when saving settings
  * Flush events after capture to avoid accidentally restarting preview
  * Make Nikon fine focus stepping finer
  * Ensure images are sorted by last modified date
  * Switch from 128 px to 256 px thumbnail sizes to benefit larger high dpi screens
  * Rewrite film strip browser to dynamically resize icons to fit available space
  * Draw symbolic icons in film strip if image is not yet loaded
  * Refresh translations from Zanata
- Depend on lcms2 not lcms1</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1548158400">- update to version 2.0
  * Require gobject introspection &gt;= 1.54
  * Require GTK3 &gt;= 3.22
  * Fix dependency on libraw
  * Fix variable name in photobox plugin
  * Document some missing keyboard shortcuts
  * Fix upper bound in histogram to display clipped pixel
  * Refresh translations
  * Option to highlight over exposed pixels in red
  * Disable noisy compiler warning
  * Remove use of deprecated application menu concept
  * Fix image redraw when changing some settings
  * Update mailing list address in appdaat
  * Add more fields to appdata content
  * Fix reference counting during window close
  * Use correct API for destroying top level windows
  * Fix unmounting of cameras with newer gvfs URI naming scheme
  * Avoid out of bounds read of property values
  * Fix many memory leaks
  * Workaround for combo boxes not displaying on Wayland
  * Fix race condition in building enums
  * Fix setting of gschema directory during startup
  * Set env to ensure plugins can find introspection typelib
- entangle-desktop.patch: dropped, included desktop file is ok</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 3.0:
  * Ensure picture directory is an absolute path
  * Add ability to flip image during preview
  * Fix warnings about string length
  * Convert appdata file to metainfo and add missing info
  * Another attempt to fix build deps on enum headers
  * Display remaining shot count &amp; ETA in repeat shooter
  plugin
  * Remove use of deprecated GObject macros
  * Remove use of deprecated GLib APIs
  * Ensure glib min version checks at build time
  * Convert to use GObject macros for declaring boilerplate
  * Bulk reformat code using clang-format rules
  * Force a default filename pattern if setting is invalid
  * Validate filename pattern when updating preferences
  * Rename desktop file and icon file to match application ID
  * Add ability to render text mesages over image
  * Add a countdown timer for photobox plugin capture
  * Disable context menu in image browser when photobox plugin
  is active
  * Run live view when counting down to capturein photobox
  plugin
  * Fix crash releasing popup windows
  * Add context menu option for opening popup image window
  * Drop drag support for opening popup image window
  * Display greeting when opening popup image window
  * Display greeting when entering photobox plugin</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1598529600">- fixed filelists after update to make it build.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1646136000">- fix-new-meson.patch: fix build with new meson</changelog>
</package>
<package pkgid="a73214f804effda785323fba9b0d0a265e13ae99324289e047c033c5cb731634178180734af037e9db21ae01598a17d2bc0a3357c2b13493a9b0c9b0eff3bea9" name="entangle-plugin-shooter" arch="x86_64">
  <version epoch="0" ver="3.0" rel="bp160.1.16"/>
  <changelog author="meissner@suse.com" date="1360843200">- entangle-libgphoto25.patch: libgphoto2 2.5 port.</changelog>
  <changelog author="meissner@suse.com" date="1377777600">- Release 0.5.3 - "Photon" - 2013-08-28
  * Move file name of image thumbnails to tooltip popup
  * Add --disable-schemas-compile configure arg to
    disable schema compilation
  * Remove "Encoding" key from desktop file
  * Fix massive memory leak in pixbuf loading
  * Fix thread safety in camera control updates which caused
    hangs in GTK
  * Fix updating of control readonly state when camera modes
    change
- Release 0.5.2 - "Graviton" - 2013-08-17
  * Split histogram into RGB colour channels
  * Fix aperture / shutter speed calculations in status bar
  * Only import files with known image extensions
  * Use case insensitive file extension check to detect raw files
  * Set saner defaults for processing raw files to fix Canon
    raw display
  * Set preferences before loading session to fix settings
    for initial image load
  * Apply orientation from EXIF images if image file has none
  * Remove left over debug prints
  * Add support for linear histogram display mode
  * Support 'h' key to toggle linear/log histogram mode
  * Ensure all events are emitted in main thread
  * Remove use of deprecated GDK thread APIs
  * Use GtkGrid instead of deprecated GtkTable
  * Ensure status bar is constant size when scaling image
  * Preserve scrollbar offsets when switching images
  * Make metadata extraction more robust wrt missing fields
  * Updated translations from transifex
- Release 0.5.1 - "W Boson" - 2012-03-12
  * Update for compatibility with libgphoto 2.5 API
    callbacks
  * Avoid warnings about deprecated glib2 mutex
    and condition variable APIs
  * Directly disable viewfinder mode using config APIs
  * Add support for triggering autofocus during preview
    with 'a' key
  * Add support for manual focus drive in/out using
    '.' and ',' keys
  * Refresh translations from transifex
  * Import user contributed Italian translation
  * Add missing translation markers on some strings
- Release 0.5.0 - "Z Boson" - 2012-12-16
  * Switch to using LibRaw for loading raw images
  * Allowing loading image preview from raw files
  * Fix deadlock unmounting camera at startup
  * Ensure camera is disconnected before exiting
  * Sort image list by name instead of date
  * Add support for rendering "onion skin" of image sequence
  * Fix updating of range control values
  * Fix filename generation for dual-format capture modes
  * Fix deletion of dual-format images when exiting preview
  * Refresh translations
- removed entangle-libgphoto25.patch: upstream
- updated entangle-desktop.patch</changelog>
  <changelog author="meissner@suse.com" date="1387368000">- Release 0.5.4 - "Up" - 2013-12-15
  * Ensure thumbnail directory exists when saving thumbnails
  * Fix memory leak generating thumbnails from raw images
  * Add an appdata XML file for GNOME software center
  * Create a dedicated camera actions menu
  * Fix include of gexiv2 header files
  * Fix image selection for onion skinning in preview mode
  * Display selected image when cancelling preview
  * Fix empty tooltips on capture/preview buttons
  * Fix scaling for preview image in onion skinning mode
  * Increase emphasis of top image in onion skinning mode
  * Improve granularity of manual focus and add extra
  '&lt;' and '&gt;' key accelerators for coarse focus
  * Fix leak of image exiting preview mode
  * Make progress toolbar button permanently visible</changelog>
  <changelog author="meissner@suse.com" date="1399118400">- Release 0.6.0 - "Down" - 2014-05-02
  * Add a demonstration plugin for setting up a captive photo box display mode
  * Switch to use Python3 for plugin engine instead of JavaScript
  * Use GTK dark theme
  * Require GNOME symbolic icon theme to be installed
  * Switch to require lcms2 instead of lcms
  * Move application icon into a standard directory mandated to work with the appdata tools
  * Make manual focus work with Canon EOS cameras
  * Disable flickering progress bar in preview mode with Canon EOS cameras
  * Remove use of deprecated GTK methods/classes/constants
  * Remove use of gexiv2 method which is not long exported
  * Remove use of deprecated libpeas methods
  * Add GTK-DOC transfer annotations / docs to all methods
  * Avoid loosing camera capabilities on disconnect
  * Fix off by one in histogram tables causing memory corruption
  * Mark appdata / desktop files for translation
  * Fix typos in README file
  * Fix inverted tests when checking if range widget changed
  * Avoid storm of expose events due to auto-drawer widget
  * Avoid never ending circular update of controls causing errors in some camera modes
  * Add workaround for crazy D5100 camera serial number
  * Add customizable highlight/background for images
  * Avoid reference leak of windows preventing proper cleanup
  * Remove camera manual/about/driver help windows since it did not contain any info useful to users
  * Filter list of cameras in connect dialog to only those which support capture/preview
  * Don't auto connect to cameras which don't support capture or preview
  * Ensure parent window is set on dialogs to prevent them falling behind main window
  * Fix crash with latest GTK due to incorrect overriding of GtkApplication startup method
  * Update to cope with changed GExiv API version
  * Refreshed translations from transifex</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.7.0
  * Require GLib &gt;= 2.36
  * Import new logo design
  * Switch to using zanata.org for translations
  * Set default window icon
  * Introduce an initial help manual via yelp
  * Use shared library for core engine to ensure all symbols
  are exported to plugins
  * Add framework for scripting capture operations
  * Workaround camera busy problems with Nikon cameras
  * Add a plugin for repeated capture sequences
  * Replace progress bar with spinner icon
- Changes from version 0.6.1
  * Require GTK &gt;= 3.4
  * Fix check for GIO package in configure
  * Add missing icons to Makefile
  * Follow freedesktop thumbnail standard storage location
  * Refactor capture code to facilitate plugin script
    automation
  * Fix bug causing plugin to be displayed more than once
  * Make histogram height larger
  * Strip trailing '2' from widget labels to be more friendly
  * Completely rewrite control panel display to show a small,
    user configurable subset from all the camera controls.
  * Remember custom list of camera controls per camera model
  * Hide compiler warnings from new glib atomic opertaions
  * Update to newer gnulib compiler warnings code
  * Remove broken double buffering code that's no required
    when using GTK3
  * Remove use of deprecated GtkMisc APis
  * Allow camera picker list to show multiple lines
  * Remove crufty broken code from session browser that was
  breaking with new GTK versions
  * Disable libraw auto brightness since it totally overexposes
    many images, generally making things look worse
  * Fix memory leak handling camera events
  * Add keywords to desktop &amp; appdata files
- Add gtk-doc and itstool dependencies
- Add yelp-tools require but disable it for now as the check
  now requires internet connection
- Disable check; requires network connection
- Split out photobox and shooter plugins into their own packages
- Recommend entangle-lang package
- Update entangle-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Update to 0.7.1:
  * Fix linking problem with strict linkers
  * Misc spelling fixes to online help docs
  * Replace use of GSimpleAsyncResult with GTask
  * Specify versions when importing from python plugins
  * Remove use of deprecated GTK APIs
  * Render image stats overlay partially transparent
  * Fix error reporting when saving settings
  * Flush events after capture to avoid accidentally restarting preview
  * Make Nikon fine focus stepping finer
  * Ensure images are sorted by last modified date
  * Switch from 128 px to 256 px thumbnail sizes to benefit larger high dpi screens
  * Rewrite film strip browser to dynamically resize icons to fit available space
  * Draw symbolic icons in film strip if image is not yet loaded
  * Refresh translations from Zanata
- Depend on lcms2 not lcms1</changelog>
  <changelog author="&#x410;&#x43D;&#x434;&#x440;&#x435;&#x439; &#x410;&#x43B;&#x44B;&#x43F;&#x43E;&#x432; &lt;and.november@opensuse.org&gt;" date="1548158400">- update to version 2.0
  * Require gobject introspection &gt;= 1.54
  * Require GTK3 &gt;= 3.22
  * Fix dependency on libraw
  * Fix variable name in photobox plugin
  * Document some missing keyboard shortcuts
  * Fix upper bound in histogram to display clipped pixel
  * Refresh translations
  * Option to highlight over exposed pixels in red
  * Disable noisy compiler warning
  * Remove use of deprecated application menu concept
  * Fix image redraw when changing some settings
  * Update mailing list address in appdaat
  * Add more fields to appdata content
  * Fix reference counting during window close
  * Use correct API for destroying top level windows
  * Fix unmounting of cameras with newer gvfs URI naming scheme
  * Avoid out of bounds read of property values
  * Fix many memory leaks
  * Workaround for combo boxes not displaying on Wayland
  * Fix race condition in building enums
  * Fix setting of gschema directory during startup
  * Set env to ensure plugins can find introspection typelib
- entangle-desktop.patch: dropped, included desktop file is ok</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597665600">- update to 3.0:
  * Ensure picture directory is an absolute path
  * Add ability to flip image during preview
  * Fix warnings about string length
  * Convert appdata file to metainfo and add missing info
  * Another attempt to fix build deps on enum headers
  * Display remaining shot count &amp; ETA in repeat shooter
  plugin
  * Remove use of deprecated GObject macros
  * Remove use of deprecated GLib APIs
  * Ensure glib min version checks at build time
  * Convert to use GObject macros for declaring boilerplate
  * Bulk reformat code using clang-format rules
  * Force a default filename pattern if setting is invalid
  * Validate filename pattern when updating preferences
  * Rename desktop file and icon file to match application ID
  * Add ability to render text mesages over image
  * Add a countdown timer for photobox plugin capture
  * Disable context menu in image browser when photobox plugin
  is active
  * Run live view when counting down to capturein photobox
  plugin
  * Fix crash releasing popup windows
  * Add context menu option for opening popup image window
  * Drop drag support for opening popup image window
  * Display greeting when opening popup image window
  * Display greeting when entering photobox plugin</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1598529600">- fixed filelists after update to make it build.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1646136000">- fix-new-meson.patch: fix build with new meson</changelog>
</package>
<package pkgid="6664ae524fc77611c6f83dc3ab06e3e94a489a27dbee6e4d346ec7bde041466b81919b2f94fc7e92625b39b83f8679ff54401b3448ba67890e6704e34b5c3f47" name="entr" arch="x86_64">
  <version epoch="0" ver="5.6" rel="bp160.1.12"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1593691200">- Update to version 4.6
  * Always call waitpid(2) to avoid dead processes
  * Duplicate STDIN file descriptor before closing; for the '-r'
    option</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611921600">- update to 4.7:
  * Use system file descriptor limits when max_user_watches is not accessible
  * Return the exit status of the child process when the '-z' option is used
  * Handle SIGHUP so child process are terminated when a terminal is closed
  * More accurately return shell exit code using '-s' option</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614513600">- Update to version 4.8
  * Set a maximum of 2^19 watches to guard against absurd file
    open limits on MacOS.
  * Use control sequences to clear the display and specify '-c'
    twice to erase the scrollback buffer.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1625400000">- Update to version 5.0
  * Eliminate memory management warnings on Linux.
  * EV_TRACE prints file mode and file name.
- Update to version 4.8
  * EV_TRACE also prints file/notify descriptor limit.
  * Set 2^16 watches if inotify limits cannot be read.
  * Raise an error and suggest '-n' if terminal attributes cannot
    be read.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1640692800">- Update to version 5.1
  * Detect files moved to or from directories on Linux.
  * Allow detection of directory entries beginning with '.' by
    specifying '-d' twice.
  * Only reset terminal settings in exit handler if settings were
    changed.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1651924800">- Update to version 5.2
  * Update copy of strlcpy(3) for Linux
  * Detect file deletion from directories on Linux
  * Print the signal that terminated a child when using '-s'
  * Return 128+signal that terminated a child when using '-z'
  * Ensure terminal settings are reset when '-z' is set</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1674302400">- Update to version 5.3
  * Symlink changes detected on Linux by setting
    'ENTR_INOTIFY_SYMLINK'.
  * Use /dev/null rather then closed pipe for stdin in -r mode.
  * Utilize {O,FD}_CLOEXEC flag for unintentional leaks of
    descriptors to executed utilities.
  * Remove C unit tests.
  * Only respond to attribute/inode changes on Linux.
- Drop tests. The new tests do not run within a chroot.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1694174400">- Update to version 5.4
  * 'make test' runs a quick smoketest, 'make check' runs regressions
  * Set IN_CLOEXEC only for inotify_init, kqueue uses similar setting by default
  * Unconditionally try to set soft file limit to 2^16 on MacOS
  * Use non-reentrant calls sparingly in signal handlers
  * configure: use TARGET_OS to override the output of uname(1)
- added only basic smoke test</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1700568000">- update to 5.5:
  * Report correct error if open(3) fails</changelog>
  <changelog author="Jan Ku&#x17E;&#xED;lek &lt;jan.kuzilek@suse.com&gt;" date="1727611200">- Update to version 5.6
  * Process exit status messages using background awk scripts
  * Use min(OPEN_MAX, rl.rlim_max) to set rlim_cur on MacOS
  * Detect and use native strlcpy(3)
  * Always build with GNU_SOURCE set on Linux</changelog>
</package>
<package pkgid="96d46c1e6fdcc27d67b95b38ad3ae9bc7fd20fdbf91e8dc4a027c9214153bb300bed30bb3628196c79b912dac9d00991590a9be97c3f7d56ed7f07af99502f7d" name="envsubst" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="160000.2.2"/>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="dcermak@suse.com" date="1712232000">- Add missing Requires: find to gettext-tools</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Require this-is-only-for-build-envs by the -mini packages: ensure
  those mini packages never find their way onto a system, even when
  published.</changelog>
  <changelog author="dcermak@suse.com" date="1715688000">- Split out envsubst into a separate package
  This allows us to pull in envsubst into containers without enlarging them
  substantially. Additionally, this binary is standalone and useful outside of
  the context of gettext.</changelog>
  <changelog author="schwab@suse.de" date="1716292800">- Require glibc-gconv-modules-extra by the gettext-tools packages</changelog>
  <changelog author="dcermak@suse.com" date="1717502400">- add optional -mini suffix to envsubst package</changelog>
  <changelog author="dimstar@opensuse.org" date="1717675200">- Fix envsubst-mini:
  + Conflicts with the 'full' envsubst
  + Require 'this-is-only-for-build-envs': ensure this does not
    find it's way out of OBS onto installations.</changelog>
  <changelog author="bwiedemann@suse.com" date="1721131200">- Use %autosetup</changelog>
  <changelog author="dcermak@suse.com" date="1726142400">- Move envsubst requires into main package, gettext.sh is not part of
  gettext-tools, but gettext-runtime (fixes boo#1227070)</changelog>
  <changelog author="sbrabec@suse.com" date="1740571200">- Fix crash while handling po files with malformed header and
  process them properly
  (0003-Fix-malformed-header-processing.patch, boo#1227316).</changelog>
</package>
<package pkgid="a556ec1b2385582ff94022f9f8c3095d07bb48f3b2e18808e955b29bbcd8ac43b934f00095049b437e4c34dd56624a6b714d01909740aae31ae74cbe6abe9015" name="envy24control" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="bp160.1.6"/>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="tiwai@suse.de" date="1576843200">- Fix hdspmixer build error with the latest alsa-lib:
  0001-hdspmixer-Use-__u32-and-__u64-for-RMS-array-types.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1582632000">- Update to 1.2.2 (do not support Python 2 and PyGtk).
- Remove
  0001-hdspmixer-Use-__u32-and-__u64-for-RMS-array-types.patch
  which was included upstream.</changelog>
  <changelog author="tiwai@suse.de" date="1603454400">- Drop unnecessary buildreq alsa-topology-devel (bsc#1178064)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1622462400">- Update to version 1.2.5 (jsc#PED-6566):
  * hdspmixer: add output loopback buttons
  * hdspmixer: enhance saving of presets</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1667995200">- Add tarball signature and keyring</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1706529600">- hwmixvolume: replace the unversioned python shebang to point to
  python3 (alsa-project/alsa-tools@fb04384 claims it is compatible
  to python3).
- Change hwmixvolume's dependency on pyalso to python3-alsa: ensure
  we get the main python interpreters' alsa module (matching the
  /usr/bin/python3 shebang) (boo#1219312).</changelog>
  <changelog author="Takashi Iwai &lt;tiwai@suse.com&gt;" date="1706875200">- Update to version 1.2.11:
  * hdajackretask: resolution limit for wide screen, pipewire support
  * hdspmixer: fix coredump
  For details, see:
    https://www.alsa-project.org/wiki/Changes_v1.2.10_v1.2.11#alsa-tools
- Fix build with gcc7:
  0001-hdajackretask-Fix-build-with-gcc7.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
</package>
<package pkgid="60b45760a80e31a5ac2308d66a1f01364f447f5ea2f64d7406cae47548873e77b1eac5f9120aa529bcc2bb530d06c4005d5c8f5349a7d41a7a31a4f7c0da721d" name="eog" arch="x86_64">
  <version epoch="0" ver="47.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1691323200">- Update to version 45.alpha:
  + Bug fixes and improvements: Rename Image Viewer -&gt; Eye of GNOME
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1693828800">- Update to version 45.rc:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1694952000">- Update to version 45.0:
  + help: Replace dead IRC links
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1697889600">- Update to version 45.1:
  + Fix statusbar image position incorrect.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704888000">- Update to version 45.2:
  + data: Update appdata.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406401">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710676800">- Update to version 45.3:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722859200">- Update to version 45.4:
  + Bug fixes and improvements:
  - Regenerate thumbnails on save.
  - Use "fast" content type as fallback if normal content type is
    unavailable.
  + docs: Replace dead links to developer-old.gnome.org.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1725883200">- Update to version 47.0:
  + Fix icon name.
  + Updated translations.
- Changes from version 47.beta:
  + desktop: Add jpeg-xl to MimeType list
  + EogWindow: Raise priority of image loading and transformation
    jobs
  + EogMetadataDetails: Support copying metadata values to the
    clipboard)</changelog>
</package>
<package pkgid="a0d71eeef61be225e0fe0a5f74cf1b6274e6be37b66afccf4d9350a481ed83d6ebe11e3a855e1982492ad2a2af2b4f4b8c9dbb34f4e256f09c15febcc4938503" name="eog-devel" arch="x86_64">
  <version epoch="0" ver="47.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1691323200">- Update to version 45.alpha:
  + Bug fixes and improvements: Rename Image Viewer -&gt; Eye of GNOME
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1693828800">- Update to version 45.rc:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1694952000">- Update to version 45.0:
  + help: Replace dead IRC links
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1697889600">- Update to version 45.1:
  + Fix statusbar image position incorrect.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704888000">- Update to version 45.2:
  + data: Update appdata.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406401">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710676800">- Update to version 45.3:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722859200">- Update to version 45.4:
  + Bug fixes and improvements:
  - Regenerate thumbnails on save.
  - Use "fast" content type as fallback if normal content type is
    unavailable.
  + docs: Replace dead links to developer-old.gnome.org.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1725883200">- Update to version 47.0:
  + Fix icon name.
  + Updated translations.
- Changes from version 47.beta:
  + desktop: Add jpeg-xl to MimeType list
  + EogWindow: Raise priority of image loading and transformation
    jobs
  + EogMetadataDetails: Support copying metadata values to the
    clipboard)</changelog>
</package>
<package pkgid="0ceabd852794410d77ef0b927c75d09be773c57a93ccb43f8c720b3d199f2b30b836f53119b156a4a29f34388cd0151153b8b659c42f3d75da707ada54f588cb" name="eog-lang" arch="noarch">
  <version epoch="0" ver="47.0" rel="bp160.1.15"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1691323200">- Update to version 45.alpha:
  + Bug fixes and improvements: Rename Image Viewer -&gt; Eye of GNOME
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1693828800">- Update to version 45.rc:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1694952000">- Update to version 45.0:
  + help: Replace dead IRC links
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1697889600">- Update to version 45.1:
  + Fix statusbar image position incorrect.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1704888000">- Update to version 45.2:
  + data: Update appdata.
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1705406401">- Convert to source service for easier updating.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1710676800">- Update to version 45.3:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1722859200">- Update to version 45.4:
  + Bug fixes and improvements:
  - Regenerate thumbnails on save.
  - Use "fast" content type as fallback if normal content type is
    unavailable.
  + docs: Replace dead links to developer-old.gnome.org.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1725883200">- Update to version 47.0:
  + Fix icon name.
  + Updated translations.
- Changes from version 47.beta:
  + desktop: Add jpeg-xl to MimeType list
  + EogWindow: Raise priority of image loading and transformation
    jobs
  + EogMetadataDetails: Support copying metadata values to the
    clipboard)</changelog>
</package>
<package pkgid="bda8c643d5d8382e6ccfd97aaed614b68f8c4275d083a0370a888d25ad55721415f5ecb1555194090c9db5c4f901f2ecb76c73ecba643e404bcc1e23ce6f8f95" name="eog-plugin-exif-display" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="c7af2cb2b9a212f424a98c70ccd7c4a5161d90ccfc185161d37cd9cd0583ea2205940f3b4b1d50280de080109234db787747861ee67a2c5487a9da87fbf7d1af" name="eog-plugin-export-to-folder" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="cf82df3b87c996dda1683213f1cc80590f9c0eaef4514bf39f79841bcbf1e39211e776e05b52c21be7ffae7d903255c721c30bc45614fc9a7c1bd7792e3cf10f" name="eog-plugin-fit-to-width" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="70250c5f0e93aa6b8ec758eaf6ccb71999d52d3dc6caa8ef55e678e4bb7c378dd7d4264a999e562cc864d961b12cf4c9b20c2468d381030bb9e8fc14a3cd73e4" name="eog-plugin-fullscreenbg" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="11ef4fec647e97c9638112b83a2ecaea2523b2ce8c359fd63869e2bb0784980348a6e12febbc1bf43bc0f443353d74abbb2e08ee9497df800d481ed536dacab8" name="eog-plugin-light-theme" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="b4cbefc91e025d781fbca29e654035ced9b2a42f4e50007c04ae763885ed3c4ecf6ce6944ca0908f5fee28acd683311932cd67b0b100d3137baab72f2b2080c7" name="eog-plugin-map" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="57ddff2f76fe37d74c22f3f076e65e5ee7be1c3450b8a116cc5a98000763f2e183cefbd0cd656bda71b649de175094efecc58e7a8db74ac54bf4f0403778c422" name="eog-plugin-maximize-windows" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="a43ab4042ca1a80b0e267c7d64d5d234422ef30dfa84951eead6c84ad32f355a482c49e4d6da742ef2418f61c0b16d0ad6d8ff112b815300585c55357f6d28f0" name="eog-plugin-pythonconsole" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="e2a8c7d76217444194aa23d69e61b68e2dad503d57728e5480bdf6bbac51587f0b5dca7e8c988c7695f5a80584982885bb6b8ed632974575271396a2ad0ccc01" name="eog-plugin-send-by-mail" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="4b87205ba518b2fc2475fde105beb24d76d2db16ebbd71348588c163b82459dbc100e7c24d8538995b7129b8e011e3613c664159bc0fa5c8f572b8e705a4b040" name="eog-plugin-slideshowshuffle" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="db9f2986025b8b04fdc82c3f8430b6c87e5b4cbd70b51fbe4d17ced4b8b68de4806d4e1ee0909ba1e7cae617880e2ee8d28e4451a3ae336f5a1ad03726f51c92" name="eog-plugins" arch="x86_64">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="ce894a10f64e66b844e561405cdfd2d3b3d308d80a0047cb07cb401601fea827a7f5dff2d567d488f2f3a3dda63e9962c1f65e4f4a6b4138a9010304e5847fbc" name="eog-plugins-data" arch="noarch">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="69fc70de2241fea091752ffc4e8cadd982dfab511dee25854727558c62835c1dfcf5596e59925fabb54747a42189717aad2b7821785149b3a354869a04afed44" name="eog-plugins-lang" arch="noarch">
  <version epoch="0" ver="44.1" rel="bp160.1.8"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1641729600">- Update to version 3.26.8:
  + Exif Display: make _eog_util_make_valid_utf8 static.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644667200">- Update to version 42.alpha:
  + Port build system to Meson
  + Plugin changes:
  - Exif Display: translate: mark "Details" page title
    translatable
  - Flickr Uploader (postr): Do not migrate to Meson and disable
    by default as Postr is no longer maintained and working
  - Hide Titlebar: Drop hide-titlebar plugin
  + Updated translations.
- Add meson BuildRequires and macros following upstreams port.
- Drop eog-plugin-hide-titlebar sub-package and Obsolete it from
  the main package.
- Drop pkgconfig(gtk+-3.0) BuildRequires: No longer needed.
- Add explicit pkgconfig(gio-2.0) and pkgconfig(libpeas-gtk-1.0)
  BuildRequires, meson checks for them.
- Correct the Suggests we have.
- Add eog-plugins-mesonfix-061.patch: Fix build with meson 0.61 and
  newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1646481600">- Update to version 42.rc:
  + General changes: build: drop unused positional argument.
  + Plugin changes: Disable Dark Theme: Fix light-theme plugin file
    output name
  + Updated translations.
- Drop eog-plugins-mesonfix-061.patch: Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1647777600">- Update to version 42.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1650888000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1663502400">- Update to version 42.2:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1673092800">- Update to version 42.3:
  + General changes: build: Use correct variables.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1678708800">- Drop pkgconfig(libgdata) BuildRequires and pass
  plugin_postasa=false to meson, no longer build google picasa web
  support. Google discontinued this service some time ago.
- Add eog-plugin-postasa Obsoletes: Make upgrades painless for
  end-users.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1679227200">- Update to version 44.0:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1731412800">- Update to version 44.1:
  + Updated translations.</changelog>
</package>
<package pkgid="784c7fe88ea051a479b211de38b29dcd71bbeb7eac6df33edd819bfed68ca0fb9582a86c4fd99057fa00250e543b357a81d3d3ebbcbf06e43c616da9ae4e0ef1" name="eom" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.14"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * See /usr/share/doc/packages/eom/NEWS
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * store: Add any image file in the current directory to the store.
  * help: Update copyright.
  * Upgrade the manual to docbook 5.0.
  * Use persistent page setup.
  * Update translations.
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563451200">- Update to version 1.23.0:
  * update translations
  * require GLib 2.52
  * Restore image types list and add wildcard
  * Disconnect callbacks for "Open with" menu items before connecting new ones.
  * Unref GtkUIManager so "Open with" menu is freed.
  * update image of eom_toolbar_editor_window
  * Use ITS in docbook article info, validate with dbits schemas
  * store: Add any image file in the current directory to the store
  * Simplify the installation process of the icons
  * help: update copyright
  * Upgrade the manual to docbook 5.0
  * Use persistent page setup
- remove patches:
  * eom-gtk-3.20.patch: we don't support systems with gtk-3.20
    anymore
- BuildRequire gtk3 &gt;= 3.22</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * Add translator hint.
  * Migrate from intltool to gettext.
  * Add missing format specifier for ngettext.
  * egg_editable_toolbar: Avoid g_type_class_add_private.
  * egg-toolbar-editor: Avoid g_type_class_add_private.
  * egg-toolbars-model: Avoid g_type_class_add_private.
  * remove warning: "HAVE_EXIF" is not defined, evaluates to 0.
  * remove warnings: Incorrect usage of abs()
  * remove warnings: Redundant redeclaration.
  * Suppress GtkAction warnings.
  * Allow colour correcting images with alpha channel.
  * EomMetadataReaderPng: Use built-in SRGB profile for matching
    cHRM/gAMA.
  * EomMetadataReaderPNG: Only build profile from cHRM if gAMA is
    present.
  * Assume sRGB if no display profile is set
  * EomImage: Check GdkPixbuf for an ICC profile before falling
    back to sRGB.
  * Assume sRGB when image doesn't have an ICC profile attached.
  * Remove trailing whitespaces.
  * thumbnail: Remove use of mate-desktop-thumbnail helper.
  * Enable wayland support.
  * EomPrintPreview: Fix preview thumbnail on HiDPI displays.
  * thumbnailer: Add --with-gdk-pixbuf-thumbnailer option.
  * Add eom-thumbnailer for webp files.
  * autoconf: AC_PROG_CC was called before AX_CHECK_ENABLE_DEBUG.
  * Fix preprocessing warning for file: src/eom-window.c.
  * Fix preprocessing warning for file: src/eom-print.c.
  * Update MIME types supported by commonly used pixbuf-loaders.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * help: Fix some incongruencies.
  * build: Silent build warnings for distcheck.
  * eom.desktop: Do not collect the translation for Icon.
  * help: Fix Image Collection shortcut.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * eom-save-as-dialog-helper: Fix resource path
  * Ensure scrollbar moves when dragged to move image</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629115200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021
- Split doc package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Trim filler wording from description. Make doc package noarch.
  Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * Fix building with ImageMagick 7.
  * eom-window: Fix the incompatible-pointer-types warning.
  * Accessibility: Add proper mnemonic relations and labelling.
  * Add support for libexif 0.6.14+.
  * user-guide: Fix wrong information.
  * Update translations.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.0
  * Translations update
  * eom-window: update image counter even if current thumbnail is for failured
    image
  * meson: explicit dep on -lm as required for Fedora35
  * fix building with new libxml 2.12.0
  * fix warning in Serbian translations
  * fix warning in Japanese translations</changelog>
</package>
<package pkgid="7cb87932f39b385415f997c785b1dd5a3a5f05b037820b76b33552ff156238252f7794534cb41033caa5c79b51a54c907d5d1f68a0c8c34878e870493587f287" name="eom-devel" arch="x86_64">
  <version epoch="0" ver="1.28.0" rel="bp160.1.14"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * See /usr/share/doc/packages/eom/NEWS
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * store: Add any image file in the current directory to the store.
  * help: Update copyright.
  * Upgrade the manual to docbook 5.0.
  * Use persistent page setup.
  * Update translations.
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563451200">- Update to version 1.23.0:
  * update translations
  * require GLib 2.52
  * Restore image types list and add wildcard
  * Disconnect callbacks for "Open with" menu items before connecting new ones.
  * Unref GtkUIManager so "Open with" menu is freed.
  * update image of eom_toolbar_editor_window
  * Use ITS in docbook article info, validate with dbits schemas
  * store: Add any image file in the current directory to the store
  * Simplify the installation process of the icons
  * help: update copyright
  * Upgrade the manual to docbook 5.0
  * Use persistent page setup
- remove patches:
  * eom-gtk-3.20.patch: we don't support systems with gtk-3.20
    anymore
- BuildRequire gtk3 &gt;= 3.22</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * Add translator hint.
  * Migrate from intltool to gettext.
  * Add missing format specifier for ngettext.
  * egg_editable_toolbar: Avoid g_type_class_add_private.
  * egg-toolbar-editor: Avoid g_type_class_add_private.
  * egg-toolbars-model: Avoid g_type_class_add_private.
  * remove warning: "HAVE_EXIF" is not defined, evaluates to 0.
  * remove warnings: Incorrect usage of abs()
  * remove warnings: Redundant redeclaration.
  * Suppress GtkAction warnings.
  * Allow colour correcting images with alpha channel.
  * EomMetadataReaderPng: Use built-in SRGB profile for matching
    cHRM/gAMA.
  * EomMetadataReaderPNG: Only build profile from cHRM if gAMA is
    present.
  * Assume sRGB if no display profile is set
  * EomImage: Check GdkPixbuf for an ICC profile before falling
    back to sRGB.
  * Assume sRGB when image doesn't have an ICC profile attached.
  * Remove trailing whitespaces.
  * thumbnail: Remove use of mate-desktop-thumbnail helper.
  * Enable wayland support.
  * EomPrintPreview: Fix preview thumbnail on HiDPI displays.
  * thumbnailer: Add --with-gdk-pixbuf-thumbnailer option.
  * Add eom-thumbnailer for webp files.
  * autoconf: AC_PROG_CC was called before AX_CHECK_ENABLE_DEBUG.
  * Fix preprocessing warning for file: src/eom-window.c.
  * Fix preprocessing warning for file: src/eom-print.c.
  * Update MIME types supported by commonly used pixbuf-loaders.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * help: Fix some incongruencies.
  * build: Silent build warnings for distcheck.
  * eom.desktop: Do not collect the translation for Icon.
  * help: Fix Image Collection shortcut.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * eom-save-as-dialog-helper: Fix resource path
  * Ensure scrollbar moves when dragged to move image</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629115200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021
- Split doc package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Trim filler wording from description. Make doc package noarch.
  Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * Fix building with ImageMagick 7.
  * eom-window: Fix the incompatible-pointer-types warning.
  * Accessibility: Add proper mnemonic relations and labelling.
  * Add support for libexif 0.6.14+.
  * user-guide: Fix wrong information.
  * Update translations.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.0
  * Translations update
  * eom-window: update image counter even if current thumbnail is for failured
    image
  * meson: explicit dep on -lm as required for Fedora35
  * fix building with new libxml 2.12.0
  * fix warning in Serbian translations
  * fix warning in Japanese translations</changelog>
</package>
<package pkgid="ef201b006ca2fef4d4b6a6394d120e2cadd3b1dda94e0d108ce363d5297fd061b3aa581388a8f88bcd54dcfbedc127f68aef90e2414f271f7a67b11438326b9a" name="eom-doc" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="bp160.1.14"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * See /usr/share/doc/packages/eom/NEWS
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * store: Add any image file in the current directory to the store.
  * help: Update copyright.
  * Upgrade the manual to docbook 5.0.
  * Use persistent page setup.
  * Update translations.
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563451200">- Update to version 1.23.0:
  * update translations
  * require GLib 2.52
  * Restore image types list and add wildcard
  * Disconnect callbacks for "Open with" menu items before connecting new ones.
  * Unref GtkUIManager so "Open with" menu is freed.
  * update image of eom_toolbar_editor_window
  * Use ITS in docbook article info, validate with dbits schemas
  * store: Add any image file in the current directory to the store
  * Simplify the installation process of the icons
  * help: update copyright
  * Upgrade the manual to docbook 5.0
  * Use persistent page setup
- remove patches:
  * eom-gtk-3.20.patch: we don't support systems with gtk-3.20
    anymore
- BuildRequire gtk3 &gt;= 3.22</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * Add translator hint.
  * Migrate from intltool to gettext.
  * Add missing format specifier for ngettext.
  * egg_editable_toolbar: Avoid g_type_class_add_private.
  * egg-toolbar-editor: Avoid g_type_class_add_private.
  * egg-toolbars-model: Avoid g_type_class_add_private.
  * remove warning: "HAVE_EXIF" is not defined, evaluates to 0.
  * remove warnings: Incorrect usage of abs()
  * remove warnings: Redundant redeclaration.
  * Suppress GtkAction warnings.
  * Allow colour correcting images with alpha channel.
  * EomMetadataReaderPng: Use built-in SRGB profile for matching
    cHRM/gAMA.
  * EomMetadataReaderPNG: Only build profile from cHRM if gAMA is
    present.
  * Assume sRGB if no display profile is set
  * EomImage: Check GdkPixbuf for an ICC profile before falling
    back to sRGB.
  * Assume sRGB when image doesn't have an ICC profile attached.
  * Remove trailing whitespaces.
  * thumbnail: Remove use of mate-desktop-thumbnail helper.
  * Enable wayland support.
  * EomPrintPreview: Fix preview thumbnail on HiDPI displays.
  * thumbnailer: Add --with-gdk-pixbuf-thumbnailer option.
  * Add eom-thumbnailer for webp files.
  * autoconf: AC_PROG_CC was called before AX_CHECK_ENABLE_DEBUG.
  * Fix preprocessing warning for file: src/eom-window.c.
  * Fix preprocessing warning for file: src/eom-print.c.
  * Update MIME types supported by commonly used pixbuf-loaders.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * help: Fix some incongruencies.
  * build: Silent build warnings for distcheck.
  * eom.desktop: Do not collect the translation for Icon.
  * help: Fix Image Collection shortcut.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * eom-save-as-dialog-helper: Fix resource path
  * Ensure scrollbar moves when dragged to move image</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629115200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021
- Split doc package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Trim filler wording from description. Make doc package noarch.
  Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * Fix building with ImageMagick 7.
  * eom-window: Fix the incompatible-pointer-types warning.
  * Accessibility: Add proper mnemonic relations and labelling.
  * Add support for libexif 0.6.14+.
  * user-guide: Fix wrong information.
  * Update translations.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.0
  * Translations update
  * eom-window: update image counter even if current thumbnail is for failured
    image
  * meson: explicit dep on -lm as required for Fedora35
  * fix building with new libxml 2.12.0
  * fix warning in Serbian translations
  * fix warning in Japanese translations</changelog>
</package>
<package pkgid="244fde174236a04fbe2379c4ef70fdffcc6951efbdf5a02218ccbba47e79e9c8959d59a72fd5491eddd98f6313189bf8e2db08877481cb4e353773ce38018a38" name="eom-lang" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="bp160.1.14"/>
  <changelog author="sor.alexei@meowr.ru" date="1551787200">- Update to version 1.22.0:
  * See /usr/share/doc/packages/eom/NEWS
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1557662400">- Update to version 1.22.1:
  * store: Add any image file in the current directory to the store.
  * help: Update copyright.
  * Upgrade the manual to docbook 5.0.
  * Use persistent page setup.
  * Update translations.
- Rebase eom-gtk-3.20.patch.</changelog>
  <changelog author="Jonathan Brielmaier &lt;jbrielmaier@suse.de&gt;" date="1563451200">- Update to version 1.23.0:
  * update translations
  * require GLib 2.52
  * Restore image types list and add wildcard
  * Disconnect callbacks for "Open with" menu items before connecting new ones.
  * Unref GtkUIManager so "Open with" menu is freed.
  * update image of eom_toolbar_editor_window
  * Use ITS in docbook article info, validate with dbits schemas
  * store: Add any image file in the current directory to the store
  * Simplify the installation process of the icons
  * help: update copyright
  * Upgrade the manual to docbook 5.0
  * Use persistent page setup
- remove patches:
  * eom-gtk-3.20.patch: we don't support systems with gtk-3.20
    anymore
- BuildRequire gtk3 &gt;= 3.22</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1582718400">- Update to version 1.24.0 (changes since 1.23.0):
  * Add translator hint.
  * Migrate from intltool to gettext.
  * Add missing format specifier for ngettext.
  * egg_editable_toolbar: Avoid g_type_class_add_private.
  * egg-toolbar-editor: Avoid g_type_class_add_private.
  * egg-toolbars-model: Avoid g_type_class_add_private.
  * remove warning: "HAVE_EXIF" is not defined, evaluates to 0.
  * remove warnings: Incorrect usage of abs()
  * remove warnings: Redundant redeclaration.
  * Suppress GtkAction warnings.
  * Allow colour correcting images with alpha channel.
  * EomMetadataReaderPng: Use built-in SRGB profile for matching
    cHRM/gAMA.
  * EomMetadataReaderPNG: Only build profile from cHRM if gAMA is
    present.
  * Assume sRGB if no display profile is set
  * EomImage: Check GdkPixbuf for an ICC profile before falling
    back to sRGB.
  * Assume sRGB when image doesn't have an ICC profile attached.
  * Remove trailing whitespaces.
  * thumbnail: Remove use of mate-desktop-thumbnail helper.
  * Enable wayland support.
  * EomPrintPreview: Fix preview thumbnail on HiDPI displays.
  * thumbnailer: Add --with-gdk-pixbuf-thumbnailer option.
  * Add eom-thumbnailer for webp files.
  * autoconf: AC_PROG_CC was called before AX_CHECK_ENABLE_DEBUG.
  * Fix preprocessing warning for file: src/eom-window.c.
  * Fix preprocessing warning for file: src/eom-print.c.
  * Update MIME types supported by commonly used pixbuf-loaders.
  * Update translations.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1597579200">- Update to version 1.24.1:
  * help: Fix some incongruencies.
  * build: Silent build warnings for distcheck.
  * eom.desktop: Do not collect the translation for Icon.
  * help: Fix Image Collection shortcut.
  * Update translations.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1619438400">- Update to version 1.24.2:
  * Translations update
  * eom-save-as-dialog-helper: Fix resource path
  * Ensure scrollbar moves when dragged to move image</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1629115200">- Update version to 1.26.0
  * Update translations
  * update copyright to 2021
- Split doc package</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629633600">- Trim filler wording from description. Make doc package noarch.
  Update RPM groups.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1684152000">- Update to version 1.26.1:
  * Fix building with ImageMagick 7.
  * eom-window: Fix the incompatible-pointer-types warning.
  * Accessibility: Add proper mnemonic relations and labelling.
  * Add support for libexif 0.6.14+.
  * user-guide: Fix wrong information.
  * Update translations.</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1711886400">- Update version to 1.28.0
  * Translations update
  * eom-window: update image counter even if current thumbnail is for failured
    image
  * meson: explicit dep on -lm as required for Fedora35
  * fix building with new libxml 2.12.0
  * fix warning in Serbian translations
  * fix warning in Japanese translations</changelog>
</package>
<package pkgid="d04cf2e25479c540914927c69cf20f1734fb303a9e6084f5b93a50bc505fc8e4bb6e27593e0dfff217cfc0b846bb0e47e619ef8ea4705a7ad3adc16b7c272c20" name="epiphany" arch="x86_64">
  <version epoch="0" ver="48.5" rel="bp160.1.3"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324800">- Update to version 48.alpha:
  + History dialog improvements:
  - Fix scroll position resetting when deleting history
  - Clear button now deletes only URLs matching search results
  - Fix focus reset when opening pages in history
  - Add toast when copying link
  - Reduce unnecessary refreshes in history dialog
  - Add history selection mode
  - Fix missing accelerator on Clear button
  - Various additional history dialog fixes
  + Add warning regarding disabling website data storage
  + Allow closing pinned tabs
  + Add missing tooltip to unfullscreen button
  + Simplify UI for importing bookmarks and passwords
  + Allow cycling through items in address bar dropdown
  + Improve Manage Additional URLs design
  + Fix web app dialog not opening for pages with no title
  + Fix bookmark import from HTML
  + Improve password form autofill
  + Under flatpak, the downloads popover folder button now selects
    file in file manager
  + Enable reload context menu item in new tab page
  + Fix bookmark properties dialog when many tags are available
  + Fix crash if tab is closed immediately after web process crash
  + Fix failure to delete web app with apostrophe in name and XSS
    via web app name
  + Disable Ctrl+K shortcut in web app mode
  + Fix crash when displaying web view
  + Do not accept disallowed URLs via drag and drop in web app mode
  + Show toast when download is added
  + Fix security popover layout with GTK 4.17.2
  + Redesign privacy report dialog
  + Improve design of bookmarks dialog
  + Add toast when copying password in passwords dialog
  + Update to highlightjs-line-numbers 2.9.0
  + Fix crash on startup when restoring no tabs from previous
    session
  + Update to highlight.js 11.11.0</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324801">- Update to version 48.beta:
  + Bugs fixed:
  - Focus stays on address bar after switching tab with search
  - Modernize import dialogs
  - Select all from address bar context menu doesn't work
  - Display a Toast when failing to install site as a Web App
  - Able to focus main view when in bookmarks sidebar
  - embed-shell: ensure directories exist before adding them to
    sandbox
  - Add download completed toast
  - Modernize import dialogs
  - Dismiss download started toast on download finish
  - Bookmark dialog focus fixes
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740571200">- Update to version 48.rc:
  + Bugs fixed:
  - Deletion of bigger numbers of bookmarks is unintuitive
  - Do not remove address bar content when switching tabs
  - Importing existing bookmarks can create duplicate rows
  - Crash upon launch  due to segmentation fault
  - Change default protocol from http:// to https://
  - window-commands: print warning when web app installation
    fails
  - Add Matrix rooms to appstream metadata
  - Fix cursor sometimes moving when typing in new tab
  - Use gtk_list_box_remove_all () where possible
  - Remove use of deprecated DNS prefetch setting
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741003200">- Drop pkgconfig(gdk-3.0) BuildRequires: Not needed nor used.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741867200">- Update to version 48.0:
  + Bugs fixed:
  - Consistent Clear mnemonics
  - Crash in populate_bookmarks_list_box
  - Use consistent mnemonic for "Select All"
  - Replace GtkTreeView with GtkColumnView in webapp URLs dialog
  - Fix URL getting set to unfocused loading tab's URL
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745323200">- Update to version 48.1:
  + This release notably fixes CVE-2025-3839.
  + Bugs fixed:
  - Crash when trying to select download location
  - Crash in escape_csv_field() when exporting passwords
  - Adding WhatsApp as a web app crashes
  - Pressing Escape key in addressbar resets the cursor to
    beginning of the widget
  - Epiphay shouldn't show the privacy dialog in incognito mode
  - (CVE-2025-3839) Require user interaction before opening URL
    in external application
  - Code cleanup
  - window: fix crash when force closing window without session
  - Several fixes for password export
  - Remove Granite support from Tech Preview and Canary
  - find-toolbar: fix crash on load-changed
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745409600">- Update to version 48.2:
  + Fix crash when opening incognito window.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745582400">- Update to version 48.3:
  + Fix crash when opening downloaded file.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1751025600">- Update to version 48.5:
  + Bugs fixed:
  - "Installed on" label shown in about:applications reflects the
    usage / access time, not creation time
  - Incognito Epiphany shouldn't automatically use saved HTTP
    Auth passwords from the regular Epiphany session(s)
  - Crash on quit if the export dialog is dismissed before
  - Improvements to HTTP authentication
  - web-extension-manager: fix web process extension init
    regression
  - Fixes for ephy_window_disconnect_active_embed
  - Don't consider og:image for web app icon
  - shell: Fix startup crash on Pantheon
  - action-bar-end: Fix startup crash on Pantheon
  - ephy-password-import: improve robustness
  - Fix PKCS #11 login for invalid cert/priv pairs
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1752235200">- Add epiphany-bookmark-tags-crash.patch: fix a crash when editing
  bookmark tags.</changelog>
</package>
<package pkgid="cac5fe9f4cd95eacada1f6c74a2e195b9e3055b99d27e8370d58e64f1f2fd52a7dd61632e4976d22a57266443bf88b68915b56967a3a0eb93356513517ffc7a4" name="epiphany-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="48.5" rel="lp160.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Bump version to 42.1, to prepare for next version of openSUSE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453464000">- Make build not rely on lsb and opensuse-release (no constant
  rebuild in Tumbleweed):
  + Drop lsb/lsb-release BuildRequires.
  + Drop opensuse-release BuildRequires.
  + Use %{suse_version} in build section to inject proper values
    into branding.conf. On Tumbleweed we no longer use the snapshot
    version (which is anyway useless) but simply inject
    'Tumbleweed'. We currently detect openSUSE 13.1, 13.2,
    Leap 42.1, SLE12 and Tumbleweed systems. All others will have
    'SUSE/undef' in the browsers user agent string.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455278400">- Patch tagging: use valid tags.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Drop epiphany-branding-SLED subpackage:
  + Remove sled-bookmarks.patch, pre_checkin.sh,
    epiphany-branding-SLED.changes, epiphany-branding.changes.in
    and epiphany-branding-SLED.spec.
  + Clean epiphany-branding-openSUSE.spec for all references to the
    previous package.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Rebase opensuse-bookmarks.patch to fit with what epiphany now
  ships in the stable release.</changelog>
  <changelog author="fcrozat@suse.com" date="1480939200">- Fix is_opensuse macro usage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939201">- Rebase opensuse-bookmarks.patch for epiphany 3.23.2.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709208000">- Update version to match epiphany.</changelog>
</package>
<package pkgid="a1f5a546ac58d3a5e696e7b9c3da244c7f5fc8456e93bd4a018866881c30ca151751c1948bae4e047176080dbc76788d40dd85d37cc4b4978fec71a749233df3" name="epiphany-branding-upstream" arch="noarch">
  <version epoch="0" ver="48.5" rel="bp160.1.3"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324800">- Update to version 48.alpha:
  + History dialog improvements:
  - Fix scroll position resetting when deleting history
  - Clear button now deletes only URLs matching search results
  - Fix focus reset when opening pages in history
  - Add toast when copying link
  - Reduce unnecessary refreshes in history dialog
  - Add history selection mode
  - Fix missing accelerator on Clear button
  - Various additional history dialog fixes
  + Add warning regarding disabling website data storage
  + Allow closing pinned tabs
  + Add missing tooltip to unfullscreen button
  + Simplify UI for importing bookmarks and passwords
  + Allow cycling through items in address bar dropdown
  + Improve Manage Additional URLs design
  + Fix web app dialog not opening for pages with no title
  + Fix bookmark import from HTML
  + Improve password form autofill
  + Under flatpak, the downloads popover folder button now selects
    file in file manager
  + Enable reload context menu item in new tab page
  + Fix bookmark properties dialog when many tags are available
  + Fix crash if tab is closed immediately after web process crash
  + Fix failure to delete web app with apostrophe in name and XSS
    via web app name
  + Disable Ctrl+K shortcut in web app mode
  + Fix crash when displaying web view
  + Do not accept disallowed URLs via drag and drop in web app mode
  + Show toast when download is added
  + Fix security popover layout with GTK 4.17.2
  + Redesign privacy report dialog
  + Improve design of bookmarks dialog
  + Add toast when copying password in passwords dialog
  + Update to highlightjs-line-numbers 2.9.0
  + Fix crash on startup when restoring no tabs from previous
    session
  + Update to highlight.js 11.11.0</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324801">- Update to version 48.beta:
  + Bugs fixed:
  - Focus stays on address bar after switching tab with search
  - Modernize import dialogs
  - Select all from address bar context menu doesn't work
  - Display a Toast when failing to install site as a Web App
  - Able to focus main view when in bookmarks sidebar
  - embed-shell: ensure directories exist before adding them to
    sandbox
  - Add download completed toast
  - Modernize import dialogs
  - Dismiss download started toast on download finish
  - Bookmark dialog focus fixes
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740571200">- Update to version 48.rc:
  + Bugs fixed:
  - Deletion of bigger numbers of bookmarks is unintuitive
  - Do not remove address bar content when switching tabs
  - Importing existing bookmarks can create duplicate rows
  - Crash upon launch  due to segmentation fault
  - Change default protocol from http:// to https://
  - window-commands: print warning when web app installation
    fails
  - Add Matrix rooms to appstream metadata
  - Fix cursor sometimes moving when typing in new tab
  - Use gtk_list_box_remove_all () where possible
  - Remove use of deprecated DNS prefetch setting
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741003200">- Drop pkgconfig(gdk-3.0) BuildRequires: Not needed nor used.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741867200">- Update to version 48.0:
  + Bugs fixed:
  - Consistent Clear mnemonics
  - Crash in populate_bookmarks_list_box
  - Use consistent mnemonic for "Select All"
  - Replace GtkTreeView with GtkColumnView in webapp URLs dialog
  - Fix URL getting set to unfocused loading tab's URL
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745323200">- Update to version 48.1:
  + This release notably fixes CVE-2025-3839.
  + Bugs fixed:
  - Crash when trying to select download location
  - Crash in escape_csv_field() when exporting passwords
  - Adding WhatsApp as a web app crashes
  - Pressing Escape key in addressbar resets the cursor to
    beginning of the widget
  - Epiphay shouldn't show the privacy dialog in incognito mode
  - (CVE-2025-3839) Require user interaction before opening URL
    in external application
  - Code cleanup
  - window: fix crash when force closing window without session
  - Several fixes for password export
  - Remove Granite support from Tech Preview and Canary
  - find-toolbar: fix crash on load-changed
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745409600">- Update to version 48.2:
  + Fix crash when opening incognito window.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745582400">- Update to version 48.3:
  + Fix crash when opening downloaded file.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1751025600">- Update to version 48.5:
  + Bugs fixed:
  - "Installed on" label shown in about:applications reflects the
    usage / access time, not creation time
  - Incognito Epiphany shouldn't automatically use saved HTTP
    Auth passwords from the regular Epiphany session(s)
  - Crash on quit if the export dialog is dismissed before
  - Improvements to HTTP authentication
  - web-extension-manager: fix web process extension init
    regression
  - Fixes for ephy_window_disconnect_active_embed
  - Don't consider og:image for web app icon
  - shell: Fix startup crash on Pantheon
  - action-bar-end: Fix startup crash on Pantheon
  - ephy-password-import: improve robustness
  - Fix PKCS #11 login for invalid cert/priv pairs
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1752235200">- Add epiphany-bookmark-tags-crash.patch: fix a crash when editing
  bookmark tags.</changelog>
</package>
<package pkgid="4065786b506cebfd722f2ea0c3e89ca001c661042569e78bc720cd95ddbc258eca5dc47b5f70f17fab8557df3ba2446d2ef98b237e4ab350205f15a5930e6952" name="epiphany-lang" arch="noarch">
  <version epoch="0" ver="48.5" rel="bp160.1.3"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324800">- Update to version 48.alpha:
  + History dialog improvements:
  - Fix scroll position resetting when deleting history
  - Clear button now deletes only URLs matching search results
  - Fix focus reset when opening pages in history
  - Add toast when copying link
  - Reduce unnecessary refreshes in history dialog
  - Add history selection mode
  - Fix missing accelerator on Clear button
  - Various additional history dialog fixes
  + Add warning regarding disabling website data storage
  + Allow closing pinned tabs
  + Add missing tooltip to unfullscreen button
  + Simplify UI for importing bookmarks and passwords
  + Allow cycling through items in address bar dropdown
  + Improve Manage Additional URLs design
  + Fix web app dialog not opening for pages with no title
  + Fix bookmark import from HTML
  + Improve password form autofill
  + Under flatpak, the downloads popover folder button now selects
    file in file manager
  + Enable reload context menu item in new tab page
  + Fix bookmark properties dialog when many tags are available
  + Fix crash if tab is closed immediately after web process crash
  + Fix failure to delete web app with apostrophe in name and XSS
    via web app name
  + Disable Ctrl+K shortcut in web app mode
  + Fix crash when displaying web view
  + Do not accept disallowed URLs via drag and drop in web app mode
  + Show toast when download is added
  + Fix security popover layout with GTK 4.17.2
  + Redesign privacy report dialog
  + Improve design of bookmarks dialog
  + Add toast when copying password in passwords dialog
  + Update to highlightjs-line-numbers 2.9.0
  + Fix crash on startup when restoring no tabs from previous
    session
  + Update to highlight.js 11.11.0</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1738324801">- Update to version 48.beta:
  + Bugs fixed:
  - Focus stays on address bar after switching tab with search
  - Modernize import dialogs
  - Select all from address bar context menu doesn't work
  - Display a Toast when failing to install site as a Web App
  - Able to focus main view when in bookmarks sidebar
  - embed-shell: ensure directories exist before adding them to
    sandbox
  - Add download completed toast
  - Modernize import dialogs
  - Dismiss download started toast on download finish
  - Bookmark dialog focus fixes
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1740571200">- Update to version 48.rc:
  + Bugs fixed:
  - Deletion of bigger numbers of bookmarks is unintuitive
  - Do not remove address bar content when switching tabs
  - Importing existing bookmarks can create duplicate rows
  - Crash upon launch  due to segmentation fault
  - Change default protocol from http:// to https://
  - window-commands: print warning when web app installation
    fails
  - Add Matrix rooms to appstream metadata
  - Fix cursor sometimes moving when typing in new tab
  - Use gtk_list_box_remove_all () where possible
  - Remove use of deprecated DNS prefetch setting
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741003200">- Drop pkgconfig(gdk-3.0) BuildRequires: Not needed nor used.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1741867200">- Update to version 48.0:
  + Bugs fixed:
  - Consistent Clear mnemonics
  - Crash in populate_bookmarks_list_box
  - Use consistent mnemonic for "Select All"
  - Replace GtkTreeView with GtkColumnView in webapp URLs dialog
  - Fix URL getting set to unfocused loading tab's URL
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745323200">- Update to version 48.1:
  + This release notably fixes CVE-2025-3839.
  + Bugs fixed:
  - Crash when trying to select download location
  - Crash in escape_csv_field() when exporting passwords
  - Adding WhatsApp as a web app crashes
  - Pressing Escape key in addressbar resets the cursor to
    beginning of the widget
  - Epiphay shouldn't show the privacy dialog in incognito mode
  - (CVE-2025-3839) Require user interaction before opening URL
    in external application
  - Code cleanup
  - window: fix crash when force closing window without session
  - Several fixes for password export
  - Remove Granite support from Tech Preview and Canary
  - find-toolbar: fix crash on load-changed
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745409600">- Update to version 48.2:
  + Fix crash when opening incognito window.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1745582400">- Update to version 48.3:
  + Fix crash when opening downloaded file.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1751025600">- Update to version 48.5:
  + Bugs fixed:
  - "Installed on" label shown in about:applications reflects the
    usage / access time, not creation time
  - Incognito Epiphany shouldn't automatically use saved HTTP
    Auth passwords from the regular Epiphany session(s)
  - Crash on quit if the export dialog is dismissed before
  - Improvements to HTTP authentication
  - web-extension-manager: fix web process extension init
    regression
  - Fixes for ephy_window_disconnect_active_embed
  - Don't consider og:image for web app icon
  - shell: Fix startup crash on Pantheon
  - action-bar-end: Fix startup crash on Pantheon
  - ephy-password-import: improve robustness
  - Fix PKCS #11 login for invalid cert/priv pairs
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1752235200">- Add epiphany-bookmark-tags-crash.patch: fix a crash when editing
  bookmark tags.</changelog>
</package>
<package pkgid="ee9f1235af65628e1490a03eb0879c671e3f14b6b058ab9691e4cb33fc66df1f9b795ba7e3ba5869eeaf5d51915f28433f81c8304e3bc2ebe51bd56aa3968fa0" name="epplet-base" arch="x86_64">
  <version epoch="0" ver="0.16" rel="bp160.1.6"/>
  <changelog author="vuntz@opensuse.org" date="1263211200">- Remove unneeded gtk-devel BuildRequires.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1332763200">- Add epplet-base-linking.patch: Fix linking.</changelog>
  <changelog author="jengelh@inai.de" date="1408363200">- Drop unused build-time requirements</changelog>
  <changelog author="simon@simotek.net" date="1416830400">- Update summary and description to indicate that this package only
  works for enlightenment DR16, it won't run on e17 and later</changelog>
  <changelog author="dimstar@opensuse.org" date="1506513600">- Drop esound-devel BuildRequires: esound has been obsoleted by a
  couple sound servers by now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575720000">- Add the missing Xext build dependency
- Run spec-cleaner</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1578398400">- Update to e16
- Drop epplet-base-linking.patch not required</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="e0bd062f433047ce30678fd6b33bac0d61aa483d741176d6cd3f903f38fec1d53b74192dda93ff1002c89dcd6a010ffa151679a8a7b35f0f4cee02c699bd2956" name="epub2txt2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="bp160.1.10"/>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1648555200">- Fix spec and sources.</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1648555201">- Use the commit hash instead. Upstream maintainer didn't tagged a release
  and only changed the README that it is version 2.03. This is to clarify
  that commit `10e9ac86df9a823d7470deaaa50c44d2857ee6f7` is 2.03.</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1648641600">- replace %{version} to a custom %{_commit_hash} to fix build errors</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1651406400">- Update epub2text2 to version 2.04 (commit hash: 02f69e6243d6c96f78da45fb710a265e5aee2fb5)</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1651406401">- remove patch argument in spec file</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1651406402">- remention patch files in spec but only use bmwiedemann-sort.patch</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1651406403">- revert: remove patches</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1651406404">- remention patch files in spec but do not use them</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1651406405">- remove patches:
  * bmwiedemann-sort.patch
  * LICENSE.patch</changelog>
  <changelog author="Soc Virnyl Estela &lt;socvirnyl.estela@gmail.com&gt;" date="1659009600">- Update to version 2.06:
  * No changelog available
- Added 54b41e87156bc823d5938749d71c4c57adc75b1b.patch:
  * Fixed handling of URL-encoded spine hrefs</changelog>
</package>
<package pkgid="059f667d8ec062439a7063ed1ad8f127c44f9f2f68d67486077d347041254c6a59d208b2dcc020a83c670abdd519d137817e01336fec7700838010b5d649f9ea" name="epy" arch="noarch">
  <version epoch="0" ver="2022.12.11+git.1686460830.6b0e9fe" rel="bp160.1.3"/>
  <changelog author="mcepl@cepl.eu" date="1641643200">- Update to version 2021.10.23+git.1641627031.7bd659d:
  * .mkpkg -&gt; Makefile
  * Patch PKGBUILD</changelog>
  <changelog author="mcepl@cepl.eu" date="1641643201">- Update to version 2022.1.8+git.1641653565.c1f9b4e:
  * Update README.md: added AUR installation
  * Delete .mkpkg script</changelog>
  <changelog author="mcepl@cepl.eu" date="1650888000">- Update to version 2022.4.18+git.1650237821.50dd4fa:
  * Bugfix #57: Unresolved relative path for epub contents
  * Update dev env configurations
  * Add wkdict to supported dict backends
  * docs: define word setup (#55)
  * Add signal handler
  * Breakdown parse_cli_args into its own method
  * Remove body: from workflow
  * Move sponsor to FUNDING
  * Update changelog in README
  * Add debugger on parallel letter counting process
  * Fix process.join() issue for unstarted process
  * Bugfix #51: Stop/prevent scrolling at the end of ebook
  * Add 'force_wait' for letters counting process
  * Add library menu
  * Verbose loader
  * Fixed url parser with pathlib.PurePosixPath
  * CLI help interface
  * More explicit 'content_path'
  * Hotfix: image location reference issue
  * Hotfix: url meta window issue and update version
  * URL early support
  * Improve cli help interface
  * New implementation of cli args parser
  * Restructured tests
  * Add vim config
- Run tests</changelog>
  <changelog author="mcepl@cepl.eu" date="1664971200">- Update to version 2022.4.18+git.1664754357.6dd1860:
  * Update tests trigger path
  * Update tests and Makefile
  * Update tests
  * Restore and update setup.py for AUR pkg compatibility
  * Major refactor: breakdown epy.py script into package project structure for easier development Squashed commit of the following:
  * Setup debugger: debugpy
  * Revert "Add user setting for indenting paragraphs (#63)" Issue with inline style (italic, bold)
  * Add user setting for indenting paragraphs (#63)</changelog>
  <changelog author="mcepl@cepl.eu" date="1677931200">- Update to version 2022.12.11+git.1675870044.c7a87f3:
  * Fix versioning consistency
  * Bugfix #61 (#84)
  * Simplify logic
  * Bump version to v2022.12.11
  * Fix issue #73
  * Ignore .envrc
  * A suggestion for enhancing the Readme file (#69)
  * Update tests trigger path
  * Update tests and Makefile
  * Update tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1703073600">- Do not write non-deterministic .pyc files in tests</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1704888000">- Make buildable on Leap.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1717416000">- Actually, make buildable on Leap (remove unnecessary dependency
  on a package which is not in Leap).
- Add python3_fix_shebang_path treatment (bsc#1212476)</changelog>
  <changelog author="mcepl@cepl.eu" date="1717416001">- Update to version 2022.12.11+git.1686460830.6b0e9fe:
  * Deprecate setup.py
  * Try fixing #87 &amp; bump version
  * add speaker support for gtts-cli | mpv (#88)
  * Update AUR package name (#92)</changelog>
  <changelog author="Matej Cepl &lt;mcepl@cepl.eu&gt;" date="1742212800">- Don't make the build specific to some particular version of
  Python.</changelog>
</package>
<package pkgid="af045656f11f6ffb6b6836ca6cfa1c845b45974ffa61a559d1ea052a27b9305ca2cafce4949eb48cc41835a01c892b46b36ff311590ed60ad9eea0a00c9f3635" name="equalx" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="bp160.1.14"/>
  <changelog author="badshah400@gmail.com" date="1323691200">- Initial package (version 0.51)</changelog>
  <changelog author="badshah400@gmail.com" date="1372248000">- Update to version 0.6.0:
  + Corrected transparent background bug for latex
  + Corrected square brackets
  + Corrected quadratic formula from templates
  + Equation font size defaults to size 20
  + Empty text in equation editor shows information text
  + Solved minor bugs in output of latex log
  + Implemented zoom &amp; zoom slider
  + Preferences Dialog allows to show/hide Log
  + Latex output visible in Log Tab
  + Polished GUI
  + Now Preamble can be toggle from a button in mainwindow
  + Preferences allows to show/hide only the latex log tab
  + LatexEditor shows line numbers, same for the Preamble editor
  + Reported errors by latex output are highlighted in Equation
    editor and Preamble editor. A nice sign shows along the line
    number also
  + Fixed warnings
  + Some modifications to About Dialog
  + Fixed About Dialog links
  + Corrected "Remeber" in Preferences Dialog
  + Added class ConfigButton required for a polished GUI in the
    Modified tab "Commands" from Preferences Dialog
  + Added the GPL 3 License boilerplate to all remaining files
  + Added a check for the requirements (latex, dvipng,etc)
  + Commands paths in Preferences Dialog are now readonly - they
    can be changed only the "Change" buttons
  + Change buttons for the commands select only the specific
    executables (filters other files)
  + Added fg color, bg color, preview font size and mode in
    Preferences dialog which are saved in the settings
  + Added button "Reset Defaults" to the Preferences dialog and
    works
  + Removed Util function from defines.h and moved the Util
    functions in Util.h
  + Fixed a bug in Preferences dialog to set Font family and size
    for the equation editor
  + Corrected UpdateEquation and UpdateImage to call runCommand()
  + Added more environments: display, inline(which were before)
    and align and text. Select them from the Mainwindow and
    Preferences
  + Modified UI mainwindow and polished it for better smaller
    layout
  + Removed Latex log output and tabs from mainwindow. There is no
    need since the error parser is enough
  + Removed Parser and latex-template
  + Modified Zoom slider to show zoom level in a tooltip
  + Solved bug for find and highlight when dealing with
    transparent background color. If color is transparent than
    highlight in white
  + Fixed WidgetColorPicker.h to show real swatch transparent
    color
  + Fixed custom color selection in WidgetColorPicker
  + Modified foreground color combobox to not show transparent
    option (latex can not render transparent color)
  + Implemented a RenderEngine class to deal with the rendering
    and programs execution
  + Fixed RenderEngine
  + Added a nice preloader to show instead of the equation while
    the RenderEngine generates the files
  + Cleaned up some obsolete and unused code in MainWindow
  + Modified RenderEngine to not take care of latex exitcode. This
    is required so that we parse and display the latex errors
  + Changed preloader image with a nicer one
  + Functional preview of the generated image PNG
  + Modified RenderEngine to do check for the latex errors and
    stop if errors are found
  + Modified EquationItem to clear if no image is available.
    Equation item now shows a grab cursor (hand) if it is possible
    to drag it, normal cursor otherwise
  + Modified Mainwindow and Equation item in order to not be
    possible to drag empty equation
  + Mainwindow shows a busy cursor while the RenderEngine is
    running
- Drop equalx-fix-no-return-in-nonvoid-function.patch --
  corrected upstream
- Now requires libexempi-devel and libqt4 &gt;= 4.8.0 for building.</changelog>
  <changelog author="badshah400@gmail.com" date="1395748800">- Update to version 0.7.0:
  + No list of changes from upstream
- Add explicit Requires on ghostscript and poppler-tools (these
  would have been pulled in by texlive-latex anyway, but just in
  case)
- Add Requires on libqt4-sql-sqlite: required for working history
  and bookmark features
- Do not package COPYING: file is no longer present in upstream
  tarball
- Also supply and package .desktop file and necessary icons:
  introduces BuildRequires on desktop-file-utils and
  hicolor-icon-theme (additionally, /usr/bin/convert is used to
  generate some missing hi-res icons during %install, also needs
  ghostscript fonts)
- Package the resources dir in %{_datadir} so that equalx can find
  the necessary resources (e.g. symbols) at runtime.</changelog>
  <changelog author="badshah400@gmail.com" date="1395835200">- Update to version 0.7.1:
  + No list of changes from upstream
  + Build process changed: make install no longer does anything;
    use 'install' to manually copy generated binary to %{_bindir}
    instead
- Use desktop file shipped in upstream tarball
  + Drop external .desktop file
  + Add equalx-fix-desktop-file.patch: Fix icon tag in shipped
    desktop file and categories for compatibility with openSUSE
    defined ones; also fix incorrect Version tag usage
- Add BuildRequires on inkscape too, required for generation of
  proper hi-res png icons from svg icon file.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1430395200">- In factory, compile against QT5.</changelog>
  <changelog author="badshah400@gmail.com" date="1436097600">- Use inkscape instead of convert to generate the hires icons;
  convert messes up the icon image geometry for unknown reasons.</changelog>
  <changelog author="badshah400@gmail.com" date="1475409600">- Add manually created appdata file and install it.</changelog>
  <changelog author="badshah400@opensuse.org" date="1528804800">- Add equalx-adapt-headers-for-qt5_11.patch: Include additional
  header files where needed for compilation against Qt 5.11
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  take care of these for newer releases.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Replace inkscape by rsvg-convert: reduces build time
  dependencies and works without GUI fixing build failures on
  openSUSE &gt;= 1550; BuildRequires: rsvg-convert (rsvg-view for
  Leap 15.1).
- Use %license for LICENSE file.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="f0f87acd454349152854e5dfaf8c3ca97b9b8f8ce55f4528e8e4c98c7b420ae9fab4d5ac573b1efecdab8602c57c7ad32b5bdc5665eab772cdd4bdf26b6b3786" name="erdtree" arch="x86_64">
  <version epoch="0" ver="3.1.2~0" rel="bp160.1.13"/>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1680264000">- Update to 1.7.1:
  * Fix issue where not-existent directory as cli arg causes
    infinite loop #107</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1681214400">- Update to 1.8.1:
  * Fix some typos #110
  * Add clap requires to flags that depent on --report #111
  * Refactor tests: move --no-config to mod::run_cmd #112
  * Prevent panic when --prune is used with --glob which results
    in empty match set #116
  * Add ability to take glob patterns from stdin #114
  * Refactor/node and support hard link detection on Windows #118
  * Support colorless output when redirecting/piping stdout;
    also provide --no-color option #120
  * Remove ansi escapes for default icon #122</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1682769600">- Update to 2.0.0:
  * Regular expressions #130
  * Unix permissions #132
  * Force color #135
  * Show hardlinks without double counting file size #136
  * Regular expressions and globbing with file-type #137
  * Truncate output #138
  * Inverted tree layout #139
  * Binary has been renamed from et to erd in order to
    address the following issue regarding name collisions with
    other programs: #23</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1685275200">- Update to 3.0.0:
  * Added support for owners and groups for the ls -l-like -l,
  - -long view (Unix).
  * Edited the default fields shown in the -l, --long view to
    reduce clutter; made the removed fields optional (Unix).
  * Added support for various other disk usage metrics:
    blocks (Unix), word-count, and line-count.
  * Added a progress indicator.
  * Added comparators for sorting by time accessed, created, and modified.
  * Added support for specifying a custom time format</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1685361600">- Update to 3.0.1:
  * Fixed issue where empty directories were automatically being pruned
    despite not opting into --prune.
  * Fixed issue where searching via globs or regex doesn't work when
    user has a config file.
  * Added exit codes to erdtree.
  * Progress indicator now acquires a lock to stdout reduce likelihood
    of printing the progress-text being a bottleneck.
  * Some code-cleanup.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1687521600">- Update to 3.0.2:
  * Fix segmentation fault when invalid group or user #193
  * Update deprecated Nerd symbols #192
  * Change CJK and emoji block icons #194</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299200">- Update to 3.1:
  * Multiple configs with .erdtree.toml
  * Increased performance with --suppress-size
  * -x, --one-file-system
  * Support for NO_COLOR
  * Inverted flat layout
  * Aliases: atime, ctime, and mtime
  * ctrlc handler to restore cursor if progress indicator is enabled
  * .erdtreerc will be deprecated by v3.3 in favor of .erdtree.toml.
    Please be sure to migrate by then and be sure to visit the Changelog
    for further details about .erdtree.toml and the new release.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299201">- Update to 3.1.1:
  * Fix deadlock issue #214</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1688299202">- Update to 3.1.2:
  * Fix loading .erdtree.toml on Windows #218
  * Fixed race to print #220</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1710936000">- Filter dependencies for vendor tarball</changelog>
</package>
<package pkgid="b856d4bef831b449e9f6e397c53836cc28491dde90a2f9ccc90cc88cd4634f8bbdafd0b2580594f248d3041e2a5f25d2a8b64bb749de6872da0c7602b3aca446" name="erfa-devel" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="bp160.1.11"/>
  <changelog author="badshah400@gmail.com" date="1505304000">- Update to version 1.4.0:
  - ERFA 1.4.0 adds the eraVersion and eraSofaVersion functions to
    determine the installed version of ERFA (and the SOFA version
    it is derived from).
  - ERFA 1.4.0 includes some bug fixes contributed to ERFA after
    1.3.0 but before 1.4.0. These were incorporated (with
    modification) into SOFA "20170420" (without attribution) and
    hence these are not differences between ERFA and SOFA
    (gh#liberfa/erfa#40, gh#liberfa/erfa#41).</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1568203200">- Update to version 1.5.0:
  * Based on SOFA 20180130</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1572436800">- Update to version 1.6.0:
  * Based on SOFA version 20190722.
- Running bootstrap.sh before configure is no longer needed; also
  drop automake, autoconf, and libtool BuildRequires.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1577793600">- Update to version 1.7.0:
  * Based on "20190722" except for the added `eraVersion`,
    `eraSofaVersion`, and leap second functions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1600516800">- Update to version 1.7.1:
  * Based on SOFA version 20200721.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1614254400">- Update to version 1.7.2:
  * Incorporating big fixes from SOFA version 20210125.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1620475200">- Update to version 1.7.3:
  * Based on SOFA 20210125_a.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1621339200">- Update to version 2.0.0:
  * Based on SOFA 20210512; there are no differences except for
    added eraVersion, eraSofaVersion, and leap second functions.
  * Three new functions added in SOFA are added to ERFA as well.
  * Required to explicitly include erfam.h to use its macros
    defining constants, etc. Including just erfa.h (or
    erfaextra.h) will no longer includes erfam.h implicitly.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1697630400">- Update to version 2.0.1:
  * Based on SOFA "20231011".
  * Added capability to modify at runtime the leap seconds assumed
    for various calculations, accessed via the eraGetLeapSeconds
    and eraSetLeapSeconds functions
- Switch to meson for builds as recommended by upstream; add
  BuildRequires: meson.
- Drop erfa-devel-static package: no longer built by default.
- No longer pass -ffat-lto-objects as static lib is not built.</changelog>
</package>
<package pkgid="b50fb6dfd079970ad83f218f4250f92e9ba058b1617ecc15cfe003c2ef1ebe2d78b6383a250002536e9f19ea912a5df4ba46f076bf4a0949f116b554bc2732fb" name="erlang" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="c16a1e9755afa92bcf3b3b6e3507415e1019677a3cd06d14b8afbaff7bc9cab9757134179becd7ddae71394227cd7c6a61202b4cc9cd494bb0ebb95bb3e263eb" name="erlang" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="21abdf28d0dfaf947d97aa5b96524c8c0b3f752cfccc1839fb8c2796b3369e5cd72654506f87c5100b6ae5c9e01fdd304140f185e98656d490bd0b3249fef067" name="erlang" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="c8d54a28b28e6d0cde8a49271cb109e0afda431930e8fde8d361c0fdcad21ed0af91ce18628f5b9a362167f606fe0dbf95602c7310802f04c5ac3bcf5eebcd84" name="erlang" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="0c9fee6791b88f40ea64b661e640582688e2e3316050a4a6868e953b38dabbe69462dc3e327b7e218cb466c82ef34d014809cad5d1e9d1c9dbff08e85863f9c1" name="erlang-cf" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="160000.2.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1610539200">- Initial version</changelog>
  <changelog author="dmueller@suse.com" date="1677499200">- switch to disabled services for version setting to comply with
  factory policy</changelog>
  <changelog author="sflees@suse.de" date="1716379200">- We use a linked copy of this package in some SUSE products and
  to do so correctly, we need to ensure a minimum of erlang 26
  Leap will soon get a versioned copy of erlang26 as well</changelog>
</package>
<package pkgid="dc23b68eb2bbdc58e609975313524f10f904242c158c2832050f4805a0a7b9a6e32ff58a9c079ebee36fcd5c855a9459fefab8fb0540d87d49c5f7e3883df6e0" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="c172dfaf0c1ee383890e245e26e07a49baba3bfb1c33c8edb391895d8c137da9e91c547537d4042cd54d6a2a67f4ca70fab019bde2049a86f7c8aeaeb740bfd5" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="3512aabdf79ab6b95087569f569ebd53ffb983b7e4484aceceda0edc0573b788fe35781dda1d4d3a76a17a46667c71e84bf8d1ea19cbe13a598d82cb72d38312" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="3db62340732999ac684186d11ab36d5f4001ac358e2911b01e7f5cc0dd436a0d43365d140c630ba8b454340fea0a65705c7a523bfe0ff19ea30230d59f849497" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="263282b5b53f43f9cc32a70e5f1a45f660fa9a2759ae2b12b9964827042662b0c39906f0f5dda83127bd0ec3a5b5cc8ede582575f4fb4a194ea341cbada66468" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="8db42c65f09b4a989023eaf32f8fca1245e9e49e9d57d5858dce7df4c847082327fc1539a2c58e68badc41a21d74fa3fb0dcf1adefcaa025bb2400db95998e34" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="0a855e1a7e547e9d0bc83ee46b979f1d3ad9c5e0e45432bf6312ad935c5b26b234da371a2d1710c018f154db95f67871420f7986f763305360f2d8643f90efd2" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="af372607a6f7149a0324997cc5f3a9b0211714bc66b5e20746f784d29036ab6bbca04970d130db9e052f9106f7f42a90829a629a38c97ca75a9253da66af4a35" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="f5119edf7a9ecd3fc93b03bf3c0f9d908056cf56492d011c252ccfda53b817a6f5c13cc61fde24f203f7e718e0e7b240419aa0f1f9bbe814b98cc4be427dd069" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="739271c41dd719aaa67c066430e1ae423ea5ed11c5d4370e8e00d0753e7246ef751b52dfca1778daf58ce5e430ca3c5e18209814e713945a10141b9ff69ca63d" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="f18c1cb7c439e6f7cc07464ef8c15221039c36767e2ef3803cb11d3e102d8ab269a2760ca92ff412bf26e64e3b1d558d18e9f6d4813190df1ce1365ae55ef42c" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="72ad68bf3bacbb0951d720f421cab357801cccd352baa0e051ac50b9b92e0ee511211dcfac03d8ba3bdf071f88b09bffff930aa080f55cc5919f6a13371432a0" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="4aea7f11e74e2100cb498d32defd70c86aaab449deca8c63dc1c6193a000bf3c0425237522fa0e725ab3c0d93ed90665b20d95609ef1fb56bc83565fbcb744b2" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="a1f7dbd83c98d0774375d5f36d926f9f8921184105ef8ed0b0b70f5fc074b330f2dbd1d27746c4651df351f48c14fec632e621eaf0fd7d71df8b065487f28af5" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="c5bfbe4e4800a38f0b09a338ce5ee5f7429dda021aa852bd7a40b82688902ebaf364cfe1d90010cd9ee9f5f9ddf34465bf5a17e8e78fcfec261968403cf0ff8f" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="e955bdb18874949ada0e3a1f23f8244dcb2d30283a59e28fd99bb361cab6cc9a7fa50555f94c6d520341565f49920b40a7a67360e5ba8b3319d56d8d8ea072f2" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="b331a2d0ceea6de5d46179296c8a5c7f5af9897ded377baab0506cb63b4c6214a37f18833e61c2ba6082775e7a075560d1739eeac4dcb9903abd9478bfd49613" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="3fdc2759e024fa3cc324359470e34e5b2426a8fb9080ad1ea096ba27a2310a70695f617f5366ba2ee7f67d77de55f58593c9335e372f5e1ae8688d704a109e6e" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="6c4cab35ce6be2a3ce5657c0ec149be955ee08b401007e8a5a4a5179fdf8d8dd91bc82253b3fd7fb589e7dd011ef34936f94912705cfcf33e7eadaee684467ca" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="2fdda3ca0c168c203b2d82ff70ef2d1cd1a4b0b07184cbde18e98962789788c727bbf3ee9c90dca3d3f8cfdfa3b7f3f205481d825d10e78008ede5cc178af983" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="6c793b8510b2a3338765fb06822d7763c78157a38fb52ee69a57bf4cc65bb6fe0d843a96b1b83429429b794610d4fbbdacda45f2b1ac0fd7722b2acd977b4321" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="fb55abbe32380e5174c9fa3bf8843ca72f2f4f46a9a851d53576e1e452c9e0def951a69818838b48bab8de4f9e557029c859bf06abebb09ae00e5e898316be50" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="a0be9a4e6616f41cb95dbb4b448b4350f3ac6d1d641988aadbbef0550b36610fe6beb3d25a5fb8b2a5a4b841020b51ea805e44e81296214a3c00a0b87fd78f1a" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="cedf6ddd4519add91e974e3df8f6b9dbf73c1e56b8fc2ecdf8d8d4ef1d527260a115514ab63bd30002df3ba78a43a220ee8ed9f6c47a6682851a2b00055d8f83" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="d8d47abea2cc32958bdef52f156519f4884c24ec18fab5018c4c21f8cb42d078009d9e1d8df91027f135f99b916c6b8055b9922afc53e55411108e4e3590fbe7" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="c54a9aca12e0300b817e05b4dccb5dfc79fc9a9979a58e202db495d7a9f1c4a3ac99c86891f4c531aa5890e90dddd2900dc0c9f167b487c0e629949eafb7d1b7" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="1f117380152ec10307170f1ca23b7505de3462e3d0ec37c4bc8f1cc88717593343d43aa6388e0900cef9e3fe563ed92b5689adc2e6a43ade509834cc83cbbfa5" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="436a8658b665d395d66a35fdadc5337cde3b741bdc0f4b92a59b187de16cfa740be563eda82f3260d63dee2c753e80832ed4144fd1715ca55a6f35c3005d597c" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="76e414e2776fc9aea6700f6d46969d69c466a366e8419ba282d914f16953cb77dc6beae062a7d36e945f45f3505cbb840346d89926766917cb9eaf910646f626" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="3c5b2617a6e996648c8baf314f608fbdfc0a181761d122b4e8b4bffbb56b614755e68b8369ec0b8b8cba2036f7b8588743a84fc1e2a560b75847dd6f4932158c" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
</package>
<package pkgid="b30b9575651744a1ba3b37336bb9d226fedb737195da5ebb491f412b84f4a11a5a1a7dd5cc620d782df73c2244e805bc0dd5145a89255070086dfbf80e231616" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.4.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
</package>
<package pkgid="d77dfdf160310270c5fb1987217e2b265247812f05e7632aabe5a8dc8456ea685c7beee29e336fe12475fa15ddd25e34c03f8c9c93aa60a6946b4f7f998a2bfa" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.5.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
  <changelog author="sflees@suse.de" date="1765800000">- Update the ssh component to the latest in the maint-27 branch
  * Multiple fixes for Excessive Resource Consumption
    (bsc#1249469, bsc#1249470 bsc#1249472, CVE-2025-48038,
    CVE-2025-48039, CVE-2025-48040)
  * Other Minor fixes
  * feature-fix-update-ssh-stack.patch</changelog>
  <changelog author="sflees@suse.de" date="1776254400">- CVE-2026-32144: missing signature verification can cause OCSP
  authorization bypass and information disclosure (bsc#1261734)
  * fix-CVE-2026-32144.patch
- CVE-2026-28808: incorrect authorization can lead to
  unauthenticated access to protected CGI scripts (bsc#1261728)
  * fix-CVE-2026-28808.patch
- CVE-2026-28810: predictable DNS transaction IDs can cause DNS
  cache poisoning (bsc#1261726)
  * fix-CVE-2026-28810.patch
  * fix-randomize-inet_res.patch (Added to make backport possible)
- CVE-2026-21620: remote arbitrary read/write via TFTP relative
  path traversal (bsc#1258663)
  * fix-CVE-2026-21620.patch
- CVE-2026-23943: denial of service due to improper handling of
  highly compressed data in Erlang OTP ssh (bsc#1259682)
  * fix-CVE-2026-23943.patch
- CVE-2026-23942: path traversal vulnerability in Erlang OTP
  (bsc#1259681)
  * fix-CVE-2026-23942.patch
- CVE-2026-23941: HTTP Request Smuggling in Erlang OTP
  (bsc#1259687)
  * fix-CVE-2026-23941.patch</changelog>
  <changelog author="sflees@suse.de" date="1776686400">- jinterface: Allow to build determenistic OtpErlang.jar
  (bsc#1262288)
  * fix-determenistic-jar.patch</changelog>
  <changelog author="sflees@suse.de" date="1777464000">- CVE-2026-32147: erlang: Improper Limitation of a Pathname to a
  kRestricted Directory ('Path Traversal') in SFTP chroot
  (bsc#1262503)
  * fix-CVE-2026-32147.patch</changelog>
  <changelog author="sflees@suse.de" date="1780401600">- CVE-2026-42789: `public_key` application accepts non-CA certificates
  as intermediate issuers and this enables chain forgery (bsc#1266449)
  * fix-CVE-2026-42789.patch
- CVE-2026-42790: Name Constraints and Subject CommonName fallback in
  TLS hostname verification allows for certificate forgery by MITM
  attacker (bsc#1266466)
  * fix-CVE-2026-42790.patch
- CVE-2026-42791: OCSP response verification in the `public_key`
  application does not check the validity period of the OCSP responder
  certificate and allows for OCSP response response forgery (bsc#1266448)
  * fix-CVE-2026-42791.patch
- CVE-2025-4748: erlang,erlang26: improper limitation of a pathname
  may lead to path traversal (bsc#1244642)
  * fix-CVE-2025-4748.patch</changelog>
</package>
<package pkgid="f48ebaec39ffac54a300091eb07a400e43bb4bb6448a1667375bb3383f78ccceac5618a3437f23beda82fdf2536579d3fd1a36988fa2818aabdce6ff64ec978d" name="erlang-erlware_commons" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="160000.2.2"/>
  <changelog author="nkrinner@suse.com" date="1367236800">- Initial package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1397649600">- Version 0.11.0</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1403006400">- Fix build for 17.0</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1610539200">- Update to version 1.4.0:
  * set TERM os var to xterm to get cf to not drop color in logs
  * update readme status badge and CI branch
  * move to github actions for CI
  * Better comment wording as suggested by @ferd
  * Avoid a warning on Erlang/OTP 24
  * Replace ericbmerritt links in README
  * Fix spelling/grammar in signatures.md
  * Allow for extra hyphens in pre-release build version
  * fix ec_semver:pes test to not ignore alpha versions</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1610798400">- Fix running unit test</changelog>
  <changelog author="mvetter@suse.com" date="1648728000">- Update to version 1.6.0:
  * Support Unicode string formatting
  * Tweak CI versions (add 24.0, move 23.2 to 23.3)
  * Keep symlinks in copies
  * Improve on license-related information
  * Solve dialyzer warnings while approaching expected behaviour
  * gitignore test-generated elements
  * Have CI working with extra checks
  * Remove dead code</changelog>
  <changelog author="dmueller@suse.com" date="1677412800">- use disabled services to be compatible with factory policy</changelog>
  <changelog author="lubos.kocman@suse.com" date="1695124800">- Correct license to Apache 2.0 and MIT
  This project contains elements licensed with Apache License, Version 2.0,
  as well as elements licensed with The MIT License.</changelog>
  <changelog author="sflees@suse.de" date="1716379200">- We use a linked copy of this package in some SUSE products and
  to do so correctly, we need to ensure a minimum of erlang 26
  Leap will soon get a versioned copy of erlang26 as well</changelog>
</package>
<package pkgid="41db156ace2b2623518ecb81cb4a7675223ae03cf2d674dcc2cd315d257aae34773a2f4a23aa90f30da24c5c4c7675e44412be44369290557efca08fbdd46917" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.2.2"/>
  <changelog author="sflees@suse.de" date="1706011200">- Disable rpmlint tests on SLE-15 where they currently fail</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when such tracing is
    not enabled by any trace session.
  * erts: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * erts: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * erts: The m:zip module has been updated with support for:
  * kernel: A faulty assertion was corrected in the prim_tty
    module. This assertion could trigger when invalid UTF-8 was
    read from stdin just as the mode was changed from unicode to
    latin1.
  * kernel: Opening a disk_log file and combining head_func with
    rotate options did not work.
  * kernel: Fixed an error info printout for
    erlang:is_process_alive/1 on non-local pids.
  * kernel: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * kernel: Fixed a deadlock when an application crashes during
    startup and log messages were sent to standard out. Logger
    would fail to print the messages to standard out and instead
    print them to standard error.
  * kernel: The -proto_dist init parameter will no longer be
    ignored when specified multiple times. It will now log a
    warning and use the first specified value.
  * kernel: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * kernel: Added functions getservbyname and getservbyport to the
    net module.
  * kernel: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * kernel: The function socket:i/0 now uses the m:net module
    (instead of the m:inet module) for service translation.
  * kernel: A boolean option read_ahead has been implemented for
    gen_tcp, default true, to facilitate not reading past (caching
    data) the end of a packet.  In particular, for kTLS, caching
    data could read in data that was supposed to be decrypted by
    the platform's network stack, before crypto parameters could be
    activated.
  * syntax_tools: The documentation for syntax_tools has been
    polished after the migration to the new documentation system.
  * asn1: Fixed a cosmetic but harmless issue with the ASN.1
    compiler passing on the undec_rest option to the Erlang
    compiler.
- Changes for 27.0.1:
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check  for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability.  If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * compiler: One of the compiler's optimization passes would get
    very slow when compiling certain modules. The compiler will now
    automatically disable that pass for input that would trigger
    the slowdown.
  * compiler: Fix +deterministic to work properly with
    documentation attributes.
  * stdlib: Fix so that missing -doc({file, File}) files only
    result in a warning and not an error.
  * stdlib: Fixed m:json bugs, json:encode_key_value_list/2 did not
    generate arrays and json:decode/3 did not invoke the user
    callback for 0.
  * edoc: Fix broken makefile dependency when building HTML
    documentation.
  * erts: In rare circumstances the JIT could do an unsafe in-place
    update of a tuple.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * erts: Fix so that the options to enable Transparent Huge Page
    alignment of the Erlang VM executable are only applied to the
    Erlang VM and not other native programs such as erlc and
    dialyzer. This bug was introduced in Erlang/OTP 27.0.
  * erts: When [*no time warp mode*](time_correction.md#no-time-
    warp-mode) was enabled, a smaller Erlang monotonic time could
    be read than a previously read time, i.e., breaking the
    monotonic property. The runtime system will abort when
    detecting an issue like this since OTP 24.3.4.17 and OTP 25.0.
  * erts: When calling trace:function(Session, _, true, [meta]) the
    meta tracer was incorrectly set to be the calling process. Now
    it's set to the session tracer as expected.
  * kernel: Polish the m:logger documentation.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1732968000">- Changes for 27.1.2:
  * stdlib: With this change, uri_string:normalize assumes empty
    path (do not crash) when no path is provided in the URI map.
  * stdlib: Fixed spec for json:format/3.
  * kernel: A bug has been fixed where receiving an SCTP message
    with gen_sctp could waste the first fragments of a message and
    only deliver the last fragment.
  * kernel: An boolean option non_block_send for SCTP, has ben
    added to be able to achieve the old behaviour to avoid blocking
    send operations by passing the OS network stack error message
    ({error,eagain} through.
  * common_test: With this change, jquery and tablesorter licenses
    are added to COPYRIGHT file. Also tablesorter is updated to
    version 2.32.
  * ssl: Refactor trying to also make some optimizations introduced
    a bug in signature algorithms checks in OTP-26.2.1. This could
    manifest itself in not being able to negotiate connections
    using certificates needing to use some TLS-1.2 compatibility
    legacy signature schemes.
  * ssl: Correct timeout handling for termination code run for own
    alerts, so that intended timeout is used instead of falling
    back to OS TCP-stack timeout that is unreasonably long on some
    platforms.
  * ssl: Fix assertion so that works as intended. This could result
    in that some TLS-1.2 clients would fail to connect to the the
    erlang server.  Bug introduced in OTP-27.1.1
  * erts: A bug has been fixed where receiving an SCTP message with
    gen_sctp could waste the first fragments of a message and only
    deliver the last fragment.
  * erts: An boolean option non_block_send for SCTP, has ben added
    to be able to achieve the old behaviour to avoid blocking send
    operations by passing the OS network stack error message
    ({error,eagain} through.
  * erts: The call gen_tcp:send/2 could hang indefinitely despite
    having set the send_timeout option for the following
    unfortunate combination of circumstances:
  * erts: In rare circumstances, in code that matches multiple
    tuples, the JIT could generate code that would raise a badmatch
    exception even if the given tuples were correct.
  * erts: Fixed beam crash that could happen if resetting call_time
    or call_memory trace counters of a function while it is called.
    Bug exists since OTP R16.
  * ssh: With this change, a race condition is removed from ssh
    client connection setup procedure.
  * ssh: With this change, ssh:connect is not affected by presence
    of EXIT message in queue.
  * ssh: With this change, ssh appends {active, false} option after
    socket options received from user - so that false value is
    always used.
- Changes for 27.1.1:
  * public_key: Introduction of verify_fun/4 unfortunately
    introduced an argument switch for some specific path validation
    errors so that verify_fun/3 could under these circumstances be
    called with a DER cert instead of a decod cert, also in this
    situation the verify_fun/4 would have the certificates in
    reverse order.
  * public_key: Do not hide crypto badarg reason, this error
    handling enhancement facilitates debugging. These kind of
    runtime errors are not documented and should never be relied on
    for matching, they are intended for catching input errors
    early.
  * stdlib: Remove whitespace stripping of returned binaries in
    json:decode/3.
  * stdlib: Fix zip:unzip/2 to not crash when extracting zip files
    with garbage in the Zip64 extra header. This bug was introduced
    in Erlang 27.1 and has so far only been seen on some archives
    creates by MS Excel.
  * stdlib: With this change, shutdown procedure handles a race
    condition between supervisor executing a shutdown and child
    process termination from other reason.
  * common_test: With this change, HTML reports include jQuery
    version 3.7.1.
  * ssl: Starting from TLS-1.3 some server handshake alerts might
    arrive after ssl:connection/2,3,4 has returned. If the socket
    is in active mode the controlling process will get the alert
    message, but passive sockets would only get {error, closed} on
    next call to ssl:recv/2,3 or ssl/setopts/2. Passive sockets
    calls will now return  {error,  error_alert()}  instead.
  * ssl: Servers configured to support only version (pre TLS-1.2)
    should ignore hello version extension, as it is an unknown
    extension to them, this will result in that new clients that do
    not support the old server version will get an insufficient
    security alert from the server and not a protocol version
    alert, this is consistent with how old servers not able to
    support higher protocol versions work.
  * erts: On Windows, successive failed socket calls caused socket
    to become "uninitialized".
  * erts: The socket framework fails to start on a IPv6-only
    Windows machine.</changelog>
  <changelog author="dmueller@suse.com" date="1733400000">- drop systemd_requires, see
  https://en.opensuse.org/openSUSE:Systemd_packaging_guidelines#Runtime_requirements</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1733832000">- Changes for 27.1.3:
  * public_key: If both ext-key-usage and key-usage are defined for
    a certificate it should be checked that these usages are
    consistent with each other. This will have the affect that such
    certificates where the ext-key-usages is marked as critical and
    the usages is consistent with the key-use it can be considered
    valid without mandatory application specific checks for the
    ext-key-useage extension.
  * public_key: Handle decoding of EDDSA key properly, when
    decoding a PEM file that contains only the public EDDSA key.
  * erts: gen_udp:send on domain local can leak inet_reply
    messages.
  * erts: net:getifaddrs does not properly report the running flag
    on windows.
  * compiler: In rare circumstances, the destructive tuple update
    optimization could be applied when it was unsafe.
  * compiler: In rare circumstances involving appending to multiple
    binaries, the compile could emit unsafe code that would crash
    the runtime system.
  * ssh: With this change, ssh connection does not crash upon
    receiving exit-signal message for an already terminated
    channel.
  * kernel: On windows the socket:recv could return with success
    ({ok, Data}) even though not all data had been read.
  * kernel: gen_udp:send on domain local can leak inet_reply
    messages.
  * kernel: Failure to create an UDP IPv6 socket when inet_backend
    = socket with certain IPv6 socket options.
  * kernel: net:getifaddrs does not properly report the running
    flag on windows.
  * ssl: Avoid generating an internal alert for case that should
    have been an orderly shutdown by the supervisor.
  * ssl: If present, extended key-usage TLS (SSL) role check (pk-
    clientAuth, pk-serverAuth) should always be performed for peer-
    cert. An intermediate CA cert may relax the requirement if
    AnyExtendedKeyUsage purpose is present.
  * ssl: Back port certificate_authorities option for TLS-1.3
    servers to pre TLS-1.3 servers to enable them to disable the
    sending of certificate authorities in their certificate
    request. This will have same affect as the the TLS-1.3 server
    option although it is handled by a different mechanism in these
    versions, where the functionality is described to be more of a
    guidance, although some pre TLS clients have proven to make it
    mandatory as in TLS-1.3 extension handling.
  * common_test: With this change, cth_surefire hook module handles
    group path reduction for a skipped group. This fixes a bug
    manifesting with improper group path for a group executed after
    a group which was skipped.
  * common_test: With this change, prefix option can be specified
    in cth_conn_log option list. Option allows to specify how much
    of additional information is added in raw log output.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1747656000">- Allow disabling building documentation
- Disable building documentation by default on s390x: the
  pre-built ex_doc has a different endianess, and the build
  fails (bsc#1242999)</changelog>
</package>
<package pkgid="a9a79d7659f0c041356820b9dbac8a91d0a984a5bab42937a3265263b1f52014a1033579bcbbd31473403bf482b4278ec752f56056dd49ab8c0810029e3d4e7f" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="27.1.3" rel="160000.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sflees@suse.de" date="1713268800">- Changes for 26.2.4
  * asn1: An ASN.1 module that contains named BIT STRING values
    would fail to compiled if both the BER and JER
    back-ends were enabled.
  * Compiler: In rare circumstances, the compiler code generate
    unsafe code for a bit syntax match.
  * Compiler: In rare circumstances, binary matches that were
    supposed to succeed failed.
  * Compiler: Fixed a bug where a fun's environment could be
    overridden by an argument in some cases.
  * Crypto: Fix building with --enable-fips with OpenSSL 3 on
    MacOS.
  * Debugger: Guards with nested record expression could wrongly
    evaluate to false.
  * Diameter: Reduce the impact of calling service_info by not
    counting the binaries (on the heap) info, This is done
    by introducing an option, bins_info, which controls
    this.
  * erts: Fixed CPU quota determination for cgroup version 2
  * erts: Fix faulty reduction counting in exiting process which
    could cause it to do unnecessary yielding.
  * erts: Fix bug in re:run/3 where if an invalid UTF-8 subject
    was given, re:run could get stuck in an infinite loop.
    Bug was introduced in Erlang/OTP 22.1.
  * erts: On AArch64 (ARM64), Erlang code using bit syntax
    construction compiled using Erlang/OTP 24 could crash
    the runtime system when run in Erlang/OTP 26.2.3.
  * erts: Calling erlang:trace/3 with first argument one of
    ports, processes, existing_ports, existing_processes,
    existing or all, could cause emulator crash if a dirty
    scheduler was executing a simultaneous trace action.
  * erts: Fixed an integer overflow when the monotonic time unit
    reported by the operating system was greater than 10
    and lower than 100 microseconds.
  * erts: Fix option reuseaddr for FreeBSD 14
  * erts: When a traced process executing on a dirty scheduler
    received an exit signal, the dirty scheduler could use
    the wrong thread specific data which could lead to a
    crash.
  * erts: Fixed a more or less harmless bug that caused time
    correction of Erlang monotonic time to become slightly
    off on Windows platforms when QueryPerformanceCounter()
    was used as OS monotonic time source.
    erlang:system_info(os_monotonic_time_source) now also
    returns information about used resolution which not
    always corresponds to the resolution of the OS
    monotonic time source.
  * erts: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * erts: Fix bug on Windows where "Unknown event: 2" would be
    printed to the console.
  * erts: Checks for monotonicity of monotonic time have been
    improved so that Erlang and OS monotonic time are
    checked separately.
  * erts: For severe errors, when the `socket` module terminates
    the Erlang VM, now an erl_crash.dump is produced, to
    facilitate post mortem debugging.
  * kernel: When using IPv6, classic gen_udp failed to add (group)
    membership (drop was used instead).
  * kernel: The check in inet_res of the RD bit has been relaxed
    slightly.
  * ssh: With this change, owner and group file attributes
    decoding is fixed and results with value of integer
    type.
  * ssl: Cleanup and close all connections in DTLS when the
    listen socket owner dies.
    Improved IPv6 handling in DTLS.
  * ssl: Fixed a crash in dtls accept.
  * stdlib: Attempting to use the maybe construct in a macro
    argument could crash the compiler.
- Changes for 26.2.3
  * otp: Quote uninstall path in registry when installing on
    windows.
  * compiler: In rare circumstances, an unsafe optimization could
    cause the compiler to generate incorrect code for list
    matching.
  * compiler: Fix the compilation server to restart if the
    applications in its lib dir changes inbetween erlc
    invokations.
  * crypto: Fix compile error when OPENSSL_NO_DES is defined.
  * crypto: The function crypto:pbkdf2_hmac will no longer block
    the main schedulers. If the iteration count or block
    size parameters are such that the function is likely to
    take a long time to execute, the function will be
    scheduled to run on a dirty CPU scheduler.
  * erts: Fixed compile warning in erl_nif.c for gcc-13.
  * erts: Fix C++ compile error for macros enif_select_read and
    friends.
  * erts: Fixed a name clash on Solaris that prevented the JIT
    from being built.
  * erts: Fix termcap detection on solaris.
  * erts: Fix heap corruption bug that could cause runaway memory
    consumption due to circular offheap list at process
    exit. Other symptoms may also be possible. Bug exists
    since OTP 25.0.
  * erts: Do not clear tracing in old module instance if load
    fails with 'not_purged'.
  * erts: When exceeding the `max_heap_size` limit in a garbage
    collection initiated by some bit syntax operations, the
    process would not always terminate immediately.
  * erts: The code server could be hanging if a module with
    on_load function was loaded at the same time as another
    module was purged using erlang:purge_module directly.
  * erts: A process optimized for parallel signal delivery could
    under some circumstances lose wakeup information. That
    is, the processes was not woken up to take care of the
    signal, so the signal would not be taken care of until
    the process was woken by another signal. Only processes
    configured with message_queue_data set to off_heap
    utilize this optimization.
  * erts: Fix segfault when generating crashdump containing a fun
    places in persistent_term storage.
  * erts: By default the JIT is disabled on Intel Macs, because
    of annoying poups on macOS Sonoma. It is now possible
    to explicitly enable the JIT on Intel Macs. Here is
    how: ./configure --enable-jit
  * kernel: Fix performance bug when using io:fread to read from
    standard_io. This regression was introduced in OTP
    26.0.
  * kernel: A bug in the code server could cause it to crash in
    some concurrent scenarios. This bug was introduced in
    26.1.
  * kernel: Fixed gen_udp:open/2 type spec to include already
    supported module socket address types.
  * kernel: Fix reading of password for ssh client when in
    user_interactive mode.
  * odbc: Use spec for API doc
  * public_key: Hostname prefix with X number of dots should not be
    accepted.
  * ssh: With this change, acceptor_sup is not started for ssh
    client as it is not needed in that role.
  * ssh: With this change, more secure algorithms are preferred
    by ssh and documentation is updated to reflect that.
  * ssh: With this change, KEX strict terminal message is
    emitted with debug verbosity.
  * ssh: Fix reading of password for ssh client when in
    user_interactive mode.
  * ssl: ssl:prf/5, will start working instead of hanging in a
    TLS-1.3 context if called appropriately. Note that the
    implementation has changed and in OTP-27 a more
    adequate API will be documented.
  * ssl: Server name verification didn't work if a connection
    was made with IP-address as a string.
  * ssl: The fallback after "dh" ssl option was undefined was to
    get "dh" from ssl options again. This is clearly wrong
    and now changed to the documented fallback "dhfile" ssl
    option.
  * ssl: Correct default value selection for DTLS. Will only
    affect users linked with really old version of
    cryptolib library.
  * ssl: Adhere elliptic curves with RFC 8422 pre TLS-1.3, that
    is Edwards curves are added to curves that can be used
    for key exchange, and documentation and implementation
    of eccs/0,1 are aligned.
  * ssl: Improve alert reason when ecdhe_rsa key_exchange does
    not have any common curves to use
  * stdlib: The help texts shown by argparse will now display
    sub-command arguments in the correct order.
  * stdlib: Clarified the argparse documentation regarding the
    user-defined help template.
  * stdlib: Fix shell expansion to not crash when expanding invalid
    using invalid atoms.
  * wx: Add option to silence wx depracation macros.
- Changes for 26.2.2
  * common_test: Fix how CT finds Erlang/OTP releases for compatability
    testing. This functionality is only used to test
    Erlang/OTP.
  * erl_interface: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: 32-bit runtime systems on most Unix like platforms
    could crash if a BIF timer was set with a huge timeout
    of more than 68 years into the future. In order for the
    crash to occur, the huge timer (at a later time than
    when it was set) had to become the nearest active timer
    set on the specific scheduler on which it was set. This
    could not happen on a system with only one scheduler
    since there would always be shorter timers in the
    system.
    Setting a timer larger than 49 days on Windows could
    under rare circumstances cause the timeout to be
    delayed.
  * erts: Fix bug where the system installed openssl/md5.h would
    be confused with the vendored md5.h.
  * erts: The JIT has now been disabled on x86 Macs to prevent
    annoying the "verifying shm-xyz" popups introduced in
    MacOS Sonoma.
    ARM Macs are unaffected.
  * erts: Garbage collection of a process on a dirty scheduler
    could collide with signal handling for that process
    causing a crash of the runtime system. This bug was
    introduced in OTP 25.3.2.8 and OTP 26.2.
  * kernel: Fix group (that is the shell) to properly handle when
    an get_until callback function returned {done, eof, []}
    when an eof was detected.
  * ssh: With this change, Curve25519 and Curve448 KEX methods
    become most preferred (related to RFC8731).
  * ssl: Legacy name handling could cause interop problems
    between TLS-1.3/1.2 client and TLS-1.2 server.
- Fix for bsc#1222591</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1722686400">- Changes for 26.2.5.2:
  * erts: When no time warp mode was enabled, a smaller Erlang
    monotonic time could be read than a previously read time, i.e.,
    breaking the monotonic property. The runtime system will abort
    when detecting an issue like this since OTP 24.3.4.17 and OTP
    25.0. Up until OTP 25 no time warp mode is the default. As of
    OTP 26 multi time warp mode is the default.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * crypto: Add warning in documentation to avoid crypto:start/0 as
    it does not work for FIPS mode. Use application:start(crypto)
    instead.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * ssl: When the default value for signature_algs is used, default
    the signature_algs_cert to the default value + rsa_pkcs1_sha1
    to allow this algorithms for certificates but not for the TLS
    protocol. This is for better interoperability. If
    signature_algs is set explicitly signature_algs_cert must also
    be set explicitly if they should be different.
- Changes for 26.2.5.1:
  * erts: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout =
    0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * erts: When a port command crashed in the inet driver during
    gen_tcp:send/2, a monitor 'DOWN' message could be left
    lingering in the caller's mailbox. This has now been fixed.
  * erts: 'DOWN' messages originating from a monitored port,
    contained the atom process instead of the atom port as the
    third element when the exit reason was not an immediate term.
  * public_key: Fix bug in dnsName constraint check, could cause
    valid cert to be considered bad during path validation.
  * diameter: Pick peer can now also handle request of type
    [#]diameter_packet{}.
  * kernel: A call to socket:[recv|recvfrom|recvmsg]/* with Timeout
    = 0 on Windows could cause a (case clause) crash if data is
    immediately available.
  * kernel: Open a disk_log file and combining head_func with
    rotate options did not work.
  * ssh: With this change, ssh client will automatically adjust
    transfer window size for commands executed remotely over SSH.
  * ssh: With this change, race condition between connection
    closing and automatic window adjustment is fixed.
  * ssl: Check for TLS-1.3 support should check minimum
    requirements.
  * ssl: If both TLS-1.3 and TLS-1.2 is supported and TLS-1.2
    negotiated convert TLS-1.3 ECDSA schemes to TLS-1.2 hash and
    signature pairs for increased interoperability.
  * ssl: TLS-1.3 negotiation now uses SNI based options correctly
    instead of ignoring them.
  * ssl: Make it easier to distinguish between a invalid signature
    and unsupported signature.
  * ssl: Enhance ALERT logs to help understand what causes the
    alert.
- Changes for 26.2.5:
  * erts: gen_sctp:send/3,4 now waits for the send to complete
    instead of returning an OS result such as {error, ewouldblock}.
  * erts: ETS functions did not properly handle keys containing
    maps, sometimes matching too many or too few objects.
  * erts: Fix CPU quota determination for cgroups. The bug was
    introduced through OTP-18999.
  * erts: Added a warning to open_port/2 regarding the BadBatBut
    attack affecting Windows.
  * dialyzer: Fixed an issue with bitstring type inference on
    segments following UTF-8/16/32 segments.
  * kernel: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * kernel: Fix calls to blocking application APIs to throw an
    exception with reason terminating if called when the system is
    terminating. This is done in order to avoid deadlocks during
    shutdown or restart.
  * stdlib: Fix shell expansion of -type a() :: $a. in the erlang
    shell.
  * stdlib: Fix the shell Job Control Mode to not crash when typing
    TAB or CTRL+R.
  * ssl: Fix certificate authorities check so that CA closest to
    peer is not lost. It could manifest itself in a failed
    connection as the client failed to realize it had a valid
    certificate chain to send to the server.
  * ssl: ssl:signature_algs/2 did not list some legacy algorithm
    schemes correctly when listing all algorithms available.
  * mnesia: Mnesia could crash during startup if del_table_copy/2
    and add_table_copy/3 was invoked when the table was loading.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1726833600">- Version 27.0:
  * Triple-Quoted Strings has been implemented as per EEP 64 to
    allow a string to encompass a complete paragraph.
  * Adjacent string literals without intervening white space is now
    a syntax error, to avoid possible confusion with triple-quoted
    strings.
  * Sigils on string literals (both ordinary and triple-quoted)
    have been implemented as per EEP 66. For example, ~"Björn" or
    ~b"Björn" are now equivalent to &lt;&lt;"Björn"/utf8&gt;&gt;.
  * The compiler will now merge consecutive updates of the same
    record.
  * Safe destructive update of tuples has been implemented in the
    compiler and runtime system. This allows the VM to update
    tuples in-place when it is safe to do so, thus improving
    performance by doing less copying but also by producing less
    garbage.
  * The maybe expression is now enabled by default, eliminating the
    need for enabling the maybe_expr feature.
  * Native coverage support has been implemented in the JIT. It
    will automatically be used by the cover tool to reduce the
    execution overhead when running cover-compiled code. There are
    also new APIs to support native coverage without using the
    cover tool.
  * The compiler will now raise a warning when updating record/map
    literals to catch a common mistake. For example, the compiler
    will now emit a warning for #r{a=1}#r{b=2}.
  * The erl command now supports the -S flag, which is similar to
    the -run flag, but with some of the rough edges filed off.
  * By default, escripts will now be compiled instead of
    interpreted. That means that the compiler application must be
    installed.
  * The default process limit has been raised to 1048576 processes.
  * The erlang:system_monitor/2 functionality is now able to
    monitor long message queues in the system.
  * The obsolete and undocumented support for opening a port to an
    external resource by passing an atom (or a string) as first
    argument to open_port(), implemented by the vanilla driver, has
    been removed. This feature has been scheduled for removal in
    OTP 27 since the release of OTP 26.
  * The pid field has been removed from erlang:fun_info/1,2.
    Multiple trace sessions are now supported.
  * There is a new module json for encoding and decoding JSON.
  * Several new functions that accept funs have been added to module timer.
  * The functions is_equal/2, map/2, and filtermap/2 have been
    added to the modules sets, ordsets, and gb_sets.
  * There are new efficient ets traversal functions with guaranteed
    atomicity. For example, ets:next/2 followed by ets:lookup/2 can
    now be replaced with ets:next_lookup/1.
  * The new function ets:update_element/4 is similar to
    ets:update_element/3, but takes a default tuple as the fourth
    argument, which will be inserted if no previous record with
    that key exists.
  * binary:replace/3,4 now supports using a fun for supplying the
    replacement binary.
  * The new function proc_lib:set_label/1 can be used to add a
    descriptive term to any process that does not have a registered
    name. The name will be shown by tools such as c:i/0 and
    observer, and it will be included in crash reports produced by
    processes using gen_server, gen_statem, gen_event, and gen_fsm.
  * Added functions to retrieve the next higher or lower
    key/element from gb_trees and gb_sets, as well as returning
    iterators that start at given keys/elements.
  * common_test: Calls to ct:capture_start/0 and ct:capture_stop/0
    are now synchronous to ensure that all output is captured.
  * common_test: The default CSS will now include a basic dark mode
    handling if it is preferred by the browser.
  * crypto: The functions crypto_dyn_iv_init/3 and
    crypto_dyn_iv_update/3 that were marked as deprecated in
    Erlang/OTP 25 have been removed.
  * dialyzer: The --gui option for Dialyzer has been removed.
  * ssl: The ssl client can negotiate and handle certificate status
    request (OCSP stapling support on the client side).
  * tools: There is a new tool tprof, which combines the
    functionality of eprof and cprof under one interface. It also
    adds heap profiling.
  * xmerl: As an alternative to xmerl_xml, a new export module
    xmerl_xml_indent that provides out-of-the box indented output
    has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1727611200">- Changes for 27.1:
  * crypto: crypto built with --enable-fips will now accept an
    OpenSSL 3 lib without fips provider as long as fips mode is not
    enabled.
  * crypto: Added a warning in the documentation to avoid calling
    crypto:start/0 as it does not work for FIPS mode. Use
    application:start(crypto) instead.
  * crypto: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * crypto: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssh: The SSh daemon started with a TCP port number argument
    will now re-try obtaining a listen socket before returning an
    error to the user.
  * ssh: Robustness has been improved by monitoring the connection
    handler process before casting the socket control notification.
  * ssl: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * ssl: All TLS-1.3 terminations are now graceful (previous TLS
    version terminations already were).
  * ssl: It is now possible to use a verification fun of arity 4,
    giving the user fun access to both encoded and decoded versions
    of the certificate. This is desirable as a workaround for
    encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * ssl: Compiler warnings for some removed functions have been
    corrected to point out the correct replacement functions.
  * ssl: Include more information in logging of SNI (Server Name
    Indication) mismatch error.
  * diameter: Function specs for the main API module has been
    updated.
  * diameter: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * diameter: diameter:stop_service/1 has been made more
    synchronous.
  * wx: Documentation has been improved.
  * public_key: For completeness handle rsa_pss implicit default
    value, although this will probably not be commonly used as it
    provides very weak security.
  * public_key: The public_key:cacerts_load() function could in
    some error cases return undefined instead of {error, Reason}.
  * public_key: Added support for DragonFly.
  * public_key: Deprecation of RSA encryption functions has been
    reverted, as there still exists legitimate use cases with other
    padding modes than PKCS-1.
  * public_key: It is now possible to use a verification fun of
    arity 4, giving the user fun access to both encoded and decoded
    versions of the certificate. This is desirable as a workaround
    for encoding errors preventing re-encoding from being reliable.
    This also saves some work load if the encoded version is
    needed.
  * snmp: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * snmp: Figures in the documentation have been improved.
  * tftp: The legacy dependency to m:error_logger has been removed.
    m:logger is now used.
  * ftp: Eliminated a race condition that sometimes resulted in
    ftp:recv_bin/2 returning ok instead of {ok, Data}.
  * odbc: Figures in the documentation have been improved.
  * compiler: Fixed a crash in an optimization pass relating to
    appending binaries.
  * compiler: Fixed a bug in the compiler's alias analysis pass
    that could make it emit unsafe code.
  * common_test: Groups with empty list specifying groups and test
    cases no longer crash execution.
  * common_test: The Common_Test documentation and type specs have
    been polished.
  * common_test: Man pages are now available for erl, erlc,
    dialyzer, and all other programs that are included in
    Erlang/OTP.
  * dialyzer: Man pages are now available for erl, erlc, dialyzer,
    and all other programs that are included in Erlang/OTP.
  * xmerl: Corrected export functions from internal structure to
    XML so xmlText items of type cdata are handled correctly. They
    were just exported as normal text instead of output in a CDATA
    section.
  * xmerl: The type spec for xmerl_sax_parser:file/2 has been
    corrected to indicate that it can return an {error, _} tuple.
  * runtime_tools: Fixed a bug where dbg sessions on remote nodes
    were terminated prematurely.
  * inets: The documentation for the m:httpd module has been
    improved, along with correction of headings and types.
  * inets: Userinfo is now properly percent-decoded before usage in
    headers.
  * stdlib: The help printout for incorrect t:io:format/0 strings
    now handles the k modifier correctly.
  * stdlib: Fixed a bug that caused the shell completion to crash
    when keyword and tuple appeared on the same line.
  * stdlib: Due to PR-7419/OTP-18671, the cached internal value of
    the callback_mode started leaking out to logger reports, which
    could cause logger handlers to crash.  This has now been fixed
    to show the value that was set, as before caching.
  * stdlib: Fixed an emulator crash relating to compressed ETS
    tables.
  * stdlib: The error description for maps:update/3 will no longer
    insist that the third argument is not a map when a key could
    not be found
  * stdlib: Multiple issues have been corrected in the markdown
    parser that creates documentation for the shell.
  * stdlib: Fixed category for some codepoint ranges in
    unicode_util.
  * stdlib: Fixed m:argparse to print sub-commands help when
    available.
  * stdlib: Class annotation to HTML from fenced blocks have been
    added.
  * stdlib: Added JSON formatting functions for indented output.
  * stdlib: Improved illegal pattern error for accidental map
    associations.
  * stdlib: Progress reports for a dynamically started supervisor
    will now be logged at debug level.
  * stdlib: The m:zip module has been updated with support for:
  * edoc: Broken links in release notes have been mended.
  * tools: m:tprof no longer crashes when using
    pause/restart/continue when profiling all modules.
  * tools: On systems supporting native coverage, calls to m:cover
    could hang or crash if cover-compiled module had been reloaded
    from outside cover. This has been corrected so that cover now
    recovers from the error and and sends a report to the logger
    about the failure to retrieve coverage information.
  * tools: Figures in the documentation have been improved.
  * erts: The erl -man example has been corrected to not consider
    values set in ERL_ZFLAGS and stop parsing arguments when a --
    is encountered.
  * erts: Compiler warnings for  Windows I/O back-end have been
    silenced.
  * erts: Bugs related to return_to trace have been fixed. It did
    not work for more than once trace session and it did sometimes
    not trigger for exceptions.
  * erts: Potential deadlocks while writing a crash dump have been
    eliminated.
  * erts: When loading a damaged or too old BEAM file, the runtime
    system could crash.
  * erts: A scheduler thread could get stuck when deleting a memory
    allocator carrier when adjacent carriers were deleted and/or
    inserted simultaneously by other schedulers. This in turn could
    cause the other schedulers to get stuck as well.
  * erts: Statistics for number of carriers in a shared pool after
    calling instrument:allocations or instrument:carriers are now
    correct. Also, a potential bug in carrier block scanning was
    eliminated.
  * erts: A race in the kTLS flavour of SSL distribution has been
    fixed so that inet_drv.c doesn't read ahead too much data,
    which could cause the kTLS encryption to be activated too late
    when some encrypted data had already been read into the
    inet_drv.c buffer as unencrypted.
  * erts: Fixed an emulator crash relating to compressed ETS
    tables.
  * erts: A function (encode_sockaddr) was called with superfluous
    argument, on Windows, in the net nif.
  * erts: Fixed a crash that could happen on reallocation failure.
  * erts: Man pages are now available for erl, erlc, dialyzer, and
    all other programs that are included in Erlang/OTP.
  * erts: A previous correction in the Erlang/OTP 27.0.1 emergency
    patch had the unfortunate side effect of sometimes causing an
    unnecessary fullsweep (major) garbage collection instead of a
    generation (minor) garbage collection. This has been corrected.
  * erts: Fixed trace matchspec functions trace and enable_trace to
    use the session tracer when enabling trace flags on untraced
    processes.
  * erts: Fixed a typo in the type spec for
    t:erlang:garbage_collection_defaults/0.
  * erts: Corrected socket:ioctl for genaddr (SIOCGENADDR).
  * erts: The support for Transparent Huge Pages has been disabled
    on non-amd64 Linux systems.
  * erts: Fixed a race condition on Windows when upgrading from
  - noshell to a shell that would cause Erlang to crash with the
    error:
  * erts: Added functions getservbyname and getservbyport to the
    net module.
  * erts: Introduced enet | esock variants of m:inet functions,
    either when called with sockets, with explicit inet_backend
    config or with the e inet_backend kernel config option.
  * erts: Optimize process and port creation when su